From bbd830d5347e4c42b5230210c7cbd8970dcca6e4 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 24 Jul 2024 16:07:26 +0000
Subject: [PATCH 001/887] Update submodule to latest master (c7ea2019):
 cmd/compile: fix typo in comment

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f0de94ff127..c7ea20195a3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f0de94ff127db9b53f3f5877088d28afe1a85692
+Subproject commit c7ea20195a3415668047eebdc488a4af1f629f04

From 65a8d9e12558b0365e02cd87b002c1eed8d5fc3a Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Thu, 25 Jul 2024 10:39:46 -0700
Subject: [PATCH 002/887] Fix patch conflicts: adjacent edits

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 30 +++++-----
 patches/0005-Add-CNG-crypto-backend.patch     | 56 +++++++++----------
 patches/0006-Vendor-crypto-backends.patch     |  6 +-
 3 files changed, 46 insertions(+), 46 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 6c37a3da0cb..e97bf99ff3f 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -58,10 +58,10 @@ index f0e3575637c62a..0e9aceeb832d3b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d7cbadf7b17aef..61685c5359bfde 100644
+index 0ffcabe4164af6..056f3ea5ae9beb 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -1238,12 +1238,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1225,12 +1225,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -108,7 +108,7 @@ index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 755c889585e729..bcb591a380b74c 100644
+index d66027387b97f8..8e4dfab49f6b6b 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1162,6 +1162,7 @@ var hostobj []Hostobj
@@ -714,29 +714,29 @@ index c83a7272c9f01f..a0548a7f9179c5 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index b38dee7e6ddc28..097f35ca01aa5b 100644
+index d7a4ef150410e3..c842df62ecee5b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
- go 1.23
+ go 1.24
  
  require (
 +	github.com/golang-fips/openssl/v2 v2.0.3
- 	golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a
- 	golang.org/x/net v0.25.1-0.20240603202750-6249541f2a6c
+ 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
+ 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index c5eab7d4b2f93b..fac8a0626146bc 100644
+index 8ff5ecd640f084..138066f5f84b68 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
 +github.com/golang-fips/openssl/v2 v2.0.3 h1:9+J2R0BQio6Jz8+dPZf/0ylISByl0gZWjTEKm+J+y7Y=
 +github.com/golang-fips/openssl/v2 v2.0.3/go.mod h1:7tuBqX2Zov8Yq5mJ2yzlKhpnxOnWyEzi38AzeWRuQdg=
- golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a h1:37MIv+iGfwMYzWJECGyrPCtd5nuqcciRUeJfkNCkCf0=
- golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
- golang.org/x/net v0.25.1-0.20240603202750-6249541f2a6c h1:CR/7/SLUhIJw6g675eeoDiwggElO2MV9rGkNYjqi8GM=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
+ golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 68d3b0578d18b1..15f4bb124b8528 100644
+index 26301398c5820c..26570cdadda16d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -459,6 +459,8 @@ var depsRules = `
@@ -756,7 +756,7 @@ index 68d3b0578d18b1..15f4bb124b8528 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -793,7 +796,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -796,7 +799,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -765,7 +765,7 @@ index 68d3b0578d18b1..15f4bb124b8528 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -803,7 +806,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -806,7 +809,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -829,7 +829,7 @@ index 777337d92d3c72..ef00871d619651 100644
  	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
  	// which one is appropriate on the target GOOS.
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index dbe59fea119e70..c3df1f9ac49b82 100644
+index a0bb89e203ddf1..2b4a2680dcdd7e 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 2d3f121539a..5fed3d54c5a 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -559,10 +559,10 @@ index f5b4827c688f3b..12df96069f6b83 100644
  // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
  // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index f9d1037c9b82b9..6b91d4388b73fe 100644
+index 7031d0abdaa13b..ada2d5be13f986 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
-@@ -11,6 +11,7 @@ import (
+@@ -12,6 +12,7 @@ import (
  	"encoding"
  	"fmt"
  	"hash"
@@ -570,7 +570,7 @@ index f9d1037c9b82b9..6b91d4388b73fe 100644
  	"io"
  	"testing"
  	"unsafe"
-@@ -88,6 +89,9 @@ func TestGolden(t *testing.T) {
+@@ -89,6 +90,9 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -580,7 +580,7 @@ index f9d1037c9b82b9..6b91d4388b73fe 100644
  	for _, g := range golden {
  		h := New()
  		h2 := New()
-@@ -195,6 +199,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -196,6 +200,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -831,10 +831,10 @@ index dbcc1bec58bd46..b1e9d8e94c2c9e 100644
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
  	if err == ErrMessageTooLong {
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index bc169888786321..e0d6f4c5040d91 100644
+index d0a9b1b46727fa..10ea3e8eeb6efd 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
-@@ -13,6 +13,7 @@ import (
+@@ -14,6 +14,7 @@ import (
  	"encoding"
  	"fmt"
  	"hash"
@@ -842,7 +842,7 @@ index bc169888786321..e0d6f4c5040d91 100644
  	"io"
  	"testing"
  )
-@@ -96,6 +97,9 @@ func TestGolden(t *testing.T) {
+@@ -97,6 +98,9 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -852,7 +852,7 @@ index bc169888786321..e0d6f4c5040d91 100644
  	h := New()
  	h2 := New()
  	for _, g := range golden {
-@@ -197,6 +201,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -198,6 +202,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -907,10 +907,10 @@ index 02c597d785ef68..268f1fdd49ecd3 100644
  	}
  	var d digest
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 7437655badee23..95c8688904c088 100644
+index 755ed4d238ee5a..b7212e3f3c2175 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -13,6 +13,7 @@ import (
+@@ -14,6 +14,7 @@ import (
  	"encoding"
  	"fmt"
  	"hash"
@@ -918,7 +918,7 @@ index 7437655badee23..95c8688904c088 100644
  	"io"
  	"testing"
  )
-@@ -139,6 +140,9 @@ func TestGolden(t *testing.T) {
+@@ -140,6 +141,9 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -928,7 +928,7 @@ index 7437655badee23..95c8688904c088 100644
  	tests := []struct {
  		name    string
  		newHash func() hash.Hash
-@@ -184,6 +188,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -185,6 +189,9 @@ func TestGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalTypeMismatch(t *testing.T) {
@@ -938,7 +938,7 @@ index 7437655badee23..95c8688904c088 100644
  	h1 := New()
  	h2 := New224()
  
-@@ -273,6 +280,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -274,6 +281,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -949,10 +949,10 @@ index 7437655badee23..95c8688904c088 100644
  
  		h := New()
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 2fef7ddae07480..979e4c69ab710c 100644
+index b63e3af59f3829..121cf04e54cd87 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
-@@ -14,6 +14,7 @@ import (
+@@ -15,6 +15,7 @@ import (
  	"encoding/hex"
  	"fmt"
  	"hash"
@@ -960,7 +960,7 @@ index 2fef7ddae07480..979e4c69ab710c 100644
  	"io"
  	"testing"
  )
-@@ -719,6 +720,9 @@ func TestGolden(t *testing.T) {
+@@ -720,6 +721,9 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -970,7 +970,7 @@ index 2fef7ddae07480..979e4c69ab710c 100644
  	tests := []struct {
  		name    string
  		newHash func() hash.Hash
-@@ -766,6 +770,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -767,6 +771,9 @@ func TestGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalMismatch(t *testing.T) {
@@ -980,7 +980,7 @@ index 2fef7ddae07480..979e4c69ab710c 100644
  	h := []func() hash.Hash{
  		New,
  		New384,
-@@ -872,6 +879,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -873,6 +880,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -1043,7 +1043,7 @@ index 9c1d3d279c472f..0ca7a863b73690 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index f24c2671acd435..f88fcad4e78f0d 100644
+index 503a732e05765e..db8919aaf9cbdd 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -14,6 +14,7 @@ import (
@@ -1123,19 +1123,19 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 097f35ca01aa5b..fe0aa0cc92b35b 100644
+index c842df62ecee5b..1e6b6b1324624a 100644
 --- a/src/go.mod
 +++ b/src/go.mod
-@@ -4,6 +4,7 @@ go 1.23
+@@ -4,6 +4,7 @@ go 1.24
  
  require (
  	github.com/golang-fips/openssl/v2 v2.0.3
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103
- 	golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a
- 	golang.org/x/net v0.25.1-0.20240603202750-6249541f2a6c
+ 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
+ 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index fac8a0626146bc..43ae325dc538d2 100644
+index 138066f5f84b68..31b48ffe22c863 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
@@ -1143,11 +1143,11 @@ index fac8a0626146bc..43ae325dc538d2 100644
  github.com/golang-fips/openssl/v2 v2.0.3/go.mod h1:7tuBqX2Zov8Yq5mJ2yzlKhpnxOnWyEzi38AzeWRuQdg=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103 h1:KQsPPal3pKvKzAPTaR7sEriaqrHmRWw0dWG/7E5FNNk=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103/go.mod h1:fveERXKbeK+XLmOyU24caKnIT/S5nniAX9XCRHfnrM4=
- golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a h1:37MIv+iGfwMYzWJECGyrPCtd5nuqcciRUeJfkNCkCf0=
- golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
- golang.org/x/net v0.25.1-0.20240603202750-6249541f2a6c h1:CR/7/SLUhIJw6g675eeoDiwggElO2MV9rGkNYjqi8GM=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
+ golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 15f4bb124b8528..82b38763d02d6c 100644
+index 26570cdadda16d..b48078b3866fa1 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -459,6 +459,10 @@ var depsRules = `
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index f4b8a4a02e4..d3deddb5573 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -9485,7 +9485,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 2868749b894fb2..5b911da9df470b 100644
+index 7562f74b39ada6..95f7d5ee47b3c1 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -9500,6 +9500,6 @@ index 2868749b894fb2..5b911da9df470b 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.23.1-0.20240603234054-0b431c7de36a
- ## explicit; go 1.18
+ # golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
+ ## explicit; go 1.20
  golang.org/x/crypto/chacha20

From c6391306f0bd65bf8acedafc6b1cf7e977d0b165 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 29 Jul 2024 16:07:22 +0000
Subject: [PATCH 003/887] Update submodule to latest master (6b2ffc72): cmd:
 extract cmd/go's cfg.LookPath into separate pathcache package

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c7ea20195a3..6b2ffc72b67 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c7ea20195a3415668047eebdc488a4af1f629f04
+Subproject commit 6b2ffc72b67713de4f08915937a64392aa4dbff0

From e67f8f4bd6d0a8f34a75e11f0ee41a1e79ddc16f Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Fri, 2 Aug 2024 15:57:15 -0700
Subject: [PATCH 004/887] Merge _core into _util, adding dependency tests

---
 .github/dependabot.yml                        |  5 -
 eng/_core/README.md                           | 30 ------
 eng/_core/go.mod                              |  7 --
 eng/_core/patch/patch.go                      | 76 --------------
 eng/_core/submodule/submodule.go              | 98 -------------------
 eng/_util/README.md                           | 41 +++++++-
 eng/{_core => _util}/buildutil/buildutil.go   |  0
 eng/{_core => _util}/cmd/build/build.go       | 16 +--
 eng/{_core => _util}/cmd/cmdscan/cmdscan.go   |  0
 .../createbuildassetjson/nonminimaldeps.go    |  9 ++
 eng/_util/cmd/run-builder/nonminimaldeps.go   |  9 ++
 eng/_util/cmd/run-builder/run-builder.go      |  2 +-
 eng/_util/cmd/selftest/selftest.go            | 52 ++++++++++
 .../submodule-refresh/submodule-refresh.go    | 14 ++-
 .../cmd/updatelinktable/updatelinktable.go    |  2 +-
 .../cmd/write-checksum/write-checksum.go      |  0
 eng/_util/go.mod                              |  3 -
 .../internal/depsinitpanic/depsinitpanic.go   | 14 +++
 .../supportdata/supportdata.go                |  0
 eng/_util/testutil/dependency_test.go         | 77 +++++++++++++++
 eng/pipeline/stages/run-stage.yml             | 12 +++
 eng/run.ps1                                   | 21 ++--
 22 files changed, 241 insertions(+), 247 deletions(-)
 delete mode 100644 eng/_core/README.md
 delete mode 100644 eng/_core/go.mod
 delete mode 100644 eng/_core/patch/patch.go
 delete mode 100644 eng/_core/submodule/submodule.go
 rename eng/{_core => _util}/buildutil/buildutil.go (100%)
 rename eng/{_core => _util}/cmd/build/build.go (97%)
 rename eng/{_core => _util}/cmd/cmdscan/cmdscan.go (100%)
 create mode 100644 eng/_util/cmd/createbuildassetjson/nonminimaldeps.go
 create mode 100644 eng/_util/cmd/run-builder/nonminimaldeps.go
 create mode 100644 eng/_util/cmd/selftest/selftest.go
 rename eng/{_core => _util}/cmd/submodule-refresh/submodule-refresh.go (82%)
 rename eng/{_core => _util}/cmd/write-checksum/write-checksum.go (100%)
 create mode 100644 eng/_util/internal/depsinitpanic/depsinitpanic.go
 rename eng/{_core => _util}/supportdata/supportdata.go (100%)
 create mode 100644 eng/_util/testutil/dependency_test.go

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 3979801675d..40eee4603e3 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,11 +9,6 @@ updates:
   schedule:
     interval: daily
   open-pull-requests-limit: 10
-- package-ecosystem: gomod
-  directory: "eng/_core"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
 - package-ecosystem: gomod
   directory: "eng/_util"
   schedule:
diff --git a/eng/_core/README.md b/eng/_core/README.md
deleted file mode 100644
index 00e5a681990..00000000000
--- a/eng/_core/README.md
+++ /dev/null
@@ -1,30 +0,0 @@
-## `github.com/microsoft/go/_core`
-
-This module is a set of utilities Microsoft uses to build Go in Azure DevOps and
-maintain this repository. Run `eng/run.ps1 build -h` to list available build
-options, or `eng/run.ps1` to list all commands in this module.
-
-Unlike `_util`, the `_core` module should have zero external dependencies and
-only requires a stage 0 Go toolset to build. The commands in this module are
-used to produce the signed Microsoft binaries.
-
-### Support for gotestsum wrapping
-The `_util` module implements a gotestsum wrapper around `_core`'s `build`
-command. This requires some features in `_core` that accommodate gotestsum but
-don't make sense as standalone features a dev would use. For example, JSON test
-output and stderr redirection to stdout.
-
-The high-level execution flow looks roughly like this when running in CI:
-
-* `eng/pipeline/jobs/run-stage.yml`  
-  runs:
-* `eng/run.ps1 run-builder -test -builder linux-amd64-test -junitfile [...]`  
-  which runs the Go function:
-* `gotestsum.Run(... eng/run.ps1 build -test -json ...)`  
-  which runs and captures the output of:
-* `eng/run.ps1 build -test -json`  
-  which runs [`cmd/build/build.go`](cmd/build/build.go) in this module.
-
-This is not currently used in our CI because this process seems to cut off
-some test output:
-[microsoft/go#1114](https://github.com/microsoft/go/issues/1114).
diff --git a/eng/_core/go.mod b/eng/_core/go.mod
deleted file mode 100644
index d1de3bc0886..00000000000
--- a/eng/_core/go.mod
+++ /dev/null
@@ -1,7 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-module github.com/microsoft/go/_core
-
-go 1.21
diff --git a/eng/_core/patch/patch.go b/eng/_core/patch/patch.go
deleted file mode 100644
index 88e25d8e4db..00000000000
--- a/eng/_core/patch/patch.go
+++ /dev/null
@@ -1,76 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-package patch
-
-import (
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-)
-
-type ApplyMode int
-
-const (
-	// ApplyModeCommits applies patches as commits. This is useful for developing changes to the
-	// patches, because the commits can be automatically extracted back into patch files.
-	ApplyModeCommits ApplyMode = iota
-	// ApplyModeIndex applies patches as changes to the Git index and working tree. This means
-	// further changes to the Go source code will show up as unstaged changes, so if any intentional
-	// changes are performed in this state, they can be differentiated from the patch changes.
-	ApplyModeIndex
-)
-
-// Apply runs a Git command to apply the patches in the repository onto the submodule. The exact Git
-// command used ("am" or "apply") depends on the patch mode.
-func Apply(rootDir string, mode ApplyMode) error {
-	goDir := filepath.Join(rootDir, "go")
-	patchDir := filepath.Join(rootDir, "patches")
-
-	cmd := exec.Command("git")
-	cmd.Stdout = os.Stdout
-	cmd.Stderr = os.Stderr
-	cmd.Dir = goDir
-
-	switch mode {
-	case ApplyModeCommits:
-		cmd.Args = append(cmd.Args, "am")
-	case ApplyModeIndex:
-		cmd.Args = append(cmd.Args, "apply", "--index")
-	default:
-		return fmt.Errorf("invalid patch mode '%v'", mode)
-	}
-
-	// Trailing whitespace may be present in the patch files. Don't emit warnings for it here. These
-	// warnings should be avoided when authoring each patch file. If we made it to this point, it's
-	// too late to cause noisy warnings because of them.
-	cmd.Args = append(cmd.Args, "--whitespace=nowarn")
-
-	// ReadDir returns alphabetical order for patches: we depend on it for the patch apply order.
-	entries, err := os.ReadDir(patchDir)
-	if err != nil {
-		return err
-	}
-
-	for _, entry := range entries {
-		if entry.IsDir() {
-			continue
-		}
-		if filepath.Ext(entry.Name()) != ".patch" {
-			continue
-		}
-		cmd.Args = append(cmd.Args, filepath.Join(patchDir, entry.Name()))
-	}
-
-	if err := runCmd(cmd); err != nil {
-		return err
-	}
-	return nil
-}
-
-func runCmd(cmd *exec.Cmd) error {
-	fmt.Printf("---- Running command: %v\n", cmd.Args)
-	return cmd.Run()
-}
diff --git a/eng/_core/submodule/submodule.go b/eng/_core/submodule/submodule.go
deleted file mode 100644
index 6fb4d54bb03..00000000000
--- a/eng/_core/submodule/submodule.go
+++ /dev/null
@@ -1,98 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Use of this source code is governed by a BSD-style
-// license that can be found in the LICENSE file.
-
-package submodule
-
-import (
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-)
-
-// Init initializes and updates the submodule, but does not clean it. This func offers more options
-// for initialization than Reset. If origin is defined, fetch the submodule from there instead of
-// the default defined in '.gitmodules'. If fetchBearerToken is nonempty, use it as a bearer token
-// during the fetch. If shallow is true, clone the submodule with depth 1.
-func Init(rootDir, origin, fetchBearerToken string, shallow bool) error {
-	// Update the submodule commit, and initialize if it hasn't been done already.
-	command := []string{"git"}
-	if origin != "" {
-		command = append(command, "-c", "submodule.go.url="+origin)
-	}
-	if fetchBearerToken != "" {
-		command = append(command, "-c", "http.extraheader=AUTHORIZATION: bearer "+fetchBearerToken)
-	}
-	command = append(command, "submodule", "update", "--init")
-	if shallow {
-		command = append(command, "--depth", "1")
-	}
-
-	if err := run(rootDir, command...); err != nil {
-		return err
-	}
-	return nil
-}
-
-// Reset updates the submodule (with '--init'), resets all changes, and cleans all untracked files.
-func Reset(rootDir string) error {
-	goDir := filepath.Join(rootDir, "go")
-
-	// Update the submodule commit, and initialize if it hasn't been done already.
-	if err := run(rootDir, "git", "submodule", "update", "--init"); err != nil {
-		return err
-	}
-
-	// Find toplevel directories (Git working tree roots) for the outer repo and what we expect to
-	// be the Go submodule. If the toplevel directory is the same for both, make sure not to clean!
-	// The submodule likely wasn't set up properly, and cleaning could result in unexpectedly losing
-	// work in the outer repo when the command spills over.
-	rootToplevel, err := getToplevel(rootDir)
-	if err != nil {
-		return err
-	}
-	goToplevel, err := getToplevel(goDir)
-	if err != nil {
-		return err
-	}
-
-	if rootToplevel == goToplevel {
-		return fmt.Errorf("go submodule (%v) toplevel is the same as root (%v) toplevel: %v", goDir, rootDir, goToplevel)
-	}
-
-	// Reset the index and working directory. This doesn't clean up new untracked files.
-	if err := run(goDir, "git", "reset", "--hard"); err != nil {
-		return err
-	}
-	// Delete untracked files detected by Git. Deliberately leave files that are ignored in
-	// '.gitignore': these files shouldn't interfere with the build process and could be used for
-	// incremental builds.
-	if err := run(goDir, "git", "clean", "-df"); err != nil {
-		return err
-	}
-	return nil
-}
-
-func getToplevel(dir string) (string, error) {
-	c := exec.Command("git", "rev-parse", "--show-toplevel")
-	c.Dir = dir
-	out, err := c.CombinedOutput()
-	if err != nil {
-		return "", err
-	}
-	return string(out), nil
-}
-
-func run(dir string, args ...string) error {
-	c := exec.Command(args[0], args[1:]...)
-	c.Stdout = os.Stdout
-	c.Stderr = os.Stderr
-	c.Dir = dir
-	return runCmd(c)
-}
-
-func runCmd(cmd *exec.Cmd) error {
-	fmt.Printf("---- Running command: %v\n", cmd.Args)
-	return cmd.Run()
-}
diff --git a/eng/_util/README.md b/eng/_util/README.md
index 870e9b96e02..6bd3f0c301e 100644
--- a/eng/_util/README.md
+++ b/eng/_util/README.md
@@ -1,9 +1,40 @@
 ## `github.com/microsoft/go/_util`
 
 This module is a set of utilities Microsoft uses to build Go in Azure DevOps and
-maintain this repository. Run `eng/run.ps1` to list the available commands and
-see instructions on how to use them.
+maintain this repository. Run `eng/run.ps1 build -h` to list available build
+options, or `eng/run.ps1` to list all commands in this module.
 
-The `_util` module requires the `gotestsum` library and doesn't vendor it.
-`_util` is not strictly necessary to build Go, so it's ok if its dependencies
-are downloaded when needed. CI avoids uses the `_util` module when possible.
+### Minimal dependencies
+Some commands in this module use minimal external dependencies. This reduces the
+dependencies used to produce the signed Microsoft binaries.
+
+Commands that use more than the minimal external dependencies will panic upon
+init if `MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS` is set to `1`. This makes it
+possible to test our pipelines to make sure they only use the expected commands.
+
+The minimal dependencies are themselves tested by
+`TestMinimalCommandDependencies` in `testutil`. It uses `go list` to ensure that
+all commands that use more than the minimal set of dependencies include the
+conditional panic upon init.
+
+### Support for gotestsum wrapping
+The `run-builder` command implements a gotestsum wrapper around the `build`
+command. This isn't implemented in `build` itself to keep dependencies for the
+signed build low. There are some features in the build command that accommodate
+gotestsum but don't make sense as standalone features a dev would use. For
+example, JSON test output and stderr redirection to stdout.
+
+The high-level execution flow looks roughly like this when running in CI:
+
+* `eng/pipeline/jobs/run-stage.yml`  
+  runs:
+* `eng/run.ps1 run-builder -test -builder linux-amd64-test -junitfile [...]`  
+  which runs the Go function:
+* `gotestsum.Run(... eng/run.ps1 build -test -json ...)`  
+  which runs and captures the output of:
+* `eng/run.ps1 build -test -json`  
+  which runs [`cmd/build/build.go`](cmd/build/build.go) in this module.
+
+> [!NOTE]
+> This support is not currently used in our CI because this process seems to cut off some test output:
+> [microsoft/go#1114](https://github.com/microsoft/go/issues/1114).
diff --git a/eng/_core/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
similarity index 100%
rename from eng/_core/buildutil/buildutil.go
rename to eng/_util/buildutil/buildutil.go
diff --git a/eng/_core/cmd/build/build.go b/eng/_util/cmd/build/build.go
similarity index 97%
rename from eng/_core/cmd/build/build.go
rename to eng/_util/cmd/build/build.go
index a316f6dd04d..7af05339872 100644
--- a/eng/_core/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -15,9 +15,9 @@ import (
 	"runtime"
 	"strings"
 
-	"github.com/microsoft/go/_core/buildutil"
-	"github.com/microsoft/go/_core/patch"
-	"github.com/microsoft/go/_core/submodule"
+	"github.com/microsoft/go-infra/patch"
+	"github.com/microsoft/go-infra/submodule"
+	"github.com/microsoft/go/_util/buildutil"
 )
 
 const description = `
@@ -112,10 +112,14 @@ func build(o *options) error {
 	}
 
 	if o.Refresh {
-		if err := submodule.Reset(rootDir); err != nil {
+		config, err := patch.FindAncestorConfig(rootDir)
+		if err != nil {
 			return err
 		}
-		if err := patch.Apply(rootDir, patch.ApplyModeIndex); err != nil {
+		if err := submodule.Reset(rootDir, filepath.Join(config.RootDir, config.SubmoduleDir), true); err != nil {
+			return err
+		}
+		if err := patch.Apply(config, patch.ApplyModeIndex); err != nil {
 			return err
 		}
 	}
@@ -224,7 +228,7 @@ func build(o *options) error {
 		// For example, if we're running in CI, gotestsum may be capturing our output to report in a
 		// JUnit file. If gotestsum detects output in stderr, it prints it in an error message. This
 		// error message stands out, and could mislead someone trying to diagnose a failed test run.
-		// Redirecting all stderr output avoids this scenario. (See /eng/_core/README.md for more
+		// Redirecting all stderr output avoids this scenario. (See /eng/_util/README.md for more
 		// info on why we may be wrapped by gotestsum.)
 		//
 		// An example of benign stderr output is when the tests check for machine capabilities. A
diff --git a/eng/_core/cmd/cmdscan/cmdscan.go b/eng/_util/cmd/cmdscan/cmdscan.go
similarity index 100%
rename from eng/_core/cmd/cmdscan/cmdscan.go
rename to eng/_util/cmd/cmdscan/cmdscan.go
diff --git a/eng/_util/cmd/createbuildassetjson/nonminimaldeps.go b/eng/_util/cmd/createbuildassetjson/nonminimaldeps.go
new file mode 100644
index 00000000000..dd9d230013f
--- /dev/null
+++ b/eng/_util/cmd/createbuildassetjson/nonminimaldeps.go
@@ -0,0 +1,9 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+// This command uses non-minimal dependencies, so ensure it can't be used while in minimal mode.
+
+import _ "github.com/microsoft/go/_util/internal/depsinitpanic"
diff --git a/eng/_util/cmd/run-builder/nonminimaldeps.go b/eng/_util/cmd/run-builder/nonminimaldeps.go
new file mode 100644
index 00000000000..dd9d230013f
--- /dev/null
+++ b/eng/_util/cmd/run-builder/nonminimaldeps.go
@@ -0,0 +1,9 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+// This command uses non-minimal dependencies, so ensure it can't be used while in minimal mode.
+
+import _ "github.com/microsoft/go/_util/internal/depsinitpanic"
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index b3187737242..a256693ae5d 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -13,7 +13,7 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/microsoft/go/_core/buildutil"
+	"github.com/microsoft/go/_util/buildutil"
 	gotestsumcmd "gotest.tools/gotestsum/cmd"
 )
 
diff --git a/eng/_util/cmd/selftest/selftest.go b/eng/_util/cmd/selftest/selftest.go
new file mode 100644
index 00000000000..dad8a235c4b
--- /dev/null
+++ b/eng/_util/cmd/selftest/selftest.go
@@ -0,0 +1,52 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"flag"
+	"fmt"
+	"os"
+	"path/filepath"
+
+	"github.com/microsoft/go-infra/executil"
+)
+
+const description = `
+This command runs the _util self-tests using the stage 0 Go toolchain.
+`
+
+func main() {
+	var help = flag.Bool("h", false, "Print this help message.")
+
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage of selftest:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description)
+	}
+
+	flag.Parse()
+	if *help {
+		flag.Usage()
+		return
+	}
+
+	if err := run(); err != nil {
+		fmt.Fprintf(os.Stderr, "Error: %v\n", err)
+		os.Exit(1)
+	}
+}
+
+func run() error {
+	stage0Goroot := os.Getenv("STAGE_0_GOROOT")
+	if stage0Goroot == "" {
+		return fmt.Errorf("STAGE_0_GOROOT not set")
+	}
+
+	return executil.Run(executil.Dir(
+		filepath.Join("eng", "_util"),
+		filepath.Join(stage0Goroot, "bin", "go"),
+		"test", "./...",
+	))
+}
diff --git a/eng/_core/cmd/submodule-refresh/submodule-refresh.go b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
similarity index 82%
rename from eng/_core/cmd/submodule-refresh/submodule-refresh.go
rename to eng/_util/cmd/submodule-refresh/submodule-refresh.go
index 9566fb11511..e7902442346 100644
--- a/eng/_core/cmd/submodule-refresh/submodule-refresh.go
+++ b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
@@ -8,9 +8,10 @@ import (
 	"flag"
 	"fmt"
 	"os"
+	"path/filepath"
 
-	"github.com/microsoft/go/_core/patch"
-	"github.com/microsoft/go/_core/submodule"
+	"github.com/microsoft/go-infra/patch"
+	"github.com/microsoft/go-infra/submodule"
 )
 
 const description = `
@@ -54,7 +55,12 @@ func refresh(rootDir string) error {
 		return err
 	}
 
-	if err := submodule.Reset(rootDir); err != nil {
+	config, err := patch.FindAncestorConfig(rootDir)
+	if err != nil {
+		return err
+	}
+
+	if err := submodule.Reset(rootDir, filepath.Join(config.RootDir, config.SubmoduleDir), true); err != nil {
 		return err
 	}
 
@@ -67,7 +73,7 @@ func refresh(rootDir string) error {
 		mode = patch.ApplyModeCommits
 	}
 
-	if err := patch.Apply(rootDir, mode); err != nil {
+	if err := patch.Apply(config, mode); err != nil {
 		return err
 	}
 	return nil
diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index d6182800cb2..3dd0820f029 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -14,7 +14,7 @@ import (
 	"sort"
 	"strings"
 
-	"github.com/microsoft/go/_core/supportdata"
+	"github.com/microsoft/go/_util/supportdata"
 )
 
 var description = `
diff --git a/eng/_core/cmd/write-checksum/write-checksum.go b/eng/_util/cmd/write-checksum/write-checksum.go
similarity index 100%
rename from eng/_core/cmd/write-checksum/write-checksum.go
rename to eng/_util/cmd/write-checksum/write-checksum.go
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 9fc9a55030f..a82c44f6020 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,6 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.3
-	github.com/microsoft/go/_core v0.0.0
 	golang.org/x/sys v0.22.0
 	gotest.tools/gotestsum v1.12.0
 )
@@ -27,5 +26,3 @@ require (
 	golang.org/x/term v0.20.0 // indirect
 	golang.org/x/text v0.16.0 // indirect
 )
-
-replace github.com/microsoft/go/_core => ../_core
diff --git a/eng/_util/internal/depsinitpanic/depsinitpanic.go b/eng/_util/internal/depsinitpanic/depsinitpanic.go
new file mode 100644
index 00000000000..7414968015e
--- /dev/null
+++ b/eng/_util/internal/depsinitpanic/depsinitpanic.go
@@ -0,0 +1,14 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package depsinitpanic
+
+import "os"
+
+func init() {
+	const v = "MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS"
+	if os.Getenv(v) == "1" {
+		panic("This command may use more than minimal deps and can't be used while " + v + " is 1")
+	}
+}
diff --git a/eng/_core/supportdata/supportdata.go b/eng/_util/supportdata/supportdata.go
similarity index 100%
rename from eng/_core/supportdata/supportdata.go
rename to eng/_util/supportdata/supportdata.go
diff --git a/eng/_util/testutil/dependency_test.go b/eng/_util/testutil/dependency_test.go
new file mode 100644
index 00000000000..d989b1ffc4d
--- /dev/null
+++ b/eng/_util/testutil/dependency_test.go
@@ -0,0 +1,77 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package testutil
+
+import (
+	"errors"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+const nonMinimalDepsFilename = "nonminimaldeps.go"
+
+func TestMinimalCommandDependencies(t *testing.T) {
+	cmdList := combinedOutput(t, exec.Command("go", "list", "../cmd/..."))
+	cmdPackages := strings.Fields(cmdList)
+	if len(cmdPackages) == 0 {
+		t.Fatalf("no commands found")
+	}
+
+	stdPackages := combinedOutput(t, exec.Command("go", "list", "std"))
+	stdPackageMap := make(map[string]struct{})
+	for _, stdPackage := range strings.Fields(stdPackages) {
+		stdPackageMap[stdPackage] = struct{}{}
+	}
+
+	for _, cmdPackage := range cmdPackages {
+		cmdPackage := cmdPackage
+		localPackage := strings.TrimPrefix(cmdPackage, "github.com/microsoft/go/_util/")
+
+		t.Run(localPackage, func(t *testing.T) {
+			t.Parallel()
+
+			if _, err := os.Stat(filepath.Join("..", localPackage, nonMinimalDepsFilename)); err != nil {
+				if errors.Is(err, os.ErrNotExist) {
+					// This package should have minimal deps. We need to check.
+				} else {
+					t.Fatalf("Failed to check whether to expect minimal deps for %q: %v", cmdPackage, err)
+				}
+			} else {
+				t.Logf("Skipping scan of %q (known to have non-minimal deps)", cmdPackage)
+				return
+			}
+
+			depsString := combinedOutput(t, exec.Command("go", "list", "-f", `{{ join .Deps " " }}`, cmdPackage))
+
+			for _, dep := range strings.Fields(depsString) {
+				// Anything in the standard library is ok. Note: this uses the running version of
+				// Go, so introducing super new dependencies might seem to succeed locally with a
+				// new Go but fail in CI.
+				if _, ok := stdPackageMap[dep]; ok {
+					continue
+				}
+				// Allow some packages even in minimal mode.
+				if strings.HasPrefix(dep, "github.com/microsoft/go/_util/") ||
+					strings.HasPrefix(dep, "github.com/microsoft/go-infra/") ||
+					strings.HasPrefix(dep, "golang.org/x/") {
+
+					continue
+				}
+				t.Errorf("error: depends on %q", dep)
+			}
+		})
+	}
+}
+
+func combinedOutput(t *testing.T, c *exec.Cmd) string {
+	out, err := c.CombinedOutput()
+	if err != nil {
+		t.Fatalf("error running %v: %v, output:\n%s", c, err, out)
+	}
+	return string(out)
+}
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 7f54fcc2d33..d79dcbd6b52 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -79,6 +79,12 @@ stages:
           - name: createPDB
             value: ${{ and(eq(parameters.createSymbols, true), eq(parameters.builder.config, 'buildandpack'), eq(parameters.builder.os, 'windows')) }} # Only create PDBs on Windows
 
+          - ${{ if eq(parameters.builder.config, 'buildandpack') }}:
+            # Make sure a PR doesn't accidentally add a command that uses more than minimal
+            # dependencies to the buildandpack pipeline.
+            - name: MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS
+              value: '1'
+
           - ${{ if eq(parameters.builder.config, 'codeql_inner') }}:
             # Manually specify the repository being scanned by this job because
             # CodeQL can't detect the inner repository (the submodule)
@@ -140,6 +146,12 @@ stages:
             # Set Git authorship info for 'cmd/go TestScript/build_buildvcs_auto'.
             - template: ../steps/set-bot-git-author-task.yml
 
+          # Run the _util tests during the devscript configuration.
+          # It generally shouldn't matter which config these run in, we just need to pick something.
+          - ${{ if eq(parameters.builder.config, 'devscript') }}:
+            - pwsh: eng/run.ps1 selftest
+              displayName: Run _util self-tests
+
           - pwsh: |
               # Apply the patches as staged changes, so the HEAD commit is the same as upstream.
               eng/run.ps1 submodule-refresh
diff --git a/eng/run.ps1 b/eng/run.ps1
index a12878de720..07d3c9fa7dd 100644
--- a/eng/run.ps1
+++ b/eng/run.ps1
@@ -4,7 +4,7 @@
 
 <#
 .DESCRIPTION
-This script builds and runs a tool defined in a module in 'eng'.
+This script builds and runs a tool defined in 'eng/_util'.
 
 To run a tool:
   run.ps1 <tool> [arguments...]
@@ -15,9 +15,9 @@ For example, to build the repository:
 To list all possible tools:
   run.ps1
 
-Builds 'eng/<module>/cmd/<tool>/<tool>.go' and runs it using the list of
+Builds 'eng/_util/cmd/<tool>/<tool>.go' and runs it using the list of
 arguments. If necessary, this command automatically installs Go and downloads
-the dependencies of the module.
+the dependencies of the tool.
 
 Every tool accepts a '-h' argument to show tool usage help.
 #>
@@ -39,24 +39,23 @@ if ($LASTEXITCODE) {
 
 function Write-ToolList() {
   Write-Host "Possible tools:"
-  foreach ($module in Get-ChildItem (Join-Path $PSScriptRoot "_*")) {
-    Write-Host "  Module $($module.Name):"
-    foreach ($tool in Get-ChildItem (Join-Path $module "cmd" "*")) {
-      Write-Host "    $($tool.Name)"
-    }
+  foreach ($tool in Get-ChildItem (Join-Path $PSScriptRoot "_util" "cmd" "*")) {
+    Write-Host "  $($tool.Name)"
   }
   Write-Host ""
 }
 
 if (-not $tool) {
   Write-Host "No tool specified. Showing help and listing available tools:"
-  (Get-Help $PSCommandPath).DESCRIPTION | Out-String | Write-Host
+  Write-Host ""
+  ((Get-Help $PSCommandPath).DESCRIPTION | Out-String).Trim() | Write-Host
+  Write-Host ""
   Write-ToolList
   exit 0
 }
 
 # Find tool script file based on the name given.
-$tool_search = Join-Path $PSScriptRoot "_*" "cmd" "$tool" "$tool.go"
+$tool_search = Join-Path $PSScriptRoot "_util" "cmd" "$tool" "$tool.go"
 # Find matches, and force the result to be an array.
 $tool_matches = @(Get-Item $tool_search)
 
@@ -111,7 +110,7 @@ try {
     }
   }
 
-  Write-Host "Building done."
+  Write-Host "Built '$tool'. Running from repo root..."
 } finally {
   Pop-Location
 }

From fc41c9984652a8c35a2eb8a853fc9939b4170005 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Aug 2024 20:14:30 +0000
Subject: [PATCH 005/887] Bump github.com/microsoft/go-infra from 0.0.3 to
 0.0.4 in /eng/_util (#1288)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.3 to 0.0.4.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.3...v0.0.4)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index a82c44f6020..f1437a7f7fe 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.21
 
 require (
-	github.com/microsoft/go-infra v0.0.3
+	github.com/microsoft/go-infra v0.0.4
 	golang.org/x/sys v0.22.0
 	gotest.tools/gotestsum v1.12.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index d13913f4933..5eafd192581 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -27,8 +27,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.3 h1:HfmZFPfUOlvvzd97XBTwhq1EJ0AlSuIzqSq/ymjaBr4=
-github.com/microsoft/go-infra v0.0.3/go.mod h1:9QccxlHX1T63uM8cDwU77h26G53XXuydobGbDHxmR7M=
+github.com/microsoft/go-infra v0.0.4 h1:VOAdESUaBMpwY+tzlvQbD2coSjP7gMNXB8FCfsdFmGk=
+github.com/microsoft/go-infra v0.0.4/go.mod h1:FxSudYLTYTeK3vMXD7Mpvs6rjHg4YU1/M1w3t7PfSBU=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=

From 7050a8a18aa4c6060ddd687254cea602efe6da52 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 5 Aug 2024 21:05:35 +0000
Subject: [PATCH 006/887] Bump golang.org/x/sys from 0.22.0 to 0.23.0 in
 /eng/_util (#1286)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/sys/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index f1437a7f7fe..28accad62b8 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.4
-	golang.org/x/sys v0.22.0
+	golang.org/x/sys v0.23.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 5eafd192581..d83e4a87fca 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -79,8 +79,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
-golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
+golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From 9f169eeae2db901642728a84a87e78f67cc879ba Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Aug 2024 10:32:09 +0000
Subject: [PATCH 007/887] Bump golang.org/x/sys from 0.23.0 to 0.24.0 in
 /eng/_util

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.23.0 to 0.24.0.
- [Commits](https://github.com/golang/sys/compare/v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 28accad62b8..d8e3d41ab23 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.4
-	golang.org/x/sys v0.23.0
+	golang.org/x/sys v0.24.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index d83e4a87fca..4992e0cc7d9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -79,8 +79,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
-golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.24.0 h1:Twjiwq9dn6R1fQcyiK+wQyHWfaz/BJB+YIpzU/Cv3Xg=
+golang.org/x/sys v0.24.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From a8c12e95755e7efdcf100e2b5224318f06a356e4 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Fri, 9 Aug 2024 11:02:44 -0700
Subject: [PATCH 008/887] README.md: mention upstream golang-announce,
 clarifications

---
 README.md | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 2e827154062..c3009378547 100644
--- a/README.md
+++ b/README.md
@@ -15,11 +15,6 @@ of Go](https://go.dev/dl/).
 Unless otherwise noted, the Go source files are distributed under the
 BSD-style license found in the LICENSE file.
 
-If you are using this fork and have a Microsoft corporate account, consider
-[clicking here to instantly join the Microsoft Go Toolset Announcements email distribution list 📧](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join)
-and receive notifications about Microsoft releases of Go and breaking changes.
-We also maintain an [internal doc page](https://eng.ms/docs/more/languages-at-microsoft/go/articles/overview).
-
 ## Why does this fork exist?
 
 This repository produces a modified version of Go that can be used to build FIPS
@@ -52,8 +47,15 @@ This normally happens once a month. At any time, we may release a new revision
 (1.X.Y-Z) to fix an issue without waiting for the next upstream minor release.
 Revision releases are uncommon.
 
-Each microsoft/go release is announced in
-[a Microsoft-internal email distribution list 📧](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join) and the [Microsoft for Go Developers](https://devblogs.microsoft.com/go/) blog.
+Each microsoft/go release is announced at the
+[Microsoft for Go Developers](https://devblogs.microsoft.com/go/) blog.
+Check out the upstream [golang-announce mailing list](https://groups.google.com/g/golang-announce)
+for a summary of the changes in each Go version.
+
+There are a few additional support resources internal to Microsoft:
+* [Languages at Microsoft: Go](https://eng.ms/docs/more/languages-at-microsoft/go/articles/overview).
+* [A Microsoft-internal email distribution list 📧 (instant join link)](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join)
+  for release announcements.
 
 ## Download and install
 
@@ -88,7 +90,7 @@ includes builds of this Go fork.
 
 ### Binary archive
 
-[Completed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
+[Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
 for several platforms are available as `zip` and `tar.gz` files.
 
 ### Build from source

From a976ecee6547b3f1cb63fc9224df79384b20b9a0 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 14 Aug 2024 10:21:32 -0700
Subject: [PATCH 009/887] Add an hour to all builder timeouts

---
 eng/pipeline/stages/run-stage.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index d79dcbd6b52..d7d7d5b9879 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -57,10 +57,12 @@ stages:
           # longtest has been seen to succeed after 53 minutes. Give around 3x headroom. In the future,
           # we should also give the tests a shorter timeout to make sure this doesn't balloon too far:
           # https://github.com/microsoft/go/issues/568
-          timeoutInMinutes: 180
-        ${{ if startsWith(parameters.builder.config, 'codeql') }}:
+          timeoutInMinutes: 240
+        ${{ elseif startsWith(parameters.builder.config, 'codeql') }}:
           # Allow CodeQL to take a while. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/configuring-codeql3000-ado-pipelines#other-issues
-          timeoutInMinutes: 360
+          timeoutInMinutes: 420
+        ${{ else }}:
+          timeoutInMinutes: 120
 
         pool: ${{ parameters.pool }}
 

From 85b92d184218aca6df6f33d92b88ce5622e07a11 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Thu, 15 Aug 2024 09:49:50 -0700
Subject: [PATCH 010/887] Update download table for 1.23

---
 .../cmd/updatelinktable/updatelinktable.go    |   4 +-
 eng/doc/Downloads.md                          |  14 +--
 eng/doc/release-branch-links.json             | 112 +++++++++---------
 3 files changed, 65 insertions(+), 65 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 3dd0820f029..d5769fc883a 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -23,7 +23,7 @@ This command updates the table in ` + docPath + ` and data in ` + jsonPath + `.
 
 var supported = []version{
 	{
-		Number:       "1.22",
+		Number:       "1.23",
 		LatestStable: true,
 		Platforms: map[string]struct{}{
 			"linux-amd64":   {},
@@ -35,7 +35,7 @@ var supported = []version{
 		},
 	},
 	{
-		Number:         "1.21",
+		Number:         "1.22",
 		PreviousStable: true,
 		Platforms: map[string]struct{}{
 			"linux-amd64":   {},
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index c4811ea3843..96a22dc1654 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -10,14 +10,14 @@ This document contains a list of links to the binary releases of the Microsoft b
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
-|   | 1.22 | 1.21 |
+|   | 1.23 | 1.22 |
 | --- | --- | --- |
-| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.21.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.21.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.21.src.tar.gz.sig)<br/> |
- Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.22.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.21.assets.json)<br/> |
- linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz.sig)<br/> |
- linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz.sig)<br/> |
- linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz.sig)<br/> |
- windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.21.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.21.windows-amd64.zip.sha256)<br/> |
+| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig)<br/> |
+ Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.23.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.22.assets.json)<br/> |
+ linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig)<br/> |
+ linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig)<br/> |
+ linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig)<br/> |
+ windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256)<br/> |
 
 
 <!-- END TABLES -->
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index 61e83b9b4bf..5a49cdb09ce 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -1,129 +1,129 @@
 [
   {
-    "version": "go1.22",
+    "version": "go1.23",
     "stable": true,
     "latestStable": true,
     "files": [
       {
-        "filename": "go1.22.src.tar.gz",
+        "filename": "go1.23.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig"
       },
       {
-        "filename": "go1.22.assets.json",
+        "filename": "go1.23.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.22.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.23.assets.json"
       },
       {
-        "filename": "go1.22.linux-amd64.tar.gz",
+        "filename": "go1.23.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.22.linux-arm64.tar.gz",
+        "filename": "go1.23.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.22.linux-armv6l.tar.gz",
+        "filename": "go1.23.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.22.windows-amd64.zip",
+        "filename": "go1.23.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256"
       }
     ]
   },
   {
-    "version": "go1.21",
+    "version": "go1.22",
     "stable": true,
     "previousStable": true,
     "files": [
       {
-        "filename": "go1.21.src.tar.gz",
+        "filename": "go1.22.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.21.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.21.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.21.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig"
       },
       {
-        "filename": "go1.21.assets.json",
+        "filename": "go1.22.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.21.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.22.assets.json"
       },
       {
-        "filename": "go1.21.linux-amd64.tar.gz",
+        "filename": "go1.22.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.21.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.21.linux-arm64.tar.gz",
+        "filename": "go1.22.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.21.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.21.linux-armv6l.tar.gz",
+        "filename": "go1.22.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.21.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.21.windows-amd64.zip",
+        "filename": "go1.22.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.21",
+        "version": "go1.22",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.21.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.21.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256"
       }
     ]
   }

From 294feac5a41d50e2ef261d6acca9feb017f873d0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Sep 2024 10:03:46 -0700
Subject: [PATCH 011/887] Bump github.com/microsoft/go-infra from 0.0.4 to
 0.0.5 in /eng/_util (#1302)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.4 to 0.0.5.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.4...v0.0.5)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index d8e3d41ab23..bd5a3438880 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.21
 
 require (
-	github.com/microsoft/go-infra v0.0.4
+	github.com/microsoft/go-infra v0.0.5
 	golang.org/x/sys v0.24.0
 	gotest.tools/gotestsum v1.12.0
 )
@@ -22,7 +22,7 @@ require (
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sync v0.8.0 // indirect
 	golang.org/x/term v0.20.0 // indirect
-	golang.org/x/text v0.16.0 // indirect
+	golang.org/x/text v0.17.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 4992e0cc7d9..b4f3ffc29fc 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -27,8 +27,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.4 h1:VOAdESUaBMpwY+tzlvQbD2coSjP7gMNXB8FCfsdFmGk=
-github.com/microsoft/go-infra v0.0.4/go.mod h1:FxSudYLTYTeK3vMXD7Mpvs6rjHg4YU1/M1w3t7PfSBU=
+github.com/microsoft/go-infra v0.0.5 h1:2vfRe5hJUwJvnXcHDJiv/gqE0XIqCHnwXBFxXRm5+SI=
+github.com/microsoft/go-infra v0.0.5/go.mod h1:abvc0FBd6VZIdqeJEgo3+SDIE3wSbjpvPhRZ0i21pls=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
@@ -61,8 +61,8 @@ golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M=
-golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
+golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -102,8 +102,8 @@ golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4=
-golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI=
+golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc=
+golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
@@ -112,8 +112,8 @@ golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.11.0/go.mod h1:anzJrxPjNtfgiYQYirP2CPGzGLxrH2u2QBhn6Bf3qY8=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.19.0/go.mod h1:qoJWxmGSIBmAeriMx19ogtrEPrGtDbPK634QFIcLAhc=
-golang.org/x/tools v0.23.0 h1:SGsXPZ+2l4JsgaCKkx+FQ9YZ5XEtA1GZYuoDjenLjvg=
-golang.org/x/tools v0.23.0/go.mod h1:pnu6ufv6vQkll6szChhK3C3L/ruaIv5eBeztNG8wtsI=
+golang.org/x/tools v0.24.0 h1:J1shsA93PJUEVaUSaay7UXAyE8aimq3GW0pjlolpa24=
+golang.org/x/tools v0.24.0/go.mod h1:YhNqVBIfWHdzvTLs0d8LCuMhkKUgSUKldakyV7W/WDQ=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gotest.tools/gotestsum v1.12.0 h1:CmwtaGDkHxrZm4Ib0Vob89MTfpc3GrEFMJKovliPwGk=
 gotest.tools/gotestsum v1.12.0/go.mod h1:fAvqkSptospfSbQw26CTYzNwnsE/ztqLeyhP0h67ARY=

From 3728ff40d3c539a4bef5b0b74239be043a9b4de1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Sep 2024 10:07:56 -0700
Subject: [PATCH 012/887] Bump golang.org/x/sys from 0.24.0 to 0.25.0 in
 /eng/_util (#1306)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.24.0 to 0.25.0.
- [Commits](https://github.com/golang/sys/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index bd5a3438880..8070ff56995 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.5
-	golang.org/x/sys v0.24.0
+	golang.org/x/sys v0.25.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index b4f3ffc29fc..da93b1e3eb9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -79,8 +79,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.24.0 h1:Twjiwq9dn6R1fQcyiK+wQyHWfaz/BJB+YIpzU/Cv3Xg=
-golang.org/x/sys v0.24.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.25.0 h1:r+8e+loiHxRqhXVl6ML1nO3l1+oFoWbnlu2Ehimmi34=
+golang.org/x/sys v0.25.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From e4cb0def83381bc368b7806d8b129ffdf38cfd28 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 10 Sep 2024 14:32:02 -0700
Subject: [PATCH 013/887] FIPS user guide: explain "bcrypt" (#1314)

---
 eng/doc/fips/UserGuide.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index 258cf0e672e..2ed486e3204 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -4,7 +4,10 @@ This document is a user guide for the Microsoft Go crypto package running on FIP
 
 The Go crypto documentation is available online at https://pkg.go.dev/crypto.
 
+<!-- The following table of contents is maintained using https://marketplace.visualstudio.com/items?itemName=yzhang.markdown-all-in-one -->
+
 - [FIPS 140-2 User Guide](#fips-140-2-user-guide)
+  - [The Microsoft Go crypto backends](#the-microsoft-go-crypto-backends)
   - [Using Go crypto APIs](#using-go-crypto-apis)
     - [crypto/aes](#cryptoaes)
       - [func NewCipher](#func-newcipher)
@@ -92,6 +95,23 @@ The Go crypto documentation is available online at https://pkg.go.dev/crypto.
     - [crypto/subtle](#cryptosubtle)
     - [crypto/tls](#cryptotls)
 
+## The Microsoft Go crypto backends
+
+The OpenSSL backend uses [golang-fips/openssl].
+The CNG backend uses [go-crypto-winnative].
+For more general information about the backends, such as how to enable them, see the [Microsoft Go FIPS README](./README.md).
+
+[golang-fips/openssl]: https://github.com/golang-fips/openssl
+[go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
+
+> [!NOTE]
+> The CNG backend uses a module called "bcrypt" to interact with CNG.
+> Some identifiers and functions used by the CNG backend include a "bcrypt" prefix, referring to the "bcrypt" CNG module.
+> For example, `BCryptGenRandom` is a function that generates random numbers using CNG.
+>
+> There is also a password hashing algorithm called "bcrypt".
+> It is unrelated, and not in the scope of this document.
+
 ## Using Go crypto APIs
 
 This section describes how to use Go crypto APIs in a FIPS compliant manner.

From ddabaf225ddf5150f46728d4864d1f2d90b71d37 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 12:36:20 +0200
Subject: [PATCH 014/887] upgrade golang-fips/openssl to latest

---
 patches/0004-Add-OpenSSL-crypto-backend.patch |   20 +-
 patches/0005-Add-CNG-crypto-backend.patch     |   14 +-
 patches/0006-Vendor-crypto-backends.patch     | 1542 +++++++++++++----
 3 files changed, 1188 insertions(+), 388 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index e97bf99ff3f..123a8f92fa4 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -714,32 +714,32 @@ index c83a7272c9f01f..a0548a7f9179c5 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index d7a4ef150410e3..c842df62ecee5b 100644
+index d7a4ef150410e3..7a6455fefb4bed 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
  go 1.24
  
  require (
-+	github.com/golang-fips/openssl/v2 v2.0.3
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 8ff5ecd640f084..138066f5f84b68 100644
+index 8ff5ecd640f084..c502448cd5ec1b 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.3 h1:9+J2R0BQio6Jz8+dPZf/0ylISByl0gZWjTEKm+J+y7Y=
-+github.com/golang-fips/openssl/v2 v2.0.3/go.mod h1:7tuBqX2Zov8Yq5mJ2yzlKhpnxOnWyEzi38AzeWRuQdg=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 26301398c5820c..26570cdadda16d 100644
+index ca6a512bf95c7e..e69c1f8901fe74 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -459,6 +459,8 @@ var depsRules = `
+@@ -460,6 +460,8 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -748,7 +748,7 @@ index 26301398c5820c..26570cdadda16d 100644
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring;
-@@ -497,6 +499,7 @@ var depsRules = `
+@@ -498,6 +500,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -756,7 +756,7 @@ index 26301398c5820c..26570cdadda16d 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -796,7 +799,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -797,7 +800,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -765,7 +765,7 @@ index 26301398c5820c..26570cdadda16d 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -806,7 +809,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -807,7 +810,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 5fed3d54c5a..bee4cfcbf33 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -1123,13 +1123,13 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index c842df62ecee5b..1e6b6b1324624a 100644
+index 7a6455fefb4bed..84460ce0490727 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
- 	github.com/golang-fips/openssl/v2 v2.0.3
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
@@ -1139,18 +1139,18 @@ index 138066f5f84b68..31b48ffe22c863 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.3 h1:9+J2R0BQio6Jz8+dPZf/0ylISByl0gZWjTEKm+J+y7Y=
- github.com/golang-fips/openssl/v2 v2.0.3/go.mod h1:7tuBqX2Zov8Yq5mJ2yzlKhpnxOnWyEzi38AzeWRuQdg=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103 h1:KQsPPal3pKvKzAPTaR7sEriaqrHmRWw0dWG/7E5FNNk=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103/go.mod h1:fveERXKbeK+XLmOyU24caKnIT/S5nniAX9XCRHfnrM4=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 26570cdadda16d..b48078b3866fa1 100644
+index e69c1f8901fe74..eb0b0ea4eb4622 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -459,6 +459,10 @@ var depsRules = `
+@@ -460,6 +460,10 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -1161,7 +1161,7 @@ index 26570cdadda16d..b48078b3866fa1 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -499,6 +503,7 @@ var depsRules = `
+@@ -500,6 +504,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index d3deddb5573..9a63450ecdd 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -5,63 +5,65 @@ Subject: [PATCH] Vendor crypto backends
 
 To reproduce, run 'go mod vendor' in 'go/src'.
 ---
- .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
- .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
- .../golang-fips/openssl/v2/README.md          |  66 ++
- .../github.com/golang-fips/openssl/v2/aes.go  | 100 +++
- .../golang-fips/openssl/v2/bbig/big.go        |  37 +
- .../github.com/golang-fips/openssl/v2/big.go  |  11 +
- .../golang-fips/openssl/v2/cipher.go          | 569 +++++++++++++
- .../github.com/golang-fips/openssl/v2/des.go  | 113 +++
- .../github.com/golang-fips/openssl/v2/ec.go   |  59 ++
- .../github.com/golang-fips/openssl/v2/ecdh.go | 323 +++++++
- .../golang-fips/openssl/v2/ecdsa.go           | 217 +++++
- .../golang-fips/openssl/v2/ed25519.go         | 218 +++++
- .../github.com/golang-fips/openssl/v2/evp.go  | 471 +++++++++++
- .../golang-fips/openssl/v2/goopenssl.c        | 218 +++++
- .../golang-fips/openssl/v2/goopenssl.h        | 255 ++++++
- .../github.com/golang-fips/openssl/v2/hash.go | 793 ++++++++++++++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go | 174 ++++
- .../github.com/golang-fips/openssl/v2/hmac.go | 238 ++++++
- .../github.com/golang-fips/openssl/v2/init.go |  64 ++
- .../golang-fips/openssl/v2/init_unix.go       |  31 +
- .../golang-fips/openssl/v2/init_windows.go    |  36 +
- .../golang-fips/openssl/v2/openssl.go         | 419 +++++++++
- .../golang-fips/openssl/v2/pbkdf2.go          |  28 +
- .../openssl/v2/port_evp_md5_sha1.c            | 126 +++
- .../github.com/golang-fips/openssl/v2/rand.go |  20 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |  66 ++
- .../github.com/golang-fips/openssl/v2/rsa.go  | 435 ++++++++++
- .../github.com/golang-fips/openssl/v2/shims.h | 371 ++++++++
- .../golang-fips/openssl/v2/thread_setup.go    |  14 +
- .../golang-fips/openssl/v2/thread_setup.h     |   4 +
- .../openssl/v2/thread_setup_unix.c            |  61 ++
- .../openssl/v2/thread_setup_windows.c         |  64 ++
- .../golang-fips/openssl/v2/tls1prf.go         | 104 +++
- .../microsoft/go-crypto-winnative/LICENSE     |  21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  | 389 +++++++++
- .../go-crypto-winnative/cng/bbig/big.go       |  31 +
- .../microsoft/go-crypto-winnative/cng/big.go  |  30 +
- .../go-crypto-winnative/cng/cipher.go         |  56 ++
- .../microsoft/go-crypto-winnative/cng/cng.go  | 130 +++
- .../microsoft/go-crypto-winnative/cng/des.go  | 107 +++
- .../microsoft/go-crypto-winnative/cng/ecdh.go | 260 ++++++
- .../go-crypto-winnative/cng/ecdsa.go          | 175 ++++
- .../microsoft/go-crypto-winnative/cng/hash.go | 320 +++++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go | 179 ++++
- .../microsoft/go-crypto-winnative/cng/hmac.go |  35 +
- .../microsoft/go-crypto-winnative/cng/keys.go | 178 ++++
- .../go-crypto-winnative/cng/pbkdf2.go         |  74 ++
- .../microsoft/go-crypto-winnative/cng/rand.go |  28 +
- .../microsoft/go-crypto-winnative/cng/rc4.go  |  61 ++
- .../microsoft/go-crypto-winnative/cng/rsa.go  | 374 +++++++++
- .../go-crypto-winnative/cng/tls1prf.go        |  92 ++
- .../internal/bcrypt/bcrypt_windows.go         | 284 +++++++
- .../internal/bcrypt/zsyscall_windows.go       | 389 +++++++++
- .../internal/subtle/aliasing.go               |  32 +
- .../internal/sysdll/sys_windows.go            |  55 ++
- src/vendor/modules.txt                        |  11 +
- 56 files changed, 9045 insertions(+)
+ .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
+ .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
+ .../golang-fips/openssl/v2/README.md          |   66 ++
+ .../github.com/golang-fips/openssl/v2/aes.go  |  100 ++
+ .../golang-fips/openssl/v2/bbig/big.go        |   37 +
+ .../github.com/golang-fips/openssl/v2/big.go  |   11 +
+ .../golang-fips/openssl/v2/cipher.go          |  569 +++++++++
+ .../github.com/golang-fips/openssl/v2/des.go  |  114 ++
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  348 ++++++
+ .../github.com/golang-fips/openssl/v2/ec.go   |   59 +
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  321 +++++
+ .../golang-fips/openssl/v2/ecdsa.go           |  215 ++++
+ .../golang-fips/openssl/v2/ed25519.go         |  218 ++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  471 ++++++++
+ .../golang-fips/openssl/v2/goopenssl.c        |  218 ++++
+ .../golang-fips/openssl/v2/goopenssl.h        |  259 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go | 1041 +++++++++++++++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  190 +++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  276 +++++
+ .../github.com/golang-fips/openssl/v2/init.go |   64 +
+ .../golang-fips/openssl/v2/init_unix.go       |   31 +
+ .../golang-fips/openssl/v2/init_windows.go    |   36 +
+ .../golang-fips/openssl/v2/openssl.go         |  434 +++++++
+ .../golang-fips/openssl/v2/pbkdf2.go          |   28 +
+ .../golang-fips/openssl/v2/port_dsa.c         |   85 ++
+ .../openssl/v2/port_evp_md5_sha1.c            |  126 ++
+ .../github.com/golang-fips/openssl/v2/rand.go |   20 +
+ .../github.com/golang-fips/openssl/v2/rc4.go  |   66 ++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  443 +++++++
+ .../github.com/golang-fips/openssl/v2/shims.h |  392 +++++++
+ .../golang-fips/openssl/v2/thread_setup.go    |   14 +
+ .../golang-fips/openssl/v2/thread_setup.h     |    4 +
+ .../openssl/v2/thread_setup_unix.c            |   64 +
+ .../openssl/v2/thread_setup_windows.c         |   64 +
+ .../golang-fips/openssl/v2/tls1prf.go         |  104 ++
+ .../microsoft/go-crypto-winnative/LICENSE     |   21 +
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  389 ++++++
+ .../go-crypto-winnative/cng/bbig/big.go       |   31 +
+ .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
+ .../go-crypto-winnative/cng/cipher.go         |   56 +
+ .../microsoft/go-crypto-winnative/cng/cng.go  |  130 ++
+ .../microsoft/go-crypto-winnative/cng/des.go  |  107 ++
+ .../microsoft/go-crypto-winnative/cng/ecdh.go |  260 ++++
+ .../go-crypto-winnative/cng/ecdsa.go          |  175 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  320 +++++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  179 +++
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
+ .../microsoft/go-crypto-winnative/cng/keys.go |  178 +++
+ .../go-crypto-winnative/cng/pbkdf2.go         |   74 ++
+ .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
+ .../microsoft/go-crypto-winnative/cng/rc4.go  |   61 +
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  374 ++++++
+ .../go-crypto-winnative/cng/tls1prf.go        |   92 ++
+ .../internal/bcrypt/bcrypt_windows.go         |  284 +++++
+ .../internal/bcrypt/zsyscall_windows.go       |  389 ++++++
+ .../internal/subtle/aliasing.go               |   32 +
+ .../internal/sysdll/sys_windows.go            |   55 +
+ src/vendor/modules.txt                        |   11 +
+ 58 files changed, 9828 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
@@ -70,6 +72,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/des.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/dsa.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ec.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
@@ -85,6 +88,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rand.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rc4.go
@@ -975,10 +979,10 @@ index 00000000000000..72f7aebfc130e7
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..71b13333a28513
+index 00000000000000..c98a276ec33fb0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-@@ -0,0 +1,113 @@
+@@ -0,0 +1,114 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1014,27 +1018,22 @@ index 00000000000000..71b13333a28513
 +	if len(key) != 8 {
 +		return nil, errors.New("crypto/des: invalid key size")
 +	}
-+	c, err := newEVPCipher(key, cipherDES)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// Should always be true for stock OpenSSL.
-+	if loadCipher(cipherDES, cipherModeCBC) == nil {
-+		return &desCipherWithoutCBC{c}, nil
-+	}
-+	return &desCipher{c}, nil
++	return newDESCipher(key, cipherDES)
 +}
 +
 +func NewTripleDESCipher(key []byte) (cipher.Block, error) {
 +	if len(key) != 24 {
 +		return nil, errors.New("crypto/des: invalid key size")
 +	}
-+	c, err := newEVPCipher(key, cipherDES3)
++	return newDESCipher(key, cipherDES3)
++}
++
++func newDESCipher(key []byte, kind cipherKind) (cipher.Block, error) {
++	c, err := newEVPCipher(key, kind)
 +	if err != nil {
 +		return nil, err
 +	}
-+	// Should always be true for stock OpenSSL.
-+	if loadCipher(cipherDES, cipherModeCBC) != nil {
++	if loadCipher(kind, cipherModeCBC) == nil {
 +		return &desCipherWithoutCBC{c}, nil
 +	}
 +	return &desCipher{c}, nil
@@ -1086,15 +1085,375 @@ index 00000000000000..71b13333a28513
 +}
 +
 +func (c *desCipherWithoutCBC) Encrypt(dst, src []byte) {
-+	c.encrypt(dst, src)
++	if err := c.encrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
 +}
 +
 +func (c *desCipherWithoutCBC) Decrypt(dst, src []byte) {
-+	c.decrypt(dst, src)
++	if err := c.decrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
+new file mode 100644
+index 00000000000000..875533a50fbac5
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
+@@ -0,0 +1,348 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++// #include "goopenssl.h"
++import "C"
++import (
++	"runtime"
++	"unsafe"
++)
++
++var (
++	OSSL_PKEY_PARAM_FFC_PBITS = C.CString("pbits")
++	OSSL_PKEY_PARAM_FFC_QBITS = C.CString("qbits")
++	OSSL_PKEY_PARAM_FFC_P     = C.CString("p")
++	OSSL_PKEY_PARAM_FFC_Q     = C.CString("q")
++	OSSL_PKEY_PARAM_FFC_G     = C.CString("g")
++)
++
++// SupportsDSA returns true if the OpenSSL library supports DSA.
++func SupportsDSA() bool {
++	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_DSA, nil)
++	if ctx == nil {
++		return false
++	}
++	C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	return true
++}
++
++// DSAParameters contains the DSA parameters.
++type DSAParameters struct {
++	P, Q, G BigInt
++}
++
++// PrivateKeyDSA represents a DSA private key.
++type PrivateKeyDSA struct {
++	DSAParameters
++	X, Y BigInt
++
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey C.GO_EVP_PKEY_PTR
++}
++
++func (k *PrivateKeyDSA) finalize() {
++	C.go_openssl_EVP_PKEY_free(k._pkey)
++}
++
++func (k *PrivateKeyDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++// PublicKeyDSA represents a DSA public key.
++type PublicKeyDSA struct {
++	DSAParameters
++	Y BigInt
++
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey C.GO_EVP_PKEY_PTR
++}
++
++func (k *PublicKeyDSA) finalize() {
++	C.go_openssl_EVP_PKEY_free(k._pkey)
++}
++
++func (k *PublicKeyDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++// GenerateDSAParameters generates a set of DSA parameters.
++func GenerateDSAParameters(l, n int) (DSAParameters, error) {
++	// The DSA parameters are generated by creating a new DSA key and
++	// extracting the domain parameters from it.
++
++	// Generate a new DSA key context and set the known parameters.
++	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_DSA, nil)
++	if ctx == nil {
++		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_new_id failed")
++	}
++	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	if C.go_openssl_EVP_PKEY_paramgen_init(ctx) != 1 {
++		return DSAParameters{}, newOpenSSLError("EVP_PKEY_paramgen_init failed")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_DSA, -1, C.GO_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, C.int(l), nil) != 1 {
++		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_DSA, -1, C.GO_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, C.int(n), nil) != 1 {
++		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++	}
++	var pkey C.GO_EVP_PKEY_PTR
++	if C.go_openssl_EVP_PKEY_paramgen(ctx, &pkey) != 1 {
++		return DSAParameters{}, newOpenSSLError("EVP_PKEY_paramgen failed")
++	}
++	defer C.go_openssl_EVP_PKEY_free(pkey)
++
++	// Extract the domain parameters from the generated key.
++	var p, q, g C.GO_BIGNUM_PTR
++	switch vMajor {
++	case 1:
++		dsa := getDSA(pkey)
++		if vMinor == 0 {
++			C.go_openssl_DSA_get0_pqg_backport(dsa, &p, &q, &g)
++		} else {
++			C.go_openssl_DSA_get0_pqg(dsa, &p, &q, &g)
++		}
++	case 3:
++		defer func() {
++			C.go_openssl_BN_free(p)
++			C.go_openssl_BN_free(q)
++			C.go_openssl_BN_free(g)
++		}()
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_P, &p) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_Q, &q) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_G, &g) != 1 {
++			return DSAParameters{}, newOpenSSLError("EVP_PKEY_get_bn_param")
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++
++	return DSAParameters{
++		P: bnToBig(p),
++		Q: bnToBig(q),
++		G: bnToBig(g),
++	}, nil
++}
++
++// NewPrivateKeyDSA creates a new DSA private key from the given parameters.
++func NewPrivateKeyDSA(params DSAParameters, x, y BigInt) (*PrivateKeyDSA, error) {
++	if x == nil || y == nil {
++		panic("x and y must not be nil")
++	}
++	pkey, err := newDSA(params, x, y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PrivateKeyDSA{params, x, y, pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
++	return k, nil
++}
++
++// NewPublicKeyDSA creates a new DSA public key from the given parameters.
++func NewPublicKeyDSA(params DSAParameters, y BigInt) (*PublicKeyDSA, error) {
++	if y == nil {
++		panic("y must not be nil")
++	}
++	pkey, err := newDSA(params, nil, y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PublicKeyDSA{params, y, pkey}
++	runtime.SetFinalizer(k, (*PublicKeyDSA).finalize)
++	return k, nil
++}
++
++// GenerateKeyDSA generates a new private DSA key using the given parameters.
++func GenerateKeyDSA(params DSAParameters) (*PrivateKeyDSA, error) {
++	pkey, err := newDSA(params, nil, nil)
++	if err != nil {
++		return nil, err
++	}
++	var x, y C.GO_BIGNUM_PTR
++	switch vMajor {
++	case 1:
++		dsa := getDSA(pkey)
++		if vMinor == 0 {
++			C.go_openssl_DSA_get0_key_backport(dsa, &y, &x)
++		} else {
++			C.go_openssl_DSA_get0_key(dsa, &y, &x)
++		}
++	case 3:
++		defer func() {
++			C.go_openssl_BN_clear_free(x)
++			C.go_openssl_BN_free(y)
++		}()
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PUB_KEY, &y) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &x) != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_get_bn_param")
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	k := &PrivateKeyDSA{params, bnToBig(x), bnToBig(y), pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
++	return k, nil
++}
++
++// SignDSA signs a hash (which should be the result of hashing a larger message).
++func SignDSA(priv *PrivateKeyDSA, hash []byte) ([]byte, error) {
++	return evpSign(priv.withKey, 0, 0, 0, hash)
++}
++
++// VerifyDSA verifiessig using the public key, pub.
++func VerifyDSA(pub *PublicKeyDSA, hash []byte, sig []byte) bool {
++	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
++}
++
++func newDSA(params DSAParameters, x, y BigInt) (C.GO_EVP_PKEY_PTR, error) {
++	switch vMajor {
++	case 1:
++		return newDSA1(params, x, y)
++	case 3:
++		return newDSA3(params, x, y)
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++func newDSA1(params DSAParameters, x, y BigInt) (pkey C.GO_EVP_PKEY_PTR, err error) {
++	checkMajorVersion(1)
++
++	dsa := C.go_openssl_DSA_new()
++	if dsa == nil {
++		return nil, newOpenSSLError("DSA_new failed")
++	}
++	defer func() {
++		if pkey == nil {
++			C.go_openssl_DSA_free(dsa)
++		}
++	}()
++
++	p, q, g := bigToBN(params.P), bigToBN(params.Q), bigToBN(params.G)
++	var ret C.int
++	if vMinor == 0 {
++		ret = C.go_openssl_DSA_set0_pqg_backport(dsa, p, q, g)
++	} else {
++		ret = C.go_openssl_DSA_set0_pqg(dsa, p, q, g)
++	}
++	if ret != 1 {
++		C.go_openssl_BN_free(p)
++		C.go_openssl_BN_free(q)
++		C.go_openssl_BN_free(g)
++		return nil, newOpenSSLError("DSA_set0_pqg failed")
++	}
++	if y != nil {
++		pub, priv := bigToBN(y), bigToBN(x)
++		if vMinor == 0 {
++			ret = C.go_openssl_DSA_set0_key_backport(dsa, pub, priv)
++		} else {
++			ret = C.go_openssl_DSA_set0_key(dsa, pub, priv)
++		}
++		if ret != 1 {
++			C.go_openssl_BN_free(pub)
++			C.go_openssl_BN_clear_free(priv)
++			return nil, newOpenSSLError("DSA_set0_key failed")
++		}
++	} else {
++		if C.go_openssl_DSA_generate_key(dsa) != 1 {
++			return nil, newOpenSSLError("DSA_generate_key failed")
++		}
++	}
++	pkey = C.go_openssl_EVP_PKEY_new()
++	if pkey == nil {
++		return nil, newOpenSSLError("EVP_PKEY_new failed")
++	}
++	if C.go_openssl_EVP_PKEY_assign(pkey, C.GO_EVP_PKEY_DSA, unsafe.Pointer(dsa)) != 1 {
++		C.go_openssl_EVP_PKEY_free(pkey)
++		return nil, newOpenSSLError("EVP_PKEY_assign failed")
++	}
++	return pkey, nil
++}
++
++func newDSA3(params DSAParameters, x, y BigInt) (C.GO_EVP_PKEY_PTR, error) {
++	checkMajorVersion(3)
++
++	bld := C.go_openssl_OSSL_PARAM_BLD_new()
++	if bld == nil {
++		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
++	}
++	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
++	p, q, g := bigToBN(params.P), bigToBN(params.Q), bigToBN(params.G)
++	defer func() {
++		C.go_openssl_BN_free(p)
++		C.go_openssl_BN_free(q)
++		C.go_openssl_BN_free(g)
++	}()
++	if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_P, p) != 1 ||
++		C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_Q, q) != 1 ||
++		C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_G, g) != 1 {
++
++		return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
++	}
++	selection := C.int(C.GO_EVP_PKEY_KEYPAIR)
++	if y != nil {
++		pub := bigToBN(y)
++		defer C.go_openssl_BN_free(pub)
++		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PUB_KEY, pub) != 1 {
++			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
++		}
++		if x == nil {
++			selection = C.int(C.GO_EVP_PKEY_PUBLIC_KEY)
++		}
++	}
++	if x != nil {
++		priv := bigToBN(x)
++		defer C.go_openssl_BN_clear_free(priv)
++		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, priv) != 1 {
++			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
++		}
++	}
++	bldparams := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
++	if bldparams == nil {
++		return nil, newOpenSSLError("OSSL_PARAM_BLD_to_param")
++	}
++	defer C.go_openssl_OSSL_PARAM_free(bldparams)
++	pkey, err := newEvpFromParams(C.GO_EVP_PKEY_DSA, selection, bldparams)
++	if err != nil {
++		return nil, err
++	}
++	if y != nil {
++		return pkey, nil
++	}
++	// pkey doesn't contain the public component, but the crypto/dsa package
++	// expects it to be always there. Generate a new key using pkey as domain
++	// parameters placeholder.
++	defer C.go_openssl_EVP_PKEY_free(pkey)
++	ctx := C.go_openssl_EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if ctx == nil {
++		return nil, newOpenSSLError("EVP_PKEY_CTX_new_from_pkey")
++	}
++	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	if C.go_openssl_EVP_PKEY_keygen_init(ctx) != 1 {
++		return nil, newOpenSSLError("EVP_PKEY_keygen_init")
++	}
++	var gkey C.GO_EVP_PKEY_PTR
++	if C.go_openssl_EVP_PKEY_keygen(ctx, &gkey) != 1 {
++		return nil, newOpenSSLError("EVP_PKEY_keygen")
++	}
++	return gkey, nil
++}
++
++// getDSA returns the DSA from pkey.
++// If pkey does not contain an DSA it panics.
++// The returned key should not be freed.
++func getDSA(pkey C.GO_EVP_PKEY_PTR) (key C.GO_DSA_PTR) {
++	if vMajor == 1 && vMinor == 0 {
++		if key0 := C.go_openssl_EVP_PKEY_get0(pkey); key0 != nil {
++			key = C.GO_DSA_PTR(key0)
++		}
++	} else {
++		key = C.go_openssl_EVP_PKEY_get0_DSA(pkey)
++	}
++	if key == nil {
++		panic("pkey does not contain an DSA")
++	}
++	return key
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..eac2f8bbee303c
+index 00000000000000..5c253f7eec5358
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 @@ -0,0 +1,59 @@
@@ -1106,11 +1465,11 @@ index 00000000000000..eac2f8bbee303c
 +import "C"
 +
 +var (
-+	paramPubKey  = C.CString("pub")
-+	paramPrivKey = C.CString("priv")
-+	paramGroup   = C.CString("group")
-+	paramECPubX  = C.CString("qx")
-+	paramECPubY  = C.CString("qy")
++	OSSL_PKEY_PARAM_PUB_KEY    = C.CString("pub")
++	OSSL_PKEY_PARAM_PRIV_KEY   = C.CString("priv")
++	OSSL_PKEY_PARAM_GROUP_NAME = C.CString("group")
++	OSSL_PKEY_PARAM_EC_PUB_X   = C.CString("qx")
++	OSSL_PKEY_PARAM_EC_PUB_Y   = C.CString("qy")
 +)
 +
 +func curveNID(curve string) (C.int, error) {
@@ -1159,10 +1518,10 @@ index 00000000000000..eac2f8bbee303c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..a1e627eff44699
+index 00000000000000..de5f712f22158f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,323 @@
+@@ -0,0 +1,321 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1292,9 +1651,8 @@ index 00000000000000..a1e627eff44699
 +}
 +
 +func newECDHPkey1(nid C.int, bytes []byte, isPrivate bool) (pkey C.GO_EVP_PKEY_PTR, err error) {
-+	if vMajor != 1 {
-+		panic("incorrect vMajor version")
-+	}
++	checkMajorVersion(1)
++
 +	key := C.go_openssl_EC_KEY_new_by_curve_name(nid)
 +	if key == nil {
 +		return nil, newOpenSSLError("EC_KEY_new_by_curve_name")
@@ -1331,15 +1689,14 @@ index 00000000000000..a1e627eff44699
 +}
 +
 +func newECDHPkey3(nid C.int, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, error) {
-+	if vMajor != 3 {
-+		panic("incorrect vMajor version")
-+	}
++	checkMajorVersion(3)
++
 +	bld := C.go_openssl_OSSL_PARAM_BLD_new()
 +	if bld == nil {
 +		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
 +	}
 +	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, paramGroup, C.go_openssl_OBJ_nid2sn(nid), 0)
++	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
 +	var selection C.int
 +	if isPrivate {
 +		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
@@ -1347,14 +1704,14 @@ index 00000000000000..a1e627eff44699
 +			return nil, newOpenSSLError("BN_bin2bn")
 +		}
 +		defer C.go_openssl_BN_clear_free(priv)
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, paramPrivKey, priv) != 1 {
++		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, priv) != 1 {
 +			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
 +		}
 +		selection = C.GO_EVP_PKEY_KEYPAIR
 +	} else {
 +		cbytes := C.CBytes(bytes)
 +		defer C.free(cbytes)
-+		C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, paramPubKey, cbytes, C.size_t(len(bytes)))
++		C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, OSSL_PKEY_PARAM_PUB_KEY, cbytes, C.size_t(len(bytes)))
 +		selection = C.GO_EVP_PKEY_PUBLIC_KEY
 +	}
 +	params := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
@@ -1400,7 +1757,7 @@ index 00000000000000..a1e627eff44699
 +		}
 +	case 3:
 +		var priv C.GO_BIGNUM_PTR
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, paramPrivKey, &priv) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
 +			return newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(priv)
@@ -1465,7 +1822,7 @@ index 00000000000000..a1e627eff44699
 +			return nil, nil, newOpenSSLError("EC_KEY_get0_private_key")
 +		}
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, paramPrivKey, &priv) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
 +			return nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(priv)
@@ -1488,10 +1845,10 @@ index 00000000000000..a1e627eff44699
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..46b16abf483e65
+index 00000000000000..be7e9455f49d47
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,217 @@
+@@ -0,0 +1,215 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1534,8 +1891,8 @@ index 00000000000000..46b16abf483e65
 +
 +var errUnknownCurve = errors.New("openssl: unknown elliptic curve")
 +
-+func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
-+	pkey, err := newECDSAKey(curve, X, Y, nil)
++func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
++	pkey, err := newECDSAKey(curve, x, y, nil)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -1544,8 +1901,8 @@ index 00000000000000..46b16abf483e65
 +	return k, nil
 +}
 +
-+func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
-+	pkey, err := newECDSAKey(curve, X, Y, D)
++func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
++	pkey, err := newECDSAKey(curve, x, y, d)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -1554,7 +1911,7 @@ index 00000000000000..46b16abf483e65
 +	return k, nil
 +}
 +
-+func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
++func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
 +	// Generate the private key.
 +	pkey, err := generateEVPPKey(C.GO_EVP_PKEY_EC, 0, curve)
 +	if err != nil {
@@ -1585,9 +1942,9 @@ index 00000000000000..46b16abf483e65
 +		// Get Z. We don't need to free it, get0 does not increase the reference count.
 +		bd = C.go_openssl_EC_KEY_get0_private_key(key)
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, paramECPubX, &bx) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, paramECPubY, &by) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, paramPrivKey, &bd) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_X, &bx) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_Y, &by) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &bd) != 1 {
 +			return nil, nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(bd)
@@ -1615,7 +1972,7 @@ index 00000000000000..46b16abf483e65
 +	return evpHashVerify(pub.withKey, h, msg, sig) == nil
 +}
 +
-+func newECDSAKey(curve string, X, Y, D BigInt) (C.GO_EVP_PKEY_PTR, error) {
++func newECDSAKey(curve string, x, y, d BigInt) (C.GO_EVP_PKEY_PTR, error) {
 +	nid, err := curveNID(curve)
 +	if err != nil {
 +		return nil, err
@@ -1626,10 +1983,10 @@ index 00000000000000..46b16abf483e65
 +		C.go_openssl_BN_free(by)
 +		C.go_openssl_BN_clear_free(bd)
 +	}()
-+	bx = bigToBN(X)
-+	by = bigToBN(Y)
-+	bd = bigToBN(D)
-+	if bx == nil || by == nil || (D != nil && bd == nil) {
++	bx = bigToBN(x)
++	by = bigToBN(y)
++	bd = bigToBN(d)
++	if bx == nil || by == nil || (d != nil && bd == nil) {
 +		return nil, newOpenSSLError("BN_lebin2bn failed")
 +	}
 +	switch vMajor {
@@ -1643,9 +2000,8 @@ index 00000000000000..46b16abf483e65
 +}
 +
 +func newECDSAKey1(nid C.int, bx, by, bd C.GO_BIGNUM_PTR) (pkey C.GO_EVP_PKEY_PTR, err error) {
-+	if vMajor != 1 {
-+		panic("incorrect vMajor version")
-+	}
++	checkMajorVersion(1)
++
 +	key := C.go_openssl_EC_KEY_new_by_curve_name(nid)
 +	if key == nil {
 +		return nil, newOpenSSLError("EC_KEY_new_by_curve_name failed")
@@ -1665,9 +2021,8 @@ index 00000000000000..46b16abf483e65
 +}
 +
 +func newECDSAKey3(nid C.int, bx, by, bd C.GO_BIGNUM_PTR) (C.GO_EVP_PKEY_PTR, error) {
-+	if vMajor != 3 {
-+		panic("incorrect vMajor version")
-+	}
++	checkMajorVersion(3)
++
 +	// Create the encoded public key public key from bx and by.
 +	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error) {
 +		pt := C.go_openssl_EC_POINT_new(group)
@@ -1689,13 +2044,13 @@ index 00000000000000..46b16abf483e65
 +		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
 +	}
 +	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, paramGroup, C.go_openssl_OBJ_nid2sn(nid), 0)
++	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
 +	cbytes := C.CBytes(pubBytes)
 +	defer C.free(cbytes)
-+	C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, paramPubKey, cbytes, C.size_t(len(pubBytes)))
++	C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, OSSL_PKEY_PARAM_PUB_KEY, cbytes, C.size_t(len(pubBytes)))
 +	var selection C.int
 +	if bd != nil {
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, paramPrivKey, bd) != 1 {
++		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, bd) != 1 {
 +			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
 +		}
 +		selection = C.GO_EVP_PKEY_KEYPAIR
@@ -1935,7 +2290,7 @@ index 00000000000000..f74bd8f8d7a993
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..a9237a6a0ce9aa
+index 00000000000000..fa557d86be71c5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 @@ -0,0 +1,471 @@
@@ -1961,15 +2316,15 @@ index 00000000000000..a9237a6a0ce9aa
 +func hashToMD(h hash.Hash) C.GO_EVP_MD_PTR {
 +	var ch crypto.Hash
 +	switch h.(type) {
-+	case *sha1Hash:
++	case *sha1Hash, *sha1Marshal:
 +		ch = crypto.SHA1
-+	case *sha224Hash:
++	case *sha224Hash, *sha224Marshal:
 +		ch = crypto.SHA224
-+	case *sha256Hash:
++	case *sha256Hash, *sha256Marshal:
 +		ch = crypto.SHA256
-+	case *sha384Hash:
++	case *sha384Hash, *sha384Marshal:
 +		ch = crypto.SHA384
-+	case *sha512Hash:
++	case *sha512Hash, *sha512Marshal:
 +		ch = crypto.SHA512
 +	case *sha3_224Hash:
 +		ch = crypto.SHA3_224
@@ -2636,10 +2991,10 @@ index 00000000000000..1e428d5269f997
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
 new file mode 100644
-index 00000000000000..e488bf20142010
+index 00000000000000..a50caa3d82312c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
-@@ -0,0 +1,255 @@
+@@ -0,0 +1,259 @@
 +// This header file describes the OpenSSL ABI as built for use in Go.
 +
 +#include <stdlib.h> // size_t
@@ -2670,6 +3025,10 @@ index 00000000000000..e488bf20142010
 +int go_openssl_thread_setup(void);
 +void go_openssl_load_functions(void* handle, unsigned int major, unsigned int minor, unsigned int patch);
 +const GO_EVP_MD_PTR go_openssl_EVP_md5_sha1_backport(void);
++void go_openssl_DSA_get0_pqg_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *p, GO_BIGNUM_PTR *q, GO_BIGNUM_PTR *g);
++int go_openssl_DSA_set0_pqg_backport(GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g);
++void go_openssl_DSA_get0_key_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *pub_key, GO_BIGNUM_PTR *priv_key);
++int go_openssl_DSA_set0_key_backport(GO_DSA_PTR d, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key);
 +
 +// Define pointers to all the used OpenSSL functions.
 +// Calling C function pointers from Go is currently not supported.
@@ -2898,10 +3257,10 @@ index 00000000000000..e488bf20142010
 \ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..646b4ce295896c
+index 00000000000000..6fd3a518906004
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,793 @@
+@@ -0,0 +1,1041 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2914,6 +3273,7 @@ index 00000000000000..646b4ce295896c
 +	"hash"
 +	"runtime"
 +	"strconv"
++	"sync"
 +	"unsafe"
 +)
 +
@@ -3014,18 +3374,50 @@ index 00000000000000..646b4ce295896c
 +	return
 +}
 +
++var isMarshallableCache sync.Map
++
++// isHashMarshallable returns true if the memory layout of cb
++// is known by this library and can therefore be marshalled.
++func isHashMarshallable(ch crypto.Hash) bool {
++	if vMajor == 1 {
++		return true
++	}
++	if v, ok := isMarshallableCache.Load(ch); ok {
++		return v.(bool)
++	}
++	md := cryptoHashToMD(ch)
++	if md == nil {
++		return false
++	}
++	prov := C.go_openssl_EVP_MD_get0_provider(md)
++	if prov == nil {
++		return false
++	}
++	cname := C.go_openssl_OSSL_PROVIDER_get0_name(prov)
++	if cname == nil {
++		return false
++	}
++	name := C.GoString(cname)
++	// We only know the memory layout of the built-in providers.
++	// See evpHash.hashState for more details.
++	marshallable := name == "default" || name == "fips"
++	isMarshallableCache.Store(ch, marshallable)
++	return marshallable
++}
++
 +// evpHash implements generic hash methods.
 +type evpHash struct {
 +	ctx C.GO_EVP_MD_CTX_PTR
 +	// ctx2 is used in evpHash.sum to avoid changing
 +	// the state of ctx. Having it here allows reusing the
 +	// same allocated object multiple times.
-+	ctx2      C.GO_EVP_MD_CTX_PTR
-+	size      int
-+	blockSize int
++	ctx2         C.GO_EVP_MD_CTX_PTR
++	size         int
++	blockSize    int
++	marshallable bool
 +}
 +
-+func newEvpHash(ch crypto.Hash, size, blockSize int) *evpHash {
++func newEvpHash(ch crypto.Hash) *evpHash {
 +	md := cryptoHashToMD(ch)
 +	if md == nil {
 +		panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
@@ -3036,11 +3428,13 @@ index 00000000000000..646b4ce295896c
 +		panic(newOpenSSLError("EVP_DigestInit_ex"))
 +	}
 +	ctx2 := C.go_openssl_EVP_MD_CTX_new()
++	blockSize := int(C.go_openssl_EVP_MD_get_block_size(md))
 +	h := &evpHash{
-+		ctx:       ctx,
-+		ctx2:      ctx2,
-+		size:      size,
-+		blockSize: blockSize,
++		ctx:          ctx,
++		ctx2:         ctx2,
++		size:         ch.Size(),
++		blockSize:    blockSize,
++		marshallable: isHashMarshallable(ch),
 +	}
 +	runtime.SetFinalizer(h, (*evpHash).finalize)
 +	return h
@@ -3099,11 +3493,42 @@ index 00000000000000..646b4ce295896c
 +	runtime.KeepAlive(h)
 +}
 +
++// clone returns a new evpHash object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *evpHash) clone() (*evpHash, error) {
++	ctx := C.go_openssl_EVP_MD_CTX_new()
++	if ctx == nil {
++		return nil, newOpenSSLError("EVP_MD_CTX_new")
++	}
++	if C.go_openssl_EVP_MD_CTX_copy_ex(ctx, h.ctx) != 1 {
++		C.go_openssl_EVP_MD_CTX_free(ctx)
++		return nil, newOpenSSLError("EVP_MD_CTX_copy")
++	}
++	ctx2 := C.go_openssl_EVP_MD_CTX_new()
++	if ctx2 == nil {
++		C.go_openssl_EVP_MD_CTX_free(ctx)
++		return nil, newOpenSSLError("EVP_MD_CTX_new")
++	}
++	cloned := &evpHash{
++		ctx:          ctx,
++		ctx2:         ctx2,
++		size:         h.size,
++		blockSize:    h.blockSize,
++		marshallable: h.marshallable,
++	}
++	runtime.SetFinalizer(cloned, (*evpHash).finalize)
++	return cloned, nil
++}
++
 +// hashState returns a pointer to the internal hash structure.
 +//
 +// The EVP_MD_CTX memory layout has changed in OpenSSL 3
 +// and the property holding the internal structure is no longer md_data but algctx.
 +func (h *evpHash) hashState() unsafe.Pointer {
++	if !h.marshallable {
++		panic("openssl: hash state is not marshallable")
++	}
 +	switch vMajor {
 +	case 1:
 +		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
@@ -3132,7 +3557,7 @@ index 00000000000000..646b4ce295896c
 +// encoding.BinaryUnmarshaler.
 +func NewMD4() hash.Hash {
 +	return &md4Hash{
-+		evpHash: newEvpHash(crypto.MD4, 16, 64),
++		evpHash: newEvpHash(crypto.MD4),
 +	}
 +}
 +
@@ -3146,11 +3571,24 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *md4Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &md4Hash{evpHash: c}, nil
++}
++
 +// NewMD5 returns a new MD5 hash.
 +func NewMD5() hash.Hash {
-+	return &md5Hash{
-+		evpHash: newEvpHash(crypto.MD5, 16, 64),
++	h := md5Hash{evpHash: newEvpHash(crypto.MD5)}
++	if h.marshallable {
++		return &md5Marshal{h}
 +	}
++	return &h
 +}
 +
 +// md5State layout is taken from
@@ -3172,29 +3610,32 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *md5Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &md5Hash{evpHash: c}, nil
++}
++
 +const (
 +	md5Magic         = "md5\x01"
 +	md5MarshaledSize = len(md5Magic) + 4*4 + 64 + 8
 +)
 +
-+func (h *md5Hash) MarshalBinary() ([]byte, error) {
-+	d := (*md5State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/md5: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, md5MarshaledSize)
-+	b = append(b, md5Magic...)
-+	b = appendUint32(b, d.h[0])
-+	b = appendUint32(b, d.h[1])
-+	b = appendUint32(b, d.h[2])
-+	b = appendUint32(b, d.h[3])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return b, nil
++type md5Marshal struct {
++	md5Hash
++}
++
++func (h *md5Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, md5MarshaledSize)
++	return h.AppendBinary(buf)
 +}
 +
-+func (h *md5Hash) UnmarshalBinary(b []byte) error {
++func (h *md5Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(md5Magic) || string(b[:len(md5Magic)]) != md5Magic {
 +		return errors.New("crypto/md5: invalid hash state identifier")
 +	}
@@ -3218,11 +3659,30 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
++func (h *md5Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*md5State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/md5: can't retrieve hash state")
++	}
++
++	buf = append(buf, md5Magic...)
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
 +// NewSHA1 returns a new SHA1 hash.
 +func NewSHA1() hash.Hash {
-+	return &sha1Hash{
-+		evpHash: newEvpHash(crypto.SHA1, 20, 64),
++	h := sha1Hash{evpHash: newEvpHash(crypto.SHA1)}
++	if h.marshallable {
++		return &sha1Marshal{h}
 +	}
++	return &h
 +}
 +
 +type sha1Hash struct {
@@ -3235,6 +3695,17 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha1Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha1Hash{evpHash: c}, nil
++}
++
 +// sha1State layout is taken from
 +// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
 +type sha1State struct {
@@ -3249,25 +3720,16 @@ index 00000000000000..646b4ce295896c
 +	sha1MarshaledSize = len(sha1Magic) + 5*4 + 64 + 8
 +)
 +
-+func (h *sha1Hash) MarshalBinary() ([]byte, error) {
-+	d := (*sha1State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha1: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, sha1MarshaledSize)
-+	b = append(b, sha1Magic...)
-+	b = appendUint32(b, d.h[0])
-+	b = appendUint32(b, d.h[1])
-+	b = appendUint32(b, d.h[2])
-+	b = appendUint32(b, d.h[3])
-+	b = appendUint32(b, d.h[4])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return b, nil
++type sha1Marshal struct {
++	sha1Hash
++}
++
++func (h *sha1Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, sha1MarshaledSize)
++	return h.AppendBinary(buf)
 +}
 +
-+func (h *sha1Hash) UnmarshalBinary(b []byte) error {
++func (h *sha1Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(sha1Magic) || string(b[:len(sha1Magic)]) != sha1Magic {
 +		return errors.New("crypto/sha1: invalid hash state identifier")
 +	}
@@ -3292,11 +3754,30 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
++func (h *sha1Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*sha1State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/sha1: can't retrieve hash state")
++	}
++	buf = append(buf, sha1Magic...)
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
 +// NewSHA224 returns a new SHA224 hash.
 +func NewSHA224() hash.Hash {
-+	return &sha224Hash{
-+		evpHash: newEvpHash(crypto.SHA224, 224/8, 64),
++	h := sha224Hash{evpHash: newEvpHash(crypto.SHA224)}
++	if h.marshallable {
++		return &sha224Marshal{h}
 +	}
++	return &h
 +}
 +
 +type sha224Hash struct {
@@ -3309,11 +3790,24 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha224Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha224Hash{evpHash: c}, nil
++}
++
 +// NewSHA256 returns a new SHA256 hash.
 +func NewSHA256() hash.Hash {
-+	return &sha256Hash{
-+		evpHash: newEvpHash(crypto.SHA256, 256/8, 64),
++	h := sha256Hash{evpHash: newEvpHash(crypto.SHA256)}
++	if h.marshallable {
++		return &sha256Marshal{h}
 +	}
++	return &h
 +}
 +
 +type sha256Hash struct {
@@ -3326,6 +3820,17 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha256Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha256Hash{evpHash: c}, nil
++}
++
 +const (
 +	magic224         = "sha\x02"
 +	magic256         = "sha\x03"
@@ -3341,49 +3846,25 @@ index 00000000000000..646b4ce295896c
 +	nx     uint32
 +}
 +
-+func (h *sha224Hash) MarshalBinary() ([]byte, error) {
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, marshaledSize256)
-+	b = append(b, magic224...)
-+	b = appendUint32(b, d.h[0])
-+	b = appendUint32(b, d.h[1])
-+	b = appendUint32(b, d.h[2])
-+	b = appendUint32(b, d.h[3])
-+	b = appendUint32(b, d.h[4])
-+	b = appendUint32(b, d.h[5])
-+	b = appendUint32(b, d.h[6])
-+	b = appendUint32(b, d.h[7])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return b, nil
-+}
-+
-+func (h *sha256Hash) MarshalBinary() ([]byte, error) {
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, marshaledSize256)
-+	b = append(b, magic256...)
-+	b = appendUint32(b, d.h[0])
-+	b = appendUint32(b, d.h[1])
-+	b = appendUint32(b, d.h[2])
-+	b = appendUint32(b, d.h[3])
-+	b = appendUint32(b, d.h[4])
-+	b = appendUint32(b, d.h[5])
-+	b = appendUint32(b, d.h[6])
-+	b = appendUint32(b, d.h[7])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return b, nil
-+}
-+
-+func (h *sha224Hash) UnmarshalBinary(b []byte) error {
++type sha224Marshal struct {
++	sha224Hash
++}
++
++type sha256Marshal struct {
++	sha256Hash
++}
++
++func (h *sha224Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, marshaledSize256)
++	return h.AppendBinary(buf)
++}
++
++func (h *sha256Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, marshaledSize256)
++	return h.AppendBinary(buf)
++}
++
++func (h *sha224Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(magic224) || string(b[:len(magic224)]) != magic224 {
 +		return errors.New("crypto/sha256: invalid hash state identifier")
 +	}
@@ -3411,7 +3892,7 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
-+func (h *sha256Hash) UnmarshalBinary(b []byte) error {
++func (h *sha256Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(magic256) || string(b[:len(magic256)]) != magic256 {
 +		return errors.New("crypto/sha256: invalid hash state identifier")
 +	}
@@ -3439,11 +3920,53 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
++func (h *sha224Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*sha256State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/sha256: can't retrieve hash state")
++	}
++	buf = append(buf, magic224...)
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = appendUint32(buf, d.h[5])
++	buf = appendUint32(buf, d.h[6])
++	buf = appendUint32(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
++func (h *sha256Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*sha256State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/sha256: can't retrieve hash state")
++	}
++	buf = append(buf, magic256...)
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = appendUint32(buf, d.h[5])
++	buf = appendUint32(buf, d.h[6])
++	buf = appendUint32(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
 +// NewSHA384 returns a new SHA384 hash.
 +func NewSHA384() hash.Hash {
-+	return &sha384Hash{
-+		evpHash: newEvpHash(crypto.SHA384, 384/8, 128),
++	h := sha384Hash{evpHash: newEvpHash(crypto.SHA384)}
++	if h.marshallable {
++		return &sha384Marshal{h}
 +	}
++	return &h
 +}
 +
 +type sha384Hash struct {
@@ -3456,11 +3979,24 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha384Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha384Hash{evpHash: c}, nil
++}
++
 +// NewSHA512 returns a new SHA512 hash.
 +func NewSHA512() hash.Hash {
-+	return &sha512Hash{
-+		evpHash: newEvpHash(crypto.SHA512, 512/8, 128),
++	h := sha512Hash{evpHash: newEvpHash(crypto.SHA512)}
++	if h.marshallable {
++		return &sha512Marshal{h}
 +	}
++	return &h
 +}
 +
 +type sha512Hash struct {
@@ -3473,6 +4009,17 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha512Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha512Hash{evpHash: c}, nil
++}
++
 +// sha512State layout is taken from
 +// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
 +type sha512State struct {
@@ -3490,49 +4037,25 @@ index 00000000000000..646b4ce295896c
 +	marshaledSize512 = len(magic512) + 8*8 + 128 + 8
 +)
 +
-+func (h *sha384Hash) MarshalBinary() ([]byte, error) {
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, marshaledSize512)
-+	b = append(b, magic384...)
-+	b = appendUint64(b, d.h[0])
-+	b = appendUint64(b, d.h[1])
-+	b = appendUint64(b, d.h[2])
-+	b = appendUint64(b, d.h[3])
-+	b = appendUint64(b, d.h[4])
-+	b = appendUint64(b, d.h[5])
-+	b = appendUint64(b, d.h[6])
-+	b = appendUint64(b, d.h[7])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, d.nl>>3|d.nh<<61)
-+	return b, nil
-+}
-+
-+func (h *sha512Hash) MarshalBinary() ([]byte, error) {
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	b := make([]byte, 0, marshaledSize512)
-+	b = append(b, magic512...)
-+	b = appendUint64(b, d.h[0])
-+	b = appendUint64(b, d.h[1])
-+	b = appendUint64(b, d.h[2])
-+	b = appendUint64(b, d.h[3])
-+	b = appendUint64(b, d.h[4])
-+	b = appendUint64(b, d.h[5])
-+	b = appendUint64(b, d.h[6])
-+	b = appendUint64(b, d.h[7])
-+	b = append(b, d.x[:d.nx]...)
-+	b = b[:len(b)+len(d.x)-int(d.nx)] // already zero
-+	b = appendUint64(b, d.nl>>3|d.nh<<61)
-+	return b, nil
-+}
-+
-+func (h *sha384Hash) UnmarshalBinary(b []byte) error {
++type sha384Marshal struct {
++	sha384Hash
++}
++
++type sha512Marshal struct {
++	sha512Hash
++}
++
++func (h *sha384Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, marshaledSize512)
++	return h.AppendBinary(buf)
++}
++
++func (h *sha512Marshal) MarshalBinary() ([]byte, error) {
++	buf := make([]byte, 0, marshaledSize512)
++	return h.AppendBinary(buf)
++}
++
++func (h *sha384Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(magic512) {
 +		return errors.New("crypto/sha512: invalid hash state identifier")
 +	}
@@ -3563,7 +4086,7 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
-+func (h *sha512Hash) UnmarshalBinary(b []byte) error {
++func (h *sha512Marshal) UnmarshalBinary(b []byte) error {
 +	if len(b) < len(magic512) {
 +		return errors.New("crypto/sha512: invalid hash state identifier")
 +	}
@@ -3594,10 +4117,50 @@ index 00000000000000..646b4ce295896c
 +	return nil
 +}
 +
++func (h *sha384Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*sha512State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/sha512: can't retrieve hash state")
++	}
++	buf = append(buf, magic384...)
++	buf = appendUint64(buf, d.h[0])
++	buf = appendUint64(buf, d.h[1])
++	buf = appendUint64(buf, d.h[2])
++	buf = appendUint64(buf, d.h[3])
++	buf = appendUint64(buf, d.h[4])
++	buf = appendUint64(buf, d.h[5])
++	buf = appendUint64(buf, d.h[6])
++	buf = appendUint64(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
++	return buf, nil
++}
++
++func (h *sha512Marshal) AppendBinary(buf []byte) ([]byte, error) {
++	d := (*sha512State)(h.hashState())
++	if d == nil {
++		return nil, errors.New("crypto/sha512: can't retrieve hash state")
++	}
++	buf = append(buf, magic512...)
++	buf = appendUint64(buf, d.h[0])
++	buf = appendUint64(buf, d.h[1])
++	buf = appendUint64(buf, d.h[2])
++	buf = appendUint64(buf, d.h[3])
++	buf = appendUint64(buf, d.h[4])
++	buf = appendUint64(buf, d.h[5])
++	buf = appendUint64(buf, d.h[6])
++	buf = appendUint64(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
++	return buf, nil
++}
++
 +// NewSHA3_224 returns a new SHA3-224 hash.
 +func NewSHA3_224() hash.Hash {
 +	return &sha3_224Hash{
-+		evpHash: newEvpHash(crypto.SHA3_224, 224/8, 64),
++		evpHash: newEvpHash(crypto.SHA3_224),
 +	}
 +}
 +
@@ -3611,10 +4174,21 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha3_224Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha3_224Hash{evpHash: c}, nil
++}
++
 +// NewSHA3_256 returns a new SHA3-256 hash.
 +func NewSHA3_256() hash.Hash {
 +	return &sha3_256Hash{
-+		evpHash: newEvpHash(crypto.SHA3_256, 256/8, 64),
++		evpHash: newEvpHash(crypto.SHA3_256),
 +	}
 +}
 +
@@ -3628,10 +4202,21 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha3_256Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha3_256Hash{evpHash: c}, nil
++}
++
 +// NewSHA3_384 returns a new SHA3-384 hash.
 +func NewSHA3_384() hash.Hash {
 +	return &sha3_384Hash{
-+		evpHash: newEvpHash(crypto.SHA3_384, 384/8, 128),
++		evpHash: newEvpHash(crypto.SHA3_384),
 +	}
 +}
 +
@@ -3645,10 +4230,21 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha3_384Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha3_384Hash{evpHash: c}, nil
++}
++
 +// NewSHA3_512 returns a new SHA3-512 hash.
 +func NewSHA3_512() hash.Hash {
 +	return &sha3_512Hash{
-+		evpHash: newEvpHash(crypto.SHA3_512, 512/8, 128),
++		evpHash: newEvpHash(crypto.SHA3_512),
 +	}
 +}
 +
@@ -3662,6 +4258,17 @@ index 00000000000000..646b4ce295896c
 +	return append(in, h.out[:]...)
 +}
 +
++// Clone returns a new [hash.Hash] object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *sha3_512Hash) Clone() (hash.Hash, error) {
++	c, err := h.clone()
++	if err != nil {
++		return nil, err
++	}
++	return &sha3_512Hash{evpHash: c}, nil
++}
++
 +// appendUint64 appends x into b as a big endian byte sequence.
 +func appendUint64(b []byte, x uint64) []byte {
 +	return append(b,
@@ -3697,10 +4304,10 @@ index 00000000000000..646b4ce295896c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..61cf483fed2cf4
+index 00000000000000..2e4323cc247a78
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,174 @@
+@@ -0,0 +1,190 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3715,8 +4322,24 @@ index 00000000000000..61cf483fed2cf4
 +	"unsafe"
 +)
 +
++// SupprtHKDF reports whether the current OpenSSL version supports HKDF.
 +func SupportsHKDF() bool {
-+	return versionAtOrAbove(1, 1, 1)
++	switch vMajor {
++	case 1:
++		return versionAtOrAbove(1, 1, 1)
++	case 3:
++		// Some OpenSSL 3 providers don't support HKDF or don't support it via
++		// the EVP_PKEY API, which is the one we use.
++		// See https://github.com/golang-fips/openssl/issues/189.
++		ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_HKDF, nil)
++		if ctx == nil {
++			return false
++		}
++		C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		return true
++	default:
++		panic(errUnsupportedVersion())
++	}
 +}
 +
 +func newHKDF(h func() hash.Hash, mode C.int) (*hkdf, error) {
@@ -3877,10 +4500,10 @@ index 00000000000000..61cf483fed2cf4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..ef8116ce666bd6
+index 00000000000000..02d0d3732b9b61
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,238 @@
+@@ -0,0 +1,276 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3894,12 +4517,7 @@ index 00000000000000..ef8116ce666bd6
 +	"unsafe"
 +)
 +
-+var paramDigest = C.CString("digest")
-+
-+var (
-+	fetchHMACOnce sync.Once
-+	evpHMAC       C.GO_EVP_MAC_PTR
-+)
++var OSSL_MAC_PARAM_DIGEST = C.CString("digest")
 +
 +// NewHMAC returns a new HMAC using OpenSSL.
 +// The function h must return a hash implemented by
@@ -3921,14 +4539,29 @@ index 00000000000000..ef8116ce666bd6
 +		key = make([]byte, C.GO_EVP_MAX_MD_SIZE)
 +	}
 +
++	hmac := &opensslHMAC{
++		size:      ch.Size(),
++		blockSize: ch.BlockSize(),
++	}
++
 +	switch vMajor {
 +	case 1:
-+		return newHMAC1(key, ch, md)
++		ctx := newHMAC1(key, md)
++		if ctx.ctx == nil {
++			return nil
++		}
++		hmac.ctx1 = ctx
 +	case 3:
-+		return newHMAC3(key, ch, md)
++		ctx := newHMAC3(key, md)
++		if ctx.ctx == nil {
++			return nil
++		}
++		hmac.ctx3 = ctx
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
++	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
++	return hmac
 +}
 +
 +// hmacCtx3 is used for OpenSSL 1.
@@ -3950,7 +4583,7 @@ index 00000000000000..ef8116ce666bd6
 +	sum       []byte
 +}
 +
-+func newHMAC1(key []byte, h hash.Hash, md C.GO_EVP_MD_PTR) *opensslHMAC {
++func newHMAC1(key []byte, md C.GO_EVP_MD_PTR) hmacCtx1 {
 +	ctx := hmacCtxNew()
 +	if ctx == nil {
 +		panic("openssl: EVP_MAC_CTX_new failed")
@@ -3958,42 +4591,76 @@ index 00000000000000..ef8116ce666bd6
 +	if C.go_openssl_HMAC_Init_ex(ctx, unsafe.Pointer(&key[0]), C.int(len(key)), md, nil) == 0 {
 +		panic(newOpenSSLError("HMAC_Init_ex failed"))
 +	}
-+	hmac := &opensslHMAC{
-+		size:      h.Size(),
-+		blockSize: h.BlockSize(),
-+		ctx1:      hmacCtx1{ctx},
-+	}
-+	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
-+	return hmac
++	return hmacCtx1{ctx}
 +}
 +
-+func newHMAC3(key []byte, h hash.Hash, md C.GO_EVP_MD_PTR) *opensslHMAC {
-+	fetchHMACOnce.Do(func() {
-+		name := C.CString("HMAC")
-+		evpHMAC = C.go_openssl_EVP_MAC_fetch(nil, name, nil)
-+		C.free(unsafe.Pointer(name))
-+	})
-+	if evpHMAC == nil {
++var hmacDigestsSupported sync.Map
++var fetchHMAC3 = sync.OnceValue(func() C.GO_EVP_MAC_PTR {
++	name := C.CString("HMAC")
++	mac := C.go_openssl_EVP_MAC_fetch(nil, name, nil)
++	C.free(unsafe.Pointer(name))
++	if mac == nil {
 +		panic("openssl: HMAC not supported")
 +	}
-+	ctx := C.go_openssl_EVP_MAC_CTX_new(evpHMAC)
-+	if ctx == nil {
-+		panic("openssl: EVP_MAC_CTX_new failed")
-+	}
-+	digest := C.go_openssl_EVP_MD_get0_name(md)
++	return mac
++})
++
++func buildHMAC3Params(digest *C.char) C.GO_OSSL_PARAM_PTR {
 +	bld := C.go_openssl_OSSL_PARAM_BLD_new()
 +	if bld == nil {
 +		panic(newOpenSSLError("OSSL_PARAM_BLD_new"))
 +	}
 +	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, paramDigest, digest, 0)
-+	params := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
++	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_MAC_PARAM_DIGEST, digest, 0)
++	return C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
++}
++
++func isHMAC3DigestSupported(digest string) bool {
++	if v, ok := hmacDigestsSupported.Load(digest); ok {
++		return v.(bool)
++	}
++	ctx := C.go_openssl_EVP_MAC_CTX_new(fetchHMAC3())
++	if ctx == nil {
++		panic(newOpenSSLError("EVP_MAC_CTX_new"))
++	}
++	defer C.go_openssl_EVP_MAC_CTX_free(ctx)
++
++	cdigest := C.CString(digest)
++	defer C.free(unsafe.Pointer(cdigest))
++	params := buildHMAC3Params(cdigest)
 +	if params == nil {
 +		panic(newOpenSSLError("OSSL_PARAM_BLD_to_param"))
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
++
++	supported := C.go_openssl_EVP_MAC_CTX_set_params(ctx, params) != 0
++	hmacDigestsSupported.Store(digest, supported)
++	return supported
++}
++
++func newHMAC3(key []byte, md C.GO_EVP_MD_PTR) hmacCtx3 {
++	digest := C.go_openssl_EVP_MD_get0_name(md)
++	if !isHMAC3DigestSupported(C.GoString(digest)) {
++		// The digest is not supported by the HMAC provider.
++		// Don't panic here so the Go standard library to
++		// fall back to the Go implementation.
++		// See https://github.com/golang-fips/openssl/issues/153.
++		return hmacCtx3{}
++	}
++	params := buildHMAC3Params(digest)
++	if params == nil {
++		panic(newOpenSSLError("OSSL_PARAM_BLD_to_param"))
++	}
++	defer C.go_openssl_OSSL_PARAM_free(params)
++
++	ctx := C.go_openssl_EVP_MAC_CTX_new(fetchHMAC3())
++	if ctx == nil {
++		panic(newOpenSSLError("EVP_MAC_CTX_new"))
++	}
++
 +	if C.go_openssl_EVP_MAC_init(ctx, base(key), C.size_t(len(key)), params) == 0 {
-+		panic(newOpenSSLError("EVP_MAC_init failed"))
++		C.go_openssl_EVP_MAC_CTX_free(ctx)
++		panic(newOpenSSLError("EVP_MAC_init"))
 +	}
 +	var hkey []byte
 +	if vMinor == 0 && vPatch <= 2 {
@@ -4005,13 +4672,7 @@ index 00000000000000..ef8116ce666bd6
 +		hkey = make([]byte, len(key))
 +		copy(hkey, key)
 +	}
-+	hmac := &opensslHMAC{
-+		size:      h.Size(),
-+		blockSize: h.BlockSize(),
-+		ctx3:      hmacCtx3{ctx, hkey},
-+	}
-+	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
-+	return hmac
++	return hmacCtx3{ctx, hkey}
 +}
 +
 +func (h *opensslHMAC) Reset() {
@@ -4270,10 +4931,10 @@ index 00000000000000..3778e21227abb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..691bb16f728c9d
+index 00000000000000..1562cee2685bc8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,419 @@
+@@ -0,0 +1,434 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -4353,6 +5014,13 @@ index 00000000000000..691bb16f728c9d
 +	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
 +}
 +
++// checkMajorVersion panics if the current major version is not expected.
++func checkMajorVersion(expected uint) {
++	if vMajor != expected {
++		panic("openssl: incorrect major version (" + strconv.Itoa(int(vMajor)) + "), expected " + strconv.Itoa(int(expected)))
++	}
++}
++
 +type fail string
 +
 +func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
@@ -4387,6 +5055,14 @@ index 00000000000000..691bb16f728c9d
 +	}
 +}
 +
++// isProviderAvailable checks if the provider with the given name is available.
++// This function is used in export_test.go, but must be defined here as test files can't access C functions.
++func isProviderAvailable(name string) bool {
++	providerName := C.CString(name)
++	defer C.free(unsafe.Pointer(providerName))
++	return C.go_openssl_OSSL_PROVIDER_available(nil, providerName) == 1
++}
++
 +// SetFIPS enables or disables FIPS mode.
 +//
 +// For OpenSSL 3, the `fips` provider is loaded if enabled is true,
@@ -4566,7 +5242,7 @@ index 00000000000000..691bb16f728c9d
 +func (z BigInt) byteSwap() {
 +	for i, d := range z {
 +		var n uint = 0
-+		for j := 0; j < wordBytes; j++ {
++		for j := range wordBytes {
 +			n |= uint(byte(d)) << (8 * (wordBytes - j - 1))
 +			d >>= 8
 +		}
@@ -4668,7 +5344,7 @@ index 00000000000000..691bb16f728c9d
 +		if pad < 0 {
 +			return errors.New("openssl: destination buffer too small")
 +		}
-+		for i := 0; i < pad; i++ {
++		for i := range pad {
 +			to[i] = 0
 +		}
 +		if int(C.go_openssl_BN_bn2bin(bn, base(to[pad:]))) != n {
@@ -4727,6 +5403,98 @@ index 00000000000000..a895eab2d54767
 +	}
 +	return out, nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c b/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
+new file mode 100644
+index 00000000000000..5a948eafdbc6a7
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
+@@ -0,0 +1,85 @@
++// The following is a partial backport of crypto/dsa/dsa_lockl.h
++// and crypto/dsa/dsa_lib.c, commit cbc8a839959418d8a2c2e3ec6bdf394852c9501e
++// on the OpenSSL_1_1_0-stable branch. Only pqg and key getters/setters
++// are backported.
++
++#include "goopenssl.h"
++
++struct dsa_st
++{
++    int _ignored0;
++    long _ignored1;
++    int _ignored2;
++    GO_BIGNUM_PTR p;
++    GO_BIGNUM_PTR q;
++    GO_BIGNUM_PTR g;
++    GO_BIGNUM_PTR pub_key;
++    GO_BIGNUM_PTR priv_key;
++    // The following members are not used by our backport,
++    // so we don't define them here.
++};
++
++void go_openssl_DSA_get0_pqg_backport(const GO_DSA_PTR dsa,
++                  GO_BIGNUM_PTR *p, GO_BIGNUM_PTR *q, GO_BIGNUM_PTR *g)
++{
++    const struct dsa_st *d = dsa;
++    if (p != NULL)
++        *p = d->p;
++    if (q != NULL)
++        *q = d->q;
++    if (g != NULL)
++        *g = d->g;
++}
++
++int go_openssl_DSA_set0_pqg_backport(GO_DSA_PTR dsa,
++                  GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g)
++{
++    struct dsa_st *d = dsa;
++    if ((d->p == NULL && p == NULL)
++        || (d->q == NULL && q == NULL)
++        || (d->g == NULL && g == NULL))
++        return 0;
++
++    if (p != NULL) {
++        go_openssl_BN_free(d->p);
++        d->p = p;
++    }
++    if (q != NULL) {
++        go_openssl_BN_free(d->q);
++        d->q = q;
++    }
++    if (g != NULL) {
++        go_openssl_BN_free(d->g);
++        d->g = g;
++    }
++
++    return 1;
++}
++
++void go_openssl_DSA_get0_key_backport(const GO_DSA_PTR dsa,
++                  GO_BIGNUM_PTR *pub_key, GO_BIGNUM_PTR *priv_key)
++{
++    const struct dsa_st *d = dsa;
++    if (pub_key != NULL)
++        *pub_key = d->pub_key;
++    if (priv_key != NULL)
++        *priv_key = d->priv_key;
++}
++
++int go_openssl_DSA_set0_key_backport(GO_DSA_PTR dsa, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key)
++{
++    struct dsa_st *d = dsa;
++    if (d->pub_key == NULL && pub_key == NULL)
++        return 0;
++
++    if (pub_key != NULL) {
++        go_openssl_BN_free(d->pub_key);
++        d->pub_key = pub_key;
++    }
++    if (priv_key != NULL) {
++        go_openssl_BN_free(d->priv_key);
++        d->priv_key = priv_key;
++    }
++
++    return 1;
++}
+\ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c b/src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
 new file mode 100644
 index 00000000000000..50d49b1f103351
@@ -4959,10 +5727,10 @@ index 00000000000000..f88150591eceb6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..f28d323adcbb3a
+index 00000000000000..4e45b02d88afc0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,435 @@
+@@ -0,0 +1,443 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4979,14 +5747,14 @@ index 00000000000000..f28d323adcbb3a
 +)
 +
 +var (
-+	paramRSA_N    = C.CString("n")
-+	paramRSA_E    = C.CString("e")
-+	paramRSA_D    = C.CString("d")
-+	paramRSA_P    = C.CString("rsa-factor1")
-+	paramRSA_Q    = C.CString("rsa-factor2")
-+	paramRSA_Dp   = C.CString("rsa-exponent1")
-+	paramRSA_Dq   = C.CString("rsa-exponent2")
-+	paramRSA_Qinv = C.CString("rsa-coefficient1")
++	OSSL_PKEY_PARAM_RSA_N            = C.CString("n")
++	OSSL_PKEY_PARAM_RSA_E            = C.CString("e")
++	OSSL_PKEY_PARAM_RSA_D            = C.CString("d")
++	OSSL_PKEY_PARAM_RSA_FACTOR1      = C.CString("rsa-factor1")
++	OSSL_PKEY_PARAM_RSA_FACTOR2      = C.CString("rsa-factor2")
++	OSSL_PKEY_PARAM_RSA_EXPONENT1    = C.CString("rsa-exponent1")
++	OSSL_PKEY_PARAM_RSA_EXPONENT2    = C.CString("rsa-exponent2")
++	OSSL_PKEY_PARAM_RSA_COEFFICIENT1 = C.CString("rsa-coefficient1")
 +)
 +
 +func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
@@ -5038,14 +5806,14 @@ index 00000000000000..f28d323adcbb3a
 +			C.go_openssl_BN_clear(tmp)
 +			return true
 +		}
-+		if !(setBigInt(&N, paramRSA_N) &&
-+			setBigInt(&E, paramRSA_E) &&
-+			setBigInt(&D, paramRSA_D) &&
-+			setBigInt(&P, paramRSA_P) &&
-+			setBigInt(&Q, paramRSA_Q) &&
-+			setBigInt(&Dp, paramRSA_Dp) &&
-+			setBigInt(&Dq, paramRSA_Dq) &&
-+			setBigInt(&Qinv, paramRSA_Qinv)) {
++		if !(setBigInt(&N, OSSL_PKEY_PARAM_RSA_N) &&
++			setBigInt(&E, OSSL_PKEY_PARAM_RSA_E) &&
++			setBigInt(&D, OSSL_PKEY_PARAM_RSA_D) &&
++			setBigInt(&P, OSSL_PKEY_PARAM_RSA_FACTOR1) &&
++			setBigInt(&Q, OSSL_PKEY_PARAM_RSA_FACTOR2) &&
++			setBigInt(&Dp, OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
++			setBigInt(&Dq, OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
++			setBigInt(&Qinv, OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
 +			return bad(err)
 +		}
 +	default:
@@ -5059,7 +5827,7 @@ index 00000000000000..f28d323adcbb3a
 +	_pkey C.GO_EVP_PKEY_PTR
 +}
 +
-+func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) {
++func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
 +	var pkey C.GO_EVP_PKEY_PTR
 +	switch vMajor {
 +	case 1:
@@ -5067,7 +5835,7 @@ index 00000000000000..f28d323adcbb3a
 +		if key == nil {
 +			return nil, newOpenSSLError("RSA_new failed")
 +		}
-+		if !rsaSetKey(key, N, E, nil) {
++		if !rsaSetKey(key, n, e, nil) {
 +			return nil, fail("RSA_set0_key")
 +		}
 +		pkey = C.go_openssl_EVP_PKEY_new()
@@ -5082,7 +5850,7 @@ index 00000000000000..f28d323adcbb3a
 +		}
 +	case 3:
 +		var err error
-+		if pkey, err = newRSAKey3(false, N, E, nil, nil, nil, nil, nil, nil); err != nil {
++		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
 +			return nil, err
 +		}
 +	default:
@@ -5110,7 +5878,7 @@ index 00000000000000..f28d323adcbb3a
 +	_pkey C.GO_EVP_PKEY_PTR
 +}
 +
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
++func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
 +	var pkey C.GO_EVP_PKEY_PTR
 +	switch vMajor {
 +	case 1:
@@ -5118,16 +5886,16 @@ index 00000000000000..f28d323adcbb3a
 +		if key == nil {
 +			return nil, newOpenSSLError("RSA_new failed")
 +		}
-+		if !rsaSetKey(key, N, E, D) {
++		if !rsaSetKey(key, n, e, d) {
 +			return nil, fail("RSA_set0_key")
 +		}
-+		if P != nil && Q != nil {
-+			if !rsaSetFactors(key, P, Q) {
++		if p != nil && q != nil {
++			if !rsaSetFactors(key, p, q) {
 +				return nil, fail("RSA_set0_factors")
 +			}
 +		}
-+		if Dp != nil && Dq != nil && Qinv != nil {
-+			if !rsaSetCRTParams(key, Dp, Dq, Qinv) {
++		if dp != nil && dq != nil && qinv != nil {
++			if !rsaSetCRTParams(key, dp, dq, qinv) {
 +				return nil, fail("RSA_set0_crt_params")
 +			}
 +		}
@@ -5143,7 +5911,7 @@ index 00000000000000..f28d323adcbb3a
 +		}
 +	case 3:
 +		var err error
-+		if pkey, err = newRSAKey3(true, N, E, D, P, Q, Dp, Dq, Qinv); err != nil {
++		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
 +			return nil, err
 +		}
 +	default:
@@ -5299,7 +6067,7 @@ index 00000000000000..f28d323adcbb3a
 +func rsaSetKey(key C.GO_RSA_PTR, n, e, d BigInt) bool {
 +	if vMajor == 1 && vMinor == 0 {
 +		r := (*rsa_st_1_0_2)(unsafe.Pointer(key))
-+		//r.d and d will be nil for public keys.
++		// r.d and d will be nil for public keys.
 +		if (r.n == nil && n == nil) ||
 +			(r.e == nil && e == nil) {
 +			return false
@@ -5341,8 +6109,7 @@ index 00000000000000..f28d323adcbb3a
 +	}
 +	return C.go_openssl_RSA_set0_crt_params(key, bigToBN(dmp1), bigToBN(dmq1), bigToBN(iqmp)) == 1
 +}
-+
-+func newRSAKey3(isPriv bool, N, E, D, P, Q, Dp, Dq, Qinv BigInt) (C.GO_EVP_PKEY_PTR, error) {
++func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (C.GO_EVP_PKEY_PTR, error) {
 +	// Construct the parameters.
 +	bld := C.go_openssl_OSSL_PARAM_BLD_new()
 +	if bld == nil {
@@ -5350,7 +6117,7 @@ index 00000000000000..f28d323adcbb3a
 +	}
 +	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
 +
-+	type bigIntParam struct{
++	type bigIntParam struct {
 +		name *C.char
 +		num  BigInt
 +	}
@@ -5358,19 +6125,28 @@ index 00000000000000..f28d323adcbb3a
 +	comps := make([]bigIntParam, 0, 8)
 +
 +	required := [...]bigIntParam{
-+		{paramRSA_N, N}, {paramRSA_E, E}, {paramRSA_D, D},
++		{OSSL_PKEY_PARAM_RSA_N, n}, {OSSL_PKEY_PARAM_RSA_E, e}, {OSSL_PKEY_PARAM_RSA_D, d},
 +	}
 +	comps = append(comps, required[:]...)
 +
-+	// OpenSSL 3.0 and 3.1 required all the precomputed values if
-+	// P and Q are present. See:
-+	// https://github.com/openssl/openssl/pull/22334
-+	if P != nil && Q != nil && Dp != nil && Dq != nil && Qinv != nil {
-+		precomputed := [...]bigIntParam{
-+			{paramRSA_P, P}, {paramRSA_Q, Q},
-+			{paramRSA_Dp, Dp}, {paramRSA_Dq, Dq}, {paramRSA_Qinv, Qinv},
++	if p != nil && q != nil {
++		allPrecomputedExists := dp != nil && dq != nil && qinv != nil
++		// The precomputed values should only be passed if P and Q are present
++		// and every precomputed value is present. (If any precomputed value is
++		// missing, don't pass any of them.)
++		//
++		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
++		// value is missing. See https://github.com/openssl/openssl/pull/22334
++		if vMinor >= 2 || allPrecomputedExists {
++			comps = append(comps, bigIntParam{OSSL_PKEY_PARAM_RSA_FACTOR1, p}, bigIntParam{OSSL_PKEY_PARAM_RSA_FACTOR2, q})
++		}
++		if allPrecomputedExists {
++			comps = append(comps,
++				bigIntParam{OSSL_PKEY_PARAM_RSA_EXPONENT1, dp},
++				bigIntParam{OSSL_PKEY_PARAM_RSA_EXPONENT2, dq},
++				bigIntParam{OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv},
++			)
 +		}
-+		comps = append(comps, precomputed[:]...)
 +	}
 +
 +	for _, comp := range comps {
@@ -5400,10 +6176,10 @@ index 00000000000000..f28d323adcbb3a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
 new file mode 100644
-index 00000000000000..99656f0cf20a36
+index 00000000000000..2370b6cc128f5e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-@@ -0,0 +1,371 @@
+@@ -0,0 +1,392 @@
 +#include <stdlib.h> // size_t
 +#include <stdint.h> // uint64_t
 +
@@ -5425,9 +6201,10 @@ index 00000000000000..99656f0cf20a36
 +    GO_EVP_PKEY_TLS1_PRF = 1021,
 +    GO_EVP_PKEY_HKDF = 1036,
 +    GO_EVP_PKEY_ED25519 = 1087,
++    GO_EVP_PKEY_DSA = 116,
 +    /* This is defined differently in OpenSSL 3 (1 << 11), but in our
 +     * code it is only used in OpenSSL 1.
-+    */
++     */
 +    GO1_EVP_PKEY_OP_DERIVE = (1 << 10),
 +    GO_EVP_MAX_MD_SIZE = 64,
 +
@@ -5482,7 +6259,9 @@ index 00000000000000..99656f0cf20a36
 +    GO_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
 +    GO_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
 +    GO_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
-+    GO_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A
++    GO_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
++    GO_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
++    GO_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002
 +};
 +
 +typedef void* GO_OPENSSL_INIT_SETTINGS_PTR;
@@ -5508,6 +6287,7 @@ index 00000000000000..99656f0cf20a36
 +typedef void* GO_OSSL_PARAM_PTR;
 +typedef void* GO_CRYPTO_THREADID_PTR;
 +typedef void* GO_EVP_SIGNATURE_PTR;
++typedef void* GO_DSA_PTR;
 +
 +// #include <openssl/md5.h>
 +typedef void* GO_MD5_CTX_PTR;
@@ -5564,6 +6344,7 @@ index 00000000000000..99656f0cf20a36
 +// #include <openssl/ec.h>
 +// #include <openssl/rand.h>
 +// #include <openssl/evp.h>
++// #include <openssl/dsa.h>
 +// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
 +// #include <openssl/provider.h>
 +// #include <openssl/param_build.h>
@@ -5596,13 +6377,17 @@ index 00000000000000..99656f0cf20a36
 +DEFINEFUNC_3_0(int, EVP_default_properties_enable_fips, (GO_OSSL_LIB_CTX_PTR libctx, int enable), (libctx, enable)) \
 +DEFINEFUNC_3_0(int, OSSL_PROVIDER_available, (GO_OSSL_LIB_CTX_PTR libctx, const char *name), (libctx, name)) \
 +DEFINEFUNC_3_0(GO_OSSL_PROVIDER_PTR, OSSL_PROVIDER_load, (GO_OSSL_LIB_CTX_PTR libctx, const char *name), (libctx, name)) \
++DEFINEFUNC_3_0(const char *, OSSL_PROVIDER_get0_name, (const GO_OSSL_PROVIDER_PTR prov), (prov)) \
 +DEFINEFUNC_3_0(GO_EVP_MD_PTR, EVP_MD_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
 +DEFINEFUNC_3_0(void, EVP_MD_free, (GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC_3_0(const char *, EVP_MD_get0_name, (const GO_EVP_MD_PTR md), (md)) \
++DEFINEFUNC_3_0(const GO_OSSL_PROVIDER_PTR, EVP_MD_get0_provider, (const GO_EVP_MD_PTR md), (md)) \
++DEFINEFUNC_RENAMED_3_0(int, EVP_MD_get_block_size, EVP_MD_block_size, (const GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC(int, RAND_bytes, (unsigned char *arg0, int arg1), (arg0, arg1)) \
 +DEFINEFUNC_RENAMED_1_1(GO_EVP_MD_CTX_PTR, EVP_MD_CTX_new, EVP_MD_CTX_create, (void), ()) \
 +DEFINEFUNC_RENAMED_1_1(void, EVP_MD_CTX_free, EVP_MD_CTX_destroy, (GO_EVP_MD_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC(int, EVP_MD_CTX_copy, (GO_EVP_MD_CTX_PTR out, const GO_EVP_MD_CTX_PTR in), (out, in)) \
++DEFINEFUNC(int, EVP_MD_CTX_copy_ex, (GO_EVP_MD_CTX_PTR out, const GO_EVP_MD_CTX_PTR in), (out, in)) \
 +DEFINEFUNC(int, EVP_Digest, (const void *data, size_t count, unsigned char *md, unsigned int *size, const GO_EVP_MD_PTR type, GO_ENGINE_PTR impl), (data, count, md, size, type, impl)) \
 +DEFINEFUNC(int, EVP_DigestInit_ex, (GO_EVP_MD_CTX_PTR ctx, const GO_EVP_MD_PTR type, GO_ENGINE_PTR impl), (ctx, type, impl)) \
 +DEFINEFUNC(int, EVP_DigestInit, (GO_EVP_MD_CTX_PTR ctx, const GO_EVP_MD_PTR type), (ctx, type)) \
@@ -5686,6 +6471,9 @@ index 00000000000000..99656f0cf20a36
 +DEFINEFUNC(int, EVP_PKEY_verify, (GO_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen), (ctx, sig, siglen, tbs, tbslen)) \
 +DEFINEFUNC(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new, (GO_EVP_PKEY_PTR arg0, GO_ENGINE_PTR arg1), (arg0, arg1)) \
 +DEFINEFUNC(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new_id, (int id, GO_ENGINE_PTR e), (id, e)) \
++DEFINEFUNC_3_0(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new_from_pkey, (GO_OSSL_LIB_CTX_PTR libctx, GO_EVP_PKEY_PTR pkey, const char *propquery), (libctx, pkey, propquery)) \
++DEFINEFUNC(int, EVP_PKEY_paramgen_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
++DEFINEFUNC(int, EVP_PKEY_paramgen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
 +DEFINEFUNC(int, EVP_PKEY_keygen_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC(int, EVP_PKEY_keygen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
 +DEFINEFUNC(void, EVP_PKEY_CTX_free, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
@@ -5702,6 +6490,7 @@ index 00000000000000..99656f0cf20a36
 +DEFINEFUNC(int, EVP_PKEY_derive, (GO_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen), (ctx, key, keylen)) \
 +DEFINEFUNC_LEGACY_1_0(void*, EVP_PKEY_get0, (GO_EVP_PKEY_PTR pkey), (pkey)) \
 +DEFINEFUNC_LEGACY_1_1(GO_EC_KEY_PTR, EVP_PKEY_get0_EC_KEY, (GO_EVP_PKEY_PTR pkey), (pkey)) \
++DEFINEFUNC_LEGACY_1_1(GO_DSA_PTR, EVP_PKEY_get0_DSA, (GO_EVP_PKEY_PTR pkey), (pkey)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_fromdata_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_fromdata, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *pkey, int selection, GO_OSSL_PARAM_PTR params), (ctx, pkey, selection, params)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_set1_encoded_public_key, (GO_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen), (pkey, pub, publen)) \
@@ -5746,6 +6535,7 @@ index 00000000000000..99656f0cf20a36
 +DEFINEFUNC(void, EC_GROUP_free, (GO_EC_GROUP_PTR group), (group)) \
 +DEFINEFUNC_3_0(GO_EVP_MAC_PTR, EVP_MAC_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
 +DEFINEFUNC_3_0(GO_EVP_MAC_CTX_PTR, EVP_MAC_CTX_new, (GO_EVP_MAC_PTR arg0), (arg0)) \
++DEFINEFUNC_3_0(int, EVP_MAC_CTX_set_params, (GO_EVP_MAC_CTX_PTR ctx, const GO_OSSL_PARAM_PTR params), (ctx, params)) \
 +DEFINEFUNC_3_0(void, EVP_MAC_CTX_free, (GO_EVP_MAC_CTX_PTR arg0), (arg0)) \
 +DEFINEFUNC_3_0(GO_EVP_MAC_CTX_PTR, EVP_MAC_CTX_dup, (const GO_EVP_MAC_CTX_PTR arg0), (arg0)) \
 +DEFINEFUNC_3_0(int, EVP_MAC_init, (GO_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const GO_OSSL_PARAM_PTR params), (ctx, key, keylen, params)) \
@@ -5774,6 +6564,13 @@ index 00000000000000..99656f0cf20a36
 +DEFINEFUNC_1_1_1(int, EVP_PKEY_get_raw_private_key, (const GO_EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len), (pkey, priv, len)) \
 +DEFINEFUNC_3_0(GO_EVP_SIGNATURE_PTR, EVP_SIGNATURE_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
 +DEFINEFUNC_3_0(void, EVP_SIGNATURE_free, (GO_EVP_SIGNATURE_PTR signature), (signature)) \
++DEFINEFUNC_LEGACY_1(GO_DSA_PTR, DSA_new, (void), ()) \
++DEFINEFUNC_LEGACY_1(void, DSA_free, (GO_DSA_PTR r), (r)) \
++DEFINEFUNC_LEGACY_1(int, DSA_generate_key, (GO_DSA_PTR a), (a)) \
++DEFINEFUNC_LEGACY_1_1(void, DSA_get0_pqg, (const GO_DSA_PTR d, const GO_BIGNUM_PTR *p, const GO_BIGNUM_PTR *q, const GO_BIGNUM_PTR *g), (d, p, q, g)) \
++DEFINEFUNC_LEGACY_1_1(int, DSA_set0_pqg, (GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g), (d, p, q, g)) \
++DEFINEFUNC_LEGACY_1_1(void, DSA_get0_key, (const GO_DSA_PTR d, const GO_BIGNUM_PTR *pub_key, const GO_BIGNUM_PTR *priv_key), (d, pub_key, priv_key)) \
++DEFINEFUNC_LEGACY_1_1(int, DSA_set0_key, (GO_DSA_PTR d, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key), (d, pub_key, priv_key)) \
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go
 new file mode 100644
@@ -5807,10 +6604,10 @@ index 00000000000000..98d12f82a27c37
 +extern volatile unsigned int go_openssl_threads_cleaned_up;
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
 new file mode 100644
-index 00000000000000..53ea9d03d7d54c
+index 00000000000000..c837f9cb4dd7a3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
-@@ -0,0 +1,61 @@
+@@ -0,0 +1,64 @@
 +//go:build unix
 +
 +#include "goopenssl.h"
@@ -5841,8 +6638,11 @@ index 00000000000000..53ea9d03d7d54c
 +    // per-thread error state, so this function is guaranteed to be executed at
 +    // least once on any thread with associated error state. The thread-local
 +    // variable needs to be set to a non-NULL value so that the destructor will
-+    // be called when the thread exits. The actual value does not matter.
-+    (void) pthread_setspecific(destructor_key, (void*)1);
++    // be called when the thread exits.
++    // The actual value does not matter, but should be a pointer with a valid size.
++    // See https://github.com/golang-fips/openssl/pull/162
++    static char stub;
++    (void) pthread_setspecific(destructor_key, &stub);
 +}
 +
 +static void cleanup_thread_state(void *ignored)
@@ -9485,12 +10285,12 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7562f74b39ada6..95f7d5ee47b3c1 100644
+index 7562f74b39ada6..6e996fecefb628 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
-+# github.com/golang-fips/openssl/v2 v2.0.3
-+## explicit; go 1.20
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
++## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +# github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103

From 3d1cffdf4fcd75881a20d97d9183fc275d1947d6 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 15:00:11 +0200
Subject: [PATCH 015/887] deduplicate hash support check functions

---
 .../0002-Add-crypto-backend-foundation.patch  |  98 ++++++++++--
 patches/0005-Add-CNG-crypto-backend.patch     | 139 ++++--------------
 2 files changed, 117 insertions(+), 120 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a8be14fb16f..bf35b0b69b6 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -33,14 +33,14 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rc4/rc4.go                        |  18 ++
  src/crypto/rsa/boring.go                     |   4 +-
  src/crypto/rsa/notboring.go                  |   2 +-
- src/crypto/rsa/pkcs1v15.go                   |   2 +-
+ src/crypto/rsa/pkcs1v15.go                   |   6 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
- src/crypto/rsa/pss.go                        |   2 +-
+ src/crypto/rsa/pss.go                        |   6 +-
  src/crypto/rsa/rsa.go                        |   4 +-
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
  src/crypto/sha1/sha1_test.go                 |   2 +-
- src/crypto/sha256/sha256.go                  |   2 +-
+ src/crypto/sha256/sha256.go                  |  14 +-
  src/crypto/sha256/sha256_test.go             |   2 +-
  src/crypto/sha512/sha512.go                  |   2 +-
  src/crypto/sha512/sha512_test.go             |   2 +-
@@ -55,7 +55,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 51 files changed, 764 insertions(+), 93 deletions(-)
+ 51 files changed, 776 insertions(+), 101 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -1030,7 +1030,7 @@ index 2abc0436405f8a..34c22c8fbba7da 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 2f958022f98584..9e243dcd6b4af8 100644
+index 2f958022f98584..ea3235da18c3f2 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -7,7 +7,7 @@ package rsa
@@ -1042,6 +1042,24 @@ index 2f958022f98584..9e243dcd6b4af8 100644
  	"crypto/internal/randutil"
  	"crypto/subtle"
  	"errors"
+@@ -293,7 +293,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(hash) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -343,7 +343,7 @@ func pkcs1v15ConstructEM(pub *PublicKey, hash crypto.Hash, hashed []byte) ([]byt
+ // The inputs are not considered confidential, and may leak through timing side
+ // channels, or if an attacker has control of part of the inputs.
+ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(hash) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return err
 diff --git a/src/crypto/rsa/pkcs1v15_test.go b/src/crypto/rsa/pkcs1v15_test.go
 index dfa1eddc886ff3..849dafacf93d0f 100644
 --- a/src/crypto/rsa/pkcs1v15_test.go
@@ -1066,7 +1084,7 @@ index dfa1eddc886ff3..849dafacf93d0f 100644
  	_, err := DecryptPKCS1v15(nil, rsaPrivateKey, ciphertext)
  	if err == nil {
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index e996e7aaa36b9c..89c5afd83de88a 100644
+index e996e7aaa36b9c..55ca642491ec03 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
 @@ -9,7 +9,7 @@ package rsa
@@ -1078,6 +1096,24 @@ index e996e7aaa36b9c..89c5afd83de88a 100644
  	"errors"
  	"hash"
  	"io"
+@@ -296,7 +296,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ 	// well-specified number of random bytes is included in the signature, in a
+ 	// well-specified way.
+ 
+-	if boring.Enabled && rand == boring.RandReader {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -342,7 +342,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ // The inputs are not considered confidential, and may leak through timing side
+ // channels, or if an attacker has control of part of the inputs.
+ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(hash) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return err
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
 index 4d78d1eaaa6be0..614e63324c2b46 100644
 --- a/src/crypto/rsa/rsa.go
@@ -1134,7 +1170,7 @@ index 634ab9de1ba4cb..d0a9b1b46727fa 100644
  	"crypto/rand"
  	"encoding"
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index 68244fd63b0c1e..02c597d785ef68 100644
+index 68244fd63b0c1e..2297c2aa71c288 100644
 --- a/src/crypto/sha256/sha256.go
 +++ b/src/crypto/sha256/sha256.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1146,6 +1182,46 @@ index 68244fd63b0c1e..02c597d785ef68 100644
  	"errors"
  	"hash"
  	"internal/byteorder"
+@@ -153,7 +153,7 @@ func New() hash.Hash {
+ 
+ // New224 returns a new hash.Hash computing the SHA224 checksum.
+ func New224() hash.Hash {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
+ 		return boring.NewSHA224()
+ 	}
+ 	d := new(digest)
+@@ -172,7 +172,9 @@ func (d *digest) Size() int {
+ func (d *digest) BlockSize() int { return BlockSize }
+ 
+ func (d *digest) Write(p []byte) (nn int, err error) {
+-	boring.Unreachable()
++	if boring.Enabled && (!d.is224 || boring.SupportsHash(crypto.SHA224)) {
++		boring.Unreachable()
++	}
+ 	nn = len(p)
+ 	d.len += uint64(nn)
+ 	if d.nx > 0 {
+@@ -196,7 +198,9 @@ func (d *digest) Write(p []byte) (nn int, err error) {
+ }
+ 
+ func (d *digest) Sum(in []byte) []byte {
+-	boring.Unreachable()
++	if boring.Enabled && (!d.is224 || boring.SupportsHash(crypto.SHA224)) {
++		boring.Unreachable()
++	}
+ 	// Make a copy of d so that caller can keep writing and summing.
+ 	d0 := *d
+ 	hash := d0.checkSum()
+@@ -257,7 +261,7 @@ func Sum256(data []byte) [Size]byte {
+ 
+ // Sum224 returns the SHA224 checksum of the data.
+ func Sum224(data []byte) [Size224]byte {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
+ 		return boring.SHA224(data)
+ 	}
+ 	var d digest
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
 index d91f01e9ba3a5f..755ed4d238ee5a 100644
 --- a/src/crypto/sha256/sha256_test.go
@@ -1601,10 +1677,10 @@ index 33fd0ed52b1ff6..ffc3eeca9dbf95 100644
  	k, err := rsa.GenerateKey(rand.Reader, size)
  	if err != nil {
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 9146cae492e8ac..6eea04ef9269af 100644
+index 441cf8d051c934..ca6a512bf95c7e 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -447,7 +447,9 @@ var depsRules = `
+@@ -448,7 +448,9 @@ var depsRules = `
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
  	crypto/internal/boring/sig,
@@ -1614,7 +1690,7 @@ index 9146cae492e8ac..6eea04ef9269af 100644
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -458,6 +460,7 @@ var depsRules = `
+@@ -459,6 +461,7 @@ var depsRules = `
  	crypto/cipher,
  	crypto/internal/boring/bcache
  	< crypto/internal/boring
@@ -1622,7 +1698,7 @@ index 9146cae492e8ac..6eea04ef9269af 100644
  	< crypto/boring;
  
  	crypto/internal/alias
-@@ -495,6 +498,7 @@ var depsRules = `
+@@ -496,6 +499,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 5fed3d54c5a..935abac58ee 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  src/crypto/internal/backend/cng_windows.go    | 280 ++++++++++++++++++
- src/crypto/internal/backend/common.go         |  33 ++-
+ src/crypto/internal/backend/common.go         |  21 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/md5/md5_test.go                    |   7 +
@@ -22,13 +22,12 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/rsa/boring.go                      |   2 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/notboring.go                   |   2 +-
- src/crypto/rsa/pkcs1v15.go                    |  16 +-
- src/crypto/rsa/pss.go                         |  11 +-
+ src/crypto/rsa/pkcs1v15.go                    |   6 +-
+ src/crypto/rsa/pss.go                         |   8 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
  src/crypto/rsa/rsa.go                         |  15 +-
  src/crypto/rsa/rsa_test.go                    |   8 +-
  src/crypto/sha1/sha1_test.go                  |   7 +
- src/crypto/sha256/sha256.go                   |  12 +-
  src/crypto/sha256/sha256_test.go              |  10 +
  src/crypto/sha512/sha512_test.go              |  10 +
  src/crypto/tls/boring.go                      |   2 +-
@@ -49,7 +48,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 45 files changed, 495 insertions(+), 40 deletions(-)
+ 44 files changed, 463 insertions(+), 35 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -477,20 +476,18 @@ index 00000000000000..3d3d13709de5ac
 +	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index efdd080a1b7708..9d7f7b849d6485 100644
+index efdd080a1b7708..41e1e0cc69ec57 100644
 --- a/src/crypto/internal/backend/common.go
 +++ b/src/crypto/internal/backend/common.go
-@@ -5,7 +5,9 @@
- package backend
+@@ -6,6 +6,7 @@ package backend
  
  import (
-+	"crypto"
  	"crypto/internal/boring/sig"
 +	"internal/goexperiment"
  	"runtime"
  	"syscall"
  )
-@@ -67,7 +69,11 @@ func hasSuffix(s, t string) bool {
+@@ -67,7 +68,11 @@ func hasSuffix(s, t string) bool {
  // UnreachableExceptTests marks code that should be unreachable
  // when backend is in use. It panics.
  func UnreachableExceptTests() {
@@ -503,7 +500,7 @@ index efdd080a1b7708..9d7f7b849d6485 100644
  		name := runtime_arg0()
  		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
  		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-@@ -76,3 +82,28 @@ func UnreachableExceptTests() {
+@@ -76,3 +81,17 @@ func UnreachableExceptTests() {
  		}
  	}
  }
@@ -515,23 +512,12 @@ index efdd080a1b7708..9d7f7b849d6485 100644
 +	return true
 +}
 +
-+func IsHashSupported(h crypto.Hash) bool {
-+	if goexperiment.CNGCrypto {
-+		return h != crypto.MD5SHA1
-+	}
-+	return true
-+}
-+
 +func IsSaltSupported(salt int) bool {
 +	if goexperiment.CNGCrypto {
 +		return salt != 0 // rsa.PSSSaltLengthAuto
 +	}
 +	return true
 +}
-+
-+func IsP224Supported() bool {
-+	return !goexperiment.CNGCrypto
-+}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index 1dc7116efdff2e..b4c321d1d2babb 100644
 --- a/src/crypto/internal/boring/fipstls/stub.s
@@ -653,87 +639,66 @@ index 933ac569e034a8..0f152b210fdd84 100644
  package rsa
  
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 9e243dcd6b4af8..e4bba544ff12ac 100644
+index ea3235da18c3f2..4b90f2c0e6ecf4 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
-@@ -95,7 +95,9 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+@@ -95,7 +95,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsRSAKeySupported(len(priv.Primes)) {
-+
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -189,7 +191,9 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+@@ -189,7 +189,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
  		return
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsRSAKeySupported(len(priv.Primes)) {
-+
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
  		if err != nil {
-@@ -293,7 +297,9 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -293,7 +293,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
--	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsHashSupported(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
-+
+-	if boring.Enabled && boring.SupportsHash(hash) {
++	if boring.Enabled && boring.SupportsHash(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -343,7 +349,9 @@ func pkcs1v15ConstructEM(pub *PublicKey, hash crypto.Hash, hashed []byte) ([]byt
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error {
--	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsHashSupported(hash) {
-+
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 89c5afd83de88a..e9e80bcf7e6a26 100644
+index 55ca642491ec03..7ff4d5150d1ddc 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
-@@ -214,7 +214,9 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
+@@ -214,7 +214,7 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsRSAKeySupported(len(priv.Primes)) {
-+
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -295,8 +297,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 	// it's probably relied upon by some. It's a tolerable promise because a
+@@ -296,7 +296,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  	// well-specified number of random bytes is included in the signature, in a
  	// well-specified way.
-+	if boring.Enabled && rand == boring.RandReader &&
-+		boring.IsHashSupported(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
  
--	if boring.Enabled && rand == boring.RandReader {
+-	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
++	if boring.Enabled && rand == boring.RandReader &&
++		boring.SupportsHash(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
++
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -342,7 +345,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -342,7 +344,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  // The inputs are not considered confidential, and may leak through timing side
  // channels, or if an attacker has control of part of the inputs.
  func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error {
--	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsSaltSupported(opts.saltLength()) && boring.IsHashSupported(hash) {
-+
+-	if boring.Enabled && boring.SupportsHash(hash) {
++	if boring.Enabled && boring.IsSaltSupported(opts.saltLength()) && boring.SupportsHash(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -862,50 +827,6 @@ index d0a9b1b46727fa..10ea3e8eeb6efd 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
-diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index 02c597d785ef68..268f1fdd49ecd3 100644
---- a/src/crypto/sha256/sha256.go
-+++ b/src/crypto/sha256/sha256.go
-@@ -153,7 +153,7 @@ func New() hash.Hash {
- 
- // New224 returns a new hash.Hash computing the SHA224 checksum.
- func New224() hash.Hash {
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsP224Supported() {
- 		return boring.NewSHA224()
- 	}
- 	d := new(digest)
-@@ -172,7 +172,9 @@ func (d *digest) Size() int {
- func (d *digest) BlockSize() int { return BlockSize }
- 
- func (d *digest) Write(p []byte) (nn int, err error) {
--	boring.Unreachable()
-+	if boring.Enabled && (!d.is224 || boring.IsP224Supported()) {
-+		boring.Unreachable()
-+	}
- 	nn = len(p)
- 	d.len += uint64(nn)
- 	if d.nx > 0 {
-@@ -196,7 +198,9 @@ func (d *digest) Write(p []byte) (nn int, err error) {
- }
- 
- func (d *digest) Sum(in []byte) []byte {
--	boring.Unreachable()
-+	if boring.Enabled && (!d.is224 || boring.IsP224Supported()) {
-+		boring.Unreachable()
-+	}
- 	// Make a copy of d so that caller can keep writing and summing.
- 	d0 := *d
- 	hash := d0.checkSum()
-@@ -257,7 +261,7 @@ func Sum256(data []byte) [Size]byte {
- 
- // Sum224 returns the SHA224 checksum of the data.
- func Sum224(data []byte) [Size224]byte {
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsP224Supported() {
- 		return boring.SHA224(data)
- 	}
- 	var d digest
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
 index 755ed4d238ee5a..b7212e3f3c2175 100644
 --- a/src/crypto/sha256/sha256_test.go
@@ -1147,10 +1068,10 @@ index 138066f5f84b68..31b48ffe22c863 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 26570cdadda16d..b48078b3866fa1 100644
+index e69c1f8901fe74..eb0b0ea4eb4622 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -459,6 +459,10 @@ var depsRules = `
+@@ -460,6 +460,10 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -1161,7 +1082,7 @@ index 26570cdadda16d..b48078b3866fa1 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -499,6 +503,7 @@ var depsRules = `
+@@ -500,6 +504,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big

From 608c262fb6762c7e4a88187c9c2d1abd6dd18858 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 16:17:27 +0200
Subject: [PATCH 016/887] fix rsa unreachable

---
 .../0002-Add-crypto-backend-foundation.patch  | 42 +++++++++++++++++--
 patches/0005-Add-CNG-crypto-backend.patch     | 40 ++----------------
 2 files changed, 42 insertions(+), 40 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index bf35b0b69b6..9f0f0f591ae 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -36,7 +36,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/pkcs1v15.go                   |   6 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
  src/crypto/rsa/pss.go                        |   6 +-
- src/crypto/rsa/rsa.go                        |   4 +-
+ src/crypto/rsa/rsa.go                        |  19 +-
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
  src/crypto/sha1/sha1_test.go                 |   2 +-
@@ -55,7 +55,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 51 files changed, 776 insertions(+), 101 deletions(-)
+ 51 files changed, 789 insertions(+), 103 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -1115,10 +1115,10 @@ index e996e7aaa36b9c..55ca642491ec03 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 4d78d1eaaa6be0..614e63324c2b46 100644
+index 4d78d1eaaa6be0..e34efc550e3f90 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
-@@ -26,9 +26,9 @@ package rsa
+@@ -26,14 +26,15 @@ package rsa
  
  import (
  	"crypto"
@@ -1130,6 +1130,40 @@ index 4d78d1eaaa6be0..614e63324c2b46 100644
  	"crypto/internal/randutil"
  	"crypto/rand"
  	"crypto/subtle"
+ 	"errors"
+ 	"hash"
++	"internal/goexperiment"
+ 	"io"
+ 	"math"
+ 	"math/big"
+@@ -479,7 +480,13 @@ func mgf1XOR(out []byte, hash hash.Hash, seed []byte) {
+ var ErrMessageTooLong = errors.New("crypto/rsa: message too long for RSA key size")
+ 
+ func encrypt(pub *PublicKey, plaintext []byte) ([]byte, error) {
+-	boring.Unreachable()
++	if goexperiment.BoringCrypto {
++		// encrypt is reached when the hash function or the salt length
++		// are not supported by the crypto backend. BoringCrypto does
++		// support everything, so use it to check that we don't
++		// accidentally reach this code path.
++		boring.Unreachable()
++	}
+ 
+ 	N, err := bigmod.NewModulusFromBig(pub.N)
+ 	if err != nil {
+@@ -638,7 +645,11 @@ const noCheck = false
+ // m^e is calculated and compared with ciphertext, in order to defend against
+ // errors in the CRT computation.
+ func decrypt(priv *PrivateKey, ciphertext []byte, check bool) ([]byte, error) {
+-	if len(priv.Primes) <= 2 {
++	if goexperiment.BoringCrypto {
++		// decrypt is reached when the hash function or the number of primers
++		// are not supported by the crypto backend. BoringCrypto does
++		// support everything, so use it to check that we don't
++		// accidentally reach this code path.
+ 		boring.Unreachable()
+ 	}
+ 
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 2afa045a3a0bd2..86466e67e87eeb 100644
 --- a/src/crypto/rsa/rsa_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 935abac58ee..3bab956285b 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -25,7 +25,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pss.go                         |   8 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
- src/crypto/rsa/rsa.go                         |  15 +-
+ src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |   8 +-
  src/crypto/sha1/sha1_test.go                  |   7 +
  src/crypto/sha256/sha256_test.go              |  10 +
@@ -48,7 +48,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 44 files changed, 463 insertions(+), 35 deletions(-)
+ 44 files changed, 454 insertions(+), 33 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -716,42 +716,10 @@ index 7e908d4389d506..9a8311568c806e 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 614e63324c2b46..faa47afc515ff4 100644
+index e34efc550e3f90..e625afdde29279 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
-@@ -34,6 +34,7 @@ import (
- 	"crypto/subtle"
- 	"errors"
- 	"hash"
-+	"internal/goexperiment"
- 	"io"
- 	"math"
- 	"math/big"
-@@ -479,7 +480,11 @@ func mgf1XOR(out []byte, hash hash.Hash, seed []byte) {
- var ErrMessageTooLong = errors.New("crypto/rsa: message too long for RSA key size")
- 
- func encrypt(pub *PublicKey, plaintext []byte) ([]byte, error) {
--	boring.Unreachable()
-+	if !goexperiment.CNGCrypto {
-+		// CNGCrypto calls encrypt() when the salt length
-+		// or the hash function are not supported.
-+		boring.Unreachable()
-+	}
- 
- 	N, err := bigmod.NewModulusFromBig(pub.N)
- 	if err != nil {
-@@ -638,7 +643,9 @@ const noCheck = false
- // m^e is calculated and compared with ciphertext, in order to defend against
- // errors in the CRT computation.
- func decrypt(priv *PrivateKey, ciphertext []byte, check bool) ([]byte, error) {
--	if len(priv.Primes) <= 2 {
-+	if len(priv.Primes) <= 2 && !goexperiment.CNGCrypto {
-+		// CNGCrypto calls decrypt() when the salt length
-+		// or the hash function are not supported.
- 		boring.Unreachable()
- 	}
- 
-@@ -718,7 +725,9 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
+@@ -729,7 +729,9 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
  		return nil, ErrDecryption
  	}
  

From d252e5c638dd957ad330442ec9e4450df649211e Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 17:03:32 +0200
Subject: [PATCH 017/887] fix zero hash case

---
 patches/0002-Add-crypto-backend-foundation.patch | 8 ++++----
 patches/0005-Add-CNG-crypto-backend.patch        | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 9f0f0f591ae..6507170b41a 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -1030,7 +1030,7 @@ index 2abc0436405f8a..34c22c8fbba7da 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 2f958022f98584..ea3235da18c3f2 100644
+index 2f958022f98584..552c6886813f46 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -7,7 +7,7 @@ package rsa
@@ -1047,7 +1047,7 @@ index 2f958022f98584..ea3235da18c3f2 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsHash(hash) {
++	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1056,7 +1056,7 @@ index 2f958022f98584..ea3235da18c3f2 100644
  // channels, or if an attacker has control of part of the inputs.
  func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error {
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsHash(hash) {
++	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -1115,7 +1115,7 @@ index e996e7aaa36b9c..55ca642491ec03 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 4d78d1eaaa6be0..e34efc550e3f90 100644
+index 4d78d1eaaa6be0..c3753872872cce 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -26,14 +26,15 @@ package rsa
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 3bab956285b..162013280cf 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -639,7 +639,7 @@ index 933ac569e034a8..0f152b210fdd84 100644
  package rsa
  
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index ea3235da18c3f2..4b90f2c0e6ecf4 100644
+index 552c6886813f46..7b3c9211992f6b 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -95,7 +95,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
@@ -664,8 +664,8 @@ index ea3235da18c3f2..4b90f2c0e6ecf4 100644
  		return nil, err
  	}
  
--	if boring.Enabled && boring.SupportsHash(hash) {
-+	if boring.Enabled && boring.SupportsHash(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
+-	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
++	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -716,7 +716,7 @@ index 7e908d4389d506..9a8311568c806e 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index e34efc550e3f90..e625afdde29279 100644
+index c3753872872cce..e0f6cd17900e10 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -729,7 +729,9 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci

From a61ad4c40c19f952981ca5dfc1e40b55a3c25ee2 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 18:00:52 +0200
Subject: [PATCH 018/887] boring supports crypto.MD5SHA1

---
 patches/0003-Add-BoringSSL-crypto-backend.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index a9e5bb2cbee..75a7a08b4f0 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -59,7 +59,7 @@ index 00000000000000..7c5fbeea717618
 +
 +func SupportsHash(h crypto.Hash) bool {
 +	switch h {
-+	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
++	case crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
 +		return true
 +	default:
 +		return false

From a4aa3c3b71ae344e712e2db6b4bff6ee336134fd Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 20 Sep 2024 12:53:53 +0200
Subject: [PATCH 019/887] run gh codeql only for eng/_utils

---
 .github/workflows/codeql.yml | 18 ++++++------------
 1 file changed, 6 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 408662547a2..a5f294d5682 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,13 +18,6 @@ jobs:
     permissions:
       security-events: write
 
-    strategy:
-      fail-fast: false
-      matrix:
-        language:
-          - 'cpp'
-          - 'go'
-
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -32,13 +25,14 @@ jobs:
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
         with:
-          languages: ${{ matrix.language }}
-          build-mode: manual
+          languages: go
 
-      - run: pwsh eng/run.ps1 submodule-refresh -shallow
-      - run: pwsh eng/run.ps1 build
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v3
+        with:
+          working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v3
         with:
-          category: /language:${{matrix.language}}
\ No newline at end of file
+          category: /language:go
\ No newline at end of file

From 9875b1d54bb65f5686b70d0913098258e2f7c51f Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Sep 2024 12:18:12 +0200
Subject: [PATCH 020/887] bump stage0 to go1.22.6

---
 eng/utilities.ps1 | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index b8bfc5ca3cc..e95e586668b 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -24,17 +24,17 @@ function Get-Stage0GoRoot() {
   # pre-installed. This CI script installs a consistent, official version of Go to a directory in
   # $HOME to handle this. This also makes it easier to locally repro issues in CI that involve a
   # specific version of Go. The downloaded copy of Go is called the "stage 0" version.
-  $stage0_go_version = '1.20.6'
+  $stage0_go_version = '1.22.6'
 
   $proc_arch = ([System.Runtime.InteropServices.RuntimeInformation]::ProcessArchitecture).ToString().ToLowerInvariant()
   if ($IsWindows) {
     switch ($proc_arch) {
       'x64' {
-        $stage0_go_sha256 = 'b67dd7f2b4589701e53c98e348e1b4d9a7c3536dc316941172b2f0b60ae4ce5f'
+        $stage0_go_sha256 = '6023083a6e4d3199b44c37e9ba7b25d9674da20fd846a35ee5f9589d81c21a6a'
         $stage0_go_suffix = 'windows-amd64.zip'
       }
       'arm64' {
-        $stage0_go_sha256 = '9027e52be386e779ef1a0c938994ee2361689496ac832100407238f5ed0fd82a'
+        $stage0_go_sha256 = '7cf55f357ba8116cd3bff992980e20a704ba451b3dab341cf1787b133d900512'
         $stage0_go_suffix = 'windows-arm64.zip'
       }
       Default { throw "Unable to match Windows '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
@@ -42,11 +42,11 @@ function Get-Stage0GoRoot() {
   } elseif ($IsLinux) {
     switch ($proc_arch) {
       'x64' {
-        $stage0_go_sha256 = 'b945ae2bb5db01a0fb4786afde64e6fbab50b67f6fa0eb6cfa4924f16a7ff1eb'
+        $stage0_go_sha256 = '999805bed7d9039ec3da1a53bfbcafc13e367da52aa823cb60b68ba22d44c616'
         $stage0_go_suffix = 'linux-amd64.tar.gz'
       }
       'arm64' {
-        $stage0_go_sha256 = '4e15ab37556e979181a1a1cc60f6d796932223a0f5351d7c83768b356f84429b'
+        $stage0_go_sha256 = 'c15fa895341b8eaf7f219fada25c36a610eb042985dc1a912410c1c90098eaf2'
         $stage0_go_suffix = 'linux-arm64.tar.gz'
       }
       Default { throw "Unable to match Linux '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }

From 708063d2ce584dbd03cb70d9b5f29db955a632df Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 23 Sep 2024 10:03:48 +0200
Subject: [PATCH 021/887] Update .github/workflows/codeql.yml

Co-authored-by: Martijn Verburg <martijnverburg@gmail.com>
---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a5f294d5682..779e872958e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
         with:
           working-directory: eng/_util
 

From acc3204cf06d8ef5aa0f571fbe8e873b03826da3 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 23 Sep 2024 10:04:37 +0200
Subject: [PATCH 022/887] Update codeql.yml

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 779e872958e..3e6fab493f9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
         with:
           languages: go
 
@@ -33,6 +33,6 @@ jobs:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
         with:
-          category: /language:go
\ No newline at end of file
+          category: /language:go

From 4d0e8cadcd7bd9b588bc4414bbdfe3984b2509d8 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 24 Sep 2024 07:56:51 +0200
Subject: [PATCH 023/887] Update codeql.yml

---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3e6fab493f9..4a92e3f76d1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8

From ef08af6238d62d1c01a744d08b31652f4aca698c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Sep 2024 10:55:35 +0000
Subject: [PATCH 024/887] Bump github/codeql-action from 3.26.8 to 3.26.9

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.8 to 3.26.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/294a9d92911152fe08befb9ec03e240add280cb3...461ef6c76dfe95d5c364de2f431ddbd31a417628)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4a92e3f76d1..a434d5e5699 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
+        uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
         with:
           category: /language:go

From 684de312793804f59c32ef7440dda2ac05ccacda Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 25 Sep 2024 16:07:51 +0000
Subject: [PATCH 025/887] Update submodule to latest master (6cb10745):
 runtime: print fatal messages without interleaving

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 6b2ffc72b67..6cb107452a5 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 6b2ffc72b67713de4f08915937a64392aa4dbff0
+Subproject commit 6cb107452a5a5551a04baf6bc4ff0b8299dfb596

From 510d587fe827085a403b9c4402e65367ae6f089a Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 25 Sep 2024 10:33:08 -0700
Subject: [PATCH 026/887] Update CNG backend to fdc07bead050 (#1332)

---
 patches/0005-Add-CNG-crypto-backend.patch |  10 +-
 patches/0006-Vendor-crypto-backends.patch | 622 +++++++++++++++++++++-
 2 files changed, 615 insertions(+), 17 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 5793da59290..0bfcded3093 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -1012,26 +1012,26 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 7a6455fefb4bed..84460ce0490727 100644
+index 7a6455fefb4bed..ac91a5201b6581 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
  	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103
++	github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 138066f5f84b68..31b48ffe22c863 100644
+index b8e460e0a13c1c..19b381f6211587 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103 h1:KQsPPal3pKvKzAPTaR7sEriaqrHmRWw0dWG/7E5FNNk=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103/go.mod h1:fveERXKbeK+XLmOyU24caKnIT/S5nniAX9XCRHfnrM4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050 h1:DYP8AiC/xuYDxOkvZQy9QVnFee4rBUCmzN54Iit5pkQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050/go.mod h1:fveERXKbeK+XLmOyU24caKnIT/S5nniAX9XCRHfnrM4=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index 9a63450ecdd..f5de3e8682e 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -47,23 +47,24 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../go-crypto-winnative/cng/cipher.go         |   56 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  130 ++
  .../microsoft/go-crypto-winnative/cng/des.go  |  107 ++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  473 ++++++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  260 ++++
  .../go-crypto-winnative/cng/ecdsa.go          |  175 +++
  .../microsoft/go-crypto-winnative/cng/hash.go |  320 +++++
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  179 +++
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
- .../microsoft/go-crypto-winnative/cng/keys.go |  178 +++
+ .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
  .../go-crypto-winnative/cng/pbkdf2.go         |   74 ++
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   61 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  374 ++++++
  .../go-crypto-winnative/cng/tls1prf.go        |   92 ++
- .../internal/bcrypt/bcrypt_windows.go         |  284 +++++
+ .../internal/bcrypt/bcrypt_windows.go         |  359 ++++++
  .../internal/bcrypt/zsyscall_windows.go       |  389 ++++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 58 files changed, 9828 insertions(+)
+ 59 files changed, 10418 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
@@ -106,6 +107,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
@@ -7547,7 +7549,7 @@ index 00000000000000..844c087287cabe
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
 new file mode 100644
-index 00000000000000..2172f03e860418
+index 00000000000000..b0784affba0aa4
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
 @@ -0,0 +1,107 @@
@@ -7576,7 +7578,7 @@ index 00000000000000..2172f03e860418
 +}
 +
 +func NewDESCipher(key []byte) (cipher.Block, error) {
-+	kh, err := newCipherHandle(bcrypt.DES_ALGORITHM, "", key)
++	kh, err := newCipherHandle(bcrypt.DES_ALGORITHM, bcrypt.CHAIN_MODE_ECB, key)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -7587,7 +7589,7 @@ index 00000000000000..2172f03e860418
 +}
 +
 +func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	kh, err := newCipherHandle(bcrypt.DES3_ALGORITHM, "", key)
++	kh, err := newCipherHandle(bcrypt.DES3_ALGORITHM, bcrypt.CHAIN_MODE_ECB, key)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -7658,6 +7660,485 @@ index 00000000000000..2172f03e860418
 +func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
 +	return newCBC(false, c.alg, c.key, iv)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
+new file mode 100644
+index 00000000000000..bd3e19dcf7f035
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
+@@ -0,0 +1,473 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"errors"
++	"runtime"
++	"strconv"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
++)
++
++// As of FIPS 186-4 the maximum Q size is 32 bytes.
++//
++// See also: cbGroupSize at
++// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_dsa_key_blob_v2
++const maxGroupSize = 32
++
++// crypto/dsa doesn't support passing the seed around, but CNG expects it.
++// CNG will skip seed verification if the count and seed parameters is all 0xff bytes.
++var (
++	dsaCountNil = [4]byte{0xff, 0xff, 0xff, 0xff}
++	dsaSeedNil  = [maxGroupSize]byte{
++		0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
++		0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
++		0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
++		0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
++	}
++)
++
++type dsaAlgorithm struct {
++	handle            bcrypt.ALG_HANDLE
++	allowedKeyLengths bcrypt.KEY_LENGTHS_STRUCT
++}
++
++func loadDSA() (h dsaAlgorithm, err error) {
++	v, err := loadOrStoreAlg(bcrypt.DSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++		lengths, err := getKeyLengths(bcrypt.HANDLE(h))
++		if err != nil {
++			return nil, err
++		}
++		return dsaAlgorithm{h, lengths}, nil
++	})
++	if err != nil {
++		return dsaAlgorithm{}, err
++	}
++	return v.(dsaAlgorithm), nil
++}
++
++// DSAParameters contains the DSA parameters.
++type DSAParameters struct {
++	P, Q, G BigInt
++}
++
++func (p DSAParameters) keySize() uint32 {
++	return uint32(len(p.P))
++}
++
++func (p DSAParameters) groupSize() uint32 {
++	return uint32(len(p.Q))
++}
++
++// GenerateDSAParameters generates a set of DSA parameters for a key of size L bytes.
++// If L is less than or equal to 1024, the parameters are generated according to FIPS 186-2.
++// If L is greater than 1024, the parameters are generated according to FIPS 186-3.
++// The returned parameters are suitable for use in GenerateKey.
++func GenerateDSAParameters(L int) (params DSAParameters, err error) {
++	h, err := loadDSA()
++	if err != nil {
++		return DSAParameters{}, err
++	}
++	if !keyIsAllowed(h.allowedKeyLengths, uint32(L)) {
++		return DSAParameters{}, errors.New("crypto/dsa: invalid key size")
++	}
++	// To generate the parameters, we need to generate a key pair and then export the public key.
++	// The public key contains the parameters. We then discard the key pair.
++	var hkey bcrypt.KEY_HANDLE
++	if err := bcrypt.GenerateKeyPair(h.handle, &hkey, uint32(L), 0); err != nil {
++		return DSAParameters{}, err
++	}
++	defer bcrypt.DestroyKey(hkey)
++
++	if err := bcrypt.FinalizeKeyPair(hkey, 0); err != nil {
++		return DSAParameters{}, err
++	}
++	params, _, _, err = decodeDSAKey(hkey, false)
++	return params, err
++}
++
++// PrivateKeyDSA represents a DSA private key.
++type PrivateKeyDSA struct {
++	DSAParameters
++	X, Y BigInt
++
++	hkey bcrypt.KEY_HANDLE
++}
++
++func (k *PrivateKeyDSA) finalize() {
++	bcrypt.DestroyKey(k.hkey)
++}
++
++// PublicKeyDSA represents a DSA public key.
++type PublicKeyDSA struct {
++	DSAParameters
++	Y BigInt
++
++	hkey bcrypt.KEY_HANDLE
++}
++
++func (k *PublicKeyDSA) finalize() {
++	bcrypt.DestroyKey(k.hkey)
++}
++
++// GenerateKeyDSA generates a new private DSA key using the given parameters.
++func GenerateKeyDSA(params DSAParameters) (*PrivateKeyDSA, error) {
++	h, err := loadDSA()
++	if err != nil {
++		return nil, err
++	}
++	keySize := params.keySize()
++	if !keyIsAllowed(h.allowedKeyLengths, keySize*8) {
++		return nil, errors.New("crypto/dsa: invalid key size")
++	}
++	var hkey bcrypt.KEY_HANDLE
++	if err := bcrypt.GenerateKeyPair(h.handle, &hkey, keySize*8, 0); err != nil {
++		return nil, err
++	}
++	if err := setDSAParameter(hkey, params); err != nil {
++		bcrypt.DestroyKey(hkey)
++		return nil, err
++	}
++	if err := bcrypt.FinalizeKeyPair(hkey, 0); err != nil {
++		bcrypt.DestroyKey(hkey)
++		return nil, err
++	}
++	_, x, y, err := decodeDSAKey(hkey, true)
++	if err != nil {
++		bcrypt.DestroyKey(hkey)
++		return nil, err
++	}
++	k := &PrivateKeyDSA{params, x, y, hkey}
++	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
++	return k, nil
++}
++
++// NewPrivateKeyDSA creates a new DSA private key from the given parameters.
++func NewPrivateKeyDSA(params DSAParameters, X, Y BigInt) (*PrivateKeyDSA, error) {
++	h, err := loadDSA()
++	if err != nil {
++		return nil, err
++	}
++	keySize := params.keySize()
++	if !keyIsAllowed(h.allowedKeyLengths, keySize*8) {
++		return nil, errors.New("crypto/dsa: invalid key size")
++	}
++	hkey, err := encodeDSAKey(h.handle, params, X, Y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PrivateKeyDSA{params, X, Y, hkey}
++	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
++	return k, nil
++}
++
++// NewPublicKeyDSA creates a new DSA public key from the given parameters.
++func NewPublicKeyDSA(params DSAParameters, Y BigInt) (*PublicKeyDSA, error) {
++	h, err := loadDSA()
++	if err != nil {
++		return nil, err
++	}
++	keySize := params.keySize()
++	if !keyIsAllowed(h.allowedKeyLengths, keySize*8) {
++		return nil, errors.New("crypto/dsa: invalid key size")
++	}
++	hkey, err := encodeDSAKey(h.handle, params, nil, Y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PublicKeyDSA{params, Y, hkey}
++	runtime.SetFinalizer(k, (*PublicKeyDSA).finalize)
++	return k, nil
++}
++
++// SignDSA signs a hash (which should be the result of hashing a larger message).
++func SignDSA(priv *PrivateKeyDSA, hashed []byte) (r, s BigInt, err error) {
++	defer runtime.KeepAlive(priv)
++	size, err := getUint32(bcrypt.HANDLE(priv.hkey), bcrypt.SIGNATURE_LENGTH)
++	if err != nil {
++		return nil, nil, err
++	}
++	var buf [maxGroupSize]byte
++	hashed, err = dsaAdjustHashSize(priv.hkey, hashed, buf[:])
++	if err != nil {
++		return nil, nil, err
++	}
++	sig := make([]byte, size)
++	err = bcrypt.SignHash(priv.hkey, nil, hashed, sig, &size, 0)
++	if err != nil {
++		return nil, nil, err
++	}
++	sig = sig[:size]
++	// BCRYPTSignHash generates DSA signatures in P1363 format,
++	// which is simply (r, s), each of them exactly half of the array.
++	if len(sig)%2 != 0 {
++		return nil, nil, errors.New("crypto/dsa: invalid signature size from bcrypt")
++	}
++	return sig[:len(sig)/2], sig[len(sig)/2:], nil
++}
++
++// VerifyDSA verifies the signature in r, s of hashed using the public key, pub.
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt) bool {
++	defer runtime.KeepAlive(pub)
++	var buf [maxGroupSize]byte
++	hashed, err := dsaAdjustHashSize(pub.hkey, hashed, buf[:])
++	if err != nil {
++		return false
++	}
++	size, err := getUint32(bcrypt.HANDLE(pub.hkey), bcrypt.SIGNATURE_LENGTH)
++	if err != nil {
++		return false
++	}
++	// r and s might be shorter than size
++	// if the original big number contained leading zeros,
++	// but they must not be longer than the public key size.
++	if len(r) > int(size/2) || len(s) > int(size/2) {
++		return false
++	}
++	sig := make([]byte, 0, 2*maxGroupSize)
++	prependZeros := func(nonZeroBytes int) {
++		if zeros := int(size/2) - nonZeroBytes; zeros > 0 {
++			sig = append(sig, make([]byte, zeros)...)
++		}
++	}
++	prependZeros(len(r))
++	sig = append(sig, r...)
++	prependZeros(len(s))
++	sig = append(sig, s...)
++	return keyVerify(pub.hkey, nil, hashed, sig, 0) == nil
++}
++
++func encodeDSAKey(h bcrypt.ALG_HANDLE, params DSAParameters, X, Y BigInt) (bcrypt.KEY_HANDLE, error) {
++	keySize := params.keySize()
++	groupSize := params.groupSize()
++	private := X != nil
++	var blob []byte
++	if keySize*8 <= 1024 {
++		size := sizeOfDSABlobHeader + keySize*3
++		hdr := bcrypt.DSA_KEY_BLOB{
++			Magic:   bcrypt.DSA_PUBLIC_MAGIC,
++			KeySize: keySize,
++			Count:   dsaCountNil,
++		}
++		if private {
++			size += uint32(len(hdr.Q)) // private key is always 20 bytes
++			hdr.Magic = bcrypt.DSA_PRIVATE_MAGIC
++		}
++		copy(hdr.Seed[:], dsaSeedNil[:])
++		copy(hdr.Q[:], params.Q[:])
++		blob = make([]byte, size)
++		copy(blob, (*(*[sizeOfDSABlobHeader]byte)(unsafe.Pointer(&hdr)))[:])
++		data := blob[sizeOfDSABlobHeader:]
++		if err := encodeBigInt(data, []sizedBigInt{
++			{params.P, keySize},
++			{params.G, keySize},
++			{Y, keySize},
++			{X, groupSize},
++		}); err != nil {
++			return 0, err
++		}
++	} else {
++		size := sizeOfDSAV2BlobHeader + 3*keySize + 2*groupSize
++		hashAlg := hashAlgFromGroup(int(groupSize))
++		hdr := bcrypt.DSA_KEY_BLOB_V2{
++			Magic:           bcrypt.DSA_PUBLIC_MAGIC_V2,
++			KeySize:         keySize,
++			GroupSize:       groupSize,
++			HashAlgorithm:   hashAlg,
++			StandardVersion: bcrypt.DSA_FIPS186_3,
++			SeedLength:      groupSize, // crypto/dsa doesn't use the seed, but it must be equal to groupSize.
++			Count:           dsaCountNil,
++		}
++		if private {
++			size += groupSize
++			hdr.Magic = bcrypt.DSA_PRIVATE_MAGIC_V2
++		}
++		blob = make([]byte, size)
++		copy(blob, (*(*[sizeOfDSAV2BlobHeader]byte)(unsafe.Pointer(&hdr)))[:])
++		data := blob[sizeOfDSAV2BlobHeader:]
++		if err := encodeBigInt(data, []sizedBigInt{
++			{dsaSeedNil[:], groupSize},
++			{params.Q, groupSize},
++			{params.P, keySize},
++			{params.G, keySize},
++			{Y, keySize},
++			{X, groupSize},
++		}); err != nil {
++			return 0, err
++		}
++	}
++	kind := bcrypt.DSA_PUBLIC_BLOB
++	if private {
++		kind = bcrypt.DSA_PRIVATE_BLOB
++	}
++	var hkey bcrypt.KEY_HANDLE
++	err := bcrypt.ImportKeyPair(h, 0, utf16PtrFromString(kind), &hkey, blob, 0)
++	if err != nil {
++		return 0, err
++	}
++	return hkey, nil
++}
++
++// decodeDSAKey decodes a DSA key. If private is true, the private exponent, X, is also returned.
++func decodeDSAKey(hkey bcrypt.KEY_HANDLE, private bool) (params DSAParameters, X, Y BigInt, err error) {
++	var data []byte
++	consumeBigInt := func(size uint32) BigInt {
++		b := data[:size]
++		data = data[size:]
++		return b
++	}
++	var L uint32
++	L, err = getUint32(bcrypt.HANDLE(hkey), bcrypt.KEY_LENGTH)
++	if err != nil {
++		return
++	}
++	if L <= 1024 {
++		var hdr bcrypt.DSA_KEY_BLOB
++		hdr, data, err = exportDSAKey(hkey, private)
++		if err != nil {
++			return
++		}
++		magic := bcrypt.DSA_PUBLIC_MAGIC
++		if private {
++			magic = bcrypt.DSA_PRIVATE_MAGIC
++		}
++		if hdr.Magic != magic || hdr.KeySize*8 != uint32(L) {
++			err = errors.New("crypto/dsa: exported key is corrupted")
++			return
++		}
++		params = DSAParameters{
++			Q: hdr.Q[:],
++			P: consumeBigInt(hdr.KeySize),
++			G: consumeBigInt(hdr.KeySize),
++		}
++		Y = consumeBigInt(hdr.KeySize)
++		if private {
++			X = consumeBigInt(uint32(len(hdr.Q))) // private key is always 20 bytes
++		}
++	} else {
++		var hdr bcrypt.DSA_KEY_BLOB_V2
++		hdr, data, err = exporDSAV2Key(hkey, private)
++		if err != nil {
++			return
++		}
++		magic := bcrypt.DSA_PUBLIC_MAGIC_V2
++		if private {
++			magic = bcrypt.DSA_PRIVATE_MAGIC_V2
++		}
++		if hdr.Magic != magic || hdr.KeySize*8 != uint32(L) {
++			err = errors.New("crypto/dsa: exported key is corrupted")
++			return
++		}
++		// Discard the seed, crypto/dsa doesn't use it.
++		consumeBigInt(hdr.SeedLength)
++		params = DSAParameters{
++			Q: consumeBigInt(hdr.GroupSize),
++			P: consumeBigInt(hdr.KeySize),
++			G: consumeBigInt(hdr.KeySize),
++		}
++		Y = consumeBigInt(hdr.KeySize)
++		if private {
++			X = consumeBigInt(hdr.GroupSize)
++		}
++	}
++	return params, X, Y, nil
++}
++
++// setDSAParameter sets the DSA parameters for the given key.
++func setDSAParameter(hkey bcrypt.KEY_HANDLE, params DSAParameters) error {
++	keySize := params.keySize()
++	groupSize := params.groupSize()
++	var blob []byte
++	if keySize*8 <= 1024 {
++		blob = make([]byte, sizeOfDSAParamsHeader+keySize*2)
++		hdr := bcrypt.DSA_PARAMETER_HEADER{
++			Length:  uint32(len(blob)),
++			Magic:   bcrypt.DSA_PARAMETERS_MAGIC,
++			KeySize: keySize,
++			Count:   dsaCountNil,
++		}
++		copy(hdr.Seed[:], dsaSeedNil[:])
++		copy(hdr.Q[:], params.Q[:])
++		copy(blob, (*(*[sizeOfDSAParamsHeader]byte)(unsafe.Pointer(&hdr)))[:])
++		data := blob[sizeOfDSAParamsHeader:]
++		if err := encodeBigInt(data, []sizedBigInt{
++			{params.P, keySize},
++			{params.G, keySize},
++		}); err != nil {
++			return err
++		}
++	} else {
++		blob = make([]byte, sizeOfDSAParamsV2Header+2*keySize+2*groupSize)
++		hashAlg := hashAlgFromGroup(int(groupSize))
++		hdr := bcrypt.DSA_PARAMETER_HEADER_V2{
++			Length:          uint32(len(blob)),
++			Magic:           bcrypt.DSA_PARAMETERS_MAGIC_V2,
++			KeySize:         keySize,
++			GroupSize:       groupSize,
++			HashAlgorithm:   hashAlg,
++			StandardVersion: bcrypt.DSA_FIPS186_3,
++			SeedLength:      groupSize, // crypto/dsa doesn't use the seed, but CNG expects it to be groupSize.
++			Count:           dsaCountNil,
++		}
++		copy(blob, (*(*[sizeOfDSAParamsV2Header]byte)(unsafe.Pointer(&hdr)))[:])
++		data := blob[sizeOfDSAParamsV2Header:]
++		if err := encodeBigInt(data, []sizedBigInt{
++			{dsaSeedNil[:], groupSize},
++			{params.Q, groupSize},
++			{params.P, keySize},
++			{params.G, keySize},
++		}); err != nil {
++			return err
++		}
++
++	}
++	return bcrypt.SetProperty(bcrypt.HANDLE(hkey), utf16PtrFromString(bcrypt.DSA_PARAMETERS), blob, 0)
++}
++
++func dsaAdjustHashSize(hkey bcrypt.KEY_HANDLE, hashed []byte, buf []byte) ([]byte, error) {
++	// Windows CNG requires that the hash output and Q match sizes, but we can better
++	// interoperate with other FIPS 186-3 implementations if we perform truncation
++	// here, before sending it to CNG.
++	//
++	// If, on the other hand, Q is too big, we need to left-pad the hash with zeroes
++	// (since it gets treated as a big-endian number).
++	params, _, _, err := decodeDSAKey(hkey, false)
++	if err != nil {
++		return nil, err
++	}
++	groupSize := int(params.groupSize())
++	if groupSize > len(buf) {
++		panic("output buffer too small")
++	}
++	if groupSize == len(hashed) {
++		return hashed, nil
++	}
++	if groupSize < len(hashed) {
++		return hashed[:groupSize], nil
++	}
++	if err := encodeBigInt(buf, []sizedBigInt{
++		{hashed, uint32(groupSize)},
++	}); err != nil {
++		return nil, err
++	}
++	return buf[:groupSize], nil
++}
++
++func hashAlgFromGroup(groupSize int) bcrypt.HASHALGORITHM_ENUM {
++	switch groupSize {
++	case 20:
++		return bcrypt.DSA_HASH_ALGORITHM_SHA1
++	case 32:
++		return bcrypt.DSA_HASH_ALGORITHM_SHA256
++	case 64:
++		return bcrypt.DSA_HASH_ALGORITHM_SHA512
++	default:
++		panic("invalid group size: " + strconv.Itoa(groupSize))
++	}
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
 new file mode 100644
 index 00000000000000..cd6e9a98f6f967
@@ -8659,10 +9140,10 @@ index 00000000000000..2d9fd36ce7252e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
 new file mode 100644
-index 00000000000000..95c3bcdc5e788d
+index 00000000000000..bc150a7bd39272
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
-@@ -0,0 +1,178 @@
+@@ -0,0 +1,220 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8682,8 +9163,50 @@ index 00000000000000..95c3bcdc5e788d
 +	sizeOfECCBlobHeader     = uint32(unsafe.Sizeof(bcrypt.ECCKEY_BLOB{}))
 +	sizeOfRSABlobHeader     = uint32(unsafe.Sizeof(bcrypt.RSAKEY_BLOB{}))
 +	sizeOfKeyDataBlobHeader = uint32(unsafe.Sizeof(bcrypt.KEY_DATA_BLOB_HEADER{}))
++	sizeOfDSABlobHeader     = uint32(unsafe.Sizeof(bcrypt.DSA_KEY_BLOB{}))
++	sizeOfDSAV2BlobHeader   = uint32(unsafe.Sizeof(bcrypt.DSA_KEY_BLOB_V2{}))
++	sizeOfDSAParamsHeader   = uint32(unsafe.Sizeof(bcrypt.DSA_PARAMETER_HEADER{}))
++	sizeOfDSAParamsV2Header = uint32(unsafe.Sizeof(bcrypt.DSA_PARAMETER_HEADER_V2{}))
 +)
 +
++// exportDSAKey exports hkey into a bcrypt.DSA_KEY_BLOB header and data.
++func exportDSAKey(hkey bcrypt.KEY_HANDLE, private bool) (bcrypt.DSA_KEY_BLOB, []byte, error) {
++	var magic string
++	if private {
++		magic = bcrypt.DSA_PRIVATE_BLOB
++	} else {
++		magic = bcrypt.DSA_PUBLIC_BLOB
++	}
++	blob, err := exportKey(hkey, magic)
++	if err != nil {
++		return bcrypt.DSA_KEY_BLOB{}, nil, err
++	}
++	if len(blob) < int(sizeOfDSABlobHeader) {
++		return bcrypt.DSA_KEY_BLOB{}, nil, errors.New("cng: exported key is corrupted")
++	}
++	hdr := (*(*bcrypt.DSA_KEY_BLOB)(unsafe.Pointer(&blob[0])))
++	return hdr, blob[sizeOfDSABlobHeader:], nil
++}
++
++// exporDSAV2Key exports hkey into a bcrypt.DSA_KEY_BLOB_V2 header and data.
++func exporDSAV2Key(hkey bcrypt.KEY_HANDLE, private bool) (bcrypt.DSA_KEY_BLOB_V2, []byte, error) {
++	var magic string
++	if private {
++		magic = bcrypt.DSA_PRIVATE_BLOB
++	} else {
++		magic = bcrypt.DSA_PUBLIC_BLOB
++	}
++	blob, err := exportKey(hkey, magic)
++	if err != nil {
++		return bcrypt.DSA_KEY_BLOB_V2{}, nil, err
++	}
++	if len(blob) < int(sizeOfDSAV2BlobHeader) {
++		return bcrypt.DSA_KEY_BLOB_V2{}, nil, errors.New("cng: exported key is corrupted")
++	}
++	hdr := (*(*bcrypt.DSA_KEY_BLOB_V2)(unsafe.Pointer(&blob[0])))
++	return hdr, blob[sizeOfDSAV2BlobHeader:], nil
++}
++
 +// exportRSAKey exports hkey into a bcrypt.ECCKEY_BLOB header and data.
 +func exportECCKey(hkey bcrypt.KEY_HANDLE, private bool) (bcrypt.ECCKEY_BLOB, []byte, error) {
 +	var magic string
@@ -9502,15 +10025,19 @@ index 00000000000000..30ef2242bc3cf3
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..37c64ba6a7fa96
+index 00000000000000..090c74a894e170
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
-@@ -0,0 +1,284 @@
+@@ -0,0 +1,359 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
 +//go:generate go run github.com/microsoft/go-crypto-winnative/cmd/mksyscall -output zsyscall_windows.go bcrypt_windows.go
 +
++// Package bcrypt implements interop with bcrypt.dll, a component of Windows CNG.
++// See https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/
++//
++// Note: this package is not related to the bcrypt password hashing algorithm.
 +package bcrypt
 +
 +import (
@@ -9539,6 +10066,7 @@ index 00000000000000..37c64ba6a7fa96
 +	DES3_ALGORITHM       = "3DES" // 3DES_ALGORITHM
 +	TLS1_1_KDF_ALGORITHM = "TLS1_1_KDF"
 +	TLS1_2_KDF_ALGORITHM = "TLS1_2_KDF"
++	DSA_ALGORITHM        = "DSA"
 +)
 +
 +const (
@@ -9558,6 +10086,7 @@ index 00000000000000..37c64ba6a7fa96
 +	CHAIN_MODE_GCM    = "ChainingModeGCM"
 +	KEY_LENGTH        = "KeyLength"
 +	KEY_LENGTHS       = "KeyLengths"
++	SIGNATURE_LENGTH  = "SignatureLength"
 +	BLOCK_LENGTH      = "BlockLength"
 +	ECC_CURVE_NAME    = "ECCCurveName"
 +)
@@ -9567,6 +10096,8 @@ index 00000000000000..37c64ba6a7fa96
 +	RSAFULLPRIVATE_BLOB = "RSAFULLPRIVATEBLOB"
 +	ECCPUBLIC_BLOB      = "ECCPUBLICBLOB"
 +	ECCPRIVATE_BLOB     = "ECCPRIVATEBLOB"
++	DSA_PUBLIC_BLOB     = "DSAPUBLICBLOB"
++	DSA_PRIVATE_BLOB    = "DSAPRIVATEBLOB"
 +)
 +
 +const (
@@ -9617,6 +10148,45 @@ index 00000000000000..37c64ba6a7fa96
 +	KDF_RAW_SECRET = "TRUNCATE"
 +)
 +
++const (
++	DSA_PARAMETERS = "DSAParameters"
++)
++
++type HASHALGORITHM_ENUM uint32
++
++const (
++	DSA_HASH_ALGORITHM_SHA1 HASHALGORITHM_ENUM = iota
++	DSA_HASH_ALGORITHM_SHA256
++	DSA_HASH_ALGORITHM_SHA512
++)
++
++type DSAFIPSVERSION_ENUM uint32
++
++const (
++	DSA_FIPS186_2 DSAFIPSVERSION_ENUM = iota
++	DSA_FIPS186_3
++)
++
++type DSA_PARAMETER_HEADER struct {
++	Length  uint32
++	Magic   KeyBlobMagicNumber
++	KeySize uint32
++	Count   [4]uint8
++	Seed    [20]uint8
++	Q       [20]uint8
++}
++
++type DSA_PARAMETER_HEADER_V2 struct {
++	Length          uint32
++	Magic           KeyBlobMagicNumber
++	KeySize         uint32
++	HashAlgorithm   HASHALGORITHM_ENUM
++	StandardVersion DSAFIPSVERSION_ENUM
++	SeedLength      uint32
++	GroupSize       uint32
++	Count           [4]uint8
++}
++
 +type PadMode uint32
 +
 +const (
@@ -9645,6 +10215,14 @@ index 00000000000000..37c64ba6a7fa96
 +
 +	ECDH_PUBLIC_GENERIC_MAGIC  KeyBlobMagicNumber = 0x504B4345
 +	ECDH_PRIVATE_GENERIC_MAGIC KeyBlobMagicNumber = 0x564B4345
++
++	DSA_PARAMETERS_MAGIC KeyBlobMagicNumber = 0x4d505344
++	DSA_PUBLIC_MAGIC     KeyBlobMagicNumber = 0x42505344
++	DSA_PRIVATE_MAGIC    KeyBlobMagicNumber = 0x56505344
++
++	DSA_PARAMETERS_MAGIC_V2 KeyBlobMagicNumber = 0x324d5044
++	DSA_PUBLIC_MAGIC_V2     KeyBlobMagicNumber = 0x32425044
++	DSA_PRIVATE_MAGIC_V2    KeyBlobMagicNumber = 0x32565044
 +)
 +
 +type (
@@ -9731,6 +10309,26 @@ index 00000000000000..37c64ba6a7fa96
 +	KeySize uint32
 +}
 +
++// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_dsa_key_blob
++type DSA_KEY_BLOB struct {
++	Magic   KeyBlobMagicNumber
++	KeySize uint32
++	Count   [4]uint8
++	Seed    [20]uint8
++	Q       [20]uint8
++}
++
++// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_dsa_key_blob_v2
++type DSA_KEY_BLOB_V2 struct {
++	Magic           KeyBlobMagicNumber
++	KeySize         uint32
++	HashAlgorithm   HASHALGORITHM_ENUM
++	StandardVersion DSAFIPSVERSION_ENUM
++	SeedLength      uint32
++	GroupSize       uint32
++	Count           [4]uint8
++}
++
 +func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) {
 +	var pInput *byte
 +	if len(plaintext) > 0 {
@@ -10285,7 +10883,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7562f74b39ada6..6e996fecefb628 100644
+index 7562f74b39ada6..d4e66e028cbf17 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -10293,7 +10891,7 @@ index 7562f74b39ada6..6e996fecefb628 100644
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20240109184443-a968e40d3103
++# github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050
 +## explicit; go 1.17
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 8b60bc202539e1c0960f26293207e14f410cafa1 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 27 Sep 2024 10:30:59 +0200
Subject: [PATCH 027/887] upgrade microsoft/go-crypto-winnative

---
 patches/0005-Add-CNG-crypto-backend.patch |  6 +++---
 patches/0006-Vendor-crypto-backends.patch | 22 +++++++++++++---------
 2 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 0bfcded3093..bddb17b6408 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -1019,7 +1019,7 @@ index 7a6455fefb4bed..ac91a5201b6581 100644
  
  require (
  	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050
++	github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
@@ -1030,8 +1030,8 @@ index b8e460e0a13c1c..19b381f6211587 100644
 @@ -1,5 +1,7 @@
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050 h1:DYP8AiC/xuYDxOkvZQy9QVnFee4rBUCmzN54Iit5pkQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050/go.mod h1:fveERXKbeK+XLmOyU24caKnIT/S5nniAX9XCRHfnrM4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb h1:b8TGHZrQVCwpRzl9gFJLf3/1IgkdbEc7C8MBatQTgMA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index f5de3e8682e..a6c7db91367 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -56,7 +56,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
  .../go-crypto-winnative/cng/pbkdf2.go         |   74 ++
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
- .../microsoft/go-crypto-winnative/cng/rc4.go  |   61 +
+ .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  374 ++++++
  .../go-crypto-winnative/cng/tls1prf.go        |   92 ++
  .../internal/bcrypt/bcrypt_windows.go         |  359 ++++++
@@ -64,7 +64,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 59 files changed, 10418 insertions(+)
+ 59 files changed, 10422 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
@@ -7351,7 +7351,7 @@ index 00000000000000..36f0e0c6e278bc
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
 new file mode 100644
-index 00000000000000..61f5dc878d6c56
+index 00000000000000..b6f25a1a64794a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
 @@ -0,0 +1,56 @@
@@ -7391,7 +7391,7 @@ index 00000000000000..61f5dc878d6c56
 +		return cipherAlgorithm{h, lengths}, nil
 +	})
 +	if err != nil {
-+		return cipherAlgorithm{}, nil
++		return cipherAlgorithm{}, err
 +	}
 +	return v.(cipherAlgorithm), nil
 +}
@@ -9480,10 +9480,10 @@ index 00000000000000..cdd845ab5bea98
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rc4.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rc4.go
 new file mode 100644
-index 00000000000000..e0d45070f26723
+index 00000000000000..f484a3e2211e04
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rc4.go
-@@ -0,0 +1,61 @@
+@@ -0,0 +1,65 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9533,6 +9533,10 @@ index 00000000000000..e0d45070f26723
 +	if c.kh == 0 || len(src) == 0 {
 +		return
 +	}
++	// rc4.Cipher.XORKeyStream throws an out of bounds panic if
++	// dst is smaller than src. Replicate the same behavior here.
++	_ = dst[len(src)-1]
++
 +	if subtle.InexactOverlap(dst[:len(src)], src) {
 +		panic("crypto/rc4: invalid buffer overlap")
 +	}
@@ -10883,7 +10887,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7562f74b39ada6..d4e66e028cbf17 100644
+index 7562f74b39ada6..4a5212f108557c 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -10891,8 +10895,8 @@ index 7562f74b39ada6..d4e66e028cbf17 100644
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20240925150332-fdc07bead050
-+## explicit; go 1.17
++# github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb
++## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt

From 07e4fd05bb4c3deb46641f055a573d7f8a729d49 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 27 Sep 2024 14:09:13 +0200
Subject: [PATCH 028/887] resolve conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  |  16 +-
 .../0003-Add-BoringSSL-crypto-backend.patch   |   2 +-
 ...0010-Support-TLS-1.3-in-fipstls-mode.patch | 281 ------------------
 ...OFIPS-when-running-the-Go-toolchain.patch} |   0
 ...pport-for-logging-used-Windows-APIs.patch} |   0
 ... 0012-remove-long-path-support-hack.patch} |   0
 ...ernal-go.mod-files-used-for-codegen.patch} |   0
 7 files changed, 9 insertions(+), 290 deletions(-)
 delete mode 100644 patches/0010-Support-TLS-1.3-in-fipstls-mode.patch
 rename patches/{0011-unset-GOFIPS-when-running-the-Go-toolchain.patch => 0010-unset-GOFIPS-when-running-the-Go-toolchain.patch} (100%)
 rename patches/{0012-add-support-for-logging-used-Windows-APIs.patch => 0011-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0013-remove-long-path-support-hack.patch => 0012-remove-long-path-support-hack.patch} (100%)
 rename patches/{0014-Omit-internal-go.mod-files-used-for-codegen.patch => 0013-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 6507170b41a..a9494e5bb94 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -877,8 +877,8 @@ index 843678702bf93f..28f4ae5621921d 100644
  	"hash"
  	"internal/byteorder"
 @@ -99,6 +100,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
- // implements [encoding.BinaryMarshaler] and [encoding.BinaryUnmarshaler] to
- // marshal and unmarshal the internal state of the hash.
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
  func New() hash.Hash {
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
 +		return boring.NewMD5()
@@ -1217,8 +1217,8 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  	"hash"
  	"internal/byteorder"
 @@ -153,7 +153,7 @@ func New() hash.Hash {
- 
- // New224 returns a new hash.Hash computing the SHA224 checksum.
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
  func New224() hash.Hash {
 -	if boring.Enabled {
 +	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
@@ -1308,9 +1308,9 @@ index be10b71bd2269b..d879139773d1d7 100644
 +	fipstls.Abandon()
 +}
 +
- func TestBoringServerProtocolVersion(t *testing.T) {
- 	test := func(t *testing.T, name string, v uint16, msg string) {
- 		t.Run(name, func(t *testing.T) {
+ func allCipherSuitesIncludingTLS13() []uint16 {
+ 	s := allCipherSuites()
+ 	for _, suite := range cipherSuitesTLS13 {
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index eebc66880d631f..42a26005ff31f2 100644
 --- a/src/crypto/tls/cipher_suites.go
@@ -1708,8 +1708,8 @@ index 33fd0ed52b1ff6..ffc3eeca9dbf95 100644
 +}
 +
  func boringRSAKey(t *testing.T, size int) *rsa.PrivateKey {
+ 	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
- 	if err != nil {
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 441cf8d051c934..ca6a512bf95c7e 100644
 --- a/src/go/build/deps_test.go
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 75a7a08b4f0..430b91187d5 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -84,7 +84,7 @@ index 00000000000000..7c5fbeea717618
 +
 +func NewAESCipher(key []byte) (cipher.Block, error) { return boring.NewAESCipher(key) }
 +func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS(c) }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS13(c) }
 +
 +type PublicKeyECDSA = boring.PublicKeyECDSA
 +type PrivateKeyECDSA = boring.PrivateKeyECDSA
diff --git a/patches/0010-Support-TLS-1.3-in-fipstls-mode.patch b/patches/0010-Support-TLS-1.3-in-fipstls-mode.patch
deleted file mode 100644
index 83e36728eef..00000000000
--- a/patches/0010-Support-TLS-1.3-in-fipstls-mode.patch
+++ /dev/null
@@ -1,281 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Tue, 30 Jan 2024 11:40:31 +0100
-Subject: [PATCH] Support TLS 1.3 in fipstls mode
-
----
- src/crypto/tls/boring_test.go            | 54 +++++++++++++++++++-----
- src/crypto/tls/cipher_suites.go          | 15 +++++--
- src/crypto/tls/defaults.go               |  3 +-
- src/crypto/tls/handshake_client.go       | 13 +++++-
- src/crypto/tls/handshake_client_tls13.go |  4 --
- src/crypto/tls/handshake_server_test.go  |  3 ++
- src/crypto/tls/handshake_server_tls13.go |  7 ++-
- 7 files changed, 73 insertions(+), 26 deletions(-)
-
-diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 1b47fc8bffdf1d..eda147261bbc96 100644
---- a/src/crypto/tls/boring_test.go
-+++ b/src/crypto/tls/boring_test.go
-@@ -30,6 +30,31 @@ func init() {
- 	fipstls.Abandon()
- }
- 
-+func allCipherSuitesIncludingTLS13() []uint16 {
-+	s := allCipherSuites()
-+	for _, suite := range cipherSuitesTLS13 {
-+		s = append(s, suite.id)
-+	}
-+	return s
-+}
-+
-+func isTLS13CipherSuite(id uint16) bool {
-+	for _, suite := range cipherSuitesTLS13 {
-+		if id == suite.id {
-+			return true
-+		}
-+	}
-+	return false
-+}
-+
-+func generateKeyShare(group CurveID) keyShare {
-+	key, err := generateECDHEKey(rand.Reader, group)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return keyShare{group: group, data: key.PublicKey().Bytes()}
-+}
-+
- func TestBoringServerProtocolVersion(t *testing.T) {
- 	test := func(t *testing.T, name string, v uint16, msg string) {
- 		t.Run(name, func(t *testing.T) {
-@@ -65,22 +90,22 @@ func TestBoringServerProtocolVersion(t *testing.T) {
- 		test(t, "VersionTLS10", VersionTLS10, "supported versions")
- 		test(t, "VersionTLS11", VersionTLS11, "supported versions")
- 		test(t, "VersionTLS12", VersionTLS12, "")
--		test(t, "VersionTLS13", VersionTLS13, "supported versions")
-+		test(t, "VersionTLS13", VersionTLS13, "")
- 	})
- }
- 
- func isBoringVersion(v uint16) bool {
--	return v == VersionTLS12
-+	return v == VersionTLS12 || v == VersionTLS13
- }
- 
- func isBoringCipherSuite(id uint16) bool {
- 	switch id {
--	case TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
-+	case TLS_AES_128_GCM_SHA256,
-+		TLS_AES_256_GCM_SHA384,
-+		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
- 		TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
- 		TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
--		TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
--		TLS_RSA_WITH_AES_128_GCM_SHA256,
--		TLS_RSA_WITH_AES_256_GCM_SHA384:
-+		TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:
- 		return true
- 	}
- 	return false
-@@ -100,7 +125,7 @@ func isECDSA(id uint16) bool {
- 			return suite.flags&suiteECSign == suiteECSign
- 		}
- 	}
--	panic(fmt.Sprintf("unknown cipher suite %#x", id))
-+	return false // TLS 1.3 cipher suites are not tied to the signature algorithm.
- }
- 
- func isBoringSignatureScheme(alg SignatureScheme) bool {
-@@ -123,10 +148,9 @@ func isBoringSignatureScheme(alg SignatureScheme) bool {
- 
- func TestBoringServerCipherSuites(t *testing.T) {
- 	serverConfig := testConfig.Clone()
--	serverConfig.CipherSuites = allCipherSuites()
- 	serverConfig.Certificates = make([]Certificate, 1)
- 
--	for _, id := range allCipherSuites() {
-+	for _, id := range allCipherSuitesIncludingTLS13() {
- 		if isECDSA(id) {
- 			serverConfig.Certificates[0].Certificate = [][]byte{testECDSACertificate}
- 			serverConfig.Certificates[0].PrivateKey = testECDSAPrivateKey
-@@ -135,14 +159,22 @@ func TestBoringServerCipherSuites(t *testing.T) {
- 			serverConfig.Certificates[0].PrivateKey = testRSAPrivateKey
- 		}
- 		serverConfig.BuildNameToCertificate()
--		t.Run(fmt.Sprintf("suite=%#x", id), func(t *testing.T) {
-+		t.Run(fmt.Sprintf("suite=%#x", CipherSuiteName(id)), func(t *testing.T) {
- 			clientHello := &clientHelloMsg{
- 				vers:               VersionTLS12,
- 				random:             make([]byte, 32),
- 				cipherSuites:       []uint16{id},
- 				compressionMethods: []uint8{compressionNone},
- 				supportedCurves:    defaultCurvePreferences(),
-+				keyShares:          []keyShare{generateKeyShare(CurveP256)},
- 				supportedPoints:    []uint8{pointFormatUncompressed},
-+				supportedVersions:  []uint16{VersionTLS12},
-+			}
-+			// This test runs for both TLS 1.2 and 1.3. For TLS 1.3, we need to
-+			// specify more about the supported versions/algorithms.
-+			if isTLS13CipherSuite(id) {
-+				clientHello.supportedVersions = []uint16{VersionTLS13}
-+				clientHello.supportedSignatureAlgorithms = supportedSignatureAlgorithms()
- 			}
- 
- 			testClientHello(t, serverConfig, clientHello)
-@@ -293,7 +325,7 @@ func TestBoringClientHello(t *testing.T) {
- 	}
- 
- 	if !isBoringVersion(hello.vers) {
--		t.Errorf("client vers=%#x, want %#x (TLS 1.2)", hello.vers, VersionTLS12)
-+		t.Errorf("client vers=%#x", hello.vers)
- 	}
- 	for _, v := range hello.supportedVersions {
- 		if !isBoringVersion(v) {
-diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 42a26005ff31f2..0c16bd8a884e14 100644
---- a/src/crypto/tls/cipher_suites.go
-+++ b/src/crypto/tls/cipher_suites.go
-@@ -17,6 +17,7 @@ import (
- 	"fmt"
- 	"hash"
- 	"internal/cpu"
-+	"internal/goexperiment"
- 	"runtime"
- 	_ "unsafe" // for linkname
- 
-@@ -552,9 +553,17 @@ func aeadAESGCMTLS13(key, nonceMask []byte) aead {
- 	if err != nil {
- 		panic(err)
- 	}
--	aead, err := cipher.NewGCM(aes)
--	if err != nil {
--		panic(err)
-+	var aead cipher.AEAD
-+	if boring.Enabled {
-+		if goexperiment.BoringCrypto {
-+			// TODO: remove this once BoringCrypto supports TLS 1.3.
-+			aead, err = cipher.NewGCM(aes)
-+		} else {
-+			aead, err = boring.NewGCMTLS13(aes)
-+		}
-+	} else {
-+		boring.Unreachable()
-+		aead, err = cipher.NewGCM(aes)
- 	}
- 
- 	ret := &xorNonceAEAD{aead: aead}
-diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 9b28acdc2d866a..3e780f447b522b 100644
---- a/src/crypto/tls/defaults.go
-+++ b/src/crypto/tls/defaults.go
-@@ -92,6 +92,7 @@ var defaultCipherSuitesTLS13NoAES = []uint16{
- 
- var defaultSupportedVersionsFIPS = []uint16{
- 	VersionTLS12,
-+	VersionTLS13,
- }
- 
- // defaultCurvePreferencesFIPS are the FIPS-allowed curves,
-@@ -118,8 +119,6 @@ var defaultCipherSuitesFIPS = []uint16{
- 	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
- 	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
- 	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
--	TLS_RSA_WITH_AES_128_GCM_SHA256,
--	TLS_RSA_WITH_AES_256_GCM_SHA384,
- }
- 
- // defaultCipherSuitesTLS13FIPS are the FIPS-allowed cipher suites for TLS 1.3.
-diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 6873e8daf631a7..585640d4b1a4d5 100644
---- a/src/crypto/tls/handshake_client.go
-+++ b/src/crypto/tls/handshake_client.go
-@@ -141,13 +141,22 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCon
- 		if len(hello.supportedVersions) == 1 {
- 			hello.cipherSuites = nil
- 		}
--		if hasAESGCMHardwareSupport {
-+		if needFIPS() {
-+			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13FIPS...)
-+		} else if hasAESGCMHardwareSupport {
- 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
- 		} else {
- 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13NoAES...)
- 		}
- 
--		curveID := config.curvePreferences(maxVersion)[0]
-+		curveIDs := config.curvePreferences(maxVersion)
-+		if len(curveIDs) == 0 {
-+			// If TLS 1.3 FIPS restrictions are enabled, the filter applied by
-+			// curvePreferences() may exclude all curves specified by config.
-+			// In this case, there are certainly no supported curves.
-+			return nil, nil, nil, errors.New("tls: CurvePreferences includes no supported curves")
-+		}
-+		curveID := curveIDs[0]
- 		keyShareKeys = &keySharePrivateKeys{curveID: curveID}
- 		if curveID == x25519Kyber768Draft00 {
- 			keyShareKeys.ecdhe, err = generateECDHEKey(config.rand(), X25519)
-diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 6744e713c9ffa8..5b4c4568555d3d 100644
---- a/src/crypto/tls/handshake_client_tls13.go
-+++ b/src/crypto/tls/handshake_client_tls13.go
-@@ -45,10 +45,6 @@ type clientHandshakeStateTLS13 struct {
- func (hs *clientHandshakeStateTLS13) handshake() error {
- 	c := hs.c
- 
--	if needFIPS() {
--		return errors.New("tls: internal error: TLS 1.3 reached in FIPS mode")
--	}
--
- 	// The server must not select TLS 1.3 in a renegotiation. See RFC 8446,
- 	// sections 4.1.2 and 4.1.3.
- 	if c.handshakes > 0 {
-diff --git a/src/crypto/tls/handshake_server_test.go b/src/crypto/tls/handshake_server_test.go
-index bc45a289c1ed70..47e2ce17bb9e8e 100644
---- a/src/crypto/tls/handshake_server_test.go
-+++ b/src/crypto/tls/handshake_server_test.go
-@@ -27,6 +27,7 @@ import (
- )
- 
- func testClientHello(t *testing.T, serverConfig *Config, m handshakeMessage) {
-+	t.Helper()
- 	testClientHelloFailure(t, serverConfig, m, "")
- }
- 
-@@ -84,9 +85,11 @@ func testClientHelloFailure(t *testing.T, serverConfig *Config, m handshakeMessa
- 	t.Helper()
- 	if len(expectedSubStr) == 0 {
- 		if err != nil && err != io.EOF {
-+			t.Helper()
- 			t.Errorf("Got error: %s; expected to succeed", err)
- 		}
- 	} else if err == nil || !strings.Contains(err.Error(), expectedSubStr) {
-+		t.Helper()
- 		t.Errorf("Got error: %v; expected to match substring '%s'", err, expectedSubStr)
- 	}
- }
-diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index f88fcad4e78f0d..b95299a44c8fc1 100644
---- a/src/crypto/tls/handshake_server_tls13.go
-+++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -48,10 +48,6 @@ type serverHandshakeStateTLS13 struct {
- func (hs *serverHandshakeStateTLS13) handshake() error {
- 	c := hs.c
- 
--	if needFIPS() {
--		return errors.New("tls: internal error: TLS 1.3 reached in FIPS mode")
--	}
--
- 	// For an overview of the TLS 1.3 handshake, see RFC 8446, Section 2.
- 	if err := hs.processClientHello(); err != nil {
- 		return err
-@@ -166,6 +162,9 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
- 	if !hasAESGCMHardwareSupport || !aesgcmPreferred(hs.clientHello.cipherSuites) {
- 		preferenceList = defaultCipherSuitesTLS13NoAES
- 	}
-+	if needFIPS() {
-+		preferenceList = defaultCipherSuitesTLS13FIPS
-+	}
- 	for _, suiteID := range preferenceList {
- 		hs.suite = mutualCipherSuiteTLS13(hs.clientHello.cipherSuites, suiteID)
- 		if hs.suite != nil {
diff --git a/patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
similarity index 100%
rename from patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch
rename to patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
diff --git a/patches/0012-add-support-for-logging-used-Windows-APIs.patch b/patches/0011-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0012-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0011-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0013-remove-long-path-support-hack.patch b/patches/0012-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0013-remove-long-path-support-hack.patch
rename to patches/0012-remove-long-path-support-hack.patch
diff --git a/patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch

From 40b70842a14dcf4c1fc30eff538450aa4f2eaeb3 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 30 Sep 2024 09:39:07 +0200
Subject: [PATCH 029/887] bump go-crypto-winnative

---
 patches/0005-Add-CNG-crypto-backend.patch |   6 +-
 patches/0006-Vendor-crypto-backends.patch | 294 ++++++++++------------
 2 files changed, 133 insertions(+), 167 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index bddb17b6408..b2bf22f27fa 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -1019,7 +1019,7 @@ index 7a6455fefb4bed..ac91a5201b6581 100644
  
  require (
  	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb
++	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
@@ -1030,8 +1030,8 @@ index b8e460e0a13c1c..19b381f6211587 100644
 @@ -1,5 +1,7 @@
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
  github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb h1:b8TGHZrQVCwpRzl9gFJLf3/1IgkdbEc7C8MBatQTgMA=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index a6c7db91367..e33acea7273 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -41,30 +41,30 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../openssl/v2/thread_setup_windows.c         |   64 +
  .../golang-fips/openssl/v2/tls1prf.go         |  104 ++
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  389 ++++++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  393 +++++++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
- .../go-crypto-winnative/cng/cipher.go         |   56 +
- .../microsoft/go-crypto-winnative/cng/cng.go  |  130 ++
+ .../go-crypto-winnative/cng/cipher.go         |   52 +
+ .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +++
  .../microsoft/go-crypto-winnative/cng/des.go  |  107 ++
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  473 ++++++++
- .../microsoft/go-crypto-winnative/cng/ecdh.go |  260 ++++
- .../go-crypto-winnative/cng/ecdsa.go          |  175 +++
- .../microsoft/go-crypto-winnative/cng/hash.go |  320 +++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  179 +++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  469 ++++++++
+ .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++++
+ .../go-crypto-winnative/cng/ecdsa.go          |  169 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  316 +++++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  175 +++
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
- .../go-crypto-winnative/cng/pbkdf2.go         |   74 ++
+ .../go-crypto-winnative/cng/pbkdf2.go         |   70 ++
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
- .../microsoft/go-crypto-winnative/cng/rsa.go  |  374 ++++++
- .../go-crypto-winnative/cng/tls1prf.go        |   92 ++
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  370 ++++++
+ .../go-crypto-winnative/cng/tls1prf.go        |   88 ++
  .../internal/bcrypt/bcrypt_windows.go         |  359 ++++++
  .../internal/bcrypt/zsyscall_windows.go       |  389 ++++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 59 files changed, 10422 insertions(+)
+ 59 files changed, 10388 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
@@ -6883,10 +6883,10 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 new file mode 100644
-index 00000000000000..7fda49a773097a
+index 00000000000000..caac632894556e
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-@@ -0,0 +1,389 @@
+@@ -0,0 +1,393 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -6929,16 +6929,28 @@ index 00000000000000..7fda49a773097a
 +
 +func (c *aesCipher) BlockSize() int { return aesBlockSize }
 +
-+func (c *aesCipher) Encrypt(dst, src []byte) {
-+	if subtle.InexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
-+	}
++// validateAndClipInputs checks that dst and src meet the [cipher.Block]
++// interface requirements and clips them to a single block.
++func (c *aesCipher) validateAndClipInputs(dst, src []byte) (d, s []byte) {
 +	if len(src) < aesBlockSize {
 +		panic("crypto/aes: input not full block")
 +	}
 +	if len(dst) < aesBlockSize {
 +		panic("crypto/aes: output not full block")
 +	}
++	// cypher.Block methods are documented to operate on
++	// one block at a time, so we truncate the input and output
++	// to the block size.
++	d, s = dst[:aesBlockSize], src[:aesBlockSize]
++	if subtle.InexactOverlap(d, s) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++	return d, s
++}
++
++func (c *aesCipher) Encrypt(dst, src []byte) {
++	dst, src = c.validateAndClipInputs(dst, src)
++
 +	var ret uint32
 +	err := bcrypt.Encrypt(c.kh, src, nil, nil, dst, &ret, 0)
 +	if err != nil {
@@ -6951,15 +6963,7 @@ index 00000000000000..7fda49a773097a
 +}
 +
 +func (c *aesCipher) Decrypt(dst, src []byte) {
-+	if subtle.InexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
-+	}
-+	if len(src) < aesBlockSize {
-+		panic("crypto/aes: input not full block")
-+	}
-+	if len(dst) < aesBlockSize {
-+		panic("crypto/aes: output not full block")
-+	}
++	dst, src = c.validateAndClipInputs(dst, src)
 +
 +	var ret uint32
 +	err := bcrypt.Decrypt(c.kh, src, nil, nil, dst, &ret, 0)
@@ -7351,10 +7355,10 @@ index 00000000000000..36f0e0c6e278bc
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
 new file mode 100644
-index 00000000000000..b6f25a1a64794a
+index 00000000000000..c1365f8d399d21
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
-@@ -0,0 +1,56 @@
+@@ -0,0 +1,52 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -7375,25 +7379,21 @@ index 00000000000000..b6f25a1a64794a
 +}
 +
 +func loadCipher(id, mode string) (cipherAlgorithm, error) {
-+	v, err := loadOrStoreAlg(id, bcrypt.ALG_NONE_FLAG, mode, func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(id, bcrypt.ALG_NONE_FLAG, mode, func(h bcrypt.ALG_HANDLE) (cipherAlgorithm, error) {
 +		if mode != "" {
 +			// Windows 8 added support to set the CipherMode value on a key,
 +			// but Windows 7 requires that it be set on the algorithm before key creation.
 +			err := setString(bcrypt.HANDLE(h), bcrypt.CHAINING_MODE, mode)
 +			if err != nil {
-+				return nil, err
++				return cipherAlgorithm{}, err
 +			}
 +		}
 +		lengths, err := getKeyLengths(bcrypt.HANDLE(h))
 +		if err != nil {
-+			return nil, err
++			return cipherAlgorithm{}, err
 +		}
 +		return cipherAlgorithm{h, lengths}, nil
 +	})
-+	if err != nil {
-+		return cipherAlgorithm{}, err
-+	}
-+	return v.(cipherAlgorithm), nil
 +}
 +
 +func newCipherHandle(id, mode string, key []byte) (bcrypt.KEY_HANDLE, error) {
@@ -7413,10 +7413,10 @@ index 00000000000000..b6f25a1a64794a
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
 new file mode 100644
-index 00000000000000..844c087287cabe
+index 00000000000000..d1916f94a0a76d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
-@@ -0,0 +1,130 @@
+@@ -0,0 +1,131 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -7455,9 +7455,10 @@ index 00000000000000..844c087287cabe
 +
 +var algCache sync.Map
 +
-+type newAlgEntryFn func(h bcrypt.ALG_HANDLE) (interface{}, error)
-+
-+func loadOrStoreAlg(id string, flags bcrypt.AlgorithmProviderFlags, mode string, fn newAlgEntryFn) (interface{}, error) {
++// loadOrStoreAlg loads an algorithm with the given id, flags, and mode from the cache.
++// If the algorithm is not in the cache, a new one is created and then initialized using fn.
++// The returned algorithm handle should not be closed by the caller.
++func loadOrStoreAlg[T any](id string, flags bcrypt.AlgorithmProviderFlags, mode string, fn func(h bcrypt.ALG_HANDLE) (T, error)) (T, error) {
 +	var entryKey = struct {
 +		id    string
 +		flags bcrypt.AlgorithmProviderFlags
@@ -7465,22 +7466,22 @@ index 00000000000000..844c087287cabe
 +	}{id, flags, mode}
 +
 +	if v, ok := algCache.Load(entryKey); ok {
-+		return v, nil
++		return v.(T), nil
 +	}
 +	var h bcrypt.ALG_HANDLE
 +	err := bcrypt.OpenAlgorithmProvider(&h, utf16PtrFromString(id), nil, flags)
 +	if err != nil {
-+		return nil, err
++		return *new(T), err
 +	}
 +	v, err := fn(h)
 +	if err != nil {
 +		bcrypt.CloseAlgorithmProvider(h, 0)
-+		return nil, err
++		return *new(T), err
 +	}
 +	if existing, loaded := algCache.LoadOrStore(entryKey, v); loaded {
 +		// We can safely use a provider that has already been cached in another concurrent goroutine.
 +		bcrypt.CloseAlgorithmProvider(h, 0)
-+		v = existing
++		v = existing.(T)
 +	}
 +	return v, nil
 +}
@@ -7662,10 +7663,10 @@ index 00000000000000..b0784affba0aa4
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
 new file mode 100644
-index 00000000000000..bd3e19dcf7f035
+index 00000000000000..5d4d3974d0c52c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
-@@ -0,0 +1,473 @@
+@@ -0,0 +1,469 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -7707,17 +7708,13 @@ index 00000000000000..bd3e19dcf7f035
 +}
 +
 +func loadDSA() (h dsaAlgorithm, err error) {
-+	v, err := loadOrStoreAlg(bcrypt.DSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(bcrypt.DSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (dsaAlgorithm, error) {
 +		lengths, err := getKeyLengths(bcrypt.HANDLE(h))
 +		if err != nil {
-+			return nil, err
++			return dsaAlgorithm{}, err
 +		}
 +		return dsaAlgorithm{h, lengths}, nil
 +	})
-+	if err != nil {
-+		return dsaAlgorithm{}, err
-+	}
-+	return v.(dsaAlgorithm), nil
 +}
 +
 +// DSAParameters contains the DSA parameters.
@@ -8141,10 +8138,10 @@ index 00000000000000..bd3e19dcf7f035
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
 new file mode 100644
-index 00000000000000..cd6e9a98f6f967
+index 00000000000000..2738728eb1b66f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
-@@ -0,0 +1,260 @@
+@@ -0,0 +1,255 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8167,36 +8164,31 @@ index 00000000000000..cd6e9a98f6f967
 +
 +type ecdhAlgorithm struct {
 +	handle bcrypt.ALG_HANDLE
-+}
-+
-+func loadECDH(curve string) (h ecdhAlgorithm, bits uint32, err error) {
-+	var id string
-+	switch curve {
-+	case "P-256":
-+		id, bits = bcrypt.ECC_CURVE_NISTP256, 256
-+	case "P-384":
-+		id, bits = bcrypt.ECC_CURVE_NISTP384, 384
-+	case "P-521":
-+		id, bits = bcrypt.ECC_CURVE_NISTP521, 521
-+	case "X25519":
-+		id, bits = bcrypt.ECC_CURVE_25519, 255
-+	default:
-+		err = errUnknownCurve
-+	}
-+	if err != nil {
-+		return
-+	}
-+	v, err := loadOrStoreAlg(bcrypt.ECDH_ALGORITHM, bcrypt.ALG_NONE_FLAG, id, func(h bcrypt.ALG_HANDLE) (interface{}, error) {
-+		err := setString(bcrypt.HANDLE(h), bcrypt.ECC_CURVE_NAME, id)
++	bits   uint32
++}
++
++func loadECDH(curve string) (ecdhAlgorithm, error) {
++	return loadOrStoreAlg(bcrypt.ECDH_ALGORITHM, bcrypt.ALG_NONE_FLAG, curve, func(h bcrypt.ALG_HANDLE) (ecdhAlgorithm, error) {
++		var name string
++		var bits uint32
++		switch curve {
++		case "P-256":
++			name, bits = bcrypt.ECC_CURVE_NISTP256, 256
++		case "P-384":
++			name, bits = bcrypt.ECC_CURVE_NISTP384, 384
++		case "P-521":
++			name, bits = bcrypt.ECC_CURVE_NISTP521, 521
++		case "X25519":
++			name, bits = bcrypt.ECC_CURVE_25519, 255
++		default:
++			return ecdhAlgorithm{}, errUnknownCurve
++		}
++		err := setString(bcrypt.HANDLE(h), bcrypt.ECC_CURVE_NAME, name)
 +		if err != nil {
-+			return nil, err
++			return ecdhAlgorithm{}, err
 +		}
-+		return ecdhAlgorithm{h}, nil
++		return ecdhAlgorithm{h, bits}, nil
 +	})
-+	if err != nil {
-+		return ecdhAlgorithm{}, 0, err
-+	}
-+	return v.(ecdhAlgorithm), bits, nil
 +}
 +
 +type PublicKeyECDH struct {
@@ -8262,12 +8254,12 @@ index 00000000000000..cd6e9a98f6f967
 +}
 +
 +func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	h, bits, err := loadECDH(curve)
++	h, err := loadECDH(curve)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +	var hkey bcrypt.KEY_HANDLE
-+	err = bcrypt.GenerateKeyPair(h.handle, &hkey, bits, 0)
++	err = bcrypt.GenerateKeyPair(h.handle, &hkey, h.bits, 0)
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -8301,7 +8293,7 @@ index 00000000000000..cd6e9a98f6f967
 +	if len(bytes) == 0 || (nist && bytes[0] != ecdhUncompressedPrefix) {
 +		return nil, errInvalidPublicKey
 +	}
-+	h, bits, err := loadECDH(curve)
++	h, err := loadECDH(curve)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -8316,11 +8308,11 @@ index 00000000000000..cd6e9a98f6f967
 +		ncomponents = 1
 +		keyWithoutEncoding = bytes
 +	}
-+	keySize := int(bits+7) / 8
++	keySize := int(h.bits+7) / 8
 +	if len(keyWithoutEncoding) != keySize*ncomponents {
 +		return nil, errInvalidPublicKey
 +	}
-+	hkey, err := importECCKey(h.handle, bcrypt.ECDH_ALGORITHM, bits, keyWithoutEncoding[:keySize], keyWithoutEncoding[keySize:], nil)
++	hkey, err := importECCKey(h.handle, bcrypt.ECDH_ALGORITHM, h.bits, keyWithoutEncoding[:keySize], keyWithoutEncoding[keySize:], nil)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -8332,11 +8324,11 @@ index 00000000000000..cd6e9a98f6f967
 +func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
 +
 +func NewPrivateKeyECDH(curve string, key []byte) (*PrivateKeyECDH, error) {
-+	h, bits, err := loadECDH(curve)
++	h, err := loadECDH(curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	keySize := int(bits+7) / 8
++	keySize := int(h.bits+7) / 8
 +	if len(key) != keySize {
 +		return nil, errInvalidPrivateKey
 +	}
@@ -8349,7 +8341,7 @@ index 00000000000000..cd6e9a98f6f967
 +	// To trigger this behavior we pass a zeroed X/Y with keySize length.
 +	// zero is big enough to fit P-521 curves, the largest we handle, in the stack.
 +	var zero [(521 + 7) / 8]byte
-+	hkey, err := importECCKey(h.handle, bcrypt.ECDH_ALGORITHM, bits, zero[:keySize], zero[:keySize], key)
++	hkey, err := importECCKey(h.handle, bcrypt.ECDH_ALGORITHM, h.bits, zero[:keySize], zero[:keySize], key)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -8407,10 +8399,10 @@ index 00000000000000..cd6e9a98f6f967
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go
 new file mode 100644
-index 00000000000000..a77ff97bb8f521
+index 00000000000000..586e9ae2ebb0c9
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go
-@@ -0,0 +1,175 @@
+@@ -0,0 +1,169 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8430,47 +8422,41 @@ index 00000000000000..a77ff97bb8f521
 +
 +type ecdsaAlgorithm struct {
 +	handle bcrypt.ALG_HANDLE
-+}
-+
-+func loadECDSA(curve string) (h ecdsaAlgorithm, bits uint32, err error) {
-+	var id string
-+	switch curve {
-+	case "P-224":
-+		id, bits = bcrypt.ECC_CURVE_NISTP224, 224
-+	case "P-256":
-+		id, bits = bcrypt.ECC_CURVE_NISTP256, 256
-+	case "P-384":
-+		id, bits = bcrypt.ECC_CURVE_NISTP384, 384
-+	case "P-521":
-+		id, bits = bcrypt.ECC_CURVE_NISTP521, 521
-+	default:
-+		err = errUnknownCurve
-+	}
-+	if err != nil {
-+		return
-+	}
-+	v, err := loadOrStoreAlg(bcrypt.ECDSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, id, func(h bcrypt.ALG_HANDLE) (interface{}, error) {
-+		err := setString(bcrypt.HANDLE(h), bcrypt.ECC_CURVE_NAME, id)
++	bits   uint32
++}
++
++func loadECDSA(curve string) (ecdsaAlgorithm, error) {
++	return loadOrStoreAlg(bcrypt.ECDSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, curve, func(h bcrypt.ALG_HANDLE) (ecdsaAlgorithm, error) {
++		var name string
++		var bits uint32
++		switch curve {
++		case "P-224":
++			name, bits = bcrypt.ECC_CURVE_NISTP224, 224
++		case "P-256":
++			name, bits = bcrypt.ECC_CURVE_NISTP256, 256
++		case "P-384":
++			name, bits = bcrypt.ECC_CURVE_NISTP384, 384
++		case "P-521":
++			name, bits = bcrypt.ECC_CURVE_NISTP521, 521
++		default:
++			return ecdsaAlgorithm{}, errUnknownCurve
++		}
++		err := setString(bcrypt.HANDLE(h), bcrypt.ECC_CURVE_NAME, name)
 +		if err != nil {
-+			return nil, err
++			return ecdsaAlgorithm{}, err
 +		}
-+		return ecdsaAlgorithm{h}, nil
++		return ecdsaAlgorithm{h, bits}, nil
 +	})
-+	if err != nil {
-+		return ecdsaAlgorithm{}, 0, err
-+	}
-+	return v.(ecdsaAlgorithm), bits, nil
 +}
 +
 +func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
 +	var h ecdsaAlgorithm
-+	var bits uint32
-+	h, bits, err = loadECDSA(curve)
++	h, err = loadECDSA(curve)
 +	if err != nil {
 +		return
 +	}
 +	var hkey bcrypt.KEY_HANDLE
-+	err = bcrypt.GenerateKeyPair(h.handle, &hkey, bits, 0)
++	err = bcrypt.GenerateKeyPair(h.handle, &hkey, h.bits, 0)
 +	if err != nil {
 +		return
 +	}
@@ -8500,11 +8486,11 @@ index 00000000000000..a77ff97bb8f521
 +}
 +
 +func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
-+	h, bits, err := loadECDSA(curve)
++	h, err := loadECDSA(curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	hkey, err := importECCKey(h.handle, bcrypt.ECDSA_ALGORITHM, bits, X, Y, nil)
++	hkey, err := importECCKey(h.handle, bcrypt.ECDSA_ALGORITHM, h.bits, X, Y, nil)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -8522,11 +8508,11 @@ index 00000000000000..a77ff97bb8f521
 +}
 +
 +func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
-+	h, bits, err := loadECDSA(curve)
++	h, err := loadECDSA(curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	hkey, err := importECCKey(h.handle, bcrypt.ECDSA_ALGORITHM, bits, X, Y, D)
++	hkey, err := importECCKey(h.handle, bcrypt.ECDSA_ALGORITHM, h.bits, X, Y, D)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -8588,10 +8574,10 @@ index 00000000000000..a77ff97bb8f521
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..bebbc999337efb
+index 00000000000000..c4f01e17dd4ca1
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,320 @@
+@@ -0,0 +1,316 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8751,7 +8737,7 @@ index 00000000000000..bebbc999337efb
 +}
 +
 +func loadHash(id string, flags bcrypt.AlgorithmProviderFlags) (*hashAlgorithm, error) {
-+	v, err := loadOrStoreAlg(id, flags, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(id, flags, "", func(h bcrypt.ALG_HANDLE) (*hashAlgorithm, error) {
 +		size, err := getUint32(bcrypt.HANDLE(h), bcrypt.HASH_LENGTH)
 +		if err != nil {
 +			return nil, err
@@ -8762,10 +8748,6 @@ index 00000000000000..bebbc999337efb
 +		}
 +		return &hashAlgorithm{h, id, size, blockSize}, nil
 +	})
-+	if err != nil {
-+		return nil, err
-+	}
-+	return v.(*hashAlgorithm), nil
 +}
 +
 +// hashToID converts a hash.Hash implementation from this package
@@ -8914,10 +8896,10 @@ index 00000000000000..bebbc999337efb
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
-index 00000000000000..6f164ced8a9656
+index 00000000000000..655926ef635224
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -0,0 +1,179 @@
+@@ -0,0 +1,175 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8943,13 +8925,9 @@ index 00000000000000..6f164ced8a9656
 +}
 +
 +func loadHKDF() (bcrypt.ALG_HANDLE, error) {
-+	h, err := loadOrStoreAlg(bcrypt.HKDF_ALGORITHM, 0, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(bcrypt.HKDF_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (bcrypt.ALG_HANDLE, error) {
 +		return h, nil
 +	})
-+	if err != nil {
-+		return 0, err
-+	}
-+	return h.(bcrypt.ALG_HANDLE), nil
 +}
 +
 +type hkdf struct {
@@ -9366,10 +9344,10 @@ index 00000000000000..bc150a7bd39272
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go
 new file mode 100644
-index 00000000000000..42614c9c748f80
+index 00000000000000..5466b180e60e5a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go
-@@ -0,0 +1,74 @@
+@@ -0,0 +1,70 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9387,13 +9365,9 @@ index 00000000000000..42614c9c748f80
 +)
 +
 +func loadPBKDF2() (bcrypt.ALG_HANDLE, error) {
-+	h, err := loadOrStoreAlg(bcrypt.PBKDF2_ALGORITHM, 0, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(bcrypt.PBKDF2_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (bcrypt.ALG_HANDLE, error) {
 +		return h, nil
 +	})
-+	if err != nil {
-+		return 0, err
-+	}
-+	return h.(bcrypt.ALG_HANDLE), nil
 +}
 +
 +func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
@@ -9551,10 +9525,10 @@ index 00000000000000..f484a3e2211e04
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
 new file mode 100644
-index 00000000000000..7e3f7abe3487cb
+index 00000000000000..e9e2a09083a05c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
-@@ -0,0 +1,374 @@
+@@ -0,0 +1,370 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9579,17 +9553,13 @@ index 00000000000000..7e3f7abe3487cb
 +}
 +
 +func loadRsa() (rsaAlgorithm, error) {
-+	v, err := loadOrStoreAlg(bcrypt.RSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(bcrypt.RSA_ALGORITHM, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (rsaAlgorithm, error) {
 +		lengths, err := getKeyLengths(bcrypt.HANDLE(h))
 +		if err != nil {
-+			return nil, err
++			return rsaAlgorithm{}, err
 +		}
 +		return rsaAlgorithm{h, lengths}, nil
 +	})
-+	if err != nil {
-+		return rsaAlgorithm{}, err
-+	}
-+	return v.(rsaAlgorithm), nil
 +}
 +
 +func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
@@ -9931,10 +9901,10 @@ index 00000000000000..7e3f7abe3487cb
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
 new file mode 100644
-index 00000000000000..30ef2242bc3cf3
+index 00000000000000..5a3fb01606ef95
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
-@@ -0,0 +1,92 @@
+@@ -0,0 +1,88 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9952,13 +9922,9 @@ index 00000000000000..30ef2242bc3cf3
 +)
 +
 +func loadTLS1PRF(id string) (bcrypt.ALG_HANDLE, error) {
-+	h, err := loadOrStoreAlg(id, 0, "", func(h bcrypt.ALG_HANDLE) (interface{}, error) {
++	return loadOrStoreAlg(id, bcrypt.ALG_NONE_FLAG, "", func(h bcrypt.ALG_HANDLE) (bcrypt.ALG_HANDLE, error) {
 +		return h, nil
 +	})
-+	if err != nil {
-+		return 0, err
-+	}
-+	return h.(bcrypt.ALG_HANDLE), nil
 +}
 +
 +// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
@@ -10887,7 +10853,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7562f74b39ada6..4a5212f108557c 100644
+index cf5c0b83c9eeef..499d0cde63f7c9 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -10895,7 +10861,7 @@ index 7562f74b39ada6..4a5212f108557c 100644
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20240927070024-fde854564ffb
++# github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 0efbe47e6bd5319c72401ba3ffbfea7dc8ddc3da Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 30 Sep 2024 14:54:06 +0200
Subject: [PATCH 030/887] Support curve P-521 when TLS fipsonly mode is enabled

---
 ...521-when-TLS-fipsonly-mode-is-enable.patch | 49 +++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

diff --git a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
new file mode 100644
index 00000000000..8b24dad80c1
--- /dev/null
+++ b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
@@ -0,0 +1,49 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Mon, 30 Sep 2024 14:41:28 +0200
+Subject: [PATCH] Support curve P-521 when TLS fipsonly mode is enabled
+
+We have historically supported P-521 in TLS when fipsonly mode is
+enabled, as this aligns with CNG, OpenSSL and SymCrypt FIPs policies.
+
+Upstream follows the boringssl FIPS policy, which doesn't allow P-521.
+
+This change adds support for P-521 in TLS when fipsonly mode is enabled.
+---
+ src/crypto/tls/boring_test.go | 1 +
+ src/crypto/tls/defaults.go    | 3 ++-
+ 2 files changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
+index 3cdde9780352a4..7db181ab5b03a4 100644
+--- a/src/crypto/tls/boring_test.go
++++ b/src/crypto/tls/boring_test.go
+@@ -137,6 +137,7 @@ func isBoringSignatureScheme(alg SignatureScheme) bool {
+ 		PKCS1WithSHA384,
+ 		ECDSAWithP384AndSHA384,
+ 		PKCS1WithSHA512,
++		ECDSAWithP521AndSHA512,
+ 		PSSWithSHA256,
+ 		PSSWithSHA384,
+ 		PSSWithSHA512:
+diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
+index ad4070df4a8883..26b6602b841209 100644
+--- a/src/crypto/tls/defaults.go
++++ b/src/crypto/tls/defaults.go
+@@ -99,7 +99,7 @@ var defaultSupportedVersionsFIPS = []uint16{
+ 
+ // defaultCurvePreferencesFIPS are the FIPS-allowed curves,
+ // in preference order (most preferable first).
+-var defaultCurvePreferencesFIPS = []CurveID{CurveP256, CurveP384}
++var defaultCurvePreferencesFIPS = []CurveID{CurveP256, CurveP384, CurveP521}
+ 
+ // defaultSupportedSignatureAlgorithmsFIPS currently are a subset of
+ // defaultSupportedSignatureAlgorithms without Ed25519 and SHA-1.
+@@ -112,6 +112,7 @@ var defaultSupportedSignatureAlgorithmsFIPS = []SignatureScheme{
+ 	PKCS1WithSHA384,
+ 	ECDSAWithP384AndSHA384,
+ 	PKCS1WithSHA512,
++	ECDSAWithP521AndSHA512,
+ }
+ 
+ // defaultCipherSuitesFIPS are the FIPS-allowed cipher suites.

From 57ee7ecacfe0e62b8d94c0748e9d8dfe3ce0123d Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 30 Sep 2024 15:19:27 +0200
Subject: [PATCH 031/887] fix test

---
 ...e-P-521-when-TLS-fipsonly-mode-is-enable.patch | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
index 8b24dad80c1..8000003204f 100644
--- a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
+++ b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
@@ -10,14 +10,23 @@ Upstream follows the boringssl FIPS policy, which doesn't allow P-521.
 
 This change adds support for P-521 in TLS when fipsonly mode is enabled.
 ---
- src/crypto/tls/boring_test.go | 1 +
+ src/crypto/tls/boring_test.go | 3 ++-
  src/crypto/tls/defaults.go    | 3 ++-
- 2 files changed, 3 insertions(+), 1 deletion(-)
+ 2 files changed, 4 insertions(+), 2 deletions(-)
 
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 3cdde9780352a4..7db181ab5b03a4 100644
+index 3cdde9780352a4..0682dfb162268c 100644
 --- a/src/crypto/tls/boring_test.go
 +++ b/src/crypto/tls/boring_test.go
+@@ -113,7 +113,7 @@ func isBoringCipherSuite(id uint16) bool {
+ 
+ func isBoringCurve(id CurveID) bool {
+ 	switch id {
+-	case CurveP256, CurveP384:
++	case CurveP256, CurveP384, CurveP521:
+ 		return true
+ 	}
+ 	return false
 @@ -137,6 +137,7 @@ func isBoringSignatureScheme(alg SignatureScheme) bool {
  		PKCS1WithSHA384,
  		ECDSAWithP384AndSHA384,

From 2a920676a352c81f2f8af0b25aaf1c156f1450a3 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 30 Sep 2024 16:07:07 +0000
Subject: [PATCH 032/887] Update submodule to latest master (f4b7291d):
 crypto/internal/randutil: use math/rand/v2

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 6cb107452a5..f4b7291d73c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 6cb107452a5a5551a04baf6bc4ff0b8299dfb596
+Subproject commit f4b7291d73c40af90fdbc5fa0d72a26c5f127931

From 324e76d36775c51f99113b65acdc143671a0624a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Oct 2024 10:26:22 +0000
Subject: [PATCH 033/887] Bump github/codeql-action from 3.26.9 to 3.26.10

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.9 to 3.26.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/461ef6c76dfe95d5c364de2f431ddbd31a417628...e2b3eafc8d227b0241d48be5f425d47c2d750a13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a434d5e5699..362c195be96 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/init@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/autobuild@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/analyze@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
         with:
           category: /language:go

From 0d4c62cd962b7bf370796265503dc85f151a7d55 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 1 Oct 2024 16:22:11 +0200
Subject: [PATCH 034/887] fix conflicts

---
 patches/0002-Add-crypto-backend-foundation.patch | 6 +++---
 patches/0005-Add-CNG-crypto-backend.patch        | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a9494e5bb94..a0dbe6a934b 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -1097,8 +1097,8 @@ index e996e7aaa36b9c..55ca642491ec03 100644
  	"hash"
  	"io"
 @@ -296,7 +296,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 	// well-specified number of random bytes is included in the signature, in a
- 	// well-specified way.
+ 		hash = opts.Hash
+ 	}
  
 -	if boring.Enabled && rand == boring.RandReader {
 +	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
@@ -1731,7 +1731,7 @@ index 441cf8d051c934..ca6a512bf95c7e 100644
 +	< crypto/internal/backend
  	< crypto/boring;
  
- 	crypto/internal/alias
+ 	crypto/internal/alias, math/rand/v2
 @@ -496,6 +499,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index b2bf22f27fa..c15e818ba43 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -683,8 +683,8 @@ index 55ca642491ec03..7ff4d5150d1ddc 100644
  		if err != nil {
  			return nil, err
 @@ -296,7 +296,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 	// well-specified number of random bytes is included in the signature, in a
- 	// well-specified way.
+ 		hash = opts.Hash
+ 	}
  
 -	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
 +	if boring.Enabled && rand == boring.RandReader &&

From 93d60432aa94b426294ab97f434c7bd58bba18d2 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 2 Oct 2024 16:07:16 +0000
Subject: [PATCH 035/887] Update submodule to latest master (03103a54):
 hash/maphash: add WriteComparable and Comparable

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f4b7291d73c..03103a54d83 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f4b7291d73c40af90fdbc5fa0d72a26c5f127931
+Subproject commit 03103a54d830ee14187aac7720e42000927a6ce9

From 0f8f7953861884551709684080c69eae1e187373 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 2 Oct 2024 18:21:05 +0200
Subject: [PATCH 036/887] fall back to Go crypto when using different hashes
 when verifying with RSA OAEP

---
 eng/doc/fips/UserGuide.md                     |  1 +
 .../0002-Add-crypto-backend-foundation.patch  | 75 +++++++++++--------
 patches/0005-Add-CNG-crypto-backend.patch     | 62 ++++++++-------
 3 files changed, 73 insertions(+), 65 deletions(-)

diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index 2ed486e3204..7053637c545 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -1665,6 +1665,7 @@ The decrypt function depends on `opts`:
 
 - If `opts` is nil, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
 - If `opts` type is `*rsa.OAEPOptions`, it calls [rsa.DecryptOAEP](#func-decryptoaep)`(opts.Hash.New(), rand, priv, ciphertext, opts.Label)`.
+- If `opts` type is `*rsa.OAEPOptions` and `ops.Hash` is different than `opts.MGFHash`, it falls back to standard Go crypto.
 - If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen > 0`, it calls [rsa.DecryptPKCS1v15SessionKey](#func-decryptpkcs1v15sessionkey)`(rand, priv, ciphertext, plaintext)` with a random `plaintext`.
 - If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen == 0`, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
 - Else it returns an error.
diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a0dbe6a934b..3e2698ba414 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -36,7 +36,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/pkcs1v15.go                   |   6 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
  src/crypto/rsa/pss.go                        |   6 +-
- src/crypto/rsa/rsa.go                        |  19 +-
+ src/crypto/rsa/rsa.go                        |  21 +-
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
  src/crypto/sha1/sha1_test.go                 |   2 +-
@@ -55,7 +55,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 51 files changed, 789 insertions(+), 103 deletions(-)
+ 51 files changed, 790 insertions(+), 104 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -865,7 +865,7 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index 843678702bf93f..28f4ae5621921d 100644
+index c984c3f4968598..229dd457f8d53c 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -876,7 +876,7 @@ index 843678702bf93f..28f4ae5621921d 100644
  	"errors"
  	"hash"
  	"internal/byteorder"
-@@ -99,6 +100,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
+@@ -103,6 +104,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New() hash.Hash {
@@ -886,7 +886,7 @@ index 843678702bf93f..28f4ae5621921d 100644
  	d := new(digest)
  	d.Reset()
  	return d
-@@ -176,6 +180,9 @@ func (d *digest) checkSum() [Size]byte {
+@@ -180,6 +184,9 @@ func (d *digest) checkSum() [Size]byte {
  
  // Sum returns the MD5 checksum of the data.
  func Sum(data []byte) [Size]byte {
@@ -897,7 +897,7 @@ index 843678702bf93f..28f4ae5621921d 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index a5b661126dd716..7031d0abdaa13b 100644
+index 6a8258a67e860c..3a973eebd284a4 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,6 +6,7 @@ package md5
@@ -908,7 +908,7 @@ index a5b661126dd716..7031d0abdaa13b 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
-@@ -145,6 +146,9 @@ func TestLarge(t *testing.T) {
+@@ -157,6 +158,9 @@ func TestLarge(t *testing.T) {
  
  // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
  func TestBlockGeneric(t *testing.T) {
@@ -1084,7 +1084,7 @@ index dfa1eddc886ff3..849dafacf93d0f 100644
  	_, err := DecryptPKCS1v15(nil, rsaPrivateKey, ciphertext)
  	if err == nil {
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index e996e7aaa36b9c..55ca642491ec03 100644
+index 5716c464ca0a33..63f1100cabab64 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
 @@ -9,7 +9,7 @@ package rsa
@@ -1096,7 +1096,7 @@ index e996e7aaa36b9c..55ca642491ec03 100644
  	"errors"
  	"hash"
  	"io"
-@@ -296,7 +296,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -300,7 +300,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  		hash = opts.Hash
  	}
  
@@ -1115,7 +1115,7 @@ index e996e7aaa36b9c..55ca642491ec03 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 4d78d1eaaa6be0..c3753872872cce 100644
+index 4d78d1eaaa6be0..72a06ac902a252 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -26,14 +26,15 @@ package rsa
@@ -1164,6 +1164,15 @@ index 4d78d1eaaa6be0..c3753872872cce 100644
  		boring.Unreachable()
  	}
  
+@@ -718,7 +729,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
+ 		return nil, ErrDecryption
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && hash == mgfHash {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 2afa045a3a0bd2..86466e67e87eeb 100644
 --- a/src/crypto/rsa/rsa_test.go
@@ -1178,7 +1187,7 @@ index 2afa045a3a0bd2..86466e67e87eeb 100644
  	. "crypto/rsa"
  	"crypto/sha1"
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index c0742b9d83c527..3c89bd61e5ee2c 100644
+index 8189d1946d8ea5..8f5f7f27f26fea 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -1191,7 +1200,7 @@ index c0742b9d83c527..3c89bd61e5ee2c 100644
  	"hash"
  	"internal/byteorder"
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index 634ab9de1ba4cb..d0a9b1b46727fa 100644
+index d03892c57d4e61..d44f70b92661b4 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,7 +8,7 @@ package sha1
@@ -1204,7 +1213,7 @@ index 634ab9de1ba4cb..d0a9b1b46727fa 100644
  	"crypto/rand"
  	"encoding"
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index 68244fd63b0c1e..2297c2aa71c288 100644
+index 7844f191e16b57..5c04e4bb83f2f2 100644
 --- a/src/crypto/sha256/sha256.go
 +++ b/src/crypto/sha256/sha256.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1216,7 +1225,7 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  	"errors"
  	"hash"
  	"internal/byteorder"
-@@ -153,7 +153,7 @@ func New() hash.Hash {
+@@ -159,7 +159,7 @@ func New() hash.Hash {
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New224() hash.Hash {
@@ -1225,7 +1234,7 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  		return boring.NewSHA224()
  	}
  	d := new(digest)
-@@ -172,7 +172,9 @@ func (d *digest) Size() int {
+@@ -178,7 +178,9 @@ func (d *digest) Size() int {
  func (d *digest) BlockSize() int { return BlockSize }
  
  func (d *digest) Write(p []byte) (nn int, err error) {
@@ -1236,7 +1245,7 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  	nn = len(p)
  	d.len += uint64(nn)
  	if d.nx > 0 {
-@@ -196,7 +198,9 @@ func (d *digest) Write(p []byte) (nn int, err error) {
+@@ -202,7 +204,9 @@ func (d *digest) Write(p []byte) (nn int, err error) {
  }
  
  func (d *digest) Sum(in []byte) []byte {
@@ -1247,7 +1256,7 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  	// Make a copy of d so that caller can keep writing and summing.
  	d0 := *d
  	hash := d0.checkSum()
-@@ -257,7 +261,7 @@ func Sum256(data []byte) [Size]byte {
+@@ -263,7 +267,7 @@ func Sum256(data []byte) [Size]byte {
  
  // Sum224 returns the SHA224 checksum of the data.
  func Sum224(data []byte) [Size224]byte {
@@ -1257,7 +1266,7 @@ index 68244fd63b0c1e..2297c2aa71c288 100644
  	}
  	var d digest
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index d91f01e9ba3a5f..755ed4d238ee5a 100644
+index 3237c6a73e6a1e..5a8f4901451018 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1270,7 +1279,7 @@ index d91f01e9ba3a5f..755ed4d238ee5a 100644
  	"crypto/rand"
  	"encoding"
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
-index dde83625f7b852..d2fed3c2bb4533 100644
+index 0e2a34a1e347cf..132b9495e38644 100644
 --- a/src/crypto/sha512/sha512.go
 +++ b/src/crypto/sha512/sha512.go
 @@ -12,7 +12,7 @@ package sha512
@@ -1283,7 +1292,7 @@ index dde83625f7b852..d2fed3c2bb4533 100644
  	"hash"
  	"internal/byteorder"
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index a1ff571383e542..b63e3af59f3829 100644
+index cfe6b571975b27..de28aa927044a6 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
@@ -1296,7 +1305,7 @@ index a1ff571383e542..b63e3af59f3829 100644
  	"crypto/rand"
  	"encoding"
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index be10b71bd2269b..d879139773d1d7 100644
+index 56050421985927..dcbd33167e4499 100644
 --- a/src/crypto/tls/boring_test.go
 +++ b/src/crypto/tls/boring_test.go
 @@ -25,6 +25,11 @@ import (
@@ -1312,7 +1321,7 @@ index be10b71bd2269b..d879139773d1d7 100644
  	s := allCipherSuites()
  	for _, suite := range cipherSuitesTLS13 {
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index eebc66880d631f..42a26005ff31f2 100644
+index 917a1eff42d34f..f6f57130b64f41 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -1325,10 +1334,10 @@ index eebc66880d631f..42a26005ff31f2 100644
  	"crypto/sha1"
  	"crypto/sha256"
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 5025657590d32c..bdbdee94af1bab 100644
+index 760e827f467f15..99b44d259e1e02 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -765,12 +765,16 @@ func (hs *clientHandshakeState) doFullHandshake() error {
+@@ -770,12 +770,16 @@ func (hs *clientHandshakeState) doFullHandshake() error {
  
  	if hs.serverHello.extendedMasterSecret {
  		c.extMasterSecret = true
@@ -1347,7 +1356,7 @@ index 5025657590d32c..bdbdee94af1bab 100644
  	if err := c.config.writeKeyLog(keyLogLabelTLS12, hs.hello.random, hs.masterSecret); err != nil {
  		c.sendAlert(alertInternalError)
  		return errors.New("tls: failed to write to key log: " + err.Error())
-@@ -831,8 +835,12 @@ func (hs *clientHandshakeState) doFullHandshake() error {
+@@ -836,8 +840,12 @@ func (hs *clientHandshakeState) doFullHandshake() error {
  func (hs *clientHandshakeState) establishKeys() error {
  	c := hs.c
  
@@ -1361,7 +1370,7 @@ index 5025657590d32c..bdbdee94af1bab 100644
  	var clientCipher, serverCipher any
  	var clientHash, serverHash hash.Hash
  	if hs.suite.cipher != nil {
-@@ -972,7 +980,11 @@ func (hs *clientHandshakeState) readFinished(out []byte) error {
+@@ -977,7 +985,11 @@ func (hs *clientHandshakeState) readFinished(out []byte) error {
  		return unexpectedMessageError(serverFinished, msg)
  	}
  
@@ -1374,7 +1383,7 @@ index 5025657590d32c..bdbdee94af1bab 100644
  	if len(verify) != len(serverFinished.verifyData) ||
  		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
  		c.sendAlert(alertHandshakeFailure)
-@@ -1040,7 +1052,10 @@ func (hs *clientHandshakeState) sendFinished(out []byte) error {
+@@ -1045,7 +1057,10 @@ func (hs *clientHandshakeState) sendFinished(out []byte) error {
  	}
  
  	finished := new(finishedMsg)
@@ -1387,7 +1396,7 @@ index 5025657590d32c..bdbdee94af1bab 100644
  		return err
  	}
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index ac3d915d1746d7..631db82b9ab3ae 100644
+index bc4e51ba364cf1..8b4fc36e49fdf8 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -686,12 +686,16 @@ func (hs *serverHandshakeState) doFullHandshake() error {
@@ -1695,7 +1704,7 @@ index 8233985a62bd22..f46d4636557714 100644
  		serverMACString := hex.EncodeToString(serverMAC)
  		clientKeyString := hex.EncodeToString(clientKey)
 diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index 33fd0ed52b1ff6..ffc3eeca9dbf95 100644
+index 319ac61f49c994..1b2454dbaab264 100644
 --- a/src/crypto/x509/boring_test.go
 +++ b/src/crypto/x509/boring_test.go
 @@ -26,6 +26,11 @@ const (
@@ -1711,10 +1720,10 @@ index 33fd0ed52b1ff6..ffc3eeca9dbf95 100644
  	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 441cf8d051c934..ca6a512bf95c7e 100644
+index e233535f752dfc..6b023f055b24ea 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -448,7 +448,9 @@ var depsRules = `
+@@ -447,7 +447,9 @@ var depsRules = `
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
  	crypto/internal/boring/sig,
@@ -1724,7 +1733,7 @@ index 441cf8d051c934..ca6a512bf95c7e 100644
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -459,6 +461,7 @@ var depsRules = `
+@@ -458,6 +460,7 @@ var depsRules = `
  	crypto/cipher,
  	crypto/internal/boring/bcache
  	< crypto/internal/boring
@@ -1732,7 +1741,7 @@ index 441cf8d051c934..ca6a512bf95c7e 100644
  	< crypto/boring;
  
  	crypto/internal/alias, math/rand/v2
-@@ -496,6 +499,7 @@ var depsRules = `
+@@ -495,6 +498,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index c15e818ba43..14ee01ca9ed 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -25,7 +25,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pss.go                         |   8 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
- src/crypto/rsa/rsa.go                         |   4 +-
+ src/crypto/rsa/rsa.go                         |   2 +-
  src/crypto/rsa/rsa_test.go                    |   8 +-
  src/crypto/sha1/sha1_test.go                  |   7 +
  src/crypto/sha256/sha256_test.go              |  10 +
@@ -48,7 +48,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 44 files changed, 454 insertions(+), 33 deletions(-)
+ 44 files changed, 452 insertions(+), 33 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -545,7 +545,7 @@ index f5b4827c688f3b..12df96069f6b83 100644
  // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
  // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 7031d0abdaa13b..ada2d5be13f986 100644
+index 3a973eebd284a4..5e24e07e2787e2 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -12,6 +12,7 @@ import (
@@ -566,7 +566,7 @@ index 7031d0abdaa13b..ada2d5be13f986 100644
  	for _, g := range golden {
  		h := New()
  		h2 := New()
-@@ -196,6 +200,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -208,6 +212,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -670,7 +670,7 @@ index 552c6886813f46..7b3c9211992f6b 100644
  		if err != nil {
  			return nil, err
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 55ca642491ec03..7ff4d5150d1ddc 100644
+index 63f1100cabab64..94fac3f1a1ce55 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
 @@ -214,7 +214,7 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
@@ -682,7 +682,7 @@ index 55ca642491ec03..7ff4d5150d1ddc 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -296,7 +296,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -300,7 +300,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  		hash = opts.Hash
  	}
  
@@ -703,10 +703,10 @@ index 55ca642491ec03..7ff4d5150d1ddc 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index 7e908d4389d506..9a8311568c806e 100644
+index 637d07e18cff2e..21435b86b52dad 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -283,7 +283,7 @@ func fromHex(hexStr string) []byte {
+@@ -284,7 +284,7 @@ func fromHex(hexStr string) []byte {
  }
  
  func TestInvalidPSSSaltLength(t *testing.T) {
@@ -716,17 +716,15 @@ index 7e908d4389d506..9a8311568c806e 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index c3753872872cce..e0f6cd17900e10 100644
+index 72a06ac902a252..a016c4f8362cf5 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
-@@ -729,7 +729,9 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
+@@ -729,7 +729,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
  		return nil, ErrDecryption
  	}
  
--	if boring.Enabled {
-+	if boring.Enabled &&
-+		boring.IsRSAKeySupported(len(priv.Primes)) {
-+
+-	if boring.Enabled && hash == mgfHash {
++	if boring.Enabled && hash == mgfHash && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -764,7 +762,7 @@ index dbcc1bec58bd46..b1e9d8e94c2c9e 100644
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
  	if err == ErrMessageTooLong {
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index d0a9b1b46727fa..10ea3e8eeb6efd 100644
+index d44f70b92661b4..76726556f80fbd 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -14,6 +14,7 @@ import (
@@ -785,7 +783,7 @@ index d0a9b1b46727fa..10ea3e8eeb6efd 100644
  	h := New()
  	h2 := New()
  	for _, g := range golden {
-@@ -198,6 +202,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -210,6 +214,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -796,7 +794,7 @@ index d0a9b1b46727fa..10ea3e8eeb6efd 100644
  
  		h := New()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 755ed4d238ee5a..b7212e3f3c2175 100644
+index 5a8f4901451018..f9549bba2dee59 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -14,6 +14,7 @@ import (
@@ -817,7 +815,7 @@ index 755ed4d238ee5a..b7212e3f3c2175 100644
  	tests := []struct {
  		name    string
  		newHash func() hash.Hash
-@@ -185,6 +189,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -197,6 +201,9 @@ func TestGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalTypeMismatch(t *testing.T) {
@@ -827,7 +825,7 @@ index 755ed4d238ee5a..b7212e3f3c2175 100644
  	h1 := New()
  	h2 := New224()
  
-@@ -274,6 +281,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -286,6 +293,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -838,7 +836,7 @@ index 755ed4d238ee5a..b7212e3f3c2175 100644
  
  		h := New()
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index b63e3af59f3829..121cf04e54cd87 100644
+index de28aa927044a6..dedebd20e6a2ed 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -15,6 +15,7 @@ import (
@@ -859,7 +857,7 @@ index b63e3af59f3829..121cf04e54cd87 100644
  	tests := []struct {
  		name    string
  		newHash func() hash.Hash
-@@ -767,6 +771,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -779,6 +783,9 @@ func TestGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalMismatch(t *testing.T) {
@@ -869,7 +867,7 @@ index b63e3af59f3829..121cf04e54cd87 100644
  	h := []func() hash.Hash{
  		New,
  		New384,
-@@ -873,6 +880,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -885,6 +892,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -893,7 +891,7 @@ index 698efc6751e12c..575d51b02298c8 100644
  package tls
  
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 50330a2cd77cf7..1b47fc8bffdf1d 100644
+index 1f577fd1d4d9ec..3cdde9780352a4 100644
 --- a/src/crypto/tls/boring_test.go
 +++ b/src/crypto/tls/boring_test.go
 @@ -2,7 +2,7 @@
@@ -932,7 +930,7 @@ index 9c1d3d279c472f..0ca7a863b73690 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 503a732e05765e..db8919aaf9cbdd 100644
+index b8cf4c3fa50b24..dd2c36ab1bef0b 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -14,6 +14,7 @@ import (
@@ -943,7 +941,7 @@ index 503a732e05765e..db8919aaf9cbdd 100644
  	"io"
  	"slices"
  	"time"
-@@ -442,6 +443,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+@@ -441,6 +442,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  	}
  	marshaler, ok := in.(binaryMarshaler)
  	if !ok {
@@ -986,7 +984,7 @@ index 9aec21dbcd3bff..05324f731bedc4 100644
  package x509
  
 diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index b3227dc2560ff8..49639cd1ebaa8a 100644
+index 8cfc61049d0a08..8948d51dfabd20 100644
 --- a/src/crypto/x509/boring_test.go
 +++ b/src/crypto/x509/boring_test.go
 @@ -2,7 +2,7 @@
@@ -1012,7 +1010,7 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 7a6455fefb4bed..ac91a5201b6581 100644
+index e3bab6c545819d..76f44dcd249e4b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
@@ -1024,7 +1022,7 @@ index 7a6455fefb4bed..ac91a5201b6581 100644
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index b8e460e0a13c1c..19b381f6211587 100644
+index 8ec2c59f2c63e5..87b5f8e316f388 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
@@ -1036,10 +1034,10 @@ index b8e460e0a13c1c..19b381f6211587 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e69c1f8901fe74..eb0b0ea4eb4622 100644
+index 097bffd599bc96..af0d39d1a84f76 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -460,6 +460,10 @@ var depsRules = `
+@@ -459,6 +459,10 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -1050,7 +1048,7 @@ index e69c1f8901fe74..eb0b0ea4eb4622 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -500,6 +504,7 @@ var depsRules = `
+@@ -499,6 +503,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -1136,7 +1134,7 @@ index 00000000000000..99ee2542ca38a9
 +const CNGCrypto = true
 +const CNGCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ef00871d619651..c0f1a8a0322dbf 100644
+index 9c8b16735cd4f1..2e6bf5d7f8284d 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,7 @@ type Flags struct {

From 3813ef3ccd1444c5dd55b480f50af12617ebb4ae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 4 Oct 2024 10:39:06 +0000
Subject: [PATCH 037/887] Bump github/codeql-action from 3.26.10 to 3.26.11

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.10 to 3.26.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e2b3eafc8d227b0241d48be5f425d47c2d750a13...6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 362c195be96..e2c60e9e61c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
+        uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
+        uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
+        uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
         with:
           category: /language:go

From ebaa601f71211da0e29de40a74b2822e2b7b258b Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Fri, 4 Oct 2024 16:07:24 +0000
Subject: [PATCH 038/887] Update submodule to latest master (065c1359):
 internal/cpu: add CPU feature LAMCAS and LAM_BH detection on loong64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 03103a54d83..065c1359e1b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 03103a54d830ee14187aac7720e42000927a6ce9
+Subproject commit 065c1359e1bc3d6744a925339484592b13d713dd

From 08f655ae4b6a06ffb959bd6fed3570429817cff6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Oct 2024 10:53:56 +0000
Subject: [PATCH 039/887] Bump golang.org/x/sys from 0.25.0 to 0.26.0 in
 /eng/_util

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.25.0 to 0.26.0.
- [Commits](https://github.com/golang/sys/compare/v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 8070ff56995..3215f0670b7 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.5
-	golang.org/x/sys v0.25.0
+	golang.org/x/sys v0.26.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index da93b1e3eb9..f318609f8b8 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -79,8 +79,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.25.0 h1:r+8e+loiHxRqhXVl6ML1nO3l1+oFoWbnlu2Ehimmi34=
-golang.org/x/sys v0.25.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
+golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From 28cba716eb6fe8c6c5691996806497cb5200920a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 7 Oct 2024 16:04:02 +0200
Subject: [PATCH 040/887] only support 2-primes RSA keys

---
 .../0002-Add-crypto-backend-foundation.patch  |  65 ++++++++---
 patches/0005-Add-CNG-crypto-backend.patch     | 101 ++----------------
 2 files changed, 63 insertions(+), 103 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 3e2698ba414..1b897e267b6 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -21,7 +21,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/hmac/hmac_test.go                 |   2 +-
  src/crypto/internal/backend/backend_test.go  |  30 +++
  src/crypto/internal/backend/bbig/big.go      |  17 ++
- src/crypto/internal/backend/common.go        |  78 ++++++++
+ src/crypto/internal/backend/common.go        |  92 +++++++++
  src/crypto/internal/backend/isrequirefips.go |   9 +
  src/crypto/internal/backend/nobackend.go     | 193 +++++++++++++++++++
  src/crypto/internal/backend/norequirefips.go |   9 +
@@ -33,9 +33,9 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rc4/rc4.go                        |  18 ++
  src/crypto/rsa/boring.go                     |   4 +-
  src/crypto/rsa/notboring.go                  |   2 +-
- src/crypto/rsa/pkcs1v15.go                   |   6 +-
+ src/crypto/rsa/pkcs1v15.go                   |  10 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
- src/crypto/rsa/pss.go                        |   6 +-
+ src/crypto/rsa/pss.go                        |   8 +-
  src/crypto/rsa/rsa.go                        |  21 +-
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
@@ -55,7 +55,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 51 files changed, 790 insertions(+), 104 deletions(-)
+ 51 files changed, 807 insertions(+), 107 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -537,10 +537,10 @@ index 00000000000000..85bd3ed083f5b2
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..efdd080a1b7708
+index 00000000000000..f83ff4abacc1dc
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,78 @@
+@@ -0,0 +1,92 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -549,6 +549,7 @@ index 00000000000000..efdd080a1b7708
 +
 +import (
 +	"crypto/internal/boring/sig"
++	"internal/goexperiment"
 +	"runtime"
 +	"syscall"
 +)
@@ -619,6 +620,19 @@ index 00000000000000..efdd080a1b7708
 +		}
 +	}
 +}
++
++func IsRSAKeySupported(primes int) bool {
++	if goexperiment.BoringCrypto {
++		return true
++	}
++	// CNG only support 2-prime RSA keys.
++	// The built-in OpenSSL providers do support n-prime RSA keys,
++	// but the SymCrypt provider for OpenSSL only supports 2-prime RSA keys.
++	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
++	// and security issues. Even crypto/rsa recently deprecated rsa.GenerateMultiPrimeKey.
++	// Given the above reasons, we only support 2-prime RSA keys.
++	return primes == 2
++}
 diff --git a/src/crypto/internal/backend/isrequirefips.go b/src/crypto/internal/backend/isrequirefips.go
 new file mode 100644
 index 00000000000000..e5d7570d6d4363
@@ -1030,7 +1044,7 @@ index 2abc0436405f8a..34c22c8fbba7da 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 2f958022f98584..552c6886813f46 100644
+index 2f958022f98584..790d9cef5d3563 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -7,7 +7,7 @@ package rsa
@@ -1042,12 +1056,30 @@ index 2f958022f98584..552c6886813f46 100644
  	"crypto/internal/randutil"
  	"crypto/subtle"
  	"errors"
+@@ -95,7 +95,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -189,7 +189,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+ 		return
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
+ 		var bkey *boring.PrivateKeyRSA
+ 		bkey, err = boringPrivateKey(priv)
+ 		if err != nil {
 @@ -293,7 +293,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) && (hash == 0 || boring.SupportsHash(hash)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1084,7 +1116,7 @@ index dfa1eddc886ff3..849dafacf93d0f 100644
  	_, err := DecryptPKCS1v15(nil, rsaPrivateKey, ciphertext)
  	if err == nil {
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 5716c464ca0a33..63f1100cabab64 100644
+index 5716c464ca0a33..4aac87d7952081 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
 @@ -9,7 +9,7 @@ package rsa
@@ -1096,12 +1128,21 @@ index 5716c464ca0a33..63f1100cabab64 100644
  	"errors"
  	"hash"
  	"io"
+@@ -214,7 +214,7 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
 @@ -300,7 +300,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  		hash = opts.Hash
  	}
  
 -	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
++	if boring.Enabled && rand == boring.RandReader && boring.IsRSAKeySupported(len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1115,7 +1156,7 @@ index 5716c464ca0a33..63f1100cabab64 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 4d78d1eaaa6be0..72a06ac902a252 100644
+index 4d78d1eaaa6be0..a016c4f8362cf5 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -26,14 +26,15 @@ package rsa
@@ -1169,7 +1210,7 @@ index 4d78d1eaaa6be0..72a06ac902a252 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && hash == mgfHash {
++	if boring.Enabled && hash == mgfHash && boring.IsRSAKeySupported(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 14ee01ca9ed..8a62095f84d 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  src/crypto/internal/backend/cng_windows.go    | 280 ++++++++++++++++++
- src/crypto/internal/backend/common.go         |  21 +-
+ src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/md5/md5_test.go                    |   7 +
@@ -22,10 +22,8 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/rsa/boring.go                      |   2 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/notboring.go                   |   2 +-
- src/crypto/rsa/pkcs1v15.go                    |   6 +-
- src/crypto/rsa/pss.go                         |   8 +-
+ src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
- src/crypto/rsa/rsa.go                         |   2 +-
  src/crypto/rsa/rsa_test.go                    |   8 +-
  src/crypto/sha1/sha1_test.go                  |   7 +
  src/crypto/sha256/sha256_test.go              |  10 +
@@ -48,7 +46,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 44 files changed, 452 insertions(+), 33 deletions(-)
+ 42 files changed, 436 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -476,18 +474,10 @@ index 00000000000000..3d3d13709de5ac
 +	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index efdd080a1b7708..41e1e0cc69ec57 100644
+index f83ff4abacc1dc..b05374a9d62a97 100644
 --- a/src/crypto/internal/backend/common.go
 +++ b/src/crypto/internal/backend/common.go
-@@ -6,6 +6,7 @@ package backend
- 
- import (
- 	"crypto/internal/boring/sig"
-+	"internal/goexperiment"
- 	"runtime"
- 	"syscall"
- )
-@@ -67,7 +68,11 @@ func hasSuffix(s, t string) bool {
+@@ -68,7 +68,11 @@ func hasSuffix(s, t string) bool {
  // UnreachableExceptTests marks code that should be unreachable
  // when backend is in use. It panics.
  func UnreachableExceptTests() {
@@ -500,18 +490,11 @@ index efdd080a1b7708..41e1e0cc69ec57 100644
  		name := runtime_arg0()
  		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
  		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-@@ -76,3 +81,17 @@ func UnreachableExceptTests() {
- 		}
- 	}
+@@ -90,3 +94,10 @@ func IsRSAKeySupported(primes int) bool {
+ 	// Given the above reasons, we only support 2-prime RSA keys.
+ 	return primes == 2
  }
 +
-+func IsRSAKeySupported(primes int) bool {
-+	if goexperiment.CNGCrypto {
-+		return primes == 2
-+	}
-+	return true
-+}
-+
 +func IsSaltSupported(salt int) bool {
 +	if goexperiment.CNGCrypto {
 +		return salt != 0 // rsa.PSSSaltLengthAuto
@@ -638,62 +621,11 @@ index 933ac569e034a8..0f152b210fdd84 100644
  
  package rsa
  
-diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 552c6886813f46..7b3c9211992f6b 100644
---- a/src/crypto/rsa/pkcs1v15.go
-+++ b/src/crypto/rsa/pkcs1v15.go
-@@ -95,7 +95,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -189,7 +189,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
- 		return
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		var bkey *boring.PrivateKeyRSA
- 		bkey, err = boringPrivateKey(priv)
- 		if err != nil {
-@@ -293,7 +293,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
- 		return nil, err
- 	}
- 
--	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
-+	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 63f1100cabab64..94fac3f1a1ce55 100644
+index 4aac87d7952081..010ee1467501c3 100644
 --- a/src/crypto/rsa/pss.go
 +++ b/src/crypto/rsa/pss.go
-@@ -214,7 +214,7 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -300,7 +300,9 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 		hash = opts.Hash
- 	}
- 
--	if boring.Enabled && rand == boring.RandReader && boring.SupportsHash(hash) {
-+	if boring.Enabled && rand == boring.RandReader &&
-+		boring.SupportsHash(hash) && boring.IsRSAKeySupported(len(priv.Primes)) {
-+
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -342,7 +344,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -342,7 +342,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  // The inputs are not considered confidential, and may leak through timing side
  // channels, or if an attacker has control of part of the inputs.
  func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error {
@@ -715,19 +647,6 @@ index 637d07e18cff2e..21435b86b52dad 100644
  	if err != nil {
  		t.Fatal(err)
  	}
-diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 72a06ac902a252..a016c4f8362cf5 100644
---- a/src/crypto/rsa/rsa.go
-+++ b/src/crypto/rsa/rsa.go
-@@ -729,7 +729,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
- 		return nil, ErrDecryption
- 	}
- 
--	if boring.Enabled && hash == mgfHash {
-+	if boring.Enabled && hash == mgfHash && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index dbcc1bec58bd46..b1e9d8e94c2c9e 100644
 --- a/src/crypto/rsa/rsa_test.go

From a9a1f0383a672d251e7394cc63ed26397c69b0de Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 7 Oct 2024 20:39:10 +0200
Subject: [PATCH 041/887] Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 patches/0002-Add-crypto-backend-foundation.patch | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 1b897e267b6..5ef56279654 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -625,11 +625,11 @@ index 00000000000000..f83ff4abacc1dc
 +	if goexperiment.BoringCrypto {
 +		return true
 +	}
-+	// CNG only support 2-prime RSA keys.
-+	// The built-in OpenSSL providers do support n-prime RSA keys,
++	// CNG only supports 2-prime RSA keys.
++	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
 +	// but the SymCrypt provider for OpenSSL only supports 2-prime RSA keys.
 +	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
-+	// and security issues. Even crypto/rsa recently deprecated rsa.GenerateMultiPrimeKey.
++	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
 +	// Given the above reasons, we only support 2-prime RSA keys.
 +	return primes == 2
 +}

From 6611df5356bdb55aa155863d8c47dd4fba7c4941 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 7 Oct 2024 23:25:38 +0000
Subject: [PATCH 042/887] Update submodule to latest master (356ba0f0): net:
 detect EAI_ADDRFAMILY for cgo host lookup on FreeBSD

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 065c1359e1b..356ba0f0658 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 065c1359e1bc3d6744a925339484592b13d713dd
+Subproject commit 356ba0f06586a833cd8de9c04af0d2adddf95851

From 6590cd50093d666051b9f5e323cfcc3199987851 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 8 Oct 2024 10:26:10 +0200
Subject: [PATCH 043/887] fix conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 32 +++++++++++++------
 patches/0005-Add-CNG-crypto-backend.patch     | 28 ++--------------
 2 files changed, 25 insertions(+), 35 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 3e2698ba414..3de70f202f3 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -29,7 +29,8 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/md5/md5.go                        |   7 +
  src/crypto/md5/md5_test.go                   |   4 +
  src/crypto/purego_test.go                    |   2 +-
- src/crypto/rand/rand_unix.go                 |   2 +-
+ src/crypto/rand/rand.go                      |   2 +-
+ src/crypto/rand/rand_test.go                 |   2 +-
  src/crypto/rc4/rc4.go                        |  18 ++
  src/crypto/rsa/boring.go                     |   4 +-
  src/crypto/rsa/notboring.go                  |   2 +-
@@ -55,7 +56,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 51 files changed, 790 insertions(+), 104 deletions(-)
+ 52 files changed, 791 insertions(+), 105 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -931,19 +932,32 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  			continue
  		}
  
-diff --git a/src/crypto/rand/rand_unix.go b/src/crypto/rand/rand_unix.go
-index 40fce36314adfa..1d6231ae91d5ae 100644
---- a/src/crypto/rand/rand_unix.go
-+++ b/src/crypto/rand/rand_unix.go
-@@ -10,7 +10,7 @@
+diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
+index 7c18d595c2eeaa..6750262c4241e5 100644
+--- a/src/crypto/rand/rand.go
++++ b/src/crypto/rand/rand.go
+@@ -7,7 +7,7 @@
  package rand
  
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"errors"
+ 	"internal/godebug"
  	"io"
  	"os"
+diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
+index 2372413279dafe..55e68ed21ca68e 100644
+--- a/src/crypto/rand/rand_test.go
++++ b/src/crypto/rand/rand_test.go
+@@ -7,7 +7,7 @@ package rand
+ import (
+ 	"bytes"
+ 	"compress/flate"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"errors"
+ 	"internal/race"
+ 	"internal/testenv"
 diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
 index 67452ec39f0fd4..47726d0ebe38d9 100644
 --- a/src/crypto/rc4/rc4.go
@@ -1720,7 +1734,7 @@ index 319ac61f49c994..1b2454dbaab264 100644
  	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e233535f752dfc..6b023f055b24ea 100644
+index 3adc26ae2b6e29..f05cec9d7c3253 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -447,7 +447,9 @@ var depsRules = `
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 14ee01ca9ed..c9384e3853c 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -18,7 +18,6 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/md5/md5_test.go                    |   7 +
- src/crypto/rand/rand_windows.go               |   9 +-
  src/crypto/rsa/boring.go                      |   2 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/notboring.go                   |   2 +-
@@ -48,7 +47,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 44 files changed, 452 insertions(+), 33 deletions(-)
+ 43 files changed, 444 insertions(+), 32 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -576,29 +575,6 @@ index 3a973eebd284a4..5e24e07e2787e2 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
-diff --git a/src/crypto/rand/rand_windows.go b/src/crypto/rand/rand_windows.go
-index 7380f1f0f1e6e6..35318d8fa67336 100644
---- a/src/crypto/rand/rand_windows.go
-+++ b/src/crypto/rand/rand_windows.go
-@@ -8,10 +8,17 @@
- package rand
- 
- import (
-+	boring "crypto/internal/backend"
- 	"internal/syscall/windows"
- )
- 
--func init() { Reader = &rngReader{} }
-+func init() {
-+	if boring.Enabled {
-+		Reader = boring.RandReader
-+		return
-+	}
-+	Reader = &rngReader{}
-+}
- 
- type rngReader struct{}
- 
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
 index 220f8c05c3d94b..dd20b4af2e0472 100644
 --- a/src/crypto/rsa/boring.go
@@ -1034,7 +1010,7 @@ index 8ec2c59f2c63e5..87b5f8e316f388 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 097bffd599bc96..af0d39d1a84f76 100644
+index 03005f247513cf..c77db5a856b7f6 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -459,6 +459,10 @@ var depsRules = `

From 206337cc8e9f45c4cd477f3126f628224280ed8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 8 Oct 2024 09:39:05 -0700
Subject: [PATCH 044/887] Bump github/codeql-action from 3.26.11 to 3.26.12
 (#1358)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.11 to 3.26.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea...c36620d31ac7c881962c3d9dd939c40ec9434f2b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e2c60e9e61c..7d31134b2da 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/autobuild@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # v3.26.11
+        uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
         with:
           category: /language:go

From 495f7d6c57bc6342e67a92e2eb2de3a1d0b31215 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Oct 2024 10:23:44 +0000
Subject: [PATCH 045/887] Bump github/codeql-action from 3.26.12 to 3.26.13

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.12 to 3.26.13.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c36620d31ac7c881962c3d9dd939c40ec9434f2b...f779452ac5af1c261dce0346a8f964149f49322b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7d31134b2da..917fb1736ae 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/autobuild@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c36620d31ac7c881962c3d9dd939c40ec9434f2b # v3.26.12
+        uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
         with:
           category: /language:go

From f1b7c61826922a8d2a4b7b6c2663c901203c776e Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Fri, 18 Oct 2024 16:05:44 +0000
Subject: [PATCH 046/887] Update submodule to latest master (6853d894):
 syscall: keep write access when O_TRUNC is used on Windows

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 356ba0f0658..6853d89477e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 356ba0f06586a833cd8de9c04af0d2adddf95851
+Subproject commit 6853d89477e0886c7c96b08e7efaf74abedfcf71

From 75c43266c1fd0f38b10c3e6781b1e58db573cbd8 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 21 Oct 2024 16:06:37 +0000
Subject: [PATCH 047/887] Update submodule to latest master (acd072a0):
 runtime: execute publicationBarrier in noscan case for delayed zeroing

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 6853d89477e..acd072a0784 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 6853d89477e0886c7c96b08e7efaf74abedfcf71
+Subproject commit acd072a0784863dfbdf32da9d770753722270a26

From 0f1de95b82da55c9a0f237396ccedcd86abb757c Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 23 Oct 2024 11:07:23 +0200
Subject: [PATCH 048/887] update eng/run.ps1 documentation

---
 eng/README.md                | 4 +++-
 eng/_util/cmd/build/build.go | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/eng/README.md b/eng/README.md
index b9982ebc896..93498669919 100644
--- a/eng/README.md
+++ b/eng/README.md
@@ -33,7 +33,9 @@ pwsh eng/run.ps1 build -refresh
   patches) before the command builds the repository. Remove `-refresh` if you've
   made changes in the submodule (`go`) that you want to keep.
 * Add `-test` to run tests after the build completes.
-* Add `-pack` to create an archive file containing the Go build in
+* Add `-packbuild` to create an archive file containing the Go build in
+  `eng/artifacts/bin`. (A `.tar.gz` or `.zip` file, depending on GOOS)
+* Add `-packsource` to create an archive file containing the Go sources in
   `eng/artifacts/bin`. (A `.tar.gz` or `.zip` file, depending on GOOS)
 
 Run this command for more information:
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 7af05339872..03d39428e6a 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -33,7 +33,7 @@ in 'src' such as 'src/run.bash' instead of this script.
 
 Example: Build Go, run tests, and produce an archive file:
 
-  eng/run.ps1 build -test -pack
+  eng/run.ps1 build -test -packbuild
 `
 
 func main() {

From 164cb277575d3bba98c12129a9cd53f3fb0398e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 23 Oct 2024 10:35:55 +0000
Subject: [PATCH 049/887] Bump github/codeql-action from 3.26.13 to 3.27.0

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.13 to 3.27.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f779452ac5af1c261dce0346a8f964149f49322b...662472033e021d55d94146f66f6058822b0b39fd)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 917fb1736ae..1e6c5589053 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
+        uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
         with:
           category: /language:go

From 788f76ea8da43ae61ac948ce43e583ef18a777a0 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 23 Oct 2024 18:37:01 +0100
Subject: [PATCH 050/887] workflow: add automerge job to approve PRs from
 microsoft-golang-bot (#1366)

---
 .github/workflows/auto-merge.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 .github/workflows/auto-merge.yml

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
new file mode 100644
index 00000000000..1afdb677ec6
--- /dev/null
+++ b/.github/workflows/auto-merge.yml
@@ -0,0 +1,25 @@
+name: Pull Request auto-merge
+on: pull_request_target
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  automerge:
+    # Only run for the microsoft-golang-bot
+    if: github.actor == 'microsoft-golang-bot'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Approve pull request
+        run: gh pr review --approve "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          
+      - name: Enable auto-merge for pull request
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

From 563fd270ac8e2e5c30b989c514c47597d1a15e88 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 23 Oct 2024 18:17:06 +0000
Subject: [PATCH 051/887] Update submodule to latest master (87a89fa4):
 runtime: add the checkPtraceScope to skip certain tests

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index acd072a0784..87a89fa4513 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit acd072a0784863dfbdf32da9d770753722270a26
+Subproject commit 87a89fa45130d4406fa4d9f0882b9c5014240d03

From 6176ea40c20f1a68ac1d95dcbc51b971fc4a9e78 Mon Sep 17 00:00:00 2001
From: Martijn Verburg <martijnverburg@gmail.com>
Date: Thu, 24 Oct 2024 07:48:23 +1300
Subject: [PATCH 052/887] Update eng/README.md

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/README.md b/eng/README.md
index 93498669919..d127a437b4e 100644
--- a/eng/README.md
+++ b/eng/README.md
@@ -35,8 +35,8 @@ pwsh eng/run.ps1 build -refresh
 * Add `-test` to run tests after the build completes.
 * Add `-packbuild` to create an archive file containing the Go build in
   `eng/artifacts/bin`. (A `.tar.gz` or `.zip` file, depending on GOOS)
-* Add `-packsource` to create an archive file containing the Go sources in
-  `eng/artifacts/bin`. (A `.tar.gz` or `.zip` file, depending on GOOS)
+* Add `-packsource` to create a `.tar.gz` file containing the Go sources in
+  `eng/artifacts/bin`.
 
 Run this command for more information:
 

From c4456d8d809abf77cbea97f59a1e4091b5abc119 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Oct 2024 15:34:36 -0700
Subject: [PATCH 053/887] Add more patching docs, mention git-go-patch

---
 eng/README.md     | 39 ++++++++++++++++++++++++++++-----------
 patches/README.md |  8 ++++++++
 2 files changed, 36 insertions(+), 11 deletions(-)
 create mode 100644 patches/README.md

diff --git a/eng/README.md b/eng/README.md
index d127a437b4e..9aa1ec0faf0 100644
--- a/eng/README.md
+++ b/eng/README.md
@@ -56,14 +56,31 @@ complete, to match the content of the official binary releases of Go.
 
 ## Patch files
 
-The Microsoft Go repository uses patch files to apply changes to the `go`
-submodule. The patch files are found in [`/patches`](/patches). The `-refresh`
-argument to the `build` tool applies patches. Or, try:
-
-```
-pwsh eng/run.ps1 submodule-refresh -h
-```
-
-These patch files contain all the changes made to the upstream Go source code.
-To explore them with Git, run `pwsh eng/run.ps1 submodule-refresh -commits` and
-look at Git history inside the `go` submodule.
+The Microsoft Go repository uses patch files to store changes to the `go`
+submodule. The patch files are found in [`/patches`](/patches).
+
+We created [the `git-go-patch` tool][git-go-patch] to develop and maintain the
+patch files. We wrote this tool specifically for the Microsoft Go project. It's
+a Go program that can be invoked as `git go-patch` after it's installed. See
+[the `git-go-patch` readme][git-go-patch] for more information.
+
+We also have some utilities in this repository to apply patches without
+installing `git-go-patch`:
+
+* `pwsh eng/run.ps1 submodule-refresh` updates the submodule and applies the
+  patches.
+  * Pass `-commits` to apply each patch as a separate commit.
+* `pwsh eng/run.ps1 build -refresh` refreshes the submodule and applies patches
+  and then goes on to build Microsoft Go.
+
+The patch files are ordinary Git patches and can also be applied manually
+without any custom tooling. Git commands like [`git
+am`](https://git-scm.com/docs/git-am) and [`git
+apply`](https://git-scm.com/docs/git-apply) work directly. [`git
+format-patch`](https://git-scm.com/docs/git-format-patch) produces the same
+patch format as `git-go-patch`.
+
+Editing the patch files by hand is not recommended. Use `git-go-patch` or manual
+`git` patching commands to let Git handle the formatting and fine details.
+
+[git-go-patch]: https://github.com/microsoft/go-infra/tree/main/cmd/git-go-patch
diff --git a/patches/README.md b/patches/README.md
new file mode 100644
index 00000000000..51e6703679a
--- /dev/null
+++ b/patches/README.md
@@ -0,0 +1,8 @@
+# Microsoft Go patches
+
+The patches in this directory are applied to the `/go` submodule before building Microsoft Go.
+This is done automatically by the build tools provided in `/eng`.
+
+We use [`git-go-patch`](https://github.com/microsoft/go-infra/tree/main/cmd/git-go-patch) to maintain these patch files.
+
+See [the `/eng` README](../eng/README.md) for more information.

From f04dd24de68bfc1ada3c92b2b02053c3d68b2fad Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 24 Oct 2024 14:27:17 +0200
Subject: [PATCH 054/887] add Azure Linux 3 to CI pipelines

---
 eng/pipeline/pr-outerloop-pipeline.yml           | 2 ++
 eng/pipeline/pr-pipeline.yml                     | 2 ++
 eng/pipeline/rolling-innerloop-pipeline.yml      | 2 ++
 eng/pipeline/rolling-pipeline.yml                | 2 ++
 eng/pipeline/stages/go-builder-matrix-stages.yml | 1 +
 eng/pipeline/stages/run-stage.yml                | 2 ++
 6 files changed, 11 insertions(+)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index ebba7ae920a..0d482700a31 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -24,6 +24,8 @@ resources:
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+    - container: azurelinux3
+      image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 8a511b43bfd..91337351ce0 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -21,6 +21,8 @@ resources:
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+    - container: azurelinux3
+      image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index cc58fed09f0..ebc8ba2e3a0 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -44,6 +44,8 @@ extends:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+      azurelinux3:
+        image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index fd7cb59ed16..cf9f23d24e1 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -37,6 +37,8 @@ extends:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+      azurelinux3:
+        image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 0c4cc12d153..95759be0e2c 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -77,6 +77,7 @@ stages:
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index d7d7d5b9879..d8fcf5000a4 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -71,6 +71,8 @@ stages:
             ${{ if eq(parameters.builder.hostArch, 'amd64') }}:
               ${{ if eq(parameters.builder.distro, 'ubuntu') }}:
                 container: ubuntu2204
+              ${{ elseif eq(parameters.builder.distro, 'azurelinux3') }}:
+                container: azurelinux3
               ${{ else }}:
                 container: mariner1
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:

From 03a143266082c9bcb2b07d7047d3214deb5ec80f Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 24 Oct 2024 14:38:33 +0200
Subject: [PATCH 055/887] fix image name

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 2 +-
 eng/pipeline/pr-pipeline.yml                | 2 +-
 eng/pipeline/rolling-innerloop-pipeline.yml | 2 +-
 eng/pipeline/rolling-pipeline.yml           | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 0d482700a31..74d169e88d0 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -25,7 +25,7 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: azurelinux3
-      image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 91337351ce0..9a8271baeb3 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -22,7 +22,7 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: azurelinux3
-      image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index ebc8ba2e3a0..33bbb4309a9 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -45,7 +45,7 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       azurelinux3:
-        image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index cf9f23d24e1..d86feb0d1a2 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -38,7 +38,7 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       azurelinux3:
-        image: golangpublicimages.azurecr.io/infra-images:azurelinux-3.0-amd64-default
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
 
     stages:
       - template: stages/go-builder-matrix-stages.yml

From 56c93bb7713797e5b9d5066506b33954255e1e78 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 24 Oct 2024 17:51:58 +0200
Subject: [PATCH 056/887] upgrade image

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 2 +-
 eng/pipeline/pr-pipeline.yml                | 2 +-
 eng/pipeline/rolling-innerloop-pipeline.yml | 2 +-
 eng/pipeline/rolling-pipeline.yml           | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 74d169e88d0..45fc8743775 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -25,7 +25,7 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 9a8271baeb3..ce50b025817 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -22,7 +22,7 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 33bbb4309a9..85ba25c14b2 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -45,7 +45,7 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index d86feb0d1a2..e360909614b 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -38,7 +38,7 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024101937-2ca0565
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
     stages:
       - template: stages/go-builder-matrix-stages.yml

From 1cd325c2eb07230ed3cc9f563f2051c092d65898 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 24 Oct 2024 18:01:35 +0200
Subject: [PATCH 057/887] add openssl test for az3

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 95759be0e2c..8b5ea8b95ca 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -81,6 +81,7 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }

From c75ccae64f6c4f10c17af1376ad275a3951a49d5 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 08:05:41 +0200
Subject: [PATCH 058/887] don't fail pipeline if AZL3 tests fail

---
 eng/pipeline/stages/builders-to-stages.yml             | 2 +-
 eng/pipeline/stages/go-builder-matrix-stages.yml       | 2 +-
 eng/pipeline/stages/run-stage.yml                      | 4 +++-
 eng/pipeline/stages/shorthand-builders-to-builders.yml | 4 ++--
 eng/pipeline/stages/sign-stage.yml                     | 2 +-
 5 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index f3e14134e6e..4b9a4d98eed 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -5,7 +5,7 @@
 # This template expands a list of builders into a list of jobs.
 
 parameters:
-  # [] of { id, os, arch, hostarch, config, distro?, experiment? }
+  # [] of { id, os, arch, hostarch, config, distro?, experiment?, flaky? }
   builders: []
   # If true, include a signing stage+job that depends on all 'buildandpack' builder jobs finishing.
   sign: false
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 8b5ea8b95ca..45fcb5118f4 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -81,7 +81,7 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, flaky: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index d8fcf5000a4..f4ec4b3f01d 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -5,7 +5,7 @@
 # This job runs a builder for any OS.
 
 parameters:
-  # { id, os, arch, hostArch, config, distro?, experiment?, fips? }
+  # { id, os, arch, hostArch, config, distro?, experiment?, fips?, flaky? }
   - name: builder
     type: object
 
@@ -280,6 +280,8 @@ stages:
                 condition: and(ne(variables['TEST_BUILDER_SUCCESSFUL'], 'true'), succeeded())
                 ${{ if ne(attempt, 'FINAL') }}:
                   ignoreLASTEXITCODE: true
+                ${{ if eq(parameters.builder.flaky, true) }}:
+                  continueOnError: true
 
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
           #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:
diff --git a/eng/pipeline/stages/shorthand-builders-to-builders.yml b/eng/pipeline/stages/shorthand-builders-to-builders.yml
index 815ea652fb8..3becb76166b 100644
--- a/eng/pipeline/stages/shorthand-builders-to-builders.yml
+++ b/eng/pipeline/stages/shorthand-builders-to-builders.yml
@@ -11,13 +11,13 @@
 # to be used by template expressions, as of writing.
 
 parameters:
-  # [] of { os, arch, hostArch, config, distro?, experiment? }
+  # [] of { os, arch, hostArch, config, distro?, experiment?, flaky? }
   # If hostArch is not defined, defaults to the arch value.
   # The job ID is generated based on these values.
   shorthandBuilders: []
   # The inner jobs template to pass the filed-out builders into.
   #
-  # It should accept parameter "builders", [] of { id, os, arch, hostArch, config, distro?, fips? }
+  # It should accept parameter "builders", [] of { id, os, arch, hostArch, config, distro?, fips?, flaky? }
   jobsTemplate: ""
   jobsParameters: {}
 
diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index 1ae4e7cfbc9..f924544e67c 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -6,7 +6,7 @@
 # publishes the signed files and signatures into a consolidated pipeline artifact.
 
 parameters:
-  # [] of { id, os, arch, config, distro?, experiment? }
+  # [] of { id, os, arch, config, distro?, experiment?, flaky? }
   builders: []
 
 stages:

From 5e12e9bca47aea97e4425362e2fbddfe5469c33a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 08:43:20 +0200
Subject: [PATCH 059/887] rename flaky for broken

---
 eng/pipeline/stages/builders-to-stages.yml             | 2 +-
 eng/pipeline/stages/go-builder-matrix-stages.yml       | 2 +-
 eng/pipeline/stages/run-stage.yml                      | 4 ++--
 eng/pipeline/stages/shorthand-builders-to-builders.yml | 4 ++--
 eng/pipeline/stages/sign-stage.yml                     | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 4b9a4d98eed..f5d29d3ede2 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -5,7 +5,7 @@
 # This template expands a list of builders into a list of jobs.
 
 parameters:
-  # [] of { id, os, arch, hostarch, config, distro?, experiment?, flaky? }
+  # [] of { id, os, arch, hostarch, config, distro?, experiment?, broken? }
   builders: []
   # If true, include a signing stage+job that depends on all 'buildandpack' builder jobs finishing.
   sign: false
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 45fcb5118f4..60e3b51638d 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -81,7 +81,7 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, flaky: true }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, broken: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index f4ec4b3f01d..a0db3d50d09 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -5,7 +5,7 @@
 # This job runs a builder for any OS.
 
 parameters:
-  # { id, os, arch, hostArch, config, distro?, experiment?, fips?, flaky? }
+  # { id, os, arch, hostArch, config, distro?, experiment?, fips?, broken? }
   - name: builder
     type: object
 
@@ -280,7 +280,7 @@ stages:
                 condition: and(ne(variables['TEST_BUILDER_SUCCESSFUL'], 'true'), succeeded())
                 ${{ if ne(attempt, 'FINAL') }}:
                   ignoreLASTEXITCODE: true
-                ${{ if eq(parameters.builder.flaky, true) }}:
+                ${{ if eq(parameters.builder.broken, true) }}:
                   continueOnError: true
 
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
diff --git a/eng/pipeline/stages/shorthand-builders-to-builders.yml b/eng/pipeline/stages/shorthand-builders-to-builders.yml
index 3becb76166b..123790bcad9 100644
--- a/eng/pipeline/stages/shorthand-builders-to-builders.yml
+++ b/eng/pipeline/stages/shorthand-builders-to-builders.yml
@@ -11,13 +11,13 @@
 # to be used by template expressions, as of writing.
 
 parameters:
-  # [] of { os, arch, hostArch, config, distro?, experiment?, flaky? }
+  # [] of { os, arch, hostArch, config, distro?, experiment?, broken? }
   # If hostArch is not defined, defaults to the arch value.
   # The job ID is generated based on these values.
   shorthandBuilders: []
   # The inner jobs template to pass the filed-out builders into.
   #
-  # It should accept parameter "builders", [] of { id, os, arch, hostArch, config, distro?, fips?, flaky? }
+  # It should accept parameter "builders", [] of { id, os, arch, hostArch, config, distro?, fips?, broken? }
   jobsTemplate: ""
   jobsParameters: {}
 
diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index f924544e67c..73e1e046a58 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -6,7 +6,7 @@
 # publishes the signed files and signatures into a consolidated pipeline artifact.
 
 parameters:
-  # [] of { id, os, arch, config, distro?, experiment?, flaky? }
+  # [] of { id, os, arch, config, distro?, experiment?, broken? }
   builders: []
 
 stages:

From 3bd1a03ea633ff6806e37998f1ea350514e5cb56 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 08:46:32 +0200
Subject: [PATCH 060/887] handle retries

---
 eng/pipeline/stages/run-stage.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index a0db3d50d09..011e94ce99b 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -280,7 +280,8 @@ stages:
                 condition: and(ne(variables['TEST_BUILDER_SUCCESSFUL'], 'true'), succeeded())
                 ${{ if ne(attempt, 'FINAL') }}:
                   ignoreLASTEXITCODE: true
-                ${{ if eq(parameters.builder.broken, true) }}:
+                ${{ elseif eq(parameters.builder.broken, true) }}:
+                  # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:

From 3c51449ebd45869f9726420e66325a1b823f9357 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 12:45:52 +0200
Subject: [PATCH 061/887] fix conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 70 +++++++------------
 patches/0005-Add-CNG-crypto-backend.patch     | 40 +++++------
 2 files changed, 44 insertions(+), 66 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index ca80ce31c23..e1c890378a6 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -41,7 +41,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
  src/crypto/sha1/sha1_test.go                 |   2 +-
- src/crypto/sha256/sha256.go                  |  14 +-
+ src/crypto/sha256/sha256.go                  |   6 +-
  src/crypto/sha256/sha256_test.go             |   2 +-
  src/crypto/sha512/sha512.go                  |   2 +-
  src/crypto/sha512/sha512_test.go             |   2 +-
@@ -56,7 +56,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 52 files changed, 808 insertions(+), 108 deletions(-)
+ 52 files changed, 802 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -452,7 +452,7 @@ index 00000000000000..b0cdd44d81c753
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index 46ec81b8c58bc9..1563eedf6f78d1 100644
+index b8c909cf015aa7..9f517e8e527363 100644
 --- a/src/crypto/hmac/hmac.go
 +++ b/src/crypto/hmac/hmac.go
 @@ -22,7 +22,7 @@ timing side-channels:
@@ -461,9 +461,9 @@ index 46ec81b8c58bc9..1563eedf6f78d1 100644
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips/hmac"
  	"crypto/subtle"
  	"hash"
- )
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
 index 7accad763244a1..dd3211f2c37af3 100644
 --- a/src/crypto/hmac/hmac_test.go
@@ -538,7 +538,7 @@ index 00000000000000..85bd3ed083f5b2
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..f83ff4abacc1dc
+index 00000000000000..bc595e91024f11
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
 @@ -0,0 +1,92 @@
@@ -1268,7 +1268,7 @@ index d03892c57d4e61..d44f70b92661b4 100644
  	"crypto/rand"
  	"encoding"
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index 7844f191e16b57..5c04e4bb83f2f2 100644
+index d87c689c9001ad..7584c380af0cec 100644
 --- a/src/crypto/sha256/sha256.go
 +++ b/src/crypto/sha256/sha256.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1277,10 +1277,10 @@ index 7844f191e16b57..5c04e4bb83f2f2 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"errors"
+ 	"crypto/internal/fips/sha256"
  	"hash"
- 	"internal/byteorder"
-@@ -159,7 +159,7 @@ func New() hash.Hash {
+ )
+@@ -43,7 +43,7 @@ func New() hash.Hash {
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New224() hash.Hash {
@@ -1288,30 +1288,8 @@ index 7844f191e16b57..5c04e4bb83f2f2 100644
 +	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
  		return boring.NewSHA224()
  	}
- 	d := new(digest)
-@@ -178,7 +178,9 @@ func (d *digest) Size() int {
- func (d *digest) BlockSize() int { return BlockSize }
- 
- func (d *digest) Write(p []byte) (nn int, err error) {
--	boring.Unreachable()
-+	if boring.Enabled && (!d.is224 || boring.SupportsHash(crypto.SHA224)) {
-+		boring.Unreachable()
-+	}
- 	nn = len(p)
- 	d.len += uint64(nn)
- 	if d.nx > 0 {
-@@ -202,7 +204,9 @@ func (d *digest) Write(p []byte) (nn int, err error) {
- }
- 
- func (d *digest) Sum(in []byte) []byte {
--	boring.Unreachable()
-+	if boring.Enabled && (!d.is224 || boring.SupportsHash(crypto.SHA224)) {
-+		boring.Unreachable()
-+	}
- 	// Make a copy of d so that caller can keep writing and summing.
- 	d0 := *d
- 	hash := d0.checkSum()
-@@ -263,7 +267,7 @@ func Sum256(data []byte) [Size]byte {
+ 	return sha256.New224()
+@@ -63,7 +63,7 @@ func Sum256(data []byte) [Size]byte {
  
  // Sum224 returns the SHA224 checksum of the data.
  func Sum224(data []byte) [Size224]byte {
@@ -1319,9 +1297,9 @@ index 7844f191e16b57..5c04e4bb83f2f2 100644
 +	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
  		return boring.SHA224(data)
  	}
- 	var d digest
+ 	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 3237c6a73e6a1e..5a8f4901451018 100644
+index 40be1480dd51d1..0426ce6aebd681 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1331,10 +1309,10 @@ index 3237c6a73e6a1e..5a8f4901451018 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
- 	"crypto/rand"
  	"encoding"
+ 	"fmt"
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
-index 0e2a34a1e347cf..132b9495e38644 100644
+index 0a12fde7bc060b..ca752598e4343a 100644
 --- a/src/crypto/sha512/sha512.go
 +++ b/src/crypto/sha512/sha512.go
 @@ -12,7 +12,7 @@ package sha512
@@ -1343,11 +1321,11 @@ index 0e2a34a1e347cf..132b9495e38644 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"errors"
+ 	"crypto/internal/fips/sha512"
  	"hash"
- 	"internal/byteorder"
+ )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index cfe6b571975b27..de28aa927044a6 100644
+index 6e3d9bce1cf095..df96879c02d234 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
@@ -1357,8 +1335,8 @@ index cfe6b571975b27..de28aa927044a6 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
- 	"crypto/rand"
  	"encoding"
+ 	"encoding/hex"
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
 index 56050421985927..dcbd33167e4499 100644
 --- a/src/crypto/tls/boring_test.go
@@ -1775,12 +1753,12 @@ index 319ac61f49c994..1b2454dbaab264 100644
  	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3adc26ae2b6e29..f05cec9d7c3253 100644
+index cc9d304bc62820..6509d58264aae0 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -447,7 +447,9 @@ var depsRules = `
- 
+@@ -463,7 +463,9 @@ var depsRules = `
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
+ 	FIPS,
  	crypto/internal/boring/sig,
 +	crypto/internal/boring/fipstls,
  	crypto/internal/boring/syso,
@@ -1788,7 +1766,7 @@ index 3adc26ae2b6e29..f05cec9d7c3253 100644
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -458,6 +460,7 @@ var depsRules = `
+@@ -474,6 +476,7 @@ var depsRules = `
  	crypto/cipher,
  	crypto/internal/boring/bcache
  	< crypto/internal/boring
@@ -1796,7 +1774,7 @@ index 3adc26ae2b6e29..f05cec9d7c3253 100644
  	< crypto/boring;
  
  	crypto/internal/alias, math/rand/v2
-@@ -495,6 +498,7 @@ var depsRules = `
+@@ -511,6 +514,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index a6e5cac6b29..e6e535c73b3 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -473,7 +473,7 @@ index 00000000000000..3d3d13709de5ac
 +	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index f83ff4abacc1dc..b05374a9d62a97 100644
+index bc595e91024f11..7766d674f5cfaf 100644
 --- a/src/crypto/internal/backend/common.go
 +++ b/src/crypto/internal/backend/common.go
 @@ -68,7 +68,11 @@ func hasSuffix(s, t string) bool {
@@ -689,10 +689,10 @@ index d44f70b92661b4..76726556f80fbd 100644
  
  		h := New()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 5a8f4901451018..f9549bba2dee59 100644
+index 0426ce6aebd681..bdb55a70a4847c 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -14,6 +14,7 @@ import (
+@@ -13,6 +13,7 @@ import (
  	"encoding"
  	"fmt"
  	"hash"
@@ -700,17 +700,17 @@ index 5a8f4901451018..f9549bba2dee59 100644
  	"io"
  	"testing"
  )
-@@ -140,6 +141,9 @@ func TestGolden(t *testing.T) {
+@@ -141,6 +142,9 @@ func testGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
 +	if goexperiment.CNGCrypto {
 +		t.Skip("CNGCrypto does not support hash marshalling")
 +	}
- 	tests := []struct {
- 		name    string
- 		newHash func() hash.Hash
-@@ -197,6 +201,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 	cryptotest.TestAllImplementations(t, "crypto/sha256", testGoldenMarshal)
+ }
+ 
+@@ -202,6 +206,9 @@ func testGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalTypeMismatch(t *testing.T) {
@@ -720,7 +720,7 @@ index 5a8f4901451018..f9549bba2dee59 100644
  	h1 := New()
  	h2 := New224()
  
-@@ -286,6 +293,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -276,6 +283,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -731,10 +731,10 @@ index 5a8f4901451018..f9549bba2dee59 100644
  
  		h := New()
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index de28aa927044a6..dedebd20e6a2ed 100644
+index df96879c02d234..99451e26a13d79 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
-@@ -15,6 +15,7 @@ import (
+@@ -14,6 +14,7 @@ import (
  	"encoding/hex"
  	"fmt"
  	"hash"
@@ -742,17 +742,17 @@ index de28aa927044a6..dedebd20e6a2ed 100644
  	"io"
  	"testing"
  )
-@@ -720,6 +721,9 @@ func TestGolden(t *testing.T) {
+@@ -725,6 +726,9 @@ func testGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
 +	if goexperiment.CNGCrypto {
 +		t.Skip("CNGCrypto does not support hash marshalling")
 +	}
- 	tests := []struct {
- 		name    string
- 		newHash func() hash.Hash
-@@ -779,6 +783,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 	cryptotest.TestAllImplementations(t, "crypto/sha512", func(t *testing.T) {
+ 		testGoldenMarshal(t)
+ 	})
+@@ -790,6 +794,9 @@ func testGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalMismatch(t *testing.T) {
@@ -762,7 +762,7 @@ index de28aa927044a6..dedebd20e6a2ed 100644
  	h := []func() hash.Hash{
  		New,
  		New384,
-@@ -885,6 +892,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -881,6 +888,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -929,10 +929,10 @@ index 8ec2c59f2c63e5..87b5f8e316f388 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 03005f247513cf..c77db5a856b7f6 100644
+index e7e967659de213..83dcaed4cb82ec 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -459,6 +459,10 @@ var depsRules = `
+@@ -475,6 +475,10 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -943,7 +943,7 @@ index 03005f247513cf..c77db5a856b7f6 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -499,6 +503,7 @@ var depsRules = `
+@@ -515,6 +519,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big

From 9ec611ba35384787d726b5cdc87e6839dd95991b Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 14:54:17 +0200
Subject: [PATCH 062/887] Update remote

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 87a89fa4513..e5e552b8167 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 87a89fa45130d4406fa4d9f0882b9c5014240d03
+Subproject commit e5e552b816793f2b5729744c27995cce12baf52e

From 49cbccb092580a18912f1b641c35f7f2650e4681 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Oct 2024 14:59:53 +0200
Subject: [PATCH 063/887] fix conflict

---
 patches/0005-Add-CNG-crypto-backend.patch | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index e6e535c73b3..fcf4cb2611d 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -689,7 +689,7 @@ index d44f70b92661b4..76726556f80fbd 100644
  
  		h := New()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 0426ce6aebd681..bdb55a70a4847c 100644
+index d2fa4369d068bf..027b705e96113f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -13,6 +13,7 @@ import (
@@ -697,10 +697,10 @@ index 0426ce6aebd681..bdb55a70a4847c 100644
  	"fmt"
  	"hash"
 +	"internal/goexperiment"
+ 	"internal/testenv"
  	"io"
  	"testing"
- )
-@@ -141,6 +142,9 @@ func testGolden(t *testing.T) {
+@@ -142,6 +143,9 @@ func testGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -710,7 +710,7 @@ index 0426ce6aebd681..bdb55a70a4847c 100644
  	cryptotest.TestAllImplementations(t, "crypto/sha256", testGoldenMarshal)
  }
  
-@@ -202,6 +206,9 @@ func testGoldenMarshal(t *testing.T) {
+@@ -203,6 +207,9 @@ func testGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalTypeMismatch(t *testing.T) {
@@ -720,7 +720,7 @@ index 0426ce6aebd681..bdb55a70a4847c 100644
  	h1 := New()
  	h2 := New224()
  
-@@ -276,6 +283,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -277,6 +284,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -731,7 +731,7 @@ index 0426ce6aebd681..bdb55a70a4847c 100644
  
  		h := New()
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index df96879c02d234..99451e26a13d79 100644
+index 736504b8fc85a5..582ed2ae870e23 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -14,6 +14,7 @@ import (
@@ -739,10 +739,10 @@ index df96879c02d234..99451e26a13d79 100644
  	"fmt"
  	"hash"
 +	"internal/goexperiment"
+ 	"internal/testenv"
  	"io"
  	"testing"
- )
-@@ -725,6 +726,9 @@ func testGolden(t *testing.T) {
+@@ -726,6 +727,9 @@ func testGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -752,7 +752,7 @@ index df96879c02d234..99451e26a13d79 100644
  	cryptotest.TestAllImplementations(t, "crypto/sha512", func(t *testing.T) {
  		testGoldenMarshal(t)
  	})
-@@ -790,6 +794,9 @@ func testGoldenMarshal(t *testing.T) {
+@@ -791,6 +795,9 @@ func testGoldenMarshal(t *testing.T) {
  }
  
  func TestMarshalMismatch(t *testing.T) {
@@ -762,7 +762,7 @@ index df96879c02d234..99451e26a13d79 100644
  	h := []func() hash.Hash{
  		New,
  		New384,
-@@ -881,6 +888,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -882,6 +889,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {

From b7ed91ecfe8492ef51e798d47b92452e607f5bbf Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Fri, 25 Oct 2024 16:08:36 +0000
Subject: [PATCH 064/887] Update submodule to latest master (bb07aa64):
 cmd/compile: add shift optimization test

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e5e552b8167..bb07aa644be 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e5e552b816793f2b5729744c27995cce12baf52e
+Subproject commit bb07aa644be4805e799c076f054c0fc132bc4d27

From 9184845520078ccabfa4f0d3a2ce56f721e2f806 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Sat, 26 Oct 2024 03:36:07 -0700
Subject: [PATCH 065/887] Remove .github/workflows/auto-merge.yml: not working
 in org (#1374)

---
 .github/workflows/auto-merge.yml | 25 -------------------------
 1 file changed, 25 deletions(-)
 delete mode 100644 .github/workflows/auto-merge.yml

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
deleted file mode 100644
index 1afdb677ec6..00000000000
--- a/.github/workflows/auto-merge.yml
+++ /dev/null
@@ -1,25 +0,0 @@
-name: Pull Request auto-merge
-on: pull_request_target
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  automerge:
-    # Only run for the microsoft-golang-bot
-    if: github.actor == 'microsoft-golang-bot'
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Approve pull request
-        run: gh pr review --approve "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-          
-      - name: Enable auto-merge for pull request
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

From 3b2a1264ee909063536edb4cadecea2792bbde0e Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 28 Oct 2024 11:18:44 +0100
Subject: [PATCH 066/887] use our own Ubuntu 22.04 image

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 2 +-
 eng/pipeline/pr-pipeline.yml                | 2 +-
 eng/pipeline/rolling-innerloop-pipeline.yml | 2 +-
 eng/pipeline/rolling-pipeline.yml           | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 45fc8743775..0a10c09066b 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -19,7 +19,7 @@ pr:
 resources:
   containers:
     - container: ubuntu2204
-      image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04
+      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
     - container: mariner1
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index ce50b025817..1926636f18f 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -16,7 +16,7 @@ resources:
     # (container: ... image: ...) is not the same as the one 1ES PT uses, so updating these requires
     # separate changes.
     - container: ubuntu2204
-      image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04
+      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
     - container: mariner1
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 85ba25c14b2..60c8498dc91 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -39,7 +39,7 @@ extends:
         suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
     containers:
       ubuntu2204:
-        image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04
+        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
       mariner1:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index e360909614b..5aff0723cfa 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -32,7 +32,7 @@ extends:
         suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
     containers:
       ubuntu2204:
-        image: mcr.microsoft.com/dotnet-buildtools/prereqs:ubuntu-22.04
+        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
       mariner1:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:

From df037788f0c5da9ca816bfeac281d7dbf763d529 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 28 Oct 2024 11:25:41 +0100
Subject: [PATCH 067/887] add Mariner 2 to CI pipelines

---
 eng/pipeline/pr-outerloop-pipeline.yml           | 4 ++++
 eng/pipeline/pr-pipeline.yml                     | 4 ++++
 eng/pipeline/rolling-innerloop-pipeline.yml      | 4 ++++
 eng/pipeline/rolling-pipeline.yml                | 4 ++++
 eng/pipeline/stages/go-builder-matrix-stages.yml | 2 ++
 eng/pipeline/stages/run-stage.yml                | 7 ++++++-
 6 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 45fc8743775..04aae04346e 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -24,6 +24,10 @@ resources:
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+    - container: mariner2
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+    - container: mariner2arm64
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index ce50b025817..f1c92f94938 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -21,6 +21,10 @@ resources:
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+    - container: mariner2
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+    - container: mariner2arm64
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 85ba25c14b2..8c785329233 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -44,6 +44,10 @@ extends:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+      mariner2:
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+      mariner2arm64:
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index e360909614b..f3e3f1f61ab 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -37,6 +37,10 @@ extends:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
+      mariner2:
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+      mariner2arm64:
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 60e3b51638d..a82c69f2f09 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -77,10 +77,12 @@ stages:
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { os: linux, arch: amd64, config: test, distro: mariner2 }
           - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, broken: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 011e94ce99b..34918364cbb 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -71,12 +71,17 @@ stages:
             ${{ if eq(parameters.builder.hostArch, 'amd64') }}:
               ${{ if eq(parameters.builder.distro, 'ubuntu') }}:
                 container: ubuntu2204
+              ${{ elseif eq(parameters.builder.distro, 'mariner2') }}:
+                container: mariner2
               ${{ elseif eq(parameters.builder.distro, 'azurelinux3') }}:
                 container: azurelinux3
               ${{ else }}:
                 container: mariner1
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:
-              container: mariner1arm64
+              ${{ if eq(parameters.builder.distro, 'mariner2') }}:
+                container: mariner2arm64
+              ${{ else }}:
+               container: mariner1arm64
 
         variables:
           - group: go-cmdscan-rules

From c29680080af726c4c2ec7f49d484c8cb1c243509 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 28 Oct 2024 16:07:38 +0000
Subject: [PATCH 068/887] Update submodule to latest master (b33fc480):
 crypto/internal/hpke: use internal/byteorder instead of encoding/binary

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index bb07aa644be..b33fc480a25 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit bb07aa644be4805e799c076f054c0fc132bc4d27
+Subproject commit b33fc480a25c30d38104a9efaf73326c888e8557

From 5dd8137727e9e977c1b323c74d3ce214bf4a41f0 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 11:50:01 +0100
Subject: [PATCH 069/887] fix conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index e1c890378a6..4659b3e82f2 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -947,7 +947,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 7c18d595c2eeaa..6750262c4241e5 100644
+index b3d0a7368f7fa0..c34b994a67a289 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -956,11 +956,11 @@ index 7c18d595c2eeaa..6750262c4241e5 100644
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"internal/godebug"
  	"io"
  	"os"
+ 	"sync"
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
-index 2372413279dafe..55e68ed21ca68e 100644
+index 63581b75fdbc7f..dd220c7c544f76 100644
 --- a/src/crypto/rand/rand_test.go
 +++ b/src/crypto/rand/rand_test.go
 @@ -7,7 +7,7 @@ package rand
@@ -1299,7 +1299,7 @@ index d87c689c9001ad..7584c380af0cec 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 40be1480dd51d1..0426ce6aebd681 100644
+index ffd16386515830..d2fa4369d068bf 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1325,7 +1325,7 @@ index 0a12fde7bc060b..ca752598e4343a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 6e3d9bce1cf095..df96879c02d234 100644
+index fdad37b1863ae8..736504b8fc85a5 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
@@ -1753,10 +1753,10 @@ index 319ac61f49c994..1b2454dbaab264 100644
  	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index cc9d304bc62820..6509d58264aae0 100644
+index c6a2518f62ff3a..578b4d6f68504c 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -463,7 +463,9 @@ var depsRules = `
+@@ -464,7 +464,9 @@ var depsRules = `
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
  	FIPS,
  	crypto/internal/boring/sig,
@@ -1766,7 +1766,7 @@ index cc9d304bc62820..6509d58264aae0 100644
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -474,6 +476,7 @@ var depsRules = `
+@@ -475,6 +477,7 @@ var depsRules = `
  	crypto/cipher,
  	crypto/internal/boring/bcache
  	< crypto/internal/boring
@@ -1774,7 +1774,7 @@ index cc9d304bc62820..6509d58264aae0 100644
  	< crypto/boring;
  
  	crypto/internal/alias, math/rand/v2
-@@ -511,6 +514,7 @@ var depsRules = `
+@@ -512,6 +515,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
@@ -1783,10 +1783,10 @@ index cc9d304bc62820..6509d58264aae0 100644
  	< crypto/internal/mlkem768
  	< crypto/ed25519
 diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
-index c91c99b1f53111..7d273ae17cb83f 100644
+index 389eda9ad54b99..110d60beb0e70c 100644
 --- a/src/net/smtp/smtp_test.go
 +++ b/src/net/smtp/smtp_test.go
-@@ -1105,40 +1105,60 @@ func sendMail(hostPort string) error {
+@@ -1136,40 +1136,60 @@ func sendMail(hostPort string) error {
  
  // localhostCert is a PEM-encoded TLS cert generated from src/crypto/tls:
  //

From eb3189398c0fc2038292d243d7a14a433e25ae6a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 12:47:38 +0100
Subject: [PATCH 070/887] upgrade mariner images

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 4 ++--
 eng/pipeline/pr-pipeline.yml                | 4 ++--
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ++--
 eng/pipeline/rolling-pipeline.yml           | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 04aae04346e..d423c523a94 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -25,9 +25,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index f1c92f94938..5fc542255fe 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -22,9 +22,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 8c785329233..34b10246d29 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -45,9 +45,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index f3e3f1f61ab..7103ac1ec3e 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -38,9 +38,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241026145219-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241026144913-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 

From f086bae857dba18150df0ac06f9ca2e19c57dc7f Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 13:06:46 +0100
Subject: [PATCH 071/887] upgrade mariner images

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 4 ++--
 eng/pipeline/pr-pipeline.yml                | 4 ++--
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ++--
 eng/pipeline/rolling-pipeline.yml           | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index d423c523a94..8bec865d8f7 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -25,9 +25,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 5fc542255fe..6e90d6856e9 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -22,9 +22,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 34b10246d29..860564f69ad 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -45,9 +45,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 7103ac1ec3e..62d3a0fbc18 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -38,9 +38,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029101753-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029101207-51209c5
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 

From 41d0463a36dc21aa17a61eece661a662b1186ad6 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 13:22:06 +0100
Subject: [PATCH 072/887] don't call init-pwsh-task.yml

---
 eng/pipeline/stages/run-stage.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 34918364cbb..bae188c189a 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -128,7 +128,6 @@ stages:
               displayName: Cleanup
 
             - template: ../steps/checkout-unix-task.yml
-            - template: ../steps/init-pwsh-task.yml
 
           - pwsh: |
               New-Item eng/artifacts/bin -ItemType Directory -ErrorAction Ignore

From 89199c75191c9dfb7c4ee6b01dc5bddf420fa84c Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 13:23:21 +0100
Subject: [PATCH 073/887] re-add init-pwsh-task

---
 eng/pipeline/stages/run-stage.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index bae188c189a..34918364cbb 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -128,6 +128,7 @@ stages:
               displayName: Cleanup
 
             - template: ../steps/checkout-unix-task.yml
+            - template: ../steps/init-pwsh-task.yml
 
           - pwsh: |
               New-Item eng/artifacts/bin -ItemType Directory -ErrorAction Ignore

From 1c41c5e37154f1f5d7c1ef780ec6a1d71122a1bc Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Oct 2024 16:38:36 +0100
Subject: [PATCH 074/887] upgrade mariner images

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 4 ++--
 eng/pipeline/pr-pipeline.yml                | 4 ++--
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ++--
 eng/pipeline/rolling-pipeline.yml           | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 8bec865d8f7..dfa4726119b 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -25,9 +25,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 6e90d6856e9..f0c2aa80139 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -22,9 +22,9 @@ resources:
     - container: mariner1arm64
       image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 860564f69ad..e8b1a67dbb0 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -45,9 +45,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 62d3a0fbc18..bc0cb5360bf 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -38,9 +38,9 @@ extends:
       mariner1arm64:
         image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029111009-5ed5c8c
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029110416-5ed5c8c
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
 

From 09f20cebead7c8f6c86e8b940a785ba010b1498e Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 30 Oct 2024 09:31:38 +0100
Subject: [PATCH 075/887] test mariner2 an azl3 in FIPS mode

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index a82c69f2f09..fe7a4cc23e8 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -83,7 +83,9 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, broken: true }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips:true, broken: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }

From a774afa7be776d833a6b2b68b115c7d0bae775ba Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 30 Oct 2024 09:46:10 +0100
Subject: [PATCH 076/887] add missing space

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index fe7a4cc23e8..c202248f02f 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -85,7 +85,7 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, broken: true }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips:true, broken: true }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true, broken: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }

From 53266039418ec93121a68f6c966f27766ef7c372 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 30 Oct 2024 02:21:32 -0700
Subject: [PATCH 077/887] initial changes to build macOS (#1379)

Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 eng/utilities.ps1 | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index e95e586668b..784074727e7 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -51,6 +51,18 @@ function Get-Stage0GoRoot() {
       }
       Default { throw "Unable to match Linux '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
     }
+  } elseif ($IsMacOS) {
+    switch ($proc_arch) {
+      'x64' {
+        $stage0_go_sha256 = '9c3c0124b01b5365f73a1489649f78f971ecf84844ad9ca58fde133096ddb61b'
+        $stage0_go_suffix = 'darwin-amd64.tar.gz'
+      }
+      'arm64' {
+        $stage0_go_sha256 = 'ebac39fd44fc22feed1bb519af431c84c55776e39b30f4fd62930da9c0cfd1e3'
+        $stage0_go_suffix = 'darwin-arm64.tar.gz'
+      }
+      Default { throw "Unable to match macOS '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
+    }
   } else {
     throw "Current OS/Platform is not supported by the Microsoft scripts to build Go."
   }

From 0b200a29e64acb4b18a21dfd65d453cac6c7c116 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 30 Oct 2024 16:35:19 +0100
Subject: [PATCH 078/887] upgrade golang-fips/openssl to 1a537f4

---
 patches/0004-Add-OpenSSL-crypto-backend.patch |   36 +-
 patches/0005-Add-CNG-crypto-backend.patch     |   16 +-
 patches/0006-Vendor-crypto-backends.patch     | 1562 ++++++++++++-----
 3 files changed, 1111 insertions(+), 503 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 123a8f92fa4..44dfb26b4c2 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -58,7 +58,7 @@ index f0e3575637c62a..0e9aceeb832d3b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0ffcabe4164af6..056f3ea5ae9beb 100644
+index 0facfb579cb196..223472e20d24a5 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -1225,12 +1225,11 @@ func (t *tester) registerCgoTests(heading string) {
@@ -108,10 +108,10 @@ index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index d66027387b97f8..8e4dfab49f6b6b 100644
+index 0c37a1dc1f8c15..faf8a1874d5f28 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1162,6 +1162,7 @@ var hostobj []Hostobj
+@@ -1163,6 +1163,7 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -611,7 +611,7 @@ index c44ae92f2528f3..698efc6751e12c 100644
  package tls
  
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index d879139773d1d7..50330a2cd77cf7 100644
+index dcbd33167e4499..1f577fd1d4d9ec 100644
 --- a/src/crypto/tls/boring_test.go
 +++ b/src/crypto/tls/boring_test.go
 @@ -2,7 +2,7 @@
@@ -688,7 +688,7 @@ index 095b58c31590d4..9aec21dbcd3bff 100644
  package x509
  
 diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index ffc3eeca9dbf95..b3227dc2560ff8 100644
+index 1b2454dbaab264..8cfc61049d0a08 100644
 --- a/src/crypto/x509/boring_test.go
 +++ b/src/crypto/x509/boring_test.go
 @@ -2,7 +2,7 @@
@@ -714,32 +714,32 @@ index c83a7272c9f01f..a0548a7f9179c5 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index d7a4ef150410e3..7a6455fefb4bed 100644
+index df27f25e789f05..3e9514234e7125 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
  go 1.24
  
  require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 8ff5ecd640f084..c502448cd5ec1b 100644
+index b4efd6d3c50c11..d159c7d47bac3b 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487 h1:Ne+sjU9k7dbdQg1Ix5c2JxT4mshYceU4VWOmClV79Pg=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index ca6a512bf95c7e..e69c1f8901fe74 100644
+index 578b4d6f68504c..80a14d54739524 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -460,6 +460,8 @@ var depsRules = `
+@@ -476,6 +476,8 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -748,7 +748,7 @@ index ca6a512bf95c7e..e69c1f8901fe74 100644
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring;
-@@ -498,6 +500,7 @@ var depsRules = `
+@@ -514,6 +516,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -756,7 +756,7 @@ index ca6a512bf95c7e..e69c1f8901fe74 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -797,7 +800,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -812,7 +815,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -765,7 +765,7 @@ index ca6a512bf95c7e..e69c1f8901fe74 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -807,7 +810,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -822,7 +825,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -817,7 +817,7 @@ index 00000000000000..a7f2712e9e1464
 +const OpenSSLCrypto = true
 +const OpenSSLCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 777337d92d3c72..ef00871d619651 100644
+index d7cf7655f3cea3..9c8b16735cd4f1 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,7 @@ type Flags struct {
@@ -829,7 +829,7 @@ index 777337d92d3c72..ef00871d619651 100644
  	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
  	// which one is appropriate on the target GOOS.
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index a0bb89e203ddf1..2b4a2680dcdd7e 100644
+index 8c623871932f7d..2fa55073f5c19c 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
@@ -840,7 +840,7 @@ index a0bb89e203ddf1..2b4a2680dcdd7e 100644
  	"internal/poll"
  	"internal/testenv"
  	"io"
-@@ -737,6 +738,14 @@ func TestExtraFiles(t *testing.T) {
+@@ -689,6 +690,14 @@ func TestExtraFiles(t *testing.T) {
  		t.Skipf("skipping test on %q", runtime.GOOS)
  	}
  
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index fcf4cb2611d..6d96c714532 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -905,34 +905,34 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index e3bab6c545819d..76f44dcd249e4b 100644
+index 3e9514234e7125..611e053ec8c2a0 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 8ec2c59f2c63e5..87b5f8e316f388 100644
+index d159c7d47bac3b..e2ae52f398320a 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072 h1:MiLLfnjVDjuOST8SQ7XgeBpWMWPpVb8VKDhL5Uvco7Q=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487 h1:Ne+sjU9k7dbdQg1Ix5c2JxT4mshYceU4VWOmClV79Pg=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e7e967659de213..83dcaed4cb82ec 100644
+index 80a14d54739524..74e0606b0ac903 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -475,6 +475,10 @@ var depsRules = `
+@@ -476,6 +476,10 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -943,7 +943,7 @@ index e7e967659de213..83dcaed4cb82ec 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -515,6 +519,7 @@ var depsRules = `
+@@ -516,6 +520,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index e33acea7273..dd456435cad 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -5,41 +5,45 @@ Subject: [PATCH] Vendor crypto backends
 
 To reproduce, run 'go mod vendor' in 'go/src'.
 ---
+ .../golang-fips/openssl/v2/.gitignore         |    1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 ++
- .../github.com/golang-fips/openssl/v2/aes.go  |  100 ++
+ .../github.com/golang-fips/openssl/v2/aes.go  |  147 +++
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
+ .../golang-fips/openssl/v2/cgo_go124.go       |   18 +
  .../golang-fips/openssl/v2/cipher.go          |  569 +++++++++
  .../github.com/golang-fips/openssl/v2/des.go  |  114 ++
- .../github.com/golang-fips/openssl/v2/dsa.go  |  348 ++++++
- .../github.com/golang-fips/openssl/v2/ec.go   |   59 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  321 +++++
- .../golang-fips/openssl/v2/ecdsa.go           |  215 ++++
- .../golang-fips/openssl/v2/ed25519.go         |  218 ++++
- .../github.com/golang-fips/openssl/v2/evp.go  |  471 ++++++++
- .../golang-fips/openssl/v2/goopenssl.c        |  218 ++++
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  324 +++++
+ .../github.com/golang-fips/openssl/v2/ec.go   |   51 +
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  313 +++++
+ .../golang-fips/openssl/v2/ecdsa.go           |  211 ++++
+ .../golang-fips/openssl/v2/ed25519.go         |  221 ++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  519 ++++++++
+ .../golang-fips/openssl/v2/goopenssl.c        |  240 ++++
  .../golang-fips/openssl/v2/goopenssl.h        |  259 ++++
  .../github.com/golang-fips/openssl/v2/hash.go | 1041 +++++++++++++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  190 +++
- .../github.com/golang-fips/openssl/v2/hmac.go |  276 +++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  285 +++++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  274 +++++
  .../github.com/golang-fips/openssl/v2/init.go |   64 +
  .../golang-fips/openssl/v2/init_unix.go       |   31 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
- .../golang-fips/openssl/v2/openssl.go         |  434 +++++++
- .../golang-fips/openssl/v2/pbkdf2.go          |   28 +
+ .../golang-fips/openssl/v2/openssl.go         |  462 ++++++++
+ .../golang-fips/openssl/v2/params.go          |  210 ++++
+ .../golang-fips/openssl/v2/pbkdf2.go          |   62 +
  .../golang-fips/openssl/v2/port_dsa.c         |   85 ++
  .../openssl/v2/port_evp_md5_sha1.c            |  126 ++
  .../github.com/golang-fips/openssl/v2/rand.go |   20 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   66 ++
- .../github.com/golang-fips/openssl/v2/rsa.go  |  443 +++++++
- .../github.com/golang-fips/openssl/v2/shims.h |  392 +++++++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  408 +++++++
+ .../github.com/golang-fips/openssl/v2/shims.h |  401 +++++++
  .../golang-fips/openssl/v2/thread_setup.go    |   14 +
  .../golang-fips/openssl/v2/thread_setup.h     |    4 +
  .../openssl/v2/thread_setup_unix.c            |   64 +
  .../openssl/v2/thread_setup_windows.c         |   64 +
- .../golang-fips/openssl/v2/tls1prf.go         |  104 ++
+ .../golang-fips/openssl/v2/tls1prf.go         |  160 +++
+ .../github.com/golang-fips/openssl/v2/zaes.go |   86 ++
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
  .../microsoft/go-crypto-winnative/cng/aes.go  |  393 +++++++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
@@ -64,13 +68,15 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 59 files changed, 10388 insertions(+)
+ 63 files changed, 10964 insertions(+)
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/aes.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/des.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/dsa.go
@@ -88,6 +94,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
@@ -100,6 +107,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/zaes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/bbig/big.go
@@ -124,6 +132,13 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
+new file mode 100644
+index 00000000000000..79b5594df7fa29
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
+@@ -0,0 +1 @@
++**/.DS_Store
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml b/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
 new file mode 100644
 index 00000000000000..aed2e22df2d555
@@ -240,10 +255,10 @@ index 00000000000000..1bfbaf60f4dd58
 +This project adopts the Go code of conduct: https://go.dev/conduct.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 new file mode 100644
-index 00000000000000..231b75e2adbc39
+index 00000000000000..18bb070a2e5bda
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
-@@ -0,0 +1,100 @@
+@@ -0,0 +1,147 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -255,19 +270,19 @@ index 00000000000000..231b75e2adbc39
 +	"errors"
 +)
 +
-+type extraModes interface {
-+	// Copied out of crypto/aes/modes.go.
-+	NewCBCEncrypter(iv []byte) cipher.BlockMode
-+	NewCBCDecrypter(iv []byte) cipher.BlockMode
-+	NewCTR(iv []byte) cipher.Stream
-+	NewGCM(nonceSize, tagSize int) (cipher.AEAD, error)
-+
-+	// Invented for BoringCrypto.
-+	NewGCMTLS() (cipher.AEAD, error)
-+}
++//go:generate go run github.com/golang-fips/openssl/v2/cmd/genaesmodes -in aes.go -modes CBC,CTR,GCM -out zaes.go
++//go:generate go run github.com/golang-fips/openssl/v2/cmd/gentestvectors -out vectors_test.go
 +
-+var _ extraModes = (*aesCipher)(nil)
++// Steps to support a new AES mode, e.g. `FOO`:
++// 1. Add `FOO` to the list of modes in the `genaesmodes` command.
++// 2. Run `go generate` to update the generated code.
++// 3. Implement the necessary interfaces for the new struct, which will be named `cipherWithFOO`.
 +
++// NewAESCipher creates and returns a new AES cipher.Block.
++// The key argument should be the AES key, either 16, 24, or 32 bytes to select
++// AES-128, AES-192, or AES-256.
++// The returned cipher.Block implements the CBC, CTR, and/or GCM modes if
++// the underlying OpenSSL library supports them.
 +func NewAESCipher(key []byte) (cipher.Block, error) {
 +	var kind cipherKind
 +	switch len(key) * 8 {
@@ -284,66 +299,113 @@ index 00000000000000..231b75e2adbc39
 +	if err != nil {
 +		return nil, err
 +	}
-+	return &aesCipher{c}, nil
++	return newAESBlock(c, kind), nil
 +}
 +
 +// NewGCMTLS returns a GCM cipher specific to TLS
 +// and should not be used for non-TLS purposes.
 +func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	return c.(*aesCipher).NewGCMTLS()
++	if c, ok := c.(interface {
++		NewGCMTLS() (cipher.AEAD, error)
++	}); ok {
++		return c.NewGCMTLS()
++	}
++	return nil, errors.New("GCM not supported")
 +}
 +
 +// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
 +// for non-TLS purposes.
 +func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	return c.(*aesCipher).NewGCMTLS13()
++	if c, ok := c.(interface {
++		NewGCMTLS13() (cipher.AEAD, error)
++	}); ok {
++		return c.NewGCMTLS13()
++	}
++	return nil, errors.New("GCM not supported")
 +}
 +
++// aesCipher implements the cipher.Block interface.
 +type aesCipher struct {
-+	*evpCipher
++	cipher *evpCipher
 +}
 +
-+func (c *aesCipher) BlockSize() int {
-+	return c.blockSize
++func (c aesCipher) BlockSize() int {
++	return c.cipher.blockSize
 +}
 +
-+func (c *aesCipher) Encrypt(dst, src []byte) {
-+	if err := c.encrypt(dst, src); err != nil {
++func (c aesCipher) Encrypt(dst, src []byte) {
++	if err := c.cipher.encrypt(dst, src); err != nil {
 +		// crypto/aes expects that the panic message starts with "crypto/aes: ".
 +		panic("crypto/aes: " + err.Error())
 +	}
 +}
 +
-+func (c *aesCipher) Decrypt(dst, src []byte) {
-+	if err := c.decrypt(dst, src); err != nil {
++func (c aesCipher) Decrypt(dst, src []byte) {
++	if err := c.cipher.decrypt(dst, src); err != nil {
 +		// crypto/aes expects that the panic message starts with "crypto/aes: ".
 +		panic("crypto/aes: " + err.Error())
 +	}
 +}
 +
-+func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return c.newCBC(iv, cipherOpEncrypt)
++// Implement optional interfaces for AES modes.
++
++func (c cipherWithCBC) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpEncrypt)
 +}
 +
-+func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return c.newCBC(iv, cipherOpDecrypt)
++func (c cipherWithCBC) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpDecrypt)
 +}
 +
-+func (c *aesCipher) NewCTR(iv []byte) cipher.Stream {
-+	return c.newCTR(iv)
++func (c cipherWithCTR) NewCTR(iv []byte) cipher.Stream {
++	return c.cipher.newCTR(iv)
 +}
 +
-+func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
-+	return c.newGCMChecked(nonceSize, tagSize)
++func (c cipherWithGCM) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
++	return c.cipher.newGCMChecked(nonceSize, tagSize)
 +}
 +
-+func (c *aesCipher) NewGCMTLS() (cipher.AEAD, error) {
-+	return c.newGCM(cipherGCMTLS12)
++func (c cipherWithGCM) NewGCMTLS() (cipher.AEAD, error) {
++	return c.cipher.newGCM(cipherGCMTLS12)
 +}
 +
-+func (c *aesCipher) NewGCMTLS13() (cipher.AEAD, error) {
-+	return c.newGCM(cipherGCMTLS13)
++func (c cipherWithGCM) NewGCMTLS13() (cipher.AEAD, error) {
++	return c.cipher.newGCM(cipherGCMTLS13)
++}
++
++// The following interfaces have been copied out of crypto/aes/modes.go.
++
++type gcmAble interface {
++	NewGCM(nonceSize, tagSize int) (cipher.AEAD, error)
++}
++
++type cbcEncAble interface {
++	NewCBCEncrypter(iv []byte) cipher.BlockMode
++}
++
++type cbcDecAble interface {
++	NewCBCDecrypter(iv []byte) cipher.BlockMode
 +}
++
++type ctrAble interface {
++	NewCTR(iv []byte) cipher.Stream
++}
++
++// Test that the interfaces are implemented.
++
++var (
++	_ cipher.Block = (*aesCipher)(nil)
++
++	_ cipher.Block = (*cipherWithCBC)(nil)
++	_ cbcEncAble   = (*cipherWithCBC)(nil)
++	_ cbcDecAble   = (*cipherWithCBC)(nil)
++
++	_ cipher.Block = (*cipherWithCTR)(nil)
++	_ ctrAble      = (*cipherWithCTR)(nil)
++
++	_ cipher.Block = (*cipherWithGCM)(nil)
++	_ gcmAble      = (*cipherWithGCM)(nil)
++)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go b/src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
 new file mode 100644
 index 00000000000000..a81cbdbef93148
@@ -404,6 +466,30 @@ index 00000000000000..6461f241f863fc
 +// This definition allows us to avoid importing math/big.
 +// Conversion between BigInt and *big.Int is in openssl/bbig.
 +type BigInt []uint
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
+new file mode 100644
+index 00000000000000..933a751873dd05
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
+@@ -0,0 +1,18 @@
++//go:build go1.24 && !cmd_go_bootstrap
++
++package openssl
++
++// The following noescape and nocallback directives are used to prevent the Go
++// compiler from allocating function parameters on the heap. See
++// https://github.com/golang/go/blob/0733682e5ff4cd294f5eccb31cbe87a543147bc6/src/cmd/cgo/doc.go#L439-L461
++//
++// If possible, write a C wrapper function to optimize a call rather than using
++// this feature so the optimization will work for all supported Go versions.
++//
++// This is just a performance optimization. Only add functions that have been
++// observed to benefit from these directives, not every function that is merely
++// expected to meet the noescape/nocallback criteria.
++
++// #cgo noescape go_openssl_RAND_bytes
++// #cgo nocallback go_openssl_RAND_bytes
++import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
 index 00000000000000..72f7aebfc130e7
@@ -981,7 +1067,7 @@ index 00000000000000..72f7aebfc130e7
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..c98a276ec33fb0
+index 00000000000000..cd006544b5111b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 @@ -0,0 +1,114 @@
@@ -1003,7 +1089,7 @@ index 00000000000000..c98a276ec33fb0
 +func SupportsDESCipher() bool {
 +	// True for stock OpenSSL 1 w/o FIPS.
 +	// False for stock OpenSSL 3 unless the legacy provider is available.
-+	return (versionAtOrAbove(1, 1, 0) || !FIPS()) && loadCipher(cipherDES, cipherModeECB) != nil
++	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherDES, cipherModeECB) != nil
 +}
 +
 +// SupportsTripleDESCipher returns true if NewTripleDESCipher is supported,
@@ -1101,10 +1187,10 @@ index 00000000000000..c98a276ec33fb0
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..875533a50fbac5
+index 00000000000000..c56071f577f4f2
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,348 @@
+@@ -0,0 +1,324 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1116,14 +1202,6 @@ index 00000000000000..875533a50fbac5
 +	"unsafe"
 +)
 +
-+var (
-+	OSSL_PKEY_PARAM_FFC_PBITS = C.CString("pbits")
-+	OSSL_PKEY_PARAM_FFC_QBITS = C.CString("qbits")
-+	OSSL_PKEY_PARAM_FFC_P     = C.CString("p")
-+	OSSL_PKEY_PARAM_FFC_Q     = C.CString("q")
-+	OSSL_PKEY_PARAM_FFC_G     = C.CString("g")
-+)
-+
 +// SupportsDSA returns true if the OpenSSL library supports DSA.
 +func SupportsDSA() bool {
 +	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_DSA, nil)
@@ -1217,9 +1295,9 @@ index 00000000000000..875533a50fbac5
 +			C.go_openssl_BN_free(q)
 +			C.go_openssl_BN_free(g)
 +		}()
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_P, &p) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_Q, &q) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_FFC_G, &g) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_P, &p) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_Q, &q) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G, &g) != 1 {
 +			return DSAParameters{}, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +	default:
@@ -1281,8 +1359,8 @@ index 00000000000000..875533a50fbac5
 +			C.go_openssl_BN_clear_free(x)
 +			C.go_openssl_BN_free(y)
 +		}()
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PUB_KEY, &y) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &x) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY, &y) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &x) != 1 {
 +			return nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +	default:
@@ -1371,44 +1449,28 @@ index 00000000000000..875533a50fbac5
 +func newDSA3(params DSAParameters, x, y BigInt) (C.GO_EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	p, q, g := bigToBN(params.P), bigToBN(params.Q), bigToBN(params.G)
-+	defer func() {
-+		C.go_openssl_BN_free(p)
-+		C.go_openssl_BN_free(q)
-+		C.go_openssl_BN_free(g)
-+	}()
-+	if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_P, p) != 1 ||
-+		C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_Q, q) != 1 ||
-+		C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_FFC_G, g) != 1 {
++	defer bld.finalize()
 +
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+	}
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_P, params.P, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_Q, params.Q, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_G, params.G, false)
 +	selection := C.int(C.GO_EVP_PKEY_KEYPAIR)
 +	if y != nil {
-+		pub := bigToBN(y)
-+		defer C.go_openssl_BN_free(pub)
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PUB_KEY, pub) != 1 {
-+			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+		}
++		bld.addBigInt(_OSSL_PKEY_PARAM_PUB_KEY, y, false)
 +		if x == nil {
 +			selection = C.int(C.GO_EVP_PKEY_PUBLIC_KEY)
 +		}
 +	}
 +	if x != nil {
-+		priv := bigToBN(x)
-+		defer C.go_openssl_BN_clear_free(priv)
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, priv) != 1 {
-+			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+		}
++		bld.addBigInt(_OSSL_PKEY_PARAM_PRIV_KEY, x, true)
 +	}
-+	bldparams := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
-+	if bldparams == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_to_param")
++	bldparams, err := bld.build()
++	if err != nil {
++		return nil, err
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(bldparams)
 +	pkey, err := newEvpFromParams(C.GO_EVP_PKEY_DSA, selection, bldparams)
@@ -1455,10 +1517,10 @@ index 00000000000000..875533a50fbac5
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..5c253f7eec5358
+index 00000000000000..03c51e5a74cf1a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,59 @@
+@@ -0,0 +1,51 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1466,14 +1528,6 @@ index 00000000000000..5c253f7eec5358
 +// #include "goopenssl.h"
 +import "C"
 +
-+var (
-+	OSSL_PKEY_PARAM_PUB_KEY    = C.CString("pub")
-+	OSSL_PKEY_PARAM_PRIV_KEY   = C.CString("priv")
-+	OSSL_PKEY_PARAM_GROUP_NAME = C.CString("group")
-+	OSSL_PKEY_PARAM_EC_PUB_X   = C.CString("qx")
-+	OSSL_PKEY_PARAM_EC_PUB_Y   = C.CString("qy")
-+)
-+
 +func curveNID(curve string) (C.int, error) {
 +	switch curve {
 +	case "P-224":
@@ -1520,10 +1574,10 @@ index 00000000000000..5c253f7eec5358
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..de5f712f22158f
+index 00000000000000..5b146749350bf5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,321 @@
+@@ -0,0 +1,313 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1693,32 +1747,24 @@ index 00000000000000..de5f712f22158f
 +func newECDHPkey3(nid C.int, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
 +	var selection C.int
 +	if isPrivate {
-+		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
-+		if priv == nil {
-+			return nil, newOpenSSLError("BN_bin2bn")
-+		}
-+		defer C.go_openssl_BN_clear_free(priv)
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, priv) != 1 {
-+			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+		}
++		bld.addBin(_OSSL_PKEY_PARAM_PRIV_KEY, bytes, true)
 +		selection = C.GO_EVP_PKEY_KEYPAIR
 +	} else {
-+		cbytes := C.CBytes(bytes)
-+		defer C.free(cbytes)
-+		C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, OSSL_PKEY_PARAM_PUB_KEY, cbytes, C.size_t(len(bytes)))
++		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, bytes)
 +		selection = C.GO_EVP_PKEY_PUBLIC_KEY
 +	}
-+	params := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
-+	if params == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_to_param")
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
 +	return newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
@@ -1759,7 +1805,7 @@ index 00000000000000..de5f712f22158f
 +		}
 +	case 3:
 +		var priv C.GO_BIGNUM_PTR
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
 +			return newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(priv)
@@ -1824,7 +1870,7 @@ index 00000000000000..de5f712f22158f
 +			return nil, nil, newOpenSSLError("EC_KEY_get0_private_key")
 +		}
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
 +			return nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(priv)
@@ -1847,10 +1893,10 @@ index 00000000000000..de5f712f22158f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..be7e9455f49d47
+index 00000000000000..f85782a6e92268
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,215 @@
+@@ -0,0 +1,211 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1944,9 +1990,9 @@ index 00000000000000..be7e9455f49d47
 +		// Get Z. We don't need to free it, get0 does not increase the reference count.
 +		bd = C.go_openssl_EC_KEY_get0_private_key(key)
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_X, &bx) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_Y, &by) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_PRIV_KEY, &bd) != 1 {
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X, &bx) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_Y, &by) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &bd) != 1 {
 +			return nil, nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +		defer C.go_openssl_BN_clear_free(bd)
@@ -2041,37 +2087,33 @@ index 00000000000000..be7e9455f49d47
 +		return nil, err
 +	}
 +	// Construct the parameters.
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
-+	cbytes := C.CBytes(pubBytes)
-+	defer C.free(cbytes)
-+	C.go_openssl_OSSL_PARAM_BLD_push_octet_string(bld, OSSL_PKEY_PARAM_PUB_KEY, cbytes, C.size_t(len(pubBytes)))
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
 +	var selection C.int
 +	if bd != nil {
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, bd) != 1 {
-+			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+		}
++		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, bd)
 +		selection = C.GO_EVP_PKEY_KEYPAIR
 +	} else {
 +		selection = C.GO_EVP_PKEY_PUBLIC_KEY
 +	}
-+	params := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
-+	if params == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_to_param")
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
 +	return newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..f74bd8f8d7a993
+index 00000000000000..77ccbf590d87b5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,218 @@
+@@ -0,0 +1,221 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2100,29 +2142,32 @@ index 00000000000000..f74bd8f8d7a993
 +// TODO: Add support for Ed25519ph and Ed25519ctx when OpenSSL supports them,
 +// which will probably be in 3.2.0 (https://github.com/openssl/openssl/issues/20418).
 +
-+var (
-+	onceSupportsEd25519 sync.Once
-+	supportsEd25519     bool
-+)
++var supportsEd25519 = sync.OnceValue(func() bool {
++	switch vMajor {
++	case 1:
++		if versionAtOrAbove(1, 1, 1) {
++			ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_ED25519, nil)
++			if ctx != nil {
++				C.go_openssl_EVP_PKEY_CTX_free(ctx)
++				return true
++			}
++		}
++	case 3:
++		name := C.CString("ED25519")
++		defer C.free(unsafe.Pointer(name))
++		sig := C.go_openssl_EVP_SIGNATURE_fetch(nil, name, nil)
++		if sig != nil {
++			C.go_openssl_EVP_SIGNATURE_free(sig)
++			return true
++		}
++	}
++	return false
++})
 +
 +// SupportsEd25519 returns true if the current OpenSSL version supports
 +// GenerateKeyEd25519, NewKeyFromSeedEd25519, SignEd25519 and VerifyEd25519.
 +func SupportsEd25519() bool {
-+	onceSupportsEd25519.Do(func() {
-+		switch vMajor {
-+		case 1:
-+			supportsEd25519 = versionAtOrAbove(1, 1, 1)
-+		case 3:
-+			name := C.CString("ED25519")
-+			defer C.free(unsafe.Pointer(name))
-+			sig := C.go_openssl_EVP_SIGNATURE_fetch(nil, name, nil)
-+			if sig != nil {
-+				C.go_openssl_EVP_SIGNATURE_free(sig)
-+				supportsEd25519 = true
-+			}
-+		}
-+	})
-+	return supportsEd25519
++	return supportsEd25519()
 +}
 +
 +type PublicKeyEd25519 struct {
@@ -2292,10 +2337,10 @@ index 00000000000000..f74bd8f8d7a993
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..fa557d86be71c5
+index 00000000000000..91296a93f72d55
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,471 @@
+@@ -0,0 +1,519 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2314,6 +2359,30 @@ index 00000000000000..fa557d86be71c5
 +// cacheMD is a cache of crypto.Hash to GO_EVP_MD_PTR.
 +var cacheMD sync.Map
 +
++// hashFuncHash calls fn() and returns its result.
++// If fn() panics, the panic is recovered and returned as an error.
++// This is used to avoid aborting the program when calling
++// an unsupported hash function. It is the caller's responsibility
++// to check the returned value.
++func hashFuncHash(fn func() hash.Hash) (h hash.Hash, err error) {
++	defer func() {
++		r := recover()
++		if r == nil {
++			return
++		}
++		h = nil
++		switch e := r.(type) {
++		case error:
++			err = e
++		case string:
++			err = errors.New(e)
++		default:
++			err = errors.New("unsupported panic")
++		}
++	}()
++	return fn(), nil
++}
++
 +// hashToMD converts a hash.Hash implementation from this package to a GO_EVP_MD_PTR.
 +func hashToMD(h hash.Hash) C.GO_EVP_MD_PTR {
 +	var ch crypto.Hash
@@ -2343,18 +2412,46 @@ index 00000000000000..fa557d86be71c5
 +	return nil
 +}
 +
++// hashFuncToMD converts a hash.Hash function to a GO_EVP_MD_PTR.
++// See [hashFuncHash] for details on error handling.
++func hashFuncToMD(fn func() hash.Hash) (C.GO_EVP_MD_PTR, error) {
++	h, err := hashFuncHash(fn)
++	if err != nil {
++		return nil, err
++	}
++	md := hashToMD(h)
++	if md == nil {
++		return nil, errors.New("unsupported hash function")
++	}
++	return md, nil
++}
++
 +// cryptoHashToMD converts a crypto.Hash to a GO_EVP_MD_PTR.
 +func cryptoHashToMD(ch crypto.Hash) (md C.GO_EVP_MD_PTR) {
 +	if v, ok := cacheMD.Load(ch); ok {
 +		return v.(C.GO_EVP_MD_PTR)
 +	}
 +	defer func() {
-+		if md != nil && vMajor == 3 {
-+			// On OpenSSL 3, directly operating on a EVP_MD object
-+			// not created by EVP_MD_fetch has negative performance
-+			// implications, as digest operations will have
-+			// to fetch it on every call. Better to just fetch it once here.
-+			md = C.go_openssl_EVP_MD_fetch(nil, C.go_openssl_EVP_MD_get0_name(md), nil)
++		if md != nil {
++			switch vMajor {
++			case 1:
++				// On OpenSSL 1 EVP_MD objects can be not-nil even
++				// when they are not supported. We need to pass the md
++				// to a EVP_MD_CTX to really know if they can be used.
++				ctx := C.go_openssl_EVP_MD_CTX_new()
++				if C.go_openssl_EVP_DigestInit_ex(ctx, md, nil) != 1 {
++					md = nil
++				}
++				C.go_openssl_EVP_MD_CTX_free(ctx)
++			case 3:
++				// On OpenSSL 3, directly operating on a EVP_MD object
++				// not created by EVP_MD_fetch has negative performance
++				// implications, as digest operations will have
++				// to fetch it on every call. Better to just fetch it once here.
++				md = C.go_openssl_EVP_MD_fetch(nil, C.go_openssl_EVP_MD_get0_name(md), nil)
++			default:
++				panic(errUnsupportedVersion())
++			}
 +		}
 +		cacheMD.Store(ch, md)
 +	}()
@@ -2370,13 +2467,9 @@ index 00000000000000..fa557d86be71c5
 +	}
 +	switch ch {
 +	case crypto.MD4:
-+		if versionAtOrAbove(1, 1, 0) || !FIPS() {
-+			return C.go_openssl_EVP_md4()
-+		}
++		return C.go_openssl_EVP_md4()
 +	case crypto.MD5:
-+		if versionAtOrAbove(1, 1, 0) || !FIPS() {
-+			return C.go_openssl_EVP_md5()
-+		}
++		return C.go_openssl_EVP_md5()
 +	case crypto.SHA1:
 +		return C.go_openssl_EVP_sha1()
 +	case crypto.SHA224:
@@ -2769,10 +2862,10 @@ index 00000000000000..fa557d86be71c5
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
 new file mode 100644
-index 00000000000000..1e428d5269f997
+index 00000000000000..c3385b9d0186c6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
-@@ -0,0 +1,218 @@
+@@ -0,0 +1,240 @@
 +//go:build unix || windows
 +
 +#include "goopenssl.h"
@@ -2810,6 +2903,19 @@ index 00000000000000..1e428d5269f997
 +#undef DEFINEFUNC_RENAMED_1_1
 +#undef DEFINEFUNC_RENAMED_3_0
 +
++// go_openssl_fips_enabled returns 1 if FIPS mode is enabled, 0 otherwise.
++// As a special case, it returns -1 if it cannot determine if FIPS mode is enabled.
++// See openssl.FIPS for details about its implementation.
++//
++// This function is reimplemented here because openssl.FIPS assumes that
++// all the OpenSSL bindings are loaded, that is, go_openssl_load_functions has
++// already been called. On the other hand, go_openssl_fips_enabled is called from
++// openssl.CheckVersion, which is used to check if a given OpenSSL shared library
++// exists and is FIPS compliant. That shared library might not be the one that
++// was passed to go_openssl_load_functions, or it might not even have been called at all.
++//
++// It is written in C because it is not possible to directly call C function pointers
++// retrieved using dlsym from Go.
 +int
 +go_openssl_fips_enabled(void* handle)
 +{
@@ -2820,15 +2926,24 @@ index 00000000000000..1e428d5269f997
 +        return FIPS_mode();
 +
 +    // For OpenSSL 3.x.
-+    int (*EVP_default_properties_is_fips_enabled)(void*);
-+    int (*OSSL_PROVIDER_available)(void*, const char*);
-+    EVP_default_properties_is_fips_enabled = (int (*)(void*))dlsym(handle, "EVP_default_properties_is_fips_enabled"); 
-+    OSSL_PROVIDER_available = (int (*)(void*, const char*))dlsym(handle, "OSSL_PROVIDER_available"); 
-+    if (EVP_default_properties_is_fips_enabled != NULL && OSSL_PROVIDER_available != NULL &&
-+        EVP_default_properties_is_fips_enabled(NULL) == 1 && OSSL_PROVIDER_available(NULL, "fips") == 1)
-+            return 1;
++    int (*EVP_default_properties_is_fips_enabled)(void*) = (int (*)(void*))dlsym(handle, "EVP_default_properties_is_fips_enabled");
++    void *(*EVP_MD_fetch)(void*, const char*, const char*) = (void* (*)(void*, const char*, const char*))dlsym(handle, "EVP_MD_fetch");
++    void (*EVP_MD_free)(void*) = (void (*)(void*))dlsym(handle, "EVP_MD_free");
 +
-+    return 0;
++    if (EVP_default_properties_is_fips_enabled == NULL || EVP_MD_fetch == NULL || EVP_MD_free == NULL) {
++        // Shouldn't happen, but if it does, we can't determine if FIPS mode is enabled.
++        return -1;
++    }
++
++    if (EVP_default_properties_is_fips_enabled(NULL) != 1)
++        return 0;
++
++    void *md = EVP_MD_fetch(NULL, "SHA2-256", NULL);
++    if (md == NULL)
++        return 0;
++
++    EVP_MD_free(md);
++    return 1;
 +}
 +
 +// Load all the functions stored in FOR_ALL_OPENSSL_FUNCTIONS
@@ -4306,10 +4421,10 @@ index 00000000000000..6fd3a518906004
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..2e4323cc247a78
+index 00000000000000..f2ff598de65b2d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,190 @@
+@@ -0,0 +1,285 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4321,6 +4436,7 @@ index 00000000000000..2e4323cc247a78
 +	"hash"
 +	"io"
 +	"runtime"
++	"sync"
 +	"unsafe"
 +)
 +
@@ -4330,85 +4446,72 @@ index 00000000000000..2e4323cc247a78
 +	case 1:
 +		return versionAtOrAbove(1, 1, 1)
 +	case 3:
-+		// Some OpenSSL 3 providers don't support HKDF or don't support it via
-+		// the EVP_PKEY API, which is the one we use.
-+		// See https://github.com/golang-fips/openssl/issues/189.
-+		ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_HKDF, nil)
-+		if ctx == nil {
-+			return false
-+		}
-+		C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+		return true
++		_, err := fetchHKDF3()
++		return err == nil
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
 +}
 +
-+func newHKDF(h func() hash.Hash, mode C.int) (*hkdf, error) {
-+	if !SupportsHKDF() {
-+		return nil, errUnsupportedVersion()
-+	}
-+
-+	ch := h()
-+	md := hashToMD(ch)
-+	if md == nil {
-+		return nil, errors.New("unsupported hash function")
-+	}
++func newHKDFCtx1(md C.GO_EVP_MD_PTR, mode C.int, secret, salt, pseudorandomKey, info []byte) (ctx C.GO_EVP_PKEY_CTX_PTR, err error) {
++	checkMajorVersion(1)
 +
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_HKDF, nil)
++	ctx = C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_HKDF, nil)
 +	if ctx == nil {
 +		return nil, newOpenSSLError("EVP_PKEY_CTX_new_id")
 +	}
 +	defer func() {
-+		C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		if err != nil {
++			C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		}
 +	}()
 +
 +	if C.go_openssl_EVP_PKEY_derive_init(ctx) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_init")
++		return ctx, newOpenSSLError("EVP_PKEY_derive_init")
 +	}
-+	switch vMajor {
-+	case 3:
-+		if C.go_openssl_EVP_PKEY_CTX_set_hkdf_mode(ctx, mode) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_mode")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_set_hkdf_md(ctx, md) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_md")
-+		}
-+	case 1:
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_MODE,
-+			C.int(mode), nil) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_mode")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_MD,
-+			0, unsafe.Pointer(md)) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_md")
++
++	ctrlSlice := func(ctrl int, data []byte) C.int {
++		if len(data) == 0 {
++			return 1 // No data to set.
 +		}
++		return C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.int(ctrl), C.int(len(data)), unsafe.Pointer(base(data)))
 +	}
 +
-+	c := &hkdf{ctx: ctx, hashLen: ch.Size()}
-+	ctx = nil
-+
-+	runtime.SetFinalizer(c, (*hkdf).finalize)
-+
-+	return c, nil
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.GO_EVP_PKEY_CTRL_HKDF_MODE, mode, nil) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_mode")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.GO_EVP_PKEY_CTRL_HKDF_MD, 0, unsafe.Pointer(md)) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_md")
++	}
++	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_KEY, secret) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++	}
++	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_SALT, salt) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_salt")
++	}
++	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_KEY, pseudorandomKey) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++	}
++	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_INFO, info) != 1 {
++		return ctx, newOpenSSLError("EVP_PKEY_CTX_add1_hkdf_info")
++	}
++	return ctx, nil
 +}
 +
-+type hkdf struct {
++type hkdf1 struct {
 +	ctx C.GO_EVP_PKEY_CTX_PTR
 +
 +	hashLen int
 +	buf     []byte
 +}
 +
-+func (c *hkdf) finalize() {
++func (c *hkdf1) finalize() {
 +	if c.ctx != nil {
 +		C.go_openssl_EVP_PKEY_CTX_free(c.ctx)
 +	}
 +}
 +
-+func (c *hkdf) Read(p []byte) (int, error) {
++func (c *hkdf1) Read(p []byte) (int, error) {
 +	defer runtime.KeepAlive(c)
 +
 +	// EVP_PKEY_derive doesn't support incremental output, each call
@@ -4434,102 +4537,207 @@ index 00000000000000..2e4323cc247a78
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	c, err := newHKDF(h, C.GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY)
++	if !SupportsHKDF() {
++		return nil, errUnsupportedVersion()
++	}
++
++	md, err := hashFuncToMD(h)
 +	if err != nil {
 +		return nil, err
 +	}
++
 +	switch vMajor {
-+	case 3:
-+		if C.go_openssl_EVP_PKEY_CTX_set1_hkdf_key(c.ctx,
-+			base(secret), C.int(len(secret))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++	case 1:
++		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		if err != nil {
++			return nil, err
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_set1_hkdf_salt(c.ctx,
-+			base(salt), C.int(len(salt))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_salt")
++		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		r := C.go_openssl_EVP_PKEY_derive_wrapper(ctx, nil, 0)
++		if r.result != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_derive_init")
 +		}
-+	case 1:
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(c.ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_KEY,
-+			C.int(len(secret)), unsafe.Pointer(base(secret))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++		out := make([]byte, r.keylen)
++		if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(out), r.keylen).result != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_derive")
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(c.ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_SALT,
-+			C.int(len(salt)), unsafe.Pointer(base(salt))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_salt")
++		return out[:r.keylen], nil
++	case 3:
++		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		if err != nil {
++			return nil, err
 +		}
++		defer C.go_openssl_EVP_KDF_CTX_free(ctx)
++		out := make([]byte, C.go_openssl_EVP_KDF_CTX_get_kdf_size(ctx))
++		if C.go_openssl_EVP_KDF_derive(ctx, base(out), C.size_t(len(out)), nil) != 1 {
++			return nil, newOpenSSLError("EVP_KDF_derive")
++		}
++		return out, nil
++	default:
++		panic(errUnsupportedVersion())
 +	}
-+	r := C.go_openssl_EVP_PKEY_derive_wrapper(c.ctx, nil, 0)
-+	if r.result != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_init")
-+	}
-+	out := make([]byte, r.keylen)
-+	if C.go_openssl_EVP_PKEY_derive_wrapper(c.ctx, base(out), r.keylen).result != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive")
-+	}
-+	return out[:r.keylen], nil
 +}
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
-+	c, err := newHKDF(h, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY)
++	if !SupportsHKDF() {
++		return nil, errUnsupportedVersion()
++	}
++
++	md, err := hashFuncToMD(h)
 +	if err != nil {
 +		return nil, err
 +	}
++
 +	switch vMajor {
-+	case 3:
-+		if C.go_openssl_EVP_PKEY_CTX_set1_hkdf_key(c.ctx,
-+			base(pseudorandomKey), C.int(len(pseudorandomKey))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_add1_hkdf_info(c.ctx,
-+			base(info), C.int(len(info))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_add1_hkdf_info")
-+		}
 +	case 1:
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(c.ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_KEY,
-+			C.int(len(pseudorandomKey)), unsafe.Pointer(base(pseudorandomKey))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(c.ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_HKDF_INFO,
-+			C.int(len(info)), unsafe.Pointer(base(info))) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_add1_hkdf_info")
++		c := &hkdf1{ctx: ctx, hashLen: int(C.go_openssl_EVP_MD_get_size(md))}
++		runtime.SetFinalizer(c, (*hkdf1).finalize)
++		return c, nil
++	case 3:
++		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
 +		}
++		c := &hkdf3{ctx: ctx, hashLen: int(C.go_openssl_EVP_MD_get_size(md))}
++		runtime.SetFinalizer(c, (*hkdf3).finalize)
++		return c, nil
++	default:
++		panic(errUnsupportedVersion())
 +	}
-+	return c, nil
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-new file mode 100644
-index 00000000000000..02d0d3732b9b61
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,276 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
 +
-+// #include "goopenssl.h"
-+import "C"
-+import (
-+	"hash"
-+	"runtime"
-+	"sync"
-+	"unsafe"
-+)
++type hkdf3 struct {
++	ctx C.GO_EVP_KDF_CTX_PTR
 +
-+var OSSL_MAC_PARAM_DIGEST = C.CString("digest")
++	hashLen int
++	buf     []byte
++}
 +
-+// NewHMAC returns a new HMAC using OpenSSL.
-+// The function h must return a hash implemented by
-+// OpenSSL (for example, h could be openssl.NewSHA256).
-+// If h is not recognized, NewHMAC returns nil.
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
-+	ch := h()
-+	md := hashToMD(ch)
-+	if md == nil {
-+		return nil
++func (c *hkdf3) finalize() {
++	if c.ctx != nil {
++		C.go_openssl_EVP_KDF_CTX_free(c.ctx)
++	}
++}
++
++// fetchHKDF3 fetches the HKDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchHKDF3 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	name := C.CString("HKDF")
++	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
++	C.free(unsafe.Pointer(name))
++	if kdf == nil {
++		return nil, newOpenSSLError("EVP_KDF_fetch")
++	}
++	return kdf, nil
++})
++
++// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
++func newHKDFCtx3(md C.GO_EVP_MD_PTR, mode C.int, secret, salt, pseudorandomKey, info []byte) (_ C.GO_EVP_KDF_CTX_PTR, err error) {
++	checkMajorVersion(3)
++
++	kdf, err := fetchHKDF3()
++	if err != nil {
++		return nil, err
++	}
++	ctx := C.go_openssl_EVP_KDF_CTX_new(kdf)
++	if ctx == nil {
++		return nil, newOpenSSLError("EVP_KDF_CTX_new")
++	}
++	defer func() {
++		if err != nil {
++			C.go_openssl_EVP_KDF_CTX_free(ctx)
++		}
++	}()
++
++	bld, err := newParamBuilder()
++	if err != nil {
++		return ctx, err
++	}
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, C.go_openssl_EVP_MD_get0_name(md), 0)
++	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
++	if len(secret) > 0 {
++		bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
++	}
++	if len(salt) > 0 {
++		bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
++	}
++	if len(pseudorandomKey) > 0 {
++		bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
++	}
++	if len(info) > 0 {
++		bld.addOctetString(_OSSL_KDF_PARAM_INFO, info)
++	}
++	params, err := bld.build()
++	if err != nil {
++		return ctx, err
++	}
++	defer C.go_openssl_OSSL_PARAM_free(params)
++
++	if C.go_openssl_EVP_KDF_CTX_set_params(ctx, params) != 1 {
++		return ctx, newOpenSSLError("EVP_KDF_CTX_set_params")
++	}
++	return ctx, nil
++}
++
++func (c *hkdf3) Read(p []byte) (int, error) {
++	defer runtime.KeepAlive(c)
++
++	// EVP_KDF_derive doesn't support incremental output, each call
++	// derives the key from scratch and returns the requested bytes.
++	// To implement io.Reader, we need to ask for len(c.buf) + len(p)
++	// bytes and copy the last derived len(p) bytes to p.
++	// We use c.buf to know how many bytes we've already derived and
++	// to avoid allocating the whole output buffer on each call.
++	prevLen := len(c.buf)
++	needLen := len(p)
++	remains := 255*c.hashLen - prevLen
++	// Check whether enough data can be generated.
++	if remains < needLen {
++		return 0, errors.New("hkdf: entropy limit reached")
++	}
++	c.buf = append(c.buf, make([]byte, needLen)...)
++	outLen := C.size_t(prevLen + needLen)
++	if C.go_openssl_EVP_KDF_derive(c.ctx, base(c.buf), outLen, nil) != 1 {
++		return 0, newOpenSSLError("EVP_KDF_derive")
++	}
++	n := copy(p, c.buf[prevLen:outLen])
++	return n, nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
+new file mode 100644
+index 00000000000000..b519ba3111dcc3
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
+@@ -0,0 +1,274 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++// #include "goopenssl.h"
++import "C"
++import (
++	"hash"
++	"runtime"
++	"sync"
++	"unsafe"
++)
++
++// NewHMAC returns a new HMAC using OpenSSL.
++// The function h must return a hash implemented by
++// OpenSSL (for example, h could be openssl.NewSHA256).
++// If h is not recognized, NewHMAC returns nil.
++func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
++	h, _ := hashFuncHash(fh)
++	md := hashToMD(h)
++	if md == nil {
++		return nil
 +	}
 +
 +	if len(key) == 0 {
@@ -4542,8 +4750,8 @@ index 00000000000000..02d0d3732b9b61
 +	}
 +
 +	hmac := &opensslHMAC{
-+		size:      ch.Size(),
-+		blockSize: ch.BlockSize(),
++		size:      h.Size(),
++		blockSize: h.BlockSize(),
 +	}
 +
 +	switch vMajor {
@@ -4607,14 +4815,14 @@ index 00000000000000..02d0d3732b9b61
 +	return mac
 +})
 +
-+func buildHMAC3Params(digest *C.char) C.GO_OSSL_PARAM_PTR {
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		panic(newOpenSSLError("OSSL_PARAM_BLD_new"))
++func buildHMAC3Params(digest *C.char) (C.GO_OSSL_PARAM_PTR, error) {
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+	C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_MAC_PARAM_DIGEST, digest, 0)
-+	return C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, digest, 0)
++	return bld.build()
 +}
 +
 +func isHMAC3DigestSupported(digest string) bool {
@@ -4629,9 +4837,9 @@ index 00000000000000..02d0d3732b9b61
 +
 +	cdigest := C.CString(digest)
 +	defer C.free(unsafe.Pointer(cdigest))
-+	params := buildHMAC3Params(cdigest)
-+	if params == nil {
-+		panic(newOpenSSLError("OSSL_PARAM_BLD_to_param"))
++	params, err := buildHMAC3Params(cdigest)
++	if err != nil {
++		panic(err)
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
 +
@@ -4649,9 +4857,9 @@ index 00000000000000..02d0d3732b9b61
 +		// See https://github.com/golang-fips/openssl/issues/153.
 +		return hmacCtx3{}
 +	}
-+	params := buildHMAC3Params(digest)
-+	if params == nil {
-+		panic(newOpenSSLError("OSSL_PARAM_BLD_to_param"))
++	params, err := buildHMAC3Params(digest)
++	if err != nil {
++		panic(err)
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
 +
@@ -4933,10 +5141,10 @@ index 00000000000000..3778e21227abb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..1562cee2685bc8
+index 00000000000000..f8b3f6ee140ace
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,434 @@
+@@ -0,0 +1,462 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -4977,8 +5185,14 @@ index 00000000000000..1562cee2685bc8
 +		return false, false
 +	}
 +	defer dlclose(handle)
-+	fips = C.go_openssl_fips_enabled(handle) == 1
-+	return true, fips
++	enabled := C.go_openssl_fips_enabled(handle)
++	fips = enabled == 1
++	// If go_openssl_fips_enabled returns -1, it means that all or some of the necessary
++	// functions are not available. This can be due to the version of OpenSSL being too old,
++	// too incompatible, or the shared library not being an OpenSSL library. In any case,
++	// we shouldn't consider this library to be valid for our purposes.
++	exists = enabled != -1
++	return
 +}
 +
 +// Init loads and initializes OpenSSL from the shared library at path.
@@ -5035,23 +5249,37 @@ index 00000000000000..1562cee2685bc8
 +var (
 +	providerNameFips    = C.CString("fips")
 +	providerNameDefault = C.CString("default")
++	propFIPS            = C.CString("fips=yes")
++
++	algorithmSHA256 = C.CString("SHA2-256")
 +)
 +
-+// FIPS returns true if OpenSSL is running in FIPS mode, else returns false.
++// FIPS returns true if OpenSSL is running in FIPS mode and there is
++// a provider available that supports FIPS. It returns false otherwise.
 +func FIPS() bool {
 +	switch vMajor {
 +	case 1:
 +		return C.go_openssl_FIPS_mode() == 1
 +	case 3:
-+		// If FIPS is not enabled via default properties, then we are sure FIPS is not used.
-+		if C.go_openssl_EVP_default_properties_is_fips_enabled(nil) == 0 {
++		// Check if the default properties contain `fips=1`.
++		if C.go_openssl_EVP_default_properties_is_fips_enabled(nil) != 1 {
++			// Note that it is still possible that the provider used by default is FIPS-compliant,
++			// but that wouldn't be a system or user requirement.
++			return false
++		}
++		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
++		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
++		//
++		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
++		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
++		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
++		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
++		md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, nil)
++		if md == nil {
 +			return false
 +		}
-+		// EVP_default_properties_is_fips_enabled can return true even if the FIPS provider isn't loaded,
-+		// it is only based on the default properties.
-+		// We can be sure that the FIPS provider is available if we can fetch an algorithm, e.g., SHA2-256,
-+		// explicitly setting `fips=yes`.
-+		return C.go_openssl_OSSL_PROVIDER_available(nil, providerNameFips) == 1
++		C.go_openssl_EVP_MD_free(md)
++		return true
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -5089,19 +5317,27 @@ index 00000000000000..1562cee2685bc8
 +		} else {
 +			provName = providerNameDefault
 +		}
-+		// Check if there is any provider that matches props.
-+		if C.go_openssl_OSSL_PROVIDER_available(nil, provName) != 1 {
-+			// If not, fallback to provName provider.
-+			if C.go_openssl_OSSL_PROVIDER_load(nil, provName) == nil {
-+				return newOpenSSLError("OSSL_PROVIDER_try_load")
-+			}
-+			// Make sure we now have a provider available.
-+			if C.go_openssl_OSSL_PROVIDER_available(nil, provName) != 1 {
-+				return fail("SetFIPS(" + strconv.FormatBool(enabled) + ") not supported")
-+			}
++		// Try to load the provider, but don't fail if it's not loaded.
++		// The built-in provider might not be present in the system.
++		// We don't need the built-in provider if third-party providers are being used: they are already loaded.
++		// If the system is not well-configured and has no FIPS capability, this will be detected by the next steps.
++		C.go_openssl_OSSL_PROVIDER_try_load(nil, provName, 1)
++		C.go_openssl_ERR_clear_error()
++
++		// See FIPS() for the rationale behind this check.
++		md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, propFIPS)
++		if md == nil {
++			// Don't enable FIPS mode if there is no provider that supports it.
++			// This makes it easier for callers to call SetFIPS(true) to do a
++			// best-effort attempt to enable FIPS mode, but not fail if it's not possible.
++			C.go_openssl_ERR_clear_error()
++			return errors.New("openssl: FIPS mode not supported by any provider")
 +		}
++		C.go_openssl_EVP_MD_free(md)
++
++		// Enable FIPS mode in the default properties.
 +		if C.go_openssl_EVP_default_properties_enable_fips(nil, mode) != 1 {
-+			return newOpenSSLError("openssl: EVP_default_properties_enable_fips")
++			return newOpenSSLError("EVP_default_properties_enable_fips")
 +		}
 +		return nil
 +	default:
@@ -5371,12 +5607,228 @@ index 00000000000000..1562cee2685bc8
 +func versionAtOrAbove(major, minor, patch uint) bool {
 +	return vMajor > major || (vMajor == major && vMinor > minor) || (vMajor == major && vMinor == minor && vPatch >= patch)
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+new file mode 100644
+index 00000000000000..fa24a8cd673ed0
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+@@ -0,0 +1,210 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++// #include "goopenssl.h"
++import "C"
++import (
++	"runtime"
++	"unsafe"
++)
++
++var (
++	// KDF parameters
++	_OSSL_KDF_PARAM_DIGEST = C.CString("digest")
++	_OSSL_KDF_PARAM_SECRET = C.CString("secret")
++	_OSSL_KDF_PARAM_SEED   = C.CString("seed")
++	_OSSL_KDF_PARAM_KEY    = C.CString("key")
++	_OSSL_KDF_PARAM_INFO   = C.CString("info")
++	_OSSL_KDF_PARAM_SALT   = C.CString("salt")
++	_OSSL_KDF_PARAM_MODE   = C.CString("mode")
++
++	// PKEY parameters
++	_OSSL_PKEY_PARAM_PUB_KEY          = C.CString("pub")
++	_OSSL_PKEY_PARAM_PRIV_KEY         = C.CString("priv")
++	_OSSL_PKEY_PARAM_GROUP_NAME       = C.CString("group")
++	_OSSL_PKEY_PARAM_EC_PUB_X         = C.CString("qx")
++	_OSSL_PKEY_PARAM_EC_PUB_Y         = C.CString("qy")
++	_OSSL_PKEY_PARAM_FFC_PBITS        = C.CString("pbits")
++	_OSSL_PKEY_PARAM_FFC_QBITS        = C.CString("qbits")
++	_OSSL_PKEY_PARAM_RSA_N            = C.CString("n")
++	_OSSL_PKEY_PARAM_RSA_E            = C.CString("e")
++	_OSSL_PKEY_PARAM_RSA_D            = C.CString("d")
++	_OSSL_PKEY_PARAM_FFC_P            = C.CString("p")
++	_OSSL_PKEY_PARAM_FFC_Q            = C.CString("q")
++	_OSSL_PKEY_PARAM_FFC_G            = C.CString("g")
++	_OSSL_PKEY_PARAM_RSA_FACTOR1      = C.CString("rsa-factor1")
++	_OSSL_PKEY_PARAM_RSA_FACTOR2      = C.CString("rsa-factor2")
++	_OSSL_PKEY_PARAM_RSA_EXPONENT1    = C.CString("rsa-exponent1")
++	_OSSL_PKEY_PARAM_RSA_EXPONENT2    = C.CString("rsa-exponent2")
++	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1 = C.CString("rsa-coefficient1")
++
++	// MAC parameters
++	_OSSL_MAC_PARAM_DIGEST = C.CString("digest")
++)
++
++type bnParam struct {
++	value   C.GO_BIGNUM_PTR
++	private bool
++}
++
++// paramBuilder is a helper for building OSSL_PARAMs.
++// If an error occurs when adding a new parameter,
++// subsequent calls to add parameters are ignored
++// and build() will return the error.
++type paramBuilder struct {
++	bld      C.GO_OSSL_PARAM_BLD_PTR
++	pinner   runtime.Pinner
++	bnToFree []bnParam
++
++	err error
++}
++
++// newParamBuilder creates a new paramBuilder.
++func newParamBuilder() (*paramBuilder, error) {
++	bld := C.go_openssl_OSSL_PARAM_BLD_new()
++	if bld == nil {
++		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
++	}
++	pb := &paramBuilder{
++		bld:      bld,
++		bnToFree: make([]bnParam, 0, 8), // the maximum known number of BIGNUMs to free are 8 for RSA
++	}
++	runtime.SetFinalizer(pb, (*paramBuilder).finalize)
++	return pb, nil
++}
++
++// finalize frees the builder.
++func (b *paramBuilder) finalize() {
++	if b.bld != nil {
++		b.pinner.Unpin()
++		for _, bn := range b.bnToFree {
++			if bn.private {
++				C.go_openssl_BN_clear_free(bn.value)
++			} else {
++				C.go_openssl_BN_free(bn.value)
++			}
++		}
++		C.go_openssl_OSSL_PARAM_BLD_free(b.bld)
++		b.bld = nil
++	}
++}
++
++// check is used internally to enforce invariants and should not be called by users of paramBuilder.
++// Returns true if it's ok to add parameters to the builder or build it.
++// Returns false if there has been an error while adding a parameter.
++// Panics if the paramBuilder has been freed, e.g. if it has already been built.
++func (b *paramBuilder) check() bool {
++	if b.err != nil {
++		return false
++	}
++	if b.bld == nil {
++		panic("openssl: paramBuilder has been freed")
++	}
++	return true
++}
++
++// build creates an OSSL_PARAM from the builder.
++// The returned OSSL_PARAM must be freed with OSSL_PARAM_free.
++// If an error occurred while adding parameters, the error is returned
++// and the OSSL_PARAM is nil. Once build() is called, the builder is finalized
++// and cannot be reused.
++func (b *paramBuilder) build() (C.GO_OSSL_PARAM_PTR, error) {
++	defer b.finalize()
++	if !b.check() {
++		return nil, b.err
++	}
++	param := C.go_openssl_OSSL_PARAM_BLD_to_param(b.bld)
++	if param == nil {
++		return nil, newOpenSSLError("OSSL_PARAM_BLD_build")
++	}
++	return param, nil
++}
++
++// addUTF8String adds a NUL-terminated UTF-8 string to the builder.
++// size should not include the terminating NUL byte. If size is zero, then it will be calculated.
++func (b *paramBuilder) addUTF8String(name *C.char, value *C.char, size C.size_t) {
++	if !b.check() {
++		return
++	}
++	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
++	if C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(b.bld, name, value, size) != 1 {
++		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_utf8_string(" + C.GoString(name) + ")")
++	}
++}
++
++// addOctetString adds an octet string to the builder.
++// The value is pinned and will be unpinned when the builder is freed.
++func (b *paramBuilder) addOctetString(name *C.char, value []byte) {
++	if !b.check() {
++		return
++	}
++	if len(value) != 0 {
++		b.pinner.Pin(&value[0])
++	}
++	if C.go_openssl_OSSL_PARAM_BLD_push_octet_string(b.bld, name, unsafe.Pointer(sbase(value)), C.size_t(len(value))) != 1 {
++		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_octet_string(" + C.GoString(name) + ")")
++	}
++}
++
++// addInt32 adds an int32 to the builder.
++func (b *paramBuilder) addInt32(name *C.char, value int32) {
++	if !b.check() {
++		return
++	}
++	if C.go_openssl_OSSL_PARAM_BLD_push_int32(b.bld, name, C.int32_t(value)) != 1 {
++		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_int32(" + C.GoString(name) + ")")
++	}
++}
++
++// addBN adds a GO_BIGNUM_PTR to the builder.
++func (b *paramBuilder) addBN(name *C.char, value C.GO_BIGNUM_PTR) {
++	if !b.check() {
++		return
++	}
++	if C.go_openssl_OSSL_PARAM_BLD_push_BN(b.bld, name, value) != 1 {
++		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_BN(" + C.GoString(name) + ")")
++	}
++}
++
++// addBin adds a byte slice to the builder.
++// The slice is converted to a BIGNUM using BN_bin2bn and freed when the builder is finalized.
++// If private is true, the BIGNUM will be cleared with BN_clear_free,
++// otherwise it will be freed with BN_free.
++func (b *paramBuilder) addBin(name *C.char, value []byte, private bool) {
++	if !b.check() {
++		return
++	}
++	if len(value) == 0 {
++		// Nothing to do.
++		return
++	}
++	bn := C.go_openssl_BN_bin2bn(base(value), C.int(len(value)), nil)
++	if bn == nil {
++		b.err = newOpenSSLError("BN_bin2bn")
++		return
++	}
++	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
++	b.addBN(name, bn)
++}
++
++// addBigInt adds a BigInt to the builder.
++// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
++// If private is true, the BIGNUM will be cleared with BN_clear_free,
++// otherwise it will be freed with BN_free.
++func (b *paramBuilder) addBigInt(name *C.char, value BigInt, private bool) {
++	if !b.check() {
++		return
++	}
++	if len(value) == 0 {
++		// Nothing to do.
++		return
++	}
++	bn := bigToBN(value)
++	if bn == nil {
++		b.err = newOpenSSLError("bigToBN")
++		return
++	}
++	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
++	b.addBN(name, bn)
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..a895eab2d54767
+index 00000000000000..92276c6aadf423
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-@@ -0,0 +1,28 @@
+@@ -0,0 +1,62 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5386,10 +5838,44 @@ index 00000000000000..a895eab2d54767
 +import (
 +	"errors"
 +	"hash"
++	"sync"
++	"unsafe"
 +)
 +
-+func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	md := hashToMD(h())
++// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
++func SupportsPBKDF2() bool {
++	switch vMajor {
++	case 1:
++		return true
++	case 3:
++		_, err := fetchPBKDF2()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// fetchPBKDF2 fetches the PBKDF2 algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchPBKDF2 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	name := C.CString("PBKDF2")
++	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
++	C.free(unsafe.Pointer(name))
++	if kdf == nil {
++		return nil, newOpenSSLError("EVP_KDF_fetch")
++	}
++	return kdf, nil
++})
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	h, err := hashFuncHash(fh)
++	if err != nil {
++		return nil, err
++	}
++	md := hashToMD(h)
 +	if md == nil {
 +		return nil, errors.New("unsupported hash function")
 +	}
@@ -5657,7 +6143,7 @@ index 00000000000000..9fd709635c3b40
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 new file mode 100644
-index 00000000000000..f88150591eceb6
+index 00000000000000..f1cd3647fb9753
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 @@ -0,0 +1,66 @@
@@ -5673,7 +6159,7 @@ index 00000000000000..f88150591eceb6
 +func SupportsRC4() bool {
 +	// True for stock OpenSSL 1 w/o FIPS.
 +	// False for stock OpenSSL 3 unless the legacy provider is available.
-+	return (versionAtOrAbove(1, 1, 0) || !FIPS()) && loadCipher(cipherRC4, cipherModeNone) != nil
++	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherRC4, cipherModeNone) != nil
 +}
 +
 +// A RC4Cipher is an instance of RC4 using a particular key.
@@ -5729,10 +6215,10 @@ index 00000000000000..f88150591eceb6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..4e45b02d88afc0
+index 00000000000000..cd5b3b8e2a9a85
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,443 @@
+@@ -0,0 +1,408 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5748,17 +6234,6 @@ index 00000000000000..4e45b02d88afc0
 +	"unsafe"
 +)
 +
-+var (
-+	OSSL_PKEY_PARAM_RSA_N            = C.CString("n")
-+	OSSL_PKEY_PARAM_RSA_E            = C.CString("e")
-+	OSSL_PKEY_PARAM_RSA_D            = C.CString("d")
-+	OSSL_PKEY_PARAM_RSA_FACTOR1      = C.CString("rsa-factor1")
-+	OSSL_PKEY_PARAM_RSA_FACTOR2      = C.CString("rsa-factor2")
-+	OSSL_PKEY_PARAM_RSA_EXPONENT1    = C.CString("rsa-exponent1")
-+	OSSL_PKEY_PARAM_RSA_EXPONENT2    = C.CString("rsa-exponent2")
-+	OSSL_PKEY_PARAM_RSA_COEFFICIENT1 = C.CString("rsa-coefficient1")
-+)
-+
 +func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
 +	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
 +		return nil, nil, nil, nil, nil, nil, nil, nil, e
@@ -5808,14 +6283,14 @@ index 00000000000000..4e45b02d88afc0
 +			C.go_openssl_BN_clear(tmp)
 +			return true
 +		}
-+		if !(setBigInt(&N, OSSL_PKEY_PARAM_RSA_N) &&
-+			setBigInt(&E, OSSL_PKEY_PARAM_RSA_E) &&
-+			setBigInt(&D, OSSL_PKEY_PARAM_RSA_D) &&
-+			setBigInt(&P, OSSL_PKEY_PARAM_RSA_FACTOR1) &&
-+			setBigInt(&Q, OSSL_PKEY_PARAM_RSA_FACTOR2) &&
-+			setBigInt(&Dp, OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
-+			setBigInt(&Dq, OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
-+			setBigInt(&Qinv, OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
++		if !(setBigInt(&N, _OSSL_PKEY_PARAM_RSA_N) &&
++			setBigInt(&E, _OSSL_PKEY_PARAM_RSA_E) &&
++			setBigInt(&D, _OSSL_PKEY_PARAM_RSA_D) &&
++			setBigInt(&P, _OSSL_PKEY_PARAM_RSA_FACTOR1) &&
++			setBigInt(&Q, _OSSL_PKEY_PARAM_RSA_FACTOR2) &&
++			setBigInt(&Dp, _OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
++			setBigInt(&Dq, _OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
++			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
 +			return bad(err)
 +		}
 +	default:
@@ -6112,24 +6587,15 @@ index 00000000000000..4e45b02d88afc0
 +	return C.go_openssl_RSA_set0_crt_params(key, bigToBN(dmp1), bigToBN(dmq1), bigToBN(iqmp)) == 1
 +}
 +func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (C.GO_EVP_PKEY_PTR, error) {
-+	// Construct the parameters.
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
-+	}
-+	defer C.go_openssl_OSSL_PARAM_BLD_free(bld)
-+
-+	type bigIntParam struct {
-+		name *C.char
-+		num  BigInt
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
 +	}
++	defer bld.finalize()
 +
-+	comps := make([]bigIntParam, 0, 8)
-+
-+	required := [...]bigIntParam{
-+		{OSSL_PKEY_PARAM_RSA_N, n}, {OSSL_PKEY_PARAM_RSA_E, e}, {OSSL_PKEY_PARAM_RSA_D, d},
-+	}
-+	comps = append(comps, required[:]...)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
 +
 +	if p != nil && q != nil {
 +		allPrecomputedExists := dp != nil && dq != nil && qinv != nil
@@ -6140,34 +6606,19 @@ index 00000000000000..4e45b02d88afc0
 +		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
 +		// value is missing. See https://github.com/openssl/openssl/pull/22334
 +		if vMinor >= 2 || allPrecomputedExists {
-+			comps = append(comps, bigIntParam{OSSL_PKEY_PARAM_RSA_FACTOR1, p}, bigIntParam{OSSL_PKEY_PARAM_RSA_FACTOR2, q})
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
 +		}
 +		if allPrecomputedExists {
-+			comps = append(comps,
-+				bigIntParam{OSSL_PKEY_PARAM_RSA_EXPONENT1, dp},
-+				bigIntParam{OSSL_PKEY_PARAM_RSA_EXPONENT2, dq},
-+				bigIntParam{OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv},
-+			)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
 +		}
 +	}
 +
-+	for _, comp := range comps {
-+		if comp.num == nil {
-+			continue
-+		}
-+		b := bigToBN(comp.num)
-+		if b == nil {
-+			return nil, newOpenSSLError("BN_lebin2bn failed")
-+		}
-+		// b must remain valid until OSSL_PARAM_BLD_to_param has been called.
-+		defer C.go_openssl_BN_clear_free(b)
-+		if C.go_openssl_OSSL_PARAM_BLD_push_BN(bld, comp.name, b) != 1 {
-+			return nil, newOpenSSLError("OSSL_PARAM_BLD_push_BN")
-+		}
-+	}
-+	params := C.go_openssl_OSSL_PARAM_BLD_to_param(bld)
-+	if params == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_to_param")
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
 +	selection := C.GO_EVP_PKEY_PUBLIC_KEY
@@ -6178,10 +6629,10 @@ index 00000000000000..4e45b02d88afc0
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
 new file mode 100644
-index 00000000000000..2370b6cc128f5e
+index 00000000000000..156d8e8ada678c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-@@ -0,0 +1,392 @@
+@@ -0,0 +1,401 @@
 +#include <stdlib.h> // size_t
 +#include <stdint.h> // uint64_t
 +
@@ -6290,6 +6741,8 @@ index 00000000000000..2370b6cc128f5e
 +typedef void* GO_CRYPTO_THREADID_PTR;
 +typedef void* GO_EVP_SIGNATURE_PTR;
 +typedef void* GO_DSA_PTR;
++typedef void* GO_EVP_KDF_PTR;
++typedef void* GO_EVP_KDF_CTX_PTR;
 +
 +// #include <openssl/md5.h>
 +typedef void* GO_MD5_CTX_PTR;
@@ -6356,6 +6809,7 @@ index 00000000000000..2370b6cc128f5e
 +// #endif
 +#define FOR_ALL_OPENSSL_FUNCTIONS \
 +DEFINEFUNC(void, ERR_error_string_n, (unsigned long e, char *buf, size_t len), (e, buf, len)) \
++DEFINEFUNC(void, ERR_clear_error, (void), ()) \
 +DEFINEFUNC_LEGACY_1(unsigned long, ERR_get_error_line, (const char **file, int *line), (file, line)) \
 +DEFINEFUNC_3_0(unsigned long, ERR_get_error_all, (const char **file, int *line, const char **func, const char **data, int *flags), (file, line, func, data, flags)) \
 +DEFINEFUNC_RENAMED_1_1(const char *, OpenSSL_version, SSLeay_version, (int type), (type)) \
@@ -6378,12 +6832,13 @@ index 00000000000000..2370b6cc128f5e
 +DEFINEFUNC_3_0(int, EVP_default_properties_is_fips_enabled, (GO_OSSL_LIB_CTX_PTR libctx), (libctx)) \
 +DEFINEFUNC_3_0(int, EVP_default_properties_enable_fips, (GO_OSSL_LIB_CTX_PTR libctx, int enable), (libctx, enable)) \
 +DEFINEFUNC_3_0(int, OSSL_PROVIDER_available, (GO_OSSL_LIB_CTX_PTR libctx, const char *name), (libctx, name)) \
-+DEFINEFUNC_3_0(GO_OSSL_PROVIDER_PTR, OSSL_PROVIDER_load, (GO_OSSL_LIB_CTX_PTR libctx, const char *name), (libctx, name)) \
++DEFINEFUNC_3_0(GO_OSSL_PROVIDER_PTR, OSSL_PROVIDER_try_load, (GO_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks), (libctx, name, retain_fallbacks)) \
 +DEFINEFUNC_3_0(const char *, OSSL_PROVIDER_get0_name, (const GO_OSSL_PROVIDER_PTR prov), (prov)) \
 +DEFINEFUNC_3_0(GO_EVP_MD_PTR, EVP_MD_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
 +DEFINEFUNC_3_0(void, EVP_MD_free, (GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC_3_0(const char *, EVP_MD_get0_name, (const GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC_3_0(const GO_OSSL_PROVIDER_PTR, EVP_MD_get0_provider, (const GO_EVP_MD_PTR md), (md)) \
++DEFINEFUNC_RENAMED_3_0(int, EVP_MD_get_size, EVP_MD_size, (const GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC_RENAMED_3_0(int, EVP_MD_get_block_size, EVP_MD_block_size, (const GO_EVP_MD_PTR md), (md)) \
 +DEFINEFUNC(int, RAND_bytes, (unsigned char *arg0, int arg1), (arg0, arg1)) \
 +DEFINEFUNC_RENAMED_1_1(GO_EVP_MD_CTX_PTR, EVP_MD_CTX_new, EVP_MD_CTX_create, (void), ()) \
@@ -6550,6 +7005,7 @@ index 00000000000000..2370b6cc128f5e
 +DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_utf8_string, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize), (bld, key, buf, bsize)) \
 +DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_octet_string, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize), (bld, key, buf, bsize)) \
 +DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_BN, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const GO_BIGNUM_PTR bn), (bld, key, bn)) \
++DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_int32, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num), (bld, key, num)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set_hkdf_mode, (GO_EVP_PKEY_CTX_PTR arg0, int arg1), (arg0, arg1)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set_hkdf_md, (GO_EVP_PKEY_CTX_PTR arg0, const GO_EVP_MD_PTR arg1), (arg0, arg1)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set1_hkdf_salt, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
@@ -6559,9 +7015,6 @@ index 00000000000000..2370b6cc128f5e
 +DEFINEFUNC_LEGACY_1(int, EVP_PKEY_set1_EC_KEY, (GO_EVP_PKEY_PTR pkey, GO_EC_KEY_PTR key), (pkey, key)) \
 +DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set0_rsa_oaep_label, (GO_EVP_PKEY_CTX_PTR ctx, void *label, int len), (ctx, label, len)) \
 +DEFINEFUNC(int, PKCS5_PBKDF2_HMAC, (const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const GO_EVP_MD_PTR digest, int keylen, unsigned char *out), (pass, passlen, salt, saltlen, iter, digest, keylen, out)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set_tls1_prf_md, (GO_EVP_PKEY_CTX_PTR arg0, const GO_EVP_MD_PTR arg1), (arg0, arg1)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set1_tls1_prf_secret, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_add1_tls1_prf_seed, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
 +DEFINEFUNC_1_1_1(int, EVP_PKEY_get_raw_public_key, (const GO_EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len), (pkey, pub, len)) \
 +DEFINEFUNC_1_1_1(int, EVP_PKEY_get_raw_private_key, (const GO_EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len), (pkey, priv, len)) \
 +DEFINEFUNC_3_0(GO_EVP_SIGNATURE_PTR, EVP_SIGNATURE_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
@@ -6573,6 +7026,13 @@ index 00000000000000..2370b6cc128f5e
 +DEFINEFUNC_LEGACY_1_1(int, DSA_set0_pqg, (GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g), (d, p, q, g)) \
 +DEFINEFUNC_LEGACY_1_1(void, DSA_get0_key, (const GO_DSA_PTR d, const GO_BIGNUM_PTR *pub_key, const GO_BIGNUM_PTR *priv_key), (d, pub_key, priv_key)) \
 +DEFINEFUNC_LEGACY_1_1(int, DSA_set0_key, (GO_DSA_PTR d, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key), (d, pub_key, priv_key)) \
++DEFINEFUNC_3_0(GO_EVP_KDF_PTR, EVP_KDF_fetch, (GO_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties), (libctx, algorithm, properties)) \
++DEFINEFUNC_3_0(void, EVP_KDF_free, (GO_EVP_KDF_PTR kdf), (kdf)) \
++DEFINEFUNC_3_0(GO_EVP_KDF_CTX_PTR, EVP_KDF_CTX_new, (GO_EVP_KDF_PTR kdf), (kdf)) \
++DEFINEFUNC_3_0(int, EVP_KDF_CTX_set_params, (GO_EVP_KDF_CTX_PTR ctx, const GO_OSSL_PARAM_PTR params), (ctx, params)) \
++DEFINEFUNC_3_0(void, EVP_KDF_CTX_free, (GO_EVP_KDF_CTX_PTR ctx), (ctx)) \
++DEFINEFUNC_3_0(size_t, EVP_KDF_CTX_get_kdf_size, (GO_EVP_KDF_CTX_PTR ctx), (ctx)) \
++DEFINEFUNC_3_0(int, EVP_KDF_derive, (GO_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const GO_OSSL_PARAM_PTR params), (ctx, key, keylen, params)) \
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go
 new file mode 100644
@@ -6746,10 +7206,10 @@ index 00000000000000..93281d6cffc352
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..5de62f95a7a4ec
+index 00000000000000..f342f221ea0c92
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-@@ -0,0 +1,104 @@
+@@ -0,0 +1,160 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -6760,20 +7220,28 @@ index 00000000000000..5de62f95a7a4ec
 +	"crypto"
 +	"errors"
 +	"hash"
++	"sync"
 +	"unsafe"
 +)
 +
 +func SupportsTLS1PRF() bool {
-+	return vMajor > 1 ||
-+		(vMajor >= 1 && vMinor >= 1)
++	switch vMajor {
++	case 1:
++		return vMinor >= 1
++	case 3:
++		_, err := fetchTLS1PRF3()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
 +}
 +
 +// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
 +// else it implements the TLS 1.2 pseudo-random function.
 +// The pseudo-random number will be written to result and will be of length len(result).
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++func TLS1PRF(result, secret, label, seed []byte, fh func() hash.Hash) error {
 +	var md C.GO_EVP_MD_PTR
-+	if h == nil {
++	if fh == nil {
 +		// TLS 1.0/1.1 PRF doesn't allow to specify the hash function,
 +		// it always uses MD5SHA1. If h is nil, then assume
 +		// that the caller wants to use TLS 1.0/1.1 PRF.
@@ -6781,12 +7249,30 @@ index 00000000000000..5de62f95a7a4ec
 +		// function is MD5SHA1.
 +		md = cryptoHashToMD(crypto.MD5SHA1)
 +	} else {
-+		md = hashToMD(h())
++		h, err := hashFuncHash(fh)
++		if err != nil {
++			return err
++		}
++		md = hashToMD(h)
 +	}
 +	if md == nil {
 +		return errors.New("unsupported hash function")
 +	}
 +
++	switch vMajor {
++	case 1:
++		return tls1PRF1(result, secret, label, seed, md)
++	case 3:
++		return tls1PRF3(result, secret, label, seed, md)
++	default:
++		return errUnsupportedVersion()
++	}
++}
++
++// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
++func tls1PRF1(result, secret, label, seed []byte, md C.GO_EVP_MD_PTR) error {
++	checkMajorVersion(1)
++
 +	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_TLS1_PRF, nil)
 +	if ctx == nil {
 +		return newOpenSSLError("EVP_PKEY_CTX_new_id")
@@ -6798,48 +7284,29 @@ index 00000000000000..5de62f95a7a4ec
 +	if C.go_openssl_EVP_PKEY_derive_init(ctx) != 1 {
 +		return newOpenSSLError("EVP_PKEY_derive_init")
 +	}
-+	switch vMajor {
-+	case 3:
-+		if C.go_openssl_EVP_PKEY_CTX_set_tls1_prf_md(ctx, md) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_set_tls1_prf_md")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_set1_tls1_prf_secret(ctx,
-+			base(secret), C.int(len(secret))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_set1_tls1_prf_secret")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_add1_tls1_prf_seed(ctx,
-+			base(label), C.int(len(label))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_add1_tls1_prf_seed(ctx,
-+			base(seed), C.int(len(seed))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+		}
-+	case 1:
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+			C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_TLS_MD,
-+			0, unsafe.Pointer(md)) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_set_tls1_prf_md")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+			C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_TLS_SECRET,
-+			C.int(len(secret)), unsafe.Pointer(base(secret))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_set1_tls1_prf_secret")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+			C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_TLS_SEED,
-+			C.int(len(label)), unsafe.Pointer(base(label))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+			C.GO1_EVP_PKEY_OP_DERIVE,
-+			C.GO_EVP_PKEY_CTRL_TLS_SEED,
-+			C.int(len(seed)), unsafe.Pointer(base(seed))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+		}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
++		C.GO1_EVP_PKEY_OP_DERIVE,
++		C.GO_EVP_PKEY_CTRL_TLS_MD,
++		0, unsafe.Pointer(md)) != 1 {
++		return newOpenSSLError("EVP_PKEY_CTX_set_tls1_prf_md")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
++		C.GO1_EVP_PKEY_OP_DERIVE,
++		C.GO_EVP_PKEY_CTRL_TLS_SECRET,
++		C.int(len(secret)), unsafe.Pointer(base(secret))) != 1 {
++		return newOpenSSLError("EVP_PKEY_CTX_set1_tls1_prf_secret")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
++		C.GO1_EVP_PKEY_OP_DERIVE,
++		C.GO_EVP_PKEY_CTRL_TLS_SEED,
++		C.int(len(label)), unsafe.Pointer(base(label))) != 1 {
++		return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
++	}
++	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
++		C.GO1_EVP_PKEY_OP_DERIVE,
++		C.GO_EVP_PKEY_CTRL_TLS_SEED,
++		C.int(len(seed)), unsafe.Pointer(base(seed))) != 1 {
++		return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
 +	}
 +	outLen := C.size_t(len(result))
 +	if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(result), outLen).result != 1 {
@@ -6854,6 +7321,147 @@ index 00000000000000..5de62f95a7a4ec
 +	}
 +	return nil
 +}
++
++// fetchTLS1PRF3 fetches the TLS1-PRF KDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchTLS1PRF3 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	name := C.CString("TLS1-PRF")
++	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
++	C.free(unsafe.Pointer(name))
++	if kdf == nil {
++		return nil, newOpenSSLError("EVP_KDF_fetch")
++	}
++	return kdf, nil
++})
++
++// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
++func tls1PRF3(result, secret, label, seed []byte, md C.GO_EVP_MD_PTR) error {
++	checkMajorVersion(3)
++
++	kdf, err := fetchTLS1PRF3()
++	if err != nil {
++		return err
++	}
++	ctx := C.go_openssl_EVP_KDF_CTX_new(kdf)
++	if ctx == nil {
++		return newOpenSSLError("EVP_KDF_CTX_new")
++	}
++	defer C.go_openssl_EVP_KDF_CTX_free(ctx)
++
++	bld, err := newParamBuilder()
++	if err != nil {
++		return err
++	}
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, C.go_openssl_EVP_MD_get0_name(md), 0)
++	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, seed)
++	params, err := bld.build()
++	if err != nil {
++		return err
++	}
++	defer C.go_openssl_OSSL_PARAM_free(params)
++
++	if C.go_openssl_EVP_KDF_derive(ctx, base(result), C.size_t(len(result)), params) != 1 {
++		return newOpenSSLError("EVP_KDF_derive")
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
+new file mode 100644
+index 00000000000000..4d945290e3bdff
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
+@@ -0,0 +1,86 @@
++// Code generated by cmd/genaesmodes. DO NOT EDIT.
++
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "crypto/cipher"
++
++type cipherWithCBC struct {
++	aesCipher
++}
++
++type cipherWithCTR struct {
++	aesCipher
++}
++
++type cipherWithCBC_CTR struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++}
++
++type cipherWithGCM struct {
++	aesCipher
++}
++
++type cipherWithCBC_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithGCM
++}
++
++type cipherWithCTR_GCM struct {
++	aesCipher
++	cipherWithCTR
++	cipherWithGCM
++}
++
++type cipherWithCBC_CTR_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++	cipherWithGCM
++}
++
++func newAESBlock(c *evpCipher, kind cipherKind) cipher.Block {
++	aes := aesCipher{c}
++	var block cipher.Block
++	supportsCBC := loadCipher(kind, cipherModeCBC) != nil
++	supportsCTR := loadCipher(kind, cipherModeCTR) != nil
++	supportsGCM := loadCipher(kind, cipherModeGCM) != nil
++	switch {
++	case !supportsCBC && !supportsCTR && !supportsGCM:
++		block = aes
++	case supportsCBC && !supportsCTR && !supportsGCM:
++		block = cipherWithCBC{aes}
++	case !supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCTR{aes}
++	case supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCBC_CTR{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++		}
++	case !supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithGCM{aes}
++	case supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithCBC_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithGCM{aes},
++		}
++	case !supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCTR_GCM{aes,
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	case supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCBC_CTR_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	default:
++		panic("unreachable")
++	}
++	return block
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE b/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
 new file mode 100644
 index 00000000000000..9e841e7a26e4eb
@@ -10853,11 +11461,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c0b83c9eeef..499d0cde63f7c9 100644
+index cf5c0b83c9eeef..9f0d68a33cfaf1 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20240917142644-14fd57070072
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig

From 0068ec339c9671f3c44bc047c5800302c24cd450 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 30 Oct 2024 17:29:08 +0100
Subject: [PATCH 079/887] REMOVE: set -e

---
 eng/_util/cmd/run-builder/run-builder.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index a256693ae5d..a28cab4c5d9 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -94,6 +94,7 @@ func main() {
 	case "staticlockranking":
 		buildutil.AppendExperimentEnv("staticlockranking")
 	}
+	env("GO_GCFLAGS", "-e")
 
 	// Some Windows builders are slower than others and require more time for the runtime dist tests
 	// in "GOMAXPROCS=2 runtime -cpu=1,2,4 -quick" mode. https://github.com/microsoft/go/issues/700

From a342edc4ed7e303a99b5903f2c9c8be2ca0121a4 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 09:12:44 +0100
Subject: [PATCH 080/887] upgrade openssl to c51a090851d3

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 6 +++---
 patches/0005-Add-CNG-crypto-backend.patch     | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 44dfb26b4c2..1f3d5cd6328 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -721,7 +721,7 @@ index df27f25e789f05..3e9514234e7125 100644
  go 1.24
  
  require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
@@ -730,8 +730,8 @@ index b4efd6d3c50c11..d159c7d47bac3b 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487 h1:Ne+sjU9k7dbdQg1Ix5c2JxT4mshYceU4VWOmClV79Pg=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 6d96c714532..0a42f43dfcd 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -911,7 +911,7 @@ index 3e9514234e7125..611e053ec8c2a0 100644
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
@@ -921,8 +921,8 @@ index d159c7d47bac3b..e2ae52f398320a 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487 h1:Ne+sjU9k7dbdQg1Ix5c2JxT4mshYceU4VWOmClV79Pg=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=

From 218e03d12a75aff9b72e80230900f0c7a1908fa2 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 09:38:35 +0100
Subject: [PATCH 081/887] update vendor folder

---
 patches/0006-Vendor-crypto-backends.patch | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index dd456435cad..836f665e30a 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -7372,13 +7372,13 @@ index 00000000000000..f342f221ea0c92
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 new file mode 100644
-index 00000000000000..4d945290e3bdff
+index 00000000000000..e60a5dde390be6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 @@ -0,0 +1,86 @@
 +// Code generated by cmd/genaesmodes. DO NOT EDIT.
 +
-+//go:build !cmd_go_bootstrap
++//go:build cgo && !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -11461,11 +11461,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c0b83c9eeef..9f0d68a33cfaf1 100644
+index cf5c0b83c9eeef..be1319fc942882 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20241030093648-1a537f4bd487
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig

From f0584d418308f063f195e87d56421d5e32170b39 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 10:12:28 +0100
Subject: [PATCH 082/887] remove -e flag

---
 eng/_util/cmd/run-builder/run-builder.go | 1 -
 1 file changed, 1 deletion(-)

diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index a28cab4c5d9..a256693ae5d 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -94,7 +94,6 @@ func main() {
 	case "staticlockranking":
 		buildutil.AppendExperimentEnv("staticlockranking")
 	}
-	env("GO_GCFLAGS", "-e")
 
 	// Some Windows builders are slower than others and require more time for the runtime dist tests
 	// in "GOMAXPROCS=2 runtime -cpu=1,2,4 -quick" mode. https://github.com/microsoft/go/issues/700

From 812f1136d80e58abe30c76fa7c5dab586eab125a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 11:31:01 +0100
Subject: [PATCH 083/887] skip SHA test that require marshaling

---
 .../0002-Add-crypto-backend-foundation.patch  | 146 ++++++++++++++--
 patches/0005-Add-CNG-crypto-backend.patch     | 158 +-----------------
 2 files changed, 139 insertions(+), 165 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 4659b3e82f2..0213685ee7b 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -27,7 +27,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
  src/crypto/md5/md5.go                        |   7 +
- src/crypto/md5/md5_test.go                   |   4 +
+ src/crypto/md5/md5_test.go                   |  14 ++
  src/crypto/purego_test.go                    |   2 +-
  src/crypto/rand/rand.go                      |   2 +-
  src/crypto/rand/rand_test.go                 |   2 +-
@@ -40,11 +40,11 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/rsa.go                        |  21 +-
  src/crypto/rsa/rsa_test.go                   |   2 +-
  src/crypto/sha1/sha1.go                      |   2 +-
- src/crypto/sha1/sha1_test.go                 |   2 +-
+ src/crypto/sha1/sha1_test.go                 |  12 +-
  src/crypto/sha256/sha256.go                  |   6 +-
- src/crypto/sha256/sha256_test.go             |   2 +-
+ src/crypto/sha256/sha256_test.go             |  20 +-
  src/crypto/sha512/sha512.go                  |   2 +-
- src/crypto/sha512/sha512_test.go             |   2 +-
+ src/crypto/sha512/sha512_test.go             |  20 +-
  src/crypto/tls/boring_test.go                |   5 +
  src/crypto/tls/cipher_suites.go              |   2 +-
  src/crypto/tls/handshake_client.go           |  25 ++-
@@ -56,7 +56,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 52 files changed, 802 insertions(+), 106 deletions(-)
+ 52 files changed, 858 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -912,7 +912,7 @@ index c984c3f4968598..229dd457f8d53c 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 6a8258a67e860c..3a973eebd284a4 100644
+index 6a8258a67e860c..63dfe196da7a58 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,6 +6,7 @@ package md5
@@ -923,7 +923,19 @@ index 6a8258a67e860c..3a973eebd284a4 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
-@@ -157,6 +158,9 @@ func TestLarge(t *testing.T) {
+@@ -88,6 +89,11 @@ func TestGolden(t *testing.T) {
+ }
+ 
+ func TestGoldenMarshal(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for _, g := range golden {
+ 		h := New()
+ 		h2 := New()
+@@ -157,6 +163,9 @@ func TestLarge(t *testing.T) {
  
  // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
  func TestBlockGeneric(t *testing.T) {
@@ -933,6 +945,18 @@ index 6a8258a67e860c..3a973eebd284a4 100644
  	gen, asm := New().(*digest), New().(*digest)
  	buf := make([]byte, BlockSize*20) // arbitrary factor
  	rand.Read(buf)
+@@ -204,6 +213,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
 diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
 index 62be347e0c6822..d284b5cf7814a6 100644
 --- a/src/crypto/purego_test.go
@@ -1255,7 +1279,7 @@ index 8189d1946d8ea5..8f5f7f27f26fea 100644
  	"hash"
  	"internal/byteorder"
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index d03892c57d4e61..d44f70b92661b4 100644
+index d03892c57d4e61..f848659c6e4aa3 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,7 +8,7 @@ package sha1
@@ -1267,6 +1291,30 @@ index d03892c57d4e61..d44f70b92661b4 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
+@@ -97,6 +97,11 @@ func TestGolden(t *testing.T) {
+ }
+ 
+ func TestGoldenMarshal(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	h := New()
+ 	h2 := New()
+ 	for _, g := range golden {
+@@ -210,6 +215,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
 index d87c689c9001ad..7584c380af0cec 100644
 --- a/src/crypto/sha256/sha256.go
@@ -1299,7 +1347,7 @@ index d87c689c9001ad..7584c380af0cec 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index ffd16386515830..d2fa4369d068bf 100644
+index ffd16386515830..09f7046548bf8f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1311,6 +1359,45 @@ index ffd16386515830..d2fa4369d068bf 100644
  	"crypto/internal/cryptotest"
  	"encoding"
  	"fmt"
+@@ -157,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 	for _, tt := range tests {
+ 		t.Run(tt.name, func(t *testing.T) {
++			if boring.Enabled {
++				if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
++					t.Skip("BinaryMarshaler not implemented")
++				}
++			}
+ 			for _, g := range tt.gold {
+ 				h := tt.newHash()
+ 				h2 := tt.newHash()
+@@ -206,6 +211,14 @@ func TestMarshalTypeMismatch(t *testing.T) {
+ 	h1 := New()
+ 	h2 := New224()
+ 
++	if boring.Enabled {
++		_, ok1 := h1.(encoding.BinaryMarshaler)
++		_, ok2 := h2.(encoding.BinaryUnmarshaler)
++		if !ok1 || !ok2 {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
++
+ 	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
+ 	if err != nil {
+ 		t.Errorf("could not marshal: %v", err)
+@@ -277,6 +290,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ 	return h.Sum(nil), nil
+ }
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
 index 0a12fde7bc060b..ca752598e4343a 100644
 --- a/src/crypto/sha512/sha512.go
@@ -1325,7 +1412,7 @@ index 0a12fde7bc060b..ca752598e4343a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index fdad37b1863ae8..736504b8fc85a5 100644
+index fdad37b1863ae8..78fa1f60a542b5 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
@@ -1337,6 +1424,45 @@ index fdad37b1863ae8..736504b8fc85a5 100644
  	"crypto/internal/cryptotest"
  	"encoding"
  	"encoding/hex"
+@@ -746,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
+ 	for _, tt := range tests {
+ 		t.Run(tt.name, func(t *testing.T) {
+ 			for _, test := range tt.golden {
++				if boring.Enabled {
++					if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
++						t.Skip("BinaryMarshaler not implemented")
++					}
++				}
+ 				h := tt.newHash()
+ 				h2 := tt.newHash()
+ 
+@@ -807,6 +812,14 @@ func TestMarshalMismatch(t *testing.T) {
+ 			h1 := fn1()
+ 			h2 := fn2()
+ 
++			if boring.Enabled {
++				_, ok1 := h1.(encoding.BinaryMarshaler)
++				_, ok2 := h2.(encoding.BinaryUnmarshaler)
++				if !ok1 || !ok2 {
++					t.Skip("BinaryMarshaler not implemented")
++				}
++			}
++
+ 			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
+ 			if err != nil {
+ 				t.Errorf("i=%d: could not marshal: %v", i, err)
+@@ -882,6 +895,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
 index 56050421985927..dcbd33167e4499 100644
 --- a/src/crypto/tls/boring_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 0a42f43dfcd..54a29efb913 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -17,16 +17,12 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
- src/crypto/md5/md5_test.go                    |   7 +
  src/crypto/rsa/boring.go                      |   2 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/notboring.go                   |   2 +-
  src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
  src/crypto/rsa/rsa_test.go                    |   8 +-
- src/crypto/sha1/sha1_test.go                  |   7 +
- src/crypto/sha256/sha256_test.go              |  10 +
- src/crypto/sha512/sha512_test.go              |  10 +
  src/crypto/tls/boring.go                      |   2 +-
  src/crypto/tls/boring_test.go                 |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
@@ -45,7 +41,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 41 files changed, 428 insertions(+), 26 deletions(-)
+ 37 files changed, 394 insertions(+), 26 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -526,38 +522,6 @@ index f5b4827c688f3b..12df96069f6b83 100644
  
  // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
  // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
-diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 3a973eebd284a4..5e24e07e2787e2 100644
---- a/src/crypto/md5/md5_test.go
-+++ b/src/crypto/md5/md5_test.go
-@@ -12,6 +12,7 @@ import (
- 	"encoding"
- 	"fmt"
- 	"hash"
-+	"internal/goexperiment"
- 	"io"
- 	"testing"
- 	"unsafe"
-@@ -89,6 +90,9 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	for _, g := range golden {
- 		h := New()
- 		h2 := New()
-@@ -208,6 +212,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
 index 220f8c05c3d94b..dd20b4af2e0472 100644
 --- a/src/crypto/rsa/boring.go
@@ -656,122 +620,6 @@ index dbcc1bec58bd46..b1e9d8e94c2c9e 100644
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
  	if err == ErrMessageTooLong {
-diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index d44f70b92661b4..76726556f80fbd 100644
---- a/src/crypto/sha1/sha1_test.go
-+++ b/src/crypto/sha1/sha1_test.go
-@@ -14,6 +14,7 @@ import (
- 	"encoding"
- 	"fmt"
- 	"hash"
-+	"internal/goexperiment"
- 	"io"
- 	"testing"
- )
-@@ -97,6 +98,9 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	h := New()
- 	h2 := New()
- 	for _, g := range golden {
-@@ -210,6 +214,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
-diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index d2fa4369d068bf..027b705e96113f 100644
---- a/src/crypto/sha256/sha256_test.go
-+++ b/src/crypto/sha256/sha256_test.go
-@@ -13,6 +13,7 @@ import (
- 	"encoding"
- 	"fmt"
- 	"hash"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"io"
- 	"testing"
-@@ -142,6 +143,9 @@ func testGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	cryptotest.TestAllImplementations(t, "crypto/sha256", testGoldenMarshal)
- }
- 
-@@ -203,6 +207,9 @@ func testGoldenMarshal(t *testing.T) {
- }
- 
- func TestMarshalTypeMismatch(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	h1 := New()
- 	h2 := New224()
- 
-@@ -277,6 +284,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- 	return h.Sum(nil), nil
- }
- func TestLargeHashes(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
-diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 736504b8fc85a5..582ed2ae870e23 100644
---- a/src/crypto/sha512/sha512_test.go
-+++ b/src/crypto/sha512/sha512_test.go
-@@ -14,6 +14,7 @@ import (
- 	"encoding/hex"
- 	"fmt"
- 	"hash"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"io"
- 	"testing"
-@@ -726,6 +727,9 @@ func testGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	cryptotest.TestAllImplementations(t, "crypto/sha512", func(t *testing.T) {
- 		testGoldenMarshal(t)
- 	})
-@@ -791,6 +795,9 @@ func testGoldenMarshal(t *testing.T) {
- }
- 
- func TestMarshalMismatch(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshaling")
-+	}
- 	h := []func() hash.Hash{
- 		New,
- 		New384,
-@@ -882,6 +889,9 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if goexperiment.CNGCrypto {
-+		t.Skip("CNGCrypto does not support hash marshalling")
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
 diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
 index 698efc6751e12c..575d51b02298c8 100644
 --- a/src/crypto/tls/boring.go
@@ -905,7 +753,7 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 3e9514234e7125..611e053ec8c2a0 100644
+index 12d8c8f4f97321..39d84e4165d654 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
@@ -917,7 +765,7 @@ index 3e9514234e7125..611e053ec8c2a0 100644
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index d159c7d47bac3b..e2ae52f398320a 100644
+index 4c3ca847c21cd2..116a769b257e34 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@

From 657ae358190fe3908b17a93b25987cfdf4798215 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 11:37:17 +0100
Subject: [PATCH 084/887] fix skip text

---
 patches/0002-Add-crypto-backend-foundation.patch | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 0213685ee7b..e02dd1457db 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -951,7 +951,7 @@ index 6a8258a67e860c..63dfe196da7a58 100644
  func TestLargeHashes(t *testing.T) {
 +	if boring.Enabled {
 +		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
++			t.Skip("BinaryUnmarshaler not implemented")
 +		}
 +	}
  	for i, test := range largeUnmarshalTests {
@@ -1392,7 +1392,7 @@ index ffd16386515830..09f7046548bf8f 100644
  func TestLargeHashes(t *testing.T) {
 +	if boring.Enabled {
 +		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
++			t.Skip("BinaryUnmarshaler not implemented")
 +		}
 +	}
  	for i, test := range largeUnmarshalTests {
@@ -1457,7 +1457,7 @@ index fdad37b1863ae8..78fa1f60a542b5 100644
  func TestLargeHashes(t *testing.T) {
 +	if boring.Enabled {
 +		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
++			t.Skip("BinaryUnmarshaler not implemented")
 +		}
 +	}
  	for i, test := range largeUnmarshalTests {

From eea7ffdb150e19d17f225af5b333c7f73bc848c1 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 11:50:53 +0100
Subject: [PATCH 085/887] fix testKeyBasics and testEverything

---
 .../0002-Add-crypto-backend-foundation.patch  | 36 +++++++++++++++----
 patches/0005-Add-CNG-crypto-backend.patch     | 36 +------------------
 2 files changed, 31 insertions(+), 41 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index e02dd1457db..0cb4e304092 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -38,7 +38,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
  src/crypto/rsa/pss.go                        |   8 +-
  src/crypto/rsa/rsa.go                        |  21 +-
- src/crypto/rsa/rsa_test.go                   |   2 +-
+ src/crypto/rsa/rsa_test.go                   |  12 +-
  src/crypto/sha1/sha1.go                      |   2 +-
  src/crypto/sha1/sha1_test.go                 |  12 +-
  src/crypto/sha256/sha256.go                  |   6 +-
@@ -56,7 +56,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 52 files changed, 858 insertions(+), 106 deletions(-)
+ 52 files changed, 868 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -912,7 +912,7 @@ index c984c3f4968598..229dd457f8d53c 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 6a8258a67e860c..63dfe196da7a58 100644
+index 6a8258a67e860c..61ea6b5153f617 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,6 +6,7 @@ package md5
@@ -1253,7 +1253,7 @@ index 4d78d1eaaa6be0..a016c4f8362cf5 100644
  		if err != nil {
  			return nil, err
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 2afa045a3a0bd2..86466e67e87eeb 100644
+index 2afa045a3a0bd2..c6294694521c69 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1265,6 +1265,30 @@ index 2afa045a3a0bd2..86466e67e87eeb 100644
  	"crypto/rand"
  	. "crypto/rsa"
  	"crypto/sha1"
+@@ -113,6 +113,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+ 	if priv.D.Cmp(priv.N) > 0 {
+ 		t.Errorf("private exponent too large")
+ 	}
++	if boring.Enabled && priv.N.BitLen() < 512 {
++		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
++		// lower than 512 and intentionally fail rather than fall back to Go crypto.
++		t.Skip("skipping allocations test with BoringCrypto")
++	}
+ 
+ 	msg := []byte("hi!")
+ 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
+@@ -187,6 +192,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+ 	if err := priv.Validate(); err != nil {
+ 		t.Errorf("Validate() failed: %s", err)
+ 	}
++	if boring.Enabled && priv.N.BitLen() < 512 {
++		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
++		// lower than 512 and intentionally fail rather than fall back to Go crypto.
++		t.Skip("skipping allocations test with BoringCrypto")
++	}
+ 
+ 	msg := []byte("test")
+ 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
 index 8189d1946d8ea5..8f5f7f27f26fea 100644
 --- a/src/crypto/sha1/sha1.go
@@ -1347,7 +1371,7 @@ index d87c689c9001ad..7584c380af0cec 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index ffd16386515830..09f7046548bf8f 100644
+index ffd16386515830..58632c01dc6a7f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1412,7 +1436,7 @@ index 0a12fde7bc060b..ca752598e4343a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index fdad37b1863ae8..78fa1f60a542b5 100644
+index fdad37b1863ae8..cf6e4c395cd4fb 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 54a29efb913..86418a34e22 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -22,7 +22,6 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/rsa/notboring.go                   |   2 +-
  src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
- src/crypto/rsa/rsa_test.go                    |   8 +-
  src/crypto/tls/boring.go                      |   2 +-
  src/crypto/tls/boring_test.go                 |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
@@ -41,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 37 files changed, 394 insertions(+), 26 deletions(-)
+ 36 files changed, 387 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -587,39 +586,6 @@ index 637d07e18cff2e..21435b86b52dad 100644
  	if err != nil {
  		t.Fatal(err)
  	}
-diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index dbcc1bec58bd46..b1e9d8e94c2c9e 100644
---- a/src/crypto/rsa/rsa_test.go
-+++ b/src/crypto/rsa/rsa_test.go
-@@ -17,6 +17,7 @@ import (
- 	"encoding/pem"
- 	"flag"
- 	"fmt"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"math/big"
- 	"strings"
-@@ -113,6 +114,9 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
- 	if priv.D.Cmp(priv.N) > 0 {
- 		t.Errorf("private exponent too large")
- 	}
-+	if goexperiment.CNGCrypto && priv.N.BitLen() < 512 {
-+		t.Skip("CNGCrypto does not support key sizes lower than 512 and intentionally fails rather than fall back to Go crypto")
-+	}
- 
- 	msg := []byte("hi!")
- 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -187,7 +191,9 @@ func testEverything(t *testing.T, priv *PrivateKey) {
- 	if err := priv.Validate(); err != nil {
- 		t.Errorf("Validate() failed: %s", err)
- 	}
--
-+	if goexperiment.CNGCrypto && priv.N.BitLen() < 512 {
-+		t.Skip("CNGCrypto does not support key sizes lower than 512 and intentionally fails rather than fall back to Go crypto")
-+	}
- 	msg := []byte("test")
- 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
- 	if err == ErrMessageTooLong {
 diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
 index 698efc6751e12c..575d51b02298c8 100644
 --- a/src/crypto/tls/boring.go

From 1bdd67d757188f2e7012e374476bee8edd507ba8 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 12:08:32 +0100
Subject: [PATCH 086/887] support SymCrypt in TLS 1.3 handshakes

---
 .../0002-Add-crypto-backend-foundation.patch  | 31 ++++++++++++++++++-
 patches/0005-Add-CNG-crypto-backend.patch     | 31 +------------------
 2 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 0cb4e304092..ecd2899e9ea 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -49,6 +49,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/cipher_suites.go              |   2 +-
  src/crypto/tls/handshake_client.go           |  25 ++-
  src/crypto/tls/handshake_server.go           |  25 ++-
+ src/crypto/tls/handshake_server_tls13.go     |  10 +
  src/crypto/tls/key_schedule.go               |  18 +-
  src/crypto/tls/prf.go                        |  77 +++++---
  src/crypto/tls/prf_test.go                   |  12 +-
@@ -56,7 +57,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/go/build/deps_test.go                    |   4 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 52 files changed, 868 insertions(+), 106 deletions(-)
+ 53 files changed, 878 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -1640,6 +1641,34 @@ index bc4e51ba364cf1..8b4fc36e49fdf8 100644
  	if _, err := hs.c.writeHandshakeRecord(finished, &hs.finishedHash); err != nil {
  		return err
  	}
+diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
+index b8cf4c3fa50b24..bc5d32a29c50c4 100644
+--- a/src/crypto/tls/handshake_server_tls13.go
++++ b/src/crypto/tls/handshake_server_tls13.go
+@@ -9,6 +9,7 @@ import (
+ 	"context"
+ 	"crypto"
+ 	"crypto/hmac"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/mlkem768"
+ 	"crypto/rsa"
+ 	"errors"
+@@ -441,6 +442,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+ 	}
+ 	marshaler, ok := in.(binaryMarshaler)
+ 	if !ok {
++		if boring.Enabled {
++			// CNG and OpenSSL with SymCrypt hash functions do not implement the
++			// encoding.BinaryMarshaler interface, but they do implement the Clone method.
++			if cloner, ok := in.(interface{ Clone() (hash.Hash, error) }); ok {
++				if out, err := cloner.Clone(); err == nil {
++					return out
++				}
++			}
++		}
+ 		return nil
+ 	}
+ 	state, err := marshaler.MarshalBinary()
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
 index 1636baf79e7288..c9a5877d3d504f 100644
 --- a/src/crypto/tls/key_schedule.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 86418a34e22..094ba62acd5 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -26,7 +26,6 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/tls/boring_test.go                 |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
- src/crypto/tls/handshake_server_tls13.go      |  10 +
  src/crypto/tls/notboring.go                   |   2 +-
  src/crypto/x509/boring.go                     |   2 +-
  src/crypto/x509/boring_test.go                |   2 +-
@@ -40,7 +39,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 387 insertions(+), 25 deletions(-)
+ 35 files changed, 377 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -638,34 +637,6 @@ index 9c1d3d279c472f..0ca7a863b73690 100644
  
  package fipsonly
  
-diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index b8cf4c3fa50b24..dd2c36ab1bef0b 100644
---- a/src/crypto/tls/handshake_server_tls13.go
-+++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -14,6 +14,7 @@ import (
- 	"errors"
- 	"hash"
- 	"internal/byteorder"
-+	"internal/goexperiment"
- 	"io"
- 	"slices"
- 	"time"
-@@ -441,6 +442,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
- 	}
- 	marshaler, ok := in.(binaryMarshaler)
- 	if !ok {
-+		if goexperiment.CNGCrypto {
-+			// CNGCrypto hashes do not implement the binaryMarshaler interface,
-+			// but do implement the Clone method.
-+			if cloner, ok := in.(interface{ Clone() (hash.Hash, error) }); ok {
-+				if out, err := cloner.Clone(); err == nil {
-+					return out
-+				}
-+			}
-+		}
- 		return nil
- 	}
- 	state, err := marshaler.MarshalBinary()
 diff --git a/src/crypto/tls/notboring.go b/src/crypto/tls/notboring.go
 index 36b4ceab0046c6..c87df4ad695f1b 100644
 --- a/src/crypto/tls/notboring.go

From 57e1ab63454977e08adccc106756cfa691d9d839 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 31 Oct 2024 14:48:53 +0100
Subject: [PATCH 087/887] fix TestMarshalHash

---
 .../0002-Add-crypto-backend-foundation.patch  | 23 ++++++++++++++---
 patches/0005-Add-CNG-crypto-backend.patch     | 25 +------------------
 2 files changed, 20 insertions(+), 28 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index e02dd1457db..6ba293fd76e 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -54,9 +54,10 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
+ src/hash/marshal_test.go                     |   3 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 52 files changed, 858 insertions(+), 106 deletions(-)
+ 53 files changed, 861 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -912,7 +913,7 @@ index c984c3f4968598..229dd457f8d53c 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 6a8258a67e860c..63dfe196da7a58 100644
+index 6a8258a67e860c..61ea6b5153f617 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,6 +6,7 @@ package md5
@@ -1347,7 +1348,7 @@ index d87c689c9001ad..7584c380af0cec 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index ffd16386515830..09f7046548bf8f 100644
+index ffd16386515830..58632c01dc6a7f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1412,7 +1413,7 @@ index 0a12fde7bc060b..ca752598e4343a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index fdad37b1863ae8..78fa1f60a542b5 100644
+index fdad37b1863ae8..cf6e4c395cd4fb 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,7 +8,7 @@ package sha512
@@ -1908,6 +1909,20 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	< crypto/rand
  	< crypto/internal/mlkem768
  	< crypto/ed25519
+diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
+index 3091f7a67acede..b066f8281c5265 100644
+--- a/src/hash/marshal_test.go
++++ b/src/hash/marshal_test.go
+@@ -65,6 +65,9 @@ func TestMarshalHash(t *testing.T) {
+ 			}
+ 
+ 			h := tt.new()
++			if _, ok := h.(encoding.BinaryMarshaler); !ok {
++				t.Skip("BinaryMarshaler not implemented")
++			}
+ 			h.Write(buf[:256])
+ 			sum := h.Sum(nil)
+ 
 diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
 index 389eda9ad54b99..110d60beb0e70c 100644
 --- a/src/net/smtp/smtp_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 54a29efb913..fab2306d046 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -37,11 +37,10 @@ Subject: [PATCH] Add CNG crypto backend
  src/go/build/deps_test.go                     |   5 +
  src/go/build/vendor_test.go                   |   1 +
  src/hash/example_test.go                      |   2 +
- src/hash/marshal_test.go                      |   4 +
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 37 files changed, 394 insertions(+), 26 deletions(-)
+ 36 files changed, 390 insertions(+), 26 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -824,28 +823,6 @@ index f07b9aaa2c4898..2ff6c4827391c0 100644
  package hash_test
  
  import (
-diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..824be4a90fd4db 100644
---- a/src/hash/marshal_test.go
-+++ b/src/hash/marshal_test.go
-@@ -21,6 +21,7 @@ import (
- 	"hash/crc32"
- 	"hash/crc64"
- 	"hash/fnv"
-+	"internal/goexperiment"
- 	"testing"
- )
- 
-@@ -76,6 +77,9 @@ func TestMarshalHash(t *testing.T) {
- 			}
- 			h2m, ok := h2.(encoding.BinaryMarshaler)
- 			if !ok {
-+				if goexperiment.CNGCrypto {
-+					t.Skip("CNGCrypto does not hash marshaling")
-+				}
- 				t.Fatalf("Hash does not implement MarshalBinary")
- 			}
- 			enc, err := h2m.MarshalBinary()
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..831460053281e2

From bd9da3b55a9451bced809cf47a027d6cc7ba4787 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 4 Nov 2024 10:21:30 +0100
Subject: [PATCH 088/887] only conditionally skip TestMarshalHash in boring
 mode

---
 .../0002-Add-crypto-backend-foundation.patch  | 40 ++++++++++++++++---
 1 file changed, 34 insertions(+), 6 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 6ba293fd76e..87de796c19b 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -54,10 +54,12 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
- src/hash/marshal_test.go                     |   3 +
+ src/hash/boring_test.go                      |   5 +
+ src/hash/marshal_test.go                     |   5 +
+ src/hash/notboring_test.go                   |   5 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 53 files changed, 861 insertions(+), 106 deletions(-)
+ 55 files changed, 873 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -67,6 +69,8 @@ Subject: [PATCH] Add crypto backend foundation
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/norequirefips.go
  create mode 100644 src/crypto/internal/backend/stub.s
+ create mode 100644 src/hash/boring_test.go
+ create mode 100644 src/hash/notboring_test.go
 
 diff --git a/src/crypto/aes/cipher.go b/src/crypto/aes/cipher.go
 index cde2e45d2ca559..cf47a4fc57d8e2 100644
@@ -1909,20 +1913,44 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	< crypto/rand
  	< crypto/internal/mlkem768
  	< crypto/ed25519
+diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
+new file mode 100644
+index 00000000000000..cd07ee1c00d379
+--- /dev/null
++++ b/src/hash/boring_test.go
+@@ -0,0 +1,5 @@
++//go:build systemcrypto
++
++package hash_test
++
++const boringEnabled = true
 diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..b066f8281c5265 100644
+index 3091f7a67acede..fead8cc4bec73a 100644
 --- a/src/hash/marshal_test.go
 +++ b/src/hash/marshal_test.go
-@@ -65,6 +65,9 @@ func TestMarshalHash(t *testing.T) {
+@@ -65,6 +65,11 @@ func TestMarshalHash(t *testing.T) {
  			}
  
  			h := tt.new()
-+			if _, ok := h.(encoding.BinaryMarshaler); !ok {
-+				t.Skip("BinaryMarshaler not implemented")
++			if boringEnabled {
++				if _, ok := h.(encoding.BinaryMarshaler); !ok {
++					t.Skip("BinaryMarshaler not implemented")
++				}
 +			}
  			h.Write(buf[:256])
  			sum := h.Sum(nil)
  
+diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
+new file mode 100644
+index 00000000000000..e1874086d3f315
+--- /dev/null
++++ b/src/hash/notboring_test.go
+@@ -0,0 +1,5 @@
++//go:build !systemcrypto
++
++package hash_test
++
++const boringEnabled = false
 diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
 index 389eda9ad54b99..110d60beb0e70c 100644
 --- a/src/net/smtp/smtp_test.go

From b3aa2e82b3dac0db8660dde73e1751542531c739 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 4 Nov 2024 11:42:52 +0100
Subject: [PATCH 089/887] fix TestMarshalHash

---
 .../0002-Add-crypto-backend-foundation.patch  |  8 +++---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 28 +++++++++++++++++--
 patches/0005-Add-CNG-crypto-backend.patch     | 24 +++++++++++++++-
 3 files changed, 52 insertions(+), 8 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 87de796c19b..93536512b24 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -1915,11 +1915,11 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	< crypto/ed25519
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
-index 00000000000000..cd07ee1c00d379
+index 00000000000000..c90899062a9665
 --- /dev/null
 +++ b/src/hash/boring_test.go
 @@ -0,0 +1,5 @@
-+//go:build systemcrypto
++//go:build goexperiment.boringcrypto
 +
 +package hash_test
 +
@@ -1942,11 +1942,11 @@ index 3091f7a67acede..fead8cc4bec73a 100644
  
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
 new file mode 100644
-index 00000000000000..e1874086d3f315
+index 00000000000000..79f8c22f2b7416
 --- /dev/null
 +++ b/src/hash/notboring_test.go
 @@ -0,0 +1,5 @@
-+//go:build !systemcrypto
++//go:build !goexperiment.boringcrypto
 +
 +package hash_test
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 1f3d5cd6328..938e6927e2d 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -34,11 +34,13 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   7 +-
  src/go/build/vendor_test.go                   |   1 +
+ src/hash/boring_test.go                       |   2 +-
+ src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_opensslcrypto_off.go     |   9 +
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 34 files changed, 406 insertions(+), 23 deletions(-)
+ 36 files changed, 408 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -714,7 +716,7 @@ index c83a7272c9f01f..a0548a7f9179c5 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index df27f25e789f05..3e9514234e7125 100644
+index df27f25e789f05..12d8c8f4f97321 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
@@ -726,7 +728,7 @@ index df27f25e789f05..3e9514234e7125 100644
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index b4efd6d3c50c11..d159c7d47bac3b 100644
+index b4efd6d3c50c11..4c3ca847c21cd2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
@@ -786,6 +788,26 @@ index 7f6237ffd59c11..7c821ae4bc5727 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
+diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
+index c90899062a9665..802c0f8b8987bf 100644
+--- a/src/hash/boring_test.go
++++ b/src/hash/boring_test.go
+@@ -1,4 +1,4 @@
+-//go:build goexperiment.boringcrypto
++//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
+ 
+ package hash_test
+ 
+diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
+index 79f8c22f2b7416..f3e8ed3e1cbf20 100644
+--- a/src/hash/notboring_test.go
++++ b/src/hash/notboring_test.go
+@@ -1,4 +1,4 @@
+-//go:build !goexperiment.boringcrypto
++//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
+ 
+ package hash_test
+ 
 diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
 new file mode 100644
 index 00000000000000..62033547c6143a
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index fab2306d046..aac1155e600 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -36,11 +36,13 @@ Subject: [PATCH] Add CNG crypto backend
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   5 +
  src/go/build/vendor_test.go                   |   1 +
+ src/hash/boring_test.go                       |   2 +-
  src/hash/example_test.go                      |   2 +
+ src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 390 insertions(+), 26 deletions(-)
+ 38 files changed, 392 insertions(+), 28 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -810,6 +812,16 @@ index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
+diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
+index 802c0f8b8987bf..99e1933f84b52c 100644
+--- a/src/hash/boring_test.go
++++ b/src/hash/boring_test.go
+@@ -1,4 +1,4 @@
+-//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
++//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
+ 
+ package hash_test
+ 
 diff --git a/src/hash/example_test.go b/src/hash/example_test.go
 index f07b9aaa2c4898..2ff6c4827391c0 100644
 --- a/src/hash/example_test.go
@@ -823,6 +835,16 @@ index f07b9aaa2c4898..2ff6c4827391c0 100644
  package hash_test
  
  import (
+diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
+index f3e8ed3e1cbf20..a85fc430cfa655 100644
+--- a/src/hash/notboring_test.go
++++ b/src/hash/notboring_test.go
+@@ -1,4 +1,4 @@
+-//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
++//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
+ 
+ package hash_test
+ 
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..831460053281e2

From 38d62e36b312e3ba024d29f4f4b887b6eec83992 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 7 Nov 2024 11:00:37 -0800
Subject: [PATCH 090/887] Add macOS buildandpack with signing (#1388)

* Add macOS buildandpack with signing

Add macOS builds.

Rework signing to support macOS hardening and notarization.

* Fail if archive contains non-local path

* firstError -> cmp.Or

* Lowercase filename check
---
 eng/_util/cmd/sign/README.md                  |  50 ++
 eng/_util/cmd/sign/archive.go                 | 467 ++++++++++++++++++
 eng/_util/cmd/sign/archiveutil.go             | 134 +++++
 eng/_util/cmd/sign/sign.go                    | 291 +++++++++++
 .../cmd/write-checksum/write-checksum.go      |  31 +-
 eng/_util/internal/checksum/checksum.go       |  32 ++
 eng/pipeline/rolling-internal-pipeline.yml    |   6 +
 eng/pipeline/stages/builders-to-stages.yml    |  34 +-
 .../stages/go-builder-matrix-stages.yml       |   6 +
 eng/pipeline/stages/pool-1.yml                |   4 +-
 eng/pipeline/stages/pool-2.yml                |   5 +
 eng/pipeline/stages/sign-stage.yml            |  95 ++--
 eng/signing/.gitignore                        |   1 +
 eng/signing/NuGet.config                      |   2 +-
 eng/signing/README.md                         |  31 +-
 eng/signing/Sign.csproj                       |  28 ++
 eng/signing/Sign.proj                         |  93 ----
 17 files changed, 1110 insertions(+), 200 deletions(-)
 create mode 100644 eng/_util/cmd/sign/README.md
 create mode 100644 eng/_util/cmd/sign/archive.go
 create mode 100644 eng/_util/cmd/sign/archiveutil.go
 create mode 100644 eng/_util/cmd/sign/sign.go
 create mode 100644 eng/_util/internal/checksum/checksum.go
 create mode 100644 eng/signing/Sign.csproj
 delete mode 100644 eng/signing/Sign.proj

diff --git a/eng/_util/cmd/sign/README.md b/eng/_util/cmd/sign/README.md
new file mode 100644
index 00000000000..a74a2beffdd
--- /dev/null
+++ b/eng/_util/cmd/sign/README.md
@@ -0,0 +1,50 @@
+# `sign` and the Microsoft Go signing infrastructure
+
+Most of the logic for signing (extracting files, repackaging, creating checksums) is implemented by this `sign` command.
+
+The [`/eng/signing`](/eng/signing) directory contains the MSBuild project that `sign` invokes to run real signing.
+The MSBuild project uses [MicroBuild Signing](https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/650/MicroBuild-Signing) (internal Microsoft wiki link).
+
+To see signing in action, go to [`/eng/pipeline/README.md`](/eng/pipeline/README.md) and follow the link for `microsoft-go`.
+
+## Dry run
+
+1. Create the directory `/eng/signing/tosign` and add the `.tar.gz` and `.zip` artifacts to sign.
+    * Download artifacts from the `microsoft-go` pipeline, for example.
+    * It's ok to skip downloading some artifacts. The signing process doesn't require all platforms to be present.
+    * If you specify `-files`, you can use your own directory.
+1. From the root of the repository, run `pwsh eng/run.ps1 sign -n`
+
+The `-n` argument makes it a dry run: it extracts/repacks files in the same way it would if it were signing them, but no signing is done.
+This doesn't involve .NET/MSBuild, so this is a good way for a developer to test changes to the signing logic.
+
+See `pwsh eng/run.ps1 sign -h` for more options.
+
+## Test signing
+
+> [!NOTE]
+> Test signing has not been observed to work.
+> It has been documented for completeness, in case someone wants to try.
+
+### Prerequisites
+
+* Windows
+* .NET Core SDK 8.0 or later.
+    * [Download](https://dot.net/download)
+* The signing plugin.
+    1. Download the latest NuGet Package: https://devdiv.visualstudio.com/DevDiv/_artifacts/feed/MicroBuildToolset/NuGet/MicroBuild.Plugins.Signing
+    1. Extract its contents (the file is a zip) to `%userprofile%\.nuget\packages\microbuild.plugins.signing\1.1.900`.
+        * Optionally make the versioned dir's name match the version of the package you downloaded. It will be discovered dynamically, as a plugin, whether or not the version matches.
+
+### Test signing run
+
+1. Set up `tosign` as described in the dry run section.
+1. From the root of the repository, run `pwsh eng/run.ps1 sign`
+
+## Real signing
+
+This can't be done from a dev machine.
+It occurs in the `microsoft-go` pipeline, on a Windows machine.
+See [`/eng/pipeline/README.md`](/eng/pipeline/README.md).
+
+The invocation of `sign` can be found in [`/eng/pipeline/stages/sign-stage.yml`](/eng/pipeline/stages/sign-stage.yml).
diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
new file mode 100644
index 00000000000..701e83103eb
--- /dev/null
+++ b/eng/_util/cmd/sign/archive.go
@@ -0,0 +1,467 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"archive/tar"
+	"archive/zip"
+	"cmp"
+	"context"
+	"fmt"
+	"io"
+	"log"
+	"os"
+	"path/filepath"
+	"strings"
+)
+
+type archiveType int
+
+const (
+	// zipArchive is a Windows zip archive.
+	zipArchive archiveType = iota
+	// tarGzArchive is a macOS or Linux tar.gz archive.
+	tarGzArchive
+)
+
+type archive struct {
+	path string
+	name string
+
+	archiveType  archiveType
+	archiveMacOS bool
+
+	// workDir is a work dir absolute path that is only used for processing this archive.
+	workDir string
+
+	// repackedPath is a repackaged archive with signed content. Assigned upon completion.
+	// Windows and macOS archives get repacked.
+	repackedPath string
+	// notarizedPath is a repacked archive that has also had the notarization ticket attached.
+	// Assigned upon completion.
+	notarizedPath string
+}
+
+func newArchive(p string) (*archive, error) {
+	name := filepath.Base(p)
+	a := archive{
+		path: p,
+		name: name,
+	}
+	if matchOrPanic("go*.zip", name) {
+		a.archiveType = zipArchive
+	} else if matchOrPanic("go*.tar.gz", name) {
+		a.archiveType = tarGzArchive
+	} else {
+		return nil, fmt.Errorf("unknown archive type: %s", p)
+	}
+
+	if matchOrPanic("go*darwin*.tar.gz", name) {
+		a.archiveMacOS = true
+	}
+
+	if err := os.MkdirAll(*tempDir, 0o777); err != nil {
+		return nil, err
+	}
+	workDir, err := os.MkdirTemp(*tempDir, "sign-work-"+name)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create work directory: %v", err)
+	}
+	workDir, err = filepath.Abs(workDir)
+	if err != nil {
+		return nil, err
+	}
+	a.workDir = workDir
+
+	return &a, nil
+}
+
+// latestPath returns the path of the file that has the most signing steps applied to it. This
+// allows for some generalization across platforms in later steps.
+func (a *archive) latestPath() string {
+	if a.notarizedPath != "" {
+		return a.notarizedPath
+	}
+	if a.repackedPath != "" {
+		return a.repackedPath
+	}
+	return a.path
+}
+
+func (a *archive) sigPath() string {
+	return filepath.Join(a.workDir, a.name+".sig")
+}
+
+func (a *archive) macHardenPackPath() string {
+	return filepath.Join(a.workDir, a.name+".ToSignBundle.zip")
+}
+
+func (a *archive) macNotarizePackPath() string {
+	return filepath.Join(a.workDir, a.name+".ToNotarize.zip")
+}
+
+// entrySignInfo returns signing details for a given file in the Go archive, or nil if the given
+// file entry doesn't need to be signed.
+func (a *archive) entrySignInfo(name string) *fileToSign {
+	if a.archiveType == zipArchive {
+		if strings.HasSuffix(name, ".exe") {
+			return &fileToSign{
+				originalPath: a.path,
+				fullPath:     filepath.Join(a.workDir, "extract", name),
+				authenticode: "Microsoft400",
+			}
+		}
+	} else if a.archiveMacOS {
+		if matchOrPanic("go/bin/*", name) ||
+			matchOrPanic("go/pkg/tool/*/*", name) {
+
+			return &fileToSign{
+				originalPath: a.path,
+				zip:          true,
+			}
+		}
+	}
+	return nil
+}
+
+// prepareEntriesToSign extracts files from the archive that need to be signed and returns a list
+// of their extracted locations and details about how they should be signed.
+func (a *archive) prepareEntriesToSign(ctx context.Context) ([]*fileToSign, error) {
+	fail := func(err error) ([]*fileToSign, error) {
+		return nil, fmt.Errorf("failed to extract file from %q: %v", a.path, err)
+	}
+
+	var results []*fileToSign
+
+	if a.archiveType == zipArchive {
+		log.Printf("Extracting files to sign from %q", a.path)
+		zr, err := zip.OpenReader(a.path)
+		if err != nil {
+			return fail(err)
+		}
+		defer zr.Close()
+
+		if err := eachZipEntry(zr, func(f *zip.File) error {
+			if err := ctx.Err(); err != nil {
+				return err
+			}
+			if f.FileInfo().IsDir() {
+				return nil
+			}
+			if info := a.entrySignInfo(f.Name); info != nil {
+				if err := withFileCreate(info.fullPath, func(fWriter *os.File) error {
+					fReader, err := f.Open()
+					if err != nil {
+						return err
+					}
+					_, err = io.Copy(fWriter, fReader)
+					return cmp.Or(err, fReader.Close())
+				}); err != nil {
+					return err
+				}
+				results = append(results, info)
+			}
+			return nil
+		}); err != nil {
+			return fail(err)
+		}
+	} else if a.archiveMacOS {
+		// Store macOS files to sign in a zip. Zipping is needed for this platform specifically,
+		// and the "Zip=true" feature mentioned in the doc only works when signing on a macOS
+		// runtime, so we need to do it ourselves.
+		// https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/19841/Additional-Requirements-for-Signing-or-Notarizing-Mac-Files
+		fts := &fileToSign{
+			originalPath: a.path,
+			fullPath:     a.macHardenPackPath(),
+			authenticode: "MacDeveloperHarden",
+		}
+		log.Printf("Creating macOS file hardening bundle at %q", fts.fullPath)
+		if err := withZipCreate(fts.fullPath, func(zw *zip.Writer) error {
+			return a.extractMacOSEntriesToZip(ctx, zw)
+		}); err != nil {
+			return fail(err)
+		}
+		results = append(results, fts)
+	}
+
+	return results, nil
+}
+
+func (a *archive) extractMacOSEntriesToZip(ctx context.Context, zw *zip.Writer) error {
+	// Open tar.gz macOS archive to put files into the zip.
+	writtenNames := make(map[string]struct{})
+	return withTarGzOpen(a.path, func(tr *tar.Reader) error {
+		return eachTarEntry(tr, func(header *tar.Header, r io.Reader) error {
+			if err := ctx.Err(); err != nil {
+				return err
+			}
+			if header.Typeflag != tar.TypeReg {
+				return nil
+			}
+			if info := a.entrySignInfo(header.Name); info != nil {
+				if !info.zip {
+					return fmt.Errorf("unexpected file to sign directly rather than include in the zip batch: %q", header.Name)
+				}
+
+				base := filepath.Base(header.Name)
+				if _, ok := writtenNames[base]; ok {
+					return fmt.Errorf("duplicate file name in archive: %q", base)
+				}
+				writtenNames[base] = struct{}{}
+
+				w, err := zw.CreateHeader(&zip.FileHeader{
+					Name: base,
+				})
+				if err != nil {
+					return err
+				}
+				_, err = io.Copy(w, r)
+				return err
+			}
+			return nil
+		})
+	})
+}
+
+func (a *archive) repackSignedEntries(ctx context.Context) error {
+	targetPath := filepath.Join(a.workDir, a.name+".WithSignedContent")
+	if a.archiveType == zipArchive {
+		log.Printf("Repacking signed content to %q", targetPath)
+		if err := withZipOpen(a.path, func(zr *zip.ReadCloser) error {
+			return withZipCreate(targetPath, func(zw *zip.Writer) error {
+				return eachZipEntry(zr, func(f *zip.File) error {
+					if err := ctx.Err(); err != nil {
+						return err
+					}
+					return a.writeZipRepackEntry(f, zw)
+				})
+			})
+		}); err != nil {
+			return err
+		}
+		a.repackedPath = targetPath
+	} else if a.archiveMacOS {
+		log.Printf("Repacking hardened content to %q", targetPath)
+		// Open the original tar.gz for header info and to read unchanged files from.
+		if err := withTarGzOpen(a.path, func(originalTR *tar.Reader) error {
+			// Create the new tar.gz that we're assembling.
+			return withTarGzCreate(targetPath, func(outTW *tar.Writer) error {
+				// Open the zip payload we got back from the signing service.
+				return withZipOpen(a.macHardenPackPath(), func(zrc *zip.ReadCloser) error {
+					// Iterate through the original tar.gz file to populate the target.
+					return eachTarEntry(originalTR, func(hdr *tar.Header, originalR io.Reader) error {
+						if err := ctx.Err(); err != nil {
+							return err
+						}
+						return a.writeTarRepackEntry(hdr, originalR, &zrc.Reader, outTW)
+					})
+				})
+			})
+		}); err != nil {
+			return err
+		}
+		a.repackedPath = targetPath
+	}
+	return nil
+}
+
+// writeZipRepackEntry looks at one entry in the original zip and creates a corresponding entry in
+// the output zip. Reads signed entry content from the signed file on disk. If the file hasn't been
+// signed, the content is read from the original zip.
+func (a *archive) writeZipRepackEntry(original *zip.File, out *zip.Writer) error {
+	w, err := out.CreateHeader(&zip.FileHeader{
+		// Copy necessary original file metadata.
+		Name:     original.Name,
+		Method:   original.Method,
+		Comment:  original.Comment,
+		Modified: original.Modified,
+		Extra:    original.Extra,
+	})
+	if err != nil {
+		return err
+	}
+	var r io.ReadCloser
+	// If we have a signed version of this file, read from that.
+	// Otherwise, read from the original.
+	if info := a.entrySignInfo(original.Name); info != nil {
+		log.Printf("Replacing with signed version: %q", original.Name)
+		r, err = os.Open(info.fullPath)
+		if err != nil {
+			return err
+		}
+	} else {
+		r, err = original.Open()
+		if err != nil {
+			return err
+		}
+	}
+	_, err = io.Copy(w, r)
+	return cmp.Or(err, r.Close())
+}
+
+// writeTarRepackEntry looks at one entry in the original tar.gz and creates a corresponding entry
+// in the output tar.gz. Reads signed/hardened entry content from signedPack. Otherwise, the entry
+// content is copied from the original.
+func (a *archive) writeTarRepackEntry(hdr *tar.Header, original io.Reader, signedPack *zip.Reader, out *tar.Writer) error {
+	// Always start with header info from the original tar.gz even if we're going to replace the
+	// file content. This means we don't need to worry about lost metadata due to the zip
+	// round-trip.
+	newHeader := &tar.Header{
+		// Follow tar.Header documented compat guidance by copying over our selection of fields.
+		Name:     hdr.Name,
+		Linkname: hdr.Linkname,
+
+		Size:  hdr.Size,
+		Mode:  hdr.Mode,
+		Uid:   hdr.Uid,
+		Gid:   hdr.Gid,
+		Uname: hdr.Uname,
+		Gname: hdr.Gname,
+
+		ModTime:    hdr.ModTime,
+		AccessTime: hdr.AccessTime,
+		ChangeTime: hdr.ChangeTime,
+	}
+	isFile := hdr.Typeflag == tar.TypeReg
+	if info := a.entrySignInfo(hdr.Name); info != nil && isFile {
+		log.Printf("Replacing with signed version: %q", hdr.Name)
+		replacementFile, err := signedPack.Open(filepath.Base(hdr.Name))
+		if err != nil {
+			return err
+		}
+		defer replacementFile.Close()
+		// Get the file size to prepare to copy.
+		stat, err := replacementFile.Stat()
+		if err != nil {
+			return err
+		}
+		newHeader.Size = stat.Size()
+		original = replacementFile
+	}
+	if err := out.WriteHeader(newHeader); err != nil {
+		return fmt.Errorf(
+			"failed to write header for %q: %v",
+			newHeader.Name, err)
+	}
+	if isFile {
+		_, err := io.Copy(out, original)
+		if err != nil {
+			return fmt.Errorf("failed to write %q: %v", newHeader.Name, err)
+		}
+	}
+	// Call Flush to make sure our write was correct. We don't technically need to call Flush here
+	// because the next WriteHeader will confirm that we e.g. wrote the correct number of bytes.
+	// However, calling Flush ourselves lets us emit an error that mentions the bad filename
+	// (rather than the next, unrelated filename).
+	if err := out.Flush(); err != nil {
+		return fmt.Errorf("failed to flush %q: %v", newHeader.Name, err)
+	}
+	return nil
+}
+
+func (a *archive) prepareNotarize(ctx context.Context) ([]*fileToSign, error) {
+	if err := ctx.Err(); err != nil {
+		return nil, err
+	}
+
+	if !a.archiveMacOS {
+		return nil, nil
+	}
+
+	log.Printf("Creating zip containing the macOS tar.gz to notarize at %q", a.macNotarizePackPath())
+	if err := withZipCreate(a.macNotarizePackPath(), func(zw *zip.Writer) error {
+		w, err := zw.CreateHeader(&zip.FileHeader{
+			Name: a.name,
+		})
+		if err != nil {
+			return err
+		}
+		return withFileOpen(a.latestPath(), func(f *os.File) error {
+			_, err := io.Copy(w, f)
+			return err
+		})
+	}); err != nil {
+		return nil, err
+	}
+	return []*fileToSign{
+		{
+			originalPath: a.path,
+			fullPath:     a.macNotarizePackPath(),
+			authenticode: "8020", // Can't specify MacNotarize or MacAppName is not detected.
+			macAppName:   "MicrosoftGo",
+		},
+	}, nil
+}
+
+func (a *archive) unpackNotarize(ctx context.Context) error {
+	if err := ctx.Err(); err != nil {
+		return err
+	}
+
+	if !a.archiveMacOS {
+		return nil
+	}
+
+	a.notarizedPath = filepath.Join(a.workDir, a.name+".notarized")
+	log.Printf("Unpacking notarized content to %q", a.notarizedPath)
+	return withZipOpen(a.macNotarizePackPath(), func(zr *zip.ReadCloser) error {
+		return eachZipEntry(zr, func(f *zip.File) error {
+			if err := ctx.Err(); err != nil {
+				return err
+			}
+			if f.Name != a.name {
+				return fmt.Errorf("unexpected file in notarize zip: %q", f.Name)
+			}
+			return withFileCreate(a.notarizedPath, func(w *os.File) error {
+				r, err := f.Open()
+				if err != nil {
+					return err
+				}
+				_, err = io.Copy(w, r)
+				return cmp.Or(err, r.Close())
+			})
+		})
+	})
+}
+
+func (a *archive) prepareArchiveSignatures(ctx context.Context) ([]*fileToSign, error) {
+	if err := ctx.Err(); err != nil {
+		return nil, err
+	}
+	// Copy the archive file to have .sig suffix, e.g. "tar.gz" to "tar.gz.sig". The signing
+	// process sends the "tar.gz.sig" file to get a signature, then replaces the "tar.gz.sig"
+	// file's content in-place with the result. We need to preemptively make a renamed copy of the
+	// file so we end up with both the original file and sig on the machine.
+	log.Printf("Copying file for signature generation: %q -> %q", a.latestPath(), a.sigPath())
+	if err := copyFile(a.sigPath(), a.latestPath()); err != nil {
+		return nil, err
+	}
+	return []*fileToSign{
+		{
+			originalPath: a.path,
+			fullPath:     a.sigPath(),
+			authenticode: "LinuxSignManagedLanguageCompiler",
+		},
+	}, nil
+}
+
+func (a *archive) copyToDestination(ctx context.Context) error {
+	if err := ctx.Err(); err != nil {
+		return err
+	}
+	// Create destination if it doesn't exist.
+	if err := os.MkdirAll(*destinationDir, 0o777); err != nil {
+		return fmt.Errorf("failed to create destination directory: %v", err)
+	}
+
+	log.Printf("Copying finished files to destination: %q", a.latestPath())
+	if err := copyFile(filepath.Join(*destinationDir, a.name), a.latestPath()); err != nil {
+		return err
+	}
+	if err := copyFile(filepath.Join(*destinationDir, a.name+".sig"), a.sigPath()); err != nil {
+		return err
+	}
+	return nil
+}
diff --git a/eng/_util/cmd/sign/archiveutil.go b/eng/_util/cmd/sign/archiveutil.go
new file mode 100644
index 00000000000..091053752c9
--- /dev/null
+++ b/eng/_util/cmd/sign/archiveutil.go
@@ -0,0 +1,134 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"archive/tar"
+	"archive/zip"
+	"cmp"
+	"compress/gzip"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+)
+
+func eachZipEntry(r *zip.ReadCloser, f func(*zip.File) error) error {
+	for _, file := range r.File {
+		// Disallow absolute path, "..", etc.
+		if !filepath.IsLocal(file.Name) {
+			return fmt.Errorf("zip contains non-local path: %s", file.Name)
+		}
+		if err := f(file); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func eachTarEntry(r *tar.Reader, f func(*tar.Header, io.Reader) error) error {
+	for {
+		header, err := r.Next()
+		if err != nil {
+			if errors.Is(err, io.EOF) {
+				return nil
+			}
+			return err
+		}
+		// Disallow absolute path, "..", etc.
+		if !filepath.IsLocal(header.Name) {
+			return fmt.Errorf("tar contains non-local path: %s", header.Name)
+		}
+		if err := f(header, r); err != nil {
+			return err
+		}
+	}
+}
+
+func withFileOpen(path string, f func(*os.File) error) error {
+	file, err := os.Open(path)
+	if err != nil {
+		return err
+	}
+	return cmp.Or(f(file), file.Close())
+}
+
+func withZipOpen(path string, f func(*zip.ReadCloser) error) error {
+	r, err := zip.OpenReader(path)
+	if err != nil {
+		return err
+	}
+	return cmp.Or(f(r), r.Close())
+}
+
+func withTarGzOpen(path string, f func(*tar.Reader) error) error {
+	return withFileOpen(path, func(file *os.File) error {
+		gz, err := gzip.NewReader(file)
+		if err != nil {
+			return err
+		}
+		r := tar.NewReader(gz)
+		return f(r)
+	})
+}
+
+func withFileCreate(path string, f func(*os.File) error) error {
+	if err := os.MkdirAll(filepath.Dir(path), 0o777); err != nil {
+		return err
+	}
+	file, err := os.Create(path)
+	if err != nil {
+		return err
+	}
+	return cmp.Or(f(file), file.Close())
+}
+
+func withZipCreate(path string, f func(*zip.Writer) error) error {
+	return withFileCreate(path, func(file *os.File) error {
+		w := zip.NewWriter(file)
+		return cmp.Or(f(w), w.Close())
+	})
+}
+
+func withTarGzCreate(path string, f func(*tar.Writer) error) error {
+	return withFileCreate(path, func(file *os.File) error {
+		gzw, err := gzip.NewWriterLevel(file, gzip.BestCompression)
+		if err != nil {
+			return err
+		}
+		tw := tar.NewWriter(gzw)
+		return cmp.Or(f(tw), tw.Close(), gzw.Close())
+	})
+}
+
+func copyFile(dst, src string) error {
+	f, err := os.Open(src)
+	if err != nil {
+		return err
+	}
+	return cmp.Or(copyToFile(dst, f), f.Close())
+}
+
+func copyToFile(path string, r io.Reader) error {
+	if err := os.MkdirAll(filepath.Dir(path), 0o777); err != nil {
+		return err
+	}
+	f, err := os.Create(path)
+	if err != nil {
+		return err
+	}
+	_, err = io.Copy(f, r)
+	return cmp.Or(err, f.Close())
+}
+
+// matchOrPanic returns whether name matches the pattern glob, or panics if pattern is invalid.
+func matchOrPanic(pattern, name string) bool {
+	ok, err := filepath.Match(pattern, name)
+	if err != nil {
+		panic(err)
+	}
+	return ok
+}
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
new file mode 100644
index 00000000000..07c7a7bd31f
--- /dev/null
+++ b/eng/_util/cmd/sign/sign.go
@@ -0,0 +1,291 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"io"
+	"log"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/microsoft/go/_util/internal/checksum"
+)
+
+const description = `
+This command signs build artifacts using MicroBuild. It is used in the Microsoft Go build pipeline.
+Use '-n' to test the command locally.
+
+Signs in multiple passes. Some steps only apply to certain types of archives:
+
+1. Archive entries. Extracts specific entries from inside each archive, signs, and repacks.
+2. Notarize. macOS archives get a notarization ticket attached to the tar.gz.
+3. Signatures. Creates sig files for each archive.
+4. Locally creates a .sha256 file for each archive.
+
+See /eng/_util/cmd/sign/README.md for more information.
+`
+
+var (
+	filesGlob        = flag.String("files", "eng/signing/tosign/*", "Glob of Go archives to sign.")
+	destinationDir   = flag.String("o", "eng/signing/signed", "Directory to store signed files.")
+	tempDir          = flag.String("temp-dir", "eng/signing/signing-temp", "Directory to store temporary files.")
+	signingCsprojDir = flag.String("signing-csproj-dir", "eng/signing", "Directory containing Sign.csproj and related files.")
+
+	notarize = flag.Bool("notarize", false, "Notarize macOS archives. This is currently not working in the signing service.")
+	signType = flag.String("sign-type", "test", "Type of signing to perform. Options: test, real.")
+
+	timeout = flag.Duration("timeout", 0,
+		"Timeout for signing operations. Zero means no timeout. "+
+			"Any MSBuild processes launched by this tool are be manually killed. "+
+			"If set to a value lower than AzDO pipeline timeout, this helps avoid pipeline breakage when uploading MSBuild outputs.")
+	dryRun = flag.Bool("n", false, "Dry run: don't run the MSBuild signing tooling at all, even in test mode. This works on non-Windows platforms.")
+)
+
+func main() {
+	help := flag.Bool("h", false, "Print this help message.")
+
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description)
+	}
+
+	flag.Parse()
+	if *help {
+		flag.Usage()
+		return
+	}
+
+	if err := run(); err != nil {
+		log.Printf("error: %v", err)
+		os.Exit(1)
+	}
+}
+
+func run() error {
+	// A context for timeout. This timeout is mainly here to make sure child MSBuild processes are
+	// terminated. There are some ctx.Err() checks sprinkled into the Go code, but canceling
+	// quickly during the packaging/repackaging work in Go is not currently important: the Go work
+	// takes an insignificant amount of time compared to the signing service calls in MSBuild.
+	var ctx context.Context
+	if *timeout == 0 {
+		ctx = context.Background()
+	} else {
+		var cancel context.CancelFunc
+		ctx, cancel = context.WithDeadline(context.Background(), time.Now().Add(*timeout))
+		defer cancel()
+	}
+
+	archives, err := findArchives(ctx, *filesGlob)
+	if err != nil {
+		return err
+	}
+
+	log.Println("Signing individual files extracted from archives")
+
+	individualFilesToSign, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
+		return a.prepareEntriesToSign(ctx)
+	})
+	if err != nil {
+		return err
+	}
+
+	if err := sign(ctx, "1-Individual", individualFilesToSign); err != nil {
+		return err
+	}
+
+	for _, a := range archives {
+		if err := a.repackSignedEntries(ctx); err != nil {
+			return err
+		}
+	}
+
+	if *notarize {
+		log.Println("Notarizing macOS archives")
+
+		filesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
+			return a.prepareNotarize(ctx)
+		})
+		if err != nil {
+			return err
+		}
+
+		if err := sign(ctx, "2-Notarize", filesToNotarize); err != nil {
+			return err
+		}
+
+		for _, a := range archives {
+			if err := a.unpackNotarize(ctx); err != nil {
+				return err
+			}
+		}
+	} else {
+		log.Println("Skipping notarizing macOS archives")
+	}
+
+	log.Println("Creating signature files")
+
+	signatureFiles, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
+		return a.prepareArchiveSignatures(ctx)
+	})
+	if err != nil {
+		return err
+	}
+
+	if err := sign(ctx, "3-Sigs", signatureFiles); err != nil {
+		return err
+	}
+
+	log.Println("Copying finished files to destination")
+
+	for _, a := range archives {
+		if err := a.copyToDestination(ctx); err != nil {
+			return err
+		}
+	}
+
+	log.Println("Generating checksum files")
+
+	for _, a := range archives {
+		if err := checksum.WriteSHA256ChecksumFile(filepath.Join(*destinationDir, a.name)); err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func findArchives(ctx context.Context, glob string) ([]*archive, error) {
+	files, err := filepath.Glob(glob)
+	if err != nil {
+		return nil, fmt.Errorf("failed to glob files: %v", err)
+	}
+
+	archives := make([]*archive, 0, len(files))
+
+	// Check for duplicate filenames. At the end of signing, we will put all the results in the
+	// same directory (even if the sources came from different directories), so catching this
+	// early saves time.
+	//
+	// Use lowercase because we sign on a Windows machine with a case-insensitive filesystem.
+	archiveFilenames := make(map[string]string)
+
+	for _, f := range files {
+		if err := ctx.Err(); err != nil {
+			return nil, err
+		}
+		// Ignore checksum files: we always generate new ones.
+		if strings.HasSuffix(f, ".sha256") {
+			continue
+		}
+
+		filenameLower := strings.ToLower(filepath.Base(f))
+		if existingF, ok := archiveFilenames[filenameLower]; ok {
+			return nil, fmt.Errorf("duplicate archive %q, already found %q (comparing lowercase filename)", f, existingF)
+		}
+		archiveFilenames[filenameLower] = f
+
+		a, err := newArchive(f)
+		if err != nil {
+			return nil, fmt.Errorf("failed to process %q: %v", f, err)
+		}
+		archives = append(archives, a)
+	}
+
+	if len(archives) == 0 {
+		return nil, fmt.Errorf("no archives found to sign matching glob %q", *filesGlob)
+	}
+
+	return archives, nil
+}
+
+func sign(ctx context.Context, step string, files []*fileToSign) error {
+	var sb strings.Builder
+	sb.WriteString("<Project>\n")
+	sb.WriteString("  <ItemGroup>\n")
+	for _, f := range files {
+		f.WriteMSBuildItem(&sb)
+	}
+	sb.WriteString("  </ItemGroup>\n")
+	sb.WriteString("</Project>\n")
+
+	log.Printf("Signing with props file content:\n%s\n", sb.String())
+	if *dryRun {
+		log.Printf("Dry run: skipping signing.")
+		return nil
+	}
+
+	if err := os.MkdirAll(*tempDir, 0o777); err != nil {
+		return err
+	}
+	// Get an absolute path to pass to MSBuild, because our working dirs may not be the same.
+	// MSBuild in general will resolve paths relative to the csproj.
+	absTemp, err := filepath.Abs(*tempDir)
+	if err != nil {
+		return err
+	}
+	propsFilePath := filepath.Join(absTemp, "Sign"+step+".props")
+	if err := os.WriteFile(propsFilePath, []byte(sb.String()), 0o666); err != nil {
+		return err
+	}
+
+	cmd := exec.CommandContext(
+		ctx,
+		"dotnet", "build", "Sign.csproj",
+		"/p:SignFilesDir="+absTemp,
+		"/p:FilesToSignPropsFile="+propsFilePath,
+		"/t:AfterBuild",
+		"/p:SignType="+*signType,
+		"/bl:"+filepath.Join(absTemp, "Sign"+step+".binlog"),
+		"/v:n",
+	)
+	cmd.Dir = *signingCsprojDir
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	log.Printf("Running: %v", cmd)
+	return cmd.Run()
+}
+
+type fileToSign struct {
+	originalPath string
+	fullPath     string
+	authenticode string
+	// This file is part of a zip payload, e.g. for macOS hardening.
+	zip bool
+	// macAppName for notarization.
+	macAppName string
+}
+
+func (f *fileToSign) WriteMSBuildItem(w io.Writer) {
+	fmt.Fprintf(w, "    <FilesToSign")
+	fmt.Fprintf(w, ` Include="%v" Authenticode="%v"`, f.fullPath, f.authenticode)
+	if f.zip {
+		fmt.Fprintf(w, ` Zip="true"`)
+	}
+	if f.macAppName != "" {
+		fmt.Fprintf(w, ` MacAppName="%v"`, f.macAppName)
+	}
+	fmt.Fprintf(w, " />\n")
+}
+
+// flatMapSlice sequentially maps each element of es to a slice using f and flattens the resulting
+// slices. If any call to f returns an error, the error is returned immediately.
+func flatMapSlice[E, R any](es []E, f func(E) ([]R, error)) ([]R, error) {
+	var results []R
+	for _, e := range es {
+		rs, err := f(e)
+		if err != nil {
+			return nil, err
+		}
+		results = append(results, rs...)
+	}
+	return results, nil
+}
diff --git a/eng/_util/cmd/write-checksum/write-checksum.go b/eng/_util/cmd/write-checksum/write-checksum.go
index 191ebd0eae6..abd08ee68ff 100644
--- a/eng/_util/cmd/write-checksum/write-checksum.go
+++ b/eng/_util/cmd/write-checksum/write-checksum.go
@@ -5,14 +5,11 @@
 package main
 
 import (
-	"crypto/sha256"
-	"encoding/hex"
 	"flag"
 	"fmt"
-	"io"
 	"log"
-	"os"
-	"path/filepath"
+
+	"github.com/microsoft/go/_util/internal/checksum"
 )
 
 const description = `
@@ -42,30 +39,8 @@ func main() {
 		log.Fatal("No files specified.")
 	}
 	for _, m := range flag.Args() {
-		if err := writeSHA256ChecksumFile(m); err != nil {
+		if err := checksum.WriteSHA256ChecksumFile(m); err != nil {
 			log.Fatal(err)
 		}
 	}
 }
-
-func writeSHA256ChecksumFile(path string) error {
-	file, err := os.Open(path)
-	if err != nil {
-		return err
-	}
-	defer file.Close()
-	checksum := sha256.New()
-	if _, err = io.Copy(checksum, file); err != nil {
-		return err
-	}
-	// Write the checksum in a format that "sha256sum -c" can work with. Use the base path of the
-	// tarball (not full path, not relative path) because then "sha256sum -c" automatically works
-	// when the file and the checksum file are downloaded to the same directory.
-	content := fmt.Sprintf("%v  %v\n", hex.EncodeToString(checksum.Sum(nil)), filepath.Base(path))
-	outputPath := path + ".sha256"
-	if err := os.WriteFile(outputPath, []byte(content), 0o666); err != nil {
-		return err
-	}
-	fmt.Printf("Wrote checksum file %q with content: %v", outputPath, content)
-	return nil
-}
diff --git a/eng/_util/internal/checksum/checksum.go b/eng/_util/internal/checksum/checksum.go
new file mode 100644
index 00000000000..c12d2d0a1d9
--- /dev/null
+++ b/eng/_util/internal/checksum/checksum.go
@@ -0,0 +1,32 @@
+package checksum
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+)
+
+func WriteSHA256ChecksumFile(path string) error {
+	file, err := os.Open(path)
+	if err != nil {
+		return err
+	}
+	defer file.Close()
+	checksum := sha256.New()
+	if _, err = io.Copy(checksum, file); err != nil {
+		return err
+	}
+	// Write the checksum in a format that "sha256sum -c" can work with. Use the base path of the
+	// tarball (not full path, not relative path) because then "sha256sum -c" automatically works
+	// when the file and the checksum file are downloaded to the same directory.
+	content := fmt.Sprintf("%v  %v\n", hex.EncodeToString(checksum.Sum(nil)), filepath.Base(path))
+	outputPath := path + ".sha256"
+	if err := os.WriteFile(outputPath, []byte(content), 0o666); err != nil {
+		return err
+	}
+	fmt.Printf("Wrote checksum file %q with content: %v", outputPath, content)
+	return nil
+}
diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index 98d4809a802..8f558e8d892 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -33,6 +33,11 @@ parameters:
     type: string
     default: nil
 
+  - name: signExistingRunID
+    displayName: 'For debugging signing: skip building, and instead sign the artifacts from an existing run. Leave "nil" otherwise.'
+    type: string
+    default: 'nil'
+
 variables:
   - template: variables/pool-providers.yml
   # MicroBuild configuration.
@@ -71,6 +76,7 @@ extends:
           buildandpack: true
           official: true
           sign: true
+          signExistingRunID: ${{ parameters.signExistingRunID }}
           createSourceArchive: true
           createSymbols: true
           publish: true
diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index f5d29d3ede2..84943fc740b 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -9,6 +9,8 @@ parameters:
   builders: []
   # If true, include a signing stage+job that depends on all 'buildandpack' builder jobs finishing.
   sign: false
+  # If changed to specify an existing pipeline run, skip build and sign the existing run.
+  signExistingRunID: 'nil'
   # If true, publish build artifacts to blob storage.
   publish: false
   # If true, publish artifacts to the public using Release Studio integration.
@@ -25,21 +27,22 @@ parameters:
 
 stages:
   - ${{ if eq(parameters.publishExistingRunID, 'nil') }}:
-    - ${{ each builder in parameters.builders }}:
-      - template: pool.yml
-        parameters:
-          inner:
-            template: run-stage.yml
-            parameters:
-              builder: ${{ builder }}
-              createSourceArchive: ${{ parameters.createSourceArchive }}
-              releaseVersion: ${{ parameters.releaseVersion }}
-              official: ${{ parameters.official }}
-              createSymbols: ${{ parameters.createSymbols }}
-              # Attempt to retry the build on Windows to mitigate flakiness:
-              # "Access Denied" during EXE copying and general flakiness during tests.
-              ${{ if eq(builder.os, 'windows') }}:
-                retryAttempts: [1, 2, 3, 4, "FINAL"]
+    - ${{ if eq(parameters.signExistingRunID, 'nil') }}:
+      - ${{ each builder in parameters.builders }}:
+        - template: pool.yml
+          parameters:
+            inner:
+              template: run-stage.yml
+              parameters:
+                builder: ${{ builder }}
+                createSourceArchive: ${{ parameters.createSourceArchive }}
+                releaseVersion: ${{ parameters.releaseVersion }}
+                official: ${{ parameters.official }}
+                createSymbols: ${{ parameters.createSymbols }}
+                # Attempt to retry the build on Windows to mitigate flakiness:
+                # "Access Denied" during EXE copying and general flakiness during tests.
+                ${{ if eq(builder.os, 'windows') }}:
+                  retryAttempts: [1, 2, 3, 4, "FINAL"]
 
     - ${{ if eq(parameters.sign, true) }}:
       - template: pool.yml
@@ -55,6 +58,7 @@ stages:
                 - ${{ each builder in parameters.builders }}:
                   - ${{ if eq(builder.config, 'buildandpack') }}:
                     - ${{ builder }}
+              signExistingRunID: ${{ parameters.signExistingRunID }}
 
   - ${{ if eq(parameters.publish, true) }}:
     - ${{ if and(not(startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/')), eq(parameters.publishReleaseStudio, true)) }}:
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index c202248f02f..98253e5171a 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -31,6 +31,9 @@ parameters:
   - name: sign
     type: boolean
     default: false
+  - name: signExistingRunID
+    type: string
+    default: 'nil'
   - name: publish
     type: boolean
     default: false
@@ -57,6 +60,7 @@ stages:
       jobsParameters:
         official: ${{ parameters.official }}
         sign: ${{ parameters.sign }}
+        signExistingRunID: ${{ parameters.signExistingRunID }}
         publish: ${{ parameters.publish }}
         publishReleaseStudio: ${{ parameters.publishReleaseStudio }}
         publishExistingRunID: ${{ parameters.publishExistingRunID }}
@@ -71,6 +75,8 @@ stages:
           - { os: windows, arch: amd64, config: buildandpack }
           - { os: linux, arch: arm, hostArch: amd64, config: buildandpack }
           - { os: linux, arch: arm64, hostArch: amd64, config: buildandpack }
+          - { os: darwin, arch: amd64, config: buildandpack }
+          - { os: darwin, arch: arm64, hostArch: amd64, config: buildandpack }
           - ${{ if parameters.includeArm64Host }}:
             - { os: linux, arch: arm64, config: buildandpack }
         - ${{ if parameters.innerloop }}:
diff --git a/eng/pipeline/stages/pool-1.yml b/eng/pipeline/stages/pool-1.yml
index edb92053c6e..a53b4a72498 100644
--- a/eng/pipeline/stages/pool-1.yml
+++ b/eng/pipeline/stages/pool-1.yml
@@ -22,7 +22,9 @@ stages:
     parameters:
       ${{ insert }}: ${{ parameters }}
 
-      ${{ if eq(parameters.hostArch, 'arm64') }}:
+      ${{ if eq(parameters.os, 'darwin') }}:
+        name: Azure Pipelines # use the default AzDo hosted pool
+      ${{ elseif and(eq(parameters.hostArch, 'arm64'), eq(parameters.os, 'linux')) }}:
         name: Docker-Linux-Arm-Internal
       ${{ else }}:
         ${{ if parameters.public }}:
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 5a59423e0ce..1509f1194d5 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -50,3 +50,8 @@ stages:
             ${{ else }}:
               demands: ImageOverride -equals 1es-ubuntu-2004
               os: linux
+
+        ${{ elseif eq(parameters.os, 'darwin') }}:
+          # https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml#software
+          vmImage: 'macos-14'
+          os: macOs
diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index 73e1e046a58..2d50a05f009 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -6,15 +6,29 @@
 # publishes the signed files and signatures into a consolidated pipeline artifact.
 
 parameters:
+  - name: builder
+    type: object
+  - name: official
+    type: boolean
+  - name: pool
+    type: object
+
   # [] of { id, os, arch, config, distro?, experiment?, broken? }
-  builders: []
+  - name: builders
+    type: object
+
+  - name: signExistingRunID
+    type: string
 
 stages:
   - stage: Sign
-    # Depend on all build stages that produced artifacts that need signing.
-    dependsOn:
-      - ${{ each builder in parameters.builders }}:
-        - ${{ builder.id }}
+    ${{ if eq(parameters.signExistingRunID, 'nil') }}:
+      dependsOn:
+        # Depend on all build stages that produced artifacts that need signing.
+        - ${{ each builder in parameters.builders }}:
+          - ${{ builder.id }}
+    ${{ else }}:
+      dependsOn: []
     jobs:
       - ${{ if and(ne(variables['System.TeamProject'], 'public'), ne(variables['Build.Reason'], 'PullRequest')) }}:
         - job: Sign
@@ -22,6 +36,9 @@ stages:
           workspace:
             clean: all
 
+          # Give the sign task leeway to finish up after hitting its own timeout.
+          timeoutInMinutes: 80
+
           templateContext:
             mb:
               signing:
@@ -32,46 +49,46 @@ stages:
             outputs:
               # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/outputs
               - output: pipelineArtifact
-                path: $(Build.StagingDirectory)/ToSign
+                path: 'eng\signing\signed'
                 artifact: Binaries Signed
+
+              - output: pipelineArtifact
+                path: 'eng\signing\signing-temp'
+                artifact: Signing temp directory $(System.JobAttempt)
+                condition: always()
+
               - output: pipelineArtifact
                 path: 'eng\signing'
-                artifact: Signing diagnosis directory
+                artifact: Signing diagnosis directory $(System.JobAttempt)
+                condition: always()
 
           steps:
             - template: ../steps/checkout-windows-task.yml
 
             - ${{ each builder in parameters.builders }}:
-              - download: current
-                artifact: Binaries ${{ builder.id }}
-                # Filter out manifests added by 1ES pipeline template.
-                patterns: '!_manifest/**'
-                displayName: 'Download: Binaries ${{ builder.id }}'
-
-              - powershell: |
-                  $flatDir = "$(Build.StagingDirectory)/ToSign"
-                  New-Item $flatDir -ItemType Directory -ErrorAction Ignore
-
-                  Get-ChildItem -Recurse -File -Path @(
-                    'Binaries ${{ builder.id }}'
-                  ) | %{
-                    if (Test-Path "$flatDir\$($_.Name)") {
-                      throw "Duplicate filename, unable to flatten: $($_.FullName)"
-                    }
-                    Copy-Item $_.FullName $flatDir
-                  }
-                displayName: 'Copy to flat dir: ${{ builder.id }}'
-                workingDirectory: '$(Pipeline.Workspace)'
+              - ${{ if eq(parameters.signExistingRunID, 'nil') }}:
+                - download: current
+                  artifact: Binaries ${{ builder.id }}
+                  # Filter out manifests added by 1ES pipeline template.
+                  patterns: '!_manifest/**'
+                  displayName: 'Download: Binaries ${{ builder.id }}'
+              - ${{ else }}:
+                - task: DownloadPipelineArtifact@2
+                  displayName: 'Download: Binaries ${{ builder.id }} (Specific)'
+                  inputs:
+                    buildType: specific
+                    project: $(System.TeamProject)
+                    definition: $(System.DefinitionId)
+                    runVersion: 'specific'
+                    runId: ${{ parameters.signExistingRunID }}
+                    artifact: Binaries ${{ builder.id }}
+                    # Filter out manifests added by 1ES pipeline template.
+                    patterns: '!_manifest/**'
+                    targetPath: '$(Pipeline.Workspace)/Binaries ${{ builder.id }}'
 
-            - task: DotNetCoreCLI@2
-              displayName: 'Sign Files'
-              inputs:
-                command: custom
-                projects: '$(Build.SourcesDirectory)/eng/signing/Sign.proj'
-                custom: build
-                arguments: >-
-                  /t:AfterBuild
-                  /p:SignFilesDir=$(Build.StagingDirectory)/ToSign
-                  /p:SignType=$(SignType)
-                  /bl:eng/signing/SignFiles.binlog
-                  /v:n
+            - pwsh: |
+                eng/run.ps1 sign `
+                  -files '$(Pipeline.Workspace)/Binaries */*' `
+                  -sign-type '$(SignType)' `
+                  -timeout 60m
+              displayName: Sign Files
diff --git a/eng/signing/.gitignore b/eng/signing/.gitignore
index c66ddb25baa..a784cf86ebb 100644
--- a/eng/signing/.gitignore
+++ b/eng/signing/.gitignore
@@ -9,3 +9,4 @@ obj/
 signing-log/
 signing-temp/
 tosign/
+signed/
diff --git a/eng/signing/NuGet.config b/eng/signing/NuGet.config
index 080b3fce698..8f32de83184 100644
--- a/eng/signing/NuGet.config
+++ b/eng/signing/NuGet.config
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <!-- Copyright (c) Microsoft Corporation. Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. -->
 <!--
-  This NuGet.config specifies the sources used for Sign.proj inside dnceng.
+  This NuGet.config specifies the sources used for Sign.csproj inside dnceng.
 -->
 <configuration>
   <packageSources>
diff --git a/eng/signing/README.md b/eng/signing/README.md
index c8d8879550d..2ffc00ab368 100644
--- a/eng/signing/README.md
+++ b/eng/signing/README.md
@@ -1,23 +1,8 @@
-# Signing infrastructure
-
-This directory contains the infrastructure used by Microsoft to sign the Go
-binaries in internal builds. It uses
-[MicroBuild Signing](https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/650/MicroBuild-Signing)
-(internal Microsoft wiki link).
-
-To see it in action, go to [`/eng/pipeline/README.md`](/eng/pipeline/README.md)
-and follow the link for `microsoft-go`.
-
-This infrastructure runs on Windows only.
-
-## Running locally
-
-1. Create the directory `tosign` and add `.tar.gz` and `.zip` artifacts.
-1. Install the plugin:
-   1. Download the latest https://devdiv.visualstudio.com/DevDiv/_artifacts/feed/MicroBuildToolset/NuGet/MicroBuild.Plugins.Signing
-   1. Extract it to `%userprofile%\.nuget\microbuild.plugins.signing\1.1.900`.
-      * Optionally make the last dir match the version of the package. It will be discovered dynamically, as a plugin, whether or not it matches.
-1. Run a "test sign" build locally to exercise the tooling:
-   ```
-   dotnet build /p:SignFilesDir=tosign /p:SignType=test /p:MicroBuild_SigningEnabled=true /bl
-   ```
+# MSBuild signing infrastructure
+
+This directory contains a component of the Microsoft Go signing infrastructure written using MSBuild.
+`Sign.csproj` is the interface between the Go signing command [`/eng/_util/cmd/sign`][sign] and MicroBuild, an internal Microsoft toolset written to primarily support .NET projects that use MSBuild.
+
+See [`/eng/_util/cmd/sign`][sign] for more information about the signing infrastructure.
+
+[sign]: /eng/_util/cmd/sign
\ No newline at end of file
diff --git a/eng/signing/Sign.csproj b/eng/signing/Sign.csproj
new file mode 100644
index 00000000000..2cca241e2bc
--- /dev/null
+++ b/eng/signing/Sign.csproj
@@ -0,0 +1,28 @@
+<!-- Copyright (c) Microsoft Corporation. Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. -->
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <!-- Minimal info for '.csproj' to work. -->
+  <PropertyGroup>
+    <TargetFramework>net7.0</TargetFramework>
+  </PropertyGroup>
+
+  <!-- https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/650/MicroBuild-Signing -->
+  <ItemGroup>
+    <PackageReference Include="Microsoft.VisualStudioEng.MicroBuild.Core" Version="1.0.0" />
+  </ItemGroup>
+
+  <!-- Import a props file containing a list of items that specify the files to sign. -->
+  <Import Project="$(FilesToSignPropsFile)" Condition="'$(FilesToSignPropsFile)' != ''" />
+
+  <Target Name="PrepSign" BeforeTargets="AfterBuild">
+    <PropertyGroup Condition="'$(SignFilesDir)' != ''">
+      <!-- MicroBuild expects the files to be inside OutDir. -->
+      <OutDir>$([MSBuild]::NormalizeDirectory('$(SignFilesDir)'))</OutDir>
+    </PropertyGroup>
+  </Target>
+
+  <Target Name="SignFiles" BeforeTargets="PrepSign">
+    <Error Text="Assertion failed: this target should not exist! Is the signing plugin installed? When its target file is loaded, it should overwrite this SignFiles target." />
+  </Target>
+
+</Project>
diff --git a/eng/signing/Sign.proj b/eng/signing/Sign.proj
deleted file mode 100644
index 5f8ba9c8816..00000000000
--- a/eng/signing/Sign.proj
+++ /dev/null
@@ -1,93 +0,0 @@
-<!-- Copyright (c) Microsoft Corporation. Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. -->
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <!-- Minimal stubs for '.proj' to work. -->
-  <PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
-  </PropertyGroup>
-  <Target Name="CreateManifestResourceNames" />
-  <Target Name="CoreCompile" />
-
-  <!-- https://dev.azure.com/devdiv/DevDiv/_wiki/wikis/DevDiv.wiki/650/MicroBuild-Signing -->
-  <ItemGroup>
-    <PackageReference Include="Microsoft.VisualStudioEng.MicroBuild.Core" Version="1.0.0" />
-  </ItemGroup>
-
-  <Target Name="PrepSign" BeforeTargets="AfterBuild">
-    <Error Condition="'$(SignType)' != 'real' AND '$(SignType)' != 'test'" Text="Unexpected SignType '$(SignType)'" />
-    <PropertyGroup>
-      <IsTestSign>true</IsTestSign>
-      <IsTestSign Condition="'$(SignType)' == 'real'">false</IsTestSign>
-    </PropertyGroup>
-
-    <PropertyGroup>
-      <OutDir>$([MSBuild]::NormalizeDirectory('$(SignFilesDir)'))</OutDir>
-    </PropertyGroup>
-
-    <Error Condition="'$(SignFilesDir)' == ''" Text="'SignFilesDir' required." />
-    <Message Text="Signing files in $(SignFilesDir)." Importance="high" />
-
-    <ItemGroup>
-      <LinuxGoFile Include="$([MSBuild]::NormalizeDirectory('$(SignFilesDir)'))**/go*.tar.gz">
-        <Authenticode>LinuxSignManagedLanguageCompiler</Authenticode>
-      </LinuxGoFile>
-
-      <LinuxGoSigFile Include="@(LinuxGoFile -> '%(Identity).sig')" />
-      <FilesToSign Include="@(LinuxGoSigFile)" />
-
-      <GoZipFile Include="$([MSBuild]::NormalizeDirectory('$(SignFilesDir)'))**/go*.zip" />
-      <GoZipFile ExtractedDir="$([MSBuild]::NormalizeDirectory('%(Identity).extracted'))" />
-
-      <FileExtensionSignInfo Include=".sig" CertificateName="LinuxSignManagedLanguageCompiler" />
-    </ItemGroup>
-
-    <!-- Prepare files that we want to sign. -->
-
-    <!--
-      Copy the "tar.gz" file to "tar.gz.sig". The signing process sends the "tar.gz.sig" file to get
-      a signature, then replaces the "tar.gz.sig" file's content in-place with the result. We need
-      to preemptively make a renamed copy of the file so we end up with both the original file and
-      sig on the machine.
-    -->
-    <Copy SourceFiles="@(LinuxGoFile)" DestinationFiles="@(LinuxGoSigFile)" />
-    <!--
-      SignTool notices zip containers and tries to extract them and update them in-place. The way it
-      does this is very slow (30 minutes), so unpack/repack ourselves, instead.
-    -->
-    <Unzip
-      SourceFiles="%(GoZipFile.Identity)"
-      DestinationFolder="%(GoZipFile.ExtractedDir)" />
-    <ItemGroup>
-      <FilesToSign Include="%(GoZipFile.ExtractedDir)**\*.exe">
-        <Authenticode>Microsoft400</Authenticode>
-      </FilesToSign>
-      <!--
-        Remove test data: some files (especially zip files) are set up in very particular ways that
-        SignTool doesn't reconstruct properly after recursing into the container. This causes "go
-        tool dist test" to fail when run on a signed build.
-      -->
-      <FilesToSign Remove="%(GoZipFile.ExtractedDir)**\testdata\**" />
-    </ItemGroup>
-  </Target>
-
-  <Target Name="AfterSign" AfterTargets="SignFiles">
-    <!--
-      Now that the contents are signed (in place), re-pack the zip file(s). Also generate a checksum
-      file for each one: changing the zip's contents means we have to wait until now to do this.
-    -->
-    <ZipDirectory
-      SourceDirectory="%(GoZipFile.ExtractedDir)"
-      DestinationFile="%(GoZipFile.Identity)"
-      Overwrite="true" />
-
-    <Exec Command="pwsh ..\run.ps1 write-checksum @(GoZipFile, ' ')" />
-
-    <!-- Remove the large extracted dir so the build job doesn't upload it. -->
-    <RemoveDir Directories="@(GoZipFile -> '%(ExtractedDir)')" />
-  </Target>
-
-  <Target Name="SignFiles" BeforeTargets="PrepSign">
-    <Error Text="Assertion failed: this target should not exist! Is the signing plugin installed? When its target file is loaded, it should overwrite this SignFiles target." />
-  </Target>
-
-</Project>

From cc3439cdf77c83c53fd1e97d5b5b5dfd85e9bc05 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 8 Nov 2024 09:08:43 -0800
Subject: [PATCH 091/887] Bump golang.org/x/sys from 0.26.0 to 0.27.0 in
 /eng/_util (#1396)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/sys/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 3215f0670b7..1908c85092a 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.21
 
 require (
 	github.com/microsoft/go-infra v0.0.5
-	golang.org/x/sys v0.26.0
+	golang.org/x/sys v0.27.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index f318609f8b8..428da6543f9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -79,8 +79,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo=
-golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s=
+golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From 32773683ac035db956615e0da6d966eb86802819 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Nov 2024 10:10:50 +0000
Subject: [PATCH 092/887] Bump github/codeql-action from 3.27.0 to 3.27.1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.0 to 3.27.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/662472033e021d55d94146f66f6058822b0b39fd...4f3212b61783c3c68e8309a0f18a699764811cda)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1e6c5589053..f19fff75ef5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0
+        uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
         with:
           category: /language:go

From 1ef48294bed4ddc7c9a081a9e1d377b7b75778a9 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 12 Nov 2024 12:53:21 -0800
Subject: [PATCH 093/887] Add darwin (macOS) innerloop devscript builder

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 98253e5171a..cd7a7dfd0ab 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -80,6 +80,7 @@ stages:
           - ${{ if parameters.includeArm64Host }}:
             - { os: linux, arch: arm64, config: buildandpack }
         - ${{ if parameters.innerloop }}:
+          - { os: darwin, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }

From 6e18c22f2558d707a03b8216b3ff56e7c6baf505 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 13 Nov 2024 10:40:15 +0000
Subject: [PATCH 094/887] Bump github/codeql-action from 3.27.1 to 3.27.3

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.1 to 3.27.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/4f3212b61783c3c68e8309a0f18a699764811cda...396bb3e45325a47dd9ef434068033c6d5bb0d11a)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f19fff75ef5..4492648243e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/init@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/autobuild@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/analyze@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
         with:
           category: /language:go

From 8fbc0e2c7bcf70e686c2875c666324a76377fd3e Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 14 Nov 2024 16:53:16 +0000
Subject: [PATCH 095/887] add:crypto dsa support and generate patch files

---
 patches/0015-Add-crypto-dsa-support.patch     |  37 +++++
 patches/0016-Vendor-crypto-dsa-backends.patch | 149 ++++++++++++++++++
 2 files changed, 186 insertions(+)
 create mode 100644 patches/0015-Add-crypto-dsa-support.patch
 create mode 100644 patches/0016-Vendor-crypto-dsa-backends.patch

diff --git a/patches/0015-Add-crypto-dsa-support.patch b/patches/0015-Add-crypto-dsa-support.patch
new file mode 100644
index 00000000000..bc39e97c717
--- /dev/null
+++ b/patches/0015-Add-crypto-dsa-support.patch
@@ -0,0 +1,37 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: mertakman <mertakman2012@gmail.com>
+Date: Thu, 14 Nov 2024 13:32:30 +0000
+Subject: [PATCH] Add crypto dsa support
+
+---
+ src/go.mod | 2 +-
+ src/go.sum | 4 ++--
+ 2 files changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/src/go.mod b/src/go.mod
+index 39d84e4165d654..8a95b6f65c63ef 100644
+--- a/src/go.mod
++++ b/src/go.mod
+@@ -4,7 +4,7 @@ go 1.24
+ 
+ require (
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
+-	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
++	github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
+ 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
+ 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
+ )
+diff --git a/src/go.sum b/src/go.sum
+index 116a769b257e34..54c859b46edd1c 100644
+--- a/src/go.sum
++++ b/src/go.sum
+@@ -1,7 +1,7 @@
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
+-github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
+-github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d h1:UKPx/2ug3daetm1rPOKyEHovWbh3hekPK8p1wygTcOI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
+ golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
+ golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0016-Vendor-crypto-dsa-backends.patch b/patches/0016-Vendor-crypto-dsa-backends.patch
new file mode 100644
index 00000000000..335b285d67e
--- /dev/null
+++ b/patches/0016-Vendor-crypto-dsa-backends.patch
@@ -0,0 +1,149 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: mertakman <mertakman2012@gmail.com>
+Date: Thu, 14 Nov 2024 13:32:53 +0000
+Subject: [PATCH] Vendor crypto dsa backends
+
+---
+ .../microsoft/go-crypto-winnative/cng/aes.go     |  4 ++--
+ .../microsoft/go-crypto-winnative/cng/des.go     |  7 +++----
+ .../microsoft/go-crypto-winnative/cng/hash.go    | 16 +++-------------
+ .../microsoft/go-crypto-winnative/cng/hkdf.go    | 13 +++++++++----
+ src/vendor/modules.txt                           |  2 +-
+ 5 files changed, 18 insertions(+), 24 deletions(-)
+
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
+index caac632894556e..097a0fc77f0adb 100644
+--- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
+@@ -7,6 +7,7 @@
+ package cng
+ 
+ import (
++	"bytes"
+ 	"crypto/cipher"
+ 	"errors"
+ 	"runtime"
+@@ -28,8 +29,7 @@ func NewAESCipher(key []byte) (cipher.Block, error) {
+ 	if err != nil {
+ 		return nil, err
+ 	}
+-	c := &aesCipher{kh: kh, key: make([]byte, len(key))}
+-	copy(c.key, key)
++	c := &aesCipher{kh: kh, key: bytes.Clone(key)}
+ 	runtime.SetFinalizer(c, (*aesCipher).finalize)
+ 	return c, nil
+ }
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
+index b0784affba0aa4..de3f05b84f1d82 100644
+--- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
+@@ -7,6 +7,7 @@
+ package cng
+ 
+ import (
++	"bytes"
+ 	"crypto/cipher"
+ 	"runtime"
+ 
+@@ -27,8 +28,7 @@ func NewDESCipher(key []byte) (cipher.Block, error) {
+ 	if err != nil {
+ 		return nil, err
+ 	}
+-	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: make([]byte, len(key))}
+-	copy(c.key, key)
++	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: bytes.Clone(key)}
+ 	runtime.SetFinalizer(c, (*desCipher).finalize)
+ 	return c, nil
+ }
+@@ -38,8 +38,7 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
+ 	if err != nil {
+ 		return nil, err
+ 	}
+-	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: make([]byte, len(key))}
+-	copy(c.key, key)
++	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: bytes.Clone(key)}
+ 	runtime.SetFinalizer(c, (*desCipher).finalize)
+ 	return c, nil
+ }
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
+index c4f01e17dd4ca1..87b1c95dc7f911 100644
+--- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
+@@ -7,6 +7,7 @@
+ package cng
+ 
+ import (
++	"bytes"
+ 	"crypto"
+ 	"hash"
+ 	"runtime"
+@@ -194,12 +195,7 @@ func newHashX(id string, flag bcrypt.AlgorithmProviderFlags, key []byte) *hashX
+ 	if err != nil {
+ 		panic(err)
+ 	}
+-	h := new(hashX)
+-	h.alg = alg
+-	if len(key) > 0 {
+-		h.key = make([]byte, len(key))
+-		copy(h.key, key)
+-	}
++	h := &hashX{alg: alg, key: bytes.Clone(key)}
+ 	// Don't allocate hx.buf nor call bcrypt.CreateHash yet,
+ 	// which would be wasteful if the caller only wants to know
+ 	// the hash type. This is a common pattern in this package,
+@@ -227,13 +223,7 @@ func (h *hashX) withCtx(fn func(ctx bcrypt.HASH_HANDLE) error) error {
+ }
+ 
+ func (h *hashX) Clone() (hash.Hash, error) {
+-	h2 := &hashX{
+-		alg: h.alg,
+-	}
+-	if h.key != nil {
+-		h2.key = make([]byte, len(h.key))
+-		copy(h2.key, h.key)
+-	}
++	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
+ 	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
+ 		return bcrypt.DuplicateHash(ctx, &h2._ctx, nil, 0)
+ 	})
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
+index 655926ef635224..5338fb5c7b187c 100644
+--- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
+@@ -156,14 +156,19 @@ func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
+ 		return nil, errors.New("cng: unknown key data blob version")
+ 	}
+ 	// KEY_DATA_BLOB_VERSION1 format is:
+-	// cbHash uint32 // Big-endian
+-	// hashName [cbHash]byte
++	// cbHashName uint32 // Big-endian
++	// pHashName [cbHash]byte
+ 	// key []byte // Rest of the blob
+ 	if len(blob) < 4 {
+ 		return nil, errors.New("cng: exported key is corrupted")
+ 	}
+-	hashLength := binary.BigEndian.Uint32(blob[:])
+-	return blob[4+hashLength:], nil
++	cbHashName := binary.BigEndian.Uint32(blob)
++	blob = blob[4:]
++	if len(blob) < int(cbHashName) {
++		return nil, errors.New("cng: exported key is corrupted")
++	}
++	// Skip pHashName.
++	return blob[cbHashName:], nil
+ }
+ 
+ func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
+diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
+index be1319fc942882..7c9bf41ea0bc87 100644
+--- a/src/vendor/modules.txt
++++ b/src/vendor/modules.txt
+@@ -2,7 +2,7 @@
+ ## explicit; go 1.22
+ github.com/golang-fips/openssl/v2
+ github.com/golang-fips/openssl/v2/bbig
+-# github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
++# github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
+ ## explicit; go 1.22
+ github.com/microsoft/go-crypto-winnative/cng
+ github.com/microsoft/go-crypto-winnative/cng/bbig

From 1673f90fcd3a8ac92ebbcd058564969269e82eac Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 15 Nov 2024 10:48:49 -0800
Subject: [PATCH 096/887] Use Microsoft Go as stage 0 (#1400)

* Use Microsoft Go as stage 0

* For build, unset GOROOT if explicitly set
---
 eng/_util/cmd/build/build.go          |  11 +
 eng/_util/go-install.ps1              | 899 ++++++++++++++++++++++++++
 eng/_util/go.mod                      |   3 +-
 eng/_util/go.sum                      |   2 +
 eng/_util/tools/installscript_test.go |  21 +
 eng/_util/tools/tools.go              |  11 +
 eng/pipeline/stages/run-stage.yml     |  19 +-
 eng/run.ps1                           |  25 +-
 eng/utilities.ps1                     | 101 +--
 9 files changed, 988 insertions(+), 104 deletions(-)
 create mode 100644 eng/_util/go-install.ps1
 create mode 100644 eng/_util/tools/installscript_test.go
 create mode 100644 eng/_util/tools/tools.go

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 03d39428e6a..e87ab876093 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -138,6 +138,17 @@ func build(o *options) error {
 	}
 	fmt.Printf("---- Target platform: %v_%v\n", targetOS, targetArch)
 
+	// Setting GOROOT explicitly in the environment has not been necessary since Go 1.9
+	// (https://go.dev/doc/go1.9#goroot), but a dev or build machine may still have it set. It
+	// interferes with attempts to run the built Go (such as when building the race runtime), so
+	// remove the explicit GOROOT if set.
+	if explicitRoot, ok := os.LookupEnv("GOROOT"); ok {
+		fmt.Printf("---- Removing explicit GOROOT from environment: %v\n", explicitRoot)
+		if err := os.Unsetenv("GOROOT"); err != nil {
+			return err
+		}
+	}
+
 	// The upstream build scripts in {repo-root}/src require your working directory to be src, or
 	// they instantly fail. Change the current process dir so that we can run them.
 	if err := os.Chdir("go/src"); err != nil {
diff --git a/eng/_util/go-install.ps1 b/eng/_util/go-install.ps1
new file mode 100644
index 00000000000..29cc7fc9a13
--- /dev/null
+++ b/eng/_util/go-install.ps1
@@ -0,0 +1,899 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
+<#
+.SYNOPSIS
+    Installs Microsoft Go
+.DESCRIPTION
+    Installs the Microsoft Go toolset.
+
+    Note that the intended use of this script is for Continuous Integration (CI) scenarios, where:
+    - The toolset needs to be installed without user interaction and without admin rights.
+    - The toolset installation doesn't need to persist across multiple CI runs.
+    Visit https://github.com/microsoft/go for a list of other ways to install Microsoft Go.
+
+.PARAMETER Version
+    Default: Latest
+    Download the specified version. Supports some aliases. Possible values:
+    - Latest - the most recent major version.
+    - Previous - the second most recent major version.
+    - 2-part version in format go1.A - represents a specific major version.
+          examples: go1.18, go1.23
+    - 3-part version in format go1.A.B - latest revision of a specific release.
+          examples: go1.18.0, go1.23.1
+    - 4-part version in format go1.A.B-C - a specific revision of Microsoft Go, immutable.
+          examples: go1.18.0-1, go1.23.1-3
+    Microsoft Go doesn't publish prereleases, so they are not available.
+.PARAMETER InstallDir
+    Path to where to install Microsoft Go. Note that if a directory is given, GOROOT is placed
+    directly in that directory.
+    Default: <auto> - a folder automatically selected inside LocalApplicationData as evaluated by PowerShell.
+    Example auto on Windows: C:\Users\myself\AppData\Local\microsoft-go\<version>
+    Example auto on Linux: /home/myself/.local/share/microsoft-go/<version>
+    If OS or Architecture are not <auto>, the path includes OS and Architecture. This avoids
+    overlapping installations but still allows for a shorter path for ordinary situations.
+.PARAMETER OS
+    Default: <auto> - this value represents currently running OS
+    Operating system of prebuilt toolset binaries to be installed.
+    Possible values are: <auto>, windows, linux, darwin
+.PARAMETER Architecture
+    Default: <auto> - this value represents currently running OS architecture
+    Architecture of prebuilt toolset binaries to be installed.
+    Possible values are: <auto>, amd64, x64, 386, x86, arm64, arm
+.PARAMETER DryRun
+    If set, it will not perform installation. Instead, it displays what command line to use to
+    consistently install currently requested version of Microsoft Go. For example, if you specify
+    Version 'Latest', it will print a command with the specific 4-part version so this command can
+    be used deterministicly in a build script.
+    It also prints the location the binaries would have been installed to.
+.PARAMETER NoPath
+    By default, this script will update the environment variable PATH for the current process to
+    include the binaries folder inside installation folder.
+    If set, it will print the binaries location but not set any environment variable.
+.PARAMETER AzurePipelinePath
+    If set, it will print an Azure DevOps logging command that causes the Azure DevOps to update the
+    PATH environment variable of subsequent build steps to include the binaries folder.
+.PARAMETER ProxyAddress
+    If set, it will use the proxy when making web requests
+.PARAMETER ProxyUseDefaultCredentials
+    Default: false
+    Use default credentials when using ProxyAddress.
+.PARAMETER ProxyBypassList
+    If set, when using ProxyAddress, this comma separated url list is passed to the underlying
+    HttpClientHandler.
+.PARAMETER DownloadTimeout
+    Determines timeout duration in seconds for downloading the toolset file.
+    Default: 1200 seconds (20 minutes)
+.PARAMETER KeepArchive
+    If set, the downloaded file is kept.
+.PARAMETER ArchivePath
+    A path to use to store the toolset archive file, a zip or tar.gz.
+    Default: a generated random filename in the system's temporary directory.
+.PARAMETER Help
+    Displays this help message.
+.PARAMETER Verbose
+    Displays diagnostics information.
+.EXAMPLE
+    go-install.ps1
+    Installs the latest released Microsoft Go version.
+.EXAMPLE
+    go-install.ps1 -Version Previous
+    Installs the latest version of the previous major (1.X) version of Microsoft Go.
+#>
+[cmdletbinding()]
+param(
+    [string]$Version="Latest",
+    [Alias('i')][string]$InstallDir="<auto>",
+    [string]$OS="<auto>",
+    [string]$Architecture="<auto>",
+    [switch]$DryRun,
+    [switch]$NoPath,
+    [switch]$AzurePipelinePath,
+    [string]$ProxyAddress,
+    [switch]$ProxyUseDefaultCredentials,
+    [string[]]$ProxyBypassList=@(),
+    [int]$DownloadTimeout=1200,
+    [switch]$KeepArchive,
+    [string]$ArchivePath,
+    [switch]$Help
+)
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference="Stop"
+$ProgressPreference="SilentlyContinue"
+
+$MicrosoftGoInstallScriptVersion = "0.0.1"
+
+function Say($str) {
+    try {
+        Write-Host "go-install: $str"
+    }
+    catch {
+        # Some platforms cannot utilize Write-Host (Azure Functions, for instance). Fall back to Write-Output
+        Write-Output "go-install: $str"
+    }
+}
+
+function Say-Warning($str) {
+    try {
+        Write-Warning "go-install: $str"
+    }
+    catch {
+        # Some platforms cannot utilize Write-Warning (Azure Functions, for instance). Fall back to Write-Output
+        Write-Output "go-install: Warning: $str"
+    }
+}
+
+# Writes a line with error style settings.
+# Use this function to show a human-readable comment along with an exception.
+function Say-Error($str) {
+    try {
+        # Write-Error is quite oververbose for the purpose of the function, let's write one line with error style settings.
+        $Host.UI.WriteErrorLine("go-install: $str")
+    }
+    catch {
+        Write-Output "go-install: Error: $str"
+    }
+}
+
+function Say-Verbose($str) {
+    try {
+        Write-Verbose "go-install: $str"
+    }
+    catch {
+        # Some platforms cannot utilize Write-Verbose (Azure Functions, for instance). Fall back to Write-Output
+        Write-Output "go-install: $str"
+    }
+}
+
+function Measure-Action($name, $block) {
+    $time = Measure-Command $block
+    $totalSeconds = $time.TotalSeconds
+    Say-Verbose "⏱ Action '$name' took $totalSeconds seconds"
+}
+
+function Get-Remote-File-Size($zipUri) {
+    try {
+        $response = Invoke-WebRequest -Uri $zipUri -Method Head
+        $fileSize = $response.Headers["Content-Length"]
+        if ((![string]::IsNullOrEmpty($fileSize))) {
+            Say "Remote file $zipUri size is $fileSize bytes."
+
+            return $fileSize
+        }
+    }
+    catch {
+        Say-Verbose "Content-Length header was not extracted for $zipUri."
+    }
+
+    return $null
+}
+
+function Say-Invocation($Invocation) {
+    $command = $Invocation.MyCommand;
+    $args = (($Invocation.BoundParameters.Keys | foreach { "-$_ `"$($Invocation.BoundParameters[$_])`"" }) -join " ")
+    Say-Verbose "$command $args"
+}
+
+function Invoke-With-Retry([ScriptBlock]$ScriptBlock, [System.Threading.CancellationToken]$cancellationToken = [System.Threading.CancellationToken]::None, [int]$MaxAttempts = 3, [int]$SecondsBetweenAttempts = 1) {
+    $Attempts = 0
+    $local:startTime = $(get-date)
+
+    while ($true) {
+        try {
+            return & $ScriptBlock
+        }
+        catch {
+            $Attempts++
+            if (($Attempts -lt $MaxAttempts) -and -not $cancellationToken.IsCancellationRequested) {
+                Start-Sleep $SecondsBetweenAttempts
+            }
+            else {
+                $local:elapsedTime = $(get-date) - $local:startTime
+                if (($local:elapsedTime.TotalSeconds - $DownloadTimeout) -gt 0 -and -not $cancellationToken.IsCancellationRequested) {
+                    throw New-Object System.TimeoutException("Failed to reach the server: connection timeout: default timeout is $DownloadTimeout second(s)");
+                }
+                throw;
+            }
+        }
+    }
+}
+
+function Get-Machine-Architecture() {
+    Say-Invocation $MyInvocation
+
+    # Try the .NET API. If we don't get anything, this is probably PowerShell on Windows.
+    try {
+        $Architecture = [System.Runtime.InteropServices.RuntimeInformation]::OSArchitecture
+        if ($Architecture) {
+            # Possible values: https://learn.microsoft.com/en-us/dotnet/api/system.runtime.interopservices.architecture
+            return $Architecture.ToString().ToLowerInvariant()
+        }
+    }
+    catch {
+        Say-Verbose "Failed to get the machine architecture using .NET API. Falling back to environment variables."
+    }
+
+    # On PS x86, PROCESSOR_ARCHITECTURE reports x86 even on x64 systems.
+    # To get the correct architecture, we need to use PROCESSOR_ARCHITEW6432.
+    # PS x64 doesn't define this, so we fall back to PROCESSOR_ARCHITECTURE.
+    # Possible values: amd64, x64, x86, arm64, arm
+    if( $ENV:PROCESSOR_ARCHITEW6432 -ne $null ) {
+        return $ENV:PROCESSOR_ARCHITEW6432
+    }
+
+    return $ENV:PROCESSOR_ARCHITECTURE
+}
+
+function Get-CLIArchitecture-From-Architecture([string]$Architecture) {
+    Say-Invocation $MyInvocation
+
+    if ($Architecture -eq "<auto>") {
+        $Architecture = Get-Machine-Architecture
+    }
+
+    switch ($Architecture.ToLowerInvariant()) {
+        { ($_ -eq "amd64") -or ($_ -eq "x64") } { return "amd64" }
+        { ($_ -eq "386") -or ($_ -eq "x86") } { return "386" }
+        { $_ -eq "arm" } { return "armv6l" }
+        { $_ -eq "arm64" } { return "arm64" }
+        default { throw "Architecture '$Architecture' not supported. If you think this is a bug, report it at https://github.com/microsoft/go/issues" }
+    }
+}
+
+function Get-CLIOS-From-OS([string]$OS) {
+    Say-Invocation $MyInvocation
+
+    if (!(Test-Path -LiteralPath 'variable:IsWindows')) {
+        # If we don't have IsWindows, this is Windows PowerShell (powershell), not PowerShell Core (pwsh).
+        # So, we can't use the variable, but we know we're on Windows.
+        $IsWindows = $true
+    }
+
+    if ($OS -eq "<auto>") {
+        if ($IsWindows -or [System.Environment]::OSVersion.Platform -eq [System.PlatformID]::Win32NT) {
+            $OS = "windows"
+        }
+        elseif ($IsLinux) {
+            $OS = "linux"
+        }
+        elseif ($IsMacOS) {
+            $OS = "darwin"
+        }
+        else {
+            throw "Unable to automatically determine the OS."
+        }
+    }
+
+    switch ($OS.ToLowerInvariant()) {
+        { $_ -eq "windows" } { return "windows" }
+        { $_ -eq "linux" } { return "linux" }
+        { $_ -eq "darwin" } { return "darwin" }
+        default { throw "OS '$OS' not supported. If you think this is a bug, report it at https://github.com/microsoft/go/issues" }
+    }
+}
+
+function Get-GeneratedArchivePath([string]$CLIOS) {
+    Say-Invocation $MyInvocation
+
+    $Extension = switch ($CLIOS) {
+        "windows" { ".zip" }
+        default { ".tar.gz" }
+    }
+
+    return [System.IO.Path]::combine([System.IO.Path]::GetTempPath(), [System.IO.Path]::GetRandomFileName()) + $Extension
+}
+
+function Fetch-SupportedVersion([string]$StableKey) {
+    # Figure out what's latest by querying the list of release branches.
+    $ReleaseBranchData = DownloadJson "https://aka.ms/golang/release/latest/release-branch-links.json"
+
+    # Find first thing in the array of objects where the key by name is true.
+    foreach ($branch in $ReleaseBranchData) {
+        if (Get-OrNull $branch $StableKey) {
+            return $branch.version
+        }
+    }
+
+    throw "Failed to find a branch where '$StableKey' is true."
+}
+
+function Get-NormalizedVersion([string]$Version) {
+    Say-Invocation $MyInvocation
+
+    if ([string]::IsNullOrEmpty($Version)) {
+        return ""
+    }
+    switch ($Version.ToLowerInvariant()) {
+        { $_ -eq "latest" } { return Fetch-SupportedVersion -StableKey "latestStable" }
+        { $_ -eq "previous" } { return Fetch-SupportedVersion -StableKey "previousStable" }
+        { $_ -like "go1.*" } { return $_ }
+        default { throw "Version '$Version' not recognized. Missing 'go' prefix? If you think this is a bug, report it at https://github.com/microsoft/go/issues" }
+    }
+}
+
+function Load-Assembly([string] $Assembly) {
+    try {
+        Add-Type -Assembly $Assembly | Out-Null
+    }
+    catch {
+        # On Nano Server, Powershell Core Edition is used. Add-Type is unable to resolve base class assemblies because they are not GAC'd.
+        # Loading the base class assemblies is not unnecessary as the types will automatically get resolved.
+    }
+}
+
+function GetHTTPResponse([Uri] $Uri, [bool]$HeaderOnly, [bool]$DisableRedirect)
+{
+    $cts = New-Object System.Threading.CancellationTokenSource
+
+    $downloadScript = {
+
+        $HttpClient = $null
+
+        try {
+            # HttpClient is used vs Invoke-WebRequest in order to support Nano Server which doesn't support the Invoke-WebRequest cmdlet.
+            Load-Assembly -Assembly System.Net.Http
+
+            if (-not $ProxyAddress) {
+                try {
+                    # Despite no proxy being explicitly specified, we may still be behind a default proxy
+                    $DefaultProxy = [System.Net.WebRequest]::DefaultWebProxy;
+                    if($DefaultProxy -and (-not $DefaultProxy.IsBypassed($Uri))) {
+                        if ($null -ne $DefaultProxy.GetProxy($Uri)) {
+                            $ProxyAddress = $DefaultProxy.GetProxy($Uri).OriginalString
+                        } else {
+                            $ProxyAddress = $null
+                        }
+                        $ProxyUseDefaultCredentials = $true
+                    }
+                }
+                catch {
+                    # Eat the exception and move forward as the above code is an attempt
+                    #    at resolving the DefaultProxy that may not have been a problem.
+                    $ProxyAddress = $null
+                    Say-Verbose("Exception ignored: $_.Exception.Message - moving forward...")
+                }
+            }
+
+            $HttpClientHandler = New-Object System.Net.Http.HttpClientHandler
+            if ($ProxyAddress) {
+                $HttpClientHandler.Proxy =  New-Object System.Net.WebProxy -Property @{
+                    Address=$ProxyAddress;
+                    UseDefaultCredentials=$ProxyUseDefaultCredentials;
+                    BypassList = $ProxyBypassList;
+                }
+            }
+            if ($DisableRedirect) {
+                $HttpClientHandler.AllowAutoRedirect = $false
+            }
+            $HttpClient = New-Object System.Net.Http.HttpClient -ArgumentList $HttpClientHandler
+
+            # Default timeout for HttpClient is 100s.  For a 50 MB download this assumes 500 KB/s average, any less will time out
+            # Defaulting to 20 minutes allows it to work over much slower connections.
+            $HttpClient.Timeout = New-TimeSpan -Seconds $DownloadTimeout
+
+            if ($HeaderOnly){
+                $completionOption = [System.Net.Http.HttpCompletionOption]::ResponseHeadersRead
+            }
+            else {
+                $completionOption = [System.Net.Http.HttpCompletionOption]::ResponseContentRead
+            }
+
+            $Task = $HttpClient.GetAsync("$Uri", $completionOption).ConfigureAwait("false");
+            $Response = $Task.GetAwaiter().GetResult();
+
+            if (($null -eq $Response) -or ((-not $HeaderOnly) -and (-not ($Response.IsSuccessStatusCode)))) {
+                # The feed credential is potentially sensitive info. Do not log FeedCredential to console output.
+                $DownloadException = [System.Exception] "Unable to download $Uri."
+
+                if ($null -ne $Response) {
+                    $DownloadException.Data["StatusCode"] = [int] $Response.StatusCode
+                    $DownloadException.Data["ErrorMessage"] = "Unable to download $Uri. Returned HTTP status code: " + $DownloadException.Data["StatusCode"]
+
+                    if (404 -eq [int] $Response.StatusCode) {
+                        $cts.Cancel()
+                    }
+                }
+
+                throw $DownloadException
+            }
+
+            return $Response
+        }
+        catch [System.Net.Http.HttpRequestException] {
+            $DownloadException = [System.Exception] "Unable to download $Uri."
+
+            # Pick up the exception message and inner exceptions' messages if they exist
+            $CurrentException = $PSItem.Exception
+            $ErrorMsg = $CurrentException.Message + "`r`n"
+            while ($CurrentException.InnerException) {
+                $CurrentException = $CurrentException.InnerException
+                $ErrorMsg += $CurrentException.Message + "`r`n"
+            }
+
+            # Check if there is an issue concerning TLS.
+            if ($ErrorMsg -like "*SSL/TLS*") {
+                $ErrorMsg += "Ensure that TLS 1.2 or higher is enabled to use this script.`r`n"
+            }
+
+            $DownloadException.Data["ErrorMessage"] = $ErrorMsg
+            throw $DownloadException
+        }
+        finally {
+            if ($null -ne $HttpClient) {
+                $HttpClient.Dispose()
+            }
+        }
+    }
+
+    try {
+        return Invoke-With-Retry $downloadScript $cts.Token
+    }
+    finally {
+        if ($null -ne $cts) {
+            $cts.Dispose()
+        }
+    }
+}
+
+function Resolve-Installation-Path([string]$InstallDir) {
+    Say-Invocation $MyInvocation
+
+    if ($InstallDir -eq "<auto>") {
+        $Dir = Join-Path -Path ([Environment]::GetFolderPath('LocalApplicationData')) -ChildPath "microsoft-go"
+        if ($OS -ne "<auto>" -or $Architecture -ne "<auto>") {
+            $Dir = Join-Path -Path $Dir -ChildPath "$($CLIOS)_$CLIArchitecture"
+        }
+        return $Dir
+    }
+    return $InstallDir
+}
+
+function Resolve-Versioned-Installation-Path([string]$InstallRoot, [string]$SpecificVersion) {
+    Say-Invocation $MyInvocation
+
+    return Join-Path -Path $InstallRoot -ChildPath "go$SpecificVersion"
+}
+
+function Is-ToolsetInstalled([string]$InstallRoot, [string]$SpecificVersion) {
+    Say-Invocation $MyInvocation
+
+    $GoToolsetPath = Resolve-Versioned-Installation-Path $InstallRoot $SpecificVersion
+    $GoBinPath = (Join-Path $GoToolsetPath "bin")
+    Say-Verbose "Is-ToolsetInstalled: GoToolsetPath=$GoToolsetPath"
+    # A few basic checks to see if a likely usable toolset is installed.
+    # If these fail, it will be reinstalled.
+    return (Test-Path $GoToolsetPath -PathType Container) -and
+        (
+            (Test-Path (Join-Path $GoBinPath "go") -PathType Leaf) -or
+            (Test-Path (Join-Path $GoBinPath "go.exe") -PathType Leaf)
+        )
+}
+
+function Get-Absolute-Path([string]$RelativeOrAbsolutePath) {
+    # Too much spam
+    # Say-Invocation $MyInvocation
+
+    return $ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath($RelativeOrAbsolutePath)
+}
+
+function Extract-Zip([string]$ArchivePath, [string]$OutPath) {
+    Say-Invocation $MyInvocation
+
+    Load-Assembly -Assembly System.IO.Compression.FileSystem
+    [System.IO.Compression.ZipFile]::ExtractToDirectory($ArchivePath, $OutPath)
+}
+
+function Extract-TarGz([string]$ArchivePath, [string]$OutPath) {
+    Say-Invocation $MyInvocation
+
+    if (-not (Test-Path $OutPath)) {
+        New-Item -ItemType Directory -Force -Path $OutPath
+    }
+
+    try {
+        & tar -C $OutPath -xzf $ArchivePath
+        if ($LASTEXITCODE -ne 0) {
+            throw "tar exit code: $LASTEXITCODE"
+        }
+    }
+    catch {
+        throw "Failed to extract the tar.gz archive `"$ArchivePath`". Error: $_"
+    }
+}
+
+function Extract-ToolsetArchive([string]$ArchivePath, [string]$InstallRoot, [string]$SpecificVersion) {
+    Say-Invocation $MyInvocation
+
+    $GoRootPath = Resolve-Versioned-Installation-Path $InstallRoot $SpecificVersion
+    # First extract to a temporary directory to avoid partial extraction to the final location. This
+    # makes it so rerunning the script fixes a problem in case of an interruption. Don't use
+    # systemwide temp directory because Move-Item from there has been observed to fail on Linux.
+    $TempGoExtractDir = Join-Path $InstallRoot ".tmp-extract"
+    $TempGoRootPath = Resolve-Versioned-Installation-Path $TempGoExtractDir $SpecificVersion
+
+    # Clean up directories from a previous attempt.
+    if (Test-Path $GoRootPath) {
+        Remove-Item $GoRootPath -Recurse -Force
+    }
+    if (Test-Path $TempGoExtractDir) {
+        Remove-Item $TempGoExtractDir -Recurse -Force
+    }
+    if (Test-Path $TempGoRootPath) {
+        Remove-Item $TempGoRootPath -Recurse -Force
+    }
+
+    try {
+        switch ([System.IO.Path]::GetExtension($ArchivePath).ToLowerInvariant()) {
+            ".zip" { Extract-Zip $ArchivePath $TempGoRootPath }
+            ".gz" { Extract-TarGz $ArchivePath $TempGoRootPath }
+            default { throw "Unsupported archive type: $ArchivePath" }
+        }
+
+        # Move contents of inner "go" dir to the output path to avoid unwanted extra dir.
+        Move-Item (Join-Path $TempGoRootPath "go") $GoRootPath
+
+        $GoRootPath = ""
+    }
+    finally {
+        if ($GoRootPath -ne "" -and (Test-Path $GoRootPath)) {
+            Remove-Item $GoRootPath -Recurse -Force
+        }
+        if (Test-Path $TempGoExtractDir) {
+            Remove-Item $TempGoExtractDir -Recurse -Force
+        }
+        if (Test-Path $TempGoRootPath) {
+            Remove-Item $TempGoRootPath -Recurse -Force
+        }
+    }
+}
+
+function DownloadJson([string]$Source) {
+    $Text = DownloadString $Source
+
+    try {
+        return ConvertFrom-Json $Text
+    }
+    catch {
+        Say-Verbose "Failed to parse the JSON response from '$Source': $Text"
+        throw $_
+    }
+}
+
+function DownloadString([string]$Source) {
+    $Stream = $null
+    $Reader = $null
+
+    # To make sure errors are accurate and useful, attempt to get the target first. This prevents a
+    # situation where we succesfully download bing.com after a failed redirect, try to parse the
+    # HTML as JSON, and present a confusing error message.
+    if ($Source -like "https://aka.ms/*") {
+        $DirectSource = Get-AkaMSRedirectTarget $Source
+        if (!$DirectSource) {
+            throw "Failed to aka.ms redirect for URL: $Source"
+        }
+        $Source = $DirectSource
+    }
+
+    try {
+        $Response = GetHTTPResponse -Uri $Source
+        $Stream = $Response.Content.ReadAsStreamAsync().Result
+        $Reader = New-Object System.IO.StreamReader($Stream)
+        return $Reader.ReadToEnd()
+    }
+    finally {
+        if ($null -ne $Stream) {
+            $Stream.Dispose()
+        }
+        if ($null -ne $Reader) {
+            $Reader.Dispose()
+        }
+    }
+}
+
+function DownloadFile($Source, [string]$OutPath) {
+    if ($Source -notlike "http*") {
+        #  Using System.IO.Path.GetFullPath to get the current directory
+        #    does not work in this context - $pwd gives the current directory
+        if (![System.IO.Path]::IsPathRooted($Source)) {
+            $Source = $(Join-Path -Path $pwd -ChildPath $Source)
+        }
+        $Source = Get-Absolute-Path $Source
+        Say "Copying file from $Source to $OutPath"
+        Copy-Item $Source $OutPath
+        return
+    }
+
+    $Stream = $null
+
+    try {
+        $Response = GetHTTPResponse -Uri $Source
+        $Stream = $Response.Content.ReadAsStreamAsync().Result
+        $File = [System.IO.File]::Create($OutPath)
+        $Stream.CopyTo($File)
+        $File.Close()
+
+        ValidateRemoteLocalFileSizes -LocalFileOutPath $OutPath -SourceUri $Source
+    }
+    finally {
+        if ($null -ne $Stream) {
+            $Stream.Dispose()
+        }
+    }
+}
+
+function ValidateRemoteLocalFileSizes([string]$LocalFileOutPath, $SourceUri) {
+    try {
+        $remoteFileSize = Get-Remote-File-Size -zipUri $SourceUri
+        $fileSize = [long](Get-Item $LocalFileOutPath).Length
+        Say "Downloaded file $SourceUri size is $fileSize bytes."
+
+        if ((![string]::IsNullOrEmpty($remoteFileSize)) -and !([string]::IsNullOrEmpty($fileSize)) ) {
+            if ($remoteFileSize -ne $fileSize) {
+                Say "The remote and local file sizes are not equal. Remote file size is $remoteFileSize bytes and local size is $fileSize bytes. The local package may be corrupted."
+            }
+            else {
+                Say "The remote and local file sizes are equal."
+            }
+        }
+        else {
+            Say "Either downloaded or local package size can not be measured. One of them may be corrupted."
+        }
+    }
+    catch {
+        Say "Either downloaded or local package size can not be measured. One of them may be corrupted."
+    }
+}
+
+function Remove-FileSafely($Path) {
+    try {
+        if (Test-Path $Path) {
+            Remove-Item $Path
+            Say-Verbose "The temporary file `"$Path`" was removed."
+        }
+        else {
+            Say-Verbose "The temporary file `"$Path`" does not exist, therefore is not removed."
+        }
+    }
+    catch {
+        Say-Warning "Failed to remove the temporary file: `"$Path`", remove it manually."
+    }
+}
+
+function Prepend-ToolsetPathEnv([string]$InstallRoot, [string]$SpecificVersion) {
+    Say-Invocation $MyInvocation
+
+    $GoRootPath = Resolve-Versioned-Installation-Path $InstallRoot $SpecificVersion
+    $BinPath = Get-Absolute-Path (Join-Path -Path $GoRootPath -ChildPath "bin")
+
+    if (-Not $NoPath) {
+        $SuffixedBinPath = $BinPath + [System.IO.Path]::PathSeparator
+        if (-Not $env:PATH.Contains($SuffixedBinPath)) {
+            Say "Adding to current process PATH: $BinPath"
+            Say "Note: This change will not be visible if PowerShell was run as a child process."
+            $env:PATH = $SuffixedBinPath + $env:PATH
+            Say-Verbose "The current process PATH is now `"$env:PATH`"."
+        }
+        else {
+            Say "Current process PATH already contains `"$BinPath`""
+        }
+    }
+    else {
+        Say "Binaries can be found in $BinPath"
+    }
+
+    if ($AzurePipelinePath) {
+        Say "Running an Azure Pipelines logging command to prepend `"$BinPath`" to the PATH."
+        Say "##vso[task.prependpath]$BinPath"
+    }
+}
+
+function PrintDryRunOutput($Invocation) {
+    $RepeatableCommand = ".\$ScriptName -Version `"go$SpecificVersion`" -InstallDir `"$InstallRoot`" -OS `"$CLIOS`" -Architecture `"$CLIArchitecture`""
+
+    foreach ($key in $Invocation.BoundParameters.Keys) {
+        if (-not (@("Version","InstallDir","OS","Architecture","DryRun") -contains $key)) {
+            $RepeatableCommand+=" -$key `"$($Invocation.BoundParameters[$key])`""
+        }
+    }
+    Say "Repeatable invocation: $RepeatableCommand"
+}
+
+function Get-AkaMSRedirectTarget([string] $akaMsLink) {
+    $akaMsDownloadLink=$null
+
+    for ($maxRedirections = 9; $maxRedirections -ge 0; $maxRedirections--)
+    {
+        #get HTTP response
+        #do not pass credentials as a part of the $akaMsLink and do not apply credentials in the GetHTTPResponse function
+        #otherwise the redirect link would have credentials as well
+        #it would result in applying credentials twice to the resulting link and thus breaking it, and in echoing credentials to the output as a part of redirect link
+        $Response= GetHTTPResponse -Uri $akaMsLink -HeaderOnly $true -DisableRedirect $true -DisableFeedCredential $true
+        Say-Verbose "Received response:`n$Response"
+
+        if ([string]::IsNullOrEmpty($Response)) {
+            Say-Verbose "The link '$akaMsLink' is not valid: failed to get redirect location. The resource is not available."
+            return $null
+        }
+
+        #if HTTP code is 301 (Moved Permanently), the redirect link exists
+        if  ($Response.StatusCode -eq 301)
+        {
+            try {
+                $akaMsDownloadLink = $Response.Headers.GetValues("Location")[0]
+
+                if ([string]::IsNullOrEmpty($akaMsDownloadLink)) {
+                    Say-Verbose "The link '$akaMsLink' is not valid: server returned 301 (Moved Permanently), but the headers do not contain the redirect location."
+                    return $null
+                }
+
+                Say-Verbose "The redirect location retrieved: '$akaMsDownloadLink'."
+                # This may yet be a link to another redirection. Attempt to retrieve the page again.
+                $akaMsLink = $akaMsDownloadLink
+                continue
+            }
+            catch {
+                Say-Verbose "The link '$akaMsLink' is not valid: failed to get redirect location."
+                return $null
+            }
+        }
+        elseif ((($Response.StatusCode -lt 300) -or ($Response.StatusCode -ge 400)) -and (-not [string]::IsNullOrEmpty($akaMsDownloadLink)))
+        {
+            # Redirections have ended.
+            return $akaMsDownloadLink
+        }
+
+        Say-Verbose "The link '$akaMsLink' is not valid: failed to retrieve the redirection location."
+        return $null
+    }
+
+    Say-Verbose "Aka.ms links have redirected more than the maximum allowed redirections. This may be caused by a cyclic redirection of aka.ms links."
+    return $null
+}
+
+# Strict mode means attempting to access a JSON key that doesn't exist fails harshly.
+# This utility helps make JSON access a bit more concise under those rules.
+# https://github.com/PowerShell/PowerShell/issues/10875
+function Get-OrNull($Target, $Property) {
+    if ($Target -and $Target.PSObject.Properties[$Property]) {
+        return $Target.PSObject.Properties[$Property].Value
+    }
+    return $null
+}
+
+function Get-AssetInformation([string]$NormalizedVersion, [string]$OS, [string]$Architecture) {
+    Say-Invocation $MyInvocation
+
+    #construct aka.ms link like "https://aka.ms/golang/release/latest/go1.23.assets.json"
+    $AkaMsLink = "https://aka.ms/golang/release/latest"
+    $AkaMsLink +="/$NormalizedVersion.assets.json"
+    Say-Verbose  "Constructed assets.json aka.ms link: '$AkaMsLink'."
+
+    $Assets = DownloadJson $AkaMsLink
+    $MatchingArches = @($Assets.arches | Where-Object {
+        $Env = Get-OrNull $_ 'env'
+        return (Get-OrNull $Env 'GOOS') -eq $OS -and
+            (Get-OrNull $Env 'GOARCH') -eq $Architecture
+    })
+
+    foreach ($arch in $MatchingArches) {
+        Say-Verbose "Matching env '$($arch.env)'."
+    }
+
+    if ($MatchingArches.Count -ne 1) {
+        throw "Failed to find exactly one matching asset for OS '$OS' and architecture '$Architecture'."
+    }
+
+    return ($MatchingArches[0], $Assets.version)
+}
+
+function Prepare-Install-Directory {
+    New-Item -ItemType Directory -Force -Path $InstallRoot | Out-Null
+}
+
+# The following marker is used by microsoft/go-infra tests to insert more logic that runs before any
+# installation happens and may stop the script before installation. This allows unit testing without
+# adding additional inputs and complexity only used by tests.
+
+# [END OF FUNCTIONS]
+
+if ($Help) {
+    Get-Help $PSCommandPath -Examples
+    exit
+}
+
+Say "Microsoft Go Install Script version $MicrosoftGoInstallScriptVersion"
+
+Say-Verbose "Note that the intended use of this script is for Continuous Integration (CI) scenarios, where:"
+Say-Verbose "- The toolset needs to be installed without user interaction and without admin rights."
+Say-Verbose "- The toolset installation doesn't need to persist across multiple CI runs."
+Say-Verbose "Visit https://github.com/microsoft/go for a list of other ways to install Microsoft Go.`r`n"
+
+Measure-Action "Product discovery" {
+    $script:CLIArchitecture = Get-CLIArchitecture-From-Architecture $Architecture
+    $script:CLIOS = Get-CLIOS-From-OS $OS
+    $script:NormalizedVersion = Get-NormalizedVersion $Version
+    Say-Verbose "Normalized version: '$NormalizedVersion'"
+}
+
+if ($ArchivePath -eq "") {
+    $ArchivePath = Get-GeneratedArchivePath $CLIOS
+    Say-Verbose "Generated archive path: $ArchivePath"
+}
+
+$InstallRoot = Resolve-Installation-Path $InstallDir
+Say-Verbose "InstallRoot: $InstallRoot"
+
+$ScriptName = $MyInvocation.MyCommand.Name
+
+Say "Fetching information for version '$Version'."
+($Arch, $SpecificVersion) = Get-AssetInformation $NormalizedVersion $CLIOS $CLIArchitecture
+
+$DownloadLink = $Arch.url
+Say-Verbose "Found download link $DownloadLink with version $SpecificVersion"
+
+if (-Not $DryRun) {
+    Say-Verbose "Checking if the version $SpecificVersion is already installed"
+    if (Is-ToolsetInstalled -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion) {
+        Say "Microsoft Go version '$SpecificVersion' is already installed."
+        Measure-Action "Setting up shell environment" { Prepend-ToolsetPathEnv -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion }
+        return
+    }
+}
+
+if ($DryRun) {
+    PrintDryRunOutput $MyInvocation
+    return
+}
+
+Measure-Action "Installation directory preparation" { Prepare-Install-Directory }
+
+Say-Verbose "Zip path: $ArchivePath"
+
+Say-Verbose "Downloading link $DownloadLink"
+
+try {
+    Measure-Action "Package download" { DownloadFile -Source $DownloadLink -OutPath $ArchivePath }
+    Say-Verbose "Download succeeded."
+}
+catch {
+    $StatusCode = $null
+    $ErrorMessage = $null
+
+    if ($PSItem.Exception.Data.Contains("StatusCode")) {
+        $StatusCode = $PSItem.Exception.Data["StatusCode"]
+    }
+
+    if ($PSItem.Exception.Data.Contains("ErrorMessage")) {
+        $ErrorMessage = $PSItem.Exception.Data["ErrorMessage"]
+    } else {
+        $ErrorMessage = $PSItem.Exception.Message
+    }
+
+    if (-not $KeepArchive) {
+        Remove-FileSafely -Path $ArchivePath
+    }
+
+    throw "Downloading has failed with error:`nUri: $DownloadLink`nStatusCode: $StatusCode`nError: $ErrorMessage"
+}
+
+Say "Extracting the archive."
+Measure-Action "Archive extraction" { Extract-ToolsetArchive -ArchivePath $ArchivePath -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion }
+
+Say-Verbose "Checking installation: version = $SpecificVersion"
+$isAssetInstalled = Is-ToolsetInstalled -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion
+
+# Version verification failed. More likely something is wrong either with the downloaded content or with the verification algorithm.
+if (!$isAssetInstalled) {
+    Say-Error "Failed to verify that the toolset was installed.`nInstallation source: $DownloadLink.`nInstallation location: $InstallRoot.`nReport the bug at https://github.com/microsoft/go/issues."
+    throw "Toolset with version $SpecificVersion failed to install with an unknown error."
+}
+
+if (-not $KeepArchive) {
+    Remove-FileSafely -Path $ArchivePath
+}
+
+Measure-Action "Setting up environment PATH to find 'go' command" { Prepend-ToolsetPathEnv -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion }
+
+Say "Installed version is $SpecificVersion"
+Say "Installation finished"
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1908c85092a..897bab5c0ff 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -4,10 +4,11 @@
 
 module github.com/microsoft/go/_util
 
-go 1.21
+go 1.22.0
 
 require (
 	github.com/microsoft/go-infra v0.0.5
+	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
 	golang.org/x/sys v0.27.0
 	gotest.tools/gotestsum v1.12.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 428da6543f9..47684ef2a2e 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -29,6 +29,8 @@ github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHS
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.5 h1:2vfRe5hJUwJvnXcHDJiv/gqE0XIqCHnwXBFxXRm5+SI=
 github.com/microsoft/go-infra v0.0.5/go.mod h1:abvc0FBd6VZIdqeJEgo3+SDIE3wSbjpvPhRZ0i21pls=
+github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67 h1:i/EXV3vFmJ6UYZ8a4fM2ssKlvSstxvJfiUHau81iNZE=
+github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
 github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
diff --git a/eng/_util/tools/installscript_test.go b/eng/_util/tools/installscript_test.go
new file mode 100644
index 00000000000..18cc6ec90dd
--- /dev/null
+++ b/eng/_util/tools/installscript_test.go
@@ -0,0 +1,21 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package testutil
+
+import (
+	"os/exec"
+	"testing"
+)
+
+func TestInstallScriptUpToDate(t *testing.T) {
+	cmd := exec.Command("go", "run", "github.com/microsoft/go-infra/goinstallscript", "-check")
+	cmd.Dir = ".."
+	out, err := cmd.CombinedOutput()
+	if err != nil {
+		t.Errorf("goinstallscript is not up to date: %v, %v", string(out), err)
+		t.Errorf("To update, in eng/_util, run: go run github.com/microsoft/go-infra/goinstallscript")
+		t.Fail()
+	}
+}
diff --git a/eng/_util/tools/tools.go b/eng/_util/tools/tools.go
new file mode 100644
index 00000000000..1bb08dabc44
--- /dev/null
+++ b/eng/_util/tools/tools.go
@@ -0,0 +1,11 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build tools
+
+package tools
+
+import (
+	_ "github.com/microsoft/go-infra/goinstallscript/powershell"
+)
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 34918364cbb..3a5d7af9612 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -94,6 +94,11 @@ stages:
             - name: MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS
               value: '1'
 
+          # On darwin (macOS) we haven't released a Microsoft Go toolchain.
+          - ${{ if eq(parameters.builder.os, 'darwin') }}:
+            - name: MS_USE_PATH_GO
+              value: '1'
+
           - ${{ if eq(parameters.builder.config, 'codeql_inner') }}:
             # Manually specify the repository being scanned by this job because
             # CodeQL can't detect the inner repository (the submodule)
@@ -144,10 +149,16 @@ stages:
 
           # Initialize stage 0 toolset ahead of time so we can track timing data separately from the
           # build operations. When we call this script again later, it won't download Go again.
-          - pwsh: |
-              . eng/utilities.ps1
-              Get-Stage0GoRoot
-            displayName: Init stage 0 Go toolset
+          - ${{ if eq(parameters.builder.os, 'darwin') }}:
+            - task: GoTool@0
+              inputs:
+                version: '1.23.3'
+              displayName: Init upstream stage 0 Go toolset
+          - ${{ else }}:
+            - pwsh: |
+                . eng/utilities.ps1
+                Download-Stage0
+              displayName: Init stage 0 Go toolset
 
           - template: ../steps/init-submodule-task.yml
 
diff --git a/eng/run.ps1 b/eng/run.ps1
index 07d3c9fa7dd..d3cebeafba8 100644
--- a/eng/run.ps1
+++ b/eng/run.ps1
@@ -15,9 +15,12 @@ For example, to build the repository:
 To list all possible tools:
   run.ps1
 
-Builds 'eng/_util/cmd/<tool>/<tool>.go' and runs it using the list of
-arguments. If necessary, this command automatically installs Go and downloads
-the dependencies of the tool.
+Builds 'eng/_util/cmd/<tool>/<tool>.go' and runs it using the list of arguments.
+
+This command automatically installs a known version of Microsoft Go that will be
+used to build the tools. The known version of Go will also be used to build the
+Go source code, if it's built. Set environment variable "MS_USE_PATH_GO" to 1 to
+your own Go from PATH instead.
 
 Every tool accepts a '-h' argument to show tool usage help.
 #>
@@ -79,8 +82,20 @@ if (-not ($tool_source -is [System.IO.FileInfo])) {
 # Now that we have a single result, navigate upwards to see which module it's in.
 $tool_module = $tool_source.Directory.Parent.Parent.FullName
 
-# Get (downloading if necessary) the GOROOT directory of a stage 0 Go.
-$stage0_goroot = Get-Stage0GoRoot
+# Download a consistent stage 0 version of Go unless opted out.
+if ($env:MS_USE_PATH_GO -eq "1") {
+  try {
+    Write-Host "Using $(go version) from '$(go env GOROOT)'. Results may differ from CI environment."
+  } catch {
+    Write-Host "Error: 'go' is most likely not in PATH. To download the known version, set 'MS_USE_PATH_GO' to '0' or unset it, then try again."
+    Write-Host "Exception: $_"
+    exit 1
+  }
+} else {
+  Download-Stage0
+}
+
+$stage0_goroot = & go env GOROOT
 
 # The tool may need to know where our copy of Go is located. Save it in env to give it access. Don't
 # pass it to the tool as an arg, becuase that would complicate arg handling in each tool.
diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index 784074727e7..a6929ec1ebf 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -19,103 +19,16 @@ if ($host.Version.Major -lt 6) {
   throw "Missing prerequisites; see logs above for details."
 }
 
-function Get-Stage0GoRoot() {
+function Download-Stage0() {
   # We need Go installed in order to build Go, but our common build environment doesn't have it
-  # pre-installed. This CI script installs a consistent, official version of Go to a directory in
-  # $HOME to handle this. This also makes it easier to locally repro issues in CI that involve a
+  # pre-installed (or the right version pre-installed). This CI script installs a consistent version
+  # of Go to handle this. This also makes it easier to locally repro issues in CI that involve a
   # specific version of Go. The downloaded copy of Go is called the "stage 0" version.
-  $stage0_go_version = '1.22.6'
+  $stage0_go_version = 'go1.23.3-1'
 
-  $proc_arch = ([System.Runtime.InteropServices.RuntimeInformation]::ProcessArchitecture).ToString().ToLowerInvariant()
-  if ($IsWindows) {
-    switch ($proc_arch) {
-      'x64' {
-        $stage0_go_sha256 = '6023083a6e4d3199b44c37e9ba7b25d9674da20fd846a35ee5f9589d81c21a6a'
-        $stage0_go_suffix = 'windows-amd64.zip'
-      }
-      'arm64' {
-        $stage0_go_sha256 = '7cf55f357ba8116cd3bff992980e20a704ba451b3dab341cf1787b133d900512'
-        $stage0_go_suffix = 'windows-arm64.zip'
-      }
-      Default { throw "Unable to match Windows '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
-    }
-  } elseif ($IsLinux) {
-    switch ($proc_arch) {
-      'x64' {
-        $stage0_go_sha256 = '999805bed7d9039ec3da1a53bfbcafc13e367da52aa823cb60b68ba22d44c616'
-        $stage0_go_suffix = 'linux-amd64.tar.gz'
-      }
-      'arm64' {
-        $stage0_go_sha256 = 'c15fa895341b8eaf7f219fada25c36a610eb042985dc1a912410c1c90098eaf2'
-        $stage0_go_suffix = 'linux-arm64.tar.gz'
-      }
-      Default { throw "Unable to match Linux '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
-    }
-  } elseif ($IsMacOS) {
-    switch ($proc_arch) {
-      'x64' {
-        $stage0_go_sha256 = '9c3c0124b01b5365f73a1489649f78f971ecf84844ad9ca58fde133096ddb61b'
-        $stage0_go_suffix = 'darwin-amd64.tar.gz'
-      }
-      'arm64' {
-        $stage0_go_sha256 = 'ebac39fd44fc22feed1bb519af431c84c55776e39b30f4fd62930da9c0cfd1e3'
-        $stage0_go_suffix = 'darwin-arm64.tar.gz'
-      }
-      Default { throw "Unable to match macOS '$proc_arch' to an architecture supported by the Microsoft scripts to build Go." }
-    }
-  } else {
-    throw "Current OS/Platform is not supported by the Microsoft scripts to build Go."
-  }
-  $stage0_url = "https://golang.org/dl/go${stage0_go_version}.${stage0_go_suffix}"
-
-  # Ideally we could set up stage 0 inside the repository, rather than
-  # userprofile. Tracked by: https://github.com/microsoft/go/issues/12
-  $stage0_dir = Join-Path $HOME ".go-stage-0" $stage0_go_version
-
-  # A file that indicates that this version of the stage 0 Go toolset has already been installed.
-  $download_complete_indicator = Join-Path $stage0_dir ".downloaded-$stage0_go_sha256"
-
-  if (-not (Test-Path $download_complete_indicator -PathType Leaf)) {
-    Write-Host "Downloading stage 0 Go compiler and extracting to '$stage0_dir' ..."
-
-    # Clear existing stage0 dir in case it's in a broken state.
-    Remove-Item -Recurse -Force $stage0_dir -ErrorAction Ignore 
-    New-Item -ItemType Directory $stage0_dir | Out-Null
-
-    $go_tarball = Join-Path $stage0_dir "go.$stage0_go_suffix"
-
-    Write-Host "Downloading from '$stage0_url' to '$go_tarball'..."
-    Invoke-WithRetry -MaxAttempts 5 {
-      (New-Object System.Net.WebClient).DownloadFile($stage0_url, $go_tarball)
-    }
-
-    Write-Host "Comparing checksum..."
-    $actual_hash = (Get-FileHash $go_tarball -Algorithm SHA256).Hash.ToLowerInvariant()
-    if ($actual_hash -ne $stage0_go_sha256) {
-      Write-Host ""
-      Write-Host "Error: hash of downloaded file '$go_tarball' doesn't match expected value:"
-      Write-Host "Actual:   $actual_hash"
-      Write-Host "Expected: $stage0_go_sha256"
-      Write-Host "Visit https://golang.org/dl/ to see the list of expected hashes."
-
-      throw "Checksum mismatch. See logs above for details."
-    }
-
-    Write-Host "Extracting '$go_tarball' to '$stage0_dir'..."
-    if ($go_tarball.EndsWith(".zip")) {
-      Extract-Zip $go_tarball $stage0_dir
-    } elseif ($go_tarball.EndsWith(".tar.gz")) {
-      Extract-TarGz $go_tarball $stage0_dir
-    }
-    Remove-Item "$go_tarball"
-
-    New-Item -ItemType File "$download_complete_indicator" | Out-Null
-
-    Write-Host "Done extracting stage 0 Go compiler to '$stage0_dir'"
-  }
-
-  # Return GOROOT: contains "bin/go".
-  return Join-Path $stage0_dir "go"
+  # Source the install script so that we can use the PATH it assigns.
+  $installScriptPath = Join-Path $PSScriptRoot "_util" "go-install.ps1"
+  . $installScriptPath -Version $stage0_go_version
 }
 
 # Copied from https://github.com/dotnet/install-scripts/blob/49d5da7f7d313aa65d24fe95cc29767faef553fd/src/dotnet-install.ps1#L180-L197

From 12a4904dc794363bccf22437179d8d6b67c8e3d6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 Nov 2024 14:27:54 -0800
Subject: [PATCH 097/887] Bump github/codeql-action from 3.27.3 to 3.27.4
 (#1403)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.3 to 3.27.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/396bb3e45325a47dd9ef434068033c6d5bb0d11a...ea9e4e37992a54ee68a9622e985e60c8e8f12d9f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4492648243e..86cc16d6f26 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
+        uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
+        uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
+        uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
         with:
           category: /language:go

From 7dda3365540e36f431a5bb40ffb16d57c0d45d02 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 18 Nov 2024 11:29:25 +0000
Subject: [PATCH 098/887] fix:move go mod and go sum to patch 0005

---
 patches/0005-Add-CNG-crypto-backend.patch     |  10 +-
 patches/0006-Vendor-crypto-backends.patch     |  66 ++++----
 patches/0015-Add-crypto-dsa-support.patch     |  37 -----
 patches/0016-Vendor-crypto-dsa-backends.patch | 149 ------------------
 4 files changed, 35 insertions(+), 227 deletions(-)
 delete mode 100644 patches/0015-Add-crypto-dsa-support.patch
 delete mode 100644 patches/0016-Vendor-crypto-dsa-backends.patch

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 6d2c8dc7f27..adac4e6644f 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -691,26 +691,26 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 12d8c8f4f97321..39d84e4165d654 100644
+index 12d8c8f4f97321..8a95b6f65c63ef 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
  	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
++	github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 4c3ca847c21cd2..116a769b257e34 100644
+index 4c3ca847c21cd2..54c859b46edd1c 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
  github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
  github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d h1:UKPx/2ug3daetm1rPOKyEHovWbh3hekPK8p1wygTcOI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index 836f665e30a..43db9981ab9 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -50,12 +50,12 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +++
- .../microsoft/go-crypto-winnative/cng/des.go  |  107 ++
+ .../microsoft/go-crypto-winnative/cng/des.go  |  106 ++
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  469 ++++++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 +++
- .../microsoft/go-crypto-winnative/cng/hash.go |  316 +++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  175 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  306 +++++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  180 +++
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 ++
@@ -68,7 +68,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 63 files changed, 10964 insertions(+)
+ 63 files changed, 10958 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
@@ -7491,7 +7491,7 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 new file mode 100644
-index 00000000000000..caac632894556e
+index 00000000000000..097a0fc77f0adb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 @@ -0,0 +1,393 @@
@@ -7504,6 +7504,7 @@ index 00000000000000..caac632894556e
 +package cng
 +
 +import (
++	"bytes"
 +	"crypto/cipher"
 +	"errors"
 +	"runtime"
@@ -7525,8 +7526,7 @@ index 00000000000000..caac632894556e
 +	if err != nil {
 +		return nil, err
 +	}
-+	c := &aesCipher{kh: kh, key: make([]byte, len(key))}
-+	copy(c.key, key)
++	c := &aesCipher{kh: kh, key: bytes.Clone(key)}
 +	runtime.SetFinalizer(c, (*aesCipher).finalize)
 +	return c, nil
 +}
@@ -8158,10 +8158,10 @@ index 00000000000000..d1916f94a0a76d
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
 new file mode 100644
-index 00000000000000..b0784affba0aa4
+index 00000000000000..de3f05b84f1d82
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
-@@ -0,0 +1,107 @@
+@@ -0,0 +1,106 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8171,6 +8171,7 @@ index 00000000000000..b0784affba0aa4
 +package cng
 +
 +import (
++	"bytes"
 +	"crypto/cipher"
 +	"runtime"
 +
@@ -8191,8 +8192,7 @@ index 00000000000000..b0784affba0aa4
 +	if err != nil {
 +		return nil, err
 +	}
-+	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: make([]byte, len(key))}
-+	copy(c.key, key)
++	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: bytes.Clone(key)}
 +	runtime.SetFinalizer(c, (*desCipher).finalize)
 +	return c, nil
 +}
@@ -8202,8 +8202,7 @@ index 00000000000000..b0784affba0aa4
 +	if err != nil {
 +		return nil, err
 +	}
-+	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: make([]byte, len(key))}
-+	copy(c.key, key)
++	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: bytes.Clone(key)}
 +	runtime.SetFinalizer(c, (*desCipher).finalize)
 +	return c, nil
 +}
@@ -9182,10 +9181,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..c4f01e17dd4ca1
+index 00000000000000..87b1c95dc7f911
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,316 @@
+@@ -0,0 +1,306 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9195,6 +9194,7 @@ index 00000000000000..c4f01e17dd4ca1
 +package cng
 +
 +import (
++	"bytes"
 +	"crypto"
 +	"hash"
 +	"runtime"
@@ -9382,12 +9382,7 @@ index 00000000000000..c4f01e17dd4ca1
 +	if err != nil {
 +		panic(err)
 +	}
-+	h := new(hashX)
-+	h.alg = alg
-+	if len(key) > 0 {
-+		h.key = make([]byte, len(key))
-+		copy(h.key, key)
-+	}
++	h := &hashX{alg: alg, key: bytes.Clone(key)}
 +	// Don't allocate hx.buf nor call bcrypt.CreateHash yet,
 +	// which would be wasteful if the caller only wants to know
 +	// the hash type. This is a common pattern in this package,
@@ -9415,13 +9410,7 @@ index 00000000000000..c4f01e17dd4ca1
 +}
 +
 +func (h *hashX) Clone() (hash.Hash, error) {
-+	h2 := &hashX{
-+		alg: h.alg,
-+	}
-+	if h.key != nil {
-+		h2.key = make([]byte, len(h.key))
-+		copy(h2.key, h.key)
-+	}
++	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
 +	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
 +		return bcrypt.DuplicateHash(ctx, &h2._ctx, nil, 0)
 +	})
@@ -9504,10 +9493,10 @@ index 00000000000000..c4f01e17dd4ca1
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
-index 00000000000000..655926ef635224
+index 00000000000000..5338fb5c7b187c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -0,0 +1,175 @@
+@@ -0,0 +1,180 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9666,14 +9655,19 @@ index 00000000000000..655926ef635224
 +		return nil, errors.New("cng: unknown key data blob version")
 +	}
 +	// KEY_DATA_BLOB_VERSION1 format is:
-+	// cbHash uint32 // Big-endian
-+	// hashName [cbHash]byte
++	// cbHashName uint32 // Big-endian
++	// pHashName [cbHash]byte
 +	// key []byte // Rest of the blob
 +	if len(blob) < 4 {
 +		return nil, errors.New("cng: exported key is corrupted")
 +	}
-+	hashLength := binary.BigEndian.Uint32(blob[:])
-+	return blob[4+hashLength:], nil
++	cbHashName := binary.BigEndian.Uint32(blob)
++	blob = blob[4:]
++	if len(blob) < int(cbHashName) {
++		return nil, errors.New("cng: exported key is corrupted")
++	}
++	// Skip pHashName.
++	return blob[cbHashName:], nil
 +}
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
@@ -11461,7 +11455,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c0b83c9eeef..be1319fc942882 100644
+index cf5c0b83c9eeef..7c9bf41ea0bc87 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -11469,7 +11463,7 @@ index cf5c0b83c9eeef..be1319fc942882 100644
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
++# github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0015-Add-crypto-dsa-support.patch b/patches/0015-Add-crypto-dsa-support.patch
deleted file mode 100644
index bc39e97c717..00000000000
--- a/patches/0015-Add-crypto-dsa-support.patch
+++ /dev/null
@@ -1,37 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: mertakman <mertakman2012@gmail.com>
-Date: Thu, 14 Nov 2024 13:32:30 +0000
-Subject: [PATCH] Add crypto dsa support
-
----
- src/go.mod | 2 +-
- src/go.sum | 4 ++--
- 2 files changed, 3 insertions(+), 3 deletions(-)
-
-diff --git a/src/go.mod b/src/go.mod
-index 39d84e4165d654..8a95b6f65c63ef 100644
---- a/src/go.mod
-+++ b/src/go.mod
-@@ -4,7 +4,7 @@ go 1.24
- 
- require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
--	github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
- 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
- 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
- )
-diff --git a/src/go.sum b/src/go.sum
-index 116a769b257e34..54c859b46edd1c 100644
---- a/src/go.sum
-+++ b/src/go.sum
-@@ -1,7 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
--github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709 h1:Kno3m3hOXCrrJF9YphNJWNXm6MjIpflQrHWxAIRSIqA=
--github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d h1:UKPx/2ug3daetm1rPOKyEHovWbh3hekPK8p1wygTcOI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
- golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0016-Vendor-crypto-dsa-backends.patch b/patches/0016-Vendor-crypto-dsa-backends.patch
deleted file mode 100644
index 335b285d67e..00000000000
--- a/patches/0016-Vendor-crypto-dsa-backends.patch
+++ /dev/null
@@ -1,149 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: mertakman <mertakman2012@gmail.com>
-Date: Thu, 14 Nov 2024 13:32:53 +0000
-Subject: [PATCH] Vendor crypto dsa backends
-
----
- .../microsoft/go-crypto-winnative/cng/aes.go     |  4 ++--
- .../microsoft/go-crypto-winnative/cng/des.go     |  7 +++----
- .../microsoft/go-crypto-winnative/cng/hash.go    | 16 +++-------------
- .../microsoft/go-crypto-winnative/cng/hkdf.go    | 13 +++++++++----
- src/vendor/modules.txt                           |  2 +-
- 5 files changed, 18 insertions(+), 24 deletions(-)
-
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-index caac632894556e..097a0fc77f0adb 100644
---- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-@@ -7,6 +7,7 @@
- package cng
- 
- import (
-+	"bytes"
- 	"crypto/cipher"
- 	"errors"
- 	"runtime"
-@@ -28,8 +29,7 @@ func NewAESCipher(key []byte) (cipher.Block, error) {
- 	if err != nil {
- 		return nil, err
- 	}
--	c := &aesCipher{kh: kh, key: make([]byte, len(key))}
--	copy(c.key, key)
-+	c := &aesCipher{kh: kh, key: bytes.Clone(key)}
- 	runtime.SetFinalizer(c, (*aesCipher).finalize)
- 	return c, nil
- }
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
-index b0784affba0aa4..de3f05b84f1d82 100644
---- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
-@@ -7,6 +7,7 @@
- package cng
- 
- import (
-+	"bytes"
- 	"crypto/cipher"
- 	"runtime"
- 
-@@ -27,8 +28,7 @@ func NewDESCipher(key []byte) (cipher.Block, error) {
- 	if err != nil {
- 		return nil, err
- 	}
--	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: make([]byte, len(key))}
--	copy(c.key, key)
-+	c := &desCipher{kh: kh, alg: bcrypt.DES_ALGORITHM, key: bytes.Clone(key)}
- 	runtime.SetFinalizer(c, (*desCipher).finalize)
- 	return c, nil
- }
-@@ -38,8 +38,7 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
- 	if err != nil {
- 		return nil, err
- 	}
--	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: make([]byte, len(key))}
--	copy(c.key, key)
-+	c := &desCipher{kh: kh, alg: bcrypt.DES3_ALGORITHM, key: bytes.Clone(key)}
- 	runtime.SetFinalizer(c, (*desCipher).finalize)
- 	return c, nil
- }
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-index c4f01e17dd4ca1..87b1c95dc7f911 100644
---- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -7,6 +7,7 @@
- package cng
- 
- import (
-+	"bytes"
- 	"crypto"
- 	"hash"
- 	"runtime"
-@@ -194,12 +195,7 @@ func newHashX(id string, flag bcrypt.AlgorithmProviderFlags, key []byte) *hashX
- 	if err != nil {
- 		panic(err)
- 	}
--	h := new(hashX)
--	h.alg = alg
--	if len(key) > 0 {
--		h.key = make([]byte, len(key))
--		copy(h.key, key)
--	}
-+	h := &hashX{alg: alg, key: bytes.Clone(key)}
- 	// Don't allocate hx.buf nor call bcrypt.CreateHash yet,
- 	// which would be wasteful if the caller only wants to know
- 	// the hash type. This is a common pattern in this package,
-@@ -227,13 +223,7 @@ func (h *hashX) withCtx(fn func(ctx bcrypt.HASH_HANDLE) error) error {
- }
- 
- func (h *hashX) Clone() (hash.Hash, error) {
--	h2 := &hashX{
--		alg: h.alg,
--	}
--	if h.key != nil {
--		h2.key = make([]byte, len(h.key))
--		copy(h2.key, h.key)
--	}
-+	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
- 	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
- 		return bcrypt.DuplicateHash(ctx, &h2._ctx, nil, 0)
- 	})
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-index 655926ef635224..5338fb5c7b187c 100644
---- a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -156,14 +156,19 @@ func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
- 		return nil, errors.New("cng: unknown key data blob version")
- 	}
- 	// KEY_DATA_BLOB_VERSION1 format is:
--	// cbHash uint32 // Big-endian
--	// hashName [cbHash]byte
-+	// cbHashName uint32 // Big-endian
-+	// pHashName [cbHash]byte
- 	// key []byte // Rest of the blob
- 	if len(blob) < 4 {
- 		return nil, errors.New("cng: exported key is corrupted")
- 	}
--	hashLength := binary.BigEndian.Uint32(blob[:])
--	return blob[4+hashLength:], nil
-+	cbHashName := binary.BigEndian.Uint32(blob)
-+	blob = blob[4:]
-+	if len(blob) < int(cbHashName) {
-+		return nil, errors.New("cng: exported key is corrupted")
-+	}
-+	// Skip pHashName.
-+	return blob[cbHashName:], nil
- }
- 
- func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
-diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index be1319fc942882..7c9bf41ea0bc87 100644
---- a/src/vendor/modules.txt
-+++ b/src/vendor/modules.txt
-@@ -2,7 +2,7 @@
- ## explicit; go 1.22
- github.com/golang-fips/openssl/v2
- github.com/golang-fips/openssl/v2/bbig
--# github.com/microsoft/go-crypto-winnative v0.0.0-20240929074641-3e2be6d20709
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
- ## explicit; go 1.22
- github.com/microsoft/go-crypto-winnative/cng
- github.com/microsoft/go-crypto-winnative/cng/bbig

From 24554890030fff218cd741b8c758339fea8ded22 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 18 Nov 2024 13:49:15 +0100
Subject: [PATCH 099/887] Add initial version of the Developer Guide (#1402)

* Add initial version of the Developer Guide

* add TODO

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* expand developer guide

* improve dev guide

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 README.md                 |   2 +
 eng/doc/DeveloperGuide.md | 114 ++++++++++++++++++++++++++++++++++++++
 eng/doc/README.md         |   2 +-
 3 files changed, 117 insertions(+), 1 deletion(-)
 create mode 100644 eng/doc/DeveloperGuide.md

diff --git a/README.md b/README.md
index c3009378547..87cf443621f 100644
--- a/README.md
+++ b/README.md
@@ -138,6 +138,8 @@ This project has adopted the [Microsoft Open Source Code of Conduct](https://ope
 For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or
 contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.
 
+Please read the [Developer Guide](eng/doc/DeveloperGuide.md) for more information about contributing to this project.
+
 ## Trademarks
 
 This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft 
diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
new file mode 100644
index 00000000000..b82f332dab8
--- /dev/null
+++ b/eng/doc/DeveloperGuide.md
@@ -0,0 +1,114 @@
+# Developer Guide
+
+This document is a guide for developers who want to contribute to the Microsoft Go repository.
+It explains how to build the repository, how to work with the Go submodule, and how to use the different tools that help maintain the repository.
+
+This guide is primarily intended for developers working for the Go team at Microsoft, but it can also be useful for external contributors.
+
+## Setting up the repository
+
+### Contributor License Agreement
+
+Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution.
+For details, visit https://cla.opensource.microsoft.com.
+
+### Install a Go toolchain
+
+A preexisting Go toolchain is required to bootstrap the build process.
+You can use your system's package manager to install Go, or you can download it from the [official Go website](https://golang.org/dl/).
+The only requirement is that the Go version is high enough for the bootstrap process.
+If the version is too low, the bootstrap process will fail and ask you to install a newer version.
+
+This repository implements some scripts (provided by `eng/run.ps1`) to facilitate installing the correct bootstrapping Go version and also to build the Go toolchain from source, see the [`eng` Readme](../eng/README.md) for more information.
+It is recommended that you get familiar with both the upstream Go build process and the scripts provided in this repository.
+
+### Install git and the git-go-patch command
+
+This repository heavily relies on advanced Git features to manage the Go submodule, so it is recommended to develop with a local clone of the repository rather than using the GitHub web interface.
+
+You will need to have Git installed on your system, either from your system's package manager or from the [official Git website](https://git-scm.com/downloads).
+
+The [`git-go-patch`](https://github.com/microsoft/go-infra/tree/main/cmd/git-go-patch) command is a tool that helps you manage the patches in the `go` submodule.
+
+To install the `git-go-patch` command, run the following command:
+
+```
+go install github.com/microsoft/go-infra/cmd/go-patch@latest
+```
+
+> [!NOTE]
+> Make sure `git-go-patch` is accessible in your shell's `PATH` variable.
+> You may need to add `$GOPATH/bin` to your `PATH`. Use `go env GOPATH` to locate it.
+
+Then, run the command to see the help documentation:
+
+```
+git go-patch -h
+```
+
+> [!NOTE]
+> `git` detects that our `git-go-patch` executable starts with `git-` and makes it available as `git go-patch`.
+
+### Initialize the submodule and apply patches
+
+The repository uses a [Git submodule](https://git-scm.com/book/en/v2/Git-Tools-Submodules) named `go` to store the Go source code.
+All the patches that modify the Go source code are stored in the [`patches`](../../patches) directory.
+
+To initialize the submodule and apply the patches, run the following command:
+
+```
+git go-patch apply
+```
+
+### Build the Go toolchain
+
+You now can edit the `go/src` directory as you would the upstream Go project.
+[The upstream "Installing Go from source" instructions](https://go.dev/doc/install/source) apply to the `go` directory and can be used to build and test.
+
+In order to make changes to the standard library packages located in `go/src` you will first need to build to Go toolchain from the `go/src` directory itself using the following command:
+
+```
+cd go/src
+./make.bash # or make.bat on Windows
+```
+
+> [!NOTE]
+> Rebuilding the Go toolchain from source is not necessary for changes in the Go standard library, they are immediately reflected in any future `go build`, `go test`, or `go run` commands.
+> However, if you are making changes to the Go toolchain itself (any package under `go/src/cmd`), you will need to rebuild the Go toolchain.
+
+The newly built Go toolchain will be available in the `go/bin` directory. From now one this guide will assume that any mention of the `go` command refers to the one in the `go/bin` directory.
+There are different ways to use the new Go toolchain:
+- Add `go/bin` to your `PATH`, although but it is not recommended because it will probably contain unstable features that may interfere with other Go projects.
+- You can use the full path to the `go` command in the `go/bin` directory.
+- You can instruct your IDE to use the `go` command in the `go/bin` directory (recommended approach). See the [IDE setup](#ide-setup) section for more information.
+
+### Test that your environment is set up correctly
+
+To test that your environment is set up correctly, run the following command:
+
+```
+cd go/src
+go version
+go test -short ./...
+```
+
+## IDE setup
+
+### Visual Studio Code
+
+Visual Studio Code (VS Code from now on) is a popular IDE for Go development. We recommend using the official Go extension for VS Code.
+Please refer to the [Go extension documentation](https://code.visualstudio.com/docs/languages/go) for more information on how to set up VS Code for Go development.
+
+#### Using the Go toolchain from the `go` submodule
+
+You can use the Go toolchain from the `go` submodule in VS Code by following these steps:
+
+1. In VS Code, open `Command Palette's Help` > `Show All Commands`. Or use the keyboard shortcut (`Ctrl+Shift+P`).
+1. Search for `Go: Choose Go environment` then run the command from the pallet.
+1. Select `Choose from file browser`.
+1. Select the `go` command in the `go/bin` directory.
+1. Save the file and restart VS Code.
+
+## Making changes to go/src
+
+TODO
\ No newline at end of file
diff --git a/eng/doc/README.md b/eng/doc/README.md
index ee320e64e89..87eee3c4f46 100644
--- a/eng/doc/README.md
+++ b/eng/doc/README.md
@@ -2,7 +2,7 @@ This directory, `/eng/doc`, contains documents describing the Microsoft
 infrastructure used to build Go, in particular any designs that are not obvious
 by reading the infrastructure code itself.
 
-For dev scenario documentation, see [eng/README.md](/eng/README.md).
+For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
 
 The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.
 The [release-branch-links.json](release-branch-links.json) file contains the same data in JSON format suitable for parsing.

From 0cdbf6ae0e74dd0421b01a066768d6c862b3be84 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 19 Nov 2024 13:41:20 -0800
Subject: [PATCH 100/887] Enable notarization by default, with nothing to do
 (#1411)

---
 eng/_util/cmd/sign/archive.go | 55 ++++++++---------------------------
 eng/_util/cmd/sign/sign.go    | 36 +++++++++++------------
 2 files changed, 30 insertions(+), 61 deletions(-)

diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
index 701e83103eb..08fad345ab1 100644
--- a/eng/_util/cmd/sign/archive.go
+++ b/eng/_util/cmd/sign/archive.go
@@ -370,29 +370,17 @@ func (a *archive) prepareNotarize(ctx context.Context) ([]*fileToSign, error) {
 		return nil, nil
 	}
 
-	log.Printf("Creating zip containing the macOS tar.gz to notarize at %q", a.macNotarizePackPath())
-	if err := withZipCreate(a.macNotarizePackPath(), func(zw *zip.Writer) error {
-		w, err := zw.CreateHeader(&zip.FileHeader{
-			Name: a.name,
-		})
-		if err != nil {
-			return err
-		}
-		return withFileOpen(a.latestPath(), func(f *os.File) error {
-			_, err := io.Copy(w, f)
-			return err
-		})
-	}); err != nil {
-		return nil, err
-	}
-	return []*fileToSign{
-		{
-			originalPath: a.path,
-			fullPath:     a.macNotarizePackPath(),
-			authenticode: "8020", // Can't specify MacNotarize or MacAppName is not detected.
-			macAppName:   "MicrosoftGo",
-		},
-	}, nil
+	// Currently, we don't produce any macOS artifacts that can accept stapled notarization, like
+	// app bundles, disk images, or installers.
+	//
+	// The executable binaries inside our tar.gz archive are already notarized by the earlier
+	// "MacDeveloperHarden" step, and that's the best we can do. Individual file notarizations are
+	// not stapled: they are stored by Apple and downloaded on demand.
+	//
+	// If we do produce notarizable artifacts in the future, add the logic here to pack them in a
+	// zip and add logic to unpackNotarize to extract them back out, if zip submission is still a
+	// MicroBuild and/or ESRP requirement.
+	return nil, nil
 }
 
 func (a *archive) unpackNotarize(ctx context.Context) error {
@@ -404,26 +392,7 @@ func (a *archive) unpackNotarize(ctx context.Context) error {
 		return nil
 	}
 
-	a.notarizedPath = filepath.Join(a.workDir, a.name+".notarized")
-	log.Printf("Unpacking notarized content to %q", a.notarizedPath)
-	return withZipOpen(a.macNotarizePackPath(), func(zr *zip.ReadCloser) error {
-		return eachZipEntry(zr, func(f *zip.File) error {
-			if err := ctx.Err(); err != nil {
-				return err
-			}
-			if f.Name != a.name {
-				return fmt.Errorf("unexpected file in notarize zip: %q", f.Name)
-			}
-			return withFileCreate(a.notarizedPath, func(w *os.File) error {
-				r, err := f.Open()
-				if err != nil {
-					return err
-				}
-				_, err = io.Copy(w, r)
-				return cmp.Or(err, r.Close())
-			})
-		})
-	})
+	return nil
 }
 
 func (a *archive) prepareArchiveSignatures(ctx context.Context) ([]*fileToSign, error) {
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index 07c7a7bd31f..b1136205112 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -39,7 +39,6 @@ var (
 	tempDir          = flag.String("temp-dir", "eng/signing/signing-temp", "Directory to store temporary files.")
 	signingCsprojDir = flag.String("signing-csproj-dir", "eng/signing", "Directory containing Sign.csproj and related files.")
 
-	notarize = flag.Bool("notarize", false, "Notarize macOS archives. This is currently not working in the signing service.")
 	signType = flag.String("sign-type", "test", "Type of signing to perform. Options: test, real.")
 
 	timeout = flag.Duration("timeout", 0,
@@ -108,27 +107,23 @@ func run() error {
 		}
 	}
 
-	if *notarize {
-		log.Println("Notarizing macOS archives")
+	log.Println("Notarizing macOS archives")
 
-		filesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
-			return a.prepareNotarize(ctx)
-		})
-		if err != nil {
-			return err
-		}
+	filesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
+		return a.prepareNotarize(ctx)
+	})
+	if err != nil {
+		return err
+	}
 
-		if err := sign(ctx, "2-Notarize", filesToNotarize); err != nil {
-			return err
-		}
+	if err := sign(ctx, "2-Notarize", filesToNotarize); err != nil {
+		return err
+	}
 
-		for _, a := range archives {
-			if err := a.unpackNotarize(ctx); err != nil {
-				return err
-			}
+	for _, a := range archives {
+		if err := a.unpackNotarize(ctx); err != nil {
+			return err
 		}
-	} else {
-		log.Println("Skipping notarizing macOS archives")
 	}
 
 	log.Println("Creating signature files")
@@ -208,6 +203,11 @@ func findArchives(ctx context.Context, glob string) ([]*archive, error) {
 }
 
 func sign(ctx context.Context, step string, files []*fileToSign) error {
+	if len(files) == 0 {
+		log.Printf("No files to sign for step %q", step)
+		return nil
+	}
+
 	var sb strings.Builder
 	sb.WriteString("<Project>\n")
 	sb.WriteString("  <ItemGroup>\n")

From 01b7d5fe176b025d55c93467d57f020d7943d83e Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 19 Nov 2024 13:41:32 -0800
Subject: [PATCH 101/887] Fix official build dependency on Get-Stage0GoRoot
 (#1410)

---
 eng/pipeline/steps/install-gopdb.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/pipeline/steps/install-gopdb.yml b/eng/pipeline/steps/install-gopdb.yml
index 044d0243247..ba20d2da42f 100644
--- a/eng/pipeline/steps/install-gopdb.yml
+++ b/eng/pipeline/steps/install-gopdb.yml
@@ -26,9 +26,9 @@ steps:
 
   - pwsh: |
       . eng/utilities.ps1
-      $gobin = Get-Stage0GoRoot # Make sure we have a Go toolchain available
+      Download-Stage0 # Make sure we have a Go toolchain available
       cd go-pdb
-      & $gobin/bin/go.exe build -o $(pdbPath)/gopdb.exe ./cmd/gopdb
+      & go build -o $(pdbPath)/gopdb.exe ./cmd/gopdb
     displayName: Install gopdb
 
   - pwsh: |

From bf4210da690f48583ae5803e2cc8900c301652f3 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 19 Nov 2024 14:22:57 -0800
Subject: [PATCH 102/887] Developer guide edits (#1413)

* Improve "Clone and build" with pointers

* eng/doc/DeveloperGuide.md: various edits

* More PATH nuance, use established "go/bin" expectation

* Apply suggestions from code review

Co-authored-by: George Adams <georgeadams1995@gmail.com>

---------

Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 README.md                 | 28 ++++++--------
 eng/README.md             |  8 ++++
 eng/doc/DeveloperGuide.md | 79 ++++++++++++++++++++++++++-------------
 3 files changed, 74 insertions(+), 41 deletions(-)

diff --git a/README.md b/README.md
index 87cf443621f..7064b0dc31c 100644
--- a/README.md
+++ b/README.md
@@ -104,25 +104,21 @@ extracting the tar.gz file, build it using the
 
 #### Clone and build
 
-This repository wraps the upstream Go repository and includes build scripts that
-automate some aspects of the build process. See [eng/README.md](eng/README.md)
-for more details about the infrastructure.
+The first step is to clone this repository using Git and check out the desired
+tag or commit. The `zip` file that GitHub offers for download is incomplete: it
+doesn't include the `go` submodule.
 
-Prerequisites:
+If you want to contribute to the Microsoft Go project, read the [Developer
+Guide](eng/doc/DeveloperGuide.md). It lists the steps we recommend to set up a
+Microsoft Go development environment, execute your first Microsoft Go build, run
+the standard library test suite, and contribute a PR.
 
-* [PowerShell 6+](https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell)
-* [Go install from source prerequisites](https://go.dev/doc/install/source)
-  * Exception: this repository's build script automatically downloads a
-    bootstrap version of Go.
+If you just want to build Microsoft Go on your own machine, you may find it more
+convenient to use the tools provided by the `eng/run.ps1` script. We use this
+script for CI builds. See [eng/README.md](eng/README.md) for more details about
+`eng/run.ps1` and other repository infrastructure.
 
-After cloning the repository and checking out the desired tag or commit, use the
-following build command:
-
-```
-pwsh eng/run.ps1 build -refresh
-```
-
-The resulting Go binary can then be found at `go/bin/go`.
+Once built, the Microsoft Go binary is found at `go/bin/go`.
 
 ## Contributing
 
diff --git a/eng/README.md b/eng/README.md
index 9aa1ec0faf0..5f43b5fabb3 100644
--- a/eng/README.md
+++ b/eng/README.md
@@ -23,6 +23,14 @@ submodule to new Go commits.
 
 ## Building Go
 
+Prerequisites:
+
+* [Git](https://git-scm.com/downloads)
+* [PowerShell 6+](https://docs.microsoft.com/en-us/powershell/scripting/install/installing-powershell)
+* [Go install from source prerequisites](https://go.dev/doc/install/source)
+  * Exception: this repository's build script automatically downloads a
+    bootstrap version of Go.
+
 In the root of the repository, run this command:
 
 ```pwsh
diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index b82f332dab8..231c241d453 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -15,18 +15,29 @@ For details, visit https://cla.opensource.microsoft.com.
 ### Install a Go toolchain
 
 A preexisting Go toolchain is required to bootstrap the build process.
-You can use your system's package manager to install Go, or you can download it from the [official Go website](https://golang.org/dl/).
+You can use your system's package manager to install Go, download Go from the [official Go website](https://golang.org/dl/), or download a prebuilt version of Microsoft Go itself.
+
 The only requirement is that the Go version is high enough for the bootstrap process.
-If the version is too low, the bootstrap process will fail and ask you to install a newer version.
+If you attempt to build Go while using a bootstrap Go with a version that is too low, the bootstrap process will fail and ask you to install a newer version.
+
+> [!NOTE]
+> The in-support versions of Go found on the [official Go website](https://golang.org/dl/) are always high enough to bootstrap the development branch.
+> This is because:
+> * The [last two major versions of Go are supported by the Go project](https://go.dev/s/release#release-maintenance). (Microsoft Go has the same policy.)
+> * Go N can always be bootstrapped by [both N-1 and N-2](https://tip.golang.org/doc/install/source#go14).
 
-This repository implements some scripts (provided by `eng/run.ps1`) to facilitate installing the correct bootstrapping Go version and also to build the Go toolchain from source, see the [`eng` Readme](../eng/README.md) for more information.
-It is recommended that you get familiar with both the upstream Go build process and the scripts provided in this repository.
+> [!NOTE]
+> This repository's `eng/run.ps1` PowerShell script is able to download a correct bootstrapping Go version automatically before building Microsoft Go from source.
+> We recommend that Microsoft Go team members be familiar with this script because it is used by Microsoft Go CI.
+> However, it isn't necessary to use the script for most work on the Microsoft Go patches.
+> See the [`eng` Readme](/eng/README.md) for more information about `eng/run.ps1`.
 
 ### Install git and the git-go-patch command
 
-This repository heavily relies on advanced Git features to manage the Go submodule, so it is recommended to develop with a local clone of the repository rather than using the GitHub web interface.
+This repository heavily relies on advanced Git features to manage the Go submodule, so it is recommended to develop with a local Git clone of the repository rather than other methods, e.g. using the GitHub web interface.
 
-You will need to have Git installed on your system, either from your system's package manager or from the [official Git website](https://git-scm.com/downloads).
+Make sure Git is installed on your system.
+You can get Git from your system's package manager or the [official Git website](https://git-scm.com/downloads).
 
 The [`git-go-patch`](https://github.com/microsoft/go-infra/tree/main/cmd/git-go-patch) command is a tool that helps you manage the patches in the `go` submodule.
 
@@ -64,27 +75,41 @@ git go-patch apply
 
 You now can edit the `go/src` directory as you would the upstream Go project.
 [The upstream "Installing Go from source" instructions](https://go.dev/doc/install/source) apply to the `go` directory and can be used to build and test.
+We recommend reading the upstream instructions, but we've included some minimal instructions here to get started.
 
-In order to make changes to the standard library packages located in `go/src` you will first need to build to Go toolchain from the `go/src` directory itself using the following command:
+First, use the following commands to build the Go toolchain using the source in the `go/src` directory:
 
-```
-cd go/src
-./make.bash # or make.bat on Windows
-```
+- On Unix-like systems:
+    ```bash
+    cd go/src
+    ./make.bash
+    ```
+
+- On Windows:
+    ```bat
+    cd go/src
+    .\make.bat
+    ```
+
+The newly built Go toolchain will be available in the `go/bin` directory.
+An app built by `go/bin/go` will use the standard library in `go/src`, so changes that you make to the standard library are reflected in the built app.
+
+From now on, when this guide mentions the `go` command, it refers to executing the `go` binary in the `go/bin` directory.
 
 > [!NOTE]
-> Rebuilding the Go toolchain from source is not necessary for changes in the Go standard library, they are immediately reflected in any future `go build`, `go test`, or `go run` commands.
-> However, if you are making changes to the Go toolchain itself (any package under `go/src/cmd`), you will need to rebuild the Go toolchain.
+> Rebuilding the Go toolchain from source is not necessary for changes in the Go standard library: changes are immediately reflected in any `go build`, `go test`, or `go run` commands.
+> However, if you make changes to the Go toolchain itself (any package under `go/src/cmd`), you do need to rebuild the Go toolchain.
 
-The newly built Go toolchain will be available in the `go/bin` directory. From now one this guide will assume that any mention of the `go` command refers to the one in the `go/bin` directory.
 There are different ways to use the new Go toolchain:
-- Add `go/bin` to your `PATH`, although but it is not recommended because it will probably contain unstable features that may interfere with other Go projects.
-- You can use the full path to the `go` command in the `go/bin` directory.
-- You can instruct your IDE to use the `go` command in the `go/bin` directory (recommended approach). See the [IDE setup](#ide-setup) section for more information.
+
+- Use the full path to the `go` command.
+- Add the full path of `go/bin` to the start of `PATH`.
+  - We only recommend setting `PATH` in a specific terminal session, not user-wide or system-wide. The development version of Go will probably contain unstable features that may interfere with your other Go projects.
+- Instruct your IDE to use the `go` command. Recommended approach for most development work. See the [IDE setup](#ide-setup) section for more information.
 
 ### Test that your environment is set up correctly
 
-To test that your environment is set up correctly, run the following command:
+To test that your environment is set up correctly, run the following commands, which work the same on all platforms:
 
 ```
 cd go/src
@@ -94,20 +119,24 @@ go test -short ./...
 
 ## IDE setup
 
-### Visual Studio Code
+### VS Code
 
-Visual Studio Code (VS Code from now on) is a popular IDE for Go development. We recommend using the official Go extension for VS Code.
+[VS Code](https://code.visualstudio.com/) (Visual Studio Code) is a popular IDE for Go development.
+We recommend using the official Go extension for VS Code.
 Please refer to the [Go extension documentation](https://code.visualstudio.com/docs/languages/go) for more information on how to set up VS Code for Go development.
 
 #### Using the Go toolchain from the `go` submodule
 
-You can use the Go toolchain from the `go` submodule in VS Code by following these steps:
+You can use your build of `go` in VS Code by following these steps:
 
-1. In VS Code, open `Command Palette's Help` > `Show All Commands`. Or use the keyboard shortcut (`Ctrl+Shift+P`).
-1. Search for `Go: Choose Go environment` then run the command from the pallet.
+1. In VS Code, open the command palette.
+    - `View` > `Command Palette...`.
+    - Default keyboard shortcut: `Ctrl+Shift+P`.
+1. Search for `Go: Choose Go environment` and select it.
 1. Select `Choose from file browser`.
-1. Select the `go` command in the `go/bin` directory.
-1. Save the file and restart VS Code.
+1. Select the `go` executable in the `go/bin` directory. (On Windows, `go.exe`.)
+1. Open the command palette.
+1. Search for `Developer: Reload Window` and select it.
 
 ## Making changes to go/src
 

From bdf9fca502ebafbe42065c68620fdf3710247f8e Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 20 Nov 2024 12:05:40 +0000
Subject: [PATCH 103/887] fix:add making changes section to DeveloperGuide

---
 eng/doc/DeveloperGuide.md | 64 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 62 insertions(+), 2 deletions(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 231c241d453..6246e61b7e4 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -138,6 +138,66 @@ You can use your build of `go` in VS Code by following these steps:
 1. Open the command palette.
 1. Search for `Developer: Reload Window` and select it.
 
-## Making changes to go/src
+## Making Changes to `go/src`
 
-TODO
\ No newline at end of file
+### Preparing `go/src` folder
+As mentioned above, after downloading the submodule using the command:
+
+```bash
+git submodule update --init --recursive
+```
+
+and applying all changes from patch files with:
+
+```bash
+git go-patch apply
+```
+
+fully prepared go/src directory will be created. From this point forward, all tasks related to vendoring, updating the go.mod file, and running tests should exclusively utilize the Go toolchain provided by the go submodule.
+
+It is crucial to note that the Go version and source code within the submodule may differ from your local setup. As a result, tests that pass in your local environment may fail in the submodule environment, and tests that pass in the submodule may fail locally. Always validate your changes within the submodule context to ensure compatibility and consistency.
+
+### Making Changes
+
+Once the `go/src` folder is prepared, any modifications made to this directory will be tracked by the Git history of the submodule. You can view these changes by running:
+
+```bash
+git status
+```
+
+To create patch files from the changes, you must commit them. Only committed changes will be extracted by go-patch and included in the patch files.
+
+### Generating New Patch Files
+
+After making changes in the `go/src` directory, you must commit your changes following the standard Git process. For example:
+
+```bash
+git add . --all
+git commit -m "example"
+```
+
+This will create a commit with the message "example" in the Git log. 
+
+Then, when you run:
+
+```bash
+git go-patch extract
+```
+
+The `go-patch` command will generate a patch file under the `go/patches` directory. The patch file will be prefixed with a serial number (one greater than the number of existing patch files), followed by a dash-separated commit message.
+
+### Squashing Changes to Existing Patch Files
+
+Creating new patch files is not always necessary when there are existing patch files with similar purposes for the same files. In such cases, you can squash new commits on top of the existing ones to update their contents. The go-patch extract command will detect the differences in these commits and regenerate the patch files with the updated contents.
+
+Before starting work, please check the go/patches folder for any existing patch files related to the files you're working on. This helps maintain a clean repository by avoiding redundant patch files.
+
+### Rolling Back Changes in `go/src`
+
+We do not retain changes in the submodule after generating patch files, as this approach is similar to maintaining a fork. The submodule is pinned to a specific commit hash, and we always start from that point, applying patch files on top of it. Therefore, once the work is complete and patch files are generated, it is essential to clean up the working directory. 
+
+Additionally, any new commits will cause `git go-patch extract` to generate new patch files. To return the `go/src` directory to its initial state after completing your work, run the following command:
+
+```bash
+git submodule update --init --recursive --checkout
+```

From 1e1b6caa6d9820cbdce358c3ed0cf4d5b5149aa0 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 20 Nov 2024 13:50:19 +0000
Subject: [PATCH 104/887] fix:remove paragraph that adds duplicate information

---
 eng/doc/DeveloperGuide.md | 19 -------------------
 1 file changed, 19 deletions(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 6246e61b7e4..4629787f13c 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -140,25 +140,6 @@ You can use your build of `go` in VS Code by following these steps:
 
 ## Making Changes to `go/src`
 
-### Preparing `go/src` folder
-As mentioned above, after downloading the submodule using the command:
-
-```bash
-git submodule update --init --recursive
-```
-
-and applying all changes from patch files with:
-
-```bash
-git go-patch apply
-```
-
-fully prepared go/src directory will be created. From this point forward, all tasks related to vendoring, updating the go.mod file, and running tests should exclusively utilize the Go toolchain provided by the go submodule.
-
-It is crucial to note that the Go version and source code within the submodule may differ from your local setup. As a result, tests that pass in your local environment may fail in the submodule environment, and tests that pass in the submodule may fail locally. Always validate your changes within the submodule context to ensure compatibility and consistency.
-
-### Making Changes
-
 Once the `go/src` folder is prepared, any modifications made to this directory will be tracked by the Git history of the submodule. You can view these changes by running:
 
 ```bash

From b67a64b6aa4faeffed00205ef01cf157bb0d28a0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 Nov 2024 10:27:50 +0000
Subject: [PATCH 105/887] Bump github/codeql-action from 3.27.4 to 3.27.5

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ea9e4e37992a54ee68a9622e985e60c8e8f12d9f...f09c1c0a94de965c15400f5634aa42fac8fb8f88)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 86cc16d6f26..0e787aea59c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
+        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
         with:
           category: /language:go

From 9e54e242d3f728cb0bb95d5756219dec6845ddc4 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 21 Nov 2024 11:51:03 +0000
Subject: [PATCH 106/887] fix:remove capital prefixes from title

---
 eng/doc/DeveloperGuide.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 4629787f13c..21bcd092165 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -138,7 +138,7 @@ You can use your build of `go` in VS Code by following these steps:
 1. Open the command palette.
 1. Search for `Developer: Reload Window` and select it.
 
-## Making Changes to `go/src`
+## Making changes to `go/src`
 
 Once the `go/src` folder is prepared, any modifications made to this directory will be tracked by the Git history of the submodule. You can view these changes by running:
 

From 543d480f1802ddd01354f925fe96d2d55686bb5b Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 25 Nov 2024 01:39:55 +0000
Subject: [PATCH 107/887] fix: reconstruct latest paragraph to give better
 explanation of changes

---
 eng/doc/DeveloperGuide.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 21bcd092165..b217ab8561e 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -173,12 +173,11 @@ Creating new patch files is not always necessary when there are existing patch f
 
 Before starting work, please check the go/patches folder for any existing patch files related to the files you're working on. This helps maintain a clean repository by avoiding redundant patch files.
 
-### Rolling Back Changes in `go/src`
-
-We do not retain changes in the submodule after generating patch files, as this approach is similar to maintaining a fork. The submodule is pinned to a specific commit hash, and we always start from that point, applying patch files on top of it. Therefore, once the work is complete and patch files are generated, it is essential to clean up the working directory. 
-
-Additionally, any new commits will cause `git go-patch extract` to generate new patch files. To return the `go/src` directory to its initial state after completing your work, run the following command:
+### Submitting Changes
 
+When working with the `go/src` submodule, changes should not be committed directly. Instead, we use patch files to manage modifications. Since the submodule is pinned to a specific commit hash, we always start from that state and apply patch files on top. This approach avoids the need to maintain a fork and ensures consistency.
+After generating the required patch files and completing your work, it is crucial to clean up the submodule to prevent any changes from being committed. To restore the submodule to its original state, execute the following command:
 ```bash
 git submodule update --init --recursive --checkout
 ```
+This ensures the submodule remains clean and aligned with its designated commit state. Once done, you can proceed to commit the patch files to your pull request.

From 81b15597190415266a0718436c35c5250834e163 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 26 Nov 2024 08:55:16 -0800
Subject: [PATCH 108/887] Developer guide edits: rebase, cleanup, PRs, format
 (#1420)

* Fix formatting

* Mention git go-patch rebase; clarify cleanup; more about PR

* Folder -> directory, clearer inline commands

* Style: only use "will" for things that happen in the non-immediate future or conditionally

* Focus the sections; add dedicated patch update section; other edits
---
 eng/doc/DeveloperGuide.md | 111 +++++++++++++++++++++++++++++++-------
 1 file changed, 93 insertions(+), 18 deletions(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index b217ab8561e..7f95f61ff70 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -91,8 +91,8 @@ First, use the following commands to build the Go toolchain using the source in
     .\make.bat
     ```
 
-The newly built Go toolchain will be available in the `go/bin` directory.
-An app built by `go/bin/go` will use the standard library in `go/src`, so changes that you make to the standard library are reflected in the built app.
+The newly built Go toolchain is available in the `go/bin` directory.
+An app built by `go/bin/go` uses the standard library in `go/src`, so changes that you make to the standard library are reflected in the built app.
 
 From now on, when this guide mentions the `go` command, it refers to executing the `go` binary in the `go/bin` directory.
 
@@ -138,46 +138,121 @@ You can use your build of `go` in VS Code by following these steps:
 1. Open the command palette.
 1. Search for `Developer: Reload Window` and select it.
 
-## Making changes to `go/src`
+## Making changes to `go`
 
-Once the `go/src` folder is prepared, any modifications made to this directory will be tracked by the Git history of the submodule. You can view these changes by running:
+Once the `go` directory is prepared, it is a submodule, a semi-independent Git repository.
+Git tracks changes in `go` separately from the main repository.
+
+You can view the changes tracked in `go` by running:
 
 ```bash
+cd go
 git status
 ```
 
-To create patch files from the changes, you must commit them. Only committed changes will be extracted by go-patch and included in the patch files.
+A Git GUI that supports submodules shows the statuses of both the main repository and the `go` submodule.
+
+> [!NOTE]
+> In this section, many commands expect that your console's working directory is somewhere inside the submodule.
+> This is indicated by a code sample starting with `cd go`.
+> If you use the same console session, you don't need to run the `cd` command again.
+>
+> The `git go-patch` subcommands don't require that your working directory is in the submodule.
+> However, we recommend running them inside the submodule anyway because it makes the workflow less confusing and error-prone.
+
+At this point, you can make changes, run tests, rebuild, and use the built Go toolchain in external projects.
+Most of the interesting Go code to modify is in `go/src`.
 
-### Generating New Patch Files
+Once you have made changes that work as you expect, move on to the next step.
 
-After making changes in the `go/src` directory, you must commit your changes following the standard Git process. For example:
+### Generating new patch files
+
+After making changes in the `go` directory, you must commit your changes following the standard Git process.
+For example:
 
 ```bash
+cd go
 git add . --all
 git commit -m "example"
 ```
 
-This will create a commit with the message "example" in the Git log. 
+This creates a commit with the message "example" in the Git log. 
+
+### Changing existing patch files
+
+Creating new patch files is not always necessary.
+It often makes more sense to update an existing patch file because the changes serve the same purpose.
+In such cases, you can squash new commits on top of the existing ones to update their contents.
+You can also amend commits directly.
 
-Then, when you run:
+Before submitting a PR, check the `patches` directory or submodule history for any existing patches related to the files you're working on.
+We prefer to avoid redundant patch files to keep the repository clean and easy to review.
+
+To squash commits, amend them, and more, use a rebase.
+We recommend using an [*interactive rebase*](https://git-scm.com/docs/git-rebase#_interactive_mode).
+The patching tool can start an interactive rebase session for you.
+To do this, run:
 
 ```bash
-git go-patch extract
+cd go
+git go-patch rebase
 ```
 
-The `go-patch` command will generate a patch file under the `go/patches` directory. The patch file will be prefixed with a serial number (one greater than the number of existing patch files), followed by a dash-separated commit message.
+Make sure the rebase is complete before continuing.
+If you're unsure, check `git status` in the submodule.
+
+### Updating `patches`
+
+So far, your change only exists inside the `go` submodule's Git state.
+To extract your change into a new patch file or update the existing patch files, run:
+
+```bash
+cd go
+git go-patch extract
+```
 
-### Squashing Changes to Existing Patch Files
+Each automatically generated patch filename has a serial number prefix followed by a dash-separated commit message.
+They are human-readable text files, but you shouldn't edit or rename them manually.
 
-Creating new patch files is not always necessary when there are existing patch files with similar purposes for the same files. In such cases, you can squash new commits on top of the existing ones to update their contents. The go-patch extract command will detect the differences in these commits and regenerate the patch files with the updated contents.
+### Submitting changes
 
-Before starting work, please check the go/patches folder for any existing patch files related to the files you're working on. This helps maintain a clean repository by avoiding redundant patch files.
+When working with the `go` submodule, you may notice that outside the submodule, Git marks the `go` submodule as modified.
+It's important to **not** commit this change.
 
-### Submitting Changes
+One way to avoid committing the change is to clean up the submodule after completing your work on the patches.
+To restore the submodule to its original state, execute the following command:
 
-When working with the `go/src` submodule, changes should not be committed directly. Instead, we use patch files to manage modifications. Since the submodule is pinned to a specific commit hash, we always start from that state and apply patch files on top. This approach avoids the need to maintain a fork and ensures consistency.
-After generating the required patch files and completing your work, it is crucial to clean up the submodule to prevent any changes from being committed. To restore the submodule to its original state, execute the following command:
 ```bash
 git submodule update --init --recursive --checkout
 ```
-This ensures the submodule remains clean and aligned with its designated commit state. Once done, you can proceed to commit the patch files to your pull request.
+
+This allows you to use `git add .`, `git commit -a`, and similar commands without concern.
+
+If you make a mistake and commit the submodule change, PR tests will fail harmlessly.
+
+> [!NOTE]
+> If you use `git add [...]` or a GUI to selectively stage and commit changes, it isn't necessary to clean up the submodule.
+> It may be useful to keep the submodule dirty for faster iteration on the patches in response to PR feedback and test results.
+
+Commit the patch file changes.
+
+If you have write access to the `microsoft/go` repository, push the changes to a branch named `dev/<your GitHub username>/<topic>`.
+The `dev/` prefix is important, `your GitHub username` isn't as important, and `topic` is unimportant but helps you organize and recognize your own work.
+
+If you don't have write access, use a GitHub fork, and give the branch any name you want.
+
+Submit a GitHub PR with your change.
+Include a short description and links to related GitHub issues if any exist.
+If you submit the PR to a release branch, add a `[<branch>]` prefix to the PR title, such as `[release-branch.go1.22] Support TLS 1.3`.
+
+### Merging changes
+
+If you don't have write access to `microsoft/go`, wait for a maintainer to review and merge your PR.
+
+If you do have write access, in general, wait for two review approvals before merging your PR.
+Exceptions where only one approval is necessary:
+
+* Small documentation updates.
+* Backports to release branches without significant changes.
+
+Squash, rebase, and merge-commit merges are all acceptable.

From f3c66c88dda3da35a2b16899187fd9e7cd30f455 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 18 Nov 2024 15:20:34 +0100
Subject: [PATCH 109/887] add initial DSA support

---
 .../0002-Add-crypto-backend-foundation.patch  | 54 ++++++++++++++++---
 .../0003-Add-BoringSSL-crypto-backend.patch   | 20 ++++---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 22 +++++---
 patches/0005-Add-CNG-crypto-backend.patch     | 22 ++++++--
 4 files changed, 94 insertions(+), 24 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 159be26ee44..1d1729c9115 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -8,6 +8,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/aes/cipher_asm.go                 |   2 +-
  src/crypto/boring/boring.go                  |   2 +-
  src/crypto/des/cipher.go                     |   7 +
+ src/crypto/dsa/dsa.go                        |  13 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
  src/crypto/ecdh/nist.go                      |   2 +-
  src/crypto/ecdsa/boring.go                   |   4 +-
@@ -23,7 +24,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/backend/bbig/big.go      |  17 ++
  src/crypto/internal/backend/common.go        |  92 +++++++++
  src/crypto/internal/backend/isrequirefips.go |   9 +
- src/crypto/internal/backend/nobackend.go     | 193 +++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go     | 201 +++++++++++++++++++
  src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
  src/crypto/md5/md5.go                        |   7 +
@@ -51,7 +52,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server.go           |  25 ++-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
  src/crypto/tls/key_schedule.go               |  18 +-
- src/crypto/tls/prf.go                        |  77 +++++---
+ src/crypto/tls/prf.go                        |  77 ++++---
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
@@ -60,7 +61,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   5 +
  src/net/smtp/smtp_test.go                    |  72 ++++---
  src/runtime/runtime_boring.go                |   5 +
- 56 files changed, 893 insertions(+), 106 deletions(-)
+ 57 files changed, 914 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -144,6 +145,37 @@ index 04b73e7d3bf758..0891652a4566fb 100644
  
  	c := new(tripleDESCipher)
  	c.cipher1.generateSubkeys(key[:8])
+diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
+index 4524bd492feba0..3937865aee7ef8 100644
+--- a/src/crypto/dsa/dsa.go
++++ b/src/crypto/dsa/dsa.go
+@@ -18,6 +18,8 @@ import (
+ 	"io"
+ 	"math/big"
+ 
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/randutil"
+ )
+ 
+@@ -86,6 +88,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
+ 		return errors.New("crypto/dsa: invalid ParameterSizes")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsDSA(L, N) {
++		p, q, g, err := boring.GenerateDSAParameters(L, N)
++		if err != nil {
++			return err
++		}
++		params.P = bbig.Dec(p)
++		params.Q = bbig.Dec(q)
++		params.G = bbig.Dec(g)
++		return nil
++	}
++
+ 	qBytes := make([]byte, N/8)
+ 	pBytes := make([]byte, L/8)
+ 
 diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
 index b7c26f91e57f02..7a12e2bbaaafd1 100644
 --- a/src/crypto/ecdh/ecdh.go
@@ -657,10 +689,10 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..08600a2c833ac7
+index 00000000000000..cc224d339ee4e9
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,193 @@
+@@ -0,0 +1,201 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -706,8 +738,8 @@ index 00000000000000..08600a2c833ac7
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
++func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { panic("cryptobackend: not available") }
 +func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
 +
 +type PublicKeyECDSA struct{ _ int }
@@ -854,6 +886,14 @@ index 00000000000000..08600a2c833ac7
 +func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateDSAParameters(l, n int) (p, q, g BigInt, err error) {
++	panic("cryptobackend: not available")
++}
 diff --git a/src/crypto/internal/backend/norequirefips.go b/src/crypto/internal/backend/norequirefips.go
 new file mode 100644
 index 00000000000000..26bfb5f6a643f3
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 430b91187d5..89cbb8792b7 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,8 +5,8 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 225 ++++++++++++++++++
- 2 files changed, 237 insertions(+)
+ src/crypto/internal/backend/boring_linux.go   | 233 ++++++++++++++++++
+ 2 files changed, 245 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
 
@@ -30,10 +30,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..7c5fbeea717618
+index 00000000000000..6cecf976fa6a9b
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,225 @@
+@@ -0,0 +1,233 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -82,8 +82,8 @@ index 00000000000000..7c5fbeea717618
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return boring.NewHMAC(h, key) }
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) { return boring.NewAESCipher(key) }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS(c) }
++func NewAESCipher(key []byte) (cipher.Block, error)   { return boring.NewAESCipher(key) }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return boring.NewGCMTLS(c) }
 +func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS13(c) }
 +
 +type PublicKeyECDSA = boring.PublicKeyECDSA
@@ -259,3 +259,11 @@ index 00000000000000..7c5fbeea717618
 +func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateDSAParameters(l, n int) (p, q, g boring.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 938e6927e2d..83188497d77 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 323 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 333 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 408 insertions(+), 25 deletions(-)
+ 36 files changed, 418 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..69af0ffe2fcf80
+index 00000000000000..e0208441429955
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,323 @@
+@@ -0,0 +1,333 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -218,6 +218,7 @@ index 00000000000000..69af0ffe2fcf80
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
++	"github.com/microsoft/go-crypto-winnative/cng"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -520,6 +521,15 @@ index 00000000000000..69af0ffe2fcf80
 +func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
 +	return openssl.VerifyEd25519(pub, message, sig)
 +}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateDSAParameters(l, n int) (p, q, g cng.BigInt, err error) {
++	// TODO
++	panic("Mert should implement")
++}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644
 --- a/src/crypto/internal/boring/fipstls/stub.s
@@ -586,10 +596,10 @@ index 34c22c8fbba7da..933ac569e034a8 100644
  package rsa
  
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 86466e67e87eeb..dbcc1bec58bd46 100644
+index c6294694521c69..ab99b176ac9540 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
-@@ -690,6 +690,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -700,6 +700,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index adac4e6644f..43d89c46350 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -7,13 +7,13 @@ Subject: [PATCH] Add CNG crypto backend
  src/cmd/api/boring_test.go                    |   2 +-
  src/cmd/go/go_boring_test.go                  |   2 +-
  src/crypto/boring/boring.go                   |   2 +-
- src/crypto/ecdsa/badlinkname.go               |  17 ++
+ src/crypto/ecdsa/badlinkname.go               |  17 +
  src/crypto/ecdsa/boring.go                    |   2 +-
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 280 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 292 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 375 insertions(+), 27 deletions(-)
+ 36 files changed, 387 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..3d3d13709de5ac
+index 00000000000000..6c62c79982bdd6
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,280 @@
+@@ -0,0 +1,292 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -467,6 +467,18 @@ index 00000000000000..3d3d13709de5ac
 +func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsDSA(l, n int) bool {
++	return n != 224
++}
++
++func GenerateDSAParameters(l, n int) (p, q, g cng.BigInt, err error) {
++	params, err := cng.GenerateDSAParameters(l)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	return params.P, params.Q, params.G, nil
++}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 index bc595e91024f11..7766d674f5cfaf 100644
 --- a/src/crypto/internal/backend/common.go

From dfcf6a29edd185b8737bfd58e8936679a28ffebd Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 27 Nov 2024 14:54:47 +0000
Subject: [PATCH 110/887] fix:update supportdsa and generatedsaparameters
 functions

---
 go                                            |  2 +-
 patches/0004-Add-OpenSSL-crypto-backend.patch | 17 ++++++++---------
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/go b/go
index b33fc480a25..a1407f03270 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit b33fc480a25c30d38104a9efaf73326c888e8557
+Subproject commit a1407f03270450f2e56605b69bddebcb881a0658
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 83188497d77..2b9610745d9 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 333 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 418 insertions(+), 25 deletions(-)
+ 36 files changed, 417 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..e0208441429955
+index 00000000000000..7ff09906b8d07b
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,333 @@
+@@ -0,0 +1,332 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -218,7 +218,6 @@ index 00000000000000..e0208441429955
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
-+	"github.com/microsoft/go-crypto-winnative/cng"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -523,12 +522,12 @@ index 00000000000000..e0208441429955
 +}
 +
 +func SupportsDSA(l, n int) bool {
-+	return false
++	return openssl.SupportsDSA()
 +}
 +
-+func GenerateDSAParameters(l, n int) (p, q, g cng.BigInt, err error) {
-+	// TODO
-+	panic("Mert should implement")
++func GenerateDSAParameters(l, n int) (p, q, g openssl.BigInt, err error) {
++	params, err := openssl.GenerateDSAParameters(l, n)
++	return params.P, params.Q, params.G, err
 +}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644

From 7099b2667089f07104e89be1c4e57ebbfa7f6330 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 27 Nov 2024 15:01:04 +0000
Subject: [PATCH 111/887] fix:revert changes accidentally committed to
 submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a1407f03270..b33fc480a25 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a1407f03270450f2e56605b69bddebcb881a0658
+Subproject commit b33fc480a25c30d38104a9efaf73326c888e8557

From 6ff3e0120d15c064f191fa3a83320f6836359a2e Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 28 Nov 2024 17:03:10 +0000
Subject: [PATCH 112/887] fix:consistently panic in nobackend

---
 patches/0002-Add-crypto-backend-foundation.patch | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 1d1729c9115..2bee5dcda14 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,6 +3,7 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
+fix:nobackend panic consistently without return
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
@@ -689,7 +690,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..cc224d339ee4e9
+index 00000000000000..9204848708436e
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,201 @@
@@ -888,7 +889,7 @@ index 00000000000000..cc224d339ee4e9
 +}
 +
 +func SupportsDSA(l, n int) bool {
-+	return false
++	panic("cryptobackend: not available")
 +}
 +
 +func GenerateDSAParameters(l, n int) (p, q, g BigInt, err error) {

From b19ce4a54233cdc7cf350ddca403d59894f2063c Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 2 Dec 2024 03:49:05 +0000
Subject: [PATCH 113/887] fix:add better clause and more descriptive
 SupportsDSA function

---
 patches/0005-Add-CNG-crypto-backend.patch | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 43d89c46350..0da11ecfda8 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 292 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 293 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 387 insertions(+), 27 deletions(-)
+ 36 files changed, 388 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..6c62c79982bdd6
+index 00000000000000..39c3c7043ab720
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,292 @@
+@@ -0,0 +1,293 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -469,7 +469,8 @@ index 00000000000000..6c62c79982bdd6
 +}
 +
 +func SupportsDSA(l, n int) bool {
-+	return n != 224
++	// These are the only N values supported by CNG
++	return n == 160 || n == 256
 +}
 +
 +func GenerateDSAParameters(l, n int) (p, q, g cng.BigInt, err error) {

From 9eb540f6c13e3c455c2034a51157d731ed2bb6f8 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 2 Dec 2024 18:13:38 +0000
Subject: [PATCH 114/887] fix:remove commit note line

---
 patches/0002-Add-crypto-backend-foundation.patch | 1 -
 1 file changed, 1 deletion(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 2bee5dcda14..66257f9d55d 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,7 +3,6 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
-fix:nobackend panic consistently without return
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-

From f1d4ce373bb66010472cd1b329f6f64abfd5ad93 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Dec 2024 10:23:12 +0000
Subject: [PATCH 115/887] Bump github/codeql-action from 3.27.5 to 3.27.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.27.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f09c1c0a94de965c15400f5634aa42fac8fb8f88...aa578102511db1f4524ed59b8cc2bae4f6e88195)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0e787aea59c..ec7cb594d42 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
         with:
           category: /language:go

From 46dd197ef3e6f665ec22a9cb3bd546a069da47a6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Dec 2024 10:29:21 -0800
Subject: [PATCH 116/887] Bump golang.org/x/sys from 0.27.0 to 0.28.0 in
 /eng/_util (#1431)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/sys/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 897bab5c0ff..3393abeda93 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.22.0
 require (
 	github.com/microsoft/go-infra v0.0.5
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
-	golang.org/x/sys v0.27.0
+	golang.org/x/sys v0.28.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 47684ef2a2e..ffefea135f1 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -81,8 +81,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s=
-golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
+golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From 54a87ba3eff7c6cee963a142affd450581449325 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 9 Dec 2024 16:45:40 +0000
Subject: [PATCH 117/887] Add: DSA implementations for Win CNG and OpenSSL

---
 .../0002-Add-crypto-backend-foundation.patch  | 240 +++++++++++++++++-
 .../0003-Add-BoringSSL-crypto-backend.patch   |  31 ++-
 patches/0004-Add-OpenSSL-crypto-backend.patch |  58 ++++-
 patches/0005-Add-CNG-crypto-backend.patch     |  28 +-
 4 files changed, 335 insertions(+), 22 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 66257f9d55d..66d1ec4eb63 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -8,13 +8,15 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/aes/cipher_asm.go                 |   2 +-
  src/crypto/boring/boring.go                  |   2 +-
  src/crypto/des/cipher.go                     |   7 +
- src/crypto/dsa/dsa.go                        |  13 ++
+ src/crypto/dsa/boring.go                     | 109 +++++++++
+ src/crypto/dsa/dsa.go                        |  48 ++++
+ src/crypto/dsa/notboring.go                  |  16 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
  src/crypto/ecdh/nist.go                      |   2 +-
  src/crypto/ecdsa/boring.go                   |   4 +-
  src/crypto/ecdsa/ecdsa.go                    |   4 +-
  src/crypto/ecdsa/notboring.go                |   2 +-
- src/crypto/ed25519/boring.go                 |  71 +++++++
+ src/crypto/ed25519/boring.go                 |  71 ++++++
  src/crypto/ed25519/ed25519.go                |  75 ++++++-
  src/crypto/ed25519/ed25519_test.go           |   2 +-
  src/crypto/ed25519/notboring.go              |  16 ++
@@ -22,9 +24,9 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/hmac/hmac_test.go                 |   2 +-
  src/crypto/internal/backend/backend_test.go  |  30 +++
  src/crypto/internal/backend/bbig/big.go      |  17 ++
- src/crypto/internal/backend/common.go        |  92 +++++++++
+ src/crypto/internal/backend/common.go        |  92 ++++++++
  src/crypto/internal/backend/isrequirefips.go |   9 +
- src/crypto/internal/backend/nobackend.go     | 201 +++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go     | 224 +++++++++++++++++++
  src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
  src/crypto/md5/md5.go                        |   7 +
@@ -52,16 +54,18 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server.go           |  25 ++-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
  src/crypto/tls/key_schedule.go               |  18 +-
- src/crypto/tls/prf.go                        |  77 ++++---
+ src/crypto/tls/prf.go                        |  77 +++++--
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
  src/hash/boring_test.go                      |   5 +
  src/hash/marshal_test.go                     |   5 +
  src/hash/notboring_test.go                   |   5 +
- src/net/smtp/smtp_test.go                    |  72 ++++---
+ src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 57 files changed, 914 insertions(+), 106 deletions(-)
+ 59 files changed, 1097 insertions(+), 106 deletions(-)
+ create mode 100644 src/crypto/dsa/boring.go
+ create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -145,8 +149,123 @@ index 04b73e7d3bf758..0891652a4566fb 100644
  
  	c := new(tripleDESCipher)
  	c.cipher1.generateSubkeys(key[:8])
+diff --git a/src/crypto/dsa/boring.go b/src/crypto/dsa/boring.go
+new file mode 100644
+index 00000000000000..d01c955da8c9e5
+--- /dev/null
++++ b/src/crypto/dsa/boring.go
+@@ -0,0 +1,109 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
++
++package dsa
++
++import (
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
++	"crypto/internal/boring/bcache"
++	"math/big"
++)
++
++// Cached conversions from Go PublicKey/PrivateKey to BoringCrypto.
++//
++// The first operation on a PublicKey or PrivateKey makes a parallel
++// BoringCrypto key and saves it in pubCache or privCache.
++//
++// We could just assume that once used in a sign/verify/encrypt/decrypt operation,
++// a particular key is never again modified, but that has not been a
++// stated assumption before. Just in case there is any existing code that
++// does modify the key between operations, we save the original values
++// alongside the cached BoringCrypto key and check that the real key
++// still matches before using the cached key. The theory is that the real
++// operations are significantly more expensive than the comparison.
++
++type boringPub struct {
++	key  *boring.PublicKeyDSA
++	orig PublicKey
++}
++
++var pubCache bcache.Cache[PublicKey, boringPub]
++var privCache bcache.Cache[PrivateKey, boringPriv]
++
++func init() {
++	pubCache.Register()
++	privCache.Register()
++}
++
++func boringPublicKey(pub *PublicKey) (*boring.PublicKeyDSA, error) {
++	b := pubCache.Get(pub)
++	if b != nil && publicKeyEqual(&b.orig, pub) {
++		return b.key, nil
++	}
++
++	b = new(boringPub)
++	b.orig = copyPublicKey(pub)
++	key, err := boring.NewPublicKeyDSA(bbig.Enc(b.orig.P), bbig.Enc(b.orig.Q), bbig.Enc(b.orig.G), bbig.Enc(b.orig.Y))
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	pubCache.Put(pub, b)
++	return key, nil
++}
++
++type boringPriv struct {
++	key  *boring.PrivateKeyDSA
++	orig PrivateKey
++}
++
++func boringPrivateKey(priv *PrivateKey) (*boring.PrivateKeyDSA, error) {
++	b := privCache.Get(priv)
++	if b != nil && privateKeyEqual(&b.orig, priv) {
++		return b.key, nil
++	}
++
++	b = new(boringPriv)
++	b.orig = copyPrivateKey(priv)
++
++	P := b.orig.P
++	Q := b.orig.Q
++	G := b.orig.G
++	X := b.orig.X
++	Y := b.orig.Y
++
++	key, err := boring.NewPrivateKeyDSA(bbig.Enc(P), bbig.Enc(Q), bbig.Enc(G), bbig.Enc(X), bbig.Enc(Y))
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	privCache.Put(priv, b)
++	return key, nil
++}
++
++func publicKeyEqual(k1, k2 *PublicKey) bool {
++	return k1.Y != nil && k1.Y.Cmp(k2.Y) == 0 && k1.P.Cmp(k2.P) == 0 && k1.Q.Cmp(k2.Q) == 0 && k1.G.Cmp(k2.G) == 0
++}
++
++func copyPublicKey(k *PublicKey) PublicKey {
++	return PublicKey{
++		Parameters{new(big.Int).Set(k.P), new(big.Int).Set(k.Q), new(big.Int).Set(k.G)},
++		Y: new(big.Int).Set(k.Y),
++	}
++}
++
++func privateKeyEqual(k1, k2 *PrivateKey) bool {
++	return publicKeyEqual(&k1.PublicKey, &k2.PublicKey) &&
++		k1.X.Cmp(k2.X) == 0
++}
++
++func copyPrivateKey(k *PrivateKey) PrivateKey {
++	return PrivateKey{
++		PublicKey: copyPublicKey(&k.PublicKey),
++		X:         new(big.Int).Set(k.X),
++	}
++}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..3937865aee7ef8 100644
+index 4524bd492feba0..787258c9526f74 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,6 +18,8 @@ import (
@@ -176,6 +295,84 @@ index 4524bd492feba0..3937865aee7ef8 100644
  	qBytes := make([]byte, N/8)
  	pBytes := make([]byte, L/8)
  
+@@ -161,6 +174,23 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
+ 		return errors.New("crypto/dsa: parameters not set up before generating key")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
++		b, err := boringPrivateKey(priv)
++		if err != nil {
++			return err
++		}
++
++		generatedKey, err := boring.GenerateKeyDSA(bbig.Enc(priv.P), bbig.Enc(priv.Q), bbig.Enc(priv.G))
++		if err != nil {
++			return err
++		}
++
++		priv.X = bbig.Dec(generatedKey.X)
++		priv.Y = bbig.Dec(generatedKey.Y)
++
++		return
++	}
++
+ 	x := new(big.Int)
+ 	xBytes := make([]byte, priv.Q.BitLen()/8)
+ 
+@@ -212,6 +242,16 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+ 		err = ErrInvalidPublicKey
+ 		return
+ 	}
++
++	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
++		b, err := boringPrivateKey(priv)
++		if err != nil {
++			return err
++		}
++
++		return boring.SignDSA(b, hash)
++	}
++
+ 	n >>= 3
+ 
+ 	var attempts int
+@@ -271,6 +311,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+ // to the byte-length of the subgroup. This function does not perform that
+ // truncation itself.
+ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
++	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), priv.Q.BitLen()) {
++		b, err := boringPrivateKey(priv)
++		if err != nil {
++			return nil, err
++		}
++
++		return boring.VerifyDSA(pub, hash, bbig.Enc(r), bbig.Enc(s))
++	}
+ 	// FIPS 186-3, section 4.7
+ 
+ 	if pub.P.Sign() == 0 {
+diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
+new file mode 100644
+index 00000000000000..f8771d0189f990
+--- /dev/null
++++ b/src/crypto/dsa/notboring.go
+@@ -0,0 +1,16 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
++
++package dsa
++
++import boring "crypto/internal/backend"
++
++func boringPublicKey(*PublicKey) (*boring.PublicKeyDSA, error) {
++	panic("boringcrypto: not available")
++}
++func boringPrivateKey(*PrivateKey) (*boring.PrivateKeyDSA, error) {
++	panic("boringcrypto: not available")
++}
 diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
 index b7c26f91e57f02..7a12e2bbaaafd1 100644
 --- a/src/crypto/ecdh/ecdh.go
@@ -689,10 +886,10 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..9204848708436e
+index 00000000000000..be18ecce6eabaa
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,201 @@
+@@ -0,0 +1,224 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -894,6 +1091,29 @@ index 00000000000000..9204848708436e
 +func GenerateDSAParameters(l, n int) (p, q, g BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
++
++type PublicKeyDSA struct{ _ int }
++type PrivateKeyDSA struct{ _ int }
++
++func GenerateKeyDSA(p, q, g BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s BigInt, error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt) bool {
++	panic("cryptobackend: not available")
++}
 diff --git a/src/crypto/internal/backend/norequirefips.go b/src/crypto/internal/backend/norequirefips.go
 new file mode 100644
 index 00000000000000..26bfb5f6a643f3
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 89cbb8792b7..47abcee319e 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,8 +5,8 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 233 ++++++++++++++++++
- 2 files changed, 245 insertions(+)
+ src/crypto/internal/backend/boring_linux.go   | 256 ++++++++++++++++++
+ 2 files changed, 268 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
 
@@ -30,10 +30,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..6cecf976fa6a9b
+index 00000000000000..638164b1569a1e
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,233 @@
+@@ -0,0 +1,256 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -267,3 +267,26 @@ index 00000000000000..6cecf976fa6a9b
 +func GenerateDSAParameters(l, n int) (p, q, g boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
++
++type PrivateKeyDSA struct{}
++type PrivateKeyDSA struct{}
++
++func GenerateKeyDSA(p, q, g boring.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y boring.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s boring.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt) bool {
++	panic("cryptobackend: not available")
++}
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 2b9610745d9..4ba27e51dfc 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 382 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 417 insertions(+), 25 deletions(-)
+ 36 files changed, 467 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..7ff09906b8d07b
+index 00000000000000..dff302585913ae
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,332 @@
+@@ -0,0 +1,382 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -213,11 +213,13 @@ index 00000000000000..7ff09906b8d07b
 +	"crypto/cipher"
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
++	"errors"
 +	"hash"
 +	"io"
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
++	"github.com/microsoft/go-crypto-winnative/cng"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -529,6 +531,54 @@ index 00000000000000..7ff09906b8d07b
 +	params, err := openssl.GenerateDSAParameters(l, n)
 +	return params.P, params.Q, params.G, err
 +}
++
++func GenerateKeyDSA(p, q, g openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++	return openssl.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{p, q, g}, x, y)
++}
++
++func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s openssl.BigInt, error) {
++	sig, err := openssl.SignDSA(priv, hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// BCRYPTSignHash generates DSA signatures in P1363 format,
++	// which is simply (r, s), each of them exactly half of the array.
++	if len(sig)%2 != 0 {
++		return nil, nil, errors.New("crypto/dsa: invalid signature size from bcrypt")
++	}
++
++	return sig[:len(sig)/2], sig[len(sig)/2:], nil
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
++	// As of FIPS 186-4 the maximum Q size is 32 bytes.
++	//
++	// See also: cbGroupSize at
++	// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_dsa_key_blob_v2
++	const maxGroupSize = 32
++
++	sig := make([]byte, 0, 2*maxGroupSize)
++	prependZeros := func(nonZeroBytes int) {
++		if zeros := int(size/2) - nonZeroBytes; zeros > 0 {
++			sig = append(sig, make([]byte, zeros)...)
++		}
++	}
++	prependZeros(len(r))
++	sig = append(sig, r...)
++	prependZeros(len(s))
++	sig = append(sig, s...)
++
++	return openssl.VerifyDSA(pub, hash, sig)
++}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644
 --- a/src/crypto/internal/boring/fipstls/stub.s
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 0da11ecfda8..5e45bf3320d 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 293 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 313 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 388 insertions(+), 27 deletions(-)
+ 36 files changed, 408 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..39c3c7043ab720
+index 00000000000000..7c718dfe66e51c
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,293 @@
+@@ -0,0 +1,313 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -480,6 +480,26 @@ index 00000000000000..39c3c7043ab720
 +	}
 +	return params.P, params.Q, params.G, nil
 +}
++
++func GenerateKeyDSA(p, q, g cng.BigInt) (*cng.PrivateKeyDSA, error) {
++	return cng.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
++	return cng.NewPrivateKeyDSA(cng.DSAParameters{p, q, g}, x, y)
++}
++
++func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
++	return cng.NewPublicKeyDSA(cng.DSAParameters{p, q, g}, y)
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s cng.BigInt, err error) {
++	return cng.SignDSA(priv, hash)
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt) bool {
++	return cng.VerifyDSA(pub, hash, sig)
++}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 index bc595e91024f11..7766d674f5cfaf 100644
 --- a/src/crypto/internal/backend/common.go

From e51ccc69ec6105820d617624a8a59287343bd0c0 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 9 Dec 2024 16:58:00 +0000
Subject: [PATCH 118/887] fix:nobackend err

---
 patches/0002-Add-crypto-backend-foundation.patch | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 66d1ec4eb63..81eceff3d21 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,6 +3,7 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
+fix:nobackend panic consistently without return
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
@@ -886,7 +887,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..be18ecce6eabaa
+index 00000000000000..c8d1742872c484
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,224 @@
@@ -1107,7 +1108,7 @@ index 00000000000000..be18ecce6eabaa
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s BigInt, error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +

From 5a9a991a42777b9d42bd53d3eab01efe54ed6aae Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 05:49:58 +0000
Subject: [PATCH 119/887] fix:export no fields on nobackend

---
 .../0002-Add-crypto-backend-foundation.patch  | 46 +++++++++----------
 .../0003-Add-BoringSSL-crypto-backend.patch   |  4 +-
 patches/0004-Add-OpenSSL-crypto-backend.patch | 17 ++++---
 patches/0005-Add-CNG-crypto-backend.patch     | 17 ++++---
 4 files changed, 46 insertions(+), 38 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 81eceff3d21..9fae167a855 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -4,13 +4,15 @@ Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
 fix:nobackend panic consistently without return
+
+002fix
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
  src/crypto/boring/boring.go                  |   2 +-
  src/crypto/des/cipher.go                     |   7 +
  src/crypto/dsa/boring.go                     | 109 +++++++++
- src/crypto/dsa/dsa.go                        |  48 ++++
+ src/crypto/dsa/dsa.go                        |  44 ++++
  src/crypto/dsa/notboring.go                  |  16 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
  src/crypto/ecdh/nist.go                      |   2 +-
@@ -64,7 +66,7 @@ fix:nobackend panic consistently without return
  src/hash/notboring_test.go                   |   5 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1097 insertions(+), 106 deletions(-)
+ 59 files changed, 1093 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -266,7 +268,7 @@ index 00000000000000..d01c955da8c9e5
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..787258c9526f74 100644
+index 4524bd492feba0..aa7970053f1a5d 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,6 +18,8 @@ import (
@@ -296,31 +298,25 @@ index 4524bd492feba0..787258c9526f74 100644
  	qBytes := make([]byte, N/8)
  	pBytes := make([]byte, L/8)
  
-@@ -161,6 +174,23 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
+@@ -161,6 +174,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
  		return errors.New("crypto/dsa: parameters not set up before generating key")
  	}
  
 +	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
-+		b, err := boringPrivateKey(priv)
++		x, y, err := boring.GenerateKeyDSA(bbig.Enc(priv.P), bbig.Enc(priv.Q), bbig.Enc(priv.G))
 +		if err != nil {
 +			return err
 +		}
++		priv.X = bbig.Dec(x)
++		priv.Y = bbig.Dec(y)
 +
-+		generatedKey, err := boring.GenerateKeyDSA(bbig.Enc(priv.P), bbig.Enc(priv.Q), bbig.Enc(priv.G))
-+		if err != nil {
-+			return err
-+		}
-+
-+		priv.X = bbig.Dec(generatedKey.X)
-+		priv.Y = bbig.Dec(generatedKey.Y)
-+
-+		return
++		return nil
 +	}
 +
  	x := new(big.Int)
  	xBytes := make([]byte, priv.Q.BitLen()/8)
  
-@@ -212,6 +242,16 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -212,6 +236,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
  		err = ErrInvalidPublicKey
  		return
  	}
@@ -328,26 +324,28 @@ index 4524bd492feba0..787258c9526f74 100644
 +	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
 +		b, err := boringPrivateKey(priv)
 +		if err != nil {
-+			return err
++			return nil, nil, err
 +		}
 +
-+		return boring.SignDSA(b, hash)
++		r, s, err := boring.SignDSA(b, hash)
++
++		return bbig.Dec(r), bbig.Dec(s), err
 +	}
 +
  	n >>= 3
  
  	var attempts int
-@@ -271,6 +311,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -271,6 +307,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
  // to the byte-length of the subgroup. This function does not perform that
  // truncation itself.
  func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
-+	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), priv.Q.BitLen()) {
-+		b, err := boringPrivateKey(priv)
++	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), pub.Q.BitLen()) {
++		bkey, err := boringPublicKey(pub)
 +		if err != nil {
-+			return nil, err
++			return false
 +		}
 +
-+		return boring.VerifyDSA(pub, hash, bbig.Enc(r), bbig.Enc(s))
++		return boring.VerifyDSA(bkey, hash, bbig.Enc(r), bbig.Enc(s))
 +	}
  	// FIPS 186-3, section 4.7
  
@@ -887,7 +885,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..c8d1742872c484
+index 00000000000000..af8cbf11c28f06
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,224 @@
@@ -1096,7 +1094,7 @@ index 00000000000000..c8d1742872c484
 +type PublicKeyDSA struct{ _ int }
 +type PrivateKeyDSA struct{ _ int }
 +
-+func GenerateKeyDSA(p, q, g BigInt) (*PrivateKeyDSA, error) {
++func GenerateKeyDSA(p, q, g BigInt) (x, y BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 47abcee319e..e5d2ac38b35 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -30,7 +30,7 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..638164b1569a1e
+index 00000000000000..d0d7c51212da6c
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
 @@ -0,0 +1,256 @@
@@ -271,7 +271,7 @@ index 00000000000000..638164b1569a1e
 +type PrivateKeyDSA struct{}
 +type PrivateKeyDSA struct{}
 +
-+func GenerateKeyDSA(p, q, g boring.BigInt) (*PrivateKeyDSA, error) {
++func GenerateKeyDSA(p, q, g boring.BigInt) (x, y boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 4ba27e51dfc..d9c36f384e2 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 382 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 387 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 467 insertions(+), 25 deletions(-)
+ 36 files changed, 472 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..dff302585913ae
+index 00000000000000..89ba8d7f698b41
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,382 @@
+@@ -0,0 +1,387 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -532,8 +532,13 @@ index 00000000000000..dff302585913ae
 +	return params.P, params.Q, params.G, err
 +}
 +
-+func GenerateKeyDSA(p, q, g openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
-+	return openssl.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
++	generatedKey, err := openssl.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++	if err != nil {
++		return nil, nil, err
++	}
++
++	return generatedKey.X, generatedKey.Y, nil
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 5e45bf3320d..5c2f5697983 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 313 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 318 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 408 insertions(+), 27 deletions(-)
+ 36 files changed, 413 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..7c718dfe66e51c
+index 00000000000000..e06646456aefe0
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,313 @@
+@@ -0,0 +1,318 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -481,8 +481,13 @@ index 00000000000000..7c718dfe66e51c
 +	return params.P, params.Q, params.G, nil
 +}
 +
-+func GenerateKeyDSA(p, q, g cng.BigInt) (*cng.PrivateKeyDSA, error) {
-+	return cng.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
++	generatedKey, err := cng.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++	if err != nil {
++		return nil, nil, err
++	}
++
++	return generatedKey.X, generatedKey.Y, nil
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {

From d20fd4413ae9a98581c4e342d050b759b9c645fd Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 06:05:54 +0000
Subject: [PATCH 120/887] fix:remove commit message

---
 patches/0002-Add-crypto-backend-foundation.patch | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 9fae167a855..3dba2979338 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,9 +3,6 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
-fix:nobackend panic consistently without return
-
-002fix
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-

From d510d914fd6456edad899b6682092a05060bde93 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 06:13:00 +0000
Subject: [PATCH 121/887] fix:remove commit message

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index d9c36f384e2..95395b5af9d 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..89ba8d7f698b41
+index 00000000000000..a264fa42af8198
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,387 @@
@@ -549,7 +549,7 @@ index 00000000000000..89ba8d7f698b41
 +	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s openssl.BigInt, error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s openssl.BigInt, err error) {
 +	sig, err := openssl.SignDSA(priv, hash)
 +	if err != nil {
 +		return nil, err

From e7fa9320841df01b1006e1408d87c8b063a1aa47 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 06:32:37 +0000
Subject: [PATCH 122/887] fix:update function signatures

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 4 ++--
 patches/0005-Add-CNG-crypto-backend.patch     | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 95395b5af9d..bdf27f1c1ac 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..a264fa42af8198
+index 00000000000000..4166b9a237cab3
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,387 @@
@@ -582,7 +582,7 @@ index 00000000000000..a264fa42af8198
 +	prependZeros(len(s))
 +	sig = append(sig, s...)
 +
-+	return openssl.VerifyDSA(pub, hash, sig)
++	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 5c2f5697983..fc94173ab47 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -183,7 +183,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..e06646456aefe0
+index 00000000000000..2401bb177b900c
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,318 @@
@@ -503,7 +503,7 @@ index 00000000000000..e06646456aefe0
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt) bool {
-+	return cng.VerifyDSA(pub, hash, sig)
++	return cng.VerifyDSA(pub, hashed, r, s)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 index bc595e91024f11..7766d674f5cfaf 100644

From 9b22b1453617b54b36adcceeb6c76ad312a074b7 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 07:03:46 +0000
Subject: [PATCH 123/887] Fix:update patches correctly

---
 .../0003-Add-BoringSSL-crypto-backend.patch    |  4 ++--
 patches/0004-Add-OpenSSL-crypto-backend.patch  | 18 ++++++++++--------
 patches/0005-Add-CNG-crypto-backend.patch      | 13 ++++++++-----
 3 files changed, 20 insertions(+), 15 deletions(-)

diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index e5d2ac38b35..781ada7e703 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -30,7 +30,7 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..d0d7c51212da6c
+index 00000000000000..03dd981dbbfa48
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
 @@ -0,0 +1,256 @@
@@ -269,7 +269,7 @@ index 00000000000000..d0d7c51212da6c
 +}
 +
 +type PrivateKeyDSA struct{}
-+type PrivateKeyDSA struct{}
++type PublicKeyDSA struct{}
 +
 +func GenerateKeyDSA(p, q, g boring.BigInt) (x, y boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index bdf27f1c1ac..10fdd759403 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 387 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 389 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 472 insertions(+), 25 deletions(-)
+ 36 files changed, 474 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..4166b9a237cab3
+index 00000000000000..296665f9f8a896
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,387 @@
+@@ -0,0 +1,389 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -219,7 +219,6 @@ index 00000000000000..4166b9a237cab3
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
-+	"github.com/microsoft/go-crypto-winnative/cng"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -523,6 +522,9 @@ index 00000000000000..4166b9a237cab3
 +	return openssl.VerifyEd25519(pub, message, sig)
 +}
 +
++type PublicKeyDSA = openssl.PublicKeyDSA
++type PrivateKeyDSA = openssl.PrivateKeyDSA
++
 +func SupportsDSA(l, n int) bool {
 +	return openssl.SupportsDSA()
 +}
@@ -533,7 +535,7 @@ index 00000000000000..4166b9a237cab3
 +}
 +
 +func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
-+	generatedKey, err := openssl.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++	generatedKey, err := openssl.GenerateKeyDSA(openssl.DSAParameters{p, q, g})
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -545,14 +547,14 @@ index 00000000000000..4166b9a237cab3
 +	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{p, q, g}, x, y)
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
 +	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
 +}
 +
 +func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s openssl.BigInt, err error) {
 +	sig, err := openssl.SignDSA(priv, hash)
 +	if err != nil {
-+		return nil, err
++		return nil, nil, err
 +	}
 +
 +	// BCRYPTSignHash generates DSA signatures in P1363 format,
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index fc94173ab47..790c2b808d6 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 318 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 321 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 413 insertions(+), 27 deletions(-)
+ 36 files changed, 416 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..2401bb177b900c
+index 00000000000000..542b21f1a25e05
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,318 @@
+@@ -0,0 +1,321 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -468,6 +468,9 @@ index 00000000000000..2401bb177b900c
 +	panic("cryptobackend: not available")
 +}
 +
++type PrivateKeyDSA = cng.PrivateKeyDSA
++type PublicKeyDSA = cng.PublicKeyDSA
++
 +func SupportsDSA(l, n int) bool {
 +	// These are the only N values supported by CNG
 +	return n == 160 || n == 256
@@ -494,7 +497,7 @@ index 00000000000000..2401bb177b900c
 +	return cng.NewPrivateKeyDSA(cng.DSAParameters{p, q, g}, x, y)
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
++func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
 +	return cng.NewPublicKeyDSA(cng.DSAParameters{p, q, g}, y)
 +}
 +

From 363507c82603687221e17897451b90a054f59f64 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 07:22:09 +0000
Subject: [PATCH 124/887] fix:boringssl wrong import signature

---
 patches/0003-Add-BoringSSL-crypto-backend.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 781ada7e703..f4ce862eab6 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -30,7 +30,7 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..03dd981dbbfa48
+index 00000000000000..797e805300c4c9
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
 @@ -0,0 +1,256 @@
@@ -279,7 +279,7 @@ index 00000000000000..03dd981dbbfa48
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PrivateKeyDSA, error) {
++func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PublicKeyDSA, error) {
 +	panic("cryptobackend: not available")
 +}
 +

From 0edd64b40fef6510f9d22e1b3a707ec5ad81ce87 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 07:36:00 +0000
Subject: [PATCH 125/887] fix:parameters

---
 .../0002-Add-crypto-backend-foundation.patch    | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 3dba2979338..546927091ac 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,12 +3,15 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
+fix:nobackend panic consistently without return
+
+002fix
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
  src/crypto/boring/boring.go                  |   2 +-
  src/crypto/des/cipher.go                     |   7 +
- src/crypto/dsa/boring.go                     | 109 +++++++++
+ src/crypto/dsa/boring.go                     | 113 ++++++++++
  src/crypto/dsa/dsa.go                        |  44 ++++
  src/crypto/dsa/notboring.go                  |  16 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
@@ -63,7 +66,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   5 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1093 insertions(+), 106 deletions(-)
+ 59 files changed, 1097 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -151,10 +154,10 @@ index 04b73e7d3bf758..0891652a4566fb 100644
  	c.cipher1.generateSubkeys(key[:8])
 diff --git a/src/crypto/dsa/boring.go b/src/crypto/dsa/boring.go
 new file mode 100644
-index 00000000000000..d01c955da8c9e5
+index 00000000000000..3be888a0104809
 --- /dev/null
 +++ b/src/crypto/dsa/boring.go
-@@ -0,0 +1,109 @@
+@@ -0,0 +1,113 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -248,7 +251,11 @@ index 00000000000000..d01c955da8c9e5
 +
 +func copyPublicKey(k *PublicKey) PublicKey {
 +	return PublicKey{
-+		Parameters{new(big.Int).Set(k.P), new(big.Int).Set(k.Q), new(big.Int).Set(k.G)},
++		Parameters: Parameters{
++			P: new(big.Int).Set(k.P),
++			Q: new(big.Int).Set(k.Q),
++			G: new(big.Int).Set(k.G),
++		},
 +		Y: new(big.Int).Set(k.Y),
 +	}
 +}

From e408c08bd57a549e5ba5eb7eb754693ebef921db Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 07:56:53 +0000
Subject: [PATCH 126/887] fix: correct function signature for nobackend

---
 patches/0002-Add-crypto-backend-foundation.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 546927091ac..1574121316e 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -889,7 +889,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..af8cbf11c28f06
+index 00000000000000..2f6b54f20be6bf
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,224 @@
@@ -1106,7 +1106,7 @@ index 00000000000000..af8cbf11c28f06
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y BigInt) (*PrivateKeyDSA, error) {
++func NewPublicKeyDSA(p, q, g, y BigInt) (*PublicKeyDSA, error) {
 +	panic("cryptobackend: not available")
 +}
 +

From b02069649d9c43d4067e016b70dba10304814695 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 15:34:42 +0000
Subject: [PATCH 127/887] fix: openssl conversions

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 58 +++++++++++--------
 1 file changed, 33 insertions(+), 25 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 10fdd759403..d505f7e0db2 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 389 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 397 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 474 insertions(+), 25 deletions(-)
+ 36 files changed, 482 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..296665f9f8a896
+index 00000000000000..613a23b89dcd69
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,389 @@
+@@ -0,0 +1,397 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -219,6 +219,9 @@ index 00000000000000..296665f9f8a896
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
++	"github.com/golang-fips/openssl/v2/bbig"
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -557,34 +560,39 @@ index 00000000000000..296665f9f8a896
 +		return nil, nil, err
 +	}
 +
-+	// BCRYPTSignHash generates DSA signatures in P1363 format,
-+	// which is simply (r, s), each of them exactly half of the array.
-+	if len(sig)%2 != 0 {
-+		return nil, nil, errors.New("crypto/dsa: invalid signature size from bcrypt")
++	r, s, err := parseSignature(sig)
++	if err != nil {
++		return nil, nil, err
 +	}
 +
-+	return sig[:len(sig)/2], sig[len(sig)/2:], nil
++	return bbig.Dec(r), bbig.Dec(s), nil
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
-+	// As of FIPS 186-4 the maximum Q size is 32 bytes.
-+	//
-+	// See also: cbGroupSize at
-+	// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_dsa_key_blob_v2
-+	const maxGroupSize = 32
-+
-+	sig := make([]byte, 0, 2*maxGroupSize)
-+	prependZeros := func(nonZeroBytes int) {
-+		if zeros := int(size/2) - nonZeroBytes; zeros > 0 {
-+			sig = append(sig, make([]byte, zeros)...)
-+		}
++	sig := encodeSignature(bbig.Enc(r), bbig.Enc(s))
++	return openssl.VerifyDSA(pub, hashed, sig)
++}
++
++func parseSignature(sig []byte) (r, s []byte, err error) {
++	var inner cryptobyte.String
++	input := cryptobyte.String(sig)
++	if !input.ReadASN1(&inner, asn1.SEQUENCE) ||
++		!input.Empty() ||
++		!inner.ReadASN1Integer(&r) ||
++		!inner.ReadASN1Integer(&s) ||
++		!inner.Empty() {
++		return nil, nil, errors.New("invalid ASN.1")
 +	}
-+	prependZeros(len(r))
-+	sig = append(sig, r...)
-+	prependZeros(len(s))
-+	sig = append(sig, s...)
++	return r, s, nil
++}
 +
-+	return openssl.VerifyDSA(pub, hashed, sig)
++func encodeSignature(r, s []byte) ([]byte, error) {
++	var b cryptobyte.Builder
++	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		addASN1IntBytes(b, r)
++		addASN1IntBytes(b, s)
++	})
++	return b.Bytes()
 +}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644

From f57d4f73fd841ba6127d3cdfb32ec248065e23be Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 15:50:09 +0000
Subject: [PATCH 128/887] fix:add missing signatures

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 36 +++++++++++++++----
 1 file changed, 29 insertions(+), 7 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index d505f7e0db2..7ecb9e44b2a 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 397 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 419 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 482 insertions(+), 25 deletions(-)
+ 36 files changed, 504 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..613a23b89dcd69
+index 00000000000000..f72aad4805a06b
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,397 @@
+@@ -0,0 +1,419 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -560,16 +560,20 @@ index 00000000000000..613a23b89dcd69
 +		return nil, nil, err
 +	}
 +
-+	r, s, err := parseSignature(sig)
++	rByte, sByte, err := parseSignature(sig)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +
-+	return bbig.Dec(r), bbig.Dec(s), nil
++	return bbig.Dec(rByte), bbig.Dec(sByte), nil
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
-+	sig := encodeSignature(bbig.Enc(r), bbig.Enc(s))
++	sig, err := encodeSignature(bbig.Enc(r), bbig.Enc(s))
++	if err != nil {
++		return false
++	}
++
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 +
@@ -594,6 +598,24 @@ index 00000000000000..613a23b89dcd69
 +	})
 +	return b.Bytes()
 +}
++
++// addASN1IntBytes encodes in ASN.1 a positive integer represented as
++// a big-endian byte slice with zero or more leading zeroes.
++func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
++	for len(bytes) > 0 && bytes[0] == 0 {
++		bytes = bytes[1:]
++	}
++	if len(bytes) == 0 {
++		b.SetError(errors.New("invalid integer"))
++		return
++	}
++	b.AddASN1(asn1.INTEGER, func(c *cryptobyte.Builder) {
++		if bytes[0]&0x80 != 0 {
++			c.AddUint8(0)
++		}
++		c.AddBytes(bytes)
++	})
++}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644
 --- a/src/crypto/internal/boring/fipstls/stub.s

From 120c6b5ad97e4f6e446ae0afac754878bcd4860e Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 16:04:50 +0000
Subject: [PATCH 129/887] fix:bigint

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 7ecb9e44b2a..88f6564bf82 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..f72aad4805a06b
+index 00000000000000..0b4964d971f4bc
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,419 @@
@@ -211,6 +211,7 @@ index 00000000000000..f72aad4805a06b
 +import (
 +	"crypto"
 +	"crypto/cipher"
++	"crypto/internal/backend/bbig"
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
 +	"errors"
@@ -219,7 +220,6 @@ index 00000000000000..f72aad4805a06b
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
-+	"github.com/golang-fips/openssl/v2/bbig"
 +	"golang.org/x/crypto/cryptobyte"
 +	"golang.org/x/crypto/cryptobyte/asn1"
 +)

From 41c3f930cffb583ac7dfc3d6ef03d57415dbd988 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 16:23:06 +0000
Subject: [PATCH 130/887] fix:openssl bigint

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 88f6564bf82..54a1a278d64 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 419 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 418 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 504 insertions(+), 25 deletions(-)
+ 36 files changed, 503 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..0b4964d971f4bc
+index 00000000000000..9186ae56d702a1
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,419 @@
+@@ -0,0 +1,418 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -211,7 +211,6 @@ index 00000000000000..0b4964d971f4bc
 +import (
 +	"crypto"
 +	"crypto/cipher"
-+	"crypto/internal/backend/bbig"
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
 +	"errors"
@@ -565,11 +564,11 @@ index 00000000000000..0b4964d971f4bc
 +		return nil, nil, err
 +	}
 +
-+	return bbig.Dec(rByte), bbig.Dec(sByte), nil
++	return new(openssl.BigInt).SetBytes(rByte), new(openssl.BigInt).SetBytes(sByte), nil
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
-+	sig, err := encodeSignature(bbig.Enc(r), bbig.Enc(s))
++	sig, err := encodeSignature(r.Bytes(), s.Bytes())
 +	if err != nil {
 +		return false
 +	}

From e88e2531bf500404c04497f339f1d85b78c64494 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 16:37:13 +0000
Subject: [PATCH 131/887] fix:bigint conversion

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 54a1a278d64..1795b3fe182 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 418 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 419 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 503 insertions(+), 25 deletions(-)
+ 36 files changed, 504 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..9186ae56d702a1
+index 00000000000000..dbb7962d4370b7
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,418 @@
+@@ -0,0 +1,419 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -219,6 +219,7 @@ index 00000000000000..9186ae56d702a1
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
++	"github.com/golang-fips/openssl/v2/bbig"
 +	"golang.org/x/crypto/cryptobyte"
 +	"golang.org/x/crypto/cryptobyte/asn1"
 +)
@@ -564,11 +565,11 @@ index 00000000000000..9186ae56d702a1
 +		return nil, nil, err
 +	}
 +
-+	return new(openssl.BigInt).SetBytes(rByte), new(openssl.BigInt).SetBytes(sByte), nil
++	return bbig.Enc(new(big.Int).SetBytes(rByte)), bbig.Enc(new(big.BigInt).SetBytes(sByte)), nil
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
-+	sig, err := encodeSignature(r.Bytes(), s.Bytes())
++	sig, err := encodeSignature(bbig.Dec(r).Bytes(), bbig.Dec(s).Bytes())
 +	if err != nil {
 +		return false
 +	}

From b6673d060ddbb6baaf397d3cede91c0ced4e1a8b Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 16:47:12 +0000
Subject: [PATCH 132/887] fix:import math big

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 1795b3fe182..06f586f2759 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 419 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 420 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 504 insertions(+), 25 deletions(-)
+ 36 files changed, 505 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..dbb7962d4370b7
+index 00000000000000..736c0a5df7e80a
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,419 @@
+@@ -0,0 +1,420 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -216,6 +216,7 @@ index 00000000000000..dbb7962d4370b7
 +	"errors"
 +	"hash"
 +	"io"
++	"math/big"
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"

From 592171e0e139d814094a8d8a9935edea1714d1ad Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 10 Dec 2024 16:50:45 +0000
Subject: [PATCH 133/887] fix bigint syntax

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 06f586f2759..59412a9f2c3 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..736c0a5df7e80a
+index 00000000000000..3c3991993ee40a
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,420 @@
@@ -566,7 +566,7 @@ index 00000000000000..736c0a5df7e80a
 +		return nil, nil, err
 +	}
 +
-+	return bbig.Enc(new(big.Int).SetBytes(rByte)), bbig.Enc(new(big.BigInt).SetBytes(sByte)), nil
++	return bbig.Enc(new(big.Int).SetBytes(rByte)), bbig.Enc(new(big.Int).SetBytes(sByte)), nil
 +}
 +
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {

From 4a687ca6ff9d59c49401ac80f557eea4d4dd46f7 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 10 Dec 2024 11:39:03 -0800
Subject: [PATCH 134/887] FIPS readme: updates for CNG accuracy, other clarity
 (#1432)

* FIPS readme: updates for CNG accuracy, other clarity

* Update eng/doc/fips/README.md

* Update note about OpenSSL config, mention AzL3 in changelog
---
 eng/doc/fips/README.md | 46 ++++++++++++++++++++++++++----------------
 1 file changed, 29 insertions(+), 17 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index d02bf737209..6c2ddef7fd9 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -59,9 +59,9 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
 | Default | Default | Not compliant | Crypto usage is not FIPS compliant. |
-| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. FIPS mode is automatically enabled at runtime if it is configured systemwide or `GOFIPS=1`. Flexible. |
-| `GOEXPERIMENT=systemcrypto` | `GOFIPS=1` | Compliant | Can be used to create a compliant app. The app either enables FIPS mode or ensures it is already enabled. Otherwise, the app panics. |
-| `GOEXPERIMENT=systemcrypto` | `GOFIPS=0` | Compliant | Crypto usage is not FIPS compliant. The app attempts to disable FIPS mode and panics if it isn't possible. |
+| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app either enables FIPS mode or ensures it is already enabled. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | `GOFIPS=0` | Compliant | Crypto usage is unlikely to be FIPS compliant. The exact behavior of `GOFIPS=0` varies per platform. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
 
@@ -163,7 +163,7 @@ Another approach that generally works for any build system is to modify the buil
 #### PowerShell - Set `GOEXPERIMENT` environment variable
 
 - ```pwsh
-  $env:GOEXPERIMENT = "cngcrypto"
+  $env:GOEXPERIMENT = "systemcrypto"
   go build ./myapp
   ```
 
@@ -190,38 +190,44 @@ Another approach that generally works for any build system is to modify the buil
   $env:GOFLAGS = "-tags=goexperiment.systemcrypto"
   go build ./myapp
   ```
-- Note: if `-tags` is specified in `GOFLAGS` and `-tags` is also passed to the build command, the value passed to the build command is used and the one in `GOFLAGS` is ignored.
+
+> [!NOTE]
+> If `-tags` is specified in `GOFLAGS` and `-tags` is also passed directly to the build command, the value passed to the build command is used and the one in `GOFLAGS` is ignored.
 
 ## Usage: Runtime
 
-A program built with `opensslcrypto` always uses the OpenSSL library present on the system for crypto APIs. Likewise for `cngcrypto` and CNG. If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
+A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL) and `cngcrypto` (always using CNG). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
 
-The following sections describe how to enable FIPS mode.
+The following sections describe how to enable FIPS mode and the effect of the `GOFIPS` environment variable on each supported platform.
 
 > [!NOTE]
-> The options described in this section have no effect at build time, only when the system running the Go program is changed. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for the optional build tag that enables FIPS mode.
+> The options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
 
 ### Linux FIPS mode (OpenSSL)
 
-To set FIPS mode on Linux, use one of the following options. The first match wins:
+To set FIPS mode on Linux, use one of the following options. The first match in this list wins:
 
 - Explicitly enable it by setting the environment variable `GOFIPS=1`.
 - Explicitly disable it by setting the environment variable `GOFIPS=0`.
 - Implicitly enable it by booting the Linux Kernel in FIPS mode.
-  - Linux FIPS mode sets the content of `/proc/sys/crypto/fips_enabled` to `1`. The Go runtime reads this file.
+  - The Linux Kernel's FIPS mode sets the content of `/proc/sys/crypto/fips_enabled` to `1`. The Go runtime reads this file.
 
-If the Go runtime detects a FIPS preference, it configures OpenSSL during program initialization. This includes disabling FIPS mode if `GOFIPS=0`. If configuration fails, program initialization panics.
+If the Go runtime detects a FIPS preference, it configures OpenSSL during program initialization. This includes disabling FIPS mode if `GOFIPS=0` even if OpenSSL is configured to be in FIPS mode by default. If configuration fails, program initialization panics.
 
-If no option is detected, the Go runtime doesn't set the OpenSSL FIPS mode, and the standard OpenSSL configuration is left unchanged. For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
+If no preference is detected, the Go runtime doesn't set the OpenSSL FIPS mode, and the standard OpenSSL configuration is left unchanged. For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
 
 ### Windows FIPS mode (CNG)
 
-To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy). For testing purposes, this can be set via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
+To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy).
 
-To make the Go runtime panic during program initialization if FIPS mode is not enabled, set the environment variable `GOFIPS=1`.
+If the Go runtime detects `GOFIPS=1` and FIPS policy is not enabled, the program will panic during program initialization. This may be useful to detect and refuse to run on incorrectly configured Windows systems. Otherwise, `GOFIPS` has no effect.
 
 > [!NOTE]
-> Unlike `opensslcrypto`, a Windows program built with `cngcrypto` doesn't include the ability to enable/disable FIPS, only ensure it's enabled. Windows FIPS mode is not a per-process setting, and changing it may require elevated permissions. Adding this feature would likely have unintended consequences.
+> Unlike `opensslcrypto`, a Windows program built with `cngcrypto` doesn't include the ability to enable/disable FIPS mode. The change must be made by configuring the OS, not the Go program.
+>
+> This is because Windows FIPS mode is not a per-process setting, and changing it may require elevated permissions. We expect that adding a feature that attempts to change the Windows policy would have unintended consequences.
+
+For testing purposes, Windows FIPS policy can be enabled via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
 
 ## Usage: Extra configuration options
 
@@ -343,7 +349,9 @@ Not all OpenSSL versions are supported. OpenSSL does not maintain ABI compatibil
 Versions not listed above are not supported at all.
 
 > [!NOTE]
-> Note that one can enable or disable certain [OpenSSL features] when building it, diverging from the default configuration. The Go runtime does not support all possible configurations, and some may cause the Go runtime to panic during initialization or not work as expected. The Go runtime is tested with the default configuration of the supported versions and with the OpenSSL configuration shipped in [Azure Linux]. 
+> Any build of OpenSSL might have various [OpenSSL features] enabled or disabled, diverging from the default configuration. Microsoft Go does not support all possible OpenSSL configurations. Some may cause the Go runtime to panic during initialization or not work as expected.
+>
+> The Go runtime is tested with the default configuration of each supported OpenSSL version and with the OpenSSL configurations in the [Azure Linux] 2 and [Azure Linux] 3 distributions.
 
 ### Dynamic linking
 
@@ -377,7 +385,7 @@ Prior to Go 1.22, a program using the Go TLS stack must import the `crypto/tls/f
 
 The work done to support FIPS compatibility mode leverages code and ideas from other open-source projects:
 
-- All crypto stubs are a mirror of Google's [dev.boringcrypto branch](https://github.com/golang/go/tree/dev.boringcrypto) and the release branch ports of that branch.
+- All crypto stubs are based on upstream Go's [boringcrypto implementation](https://pkg.go.dev/crypto/internal/boring).
 - The mapping between BoringSSL and OpenSSL APIs is taken from Fedora's [Go fork](https://pagure.io/go).
 - Portable OpenSSL implementation ported from Microsoft's [.NET runtime](https://github.com/dotnet/runtime) cryptography module.
 
@@ -389,6 +397,10 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp
 
 This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary.
 
+### Go [1.22.9-2](https://github.com/microsoft/go/releases/tag/v1.22.9-2) and [1.23.3-2](https://github.com/microsoft/go/releases/tag/v1.23.3-2) (Dec 2024)
+
+- Adds compatibility with changes that [Azure Linux] 3 made to the OpenSSL configuration, specifically the change to use [SCOSSL](https://github.com/microsoft/SymCrypt-OpenSSL). The SCOSSL-related Azure Linux packages must also be up to date for compatibility, at least `SymCrypt-103.6.0-1` and `SymCrypt-OpenSSL-1.6.1-1`.
+
 ### Go 1.22 (Feb 2024)
 
 - Automatically enforce that `crypto/tls` and `crypto/x509` only use FIPS-approved settings when running in FIPS mode.

From c32fb350057386a6ba3550a692fbc436b4eefd22 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Dec 2024 10:33:54 +0000
Subject: [PATCH 135/887] Bump github/codeql-action from 3.27.6 to 3.27.7

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.6 to 3.27.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/aa578102511db1f4524ed59b8cc2bae4f6e88195...babb554ede22fd5605947329c4d04d8e7a0b8155)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ec7cb594d42..b73ed2b0374 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/init@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/autobuild@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
+        uses: github/codeql-action/analyze@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
         with:
           category: /language:go

From 6110fbfa016194cc55dd04e9954b1b4a23380ece Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 12 Dec 2024 03:59:21 +0000
Subject: [PATCH 136/887] fix:dependency imports

---
 .../0002-Add-crypto-backend-foundation.patch  |  3 ---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 22 +++++++++++++------
 2 files changed, 15 insertions(+), 10 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 1574121316e..a0655a055ff 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -3,9 +3,6 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
-fix:nobackend panic consistently without return
-
-002fix
 ---
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 59412a9f2c3..b9d186350c7 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -32,7 +32,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/x509/notboring.go                  |   2 +-
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
- src/go/build/deps_test.go                     |   7 +-
+ src/go/build/deps_test.go                     |   8 +-
  src/go/build/vendor_test.go                   |   1 +
  src/hash/boring_test.go                       |   2 +-
  src/hash/notboring_test.go                    |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 505 insertions(+), 25 deletions(-)
+ 36 files changed, 506 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..3c3991993ee40a
+index 00000000000000..017baddcf79c06
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,420 @@
@@ -211,6 +211,7 @@ index 00000000000000..3c3991993ee40a
 +import (
 +	"crypto"
 +	"crypto/cipher"
++	"crypto/internal/backend/bbig"
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
 +	"errors"
@@ -220,7 +221,6 @@ index 00000000000000..3c3991993ee40a
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
-+	"github.com/golang-fips/openssl/v2/bbig"
 +	"golang.org/x/crypto/cryptobyte"
 +	"golang.org/x/crypto/cryptobyte/asn1"
 +)
@@ -835,7 +835,7 @@ index b4efd6d3c50c11..4c3ca847c21cd2 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 578b4d6f68504c..80a14d54739524 100644
+index 578b4d6f68504c..0a69b3e3167ee4 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -476,6 +476,8 @@ var depsRules = `
@@ -855,7 +855,15 @@ index 578b4d6f68504c..80a14d54739524 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -812,7 +815,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -522,6 +525,7 @@ var depsRules = `
+ 	< encoding/asn1
+ 	< golang.org/x/crypto/cryptobyte/asn1
+ 	< golang.org/x/crypto/cryptobyte
++	< crypto/internal/backend
+ 	< crypto/internal/bigmod
+ 	< crypto/dsa, crypto/elliptic, crypto/rsa
+ 	< crypto/ecdsa
+@@ -812,7 +816,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -864,7 +872,7 @@ index 578b4d6f68504c..80a14d54739524 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -822,7 +825,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -822,7 +826,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}

From 234fe896793cca41268de8be8c26e0662812cb46 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 12 Dec 2024 06:53:03 +0000
Subject: [PATCH 137/887] fix:restructure pkg layout

---
 .../0002-Add-crypto-backend-foundation.patch  | 75 +++++++++++++++---
 .../0003-Add-BoringSSL-crypto-backend.patch   |  6 +-
 patches/0004-Add-OpenSSL-crypto-backend.patch | 79 +++----------------
 patches/0005-Add-CNG-crypto-backend.patch     |  6 +-
 4 files changed, 81 insertions(+), 85 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a0655a055ff..6bb40d06a32 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/boring/boring.go                  |   2 +-
  src/crypto/des/cipher.go                     |   7 +
  src/crypto/dsa/boring.go                     | 113 ++++++++++
- src/crypto/dsa/dsa.go                        |  44 ++++
+ src/crypto/dsa/dsa.go                        |  88 ++++++++
  src/crypto/dsa/notboring.go                  |  16 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
  src/crypto/ecdh/nist.go                      |   2 +-
@@ -63,7 +63,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   5 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1097 insertions(+), 106 deletions(-)
+ 59 files changed, 1141 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -269,19 +269,23 @@ index 00000000000000..3be888a0104809
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..aa7970053f1a5d 100644
+index 4524bd492feba0..9161e4b0a6ce85 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
-@@ -18,6 +18,8 @@ import (
+@@ -18,7 +18,12 @@ import (
  	"io"
  	"math/big"
  
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
  	"crypto/internal/randutil"
++
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
  )
  
-@@ -86,6 +88,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
+ // Parameters represents the domain parameters for a key. These parameters can
+@@ -86,6 +91,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
  		return errors.New("crypto/dsa: invalid ParameterSizes")
  	}
  
@@ -299,7 +303,7 @@ index 4524bd492feba0..aa7970053f1a5d 100644
  	qBytes := make([]byte, N/8)
  	pBytes := make([]byte, L/8)
  
-@@ -161,6 +174,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
+@@ -161,6 +177,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
  		return errors.New("crypto/dsa: parameters not set up before generating key")
  	}
  
@@ -317,7 +321,7 @@ index 4524bd492feba0..aa7970053f1a5d 100644
  	x := new(big.Int)
  	xBytes := make([]byte, priv.Q.BitLen()/8)
  
-@@ -212,6 +236,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -212,6 +239,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
  		err = ErrInvalidPublicKey
  		return
  	}
@@ -328,7 +332,7 @@ index 4524bd492feba0..aa7970053f1a5d 100644
 +			return nil, nil, err
 +		}
 +
-+		r, s, err := boring.SignDSA(b, hash)
++		r, s, err := boring.SignDSA(b, hash, parseSignature)
 +
 +		return bbig.Dec(r), bbig.Dec(s), err
 +	}
@@ -336,7 +340,7 @@ index 4524bd492feba0..aa7970053f1a5d 100644
  	n >>= 3
  
  	var attempts int
-@@ -271,6 +307,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -271,6 +310,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
  // to the byte-length of the subgroup. This function does not perform that
  // truncation itself.
  func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
@@ -346,11 +350,56 @@ index 4524bd492feba0..aa7970053f1a5d 100644
 +			return false
 +		}
 +
-+		return boring.VerifyDSA(bkey, hash, bbig.Enc(r), bbig.Enc(s))
++		return boring.VerifyDSA(bkey, hash, bbig.Enc(r), bbig.Enc(s), encodeSignature)
 +	}
  	// FIPS 186-3, section 4.7
  
  	if pub.P.Sign() == 0 {
+@@ -307,3 +354,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+ 
+ 	return v.Cmp(r) == 0
+ }
++
++func parseSignature(sig []byte) ([]uint, []uint, error) {
++	var r, s []byte
++	var inner cryptobyte.String
++	input := cryptobyte.String(sig)
++	if !input.ReadASN1(&inner, asn1.SEQUENCE) ||
++		!input.Empty() ||
++		!inner.ReadASN1Integer(&r) ||
++		!inner.ReadASN1Integer(&s) ||
++		!inner.Empty() {
++		return nil, nil, errors.New("invalid ASN.1")
++	}
++	return []uint(bbig.Enc(new(big.Int).SetBytes(r))), []uint(bbig.Enc(new(big.Int).SetBytes(s))), nil
++}
++
++func encodeSignature(r, s []uint) ([]byte, error) {
++	var b cryptobyte.Builder
++	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		addASN1IntBytes(b, bbig.Dec(r).Bytes())
++		addASN1IntBytes(b, bbig.Dec(s).Bytes())
++	})
++	return b.Bytes()
++}
++
++// addASN1IntBytes encodes in ASN.1 a positive integer represented as
++// a big-endian byte slice with zero or more leading zeroes.
++func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
++	for len(bytes) > 0 && bytes[0] == 0 {
++		bytes = bytes[1:]
++	}
++	if len(bytes) == 0 {
++		b.SetError(errors.New("invalid integer"))
++		return
++	}
++	b.AddASN1(asn1.INTEGER, func(c *cryptobyte.Builder) {
++		if bytes[0]&0x80 != 0 {
++			c.AddUint8(0)
++		}
++		c.AddBytes(bytes)
++	})
++}
 diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
 new file mode 100644
 index 00000000000000..f8771d0189f990
@@ -886,7 +935,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..2f6b54f20be6bf
+index 00000000000000..826732e87d4764
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,224 @@
@@ -1107,11 +1156,11 @@ index 00000000000000..2f6b54f20be6bf
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/norequirefips.go b/src/crypto/internal/backend/norequirefips.go
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index f4ce862eab6..46c71341c5a 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -30,7 +30,7 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..797e805300c4c9
+index 00000000000000..8cf833cf2bf3f9
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
 @@ -0,0 +1,256 @@
@@ -283,10 +283,10 @@ index 00000000000000..797e805300c4c9
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s boring.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index b9d186350c7..ffa29c6057f 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 420 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 375 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -32,7 +32,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/x509/notboring.go                  |   2 +-
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
- src/go/build/deps_test.go                     |   8 +-
+ src/go/build/deps_test.go                     |   7 +-
  src/go/build/vendor_test.go                   |   1 +
  src/hash/boring_test.go                       |   2 +-
  src/hash/notboring_test.go                    |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 506 insertions(+), 25 deletions(-)
+ 36 files changed, 460 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..017baddcf79c06
+index 00000000000000..939dc54a0e8014
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,420 @@
+@@ -0,0 +1,375 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -211,18 +211,13 @@ index 00000000000000..017baddcf79c06
 +import (
 +	"crypto"
 +	"crypto/cipher"
-+	"crypto/internal/backend/bbig"
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
-+	"errors"
 +	"hash"
 +	"io"
-+	"math/big"
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
-+	"golang.org/x/crypto/cryptobyte"
-+	"golang.org/x/crypto/cryptobyte/asn1"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -555,68 +550,28 @@ index 00000000000000..017baddcf79c06
 +	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s openssl.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s openssl.BigInt, err error) {
 +	sig, err := openssl.SignDSA(priv, hash)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +
-+	rByte, sByte, err := parseSignature(sig)
++	r, s, err := parseSignature(sig)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +
-+	return bbig.Enc(new(big.Int).SetBytes(rByte)), bbig.Enc(new(big.Int).SetBytes(sByte)), nil
++	return openssl.BigInt(r), openssl.BigInt(s), nil
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt) bool {
-+	sig, err := encodeSignature(bbig.Dec(r).Bytes(), bbig.Dec(s).Bytes())
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
++	sig, err := encodeSignature(r, s)
 +	if err != nil {
 +		return false
 +	}
 +
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
-+
-+func parseSignature(sig []byte) (r, s []byte, err error) {
-+	var inner cryptobyte.String
-+	input := cryptobyte.String(sig)
-+	if !input.ReadASN1(&inner, asn1.SEQUENCE) ||
-+		!input.Empty() ||
-+		!inner.ReadASN1Integer(&r) ||
-+		!inner.ReadASN1Integer(&s) ||
-+		!inner.Empty() {
-+		return nil, nil, errors.New("invalid ASN.1")
-+	}
-+	return r, s, nil
-+}
-+
-+func encodeSignature(r, s []byte) ([]byte, error) {
-+	var b cryptobyte.Builder
-+	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		addASN1IntBytes(b, r)
-+		addASN1IntBytes(b, s)
-+	})
-+	return b.Bytes()
-+}
-+
-+// addASN1IntBytes encodes in ASN.1 a positive integer represented as
-+// a big-endian byte slice with zero or more leading zeroes.
-+func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
-+	for len(bytes) > 0 && bytes[0] == 0 {
-+		bytes = bytes[1:]
-+	}
-+	if len(bytes) == 0 {
-+		b.SetError(errors.New("invalid integer"))
-+		return
-+	}
-+	b.AddASN1(asn1.INTEGER, func(c *cryptobyte.Builder) {
-+		if bytes[0]&0x80 != 0 {
-+			c.AddUint8(0)
-+		}
-+		c.AddBytes(bytes)
-+	})
-+}
 diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
 index f2e5a503eaacb6..1dc7116efdff2e 100644
 --- a/src/crypto/internal/boring/fipstls/stub.s
@@ -835,7 +790,7 @@ index b4efd6d3c50c11..4c3ca847c21cd2 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 578b4d6f68504c..0a69b3e3167ee4 100644
+index 578b4d6f68504c..80a14d54739524 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -476,6 +476,8 @@ var depsRules = `
@@ -855,15 +810,7 @@ index 578b4d6f68504c..0a69b3e3167ee4 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -522,6 +525,7 @@ var depsRules = `
- 	< encoding/asn1
- 	< golang.org/x/crypto/cryptobyte/asn1
- 	< golang.org/x/crypto/cryptobyte
-+	< crypto/internal/backend
- 	< crypto/internal/bigmod
- 	< crypto/dsa, crypto/elliptic, crypto/rsa
- 	< crypto/ecdsa
-@@ -812,7 +816,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -812,7 +815,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -872,7 +819,7 @@ index 578b4d6f68504c..0a69b3e3167ee4 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -822,7 +826,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -822,7 +825,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 790c2b808d6..34c6aab86be 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -183,7 +183,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..542b21f1a25e05
+index 00000000000000..3543e4eff7402d
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,321 @@
@@ -501,11 +501,11 @@ index 00000000000000..542b21f1a25e05
 +	return cng.NewPublicKeyDSA(cng.DSAParameters{p, q, g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) (r, s cng.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s cng.BigInt, err error) {
 +	return cng.SignDSA(priv, hash)
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go

From c18168d03ace1a9ae25a98cc0bb5ebd92e7ca0d5 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 12 Dec 2024 07:46:55 +0000
Subject: [PATCH 138/887] fix:patch files

---
 patches/0002-Add-crypto-backend-foundation.patch | 14 +++++++-------
 patches/0003-Add-BoringSSL-crypto-backend.patch  | 12 +++++++-----
 patches/0004-Add-OpenSSL-crypto-backend.patch    | 16 +++++++++-------
 patches/0005-Add-CNG-crypto-backend.patch        | 14 ++++++++------
 4 files changed, 31 insertions(+), 25 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 6bb40d06a32..83625420309 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -269,7 +269,7 @@ index 00000000000000..3be888a0104809
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..9161e4b0a6ce85 100644
+index 4524bd492feba0..f8e20be38a3794 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,7 +18,12 @@ import (
@@ -360,7 +360,7 @@ index 4524bd492feba0..9161e4b0a6ce85 100644
  	return v.Cmp(r) == 0
  }
 +
-+func parseSignature(sig []byte) ([]uint, []uint, error) {
++func parseSignature(sig []byte) (boring.BigInt, boring.BigInt, error) {
 +	var r, s []byte
 +	var inner cryptobyte.String
 +	input := cryptobyte.String(sig)
@@ -371,10 +371,10 @@ index 4524bd492feba0..9161e4b0a6ce85 100644
 +		!inner.Empty() {
 +		return nil, nil, errors.New("invalid ASN.1")
 +	}
-+	return []uint(bbig.Enc(new(big.Int).SetBytes(r))), []uint(bbig.Enc(new(big.Int).SetBytes(s))), nil
++	return bbig.Enc(new(big.Int).SetBytes(r)), bbig.Enc(new(big.Int).SetBytes(s)), nil
 +}
 +
-+func encodeSignature(r, s []uint) ([]byte, error) {
++func encodeSignature(r, s boring.BigInt) ([]byte, error) {
 +	var b cryptobyte.Builder
 +	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
 +		addASN1IntBytes(b, bbig.Dec(r).Bytes())
@@ -935,7 +935,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..826732e87d4764
+index 00000000000000..5a1f8da56d4fed
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,224 @@
@@ -1156,11 +1156,11 @@ index 00000000000000..826732e87d4764
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (BigInt, BigInt, error)) (r, s BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/norequirefips.go b/src/crypto/internal/backend/norequirefips.go
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 46c71341c5a..11a92c92920 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,8 +5,8 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 256 ++++++++++++++++++
- 2 files changed, 268 insertions(+)
+ src/crypto/internal/backend/boring_linux.go   | 258 ++++++++++++++++++
+ 2 files changed, 270 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
 
@@ -30,10 +30,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..8cf833cf2bf3f9
+index 00000000000000..39757223de3425
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,256 @@
+@@ -0,0 +1,258 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -55,6 +55,8 @@ index 00000000000000..8cf833cf2bf3f9
 +
 +const Enabled = true
 +
++type BigInt = boring.BigInt
++
 +const RandReader = boring.RandReader
 +
 +func SupportsHash(h crypto.Hash) bool {
@@ -283,7 +285,7 @@ index 00000000000000..8cf833cf2bf3f9
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s boring.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (boring.BigInt, boring.BigInt, error)) (r, s boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index ffa29c6057f..f944c639ba2 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 375 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 377 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 460 insertions(+), 25 deletions(-)
+ 36 files changed, 462 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..939dc54a0e8014
+index 00000000000000..fcffdbf1162816
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,375 @@
+@@ -0,0 +1,377 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -223,6 +223,8 @@ index 00000000000000..939dc54a0e8014
 +// Enabled controls whether FIPS crypto is enabled.
 +const Enabled = true
 +
++type BigInt = openssl.BigInt
++
 +// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
 +// FreeBSD library version numbering does not directly align to the version of OpenSSL.
 +// Its preferred search order is 11 -> 111.
@@ -550,13 +552,13 @@ index 00000000000000..939dc54a0e8014
 +	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s openssl.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
 +	sig, err := openssl.SignDSA(priv, hash)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +
-+	r, s, err := parseSignature(sig)
++	r, s, err = parseSignature(sig)
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -564,7 +566,7 @@ index 00000000000000..939dc54a0e8014
 +	return openssl.BigInt(r), openssl.BigInt(s), nil
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s openssl.BigInt) ([]byte, error)) bool {
 +	sig, err := encodeSignature(r, s)
 +	if err != nil {
 +		return false
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 34c6aab86be..f18c1b4283a 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 321 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 323 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 416 insertions(+), 27 deletions(-)
+ 36 files changed, 418 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..3543e4eff7402d
+index 00000000000000..bb2915ace01223
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,321 @@
+@@ -0,0 +1,323 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -213,6 +213,8 @@ index 00000000000000..3543e4eff7402d
 +// Enabled controls whether FIPS crypto is enabled.
 +const Enabled = true
 +
++type BigInt = cng.BigInt
++
 +func init() {
 +	// 1: FIPS required: abort the process if the system is not in FIPS mode.
 +	// other values: continue regardless of system-configured FIPS mode.
@@ -501,11 +503,11 @@ index 00000000000000..3543e4eff7402d
 +	return cng.NewPublicKeyDSA(cng.DSAParameters{p, q, g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) ([]uint, []uint, error)) (r, s cng.BigInt, err error) {
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {
 +	return cng.SignDSA(priv, hash)
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go

From 5916786ee8898b0fa21fc34a2d1684567e999f99 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 12 Dec 2024 08:02:18 +0000
Subject: [PATCH 139/887] fix:boringssl update

---
 patches/0003-Add-BoringSSL-crypto-backend.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 11a92c92920..7c8331b25d4 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -30,7 +30,7 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..39757223de3425
+index 00000000000000..31e57a8dffd4c3
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
 @@ -0,0 +1,258 @@
@@ -289,6 +289,6 @@ index 00000000000000..39757223de3425
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s []uint) ([]byte, error)) bool {
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s boring.BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}

From ce933c1cc95894240ee40b49fe351151df8f4712 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 09:54:33 +0100
Subject: [PATCH 140/887] upgrade AZL3 pipeline

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 2 +-
 eng/pipeline/pr-pipeline.yml                | 2 +-
 eng/pipeline/rolling-innerloop-pipeline.yml | 2 +-
 eng/pipeline/rolling-pipeline.yml           | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index d38cbe3be3f..b558d2e1095 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -29,7 +29,7 @@ resources:
     - container: mariner2arm64
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 48998dd148d..e8fd657e469 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -26,7 +26,7 @@ resources:
     - container: mariner2arm64
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index ef929e84564..ad3174cfc35 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -49,7 +49,7 @@ extends:
       mariner2arm64:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index c9be0e47187..814709fca90 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -42,7 +42,7 @@ extends:
       mariner2arm64:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241024144202-a3a1203
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
 
     stages:
       - template: stages/go-builder-matrix-stages.yml

From 279c65eaf08feba87a2a81f4f0fc4c131159171b Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 12 Dec 2024 13:16:16 +0000
Subject: [PATCH 141/887] fix linter

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 8 ++++----
 patches/0005-Add-CNG-crypto-backend.patch     | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index f944c639ba2..0286fecd9fc 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -193,7 +193,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..fcffdbf1162816
+index 00000000000000..85856d3c900eb8
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,377 @@
@@ -536,7 +536,7 @@ index 00000000000000..fcffdbf1162816
 +}
 +
 +func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
-+	generatedKey, err := openssl.GenerateKeyDSA(openssl.DSAParameters{p, q, g})
++	generatedKey, err := openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -545,11 +545,11 @@ index 00000000000000..fcffdbf1162816
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
-+	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{p, q, g}, x, y)
++	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, x, y)
 +}
 +
 +func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
-+	return openssl.NewPublicKeyDSA(openssl.DSAParameters{p, q, g}, y)
++	return openssl.NewPublicKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, y)
 +}
 +
 +func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index f18c1b4283a..b2c14715499 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -183,7 +183,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..bb2915ace01223
+index 00000000000000..e6feb6256e4a0d
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,323 @@
@@ -487,7 +487,7 @@ index 00000000000000..bb2915ace01223
 +}
 +
 +func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
-+	generatedKey, err := cng.GenerateKeyDSA(cng.DSAParameters{p, q, g})
++	generatedKey, err := cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -496,11 +496,11 @@ index 00000000000000..bb2915ace01223
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
-+	return cng.NewPrivateKeyDSA(cng.DSAParameters{p, q, g}, x, y)
++	return cng.NewPrivateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, x, y)
 +}
 +
 +func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
-+	return cng.NewPublicKeyDSA(cng.DSAParameters{p, q, g}, y)
++	return cng.NewPublicKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, y)
 +}
 +
 +func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {

From 111f9048b25c21695a7f6a1ca43e12eb39826d4d Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 12:45:46 +0100
Subject: [PATCH 142/887] add missing copyright headers

---
 .../0002-Add-crypto-backend-foundation.patch  | 22 +++++++----
 patches/0004-Add-OpenSSL-crypto-backend.patch | 14 +++++--
 patches/0005-Add-CNG-crypto-backend.patch     | 14 +++++--
 ...GOFIPS-when-running-the-Go-toolchain.patch | 20 ++++++----
 ...upport-for-logging-used-Windows-APIs.patch | 38 ++++++++++++-------
 5 files changed, 72 insertions(+), 36 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 83625420309..b8461a103da 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -58,12 +58,12 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
- src/hash/boring_test.go                      |   5 +
+ src/hash/boring_test.go                      |   9 +
  src/hash/marshal_test.go                     |   5 +
- src/hash/notboring_test.go                   |   5 +
+ src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1141 insertions(+), 106 deletions(-)
+ 59 files changed, 1145 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -2277,10 +2277,14 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	< crypto/ed25519
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
-index 00000000000000..c90899062a9665
+index 00000000000000..b4cb21f3580737
 --- /dev/null
 +++ b/src/hash/boring_test.go
-@@ -0,0 +1,5 @@
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +//go:build goexperiment.boringcrypto
 +
 +package hash_test
@@ -2304,10 +2308,14 @@ index 3091f7a67acede..fead8cc4bec73a 100644
  
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
 new file mode 100644
-index 00000000000000..79f8c22f2b7416
+index 00000000000000..0f289915be6daa
 --- /dev/null
 +++ b/src/hash/notboring_test.go
-@@ -0,0 +1,5 @@
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +//go:build !goexperiment.boringcrypto
 +
 +package hash_test
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 0286fecd9fc..fd0ae950b7e 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -843,20 +843,26 @@ index 7f6237ffd59c11..7c821ae4bc5727 100644
  
  // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
-index c90899062a9665..802c0f8b8987bf 100644
+index b4cb21f3580737..ff24d12966e22f 100644
 --- a/src/hash/boring_test.go
 +++ b/src/hash/boring_test.go
-@@ -1,4 +1,4 @@
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
 -//go:build goexperiment.boringcrypto
 +//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
  
  package hash_test
  
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
-index 79f8c22f2b7416..f3e8ed3e1cbf20 100644
+index 0f289915be6daa..bd935326bf7305 100644
 --- a/src/hash/notboring_test.go
 +++ b/src/hash/notboring_test.go
-@@ -1,4 +1,4 @@
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
 -//go:build !goexperiment.boringcrypto
 +//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
  
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index b2c14715499..a8076bcb13d 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -793,10 +793,13 @@ index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
  
  // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
-index 802c0f8b8987bf..99e1933f84b52c 100644
+index ff24d12966e22f..a5242cca089049 100644
 --- a/src/hash/boring_test.go
 +++ b/src/hash/boring_test.go
-@@ -1,4 +1,4 @@
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
 -//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
 +//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
  
@@ -816,10 +819,13 @@ index f07b9aaa2c4898..2ff6c4827391c0 100644
  
  import (
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
-index f3e8ed3e1cbf20..a85fc430cfa655 100644
+index bd935326bf7305..40c84700690612 100644
 --- a/src/hash/notboring_test.go
 +++ b/src/hash/notboring_test.go
-@@ -1,4 +1,4 @@
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
 -//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
 +//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
  
diff --git a/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
index 25f46c09a6a..c9bb73f065d 100644
--- a/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
+++ b/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
@@ -4,17 +4,21 @@ Date: Wed, 14 Feb 2024 11:03:01 +0100
 Subject: [PATCH] unset GOFIPS when running the Go toolchain
 
 ---
- src/cmd/go/internal/gofips/gofips.go | 32 ++++++++++++++++++++++++++++
- src/cmd/go/main.go                   |  5 +++++
- 2 files changed, 37 insertions(+)
+ src/cmd/go/internal/gofips/gofips.go | 36 ++++++++++++++++++++++++++++
+ src/cmd/go/main.go                   |  5 ++++
+ 2 files changed, 41 insertions(+)
  create mode 100644 src/cmd/go/internal/gofips/gofips.go
 
 diff --git a/src/cmd/go/internal/gofips/gofips.go b/src/cmd/go/internal/gofips/gofips.go
 new file mode 100644
-index 00000000000000..009eece5b6c080
+index 00000000000000..1f3549cf1b4ab5
 --- /dev/null
 +++ b/src/cmd/go/internal/gofips/gofips.go
-@@ -0,0 +1,32 @@
+@@ -0,0 +1,36 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +// gofips is a package that, when imported, unsets the GOFIPS environment variable
 +// and stores it for later use.
 +//
@@ -48,10 +52,10 @@ index 00000000000000..009eece5b6c080
 +	return gofips, gofipsSet
 +}
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index d380aae489436f..fe619a8aadd2ae 100644
+index f2e4d890d3d61b..fd1f733f7018a1 100644
 --- a/src/cmd/go/main.go
 +++ b/src/cmd/go/main.go
-@@ -29,6 +29,7 @@ import (
+@@ -27,6 +27,7 @@ import (
  	"cmd/go/internal/fix"
  	"cmd/go/internal/fmtcmd"
  	"cmd/go/internal/generate"
@@ -59,7 +63,7 @@ index d380aae489436f..fe619a8aadd2ae 100644
  	"cmd/go/internal/help"
  	"cmd/go/internal/list"
  	"cmd/go/internal/modcmd"
-@@ -223,6 +224,10 @@ func invoke(cmd *base.Command, args []string) {
+@@ -301,6 +302,10 @@ func invoke(cmd *base.Command, args []string) {
  	// but in practice there might be skew
  	// This makes sure we all agree.
  	cfg.OrigEnv = toolchain.FilterEnv(os.Environ())
diff --git a/patches/0011-add-support-for-logging-used-Windows-APIs.patch b/patches/0011-add-support-for-logging-used-Windows-APIs.patch
index f156f655ae4..7c26330910b 100644
--- a/patches/0011-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0011-add-support-for-logging-used-Windows-APIs.patch
@@ -6,21 +6,21 @@ Subject: [PATCH] add support for logging used Windows APIs
 ---
  src/runtime/os_windows.go                    |   1 +
  src/runtime/syscall_windows.go               |   1 +
- src/runtime/syscalltrace_generate_windows.go |  46 +++++++
- src/runtime/syscalltrace_windows.go          | 127 +++++++++++++++++++
- src/runtime/syscalltrace_windows_test.go     |  77 +++++++++++
+ src/runtime/syscalltrace_generate_windows.go |  50 +++++++
+ src/runtime/syscalltrace_windows.go          | 131 +++++++++++++++++++
+ src/runtime/syscalltrace_windows_test.go     |  81 ++++++++++++
  src/runtime/zsyscalltrace_windows.go         |  60 +++++++++
- 6 files changed, 312 insertions(+)
+ 6 files changed, 324 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index 4aabc29644e6f9..fc7296f28ab12f 100644
+index 7183e79f7df093..2b382202bf7e49 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
-@@ -222,6 +222,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
+@@ -223,6 +223,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
  	if name[len(name)-1] != 0 {
  		throw("usage")
  	}
@@ -29,7 +29,7 @@ index 4aabc29644e6f9..fc7296f28ab12f 100644
  	return stdFunction(unsafe.Pointer(f))
  }
 diff --git a/src/runtime/syscall_windows.go b/src/runtime/syscall_windows.go
-index 69d720a395c48d..2772c019a15af2 100644
+index 85b1b8c9024a73..384be25350726e 100644
 --- a/src/runtime/syscall_windows.go
 +++ b/src/runtime/syscall_windows.go
 @@ -443,6 +443,7 @@ func syscall_loadlibrary(filename *uint16) (handle, err uintptr) {
@@ -42,10 +42,14 @@ index 69d720a395c48d..2772c019a15af2 100644
  	if outhandle != 0 {
 diff --git a/src/runtime/syscalltrace_generate_windows.go b/src/runtime/syscalltrace_generate_windows.go
 new file mode 100644
-index 00000000000000..e3bbe376f43ce9
+index 00000000000000..17fb696be88776
 --- /dev/null
 +++ b/src/runtime/syscalltrace_generate_windows.go
-@@ -0,0 +1,46 @@
+@@ -0,0 +1,50 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +//go:build ignore
 +
 +package main
@@ -94,10 +98,14 @@ index 00000000000000..e3bbe376f43ce9
 +}
 diff --git a/src/runtime/syscalltrace_windows.go b/src/runtime/syscalltrace_windows.go
 new file mode 100644
-index 00000000000000..15245e4414c0b8
+index 00000000000000..ed9161b797c4f9
 --- /dev/null
 +++ b/src/runtime/syscalltrace_windows.go
-@@ -0,0 +1,127 @@
+@@ -0,0 +1,131 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +//go:generate go run syscalltrace_generate_windows.go -output zsyscalltrace_windows.go os_windows syscalltrace_windows
 +
 +package runtime
@@ -227,10 +235,14 @@ index 00000000000000..15245e4414c0b8
 +}
 diff --git a/src/runtime/syscalltrace_windows_test.go b/src/runtime/syscalltrace_windows_test.go
 new file mode 100644
-index 00000000000000..31d1fc18bb8640
+index 00000000000000..626c5e98f7eae4
 --- /dev/null
 +++ b/src/runtime/syscalltrace_windows_test.go
-@@ -0,0 +1,77 @@
+@@ -0,0 +1,81 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
 +package runtime_test
 +
 +import (

From 885ae5db5ab2a5273e7d5fd69a1916ffc5903952 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 11:00:28 +0100
Subject: [PATCH 143/887] upgrade backends and fix signatures

---
 .../0002-Add-crypto-backend-foundation.patch  |  46 +-
 .../0003-Add-BoringSSL-crypto-backend.patch   |   9 +-
 patches/0004-Add-OpenSSL-crypto-backend.patch |  27 +-
 patches/0005-Add-CNG-crypto-backend.patch     |  31 +-
 patches/0006-Vendor-crypto-backends.patch     | 724 ++++++++++--------
 5 files changed, 462 insertions(+), 375 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index b8461a103da..4b635481f20 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -26,7 +26,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/backend/bbig/big.go      |  17 ++
  src/crypto/internal/backend/common.go        |  92 ++++++++
  src/crypto/internal/backend/isrequirefips.go |   9 +
- src/crypto/internal/backend/nobackend.go     | 224 +++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go     | 223 +++++++++++++++++++
  src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
  src/crypto/md5/md5.go                        |   7 +
@@ -53,8 +53,8 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_client.go           |  25 ++-
  src/crypto/tls/handshake_server.go           |  25 ++-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
- src/crypto/tls/key_schedule.go               |  18 +-
- src/crypto/tls/prf.go                        |  77 +++++--
+ src/crypto/tls/key_schedule.go               |  23 ++-
+ src/crypto/tls/prf.go                        |  77 ++++---
  src/crypto/tls/prf_test.go                   |  12 +-
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
@@ -63,7 +63,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1145 insertions(+), 106 deletions(-)
+ 59 files changed, 1144 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -269,7 +269,7 @@ index 00000000000000..3be888a0104809
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..f8e20be38a3794 100644
+index 4524bd492feba0..19f3a125017b61 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,7 +18,12 @@ import (
@@ -290,7 +290,7 @@ index 4524bd492feba0..f8e20be38a3794 100644
  	}
  
 +	if boring.Enabled && boring.SupportsDSA(L, N) {
-+		p, q, g, err := boring.GenerateDSAParameters(L, N)
++		p, q, g, err := boring.GenerateParametersDSA(L, N)
 +		if err != nil {
 +			return err
 +		}
@@ -938,7 +938,7 @@ new file mode 100644
 index 00000000000000..5a1f8da56d4fed
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,224 @@
+@@ -0,0 +1,223 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -953,7 +953,6 @@ index 00000000000000..5a1f8da56d4fed
 +	"crypto"
 +	"crypto/cipher"
 +	"hash"
-+	"io"
 +)
 +
 +const Enabled = false
@@ -1064,7 +1063,7 @@ index 00000000000000..5a1f8da56d4fed
 +
 +func SupportsHKDF() bool { panic("cryptobackend: not available") }
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -1137,7 +1136,7 @@ index 00000000000000..5a1f8da56d4fed
 +	panic("cryptobackend: not available")
 +}
 +
-+func GenerateDSAParameters(l, n int) (p, q, g BigInt, err error) {
++func GenerateParametersDSA(l, n int) (p, q, g BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -1984,28 +1983,33 @@ index b8cf4c3fa50b24..bc5d32a29c50c4 100644
  	}
  	state, err := marshaler.MarshalBinary()
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 1636baf79e7288..c9a5877d3d504f 100644
+index 1636baf79e7288..747c3c0883230c 100644
 --- a/src/crypto/tls/key_schedule.go
 +++ b/src/crypto/tls/key_schedule.go
-@@ -61,7 +61,16 @@ func (c *cipherSuiteTLS13) expandLabel(secret []byte, label string, context []by
+@@ -60,10 +60,18 @@ func (c *cipherSuiteTLS13) expandLabel(secret []byte, label string, context []by
+ 		// significantly more confusing to users.
  		panic(fmt.Errorf("failed to construct HKDF label: %s", err))
  	}
- 	out := make([]byte, length)
+-	out := make([]byte, length)
 -	n, err := hkdf.Expand(c.hash.New, secret, hkdfLabelBytes).Read(out)
-+	var r io.Reader
+-	if err != nil || n != length {
+-		panic("tls: HKDF-Expand-Label invocation failed unexpectedly")
++	var out []byte
 +	if boring.Enabled && boring.SupportsHKDF() {
-+		r, err = boring.ExpandHKDF(c.hash.New, secret, hkdfLabelBytes)
++		out, err = boring.ExpandHKDF(c.hash.New, secret, hkdfLabelBytes, length)
 +		if err != nil {
 +			panic(fmt.Errorf("tls: HKDF-Expand-Label invocation failed unexpectedly: %s", err))
 +		}
 +	} else {
-+		r = hkdf.Expand(c.hash.New, secret, hkdfLabelBytes)
-+	}
-+	n, err := r.Read(out)
- 	if err != nil || n != length {
- 		panic("tls: HKDF-Expand-Label invocation failed unexpectedly")
++		out = make([]byte, length)
++		n, err := hkdf.Expand(c.hash.New, secret, hkdfLabelBytes).Read(out)
++		if err != nil || n != length {
++			panic("tls: HKDF-Expand-Label invocation failed unexpectedly")
++		}
  	}
-@@ -81,6 +90,13 @@ func (c *cipherSuiteTLS13) extract(newSecret, currentSecret []byte) []byte {
+ 	return out
+ }
+@@ -81,6 +89,13 @@ func (c *cipherSuiteTLS13) extract(newSecret, currentSecret []byte) []byte {
  	if newSecret == nil {
  		newSecret = make([]byte, c.hash.Size())
  	}
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 7c8331b25d4..a9449fa8184 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 258 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 257 ++++++++++++++++++
  2 files changed, 270 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
@@ -33,7 +33,7 @@ new file mode 100644
 index 00000000000000..31e57a8dffd4c3
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,258 @@
+@@ -0,0 +1,257 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -50,7 +50,6 @@ index 00000000000000..31e57a8dffd4c3
 +	"crypto/cipher"
 +	"crypto/internal/boring"
 +	"hash"
-+	"io"
 +)
 +
 +const Enabled = true
@@ -187,7 +186,7 @@ index 00000000000000..31e57a8dffd4c3
 +
 +func SupportsHKDF() bool { return false }
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -266,7 +265,7 @@ index 00000000000000..31e57a8dffd4c3
 +	return false
 +}
 +
-+func GenerateDSAParameters(l, n int) (p, q, g boring.BigInt, err error) {
++func GenerateParametersDSA(l, n int) (p, q, g boring.BigInt, err error) {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index fd0ae950b7e..83172d6a85a 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 377 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 376 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 462 insertions(+), 25 deletions(-)
+ 36 files changed, 461 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -196,7 +196,7 @@ new file mode 100644
 index 00000000000000..85856d3c900eb8
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,377 @@
+@@ -0,0 +1,376 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -214,7 +214,6 @@ index 00000000000000..85856d3c900eb8
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
 +	"hash"
-+	"io"
 +	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
@@ -454,8 +453,8 @@ index 00000000000000..85856d3c900eb8
 +	return openssl.SupportsHKDF()
 +}
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
-+	return openssl.ExpandHKDF(h, pseudorandomKey, info)
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
@@ -530,8 +529,8 @@ index 00000000000000..85856d3c900eb8
 +	return openssl.SupportsDSA()
 +}
 +
-+func GenerateDSAParameters(l, n int) (p, q, g openssl.BigInt, err error) {
-+	params, err := openssl.GenerateDSAParameters(l, n)
++func GenerateParametersDSA(l, n int) (p, q, g openssl.BigInt, err error) {
++	params, err := openssl.GenerateParametersDSA(l, n)
 +	return params.P, params.Q, params.G, err
 +}
 +
@@ -706,7 +705,7 @@ index f8485dc3ca1c29..9c1d3d279c472f 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index c9a5877d3d504f..952eadd09e38ab 100644
+index 747c3c0883230c..ee9274bb63b9b4 100644
 --- a/src/crypto/tls/key_schedule.go
 +++ b/src/crypto/tls/key_schedule.go
 @@ -7,6 +7,7 @@ package tls
@@ -770,24 +769,24 @@ index c83a7272c9f01f..a0548a7f9179c5 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index df27f25e789f05..12d8c8f4f97321 100644
+index df27f25e789f05..30e45951c763fa 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
  go 1.24
  
  require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index b4efd6d3c50c11..4c3ca847c21cd2 100644
+index b4efd6d3c50c11..fd8881e46df76e 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index a8076bcb13d..cc435b0a0ee 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 323 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 322 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 418 insertions(+), 27 deletions(-)
+ 36 files changed, 417 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -186,7 +186,7 @@ new file mode 100644
 index 00000000000000..e6feb6256e4a0d
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,323 @@
+@@ -0,0 +1,322 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -204,7 +204,6 @@ index 00000000000000..e6feb6256e4a0d
 +	"crypto/internal/boring/fipstls"
 +	"crypto/internal/boring/sig"
 +	"hash"
-+	"io"
 +	_ "unsafe"
 +
 +	"github.com/microsoft/go-crypto-winnative/cng"
@@ -394,8 +393,8 @@ index 00000000000000..e6feb6256e4a0d
 +	return cng.SupportsHKDF()
 +}
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
-+	return cng.ExpandHKDF(h, pseudorandomKey, info)
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return cng.ExpandHKDF(h, pseudorandomKey, info, keyLength)
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
@@ -478,8 +477,8 @@ index 00000000000000..e6feb6256e4a0d
 +	return n == 160 || n == 256
 +}
 +
-+func GenerateDSAParameters(l, n int) (p, q, g cng.BigInt, err error) {
-+	params, err := cng.GenerateDSAParameters(l)
++func GenerateParametersDSA(l, n int) (p, q, g cng.BigInt, err error) {
++	params, err := cng.GenerateParametersDSA(l)
 +	if err != nil {
 +		return nil, nil, nil, err
 +	}
@@ -734,26 +733,26 @@ index a0548a7f9179c5..ae6117a1554b7f 100644
  package x509
  
 diff --git a/src/go.mod b/src/go.mod
-index 12d8c8f4f97321..8a95b6f65c63ef 100644
+index 30e45951c763fa..0209eeb6b8642c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
++	github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
  	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
  	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
  )
 diff --git a/src/go.sum b/src/go.sum
-index 4c3ca847c21cd2..54c859b46edd1c 100644
+index fd8881e46df76e..1d0d5a1b7845bb 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3 h1:5QU8ZbOJ8pUBEhxIOm6+teyQMgeBFu3Gos5ue7Rvlgg=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d h1:UKPx/2ug3daetm1rPOKyEHovWbh3hekPK8p1wygTcOI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383 h1:fMAxrMWT19/kkIZIuB9cjqW8SqRxCH2+2ZiZr5qrpuI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index 43db9981ab9..eafa5600be4 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -15,21 +15,21 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../golang-fips/openssl/v2/cgo_go124.go       |   18 +
  .../golang-fips/openssl/v2/cipher.go          |  569 +++++++++
  .../github.com/golang-fips/openssl/v2/des.go  |  114 ++
- .../github.com/golang-fips/openssl/v2/dsa.go  |  324 +++++
- .../github.com/golang-fips/openssl/v2/ec.go   |   51 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  313 +++++
- .../golang-fips/openssl/v2/ecdsa.go           |  211 ++++
- .../golang-fips/openssl/v2/ed25519.go         |  221 ++++
- .../github.com/golang-fips/openssl/v2/evp.go  |  519 ++++++++
- .../golang-fips/openssl/v2/goopenssl.c        |  240 ++++
- .../golang-fips/openssl/v2/goopenssl.h        |  259 ++++
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  323 +++++
+ .../github.com/golang-fips/openssl/v2/ec.go   |   68 ++
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  303 +++++
+ .../golang-fips/openssl/v2/ecdsa.go           |  208 ++++
+ .../golang-fips/openssl/v2/ed25519.go         |  218 ++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  569 +++++++++
+ .../golang-fips/openssl/v2/goopenssl.c        |  248 ++++
+ .../golang-fips/openssl/v2/goopenssl.h        |  262 +++++
  .../github.com/golang-fips/openssl/v2/hash.go | 1041 +++++++++++++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  285 +++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  322 +++++
  .../github.com/golang-fips/openssl/v2/hmac.go |  274 +++++
  .../github.com/golang-fips/openssl/v2/init.go |   64 +
  .../golang-fips/openssl/v2/init_unix.go       |   31 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
- .../golang-fips/openssl/v2/openssl.go         |  462 ++++++++
+ .../golang-fips/openssl/v2/openssl.go         |  469 ++++++++
  .../golang-fips/openssl/v2/params.go          |  210 ++++
  .../golang-fips/openssl/v2/pbkdf2.go          |   62 +
  .../golang-fips/openssl/v2/port_dsa.c         |   85 ++
@@ -37,7 +37,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../github.com/golang-fips/openssl/v2/rand.go |   20 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   66 ++
  .../github.com/golang-fips/openssl/v2/rsa.go  |  408 +++++++
- .../github.com/golang-fips/openssl/v2/shims.h |  401 +++++++
+ .../github.com/golang-fips/openssl/v2/shims.h |  416 +++++++
  .../golang-fips/openssl/v2/thread_setup.go    |   14 +
  .../golang-fips/openssl/v2/thread_setup.h     |    4 +
  .../openssl/v2/thread_setup_unix.c            |   64 +
@@ -51,24 +51,24 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../go-crypto-winnative/cng/cipher.go         |   52 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +++
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 ++
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  469 ++++++++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 +++
  .../microsoft/go-crypto-winnative/cng/hash.go |  306 +++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  180 +++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  124 ++
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 ++
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
- .../microsoft/go-crypto-winnative/cng/rsa.go  |  370 ++++++
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++++++
  .../go-crypto-winnative/cng/tls1prf.go        |   88 ++
  .../internal/bcrypt/bcrypt_windows.go         |  359 ++++++
  .../internal/bcrypt/zsyscall_windows.go       |  389 ++++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   11 +
- 63 files changed, 10958 insertions(+)
+ 63 files changed, 11044 insertions(+)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
@@ -1187,10 +1187,10 @@ index 00000000000000..cd006544b5111b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..c56071f577f4f2
+index 00000000000000..384424c215dcf1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,324 @@
+@@ -0,0 +1,323 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1253,8 +1253,8 @@ index 00000000000000..c56071f577f4f2
 +	return f(k._pkey)
 +}
 +
-+// GenerateDSAParameters generates a set of DSA parameters.
-+func GenerateDSAParameters(l, n int) (DSAParameters, error) {
++// GenerateParametersDSA generates a set of DSA parameters.
++func GenerateParametersDSA(l, n int) (DSAParameters, error) {
 +	// The DSA parameters are generated by creating a new DSA key and
 +	// extracting the domain parameters from it.
 +
@@ -1340,35 +1340,34 @@ index 00000000000000..c56071f577f4f2
 +}
 +
 +// GenerateKeyDSA generates a new private DSA key using the given parameters.
-+func GenerateKeyDSA(params DSAParameters) (*PrivateKeyDSA, error) {
++func GenerateKeyDSA(params DSAParameters) (x, y BigInt, err error) {
 +	pkey, err := newDSA(params, nil, nil)
 +	if err != nil {
-+		return nil, err
++		return nil, nil, err
 +	}
-+	var x, y C.GO_BIGNUM_PTR
++	defer C.go_openssl_EVP_PKEY_free(pkey)
++	var bx, by C.GO_BIGNUM_PTR
 +	switch vMajor {
 +	case 1:
 +		dsa := getDSA(pkey)
 +		if vMinor == 0 {
-+			C.go_openssl_DSA_get0_key_backport(dsa, &y, &x)
++			C.go_openssl_DSA_get0_key_backport(dsa, &by, &bx)
 +		} else {
-+			C.go_openssl_DSA_get0_key(dsa, &y, &x)
++			C.go_openssl_DSA_get0_key(dsa, &by, &bx)
 +		}
 +	case 3:
 +		defer func() {
-+			C.go_openssl_BN_clear_free(x)
-+			C.go_openssl_BN_free(y)
++			C.go_openssl_BN_clear_free(bx)
++			C.go_openssl_BN_free(by)
 +		}()
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY, &y) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &x) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_get_bn_param")
++		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY, &by) != 1 ||
++			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &bx) != 1 {
++			return nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
-+	k := &PrivateKeyDSA{params, bnToBig(x), bnToBig(y), pkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
-+	return k, nil
++	return bnToBig(bx), bnToBig(by), nil
 +}
 +
 +// SignDSA signs a hash (which should be the result of hashing a larger message).
@@ -1517,10 +1516,10 @@ index 00000000000000..c56071f577f4f2
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..03c51e5a74cf1a
+index 00000000000000..734c14b9bc1e3e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,51 @@
+@@ -0,0 +1,68 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1528,18 +1527,35 @@ index 00000000000000..03c51e5a74cf1a
 +// #include "goopenssl.h"
 +import "C"
 +
-+func curveNID(curve string) (C.int, error) {
++func curveNID(curve string) C.int {
 +	switch curve {
 +	case "P-224":
-+		return C.GO_NID_secp224r1, nil
++		return C.GO_NID_secp224r1
 +	case "P-256":
-+		return C.GO_NID_X9_62_prime256v1, nil
++		return C.GO_NID_X9_62_prime256v1
 +	case "P-384":
-+		return C.GO_NID_secp384r1, nil
++		return C.GO_NID_secp384r1
 +	case "P-521":
-+		return C.GO_NID_secp521r1, nil
++		return C.GO_NID_secp521r1
++	default:
++		panic("openssl: unknown curve " + curve)
++	}
++}
++
++// curveSize returns the size of the curve in bytes.
++func curveSize(curve string) int {
++	switch curve {
++	case "P-224":
++		return 224 / 8
++	case "P-256":
++		return 256 / 8
++	case "P-384":
++		return 384 / 8
++	case "P-521":
++		return (521 + 7) / 8
++	default:
++		panic("openssl: unknown curve " + curve)
 +	}
-+	return 0, errUnknownCurve
 +}
 +
 +// encodeEcPoint encodes pt.
@@ -1574,10 +1590,10 @@ index 00000000000000..03c51e5a74cf1a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..5b146749350bf5
+index 00000000000000..ad392dca1ced82
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,313 @@
+@@ -0,0 +1,303 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1587,6 +1603,7 @@ index 00000000000000..5b146749350bf5
 +import (
 +	"errors"
 +	"runtime"
++	"slices"
 +	"unsafe"
 +)
 +
@@ -1600,9 +1617,8 @@ index 00000000000000..5b146749350bf5
 +}
 +
 +type PrivateKeyECDH struct {
-+	_pkey        C.GO_EVP_PKEY_PTR
-+	curve        string
-+	hasPublicKey bool
++	_pkey C.GO_EVP_PKEY_PTR
++	curve string
 +}
 +
 +func (k *PrivateKeyECDH) finalize() {
@@ -1610,14 +1626,14 @@ index 00000000000000..5b146749350bf5
 +}
 +
 +func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
-+	if len(bytes) < 1 {
-+		return nil, errors.New("NewPublicKeyECDH: missing key")
++	if len(bytes) != 1+2*curveSize(curve) {
++		return nil, errors.New("NewPublicKeyECDH: wrong key length")
 +	}
 +	pkey, err := newECDHPkey(curve, bytes, false)
 +	if err != nil {
 +		return nil, err
 +	}
-+	k := &PublicKeyECDH{pkey, append([]byte(nil), bytes...)}
++	k := &PublicKeyECDH{pkey, slices.Clone(bytes)}
 +	runtime.SetFinalizer(k, (*PublicKeyECDH).finalize)
 +	return k, nil
 +}
@@ -1625,24 +1641,20 @@ index 00000000000000..5b146749350bf5
 +func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
 +
 +func NewPrivateKeyECDH(curve string, bytes []byte) (*PrivateKeyECDH, error) {
++	if len(bytes) != curveSize(curve) {
++		return nil, errors.New("NewPrivateKeyECDH: wrong key length")
++	}
 +	pkey, err := newECDHPkey(curve, bytes, true)
 +	if err != nil {
 +		return nil, err
 +	}
-+	k := &PrivateKeyECDH{pkey, curve, false}
++	k := &PrivateKeyECDH{pkey, curve}
 +	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
 +	return k, nil
 +}
 +
 +func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
 +	defer runtime.KeepAlive(k)
-+	if !k.hasPublicKey {
-+		err := deriveEcdhPublicKey(k._pkey, k.curve)
-+		if err != nil {
-+			return nil, err
-+		}
-+		k.hasPublicKey = true
-+	}
 +	var pkey C.GO_EVP_PKEY_PTR
 +	defer func() {
 +		C.go_openssl_EVP_PKEY_free(pkey)
@@ -1692,10 +1704,7 @@ index 00000000000000..5b146749350bf5
 +}
 +
 +func newECDHPkey(curve string, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, error) {
-+	nid, err := curveNID(curve)
-+	if err != nil {
-+		return nil, err
-+	}
++	nid := curveNID(curve)
 +	switch vMajor {
 +	case 1:
 +		return newECDHPkey1(nid, bytes, isPrivate)
@@ -1718,6 +1727,7 @@ index 00000000000000..5b146749350bf5
 +			C.go_openssl_EC_KEY_free(key)
 +		}
 +	}()
++	group := C.go_openssl_EC_KEY_get0_group(key)
 +	if isPrivate {
 +		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
 +		if priv == nil {
@@ -1727,8 +1737,15 @@ index 00000000000000..5b146749350bf5
 +		if C.go_openssl_EC_KEY_set_private_key(key, priv) != 1 {
 +			return nil, newOpenSSLError("EC_KEY_set_private_key")
 +		}
++		pub, err := pointMult(group, priv)
++		if err != nil {
++			return nil, err
++		}
++		defer C.go_openssl_EC_POINT_free(pub)
++		if C.go_openssl_EC_KEY_set_public_key(key, pub) != 1 {
++			return nil, newOpenSSLError("EC_KEY_set_public_key")
++		}
 +	} else {
-+		group := C.go_openssl_EC_KEY_get0_group(key)
 +		pub := C.go_openssl_EC_POINT_new(group)
 +		if pub == nil {
 +			return nil, newOpenSSLError("EC_POINT_new")
@@ -1741,6 +1758,14 @@ index 00000000000000..5b146749350bf5
 +			return nil, newOpenSSLError("EC_KEY_set_public_key")
 +		}
 +	}
++	if C.go_openssl_EC_KEY_check_key(key) != 1 {
++		// Match upstream error message.
++		if isPrivate {
++			return nil, errors.New("crypto/ecdh: invalid private key")
++		} else {
++			return nil, errors.New("crypto/ecdh: invalid public key")
++		}
++	}
 +	return newEVPPKEY(key)
 +}
 +
@@ -1755,7 +1780,19 @@ index 00000000000000..5b146749350bf5
 +	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
 +	var selection C.int
 +	if isPrivate {
-+		bld.addBin(_OSSL_PKEY_PARAM_PRIV_KEY, bytes, true)
++		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
++		if priv == nil {
++			return nil, newOpenSSLError("BN_bin2bn")
++		}
++		defer C.go_openssl_BN_clear_free(priv)
++		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error) {
++			return pointMult(group, priv)
++		})
++		if err != nil {
++			return nil, err
++		}
++		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
++		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, priv)
 +		selection = C.GO_EVP_PKEY_KEYPAIR
 +	} else {
 +		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, bytes)
@@ -1767,62 +1804,31 @@ index 00000000000000..5b146749350bf5
 +		return nil, err
 +	}
 +	defer C.go_openssl_OSSL_PARAM_free(params)
-+	return newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
++	pkey, err := newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
++	if err != nil {
++		return nil, err
++	}
++
++	if err := checkPkey(pkey, isPrivate); err != nil {
++		C.go_openssl_EVP_PKEY_free(pkey)
++		return nil, errors.New("crypto/ecdh: " + err.Error())
++	}
++	return pkey, nil
 +}
 +
-+// deriveEcdhPublicKey sets the raw public key of pkey by deriving it from
-+// the raw private key.
-+func deriveEcdhPublicKey(pkey C.GO_EVP_PKEY_PTR, curve string) error {
-+	derive := func(group C.GO_EC_GROUP_PTR, priv C.GO_BIGNUM_PTR) (C.GO_EC_POINT_PTR, error) {
-+		// OpenSSL does not expose any method to generate the public
-+		// key from the private key [1], so we have to calculate it here.
-+		// [1] https://github.com/openssl/openssl/issues/18437#issuecomment-1144717206
-+		pt := C.go_openssl_EC_POINT_new(group)
-+		if pt == nil {
-+			return nil, newOpenSSLError("EC_POINT_new")
-+		}
-+		if C.go_openssl_EC_POINT_mul(group, pt, priv, nil, nil, nil) == 0 {
-+			C.go_openssl_EC_POINT_free(pt)
-+			return nil, newOpenSSLError("EC_POINT_mul")
-+		}
-+		return pt, nil
++func pointMult(group C.GO_EC_GROUP_PTR, priv C.GO_BIGNUM_PTR) (C.GO_EC_POINT_PTR, error) {
++	// OpenSSL does not expose any method to generate the public
++	// key from the private key [1], so we have to calculate it here.
++	// [1] https://github.com/openssl/openssl/issues/18437#issuecomment-1144717206
++	pt := C.go_openssl_EC_POINT_new(group)
++	if pt == nil {
++		return nil, newOpenSSLError("EC_POINT_new")
 +	}
-+	switch vMajor {
-+	case 1:
-+		key := getECKey(pkey)
-+		priv := C.go_openssl_EC_KEY_get0_private_key(key)
-+		if priv == nil {
-+			return newOpenSSLError("EC_KEY_get0_private_key")
-+		}
-+		group := C.go_openssl_EC_KEY_get0_group(key)
-+		pub, err := derive(group, priv)
-+		if err != nil {
-+			return err
-+		}
-+		defer C.go_openssl_EC_POINT_free(pub)
-+		if C.go_openssl_EC_KEY_set_public_key(key, pub) != 1 {
-+			return newOpenSSLError("EC_KEY_set_public_key")
-+		}
-+	case 3:
-+		var priv C.GO_BIGNUM_PTR
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
-+			return newOpenSSLError("EVP_PKEY_get_bn_param")
-+		}
-+		defer C.go_openssl_BN_clear_free(priv)
-+		nid, _ := curveNID(curve)
-+		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error) {
-+			return derive(group, priv)
-+		})
-+		if err != nil {
-+			return err
-+		}
-+		if C.go_openssl_EVP_PKEY_set1_encoded_public_key(pkey, base(pubBytes), C.size_t(len(pubBytes))) != 1 {
-+			return newOpenSSLError("EVP_PKEY_set1_encoded_public_key")
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
++	if C.go_openssl_EC_POINT_mul(group, pt, priv, nil, nil, nil) == 0 {
++		C.go_openssl_EC_POINT_free(pt)
++		return nil, newOpenSSLError("EC_POINT_mul")
 +	}
-+	return nil
++	return pt, nil
 +}
 +
 +func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
@@ -1887,16 +1893,16 @@ index 00000000000000..5b146749350bf5
 +	if err := bnToBinPad(priv, bytes); err != nil {
 +		return nil, nil, err
 +	}
-+	k = &PrivateKeyECDH{pkey, curve, true}
++	k = &PrivateKeyECDH{pkey, curve}
 +	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
 +	return k, bytes, nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..f85782a6e92268
+index 00000000000000..bc5f1117fd4355
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,211 @@
+@@ -0,0 +1,208 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2021,10 +2027,7 @@ index 00000000000000..f85782a6e92268
 +}
 +
 +func newECDSAKey(curve string, x, y, d BigInt) (C.GO_EVP_PKEY_PTR, error) {
-+	nid, err := curveNID(curve)
-+	if err != nil {
-+		return nil, err
-+	}
++	nid := curveNID(curve)
 +	var bx, by, bd C.GO_BIGNUM_PTR
 +	defer func() {
 +		C.go_openssl_BN_free(bx)
@@ -2110,10 +2113,10 @@ index 00000000000000..f85782a6e92268
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..77ccbf590d87b5
+index 00000000000000..cd237025109997
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,221 @@
+@@ -0,0 +1,218 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2125,7 +2128,6 @@ index 00000000000000..77ccbf590d87b5
 +	"runtime"
 +	"strconv"
 +	"sync"
-+	"unsafe"
 +)
 +
 +const (
@@ -2153,9 +2155,7 @@ index 00000000000000..77ccbf590d87b5
 +			}
 +		}
 +	case 3:
-+		name := C.CString("ED25519")
-+		defer C.free(unsafe.Pointer(name))
-+		sig := C.go_openssl_EVP_SIGNATURE_fetch(nil, name, nil)
++		sig := C.go_openssl_EVP_SIGNATURE_fetch(nil, keyTypeED25519, nil)
 +		if sig != nil {
 +			C.go_openssl_EVP_SIGNATURE_free(sig)
 +			return true
@@ -2337,10 +2337,10 @@ index 00000000000000..77ccbf590d87b5
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..91296a93f72d55
+index 00000000000000..ef68bbfb8fb065
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,519 @@
+@@ -0,0 +1,569 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2356,6 +2356,12 @@ index 00000000000000..91296a93f72d55
 +	"unsafe"
 +)
 +
++var (
++	keyTypeRSA     = C.CString("RSA")
++	keyTypeEC      = C.CString("EC")
++	keyTypeED25519 = C.CString("ED25519")
++)
++
 +// cacheMD is a cache of crypto.Hash to GO_EVP_MD_PTR.
 +var cacheMD sync.Map
 +
@@ -2500,36 +2506,53 @@ index 00000000000000..91296a93f72d55
 +	return nil
 +}
 +
++// generateEVPPKey generates a new EVP_PKEY with the given id and properties.
 +func generateEVPPKey(id C.int, bits int, curve string) (C.GO_EVP_PKEY_PTR, error) {
 +	if bits != 0 && curve != "" {
 +		return nil, fail("incorrect generateEVPPKey parameters")
 +	}
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(id, nil)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new_id failed")
-+	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	if C.go_openssl_EVP_PKEY_keygen_init(ctx) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_keygen_init failed")
-+	}
-+	if bits != 0 {
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_RSA_KEYGEN_BITS, C.int(bits), nil) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++	var pkey C.GO_EVP_PKEY_PTR
++	switch vMajor {
++	case 1:
++		ctx := C.go_openssl_EVP_PKEY_CTX_new_id(id, nil)
++		if ctx == nil {
++			return nil, newOpenSSLError("EVP_PKEY_CTX_new_id")
 +		}
-+	}
-+	if curve != "" {
-+		nid, err := curveNID(curve)
-+		if err != nil {
-+			return nil, err
++		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		if C.go_openssl_EVP_PKEY_keygen_init(ctx) != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_keygen_init")
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, nid, nil) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++		if bits != 0 {
++			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_RSA_KEYGEN_BITS, C.int(bits), nil) != 1 {
++				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl")
++			}
 +		}
++		if curve != "" {
++			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil) != 1 {
++				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl")
++			}
++		}
++		if C.go_openssl_EVP_PKEY_keygen(ctx, &pkey) != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_keygen")
++		}
++	case 3:
++		switch id {
++		case C.GO_EVP_PKEY_RSA:
++			pkey = C.go_openssl_EVP_PKEY_Q_keygen_RSA(nil, nil, keyTypeRSA, C.size_t(bits))
++		case C.GO_EVP_PKEY_EC:
++			pkey = C.go_openssl_EVP_PKEY_Q_keygen_EC(nil, nil, keyTypeEC, C.go_openssl_OBJ_nid2sn(curveNID(curve)))
++		case C.GO_EVP_PKEY_ED25519:
++			pkey = C.go_openssl_EVP_PKEY_Q_keygen(nil, nil, keyTypeED25519)
++		default:
++			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
++		}
++		if pkey == nil {
++			return nil, newOpenSSLError("EVP_PKEY_Q_keygen")
++		}
++	default:
++		panic(errUnsupportedVersion())
 +	}
-+	var pkey C.GO_EVP_PKEY_PTR
-+	if C.go_openssl_EVP_PKEY_keygen(ctx, &pkey) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_keygen failed")
-+	}
++
 +	return pkey, nil
 +}
 +
@@ -2856,16 +2879,43 @@ index 00000000000000..91296a93f72d55
 +	}
 +	var pkey C.GO_EVP_PKEY_PTR
 +	if C.go_openssl_EVP_PKEY_fromdata(ctx, &pkey, selection, params) != 1 {
++		if vMajor == 3 && vMinor <= 2 {
++			// OpenSSL 3.0.1 and 3.0.2 have a bug where EVP_PKEY_fromdata
++			// does not free the internally allocated EVP_PKEY on error.
++			// See https://github.com/openssl/openssl/issues/17407.
++			C.go_openssl_EVP_PKEY_free(pkey)
++		}
 +		return nil, newOpenSSLError("EVP_PKEY_fromdata")
 +	}
 +	return pkey, nil
 +}
++
++func checkPkey(pkey C.GO_EVP_PKEY_PTR, isPrivate bool) error {
++	ctx := C.go_openssl_EVP_PKEY_CTX_new(pkey, nil)
++	if ctx == nil {
++		return newOpenSSLError("EVP_PKEY_CTX_new")
++	}
++	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	if isPrivate {
++		if C.go_openssl_EVP_PKEY_private_check(ctx) != 1 {
++			// Match upstream error message.
++			return errors.New("invalid private key")
++		}
++	} else {
++		// Upstream Go does a partial check here, so do we.
++		if C.go_openssl_EVP_PKEY_public_check_quick(ctx) != 1 {
++			// Match upstream error message.
++			return errors.New("invalid public key")
++		}
++	}
++	return nil
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
 new file mode 100644
-index 00000000000000..c3385b9d0186c6
+index 00000000000000..626f184badc53d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
-@@ -0,0 +1,240 @@
+@@ -0,0 +1,248 @@
 +//go:build unix || windows
 +
 +#include "goopenssl.h"
@@ -2890,6 +2940,7 @@ index 00000000000000..c3385b9d0186c6
 +#define DEFINEFUNC_3_0(ret, func, args, argscall)              DEFINEFUNC(ret, func, args, argscall)
 +#define DEFINEFUNC_RENAMED_1_1(ret, func, oldfunc, args, argscall) DEFINEFUNC(ret, func, args, argscall)
 +#define DEFINEFUNC_RENAMED_3_0(ret, func, oldfunc, args, argscall) DEFINEFUNC(ret, func, args, argscall)
++#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)  DEFINEFUNC(ret, newname, args, argscall)
 +
 +FOR_ALL_OPENSSL_FUNCTIONS
 +
@@ -2902,6 +2953,7 @@ index 00000000000000..c3385b9d0186c6
 +#undef DEFINEFUNC_3_0
 +#undef DEFINEFUNC_RENAMED_1_1
 +#undef DEFINEFUNC_RENAMED_3_0
++#undef DEFINEFUNC_VARIADIC_3_0
 +
 +// go_openssl_fips_enabled returns 1 if FIPS mode is enabled, 0 otherwise.
 +// As a special case, it returns -1 if it cannot determine if FIPS mode is enabled.
@@ -3008,6 +3060,11 @@ index 00000000000000..c3385b9d0186c6
 +    {                                                               \
 +        DEFINEFUNC_INTERNAL(func, #func)                            \
 +    }
++#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)   \
++    if (major == 3)                                                 \
++    {                                                               \
++        DEFINEFUNC_INTERNAL(newname, #func)                         \
++    }
 +
 +FOR_ALL_OPENSSL_FUNCTIONS
 +
@@ -3020,6 +3077,7 @@ index 00000000000000..c3385b9d0186c6
 +#undef DEFINEFUNC_3_0
 +#undef DEFINEFUNC_RENAMED_1_1
 +#undef DEFINEFUNC_RENAMED_3_0
++#undef DEFINEFUNC_VARIADIC_3_0
 +}
 +
 +static unsigned long
@@ -3108,10 +3166,10 @@ index 00000000000000..c3385b9d0186c6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
 new file mode 100644
-index 00000000000000..a50caa3d82312c
+index 00000000000000..1165f99157c663
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
-@@ -0,0 +1,259 @@
+@@ -0,0 +1,262 @@
 +// This header file describes the OpenSSL ABI as built for use in Go.
 +
 +#include <stdlib.h> // size_t
@@ -3173,6 +3231,8 @@ index 00000000000000..a50caa3d82312c
 +    DEFINEFUNC(ret, func, args, argscall)
 +#define DEFINEFUNC_RENAMED_3_0(ret, func, oldfunc, args, argscall)     \
 +    DEFINEFUNC(ret, func, args, argscall)
++#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)     \
++    DEFINEFUNC(ret, newname, args, argscall)
 +
 +FOR_ALL_OPENSSL_FUNCTIONS
 +
@@ -3185,6 +3245,7 @@ index 00000000000000..a50caa3d82312c
 +#undef DEFINEFUNC_3_0
 +#undef DEFINEFUNC_RENAMED_1_1
 +#undef DEFINEFUNC_RENAMED_3_0
++#undef DEFINEFUNC_VARIADIC_3_0
 +
 +// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal using ctx2.
 +// This is necessary because Go hash.Hash mandates that Sum has no effect
@@ -4421,10 +4482,10 @@ index 00000000000000..6fd3a518906004
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..f2ff598de65b2d
+index 00000000000000..d4f8aa6a92a6fb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,285 @@
+@@ -0,0 +1,322 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4578,6 +4639,43 @@ index 00000000000000..f2ff598de65b2d
 +	}
 +}
 +
++// ExpandHKDFOneShot derives a key from the given hash, key, and optional context info.
++func ExpandHKDFOneShot(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	if !SupportsHKDF() {
++		return nil, errUnsupportedVersion()
++	}
++
++	md, err := hashFuncToMD(h)
++	if err != nil {
++		return nil, err
++	}
++
++	out := make([]byte, keyLength)
++	switch vMajor {
++	case 1:
++		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
++		}
++		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++		if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(out), C.size_t(keyLength)).result != 1 {
++			return nil, newOpenSSLError("EVP_PKEY_derive")
++		}
++	case 3:
++		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
++		}
++		defer C.go_openssl_EVP_KDF_CTX_free(ctx)
++		if C.go_openssl_EVP_KDF_derive(ctx, base(out), C.size_t(keyLength), nil) != 1 {
++			return nil, newOpenSSLError("EVP_KDF_derive")
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return out, nil
++}
++
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
 +	if !SupportsHKDF() {
 +		return nil, errUnsupportedVersion()
@@ -5141,10 +5239,10 @@ index 00000000000000..3778e21227abb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..f8b3f6ee140ace
+index 00000000000000..145b082f1b771c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,462 @@
+@@ -0,0 +1,469 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -5250,6 +5348,7 @@ index 00000000000000..f8b3f6ee140ace
 +	providerNameFips    = C.CString("fips")
 +	providerNameDefault = C.CString("default")
 +	propFIPS            = C.CString("fips=yes")
++	propNoFIPS          = C.CString("-fips")
 +
 +	algorithmSHA256 = C.CString("SHA2-256")
 +)
@@ -5274,12 +5373,7 @@ index 00000000000000..f8b3f6ee140ace
 +		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
 +		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
 +		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
-+		md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, nil)
-+		if md == nil {
-+			return false
-+		}
-+		C.go_openssl_EVP_MD_free(md)
-+		return true
++		return proveSHA256(nil)
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -5288,6 +5382,9 @@ index 00000000000000..f8b3f6ee140ace
 +// isProviderAvailable checks if the provider with the given name is available.
 +// This function is used in export_test.go, but must be defined here as test files can't access C functions.
 +func isProviderAvailable(name string) bool {
++	if vMajor == 1 {
++		return false
++	}
 +	providerName := C.CString(name)
 +	defer C.free(unsafe.Pointer(providerName))
 +	return C.go_openssl_OSSL_PROVIDER_available(nil, providerName) == 1
@@ -5295,11 +5392,15 @@ index 00000000000000..f8b3f6ee140ace
 +
 +// SetFIPS enables or disables FIPS mode.
 +//
-+// For OpenSSL 3, the `fips` provider is loaded if enabled is true,
-+// else the `default` provider is loaded.
-+func SetFIPS(enabled bool) error {
++// For OpenSSL 3, if there is no provider available that supports FIPS mode,
++// SetFIPS will try to load a built-in provider that supports FIPS mode.
++func SetFIPS(enable bool) error {
++	if FIPS() == enable {
++		// Already in the desired state.
++		return nil
++	}
 +	var mode C.int
-+	if enabled {
++	if enable {
 +		mode = C.int(1)
 +	} else {
 +		mode = C.int(0)
@@ -5311,31 +5412,23 @@ index 00000000000000..f8b3f6ee140ace
 +		}
 +		return nil
 +	case 3:
-+		var provName *C.char
-+		if enabled {
++		var shaProps, provName *C.char
++		if enable {
++			shaProps = propFIPS
 +			provName = providerNameFips
 +		} else {
++			shaProps = propNoFIPS
 +			provName = providerNameDefault
 +		}
-+		// Try to load the provider, but don't fail if it's not loaded.
-+		// The built-in provider might not be present in the system.
-+		// We don't need the built-in provider if third-party providers are being used: they are already loaded.
-+		// If the system is not well-configured and has no FIPS capability, this will be detected by the next steps.
-+		C.go_openssl_OSSL_PROVIDER_try_load(nil, provName, 1)
-+		C.go_openssl_ERR_clear_error()
-+
-+		// See FIPS() for the rationale behind this check.
-+		md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, propFIPS)
-+		if md == nil {
-+			// Don't enable FIPS mode if there is no provider that supports it.
-+			// This makes it easier for callers to call SetFIPS(true) to do a
-+			// best-effort attempt to enable FIPS mode, but not fail if it's not possible.
-+			C.go_openssl_ERR_clear_error()
-+			return errors.New("openssl: FIPS mode not supported by any provider")
++		if !proveSHA256(shaProps) {
++			// There is no provider available that supports the desired FIPS mode.
++			// Try to load the built-in provider associated with the given mode.
++			if C.go_openssl_OSSL_PROVIDER_try_load(nil, provName, 1) == nil {
++				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
++				C.go_openssl_ERR_clear_error()
++				return errors.New("openssl: FIPS mode not supported by any provider")
++			}
 +		}
-+		C.go_openssl_EVP_MD_free(md)
-+
-+		// Enable FIPS mode in the default properties.
 +		if C.go_openssl_EVP_default_properties_enable_fips(nil, mode) != 1 {
 +			return newOpenSSLError("EVP_default_properties_enable_fips")
 +		}
@@ -5345,6 +5438,18 @@ index 00000000000000..f8b3f6ee140ace
 +	}
 +}
 +
++// proveSHA256 checks if the SHA-256 algorithm is available
++// using the given properties.
++func proveSHA256(props *C.char) bool {
++	md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, props)
++	if md == nil {
++		C.go_openssl_ERR_clear_error()
++		return false
++	}
++	C.go_openssl_EVP_MD_free(md)
++	return true
++}
++
 +// noescape hides a pointer from escape analysis. noescape is
 +// the identity function but escape analysis doesn't think the
 +// output depends on the input. noescape is inlined and currently
@@ -6215,7 +6320,7 @@ index 00000000000000..f1cd3647fb9753
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..cd5b3b8e2a9a85
+index 00000000000000..da5c7636173775
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 @@ -0,0 +1,408 @@
@@ -6459,7 +6564,7 @@ index 00000000000000..cd5b3b8e2a9a85
 +	// A salt length of -2 is valid in OpenSSL, but not in crypto/rsa, so reject
 +	// it, and lengths < -2, before we convert to the OpenSSL sentinel values.
 +	if saltLen <= -2 {
-+		return 0, errors.New("crypto/rsa: PSSOptions.SaltLength cannot be negative")
++		return 0, errors.New("crypto/rsa: invalid PSS salt length")
 +	}
 +	// OpenSSL uses sentinel salt length values like Go crypto does,
 +	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
@@ -6629,10 +6734,10 @@ index 00000000000000..cd5b3b8e2a9a85
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
 new file mode 100644
-index 00000000000000..156d8e8ada678c
+index 00000000000000..c8f599f71c0b20
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-@@ -0,0 +1,401 @@
+@@ -0,0 +1,416 @@
 +#include <stdlib.h> // size_t
 +#include <stdint.h> // uint64_t
 +
@@ -6792,6 +6897,15 @@ index 00000000000000..156d8e8ada678c
 +// DEFINEFUNC_RENAMED_3_0 acts like DEFINEFUNC but tries to load the function using the new name when using >= 3.x
 +// and the old name when using 1.x. In both cases the function will have the new name.
 +//
++// DEFINEFUNC_VARIADIC_3_0 acts like DEFINEFUNC but creates an alias with a more specific signature.
++// This is necessary to call variadic functions (functions that accept a variable number of arguments)
++// because variadic functions are not directly compatible with cgo. By defining a cgo-compatible alias
++// for each desired signature, the C compiler handles the variadic arguments rather than cgo.
++// Variadic functions are the only known incompatibility of this kind.
++// If you use this macro for a different reason, consider renaming it to something more general first.
++// See https://github.com/golang/go/issues/975.
++// The process is aborted if the function can't be loaded when using 3.0.0 or higher.
++//
 +// #include <openssl/crypto.h>
 +// #include <openssl/err.h>
 +// #include <openssl/rsa.h>
@@ -6933,6 +7047,9 @@ index 00000000000000..156d8e8ada678c
 +DEFINEFUNC(int, EVP_PKEY_paramgen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
 +DEFINEFUNC(int, EVP_PKEY_keygen_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC(int, EVP_PKEY_keygen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
++DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type), (ctx, propq, type)) \
++DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen_RSA, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1), (ctx, propq, type, arg1)) \
++DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen_EC, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1), (ctx, propq, type, arg1)) \
 +DEFINEFUNC(void, EVP_PKEY_CTX_free, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
 +DEFINEFUNC(int, EVP_PKEY_CTX_ctrl, (GO_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2), (ctx, keytype, optype, cmd, p1, p2)) \
 +DEFINEFUNC(int, EVP_PKEY_decrypt, (GO_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4), (arg0, arg1, arg2, arg3, arg4)) \
@@ -6945,6 +7062,8 @@ index 00000000000000..156d8e8ada678c
 +DEFINEFUNC(int, EVP_PKEY_derive_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC(int, EVP_PKEY_derive_set_peer, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR peer), (ctx, peer)) \
 +DEFINEFUNC(int, EVP_PKEY_derive, (GO_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen), (ctx, key, keylen)) \
++DEFINEFUNC_3_0(int, EVP_PKEY_public_check_quick, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
++DEFINEFUNC_3_0(int, EVP_PKEY_private_check, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
 +DEFINEFUNC_LEGACY_1_0(void*, EVP_PKEY_get0, (GO_EVP_PKEY_PTR pkey), (pkey)) \
 +DEFINEFUNC_LEGACY_1_1(GO_EC_KEY_PTR, EVP_PKEY_get0_EC_KEY, (GO_EVP_PKEY_PTR pkey), (pkey)) \
 +DEFINEFUNC_LEGACY_1_1(GO_DSA_PTR, EVP_PKEY_get0_DSA, (GO_EVP_PKEY_PTR pkey), (pkey)) \
@@ -6980,6 +7099,7 @@ index 00000000000000..156d8e8ada678c
 +DEFINEFUNC_LEGACY_1(const GO_EC_POINT_PTR, EC_KEY_get0_public_key, (const GO_EC_KEY_PTR arg0), (arg0)) \
 +DEFINEFUNC_LEGACY_1(GO_EC_KEY_PTR, EC_KEY_new_by_curve_name, (int arg0), (arg0)) \
 +DEFINEFUNC_LEGACY_1(int, EC_KEY_set_private_key, (GO_EC_KEY_PTR arg0, const GO_BIGNUM_PTR arg1), (arg0, arg1)) \
++DEFINEFUNC_LEGACY_1(int, EC_KEY_check_key, (const GO_EC_KEY_PTR key), (key)) \
 +DEFINEFUNC(GO_EC_POINT_PTR, EC_POINT_new, (const GO_EC_GROUP_PTR arg0), (arg0)) \
 +DEFINEFUNC(void, EC_POINT_free, (GO_EC_POINT_PTR arg0), (arg0)) \
 +DEFINEFUNC(int, EC_POINT_mul, (const GO_EC_GROUP_PTR group, GO_EC_POINT_PTR r, const GO_BIGNUM_PTR n, const GO_EC_POINT_PTR q, const GO_BIGNUM_PTR m, GO_BN_CTX_PTR ctx), (group, r, n, q, m, ctx)) \
@@ -8270,10 +8390,10 @@ index 00000000000000..de3f05b84f1d82
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
 new file mode 100644
-index 00000000000000..5d4d3974d0c52c
+index 00000000000000..7ab5ac38921d82
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/dsa.go
-@@ -0,0 +1,469 @@
+@@ -0,0 +1,465 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8337,11 +8457,11 @@ index 00000000000000..5d4d3974d0c52c
 +	return uint32(len(p.Q))
 +}
 +
-+// GenerateDSAParameters generates a set of DSA parameters for a key of size L bytes.
++// GenerateParametersDSA generates a set of DSA parameters for a key of size L bytes.
 +// If L is less than or equal to 1024, the parameters are generated according to FIPS 186-2.
 +// If L is greater than 1024, the parameters are generated according to FIPS 186-3.
 +// The returned parameters are suitable for use in GenerateKey.
-+func GenerateDSAParameters(L int) (params DSAParameters, err error) {
++func GenerateParametersDSA(L int) (params DSAParameters, err error) {
 +	h, err := loadDSA()
 +	if err != nil {
 +		return DSAParameters{}, err
@@ -8389,35 +8509,31 @@ index 00000000000000..5d4d3974d0c52c
 +}
 +
 +// GenerateKeyDSA generates a new private DSA key using the given parameters.
-+func GenerateKeyDSA(params DSAParameters) (*PrivateKeyDSA, error) {
++func GenerateKeyDSA(params DSAParameters) (x, y BigInt, err error) {
 +	h, err := loadDSA()
 +	if err != nil {
-+		return nil, err
++		return nil, nil, err
 +	}
 +	keySize := params.keySize()
 +	if !keyIsAllowed(h.allowedKeyLengths, keySize*8) {
-+		return nil, errors.New("crypto/dsa: invalid key size")
++		return nil, nil, errors.New("crypto/dsa: invalid key size")
 +	}
 +	var hkey bcrypt.KEY_HANDLE
 +	if err := bcrypt.GenerateKeyPair(h.handle, &hkey, keySize*8, 0); err != nil {
-+		return nil, err
++		return nil, nil, err
 +	}
++	defer bcrypt.DestroyKey(hkey)
 +	if err := setDSAParameter(hkey, params); err != nil {
-+		bcrypt.DestroyKey(hkey)
-+		return nil, err
++		return nil, nil, err
 +	}
 +	if err := bcrypt.FinalizeKeyPair(hkey, 0); err != nil {
-+		bcrypt.DestroyKey(hkey)
-+		return nil, err
++		return nil, nil, err
 +	}
-+	_, x, y, err := decodeDSAKey(hkey, true)
++	_, x, y, err = decodeDSAKey(hkey, true)
 +	if err != nil {
-+		bcrypt.DestroyKey(hkey)
-+		return nil, err
++		return nil, nil, err
 +	}
-+	k := &PrivateKeyDSA{params, x, y, hkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
-+	return k, nil
++	return x, y, nil
 +}
 +
 +// NewPrivateKeyDSA creates a new DSA private key from the given parameters.
@@ -9493,10 +9609,10 @@ index 00000000000000..87b1c95dc7f911
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
-index 00000000000000..5338fb5c7b187c
+index 00000000000000..20bcc79a46ba0d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -0,0 +1,180 @@
+@@ -0,0 +1,124 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9509,7 +9625,6 @@ index 00000000000000..5338fb5c7b187c
 +	"encoding/binary"
 +	"errors"
 +	"hash"
-+	"io"
 +	"runtime"
 +	"unsafe"
 +
@@ -9527,99 +9642,23 @@ index 00000000000000..5338fb5c7b187c
 +	})
 +}
 +
-+type hkdf struct {
-+	hkey bcrypt.KEY_HANDLE
-+	info []byte
-+
-+	hashLen int
-+	n       int // count of bytes requested from Read
-+	// buf contains the derived data.
-+	// len(buf) can be larger than n, as Read may derive
-+	// more data than requested and cache it in buf.
-+	buf []byte
-+}
-+
-+func (c *hkdf) finalize() {
-+	bcrypt.DestroyKey(c.hkey)
-+}
-+
-+func hkdfDerive(hkey bcrypt.KEY_HANDLE, info, out []byte) (int, error) {
-+	var params *bcrypt.BufferDesc
-+	if len(info) > 0 {
-+		params = &bcrypt.BufferDesc{
-+			Count: 1,
-+			Buffers: &bcrypt.Buffer{
-+				Length: uint32(len(info)),
-+				Type:   bcrypt.KDF_HKDF_INFO,
-+				Data:   uintptr(unsafe.Pointer(&info[0])),
-+			},
-+		}
-+		defer runtime.KeepAlive(params)
-+	}
-+	var n uint32
-+	err := bcrypt.KeyDerivation(hkey, params, out, &n, 0)
-+	return int(n), err
-+}
-+
-+func (c *hkdf) Read(p []byte) (int, error) {
-+	// KeyDerivation doesn't support incremental output, each call
-+	// derives the key from scratch and returns the requested bytes.
-+	// To implement io.Reader, we need to ask for len(c.buf) + len(p)
-+	// bytes and copy the last derived len(p) bytes to p.
-+	maxDerived := 255 * c.hashLen
-+	totalDerived := c.n + len(p)
-+	// Check whether enough data can be derived.
-+	if totalDerived > maxDerived {
-+		return 0, errors.New("hkdf: entropy limit reached")
-+	}
-+	// Check whether c.buf already contains enough derived data,
-+	// otherwise derive more data.
-+	if bytesNeeded := totalDerived - len(c.buf); bytesNeeded > 0 {
-+		// It is common to derive multiple equally sized keys from the same HKDF instance.
-+		// Optimize this case by allocating a buffer large enough to hold
-+		// at least 3 of such keys each time there is not enough data.
-+		// Round up to the next multiple of hashLen.
-+		blocks := (bytesNeeded-1)/c.hashLen + 1
-+		const minBlocks = 3
-+		if blocks < minBlocks {
-+			blocks = minBlocks
-+		}
-+		alloc := blocks * c.hashLen
-+		if len(c.buf)+alloc > maxDerived {
-+			// The buffer can't grow beyond maxDerived.
-+			alloc = maxDerived - len(c.buf)
-+		}
-+		c.buf = append(c.buf, make([]byte, alloc)...)
-+		n, err := hkdfDerive(c.hkey, c.info, c.buf)
-+		if err != nil {
-+			c.buf = c.buf[:c.n]
-+			return 0, err
-+		}
-+		// Adjust totalDerived to the actual number of bytes derived.
-+		totalDerived = n
-+	}
-+	n := copy(p, c.buf[c.n:totalDerived])
-+	c.n += n
-+	return n, nil
-+}
-+
-+func newHKDF(h func() hash.Hash, secret, salt []byte, info []byte) (*hkdf, error) {
++func newHKDF(h func() hash.Hash, secret, salt []byte, info []byte) (bcrypt.KEY_HANDLE, error) {
 +	ch := h()
 +	hashID := hashToID(ch)
 +	if hashID == "" {
-+		return nil, errors.New("cng: unsupported hash function")
++		return 0, errors.New("cng: unsupported hash function")
 +	}
 +	alg, err := loadHKDF()
 +	if err != nil {
-+		return nil, err
++		return 0, err
 +	}
 +	var kh bcrypt.KEY_HANDLE
 +	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
-+		return nil, err
++		return 0, err
 +	}
 +	if err := setString(bcrypt.HANDLE(kh), bcrypt.HKDF_HASH_ALGORITHM, hashID); err != nil {
 +		bcrypt.DestroyKey(kh)
-+		return nil, err
++		return 0, err
 +	}
 +	if salt != nil {
 +		// Used for Extract.
@@ -9630,11 +9669,9 @@ index 00000000000000..5338fb5c7b187c
 +	}
 +	if err != nil {
 +		bcrypt.DestroyKey(kh)
-+		return nil, err
++		return 0, err
 +	}
-+	k := &hkdf{kh, info, ch.Size(), 0, nil}
-+	runtime.SetFinalizer(k, (*hkdf).finalize)
-+	return k, nil
++	return kh, nil
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
@@ -9646,11 +9683,11 @@ index 00000000000000..5338fb5c7b187c
 +	if err != nil {
 +		return nil, err
 +	}
-+	hdr, blob, err := exportKeyData(kh.hkey)
++	defer bcrypt.DestroyKey(kh)
++	hdr, blob, err := exportKeyData(kh)
 +	if err != nil {
 +		return nil, err
 +	}
-+	runtime.KeepAlive(kh)
 +	if hdr.Version != bcrypt.KEY_DATA_BLOB_VERSION1 {
 +		return nil, errors.New("cng: unknown key data blob version")
 +	}
@@ -9670,12 +9707,35 @@ index 00000000000000..5338fb5c7b187c
 +	return blob[cbHashName:], nil
 +}
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
++// ExpandHKDF derives a key from the given hash, key, and optional context info.
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
 +	kh, err := newHKDF(h, pseudorandomKey, nil, info)
 +	if err != nil {
 +		return nil, err
 +	}
-+	return kh, nil
++	defer bcrypt.DestroyKey(kh)
++	out := make([]byte, keyLength)
++	var params *bcrypt.BufferDesc
++	if len(info) > 0 {
++		params = &bcrypt.BufferDesc{
++			Count: 1,
++			Buffers: &bcrypt.Buffer{
++				Length: uint32(len(info)),
++				Type:   bcrypt.KDF_HKDF_INFO,
++				Data:   uintptr(unsafe.Pointer(&info[0])),
++			},
++		}
++		defer runtime.KeepAlive(params)
++	}
++	var n uint32
++	err = bcrypt.KeyDerivation(kh, params, out, &n, 0)
++	if err != nil {
++		return nil, err
++	}
++	if int(n) != keyLength {
++		return nil, errors.New("cng: key derivation returned unexpected length")
++	}
++	return out, err
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
@@ -10127,10 +10187,10 @@ index 00000000000000..f484a3e2211e04
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
 new file mode 100644
-index 00000000000000..e9e2a09083a05c
+index 00000000000000..0269f9cf86539e
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
-@@ -0,0 +1,370 @@
+@@ -0,0 +1,396 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -10365,18 +10425,36 @@ index 00000000000000..e9e2a09083a05c
 +	return keyVerify(pub.hkey, unsafe.Pointer(&info), hashed, sig, bcrypt.PAD_PSS)
 +}
 +
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++// SignRSAPKCS1v15 calculates the signature of hashed using
++// RSASSA-PKCS1-V1_5-SIGN from RSA PKCS #1 v1.5.  Note that hashed must
++// be the result of hashing the input message using the given hash
++// function. If hash is zero, hashed is signed directly.
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, hash crypto.Hash, hashed []byte) ([]byte, error) {
 +	defer runtime.KeepAlive(priv)
-+	info, err := newPKCS1_PADDING_INFO(h)
++	if hash != crypto.Hash(0) {
++		if len(hashed) != hash.Size() {
++			return nil, errors.New("crypto/rsa: input must be hashed message")
++		}
++	}
++	info, err := newPKCS1_PADDING_INFO(hash)
 +	if err != nil {
 +		return nil, err
 +	}
 +	return keySign(priv.hkey, unsafe.Pointer(&info), hashed, bcrypt.PAD_PKCS1)
 +}
 +
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++// VerifyPKCS1v15 verifies an RSA PKCS #1 v1.5 signature.
++// hashed is the result of hashing the input message using the given hash
++// function and sig is the signature. A valid signature is indicated by
++// returning a nil error. If hash is zero then hashed is used directly.
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, hash crypto.Hash, hashed, sig []byte) error {
 +	defer runtime.KeepAlive(pub)
-+	info, err := newPKCS1_PADDING_INFO(h)
++	if hash != crypto.Hash(0) {
++		if len(hashed) != hash.Size() {
++			return errors.New("crypto/rsa: input must be hashed message")
++		}
++	}
++	info, err := newPKCS1_PADDING_INFO(hash)
 +	if err != nil {
 +		return err
 +	}
@@ -10448,7 +10526,7 @@ index 00000000000000..e9e2a09083a05c
 +
 +	// A salt length of -1 and 0 are valid Go sentinel values.
 +	if saltLen <= -2 {
-+		return info, errors.New("crypto/rsa: PSSOptions.SaltLength cannot be negative")
++		return info, errors.New("crypto/rsa: invalid PSS salt length")
 +	}
 +	// CNG does not support salt length special cases like Go crypto does,
 +	// so we do a best-effort to resolve them.
@@ -10474,16 +10552,24 @@ index 00000000000000..e9e2a09083a05c
 +	return
 +}
 +
-+func newPKCS1_PADDING_INFO(h crypto.Hash) (info bcrypt.PKCS1_PADDING_INFO, err error) {
-+	if h != 0 {
++func newPKCS1_PADDING_INFO(h crypto.Hash) (bcrypt.PKCS1_PADDING_INFO, error) {
++	var alg *uint16
++	switch h {
++	case 0:
++		// Unpadded RSA signatures, no need to set the hash algorithm.
++	case crypto.MD5SHA1:
++		// The MD5SHA1 hash is not supported by CNG, but the AlgId field
++		// is only used to pad the signature with the hash OID, and
++		// PKCS1 has historically used a null OID for MD5SHA1.
++		// This is a special case for compatibility with TLS 1.0/1.1.
++	default:
 +		hashID := cryptoHashToID(h)
 +		if hashID == "" {
-+			err = errors.New("crypto/rsa: unsupported hash function")
-+		} else {
-+			info.AlgId = utf16PtrFromString(hashID)
++			return bcrypt.PKCS1_PADDING_INFO{}, errors.New("crypto/rsa: unsupported hash function")
 +		}
++		alg = utf16PtrFromString(hashID)
 +	}
-+	return
++	return bcrypt.PKCS1_PADDING_INFO{AlgId: alg}, nil
 +}
 +
 +func cryptoHashToID(ch crypto.Hash) string {
@@ -11455,15 +11541,15 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c0b83c9eeef..7c9bf41ea0bc87 100644
+index cf5c0b83c9eeef..e116e36e2473fd 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20241031074328-c51a090851d3
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20241031174928-19f07bc6df3d
++# github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From bea526dc93d503fe5c61cca2054d89307eb97095 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 12:18:04 +0100
Subject: [PATCH 144/887] skip TestInvalidPSSSaltLength

---
 .../0002-Add-crypto-backend-foundation.patch    | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 4b635481f20..33b66759f14 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -40,6 +40,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/pkcs1v15.go                   |  10 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
  src/crypto/rsa/pss.go                        |   8 +-
+ src/crypto/rsa/pss_test.go                   |   3 +
  src/crypto/rsa/rsa.go                        |  21 +-
  src/crypto/rsa/rsa_test.go                   |  12 +-
  src/crypto/sha1/sha1.go                      |   2 +-
@@ -63,7 +64,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1144 insertions(+), 106 deletions(-)
+ 60 files changed, 1148 insertions(+), 106 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -1507,6 +1508,20 @@ index 5716c464ca0a33..4aac87d7952081 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
+diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
+index 637d07e18cff2e..2c82f50adf38b8 100644
+--- a/src/crypto/rsa/pss_test.go
++++ b/src/crypto/rsa/pss_test.go
+@@ -296,6 +296,9 @@ func TestInvalidPSSSaltLength(t *testing.T) {
+ 		SaltLength: -2,
+ 		Hash:       crypto.SHA256,
+ 	}); err.Error() != InvalidSaltLenErr.Error() {
++		// The OpenSSL and CNG backend returns the error required in Go tip.
++		// This change will conflict with the upstream sync PR, where we will be able to remove this.
++		t.Skip("TODO: unskip when upstream sync PR is merged")
+ 		t.Fatalf("SignPSS unexpected error: got %v, want %v", err, InvalidSaltLenErr)
+ 	}
+ 
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
 index 4d78d1eaaa6be0..a016c4f8362cf5 100644
 --- a/src/crypto/rsa/rsa.go

From 8b9c63ddf9b6ab48169118604d338a9d151c37a2 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 16:43:48 +0100
Subject: [PATCH 145/887] fix dsa signatures

---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 15 +++++----------
 patches/0005-Add-CNG-crypto-backend.patch     | 17 ++++++-----------
 2 files changed, 11 insertions(+), 21 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 83172d6a85a..6e8bf27cac4 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -14,7 +14,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 376 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 371 ++++++++++++++++++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/boring.go                      |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 461 insertions(+), 25 deletions(-)
+ 36 files changed, 456 insertions(+), 25 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -193,10 +193,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..85856d3c900eb8
+index 00000000000000..57af729e1458f5
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,376 @@
+@@ -0,0 +1,371 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -535,12 +535,7 @@ index 00000000000000..85856d3c900eb8
 +}
 +
 +func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
-+	generatedKey, err := openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	return generatedKey.X, generatedKey.Y, nil
++	return openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index cc435b0a0ee..8f454e0bd65 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -13,7 +13,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 322 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 317 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
@@ -40,7 +40,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 417 insertions(+), 27 deletions(-)
+ 36 files changed, 412 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -183,10 +183,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..e6feb6256e4a0d
+index 00000000000000..543b5ed1b5d15c
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,322 @@
+@@ -0,0 +1,317 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -486,12 +486,7 @@ index 00000000000000..e6feb6256e4a0d
 +}
 +
 +func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
-+	generatedKey, err := cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	return generatedKey.X, generatedKey.Y, nil
++	return cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
 +}
 +
 +func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
@@ -616,7 +611,7 @@ index 4aac87d7952081..010ee1467501c3 100644
  		if err != nil {
  			return err
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index 637d07e18cff2e..21435b86b52dad 100644
+index 2c82f50adf38b8..33630f14dcc8d4 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
 @@ -284,7 +284,7 @@ func fromHex(hexStr string) []byte {

From fa08c88fbf04fbdafc8837cc3ce7708ca958303e Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 12:03:03 +0100
Subject: [PATCH 146/887] minimize TLS PRF upstream diffs

---
 .../0002-Add-crypto-backend-foundation.patch  | 376 ++++--------------
 1 file changed, 73 insertions(+), 303 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 33b66759f14..607660e7419 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -51,12 +51,11 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/sha512/sha512_test.go             |  20 +-
  src/crypto/tls/boring_test.go                |   5 +
  src/crypto/tls/cipher_suites.go              |   2 +-
- src/crypto/tls/handshake_client.go           |  25 ++-
- src/crypto/tls/handshake_server.go           |  25 ++-
+ src/crypto/tls/handshake_client.go           |  10 +-
+ src/crypto/tls/handshake_server.go           |  10 +-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
- src/crypto/tls/key_schedule.go               |  23 ++-
- src/crypto/tls/prf.go                        |  77 ++++---
- src/crypto/tls/prf_test.go                   |  12 +-
+ src/crypto/tls/key_schedule.go               |  23 +-
+ src/crypto/tls/prf.go                        |  36 ++++
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
  src/hash/boring_test.go                      |   9 +
@@ -64,7 +63,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 60 files changed, 1148 insertions(+), 106 deletions(-)
+ 59 files changed, 1098 insertions(+), 73 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -1846,129 +1845,47 @@ index 917a1eff42d34f..f6f57130b64f41 100644
  	"crypto/sha1"
  	"crypto/sha256"
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 760e827f467f15..99b44d259e1e02 100644
+index 760e827f467f15..393c59ba8f1183 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -770,12 +770,16 @@ func (hs *clientHandshakeState) doFullHandshake() error {
- 
- 	if hs.serverHello.extendedMasterSecret {
- 		c.extMasterSecret = true
--		hs.masterSecret = extMasterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
-+		hs.masterSecret, err = extMasterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
- 			hs.finishedHash.Sum())
- 	} else {
--		hs.masterSecret = masterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
-+		hs.masterSecret, err = masterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
- 			hs.hello.random, hs.serverHello.random)
- 	}
-+	if err != nil {
-+		c.sendAlert(alertInternalError)
-+		return err
-+	}
- 	if err := c.config.writeKeyLog(keyLogLabelTLS12, hs.hello.random, hs.masterSecret); err != nil {
- 		c.sendAlert(alertInternalError)
- 		return errors.New("tls: failed to write to key log: " + err.Error())
-@@ -836,8 +840,12 @@ func (hs *clientHandshakeState) doFullHandshake() error {
- func (hs *clientHandshakeState) establishKeys() error {
- 	c := hs.c
+@@ -541,7 +541,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
--	clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV :=
-+	clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV, err :=
- 		keysFromMasterSecret(c.vers, hs.suite, hs.masterSecret, hs.hello.random, hs.serverHello.random, hs.suite.macLen, hs.suite.keyLen, hs.suite.ivLen)
-+	if err != nil {
-+		c.sendAlert(alertInternalError)
-+		return err
-+	}
- 	var clientCipher, serverCipher any
- 	var clientHash, serverHash hash.Hash
- 	if hs.suite.cipher != nil {
-@@ -977,7 +985,11 @@ func (hs *clientHandshakeState) readFinished(out []byte) error {
- 		return unexpectedMessageError(serverFinished, msg)
- 	}
- 
--	verify := hs.finishedHash.serverSum(hs.masterSecret)
-+	verify, err := hs.finishedHash.serverSum(hs.masterSecret)
-+	if err != nil {
-+		c.sendAlert(alertHandshakeFailure)
-+		return err
-+	}
- 	if len(verify) != len(serverFinished.verifyData) ||
- 		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
- 		c.sendAlert(alertHandshakeFailure)
-@@ -1045,7 +1057,10 @@ func (hs *clientHandshakeState) sendFinished(out []byte) error {
- 	}
+ // Does the handshake, either a full one or resumes old session. Requires hs.c,
+ // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
+-func (hs *clientHandshakeState) handshake() error {
++func (hs *clientHandshakeState) handshake() (err error) {
++	defer func() {
++		if err == nil {
++			err = recoverFromBoringPRFError()
++			if err != nil {
++				hs.c.sendAlert(alertInternalError)
++			}
++		}
++	}()
+ 	c := hs.c
  
- 	finished := new(finishedMsg)
--	finished.verifyData = hs.finishedHash.clientSum(hs.masterSecret)
-+	var err error
-+	if finished.verifyData, err = hs.finishedHash.clientSum(hs.masterSecret); err != nil {
-+		return err
-+	}
- 	if _, err := hs.c.writeHandshakeRecord(finished, &hs.finishedHash); err != nil {
- 		return err
- 	}
+ 	isResume, err := hs.processServerHello()
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index bc4e51ba364cf1..8b4fc36e49fdf8 100644
+index bc4e51ba364cf1..0933837161573e 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
-@@ -686,12 +686,16 @@ func (hs *serverHandshakeState) doFullHandshake() error {
- 	}
- 	if hs.hello.extendedMasterSecret {
- 		c.extMasterSecret = true
--		hs.masterSecret = extMasterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
-+		hs.masterSecret, err = extMasterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
- 			hs.finishedHash.Sum())
- 	} else {
--		hs.masterSecret = masterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
-+		hs.masterSecret, err = masterFromPreMasterSecret(c.vers, hs.suite, preMasterSecret,
- 			hs.clientHello.random, hs.hello.random)
- 	}
-+	if err != nil {
-+		c.sendAlert(alertInternalError)
-+		return err
-+	}
- 	if err := c.config.writeKeyLog(keyLogLabelTLS12, hs.clientHello.random, hs.masterSecret); err != nil {
- 		c.sendAlert(alertInternalError)
- 		return err
-@@ -755,8 +759,12 @@ func (hs *serverHandshakeState) doFullHandshake() error {
- func (hs *serverHandshakeState) establishKeys() error {
- 	c := hs.c
- 
--	clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV :=
-+	clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV, err :=
- 		keysFromMasterSecret(c.vers, hs.suite, hs.masterSecret, hs.clientHello.random, hs.hello.random, hs.suite.macLen, hs.suite.keyLen, hs.suite.ivLen)
-+	if err != nil {
-+		c.sendAlert(alertInternalError)
-+		return err
-+	}
- 
- 	var clientCipher, serverCipher any
- 	var clientHash, serverHash hash.Hash
-@@ -797,7 +805,11 @@ func (hs *serverHandshakeState) readFinished(out []byte) error {
- 		return unexpectedMessageError(clientFinished, msg)
- 	}
+@@ -62,7 +62,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+ 	return hs.handshake()
+ }
  
--	verify := hs.finishedHash.clientSum(hs.masterSecret)
-+	verify, err := hs.finishedHash.clientSum(hs.masterSecret)
-+	if err != nil {
-+		c.sendAlert(alertHandshakeFailure)
-+		return err
-+	}
- 	if len(verify) != len(clientFinished.verifyData) ||
- 		subtle.ConstantTimeCompare(verify, clientFinished.verifyData) != 1 {
- 		c.sendAlert(alertHandshakeFailure)
-@@ -859,7 +871,10 @@ func (hs *serverHandshakeState) sendFinished(out []byte) error {
- 	}
+-func (hs *serverHandshakeState) handshake() error {
++func (hs *serverHandshakeState) handshake() (err error) {
++	defer func() {
++		if err == nil {
++			err = recoverFromBoringPRFError()
++			if err != nil {
++				hs.c.sendAlert(alertInternalError)
++			}
++		}
++	}()
+ 	c := hs.c
  
- 	finished := new(finishedMsg)
--	finished.verifyData = hs.finishedHash.serverSum(hs.masterSecret)
-+	var err error
-+	if finished.verifyData, err = hs.finishedHash.serverSum(hs.masterSecret); err != nil {
-+		return err
-+	}
- 	if _, err := hs.c.writeHandshakeRecord(finished, &hs.finishedHash); err != nil {
- 		return err
- 	}
+ 	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
 index b8cf4c3fa50b24..bc5d32a29c50c4 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
@@ -2039,7 +1956,7 @@ index 1636baf79e7288..747c3c0883230c 100644
  }
  
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index a7fa3370e66c82..3470372b567eba 100644
+index a7fa3370e66c82..e63daa3ed9f894 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -2050,204 +1967,57 @@ index a7fa3370e66c82..3470372b567eba 100644
  	"crypto/md5"
  	"crypto/sha1"
  	"crypto/sha256"
-@@ -45,7 +46,13 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+@@ -44,8 +45,37 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+ 	}
  }
  
++type boringPRFError struct {
++	err error
++}
++
++func (e *boringPRFError) Error() string {
++	return e.err.Error()
++}
++
++// recoverFromBoringPRFError recovers from a panic caused by the boring backend.
++// It returns the error if it was a boringPRFError, or panics if the panic was
++// caused by something else.
++func recoverFromBoringPRFError() error {
++	if p := recover(); p != nil {
++		if err, ok := p.(boringPRFError); ok {
++			// Could happen, for example, if the seed is too large. The Go implementation doesn't limit the seed size,
++			// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
++			return err.err
++		}
++		panic(p)
++	}
++	return nil
++}
++
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
--func prf10(result, secret, label, seed []byte) {
-+func prf10(result, secret, label, seed []byte) error {
-+	if boring.Enabled && boring.SupportsTLS1PRF() && boring.SupportsHash(crypto.MD5SHA1) {
+ func prf10(result, secret, label, seed []byte) {
++	if boring.Enabled && boring.SupportsTLS1PRF() {
 +		if err := boring.TLS1PRF(result, secret, label, seed, nil); err != nil {
-+			return fmt.Errorf("crypto/tls: prf10: %v", err)
++			panic(boringPRFError{fmt.Errorf("crypto/tls: prf10: %v", err)})
 +		}
-+		return nil
++		return
 +	}
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -61,16 +68,24 @@ func prf10(result, secret, label, seed []byte) {
- 	for i, b := range result2 {
- 		result[i] ^= b
- 	}
-+	return nil
- }
- 
+@@ -66,6 +96,12 @@ func prf10(result, secret, label, seed []byte) {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
--func prf12(hashFunc func() hash.Hash) func(result, secret, label, seed []byte) {
--	return func(result, secret, label, seed []byte) {
-+func prf12(h crypto.Hash, hashFunc func() hash.Hash) func(result, secret, label, seed []byte) error {
-+	return func(result, secret, label, seed []byte) error {
-+		if boring.Enabled && boring.SupportsTLS1PRF() && boring.SupportsHash(h) {
+ func prf12(hashFunc func() hash.Hash) func(result, secret, label, seed []byte) {
+ 	return func(result, secret, label, seed []byte) {
++		if boring.Enabled && boring.SupportsTLS1PRF() {
 +			if err := boring.TLS1PRF(result, secret, label, seed, hashFunc); err != nil {
-+				return fmt.Errorf("crypto/tls: prf12: %v", err)
++				panic(boringPRFError{fmt.Errorf("crypto/tls: prf12: %v", err)})
 +			}
-+			return nil
++			return
 +		}
  		labelAndSeed := make([]byte, len(label)+len(seed))
  		copy(labelAndSeed, label)
  		copy(labelAndSeed[len(label):], seed)
- 
- 		pHash(result, secret, labelAndSeed, hashFunc)
-+		return nil
- 	}
- }
- 
-@@ -85,56 +100,64 @@ var keyExpansionLabel = []byte("key expansion")
- var clientFinishedLabel = []byte("client finished")
- var serverFinishedLabel = []byte("server finished")
- 
--func prfAndHashForVersion(version uint16, suite *cipherSuite) (func(result, secret, label, seed []byte), crypto.Hash) {
-+func prfAndHashForVersion(version uint16, suite *cipherSuite) (func(result, secret, label, seed []byte) error, crypto.Hash) {
- 	switch version {
- 	case VersionTLS10, VersionTLS11:
- 		return prf10, crypto.Hash(0)
- 	case VersionTLS12:
- 		if suite.flags&suiteSHA384 != 0 {
--			return prf12(sha512.New384), crypto.SHA384
-+			h := crypto.SHA384
-+			return prf12(h, sha512.New384), h
- 		}
--		return prf12(sha256.New), crypto.SHA256
-+		h := crypto.SHA256
-+		return prf12(h, sha256.New), h
- 	default:
- 		panic("unknown version")
- 	}
- }
- 
--func prfForVersion(version uint16, suite *cipherSuite) func(result, secret, label, seed []byte) {
-+func prfForVersion(version uint16, suite *cipherSuite) func(result, secret, label, seed []byte) error {
- 	prf, _ := prfAndHashForVersion(version, suite)
- 	return prf
- }
- 
- // masterFromPreMasterSecret generates the master secret from the pre-master
- // secret. See RFC 5246, Section 8.1.
--func masterFromPreMasterSecret(version uint16, suite *cipherSuite, preMasterSecret, clientRandom, serverRandom []byte) []byte {
-+func masterFromPreMasterSecret(version uint16, suite *cipherSuite, preMasterSecret, clientRandom, serverRandom []byte) ([]byte, error) {
- 	seed := make([]byte, 0, len(clientRandom)+len(serverRandom))
- 	seed = append(seed, clientRandom...)
- 	seed = append(seed, serverRandom...)
- 
- 	masterSecret := make([]byte, masterSecretLength)
--	prfForVersion(version, suite)(masterSecret, preMasterSecret, masterSecretLabel, seed)
--	return masterSecret
-+	if err := prfForVersion(version, suite)(masterSecret, preMasterSecret, masterSecretLabel, seed); err != nil {
-+		return nil, err
-+	}
-+	return masterSecret, nil
- }
- 
- // extMasterFromPreMasterSecret generates the extended master secret from the
- // pre-master secret. See RFC 7627.
--func extMasterFromPreMasterSecret(version uint16, suite *cipherSuite, preMasterSecret, transcript []byte) []byte {
-+func extMasterFromPreMasterSecret(version uint16, suite *cipherSuite, preMasterSecret, transcript []byte) ([]byte, error) {
- 	masterSecret := make([]byte, masterSecretLength)
--	prfForVersion(version, suite)(masterSecret, preMasterSecret, extendedMasterSecretLabel, transcript)
--	return masterSecret
-+	if err := prfForVersion(version, suite)(masterSecret, preMasterSecret, extendedMasterSecretLabel, transcript); err != nil {
-+		return nil, err
-+	}
-+	return masterSecret, nil
- }
- 
- // keysFromMasterSecret generates the connection keys from the master
- // secret, given the lengths of the MAC key, cipher key and IV, as defined in
- // RFC 2246, Section 6.3.
--func keysFromMasterSecret(version uint16, suite *cipherSuite, masterSecret, clientRandom, serverRandom []byte, macLen, keyLen, ivLen int) (clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV []byte) {
-+func keysFromMasterSecret(version uint16, suite *cipherSuite, masterSecret, clientRandom, serverRandom []byte, macLen, keyLen, ivLen int) (clientMAC, serverMAC, clientKey, serverKey, clientIV, serverIV []byte, err error) {
- 	seed := make([]byte, 0, len(serverRandom)+len(clientRandom))
- 	seed = append(seed, serverRandom...)
- 	seed = append(seed, clientRandom...)
- 
- 	n := 2*macLen + 2*keyLen + 2*ivLen
- 	keyMaterial := make([]byte, n)
--	prfForVersion(version, suite)(keyMaterial, masterSecret, keyExpansionLabel, seed)
-+	if err = prfForVersion(version, suite)(keyMaterial, masterSecret, keyExpansionLabel, seed); err != nil {
-+		return
-+	}
- 	clientMAC = keyMaterial[:macLen]
- 	keyMaterial = keyMaterial[macLen:]
- 	serverMAC = keyMaterial[:macLen]
-@@ -177,7 +200,7 @@ type finishedHash struct {
- 	buffer []byte
- 
- 	version uint16
--	prf     func(result, secret, label, seed []byte)
-+	prf     func(result, secret, label, seed []byte) error
- }
- 
- func (h *finishedHash) Write(msg []byte) (n int, err error) {
-@@ -208,18 +231,22 @@ func (h finishedHash) Sum() []byte {
- 
- // clientSum returns the contents of the verify_data member of a client's
- // Finished message.
--func (h finishedHash) clientSum(masterSecret []byte) []byte {
-+func (h finishedHash) clientSum(masterSecret []byte) ([]byte, error) {
- 	out := make([]byte, finishedVerifyLength)
--	h.prf(out, masterSecret, clientFinishedLabel, h.Sum())
--	return out
-+	if err := h.prf(out, masterSecret, clientFinishedLabel, h.Sum()); err != nil {
-+		return nil, err
-+	}
-+	return out, nil
- }
- 
- // serverSum returns the contents of the verify_data member of a server's
- // Finished message.
--func (h finishedHash) serverSum(masterSecret []byte) []byte {
-+func (h finishedHash) serverSum(masterSecret []byte) ([]byte, error) {
- 	out := make([]byte, finishedVerifyLength)
--	h.prf(out, masterSecret, serverFinishedLabel, h.Sum())
--	return out
-+	if err := h.prf(out, masterSecret, serverFinishedLabel, h.Sum()); err != nil {
-+		return nil, err
-+	}
-+	return out, nil
- }
- 
- // hashForClientCertificate returns the handshake messages so far, pre-hashed if
-@@ -293,7 +320,11 @@ func ekmFromMasterSecret(version uint16, suite *cipherSuite, masterSecret, clien
- 		}
- 
- 		keyMaterial := make([]byte, length)
--		prfForVersion(version, suite)(keyMaterial, masterSecret, []byte(label), seed)
-+		if err := prfForVersion(version, suite)(keyMaterial, masterSecret, []byte(label), seed); err != nil {
-+			// Could happen if the seed is too large. The Go implementation doesn't limit the seed size,
-+			// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
-+			return nil, err
-+		}
- 		return keyMaterial, nil
- 	}
- }
-diff --git a/src/crypto/tls/prf_test.go b/src/crypto/tls/prf_test.go
-index 8233985a62bd22..f46d4636557714 100644
---- a/src/crypto/tls/prf_test.go
-+++ b/src/crypto/tls/prf_test.go
-@@ -51,13 +51,21 @@ func TestKeysFromPreMasterSecret(t *testing.T) {
- 		clientRandom, _ := hex.DecodeString(test.clientRandom)
- 		serverRandom, _ := hex.DecodeString(test.serverRandom)
- 
--		masterSecret := masterFromPreMasterSecret(test.version, test.suite, in, clientRandom, serverRandom)
-+		masterSecret, err := masterFromPreMasterSecret(test.version, test.suite, in, clientRandom, serverRandom)
-+		if err != nil {
-+			t.Errorf("#%d: masterFromPreMasterSecret failed: %s", i, err)
-+			continue
-+		}
- 		if s := hex.EncodeToString(masterSecret); s != test.masterSecret {
- 			t.Errorf("#%d: bad master secret %s, want %s", i, s, test.masterSecret)
- 			continue
- 		}
- 
--		clientMAC, serverMAC, clientKey, serverKey, _, _ := keysFromMasterSecret(test.version, test.suite, masterSecret, clientRandom, serverRandom, test.macLen, test.keyLen, 0)
-+		clientMAC, serverMAC, clientKey, serverKey, _, _, err := keysFromMasterSecret(test.version, test.suite, masterSecret, clientRandom, serverRandom, test.macLen, test.keyLen, 0)
-+		if err != nil {
-+			t.Errorf("#%d: keysFromMasterSecret failed: %s", i, err)
-+			continue
-+		}
- 		clientMACString := hex.EncodeToString(clientMAC)
- 		serverMACString := hex.EncodeToString(serverMAC)
- 		clientKeyString := hex.EncodeToString(clientKey)
 diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
 index 319ac61f49c994..1b2454dbaab264 100644
 --- a/src/crypto/x509/boring_test.go

From 5fce898d79dfb35178cd1e6e4abda55b61940664 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 13 Dec 2024 09:20:23 +0100
Subject: [PATCH 147/887] add panicBoringPRFError

---
 .../0002-Add-crypto-backend-foundation.patch  | 22 +++++++++++--------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 607660e7419..d9ad171966a 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -55,7 +55,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server.go           |  10 +-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
  src/crypto/tls/key_schedule.go               |  23 +-
- src/crypto/tls/prf.go                        |  36 ++++
+ src/crypto/tls/prf.go                        |  40 ++++
  src/crypto/x509/boring_test.go               |   5 +
  src/go/build/deps_test.go                    |   4 +
  src/hash/boring_test.go                      |   9 +
@@ -63,7 +63,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1098 insertions(+), 73 deletions(-)
+ 59 files changed, 1107 insertions(+), 76 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -269,7 +269,7 @@ index 00000000000000..3be888a0104809
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..19f3a125017b61 100644
+index 4524bd492feba0..ff890b1d06aea2 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,7 +18,12 @@ import (
@@ -935,7 +935,7 @@ index 00000000000000..e5d7570d6d4363
 +const isRequireFIPS = true
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..5a1f8da56d4fed
+index 00000000000000..ffa8d38e5d490f
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,223 @@
@@ -1956,7 +1956,7 @@ index 1636baf79e7288..747c3c0883230c 100644
  }
  
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index a7fa3370e66c82..e63daa3ed9f894 100644
+index a7fa3370e66c82..d34cd41f0891db 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -1967,7 +1967,7 @@ index a7fa3370e66c82..e63daa3ed9f894 100644
  	"crypto/md5"
  	"crypto/sha1"
  	"crypto/sha256"
-@@ -44,8 +45,37 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+@@ -44,8 +45,41 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
  	}
  }
  
@@ -1993,25 +1993,29 @@ index a7fa3370e66c82..e63daa3ed9f894 100644
 +	}
 +	return nil
 +}
++
++func panicBoringPRFError(err error) {
++	panic(boringPRFError{err})
++}
 +
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
  func prf10(result, secret, label, seed []byte) {
 +	if boring.Enabled && boring.SupportsTLS1PRF() {
 +		if err := boring.TLS1PRF(result, secret, label, seed, nil); err != nil {
-+			panic(boringPRFError{fmt.Errorf("crypto/tls: prf10: %v", err)})
++			panicBoringPRFError(fmt.Errorf("crypto/tls: prf10: %v", err))
 +		}
 +		return
 +	}
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -66,6 +96,12 @@ func prf10(result, secret, label, seed []byte) {
+@@ -66,6 +100,12 @@ func prf10(result, secret, label, seed []byte) {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
  func prf12(hashFunc func() hash.Hash) func(result, secret, label, seed []byte) {
  	return func(result, secret, label, seed []byte) {
 +		if boring.Enabled && boring.SupportsTLS1PRF() {
 +			if err := boring.TLS1PRF(result, secret, label, seed, hashFunc); err != nil {
-+				panic(boringPRFError{fmt.Errorf("crypto/tls: prf12: %v", err)})
++				panicBoringPRFError(fmt.Errorf("crypto/tls: prf12: %v", err))
 +			}
 +			return
 +		}

From cceccb2f72147bc338e39a5b85b3bf75ddabccb6 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 13 Dec 2024 12:38:17 +0100
Subject: [PATCH 148/887] consistently use systemcrypto as a build tag

---
 .../0002-Add-crypto-backend-foundation.patch  | 257 ++++++++++++++--
 patches/0004-Add-OpenSSL-crypto-backend.patch | 282 +-----------------
 patches/0005-Add-CNG-crypto-backend.patch     | 282 +-----------------
 3 files changed, 232 insertions(+), 589 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index d9ad171966a..c78c2535d0a 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -4,18 +4,20 @@ Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
 ---
+ src/cmd/api/boring_test.go                   |   2 +-
+ src/cmd/go/go_boring_test.go                 |   2 +-
  src/crypto/aes/cipher.go                     |   2 +-
  src/crypto/aes/cipher_asm.go                 |   2 +-
- src/crypto/boring/boring.go                  |   2 +-
+ src/crypto/boring/boring.go                  |   4 +-
  src/crypto/des/cipher.go                     |   7 +
  src/crypto/dsa/boring.go                     | 113 ++++++++++
  src/crypto/dsa/dsa.go                        |  88 ++++++++
  src/crypto/dsa/notboring.go                  |  16 ++
  src/crypto/ecdh/ecdh.go                      |   2 +-
  src/crypto/ecdh/nist.go                      |   2 +-
- src/crypto/ecdsa/boring.go                   |   4 +-
+ src/crypto/ecdsa/boring.go                   |   6 +-
  src/crypto/ecdsa/ecdsa.go                    |   4 +-
- src/crypto/ecdsa/notboring.go                |   2 +-
+ src/crypto/ecdsa/notboring.go                |   4 +-
  src/crypto/ed25519/boring.go                 |  71 ++++++
  src/crypto/ed25519/ed25519.go                |  75 ++++++-
  src/crypto/ed25519/ed25519_test.go           |   2 +-
@@ -29,14 +31,17 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/backend/nobackend.go     | 223 +++++++++++++++++++
  src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
+ src/crypto/internal/boring/fipstls/stub.s    |   2 +-
+ src/crypto/internal/boring/fipstls/tls.go    |   2 +-
  src/crypto/md5/md5.go                        |   7 +
  src/crypto/md5/md5_test.go                   |  14 ++
  src/crypto/purego_test.go                    |   2 +-
  src/crypto/rand/rand.go                      |   2 +-
  src/crypto/rand/rand_test.go                 |   2 +-
  src/crypto/rc4/rc4.go                        |  18 ++
- src/crypto/rsa/boring.go                     |   4 +-
- src/crypto/rsa/notboring.go                  |   2 +-
+ src/crypto/rsa/boring.go                     |   6 +-
+ src/crypto/rsa/boring_test.go                |   2 +-
+ src/crypto/rsa/notboring.go                  |   4 +-
  src/crypto/rsa/pkcs1v15.go                   |  10 +-
  src/crypto/rsa/pkcs1v15_test.go              |   5 +
  src/crypto/rsa/pss.go                        |   8 +-
@@ -49,21 +54,27 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/sha256/sha256_test.go             |  20 +-
  src/crypto/sha512/sha512.go                  |   2 +-
  src/crypto/sha512/sha512_test.go             |  20 +-
- src/crypto/tls/boring_test.go                |   5 +
+ src/crypto/tls/boring.go                     |   2 +-
+ src/crypto/tls/boring_test.go                |   7 +-
  src/crypto/tls/cipher_suites.go              |   2 +-
+ src/crypto/tls/fipsonly/fipsonly.go          |   2 +-
+ src/crypto/tls/fipsonly/fipsonly_test.go     |   2 +-
  src/crypto/tls/handshake_client.go           |  10 +-
  src/crypto/tls/handshake_server.go           |  10 +-
  src/crypto/tls/handshake_server_tls13.go     |  10 +
  src/crypto/tls/key_schedule.go               |  23 +-
+ src/crypto/tls/notboring.go                  |   2 +-
  src/crypto/tls/prf.go                        |  40 ++++
- src/crypto/x509/boring_test.go               |   5 +
+ src/crypto/x509/boring.go                    |   2 +-
+ src/crypto/x509/boring_test.go               |   7 +-
+ src/crypto/x509/notboring.go                 |   2 +-
  src/go/build/deps_test.go                    |   4 +
  src/hash/boring_test.go                      |   9 +
  src/hash/marshal_test.go                     |   5 +
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 59 files changed, 1107 insertions(+), 76 deletions(-)
+ 70 files changed, 1125 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -78,6 +89,32 @@ Subject: [PATCH] Add crypto backend foundation
  create mode 100644 src/hash/boring_test.go
  create mode 100644 src/hash/notboring_test.go
 
+diff --git a/src/cmd/api/boring_test.go b/src/cmd/api/boring_test.go
+index f0e3575637c62a..9eab3b4e66e60b 100644
+--- a/src/cmd/api/boring_test.go
++++ b/src/cmd/api/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package main
+ 
+diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
+index ed0fbf3d53d75b..06478963f4be44 100644
+--- a/src/cmd/go/go_boring_test.go
++++ b/src/cmd/go/go_boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package main_test
+ 
 diff --git a/src/crypto/aes/cipher.go b/src/crypto/aes/cipher.go
 index cde2e45d2ca559..cf47a4fc57d8e2 100644
 --- a/src/crypto/aes/cipher.go
@@ -105,9 +142,18 @@ index 3e5f589c2cdd0b..e9d3c0be11ef61 100644
  	"internal/goarch"
  )
 diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
-index 097c37e343fdb8..1cf43edba40359 100644
+index 097c37e343fdb8..a5d603896d3890 100644
 --- a/src/crypto/boring/boring.go
 +++ b/src/crypto/boring/boring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Package boring exposes functions that are only available when building with
+ // Go+BoringCrypto. This package is available on all targets as long as the
 @@ -13,7 +13,7 @@
  // is satisfied, so that applications can tag files that use this package.
  package boring
@@ -151,7 +197,7 @@ index 04b73e7d3bf758..0891652a4566fb 100644
  	c.cipher1.generateSubkeys(key[:8])
 diff --git a/src/crypto/dsa/boring.go b/src/crypto/dsa/boring.go
 new file mode 100644
-index 00000000000000..3be888a0104809
+index 00000000000000..7ea0c8c423e9ee
 --- /dev/null
 +++ b/src/crypto/dsa/boring.go
 @@ -0,0 +1,113 @@
@@ -159,7 +205,7 @@ index 00000000000000..3be888a0104809
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
++//go:build goexperiment.systemcrypto
 +
 +package dsa
 +
@@ -402,7 +448,7 @@ index 4524bd492feba0..ff890b1d06aea2 100644
 +}
 diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
 new file mode 100644
-index 00000000000000..f8771d0189f990
+index 00000000000000..cd02ff5a00c3dc
 --- /dev/null
 +++ b/src/crypto/dsa/notboring.go
 @@ -0,0 +1,16 @@
@@ -410,7 +456,7 @@ index 00000000000000..f8771d0189f990
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
++//go:build !goexperiment.systemcrypto
 +
 +package dsa
 +
@@ -449,10 +495,16 @@ index b91e8f38a5a78e..2bb8f3486c8249 100644
  	"crypto/internal/randutil"
  	"errors"
 diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
-index 275c60b4de49eb..61e70f981db4eb 100644
+index 275c60b4de49eb..ff8bddf28c4545 100644
 --- a/src/crypto/ecdsa/boring.go
 +++ b/src/crypto/ecdsa/boring.go
-@@ -7,8 +7,8 @@
+@@ -2,13 +2,13 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
  package ecdsa
  
  import (
@@ -480,10 +532,15 @@ index 2179b01e8e3db5..9eb763cecfe687 100644
  	"crypto/internal/randutil"
  	"crypto/sha512"
 diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
-index 039bd82ed21f9f..19188518e85e65 100644
+index 039bd82ed21f9f..69a97d9bf250be 100644
 --- a/src/crypto/ecdsa/notboring.go
 +++ b/src/crypto/ecdsa/notboring.go
-@@ -6,7 +6,7 @@
+@@ -2,11 +2,11 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
  
  package ecdsa
  
@@ -799,7 +856,7 @@ index 00000000000000..c2c06d3bff8c74
 +}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
-index 00000000000000..85bd3ed083f5b2
+index 00000000000000..20251a290dc2e0
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big.go
 @@ -0,0 +1,17 @@
@@ -807,7 +864,7 @@ index 00000000000000..85bd3ed083f5b2
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
 +
 +package bbig
 +
@@ -1193,6 +1250,32 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
+diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
+index f2e5a503eaacb6..35cf7532625efb 100644
+--- a/src/crypto/internal/boring/fipstls/stub.s
++++ b/src/crypto/internal/boring/fipstls/stub.s
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // runtime_arg0 is declared in tls.go without a body.
+ // It's provided by package runtime,
+diff --git a/src/crypto/internal/boring/fipstls/tls.go b/src/crypto/internal/boring/fipstls/tls.go
+index b51f142fde8311..0ea6593743349b 100644
+--- a/src/crypto/internal/boring/fipstls/tls.go
++++ b/src/crypto/internal/boring/fipstls/tls.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
+ // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index c984c3f4968598..229dd457f8d53c 100644
 --- a/src/crypto/md5/md5.go
@@ -1368,10 +1451,16 @@ index 67452ec39f0fd4..47726d0ebe38d9 100644
  		return
  	}
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index b9f9d3154f2589..ecb43aaf264743 100644
+index b9f9d3154f2589..d52faddef45549 100644
 --- a/src/crypto/rsa/boring.go
 +++ b/src/crypto/rsa/boring.go
-@@ -7,8 +7,8 @@
+@@ -2,13 +2,13 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
  package rsa
  
  import (
@@ -1382,11 +1471,29 @@ index b9f9d3154f2589..ecb43aaf264743 100644
  	"crypto/internal/boring/bcache"
  	"math/big"
  )
+diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
+index 2234d079f0d9e7..94ce18b2338416 100644
+--- a/src/crypto/rsa/boring_test.go
++++ b/src/crypto/rsa/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Note: Can run these tests against the non-BoringCrypto
+ // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
-index 2abc0436405f8a..34c22c8fbba7da 100644
+index 2abc0436405f8a..3e4d6f3eef61e6 100644
 --- a/src/crypto/rsa/notboring.go
 +++ b/src/crypto/rsa/notboring.go
-@@ -6,7 +6,7 @@
+@@ -2,11 +2,11 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
  
  package rsa
  
@@ -1815,10 +1922,32 @@ index fdad37b1863ae8..cf6e4c395cd4fb 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
+index c44ae92f2528f3..ddfec0c438265e 100644
+--- a/src/crypto/tls/boring.go
++++ b/src/crypto/tls/boring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package tls
+ 
 diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 56050421985927..dcbd33167e4499 100644
+index 56050421985927..863ad8d1faf810 100644
 --- a/src/crypto/tls/boring_test.go
 +++ b/src/crypto/tls/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package tls
+ 
 @@ -25,6 +25,11 @@ import (
  	"time"
  )
@@ -1844,6 +1973,32 @@ index 917a1eff42d34f..f6f57130b64f41 100644
  	"crypto/rc4"
  	"crypto/sha1"
  	"crypto/sha256"
+diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
+index e5e47835e2f48d..7dccbc7c3d748a 100644
+--- a/src/crypto/tls/fipsonly/fipsonly.go
++++ b/src/crypto/tls/fipsonly/fipsonly.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
+ //
+diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
+index f8485dc3ca1c29..d4915031340480 100644
+--- a/src/crypto/tls/fipsonly/fipsonly_test.go
++++ b/src/crypto/tls/fipsonly/fipsonly_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package fipsonly
+ 
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
 index 760e827f467f15..393c59ba8f1183 100644
 --- a/src/crypto/tls/handshake_client.go
@@ -1955,6 +2110,19 @@ index 1636baf79e7288..747c3c0883230c 100644
  	return hkdf.Extract(c.hash.New, newSecret, currentSecret)
  }
  
+diff --git a/src/crypto/tls/notboring.go b/src/crypto/tls/notboring.go
+index bdbc32e05b35dd..3bfe4096471910 100644
+--- a/src/crypto/tls/notboring.go
++++ b/src/crypto/tls/notboring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
+ 
+ package tls
+ 
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
 index a7fa3370e66c82..d34cd41f0891db 100644
 --- a/src/crypto/tls/prf.go
@@ -2022,10 +2190,32 @@ index a7fa3370e66c82..d34cd41f0891db 100644
  		labelAndSeed := make([]byte, len(label)+len(seed))
  		copy(labelAndSeed, label)
  		copy(labelAndSeed[len(label):], seed)
+diff --git a/src/crypto/x509/boring.go b/src/crypto/x509/boring.go
+index 095b58c31590d4..6b32417ea85657 100644
+--- a/src/crypto/x509/boring.go
++++ b/src/crypto/x509/boring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package x509
+ 
 diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index 319ac61f49c994..1b2454dbaab264 100644
+index 319ac61f49c994..b5f52252fb3e37 100644
 --- a/src/crypto/x509/boring_test.go
 +++ b/src/crypto/x509/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package x509
+ 
 @@ -26,6 +26,11 @@ const (
  	boringCertFIPSOK = 0x80
  )
@@ -2038,6 +2228,19 @@ index 319ac61f49c994..1b2454dbaab264 100644
  func boringRSAKey(t *testing.T, size int) *rsa.PrivateKey {
  	t.Helper()
  	k, err := rsa.GenerateKey(rand.Reader, size)
+diff --git a/src/crypto/x509/notboring.go b/src/crypto/x509/notboring.go
+index c83a7272c9f01f..7f6e574dc0c2dc 100644
+--- a/src/crypto/x509/notboring.go
++++ b/src/crypto/x509/notboring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
+ 
+ package x509
+ 
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index c6a2518f62ff3a..578b4d6f68504c 100644
 --- a/src/go/build/deps_test.go
@@ -2070,7 +2273,7 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	< crypto/ed25519
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
-index 00000000000000..b4cb21f3580737
+index 00000000000000..52748c44698076
 --- /dev/null
 +++ b/src/hash/boring_test.go
 @@ -0,0 +1,9 @@
@@ -2078,7 +2281,7 @@ index 00000000000000..b4cb21f3580737
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.boringcrypto
++//go:build goexperiment.systemcrypto
 +
 +package hash_test
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 6e8bf27cac4..b113bd72f46 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -4,61 +4,28 @@ Date: Thu, 30 Jun 2022 10:06:19 +0200
 Subject: [PATCH] Add OpenSSL crypto backend
 
 ---
- src/cmd/api/boring_test.go                    |   2 +-
  src/cmd/dist/test.go                          |   3 +-
- src/cmd/go/go_boring_test.go                  |   2 +-
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/lib.go               |   1 +
- src/crypto/boring/boring.go                   |   2 +-
- src/crypto/ecdsa/boring.go                    |   2 +-
- src/crypto/ecdsa/notboring.go                 |   2 +-
- src/crypto/internal/backend/bbig/big.go       |   2 +-
  .../internal/backend/bbig/big_openssl.go      |  12 +
  src/crypto/internal/backend/openssl_linux.go  | 371 ++++++++++++++++++
- src/crypto/internal/boring/fipstls/stub.s     |   2 +-
- src/crypto/internal/boring/fipstls/tls.go     |   2 +-
- src/crypto/rsa/boring.go                      |   2 +-
- src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/notboring.go                   |   2 +-
  src/crypto/rsa/rsa_test.go                    |   3 +
- src/crypto/tls/boring.go                      |   2 +-
- src/crypto/tls/boring_test.go                 |   2 +-
- src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
- src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/key_schedule.go                |   1 +
- src/crypto/tls/notboring.go                   |   2 +-
- src/crypto/x509/boring.go                     |   2 +-
- src/crypto/x509/boring_test.go                |   2 +-
- src/crypto/x509/notboring.go                  |   2 +-
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   7 +-
  src/go/build/vendor_test.go                   |   1 +
- src/hash/boring_test.go                       |   2 +-
  src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_opensslcrypto_off.go     |   9 +
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 36 files changed, 456 insertions(+), 25 deletions(-)
+ 16 files changed, 436 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
 
-diff --git a/src/cmd/api/boring_test.go b/src/cmd/api/boring_test.go
-index f0e3575637c62a..0e9aceeb832d3b 100644
---- a/src/cmd/api/boring_test.go
-+++ b/src/cmd/api/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package main
- 
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index 0facfb579cb196..223472e20d24a5 100644
 --- a/src/cmd/dist/test.go
@@ -77,19 +44,6 @@ index 0facfb579cb196..223472e20d24a5 100644
  			// Static linking tests
  			if goos != "android" && p != "netbsd/arm" {
  				// TODO(#56629): Why does this fail on netbsd-arm?
-diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
-index ed0fbf3d53d75b..5376227f74cfaa 100644
---- a/src/cmd/go/go_boring_test.go
-+++ b/src/cmd/go/go_boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package main_test
- 
 diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
 index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
 --- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
@@ -121,58 +75,6 @@ index 0c37a1dc1f8c15..faf8a1874d5f28 100644
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",
  	"crypto/x509",
-diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
-index 1cf43edba40359..7b04f14ebdd618 100644
---- a/src/crypto/boring/boring.go
-+++ b/src/crypto/boring/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- // Package boring exposes functions that are only available when building with
- // Go+BoringCrypto. This package is available on all targets as long as the
-diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
-index 61e70f981db4eb..602cb894e20d39 100644
---- a/src/crypto/ecdsa/boring.go
-+++ b/src/crypto/ecdsa/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package ecdsa
- 
-diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
-index 19188518e85e65..3cc16ecab567a0 100644
---- a/src/crypto/ecdsa/notboring.go
-+++ b/src/crypto/ecdsa/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto
- 
- package ecdsa
- 
-diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
-index 85bd3ed083f5b2..51bc3c68048d51 100644
---- a/src/crypto/internal/backend/bbig/big.go
-+++ b/src/crypto/internal/backend/bbig/big.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto
- 
- package bbig
- 
 diff --git a/src/crypto/internal/backend/bbig/big_openssl.go b/src/crypto/internal/backend/bbig/big_openssl.go
 new file mode 100644
 index 00000000000000..e6695dd66b1d02
@@ -568,71 +470,6 @@ index 00000000000000..57af729e1458f5
 +
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
-diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
-index f2e5a503eaacb6..1dc7116efdff2e 100644
---- a/src/crypto/internal/boring/fipstls/stub.s
-+++ b/src/crypto/internal/boring/fipstls/stub.s
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- // runtime_arg0 is declared in tls.go without a body.
- // It's provided by package runtime,
-diff --git a/src/crypto/internal/boring/fipstls/tls.go b/src/crypto/internal/boring/fipstls/tls.go
-index b51f142fde8311..f5b4827c688f3b 100644
---- a/src/crypto/internal/boring/fipstls/tls.go
-+++ b/src/crypto/internal/boring/fipstls/tls.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
- // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
-diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index ecb43aaf264743..220f8c05c3d94b 100644
---- a/src/crypto/rsa/boring.go
-+++ b/src/crypto/rsa/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package rsa
- 
-diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
-index 2234d079f0d9e7..82a9d220e139af 100644
---- a/src/crypto/rsa/boring_test.go
-+++ b/src/crypto/rsa/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- // Note: Can run these tests against the non-BoringCrypto
- // version of the code by using "CGO_ENABLED=0 go test".
-diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
-index 34c22c8fbba7da..933ac569e034a8 100644
---- a/src/crypto/rsa/notboring.go
-+++ b/src/crypto/rsa/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto
- 
- package rsa
- 
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index c6294694521c69..ab99b176ac9540 100644
 --- a/src/crypto/rsa/rsa_test.go
@@ -647,58 +484,6 @@ index c6294694521c69..ab99b176ac9540 100644
  	random := rand.Reader
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
-diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
-index c44ae92f2528f3..698efc6751e12c 100644
---- a/src/crypto/tls/boring.go
-+++ b/src/crypto/tls/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index dcbd33167e4499..1f577fd1d4d9ec 100644
---- a/src/crypto/tls/boring_test.go
-+++ b/src/crypto/tls/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
-index e5e47835e2f48d..1a94656dfee6dd 100644
---- a/src/crypto/tls/fipsonly/fipsonly.go
-+++ b/src/crypto/tls/fipsonly/fipsonly.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
- //
-diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
-index f8485dc3ca1c29..9c1d3d279c472f 100644
---- a/src/crypto/tls/fipsonly/fipsonly_test.go
-+++ b/src/crypto/tls/fipsonly/fipsonly_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package fipsonly
- 
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
 index 747c3c0883230c..ee9274bb63b9b4 100644
 --- a/src/crypto/tls/key_schedule.go
@@ -711,58 +496,6 @@ index 747c3c0883230c..ee9274bb63b9b4 100644
  	"crypto/internal/mlkem768"
  	"errors"
  	"fmt"
-diff --git a/src/crypto/tls/notboring.go b/src/crypto/tls/notboring.go
-index bdbc32e05b35dd..36b4ceab0046c6 100644
---- a/src/crypto/tls/notboring.go
-+++ b/src/crypto/tls/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto
- 
- package tls
- 
-diff --git a/src/crypto/x509/boring.go b/src/crypto/x509/boring.go
-index 095b58c31590d4..9aec21dbcd3bff 100644
---- a/src/crypto/x509/boring.go
-+++ b/src/crypto/x509/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package x509
- 
-diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index 1b2454dbaab264..8cfc61049d0a08 100644
---- a/src/crypto/x509/boring_test.go
-+++ b/src/crypto/x509/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto
- 
- package x509
- 
-diff --git a/src/crypto/x509/notboring.go b/src/crypto/x509/notboring.go
-index c83a7272c9f01f..a0548a7f9179c5 100644
---- a/src/crypto/x509/notboring.go
-+++ b/src/crypto/x509/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto
- 
- package x509
- 
 diff --git a/src/go.mod b/src/go.mod
 index df27f25e789f05..30e45951c763fa 100644
 --- a/src/go.mod
@@ -836,19 +569,6 @@ index 7f6237ffd59c11..7c821ae4bc5727 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
-index b4cb21f3580737..ff24d12966e22f 100644
---- a/src/hash/boring_test.go
-+++ b/src/hash/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build goexperiment.boringcrypto
-+//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
- 
- package hash_test
- 
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
 index 0f289915be6daa..bd935326bf7305 100644
 --- a/src/hash/notboring_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 8f454e0bd65..71389724783 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -4,88 +4,29 @@ Date: Tue, 19 Jul 2022 15:58:02 +0200
 Subject: [PATCH] Add CNG crypto backend
 
 ---
- src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/go/go_boring_test.go                  |   2 +-
- src/crypto/boring/boring.go                   |   2 +-
  src/crypto/ecdsa/badlinkname.go               |  17 +
- src/crypto/ecdsa/boring.go                    |   2 +-
- src/crypto/ecdsa/notboring.go                 |   2 +-
  src/crypto/internal/backend/backend_test.go   |   4 +-
- src/crypto/internal/backend/bbig/big.go       |   2 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  src/crypto/internal/backend/cng_windows.go    | 317 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
- src/crypto/internal/boring/fipstls/stub.s     |   2 +-
- src/crypto/internal/boring/fipstls/tls.go     |   2 +-
- src/crypto/rsa/boring.go                      |   2 +-
- src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/notboring.go                   |   2 +-
  src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
- src/crypto/tls/boring.go                      |   2 +-
- src/crypto/tls/boring_test.go                 |   2 +-
- src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
- src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
- src/crypto/tls/notboring.go                   |   2 +-
- src/crypto/x509/boring.go                     |   2 +-
- src/crypto/x509/boring_test.go                |   2 +-
- src/crypto/x509/notboring.go                  |   2 +-
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   5 +
  src/go/build/vendor_test.go                   |   1 +
- src/hash/boring_test.go                       |   2 +-
  src/hash/example_test.go                      |   2 +
  src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 36 files changed, 412 insertions(+), 27 deletions(-)
+ 16 files changed, 392 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
 
-diff --git a/src/cmd/api/boring_test.go b/src/cmd/api/boring_test.go
-index 0e9aceeb832d3b..aecf81b09c8ad3 100644
---- a/src/cmd/api/boring_test.go
-+++ b/src/cmd/api/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package main
- 
-diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
-index 5376227f74cfaa..492ccf79d66b45 100644
---- a/src/cmd/go/go_boring_test.go
-+++ b/src/cmd/go/go_boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package main_test
- 
-diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
-index 7b04f14ebdd618..8bdafb72f2c51a 100644
---- a/src/crypto/boring/boring.go
-+++ b/src/crypto/boring/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- // Package boring exposes functions that are only available when building with
- // Go+BoringCrypto. This package is available on all targets as long as the
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
 index 00000000000000..0d00b7bb3a7fc8
@@ -109,32 +50,6 @@ index 00000000000000..0d00b7bb3a7fc8
 +// This supplements other linknames that are already added by
 +// https://github.com/golang/go/commit/41aab30bd260297ad8ddad47e98fdf8390a9a67e
 +// See that commit for more information.
-diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
-index 602cb894e20d39..bf9e77e06599f0 100644
---- a/src/crypto/ecdsa/boring.go
-+++ b/src/crypto/ecdsa/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package ecdsa
- 
-diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
-index 3cc16ecab567a0..dbbc6e3897e153 100644
---- a/src/crypto/ecdsa/notboring.go
-+++ b/src/crypto/ecdsa/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto && !goexperiment.opensslcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package ecdsa
- 
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 index c2c06d3bff8c74..837cff477e257e 100644
 --- a/src/crypto/internal/backend/backend_test.go
@@ -150,19 +65,6 @@ index c2c06d3bff8c74..837cff477e257e 100644
  
  // Test that Unreachable panics.
  func TestUnreachable(t *testing.T) {
-diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
-index 51bc3c68048d51..15f9833c9fcd20 100644
---- a/src/crypto/internal/backend/bbig/big.go
-+++ b/src/crypto/internal/backend/bbig/big.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto && !goexperiment.opensslcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package bbig
- 
 diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
 new file mode 100644
 index 00000000000000..92623031fd87d0
@@ -532,71 +434,6 @@ index bc595e91024f11..7766d674f5cfaf 100644
 +	}
 +	return true
 +}
-diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
-index 1dc7116efdff2e..b4c321d1d2babb 100644
---- a/src/crypto/internal/boring/fipstls/stub.s
-+++ b/src/crypto/internal/boring/fipstls/stub.s
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- // runtime_arg0 is declared in tls.go without a body.
- // It's provided by package runtime,
-diff --git a/src/crypto/internal/boring/fipstls/tls.go b/src/crypto/internal/boring/fipstls/tls.go
-index f5b4827c688f3b..12df96069f6b83 100644
---- a/src/crypto/internal/boring/fipstls/tls.go
-+++ b/src/crypto/internal/boring/fipstls/tls.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
- // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
-diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index 220f8c05c3d94b..dd20b4af2e0472 100644
---- a/src/crypto/rsa/boring.go
-+++ b/src/crypto/rsa/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package rsa
- 
-diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
-index 82a9d220e139af..c3860f8d698bc3 100644
---- a/src/crypto/rsa/boring_test.go
-+++ b/src/crypto/rsa/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- // Note: Can run these tests against the non-BoringCrypto
- // version of the code by using "CGO_ENABLED=0 go test".
-diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
-index 933ac569e034a8..0f152b210fdd84 100644
---- a/src/crypto/rsa/notboring.go
-+++ b/src/crypto/rsa/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto && !goexperiment.opensslcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package rsa
- 
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
 index 4aac87d7952081..010ee1467501c3 100644
 --- a/src/crypto/rsa/pss.go
@@ -623,110 +460,6 @@ index 2c82f50adf38b8..33630f14dcc8d4 100644
  	if err != nil {
  		t.Fatal(err)
  	}
-diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
-index 698efc6751e12c..575d51b02298c8 100644
---- a/src/crypto/tls/boring.go
-+++ b/src/crypto/tls/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 1f577fd1d4d9ec..3cdde9780352a4 100644
---- a/src/crypto/tls/boring_test.go
-+++ b/src/crypto/tls/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
-index 1a94656dfee6dd..d7d1441ed319be 100644
---- a/src/crypto/tls/fipsonly/fipsonly.go
-+++ b/src/crypto/tls/fipsonly/fipsonly.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
- //
-diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
-index 9c1d3d279c472f..0ca7a863b73690 100644
---- a/src/crypto/tls/fipsonly/fipsonly_test.go
-+++ b/src/crypto/tls/fipsonly/fipsonly_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package fipsonly
- 
-diff --git a/src/crypto/tls/notboring.go b/src/crypto/tls/notboring.go
-index 36b4ceab0046c6..c87df4ad695f1b 100644
---- a/src/crypto/tls/notboring.go
-+++ b/src/crypto/tls/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto && !goexperiment.opensslcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package tls
- 
-diff --git a/src/crypto/x509/boring.go b/src/crypto/x509/boring.go
-index 9aec21dbcd3bff..05324f731bedc4 100644
---- a/src/crypto/x509/boring.go
-+++ b/src/crypto/x509/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package x509
- 
-diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index 8cfc61049d0a08..8948d51dfabd20 100644
---- a/src/crypto/x509/boring_test.go
-+++ b/src/crypto/x509/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto || goexperiment.opensslcrypto
-+//go:build boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package x509
- 
-diff --git a/src/crypto/x509/notboring.go b/src/crypto/x509/notboring.go
-index a0548a7f9179c5..ae6117a1554b7f 100644
---- a/src/crypto/x509/notboring.go
-+++ b/src/crypto/x509/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto && !goexperiment.opensslcrypto
-+//go:build !boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package x509
- 
 diff --git a/src/go.mod b/src/go.mod
 index 30e45951c763fa..0209eeb6b8642c 100644
 --- a/src/go.mod
@@ -786,19 +519,6 @@ index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
-index ff24d12966e22f..a5242cca089049 100644
---- a/src/hash/boring_test.go
-+++ b/src/hash/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto
-+//go:build goexperiment.boringcrypto || goexperiment.opensslcrypto || goexperiment.cngcrypto
- 
- package hash_test
- 
 diff --git a/src/hash/example_test.go b/src/hash/example_test.go
 index f07b9aaa2c4898..2ff6c4827391c0 100644
 --- a/src/hash/example_test.go

From 8db686641ac868e8b936722005847f7ece870f3a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 13 Dec 2024 12:53:40 +0100
Subject: [PATCH 149/887] remove missed translation

---
 patches/0002-Add-crypto-backend-foundation.patch |  4 ++--
 patches/0004-Add-OpenSSL-crypto-backend.patch    | 16 +---------------
 patches/0005-Add-CNG-crypto-backend.patch        | 16 +---------------
 3 files changed, 4 insertions(+), 32 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index c78c2535d0a..0b7aae1354b 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -2304,7 +2304,7 @@ index 3091f7a67acede..fead8cc4bec73a 100644
  
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
 new file mode 100644
-index 00000000000000..0f289915be6daa
+index 00000000000000..11dc691600b110
 --- /dev/null
 +++ b/src/hash/notboring_test.go
 @@ -0,0 +1,9 @@
@@ -2312,7 +2312,7 @@ index 00000000000000..0f289915be6daa
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.boringcrypto
++//go:build !goexperiment.systemcrypto
 +
 +package hash_test
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index b113bd72f46..a704ba4ee88 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -15,12 +15,11 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   7 +-
  src/go/build/vendor_test.go                   |   1 +
- src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_opensslcrypto_off.go     |   9 +
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 16 files changed, 436 insertions(+), 5 deletions(-)
+ 15 files changed, 435 insertions(+), 4 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
@@ -569,19 +568,6 @@ index 7f6237ffd59c11..7c821ae4bc5727 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
-index 0f289915be6daa..bd935326bf7305 100644
---- a/src/hash/notboring_test.go
-+++ b/src/hash/notboring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !goexperiment.boringcrypto
-+//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
- 
- package hash_test
- 
 diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
 new file mode 100644
 index 00000000000000..62033547c6143a
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 71389724783..efed82b61f2 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -16,11 +16,10 @@ Subject: [PATCH] Add CNG crypto backend
  src/go/build/deps_test.go                     |   5 +
  src/go/build/vendor_test.go                   |   1 +
  src/hash/example_test.go                      |   2 +
- src/hash/notboring_test.go                    |   2 +-
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 16 files changed, 392 insertions(+), 7 deletions(-)
+ 15 files changed, 391 insertions(+), 6 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -532,19 +531,6 @@ index f07b9aaa2c4898..2ff6c4827391c0 100644
  package hash_test
  
  import (
-diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
-index bd935326bf7305..40c84700690612 100644
---- a/src/hash/notboring_test.go
-+++ b/src/hash/notboring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto
-+//go:build !goexperiment.boringcrypto && !goexperiment.opensslcrypto && !goexperiment.cngcrypto
- 
- package hash_test
- 
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..831460053281e2

From 2500b7f416565750fd00874036e2970800b0d2e8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Dec 2024 11:10:46 -0800
Subject: [PATCH 150/887] build(deps): bump github/codeql-action from 3.27.7 to
 3.27.9 (#1442)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.7 to 3.27.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/babb554ede22fd5605947329c4d04d8e7a0b8155...df409f7d9260372bd5f19e5b04e83cb3c43714ae)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b73ed2b0374..c74a170d4ac 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
+        uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
+        uses: github/codeql-action/autobuild@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
+        uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
         with:
           category: /language:go

From 38107822fac61872d7e6f216834c304f4a272b23 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Dec 2024 13:40:12 +0100
Subject: [PATCH 151/887] move FIPS enabled logic to its own package

---
 .../0002-Add-crypto-backend-foundation.patch  | 221 +++++++++++++-----
 .../0003-Add-BoringSSL-crypto-backend.patch   |  21 +-
 patches/0004-Add-OpenSSL-crypto-backend.patch | 139 +++++------
 patches/0005-Add-CNG-crypto-backend.patch     |  75 ++++--
 4 files changed, 303 insertions(+), 153 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 0b7aae1354b..461bc71c991 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -26,13 +26,15 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/hmac/hmac_test.go                 |   2 +-
  src/crypto/internal/backend/backend_test.go  |  30 +++
  src/crypto/internal/backend/bbig/big.go      |  17 ++
- src/crypto/internal/backend/common.go        |  92 ++++++++
- src/crypto/internal/backend/isrequirefips.go |   9 +
+ src/crypto/internal/backend/common.go        |  68 ++++++
+ .../backend/fips140/fips140.go               |  55 +++++
+ .../backend/fips140/isrequirefips.go         |   9 +
+ .../backend/fips140/norequirefips.go         |   9 +
+ .../backend/fips140/nosystemcrypto.go        |  11 +
  src/crypto/internal/backend/nobackend.go     | 223 +++++++++++++++++++
- src/crypto/internal/backend/norequirefips.go |   9 +
  src/crypto/internal/backend/stub.s           |  10 +
  src/crypto/internal/boring/fipstls/stub.s    |   2 +-
- src/crypto/internal/boring/fipstls/tls.go    |   2 +-
+ src/crypto/internal/boring/fipstls/tls.go    |   7 +-
  src/crypto/md5/md5.go                        |   7 +
  src/crypto/md5/md5_test.go                   |  14 ++
  src/crypto/purego_test.go                    |   2 +-
@@ -68,13 +70,13 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/x509/boring.go                    |   2 +-
  src/crypto/x509/boring_test.go               |   7 +-
  src/crypto/x509/notboring.go                 |   2 +-
- src/go/build/deps_test.go                    |   4 +
+ src/go/build/deps_test.go                    |  11 +-
  src/hash/boring_test.go                      |   9 +
  src/hash/marshal_test.go                     |   5 +
  src/hash/notboring_test.go                   |   9 +
  src/net/smtp/smtp_test.go                    |  72 +++---
  src/runtime/runtime_boring.go                |   5 +
- 70 files changed, 1125 insertions(+), 94 deletions(-)
+ 73 files changed, 1180 insertions(+), 95 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -82,9 +84,11 @@ Subject: [PATCH] Add crypto backend foundation
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
  create mode 100644 src/crypto/internal/backend/common.go
- create mode 100644 src/crypto/internal/backend/isrequirefips.go
+ create mode 100644 src/crypto/internal/backend/fips140/fips140.go
+ create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
+ create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
+ create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
- create mode 100644 src/crypto/internal/backend/norequirefips.go
  create mode 100644 src/crypto/internal/backend/stub.s
  create mode 100644 src/hash/boring_test.go
  create mode 100644 src/hash/notboring_test.go
@@ -879,10 +883,10 @@ index 00000000000000..20251a290dc2e0
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..bc595e91024f11
+index 00000000000000..07d965bf8b467c
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,92 @@
+@@ -0,0 +1,68 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -890,47 +894,23 @@ index 00000000000000..bc595e91024f11
 +package backend
 +
 +import (
++	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"internal/goexperiment"
 +	"runtime"
-+	"syscall"
 +)
 +
 +func init() {
-+	if v, r, ok := envGoFIPS(); ok && v == "1" {
++	if fips140.Enabled() {
 +		if !Enabled {
 +			if runtime.GOOS != "linux" && runtime.GOOS != "windows" {
-+				panic("FIPS mode requested (" + r + ") but no crypto backend is supported on " + runtime.GOOS)
++				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
 +			}
-+			panic("FIPS mode requested (" + r + ") but no supported crypto backend is enabled")
++			panic("FIPS mode requested (" + fips140.Message + ") but no supported crypto backend is enabled")
 +		}
 +	}
 +}
 +
-+func envGoFIPS() (value string, reason string, ok bool) {
-+	// TODO: Decide which environment variable to use.
-+	// See https://github.com/microsoft/go/issues/397.
-+	var varName string
-+	if value, ok = syscall.Getenv("GOFIPS"); ok {
-+		varName = "GOFIPS"
-+	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
-+		varName = "GOLANG_FIPS"
-+	}
-+	if isRequireFIPS {
-+		if ok && value != "1" {
-+			panic("the 'requirefips' build tag is enabled, but it conflicts " +
-+				"with the detected env variable " +
-+				varName + "=" + value +
-+				" which would disable FIPS mode")
-+		}
-+		return "1", "requirefips tag set", true
-+	}
-+	if ok {
-+		return value, "environment variable " + varName + "=1", true
-+	}
-+	return "", "", false
-+}
-+
 +// Unreachable marks code that should be unreachable
 +// when backend is in use.
 +func Unreachable() {
@@ -975,21 +955,117 @@ index 00000000000000..bc595e91024f11
 +	// Given the above reasons, we only support 2-prime RSA keys.
 +	return primes == 2
 +}
-diff --git a/src/crypto/internal/backend/isrequirefips.go b/src/crypto/internal/backend/isrequirefips.go
+diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
+new file mode 100644
+index 00000000000000..f54d39970319af
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/fips140.go
+@@ -0,0 +1,55 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package fips140
++
++import "syscall"
++
++// Enabled reports whether FIPS 140 mode is enabled by using GOFIPS=1, GOLANG_FIPS=1,
++// the 'requirefips' build tag, or any other platform-specific mechanism.
++func Enabled() bool {
++	return enabled
++}
++
++var enabled bool
++
++// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS=0 or GOLANG_FIPS=0.
++func Disabled() bool {
++	return disabled
++}
++
++var disabled bool
++
++// Message is a human-readable message about how [Enabled] was set.
++var Message string
++
++func init() {
++	// TODO: Decide which environment variable to use.
++	// See https://github.com/microsoft/go/issues/397.
++	var value string
++	var ok bool
++	if value, ok = syscall.Getenv("GOFIPS"); ok {
++		Message = "environment variable GOFIPS"
++	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
++		Message = "environment variable GOLANG_FIPS"
++	} else if systemFIPSMode() {
++		Message = "system FIPS mode"
++		value = "1"
++	}
++	if value == "1" {
++		enabled = true
++	} else if value == "0" {
++		disabled = true
++	}
++	if isRequireFIPS {
++		if disabled {
++			panic("the 'requirefips' build tag is enabled, but it conflicts " +
++				"with the " + Message + "=" + value +
++				" which would disable FIPS mode")
++		}
++		Message = "requirefips tag set"
++		enabled = true
++		return
++	}
++}
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
 new file mode 100644
-index 00000000000000..e5d7570d6d4363
+index 00000000000000..b33d08c84e2dae
 --- /dev/null
-+++ b/src/crypto/internal/backend/isrequirefips.go
++++ b/src/crypto/internal/backend/fips140/isrequirefips.go
 @@ -0,0 +1,9 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
++// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +//go:build requirefips
 +
-+package backend
++package fips140
 +
 +const isRequireFIPS = true
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/norequirefips.go b/src/crypto/internal/backend/fips140/norequirefips.go
+new file mode 100644
+index 00000000000000..6f01b9a3524dee
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/norequirefips.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !requirefips
++
++package fips140
++
++const isRequireFIPS = false
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+new file mode 100644
+index 00000000000000..83691d7dd42d51
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
 index 00000000000000..ffa8d38e5d490f
@@ -1219,21 +1295,6 @@ index 00000000000000..ffa8d38e5d490f
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
-diff --git a/src/crypto/internal/backend/norequirefips.go b/src/crypto/internal/backend/norequirefips.go
-new file mode 100644
-index 00000000000000..26bfb5f6a643f3
---- /dev/null
-+++ b/src/crypto/internal/backend/norequirefips.go
-@@ -0,0 +1,9 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !requirefips
-+
-+package backend
-+
-+const isRequireFIPS = false
 diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
 new file mode 100644
 index 00000000000000..5e4b436554d44d
@@ -1264,7 +1325,7 @@ index f2e5a503eaacb6..35cf7532625efb 100644
  // runtime_arg0 is declared in tls.go without a body.
  // It's provided by package runtime,
 diff --git a/src/crypto/internal/boring/fipstls/tls.go b/src/crypto/internal/boring/fipstls/tls.go
-index b51f142fde8311..0ea6593743349b 100644
+index b51f142fde8311..108b52d9d8fcb7 100644
 --- a/src/crypto/internal/boring/fipstls/tls.go
 +++ b/src/crypto/internal/boring/fipstls/tls.go
 @@ -2,7 +2,7 @@
@@ -1276,6 +1337,26 @@ index b51f142fde8311..0ea6593743349b 100644
  
  // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
  // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
+@@ -10,12 +10,19 @@
+ package fipstls
+ 
+ import (
++	"crypto/internal/backend/fips140"
+ 	"internal/stringslite"
+ 	"sync/atomic"
+ )
+ 
+ var required atomic.Bool
+ 
++func init() {
++	if fips140.Enabled() {
++		Force()
++	}
++}
++
+ // Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings.
+ // By design, this call is impossible to undo (except in tests).
+ //
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index c984c3f4968598..229dd457f8d53c 100644
 --- a/src/crypto/md5/md5.go
@@ -2242,10 +2323,22 @@ index c83a7272c9f01f..7f6e574dc0c2dc 100644
  package x509
  
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index c6a2518f62ff3a..578b4d6f68504c 100644
+index c6a2518f62ff3a..6c7229b41c825e 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -464,7 +464,9 @@ var depsRules = `
+@@ -457,14 +457,20 @@ var depsRules = `
+ 	< crypto/internal/fips/hmac
+ 	< FIPS;
+ 
++	syscall < crypto/internal/backend/fips140;
++
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+-	sync/atomic < crypto/internal/boring/bcache, crypto/internal/boring/fipstls;
++	sync/atomic,
++	crypto/internal/backend/fips140
++	< crypto/internal/boring/bcache, crypto/internal/boring/fipstls;
+ 	crypto/internal/boring/sig, crypto/internal/boring/fipstls < crypto/tls/fipsonly;
+ 
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
  	FIPS,
  	crypto/internal/boring/sig,
@@ -2255,15 +2348,17 @@ index c6a2518f62ff3a..578b4d6f68504c 100644
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -475,6 +477,7 @@ var depsRules = `
+@@ -474,7 +480,9 @@ var depsRules = `
+ 
  	crypto/cipher,
  	crypto/internal/boring/bcache
++	crypto/internal/backend/fips140
  	< crypto/internal/boring
 +	< crypto/internal/backend
  	< crypto/boring;
  
  	crypto/internal/alias, math/rand/v2
-@@ -512,6 +515,7 @@ var depsRules = `
+@@ -512,6 +520,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index a9449fa8184..8a7c0aaa2df 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -6,9 +6,11 @@ Subject: [PATCH] Add BoringSSL crypto backend
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/boring_linux.go   | 257 ++++++++++++++++++
- 2 files changed, 270 insertions(+)
+ src/crypto/internal/backend/fips140/boring.go |  11 +
+ 3 files changed, 281 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
+ create mode 100644 src/crypto/internal/backend/fips140/boring.go
 
 diff --git a/src/crypto/internal/backend/bbig/big_boring.go b/src/crypto/internal/backend/bbig/big_boring.go
 new file mode 100644
@@ -291,3 +293,20 @@ index 00000000000000..31e57a8dffd4c3
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s boring.BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
+diff --git a/src/crypto/internal/backend/fips140/boring.go b/src/crypto/internal/backend/fips140/boring.go
+new file mode 100644
+index 00000000000000..3b583dc0eb0235
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/boring.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.boringcrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index a704ba4ee88..20b7b606716 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -8,19 +8,20 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/lib.go               |   1 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/openssl_linux.go  | 371 ++++++++++++++++++
- src/crypto/rsa/rsa_test.go                    |   3 +
+ .../internal/backend/fips140/openssl.go       |  41 +++
+ src/crypto/internal/backend/openssl_linux.go  | 323 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   1 +
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
- src/go/build/deps_test.go                     |   7 +-
+ src/go/build/deps_test.go                     |   9 +-
  src/go/build/vendor_test.go                   |   1 +
  .../goexperiment/exp_opensslcrypto_off.go     |   9 +
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 15 files changed, 435 insertions(+), 4 deletions(-)
+ 16 files changed, 429 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
@@ -92,12 +93,59 @@ index 00000000000000..e6695dd66b1d02
 +
 +var Enc = bbig.Enc
 +var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
+new file mode 100644
+index 00000000000000..118efa3a492a7d
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/openssl.go
+@@ -0,0 +1,41 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto
++
++package fips140
++
++import "syscall"
++
++func systemFIPSMode() bool {
++	var fd int
++	for {
++		var err error
++		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
++		if err == nil {
++			break
++		}
++		switch err {
++		case syscall.EINTR:
++			continue
++		case syscall.ENOENT:
++			return false
++		default:
++			// If there is an error reading we could either panic or assume FIPS is not enabled.
++			// Panicking would be too disruptive for apps that don't require FIPS.
++			// If an app wants to be 100% sure that is running in FIPS mode
++			// it should use boring.Enabled() or GOFIPS=1.
++			return false
++		}
++	}
++	defer syscall.Close(fd)
++	var tmp [1]byte
++	n, err := syscall.Read(fd, tmp[:])
++	if n != 1 || err != nil {
++		// We return false instead of panicing for the same reason as before.
++		return false
++	}
++	// fips_enabled can be either '0' or '1'.
++	return tmp[0] == '1'
++}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..57af729e1458f5
+index 00000000000000..bccf529a4bcfac
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,371 @@
+@@ -0,0 +1,323 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -112,7 +160,7 @@ index 00000000000000..57af729e1458f5
 +import (
 +	"crypto"
 +	"crypto/cipher"
-+	"crypto/internal/boring/fipstls"
++	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"hash"
 +	"syscall"
@@ -163,68 +211,20 @@ index 00000000000000..57af729e1458f5
 +	if err := openssl.Init(lcrypto); err != nil {
 +		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
 +	}
-+	// 0: FIPS opt-out: abort the process if it is enabled and can't be disabled.
-+	// 1: FIPS required: abort the process if it is not enabled and can't be enabled.
-+	// other values: do not override OpenSSL configured FIPS mode.
-+	var fips string
-+	if v, _, ok := envGoFIPS(); ok {
-+		fips = v
-+	} else if systemFIPSMode() {
-+		// System configuration can only force FIPS mode.
-+		fips = "1"
-+	}
-+	switch fips {
-+	case "0":
-+		if openssl.FIPS() {
-+			if err := openssl.SetFIPS(false); err != nil {
-+				panic("opensslcrypto: can't disable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
-+			}
-+		}
-+	case "1":
++	if fips140.Enabled() {
 +		if !openssl.FIPS() {
 +			if err := openssl.SetFIPS(true); err != nil {
 +				panic("opensslcrypto: can't enable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
 +			}
 +		}
-+	}
-+	if openssl.FIPS() {
-+		// FIPS mode is enabled,
-+		// so force FIPS mode for crypto/tls and crypto/x509.
-+		fipstls.Force()
-+	}
-+	sig.BoringCrypto()
-+}
-+
-+func systemFIPSMode() bool {
-+	var fd int
-+	for {
-+		var err error
-+		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
-+		if err == nil {
-+			break
-+		}
-+		switch err {
-+		case syscall.EINTR:
-+			continue
-+		case syscall.ENOENT:
-+			return false
-+		default:
-+			// If there is an error reading we could either panic or assume FIPS is not enabled.
-+			// Panicking would be too disruptive for apps that don't require FIPS.
-+			// If an app wants to be 100% sure that is running in FIPS mode
-+			// it should use boring.Enabled() or GOFIPS=1.
-+			return false
++	} else if fips140.Disabled() {
++		if openssl.FIPS() {
++			if err := openssl.SetFIPS(false); err != nil {
++				panic("opensslcrypto: can't disable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
++			}
 +		}
 +	}
-+	defer syscall.Close(fd)
-+	var tmp [1]byte
-+	n, err := syscall.Read(fd, tmp[:])
-+	if n != 1 || err != nil {
-+		// We return false instead of panicing for the same reason as before.
-+		return false
-+	}
-+	// fips_enabled can be either '0' or '1'.
-+	return tmp[0] == '1'
++	sig.BoringCrypto()
 +}
 +
 +const RandReader = openssl.RandReader
@@ -518,19 +518,22 @@ index b4efd6d3c50c11..fd8881e46df76e 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 578b4d6f68504c..80a14d54739524 100644
+index 6c7229b41c825e..6504a23ce5d51f 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -476,6 +476,8 @@ var depsRules = `
+@@ -479,8 +479,10 @@ var depsRules = `
+ 	< crypto/cipher;
  
  	crypto/cipher,
- 	crypto/internal/boring/bcache
+-	crypto/internal/boring/bcache
++	crypto/internal/boring/bcache,
+ 	crypto/internal/backend/fips140
 +	< github.com/golang-fips/openssl/v2/internal/subtle
 +	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring;
-@@ -514,6 +516,7 @@ var depsRules = `
+@@ -519,6 +521,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -538,7 +541,7 @@ index 578b4d6f68504c..80a14d54739524 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -812,7 +815,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -817,7 +820,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -547,7 +550,7 @@ index 578b4d6f68504c..80a14d54739524 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -822,7 +825,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -827,7 +830,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index efed82b61f2..800988bdf27 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -7,8 +7,11 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/ecdsa/badlinkname.go               |  17 +
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 317 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 310 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
+ src/crypto/internal/backend/fips140/cng.go    |  30 ++
+ src/crypto/internal/boring/fipstls/stub.s     |   2 +-
+ src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
  src/go.mod                                    |   1 +
@@ -19,10 +22,11 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 15 files changed, 391 insertions(+), 6 deletions(-)
+ 16 files changed, 417 insertions(+), 6 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
+ create mode 100644 src/crypto/internal/backend/fips140/cng.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
 
@@ -84,10 +88,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..543b5ed1b5d15c
+index 00000000000000..7fb68218e56e9f
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,317 @@
+@@ -0,0 +1,310 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -102,7 +106,7 @@ index 00000000000000..543b5ed1b5d15c
 +import (
 +	"crypto"
 +	"crypto/cipher"
-+	"crypto/internal/boring/fipstls"
++	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"hash"
 +	_ "unsafe"
@@ -116,9 +120,7 @@ index 00000000000000..543b5ed1b5d15c
 +type BigInt = cng.BigInt
 +
 +func init() {
-+	// 1: FIPS required: abort the process if the system is not in FIPS mode.
-+	// other values: continue regardless of system-configured FIPS mode.
-+	if v, _, ok := envGoFIPS(); ok && v == "1" {
++	if fips140.Enabled() {
 +		enabled, err := cng.FIPS()
 +		if err != nil {
 +			panic("cngcrypto: unknown FIPS mode: " + err.Error())
@@ -127,11 +129,6 @@ index 00000000000000..543b5ed1b5d15c
 +			panic("cngcrypto: not in FIPS mode")
 +		}
 +	}
-+	if enabled, _ := cng.FIPS(); enabled {
-+		// FIPS mode is enabled,
-+		// so force FIPS mode for crypto/tls and crypto/x509.
-+		fipstls.Force()
-+	}
 +	sig.BoringCrypto()
 +}
 +
@@ -406,10 +403,10 @@ index 00000000000000..543b5ed1b5d15c
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index bc595e91024f11..7766d674f5cfaf 100644
+index 07d965bf8b467c..91223c0ef0f810 100644
 --- a/src/crypto/internal/backend/common.go
 +++ b/src/crypto/internal/backend/common.go
-@@ -68,7 +68,11 @@ func hasSuffix(s, t string) bool {
+@@ -44,7 +44,11 @@ func hasSuffix(s, t string) bool {
  // UnreachableExceptTests marks code that should be unreachable
  // when backend is in use. It panics.
  func UnreachableExceptTests() {
@@ -422,7 +419,7 @@ index bc595e91024f11..7766d674f5cfaf 100644
  		name := runtime_arg0()
  		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
  		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-@@ -90,3 +94,10 @@ func IsRSAKeySupported(primes int) bool {
+@@ -66,3 +70,10 @@ func IsRSAKeySupported(primes int) bool {
  	// Given the above reasons, we only support 2-prime RSA keys.
  	return primes == 2
  }
@@ -433,6 +430,42 @@ index bc595e91024f11..7766d674f5cfaf 100644
 +	}
 +	return true
 +}
+diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
+new file mode 100644
+index 00000000000000..22e4197bbb3ba5
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/cng.go
+@@ -0,0 +1,30 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.cngcrypto
++
++package fips140
++
++import (
++	"internal/syscall/windows/sysdll"
++	"syscall"
++	"unsafe"
++)
++
++// Don't use github.com/microsoft/go-crypto-winnative here.
++// The fips140 package should have minimal dependencies.
++// Also, don't directly query the system FIPS mode from the registry,
++// there are some no-longer documented legacy entries that can enable FIPS mode,
++// and BCryptGetFipsAlgorithmMode supports them all.
++var (
++	bcrypt = syscall.MustLoadDLL(sysdll.Add("bcrypt.dll"))
++
++	bcryptGetFipsAlgorithmMode = bcrypt.MustFindProc("BCryptGetFipsAlgorithmMode")
++)
++
++func systemFIPSMode() bool {
++	var enabled uint32
++	bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
++	return enabled != 0
++}
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
 index 4aac87d7952081..010ee1467501c3 100644
 --- a/src/crypto/rsa/pss.go
@@ -484,13 +517,13 @@ index fd8881e46df76e..1d0d5a1b7845bb 100644
  golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
  golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 80a14d54739524..74e0606b0ac903 100644
+index 6504a23ce5d51f..3b30b0dc249a94 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -476,6 +476,10 @@ var depsRules = `
- 
+@@ -481,6 +481,10 @@ var depsRules = `
  	crypto/cipher,
- 	crypto/internal/boring/bcache
+ 	crypto/internal/boring/bcache,
+ 	crypto/internal/backend/fips140
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
 +	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
@@ -498,7 +531,7 @@ index 80a14d54739524..74e0606b0ac903 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -516,6 +520,7 @@ var depsRules = `
+@@ -521,6 +525,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big

From 59dc3845fa8438defb8650b1ffcf50235ed9f719 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Dec 2024 09:24:01 +0100
Subject: [PATCH 152/887] handle error value

---
 patches/0005-Add-CNG-crypto-backend.patch | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 800988bdf27..1f81f0ce1b1 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  src/crypto/internal/backend/cng_windows.go    | 310 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  13 +-
- src/crypto/internal/backend/fips140/cng.go    |  30 ++
+ src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/internal/boring/fipstls/stub.s     |   2 +-
  src/crypto/internal/boring/fipstls/tls.go     |   2 +-
  src/crypto/rsa/pss.go                         |   2 +-
@@ -22,7 +22,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 16 files changed, 417 insertions(+), 6 deletions(-)
+ 17 files changed, 417 insertions(+), 6 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -88,7 +88,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..7fb68218e56e9f
+index 00000000000000..2d7a18eaec2e23
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,310 @@
@@ -432,10 +432,10 @@ index 07d965bf8b467c..91223c0ef0f810 100644
 +}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
-index 00000000000000..22e4197bbb3ba5
+index 00000000000000..f769d15f94ab05
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/cng.go
-@@ -0,0 +1,30 @@
+@@ -0,0 +1,33 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -463,7 +463,10 @@ index 00000000000000..22e4197bbb3ba5
 +
 +func systemFIPSMode() bool {
 +	var enabled uint32
-+	bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
++	ret, _, _ := bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
++	if ret != 0 {
++		return false
++	}
 +	return enabled != 0
 +}
 diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go

From 2ba8745144ae9a48618fdce3ae435b632ded5b90 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Dec 2024 10:37:37 +0100
Subject: [PATCH 153/887] update submodule to 18b5435fc8

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index b33fc480a25..18b5435fc84 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit b33fc480a25c30d38104a9efaf73326c888e8557
+Subproject commit 18b5435fc84225ca303da7a110c7e8065dc4bbda

From d2ea31c3a5f6923accd57486dabaa1a38ec69d88 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Dec 2024 11:21:16 +0100
Subject: [PATCH 154/887] fix upstream conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 992 +++++++-----------
 patches/0004-Add-OpenSSL-crypto-backend.patch |  60 +-
 patches/0005-Add-CNG-crypto-backend.patch     |  62 +-
 patches/0006-Vendor-crypto-backends.patch     |   4 +-
 ...ternal-go.mod-files-used-for-codegen.patch |  40 +-
 ...521-when-TLS-fipsonly-mode-is-enable.patch |  52 +-
 6 files changed, 488 insertions(+), 722 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 461bc71c991..c8ceedc8b80 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -4,79 +4,73 @@ Date: Thu, 30 Jun 2022 10:03:03 +0200
 Subject: [PATCH] Add crypto backend foundation
 
 ---
- src/cmd/api/boring_test.go                   |   2 +-
- src/cmd/go/go_boring_test.go                 |   2 +-
- src/crypto/aes/cipher.go                     |   2 +-
- src/crypto/aes/cipher_asm.go                 |   2 +-
- src/crypto/boring/boring.go                  |   4 +-
- src/crypto/des/cipher.go                     |   7 +
- src/crypto/dsa/boring.go                     | 113 ++++++++++
- src/crypto/dsa/dsa.go                        |  88 ++++++++
- src/crypto/dsa/notboring.go                  |  16 ++
- src/crypto/ecdh/ecdh.go                      |   2 +-
- src/crypto/ecdh/nist.go                      |   2 +-
- src/crypto/ecdsa/boring.go                   |   6 +-
- src/crypto/ecdsa/ecdsa.go                    |   4 +-
- src/crypto/ecdsa/notboring.go                |   4 +-
- src/crypto/ed25519/boring.go                 |  71 ++++++
- src/crypto/ed25519/ed25519.go                |  75 ++++++-
- src/crypto/ed25519/ed25519_test.go           |   2 +-
- src/crypto/ed25519/notboring.go              |  16 ++
- src/crypto/hmac/hmac.go                      |   2 +-
- src/crypto/hmac/hmac_test.go                 |   2 +-
- src/crypto/internal/backend/backend_test.go  |  30 +++
- src/crypto/internal/backend/bbig/big.go      |  17 ++
- src/crypto/internal/backend/common.go        |  68 ++++++
- .../backend/fips140/fips140.go               |  55 +++++
- .../backend/fips140/isrequirefips.go         |   9 +
- .../backend/fips140/norequirefips.go         |   9 +
- .../backend/fips140/nosystemcrypto.go        |  11 +
- src/crypto/internal/backend/nobackend.go     | 223 +++++++++++++++++++
- src/crypto/internal/backend/stub.s           |  10 +
- src/crypto/internal/boring/fipstls/stub.s    |   2 +-
- src/crypto/internal/boring/fipstls/tls.go    |   7 +-
- src/crypto/md5/md5.go                        |   7 +
- src/crypto/md5/md5_test.go                   |  14 ++
- src/crypto/purego_test.go                    |   2 +-
- src/crypto/rand/rand.go                      |   2 +-
- src/crypto/rand/rand_test.go                 |   2 +-
- src/crypto/rc4/rc4.go                        |  18 ++
- src/crypto/rsa/boring.go                     |   6 +-
- src/crypto/rsa/boring_test.go                |   2 +-
- src/crypto/rsa/notboring.go                  |   4 +-
- src/crypto/rsa/pkcs1v15.go                   |  10 +-
- src/crypto/rsa/pkcs1v15_test.go              |   5 +
- src/crypto/rsa/pss.go                        |   8 +-
- src/crypto/rsa/pss_test.go                   |   3 +
- src/crypto/rsa/rsa.go                        |  21 +-
- src/crypto/rsa/rsa_test.go                   |  12 +-
- src/crypto/sha1/sha1.go                      |   2 +-
- src/crypto/sha1/sha1_test.go                 |  12 +-
- src/crypto/sha256/sha256.go                  |   6 +-
- src/crypto/sha256/sha256_test.go             |  20 +-
- src/crypto/sha512/sha512.go                  |   2 +-
- src/crypto/sha512/sha512_test.go             |  20 +-
- src/crypto/tls/boring.go                     |   2 +-
- src/crypto/tls/boring_test.go                |   7 +-
- src/crypto/tls/cipher_suites.go              |   2 +-
- src/crypto/tls/fipsonly/fipsonly.go          |   2 +-
- src/crypto/tls/fipsonly/fipsonly_test.go     |   2 +-
- src/crypto/tls/handshake_client.go           |  10 +-
- src/crypto/tls/handshake_server.go           |  10 +-
- src/crypto/tls/handshake_server_tls13.go     |  10 +
- src/crypto/tls/key_schedule.go               |  23 +-
- src/crypto/tls/notboring.go                  |   2 +-
- src/crypto/tls/prf.go                        |  40 ++++
- src/crypto/x509/boring.go                    |   2 +-
- src/crypto/x509/boring_test.go               |   7 +-
- src/crypto/x509/notboring.go                 |   2 +-
- src/go/build/deps_test.go                    |  11 +-
- src/hash/boring_test.go                      |   9 +
- src/hash/marshal_test.go                     |   5 +
- src/hash/notboring_test.go                   |   9 +
- src/net/smtp/smtp_test.go                    |  72 +++---
- src/runtime/runtime_boring.go                |   5 +
- 73 files changed, 1180 insertions(+), 95 deletions(-)
+ src/cmd/api/boring_test.go                    |   2 +-
+ src/cmd/go/go_boring_test.go                  |   2 +-
+ src/crypto/aes/aes.go                         |   2 +-
+ src/crypto/boring/boring.go                   |   4 +-
+ src/crypto/cipher/ctr_aes_test.go             |   2 +-
+ src/crypto/cipher/gcm_test.go                 |   2 +-
+ src/crypto/des/cipher.go                      |   7 +
+ src/crypto/dsa/boring.go                      | 113 +++++++++
+ src/crypto/dsa/dsa.go                         |  88 +++++++
+ src/crypto/dsa/notboring.go                   |  16 ++
+ src/crypto/ecdh/ecdh.go                       |   2 +-
+ src/crypto/ecdh/nist.go                       |   2 +-
+ src/crypto/ecdsa/boring.go                    |   6 +-
+ src/crypto/ecdsa/ecdsa.go                     |   4 +-
+ src/crypto/ecdsa/notboring.go                 |   4 +-
+ src/crypto/ed25519/boring.go                  |  71 ++++++
+ src/crypto/ed25519/ed25519.go                 |  73 ++++++
+ src/crypto/ed25519/notboring.go               |  16 ++
+ src/crypto/hkdf/hkdf_test.go                  |   2 +-
+ src/crypto/hmac/hmac.go                       |   2 +-
+ src/crypto/hmac/hmac_test.go                  |   2 +-
+ src/crypto/internal/backend/backend_test.go   |  30 +++
+ src/crypto/internal/backend/bbig/big.go       |  17 ++
+ src/crypto/internal/backend/common.go         |  72 ++++++
+ .../internal/backend/fips140/fips140.go       |  55 +++++
+ .../internal/backend/fips140/isrequirefips.go |   9 +
+ .../internal/backend/fips140/norequirefips.go |   9 +
+ .../backend/fips140/nosystemcrypto.go         |  11 +
+ src/crypto/internal/backend/nobackend.go      | 223 ++++++++++++++++++
+ src/crypto/internal/backend/stub.s            |  10 +
+ src/crypto/internal/cryptotest/allocations.go |   2 +-
+ .../internal/cryptotest/implementations.go    |   2 +-
+ src/crypto/md5/md5.go                         |   7 +
+ src/crypto/md5/md5_test.go                    |  14 ++
+ src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
+ src/crypto/purego_test.go                     |   2 +-
+ src/crypto/rand/rand.go                       |   2 +-
+ src/crypto/rc4/rc4.go                         |  18 ++
+ src/crypto/rsa/boring.go                      |   6 +-
+ src/crypto/rsa/boring_test.go                 |   2 +-
+ src/crypto/rsa/fips.go                        |  10 +-
+ src/crypto/rsa/notboring.go                   |   4 +-
+ src/crypto/rsa/pkcs1v15.go                    |   6 +-
+ src/crypto/rsa/pkcs1v15_test.go               |   5 +
+ src/crypto/rsa/rsa.go                         |   4 +-
+ src/crypto/rsa/rsa_test.go                    |  12 +-
+ src/crypto/sha1/sha1.go                       |   2 +-
+ src/crypto/sha1/sha1_test.go                  |  12 +-
+ src/crypto/sha256/sha256.go                   |   6 +-
+ src/crypto/sha256/sha256_test.go              |  19 ++
+ src/crypto/sha512/sha512.go                   |   2 +-
+ src/crypto/sha512/sha512_test.go              |  19 ++
+ src/crypto/tls/cipher_suites.go               |   2 +-
+ src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
+ src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
+ src/crypto/tls/handshake_client.go            |  10 +-
+ src/crypto/tls/handshake_server.go            |  10 +-
+ src/crypto/tls/handshake_server_tls13.go      |  10 +
+ src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
+ src/crypto/tls/prf.go                         |  41 ++++
+ src/go/build/deps_test.go                     |   8 +-
+ src/hash/boring_test.go                       |   9 +
+ src/hash/marshal_test.go                      |   5 +
+ src/hash/notboring_test.go                    |   9 +
+ src/net/smtp/smtp_test.go                     |  72 ++++--
+ src/runtime/runtime_boring.go                 |   5 +
+ 66 files changed, 1124 insertions(+), 80 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -119,31 +113,18 @@ index ed0fbf3d53d75b..06478963f4be44 100644
  
  package main_test
  
-diff --git a/src/crypto/aes/cipher.go b/src/crypto/aes/cipher.go
-index cde2e45d2ca559..cf47a4fc57d8e2 100644
---- a/src/crypto/aes/cipher.go
-+++ b/src/crypto/aes/cipher.go
-@@ -7,7 +7,7 @@ package aes
- import (
- 	"crypto/cipher"
- 	"crypto/internal/alias"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"strconv"
- )
+diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
+index 5bc2d13d673e0a..b803c77be62a66 100644
+--- a/src/crypto/aes/aes.go
++++ b/src/crypto/aes/aes.go
+@@ -15,7 +15,7 @@ package aes
  
-diff --git a/src/crypto/aes/cipher_asm.go b/src/crypto/aes/cipher_asm.go
-index 3e5f589c2cdd0b..e9d3c0be11ef61 100644
---- a/src/crypto/aes/cipher_asm.go
-+++ b/src/crypto/aes/cipher_asm.go
-@@ -9,7 +9,7 @@ package aes
  import (
  	"crypto/cipher"
- 	"crypto/internal/alias"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"internal/cpu"
- 	"internal/goarch"
+ 	"crypto/internal/fips140/aes"
+ 	"strconv"
  )
 diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
 index 097c37e343fdb8..a5d603896d3890 100644
@@ -167,19 +148,45 @@ index 097c37e343fdb8..a5d603896d3890 100644
  
  // Enabled reports whether BoringCrypto handles supported crypto operations.
  func Enabled() bool {
+diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
+index 33942467784ad3..0282ffa9fa23c8 100644
+--- a/src/crypto/cipher/ctr_aes_test.go
++++ b/src/crypto/cipher/ctr_aes_test.go
+@@ -14,7 +14,7 @@ import (
+ 	"bytes"
+ 	"crypto/aes"
+ 	"crypto/cipher"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	fipsaes "crypto/internal/fips140/aes"
+ 	"encoding/hex"
+diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
+index ea2b4e29e2b67f..f884b0d0fbefe7 100644
+--- a/src/crypto/cipher/gcm_test.go
++++ b/src/crypto/cipher/gcm_test.go
+@@ -8,7 +8,7 @@ import (
+ 	"bytes"
+ 	"crypto/aes"
+ 	"crypto/cipher"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140"
+ 	fipsaes "crypto/internal/fips140/aes"
 diff --git a/src/crypto/des/cipher.go b/src/crypto/des/cipher.go
-index 04b73e7d3bf758..0891652a4566fb 100644
+index 21303b384cf757..0d3c4f810cfd8f 100644
 --- a/src/crypto/des/cipher.go
 +++ b/src/crypto/des/cipher.go
-@@ -7,6 +7,7 @@ package des
+@@ -6,6 +6,7 @@ package des
+ 
  import (
  	"crypto/cipher"
- 	"crypto/internal/alias"
 +	boring "crypto/internal/backend"
- 	"internal/byteorder"
- 	"strconv"
- )
-@@ -30,6 +31,9 @@ func NewCipher(key []byte) (cipher.Block, error) {
+ 	"crypto/internal/fips140/alias"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -36,6 +37,9 @@ func NewCipher(key []byte) (cipher.Block, error) {
  	if len(key) != 8 {
  		return nil, KeySizeError(len(key))
  	}
@@ -189,7 +196,7 @@ index 04b73e7d3bf758..0891652a4566fb 100644
  
  	c := new(desCipher)
  	c.generateSubkeys(key)
-@@ -74,6 +78,9 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
+@@ -84,6 +88,9 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
  	if len(key) != 24 {
  		return nil, KeySizeError(len(key))
  	}
@@ -319,15 +326,16 @@ index 00000000000000..7ea0c8c423e9ee
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 4524bd492feba0..ff890b1d06aea2 100644
+index 000becc82dfb79..6430bb3ea5e437 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
-@@ -18,7 +18,12 @@ import (
+@@ -18,8 +18,13 @@ import (
  	"io"
  	"math/big"
  
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140only"
  	"crypto/internal/randutil"
 +
 +	"golang.org/x/crypto/cryptobyte"
@@ -335,7 +343,7 @@ index 4524bd492feba0..ff890b1d06aea2 100644
  )
  
  // Parameters represents the domain parameters for a key. These parameters can
-@@ -86,6 +91,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
+@@ -91,6 +96,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
  		return errors.New("crypto/dsa: invalid ParameterSizes")
  	}
  
@@ -353,7 +361,7 @@ index 4524bd492feba0..ff890b1d06aea2 100644
  	qBytes := make([]byte, N/8)
  	pBytes := make([]byte, L/8)
  
-@@ -161,6 +177,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
+@@ -170,6 +186,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
  		return errors.New("crypto/dsa: parameters not set up before generating key")
  	}
  
@@ -371,7 +379,7 @@ index 4524bd492feba0..ff890b1d06aea2 100644
  	x := new(big.Int)
  	xBytes := make([]byte, priv.Q.BitLen()/8)
  
-@@ -212,6 +239,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -225,6 +252,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
  		err = ErrInvalidPublicKey
  		return
  	}
@@ -390,10 +398,10 @@ index 4524bd492feba0..ff890b1d06aea2 100644
  	n >>= 3
  
  	var attempts int
-@@ -271,6 +310,14 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
- // to the byte-length of the subgroup. This function does not perform that
- // truncation itself.
- func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+@@ -288,6 +327,14 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+ 		panic("crypto/dsa: use of DSA is not allowed in FIPS 140-only mode")
+ 	}
+ 
 +	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), pub.Q.BitLen()) {
 +		bkey, err := boringPublicKey(pub)
 +		if err != nil {
@@ -405,7 +413,7 @@ index 4524bd492feba0..ff890b1d06aea2 100644
  	// FIPS 186-3, section 4.7
  
  	if pub.P.Sign() == 0 {
-@@ -307,3 +354,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+@@ -324,3 +371,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
  
  	return v.Cmp(r) == 0
  }
@@ -473,7 +481,7 @@ index 00000000000000..cd02ff5a00c3dc
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
-index b7c26f91e57f02..7a12e2bbaaafd1 100644
+index 231f1ea04c1010..cfa113e2345816 100644
 --- a/src/crypto/ecdh/ecdh.go
 +++ b/src/crypto/ecdh/ecdh.go
 @@ -8,7 +8,7 @@ package ecdh
@@ -482,21 +490,21 @@ index b7c26f91e57f02..7a12e2bbaaafd1 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/ecdh"
  	"crypto/subtle"
  	"errors"
- 	"io"
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index b91e8f38a5a78e..2bb8f3486c8249 100644
+index acef8298943c2b..ca6171cf775117 100644
 --- a/src/crypto/ecdh/nist.go
 +++ b/src/crypto/ecdh/nist.go
-@@ -5,7 +5,7 @@
- package ecdh
+@@ -6,7 +6,7 @@ package ecdh
  
  import (
+ 	"bytes"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/nistec"
- 	"crypto/internal/randutil"
+ 	"crypto/internal/fips140/ecdh"
+ 	"crypto/internal/fips140only"
  	"errors"
 diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
 index 275c60b4de49eb..ff8bddf28c4545 100644
@@ -520,21 +528,20 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 2179b01e8e3db5..9eb763cecfe687 100644
+index 77727aaf96befb..dedaa0fe4100b1 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
-@@ -30,9 +30,9 @@ import (
- 	"crypto/cipher"
+@@ -18,8 +18,8 @@ import (
+ 	"crypto"
  	"crypto/ecdh"
  	"crypto/elliptic"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/bigmod"
 -	"crypto/internal/boring"
 -	"crypto/internal/boring/bbig"
- 	"crypto/internal/nistec"
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140/ecdsa"
+ 	"crypto/internal/fips140only"
  	"crypto/internal/randutil"
- 	"crypto/sha512"
 diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
 index 039bd82ed21f9f..69a97d9bf250be 100644
 --- a/src/crypto/ecdsa/notboring.go
@@ -631,18 +638,18 @@ index 00000000000000..3a7d7b76c8d8d7
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index b75c5a6458a218..303ea08c4b747f 100644
+index c1f8ff784e4a5c..308d814ff6302b 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
-@@ -18,6 +18,7 @@ package ed25519
+@@ -17,6 +17,7 @@ package ed25519
+ 
  import (
- 	"bytes"
  	"crypto"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/edwards25519"
+ 	"crypto/internal/fips140/ed25519"
+ 	"crypto/internal/fips140only"
  	cryptorand "crypto/rand"
- 	"crypto/sha512"
-@@ -25,6 +26,7 @@ import (
+@@ -24,6 +25,7 @@ import (
  	"errors"
  	"io"
  	"strconv"
@@ -650,7 +657,7 @@ index b75c5a6458a218..303ea08c4b747f 100644
  )
  
  const (
-@@ -142,6 +144,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -138,6 +140,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  	if rand == nil {
  		rand = cryptorand.Reader
  	}
@@ -673,7 +680,7 @@ index b75c5a6458a218..303ea08c4b747f 100644
  
  	seed := make([]byte, SeedSize)
  	if _, err := io.ReadFull(rand, seed); err != nil {
-@@ -160,6 +178,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -154,6 +172,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -691,7 +698,7 @@ index b75c5a6458a218..303ea08c4b747f 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -187,6 +216,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -172,6 +201,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -709,18 +716,8 @@ index b75c5a6458a218..303ea08c4b747f 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -265,9 +305,42 @@ func sign(signature, privateKey, message []byte, domPrefix, context string) {
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func Verify(publicKey PublicKey, message, sig []byte) bool {
-+	if boring.Enabled && boring.SupportsEd25519() && testMalleability() {
-+		pub, err := boringPublicKey(publicKey)
-+		if err != nil {
-+			return false
-+		}
-+		return boring.VerifyEd25519(pub, message, sig) == nil
-+	}
- 	return verify(publicKey, message, sig, domPrefixPure, "")
+@@ -200,6 +240,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+ 	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
 +// testMalleability returns true if the crypto backend correctly rejects
@@ -752,28 +749,20 @@ index b75c5a6458a218..303ea08c4b747f 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -301,7 +374,7 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -228,6 +294,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
- 		return nil
+ 		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
--		if !verify(publicKey, message, sig, domPrefixPure, "") {
-+		if !Verify(publicKey, message, sig) {
- 			return errors.New("ed25519: invalid signature")
- 		}
- 		return nil
-diff --git a/src/crypto/ed25519/ed25519_test.go b/src/crypto/ed25519/ed25519_test.go
-index 64901328a5e8c5..51cd6d0c8bc682 100644
---- a/src/crypto/ed25519/ed25519_test.go
-+++ b/src/crypto/ed25519/ed25519_test.go
-@@ -9,7 +9,7 @@ import (
- 	"bytes"
- 	"compress/gzip"
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/rand"
- 	"crypto/sha512"
- 	"encoding/hex"
++		if boring.Enabled && boring.SupportsEd25519() && testMalleability() {
++			pub, err := boringPublicKey(publicKey)
++			if err != nil {
++				return err
++			}
++			return boring.VerifyEd25519(pub, message, sig)
++		}
+ 		return ed25519.Verify(k, message, sig)
+ 	default:
+ 		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
 diff --git a/src/crypto/ed25519/notboring.go b/src/crypto/ed25519/notboring.go
 new file mode 100644
 index 00000000000000..b0cdd44d81c753
@@ -796,8 +785,21 @@ index 00000000000000..b0cdd44d81c753
 +func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
+diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
+index 201b440289bb2d..4ed4960ff35b66 100644
+--- a/src/crypto/hkdf/hkdf_test.go
++++ b/src/crypto/hkdf/hkdf_test.go
+@@ -6,7 +6,7 @@ package hkdf
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/md5"
+ 	"crypto/sha1"
 diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index b8c909cf015aa7..9f517e8e527363 100644
+index 72f5a4abea9d35..c88c6cbd128451 100644
 --- a/src/crypto/hmac/hmac.go
 +++ b/src/crypto/hmac/hmac.go
 @@ -22,7 +22,7 @@ timing side-channels:
@@ -806,9 +808,9 @@ index b8c909cf015aa7..9f517e8e527363 100644
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips/hmac"
+ 	"crypto/internal/fips140/hmac"
+ 	"crypto/internal/fips140only"
  	"crypto/subtle"
- 	"hash"
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
 index 7accad763244a1..dd3211f2c37af3 100644
 --- a/src/crypto/hmac/hmac_test.go
@@ -883,10 +885,10 @@ index 00000000000000..20251a290dc2e0
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..07d965bf8b467c
+index 00000000000000..858e76e3c51c06
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,72 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -955,6 +957,10 @@ index 00000000000000..07d965bf8b467c
 +	// Given the above reasons, we only support 2-prime RSA keys.
 +	return primes == 2
 +}
++
++func IsSaltSupported(salt int) bool {
++	return true
++}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
 index 00000000000000..f54d39970319af
@@ -1311,54 +1317,34 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/internal/boring/fipstls/stub.s b/src/crypto/internal/boring/fipstls/stub.s
-index f2e5a503eaacb6..35cf7532625efb 100644
---- a/src/crypto/internal/boring/fipstls/stub.s
-+++ b/src/crypto/internal/boring/fipstls/stub.s
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- // runtime_arg0 is declared in tls.go without a body.
- // It's provided by package runtime,
-diff --git a/src/crypto/internal/boring/fipstls/tls.go b/src/crypto/internal/boring/fipstls/tls.go
-index b51f142fde8311..108b52d9d8fcb7 100644
---- a/src/crypto/internal/boring/fipstls/tls.go
-+++ b/src/crypto/internal/boring/fipstls/tls.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings.
- // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent
-@@ -10,12 +10,19 @@
- package fipstls
+diff --git a/src/crypto/internal/cryptotest/allocations.go b/src/crypto/internal/cryptotest/allocations.go
+index 70055af70b42ec..3c4b4fbaa98ded 100644
+--- a/src/crypto/internal/cryptotest/allocations.go
++++ b/src/crypto/internal/cryptotest/allocations.go
+@@ -5,7 +5,7 @@
+ package cryptotest
  
  import (
-+	"crypto/internal/backend/fips140"
- 	"internal/stringslite"
- 	"sync/atomic"
- )
- 
- var required atomic.Bool
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"internal/asan"
+ 	"internal/msan"
+ 	"internal/race"
+diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
+index 3fa730459050f6..1f28f12a6e7b4f 100644
+--- a/src/crypto/internal/cryptotest/implementations.go
++++ b/src/crypto/internal/cryptotest/implementations.go
+@@ -5,7 +5,7 @@
+ package cryptotest
  
-+func init() {
-+	if fips140.Enabled() {
-+		Force()
-+	}
-+}
-+
- // Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings.
- // By design, this call is impossible to undo (except in tests).
- //
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/impl"
+ 	"internal/goos"
+ 	"internal/testenv"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index c984c3f4968598..229dd457f8d53c 100644
+index 75e1fc7404724a..60428f8e1201de 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1366,23 +1352,23 @@ index c984c3f4968598..229dd457f8d53c 100644
  import (
  	"crypto"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140only"
  	"errors"
  	"hash"
- 	"internal/byteorder"
-@@ -103,6 +104,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
- // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
- // state of the hash.
- func New() hash.Hash {
+@@ -107,6 +108,9 @@ func New() hash.Hash {
+ 	if fips140only.Enabled {
+ 		panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
+ 	}
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
 +		return boring.NewMD5()
 +	}
  	d := new(digest)
  	d.Reset()
  	return d
-@@ -180,6 +184,9 @@ func (d *digest) checkSum() [Size]byte {
- 
- // Sum returns the MD5 checksum of the data.
- func Sum(data []byte) [Size]byte {
+@@ -187,6 +191,9 @@ func Sum(data []byte) [Size]byte {
+ 	if fips140only.Enabled {
+ 		panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
+ 	}
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
 +		return boring.MD5(data)
 +	}
@@ -1390,7 +1376,7 @@ index c984c3f4968598..229dd457f8d53c 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 6a8258a67e860c..61ea6b5153f617 100644
+index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,6 +6,7 @@ package md5
@@ -1435,6 +1421,19 @@ index 6a8258a67e860c..61ea6b5153f617 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
+index 03980c7e54d3be..4968a666fad4e5 100644
+--- a/src/crypto/pbkdf2/pbkdf2_test.go
++++ b/src/crypto/pbkdf2/pbkdf2_test.go
+@@ -6,7 +6,7 @@ package pbkdf2_test
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/pbkdf2"
+ 	"crypto/sha1"
 diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
 index 62be347e0c6822..d284b5cf7814a6 100644
 --- a/src/crypto/purego_test.go
@@ -1449,7 +1448,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index b3d0a7368f7fa0..c34b994a67a289 100644
+index 1ca16caa9563e6..3ef22b5ff8222b 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -1458,35 +1457,22 @@ index b3d0a7368f7fa0..c34b994a67a289 100644
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"io"
- 	"os"
- 	"sync"
-diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
-index 63581b75fdbc7f..dd220c7c544f76 100644
---- a/src/crypto/rand/rand_test.go
-+++ b/src/crypto/rand/rand_test.go
-@@ -7,7 +7,7 @@ package rand
- import (
- 	"bytes"
- 	"compress/flate"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"errors"
- 	"internal/race"
- 	"internal/testenv"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140/drbg"
+ 	"crypto/internal/sysrand"
 diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
-index 67452ec39f0fd4..47726d0ebe38d9 100644
+index 90943a0935befb..09ebdfd733e5d6 100644
 --- a/src/crypto/rc4/rc4.go
 +++ b/src/crypto/rc4/rc4.go
-@@ -11,6 +11,7 @@ package rc4
+@@ -10,6 +10,7 @@
+ package rc4
  
  import (
- 	"crypto/internal/alias"
 +	boring "crypto/internal/backend"
- 	"strconv"
- )
- 
-@@ -18,6 +19,8 @@ import (
+ 	"crypto/internal/fips140/alias"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -20,6 +21,8 @@ import (
  type Cipher struct {
  	s    [256]uint32
  	i, j uint8
@@ -1495,7 +1481,7 @@ index 67452ec39f0fd4..47726d0ebe38d9 100644
  }
  
  type KeySizeError int
-@@ -33,6 +36,13 @@ func NewCipher(key []byte) (*Cipher, error) {
+@@ -38,6 +41,13 @@ func NewCipher(key []byte) (*Cipher, error) {
  	if k < 1 || k > 256 {
  		return nil, KeySizeError(k)
  	}
@@ -1509,7 +1495,7 @@ index 67452ec39f0fd4..47726d0ebe38d9 100644
  	var c Cipher
  	for i := 0; i < 256; i++ {
  		c.s[i] = uint32(i)
-@@ -50,6 +60,10 @@ func NewCipher(key []byte) (*Cipher, error) {
+@@ -55,6 +65,10 @@ func NewCipher(key []byte) (*Cipher, error) {
  // Deprecated: Reset can't guarantee that the key will be entirely removed from
  // the process's memory.
  func (c *Cipher) Reset() {
@@ -1520,7 +1506,7 @@ index 67452ec39f0fd4..47726d0ebe38d9 100644
  	for i := range c.s {
  		c.s[i] = 0
  	}
-@@ -59,6 +73,10 @@ func (c *Cipher) Reset() {
+@@ -64,6 +78,10 @@ func (c *Cipher) Reset() {
  // XORKeyStream sets dst to the result of XORing src with the key stream.
  // Dst and src must overlap entirely or not at all.
  func (c *Cipher) XORKeyStream(dst, src []byte) {
@@ -1553,7 +1539,7 @@ index b9f9d3154f2589..d52faddef45549 100644
  	"math/big"
  )
 diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
-index 2234d079f0d9e7..94ce18b2338416 100644
+index 838fcc1244bdbe..d89f732345e8a3 100644
 --- a/src/crypto/rsa/boring_test.go
 +++ b/src/crypto/rsa/boring_test.go
 @@ -2,7 +2,7 @@
@@ -1565,6 +1551,55 @@ index 2234d079f0d9e7..94ce18b2338416 100644
  
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
+diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
+index 24dfb38cf625bd..ccb027810a7e07 100644
+--- a/src/crypto/rsa/fips.go
++++ b/src/crypto/rsa/fips.go
+@@ -6,7 +6,7 @@ package rsa
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -78,7 +78,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ 		hash = opts.Hash
+ 	}
+ 
+-	if boring.Enabled && rand == boring.RandReader {
++	if boring.Enabled && rand == boring.RandReader && boring.IsRSAKeySupported(len(priv.Primes)) && boring.SupportsHash(hash) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -136,7 +136,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+ 		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsSaltSupported(opts.saltLength()) && boring.SupportsHash(hash) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return err
+@@ -249,7 +249,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+ 		}
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
+ 		k := priv.Size()
+ 		if len(ciphertext) > k ||
+ 			k < hash.Size()*2+2 {
+@@ -305,7 +305,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+ 		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
 diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
 index 2abc0436405f8a..3e4d6f3eef61e6 100644
 --- a/src/crypto/rsa/notboring.go
@@ -1584,19 +1619,19 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 2f958022f98584..790d9cef5d3563 100644
+index f1e4ef48a4fd1c..cb5aa30920bb7d 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
-@@ -7,7 +7,7 @@ package rsa
+@@ -5,7 +5,7 @@
+ package rsa
+ 
  import (
- 	"bytes"
- 	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140only"
  	"crypto/internal/randutil"
- 	"crypto/subtle"
- 	"errors"
-@@ -95,7 +95,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+@@ -104,7 +104,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
@@ -1605,8 +1640,8 @@ index 2f958022f98584..790d9cef5d3563 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -189,7 +189,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
- 		return
+@@ -203,7 +203,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+ 		return 0, nil, 0, err
  	}
  
 -	if boring.Enabled {
@@ -1614,26 +1649,8 @@ index 2f958022f98584..790d9cef5d3563 100644
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
  		if err != nil {
-@@ -293,7 +293,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) && (hash == 0 || boring.SupportsHash(hash)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -343,7 +343,7 @@ func pkcs1v15ConstructEM(pub *PublicKey, hash crypto.Hash, hashed []byte) ([]byt
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error {
--	if boring.Enabled {
-+	if boring.Enabled && (hash == 0 || boring.SupportsHash(hash)) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
 diff --git a/src/crypto/rsa/pkcs1v15_test.go b/src/crypto/rsa/pkcs1v15_test.go
-index dfa1eddc886ff3..849dafacf93d0f 100644
+index c65552cd93526a..910416abe842f5 100644
 --- a/src/crypto/rsa/pkcs1v15_test.go
 +++ b/src/crypto/rsa/pkcs1v15_test.go
 @@ -7,6 +7,7 @@ package rsa_test
@@ -1644,7 +1661,7 @@ index dfa1eddc886ff3..849dafacf93d0f 100644
  	"crypto/rand"
  	. "crypto/rsa"
  	"crypto/sha1"
-@@ -229,6 +230,10 @@ func TestVerifyPKCS1v15(t *testing.T) {
+@@ -235,6 +236,10 @@ func TestVerifyPKCS1v15(t *testing.T) {
  }
  
  func TestOverlongMessagePKCS1v15(t *testing.T) {
@@ -1652,124 +1669,26 @@ index dfa1eddc886ff3..849dafacf93d0f 100644
 +		// See for example https://github.com/golang-fips/openssl/pull/142.
 +		t.Skip("Some backends do not return an error for overlong messages.")
 +	}
+ 	t.Setenv("GODEBUG", "rsa1024min=0")
  	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
- 	_, err := DecryptPKCS1v15(nil, rsaPrivateKey, ciphertext)
- 	if err == nil {
-diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 5716c464ca0a33..4aac87d7952081 100644
---- a/src/crypto/rsa/pss.go
-+++ b/src/crypto/rsa/pss.go
-@@ -9,7 +9,7 @@ package rsa
- import (
- 	"bytes"
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"errors"
- 	"hash"
- 	"io"
-@@ -214,7 +214,7 @@ func signPSSWithSalt(priv *PrivateKey, hash crypto.Hash, hashed, salt []byte) ([
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -300,7 +300,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 		hash = opts.Hash
- 	}
- 
--	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.IsRSAKeySupported(len(priv.Primes)) && boring.SupportsHash(hash) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -342,7 +342,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error {
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsHash(hash) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
-diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index 637d07e18cff2e..2c82f50adf38b8 100644
---- a/src/crypto/rsa/pss_test.go
-+++ b/src/crypto/rsa/pss_test.go
-@@ -296,6 +296,9 @@ func TestInvalidPSSSaltLength(t *testing.T) {
- 		SaltLength: -2,
- 		Hash:       crypto.SHA256,
- 	}); err.Error() != InvalidSaltLenErr.Error() {
-+		// The OpenSSL and CNG backend returns the error required in Go tip.
-+		// This change will conflict with the upstream sync PR, where we will be able to remove this.
-+		t.Skip("TODO: unskip when upstream sync PR is merged")
- 		t.Fatalf("SignPSS unexpected error: got %v, want %v", err, InvalidSaltLenErr)
- 	}
- 
+ 	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 4d78d1eaaa6be0..a016c4f8362cf5 100644
+index fb23f003a6f217..be374dad6969d5 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
-@@ -26,14 +26,15 @@ package rsa
+@@ -42,8 +42,8 @@ package rsa
  
  import (
  	"crypto"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/bigmod"
 -	"crypto/internal/boring"
 -	"crypto/internal/boring/bbig"
- 	"crypto/internal/randutil"
- 	"crypto/rand"
- 	"crypto/subtle"
- 	"errors"
- 	"hash"
-+	"internal/goexperiment"
- 	"io"
- 	"math"
- 	"math/big"
-@@ -479,7 +480,13 @@ func mgf1XOR(out []byte, hash hash.Hash, seed []byte) {
- var ErrMessageTooLong = errors.New("crypto/rsa: message too long for RSA key size")
- 
- func encrypt(pub *PublicKey, plaintext []byte) ([]byte, error) {
--	boring.Unreachable()
-+	if goexperiment.BoringCrypto {
-+		// encrypt is reached when the hash function or the salt length
-+		// are not supported by the crypto backend. BoringCrypto does
-+		// support everything, so use it to check that we don't
-+		// accidentally reach this code path.
-+		boring.Unreachable()
-+	}
- 
- 	N, err := bigmod.NewModulusFromBig(pub.N)
- 	if err != nil {
-@@ -638,7 +645,11 @@ const noCheck = false
- // m^e is calculated and compared with ciphertext, in order to defend against
- // errors in the CRT computation.
- func decrypt(priv *PrivateKey, ciphertext []byte, check bool) ([]byte, error) {
--	if len(priv.Primes) <= 2 {
-+	if goexperiment.BoringCrypto {
-+		// decrypt is reached when the hash function or the number of primers
-+		// are not supported by the crypto backend. BoringCrypto does
-+		// support everything, so use it to check that we don't
-+		// accidentally reach this code path.
- 		boring.Unreachable()
- 	}
- 
-@@ -718,7 +729,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, random io.Reader, priv *PrivateKey, ci
- 		return nil, ErrDecryption
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && hash == mgfHash && boring.IsRSAKeySupported(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140/bigmod"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 2afa045a3a0bd2..c6294694521c69 100644
+index 2474ab82dfa207..78e9b47f051484 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1778,10 +1697,10 @@ index 2afa045a3a0bd2..c6294694521c69 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
  	"crypto/rand"
  	. "crypto/rsa"
- 	"crypto/sha1"
-@@ -113,6 +113,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -129,6 +129,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -1793,7 +1712,7 @@ index 2afa045a3a0bd2..c6294694521c69 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -187,6 +192,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+@@ -209,6 +214,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
  	if err := priv.Validate(); err != nil {
  		t.Errorf("Validate() failed: %s", err)
  	}
@@ -1806,7 +1725,7 @@ index 2afa045a3a0bd2..c6294694521c69 100644
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index 8189d1946d8ea5..8f5f7f27f26fea 100644
+index b799f0d2fb1548..9aa23e9aa17e89 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -1815,11 +1734,11 @@ index 8189d1946d8ea5..8f5f7f27f26fea 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140only"
  	"errors"
  	"hash"
- 	"internal/byteorder"
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index d03892c57d4e61..f848659c6e4aa3 100644
+index 9d707b7cde5c2d..cb0c343afc46b6 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,7 +8,7 @@ package sha1
@@ -1856,7 +1775,7 @@ index d03892c57d4e61..f848659c6e4aa3 100644
  
  		h := New()
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index d87c689c9001ad..7584c380af0cec 100644
+index 069938a22dbc5a..8d0e06b86f4359 100644
 --- a/src/crypto/sha256/sha256.go
 +++ b/src/crypto/sha256/sha256.go
 @@ -8,7 +8,7 @@ package sha256
@@ -1865,7 +1784,7 @@ index d87c689c9001ad..7584c380af0cec 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips/sha256"
+ 	"crypto/internal/fips140/sha256"
  	"hash"
  )
 @@ -43,7 +43,7 @@ func New() hash.Hash {
@@ -1887,19 +1806,18 @@ index d87c689c9001ad..7584c380af0cec 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index ffd16386515830..58632c01dc6a7f 100644
+index e1af9640e25547..41df7dbebf7e7a 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -8,7 +8,7 @@ package sha256
+@@ -8,6 +8,7 @@ package sha256
  
  import (
  	"bytes"
--	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"encoding"
  	"fmt"
-@@ -157,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
+@@ -155,6 +156,11 @@ func testGoldenMarshal(t *testing.T) {
  
  	for _, tt := range tests {
  		t.Run(tt.name, func(t *testing.T) {
@@ -1911,7 +1829,7 @@ index ffd16386515830..58632c01dc6a7f 100644
  			for _, g := range tt.gold {
  				h := tt.newHash()
  				h2 := tt.newHash()
-@@ -206,6 +211,14 @@ func TestMarshalTypeMismatch(t *testing.T) {
+@@ -204,6 +210,14 @@ func TestMarshalTypeMismatch(t *testing.T) {
  	h1 := New()
  	h2 := New224()
  
@@ -1926,7 +1844,7 @@ index ffd16386515830..58632c01dc6a7f 100644
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
  		t.Errorf("could not marshal: %v", err)
-@@ -277,6 +290,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -275,6 +289,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -1939,7 +1857,7 @@ index ffd16386515830..58632c01dc6a7f 100644
  
  		h := New()
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
-index 0a12fde7bc060b..ca752598e4343a 100644
+index 1435eac1f5b5dc..17e8501154762a 100644
 --- a/src/crypto/sha512/sha512.go
 +++ b/src/crypto/sha512/sha512.go
 @@ -12,7 +12,7 @@ package sha512
@@ -1948,23 +1866,22 @@ index 0a12fde7bc060b..ca752598e4343a 100644
  	"crypto"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips/sha512"
+ 	"crypto/internal/fips140/sha512"
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index fdad37b1863ae8..cf6e4c395cd4fb 100644
+index 1fe9d132bb186d..a2c2926359a192 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
-@@ -8,7 +8,7 @@ package sha512
+@@ -8,6 +8,7 @@ package sha512
  
  import (
  	"bytes"
--	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"encoding"
  	"encoding/hex"
-@@ -746,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
+@@ -744,6 +745,11 @@ func testGoldenMarshal(t *testing.T) {
  	for _, tt := range tests {
  		t.Run(tt.name, func(t *testing.T) {
  			for _, test := range tt.golden {
@@ -1976,7 +1893,7 @@ index fdad37b1863ae8..cf6e4c395cd4fb 100644
  				h := tt.newHash()
  				h2 := tt.newHash()
  
-@@ -807,6 +812,14 @@ func TestMarshalMismatch(t *testing.T) {
+@@ -805,6 +811,14 @@ func TestMarshalMismatch(t *testing.T) {
  			h1 := fn1()
  			h2 := fn2()
  
@@ -1991,7 +1908,7 @@ index fdad37b1863ae8..cf6e4c395cd4fb 100644
  			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  			if err != nil {
  				t.Errorf("i=%d: could not marshal: %v", i, err)
-@@ -882,6 +895,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -880,6 +894,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -2003,46 +1920,8 @@ index fdad37b1863ae8..cf6e4c395cd4fb 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
-diff --git a/src/crypto/tls/boring.go b/src/crypto/tls/boring.go
-index c44ae92f2528f3..ddfec0c438265e 100644
---- a/src/crypto/tls/boring.go
-+++ b/src/crypto/tls/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 56050421985927..863ad8d1faf810 100644
---- a/src/crypto/tls/boring_test.go
-+++ b/src/crypto/tls/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package tls
- 
-@@ -25,6 +25,11 @@ import (
- 	"time"
- )
- 
-+func init() {
-+	// crypto/tls expects fipstls.Required() to be false.
-+	fipstls.Abandon()
-+}
-+
- func allCipherSuitesIncludingTLS13() []uint16 {
- 	s := allCipherSuites()
- 	for _, suite := range cipherSuitesTLS13 {
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 917a1eff42d34f..f6f57130b64f41 100644
+index 01d65688284f97..d8a26c24024348 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -2051,11 +1930,11 @@ index 917a1eff42d34f..f6f57130b64f41 100644
  	"crypto/hmac"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
+ 	fipsaes "crypto/internal/fips140/aes"
+ 	"crypto/internal/fips140/aes/gcm"
  	"crypto/rc4"
- 	"crypto/sha1"
- 	"crypto/sha256"
 diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
-index e5e47835e2f48d..7dccbc7c3d748a 100644
+index e702f44e986746..e506a0d8841237 100644
 --- a/src/crypto/tls/fipsonly/fipsonly.go
 +++ b/src/crypto/tls/fipsonly/fipsonly.go
 @@ -2,7 +2,7 @@
@@ -2068,7 +1947,7 @@ index e5e47835e2f48d..7dccbc7c3d748a 100644
  // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
  //
 diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
-index f8485dc3ca1c29..d4915031340480 100644
+index 027bc22c33c921..eba08da985f832 100644
 --- a/src/crypto/tls/fipsonly/fipsonly_test.go
 +++ b/src/crypto/tls/fipsonly/fipsonly_test.go
 @@ -2,7 +2,7 @@
@@ -2081,10 +1960,10 @@ index f8485dc3ca1c29..d4915031340480 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 760e827f467f15..393c59ba8f1183 100644
+index ecc62ff2edefc0..776fec96f0f349 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -541,7 +541,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -548,7 +548,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2102,10 +1981,10 @@ index 760e827f467f15..393c59ba8f1183 100644
  
  	isResume, err := hs.processServerHello()
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index bc4e51ba364cf1..0933837161573e 100644
+index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
-@@ -62,7 +62,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+@@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
  	return hs.handshake()
  }
  
@@ -2123,7 +2002,7 @@ index bc4e51ba364cf1..0933837161573e 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index b8cf4c3fa50b24..bc5d32a29c50c4 100644
+index 3552d89ba3bc6f..958ec81dc64966 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -9,6 +9,7 @@ import (
@@ -2131,10 +2010,10 @@ index b8cf4c3fa50b24..bc5d32a29c50c4 100644
  	"crypto"
  	"crypto/hmac"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/mlkem768"
- 	"crypto/rsa"
- 	"errors"
-@@ -441,6 +442,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+ 	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140/mlkem"
+ 	"crypto/internal/fips140/tls13"
+@@ -477,6 +478,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  	}
  	marshaler, ok := in.(binaryMarshaler)
  	if !ok {
@@ -2150,62 +2029,29 @@ index b8cf4c3fa50b24..bc5d32a29c50c4 100644
  		return nil
  	}
  	state, err := marshaler.MarshalBinary()
-diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 1636baf79e7288..747c3c0883230c 100644
---- a/src/crypto/tls/key_schedule.go
-+++ b/src/crypto/tls/key_schedule.go
-@@ -60,10 +60,18 @@ func (c *cipherSuiteTLS13) expandLabel(secret []byte, label string, context []by
- 		// significantly more confusing to users.
- 		panic(fmt.Errorf("failed to construct HKDF label: %s", err))
- 	}
--	out := make([]byte, length)
--	n, err := hkdf.Expand(c.hash.New, secret, hkdfLabelBytes).Read(out)
--	if err != nil || n != length {
--		panic("tls: HKDF-Expand-Label invocation failed unexpectedly")
-+	var out []byte
-+	if boring.Enabled && boring.SupportsHKDF() {
-+		out, err = boring.ExpandHKDF(c.hash.New, secret, hkdfLabelBytes, length)
-+		if err != nil {
-+			panic(fmt.Errorf("tls: HKDF-Expand-Label invocation failed unexpectedly: %s", err))
-+		}
-+	} else {
-+		out = make([]byte, length)
-+		n, err := hkdf.Expand(c.hash.New, secret, hkdfLabelBytes).Read(out)
-+		if err != nil || n != length {
-+			panic("tls: HKDF-Expand-Label invocation failed unexpectedly")
-+		}
- 	}
- 	return out
- }
-@@ -81,6 +89,13 @@ func (c *cipherSuiteTLS13) extract(newSecret, currentSecret []byte) []byte {
- 	if newSecret == nil {
- 		newSecret = make([]byte, c.hash.Size())
- 	}
-+	if boring.Enabled && boring.SupportsHKDF() {
-+		prk, err := boring.ExtractHKDF(c.hash.New, newSecret, currentSecret)
-+		if err != nil {
-+			panic(fmt.Errorf("tls: HKDF-Extract invocation failed unexpectedly: %s", err))
-+		}
-+		return prk
-+	}
- 	return hkdf.Extract(c.hash.New, newSecret, currentSecret)
- }
+diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
+index 24d78d60cf5b64..a6bfd3f17c1911 100644
+--- a/src/crypto/tls/internal/fips140tls/fipstls.go
++++ b/src/crypto/tls/internal/fips140tls/fipstls.go
+@@ -6,6 +6,7 @@
+ package fips140tls
  
-diff --git a/src/crypto/tls/notboring.go b/src/crypto/tls/notboring.go
-index bdbc32e05b35dd..3bfe4096471910 100644
---- a/src/crypto/tls/notboring.go
-+++ b/src/crypto/tls/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !goexperiment.systemcrypto
- 
- package tls
+ import (
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/fips140"
+ 	"sync/atomic"
+ )
+@@ -13,7 +14,7 @@ import (
+ var required atomic.Bool
  
+ func init() {
+-	if fips140.Enabled {
++	if fips140.Enabled || bfips140.Enabled() {
+ 		Force()
+ 	}
+ }
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index a7fa3370e66c82..d34cd41f0891db 100644
+index e7369542a73270..ff52175e4ac636 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -2213,10 +2059,10 @@ index a7fa3370e66c82..d34cd41f0891db 100644
  	"crypto"
  	"crypto/hmac"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/tls12"
  	"crypto/md5"
  	"crypto/sha1"
- 	"crypto/sha256"
-@@ -44,8 +45,41 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+@@ -47,9 +48,42 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
  	}
  }
  
@@ -2248,107 +2094,57 @@ index a7fa3370e66c82..d34cd41f0891db 100644
 +}
 +
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
- func prf10(result, secret, label, seed []byte) {
+ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+ 	result := make([]byte, keyLen)
 +	if boring.Enabled && boring.SupportsTLS1PRF() {
-+		if err := boring.TLS1PRF(result, secret, label, seed, nil); err != nil {
++		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
 +			panicBoringPRFError(fmt.Errorf("crypto/tls: prf10: %v", err))
 +		}
-+		return
++		return result
 +	}
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -66,6 +100,12 @@ func prf10(result, secret, label, seed []byte) {
+@@ -72,6 +106,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
- func prf12(hashFunc func() hash.Hash) func(result, secret, label, seed []byte) {
- 	return func(result, secret, label, seed []byte) {
+ func prf12(hashFunc func() hash.Hash) prfFunc {
+ 	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
 +		if boring.Enabled && boring.SupportsTLS1PRF() {
-+			if err := boring.TLS1PRF(result, secret, label, seed, hashFunc); err != nil {
++			result := make([]byte, keyLen)
++			if err := boring.TLS1PRF(result, secret, []byte(label), seed, hashFunc); err != nil {
 +				panicBoringPRFError(fmt.Errorf("crypto/tls: prf12: %v", err))
 +			}
-+			return
++			return result
 +		}
- 		labelAndSeed := make([]byte, len(label)+len(seed))
- 		copy(labelAndSeed, label)
- 		copy(labelAndSeed[len(label):], seed)
-diff --git a/src/crypto/x509/boring.go b/src/crypto/x509/boring.go
-index 095b58c31590d4..6b32417ea85657 100644
---- a/src/crypto/x509/boring.go
-+++ b/src/crypto/x509/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package x509
- 
-diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go
-index 319ac61f49c994..b5f52252fb3e37 100644
---- a/src/crypto/x509/boring_test.go
-+++ b/src/crypto/x509/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package x509
- 
-@@ -26,6 +26,11 @@ const (
- 	boringCertFIPSOK = 0x80
- )
- 
-+func init() {
-+	// crypto/tls expects fipstls.Required() to be false.
-+	fipstls.Abandon()
-+}
-+
- func boringRSAKey(t *testing.T, size int) *rsa.PrivateKey {
- 	t.Helper()
- 	k, err := rsa.GenerateKey(rand.Reader, size)
-diff --git a/src/crypto/x509/notboring.go b/src/crypto/x509/notboring.go
-index c83a7272c9f01f..7f6e574dc0c2dc 100644
---- a/src/crypto/x509/notboring.go
-+++ b/src/crypto/x509/notboring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !goexperiment.systemcrypto
- 
- package x509
- 
+ 		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
+ 	}
+ }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index c6a2518f62ff3a..6c7229b41c825e 100644
+index cc7f4df7f388ea..58082b3636f209 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -457,14 +457,20 @@ var depsRules = `
- 	< crypto/internal/fips/hmac
+@@ -491,9 +491,11 @@ var depsRules = `
+ 	< crypto/internal/fips140/rsa
  	< FIPS;
  
 +	syscall < crypto/internal/backend/fips140;
 +
- 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
--	sync/atomic < crypto/internal/boring/bcache, crypto/internal/boring/fipstls;
-+	sync/atomic,
-+	crypto/internal/backend/fips140
-+	< crypto/internal/boring/bcache, crypto/internal/boring/fipstls;
- 	crypto/internal/boring/sig, crypto/internal/boring/fipstls < crypto/tls/fipsonly;
+ 	FIPS < crypto/internal/fips140/check/checktest;
+ 
+-	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
++	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
+ 
+ 	FIPS, internal/godebug, hash < crypto/fips140, crypto/internal/fips140only;
  
- 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
- 	FIPS,
+@@ -505,6 +507,7 @@ var depsRules = `
+ 	FIPS, crypto/internal/fips140only,
  	crypto/internal/boring/sig,
-+	crypto/internal/boring/fipstls,
  	crypto/internal/boring/syso,
 +	encoding/binary,
  	golang.org/x/sys/cpu,
  	hash, embed
  	< crypto
-@@ -474,7 +480,9 @@ var depsRules = `
+@@ -514,7 +517,9 @@ var depsRules = `
  
  	crypto/cipher,
  	crypto/internal/boring/bcache
@@ -2357,15 +2153,15 @@ index c6a2518f62ff3a..6c7229b41c825e 100644
 +	< crypto/internal/backend
  	< crypto/boring;
  
- 	crypto/internal/alias, math/rand/v2
-@@ -512,6 +520,7 @@ var depsRules = `
+ 	crypto/boring
+@@ -546,6 +551,7 @@ var depsRules = `
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
  	< crypto/rand
- 	< crypto/internal/mlkem768
  	< crypto/ed25519
+ 	< encoding/asn1
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
 index 00000000000000..52748c44698076
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 20b7b606716..318411a5b78 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -10,7 +10,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../internal/backend/bbig/big_openssl.go      |  12 +
  .../internal/backend/fips140/openssl.go       |  41 +++
  src/crypto/internal/backend/openssl_linux.go  | 323 ++++++++++++++++++
- src/crypto/tls/key_schedule.go                |   1 +
+ src/crypto/rsa/rsa_test.go                    |   3 +
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   9 +-
@@ -19,7 +19,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 16 files changed, 429 insertions(+), 5 deletions(-)
+ 15 files changed, 428 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -27,10 +27,10 @@ Subject: [PATCH] Add OpenSSL crypto backend
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
 
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0facfb579cb196..223472e20d24a5 100644
+index 5a981f8bc147de..b38d84db20172a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -1225,12 +1225,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1322,12 +1322,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -42,7 +42,7 @@ index 0facfb579cb196..223472e20d24a5 100644
  			}
 -
  			// Static linking tests
- 			if goos != "android" && p != "netbsd/arm" {
+ 			if goos != "android" && p != "netbsd/arm" && !t.msan && !t.asan {
  				// TODO(#56629): Why does this fail on netbsd-arm?
 diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
 index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
@@ -64,10 +64,10 @@ index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 0c37a1dc1f8c15..faf8a1874d5f28 100644
+index 2d8f964f3594c6..a587e1abde57c9 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1163,6 +1163,7 @@ var hostobj []Hostobj
+@@ -1172,6 +1172,7 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -142,7 +142,7 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..bccf529a4bcfac
+index 00000000000000..06329e4faef026
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,323 @@
@@ -470,10 +470,10 @@ index 00000000000000..bccf529a4bcfac
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index c6294694521c69..ab99b176ac9540 100644
+index 78e9b47f051484..4fdfcdc4c91004 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
-@@ -700,6 +700,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -846,6 +846,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
@@ -483,20 +483,8 @@ index c6294694521c69..ab99b176ac9540 100644
  	random := rand.Reader
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
-diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 747c3c0883230c..ee9274bb63b9b4 100644
---- a/src/crypto/tls/key_schedule.go
-+++ b/src/crypto/tls/key_schedule.go
-@@ -7,6 +7,7 @@ package tls
- import (
- 	"crypto/ecdh"
- 	"crypto/hmac"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/mlkem768"
- 	"errors"
- 	"fmt"
 diff --git a/src/go.mod b/src/go.mod
-index df27f25e789f05..30e45951c763fa 100644
+index 7a1318dcac32ba..186ced4a1123a8 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
@@ -504,25 +492,25 @@ index df27f25e789f05..30e45951c763fa 100644
  
  require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
- 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
- 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
+ 	golang.org/x/crypto v0.30.0
+ 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
 diff --git a/src/go.sum b/src/go.sum
-index b4efd6d3c50c11..fd8881e46df76e 100644
+index 9e661352f16e0b..0a58eccb57a869 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
- golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
+ golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
+ golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+ golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6c7229b41c825e..6504a23ce5d51f 100644
+index afbdd6770f3f79..2694c2ec84d091 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -479,8 +479,10 @@ var depsRules = `
- 	< crypto/cipher;
+@@ -516,8 +516,10 @@ var depsRules = `
+ 	< crypto/sha3;
  
  	crypto/cipher,
 -	crypto/internal/boring/bcache
@@ -533,7 +521,7 @@ index 6c7229b41c825e..6504a23ce5d51f 100644
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring;
-@@ -519,6 +521,7 @@ var depsRules = `
+@@ -550,6 +552,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -541,7 +529,7 @@ index 6c7229b41c825e..6504a23ce5d51f 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -817,7 +820,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -845,7 +848,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -550,7 +538,7 @@ index 6c7229b41c825e..6504a23ce5d51f 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -827,7 +830,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -855,7 +858,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -602,7 +590,7 @@ index 00000000000000..a7f2712e9e1464
 +const OpenSSLCrypto = true
 +const OpenSSLCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index d7cf7655f3cea3..9c8b16735cd4f1 100644
+index e126e388e84025..233a12ee542328 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,7 @@ type Flags struct {
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 1f81f0ce1b1..c9d98f1f721 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -8,11 +8,8 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  src/crypto/internal/backend/cng_windows.go    | 310 ++++++++++++++++++
- src/crypto/internal/backend/common.go         |  13 +-
+ src/crypto/internal/backend/common.go         |   9 +-
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
- src/crypto/internal/boring/fipstls/stub.s     |   2 +-
- src/crypto/internal/boring/fipstls/tls.go     |   2 +-
- src/crypto/rsa/pss.go                         |   2 +-
  src/crypto/rsa/pss_test.go                    |   2 +-
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
@@ -22,7 +19,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 17 files changed, 417 insertions(+), 6 deletions(-)
+ 15 files changed, 412 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -403,7 +400,7 @@ index 00000000000000..2d7a18eaec2e23
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index 07d965bf8b467c..91223c0ef0f810 100644
+index 858e76e3c51c06..91223c0ef0f810 100644
 --- a/src/crypto/internal/backend/common.go
 +++ b/src/crypto/internal/backend/common.go
 @@ -44,7 +44,11 @@ func hasSuffix(s, t string) bool {
@@ -419,17 +416,15 @@ index 07d965bf8b467c..91223c0ef0f810 100644
  		name := runtime_arg0()
  		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
  		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-@@ -66,3 +70,10 @@ func IsRSAKeySupported(primes int) bool {
- 	// Given the above reasons, we only support 2-prime RSA keys.
- 	return primes == 2
+@@ -68,5 +72,8 @@ func IsRSAKeySupported(primes int) bool {
  }
-+
-+func IsSaltSupported(salt int) bool {
+ 
+ func IsSaltSupported(salt int) bool {
 +	if goexperiment.CNGCrypto {
 +		return salt != 0 // rsa.PSSSaltLengthAuto
 +	}
-+	return true
-+}
+ 	return true
+ }
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
 index 00000000000000..f769d15f94ab05
@@ -469,34 +464,21 @@ index 00000000000000..f769d15f94ab05
 +	}
 +	return enabled != 0
 +}
-diff --git a/src/crypto/rsa/pss.go b/src/crypto/rsa/pss.go
-index 4aac87d7952081..010ee1467501c3 100644
---- a/src/crypto/rsa/pss.go
-+++ b/src/crypto/rsa/pss.go
-@@ -342,7 +342,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error {
--	if boring.Enabled && boring.SupportsHash(hash) {
-+	if boring.Enabled && boring.IsSaltSupported(opts.saltLength()) && boring.SupportsHash(hash) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index 2c82f50adf38b8..33630f14dcc8d4 100644
+index e03f4ab06603c6..a9928c0c7d8259 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -284,7 +284,7 @@ func fromHex(hexStr string) []byte {
- }
+@@ -241,7 +241,7 @@ func fromHex(hexStr string) []byte {
  
  func TestInvalidPSSSaltLength(t *testing.T) {
+ 	t.Setenv("GODEBUG", "rsa1024min=0")
 -	key, err := GenerateKey(rand.Reader, 245)
 +	key, err := GenerateKey(rand.Reader, 512)
  	if err != nil {
  		t.Fatal(err)
  	}
 diff --git a/src/go.mod b/src/go.mod
-index 30e45951c763fa..0209eeb6b8642c 100644
+index 186ced4a1123a8..e9da0eb1301b93 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
@@ -504,11 +486,11 @@ index 30e45951c763fa..0209eeb6b8642c 100644
  require (
  	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
- 	golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
- 	golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd
+ 	golang.org/x/crypto v0.30.0
+ 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
 diff --git a/src/go.sum b/src/go.sum
-index fd8881e46df76e..1d0d5a1b7845bb 100644
+index 0a58eccb57a869..b464f023942b74 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
@@ -516,14 +498,14 @@ index fd8881e46df76e..1d0d5a1b7845bb 100644
  github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383 h1:fMAxrMWT19/kkIZIuB9cjqW8SqRxCH2+2ZiZr5qrpuI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0 h1:wxHbFWyu21uEPJJnYaSDaHSWbvnZ9gLSSOPwnEc3lLM=
- golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
- golang.org/x/net v0.27.1-0.20240722181819-765c7e89b3bd h1:pHzwejE8Zkb94bG4nA+fUeskKPFp1HPldrhv62dabro=
+ golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
+ golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+ golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6504a23ce5d51f..3b30b0dc249a94 100644
+index 37cb128ba9409a..3ceabaebc7ea46 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -481,6 +481,10 @@ var depsRules = `
+@@ -518,6 +518,10 @@ var depsRules = `
  	crypto/cipher,
  	crypto/internal/boring/bcache,
  	crypto/internal/backend/fips140
@@ -534,7 +516,7 @@ index 6504a23ce5d51f..3b30b0dc249a94 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -521,6 +525,7 @@ var depsRules = `
+@@ -552,6 +556,7 @@ var depsRules = `
  
  	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
@@ -598,7 +580,7 @@ index 00000000000000..99ee2542ca38a9
 +const CNGCrypto = true
 +const CNGCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 9c8b16735cd4f1..2e6bf5d7f8284d 100644
+index 233a12ee542328..8c140f0dbed134 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,7 @@ type Flags struct {
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index eafa5600be4..2aebec3fff2 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -11541,7 +11541,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c0b83c9eeef..e116e36e2473fd 100644
+index 1c8de570cc2f1f..9df7e15cd2ddde 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
@@ -11556,6 +11556,6 @@ index cf5c0b83c9eeef..e116e36e2473fd 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.25.1-0.20240722173533-bb80217080b0
+ # golang.org/x/crypto v0.30.0
  ## explicit; go 1.20
  golang.org/x/crypto/chacha20
diff --git a/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch
index 89379537352..39e77834982 100644
--- a/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch
+++ b/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch
@@ -37,29 +37,29 @@ Submitting upgrades directly upstream would avoid
 this issue, but it would be hard to justify these
 unnecessary upgrades.
 ---
- src/crypto/internal/bigmod/_asm/{go.mod => no.mod}             | 0
- src/crypto/internal/bigmod/_asm/{go.sum => no.sum}             | 0
- src/crypto/internal/edwards25519/field/_asm/{go.mod => no.mod} | 0
- src/crypto/internal/edwards25519/field/_asm/{go.sum => no.sum} | 0
+ src/crypto/internal/fips140/bigmod/_asm/{go.mod => no.mod}        | 0
+ src/crypto/internal/fips140/bigmod/_asm/{go.sum => no.sum}        | 0
+ .../internal/fips140/edwards25519/field/_asm/{go.mod => no.mod}   | 0
+ .../internal/fips140/edwards25519/field/_asm/{go.sum => no.sum}   | 0
  4 files changed, 0 insertions(+), 0 deletions(-)
- rename src/crypto/internal/bigmod/_asm/{go.mod => no.mod} (100%)
- rename src/crypto/internal/bigmod/_asm/{go.sum => no.sum} (100%)
- rename src/crypto/internal/edwards25519/field/_asm/{go.mod => no.mod} (100%)
- rename src/crypto/internal/edwards25519/field/_asm/{go.sum => no.sum} (100%)
+ rename src/crypto/internal/fips140/bigmod/_asm/{go.mod => no.mod} (100%)
+ rename src/crypto/internal/fips140/bigmod/_asm/{go.sum => no.sum} (100%)
+ rename src/crypto/internal/fips140/edwards25519/field/_asm/{go.mod => no.mod} (100%)
+ rename src/crypto/internal/fips140/edwards25519/field/_asm/{go.sum => no.sum} (100%)
 
-diff --git a/src/crypto/internal/bigmod/_asm/go.mod b/src/crypto/internal/bigmod/_asm/no.mod
+diff --git a/src/crypto/internal/fips140/bigmod/_asm/go.mod b/src/crypto/internal/fips140/bigmod/_asm/no.mod
 similarity index 100%
-rename from src/crypto/internal/bigmod/_asm/go.mod
-rename to src/crypto/internal/bigmod/_asm/no.mod
-diff --git a/src/crypto/internal/bigmod/_asm/go.sum b/src/crypto/internal/bigmod/_asm/no.sum
+rename from src/crypto/internal/fips140/bigmod/_asm/go.mod
+rename to src/crypto/internal/fips140/bigmod/_asm/no.mod
+diff --git a/src/crypto/internal/fips140/bigmod/_asm/go.sum b/src/crypto/internal/fips140/bigmod/_asm/no.sum
 similarity index 100%
-rename from src/crypto/internal/bigmod/_asm/go.sum
-rename to src/crypto/internal/bigmod/_asm/no.sum
-diff --git a/src/crypto/internal/edwards25519/field/_asm/go.mod b/src/crypto/internal/edwards25519/field/_asm/no.mod
+rename from src/crypto/internal/fips140/bigmod/_asm/go.sum
+rename to src/crypto/internal/fips140/bigmod/_asm/no.sum
+diff --git a/src/crypto/internal/fips140/edwards25519/field/_asm/go.mod b/src/crypto/internal/fips140/edwards25519/field/_asm/no.mod
 similarity index 100%
-rename from src/crypto/internal/edwards25519/field/_asm/go.mod
-rename to src/crypto/internal/edwards25519/field/_asm/no.mod
-diff --git a/src/crypto/internal/edwards25519/field/_asm/go.sum b/src/crypto/internal/edwards25519/field/_asm/no.sum
+rename from src/crypto/internal/fips140/edwards25519/field/_asm/go.mod
+rename to src/crypto/internal/fips140/edwards25519/field/_asm/no.mod
+diff --git a/src/crypto/internal/fips140/edwards25519/field/_asm/go.sum b/src/crypto/internal/fips140/edwards25519/field/_asm/no.sum
 similarity index 100%
-rename from src/crypto/internal/edwards25519/field/_asm/go.sum
-rename to src/crypto/internal/edwards25519/field/_asm/no.sum
+rename from src/crypto/internal/fips140/edwards25519/field/_asm/go.sum
+rename to src/crypto/internal/fips140/edwards25519/field/_asm/no.sum
diff --git a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
index 8000003204f..7b39f407e72 100644
--- a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
+++ b/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
@@ -10,36 +10,15 @@ Upstream follows the boringssl FIPS policy, which doesn't allow P-521.
 
 This change adds support for P-521 in TLS when fipsonly mode is enabled.
 ---
- src/crypto/tls/boring_test.go | 3 ++-
- src/crypto/tls/defaults.go    | 3 ++-
+ src/crypto/tls/defaults.go  | 3 ++-
+ src/crypto/tls/fips_test.go | 3 ++-
  2 files changed, 4 insertions(+), 2 deletions(-)
 
-diff --git a/src/crypto/tls/boring_test.go b/src/crypto/tls/boring_test.go
-index 3cdde9780352a4..0682dfb162268c 100644
---- a/src/crypto/tls/boring_test.go
-+++ b/src/crypto/tls/boring_test.go
-@@ -113,7 +113,7 @@ func isBoringCipherSuite(id uint16) bool {
- 
- func isBoringCurve(id CurveID) bool {
- 	switch id {
--	case CurveP256, CurveP384:
-+	case CurveP256, CurveP384, CurveP521:
- 		return true
- 	}
- 	return false
-@@ -137,6 +137,7 @@ func isBoringSignatureScheme(alg SignatureScheme) bool {
- 		PKCS1WithSHA384,
- 		ECDSAWithP384AndSHA384,
- 		PKCS1WithSHA512,
-+		ECDSAWithP521AndSHA512,
- 		PSSWithSHA256,
- 		PSSWithSHA384,
- 		PSSWithSHA512:
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index ad4070df4a8883..26b6602b841209 100644
+index f25d0d3ce3f9eb..08c091168d6383 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
-@@ -99,7 +99,7 @@ var defaultSupportedVersionsFIPS = []uint16{
+@@ -102,7 +102,7 @@ var defaultSupportedVersionsFIPS = []uint16{
  
  // defaultCurvePreferencesFIPS are the FIPS-allowed curves,
  // in preference order (most preferable first).
@@ -48,7 +27,7 @@ index ad4070df4a8883..26b6602b841209 100644
  
  // defaultSupportedSignatureAlgorithmsFIPS currently are a subset of
  // defaultSupportedSignatureAlgorithms without Ed25519 and SHA-1.
-@@ -112,6 +112,7 @@ var defaultSupportedSignatureAlgorithmsFIPS = []SignatureScheme{
+@@ -115,6 +115,7 @@ var defaultSupportedSignatureAlgorithmsFIPS = []SignatureScheme{
  	PKCS1WithSHA384,
  	ECDSAWithP384AndSHA384,
  	PKCS1WithSHA512,
@@ -56,3 +35,24 @@ index ad4070df4a8883..26b6602b841209 100644
  }
  
  // defaultCipherSuitesFIPS are the FIPS-allowed cipher suites.
+diff --git a/src/crypto/tls/fips_test.go b/src/crypto/tls/fips_test.go
+index ab3c4465ddff0c..fc47e8ba8313cd 100644
+--- a/src/crypto/tls/fips_test.go
++++ b/src/crypto/tls/fips_test.go
+@@ -111,7 +111,7 @@ func isFIPSCipherSuite(id uint16) bool {
+ 
+ func isFIPSCurve(id CurveID) bool {
+ 	switch id {
+-	case CurveP256, CurveP384:
++	case CurveP256, CurveP384, CurveP521:
+ 		return true
+ 	}
+ 	return false
+@@ -135,6 +135,7 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
+ 		PKCS1WithSHA384,
+ 		ECDSAWithP384AndSHA384,
+ 		PKCS1WithSHA512,
++		ECDSAWithP521AndSHA512,
+ 		PSSWithSHA256,
+ 		PSSWithSHA384,
+ 		PSSWithSHA512:

From 337ce7fa68608c096ca8a9cbe484bd7bf9a0e5a0 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Dec 2024 14:05:43 +0100
Subject: [PATCH 155/887] skip failing tests

---
 .../0002-Add-crypto-backend-foundation.patch  | 63 ++++++++++++++++++-
 patches/0005-Add-CNG-crypto-backend.patch     | 20 +-----
 2 files changed, 65 insertions(+), 18 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index c8ceedc8b80..7612ea62ed8 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -15,6 +15,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/dsa/dsa.go                         |  88 +++++++
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
+ src/crypto/ecdh/ecdh_test.go                  |   4 +
  src/crypto/ecdh/nist.go                       |   2 +-
  src/crypto/ecdsa/boring.go                    |   6 +-
  src/crypto/ecdsa/ecdsa.go                     |   4 +-
@@ -48,6 +49,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
+ src/crypto/rsa/pss_test.go                    |   5 +
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  12 +-
  src/crypto/sha1/sha1.go                       |   2 +-
@@ -66,11 +68,12 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/prf.go                         |  41 ++++
  src/go/build/deps_test.go                     |   8 +-
  src/hash/boring_test.go                       |   9 +
+ src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   5 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 66 files changed, 1124 insertions(+), 80 deletions(-)
+ 69 files changed, 1135 insertions(+), 80 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -493,6 +496,28 @@ index 231f1ea04c1010..cfa113e2345816 100644
  	"crypto/internal/fips140/ecdh"
  	"crypto/subtle"
  	"errors"
+diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
+index 75d2480775669f..6a4d26fbafe090 100644
+--- a/src/crypto/ecdh/ecdh_test.go
++++ b/src/crypto/ecdh/ecdh_test.go
+@@ -9,6 +9,7 @@ import (
+ 	"crypto"
+ 	"crypto/cipher"
+ 	"crypto/ecdh"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	"crypto/sha256"
+ 	"encoding/hex"
+@@ -280,6 +281,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
+ }
+ 
+ func TestNewPrivateKey(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("skipping test with different results when using different backends")
++	}
+ 	testAllCurves(t, func(t *testing.T, curve ecdh.Curve) {
+ 		for _, input := range invalidPrivateKeys[curve] {
+ 			k, err := curve.NewPrivateKey(hexDecode(t, input))
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
 index acef8298943c2b..ca6171cf775117 100644
 --- a/src/crypto/ecdh/nist.go
@@ -1672,6 +1697,29 @@ index c65552cd93526a..910416abe842f5 100644
  	t.Setenv("GODEBUG", "rsa1024min=0")
  	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
  	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
+diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
+index e03f4ab06603c6..a4af0a2144870a 100644
+--- a/src/crypto/rsa/pss_test.go
++++ b/src/crypto/rsa/pss_test.go
+@@ -8,6 +8,7 @@ import (
+ 	"bufio"
+ 	"compress/bzip2"
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/rand"
+ 	. "crypto/rsa"
+@@ -180,6 +181,10 @@ func TestPSSSigning(t *testing.T) {
+ 			continue
+ 		}
+ 
++		if boring.Enabled && test.good != test.fipsGood {
++			t.Skip("skipping test with different results when using different backends")
++		}
++
+ 		opts.SaltLength = test.verifySaltLength
+ 		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
+ 		good := test.good
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
 index fb23f003a6f217..be374dad6969d5 100644
 --- a/src/crypto/rsa/rsa.go
@@ -2177,6 +2225,19 @@ index 00000000000000..52748c44698076
 +package hash_test
 +
 +const boringEnabled = true
+diff --git a/src/hash/example_test.go b/src/hash/example_test.go
+index f07b9aaa2c4898..b380537215634d 100644
+--- a/src/hash/example_test.go
++++ b/src/hash/example_test.go
+@@ -2,6 +2,8 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
++//go:build !goexperiment.systemcrypto
++
+ package hash_test
+ 
+ import (
 diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
 index 3091f7a67acede..fead8cc4bec73a 100644
 --- a/src/hash/marshal_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index c9d98f1f721..3d4d8cb3724 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -15,11 +15,10 @@ Subject: [PATCH] Add CNG crypto backend
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   5 +
  src/go/build/vendor_test.go                   |   1 +
- src/hash/example_test.go                      |   2 +
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 15 files changed, 412 insertions(+), 5 deletions(-)
+ 14 files changed, 410 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -465,10 +464,10 @@ index 00000000000000..f769d15f94ab05
 +	return enabled != 0
 +}
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index e03f4ab06603c6..a9928c0c7d8259 100644
+index a4af0a2144870a..7d7115cff81cea 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -241,7 +241,7 @@ func fromHex(hexStr string) []byte {
+@@ -246,7 +246,7 @@ func fromHex(hexStr string) []byte {
  
  func TestInvalidPSSSaltLength(t *testing.T) {
  	t.Setenv("GODEBUG", "rsa1024min=0")
@@ -536,19 +535,6 @@ index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/hash/example_test.go b/src/hash/example_test.go
-index f07b9aaa2c4898..2ff6c4827391c0 100644
---- a/src/hash/example_test.go
-+++ b/src/hash/example_test.go
-@@ -2,6 +2,8 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
-+//go:build !goexperiment.cngcrypto
-+
- package hash_test
- 
- import (
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..831460053281e2

From 486cb165323c393364de61a985d1a9146446c1db Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Dec 2024 15:01:54 +0100
Subject: [PATCH 156/887] don't mark azurelinux3 as broken

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index cd7a7dfd0ab..3d0827fa482 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -91,8 +91,8 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2, fips: true }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, broken: true }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true, broken: true }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
+          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }

From f572c516c9aa58b98425c9f1a97926742c951dc8 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 17 Dec 2024 10:35:07 +0100
Subject: [PATCH 157/887] upgrade github.com/microsoft/go-infra to v0.0.6

---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 3393abeda93..283c59e1cde 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.22.0
 
 require (
-	github.com/microsoft/go-infra v0.0.5
+	github.com/microsoft/go-infra v0.0.6
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
 	golang.org/x/sys v0.28.0
 	gotest.tools/gotestsum v1.12.0
@@ -23,7 +23,7 @@ require (
 	github.com/mattn/go-colorable v0.1.13 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/sync v0.8.0 // indirect
+	golang.org/x/sync v0.10.0 // indirect
 	golang.org/x/term v0.20.0 // indirect
-	golang.org/x/text v0.17.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index ffefea135f1..30bcc59b1ce 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -27,8 +27,8 @@ github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWE
 github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.5 h1:2vfRe5hJUwJvnXcHDJiv/gqE0XIqCHnwXBFxXRm5+SI=
-github.com/microsoft/go-infra v0.0.5/go.mod h1:abvc0FBd6VZIdqeJEgo3+SDIE3wSbjpvPhRZ0i21pls=
+github.com/microsoft/go-infra v0.0.6 h1:RB/Jx3bMC8I+16Ra9iy+HcrHe3Ss1iM46OZ0LzNUZ0Y=
+github.com/microsoft/go-infra v0.0.6/go.mod h1:L+TMMmm7bkfgUfx1FZmReNHXL9m4oqvc+bVXCuaKD30=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67 h1:i/EXV3vFmJ6UYZ8a4fM2ssKlvSstxvJfiUHau81iNZE=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
@@ -63,8 +63,8 @@ golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
-golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
+golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -104,8 +104,8 @@ golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc=
-golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
+golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
+golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
@@ -114,8 +114,8 @@ golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.11.0/go.mod h1:anzJrxPjNtfgiYQYirP2CPGzGLxrH2u2QBhn6Bf3qY8=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.19.0/go.mod h1:qoJWxmGSIBmAeriMx19ogtrEPrGtDbPK634QFIcLAhc=
-golang.org/x/tools v0.24.0 h1:J1shsA93PJUEVaUSaay7UXAyE8aimq3GW0pjlolpa24=
-golang.org/x/tools v0.24.0/go.mod h1:YhNqVBIfWHdzvTLs0d8LCuMhkKUgSUKldakyV7W/WDQ=
+golang.org/x/tools v0.28.0 h1:WuB6qZ4RPCQo5aP3WdKZS7i595EdWqWR8vqJTlwTVK8=
+golang.org/x/tools v0.28.0/go.mod h1:dcIOrVd3mfQKTgrDVQHqCPMWy6lnhfhtX3hLXYVLfRw=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gotest.tools/gotestsum v1.12.0 h1:CmwtaGDkHxrZm4Ib0Vob89MTfpc3GrEFMJKovliPwGk=
 gotest.tools/gotestsum v1.12.0/go.mod h1:fAvqkSptospfSbQw26CTYzNwnsE/ztqLeyhP0h67ARY=

From f331d62478ecd242decac5267f9d086537dc4d46 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 17 Dec 2024 21:36:45 +0000
Subject: [PATCH 158/887] Implement crypto/pbkdf2 with the OpenSSL/CNG backends
 (#1450)

---
 .../0002-Add-crypto-backend-foundation.patch  | 36 ++++++++++++++++---
 .../0003-Add-BoringSSL-crypto-backend.patch   | 14 +++++---
 patches/0004-Add-OpenSSL-crypto-backend.patch | 18 +++++++---
 patches/0005-Add-CNG-crypto-backend.patch     | 14 +++++---
 4 files changed, 65 insertions(+), 17 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 7612ea62ed8..411d846547a 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -33,12 +33,13 @@ Subject: [PATCH] Add crypto backend foundation
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
- src/crypto/internal/backend/nobackend.go      | 223 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 229 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/md5/md5.go                         |   7 +
  src/crypto/md5/md5_test.go                    |  14 ++
+ src/crypto/pbkdf2/pbkdf2.go                   |   4 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
  src/crypto/purego_test.go                     |   2 +-
  src/crypto/rand/rand.go                       |   2 +-
@@ -73,7 +74,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 69 files changed, 1135 insertions(+), 80 deletions(-)
+ 70 files changed, 1145 insertions(+), 80 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -1099,10 +1100,10 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..ffa8d38e5d490f
+index 00000000000000..71e0ec9dc25a02
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,223 @@
+@@ -0,0 +1,229 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1235,6 +1236,12 @@ index 00000000000000..ffa8d38e5d490f
 +	panic("cryptobackend: not available")
 +}
 +
++func SupportsPBKDF2() bool { panic("cryptobackend: not available") }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsTLS1PRF() bool { panic("cryptobackend: not available") }
 +
 +func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
@@ -1446,6 +1453,27 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
+index 0fdd9e822d40a5..bc8e560487a6ef 100644
+--- a/src/crypto/pbkdf2/pbkdf2.go
++++ b/src/crypto/pbkdf2/pbkdf2.go
+@@ -19,6 +19,7 @@ pbkdf2.Key.
+ package pbkdf2
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/pbkdf2"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -53,5 +54,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
+ 			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 		}
+ 	}
++	if boring.Enabled && boring.SupportsPBKDF2() {
++		return boring.PBKDF2([]byte(password), salt, iter, keyLength, func() hash.Hash { return h() })
++	}
+ 	return pbkdf2.Key(h, password, salt, iter, keyLength)
+ }
 diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
 index 03980c7e54d3be..4968a666fad4e5 100644
 --- a/src/crypto/pbkdf2/pbkdf2_test.go
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 8a7c0aaa2df..d60a06344d5 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 257 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 263 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 281 insertions(+)
+ 3 files changed, 286 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/boring.go
@@ -32,10 +32,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..31e57a8dffd4c3
+index 00000000000000..b1bd6d5ba756d7
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,257 @@
+@@ -0,0 +1,263 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -196,6 +196,12 @@ index 00000000000000..31e57a8dffd4c3
 +	panic("cryptobackend: not available")
 +}
 +
++func SupportsPBKDF2() bool { return false }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsTLS1PRF() bool { return false }
 +
 +func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 318411a5b78..64277f1de6d 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/cmd/link/internal/ld/lib.go               |   1 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
  .../internal/backend/fips140/openssl.go       |  41 +++
- src/crypto/internal/backend/openssl_linux.go  | 323 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 331 ++++++++++++++++++
  src/crypto/rsa/rsa_test.go                    |   3 +
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
@@ -19,7 +19,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 15 files changed, 428 insertions(+), 5 deletions(-)
+ 15 files changed, 436 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -142,10 +142,10 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..06329e4faef026
+index 00000000000000..d3a663737a1ce3
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,323 @@
+@@ -0,0 +1,331 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -362,6 +362,14 @@ index 00000000000000..06329e4faef026
 +	return openssl.ExtractHKDF(h, secret, salt)
 +}
 +
++func SupportsPBKDF2() bool {
++	return openssl.SupportsPBKDF2()
++}
++
++func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return openssl.PBKDF2(pass, salt, iter, keyLen, h)
++}
++
 +func SupportsTLS1PRF() bool {
 +	return openssl.SupportsTLS1PRF()
 +}
@@ -506,7 +514,7 @@ index 9e661352f16e0b..0a58eccb57a869 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index afbdd6770f3f79..2694c2ec84d091 100644
+index 58082b3636f209..37cb128ba9409a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -516,8 +516,10 @@ var depsRules = `
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 3d4d8cb3724..4ed2d8c4976 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -7,7 +7,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/ecdsa/badlinkname.go               |  17 +
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 310 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 316 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |   9 +-
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/rsa/pss_test.go                    |   2 +-
@@ -18,7 +18,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 14 files changed, 410 insertions(+), 5 deletions(-)
+ 14 files changed, 416 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -84,10 +84,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..2d7a18eaec2e23
+index 00000000000000..c37247c8a2c7c6
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,310 @@
+@@ -0,0 +1,316 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -295,6 +295,12 @@ index 00000000000000..2d7a18eaec2e23
 +	return cng.ExtractHKDF(h, secret, salt)
 +}
 +
++func SupportsPBKDF2() bool { return true }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return cng.PBKDF2(password, salt, iter, keyLen, h)
++}
++
 +func SupportsTLS1PRF() bool {
 +	return true
 +}

From 646086032c418e016eb6e368eee9492ce7ddd083 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 18 Dec 2024 10:09:37 +0000
Subject: [PATCH 159/887] Implement crypto/hkdf with the OpenSSL/CNG backends
 (#1449)

---
 .../0002-Add-crypto-backend-foundation.patch  | 49 ++++++++++++++++++-
 1 file changed, 48 insertions(+), 1 deletion(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 411d846547a..aff2ca97720 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -23,6 +23,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/ed25519/boring.go                  |  71 ++++++
  src/crypto/ed25519/ed25519.go                 |  73 ++++++
  src/crypto/ed25519/notboring.go               |  16 ++
+ src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
@@ -74,7 +75,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 70 files changed, 1145 insertions(+), 80 deletions(-)
+ 71 files changed, 1159 insertions(+), 80 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -811,6 +812,52 @@ index 00000000000000..b0cdd44d81c753
 +func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
+diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
+index 7cfbe2c60de356..78139ed6170da5 100644
+--- a/src/crypto/hkdf/hkdf.go
++++ b/src/crypto/hkdf/hkdf.go
+@@ -11,6 +11,7 @@
+ package hkdf
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -27,6 +28,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
+ 	if err := checkFIPS140Only(h, secret); err != nil {
+ 		return nil, err
+ 	}
++	if boring.Enabled && boring.SupportsHKDF() {
++		return boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
++	}
+ 	return hkdf.Extract(h, secret, salt), nil
+ }
+ 
+@@ -47,6 +51,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
+ 		return nil, errors.New("hkdf: requested key length too large")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsHKDF() {
++		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
++	}
+ 	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
+ }
+ 
+@@ -63,6 +70,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
+ 		return nil, errors.New("hkdf: requested key length too large")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsHKDF() {
++		pseudorandomKey, err := boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
++		if err != nil {
++			return nil, err
++		}
++		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
++	}
+ 	return hkdf.Key(h, secret, salt, info, keyLength), nil
+ }
+ 
 diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
 index 201b440289bb2d..4ed4960ff35b66 100644
 --- a/src/crypto/hkdf/hkdf_test.go

From 18eaed4ca1684f05d4b0cd12245fccc7f4dc2436 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 20 Dec 2024 12:04:37 +0000
Subject: [PATCH 160/887] fix:update patches

---
 .../0002-Add-crypto-backend-foundation.patch  | 75 +++++++++++++++----
 1 file changed, 60 insertions(+), 15 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index aff2ca97720..0fffa39c183 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -23,7 +23,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/ed25519/boring.go                  |  71 ++++++
  src/crypto/ed25519/ed25519.go                 |  73 ++++++
  src/crypto/ed25519/notboring.go               |  16 ++
- src/crypto/hkdf/hkdf.go                       |  14 ++
+ src/crypto/hkdf/hkdf.go                       |  22 +-
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
@@ -65,7 +65,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  10 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  10 +
+ src/crypto/tls/handshake_server_tls13.go      |  24 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/go/build/deps_test.go                     |   8 +-
@@ -75,7 +75,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 71 files changed, 1159 insertions(+), 80 deletions(-)
+ 71 files changed, 1174 insertions(+), 87 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -813,41 +813,49 @@ index 00000000000000..b0cdd44d81c753
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
-index 7cfbe2c60de356..78139ed6170da5 100644
+index 7cfbe2c60de356..925b839b73cb0c 100644
 --- a/src/crypto/hkdf/hkdf.go
 +++ b/src/crypto/hkdf/hkdf.go
-@@ -11,6 +11,7 @@
+@@ -11,8 +11,9 @@
  package hkdf
  
  import (
+-	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/hkdf"
  	"crypto/internal/fips140only"
++	"cryto/hkdf"
  	"errors"
-@@ -27,6 +28,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
+ 	"hash"
+ )
+@@ -27,7 +28,10 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
  	if err := checkFIPS140Only(h, secret); err != nil {
  		return nil, err
  	}
+-	return hkdf.Extract(h, secret, salt), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		return boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
 +	}
- 	return hkdf.Extract(h, secret, salt), nil
++	return hkdf.Extract(h, secret, salt)
  }
  
-@@ -47,6 +51,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
+ // Expand derives a key from the given hash, key, and optional context info,
+@@ -47,7 +51,10 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
+-	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
 +	}
- 	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
++	return hkdf.Expand(h, pseudorandomKey, info, keyLength)
  }
  
-@@ -63,6 +70,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
+ // Key derives a key from the given hash, secret, salt and context info,
+@@ -63,7 +70,14 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
+-	return hkdf.Key(h, secret, salt, info, keyLength), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		pseudorandomKey, err := boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
 +		if err != nil {
@@ -855,9 +863,10 @@ index 7cfbe2c60de356..78139ed6170da5 100644
 +		}
 +		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
 +	}
- 	return hkdf.Key(h, secret, salt, info, keyLength), nil
++	return hkdf.Key(h, secret, salt, info, keyLength)
  }
  
+ func checkFIPS140Only[H hash.Hash](h func() H, key []byte) error {
 diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
 index 201b440289bb2d..4ed4960ff35b66 100644
 --- a/src/crypto/hkdf/hkdf_test.go
@@ -2125,17 +2134,24 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 3552d89ba3bc6f..958ec81dc64966 100644
+index 3552d89ba3bc6f..cefacaca28bae0 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -9,6 +9,7 @@ import (
+@@ -9,12 +9,13 @@ import (
  	"context"
  	"crypto"
  	"crypto/hmac"
+-	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/hkdf"
  	"crypto/internal/fips140/mlkem"
  	"crypto/internal/fips140/tls13"
+ 	"crypto/internal/hpke"
+ 	"crypto/rsa"
+ 	"crypto/tls/internal/fips140tls"
++	"cryto/hkdf"
+ 	"errors"
+ 	"hash"
+ 	"internal/byteorder"
 @@ -477,6 +478,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  	}
  	marshaler, ok := in.(binaryMarshaler)
@@ -2152,6 +2168,35 @@ index 3552d89ba3bc6f..958ec81dc64966 100644
  		return nil
  	}
  	state, err := marshaler.MarshalBinary()
+@@ -572,8 +582,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
+ 		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
+ 			return nil, err
+ 		}
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
++		if err != nil {
++			return nil, err
++		}
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
++			secret,
+ 			"hrr ech accept confirmation",
+ 			confTranscript.Sum(nil),
+ 			8,
+@@ -734,9 +748,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
+ 		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
+ 			return err
+ 		}
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
++		if err != nil {
++			return err
++		}
+ 		// compute the acceptance message
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
++			secret,
+ 			"ech accept confirmation",
+ 			echTranscript.Sum(nil),
+ 			8,
 diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
 index 24d78d60cf5b64..a6bfd3f17c1911 100644
 --- a/src/crypto/tls/internal/fips140tls/fipstls.go

From 0dc0c5a136a573f405aaeeb9a2bc4f4ab3448c82 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 20 Dec 2024 12:14:21 +0000
Subject: [PATCH 161/887] fix:wrong import fix

---
 .../0002-Add-crypto-backend-foundation.patch  | 31 +++++++------------
 1 file changed, 11 insertions(+), 20 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 0fffa39c183..c65d9a3664c 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -23,7 +23,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/ed25519/boring.go                  |  71 ++++++
  src/crypto/ed25519/ed25519.go                 |  73 ++++++
  src/crypto/ed25519/notboring.go               |  16 ++
- src/crypto/hkdf/hkdf.go                       |  22 +-
+ src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
@@ -75,7 +75,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 71 files changed, 1174 insertions(+), 87 deletions(-)
+ 71 files changed, 1170 insertions(+), 83 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -813,49 +813,41 @@ index 00000000000000..b0cdd44d81c753
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
-index 7cfbe2c60de356..925b839b73cb0c 100644
+index 7cfbe2c60de356..78139ed6170da5 100644
 --- a/src/crypto/hkdf/hkdf.go
 +++ b/src/crypto/hkdf/hkdf.go
-@@ -11,8 +11,9 @@
+@@ -11,6 +11,7 @@
  package hkdf
  
  import (
--	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/hkdf"
  	"crypto/internal/fips140only"
-+	"cryto/hkdf"
  	"errors"
- 	"hash"
- )
-@@ -27,7 +28,10 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
+@@ -27,6 +28,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
  	if err := checkFIPS140Only(h, secret); err != nil {
  		return nil, err
  	}
--	return hkdf.Extract(h, secret, salt), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		return boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
 +	}
-+	return hkdf.Extract(h, secret, salt)
+ 	return hkdf.Extract(h, secret, salt), nil
  }
  
- // Expand derives a key from the given hash, key, and optional context info,
-@@ -47,7 +51,10 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
+@@ -47,6 +51,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
--	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
 +	}
-+	return hkdf.Expand(h, pseudorandomKey, info, keyLength)
+ 	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
  }
  
- // Key derives a key from the given hash, secret, salt and context info,
-@@ -63,7 +70,14 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
+@@ -63,6 +70,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
--	return hkdf.Key(h, secret, salt, info, keyLength), nil
 +	if boring.Enabled && boring.SupportsHKDF() {
 +		pseudorandomKey, err := boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
 +		if err != nil {
@@ -863,10 +855,9 @@ index 7cfbe2c60de356..925b839b73cb0c 100644
 +		}
 +		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
 +	}
-+	return hkdf.Key(h, secret, salt, info, keyLength)
+ 	return hkdf.Key(h, secret, salt, info, keyLength), nil
  }
  
- func checkFIPS140Only[H hash.Hash](h func() H, key []byte) error {
 diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
 index 201b440289bb2d..4ed4960ff35b66 100644
 --- a/src/crypto/hkdf/hkdf_test.go

From ace8c68421f95a6cc62a7578589f553b5c3911db Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 20 Dec 2024 12:26:44 +0000
Subject: [PATCH 162/887] update typo

---
 patches/0002-Add-crypto-backend-foundation.patch | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index c65d9a3664c..256abccdc20 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -2125,24 +2125,20 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 3552d89ba3bc6f..cefacaca28bae0 100644
+index 3552d89ba3bc6f..b3c4c8261887d0 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -9,12 +9,13 @@ import (
+@@ -8,8 +8,9 @@ import (
+ 	"bytes"
  	"context"
  	"crypto"
++	"crypto/hkdf"
  	"crypto/hmac"
 -	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
  	"crypto/internal/fips140/tls13"
  	"crypto/internal/hpke"
- 	"crypto/rsa"
- 	"crypto/tls/internal/fips140tls"
-+	"cryto/hkdf"
- 	"errors"
- 	"hash"
- 	"internal/byteorder"
 @@ -477,6 +478,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  	}
  	marshaler, ok := in.(binaryMarshaler)

From c9ef9a94330c09713e4b856de2f0b244ee819f76 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 20 Dec 2024 14:25:14 +0000
Subject: [PATCH 163/887] fix:move every import in crypto/tls

---
 .../0002-Add-crypto-backend-foundation.patch  | 45 ++++++++++++++++++-
 1 file changed, 44 insertions(+), 1 deletion(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 256abccdc20..cd9db869917 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -64,6 +64,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  10 +-
+ src/crypto/tls/handshake_client_tls13.go      |  14 +-
  src/crypto/tls/handshake_server.go            |  10 +-
  src/crypto/tls/handshake_server_tls13.go      |  24 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
@@ -75,7 +76,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 71 files changed, 1170 insertions(+), 83 deletions(-)
+ 72 files changed, 1181 insertions(+), 86 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -2103,6 +2104,48 @@ index ecc62ff2edefc0..776fec96f0f349 100644
  	c := hs.c
  
  	isResume, err := hs.processServerHello()
+diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
+index 38c6025db74ee8..356036321d6283 100644
+--- a/src/crypto/tls/handshake_client_tls13.go
++++ b/src/crypto/tls/handshake_client_tls13.go
+@@ -8,8 +8,8 @@ import (
+ 	"bytes"
+ 	"context"
+ 	"crypto"
++	"crypto/hkdf"
+ 	"crypto/hmac"
+-	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140/mlkem"
+ 	"crypto/internal/fips140/tls13"
+ 	"crypto/rsa"
+@@ -91,8 +91,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
+ 		confTranscript.Write(hs.serverHello.original[:30])
+ 		confTranscript.Write(make([]byte, 8))
+ 		confTranscript.Write(hs.serverHello.original[38:])
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
++		if err != nil {
++			return err
++		}
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
++			secret,
+ 			"ech accept confirmation",
+ 			confTranscript.Sum(nil),
+ 			8,
+@@ -268,8 +272,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
+ 			copy(hrrHello, hs.serverHello.original)
+ 			hrrHello = bytes.Replace(hrrHello, hs.serverHello.encryptedClientHello, make([]byte, 8), 1)
+ 			confTranscript.Write(hrrHello)
++			secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
++			if err != nil {
++				return err
++			}
+ 			acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-				hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
++				secret,
+ 				"hrr ech accept confirmation",
+ 				confTranscript.Sum(nil),
+ 				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
 index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
 --- a/src/crypto/tls/handshake_server.go

From 2722c86fa600fc162451817f7ef0b79a39426ee2 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Fri, 20 Dec 2024 11:17:07 -0800
Subject: [PATCH 164/887] Fill in .gdnsuppress

---
 .config/guardian/.gdnsuppress | 142 +++++++++++++++++++++++++++++++++-
 1 file changed, 139 insertions(+), 3 deletions(-)

diff --git a/.config/guardian/.gdnsuppress b/.config/guardian/.gdnsuppress
index 528d4b92fa3..46a67e1548a 100644
--- a/.config/guardian/.gdnsuppress
+++ b/.config/guardian/.gdnsuppress
@@ -1,8 +1,8 @@
 {
-  "hydrated": false,
+  "hydrated": true,
   "properties": {
     "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
-    "hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
+    "hydrationStatus": "This file is hydrated. This is ok, it doesn't contain sensitive information."
   },
   "version": "1.0.0",
   "suppressionSets": {
@@ -13,13 +13,149 @@
     }
   },
   "results": {
+    "dd76b3defecd301787000102e3ce76506d45147b98fc4accb410b87097b2f0dd": {
+      "signature": "dd76b3defecd301787000102e3ce76506d45147b98fc4accb410b87097b2f0dd",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/ecdh/ecdh_test.go",
+      "line": 128,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "6b250bd6def22ac84e477b4d22ec0b12cb69721002a7fe0fccf23ff5a7dfa688": {
+      "signature": "6b250bd6def22ac84e477b4d22ec0b12cb69721002a7fe0fccf23ff5a7dfa688",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/ecdh/ecdh_test.go",
+      "line": 136,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "877868030fa2e6114057d685aea3f4ec90d3190dcfe0e0ae1d86a3a4094fad87": {
+      "signature": "877868030fa2e6114057d685aea3f4ec90d3190dcfe0e0ae1d86a3a4094fad87",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/ecdh/ecdh_test.go",
+      "line": 147,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "3f72337007e55d003a9f252112dbaead6ddf0f89bac847d528b44c263ddce0e1": {
+      "signature": "3f72337007e55d003a9f252112dbaead6ddf0f89bac847d528b44c263ddce0e1",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/ecdh/ecdh_test.go",
+      "line": 154,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "1ebc50c2b5fecaf320705d05137b2d29a3851823251d6224fc6223ca653b7c02": {
+      "signature": "1ebc50c2b5fecaf320705d05137b2d29a3851823251d6224fc6223ca653b7c02",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/tls/example_test.go",
+      "line": 165,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0020",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "3d4c2bb9f6a10eec92970320f48c0ee107981491a38c0869e054c54f156aafa1": {
+      "signature": "3d4c2bb9f6a10eec92970320f48c0ee107981491a38c0869e054c54f156aafa1",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/x509/platform_root_key.pem",
+      "line": 1,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0020",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "ebf235ebc38c8301d92931d07d3ba98a286fc46d53f24467f7d804c7d907a88b": {
+      "signature": "ebf235ebc38c8301d92931d07d3ba98a286fc46d53f24467f7d804c7d907a88b",
+      "alternativeSignatures": [],
+      "target": "go/src/crypto/tls/testdata/example-key.pem",
+      "line": 1,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0020",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
+    "d00714f4abdecfa0f2b96d616a8631088ace81abf5f0688c05937dcf9cc4bb5e": {
+      "signature": "d00714f4abdecfa0f2b96d616a8631088ace81abf5f0688c05937dcf9cc4bb5e",
+      "alternativeSignatures": [],
+      "target": "go/src/cmd/vendor/rsc.io/markdown/emoji.go",
+      "line": 1432,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-16 10:13:25Z"
+    },
     "d5ce1218657b3f7da8e9a6ac55d72833387257e76e39d837edfd5c62781b9b97": {
       "signature": "d5ce1218657b3f7da8e9a6ac55d72833387257e76e39d837edfd5c62781b9b97",
       "alternativeSignatures": [],
+      "target": "go/src/crypto/internal/hpke/testdata/rfc9180-vectors.json",
+      "line": 1,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-20 00:07:58Z"
+    },
+    "e194d8614310e9f30653b5fb8ae34c07968131fce828c224c30536e1cb217e9e": {
+      "signature": "e194d8614310e9f30653b5fb8ae34c07968131fce828c224c30536e1cb217e9e",
+      "alternativeSignatures": [],
+      "target": "go/src/cmd/go/internal/auth/gitauth_test.go",
+      "line": 51,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-20 19:29:53Z"
+    },
+    "dd34d1fbdcab2b03eccc9e9544d25b6830f28ef5f72e815035df834a6b3e57e4": {
+      "signature": "dd34d1fbdcab2b03eccc9e9544d25b6830f28ef5f72e815035df834a6b3e57e4",
+      "alternativeSignatures": [],
+      "target": "go/src/cmd/go/testdata/script/goauth_git.txt",
+      "line": 72,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0060",
+      "createdDate": "2024-12-20 19:29:53Z"
+    },
+    "2d264e899faa2c2dcf9c3c63acad2f0b0b7b9464fe1657d0313d8aa477103a3c": {
+      "signature": "2d264e899faa2c2dcf9c3c63acad2f0b0b7b9464fe1657d0313d8aa477103a3c",
+      "alternativeSignatures": [],
+      "target": "go/src/cmd/go/testdata/script/goauth_userauth.txt",
+      "line": 126,
       "memberOf": [
         "default"
       ],
-      "createdDate": "2024-06-10 09:31:52Z"
+      "tool": "credscan",
+      "ruleId": "CSCAN-GENERAL0120",
+      "createdDate": "2024-12-20 19:29:53Z"
     }
   }
 }
\ No newline at end of file

From 4ca39237c27d9443a29feb2963fab193e05ee1d6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Dec 2024 10:12:08 +0000
Subject: [PATCH 165/887] build(deps): bump github/codeql-action from 3.27.9 to
 3.28.0

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.9 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/df409f7d9260372bd5f19e5b04e83cb3c43714ae...48ab28a6f5dbc2a99bf1e0131198dd8f1df78169)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c74a170d4ac..d61b4590e0f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           category: /language:go

From 970af9d5e0f9b1e73edb22543bf452e97bd1b076 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Fri, 3 Jan 2025 16:06:34 +0000
Subject: [PATCH 166/887] Update submodule to latest master (4b652e9f): cmd/go:
 fix two typos in helpdoc.go

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 18b5435fc84..4b652e9f5f5 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 18b5435fc84225ca303da7a110c7e8065dc4bbda
+Subproject commit 4b652e9f5f5c0793f2e41cd2876bce5a241b2c95

From a390c3b15375eae5a1f18953dafdea07219d64ee Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 6 Jan 2025 09:33:46 +0000
Subject: [PATCH 167/887] resolve merge conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 62 +++++++++----------
 patches/0004-Add-OpenSSL-crypto-backend.patch | 30 ++++-----
 patches/0005-Add-CNG-crypto-backend.patch     | 12 ++--
 3 files changed, 49 insertions(+), 55 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index cd9db869917..6124c9efb17 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -69,14 +69,14 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server_tls13.go      |  24 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   8 +-
+ src/go/build/deps_test.go                     |   6 +
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   5 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 72 files changed, 1181 insertions(+), 86 deletions(-)
+ 72 files changed, 1180 insertions(+), 85 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -556,7 +556,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 77727aaf96befb..dedaa0fe4100b1 100644
+index 0f9749975ffba9..41ac17df22d7d7 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -18,8 +18,8 @@ import (
@@ -1502,10 +1502,10 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  
  		h := New()
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index 0fdd9e822d40a5..bc8e560487a6ef 100644
+index d40daab5e5b879..c32b3fd82b99b0 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
-@@ -19,6 +19,7 @@ pbkdf2.Key.
+@@ -11,6 +11,7 @@
  package pbkdf2
  
  import (
@@ -1513,7 +1513,7 @@ index 0fdd9e822d40a5..bc8e560487a6ef 100644
  	"crypto/internal/fips140/pbkdf2"
  	"crypto/internal/fips140only"
  	"errors"
-@@ -53,5 +54,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
+@@ -45,5 +46,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
  			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
  		}
  	}
@@ -1812,7 +1812,7 @@ index fb23f003a6f217..be374dad6969d5 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 2474ab82dfa207..78e9b47f051484 100644
+index 2535661040273a..f9543d9cc89e7b 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2084,10 +2084,10 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index ecc62ff2edefc0..776fec96f0f349 100644
+index 38bd417a0dca72..9eec202234fa94 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -548,7 +548,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2105,7 +2105,7 @@ index ecc62ff2edefc0..776fec96f0f349 100644
  
  	isResume, err := hs.processServerHello()
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 38c6025db74ee8..356036321d6283 100644
+index c0396e75796add..819bc54822f0cb 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -8,8 +8,8 @@ import (
@@ -2118,7 +2118,7 @@ index 38c6025db74ee8..356036321d6283 100644
  	"crypto/internal/fips140/mlkem"
  	"crypto/internal/fips140/tls13"
  	"crypto/rsa"
-@@ -91,8 +91,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
+@@ -90,8 +90,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
  		confTranscript.Write(hs.serverHello.original[:30])
  		confTranscript.Write(make([]byte, 8))
  		confTranscript.Write(hs.serverHello.original[38:])
@@ -2132,7 +2132,7 @@ index 38c6025db74ee8..356036321d6283 100644
  			"ech accept confirmation",
  			confTranscript.Sum(nil),
  			8,
-@@ -268,8 +272,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
+@@ -264,8 +268,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
  			copy(hrrHello, hs.serverHello.original)
  			hrrHello = bytes.Replace(hrrHello, hs.serverHello.encryptedClientHello, make([]byte, 8), 1)
  			confTranscript.Write(hrrHello)
@@ -2168,7 +2168,7 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 3552d89ba3bc6f..b3c4c8261887d0 100644
+index 76fff6974e7403..218d40171d2567 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -8,8 +8,9 @@ import (
@@ -2318,47 +2318,41 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index cc7f4df7f388ea..58082b3636f209 100644
+index d9d985dca4ade4..d74e8959264349 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -491,9 +491,11 @@ var depsRules = `
+@@ -493,6 +493,8 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS;
  
 +	syscall < crypto/internal/backend/fips140;
 +
- 	FIPS < crypto/internal/fips140/check/checktest;
- 
--	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
-+	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
- 
- 	FIPS, internal/godebug, hash < crypto/fips140, crypto/internal/fips140only;
+ 	FIPS, internal/godebug < crypto/fips140;
  
-@@ -505,6 +507,7 @@ var depsRules = `
- 	FIPS, crypto/internal/fips140only,
+ 	crypto, hash !< FIPS;
+@@ -506,12 +508,15 @@ var depsRules = `
+ 	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
 +	encoding/binary,
- 	golang.org/x/sys/cpu,
- 	hash, embed
- 	< crypto
-@@ -514,7 +517,9 @@ var depsRules = `
- 
- 	crypto/cipher,
  	crypto/internal/boring/bcache
 +	crypto/internal/backend/fips140
+ 	< crypto/internal/fips140only
+ 	< crypto
+ 	< crypto/subtle
+ 	< crypto/cipher
  	< crypto/internal/boring
 +	< crypto/internal/backend
- 	< crypto/boring;
+ 	< crypto/boring
+ 	< crypto/aes,
+ 	  crypto/des,
+@@ -534,6 +539,7 @@ var depsRules = `
  
- 	crypto/boring
-@@ -546,6 +551,7 @@ var depsRules = `
- 	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
  	< crypto/rand
- 	< crypto/ed25519
+ 	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 64277f1de6d..3224a67a858 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -27,10 +27,10 @@ Subject: [PATCH] Add OpenSSL crypto backend
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
 
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 5a981f8bc147de..b38d84db20172a 100644
+index 06bd01bc5bb995..9561bf2bca9a9d 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -1322,12 +1322,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1324,12 +1324,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -478,7 +478,7 @@ index 00000000000000..d3a663737a1ce3
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 78e9b47f051484..4fdfcdc4c91004 100644
+index f9543d9cc89e7b..f07c75821aab13 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -846,6 +846,9 @@ func TestDecryptOAEP(t *testing.T) {
@@ -514,30 +514,30 @@ index 9e661352f16e0b..0a58eccb57a869 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 58082b3636f209..37cb128ba9409a 100644
+index d74e8959264349..878585aa05a38a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -516,8 +516,10 @@ var depsRules = `
- 	< crypto/sha3;
- 
- 	crypto/cipher,
+@@ -509,8 +509,10 @@ var depsRules = `
+ 	crypto/internal/boring/sig,
+ 	crypto/internal/boring/syso,
+ 	encoding/binary,
 -	crypto/internal/boring/bcache
 +	crypto/internal/boring/bcache,
  	crypto/internal/backend/fips140
 +	< github.com/golang-fips/openssl/v2/internal/subtle
 +	< github.com/golang-fips/openssl/v2
- 	< crypto/internal/boring
- 	< crypto/internal/backend
- 	< crypto/boring;
-@@ -550,6 +552,7 @@ var depsRules = `
+ 	< crypto/internal/fips140only
+ 	< crypto
+ 	< crypto/subtle
+@@ -538,6 +540,7 @@ var depsRules = `
+ 	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
- 	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
 +	< github.com/golang-fips/openssl/v2/bbig
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -845,7 +848,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -842,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -546,7 +546,7 @@ index 58082b3636f209..37cb128ba9409a 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -855,7 +858,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -852,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 4ed2d8c4976..b5178e1bbde 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -507,11 +507,11 @@ index 0a58eccb57a869..b464f023942b74 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 37cb128ba9409a..3ceabaebc7ea46 100644
+index 878585aa05a38a..ddf58226076db1 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -518,6 +518,10 @@ var depsRules = `
- 	crypto/cipher,
+@@ -511,6 +511,10 @@ var depsRules = `
+ 	encoding/binary,
  	crypto/internal/boring/bcache,
  	crypto/internal/backend/fips140
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
@@ -520,10 +520,10 @@ index 37cb128ba9409a..3ceabaebc7ea46 100644
 +	< github.com/microsoft/go-crypto-winnative/cng
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
- 	< crypto/internal/boring
-@@ -552,6 +556,7 @@ var depsRules = `
+ 	< crypto/internal/fips140only
+@@ -540,6 +544,7 @@ var depsRules = `
+ 	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
- 	# CRYPTO-MATH is core bignum-based crypto - no cgo, net; fmt now ok.
  	CRYPTO, FMT, math/big
 +	< github.com/microsoft/go-crypto-winnative/cng/bbig
  	< github.com/golang-fips/openssl/v2/bbig

From 7ff6aca4370725dec6281121dc88a2e8edca2ad9 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 7 Jan 2025 09:42:47 +0100
Subject: [PATCH 168/887] fix TestDependencies

---
 patches/0002-Add-crypto-backend-foundation.patch | 15 ++++++++++++---
 patches/0004-Add-OpenSSL-crypto-backend.patch    | 12 ++++++++----
 patches/0005-Add-CNG-crypto-backend.patch        | 12 ++++++------
 3 files changed, 26 insertions(+), 13 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 6124c9efb17..60c43ad8eaf 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -69,14 +69,14 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server_tls13.go      |  24 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   6 +
+ src/go/build/deps_test.go                     |   8 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   5 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 72 files changed, 1180 insertions(+), 85 deletions(-)
+ 72 files changed, 1181 insertions(+), 86 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -2318,7 +2318,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d9d985dca4ade4..d74e8959264349 100644
+index d9d985dca4ade4..de88160bcf3a1c 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -2354,6 +2354,15 @@ index d9d985dca4ade4..d74e8959264349 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
+@@ -547,7 +553,7 @@ var depsRules = `
+ 
+ 	# TLS, Prince of Dependencies.
+ 
+-	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
++	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
+ 
+ 	crypto/internal/boring/sig, crypto/tls/internal/fips140tls < crypto/tls/fipsonly;
+ 
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
 index 00000000000000..52748c44698076
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 3224a67a858..9b01a2e7b5e 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -514,21 +514,25 @@ index 9e661352f16e0b..0a58eccb57a869 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d74e8959264349..878585aa05a38a 100644
+index de88160bcf3a1c..339cb53d8a1468 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -509,8 +509,10 @@ var depsRules = `
+@@ -509,12 +509,14 @@ var depsRules = `
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
  	encoding/binary,
 -	crypto/internal/boring/bcache
 +	crypto/internal/boring/bcache,
  	crypto/internal/backend/fips140
-+	< github.com/golang-fips/openssl/v2/internal/subtle
-+	< github.com/golang-fips/openssl/v2
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
+ 	< crypto/cipher
++	< github.com/golang-fips/openssl/v2/internal/subtle
++	< github.com/golang-fips/openssl/v2
+ 	< crypto/internal/boring
+ 	< crypto/internal/backend
+ 	< crypto/boring
 @@ -538,6 +540,7 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index b5178e1bbde..c2c4ab8e704 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -507,20 +507,20 @@ index 0a58eccb57a869..b464f023942b74 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 878585aa05a38a..ddf58226076db1 100644
+index 339cb53d8a1468..1fcadbf6c19d79 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -511,6 +511,10 @@ var depsRules = `
- 	encoding/binary,
- 	crypto/internal/boring/bcache,
- 	crypto/internal/backend/fips140
+@@ -515,6 +515,10 @@ var depsRules = `
+ 	< crypto
+ 	< crypto/subtle
+ 	< crypto/cipher
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
 +	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +	< github.com/microsoft/go-crypto-winnative/cng
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
- 	< crypto/internal/fips140only
+ 	< crypto/internal/boring
 @@ -540,6 +544,7 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  

From f8de805abc3e5226fb3ab015a732ed51385cb102 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 8 Jan 2025 02:12:40 -0800
Subject: [PATCH 169/887] Notarize individual macOS files (#1463)

---
 eng/_util/cmd/sign/archive.go | 45 ++++++++++++++++++++++++++++-------
 eng/_util/cmd/sign/sign.go    | 20 ++++++++++++----
 2 files changed, 52 insertions(+), 13 deletions(-)

diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
index 08fad345ab1..920671c004d 100644
--- a/eng/_util/cmd/sign/archive.go
+++ b/eng/_util/cmd/sign/archive.go
@@ -95,11 +95,15 @@ func (a *archive) sigPath() string {
 }
 
 func (a *archive) macHardenPackPath() string {
-	return filepath.Join(a.workDir, a.name+".ToSignBundle.zip")
+	return filepath.Join(a.workDir, a.name+".ToHardenBundle.zip")
 }
 
-func (a *archive) macNotarizePackPath() string {
-	return filepath.Join(a.workDir, a.name+".ToNotarize.zip")
+func (a *archive) macIndividualNotarizePackPath() string {
+	return filepath.Join(a.workDir, a.name+".FilesToNotarize.zip")
+}
+
+func (a *archive) macBundleNotarizePackPath() string {
+	return filepath.Join(a.workDir, a.name+".BundlesToNotarize.zip")
 }
 
 // entrySignInfo returns signing details for a given file in the Go archive, or nil if the given
@@ -189,6 +193,31 @@ func (a *archive) prepareEntriesToSign(ctx context.Context) ([]*fileToSign, erro
 	return results, nil
 }
 
+func (a *archive) prepareIndividualNotarize(ctx context.Context) ([]*fileToSign, error) {
+	if err := ctx.Err(); err != nil {
+		return nil, err
+	}
+
+	if !a.archiveMacOS {
+		return nil, nil
+	}
+
+	// Simply send the hardened zip back to the signing service for notarization.
+	// Copy it first so that we can still access the hardened, pre-notarized files for diagnosis.
+	if err := copyFile(a.macIndividualNotarizePackPath(), a.macHardenPackPath()); err != nil {
+		return nil, err
+	}
+
+	return []*fileToSign{
+		{
+			originalPath: a.path,
+			fullPath:     a.macIndividualNotarizePackPath(),
+			authenticode: "8020", // Can't specify MacNotarize or MacAppName is not detected.
+			macAppName:   "MicrosoftGo",
+		},
+	}, nil
+}
+
 func (a *archive) extractMacOSEntriesToZip(ctx context.Context, zw *zip.Writer) error {
 	// Open tar.gz macOS archive to put files into the zip.
 	writtenNames := make(map[string]struct{})
@@ -249,7 +278,7 @@ func (a *archive) repackSignedEntries(ctx context.Context) error {
 			// Create the new tar.gz that we're assembling.
 			return withTarGzCreate(targetPath, func(outTW *tar.Writer) error {
 				// Open the zip payload we got back from the signing service.
-				return withZipOpen(a.macHardenPackPath(), func(zrc *zip.ReadCloser) error {
+				return withZipOpen(a.macIndividualNotarizePackPath(), func(zrc *zip.ReadCloser) error {
 					// Iterate through the original tar.gz file to populate the target.
 					return eachTarEntry(originalTR, func(hdr *tar.Header, originalR io.Reader) error {
 						if err := ctx.Err(); err != nil {
@@ -361,7 +390,7 @@ func (a *archive) writeTarRepackEntry(hdr *tar.Header, original io.Reader, signe
 	return nil
 }
 
-func (a *archive) prepareNotarize(ctx context.Context) ([]*fileToSign, error) {
+func (a *archive) prepareBundleNotarize(ctx context.Context) ([]*fileToSign, error) {
 	if err := ctx.Err(); err != nil {
 		return nil, err
 	}
@@ -378,12 +407,12 @@ func (a *archive) prepareNotarize(ctx context.Context) ([]*fileToSign, error) {
 	// not stapled: they are stored by Apple and downloaded on demand.
 	//
 	// If we do produce notarizable artifacts in the future, add the logic here to pack them in a
-	// zip and add logic to unpackNotarize to extract them back out, if zip submission is still a
-	// MicroBuild and/or ESRP requirement.
+	// zip and add logic to unpackBundleNotarize to extract them back out, if zip submission is
+	// still a MicroBuild and/or ESRP requirement.
 	return nil, nil
 }
 
-func (a *archive) unpackNotarize(ctx context.Context) error {
+func (a *archive) unpackBundleNotarize(ctx context.Context) error {
 	if err := ctx.Err(); err != nil {
 		return err
 	}
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index b1136205112..b91959a2a8e 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -101,27 +101,37 @@ func run() error {
 		return err
 	}
 
+	log.Println("Notarizing macOS individual files")
+
+	individualFilesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
+		return a.prepareIndividualNotarize(ctx)
+	})
+
+	if err := sign(ctx, "2-Notarize-Individual", individualFilesToNotarize); err != nil {
+		return err
+	}
+
 	for _, a := range archives {
 		if err := a.repackSignedEntries(ctx); err != nil {
 			return err
 		}
 	}
 
-	log.Println("Notarizing macOS archives")
+	log.Println("Notarizing macOS bundles")
 
 	filesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
-		return a.prepareNotarize(ctx)
+		return a.prepareBundleNotarize(ctx)
 	})
 	if err != nil {
 		return err
 	}
 
-	if err := sign(ctx, "2-Notarize", filesToNotarize); err != nil {
+	if err := sign(ctx, "3-Notarize-Bundles", filesToNotarize); err != nil {
 		return err
 	}
 
 	for _, a := range archives {
-		if err := a.unpackNotarize(ctx); err != nil {
+		if err := a.unpackBundleNotarize(ctx); err != nil {
 			return err
 		}
 	}
@@ -135,7 +145,7 @@ func run() error {
 		return err
 	}
 
-	if err := sign(ctx, "3-Sigs", signatureFiles); err != nil {
+	if err := sign(ctx, "4-Sigs", signatureFiles); err != nil {
 		return err
 	}
 

From 1eb2f56c23ee5917e165dbb98eb24813580d168d Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 8 Jan 2025 13:44:19 +0000
Subject: [PATCH 170/887] Use standardized hash.CloneHash interface (#1462)

---
 .../0002-Add-crypto-backend-foundation.patch  |  218 +-
 patches/0006-Vendor-crypto-backends.patch     | 2206 ++++++++---------
 2 files changed, 1263 insertions(+), 1161 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index 60c43ad8eaf..a9ae91f13d4 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -39,7 +39,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/md5/md5.go                         |   7 +
- src/crypto/md5/md5_test.go                    |  14 ++
+ src/crypto/md5/md5_test.go                    |  21 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   4 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
  src/crypto/purego_test.go                     |   2 +-
@@ -55,28 +55,28 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  12 +-
  src/crypto/sha1/sha1.go                       |   2 +-
- src/crypto/sha1/sha1_test.go                  |  12 +-
+ src/crypto/sha1/sha1_test.go                  |  19 +-
  src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  19 ++
+ src/crypto/sha256/sha256_test.go              |  29 +++
  src/crypto/sha512/sha512.go                   |   2 +-
- src/crypto/sha512/sha512_test.go              |  19 ++
+ src/crypto/sha512/sha512_test.go              |  29 +++
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  10 +-
  src/crypto/tls/handshake_client_tls13.go      |  14 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  24 +-
+ src/crypto/tls/handshake_server_tls13.go      |  25 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/go/build/deps_test.go                     |   8 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
- src/hash/marshal_test.go                      |   5 +
+ src/hash/marshal_test.go                      |   9 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 72 files changed, 1181 insertions(+), 86 deletions(-)
+ 72 files changed, 1217 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -1456,10 +1456,10 @@ index 75e1fc7404724a..60428f8e1201de 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
+index 437d9b9d4c0e0d..ee28c55f846e81 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
-@@ -6,6 +6,7 @@ package md5
+@@ -6,12 +6,14 @@ package md5
  
  import (
  	"bytes"
@@ -1467,7 +1467,14 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
-@@ -88,6 +89,11 @@ func TestGolden(t *testing.T) {
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ 	"unsafe"
+ )
+@@ -88,6 +90,11 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -1479,7 +1486,17 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  	for _, g := range golden {
  		h := New()
  		h2 := New()
-@@ -157,6 +163,9 @@ func TestLarge(t *testing.T) {
+@@ -96,6 +103,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 
+ 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 		if err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("could not marshal: %v", err)
+ 			continue
+ 		}
+@@ -157,6 +167,9 @@ func TestLarge(t *testing.T) {
  
  // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
  func TestBlockGeneric(t *testing.T) {
@@ -1489,7 +1506,7 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  	gen, asm := New().(*digest), New().(*digest)
  	buf := make([]byte, BlockSize*20) // arbitrary factor
  	rand.Read(buf)
-@@ -204,6 +213,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -204,10 +217,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -1501,6 +1518,13 @@ index 437d9b9d4c0e0d..5bc3e7b0f8435f 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
 index d40daab5e5b879..c32b3fd82b99b0 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
@@ -1862,10 +1886,10 @@ index b799f0d2fb1548..9aa23e9aa17e89 100644
  	"errors"
  	"hash"
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index 9d707b7cde5c2d..cb0c343afc46b6 100644
+index 9d707b7cde5c2d..8da08b3d860a85 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
-@@ -8,7 +8,7 @@ package sha1
+@@ -8,13 +8,14 @@ package sha1
  
  import (
  	"bytes"
@@ -1874,7 +1898,14 @@ index 9d707b7cde5c2d..cb0c343afc46b6 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
-@@ -97,6 +97,11 @@ func TestGolden(t *testing.T) {
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -97,6 +98,11 @@ func TestGolden(t *testing.T) {
  }
  
  func TestGoldenMarshal(t *testing.T) {
@@ -1886,7 +1917,17 @@ index 9d707b7cde5c2d..cb0c343afc46b6 100644
  	h := New()
  	h2 := New()
  	for _, g := range golden {
-@@ -210,6 +215,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -107,6 +113,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 
+ 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 		if err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("could not marshal: %v", err)
+ 			continue
+ 		}
+@@ -210,10 +219,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -1898,6 +1939,13 @@ index 9d707b7cde5c2d..cb0c343afc46b6 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
 index 069938a22dbc5a..8d0e06b86f4359 100644
 --- a/src/crypto/sha256/sha256.go
@@ -1930,10 +1978,10 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index e1af9640e25547..41df7dbebf7e7a 100644
+index e1af9640e25547..c4f142c1430285 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -8,6 +8,7 @@ package sha256
+@@ -8,11 +8,13 @@ package sha256
  
  import (
  	"bytes"
@@ -1941,7 +1989,13 @@ index e1af9640e25547..41df7dbebf7e7a 100644
  	"crypto/internal/cryptotest"
  	"encoding"
  	"fmt"
-@@ -155,6 +156,11 @@ func testGoldenMarshal(t *testing.T) {
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -155,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
  
  	for _, tt := range tests {
  		t.Run(tt.name, func(t *testing.T) {
@@ -1953,7 +2007,17 @@ index e1af9640e25547..41df7dbebf7e7a 100644
  			for _, g := range tt.gold {
  				h := tt.newHash()
  				h2 := tt.newHash()
-@@ -204,6 +210,14 @@ func TestMarshalTypeMismatch(t *testing.T) {
+@@ -163,6 +170,9 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 				if err != nil {
++					if strings.Contains(err.Error(), "hash state is not marshallable") {
++						t.Skip("BinaryMarshaler not supported")
++					}
+ 					t.Errorf("could not marshal: %v", err)
+ 					continue
+ 				}
+@@ -204,8 +214,19 @@ func TestMarshalTypeMismatch(t *testing.T) {
  	h1 := New()
  	h2 := New224()
  
@@ -1967,8 +2031,13 @@ index e1af9640e25547..41df7dbebf7e7a 100644
 +
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
++		if strings.Contains(err.Error(), "hash state is not marshallable") {
++			t.Skip("BinaryMarshaler not supported")
++		}
  		t.Errorf("could not marshal: %v", err)
-@@ -275,6 +289,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ 	}
+ 
+@@ -275,10 +296,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -1980,6 +2049,13 @@ index e1af9640e25547..41df7dbebf7e7a 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
 index 1435eac1f5b5dc..17e8501154762a 100644
 --- a/src/crypto/sha512/sha512.go
@@ -1994,10 +2070,10 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 1fe9d132bb186d..a2c2926359a192 100644
+index 1fe9d132bb186d..97b7da8c2d3d88 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
-@@ -8,6 +8,7 @@ package sha512
+@@ -8,12 +8,14 @@ package sha512
  
  import (
  	"bytes"
@@ -2005,7 +2081,14 @@ index 1fe9d132bb186d..a2c2926359a192 100644
  	"crypto/internal/cryptotest"
  	"encoding"
  	"encoding/hex"
-@@ -744,6 +745,11 @@ func testGoldenMarshal(t *testing.T) {
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -744,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
  	for _, tt := range tests {
  		t.Run(tt.name, func(t *testing.T) {
  			for _, test := range tt.golden {
@@ -2017,7 +2100,17 @@ index 1fe9d132bb186d..a2c2926359a192 100644
  				h := tt.newHash()
  				h2 := tt.newHash()
  
-@@ -805,6 +811,14 @@ func TestMarshalMismatch(t *testing.T) {
+@@ -751,6 +758,9 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 				if err != nil {
++					if strings.Contains(err.Error(), "hash state is not marshallable") {
++						t.Skip("BinaryMarshaler not supported")
++					}
+ 					t.Errorf("could not marshal: %v", err)
+ 					return
+ 				}
+@@ -805,8 +815,19 @@ func TestMarshalMismatch(t *testing.T) {
  			h1 := fn1()
  			h2 := fn2()
  
@@ -2031,8 +2124,13 @@ index 1fe9d132bb186d..a2c2926359a192 100644
 +
  			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  			if err != nil {
++				if strings.Contains(err.Error(), "hash state is not marshallable") {
++					t.Skip("BinaryMarshaler not supported")
++				}
  				t.Errorf("i=%d: could not marshal: %v", i, err)
-@@ -880,6 +894,11 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ 				continue
+ 			}
+@@ -880,10 +901,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -2044,6 +2142,13 @@ index 1fe9d132bb186d..a2c2926359a192 100644
  	for i, test := range largeUnmarshalTests {
  
  		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index 01d65688284f97..d8a26c24024348 100644
 --- a/src/crypto/tls/cipher_suites.go
@@ -2168,7 +2273,7 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 76fff6974e7403..218d40171d2567 100644
+index 76fff6974e7403..bccf52fb28fcc5 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -8,8 +8,9 @@ import (
@@ -2182,23 +2287,30 @@ index 76fff6974e7403..218d40171d2567 100644
  	"crypto/internal/fips140/mlkem"
  	"crypto/internal/fips140/tls13"
  	"crypto/internal/hpke"
-@@ -477,6 +478,15 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
- 	}
- 	marshaler, ok := in.(binaryMarshaler)
- 	if !ok {
-+		if boring.Enabled {
-+			// CNG and OpenSSL with SymCrypt hash functions do not implement the
-+			// encoding.BinaryMarshaler interface, but they do implement the Clone method.
-+			if cloner, ok := in.(interface{ Clone() (hash.Hash, error) }); ok {
-+				if out, err := cloner.Clone(); err == nil {
-+					return out
-+				}
-+			}
+@@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
+ // interfaces implemented by standard library hashes to clone the state of in
+ // to a new instance of h. It returns nil if the operation fails.
+ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
++	if boring.Enabled {
++		// CNG and OpenSSL with SymCrypt hash functions do not implement the
++		// encoding.BinaryMarshaler interface, but they do implement the Clone method.
++		if cloner, ok := in.(interface{ Clone() hash.Hash }); ok {
++			return cloner.Clone()
 +		}
- 		return nil
++	}
+ 	// Recreate the interface to avoid importing encoding.
+ 	type binaryMarshaler interface {
+ 		MarshalBinary() (data []byte, err error)
+ 		UnmarshalBinary(data []byte) error
  	}
+ 	marshaler, ok := in.(binaryMarshaler)
+-	if !ok {
+-		return nil
+-	}
  	state, err := marshaler.MarshalBinary()
-@@ -572,8 +582,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
+ 	if err != nil {
+ 		return nil
+@@ -572,8 +577,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
  		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
  			return nil, err
  		}
@@ -2212,7 +2324,7 @@ index 76fff6974e7403..218d40171d2567 100644
  			"hrr ech accept confirmation",
  			confTranscript.Sum(nil),
  			8,
-@@ -734,9 +748,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
+@@ -734,9 +743,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
  		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
  			return err
  		}
@@ -2392,10 +2504,18 @@ index f07b9aaa2c4898..b380537215634d 100644
  
  import (
 diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..fead8cc4bec73a 100644
+index 3091f7a67acede..23736034d5c352 100644
 --- a/src/hash/marshal_test.go
 +++ b/src/hash/marshal_test.go
-@@ -65,6 +65,11 @@ func TestMarshalHash(t *testing.T) {
+@@ -21,6 +21,7 @@ import (
+ 	"hash/crc32"
+ 	"hash/crc64"
+ 	"hash/fnv"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -65,6 +66,11 @@ func TestMarshalHash(t *testing.T) {
  			}
  
  			h := tt.new()
@@ -2407,6 +2527,16 @@ index 3091f7a67acede..fead8cc4bec73a 100644
  			h.Write(buf[:256])
  			sum := h.Sum(nil)
  
+@@ -80,6 +86,9 @@ func TestMarshalHash(t *testing.T) {
+ 			}
+ 			enc, err := h2m.MarshalBinary()
+ 			if err != nil {
++				if strings.Contains(err.Error(), "hash state is not marshallable") {
++					t.Skip("BinaryMarshaler not supported")
++				}
+ 				t.Fatalf("MarshalBinary: %v", err)
+ 			}
+ 			if !bytes.Equal(enc, tt.golden) {
 diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
 new file mode 100644
 index 00000000000000..11dc691600b110
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index 2aebec3fff2..5a08acdfbfc 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -5,70 +5,73 @@ Subject: [PATCH] Vendor crypto backends
 
 To reproduce, run 'go mod vendor' in 'go/src'.
 ---
- .../golang-fips/openssl/v2/.gitignore         |    1 +
- .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
- .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
- .../golang-fips/openssl/v2/README.md          |   66 ++
- .../github.com/golang-fips/openssl/v2/aes.go  |  147 +++
- .../golang-fips/openssl/v2/bbig/big.go        |   37 +
- .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../golang-fips/openssl/v2/cgo_go124.go       |   18 +
- .../golang-fips/openssl/v2/cipher.go          |  569 +++++++++
- .../github.com/golang-fips/openssl/v2/des.go  |  114 ++
- .../github.com/golang-fips/openssl/v2/dsa.go  |  323 +++++
- .../github.com/golang-fips/openssl/v2/ec.go   |   68 ++
- .../github.com/golang-fips/openssl/v2/ecdh.go |  303 +++++
- .../golang-fips/openssl/v2/ecdsa.go           |  208 ++++
- .../golang-fips/openssl/v2/ed25519.go         |  218 ++++
- .../github.com/golang-fips/openssl/v2/evp.go  |  569 +++++++++
- .../golang-fips/openssl/v2/goopenssl.c        |  248 ++++
- .../golang-fips/openssl/v2/goopenssl.h        |  262 +++++
- .../github.com/golang-fips/openssl/v2/hash.go | 1041 +++++++++++++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  322 +++++
- .../github.com/golang-fips/openssl/v2/hmac.go |  274 +++++
- .../github.com/golang-fips/openssl/v2/init.go |   64 +
- .../golang-fips/openssl/v2/init_unix.go       |   31 +
- .../golang-fips/openssl/v2/init_windows.go    |   36 +
- .../golang-fips/openssl/v2/openssl.go         |  469 ++++++++
- .../golang-fips/openssl/v2/params.go          |  210 ++++
- .../golang-fips/openssl/v2/pbkdf2.go          |   62 +
- .../golang-fips/openssl/v2/port_dsa.c         |   85 ++
- .../openssl/v2/port_evp_md5_sha1.c            |  126 ++
- .../github.com/golang-fips/openssl/v2/rand.go |   20 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |   66 ++
- .../github.com/golang-fips/openssl/v2/rsa.go  |  408 +++++++
- .../github.com/golang-fips/openssl/v2/shims.h |  416 +++++++
- .../golang-fips/openssl/v2/thread_setup.go    |   14 +
- .../golang-fips/openssl/v2/thread_setup.h     |    4 +
- .../openssl/v2/thread_setup_unix.c            |   64 +
- .../openssl/v2/thread_setup_windows.c         |   64 +
- .../golang-fips/openssl/v2/tls1prf.go         |  160 +++
- .../github.com/golang-fips/openssl/v2/zaes.go |   86 ++
- .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  393 +++++++
- .../go-crypto-winnative/cng/bbig/big.go       |   31 +
- .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
- .../go-crypto-winnative/cng/cipher.go         |   52 +
- .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +++
- .../microsoft/go-crypto-winnative/cng/des.go  |  106 ++
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++++++
- .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++++
- .../go-crypto-winnative/cng/ecdsa.go          |  169 +++
- .../microsoft/go-crypto-winnative/cng/hash.go |  306 +++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  124 ++
- .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
- .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++++
- .../go-crypto-winnative/cng/pbkdf2.go         |   70 ++
- .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
- .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
- .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++++++
- .../go-crypto-winnative/cng/tls1prf.go        |   88 ++
- .../internal/bcrypt/bcrypt_windows.go         |  359 ++++++
- .../internal/bcrypt/zsyscall_windows.go       |  389 ++++++
- .../internal/subtle/aliasing.go               |   32 +
- .../internal/sysdll/sys_windows.go            |   55 +
- src/vendor/modules.txt                        |   11 +
- 63 files changed, 11044 insertions(+)
+ src/go.mod                                    |   4 +-
+ src/go.sum                                    |   8 +-
+ .../golang-fips/openssl/v2/.gitignore         |   1 +
+ .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
+ .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
+ .../golang-fips/openssl/v2/README.md          |  66 ++
+ .../github.com/golang-fips/openssl/v2/aes.go  | 147 ++++
+ .../golang-fips/openssl/v2/bbig/big.go        |  37 +
+ .../github.com/golang-fips/openssl/v2/big.go  |  11 +
+ .../golang-fips/openssl/v2/cgo_go124.go       |  18 +
+ .../golang-fips/openssl/v2/cipher.go          | 569 ++++++++++++++
+ .../github.com/golang-fips/openssl/v2/des.go  | 114 +++
+ .../github.com/golang-fips/openssl/v2/dsa.go  | 323 ++++++++
+ .../github.com/golang-fips/openssl/v2/ec.go   |  68 ++
+ .../github.com/golang-fips/openssl/v2/ecdh.go | 303 ++++++++
+ .../golang-fips/openssl/v2/ecdsa.go           | 208 +++++
+ .../golang-fips/openssl/v2/ed25519.go         | 228 ++++++
+ .../github.com/golang-fips/openssl/v2/evp.go  | 580 ++++++++++++++
+ .../golang-fips/openssl/v2/goopenssl.c        | 248 ++++++
+ .../golang-fips/openssl/v2/goopenssl.h        | 261 +++++++
+ .../github.com/golang-fips/openssl/v2/hash.go | 714 ++++++++++++++++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go | 322 ++++++++
+ .../github.com/golang-fips/openssl/v2/hmac.go | 274 +++++++
+ .../github.com/golang-fips/openssl/v2/init.go |  64 ++
+ .../golang-fips/openssl/v2/init_unix.go       |  31 +
+ .../golang-fips/openssl/v2/init_windows.go    |  36 +
+ .../golang-fips/openssl/v2/openssl.go         | 469 ++++++++++++
+ .../golang-fips/openssl/v2/params.go          | 210 ++++++
+ .../golang-fips/openssl/v2/pbkdf2.go          |  62 ++
+ .../golang-fips/openssl/v2/port_dsa.c         |  85 +++
+ .../github.com/golang-fips/openssl/v2/rand.go |  20 +
+ .../github.com/golang-fips/openssl/v2/rc4.go  |  66 ++
+ .../github.com/golang-fips/openssl/v2/rsa.go  | 408 ++++++++++
+ .../github.com/golang-fips/openssl/v2/shims.h | 413 ++++++++++
+ .../golang-fips/openssl/v2/thread_setup.go    |  14 +
+ .../golang-fips/openssl/v2/thread_setup.h     |   4 +
+ .../openssl/v2/thread_setup_unix.c            |  64 ++
+ .../openssl/v2/thread_setup_windows.c         |  64 ++
+ .../golang-fips/openssl/v2/tls1prf.go         | 160 ++++
+ .../github.com/golang-fips/openssl/v2/zaes.go |  86 +++
+ .../microsoft/go-crypto-winnative/LICENSE     |  21 +
+ .../microsoft/go-crypto-winnative/cng/aes.go  | 393 ++++++++++
+ .../go-crypto-winnative/cng/bbig/big.go       |  31 +
+ .../microsoft/go-crypto-winnative/cng/big.go  |  30 +
+ .../go-crypto-winnative/cng/cipher.go         |  52 ++
+ .../microsoft/go-crypto-winnative/cng/cng.go  | 131 ++++
+ .../microsoft/go-crypto-winnative/cng/des.go  | 106 +++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  | 465 ++++++++++++
+ .../microsoft/go-crypto-winnative/cng/ecdh.go | 255 +++++++
+ .../go-crypto-winnative/cng/ecdsa.go          | 169 +++++
+ .../microsoft/go-crypto-winnative/cng/hash.go | 312 ++++++++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go | 124 +++
+ .../microsoft/go-crypto-winnative/cng/hmac.go |  35 +
+ .../microsoft/go-crypto-winnative/cng/keys.go | 220 ++++++
+ .../go-crypto-winnative/cng/pbkdf2.go         |  70 ++
+ .../microsoft/go-crypto-winnative/cng/rand.go |  28 +
+ .../microsoft/go-crypto-winnative/cng/rc4.go  |  65 ++
+ .../microsoft/go-crypto-winnative/cng/rsa.go  | 396 ++++++++++
+ .../microsoft/go-crypto-winnative/cng/sha3.go | 284 +++++++
+ .../go-crypto-winnative/cng/tls1prf.go        |  88 +++
+ .../internal/bcrypt/bcrypt_windows.go         | 368 +++++++++
+ .../internal/bcrypt/ntstatus_windows.go       |  45 ++
+ .../internal/bcrypt/zsyscall_windows.go       | 412 ++++++++++
+ .../internal/subtle/aliasing.go               |  32 +
+ .../internal/sysdll/sys_windows.go            |  55 ++
+ src/vendor/modules.txt                        |  11 +
+ 66 files changed, 10981 insertions(+), 6 deletions(-)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
@@ -97,7 +100,6 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rand.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rc4.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rsa.go
@@ -126,12 +128,45 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rand.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rc4.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/ntstatus_windows.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
+diff --git a/src/go.mod b/src/go.mod
+index e9da0eb1301b93..96bdcd421e1129 100644
+--- a/src/go.mod
++++ b/src/go.mod
+@@ -3,8 +3,8 @@ module std
+ go 1.24
+ 
+ require (
+-	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
+-	github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
+ 	golang.org/x/crypto v0.30.0
+ 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
+ )
+diff --git a/src/go.sum b/src/go.sum
+index b464f023942b74..abebb59dcd7739 100644
+--- a/src/go.sum
++++ b/src/go.sum
+@@ -1,7 +1,7 @@
+-github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
+-github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
+-github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383 h1:fMAxrMWT19/kkIZIuB9cjqW8SqRxCH2+2ZiZr5qrpuI=
+-github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
+ golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
+ golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+ golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
 index 00000000000000..79b5594df7fa29
@@ -2113,10 +2148,10 @@ index 00000000000000..bc5f1117fd4355
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..cd237025109997
+index 00000000000000..f96db2cd5efcad
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,218 @@
+@@ -0,0 +1,228 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2209,7 +2244,7 @@ index 00000000000000..cd237025109997
 +	if err := extractPKEYPubEd25519(k._pkey, pub); err != nil {
 +		return nil, err
 +	}
-+	pubk, err := NewPublicKeyEd25119(pub)
++	pubk, err := NewPublicKeyEd25519(pub)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -2227,14 +2262,24 @@ index 00000000000000..cd237025109997
 +	return priv, nil
 +}
 +
++// Deprecated: use NewPrivateKeyEd25519 instead.
 +func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++	return NewPrivateKeyEd25519(priv)
++}
++
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
 +	if len(priv) != privateKeySizeEd25519 {
 +		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
 +	}
 +	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
 +}
 +
++// Deprecated: use NewPublicKeyEd25519 instead.
 +func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++	return NewPublicKeyEd25519(pub)
++}
++
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
 +	if len(pub) != publicKeySizeEd25519 {
 +		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
 +	}
@@ -2337,10 +2382,10 @@ index 00000000000000..cd237025109997
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..ef68bbfb8fb065
+index 00000000000000..8b5b367f9f8092
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,569 @@
+@@ -0,0 +1,580 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2391,29 +2436,8 @@ index 00000000000000..ef68bbfb8fb065
 +
 +// hashToMD converts a hash.Hash implementation from this package to a GO_EVP_MD_PTR.
 +func hashToMD(h hash.Hash) C.GO_EVP_MD_PTR {
-+	var ch crypto.Hash
-+	switch h.(type) {
-+	case *sha1Hash, *sha1Marshal:
-+		ch = crypto.SHA1
-+	case *sha224Hash, *sha224Marshal:
-+		ch = crypto.SHA224
-+	case *sha256Hash, *sha256Marshal:
-+		ch = crypto.SHA256
-+	case *sha384Hash, *sha384Marshal:
-+		ch = crypto.SHA384
-+	case *sha512Hash, *sha512Marshal:
-+		ch = crypto.SHA512
-+	case *sha3_224Hash:
-+		ch = crypto.SHA3_224
-+	case *sha3_256Hash:
-+		ch = crypto.SHA3_256
-+	case *sha3_384Hash:
-+		ch = crypto.SHA3_384
-+	case *sha3_512Hash:
-+		ch = crypto.SHA3_512
-+	}
-+	if ch != 0 {
-+		return cryptoHashToMD(ch)
++	if h, ok := h.(*evpHash); ok {
++		return h.alg.md
 +	}
 +	return nil
 +}
@@ -2432,78 +2456,110 @@ index 00000000000000..ef68bbfb8fb065
 +	return md, nil
 +}
 +
-+// cryptoHashToMD converts a crypto.Hash to a GO_EVP_MD_PTR.
-+func cryptoHashToMD(ch crypto.Hash) (md C.GO_EVP_MD_PTR) {
++type hashAlgorithm struct {
++	md             C.GO_EVP_MD_PTR
++	ch             crypto.Hash
++	size           int
++	blockSize      int
++	marshallable   bool
++	magic          string
++	marshalledSize int
++}
++
++// loadHash converts a crypto.Hash to a EVP_MD.
++func loadHash(ch crypto.Hash) *hashAlgorithm {
 +	if v, ok := cacheMD.Load(ch); ok {
-+		return v.(C.GO_EVP_MD_PTR)
-+	}
-+	defer func() {
-+		if md != nil {
-+			switch vMajor {
-+			case 1:
-+				// On OpenSSL 1 EVP_MD objects can be not-nil even
-+				// when they are not supported. We need to pass the md
-+				// to a EVP_MD_CTX to really know if they can be used.
-+				ctx := C.go_openssl_EVP_MD_CTX_new()
-+				if C.go_openssl_EVP_DigestInit_ex(ctx, md, nil) != 1 {
-+					md = nil
-+				}
-+				C.go_openssl_EVP_MD_CTX_free(ctx)
-+			case 3:
-+				// On OpenSSL 3, directly operating on a EVP_MD object
-+				// not created by EVP_MD_fetch has negative performance
-+				// implications, as digest operations will have
-+				// to fetch it on every call. Better to just fetch it once here.
-+				md = C.go_openssl_EVP_MD_fetch(nil, C.go_openssl_EVP_MD_get0_name(md), nil)
-+			default:
-+				panic(errUnsupportedVersion())
-+			}
-+		}
-+		cacheMD.Store(ch, md)
-+	}()
-+	// SupportsHash returns false for MD5SHA1 because we don't
-+	// provide a hash.Hash implementation for it. Yet, it can
-+	// still be used when signing/verifying with an RSA key.
-+	if ch == crypto.MD5SHA1 {
-+		if vMajor == 1 && vMinor == 0 {
-+			return C.go_openssl_EVP_md5_sha1_backport()
-+		} else {
-+			return C.go_openssl_EVP_md5_sha1()
-+		}
++		return v.(*hashAlgorithm)
 +	}
++
++	var hash hashAlgorithm
 +	switch ch {
++	case crypto.RIPEMD160:
++		hash.md = C.go_openssl_EVP_ripemd160()
 +	case crypto.MD4:
-+		return C.go_openssl_EVP_md4()
++		hash.md = C.go_openssl_EVP_md4()
 +	case crypto.MD5:
-+		return C.go_openssl_EVP_md5()
++		hash.md = C.go_openssl_EVP_md5()
++		hash.magic = md5Magic
++		hash.marshalledSize = md5MarshaledSize
++	case crypto.MD5SHA1:
++		if vMajor == 1 && vMinor == 0 {
++			// OpenSSL 1.0.2 does not support MD5SHA1.
++			hash.md = nil
++		} else {
++			hash.md = C.go_openssl_EVP_md5_sha1()
++		}
 +	case crypto.SHA1:
-+		return C.go_openssl_EVP_sha1()
++		hash.md = C.go_openssl_EVP_sha1()
++		hash.magic = sha1Magic
++		hash.marshalledSize = sha1MarshaledSize
 +	case crypto.SHA224:
-+		return C.go_openssl_EVP_sha224()
++		hash.md = C.go_openssl_EVP_sha224()
++		hash.magic = magic224
++		hash.marshalledSize = marshaledSize256
 +	case crypto.SHA256:
-+		return C.go_openssl_EVP_sha256()
++		hash.md = C.go_openssl_EVP_sha256()
++		hash.magic = magic256
++		hash.marshalledSize = marshaledSize256
 +	case crypto.SHA384:
-+		return C.go_openssl_EVP_sha384()
++		hash.md = C.go_openssl_EVP_sha384()
++		hash.magic = magic384
++		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA512:
-+		return C.go_openssl_EVP_sha512()
++		hash.md = C.go_openssl_EVP_sha512()
++		hash.magic = magic512
++		hash.marshalledSize = marshaledSize512
++	case crypto.SHA512_224:
++		if versionAtOrAbove(1, 1, 1) {
++			hash.md = C.go_openssl_EVP_sha512_224()
++			hash.magic = magic512_224
++			hash.marshalledSize = marshaledSize512
++		}
++	case crypto.SHA512_256:
++		if versionAtOrAbove(1, 1, 1) {
++			hash.md = C.go_openssl_EVP_sha512_256()
++			hash.magic = magic512_256
++			hash.marshalledSize = marshaledSize512
++		}
 +	case crypto.SHA3_224:
 +		if versionAtOrAbove(1, 1, 1) {
-+			return C.go_openssl_EVP_sha3_224()
++			hash.md = C.go_openssl_EVP_sha3_224()
 +		}
 +	case crypto.SHA3_256:
 +		if versionAtOrAbove(1, 1, 1) {
-+			return C.go_openssl_EVP_sha3_256()
++			hash.md = C.go_openssl_EVP_sha3_256()
 +		}
 +	case crypto.SHA3_384:
 +		if versionAtOrAbove(1, 1, 1) {
-+			return C.go_openssl_EVP_sha3_384()
++			hash.md = C.go_openssl_EVP_sha3_384()
 +		}
 +	case crypto.SHA3_512:
 +		if versionAtOrAbove(1, 1, 1) {
-+			return C.go_openssl_EVP_sha3_512()
++			hash.md = C.go_openssl_EVP_sha3_512()
 +		}
 +	}
-+	return nil
++	if hash.md == nil {
++		cacheMD.Store(ch, (*hashAlgorithm)(nil))
++		return nil
++	}
++	hash.ch = ch
++	hash.size = int(C.go_openssl_EVP_MD_get_size(hash.md))
++	hash.blockSize = int(C.go_openssl_EVP_MD_get_block_size(hash.md))
++	if vMajor == 3 {
++		// On OpenSSL 3, directly operating on a EVP_MD object
++		// not created by EVP_MD_fetch has negative performance
++		// implications, as digest operations will have
++		// to fetch it on every call. Better to just fetch it once here.
++		md := C.go_openssl_EVP_MD_fetch(nil, C.go_openssl_EVP_MD_get0_name(hash.md), nil)
++		// Don't overwrite md in case it can't be fetched, as the md may still be used
++		// outside of EVP_MD_CTX, for example to sign and verify RSA signatures.
++		if md != nil {
++			hash.md = md
++		}
++	}
++	hash.marshallable = hash.magic != "" && isHashMarshallable(hash.md)
++	cacheMD.Store(ch, &hash)
++	return &hash
 +}
 +
 +// generateEVPPKey generates a new EVP_PKEY with the given id and properties.
@@ -2645,11 +2701,11 @@ index 00000000000000..ef68bbfb8fb065
 +			}
 +		}
 +	case C.GO_RSA_PKCS1_PSS_PADDING:
-+		md := cryptoHashToMD(ch)
-+		if md == nil {
++		alg := loadHash(ch)
++		if alg == nil {
 +			return nil, errors.New("crypto/rsa: unsupported hash function")
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(md)) != 1 {
++		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)) != 1 {
 +			return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
 +		}
 +		// setPadding must happen after setting EVP_PKEY_CTRL_MD.
@@ -2665,11 +2721,11 @@ index 00000000000000..ef68bbfb8fb065
 +	case C.GO_RSA_PKCS1_PADDING:
 +		if ch != 0 {
 +			// We support unhashed messages.
-+			md := cryptoHashToMD(ch)
-+			if md == nil {
++			alg := loadHash(ch)
++			if alg == nil {
 +				return nil, errors.New("crypto/rsa: unsupported hash function")
 +			}
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(md)) != 1 {
++			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)) != 1 {
 +				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
 +			}
 +			if err := setPadding(); err != nil {
@@ -2784,8 +2840,8 @@ index 00000000000000..ef68bbfb8fb065
 +}
 +
 +func evpHashSign(withKey withKeyFunc, h crypto.Hash, msg []byte) ([]byte, error) {
-+	md := cryptoHashToMD(h)
-+	if md == nil {
++	alg := loadHash(h)
++	if alg == nil {
 +		return nil, errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
 +	var out []byte
@@ -2796,7 +2852,7 @@ index 00000000000000..ef68bbfb8fb065
 +	}
 +	defer C.go_openssl_EVP_MD_CTX_free(ctx)
 +	if withKey(func(key C.GO_EVP_PKEY_PTR) C.int {
-+		return C.go_openssl_EVP_DigestSignInit(ctx, nil, md, nil, key)
++		return C.go_openssl_EVP_DigestSignInit(ctx, nil, alg.md, nil, key)
 +	}) != 1 {
 +		return nil, newOpenSSLError("EVP_DigestSignInit failed")
 +	}
@@ -2816,8 +2872,8 @@ index 00000000000000..ef68bbfb8fb065
 +}
 +
 +func evpHashVerify(withKey withKeyFunc, h crypto.Hash, msg, sig []byte) error {
-+	md := cryptoHashToMD(h)
-+	if md == nil {
++	alg := loadHash(h)
++	if alg == nil {
 +		return errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
 +	ctx := C.go_openssl_EVP_MD_CTX_new()
@@ -2826,7 +2882,7 @@ index 00000000000000..ef68bbfb8fb065
 +	}
 +	defer C.go_openssl_EVP_MD_CTX_free(ctx)
 +	if withKey(func(key C.GO_EVP_PKEY_PTR) C.int {
-+		return C.go_openssl_EVP_DigestVerifyInit(ctx, nil, md, nil, key)
++		return C.go_openssl_EVP_DigestVerifyInit(ctx, nil, alg.md, nil, key)
 +	}) != 1 {
 +		return newOpenSSLError("EVP_DigestVerifyInit failed")
 +	}
@@ -3166,10 +3222,10 @@ index 00000000000000..626f184badc53d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
 new file mode 100644
-index 00000000000000..1165f99157c663
+index 00000000000000..f5cdced630679f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
-@@ -0,0 +1,262 @@
+@@ -0,0 +1,261 @@
 +// This header file describes the OpenSSL ABI as built for use in Go.
 +
 +#include <stdlib.h> // size_t
@@ -3199,7 +3255,6 @@ index 00000000000000..1165f99157c663
 +int go_openssl_version_patch(void* handle);
 +int go_openssl_thread_setup(void);
 +void go_openssl_load_functions(void* handle, unsigned int major, unsigned int minor, unsigned int patch);
-+const GO_EVP_MD_PTR go_openssl_EVP_md5_sha1_backport(void);
 +void go_openssl_DSA_get0_pqg_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *p, GO_BIGNUM_PTR *q, GO_BIGNUM_PTR *g);
 +int go_openssl_DSA_set0_pqg_backport(GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g);
 +void go_openssl_DSA_get0_key_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *pub_key, GO_BIGNUM_PTR *priv_key);
@@ -3435,10 +3490,10 @@ index 00000000000000..1165f99157c663
 \ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..6fd3a518906004
+index 00000000000000..b2109857b49bdf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,1041 @@
+@@ -0,0 +1,714 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3455,6 +3510,9 @@ index 00000000000000..6fd3a518906004
 +	"unsafe"
 +)
 +
++// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
++const maxHashSize = 64
++
 +// NOTE: Implementation ported from https://go-review.googlesource.com/c/go/+/404295.
 +// The cgo calls in this file are arranged to avoid marking the parameters as escaping.
 +// To do that, we call noescape (including via addr).
@@ -3467,7 +3525,7 @@ index 00000000000000..6fd3a518906004
 +// This is all to preserve compatibility with the allocation behavior of the non-openssl implementations.
 +
 +func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
-+	return C.go_openssl_EVP_Digest(unsafe.Pointer(&*addr(p)), C.size_t(len(p)), (*C.uchar)(unsafe.Pointer(&*addr(sum))), nil, cryptoHashToMD(ch), nil) != 0
++	return C.go_openssl_EVP_Digest(unsafe.Pointer(&*addr(p)), C.size_t(len(p)), (*C.uchar)(unsafe.Pointer(&*addr(sum))), nil, loadHash(ch).md, nil) != 0
 +}
 +
 +func MD4(p []byte) (sum [16]byte) {
@@ -3519,9 +3577,43 @@ index 00000000000000..6fd3a518906004
 +	return
 +}
 +
-+// SupportsHash returns true if a hash.Hash implementation is supported for h.
++func SHA512_224(p []byte) (sum [28]byte) {
++	if !hashOneShot(crypto.SHA512_224, p, sum[:]) {
++		panic("openssl: SHA512 failed")
++	}
++	return
++}
++
++func SHA512_256(p []byte) (sum [32]byte) {
++	if !hashOneShot(crypto.SHA512_256, p, sum[:]) {
++		panic("openssl: SHA512_256 failed")
++	}
++	return
++}
++
++// cacheHashSupported is a cache of crypto.Hash support.
++var cacheHashSupported sync.Map
++
++// SupportsHash reports whether the current OpenSSL version supports the given hash.
 +func SupportsHash(h crypto.Hash) bool {
-+	return cryptoHashToMD(h) != nil
++	if v, ok := cacheHashSupported.Load(h); ok {
++		return v.(bool)
++	}
++	alg := loadHash(h)
++	if alg == nil {
++		cacheHashSupported.Store(h, false)
++		return false
++	}
++	// EVP_MD objects can be non-nil even when they can't be used
++	// in a EVP_MD_CTX, e.g. MD5 in FIPS mode. We need to prove
++	// if they can be used by passing them to a EVP_MD_CTX.
++	var supported bool
++	if ctx := C.go_openssl_EVP_MD_CTX_new(); ctx != nil {
++		supported = C.go_openssl_EVP_DigestInit_ex(ctx, alg.md, nil) == 1
++		C.go_openssl_EVP_MD_CTX_free(ctx)
++	}
++	cacheHashSupported.Store(h, supported)
++	return supported
 +}
 +
 +func SHA3_224(p []byte) (sum [28]byte) {
@@ -3552,21 +3644,79 @@ index 00000000000000..6fd3a518906004
 +	return
 +}
 +
-+var isMarshallableCache sync.Map
++// NewMD4 returns a new MD4 hash.
++// The returned hash doesn't implement encoding.BinaryMarshaler and
++// encoding.BinaryUnmarshaler.
++func NewMD4() hash.Hash {
++	return newEvpHash(crypto.MD4)
++}
++
++// NewMD5 returns a new MD5 hash.
++func NewMD5() hash.Hash {
++	return newEvpHash(crypto.MD5)
++}
++
++// NewSHA1 returns a new SHA1 hash.
++func NewSHA1() hash.Hash {
++	return newEvpHash(crypto.SHA1)
++}
++
++// NewSHA224 returns a new SHA224 hash.
++func NewSHA224() hash.Hash {
++	return newEvpHash(crypto.SHA224)
++}
++
++// NewSHA256 returns a new SHA256 hash.
++func NewSHA256() hash.Hash {
++	return newEvpHash(crypto.SHA256)
++}
++
++// NewSHA384 returns a new SHA384 hash.
++func NewSHA384() hash.Hash {
++	return newEvpHash(crypto.SHA384)
++}
++
++// NewSHA512 returns a new SHA512 hash.
++func NewSHA512() hash.Hash {
++	return newEvpHash(crypto.SHA512)
++}
++
++// NewSHA512_224 returns a new SHA512_224 hash.
++func NewSHA512_224() hash.Hash {
++	return newEvpHash(crypto.SHA512_224)
++}
++
++// NewSHA512_256 returns a new SHA512_256 hash.
++func NewSHA512_256() hash.Hash {
++	return newEvpHash(crypto.SHA512_256)
++}
++
++// NewSHA3_224 returns a new SHA3-224 hash.
++func NewSHA3_224() hash.Hash {
++	return newEvpHash(crypto.SHA3_224)
++}
 +
-+// isHashMarshallable returns true if the memory layout of cb
++// NewSHA3_256 returns a new SHA3-256 hash.
++func NewSHA3_256() hash.Hash {
++	return newEvpHash(crypto.SHA3_256)
++}
++
++// NewSHA3_384 returns a new SHA3-384 hash.
++func NewSHA3_384() hash.Hash {
++	return newEvpHash(crypto.SHA3_384)
++}
++
++// NewSHA3_512 returns a new SHA3-512 hash.
++func NewSHA3_512() hash.Hash {
++	return newEvpHash(crypto.SHA3_512)
++}
++
++// isHashMarshallable returns true if the memory layout of md
 +// is known by this library and can therefore be marshalled.
-+func isHashMarshallable(ch crypto.Hash) bool {
++func isHashMarshallable(md C.GO_EVP_MD_PTR) bool {
 +	if vMajor == 1 {
 +		return true
 +	}
-+	if v, ok := isMarshallableCache.Load(ch); ok {
-+		return v.(bool)
-+	}
-+	md := cryptoHashToMD(ch)
-+	if md == nil {
-+		return false
-+	}
 +	prov := C.go_openssl_EVP_MD_get0_provider(md)
 +	if prov == nil {
 +		return false
@@ -3579,51 +3729,73 @@ index 00000000000000..6fd3a518906004
 +	// We only know the memory layout of the built-in providers.
 +	// See evpHash.hashState for more details.
 +	marshallable := name == "default" || name == "fips"
-+	isMarshallableCache.Store(ch, marshallable)
 +	return marshallable
 +}
 +
++// cloneHash is an interface that defines a Clone method.
++//
++// hahs.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
++// but we need it now.
++type cloneHash interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() hash.Hash
++}
++
++var _ hash.Hash = (*evpHash)(nil)
++var _ cloneHash = (*evpHash)(nil)
++
 +// evpHash implements generic hash methods.
 +type evpHash struct {
++	alg *hashAlgorithm
 +	ctx C.GO_EVP_MD_CTX_PTR
 +	// ctx2 is used in evpHash.sum to avoid changing
 +	// the state of ctx. Having it here allows reusing the
 +	// same allocated object multiple times.
-+	ctx2         C.GO_EVP_MD_CTX_PTR
-+	size         int
-+	blockSize    int
-+	marshallable bool
++	ctx2 C.GO_EVP_MD_CTX_PTR
 +}
 +
 +func newEvpHash(ch crypto.Hash) *evpHash {
-+	md := cryptoHashToMD(ch)
-+	if md == nil {
++	alg := loadHash(ch)
++	if alg == nil {
 +		panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
 +	}
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if C.go_openssl_EVP_DigestInit_ex(ctx, md, nil) != 1 {
-+		C.go_openssl_EVP_MD_CTX_free(ctx)
-+		panic(newOpenSSLError("EVP_DigestInit_ex"))
-+	}
-+	ctx2 := C.go_openssl_EVP_MD_CTX_new()
-+	blockSize := int(C.go_openssl_EVP_MD_get_block_size(md))
-+	h := &evpHash{
-+		ctx:          ctx,
-+		ctx2:         ctx2,
-+		size:         ch.Size(),
-+		blockSize:    blockSize,
-+		marshallable: isHashMarshallable(ch),
-+	}
-+	runtime.SetFinalizer(h, (*evpHash).finalize)
++	h := &evpHash{alg: alg}
++	// Don't call init() yet, it would be wasteful
++	// if the caller only wants to know the hash type. This
++	// is a common pattern in this package, as some functions
++	// accept a `func() hash.Hash` parameter and call it just
++	// to know the hash type.
 +	return h
 +}
 +
 +func (h *evpHash) finalize() {
-+	C.go_openssl_EVP_MD_CTX_free(h.ctx)
-+	C.go_openssl_EVP_MD_CTX_free(h.ctx2)
++	if h.ctx != nil {
++		C.go_openssl_EVP_MD_CTX_free(h.ctx)
++	}
++	if h.ctx2 != nil {
++		C.go_openssl_EVP_MD_CTX_free(h.ctx2)
++	}
++}
++
++func (h *evpHash) init() {
++	if h.ctx != nil {
++		return
++	}
++	h.ctx = C.go_openssl_EVP_MD_CTX_new()
++	if C.go_openssl_EVP_DigestInit_ex(h.ctx, h.alg.md, nil) != 1 {
++		C.go_openssl_EVP_MD_CTX_free(h.ctx)
++		panic(newOpenSSLError("EVP_DigestInit_ex"))
++	}
++	h.ctx2 = C.go_openssl_EVP_MD_CTX_new()
++	runtime.SetFinalizer(h, (*evpHash).finalize)
 +}
 +
 +func (h *evpHash) Reset() {
++	if h.ctx == nil {
++		// The hash is not initialized yet, no need to reset.
++		return
++	}
 +	// There is no need to reset h.ctx2 because it is always reset after
 +	// use in evpHash.sum.
 +	if C.go_openssl_EVP_DigestInit_ex(h.ctx, nil, nil) != 1 {
@@ -3633,7 +3805,11 @@ index 00000000000000..6fd3a518906004
 +}
 +
 +func (h *evpHash) Write(p []byte) (int, error) {
-+	if len(p) > 0 && C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(&*addr(p)), C.size_t(len(p))) != 1 {
++	if len(p) == 0 {
++		return 0, nil
++	}
++	h.init()
++	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(&*addr(p)), C.size_t(len(p))) != 1 {
 +		panic(newOpenSSLError("EVP_DigestUpdate"))
 +	}
 +	runtime.KeepAlive(h)
@@ -3641,7 +3817,11 @@ index 00000000000000..6fd3a518906004
 +}
 +
 +func (h *evpHash) WriteString(s string) (int, error) {
-+	if len(s) > 0 && C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(unsafe.StringData(s)), C.size_t(len(s))) == 0 {
++	if len(s) == 0 {
++		return 0, nil
++	}
++	h.init()
++	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(unsafe.StringData(s)), C.size_t(len(s))) == 0 {
 +		panic("openssl: EVP_DigestUpdate failed")
 +	}
 +	runtime.KeepAlive(h)
@@ -3649,6 +3829,7 @@ index 00000000000000..6fd3a518906004
 +}
 +
 +func (h *evpHash) WriteByte(c byte) error {
++	h.init()
 +	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(&c), 1) == 0 {
 +		panic("openssl: EVP_DigestUpdate failed")
 +	}
@@ -3657,56 +3838,53 @@ index 00000000000000..6fd3a518906004
 +}
 +
 +func (h *evpHash) Size() int {
-+	return h.size
++	return h.alg.size
 +}
 +
 +func (h *evpHash) BlockSize() int {
-+	return h.blockSize
++	return h.alg.blockSize
 +}
 +
-+func (h *evpHash) sum(out []byte) {
++func (h *evpHash) Sum(in []byte) []byte {
++	h.init()
++	out := make([]byte, h.Size(), maxHashSize) // explicit cap to allow stack allocation
 +	if C.go_hash_sum(h.ctx, h.ctx2, base(out)) != 1 {
 +		panic(newOpenSSLError("go_hash_sum"))
 +	}
 +	runtime.KeepAlive(h)
++	return append(in, out...)
 +}
 +
-+// clone returns a new evpHash object that is a deep clone of itself.
++// Clone returns a new evpHash object that is a deep clone of itself.
 +// The duplicate object contains all state and data contained in the
 +// original object at the point of duplication.
-+func (h *evpHash) clone() (*evpHash, error) {
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_MD_CTX_new")
-+	}
-+	if C.go_openssl_EVP_MD_CTX_copy_ex(ctx, h.ctx) != 1 {
-+		C.go_openssl_EVP_MD_CTX_free(ctx)
-+		return nil, newOpenSSLError("EVP_MD_CTX_copy")
-+	}
-+	ctx2 := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx2 == nil {
-+		C.go_openssl_EVP_MD_CTX_free(ctx)
-+		return nil, newOpenSSLError("EVP_MD_CTX_new")
-+	}
-+	cloned := &evpHash{
-+		ctx:          ctx,
-+		ctx2:         ctx2,
-+		size:         h.size,
-+		blockSize:    h.blockSize,
-+		marshallable: h.marshallable,
++func (h *evpHash) Clone() hash.Hash {
++	h2 := &evpHash{alg: h.alg}
++	if h.ctx != nil {
++		h2.ctx = C.go_openssl_EVP_MD_CTX_new()
++		if h2.ctx == nil {
++			panic(newOpenSSLError("EVP_MD_CTX_new"))
++		}
++		if C.go_openssl_EVP_MD_CTX_copy_ex(h2.ctx, h.ctx) != 1 {
++			C.go_openssl_EVP_MD_CTX_free(h2.ctx)
++			panic(newOpenSSLError("EVP_MD_CTX_copy"))
++		}
++		h2.ctx2 = C.go_openssl_EVP_MD_CTX_new()
++		if h2.ctx2 == nil {
++			C.go_openssl_EVP_MD_CTX_free(h2.ctx)
++			panic(newOpenSSLError("EVP_MD_CTX_new"))
++		}
++		runtime.SetFinalizer(h2, (*evpHash).finalize)
 +	}
-+	runtime.SetFinalizer(cloned, (*evpHash).finalize)
-+	return cloned, nil
++	runtime.KeepAlive(h)
++	return h2
 +}
 +
 +// hashState returns a pointer to the internal hash structure.
 +//
 +// The EVP_MD_CTX memory layout has changed in OpenSSL 3
 +// and the property holding the internal structure is no longer md_data but algctx.
-+func (h *evpHash) hashState() unsafe.Pointer {
-+	if !h.marshallable {
-+		panic("openssl: hash state is not marshallable")
-+	}
++func hashState(ctx C.GO_EVP_MD_CTX_PTR) unsafe.Pointer {
 +	switch vMajor {
 +	case 1:
 +		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
@@ -3715,7 +3893,7 @@ index 00000000000000..6fd3a518906004
 +			_       C.ulong
 +			md_data unsafe.Pointer
 +		}
-+		return (*mdCtx)(unsafe.Pointer(h.ctx)).md_data
++		return (*mdCtx)(unsafe.Pointer(ctx)).md_data
 +	case 3:
 +		// https://github.com/openssl/openssl/blob/5675a5aaf6a2e489022bcfc18330dae9263e598e/crypto/evp/evp_local.h#L16.
 +		type mdCtx struct {
@@ -3724,49 +3902,98 @@ index 00000000000000..6fd3a518906004
 +			_      [3]unsafe.Pointer
 +			algctx unsafe.Pointer
 +		}
-+		return (*mdCtx)(unsafe.Pointer(h.ctx)).algctx
++		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
 +}
 +
-+// NewMD4 returns a new MD4 hash.
-+// The returned hash doesn't implement encoding.BinaryMarshaler and
-+// encoding.BinaryUnmarshaler.
-+func NewMD4() hash.Hash {
-+	return &md4Hash{
-+		evpHash: newEvpHash(crypto.MD4),
++func (d *evpHash) MarshalBinary() ([]byte, error) {
++	if !d.alg.marshallable {
++		return nil, errors.New("openssl: hash state is not marshallable")
 +	}
++	buf := make([]byte, 0, d.alg.marshalledSize)
++	return d.AppendBinary(buf)
 +}
 +
-+type md4Hash struct {
-+	*evpHash
-+	out [16]byte
-+}
-+
-+func (h *md4Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *md4Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
++func (d *evpHash) AppendBinary(buf []byte) ([]byte, error) {
++	defer runtime.KeepAlive(d)
++	d.init()
++	if !d.alg.marshallable {
++		return nil, errors.New("openssl: hash state is not marshallable")
++	}
++	state := hashState(d.ctx)
++	if state == nil {
++		return nil, errors.New("openssl: can't retrieve hash state")
++	}
++	var appender interface {
++		AppendBinary([]byte) ([]byte, error)
++	}
++	switch d.alg.ch {
++	case crypto.MD5:
++		appender = (*md5State)(state)
++	case crypto.SHA1:
++		appender = (*sha1State)(state)
++	case crypto.SHA224:
++		appender = (*sha256State)(state)
++	case crypto.SHA256:
++		appender = (*sha256State)(state)
++	case crypto.SHA384:
++		appender = (*sha512State)(state)
++	case crypto.SHA512:
++		appender = (*sha512State)(state)
++	case crypto.SHA512_224:
++		appender = (*sha512State)(state)
++	case crypto.SHA512_256:
++		appender = (*sha512State)(state)
++	default:
++		panic("openssl: unsupported hash function: " + strconv.Itoa(int(d.alg.ch)))
 +	}
-+	return &md4Hash{evpHash: c}, nil
++	buf = append(buf, d.alg.magic[:]...)
++	return appender.AppendBinary(buf)
 +}
 +
-+// NewMD5 returns a new MD5 hash.
-+func NewMD5() hash.Hash {
-+	h := md5Hash{evpHash: newEvpHash(crypto.MD5)}
-+	if h.marshallable {
-+		return &md5Marshal{h}
++func (d *evpHash) UnmarshalBinary(b []byte) error {
++	defer runtime.KeepAlive(d)
++	d.init()
++	if !d.alg.marshallable {
++		return errors.New("openssl: hash state is not marshallable")
++	}
++	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != string(d.alg.magic[:]) {
++		return errors.New("openssl: invalid hash state identifier")
++	}
++	if len(b) != d.alg.marshalledSize {
++		return errors.New("openssl: invalid hash state size")
++	}
++	state := hashState(d.ctx)
++	if state == nil {
++		return errors.New("openssl: can't retrieve hash state")
 +	}
-+	return &h
++	b = b[len(d.alg.magic):]
++	var unmarshaler interface {
++		UnmarshalBinary([]byte) error
++	}
++	switch d.alg.ch {
++	case crypto.MD5:
++		unmarshaler = (*md5State)(state)
++	case crypto.SHA1:
++		unmarshaler = (*sha1State)(state)
++	case crypto.SHA224:
++		unmarshaler = (*sha256State)(state)
++	case crypto.SHA256:
++		unmarshaler = (*sha256State)(state)
++	case crypto.SHA384:
++		unmarshaler = (*sha512State)(state)
++	case crypto.SHA512:
++		unmarshaler = (*sha512State)(state)
++	case crypto.SHA512_224:
++		unmarshaler = (*sha512State)(state)
++	case crypto.SHA512_256:
++		unmarshaler = (*sha512State)(state)
++	default:
++		panic("openssl: unsupported hash function: " + strconv.Itoa(int(d.alg.ch)))
++	}
++	return unmarshaler.UnmarshalBinary(b)
 +}
 +
 +// md5State layout is taken from
@@ -3778,53 +4005,12 @@ index 00000000000000..6fd3a518906004
 +	nx     uint32
 +}
 +
-+type md5Hash struct {
-+	*evpHash
-+	out [16]byte
-+}
-+
-+func (h *md5Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *md5Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &md5Hash{evpHash: c}, nil
-+}
-+
 +const (
 +	md5Magic         = "md5\x01"
 +	md5MarshaledSize = len(md5Magic) + 4*4 + 64 + 8
 +)
 +
-+type md5Marshal struct {
-+	md5Hash
-+}
-+
-+func (h *md5Marshal) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, md5MarshaledSize)
-+	return h.AppendBinary(buf)
-+}
-+
-+func (h *md5Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(md5Magic) || string(b[:len(md5Magic)]) != md5Magic {
-+		return errors.New("crypto/md5: invalid hash state identifier")
-+	}
-+	if len(b) != md5MarshaledSize {
-+		return errors.New("crypto/md5: invalid hash state size")
-+	}
-+	d := (*md5State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/md5: can't retrieve hash state")
-+	}
-+	b = b[len(md5Magic):]
++func (d *md5State) UnmarshalBinary(b []byte) error {
 +	b, d.h[0] = consumeUint32(b)
 +	b, d.h[1] = consumeUint32(b)
 +	b, d.h[2] = consumeUint32(b)
@@ -3837,13 +4023,7 @@ index 00000000000000..6fd3a518906004
 +	return nil
 +}
 +
-+func (h *md5Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*md5State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/md5: can't retrieve hash state")
-+	}
-+
-+	buf = append(buf, md5Magic...)
++func (d *md5State) AppendBinary(buf []byte) ([]byte, error) {
 +	buf = appendUint32(buf, d.h[0])
 +	buf = appendUint32(buf, d.h[1])
 +	buf = appendUint32(buf, d.h[2])
@@ -3854,36 +4034,6 @@ index 00000000000000..6fd3a518906004
 +	return buf, nil
 +}
 +
-+// NewSHA1 returns a new SHA1 hash.
-+func NewSHA1() hash.Hash {
-+	h := sha1Hash{evpHash: newEvpHash(crypto.SHA1)}
-+	if h.marshallable {
-+		return &sha1Marshal{h}
-+	}
-+	return &h
-+}
-+
-+type sha1Hash struct {
-+	*evpHash
-+	out [20]byte
-+}
-+
-+func (h *sha1Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha1Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha1Hash{evpHash: c}, nil
-+}
-+
 +// sha1State layout is taken from
 +// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
 +type sha1State struct {
@@ -3898,27 +4048,7 @@ index 00000000000000..6fd3a518906004
 +	sha1MarshaledSize = len(sha1Magic) + 5*4 + 64 + 8
 +)
 +
-+type sha1Marshal struct {
-+	sha1Hash
-+}
-+
-+func (h *sha1Marshal) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, sha1MarshaledSize)
-+	return h.AppendBinary(buf)
-+}
-+
-+func (h *sha1Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(sha1Magic) || string(b[:len(sha1Magic)]) != sha1Magic {
-+		return errors.New("crypto/sha1: invalid hash state identifier")
-+	}
-+	if len(b) != sha1MarshaledSize {
-+		return errors.New("crypto/sha1: invalid hash state size")
-+	}
-+	d := (*sha1State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/sha1: can't retrieve hash state")
-+	}
-+	b = b[len(sha1Magic):]
++func (d *sha1State) UnmarshalBinary(b []byte) error {
 +	b, d.h[0] = consumeUint32(b)
 +	b, d.h[1] = consumeUint32(b)
 +	b, d.h[2] = consumeUint32(b)
@@ -3932,12 +4062,7 @@ index 00000000000000..6fd3a518906004
 +	return nil
 +}
 +
-+func (h *sha1Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*sha1State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha1: can't retrieve hash state")
-+	}
-+	buf = append(buf, sha1Magic...)
++func (d *sha1State) AppendBinary(buf []byte) ([]byte, error) {
 +	buf = appendUint32(buf, d.h[0])
 +	buf = appendUint32(buf, d.h[1])
 +	buf = appendUint32(buf, d.h[2])
@@ -3949,66 +4074,6 @@ index 00000000000000..6fd3a518906004
 +	return buf, nil
 +}
 +
-+// NewSHA224 returns a new SHA224 hash.
-+func NewSHA224() hash.Hash {
-+	h := sha224Hash{evpHash: newEvpHash(crypto.SHA224)}
-+	if h.marshallable {
-+		return &sha224Marshal{h}
-+	}
-+	return &h
-+}
-+
-+type sha224Hash struct {
-+	*evpHash
-+	out [224 / 8]byte
-+}
-+
-+func (h *sha224Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha224Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha224Hash{evpHash: c}, nil
-+}
-+
-+// NewSHA256 returns a new SHA256 hash.
-+func NewSHA256() hash.Hash {
-+	h := sha256Hash{evpHash: newEvpHash(crypto.SHA256)}
-+	if h.marshallable {
-+		return &sha256Marshal{h}
-+	}
-+	return &h
-+}
-+
-+type sha256Hash struct {
-+	*evpHash
-+	out [256 / 8]byte
-+}
-+
-+func (h *sha256Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha256Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha256Hash{evpHash: c}, nil
-+}
-+
 +const (
 +	magic224         = "sha\x02"
 +	magic256         = "sha\x03"
@@ -4024,36 +4089,7 @@ index 00000000000000..6fd3a518906004
 +	nx     uint32
 +}
 +
-+type sha224Marshal struct {
-+	sha224Hash
-+}
-+
-+type sha256Marshal struct {
-+	sha256Hash
-+}
-+
-+func (h *sha224Marshal) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, marshaledSize256)
-+	return h.AppendBinary(buf)
-+}
-+
-+func (h *sha256Marshal) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, marshaledSize256)
-+	return h.AppendBinary(buf)
-+}
-+
-+func (h *sha224Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(magic224) || string(b[:len(magic224)]) != magic224 {
-+		return errors.New("crypto/sha256: invalid hash state identifier")
-+	}
-+	if len(b) != marshaledSize256 {
-+		return errors.New("crypto/sha256: invalid hash state size")
-+	}
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	b = b[len(magic224):]
++func (d *sha256State) UnmarshalBinary(b []byte) error {
 +	b, d.h[0] = consumeUint32(b)
 +	b, d.h[1] = consumeUint32(b)
 +	b, d.h[2] = consumeUint32(b)
@@ -4070,40 +4106,7 @@ index 00000000000000..6fd3a518906004
 +	return nil
 +}
 +
-+func (h *sha256Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(magic256) || string(b[:len(magic256)]) != magic256 {
-+		return errors.New("crypto/sha256: invalid hash state identifier")
-+	}
-+	if len(b) != marshaledSize256 {
-+		return errors.New("crypto/sha256: invalid hash state size")
-+	}
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	b = b[len(magic256):]
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b, d.h[4] = consumeUint32(b)
-+	b, d.h[5] = consumeUint32(b)
-+	b, d.h[6] = consumeUint32(b)
-+	b, d.h[7] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (h *sha224Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	buf = append(buf, magic224...)
++func (d *sha256State) AppendBinary(buf []byte) ([]byte, error) {
 +	buf = appendUint32(buf, d.h[0])
 +	buf = appendUint32(buf, d.h[1])
 +	buf = appendUint32(buf, d.h[2])
@@ -4118,86 +4121,6 @@ index 00000000000000..6fd3a518906004
 +	return buf, nil
 +}
 +
-+func (h *sha256Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*sha256State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha256: can't retrieve hash state")
-+	}
-+	buf = append(buf, magic256...)
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = appendUint32(buf, d.h[4])
-+	buf = appendUint32(buf, d.h[5])
-+	buf = appendUint32(buf, d.h[6])
-+	buf = appendUint32(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// NewSHA384 returns a new SHA384 hash.
-+func NewSHA384() hash.Hash {
-+	h := sha384Hash{evpHash: newEvpHash(crypto.SHA384)}
-+	if h.marshallable {
-+		return &sha384Marshal{h}
-+	}
-+	return &h
-+}
-+
-+type sha384Hash struct {
-+	*evpHash
-+	out [384 / 8]byte
-+}
-+
-+func (h *sha384Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha384Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha384Hash{evpHash: c}, nil
-+}
-+
-+// NewSHA512 returns a new SHA512 hash.
-+func NewSHA512() hash.Hash {
-+	h := sha512Hash{evpHash: newEvpHash(crypto.SHA512)}
-+	if h.marshallable {
-+		return &sha512Marshal{h}
-+	}
-+	return &h
-+}
-+
-+type sha512Hash struct {
-+	*evpHash
-+	out [512 / 8]byte
-+}
-+
-+func (h *sha512Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha512Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha512Hash{evpHash: c}, nil
-+}
-+
 +// sha512State layout is taken from
 +// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
 +type sha512State struct {
@@ -4215,39 +4138,12 @@ index 00000000000000..6fd3a518906004
 +	marshaledSize512 = len(magic512) + 8*8 + 128 + 8
 +)
 +
-+type sha384Marshal struct {
-+	sha384Hash
-+}
-+
-+type sha512Marshal struct {
-+	sha512Hash
-+}
-+
-+func (h *sha384Marshal) MarshalBinary() ([]byte, error) {
++func (d *sha512State) MarshalBinary() ([]byte, error) {
 +	buf := make([]byte, 0, marshaledSize512)
-+	return h.AppendBinary(buf)
++	return d.AppendBinary(buf)
 +}
 +
-+func (h *sha512Marshal) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, marshaledSize512)
-+	return h.AppendBinary(buf)
-+}
-+
-+func (h *sha384Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(magic512) {
-+		return errors.New("crypto/sha512: invalid hash state identifier")
-+	}
-+	if string(b[:len(magic384)]) != magic384 {
-+		return errors.New("crypto/sha512: invalid hash state identifier")
-+	}
-+	if len(b) != marshaledSize512 {
-+		return errors.New("crypto/sha512: invalid hash state size")
-+	}
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	b = b[len(magic512):]
++func (d *sha512State) UnmarshalBinary(b []byte) error {
 +	b, d.h[0] = consumeUint64(b)
 +	b, d.h[1] = consumeUint64(b)
 +	b, d.h[2] = consumeUint64(b)
@@ -4264,63 +4160,7 @@ index 00000000000000..6fd3a518906004
 +	return nil
 +}
 +
-+func (h *sha512Marshal) UnmarshalBinary(b []byte) error {
-+	if len(b) < len(magic512) {
-+		return errors.New("crypto/sha512: invalid hash state identifier")
-+	}
-+	if string(b[:len(magic512)]) != magic512 {
-+		return errors.New("crypto/sha512: invalid hash state identifier")
-+	}
-+	if len(b) != marshaledSize512 {
-+		return errors.New("crypto/sha512: invalid hash state size")
-+	}
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	b = b[len(magic512):]
-+	b, d.h[0] = consumeUint64(b)
-+	b, d.h[1] = consumeUint64(b)
-+	b, d.h[2] = consumeUint64(b)
-+	b, d.h[3] = consumeUint64(b)
-+	b, d.h[4] = consumeUint64(b)
-+	b, d.h[5] = consumeUint64(b)
-+	b, d.h[6] = consumeUint64(b)
-+	b, d.h[7] = consumeUint64(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = n << 3
-+	d.nh = n >> 61
-+	d.nx = uint32(n) % 128
-+	return nil
-+}
-+
-+func (h *sha384Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	buf = append(buf, magic384...)
-+	buf = appendUint64(buf, d.h[0])
-+	buf = appendUint64(buf, d.h[1])
-+	buf = appendUint64(buf, d.h[2])
-+	buf = appendUint64(buf, d.h[3])
-+	buf = appendUint64(buf, d.h[4])
-+	buf = appendUint64(buf, d.h[5])
-+	buf = appendUint64(buf, d.h[6])
-+	buf = appendUint64(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
-+	return buf, nil
-+}
-+
-+func (h *sha512Marshal) AppendBinary(buf []byte) ([]byte, error) {
-+	d := (*sha512State)(h.hashState())
-+	if d == nil {
-+		return nil, errors.New("crypto/sha512: can't retrieve hash state")
-+	}
-+	buf = append(buf, magic512...)
++func (d *sha512State) AppendBinary(buf []byte) ([]byte, error) {
 +	buf = appendUint64(buf, d.h[0])
 +	buf = appendUint64(buf, d.h[1])
 +	buf = appendUint64(buf, d.h[2])
@@ -4335,118 +4175,6 @@ index 00000000000000..6fd3a518906004
 +	return buf, nil
 +}
 +
-+// NewSHA3_224 returns a new SHA3-224 hash.
-+func NewSHA3_224() hash.Hash {
-+	return &sha3_224Hash{
-+		evpHash: newEvpHash(crypto.SHA3_224),
-+	}
-+}
-+
-+type sha3_224Hash struct {
-+	*evpHash
-+	out [224 / 8]byte
-+}
-+
-+func (h *sha3_224Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha3_224Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha3_224Hash{evpHash: c}, nil
-+}
-+
-+// NewSHA3_256 returns a new SHA3-256 hash.
-+func NewSHA3_256() hash.Hash {
-+	return &sha3_256Hash{
-+		evpHash: newEvpHash(crypto.SHA3_256),
-+	}
-+}
-+
-+type sha3_256Hash struct {
-+	*evpHash
-+	out [256 / 8]byte
-+}
-+
-+func (h *sha3_256Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha3_256Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha3_256Hash{evpHash: c}, nil
-+}
-+
-+// NewSHA3_384 returns a new SHA3-384 hash.
-+func NewSHA3_384() hash.Hash {
-+	return &sha3_384Hash{
-+		evpHash: newEvpHash(crypto.SHA3_384),
-+	}
-+}
-+
-+type sha3_384Hash struct {
-+	*evpHash
-+	out [384 / 8]byte
-+}
-+
-+func (h *sha3_384Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha3_384Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha3_384Hash{evpHash: c}, nil
-+}
-+
-+// NewSHA3_512 returns a new SHA3-512 hash.
-+func NewSHA3_512() hash.Hash {
-+	return &sha3_512Hash{
-+		evpHash: newEvpHash(crypto.SHA3_512),
-+	}
-+}
-+
-+type sha3_512Hash struct {
-+	*evpHash
-+	out [512 / 8]byte
-+}
-+
-+func (h *sha3_512Hash) Sum(in []byte) []byte {
-+	h.sum(h.out[:])
-+	return append(in, h.out[:]...)
-+}
-+
-+// Clone returns a new [hash.Hash] object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *sha3_512Hash) Clone() (hash.Hash, error) {
-+	c, err := h.clone()
-+	if err != nil {
-+		return nil, err
-+	}
-+	return &sha3_512Hash{evpHash: c}, nil
-+}
-+
 +// appendUint64 appends x into b as a big endian byte sequence.
 +func appendUint64(b []byte, x uint64) []byte {
 +	return append(b,
@@ -6088,138 +5816,6 @@ index 00000000000000..5a948eafdbc6a7
 +    return 1;
 +}
 \ No newline at end of file
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c b/src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
-new file mode 100644
-index 00000000000000..50d49b1f103351
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/port_evp_md5_sha1.c
-@@ -0,0 +1,126 @@
-+// The following is a partial backport of crypto/evp/m_md5_sha1.c,
-+// commit cbc8a839959418d8a2c2e3ec6bdf394852c9501e on the
-+// OpenSSL_1_1_0-stable branch.  The ctrl function has been removed.
-+
-+/*
-+ * Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.
-+ *
-+ * Licensed under the OpenSSL license (the "License").  You may not use
-+ * this file except in compliance with the License.  You can obtain a copy
-+ * in the file LICENSE in the source distribution or at
-+ * https://www.openssl.org/source/license.html
-+ */
-+
-+#include "goopenssl.h"
-+
-+#define NID_md5_sha1            114
-+
-+#define MD5_CBLOCK      64
-+#define MD5_LBLOCK      (MD5_CBLOCK/4)
-+#define MD5_DIGEST_LENGTH 16
-+#define SHA_LBLOCK      16
-+#define SHA_DIGEST_LENGTH 20
-+
-+#define EVP_PKEY_NULL_method    NULL,NULL,{0,0,0,0}
-+
-+// Change: MD5_LONG and SHA_LONG have been expanded to unsigned int,
-+// which is always 32 bits. This avoids adding some obscure logic
-+// to support 16-bit platforms.
-+
-+# define MD5_LONG unsigned int
-+# define SHA_LONG unsigned int
-+
-+typedef struct env_md_st EVP_MD;
-+typedef struct env_md_ctx_st EVP_MD_CTX;
-+
-+struct env_md_ctx_st {
-+    void *digest;
-+    void *engine;             
-+    unsigned long flags;
-+    void *md_data;
-+    void *pctx;
-+    void *update;
-+} /* EVP_MD_CTX */ ;
-+
-+struct env_md_st {
-+    int type;
-+    int pkey_type;
-+    int md_size;
-+    unsigned long flags;
-+    int (*init) (EVP_MD_CTX *ctx);
-+    int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
-+    int (*final) (EVP_MD_CTX *ctx, unsigned char *md);
-+    void *copy;
-+    void *cleanup;
-+    void *sign;
-+    void *verify;
-+    int required_pkey_type[5];
-+    int block_size;
-+    int ctx_size;
-+    void *md_ctrl;
-+} /* EVP_MD */ ;
-+
-+typedef struct MD5state_st {
-+    MD5_LONG A, B, C, D;
-+    MD5_LONG Nl, Nh;
-+    MD5_LONG data[MD5_LBLOCK];
-+    MD5_LONG num;
-+} MD5_CTX;
-+
-+typedef struct SHAstate_st {
-+    SHA_LONG h0, h1, h2, h3, h4;
-+    SHA_LONG Nl, Nh;
-+    SHA_LONG data[SHA_LBLOCK];
-+    SHA_LONG num;
-+} SHA_CTX;
-+
-+struct md5_sha1_ctx {
-+    MD5_CTX md5;
-+    SHA_CTX sha1;
-+};
-+
-+static int md5_sha1_init(EVP_MD_CTX *ctx) {
-+    struct md5_sha1_ctx *mctx = ctx->md_data;
-+    if (!go_openssl_MD5_Init(&mctx->md5))
-+        return 0;
-+    return go_openssl_SHA1_Init(&mctx->sha1);
-+}
-+
-+static int md5_sha1_update(EVP_MD_CTX *ctx, const void *data,
-+                                           size_t count) {
-+    struct md5_sha1_ctx *mctx = ctx->md_data;
-+    if (!go_openssl_MD5_Update(&mctx->md5, data, count))
-+        return 0;
-+    return go_openssl_SHA1_Update(&mctx->sha1, data, count);
-+}
-+
-+static int md5_sha1_final(EVP_MD_CTX *ctx, unsigned char *md) {
-+    struct md5_sha1_ctx *mctx = ctx->md_data;
-+    if (!go_openssl_MD5_Final(md, &mctx->md5))
-+        return 0;
-+    return go_openssl_SHA1_Final(md + MD5_DIGEST_LENGTH, &mctx->sha1);
-+}
-+
-+// Change: Removed:
-+// static int ctrl(EVP_MD_CTX *ctx, int cmd, int mslen, void *ms)
-+
-+static const EVP_MD md5_sha1_md = {
-+    NID_md5_sha1,
-+    NID_md5_sha1,
-+    MD5_DIGEST_LENGTH + SHA_DIGEST_LENGTH,
-+    0,
-+    md5_sha1_init,
-+    md5_sha1_update,
-+    md5_sha1_final,
-+    NULL,
-+    NULL,
-+    EVP_PKEY_NULL_method, // Change: inserted
-+    MD5_CBLOCK,
-+    sizeof(EVP_MD *) + sizeof(struct md5_sha1_ctx),
-+    NULL, // Change: was ctrl
-+};
-+
-+// Change: Apply name mangling.
-+const GO_EVP_MD_PTR go_openssl_EVP_md5_sha1_backport(void) {
-+    return (const GO_EVP_MD_PTR)&md5_sha1_md;
-+}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 new file mode 100644
 index 00000000000000..9fd709635c3b40
@@ -6734,10 +6330,10 @@ index 00000000000000..da5c7636173775
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
 new file mode 100644
-index 00000000000000..c8f599f71c0b20
+index 00000000000000..437312ad795fc3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-@@ -0,0 +1,416 @@
+@@ -0,0 +1,413 @@
 +#include <stdlib.h> // size_t
 +#include <stdint.h> // uint64_t
 +
@@ -6970,13 +6566,8 @@ index 00000000000000..c8f599f71c0b20
 +DEFINEFUNC(int, EVP_DigestVerifyInit, (GO_EVP_MD_CTX_PTR ctx, GO_EVP_PKEY_CTX_PTR *pctx, const GO_EVP_MD_PTR type, GO_ENGINE_PTR e, GO_EVP_PKEY_PTR pkey), (ctx, pctx, type, e, pkey)) \
 +DEFINEFUNC(int, EVP_DigestVerifyFinal, (GO_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen), (ctx, sig, siglen)) \
 +DEFINEFUNC_1_1_1(int, EVP_DigestVerify, (GO_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen), (ctx, sigret, siglen, tbs, tbslen)) \
-+DEFINEFUNC_LEGACY_1_0(int, MD5_Init, (GO_MD5_CTX_PTR c), (c)) \
-+DEFINEFUNC_LEGACY_1_0(int, MD5_Update, (GO_MD5_CTX_PTR c, const void *data, size_t len), (c, data, len)) \
-+DEFINEFUNC_LEGACY_1_0(int, MD5_Final, (unsigned char *md, GO_MD5_CTX_PTR c), (md, c)) \
-+DEFINEFUNC_LEGACY_1_0(int, SHA1_Init, (GO_SHA_CTX_PTR c), (c)) \
-+DEFINEFUNC_LEGACY_1_0(int, SHA1_Update, (GO_SHA_CTX_PTR c, const void *data, size_t len), (c, data, len)) \
-+DEFINEFUNC_LEGACY_1_0(int, SHA1_Final, (unsigned char *md, GO_SHA_CTX_PTR c), (md, c)) \
 +DEFINEFUNC_1_1(const GO_EVP_MD_PTR, EVP_md5_sha1, (void), ()) \
++DEFINEFUNC(const GO_EVP_MD_PTR, EVP_ripemd160, (void), ()) \
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_md4, (void), ()) \
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_md5, (void), ()) \
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha1, (void), ()) \
@@ -6984,6 +6575,8 @@ index 00000000000000..c8f599f71c0b20
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha256, (void), ()) \
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha384, (void), ()) \
 +DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha512, (void), ()) \
++DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha512_224, (void), ()) \
++DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha512_256, (void), ()) \
 +DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_224, (void), ()) \
 +DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_256, (void), ()) \
 +DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_384, (void), ()) \
@@ -7326,7 +6919,7 @@ index 00000000000000..93281d6cffc352
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..f342f221ea0c92
+index 00000000000000..33134548830d3e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 @@ -0,0 +1,160 @@
@@ -7367,7 +6960,7 @@ index 00000000000000..f342f221ea0c92
 +		// that the caller wants to use TLS 1.0/1.1 PRF.
 +		// OpenSSL detects this case by checking if the hash
 +		// function is MD5SHA1.
-+		md = cryptoHashToMD(crypto.MD5SHA1)
++		md = loadHash(crypto.MD5SHA1).md
 +	} else {
 +		h, err := hashFuncHash(fh)
 +		if err != nil {
@@ -9297,10 +8890,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..87b1c95dc7f911
+index 00000000000000..a674496f18a3af
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,306 @@
+@@ -0,0 +1,312 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9319,6 +8912,9 @@ index 00000000000000..87b1c95dc7f911
 +	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
 +)
 +
++// maxHashSize is the size of SHA512 and SHA3_512, the largest hashes we support.
++const maxHashSize = 64
++
 +// SupportsHash returns true if a hash.Hash implementation is supported for h.
 +func SupportsHash(h crypto.Hash) bool {
 +	switch h {
@@ -9387,27 +8983,6 @@ index 00000000000000..87b1c95dc7f911
 +	return
 +}
 +
-+func SHA3_256(p []byte) (sum [32]byte) {
-+	if err := hashOneShot(bcrypt.SHA3_256_ALGORITHM, p, sum[:]); err != nil {
-+		panic("bcrypt: SHA3_256 failed")
-+	}
-+	return
-+}
-+
-+func SHA3_384(p []byte) (sum [48]byte) {
-+	if err := hashOneShot(bcrypt.SHA3_384_ALGORITHM, p, sum[:]); err != nil {
-+		panic("bcrypt: SHA3_384 failed")
-+	}
-+	return
-+}
-+
-+func SHA3_512(p []byte) (sum [64]byte) {
-+	if err := hashOneShot(bcrypt.SHA3_512_ALGORITHM, p, sum[:]); err != nil {
-+		panic("bcrypt: SHA3_512 failed")
-+	}
-+	return
-+}
-+
 +// NewMD4 returns a new MD4 hash.
 +func NewMD4() hash.Hash {
 +	return newHashX(bcrypt.MD4_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
@@ -9433,24 +9008,9 @@ index 00000000000000..87b1c95dc7f911
 +	return newHashX(bcrypt.SHA384_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
 +}
 +
-+// NewSHA512 returns a new SHA512 hash.
-+func NewSHA512() hash.Hash {
-+	return newHashX(bcrypt.SHA512_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
-+}
-+
-+// NewSHA3_256 returns a new SHA256 hash.
-+func NewSHA3_256() hash.Hash {
-+	return newHashX(bcrypt.SHA3_256_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
-+}
-+
-+// NewSHA3_384 returns a new SHA384 hash.
-+func NewSHA3_384() hash.Hash {
-+	return newHashX(bcrypt.SHA3_384_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
-+}
-+
-+// NewSHA3_512 returns a new SHA512 hash.
-+func NewSHA3_512() hash.Hash {
-+	return newHashX(bcrypt.SHA3_512_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++// NewSHA512 returns a new SHA512 hash.
++func NewSHA512() hash.Hash {
++	return newHashX(bcrypt.SHA512_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
 +}
 +
 +type hashAlgorithm struct {
@@ -9484,11 +9044,24 @@ index 00000000000000..87b1c95dc7f911
 +	return hx.alg.id
 +}
 +
++// cloneHash is an interface that defines a Clone method.
++//
++// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
++// but we need it now.
++type cloneHash interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() hash.Hash
++}
++
++var _ hash.Hash = (*hashX)(nil)
++var _ cloneHash = (*hashX)(nil)
++
++// hashX implements [hash.Hash].
 +type hashX struct {
-+	alg  *hashAlgorithm
-+	_ctx bcrypt.HASH_HANDLE // access it using withCtx
++	alg *hashAlgorithm
++	ctx bcrypt.HASH_HANDLE
 +
-+	buf []byte
 +	key []byte
 +}
 +
@@ -9499,88 +9072,72 @@ index 00000000000000..87b1c95dc7f911
 +		panic(err)
 +	}
 +	h := &hashX{alg: alg, key: bytes.Clone(key)}
-+	// Don't allocate hx.buf nor call bcrypt.CreateHash yet,
-+	// which would be wasteful if the caller only wants to know
-+	// the hash type. This is a common pattern in this package,
-+	// as some functions accept a `func() hash.Hash` parameter
-+	// and call it just to know the hash type.
-+	runtime.SetFinalizer(h, (*hashX).finalize)
++	// Don't call bcrypt.CreateHash yet, it would be wasteful
++	// if the caller only wants to know the hash type. This
++	// is a common pattern in this package, as some functions
++	// accept a `func() hash.Hash` parameter and call it just
++	// to know the hash type.
 +	return h
 +}
 +
 +func (h *hashX) finalize() {
-+	if h._ctx != 0 {
-+		bcrypt.DestroyHash(h._ctx)
-+	}
++	bcrypt.DestroyHash(h.ctx)
 +}
 +
-+func (h *hashX) withCtx(fn func(ctx bcrypt.HASH_HANDLE) error) error {
++func (h *hashX) init() {
 +	defer runtime.KeepAlive(h)
-+	if h._ctx == 0 {
-+		err := bcrypt.CreateHash(h.alg.handle, &h._ctx, nil, h.key, 0)
-+		if err != nil {
-+			panic(err)
-+		}
++	if h.ctx != 0 {
++		return
++	}
++	err := bcrypt.CreateHash(h.alg.handle, &h.ctx, nil, h.key, bcrypt.HASH_REUSABLE_FLAG)
++	if err != nil {
++		panic(err)
 +	}
-+	return fn(h._ctx)
++	runtime.SetFinalizer(h, (*hashX).finalize)
 +}
 +
-+func (h *hashX) Clone() (hash.Hash, error) {
++func (h *hashX) Clone() hash.Hash {
++	defer runtime.KeepAlive(h)
 +	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
-+	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
-+		return bcrypt.DuplicateHash(ctx, &h2._ctx, nil, 0)
-+	})
-+	if err != nil {
-+		return nil, err
++	if h.ctx != 0 {
++		hashClone(h.ctx, &h2.ctx)
++		runtime.SetFinalizer(h2, (*hashX).finalize)
 +	}
-+	runtime.SetFinalizer(h2, (*hashX).finalize)
-+	return h2, nil
++	return h2
 +}
 +
 +func (h *hashX) Reset() {
-+	if h._ctx != 0 {
-+		bcrypt.DestroyHash(h._ctx)
-+		h._ctx = 0
++	defer runtime.KeepAlive(h)
++	if h.ctx != 0 {
++		hashReset(h.ctx, h.Size())
 +	}
 +}
 +
 +func (h *hashX) Write(p []byte) (n int, err error) {
-+	err = h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
-+		for n < len(p) && err == nil {
-+			nn := len32(p[n:])
-+			err = bcrypt.HashData(h._ctx, p[n:n+nn], 0)
-+			n += nn
-+		}
-+		return err
-+	})
-+	if err != nil {
-+		// hash.Hash interface mandates Write should never return an error.
-+		panic(err)
-+	}
++	defer runtime.KeepAlive(h)
++	h.init()
++	hashData(h.ctx, p)
 +	return len(p), nil
 +}
 +
 +func (h *hashX) WriteString(s string) (int, error) {
-+	// TODO: use unsafe.StringData once we drop support
-+	// for go1.19 and earlier.
-+	hdr := (*struct {
-+		Data *byte
-+		Len  int
-+	})(unsafe.Pointer(&s))
-+	return h.Write(unsafe.Slice(hdr.Data, len(s)))
++	defer runtime.KeepAlive(h)
++	return h.Write(unsafe.Slice(unsafe.StringData(s), len(s)))
 +}
 +
 +func (h *hashX) WriteByte(c byte) error {
-+	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
-+		return bcrypt.HashDataRaw(h._ctx, &c, 1, 0)
-+	})
-+	if err != nil {
-+		// hash.Hash interface mandates Write should never return an error.
-+		panic(err)
-+	}
++	defer runtime.KeepAlive(h)
++	h.init()
++	hashByte(h.ctx, c)
 +	return nil
 +}
 +
++func (h *hashX) Sum(in []byte) []byte {
++	defer runtime.KeepAlive(h)
++	h.init()
++	return hashSum(h.ctx, h.Size(), in)
++}
++
 +func (h *hashX) Size() int {
 +	return int(h.alg.size)
 +}
@@ -9589,23 +9146,65 @@ index 00000000000000..87b1c95dc7f911
 +	return int(h.alg.blockSize)
 +}
 +
-+func (h *hashX) Sum(in []byte) []byte {
++// hashData writes p to ctx. It panics on error.
++func hashData(ctx bcrypt.HASH_HANDLE, p []byte) {
++	var n int
++	var err error
++	for n < len(p) && err == nil {
++		nn := len32(p[n:])
++		err = bcrypt.HashData(ctx, p[n:n+nn], 0)
++		n += nn
++	}
++	if err != nil {
++		panic(err)
++	}
++}
++
++// hashByte writes c to ctx. It panics on error.
++func hashByte(ctx bcrypt.HASH_HANDLE, c byte) {
++	err := bcrypt.HashDataRaw(ctx, &c, 1, 0)
++	if err != nil {
++		panic(err)
++	}
++}
++
++// hashSum writes the hash of ctx to in and returns the result.
++// size is the size of the hash output.
++// It panics on error.
++func hashSum(ctx bcrypt.HASH_HANDLE, size int, in []byte) []byte {
 +	var ctx2 bcrypt.HASH_HANDLE
-+	err := h.withCtx(func(ctx bcrypt.HASH_HANDLE) error {
-+		return bcrypt.DuplicateHash(ctx, &ctx2, nil, 0)
-+	})
++	err := bcrypt.DuplicateHash(ctx, &ctx2, nil, 0)
 +	if err != nil {
 +		panic(err)
 +	}
 +	defer bcrypt.DestroyHash(ctx2)
-+	if h.buf == nil {
-+		h.buf = make([]byte, h.alg.size)
++	buf := make([]byte, size, maxHashSize) // explicit cap to allow stack allocation
++	err = bcrypt.FinishHash(ctx2, buf, 0)
++	if err != nil {
++		panic(err)
++	}
++	return append(in, buf...)
++}
++
++// hashReset resets the hash state of ctx.
++// size is the size of the hash output.
++// It panics on error.
++func hashReset(ctx bcrypt.HASH_HANDLE, size int) {
++	// bcrypt.FinishHash expects the output buffer to match the hash size.
++	// We don't care about the output, so we just pass a stack-allocated buffer
++	// that is large enough to hold the largest hash size we support.
++	var discard [maxHashSize]byte
++	if err := bcrypt.FinishHash(ctx, discard[:size], 0); err != nil {
++		panic(err)
 +	}
-+	err = bcrypt.FinishHash(ctx2, h.buf, 0)
++}
++
++// hashClone clones ctx into ctx2. It panics on error.
++func hashClone(ctx bcrypt.HASH_HANDLE, ctx2 *bcrypt.HASH_HANDLE) {
++	err := bcrypt.DuplicateHash(ctx, ctx2, nil, 0)
 +	if err != nil {
 +		panic(err)
 +	}
-+	return append(in, h.buf...)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
@@ -10587,6 +10186,296 @@ index 00000000000000..0269f9cf86539e
 +	}
 +	return ""
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
+new file mode 100644
+index 00000000000000..d7aa193e00e653
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
+@@ -0,0 +1,284 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"hash"
++	"runtime"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
++)
++
++// SumSHA3_256 returns the SHA3-256 checksum of the data.
++func SumSHA3_256(p []byte) (sum [32]byte) {
++	if err := hashOneShot(bcrypt.SHA3_256_ALGORITHM, p, sum[:]); err != nil {
++		panic("bcrypt: SHA3_256 failed")
++	}
++	return
++}
++
++// SumSHA3_384 returns the SHA3-384 checksum of the data.
++func SumSHA3_384(p []byte) (sum [48]byte) {
++	if err := hashOneShot(bcrypt.SHA3_384_ALGORITHM, p, sum[:]); err != nil {
++		panic("bcrypt: SHA3_384 failed")
++	}
++	return
++}
++
++// SumSHA3_512 returns the SHA3-512 checksum of the data.
++func SumSHA3_512(p []byte) (sum [64]byte) {
++	if err := hashOneShot(bcrypt.SHA3_512_ALGORITHM, p, sum[:]); err != nil {
++		panic("bcrypt: SHA3_512 failed")
++	}
++	return
++}
++
++// SumSHAKE128 applies the SHAKE128 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE128(data []byte, length int) []byte {
++	out := make([]byte, length)
++	if err := hashOneShot(bcrypt.CSHAKE128_ALGORITHM, data, out); err != nil {
++		panic("bcrypt: CSHAKE128_ALGORITHM failed")
++	}
++	return out
++}
++
++// SumSHAKE256 applies the SHAKE256 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE256(data []byte, length int) []byte {
++	out := make([]byte, length)
++	if err := hashOneShot(bcrypt.CSHAKE256_ALGORITHM, data, out); err != nil {
++		panic("bcrypt: CSHAKE256_ALGORITHM failed")
++	}
++	return out
++}
++
++// SupportsSHAKE128 returns true if the SHAKE128 extendable output function is
++// supported.
++func SupportsSHAKE128() bool {
++	_, err := loadHash(bcrypt.CSHAKE128_ALGORITHM, bcrypt.ALG_NONE_FLAG)
++	return err == nil
++}
++
++// SupportsSHAKE256 returns true if the SHAKE256 extendable output function is
++// supported.
++func SupportsSHAKE256() bool {
++	_, err := loadHash(bcrypt.CSHAKE256_ALGORITHM, bcrypt.ALG_NONE_FLAG)
++	return err == nil
++}
++
++var _ hash.Hash = (*DigestSHA3)(nil)
++var _ cloneHash = (*DigestSHA3)(nil)
++
++// DigestSHA3 is the [sha3.SHA3] implementation using the CNG API.
++type DigestSHA3 struct {
++	alg *hashAlgorithm
++	ctx bcrypt.HASH_HANDLE
++}
++
++// newDigestSHA3 returns a new hash.Hash using the specified algorithm.
++func newDigestSHA3(id string) *DigestSHA3 {
++	alg, err := loadHash(id, bcrypt.ALG_NONE_FLAG)
++	if err != nil {
++		panic(err)
++	}
++	h := &DigestSHA3{alg: alg}
++	// Don't call bcrypt.CreateHash yet, it would be wasteful
++	// if the caller only wants to know the hash type. This
++	// is a common pattern in this package, as some functions
++	// accept a `func() hash.Hash` parameter and call it just
++	// to know the hash type.
++	return h
++}
++
++func (h *DigestSHA3) finalize() {
++	bcrypt.DestroyHash(h.ctx)
++}
++
++func (h *DigestSHA3) init() {
++	defer runtime.KeepAlive(h)
++	if h.ctx != 0 {
++		return
++	}
++	err := bcrypt.CreateHash(h.alg.handle, &h.ctx, nil, nil, bcrypt.HASH_REUSABLE_FLAG)
++	if err != nil {
++		panic(err)
++	}
++	runtime.SetFinalizer(h, (*DigestSHA3).finalize)
++}
++
++func (h *DigestSHA3) Clone() hash.Hash {
++	defer runtime.KeepAlive(h)
++	h2 := &DigestSHA3{alg: h.alg}
++	if h.ctx != 0 {
++		hashClone(h.ctx, &h2.ctx)
++		runtime.SetFinalizer(h2, (*DigestSHA3).finalize)
++	}
++	return h2
++}
++
++func (h *DigestSHA3) Reset() {
++	defer runtime.KeepAlive(h)
++	if h.ctx != 0 {
++		hashReset(h.ctx, h.Size())
++	}
++}
++
++func (h *DigestSHA3) Write(p []byte) (n int, err error) {
++	defer runtime.KeepAlive(h)
++	h.init()
++	hashData(h.ctx, p)
++	return len(p), nil
++}
++
++func (h *DigestSHA3) WriteString(s string) (int, error) {
++	defer runtime.KeepAlive(h)
++	return h.Write(unsafe.Slice(unsafe.StringData(s), len(s)))
++}
++
++func (h *DigestSHA3) WriteByte(c byte) error {
++	defer runtime.KeepAlive(h)
++	h.init()
++	hashByte(h.ctx, c)
++	return nil
++}
++
++func (h *DigestSHA3) Sum(in []byte) []byte {
++	defer runtime.KeepAlive(h)
++	h.init()
++	return hashSum(h.ctx, h.Size(), in)
++}
++
++func (h *DigestSHA3) Size() int {
++	return int(h.alg.size)
++}
++
++func (h *DigestSHA3) BlockSize() int {
++	return int(h.alg.blockSize)
++}
++
++// NewSHA3_256 returns a new SHA256 hash.
++func NewSHA3_256() *DigestSHA3 {
++	return newDigestSHA3(bcrypt.SHA3_256_ALGORITHM)
++}
++
++// NewSHA3_384 returns a new SHA384 hash.
++func NewSHA3_384() *DigestSHA3 {
++	return newDigestSHA3(bcrypt.SHA3_384_ALGORITHM)
++}
++
++// NewSHA3_512 returns a new SHA512 hash.
++func NewSHA3_512() *DigestSHA3 {
++	return newDigestSHA3(bcrypt.SHA3_512_ALGORITHM)
++}
++
++// SHAKE is an instance of a SHAKE extendable output function.
++type SHAKE struct {
++	ctx       bcrypt.HASH_HANDLE
++	blockSize uint32
++}
++
++func newShake(id string, N, S []byte) *SHAKE {
++	alg, err := loadHash(id, bcrypt.ALG_NONE_FLAG)
++	if err != nil {
++		panic(err)
++	}
++	h := &SHAKE{blockSize: alg.blockSize}
++	err = bcrypt.CreateHash(alg.handle, &h.ctx, nil, nil, bcrypt.HASH_REUSABLE_FLAG)
++	if err != nil {
++		panic(err)
++	}
++	if len(N) != 0 {
++		if err := bcrypt.SetProperty(bcrypt.HANDLE(h.ctx), utf16PtrFromString(bcrypt.FUNCTION_NAME_STRING), N, 0); err != nil {
++			panic(err)
++		}
++	}
++	if len(S) != 0 {
++		if err := bcrypt.SetProperty(bcrypt.HANDLE(h.ctx), utf16PtrFromString(bcrypt.CUSTOMIZATION_STRING), S, 0); err != nil {
++			panic(err)
++		}
++	}
++	runtime.SetFinalizer(h, (*SHAKE).finalize)
++	return h
++}
++
++// NewSHAKE128 creates a new SHAKE128 XOF.
++func NewSHAKE128() *SHAKE {
++	return newShake(bcrypt.CSHAKE128_ALGORITHM, nil, nil)
++}
++
++// NewSHAKE256 creates a new SHAKE256 XOF.
++func NewSHAKE256() *SHAKE {
++	return newShake(bcrypt.CSHAKE256_ALGORITHM, nil, nil)
++}
++
++// NewCSHAKE128 creates a new cSHAKE128 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE128.
++func NewCSHAKE128(N, S []byte) *SHAKE {
++	return newShake(bcrypt.CSHAKE128_ALGORITHM, N, S)
++}
++
++// NewCSHAKE256 creates a new cSHAKE256 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE256.
++func NewCSHAKE256(N, S []byte) *SHAKE {
++	return newShake(bcrypt.CSHAKE256_ALGORITHM, N, S)
++}
++
++func (h *SHAKE) finalize() {
++	bcrypt.DestroyHash(h.ctx)
++}
++
++// Write absorbs more data into the XOF's state.
++//
++// It panics if any output has already been read.
++func (s *SHAKE) Write(p []byte) (n int, err error) {
++	if len(p) == 0 {
++		return 0, nil
++	}
++	defer runtime.KeepAlive(s)
++	hashData(s.ctx, p)
++	return len(p), nil
++}
++
++// Read squeezes more output from the XOF.
++//
++// Any call to Write after a call to Read will panic.
++func (s *SHAKE) Read(p []byte) (n int, err error) {
++	if len(p) == 0 {
++		return 0, nil
++	}
++	defer runtime.KeepAlive(s)
++	for n < len(p) && err == nil {
++		nn := len32(p[n:])
++		err = bcrypt.FinishHash(s.ctx, p[n:n+nn], bcrypt.HASH_DONT_RESET_FLAG)
++		n += nn
++	}
++	if err != nil {
++		panic(err)
++	}
++	return len(p), nil
++}
++
++// Reset resets the XOF to its initial state.
++func (s *SHAKE) Reset() {
++	defer runtime.KeepAlive(s)
++	// SHAKE has a variable size, CNG doesn't change the size of the hash
++	// when resetting, so we can pass a small value here.
++	hashReset(s.ctx, 1)
++}
++
++// BlockSize returns the rate of the XOF.
++func (s *SHAKE) BlockSize() int {
++	return int(s.blockSize)
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
 new file mode 100644
 index 00000000000000..5a3fb01606ef95
@@ -10683,10 +10572,10 @@ index 00000000000000..5a3fb01606ef95
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..090c74a894e170
+index 00000000000000..7d34e6661d3086
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
-@@ -0,0 +1,359 @@
+@@ -0,0 +1,368 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -10711,6 +10600,8 @@ index 00000000000000..090c74a894e170
 +	SHA3_256_ALGORITHM   = "SHA3-256"
 +	SHA3_384_ALGORITHM   = "SHA3-384"
 +	SHA3_512_ALGORITHM   = "SHA3-512"
++	CSHAKE128_ALGORITHM  = "CSHAKE128"
++	CSHAKE256_ALGORITHM  = "CSHAKE256"
 +	AES_ALGORITHM        = "AES"
 +	RC4_ALGORITHM        = "RC4"
 +	RSA_ALGORITHM        = "RSA"
@@ -10736,17 +10627,19 @@ index 00000000000000..090c74a894e170
 +)
 +
 +const (
-+	HASH_LENGTH       = "HashDigestLength"
-+	HASH_BLOCK_LENGTH = "HashBlockLength"
-+	CHAINING_MODE     = "ChainingMode"
-+	CHAIN_MODE_ECB    = "ChainingModeECB"
-+	CHAIN_MODE_CBC    = "ChainingModeCBC"
-+	CHAIN_MODE_GCM    = "ChainingModeGCM"
-+	KEY_LENGTH        = "KeyLength"
-+	KEY_LENGTHS       = "KeyLengths"
-+	SIGNATURE_LENGTH  = "SignatureLength"
-+	BLOCK_LENGTH      = "BlockLength"
-+	ECC_CURVE_NAME    = "ECCCurveName"
++	HASH_LENGTH          = "HashDigestLength"
++	HASH_BLOCK_LENGTH    = "HashBlockLength"
++	CHAINING_MODE        = "ChainingMode"
++	CHAIN_MODE_ECB       = "ChainingModeECB"
++	CHAIN_MODE_CBC       = "ChainingModeCBC"
++	CHAIN_MODE_GCM       = "ChainingModeGCM"
++	KEY_LENGTH           = "KeyLength"
++	KEY_LENGTHS          = "KeyLengths"
++	SIGNATURE_LENGTH     = "SignatureLength"
++	BLOCK_LENGTH         = "BlockLength"
++	ECC_CURVE_NAME       = "ECCCurveName"
++	FUNCTION_NAME_STRING = "FunctionNameString"
++	CUSTOMIZATION_STRING = "CustomizationString"
 +)
 +
 +const (
@@ -10803,6 +10696,11 @@ index 00000000000000..090c74a894e170
 +)
 +
 +const (
++	HASH_DONT_RESET_FLAG = 0x00000001
++	HASH_REUSABLE_FLAG   = 0x00000020
++)
++
++const (
 +	KDF_RAW_SECRET = "TRUNCATE"
 +)
 +
@@ -10987,7 +10885,7 @@ index 00000000000000..090c74a894e170
 +	Count           [4]uint8
 +}
 +
-+func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) {
++func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var pInput *byte
 +	if len(plaintext) > 0 {
 +		pInput = &plaintext[0]
@@ -11000,42 +10898,42 @@ index 00000000000000..090c74a894e170
 +	return _Encrypt(hKey, pInput, uint32(len(plaintext)), pPaddingInfo, pbIV, pbOutput, pcbResult, dwFlags)
 +}
 +
-+//sys	GetFipsAlgorithmMode(enabled *bool) (s error) = bcrypt.BCryptGetFipsAlgorithmMode
-+//sys	SetProperty(hObject HANDLE, pszProperty *uint16, pbInput []byte, dwFlags uint32) (s error) = bcrypt.BCryptSetProperty
-+//sys	GetProperty(hObject HANDLE, pszProperty *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (s error) = bcrypt.BCryptGetProperty
-+//sys	OpenAlgorithmProvider(phAlgorithm *ALG_HANDLE, pszAlgId *uint16, pszImplementation *uint16, dwFlags AlgorithmProviderFlags) (s error) = bcrypt.BCryptOpenAlgorithmProvider
-+//sys	CloseAlgorithmProvider(hAlgorithm ALG_HANDLE, dwFlags uint32) (s error) = bcrypt.BCryptCloseAlgorithmProvider
++//sys	GetFipsAlgorithmMode(enabled *bool) (ntstatus error) = bcrypt.BCryptGetFipsAlgorithmMode
++//sys	SetProperty(hObject HANDLE, pszProperty *uint16, pbInput []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptSetProperty
++//sys	GetProperty(hObject HANDLE, pszProperty *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptGetProperty
++//sys	OpenAlgorithmProvider(phAlgorithm *ALG_HANDLE, pszAlgId *uint16, pszImplementation *uint16, dwFlags AlgorithmProviderFlags) (ntstatus error) = bcrypt.BCryptOpenAlgorithmProvider
++//sys	CloseAlgorithmProvider(hAlgorithm ALG_HANDLE, dwFlags uint32) (ntstatus error) = bcrypt.BCryptCloseAlgorithmProvider
 +
 +// SHA and HMAC
 +
-+//sys	Hash(hAlgorithm ALG_HANDLE, pbSecret []byte, pbInput []byte, pbOutput []byte) (s error) = bcrypt.BCryptHash
-+//sys	CreateHash(hAlgorithm ALG_HANDLE, phHash *HASH_HANDLE, pbHashObject []byte, pbSecret []byte, dwFlags uint32) (s error) = bcrypt.BCryptCreateHash
-+//sys	DestroyHash(hHash HASH_HANDLE) (s error) = bcrypt.BCryptDestroyHash
-+//sys   HashData(hHash HASH_HANDLE, pbInput []byte, dwFlags uint32) (s error) = bcrypt.BCryptHashData
-+//sys   HashDataRaw(hHash HASH_HANDLE, pbInput *byte, cbInput uint32, dwFlags uint32) (s error) = bcrypt.BCryptHashData
-+//sys   DuplicateHash(hHash HASH_HANDLE,  phNewHash *HASH_HANDLE, pbHashObject []byte, dwFlags uint32) (s error) = bcrypt.BCryptDuplicateHash
-+//sys   FinishHash(hHash HASH_HANDLE, pbOutput []byte, dwFlags uint32) (s error) = bcrypt.BCryptFinishHash
++//sys	Hash(hAlgorithm ALG_HANDLE, pbSecret []byte, pbInput []byte, pbOutput []byte) (ntstatus error) = bcrypt.BCryptHash
++//sys	CreateHash(hAlgorithm ALG_HANDLE, phHash *HASH_HANDLE, pbHashObject []byte, pbSecret []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptCreateHash
++//sys	DestroyHash(hHash HASH_HANDLE) (ntstatus error) = bcrypt.BCryptDestroyHash
++//sys   HashData(hHash HASH_HANDLE, pbInput []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptHashData
++//sys   HashDataRaw(hHash HASH_HANDLE, pbInput *byte, cbInput uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptHashData
++//sys   DuplicateHash(hHash HASH_HANDLE,  phNewHash *HASH_HANDLE, pbHashObject []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptDuplicateHash
++//sys   FinishHash(hHash HASH_HANDLE, pbOutput []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptFinishHash
 +
 +// Rand
 +
-+//sys   GenRandom(hAlgorithm ALG_HANDLE, pbBuffer []byte, dwFlags uint32) (s error) = bcrypt.BCryptGenRandom
++//sys   GenRandom(hAlgorithm ALG_HANDLE, pbBuffer []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptGenRandom
 +
 +// Keys
 +
-+//sys   generateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret *byte, cbSecret uint32, dwFlags uint32) (s error) = bcrypt.BCryptGenerateSymmetricKey
-+//sys   GenerateKeyPair(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, dwLength uint32, dwFlags uint32) (s error) = bcrypt.BCryptGenerateKeyPair
-+//sys   FinalizeKeyPair(hKey KEY_HANDLE, dwFlags uint32) (s error) = bcrypt.BCryptFinalizeKeyPair
-+//sys   ImportKeyPair (hAlgorithm ALG_HANDLE, hImportKey KEY_HANDLE, pszBlobType *uint16, phKey *KEY_HANDLE, pbInput []byte, dwFlags uint32) (s error) = bcrypt.BCryptImportKeyPair
-+//sys   ExportKey(hKey KEY_HANDLE, hExportKey KEY_HANDLE, pszBlobType *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (s error) = bcrypt.BCryptExportKey
-+//sys   DestroyKey(hKey KEY_HANDLE) (s error) = bcrypt.BCryptDestroyKey
-+//sys   _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) = bcrypt.BCryptEncrypt
-+//sys   Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) = bcrypt.BCryptDecrypt
-+//sys   SignHash (hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbInput []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) = bcrypt.BCryptSignHash
-+//sys   VerifySignature(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbHash []byte, pbSignature []byte, dwFlags PadMode) (s error) = bcrypt.BCryptVerifySignature
-+//sys   SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (s error) = bcrypt.BCryptSecretAgreement
-+//sys   DeriveKey(hSharedSecret SECRET_HANDLE, pwszKDF *uint16, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (s error) = bcrypt.BCryptDeriveKey
-+//sys   KeyDerivation(hKey KEY_HANDLE, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (s error) = bcrypt.BCryptKeyDerivation
-+//sys   DestroySecret(hSecret SECRET_HANDLE) (s error) = bcrypt.BCryptDestroySecret
++//sys   generateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret *byte, cbSecret uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptGenerateSymmetricKey
++//sys   GenerateKeyPair(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, dwLength uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptGenerateKeyPair
++//sys   FinalizeKeyPair(hKey KEY_HANDLE, dwFlags uint32) (ntstatus error) = bcrypt.BCryptFinalizeKeyPair
++//sys   ImportKeyPair (hAlgorithm ALG_HANDLE, hImportKey KEY_HANDLE, pszBlobType *uint16, phKey *KEY_HANDLE, pbInput []byte, dwFlags uint32) (ntstatus error) = bcrypt.BCryptImportKeyPair
++//sys   ExportKey(hKey KEY_HANDLE, hExportKey KEY_HANDLE, pszBlobType *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptExportKey
++//sys   DestroyKey(hKey KEY_HANDLE) (ntstatus error) = bcrypt.BCryptDestroyKey
++//sys   _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptEncrypt
++//sys   Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptDecrypt
++//sys   SignHash (hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbInput []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptSignHash
++//sys   VerifySignature(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbHash []byte, pbSignature []byte, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptVerifySignature
++//sys   SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (ntstatus error) = bcrypt.BCryptSecretAgreement
++//sys   DeriveKey(hSharedSecret SECRET_HANDLE, pwszKDF *uint16, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptDeriveKey
++//sys   KeyDerivation(hKey KEY_HANDLE, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptKeyDerivation
++//sys   DestroySecret(hSecret SECRET_HANDLE) (ntstatus error) = bcrypt.BCryptDestroySecret
 +
 +func GenerateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret []byte, dwFlags uint32) error {
 +	cbLen := uint32(len(pbSecret))
@@ -11046,12 +10944,63 @@ index 00000000000000..090c74a894e170
 +	}
 +	return generateSymmetricKey(hAlgorithm, phKey, pbKeyObject, &pbSecret[0], cbLen, dwFlags)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/ntstatus_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/ntstatus_windows.go
+new file mode 100644
+index 00000000000000..ec2eb01aa3cd8a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/ntstatus_windows.go
+@@ -0,0 +1,45 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package bcrypt
++
++import (
++	"strconv"
++	"syscall"
++	"unicode/utf16"
++)
++
++const (
++	FORMAT_MESSAGE_FROM_HMODULE   = 2048
++	FORMAT_MESSAGE_FROM_SYSTEM    = 4096
++	FORMAT_MESSAGE_ARGUMENT_ARRAY = 8192
++
++	LANG_ENGLISH       = 0x09
++	SUBLANG_ENGLISH_US = 0x01
++)
++
++type NTStatus uint32
++
++func (s NTStatus) Errno() syscall.Errno {
++	return rtlNtStatusToDosErrorNoTeb(s)
++}
++
++func langID(pri, sub uint16) uint32 { return uint32(sub)<<10 | uint32(pri) }
++
++func (s NTStatus) Error() string {
++	b := make([]uint16, 300)
++	n, err := formatMessage(FORMAT_MESSAGE_FROM_SYSTEM|FORMAT_MESSAGE_FROM_HMODULE|FORMAT_MESSAGE_ARGUMENT_ARRAY, modntdll.Handle(), uint32(s), langID(LANG_ENGLISH, SUBLANG_ENGLISH_US), b, nil)
++	if err != nil {
++		return "NTSTATUS 0x" + strconv.FormatUint(uint64(s), 16)
++	}
++	// trim terminating \r and \n
++	for ; n > 0 && (b[n-1] == '\n' || b[n-1] == '\r'); n-- {
++	}
++	return string(utf16.Decode(b[:n]))
++}
++
++// NT Native APIs
++//sys	rtlNtStatusToDosErrorNoTeb(ntstatus NTStatus) (ret syscall.Errno) = ntdll.RtlNtStatusToDosErrorNoTeb
++
++// windows api calls
++//sys	formatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) = FormatMessageW
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
 new file mode 100644
-index 00000000000000..3c6a5764eb92ec
+index 00000000000000..5d049f025b0301
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
-@@ -0,0 +1,389 @@
+@@ -0,0 +1,412 @@
 +// Code generated by 'go generate'; DO NOT EDIT.
 +
 +package bcrypt
@@ -11091,7 +11040,9 @@ index 00000000000000..3c6a5764eb92ec
 +}
 +
 +var (
-+	modbcrypt = syscall.NewLazyDLL(sysdll.Add("bcrypt.dll"))
++	modbcrypt   = syscall.NewLazyDLL(sysdll.Add("bcrypt.dll"))
++	modkernel32 = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
++	modntdll    = syscall.NewLazyDLL(sysdll.Add("ntdll.dll"))
 +
 +	procBCryptCloseAlgorithmProvider = modbcrypt.NewProc("BCryptCloseAlgorithmProvider")
 +	procBCryptCreateHash             = modbcrypt.NewProc("BCryptCreateHash")
@@ -11119,17 +11070,19 @@ index 00000000000000..3c6a5764eb92ec
 +	procBCryptSetProperty            = modbcrypt.NewProc("BCryptSetProperty")
 +	procBCryptSignHash               = modbcrypt.NewProc("BCryptSignHash")
 +	procBCryptVerifySignature        = modbcrypt.NewProc("BCryptVerifySignature")
++	procFormatMessageW               = modkernel32.NewProc("FormatMessageW")
++	procRtlNtStatusToDosErrorNoTeb   = modntdll.NewProc("RtlNtStatusToDosErrorNoTeb")
 +)
 +
-+func CloseAlgorithmProvider(hAlgorithm ALG_HANDLE, dwFlags uint32) (s error) {
++func CloseAlgorithmProvider(hAlgorithm ALG_HANDLE, dwFlags uint32) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall(procBCryptCloseAlgorithmProvider.Addr(), 2, uintptr(hAlgorithm), uintptr(dwFlags), 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func CreateHash(hAlgorithm ALG_HANDLE, phHash *HASH_HANDLE, pbHashObject []byte, pbSecret []byte, dwFlags uint32) (s error) {
++func CreateHash(hAlgorithm ALG_HANDLE, phHash *HASH_HANDLE, pbHashObject []byte, pbSecret []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbHashObject) > 0 {
 +		_p0 = &pbHashObject[0]
@@ -11140,12 +11093,12 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptCreateHash.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSecret)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) {
++func Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
@@ -11160,60 +11113,60 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall12(procBCryptDecrypt.Addr(), 10, uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func DeriveKey(hSharedSecret SECRET_HANDLE, pwszKDF *uint16, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (s error) {
++func DeriveKey(hSharedSecret SECRET_HANDLE, pwszKDF *uint16, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbDerivedKey) > 0 {
 +		_p0 = &pbDerivedKey[0]
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptDeriveKey.Addr(), 7, uintptr(hSharedSecret), uintptr(unsafe.Pointer(pwszKDF)), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func DestroyHash(hHash HASH_HANDLE) (s error) {
++func DestroyHash(hHash HASH_HANDLE) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall(procBCryptDestroyHash.Addr(), 1, uintptr(hHash), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func DestroyKey(hKey KEY_HANDLE) (s error) {
++func DestroyKey(hKey KEY_HANDLE) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall(procBCryptDestroyKey.Addr(), 1, uintptr(hKey), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func DestroySecret(hSecret SECRET_HANDLE) (s error) {
++func DestroySecret(hSecret SECRET_HANDLE) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall(procBCryptDestroySecret.Addr(), 1, uintptr(hSecret), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func DuplicateHash(hHash HASH_HANDLE, phNewHash *HASH_HANDLE, pbHashObject []byte, dwFlags uint32) (s error) {
++func DuplicateHash(hHash HASH_HANDLE, phNewHash *HASH_HANDLE, pbHashObject []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbHashObject) > 0 {
 +		_p0 = &pbHashObject[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptDuplicateHash.Addr(), 5, uintptr(hHash), uintptr(unsafe.Pointer(phNewHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(dwFlags), 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) {
++func _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbIV) > 0 {
 +		_p0 = &pbIV[0]
@@ -11224,76 +11177,76 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall12(procBCryptEncrypt.Addr(), 10, uintptr(hKey), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func ExportKey(hKey KEY_HANDLE, hExportKey KEY_HANDLE, pszBlobType *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (s error) {
++func ExportKey(hKey KEY_HANDLE, hExportKey KEY_HANDLE, pszBlobType *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptExportKey.Addr(), 7, uintptr(hKey), uintptr(hExportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func FinalizeKeyPair(hKey KEY_HANDLE, dwFlags uint32) (s error) {
++func FinalizeKeyPair(hKey KEY_HANDLE, dwFlags uint32) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall(procBCryptFinalizeKeyPair.Addr(), 2, uintptr(hKey), uintptr(dwFlags), 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func FinishHash(hHash HASH_HANDLE, pbOutput []byte, dwFlags uint32) (s error) {
++func FinishHash(hHash HASH_HANDLE, pbOutput []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptFinishHash.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func GenRandom(hAlgorithm ALG_HANDLE, pbBuffer []byte, dwFlags uint32) (s error) {
++func GenRandom(hAlgorithm ALG_HANDLE, pbBuffer []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbBuffer) > 0 {
 +		_p0 = &pbBuffer[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptGenRandom.Addr(), 4, uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbBuffer)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func GenerateKeyPair(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, dwLength uint32, dwFlags uint32) (s error) {
++func GenerateKeyPair(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, dwLength uint32, dwFlags uint32) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall6(procBCryptGenerateKeyPair.Addr(), 4, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(dwLength), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func generateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret *byte, cbSecret uint32, dwFlags uint32) (s error) {
++func generateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret *byte, cbSecret uint32, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbKeyObject) > 0 {
 +		_p0 = &pbKeyObject[0]
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptGenerateSymmetricKey.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbKeyObject)), uintptr(unsafe.Pointer(pbSecret)), uintptr(cbSecret), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func GetFipsAlgorithmMode(enabled *bool) (s error) {
++func GetFipsAlgorithmMode(enabled *bool) (ntstatus error) {
 +	var _p0 uint32
 +	if *enabled {
 +		_p0 = 1
@@ -11301,24 +11254,24 @@ index 00000000000000..3c6a5764eb92ec
 +	r0, _, _ := syscall.Syscall(procBCryptGetFipsAlgorithmMode.Addr(), 1, uintptr(unsafe.Pointer(&_p0)), 0, 0)
 +	*enabled = _p0 != 0
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func GetProperty(hObject HANDLE, pszProperty *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (s error) {
++func GetProperty(hObject HANDLE, pszProperty *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptGetProperty.Addr(), 6, uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func Hash(hAlgorithm ALG_HANDLE, pbSecret []byte, pbInput []byte, pbOutput []byte) (s error) {
++func Hash(hAlgorithm ALG_HANDLE, pbSecret []byte, pbInput []byte, pbOutput []byte) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbSecret) > 0 {
 +		_p0 = &pbSecret[0]
@@ -11333,84 +11286,84 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptHash.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbSecret)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func HashDataRaw(hHash HASH_HANDLE, pbInput *byte, cbInput uint32, dwFlags uint32) (s error) {
++func HashDataRaw(hHash HASH_HANDLE, pbInput *byte, cbInput uint32, dwFlags uint32) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall6(procBCryptHashData.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func HashData(hHash HASH_HANDLE, pbInput []byte, dwFlags uint32) (s error) {
++func HashData(hHash HASH_HANDLE, pbInput []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptHashData.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func ImportKeyPair(hAlgorithm ALG_HANDLE, hImportKey KEY_HANDLE, pszBlobType *uint16, phKey *KEY_HANDLE, pbInput []byte, dwFlags uint32) (s error) {
++func ImportKeyPair(hAlgorithm ALG_HANDLE, hImportKey KEY_HANDLE, pszBlobType *uint16, phKey *KEY_HANDLE, pbInput []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptImportKeyPair.Addr(), 7, uintptr(hAlgorithm), uintptr(hImportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func KeyDerivation(hKey KEY_HANDLE, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (s error) {
++func KeyDerivation(hKey KEY_HANDLE, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbDerivedKey) > 0 {
 +		_p0 = &pbDerivedKey[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptKeyDerivation.Addr(), 6, uintptr(hKey), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func OpenAlgorithmProvider(phAlgorithm *ALG_HANDLE, pszAlgId *uint16, pszImplementation *uint16, dwFlags AlgorithmProviderFlags) (s error) {
++func OpenAlgorithmProvider(phAlgorithm *ALG_HANDLE, pszAlgId *uint16, pszImplementation *uint16, dwFlags AlgorithmProviderFlags) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall6(procBCryptOpenAlgorithmProvider.Addr(), 4, uintptr(unsafe.Pointer(phAlgorithm)), uintptr(unsafe.Pointer(pszAlgId)), uintptr(unsafe.Pointer(pszImplementation)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (s error) {
++func SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (ntstatus error) {
 +	r0, _, _ := syscall.Syscall6(procBCryptSecretAgreement.Addr(), 4, uintptr(hPrivKey), uintptr(hPubKey), uintptr(unsafe.Pointer(phAgreedSecret)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func SetProperty(hObject HANDLE, pszProperty *uint16, pbInput []byte, dwFlags uint32) (s error) {
++func SetProperty(hObject HANDLE, pszProperty *uint16, pbInput []byte, dwFlags uint32) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
 +	r0, _, _ := syscall.Syscall6(procBCryptSetProperty.Addr(), 5, uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func SignHash(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbInput []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (s error) {
++func SignHash(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbInput []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
@@ -11421,12 +11374,12 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptSignHash.Addr(), 8, uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
 +	}
 +	return
 +}
 +
-+func VerifySignature(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbHash []byte, pbSignature []byte, dwFlags PadMode) (s error) {
++func VerifySignature(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbHash []byte, pbSignature []byte, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbHash) > 0 {
 +		_p0 = &pbHash[0]
@@ -11437,10 +11390,29 @@ index 00000000000000..3c6a5764eb92ec
 +	}
 +	r0, _, _ := syscall.Syscall9(procBCryptVerifySignature.Addr(), 7, uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHash)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSignature)), uintptr(dwFlags), 0, 0)
 +	if r0 != 0 {
-+		s = syscall.Errno(r0)
++		ntstatus = NTStatus(r0)
++	}
++	return
++}
++
++func formatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) {
++	var _p0 *uint16
++	if len(buf) > 0 {
++		_p0 = &buf[0]
++	}
++	r0, _, e1 := syscall.Syscall9(procFormatMessageW.Addr(), 7, uintptr(flags), uintptr(msgsrc), uintptr(msgid), uintptr(langid), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(args)), 0, 0)
++	n = uint32(r0)
++	if n == 0 {
++		err = errnoErr(e1)
 +	}
 +	return
 +}
++
++func rtlNtStatusToDosErrorNoTeb(ntstatus NTStatus) (ret syscall.Errno) {
++	r0, _, _ := syscall.Syscall(procRtlNtStatusToDosErrorNoTeb.Addr(), 1, uintptr(ntstatus), 0, 0)
++	ret = syscall.Errno(r0)
++	return
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
 new file mode 100644
 index 00000000000000..db09e4aae64f8c
@@ -11541,15 +11513,15 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 1c8de570cc2f1f..9df7e15cd2ddde 100644
+index 1c8de570cc2f1f..5b05c5eed355ca 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,14 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 3e731cf4825e8436f491b77b4ed3e9aa697cf073 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 8 Jan 2025 16:09:43 +0000
Subject: [PATCH 171/887] Update submodule to latest master (39f2032c):
 testing/synctest: add some examples

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4b652e9f5f5..39f2032c175 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4b652e9f5f5c0793f2e41cd2876bce5a241b2c95
+Subproject commit 39f2032c17516a55c165d329dd5e2e07f49132b0

From a4f8099b5dc631bb4324e395f52e8d1003402694 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 9 Jan 2025 09:57:06 +0000
Subject: [PATCH 172/887] fix: move go.mod and go.sum changes back to
 respective patch files

---
 patches/0004-Add-OpenSSL-crypto-backend.patch |  6 ++--
 patches/0005-Add-CNG-crypto-backend.patch     | 12 +++----
 patches/0006-Vendor-crypto-backends.patch     | 35 +------------------
 3 files changed, 10 insertions(+), 43 deletions(-)

diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 9b01a2e7b5e..2653fef1da7 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -499,7 +499,7 @@ index 7a1318dcac32ba..186ced4a1123a8 100644
  go 1.24
  
  require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
  	golang.org/x/crypto v0.30.0
  	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
@@ -508,8 +508,8 @@ index 9e661352f16e0b..0a58eccb57a869 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index c2c4ab8e704..8019bd12e7a 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -489,8 +489,8 @@ index 186ced4a1123a8..e9da0eb1301b93 100644
 @@ -4,6 +4,7 @@ go 1.24
  
  require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
+ 	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
  	golang.org/x/crypto v0.30.0
  	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
@@ -499,10 +499,10 @@ index 0a58eccb57a869..b464f023942b74 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383 h1:fMAxrMWT19/kkIZIuB9cjqW8SqRxCH2+2ZiZr5qrpuI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
+ github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0006-Vendor-crypto-backends.patch
index 5a08acdfbfc..24e3632a13f 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0006-Vendor-crypto-backends.patch
@@ -5,8 +5,6 @@ Subject: [PATCH] Vendor crypto backends
 
 To reproduce, run 'go mod vendor' in 'go/src'.
 ---
- src/go.mod                                    |   4 +-
- src/go.sum                                    |   8 +-
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
@@ -71,7 +69,7 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  11 +
- 66 files changed, 10981 insertions(+), 6 deletions(-)
+ 64 files changed, 10969 insertions(+), 6 deletions(-)
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
@@ -136,37 +134,6 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
-diff --git a/src/go.mod b/src/go.mod
-index e9da0eb1301b93..96bdcd421e1129 100644
---- a/src/go.mod
-+++ b/src/go.mod
-@@ -3,8 +3,8 @@ module std
- go 1.24
- 
- require (
--	github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf
--	github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
- 	golang.org/x/crypto v0.30.0
- 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
- )
-diff --git a/src/go.sum b/src/go.sum
-index b464f023942b74..abebb59dcd7739 100644
---- a/src/go.sum
-+++ b/src/go.sum
-@@ -1,7 +1,7 @@
--github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf h1:gkjE7LMxjlaSn8fdvbT/HJrpGcW/ZnwYpps7sSBhLD4=
--github.com/golang-fips/openssl/v2 v2.0.4-0.20241211125030-65f2a3ae34cf/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
--github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383 h1:fMAxrMWT19/kkIZIuB9cjqW8SqRxCH2+2ZiZr5qrpuI=
--github.com/microsoft/go-crypto-winnative v0.0.0-20241212090637-6d419040e383/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
- golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
- golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
 index 00000000000000..79b5594df7fa29

From 0ec037fddf7a29b2620bfd56d8cff326764bb82a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 9 Jan 2025 17:13:51 +0100
Subject: [PATCH 173/887] implement TLS 1.3 key schedule using crypto/hkdf

---
 .../0002-Add-crypto-backend-foundation.patch  | 296 +++++++++++++++++-
 1 file changed, 279 insertions(+), 17 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a9ae91f13d4..08067460993 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -63,20 +63,23 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
- src/crypto/tls/handshake_client.go            |  10 +-
- src/crypto/tls/handshake_client_tls13.go      |  14 +-
+ src/crypto/tls/handshake_client.go            |  12 +-
+ src/crypto/tls/handshake_client_tls13.go      |  16 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  25 +-
+ src/crypto/tls/handshake_server_tls13.go      |  27 ++-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
+ src/crypto/tls/internal/tls13/doc.go          |  18 ++
+ src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++
+ src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   8 +-
+ src/go/build/deps_test.go                     |   9 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   9 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 72 files changed, 1217 insertions(+), 89 deletions(-)
+ 75 files changed, 1422 insertions(+), 93 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -90,6 +93,8 @@ Subject: [PATCH] Add crypto backend foundation
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/stub.s
+ create mode 100644 src/crypto/tls/internal/tls13/doc.go
+ create mode 100644 src/crypto/tls/internal/tls13/tls13.go
  create mode 100644 src/hash/boring_test.go
  create mode 100644 src/hash/notboring_test.go
 
@@ -556,10 +561,10 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 0f9749975ffba9..41ac17df22d7d7 100644
+index f682e6b1c6cfa6..049da55bd70f2c 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
-@@ -18,8 +18,8 @@ import (
+@@ -20,8 +20,8 @@ import (
  	"crypto"
  	"crypto/ecdh"
  	"crypto/elliptic"
@@ -2189,9 +2194,22 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 38bd417a0dca72..9eec202234fa94 100644
+index 38bd417a0dca72..8c1ae3c7ec5485 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
+@@ -11,11 +11,11 @@ import (
+ 	"crypto/ecdsa"
+ 	"crypto/ed25519"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/internal/hpke"
+ 	"crypto/rsa"
+ 	"crypto/subtle"
+ 	"crypto/tls/internal/fips140tls"
++	"crypto/tls/internal/tls13"
+ 	"crypto/x509"
+ 	"errors"
+ 	"fmt"
 @@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
@@ -2210,10 +2228,10 @@ index 38bd417a0dca72..9eec202234fa94 100644
  
  	isResume, err := hs.processServerHello()
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index c0396e75796add..819bc54822f0cb 100644
+index c0396e75796add..2c00e119cb66e4 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
-@@ -8,8 +8,8 @@ import (
+@@ -8,12 +8,12 @@ import (
  	"bytes"
  	"context"
  	"crypto"
@@ -2221,8 +2239,13 @@ index c0396e75796add..819bc54822f0cb 100644
  	"crypto/hmac"
 -	"crypto/internal/fips140/hkdf"
  	"crypto/internal/fips140/mlkem"
- 	"crypto/internal/fips140/tls13"
+-	"crypto/internal/fips140/tls13"
  	"crypto/rsa"
+ 	"crypto/subtle"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"slices"
 @@ -90,8 +90,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
  		confTranscript.Write(hs.serverHello.original[:30])
  		confTranscript.Write(make([]byte, 8))
@@ -2273,10 +2296,10 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 76fff6974e7403..bccf52fb28fcc5 100644
+index 76fff6974e7403..3ef8b56e5c7898 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -8,8 +8,9 @@ import (
+@@ -8,13 +8,14 @@ import (
  	"bytes"
  	"context"
  	"crypto"
@@ -2285,8 +2308,14 @@ index 76fff6974e7403..bccf52fb28fcc5 100644
 -	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
- 	"crypto/internal/fips140/tls13"
+-	"crypto/internal/fips140/tls13"
  	"crypto/internal/hpke"
+ 	"crypto/rsa"
+ 	"crypto/tls/internal/fips140tls"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"internal/byteorder"
 @@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
  // interfaces implemented by standard library hashes to clone the state of in
  // to a new instance of h. It returns nil if the operation fails.
@@ -2360,6 +2389,231 @@ index 24d78d60cf5b64..a6bfd3f17c1911 100644
  		Force()
  	}
  }
+diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
+new file mode 100644
+index 00000000000000..1adf3098356307
+--- /dev/null
++++ b/src/crypto/tls/internal/tls13/doc.go
+@@ -0,0 +1,18 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++/*
++Microsoft Go only package.
++
++TLS 1.3 Key Schedule is normally not part of the FIPS boundary, but upstream Go
++decided to include it in the FIPS boundary to facilitate the FIPS 140-3 certification
++process.
++
++The problem is that crypto/internal/fips140/tls13 uses crypto/internal/fips140/hkdf,
++which can't be patched to use other backends.
++
++To solve this problem, we created this package, which is a direct copy of
++crypto/internal/fips140/tls13, but uses crypto/hkdf instead of crypto/internal/fips140/hkdf.
++*/
++package tls13
+diff --git a/src/crypto/tls/internal/tls13/tls13.go b/src/crypto/tls/internal/tls13/tls13.go
+new file mode 100644
+index 00000000000000..573896b9c1e6a8
+--- /dev/null
++++ b/src/crypto/tls/internal/tls13/tls13.go
+@@ -0,0 +1,182 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Package tls13 implements the TLS 1.3 Key Schedule as specified in RFC 8446,
++// Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.
++package tls13
++
++import (
++	"crypto/hkdf"
++	"hash"
++	"internal/byteorder"
++)
++
++// We don't set the service indicator in this package but we delegate that to
++// the underlying functions because the TLS 1.3 KDF does not have a standard of
++// its own.
++
++// ExpandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.
++func ExpandLabel[H hash.Hash](hash func() H, secret []byte, label string, context []byte, length int) []byte {
++	if len("tls13 ")+len(label) > 255 || len(context) > 255 {
++		// It should be impossible for this to panic: labels are fixed strings,
++		// and context is either a fixed-length computed hash, or parsed from a
++		// field which has the same length limitation.
++		//
++		// Another reasonable approach might be to return a randomized slice if
++		// we encounter an error, which would break the connection, but avoid
++		// panicking. This would perhaps be safer but significantly more
++		// confusing to users.
++		panic("tls13: label or context too long")
++	}
++	hkdfLabel := make([]byte, 0, 2+1+len("tls13 ")+len(label)+1+len(context))
++	hkdfLabel = byteorder.BEAppendUint16(hkdfLabel, uint16(length))
++	hkdfLabel = append(hkdfLabel, byte(len("tls13 ")+len(label)))
++	hkdfLabel = append(hkdfLabel, "tls13 "...)
++	hkdfLabel = append(hkdfLabel, label...)
++	hkdfLabel = append(hkdfLabel, byte(len(context)))
++	hkdfLabel = append(hkdfLabel, context...)
++	key, err := hkdf.Expand(hash, secret, string(hkdfLabel), length)
++	if err != nil {
++		panic(err)
++	}
++	return key
++}
++
++func extract[H hash.Hash](hash func() H, newSecret, currentSecret []byte) []byte {
++	if newSecret == nil {
++		newSecret = make([]byte, hash().Size())
++	}
++	prk, err := hkdf.Extract(hash, newSecret, currentSecret)
++	if err != nil {
++		panic(err)
++	}
++	return prk
++}
++
++func deriveSecret[H hash.Hash](hash func() H, secret []byte, label string, transcript hash.Hash) []byte {
++	if transcript == nil {
++		transcript = hash()
++	}
++	return ExpandLabel(hash, secret, label, transcript.Sum(nil), transcript.Size())
++}
++
++const (
++	resumptionBinderLabel         = "res binder"
++	clientEarlyTrafficLabel       = "c e traffic"
++	clientHandshakeTrafficLabel   = "c hs traffic"
++	serverHandshakeTrafficLabel   = "s hs traffic"
++	clientApplicationTrafficLabel = "c ap traffic"
++	serverApplicationTrafficLabel = "s ap traffic"
++	earlyExporterLabel            = "e exp master"
++	exporterLabel                 = "exp master"
++	resumptionLabel               = "res master"
++)
++
++type EarlySecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func NewEarlySecret[H hash.Hash](h func() H, psk []byte) *EarlySecret {
++	return &EarlySecret{
++		secret: extract(h, psk, nil),
++		hash:   func() hash.Hash { return h() },
++	}
++}
++
++func (s *EarlySecret) ResumptionBinderKey() []byte {
++	return deriveSecret(s.hash, s.secret, resumptionBinderLabel, nil)
++}
++
++// ClientEarlyTrafficSecret derives the client_early_traffic_secret from the
++// early secret and the transcript up to the ClientHello.
++func (s *EarlySecret) ClientEarlyTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientEarlyTrafficLabel, transcript)
++}
++
++type HandshakeSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func (s *EarlySecret) HandshakeSecret(sharedSecret []byte) *HandshakeSecret {
++	derived := deriveSecret(s.hash, s.secret, "derived", nil)
++	return &HandshakeSecret{
++		secret: extract(s.hash, sharedSecret, derived),
++		hash:   s.hash,
++	}
++}
++
++// ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from
++// the handshake secret and the transcript up to the ServerHello.
++func (s *HandshakeSecret) ClientHandshakeTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientHandshakeTrafficLabel, transcript)
++}
++
++// ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from
++// the handshake secret and the transcript up to the ServerHello.
++func (s *HandshakeSecret) ServerHandshakeTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, serverHandshakeTrafficLabel, transcript)
++}
++
++type MasterSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func (s *HandshakeSecret) MasterSecret() *MasterSecret {
++	derived := deriveSecret(s.hash, s.secret, "derived", nil)
++	return &MasterSecret{
++		secret: extract(s.hash, nil, derived),
++		hash:   s.hash,
++	}
++}
++
++// ClientApplicationTrafficSecret derives the client_application_traffic_secret_0
++// from the master secret and the transcript up to the server Finished.
++func (s *MasterSecret) ClientApplicationTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientApplicationTrafficLabel, transcript)
++}
++
++// ServerApplicationTrafficSecret derives the server_application_traffic_secret_0
++// from the master secret and the transcript up to the server Finished.
++func (s *MasterSecret) ServerApplicationTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, serverApplicationTrafficLabel, transcript)
++}
++
++// ResumptionMasterSecret derives the resumption_master_secret from the master secret
++// and the transcript up to the client Finished.
++func (s *MasterSecret) ResumptionMasterSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, resumptionLabel, transcript)
++}
++
++type ExporterMasterSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++// ExporterMasterSecret derives the exporter_master_secret from the master secret
++// and the transcript up to the server Finished.
++func (s *MasterSecret) ExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
++	return &ExporterMasterSecret{
++		secret: deriveSecret(s.hash, s.secret, exporterLabel, transcript),
++		hash:   s.hash,
++	}
++}
++
++// EarlyExporterMasterSecret derives the exporter_master_secret from the early secret
++// and the transcript up to the ClientHello.
++func (s *EarlySecret) EarlyExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
++	return &ExporterMasterSecret{
++		secret: deriveSecret(s.hash, s.secret, earlyExporterLabel, transcript),
++		hash:   s.hash,
++	}
++}
++
++func (s *ExporterMasterSecret) Exporter(label string, context []byte, length int) []byte {
++	secret := deriveSecret(s.hash, s.secret, label, nil)
++	h := s.hash()
++	h.Write(context)
++	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
++}
+diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
+index 38d6d3f7be1673..b236ae44a34030 100644
+--- a/src/crypto/tls/key_schedule.go
++++ b/src/crypto/tls/key_schedule.go
+@@ -8,7 +8,7 @@ import (
+ 	"crypto/ecdh"
+ 	"crypto/hmac"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
 index e7369542a73270..ff52175e4ac636 100644
 --- a/src/crypto/tls/prf.go
@@ -2430,7 +2684,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d9d985dca4ade4..de88160bcf3a1c 100644
+index a62a5173b9c6bc..9ef5b8ea058783 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -2458,7 +2712,15 @@ index d9d985dca4ade4..de88160bcf3a1c 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -534,6 +539,7 @@ var depsRules = `
+@@ -526,6 +531,7 @@ var depsRules = `
+ 	  crypto/pbkdf2,
+ 	  crypto/ecdh,
+ 	  crypto/mlkem
++	< crypto/tls/internal/tls13
+ 	< CRYPTO;
+ 
+ 	CGO, fmt, net !< CRYPTO;
+@@ -534,6 +540,7 @@ var depsRules = `
  
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
@@ -2466,7 +2728,7 @@ index d9d985dca4ade4..de88160bcf3a1c 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
-@@ -547,7 +553,7 @@ var depsRules = `
+@@ -547,7 +554,7 @@ var depsRules = `
  
  	# TLS, Prince of Dependencies.
  

From 8eaffdaf1f929104dbf28fa43ff1571531951c72 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 10 Jan 2025 13:04:15 +0000
Subject: [PATCH 174/887] fix:patches

---
 .../0002-Add-crypto-backend-foundation.patch  | 22 +++----
 .../0003-Add-BoringSSL-crypto-backend.patch   | 26 ++++----
 patches/0004-Add-OpenSSL-crypto-backend.patch | 60 ++++++++++++-------
 patches/0005-Add-CNG-crypto-backend.patch     | 32 +++++-----
 4 files changed, 79 insertions(+), 61 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index a9ae91f13d4..e0581f7df9e 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -556,10 +556,10 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 0f9749975ffba9..41ac17df22d7d7 100644
+index f682e6b1c6cfa6..049da55bd70f2c 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
-@@ -18,8 +18,8 @@ import (
+@@ -20,8 +20,8 @@ import (
  	"crypto"
  	"crypto/ecdh"
  	"crypto/elliptic"
@@ -590,7 +590,7 @@ index 039bd82ed21f9f..69a97d9bf250be 100644
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/ed25519/boring.go b/src/crypto/ed25519/boring.go
 new file mode 100644
-index 00000000000000..3a7d7b76c8d8d7
+index 00000000000000..cce33e4d6cc927
 --- /dev/null
 +++ b/src/crypto/ed25519/boring.go
 @@ -0,0 +1,71 @@
@@ -633,7 +633,7 @@ index 00000000000000..3a7d7b76c8d8d7
 +
 +	b = new(boringPub)
 +	copy(b.orig[:], pub)
-+	key, err := boring.NewPublicKeyEd25119(b.orig[:])
++	key, err := boring.NewPublicKeyEd25519(b.orig[:])
 +	if err != nil {
 +		return nil, err
 +	}
@@ -657,7 +657,7 @@ index 00000000000000..3a7d7b76c8d8d7
 +
 +	b = new(boringPriv)
 +	copy(b.orig[:], priv)
-+	key, err := boring.NewPrivateKeyEd25119(b.orig[:])
++	key, err := boring.NewPrivateKeyEd25519(b.orig[:])
 +	if err != nil {
 +		return nil, err
 +	}
@@ -666,7 +666,7 @@ index 00000000000000..3a7d7b76c8d8d7
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index c1f8ff784e4a5c..308d814ff6302b 100644
+index c1f8ff784e4a5c..6476bfbe896d6c 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
 @@ -17,6 +17,7 @@ package ed25519
@@ -767,7 +767,7 @@ index c1f8ff784e4a5c..308d814ff6302b 100644
 +		0x22, 0xab, 0xbe, 0xe6, 0x85, 0xfd, 0xa4, 0x42, 0x0f, 0x88, 0x34,
 +		0xb1, 0x08, 0xc3, 0xbd, 0xae, 0x36, 0x9e, 0xf5, 0x49, 0xfa,
 +	}
-+	pub, err := boring.NewPublicKeyEd25119(pkey)
++	pub, err := boring.NewPublicKeyEd25519(pkey)
 +	if err != nil {
 +		return false
 +	}
@@ -1148,7 +1148,7 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..71e0ec9dc25a02
+index 00000000000000..2ad15a0d1e370e
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,229 @@
@@ -1331,11 +1331,11 @@ index 00000000000000..71e0ec9dc25a02
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -2430,7 +2430,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d9d985dca4ade4..de88160bcf3a1c 100644
+index a62a5173b9c6bc..b39db00839ab43 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index d60a06344d5..3364c1c161c 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 263 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 265 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 286 insertions(+)
+ 3 files changed, 288 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/boring.go
@@ -32,10 +32,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..b1bd6d5ba756d7
+index 00000000000000..e1ebc95a1db0e9
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,263 @@
+@@ -0,0 +1,265 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -76,12 +76,14 @@ index 00000000000000..b1bd6d5ba756d7
 +func NewSHA384() hash.Hash { return boring.NewSHA384() }
 +func NewSHA512() hash.Hash { return boring.NewSHA512() }
 +
-+func MD5(p []byte) (sum [16]byte)    { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)   { return boring.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte) { return boring.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte) { return boring.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte) { return boring.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte) { return boring.SHA512(p) }
++func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)       { return boring.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return boring.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return boring.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return boring.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return boring.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return boring.NewHMAC(h, key) }
 +
@@ -249,11 +251,11 @@ index 00000000000000..b1bd6d5ba756d7
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 2653fef1da7..592110ad461 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/cmd/link/internal/ld/lib.go               |   1 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
  .../internal/backend/fips140/openssl.go       |  41 +++
- src/crypto/internal/backend/openssl_linux.go  | 331 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 345 ++++++++++++++++++
  src/crypto/rsa/rsa_test.go                    |   3 +
  src/go.mod                                    |   1 +
  src/go.sum                                    |   2 +
@@ -19,7 +19,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../goexperiment/exp_opensslcrypto_on.go      |   9 +
  src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 15 files changed, 436 insertions(+), 5 deletions(-)
+ 15 files changed, 450 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -27,7 +27,7 @@ Subject: [PATCH] Add OpenSSL crypto backend
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
 
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 06bd01bc5bb995..9561bf2bca9a9d 100644
+index 0c992118f4287b..0de6e80fd985a3 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -1324,12 +1324,11 @@ func (t *tester) registerCgoTests(heading string) {
@@ -142,10 +142,10 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..d3a663737a1ce3
+index 00000000000000..44d91d5b7ba3d5
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,331 @@
+@@ -0,0 +1,345 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -233,19 +233,23 @@ index 00000000000000..d3a663737a1ce3
 +	return openssl.SupportsHash(h)
 +}
 +
-+func NewMD5() hash.Hash    { return openssl.NewMD5() }
-+func NewSHA1() hash.Hash   { return openssl.NewSHA1() }
-+func NewSHA224() hash.Hash { return openssl.NewSHA224() }
-+func NewSHA256() hash.Hash { return openssl.NewSHA256() }
-+func NewSHA384() hash.Hash { return openssl.NewSHA384() }
-+func NewSHA512() hash.Hash { return openssl.NewSHA512() }
-+
-+func MD5(p []byte) (sum [16]byte)    { return openssl.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)   { return openssl.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte) { return openssl.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte) { return openssl.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte) { return openssl.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte) { return openssl.SHA512(p) }
++func NewMD5() hash.Hash        { return openssl.NewMD5() }
++func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
++func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
++func NewSHA256() hash.Hash     { return openssl.NewSHA256() }
++func NewSHA384() hash.Hash     { return openssl.NewSHA384() }
++func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
++func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
++func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
++
++func MD5(p []byte) (sum [16]byte)        { return openssl.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return openssl.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return openssl.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return openssl.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return openssl.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return openssl.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { return openssl.SHA512_224(p) }
++func SHA512_256(p []byte) (sum [32]byte) { return openssl.SHA512_256(p) }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
 +
@@ -411,12 +415,22 @@ index 00000000000000..d3a663737a1ce3
 +	return openssl.GenerateKeyEd25519()
 +}
 +
++// Deprecated: use NewPrivateKeyEd25519 instead.
 +func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25119(priv)
++	return openssl.NewPrivateKeyEd25519(priv)
 +}
 +
++// Deprecated: use NewPublicKeyEd25519 instead.
 +func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
-+	return openssl.NewPublicKeyEd25119(pub)
++	return openssl.NewPublicKeyEd25519(pub)
++}
++
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++	return openssl.NewPrivateKeyEd25519(priv)
++}
++
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++	return openssl.NewPublicKeyEd25519(pub)
 +}
 +
 +func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
@@ -492,7 +506,7 @@ index f9543d9cc89e7b..f07c75821aab13 100644
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..186ced4a1123a8 100644
+index 7a1318dcac32ba..f12d9b4d9172ab 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -3,6 +3,7 @@ module std
@@ -504,7 +518,7 @@ index 7a1318dcac32ba..186ced4a1123a8 100644
  	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
 diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..0a58eccb57a869 100644
+index 9e661352f16e0b..e51f0f57540a83 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,5 @@
@@ -514,7 +528,7 @@ index 9e661352f16e0b..0a58eccb57a869 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index de88160bcf3a1c..339cb53d8a1468 100644
+index b39db00839ab43..392f8d8c52c4b6 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -509,12 +509,14 @@ var depsRules = `
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index 8019bd12e7a..f3114593f35 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -7,7 +7,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/ecdsa/badlinkname.go               |  17 +
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 316 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 318 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |   9 +-
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/rsa/pss_test.go                    |   2 +-
@@ -18,7 +18,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 14 files changed, 416 insertions(+), 5 deletions(-)
+ 14 files changed, 418 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -84,10 +84,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..c37247c8a2c7c6
+index 00000000000000..2c22deb7f14aaf
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,316 @@
+@@ -0,0 +1,318 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -141,12 +141,14 @@ index 00000000000000..c37247c8a2c7c6
 +func NewSHA384() hash.Hash { return cng.NewSHA384() }
 +func NewSHA512() hash.Hash { return cng.NewSHA512() }
 +
-+func MD5(p []byte) (sum [16]byte)    { return cng.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)   { return cng.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
-+func SHA256(p []byte) (sum [32]byte) { return cng.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte) { return cng.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte) { return cng.SHA512(p) }
++func MD5(p []byte) (sum [16]byte)        { return cng.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return cng.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { panic("cngcrypto: not available") }
++func SHA256(p []byte) (sum [32]byte)     { return cng.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return cng.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return cng.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cngcrypto: not available") }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
 +	return cng.NewHMAC(h, key)
@@ -349,11 +351,11 @@ index 00000000000000..c37247c8a2c7c6
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -483,7 +485,7 @@ index a4af0a2144870a..7d7115cff81cea 100644
  		t.Fatal(err)
  	}
 diff --git a/src/go.mod b/src/go.mod
-index 186ced4a1123a8..e9da0eb1301b93 100644
+index f12d9b4d9172ab..96bdcd421e1129 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -4,6 +4,7 @@ go 1.24
@@ -495,7 +497,7 @@ index 186ced4a1123a8..e9da0eb1301b93 100644
  	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
  )
 diff --git a/src/go.sum b/src/go.sum
-index 0a58eccb57a869..b464f023942b74 100644
+index e51f0f57540a83..abebb59dcd7739 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,5 +1,7 @@
@@ -507,7 +509,7 @@ index 0a58eccb57a869..b464f023942b74 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 339cb53d8a1468..1fcadbf6c19d79 100644
+index 392f8d8c52c4b6..997244c84e57c5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -515,6 +515,10 @@ var depsRules = `

From b574a60b6d3f6f85b8c9c6d0cd7fe3e4aea32482 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Fri, 10 Jan 2025 13:20:54 +0000
Subject: [PATCH 175/887] fix:update patches

---
 .../0002-Add-crypto-backend-foundation.patch  | 40 ++++++++++---------
 .../0003-Add-BoringSSL-crypto-backend.patch   | 22 +++++-----
 patches/0005-Add-CNG-crypto-backend.patch     | 22 +++++-----
 3 files changed, 46 insertions(+), 38 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index e0581f7df9e..6ece5815652 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -34,7 +34,7 @@ Subject: [PATCH] Add crypto backend foundation
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
- src/crypto/internal/backend/nobackend.go      | 229 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 233 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
@@ -68,7 +68,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_server.go            |  10 +-
  src/crypto/tls/handshake_server_tls13.go      |  25 +-
  src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
- src/crypto/tls/prf.go                         |  41 ++++
+ src/crypto/tls/prf.go                         |  41 +++
  src/go/build/deps_test.go                     |   8 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
@@ -76,7 +76,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 72 files changed, 1217 insertions(+), 89 deletions(-)
+ 72 files changed, 1221 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -1148,10 +1148,10 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..2ad15a0d1e370e
+index 00000000000000..3ebb6d5e4b4bb5
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,229 @@
+@@ -0,0 +1,233 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1180,19 +1180,23 @@ index 00000000000000..2ad15a0d1e370e
 +
 +func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
 +
-+func NewMD5() hash.Hash    { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash   { panic("cryptobackend: not available") }
-+func NewSHA224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA256() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA384() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512() hash.Hash { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)    { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)   { panic("cryptobackend: not available") }
-+func SHA224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+func SHA384(p []byte) (sum [48]byte) { panic("cryptobackend: not available") }
-+func SHA512(p []byte) (sum [64]byte) { panic("cryptobackend: not available") }
++func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
++func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
++func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA256() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA384() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++
++func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)       { panic("cryptobackend: not available") }
++func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)     { panic("cryptobackend: not available") }
++func SHA384(p []byte) (sum [48]byte)     { panic("cryptobackend: not available") }
++func SHA512(p []byte) (sum [64]byte)     { panic("cryptobackend: not available") }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
 +
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0003-Add-BoringSSL-crypto-backend.patch
index 3364c1c161c..ca91aaff124 100644
--- a/patches/0003-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0003-Add-BoringSSL-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 265 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 267 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 288 insertions(+)
+ 3 files changed, 290 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/boring.go
@@ -32,10 +32,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..e1ebc95a1db0e9
+index 00000000000000..94bc444f10eb2b
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,265 @@
+@@ -0,0 +1,267 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -69,12 +69,14 @@ index 00000000000000..e1ebc95a1db0e9
 +	}
 +}
 +
-+func NewMD5() hash.Hash    { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash   { return boring.NewSHA1() }
-+func NewSHA224() hash.Hash { return boring.NewSHA224() }
-+func NewSHA256() hash.Hash { return boring.NewSHA256() }
-+func NewSHA384() hash.Hash { return boring.NewSHA384() }
-+func NewSHA512() hash.Hash { return boring.NewSHA512() }
++func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
++func NewSHA1() hash.Hash       { return boring.NewSHA1() }
++func NewSHA224() hash.Hash     { return boring.NewSHA224() }
++func NewSHA256() hash.Hash     { return boring.NewSHA256() }
++func NewSHA384() hash.Hash     { return boring.NewSHA384() }
++func NewSHA512() hash.Hash     { return boring.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
 +
 +func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
 +func SHA1(p []byte) (sum [20]byte)       { return boring.SHA1(p) }
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index f3114593f35..bffe90d870b 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -7,7 +7,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/ecdsa/badlinkname.go               |  17 +
  src/crypto/internal/backend/backend_test.go   |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 318 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 320 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |   9 +-
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/rsa/pss_test.go                    |   2 +-
@@ -18,7 +18,7 @@ Subject: [PATCH] Add CNG crypto backend
  .../goexperiment/exp_cngcrypto_off.go         |   9 +
  src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
  src/internal/goexperiment/flags.go            |   1 +
- 14 files changed, 418 insertions(+), 5 deletions(-)
+ 14 files changed, 420 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -84,10 +84,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..2c22deb7f14aaf
+index 00000000000000..495260a08dd029
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,318 @@
+@@ -0,0 +1,320 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -134,12 +134,14 @@ index 00000000000000..2c22deb7f14aaf
 +	return cng.SupportsHash(h)
 +}
 +
-+func NewMD5() hash.Hash    { return cng.NewMD5() }
-+func NewSHA1() hash.Hash   { return cng.NewSHA1() }
-+func NewSHA224() hash.Hash { panic("cngcrypto: not available") }
-+func NewSHA256() hash.Hash { return cng.NewSHA256() }
-+func NewSHA384() hash.Hash { return cng.NewSHA384() }
-+func NewSHA512() hash.Hash { return cng.NewSHA512() }
++func NewMD5() hash.Hash        { return cng.NewMD5() }
++func NewSHA1() hash.Hash       { return cng.NewSHA1() }
++func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
++func NewSHA256() hash.Hash     { return cng.NewSHA256() }
++func NewSHA384() hash.Hash     { return cng.NewSHA384() }
++func NewSHA512() hash.Hash     { return cng.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
++func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
 +
 +func MD5(p []byte) (sum [16]byte)        { return cng.MD5(p) }
 +func SHA1(p []byte) (sum [20]byte)       { return cng.SHA1(p) }

From 275f45435345cecae939b1891904d0ec5db603b7 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Fri, 10 Jan 2025 10:34:12 -0800
Subject: [PATCH 176/887] 1ES PT compliance: split internal publish job, half
 is a release job

---
 eng/pipeline/stages/builders-to-stages.yml    |   3 +-
 ...h-stage.yml => internal-publish-stage.yml} | 131 +++++++++---------
 .../steps/download-signed-binaries-task.yml   |  31 ++++-
 eng/pipeline/variables/publish-internal.yml   |  15 ++
 4 files changed, 111 insertions(+), 69 deletions(-)
 rename eng/pipeline/stages/{publish-stage.yml => internal-publish-stage.yml} (67%)
 create mode 100644 eng/pipeline/variables/publish-internal.yml

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 84943fc740b..5234e5f4b75 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -70,11 +70,10 @@ stages:
     - template: pool.yml
       parameters:
         inner:
-          template: publish-stage.yml
+          template: internal-publish-stage.yml
           parameters:
             builder: { os: windows, arch: amd64 }
             official: true
-            public: false
             builders:
               - ${{ each builder in parameters.builders }}:
                 - ${{ if eq(builder.config, 'buildandpack') }}:
diff --git a/eng/pipeline/stages/publish-stage.yml b/eng/pipeline/stages/internal-publish-stage.yml
similarity index 67%
rename from eng/pipeline/stages/publish-stage.yml
rename to eng/pipeline/stages/internal-publish-stage.yml
index 7b74f02dae5..68de6916585 100644
--- a/eng/pipeline/stages/publish-stage.yml
+++ b/eng/pipeline/stages/internal-publish-stage.yml
@@ -5,9 +5,6 @@
 # Create a build asset JSON file as a pipeline artifact and publish build artifacts to blob storage.
 
 parameters:
-  - name: public
-    type: boolean
-
   - name: pool
     type: object
 
@@ -28,34 +25,19 @@ parameters:
     default: false
 
 stages:
-  - stage: Publish${{ parameters.public }}
-    ${{ if parameters.public }}:
-      displayName: Publish Public
-    ${{ else }}:
-      displayName: Publish Internal
+  - stage: PrePublish
+    displayName: Pre Internal Publish
     ${{ if eq(parameters.publishExistingRunID, 'nil') }}:
       dependsOn: Sign
     ${{ else }}:
       dependsOn: []
+
     jobs:
-      - job: Publish
+      - job: PrePublish
         pool: ${{ parameters.pool }}
 
         variables:
-          - name: blobBackupAccount
-            value: golangartifactsbackup
-          - name: blobContainer
-            ${{ if parameters.public }}:
-              value: 'https://dotnetbuildoutput.blob.core.windows.net/golang/microsoft'
-            ${{ else }}:
-              value: 'https://$(blobBackupAccount).blob.core.windows.net/microsoft'
-
-          - name: blobPrefix
-            value: '$(PublishBranchAlias)/$(Build.BuildNumber)'
-          - name: blobDestinationUrl
-            value: '$(blobContainer)/$(blobPrefix)'
-
-          - group: go-storage
+          - template: ../variables/publish-internal.yml
 
         workspace:
           clean: all
@@ -68,17 +50,11 @@ stages:
               # Single file publish requires folder to be specified.
               # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sbom#specifying-sbom-build-drop-path-build-component-path-package-name-and-package-version-per-1es-pt-output
               sbomBuildDropPath: $(Pipeline.Workspace)/Binaries Signed
-              ${{ if parameters.public }}:
-                artifact: BuildAssets
-              ${{ else }}:
-                artifact: BuildAssetsInternal
+              artifact: BuildAssetsInternal
             - ${{ if parameters.publishSymbols }}:
               - output: pipelineArtifact
                 path: $(Pipeline.Workspace)/Symbols
-                ${{ if parameters.public }}:
-                  artifact: Symbols
-                ${{ else }}:
-                  artifact: SymbolsInternal
+                artifact: SymbolsInternal
 
         steps:
           - template: ../steps/checkout-windows-task.yml
@@ -96,40 +72,9 @@ stages:
                 -destination-url '$(blobDestinationUrl)' `
                 -branch '$(PublishBranchAlias)' `
                 -o '$(Pipeline.Workspace)/Binaries Signed/assets.json'
-            displayName: 'Create build asset JSON'
-
-          - ${{ if parameters.public }}:
-            - task: AzureCLI@2
-              displayName: Upload to blob storage
-              inputs:
-                azureSubscription: GoLang
-                scriptType: bash
-                scriptLocation: inlineScript
-                # Send literal '*' to az: it handles the wildcard itself. Az copy only accepts one
-                # "from" argument, so we can't use the shell's wildcard expansion.
-                inlineScript: |
-                  az storage copy -s '*' -d '$(blobDestinationUrl)' --sas-token '$(dotnetbuildoutput-golang-write-sas-query)'
-                workingDirectory: '$(Pipeline.Workspace)/Binaries Signed/'
-          - ${{ else }}:
-            - task: AzureFileCopy@6
-              displayName: Upload to blob storage
-              inputs:
-                Destination: AzureBlob
-                azureSubscription: golang-pme-storage
-                storage: $(blobBackupAccount)
-                ContainerName: microsoft
-                SourcePath: '$(Pipeline.Workspace)/Binaries Signed/*'
-                BlobPrefix: $(blobPrefix)
-
-          - pwsh: |
-              Write-Host 'Generated links to artifacts in blob storage:'
-              Write-Host ''
-              Get-ChildItem -File -Path '.' | %{
-                Write-Host "$(blobDestinationUrl)/$($_.Name)"
-              }
-            displayName: Show expected uploaded URLs
-            workingDirectory: '$(Pipeline.Workspace)/Binaries Signed/'
+            displayName: '🧾 Create build asset JSON'
 
+          # Gather symbols from all builders.
           - ${{ if eq(parameters.publishSymbols, true) }}:
             - ${{ each builder in parameters.builders }}:
               - ${{ if eq(parameters.publishExistingRunID, 'nil') }}:
@@ -164,8 +109,62 @@ stages:
                     }
                     Copy-Item $_.FullName $flatDir
                   }
-                displayName: 'Flatten: Symbols ${{ builder.id }}'
+                displayName: '🫓 Flatten: Symbols ${{ builder.id }}'
                 workingDirectory: '$(Pipeline.Workspace)'
+
+  - stage: Publish
+    displayName: Publish Internal
+    dependsOn: PrePublish
+
+    jobs:
+      - job: Publish
+        pool: ${{ parameters.pool }}
+
+        variables:
+          - template: ../variables/publish-internal.yml
+
+        workspace:
+          clean: all
+
+        templateContext:
+          type: releaseJob # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/releasepipelines/releaseworkflows/releasejob
+          isProduction: true
+          inputs:
+            - input: pipelineArtifact
+              artifactName: BuildAssetsInternal
+            - ${{ if parameters.publishSymbols }}:
+              - input: pipelineArtifact
+                artifactName: SymbolsInternal
+                path: $(Pipeline.Workspace)/Symbols
+
+        steps:
+          - template: ../steps/find-PublishBranchAlias-task.yml
+
+          - template: ../steps/download-signed-binaries-task.yml
+            parameters:
+              runID: ${{ parameters.publishExistingRunID }}
+              ReleaseJob: true
+
+          - task: AzureFileCopy@6
+            displayName: ↗️ Upload to blob storage
+            inputs:
+              Destination: AzureBlob
+              azureSubscription: golang-pme-storage
+              storage: $(blobBackupAccount)
+              ContainerName: microsoft
+              SourcePath: '$(Pipeline.Workspace)/Binaries Signed/*'
+              BlobPrefix: $(blobPrefix)
+
+          - pwsh: |
+              Write-Host 'Generated links to artifacts in blob storage:'
+              Write-Host ''
+              Get-ChildItem -File -Path '.' | %{
+                Write-Host "$(blobDestinationUrl)/$($_.Name)"
+              }
+            displayName: 🧾 Show expected uploaded URLs
+            workingDirectory: '$(Pipeline.Workspace)/Binaries Signed/'
+
+          - ${{ if parameters.publishSymbols }}:
             - task: PublishSymbols@2
               inputs:
                 SymbolsFolder: $(Pipeline.Workspace)/Symbols
@@ -175,4 +174,4 @@ stages:
                 # in the AzDO repo, but we pull them at build time using a git submodule.
                 # See https://github.com/microsoft/go-lab/issues/67.
                 IndexSources: false
-              displayName: Publish symbols
+              displayName: ↗️ Publish symbols
diff --git a/eng/pipeline/steps/download-signed-binaries-task.yml b/eng/pipeline/steps/download-signed-binaries-task.yml
index dd3ca27a4a3..314f45ba12a 100644
--- a/eng/pipeline/steps/download-signed-binaries-task.yml
+++ b/eng/pipeline/steps/download-signed-binaries-task.yml
@@ -9,14 +9,43 @@ parameters:
     type: string
     default: 'nil'
 
+  - name: ReleaseJob
+    type: boolean
+    default: false
+
 steps:
-  - ${{ if eq(parameters.runID, 'nil') }}:
+  - ${{ if parameters.ReleaseJob }}:
+
+    - task: 1ES.DownloadPipelineArtifact@1
+      displayName: 'Download: Binaries Signed'
+      inputs:
+        ${{ if eq(parameters.runID, 'nil') }}:
+          buildType: current
+        ${{ else }}:
+          buildType: specific
+          runVersion: 'specific'
+          runId: ${{ parameters.runID }}
+        project: $(System.TeamProject)
+        definition: $(System.DefinitionId)
+        artifactName: Binaries Signed
+        targetPath: '$(Pipeline.Workspace)/Binaries Signed'
+
+    # The 1ES step tries to validate the SBOM manifests after download, so we can't assign
+    # 'patterns' to filter them out. Instead, remove them after validation is done.
+    - pwsh: |
+        Remove-Item -Path '$(Pipeline.Workspace)/Binaries Signed/_manifest' -Recurse -Force
+      displayName: Delete SBOM manifests
+
+  - ${{ elseif eq(parameters.runID, 'nil') }}:
+
     - download: current
       artifact: Binaries Signed
       # Filter out manifests added by 1ES pipeline template.
       patterns: '!_manifest/**'
       displayName: 'Download: Binaries Signed'
+
   - ${{ else }}:
+
     - task: DownloadPipelineArtifact@2
       displayName: 'Download: Binaries Signed (Specific)'
       inputs:
diff --git a/eng/pipeline/variables/publish-internal.yml b/eng/pipeline/variables/publish-internal.yml
new file mode 100644
index 00000000000..e3fb6321b3d
--- /dev/null
+++ b/eng/pipeline/variables/publish-internal.yml
@@ -0,0 +1,15 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Variables that determine where to publish internal artifacts.
+
+variables:
+  - name: blobBackupAccount
+    value: golangartifactsbackup
+  - name: blobContainer
+    value: 'https://$(blobBackupAccount).blob.core.windows.net/microsoft'
+  - name: blobPrefix
+    value: '$(PublishBranchAlias)/$(Build.BuildNumber)'
+  - name: blobDestinationUrl
+    value: '$(blobContainer)/$(blobPrefix)'

From c27a861f11d05d6837e5167a648e77842616ce9b Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 09:24:18 +0100
Subject: [PATCH 177/887] update submodule to 44a6f817ea

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 39f2032c175..44a6f817ea0 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 39f2032c17516a55c165d329dd5e2e07f49132b0
+Subproject commit 44a6f817ea0fbeb3ba4aa398794c4e80dba13b1e

From 07598476a64f611e79846aedf0dd9d1b40ace872 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 09:32:42 +0100
Subject: [PATCH 178/887] fix conflicts

---
 .../0002-Add-crypto-backend-foundation.patch  | 131 ++++++++++--------
 patches/0004-Add-OpenSSL-crypto-backend.patch |  18 +--
 patches/0005-Add-CNG-crypto-backend.patch     |  10 +-
 3 files changed, 91 insertions(+), 68 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0002-Add-crypto-backend-foundation.patch
index d5a9f151c16..99140818363 100644
--- a/patches/0002-Add-crypto-backend-foundation.patch
+++ b/patches/0002-Add-crypto-backend-foundation.patch
@@ -38,7 +38,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
- src/crypto/md5/md5.go                         |   7 +
+ src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  21 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   4 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
@@ -54,7 +54,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/pss_test.go                    |   5 +
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  12 +-
- src/crypto/sha1/sha1.go                       |   2 +-
+ src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  19 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  29 +++
@@ -66,8 +66,8 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/tls/handshake_client.go            |  12 +-
  src/crypto/tls/handshake_client_tls13.go      |  16 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  27 ++-
- src/crypto/tls/internal/fips140tls/fipstls.go |   3 
+ src/crypto/tls/handshake_server_tls13.go      |  27 +-
+ src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
@@ -79,7 +79,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 75 files changed, 1426 insertions(+), 93 deletions(-)
+ 75 files changed, 1432 insertions(+), 96 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ed25519/boring.go
@@ -561,7 +561,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index f682e6b1c6cfa6..049da55bd70f2c 100644
+index cb308b41e9df86..8f73855aa738de 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -573,8 +573,8 @@ index f682e6b1c6cfa6..049da55bd70f2c 100644
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
  	"crypto/internal/fips140/ecdsa"
+ 	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
- 	"crypto/internal/randutil"
 diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
 index 039bd82ed21f9f..69a97d9bf250be 100644
 --- a/src/crypto/ecdsa/notboring.go
@@ -819,7 +819,7 @@ index 00000000000000..b0cdd44d81c753
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
-index 7cfbe2c60de356..78139ed6170da5 100644
+index 6b02522866d57f..37e67ec184af5d 100644
 --- a/src/crypto/hkdf/hkdf.go
 +++ b/src/crypto/hkdf/hkdf.go
 @@ -11,6 +11,7 @@
@@ -828,40 +828,40 @@ index 7cfbe2c60de356..78139ed6170da5 100644
  import (
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
- 	"errors"
-@@ -27,6 +28,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
- 	if err := checkFIPS140Only(h, secret); err != nil {
+@@ -29,6 +30,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
+ 	if err := checkFIPS140Only(fh, secret); err != nil {
  		return nil, err
  	}
 +	if boring.Enabled && boring.SupportsHKDF() {
-+		return boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
++		return boring.ExtractHKDF(fh, secret, salt)
 +	}
- 	return hkdf.Extract(h, secret, salt), nil
+ 	return hkdf.Extract(fh, secret, salt), nil
  }
  
-@@ -47,6 +51,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
+@@ -50,6 +54,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
 +	if boring.Enabled && boring.SupportsHKDF() {
-+		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
++		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
 +	}
- 	return hkdf.Expand(h, pseudorandomKey, info, keyLength), nil
+ 	return hkdf.Expand(fh, pseudorandomKey, info, keyLength), nil
  }
  
-@@ -63,6 +70,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
+@@ -67,6 +74,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
  		return nil, errors.New("hkdf: requested key length too large")
  	}
  
 +	if boring.Enabled && boring.SupportsHKDF() {
-+		pseudorandomKey, err := boring.ExtractHKDF(func() hash.Hash { return h() }, secret, salt)
++		pseudorandomKey, err := boring.ExtractHKDF(fh, secret, salt)
 +		if err != nil {
 +			return nil, err
 +		}
-+		return boring.ExpandHKDF(func() hash.Hash { return h() }, pseudorandomKey, []byte(info), keyLength)
++		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
 +	}
- 	return hkdf.Key(h, secret, salt, info, keyLength), nil
+ 	return hkdf.Key(fh, secret, salt, info, keyLength), nil
  }
  
 diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
@@ -878,7 +878,7 @@ index 201b440289bb2d..4ed4960ff35b66 100644
  	"crypto/md5"
  	"crypto/sha1"
 diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index 72f5a4abea9d35..c88c6cbd128451 100644
+index 554c8c9b78940b..c68a394280cc2c 100644
 --- a/src/crypto/hmac/hmac.go
 +++ b/src/crypto/hmac/hmac.go
 @@ -22,7 +22,7 @@ timing side-channels:
@@ -888,8 +888,8 @@ index 72f5a4abea9d35..c88c6cbd128451 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/hmac"
+ 	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
- 	"crypto/subtle"
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
 index 7accad763244a1..dd3211f2c37af3 100644
 --- a/src/crypto/hmac/hmac_test.go
@@ -1433,7 +1433,7 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
  	"internal/goos"
  	"internal/testenv"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index 75e1fc7404724a..60428f8e1201de 100644
+index a0384e175f31bd..f7aa6da36f02de 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1444,21 +1444,24 @@ index 75e1fc7404724a..60428f8e1201de 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
-@@ -107,6 +108,9 @@ func New() hash.Hash {
- 	if fips140only.Enabled {
- 		panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
- 	}
+@@ -104,6 +105,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New() hash.Hash {
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
 +		return boring.NewMD5()
 +	}
  	d := new(digest)
  	d.Reset()
  	return d
-@@ -187,6 +191,9 @@ func Sum(data []byte) [Size]byte {
- 	if fips140only.Enabled {
- 		panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
- 	}
+@@ -188,6 +192,12 @@ func (d *digest) checkSum() [Size]byte {
+ 
+ // Sum returns the MD5 checksum of the data.
+ func Sum(data []byte) [Size]byte {
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
++		if fips140only.Enabled {
++			panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
++		}
 +		return boring.MD5(data)
 +	}
  	var d digest
@@ -1535,7 +1538,7 @@ index 437d9b9d4c0e0d..ee28c55f846e81 100644
  			continue
  		}
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index d40daab5e5b879..c32b3fd82b99b0 100644
+index 271d2b03312ef0..ff76299fbe4782 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
 @@ -11,6 +11,7 @@
@@ -1544,16 +1547,16 @@ index d40daab5e5b879..c32b3fd82b99b0 100644
  import (
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/pbkdf2"
+ 	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
- 	"errors"
-@@ -45,5 +46,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
+@@ -47,5 +48,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
  			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
  		}
  	}
 +	if boring.Enabled && boring.SupportsPBKDF2() {
-+		return boring.PBKDF2([]byte(password), salt, iter, keyLength, func() hash.Hash { return h() })
++		return boring.PBKDF2([]byte(password), salt, iter, keyLength, fh)
 +	}
- 	return pbkdf2.Key(h, password, salt, iter, keyLength)
+ 	return pbkdf2.Key(fh, password, salt, iter, keyLength)
  }
 diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
 index 03980c7e54d3be..4968a666fad4e5 100644
@@ -1686,7 +1689,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 24dfb38cf625bd..ccb027810a7e07 100644
+index 8373c125ae3096..bcc534151f9ac3 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -1696,9 +1699,9 @@ index 24dfb38cf625bd..ccb027810a7e07 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
- 	"errors"
-@@ -78,7 +78,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -70,7 +70,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  		hash = opts.Hash
  	}
  
@@ -1707,8 +1710,8 @@ index 24dfb38cf625bd..ccb027810a7e07 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -136,7 +136,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
- 		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+@@ -133,7 +133,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+ 		return err
  	}
  
 -	if boring.Enabled {
@@ -1716,8 +1719,8 @@ index 24dfb38cf625bd..ccb027810a7e07 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -249,7 +249,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
- 		}
+@@ -250,7 +250,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+ 		return nil, err
  	}
  
 -	if boring.Enabled {
@@ -1725,8 +1728,8 @@ index 24dfb38cf625bd..ccb027810a7e07 100644
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -305,7 +305,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
- 		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+@@ -312,7 +312,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+ 		return nil, err
  	}
  
 -	if boring.Enabled {
@@ -1830,7 +1833,7 @@ index e03f4ab06603c6..a4af0a2144870a 100644
  		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
  		good := test.good
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index fb23f003a6f217..be374dad6969d5 100644
+index 95bb4becd2ff8c..73991434dabaf1 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -42,8 +42,8 @@ package rsa
@@ -1845,7 +1848,7 @@ index fb23f003a6f217..be374dad6969d5 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 2535661040273a..f9543d9cc89e7b 100644
+index 73b0c3749eedb2..b527a355074482 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1857,7 +1860,7 @@ index 2535661040273a..f9543d9cc89e7b 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	. "crypto/rsa"
-@@ -129,6 +129,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -146,6 +146,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -1869,7 +1872,7 @@ index 2535661040273a..f9543d9cc89e7b 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -209,6 +214,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+@@ -226,6 +231,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
  	if err := priv.Validate(); err != nil {
  		t.Errorf("Validate() failed: %s", err)
  	}
@@ -1882,7 +1885,7 @@ index 2535661040273a..f9543d9cc89e7b 100644
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index b799f0d2fb1548..9aa23e9aa17e89 100644
+index d2ffaac0aeb674..23d8ad44d0bd9a 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -1894,6 +1897,22 @@ index b799f0d2fb1548..9aa23e9aa17e89 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
+@@ -266,12 +266,12 @@ func (d *digest) constSum() [Size]byte {
+ 
+ // Sum returns the SHA-1 checksum of the data.
+ func Sum(data []byte) [Size]byte {
+-	if boring.Enabled {
+-		return boring.SHA1(data)
+-	}
+ 	if fips140only.Enabled {
+ 		panic("crypto/sha1: use of SHA-1 is not allowed in FIPS 140-only mode")
+ 	}
++	if boring.Enabled {
++		return boring.SHA1(data)
++	}	
+ 	var d digest
+ 	d.Reset()
+ 	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
 index 9d707b7cde5c2d..8da08b3d860a85 100644
 --- a/src/crypto/sha1/sha1_test.go
@@ -2688,7 +2707,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index a62a5173b9c6bc..9ef5b8ea058783 100644
+index e3e01077c18b17..30811455e88418 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -2700,7 +2719,7 @@ index a62a5173b9c6bc..9ef5b8ea058783 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -506,12 +508,15 @@ var depsRules = `
+@@ -506,7 +508,9 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2710,13 +2729,15 @@ index a62a5173b9c6bc..9ef5b8ea058783 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
+@@ -514,6 +518,7 @@ var depsRules = `
+ 	< crypto/internal/fips140hash
  	< crypto/cipher
  	< crypto/internal/boring
 +	< crypto/internal/backend
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -526,6 +531,7 @@ var depsRules = `
+@@ -527,6 +532,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -2724,7 +2745,7 @@ index a62a5173b9c6bc..9ef5b8ea058783 100644
  	< CRYPTO;
  
  	CGO, fmt, net !< CRYPTO;
-@@ -534,6 +540,7 @@ var depsRules = `
+@@ -535,6 +541,7 @@ var depsRules = `
  
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
@@ -2732,7 +2753,7 @@ index a62a5173b9c6bc..9ef5b8ea058783 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
-@@ -547,7 +554,7 @@ var depsRules = `
+@@ -548,7 +555,7 @@ var depsRules = `
  
  	# TLS, Prince of Dependencies.
  
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 592110ad461..823455a0f40 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -492,10 +492,10 @@ index 00000000000000..44d91d5b7ba3d5
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index f9543d9cc89e7b..f07c75821aab13 100644
+index b527a355074482..906c469482030a 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
-@@ -846,6 +846,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -863,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
@@ -528,10 +528,10 @@ index 9e661352f16e0b..e51f0f57540a83 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b39db00839ab43..392f8d8c52c4b6 100644
+index 30811455e88418..3de94c93629e3d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -509,12 +509,14 @@ var depsRules = `
+@@ -509,7 +509,7 @@ var depsRules = `
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
  	encoding/binary,
@@ -540,14 +540,16 @@ index b39db00839ab43..392f8d8c52c4b6 100644
  	crypto/internal/backend/fips140
  	< crypto/internal/fips140only
  	< crypto
- 	< crypto/subtle
+@@ -517,6 +517,8 @@ var depsRules = `
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
  	< crypto/cipher
 +	< github.com/golang-fips/openssl/v2/internal/subtle
 +	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring
-@@ -538,6 +540,7 @@ var depsRules = `
+@@ -540,6 +542,7 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
  	CRYPTO, FMT, math/big
@@ -555,7 +557,7 @@ index b39db00839ab43..392f8d8c52c4b6 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -842,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -844,7 +847,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -564,7 +566,7 @@ index b39db00839ab43..392f8d8c52c4b6 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -852,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -854,7 +857,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index bffe90d870b..fb3554d8d1b 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -511,12 +511,12 @@ index e51f0f57540a83..abebb59dcd7739 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 392f8d8c52c4b6..997244c84e57c5 100644
+index 3de94c93629e3d..8effe9041f3f5f 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -515,6 +515,10 @@ var depsRules = `
- 	< crypto
- 	< crypto/subtle
+@@ -517,6 +517,10 @@ var depsRules = `
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
  	< crypto/cipher
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
@@ -525,7 +525,7 @@ index 392f8d8c52c4b6..997244c84e57c5 100644
  	< github.com/golang-fips/openssl/v2/internal/subtle
  	< github.com/golang-fips/openssl/v2
  	< crypto/internal/boring
-@@ -540,6 +544,7 @@ var depsRules = `
+@@ -542,6 +546,7 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
  	CRYPTO, FMT, math/big

From b3541eb79231412946575f30255c4d61e4aed801 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 10:33:57 +0100
Subject: [PATCH 179/887] centralize crypto backends GOEXPERIMENT definitions

---
 .../0001-Add-systemcrypto-GOEXPERIMENT.patch  | 104 ++++++++++++++----
 patches/0004-Add-OpenSSL-crypto-backend.patch |  49 +--------
 patches/0005-Add-CNG-crypto-backend.patch     |  71 ++----------
 3 files changed, 97 insertions(+), 127 deletions(-)

diff --git a/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch b/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch
index 1c2e50368f3..38e1ae8445b 100644
--- a/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch
+++ b/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch
@@ -3,7 +3,7 @@ From: Davis Goodin <dagood@microsoft.com>
 Date: Wed, 31 May 2023 16:54:31 -0500
 Subject: [PATCH] Add systemcrypto GOEXPERIMENT
 
-Adds systemcrypto GOEXPERIMENT and modifies tag handling to make
+Adds crypto backend GOEXPERIMENTs and modifies tag handling to make
 goexperiment.systemcrypto behave as an alias that enables the recommended
 backend for the target GOOS. See src/internal/goexperiment/flags.go for more
 information about the behavior.
@@ -19,24 +19,32 @@ maintain this feature. For more information, see the test files.
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- .../goexperiment/exp_systemcrypto_off.go      |  9 +++
- .../goexperiment/exp_systemcrypto_on.go       |  9 +++
- src/internal/goexperiment/flags.go            | 15 ++++
- 11 files changed, 292 insertions(+)
+ .../goexperiment/exp_cngcrypto_off.go         |  8 ++
+ src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
+ .../goexperiment/exp_opensslcrypto_off.go     |  8 ++
+ .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
+ .../goexperiment/exp_systemcrypto_off.go      |  8 ++
+ .../goexperiment/exp_systemcrypto_on.go       |  8 ++
+ src/internal/goexperiment/flags.go            | 17 +++++
+ 15 files changed, 324 insertions(+)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/openssl.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
  create mode 100644 src/go/build/testdata/backendtags_system/systemcrypto.go
+ create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
+ create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
+ create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
+ create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index b57f2f6368f0fe..9ddde1ce9a2286 100644
+index b4dacb0f523a8d..615ae461eb8cdc 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
-@@ -880,13 +880,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -886,13 +886,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -184,10 +192,10 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index dd6cdc903a21a8..48adcfed5cf3cb 100644
+index 9ffffda08a99b1..570937cba3cb85 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
-@@ -1947,13 +1947,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -1984,13 +1984,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -363,16 +371,71 @@ index 00000000000000..eb8a026982259c
 +//go:build goexperiment.systemcrypto
 +
 +package main
+diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
+new file mode 100644
+index 00000000000000..eb879f94fa0c42
+--- /dev/null
++++ b/src/internal/goexperiment/exp_cngcrypto_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.cngcrypto
++
++package goexperiment
++
++const CNGCrypto = false
++const CNGCryptoInt = 0
+diff --git a/src/internal/goexperiment/exp_cngcrypto_on.go b/src/internal/goexperiment/exp_cngcrypto_on.go
+new file mode 100644
+index 00000000000000..5b0a55d6c5772e
+--- /dev/null
++++ b/src/internal/goexperiment/exp_cngcrypto_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.cngcrypto
++
++package goexperiment
++
++const CNGCrypto = true
++const CNGCryptoInt = 1
+diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
+new file mode 100644
+index 00000000000000..b28c0976a94cb0
+--- /dev/null
++++ b/src/internal/goexperiment/exp_opensslcrypto_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.opensslcrypto
++
++package goexperiment
++
++const OpenSSLCrypto = false
++const OpenSSLCryptoInt = 0
+diff --git a/src/internal/goexperiment/exp_opensslcrypto_on.go b/src/internal/goexperiment/exp_opensslcrypto_on.go
+new file mode 100644
+index 00000000000000..154386b3de81ea
+--- /dev/null
++++ b/src/internal/goexperiment/exp_opensslcrypto_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.opensslcrypto
++
++package goexperiment
++
++const OpenSSLCrypto = true
++const OpenSSLCryptoInt = 1
 diff --git a/src/internal/goexperiment/exp_systemcrypto_off.go b/src/internal/goexperiment/exp_systemcrypto_off.go
 new file mode 100644
-index 00000000000000..bd33cd6159c166
+index 00000000000000..6afc2ef2c5822e
 --- /dev/null
 +++ b/src/internal/goexperiment/exp_systemcrypto_off.go
-@@ -0,0 +1,9 @@
+@@ -0,0 +1,8 @@
 +// Code generated by mkconsts.go. DO NOT EDIT.
 +
 +//go:build !goexperiment.systemcrypto
-+// +build !goexperiment.systemcrypto
 +
 +package goexperiment
 +
@@ -380,27 +443,29 @@ index 00000000000000..bd33cd6159c166
 +const SystemCryptoInt = 0
 diff --git a/src/internal/goexperiment/exp_systemcrypto_on.go b/src/internal/goexperiment/exp_systemcrypto_on.go
 new file mode 100644
-index 00000000000000..9c5b0bbc7b99dc
+index 00000000000000..fcd4cb9da0d162
 --- /dev/null
 +++ b/src/internal/goexperiment/exp_systemcrypto_on.go
-@@ -0,0 +1,9 @@
+@@ -0,0 +1,8 @@
 +// Code generated by mkconsts.go. DO NOT EDIT.
 +
 +//go:build goexperiment.systemcrypto
-+// +build goexperiment.systemcrypto
 +
 +package goexperiment
 +
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ae3cbaf89fa5dd..de79140b2d4780 100644
+index 31b3d0315b64f8..8c140f0dbed134 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -60,6 +60,21 @@ type Flags struct {
+@@ -59,6 +59,23 @@ type Flags struct {
+ 	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
- 
++	OpenSSLCrypto     bool
++	CNGCrypto         bool
++
 +	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
 +	// which one is appropriate on the target GOOS.
 +	//
@@ -415,7 +480,6 @@ index ae3cbaf89fa5dd..de79140b2d4780 100644
 +	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
 +	// being used to build the Go program.
 +	SystemCrypto bool
-+
+ 
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
- 	// The "regabi" GOEXPERIMENT is an alias for all "working"
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0004-Add-OpenSSL-crypto-backend.patch
index 823455a0f40..4f0f799e95f 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0004-Add-OpenSSL-crypto-backend.patch
@@ -15,16 +15,11 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   9 +-
  src/go/build/vendor_test.go                   |   1 +
- .../goexperiment/exp_opensslcrypto_off.go     |   9 +
- .../goexperiment/exp_opensslcrypto_on.go      |   9 +
- src/internal/goexperiment/flags.go            |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 15 files changed, 450 insertions(+), 5 deletions(-)
+ 12 files changed, 431 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
- create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
- create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
 
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index 0c992118f4287b..0de6e80fd985a3 100644
@@ -587,48 +582,6 @@ index 7f6237ffd59c11..7c821ae4bc5727 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
-new file mode 100644
-index 00000000000000..62033547c6143a
---- /dev/null
-+++ b/src/internal/goexperiment/exp_opensslcrypto_off.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.opensslcrypto
-+// +build !goexperiment.opensslcrypto
-+
-+package goexperiment
-+
-+const OpenSSLCrypto = false
-+const OpenSSLCryptoInt = 0
-diff --git a/src/internal/goexperiment/exp_opensslcrypto_on.go b/src/internal/goexperiment/exp_opensslcrypto_on.go
-new file mode 100644
-index 00000000000000..a7f2712e9e1464
---- /dev/null
-+++ b/src/internal/goexperiment/exp_opensslcrypto_on.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.opensslcrypto
-+// +build goexperiment.opensslcrypto
-+
-+package goexperiment
-+
-+const OpenSSLCrypto = true
-+const OpenSSLCryptoInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index e126e388e84025..233a12ee542328 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,7 @@ type Flags struct {
- 	PreemptibleLoops  bool
- 	StaticLockRanking bool
- 	BoringCrypto      bool
-+	OpenSSLCrypto     bool
- 
- 	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
- 	// which one is appropriate on the target GOOS.
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
 index 8c623871932f7d..2fa55073f5c19c 100644
 --- a/src/os/exec/exec_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0005-Add-CNG-crypto-backend.patch
index fb3554d8d1b..4bdd4c4811b 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0005-Add-CNG-crypto-backend.patch
@@ -4,27 +4,22 @@ Date: Tue, 19 Jul 2022 15:58:02 +0200
 Subject: [PATCH] Add CNG crypto backend
 
 ---
- src/crypto/ecdsa/badlinkname.go               |  17 +
- src/crypto/internal/backend/backend_test.go   |   4 +-
- src/crypto/internal/backend/bbig/big_cng.go   |  12 +
- src/crypto/internal/backend/cng_windows.go    | 320 ++++++++++++++++++
- src/crypto/internal/backend/common.go         |   9 +-
- src/crypto/internal/backend/fips140/cng.go    |  33 ++
- src/crypto/rsa/pss_test.go                    |   2 +-
- src/go.mod                                    |   1 +
- src/go.sum                                    |   2 +
- src/go/build/deps_test.go                     |   5 +
- src/go/build/vendor_test.go                   |   1 +
- .../goexperiment/exp_cngcrypto_off.go         |   9 +
- src/internal/goexperiment/exp_cngcrypto_on.go |   9 +
- src/internal/goexperiment/flags.go            |   1 +
- 14 files changed, 420 insertions(+), 5 deletions(-)
+ src/crypto/ecdsa/badlinkname.go             |  17 ++
+ src/crypto/internal/backend/backend_test.go |   4 +-
+ src/crypto/internal/backend/bbig/big_cng.go |  12 +
+ src/crypto/internal/backend/cng_windows.go  | 320 ++++++++++++++++++++
+ src/crypto/internal/backend/common.go       |   9 +-
+ src/crypto/internal/backend/fips140/cng.go  |  33 ++
+ src/crypto/rsa/pss_test.go                  |   2 +-
+ src/go.mod                                  |   1 +
+ src/go.sum                                  |   2 +
+ src/go/build/deps_test.go                   |   5 +
+ src/go/build/vendor_test.go                 |   1 +
+ 11 files changed, 401 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/fips140/cng.go
- create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
- create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
 
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
@@ -545,45 +540,3 @@ index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
-new file mode 100644
-index 00000000000000..831460053281e2
---- /dev/null
-+++ b/src/internal/goexperiment/exp_cngcrypto_off.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.cngcrypto
-+// +build !goexperiment.cngcrypto
-+
-+package goexperiment
-+
-+const CNGCrypto = false
-+const CNGCryptoInt = 0
-diff --git a/src/internal/goexperiment/exp_cngcrypto_on.go b/src/internal/goexperiment/exp_cngcrypto_on.go
-new file mode 100644
-index 00000000000000..99ee2542ca38a9
---- /dev/null
-+++ b/src/internal/goexperiment/exp_cngcrypto_on.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.cngcrypto
-+// +build goexperiment.cngcrypto
-+
-+package goexperiment
-+
-+const CNGCrypto = true
-+const CNGCryptoInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 233a12ee542328..8c140f0dbed134 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -60,6 +60,7 @@ type Flags struct {
- 	StaticLockRanking bool
- 	BoringCrypto      bool
- 	OpenSSLCrypto     bool
-+	CNGCrypto         bool
- 
- 	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
- 	// which one is appropriate on the target GOOS.

From 1debdcc219c0dda014c80246fd28c8e595d00b64 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jan 2025 10:36:18 +0000
Subject: [PATCH 180/887] build(deps): bump github/codeql-action from 3.28.0 to
 3.28.1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d61b4590e0f..b0538026046 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
+        uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
         with:
           category: /language:go

From 09f1d99312b2bad603c8a506059dfe5f74a59f54 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 20:31:14 +0100
Subject: [PATCH 181/887] Rename patch file

---
 ...MENT.patch => 0001-Add-crypto-backend-GOEXPERIMENTs.patch} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename patches/{0001-Add-systemcrypto-GOEXPERIMENT.patch => 0001-Add-crypto-backend-GOEXPERIMENTs.patch} (99%)

diff --git a/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
similarity index 99%
rename from patches/0001-Add-systemcrypto-GOEXPERIMENT.patch
rename to patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
index 38e1ae8445b..27387faef14 100644
--- a/patches/0001-Add-systemcrypto-GOEXPERIMENT.patch
+++ b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -1,7 +1,7 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: Davis Goodin <dagood@microsoft.com>
 Date: Wed, 31 May 2023 16:54:31 -0500
-Subject: [PATCH] Add systemcrypto GOEXPERIMENT
+Subject: [PATCH] Add crypto backend GOEXPERIMENTs
 
 Adds crypto backend GOEXPERIMENTs and modifies tag handling to make
 goexperiment.systemcrypto behave as an alias that enables the recommended
@@ -482,4 +482,4 @@ index 31b3d0315b64f8..8c140f0dbed134 100644
 +	SystemCrypto bool
  
  	// Regabi is split into several sub-experiments that can be
- 	// enabled individually. Not all combinations work.
+ 	// enabled individually. Not all combinations work.
\ No newline at end of file

From 8fe8183d617f8f456f96cd0ff2ca58f57b5f5907 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 20:34:50 +0100
Subject: [PATCH 182/887] Fix newline at end of file


From bc5af7d4cfcaf689130183105cb13b13d057d7e5 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 13 Jan 2025 20:38:06 +0100
Subject: [PATCH 183/887] add newline

---
 patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
index 27387faef14..8d07cee4e4e 100644
--- a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -482,4 +482,4 @@ index 31b3d0315b64f8..8c140f0dbed134 100644
 +	SystemCrypto bool
  
  	// Regabi is split into several sub-experiments that can be
- 	// enabled individually. Not all combinations work.
\ No newline at end of file
+ 	// enabled individually. Not all combinations work.

From 7ef39ed1ba33de557048ec76709b9c7147780248 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 14 Jan 2025 08:52:21 +0100
Subject: [PATCH 184/887] Add backend external deps in the vendor patch (#1483)

* add backend external deps in the vendor patch

* Update CNG crypto backend and foundation dates

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* fix comments

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 ...atch => 0002-Vendor-crypto-backends.patch} | 56 ++++++++++++++++++-
 ... 0003-Add-crypto-backend-foundation.patch} |  0
 ...> 0004-Add-BoringSSL-crypto-backend.patch} |  0
 ... => 0005-Add-OpenSSL-crypto-backend.patch} | 26 +--------
 ...atch => 0006-Add-CNG-crypto-backend.patch} | 28 +---------
 5 files changed, 56 insertions(+), 54 deletions(-)
 rename patches/{0006-Vendor-crypto-backends.patch => 0002-Vendor-crypto-backends.patch} (99%)
 rename patches/{0002-Add-crypto-backend-foundation.patch => 0003-Add-crypto-backend-foundation.patch} (100%)
 rename patches/{0003-Add-BoringSSL-crypto-backend.patch => 0004-Add-BoringSSL-crypto-backend.patch} (100%)
 rename patches/{0004-Add-OpenSSL-crypto-backend.patch => 0005-Add-OpenSSL-crypto-backend.patch} (94%)
 rename patches/{0005-Add-CNG-crypto-backend.patch => 0006-Add-CNG-crypto-backend.patch} (92%)

diff --git a/patches/0006-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
similarity index 99%
rename from patches/0006-Vendor-crypto-backends.patch
rename to patches/0002-Vendor-crypto-backends.patch
index 24e3632a13f..264f3b12012 100644
--- a/patches/0006-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -3,8 +3,12 @@ From: Quim Muntal <qmuntaldiaz@microsoft.com>
 Date: Mon, 23 May 2022 12:59:36 +0000
 Subject: [PATCH] Vendor crypto backends
 
-To reproduce, run 'go mod vendor' in 'go/src'.
+To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
+Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
+ src/crypto/internal/backend/deps_ignore.go    |  16 +
+ src/go.mod                                    |   5 +
+ src/go.sum                                    |   4 +
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
@@ -69,7 +73,8 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  11 +
- 64 files changed, 10969 insertions(+), 6 deletions(-)
+ 67 files changed, 11000 insertions(+)
+ create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
@@ -134,6 +139,53 @@ To reproduce, run 'go mod vendor' in 'go/src'.
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
+diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
+new file mode 100644
+index 00000000000000..7e537a55af954e
+--- /dev/null
++++ b/src/crypto/internal/backend/deps_ignore.go
+@@ -0,0 +1,16 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build ignore
++
++package backend
++
++import (
++	_ "github.com/golang-fips/openssl/v2"
++	_ "github.com/microsoft/go-crypto-winnative/cng"
++)
++
++// This file is here just to declare the external dependencies
++// that are used by the backend package. This allows to track
++// their versions in a single patch file.
+diff --git a/src/go.mod b/src/go.mod
+index 7a1318dcac32ba..4ca039fa96ba3c 100644
+--- a/src/go.mod
++++ b/src/go.mod
+@@ -11,3 +11,8 @@ require (
+ 	golang.org/x/sys v0.28.0 // indirect
+ 	golang.org/x/text v0.21.0 // indirect
+ )
++
++require (
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
++)
+diff --git a/src/go.sum b/src/go.sum
+index 9e661352f16e0b..abebb59dcd7739 100644
+--- a/src/go.sum
++++ b/src/go.sum
+@@ -1,3 +1,7 @@
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
+ golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
+ golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
+ golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
 index 00000000000000..79b5594df7fa29
diff --git a/patches/0002-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
similarity index 100%
rename from patches/0002-Add-crypto-backend-foundation.patch
rename to patches/0003-Add-crypto-backend-foundation.patch
diff --git a/patches/0003-Add-BoringSSL-crypto-backend.patch b/patches/0004-Add-BoringSSL-crypto-backend.patch
similarity index 100%
rename from patches/0003-Add-BoringSSL-crypto-backend.patch
rename to patches/0004-Add-BoringSSL-crypto-backend.patch
diff --git a/patches/0004-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
similarity index 94%
rename from patches/0004-Add-OpenSSL-crypto-backend.patch
rename to patches/0005-Add-OpenSSL-crypto-backend.patch
index 4f0f799e95f..648570df40b 100644
--- a/patches/0004-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0005-Add-OpenSSL-crypto-backend.patch
@@ -11,12 +11,10 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../internal/backend/fips140/openssl.go       |  41 +++
  src/crypto/internal/backend/openssl_linux.go  | 345 ++++++++++++++++++
  src/crypto/rsa/rsa_test.go                    |   3 +
- src/go.mod                                    |   1 +
- src/go.sum                                    |   2 +
  src/go/build/deps_test.go                     |   9 +-
  src/go/build/vendor_test.go                   |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 12 files changed, 431 insertions(+), 5 deletions(-)
+ 10 files changed, 428 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -500,28 +498,6 @@ index b527a355074482..906c469482030a 100644
  	random := rand.Reader
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
-diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..f12d9b4d9172ab 100644
---- a/src/go.mod
-+++ b/src/go.mod
-@@ -3,6 +3,7 @@ module std
- go 1.24
- 
- require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
- 	golang.org/x/crypto v0.30.0
- 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
- )
-diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..e51f0f57540a83 100644
---- a/src/go.sum
-+++ b/src/go.sum
-@@ -1,3 +1,5 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
- golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
- golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
- golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 30811455e88418..3de94c93629e3d 100644
 --- a/src/go/build/deps_test.go
diff --git a/patches/0005-Add-CNG-crypto-backend.patch b/patches/0006-Add-CNG-crypto-backend.patch
similarity index 92%
rename from patches/0005-Add-CNG-crypto-backend.patch
rename to patches/0006-Add-CNG-crypto-backend.patch
index 4bdd4c4811b..5b5ed57f448 100644
--- a/patches/0005-Add-CNG-crypto-backend.patch
+++ b/patches/0006-Add-CNG-crypto-backend.patch
@@ -11,11 +11,9 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/common.go       |   9 +-
  src/crypto/internal/backend/fips140/cng.go  |  33 ++
  src/crypto/rsa/pss_test.go                  |   2 +-
- src/go.mod                                  |   1 +
- src/go.sum                                  |   2 +
  src/go/build/deps_test.go                   |   5 +
  src/go/build/vendor_test.go                 |   1 +
- 11 files changed, 401 insertions(+), 5 deletions(-)
+ 9 files changed, 398 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
@@ -481,30 +479,6 @@ index a4af0a2144870a..7d7115cff81cea 100644
  	if err != nil {
  		t.Fatal(err)
  	}
-diff --git a/src/go.mod b/src/go.mod
-index f12d9b4d9172ab..96bdcd421e1129 100644
---- a/src/go.mod
-+++ b/src/go.mod
-@@ -4,6 +4,7 @@ go 1.24
- 
- require (
- 	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
- 	golang.org/x/crypto v0.30.0
- 	golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1
- )
-diff --git a/src/go.sum b/src/go.sum
-index e51f0f57540a83..abebb59dcd7739 100644
---- a/src/go.sum
-+++ b/src/go.sum
-@@ -1,5 +1,7 @@
- github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
- github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
- golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
- golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 3de94c93629e3d..8effe9041f3f5f 100644
 --- a/src/go/build/deps_test.go

From 9cf47877181eb12dea68893654f8d371beda6a42 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 14 Jan 2025 10:45:11 +0100
Subject: [PATCH 185/887] clean up patch files

---
 patches/0002-Vendor-crypto-backends.patch     |  16 ++-
 .../0003-Add-crypto-backend-foundation.patch  | 135 +++++++++++++-----
 .../0004-Add-BoringSSL-crypto-backend.patch   |  16 ++-
 patches/0005-Add-OpenSSL-crypto-backend.patch |  71 +++------
 patches/0006-Add-CNG-crypto-backend.patch     | 112 ++-------------
 5 files changed, 154 insertions(+), 196 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 264f3b12012..27f1d7f925f 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -9,6 +9,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |  16 +
  src/go.mod                                    |   5 +
  src/go.sum                                    |   4 +
+ src/go/build/vendor_test.go                   |   2 +
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
@@ -73,7 +74,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  11 +
- 67 files changed, 11000 insertions(+)
+ 68 files changed, 11002 insertions(+)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -186,6 +187,19 @@ index 9e661352f16e0b..abebb59dcd7739 100644
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
+diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
+index 7f6237ffd59c11..1d0b9b20e9b1d4 100644
+--- a/src/go/build/vendor_test.go
++++ b/src/go/build/vendor_test.go
+@@ -22,6 +22,8 @@ var allowedPackagePrefixes = []string{
+ 	"github.com/google/pprof",
+ 	"github.com/ianlancetaylor/demangle",
+ 	"rsc.io/markdown",
++	"github.com/golang-fips/openssl",
++	"github.com/microsoft/go-crypto-winnative",
+ }
+ 
+ // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
 index 00000000000000..79b5594df7fa29
diff --git a/patches/0003-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
index 99140818363..32a93ef2774 100644
--- a/patches/0003-Add-crypto-backend-foundation.patch
+++ b/patches/0003-Add-crypto-backend-foundation.patch
@@ -6,6 +6,7 @@ Subject: [PATCH] Add crypto backend foundation
 ---
  src/cmd/api/boring_test.go                    |   2 +-
  src/cmd/go/go_boring_test.go                  |   2 +-
+ .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
@@ -17,6 +18,7 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/ecdh/ecdh.go                       |   2 +-
  src/crypto/ecdh/ecdh_test.go                  |   4 +
  src/crypto/ecdh/nist.go                       |   2 +-
+ src/crypto/ecdsa/badlinkname.go               |  19 ++
  src/crypto/ecdsa/boring.go                    |   6 +-
  src/crypto/ecdsa/ecdsa.go                     |   4 +-
  src/crypto/ecdsa/notboring.go                 |   4 +-
@@ -29,12 +31,12 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/backend/backend_test.go   |  30 +++
  src/crypto/internal/backend/bbig/big.go       |  17 ++
- src/crypto/internal/backend/common.go         |  72 ++++++
- .../internal/backend/fips140/fips140.go       |  55 +++++
+ src/crypto/internal/backend/common.go         |  58 +++++
+ .../internal/backend/fips140/fips140.go       |  55 ++++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
- src/crypto/internal/backend/nobackend.go      | 233 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 236 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
@@ -51,9 +53,9 @@ Subject: [PATCH] Add crypto backend foundation
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
- src/crypto/rsa/pss_test.go                    |   5 +
+ src/crypto/rsa/pss_test.go                    |   9 +-
  src/crypto/rsa/rsa.go                         |   4 +-
- src/crypto/rsa/rsa_test.go                    |  12 +-
+ src/crypto/rsa/rsa_test.go                    |  15 +-
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  19 +-
  src/crypto/sha256/sha256.go                   |   6 +-
@@ -79,9 +81,10 @@ Subject: [PATCH] Add crypto backend foundation
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++--
  src/runtime/runtime_boring.go                 |   5 +
- 75 files changed, 1432 insertions(+), 96 deletions(-)
+ 77 files changed, 1455 insertions(+), 97 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
+ create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -124,6 +127,25 @@ index ed0fbf3d53d75b..06478963f4be44 100644
  
  package main_test
  
+diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
+index 4aaf46b5d0f0dc..ec58a217400caa 100644
+--- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
++++ b/src/cmd/go/testdata/script/gopath_std_vendor.txt
+@@ -1,5 +1,14 @@
+ env GO111MODULE=off
+ 
++# Disable systemcrypto while evaluating test dependencies to avoid importing
++# vendored crypto module dependencies like golang-fips/openssl. This test script
++# is not set up to handle any vendored libraries being imported other than
++# golang.org/x/net/http2/hpack, so we must make sure it is the only one.
++#
++# See https://github.com/microsoft/go/issues/481 for more details, such as the
++# dependency chain that would cause the failure if the gocrypt tag isn't used.
++env GOEXPERIMENT=none
++
+ [!compiler:gc] skip
+ 
+ go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
 index 5bc2d13d673e0a..b803c77be62a66 100644
 --- a/src/crypto/aes/aes.go
@@ -539,6 +561,31 @@ index acef8298943c2b..ca6171cf775117 100644
  	"crypto/internal/fips140/ecdh"
  	"crypto/internal/fips140only"
  	"errors"
+diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
+new file mode 100644
+index 00000000000000..1dc05d09b2062d
+--- /dev/null
++++ b/src/crypto/ecdsa/badlinkname.go
+@@ -0,0 +1,19 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package ecdsa
++
++import _ "unsafe"
++
++// The symbols below are pulled by some crypto backend in the Microsoft Go compiler.
++// We provide a push linkname here, to keep them accessible with pull linknames.
++
++//go:linkname encodeSignature
++//go:linkname parseSignature
++
++// This supplements other linknames that are already added by
++// https://github.com/golang/go/commit/41aab30bd260297ad8ddad47e98fdf8390a9a67e
++// See that commit for more information.
 diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
 index 275c60b4de49eb..ff8bddf28c4545 100644
 --- a/src/crypto/ecdsa/boring.go
@@ -964,10 +1011,10 @@ index 00000000000000..20251a290dc2e0
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..858e76e3c51c06
+index 00000000000000..0402524861dc53
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,72 @@
+@@ -0,0 +1,58 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -977,7 +1024,6 @@ index 00000000000000..858e76e3c51c06
 +import (
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
-+	"internal/goexperiment"
 +	"runtime"
 +)
 +
@@ -1014,7 +1060,11 @@ index 00000000000000..858e76e3c51c06
 +// UnreachableExceptTests marks code that should be unreachable
 +// when backend is in use. It panics.
 +func UnreachableExceptTests() {
-+	if Enabled {
++	// runtime_arg0 is not supported on windows.
++	// We are going through the same code patch on linux,
++	// so if we are unintentionally calling an 'unreachable' function,
++	// we will catch it there.
++	if Enabled && runtime.GOOS != "windows" {
 +		name := runtime_arg0()
 +		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
 +		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
@@ -1023,23 +1073,6 @@ index 00000000000000..858e76e3c51c06
 +		}
 +	}
 +}
-+
-+func IsRSAKeySupported(primes int) bool {
-+	if goexperiment.BoringCrypto {
-+		return true
-+	}
-+	// CNG only supports 2-prime RSA keys.
-+	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
-+	// but the SymCrypt provider for OpenSSL only supports 2-prime RSA keys.
-+	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
-+	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
-+	// Given the above reasons, we only support 2-prime RSA keys.
-+	return primes == 2
-+}
-+
-+func IsSaltSupported(salt int) bool {
-+	return true
-+}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
 index 00000000000000..f54d39970319af
@@ -1153,10 +1186,10 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..3ebb6d5e4b4bb5
+index 00000000000000..4a3d8b729da30f
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,233 @@
+@@ -0,0 +1,236 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1228,6 +1261,9 @@ index 00000000000000..3ebb6d5e4b4bb5
 +	panic("cryptobackend: not available")
 +}
 +
++func SupportsRSAKeyPrimes(primes int) bool { panic("cryptobackend: not available") }
++func SupportsRSASaltLength(salt int) bool  { panic("cryptobackend: not available") }
++
 +type PublicKeyRSA struct{ _ int }
 +type PrivateKeyRSA struct{ _ int }
 +
@@ -1689,7 +1725,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 8373c125ae3096..bcc534151f9ac3 100644
+index 8373c125ae3096..cee523891d5897 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -1706,7 +1742,7 @@ index 8373c125ae3096..bcc534151f9ac3 100644
  	}
  
 -	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.IsRSAKeySupported(len(priv.Primes)) && boring.SupportsHash(hash) {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1715,7 +1751,7 @@ index 8373c125ae3096..bcc534151f9ac3 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.IsSaltSupported(opts.saltLength()) && boring.SupportsHash(hash) {
++	if boring.Enabled && boring.SupportsRSASaltLength(opts.saltLength()) && boring.SupportsHash(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -1724,7 +1760,7 @@ index 8373c125ae3096..bcc534151f9ac3 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
@@ -1733,7 +1769,7 @@ index 8373c125ae3096..bcc534151f9ac3 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1756,7 +1792,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index f1e4ef48a4fd1c..cb5aa30920bb7d 100644
+index f1e4ef48a4fd1c..a179a4388e3ee5 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -1773,7 +1809,7 @@ index f1e4ef48a4fd1c..cb5aa30920bb7d 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1782,7 +1818,7 @@ index f1e4ef48a4fd1c..cb5aa30920bb7d 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.IsRSAKeySupported(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
  		if err != nil {
@@ -1810,7 +1846,7 @@ index c65552cd93526a..910416abe842f5 100644
  	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
  	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index e03f4ab06603c6..a4af0a2144870a 100644
+index e03f4ab06603c6..f31d492d53cf96 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
 @@ -8,6 +8,7 @@ import (
@@ -1832,6 +1868,17 @@ index e03f4ab06603c6..a4af0a2144870a 100644
  		opts.SaltLength = test.verifySaltLength
  		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
  		good := test.good
+@@ -241,7 +246,9 @@ func fromHex(hexStr string) []byte {
+ 
+ func TestInvalidPSSSaltLength(t *testing.T) {
+ 	t.Setenv("GODEBUG", "rsa1024min=0")
+-	key, err := GenerateKey(rand.Reader, 245)
++	// Most crypto backends don't support generating RSA keys with a bit size
++	// lower than 512, so we use 512 here.
++	key, err := GenerateKey(rand.Reader, 512)
+ 	if err != nil {
+ 		t.Fatal(err)
+ 	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
 index 95bb4becd2ff8c..73991434dabaf1 100644
 --- a/src/crypto/rsa/rsa.go
@@ -1848,7 +1895,7 @@ index 95bb4becd2ff8c..73991434dabaf1 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 73b0c3749eedb2..b527a355074482 100644
+index 73b0c3749eedb2..1a712a0e1c5d95 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1884,6 +1931,16 @@ index 73b0c3749eedb2..b527a355074482 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
+@@ -853,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
+ }
+ 
+ func Test2DecryptOAEP(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("Some crypto backends don't supports OAEPOptions.MGFHash.")
++	}
+ 	random := rand.Reader
+ 
+ 	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
 index d2ffaac0aeb674..23d8ad44d0bd9a 100644
 --- a/src/crypto/sha1/sha1.go
diff --git a/patches/0004-Add-BoringSSL-crypto-backend.patch b/patches/0004-Add-BoringSSL-crypto-backend.patch
index ca91aaff124..7ab03583455 100644
--- a/patches/0004-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0004-Add-BoringSSL-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 267 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 275 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 290 insertions(+)
+ 3 files changed, 298 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/boring.go
@@ -32,10 +32,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..94bc444f10eb2b
+index 00000000000000..c49291c2f62b4c
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,267 @@
+@@ -0,0 +1,275 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -116,6 +116,14 @@ index 00000000000000..94bc444f10eb2b
 +	return boring.VerifyECDSA(pub, hash, sig)
 +}
 +
++func SupportsRSAKeyPrimes(primes int) bool {
++	return true
++}
++
++func SupportsRSASaltLength(salt int) bool {
++	return true
++}
++
 +type PublicKeyRSA = boring.PublicKeyRSA
 +type PrivateKeyRSA = boring.PrivateKeyRSA
 +
diff --git a/patches/0005-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
index 648570df40b..b353bd0cfea 100644
--- a/patches/0005-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0005-Add-OpenSSL-crypto-backend.patch
@@ -5,16 +5,13 @@ Subject: [PATCH] Add OpenSSL crypto backend
 
 ---
  src/cmd/dist/test.go                          |   3 +-
- .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/lib.go               |   1 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- .../internal/backend/fips140/openssl.go       |  41 +++
- src/crypto/internal/backend/openssl_linux.go  | 345 ++++++++++++++++++
- src/crypto/rsa/rsa_test.go                    |   3 +
+ .../internal/backend/fips140/openssl.go       |  41 ++
+ src/crypto/internal/backend/openssl_linux.go  | 358 ++++++++++++++++++
  src/go/build/deps_test.go                     |   9 +-
- src/go/build/vendor_test.go                   |   1 +
  src/os/exec/exec_test.go                      |   9 +
- 10 files changed, 428 insertions(+), 5 deletions(-)
+ 7 files changed, 428 insertions(+), 5 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -37,25 +34,6 @@ index 0c992118f4287b..0de6e80fd985a3 100644
  			// Static linking tests
  			if goos != "android" && p != "netbsd/arm" && !t.msan && !t.asan {
  				// TODO(#56629): Why does this fail on netbsd-arm?
-diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
-index 4aaf46b5d0f0dc..6fe798cf4a94e9 100644
---- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
-+++ b/src/cmd/go/testdata/script/gopath_std_vendor.txt
-@@ -1,5 +1,14 @@
- env GO111MODULE=off
- 
-+# Disable OpenSSLCrypto backend while evaluating test dependencies to avoid importing
-+# vendored crypto module dependencies like golang-fips/openssl. This test script
-+# is not set up to handle any vendored libraries being imported other than
-+# golang.org/x/net/http2/hpack, so we must make sure it is the only one.
-+#
-+# See https://github.com/microsoft/go/issues/481 for more details, such as the
-+# dependency chain that would cause the failure if the gocrypt tag isn't used.
-+env GOEXPERIMENT=none
-+
- [!compiler:gc] skip
- 
- go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
 index 2d8f964f3594c6..a587e1abde57c9 100644
 --- a/src/cmd/link/internal/ld/lib.go
@@ -135,10 +113,10 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..44d91d5b7ba3d5
+index 00000000000000..0f3aea733ac2a5
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,345 @@
+@@ -0,0 +1,358 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -273,6 +251,19 @@ index 00000000000000..44d91d5b7ba3d5
 +	return openssl.VerifyECDSA(pub, hash, sig)
 +}
 +
++func SupportsRSAKeyPrimes(primes int) bool {
++	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
++	// but SCOSSL only supports 2-prime RSA keys.
++	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
++	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
++	// Given the above reasons, we only support what SCOSSL supports.
++	return primes == 2
++}
++
++func SupportsRSASaltLength(salt int) bool {
++	return true
++}
++
 +type PublicKeyRSA = openssl.PublicKeyRSA
 +type PrivateKeyRSA = openssl.PrivateKeyRSA
 +
@@ -484,20 +475,6 @@ index 00000000000000..44d91d5b7ba3d5
 +
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
-diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index b527a355074482..906c469482030a 100644
---- a/src/crypto/rsa/rsa_test.go
-+++ b/src/crypto/rsa/rsa_test.go
-@@ -863,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
- }
- 
- func Test2DecryptOAEP(t *testing.T) {
-+	if boring.Enabled {
-+		t.Skip("OpenSSL backend does not supports OAEPOptions.MGFHash yet.")
-+	}
- 	random := rand.Reader
- 
- 	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 30811455e88418..3de94c93629e3d 100644
 --- a/src/go/build/deps_test.go
@@ -546,18 +523,6 @@ index 30811455e88418..3de94c93629e3d 100644
  		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
  	}
  	fset := token.NewFileSet()
-diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 7f6237ffd59c11..7c821ae4bc5727 100644
---- a/src/go/build/vendor_test.go
-+++ b/src/go/build/vendor_test.go
-@@ -22,6 +22,7 @@ var allowedPackagePrefixes = []string{
- 	"github.com/google/pprof",
- 	"github.com/ianlancetaylor/demangle",
- 	"rsc.io/markdown",
-+	"github.com/golang-fips/openssl",
- }
- 
- // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
 index 8c623871932f7d..2fa55073f5c19c 100644
 --- a/src/os/exec/exec_test.go
diff --git a/patches/0006-Add-CNG-crypto-backend.patch b/patches/0006-Add-CNG-crypto-backend.patch
index 5b5ed57f448..256c9bef28d 100644
--- a/patches/0006-Add-CNG-crypto-backend.patch
+++ b/patches/0006-Add-CNG-crypto-backend.patch
@@ -4,59 +4,15 @@ Date: Tue, 19 Jul 2022 15:58:02 +0200
 Subject: [PATCH] Add CNG crypto backend
 
 ---
- src/crypto/ecdsa/badlinkname.go             |  17 ++
- src/crypto/internal/backend/backend_test.go |   4 +-
  src/crypto/internal/backend/bbig/big_cng.go |  12 +
- src/crypto/internal/backend/cng_windows.go  | 320 ++++++++++++++++++++
- src/crypto/internal/backend/common.go       |   9 +-
+ src/crypto/internal/backend/cng_windows.go  | 329 ++++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go  |  33 ++
- src/crypto/rsa/pss_test.go                  |   2 +-
  src/go/build/deps_test.go                   |   5 +
- src/go/build/vendor_test.go                 |   1 +
- 9 files changed, 398 insertions(+), 5 deletions(-)
- create mode 100644 src/crypto/ecdsa/badlinkname.go
+ 4 files changed, 379 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/fips140/cng.go
 
-diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
-new file mode 100644
-index 00000000000000..0d00b7bb3a7fc8
---- /dev/null
-+++ b/src/crypto/ecdsa/badlinkname.go
-@@ -0,0 +1,17 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package ecdsa
-+
-+import _ "unsafe"
-+
-+// The symbols below are pulled by the CNG backend in the Microsoft Go compiler.
-+// We provide a push linkname here, to keep them accessible with pull linknames.
-+
-+//go:linkname encodeSignature
-+//go:linkname parseSignature
-+
-+// This supplements other linknames that are already added by
-+// https://github.com/golang/go/commit/41aab30bd260297ad8ddad47e98fdf8390a9a67e
-+// See that commit for more information.
-diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
-index c2c06d3bff8c74..837cff477e257e 100644
---- a/src/crypto/internal/backend/backend_test.go
-+++ b/src/crypto/internal/backend/backend_test.go
-@@ -4,9 +4,7 @@
- 
- package backend
- 
--import (
--	"testing"
--)
-+import "testing"
- 
- // Test that Unreachable panics.
- func TestUnreachable(t *testing.T) {
 diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
 new file mode 100644
 index 00000000000000..92623031fd87d0
@@ -77,10 +33,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..495260a08dd029
+index 00000000000000..6bfbdc57f0518b
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,320 @@
+@@ -0,0 +1,329 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -206,6 +162,15 @@ index 00000000000000..495260a08dd029
 +	return cng.VerifyECDSA(pub, hash, r, s)
 +}
 +
++func SupportsRSAKeyPrimes(primes int) bool {
++	// CNG only supports 2-prime RSA keys.
++	return primes == 2
++}
++
++func SupportsRSASaltLength(salt int) bool {
++	return salt != 0 // rsa.PSSSaltLengthAuto
++}
++
 +type PublicKeyRSA = cng.PublicKeyRSA
 +type PrivateKeyRSA = cng.PrivateKeyRSA
 +
@@ -401,32 +366,6 @@ index 00000000000000..495260a08dd029
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
-diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-index 858e76e3c51c06..91223c0ef0f810 100644
---- a/src/crypto/internal/backend/common.go
-+++ b/src/crypto/internal/backend/common.go
-@@ -44,7 +44,11 @@ func hasSuffix(s, t string) bool {
- // UnreachableExceptTests marks code that should be unreachable
- // when backend is in use. It panics.
- func UnreachableExceptTests() {
--	if Enabled {
-+	// runtime_arg0 is not supported on windows.
-+	// We are going through the same code patch on linux,
-+	// so if we are unintentionally calling an 'unreachable' function,
-+	// we will catch it there.
-+	if Enabled && !goexperiment.CNGCrypto {
- 		name := runtime_arg0()
- 		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
- 		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-@@ -68,5 +72,8 @@ func IsRSAKeySupported(primes int) bool {
- }
- 
- func IsSaltSupported(salt int) bool {
-+	if goexperiment.CNGCrypto {
-+		return salt != 0 // rsa.PSSSaltLengthAuto
-+	}
- 	return true
- }
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
 index 00000000000000..f769d15f94ab05
@@ -466,19 +405,6 @@ index 00000000000000..f769d15f94ab05
 +	}
 +	return enabled != 0
 +}
-diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index a4af0a2144870a..7d7115cff81cea 100644
---- a/src/crypto/rsa/pss_test.go
-+++ b/src/crypto/rsa/pss_test.go
-@@ -246,7 +246,7 @@ func fromHex(hexStr string) []byte {
- 
- func TestInvalidPSSSaltLength(t *testing.T) {
- 	t.Setenv("GODEBUG", "rsa1024min=0")
--	key, err := GenerateKey(rand.Reader, 245)
-+	key, err := GenerateKey(rand.Reader, 512)
- 	if err != nil {
- 		t.Fatal(err)
- 	}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 3de94c93629e3d..8effe9041f3f5f 100644
 --- a/src/go/build/deps_test.go
@@ -502,15 +428,3 @@ index 3de94c93629e3d..8effe9041f3f5f 100644
  	< github.com/golang-fips/openssl/v2/bbig
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
-diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 7c821ae4bc5727..1d0b9b20e9b1d4 100644
---- a/src/go/build/vendor_test.go
-+++ b/src/go/build/vendor_test.go
-@@ -23,6 +23,7 @@ var allowedPackagePrefixes = []string{
- 	"github.com/ianlancetaylor/demangle",
- 	"rsc.io/markdown",
- 	"github.com/golang-fips/openssl",
-+	"github.com/microsoft/go-crypto-winnative",
- }
- 
- // Verify that the vendor directories contain only packages matching the list above.

From dfd8d2d855938ea180ce386e57ad5fe98d6c3d7f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 14 Jan 2025 13:37:44 +0100
Subject: [PATCH 186/887] split crypto backend foundation patch (#1485)

---
 .../0003-Add-crypto-backend-foundation.patch  | 2448 +----------------
 patches/0005-Add-OpenSSL-crypto-backend.patch |   24 +-
 patches/0007-Use-crypto-backends.patch        | 2443 ++++++++++++++++
 ....patch => 0008-Add-backend-code-gen.patch} |    0
 ...patch => 0009-Update-default-go.env.patch} |    0
 ... 0010-Skip-failing-tests-on-Windows.patch} |    0
 ...OFIPS-when-running-the-Go-toolchain.patch} |    0
 ...pport-for-logging-used-Windows-APIs.patch} |    0
 ... 0013-remove-long-path-support-hack.patch} |    0
 ...ernal-go.mod-files-used-for-codegen.patch} |    0
 ...21-when-TLS-fipsonly-mode-is-enable.patch} |    0
 11 files changed, 2464 insertions(+), 2451 deletions(-)
 create mode 100644 patches/0007-Use-crypto-backends.patch
 rename patches/{0007-Add-backend-code-gen.patch => 0008-Add-backend-code-gen.patch} (100%)
 rename patches/{0008-Update-default-go.env.patch => 0009-Update-default-go.env.patch} (100%)
 rename patches/{0009-Skip-failing-tests-on-Windows.patch => 0010-Skip-failing-tests-on-Windows.patch} (100%)
 rename patches/{0010-unset-GOFIPS-when-running-the-Go-toolchain.patch => 0011-unset-GOFIPS-when-running-the-Go-toolchain.patch} (100%)
 rename patches/{0011-add-support-for-logging-used-Windows-APIs.patch => 0012-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0012-remove-long-path-support-hack.patch => 0013-remove-long-path-support-hack.patch} (100%)
 rename patches/{0013-Omit-internal-go.mod-files-used-for-codegen.patch => 0014-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch => 0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch} (100%)

diff --git a/patches/0003-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
index 32a93ef2774..2d37ac5751f 100644
--- a/patches/0003-Add-crypto-backend-foundation.patch
+++ b/patches/0003-Add-crypto-backend-foundation.patch
@@ -1,34 +1,9 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Thu, 30 Jun 2022 10:03:03 +0200
+Date: Tue, 14 Jan 2025 11:09:56 +0100
 Subject: [PATCH] Add crypto backend foundation
 
 ---
- src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/go/go_boring_test.go                  |   2 +-
- .../go/testdata/script/gopath_std_vendor.txt  |   9 +
- src/crypto/aes/aes.go                         |   2 +-
- src/crypto/boring/boring.go                   |   4 +-
- src/crypto/cipher/ctr_aes_test.go             |   2 +-
- src/crypto/cipher/gcm_test.go                 |   2 +-
- src/crypto/des/cipher.go                      |   7 +
- src/crypto/dsa/boring.go                      | 113 +++++++++
- src/crypto/dsa/dsa.go                         |  88 +++++++
- src/crypto/dsa/notboring.go                   |  16 ++
- src/crypto/ecdh/ecdh.go                       |   2 +-
- src/crypto/ecdh/ecdh_test.go                  |   4 +
- src/crypto/ecdh/nist.go                       |   2 +-
- src/crypto/ecdsa/badlinkname.go               |  19 ++
- src/crypto/ecdsa/boring.go                    |   6 +-
- src/crypto/ecdsa/ecdsa.go                     |   4 +-
- src/crypto/ecdsa/notboring.go                 |   4 +-
- src/crypto/ed25519/boring.go                  |  71 ++++++
- src/crypto/ed25519/ed25519.go                 |  73 ++++++
- src/crypto/ed25519/notboring.go               |  16 ++
- src/crypto/hkdf/hkdf.go                       |  14 ++
- src/crypto/hkdf/hkdf_test.go                  |   2 +-
- src/crypto/hmac/hmac.go                       |   2 +-
- src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/backend/backend_test.go   |  30 +++
  src/crypto/internal/backend/bbig/big.go       |  17 ++
  src/crypto/internal/backend/common.go         |  58 +++++
@@ -38,55 +13,9 @@ Subject: [PATCH] Add crypto backend foundation
  .../backend/fips140/nosystemcrypto.go         |  11 +
  src/crypto/internal/backend/nobackend.go      | 236 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/internal/cryptotest/allocations.go |   2 +-
- .../internal/cryptotest/implementations.go    |   2 +-
- src/crypto/md5/md5.go                         |  10 +
- src/crypto/md5/md5_test.go                    |  21 ++
- src/crypto/pbkdf2/pbkdf2.go                   |   4 +
- src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
- src/crypto/purego_test.go                     |   2 +-
- src/crypto/rand/rand.go                       |   2 +-
- src/crypto/rc4/rc4.go                         |  18 ++
- src/crypto/rsa/boring.go                      |   6 +-
- src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/fips.go                        |  10 +-
- src/crypto/rsa/notboring.go                   |   4 +-
- src/crypto/rsa/pkcs1v15.go                    |   6 +-
- src/crypto/rsa/pkcs1v15_test.go               |   5 +
- src/crypto/rsa/pss_test.go                    |   9 +-
- src/crypto/rsa/rsa.go                         |   4 +-
- src/crypto/rsa/rsa_test.go                    |  15 +-
- src/crypto/sha1/sha1.go                       |   8 +-
- src/crypto/sha1/sha1_test.go                  |  19 +-
- src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  29 +++
- src/crypto/sha512/sha512.go                   |   2 +-
- src/crypto/sha512/sha512_test.go              |  29 +++
- src/crypto/tls/cipher_suites.go               |   2 +-
- src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
- src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
- src/crypto/tls/handshake_client.go            |  12 +-
- src/crypto/tls/handshake_client_tls13.go      |  16 +-
- src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  27 +-
- src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
- src/crypto/tls/internal/tls13/doc.go          |  18 ++
- src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++
- src/crypto/tls/key_schedule.go                |   2 +-
- src/crypto/tls/prf.go                         |  41 +++
- src/go/build/deps_test.go                     |   9 +-
- src/hash/boring_test.go                       |   9 +
- src/hash/example_test.go                      |   2 +
- src/hash/marshal_test.go                      |   9 +
- src/hash/notboring_test.go                    |   9 +
- src/net/smtp/smtp_test.go                     |  72 ++++--
+ src/go/build/deps_test.go                     |   7 +-
  src/runtime/runtime_boring.go                 |   5 +
- 77 files changed, 1455 insertions(+), 97 deletions(-)
- create mode 100644 src/crypto/dsa/boring.go
- create mode 100644 src/crypto/dsa/notboring.go
- create mode 100644 src/crypto/ecdsa/badlinkname.go
- create mode 100644 src/crypto/ed25519/boring.go
- create mode 100644 src/crypto/ed25519/notboring.go
+ 11 files changed, 446 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
  create mode 100644 src/crypto/internal/backend/common.go
@@ -96,860 +25,7 @@ Subject: [PATCH] Add crypto backend foundation
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/crypto/tls/internal/tls13/doc.go
- create mode 100644 src/crypto/tls/internal/tls13/tls13.go
- create mode 100644 src/hash/boring_test.go
- create mode 100644 src/hash/notboring_test.go
 
-diff --git a/src/cmd/api/boring_test.go b/src/cmd/api/boring_test.go
-index f0e3575637c62a..9eab3b4e66e60b 100644
---- a/src/cmd/api/boring_test.go
-+++ b/src/cmd/api/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package main
- 
-diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
-index ed0fbf3d53d75b..06478963f4be44 100644
---- a/src/cmd/go/go_boring_test.go
-+++ b/src/cmd/go/go_boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package main_test
- 
-diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
-index 4aaf46b5d0f0dc..ec58a217400caa 100644
---- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
-+++ b/src/cmd/go/testdata/script/gopath_std_vendor.txt
-@@ -1,5 +1,14 @@
- env GO111MODULE=off
- 
-+# Disable systemcrypto while evaluating test dependencies to avoid importing
-+# vendored crypto module dependencies like golang-fips/openssl. This test script
-+# is not set up to handle any vendored libraries being imported other than
-+# golang.org/x/net/http2/hpack, so we must make sure it is the only one.
-+#
-+# See https://github.com/microsoft/go/issues/481 for more details, such as the
-+# dependency chain that would cause the failure if the gocrypt tag isn't used.
-+env GOEXPERIMENT=none
-+
- [!compiler:gc] skip
- 
- go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
-diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
-index 5bc2d13d673e0a..b803c77be62a66 100644
---- a/src/crypto/aes/aes.go
-+++ b/src/crypto/aes/aes.go
-@@ -15,7 +15,7 @@ package aes
- 
- import (
- 	"crypto/cipher"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/aes"
- 	"strconv"
- )
-diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
-index 097c37e343fdb8..a5d603896d3890 100644
---- a/src/crypto/boring/boring.go
-+++ b/src/crypto/boring/boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- // Package boring exposes functions that are only available when building with
- // Go+BoringCrypto. This package is available on all targets as long as the
-@@ -13,7 +13,7 @@
- // is satisfied, so that applications can tag files that use this package.
- package boring
- 
--import "crypto/internal/boring"
-+import boring "crypto/internal/backend"
- 
- // Enabled reports whether BoringCrypto handles supported crypto operations.
- func Enabled() bool {
-diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
-index 33942467784ad3..0282ffa9fa23c8 100644
---- a/src/crypto/cipher/ctr_aes_test.go
-+++ b/src/crypto/cipher/ctr_aes_test.go
-@@ -14,7 +14,7 @@ import (
- 	"bytes"
- 	"crypto/aes"
- 	"crypto/cipher"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	fipsaes "crypto/internal/fips140/aes"
- 	"encoding/hex"
-diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index ea2b4e29e2b67f..f884b0d0fbefe7 100644
---- a/src/crypto/cipher/gcm_test.go
-+++ b/src/crypto/cipher/gcm_test.go
-@@ -8,7 +8,7 @@ import (
- 	"bytes"
- 	"crypto/aes"
- 	"crypto/cipher"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"crypto/internal/fips140"
- 	fipsaes "crypto/internal/fips140/aes"
-diff --git a/src/crypto/des/cipher.go b/src/crypto/des/cipher.go
-index 21303b384cf757..0d3c4f810cfd8f 100644
---- a/src/crypto/des/cipher.go
-+++ b/src/crypto/des/cipher.go
-@@ -6,6 +6,7 @@ package des
- 
- import (
- 	"crypto/cipher"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/alias"
- 	"crypto/internal/fips140only"
- 	"errors"
-@@ -36,6 +37,9 @@ func NewCipher(key []byte) (cipher.Block, error) {
- 	if len(key) != 8 {
- 		return nil, KeySizeError(len(key))
- 	}
-+	if boring.Enabled && boring.SupportsDESCipher() {
-+		return boring.NewDESCipher(key)
-+	}
- 
- 	c := new(desCipher)
- 	c.generateSubkeys(key)
-@@ -84,6 +88,9 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
- 	if len(key) != 24 {
- 		return nil, KeySizeError(len(key))
- 	}
-+	if boring.Enabled && boring.SupportsTripleDESCipher() {
-+		return boring.NewTripleDESCipher(key)
-+	}
- 
- 	c := new(tripleDESCipher)
- 	c.cipher1.generateSubkeys(key[:8])
-diff --git a/src/crypto/dsa/boring.go b/src/crypto/dsa/boring.go
-new file mode 100644
-index 00000000000000..7ea0c8c423e9ee
---- /dev/null
-+++ b/src/crypto/dsa/boring.go
-@@ -0,0 +1,113 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package dsa
-+
-+import (
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
-+	"crypto/internal/boring/bcache"
-+	"math/big"
-+)
-+
-+// Cached conversions from Go PublicKey/PrivateKey to BoringCrypto.
-+//
-+// The first operation on a PublicKey or PrivateKey makes a parallel
-+// BoringCrypto key and saves it in pubCache or privCache.
-+//
-+// We could just assume that once used in a sign/verify/encrypt/decrypt operation,
-+// a particular key is never again modified, but that has not been a
-+// stated assumption before. Just in case there is any existing code that
-+// does modify the key between operations, we save the original values
-+// alongside the cached BoringCrypto key and check that the real key
-+// still matches before using the cached key. The theory is that the real
-+// operations are significantly more expensive than the comparison.
-+
-+type boringPub struct {
-+	key  *boring.PublicKeyDSA
-+	orig PublicKey
-+}
-+
-+var pubCache bcache.Cache[PublicKey, boringPub]
-+var privCache bcache.Cache[PrivateKey, boringPriv]
-+
-+func init() {
-+	pubCache.Register()
-+	privCache.Register()
-+}
-+
-+func boringPublicKey(pub *PublicKey) (*boring.PublicKeyDSA, error) {
-+	b := pubCache.Get(pub)
-+	if b != nil && publicKeyEqual(&b.orig, pub) {
-+		return b.key, nil
-+	}
-+
-+	b = new(boringPub)
-+	b.orig = copyPublicKey(pub)
-+	key, err := boring.NewPublicKeyDSA(bbig.Enc(b.orig.P), bbig.Enc(b.orig.Q), bbig.Enc(b.orig.G), bbig.Enc(b.orig.Y))
-+	if err != nil {
-+		return nil, err
-+	}
-+	b.key = key
-+	pubCache.Put(pub, b)
-+	return key, nil
-+}
-+
-+type boringPriv struct {
-+	key  *boring.PrivateKeyDSA
-+	orig PrivateKey
-+}
-+
-+func boringPrivateKey(priv *PrivateKey) (*boring.PrivateKeyDSA, error) {
-+	b := privCache.Get(priv)
-+	if b != nil && privateKeyEqual(&b.orig, priv) {
-+		return b.key, nil
-+	}
-+
-+	b = new(boringPriv)
-+	b.orig = copyPrivateKey(priv)
-+
-+	P := b.orig.P
-+	Q := b.orig.Q
-+	G := b.orig.G
-+	X := b.orig.X
-+	Y := b.orig.Y
-+
-+	key, err := boring.NewPrivateKeyDSA(bbig.Enc(P), bbig.Enc(Q), bbig.Enc(G), bbig.Enc(X), bbig.Enc(Y))
-+	if err != nil {
-+		return nil, err
-+	}
-+	b.key = key
-+	privCache.Put(priv, b)
-+	return key, nil
-+}
-+
-+func publicKeyEqual(k1, k2 *PublicKey) bool {
-+	return k1.Y != nil && k1.Y.Cmp(k2.Y) == 0 && k1.P.Cmp(k2.P) == 0 && k1.Q.Cmp(k2.Q) == 0 && k1.G.Cmp(k2.G) == 0
-+}
-+
-+func copyPublicKey(k *PublicKey) PublicKey {
-+	return PublicKey{
-+		Parameters: Parameters{
-+			P: new(big.Int).Set(k.P),
-+			Q: new(big.Int).Set(k.Q),
-+			G: new(big.Int).Set(k.G),
-+		},
-+		Y: new(big.Int).Set(k.Y),
-+	}
-+}
-+
-+func privateKeyEqual(k1, k2 *PrivateKey) bool {
-+	return publicKeyEqual(&k1.PublicKey, &k2.PublicKey) &&
-+		k1.X.Cmp(k2.X) == 0
-+}
-+
-+func copyPrivateKey(k *PrivateKey) PrivateKey {
-+	return PrivateKey{
-+		PublicKey: copyPublicKey(&k.PublicKey),
-+		X:         new(big.Int).Set(k.X),
-+	}
-+}
-diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 000becc82dfb79..6430bb3ea5e437 100644
---- a/src/crypto/dsa/dsa.go
-+++ b/src/crypto/dsa/dsa.go
-@@ -18,8 +18,13 @@ import (
- 	"io"
- 	"math/big"
- 
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/fips140only"
- 	"crypto/internal/randutil"
-+
-+	"golang.org/x/crypto/cryptobyte"
-+	"golang.org/x/crypto/cryptobyte/asn1"
- )
- 
- // Parameters represents the domain parameters for a key. These parameters can
-@@ -91,6 +96,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
- 		return errors.New("crypto/dsa: invalid ParameterSizes")
- 	}
- 
-+	if boring.Enabled && boring.SupportsDSA(L, N) {
-+		p, q, g, err := boring.GenerateParametersDSA(L, N)
-+		if err != nil {
-+			return err
-+		}
-+		params.P = bbig.Dec(p)
-+		params.Q = bbig.Dec(q)
-+		params.G = bbig.Dec(g)
-+		return nil
-+	}
-+
- 	qBytes := make([]byte, N/8)
- 	pBytes := make([]byte, L/8)
- 
-@@ -170,6 +186,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
- 		return errors.New("crypto/dsa: parameters not set up before generating key")
- 	}
- 
-+	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
-+		x, y, err := boring.GenerateKeyDSA(bbig.Enc(priv.P), bbig.Enc(priv.Q), bbig.Enc(priv.G))
-+		if err != nil {
-+			return err
-+		}
-+		priv.X = bbig.Dec(x)
-+		priv.Y = bbig.Dec(y)
-+
-+		return nil
-+	}
-+
- 	x := new(big.Int)
- 	xBytes := make([]byte, priv.Q.BitLen()/8)
- 
-@@ -225,6 +252,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
- 		err = ErrInvalidPublicKey
- 		return
- 	}
-+
-+	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
-+		b, err := boringPrivateKey(priv)
-+		if err != nil {
-+			return nil, nil, err
-+		}
-+
-+		r, s, err := boring.SignDSA(b, hash, parseSignature)
-+
-+		return bbig.Dec(r), bbig.Dec(s), err
-+	}
-+
- 	n >>= 3
- 
- 	var attempts int
-@@ -288,6 +327,14 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
- 		panic("crypto/dsa: use of DSA is not allowed in FIPS 140-only mode")
- 	}
- 
-+	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), pub.Q.BitLen()) {
-+		bkey, err := boringPublicKey(pub)
-+		if err != nil {
-+			return false
-+		}
-+
-+		return boring.VerifyDSA(bkey, hash, bbig.Enc(r), bbig.Enc(s), encodeSignature)
-+	}
- 	// FIPS 186-3, section 4.7
- 
- 	if pub.P.Sign() == 0 {
-@@ -324,3 +371,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
- 
- 	return v.Cmp(r) == 0
- }
-+
-+func parseSignature(sig []byte) (boring.BigInt, boring.BigInt, error) {
-+	var r, s []byte
-+	var inner cryptobyte.String
-+	input := cryptobyte.String(sig)
-+	if !input.ReadASN1(&inner, asn1.SEQUENCE) ||
-+		!input.Empty() ||
-+		!inner.ReadASN1Integer(&r) ||
-+		!inner.ReadASN1Integer(&s) ||
-+		!inner.Empty() {
-+		return nil, nil, errors.New("invalid ASN.1")
-+	}
-+	return bbig.Enc(new(big.Int).SetBytes(r)), bbig.Enc(new(big.Int).SetBytes(s)), nil
-+}
-+
-+func encodeSignature(r, s boring.BigInt) ([]byte, error) {
-+	var b cryptobyte.Builder
-+	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		addASN1IntBytes(b, bbig.Dec(r).Bytes())
-+		addASN1IntBytes(b, bbig.Dec(s).Bytes())
-+	})
-+	return b.Bytes()
-+}
-+
-+// addASN1IntBytes encodes in ASN.1 a positive integer represented as
-+// a big-endian byte slice with zero or more leading zeroes.
-+func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
-+	for len(bytes) > 0 && bytes[0] == 0 {
-+		bytes = bytes[1:]
-+	}
-+	if len(bytes) == 0 {
-+		b.SetError(errors.New("invalid integer"))
-+		return
-+	}
-+	b.AddASN1(asn1.INTEGER, func(c *cryptobyte.Builder) {
-+		if bytes[0]&0x80 != 0 {
-+			c.AddUint8(0)
-+		}
-+		c.AddBytes(bytes)
-+	})
-+}
-diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
-new file mode 100644
-index 00000000000000..cd02ff5a00c3dc
---- /dev/null
-+++ b/src/crypto/dsa/notboring.go
-@@ -0,0 +1,16 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package dsa
-+
-+import boring "crypto/internal/backend"
-+
-+func boringPublicKey(*PublicKey) (*boring.PublicKeyDSA, error) {
-+	panic("boringcrypto: not available")
-+}
-+func boringPrivateKey(*PrivateKey) (*boring.PrivateKeyDSA, error) {
-+	panic("boringcrypto: not available")
-+}
-diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
-index 231f1ea04c1010..cfa113e2345816 100644
---- a/src/crypto/ecdh/ecdh.go
-+++ b/src/crypto/ecdh/ecdh.go
-@@ -8,7 +8,7 @@ package ecdh
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/ecdh"
- 	"crypto/subtle"
- 	"errors"
-diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
-index 75d2480775669f..6a4d26fbafe090 100644
---- a/src/crypto/ecdh/ecdh_test.go
-+++ b/src/crypto/ecdh/ecdh_test.go
-@@ -9,6 +9,7 @@ import (
- 	"crypto"
- 	"crypto/cipher"
- 	"crypto/ecdh"
-+	boring "crypto/internal/backend"
- 	"crypto/rand"
- 	"crypto/sha256"
- 	"encoding/hex"
-@@ -280,6 +281,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
- }
- 
- func TestNewPrivateKey(t *testing.T) {
-+	if boring.Enabled {
-+		t.Skip("skipping test with different results when using different backends")
-+	}
- 	testAllCurves(t, func(t *testing.T, curve ecdh.Curve) {
- 		for _, input := range invalidPrivateKeys[curve] {
- 			k, err := curve.NewPrivateKey(hexDecode(t, input))
-diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index acef8298943c2b..ca6171cf775117 100644
---- a/src/crypto/ecdh/nist.go
-+++ b/src/crypto/ecdh/nist.go
-@@ -6,7 +6,7 @@ package ecdh
- 
- import (
- 	"bytes"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/ecdh"
- 	"crypto/internal/fips140only"
- 	"errors"
-diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
-new file mode 100644
-index 00000000000000..1dc05d09b2062d
---- /dev/null
-+++ b/src/crypto/ecdsa/badlinkname.go
-@@ -0,0 +1,19 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package ecdsa
-+
-+import _ "unsafe"
-+
-+// The symbols below are pulled by some crypto backend in the Microsoft Go compiler.
-+// We provide a push linkname here, to keep them accessible with pull linknames.
-+
-+//go:linkname encodeSignature
-+//go:linkname parseSignature
-+
-+// This supplements other linknames that are already added by
-+// https://github.com/golang/go/commit/41aab30bd260297ad8ddad47e98fdf8390a9a67e
-+// See that commit for more information.
-diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
-index 275c60b4de49eb..ff8bddf28c4545 100644
---- a/src/crypto/ecdsa/boring.go
-+++ b/src/crypto/ecdsa/boring.go
-@@ -2,13 +2,13 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package ecdsa
- 
- import (
--	"crypto/internal/boring"
--	"crypto/internal/boring/bbig"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/boring/bcache"
- 	"math/big"
- )
-diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index cb308b41e9df86..8f73855aa738de 100644
---- a/src/crypto/ecdsa/ecdsa.go
-+++ b/src/crypto/ecdsa/ecdsa.go
-@@ -20,8 +20,8 @@ import (
- 	"crypto"
- 	"crypto/ecdh"
- 	"crypto/elliptic"
--	"crypto/internal/boring"
--	"crypto/internal/boring/bbig"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/fips140/ecdsa"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
-index 039bd82ed21f9f..69a97d9bf250be 100644
---- a/src/crypto/ecdsa/notboring.go
-+++ b/src/crypto/ecdsa/notboring.go
-@@ -2,11 +2,11 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !goexperiment.systemcrypto
- 
- package ecdsa
- 
--import "crypto/internal/boring"
-+import boring "crypto/internal/backend"
- 
- func boringPublicKey(*PublicKey) (*boring.PublicKeyECDSA, error) {
- 	panic("boringcrypto: not available")
-diff --git a/src/crypto/ed25519/boring.go b/src/crypto/ed25519/boring.go
-new file mode 100644
-index 00000000000000..cce33e4d6cc927
---- /dev/null
-+++ b/src/crypto/ed25519/boring.go
-@@ -0,0 +1,71 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package ed25519
-+
-+import (
-+	boring "crypto/internal/backend"
-+	"crypto/internal/boring/bcache"
-+	"unsafe"
-+)
-+
-+var pubCache bcache.Cache[byte, boringPub]
-+var privCache bcache.Cache[byte, boringPriv]
-+
-+func init() {
-+	if boring.Enabled && boring.SupportsEd25519() {
-+		pubCache.Register()
-+		privCache.Register()
-+	}
-+}
-+
-+type boringPub struct {
-+	key  *boring.PublicKeyEd25519
-+	orig [PublicKeySize]byte
-+}
-+
-+func boringPublicKey(pub PublicKey) (*boring.PublicKeyEd25519, error) {
-+	// Use the pointer to the underlying pub array as key.
-+	p := unsafe.SliceData(pub)
-+	b := pubCache.Get(p)
-+	if b != nil && PublicKey(b.orig[:]).Equal(pub) {
-+		return b.key, nil
-+	}
-+
-+	b = new(boringPub)
-+	copy(b.orig[:], pub)
-+	key, err := boring.NewPublicKeyEd25519(b.orig[:])
-+	if err != nil {
-+		return nil, err
-+	}
-+	b.key = key
-+	pubCache.Put(p, b)
-+	return key, nil
-+}
-+
-+type boringPriv struct {
-+	key  *boring.PrivateKeyEd25519
-+	orig [PrivateKeySize]byte
-+}
-+
-+func boringPrivateKey(priv PrivateKey) (*boring.PrivateKeyEd25519, error) {
-+	// Use the pointer to the underlying priv array as key.
-+	p := unsafe.SliceData(priv)
-+	b := privCache.Get(p)
-+	if b != nil && PrivateKey(b.orig[:]).Equal(priv) {
-+		return b.key, nil
-+	}
-+
-+	b = new(boringPriv)
-+	copy(b.orig[:], priv)
-+	key, err := boring.NewPrivateKeyEd25519(b.orig[:])
-+	if err != nil {
-+		return nil, err
-+	}
-+	b.key = key
-+	privCache.Put(p, b)
-+	return key, nil
-+}
-diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index c1f8ff784e4a5c..6476bfbe896d6c 100644
---- a/src/crypto/ed25519/ed25519.go
-+++ b/src/crypto/ed25519/ed25519.go
-@@ -17,6 +17,7 @@ package ed25519
- 
- import (
- 	"crypto"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/ed25519"
- 	"crypto/internal/fips140only"
- 	cryptorand "crypto/rand"
-@@ -24,6 +25,7 @@ import (
- 	"errors"
- 	"io"
- 	"strconv"
-+	"sync"
- )
- 
- const (
-@@ -138,6 +140,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
- 	if rand == nil {
- 		rand = cryptorand.Reader
- 	}
-+	if boring.Enabled && boring.SupportsEd25519() {
-+		if rand == boring.RandReader {
-+			priv, err := boring.GenerateKeyEd25519()
-+			if err != nil {
-+				return nil, nil, err
-+			}
-+			privData, err := priv.Bytes()
-+			if err != nil {
-+				return nil, nil, err
-+			}
-+			privKey := PrivateKey(privData)
-+			pubKey := privKey.Public().(PublicKey)
-+			return pubKey, privKey, err
-+		}
-+		boring.UnreachableExceptTests()
-+	}
- 
- 	seed := make([]byte, SeedSize)
- 	if _, err := io.ReadFull(rand, seed); err != nil {
-@@ -154,6 +172,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
- // with RFC 8032. RFC 8032's private keys correspond to seeds in this
- // package.
- func NewKeyFromSeed(seed []byte) PrivateKey {
-+	if boring.Enabled && boring.SupportsEd25519() {
-+		key, err := boring.NewPrivateKeyEd25519FromSeed(seed)
-+		if err != nil {
-+			panic(err)
-+		}
-+		d, err := key.Bytes()
-+		if err != nil {
-+			panic(err)
-+		}
-+		return PrivateKey(d)
-+	}
- 	// Outline the function body so that the returned key can be stack-allocated.
- 	privateKey := make([]byte, PrivateKeySize)
- 	newKeyFromSeed(privateKey, seed)
-@@ -172,6 +201,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
- // Sign signs the message with privateKey and returns a signature. It will
- // panic if len(privateKey) is not [PrivateKeySize].
- func Sign(privateKey PrivateKey, message []byte) []byte {
-+	if boring.Enabled && boring.SupportsEd25519() {
-+		priv, err := boringPrivateKey(privateKey)
-+		if err != nil {
-+			panic(err)
-+		}
-+		signature, err := boring.SignEd25519(priv, message)
-+		if err != nil {
-+			panic(err)
-+		}
-+		return signature
-+	}
- 	// Outline the function body so that the returned signature can be
- 	// stack-allocated.
- 	signature := make([]byte, SignatureSize)
-@@ -200,6 +240,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
- 	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
- }
- 
-+// testMalleability returns true if the crypto backend correctly rejects
-+// malleable signatures. The only known backend that fails to do so is
-+// OpenSSL version 1.1.1a or lower.
-+// See https://github.com/openssl/openssl/issues/7693.
-+var testMalleability = sync.OnceValue(func() bool {
-+	msg := []byte{0x54, 0x65, 0x73, 0x74}
-+	sig := []byte{
-+		0x7c, 0x38, 0xe0, 0x26, 0xf2, 0x9e, 0x14, 0xaa, 0xbd, 0x05, 0x9a,
-+		0x0f, 0x2d, 0xb8, 0xb0, 0xcd, 0x78, 0x30, 0x40, 0x60, 0x9a, 0x8b,
-+		0xe6, 0x84, 0xdb, 0x12, 0xf8, 0x2a, 0x27, 0x77, 0x4a, 0xb0, 0x67,
-+		0x65, 0x4b, 0xce, 0x38, 0x32, 0xc2, 0xd7, 0x6f, 0x8f, 0x6f, 0x5d,
-+		0xaf, 0xc0, 0x8d, 0x93, 0x39, 0xd4, 0xee, 0xf6, 0x76, 0x57, 0x33,
-+		0x36, 0xa5, 0xc5, 0x1e, 0xb6, 0xf9, 0x46, 0xb3, 0x1d,
-+	}
-+	pkey := []byte{
-+		0x7d, 0x4d, 0x0e, 0x7f, 0x61, 0x53, 0xa6, 0x9b, 0x62, 0x42, 0xb5,
-+		0x22, 0xab, 0xbe, 0xe6, 0x85, 0xfd, 0xa4, 0x42, 0x0f, 0x88, 0x34,
-+		0xb1, 0x08, 0xc3, 0xbd, 0xae, 0x36, 0x9e, 0xf5, 0x49, 0xfa,
-+	}
-+	pub, err := boring.NewPublicKeyEd25519(pkey)
-+	if err != nil {
-+		return false
-+	}
-+	return boring.VerifyEd25519(pub, msg, sig) != nil
-+})
-+
- // VerifyWithOptions reports whether sig is a valid signature of message by
- // publicKey. A valid signature is indicated by returning a nil error. It will
- // panic if len(publicKey) is not [PublicKeySize].
-@@ -228,6 +294,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
- 		}
- 		return ed25519.VerifyCtx(k, message, sig, opts.Context)
- 	case opts.Hash == crypto.Hash(0): // Ed25519
-+		if boring.Enabled && boring.SupportsEd25519() && testMalleability() {
-+			pub, err := boringPublicKey(publicKey)
-+			if err != nil {
-+				return err
-+			}
-+			return boring.VerifyEd25519(pub, message, sig)
-+		}
- 		return ed25519.Verify(k, message, sig)
- 	default:
- 		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
-diff --git a/src/crypto/ed25519/notboring.go b/src/crypto/ed25519/notboring.go
-new file mode 100644
-index 00000000000000..b0cdd44d81c753
---- /dev/null
-+++ b/src/crypto/ed25519/notboring.go
-@@ -0,0 +1,16 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package ed25519
-+
-+import boring "crypto/internal/backend"
-+
-+func boringPublicKey(PublicKey) (*boring.PublicKeyEd25519, error) {
-+	panic("boringcrypto: not available")
-+}
-+func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
-+	panic("boringcrypto: not available")
-+}
-diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
-index 6b02522866d57f..37e67ec184af5d 100644
---- a/src/crypto/hkdf/hkdf.go
-+++ b/src/crypto/hkdf/hkdf.go
-@@ -11,6 +11,7 @@
- package hkdf
- 
- import (
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/hkdf"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-@@ -29,6 +30,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
- 	if err := checkFIPS140Only(fh, secret); err != nil {
- 		return nil, err
- 	}
-+	if boring.Enabled && boring.SupportsHKDF() {
-+		return boring.ExtractHKDF(fh, secret, salt)
-+	}
- 	return hkdf.Extract(fh, secret, salt), nil
- }
- 
-@@ -50,6 +54,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
- 		return nil, errors.New("hkdf: requested key length too large")
- 	}
- 
-+	if boring.Enabled && boring.SupportsHKDF() {
-+		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
-+	}
- 	return hkdf.Expand(fh, pseudorandomKey, info, keyLength), nil
- }
- 
-@@ -67,6 +74,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
- 		return nil, errors.New("hkdf: requested key length too large")
- 	}
- 
-+	if boring.Enabled && boring.SupportsHKDF() {
-+		pseudorandomKey, err := boring.ExtractHKDF(fh, secret, salt)
-+		if err != nil {
-+			return nil, err
-+		}
-+		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
-+	}
- 	return hkdf.Key(fh, secret, salt, info, keyLength), nil
- }
- 
-diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
-index 201b440289bb2d..4ed4960ff35b66 100644
---- a/src/crypto/hkdf/hkdf_test.go
-+++ b/src/crypto/hkdf/hkdf_test.go
-@@ -6,7 +6,7 @@ package hkdf
- 
- import (
- 	"bytes"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140"
- 	"crypto/md5"
- 	"crypto/sha1"
-diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index 554c8c9b78940b..c68a394280cc2c 100644
---- a/src/crypto/hmac/hmac.go
-+++ b/src/crypto/hmac/hmac.go
-@@ -22,7 +22,7 @@ timing side-channels:
- package hmac
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/hmac"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
-index 7accad763244a1..dd3211f2c37af3 100644
---- a/src/crypto/hmac/hmac_test.go
-+++ b/src/crypto/hmac/hmac_test.go
-@@ -5,7 +5,7 @@
- package hmac
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"crypto/md5"
- 	"crypto/sha1"
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
 index 00000000000000..c2c06d3bff8c74
@@ -1442,1329 +518,8 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/internal/cryptotest/allocations.go b/src/crypto/internal/cryptotest/allocations.go
-index 70055af70b42ec..3c4b4fbaa98ded 100644
---- a/src/crypto/internal/cryptotest/allocations.go
-+++ b/src/crypto/internal/cryptotest/allocations.go
-@@ -5,7 +5,7 @@
- package cryptotest
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"internal/asan"
- 	"internal/msan"
- 	"internal/race"
-diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
-index 3fa730459050f6..1f28f12a6e7b4f 100644
---- a/src/crypto/internal/cryptotest/implementations.go
-+++ b/src/crypto/internal/cryptotest/implementations.go
-@@ -5,7 +5,7 @@
- package cryptotest
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/impl"
- 	"internal/goos"
- 	"internal/testenv"
-diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index a0384e175f31bd..f7aa6da36f02de 100644
---- a/src/crypto/md5/md5.go
-+++ b/src/crypto/md5/md5.go
-@@ -12,6 +12,7 @@ package md5
- 
- import (
- 	"crypto"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140only"
- 	"errors"
- 	"hash"
-@@ -104,6 +105,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
- // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
- // state of the hash.
- func New() hash.Hash {
-+	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
-+		return boring.NewMD5()
-+	}
- 	d := new(digest)
- 	d.Reset()
- 	return d
-@@ -188,6 +192,12 @@ func (d *digest) checkSum() [Size]byte {
- 
- // Sum returns the MD5 checksum of the data.
- func Sum(data []byte) [Size]byte {
-+	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
-+		if fips140only.Enabled {
-+			panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
-+		}
-+		return boring.MD5(data)
-+	}
- 	var d digest
- 	d.Reset()
- 	d.Write(data)
-diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 437d9b9d4c0e0d..ee28c55f846e81 100644
---- a/src/crypto/md5/md5_test.go
-+++ b/src/crypto/md5/md5_test.go
-@@ -6,12 +6,14 @@ package md5
- 
- import (
- 	"bytes"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"crypto/rand"
- 	"encoding"
- 	"fmt"
- 	"hash"
- 	"io"
-+	"strings"
- 	"testing"
- 	"unsafe"
- )
-@@ -88,6 +90,11 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	for _, g := range golden {
- 		h := New()
- 		h2 := New()
-@@ -96,6 +103,9 @@ func TestGoldenMarshal(t *testing.T) {
- 
- 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
- 		if err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("could not marshal: %v", err)
- 			continue
- 		}
-@@ -157,6 +167,9 @@ func TestLarge(t *testing.T) {
- 
- // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
- func TestBlockGeneric(t *testing.T) {
-+	if boring.Enabled {
-+		t.Skip("digest is not used when boring.Enabled is set")
-+	}
- 	gen, asm := New().(*digest), New().(*digest)
- 	buf := make([]byte, BlockSize*20) // arbitrary factor
- 	rand.Read(buf)
-@@ -204,10 +217,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryUnmarshaler not implemented")
-+		}
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
- 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("test %d could not unmarshal: %v", i, err)
- 			continue
- 		}
-diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index 271d2b03312ef0..ff76299fbe4782 100644
---- a/src/crypto/pbkdf2/pbkdf2.go
-+++ b/src/crypto/pbkdf2/pbkdf2.go
-@@ -11,6 +11,7 @@
- package pbkdf2
- 
- import (
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/pbkdf2"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-@@ -47,5 +48,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
- 			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
- 		}
- 	}
-+	if boring.Enabled && boring.SupportsPBKDF2() {
-+		return boring.PBKDF2([]byte(password), salt, iter, keyLength, fh)
-+	}
- 	return pbkdf2.Key(fh, password, salt, iter, keyLength)
- }
-diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
-index 03980c7e54d3be..4968a666fad4e5 100644
---- a/src/crypto/pbkdf2/pbkdf2_test.go
-+++ b/src/crypto/pbkdf2/pbkdf2_test.go
-@@ -6,7 +6,7 @@ package pbkdf2_test
- 
- import (
- 	"bytes"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140"
- 	"crypto/pbkdf2"
- 	"crypto/sha1"
-diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
-index 62be347e0c6822..d284b5cf7814a6 100644
---- a/src/crypto/purego_test.go
-+++ b/src/crypto/purego_test.go
-@@ -41,7 +41,7 @@ func TestPureGoTag(t *testing.T) {
- 	}
- 
- 	for _, pkgName := range pkgs {
--		if strings.Contains(pkgName, "/boring") {
-+		if strings.Contains(pkgName, "/boring") || strings.Contains(pkgName, "/internal/backend") || strings.Contains(pkgName, "tls/fipsonly") {
- 			continue
- 		}
- 
-diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 1ca16caa9563e6..3ef22b5ff8222b 100644
---- a/src/crypto/rand/rand.go
-+++ b/src/crypto/rand/rand.go
-@@ -7,7 +7,7 @@
- package rand
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140"
- 	"crypto/internal/fips140/drbg"
- 	"crypto/internal/sysrand"
-diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
-index 90943a0935befb..09ebdfd733e5d6 100644
---- a/src/crypto/rc4/rc4.go
-+++ b/src/crypto/rc4/rc4.go
-@@ -10,6 +10,7 @@
- package rc4
- 
- import (
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/alias"
- 	"crypto/internal/fips140only"
- 	"errors"
-@@ -20,6 +21,8 @@ import (
- type Cipher struct {
- 	s    [256]uint32
- 	i, j uint8
-+
-+	boring *boring.RC4Cipher
- }
- 
- type KeySizeError int
-@@ -38,6 +41,13 @@ func NewCipher(key []byte) (*Cipher, error) {
- 	if k < 1 || k > 256 {
- 		return nil, KeySizeError(k)
- 	}
-+	if boring.Enabled && boring.SupportsRC4() {
-+		c, err := boring.NewRC4Cipher(key)
-+		if err != nil {
-+			return nil, err
-+		}
-+		return &Cipher{boring: c}, nil
-+	}
- 	var c Cipher
- 	for i := 0; i < 256; i++ {
- 		c.s[i] = uint32(i)
-@@ -55,6 +65,10 @@ func NewCipher(key []byte) (*Cipher, error) {
- // Deprecated: Reset can't guarantee that the key will be entirely removed from
- // the process's memory.
- func (c *Cipher) Reset() {
-+	if boring.Enabled && boring.SupportsRC4() {
-+		c.boring.Reset()
-+		return
-+	}
- 	for i := range c.s {
- 		c.s[i] = 0
- 	}
-@@ -64,6 +78,10 @@ func (c *Cipher) Reset() {
- // XORKeyStream sets dst to the result of XORing src with the key stream.
- // Dst and src must overlap entirely or not at all.
- func (c *Cipher) XORKeyStream(dst, src []byte) {
-+	if boring.Enabled && boring.SupportsRC4() {
-+		c.boring.XORKeyStream(dst, src)
-+		return
-+	}
- 	if len(src) == 0 {
- 		return
- 	}
-diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index b9f9d3154f2589..d52faddef45549 100644
---- a/src/crypto/rsa/boring.go
-+++ b/src/crypto/rsa/boring.go
-@@ -2,13 +2,13 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package rsa
- 
- import (
--	"crypto/internal/boring"
--	"crypto/internal/boring/bbig"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/boring/bcache"
- 	"math/big"
- )
-diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
-index 838fcc1244bdbe..d89f732345e8a3 100644
---- a/src/crypto/rsa/boring_test.go
-+++ b/src/crypto/rsa/boring_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- // Note: Can run these tests against the non-BoringCrypto
- // version of the code by using "CGO_ENABLED=0 go test".
-diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 8373c125ae3096..cee523891d5897 100644
---- a/src/crypto/rsa/fips.go
-+++ b/src/crypto/rsa/fips.go
-@@ -6,7 +6,7 @@ package rsa
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/rsa"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-@@ -70,7 +70,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 		hash = opts.Hash
- 	}
- 
--	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -133,7 +133,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
- 		return err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSASaltLength(opts.saltLength()) && boring.SupportsHash(hash) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
-@@ -250,7 +250,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
- 		k := priv.Size()
- 		if len(ciphertext) > k ||
- 			k < hash.Size()*2+2 {
-@@ -312,7 +312,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
-index 2abc0436405f8a..3e4d6f3eef61e6 100644
---- a/src/crypto/rsa/notboring.go
-+++ b/src/crypto/rsa/notboring.go
-@@ -2,11 +2,11 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !goexperiment.systemcrypto
- 
- package rsa
- 
--import "crypto/internal/boring"
-+import boring "crypto/internal/backend"
- 
- func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
- 	panic("boringcrypto: not available")
-diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index f1e4ef48a4fd1c..a179a4388e3ee5 100644
---- a/src/crypto/rsa/pkcs1v15.go
-+++ b/src/crypto/rsa/pkcs1v15.go
-@@ -5,7 +5,7 @@
- package rsa
- 
- import (
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/rsa"
- 	"crypto/internal/fips140only"
- 	"crypto/internal/randutil"
-@@ -104,7 +104,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
- 		return nil, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -203,7 +203,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
- 		return 0, nil, 0, err
- 	}
- 
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
- 		var bkey *boring.PrivateKeyRSA
- 		bkey, err = boringPrivateKey(priv)
- 		if err != nil {
-diff --git a/src/crypto/rsa/pkcs1v15_test.go b/src/crypto/rsa/pkcs1v15_test.go
-index c65552cd93526a..910416abe842f5 100644
---- a/src/crypto/rsa/pkcs1v15_test.go
-+++ b/src/crypto/rsa/pkcs1v15_test.go
-@@ -7,6 +7,7 @@ package rsa_test
- import (
- 	"bytes"
- 	"crypto"
-+	boring "crypto/internal/backend"
- 	"crypto/rand"
- 	. "crypto/rsa"
- 	"crypto/sha1"
-@@ -235,6 +236,10 @@ func TestVerifyPKCS1v15(t *testing.T) {
- }
- 
- func TestOverlongMessagePKCS1v15(t *testing.T) {
-+	if boring.Enabled {
-+		// See for example https://github.com/golang-fips/openssl/pull/142.
-+		t.Skip("Some backends do not return an error for overlong messages.")
-+	}
- 	t.Setenv("GODEBUG", "rsa1024min=0")
- 	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
- 	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
-diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index e03f4ab06603c6..f31d492d53cf96 100644
---- a/src/crypto/rsa/pss_test.go
-+++ b/src/crypto/rsa/pss_test.go
-@@ -8,6 +8,7 @@ import (
- 	"bufio"
- 	"compress/bzip2"
- 	"crypto"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140"
- 	"crypto/rand"
- 	. "crypto/rsa"
-@@ -180,6 +181,10 @@ func TestPSSSigning(t *testing.T) {
- 			continue
- 		}
- 
-+		if boring.Enabled && test.good != test.fipsGood {
-+			t.Skip("skipping test with different results when using different backends")
-+		}
-+
- 		opts.SaltLength = test.verifySaltLength
- 		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
- 		good := test.good
-@@ -241,7 +246,9 @@ func fromHex(hexStr string) []byte {
- 
- func TestInvalidPSSSaltLength(t *testing.T) {
- 	t.Setenv("GODEBUG", "rsa1024min=0")
--	key, err := GenerateKey(rand.Reader, 245)
-+	// Most crypto backends don't support generating RSA keys with a bit size
-+	// lower than 512, so we use 512 here.
-+	key, err := GenerateKey(rand.Reader, 512)
- 	if err != nil {
- 		t.Fatal(err)
- 	}
-diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 95bb4becd2ff8c..73991434dabaf1 100644
---- a/src/crypto/rsa/rsa.go
-+++ b/src/crypto/rsa/rsa.go
-@@ -42,8 +42,8 @@ package rsa
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
--	"crypto/internal/boring/bbig"
-+	boring "crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
- 	"crypto/internal/fips140/bigmod"
- 	"crypto/internal/fips140/rsa"
- 	"crypto/internal/fips140only"
-diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 73b0c3749eedb2..1a712a0e1c5d95 100644
---- a/src/crypto/rsa/rsa_test.go
-+++ b/src/crypto/rsa/rsa_test.go
-@@ -8,7 +8,7 @@ import (
- 	"bufio"
- 	"bytes"
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"crypto/rand"
- 	. "crypto/rsa"
-@@ -146,6 +146,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
- 	if priv.D.Cmp(priv.N) > 0 {
- 		t.Errorf("private exponent too large")
- 	}
-+	if boring.Enabled && priv.N.BitLen() < 512 {
-+		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
-+		// lower than 512 and intentionally fail rather than fall back to Go crypto.
-+		t.Skip("skipping allocations test with BoringCrypto")
-+	}
- 
- 	msg := []byte("hi!")
- 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -226,6 +231,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
- 	if err := priv.Validate(); err != nil {
- 		t.Errorf("Validate() failed: %s", err)
- 	}
-+	if boring.Enabled && priv.N.BitLen() < 512 {
-+		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
-+		// lower than 512 and intentionally fail rather than fall back to Go crypto.
-+		t.Skip("skipping allocations test with BoringCrypto")
-+	}
- 
- 	msg := []byte("test")
- 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -853,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
- }
- 
- func Test2DecryptOAEP(t *testing.T) {
-+	if boring.Enabled {
-+		t.Skip("Some crypto backends don't supports OAEPOptions.MGFHash.")
-+	}
- 	random := rand.Reader
- 
- 	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
-diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index d2ffaac0aeb674..23d8ad44d0bd9a 100644
---- a/src/crypto/sha1/sha1.go
-+++ b/src/crypto/sha1/sha1.go
-@@ -10,7 +10,7 @@ package sha1
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140only"
- 	"errors"
- 	"hash"
-@@ -266,12 +266,12 @@ func (d *digest) constSum() [Size]byte {
- 
- // Sum returns the SHA-1 checksum of the data.
- func Sum(data []byte) [Size]byte {
--	if boring.Enabled {
--		return boring.SHA1(data)
--	}
- 	if fips140only.Enabled {
- 		panic("crypto/sha1: use of SHA-1 is not allowed in FIPS 140-only mode")
- 	}
-+	if boring.Enabled {
-+		return boring.SHA1(data)
-+	}	
- 	var d digest
- 	d.Reset()
- 	d.Write(data)
-diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index 9d707b7cde5c2d..8da08b3d860a85 100644
---- a/src/crypto/sha1/sha1_test.go
-+++ b/src/crypto/sha1/sha1_test.go
-@@ -8,13 +8,14 @@ package sha1
- 
- import (
- 	"bytes"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"crypto/rand"
- 	"encoding"
- 	"fmt"
- 	"hash"
- 	"io"
-+	"strings"
- 	"testing"
- )
- 
-@@ -97,6 +98,11 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	h := New()
- 	h2 := New()
- 	for _, g := range golden {
-@@ -107,6 +113,9 @@ func TestGoldenMarshal(t *testing.T) {
- 
- 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
- 		if err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("could not marshal: %v", err)
- 			continue
- 		}
-@@ -210,10 +219,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
- 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("test %d could not unmarshal: %v", i, err)
- 			continue
- 		}
-diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
-index 069938a22dbc5a..8d0e06b86f4359 100644
---- a/src/crypto/sha256/sha256.go
-+++ b/src/crypto/sha256/sha256.go
-@@ -8,7 +8,7 @@ package sha256
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/sha256"
- 	"hash"
- )
-@@ -43,7 +43,7 @@ func New() hash.Hash {
- // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
- // state of the hash.
- func New224() hash.Hash {
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
- 		return boring.NewSHA224()
- 	}
- 	return sha256.New224()
-@@ -63,7 +63,7 @@ func Sum256(data []byte) [Size]byte {
- 
- // Sum224 returns the SHA224 checksum of the data.
- func Sum224(data []byte) [Size224]byte {
--	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
- 		return boring.SHA224(data)
- 	}
- 	h := New224()
-diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index e1af9640e25547..c4f142c1430285 100644
---- a/src/crypto/sha256/sha256_test.go
-+++ b/src/crypto/sha256/sha256_test.go
-@@ -8,11 +8,13 @@ package sha256
- 
- import (
- 	"bytes"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"encoding"
- 	"fmt"
- 	"hash"
- 	"io"
-+	"strings"
- 	"testing"
- )
- 
-@@ -155,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
- 
- 	for _, tt := range tests {
- 		t.Run(tt.name, func(t *testing.T) {
-+			if boring.Enabled {
-+				if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
- 			for _, g := range tt.gold {
- 				h := tt.newHash()
- 				h2 := tt.newHash()
-@@ -163,6 +170,9 @@ func testGoldenMarshal(t *testing.T) {
- 
- 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
- 				if err != nil {
-+					if strings.Contains(err.Error(), "hash state is not marshallable") {
-+						t.Skip("BinaryMarshaler not supported")
-+					}
- 					t.Errorf("could not marshal: %v", err)
- 					continue
- 				}
-@@ -204,8 +214,19 @@ func TestMarshalTypeMismatch(t *testing.T) {
- 	h1 := New()
- 	h2 := New224()
- 
-+	if boring.Enabled {
-+		_, ok1 := h1.(encoding.BinaryMarshaler)
-+		_, ok2 := h2.(encoding.BinaryUnmarshaler)
-+		if !ok1 || !ok2 {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
-+
- 	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
- 	if err != nil {
-+		if strings.Contains(err.Error(), "hash state is not marshallable") {
-+			t.Skip("BinaryMarshaler not supported")
-+		}
- 		t.Errorf("could not marshal: %v", err)
- 	}
- 
-@@ -275,10 +296,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- 	return h.Sum(nil), nil
- }
- func TestLargeHashes(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryUnmarshaler not implemented")
-+		}
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
- 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("test %d could not unmarshal: %v", i, err)
- 			continue
- 		}
-diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
-index 1435eac1f5b5dc..17e8501154762a 100644
---- a/src/crypto/sha512/sha512.go
-+++ b/src/crypto/sha512/sha512.go
-@@ -12,7 +12,7 @@ package sha512
- 
- import (
- 	"crypto"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/sha512"
- 	"hash"
- )
-diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 1fe9d132bb186d..97b7da8c2d3d88 100644
---- a/src/crypto/sha512/sha512_test.go
-+++ b/src/crypto/sha512/sha512_test.go
-@@ -8,12 +8,14 @@ package sha512
- 
- import (
- 	"bytes"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/cryptotest"
- 	"encoding"
- 	"encoding/hex"
- 	"fmt"
- 	"hash"
- 	"io"
-+	"strings"
- 	"testing"
- )
- 
-@@ -744,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
- 	for _, tt := range tests {
- 		t.Run(tt.name, func(t *testing.T) {
- 			for _, test := range tt.golden {
-+				if boring.Enabled {
-+					if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
-+						t.Skip("BinaryMarshaler not implemented")
-+					}
-+				}
- 				h := tt.newHash()
- 				h2 := tt.newHash()
- 
-@@ -751,6 +758,9 @@ func testGoldenMarshal(t *testing.T) {
- 
- 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
- 				if err != nil {
-+					if strings.Contains(err.Error(), "hash state is not marshallable") {
-+						t.Skip("BinaryMarshaler not supported")
-+					}
- 					t.Errorf("could not marshal: %v", err)
- 					return
- 				}
-@@ -805,8 +815,19 @@ func TestMarshalMismatch(t *testing.T) {
- 			h1 := fn1()
- 			h2 := fn2()
- 
-+			if boring.Enabled {
-+				_, ok1 := h1.(encoding.BinaryMarshaler)
-+				_, ok2 := h2.(encoding.BinaryUnmarshaler)
-+				if !ok1 || !ok2 {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
-+
- 			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
- 			if err != nil {
-+				if strings.Contains(err.Error(), "hash state is not marshallable") {
-+					t.Skip("BinaryMarshaler not supported")
-+				}
- 				t.Errorf("i=%d: could not marshal: %v", i, err)
- 				continue
- 			}
-@@ -880,10 +901,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
-+			t.Skip("BinaryUnmarshaler not implemented")
-+		}
-+	}
- 	for i, test := range largeUnmarshalTests {
- 
- 		h := New()
- 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
-+				t.Skip("BinaryMarshaler not supported")
-+			}
- 			t.Errorf("test %d could not unmarshal: %v", i, err)
- 			continue
- 		}
-diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 01d65688284f97..d8a26c24024348 100644
---- a/src/crypto/tls/cipher_suites.go
-+++ b/src/crypto/tls/cipher_suites.go
-@@ -10,7 +10,7 @@ import (
- 	"crypto/cipher"
- 	"crypto/des"
- 	"crypto/hmac"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	fipsaes "crypto/internal/fips140/aes"
- 	"crypto/internal/fips140/aes/gcm"
- 	"crypto/rc4"
-diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
-index e702f44e986746..e506a0d8841237 100644
---- a/src/crypto/tls/fipsonly/fipsonly.go
-+++ b/src/crypto/tls/fipsonly/fipsonly.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
- //
-diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
-index 027bc22c33c921..eba08da985f832 100644
---- a/src/crypto/tls/fipsonly/fipsonly_test.go
-+++ b/src/crypto/tls/fipsonly/fipsonly_test.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package fipsonly
- 
-diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 38bd417a0dca72..8c1ae3c7ec5485 100644
---- a/src/crypto/tls/handshake_client.go
-+++ b/src/crypto/tls/handshake_client.go
-@@ -11,11 +11,11 @@ import (
- 	"crypto/ecdsa"
- 	"crypto/ed25519"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
- 	"crypto/internal/hpke"
- 	"crypto/rsa"
- 	"crypto/subtle"
- 	"crypto/tls/internal/fips140tls"
-+	"crypto/tls/internal/tls13"
- 	"crypto/x509"
- 	"errors"
- 	"fmt"
-@@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
- 
- // Does the handshake, either a full one or resumes old session. Requires hs.c,
- // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
--func (hs *clientHandshakeState) handshake() error {
-+func (hs *clientHandshakeState) handshake() (err error) {
-+	defer func() {
-+		if err == nil {
-+			err = recoverFromBoringPRFError()
-+			if err != nil {
-+				hs.c.sendAlert(alertInternalError)
-+			}
-+		}
-+	}()
- 	c := hs.c
- 
- 	isResume, err := hs.processServerHello()
-diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index c0396e75796add..2c00e119cb66e4 100644
---- a/src/crypto/tls/handshake_client_tls13.go
-+++ b/src/crypto/tls/handshake_client_tls13.go
-@@ -8,12 +8,12 @@ import (
- 	"bytes"
- 	"context"
- 	"crypto"
-+	"crypto/hkdf"
- 	"crypto/hmac"
--	"crypto/internal/fips140/hkdf"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
- 	"crypto/rsa"
- 	"crypto/subtle"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"hash"
- 	"slices"
-@@ -90,8 +90,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
- 		confTranscript.Write(hs.serverHello.original[:30])
- 		confTranscript.Write(make([]byte, 8))
- 		confTranscript.Write(hs.serverHello.original[38:])
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
-+		if err != nil {
-+			return err
-+		}
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
-+			secret,
- 			"ech accept confirmation",
- 			confTranscript.Sum(nil),
- 			8,
-@@ -264,8 +268,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
- 			copy(hrrHello, hs.serverHello.original)
- 			hrrHello = bytes.Replace(hrrHello, hs.serverHello.encryptedClientHello, make([]byte, 8), 1)
- 			confTranscript.Write(hrrHello)
-+			secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
-+			if err != nil {
-+				return err
-+			}
- 			acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--				hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
-+				secret,
- 				"hrr ech accept confirmation",
- 				confTranscript.Sum(nil),
- 				8,
-diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
---- a/src/crypto/tls/handshake_server.go
-+++ b/src/crypto/tls/handshake_server.go
-@@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
- 	return hs.handshake()
- }
- 
--func (hs *serverHandshakeState) handshake() error {
-+func (hs *serverHandshakeState) handshake() (err error) {
-+	defer func() {
-+		if err == nil {
-+			err = recoverFromBoringPRFError()
-+			if err != nil {
-+				hs.c.sendAlert(alertInternalError)
-+			}
-+		}
-+	}()
- 	c := hs.c
- 
- 	if err := hs.processClientHello(); err != nil {
-diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 76fff6974e7403..3ef8b56e5c7898 100644
---- a/src/crypto/tls/handshake_server_tls13.go
-+++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -8,13 +8,14 @@ import (
- 	"bytes"
- 	"context"
- 	"crypto"
-+	"crypto/hkdf"
- 	"crypto/hmac"
--	"crypto/internal/fips140/hkdf"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
- 	"crypto/internal/hpke"
- 	"crypto/rsa"
- 	"crypto/tls/internal/fips140tls"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"hash"
- 	"internal/byteorder"
-@@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
- // interfaces implemented by standard library hashes to clone the state of in
- // to a new instance of h. It returns nil if the operation fails.
- func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
-+	if boring.Enabled {
-+		// CNG and OpenSSL with SymCrypt hash functions do not implement the
-+		// encoding.BinaryMarshaler interface, but they do implement the Clone method.
-+		if cloner, ok := in.(interface{ Clone() hash.Hash }); ok {
-+			return cloner.Clone()
-+		}
-+	}
- 	// Recreate the interface to avoid importing encoding.
- 	type binaryMarshaler interface {
- 		MarshalBinary() (data []byte, err error)
- 		UnmarshalBinary(data []byte) error
- 	}
- 	marshaler, ok := in.(binaryMarshaler)
--	if !ok {
--		return nil
--	}
- 	state, err := marshaler.MarshalBinary()
- 	if err != nil {
- 		return nil
-@@ -572,8 +577,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
- 		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
- 			return nil, err
- 		}
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
-+		if err != nil {
-+			return nil, err
-+		}
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
-+			secret,
- 			"hrr ech accept confirmation",
- 			confTranscript.Sum(nil),
- 			8,
-@@ -734,9 +743,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
- 		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
- 			return err
- 		}
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
-+		if err != nil {
-+			return err
-+		}
- 		// compute the acceptance message
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
-+			secret,
- 			"ech accept confirmation",
- 			echTranscript.Sum(nil),
- 			8,
-diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
-index 24d78d60cf5b64..a6bfd3f17c1911 100644
---- a/src/crypto/tls/internal/fips140tls/fipstls.go
-+++ b/src/crypto/tls/internal/fips140tls/fipstls.go
-@@ -6,6 +6,7 @@
- package fips140tls
- 
- import (
-+	bfips140 "crypto/internal/backend/fips140"
- 	"crypto/internal/fips140"
- 	"sync/atomic"
- )
-@@ -13,7 +14,7 @@ import (
- var required atomic.Bool
- 
- func init() {
--	if fips140.Enabled {
-+	if fips140.Enabled || bfips140.Enabled() {
- 		Force()
- 	}
- }
-diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
-new file mode 100644
-index 00000000000000..1adf3098356307
---- /dev/null
-+++ b/src/crypto/tls/internal/tls13/doc.go
-@@ -0,0 +1,18 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+/*
-+Microsoft Go only package.
-+
-+TLS 1.3 Key Schedule is normally not part of the FIPS boundary, but upstream Go
-+decided to include it in the FIPS boundary to facilitate the FIPS 140-3 certification
-+process.
-+
-+The problem is that crypto/internal/fips140/tls13 uses crypto/internal/fips140/hkdf,
-+which can't be patched to use other backends.
-+
-+To solve this problem, we created this package, which is a direct copy of
-+crypto/internal/fips140/tls13, but uses crypto/hkdf instead of crypto/internal/fips140/hkdf.
-+*/
-+package tls13
-diff --git a/src/crypto/tls/internal/tls13/tls13.go b/src/crypto/tls/internal/tls13/tls13.go
-new file mode 100644
-index 00000000000000..573896b9c1e6a8
---- /dev/null
-+++ b/src/crypto/tls/internal/tls13/tls13.go
-@@ -0,0 +1,182 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Package tls13 implements the TLS 1.3 Key Schedule as specified in RFC 8446,
-+// Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.
-+package tls13
-+
-+import (
-+	"crypto/hkdf"
-+	"hash"
-+	"internal/byteorder"
-+)
-+
-+// We don't set the service indicator in this package but we delegate that to
-+// the underlying functions because the TLS 1.3 KDF does not have a standard of
-+// its own.
-+
-+// ExpandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.
-+func ExpandLabel[H hash.Hash](hash func() H, secret []byte, label string, context []byte, length int) []byte {
-+	if len("tls13 ")+len(label) > 255 || len(context) > 255 {
-+		// It should be impossible for this to panic: labels are fixed strings,
-+		// and context is either a fixed-length computed hash, or parsed from a
-+		// field which has the same length limitation.
-+		//
-+		// Another reasonable approach might be to return a randomized slice if
-+		// we encounter an error, which would break the connection, but avoid
-+		// panicking. This would perhaps be safer but significantly more
-+		// confusing to users.
-+		panic("tls13: label or context too long")
-+	}
-+	hkdfLabel := make([]byte, 0, 2+1+len("tls13 ")+len(label)+1+len(context))
-+	hkdfLabel = byteorder.BEAppendUint16(hkdfLabel, uint16(length))
-+	hkdfLabel = append(hkdfLabel, byte(len("tls13 ")+len(label)))
-+	hkdfLabel = append(hkdfLabel, "tls13 "...)
-+	hkdfLabel = append(hkdfLabel, label...)
-+	hkdfLabel = append(hkdfLabel, byte(len(context)))
-+	hkdfLabel = append(hkdfLabel, context...)
-+	key, err := hkdf.Expand(hash, secret, string(hkdfLabel), length)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return key
-+}
-+
-+func extract[H hash.Hash](hash func() H, newSecret, currentSecret []byte) []byte {
-+	if newSecret == nil {
-+		newSecret = make([]byte, hash().Size())
-+	}
-+	prk, err := hkdf.Extract(hash, newSecret, currentSecret)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return prk
-+}
-+
-+func deriveSecret[H hash.Hash](hash func() H, secret []byte, label string, transcript hash.Hash) []byte {
-+	if transcript == nil {
-+		transcript = hash()
-+	}
-+	return ExpandLabel(hash, secret, label, transcript.Sum(nil), transcript.Size())
-+}
-+
-+const (
-+	resumptionBinderLabel         = "res binder"
-+	clientEarlyTrafficLabel       = "c e traffic"
-+	clientHandshakeTrafficLabel   = "c hs traffic"
-+	serverHandshakeTrafficLabel   = "s hs traffic"
-+	clientApplicationTrafficLabel = "c ap traffic"
-+	serverApplicationTrafficLabel = "s ap traffic"
-+	earlyExporterLabel            = "e exp master"
-+	exporterLabel                 = "exp master"
-+	resumptionLabel               = "res master"
-+)
-+
-+type EarlySecret struct {
-+	secret []byte
-+	hash   func() hash.Hash
-+}
-+
-+func NewEarlySecret[H hash.Hash](h func() H, psk []byte) *EarlySecret {
-+	return &EarlySecret{
-+		secret: extract(h, psk, nil),
-+		hash:   func() hash.Hash { return h() },
-+	}
-+}
-+
-+func (s *EarlySecret) ResumptionBinderKey() []byte {
-+	return deriveSecret(s.hash, s.secret, resumptionBinderLabel, nil)
-+}
-+
-+// ClientEarlyTrafficSecret derives the client_early_traffic_secret from the
-+// early secret and the transcript up to the ClientHello.
-+func (s *EarlySecret) ClientEarlyTrafficSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, clientEarlyTrafficLabel, transcript)
-+}
-+
-+type HandshakeSecret struct {
-+	secret []byte
-+	hash   func() hash.Hash
-+}
-+
-+func (s *EarlySecret) HandshakeSecret(sharedSecret []byte) *HandshakeSecret {
-+	derived := deriveSecret(s.hash, s.secret, "derived", nil)
-+	return &HandshakeSecret{
-+		secret: extract(s.hash, sharedSecret, derived),
-+		hash:   s.hash,
-+	}
-+}
-+
-+// ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from
-+// the handshake secret and the transcript up to the ServerHello.
-+func (s *HandshakeSecret) ClientHandshakeTrafficSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, clientHandshakeTrafficLabel, transcript)
-+}
-+
-+// ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from
-+// the handshake secret and the transcript up to the ServerHello.
-+func (s *HandshakeSecret) ServerHandshakeTrafficSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, serverHandshakeTrafficLabel, transcript)
-+}
-+
-+type MasterSecret struct {
-+	secret []byte
-+	hash   func() hash.Hash
-+}
-+
-+func (s *HandshakeSecret) MasterSecret() *MasterSecret {
-+	derived := deriveSecret(s.hash, s.secret, "derived", nil)
-+	return &MasterSecret{
-+		secret: extract(s.hash, nil, derived),
-+		hash:   s.hash,
-+	}
-+}
-+
-+// ClientApplicationTrafficSecret derives the client_application_traffic_secret_0
-+// from the master secret and the transcript up to the server Finished.
-+func (s *MasterSecret) ClientApplicationTrafficSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, clientApplicationTrafficLabel, transcript)
-+}
-+
-+// ServerApplicationTrafficSecret derives the server_application_traffic_secret_0
-+// from the master secret and the transcript up to the server Finished.
-+func (s *MasterSecret) ServerApplicationTrafficSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, serverApplicationTrafficLabel, transcript)
-+}
-+
-+// ResumptionMasterSecret derives the resumption_master_secret from the master secret
-+// and the transcript up to the client Finished.
-+func (s *MasterSecret) ResumptionMasterSecret(transcript hash.Hash) []byte {
-+	return deriveSecret(s.hash, s.secret, resumptionLabel, transcript)
-+}
-+
-+type ExporterMasterSecret struct {
-+	secret []byte
-+	hash   func() hash.Hash
-+}
-+
-+// ExporterMasterSecret derives the exporter_master_secret from the master secret
-+// and the transcript up to the server Finished.
-+func (s *MasterSecret) ExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
-+	return &ExporterMasterSecret{
-+		secret: deriveSecret(s.hash, s.secret, exporterLabel, transcript),
-+		hash:   s.hash,
-+	}
-+}
-+
-+// EarlyExporterMasterSecret derives the exporter_master_secret from the early secret
-+// and the transcript up to the ClientHello.
-+func (s *EarlySecret) EarlyExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
-+	return &ExporterMasterSecret{
-+		secret: deriveSecret(s.hash, s.secret, earlyExporterLabel, transcript),
-+		hash:   s.hash,
-+	}
-+}
-+
-+func (s *ExporterMasterSecret) Exporter(label string, context []byte, length int) []byte {
-+	secret := deriveSecret(s.hash, s.secret, label, nil)
-+	h := s.hash()
-+	h.Write(context)
-+	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
-+}
-diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 38d6d3f7be1673..b236ae44a34030 100644
---- a/src/crypto/tls/key_schedule.go
-+++ b/src/crypto/tls/key_schedule.go
-@@ -8,7 +8,7 @@ import (
- 	"crypto/ecdh"
- 	"crypto/hmac"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"hash"
- 	"io"
-diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index e7369542a73270..ff52175e4ac636 100644
---- a/src/crypto/tls/prf.go
-+++ b/src/crypto/tls/prf.go
-@@ -7,6 +7,7 @@ package tls
- import (
- 	"crypto"
- 	"crypto/hmac"
-+	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/tls12"
- 	"crypto/md5"
- 	"crypto/sha1"
-@@ -47,9 +48,42 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
- 	}
- }
- 
-+type boringPRFError struct {
-+	err error
-+}
-+
-+func (e *boringPRFError) Error() string {
-+	return e.err.Error()
-+}
-+
-+// recoverFromBoringPRFError recovers from a panic caused by the boring backend.
-+// It returns the error if it was a boringPRFError, or panics if the panic was
-+// caused by something else.
-+func recoverFromBoringPRFError() error {
-+	if p := recover(); p != nil {
-+		if err, ok := p.(boringPRFError); ok {
-+			// Could happen, for example, if the seed is too large. The Go implementation doesn't limit the seed size,
-+			// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
-+			return err.err
-+		}
-+		panic(p)
-+	}
-+	return nil
-+}
-+
-+func panicBoringPRFError(err error) {
-+	panic(boringPRFError{err})
-+}
-+
- // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
- func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
- 	result := make([]byte, keyLen)
-+	if boring.Enabled && boring.SupportsTLS1PRF() {
-+		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
-+			panicBoringPRFError(fmt.Errorf("crypto/tls: prf10: %v", err))
-+		}
-+		return result
-+	}
- 	hashSHA1 := sha1.New
- 	hashMD5 := md5.New
- 
-@@ -72,6 +106,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
- // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
- func prf12(hashFunc func() hash.Hash) prfFunc {
- 	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
-+		if boring.Enabled && boring.SupportsTLS1PRF() {
-+			result := make([]byte, keyLen)
-+			if err := boring.TLS1PRF(result, secret, []byte(label), seed, hashFunc); err != nil {
-+				panicBoringPRFError(fmt.Errorf("crypto/tls: prf12: %v", err))
-+			}
-+			return result
-+		}
- 		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
- 	}
- }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..30811455e88418 100644
+index e3e01077c18b17..a46d6c034ca1e0 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -2776,17 +531,17 @@ index e3e01077c18b17..30811455e88418 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -506,7 +508,9 @@ var depsRules = `
+@@ -506,7 +508,8 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-+	encoding/binary,
- 	crypto/internal/boring/bcache
+-	crypto/internal/boring/bcache
++	crypto/internal/boring/bcache,
 +	crypto/internal/backend/fips140
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -514,6 +518,7 @@ var depsRules = `
+@@ -514,6 +517,7 @@ var depsRules = `
  	< crypto/internal/fips140hash
  	< crypto/cipher
  	< crypto/internal/boring
@@ -2794,15 +549,7 @@ index e3e01077c18b17..30811455e88418 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -527,6 +532,7 @@ var depsRules = `
- 	  crypto/pbkdf2,
- 	  crypto/ecdh,
- 	  crypto/mlkem
-+	< crypto/tls/internal/tls13
- 	< CRYPTO;
- 
- 	CGO, fmt, net !< CRYPTO;
-@@ -535,6 +541,7 @@ var depsRules = `
+@@ -535,6 +539,7 @@ var depsRules = `
  
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
@@ -2810,183 +557,6 @@ index e3e01077c18b17..30811455e88418 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
-@@ -548,7 +555,7 @@ var depsRules = `
- 
- 	# TLS, Prince of Dependencies.
- 
--	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
-+	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
- 
- 	crypto/internal/boring/sig, crypto/tls/internal/fips140tls < crypto/tls/fipsonly;
- 
-diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
-new file mode 100644
-index 00000000000000..52748c44698076
---- /dev/null
-+++ b/src/hash/boring_test.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package hash_test
-+
-+const boringEnabled = true
-diff --git a/src/hash/example_test.go b/src/hash/example_test.go
-index f07b9aaa2c4898..b380537215634d 100644
---- a/src/hash/example_test.go
-+++ b/src/hash/example_test.go
-@@ -2,6 +2,8 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
-+//go:build !goexperiment.systemcrypto
-+
- package hash_test
- 
- import (
-diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..23736034d5c352 100644
---- a/src/hash/marshal_test.go
-+++ b/src/hash/marshal_test.go
-@@ -21,6 +21,7 @@ import (
- 	"hash/crc32"
- 	"hash/crc64"
- 	"hash/fnv"
-+	"strings"
- 	"testing"
- )
- 
-@@ -65,6 +66,11 @@ func TestMarshalHash(t *testing.T) {
- 			}
- 
- 			h := tt.new()
-+			if boringEnabled {
-+				if _, ok := h.(encoding.BinaryMarshaler); !ok {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
- 			h.Write(buf[:256])
- 			sum := h.Sum(nil)
- 
-@@ -80,6 +86,9 @@ func TestMarshalHash(t *testing.T) {
- 			}
- 			enc, err := h2m.MarshalBinary()
- 			if err != nil {
-+				if strings.Contains(err.Error(), "hash state is not marshallable") {
-+					t.Skip("BinaryMarshaler not supported")
-+				}
- 				t.Fatalf("MarshalBinary: %v", err)
- 			}
- 			if !bytes.Equal(enc, tt.golden) {
-diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
-new file mode 100644
-index 00000000000000..11dc691600b110
---- /dev/null
-+++ b/src/hash/notboring_test.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package hash_test
-+
-+const boringEnabled = false
-diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
-index 389eda9ad54b99..110d60beb0e70c 100644
---- a/src/net/smtp/smtp_test.go
-+++ b/src/net/smtp/smtp_test.go
-@@ -1136,40 +1136,60 @@ func sendMail(hostPort string) error {
- 
- // localhostCert is a PEM-encoded TLS cert generated from src/crypto/tls:
- //
--//	go run generate_cert.go --rsa-bits 1024 --host 127.0.0.1,::1,example.com \
-+//	Use a 2048-bits RSA key to make it FIPS-compliant.
-+//	go run generate_cert.go --rsa-bits 2048 --host 127.0.0.1,::1,example.com \
- //		--ca --start-date "Jan 1 00:00:00 1970" --duration=1000000h
- var localhostCert = []byte(`
- -----BEGIN CERTIFICATE-----
--MIICFDCCAX2gAwIBAgIRAK0xjnaPuNDSreeXb+z+0u4wDQYJKoZIhvcNAQELBQAw
--EjEQMA4GA1UEChMHQWNtZSBDbzAgFw03MDAxMDEwMDAwMDBaGA8yMDg0MDEyOTE2
--MDAwMFowEjEQMA4GA1UEChMHQWNtZSBDbzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
--gYkCgYEA0nFbQQuOWsjbGtejcpWz153OlziZM4bVjJ9jYruNw5n2Ry6uYQAffhqa
--JOInCmmcVe2siJglsyH9aRh6vKiobBbIUXXUU1ABd56ebAzlt0LobLlx7pZEMy30
--LqIi9E6zmL3YvdGzpYlkFRnRrqwEtWYbGBf3znO250S56CCWH2UCAwEAAaNoMGYw
--DgYDVR0PAQH/BAQDAgKkMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQF
--MAMBAf8wLgYDVR0RBCcwJYILZXhhbXBsZS5jb22HBH8AAAGHEAAAAAAAAAAAAAAA
--AAAAAAEwDQYJKoZIhvcNAQELBQADgYEAbZtDS2dVuBYvb+MnolWnCNqvw1w5Gtgi
--NmvQQPOMgM3m+oQSCPRTNGSg25e1Qbo7bgQDv8ZTnq8FgOJ/rbkyERw2JckkHpD4
--n4qcK27WkEDBtQFlPihIM8hLIuzWoi/9wygiElTy/tVL3y7fGCvY2/k1KBthtZGF
--tN8URjVmyEo=
-+MIIDOTCCAiGgAwIBAgIQKhWw7zkzXjX78HaPlVbNrjANBgkqhkiG9w0BAQsFADAS
-+MRAwDgYDVQQKEwdBY21lIENvMCAXDTcwMDEwMTAwMDAwMFoYDzIwODQwMTI5MTYw
-+MDAwWjASMRAwDgYDVQQKEwdBY21lIENvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-+MIIBCgKCAQEAy1EYLA8IFvZyUPY+uI7KToneaQPvIzQiOeWlDnFnoanw6h3KpoVc
-++yNbinK41WfXoSN/1kJ9gmGiFhJTPZ4rQ7DJsD7ethcpuz4uIimdWPohcBzwgbx4
-+wjhUgfUsCO6m76fFqrhbkHMDiS2iUjg2gyMVQCrqi8EuBW16yFQdJqPU04p+2rYw
-+eJ9lzdeSLR4yvx7p1JS8sS4DbSyrAUaJ9J1sH/gu0nSHNMo7WtIu9K8JmPeYR4X5
-+5KLURBU9PmvoGW+5ss/xS6SnacHAD9FebNPQqGB/soBA9gdJIN+5KW0xcE38Zz5Q
-+wAAUiU+VlWuZmge0sI8Ix8uIPIvGQSKN0wIDAQABo4GIMIGFMA4GA1UdDwEB/wQE
-+AwICpDATBgNVHSUEDDAKBggrBgEFBQcDATAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
-+DgQWBBRNMP9Cr0yrXpMpsgEtDr8FPmUEazAuBgNVHREEJzAlggtleGFtcGxlLmNv
-+bYcEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0BAQsFAAOCAQEAF0/z
-+KEnZrAsz4ov4fEvKY42EbKPm8s0pklPLmKVIh/iS7jTxxxvgDtOToiJ6IXY8Cfb3
-+nG1i78YakoVPUL5Cfh5LKDefMoefk6575ur2+gSdzgNmKUnlVfOMfpflia/ugATZ
-+5ORhpmKRKWzwXQ67S5XeVlZAehTsywQstsDu8WEVoSUnRSk1jZsCThOQfdlpox+K
-+71rGPSTxB9yCHMzZsk4xyZlGLaC0vDSJ+Zb5gWvAcvkSnpREvmc3/9TaW/lbUed6
-+uhO17lARcUhPCzkR5wAZCo/PihHMSXL8cqT4QdIux75OBxB/3EgLHL7KQw28A50g
-+DogldK8zx1ZADmupUA==
- -----END CERTIFICATE-----`)
- 
- // localhostKey is the private key for localhostCert.
- var localhostKey = []byte(testingKey(`
- -----BEGIN RSA TESTING KEY-----
--MIICXgIBAAKBgQDScVtBC45ayNsa16NylbPXnc6XOJkzhtWMn2Niu43DmfZHLq5h
--AB9+Gpok4icKaZxV7ayImCWzIf1pGHq8qKhsFshRddRTUAF3np5sDOW3QuhsuXHu
--lkQzLfQuoiL0TrOYvdi90bOliWQVGdGurAS1ZhsYF/fOc7bnRLnoIJYfZQIDAQAB
--AoGBAMst7OgpKyFV6c3JwyI/jWqxDySL3caU+RuTTBaodKAUx2ZEmNJIlx9eudLA
--kucHvoxsM/eRxlxkhdFxdBcwU6J+zqooTnhu/FE3jhrT1lPrbhfGhyKnUrB0KKMM
--VY3IQZyiehpxaeXAwoAou6TbWoTpl9t8ImAqAMY8hlULCUqlAkEA+9+Ry5FSYK/m
--542LujIcCaIGoG1/Te6Sxr3hsPagKC2rH20rDLqXwEedSFOpSS0vpzlPAzy/6Rbb
--PHTJUhNdwwJBANXkA+TkMdbJI5do9/mn//U0LfrCR9NkcoYohxfKz8JuhgRQxzF2
--6jpo3q7CdTuuRixLWVfeJzcrAyNrVcBq87cCQFkTCtOMNC7fZnCTPUv+9q1tcJyB
--vNjJu3yvoEZeIeuzouX9TJE21/33FaeDdsXbRhQEj23cqR38qFHsF1qAYNMCQQDP
--QXLEiJoClkR2orAmqjPLVhR3t2oB3INcnEjLNSq8LHyQEfXyaFfu4U9l5+fRPL2i
--jiC0k/9L5dHUsF0XZothAkEA23ddgRs+Id/HxtojqqUT27B8MT/IGNrYsp4DvS/c
--qgkeluku4GjxRlDMBuXk94xOBEinUs+p/hwP1Alll80Tpg==
-+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDLURgsDwgW9nJQ
-+9j64jspOid5pA+8jNCI55aUOcWehqfDqHcqmhVz7I1uKcrjVZ9ehI3/WQn2CYaIW
-+ElM9nitDsMmwPt62Fym7Pi4iKZ1Y+iFwHPCBvHjCOFSB9SwI7qbvp8WquFuQcwOJ
-+LaJSODaDIxVAKuqLwS4FbXrIVB0mo9TTin7atjB4n2XN15ItHjK/HunUlLyxLgNt
-+LKsBRon0nWwf+C7SdIc0yjta0i70rwmY95hHhfnkotREFT0+a+gZb7myz/FLpKdp
-+wcAP0V5s09CoYH+ygED2B0kg37kpbTFwTfxnPlDAABSJT5WVa5maB7SwjwjHy4g8
-+i8ZBIo3TAgMBAAECggEAc7dv/oN/ozIY1iOQhxId6p1lTHfEv1CIulMNoi7BQK2s
-+RFM4Z5Y32WfCTgYFVNCJVVkTBStKq85Npio/3i4Libcw03K05wY/5iX5s8/jkiSq
-+q1iNOgm+4SuWTXDw4xSRRo1CX2wWERykwoqKfCkqPXDWQ3Mpkukb/FLXMvVMshRA
-+9v9L6MyrCnsFHl8q2J6hcC+RQJ0pb5I4NF6KhMxABWxxxlDO0zYLA0wfhEn8nj/l
-+J37QLHmsA7pzxo+NqDTPgpfBuuTbRVGMkC+fPCXYinbubBeURFO2j2yBlseK+Vbd
-+sEffiAnPr4ocCz0k0tHAMMY7hKHup2HWuJGFu0IhAQKBgQDkKFEEcYWNx5Ybl1LV
-+qr2qIYofpFL+Gu5MWSZxzZbE8u9v0tTsp8SRhXkgjeHY6qjBUBnLgklOKwSigQAm
-+j9de44cXjnUIArzeAHsH3fzpYrLfsvBla6wQyr34D0chVCZ0cX/s/zXkSN4PcEkA
-+GGfKAENrGskDyc4uq1sIactu8wKBgQDkIL/XT7ysvsaxA+SfIs2CHgb8GNKgtoI1
-+QyR0+MfeJGCLwI9qcLbVzXda34qrzQw3YLIm2VHqhzJ4zb0gnyJ4adPZYwpLTgiU
-+jVksBVIwBTfbxYvF2+07poCSobCFKLGQnAujhDDIGDAUKQXQmFcqUNWw0QHfQzkS
-+xs36H27doQKBgQCjM8+YLRgKbc0LGXhwTHz1GJ6zuZiAGYWB6XddimEhqmDpjVcv
-+nWY3bdFSHwuBXYGvHfwFncGP/6eGEl6oNtYpEvoMOKOwQj0VVCStYPZLf4VSDK52
-+7ckcDdpLeao4xffn7VRDk97Z1+G4C2q8fbioPv36vCMz6YPp0DsCzqJtTwKBgCUN
-+4LtDW10fu7xC6p6ik4jgAbhu+79ZBbtLBZ/uTOCbPgdVJrZeSoRd1FYxWx/etW5F
-+SYqf3/tdLGiM2nxy/LFcVynHOYPTz/b5IpPQ5XGhV1peMv7XYyg+OkIW+0oVuwnH
-+HujXbukBbMXJiAVCyV25NYx71ncCP0H6grhu5J4hAoGAUaketZWHD/ks9JCoPtfy
-+pNnXqrIvTp1cSGJpVUQT/DUqAjevyZ5Q8PFPf09BZ6uYlXtCqsp7pA/fqNdlJRPR
-+tHRjpZ5XauBiFdpRNH4tJBTiWWhyuWhkWn369Az7HP3CIlJLeq2FlKCvMClcO4op
-+Qc9LHT7jqtcy+LqAVBpsJ/o=
- -----END RSA TESTING KEY-----`))
- 
- func testingKey(s string) string { return strings.ReplaceAll(s, "TESTING KEY", "PRIVATE KEY") }
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
 index 5a98b20253181c..9042f2c2795e19 100644
 --- a/src/runtime/runtime_boring.go
diff --git a/patches/0005-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
index b353bd0cfea..7cfe62fcf7a 100644
--- a/patches/0005-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0005-Add-OpenSSL-crypto-backend.patch
@@ -476,19 +476,19 @@ index 00000000000000..0f3aea733ac2a5
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 30811455e88418..3de94c93629e3d 100644
+index a46d6c034ca1e0..12086de2c2e766 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -509,7 +509,7 @@ var depsRules = `
+@@ -505,7 +505,7 @@ var depsRules = `
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+ 	sync/atomic < crypto/internal/boring/bcache;
+ 
+-	FIPS, internal/godebug, hash, embed,
++	FIPS, internal/godebug, hash, embed, encoding/binary,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
- 	encoding/binary,
--	crypto/internal/boring/bcache
-+	crypto/internal/boring/bcache,
- 	crypto/internal/backend/fips140
- 	< crypto/internal/fips140only
- 	< crypto
-@@ -517,6 +517,8 @@ var depsRules = `
+ 	crypto/internal/boring/bcache,
+@@ -516,6 +516,8 @@ var depsRules = `
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/cipher
@@ -497,7 +497,7 @@ index 30811455e88418..3de94c93629e3d 100644
  	< crypto/internal/boring
  	< crypto/internal/backend
  	< crypto/boring
-@@ -540,6 +542,7 @@ var depsRules = `
+@@ -538,6 +540,7 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
  	CRYPTO, FMT, math/big
@@ -505,7 +505,7 @@ index 30811455e88418..3de94c93629e3d 100644
  	< crypto/internal/boring/bbig
  	< crypto/internal/backend/bbig
  	< crypto/rand
-@@ -844,7 +847,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -842,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -514,7 +514,7 @@ index 30811455e88418..3de94c93629e3d 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -854,7 +857,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -852,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0007-Use-crypto-backends.patch b/patches/0007-Use-crypto-backends.patch
new file mode 100644
index 00000000000..f00c8e992fe
--- /dev/null
+++ b/patches/0007-Use-crypto-backends.patch
@@ -0,0 +1,2443 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Tue, 14 Jan 2025 11:10:21 +0100
+Subject: [PATCH] Use crypto backends
+
+---
+ src/cmd/api/boring_test.go                    |   2 +-
+ src/cmd/go/go_boring_test.go                  |   2 +-
+ .../go/testdata/script/gopath_std_vendor.txt  |   9 +
+ src/crypto/aes/aes.go                         |   2 +-
+ src/crypto/boring/boring.go                   |   4 +-
+ src/crypto/cipher/ctr_aes_test.go             |   2 +-
+ src/crypto/cipher/gcm_test.go                 |   2 +-
+ src/crypto/des/cipher.go                      |   7 +
+ src/crypto/dsa/boring.go                      | 113 +++++++++++
+ src/crypto/dsa/dsa.go                         |  88 +++++++++
+ src/crypto/dsa/notboring.go                   |  16 ++
+ src/crypto/ecdh/ecdh.go                       |   2 +-
+ src/crypto/ecdh/ecdh_test.go                  |   4 +
+ src/crypto/ecdh/nist.go                       |   2 +-
+ src/crypto/ecdsa/badlinkname.go               |  19 ++
+ src/crypto/ecdsa/boring.go                    |   6 +-
+ src/crypto/ecdsa/ecdsa.go                     |   4 +-
+ src/crypto/ecdsa/notboring.go                 |   4 +-
+ src/crypto/ed25519/boring.go                  |  71 +++++++
+ src/crypto/ed25519/ed25519.go                 |  73 +++++++
+ src/crypto/ed25519/notboring.go               |  16 ++
+ src/crypto/hkdf/hkdf.go                       |  14 ++
+ src/crypto/hkdf/hkdf_test.go                  |   2 +-
+ src/crypto/hmac/hmac.go                       |   2 +-
+ src/crypto/hmac/hmac_test.go                  |   2 +-
+ src/crypto/internal/cryptotest/allocations.go |   2 +-
+ .../internal/cryptotest/implementations.go    |   2 +-
+ src/crypto/md5/md5.go                         |  10 +
+ src/crypto/md5/md5_test.go                    |  21 ++
+ src/crypto/pbkdf2/pbkdf2.go                   |   4 +
+ src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
+ src/crypto/purego_test.go                     |   2 +-
+ src/crypto/rand/rand.go                       |   2 +-
+ src/crypto/rc4/rc4.go                         |  18 ++
+ src/crypto/rsa/boring.go                      |   6 +-
+ src/crypto/rsa/boring_test.go                 |   2 +-
+ src/crypto/rsa/fips.go                        |  10 +-
+ src/crypto/rsa/notboring.go                   |   4 +-
+ src/crypto/rsa/pkcs1v15.go                    |   6 +-
+ src/crypto/rsa/pkcs1v15_test.go               |   5 +
+ src/crypto/rsa/pss_test.go                    |   9 +-
+ src/crypto/rsa/rsa.go                         |   4 +-
+ src/crypto/rsa/rsa_test.go                    |  15 +-
+ src/crypto/sha1/sha1.go                       |   8 +-
+ src/crypto/sha1/sha1_test.go                  |  19 +-
+ src/crypto/sha256/sha256.go                   |   6 +-
+ src/crypto/sha256/sha256_test.go              |  29 +++
+ src/crypto/sha512/sha512.go                   |   2 +-
+ src/crypto/sha512/sha512_test.go              |  29 +++
+ src/crypto/tls/cipher_suites.go               |   2 +-
+ src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
+ src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
+ src/crypto/tls/handshake_client.go            |  12 +-
+ src/crypto/tls/handshake_client_tls13.go      |  16 +-
+ src/crypto/tls/handshake_server.go            |  10 +-
+ src/crypto/tls/handshake_server_tls13.go      |  27 ++-
+ src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
+ src/crypto/tls/internal/tls13/doc.go          |  18 ++
+ src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++++++
+ src/crypto/tls/key_schedule.go                |   2 +-
+ src/crypto/tls/prf.go                         |  41 ++++
+ src/go/build/deps_test.go                     |   3 +-
+ src/hash/boring_test.go                       |   9 +
+ src/hash/example_test.go                      |   2 +
+ src/hash/marshal_test.go                      |   9 +
+ src/hash/notboring_test.go                    |   9 +
+ src/net/smtp/smtp_test.go                     |  72 ++++---
+ 67 files changed, 1009 insertions(+), 97 deletions(-)
+ create mode 100644 src/crypto/dsa/boring.go
+ create mode 100644 src/crypto/dsa/notboring.go
+ create mode 100644 src/crypto/ecdsa/badlinkname.go
+ create mode 100644 src/crypto/ed25519/boring.go
+ create mode 100644 src/crypto/ed25519/notboring.go
+ create mode 100644 src/crypto/tls/internal/tls13/doc.go
+ create mode 100644 src/crypto/tls/internal/tls13/tls13.go
+ create mode 100644 src/hash/boring_test.go
+ create mode 100644 src/hash/notboring_test.go
+
+diff --git a/src/cmd/api/boring_test.go b/src/cmd/api/boring_test.go
+index f0e3575637c62a..9eab3b4e66e60b 100644
+--- a/src/cmd/api/boring_test.go
++++ b/src/cmd/api/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package main
+ 
+diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
+index ed0fbf3d53d75b..06478963f4be44 100644
+--- a/src/cmd/go/go_boring_test.go
++++ b/src/cmd/go/go_boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package main_test
+ 
+diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
+index 4aaf46b5d0f0dc..ec58a217400caa 100644
+--- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
++++ b/src/cmd/go/testdata/script/gopath_std_vendor.txt
+@@ -1,5 +1,14 @@
+ env GO111MODULE=off
+ 
++# Disable systemcrypto while evaluating test dependencies to avoid importing
++# vendored crypto module dependencies like golang-fips/openssl. This test script
++# is not set up to handle any vendored libraries being imported other than
++# golang.org/x/net/http2/hpack, so we must make sure it is the only one.
++#
++# See https://github.com/microsoft/go/issues/481 for more details, such as the
++# dependency chain that would cause the failure if the gocrypt tag isn't used.
++env GOEXPERIMENT=none
++
+ [!compiler:gc] skip
+ 
+ go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
+diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
+index 5bc2d13d673e0a..b803c77be62a66 100644
+--- a/src/crypto/aes/aes.go
++++ b/src/crypto/aes/aes.go
+@@ -15,7 +15,7 @@ package aes
+ 
+ import (
+ 	"crypto/cipher"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/aes"
+ 	"strconv"
+ )
+diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
+index 097c37e343fdb8..a5d603896d3890 100644
+--- a/src/crypto/boring/boring.go
++++ b/src/crypto/boring/boring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Package boring exposes functions that are only available when building with
+ // Go+BoringCrypto. This package is available on all targets as long as the
+@@ -13,7 +13,7 @@
+ // is satisfied, so that applications can tag files that use this package.
+ package boring
+ 
+-import "crypto/internal/boring"
++import boring "crypto/internal/backend"
+ 
+ // Enabled reports whether BoringCrypto handles supported crypto operations.
+ func Enabled() bool {
+diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
+index 33942467784ad3..0282ffa9fa23c8 100644
+--- a/src/crypto/cipher/ctr_aes_test.go
++++ b/src/crypto/cipher/ctr_aes_test.go
+@@ -14,7 +14,7 @@ import (
+ 	"bytes"
+ 	"crypto/aes"
+ 	"crypto/cipher"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	fipsaes "crypto/internal/fips140/aes"
+ 	"encoding/hex"
+diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
+index ea2b4e29e2b67f..f884b0d0fbefe7 100644
+--- a/src/crypto/cipher/gcm_test.go
++++ b/src/crypto/cipher/gcm_test.go
+@@ -8,7 +8,7 @@ import (
+ 	"bytes"
+ 	"crypto/aes"
+ 	"crypto/cipher"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140"
+ 	fipsaes "crypto/internal/fips140/aes"
+diff --git a/src/crypto/des/cipher.go b/src/crypto/des/cipher.go
+index 21303b384cf757..0d3c4f810cfd8f 100644
+--- a/src/crypto/des/cipher.go
++++ b/src/crypto/des/cipher.go
+@@ -6,6 +6,7 @@ package des
+ 
+ import (
+ 	"crypto/cipher"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/alias"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -36,6 +37,9 @@ func NewCipher(key []byte) (cipher.Block, error) {
+ 	if len(key) != 8 {
+ 		return nil, KeySizeError(len(key))
+ 	}
++	if boring.Enabled && boring.SupportsDESCipher() {
++		return boring.NewDESCipher(key)
++	}
+ 
+ 	c := new(desCipher)
+ 	c.generateSubkeys(key)
+@@ -84,6 +88,9 @@ func NewTripleDESCipher(key []byte) (cipher.Block, error) {
+ 	if len(key) != 24 {
+ 		return nil, KeySizeError(len(key))
+ 	}
++	if boring.Enabled && boring.SupportsTripleDESCipher() {
++		return boring.NewTripleDESCipher(key)
++	}
+ 
+ 	c := new(tripleDESCipher)
+ 	c.cipher1.generateSubkeys(key[:8])
+diff --git a/src/crypto/dsa/boring.go b/src/crypto/dsa/boring.go
+new file mode 100644
+index 00000000000000..7ea0c8c423e9ee
+--- /dev/null
++++ b/src/crypto/dsa/boring.go
+@@ -0,0 +1,113 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package dsa
++
++import (
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
++	"crypto/internal/boring/bcache"
++	"math/big"
++)
++
++// Cached conversions from Go PublicKey/PrivateKey to BoringCrypto.
++//
++// The first operation on a PublicKey or PrivateKey makes a parallel
++// BoringCrypto key and saves it in pubCache or privCache.
++//
++// We could just assume that once used in a sign/verify/encrypt/decrypt operation,
++// a particular key is never again modified, but that has not been a
++// stated assumption before. Just in case there is any existing code that
++// does modify the key between operations, we save the original values
++// alongside the cached BoringCrypto key and check that the real key
++// still matches before using the cached key. The theory is that the real
++// operations are significantly more expensive than the comparison.
++
++type boringPub struct {
++	key  *boring.PublicKeyDSA
++	orig PublicKey
++}
++
++var pubCache bcache.Cache[PublicKey, boringPub]
++var privCache bcache.Cache[PrivateKey, boringPriv]
++
++func init() {
++	pubCache.Register()
++	privCache.Register()
++}
++
++func boringPublicKey(pub *PublicKey) (*boring.PublicKeyDSA, error) {
++	b := pubCache.Get(pub)
++	if b != nil && publicKeyEqual(&b.orig, pub) {
++		return b.key, nil
++	}
++
++	b = new(boringPub)
++	b.orig = copyPublicKey(pub)
++	key, err := boring.NewPublicKeyDSA(bbig.Enc(b.orig.P), bbig.Enc(b.orig.Q), bbig.Enc(b.orig.G), bbig.Enc(b.orig.Y))
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	pubCache.Put(pub, b)
++	return key, nil
++}
++
++type boringPriv struct {
++	key  *boring.PrivateKeyDSA
++	orig PrivateKey
++}
++
++func boringPrivateKey(priv *PrivateKey) (*boring.PrivateKeyDSA, error) {
++	b := privCache.Get(priv)
++	if b != nil && privateKeyEqual(&b.orig, priv) {
++		return b.key, nil
++	}
++
++	b = new(boringPriv)
++	b.orig = copyPrivateKey(priv)
++
++	P := b.orig.P
++	Q := b.orig.Q
++	G := b.orig.G
++	X := b.orig.X
++	Y := b.orig.Y
++
++	key, err := boring.NewPrivateKeyDSA(bbig.Enc(P), bbig.Enc(Q), bbig.Enc(G), bbig.Enc(X), bbig.Enc(Y))
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	privCache.Put(priv, b)
++	return key, nil
++}
++
++func publicKeyEqual(k1, k2 *PublicKey) bool {
++	return k1.Y != nil && k1.Y.Cmp(k2.Y) == 0 && k1.P.Cmp(k2.P) == 0 && k1.Q.Cmp(k2.Q) == 0 && k1.G.Cmp(k2.G) == 0
++}
++
++func copyPublicKey(k *PublicKey) PublicKey {
++	return PublicKey{
++		Parameters: Parameters{
++			P: new(big.Int).Set(k.P),
++			Q: new(big.Int).Set(k.Q),
++			G: new(big.Int).Set(k.G),
++		},
++		Y: new(big.Int).Set(k.Y),
++	}
++}
++
++func privateKeyEqual(k1, k2 *PrivateKey) bool {
++	return publicKeyEqual(&k1.PublicKey, &k2.PublicKey) &&
++		k1.X.Cmp(k2.X) == 0
++}
++
++func copyPrivateKey(k *PrivateKey) PrivateKey {
++	return PrivateKey{
++		PublicKey: copyPublicKey(&k.PublicKey),
++		X:         new(big.Int).Set(k.X),
++	}
++}
+diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
+index 000becc82dfb79..6430bb3ea5e437 100644
+--- a/src/crypto/dsa/dsa.go
++++ b/src/crypto/dsa/dsa.go
+@@ -18,8 +18,13 @@ import (
+ 	"io"
+ 	"math/big"
+ 
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140only"
+ 	"crypto/internal/randutil"
++
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
+ )
+ 
+ // Parameters represents the domain parameters for a key. These parameters can
+@@ -91,6 +96,17 @@ func GenerateParameters(params *Parameters, rand io.Reader, sizes ParameterSizes
+ 		return errors.New("crypto/dsa: invalid ParameterSizes")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsDSA(L, N) {
++		p, q, g, err := boring.GenerateParametersDSA(L, N)
++		if err != nil {
++			return err
++		}
++		params.P = bbig.Dec(p)
++		params.Q = bbig.Dec(q)
++		params.G = bbig.Dec(g)
++		return nil
++	}
++
+ 	qBytes := make([]byte, N/8)
+ 	pBytes := make([]byte, L/8)
+ 
+@@ -170,6 +186,17 @@ func GenerateKey(priv *PrivateKey, rand io.Reader) error {
+ 		return errors.New("crypto/dsa: parameters not set up before generating key")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
++		x, y, err := boring.GenerateKeyDSA(bbig.Enc(priv.P), bbig.Enc(priv.Q), bbig.Enc(priv.G))
++		if err != nil {
++			return err
++		}
++		priv.X = bbig.Dec(x)
++		priv.Y = bbig.Dec(y)
++
++		return nil
++	}
++
+ 	x := new(big.Int)
+ 	xBytes := make([]byte, priv.Q.BitLen()/8)
+ 
+@@ -225,6 +252,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+ 		err = ErrInvalidPublicKey
+ 		return
+ 	}
++
++	if boring.Enabled && boring.SupportsDSA(priv.P.BitLen(), priv.Q.BitLen()) {
++		b, err := boringPrivateKey(priv)
++		if err != nil {
++			return nil, nil, err
++		}
++
++		r, s, err := boring.SignDSA(b, hash, parseSignature)
++
++		return bbig.Dec(r), bbig.Dec(s), err
++	}
++
+ 	n >>= 3
+ 
+ 	var attempts int
+@@ -288,6 +327,14 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+ 		panic("crypto/dsa: use of DSA is not allowed in FIPS 140-only mode")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsDSA(pub.P.BitLen(), pub.Q.BitLen()) {
++		bkey, err := boringPublicKey(pub)
++		if err != nil {
++			return false
++		}
++
++		return boring.VerifyDSA(bkey, hash, bbig.Enc(r), bbig.Enc(s), encodeSignature)
++	}
+ 	// FIPS 186-3, section 4.7
+ 
+ 	if pub.P.Sign() == 0 {
+@@ -324,3 +371,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+ 
+ 	return v.Cmp(r) == 0
+ }
++
++func parseSignature(sig []byte) (boring.BigInt, boring.BigInt, error) {
++	var r, s []byte
++	var inner cryptobyte.String
++	input := cryptobyte.String(sig)
++	if !input.ReadASN1(&inner, asn1.SEQUENCE) ||
++		!input.Empty() ||
++		!inner.ReadASN1Integer(&r) ||
++		!inner.ReadASN1Integer(&s) ||
++		!inner.Empty() {
++		return nil, nil, errors.New("invalid ASN.1")
++	}
++	return bbig.Enc(new(big.Int).SetBytes(r)), bbig.Enc(new(big.Int).SetBytes(s)), nil
++}
++
++func encodeSignature(r, s boring.BigInt) ([]byte, error) {
++	var b cryptobyte.Builder
++	b.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		addASN1IntBytes(b, bbig.Dec(r).Bytes())
++		addASN1IntBytes(b, bbig.Dec(s).Bytes())
++	})
++	return b.Bytes()
++}
++
++// addASN1IntBytes encodes in ASN.1 a positive integer represented as
++// a big-endian byte slice with zero or more leading zeroes.
++func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
++	for len(bytes) > 0 && bytes[0] == 0 {
++		bytes = bytes[1:]
++	}
++	if len(bytes) == 0 {
++		b.SetError(errors.New("invalid integer"))
++		return
++	}
++	b.AddASN1(asn1.INTEGER, func(c *cryptobyte.Builder) {
++		if bytes[0]&0x80 != 0 {
++			c.AddUint8(0)
++		}
++		c.AddBytes(bytes)
++	})
++}
+diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
+new file mode 100644
+index 00000000000000..cd02ff5a00c3dc
+--- /dev/null
++++ b/src/crypto/dsa/notboring.go
+@@ -0,0 +1,16 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package dsa
++
++import boring "crypto/internal/backend"
++
++func boringPublicKey(*PublicKey) (*boring.PublicKeyDSA, error) {
++	panic("boringcrypto: not available")
++}
++func boringPrivateKey(*PrivateKey) (*boring.PrivateKeyDSA, error) {
++	panic("boringcrypto: not available")
++}
+diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
+index 231f1ea04c1010..cfa113e2345816 100644
+--- a/src/crypto/ecdh/ecdh.go
++++ b/src/crypto/ecdh/ecdh.go
+@@ -8,7 +8,7 @@ package ecdh
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/ecdh"
+ 	"crypto/subtle"
+ 	"errors"
+diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
+index 75d2480775669f..6a4d26fbafe090 100644
+--- a/src/crypto/ecdh/ecdh_test.go
++++ b/src/crypto/ecdh/ecdh_test.go
+@@ -9,6 +9,7 @@ import (
+ 	"crypto"
+ 	"crypto/cipher"
+ 	"crypto/ecdh"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	"crypto/sha256"
+ 	"encoding/hex"
+@@ -280,6 +281,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
+ }
+ 
+ func TestNewPrivateKey(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("skipping test with different results when using different backends")
++	}
+ 	testAllCurves(t, func(t *testing.T, curve ecdh.Curve) {
+ 		for _, input := range invalidPrivateKeys[curve] {
+ 			k, err := curve.NewPrivateKey(hexDecode(t, input))
+diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
+index acef8298943c2b..ca6171cf775117 100644
+--- a/src/crypto/ecdh/nist.go
++++ b/src/crypto/ecdh/nist.go
+@@ -6,7 +6,7 @@ package ecdh
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/ecdh"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
+new file mode 100644
+index 00000000000000..1dc05d09b2062d
+--- /dev/null
++++ b/src/crypto/ecdsa/badlinkname.go
+@@ -0,0 +1,19 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package ecdsa
++
++import _ "unsafe"
++
++// The symbols below are pulled by some crypto backend in the Microsoft Go compiler.
++// We provide a push linkname here, to keep them accessible with pull linknames.
++
++//go:linkname encodeSignature
++//go:linkname parseSignature
++
++// This supplements other linknames that are already added by
++// https://github.com/golang/go/commit/41aab30bd260297ad8ddad47e98fdf8390a9a67e
++// See that commit for more information.
+diff --git a/src/crypto/ecdsa/boring.go b/src/crypto/ecdsa/boring.go
+index 275c60b4de49eb..ff8bddf28c4545 100644
+--- a/src/crypto/ecdsa/boring.go
++++ b/src/crypto/ecdsa/boring.go
+@@ -2,13 +2,13 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package ecdsa
+ 
+ import (
+-	"crypto/internal/boring"
+-	"crypto/internal/boring/bbig"
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/boring/bcache"
+ 	"math/big"
+ )
+diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
+index cb308b41e9df86..8f73855aa738de 100644
+--- a/src/crypto/ecdsa/ecdsa.go
++++ b/src/crypto/ecdsa/ecdsa.go
+@@ -20,8 +20,8 @@ import (
+ 	"crypto"
+ 	"crypto/ecdh"
+ 	"crypto/elliptic"
+-	"crypto/internal/boring"
+-	"crypto/internal/boring/bbig"
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140/ecdsa"
+ 	"crypto/internal/fips140hash"
+ 	"crypto/internal/fips140only"
+diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
+index 039bd82ed21f9f..69a97d9bf250be 100644
+--- a/src/crypto/ecdsa/notboring.go
++++ b/src/crypto/ecdsa/notboring.go
+@@ -2,11 +2,11 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
+ 
+ package ecdsa
+ 
+-import "crypto/internal/boring"
++import boring "crypto/internal/backend"
+ 
+ func boringPublicKey(*PublicKey) (*boring.PublicKeyECDSA, error) {
+ 	panic("boringcrypto: not available")
+diff --git a/src/crypto/ed25519/boring.go b/src/crypto/ed25519/boring.go
+new file mode 100644
+index 00000000000000..cce33e4d6cc927
+--- /dev/null
++++ b/src/crypto/ed25519/boring.go
+@@ -0,0 +1,71 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package ed25519
++
++import (
++	boring "crypto/internal/backend"
++	"crypto/internal/boring/bcache"
++	"unsafe"
++)
++
++var pubCache bcache.Cache[byte, boringPub]
++var privCache bcache.Cache[byte, boringPriv]
++
++func init() {
++	if boring.Enabled && boring.SupportsEd25519() {
++		pubCache.Register()
++		privCache.Register()
++	}
++}
++
++type boringPub struct {
++	key  *boring.PublicKeyEd25519
++	orig [PublicKeySize]byte
++}
++
++func boringPublicKey(pub PublicKey) (*boring.PublicKeyEd25519, error) {
++	// Use the pointer to the underlying pub array as key.
++	p := unsafe.SliceData(pub)
++	b := pubCache.Get(p)
++	if b != nil && PublicKey(b.orig[:]).Equal(pub) {
++		return b.key, nil
++	}
++
++	b = new(boringPub)
++	copy(b.orig[:], pub)
++	key, err := boring.NewPublicKeyEd25519(b.orig[:])
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	pubCache.Put(p, b)
++	return key, nil
++}
++
++type boringPriv struct {
++	key  *boring.PrivateKeyEd25519
++	orig [PrivateKeySize]byte
++}
++
++func boringPrivateKey(priv PrivateKey) (*boring.PrivateKeyEd25519, error) {
++	// Use the pointer to the underlying priv array as key.
++	p := unsafe.SliceData(priv)
++	b := privCache.Get(p)
++	if b != nil && PrivateKey(b.orig[:]).Equal(priv) {
++		return b.key, nil
++	}
++
++	b = new(boringPriv)
++	copy(b.orig[:], priv)
++	key, err := boring.NewPrivateKeyEd25519(b.orig[:])
++	if err != nil {
++		return nil, err
++	}
++	b.key = key
++	privCache.Put(p, b)
++	return key, nil
++}
+diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
+index c1f8ff784e4a5c..6476bfbe896d6c 100644
+--- a/src/crypto/ed25519/ed25519.go
++++ b/src/crypto/ed25519/ed25519.go
+@@ -17,6 +17,7 @@ package ed25519
+ 
+ import (
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/ed25519"
+ 	"crypto/internal/fips140only"
+ 	cryptorand "crypto/rand"
+@@ -24,6 +25,7 @@ import (
+ 	"errors"
+ 	"io"
+ 	"strconv"
++	"sync"
+ )
+ 
+ const (
+@@ -138,6 +140,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+ 	if rand == nil {
+ 		rand = cryptorand.Reader
+ 	}
++	if boring.Enabled && boring.SupportsEd25519() {
++		if rand == boring.RandReader {
++			priv, err := boring.GenerateKeyEd25519()
++			if err != nil {
++				return nil, nil, err
++			}
++			privData, err := priv.Bytes()
++			if err != nil {
++				return nil, nil, err
++			}
++			privKey := PrivateKey(privData)
++			pubKey := privKey.Public().(PublicKey)
++			return pubKey, privKey, err
++		}
++		boring.UnreachableExceptTests()
++	}
+ 
+ 	seed := make([]byte, SeedSize)
+ 	if _, err := io.ReadFull(rand, seed); err != nil {
+@@ -154,6 +172,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+ // with RFC 8032. RFC 8032's private keys correspond to seeds in this
+ // package.
+ func NewKeyFromSeed(seed []byte) PrivateKey {
++	if boring.Enabled && boring.SupportsEd25519() {
++		key, err := boring.NewPrivateKeyEd25519FromSeed(seed)
++		if err != nil {
++			panic(err)
++		}
++		d, err := key.Bytes()
++		if err != nil {
++			panic(err)
++		}
++		return PrivateKey(d)
++	}
+ 	// Outline the function body so that the returned key can be stack-allocated.
+ 	privateKey := make([]byte, PrivateKeySize)
+ 	newKeyFromSeed(privateKey, seed)
+@@ -172,6 +201,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+ // Sign signs the message with privateKey and returns a signature. It will
+ // panic if len(privateKey) is not [PrivateKeySize].
+ func Sign(privateKey PrivateKey, message []byte) []byte {
++	if boring.Enabled && boring.SupportsEd25519() {
++		priv, err := boringPrivateKey(privateKey)
++		if err != nil {
++			panic(err)
++		}
++		signature, err := boring.SignEd25519(priv, message)
++		if err != nil {
++			panic(err)
++		}
++		return signature
++	}
+ 	// Outline the function body so that the returned signature can be
+ 	// stack-allocated.
+ 	signature := make([]byte, SignatureSize)
+@@ -200,6 +240,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+ 	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
+ }
+ 
++// testMalleability returns true if the crypto backend correctly rejects
++// malleable signatures. The only known backend that fails to do so is
++// OpenSSL version 1.1.1a or lower.
++// See https://github.com/openssl/openssl/issues/7693.
++var testMalleability = sync.OnceValue(func() bool {
++	msg := []byte{0x54, 0x65, 0x73, 0x74}
++	sig := []byte{
++		0x7c, 0x38, 0xe0, 0x26, 0xf2, 0x9e, 0x14, 0xaa, 0xbd, 0x05, 0x9a,
++		0x0f, 0x2d, 0xb8, 0xb0, 0xcd, 0x78, 0x30, 0x40, 0x60, 0x9a, 0x8b,
++		0xe6, 0x84, 0xdb, 0x12, 0xf8, 0x2a, 0x27, 0x77, 0x4a, 0xb0, 0x67,
++		0x65, 0x4b, 0xce, 0x38, 0x32, 0xc2, 0xd7, 0x6f, 0x8f, 0x6f, 0x5d,
++		0xaf, 0xc0, 0x8d, 0x93, 0x39, 0xd4, 0xee, 0xf6, 0x76, 0x57, 0x33,
++		0x36, 0xa5, 0xc5, 0x1e, 0xb6, 0xf9, 0x46, 0xb3, 0x1d,
++	}
++	pkey := []byte{
++		0x7d, 0x4d, 0x0e, 0x7f, 0x61, 0x53, 0xa6, 0x9b, 0x62, 0x42, 0xb5,
++		0x22, 0xab, 0xbe, 0xe6, 0x85, 0xfd, 0xa4, 0x42, 0x0f, 0x88, 0x34,
++		0xb1, 0x08, 0xc3, 0xbd, 0xae, 0x36, 0x9e, 0xf5, 0x49, 0xfa,
++	}
++	pub, err := boring.NewPublicKeyEd25519(pkey)
++	if err != nil {
++		return false
++	}
++	return boring.VerifyEd25519(pub, msg, sig) != nil
++})
++
+ // VerifyWithOptions reports whether sig is a valid signature of message by
+ // publicKey. A valid signature is indicated by returning a nil error. It will
+ // panic if len(publicKey) is not [PublicKeySize].
+@@ -228,6 +294,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+ 		}
+ 		return ed25519.VerifyCtx(k, message, sig, opts.Context)
+ 	case opts.Hash == crypto.Hash(0): // Ed25519
++		if boring.Enabled && boring.SupportsEd25519() && testMalleability() {
++			pub, err := boringPublicKey(publicKey)
++			if err != nil {
++				return err
++			}
++			return boring.VerifyEd25519(pub, message, sig)
++		}
+ 		return ed25519.Verify(k, message, sig)
+ 	default:
+ 		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
+diff --git a/src/crypto/ed25519/notboring.go b/src/crypto/ed25519/notboring.go
+new file mode 100644
+index 00000000000000..b0cdd44d81c753
+--- /dev/null
++++ b/src/crypto/ed25519/notboring.go
+@@ -0,0 +1,16 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package ed25519
++
++import boring "crypto/internal/backend"
++
++func boringPublicKey(PublicKey) (*boring.PublicKeyEd25519, error) {
++	panic("boringcrypto: not available")
++}
++func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
++	panic("boringcrypto: not available")
++}
+diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
+index 6b02522866d57f..37e67ec184af5d 100644
+--- a/src/crypto/hkdf/hkdf.go
++++ b/src/crypto/hkdf/hkdf.go
+@@ -11,6 +11,7 @@
+ package hkdf
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140hash"
+ 	"crypto/internal/fips140only"
+@@ -29,6 +30,9 @@ func Extract[H hash.Hash](h func() H, secret, salt []byte) ([]byte, error) {
+ 	if err := checkFIPS140Only(fh, secret); err != nil {
+ 		return nil, err
+ 	}
++	if boring.Enabled && boring.SupportsHKDF() {
++		return boring.ExtractHKDF(fh, secret, salt)
++	}
+ 	return hkdf.Extract(fh, secret, salt), nil
+ }
+ 
+@@ -50,6 +54,9 @@ func Expand[H hash.Hash](h func() H, pseudorandomKey []byte, info string, keyLen
+ 		return nil, errors.New("hkdf: requested key length too large")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsHKDF() {
++		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
++	}
+ 	return hkdf.Expand(fh, pseudorandomKey, info, keyLength), nil
+ }
+ 
+@@ -67,6 +74,13 @@ func Key[Hash hash.Hash](h func() Hash, secret, salt []byte, info string, keyLen
+ 		return nil, errors.New("hkdf: requested key length too large")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsHKDF() {
++		pseudorandomKey, err := boring.ExtractHKDF(fh, secret, salt)
++		if err != nil {
++			return nil, err
++		}
++		return boring.ExpandHKDF(fh, pseudorandomKey, []byte(info), keyLength)
++	}
+ 	return hkdf.Key(fh, secret, salt, info, keyLength), nil
+ }
+ 
+diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
+index 201b440289bb2d..4ed4960ff35b66 100644
+--- a/src/crypto/hkdf/hkdf_test.go
++++ b/src/crypto/hkdf/hkdf_test.go
+@@ -6,7 +6,7 @@ package hkdf
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/md5"
+ 	"crypto/sha1"
+diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
+index 554c8c9b78940b..c68a394280cc2c 100644
+--- a/src/crypto/hmac/hmac.go
++++ b/src/crypto/hmac/hmac.go
+@@ -22,7 +22,7 @@ timing side-channels:
+ package hmac
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/hmac"
+ 	"crypto/internal/fips140hash"
+ 	"crypto/internal/fips140only"
+diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
+index 7accad763244a1..dd3211f2c37af3 100644
+--- a/src/crypto/hmac/hmac_test.go
++++ b/src/crypto/hmac/hmac_test.go
+@@ -5,7 +5,7 @@
+ package hmac
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/md5"
+ 	"crypto/sha1"
+diff --git a/src/crypto/internal/cryptotest/allocations.go b/src/crypto/internal/cryptotest/allocations.go
+index 70055af70b42ec..3c4b4fbaa98ded 100644
+--- a/src/crypto/internal/cryptotest/allocations.go
++++ b/src/crypto/internal/cryptotest/allocations.go
+@@ -5,7 +5,7 @@
+ package cryptotest
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"internal/asan"
+ 	"internal/msan"
+ 	"internal/race"
+diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
+index 3fa730459050f6..1f28f12a6e7b4f 100644
+--- a/src/crypto/internal/cryptotest/implementations.go
++++ b/src/crypto/internal/cryptotest/implementations.go
+@@ -5,7 +5,7 @@
+ package cryptotest
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/impl"
+ 	"internal/goos"
+ 	"internal/testenv"
+diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
+index a0384e175f31bd..f7aa6da36f02de 100644
+--- a/src/crypto/md5/md5.go
++++ b/src/crypto/md5/md5.go
+@@ -12,6 +12,7 @@ package md5
+ 
+ import (
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+ 	"hash"
+@@ -104,6 +105,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New() hash.Hash {
++	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
++		return boring.NewMD5()
++	}
+ 	d := new(digest)
+ 	d.Reset()
+ 	return d
+@@ -188,6 +192,12 @@ func (d *digest) checkSum() [Size]byte {
+ 
+ // Sum returns the MD5 checksum of the data.
+ func Sum(data []byte) [Size]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
++		if fips140only.Enabled {
++			panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
++		}
++		return boring.MD5(data)
++	}
+ 	var d digest
+ 	d.Reset()
+ 	d.Write(data)
+diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
+index 437d9b9d4c0e0d..ee28c55f846e81 100644
+--- a/src/crypto/md5/md5_test.go
++++ b/src/crypto/md5/md5_test.go
+@@ -6,12 +6,14 @@ package md5
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/rand"
+ 	"encoding"
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ 	"unsafe"
+ )
+@@ -88,6 +90,11 @@ func TestGolden(t *testing.T) {
+ }
+ 
+ func TestGoldenMarshal(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for _, g := range golden {
+ 		h := New()
+ 		h2 := New()
+@@ -96,6 +103,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 
+ 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 		if err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("could not marshal: %v", err)
+ 			continue
+ 		}
+@@ -157,6 +167,9 @@ func TestLarge(t *testing.T) {
+ 
+ // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
+ func TestBlockGeneric(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("digest is not used when boring.Enabled is set")
++	}
+ 	gen, asm := New().(*digest), New().(*digest)
+ 	buf := make([]byte, BlockSize*20) // arbitrary factor
+ 	rand.Read(buf)
+@@ -204,10 +217,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryUnmarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
+diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
+index 271d2b03312ef0..ff76299fbe4782 100644
+--- a/src/crypto/pbkdf2/pbkdf2.go
++++ b/src/crypto/pbkdf2/pbkdf2.go
+@@ -11,6 +11,7 @@
+ package pbkdf2
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/pbkdf2"
+ 	"crypto/internal/fips140hash"
+ 	"crypto/internal/fips140only"
+@@ -47,5 +48,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
+ 			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 		}
+ 	}
++	if boring.Enabled && boring.SupportsPBKDF2() {
++		return boring.PBKDF2([]byte(password), salt, iter, keyLength, fh)
++	}
+ 	return pbkdf2.Key(fh, password, salt, iter, keyLength)
+ }
+diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
+index 03980c7e54d3be..4968a666fad4e5 100644
+--- a/src/crypto/pbkdf2/pbkdf2_test.go
++++ b/src/crypto/pbkdf2/pbkdf2_test.go
+@@ -6,7 +6,7 @@ package pbkdf2_test
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/pbkdf2"
+ 	"crypto/sha1"
+diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
+index 62be347e0c6822..d284b5cf7814a6 100644
+--- a/src/crypto/purego_test.go
++++ b/src/crypto/purego_test.go
+@@ -41,7 +41,7 @@ func TestPureGoTag(t *testing.T) {
+ 	}
+ 
+ 	for _, pkgName := range pkgs {
+-		if strings.Contains(pkgName, "/boring") {
++		if strings.Contains(pkgName, "/boring") || strings.Contains(pkgName, "/internal/backend") || strings.Contains(pkgName, "tls/fipsonly") {
+ 			continue
+ 		}
+ 
+diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
+index 1ca16caa9563e6..3ef22b5ff8222b 100644
+--- a/src/crypto/rand/rand.go
++++ b/src/crypto/rand/rand.go
+@@ -7,7 +7,7 @@
+ package rand
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140/drbg"
+ 	"crypto/internal/sysrand"
+diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
+index 90943a0935befb..09ebdfd733e5d6 100644
+--- a/src/crypto/rc4/rc4.go
++++ b/src/crypto/rc4/rc4.go
+@@ -10,6 +10,7 @@
+ package rc4
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/alias"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+@@ -20,6 +21,8 @@ import (
+ type Cipher struct {
+ 	s    [256]uint32
+ 	i, j uint8
++
++	boring *boring.RC4Cipher
+ }
+ 
+ type KeySizeError int
+@@ -38,6 +41,13 @@ func NewCipher(key []byte) (*Cipher, error) {
+ 	if k < 1 || k > 256 {
+ 		return nil, KeySizeError(k)
+ 	}
++	if boring.Enabled && boring.SupportsRC4() {
++		c, err := boring.NewRC4Cipher(key)
++		if err != nil {
++			return nil, err
++		}
++		return &Cipher{boring: c}, nil
++	}
+ 	var c Cipher
+ 	for i := 0; i < 256; i++ {
+ 		c.s[i] = uint32(i)
+@@ -55,6 +65,10 @@ func NewCipher(key []byte) (*Cipher, error) {
+ // Deprecated: Reset can't guarantee that the key will be entirely removed from
+ // the process's memory.
+ func (c *Cipher) Reset() {
++	if boring.Enabled && boring.SupportsRC4() {
++		c.boring.Reset()
++		return
++	}
+ 	for i := range c.s {
+ 		c.s[i] = 0
+ 	}
+@@ -64,6 +78,10 @@ func (c *Cipher) Reset() {
+ // XORKeyStream sets dst to the result of XORing src with the key stream.
+ // Dst and src must overlap entirely or not at all.
+ func (c *Cipher) XORKeyStream(dst, src []byte) {
++	if boring.Enabled && boring.SupportsRC4() {
++		c.boring.XORKeyStream(dst, src)
++		return
++	}
+ 	if len(src) == 0 {
+ 		return
+ 	}
+diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
+index b9f9d3154f2589..d52faddef45549 100644
+--- a/src/crypto/rsa/boring.go
++++ b/src/crypto/rsa/boring.go
+@@ -2,13 +2,13 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package rsa
+ 
+ import (
+-	"crypto/internal/boring"
+-	"crypto/internal/boring/bbig"
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/boring/bcache"
+ 	"math/big"
+ )
+diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
+index 838fcc1244bdbe..d89f732345e8a3 100644
+--- a/src/crypto/rsa/boring_test.go
++++ b/src/crypto/rsa/boring_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Note: Can run these tests against the non-BoringCrypto
+ // version of the code by using "CGO_ENABLED=0 go test".
+diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
+index 8373c125ae3096..cee523891d5897 100644
+--- a/src/crypto/rsa/fips.go
++++ b/src/crypto/rsa/fips.go
+@@ -6,7 +6,7 @@ package rsa
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140hash"
+ 	"crypto/internal/fips140only"
+@@ -70,7 +70,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ 		hash = opts.Hash
+ 	}
+ 
+-	if boring.Enabled && rand == boring.RandReader {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -133,7 +133,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+ 		return err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsRSASaltLength(opts.saltLength()) && boring.SupportsHash(hash) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return err
+@@ -250,7 +250,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
+ 		k := priv.Size()
+ 		if len(ciphertext) > k ||
+ 			k < hash.Size()*2+2 {
+@@ -312,7 +312,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
+index 2abc0436405f8a..3e4d6f3eef61e6 100644
+--- a/src/crypto/rsa/notboring.go
++++ b/src/crypto/rsa/notboring.go
+@@ -2,11 +2,11 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
+ 
+ package rsa
+ 
+-import "crypto/internal/boring"
++import boring "crypto/internal/backend"
+ 
+ func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
+ 	panic("boringcrypto: not available")
+diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
+index f1e4ef48a4fd1c..a179a4388e3ee5 100644
+--- a/src/crypto/rsa/pkcs1v15.go
++++ b/src/crypto/rsa/pkcs1v15.go
+@@ -5,7 +5,7 @@
+ package rsa
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140only"
+ 	"crypto/internal/randutil"
+@@ -104,7 +104,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
+ 		bkey, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -203,7 +203,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+ 		return 0, nil, 0, err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
+ 		var bkey *boring.PrivateKeyRSA
+ 		bkey, err = boringPrivateKey(priv)
+ 		if err != nil {
+diff --git a/src/crypto/rsa/pkcs1v15_test.go b/src/crypto/rsa/pkcs1v15_test.go
+index c65552cd93526a..910416abe842f5 100644
+--- a/src/crypto/rsa/pkcs1v15_test.go
++++ b/src/crypto/rsa/pkcs1v15_test.go
+@@ -7,6 +7,7 @@ package rsa_test
+ import (
+ 	"bytes"
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	. "crypto/rsa"
+ 	"crypto/sha1"
+@@ -235,6 +236,10 @@ func TestVerifyPKCS1v15(t *testing.T) {
+ }
+ 
+ func TestOverlongMessagePKCS1v15(t *testing.T) {
++	if boring.Enabled {
++		// See for example https://github.com/golang-fips/openssl/pull/142.
++		t.Skip("Some backends do not return an error for overlong messages.")
++	}
+ 	t.Setenv("GODEBUG", "rsa1024min=0")
+ 	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
+ 	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
+diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
+index e03f4ab06603c6..f31d492d53cf96 100644
+--- a/src/crypto/rsa/pss_test.go
++++ b/src/crypto/rsa/pss_test.go
+@@ -8,6 +8,7 @@ import (
+ 	"bufio"
+ 	"compress/bzip2"
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/rand"
+ 	. "crypto/rsa"
+@@ -180,6 +181,10 @@ func TestPSSSigning(t *testing.T) {
+ 			continue
+ 		}
+ 
++		if boring.Enabled && test.good != test.fipsGood {
++			t.Skip("skipping test with different results when using different backends")
++		}
++
+ 		opts.SaltLength = test.verifySaltLength
+ 		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
+ 		good := test.good
+@@ -241,7 +246,9 @@ func fromHex(hexStr string) []byte {
+ 
+ func TestInvalidPSSSaltLength(t *testing.T) {
+ 	t.Setenv("GODEBUG", "rsa1024min=0")
+-	key, err := GenerateKey(rand.Reader, 245)
++	// Most crypto backends don't support generating RSA keys with a bit size
++	// lower than 512, so we use 512 here.
++	key, err := GenerateKey(rand.Reader, 512)
+ 	if err != nil {
+ 		t.Fatal(err)
+ 	}
+diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
+index 95bb4becd2ff8c..73991434dabaf1 100644
+--- a/src/crypto/rsa/rsa.go
++++ b/src/crypto/rsa/rsa.go
+@@ -42,8 +42,8 @@ package rsa
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
+-	"crypto/internal/boring/bbig"
++	boring "crypto/internal/backend"
++	"crypto/internal/backend/bbig"
+ 	"crypto/internal/fips140/bigmod"
+ 	"crypto/internal/fips140/rsa"
+ 	"crypto/internal/fips140only"
+diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
+index 73b0c3749eedb2..1a712a0e1c5d95 100644
+--- a/src/crypto/rsa/rsa_test.go
++++ b/src/crypto/rsa/rsa_test.go
+@@ -8,7 +8,7 @@ import (
+ 	"bufio"
+ 	"bytes"
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/rand"
+ 	. "crypto/rsa"
+@@ -146,6 +146,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+ 	if priv.D.Cmp(priv.N) > 0 {
+ 		t.Errorf("private exponent too large")
+ 	}
++	if boring.Enabled && priv.N.BitLen() < 512 {
++		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
++		// lower than 512 and intentionally fail rather than fall back to Go crypto.
++		t.Skip("skipping allocations test with BoringCrypto")
++	}
+ 
+ 	msg := []byte("hi!")
+ 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
+@@ -226,6 +231,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+ 	if err := priv.Validate(); err != nil {
+ 		t.Errorf("Validate() failed: %s", err)
+ 	}
++	if boring.Enabled && priv.N.BitLen() < 512 {
++		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
++		// lower than 512 and intentionally fail rather than fall back to Go crypto.
++		t.Skip("skipping allocations test with BoringCrypto")
++	}
+ 
+ 	msg := []byte("test")
+ 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
+@@ -853,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
+ }
+ 
+ func Test2DecryptOAEP(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("Some crypto backends don't supports OAEPOptions.MGFHash.")
++	}
+ 	random := rand.Reader
+ 
+ 	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
+diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
+index d2ffaac0aeb674..23d8ad44d0bd9a 100644
+--- a/src/crypto/sha1/sha1.go
++++ b/src/crypto/sha1/sha1.go
+@@ -10,7 +10,7 @@ package sha1
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140only"
+ 	"errors"
+ 	"hash"
+@@ -266,12 +266,12 @@ func (d *digest) constSum() [Size]byte {
+ 
+ // Sum returns the SHA-1 checksum of the data.
+ func Sum(data []byte) [Size]byte {
+-	if boring.Enabled {
+-		return boring.SHA1(data)
+-	}
+ 	if fips140only.Enabled {
+ 		panic("crypto/sha1: use of SHA-1 is not allowed in FIPS 140-only mode")
+ 	}
++	if boring.Enabled {
++		return boring.SHA1(data)
++	}	
+ 	var d digest
+ 	d.Reset()
+ 	d.Write(data)
+diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
+index 9d707b7cde5c2d..8da08b3d860a85 100644
+--- a/src/crypto/sha1/sha1_test.go
++++ b/src/crypto/sha1/sha1_test.go
+@@ -8,13 +8,14 @@ package sha1
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/rand"
+ 	"encoding"
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -97,6 +98,11 @@ func TestGolden(t *testing.T) {
+ }
+ 
+ func TestGoldenMarshal(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	h := New()
+ 	h2 := New()
+ 	for _, g := range golden {
+@@ -107,6 +113,9 @@ func TestGoldenMarshal(t *testing.T) {
+ 
+ 		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 		if err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("could not marshal: %v", err)
+ 			continue
+ 		}
+@@ -210,10 +219,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryMarshaler); !ok {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
+diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
+index 069938a22dbc5a..8d0e06b86f4359 100644
+--- a/src/crypto/sha256/sha256.go
++++ b/src/crypto/sha256/sha256.go
+@@ -8,7 +8,7 @@ package sha256
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/sha256"
+ 	"hash"
+ )
+@@ -43,7 +43,7 @@ func New() hash.Hash {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New224() hash.Hash {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
+ 		return boring.NewSHA224()
+ 	}
+ 	return sha256.New224()
+@@ -63,7 +63,7 @@ func Sum256(data []byte) [Size]byte {
+ 
+ // Sum224 returns the SHA224 checksum of the data.
+ func Sum224(data []byte) [Size224]byte {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA224) {
+ 		return boring.SHA224(data)
+ 	}
+ 	h := New224()
+diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
+index e1af9640e25547..c4f142c1430285 100644
+--- a/src/crypto/sha256/sha256_test.go
++++ b/src/crypto/sha256/sha256_test.go
+@@ -8,11 +8,13 @@ package sha256
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"encoding"
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -155,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 	for _, tt := range tests {
+ 		t.Run(tt.name, func(t *testing.T) {
++			if boring.Enabled {
++				if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
++					t.Skip("BinaryMarshaler not implemented")
++				}
++			}
+ 			for _, g := range tt.gold {
+ 				h := tt.newHash()
+ 				h2 := tt.newHash()
+@@ -163,6 +170,9 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 				if err != nil {
++					if strings.Contains(err.Error(), "hash state is not marshallable") {
++						t.Skip("BinaryMarshaler not supported")
++					}
+ 					t.Errorf("could not marshal: %v", err)
+ 					continue
+ 				}
+@@ -204,8 +214,19 @@ func TestMarshalTypeMismatch(t *testing.T) {
+ 	h1 := New()
+ 	h2 := New224()
+ 
++	if boring.Enabled {
++		_, ok1 := h1.(encoding.BinaryMarshaler)
++		_, ok2 := h2.(encoding.BinaryUnmarshaler)
++		if !ok1 || !ok2 {
++			t.Skip("BinaryMarshaler not implemented")
++		}
++	}
++
+ 	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
+ 	if err != nil {
++		if strings.Contains(err.Error(), "hash state is not marshallable") {
++			t.Skip("BinaryMarshaler not supported")
++		}
+ 		t.Errorf("could not marshal: %v", err)
+ 	}
+ 
+@@ -275,10 +296,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ 	return h.Sum(nil), nil
+ }
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryUnmarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
+diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
+index 1435eac1f5b5dc..17e8501154762a 100644
+--- a/src/crypto/sha512/sha512.go
++++ b/src/crypto/sha512/sha512.go
+@@ -12,7 +12,7 @@ package sha512
+ 
+ import (
+ 	"crypto"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/sha512"
+ 	"hash"
+ )
+diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
+index 1fe9d132bb186d..97b7da8c2d3d88 100644
+--- a/src/crypto/sha512/sha512_test.go
++++ b/src/crypto/sha512/sha512_test.go
+@@ -8,12 +8,14 @@ package sha512
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"encoding"
+ 	"encoding/hex"
+ 	"fmt"
+ 	"hash"
+ 	"io"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -744,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
+ 	for _, tt := range tests {
+ 		t.Run(tt.name, func(t *testing.T) {
+ 			for _, test := range tt.golden {
++				if boring.Enabled {
++					if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
++						t.Skip("BinaryMarshaler not implemented")
++					}
++				}
+ 				h := tt.newHash()
+ 				h2 := tt.newHash()
+ 
+@@ -751,6 +758,9 @@ func testGoldenMarshal(t *testing.T) {
+ 
+ 				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
+ 				if err != nil {
++					if strings.Contains(err.Error(), "hash state is not marshallable") {
++						t.Skip("BinaryMarshaler not supported")
++					}
+ 					t.Errorf("could not marshal: %v", err)
+ 					return
+ 				}
+@@ -805,8 +815,19 @@ func TestMarshalMismatch(t *testing.T) {
+ 			h1 := fn1()
+ 			h2 := fn2()
+ 
++			if boring.Enabled {
++				_, ok1 := h1.(encoding.BinaryMarshaler)
++				_, ok2 := h2.(encoding.BinaryUnmarshaler)
++				if !ok1 || !ok2 {
++					t.Skip("BinaryMarshaler not implemented")
++				}
++			}
++
+ 			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
+ 			if err != nil {
++				if strings.Contains(err.Error(), "hash state is not marshallable") {
++					t.Skip("BinaryMarshaler not supported")
++				}
+ 				t.Errorf("i=%d: could not marshal: %v", i, err)
+ 				continue
+ 			}
+@@ -880,10 +901,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+ }
+ 
+ func TestLargeHashes(t *testing.T) {
++	if boring.Enabled {
++		if _, ok := New().(encoding.BinaryUnmarshaler); !ok {
++			t.Skip("BinaryUnmarshaler not implemented")
++		}
++	}
+ 	for i, test := range largeUnmarshalTests {
+ 
+ 		h := New()
+ 		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
++			if strings.Contains(err.Error(), "hash state is not marshallable") {
++				t.Skip("BinaryMarshaler not supported")
++			}
+ 			t.Errorf("test %d could not unmarshal: %v", i, err)
+ 			continue
+ 		}
+diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
+index 01d65688284f97..d8a26c24024348 100644
+--- a/src/crypto/tls/cipher_suites.go
++++ b/src/crypto/tls/cipher_suites.go
+@@ -10,7 +10,7 @@ import (
+ 	"crypto/cipher"
+ 	"crypto/des"
+ 	"crypto/hmac"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	fipsaes "crypto/internal/fips140/aes"
+ 	"crypto/internal/fips140/aes/gcm"
+ 	"crypto/rc4"
+diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
+index e702f44e986746..e506a0d8841237 100644
+--- a/src/crypto/tls/fipsonly/fipsonly.go
++++ b/src/crypto/tls/fipsonly/fipsonly.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ // Package fipsonly restricts all TLS configuration to FIPS-approved settings.
+ //
+diff --git a/src/crypto/tls/fipsonly/fipsonly_test.go b/src/crypto/tls/fipsonly/fipsonly_test.go
+index 027bc22c33c921..eba08da985f832 100644
+--- a/src/crypto/tls/fipsonly/fipsonly_test.go
++++ b/src/crypto/tls/fipsonly/fipsonly_test.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package fipsonly
+ 
+diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
+index 38bd417a0dca72..8c1ae3c7ec5485 100644
+--- a/src/crypto/tls/handshake_client.go
++++ b/src/crypto/tls/handshake_client.go
+@@ -11,11 +11,11 @@ import (
+ 	"crypto/ecdsa"
+ 	"crypto/ed25519"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/internal/hpke"
+ 	"crypto/rsa"
+ 	"crypto/subtle"
+ 	"crypto/tls/internal/fips140tls"
++	"crypto/tls/internal/tls13"
+ 	"crypto/x509"
+ 	"errors"
+ 	"fmt"
+@@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+ 
+ // Does the handshake, either a full one or resumes old session. Requires hs.c,
+ // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
+-func (hs *clientHandshakeState) handshake() error {
++func (hs *clientHandshakeState) handshake() (err error) {
++	defer func() {
++		if err == nil {
++			err = recoverFromBoringPRFError()
++			if err != nil {
++				hs.c.sendAlert(alertInternalError)
++			}
++		}
++	}()
+ 	c := hs.c
+ 
+ 	isResume, err := hs.processServerHello()
+diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
+index c0396e75796add..2c00e119cb66e4 100644
+--- a/src/crypto/tls/handshake_client_tls13.go
++++ b/src/crypto/tls/handshake_client_tls13.go
+@@ -8,12 +8,12 @@ import (
+ 	"bytes"
+ 	"context"
+ 	"crypto"
++	"crypto/hkdf"
+ 	"crypto/hmac"
+-	"crypto/internal/fips140/hkdf"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/rsa"
+ 	"crypto/subtle"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"slices"
+@@ -90,8 +90,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
+ 		confTranscript.Write(hs.serverHello.original[:30])
+ 		confTranscript.Write(make([]byte, 8))
+ 		confTranscript.Write(hs.serverHello.original[38:])
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
++		if err != nil {
++			return err
++		}
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
++			secret,
+ 			"ech accept confirmation",
+ 			confTranscript.Sum(nil),
+ 			8,
+@@ -264,8 +268,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
+ 			copy(hrrHello, hs.serverHello.original)
+ 			hrrHello = bytes.Replace(hrrHello, hs.serverHello.encryptedClientHello, make([]byte, 8), 1)
+ 			confTranscript.Write(hrrHello)
++			secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
++			if err != nil {
++				return err
++			}
+ 			acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-				hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
++				secret,
+ 				"hrr ech accept confirmation",
+ 				confTranscript.Sum(nil),
+ 				8,
+diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
+index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
+--- a/src/crypto/tls/handshake_server.go
++++ b/src/crypto/tls/handshake_server.go
+@@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+ 	return hs.handshake()
+ }
+ 
+-func (hs *serverHandshakeState) handshake() error {
++func (hs *serverHandshakeState) handshake() (err error) {
++	defer func() {
++		if err == nil {
++			err = recoverFromBoringPRFError()
++			if err != nil {
++				hs.c.sendAlert(alertInternalError)
++			}
++		}
++	}()
+ 	c := hs.c
+ 
+ 	if err := hs.processClientHello(); err != nil {
+diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
+index 76fff6974e7403..3ef8b56e5c7898 100644
+--- a/src/crypto/tls/handshake_server_tls13.go
++++ b/src/crypto/tls/handshake_server_tls13.go
+@@ -8,13 +8,14 @@ import (
+ 	"bytes"
+ 	"context"
+ 	"crypto"
++	"crypto/hkdf"
+ 	"crypto/hmac"
+-	"crypto/internal/fips140/hkdf"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/internal/hpke"
+ 	"crypto/rsa"
+ 	"crypto/tls/internal/fips140tls"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"internal/byteorder"
+@@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
+ // interfaces implemented by standard library hashes to clone the state of in
+ // to a new instance of h. It returns nil if the operation fails.
+ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
++	if boring.Enabled {
++		// CNG and OpenSSL with SymCrypt hash functions do not implement the
++		// encoding.BinaryMarshaler interface, but they do implement the Clone method.
++		if cloner, ok := in.(interface{ Clone() hash.Hash }); ok {
++			return cloner.Clone()
++		}
++	}
+ 	// Recreate the interface to avoid importing encoding.
+ 	type binaryMarshaler interface {
+ 		MarshalBinary() (data []byte, err error)
+ 		UnmarshalBinary(data []byte) error
+ 	}
+ 	marshaler, ok := in.(binaryMarshaler)
+-	if !ok {
+-		return nil
+-	}
+ 	state, err := marshaler.MarshalBinary()
+ 	if err != nil {
+ 		return nil
+@@ -572,8 +577,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
+ 		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
+ 			return nil, err
+ 		}
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
++		if err != nil {
++			return nil, err
++		}
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
++			secret,
+ 			"hrr ech accept confirmation",
+ 			confTranscript.Sum(nil),
+ 			8,
+@@ -734,9 +743,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
+ 		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
+ 			return err
+ 		}
++		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
++		if err != nil {
++			return err
++		}
+ 		// compute the acceptance message
+ 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
+-			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
++			secret,
+ 			"ech accept confirmation",
+ 			echTranscript.Sum(nil),
+ 			8,
+diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
+index 24d78d60cf5b64..a6bfd3f17c1911 100644
+--- a/src/crypto/tls/internal/fips140tls/fipstls.go
++++ b/src/crypto/tls/internal/fips140tls/fipstls.go
+@@ -6,6 +6,7 @@
+ package fips140tls
+ 
+ import (
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/fips140"
+ 	"sync/atomic"
+ )
+@@ -13,7 +14,7 @@ import (
+ var required atomic.Bool
+ 
+ func init() {
+-	if fips140.Enabled {
++	if fips140.Enabled || bfips140.Enabled() {
+ 		Force()
+ 	}
+ }
+diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
+new file mode 100644
+index 00000000000000..1adf3098356307
+--- /dev/null
++++ b/src/crypto/tls/internal/tls13/doc.go
+@@ -0,0 +1,18 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++/*
++Microsoft Go only package.
++
++TLS 1.3 Key Schedule is normally not part of the FIPS boundary, but upstream Go
++decided to include it in the FIPS boundary to facilitate the FIPS 140-3 certification
++process.
++
++The problem is that crypto/internal/fips140/tls13 uses crypto/internal/fips140/hkdf,
++which can't be patched to use other backends.
++
++To solve this problem, we created this package, which is a direct copy of
++crypto/internal/fips140/tls13, but uses crypto/hkdf instead of crypto/internal/fips140/hkdf.
++*/
++package tls13
+diff --git a/src/crypto/tls/internal/tls13/tls13.go b/src/crypto/tls/internal/tls13/tls13.go
+new file mode 100644
+index 00000000000000..573896b9c1e6a8
+--- /dev/null
++++ b/src/crypto/tls/internal/tls13/tls13.go
+@@ -0,0 +1,182 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Package tls13 implements the TLS 1.3 Key Schedule as specified in RFC 8446,
++// Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.
++package tls13
++
++import (
++	"crypto/hkdf"
++	"hash"
++	"internal/byteorder"
++)
++
++// We don't set the service indicator in this package but we delegate that to
++// the underlying functions because the TLS 1.3 KDF does not have a standard of
++// its own.
++
++// ExpandLabel implements HKDF-Expand-Label from RFC 8446, Section 7.1.
++func ExpandLabel[H hash.Hash](hash func() H, secret []byte, label string, context []byte, length int) []byte {
++	if len("tls13 ")+len(label) > 255 || len(context) > 255 {
++		// It should be impossible for this to panic: labels are fixed strings,
++		// and context is either a fixed-length computed hash, or parsed from a
++		// field which has the same length limitation.
++		//
++		// Another reasonable approach might be to return a randomized slice if
++		// we encounter an error, which would break the connection, but avoid
++		// panicking. This would perhaps be safer but significantly more
++		// confusing to users.
++		panic("tls13: label or context too long")
++	}
++	hkdfLabel := make([]byte, 0, 2+1+len("tls13 ")+len(label)+1+len(context))
++	hkdfLabel = byteorder.BEAppendUint16(hkdfLabel, uint16(length))
++	hkdfLabel = append(hkdfLabel, byte(len("tls13 ")+len(label)))
++	hkdfLabel = append(hkdfLabel, "tls13 "...)
++	hkdfLabel = append(hkdfLabel, label...)
++	hkdfLabel = append(hkdfLabel, byte(len(context)))
++	hkdfLabel = append(hkdfLabel, context...)
++	key, err := hkdf.Expand(hash, secret, string(hkdfLabel), length)
++	if err != nil {
++		panic(err)
++	}
++	return key
++}
++
++func extract[H hash.Hash](hash func() H, newSecret, currentSecret []byte) []byte {
++	if newSecret == nil {
++		newSecret = make([]byte, hash().Size())
++	}
++	prk, err := hkdf.Extract(hash, newSecret, currentSecret)
++	if err != nil {
++		panic(err)
++	}
++	return prk
++}
++
++func deriveSecret[H hash.Hash](hash func() H, secret []byte, label string, transcript hash.Hash) []byte {
++	if transcript == nil {
++		transcript = hash()
++	}
++	return ExpandLabel(hash, secret, label, transcript.Sum(nil), transcript.Size())
++}
++
++const (
++	resumptionBinderLabel         = "res binder"
++	clientEarlyTrafficLabel       = "c e traffic"
++	clientHandshakeTrafficLabel   = "c hs traffic"
++	serverHandshakeTrafficLabel   = "s hs traffic"
++	clientApplicationTrafficLabel = "c ap traffic"
++	serverApplicationTrafficLabel = "s ap traffic"
++	earlyExporterLabel            = "e exp master"
++	exporterLabel                 = "exp master"
++	resumptionLabel               = "res master"
++)
++
++type EarlySecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func NewEarlySecret[H hash.Hash](h func() H, psk []byte) *EarlySecret {
++	return &EarlySecret{
++		secret: extract(h, psk, nil),
++		hash:   func() hash.Hash { return h() },
++	}
++}
++
++func (s *EarlySecret) ResumptionBinderKey() []byte {
++	return deriveSecret(s.hash, s.secret, resumptionBinderLabel, nil)
++}
++
++// ClientEarlyTrafficSecret derives the client_early_traffic_secret from the
++// early secret and the transcript up to the ClientHello.
++func (s *EarlySecret) ClientEarlyTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientEarlyTrafficLabel, transcript)
++}
++
++type HandshakeSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func (s *EarlySecret) HandshakeSecret(sharedSecret []byte) *HandshakeSecret {
++	derived := deriveSecret(s.hash, s.secret, "derived", nil)
++	return &HandshakeSecret{
++		secret: extract(s.hash, sharedSecret, derived),
++		hash:   s.hash,
++	}
++}
++
++// ClientHandshakeTrafficSecret derives the client_handshake_traffic_secret from
++// the handshake secret and the transcript up to the ServerHello.
++func (s *HandshakeSecret) ClientHandshakeTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientHandshakeTrafficLabel, transcript)
++}
++
++// ServerHandshakeTrafficSecret derives the server_handshake_traffic_secret from
++// the handshake secret and the transcript up to the ServerHello.
++func (s *HandshakeSecret) ServerHandshakeTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, serverHandshakeTrafficLabel, transcript)
++}
++
++type MasterSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++func (s *HandshakeSecret) MasterSecret() *MasterSecret {
++	derived := deriveSecret(s.hash, s.secret, "derived", nil)
++	return &MasterSecret{
++		secret: extract(s.hash, nil, derived),
++		hash:   s.hash,
++	}
++}
++
++// ClientApplicationTrafficSecret derives the client_application_traffic_secret_0
++// from the master secret and the transcript up to the server Finished.
++func (s *MasterSecret) ClientApplicationTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, clientApplicationTrafficLabel, transcript)
++}
++
++// ServerApplicationTrafficSecret derives the server_application_traffic_secret_0
++// from the master secret and the transcript up to the server Finished.
++func (s *MasterSecret) ServerApplicationTrafficSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, serverApplicationTrafficLabel, transcript)
++}
++
++// ResumptionMasterSecret derives the resumption_master_secret from the master secret
++// and the transcript up to the client Finished.
++func (s *MasterSecret) ResumptionMasterSecret(transcript hash.Hash) []byte {
++	return deriveSecret(s.hash, s.secret, resumptionLabel, transcript)
++}
++
++type ExporterMasterSecret struct {
++	secret []byte
++	hash   func() hash.Hash
++}
++
++// ExporterMasterSecret derives the exporter_master_secret from the master secret
++// and the transcript up to the server Finished.
++func (s *MasterSecret) ExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
++	return &ExporterMasterSecret{
++		secret: deriveSecret(s.hash, s.secret, exporterLabel, transcript),
++		hash:   s.hash,
++	}
++}
++
++// EarlyExporterMasterSecret derives the exporter_master_secret from the early secret
++// and the transcript up to the ClientHello.
++func (s *EarlySecret) EarlyExporterMasterSecret(transcript hash.Hash) *ExporterMasterSecret {
++	return &ExporterMasterSecret{
++		secret: deriveSecret(s.hash, s.secret, earlyExporterLabel, transcript),
++		hash:   s.hash,
++	}
++}
++
++func (s *ExporterMasterSecret) Exporter(label string, context []byte, length int) []byte {
++	secret := deriveSecret(s.hash, s.secret, label, nil)
++	h := s.hash()
++	h.Write(context)
++	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
++}
+diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
+index 38d6d3f7be1673..b236ae44a34030 100644
+--- a/src/crypto/tls/key_schedule.go
++++ b/src/crypto/tls/key_schedule.go
+@@ -8,7 +8,7 @@ import (
+ 	"crypto/ecdh"
+ 	"crypto/hmac"
+ 	"crypto/internal/fips140/mlkem"
+-	"crypto/internal/fips140/tls13"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"io"
+diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
+index e7369542a73270..ff52175e4ac636 100644
+--- a/src/crypto/tls/prf.go
++++ b/src/crypto/tls/prf.go
+@@ -7,6 +7,7 @@ package tls
+ import (
+ 	"crypto"
+ 	"crypto/hmac"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/tls12"
+ 	"crypto/md5"
+ 	"crypto/sha1"
+@@ -47,9 +48,42 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+ 	}
+ }
+ 
++type boringPRFError struct {
++	err error
++}
++
++func (e *boringPRFError) Error() string {
++	return e.err.Error()
++}
++
++// recoverFromBoringPRFError recovers from a panic caused by the boring backend.
++// It returns the error if it was a boringPRFError, or panics if the panic was
++// caused by something else.
++func recoverFromBoringPRFError() error {
++	if p := recover(); p != nil {
++		if err, ok := p.(boringPRFError); ok {
++			// Could happen, for example, if the seed is too large. The Go implementation doesn't limit the seed size,
++			// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
++			return err.err
++		}
++		panic(p)
++	}
++	return nil
++}
++
++func panicBoringPRFError(err error) {
++	panic(boringPRFError{err})
++}
++
+ // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
+ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+ 	result := make([]byte, keyLen)
++	if boring.Enabled && boring.SupportsTLS1PRF() {
++		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
++			panicBoringPRFError(fmt.Errorf("crypto/tls: prf10: %v", err))
++		}
++		return result
++	}
+ 	hashSHA1 := sha1.New
+ 	hashMD5 := md5.New
+ 
+@@ -72,6 +106,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+ // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
+ func prf12(hashFunc func() hash.Hash) prfFunc {
+ 	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
++		if boring.Enabled && boring.SupportsTLS1PRF() {
++			result := make([]byte, keyLen)
++			if err := boring.TLS1PRF(result, secret, []byte(label), seed, hashFunc); err != nil {
++				panicBoringPRFError(fmt.Errorf("crypto/tls: prf12: %v", err))
++			}
++			return result
++		}
+ 		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
+ 	}
+ }
+diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
+index 8d175079a8c793..c2846667df81de 100644
+--- a/src/go/build/deps_test.go
++++ b/src/go/build/deps_test.go
+@@ -537,6 +537,7 @@ var depsRules = `
+ 	  crypto/pbkdf2,
+ 	  crypto/ecdh,
+ 	  crypto/mlkem
++	< crypto/tls/internal/tls13
+ 	< CRYPTO;
+ 
+ 	CGO, fmt, net !< CRYPTO;
+@@ -561,7 +562,7 @@ var depsRules = `
+ 
+ 	# TLS, Prince of Dependencies.
+ 
+-	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
++	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
+ 
+ 	crypto/internal/boring/sig, crypto/tls/internal/fips140tls < crypto/tls/fipsonly;
+ 
+diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
+new file mode 100644
+index 00000000000000..52748c44698076
+--- /dev/null
++++ b/src/hash/boring_test.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package hash_test
++
++const boringEnabled = true
+diff --git a/src/hash/example_test.go b/src/hash/example_test.go
+index f07b9aaa2c4898..b380537215634d 100644
+--- a/src/hash/example_test.go
++++ b/src/hash/example_test.go
+@@ -2,6 +2,8 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
++//go:build !goexperiment.systemcrypto
++
+ package hash_test
+ 
+ import (
+diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
+index 3091f7a67acede..23736034d5c352 100644
+--- a/src/hash/marshal_test.go
++++ b/src/hash/marshal_test.go
+@@ -21,6 +21,7 @@ import (
+ 	"hash/crc32"
+ 	"hash/crc64"
+ 	"hash/fnv"
++	"strings"
+ 	"testing"
+ )
+ 
+@@ -65,6 +66,11 @@ func TestMarshalHash(t *testing.T) {
+ 			}
+ 
+ 			h := tt.new()
++			if boringEnabled {
++				if _, ok := h.(encoding.BinaryMarshaler); !ok {
++					t.Skip("BinaryMarshaler not implemented")
++				}
++			}
+ 			h.Write(buf[:256])
+ 			sum := h.Sum(nil)
+ 
+@@ -80,6 +86,9 @@ func TestMarshalHash(t *testing.T) {
+ 			}
+ 			enc, err := h2m.MarshalBinary()
+ 			if err != nil {
++				if strings.Contains(err.Error(), "hash state is not marshallable") {
++					t.Skip("BinaryMarshaler not supported")
++				}
+ 				t.Fatalf("MarshalBinary: %v", err)
+ 			}
+ 			if !bytes.Equal(enc, tt.golden) {
+diff --git a/src/hash/notboring_test.go b/src/hash/notboring_test.go
+new file mode 100644
+index 00000000000000..11dc691600b110
+--- /dev/null
++++ b/src/hash/notboring_test.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package hash_test
++
++const boringEnabled = false
+diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
+index 389eda9ad54b99..110d60beb0e70c 100644
+--- a/src/net/smtp/smtp_test.go
++++ b/src/net/smtp/smtp_test.go
+@@ -1136,40 +1136,60 @@ func sendMail(hostPort string) error {
+ 
+ // localhostCert is a PEM-encoded TLS cert generated from src/crypto/tls:
+ //
+-//	go run generate_cert.go --rsa-bits 1024 --host 127.0.0.1,::1,example.com \
++//	Use a 2048-bits RSA key to make it FIPS-compliant.
++//	go run generate_cert.go --rsa-bits 2048 --host 127.0.0.1,::1,example.com \
+ //		--ca --start-date "Jan 1 00:00:00 1970" --duration=1000000h
+ var localhostCert = []byte(`
+ -----BEGIN CERTIFICATE-----
+-MIICFDCCAX2gAwIBAgIRAK0xjnaPuNDSreeXb+z+0u4wDQYJKoZIhvcNAQELBQAw
+-EjEQMA4GA1UEChMHQWNtZSBDbzAgFw03MDAxMDEwMDAwMDBaGA8yMDg0MDEyOTE2
+-MDAwMFowEjEQMA4GA1UEChMHQWNtZSBDbzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
+-gYkCgYEA0nFbQQuOWsjbGtejcpWz153OlziZM4bVjJ9jYruNw5n2Ry6uYQAffhqa
+-JOInCmmcVe2siJglsyH9aRh6vKiobBbIUXXUU1ABd56ebAzlt0LobLlx7pZEMy30
+-LqIi9E6zmL3YvdGzpYlkFRnRrqwEtWYbGBf3znO250S56CCWH2UCAwEAAaNoMGYw
+-DgYDVR0PAQH/BAQDAgKkMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQF
+-MAMBAf8wLgYDVR0RBCcwJYILZXhhbXBsZS5jb22HBH8AAAGHEAAAAAAAAAAAAAAA
+-AAAAAAEwDQYJKoZIhvcNAQELBQADgYEAbZtDS2dVuBYvb+MnolWnCNqvw1w5Gtgi
+-NmvQQPOMgM3m+oQSCPRTNGSg25e1Qbo7bgQDv8ZTnq8FgOJ/rbkyERw2JckkHpD4
+-n4qcK27WkEDBtQFlPihIM8hLIuzWoi/9wygiElTy/tVL3y7fGCvY2/k1KBthtZGF
+-tN8URjVmyEo=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+ -----END CERTIFICATE-----`)
+ 
+ // localhostKey is the private key for localhostCert.
+ var localhostKey = []byte(testingKey(`
+ -----BEGIN RSA TESTING KEY-----
+-MIICXgIBAAKBgQDScVtBC45ayNsa16NylbPXnc6XOJkzhtWMn2Niu43DmfZHLq5h
+-AB9+Gpok4icKaZxV7ayImCWzIf1pGHq8qKhsFshRddRTUAF3np5sDOW3QuhsuXHu
+-lkQzLfQuoiL0TrOYvdi90bOliWQVGdGurAS1ZhsYF/fOc7bnRLnoIJYfZQIDAQAB
+-AoGBAMst7OgpKyFV6c3JwyI/jWqxDySL3caU+RuTTBaodKAUx2ZEmNJIlx9eudLA
+-kucHvoxsM/eRxlxkhdFxdBcwU6J+zqooTnhu/FE3jhrT1lPrbhfGhyKnUrB0KKMM
+-VY3IQZyiehpxaeXAwoAou6TbWoTpl9t8ImAqAMY8hlULCUqlAkEA+9+Ry5FSYK/m
+-542LujIcCaIGoG1/Te6Sxr3hsPagKC2rH20rDLqXwEedSFOpSS0vpzlPAzy/6Rbb
+-PHTJUhNdwwJBANXkA+TkMdbJI5do9/mn//U0LfrCR9NkcoYohxfKz8JuhgRQxzF2
+-6jpo3q7CdTuuRixLWVfeJzcrAyNrVcBq87cCQFkTCtOMNC7fZnCTPUv+9q1tcJyB
+-vNjJu3yvoEZeIeuzouX9TJE21/33FaeDdsXbRhQEj23cqR38qFHsF1qAYNMCQQDP
+-QXLEiJoClkR2orAmqjPLVhR3t2oB3INcnEjLNSq8LHyQEfXyaFfu4U9l5+fRPL2i
+-jiC0k/9L5dHUsF0XZothAkEA23ddgRs+Id/HxtojqqUT27B8MT/IGNrYsp4DvS/c
+-qgkeluku4GjxRlDMBuXk94xOBEinUs+p/hwP1Alll80Tpg==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+ -----END RSA TESTING KEY-----`))
+ 
+ func testingKey(s string) string { return strings.ReplaceAll(s, "TESTING KEY", "PRIVATE KEY") }
diff --git a/patches/0007-Add-backend-code-gen.patch b/patches/0008-Add-backend-code-gen.patch
similarity index 100%
rename from patches/0007-Add-backend-code-gen.patch
rename to patches/0008-Add-backend-code-gen.patch
diff --git a/patches/0008-Update-default-go.env.patch b/patches/0009-Update-default-go.env.patch
similarity index 100%
rename from patches/0008-Update-default-go.env.patch
rename to patches/0009-Update-default-go.env.patch
diff --git a/patches/0009-Skip-failing-tests-on-Windows.patch b/patches/0010-Skip-failing-tests-on-Windows.patch
similarity index 100%
rename from patches/0009-Skip-failing-tests-on-Windows.patch
rename to patches/0010-Skip-failing-tests-on-Windows.patch
diff --git a/patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch
similarity index 100%
rename from patches/0010-unset-GOFIPS-when-running-the-Go-toolchain.patch
rename to patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch
diff --git a/patches/0011-add-support-for-logging-used-Windows-APIs.patch b/patches/0012-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0011-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0012-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0012-remove-long-path-support-hack.patch b/patches/0013-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0012-remove-long-path-support-hack.patch
rename to patches/0013-remove-long-path-support-hack.patch
diff --git a/patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0013-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
similarity index 100%
rename from patches/0014-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
rename to patches/0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

From c0e24e133557ac46ad64fc407a08791d0a8615de Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 14 Jan 2025 15:18:55 +0100
Subject: [PATCH 187/887] patch crypto/fips140.Enabled()

---
 patches/0007-Use-crypto-backends.patch | 51 ++++++++++++++++++++------
 1 file changed, 40 insertions(+), 11 deletions(-)

diff --git a/patches/0007-Use-crypto-backends.patch b/patches/0007-Use-crypto-backends.patch
index f00c8e992fe..37d40160d56 100644
--- a/patches/0007-Use-crypto-backends.patch
+++ b/patches/0007-Use-crypto-backends.patch
@@ -25,6 +25,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ed25519/boring.go                  |  71 +++++++
  src/crypto/ed25519/ed25519.go                 |  73 +++++++
  src/crypto/ed25519/notboring.go               |  16 ++
+ src/crypto/fips140/fips140.go                 |   3 +-
  src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
@@ -60,18 +61,18 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/handshake_client_tls13.go      |  16 +-
  src/crypto/tls/handshake_server.go            |  10 +-
  src/crypto/tls/handshake_server_tls13.go      |  27 ++-
- src/crypto/tls/internal/fips140tls/fipstls.go |   3 +-
+ src/crypto/tls/internal/fips140tls/fipstls.go |   4 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   3 +-
+ src/go/build/deps_test.go                     |   5 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   9 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++---
- 67 files changed, 1009 insertions(+), 97 deletions(-)
+ 68 files changed, 1012 insertions(+), 100 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -846,6 +847,25 @@ index 00000000000000..b0cdd44d81c753
 +func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
+diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
+index 41d0d170cf9fc8..b6b413532d8104 100644
+--- a/src/crypto/fips140/fips140.go
++++ b/src/crypto/fips140/fips140.go
+@@ -5,6 +5,7 @@
+ package fips140
+ 
+ import (
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140/check"
+ 	"internal/godebug"
+@@ -29,5 +30,5 @@ func Enabled() bool {
+ 	if fips140.Enabled && !check.Verified {
+ 		panic("crypto/fips140: FIPS 140-3 mode enabled, but integrity check didn't pass")
+ 	}
+-	return fips140.Enabled
++	return fips140.Enabled || bfips140.Enabled()
+ }
 diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
 index 6b02522866d57f..37e67ec184af5d 100644
 --- a/src/crypto/hkdf/hkdf.go
@@ -1938,23 +1958,23 @@ index 76fff6974e7403..3ef8b56e5c7898 100644
  			echTranscript.Sum(nil),
  			8,
 diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
-index 24d78d60cf5b64..a6bfd3f17c1911 100644
+index 24d78d60cf5b64..0b87185683ab8b 100644
 --- a/src/crypto/tls/internal/fips140tls/fipstls.go
 +++ b/src/crypto/tls/internal/fips140tls/fipstls.go
-@@ -6,6 +6,7 @@
+@@ -6,14 +6,14 @@
  package fips140tls
  
  import (
-+	bfips140 "crypto/internal/backend/fips140"
- 	"crypto/internal/fips140"
+-	"crypto/internal/fips140"
++	"crypto/fips140"
  	"sync/atomic"
  )
-@@ -13,7 +14,7 @@ import (
+ 
  var required atomic.Bool
  
  func init() {
 -	if fips140.Enabled {
-+	if fips140.Enabled || bfips140.Enabled() {
++	if fips140.Enabled() {
  		Force()
  	}
  }
@@ -2253,9 +2273,18 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 8d175079a8c793..c2846667df81de 100644
+index 8d175079a8c793..48879720026837 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
+@@ -495,7 +495,7 @@ var depsRules = `
+ 
+ 	syscall < crypto/internal/backend/fips140;
+ 
+-	FIPS, internal/godebug < crypto/fips140;
++	FIPS, internal/godebug, crypto/internal/backend/fips140 < crypto/fips140;
+ 
+ 	crypto, hash !< FIPS;
+ 
 @@ -537,6 +537,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
@@ -2269,7 +2298,7 @@ index 8d175079a8c793..c2846667df81de 100644
  	# TLS, Prince of Dependencies.
  
 -	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
-+	FIPS, sync/atomic, crypto/internal/backend/fips140 < crypto/tls/internal/fips140tls;
++	crypto/fips140, sync/atomic < crypto/tls/internal/fips140tls;
  
  	crypto/internal/boring/sig, crypto/tls/internal/fips140tls < crypto/tls/fipsonly;
  

From e8de376cbe4bd7711890e0ad11cecfa2434bfd12 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 15 Jan 2025 10:15:36 +0100
Subject: [PATCH 188/887] fix vendor patch

---
 patches/0002-Vendor-crypto-backends.patch | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 27f1d7f925f..41b7bc850c9 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -6,7 +6,7 @@ Subject: [PATCH] Vendor crypto backends
 To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
- src/crypto/internal/backend/deps_ignore.go    |  16 +
+ src/crypto/internal/backend/deps_ignore.go    |  19 +
  src/go.mod                                    |   5 +
  src/go.sum                                    |   4 +
  src/go/build/vendor_test.go                   |   2 +
@@ -74,7 +74,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  11 +
- 68 files changed, 11002 insertions(+)
+ 68 files changed, 11005 insertions(+)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -142,21 +142,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
 
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
-index 00000000000000..7e537a55af954e
+index 00000000000000..979ee34f54acba
 --- /dev/null
 +++ b/src/crypto/internal/backend/deps_ignore.go
-@@ -0,0 +1,16 @@
+@@ -0,0 +1,19 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build ignore
++//go:build ms_ignore_backend_deps
 +
 +package backend
 +
 +import (
 +	_ "github.com/golang-fips/openssl/v2"
++	_ "github.com/golang-fips/openssl/v2/bbig"
++
 +	_ "github.com/microsoft/go-crypto-winnative/cng"
++	_ "github.com/microsoft/go-crypto-winnative/cng/bbig"
 +)
 +
 +// This file is here just to declare the external dependencies

From 800df7f7bad6a5041456aeba149570372dd5ffcb Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 15 Jan 2025 10:20:45 +0100
Subject: [PATCH 189/887] Add `Cross-Platform Cryptography` document (#1471)

* first pass

* add platform info

* update symmetric encryption table

* add RSA

* add missing algos

* add doc link

* add tls and ed25519

* remove TLS 1.3 warning

* add sep lines

* cross Ed25519 on Windows

* fix typo

* fix table format

* formating

* Apply suggestions from code review

Co-authored-by: George Adams <georgeadams1995@gmail.com>

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* remove advantage bullets

* add legend

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* clarify docs

---------

Co-authored-by: George Adams <georgeadams1995@gmail.com>
Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/CrossPlatformCryptography.md | 342 +++++++++++++++++++++++++++
 eng/doc/README.md                    |   1 +
 2 files changed, 343 insertions(+)
 create mode 100644 eng/doc/CrossPlatformCryptography.md

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
new file mode 100644
index 00000000000..5e5196ecc0a
--- /dev/null
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -0,0 +1,342 @@
+# Cross-Platform Cryptography in Microsoft Go
+
+Cryptographic operations in Microsoft Go are delegated to the operating system (OS) libraries in some conditions described.
+The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft Go FIPS README](./Readme.md).
+At a fine-grained level, Go apps will fall back to the native Go implementation of an algorithm if the OS libraries don't support it.
+This article identifies the features that are supported on each platform.
+
+This article assumes you have a working familiarity with cryptography in Go.
+
+## Platform support
+
+Microsoft Go supports the following platforms:
+
+### Windows
+
+On Windows, Microsoft Go uses the [CNG library (Cryptography API: Next Generation)](https://learn.microsoft.com/en-us/windows/win32/seccng/cng-portal) for cryptographic operations.
+CNG is available since Windows Vista and Windows Server 2008 and it doesn't require any additional installation nor configuration.
+
+### Linux
+
+On Linux, Microsoft Go uses the [OpenSSL crypto library](https://docs.openssl.org/3.0/man7/crypto/) for cryptographic operations.
+OpenSSL is normally available on Linux distributions, but it may not be installed by default.
+If it is not installed, you can install it using the package manager of your distribution.
+
+OpenSSL 3 implements all the cryptographic algorithms using [Providers](https://docs.openssl.org/3.0/man7/crypto/#providers).
+Microsoft Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
+SCOSSL is expected to be used with the default built-in provider enabled as a fallback (which is the case when using [Azure Linux 3](https://github.com/microsoft/AzureLinux)).
+
+## Table legend
+
+The following legend describes the symbols used in the tables to indicate the level of support for each cryptographic algorithm:
+
+| Symbol | Meaning                                                                                                                      |
+|--------|------------------------------------------------------------------------------------------------------------------------------|
+| ✔️     | Supported, possibly with minor limitations that don't require special configuration when using the latest Go and OS versions |
+| ⚠️     | Supported with limitations that require special configuration action                                                         |
+| ❌     | Not supported                                                                                                                |
+
+When an algorithm is not supported or the limitations are exceeded, Microsoft Go will fall back to the Go implementation.
+
+## Hash and Message Authentication Algorithms
+
+This section includes the following packages:
+
+* [crypto/md5](https://pkg.go.dev/crypto/md5)
+* [crypto/sha1](https://pkg.go.dev/crypto/sha1)
+* [crypto/sha256](https://pkg.go.dev/crypto/sha256)
+* [crypto/sha512](https://pkg.go.dev/crypto/sha512)
+* [crypto/sha3](https://pkg.go.dev/golang.org/x/crypto/sha3)
+* [crypto/hmac](https://pkg.go.dev/crypto/hmac)
+
+|Algorithm                  |Windows             |Linux                |
+|---------------------------|--------------------|---------------------|
+| MD5                       | ✔️                 | ✔️                 |
+| SHA-1                     | ✔️                 | ✔️                 |
+| SHA-2-224                 | ❌                 | ✔️                 |
+| SHA-2-256                 | ✔️                 | ✔️                 |
+| SHA-2-384                 | ✔️                 | ✔️                 |
+| SHA-2-512                 | ✔️                 | ✔️                 |
+| SHA-2-512_224             | ❌                 | ✔️<sup>1, 2</sup>  |
+| SHA-2-512_256             | ❌                 | ✔️<sup>1, 2</sup>  |
+| SHA-3-224                 | ❌                 | ❌                 |
+| SHA-3-256                 | ❌                 | ❌                 |
+| SHA-3-384                 | ❌                 | ❌                 |
+| SHA-3-512                 | ❌                 | ❌                 |
+| SHAKE-128                 | ❌                 | ❌                 |
+| SHAKE-256                 | ❌                 | ❌                 |
+| CSHAKE-128                | ❌                 | ❌                 |
+| CSHAKE-256                | ❌                 | ❌                 |
+| HMAC<sup>3</sup>          | ✔️                 | ✔️                 |
+
+<sup>1</sup>Available starting in Microsoft Go 1.24.
+
+<sup>2</sup>Requires OpenSSL 1.1.1 or later.
+
+<sup>3</sup>Supports only hash algorithms that are supported as standalone hash functions.
+
+## Symmetric encryption
+
+This section includes the following packages:
+
+* [crypto/aes](https://pkg.go.dev/crypto/aes)
+* [crypto/cipher](https://pkg.go.dev/crypto/cipher)
+* [crypto/des](https://pkg.go.dev/crypto/des)
+* [crypto/rc4](https://pkg.go.dev/crypto/rc4)
+
+| Cipher + Mode | Windows  | Linux            |
+|---------------|----------|------------------|
+| AES-ECB       | ✔️       | ✔️              |
+| AES-CBC       | ✔️       | ✔️              |
+| AES-CTR       | ❌       | ✔️              |
+| AES-CFB       | ❌       | ❌              |
+| AES-OFB       | ❌       | ❌              |
+| AES-GCM       | ✔️       | ✔️              |
+| DES-CBC       | ✔️       | ⚠️<sup>1</sup>  |
+| DES-ECB       | ✔️       | ⚠️<sup>1</sup>  |
+| 3DES-ECB      | ✔️       | ✔️              |
+| 3DES-CBC      | ✔️       | ✔️              |
+| RC4           | ✔️       | ⚠️<sup>1</sup>  |
+
+<sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
+
+### AES-GCM keys, nonces, and tags
+
+* Key Sizes
+
+  AES-GCM works with 128, 192, and 256-bit keys.
+
+* Nonce Sizes
+
+  AES-GCM works with 12-byte nonces.
+
+* Tag Sizes
+  
+  AES-GCM works with 16-byte tags.
+
+## Asymmetric encryption
+
+This section includes the following subsections:
+
+* [RSA](#rsa)
+* [ECDSA](#ecdsa)
+* [ECDH](#ecdh)
+* [Ed25519](#ed25519)
+* [DSA](#dsa)
+
+### RSA
+
+This section includes the following packages:
+
+* [crypto/rsa](https://pkg.go.dev/crypto/rsa)
+
+| Padding Mode                           | Windows              | Linux               |
+|----------------------------------------|----------------------|---------------------|
+| OAEP (MD5)                             | ✔️                   | ✔️                 |
+| OAEP (SHA-1)                           | ✔️                   | ✔️                 |
+| OAEP (SHA-2)<sup>1</sup>               | ✔️                   | ✔️                 |
+| OAEP (SHA-3)                           | ❌                   | ❌                 |
+| PSS (MD5)                              | ✔️                   | ✔️                 |
+| PSS (SHA-1)                            | ✔️                   | ✔️                 |
+| PSS (SHA-2)<sup>1</sup>                | ✔️                   | ✔️                 |
+| PSS (SHA-3)                            | ❌                   | ❌                 |
+| PKCS1v15 Signature (Unhashed)          | ✔️                   | ✔️                 |
+| PKCS1v15 Signature (RIPMED160)         | ❌                   | ✔️<sup>2</sup>     |
+| PKCS1v15 Signature (MD4)               | ❌                   | ✔️<sup>2</sup>     |
+| PKCS1v15 Signature (MD5)               | ✔️                   | ✔️                 |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>2</sup>       | ✔️<sup>2</sup>     |
+| PKCS1v15 Signature (SHA-1)             | ✔️                   | ✔️                 |
+| PKCS1v15 Signature (SHA-2)<sup>1</sup> | ✔️                   | ✔️                 |
+| PKCS1v15 Signature (SHA-3)             | ❌                  | ❌                 |
+
+<sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
+
+<sup>2</sup>Available starting in Microsoft Go 1.24.
+
+#### RSA key sizes
+
+[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
+
+Multi-prime RSA keys are not supported.
+
+The RSA key size is subject to the limitations of the underlying cryptographic library.
+For example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.
+Please refer to the documentation of the underlying cryptographic library for the specific limitations.
+
+#### PSS salt length
+
+On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+
+#### Random number generation
+
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
+### ECDSA
+
+This section includes the following packages:
+
+* [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
+* [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
+
+| Elliptic Curve            | Windows     | Linux        |
+|---------------------------|-------------|--------------|
+| NIST P-224 (secp224r1)    | ✔️          | ✔️          |
+| NIST P-256 (secp256r1)    | ✔️          | ✔️          |
+| NIST P-384 (secp384r1)    | ✔️          | ✔️          |
+| NIST P-521 (secp521r1)    | ✔️          | ✔️          |
+
+#### Random number generation
+
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
+### ECDH
+
+This section includes the following packages:
+
+* [crypto/ecdh](https://pkg.go.dev/crypto/ecdsa)
+
+| Elliptic Curve            | Windows     | Linux        |
+|---------------------------|-------------|--------------|
+| NIST P-224 (secp224r1)    | ✔️          | ✔️          |
+| NIST P-256 (secp256r1)    | ✔️          | ✔️          |
+| NIST P-384 (secp384r1)    | ✔️          | ✔️          |
+| NIST P-521 (secp521r1)    | ✔️          | ✔️          |
+| X25519 (curve25519)       | ❌          | ❌          |
+
+#### Random number generation
+
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
+### Ed25519
+
+This section includes the following packages:
+
+* [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
+
+| Schemes     | Windows    | Linux         |
+|-------------|------------|---------------|
+| Ed25519     | ❌         | ✔️           |
+| Ed25519ctx  | ❌         | ❌           |
+| Ed25519ph   | ❌         | ❌           |
+
+#### Random number generation
+
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
+### DSA
+
+| Parameters    | Windows     | Linux        |
+|---------------|-------------|--------------|
+| L1024N160     | ✔️          | ✔️          |
+| L2048N224     | ❌          | ✔️          |
+| L2048N256     | ✔️          | ✔️          |
+| L3072N256     | ✔️          | ✔️          |
+
+## KDF
+
+This section includes the following packages:
+
+* [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
+* [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
+
+| Functions     | Windows          | Linux             |
+|---------------|------------------|-------------------|
+| PBKDF2        | ✔️ <sup>1</sup>  | ✔️ <sup>1</sup>  |
+| HKDF          | ✔️ <sup>1</sup>  | ✔️ <sup>1</sup>  |
+
+<sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
+
+## ML-KEM
+
+This section includes the following packages:
+
+* [crypto/mlkem](https://pkg.go.dev/crypto/mlkem)
+
+| Parameters    | Windows     | Linux        |
+|---------------|-------------|--------------|
+| 768           | ❌          | ❌          |
+| 1024          | ❌          | ❌          |
+
+## TLS
+
+This section includes the following subsections:
+
+* [TLS Versions](#tls-versions)
+* [Cipher Suites](#cipher-suites)
+* [Curves and Groups](#curves-and-groups)
+* [Signature Algorithms](#signature-algorithms)
+
+This section includes the following packages:
+
+* [crypto/tls](https://pkg.go.dev/crypto/tls)
+
+### TLS Versions
+
+| Version        | Windows     | Linux   |
+|----------------|-------------|---------|
+| SSL 3.0        | ❌          | ❌     |
+| TLS 1.0        | ✔️          | ✔️     |
+| TLS 1.2        | ✔️          | ✔️     |
+| TLS 1.3        | ✔️          | ✔️     |
+
+### Cipher Suites
+
+| Name                                              | Windows     | Linux             |
+|---------------------------------------------------|-------------|-------------------|
+| TLS_RSA_WITH_RC4_128_SHA                          | ✔️          | ⚠️<sup>1</sup>   |
+| TLS_RSA_WITH_3DES_EDE_CBC_SHA                     | ✔️          | ⚠️<sup>1</sup>   |
+| TLS_RSA_WITH_AES_128_CBC_SHA                      | ✔️          | ✔️               |
+| TLS_RSA_WITH_AES_256_CBC_SHA                      | ✔️          | ✔️               |
+| TLS_RSA_WITH_AES_128_CBC_SHA256                   | ✔️          | ✔️               |
+| TLS_RSA_WITH_AES_128_GCM_SHA256                   | ✔️          | ✔️               |
+| TLS_RSA_WITH_AES_256_GCM_SHA384                   | ✔️          | ✔️               |
+| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA                  | ✔️          | ⚠️<sup>1</sup>   |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA              | ✔️          | ✔️               |
+| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA              | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_RC4_128_SHA                    | ✔️          | ⚠️<sup>1</sup>   |
+| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA               | ✔️          | ⚠️<sup>1</sup>   |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                | ✔️          | ✔️               |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256           | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256             | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256             | ✔️          | ✔️               |
+| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256           | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384             | ✔️          | ✔️               |
+| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384           | ✔️          | ✔️               |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256       | ❌          | ❌               |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256     | ❌          | ❌               |
+| TLS_AES_128_GCM_SHA256                            | ✔️          | ✔️               |
+| TLS_AES_256_GCM_SHA384                            | ✔️          | ✔️               |
+| TLS_CHACHA20_POLY1305_SHA256                      | ❌          | ❌               |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305              | ❌          | ❌               |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305              | ❌          | ❌               |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305            | ❌          | ❌               |
+
+<sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
+
+### Curves and Groups
+
+| Name            | Windows     | Linux        |
+|-----------------|-------------|--------------|
+| CurveP256       | ✔️          | ✔️          |
+| CurveP384       | ✔️          | ✔️          |
+| CurveP521       | ✔️          | ✔️          |
+| X25519          | ❌          | ❌          |
+| X25519MLKEM768  | ❌          | ❌          |
+
+### Signature Algorithms
+
+| Name                      | Windows     | Linux        |
+|---------------------------|-------------|--------------|
+| PKCS1WithSHA256           | ✔️          | ✔️          |
+| PKCS1WithSHA384           | ✔️          | ✔️          |
+| PKCS1WithSHA512           | ✔️          | ✔️          |
+| PSSWithSHA256             | ✔️          | ✔️          |
+| PSSWithSHA384             | ✔️          | ✔️          |
+| PSSWithSHA512             | ✔️          | ✔️          |
+| ECDSAWithP256AndSHA256    | ✔️          | ✔️          |
+| ECDSAWithP384AndSHA384    | ✔️          | ✔️          |
+| ECDSAWithP521AndSHA512    | ✔️          | ✔️          |
+| Ed25519                   | ❌          | ✔️          |
+| PKCS1WithSHA1             | ✔️          | ✔️          |
+| ECDSAWithSHA1             | ✔️          | ✔️          |
diff --git a/eng/doc/README.md b/eng/doc/README.md
index 87eee3c4f46..6c07ed6b63c 100644
--- a/eng/doc/README.md
+++ b/eng/doc/README.md
@@ -2,6 +2,7 @@ This directory, `/eng/doc`, contains documents describing the Microsoft
 infrastructure used to build Go, in particular any designs that are not obvious
 by reading the infrastructure code itself.
 
+For cryptography information, see the [CrossPlatformCryptography.md](CrossPlatformCryptography.md) doc.
 For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
 
 The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.

From 691f82f8f202dbcebc2967f2b0d6b63a4638d129 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 15 Jan 2025 11:23:57 +0100
Subject: [PATCH 190/887] fix TestDependencies

---
 patches/0002-Vendor-crypto-backends.patch     | 60 ++++++++++++++++++-
 .../0003-Add-crypto-backend-foundation.patch  | 16 ++---
 patches/0005-Add-OpenSSL-crypto-backend.patch | 51 +---------------
 patches/0006-Add-CNG-crypto-backend.patch     | 26 +-------
 4 files changed, 67 insertions(+), 86 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 41b7bc850c9..3f1bf3427f2 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -9,6 +9,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |  19 +
  src/go.mod                                    |   5 +
  src/go.sum                                    |   4 +
+ src/go/build/deps_test.go                     |  14 +-
  src/go/build/vendor_test.go                   |   2 +
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
@@ -74,7 +75,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  11 +
- 68 files changed, 11005 insertions(+)
+ 69 files changed, 11016 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -142,7 +143,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
 
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
-index 00000000000000..979ee34f54acba
+index 00000000000000..ba6d196a54f69d
 --- /dev/null
 +++ b/src/crypto/internal/backend/deps_ignore.go
 @@ -0,0 +1,19 @@
@@ -152,7 +153,7 @@ index 00000000000000..979ee34f54acba
 +
 +//go:build ms_ignore_backend_deps
 +
-+package backend
++package main
 +
 +import (
 +	_ "github.com/golang-fips/openssl/v2"
@@ -190,6 +191,59 @@ index 9e661352f16e0b..abebb59dcd7739 100644
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
+diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
+index e3e01077c18b17..5551a24f8a844e 100644
+--- a/src/go/build/deps_test.go
++++ b/src/go/build/deps_test.go
+@@ -503,7 +503,7 @@ var depsRules = `
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+ 	sync/atomic < crypto/internal/boring/bcache;
+ 
+-	FIPS, internal/godebug, hash, embed,
++	FIPS, internal/godebug, hash, embed, encoding/binary,
+ 	crypto/internal/boring/sig,
+ 	crypto/internal/boring/syso,
+ 	crypto/internal/boring/bcache
+@@ -513,6 +513,12 @@ var depsRules = `
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
+ 	< crypto/cipher
++	< github.com/golang-fips/openssl/v2/internal/subtle
++	< github.com/golang-fips/openssl/v2
++	< github.com/microsoft/go-crypto-winnative/internal/subtle
++	< github.com/microsoft/go-crypto-winnative/internal/sysdll
++	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
++	< github.com/microsoft/go-crypto-winnative/cng
+ 	< crypto/internal/boring
+ 	< crypto/boring
+ 	< crypto/aes,
+@@ -534,6 +540,8 @@ var depsRules = `
+ 	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
+ 
+ 	CRYPTO, FMT, math/big
++	< github.com/golang-fips/openssl/v2/bbig
++	< github.com/microsoft/go-crypto-winnative/cng/bbig
+ 	< crypto/internal/boring/bbig
+ 	< crypto/rand
+ 	< crypto/ed25519 # depends on crypto/rand.Reader
+@@ -837,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+ 
+ func findImports(pkg string) ([]string, error) {
+ 	vpkg := pkg
+-	if strings.HasPrefix(pkg, "golang.org") {
++	if strings.HasPrefix(pkg, "golang.org") || strings.HasPrefix(pkg, "github.com") {
+ 		vpkg = "vendor/" + pkg
+ 	}
+ 	dir := filepath.Join(Default.GOROOT, "src", vpkg)
+@@ -847,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
+ 	}
+ 	var imports []string
+ 	var haveImport = map[string]bool{}
+-	if pkg == "crypto/internal/boring" {
++	if pkg == "crypto/internal/boring" || pkg == "github.com/golang-fips/openssl/v2" {
+ 		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
+ 	}
+ 	fset := token.NewFileSet()
 diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
 index 7f6237ffd59c11..1d0b9b20e9b1d4 100644
 --- a/src/go/build/vendor_test.go
diff --git a/patches/0003-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
index 2d37ac5751f..1eae1e793f8 100644
--- a/patches/0003-Add-crypto-backend-foundation.patch
+++ b/patches/0003-Add-crypto-backend-foundation.patch
@@ -519,7 +519,7 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..a46d6c034ca1e0 100644
+index 5551a24f8a844e..c86b63454c6f7a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -532,7 +532,7 @@ index e3e01077c18b17..a46d6c034ca1e0 100644
  
  	crypto, hash !< FIPS;
 @@ -506,7 +508,8 @@ var depsRules = `
- 	FIPS, internal/godebug, hash, embed,
+ 	FIPS, internal/godebug, hash, embed, encoding/binary,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
 -	crypto/internal/boring/bcache
@@ -541,17 +541,17 @@ index e3e01077c18b17..a46d6c034ca1e0 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -514,6 +517,7 @@ var depsRules = `
- 	< crypto/internal/fips140hash
- 	< crypto/cipher
+@@ -520,6 +523,7 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
+ 	< github.com/microsoft/go-crypto-winnative/cng
  	< crypto/internal/boring
 +	< crypto/internal/backend
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -535,6 +539,7 @@ var depsRules = `
- 
- 	CRYPTO, FMT, math/big
+@@ -543,6 +547,7 @@ var depsRules = `
+ 	< github.com/golang-fips/openssl/v2/bbig
+ 	< github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
  	< crypto/rand
diff --git a/patches/0005-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
index 7cfe62fcf7a..f58b2cbc2ea 100644
--- a/patches/0005-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0005-Add-OpenSSL-crypto-backend.patch
@@ -9,9 +9,8 @@ Subject: [PATCH] Add OpenSSL crypto backend
  .../internal/backend/bbig/big_openssl.go      |  12 +
  .../internal/backend/fips140/openssl.go       |  41 ++
  src/crypto/internal/backend/openssl_linux.go  | 358 ++++++++++++++++++
- src/go/build/deps_test.go                     |   9 +-
  src/os/exec/exec_test.go                      |   9 +
- 7 files changed, 428 insertions(+), 5 deletions(-)
+ 6 files changed, 422 insertions(+), 2 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -475,54 +474,6 @@ index 00000000000000..0f3aea733ac2a5
 +
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
-diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index a46d6c034ca1e0..12086de2c2e766 100644
---- a/src/go/build/deps_test.go
-+++ b/src/go/build/deps_test.go
-@@ -505,7 +505,7 @@ var depsRules = `
- 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
- 	sync/atomic < crypto/internal/boring/bcache;
- 
--	FIPS, internal/godebug, hash, embed,
-+	FIPS, internal/godebug, hash, embed, encoding/binary,
- 	crypto/internal/boring/sig,
- 	crypto/internal/boring/syso,
- 	crypto/internal/boring/bcache,
-@@ -516,6 +516,8 @@ var depsRules = `
- 	< crypto/sha3
- 	< crypto/internal/fips140hash
- 	< crypto/cipher
-+	< github.com/golang-fips/openssl/v2/internal/subtle
-+	< github.com/golang-fips/openssl/v2
- 	< crypto/internal/boring
- 	< crypto/internal/backend
- 	< crypto/boring
-@@ -538,6 +540,7 @@ var depsRules = `
- 	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
- 
- 	CRYPTO, FMT, math/big
-+	< github.com/golang-fips/openssl/v2/bbig
- 	< crypto/internal/boring/bbig
- 	< crypto/internal/backend/bbig
- 	< crypto/rand
-@@ -842,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
- 
- func findImports(pkg string) ([]string, error) {
- 	vpkg := pkg
--	if strings.HasPrefix(pkg, "golang.org") {
-+	if strings.HasPrefix(pkg, "golang.org") || strings.HasPrefix(pkg, "github.com") {
- 		vpkg = "vendor/" + pkg
- 	}
- 	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -852,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
- 	}
- 	var imports []string
- 	var haveImport = map[string]bool{}
--	if pkg == "crypto/internal/boring" {
-+	if pkg == "crypto/internal/boring" || pkg == "github.com/golang-fips/openssl/v2" {
- 		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
- 	}
- 	fset := token.NewFileSet()
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
 index 8c623871932f7d..2fa55073f5c19c 100644
 --- a/src/os/exec/exec_test.go
diff --git a/patches/0006-Add-CNG-crypto-backend.patch b/patches/0006-Add-CNG-crypto-backend.patch
index 256c9bef28d..e6bc7dab684 100644
--- a/patches/0006-Add-CNG-crypto-backend.patch
+++ b/patches/0006-Add-CNG-crypto-backend.patch
@@ -7,8 +7,7 @@ Subject: [PATCH] Add CNG crypto backend
  src/crypto/internal/backend/bbig/big_cng.go |  12 +
  src/crypto/internal/backend/cng_windows.go  | 329 ++++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go  |  33 ++
- src/go/build/deps_test.go                   |   5 +
- 4 files changed, 379 insertions(+)
+ 3 files changed, 374 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/fips140/cng.go
@@ -405,26 +404,3 @@ index 00000000000000..f769d15f94ab05
 +	}
 +	return enabled != 0
 +}
-diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3de94c93629e3d..8effe9041f3f5f 100644
---- a/src/go/build/deps_test.go
-+++ b/src/go/build/deps_test.go
-@@ -517,6 +517,10 @@ var depsRules = `
- 	< crypto/sha3
- 	< crypto/internal/fips140hash
- 	< crypto/cipher
-+	< github.com/microsoft/go-crypto-winnative/internal/subtle
-+	< github.com/microsoft/go-crypto-winnative/internal/sysdll
-+	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
-+	< github.com/microsoft/go-crypto-winnative/cng
- 	< github.com/golang-fips/openssl/v2/internal/subtle
- 	< github.com/golang-fips/openssl/v2
- 	< crypto/internal/boring
-@@ -542,6 +546,7 @@ var depsRules = `
- 	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
- 
- 	CRYPTO, FMT, math/big
-+	< github.com/microsoft/go-crypto-winnative/cng/bbig
- 	< github.com/golang-fips/openssl/v2/bbig
- 	< crypto/internal/boring/bbig
- 	< crypto/internal/backend/bbig

From b69be4d33c75d91a62ead010788c332eb7705774 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 15 Jan 2025 14:14:59 +0000
Subject: [PATCH 191/887] initial implementation of macOS crypto backend
 (#1453)

* initial implementation of macOS crypto backend

* fixup patches

* Also unassign GOROOT in run-builder

* fix patches

* try to fix test

* rebase

* skip internal linking

* add arm64 testing

* skip arm64 macOS (for now)

* move supports functions

* fixup

---------

Co-authored-by: Davis Goodin <dagood@microsoft.com>
---
 eng/_util/buildutil/buildutil.go              |   17 +
 eng/_util/cmd/build/build.go                  |   11 +-
 eng/_util/cmd/run-builder/run-builder.go      |    4 +
 .../stages/go-builder-matrix-stages.yml       |    7 +
 eng/pipeline/stages/pool-2.yml                |    8 +-
 ...001-Add-crypto-backend-GOEXPERIMENTs.patch |   97 +-
 patches/0002-Vendor-crypto-backends.patch     | 3499 ++++++++++++++++-
 .../0003-Add-crypto-backend-foundation.patch  |   48 +-
 .../0004-Add-BoringSSL-crypto-backend.patch   |   30 +-
 patches/0005-Add-OpenSSL-crypto-backend.patch |   34 +-
 patches/0006-Add-CNG-crypto-backend.patch     |   33 +-
 patches/0007-Add-Darwin-crypto-backend.patch  |  547 +++
 ...s.patch => 0008-Use-crypto-backends.patch} |  236 +-
 ....patch => 0009-Add-backend-code-gen.patch} |  123 +-
 ...patch => 0010-Update-default-go.env.patch} |    0
 ... 0011-Skip-failing-tests-on-Windows.patch} |    0
 ...OFIPS-when-running-the-Go-toolchain.patch} |    0
 ...pport-for-logging-used-Windows-APIs.patch} |    0
 ... 0014-remove-long-path-support-hack.patch} |    0
 ...ernal-go.mod-files-used-for-codegen.patch} |    0
 ...21-when-TLS-fipsonly-mode-is-enable.patch} |    0
 21 files changed, 4539 insertions(+), 155 deletions(-)
 create mode 100644 patches/0007-Add-Darwin-crypto-backend.patch
 rename patches/{0007-Use-crypto-backends.patch => 0008-Use-crypto-backends.patch} (91%)
 rename patches/{0008-Add-backend-code-gen.patch => 0009-Add-backend-code-gen.patch} (82%)
 rename patches/{0009-Update-default-go.env.patch => 0010-Update-default-go.env.patch} (100%)
 rename patches/{0010-Skip-failing-tests-on-Windows.patch => 0011-Skip-failing-tests-on-Windows.patch} (100%)
 rename patches/{0011-unset-GOFIPS-when-running-the-Go-toolchain.patch => 0012-unset-GOFIPS-when-running-the-Go-toolchain.patch} (100%)
 rename patches/{0012-add-support-for-logging-used-Windows-APIs.patch => 0013-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0013-remove-long-path-support-hack.patch => 0014-remove-long-path-support-hack.patch} (100%)
 rename patches/{0014-Omit-internal-go.mod-files-used-for-codegen.patch => 0015-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch => 0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch} (100%)

diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index 4de7511bf5c..6177f2f601d 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -91,6 +91,7 @@ func AppendExperimentEnv(experiment string) {
 	if strings.Contains(experiment, "opensslcrypto") ||
 		strings.Contains(experiment, "cngcrypto") ||
 		strings.Contains(experiment, "boringcrypto") ||
+		strings.Contains(experiment, "darwincrypto") ||
 		strings.Contains(experiment, "systemcrypto") {
 
 		experiment += ",allowcryptofallback"
@@ -103,3 +104,19 @@ func AppendExperimentEnv(experiment string) {
 		panic(err)
 	}
 }
+
+// UnassignGOROOT unsets the GOROOT env var if it is set.
+//
+// Setting GOROOT explicitly in the environment has not been necessary since Go
+// 1.9 (https://go.dev/doc/go1.9#goroot), but a dev or build machine may still
+// have it set. It interferes with attempts to run the built Go (such as when
+// building the race runtime), so remove the explicit GOROOT if set.
+func UnassignGOROOT() error {
+	if explicitRoot, ok := os.LookupEnv("GOROOT"); ok {
+		fmt.Printf("---- Removing explicit GOROOT from environment: %v\n", explicitRoot)
+		if err := os.Unsetenv("GOROOT"); err != nil {
+			return err
+		}
+	}
+	return nil
+}
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index e87ab876093..e0d0ec0e626 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -138,15 +138,8 @@ func build(o *options) error {
 	}
 	fmt.Printf("---- Target platform: %v_%v\n", targetOS, targetArch)
 
-	// Setting GOROOT explicitly in the environment has not been necessary since Go 1.9
-	// (https://go.dev/doc/go1.9#goroot), but a dev or build machine may still have it set. It
-	// interferes with attempts to run the built Go (such as when building the race runtime), so
-	// remove the explicit GOROOT if set.
-	if explicitRoot, ok := os.LookupEnv("GOROOT"); ok {
-		fmt.Printf("---- Removing explicit GOROOT from environment: %v\n", explicitRoot)
-		if err := os.Unsetenv("GOROOT"); err != nil {
-			return err
-		}
+	if err := buildutil.UnassignGOROOT(); err != nil {
+		return err
 	}
 
 	// The upstream build scripts in {repo-root}/src require your working directory to be src, or
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index a256693ae5d..6e5c542bc0d 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -105,6 +105,10 @@ func main() {
 		env("GO_TEST_TIMEOUT_SCALE", strconv.Itoa(timeoutScale))
 	}
 
+	if err := buildutil.UnassignGOROOT(); err != nil {
+		log.Fatal(err)
+	}
+
 	buildCmdline := []string{"pwsh", "eng/run.ps1", "build"}
 
 	// run.ps1 compiles Go code, so we can't use the experiment yet. We must pass the experiment
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 3d0827fa482..b53f3920bd1 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -81,6 +81,13 @@ stages:
             - { os: linux, arch: arm64, config: buildandpack }
         - ${{ if parameters.innerloop }}:
           - { os: darwin, arch: amd64, config: devscript }
+          - { os: darwin, arch: amd64, config: test }
+          - { experiment: darwincrypto, os: darwin, arch: amd64, config: test }
+          - { experiment: darwincrypto, os: darwin, arch: amd64, config: test, fips: true }
+          # - { os: darwin, arch: arm64, config: devscript }
+          # - { os: darwin, arch: arm64, config: test }
+          # - { experiment: darwincrypto, os: darwin, arch: arm64, config: test }
+          # - { experiment: darwincrypto, os: darwin, arch: arm64, config: test, fips: true }
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 1509f1194d5..5e9bbf76427 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -53,5 +53,9 @@ stages:
 
         ${{ elseif eq(parameters.os, 'darwin') }}:
           # https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/hosted?view=azure-devops&tabs=yaml#software
-          vmImage: 'macos-14'
-          os: macOs
+          ${{ if eq(parameters.hostArch, 'amd64') }}:
+            vmImage: 'macos-14'
+            os: macOS
+          ${{ else }}:
+            vmImage: 'macos-latest-internal'
+            os: macOS
diff --git a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
index 8d07cee4e4e..c73646e0e06 100644
--- a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,22 +11,24 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/go/internal/modindex/build.go         | 54 ++++++++++++++
- src/cmd/go/internal/modindex/build_test.go    | 73 +++++++++++++++++++
- src/go/build/build.go                         | 54 ++++++++++++++
- src/go/build/buildbackend_test.go             | 66 +++++++++++++++++
+ src/cmd/go/internal/modindex/build.go         | 57 +++++++++++++
+ src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
+ src/go/build/build.go                         | 57 +++++++++++++
+ src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
  .../testdata/backendtags_openssl/main.go      |  3 +
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
+ .../goexperiment/exp_darwincrypto_off.go      |  8 ++
+ .../goexperiment/exp_darwincrypto_on.go       |  8 ++
  .../goexperiment/exp_opensslcrypto_off.go     |  8 ++
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 17 +++++
- 15 files changed, 324 insertions(+)
+ src/internal/goexperiment/flags.go            | 18 ++++
+ 17 files changed, 365 insertions(+)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -35,22 +37,25 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/go/build/testdata/backendtags_system/systemcrypto.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
+ create mode 100644 src/internal/goexperiment/exp_darwincrypto_off.go
+ create mode 100644 src/internal/goexperiment/exp_darwincrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index b4dacb0f523a8d..615ae461eb8cdc 100644
+index b4dacb0f523a8d..4315c288d10cb3 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
-@@ -886,13 +886,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -886,13 +886,70 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
 +	const system = "goexperiment.systemcrypto"
 +	const openssl = "goexperiment.opensslcrypto"
 +	const cng = "goexperiment.cngcrypto"
++	const darwin = "goexperiment.darwincrypto"
 +	const boring = "goexperiment.boringcrypto"
 +	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
 +	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
@@ -71,11 +76,12 @@ index b4dacb0f523a8d..615ae461eb8cdc 100644
 +	satisfiedByAnyBackend := name == system
 +	satisfiedBySystemCrypto :=
 +		(ctxt.GOOS == "linux" && name == openssl) ||
-+			(ctxt.GOOS == "windows" && name == cng)
++			(ctxt.GOOS == "windows" && name == cng) ||
++			(ctxt.GOOS == "darwin" && name == darwin)
 +	satisfiedBy := func(tag string) bool {
 +		if satisfiedByAnyBackend {
 +			switch tag {
-+			case openssl, cng, boring:
++			case openssl, cng, darwin, boring:
 +				return true
 +			}
 +		}
@@ -89,6 +95,7 @@ index b4dacb0f523a8d..615ae461eb8cdc 100644
 +		if satisfiedByAnyBackend {
 +			allTags[openssl] = true
 +			allTags[cng] = true
++			allTags[darwin] = true
 +			allTags[boring] = true
 +		}
 +		if satisfiedBySystemCrypto {
@@ -192,16 +199,17 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 9ffffda08a99b1..570937cba3cb85 100644
+index 9ffffda08a99b1..78fd536fa6a6d1 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
-@@ -1984,13 +1984,67 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -1984,13 +1984,70 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
 +	const system = "goexperiment.systemcrypto"
 +	const openssl = "goexperiment.opensslcrypto"
 +	const cng = "goexperiment.cngcrypto"
++	const darwin = "goexperiment.darwincrypto"
 +	const boring = "goexperiment.boringcrypto"
 +	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
 +	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
@@ -222,11 +230,12 @@ index 9ffffda08a99b1..570937cba3cb85 100644
 +	satisfiedByAnyBackend := name == system
 +	satisfiedBySystemCrypto :=
 +		(ctxt.GOOS == "linux" && name == openssl) ||
-+			(ctxt.GOOS == "windows" && name == cng)
++			(ctxt.GOOS == "windows" && name == cng) ||
++			(ctxt.GOOS == "darwin" && name == darwin)
 +	satisfiedBy := func(tag string) bool {
 +		if satisfiedByAnyBackend {
 +			switch tag {
-+			case openssl, cng, boring:
++			case openssl, cng, darwin, boring:
 +				return true
 +			}
 +		}
@@ -240,6 +249,7 @@ index 9ffffda08a99b1..570937cba3cb85 100644
 +		if satisfiedByAnyBackend {
 +			allTags[openssl] = true
 +			allTags[cng] = true
++			allTags[darwin] = true
 +			allTags[boring] = true
 +		}
 +		if satisfiedBySystemCrypto {
@@ -265,10 +275,10 @@ index 9ffffda08a99b1..570937cba3cb85 100644
  		}
 diff --git a/src/go/build/buildbackend_test.go b/src/go/build/buildbackend_test.go
 new file mode 100644
-index 00000000000000..a22abbb42e37c0
+index 00000000000000..aa3c5f1007ed79
 --- /dev/null
 +++ b/src/go/build/buildbackend_test.go
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,84 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -326,7 +336,7 @@ index 00000000000000..a22abbb42e37c0
 +	if err != nil {
 +		t.Fatal(err)
 +	}
-+	want = []string{"goexperiment.boringcrypto", "goexperiment.cngcrypto", "goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
++	want = []string{"goexperiment.boringcrypto", "goexperiment.cngcrypto", "goexperiment.darwincrypto", "goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
 +	if !reflect.DeepEqual(p.AllTags, want) {
 +		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
 +	}
@@ -334,6 +344,24 @@ index 00000000000000..a22abbb42e37c0
 +	if !reflect.DeepEqual(p.GoFiles, wantFiles) {
 +		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
 +	}
++
++	ctxt.GOARCH = "amd64"
++	ctxt.GOOS = "darwin"
++	ctxt.BuildTags = []string{"goexperiment.darwincrypto"}
++	p, err = ctxt.ImportDir("testdata/backendtags_openssl", 0)
++	if err != nil {
++		t.Fatal(err)
++	}
++	// Given the current GOOS (darwin), systemcrypto would not affect the
++	// decision, so we don't want it to be included in AllTags.
++	want = []string{"goexperiment.opensslcrypto"}
++	if !reflect.DeepEqual(p.AllTags, want) {
++		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
++	}
++	wantFiles = []string{"main.go"}
++	if !reflect.DeepEqual(p.GoFiles, wantFiles) {
++		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
++	}
 +}
 diff --git a/src/go/build/testdata/backendtags_openssl/main.go b/src/go/build/testdata/backendtags_openssl/main.go
 new file mode 100644
@@ -399,6 +427,34 @@ index 00000000000000..5b0a55d6c5772e
 +
 +const CNGCrypto = true
 +const CNGCryptoInt = 1
+diff --git a/src/internal/goexperiment/exp_darwincrypto_off.go b/src/internal/goexperiment/exp_darwincrypto_off.go
+new file mode 100644
+index 00000000000000..331111ce4759f7
+--- /dev/null
++++ b/src/internal/goexperiment/exp_darwincrypto_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.darwincrypto
++
++package goexperiment
++
++const DarwinCrypto = false
++const DarwinCryptoInt = 0
+diff --git a/src/internal/goexperiment/exp_darwincrypto_on.go b/src/internal/goexperiment/exp_darwincrypto_on.go
+new file mode 100644
+index 00000000000000..4bf785b999ecce
+--- /dev/null
++++ b/src/internal/goexperiment/exp_darwincrypto_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.darwincrypto
++
++package goexperiment
++
++const DarwinCrypto = true
++const DarwinCryptoInt = 1
 diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
 new file mode 100644
 index 00000000000000..b28c0976a94cb0
@@ -456,17 +512,18 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 31b3d0315b64f8..8c140f0dbed134 100644
+index 31b3d0315b64f8..e6c9b7d5e62dc0 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,23 @@ type Flags struct {
+@@ -59,6 +59,24 @@ type Flags struct {
  	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
 +	OpenSSLCrypto     bool
 +	CNGCrypto         bool
++	DarwinCrypto      bool
 +
-+	// SystemCrypto enables the OpenSSL or CNG crypto experiment depending on
++	// SystemCrypto enables the OpenSSL, CNG or Darwin crypto experiment depending on
 +	// which one is appropriate on the target GOOS.
 +	//
 +	// If SystemCrypto is enabled but no crypto experiment is appropriate on the
diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 3f1bf3427f2..548d456466d 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -7,10 +7,10 @@ To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
  src/crypto/internal/backend/deps_ignore.go    |  19 +
- src/go.mod                                    |   5 +
- src/go.sum                                    |   4 +
- src/go/build/deps_test.go                     |  14 +-
- src/go/build/vendor_test.go                   |   2 +
+ src/go.mod                                    |   6 +
+ src/go.sum                                    |   6 +
+ src/go/build/deps_test.go                     |  17 +-
+ src/go/build/vendor_test.go                   |   3 +
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
@@ -49,6 +49,32 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/thread_setup_windows.c         |  64 ++
  .../golang-fips/openssl/v2/tls1prf.go         | 160 ++++
  .../github.com/golang-fips/openssl/v2/zaes.go |  86 +++
+ .../microsoft/go-crypto-darwin/LICENSE        |  21 +
+ .../microsoft/go-crypto-darwin/bbig/big.go    |  31 +
+ .../internal/cryptokit/CryptoKit.o            | Bin 0 -> 100952 bytes
+ .../internal/cryptokit/cryptokit.go           |  34 +
+ .../internal/cryptokit/cryptokit.h            |  43 ++
+ .../internal/cryptokit/ed25519.go             |  72 ++
+ .../internal/cryptokit/gcm.go                 |  36 +
+ .../internal/cryptokit/hkdf.go                |  77 ++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go | 306 ++++++++
+ .../microsoft/go-crypto-darwin/xcrypto/big.go |  16 +
+ .../go-crypto-darwin/xcrypto/cgo_go124.go     |  21 +
+ .../go-crypto-darwin/xcrypto/cipher.go        | 122 +++
+ .../microsoft/go-crypto-darwin/xcrypto/des.go | 117 +++
+ .../microsoft/go-crypto-darwin/xcrypto/ec.go  |  32 +
+ .../go-crypto-darwin/xcrypto/ecdh.go          | 135 ++++
+ .../go-crypto-darwin/xcrypto/ecdsa.go         | 181 +++++
+ .../go-crypto-darwin/xcrypto/ed25519.go       | 100 +++
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go | 338 +++++++++
+ .../go-crypto-darwin/xcrypto/hash.go          | 391 ++++++++++
+ .../go-crypto-darwin/xcrypto/hkdf.go          |  66 ++
+ .../go-crypto-darwin/xcrypto/hmac.go          | 113 +++
+ .../go-crypto-darwin/xcrypto/pbkdf2.go        |  65 ++
+ .../go-crypto-darwin/xcrypto/rand.go          |  26 +
+ .../microsoft/go-crypto-darwin/xcrypto/rc4.go |  83 ++
+ .../microsoft/go-crypto-darwin/xcrypto/rsa.go | 194 +++++
+ .../go-crypto-darwin/xcrypto/xcrypto.go       |  59 ++
  .../microsoft/go-crypto-winnative/LICENSE     |  21 +
  .../microsoft/go-crypto-winnative/cng/aes.go  | 393 ++++++++++
  .../go-crypto-winnative/cng/bbig/big.go       |  31 +
@@ -74,8 +100,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/bcrypt/zsyscall_windows.go       | 412 ++++++++++
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
- src/vendor/modules.txt                        |  11 +
- 69 files changed, 11016 insertions(+), 3 deletions(-)
+ src/vendor/modules.txt                        |  16 +
+ 95 files changed, 13707 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -115,6 +141,32 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/zaes.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/bbig/big.go
@@ -167,32 +219,35 @@ index 00000000000000..ba6d196a54f69d
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..4ca039fa96ba3c 100644
+index 7a1318dcac32ba..45152e6f54937b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
-@@ -11,3 +11,8 @@ require (
+@@ -11,3 +11,9 @@ require (
  	golang.org/x/sys v0.28.0 // indirect
  	golang.org/x/text v0.21.0 // indirect
  )
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..abebb59dcd7739 100644
+index 9e661352f16e0b..5683f4da5e4f04 100644
 --- a/src/go.sum
 +++ b/src/go.sum
-@@ -1,3 +1,7 @@
+@@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146 h1:xg58D1m8jeq0lkMf7TmcLZXCAK/PRlT0aG02PYlA6C0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..5551a24f8a844e 100644
+index e3e01077c18b17..e017efb1562379 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -503,7 +503,7 @@ var depsRules = `
@@ -204,12 +259,14 @@ index e3e01077c18b17..5551a24f8a844e 100644
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
  	crypto/internal/boring/bcache
-@@ -513,6 +513,12 @@ var depsRules = `
+@@ -513,6 +513,14 @@ var depsRules = `
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/cipher
 +	< github.com/golang-fips/openssl/v2/internal/subtle
 +	< github.com/golang-fips/openssl/v2
++	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
++	< github.com/microsoft/go-crypto-darwin/xcrypto
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
 +	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
@@ -217,16 +274,17 @@ index e3e01077c18b17..5551a24f8a844e 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -534,6 +540,8 @@ var depsRules = `
+@@ -534,6 +542,9 @@ var depsRules = `
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
  	CRYPTO, FMT, math/big
 +	< github.com/golang-fips/openssl/v2/bbig
++	< github.com/microsoft/go-crypto-darwin/bbig
 +	< github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
-@@ -837,7 +845,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -837,7 +848,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -235,25 +293,26 @@ index e3e01077c18b17..5551a24f8a844e 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -847,7 +855,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -847,7 +858,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
 -	if pkg == "crypto/internal/boring" {
-+	if pkg == "crypto/internal/boring" || pkg == "github.com/golang-fips/openssl/v2" {
++	if pkg == "crypto/internal/boring" || pkg == "github.com/golang-fips/openssl/v2" || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-darwin") {
  		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
  	}
  	fset := token.NewFileSet()
 diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 7f6237ffd59c11..1d0b9b20e9b1d4 100644
+index 7f6237ffd59c11..6092c93d4c5b26 100644
 --- a/src/go/build/vendor_test.go
 +++ b/src/go/build/vendor_test.go
-@@ -22,6 +22,8 @@ var allowedPackagePrefixes = []string{
+@@ -22,6 +22,9 @@ var allowedPackagePrefixes = []string{
  	"github.com/google/pprof",
  	"github.com/ianlancetaylor/demangle",
  	"rsc.io/markdown",
 +	"github.com/golang-fips/openssl",
 +	"github.com/microsoft/go-crypto-winnative",
++	"github.com/microsoft/go-crypto-darwin",
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
@@ -7265,6 +7324,3401 @@ index 00000000000000..e60a5dde390be6
 +	}
 +	return block
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+new file mode 100644
+index 00000000000000..9e841e7a26e4eb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
++
++    Copyright (c) Microsoft Corporation.
++
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
++
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
++
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+new file mode 100644
+index 00000000000000..73891afeab93d7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+@@ -0,0 +1,31 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package bbig
++
++import (
++	"math/big"
++
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
++)
++
++func Enc(b *big.Int) xcrypto.BigInt {
++	if b == nil {
++		return nil
++	}
++	x := b.Bytes()
++	if len(x) == 0 {
++		return xcrypto.BigInt{}
++	}
++	return x
++}
++
++func Dec(b xcrypto.BigInt) *big.Int {
++	if b == nil {
++		return nil
++	}
++	if len(b) == 0 {
++		return new(big.Int)
++	}
++	return new(big.Int).SetBytes(b)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
+new file mode 100644
+index 0000000000000000000000000000000000000000..cedd5b03bd3078586649300d1baa94c8b12549f1
+GIT binary patch
+literal 100952
+zcmeFa3t&{$wLX3(6CglLq6CeKVN_J8jwHNHl++oMz(gk!Nr3dqWD=5rq=Y2qp+rSv
+z1Da`|jf%b0>TPIkn{d6ow4z4E8pKDev<0zBtJa{XV5nk?7!=I!`_A5b=FCYZiH|<+
+z|IdMwZ`NLW?Z?_{uf6s@^Z4!OkN-x~v<Qo)jRIOVEe`Oj1pJ9cS~L*XPTY^@<Bz17
+zcH%mrffE`yp@9<`IH7?P8aSbW6B;<7ffE`yp@9<`IH7?P8u-7Wfj@lu*Uz!>w_xM1
+zVZX1PfxBZQ{@8HiIvsZ@nPINUDT2{U8C;6yVFK?lOvL5&*7{b~ir0e9%goOU((2XD
+z3&bmy7m1g)%QfvMY*?h$AUNW$*IQmz>#Hs*PoAYGc)g+Jsd9Ll!K>?HQJ$bQEk?bN
+z==B!Y)K-^OEDO+~<#o$;c_n|3sl14O<<;C!wzPJpx3<2@SM6JBZl7ba5LhAQQl<+1
+zC%OB#jaksX%8Htx0?p<9QkJLM@pD<8EWRIjy}nZK((0lWKEX1Vw^^2#6eaj=D34~)
+ziuUd3SK2`B%W&p7gBiP%#A}C4+H;90Ps`ObSw%22UU|KhOTJy~En88v%vV;iw9@Mh
+zEzg!LvMbpH*rDosNI{bDdP|CGi-H_;d6Q*%tul)Z<*~mGv@bp=7I?++SW#6}T<fi?
+zxS_0~#Orlu1ekcyCCe+6^P*Fh*NyU~i;N-7C6R!;V}YjahrOp@sJmxt+BBrua3cxV
+zSllP+uk|TunPHuR6x#So$T@&^+#EWVXV=H~hRW*YTKb%;eYN^4r1N4v8*X#H$`wn>
+zDqs`g%BigO&8e)bfHKP}D`YtX)rWk!zUu4CihVW66~4Uc`l{N>tI7g~9j4xlvYO@2
+z>Lq2h)w1F+`9j*J>b2p8sh?T%WSuOBrfK54D~pTDoprUPzKYtiV%1sXV}4uz{JFm3
+zy6UppdY#X4<apW3X~THI*SJ}aNY{NsIt{3{Y)KhBS$%qC1xl#)RTS4VyQv(RzuKp#
+zQ{N%wn8rlO+d}hY6jj4g$;74lVJHVWMth1&!|_9OJAiyZr(w#Ux8&Qt;@Yz7ed)6P
+zpq}*p<>!DgK)GI{Zpb(F-<zvD?wsmM7+X!yh3owY_h*62|BkEipe=TCW}Lfufz8#N
+zndI_kOiFP3^Crc`o*X%8KSf=Q&)7WMV<&1~CcozZi&z>v5uSna&PC3J&IQiAT-R*}
+z_kfe_-;wQq-sR8kaQPQ>y8M67@_(M(C+hWQZg4d_dR_j^7NA2mrZd*n*nP+~<r$a%
+zXHk89eSzF-l0Zp;R#&sj;qrG4AQQ)2195ztgGIRlMXhm&m;I{G^1tJ@{N3&U#O42s
+zUQL$&IhTKTw&j@H-{<zfE7P9I^1tf#*LAu4o}F(0!=)%qm$^S*Z-)?dH_xP+T+QQk
+zShuRn?O)O6_V0K5kLcyN{XQhELJ2=B)Ju5J?SC>yfAzVZLI30OKkb4n#&I(QUH*F#
+zkRvmBpDf~MDIl}g?2BFV8@Nta^D2zEC&ATRH`!$orDXZpT%>e>+ZjxKF3bN%q{O)_
+zpQ+wrRK$=q-!C-!Cd4+on(q;#klEUo6UTm|BW$%zZ|jqjb*O8C3czS^`#(@^Td8x{
+ztt$PMXb{XZ%GG?5&<d2e?jF6M=7%}*ZvP>d|II8vI($ESn&tnKyIJpKu24tgGjZsy
+zyZK4Bsm=+#pvjrk4=gQnXQ1E(Xyqqpep{A*k1k0it-b?(L8QYBGh6y{qFn3J*b+U<
+zZyb2_IKw-a|9MfJe|zlY5jRZIwAhm!ajxexyTH_39sG-{n^n5kt>}8n21-b*8_|uH
+zx%l*nSA%QxbFQZn1)=BFvq|+CYnM%TH;-Uu*SaT#em{T(=pwOk?51G)(^FzkPPe%p
+z7v*Yue`CX|#~79B>f0&W(!2^r^ErBok%P`xwYi!f7SlkV0(#<;G+(6W1EkcGg(4}(
+zki@Y>E)JwBy9w%T5QP6t9o_!-bbNyD7xls9>N;hPJ+5`WJ=Z!HJ3Y<<r`NMR%m1v)
+zzbo5+4Ef-qcDlCh|7P-Qu65(jg0QPN@;ffe&ORu(3yh@LNA~oL!`#7ZTgH_Au?@dv
+z1;u+{xo-daS^huhmGoSY)m)d5bzxmxY{P#egMpQWS&?<22aNT4(=t<Be)vRMNWc<w
+zZN2-C*OuG=Ax1@Saq?>i{`h%cU+h@^bFI@o#^a}=h0YF#-p(gepzz12PCY-eP1FuT
+zq8Im>V2#DS^y1iwtC0gfxh2#eHy)hq^8d{><x|%h_{UwY*o;58ZadnCoUz}(fok@D
+zo|)VUv;IA$m3cR1zk>X+t68J-338s|AKmC-@SD|(PUmAxcRtC#dOoL~(W%?Mp3Ava
+z&!L;C+rOa0slRfqc`0`Fqu|i9iGDo-+lKeah<(KOLhK`%zr~BX7x8D+j@U;$zr%|a
+zzmI(+dlwR30^!+>KMP*QpUgkHw(X6=TC>@;?Y+3HZEq)JZF|d>wXJ(HnAv~G+O{_(
+zYuh_Xu5E8m&f4}K81E*ywsj-pz9{f_La_6@*{}52Gm~G+Onxo7586Nv^}n5&$uDFk
+z|26rw%w#y+BgvrmCBK9vt;0R~GxzA8?9uPK#%6*z<Ql!lJ-RD<^iKC!&t})yRh{n9
+zZ@Nc6AN$BI*S5EkT%$k5ay!{z`mtlNc#09z#|x`xZjM+dT~j{eSjA?%DHpEhs-)OQ
+zb7m-qM3eRZ1#?GNn`_N$D`#Pil6iF}5bD34cQA^^K<C5S|Aux%UCRlGwI7xgvVP|V
+zoJl8IQ0vL^e}Z)ztwNJ(=Y=?`#?NAIak_5%47PXcs{CO!blclOXXWU*Jo&YrZ=x$|
+z8o2!1=>Z-`fxI-=*-!T*4!~zuaKWcO?efE!NLLb^0R8OWmE}K@<%j1Ii?N@}nRKCC
+zI96@Ide#av+#vMXoZxDPrxf1EweF-p314)Z%hE+(v<Lnt4hGVRWhrahfrKpopR=~T
+zZ_Dz(mbI;Ca+d$~tZfIAvixskZTo9VmValKo*PDRAi?E-#kK7Nn+q%Pwhu8W>F(gw
+zI-5LQO{-qOnvGY#&1lMgF{5e0j*KRle3S3@8BHtx(6nG@Q{AqNrp%X`vUfY0>Rxs<
+zt@@*D-Gs@m#_d?*uwaU4f>Y_h5h%x9{I+Y`XEyhgw`13y!sd4frS@G8tqK9G{Can#
+z4Ryw@{x1l^j<Wq9>S<Y1o{4RE6=~U)ceDM+53Iq<&~loK<6O<x!lu{&b9uGUdY~+~
+zf3IuGw%CU6vI@)ZQ5>3f-K?IA%x=fj8Th82i!kq)J1TZ8ng&9&ICYOJ*1ZRjTK1YF
+zS+N;d0!#s0U_kY7;?FR9SIG3Ew_Vzj1Rwee?u((ITXDxubo7g7>BZds7u|3QS^nQ+
+z^6$*@f1HIy%Mdo`@#%oUtgkH?e$tVPNH%QviRhOrZ%~G-t&|a~^gt1_Z$m&Jvq8qn
+z2o(Bf&GNsOZFvW4v<lJmC3pdr@l`vsET0D~$-gF_^`fufY#ty!6r+H^RL-h(t2z+K
+zBGl-GP)jg4^|k7e>2W<W^(45P>*5e0GAL+r`Rh8}{{LBtim)7t0?h$4GG>Z-X%5N}
+z(Z1qpmd(UGZbsmTS?O+Ofc+uL-|TK))!_Djiiy?Lmy23IOg{2BS5deBXkTs$qOZw%
+z%|Bx_gb<#=B!B@AY^TGuZk^6(ewgDyBSM&fXhOzj+5T<rW?w4`Z^;b_OJi4G!WoA^
+zOZ3QKB;jJqGtUUbmSSDi|DvUEH|Wv26&+96K*{okh%GzxZ0H?ZA8Mj{yd8`!MZb-)
+zCA9bjW6KRP9>hqLqCOE~!oSwR3NyPzaLEDYc#HNA6eeQOb{=Sj+Oqv02Q;T==eA|r
+z``=7H0!REh^;#T%r_1u&zPB)l@TqX0AN8E$@^8ay8$HbT^*kT-#JHNP5?mKnA=tY`
+z3<vyfW*g#Y2<j!v)*uFb1q&;DvrNcrr2!*?R&zmR46X>pdL@x!MSy(PwhxjZpvuUM
+zedI__j=Q-A*1jA|MSzh#<pcH<cGGoTO6=GyEaLil5Xj)1@|W0#ofzuu;v?unP?A1S
+zN<u%A(KJk?R<7o-KbQYcqK(ZeXcvAa7~ii7KTOWPyh%~6<|ji33D&FDWrJfyXx^-E
+z^)Tq1EvnXhyjK2%3uI`JPe*GGY)?ZU(UDeTRNG>QA5O)cjr&^MKgZpT`!~2XRH5P}
+z7v>^13bP|>PoHh6%P=lV*r|V_pG+{OVm$SknJY*0FM1f{QQ5Z#!-u6UIcgTH>8y?T
+z)^=C3zB`nTPRi@k<XbpBLHv~KY98fU)44L@T0}6|NI&P=_PNdV$zNQ>y)Mg}$uA|p
+zAcd^gLO`r9daS29VyPWHJEG1ea&@4mys%WGxHm;R^*)K0+x7TH^v&Q~a4-VT3rl*g
+z?-~Rzdt_!+p9_Au`Rd;0tej7_@kFpTF7}ZZ)?E|#$*!|^xvUWA;!#jA9(6U}kl<>b
+z(|g1*Kca3FR+1<Wf}iHg<+)E_x54tSfx^UAe$5NWyH0=Iw=4f!+r{~iD~-pvu66E7
+z3Du{$ZaY9~^=Ow}Pt|!h96)%mdi3@d{o>e#KVQ=KGoQ)j4hI`@wS&(YaJ37riybm&
+z=fFANg^Slm06s{L*DevUeG?nfXK1j+vw!WfyqbKZ?>(3Qw{T1FK7XV4c^a>6Q=X1(
+z*r4b7o6-B+!6c3gqSfp!_#m+@$2zI%K{TY-hqER9oaT=Rg5W$i(|I;-x9I^rN^tw(
+z^A5<I+_R!TnVrJn?gS||QHGU$fN8k2WiBi$7xyyUb-0y%45sgu+yMAjH3U_;L8`KK
+zAXU2jzNTPSc)OLoS<Ukt1Dws_sBM5$$hWxG)xcki0|jyZ=JK!6BO(7ix~DRDY*WY}
+z&zbhC5Cq{z?OEzj!r;t0;Ka29W9Z8L9>fa17NI*=^Maj-WZIm4i)`8ccY>zCs9j%(
+z#`g$gcpS#yZf3mYX~GtwBisL8Sj+fTf6Hh^QnvpYH@iaP=!9{ILB#aM+Mw(LdkHz}
+zpJn-<N1V-0h$9Og>15#;SGN(p`JXBqq0Ked!7wu0gpI&l>NbnsH1jM`9?Iwuw>YiC
+zj&}ghJyEm6PEv7a<GvR6Q1dfI*h^<%jy^BVB}_#6&OoD`xf#oFhjC>#jWc7-kU>5p
+z+#vVN(YsAwf%6Z9v|>u}Bvc-&iPIPvu^4OwB~ppHct7og?B55QKlv{Iix{>n|6%Mx
+z12f|}>@s^@%~v`Gm;zb;cLzvy`Ma^%ue}k6#yerNts<bQLoXI|WUafwhM|-lg+=WK
+z7m>k&4TGr=CV$8{Pc96qurF{R{QP#TzkLVF@fgYV{C2$TJ5b2ioHc%0k_TZGqb1B7
+z_}0vhz8o8lOS1G6AlP`Pt8vv%t@e!UHGjQjJQjWIGmfihK{x1EPz+ka=o(>!*xyM*
+z6+8BItI(6D)jZ&Y&NO5-yc9++8xf^CgF0#N()gd>ew<yn9}^!IfvR_k0@Mc9?eB4I
+z>w(W7v4Os!IC_K2f>3`|SKnS3TsGz&cI`M=I@E(L1h!G#plwrnV;elk4z|1aP|vBr
+z?B?1@3E3Cc;)zQ`23UG#G10ObKX+vNKWCwJ=d6CMc3Hz`me@6SLszo6j49o*4JYf>
+z@9D`kNK$=DMR?uDX)ILE-YTu4L&p9dV}JigFP(>{She;*7UqLZvtdmMh#M>EnV-de
+zWQl$>pb%`rMU;;4lTo-Zx#q>_EON%_&5(!udSgFOe#|}P@9c4vqhG^=tu=HaTp%g-
+z?RBupHMoC_n`fcM_-!cvR4V2pwx3<Y+{I%)8l4#;t!Ae~m}sNnxfQ2p?CKxrnqJX_
+z34&=#KbGB@wXSv&=BGFr*SFl9pBRD#m^;DEhuOtJ#Ub<aN>v1W)Nf!On%d981`rCs
+zAU{;o7CA%%pYMcv`VO2yYkIyDFZ&L};I)3d*@0ZaO)=KMPHqQMFhHBR#qfVh(q@>+
+zoJl-J_OxIVzo9k}X4d3dgPHHyiMcJGHlb%7*cJ6eG8w+zp;mG*y6ArcU2pcl!{5&Z
+z9n-%-coDtTqUq`Z5o~qc!(!S0ZI-_?i(Bs%VmdqN)aiVLMDS(6rOOa$1De_*i`CtM
+z@aoRkN1kcywwM;apf#!Z=!?eN=JjAGI{5sw@nEUjpWTF~r}|;jZk#na{l@~!22VQl
+zXQ!C^VIGD0ph+1>7_HL>OB^7%+imF)b`v;JR>NdA$1XTPU4_{e9NQXCZZX`>#%KDR
+zjmNAvxZxq-J->l9;>zOaR(enW3fK!CvS88b+l#*_sBUMlOK@S*(aW9Ic$l_!V52^f
+zc$9-ai!dfQzRH$=NxL3qi9Pd&opbVVb4t70E>BuiPs9^norzUO;?sQW=~h;aXQ;4Z
+zs8n~?3*xY&M+kYy)tuewoR25zqGUvOm_}l5e1Hu<av?Nb7#FBd*A>=V*SgHEWE{i3
+zp%!$M-jUtBG)kWzA2|D7hA3BSOh2AsV}(13t_qLYj7QsC+IoA=<aw9=ob6CmfxEc3
+zXH0hUEeY8d-V#@J4ZK4W4hMMn5IA_CzhD*MVWj1&R*alHy9*x9_6wtgKkvb!oCZg=
+z4ELS5Yv2<aaNmjhN4SGC()fHU7Ya>6ID~NdS(iGx;uBJ_9rg3!4o)u-o4ePsiSS&{
+z3AHw-;D9Jfy!P`92uwLj9xQQn7$zV0&`AS4VBq=^oUgYX<gU-{Uzd+&>a%tSqAz{c
+z8s6~$U8q^xf18THPE105W%!G1m5hMRlMvldlMpL5{>#Ody?E8x_#7tT=hoOe{2bbK
+zBjR!Hidl#gT+G7%5ht1AX|Ml&?x*zWh$4C3c@{)4m&C3MJ{r3)F(2g{A&|7eEgZ30
+zT@b$o7DnvE2b#rMn4t78IIl9!V%ciBBIO4I%70ixI`!V^LF+%Njvg=E#y?V<%3!6b
+zZc~=N4yWDzUVY7bOTF2_r6<ZLfab4;POg<WIYd0R0Yj-`2AE%V^IY|I2$%3-x@%d(
+zv*P3<a4l-i;~g3L0dw>HJTO=G5Oghk_AXtETO6U|{782^!oy%ou1C%Yb*swhVWP8}
+zZ)U)J^Q5>c56&4mopd+zmZ}n`@?z0vlMUw7tZ(^oCdm_MT{D;$s!w73%^3KbyK#Sl
+zJ0JeW2hnQWjkv#$+vso9GzgiA`iY!8-;&ehU&VJWM0BDbLDroKPlhwdr~07%KKL{Y
+zt#o*Pt9~NrEZ82H*5a)Oq9cX_y?*DJINtgc=b3+Y6(2%~r<cvA;+@hMajF^AR%pD`
+zd~1TMd9HqlSUXl_*Y~F8^GWmprv`l3-2Y4y(H*vbeb?AvKiBfPwXr(&{CXJjabe`u
+z_=eNRSLMs|;aYV*ET^PARt^pj^cZ*^uPcj3vgjWisD8mm>Q}mYV`*-6@zf$;&Bgj#
+z3?&ng;VWhiyouGew5Y7yS7N)NthUtVtFErBzSO2^nH7WcBO*~qeSOtjO@HOBlITpH
+z?yMEBbC-o;y`FO}PL?UFBtlceP}abEkS#aP*DNdJEOF7JqFT`DNhpfN^<qBqvg5UW
+zIb-5(k4QgBzWw-1=Tq<B*G%PIgi4I{UZ)@SBT?ncX&kk7<hl{xi~K%TS4}hL|AiVb
+zl|MT)zqwyGu@GJ=|D47V>mt8rHJAIW$Q8^tx6#mw{_S7{u3xHLQ#;J%-!Mc!&F#)p
+z?eWR+xS~<l#{{Gs^>?Alhj#F#na_6U7x;~6v$>wj4SapvWj*G6#&QPBH`!dCq|N1>
+z6DFUz{djsCa+&$x2;m0bb3c^557$1g{DSs2+;UGE!hX#98g99tD1C&n%P(8*65aYx
+z_}5(Sv@fWKaCR6k`~79deYkoVZa(w;j~GIK=KR;2$MLGc{n69r@=bo!Ja2}YSO09j
+zS+DrmkhrdhiF3vzIAd&$*6+bq%>5Xr@<}xF`8gQ<3giF6*^{|F@?$wc`%iDgD$?Jd
+zhRbJe*HG>Ls{DXo4Abwi2E7>9dzJiE&@pP1TJ7{=K0$oJ7e^(2Y@${AaO*rQ<yC$q
+zZ%!YIrhJkpM0t5tWB`Za>x*tMj10)B7cJ1luKW>U%ij#nVEhIYbh^bFR(>b>V<W@z
+z9hftNmESr<`wCIMMYDu0U+5=7d2!?py>xzLc)kPKhbn(4zFtIVwE;@BFA(Mj($x!_
+zcoC^+Gs<}smLDes!s@3GoWb-zl)P<-@f%8>J^w28H^9ez75Sm;kK;4g_zu;-ugXsv
+zqJIr&-(d6W&=B%A$m0rYKQ^8Huj5ny5mAw0=kHMMbFlq`%<rMbm-1(8{2IA|F9(tb
+z<J*MTKTN-D|6u(KXMg8X3?EC(mADjmyG66V27mh=@G0Qgns(NI1EY|SewcW-#0H5g
+zB*p{pgWORRN?Z?Q{_g<yg1!;>4zOCL`y|enc)7&Uz?YHlE!gdEEn3>Ez~6&@mUax9
+zpK{v?d=!WeYT17ctU@~<0KR~HtAXc&UIqLe=mkI+&-kl=-Jnx}l$!ypM7~pjzec(h
+z_+ym&Ix^#piS|uE(mw{GYxdhErULQbK1pJX#P?w#TOfxzHJnY@yMUDAdBFc5eLe8M
+zP~JKq%Z09Wz8A>yu97$v7!5ieh{s#@&oM5f_ep#K_%PBpOZrDZJP5Wwgi8Mc91Eqh
+zpGVQj9|7M7-UECc$n@U<e+YaD`A~)Z*FaqMyMfHNM#^6gWWGWmMC{iBuY<nEA~3^$
+z`!Q_z*zRuNe<I)0K=${0K)iRtehcsiz<QZ}g-pL#rcaUSACDGtmjaPwKMzPfodKkt
+zegy-jJ#GM=jr!|>Xo~&Y5*J9kQsOry9*z}u_y-{KKO*rSi8o8k0pi_Y_NyeF0)#2p
+zFOccy0BO%%F`D)$a61r9v$q3j*BgPf>mLGHj}J)u{U(t1I~_>-JsU{-Jp)Ml9S5Xd
+zV}MoY7r(fH_S=o8SCc^h2}t|>6%cwJ{|g|;?;arKT7Z?v=LfPqHNc0!F9K3;-7p%C
+z&r3ks-?KpK^*2EB9|dx}?f}wmt7Q68Ano^CK+0b(af-x~fcS6kg%QvW-vW|;9!Pur
+zrKIl$(k@p?x(dj4F9%km-BVB2w0FTzl&DGc0V}{S0PX|-TR^sVJ`iu)Nz0J@yMb?k
+z|1yyJe@x;>K-O~*$a)G+5&YYLP|aC&z(1m#=YW35S+Ozaxb<Q~Lwp0s@qP%1xoiJ#
+zU@Ndyrl$ipg1!v+0Ps8@`yU7V8R*YYF6sAx?Vx9&{AS>cQ$_hxBu<cM0kXc`c$CZf
+zUIenfCxJ}A8p!(20kVCk0cm$*fcX9pdoRl8xPAnrp56y?Twero{5AvGo_i(U4rDv4
+zBz-NA?Ocj>d>1$$@6KjDb0l62WIM(I*}hRS{TTAI9UlVQfZag0<4-`g<0T;5@feWp
+z_%V>}Xa=&r>ru`c;M3U1v%W_q-Ys#p#7ZFRcS(A-#AKO1TGGeyg)S`TZHcc+ydTJR
+zTq^0)B}N0;{v!!Ou1Df)z@H+02ax@E7RdR~31m6H0J1+<0$JbXK$bHN$niKANIgsd
+zQhq#;a>vkL%Dn)j9v+g|3gmc<JX6z}fRphcmgSx)(IW8(Ht0;>5Bxduy$EFa&j8uJ
+zr+}>I9w6(vS>k9QT#MZTr2LzxhwXg{$Z^{aWP7&)S>D4ymUADF<&*;1-h3d(EnU*H
+zfShN^z#7b}BD9nAVj$_;fpEq4A4vQ;uo3b<w25|nPvQz7$JYvc5cuIl(T@E<xZbn6
+zfcP}AeWOgj8_51P17S+`+kyX$cHatw|4Ca3tb<&I<d*@rBYg?57U|alp8=gC(0)0v
+z6LbpjdhnBh+d!W$&^{jcB<L964d9Og{s#21L>=vWfz<1E;B!dd3S5bN4+EbEy-A?G
+z97uf@0O^nC1F83`fYkeJ$v+E7eUFs*A@oN2RUrLqDi%SwQ2T{ImNyZ|bu$w9BFZ@m
+zJ?;RGK2Nmkb1Wuo-y1;6y$qzj`H^<gMZkMOUkPM8(t#-AteHTTdkzpoY>x$Es@bi;
+zt;qkuxg!5QAjji%AjjiXAoaZyNPWKmq`sdLXnz=psb~KQ5URA_3%n8ez7M4R+ySfy
+zeLaxlQVHa^lma;}1p@7PK$hbKvYb@lD&)Hu$a2mH-VFK_AjfYkkmDB#<oJDhju^i~
+zK$i0ckmdXlcq{V#7RYj*2Hpbt7eMOK59Bz12gq^03CMB2PN01mkmcn8S)Lns8}d1U
+zEH4$<0Qw`0R|M#{fwYHLfwYI6K#s#U$^QwE<G&8b@n4E@rJjp`)boD;soz{6^?keK
+z-v;EoxDm*CQ3K?>__^e71X92E0;$)#fz<PJlD`c|y*&=3z8(TnfA32EULf`GXCV8(
+z8%TY`oiEnysX+Gs8$gcdxj>F{8SriNV*~I_;IlyLr4x7)_#-Y5v<4)7IgsUC3gmcB
+z2XdUfGW|b*9G_eu$L&^`ej|{2t^wW#{1tE?>T3t$Oe^gtzyy^0ED(OiZqYRD4;C#O
+zb3%Iwh~-?{4Mg4ABS2)+HUVb>p9M|@{x2{M_$%O5z^8$kGW}b?r$FaQdKnOVg6twm
+z!yWT%Z!s|$Lu?aRKwM|hVlsf_6Q_ai5?DaI1N?HyCr$?+F(k2oxEB2Nl24og{sw^s
+z#M{AtM)Ha1Q*@WW0wS)M!}!DciL=1(6<9!ou3{$O5BbDPz_$r3Ai}O=+>%dB0Y67z
+z0nrNn&5}<{1;0UH0WlK%2PL0)Dfk#OVgYdk_=vIf`iYl;zeivJaU}SMC7(DO{9b_t
+z#8KeKqmgVs5n~vgAh3WK1^#TwCw>!rhrj|N;_a9c$tPY8eyP9$BK&5|TFECmz;6*)
+zK!lCOYyq-<q7(cMfdxd&_n4O@pLhk5_6RH>B94uTh7!{uPlSy`#|bPTwqSg@zfA|9
+z2%C&f5m-R<gI@wn2cI|xe0~=muz+|c_-ldb;1lP9-y*Pph<G+;D=-~=B5X3cQ(yt{
+zF7WpO)4?ZZfxlm10TFR#OgsjeeBzbhCkQMc-VOe2$tPlNMLPr*5D_=VluJI*4Stot
+z0^)k`dH%riiP_+95LiG&oE7to<P)z3ze`{N5%E$?B#dkx<cT@pM+qz-;&Y}k7fC+x
+z8t{_@77$m1pC|dm`QYaZEFgXl{F^182p<vMAh3Yg2>yeTPs{^<v%mr({8h~Bl22R!
+zez(8^VjS%QlYs3fE(AYLU;z<ZqnL{%pSTG8B!LA)Y+Yj9l26PBKSy8zaUA&Nl23%M
+zi>?w_K#T`}t>hE`1N;_&1;p{-KPdUcYr)?vuz-m5E#_s(CoTqmkH7-rY2Y80e4+<@
+zey<|1fS3S&JSI8&Pb>gGL0|##bns_OKG6%lLtp{%4Dd@NpI8WfslWo_nc%OLd}0y!
+zEdmRO@aZuRN<MK3_?rb55YGaChvXBB!QUycfS3sWLCGhUfPY9}0TF9bOf;O7KE6O7
+z_;CUYh&J%yrnNuAjzDU!17Q;yd}9oBqrD2W0sjP?415C!U!=VTgs;|K0aC6K`Xipl
+z@_|*LiRXi6IoE+EUI5w#tOiX)nb9n_1~hRB=zL&3XyP|OmjbcAFD70H8f9~RUrf9R
+zbOR9U`eLFTbPEu#7ZWcA4bay~8<6Xv1GpAg2;}<K0K^s3ia&7qF`YoT&X{hXmHI&<
+zr@9S@DHG!W!gOK^flzTw1278M3Z%d91k$f}1L?n67#a~{lm6HNq~9$B(!VwU=|@|E
+z^p~AL`o(S_{T~}aKW78dpE-c^TZKUSrv@PXP%DuBrV~iN(ha2lVB_g0Y`|FLa{%Lj
+zg+R{l1|a8gE0FWG6Ucel4dnb|r#a7TK+Y!z5Mvor2;}@|0CFC*0%`A^K-zUTkoHSu
+z(N1kZ+M@$#1MUMqPK(qof|7_GXp{{&0hN=^L8ZifD4e(jLgY_6PvEzZFVWJV4+e%x
+z^GkX&28GuXl1{?l@cNs|k3r%!6P=^H1NHNIThiTV2d@~^uk)cKUb7@!C25|6kl!ll
+zJ0;yM>4zm92j%kGD`|(MPl7TjUnS{8Nw-M)Qc34PiM%Q#-EGrJEf#}7`NFdW{a=#K
+zIZx0pNV-bWqcK>_-y-Q5lHM$7ucUWM`YsNxMbi#R`YFk`oiEBCi*aFj4oRm=x<S%a
+zlHM%o|C00}N$-$!5}X3B1Q-v?%aL@6q^l&|LE}PuS|mLZM#lV|lKu&4*u46l+Mi3h
+zSMoPWnoft;FC}f0^sh-rqCb*;OVU?L`naU$OL_vvh4~94eWj$AO1eqX6_Va5>6;}z
+z8k2(Zt0jGnr0<gS4<+3y=>w!kv}(VU^axI-k=Ub18ejLN(_JR|kcm!!ljWuIJ4|$y
+ziEcH~T_(EML{Em(HkO}nq8m(ftBLM3(fdtw+=Zd#r<mwM6Wt(brLR^Kzr#d#o9H+!
+zGRFR-nCMay-D09UP4s>foq$ElSiZwVS4mp6e}jp?*+lO#(Od+L<xe)z`6jx_M0c2I
+ze($rfyj~NXFg29V?{zlj&o|KxCc4!`cbe$^COR%DwEPqkoo}L7n&=HCx<k^ZVLl~}
+zYSp?WeU+s5OPc41<R6ms|4O=7((g%{n|5BO+eH2-NzajVoTTd{ognE)Nsn&O)b}#K
+zDd{B1=Q$qvDUu#1X@{gQkhDwES4uiZ(yJt$FX=W(7fO1+q)R0|?i^8Hm88EZ>6Mb^
+zxfa{gAn7(qH%a=iq+29?_PHYe21(~jx>eE-NV-kZuSt5dq%W8x<U1t2RMMT2ejM~P
+z4STxhmMjBk7ThKLBd>a_YbA;R{@z6I0ln0UgBXMS#RmD+SjQ$AXud?1+^g#s>8nkA
+z$}9feQeM&F<c)mF7mDJwWUOnfU(rfFPVz~!ej}gqRg&+J@`_gSEh9t*C2!<Yp79*7
+zH>JFyl|0W~cqw@!pYkd`i^aOc_A8qCslNu?yp+6=Pk9y3Ii<X!mHbX29*{Tk_4bbz
+z8CFVpP0~u<5h3`hej}gqDqeg-$}3vQGY;mZ<c)mFtN5}E>n8iJXeD2$O9$nRe7*jY
+zMTYfK-XUovpJb9Z@+q(4*R4`s(c$Ece9EhM_n?$lw32t2>NoQB{>%2BhIL)<{}Ao(
+zHt;F0;_1tzyrNb8=KdS`lvnZhGAXa<aPmez<*Q_Tez%lYw34@(`fub@zD3GEAmtUU
+z<dLjjq^~yQXIx|xEdB2x6FnAji;@2g6P<6OYfW^UiGJNgM<Z@AmY-pwuQ$;@HPJ7b
+z=y=2_#`0#H=pqx%ILMfPwTZT9gZuYiAivSyKMZ;x|K2Ib$A`Fv_Ni!=PyZB$n-^)0
+zkCD&u-6`ekrM#k*d?8=pB2eDQr+gCjsl1+$@``5uf$BH%DesW-f0FWwR`NEJe>3ta
+zUx<AwuNjE5*ndSUd2|1be9Biz`79}~XeF<A9OaX~+K`{LE{}aKuX~leq?Nq6{wf2X
+z@(q&yg_Kvcl5enz@=3FPBcJj-#Nc%*90~icXucds|3*IL<D~p~QeM$Y-eJ<ekxzNG
+z-(M@`6|LlvtY4(re#P$u!zNhz-_K1n^Ox|Cyv*@Wa&qYWm<@WM`O$!VEUyFLQ$LDk
+z(F5tn$Y=jrr2G*nujp{{Mn2_RrF{J~QNN<Y$s75U-z??VNO?so`6QEl82Oa%wz2nk
+zwlZDRuV^LTpmT%vZRAs4o!9(Q$}3vQA2QW%<WoKeaVf8~8KQngD|wsF4c2euQ@%>d
+zmr8j>hm$w*Dc>UH+oZgr!^s=@l;14ncT0Iihm$w*DZf+7e=g+}9ZufJr~Dx)pFC6O
+zPti)=Jim;5%B%CQ0x7R(C2!WhkxzLC;(lJ6q`ab)yhG;($Ir;8e1nvKOUf%+$(!46
+z<WpXq$HmSP{a3V-H`j0EQ(m3lrAc{3hm$w*DX-4^mP>g>D|wr#|3*ILbFlB=^{A9r
+zbU1k<pYl~w-g=4XzoNs*8~K!Pk@AbAyrPx7S^q{p<<)uR&!oJfm3*A&USNGxd}m6i
+zfA^c{r%m*j)X@C%P4rJp^zTgcNtcGor<mws6a51d{W}wV`emWz%`wrdO!NyTnh)n~
+zQa1#*iEcL0)TeR1<FXrTu?779cO|XXmy;kszKRF<ego1~$j9qU6hK;y?_-iy>$eSl
+zn|u||Es?Z}e;$&winn4SMgBsR&Fd^l3kuJ+B(2u36iGM8^(#}-D*pVIq*Xk4gQQh_
+zwpP+AUizV=Rs7NhnmSY0TP8YoL@56<6TQqt`%U!kO!N^Gos4q@WBvIidX0&`&qTj#
+zqQ5yRw7dsR^eIuH{45iFvx)xDL}!i;mH(BAe#=CU8xxxU8Wa6p6a7aMeb_`#92;7m
+z$3!=o=!odh{CAn?H%#>BCVJvYq4G;i^!+9}HYPOx3=_S}M0;XG^WR~je{7;3HPL%b
+z^idOiG90VXzAiJ-xh8tKiN4=NKWU=hFwq~H=p!cjtdm3AGs#3dO?179zSl%QX`(+i
+z(Gl2}8v7q-qG#*0Lrs6}Y7@=(#apx>f0K!R(L{e>qQ~LkvQd7ziOx6C*XwkkIod5I
+z`g<mNqltdlME}`D$Ha%~<2(~R!$e<UqHUUYQcdzS<JYVtC;3)Z6;+hDuF9B`Jgu~-
+zrgTnS1%B|YvLZRDs(N`&WmyG&u`|gv%k8UJR$H1hgTL#Tm6Wvn%A};^q!M2>ej2Xi
+zDqlU4%2!;Olv`FaGpnL@`m}}K+?@KFnF~OqES#HL=Da$$EVruOnT^-Aa|UQfGJa{a
+z8b8fAKtrb2;Co+uwf);tQ&e6n+cF)EWgEUy6KcwqRb-Y-n>jN%HTjY%bgih?hrX$b
+zFIj<~s>4rPx{{Kzq&`w1az)+JrM_x(&(LA7Gb?wQ=&@^V?y>=UJiSDGosBaycW!!i
+za?<i(O>+Y3<_}=bO-d?5oii)&bAvt*-v%+gsHg-lm-A(9(K5U&=gZ2vTD)B0!a#&H
+z2Lo_T=*_{%nTx-<Wpf8^9)8x4-?sBro0ptaTvk=;tIop!vzcg|Y;ylL=Ae!8X8Y#R
+zaIP7+b=Sl6me#A$npIV|q`a(n@WD!&j?wC;8ZlDND+jD5Wtp!6KUk}qfvU?eQ1xhK
+zz{tG=mXKQEyCFw4Zh#_^rlaXu94}*07(C~k0mo%p3JVO_rYvzzb>)g&pRXjuie}Ux
+z<*M*ShuELy4H<8c0l&c4fw`%9`>RCr4%Q~YHK{=J8YY|O4H-?{J0t~vxiWb=e)tvh
+zAh))%8q+U*=92naU(Kv?-6J{Ea~I|=^TMkXFD)KQa+X&Y&AmQ%+4akY%6y4e)R0>?
+zoV=Awm)7`dhm$wEs9()9@oSm2Wy|U+>uRoG-*Vtv`PEhnDr$<B`qGo?ufuQE^3Gj!
+zRet7G<#Y1BZ7yR5HMB5!#{8m+Wxn}7cqELcFTH<dB4cWCWmUai*R<NonZ@{Z*xFEI
+z4!CK<KnPK%GwF&H{BUP&WpQP>)0y2*>ndBaxm!->qMU)-eKnI)0}E4fQhHtW^*-Gb
+z&$}cSZW+H2IxjgXX!i?~<dmP2<jhQ(C1%*1q=jOrzEDZYmsA(sFyB{I?W@5L$Lc>D
+zo7}I{Ur)KtxhuW3R}~wJ@28~sH<s5eP5;9B;7U|cR9jc=o4&NN+E{}a4p!{EGU>{|
+z$e|v69sWYPa?Y(U{t}H7Ryb5msR2K^FnLy4&BCJcvJ#HH-YYM=mAho6_d0K_v3JSS
+zX!yz;=ili3_Eqz})k)srb<SAj*JlQUm-_V@fuXK1tmW(qlbKD+tzWUihhOI9O1dya
+z&Hd-HnD~Z4HA&A5dNAG5)URBr+}EJh&S1>rOozdKiHQ>02D3({&2S;Y^_7JFNOXE-
+ziEp7<7lUN2UpW^(@RDp14VGjkDJK}z#k84{+rOsls?gp~M}ReNIwHV%Gb*cm72cV3
+z{5j<08AXO4vIgDHBRMlubA3hl62vPiS1$BAoynnHUy13Sm6R1S-TxzO%{3@V)-1wI
+zbNwN;t?XZ&GjrzE3{SBZV}f2~Y;M09dfj|EL&LU5mL)7<0H0}^^ZgxWP^q#gvnBM;
+zV44fT3<fo;Shf}ck+F-y#hTZM0gGU?{v}1_$jEq_ZD3)}WlHtll~jG`q%mpAx#DV}
+z`+iHzfQ>b4Z3cH|3ulSYFnMNGjjyhx5)ns9<q9|qeQ%gN6MK-Vx>`>8bcPj}Dyadt
+zGB;@<!x+XgNnY-dLe$uQEks`DRVD+XsP5oR<|7(+iHudTf>fXxXjV4D_v*5u@)_JN
+zI-NsK>|kpVPl%{%S!gpum5Mf&&oQ-SR<6rAZRV_noR)MsYE#|cQ>dI~RR_{dcFFYV
+zDKmyyGII`8vYtLb$upCu4YOqC9H?YH-BfZ)Rt2{32u<eAK<kr-QG;2+TvI>3USn?V
+ztfDIT(31N4++01l$<4i*J}-BXamw{GGZmNSF4A+?Bqz(Cr=MF_TeEP+vg*nkP-2;0
+zVomZ)FOCK(YQ1$8<(0+DeW;8<$&Ix&$+Nh}ou`{We%{_!w89XH)J&W14MzFS>gu9;
+zwVx47PtCMh8NQ`Ob>+2?#R`Cv6JK>zWw{=ZE))$LG|K?>*NAw#W@aY8B3G<DYQHLL
+zohdq#TH~uK!bX>&BkEmIhN!Eu8sC*$;?13w%bhK*;?m_cwadLFMb$TyLE&Eg>v_F%
+z=FLyf^t$IcGrW^TQhMczDl~gZS$SD)Jvxn{=We8aP?2h1aK|@D#*CpV&nT-w<;A6g
+zlrgM|vgTb?Ry#-`^Ok(uhl8@~eTdb=Y9c=e+!ekR#Z~CMP*+ho%m!<A2rUXzN%|KW
+z&-a!4ifVi+ZJDn&ufEE61>9N1GOYSn7p?GRRnVefbHmD%RgvwhEn;w$i(QVf;6-J%
+z6$obXik6fIlB+|j$N5_k$6WNGt^!K{dhaXI4U1FEIKjknm^3S^qP(oacSX{|dc-)3
+zuyM#+I-{b*i(&@KpPb|_s$S;H#W{{|m=ZI+q5HOZ!>Xtr!DVr7-uxTYRJbIw+_wUI
+zzxlQL-piTp&097TZC$3?8hT_pJ>;Y$<jCa<9o(sCf?nfGo{UkU>ME%StJ!{fS~L&#
+zIM5(Ci$iz!i^^f$a@5NzYHEvcP66ZLq=rfOXp%g8G8pB+<-%*4hHB9~*qU+EAB;c(
+zq2!`@oW`>Hs_IJ4IPa3mmA(>hWmVC2bv~R-mDSW@=&-(flY@Cnd^NSzmGwj9HT$zr
+z2j?v>zkUULedQ8ULkB*cFl@wfm+1}v_c&|sKQVI`<!3Hk;ME5z)UyBChwuUOl@l$v
+zfnu1W2P4J(A}E@q(QZr|A7{F;#{;ePCiy@_HFQ-fD8no<$93jbnIjaZZ%C0r`<%BT
+zwAX`$u}-HdYOXVVfZggBpVZDJm``{*6P#iCG6qjD=oB*!(;!=7Z`GoCOHADhzkz0M
+z{me0FEki4V0dII^gtRmK89}{JECc(mqb#$Dd>v&DHSofWOwR!S+0))QK}D>fT#`FI
+zS#zgP!#y4M48$AtE0$CuBCs+3^zyeGY=cD7=KS6&n~Z&N?i^Z_SO3umu*D-vGdp*g
+zEoff-R;EF754k*;rR(*+%{5dwh&|haliOSldK+x>Ak(d%F1}0yIHAl9_%h{iGJVx@
+z%o8c-rK){P%NeCtR`3y14N%K;dFNCkcuv-q;z{?#zTs^Yu(b(1oxrb?poVappWwb=
+z_%dQsGyMGNmB!uD@a5FrX!sJ?zzjdLzGWJI_Hf(8ekBYmP<3+w8N@fxcVuVinZ$P3
+zTct?h0_YL0s1<3!dDL(2=Pom68FIq+7g26{pg=<JNU#B4IJ_~*vno#3VN}Je`l;0b
+z;f<+O^OPGXyfKLk;?(5A%79OfQLz8R6dO3uF*jkbsKPv~LszT^6<<<pc<mitEb_&h
+zFh~evR@tCUFq^>_9KC+x;j}V!K@HsZ)atqlyd7ie4VBf)r!K3s>+esgw2Sko{t1G;
+zysUQW#Y^hS%1fr=aIoArRX<o;;Va=jw&vmryu+!)w{oh{yUXnI1ZE(XaPl?wipuI0
+zMdedhrp)rrnh}~&UmsRfmek=)<tsKnx3aFf*jE!${!}ga16g0O_<xdi*xt&1Z!_t)
+zN&YuFUD3Rzx5)HwY)FPLe-y+AIXnXT%J1Ro_n7d+DID}V*xTn$oWg~irVJ48{QI23
+zg>K>geRhLtH!#3<L$UflB?&%-=oj#w*j)5i*Z+Su7e4V8Wcllt|2GzQ)n+X41HC`A
+z-@^HY-&i~NJ50^xe~s^w9pL@D+(ep=(7x*1d_&$1+pqLw1N-ZLXL|oP--bRFm>!ZL
+z`D=Txb#RY2j2*PT2!;CpkTbd=iwHem9x}VWXD?k|vh@GdG}If+Alvwc?f&LuV4FVl
+z@elf}h4Ibg{hIUd@)4AONjt)yh4*(d|Lk-66OZSN4~7OivnxOGc#encd?)RR$8+J{
+zVr)F+9QdG1nvp5C_-9Z1L0nSk0{ms3_wbC@{JiJHgDd&Q$j}&NFo$D0r9JVGAnY6a
+zhn{sNT@Lc(R6Q~ZMy@9w5>(=Cl7nlZ-zonWdtT8`d|=<{4u0<X#H$k;IH7?P8aSbW
+z6B;<7ffE`yp@9<`IH7?P8aSbW6B_vcf(HKZ>0bk1b;s{VI}>*ozDrQE;l_13ZvNI`
+zxT_G~L&_@(-!I5Z(Ik1}Yy0%e>(xJ8C@K7woHs8sKQBNAUOafdc**kkot33&_}xdo
+zh}0ScNBqSHrOWW)(xUQY(ExLKn`Jrp+ByB|!1tZwD;)zDzJ4#{!Y5Mku@rn(R;HTE
+z>y+hrCBMs59-C;q<a;${dTa5qHoTX^T%PR$k$Z&{;_uQ>|5fwwJ4VKW<ZHCA5}%n1
+zaLna>PnM_J@dH_2K*03E>-Cj-m-5Z)f?+OCeQ#?Q#(~!clt(k@M*E)8Q$qjrZ(oKp
+z&l$|4e)q;9lV~TpSuNCmKQ5S2zVdo2mwda}Tebq<(!}qH!`C*2l(%83$cV3{)UQ^Q
+zr}{3FLcoiU8rK#Dlg#C*-`#1IS=wa#9B3cD`mW!_{^FC#_zYoP1wO%y5AM4&jF}us
+zg0gWg;d0^oZgu^kykwCS(p(Y=xDQ>6`amSD!tVpZ_NO7uhMTsb|Dv9DlKxuPon?j<
+zKSQB^Cx2<ao`JsssQ<(l%d_j_%XheH>2t33)#|TAHa(vWug&=?S1iHjZ1vv~9I%{_
+zPYbXP+>-|?r`nh6tG*tezpVi`d_I0H9FP6<OyTq4(+10()l16o$uT}03R_<AjZm^c
+zw$Fy!)KBq=Y^0OVp)&E^mBmHnp<lRyOt`|7m&@-Yz$esoKF5*cWiO`<Qz}@GNY~%c
+z8}2g;f&9U8Wd3SjK;I$d7(c<GO9$I&$R|JUE;6Wo82Rec?#wX&KSZ|!@B=yxBOm-U
+zi!9&NKYqY{pnCaT2Z4|MvtHVpq22Ne7Vy1IFgAYS4eN)y3e1ZpeX=k${I%ceIC@~L
+z<LLeiw07i*H`CqL&a?yPI@=GNYiaMcHehCI@y9A3Z~t_erM=f1(SBr+wf*qC$oAtm
+zjc7lfZn?A1YTfmV##4KbT1Rd=VjZ#RV{7E5pEl2EKW4RT>a}W{@J;3~p^Wvd*0|oN
+z25)csx!SJD7Q8+i?XX5|!n)NG7vVUnMO^;M0jqXrR2uHT-h9_&OVo>P)>C^YTC_V=
+z8K0rNc$Cp}&cL!`AnS(g6if7r?TzDmFNdtT4*cHmoo9gW1*&pet?_!>+N|S-Y}a(O
+z>(&VTl&5t<bGJ1C{nOTef_AaL8zW9d+IT&UeLsS<NB^GM{^;M6q07@Y?X^zOdE?RN
+zhtX%u#g;2H$I;fGT6R5TJ*{`YbsX{t`Ht68+dCRh>17>{G>+@tYduw$Wqrp`Hf0`f
+zq|6z*%v&gXywvrAGqs0XF@_c`s+sveMgG5|Ep3gpfi%^=w#J3MXIrDt?$h=1k0S3U
+z$h!q&+BC*-bW7s`v>|@e#>PdxPguwIzGXdglV-X66}Ip3c`5B3uO*>x324Kq=<hhx
+zbB10{x85$%W|(D5G5Wa?ZT^WhVpoTCA=;g=iRJFIS~tCew!bTN^JrsyZ=I%X`3&vB
+zSKG!v_GW6klK%<hS=UDEqTYQn{~yPSylt?nC`(Rn)Ck8>kte5@?R*UVgAQ77W4!T`
+zs!<K|-_jc9E4^S{ZP6^9X<B4MT9kI|rKf(H+P($#fY$T0{i43T?H8%-%ohcFin>kP
+zWwAJa%{-k}+V-b^V_6Sd6GG~F3wl)TMm*NCn&XVVQwPk?a>pS3N{i#@l@qn2t_vcd
+z$1^rrP;Z3o*h}e_hWU{|=AAqWve5rV>jJ$`ZPr}9pRLftMr)p))_TWvoX_i98|U|K
+zY|Ld_)_3dnB*viijw+qcIs{MH*>vdQD8_VSV;;s?*Z}38O1JDfep4pqdIsivI_CZr
+z@Bz;DW0lXfby~fz97g{>gPpY2T+u%H*e$yshn`2HKU1J1^egVd`nHZMEn}M<mWi*_
+zy;-#zUjrWB^m*a#C`<hEcSmS><5xNErmepP8+e;Gh4w-&-hU44)-t;1-AFCZ$Yc6=
+zq|ZV6Mr%&58t;3o+EF#;9B<dxs;hX|wP@Qo%&kZJ`cAWHwwKin-`sLG?22>#>4=8;
+z=R%i}urKz7dEndhSO;HOulw?IH0?$FT;NAN*6-YV>v8Kx2cxvSzD5mtw!oKacfvPq
+z8jX7TinZQ8^sDDGEj1c+4DOR~$Ktl&j>CO2Zu&1PZfqG|8i9Kx?lHKd@H4uwzb)PH
+zaeLuo*`D{Uj@1359H|E`aHRHJ=t!OV#>(9*o~+v4bDAUdqcf2{)scE|x+C?_C63gK
+z?=RiGc2(i-(FOUt4^4EW#wEITCx0_%ccCYLcTcP%b?-Pw>bW-;?k+*Tp0S|Mb)@=G
+z)<~4ua~bNfST;pjPQo37J9^Xdv$Rt%rkje+%6X_u8-uhFxFc~}acj6whEIvxbo?e~
+zJM?iU?Th+5JnuJHXM}EOZ&(j?{r%nAbg%N=mL$hx5v7iL_K|arK4mZL_pmiW@Auu7
+z-bX1L$dCD@=Kn;urF}2*v);q=p4RP}^&VODBxuxoQ$+i5w8sHm9)_*|9p%i_v>pVw
+z+|dPm%2StWAN?*u%Zt)BpYl{hRL>ZlFV;O{``8XKC&k?3c(>kCxZ7g6;@9{Z^LUHa
+zi*aTc&T;O=SZeVif4tt8vtM`I#d#Exra6Co{H80=UMJ@1cD)aM)`(rb-bm0RkUkRq
+z7}b7!yX8)<0Ux7IVYiN>!lyZo?mgGq-u(xx_r=0Tj<z}4#~i<9H@;fFWjW?Ez9K$u
+zMg69ZwU(2b8!(^0aon~0z`0uLg~xMtUvxZw_xl%UuqiF|8^;TGUwFK9_ra-J>ig44
+zSM8p195!(YXxQ=?$c=@}fy=ej{pnijXvjuG=KZ;lzl!|Q-BFM^Fi%T8n5(6tjyvC9
+zq@~WVOxD*`jw{Ex8|fUkWa#1&_>n2c3-6v~Ij!faQCeR7$Bw%=A5~uF=eV_EP2ubP
+z5n9ijky>6&gjgFVYNz%@ZT`W%r=Tp#&hj|nhr`QvL4GNG5amCPIJM_FVGHXgYU5GP
+zJ@=L(9r3|Odtsv-C+Il7?`_QIQ5x2zV7Yo9&=1u<+LzM58sFnL&Bgf5!8m5Z|7Nsf
+zTmy51cB*drnfq|>$L+x24jHdu9Y2P6?Nb@A9mX2`8RpATv_ZsdLEC1`7Bxhyb_rsl
+zKEy<7j!~w~n%q8=oF3yLPBX@MtyuqcdBi@$lMjs%TM;t~`O}7!55{t*2V%J+u$5lu
+zp~xDKG~xSO5t~sr8zaup?T};EdPl0ho-(#l^NBGTW4O1l#;RCsyiI%fk+)OZA3==S
+zjTmV!;up$ySWoH2zMv%m@whP#d<5(0enY-CtogU;@tKGn)w<hOb3=REd#UY@VJw>v
+z&x`nS+@{A6TfN0~9BX0IM3Ig)WBxg~-<Ii5<W6tjQkl}u_Wslwv5PU@e%)`LingDI
+zm@EM?Sps6RGd8^^<Aq-IYy4=gDW~b}M;`+I&lpp2uF<djt7EEfCu&Da&u2_EZortT
+z4RI3VhF0jCu@Cjth8Ro55__etS`lAuw9XI2Qye?aV<KaxCzjW=Z^am4_aEPZJ<e8?
+z@zAyOApt!hCX4I+81}<BiR*W`IBDZws_1j$+ZuCvN5d~-ek{NJBrVSZA4k8>^r-Wk
+z?Ppt}dftuJ@)!f1ioMk1sGt4(3HWczwy}Mj%d}g*<{pLqU&QJn&SN^;#F(EpKTx}l
+zAkJnC$JkKWt_AVjX=u-^O7=6DUSvJBXAWYT4(O9|$6z~L*DmWT+-=NPYCV1V`S8`M
+zUq&AFLphf5_<J?&PaxK1KQ+Ymw9U8CPqw>l)OGD*tgtrfV;3Axy`4zw8p)VD2jho5
+z0BF{u#<CT<QhO~mcUUgtJh69CbAJ)?iMdA|4;2?HpR7>$hR_&sA7Vw;#XKrTOhSSK
+zHx_>_2lr&$Rk)2Y5XWlbXzjXIP0O1&Lc7js(ekDrcHD*iMLg%74X+^r`y3aDX+Xyt
+z<D26*J*DquH0(PHu_hkBX<HlPE#zxK3yvyZ#&S51x#!W2|F}!#Q|)1W%-^8(K58s~
+zZ)3xYg-_d>BcMmdrYxs0LOc2iVrM1GSeLe__XquGV1LlBZ9qN$5yxGsOwb|i4=saj
+z2>PMDXp_EP>3cxfi9Y5*U9g{%xt?9)c&tlnnl&2jk2=e7*BGaEr^_<=yEaQyGxJ!Y
+z9Y>jObe1!<OpCfC0_8chiO><wDZ~&BdM3hi3bht8-kN~2n$8{g%tD=anAcFQL*pP<
+z8s@A+$)#ZJooMCWL98o>C34<VzhZp~?{m(^T*kbQcVUi3S<YDgbL`DHFKJU*JVU^q
+z>wKhfE#$hUuOS%I{g{iYuEWyTacw#P|3hEbgngKpSEKcDC~U-;31e@pGs;JmVt%T#
+z12I-S%TRkz#___>4tLJQVQ{dfY8T;7!HsLsaq6>LcCoFk*3;qNg{|^z<%{TD$<e=_
+zit*|SGhXU!Y6i}pevDXYpmV7+!Mhb>x$!%~U!eW^*$v0Cb=0Npq}BWk#0-s$IpTxy
+zhJ|ai(3|jMLZ3FQRq4>jLpZ1CI)!>a6Z(zU*L&*zu#9#7D(yz>6R_vS8PnFrgs^-2
+zjc*A1Y18-i<CinGR`$~__wvudejc)ZOJAejLfbyEo&*~>N%!NlTUB?^p2T@t+o+Y&
+z$HTVK#zN>NXhXs$)5o(fJfG@sLyWh@IxO~uLWX1ZRcz|hWlta;w;(Q$Kzwe+{tD-z
+zR-A=mFHd{o+*Ni#KY0f1!ZpPFpMiNyyD*MD*KeN1wT`-M;IU61Z0va^C;HB@$GXC$
+zWj)80_QY6J=yH5uPV?+U?Vp7%gJp=li;5edKg^xuH)Wvz>CnR!(1#P}L(i(UWbk>n
+zUE9@*J;yQZIe3O7))F!QsJp@RrRGs8=E~)mD+A4=csa)sux~HY=aPsSR17ruTsl24
+zmllM~C7$1ka%O4`cl{XpM2vse{Xo|^rMJ^DpK#s=TRj~%#y$LJSYv-YO8e-)v9=ZI
+zXT~C~V9fOx<}_mx>VRXzn`anmj<;fNGi^Zx=QQIiA!~dc95YdGaP9}&y8!KEe9ALw
+zjz8s}fX`Fq{iyGj-93nL)OwHgAZ|?k6CG15W15d)zS<D~m13Sxv{*jci<kq?CgPj)
+z^<u*E=MaZRVZCUBkLX4jd#z(p$5_2TZH@W8J&>oIhCQ>H&vtBtUtk~m_k(3AKNjpu
+z9s1%x{eG-XQCOQ;?{kPb&1JJ**3Y_~$NKWlv}iMK9i?4&8_sD|+ZluM91^}Xz7G8p
+zYZ1>RCm<dki+LgXA<7o(tFg_TQ*4JiucSO>KQqW~Si~54!lozCPNi>S84pJ!^qh|~
+zgbuW|zYc=^4sFBuFC2$5)}#ZNg!=*9`M7ZnYo2~8&jx5akU^X%&Mov<YlyRf%i!0z
+zrWyU=aN;554-;^fY4nMl!+fqX_#8enIEVGQBkV}*htJ$}HvFO3533lFdKTy8YR?a!
+zc^A%Yp|Xa%@Dr!;N*4Q*5ZR`{+-H0w$~zPD{&e^bFXsJ=nD=K}d2S$lCw0jAZozs%
+zdx0(k`!x3H;SW<_FI>08Tql1YWQ^<m#<wlI-o}``gJ*5zGsZK@7+*K_^XbOE(!Yy#
+zIjoMmhFTN9YV3`+(ggK;&@(Em4?p`+O8cki-%+_vaLkQyHP;N<-^V!L4tGwZ){1a3
+z*8$jN3f2n7&jYO^r-8?Ft!)u})+e8%V2qT1HjWA7VUC4ytT`@RYfDFI*Wh<GuXDlo
+zz_$+gjO6iUjPHVLpsE99>hn$2^$qB+O^<n`Z@^k(jPq!(mB=&P@=pB%d3iQ5+;XW4
+zF<zqmsz0h9<TKVLcE?Wa#ra0d&#=GRh&4|<8$4~(Pp~$;4ZZKfym}Y&;XU|K=I=|_
+z?mR;Oj^~piUZLL=a}WFweYK%Ho+)6h*7u^X=(-cn2s-i1dCQ_3+uJ@L`dkL%7JPmM
+zf30F%^}K2+(purejr$w1o{ZbXdej+%cs=kwhvPrg98~8Dap-6v?zOl(aFb5Jt@b{B
+z==UerhCZwRJ9KuK^94GJ!v0^_BHs&ubFw?Mc5$vQo)<+$I^c)IYsO@ZL&--K>wi$7
+zwSNqKtLKBCT$_&PHWvMCdhmH|*~Rw=9LBu<81uSUt}C1;%Jw<0&*Z*$h<I7;m(R8)
+z1bl1j9Vz|iCVZuun;Ro|rYqJ0b>`)ga}&>E!p_ad-cD(U(`s1{UqE}K4qCA<0_wKL
+zeUzSNP3UcHjL>5?<1;7vd}aSiM$Ln3U{|Gqy|P-5f@f-+&)-L$e`Fhy{=wzLF8`tJ
+zr|yLfY3tvCuGMpQu9MswbMA59xlf*DbBxH-#|*epj@jd{-q23oUYU<$_yGKcdCc0j
+zM+AJz+cNK#MRmF?%lx|h3D+E>KWUY19?V{ZKNL3pMg7ToH2yH|JQ%ClpC}zDJ686K
+zbgt+6JosnvR2(AqjTj$`_AsCKc28`WZ__S+h39~3o)&)2v&-P~-O#q`{w&^Hp7~7k
+zEu3i<;Y^d|tLN<~M?cp*((haoz6|GwdTfmI!zL|imdY#6-$TzMRo%za#hIw^8$zFy
+z<9<*t>twEVe1DKQ?>3(C^2~DB<%}M@oPqQ++%(k&<G6HV-C#dBCZZgDKCL&83(uvG
+zTgCdK&YF=QLn|)Wn|>L;b98F(>pUe_(=x;l1mnGvwxva7_|X>|e^Sq;|2)j4HciW{
+zDCS!+!}9fd_$_&w{>ob=QUB_5@j7=|DAwya=gRlxDv8k4FqBoFXKcLX#`&6MWuhf6
+zdZNCL<NOs5jm5>esICck5st?^W<DpU@tOg`D4&ABOTP-E&x-pm%l#2|Th~Y4GvWs$
+z|8vxas2`5Lcg&B*-iPP^`o7U9m!t+p$;o0S0gd@q%5=?bC?9EzQ;hjKRlXcUKDI-q
+zoAV!1_2--Nv)zy}_w&Io+0Pu+E>ru>dUmLM88NyV&3eFIQe3VWn^H3q%=t28HnYCW
+z`5a;LncGD<<7MXCj7+>%wl<hOMjB+ydgcMOek~qgTnzSPZilf<%A3n|C<mbIEsULh
+z(Q<7=wO90}-@F>Cz3UN#=-1cW-iwB*2aY@2sC<Y+Zw&sJ?D&h0_fYyBir;Tshp8v?
+z{15n*JcFJ6V8nkae_^htW0>`r+fUkf{j2%rah<IiXYwoNcE+oG63yi}6yH>iIbWbY
+zlO37!xm0;yGT%_`|Ehd*djtI%qW=Lsx}@Eyetr$;7&S_*QhI54X5PmaM<sr2qE-5E
+zt3E8{RemLJP9KV<y!0E&8>u1#I22#%F|0h}61-P7GEkuDg^WMK^64Mo+QafY!G}u-
+z%V&InkA#KgGoBc%eK|wa?*Jc{@=Ag-{FU|?mY;#VgZ0lb1b>pKE3E!)L-3_y!pbua
+z7)(Dy$#cE`D)L;{@!lg@jp&T=?@;w~{r)QTbDbVc-hsvpHhx33@2m11L-bFsuVL+v
+z>*-+qqkqN~);|8#{GsO8Q2xoGcW?0dJJ|Sgef%o?q1yLV`NPytzxl<zB4RK*$CsD{
+z{Ix~1m%v|+i_q*jzzY$Dx&@}q07Aw-S)xs1yu>JpTToLM%Gn^XP}J;REHKRmWI55m
+zlTc42@MIvKG3e<ySJ4sYygI%vaWfEBYHtA^v1sLM1$tHkKSg~jfya?vE6`H~JO;X4
+zpr-_g=OXq(Am)sFvB0!E;Kz`k4aD<ucZ$HYi-35Oojo4-4W!2jOp5|Wv%Q!xEUy=M
+z1NesprtJX!1#%t07g7Hffu8$-@35URy;i1I0dc->FOfI_h$`%n61l#S?grwvcLK+N
+z-U_7L1HeBay#@GN>P4WZ3CQ|a3-mMq^?HCTFGu1<Kud&HK3SkA4)|x3*9&zs{jfmK
+zPD$^ObO#XcF|e<f=`Aw77WgjG55peDKu=LvoOOM{$eu^~LEtvv9w5_q0G|cD1NqQp
+zdj}9rur~pjZ>5wk2Qps{ka~9m@nI4-o(mAuTG2VIBlZ>``?ng%{_<hLcF4^JJ_Aew
+zJ`KDGi2wFz{2~7s4kO4v1SB7y`O*2E5|e=FlKUcoX*OUC<l}(Ud$d4L6p(t46zFL}
+zqd1>xft*iO0@G4}oCg<4oFFkyVx+`pPzmSLeL&`KkeDygA<+gzmF@`w)1ra<AQvV1
+zhw*_GOf~y{Ak+5&S#A>$Ds-<Fm{tXR8|mdh{I|P^Xuku<d71)bJ0gLckNZGyK6VTA
+z>;ZB<?f`N=b_w)61LS<{6zJ&yavZk+IUhF*Olt#jKDGcaM*3QTX$?Tm$5J5YV~N1D
+z#X#Co4p6rXAm^h?U|I$cO|{Pez6trQ$VB^i5XgD60m$)NFVNEh<oK->=vfV<os<JP
+z|MDe2Px9SB&c_TO%T1CvL1HhM`aBZoc^$}k(;?Hh$n^VwoOdf_daX<^1adw(WcqBG
+zei0B=*e3&TM1Lm<OgjX-IR*OYmY5W$Y1e~)k-)Ucz&P+H0ohNRK+go=3!oDOdZK`o
+zixikv1&o2*W+3gLRpK5X+rc+TvmHAHra4X)`7(eHqy3vt5q9%{#3mr^FCU0E+uL)1
+zJAfH7{TSp>l)G18+CJd#z<(XM6Sx&fy><xnJOISQ9{XyU-XPP<fqz8$L6rL_P#Z7W
+zaTp6POv1ij;tn9&(+XsJHUQb4wK9D+5JkCD1g1>@vOR~#$#Q_4C$9s4kMtct+Etf8
+z&oe;kyHlWNE0A{eAdq&`0%U*I3iOmqx>VA6K=yBjOiz;O6M*cW1O0l0h&KwbUo#{o
+z0NJl&;Im(cWdHX8+1@?CmyzBDWP6_x=;;Kqy;}u(I)H3%8&LPJK(@C*pr;(jc9fvL
+zUjaK$7wy<0ajnD#iRD1H%O&aA5|d>5z64R<Rv`PcS>k$$O%h9iY?lp)A$Cs?m=-7b
+zhwuRi%I^cRzdIz|DRDFK4`@dlko|o?pyxgyrj&gHkmauivfmD%u3sR_n+)W5CjhCx
+zc!8ccAj^vu=!pWdoL=aM<?I1ce=iI4Y?1V4N#6(Lct@XsHzoq(5vZ}=D2WHp6m+-5
+zoj|;i(Y_VPdOHMqHUrs@2Z5}=1<3kumN*Fr6S7YLvix4u$9^3I(k@;HvR``ydR_*y
+z{G9?lJAf>AE0E=`2eMx+0zEeaX%~xSdcI6|0qHj~fHz^>90Jqw&_AZ<0GaL<n07M|
+zDzrC9Tn+qRl)C|&8@79`#8M#b$_9i<x+e%sJC>+vdysw*$oB6S=-CH^s@>fJ(>j6g
+zA>Vz1U%o-0rv*qoHUUwjeKqh^l+z&4b2AYByL_cUPc3j2%B>QZRtltC3GhSYD-`Hi
+z47?fn@&%^l0S|$nBhcd#XiotiMEVSYo+RKckh@4=+GOBg!Jj11GeMv|8h8NdQ35@Y
+zz*`}w2~0b7mZrTAey>2!A%XVSfz<0(;NQUS5a`(gY=Hb`foTr{{|<heKu@bc`)VLu
+zq`N_2S}BnBu^7m8HwQ?&atrjhfE<?$fu7kw=C=W9PZI=sA|<U!x*K*t{_6rg&j7iO
+zI&2~yOaii;NkD``_Bh}ts3%&WCkogLI#Qr#|GA>yuS@I%VkxzE0BKiMK)5J(xxlnS
+z$<G5m$9jS6$83R~6yOx(pCK@9GLY>^08Ro%1M%O^Kl>rS{~RH|PoU>@AnopDAnj)-
+zkoL1fpr;E+`*}uSS|^b9vsIvHi$HrD5dZD>;m>5?df;~;*CH^j3CMZZ0K5(9Hw#Rw
+z0@Civ1$s(>w}4+FFs%?syIU;KlPA#b0^+}YHvX`_8NfA=OA?qi8OZu<z|}~fATTWs
+zNPCSI=!pW-ULysju~6FUv9opb92RKb4+P8pI*|3f47>w!I|Zh70a;%s@OGqc6`1xQ
+zQ1>4|+If>e&uU-;@-+xdyBSD3Un$U2CD2|1WWD)7)|&(LL(VNQEd$7UX9Js%o+2>K
+z2E-EOo**zS5@<!fUf3b$$3Y<H$9{pHeL&h(w?NMxAoFhlT44X11$yoS(*AQ`T(lQA
+zkoMvd=*a-mJ{$r)vw^gq6oF~wK+2T@>EB8OdJ2K`Z;J(b@`0-$mnSf-2}rrsK-x=#
+zK+nxU+Q&+Po?0O7r%GVj13=2P0y*yY3G{3La-7!-^t1qPh1^<!X`MjIZ3XK7NuXy7
+zkmIyjpyxqg1LWESrX2(_{*60Nj8`=9Ht?earbPn316mW9<^skde=Tq<@IfN#Z38wU
+z-va{E4$JgIGX0=TPdZ=Ja}jVg@=q3+HVL=}v`t`I29WmS0N#%D*#gs2fVATo0@Lz=
+z%$EnGJ>>{Ya|3C2E`e#Qf$V1k@O9|pW`UksAWY5P3dFi+w`iL7nMGTLK53r=5esO2
+zK<HL`3wQzW72r(ZN5HAT*MMojH-J|GKLBRR^lt%sK<7$&8SpUZB1yyMwM+5#2jXRz
+zdT`goMB-x>EoO$~6K8{;A~2Eo5cqkLPedD{^93dnJHW4%eBw93Unww=_-pVVlzigl
+z;BOX~NQ5q8UY2~K1N=P#6NwSv9|N-eL?`$Z0wxkMA7d^8l25z>{3L;i#7OWLOFl6j
+z{6c|=#F5~ymwaLd_!|T!5=Vo-Rq~0@d32}1L?YISnAatrI0yW0fr&(naSYFu*goQ1
+z@S_AK65$79E|Pqr3rR@=6N%VI$K**qF$?^Bfr&({YcV|6V)?`?!RL7wFp-FLG^Py*
+zo0&j#ga4qwL?ZeW^Ni#Zv%&8Ym`HpWe4e{eo_IC*R5~z`_$2rffaDYBfo~I-NW}gx
+zhUb0c6LY}N7nn%=4fwT^PrL?vo+|<qiP&GoJSh3Z`QY<h5|~JQ3j7_CPsALE-YGDV
+z_$%;v-pTrjdEiG0OeA6qV<t&HaRK;~1tt==fX{PO$`coYUnnq<h`AfXbJs=S6Z65p
+zPhcYP3CQz&mV6@SYIKLdMB--fUzU90e}KP7U?TBx@DEEq@mlbE1tt>z7yOGxi1LYx
+z!A}yHNQA$MSuFWP5BP-w6N!lLW7bPPu>kxH0uza6fWJlZiC*wK1SS&C1pj5pCl-Rg
+zM_?jx0{Dj|pI8KbufRm&S>VTG5>h|JCEzCrOe7|PKST0~#o(t1OeDf*#w?b6VhQ+#
+z0uzZg@NbrUq7VEAfr-Sk!GA#ViA%w66PQRm2YjBFvVBDO*65uA6N%@7e^~N~rQr7p
+zOe9VMf5IpsPb>r9CNPnB9{95*pZIO?9Rd@H=Yzjk@`=mAFBF(aya4>0fovbK9Q+1>
+ziA1bhF%L*SaRvBo0uzZ-z=vDaMn-5cQNSo5&VV%ds+a_z6=(yF0HQ2yG%yJ`3YY?n
+z08;J-)KA1(6;1h-poz#E&2s8N6O%#PfH#6BP6N$yZvsu64muxr8))JT(51je&_t|>
+z(N)0Jpoz0UHvn%3O}qqj3$O_^F$FY0U*~K<u4fJ)*R4Vz*QW-c1$t-&!o|gO0<FMq
+zAf{LhnHb6#8*ntx0UQG?1datZ08vRyEAS*>Cy;)*8%Y1lLg{C1K>AY$kbbieNdMRX
+zq#tYr(%*Fg>DRh}^j~ZY%8a2ur9W~2>30f&^e+uS`jJ*3{Y58`exV!4`Oi+A2DAY=
+zpB+HX+d?4cX9JM)uocMp)(Pai>IT|?JcK_RXak-DbO6r<(tk_>HUQ59wgPFdoxlr#
+z-N4B}Dvx#+6|vUZVvUMeZEeEewulEKq9P7kdM!~AJ1jf#x5a|5po=&h*&7)Zv1LTZ
+z2;?8tG72dpdq+k^92|LQ<fw?(M|R_H$H=WCBO+QxuE*=cBYH<5J*qouRK$)kJI9QQ
+z=!)49Gb-Z2xXp1WA+7~~SI0Hs@5`s|ITfXi?;Vfw$9LfG;rQP8sEDoco$;e09*A$l
+z>-DE?I1N&#wcu~}>HAKPis(9h2mW^czxJ*^wyo>BGhA9J+ZuaG2G~oQF|eCtOKd$#
+zq&_S;&=d7V>&x+zC2wf(Oo>kvV~S+>VT)N%2&l5Efd>eKv3Y~jYJjn+m@&ABfvSKD
+zXsg?LMY=hKH#mR`c$v}Z4{tGsEJzA(*g5Z=L*94zA^M|9hWP?~e7|?@@7{C2&pq#v
+zZ~KMq4c@cc&%yEd_T}wf@AYjP+aRxPZ^Lo%@ukNbyr-U6d7{C4^T`jM^m-S4OFq!S
+zch=YFUGbfU<4NBsxN_;K%TG0UKiY9?N27Ob$9Xs|>{x{3#b@4r26B1k0vwM&vkb?L
+zr*Ayn=so-Nxu>DL&z^s_(R<;!i_d|!&#l98;kiXPUfy+O7sT0h4vr^wpWF@H-OF%1
+z-L%>S`e-W})N1fVu+e)Za5d22T@PFcz<Ka0T)7my49B&$^KDRX?U&l274}@(1G((E
+z2**=<R^Yg>XAzE9JFay!co#YsJ0X7O`A(>Z&U0|S+Ia?!OI^piK-#s~)#&}G^A=n=
+z*R=*$&UBrHE2q0w;drg<I$XKZbrsGpbzO$@Q!lK%0A<{JV{e1^+TQDXp?>zBg5$#8
+zML2%cbqnI$?D_!WAMal7h8FBzg5!pMLx<G#>u@})pVJ|oo|PWZA#^+hI)oNO!0ox!
+z110LY1jn_W^B_ImyW9(H)VtK%=)DzMfb&bC%Mky3XdU9;=)DP7uJ>+$^lI-lI6vEa
+z4vwdKSK!LqeV6(gychZ|_Cd|}t;6|p-w8P0>Ro{2jsBbcaJ_%MzrlO1e+|yB_iaGT
+zi-T_uLTe6Q7z7;#&%^ok!3{WG9lQotE)QOT^M&wY7_=R{1y^nkegIcag;(IpiSWrV
+z^s(?VoUet?!|`nR99&rqpMm4jzT^9#r27`(czS4c2y_^_3CGppGs6wumEqHHJU_e+
+z$8*DLaJ)2p8IBi+-yVjt4=;?sl;%0~7z{?3n-VZSF&qZ`<O2(y*9b2YJ_F+x!`~6!
+z3F`%hj|pEV-1VDIdY55x#Lx>E)4NXiKS{m}lOcv*5MCkdg-HtIpC!DDFh59jkZ|`_
+zhyOa^*9fEk7WwOh(Z7orZywkICO^bG2|tgMA(a0rIIl4T2y37h2G;l1b_aJ6zY8Wy
+z3|xN~VUom<CjJ$|^AvxB@b+y^{)c^bbk8ba%zqn9o*2;2j`&%^YZSko@V^qqeLsdB
+zpcj@0_wyJ=3FAH;LxC{vzcHKvjOkw>{4U9H(#G&5SQIe5#|Xbfc%1MXgqI1g5xzqB
+z=Y)MQ`D18?#Rb#D{WFHI5XOBnhM(f%1NwZKun+1L<DVpa9x<$a{QvELix}3jb&~&p
+z@D;*;Pxu<)pAg1H2*W#wA6)S8|E)g&iyh+MB{}*z5jPX=B>V#5IN^T6e?@qd@cV?n
+zOc?#bm|m1H`lAtN2(J-dAlwN3<jK#ic=-R@cLIL+^YFtVlJ6#bTHtkouL+EcF9znf
+z3w&7MC4tuj-VoRai@KWrpun>NFAKaT@HK()rZWbv4<BJJPe9=P0xt=?D)2Rd@nHcB
+zoPN8&hXh_0_^iMigjxTs&%4v#DR8&IhXq~`cun99fqlE&`E?6?Sl|VLR|H-ccthaE
+z-R}G}fe#71An>Zd7X{uBxUos(N4OQoQ^Sgf-#73w;lm{V2H{!4|3ElR`13x8KTo)w
+z@B(3r@Dkw@gqI2bGvbF9JS&9%hwv)l9Zxy(vxJ)ouMzGiyiPby_#)v`gf9{P5#cL@
+z8^B1%{I3yiCcHuTCBioe<NXMX{}JII5w`yn-vfIMF!oX2r~!b`O?WHeV}!R6{yt$J
+z;a?DbmT*6;LztdM_;teVgx>`W`$Esi52s?7-vjW8;(@}S!nzY>0N?2MRq=;_XMm;h
+zcPsqAfOTT0g7FlxWOKvLZ&b*Uzm@XDbqV>5tMOGi@_od|bp!c~;ndC_%qlw|#{7K_
+zwDm!LfbdJiXN>Vt|Mt&05fCF^l_Q_+y<5a*%zRZ}<g0Szvwip=tOKY&W9Fm36$5@D
+zUzH=D?a2V~8Do6Ze;z&<n6Ju_&-UjG@fkCJ-Da2gsvP-juf9oq#>~HoClK%p^;hM{
+zXZ!XV@fl<MO8rNb+xb6)slz=-&Yv*z&xrP8`x)iPXZ!h2V4cMJXUu%reySY#Y;S*q
+z_>8OZRXOt6KL1PNGiLsNyL6@cQ{~9#0rL*=88g3I@KrhTyQzR56Q42jy98gABcJyR
+zzXR*O-G3=P=JyId$45Ex*D3xu@fkC}Tkuu6U4Ghs%oCsYC(Oq_gaPp=9w<JZBA@p!
+zr-{!P<;eBH2Loc{v-}do_o09T*d;zbhwsM)-Xrj=z>5N}34BA~C%`UI^BWiV4+VZp
+z;P(XHxyzm2u)wbfjCPHh{|SK~fI5icfr4CLz60^2EQIeL0IsyY^iq4}z)r#b#Tb*u
+z_IZ%fK#c99%CUV1iN8dA#>~h2QyB0I`KlcGyr2Cs@fl-$%%8e%k*~^;kI(C2_$l!j
+zGhgbj%8`GQ_&15qnEBmaCw;`IzbZ#Q@4tt@4#E0kjPWb!ugZ~+&*Nb*h|ie$Qh!yB
+zeDqsjm?b`A=KJsj0)C<XsvP<F93F=65}z@~NBw2~svP;V#Q!1j88iRHuVCt>{8c&f
+z*<TUVocd$TeA)i09QpX%8-~5aXUu%5zbZ%mR^ks6pE2|C{w4;*qe^_l$Y=k`Tf}FK
+za;(2@_+UVce3t(k#P^|q!k7GRjPYxY??Vtj%4GPS23%=;zXpB;3|qiB#s0|{(?|Ve
+z{it#*-vaTUAU@-2d{vHoeEtr@H;K=<8ef$oe~I{iO?<}8?-u<_l_Q`1T`h2v2FuTw
+z`CA?JitVGyk<b3IPU17J##iOY-++A@h7j=?Ghf<|svP-;eKy^5o%oEIzb4AB%8}3h
+zx-1yhSboOLm*rRG$Y=lF9}u5$HNGlGKKlc|N_@u5r{*ozzbZ#Q`w#zy_>8OZRXOt6
+z-}oQIXIzc1%8}3h$?ZX>{uo!|t8(PCKeLzkjH~fgIr7>6d5rjsncwAfk7E6)a^$nW
+z^fd7qGygHcSLMiO|LRTRGiH9b;Hz@vvp@FPR;T_LGhgbj%8}3h+k?bs%=|%-zbZ#Q
+z`+L7ie8$!IsvP<3AO1G+88ctjpDIT_`;-5h_>8OZRXOt6{~T^}>W^_XzA8sP`>Wq1
+zK4a#~`d8)1Xa6?5^TnP&7&Bj%pXFa`hq|M-!LNT5xUs`6-!Je<fj0zxbdQ^F2>ca+
+zza{WhfgkO3r)LU$T;T5uyag&!EpNZT_~)al{2hU@KGpRe&5kV(_=@Y_8-#g%{Q?kB
+z&i2%6gkhSq!{d+u%6WeOF5};F<UUw8P|o)F6k)ax-y+QR?!#axV0@oL_k58sLC^Dq
+zdHrrD%=SbdVctLd9$~h}j}d13_Bdg-H~)+<+i$CYvCcTWC-4^VOQ`Zrfnx%HUErSx
+z{Gq^pxYwbke@Nih1wJM4&jo&=!JXb2fgfpf%fkY{Ch+?L_dVq1e_P=91b*~a-SJ-(
+z_zi*oN#G9z{_S6Lr}vV;O9Fd;-5vjr1^$`9#g{=-hk*ZQb+ylwz;6n?<zaXHfWYqv
+z{L&V8{I3c8O@Y57@V^NBvB19p16S=|odO#I9})OXfxjp4&jfy7;131<BJA^3eRc}0
+z3tSNR&jtRT!2cz%_Yrq~TLtbCc*MrtJRNuz1pb!5KNk4k1%BjF%)gXgv%r%A=WSff
+z-hMz@t*<{4@)d#43H+|WUx0;HO>d{bEduKT`#k2(tiM_PyFI^V&8H*D=-^OqzrT4l
+zlAZ0(C#UhR^!!>nb7X%io`g4*YlE%BRx*~G)dKiF>#(LB*{5lKEox=rN3H0PRe(#0
+zxqX@u&j!QETubwWY3wg#g9ib$PYf7webk5>>4H82=ehn0dibq*ct7%Vu7V;hS@{1y
+zD_5>dHj>DZE-j!e>Tp*oWaF`9U$i+G^mq8%(onQW&VsUW#%*)(ie7l7_n@YQsXjV@
+z(vzQ=u`*CRrNE{hHeybR2M3H;#S*tfoxe5I`;39mh+jKW%BjCt-T30~0ZofTp1~x%
+zO4tJMGJuvyBnqcT@H7{R!D#|dQ~4a6&J99CxYU6Lc+vgA#@IgqM<YH^Sv|}7SH-(k
+z&#z6#)3a7)92ywa1m#HOavk@Bj`TtO#<1hOSXsNH(Dh~t+*+;a{8S=7UAwWg7HF-q
+zs&QIM-&Zl4_L!Bl;I-Y@4LC2Qp$ed7v6Gt>Q|L%q$M&;w6_U_eK=m-Tmzoqbp59-v
+zU7Fi5!D8Q}6#Fx&Im5D|u3i+#!j+-wNxS-=$8@zfz~a1s=f$z<G0UsOW7g8ik%}tt
+zn95-Dn6B2eX9unH#%_NLyzm~zfsspPVEBcCQ-z$BZB5uSk{&W9jF<_t%Jj_iX3SR8
+zrW!|$*wNT#k=sls2P0lj+|<lW*2>ircO+7la}eGVo{PuwseHBv%eEipR{V?8gUM`U
+z#tLbLSE8ngA7gUpP~T9ZfBa>cMgVJQ!XG#gNye-L7R*S{o>r(lGbdulbSho2^J>ne
+zg43ydGUx8h#c5h;2#2ccT2DK?usoNVP9=1Gq^#CCnqL-6*C+Q^)_W8$cN7;UzZS}8
+zj#~CiJl1Bwv<z=XAM<Oaem|knknh*@KCRUmVg1^K(^R*WlD{nzId;HGXRNH1%tf5F
+zuhjdT(%hSL^?`XaH#F^6>a?tq4!oMk&xCHfK5!*UMsoR#)iRUHs5v+Vz>M{M+P-4T
+zK|c06d|P#;4-}^FKsl!uZkAI=ah{y;x5l#*kwiR-ZEu&##9|p!^X4mNPA#3k89P3A
+z#{;kGFAp6sGn!dn;nXbeT{ozm>b>m*N?x~J%OgqA&6<tE+?<um*emITtD4KlvNQ0N
+zMiuN}X$G?=n!@}%PhT~&4WP}VhoHmW!9a2AAZw&KFbEc|71i^(Ss3f_X?wJXQc-I{
+z)<un|h4}%P1KUO%YcSfU@g!KPi{>Cn%X1n@yG!2!2G&>$Sb$@JRN6|K!F(1bJAWXe
+z=m=PuGH8D7>oBYc{26vnYJS4hb-%ml^Dx}QTG%z*f4^$ZSxAX;cFatfzpmysU!I-b
+z7aT?N6xL!GphK#<Wh3;J12jUb>O*NcJ)y#!DaL&HgjuRoN=o*G@(5xqlp-kA%(iR}
+z3?j9NmDh-hNuafUhg51AvZql8OiYh))tmEJ_3l9<YD%9Qb?UxsiK(cpthE5{&L&zN
+z)6gGGXRUlR1r|p%H3tT=y*Km+VGokd=Wxh}(5!%=(ovjN2DAw@W6+k-Oxz*4s<C`6
+zgt+>U=s-xdCwS3)9Oc@`R)rNL32J~^BVfK~;*mrEw~M;I>A)^&3-*L#b;aCjx+@iQ
+zO!Ny~T8%-yIoLXZ!xE<)-c*;*6dY4lb@96Bmw3IUJy2)L7_(B!_Vo%W2mQ@;ri?Kw
+zrEFgpDYu7{u!RTHWGn#M`|HR-GGtC=ayv)EXpN*{4viKHhG82whB1nBo-wHoxw3A?
+zcBwIG$IklwrU8p!GB%LUWhVl$OzIe<7`Ic*`hzC829h~5pG>5tk64fy8YQphvi?@w
+z<Br+gANW>ePO(I?%`Ilh%GWcQNP+h=&eD@@Ztb;ZBKbtl$s0T;RwkWF*h|!eqgc%-
+z74pwI_I5Vdm&v3u&dS64RmwH!6s99<r6aJ>Mbi=Tor{CjmCC?76QZWkY~aq;G^b~e
+zWOGN%Xe4ti4)twjkHu$lX8+iMP@g$GruUjVolBwATpF~ViYMZ^0+bnA9ycR}nv{%H
+zGP!F+?A<K$-gp)=pPsFeMqL?&$A;p$8i|Zey=;M>?5G8%dexdZv>&8%*4%U&3hz``
+zBmun!mTVVx65~tudo2!F2`iGd_*%@$jTh2Z56ouC7%cjukvS`z#0~{ruC7So<cO7v
+zplxNqCPz(pGM-C<Ei)dON)#_=+}VTsErM<Clp&vl6#z<aMeTm&N$eXBx0o7^G<BRg
+ztD@E#PA1|>t4EtCfT=SH`-kzFKr(7Va+Tuywc$u6W*OklvFc<5P51U~tgeg-U}H`j
+z;|E^l5z*F{u;#!lJdm@uV0y?Lj|D;380v~;Y@;%|J*X`%$BD}Wb6b8qHZE`yxkE=8
+zRxF2TlC*9Itx@}S(_f{=%j$1(4Ek%O#?hzUoBzoK^nU6U@nkj^0izl^7Y=&pG8T4O
+zbWJIpwsN{Ksfs3?9D}~7`UFY_O3~7s9K&Hw*{3rp9FgW!YTk;PsdVI(yakS{cs7TY
+zKA5*qdX5{lvbjvEP%AFhn4fAc;Iw<myszw^P_|-540UtHg;VS9KJ%$~-OI<OF?pzO
+z=Adb}iCe)>+8tl)xjfc_RQExr*OuxY4ItZ0nJ%-fus5n*Mr?`nkXi$ktN_6;+FF}u
+z#pW6e5NYvAt)%UuTboj9mU(>6UFuo}uC8-Z1A3^!KKAy<vpxkw3GUmJ2A93U!6Z;?
+zbh(<T#%9?}PmWEA;#J>TV{F?SS?VpDR|cBG)hk2oPMfENCjY%iOLmcak>+L%?{p(^
+zckq**2GjxSm=8QfCE$LeXE@XhpBDH8;1dLUq%b#?0!zUMQ@d&6E53X+3~d?TO#8?*
+z2Dh|3Dbs#87>J!am{M%Se5F2CwldX>z3JK^*#*0714@Q9I-;*M!eu&8+LF#S##~ul
+z+=&7>s-yyUk`9ijyG=)qrqWcEv1Srz#ix>Z2PzBSp1wh|KLf_K-!lU@!gpKsZ6sjp
+zQ@nX$WMB>=qojOuRN6Px&v7<A^~VpT)ZJA5Jl;Fi&wve1{gLf0RsGScZ6nK4sLN0t
+z##N-o+<<e(NUt5q*)5xChRzg#GeS?!xmFrSWn<rn$tar+_;L!*)s?IXyC5Y6ZrjEY
+ze9Q_5YaLl(RNJXl!Nw7(${|<D#u1bnlUkuPsZkr1%3mj~vb7^ssAXEnX5Bnv+p@Sr
+zT7CLfznwu<W*a28uR;wwMpju(6=XNK&DJZUSF4q#gISoqn=<(%Jgw1mER{LZ6ie-z
+z#+QPob~*m4@(YgmNIciHdnzAKM4P~On6R2`zuTM@#eHmccM=|eidyqc>g-O@$wN~~
+z<V^C}UCC5tE|O@9Wae4}?s&E%WiA!XgUjVEwKr1v%(RttrQhT!y+-velmBEY2h~lL
+zJ%a)>yL(&u8S=GwO!53oxw5VZckUR%yFBO+x~m7g9ACtJAKl$OYj@vAr#vMy_G$a*
+z#GdW5v;AZ9zry~4Mddq#(rt+{3-|tRqP)8P|Li6#=aJ;yw#{(2*1{*VoU_WXq*r=e
+zv}~!o-RErCJHN?;r!t>=_wXz#VBZ#~@OUq7B8A;@w@(4P9+oXj-LHu6`Gf0NQoMy!
+z;Tc_Fo4Fq1_208cvP*ltI(E|bEg`on&*iJzGzqt}dDH0j-hK8+bmsrk=(P1kYg>J+
+zyS!H^V)4_EU(zo!)JM+C)cI6ynH6tsJLdEKTY0cM-t5Oc_iyE?&wI(cf3;kDiTk(m
+z&=-%-<KDlOSM5P%)frmZA4c6sm>{2>TX}NZcK`mC+hDof`()Bh>Na6&O*q1td;eZS
+o)t?7!KI%kW*0{mSca}<q?frWRDR|nlb}h(W{>!?T06*XUUsb2uT>t<8
+
+literal 0
+HcmV?d00001
+
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+new file mode 100644
+index 00000000000000..5d331b8ed22252
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+@@ -0,0 +1,34 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #cgo CFLAGS: -Wno-deprecated-declarations
++// #cgo LDFLAGS: -L /Library/Developer/CommandLineTools/usr/lib/swift/macosx ${SRCDIR}/CryptoKit.o
++import "C"
++import "unsafe"
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func base(b []byte) *C.uchar {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*C.uchar)(unsafe.Pointer(&b[0]))
++}
++
++func sbase(b []byte) *C.char {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*C.char)(unsafe.Pointer(&b[0]))
++}
++
++func pbase(b []byte) unsafe.Pointer {
++	if len(b) == 0 {
++		return nil
++	}
++	return unsafe.Pointer(&b[0])
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
+new file mode 100644
+index 00000000000000..dfc73697c392f8
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
+@@ -0,0 +1,43 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++#ifndef CRYPTOKIT_H
++#define CRYPTOKIT_H
++
++#include <stdint.h>
++#include <stddef.h>
++
++// AES GCM encryption and decryption
++int encryptAESGCM(const uint8_t* key, size_t keyLength, 
++                         const uint8_t* data, size_t dataLength, 
++                         const uint8_t* nonce, size_t nonceLength, 
++                         const uint8_t* aad, size_t aadLength, 
++                         uint8_t* cipherText, size_t cipherTextLength, 
++                         uint8_t* tag);
++int decryptAESGCM(const uint8_t* key, size_t keyLength, 
++                         const uint8_t* data, size_t dataLength, 
++                         const uint8_t* nonce, size_t nonceLength, 
++                         const uint8_t* aad, size_t aadLength, 
++                         const uint8_t* tag, size_t tagLength, 
++                         uint8_t* out, size_t* outLength);
++
++// Generates an Ed25519 keypair.
++// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key).
++// The public key is 32 bytes.
++void generateKeyEd25519(uint8_t* key);
++int newPrivateKeyEd25519FromSeed(uint8_t* key, const uint8_t* seed);
++int newPublicKeyEd25519(uint8_t* key, const uint8_t* pub);
++int signEd25519(const uint8_t* privateKey, const uint8_t* message, size_t messageLength, uint8_t* sigBuffer);
++int verifyEd25519(const uint8_t* publicKey, const uint8_t* message, size_t messageLength, const uint8_t* sig);
++
++// HKDF key derivation
++int extractHKDF(int32_t hashFunction, 
++                      const uint8_t* secret, size_t secretLength, 
++                      const uint8_t* salt, size_t saltLength, 
++                      uint8_t* prk, size_t prkLength);
++int expandHKDF(int32_t hashFunction,
++                        const uint8_t* prk, size_t prkLength,
++                        const uint8_t* info, size_t infoLength,
++                        uint8_t* okm, size_t okmLength);
++
++#endif /* CRYPTOKIT_H */
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
+new file mode 100644
+index 00000000000000..2fa15c8fa5529a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
+@@ -0,0 +1,72 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++import (
++	"errors"
++)
++
++// GenerateKeyEd25519 generates an Ed25519 private key using the Swift implementation.
++func GenerateKeyEd25519(key []byte) {
++	C.generateKeyEd25519(base(key))
++}
++
++// NewPrivateKeyEd25519FromSeed generates an Ed25519 private key from a seed.
++func NewPrivateKeyEd25519FromSeed(key, seed []byte) error {
++	result := C.newPrivateKeyEd25519FromSeed(base(key), base(seed))
++	if result != 0 {
++		return errors.New("failed to generate Ed25519 key from seed")
++	}
++	return nil
++}
++
++// NewPublicKeyEd25519 creates a new Ed25519 public key from raw bytes.
++func NewPublicKeyEd25519(key, pub []byte) error {
++	result := C.newPublicKeyEd25519(base(key), base(pub))
++	if result != 0 {
++		return errors.New("failed to create Ed25519 public key")
++	}
++	return nil
++}
++
++// SignEd25519 signs a message using the provided private key.
++func SignEd25519(sig, privateKey, message []byte) error {
++	result := C.signEd25519(base(privateKey), base(message), C.size_t(len(message)), base(sig))
++	if result < 0 {
++		switch result {
++		case -1:
++			return errors.New("invalid inputs to SignEd25519")
++		case -2:
++			return errors.New("failed to reconstruct private key")
++		case -3:
++			return errors.New("failed to sign the message")
++		case -4:
++			return errors.New("signature buffer too small")
++		default:
++			return errors.New("unknown error in SignEd25519")
++		}
++	}
++	return nil
++}
++
++// VerifyEd25519 verifies a signature using the provided public key and message.
++func VerifyEd25519(publicKey, message, sig []byte) error {
++	result := C.verifyEd25519(base(publicKey), base(message), C.size_t(len(message)), base(sig))
++	switch result {
++	case 1:
++		return nil // Valid signature
++	case 0:
++		return errors.New("ed25519: invalid signature")
++	case -1:
++		return errors.New("invalid inputs to VerifyEd25519")
++	case -2:
++		return errors.New("failed to reconstruct public key")
++	default:
++		return errors.New("unknown error in VerifyEd25519")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+new file mode 100644
+index 00000000000000..458e9eb57416b1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+@@ -0,0 +1,36 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++
++// EncryptAESGCM performs AES-GCM encryption using Swift.
++func EncryptAESGCM(key, plaintext, nonce, additionalData, ciphertext, tag []byte) int {
++	err := C.encryptAESGCM(
++		base(key), C.size_t(len(key)),
++		base(plaintext), C.size_t(len(plaintext)),
++		base(nonce), C.size_t(len(nonce)),
++		base(additionalData), C.size_t(len(additionalData)),
++		base(ciphertext), C.size_t(len(ciphertext)),
++		base(tag),
++	)
++	return int(err)
++}
++
++// DecryptAESGCM performs AES-GCM decryption using Swift.
++func DecryptAESGCM(key, ciphertext, nonce, additionalData, tag, plaintext []byte) (int, int) {
++	var decSize C.size_t
++	err := C.decryptAESGCM(
++		base(key), C.size_t(len(key)),
++		base(ciphertext), C.size_t(len(ciphertext)),
++		base(nonce), C.size_t(len(nonce)),
++		base(additionalData), C.size_t(len(additionalData)),
++		base(tag), C.size_t(len(tag)),
++		base(plaintext), &decSize,
++	)
++	return int(decSize), int(err)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
+new file mode 100644
+index 00000000000000..da161adcd88ea6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
+@@ -0,0 +1,77 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++import (
++	"crypto"
++	"errors"
++)
++
++// ExtractHKDF performs the extract step of HKDF using the specified hash function.
++func ExtractHKDF(hash crypto.Hash, secret, salt []byte) ([]byte, error) {
++	h, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// Allocate buffer for derived key
++	prk := make([]byte, hash.Size())
++
++	// Call Swift function
++	result := C.extractHKDF(
++		h,
++		base(secret), C.size_t(len(secret)),
++		base(salt), C.size_t(len(salt)),
++		base(prk), C.size_t(len(prk)),
++	)
++
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
++	return prk, nil
++}
++
++func ExpandHKDF(hash crypto.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	h, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// Allocate buffer for derived key
++	expandedKey := make([]byte, keyLength)
++
++	// Call Swift function
++	result := C.expandHKDF(
++		h,
++		base(pseudorandomKey), C.size_t(len(pseudorandomKey)),
++		base(info), C.size_t(len(info)),
++		base(expandedKey), C.size_t(len(expandedKey)),
++	)
++
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
++	return expandedKey, nil
++}
++
++func cryptoHashToSwift(hash crypto.Hash) (C.int32_t, error) {
++	switch hash {
++	case crypto.SHA1:
++		return 1, nil
++	case crypto.SHA256:
++		return 2, nil
++	case crypto.SHA384:
++		return 3, nil
++	case crypto.SHA512:
++		return 4, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+new file mode 100644
+index 00000000000000..27a42bfc89ca06
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+@@ -0,0 +1,306 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++//go:generate go run github.com/microsoft/go-crypto-darwin/cmd/gentestvectors -out vectors_test.go
++
++type cipherGCMTLS uint8
++
++const (
++	cipherGCMTLSNone cipherGCMTLS = iota
++	cipherGCMTLS12
++	cipherGCMTLS13
++)
++
++const (
++	// AES block size is the same for all key sizes
++	aesBlockSize         = C.kCCBlockSizeAES128
++	gcmTagSize           = 16
++	gcmStandardNonceSize = 12
++	// TLS 1.2 additional data is constructed as:
++	//
++	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
++	gcmTls12AddSize = 13
++	// TLS 1.3 additional data is constructed as:
++	//
++	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
++	gcmTls13AddSize      = 5
++	gcmTlsFixedNonceSize = 4
++)
++
++type aesCipher struct {
++	key  []byte
++	kind C.CCAlgorithm
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	var alg C.CCAlgorithm
++	switch len(key) {
++	case 16, 24, 32:
++		alg = C.kCCAlgorithmAES
++	default:
++		return nil, errors.New("crypto/aes: invalid key size")
++	}
++	c := &aesCipher{
++		key:  slices.Clone(key),
++		kind: alg,
++	}
++	return c, nil
++}
++
++func (c *aesCipher) BlockSize() int { return aesBlockSize }
++
++func (c *aesCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := C.CCCrypt(
++		C.kCCEncrypt,          // Operation
++		C.CCAlgorithm(c.kind), // Algorithm
++		0,                     // Options
++		pbase(c.key),          // Key
++		C.size_t(len(c.key)),  // Key length
++		nil,                   // IV
++		pbase(src),            // Input
++		C.size_t(blockSize),   // Input length
++		pbase(dst),            // Output
++		C.size_t(blockSize),   // Output length
++		nil,                   // Output length
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/aes: encryption failed")
++	}
++}
++
++func (c *aesCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := C.CCCrypt(
++		C.kCCDecrypt,          // Operation
++		C.CCAlgorithm(c.kind), // Algorithm
++		0,                     // Options
++		pbase(c.key),          // Key
++		C.size_t(len(c.key)),  // Key length
++		nil,                   // IV
++		pbase(src),            // Input
++		C.size_t(blockSize),   // Input length
++		pbase(dst),            // Output
++		C.size_t(blockSize),   // Output length
++		nil,                   // Output length
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/aes: decryption failed")
++	}
++}
++
++type aesGCM struct {
++	key []byte
++	tls cipherGCMTLS
++	// minNextNonce is the minimum value that the next nonce can be, enforced by
++	// all TLS modes.
++	minNextNonce uint64
++	// mask is the nonce mask used in TLS 1.3 mode.
++	mask uint64
++	// maskInitialized is true if mask has been initialized. This happens during
++	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
++	maskInitialized bool
++}
++
++type noGCM struct {
++	cipher.Block
++}
++
++// NewGCM constructs a GCM block mode for AES using the cryptokit package
++func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
++	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
++		return nil, errors.New("crypto/aes: GCM tag and nonce sizes can't be non-standard at the same time")
++	}
++	// Fall back to standard library for GCM with non-standard nonce or tag size.
++	if nonceSize != gcmStandardNonceSize {
++		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
++	}
++	if tagSize != gcmTagSize {
++		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++	}
++	return &aesGCM{key: c.key, tls: cipherGCMTLSNone}, nil
++}
++
++func (g *aesGCM) NonceSize() int { return gcmStandardNonceSize }
++
++func (g *aesGCM) Overhead() int { return gcmTagSize }
++
++func (g *aesGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if uint64(len(plaintext)) > ((1<<32)-2)*aesBlockSize || len(plaintext)+gcmTagSize < len(plaintext) {
++		panic("cipher: message too large for GCM")
++	}
++	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
++		panic("cipher: message too large for buffer")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
++		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
++		}
++		counter := bigUint64(nonce[gcmTlsFixedNonceSize:])
++
++		// TLS 1.3 Masking
++		if g.tls == cipherGCMTLS13 {
++			if !g.maskInitialized {
++				g.mask = counter
++				g.maskInitialized = true
++			}
++			// Apply mask to the counter
++			counter ^= g.mask
++		}
++
++		// Enforce monotonicity and max limit
++		const maxUint64 = 1<<64 - 1
++		if counter == maxUint64 {
++			panic("cipher: nonce counter must be less than 2^64 - 1")
++		}
++		if counter < g.minNextNonce {
++			panic("cipher: nonce counter must be strictly monotonically increasing")
++		}
++
++		defer func() {
++			g.minNextNonce = counter + 1
++		}()
++	}
++
++	// Make room in dst to append plaintext+overhead.
++	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, plaintext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	tag := out[len(out)-gcmTagSize:]
++	err := cryptokit.EncryptAESGCM(g.key, plaintext, nonce, additionalData, out[:len(out)-gcmTagSize], tag)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++	return ret
++}
++
++var errOpen = errors.New("cipher: message authentication failed")
++
++func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if len(ciphertext) < gcmTagSize {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > ((1<<32)-2)*aesBlockSize+gcmTagSize {
++		return nil, errOpen
++	}
++	// BoringCrypto does not do any TLS check when decrypting, neither do we.
++
++	// Ensure we don't process if ciphertext lacks both ciphertext and tag
++	if len(ciphertext) < gcmTagSize {
++		return nil, errors.New("decryption failed: ciphertext too short for tag")
++	}
++
++	tag := ciphertext[len(ciphertext)-gcmTagSize:]
++	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
++
++	// Make room in dst to append ciphertext without tag.
++	ret, out := sliceForAppend(dst, len(ciphertext))
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, ciphertext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	decSize, err := cryptokit.DecryptAESGCM(g.key, ciphertext, nonce, additionalData, tag, out)
++	if err != 0 || int(decSize) != len(ciphertext) {
++		// If the decrypted data size does not match, zero out `out` and return `errOpen`
++		for i := range out {
++			out[i] = 0
++		}
++		return nil, errOpen
++	}
++	return ret, nil
++}
++
++// NewGCMTLS returns a GCM cipher specific to TLS
++// and should not be used for non-TLS purposes.
++func NewGCMTLS(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS12}, nil
++}
++
++// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
++// for non-TLS purposes.
++func NewGCMTLS13(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS13}, nil
++}
++
++func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(C.kCCEncrypt, c.kind, c.key, iv)
++}
++
++func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(C.kCCDecrypt, c.kind, c.key, iv)
++}
++
++// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
++func sliceForAppend(in []byte, n int) (head, tail []byte) {
++	if total := len(in) + n; cap(in) >= total {
++		head = in[:total]
++	} else {
++		head = make([]byte, total)
++		copy(head, in)
++	}
++	tail = head[len(in):]
++	return
++}
++
++func bigUint64(b []byte) uint64 {
++	_ = b[7] // bounds check hint to compiler; see go.dev/issue/14808
++	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+new file mode 100644
+index 00000000000000..865e22ab6a3dda
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+@@ -0,0 +1,16 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package xcrypto
++
++// This file does not have build constraints to
++// facilitate using BigInt in Go crypto.
++// Go crypto references BigInt unconditionally,
++// even if it is not finally used.
++
++// A BigInt is the big-endian bytes from a math/big BigInt,
++// which are normalized to remove any leading 0 byte.
++// Windows BCrypt accepts this specific data format.
++// This definition allows us to avoid importing math/big.
++// Conversion between BigInt and *big.Int is in xcrypto/bbig.
++type BigInt []byte
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
+new file mode 100644
+index 00000000000000..375bc368162acb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
+@@ -0,0 +1,21 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build go1.24 && darwin
++
++package xcrypto
++
++// The following noescape and nocallback directives are used to prevent the Go
++// compiler from allocating function parameters on the heap. See
++// https://github.com/golang/go/blob/0733682e5ff4cd294f5eccb31cbe87a543147bc6/src/cmd/cgo/doc.go#L439-L461
++//
++// If possible, write a C wrapper function to optimize a call rather than using
++// this feature so the optimization will work for all supported Go versions.
++//
++// This is just a performance optimization. Only add functions that have been
++// observed to benefit from these directives, not every function that is merely
++// expected to meet the noescape/nocallback criteria.
++
++// #cgo noescape SecRandomCopyBytes
++// #cgo nocallback SecRandomCopyBytes
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+new file mode 100644
+index 00000000000000..9f3a8f92bd43fc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+@@ -0,0 +1,122 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++type cbcCipher struct {
++	blockSize int
++	cryptor   C.CCCryptorRef
++}
++
++func newCBC(operation C.CCOperation, kind C.CCAlgorithm, key, iv []byte) *cbcCipher {
++	var blockSize int
++	switch kind {
++	case C.kCCAlgorithmAES:
++		blockSize = aesBlockSize
++	case C.kCCAlgorithmDES, C.kCCAlgorithm3DES:
++		blockSize = desBlockSize
++	default:
++		panic("invalid algorithm")
++	}
++
++	// Create and initialize the cbcMode struct with CCCryptorCreate here
++	x := &cbcCipher{blockSize: blockSize}
++	status := C.CCCryptorCreateWithMode(
++		operation,           // Specifies whether encryption or decryption is performed (kCCEncrypt or kCCDecrypt).
++		C.kCCModeCBC,        // Mode of operation, here explicitly set to CBC (Cipher Block Chaining).
++		C.CCAlgorithm(kind), // The encryption algorithm (e.g., kCCAlgorithmAES128, kCCAlgorithmDES).
++		C.ccNoPadding,       // Padding option, set to no padding; padding can be handled at a higher level if necessary.
++		pbase(iv),           // Initialization Vector (IV) for the cipher, required for CBC mode. Should be nil for ECB mode.
++		pbase(key),          // Pointer to the encryption key.
++		C.size_t(len(key)),  // Length of the encryption key in bytes.
++		nil,                 // Tweak key, used only for XTS mode; here set to nil as it’s not required for CBC.
++		0,                   // Length of the tweak key, set to 0 as tweak is nil.
++		0,                   // Number of rounds, mainly for RC2 and Blowfish; not used here, so set to 0.
++		0,                   // Mode options for CTR and F8 modes; not used for CBC, so set to 0.
++		&x.cryptor,          // Pointer to the CCCryptorRef output, which will hold the state for encryption or decryption.
++	)
++
++	if status != C.kCCSuccess {
++		panic("crypto/des: CCCryptorCreate failed")
++	}
++
++	runtime.SetFinalizer(x, (*cbcCipher).finalize)
++	return x
++
++}
++
++func (x *cbcCipher) finalize() {
++	if x.cryptor != nil {
++		C.CCCryptorRelease(x.cryptor)
++		x.cryptor = nil
++	}
++}
++
++func (x *cbcCipher) BlockSize() int { return x.blockSize }
++
++func (x *cbcCipher) CryptBlocks(dst, src []byte) {
++	if inexactOverlap(dst, src) {
++		panic("crypto/cipher: invalid buffer overlap")
++	}
++	if len(src)%x.blockSize != 0 {
++		panic("crypto/cipher: input not full blocks")
++	}
++	if len(dst) < len(src) {
++		panic("crypto/cipher: output smaller than input")
++	}
++	if len(src) == 0 {
++		return
++	}
++	var outLength C.size_t
++	status := C.CCCryptorUpdate(
++		x.cryptor,          // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
++		pbase(src),         // Pointer to the input data (source buffer) to be encrypted or decrypted.
++		C.size_t(len(src)), // Length of the input data in bytes.
++		pbase(dst),         // Pointer to the output buffer (destination buffer) where the result will be stored.
++		C.size_t(len(dst)), // Size of the output buffer in bytes; must be large enough to hold the processed data.
++		&outLength,         // Pointer to a variable that will contain the number of bytes written to the output buffer.
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/cipher: CCCryptorUpdate failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++func (x *cbcCipher) SetIV(iv []byte) {
++	if len(iv) != x.blockSize {
++		panic("crypto/cipher: incorrect IV length")
++	}
++	status := C.CCCryptorReset(
++		x.cryptor, // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
++		pbase(iv), // Pointer to the new IV to be set.
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/cipher: CCCryptorReset failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
++
++func anyOverlap(x, y []byte) bool {
++	return len(x) > 0 && len(y) > 0 &&
++		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
++		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++}
++
++func inexactOverlap(x, y []byte) bool {
++	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
++		return false
++	}
++	return anyOverlap(x, y)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+new file mode 100644
+index 00000000000000..ce490c1167c536
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+@@ -0,0 +1,117 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++)
++
++const desBlockSize = C.kCCBlockSizeDES
++
++type desCipher struct {
++	key  []byte
++	kind C.CCAlgorithm
++}
++
++// NewDESCipher creates a new DES cipher block using the specified key (8 bytes).
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 8 {
++		return nil, errors.New("crypto/des: invalid key size for DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: C.kCCAlgorithmDES,
++	}
++	return c, nil
++}
++
++// NewTripleDESCipher creates a new 3DES cipher block using the specified key (24 bytes).
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 24 {
++		return nil, errors.New("crypto/des: invalid key size for 3DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: C.kCCAlgorithm3DES,
++	}
++	return c, nil
++}
++
++func (c *desCipher) BlockSize() int { return desBlockSize }
++
++func (c *desCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength C.size_t
++	status := C.CCCrypt(
++		C.kCCEncrypt,
++		C.CCAlgorithm(c.kind),
++		C.kCCOptionECBMode,
++		pbase(c.key),
++		C.size_t(len(c.key)),
++		nil,
++		pbase(src[:blockSize]),
++		C.size_t(blockSize),
++		pbase(dst[:blockSize]),
++		C.size_t(blockSize),
++		&outLength,
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/des: encryption failed")
++	}
++}
++
++func (c *desCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength C.size_t
++	status := C.CCCrypt(
++		C.kCCDecrypt,
++		C.CCAlgorithm(c.kind),
++		C.kCCOptionECBMode,
++		pbase(c.key),
++		C.size_t(len(c.key)),
++		nil,
++		pbase(src[:blockSize]),
++		C.size_t(blockSize),
++		pbase(dst[:blockSize]),
++		C.size_t(blockSize),
++		&outLength,
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/des: decryption failed")
++	}
++}
++
++// CBC mode encrypter
++func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(C.kCCEncrypt, c.kind, c.key, iv)
++}
++
++// CBC mode decrypter
++func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(C.kCCDecrypt, c.kind, c.key, iv)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+new file mode 100644
+index 00000000000000..e57bde33af4c98
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+@@ -0,0 +1,32 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++func curveToKeySizeInBits(curve string) int {
++	switch curve {
++	case "P-256":
++		return 256
++	case "P-384":
++		return 384
++	case "P-521":
++		return 521
++	default:
++		return 0
++	}
++}
++
++func curveToKeySizeInBytes(curve string) int {
++	switch curve {
++	case "P-256":
++		return (256 + 7) / 8
++	case "P-384":
++		return (384 + 7) / 8
++	case "P-521":
++		return (521 + 7) / 8
++	default:
++		return 0
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+new file mode 100644
+index 00000000000000..3bdd3937670285
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+@@ -0,0 +1,135 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <Security/Security.h>
++import "C"
++import (
++	"errors"
++	"runtime"
++	"slices"
++)
++
++type PublicKeyECDH struct {
++	_pkey C.SecKeyRef
++	bytes []byte
++}
++
++func (k *PublicKeyECDH) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++type PrivateKeyECDH struct {
++	_pkey C.SecKeyRef
++	pub   []byte
++}
++
++func (k *PrivateKeyECDH) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
++	if len(bytes) < 1 {
++		return nil, errors.New("NewPublicKeyECDH: missing key")
++	}
++	pubKeyRef, err := createSecKeyWithData(bytes, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++	pubKey := &PublicKeyECDH{pubKeyRef, slices.Clone(bytes)}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
++	return pubKey, nil
++}
++
++func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
++
++// bytes expects the public key to be in uncompressed ANSI X9.63 format
++func NewPrivateKeyECDH(curve string, pub, priv []byte) (*PrivateKeyECDH, error) {
++	key := append(slices.Clone(pub), priv...)
++	privKeyRef, err := createSecKeyWithData(key, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++	privKey := &PrivateKeyECDH{privKeyRef, pub}
++	runtime.SetFinalizer(privKey, (*PrivateKeyECDH).finalize)
++	return privKey, nil
++}
++
++func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
++	defer runtime.KeepAlive(k)
++	pubKeyRef := C.SecKeyCopyPublicKey(k._pkey)
++	if pubKeyRef == 0 {
++		return nil, errors.New("failed to extract public key")
++	}
++	pubKey := &PublicKeyECDH{pubKeyRef, k.pub}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
++	return pubKey, nil
++}
++
++func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
++	defer runtime.KeepAlive(priv)
++	defer runtime.KeepAlive(pub)
++
++	var algorithm C.CFStringRef = C.kSecKeyAlgorithmECDHKeyExchangeStandard
++
++	supported := C.SecKeyIsAlgorithmSupported(priv._pkey, C.kSecKeyOperationTypeKeyExchange, algorithm)
++	if supported == 0 {
++		return nil, errors.New("ECDH algorithm not supported for the given private key")
++	}
++
++	var cfErr C.CFErrorRef
++	// Perform the key exchange
++	sharedSecretRef := C.SecKeyCopyKeyExchangeResult(
++		priv._pkey,
++		algorithm,
++		pub._pkey,
++		C.CFDictionaryRef(0),
++		&cfErr,
++	)
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++	defer C.CFRelease(C.CFTypeRef(sharedSecretRef))
++
++	sharedSecret := cfDataToBytes(sharedSecretRef)
++	return sharedSecret, nil
++}
++
++func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, errors.New("unsupported curve")
++	}
++	keySizeInBits := curveToKeySizeInBits(curve)
++	// Generate the private key and get its DER representation
++	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++	if err != nil {
++		return nil, nil, err
++	}
++	pub, priv, err := extractECDHComponents(privKeyDER, keySize)
++	if err != nil {
++		C.CFRelease(C.CFTypeRef(privKeyRef))
++		return nil, nil, err
++	}
++	k := &PrivateKeyECDH{privKeyRef, pub}
++	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
++	return k, priv, nil
++}
++
++func extractECDHComponents(der []byte, keySize int) (pub, priv []byte, err error) {
++	// The private component is the last of the three equally-sized chunks
++	// for the elliptic curve private key.
++	if len(der) != 1+keySize*3 {
++		return nil, nil, errors.New("invalid key length: insufficient data for private component")
++	}
++	pub = der[:1+keySize*2]
++	priv = der[1+keySize*2:]
++	return
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+new file mode 100644
+index 00000000000000..fb0e207a89ff67
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+@@ -0,0 +1,181 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <Security/Security.h>
++import "C"
++import (
++	"errors"
++	"runtime"
++)
++
++type PrivateKeyECDSA struct {
++	_pkey C.SecKeyRef
++}
++
++func (k *PrivateKeyECDSA) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++func (k *PrivateKeyECDSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++type PublicKeyECDSA struct {
++	_pkey C.SecKeyRef
++}
++
++func (k *PublicKeyECDSA) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++func (k *PublicKeyECDSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, nil, keySize)
++	if err != nil {
++		return nil, errors.New("failed to encode public key to uncompressed ANSI X9.63 format")
++	}
++
++	pubKeyRef, err := createSecKeyWithData(encodedKey, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++
++	pubKey := &PublicKeyECDSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDSA).finalize)
++	return pubKey, nil
++}
++
++// NewPrivateKeyECDSA creates a new ECDSA private key using the provided curve name and parameters (x, y, d).
++func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, d, keySize)
++	if err != nil {
++		return nil, errors.New("crypto/ecdsa: failed to encode private key: " + err.Error())
++	}
++
++	privKeyRef, err := createSecKeyWithData(encodedKey, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++
++	// Wrap and finalize
++	k := &PrivateKeyECDSA{_pkey: privKeyRef}
++	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
++	return k, nil
++}
++
++func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, nil, errors.New("unsupported curve")
++	}
++
++	keySizeInBits := curveToKeySizeInBits(curve)
++	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	defer C.CFRelease(C.CFTypeRef(privKeyRef))
++	return decodeFromUncompressedAnsiX963Key(privKeyDER, keySize)
++}
++
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypeECDSA, 0, hashed)
++}
++
++func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
++	return evpVerify(pub.withKey, algorithmTypeECDSA, 0, hashed, sig) == nil
++}
++
++// encodeToUncompressedAnsiX963Key encodes the given elliptic curve point (x, y) and optional private key (d)
++// into an uncompressed ANSI X9.63 format byte slice.
++func encodeToUncompressedAnsiX963Key(x, y, d BigInt, keySize int) ([]byte, error) {
++	// Build the uncompressed key point (0x04 || x || y { || d })
++	size := 1 + keySize*2
++	if d != nil {
++		size += keySize
++	}
++	out := make([]byte, size)
++	out[0] = 0x04
++	err := encodeBigInt(out[1:], []sizedBigInt{
++		{x, keySize}, {y, keySize},
++		{d, keySize},
++	})
++	if err != nil {
++		return nil, err
++	}
++	return out, nil
++}
++
++// decodeFromUncompressedAnsiX963Key decodes the given uncompressed ANSI X9.63 format byte slice into
++// the elliptic curve point (x, y) and optional private key (d).
++func decodeFromUncompressedAnsiX963Key(key []byte, keySize int) (x, y, d BigInt, err error) {
++	if len(key) < 1 || key[0] != 0x04 {
++		return nil, nil, nil, errors.New("invalid uncompressed key format")
++	}
++	if len(key) < 1+keySize*2 {
++		return nil, nil, nil, errors.New("invalid key length")
++	}
++	x = normalizeBigInt(key[1 : 1+keySize])
++	y = normalizeBigInt(key[1+keySize : 1+keySize*2])
++	if len(key) > 1+keySize*2 {
++		d = normalizeBigInt(key[1+keySize*2:])
++		return x, y, d, nil
++	}
++	return x, y, nil, nil
++}
++
++func normalizeBigInt(b []byte) BigInt {
++	// Remove leading zero bytes
++	for len(b) > 0 && b[0] == 0 {
++		b = b[1:]
++	}
++	return b
++}
++
++// sizedBigInt defines a big integer with
++// a size that can be different from the
++// one provided by len(b).
++type sizedBigInt struct {
++	b    BigInt
++	size int
++}
++
++// encodeBigInt encodes ints into data.
++// It stops iterating over ints when it finds one nil element.
++func encodeBigInt(data []byte, ints []sizedBigInt) error {
++	for _, v := range ints {
++		if v.b == nil {
++			return nil
++		}
++		normalized := normalizeBigInt(v.b)
++		// b might be shorter than size if the original big number contained leading zeros.
++		leadingZeros := int(v.size) - len(normalized)
++		if leadingZeros < 0 {
++			return errors.New("commoncrypto: invalid parameters")
++		}
++		copy(data[leadingZeros:], normalized)
++		data = data[v.size:]
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+new file mode 100644
+index 00000000000000..f59e6f9af58cd4
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+@@ -0,0 +1,100 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin && cgo
++
++package xcrypto
++
++import (
++	"strconv"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
++	publicKeySizeEd25519 = 32
++	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
++	privateKeySizeEd25519 = 64
++	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
++	signatureSizeEd25519 = 64
++	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
++	seedSizeEd25519 = 32
++)
++
++// PublicKeyEd25519 represents an Ed25519 public key.
++type PublicKeyEd25519 []byte
++
++// PrivateKeyEd25519 represents an Ed25519 private key.
++type PrivateKeyEd25519 []byte
++
++func (k PrivateKeyEd25519) Public() PublicKeyEd25519 {
++	publicKey := make([]byte, publicKeySizeEd25519)
++	copy(publicKey, k[seedSizeEd25519:])
++	return PublicKeyEd25519(publicKey)
++}
++
++// GenerateKeyEd25519 generates a new Ed25519 private key.
++func GenerateKeyEd25519() PrivateKeyEd25519 {
++	pkeyPriv := make([]byte, privateKeySizeEd25519)
++	cryptokit.GenerateKeyEd25519(pkeyPriv)
++	return pkeyPriv
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	if len(priv) != privateKeySizeEd25519 {
++		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
++	}
++	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
++}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	if len(pub) != publicKeySizeEd25519 {
++		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
++	}
++	pkey := make([]byte, publicKeySizeEd25519)
++	err := cryptokit.NewPublicKeyEd25519(pkey, pub)
++	if err != nil {
++		return nil, err
++	}
++	return pkey, nil
++}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
++// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
++// package.
++// NewPrivateKeyEd25519FromSeed creates an Ed25519 private key from a seed.
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	if len(seed) != seedSizeEd25519 {
++		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
++	}
++	pkey := make([]byte, privateKeySizeEd25519)
++	err := cryptokit.NewPrivateKeyEd25519FromSeed(pkey, seed)
++	if err != nil {
++		return nil, err
++	}
++	return pkey, nil
++}
++
++// SignEd25519 signs the message with priv and returns a signature.
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	sig := make([]byte, signatureSizeEd25519)
++	err := cryptokit.SignEd25519(sig, priv, message)
++	if err != nil {
++		return nil, err
++	}
++	return sig, nil
++}
++
++// VerifyEd25519 reports whether sig is a valid signature of message by pub.
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	return cryptokit.VerifyEd25519(pub, message, sig)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+new file mode 100644
+index 00000000000000..fcdce4c49b6723
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+@@ -0,0 +1,338 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <Security/Security.h>
++import "C"
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"unsafe"
++)
++
++type algorithmType int
++
++const (
++	algorithmTypePSS algorithmType = iota
++	algorithmTypeRAW
++	algorithmTypePKCS1v15Enc
++	algorithmTypePKCS1v15Sig
++	algorithmTypeOAEP
++	algorithmTypeECDSA
++)
++
++// Algorithm maps for translating crypto.Hash to SecKeyAlgorithm.
++var (
++	rsaRaw = map[crypto.Hash]C.CFStringRef{
++		0: C.kSecKeyAlgorithmRSAEncryptionRaw,
++	}
++	rsaPKCS1v15Algorithms = map[crypto.Hash]C.CFStringRef{
++		crypto.SHA1:   C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1,
++		crypto.SHA224: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224,
++		crypto.SHA256: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256,
++		crypto.SHA384: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384,
++		crypto.SHA512: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512,
++		0:             C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw,
++	}
++	rsaPSSAlgorithms = map[crypto.Hash]C.CFStringRef{
++		crypto.SHA1:   C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1,
++		crypto.SHA224: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224,
++		crypto.SHA256: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256,
++		crypto.SHA384: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384,
++		crypto.SHA512: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512,
++	}
++	rsaOAEPAlgorithms = map[crypto.Hash]C.CFStringRef{
++		crypto.SHA1:   C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1,
++		crypto.SHA224: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224,
++		crypto.SHA256: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256,
++		crypto.SHA384: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384,
++		crypto.SHA512: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512,
++	}
++)
++
++type withKeyFunc func(func(C.SecKeyRef) C.int) C.int
++
++// Encrypt encrypts a plaintext message using a given key and algorithm.
++func evpEncrypt(withKey withKeyFunc, algorithmType algorithmType, plaintext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	dataRef := bytesToCFData(plaintext)
++	defer cfRelease(unsafe.Pointer(dataRef))
++
++	var encryptedDataRef C.CFDataRef
++	result := withKey(func(key C.SecKeyRef) C.int {
++		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeEncrypt, algorithm) != 1 {
++			return -1 // Algorithm not supported by the key
++		}
++		encryptedDataRef = C.SecKeyCreateEncryptedData(key, algorithm, dataRef, nil)
++		if encryptedDataRef == 0 {
++			return -1 // Encryption failed
++		}
++		return 0
++	})
++	if result != 0 {
++		return nil, errors.New("encryption failed")
++	}
++	defer cfRelease(unsafe.Pointer(encryptedDataRef))
++
++	return cfDataToBytes(encryptedDataRef), nil
++}
++
++// Decrypt decrypts a ciphertext using a given key and algorithm.
++func evpDecrypt(withKey withKeyFunc, algorithmType algorithmType, ciphertext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	msg := bytesToCFData(ciphertext)
++
++	var decryptedDataRef C.CFDataRef
++	var cfErr C.CFErrorRef
++	result := withKey(func(key C.SecKeyRef) C.int {
++		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeDecrypt, algorithm) != 1 {
++			return -1 // Algorithm not supported by the key
++		}
++		decryptedDataRef = C.SecKeyCreateDecryptedData(key, algorithm, msg, &cfErr)
++		if decryptedDataRef == 0 {
++			return -1 // Decryption failed
++		}
++		return 0 // Success
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if result != 0 || decryptedDataRef == 0 {
++		return nil, errors.New("decryption failed")
++	}
++	defer cfRelease(unsafe.Pointer(decryptedDataRef))
++
++	return cfDataToBytes(decryptedDataRef), nil
++}
++
++func evpSign(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed []byte) ([]byte, error) {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	var signedDataRef C.CFDataRef
++	var cfErr C.CFErrorRef
++	result := withKey(func(key C.SecKeyRef) C.int {
++		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeSign, algorithm) != 1 {
++			return -1 // Algorithm not supported by the key
++		}
++		signedDataRef = C.SecKeyCreateSignature(key, algorithm, bytesToCFData(hashed), &cfErr)
++		if signedDataRef == 0 {
++			return -1 // Signing failed
++		}
++		return 0 // Success
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if result != 0 || signedDataRef == 0 {
++		return nil, errors.New("signing failed")
++	}
++	defer cfRelease(unsafe.Pointer(signedDataRef))
++
++	return cfDataToBytes(signedDataRef), nil
++}
++
++func evpVerify(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed, signature []byte) error {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return err
++	}
++
++	var cfErr C.CFErrorRef
++	result := withKey(func(key C.SecKeyRef) C.int {
++		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeVerify, algorithm) != 1 {
++			return -1 // Algorithm not supported by the key
++		}
++		if C.SecKeyVerifySignature(key, algorithm, bytesToCFData(hashed), bytesToCFData(signature), &cfErr) != 1 {
++			return -1 // Verification failed
++		}
++		return 0 // Success
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return err
++	}
++
++	if result != 0 {
++		return errors.New("verification failed")
++	}
++	return nil
++}
++
++// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
++func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
++	switch hash.(type) {
++	case *sha1Hash:
++		return crypto.SHA1, nil
++	case *sha224Hash:
++		return crypto.SHA224, nil
++	case *sha256Hash:
++		return crypto.SHA256, nil
++	case *sha384Hash:
++		return crypto.SHA384, nil
++	case *sha512Hash:
++		return crypto.SHA512, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
++
++// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
++func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (C.CFStringRef, error) {
++	var algorithmMap map[crypto.Hash]C.CFStringRef
++	switch algorithmType {
++	case algorithmTypePSS:
++		algorithmMap = rsaPSSAlgorithms
++	case algorithmTypeRAW:
++		algorithmMap = rsaRaw
++	case algorithmTypePKCS1v15Enc:
++		return C.kSecKeyAlgorithmRSAEncryptionPKCS1, nil
++	case algorithmTypePKCS1v15Sig:
++		algorithmMap = rsaPKCS1v15Algorithms
++	case algorithmTypeOAEP:
++		algorithmMap = rsaOAEPAlgorithms
++	case algorithmTypeECDSA:
++		return C.kSecKeyAlgorithmECDSASignatureDigestX962, nil
++	default:
++		return 0, errors.New("unsupported algorithm type")
++	}
++
++	algorithm, ok := algorithmMap[hash]
++	if !ok {
++		return 0, errors.New("unsupported combination of algorithm type and hash")
++	}
++
++	return algorithm, nil
++}
++
++// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
++// CFDataRef and must CFRelease the CFDataRef when done.
++func bytesToCFData(buf []byte) C.CFDataRef {
++	return C.CFDataCreate(C.kCFAllocatorDefault, base(buf), C.CFIndex(len(buf)))
++}
++
++// cfDataToBytes turns a CFDataRef into a byte slice.
++func cfDataToBytes(cfData C.CFDataRef) []byte {
++	return C.GoBytes(unsafe.Pointer(C.CFDataGetBytePtr(cfData)), C.int(C.CFDataGetLength(cfData)))
++}
++
++// cfRelease releases a CoreFoundation object.
++func cfRelease(ref unsafe.Pointer) {
++	C.CFRelease(C.CFTypeRef(ref))
++}
++
++// createSecKeyWithData creates a SecKey from the provided encoded key and attributes dictionary.
++func createSecKeyWithData(encodedKey []byte, keyType, keyClass C.CFStringRef) (C.SecKeyRef, error) {
++	encodedKeyCF := C.CFDataCreate(C.kCFAllocatorDefault, base(encodedKey), C.CFIndex(len(encodedKey)))
++	if encodedKeyCF == 0 {
++		return 0, errors.New("xcrypto: failed to create CFData for private key")
++	}
++	defer C.CFRelease(C.CFTypeRef(encodedKeyCF))
++
++	attrKeys := []C.CFTypeRef{
++		C.CFTypeRef(C.kSecAttrKeyType),
++		C.CFTypeRef(C.kSecAttrKeyClass),
++	}
++
++	attrValues := []C.CFTypeRef{
++		C.CFTypeRef(keyType),
++		C.CFTypeRef(keyClass),
++	}
++
++	// Create attributes dictionary for the key
++	attrDict := C.CFDictionaryCreate(
++		C.kCFAllocatorDefault,
++		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
++		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
++		C.CFIndex(len(attrKeys)),
++		nil,
++		nil,
++	)
++	if attrDict == 0 {
++		return 0, errors.New("xcrypto: failed to create attributes dictionary")
++	}
++	defer C.CFRelease(C.CFTypeRef(attrDict))
++
++	// Generate the SecKey
++	var errorRef C.CFErrorRef
++	key := C.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return 0, err
++	}
++	return key, nil
++}
++
++// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
++func createSecKeyRandom(keyType C.CFStringRef, keySize int) ([]byte, C.SecKeyRef, error) {
++	keyAttrs := C.CFDictionaryCreateMutable(C.kCFAllocatorDefault, 0, nil, nil)
++	if keyAttrs == 0 {
++		return nil, 0, errors.New("failed to create key attributes dictionary")
++	}
++	defer C.CFRelease(C.CFTypeRef(keyAttrs))
++
++	C.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(C.kSecAttrKeyType),
++		unsafe.Pointer(keyType),
++	)
++
++	C.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(C.kSecAttrKeySizeInBits),
++		unsafe.Pointer(C.CFNumberCreate(C.kCFAllocatorDefault, C.kCFNumberIntType, unsafe.Pointer(&keySize))),
++	)
++
++	// Generate the private key
++	var errorRef C.CFErrorRef
++	var privKeyRef C.SecKeyRef = C.SecKeyCreateRandomKey(C.CFDictionaryRef(keyAttrs), &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, 0, err
++	}
++
++	// Export the private key as DER
++	privData := C.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, 0, err
++	}
++	defer C.CFRelease(C.CFTypeRef(privData))
++
++	privKeyDER := cfDataToBytes(privData)
++	if privKeyDER == nil {
++		return nil, 0, errors.New("failed to convert CFData to bytes")
++	}
++	return privKeyDER, privKeyRef, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+new file mode 100644
+index 00000000000000..2618e53134e915
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+@@ -0,0 +1,391 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"unsafe"
++)
++
++// NOTE: Implementation ported from https://go-review.googlesource.com/c/go/+/404295.
++// The cgo calls in this file are arranged to avoid marking the parameters as escaping.
++// To do that, we call noescape (including via addr).
++// We must also make sure that the data pointer arguments have the form unsafe.Pointer(&...)
++// so that cgo does not annotate them with cgoCheckPointer calls. If it did that, it might look
++// beyond the byte slice and find Go pointers in unprocessed parts of a larger allocation.
++// To do both of these simultaneously, the idiom is unsafe.Pointer(&*addr(p)),
++// where addr returns the base pointer of p, substituting a non-nil pointer for nil,
++// and applying a noescape along the way.
++// This is all to preserve compatibility with the allocation behavior of the non-commoncrypto implementations.
++
++// SupportsHash returns true if a hash.Hash implementation is supported for h.
++func SupportsHash(h crypto.Hash) bool {
++	switch h {
++	case crypto.MD4, crypto.MD5, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
++		return true
++	default:
++		return false
++	}
++}
++
++func MD4(p []byte) (sum [16]byte) {
++	result := C.CC_MD4(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: MD4 failed")
++	}
++	return
++}
++
++func MD5(p []byte) (sum [16]byte) {
++	result := C.CC_MD5(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: MD5 failed")
++	}
++	return
++}
++
++func SHA1(p []byte) (sum [20]byte) {
++	result := C.CC_SHA1(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: SHA1 failed")
++	}
++	return
++}
++
++func SHA224(p []byte) (sum [28]byte) {
++	result := C.CC_SHA224(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: SHA224 failed")
++	}
++	return
++}
++
++func SHA256(p []byte) (sum [32]byte) {
++	result := C.CC_SHA256(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: SHA256 failed")
++	}
++	return
++}
++
++func SHA384(p []byte) (sum [48]byte) {
++	result := C.CC_SHA384(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: SHA384 failed")
++	}
++	return
++}
++
++func SHA512(p []byte) (sum [64]byte) {
++	result := C.CC_SHA512(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
++	if result == nil {
++		panic("commoncrypto: SHA512 failed")
++	}
++	return
++}
++
++// cloneHash is an interface that defines a Clone method.
++//
++// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
++// but we need it now.
++type cloneHash interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() hash.Hash
++}
++
++var _ hash.Hash = (*evpHash)(nil)
++var _ cloneHash = (*evpHash)(nil)
++
++// evpHash implements generic hash methods.
++type evpHash struct {
++	ctx unsafe.Pointer
++	// ctx2 is used in evpHash.sum to avoid changing
++	// the state of ctx. Having it here allows reusing the
++	// same allocated object multiple times.
++	ctx2      unsafe.Pointer
++	init      func(ctx unsafe.Pointer) C.int
++	update    func(ctx unsafe.Pointer, data []byte) C.int
++	final     func(ctx unsafe.Pointer, digest []byte) C.int
++	blockSize int
++	size      int
++	ctxSize   int
++}
++
++func newEvpHash(init func(ctx unsafe.Pointer) C.int, update func(ctx unsafe.Pointer, data []byte) C.int, final func(ctx unsafe.Pointer, digest []byte) C.int, ctxSize, blockSize, size int) *evpHash {
++	h := &evpHash{
++		init:      init,
++		update:    update,
++		final:     final,
++		blockSize: blockSize,
++		size:      size,
++		ctxSize:   ctxSize,
++	}
++	runtime.SetFinalizer(h, (*evpHash).finalize)
++	return h
++}
++
++func (h *evpHash) finalize() {
++	if h.ctx != nil {
++		C.free(h.ctx)
++	}
++	if h.ctx2 != nil {
++		C.free(h.ctx2)
++	}
++}
++
++func (h *evpHash) initialize() {
++	if h.ctx == nil {
++		h.ctx = C.malloc(C.size_t(h.ctxSize))
++		h.ctx2 = C.malloc(C.size_t(h.ctxSize))
++		if h.init(h.ctx) != 1 {
++			C.free(h.ctx)
++			C.free(h.ctx2)
++			panic("commoncrypto: initialization failed")
++		}
++	}
++}
++
++func (h *evpHash) Reset() {
++	if h.ctx == nil {
++		// The hash is not initialized yet, no need to reset.
++		return
++	}
++	// There is no need to reset h.ctx2 because it is always reset after
++	// use in evpHash.sum.
++	h.init(h.ctx)
++	runtime.KeepAlive(h)
++}
++
++func (h *evpHash) Write(p []byte) (int, error) {
++	h.initialize()
++	if len(p) > 0 {
++		// Use a local variable to prevent the compiler from misinterpreting the pointer
++		data := p
++		if h.update(h.ctx, data) != 1 {
++			return 0, errors.New("commoncrypto: Update function failed")
++		}
++	}
++	runtime.KeepAlive(h) // Ensure the hash object is not garbage-collected
++	return len(p), nil
++}
++
++func (h *evpHash) WriteString(s string) (int, error) {
++	h.initialize()
++	if len(s) > 0 {
++		data := []byte(s)
++		if h.update(h.ctx, data) != 1 {
++			return 0, errors.New("commoncrypto: Update function failed")
++		}
++	}
++	runtime.KeepAlive(h)
++	return len(s), nil
++}
++
++func (h *evpHash) WriteByte(c byte) error {
++	h.initialize()
++	if h.update(h.ctx, []byte{c}) != 1 {
++		return errors.New("commoncrypto: Update function failed")
++	}
++	runtime.KeepAlive(h)
++	return nil
++}
++func (h *evpHash) Size() int {
++	return h.size
++}
++
++func (h *evpHash) BlockSize() int {
++	return h.blockSize
++}
++
++func (h *evpHash) Sum(b []byte) []byte {
++	h.initialize()
++	digest := make([]byte, h.size)
++	C.memcpy(h.ctx2, h.ctx, C.size_t(h.ctxSize))
++	h.final(h.ctx2, digest)
++	return append(b, digest...)
++}
++
++// Clone returns a new evpHash object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *evpHash) Clone() hash.Hash {
++	h.initialize()
++	cloned := &evpHash{
++		init:      h.init,
++		update:    h.update,
++		final:     h.final,
++		blockSize: h.blockSize,
++		size:      h.size,
++		ctxSize:   h.ctxSize,
++	}
++	cloned.ctx = C.malloc(C.size_t(h.ctxSize))
++	cloned.ctx2 = C.malloc(C.size_t(h.ctxSize))
++	C.memcpy(cloned.ctx, h.ctx, C.size_t(h.ctxSize))
++	C.memcpy(cloned.ctx2, h.ctx2, C.size_t(h.ctxSize))
++	runtime.SetFinalizer(cloned, (*evpHash).finalize)
++	runtime.KeepAlive(h)
++	return cloned
++}
++
++type md4Hash struct {
++	*evpHash
++}
++
++// NewMD4 initializes a new MD4 hasher.
++func NewMD4() hash.Hash {
++	return &md4Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_MD4_Init((*C.CC_MD4_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_MD4_Update((*C.CC_MD4_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_MD4_Final(base(digest), (*C.CC_MD4_CTX)(ctx))
++			},
++			C.sizeof_CC_MD4_CTX,
++			C.CC_MD4_BLOCK_BYTES,
++			C.CC_MD4_DIGEST_LENGTH,
++		),
++	}
++}
++
++type md5Hash struct {
++	*evpHash
++}
++
++// NewMD5 initializes a new MD5 hasher.
++func NewMD5() hash.Hash {
++	return &md5Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_MD5_Init((*C.CC_MD5_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_MD5_Update((*C.CC_MD5_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_MD5_Final(base(digest), (*C.CC_MD5_CTX)(ctx))
++			},
++			C.sizeof_CC_MD5_CTX,
++			C.CC_MD5_BLOCK_BYTES,
++			C.CC_MD5_DIGEST_LENGTH,
++		),
++	}
++}
++
++type sha1Hash struct {
++	*evpHash
++}
++
++// NewSHA1 initializes a new SHA1 hasher.
++func NewSHA1() hash.Hash {
++	return &sha1Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_SHA1_Init((*C.CC_SHA1_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_SHA1_Update((*C.CC_SHA1_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_SHA1_Final(base(digest), (*C.CC_SHA1_CTX)(ctx))
++			},
++			C.sizeof_CC_SHA1_CTX,
++			C.CC_SHA1_BLOCK_BYTES,
++			C.CC_SHA1_DIGEST_LENGTH,
++		),
++	}
++}
++
++type sha224Hash struct {
++	*evpHash
++}
++
++// NewSHA224 initializes a new SHA224 hasher.
++func NewSHA224() hash.Hash {
++	return &sha224Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_SHA224_Init((*C.CC_SHA256_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_SHA224_Update((*C.CC_SHA256_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_SHA224_Final(base(digest), (*C.CC_SHA256_CTX)(ctx))
++			},
++			C.sizeof_CC_SHA256_CTX,
++			C.CC_SHA224_BLOCK_BYTES,
++			C.CC_SHA224_DIGEST_LENGTH,
++		),
++	}
++}
++
++type sha256Hash struct {
++	*evpHash
++}
++
++// NewSHA256 initializes a new SHA256 hasher.
++func NewSHA256() hash.Hash {
++	return &sha256Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_SHA256_Init((*C.CC_SHA256_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_SHA256_Update((*C.CC_SHA256_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_SHA256_Final(base(digest), (*C.CC_SHA256_CTX)(ctx))
++			},
++			C.sizeof_CC_SHA256_CTX,
++			C.CC_SHA256_BLOCK_BYTES,
++			C.CC_SHA256_DIGEST_LENGTH,
++		),
++	}
++}
++
++type sha384Hash struct {
++	*evpHash
++}
++
++// NewSHA384 initializes a new SHA384 hasher.
++func NewSHA384() hash.Hash {
++	return &sha384Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_SHA384_Init((*C.CC_SHA512_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_SHA384_Update((*C.CC_SHA512_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_SHA384_Final(base(digest), (*C.CC_SHA512_CTX)(ctx))
++			},
++			C.sizeof_CC_SHA512_CTX,
++			C.CC_SHA384_BLOCK_BYTES,
++			C.CC_SHA384_DIGEST_LENGTH,
++		),
++	}
++}
++
++type sha512Hash struct {
++	*evpHash
++}
++
++// NewSHA512 initializes a new SHA512 hasher.
++func NewSHA512() hash.Hash {
++	return &sha512Hash{
++		evpHash: newEvpHash(
++			func(ctx unsafe.Pointer) C.int { return C.CC_SHA512_Init((*C.CC_SHA512_CTX)(ctx)) },
++			func(ctx unsafe.Pointer, data []byte) C.int {
++				return C.CC_SHA512_Update((*C.CC_SHA512_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
++			},
++			func(ctx unsafe.Pointer, digest []byte) C.int {
++				return C.CC_SHA512_Final(base(digest), (*C.CC_SHA512_CTX)(ctx))
++			},
++			C.sizeof_CC_SHA512_CTX,
++			C.CC_SHA512_BLOCK_BYTES,
++			C.CC_SHA512_DIGEST_LENGTH,
++		),
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
+new file mode 100644
+index 00000000000000..3cc2d5d31927e0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
+@@ -0,0 +1,66 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin && cgo
++
++package xcrypto
++
++import (
++	"errors"
++	"hash"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++// ExtractHKDF performs the extract step of HKDF using the specified hash function.
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	// Handle empty secret
++	if len(secret) == 0 {
++		return nil, errors.New("secret cannot be empty")
++	}
++
++	hash, err := hashToCryptoHash(h())
++	if err != nil {
++		return nil, err
++	}
++
++	// Default salt to a zero-filled array if not provided
++	if len(salt) == 0 {
++		salt = make([]byte, hash.Size())
++	}
++
++	prk, err := cryptokit.ExtractHKDF(hash, secret, salt)
++	if err != nil {
++		return nil, err
++	}
++
++	return prk, nil
++}
++
++// ExpandHKDF performs the expand step of HKDF using the specified hash function.
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	// Handle empty secret
++	if len(pseudorandomKey) == 0 {
++		return nil, errors.New("pseudorandom key cannot be empty")
++	}
++
++	hash, err := hashToCryptoHash(h())
++	if err != nil {
++		return nil, err
++	}
++
++	// Determine the maximum expandable key length based on the hash function
++	maxAllowedLength := hash.Size() * 255
++
++	// Validate requested key length
++	if keyLength > maxAllowedLength {
++		return nil, errors.New("requested key length exceeds maximum allowable size")
++	}
++
++	expandedKey, err := cryptokit.ExpandHKDF(hash, pseudorandomKey, info, keyLength)
++	if err != nil {
++		return nil, err
++	}
++
++	return expandedKey, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+new file mode 100644
+index 00000000000000..1b22b0a331f825
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+@@ -0,0 +1,113 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"errors"
++	"hash"
++	"runtime"
++	"slices"
++	"unsafe"
++)
++
++// commonCryptoHMAC encapsulates an HMAC using xcrypto.
++type commonCryptoHMAC struct {
++	ctx       C.CCHmacContext
++	alg       C.CCAlgorithm
++	key       []byte
++	output    []byte
++	size      int
++	blockSize int
++}
++
++// NewHMAC returns a new HMAC using xcrypto.
++// The function h must return a hash implemented by
++// CommonCrypto (for example, h could be xcrypto.NewSHA256).
++// If h is not recognized, NewHMAC returns nil.
++func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
++	h := fh()
++	ccDigest, err := hashToCCDigestHMAC(h)
++	if err != nil {
++		return nil // Unsupported hash function.
++	}
++
++	// Handle empty key case to match CommonCrypto's behavior.
++	if len(key) == 0 {
++		key = make([]byte, C.CC_SHA512_DIGEST_LENGTH)
++	} else {
++		key = slices.Clone(key)
++	}
++
++	hmac := &commonCryptoHMAC{
++		alg:       ccDigest,
++		key:       key,
++		size:      h.Size(),
++		blockSize: h.BlockSize(),
++	}
++
++	// Initialize the HMAC context with xcrypto.
++	C.CCHmacInit(&hmac.ctx, hmac.alg, pbase(hmac.key), C.size_t(len(hmac.key)))
++	return hmac
++}
++
++// Write adds more data to the running HMAC hash.
++func (h *commonCryptoHMAC) Write(p []byte) (int, error) {
++	if len(p) > 0 {
++		C.CCHmacUpdate(&h.ctx, unsafe.Pointer(&*addr(p)), C.size_t(len(p)))
++	}
++	runtime.KeepAlive(h)
++	return len(p), nil
++}
++
++// Sum appends the current HMAC of the data to `in`.
++func (h *commonCryptoHMAC) Sum(in []byte) []byte {
++	if h.output == nil {
++		h.output = make([]byte, h.size)
++	}
++	// Copy the context to preserve it for further operations after Sum is called.
++	hmacCtxCopy := h.ctx
++	C.CCHmacFinal(&hmacCtxCopy, pbase(h.output))
++	return append(in, h.output...)
++}
++
++// Reset resets the HMAC state to initial values.
++func (h *commonCryptoHMAC) Reset() {
++	// Re-initialize the HMAC context with the stored key and algorithm.
++	C.CCHmacInit(&h.ctx, h.alg, pbase(h.key), C.size_t(len(h.key)))
++	runtime.KeepAlive(h)
++}
++
++// Size returns the size of the HMAC output.
++func (h commonCryptoHMAC) Size() int {
++	return h.size
++}
++
++// BlockSize returns the block size of the underlying hash function.
++func (h commonCryptoHMAC) BlockSize() int {
++	return h.blockSize
++}
++
++// Mapping Go hash functions to CommonCrypto hash constants
++func hashToCCDigestHMAC(hash hash.Hash) (C.CCAlgorithm, error) {
++	switch hash.(type) {
++	case *md5Hash:
++		return C.kCCHmacAlgMD5, nil
++	case *sha1Hash:
++		return C.kCCHmacAlgSHA1, nil
++	case *sha224Hash:
++		return C.kCCHmacAlgSHA224, nil
++	case *sha256Hash:
++		return C.kCCHmacAlgSHA256, nil
++	case *sha384Hash:
++		return C.kCCHmacAlgSHA384, nil
++	case *sha512Hash:
++		return C.kCCHmacAlgSHA512, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+new file mode 100644
+index 00000000000000..e49dc1c0de3cef
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+@@ -0,0 +1,65 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"errors"
++	"hash"
++	"unsafe"
++)
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	// Map Go hash function to CommonCrypto hash constant
++	ccDigest, err := hashToCCDigestPBKDF2(fh())
++	if err != nil {
++		return nil, err
++	}
++
++	if len(password) == 0 {
++		// CommonCrypto requires a non-empty password
++		// Substitute empty password with placeholder
++		password = make([]byte, 1)
++	}
++
++	// Allocate output buffer for the derived key
++	derivedKey := make([]byte, keyLen)
++
++	// Call CommonCrypto's PBKDF2 implementation
++	status := C.CCKeyDerivationPBKDF(
++		C.kCCPBKDF2,                              // PBKDF2 algorithm
++		sbase(password), C.size_t(len(password)), // Password and its length
++		base(salt), C.size_t(len(salt)), // Salt and its length
++		ccDigest,     // Digest algorithm
++		C.uint(iter), // Iteration count
++		(*C.uchar)(unsafe.Pointer(&derivedKey[0])), C.size_t(keyLen), // Output buffer for derived key and its length
++	)
++
++	if status != C.kCCSuccess {
++		return nil, errors.New("PBKDF2 key derivation failed")
++	}
++
++	return derivedKey, nil
++}
++
++// Mapping Go hash functions to CommonCrypto hash constants
++func hashToCCDigestPBKDF2(hash hash.Hash) (C.CCAlgorithm, error) {
++	switch hash.(type) {
++	case *sha1Hash:
++		return C.kCCPRFHmacAlgSHA1, nil
++	case *sha224Hash:
++		return C.kCCPRFHmacAlgSHA224, nil
++	case *sha256Hash:
++		return C.kCCPRFHmacAlgSHA256, nil
++	case *sha384Hash:
++		return C.kCCPRFHmacAlgSHA384, nil
++	case *sha512Hash:
++		return C.kCCPRFHmacAlgSHA512, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+new file mode 100644
+index 00000000000000..e58c0b3b19a68b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+@@ -0,0 +1,26 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <Security/SecRandom.h>
++import "C"
++import (
++	"errors"
++	"unsafe"
++)
++
++type randReader int
++
++func (randReader) Read(b []byte) (int, error) {
++	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
++	// We check it even so.
++	if len(b) > 0 && C.SecRandomCopyBytes(C.kSecRandomDefault, C.size_t(len(b)), unsafe.Pointer(&b[0])) != 0 {
++		return 0, errors.New("crypto/rand: unable to read from source")
++	}
++	return len(b), nil
++}
++
++const RandReader = randReader(0)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
+new file mode 100644
+index 00000000000000..415889c4f1bdd2
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
+@@ -0,0 +1,83 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <CommonCrypto/CommonCrypto.h>
++import "C"
++import (
++	"errors"
++	"runtime"
++	"slices"
++	"unsafe"
++)
++
++// RC4Cipher is an instance of RC4 using a particular key.
++type RC4Cipher struct {
++	ctx C.CCCryptorRef
++}
++
++// NewRC4Cipher creates and returns a new RC4 cipher with the given key.
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
++	// Clone the key to prevent modification.
++	key = slices.Clone(key)
++	var ctx C.CCCryptorRef
++	status := C.CCCryptorCreate(
++		C.kCCEncrypt,       // Operation (RC4 stream)
++		C.kCCAlgorithmRC4,  // Algorithm
++		0,                  // No padding or other options
++		pbase(key),         // Key
++		C.size_t(len(key)), // Key length
++		nil,                // No IV needed for RC4
++		&ctx,               // Output: CCCryptorRef
++	)
++	if status != C.kCCSuccess {
++		return nil, errors.New("failed to create RC4 cipher")
++	}
++	c := &RC4Cipher{ctx: ctx}
++	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
++	return c, nil
++}
++
++// finalize releases the RC4 cipher context when no longer needed.
++func (c *RC4Cipher) finalize() {
++	if c.ctx != nil {
++		C.CCCryptorRelease(c.ctx)
++	}
++}
++
++// Reset zeros the key data and makes the cipher unusable.
++func (c *RC4Cipher) Reset() {
++	if c.ctx != nil {
++		C.CCCryptorRelease(c.ctx)
++		c.ctx = nil
++	}
++}
++
++// XORKeyStream sets dst to the result of XORing src with the key stream.
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
++	if c.ctx == nil || len(src) == 0 {
++		return
++	}
++	if inexactOverlap(dst[:len(src)], src) {
++		panic("crypto/rc4: invalid buffer overlap")
++	}
++	// Ensures `dst` has sufficient space.
++	_ = dst[len(src)-1]
++	var outLen C.size_t
++	status := C.CCCryptorUpdate(
++		c.ctx,
++		unsafe.Pointer(&*addr(src)), C.size_t(len(src)), // Input
++		unsafe.Pointer(&*addr(dst)), C.size_t(len(dst)), // Output
++		&outLen,
++	)
++	if status != C.kCCSuccess {
++		panic("crypto/cipher: CCCryptorUpdate failed")
++	}
++	if int(outLen) != len(src) {
++		panic("crypto/rc4: src not fully XORed")
++	}
++	runtime.KeepAlive(c)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+new file mode 100644
+index 00000000000000..63df684569e671
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+@@ -0,0 +1,194 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #include <Security/Security.h>
++import "C"
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"strconv"
++)
++
++// GenerateKeyRSA generates an RSA key pair on macOS.
++// asn1Data is encoded as PKCS#1 ASN1 DER.
++func GenerateKeyRSA(bits int) (asn1Data []byte, err error) {
++	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeRSA, bits)
++	if err != nil {
++		return nil, err
++	}
++	C.CFRelease(C.CFTypeRef(privKeyRef))
++	return privKeyDER, nil
++}
++
++type PublicKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey C.SecKeyRef
++}
++
++func (k *PublicKeyRSA) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++// NewPublicKeyRSA creates a new RSA public key from ASN1 DER encoded data.
++func NewPublicKeyRSA(asn1Data []byte) (*PublicKeyRSA, error) {
++	pubKeyRef, err := createSecKeyWithData(asn1Data, C.kSecAttrKeyTypeRSA, C.kSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++
++	key := &PublicKeyRSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(key, (*PublicKeyRSA).finalize)
++	return key, nil
++}
++
++func (k *PublicKeyRSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++	// Because of the finalizer, any time key is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++type PrivateKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey C.SecKeyRef
++}
++
++func (k *PrivateKeyRSA) finalize() {
++	if k._pkey != 0 {
++		C.CFRelease(C.CFTypeRef(k._pkey))
++	}
++}
++
++// NewPrivateKeyRSA creates a new RSA private key from ASN1 DER encoded data.
++func NewPrivateKeyRSA(asn1Data []byte) (*PrivateKeyRSA, error) {
++	privKeyRef, err := createSecKeyWithData(asn1Data, C.kSecAttrKeyTypeRSA, C.kSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++
++	key := &PrivateKeyRSA{_pkey: privKeyRef}
++	runtime.SetFinalizer(key, (*PrivateKeyRSA).finalize)
++	return key, nil
++}
++
++func (k *PrivateKeyRSA) PublicKey() *PublicKeyRSA {
++	var pubKeyRef C.SecKeyRef
++	k.withKey(func(key C.SecKeyRef) C.int {
++		pubKeyRef = C.SecKeyCopyPublicKey(k._pkey)
++		return 0
++	})
++	pubKey := &PublicKeyRSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(pubKey, (*PublicKeyRSA).finalize)
++	return pubKey
++}
++
++func (k *PrivateKeyRSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++// DecryptRSAOAEP decrypts data using RSA-OAEP.
++func DecryptRSAOAEP(h hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	if len(label) > 0 {
++		// https://github.com/microsoft/go-crypto-darwin/issues/22
++		panic("crypto/rsa: label is not supported on macOS")
++	}
++	return evpDecrypt(priv.withKey, algorithmTypeOAEP, ciphertext, h)
++}
++
++// EncryptRSAOAEP encrypts data using RSA-OAEP.
++func EncryptRSAOAEP(h hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	if len(label) > 0 {
++		// https://github.com/microsoft/go-crypto-darwin/issues/22
++		panic("crypto/rsa: label is not supported on macOS")
++	}
++	return evpEncrypt(pub.withKey, algorithmTypeOAEP, msg, h)
++}
++
++// SignRSAPSS signs data with RSA-PSS.
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypePSS, h, hashed)
++}
++
++// VerifyRSAPSS verifies data with RSA-PSS.
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return evpVerify(pub.withKey, algorithmTypePSS, h, hashed, sig)
++}
++
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypePKCS1v15Sig, h, hashed)
++}
++
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	if pub.withKey(func(key C.SecKeyRef) C.int {
++		size := C.SecKeyGetBlockSize(key)
++		if len(sig) < int(size) {
++			return 0
++		}
++		return 1
++	}) == 0 {
++		return errors.New("crypto/rsa: verification error")
++	}
++	return evpVerify(pub.withKey, algorithmTypePKCS1v15Sig, h, hashed, sig)
++}
++
++// DecryptRSAPKCS1 decrypts data using RSA PKCS#1 v1.5 padding.
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, algorithmTypePKCS1v15Enc, ciphertext, nil)
++}
++
++// EncryptRSAPKCS1 encrypts data using RSA PKCS#1 v1.5 padding.
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, algorithmTypePKCS1v15Enc, msg, nil)
++}
++
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, algorithmTypeRAW, ciphertext, nil)
++}
++
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, algorithmTypeRAW, msg, nil)
++}
++
++// Helper functions
++
++type cfError struct {
++	code    int
++	message string
++}
++
++func (e *cfError) Error() string {
++	if e.message == "" {
++		return "CFError(" + strconv.Itoa(e.code) + "): unknown error"
++	}
++	return "CFError(" + strconv.Itoa(e.code) + "): " + e.message
++}
++
++func goCFErrorRef(ref C.CFErrorRef) error {
++	if ref == 0 {
++		return nil
++	}
++	var message string
++	if desc := C.CFErrorCopyDescription(ref); desc != C.CFStringRef(0) {
++		defer C.CFRelease(C.CFTypeRef(desc))
++		if cstr := C.CFStringGetCStringPtr(desc, C.kCFStringEncodingUTF8); cstr != nil {
++			message = C.GoString(cstr)
++		}
++	}
++	return &cfError{
++		code:    int(C.CFErrorGetCode(ref)),
++		message: message,
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
+new file mode 100644
+index 00000000000000..9451d05599f3a8
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
+@@ -0,0 +1,59 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++// #cgo CFLAGS: -Wno-deprecated-declarations
++import "C"
++import "unsafe"
++
++// noescape hides a pointer from escape analysis. noescape is
++// the identity function but escape analysis doesn't think the
++// output depends on the input. noescape is inlined and currently
++// compiles down to zero instructions.
++// USE CAREFULLY!
++//
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
++}
++
++var zero byte
++
++// addr converts p to its base addr, including a noescape along the way.
++// If p is nil, addr returns a non-nil pointer, so that the result can always
++// be dereferenced.
++//
++//go:nosplit
++func addr(p []byte) *byte {
++	if len(p) == 0 {
++		return &zero
++	}
++	return (*byte)(noescape(unsafe.Pointer(&p[0])))
++}
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func base(b []byte) *C.uchar {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*C.uchar)(unsafe.Pointer(&b[0]))
++}
++
++func sbase(b []byte) *C.char {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*C.char)(unsafe.Pointer(&b[0]))
++}
++
++func pbase(b []byte) unsafe.Pointer {
++	if len(b) == 0 {
++		return nil
++	}
++	return unsafe.Pointer(&b[0])
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE b/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
 new file mode 100644
 index 00000000000000..9e841e7a26e4eb
@@ -11603,14 +15057,19 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 1c8de570cc2f1f..5b05c5eed355ca 100644
+index 1c8de570cc2f1f..aac6c2a60b6b80 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,14 @@
+@@ -1,3 +1,19 @@
 +# github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146
++## explicit; go 1.22
++github.com/microsoft/go-crypto-darwin/bbig
++github.com/microsoft/go-crypto-darwin/internal/cryptokit
++github.com/microsoft/go-crypto-darwin/xcrypto
 +# github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
diff --git a/patches/0003-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
index 1eae1e793f8..1505ab5d1ff 100644
--- a/patches/0003-Add-crypto-backend-foundation.patch
+++ b/patches/0003-Add-crypto-backend-foundation.patch
@@ -11,11 +11,11 @@ Subject: [PATCH] Add crypto backend foundation
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
- src/crypto/internal/backend/nobackend.go      | 236 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  src/runtime/runtime_boring.go                 |   5 +
- 11 files changed, 446 insertions(+), 1 deletion(-)
+ 11 files changed, 450 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
  create mode 100644 src/crypto/internal/backend/common.go
@@ -64,7 +64,7 @@ index 00000000000000..c2c06d3bff8c74
 +}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
-index 00000000000000..20251a290dc2e0
+index 00000000000000..ab3f30825dcfa1
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big.go
 @@ -0,0 +1,17 @@
@@ -72,7 +72,7 @@ index 00000000000000..20251a290dc2e0
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.systemcrypto
++//go:build !goexperiment.systemcrypto || (goexperiment.darwincrypto && !cgo)
 +
 +package bbig
 +
@@ -87,7 +87,7 @@ index 00000000000000..20251a290dc2e0
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..0402524861dc53
+index 00000000000000..84447174284ffd
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
 @@ -0,0 +1,58 @@
@@ -106,7 +106,7 @@ index 00000000000000..0402524861dc53
 +func init() {
 +	if fips140.Enabled() {
 +		if !Enabled {
-+			if runtime.GOOS != "linux" && runtime.GOOS != "windows" {
++			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
 +				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
 +			}
 +			panic("FIPS mode requested (" + fips140.Message + ") but no supported crypto backend is enabled")
@@ -262,10 +262,10 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..4a3d8b729da30f
+index 00000000000000..eca1ceab2a04b9
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,236 @@
+@@ -0,0 +1,240 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -294,6 +294,10 @@ index 00000000000000..4a3d8b729da30f
 +
 +func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
 +
++func SupportsCurve(curve string) bool            { panic("cryptobackend: not available") }
++func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
++
 +func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
 +func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
 +func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
@@ -337,8 +341,8 @@ index 00000000000000..4a3d8b729da30f
 +	panic("cryptobackend: not available")
 +}
 +
-+func SupportsRSAKeyPrimes(primes int) bool { panic("cryptobackend: not available") }
-+func SupportsRSASaltLength(salt int) bool  { panic("cryptobackend: not available") }
++func SupportsRSAKeyPrimes(primes int) bool           { panic("cryptobackend: not available") }
++func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
 +
 +type PublicKeyRSA struct{ _ int }
 +type PrivateKeyRSA struct{ _ int }
@@ -438,37 +442,37 @@ index 00000000000000..4a3d8b729da30f
 +
 +type PublicKeyEd25519 struct{}
 +
-+func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
 +type PrivateKeyEd25519 struct{}
 +
-+func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignEd25519(priv *PrivateKeyEd25519, message []byte) ([]byte, error) {
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
 +
@@ -519,7 +523,7 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 5551a24f8a844e..c86b63454c6f7a 100644
+index e017efb1562379..ab5539f978a266 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -493,6 +493,8 @@ var depsRules = `
@@ -541,7 +545,7 @@ index 5551a24f8a844e..c86b63454c6f7a 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -520,6 +523,7 @@ var depsRules = `
+@@ -522,6 +525,7 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng
  	< crypto/internal/boring
@@ -549,8 +553,8 @@ index 5551a24f8a844e..c86b63454c6f7a 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -543,6 +547,7 @@ var depsRules = `
- 	< github.com/golang-fips/openssl/v2/bbig
+@@ -546,6 +550,7 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-darwin/bbig
  	< github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
diff --git a/patches/0004-Add-BoringSSL-crypto-backend.patch b/patches/0004-Add-BoringSSL-crypto-backend.patch
index 7ab03583455..9abecb7aca9 100644
--- a/patches/0004-Add-BoringSSL-crypto-backend.patch
+++ b/patches/0004-Add-BoringSSL-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add BoringSSL crypto backend
 
 ---
  .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 275 ++++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 298 insertions(+)
+ 3 files changed, 302 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/boring.go
@@ -32,10 +32,10 @@ index 00000000000000..0b62cef68546d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..c49291c2f62b4c
+index 00000000000000..f06fcc63b5af11
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,275 @@
+@@ -0,0 +1,279 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -69,6 +69,10 @@ index 00000000000000..c49291c2f62b4c
 +	}
 +}
 +
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
 +func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
 +func NewSHA1() hash.Hash       { return boring.NewSHA1() }
 +func NewSHA224() hash.Hash     { return boring.NewSHA224() }
@@ -120,7 +124,7 @@ index 00000000000000..c49291c2f62b4c
 +	return true
 +}
 +
-+func SupportsRSASaltLength(salt int) bool {
++func SupportsRSASaltLength(sign bool, salt int) bool {
 +	return true
 +}
 +
@@ -247,37 +251,37 @@ index 00000000000000..c49291c2f62b4c
 +
 +type PublicKeyEd25519 struct{}
 +
-+func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
 +type PrivateKeyEd25519 struct{}
 +
-+func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignEd25519(priv *PrivateKeyEd25519, message []byte) ([]byte, error) {
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0005-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
index f58b2cbc2ea..7b44965e884 100644
--- a/patches/0005-Add-OpenSSL-crypto-backend.patch
+++ b/patches/0005-Add-OpenSSL-crypto-backend.patch
@@ -8,9 +8,9 @@ Subject: [PATCH] Add OpenSSL crypto backend
  src/cmd/link/internal/ld/lib.go               |   1 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
  .../internal/backend/fips140/openssl.go       |  41 ++
- src/crypto/internal/backend/openssl_linux.go  | 358 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
  src/os/exec/exec_test.go                      |   9 +
- 6 files changed, 422 insertions(+), 2 deletions(-)
+ 6 files changed, 426 insertions(+), 2 deletions(-)
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -112,10 +112,10 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..0f3aea733ac2a5
+index 00000000000000..57293ff2128dd6
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,358 @@
+@@ -0,0 +1,362 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -203,6 +203,10 @@ index 00000000000000..0f3aea733ac2a5
 +	return openssl.SupportsHash(h)
 +}
 +
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
 +func NewMD5() hash.Hash        { return openssl.NewMD5() }
 +func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
 +func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
@@ -259,7 +263,7 @@ index 00000000000000..0f3aea733ac2a5
 +	return primes == 2
 +}
 +
-+func SupportsRSASaltLength(salt int) bool {
++func SupportsRSASaltLength(sign bool, salt int) bool {
 +	return true
 +}
 +
@@ -391,40 +395,40 @@ index 00000000000000..0f3aea733ac2a5
 +
 +func SupportsEd25519() bool { return openssl.SupportsEd25519() }
 +
-+type PublicKeyEd25519 = openssl.PublicKeyEd25519
-+type PrivateKeyEd25519 = openssl.PrivateKeyEd25519
++type PublicKeyEd25519 = *openssl.PublicKeyEd25519
++type PrivateKeyEd25519 = *openssl.PrivateKeyEd25519
 +
-+func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
 +	return openssl.GenerateKeyEd25519()
 +}
 +
 +// Deprecated: use NewPrivateKeyEd25519 instead.
-+func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25119(priv []byte) (PrivateKeyEd25519, error) {
 +	return openssl.NewPrivateKeyEd25519(priv)
 +}
 +
 +// Deprecated: use NewPublicKeyEd25519 instead.
-+func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25119(pub []byte) (PublicKeyEd25519, error) {
 +	return openssl.NewPublicKeyEd25519(pub)
 +}
 +
-+func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
 +	return openssl.NewPrivateKeyEd25519(priv)
 +}
 +
-+func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
 +	return openssl.NewPublicKeyEd25519(pub)
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
 +	return openssl.NewPrivateKeyEd25519FromSeed(seed)
 +}
 +
-+func SignEd25519(priv *PrivateKeyEd25519, message []byte) ([]byte, error) {
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
 +	return openssl.SignEd25519(priv, message)
 +}
 +
-+func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
 +	return openssl.VerifyEd25519(pub, message, sig)
 +}
 +
diff --git a/patches/0006-Add-CNG-crypto-backend.patch b/patches/0006-Add-CNG-crypto-backend.patch
index e6bc7dab684..aaae7bf10f9 100644
--- a/patches/0006-Add-CNG-crypto-backend.patch
+++ b/patches/0006-Add-CNG-crypto-backend.patch
@@ -5,9 +5,9 @@ Subject: [PATCH] Add CNG crypto backend
 
 ---
  src/crypto/internal/backend/bbig/big_cng.go |  12 +
- src/crypto/internal/backend/cng_windows.go  | 329 ++++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go  | 336 ++++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go  |  33 ++
- 3 files changed, 374 insertions(+)
+ 3 files changed, 381 insertions(+)
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/fips140/cng.go
@@ -32,10 +32,10 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..6bfbdc57f0518b
+index 00000000000000..31dfc9b19ee63e
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,329 @@
+@@ -0,0 +1,336 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -82,6 +82,10 @@ index 00000000000000..6bfbdc57f0518b
 +	return cng.SupportsHash(h)
 +}
 +
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
 +func NewMD5() hash.Hash        { return cng.NewMD5() }
 +func NewSHA1() hash.Hash       { return cng.NewSHA1() }
 +func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
@@ -166,7 +170,10 @@ index 00000000000000..6bfbdc57f0518b
 +	return primes == 2
 +}
 +
-+func SupportsRSASaltLength(salt int) bool {
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	if sign {
++		return true
++	}
 +	return salt != 0 // rsa.PSSSaltLengthAuto
 +}
 +
@@ -296,37 +303,37 @@ index 00000000000000..6bfbdc57f0518b
 +
 +type PublicKeyEd25519 struct{}
 +
-+func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
 +type PrivateKeyEd25519 struct{}
 +
-+func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func SignEd25519(priv *PrivateKeyEd25519, message []byte) ([]byte, error) {
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
 +
-+func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
 +
diff --git a/patches/0007-Add-Darwin-crypto-backend.patch b/patches/0007-Add-Darwin-crypto-backend.patch
new file mode 100644
index 00000000000..6cd2cd3a969
--- /dev/null
+++ b/patches/0007-Add-Darwin-crypto-backend.patch
@@ -0,0 +1,547 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: George Adams <gadams@microsoft.com>
+Date: Tue, 17 Dec 2024 13:17:39 +0000
+Subject: [PATCH] Add Darwin crypto backend
+
+---
+ .gitignore                                    |   2 +
+ .../internal/backend/bbig/big_darwin.go       |  12 +
+ src/crypto/internal/backend/darwin_darwin.go  | 359 ++++++++++++++++++
+ src/crypto/internal/backend/fips140/darwin.go |  11 +
+ src/crypto/rsa/darwin.go                      |  71 ++++
+ src/net/lookup_test.go                        |   3 +
+ src/runtime/pprof/vminfo_darwin_test.go       |   6 +
+ 7 files changed, 464 insertions(+)
+ create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
+ create mode 100644 src/crypto/internal/backend/darwin_darwin.go
+ create mode 100644 src/crypto/internal/backend/fips140/darwin.go
+ create mode 100644 src/crypto/rsa/darwin.go
+
+diff --git a/.gitignore b/.gitignore
+index c6512e64a4ef39..b3b01db73b009d 100644
+--- a/.gitignore
++++ b/.gitignore
+@@ -46,6 +46,8 @@ _testmain.go
+ /test/run.out
+ /test/times.out
+ 
++!/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
++
+ # This file includes artifacts of Go build that should not be checked in.
+ # For files created by specific development environment (e.g. editor),
+ # use alternative ways to exclude files from git.
+diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
+new file mode 100644
+index 00000000000000..77f3ca5d262769
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_darwin.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto && cgo
++
++package bbig
++
++import "github.com/microsoft/go-crypto-darwin/bbig"
++
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
+new file mode 100644
+index 00000000000000..2250852ada8cc8
+--- /dev/null
++++ b/src/crypto/internal/backend/darwin_darwin.go
+@@ -0,0 +1,359 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto && darwin && cgo
++
++// Package darwin provides access to DarwinCrypto implementation functions.
++// Check the variable Enabled to find out whether DarwinCrypto is available.
++// If DarwinCrypto is not available, the functions in this package all panic.
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/boring/sig"
++	"crypto/internal/fips140/nistec"
++	"errors"
++	"hash"
++	_ "unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
++)
++
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = xcrypto.BigInt
++
++func init() {
++	sig.BoringCrypto()
++}
++
++const RandReader = xcrypto.RandReader
++
++func SupportsHash(h crypto.Hash) bool {
++	return xcrypto.SupportsHash(h)
++}
++
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-256", "P-384", "P-521":
++		return true
++	}
++	return false
++}
++
++func SupportsRSAOAEPLabel(label []byte) bool {
++	// CommonCrypto doesn't support labels
++	// https://github.com/microsoft/go-crypto-darwin/issues/22
++	return len(label) == 0
++}
++
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool {
++	switch hash {
++	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
++		return true
++	}
++	return false
++}
++
++func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
++func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
++func NewSHA224() hash.Hash { return xcrypto.NewSHA224() }
++func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
++func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
++func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
++
++func MD5(p []byte) (sum [16]byte)        { return xcrypto.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return xcrypto.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return xcrypto.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return xcrypto.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return xcrypto.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return xcrypto.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
++	return xcrypto.NewHMAC(h, key)
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewAESCipher(key)
++}
++
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS(c)
++}
++
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS13(c)
++}
++
++type PublicKeyECDSA = xcrypto.PublicKeyECDSA
++type PrivateKeyECDSA = xcrypto.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D xcrypto.BigInt, err error) {
++	return xcrypto.GenerateKeyECDSA(curve)
++}
++
++func NewPrivateKeyECDSA(curve string, X, Y, D xcrypto.BigInt) (*xcrypto.PrivateKeyECDSA, error) {
++	return xcrypto.NewPrivateKeyECDSA(curve, X, Y, D)
++}
++
++func NewPublicKeyECDSA(curve string, X, Y xcrypto.BigInt) (*xcrypto.PublicKeyECDSA, error) {
++	return xcrypto.NewPublicKeyECDSA(curve, X, Y)
++}
++
++//go:linkname encodeSignature crypto/ecdsa.encodeSignature
++func encodeSignature(r, s []byte) ([]byte, error)
++
++//go:linkname parseSignature crypto/ecdsa.parseSignature
++func parseSignature(sig []byte) (r, s []byte, err error)
++
++func SignMarshalECDSA(priv *xcrypto.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return xcrypto.SignMarshalECDSA(priv, hash)
++}
++
++func VerifyECDSA(pub *xcrypto.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return xcrypto.VerifyECDSA(pub, hash, sig)
++}
++
++func SupportsRSAKeyPrimes(primes int) bool {
++	return primes == 2
++}
++
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	// CommonCrypto doesn't support custom salt length
++	return salt == -1
++}
++
++type PublicKeyRSA = xcrypto.PublicKeyRSA
++type PrivateKeyRSA = xcrypto.PrivateKeyRSA
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *xcrypto.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAOAEP(h, priv, ciphertext, label)
++}
++
++func DecryptRSAPKCS1(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAPKCS1(priv, ciphertext)
++}
++
++func DecryptRSANoPadding(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSANoPadding(priv, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *xcrypto.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAOAEP(h, pub, msg, label)
++}
++
++func EncryptRSAPKCS1(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAPKCS1(pub, msg)
++}
++
++func EncryptRSANoPadding(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSANoPadding(pub, msg)
++}
++
++//go:linkname decodeKeyRSA crypto/rsa.decodeKey
++func decodeKeyRSA(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error)
++
++//go:linkname encodeKeyRSA crypto/rsa.encodeKey
++func encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) ([]byte, error)
++
++//go:linkname encodePublicKeyRSA crypto/rsa.encodePublicKey
++func encodePublicKeyRSA(N, E xcrypto.BigInt) ([]byte, error)
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error) {
++	data, err := xcrypto.GenerateKeyRSA(bits)
++	if err != nil {
++		return
++	}
++	return decodeKeyRSA(data)
++}
++
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) (*xcrypto.PrivateKeyRSA, error) {
++	encoded, err := encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPrivateKeyRSA(encoded)
++}
++
++func NewPublicKeyRSA(N, E xcrypto.BigInt) (*xcrypto.PublicKeyRSA, error) {
++	encoded, err := encodePublicKeyRSA(N, E)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPublicKeyRSA(encoded)
++}
++
++func SignRSAPKCS1v15(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return xcrypto.SignRSAPKCS1v15(priv, h, hashed)
++}
++
++func SignRSAPSS(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return xcrypto.SignRSAPSS(priv, h, hashed, saltLen)
++}
++
++func VerifyRSAPKCS1v15(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return xcrypto.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
++
++func VerifyRSAPSS(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return xcrypto.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
++
++type PrivateKeyECDH = xcrypto.PrivateKeyECDH
++type PublicKeyECDH = xcrypto.PublicKeyECDH
++
++func ECDH(priv *xcrypto.PrivateKeyECDH, pub *xcrypto.PublicKeyECDH) ([]byte, error) {
++	return xcrypto.ECDH(priv, pub)
++}
++
++func GenerateKeyECDH(curve string) (*xcrypto.PrivateKeyECDH, []byte, error) {
++	return xcrypto.GenerateKeyECDH(curve)
++}
++
++func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
++	var key []byte
++	switch curve {
++	case "P-256":
++		p, err := nistec.NewP256Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	case "P-384":
++		p, err := nistec.NewP384Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	case "P-521":
++		p, err := nistec.NewP521Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	default:
++		return nil, errors.New("NewPrivateKeyECDH: unsupported curve: " + curve)
++	}
++	return xcrypto.NewPrivateKeyECDH(curve, key, bytes)
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
++	return xcrypto.NewPublicKeyECDH(curve, bytes)
++}
++
++func SupportsHKDF() bool {
++	return true
++}
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return xcrypto.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	return xcrypto.ExtractHKDF(h, secret, salt)
++}
++
++func SupportsPBKDF2() bool {
++	return true
++}
++
++func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return xcrypto.PBKDF2(pass, salt, iter, keyLen, h)
++}
++
++func SupportsTLS1PRF() bool {
++	return false
++}
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDESCipher() bool {
++	return true
++}
++
++func SupportsTripleDESCipher() bool {
++	return true
++}
++
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewDESCipher(key)
++}
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewTripleDESCipher(key)
++}
++
++func SupportsRC4() bool { return true }
++
++type RC4Cipher = xcrypto.RC4Cipher
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return xcrypto.NewRC4Cipher(key) }
++
++func SupportsEd25519() bool {
++	return true
++}
++
++type PublicKeyEd25519 = xcrypto.PublicKeyEd25519
++type PrivateKeyEd25519 = xcrypto.PrivateKeyEd25519
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	return xcrypto.GenerateKeyEd25519(), nil
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	return xcrypto.NewPrivateKeyEd25519(priv)
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	return xcrypto.NewPublicKeyEd25519(pub)
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	return xcrypto.NewPrivateKeyEd25519FromSeed(seed)
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	return xcrypto.SignEd25519(priv, message)
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	return xcrypto.VerifyEd25519(pub, message, sig)
++}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyDSA struct{}
++type PublicKeyDSA struct{}
++
++func GenerateKeyDSA(p, q, g xcrypto.BigInt) (x, y xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y xcrypto.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y xcrypto.BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (xcrypto.BigInt, xcrypto.BigInt, error)) (r, s xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
++}
+diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
+new file mode 100644
+index 00000000000000..ef5af5d956163e
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/darwin.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/rsa/darwin.go b/src/crypto/rsa/darwin.go
+new file mode 100644
+index 00000000000000..1b9c63523ee90e
+--- /dev/null
++++ b/src/crypto/rsa/darwin.go
+@@ -0,0 +1,71 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto
++
++package rsa
++
++import (
++	"crypto/internal/backend"
++	"crypto/internal/backend/bbig"
++	"errors"
++	"math/big"
++	_ "unsafe"
++
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
++)
++
++//go:linkname decodeKey
++func decodeKey(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++		return nil, nil, nil, nil, nil, nil, nil, nil, e
++	}
++	input := cryptobyte.String(data)
++	var version int
++	n, e, d, p, q, dp, dq, qinv := new(big.Int), new(big.Int), new(big.Int), new(big.Int),
++		new(big.Int), new(big.Int), new(big.Int), new(big.Int)
++	// Parse the ASN.1 sequence
++	if !input.ReadASN1(&input, asn1.SEQUENCE) {
++		return bad(errors.New("invalid ASN.1 structure: not a sequence"))
++	}
++	if !input.ReadASN1Integer(&version) || version != 0 {
++		return bad(errors.New("invalid ASN.1 structure: unsupported version"))
++	}
++	if !input.ReadASN1Integer(n) || !input.ReadASN1Integer(e) ||
++		!input.ReadASN1Integer(d) || !input.ReadASN1Integer(p) ||
++		!input.ReadASN1Integer(q) || !input.ReadASN1Integer(dp) ||
++		!input.ReadASN1Integer(dq) || !input.ReadASN1Integer(qinv) {
++		return bad(errors.New("invalid ASN.1 structure"))
++	}
++	return bbig.Enc(n), bbig.Enc(e), bbig.Enc(d), bbig.Enc(p), bbig.Enc(q),
++		bbig.Enc(dp), bbig.Enc(dq), bbig.Enc(qinv), nil
++}
++
++//go:linkname encodeKey
++func encodeKey(N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1Int64(0)               // Add version as int64
++		b.AddASN1BigInt(bbig.Dec(N))    // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E))    // Add public exponent
++		b.AddASN1BigInt(bbig.Dec(D))    // Add private exponent
++		b.AddASN1BigInt(bbig.Dec(P))    // Add prime1
++		b.AddASN1BigInt(bbig.Dec(Q))    // Add prime2
++		b.AddASN1BigInt(bbig.Dec(Dp))   // Add exponent1
++		b.AddASN1BigInt(bbig.Dec(Dq))   // Add exponent2
++		b.AddASN1BigInt(bbig.Dec(Qinv)) // Add coefficient
++	})
++	return builder.Bytes()
++}
++
++//go:linkname encodePublicKey
++func encodePublicKey(N, E backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1BigInt(bbig.Dec(N)) // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E)) // Add public exponent
++	})
++	return builder.Bytes()
++}
+diff --git a/src/net/lookup_test.go b/src/net/lookup_test.go
+index 514cbd098ae772..8ec689416dde1d 100644
+--- a/src/net/lookup_test.go
++++ b/src/net/lookup_test.go
+@@ -1501,6 +1501,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
+ }
+ 
+ func TestLookupNoSuchHost(t *testing.T) {
++	if runtime.GOOS == "darwin" {
++		t.Skip("skipping on darwin; see https://github.com/microsoft/go/issues/1394")
++	}
+ 	mustHaveExternalNetwork(t)
+ 
+ 	const testNXDOMAIN = "invalid.invalid."
+diff --git a/src/runtime/pprof/vminfo_darwin_test.go b/src/runtime/pprof/vminfo_darwin_test.go
+index 6d375c5d53368a..39154b000ddc67 100644
+--- a/src/runtime/pprof/vminfo_darwin_test.go
++++ b/src/runtime/pprof/vminfo_darwin_test.go
+@@ -11,6 +11,7 @@ import (
+ 	"bytes"
+ 	"fmt"
+ 	"internal/abi"
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"os"
+ 	"os/exec"
+@@ -21,6 +22,11 @@ import (
+ )
+ 
+ func TestVMInfo(t *testing.T) {
++	if goexperiment.DarwinCrypto {
++		// Fails on macOS when using system crypto.
++		// https://github.com/microsoft/go/issues/1466
++		t.Skip("skipping on Darwin")
++	}
+ 	var begin, end, offset uint64
+ 	var filename string
+ 	first := true
diff --git a/patches/0007-Use-crypto-backends.patch b/patches/0008-Use-crypto-backends.patch
similarity index 91%
rename from patches/0007-Use-crypto-backends.patch
rename to patches/0008-Use-crypto-backends.patch
index 37d40160d56..1d2f62ffeb0 100644
--- a/patches/0007-Use-crypto-backends.patch
+++ b/patches/0008-Use-crypto-backends.patch
@@ -5,8 +5,11 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/go/go_boring_test.go                  |   2 +-
+ src/cmd/dist/test.go                          |   5 +
+ src/cmd/go/go_boring_test.go                  |  11 +-
+ src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
+ src/cmd/link/internal/ld/config.go            |   8 +
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
@@ -20,10 +23,11 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ecdh/nist.go                       |   2 +-
  src/crypto/ecdsa/badlinkname.go               |  19 ++
  src/crypto/ecdsa/boring.go                    |   6 +-
- src/crypto/ecdsa/ecdsa.go                     |   4 +-
+ src/crypto/ecdsa/ecdsa.go                     |  10 +-
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
  src/crypto/ed25519/ed25519.go                 |  73 +++++++
+ src/crypto/ed25519/ed25519_test.go            |   3 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/fips140.go                 |   3 +-
  src/crypto/hkdf/hkdf.go                       |  14 ++
@@ -39,13 +43,13 @@ Subject: [PATCH] Use crypto backends
  src/crypto/purego_test.go                     |   2 +-
  src/crypto/rand/rand.go                       |   2 +-
  src/crypto/rc4/rc4.go                         |  18 ++
- src/crypto/rsa/boring.go                      |   6 +-
+ src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/fips.go                        |  10 +-
+ src/crypto/rsa/fips.go                        |  14 +-
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
- src/crypto/rsa/pss_test.go                    |   9 +-
+ src/crypto/rsa/pss_test.go                    |  13 +-
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  15 +-
  src/crypto/sha1/sha1.go                       |   8 +-
@@ -72,7 +76,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/marshal_test.go                      |   9 +
  src/hash/notboring_test.go                    |   9 +
  src/net/smtp/smtp_test.go                     |  72 ++++---
- 68 files changed, 1012 insertions(+), 100 deletions(-)
+ 72 files changed, 1052 insertions(+), 107 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -96,11 +100,27 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  
  package main
  
+diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
+index 0de6e80fd985a3..3316bb52a61ff1 100644
+--- a/src/cmd/dist/test.go
++++ b/src/cmd/dist/test.go
+@@ -1161,6 +1161,11 @@ func (t *tester) internalLink() bool {
+ 	if goos == "windows" && goarch == "arm64" {
+ 		return false
+ 	}
++	if goos == "darwin" && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
++		// linkmode=internal isn't supported with system/darwin crypto.
++		// see https://github.com/microsoft/go-crypto-darwin/issues/33
++		return false
++	}
+ 	// Internally linking cgo is incomplete on some architectures.
+ 	// https://golang.org/issue/10373
+ 	// https://golang.org/issue/14449
 diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
-index ed0fbf3d53d75b..06478963f4be44 100644
+index ed0fbf3d53d75b..8111b143a1295b 100644
 --- a/src/cmd/go/go_boring_test.go
 +++ b/src/cmd/go/go_boring_test.go
-@@ -2,7 +2,7 @@
+@@ -2,13 +2,20 @@
  // Use of this source code is governed by a BSD-style
  // license that can be found in the LICENSE file.
  
@@ -109,6 +129,33 @@ index ed0fbf3d53d75b..06478963f4be44 100644
  
  package main_test
  
+-import "testing"
++import (
++	"internal/goexperiment"
++	"testing"
++)
+ 
+ func TestBoringInternalLink(t *testing.T) {
++	if goexperiment.DarwinCrypto {
++		// https://github.com/microsoft/go-crypto-darwin/issues/33
++		t.Skip("skipping on Darwin")
++	}
+ 	tg := testgo(t)
+ 	defer tg.cleanup()
+ 	tg.parallel()
+diff --git a/src/cmd/go/testdata/script/darwin_no_cgo.txt b/src/cmd/go/testdata/script/darwin_no_cgo.txt
+index fa445925b7c374..e36ac86fcaa58d 100644
+--- a/src/cmd/go/testdata/script/darwin_no_cgo.txt
++++ b/src/cmd/go/testdata/script/darwin_no_cgo.txt
+@@ -4,6 +4,8 @@
+ # of cmd/go, which imports approximately everything
+ # in std (certainly everything relevant).
+ [!GOOS:darwin] skip
++[GOEXPERIMENT:darwincrypto] skip
++[GOEXPERIMENT:systemcrypto] skip
+ go list -deps cmd/go
+ ! stdout runtime/cgo
+ 
 diff --git a/src/cmd/go/testdata/script/gopath_std_vendor.txt b/src/cmd/go/testdata/script/gopath_std_vendor.txt
 index 4aaf46b5d0f0dc..ec58a217400caa 100644
 --- a/src/cmd/go/testdata/script/gopath_std_vendor.txt
@@ -128,6 +175,32 @@ index 4aaf46b5d0f0dc..ec58a217400caa 100644
  [!compiler:gc] skip
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
+diff --git a/src/cmd/link/internal/ld/config.go b/src/cmd/link/internal/ld/config.go
+index b2d4ad7cb0e7f6..2859879041ff8f 100644
+--- a/src/cmd/link/internal/ld/config.go
++++ b/src/cmd/link/internal/ld/config.go
+@@ -7,6 +7,7 @@ package ld
+ import (
+ 	"fmt"
+ 	"internal/buildcfg"
++	"internal/goexperiment"
+ 	"internal/platform"
+ )
+ 
+@@ -34,6 +35,13 @@ func (mode *BuildMode) Set(s string) error {
+ 		return fmt.Errorf("invalid buildmode: %q", s)
+ 	case "exe":
+ 		switch buildcfg.GOOS + "/" + buildcfg.GOARCH {
++		case "darwin/amd64":
++			// We can't link against the static object file when using no_pie
++			if goexperiment.DarwinCrypto || goexperiment.SystemCrypto {
++				*mode = BuildModePIE
++			} else {
++				*mode = BuildModeExe
++			}
+ 		case "darwin/arm64", "windows/arm", "windows/arm64": // On these platforms, everything is PIE
+ 			*mode = BuildModePIE
+ 		default:
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
 index 5bc2d13d673e0a..b803c77be62a66 100644
 --- a/src/crypto/aes/aes.go
@@ -590,7 +663,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index cb308b41e9df86..8f73855aa738de 100644
+index cb308b41e9df86..5c841d2f021967 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -604,6 +677,33 @@ index cb308b41e9df86..8f73855aa738de 100644
  	"crypto/internal/fips140/ecdsa"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
+@@ -162,7 +162,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
+ func GenerateKey(c elliptic.Curve, rand io.Reader) (*PrivateKey, error) {
+ 	randutil.MaybeReadByte(rand)
+ 
+-	if boring.Enabled && rand == boring.RandReader {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsCurve(c.Params().Name) {
+ 		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
+ 		if err != nil {
+ 			return nil, err
+@@ -211,7 +211,7 @@ var errNoAsm = errors.New("no assembly implementation available")
+ func SignASN1(rand io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
+ 	randutil.MaybeReadByte(rand)
+ 
+-	if boring.Enabled && rand == boring.RandReader {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsCurve(priv.Curve.Params().Name) {
+ 		b, err := boringPrivateKey(priv)
+ 		if err != nil {
+ 			return nil, err
+@@ -326,7 +326,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
+ // The inputs are not considered confidential, and may leak through timing side
+ // channels, or if an attacker has control of part of the inputs.
+ func VerifyASN1(pub *PublicKey, hash, sig []byte) bool {
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsCurve(pub.Curve.Params().Name) {
+ 		key, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return false
 diff --git a/src/crypto/ecdsa/notboring.go b/src/crypto/ecdsa/notboring.go
 index 039bd82ed21f9f..69a97d9bf250be 100644
 --- a/src/crypto/ecdsa/notboring.go
@@ -624,7 +724,7 @@ index 039bd82ed21f9f..69a97d9bf250be 100644
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/ed25519/boring.go b/src/crypto/ed25519/boring.go
 new file mode 100644
-index 00000000000000..cce33e4d6cc927
+index 00000000000000..4e18cdfbaad4fd
 --- /dev/null
 +++ b/src/crypto/ed25519/boring.go
 @@ -0,0 +1,71 @@
@@ -653,11 +753,11 @@ index 00000000000000..cce33e4d6cc927
 +}
 +
 +type boringPub struct {
-+	key  *boring.PublicKeyEd25519
++	key  boring.PublicKeyEd25519
 +	orig [PublicKeySize]byte
 +}
 +
-+func boringPublicKey(pub PublicKey) (*boring.PublicKeyEd25519, error) {
++func boringPublicKey(pub PublicKey) (boring.PublicKeyEd25519, error) {
 +	// Use the pointer to the underlying pub array as key.
 +	p := unsafe.SliceData(pub)
 +	b := pubCache.Get(p)
@@ -669,7 +769,7 @@ index 00000000000000..cce33e4d6cc927
 +	copy(b.orig[:], pub)
 +	key, err := boring.NewPublicKeyEd25519(b.orig[:])
 +	if err != nil {
-+		return nil, err
++		return key, err
 +	}
 +	b.key = key
 +	pubCache.Put(p, b)
@@ -677,11 +777,11 @@ index 00000000000000..cce33e4d6cc927
 +}
 +
 +type boringPriv struct {
-+	key  *boring.PrivateKeyEd25519
++	key  boring.PrivateKeyEd25519
 +	orig [PrivateKeySize]byte
 +}
 +
-+func boringPrivateKey(priv PrivateKey) (*boring.PrivateKeyEd25519, error) {
++func boringPrivateKey(priv PrivateKey) (boring.PrivateKeyEd25519, error) {
 +	// Use the pointer to the underlying priv array as key.
 +	p := unsafe.SliceData(priv)
 +	b := privCache.Get(p)
@@ -693,7 +793,7 @@ index 00000000000000..cce33e4d6cc927
 +	copy(b.orig[:], priv)
 +	key, err := boring.NewPrivateKeyEd25519(b.orig[:])
 +	if err != nil {
-+		return nil, err
++		return key, err
 +	}
 +	b.key = key
 +	privCache.Put(p, b)
@@ -825,9 +925,30 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  		return ed25519.Verify(k, message, sig)
  	default:
  		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
+diff --git a/src/crypto/ed25519/ed25519_test.go b/src/crypto/ed25519/ed25519_test.go
+index 87d0132df11d8b..00dd5224a70418 100644
+--- a/src/crypto/ed25519/ed25519_test.go
++++ b/src/crypto/ed25519/ed25519_test.go
+@@ -13,6 +13,7 @@ import (
+ 	"crypto/rand"
+ 	"crypto/sha512"
+ 	"encoding/hex"
++	"internal/goexperiment"
+ 	"log"
+ 	"os"
+ 	"strings"
+@@ -316,7 +317,7 @@ func TestGolden(t *testing.T) {
+ 		copy(priv[32:], pubKey)
+ 
+ 		sig2 := Sign(priv[:], msg)
+-		if !bytes.Equal(sig, sig2[:]) {
++		if !bytes.Equal(sig, sig2[:]) && !goexperiment.DarwinCrypto {
+ 			t.Errorf("different signature result on line %d: %x vs %x", lineNo, sig, sig2)
+ 		}
+ 
 diff --git a/src/crypto/ed25519/notboring.go b/src/crypto/ed25519/notboring.go
 new file mode 100644
-index 00000000000000..b0cdd44d81c753
+index 00000000000000..77b69a3be88183
 --- /dev/null
 +++ b/src/crypto/ed25519/notboring.go
 @@ -0,0 +1,16 @@
@@ -841,10 +962,10 @@ index 00000000000000..b0cdd44d81c753
 +
 +import boring "crypto/internal/backend"
 +
-+func boringPublicKey(PublicKey) (*boring.PublicKeyEd25519, error) {
++func boringPublicKey(PublicKey) (boring.PublicKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
-+func boringPrivateKey(PrivateKey) (*boring.PrivateKeyEd25519, error) {
++func boringPrivateKey(PrivateKey) (boring.PrivateKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
@@ -1200,10 +1321,10 @@ index 90943a0935befb..09ebdfd733e5d6 100644
  		return
  	}
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index b9f9d3154f2589..d52faddef45549 100644
+index 28d16a89f6a1cf..b276571ddf9fc8 100644
 --- a/src/crypto/rsa/boring.go
 +++ b/src/crypto/rsa/boring.go
-@@ -2,13 +2,13 @@
+@@ -2,14 +2,15 @@
  // Use of this source code is governed by a BSD-style
  // license that can be found in the LICENSE file.
  
@@ -1218,8 +1339,22 @@ index b9f9d3154f2589..d52faddef45549 100644
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
  	"crypto/internal/boring/bcache"
++	"internal/goexperiment"
  	"math/big"
  )
+ 
+@@ -62,6 +63,11 @@ type boringPriv struct {
+ }
+ 
+ func boringPrivateKey(priv *PrivateKey) (*boring.PrivateKeyRSA, error) {
++	// CommonCrypto requires the CRT values to be precomputed if nil
++	if goexperiment.DarwinCrypto && (priv.Precomputed.Dp == nil || priv.Precomputed.Dq == nil || priv.Precomputed.Qinv == nil) {
++		priv.Precompute()
++		priv.Precomputed.fips = nil
++	}
+ 	b := privCache.Get(priv)
+ 	if b != nil && privateKeyEqual(&b.orig, priv) {
+ 		return b.key, nil
 diff --git a/src/crypto/rsa/boring_test.go b/src/crypto/rsa/boring_test.go
 index 838fcc1244bdbe..d89f732345e8a3 100644
 --- a/src/crypto/rsa/boring_test.go
@@ -1234,7 +1369,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 8373c125ae3096..cee523891d5897 100644
+index 8373c125ae3096..319fae6fb282db 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -1251,7 +1386,7 @@ index 8373c125ae3096..cee523891d5897 100644
  	}
  
 -	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1260,16 +1395,25 @@ index 8373c125ae3096..cee523891d5897 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSASaltLength(opts.saltLength()) && boring.SupportsHash(hash) {
++	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsHash(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
+@@ -197,7 +197,7 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
+ 
+ 	defer hash.Reset()
+ 
+-	if boring.Enabled && random == boring.RandReader {
++	if boring.Enabled && random == boring.RandReader && boring.SupportsRSAOAEPLabel(label) {
+ 		hash.Reset()
+ 		k := pub.Size()
+ 		if len(msg) > k-2*hash.Size()-2 {
 @@ -250,7 +250,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) {
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
@@ -1278,10 +1422,19 @@ index 8373c125ae3096..cee523891d5897 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsPKCS1v15Hash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
+@@ -355,7 +355,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+ 		return err
+ 	}
+ 
+-	if boring.Enabled {
++	if boring.Enabled && boring.SupportsPKCS1v15Hash(hash) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return err
 diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
 index 2abc0436405f8a..3e4d6f3eef61e6 100644
 --- a/src/crypto/rsa/notboring.go
@@ -1355,10 +1508,10 @@ index c65552cd93526a..910416abe842f5 100644
  	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
  	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index e03f4ab06603c6..f31d492d53cf96 100644
+index e03f4ab06603c6..cd44f3af23b0d4 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -8,6 +8,7 @@ import (
+@@ -8,12 +8,14 @@ import (
  	"bufio"
  	"compress/bzip2"
  	"crypto"
@@ -1366,7 +1519,24 @@ index e03f4ab06603c6..f31d492d53cf96 100644
  	"crypto/internal/fips140"
  	"crypto/rand"
  	. "crypto/rsa"
-@@ -180,6 +181,10 @@ func TestPSSSigning(t *testing.T) {
+ 	"crypto/sha256"
+ 	"crypto/sha512"
+ 	"encoding/hex"
++	"internal/goexperiment"
+ 	"math/big"
+ 	"os"
+ 	"strconv"
+@@ -104,6 +106,9 @@ func TestPSSGolden(t *testing.T) {
+ 			hashed = h.Sum(hashed[:0])
+ 
+ 			if err := VerifyPSS(key, hash, hashed, sig, opts); err != nil {
++				if goexperiment.DarwinCrypto && key.N.BitLen() == 1025 {
++					t.Skip("CommonCrypto doesn't support golden test entries with this key size")
++				}
+ 				t.Error(err)
+ 			}
+ 		default:
+@@ -180,6 +185,10 @@ func TestPSSSigning(t *testing.T) {
  			continue
  		}
  
@@ -1377,7 +1547,7 @@ index e03f4ab06603c6..f31d492d53cf96 100644
  		opts.SaltLength = test.verifySaltLength
  		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
  		good := test.good
-@@ -241,7 +246,9 @@ func fromHex(hexStr string) []byte {
+@@ -241,7 +250,9 @@ func fromHex(hexStr string) []byte {
  
  func TestInvalidPSSSaltLength(t *testing.T) {
  	t.Setenv("GODEBUG", "rsa1024min=0")
@@ -2273,7 +2443,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 8d175079a8c793..48879720026837 100644
+index ab5539f978a266..484c95dfb65f60 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -495,7 +495,7 @@ var depsRules = `
@@ -2285,7 +2455,7 @@ index 8d175079a8c793..48879720026837 100644
  
  	crypto, hash !< FIPS;
  
-@@ -537,6 +537,7 @@ var depsRules = `
+@@ -539,6 +539,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -2293,7 +2463,7 @@ index 8d175079a8c793..48879720026837 100644
  	< CRYPTO;
  
  	CGO, fmt, net !< CRYPTO;
-@@ -561,7 +562,7 @@ var depsRules = `
+@@ -564,7 +565,7 @@ var depsRules = `
  
  	# TLS, Prince of Dependencies.
  
diff --git a/patches/0008-Add-backend-code-gen.patch b/patches/0009-Add-backend-code-gen.patch
similarity index 82%
rename from patches/0008-Add-backend-code-gen.patch
rename to patches/0009-Add-backend-code-gen.patch
index 6ef13b7efdd..966a918bcbb 100644
--- a/patches/0008-Add-backend-code-gen.patch
+++ b/patches/0009-Add-backend-code-gen.patch
@@ -32,23 +32,31 @@ the repository to run the generators.
  .../exp_allowcryptofallback_on.go             |   9 +
  src/internal/goexperiment/flags.go            |   8 +
  .../backenderr_gen_conflict_boring_cng.go     |  17 ++
+ .../backenderr_gen_conflict_boring_darwin.go  |  17 ++
  .../backenderr_gen_conflict_boring_openssl.go |  17 ++
+ .../backenderr_gen_conflict_cng_darwin.go     |  17 ++
  .../backenderr_gen_conflict_cng_openssl.go    |  17 ++
+ .../backenderr_gen_conflict_darwin_openssl.go |  17 ++
  .../backenderr_gen_nofallback_boring.go       |  24 ++
  src/runtime/backenderr_gen_nofallback_cng.go  |  24 ++
+ .../backenderr_gen_nofallback_darwin.go       |  24 ++
  .../backenderr_gen_nofallback_openssl.go      |  24 ++
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 ++
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
- 14 files changed, 487 insertions(+), 1 deletion(-)
+ 18 files changed, 562 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
  create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
  create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
  create mode 100644 src/runtime/backenderr_gen_conflict_boring_cng.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_boring_darwin.go
  create mode 100644 src/runtime/backenderr_gen_conflict_boring_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_cng_darwin.go
  create mode 100644 src/runtime/backenderr_gen_conflict_cng_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_darwin_openssl.go
  create mode 100644 src/runtime/backenderr_gen_nofallback_boring.go
  create mode 100644 src/runtime/backenderr_gen_nofallback_cng.go
+ create mode 100644 src/runtime/backenderr_gen_nofallback_darwin.go
  create mode 100644 src/runtime/backenderr_gen_nofallback_openssl.go
  create mode 100644 src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
  create mode 100644 src/runtime/backenderr_gen_systemcrypto_nobackend.go
@@ -370,7 +378,7 @@ index 00000000000000..1ba948c8f207e5
 +	return bs
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
-index ad6081552af15d..d5948dbc5f8a2a 100644
+index 5c2f56d000a2a8..6f87fc053bb4b1 100644
 --- a/src/crypto/internal/backend/nobackend.go
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -4,7 +4,7 @@
@@ -378,7 +386,7 @@ index ad6081552af15d..d5948dbc5f8a2a 100644
  // Do not edit the build constraint by hand. It is generated by "backendgen.go".
  
 -//go:build ignore
-+//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows) && !(goexperiment.opensslcrypto && linux && cgo)
++//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
  
  package backend
  
@@ -413,10 +421,10 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index c2f69930e2240e..c8e10ebc1696c4 100644
+index e6c9b7d5e62dc0..65d339be7dde32 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -77,6 +77,14 @@ type Flags struct {
+@@ -78,6 +78,14 @@ type Flags struct {
  	// being used to build the Go program.
  	SystemCrypto bool
  
@@ -454,6 +462,29 @@ index 00000000000000..361db2a962d60f
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/runtime/backenderr_gen_conflict_boring_darwin.go b/src/runtime/backenderr_gen_conflict_boring_darwin.go
+new file mode 100644
+index 00000000000000..6c48a4e50fa72e
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_boring_darwin.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.boringcrypto && goexperiment.darwincrypto
++
++package runtime
++
++func init() {
++	`
++	The boring and darwin backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/runtime/backenderr_gen_conflict_boring_openssl.go b/src/runtime/backenderr_gen_conflict_boring_openssl.go
 new file mode 100644
 index 00000000000000..91fac35011b24c
@@ -477,6 +508,29 @@ index 00000000000000..91fac35011b24c
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/runtime/backenderr_gen_conflict_cng_darwin.go b/src/runtime/backenderr_gen_conflict_cng_darwin.go
+new file mode 100644
+index 00000000000000..2e82a5cff034b7
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_cng_darwin.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.cngcrypto && goexperiment.darwincrypto
++
++package runtime
++
++func init() {
++	`
++	The cng and darwin backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/runtime/backenderr_gen_conflict_cng_openssl.go b/src/runtime/backenderr_gen_conflict_cng_openssl.go
 new file mode 100644
 index 00000000000000..bf44084570bbbc
@@ -500,6 +554,29 @@ index 00000000000000..bf44084570bbbc
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/runtime/backenderr_gen_conflict_darwin_openssl.go b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
+new file mode 100644
+index 00000000000000..90f4361e28cd94
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.darwincrypto && goexperiment.opensslcrypto
++
++package runtime
++
++func init() {
++	`
++	The darwin and openssl backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/runtime/backenderr_gen_nofallback_boring.go b/src/runtime/backenderr_gen_nofallback_boring.go
 new file mode 100644
 index 00000000000000..6db0ed6dc09639
@@ -560,9 +637,39 @@ index 00000000000000..ae7f798ea41225
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/runtime/backenderr_gen_nofallback_darwin.go b/src/runtime/backenderr_gen_nofallback_darwin.go
+new file mode 100644
+index 00000000000000..8a32f2cb25bda2
+--- /dev/null
++++ b/src/runtime/backenderr_gen_nofallback_darwin.go
+@@ -0,0 +1,24 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !goexperiment.allowcryptofallback
++
++package runtime
++
++func init() {
++	`
++	The goexperiment.darwincrypto tag is specified, but other tags required to enable that backend were not met.
++	Required build tags:
++	  goexperiment.darwincrypto && darwin && cgo
++	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	
++	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
++	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
++	Removing darwincrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/runtime/backenderr_gen_nofallback_openssl.go b/src/runtime/backenderr_gen_nofallback_openssl.go
 new file mode 100644
-index 00000000000000..351be70262084b
+index 00000000000000..7e1679dfc37a23
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_openssl.go
 @@ -0,0 +1,24 @@
@@ -615,7 +722,7 @@ index 00000000000000..1c015dd2b08972
 +}
 diff --git a/src/runtime/backenderr_gen_systemcrypto_nobackend.go b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
 new file mode 100644
-index 00000000000000..97ba7da6260b50
+index 00000000000000..95be7ad8d38cae
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
 @@ -0,0 +1,16 @@
@@ -625,7 +732,7 @@ index 00000000000000..97ba7da6260b50
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.opensslcrypto
++//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
 +
 +package runtime
 +
diff --git a/patches/0009-Update-default-go.env.patch b/patches/0010-Update-default-go.env.patch
similarity index 100%
rename from patches/0009-Update-default-go.env.patch
rename to patches/0010-Update-default-go.env.patch
diff --git a/patches/0010-Skip-failing-tests-on-Windows.patch b/patches/0011-Skip-failing-tests-on-Windows.patch
similarity index 100%
rename from patches/0010-Skip-failing-tests-on-Windows.patch
rename to patches/0011-Skip-failing-tests-on-Windows.patch
diff --git a/patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0012-unset-GOFIPS-when-running-the-Go-toolchain.patch
similarity index 100%
rename from patches/0011-unset-GOFIPS-when-running-the-Go-toolchain.patch
rename to patches/0012-unset-GOFIPS-when-running-the-Go-toolchain.patch
diff --git a/patches/0012-add-support-for-logging-used-Windows-APIs.patch b/patches/0013-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0012-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0013-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0013-remove-long-path-support-hack.patch b/patches/0014-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0013-remove-long-path-support-hack.patch
rename to patches/0014-remove-long-path-support-hack.patch
diff --git a/patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0015-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0014-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0015-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
similarity index 100%
rename from patches/0015-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
rename to patches/0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

From 9dc29ab89bd54e235880c015a102daf0f38cbdd4 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Wed, 15 Jan 2025 16:34:16 +0100
Subject: [PATCH 192/887] Merge backend patch files

---
 .../0003-Add-crypto-backend-foundation.patch  |  576 -----
 ...03-Implement-crypto-internal-backend.patch | 2166 +++++++++++++++++
 .../0004-Add-BoringSSL-crypto-backend.patch   |  334 ---
 ...s.patch => 0004-Use-crypto-backends.patch} |  186 +-
 patches/0005-Add-OpenSSL-crypto-backend.patch |  507 ----
 ....patch => 0005-Add-backend-code-gen.patch} |    0
 patches/0006-Add-CNG-crypto-backend.patch     |  413 ----
 ...patch => 0006-Update-default-go.env.patch} |    0
 patches/0007-Add-Darwin-crypto-backend.patch  |  547 -----
 ... 0007-Skip-failing-tests-on-Windows.patch} |    0
 ...OFIPS-when-running-the-Go-toolchain.patch} |    0
 ...pport-for-logging-used-Windows-APIs.patch} |    0
 ... 0010-remove-long-path-support-hack.patch} |    0
 ...ernal-go.mod-files-used-for-codegen.patch} |    0
 ...21-when-TLS-fipsonly-mode-is-enable.patch} |    0
 15 files changed, 2346 insertions(+), 2383 deletions(-)
 delete mode 100644 patches/0003-Add-crypto-backend-foundation.patch
 create mode 100644 patches/0003-Implement-crypto-internal-backend.patch
 delete mode 100644 patches/0004-Add-BoringSSL-crypto-backend.patch
 rename patches/{0008-Use-crypto-backends.patch => 0004-Use-crypto-backends.patch} (92%)
 delete mode 100644 patches/0005-Add-OpenSSL-crypto-backend.patch
 rename patches/{0009-Add-backend-code-gen.patch => 0005-Add-backend-code-gen.patch} (100%)
 delete mode 100644 patches/0006-Add-CNG-crypto-backend.patch
 rename patches/{0010-Update-default-go.env.patch => 0006-Update-default-go.env.patch} (100%)
 delete mode 100644 patches/0007-Add-Darwin-crypto-backend.patch
 rename patches/{0011-Skip-failing-tests-on-Windows.patch => 0007-Skip-failing-tests-on-Windows.patch} (100%)
 rename patches/{0012-unset-GOFIPS-when-running-the-Go-toolchain.patch => 0008-unset-GOFIPS-when-running-the-Go-toolchain.patch} (100%)
 rename patches/{0013-add-support-for-logging-used-Windows-APIs.patch => 0009-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0014-remove-long-path-support-hack.patch => 0010-remove-long-path-support-hack.patch} (100%)
 rename patches/{0015-Omit-internal-go.mod-files-used-for-codegen.patch => 0011-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch => 0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch} (100%)

diff --git a/patches/0003-Add-crypto-backend-foundation.patch b/patches/0003-Add-crypto-backend-foundation.patch
deleted file mode 100644
index 1505ab5d1ff..00000000000
--- a/patches/0003-Add-crypto-backend-foundation.patch
+++ /dev/null
@@ -1,576 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Tue, 14 Jan 2025 11:09:56 +0100
-Subject: [PATCH] Add crypto backend foundation
-
----
- src/crypto/internal/backend/backend_test.go   |  30 +++
- src/crypto/internal/backend/bbig/big.go       |  17 ++
- src/crypto/internal/backend/common.go         |  58 +++++
- .../internal/backend/fips140/fips140.go       |  55 ++++
- .../internal/backend/fips140/isrequirefips.go |   9 +
- .../internal/backend/fips140/norequirefips.go |   9 +
- .../backend/fips140/nosystemcrypto.go         |  11 +
- src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++++++++
- src/crypto/internal/backend/stub.s            |  10 +
- src/go/build/deps_test.go                     |   7 +-
- src/runtime/runtime_boring.go                 |   5 +
- 11 files changed, 450 insertions(+), 1 deletion(-)
- create mode 100644 src/crypto/internal/backend/backend_test.go
- create mode 100644 src/crypto/internal/backend/bbig/big.go
- create mode 100644 src/crypto/internal/backend/common.go
- create mode 100644 src/crypto/internal/backend/fips140/fips140.go
- create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
- create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
- create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
- create mode 100644 src/crypto/internal/backend/nobackend.go
- create mode 100644 src/crypto/internal/backend/stub.s
-
-diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
-new file mode 100644
-index 00000000000000..c2c06d3bff8c74
---- /dev/null
-+++ b/src/crypto/internal/backend/backend_test.go
-@@ -0,0 +1,30 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"testing"
-+)
-+
-+// Test that Unreachable panics.
-+func TestUnreachable(t *testing.T) {
-+	defer func() {
-+		if Enabled {
-+			if err := recover(); err == nil {
-+				t.Fatal("expected Unreachable to panic")
-+			}
-+		} else {
-+			if err := recover(); err != nil {
-+				t.Fatalf("expected Unreachable to be a no-op")
-+			}
-+		}
-+	}()
-+	Unreachable()
-+}
-+
-+// Test that UnreachableExceptTests does not panic (this is a test).
-+func TestUnreachableExceptTests(t *testing.T) {
-+	UnreachableExceptTests()
-+}
-diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
-new file mode 100644
-index 00000000000000..ab3f30825dcfa1
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big.go
-@@ -0,0 +1,17 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto || (goexperiment.darwincrypto && !cgo)
-+
-+package bbig
-+
-+import "math/big"
-+
-+func Enc(b *big.Int) []uint {
-+	return nil
-+}
-+
-+func Dec(b []uint) *big.Int {
-+	return nil
-+}
-diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-new file mode 100644
-index 00000000000000..84447174284ffd
---- /dev/null
-+++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,58 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"crypto/internal/backend/fips140"
-+	"crypto/internal/boring/sig"
-+	"runtime"
-+)
-+
-+func init() {
-+	if fips140.Enabled() {
-+		if !Enabled {
-+			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
-+				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
-+			}
-+			panic("FIPS mode requested (" + fips140.Message + ") but no supported crypto backend is enabled")
-+		}
-+	}
-+}
-+
-+// Unreachable marks code that should be unreachable
-+// when backend is in use.
-+func Unreachable() {
-+	if Enabled {
-+		panic("cryptobackend: invalid code execution")
-+	} else {
-+		// Code that's unreachable is exactly the code
-+		// we want to detect for reporting standard Go crypto.
-+		sig.StandardCrypto()
-+	}
-+}
-+
-+// Provided by runtime.crypto_backend_runtime_arg0 to avoid os import.
-+func runtime_arg0() string
-+
-+func hasSuffix(s, t string) bool {
-+	return len(s) > len(t) && s[len(s)-len(t):] == t
-+}
-+
-+// UnreachableExceptTests marks code that should be unreachable
-+// when backend is in use. It panics.
-+func UnreachableExceptTests() {
-+	// runtime_arg0 is not supported on windows.
-+	// We are going through the same code patch on linux,
-+	// so if we are unintentionally calling an 'unreachable' function,
-+	// we will catch it there.
-+	if Enabled && runtime.GOOS != "windows" {
-+		name := runtime_arg0()
-+		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
-+		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-+			println("cryptobackend: unexpected code execution in", name)
-+			panic("cryptobackend: invalid code execution")
-+		}
-+	}
-+}
-diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
-new file mode 100644
-index 00000000000000..f54d39970319af
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,55 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package fips140
-+
-+import "syscall"
-+
-+// Enabled reports whether FIPS 140 mode is enabled by using GOFIPS=1, GOLANG_FIPS=1,
-+// the 'requirefips' build tag, or any other platform-specific mechanism.
-+func Enabled() bool {
-+	return enabled
-+}
-+
-+var enabled bool
-+
-+// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS=0 or GOLANG_FIPS=0.
-+func Disabled() bool {
-+	return disabled
-+}
-+
-+var disabled bool
-+
-+// Message is a human-readable message about how [Enabled] was set.
-+var Message string
-+
-+func init() {
-+	// TODO: Decide which environment variable to use.
-+	// See https://github.com/microsoft/go/issues/397.
-+	var value string
-+	var ok bool
-+	if value, ok = syscall.Getenv("GOFIPS"); ok {
-+		Message = "environment variable GOFIPS"
-+	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
-+		Message = "environment variable GOLANG_FIPS"
-+	} else if systemFIPSMode() {
-+		Message = "system FIPS mode"
-+		value = "1"
-+	}
-+	if value == "1" {
-+		enabled = true
-+	} else if value == "0" {
-+		disabled = true
-+	}
-+	if isRequireFIPS {
-+		if disabled {
-+			panic("the 'requirefips' build tag is enabled, but it conflicts " +
-+				"with the " + Message + "=" + value +
-+				" which would disable FIPS mode")
-+		}
-+		Message = "requirefips tag set"
-+		enabled = true
-+		return
-+	}
-+}
-\ No newline at end of file
-diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
-new file mode 100644
-index 00000000000000..b33d08c84e2dae
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/isrequirefips.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build requirefips
-+
-+package fips140
-+
-+const isRequireFIPS = true
-\ No newline at end of file
-diff --git a/src/crypto/internal/backend/fips140/norequirefips.go b/src/crypto/internal/backend/fips140/norequirefips.go
-new file mode 100644
-index 00000000000000..6f01b9a3524dee
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/norequirefips.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !requirefips
-+
-+package fips140
-+
-+const isRequireFIPS = false
-\ No newline at end of file
-diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
-new file mode 100644
-index 00000000000000..83691d7dd42d51
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
-@@ -0,0 +1,11 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package fips140
-+
-+func systemFIPSMode() bool {
-+	return false
-+}
-diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
-new file mode 100644
-index 00000000000000..eca1ceab2a04b9
---- /dev/null
-+++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,240 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Do not edit the build constraint by hand. It is generated by "backendgen.go".
-+
-+//go:build ignore
-+
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"hash"
-+)
-+
-+const Enabled = false
-+
-+type BigInt = []uint
-+
-+type randReader int
-+
-+func (randReader) Read(b []byte) (int, error) { panic("cryptobackend: not available") }
-+
-+const RandReader = randReader(0)
-+
-+func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
-+
-+func SupportsCurve(curve string) bool            { panic("cryptobackend: not available") }
-+func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
-+
-+func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
-+func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA256() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA384() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)       { panic("cryptobackend: not available") }
-+func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte)     { panic("cryptobackend: not available") }
-+func SHA384(p []byte) (sum [48]byte)     { panic("cryptobackend: not available") }
-+func SHA512(p []byte) (sum [64]byte)     { panic("cryptobackend: not available") }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
-+
-+func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { panic("cryptobackend: not available") }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
-+
-+type PublicKeyECDSA struct{ _ int }
-+type PrivateKeyECDSA struct{ _ int }
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool           { panic("cryptobackend: not available") }
-+func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
-+
-+type PublicKeyRSA struct{ _ int }
-+type PrivateKeyRSA struct{ _ int }
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
-+func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PublicKeyECDH struct{}
-+type PrivateKeyECDH struct{}
-+
-+func ECDH(*PrivateKeyECDH, *PublicKeyECDH) ([]byte, error)    { panic("cryptobackend: not available") }
-+func GenerateKeyECDH(string) (*PrivateKeyECDH, []byte, error) { panic("cryptobackend: not available") }
-+func NewPrivateKeyECDH(string, []byte) (*PrivateKeyECDH, error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPublicKeyECDH(string, []byte) (*PublicKeyECDH, error) { panic("cryptobackend: not available") }
-+func (*PublicKeyECDH) Bytes() []byte                          { panic("cryptobackend: not available") }
-+func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)    { panic("cryptobackend: not available") }
-+
-+func SupportsHKDF() bool { panic("cryptobackend: not available") }
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsPBKDF2() bool { panic("cryptobackend: not available") }
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsTLS1PRF() bool { panic("cryptobackend: not available") }
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDESCipher() bool { panic("cryptobackend: not available") }
-+
-+func SupportsTripleDESCipher() bool { panic("cryptobackend: not available") }
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
-+
-+func SupportsRC4() bool { panic("cryptobackend: not available") }
-+
-+type RC4Cipher struct{}
-+
-+func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { panic("cryptobackend: not available") }
-+
-+func SupportsEd25519() bool { panic("cryptobackend: not available") }
-+
-+type PublicKeyEd25519 struct{}
-+
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyEd25519 struct{}
-+
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDSA(l, n int) bool {
-+	panic("cryptobackend: not available")
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PublicKeyDSA struct{ _ int }
-+type PrivateKeyDSA struct{ _ int }
-+
-+func GenerateKeyDSA(p, q, g BigInt) (x, y BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (BigInt, BigInt, error)) (r, s BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
-diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
-new file mode 100644
-index 00000000000000..5e4b436554d44d
---- /dev/null
-+++ b/src/crypto/internal/backend/stub.s
-@@ -0,0 +1,10 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// runtime_arg0 is declared in common.go without a body.
-+// It's provided by package runtime,
-+// but the go command doesn't know that.
-+// Having this assembly file keeps the go command
-+// from complaining about the missing body
-+// (because the implementation might be here).
-diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e017efb1562379..ab5539f978a266 100644
---- a/src/go/build/deps_test.go
-+++ b/src/go/build/deps_test.go
-@@ -493,6 +493,8 @@ var depsRules = `
- 	< crypto/internal/fips140/rsa
- 	< FIPS;
- 
-+	syscall < crypto/internal/backend/fips140;
-+
- 	FIPS, internal/godebug < crypto/fips140;
- 
- 	crypto, hash !< FIPS;
-@@ -506,7 +508,8 @@ var depsRules = `
- 	FIPS, internal/godebug, hash, embed, encoding/binary,
- 	crypto/internal/boring/sig,
- 	crypto/internal/boring/syso,
--	crypto/internal/boring/bcache
-+	crypto/internal/boring/bcache,
-+	crypto/internal/backend/fips140
- 	< crypto/internal/fips140only
- 	< crypto
- 	< crypto/subtle
-@@ -522,6 +525,7 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
- 	< github.com/microsoft/go-crypto-winnative/cng
- 	< crypto/internal/boring
-+	< crypto/internal/backend
- 	< crypto/boring
- 	< crypto/aes,
- 	  crypto/des,
-@@ -546,6 +550,7 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-darwin/bbig
- 	< github.com/microsoft/go-crypto-winnative/cng/bbig
- 	< crypto/internal/boring/bbig
-+	< crypto/internal/backend/bbig
- 	< crypto/rand
- 	< crypto/ed25519 # depends on crypto/rand.Reader
- 	< encoding/asn1
-diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
-index 5a98b20253181c..9042f2c2795e19 100644
---- a/src/runtime/runtime_boring.go
-+++ b/src/runtime/runtime_boring.go
-@@ -17,3 +17,8 @@ func boring_runtime_arg0() string {
- 
- //go:linkname fipstls_runtime_arg0 crypto/internal/boring/fipstls.runtime_arg0
- func fipstls_runtime_arg0() string { return boring_runtime_arg0() }
-+
-+//go:linkname crypto_backend_runtime_arg0 crypto/internal/backend.runtime_arg0
-+func crypto_backend_runtime_arg0() string {
-+	return boring_runtime_arg0()
-+}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
new file mode 100644
index 00000000000..5f7843d851e
--- /dev/null
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -0,0 +1,2166 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Wed, 15 Jan 2025 16:32:26 +0100
+Subject: [PATCH] Implement crypto/internal/backend
+
+---
+ .gitignore                                    |   2 +
+ src/crypto/internal/backend/backend_test.go   |  30 ++
+ src/crypto/internal/backend/bbig/big.go       |  17 +
+ .../internal/backend/bbig/big_boring.go       |  12 +
+ src/crypto/internal/backend/bbig/big_cng.go   |  12 +
+ .../internal/backend/bbig/big_darwin.go       |  12 +
+ .../internal/backend/bbig/big_openssl.go      |  12 +
+ src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 336 ++++++++++++++++
+ src/crypto/internal/backend/common.go         |  58 +++
+ src/crypto/internal/backend/darwin_darwin.go  | 359 +++++++++++++++++
+ src/crypto/internal/backend/fips140/boring.go |  11 +
+ src/crypto/internal/backend/fips140/cng.go    |  33 ++
+ src/crypto/internal/backend/fips140/darwin.go |  11 +
+ .../internal/backend/fips140/fips140.go       |  55 +++
+ .../internal/backend/fips140/isrequirefips.go |   9 +
+ .../internal/backend/fips140/norequirefips.go |   9 +
+ .../backend/fips140/nosystemcrypto.go         |  11 +
+ .../internal/backend/fips140/openssl.go       |  41 ++
+ src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
+ src/crypto/internal/backend/stub.s            |  10 +
+ src/go/build/deps_test.go                     |   7 +-
+ src/runtime/runtime_boring.go                 |   5 +
+ 24 files changed, 1932 insertions(+), 1 deletion(-)
+ create mode 100644 src/crypto/internal/backend/backend_test.go
+ create mode 100644 src/crypto/internal/backend/bbig/big.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
+ create mode 100644 src/crypto/internal/backend/boring_linux.go
+ create mode 100644 src/crypto/internal/backend/cng_windows.go
+ create mode 100644 src/crypto/internal/backend/common.go
+ create mode 100644 src/crypto/internal/backend/darwin_darwin.go
+ create mode 100644 src/crypto/internal/backend/fips140/boring.go
+ create mode 100644 src/crypto/internal/backend/fips140/cng.go
+ create mode 100644 src/crypto/internal/backend/fips140/darwin.go
+ create mode 100644 src/crypto/internal/backend/fips140/fips140.go
+ create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
+ create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
+ create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl.go
+ create mode 100644 src/crypto/internal/backend/nobackend.go
+ create mode 100644 src/crypto/internal/backend/openssl_linux.go
+ create mode 100644 src/crypto/internal/backend/stub.s
+
+diff --git a/.gitignore b/.gitignore
+index c6512e64a4ef39..b3b01db73b009d 100644
+--- a/.gitignore
++++ b/.gitignore
+@@ -46,6 +46,8 @@ _testmain.go
+ /test/run.out
+ /test/times.out
+ 
++!/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
++
+ # This file includes artifacts of Go build that should not be checked in.
+ # For files created by specific development environment (e.g. editor),
+ # use alternative ways to exclude files from git.
+diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
+new file mode 100644
+index 00000000000000..c2c06d3bff8c74
+--- /dev/null
++++ b/src/crypto/internal/backend/backend_test.go
+@@ -0,0 +1,30 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package backend
++
++import (
++	"testing"
++)
++
++// Test that Unreachable panics.
++func TestUnreachable(t *testing.T) {
++	defer func() {
++		if Enabled {
++			if err := recover(); err == nil {
++				t.Fatal("expected Unreachable to panic")
++			}
++		} else {
++			if err := recover(); err != nil {
++				t.Fatalf("expected Unreachable to be a no-op")
++			}
++		}
++	}()
++	Unreachable()
++}
++
++// Test that UnreachableExceptTests does not panic (this is a test).
++func TestUnreachableExceptTests(t *testing.T) {
++	UnreachableExceptTests()
++}
+diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
+new file mode 100644
+index 00000000000000..ab3f30825dcfa1
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big.go
+@@ -0,0 +1,17 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto || (goexperiment.darwincrypto && !cgo)
++
++package bbig
++
++import "math/big"
++
++func Enc(b *big.Int) []uint {
++	return nil
++}
++
++func Dec(b []uint) *big.Int {
++	return nil
++}
+diff --git a/src/crypto/internal/backend/bbig/big_boring.go b/src/crypto/internal/backend/bbig/big_boring.go
+new file mode 100644
+index 00000000000000..0b62cef68546d0
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_boring.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.boringcrypto
++
++package bbig
++
++import "crypto/internal/boring/bbig"
++
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
+new file mode 100644
+index 00000000000000..92623031fd87d0
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_cng.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.cngcrypto
++
++package bbig
++
++import "github.com/microsoft/go-crypto-winnative/cng/bbig"
++
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
+new file mode 100644
+index 00000000000000..77f3ca5d262769
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_darwin.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto && cgo
++
++package bbig
++
++import "github.com/microsoft/go-crypto-darwin/bbig"
++
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/bbig/big_openssl.go b/src/crypto/internal/backend/bbig/big_openssl.go
+new file mode 100644
+index 00000000000000..e6695dd66b1d02
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_openssl.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto
++
++package bbig
++
++import "github.com/golang-fips/openssl/v2/bbig"
++
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
+new file mode 100644
+index 00000000000000..f06fcc63b5af11
+--- /dev/null
++++ b/src/crypto/internal/backend/boring_linux.go
+@@ -0,0 +1,279 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
++
++// Package boring provides access to BoringCrypto implementation functions.
++// Check the variable Enabled to find out whether BoringCrypto is available.
++// If BoringCrypto is not available, the functions in this package all panic.
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/boring"
++	"hash"
++)
++
++const Enabled = true
++
++type BigInt = boring.BigInt
++
++const RandReader = boring.RandReader
++
++func SupportsHash(h crypto.Hash) bool {
++	switch h {
++	case crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
++		return true
++	default:
++		return false
++	}
++}
++
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
++func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
++func NewSHA1() hash.Hash       { return boring.NewSHA1() }
++func NewSHA224() hash.Hash     { return boring.NewSHA224() }
++func NewSHA256() hash.Hash     { return boring.NewSHA256() }
++func NewSHA384() hash.Hash     { return boring.NewSHA384() }
++func NewSHA512() hash.Hash     { return boring.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++
++func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)       { return boring.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return boring.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return boring.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return boring.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return boring.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return boring.NewHMAC(h, key) }
++
++func NewAESCipher(key []byte) (cipher.Block, error)   { return boring.NewAESCipher(key) }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return boring.NewGCMTLS(c) }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS13(c) }
++
++type PublicKeyECDSA = boring.PublicKeyECDSA
++type PrivateKeyECDSA = boring.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D boring.BigInt, err error) {
++	return boring.GenerateKeyECDSA(curve)
++}
++
++func NewPrivateKeyECDSA(curve string, X, Y, D boring.BigInt) (*boring.PrivateKeyECDSA, error) {
++	return boring.NewPrivateKeyECDSA(curve, X, Y, D)
++}
++
++func NewPublicKeyECDSA(curve string, X, Y boring.BigInt) (*boring.PublicKeyECDSA, error) {
++	return boring.NewPublicKeyECDSA(curve, X, Y)
++}
++
++func SignMarshalECDSA(priv *boring.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return boring.SignMarshalECDSA(priv, hash)
++}
++
++func VerifyECDSA(pub *boring.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return boring.VerifyECDSA(pub, hash, sig)
++}
++
++func SupportsRSAKeyPrimes(primes int) bool {
++	return true
++}
++
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	return true
++}
++
++type PublicKeyRSA = boring.PublicKeyRSA
++type PrivateKeyRSA = boring.PrivateKeyRSA
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *boring.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return boring.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
++}
++
++func DecryptRSAPKCS1(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return boring.DecryptRSAPKCS1(priv, ciphertext)
++}
++
++func DecryptRSANoPadding(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return boring.DecryptRSANoPadding(priv, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *boring.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return boring.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
++}
++
++func EncryptRSAPKCS1(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return boring.EncryptRSAPKCS1(pub, msg)
++}
++
++func EncryptRSANoPadding(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return boring.EncryptRSANoPadding(pub, msg)
++}
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt, err error) {
++	return boring.GenerateKeyRSA(bits)
++}
++
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt) (*boring.PrivateKeyRSA, error) {
++	return boring.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++}
++
++func NewPublicKeyRSA(N, E boring.BigInt) (*boring.PublicKeyRSA, error) {
++	return boring.NewPublicKeyRSA(N, E)
++}
++
++func SignRSAPKCS1v15(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return boring.SignRSAPKCS1v15(priv, h, hashed)
++}
++
++func SignRSAPSS(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return boring.SignRSAPSS(priv, h, hashed, saltLen)
++}
++
++func VerifyRSAPKCS1v15(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return boring.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
++
++func VerifyRSAPSS(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return boring.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
++
++type PublicKeyECDH = boring.PublicKeyECDH
++type PrivateKeyECDH = boring.PrivateKeyECDH
++
++func ECDH(priv *boring.PrivateKeyECDH, pub *boring.PublicKeyECDH) ([]byte, error) {
++	return boring.ECDH(priv, pub)
++}
++
++func GenerateKeyECDH(curve string) (*boring.PrivateKeyECDH, []byte, error) {
++	return boring.GenerateKeyECDH(curve)
++}
++
++func NewPrivateKeyECDH(curve string, bytes []byte) (*boring.PrivateKeyECDH, error) {
++	return boring.NewPrivateKeyECDH(curve, bytes)
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*boring.PublicKeyECDH, error) {
++	return boring.NewPublicKeyECDH(curve, bytes)
++}
++
++func SupportsHKDF() bool { return false }
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsPBKDF2() bool { return false }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsTLS1PRF() bool { return false }
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDESCipher() bool { return false }
++
++func SupportsTripleDESCipher() bool { return false }
++
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsRC4() bool { return false }
++
++type RC4Cipher struct{}
++
++func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsEd25519() bool { return false }
++
++type PublicKeyEd25519 struct{}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyEd25519 struct{}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g boring.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyDSA struct{}
++type PublicKeyDSA struct{}
++
++func GenerateKeyDSA(p, q, g boring.BigInt) (x, y boring.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y boring.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (boring.BigInt, boring.BigInt, error)) (r, s boring.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s boring.BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
++}
+diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
+new file mode 100644
+index 00000000000000..31dfc9b19ee63e
+--- /dev/null
++++ b/src/crypto/internal/backend/cng_windows.go
+@@ -0,0 +1,336 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.cngcrypto && windows
++
++// Package cng provides access to CNGCrypto implementation functions.
++// Check the variable Enabled to find out whether CNGCrypto is available.
++// If CNGCrypto is not available, the functions in this package all panic.
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/backend/fips140"
++	"crypto/internal/boring/sig"
++	"hash"
++	_ "unsafe"
++
++	"github.com/microsoft/go-crypto-winnative/cng"
++)
++
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = cng.BigInt
++
++func init() {
++	if fips140.Enabled() {
++		enabled, err := cng.FIPS()
++		if err != nil {
++			panic("cngcrypto: unknown FIPS mode: " + err.Error())
++		}
++		if !enabled {
++			panic("cngcrypto: not in FIPS mode")
++		}
++	}
++	sig.BoringCrypto()
++}
++
++const RandReader = cng.RandReader
++
++func SupportsHash(h crypto.Hash) bool {
++	return cng.SupportsHash(h)
++}
++
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
++func NewMD5() hash.Hash        { return cng.NewMD5() }
++func NewSHA1() hash.Hash       { return cng.NewSHA1() }
++func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
++func NewSHA256() hash.Hash     { return cng.NewSHA256() }
++func NewSHA384() hash.Hash     { return cng.NewSHA384() }
++func NewSHA512() hash.Hash     { return cng.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
++func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
++
++func MD5(p []byte) (sum [16]byte)        { return cng.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return cng.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { panic("cngcrypto: not available") }
++func SHA256(p []byte) (sum [32]byte)     { return cng.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return cng.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return cng.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cngcrypto: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
++	return cng.NewHMAC(h, key)
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewAESCipher(key)
++}
++
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	return cng.NewGCMTLS(c)
++}
++
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	return cng.NewGCMTLS13(c)
++}
++
++type PublicKeyECDSA = cng.PublicKeyECDSA
++type PrivateKeyECDSA = cng.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D cng.BigInt, err error) {
++	return cng.GenerateKeyECDSA(curve)
++}
++
++func NewPrivateKeyECDSA(curve string, X, Y, D cng.BigInt) (*cng.PrivateKeyECDSA, error) {
++	return cng.NewPrivateKeyECDSA(curve, X, Y, D)
++}
++
++func NewPublicKeyECDSA(curve string, X, Y cng.BigInt) (*cng.PublicKeyECDSA, error) {
++	return cng.NewPublicKeyECDSA(curve, X, Y)
++}
++
++//go:linkname encodeSignature crypto/ecdsa.encodeSignature
++func encodeSignature(r, s []byte) ([]byte, error)
++
++//go:linkname parseSignature crypto/ecdsa.parseSignature
++func parseSignature(sig []byte) (r, s []byte, err error)
++
++func SignMarshalECDSA(priv *cng.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	r, s, err := cng.SignECDSA(priv, hash)
++	if err != nil {
++		return nil, err
++	}
++	return encodeSignature(r, s)
++}
++
++func VerifyECDSA(pub *cng.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	rBytes, sBytes, err := parseSignature(sig)
++	if err != nil {
++		return false
++	}
++	return cng.VerifyECDSA(pub, hash, cng.BigInt(rBytes), cng.BigInt(sBytes))
++}
++
++func SignECDSA(priv *cng.PrivateKeyECDSA, hash []byte) (r, s cng.BigInt, err error) {
++	return cng.SignECDSA(priv, hash)
++}
++
++func VerifyECDSARaw(pub *cng.PublicKeyECDSA, hash []byte, r, s cng.BigInt) bool {
++	return cng.VerifyECDSA(pub, hash, r, s)
++}
++
++func SupportsRSAKeyPrimes(primes int) bool {
++	// CNG only supports 2-prime RSA keys.
++	return primes == 2
++}
++
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	if sign {
++		return true
++	}
++	return salt != 0 // rsa.PSSSaltLengthAuto
++}
++
++type PublicKeyRSA = cng.PublicKeyRSA
++type PrivateKeyRSA = cng.PrivateKeyRSA
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *cng.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return cng.DecryptRSAOAEP(h, priv, ciphertext, label)
++}
++
++func DecryptRSAPKCS1(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return cng.DecryptRSAPKCS1(priv, ciphertext)
++}
++
++func DecryptRSANoPadding(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return cng.DecryptRSANoPadding(priv, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *cng.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return cng.EncryptRSAOAEP(h, pub, msg, label)
++}
++
++func EncryptRSAPKCS1(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return cng.EncryptRSAPKCS1(pub, msg)
++}
++
++func EncryptRSANoPadding(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return cng.EncryptRSANoPadding(pub, msg)
++}
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt, err error) {
++	return cng.GenerateKeyRSA(bits)
++}
++
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt) (*cng.PrivateKeyRSA, error) {
++	return cng.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++}
++
++func NewPublicKeyRSA(N, E cng.BigInt) (*cng.PublicKeyRSA, error) {
++	return cng.NewPublicKeyRSA(N, E)
++}
++
++func SignRSAPKCS1v15(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return cng.SignRSAPKCS1v15(priv, h, hashed)
++}
++
++func SignRSAPSS(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return cng.SignRSAPSS(priv, h, hashed, saltLen)
++}
++
++func VerifyRSAPKCS1v15(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return cng.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
++
++func VerifyRSAPSS(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return cng.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
++
++type PrivateKeyECDH = cng.PrivateKeyECDH
++type PublicKeyECDH = cng.PublicKeyECDH
++
++func ECDH(priv *cng.PrivateKeyECDH, pub *cng.PublicKeyECDH) ([]byte, error) {
++	return cng.ECDH(priv, pub)
++}
++
++func GenerateKeyECDH(curve string) (*cng.PrivateKeyECDH, []byte, error) {
++	return cng.GenerateKeyECDH(curve)
++}
++
++func NewPrivateKeyECDH(curve string, bytes []byte) (*cng.PrivateKeyECDH, error) {
++	return cng.NewPrivateKeyECDH(curve, bytes)
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*cng.PublicKeyECDH, error) {
++	return cng.NewPublicKeyECDH(curve, bytes)
++}
++
++func SupportsHKDF() bool {
++	return cng.SupportsHKDF()
++}
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return cng.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	return cng.ExtractHKDF(h, secret, salt)
++}
++
++func SupportsPBKDF2() bool { return true }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return cng.PBKDF2(password, salt, iter, keyLen, h)
++}
++
++func SupportsTLS1PRF() bool {
++	return true
++}
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	return cng.TLS1PRF(result, secret, label, seed, h)
++}
++
++func SupportsDESCipher() bool {
++	return true
++}
++
++func SupportsTripleDESCipher() bool {
++	return true
++}
++
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewDESCipher(key)
++}
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewTripleDESCipher(key)
++}
++
++func SupportsRC4() bool { return true }
++
++type RC4Cipher = cng.RC4Cipher
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return cng.NewRC4Cipher(key) }
++
++func SupportsEd25519() bool { return false }
++
++type PublicKeyEd25519 struct{}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyEd25519 struct{}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyDSA = cng.PrivateKeyDSA
++type PublicKeyDSA = cng.PublicKeyDSA
++
++func SupportsDSA(l, n int) bool {
++	// These are the only N values supported by CNG
++	return n == 160 || n == 256
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g cng.BigInt, err error) {
++	params, err := cng.GenerateParametersDSA(l)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	return params.P, params.Q, params.G, nil
++}
++
++func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
++	return cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
++	return cng.NewPrivateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, x, y)
++}
++
++func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
++	return cng.NewPublicKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, y)
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {
++	return cng.SignDSA(priv, hash)
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
++	return cng.VerifyDSA(pub, hashed, r, s)
++}
+diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
+new file mode 100644
+index 00000000000000..84447174284ffd
+--- /dev/null
++++ b/src/crypto/internal/backend/common.go
+@@ -0,0 +1,58 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package backend
++
++import (
++	"crypto/internal/backend/fips140"
++	"crypto/internal/boring/sig"
++	"runtime"
++)
++
++func init() {
++	if fips140.Enabled() {
++		if !Enabled {
++			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
++				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
++			}
++			panic("FIPS mode requested (" + fips140.Message + ") but no supported crypto backend is enabled")
++		}
++	}
++}
++
++// Unreachable marks code that should be unreachable
++// when backend is in use.
++func Unreachable() {
++	if Enabled {
++		panic("cryptobackend: invalid code execution")
++	} else {
++		// Code that's unreachable is exactly the code
++		// we want to detect for reporting standard Go crypto.
++		sig.StandardCrypto()
++	}
++}
++
++// Provided by runtime.crypto_backend_runtime_arg0 to avoid os import.
++func runtime_arg0() string
++
++func hasSuffix(s, t string) bool {
++	return len(s) > len(t) && s[len(s)-len(t):] == t
++}
++
++// UnreachableExceptTests marks code that should be unreachable
++// when backend is in use. It panics.
++func UnreachableExceptTests() {
++	// runtime_arg0 is not supported on windows.
++	// We are going through the same code patch on linux,
++	// so if we are unintentionally calling an 'unreachable' function,
++	// we will catch it there.
++	if Enabled && runtime.GOOS != "windows" {
++		name := runtime_arg0()
++		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
++		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
++			println("cryptobackend: unexpected code execution in", name)
++			panic("cryptobackend: invalid code execution")
++		}
++	}
++}
+diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
+new file mode 100644
+index 00000000000000..2250852ada8cc8
+--- /dev/null
++++ b/src/crypto/internal/backend/darwin_darwin.go
+@@ -0,0 +1,359 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto && darwin && cgo
++
++// Package darwin provides access to DarwinCrypto implementation functions.
++// Check the variable Enabled to find out whether DarwinCrypto is available.
++// If DarwinCrypto is not available, the functions in this package all panic.
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/boring/sig"
++	"crypto/internal/fips140/nistec"
++	"errors"
++	"hash"
++	_ "unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
++)
++
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = xcrypto.BigInt
++
++func init() {
++	sig.BoringCrypto()
++}
++
++const RandReader = xcrypto.RandReader
++
++func SupportsHash(h crypto.Hash) bool {
++	return xcrypto.SupportsHash(h)
++}
++
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-256", "P-384", "P-521":
++		return true
++	}
++	return false
++}
++
++func SupportsRSAOAEPLabel(label []byte) bool {
++	// CommonCrypto doesn't support labels
++	// https://github.com/microsoft/go-crypto-darwin/issues/22
++	return len(label) == 0
++}
++
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool {
++	switch hash {
++	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
++		return true
++	}
++	return false
++}
++
++func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
++func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
++func NewSHA224() hash.Hash { return xcrypto.NewSHA224() }
++func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
++func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
++func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
++
++func MD5(p []byte) (sum [16]byte)        { return xcrypto.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return xcrypto.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return xcrypto.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return xcrypto.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return xcrypto.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return xcrypto.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
++	return xcrypto.NewHMAC(h, key)
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewAESCipher(key)
++}
++
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS(c)
++}
++
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS13(c)
++}
++
++type PublicKeyECDSA = xcrypto.PublicKeyECDSA
++type PrivateKeyECDSA = xcrypto.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D xcrypto.BigInt, err error) {
++	return xcrypto.GenerateKeyECDSA(curve)
++}
++
++func NewPrivateKeyECDSA(curve string, X, Y, D xcrypto.BigInt) (*xcrypto.PrivateKeyECDSA, error) {
++	return xcrypto.NewPrivateKeyECDSA(curve, X, Y, D)
++}
++
++func NewPublicKeyECDSA(curve string, X, Y xcrypto.BigInt) (*xcrypto.PublicKeyECDSA, error) {
++	return xcrypto.NewPublicKeyECDSA(curve, X, Y)
++}
++
++//go:linkname encodeSignature crypto/ecdsa.encodeSignature
++func encodeSignature(r, s []byte) ([]byte, error)
++
++//go:linkname parseSignature crypto/ecdsa.parseSignature
++func parseSignature(sig []byte) (r, s []byte, err error)
++
++func SignMarshalECDSA(priv *xcrypto.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return xcrypto.SignMarshalECDSA(priv, hash)
++}
++
++func VerifyECDSA(pub *xcrypto.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return xcrypto.VerifyECDSA(pub, hash, sig)
++}
++
++func SupportsRSAKeyPrimes(primes int) bool {
++	return primes == 2
++}
++
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	// CommonCrypto doesn't support custom salt length
++	return salt == -1
++}
++
++type PublicKeyRSA = xcrypto.PublicKeyRSA
++type PrivateKeyRSA = xcrypto.PrivateKeyRSA
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *xcrypto.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAOAEP(h, priv, ciphertext, label)
++}
++
++func DecryptRSAPKCS1(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAPKCS1(priv, ciphertext)
++}
++
++func DecryptRSANoPadding(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSANoPadding(priv, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *xcrypto.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAOAEP(h, pub, msg, label)
++}
++
++func EncryptRSAPKCS1(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAPKCS1(pub, msg)
++}
++
++func EncryptRSANoPadding(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSANoPadding(pub, msg)
++}
++
++//go:linkname decodeKeyRSA crypto/rsa.decodeKey
++func decodeKeyRSA(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error)
++
++//go:linkname encodeKeyRSA crypto/rsa.encodeKey
++func encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) ([]byte, error)
++
++//go:linkname encodePublicKeyRSA crypto/rsa.encodePublicKey
++func encodePublicKeyRSA(N, E xcrypto.BigInt) ([]byte, error)
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error) {
++	data, err := xcrypto.GenerateKeyRSA(bits)
++	if err != nil {
++		return
++	}
++	return decodeKeyRSA(data)
++}
++
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) (*xcrypto.PrivateKeyRSA, error) {
++	encoded, err := encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPrivateKeyRSA(encoded)
++}
++
++func NewPublicKeyRSA(N, E xcrypto.BigInt) (*xcrypto.PublicKeyRSA, error) {
++	encoded, err := encodePublicKeyRSA(N, E)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPublicKeyRSA(encoded)
++}
++
++func SignRSAPKCS1v15(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return xcrypto.SignRSAPKCS1v15(priv, h, hashed)
++}
++
++func SignRSAPSS(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return xcrypto.SignRSAPSS(priv, h, hashed, saltLen)
++}
++
++func VerifyRSAPKCS1v15(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return xcrypto.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
++
++func VerifyRSAPSS(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return xcrypto.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
++
++type PrivateKeyECDH = xcrypto.PrivateKeyECDH
++type PublicKeyECDH = xcrypto.PublicKeyECDH
++
++func ECDH(priv *xcrypto.PrivateKeyECDH, pub *xcrypto.PublicKeyECDH) ([]byte, error) {
++	return xcrypto.ECDH(priv, pub)
++}
++
++func GenerateKeyECDH(curve string) (*xcrypto.PrivateKeyECDH, []byte, error) {
++	return xcrypto.GenerateKeyECDH(curve)
++}
++
++func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
++	var key []byte
++	switch curve {
++	case "P-256":
++		p, err := nistec.NewP256Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	case "P-384":
++		p, err := nistec.NewP384Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	case "P-521":
++		p, err := nistec.NewP521Point().ScalarBaseMult(bytes)
++		if err != nil {
++			return nil, err
++		}
++		key = p.Bytes()
++	default:
++		return nil, errors.New("NewPrivateKeyECDH: unsupported curve: " + curve)
++	}
++	return xcrypto.NewPrivateKeyECDH(curve, key, bytes)
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
++	return xcrypto.NewPublicKeyECDH(curve, bytes)
++}
++
++func SupportsHKDF() bool {
++	return true
++}
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return xcrypto.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	return xcrypto.ExtractHKDF(h, secret, salt)
++}
++
++func SupportsPBKDF2() bool {
++	return true
++}
++
++func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return xcrypto.PBKDF2(pass, salt, iter, keyLen, h)
++}
++
++func SupportsTLS1PRF() bool {
++	return false
++}
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDESCipher() bool {
++	return true
++}
++
++func SupportsTripleDESCipher() bool {
++	return true
++}
++
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewDESCipher(key)
++}
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewTripleDESCipher(key)
++}
++
++func SupportsRC4() bool { return true }
++
++type RC4Cipher = xcrypto.RC4Cipher
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return xcrypto.NewRC4Cipher(key) }
++
++func SupportsEd25519() bool {
++	return true
++}
++
++type PublicKeyEd25519 = xcrypto.PublicKeyEd25519
++type PrivateKeyEd25519 = xcrypto.PrivateKeyEd25519
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	return xcrypto.GenerateKeyEd25519(), nil
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	return xcrypto.NewPrivateKeyEd25519(priv)
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	return xcrypto.NewPublicKeyEd25519(pub)
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	return xcrypto.NewPrivateKeyEd25519FromSeed(seed)
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	return xcrypto.SignEd25519(priv, message)
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	return xcrypto.VerifyEd25519(pub, message, sig)
++}
++
++func SupportsDSA(l, n int) bool {
++	return false
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyDSA struct{}
++type PublicKeyDSA struct{}
++
++func GenerateKeyDSA(p, q, g xcrypto.BigInt) (x, y xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y xcrypto.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y xcrypto.BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (xcrypto.BigInt, xcrypto.BigInt, error)) (r, s xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
++}
+diff --git a/src/crypto/internal/backend/fips140/boring.go b/src/crypto/internal/backend/fips140/boring.go
+new file mode 100644
+index 00000000000000..3b583dc0eb0235
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/boring.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.boringcrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
+new file mode 100644
+index 00000000000000..f769d15f94ab05
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/cng.go
+@@ -0,0 +1,33 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.cngcrypto
++
++package fips140
++
++import (
++	"internal/syscall/windows/sysdll"
++	"syscall"
++	"unsafe"
++)
++
++// Don't use github.com/microsoft/go-crypto-winnative here.
++// The fips140 package should have minimal dependencies.
++// Also, don't directly query the system FIPS mode from the registry,
++// there are some no-longer documented legacy entries that can enable FIPS mode,
++// and BCryptGetFipsAlgorithmMode supports them all.
++var (
++	bcrypt = syscall.MustLoadDLL(sysdll.Add("bcrypt.dll"))
++
++	bcryptGetFipsAlgorithmMode = bcrypt.MustFindProc("BCryptGetFipsAlgorithmMode")
++)
++
++func systemFIPSMode() bool {
++	var enabled uint32
++	ret, _, _ := bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
++	if ret != 0 {
++		return false
++	}
++	return enabled != 0
++}
+diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
+new file mode 100644
+index 00000000000000..ef5af5d956163e
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/darwin.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
+new file mode 100644
+index 00000000000000..f54d39970319af
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/fips140.go
+@@ -0,0 +1,55 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package fips140
++
++import "syscall"
++
++// Enabled reports whether FIPS 140 mode is enabled by using GOFIPS=1, GOLANG_FIPS=1,
++// the 'requirefips' build tag, or any other platform-specific mechanism.
++func Enabled() bool {
++	return enabled
++}
++
++var enabled bool
++
++// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS=0 or GOLANG_FIPS=0.
++func Disabled() bool {
++	return disabled
++}
++
++var disabled bool
++
++// Message is a human-readable message about how [Enabled] was set.
++var Message string
++
++func init() {
++	// TODO: Decide which environment variable to use.
++	// See https://github.com/microsoft/go/issues/397.
++	var value string
++	var ok bool
++	if value, ok = syscall.Getenv("GOFIPS"); ok {
++		Message = "environment variable GOFIPS"
++	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
++		Message = "environment variable GOLANG_FIPS"
++	} else if systemFIPSMode() {
++		Message = "system FIPS mode"
++		value = "1"
++	}
++	if value == "1" {
++		enabled = true
++	} else if value == "0" {
++		disabled = true
++	}
++	if isRequireFIPS {
++		if disabled {
++			panic("the 'requirefips' build tag is enabled, but it conflicts " +
++				"with the " + Message + "=" + value +
++				" which would disable FIPS mode")
++		}
++		Message = "requirefips tag set"
++		enabled = true
++		return
++	}
++}
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
+new file mode 100644
+index 00000000000000..b33d08c84e2dae
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/isrequirefips.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build requirefips
++
++package fips140
++
++const isRequireFIPS = true
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/norequirefips.go b/src/crypto/internal/backend/fips140/norequirefips.go
+new file mode 100644
+index 00000000000000..6f01b9a3524dee
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/norequirefips.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !requirefips
++
++package fips140
++
++const isRequireFIPS = false
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+new file mode 100644
+index 00000000000000..83691d7dd42d51
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+@@ -0,0 +1,11 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
+new file mode 100644
+index 00000000000000..118efa3a492a7d
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/openssl.go
+@@ -0,0 +1,41 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto
++
++package fips140
++
++import "syscall"
++
++func systemFIPSMode() bool {
++	var fd int
++	for {
++		var err error
++		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
++		if err == nil {
++			break
++		}
++		switch err {
++		case syscall.EINTR:
++			continue
++		case syscall.ENOENT:
++			return false
++		default:
++			// If there is an error reading we could either panic or assume FIPS is not enabled.
++			// Panicking would be too disruptive for apps that don't require FIPS.
++			// If an app wants to be 100% sure that is running in FIPS mode
++			// it should use boring.Enabled() or GOFIPS=1.
++			return false
++		}
++	}
++	defer syscall.Close(fd)
++	var tmp [1]byte
++	n, err := syscall.Read(fd, tmp[:])
++	if n != 1 || err != nil {
++		// We return false instead of panicing for the same reason as before.
++		return false
++	}
++	// fips_enabled can be either '0' or '1'.
++	return tmp[0] == '1'
++}
+diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
+new file mode 100644
+index 00000000000000..eca1ceab2a04b9
+--- /dev/null
++++ b/src/crypto/internal/backend/nobackend.go
+@@ -0,0 +1,240 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Do not edit the build constraint by hand. It is generated by "backendgen.go".
++
++//go:build ignore
++
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"hash"
++)
++
++const Enabled = false
++
++type BigInt = []uint
++
++type randReader int
++
++func (randReader) Read(b []byte) (int, error) { panic("cryptobackend: not available") }
++
++const RandReader = randReader(0)
++
++func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
++
++func SupportsCurve(curve string) bool            { panic("cryptobackend: not available") }
++func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
++
++func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
++func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
++func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA256() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA384() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++
++func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)       { panic("cryptobackend: not available") }
++func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)     { panic("cryptobackend: not available") }
++func SHA384(p []byte) (sum [48]byte)     { panic("cryptobackend: not available") }
++func SHA512(p []byte) (sum [64]byte)     { panic("cryptobackend: not available") }
++func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
++
++func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { panic("cryptobackend: not available") }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
++
++type PublicKeyECDSA struct{ _ int }
++type PrivateKeyECDSA struct{ _ int }
++
++func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
++	panic("cryptobackend: not available")
++}
++func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
++	panic("cryptobackend: not available")
++}
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
++	panic("cryptobackend: not available")
++}
++
++func SupportsRSAKeyPrimes(primes int) bool           { panic("cryptobackend: not available") }
++func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
++
++type PublicKeyRSA struct{ _ int }
++type PrivateKeyRSA struct{ _ int }
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
++	panic("cryptobackend: not available")
++}
++func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) {
++	panic("cryptobackend: not available")
++}
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	panic("cryptobackend: not available")
++}
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	panic("cryptobackend: not available")
++}
++
++type PublicKeyECDH struct{}
++type PrivateKeyECDH struct{}
++
++func ECDH(*PrivateKeyECDH, *PublicKeyECDH) ([]byte, error)    { panic("cryptobackend: not available") }
++func GenerateKeyECDH(string) (*PrivateKeyECDH, []byte, error) { panic("cryptobackend: not available") }
++func NewPrivateKeyECDH(string, []byte) (*PrivateKeyECDH, error) {
++	panic("cryptobackend: not available")
++}
++func NewPublicKeyECDH(string, []byte) (*PublicKeyECDH, error) { panic("cryptobackend: not available") }
++func (*PublicKeyECDH) Bytes() []byte                          { panic("cryptobackend: not available") }
++func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)    { panic("cryptobackend: not available") }
++
++func SupportsHKDF() bool { panic("cryptobackend: not available") }
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsPBKDF2() bool { panic("cryptobackend: not available") }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func SupportsTLS1PRF() bool { panic("cryptobackend: not available") }
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDESCipher() bool { panic("cryptobackend: not available") }
++
++func SupportsTripleDESCipher() bool { panic("cryptobackend: not available") }
++
++func NewDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
++
++func SupportsRC4() bool { panic("cryptobackend: not available") }
++
++type RC4Cipher struct{}
++
++func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { panic("cryptobackend: not available") }
++
++func SupportsEd25519() bool { panic("cryptobackend: not available") }
++
++type PublicKeyEd25519 struct{}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++type PrivateKeyEd25519 struct{}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	panic("cryptobackend: not available")
++}
++
++func SupportsDSA(l, n int) bool {
++	panic("cryptobackend: not available")
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++type PublicKeyDSA struct{ _ int }
++type PrivateKeyDSA struct{ _ int }
++
++func GenerateKeyDSA(p, q, g BigInt) (x, y BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewPublicKeyDSA(p, q, g, y BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (BigInt, BigInt, error)) (r, s BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
++}
+diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
+new file mode 100644
+index 00000000000000..57293ff2128dd6
+--- /dev/null
++++ b/src/crypto/internal/backend/openssl_linux.go
+@@ -0,0 +1,362 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto && linux && cgo
++
++// Package openssl provides access to OpenSSLCrypto implementation functions.
++// Check the variable Enabled to find out whether OpenSSLCrypto is available.
++// If OpenSSLCrypto is not available, the functions in this package all panic.
++package backend
++
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/backend/fips140"
++	"crypto/internal/boring/sig"
++	"hash"
++	"syscall"
++
++	"github.com/golang-fips/openssl/v2"
++)
++
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = openssl.BigInt
++
++// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
++// FreeBSD library version numbering does not directly align to the version of OpenSSL.
++// Its preferred search order is 11 -> 111.
++// Some distributions use 1.0.0 and others (such as Debian) 1.0.2 to refer to the same OpenSSL 1.0.2 version.
++// Fedora derived distros use different naming for the version 1.0.x.
++var knownVersions = [...]string{"3", "1.1", "11", "111", "1.0.2", "1.0.0", "10"}
++
++const lcryptoPrefix = "libcrypto.so."
++
++func init() {
++	var lcrypto string
++	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
++		lcrypto = lcryptoPrefix + version
++	} else {
++		// Try to find the highest available FIPS-enabled version of OpenSSL
++		// using the known library suffixes.
++		var lcryptoFallback string
++		for _, v := range knownVersions {
++			lcryptoCandidate := lcryptoPrefix + v
++			if exists, fips := openssl.CheckVersion(lcryptoCandidate); exists {
++				if fips {
++					lcrypto = lcryptoCandidate
++					break
++				}
++				if lcryptoFallback == "" {
++					lcryptoFallback = lcryptoCandidate
++				}
++			}
++		}
++		if lcrypto == "" && lcryptoFallback != "" {
++			// There is no FIPS-enabled version of OpenSSL,
++			// use the highest available version.
++			lcrypto = lcryptoFallback
++		}
++	}
++	if err := openssl.Init(lcrypto); err != nil {
++		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
++	}
++	if fips140.Enabled() {
++		if !openssl.FIPS() {
++			if err := openssl.SetFIPS(true); err != nil {
++				panic("opensslcrypto: can't enable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
++			}
++		}
++	} else if fips140.Disabled() {
++		if openssl.FIPS() {
++			if err := openssl.SetFIPS(false); err != nil {
++				panic("opensslcrypto: can't disable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
++			}
++		}
++	}
++	sig.BoringCrypto()
++}
++
++const RandReader = openssl.RandReader
++
++func SupportsHash(h crypto.Hash) bool {
++	return openssl.SupportsHash(h)
++}
++
++func SupportsCurve(curve string) bool            { return true }
++func SupportsRSAOAEPLabel(label []byte) bool     { return true }
++func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++
++func NewMD5() hash.Hash        { return openssl.NewMD5() }
++func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
++func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
++func NewSHA256() hash.Hash     { return openssl.NewSHA256() }
++func NewSHA384() hash.Hash     { return openssl.NewSHA384() }
++func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
++func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
++func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
++
++func MD5(p []byte) (sum [16]byte)        { return openssl.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)       { return openssl.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)     { return openssl.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)     { return openssl.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)     { return openssl.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)     { return openssl.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte) { return openssl.SHA512_224(p) }
++func SHA512_256(p []byte) (sum [32]byte) { return openssl.SHA512_256(p) }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
++
++func NewAESCipher(key []byte) (cipher.Block, error)   { return openssl.NewAESCipher(key) }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return openssl.NewGCMTLS(c) }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return openssl.NewGCMTLS13(c) }
++
++type PublicKeyECDSA = openssl.PublicKeyECDSA
++type PrivateKeyECDSA = openssl.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D openssl.BigInt, err error) {
++	return openssl.GenerateKeyECDSA(curve)
++}
++
++func NewPrivateKeyECDSA(curve string, X, Y, D openssl.BigInt) (*openssl.PrivateKeyECDSA, error) {
++	return openssl.NewPrivateKeyECDSA(curve, X, Y, D)
++}
++
++func NewPublicKeyECDSA(curve string, X, Y openssl.BigInt) (*openssl.PublicKeyECDSA, error) {
++	return openssl.NewPublicKeyECDSA(curve, X, Y)
++}
++
++func SignMarshalECDSA(priv *openssl.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return openssl.SignMarshalECDSA(priv, hash)
++}
++
++func VerifyECDSA(pub *openssl.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return openssl.VerifyECDSA(pub, hash, sig)
++}
++
++func SupportsRSAKeyPrimes(primes int) bool {
++	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
++	// but SCOSSL only supports 2-prime RSA keys.
++	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
++	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
++	// Given the above reasons, we only support what SCOSSL supports.
++	return primes == 2
++}
++
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	return true
++}
++
++type PublicKeyRSA = openssl.PublicKeyRSA
++type PrivateKeyRSA = openssl.PrivateKeyRSA
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *openssl.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return openssl.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
++}
++
++func DecryptRSAPKCS1(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return openssl.DecryptRSAPKCS1(priv, ciphertext)
++}
++
++func DecryptRSANoPadding(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return openssl.DecryptRSANoPadding(priv, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *openssl.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return openssl.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
++}
++
++func EncryptRSAPKCS1(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return openssl.EncryptRSAPKCS1(pub, msg)
++}
++
++func EncryptRSANoPadding(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return openssl.EncryptRSANoPadding(pub, msg)
++}
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt, err error) {
++	return openssl.GenerateKeyRSA(bits)
++}
++
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt) (*openssl.PrivateKeyRSA, error) {
++	return openssl.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++}
++
++func NewPublicKeyRSA(N, E openssl.BigInt) (*openssl.PublicKeyRSA, error) {
++	return openssl.NewPublicKeyRSA(N, E)
++}
++
++func SignRSAPKCS1v15(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return openssl.SignRSAPKCS1v15(priv, h, hashed)
++}
++
++func SignRSAPSS(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return openssl.SignRSAPSS(priv, h, hashed, saltLen)
++}
++
++func VerifyRSAPKCS1v15(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return openssl.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
++
++func VerifyRSAPSS(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return openssl.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
++
++type PublicKeyECDH = openssl.PublicKeyECDH
++type PrivateKeyECDH = openssl.PrivateKeyECDH
++
++func ECDH(priv *openssl.PrivateKeyECDH, pub *openssl.PublicKeyECDH) ([]byte, error) {
++	return openssl.ECDH(priv, pub)
++}
++
++func GenerateKeyECDH(curve string) (*openssl.PrivateKeyECDH, []byte, error) {
++	return openssl.GenerateKeyECDH(curve)
++}
++
++func NewPrivateKeyECDH(curve string, bytes []byte) (*openssl.PrivateKeyECDH, error) {
++	return openssl.NewPrivateKeyECDH(curve, bytes)
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*openssl.PublicKeyECDH, error) {
++	return openssl.NewPublicKeyECDH(curve, bytes)
++}
++
++func SupportsHKDF() bool {
++	return openssl.SupportsHKDF()
++}
++
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
++}
++
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	return openssl.ExtractHKDF(h, secret, salt)
++}
++
++func SupportsPBKDF2() bool {
++	return openssl.SupportsPBKDF2()
++}
++
++func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return openssl.PBKDF2(pass, salt, iter, keyLen, h)
++}
++
++func SupportsTLS1PRF() bool {
++	return openssl.SupportsTLS1PRF()
++}
++
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	return openssl.TLS1PRF(result, secret, label, seed, h)
++}
++
++func SupportsDESCipher() bool {
++	return openssl.SupportsDESCipher()
++}
++
++func SupportsTripleDESCipher() bool {
++	return openssl.SupportsTripleDESCipher()
++}
++
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	return openssl.NewDESCipher(key)
++}
++
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	return openssl.NewTripleDESCipher(key)
++}
++
++func SupportsRC4() bool {
++	return openssl.SupportsRC4()
++}
++
++type RC4Cipher = openssl.RC4Cipher
++
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return openssl.NewRC4Cipher(key) }
++
++func SupportsEd25519() bool { return openssl.SupportsEd25519() }
++
++type PublicKeyEd25519 = *openssl.PublicKeyEd25519
++type PrivateKeyEd25519 = *openssl.PrivateKeyEd25519
++
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	return openssl.GenerateKeyEd25519()
++}
++
++// Deprecated: use NewPrivateKeyEd25519 instead.
++func NewPrivateKeyEd25119(priv []byte) (PrivateKeyEd25519, error) {
++	return openssl.NewPrivateKeyEd25519(priv)
++}
++
++// Deprecated: use NewPublicKeyEd25519 instead.
++func NewPublicKeyEd25119(pub []byte) (PublicKeyEd25519, error) {
++	return openssl.NewPublicKeyEd25519(pub)
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	return openssl.NewPrivateKeyEd25519(priv)
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	return openssl.NewPublicKeyEd25519(pub)
++}
++
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	return openssl.NewPrivateKeyEd25519FromSeed(seed)
++}
++
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	return openssl.SignEd25519(priv, message)
++}
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	return openssl.VerifyEd25519(pub, message, sig)
++}
++
++type PublicKeyDSA = openssl.PublicKeyDSA
++type PrivateKeyDSA = openssl.PrivateKeyDSA
++
++func SupportsDSA(l, n int) bool {
++	return openssl.SupportsDSA()
++}
++
++func GenerateParametersDSA(l, n int) (p, q, g openssl.BigInt, err error) {
++	params, err := openssl.GenerateParametersDSA(l, n)
++	return params.P, params.Q, params.G, err
++}
++
++func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
++	return openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
++}
++
++func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, x, y)
++}
++
++func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
++	return openssl.NewPublicKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, y)
++}
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
++	sig, err := openssl.SignDSA(priv, hash)
++	if err != nil {
++		return nil, nil, err
++	}
++
++	r, s, err = parseSignature(sig)
++	if err != nil {
++		return nil, nil, err
++	}
++
++	return openssl.BigInt(r), openssl.BigInt(s), nil
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s openssl.BigInt) ([]byte, error)) bool {
++	sig, err := encodeSignature(r, s)
++	if err != nil {
++		return false
++	}
++
++	return openssl.VerifyDSA(pub, hashed, sig)
++}
+diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
+new file mode 100644
+index 00000000000000..5e4b436554d44d
+--- /dev/null
++++ b/src/crypto/internal/backend/stub.s
+@@ -0,0 +1,10 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// runtime_arg0 is declared in common.go without a body.
++// It's provided by package runtime,
++// but the go command doesn't know that.
++// Having this assembly file keeps the go command
++// from complaining about the missing body
++// (because the implementation might be here).
+diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
+index e017efb1562379..ab5539f978a266 100644
+--- a/src/go/build/deps_test.go
++++ b/src/go/build/deps_test.go
+@@ -493,6 +493,8 @@ var depsRules = `
+ 	< crypto/internal/fips140/rsa
+ 	< FIPS;
+ 
++	syscall < crypto/internal/backend/fips140;
++
+ 	FIPS, internal/godebug < crypto/fips140;
+ 
+ 	crypto, hash !< FIPS;
+@@ -506,7 +508,8 @@ var depsRules = `
+ 	FIPS, internal/godebug, hash, embed, encoding/binary,
+ 	crypto/internal/boring/sig,
+ 	crypto/internal/boring/syso,
+-	crypto/internal/boring/bcache
++	crypto/internal/boring/bcache,
++	crypto/internal/backend/fips140
+ 	< crypto/internal/fips140only
+ 	< crypto
+ 	< crypto/subtle
+@@ -522,6 +525,7 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
+ 	< github.com/microsoft/go-crypto-winnative/cng
+ 	< crypto/internal/boring
++	< crypto/internal/backend
+ 	< crypto/boring
+ 	< crypto/aes,
+ 	  crypto/des,
+@@ -546,6 +550,7 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-darwin/bbig
+ 	< github.com/microsoft/go-crypto-winnative/cng/bbig
+ 	< crypto/internal/boring/bbig
++	< crypto/internal/backend/bbig
+ 	< crypto/rand
+ 	< crypto/ed25519 # depends on crypto/rand.Reader
+ 	< encoding/asn1
+diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
+index 5a98b20253181c..9042f2c2795e19 100644
+--- a/src/runtime/runtime_boring.go
++++ b/src/runtime/runtime_boring.go
+@@ -17,3 +17,8 @@ func boring_runtime_arg0() string {
+ 
+ //go:linkname fipstls_runtime_arg0 crypto/internal/boring/fipstls.runtime_arg0
+ func fipstls_runtime_arg0() string { return boring_runtime_arg0() }
++
++//go:linkname crypto_backend_runtime_arg0 crypto/internal/backend.runtime_arg0
++func crypto_backend_runtime_arg0() string {
++	return boring_runtime_arg0()
++}
diff --git a/patches/0004-Add-BoringSSL-crypto-backend.patch b/patches/0004-Add-BoringSSL-crypto-backend.patch
deleted file mode 100644
index 9abecb7aca9..00000000000
--- a/patches/0004-Add-BoringSSL-crypto-backend.patch
+++ /dev/null
@@ -1,334 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Quim Muntal <qmuntaldiaz@microsoft.com>
-Date: Wed, 22 Jun 2022 12:16:05 +0000
-Subject: [PATCH] Add BoringSSL crypto backend
-
----
- .../internal/backend/bbig/big_boring.go       |  12 +
- src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++++++
- src/crypto/internal/backend/fips140/boring.go |  11 +
- 3 files changed, 302 insertions(+)
- create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
- create mode 100644 src/crypto/internal/backend/boring_linux.go
- create mode 100644 src/crypto/internal/backend/fips140/boring.go
-
-diff --git a/src/crypto/internal/backend/bbig/big_boring.go b/src/crypto/internal/backend/bbig/big_boring.go
-new file mode 100644
-index 00000000000000..0b62cef68546d0
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_boring.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto
-+
-+package bbig
-+
-+import "crypto/internal/boring/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
-new file mode 100644
-index 00000000000000..f06fcc63b5af11
---- /dev/null
-+++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,279 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
-+
-+// Package boring provides access to BoringCrypto implementation functions.
-+// Check the variable Enabled to find out whether BoringCrypto is available.
-+// If BoringCrypto is not available, the functions in this package all panic.
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/boring"
-+	"hash"
-+)
-+
-+const Enabled = true
-+
-+type BigInt = boring.BigInt
-+
-+const RandReader = boring.RandReader
-+
-+func SupportsHash(h crypto.Hash) bool {
-+	switch h {
-+	case crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
-+		return true
-+	default:
-+		return false
-+	}
-+}
-+
-+func SupportsCurve(curve string) bool            { return true }
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
-+
-+func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash       { return boring.NewSHA1() }
-+func NewSHA224() hash.Hash     { return boring.NewSHA224() }
-+func NewSHA256() hash.Hash     { return boring.NewSHA256() }
-+func NewSHA384() hash.Hash     { return boring.NewSHA384() }
-+func NewSHA512() hash.Hash     { return boring.NewSHA512() }
-+func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)       { return boring.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return boring.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)     { return boring.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return boring.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return boring.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return boring.NewHMAC(h, key) }
-+
-+func NewAESCipher(key []byte) (cipher.Block, error)   { return boring.NewAESCipher(key) }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return boring.NewGCMTLS(c) }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS13(c) }
-+
-+type PublicKeyECDSA = boring.PublicKeyECDSA
-+type PrivateKeyECDSA = boring.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D boring.BigInt, err error) {
-+	return boring.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D boring.BigInt) (*boring.PrivateKeyECDSA, error) {
-+	return boring.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y boring.BigInt) (*boring.PublicKeyECDSA, error) {
-+	return boring.NewPublicKeyECDSA(curve, X, Y)
-+}
-+
-+func SignMarshalECDSA(priv *boring.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return boring.SignMarshalECDSA(priv, hash)
-+}
-+
-+func VerifyECDSA(pub *boring.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return boring.VerifyECDSA(pub, hash, sig)
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	return true
-+}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	return true
-+}
-+
-+type PublicKeyRSA = boring.PublicKeyRSA
-+type PrivateKeyRSA = boring.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *boring.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return boring.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
-+}
-+
-+func DecryptRSAPKCS1(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return boring.DecryptRSAPKCS1(priv, ciphertext)
-+}
-+
-+func DecryptRSANoPadding(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return boring.DecryptRSANoPadding(priv, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *boring.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return boring.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
-+}
-+
-+func EncryptRSAPKCS1(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return boring.EncryptRSAPKCS1(pub, msg)
-+}
-+
-+func EncryptRSANoPadding(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return boring.EncryptRSANoPadding(pub, msg)
-+}
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt, err error) {
-+	return boring.GenerateKeyRSA(bits)
-+}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt) (*boring.PrivateKeyRSA, error) {
-+	return boring.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+}
-+
-+func NewPublicKeyRSA(N, E boring.BigInt) (*boring.PublicKeyRSA, error) {
-+	return boring.NewPublicKeyRSA(N, E)
-+}
-+
-+func SignRSAPKCS1v15(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return boring.SignRSAPKCS1v15(priv, h, hashed)
-+}
-+
-+func SignRSAPSS(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return boring.SignRSAPSS(priv, h, hashed, saltLen)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return boring.VerifyRSAPKCS1v15(pub, h, hashed, sig)
-+}
-+
-+func VerifyRSAPSS(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return boring.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
-+}
-+
-+type PublicKeyECDH = boring.PublicKeyECDH
-+type PrivateKeyECDH = boring.PrivateKeyECDH
-+
-+func ECDH(priv *boring.PrivateKeyECDH, pub *boring.PublicKeyECDH) ([]byte, error) {
-+	return boring.ECDH(priv, pub)
-+}
-+
-+func GenerateKeyECDH(curve string) (*boring.PrivateKeyECDH, []byte, error) {
-+	return boring.GenerateKeyECDH(curve)
-+}
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*boring.PrivateKeyECDH, error) {
-+	return boring.NewPrivateKeyECDH(curve, bytes)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*boring.PublicKeyECDH, error) {
-+	return boring.NewPublicKeyECDH(curve, bytes)
-+}
-+
-+func SupportsHKDF() bool { return false }
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsPBKDF2() bool { return false }
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsTLS1PRF() bool { return false }
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDESCipher() bool { return false }
-+
-+func SupportsTripleDESCipher() bool { return false }
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsRC4() bool { return false }
-+
-+type RC4Cipher struct{}
-+
-+func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsEd25519() bool { return false }
-+
-+type PublicKeyEd25519 struct{}
-+
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyEd25519 struct{}
-+
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDSA(l, n int) bool {
-+	return false
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyDSA struct{}
-+type PublicKeyDSA struct{}
-+
-+func GenerateKeyDSA(p, q, g boring.BigInt) (x, y boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y boring.BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (boring.BigInt, boring.BigInt, error)) (r, s boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s boring.BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
-diff --git a/src/crypto/internal/backend/fips140/boring.go b/src/crypto/internal/backend/fips140/boring.go
-new file mode 100644
-index 00000000000000..3b583dc0eb0235
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/boring.go
-@@ -0,0 +1,11 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto
-+
-+package fips140
-+
-+func systemFIPSMode() bool {
-+	return false
-+}
diff --git a/patches/0008-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
similarity index 92%
rename from patches/0008-Use-crypto-backends.patch
rename to patches/0004-Use-crypto-backends.patch
index 1d2f62ffeb0..f01156c5753 100644
--- a/patches/0008-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,11 +5,12 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |   5 +
+ src/cmd/dist/test.go                          |   8 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
+ src/cmd/link/internal/ld/lib.go               |   1 +
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
@@ -45,6 +46,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
+ src/crypto/rsa/darwin.go                      |  71 +++++++
  src/crypto/rsa/fips.go                        |  14 +-
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |   6 +-
@@ -75,13 +77,17 @@ Subject: [PATCH] Use crypto backends
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   9 +
  src/hash/notboring_test.go                    |   9 +
+ src/net/lookup_test.go                        |   3 +
  src/net/smtp/smtp_test.go                     |  72 ++++---
- 72 files changed, 1052 insertions(+), 107 deletions(-)
+ src/os/exec/exec_test.go                      |   9 +
+ src/runtime/pprof/vminfo_darwin_test.go       |   6 +
+ 77 files changed, 1143 insertions(+), 109 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
+ create mode 100644 src/crypto/rsa/darwin.go
  create mode 100644 src/crypto/tls/internal/tls13/doc.go
  create mode 100644 src/crypto/tls/internal/tls13/tls13.go
  create mode 100644 src/hash/boring_test.go
@@ -101,7 +107,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0de6e80fd985a3..3316bb52a61ff1 100644
+index 0c992118f4287b..3316bb52a61ff1 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -1161,6 +1161,11 @@ func (t *tester) internalLink() bool {
@@ -116,6 +122,20 @@ index 0de6e80fd985a3..3316bb52a61ff1 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
+@@ -1324,12 +1329,11 @@ func (t *tester) registerCgoTests(heading string) {
+ 			// a C linker warning on Linux.
+ 			// in function `bio_ip_and_port_to_socket_and_addr':
+ 			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
+-			if staticCheck.skip == nil && goos == "linux" && strings.Contains(goexperiment, "boringcrypto") {
++			if staticCheck.skip == nil && goos == "linux" && (strings.Contains(goexperiment, "boringcrypto") || strings.Contains(goexperiment, "opensslcrypto")) {
+ 				staticCheck.skip = func(*distTest) (string, bool) {
+ 					return "skipping static linking check on Linux when using boringcrypto to avoid C linker warning about getaddrinfo", true
+ 				}
+ 			}
+-
+ 			// Static linking tests
+ 			if goos != "android" && p != "netbsd/arm" && !t.msan && !t.asan {
+ 				// TODO(#56629): Why does this fail on netbsd-arm?
 diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
 index ed0fbf3d53d75b..8111b143a1295b 100644
 --- a/src/cmd/go/go_boring_test.go
@@ -201,6 +221,18 @@ index b2d4ad7cb0e7f6..2859879041ff8f 100644
  		case "darwin/arm64", "windows/arm", "windows/arm64": // On these platforms, everything is PIE
  			*mode = BuildModePIE
  		default:
+diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
+index 2d8f964f3594c6..a587e1abde57c9 100644
+--- a/src/cmd/link/internal/ld/lib.go
++++ b/src/cmd/link/internal/ld/lib.go
+@@ -1172,6 +1172,7 @@ var hostobj []Hostobj
+ // These packages can use internal linking mode.
+ // Others trigger external mode.
+ var internalpkg = []string{
++	"vendor/github.com/golang-fips/openssl/v2",
+ 	"crypto/internal/boring",
+ 	"crypto/internal/boring/syso",
+ 	"crypto/x509",
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
 index 5bc2d13d673e0a..b803c77be62a66 100644
 --- a/src/crypto/aes/aes.go
@@ -663,7 +695,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index cb308b41e9df86..5c841d2f021967 100644
+index cb308b41e9df86..7bfdc76759baeb 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -1321,7 +1353,7 @@ index 90943a0935befb..09ebdfd733e5d6 100644
  		return
  	}
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index 28d16a89f6a1cf..b276571ddf9fc8 100644
+index b9f9d3154f2589..ba66dd33a1f9f3 100644
 --- a/src/crypto/rsa/boring.go
 +++ b/src/crypto/rsa/boring.go
 @@ -2,14 +2,15 @@
@@ -1368,8 +1400,85 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
+diff --git a/src/crypto/rsa/darwin.go b/src/crypto/rsa/darwin.go
+new file mode 100644
+index 00000000000000..1b9c63523ee90e
+--- /dev/null
++++ b/src/crypto/rsa/darwin.go
+@@ -0,0 +1,71 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.darwincrypto
++
++package rsa
++
++import (
++	"crypto/internal/backend"
++	"crypto/internal/backend/bbig"
++	"errors"
++	"math/big"
++	_ "unsafe"
++
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
++)
++
++//go:linkname decodeKey
++func decodeKey(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++		return nil, nil, nil, nil, nil, nil, nil, nil, e
++	}
++	input := cryptobyte.String(data)
++	var version int
++	n, e, d, p, q, dp, dq, qinv := new(big.Int), new(big.Int), new(big.Int), new(big.Int),
++		new(big.Int), new(big.Int), new(big.Int), new(big.Int)
++	// Parse the ASN.1 sequence
++	if !input.ReadASN1(&input, asn1.SEQUENCE) {
++		return bad(errors.New("invalid ASN.1 structure: not a sequence"))
++	}
++	if !input.ReadASN1Integer(&version) || version != 0 {
++		return bad(errors.New("invalid ASN.1 structure: unsupported version"))
++	}
++	if !input.ReadASN1Integer(n) || !input.ReadASN1Integer(e) ||
++		!input.ReadASN1Integer(d) || !input.ReadASN1Integer(p) ||
++		!input.ReadASN1Integer(q) || !input.ReadASN1Integer(dp) ||
++		!input.ReadASN1Integer(dq) || !input.ReadASN1Integer(qinv) {
++		return bad(errors.New("invalid ASN.1 structure"))
++	}
++	return bbig.Enc(n), bbig.Enc(e), bbig.Enc(d), bbig.Enc(p), bbig.Enc(q),
++		bbig.Enc(dp), bbig.Enc(dq), bbig.Enc(qinv), nil
++}
++
++//go:linkname encodeKey
++func encodeKey(N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1Int64(0)               // Add version as int64
++		b.AddASN1BigInt(bbig.Dec(N))    // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E))    // Add public exponent
++		b.AddASN1BigInt(bbig.Dec(D))    // Add private exponent
++		b.AddASN1BigInt(bbig.Dec(P))    // Add prime1
++		b.AddASN1BigInt(bbig.Dec(Q))    // Add prime2
++		b.AddASN1BigInt(bbig.Dec(Dp))   // Add exponent1
++		b.AddASN1BigInt(bbig.Dec(Dq))   // Add exponent2
++		b.AddASN1BigInt(bbig.Dec(Qinv)) // Add coefficient
++	})
++	return builder.Bytes()
++}
++
++//go:linkname encodePublicKey
++func encodePublicKey(N, E backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1BigInt(bbig.Dec(N)) // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E)) // Add public exponent
++	})
++	return builder.Bytes()
++}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 8373c125ae3096..319fae6fb282db 100644
+index 8373c125ae3096..990ea980faf33f 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2549,6 +2658,20 @@ index 00000000000000..11dc691600b110
 +package hash_test
 +
 +const boringEnabled = false
+diff --git a/src/net/lookup_test.go b/src/net/lookup_test.go
+index 514cbd098ae772..8ec689416dde1d 100644
+--- a/src/net/lookup_test.go
++++ b/src/net/lookup_test.go
+@@ -1501,6 +1501,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
+ }
+ 
+ func TestLookupNoSuchHost(t *testing.T) {
++	if runtime.GOOS == "darwin" {
++		t.Skip("skipping on darwin; see https://github.com/microsoft/go/issues/1394")
++	}
+ 	mustHaveExternalNetwork(t)
+ 
+ 	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
 index 389eda9ad54b99..110d60beb0e70c 100644
 --- a/src/net/smtp/smtp_test.go
@@ -2640,3 +2763,54 @@ index 389eda9ad54b99..110d60beb0e70c 100644
  -----END RSA TESTING KEY-----`))
  
  func testingKey(s string) string { return strings.ReplaceAll(s, "TESTING KEY", "PRIVATE KEY") }
+diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
+index 8c623871932f7d..2fa55073f5c19c 100644
+--- a/src/os/exec/exec_test.go
++++ b/src/os/exec/exec_test.go
+@@ -14,6 +14,7 @@ import (
+ 	"errors"
+ 	"flag"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"internal/poll"
+ 	"internal/testenv"
+ 	"io"
+@@ -689,6 +690,14 @@ func TestExtraFiles(t *testing.T) {
+ 		t.Skipf("skipping test on %q", runtime.GOOS)
+ 	}
+ 
++	if goexperiment.OpenSSLCrypto {
++		// OpenSSL default behavior is to maintain open FDs to any
++		// random devices that get used by the random number library.
++		// Since those FDs are not marked FD_CLOEXEC or O_CLOEXEC,
++		// they also get inherited by children.
++		t.Skip("skipping test because test was run with OpenSSLCrypto")
++	}
++
+ 	// Force network usage, to verify the epoll (or whatever) fd
+ 	// doesn't leak to the child,
+ 	ln, err := net.Listen("tcp", "127.0.0.1:0")
+diff --git a/src/runtime/pprof/vminfo_darwin_test.go b/src/runtime/pprof/vminfo_darwin_test.go
+index 6d375c5d53368a..39154b000ddc67 100644
+--- a/src/runtime/pprof/vminfo_darwin_test.go
++++ b/src/runtime/pprof/vminfo_darwin_test.go
+@@ -11,6 +11,7 @@ import (
+ 	"bytes"
+ 	"fmt"
+ 	"internal/abi"
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"os"
+ 	"os/exec"
+@@ -21,6 +22,11 @@ import (
+ )
+ 
+ func TestVMInfo(t *testing.T) {
++	if goexperiment.DarwinCrypto {
++		// Fails on macOS when using system crypto.
++		// https://github.com/microsoft/go/issues/1466
++		t.Skip("skipping on Darwin")
++	}
+ 	var begin, end, offset uint64
+ 	var filename string
+ 	first := true
diff --git a/patches/0005-Add-OpenSSL-crypto-backend.patch b/patches/0005-Add-OpenSSL-crypto-backend.patch
deleted file mode 100644
index 7b44965e884..00000000000
--- a/patches/0005-Add-OpenSSL-crypto-backend.patch
+++ /dev/null
@@ -1,507 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Thu, 30 Jun 2022 10:06:19 +0200
-Subject: [PATCH] Add OpenSSL crypto backend
-
----
- src/cmd/dist/test.go                          |   3 +-
- src/cmd/link/internal/ld/lib.go               |   1 +
- .../internal/backend/bbig/big_openssl.go      |  12 +
- .../internal/backend/fips140/openssl.go       |  41 ++
- src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
- src/os/exec/exec_test.go                      |   9 +
- 6 files changed, 426 insertions(+), 2 deletions(-)
- create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl.go
- create mode 100644 src/crypto/internal/backend/openssl_linux.go
-
-diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0c992118f4287b..0de6e80fd985a3 100644
---- a/src/cmd/dist/test.go
-+++ b/src/cmd/dist/test.go
-@@ -1324,12 +1324,11 @@ func (t *tester) registerCgoTests(heading string) {
- 			// a C linker warning on Linux.
- 			// in function `bio_ip_and_port_to_socket_and_addr':
- 			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
--			if staticCheck.skip == nil && goos == "linux" && strings.Contains(goexperiment, "boringcrypto") {
-+			if staticCheck.skip == nil && goos == "linux" && (strings.Contains(goexperiment, "boringcrypto") || strings.Contains(goexperiment, "opensslcrypto")) {
- 				staticCheck.skip = func(*distTest) (string, bool) {
- 					return "skipping static linking check on Linux when using boringcrypto to avoid C linker warning about getaddrinfo", true
- 				}
- 			}
--
- 			// Static linking tests
- 			if goos != "android" && p != "netbsd/arm" && !t.msan && !t.asan {
- 				// TODO(#56629): Why does this fail on netbsd-arm?
-diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 2d8f964f3594c6..a587e1abde57c9 100644
---- a/src/cmd/link/internal/ld/lib.go
-+++ b/src/cmd/link/internal/ld/lib.go
-@@ -1172,6 +1172,7 @@ var hostobj []Hostobj
- // These packages can use internal linking mode.
- // Others trigger external mode.
- var internalpkg = []string{
-+	"vendor/github.com/golang-fips/openssl/v2",
- 	"crypto/internal/boring",
- 	"crypto/internal/boring/syso",
- 	"crypto/x509",
-diff --git a/src/crypto/internal/backend/bbig/big_openssl.go b/src/crypto/internal/backend/bbig/big_openssl.go
-new file mode 100644
-index 00000000000000..e6695dd66b1d02
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_openssl.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.opensslcrypto
-+
-+package bbig
-+
-+import "github.com/golang-fips/openssl/v2/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
-new file mode 100644
-index 00000000000000..118efa3a492a7d
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl.go
-@@ -0,0 +1,41 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.opensslcrypto
-+
-+package fips140
-+
-+import "syscall"
-+
-+func systemFIPSMode() bool {
-+	var fd int
-+	for {
-+		var err error
-+		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
-+		if err == nil {
-+			break
-+		}
-+		switch err {
-+		case syscall.EINTR:
-+			continue
-+		case syscall.ENOENT:
-+			return false
-+		default:
-+			// If there is an error reading we could either panic or assume FIPS is not enabled.
-+			// Panicking would be too disruptive for apps that don't require FIPS.
-+			// If an app wants to be 100% sure that is running in FIPS mode
-+			// it should use boring.Enabled() or GOFIPS=1.
-+			return false
-+		}
-+	}
-+	defer syscall.Close(fd)
-+	var tmp [1]byte
-+	n, err := syscall.Read(fd, tmp[:])
-+	if n != 1 || err != nil {
-+		// We return false instead of panicing for the same reason as before.
-+		return false
-+	}
-+	// fips_enabled can be either '0' or '1'.
-+	return tmp[0] == '1'
-+}
-diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
-new file mode 100644
-index 00000000000000..57293ff2128dd6
---- /dev/null
-+++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,362 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.opensslcrypto && linux && cgo
-+
-+// Package openssl provides access to OpenSSLCrypto implementation functions.
-+// Check the variable Enabled to find out whether OpenSSLCrypto is available.
-+// If OpenSSLCrypto is not available, the functions in this package all panic.
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/backend/fips140"
-+	"crypto/internal/boring/sig"
-+	"hash"
-+	"syscall"
-+
-+	"github.com/golang-fips/openssl/v2"
-+)
-+
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = openssl.BigInt
-+
-+// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
-+// FreeBSD library version numbering does not directly align to the version of OpenSSL.
-+// Its preferred search order is 11 -> 111.
-+// Some distributions use 1.0.0 and others (such as Debian) 1.0.2 to refer to the same OpenSSL 1.0.2 version.
-+// Fedora derived distros use different naming for the version 1.0.x.
-+var knownVersions = [...]string{"3", "1.1", "11", "111", "1.0.2", "1.0.0", "10"}
-+
-+const lcryptoPrefix = "libcrypto.so."
-+
-+func init() {
-+	var lcrypto string
-+	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
-+		lcrypto = lcryptoPrefix + version
-+	} else {
-+		// Try to find the highest available FIPS-enabled version of OpenSSL
-+		// using the known library suffixes.
-+		var lcryptoFallback string
-+		for _, v := range knownVersions {
-+			lcryptoCandidate := lcryptoPrefix + v
-+			if exists, fips := openssl.CheckVersion(lcryptoCandidate); exists {
-+				if fips {
-+					lcrypto = lcryptoCandidate
-+					break
-+				}
-+				if lcryptoFallback == "" {
-+					lcryptoFallback = lcryptoCandidate
-+				}
-+			}
-+		}
-+		if lcrypto == "" && lcryptoFallback != "" {
-+			// There is no FIPS-enabled version of OpenSSL,
-+			// use the highest available version.
-+			lcrypto = lcryptoFallback
-+		}
-+	}
-+	if err := openssl.Init(lcrypto); err != nil {
-+		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
-+	}
-+	if fips140.Enabled() {
-+		if !openssl.FIPS() {
-+			if err := openssl.SetFIPS(true); err != nil {
-+				panic("opensslcrypto: can't enable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
-+			}
-+		}
-+	} else if fips140.Disabled() {
-+		if openssl.FIPS() {
-+			if err := openssl.SetFIPS(false); err != nil {
-+				panic("opensslcrypto: can't disable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
-+			}
-+		}
-+	}
-+	sig.BoringCrypto()
-+}
-+
-+const RandReader = openssl.RandReader
-+
-+func SupportsHash(h crypto.Hash) bool {
-+	return openssl.SupportsHash(h)
-+}
-+
-+func SupportsCurve(curve string) bool            { return true }
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
-+
-+func NewMD5() hash.Hash        { return openssl.NewMD5() }
-+func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
-+func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
-+func NewSHA256() hash.Hash     { return openssl.NewSHA256() }
-+func NewSHA384() hash.Hash     { return openssl.NewSHA384() }
-+func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
-+func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
-+func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
-+
-+func MD5(p []byte) (sum [16]byte)        { return openssl.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return openssl.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return openssl.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)     { return openssl.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return openssl.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return openssl.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { return openssl.SHA512_224(p) }
-+func SHA512_256(p []byte) (sum [32]byte) { return openssl.SHA512_256(p) }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
-+
-+func NewAESCipher(key []byte) (cipher.Block, error)   { return openssl.NewAESCipher(key) }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return openssl.NewGCMTLS(c) }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return openssl.NewGCMTLS13(c) }
-+
-+type PublicKeyECDSA = openssl.PublicKeyECDSA
-+type PrivateKeyECDSA = openssl.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D openssl.BigInt, err error) {
-+	return openssl.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D openssl.BigInt) (*openssl.PrivateKeyECDSA, error) {
-+	return openssl.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y openssl.BigInt) (*openssl.PublicKeyECDSA, error) {
-+	return openssl.NewPublicKeyECDSA(curve, X, Y)
-+}
-+
-+func SignMarshalECDSA(priv *openssl.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return openssl.SignMarshalECDSA(priv, hash)
-+}
-+
-+func VerifyECDSA(pub *openssl.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return openssl.VerifyECDSA(pub, hash, sig)
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
-+	// but SCOSSL only supports 2-prime RSA keys.
-+	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
-+	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
-+	// Given the above reasons, we only support what SCOSSL supports.
-+	return primes == 2
-+}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	return true
-+}
-+
-+type PublicKeyRSA = openssl.PublicKeyRSA
-+type PrivateKeyRSA = openssl.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *openssl.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return openssl.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
-+}
-+
-+func DecryptRSAPKCS1(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return openssl.DecryptRSAPKCS1(priv, ciphertext)
-+}
-+
-+func DecryptRSANoPadding(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return openssl.DecryptRSANoPadding(priv, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *openssl.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return openssl.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
-+}
-+
-+func EncryptRSAPKCS1(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return openssl.EncryptRSAPKCS1(pub, msg)
-+}
-+
-+func EncryptRSANoPadding(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return openssl.EncryptRSANoPadding(pub, msg)
-+}
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt, err error) {
-+	return openssl.GenerateKeyRSA(bits)
-+}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt) (*openssl.PrivateKeyRSA, error) {
-+	return openssl.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+}
-+
-+func NewPublicKeyRSA(N, E openssl.BigInt) (*openssl.PublicKeyRSA, error) {
-+	return openssl.NewPublicKeyRSA(N, E)
-+}
-+
-+func SignRSAPKCS1v15(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return openssl.SignRSAPKCS1v15(priv, h, hashed)
-+}
-+
-+func SignRSAPSS(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return openssl.SignRSAPSS(priv, h, hashed, saltLen)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return openssl.VerifyRSAPKCS1v15(pub, h, hashed, sig)
-+}
-+
-+func VerifyRSAPSS(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return openssl.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
-+}
-+
-+type PublicKeyECDH = openssl.PublicKeyECDH
-+type PrivateKeyECDH = openssl.PrivateKeyECDH
-+
-+func ECDH(priv *openssl.PrivateKeyECDH, pub *openssl.PublicKeyECDH) ([]byte, error) {
-+	return openssl.ECDH(priv, pub)
-+}
-+
-+func GenerateKeyECDH(curve string) (*openssl.PrivateKeyECDH, []byte, error) {
-+	return openssl.GenerateKeyECDH(curve)
-+}
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*openssl.PrivateKeyECDH, error) {
-+	return openssl.NewPrivateKeyECDH(curve, bytes)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*openssl.PublicKeyECDH, error) {
-+	return openssl.NewPublicKeyECDH(curve, bytes)
-+}
-+
-+func SupportsHKDF() bool {
-+	return openssl.SupportsHKDF()
-+}
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return openssl.ExtractHKDF(h, secret, salt)
-+}
-+
-+func SupportsPBKDF2() bool {
-+	return openssl.SupportsPBKDF2()
-+}
-+
-+func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return openssl.PBKDF2(pass, salt, iter, keyLen, h)
-+}
-+
-+func SupportsTLS1PRF() bool {
-+	return openssl.SupportsTLS1PRF()
-+}
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	return openssl.TLS1PRF(result, secret, label, seed, h)
-+}
-+
-+func SupportsDESCipher() bool {
-+	return openssl.SupportsDESCipher()
-+}
-+
-+func SupportsTripleDESCipher() bool {
-+	return openssl.SupportsTripleDESCipher()
-+}
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return openssl.NewDESCipher(key)
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return openssl.NewTripleDESCipher(key)
-+}
-+
-+func SupportsRC4() bool {
-+	return openssl.SupportsRC4()
-+}
-+
-+type RC4Cipher = openssl.RC4Cipher
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return openssl.NewRC4Cipher(key) }
-+
-+func SupportsEd25519() bool { return openssl.SupportsEd25519() }
-+
-+type PublicKeyEd25519 = *openssl.PublicKeyEd25519
-+type PrivateKeyEd25519 = *openssl.PrivateKeyEd25519
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	return openssl.GenerateKeyEd25519()
-+}
-+
-+// Deprecated: use NewPrivateKeyEd25519 instead.
-+func NewPrivateKeyEd25119(priv []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519(priv)
-+}
-+
-+// Deprecated: use NewPublicKeyEd25519 instead.
-+func NewPublicKeyEd25119(pub []byte) (PublicKeyEd25519, error) {
-+	return openssl.NewPublicKeyEd25519(pub)
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519(priv)
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	return openssl.NewPublicKeyEd25519(pub)
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519FromSeed(seed)
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	return openssl.SignEd25519(priv, message)
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	return openssl.VerifyEd25519(pub, message, sig)
-+}
-+
-+type PublicKeyDSA = openssl.PublicKeyDSA
-+type PrivateKeyDSA = openssl.PrivateKeyDSA
-+
-+func SupportsDSA(l, n int) bool {
-+	return openssl.SupportsDSA()
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g openssl.BigInt, err error) {
-+	params, err := openssl.GenerateParametersDSA(l, n)
-+	return params.P, params.Q, params.G, err
-+}
-+
-+func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
-+	return openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
-+	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, x, y)
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
-+	return openssl.NewPublicKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, y)
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
-+	sig, err := openssl.SignDSA(priv, hash)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	r, s, err = parseSignature(sig)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	return openssl.BigInt(r), openssl.BigInt(s), nil
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s openssl.BigInt) ([]byte, error)) bool {
-+	sig, err := encodeSignature(r, s)
-+	if err != nil {
-+		return false
-+	}
-+
-+	return openssl.VerifyDSA(pub, hashed, sig)
-+}
-diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 8c623871932f7d..2fa55073f5c19c 100644
---- a/src/os/exec/exec_test.go
-+++ b/src/os/exec/exec_test.go
-@@ -14,6 +14,7 @@ import (
- 	"errors"
- 	"flag"
- 	"fmt"
-+	"internal/goexperiment"
- 	"internal/poll"
- 	"internal/testenv"
- 	"io"
-@@ -689,6 +690,14 @@ func TestExtraFiles(t *testing.T) {
- 		t.Skipf("skipping test on %q", runtime.GOOS)
- 	}
- 
-+	if goexperiment.OpenSSLCrypto {
-+		// OpenSSL default behavior is to maintain open FDs to any
-+		// random devices that get used by the random number library.
-+		// Since those FDs are not marked FD_CLOEXEC or O_CLOEXEC,
-+		// they also get inherited by children.
-+		t.Skip("skipping test because test was run with OpenSSLCrypto")
-+	}
-+
- 	// Force network usage, to verify the epoll (or whatever) fd
- 	// doesn't leak to the child,
- 	ln, err := net.Listen("tcp", "127.0.0.1:0")
diff --git a/patches/0009-Add-backend-code-gen.patch b/patches/0005-Add-backend-code-gen.patch
similarity index 100%
rename from patches/0009-Add-backend-code-gen.patch
rename to patches/0005-Add-backend-code-gen.patch
diff --git a/patches/0006-Add-CNG-crypto-backend.patch b/patches/0006-Add-CNG-crypto-backend.patch
deleted file mode 100644
index aaae7bf10f9..00000000000
--- a/patches/0006-Add-CNG-crypto-backend.patch
+++ /dev/null
@@ -1,413 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Tue, 19 Jul 2022 15:58:02 +0200
-Subject: [PATCH] Add CNG crypto backend
-
----
- src/crypto/internal/backend/bbig/big_cng.go |  12 +
- src/crypto/internal/backend/cng_windows.go  | 336 ++++++++++++++++++++
- src/crypto/internal/backend/fips140/cng.go  |  33 ++
- 3 files changed, 381 insertions(+)
- create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
- create mode 100644 src/crypto/internal/backend/cng_windows.go
- create mode 100644 src/crypto/internal/backend/fips140/cng.go
-
-diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
-new file mode 100644
-index 00000000000000..92623031fd87d0
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_cng.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.cngcrypto
-+
-+package bbig
-+
-+import "github.com/microsoft/go-crypto-winnative/cng/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
-new file mode 100644
-index 00000000000000..31dfc9b19ee63e
---- /dev/null
-+++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,336 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.cngcrypto && windows
-+
-+// Package cng provides access to CNGCrypto implementation functions.
-+// Check the variable Enabled to find out whether CNGCrypto is available.
-+// If CNGCrypto is not available, the functions in this package all panic.
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/backend/fips140"
-+	"crypto/internal/boring/sig"
-+	"hash"
-+	_ "unsafe"
-+
-+	"github.com/microsoft/go-crypto-winnative/cng"
-+)
-+
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = cng.BigInt
-+
-+func init() {
-+	if fips140.Enabled() {
-+		enabled, err := cng.FIPS()
-+		if err != nil {
-+			panic("cngcrypto: unknown FIPS mode: " + err.Error())
-+		}
-+		if !enabled {
-+			panic("cngcrypto: not in FIPS mode")
-+		}
-+	}
-+	sig.BoringCrypto()
-+}
-+
-+const RandReader = cng.RandReader
-+
-+func SupportsHash(h crypto.Hash) bool {
-+	return cng.SupportsHash(h)
-+}
-+
-+func SupportsCurve(curve string) bool            { return true }
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
-+
-+func NewMD5() hash.Hash        { return cng.NewMD5() }
-+func NewSHA1() hash.Hash       { return cng.NewSHA1() }
-+func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
-+func NewSHA256() hash.Hash     { return cng.NewSHA256() }
-+func NewSHA384() hash.Hash     { return cng.NewSHA384() }
-+func NewSHA512() hash.Hash     { return cng.NewSHA512() }
-+func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
-+func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { return cng.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return cng.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { panic("cngcrypto: not available") }
-+func SHA256(p []byte) (sum [32]byte)     { return cng.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return cng.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return cng.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cngcrypto: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
-+	return cng.NewHMAC(h, key)
-+}
-+
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewAESCipher(key)
-+}
-+
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	return cng.NewGCMTLS(c)
-+}
-+
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	return cng.NewGCMTLS13(c)
-+}
-+
-+type PublicKeyECDSA = cng.PublicKeyECDSA
-+type PrivateKeyECDSA = cng.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D cng.BigInt, err error) {
-+	return cng.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D cng.BigInt) (*cng.PrivateKeyECDSA, error) {
-+	return cng.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y cng.BigInt) (*cng.PublicKeyECDSA, error) {
-+	return cng.NewPublicKeyECDSA(curve, X, Y)
-+}
-+
-+//go:linkname encodeSignature crypto/ecdsa.encodeSignature
-+func encodeSignature(r, s []byte) ([]byte, error)
-+
-+//go:linkname parseSignature crypto/ecdsa.parseSignature
-+func parseSignature(sig []byte) (r, s []byte, err error)
-+
-+func SignMarshalECDSA(priv *cng.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	r, s, err := cng.SignECDSA(priv, hash)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return encodeSignature(r, s)
-+}
-+
-+func VerifyECDSA(pub *cng.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	rBytes, sBytes, err := parseSignature(sig)
-+	if err != nil {
-+		return false
-+	}
-+	return cng.VerifyECDSA(pub, hash, cng.BigInt(rBytes), cng.BigInt(sBytes))
-+}
-+
-+func SignECDSA(priv *cng.PrivateKeyECDSA, hash []byte) (r, s cng.BigInt, err error) {
-+	return cng.SignECDSA(priv, hash)
-+}
-+
-+func VerifyECDSARaw(pub *cng.PublicKeyECDSA, hash []byte, r, s cng.BigInt) bool {
-+	return cng.VerifyECDSA(pub, hash, r, s)
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	// CNG only supports 2-prime RSA keys.
-+	return primes == 2
-+}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	if sign {
-+		return true
-+	}
-+	return salt != 0 // rsa.PSSSaltLengthAuto
-+}
-+
-+type PublicKeyRSA = cng.PublicKeyRSA
-+type PrivateKeyRSA = cng.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *cng.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return cng.DecryptRSAOAEP(h, priv, ciphertext, label)
-+}
-+
-+func DecryptRSAPKCS1(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return cng.DecryptRSAPKCS1(priv, ciphertext)
-+}
-+
-+func DecryptRSANoPadding(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return cng.DecryptRSANoPadding(priv, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *cng.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return cng.EncryptRSAOAEP(h, pub, msg, label)
-+}
-+
-+func EncryptRSAPKCS1(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return cng.EncryptRSAPKCS1(pub, msg)
-+}
-+
-+func EncryptRSANoPadding(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return cng.EncryptRSANoPadding(pub, msg)
-+}
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt, err error) {
-+	return cng.GenerateKeyRSA(bits)
-+}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt) (*cng.PrivateKeyRSA, error) {
-+	return cng.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+}
-+
-+func NewPublicKeyRSA(N, E cng.BigInt) (*cng.PublicKeyRSA, error) {
-+	return cng.NewPublicKeyRSA(N, E)
-+}
-+
-+func SignRSAPKCS1v15(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return cng.SignRSAPKCS1v15(priv, h, hashed)
-+}
-+
-+func SignRSAPSS(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return cng.SignRSAPSS(priv, h, hashed, saltLen)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return cng.VerifyRSAPKCS1v15(pub, h, hashed, sig)
-+}
-+
-+func VerifyRSAPSS(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return cng.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
-+}
-+
-+type PrivateKeyECDH = cng.PrivateKeyECDH
-+type PublicKeyECDH = cng.PublicKeyECDH
-+
-+func ECDH(priv *cng.PrivateKeyECDH, pub *cng.PublicKeyECDH) ([]byte, error) {
-+	return cng.ECDH(priv, pub)
-+}
-+
-+func GenerateKeyECDH(curve string) (*cng.PrivateKeyECDH, []byte, error) {
-+	return cng.GenerateKeyECDH(curve)
-+}
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*cng.PrivateKeyECDH, error) {
-+	return cng.NewPrivateKeyECDH(curve, bytes)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*cng.PublicKeyECDH, error) {
-+	return cng.NewPublicKeyECDH(curve, bytes)
-+}
-+
-+func SupportsHKDF() bool {
-+	return cng.SupportsHKDF()
-+}
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return cng.ExpandHKDF(h, pseudorandomKey, info, keyLength)
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return cng.ExtractHKDF(h, secret, salt)
-+}
-+
-+func SupportsPBKDF2() bool { return true }
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return cng.PBKDF2(password, salt, iter, keyLen, h)
-+}
-+
-+func SupportsTLS1PRF() bool {
-+	return true
-+}
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	return cng.TLS1PRF(result, secret, label, seed, h)
-+}
-+
-+func SupportsDESCipher() bool {
-+	return true
-+}
-+
-+func SupportsTripleDESCipher() bool {
-+	return true
-+}
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewDESCipher(key)
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewTripleDESCipher(key)
-+}
-+
-+func SupportsRC4() bool { return true }
-+
-+type RC4Cipher = cng.RC4Cipher
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return cng.NewRC4Cipher(key) }
-+
-+func SupportsEd25519() bool { return false }
-+
-+type PublicKeyEd25519 struct{}
-+
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyEd25519 struct{}
-+
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyDSA = cng.PrivateKeyDSA
-+type PublicKeyDSA = cng.PublicKeyDSA
-+
-+func SupportsDSA(l, n int) bool {
-+	// These are the only N values supported by CNG
-+	return n == 160 || n == 256
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g cng.BigInt, err error) {
-+	params, err := cng.GenerateParametersDSA(l)
-+	if err != nil {
-+		return nil, nil, nil, err
-+	}
-+	return params.P, params.Q, params.G, nil
-+}
-+
-+func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
-+	return cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
-+	return cng.NewPrivateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, x, y)
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
-+	return cng.NewPublicKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, y)
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {
-+	return cng.SignDSA(priv, hash)
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
-+	return cng.VerifyDSA(pub, hashed, r, s)
-+}
-diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
-new file mode 100644
-index 00000000000000..f769d15f94ab05
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/cng.go
-@@ -0,0 +1,33 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.cngcrypto
-+
-+package fips140
-+
-+import (
-+	"internal/syscall/windows/sysdll"
-+	"syscall"
-+	"unsafe"
-+)
-+
-+// Don't use github.com/microsoft/go-crypto-winnative here.
-+// The fips140 package should have minimal dependencies.
-+// Also, don't directly query the system FIPS mode from the registry,
-+// there are some no-longer documented legacy entries that can enable FIPS mode,
-+// and BCryptGetFipsAlgorithmMode supports them all.
-+var (
-+	bcrypt = syscall.MustLoadDLL(sysdll.Add("bcrypt.dll"))
-+
-+	bcryptGetFipsAlgorithmMode = bcrypt.MustFindProc("BCryptGetFipsAlgorithmMode")
-+)
-+
-+func systemFIPSMode() bool {
-+	var enabled uint32
-+	ret, _, _ := bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
-+	if ret != 0 {
-+		return false
-+	}
-+	return enabled != 0
-+}
diff --git a/patches/0010-Update-default-go.env.patch b/patches/0006-Update-default-go.env.patch
similarity index 100%
rename from patches/0010-Update-default-go.env.patch
rename to patches/0006-Update-default-go.env.patch
diff --git a/patches/0007-Add-Darwin-crypto-backend.patch b/patches/0007-Add-Darwin-crypto-backend.patch
deleted file mode 100644
index 6cd2cd3a969..00000000000
--- a/patches/0007-Add-Darwin-crypto-backend.patch
+++ /dev/null
@@ -1,547 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: George Adams <gadams@microsoft.com>
-Date: Tue, 17 Dec 2024 13:17:39 +0000
-Subject: [PATCH] Add Darwin crypto backend
-
----
- .gitignore                                    |   2 +
- .../internal/backend/bbig/big_darwin.go       |  12 +
- src/crypto/internal/backend/darwin_darwin.go  | 359 ++++++++++++++++++
- src/crypto/internal/backend/fips140/darwin.go |  11 +
- src/crypto/rsa/darwin.go                      |  71 ++++
- src/net/lookup_test.go                        |   3 +
- src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 7 files changed, 464 insertions(+)
- create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
- create mode 100644 src/crypto/internal/backend/darwin_darwin.go
- create mode 100644 src/crypto/internal/backend/fips140/darwin.go
- create mode 100644 src/crypto/rsa/darwin.go
-
-diff --git a/.gitignore b/.gitignore
-index c6512e64a4ef39..b3b01db73b009d 100644
---- a/.gitignore
-+++ b/.gitignore
-@@ -46,6 +46,8 @@ _testmain.go
- /test/run.out
- /test/times.out
- 
-+!/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
-+
- # This file includes artifacts of Go build that should not be checked in.
- # For files created by specific development environment (e.g. editor),
- # use alternative ways to exclude files from git.
-diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
-new file mode 100644
-index 00000000000000..77f3ca5d262769
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_darwin.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.darwincrypto && cgo
-+
-+package bbig
-+
-+import "github.com/microsoft/go-crypto-darwin/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
-new file mode 100644
-index 00000000000000..2250852ada8cc8
---- /dev/null
-+++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,359 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.darwincrypto && darwin && cgo
-+
-+// Package darwin provides access to DarwinCrypto implementation functions.
-+// Check the variable Enabled to find out whether DarwinCrypto is available.
-+// If DarwinCrypto is not available, the functions in this package all panic.
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/boring/sig"
-+	"crypto/internal/fips140/nistec"
-+	"errors"
-+	"hash"
-+	_ "unsafe"
-+
-+	"github.com/microsoft/go-crypto-darwin/xcrypto"
-+)
-+
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = xcrypto.BigInt
-+
-+func init() {
-+	sig.BoringCrypto()
-+}
-+
-+const RandReader = xcrypto.RandReader
-+
-+func SupportsHash(h crypto.Hash) bool {
-+	return xcrypto.SupportsHash(h)
-+}
-+
-+func SupportsCurve(curve string) bool {
-+	switch curve {
-+	case "P-256", "P-384", "P-521":
-+		return true
-+	}
-+	return false
-+}
-+
-+func SupportsRSAOAEPLabel(label []byte) bool {
-+	// CommonCrypto doesn't support labels
-+	// https://github.com/microsoft/go-crypto-darwin/issues/22
-+	return len(label) == 0
-+}
-+
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool {
-+	switch hash {
-+	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
-+		return true
-+	}
-+	return false
-+}
-+
-+func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
-+func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
-+func NewSHA224() hash.Hash { return xcrypto.NewSHA224() }
-+func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
-+func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
-+func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
-+
-+func MD5(p []byte) (sum [16]byte)        { return xcrypto.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return xcrypto.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return xcrypto.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)     { return xcrypto.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return xcrypto.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return xcrypto.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
-+	return xcrypto.NewHMAC(h, key)
-+}
-+
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewAESCipher(key)
-+}
-+
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	return xcrypto.NewGCMTLS(c)
-+}
-+
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	return xcrypto.NewGCMTLS13(c)
-+}
-+
-+type PublicKeyECDSA = xcrypto.PublicKeyECDSA
-+type PrivateKeyECDSA = xcrypto.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D xcrypto.BigInt, err error) {
-+	return xcrypto.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D xcrypto.BigInt) (*xcrypto.PrivateKeyECDSA, error) {
-+	return xcrypto.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y xcrypto.BigInt) (*xcrypto.PublicKeyECDSA, error) {
-+	return xcrypto.NewPublicKeyECDSA(curve, X, Y)
-+}
-+
-+//go:linkname encodeSignature crypto/ecdsa.encodeSignature
-+func encodeSignature(r, s []byte) ([]byte, error)
-+
-+//go:linkname parseSignature crypto/ecdsa.parseSignature
-+func parseSignature(sig []byte) (r, s []byte, err error)
-+
-+func SignMarshalECDSA(priv *xcrypto.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return xcrypto.SignMarshalECDSA(priv, hash)
-+}
-+
-+func VerifyECDSA(pub *xcrypto.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return xcrypto.VerifyECDSA(pub, hash, sig)
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	return primes == 2
-+}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	// CommonCrypto doesn't support custom salt length
-+	return salt == -1
-+}
-+
-+type PublicKeyRSA = xcrypto.PublicKeyRSA
-+type PrivateKeyRSA = xcrypto.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *xcrypto.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSAOAEP(h, priv, ciphertext, label)
-+}
-+
-+func DecryptRSAPKCS1(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSAPKCS1(priv, ciphertext)
-+}
-+
-+func DecryptRSANoPadding(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSANoPadding(priv, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *xcrypto.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSAOAEP(h, pub, msg, label)
-+}
-+
-+func EncryptRSAPKCS1(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSAPKCS1(pub, msg)
-+}
-+
-+func EncryptRSANoPadding(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSANoPadding(pub, msg)
-+}
-+
-+//go:linkname decodeKeyRSA crypto/rsa.decodeKey
-+func decodeKeyRSA(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error)
-+
-+//go:linkname encodeKeyRSA crypto/rsa.encodeKey
-+func encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) ([]byte, error)
-+
-+//go:linkname encodePublicKeyRSA crypto/rsa.encodePublicKey
-+func encodePublicKeyRSA(N, E xcrypto.BigInt) ([]byte, error)
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error) {
-+	data, err := xcrypto.GenerateKeyRSA(bits)
-+	if err != nil {
-+		return
-+	}
-+	return decodeKeyRSA(data)
-+}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) (*xcrypto.PrivateKeyRSA, error) {
-+	encoded, err := encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return xcrypto.NewPrivateKeyRSA(encoded)
-+}
-+
-+func NewPublicKeyRSA(N, E xcrypto.BigInt) (*xcrypto.PublicKeyRSA, error) {
-+	encoded, err := encodePublicKeyRSA(N, E)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return xcrypto.NewPublicKeyRSA(encoded)
-+}
-+
-+func SignRSAPKCS1v15(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return xcrypto.SignRSAPKCS1v15(priv, h, hashed)
-+}
-+
-+func SignRSAPSS(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return xcrypto.SignRSAPSS(priv, h, hashed, saltLen)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return xcrypto.VerifyRSAPKCS1v15(pub, h, hashed, sig)
-+}
-+
-+func VerifyRSAPSS(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return xcrypto.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
-+}
-+
-+type PrivateKeyECDH = xcrypto.PrivateKeyECDH
-+type PublicKeyECDH = xcrypto.PublicKeyECDH
-+
-+func ECDH(priv *xcrypto.PrivateKeyECDH, pub *xcrypto.PublicKeyECDH) ([]byte, error) {
-+	return xcrypto.ECDH(priv, pub)
-+}
-+
-+func GenerateKeyECDH(curve string) (*xcrypto.PrivateKeyECDH, []byte, error) {
-+	return xcrypto.GenerateKeyECDH(curve)
-+}
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
-+	var key []byte
-+	switch curve {
-+	case "P-256":
-+		p, err := nistec.NewP256Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	case "P-384":
-+		p, err := nistec.NewP384Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	case "P-521":
-+		p, err := nistec.NewP521Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	default:
-+		return nil, errors.New("NewPrivateKeyECDH: unsupported curve: " + curve)
-+	}
-+	return xcrypto.NewPrivateKeyECDH(curve, key, bytes)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
-+	return xcrypto.NewPublicKeyECDH(curve, bytes)
-+}
-+
-+func SupportsHKDF() bool {
-+	return true
-+}
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return xcrypto.ExpandHKDF(h, pseudorandomKey, info, keyLength)
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return xcrypto.ExtractHKDF(h, secret, salt)
-+}
-+
-+func SupportsPBKDF2() bool {
-+	return true
-+}
-+
-+func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return xcrypto.PBKDF2(pass, salt, iter, keyLen, h)
-+}
-+
-+func SupportsTLS1PRF() bool {
-+	return false
-+}
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDESCipher() bool {
-+	return true
-+}
-+
-+func SupportsTripleDESCipher() bool {
-+	return true
-+}
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewDESCipher(key)
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewTripleDESCipher(key)
-+}
-+
-+func SupportsRC4() bool { return true }
-+
-+type RC4Cipher = xcrypto.RC4Cipher
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return xcrypto.NewRC4Cipher(key) }
-+
-+func SupportsEd25519() bool {
-+	return true
-+}
-+
-+type PublicKeyEd25519 = xcrypto.PublicKeyEd25519
-+type PrivateKeyEd25519 = xcrypto.PrivateKeyEd25519
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	return xcrypto.GenerateKeyEd25519(), nil
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	return xcrypto.NewPrivateKeyEd25519(priv)
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	return xcrypto.NewPublicKeyEd25519(pub)
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	return xcrypto.NewPrivateKeyEd25519FromSeed(seed)
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	return xcrypto.SignEd25519(priv, message)
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	return xcrypto.VerifyEd25519(pub, message, sig)
-+}
-+
-+func SupportsDSA(l, n int) bool {
-+	return false
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyDSA struct{}
-+type PublicKeyDSA struct{}
-+
-+func GenerateKeyDSA(p, q, g xcrypto.BigInt) (x, y xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y xcrypto.BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y xcrypto.BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (xcrypto.BigInt, xcrypto.BigInt, error)) (r, s xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
-diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
-new file mode 100644
-index 00000000000000..ef5af5d956163e
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/darwin.go
-@@ -0,0 +1,11 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.darwincrypto
-+
-+package fips140
-+
-+func systemFIPSMode() bool {
-+	return false
-+}
-diff --git a/src/crypto/rsa/darwin.go b/src/crypto/rsa/darwin.go
-new file mode 100644
-index 00000000000000..1b9c63523ee90e
---- /dev/null
-+++ b/src/crypto/rsa/darwin.go
-@@ -0,0 +1,71 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.darwincrypto
-+
-+package rsa
-+
-+import (
-+	"crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
-+	"errors"
-+	"math/big"
-+	_ "unsafe"
-+
-+	"golang.org/x/crypto/cryptobyte"
-+	"golang.org/x/crypto/cryptobyte/asn1"
-+)
-+
-+//go:linkname decodeKey
-+func decodeKey(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
-+	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
-+		return nil, nil, nil, nil, nil, nil, nil, nil, e
-+	}
-+	input := cryptobyte.String(data)
-+	var version int
-+	n, e, d, p, q, dp, dq, qinv := new(big.Int), new(big.Int), new(big.Int), new(big.Int),
-+		new(big.Int), new(big.Int), new(big.Int), new(big.Int)
-+	// Parse the ASN.1 sequence
-+	if !input.ReadASN1(&input, asn1.SEQUENCE) {
-+		return bad(errors.New("invalid ASN.1 structure: not a sequence"))
-+	}
-+	if !input.ReadASN1Integer(&version) || version != 0 {
-+		return bad(errors.New("invalid ASN.1 structure: unsupported version"))
-+	}
-+	if !input.ReadASN1Integer(n) || !input.ReadASN1Integer(e) ||
-+		!input.ReadASN1Integer(d) || !input.ReadASN1Integer(p) ||
-+		!input.ReadASN1Integer(q) || !input.ReadASN1Integer(dp) ||
-+		!input.ReadASN1Integer(dq) || !input.ReadASN1Integer(qinv) {
-+		return bad(errors.New("invalid ASN.1 structure"))
-+	}
-+	return bbig.Enc(n), bbig.Enc(e), bbig.Enc(d), bbig.Enc(p), bbig.Enc(q),
-+		bbig.Enc(dp), bbig.Enc(dq), bbig.Enc(qinv), nil
-+}
-+
-+//go:linkname encodeKey
-+func encodeKey(N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt) ([]byte, error) {
-+	builder := cryptobyte.NewBuilder(nil)
-+	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		b.AddASN1Int64(0)               // Add version as int64
-+		b.AddASN1BigInt(bbig.Dec(N))    // Add modulus
-+		b.AddASN1BigInt(bbig.Dec(E))    // Add public exponent
-+		b.AddASN1BigInt(bbig.Dec(D))    // Add private exponent
-+		b.AddASN1BigInt(bbig.Dec(P))    // Add prime1
-+		b.AddASN1BigInt(bbig.Dec(Q))    // Add prime2
-+		b.AddASN1BigInt(bbig.Dec(Dp))   // Add exponent1
-+		b.AddASN1BigInt(bbig.Dec(Dq))   // Add exponent2
-+		b.AddASN1BigInt(bbig.Dec(Qinv)) // Add coefficient
-+	})
-+	return builder.Bytes()
-+}
-+
-+//go:linkname encodePublicKey
-+func encodePublicKey(N, E backend.BigInt) ([]byte, error) {
-+	builder := cryptobyte.NewBuilder(nil)
-+	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		b.AddASN1BigInt(bbig.Dec(N)) // Add modulus
-+		b.AddASN1BigInt(bbig.Dec(E)) // Add public exponent
-+	})
-+	return builder.Bytes()
-+}
-diff --git a/src/net/lookup_test.go b/src/net/lookup_test.go
-index 514cbd098ae772..8ec689416dde1d 100644
---- a/src/net/lookup_test.go
-+++ b/src/net/lookup_test.go
-@@ -1501,6 +1501,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
- }
- 
- func TestLookupNoSuchHost(t *testing.T) {
-+	if runtime.GOOS == "darwin" {
-+		t.Skip("skipping on darwin; see https://github.com/microsoft/go/issues/1394")
-+	}
- 	mustHaveExternalNetwork(t)
- 
- 	const testNXDOMAIN = "invalid.invalid."
-diff --git a/src/runtime/pprof/vminfo_darwin_test.go b/src/runtime/pprof/vminfo_darwin_test.go
-index 6d375c5d53368a..39154b000ddc67 100644
---- a/src/runtime/pprof/vminfo_darwin_test.go
-+++ b/src/runtime/pprof/vminfo_darwin_test.go
-@@ -11,6 +11,7 @@ import (
- 	"bytes"
- 	"fmt"
- 	"internal/abi"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"os"
- 	"os/exec"
-@@ -21,6 +22,11 @@ import (
- )
- 
- func TestVMInfo(t *testing.T) {
-+	if goexperiment.DarwinCrypto {
-+		// Fails on macOS when using system crypto.
-+		// https://github.com/microsoft/go/issues/1466
-+		t.Skip("skipping on Darwin")
-+	}
- 	var begin, end, offset uint64
- 	var filename string
- 	first := true
diff --git a/patches/0011-Skip-failing-tests-on-Windows.patch b/patches/0007-Skip-failing-tests-on-Windows.patch
similarity index 100%
rename from patches/0011-Skip-failing-tests-on-Windows.patch
rename to patches/0007-Skip-failing-tests-on-Windows.patch
diff --git a/patches/0012-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0008-unset-GOFIPS-when-running-the-Go-toolchain.patch
similarity index 100%
rename from patches/0012-unset-GOFIPS-when-running-the-Go-toolchain.patch
rename to patches/0008-unset-GOFIPS-when-running-the-Go-toolchain.patch
diff --git a/patches/0013-add-support-for-logging-used-Windows-APIs.patch b/patches/0009-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0013-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0009-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0014-remove-long-path-support-hack.patch b/patches/0010-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0014-remove-long-path-support-hack.patch
rename to patches/0010-remove-long-path-support-hack.patch
diff --git a/patches/0015-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0011-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0015-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0011-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
similarity index 100%
rename from patches/0016-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
rename to patches/0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

From d5d6f7734275f0a7ae53af36a5f6e50b43e99e05 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 15 Jan 2025 16:01:29 +0000
Subject: [PATCH 193/887] darwin: document darwincrypto goexperiment in fips
 README.md

---
 eng/doc/fips/README.md | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 6c2ddef7fd9..9aa1a4db368 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -27,7 +27,7 @@ In addition to that, the boringcrypto flag also provides a mechanism to restrict
 
 The Microsoft Go fork modifies the Go runtime to implement several crypto primitives using cgo to call into a platform-provided cryptographic library rather than use the standard Go crypto implementations. This allows Go programs to use a platform-provided FIPS 140-2 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Similar to BoringSSL, certain OpenSSL and CNG versions are FIPS 140-2 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. On macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140-2 certified.
 
 It is important to note that an application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_. It is the responsibility of the application development team to use FIPS-compliant crypto primitives and workflows. The modified crypto runtime will fall back to Go standard library crypto if it cannot provide a FIPS-compliant implementation, e.g. when hashing a message using `crypto/md5` hashes or when using an AES-GCM cipher with a non-standard nonce size.
 
@@ -87,6 +87,7 @@ The `GOEXPERIMENT` environment variable is used at build time to select a crypto
   - Prior to Go 1.21, this alias is not available and the backend must be selected manually
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
+- `darwincrypto` selects CommonCrypto & CryptoKit for macOS
 - `boringcrypto` selects the upstream BoringCrypto backend, which is **not supported nor compliant**
 - If no option is selected, Go standard library cryptography is used.
 
@@ -98,7 +99,7 @@ The options are exclusive and must not be enabled at the same time as one anothe
 | --- | --- | --- |
 | Linux | `opensslcrypto` | OpenSSL |
 | Windows | `cngcrypto` | CNG |
-| macOS (not supported: [microsoft/go#1013](https://github.com/microsoft/go/issues/1013)) | N/A, build error | N/A  |
+| macOS | `darwincrypto` | CommonCrypto & CryptoKit |
 
 The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`. Prior to Go 1.21, the selection must be made manually: `GOOS=windows GOEXPERIMENT=cngcrypto`.
 
@@ -147,7 +148,7 @@ Another approach that generally works for any build system is to modify the buil
 > [!NOTE]
 > Prior to Go 1.21, `systemcrypto` doesn't exist and `opensslcrypto` or `cngcrypto` must be used depending on the target platform.
 
-#### Linux shell (bash) - Set `GOEXPERIMENT` environment variable
+#### Linux/macOS shell (bash) - Set `GOEXPERIMENT` environment variable
 
 - Set the environment variable for all future commands:
   ```sh
@@ -156,7 +157,7 @@ Another approach that generally works for any build system is to modify the buil
   go build ./myapp2
   ```
 - Or set the environment variable for only one command:
-  ```
+  ```sh
   GOEXPERIMENT=systemcrypto go build ./myapp
   ```
 
@@ -180,7 +181,7 @@ Another approach that generally works for any build system is to modify the buil
 
 - Instead of assigning `GOEXPERIMENT` directly, you can assign `GOFLAGS` to pass `-tags` to `go build`. This is useful if you already use `GOFLAGS` for other purposes, or if it would be difficult to modify `GOEXPERIMENT` for some other reason.
 - This is generally not necessary, and using the simpler `GOEXPERIMENT` environment variable is recommended.
-- Linux shell:
+- Linux/macOS shell:
   ```
   export GOFLAGS='-tags=goexperiment.systemcrypto'
   go build ./myapp
@@ -196,7 +197,7 @@ Another approach that generally works for any build system is to modify the buil
 
 ## Usage: Runtime
 
-A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL) and `cngcrypto` (always using CNG). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
+A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL), `cngcrypto` (always using CNG) and `darwincrypto` (always using CommonCrypto/CryptoKit). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
 
 The following sections describe how to enable FIPS mode and the effect of the `GOFIPS` environment variable on each supported platform.
 
@@ -229,6 +230,10 @@ If the Go runtime detects `GOFIPS=1` and FIPS policy is not enabled, the program
 
 For testing purposes, Windows FIPS policy can be enabled via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
 
+### macOS FIPS mode (CommonCrypto/CryptoKit)
+
+CommonCrypo/CrytoKit is FIPS compliant by default. This means that regardless of which mode you set `GOFIPS` to, the cryptographic functions will always be FIPS-enabled.
+
 ## Usage: Extra configuration options
 
 ### Build option to require FIPS mode
@@ -438,6 +443,7 @@ This list of major changes is intended for quick reference and for access to his
 [go-crypto-openssl]: https://github.com/microsoft/go-crypto-openssl
 [golang-fips/openssl]: https://github.com/golang-fips/openssl
 [go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
+[go-crypto-darwin]: https://github.com/microsoft/go-crypto-darwin
 [dlopen]: https://man7.org/linux/man-pages/man3/dlopen.3.html
 [microsoft-go-download]: https://github.com/microsoft/go#binary-distribution
 [microsoft-go-images]: https://github.com/microsoft/go-images

From ce8e5ffe759f2bd8b22cc4db04e278a90d669bdc Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 15 Jan 2025 20:53:10 +0000
Subject: [PATCH 194/887] Update submodule to latest master (368a9ec9):
 encoding/json: cleanup tests

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 44a6f817ea0..368a9ec9983 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 44a6f817ea0fbeb3ba4aa398794c4e80dba13b1e
+Subproject commit 368a9ec99834652ca3f7d8fe24862a7581e12358

From b16474a6c9560c8d78b284bfa1d3cd99add04eca Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 15 Jan 2025 13:01:02 -0800
Subject: [PATCH 195/887] Update CrossPlatformCryptography.md: fix FIPS readme
 link (#1491)

---
 eng/doc/CrossPlatformCryptography.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 5e5196ecc0a..d544ef55da6 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -1,7 +1,7 @@
 # Cross-Platform Cryptography in Microsoft Go
 
-Cryptographic operations in Microsoft Go are delegated to the operating system (OS) libraries in some conditions described.
-The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft Go FIPS README](./Readme.md).
+Cryptographic operations in Microsoft Go are delegated to the operating system (OS) libraries in some conditions.
+The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft Go FIPS README](./fips/README.md).
 At a fine-grained level, Go apps will fall back to the native Go implementation of an algorithm if the OS libraries don't support it.
 This article identifies the features that are supported on each platform.
 

From 03caff28d576a086d4d5716a2168962716b6add3 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 16 Jan 2025 09:47:00 +0000
Subject: [PATCH 196/887] backends: update all vendor backends to latest

---
 patches/0002-Vendor-crypto-backends.patch | 168 ++++++++++++++++------
 1 file changed, 124 insertions(+), 44 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 548d456466d..37cdfc006f3 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -6,7 +6,7 @@ Subject: [PATCH] Vendor crypto backends
 To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
- src/crypto/internal/backend/deps_ignore.go    |  19 +
+ src/crypto/internal/backend/deps_ignore.go    |  22 +
  src/go.mod                                    |   6 +
  src/go.sum                                    |   6 +
  src/go/build/deps_test.go                     |  17 +-
@@ -35,7 +35,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/init.go |  64 ++
  .../golang-fips/openssl/v2/init_unix.go       |  31 +
  .../golang-fips/openssl/v2/init_windows.go    |  36 +
- .../golang-fips/openssl/v2/openssl.go         | 469 ++++++++++++
+ .../golang-fips/openssl/v2/openssl.go         | 506 +++++++++++++
  .../golang-fips/openssl/v2/params.go          | 210 ++++++
  .../golang-fips/openssl/v2/pbkdf2.go          |  62 ++
  .../golang-fips/openssl/v2/port_dsa.c         |  85 +++
@@ -85,7 +85,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/dsa.go  | 465 ++++++++++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go | 255 +++++++
  .../go-crypto-winnative/cng/ecdsa.go          | 169 +++++
- .../microsoft/go-crypto-winnative/cng/hash.go | 312 ++++++++
+ .../microsoft/go-crypto-winnative/cng/hash.go | 325 ++++++++
  .../microsoft/go-crypto-winnative/cng/hkdf.go | 124 +++
  .../microsoft/go-crypto-winnative/cng/hmac.go |  35 +
  .../microsoft/go-crypto-winnative/cng/keys.go | 220 ++++++
@@ -93,7 +93,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rand.go |  28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |  65 ++
  .../microsoft/go-crypto-winnative/cng/rsa.go  | 396 ++++++++++
- .../microsoft/go-crypto-winnative/cng/sha3.go | 284 +++++++
+ .../microsoft/go-crypto-winnative/cng/sha3.go | 311 ++++++++
  .../go-crypto-winnative/cng/tls1prf.go        |  88 +++
  .../internal/bcrypt/bcrypt_windows.go         | 368 +++++++++
  .../internal/bcrypt/ntstatus_windows.go       |  45 ++
@@ -101,7 +101,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  16 +
- 95 files changed, 13707 insertions(+), 3 deletions(-)
+ 95 files changed, 13787 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -195,10 +195,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
 
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
-index 00000000000000..ba6d196a54f69d
+index 00000000000000..ae4055d2d71303
 --- /dev/null
 +++ b/src/crypto/internal/backend/deps_ignore.go
-@@ -0,0 +1,19 @@
+@@ -0,0 +1,22 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -211,6 +211,9 @@ index 00000000000000..ba6d196a54f69d
 +	_ "github.com/golang-fips/openssl/v2"
 +	_ "github.com/golang-fips/openssl/v2/bbig"
 +
++	_ "github.com/microsoft/go-crypto-darwin/bbig"
++	_ "github.com/microsoft/go-crypto-darwin/xcrypto"
++
 +	_ "github.com/microsoft/go-crypto-winnative/cng"
 +	_ "github.com/microsoft/go-crypto-winnative/cng/bbig"
 +)
@@ -219,7 +222,7 @@ index 00000000000000..ba6d196a54f69d
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..45152e6f54937b 100644
+index 7a1318dcac32ba..18a071a7428728 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -228,21 +231,21 @@ index 7a1318dcac32ba..45152e6f54937b 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..5683f4da5e4f04 100644
+index 9e661352f16e0b..a2513aafc35631 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337 h1:OhuURhDVbg+f/BvlG+qT5sQVkutwhI0Kmsy7koQ4l9A=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146 h1:xg58D1m8jeq0lkMf7TmcLZXCAK/PRlT0aG02PYlA6C0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37 h1:KB8xmJcFSPlZFMg2mxz5b6DCE8k1qpHy2HFevAJLELI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6 h1:FFp7Q2AwYX+IQhhQt3ljQDdWtG5ZbRu0u3ohWQdFow8=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c h1:cPW7Q78w6ubgnQTxOFz5YuFmrXzt+p2UA+gSk/KAuDM=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70 h1:97wOagHu7OExwU929NjuPIlUEUaFIQtffQMaVj0mR5E=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
@@ -5116,10 +5119,10 @@ index 00000000000000..3778e21227abb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..145b082f1b771c
+index 00000000000000..ec39bf1533cae0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,469 @@
+@@ -0,0 +1,506 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -5256,6 +5259,37 @@ index 00000000000000..145b082f1b771c
 +	}
 +}
 +
++// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
++// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
++// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
++// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
++// which is FIPS-capable.
++//
++// Considerations:
++//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
++//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
++//     the default properties contain `fips=yes`.
++//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
++//   - When using OpenSSL 1, Will always return the same value as [FIPS].
++//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
++//     some heuristics that should be treated as an implementation detail that may change in the future.
++func FIPSCapable() bool {
++	if FIPS() {
++		return true
++	}
++	if vMajor == 3 {
++		// Load the provider with and without the `fips=yes` query.
++		// If the providers are the same, then the default provider is FIPS-capable.
++		provFIPS := sha256Provider(propFIPS)
++		if provFIPS == nil {
++			return false
++		}
++		provDefault := sha256Provider(nil)
++		return provFIPS == provDefault
++	}
++	return false
++}
++
 +// isProviderAvailable checks if the provider with the given name is available.
 +// This function is used in export_test.go, but must be defined here as test files can't access C functions.
 +func isProviderAvailable(name string) bool {
@@ -5315,16 +5349,22 @@ index 00000000000000..145b082f1b771c
 +	}
 +}
 +
-+// proveSHA256 checks if the SHA-256 algorithm is available
++// sha256Provider returns the provider for the SHA-256 algorithm
 +// using the given properties.
-+func proveSHA256(props *C.char) bool {
++func sha256Provider(props *C.char) C.GO_OSSL_PROVIDER_PTR {
 +	md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, props)
 +	if md == nil {
 +		C.go_openssl_ERR_clear_error()
-+		return false
++		return nil
 +	}
-+	C.go_openssl_EVP_MD_free(md)
-+	return true
++	defer C.go_openssl_EVP_MD_free(md)
++	return C.go_openssl_EVP_MD_get0_provider(md)
++}
++
++// proveSHA256 checks if the SHA-256 algorithm is available
++// using the given properties.
++func proveSHA256(props *C.char) bool {
++	return sha256Provider(props) != nil
 +}
 +
 +// noescape hides a pointer from escape analysis. noescape is
@@ -12434,10 +12474,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..a674496f18a3af
+index 00000000000000..b97e638e4a98ed
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,312 @@
+@@ -0,0 +1,325 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -12449,6 +12489,7 @@ index 00000000000000..a674496f18a3af
 +import (
 +	"bytes"
 +	"crypto"
++	"errors"
 +	"hash"
 +	"runtime"
 +	"unsafe"
@@ -12690,6 +12731,18 @@ index 00000000000000..a674496f18a3af
 +	return int(h.alg.blockSize)
 +}
 +
++func (hx *hashX) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (hx *hashX) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (hx *hashX) UnmarshalBinary(data []byte) error {
++	return errors.New("cng: hash state is not marshallable")
++}
++
 +// hashData writes p to ctx. It panics on error.
 +func hashData(ctx bcrypt.HASH_HANDLE, p []byte) {
 +	var n int
@@ -13732,10 +13785,10 @@ index 00000000000000..0269f9cf86539e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
 new file mode 100644
-index 00000000000000..d7aa193e00e653
+index 00000000000000..15c1345475a3b1
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
-@@ -0,0 +1,284 @@
+@@ -0,0 +1,311 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -13745,6 +13798,7 @@ index 00000000000000..d7aa193e00e653
 +package cng
 +
 +import (
++	"errors"
 +	"hash"
 +	"runtime"
 +	"unsafe"
@@ -13796,17 +13850,19 @@ index 00000000000000..d7aa193e00e653
 +	return out
 +}
 +
-+// SupportsSHAKE128 returns true if the SHAKE128 extendable output function is
-+// supported.
-+func SupportsSHAKE128() bool {
-+	_, err := loadHash(bcrypt.CSHAKE128_ALGORITHM, bcrypt.ALG_NONE_FLAG)
-+	return err == nil
-+}
-+
-+// SupportsSHAKE256 returns true if the SHAKE256 extendable output function is
-+// supported.
-+func SupportsSHAKE256() bool {
-+	_, err := loadHash(bcrypt.CSHAKE256_ALGORITHM, bcrypt.ALG_NONE_FLAG)
++// SupportsSHAKE returns true if the SHAKE and CSHAKE extendable output functions
++// with the given securityBits are supported.
++func SupportsSHAKE(securityBits int) bool {
++	var id string
++	switch securityBits {
++	case 128:
++		id = bcrypt.CSHAKE128_ALGORITHM
++	case 256:
++		id = bcrypt.CSHAKE256_ALGORITHM
++	default:
++		return false
++	}
++	_, err := loadHash(id, bcrypt.ALG_NONE_FLAG)
 +	return err == nil
 +}
 +
@@ -13900,6 +13956,18 @@ index 00000000000000..d7aa193e00e653
 +	return int(h.alg.blockSize)
 +}
 +
++func (ds *DigestSHA3) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (ds *DigestSHA3) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (ds *DigestSHA3) UnmarshalBinary(data []byte) error {
++	return errors.New("cng: hash state is not marshallable")
++}
++
 +// NewSHA3_256 returns a new SHA256 hash.
 +func NewSHA3_256() *DigestSHA3 {
 +	return newDigestSHA3(bcrypt.SHA3_256_ALGORITHM)
@@ -14020,6 +14088,18 @@ index 00000000000000..d7aa193e00e653
 +func (s *SHAKE) BlockSize() int {
 +	return int(s.blockSize)
 +}
++
++func (s *SHAKE) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (s *SHAKE) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("cng: hash state is not marshallable")
++}
++
++func (s *SHAKE) UnmarshalBinary(data []byte) error {
++	return errors.New("cng: hash state is not marshallable")
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
 new file mode 100644
 index 00000000000000..5a3fb01606ef95
@@ -15057,20 +15137,20 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 1c8de570cc2f1f..aac6c2a60b6b80 100644
+index 1c8de570cc2f1f..2013c56709b909 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250107115006-eb155dada337
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109125424-5d0e67f47146
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250108090702-b49854c00e37
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From ee2643c035efc4bf5912325a59e3a4267b06c6b9 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 16 Jan 2025 10:18:53 +0000
Subject: [PATCH 197/887] implement binary marshaller

---
 patches/0002-Vendor-crypto-backends.patch |  34 ++++--
 patches/0004-Use-crypto-backends.patch    | 137 ++++------------------
 2 files changed, 47 insertions(+), 124 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 37cdfc006f3..4fbc2631299 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -67,7 +67,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/ecdsa.go         | 181 +++++
  .../go-crypto-darwin/xcrypto/ed25519.go       | 100 +++
  .../microsoft/go-crypto-darwin/xcrypto/evp.go | 338 +++++++++
- .../go-crypto-darwin/xcrypto/hash.go          | 391 ++++++++++
+ .../go-crypto-darwin/xcrypto/hash.go          | 403 ++++++++++
  .../go-crypto-darwin/xcrypto/hkdf.go          |  66 ++
  .../go-crypto-darwin/xcrypto/hmac.go          | 113 +++
  .../go-crypto-darwin/xcrypto/pbkdf2.go        |  65 ++
@@ -101,7 +101,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  16 +
- 95 files changed, 13787 insertions(+), 3 deletions(-)
+ 95 files changed, 13799 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -222,7 +222,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..18a071a7428728 100644
+index 7a1318dcac32ba..a59c5f120e7dfb 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -232,18 +232,18 @@ index 7a1318dcac32ba..18a071a7428728 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..a2513aafc35631 100644
+index 9e661352f16e0b..b4273d691cbe36 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6 h1:FFp7Q2AwYX+IQhhQt3ljQDdWtG5ZbRu0u3ohWQdFow8=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c h1:cPW7Q78w6ubgnQTxOFz5YuFmrXzt+p2UA+gSk/KAuDM=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67 h1:SI0IFiHducwfamZR7pv6jb92oc5o/z5tn66wynS6ADE=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70 h1:97wOagHu7OExwU929NjuPIlUEUaFIQtffQMaVj0mR5E=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
@@ -9716,10 +9716,10 @@ index 00000000000000..fcdce4c49b6723
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
 new file mode 100644
-index 00000000000000..2618e53134e915
+index 00000000000000..94442fde5def16
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,391 @@
+@@ -0,0 +1,403 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9936,6 +9936,18 @@ index 00000000000000..2618e53134e915
 +	return append(b, digest...)
 +}
 +
++func (h *evpHash) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("xcrypto: hash state is not marshallable")
++}
++
++func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("xcrypto: hash state is not marshallable")
++}
++
++func (h *evpHash) UnmarshalBinary(data []byte) error {
++	return errors.New("xcrypto: hash state is not marshallable")
++}
++
 +// Clone returns a new evpHash object that is a deep clone of itself.
 +// The duplicate object contains all state and data contained in the
 +// original object at the point of duplication.
@@ -15137,7 +15149,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 1c8de570cc2f1f..2013c56709b909 100644
+index 1c8de570cc2f1f..a249bbfa93dac3 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
@@ -15145,7 +15157,7 @@ index 1c8de570cc2f1f..2013c56709b909 100644
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250109130249-2dee4e287e7c
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index f01156c5753..13348735e20 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -38,7 +38,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/md5/md5.go                         |  10 +
- src/crypto/md5/md5_test.go                    |  21 ++
+ src/crypto/md5/md5_test.go                    |  16 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   4 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
  src/crypto/purego_test.go                     |   2 +-
@@ -55,11 +55,11 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  15 +-
  src/crypto/sha1/sha1.go                       |   8 +-
- src/crypto/sha1/sha1_test.go                  |  19 +-
+ src/crypto/sha1/sha1_test.go                  |   9 +-
  src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  29 +++
+ src/crypto/sha256/sha256_test.go              |  16 ++
  src/crypto/sha512/sha512.go                   |   2 +-
- src/crypto/sha512/sha512_test.go              |  29 +++
+ src/crypto/sha512/sha512_test.go              |  16 ++
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
@@ -75,13 +75,13 @@ Subject: [PATCH] Use crypto backends
  src/go/build/deps_test.go                     |   5 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
- src/hash/marshal_test.go                      |   9 +
+ src/hash/marshal_test.go                      |   4 +
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 77 files changed, 1143 insertions(+), 109 deletions(-)
+ 77 files changed, 1097 insertions(+), 109 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1166,7 +1166,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 437d9b9d4c0e0d..ee28c55f846e81 100644
+index 437d9b9d4c0e0d..50728df60ea7ec 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,12 +6,14 @@ package md5
@@ -1184,19 +1184,7 @@ index 437d9b9d4c0e0d..ee28c55f846e81 100644
  	"testing"
  	"unsafe"
  )
-@@ -88,6 +90,11 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	for _, g := range golden {
- 		h := New()
- 		h2 := New()
-@@ -96,6 +103,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -96,6 +98,9 @@ func TestGoldenMarshal(t *testing.T) {
  
  		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  		if err != nil {
@@ -1206,7 +1194,7 @@ index 437d9b9d4c0e0d..ee28c55f846e81 100644
  			t.Errorf("could not marshal: %v", err)
  			continue
  		}
-@@ -157,6 +167,9 @@ func TestLarge(t *testing.T) {
+@@ -157,6 +162,9 @@ func TestLarge(t *testing.T) {
  
  // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
  func TestBlockGeneric(t *testing.T) {
@@ -1216,7 +1204,7 @@ index 437d9b9d4c0e0d..ee28c55f846e81 100644
  	gen, asm := New().(*digest), New().(*digest)
  	buf := make([]byte, BlockSize*20) // arbitrary factor
  	rand.Read(buf)
-@@ -204,10 +217,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -204,10 +212,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -1759,7 +1747,7 @@ index d2ffaac0aeb674..23d8ad44d0bd9a 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index 9d707b7cde5c2d..8da08b3d860a85 100644
+index 9d707b7cde5c2d..8e1f92ea7304a8 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,13 +8,14 @@ package sha1
@@ -1778,19 +1766,7 @@ index 9d707b7cde5c2d..8da08b3d860a85 100644
  	"testing"
  )
  
-@@ -97,6 +98,11 @@ func TestGolden(t *testing.T) {
- }
- 
- func TestGoldenMarshal(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	h := New()
- 	h2 := New()
- 	for _, g := range golden {
-@@ -107,6 +113,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -107,6 +108,9 @@ func TestGoldenMarshal(t *testing.T) {
  
  		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  		if err != nil {
@@ -1800,16 +1776,7 @@ index 9d707b7cde5c2d..8da08b3d860a85 100644
  			t.Errorf("could not marshal: %v", err)
  			continue
  		}
-@@ -210,10 +219,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
- }
- 
- func TestLargeHashes(t *testing.T) {
-+	if boring.Enabled {
-+		if _, ok := New().(encoding.BinaryMarshaler); !ok {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
- 	for i, test := range largeUnmarshalTests {
+@@ -214,6 +218,9 @@ func TestLargeHashes(t *testing.T) {
  
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
@@ -1851,7 +1818,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index e1af9640e25547..c4f142c1430285 100644
+index e1af9640e25547..8896c6e85f4ada 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -1868,19 +1835,7 @@ index e1af9640e25547..c4f142c1430285 100644
  	"testing"
  )
  
-@@ -155,6 +157,11 @@ func testGoldenMarshal(t *testing.T) {
- 
- 	for _, tt := range tests {
- 		t.Run(tt.name, func(t *testing.T) {
-+			if boring.Enabled {
-+				if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
- 			for _, g := range tt.gold {
- 				h := tt.newHash()
- 				h2 := tt.newHash()
-@@ -163,6 +170,9 @@ func testGoldenMarshal(t *testing.T) {
+@@ -163,6 +165,9 @@ func testGoldenMarshal(t *testing.T) {
  
  				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  				if err != nil {
@@ -1890,18 +1845,8 @@ index e1af9640e25547..c4f142c1430285 100644
  					t.Errorf("could not marshal: %v", err)
  					continue
  				}
-@@ -204,8 +214,19 @@ func TestMarshalTypeMismatch(t *testing.T) {
- 	h1 := New()
- 	h2 := New224()
+@@ -206,6 +211,9 @@ func TestMarshalTypeMismatch(t *testing.T) {
  
-+	if boring.Enabled {
-+		_, ok1 := h1.(encoding.BinaryMarshaler)
-+		_, ok2 := h2.(encoding.BinaryUnmarshaler)
-+		if !ok1 || !ok2 {
-+			t.Skip("BinaryMarshaler not implemented")
-+		}
-+	}
-+
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
 +		if strings.Contains(err.Error(), "hash state is not marshallable") {
@@ -1910,7 +1855,7 @@ index e1af9640e25547..c4f142c1430285 100644
  		t.Errorf("could not marshal: %v", err)
  	}
  
-@@ -275,10 +296,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -275,10 +283,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -1943,7 +1888,7 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 1fe9d132bb186d..97b7da8c2d3d88 100644
+index 1fe9d132bb186d..0692be8461e964 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,12 +8,14 @@ package sha512
@@ -1961,19 +1906,7 @@ index 1fe9d132bb186d..97b7da8c2d3d88 100644
  	"testing"
  )
  
-@@ -744,6 +746,11 @@ func testGoldenMarshal(t *testing.T) {
- 	for _, tt := range tests {
- 		t.Run(tt.name, func(t *testing.T) {
- 			for _, test := range tt.golden {
-+				if boring.Enabled {
-+					if _, ok := tt.newHash().(encoding.BinaryMarshaler); !ok {
-+						t.Skip("BinaryMarshaler not implemented")
-+					}
-+				}
- 				h := tt.newHash()
- 				h2 := tt.newHash()
- 
-@@ -751,6 +758,9 @@ func testGoldenMarshal(t *testing.T) {
+@@ -751,6 +753,9 @@ func testGoldenMarshal(t *testing.T) {
  
  				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  				if err != nil {
@@ -1983,18 +1916,8 @@ index 1fe9d132bb186d..97b7da8c2d3d88 100644
  					t.Errorf("could not marshal: %v", err)
  					return
  				}
-@@ -805,8 +815,19 @@ func TestMarshalMismatch(t *testing.T) {
- 			h1 := fn1()
- 			h2 := fn2()
- 
-+			if boring.Enabled {
-+				_, ok1 := h1.(encoding.BinaryMarshaler)
-+				_, ok2 := h2.(encoding.BinaryUnmarshaler)
-+				if !ok1 || !ok2 {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
-+
+@@ -807,6 +812,9 @@ func TestMarshalMismatch(t *testing.T) {
+ 
  			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  			if err != nil {
 +				if strings.Contains(err.Error(), "hash state is not marshallable") {
@@ -2003,7 +1926,7 @@ index 1fe9d132bb186d..97b7da8c2d3d88 100644
  				t.Errorf("i=%d: could not marshal: %v", i, err)
  				continue
  			}
-@@ -880,10 +901,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -880,10 +888,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -2610,7 +2533,7 @@ index f07b9aaa2c4898..b380537215634d 100644
  
  import (
 diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..23736034d5c352 100644
+index 3091f7a67acede..d952cf45797ac6 100644
 --- a/src/hash/marshal_test.go
 +++ b/src/hash/marshal_test.go
 @@ -21,6 +21,7 @@ import (
@@ -2621,19 +2544,7 @@ index 3091f7a67acede..23736034d5c352 100644
  	"testing"
  )
  
-@@ -65,6 +66,11 @@ func TestMarshalHash(t *testing.T) {
- 			}
- 
- 			h := tt.new()
-+			if boringEnabled {
-+				if _, ok := h.(encoding.BinaryMarshaler); !ok {
-+					t.Skip("BinaryMarshaler not implemented")
-+				}
-+			}
- 			h.Write(buf[:256])
- 			sum := h.Sum(nil)
- 
-@@ -80,6 +86,9 @@ func TestMarshalHash(t *testing.T) {
+@@ -80,6 +81,9 @@ func TestMarshalHash(t *testing.T) {
  			}
  			enc, err := h2m.MarshalBinary()
  			if err != nil {

From dddedbf8e98847d29c2b480592e92449257e46f4 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 16 Jan 2025 16:59:23 +0000
Subject: [PATCH 198/887] Check that each patch file is buildable (#1495)

* Check that each patch file is buildable

* merge patch 5 and 3

* group outputs
---
 .github/workflows/patch-build.yml             |  38 +
 .github/workflows/test.yml                    |   7 +-
 ...03-Implement-crypto-internal-backend.patch | 707 ++++++++++++++++-
 patches/0005-Add-backend-code-gen.patch       | 744 ------------------
 ...patch => 0005-Update-default-go.env.patch} |   0
 ... 0006-Skip-failing-tests-on-Windows.patch} |   0
 ...OFIPS-when-running-the-Go-toolchain.patch} |   0
 ...pport-for-logging-used-Windows-APIs.patch} |   0
 ... 0009-remove-long-path-support-hack.patch} |   0
 ...ernal-go.mod-files-used-for-codegen.patch} |   0
 ...21-when-TLS-fipsonly-mode-is-enable.patch} |   0
 11 files changed, 748 insertions(+), 748 deletions(-)
 create mode 100644 .github/workflows/patch-build.yml
 delete mode 100644 patches/0005-Add-backend-code-gen.patch
 rename patches/{0006-Update-default-go.env.patch => 0005-Update-default-go.env.patch} (100%)
 rename patches/{0007-Skip-failing-tests-on-Windows.patch => 0006-Skip-failing-tests-on-Windows.patch} (100%)
 rename patches/{0008-unset-GOFIPS-when-running-the-Go-toolchain.patch => 0007-unset-GOFIPS-when-running-the-Go-toolchain.patch} (100%)
 rename patches/{0009-add-support-for-logging-used-Windows-APIs.patch => 0008-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0010-remove-long-path-support-hack.patch => 0009-remove-long-path-support-hack.patch} (100%)
 rename patches/{0011-Omit-internal-go.mod-files-used-for-codegen.patch => 0010-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch => 0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch} (100%)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
new file mode 100644
index 00000000000..7d3db5e09e8
--- /dev/null
+++ b/.github/workflows/patch-build.yml
@@ -0,0 +1,38 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This job tests that each patch file is buildable (in numerical order)
+
+name: "Patch Build"
+
+on:
+  pull_request:
+    branches: [ microsoft/* ]
+
+jobs:
+  build_patches:
+    name: Patches Build in Order
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        with:
+          submodules: true
+
+      - name: Set mock git config name/email
+        run: |
+          git config --global user.email "joe@blogs.com"
+          git config --global user.name "Joe Blogs"
+
+      - name: Build patches
+        run: |
+          for file in $(ls -v patches/*.patch); do
+            echo "::group::Building $file"
+            cd go
+            git am --whitespace=nowarn ../$file
+            cd src
+            bash make.bash
+            cd ../../
+            echo "::endgroup::"
+          done
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 922fae84320..b72cd125c4f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -17,12 +17,17 @@ on:
   pull_request:
     branches: [ microsoft/* ]
 
+# Cancel existing runs if user makes another push.
+concurrency:
+  group: "${{ github.ref }}"
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 jobs:
   check_patches:
     name: Patches Apply Cleanly
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 5f7843d851e..1d0c32f60f6 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -6,6 +6,8 @@ Subject: [PATCH] Implement crypto/internal/backend
 ---
  .gitignore                                    |   2 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
+ src/crypto/internal/backend/backendgen.go     |  20 +
+ .../internal/backend/backendgen_test.go       | 284 ++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
@@ -27,9 +29,26 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
+ .../exp_allowcryptofallback_off.go            |   9 +
+ .../exp_allowcryptofallback_on.go             |   9 +
+ src/internal/goexperiment/flags.go            |   8 +
+ .../backenderr_gen_conflict_boring_cng.go     |  17 +
+ .../backenderr_gen_conflict_boring_darwin.go  |  17 +
+ .../backenderr_gen_conflict_boring_openssl.go |  17 +
+ .../backenderr_gen_conflict_cng_darwin.go     |  17 +
+ .../backenderr_gen_conflict_cng_openssl.go    |  17 +
+ .../backenderr_gen_conflict_darwin_openssl.go |  17 +
+ .../backenderr_gen_nofallback_boring.go       |  24 ++
+ src/runtime/backenderr_gen_nofallback_cng.go  |  24 ++
+ .../backenderr_gen_nofallback_darwin.go       |  24 ++
+ .../backenderr_gen_nofallback_openssl.go      |  24 ++
+ ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
+ .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 24 files changed, 1932 insertions(+), 1 deletion(-)
+ 41 files changed, 2493 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
+ create mode 100644 src/crypto/internal/backend/backendgen.go
+ create mode 100644 src/crypto/internal/backend/backendgen_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
  create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
@@ -50,6 +69,20 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
+ create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
+ create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_boring_cng.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_boring_darwin.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_boring_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_cng_darwin.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_cng_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_conflict_darwin_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_nofallback_boring.go
+ create mode 100644 src/runtime/backenderr_gen_nofallback_cng.go
+ create mode 100644 src/runtime/backenderr_gen_nofallback_darwin.go
+ create mode 100644 src/runtime/backenderr_gen_nofallback_openssl.go
+ create mode 100644 src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
+ create mode 100644 src/runtime/backenderr_gen_systemcrypto_nobackend.go
 
 diff --git a/.gitignore b/.gitignore
 index c6512e64a4ef39..b3b01db73b009d 100644
@@ -100,6 +133,322 @@ index 00000000000000..c2c06d3bff8c74
 +func TestUnreachableExceptTests(t *testing.T) {
 +	UnreachableExceptTests()
 +}
+diff --git a/src/crypto/internal/backend/backendgen.go b/src/crypto/internal/backend/backendgen.go
+new file mode 100644
+index 00000000000000..acf0113bbefb6c
+--- /dev/null
++++ b/src/crypto/internal/backend/backendgen.go
+@@ -0,0 +1,20 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package backend
++
++// Generate files and Go code based on the set of backends:
++//
++// - The build constraint in nobackend.go.
++// - Go files in the runtime package that detect issues with backend selection
++//   and report an error at compile time.
++//
++// Runs in -mod=readonly mode so that it is able to run during each crypto
++// backend patch. This is before the final vendoring refresh patch, so it would
++// normally fail to build due to inconsistent vendoring.
++
++// Use "go generate -run TestGenerated crypto/internal/backend"
++// to run only this generator.
++
++//go:generate go test -run TestGenerated -fix
+diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
+new file mode 100644
+index 00000000000000..1ba948c8f207e5
+--- /dev/null
++++ b/src/crypto/internal/backend/backendgen_test.go
+@@ -0,0 +1,284 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package backend
++
++import (
++	"bytes"
++	"flag"
++	"go/build/constraint"
++	"go/parser"
++	"go/token"
++	"os"
++	"path/filepath"
++	"sort"
++	"strings"
++	"testing"
++)
++
++var fix = flag.Bool("fix", false, "if true, update the generated files to the wanted value")
++
++const runtimePackageDir = "../../../runtime"
++
++// backendErrPrefix is the prefix of the generated backend error files. Any file
++// in the runtime package with this prefix will be considered a backend error
++// file, so it's important that this prefix is unique or this generator may
++// delete unexpected files.
++const backendErrPrefix = "backenderr_gen_"
++
++const generateInstruction = "run 'go generate crypto/internal/backend' to fix"
++
++// TestGeneratedBackendErrorFiles tests that the current nobackend constraint
++// is correct.
++//
++// Generate the build constraint in nobackend.go. This build constraint enables
++// nobackend when all of the backends are not enabled. This constraint is fairly
++// long and would not be trivial to maintain manually.
++func TestGeneratedNobackendConstraint(t *testing.T) {
++	backends := parseBackends(t)
++	// none is a constraint that is met when all crypto backend constraints are
++	// unmet. (That is: no backend constraint is met.)
++	var none constraint.Expr
++	for _, b := range backends {
++		notB := &constraint.NotExpr{X: b.constraint}
++		if none == nil {
++			none = notB
++		} else {
++			none = &constraint.AndExpr{
++				X: none,
++				Y: notB,
++			}
++		}
++	}
++	bytes, err := os.ReadFile("nobackend.go")
++	if err != nil {
++		t.Fatal(err)
++	}
++	lines := strings.Split(string(bytes), "\n")
++
++	var gotIndex int
++	var gotLine string
++	for i, line := range lines {
++		if strings.HasPrefix(line, "//go:build ") {
++			gotIndex, gotLine = i, line
++			break
++		}
++	}
++	_ = gotIndex
++
++	var wantLine string
++	if none == nil {
++		// If there are no backends yet, use a trivially true constraint.
++		// We could remove the constraint line, but this would make generation
++		// more complicated.
++		wantLine = "//go:build go1.1"
++	} else {
++		wantLine = "//go:build " + none.String()
++	}
++	if wantLine != gotLine {
++		if *fix {
++			lines[gotIndex] = wantLine
++			want := strings.Join(lines, "\n")
++			if err := os.WriteFile("nobackend.go", []byte(want), 0o666); err != nil {
++				t.Fatal(err)
++			}
++		} else {
++			t.Errorf("nobackend.go build constraint:\ngot %q\nwant %q\n%v", gotLine, wantLine, generateInstruction)
++		}
++	}
++}
++
++// TestGeneratedBackendErrorFiles tests that the current backend error files are
++// the same as what would generated under the current conditions.
++//
++// The error files are Go files that detect issues with the backend selection
++// and report an error at compile time.
++//
++// The issue detection files are placed in the runtime package rather than the
++// crypto/internal/backend package to make sure these helpful errors will show
++// up. If the files were in the backend package, DuplicateDecl and other errors
++// would show up first, causing these informative errors to be skipped because
++// there are too many total errors already reported. The errors would also show
++// up if we put the files in the crypto package rather than the runtime package.
++// (Crypto is imported before the backend backage, so the errors would show up.)
++// However, then these errors would show up only if the Go program is using
++// crypto. This could cause a confusing situation: if the user has a
++// misconfigured backend and doesn't use crypto in their Go app, they will not
++// get any errors. If they start using crypto later, they would only then get an
++// error, but the cause would be much less apparent.
++func TestGeneratedBackendErrorFiles(t *testing.T) {
++	// Chip away at a list of files that should come from this generator.
++	// Any remaining are unexpected.
++	existingFiles := make(map[string]struct{})
++	entries, err := os.ReadDir(runtimePackageDir)
++	if err != nil {
++		t.Fatal(err)
++	}
++	for _, e := range entries {
++		if strings.HasPrefix(e.Name(), backendErrPrefix) && strings.HasSuffix(e.Name(), ".go") {
++			existingFiles[filepath.Join(runtimePackageDir, e.Name())] = struct{}{}
++		}
++	}
++
++	backends := parseBackends(t)
++	for i := 0; i < len(backends); i++ {
++		for j := i + 1; j < len(backends); j++ {
++			f := testConflict(t, backends[i].name, backends[j].name)
++			delete(existingFiles, f)
++		}
++		f := testPreventUnintendedFallback(t, backends[i])
++		delete(existingFiles, f)
++	}
++	f := testUnsatisfied(t, backends)
++	delete(existingFiles, f)
++	f = testRequireFIPSWithoutBackend(t)
++	delete(existingFiles, f)
++
++	for f := range existingFiles {
++		if *fix {
++			if err := os.Remove(f); err != nil {
++				t.Fatal(err)
++			}
++		} else {
++			t.Errorf("unexpected file: %q", f)
++		}
++	}
++	if !*fix && len(existingFiles) > 0 {
++		t.Log(generateInstruction)
++	}
++}
++
++// testConflict checks/generates a file that fails if two backends are enabled
++// at the same time.
++func testConflict(t *testing.T, a, b string) string {
++	return testErrorFile(
++		t,
++		filepath.Join(runtimePackageDir, backendErrPrefix+"conflict_"+a+"_"+b+".go"),
++		"//go:build goexperiment."+a+"crypto && goexperiment."+b+"crypto",
++		"The "+a+" and "+b+" backends are both enabled, but they are mutually exclusive.",
++		"Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.")
++}
++
++func testPreventUnintendedFallback(t *testing.T, backend *backend) string {
++	expTag := &constraint.TagExpr{Tag: "goexperiment." + backend.name + "crypto"}
++	optOutTag := &constraint.TagExpr{Tag: "goexperiment.allowcryptofallback"}
++	c := constraint.AndExpr{
++		X: &constraint.AndExpr{
++			X: expTag,
++			Y: &constraint.NotExpr{X: backend.constraint},
++		},
++		Y: &constraint.NotExpr{X: optOutTag},
++	}
++	return testErrorFile(
++		t,
++		filepath.Join(runtimePackageDir, backendErrPrefix+"nofallback_"+backend.name+".go"),
++		"//go:build "+c.String(),
++		"The "+expTag.String()+" tag is specified, but other tags required to enable that backend were not met.",
++		"Required build tags:",
++		"  "+backend.constraint.String(),
++		"Please check your build environment and build command for a reason one or more of these tags weren't specified.",
++		"",
++		"If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.",
++		"As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.",
++		"Removing "+backend.name+"crypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.",
++		"")
++}
++
++// testUnsatisfied checks/generates a file that fails if systemcrypto is enabled
++// on an OS with no suitable backend.
++func testUnsatisfied(t *testing.T, backends []*backend) string {
++	constraint := "//go:build goexperiment.systemcrypto"
++	for _, b := range backends {
++		constraint += ` && !goexperiment.` + b.name + "crypto"
++	}
++	return testErrorFile(
++		t,
++		filepath.Join(runtimePackageDir, backendErrPrefix+"systemcrypto_nobackend.go"),
++		constraint,
++		"The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.")
++}
++
++func testRequireFIPSWithoutBackend(t *testing.T) string {
++	return testErrorFile(
++		t,
++		filepath.Join(runtimePackageDir, backendErrPrefix+"requirefips_nosystemcrypto.go"),
++		"//go:build requirefips && !goexperiment.systemcrypto",
++		"The requirefips tag is enabled, but no crypto backend is enabled.",
++		"A crypto backend is required to enable FIPS mode.")
++}
++
++// testErrorFile checks/generates a Go file with a given build constraint that
++// fails to compile. The file uses an unused string to convey an error message
++// to the dev on the "go build" command line.
++func testErrorFile(t *testing.T, file, constraint string, message ...string) string {
++	const header = `// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "` + backendErrPrefix + `".`
++	c := header + "\n\n" + constraint + "\n\npackage runtime\n\nfunc init() {\n\t`\n"
++	for _, m := range message {
++		c += "\t" + m + "\n"
++	}
++	c += "\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips\n"
++	c += "\t`" + "\n}\n"
++	if *fix {
++		if err := os.WriteFile(file, []byte(c), 0o666); err != nil {
++			t.Fatal(err)
++		}
++	} else {
++		existing, err := os.ReadFile(file)
++		if err != nil {
++			t.Fatal(err)
++		}
++		if !bytes.Equal(existing, []byte(c)) {
++			t.Errorf("file %v doesn't match expected value; %v", file, generateInstruction)
++			t.Log("found:", string(existing))
++			t.Log("would generate:", c)
++		}
++	}
++	return file
++}
++
++type backend struct {
++	filename   string
++	name       string
++	constraint constraint.Expr
++}
++
++func parseBackends(t *testing.T) []*backend {
++	fs := token.NewFileSet()
++	pkgs, err := parser.ParseDir(fs, ".", nil, parser.ParseComments)
++	if err != nil {
++		t.Fatal(err)
++	}
++	var bs []*backend
++	// Any file in this dir that defines "Enabled" is a backend.
++	for k, v := range pkgs["backend"].Files {
++		if en := v.Scope.Lookup("Enabled"); en != nil {
++			// nobackend defines Enabled, but it is specifically not a backend.
++			if k == "nobackend.go" {
++				continue
++			}
++			b := backend{filename: k}
++			b.name, _, _ = strings.Cut(strings.TrimSuffix(k, ".go"), "_")
++			for _, comment := range v.Comments {
++				for _, c := range comment.List {
++					if strings.HasPrefix(c.Text, "//go:build ") {
++						if c, err := constraint.Parse(c.Text); err == nil {
++							b.constraint = c
++						} else {
++							t.Fatal(err)
++						}
++					}
++				}
++			}
++			bs = append(bs, &b)
++		}
++	}
++	sort.Slice(bs, func(i, j int) bool {
++		return bs[i].name < bs[j].name
++	})
++	return bs
++}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
 index 00000000000000..ab3f30825dcfa1
@@ -1484,7 +1833,7 @@ index 00000000000000..118efa3a492a7d
 +}
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..eca1ceab2a04b9
+index 00000000000000..7c3a95c2c64a2d
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,240 @@
@@ -1494,7 +1843,7 @@ index 00000000000000..eca1ceab2a04b9
 +
 +// Do not edit the build constraint by hand. It is generated by "backendgen.go".
 +
-+//go:build ignore
++//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
 +
 +package backend
 +
@@ -2151,6 +2500,358 @@ index e017efb1562379..ab5539f978a266 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+new file mode 100644
+index 00000000000000..dfce36d834c46e
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+@@ -0,0 +1,9 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.allowcryptofallback
++// +build !goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = false
++const AllowCryptoFallbackInt = 0
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+new file mode 100644
+index 00000000000000..8d0c3fde9ab5e8
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+@@ -0,0 +1,9 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.allowcryptofallback
++// +build goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = true
++const AllowCryptoFallbackInt = 1
+diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
+index e6c9b7d5e62dc0..65d339be7dde32 100644
+--- a/src/internal/goexperiment/flags.go
++++ b/src/internal/goexperiment/flags.go
+@@ -78,6 +78,14 @@ type Flags struct {
+ 	// being used to build the Go program.
+ 	SystemCrypto bool
+ 
++	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
++	// experiment is enabled but the backend's requirements are not met. This is
++	// used during the Go build itself to allow running the test suite with a
++	// backend experiment enabled. Some parts of the Go build (bootstrapping)
++	// and parts of the test suite run without cgo, so
++	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
++	AllowCryptoFallback bool
++
+ 	// Regabi is split into several sub-experiments that can be
+ 	// enabled individually. Not all combinations work.
+ 	// The "regabi" GOEXPERIMENT is an alias for all "working"
+diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
+new file mode 100644
+index 00000000000000..361db2a962d60f
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_boring_cng.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.boringcrypto && goexperiment.cngcrypto
++
++package runtime
++
++func init() {
++	`
++	The boring and cng backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_conflict_boring_darwin.go b/src/runtime/backenderr_gen_conflict_boring_darwin.go
+new file mode 100644
+index 00000000000000..6c48a4e50fa72e
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_boring_darwin.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.boringcrypto && goexperiment.darwincrypto
++
++package runtime
++
++func init() {
++	`
++	The boring and darwin backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_conflict_boring_openssl.go b/src/runtime/backenderr_gen_conflict_boring_openssl.go
+new file mode 100644
+index 00000000000000..91fac35011b24c
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_boring_openssl.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.boringcrypto && goexperiment.opensslcrypto
++
++package runtime
++
++func init() {
++	`
++	The boring and openssl backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_conflict_cng_darwin.go b/src/runtime/backenderr_gen_conflict_cng_darwin.go
+new file mode 100644
+index 00000000000000..2e82a5cff034b7
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_cng_darwin.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.cngcrypto && goexperiment.darwincrypto
++
++package runtime
++
++func init() {
++	`
++	The cng and darwin backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_conflict_cng_openssl.go b/src/runtime/backenderr_gen_conflict_cng_openssl.go
+new file mode 100644
+index 00000000000000..bf44084570bbbc
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_cng_openssl.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.cngcrypto && goexperiment.opensslcrypto
++
++package runtime
++
++func init() {
++	`
++	The cng and openssl backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_conflict_darwin_openssl.go b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
+new file mode 100644
+index 00000000000000..90f4361e28cd94
+--- /dev/null
++++ b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.darwincrypto && goexperiment.opensslcrypto
++
++package runtime
++
++func init() {
++	`
++	The darwin and openssl backends are both enabled, but they are mutually exclusive.
++	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_nofallback_boring.go b/src/runtime/backenderr_gen_nofallback_boring.go
+new file mode 100644
+index 00000000000000..6db0ed6dc09639
+--- /dev/null
++++ b/src/runtime/backenderr_gen_nofallback_boring.go
+@@ -0,0 +1,24 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !goexperiment.allowcryptofallback
++
++package runtime
++
++func init() {
++	`
++	The goexperiment.boringcrypto tag is specified, but other tags required to enable that backend were not met.
++	Required build tags:
++	  goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
++	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	
++	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
++	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
++	Removing boringcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_nofallback_cng.go b/src/runtime/backenderr_gen_nofallback_cng.go
+new file mode 100644
+index 00000000000000..ae7f798ea41225
+--- /dev/null
++++ b/src/runtime/backenderr_gen_nofallback_cng.go
+@@ -0,0 +1,24 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows) && !goexperiment.allowcryptofallback
++
++package runtime
++
++func init() {
++	`
++	The goexperiment.cngcrypto tag is specified, but other tags required to enable that backend were not met.
++	Required build tags:
++	  goexperiment.cngcrypto && windows
++	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	
++	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
++	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
++	Removing cngcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_nofallback_darwin.go b/src/runtime/backenderr_gen_nofallback_darwin.go
+new file mode 100644
+index 00000000000000..8a32f2cb25bda2
+--- /dev/null
++++ b/src/runtime/backenderr_gen_nofallback_darwin.go
+@@ -0,0 +1,24 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !goexperiment.allowcryptofallback
++
++package runtime
++
++func init() {
++	`
++	The goexperiment.darwincrypto tag is specified, but other tags required to enable that backend were not met.
++	Required build tags:
++	  goexperiment.darwincrypto && darwin && cgo
++	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	
++	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
++	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
++	Removing darwincrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_nofallback_openssl.go b/src/runtime/backenderr_gen_nofallback_openssl.go
+new file mode 100644
+index 00000000000000..7e1679dfc37a23
+--- /dev/null
++++ b/src/runtime/backenderr_gen_nofallback_openssl.go
+@@ -0,0 +1,24 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !goexperiment.allowcryptofallback
++
++package runtime
++
++func init() {
++	`
++	The goexperiment.opensslcrypto tag is specified, but other tags required to enable that backend were not met.
++	Required build tags:
++	  goexperiment.opensslcrypto && linux && cgo
++	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	
++	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
++	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
++	Removing opensslcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
+new file mode 100644
+index 00000000000000..1c015dd2b08972
+--- /dev/null
++++ b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
+@@ -0,0 +1,17 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build requirefips && !goexperiment.systemcrypto
++
++package runtime
++
++func init() {
++	`
++	The requirefips tag is enabled, but no crypto backend is enabled.
++	A crypto backend is required to enable FIPS mode.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/runtime/backenderr_gen_systemcrypto_nobackend.go b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
+new file mode 100644
+index 00000000000000..95be7ad8d38cae
+--- /dev/null
++++ b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
+@@ -0,0 +1,16 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++
++//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
++
++package runtime
++
++func init() {
++	`
++	The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
 index 5a98b20253181c..9042f2c2795e19 100644
 --- a/src/runtime/runtime_boring.go
diff --git a/patches/0005-Add-backend-code-gen.patch b/patches/0005-Add-backend-code-gen.patch
deleted file mode 100644
index 966a918bcbb..00000000000
--- a/patches/0005-Add-backend-code-gen.patch
+++ /dev/null
@@ -1,744 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Davis Goodin <dagood@microsoft.com>
-Date: Fri, 23 Jun 2023 11:58:31 -0500
-Subject: [PATCH] Add backend code gen
-
-Adds code generation that works with the final list of crypto backends
-to add extra features and tie up loose ends in an easily maintained way.
-
-Backend conflict error generator: creates files that generate
-informative build errors when the backends aren't configured correctly.
-
-"nobackend" build constraint generator: gathers the build constraints
-for all the backends to create the "nobackend" constraint.
-
-The generators also run during standard test runs in validation mode to
-ensure the generated content is not out of date when backends are
-added/removed or when their build constraints change.
-
-To simplify patch maintenance, the generators are only run once, in this
-patch. An alternative would be adding the generators in an earlier patch
-and re-running the generators immediately for each backend patch. This
-would make the direct connection between changes clearer, but make it
-harder to update the generators and to deal with conflicts.
-
-Use "go/bin/go generate crypto/internal/backend" after recently building
-the repository to run the generators.
----
- src/crypto/internal/backend/backendgen.go     |  20 ++
- .../internal/backend/backendgen_test.go       | 284 ++++++++++++++++++
- src/crypto/internal/backend/nobackend.go      |   2 +-
- .../exp_allowcryptofallback_off.go            |   9 +
- .../exp_allowcryptofallback_on.go             |   9 +
- src/internal/goexperiment/flags.go            |   8 +
- .../backenderr_gen_conflict_boring_cng.go     |  17 ++
- .../backenderr_gen_conflict_boring_darwin.go  |  17 ++
- .../backenderr_gen_conflict_boring_openssl.go |  17 ++
- .../backenderr_gen_conflict_cng_darwin.go     |  17 ++
- .../backenderr_gen_conflict_cng_openssl.go    |  17 ++
- .../backenderr_gen_conflict_darwin_openssl.go |  17 ++
- .../backenderr_gen_nofallback_boring.go       |  24 ++
- src/runtime/backenderr_gen_nofallback_cng.go  |  24 ++
- .../backenderr_gen_nofallback_darwin.go       |  24 ++
- .../backenderr_gen_nofallback_openssl.go      |  24 ++
- ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 ++
- .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
- 18 files changed, 562 insertions(+), 1 deletion(-)
- create mode 100644 src/crypto/internal/backend/backendgen.go
- create mode 100644 src/crypto/internal/backend/backendgen_test.go
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_cng.go
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_darwin.go
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_openssl.go
- create mode 100644 src/runtime/backenderr_gen_conflict_cng_darwin.go
- create mode 100644 src/runtime/backenderr_gen_conflict_cng_openssl.go
- create mode 100644 src/runtime/backenderr_gen_conflict_darwin_openssl.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_boring.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_cng.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_darwin.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_openssl.go
- create mode 100644 src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
- create mode 100644 src/runtime/backenderr_gen_systemcrypto_nobackend.go
-
-diff --git a/src/crypto/internal/backend/backendgen.go b/src/crypto/internal/backend/backendgen.go
-new file mode 100644
-index 00000000000000..acf0113bbefb6c
---- /dev/null
-+++ b/src/crypto/internal/backend/backendgen.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+// Generate files and Go code based on the set of backends:
-+//
-+// - The build constraint in nobackend.go.
-+// - Go files in the runtime package that detect issues with backend selection
-+//   and report an error at compile time.
-+//
-+// Runs in -mod=readonly mode so that it is able to run during each crypto
-+// backend patch. This is before the final vendoring refresh patch, so it would
-+// normally fail to build due to inconsistent vendoring.
-+
-+// Use "go generate -run TestGenerated crypto/internal/backend"
-+// to run only this generator.
-+
-+//go:generate go test -run TestGenerated -fix
-diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
-new file mode 100644
-index 00000000000000..1ba948c8f207e5
---- /dev/null
-+++ b/src/crypto/internal/backend/backendgen_test.go
-@@ -0,0 +1,284 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"bytes"
-+	"flag"
-+	"go/build/constraint"
-+	"go/parser"
-+	"go/token"
-+	"os"
-+	"path/filepath"
-+	"sort"
-+	"strings"
-+	"testing"
-+)
-+
-+var fix = flag.Bool("fix", false, "if true, update the generated files to the wanted value")
-+
-+const runtimePackageDir = "../../../runtime"
-+
-+// backendErrPrefix is the prefix of the generated backend error files. Any file
-+// in the runtime package with this prefix will be considered a backend error
-+// file, so it's important that this prefix is unique or this generator may
-+// delete unexpected files.
-+const backendErrPrefix = "backenderr_gen_"
-+
-+const generateInstruction = "run 'go generate crypto/internal/backend' to fix"
-+
-+// TestGeneratedBackendErrorFiles tests that the current nobackend constraint
-+// is correct.
-+//
-+// Generate the build constraint in nobackend.go. This build constraint enables
-+// nobackend when all of the backends are not enabled. This constraint is fairly
-+// long and would not be trivial to maintain manually.
-+func TestGeneratedNobackendConstraint(t *testing.T) {
-+	backends := parseBackends(t)
-+	// none is a constraint that is met when all crypto backend constraints are
-+	// unmet. (That is: no backend constraint is met.)
-+	var none constraint.Expr
-+	for _, b := range backends {
-+		notB := &constraint.NotExpr{X: b.constraint}
-+		if none == nil {
-+			none = notB
-+		} else {
-+			none = &constraint.AndExpr{
-+				X: none,
-+				Y: notB,
-+			}
-+		}
-+	}
-+	bytes, err := os.ReadFile("nobackend.go")
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	lines := strings.Split(string(bytes), "\n")
-+
-+	var gotIndex int
-+	var gotLine string
-+	for i, line := range lines {
-+		if strings.HasPrefix(line, "//go:build ") {
-+			gotIndex, gotLine = i, line
-+			break
-+		}
-+	}
-+	_ = gotIndex
-+
-+	var wantLine string
-+	if none == nil {
-+		// If there are no backends yet, use a trivially true constraint.
-+		// We could remove the constraint line, but this would make generation
-+		// more complicated.
-+		wantLine = "//go:build go1.1"
-+	} else {
-+		wantLine = "//go:build " + none.String()
-+	}
-+	if wantLine != gotLine {
-+		if *fix {
-+			lines[gotIndex] = wantLine
-+			want := strings.Join(lines, "\n")
-+			if err := os.WriteFile("nobackend.go", []byte(want), 0o666); err != nil {
-+				t.Fatal(err)
-+			}
-+		} else {
-+			t.Errorf("nobackend.go build constraint:\ngot %q\nwant %q\n%v", gotLine, wantLine, generateInstruction)
-+		}
-+	}
-+}
-+
-+// TestGeneratedBackendErrorFiles tests that the current backend error files are
-+// the same as what would generated under the current conditions.
-+//
-+// The error files are Go files that detect issues with the backend selection
-+// and report an error at compile time.
-+//
-+// The issue detection files are placed in the runtime package rather than the
-+// crypto/internal/backend package to make sure these helpful errors will show
-+// up. If the files were in the backend package, DuplicateDecl and other errors
-+// would show up first, causing these informative errors to be skipped because
-+// there are too many total errors already reported. The errors would also show
-+// up if we put the files in the crypto package rather than the runtime package.
-+// (Crypto is imported before the backend backage, so the errors would show up.)
-+// However, then these errors would show up only if the Go program is using
-+// crypto. This could cause a confusing situation: if the user has a
-+// misconfigured backend and doesn't use crypto in their Go app, they will not
-+// get any errors. If they start using crypto later, they would only then get an
-+// error, but the cause would be much less apparent.
-+func TestGeneratedBackendErrorFiles(t *testing.T) {
-+	// Chip away at a list of files that should come from this generator.
-+	// Any remaining are unexpected.
-+	existingFiles := make(map[string]struct{})
-+	entries, err := os.ReadDir(runtimePackageDir)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	for _, e := range entries {
-+		if strings.HasPrefix(e.Name(), backendErrPrefix) && strings.HasSuffix(e.Name(), ".go") {
-+			existingFiles[filepath.Join(runtimePackageDir, e.Name())] = struct{}{}
-+		}
-+	}
-+
-+	backends := parseBackends(t)
-+	for i := 0; i < len(backends); i++ {
-+		for j := i + 1; j < len(backends); j++ {
-+			f := testConflict(t, backends[i].name, backends[j].name)
-+			delete(existingFiles, f)
-+		}
-+		f := testPreventUnintendedFallback(t, backends[i])
-+		delete(existingFiles, f)
-+	}
-+	f := testUnsatisfied(t, backends)
-+	delete(existingFiles, f)
-+	f = testRequireFIPSWithoutBackend(t)
-+	delete(existingFiles, f)
-+
-+	for f := range existingFiles {
-+		if *fix {
-+			if err := os.Remove(f); err != nil {
-+				t.Fatal(err)
-+			}
-+		} else {
-+			t.Errorf("unexpected file: %q", f)
-+		}
-+	}
-+	if !*fix && len(existingFiles) > 0 {
-+		t.Log(generateInstruction)
-+	}
-+}
-+
-+// testConflict checks/generates a file that fails if two backends are enabled
-+// at the same time.
-+func testConflict(t *testing.T, a, b string) string {
-+	return testErrorFile(
-+		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"conflict_"+a+"_"+b+".go"),
-+		"//go:build goexperiment."+a+"crypto && goexperiment."+b+"crypto",
-+		"The "+a+" and "+b+" backends are both enabled, but they are mutually exclusive.",
-+		"Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.")
-+}
-+
-+func testPreventUnintendedFallback(t *testing.T, backend *backend) string {
-+	expTag := &constraint.TagExpr{Tag: "goexperiment." + backend.name + "crypto"}
-+	optOutTag := &constraint.TagExpr{Tag: "goexperiment.allowcryptofallback"}
-+	c := constraint.AndExpr{
-+		X: &constraint.AndExpr{
-+			X: expTag,
-+			Y: &constraint.NotExpr{X: backend.constraint},
-+		},
-+		Y: &constraint.NotExpr{X: optOutTag},
-+	}
-+	return testErrorFile(
-+		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"nofallback_"+backend.name+".go"),
-+		"//go:build "+c.String(),
-+		"The "+expTag.String()+" tag is specified, but other tags required to enable that backend were not met.",
-+		"Required build tags:",
-+		"  "+backend.constraint.String(),
-+		"Please check your build environment and build command for a reason one or more of these tags weren't specified.",
-+		"",
-+		"If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.",
-+		"As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.",
-+		"Removing "+backend.name+"crypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.",
-+		"")
-+}
-+
-+// testUnsatisfied checks/generates a file that fails if systemcrypto is enabled
-+// on an OS with no suitable backend.
-+func testUnsatisfied(t *testing.T, backends []*backend) string {
-+	constraint := "//go:build goexperiment.systemcrypto"
-+	for _, b := range backends {
-+		constraint += ` && !goexperiment.` + b.name + "crypto"
-+	}
-+	return testErrorFile(
-+		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"systemcrypto_nobackend.go"),
-+		constraint,
-+		"The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.")
-+}
-+
-+func testRequireFIPSWithoutBackend(t *testing.T) string {
-+	return testErrorFile(
-+		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"requirefips_nosystemcrypto.go"),
-+		"//go:build requirefips && !goexperiment.systemcrypto",
-+		"The requirefips tag is enabled, but no crypto backend is enabled.",
-+		"A crypto backend is required to enable FIPS mode.")
-+}
-+
-+// testErrorFile checks/generates a Go file with a given build constraint that
-+// fails to compile. The file uses an unused string to convey an error message
-+// to the dev on the "go build" command line.
-+func testErrorFile(t *testing.T, file, constraint string, message ...string) string {
-+	const header = `// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "` + backendErrPrefix + `".`
-+	c := header + "\n\n" + constraint + "\n\npackage runtime\n\nfunc init() {\n\t`\n"
-+	for _, m := range message {
-+		c += "\t" + m + "\n"
-+	}
-+	c += "\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips\n"
-+	c += "\t`" + "\n}\n"
-+	if *fix {
-+		if err := os.WriteFile(file, []byte(c), 0o666); err != nil {
-+			t.Fatal(err)
-+		}
-+	} else {
-+		existing, err := os.ReadFile(file)
-+		if err != nil {
-+			t.Fatal(err)
-+		}
-+		if !bytes.Equal(existing, []byte(c)) {
-+			t.Errorf("file %v doesn't match expected value; %v", file, generateInstruction)
-+			t.Log("found:", string(existing))
-+			t.Log("would generate:", c)
-+		}
-+	}
-+	return file
-+}
-+
-+type backend struct {
-+	filename   string
-+	name       string
-+	constraint constraint.Expr
-+}
-+
-+func parseBackends(t *testing.T) []*backend {
-+	fs := token.NewFileSet()
-+	pkgs, err := parser.ParseDir(fs, ".", nil, parser.ParseComments)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	var bs []*backend
-+	// Any file in this dir that defines "Enabled" is a backend.
-+	for k, v := range pkgs["backend"].Files {
-+		if en := v.Scope.Lookup("Enabled"); en != nil {
-+			// nobackend defines Enabled, but it is specifically not a backend.
-+			if k == "nobackend.go" {
-+				continue
-+			}
-+			b := backend{filename: k}
-+			b.name, _, _ = strings.Cut(strings.TrimSuffix(k, ".go"), "_")
-+			for _, comment := range v.Comments {
-+				for _, c := range comment.List {
-+					if strings.HasPrefix(c.Text, "//go:build ") {
-+						if c, err := constraint.Parse(c.Text); err == nil {
-+							b.constraint = c
-+						} else {
-+							t.Fatal(err)
-+						}
-+					}
-+				}
-+			}
-+			bs = append(bs, &b)
-+		}
-+	}
-+	sort.Slice(bs, func(i, j int) bool {
-+		return bs[i].name < bs[j].name
-+	})
-+	return bs
-+}
-diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
-index 5c2f56d000a2a8..6f87fc053bb4b1 100644
---- a/src/crypto/internal/backend/nobackend.go
-+++ b/src/crypto/internal/backend/nobackend.go
-@@ -4,7 +4,7 @@
- 
- // Do not edit the build constraint by hand. It is generated by "backendgen.go".
- 
--//go:build ignore
-+//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
- 
- package backend
- 
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-new file mode 100644
-index 00000000000000..dfce36d834c46e
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.allowcryptofallback
-+// +build !goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = false
-+const AllowCryptoFallbackInt = 0
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-new file mode 100644
-index 00000000000000..8d0c3fde9ab5e8
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.allowcryptofallback
-+// +build goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = true
-+const AllowCryptoFallbackInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index e6c9b7d5e62dc0..65d339be7dde32 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -78,6 +78,14 @@ type Flags struct {
- 	// being used to build the Go program.
- 	SystemCrypto bool
- 
-+	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
-+	// experiment is enabled but the backend's requirements are not met. This is
-+	// used during the Go build itself to allow running the test suite with a
-+	// backend experiment enabled. Some parts of the Go build (bootstrapping)
-+	// and parts of the test suite run without cgo, so
-+	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
-+	AllowCryptoFallback bool
-+
- 	// Regabi is split into several sub-experiments that can be
- 	// enabled individually. Not all combinations work.
- 	// The "regabi" GOEXPERIMENT is an alias for all "working"
-diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
-new file mode 100644
-index 00000000000000..361db2a962d60f
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_cng.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.cngcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The boring and cng backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_conflict_boring_darwin.go b/src/runtime/backenderr_gen_conflict_boring_darwin.go
-new file mode 100644
-index 00000000000000..6c48a4e50fa72e
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_darwin.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.darwincrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The boring and darwin backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_conflict_boring_openssl.go b/src/runtime/backenderr_gen_conflict_boring_openssl.go
-new file mode 100644
-index 00000000000000..91fac35011b24c
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.opensslcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The boring and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_conflict_cng_darwin.go b/src/runtime/backenderr_gen_conflict_cng_darwin.go
-new file mode 100644
-index 00000000000000..2e82a5cff034b7
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_cng_darwin.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.cngcrypto && goexperiment.darwincrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The cng and darwin backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_conflict_cng_openssl.go b/src/runtime/backenderr_gen_conflict_cng_openssl.go
-new file mode 100644
-index 00000000000000..bf44084570bbbc
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_cng_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.cngcrypto && goexperiment.opensslcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The cng and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_conflict_darwin_openssl.go b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
-new file mode 100644
-index 00000000000000..90f4361e28cd94
---- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.darwincrypto && goexperiment.opensslcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The darwin and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_nofallback_boring.go b/src/runtime/backenderr_gen_nofallback_boring.go
-new file mode 100644
-index 00000000000000..6db0ed6dc09639
---- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_boring.go
-@@ -0,0 +1,24 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !goexperiment.allowcryptofallback
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The goexperiment.boringcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing boringcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_nofallback_cng.go b/src/runtime/backenderr_gen_nofallback_cng.go
-new file mode 100644
-index 00000000000000..ae7f798ea41225
---- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_cng.go
-@@ -0,0 +1,24 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows) && !goexperiment.allowcryptofallback
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The goexperiment.cngcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.cngcrypto && windows
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing cngcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_nofallback_darwin.go b/src/runtime/backenderr_gen_nofallback_darwin.go
-new file mode 100644
-index 00000000000000..8a32f2cb25bda2
---- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_darwin.go
-@@ -0,0 +1,24 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !goexperiment.allowcryptofallback
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The goexperiment.darwincrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.darwincrypto && darwin && cgo
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing darwincrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_nofallback_openssl.go b/src/runtime/backenderr_gen_nofallback_openssl.go
-new file mode 100644
-index 00000000000000..7e1679dfc37a23
---- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_openssl.go
-@@ -0,0 +1,24 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !goexperiment.allowcryptofallback
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The goexperiment.opensslcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.opensslcrypto && linux && cgo
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing opensslcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
-new file mode 100644
-index 00000000000000..1c015dd2b08972
---- /dev/null
-+++ b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build requirefips && !goexperiment.systemcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The requirefips tag is enabled, but no crypto backend is enabled.
-+	A crypto backend is required to enable FIPS mode.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/runtime/backenderr_gen_systemcrypto_nobackend.go b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
-new file mode 100644
-index 00000000000000..95be7ad8d38cae
---- /dev/null
-+++ b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
-@@ -0,0 +1,16 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
-+
-+//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
-+
-+package runtime
-+
-+func init() {
-+	`
-+	The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
diff --git a/patches/0006-Update-default-go.env.patch b/patches/0005-Update-default-go.env.patch
similarity index 100%
rename from patches/0006-Update-default-go.env.patch
rename to patches/0005-Update-default-go.env.patch
diff --git a/patches/0007-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
similarity index 100%
rename from patches/0007-Skip-failing-tests-on-Windows.patch
rename to patches/0006-Skip-failing-tests-on-Windows.patch
diff --git a/patches/0008-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch
similarity index 100%
rename from patches/0008-unset-GOFIPS-when-running-the-Go-toolchain.patch
rename to patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch
diff --git a/patches/0009-add-support-for-logging-used-Windows-APIs.patch b/patches/0008-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0009-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0008-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0010-remove-long-path-support-hack.patch b/patches/0009-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0010-remove-long-path-support-hack.patch
rename to patches/0009-remove-long-path-support-hack.patch
diff --git a/patches/0011-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0010-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0011-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0010-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
similarity index 100%
rename from patches/0012-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
rename to patches/0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

From 9c20af4b14c3e0c96c65e44b1acee2f71e7b4a57 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Thu, 16 Jan 2025 10:37:47 -0800
Subject: [PATCH 199/887] Add version notes for macOS darwincrypto

---
 eng/doc/fips/README.md | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 9aa1a4db368..489d5b444e5 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -27,7 +27,7 @@ In addition to that, the boringcrypto flag also provides a mechanism to restrict
 
 The Microsoft Go fork modifies the Go runtime to implement several crypto primitives using cgo to call into a platform-provided cryptographic library rather than use the standard Go crypto implementations. This allows Go programs to use a platform-provided FIPS 140-2 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. On macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140-2 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140-2 certified.
 
 It is important to note that an application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_. It is the responsibility of the application development team to use FIPS-compliant crypto primitives and workflows. The modified crypto runtime will fall back to Go standard library crypto if it cannot provide a FIPS-compliant implementation, e.g. when hashing a message using `crypto/md5` hashes or when using an AES-GCM cipher with a non-standard nonce size.
 
@@ -60,7 +60,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | --- | --- | --- | --- |
 | Default | Default | Not compliant | Crypto usage is not FIPS compliant. |
 | `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app either enables FIPS mode or ensures it is already enabled. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GOFIPS=0` | Compliant | Crypto usage is unlikely to be FIPS compliant. The exact behavior of `GOFIPS=0` varies per platform. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
@@ -87,7 +87,7 @@ The `GOEXPERIMENT` environment variable is used at build time to select a crypto
   - Prior to Go 1.21, this alias is not available and the backend must be selected manually
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
-- `darwincrypto` selects CommonCrypto & CryptoKit for macOS
+- Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
 - `boringcrypto` selects the upstream BoringCrypto backend, which is **not supported nor compliant**
 - If no option is selected, Go standard library cryptography is used.
 
@@ -99,7 +99,8 @@ The options are exclusive and must not be enabled at the same time as one anothe
 | --- | --- | --- |
 | Linux | `opensslcrypto` | OpenSSL |
 | Windows | `cngcrypto` | CNG |
-| macOS | `darwincrypto` | CommonCrypto & CryptoKit |
+| macOS (since 1.24) | `darwincrypto` | CommonCrypto & CryptoKit |
+| macOS (prior to 1.24) | N/A, build error | N/A |
 
 The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`. Prior to Go 1.21, the selection must be made manually: `GOOS=windows GOEXPERIMENT=cngcrypto`.
 
@@ -234,6 +235,8 @@ For testing purposes, Windows FIPS policy can be enabled via the registry key `H
 
 CommonCrypo/CrytoKit is FIPS compliant by default. This means that regardless of which mode you set `GOFIPS` to, the cryptographic functions will always be FIPS-enabled.
 
+Prior to 1.24, CommonCrypto/CryptoKit is not used by Microsoft Go.
+
 ## Usage: Extra configuration options
 
 ### Build option to require FIPS mode
@@ -402,6 +405,10 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp
 
 This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary.
 
+### Go 1.24 (Feb 2025)
+
+- Introduces macOS crypto backend `darwincrypto`.
+
 ### Go [1.22.9-2](https://github.com/microsoft/go/releases/tag/v1.22.9-2) and [1.23.3-2](https://github.com/microsoft/go/releases/tag/v1.23.3-2) (Dec 2024)
 
 - Adds compatibility with changes that [Azure Linux] 3 made to the OpenSSL configuration, specifically the change to use [SCOSSL](https://github.com/microsoft/SymCrypt-OpenSSL). The SCOSSL-related Azure Linux packages must also be up to date for compatibility, at least `SymCrypt-103.6.0-1` and `SymCrypt-OpenSSL-1.6.1-1`.

From 542e15d250596b1d85777fb10e3f4907f775ff49 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 09:44:10 +0100
Subject: [PATCH 200/887] don't try to override system FIPS mode and use
 openssl.FIPSCapable (#1496)

---
 ...03-Implement-crypto-internal-backend.patch | 20 +++++++++----------
 1 file changed, 9 insertions(+), 11 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 1d0c32f60f6..eb6890a3fcb 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -26,7 +26,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../backend/fips140/nosystemcrypto.go         |  11 +
  .../internal/backend/fips140/openssl.go       |  41 ++
  src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 360 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2493 insertions(+), 1 deletion(-)
+ 41 files changed, 2491 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -2079,10 +2079,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..57293ff2128dd6
+index 00000000000000..5ddcf98ea682a5
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,362 @@
+@@ -0,0 +1,360 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2149,16 +2149,14 @@ index 00000000000000..57293ff2128dd6
 +		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
 +	}
 +	if fips140.Enabled() {
-+		if !openssl.FIPS() {
-+			if err := openssl.SetFIPS(true); err != nil {
-+				panic("opensslcrypto: can't enable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
-+			}
++		// Use openssl.FIPSCapable instead of openssl.FIPS because some providers, e.g. SCOSSL, are FIPS compliant
++		// even when FIPS mode is not enabled.
++		if !openssl.FIPSCapable() {
++			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
 +	} else if fips140.Disabled() {
 +		if openssl.FIPS() {
-+			if err := openssl.SetFIPS(false); err != nil {
-+				panic("opensslcrypto: can't disable FIPS mode for " + openssl.VersionText() + ": " + err.Error())
-+			}
++			panic("opensslcrypto: FIPS mode explicitly disabled (" + fips140.Message + ") but enabled in " + openssl.VersionText())
 +		}
 +	}
 +	sig.BoringCrypto()

From 88aa2863217837cd722190b963c57241d63d4c25 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Jan 2025 12:03:29 +0000
Subject: [PATCH 201/887] build(deps): bump actions/checkout from 4.1.7 to
 4.2.2 (#1504)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...11bd71901bbe5b1630ceea73d27597364c9af683)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b0538026046..952a97f8430 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 7d3db5e09e8..55f6160d2c3 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b72cd125c4f..b25c85d3124 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From 654eb65edf1a66357e172363a739086f04c57cdc Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 13:36:57 +0100
Subject: [PATCH 202/887] remove gofips package

---
 ...03-Implement-crypto-internal-backend.patch | 11 +--
 patches/0004-Use-crypto-backends.patch        | 27 ++++++-
 ...pport-for-logging-used-Windows-APIs.patch} |  0
 ...GOFIPS-when-running-the-Go-toolchain.patch | 76 -------------------
 ... 0008-remove-long-path-support-hack.patch} |  0
 ...ernal-go.mod-files-used-for-codegen.patch} |  0
 ...21-when-TLS-fipsonly-mode-is-enable.patch} |  0
 7 files changed, 32 insertions(+), 82 deletions(-)
 rename patches/{0008-add-support-for-logging-used-Windows-APIs.patch => 0007-add-support-for-logging-used-Windows-APIs.patch} (100%)
 delete mode 100644 patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch
 rename patches/{0009-remove-long-path-support-hack.patch => 0008-remove-long-path-support-hack.patch} (100%)
 rename patches/{0010-Omit-internal-go.mod-files-used-for-codegen.patch => 0009-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch => 0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch} (100%)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index eb6890a3fcb..88d12937e6c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -15,7 +15,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/backend/bbig/big_openssl.go      |  12 +
  src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++
  src/crypto/internal/backend/cng_windows.go    | 336 ++++++++++++++++
- src/crypto/internal/backend/common.go         |  58 +++
+ src/crypto/internal/backend/common.go         |  59 +++
  src/crypto/internal/backend/darwin_darwin.go  | 359 +++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2491 insertions(+), 1 deletion(-)
+ 41 files changed, 2492 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -1173,10 +1173,10 @@ index 00000000000000..31dfc9b19ee63e
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..84447174284ffd
+index 00000000000000..9436b00381aaf8
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,59 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1186,11 +1186,12 @@ index 00000000000000..84447174284ffd
 +import (
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
++	"internal/goexperiment"
 +	"runtime"
 +)
 +
 +func init() {
-+	if fips140.Enabled() {
++	if !goexperiment.AllowCryptoFallback && fips140.Enabled() {
 +		if !Enabled {
 +			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
 +				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 13348735e20..7f8cec486a6 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,6 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
+ src/cmd/dist/build.go                         |  13 ++
  src/cmd/dist/test.go                          |   8 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -81,7 +82,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 77 files changed, 1097 insertions(+), 109 deletions(-)
+ 78 files changed, 1110 insertions(+), 109 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -106,6 +107,30 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  
  package main
  
+diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
+index 1f467647f56143..4d770d7fc239e2 100644
+--- a/src/cmd/dist/build.go
++++ b/src/cmd/dist/build.go
+@@ -1543,6 +1543,19 @@ func cmdbootstrap() {
+ 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
+ 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
+ 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
++	//
++	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
++	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
++	// when GOFIPS=1 is set. For example, when running "GOFIPS=1 go test ./..."
++	// or "GOFIPS=1 go run .".
++	// Shadow goexperiment so that the global variable is not modified.
++	goexperiment := goexperiment
++	if !strings.Contains(goexperiment, "allowcryptofallback") {
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "allowcryptofallback"
++	}
+ 	os.Setenv("GOEXPERIMENT", goexperiment)
+ 	// No need to enable PGO for toolchain2.
+ 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index 0c992118f4287b..3316bb52a61ff1 100644
 --- a/src/cmd/dist/test.go
diff --git a/patches/0008-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0008-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0007-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch b/patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch
deleted file mode 100644
index c9bb73f065d..00000000000
--- a/patches/0007-unset-GOFIPS-when-running-the-Go-toolchain.patch
+++ /dev/null
@@ -1,76 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Wed, 14 Feb 2024 11:03:01 +0100
-Subject: [PATCH] unset GOFIPS when running the Go toolchain
-
----
- src/cmd/go/internal/gofips/gofips.go | 36 ++++++++++++++++++++++++++++
- src/cmd/go/main.go                   |  5 ++++
- 2 files changed, 41 insertions(+)
- create mode 100644 src/cmd/go/internal/gofips/gofips.go
-
-diff --git a/src/cmd/go/internal/gofips/gofips.go b/src/cmd/go/internal/gofips/gofips.go
-new file mode 100644
-index 00000000000000..1f3549cf1b4ab5
---- /dev/null
-+++ b/src/cmd/go/internal/gofips/gofips.go
-@@ -0,0 +1,36 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// gofips is a package that, when imported, unsets the GOFIPS environment variable
-+// and stores it for later use.
-+//
-+// This is useful to support running commands like `GOFIPS=1 go test ./...` and
-+// `GOFIPS=1 go run .` with a Go toolchain not built with a FIPS-enabled crypto backend.
-+// In such cases, the user intends to pass the GOFIPS environment variable to the
-+// test or run sub-processes, not to the go command itself.
-+//
-+// This package needs to have a minimal dependency graph so that it is initialized
-+// before crypto/internal/backend, else it will have no effect.
-+package gofips
-+
-+import "syscall"
-+
-+var gofips string
-+var gofipsSet bool
-+
-+const gofipsName = "GOFIPS"
-+
-+func init() {
-+	if v, found := syscall.Getenv(gofipsName); found {
-+		gofips = gofipsName + "=" + v
-+		gofipsSet = true
-+		syscall.Unsetenv(gofipsName)
-+	}
-+}
-+
-+// GOFIPS returns the GOFIPS environment variable at the time
-+// init was called, and whether it was set.
-+func GOFIPS() (string, bool) {
-+	return gofips, gofipsSet
-+}
-diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index f2e4d890d3d61b..fd1f733f7018a1 100644
---- a/src/cmd/go/main.go
-+++ b/src/cmd/go/main.go
-@@ -27,6 +27,7 @@ import (
- 	"cmd/go/internal/fix"
- 	"cmd/go/internal/fmtcmd"
- 	"cmd/go/internal/generate"
-+	"cmd/go/internal/gofips"
- 	"cmd/go/internal/help"
- 	"cmd/go/internal/list"
- 	"cmd/go/internal/modcmd"
-@@ -301,6 +302,10 @@ func invoke(cmd *base.Command, args []string) {
- 	// but in practice there might be skew
- 	// This makes sure we all agree.
- 	cfg.OrigEnv = toolchain.FilterEnv(os.Environ())
-+	if v, found := gofips.GOFIPS(); found {
-+		// Pass GOFIPS to user binaries.
-+		cfg.OrigEnv = append(cfg.OrigEnv, v)
-+	}
- 	cfg.CmdEnv = envcmd.MkEnv()
- 	for _, env := range cfg.CmdEnv {
- 		if os.Getenv(env.Name) != env.Value {
diff --git a/patches/0009-remove-long-path-support-hack.patch b/patches/0008-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0009-remove-long-path-support-hack.patch
rename to patches/0008-remove-long-path-support-hack.patch
diff --git a/patches/0010-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0010-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
similarity index 100%
rename from patches/0011-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
rename to patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

From 900cbc16a93eeb0b4b7f95e28aeb4835580b9ee8 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 16:14:24 +0100
Subject: [PATCH 203/887] log

---
 patches/0003-Implement-crypto-internal-backend.patch | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 88d12937e6c..6a3363f2251 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -26,7 +26,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../backend/fips140/nosystemcrypto.go         |  11 +
  .../internal/backend/fips140/openssl.go       |  41 ++
  src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 360 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2492 insertions(+), 1 deletion(-)
+ 41 files changed, 2494 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -2080,10 +2080,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..5ddcf98ea682a5
+index 00000000000000..d469f2dddfd41e
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,360 @@
+@@ -0,0 +1,362 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2153,6 +2153,8 @@ index 00000000000000..5ddcf98ea682a5
 +		// Use openssl.FIPSCapable instead of openssl.FIPS because some providers, e.g. SCOSSL, are FIPS compliant
 +		// even when FIPS mode is not enabled.
 +		if !openssl.FIPSCapable() {
++			// TODO: remove
++			println("executable:" runtime_arg0())
 +			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
 +	} else if fips140.Disabled() {

From 27022d3baabedd842e5ac9860fba61a09875bb56 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 16:26:32 +0100
Subject: [PATCH 204/887] log

---
 patches/0003-Implement-crypto-internal-backend.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 6a3363f2251..01d8ee701a7 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2154,7 +2154,7 @@ index 00000000000000..d469f2dddfd41e
 +		// even when FIPS mode is not enabled.
 +		if !openssl.FIPSCapable() {
 +			// TODO: remove
-+			println("executable:" runtime_arg0())
++			println("executable:", runtime_arg0())
 +			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
 +	} else if fips140.Disabled() {

From 9df9e5e0ad4409d8286e4175d3fc3ffb0ef8243d Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 17:00:08 +0100
Subject: [PATCH 205/887] enable FIPS mode on Mariner and AZL3 CI builders

---
 .../cmd/run-builder/systemfips_fallback.go    |  3 +-
 eng/_util/cmd/run-builder/systemfips_linux.go | 33 +++++++++++++++++++
 2 files changed, 34 insertions(+), 2 deletions(-)
 create mode 100644 eng/_util/cmd/run-builder/systemfips_linux.go

diff --git a/eng/_util/cmd/run-builder/systemfips_fallback.go b/eng/_util/cmd/run-builder/systemfips_fallback.go
index 8f6c89e557b..c876c9dc031 100644
--- a/eng/_util/cmd/run-builder/systemfips_fallback.go
+++ b/eng/_util/cmd/run-builder/systemfips_fallback.go
@@ -1,8 +1,7 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 
-//go:build !windows
-// +build !windows
+//go:build !windows && !linux
 
 package main
 
diff --git a/eng/_util/cmd/run-builder/systemfips_linux.go b/eng/_util/cmd/run-builder/systemfips_linux.go
new file mode 100644
index 00000000000..b8895f32a05
--- /dev/null
+++ b/eng/_util/cmd/run-builder/systemfips_linux.go
@@ -0,0 +1,33 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+
+package main
+
+import (
+	"log"
+	"os"
+)
+
+// enableSystemWideFIPS enables Mariner and Azure Linux 3 process-wide FIPS mode.
+func enableSystemWideFIPS() (restore func(), err error) {
+	// FIPS mode is enabled if OPENSSL_FORCE_FIPS_MODE is set, regardless of the value.
+	_, ok := os.LookupEnv("OPENSSL_FORCE_FIPS_MODE")
+	if ok {
+		log.Println("FIPS mode already enabled.")
+		return nil, nil
+	}
+
+	env("OPENSSL_FORCE_FIPS_MODE", "1")
+	log.Println("Enabled Mariner and Azure Linux 3 FIPS mode.")
+
+	return func() {
+		if ok {
+			err := os.Unsetenv("OPENSSL_FORCE_FIPS_MODE")
+			if err != nil {
+				log.Printf("Unable to unset OPENSSL_FORCE_FIPS_MODE: %v\n", err)
+				return
+			}
+			log.Println("Successfully unset OPENSSL_FORCE_FIPS_MODE.")
+		}
+	}, nil
+}

From 22e1211e95f06217ae1d116e832d9784cd6bba97 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 17:02:49 +0100
Subject: [PATCH 206/887] remove logs

---
 patches/0003-Implement-crypto-internal-backend.patch | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 01d8ee701a7..88d12937e6c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -26,7 +26,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../backend/fips140/nosystemcrypto.go         |  11 +
  .../internal/backend/fips140/openssl.go       |  41 ++
  src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 362 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 360 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2494 insertions(+), 1 deletion(-)
+ 41 files changed, 2492 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -2080,10 +2080,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..d469f2dddfd41e
+index 00000000000000..5ddcf98ea682a5
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,362 @@
+@@ -0,0 +1,360 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2153,8 +2153,6 @@ index 00000000000000..d469f2dddfd41e
 +		// Use openssl.FIPSCapable instead of openssl.FIPS because some providers, e.g. SCOSSL, are FIPS compliant
 +		// even when FIPS mode is not enabled.
 +		if !openssl.FIPSCapable() {
-+			// TODO: remove
-+			println("executable:", runtime_arg0())
 +			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
 +	} else if fips140.Disabled() {

From 737cf890f58ac1df364578171c8276054d115af3 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 17 Jan 2025 17:39:48 +0100
Subject: [PATCH 207/887] simplify code

---
 eng/_util/cmd/run-builder/systemfips_linux.go | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/eng/_util/cmd/run-builder/systemfips_linux.go b/eng/_util/cmd/run-builder/systemfips_linux.go
index b8895f32a05..54fa390ade6 100644
--- a/eng/_util/cmd/run-builder/systemfips_linux.go
+++ b/eng/_util/cmd/run-builder/systemfips_linux.go
@@ -21,13 +21,11 @@ func enableSystemWideFIPS() (restore func(), err error) {
 	log.Println("Enabled Mariner and Azure Linux 3 FIPS mode.")
 
 	return func() {
-		if ok {
-			err := os.Unsetenv("OPENSSL_FORCE_FIPS_MODE")
-			if err != nil {
-				log.Printf("Unable to unset OPENSSL_FORCE_FIPS_MODE: %v\n", err)
-				return
-			}
-			log.Println("Successfully unset OPENSSL_FORCE_FIPS_MODE.")
+		err := os.Unsetenv("OPENSSL_FORCE_FIPS_MODE")
+		if err != nil {
+			log.Printf("Unable to unset OPENSSL_FORCE_FIPS_MODE: %v\n", err)
+			return
 		}
+		log.Println("Successfully unset OPENSSL_FORCE_FIPS_MODE.")
 	}, nil
 }

From 386505accd035ddd6b168753f8e8cd9d4ca39254 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 20 Jan 2025 13:49:46 +0100
Subject: [PATCH 208/887] Merge pull request #1503 from
 microsoft/dev/qmuntal/fips149deb

Prefer GODEBUG=fips140 over GOFIPS
---
 eng/_util/cmd/run-builder/run-builder.go      | 11 +++-
 .../cmd/run-builder/systemfips_fallback.go    |  2 +-
 eng/_util/cmd/run-builder/systemfips_linux.go | 31 ---------
 ...03-Implement-crypto-internal-backend.patch | 66 +++++++++++++------
 patches/0004-Use-crypto-backends.patch        | 49 +++++++++++++-
 5 files changed, 102 insertions(+), 57 deletions(-)
 delete mode 100644 eng/_util/cmd/run-builder/systemfips_linux.go

diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 6e5c542bc0d..80f9cf275f0 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -147,7 +147,7 @@ func main() {
 		}
 
 		if *fipsMode {
-			env("GOFIPS", "1")
+			envAppend("GODEBUG", "fips140=on")
 			// Enable system-wide FIPS if supported by the host platform.
 			restore, err := enableSystemWideFIPS()
 			if err != nil {
@@ -215,6 +215,15 @@ func env(key, value string) {
 	}
 }
 
+// envAppend appends a value to an env var and logs it.
+// Panics if it doesn't succeed.
+func envAppend(key, value string) {
+	if v, ok := os.LookupEnv(key); ok {
+		value = v + "," + value
+	}
+	env(key, value)
+}
+
 func run(cmdline ...string) error {
 	c := exec.Command(cmdline[0], cmdline[1:]...)
 	c.Stdout = os.Stdout
diff --git a/eng/_util/cmd/run-builder/systemfips_fallback.go b/eng/_util/cmd/run-builder/systemfips_fallback.go
index c876c9dc031..1e37c82d67c 100644
--- a/eng/_util/cmd/run-builder/systemfips_fallback.go
+++ b/eng/_util/cmd/run-builder/systemfips_fallback.go
@@ -1,7 +1,7 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 
-//go:build !windows && !linux
+//go:build !windows
 
 package main
 
diff --git a/eng/_util/cmd/run-builder/systemfips_linux.go b/eng/_util/cmd/run-builder/systemfips_linux.go
deleted file mode 100644
index 54fa390ade6..00000000000
--- a/eng/_util/cmd/run-builder/systemfips_linux.go
+++ /dev/null
@@ -1,31 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-
-package main
-
-import (
-	"log"
-	"os"
-)
-
-// enableSystemWideFIPS enables Mariner and Azure Linux 3 process-wide FIPS mode.
-func enableSystemWideFIPS() (restore func(), err error) {
-	// FIPS mode is enabled if OPENSSL_FORCE_FIPS_MODE is set, regardless of the value.
-	_, ok := os.LookupEnv("OPENSSL_FORCE_FIPS_MODE")
-	if ok {
-		log.Println("FIPS mode already enabled.")
-		return nil, nil
-	}
-
-	env("OPENSSL_FORCE_FIPS_MODE", "1")
-	log.Println("Enabled Mariner and Azure Linux 3 FIPS mode.")
-
-	return func() {
-		err := os.Unsetenv("OPENSSL_FORCE_FIPS_MODE")
-		if err != nil {
-			log.Printf("Unable to unset OPENSSL_FORCE_FIPS_MODE: %v\n", err)
-			return
-		}
-		log.Println("Successfully unset OPENSSL_FORCE_FIPS_MODE.")
-	}, nil
-}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 88d12937e6c..65043bbdfaf 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -7,26 +7,26 @@ Subject: [PATCH] Implement crypto/internal/backend
  .gitignore                                    |   2 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 284 ++++++++++++++
+ .../internal/backend/backendgen_test.go       | 284 +++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 279 +++++++++++++
  src/crypto/internal/backend/cng_windows.go    | 336 ++++++++++++++++
  src/crypto/internal/backend/common.go         |  59 +++
  src/crypto/internal/backend/darwin_darwin.go  | 359 +++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/internal/backend/fips140/darwin.go |  11 +
- .../internal/backend/fips140/fips140.go       |  55 +++
+ .../internal/backend/fips140/fips140.go       |  63 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
  .../internal/backend/fips140/openssl.go       |  41 ++
- src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 360 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 240 +++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 377 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2492 insertions(+), 1 deletion(-)
+ 41 files changed, 2517 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -1676,19 +1676,24 @@ index 00000000000000..ef5af5d956163e
 +}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
-index 00000000000000..f54d39970319af
+index 00000000000000..72f7a1644deedd
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,55 @@
+@@ -0,0 +1,63 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +package fips140
 +
-+import "syscall"
++import (
++	"internal/godebug"
++	"syscall"
++)
 +
-+// Enabled reports whether FIPS 140 mode is enabled by using GOFIPS=1, GOLANG_FIPS=1,
++var fips140GODEBUG = godebug.New("#fips140")
++
++// Enabled reports whether FIPS 140 mode is enabled by using GODEBUG, GOFIPS, GOLANG_FIPS,
 +// the 'requirefips' build tag, or any other platform-specific mechanism.
 +func Enabled() bool {
 +	return enabled
@@ -1696,7 +1701,7 @@ index 00000000000000..f54d39970319af
 +
 +var enabled bool
 +
-+// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS=0 or GOLANG_FIPS=0.
++// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS or GOLANG_FIPS.
 +func Disabled() bool {
 +	return disabled
 +}
@@ -1709,9 +1714,12 @@ index 00000000000000..f54d39970319af
 +func init() {
 +	// TODO: Decide which environment variable to use.
 +	// See https://github.com/microsoft/go/issues/397.
-+	var value string
 +	var ok bool
-+	if value, ok = syscall.Getenv("GOFIPS"); ok {
++	value := fips140GODEBUG.Value()
++	if value == "on" || value == "only" || value == "debug" {
++		Message = "environment variable GODEBUG=fips140=" + value
++		value = "1"
++	} else if value, ok = syscall.Getenv("GOFIPS"); ok {
 +		Message = "environment variable GOFIPS"
 +	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
 +		Message = "environment variable GOLANG_FIPS"
@@ -1735,7 +1743,6 @@ index 00000000000000..f54d39970319af
 +		return
 +	}
 +}
-\ No newline at end of file
 diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
 new file mode 100644
 index 00000000000000..b33d08c84e2dae
@@ -1787,7 +1794,7 @@ index 00000000000000..83691d7dd42d51
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
 new file mode 100644
-index 00000000000000..118efa3a492a7d
+index 00000000000000..2d126bcfc053de
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl.go
 @@ -0,0 +1,41 @@
@@ -1818,7 +1825,7 @@ index 00000000000000..118efa3a492a7d
 +			// If there is an error reading we could either panic or assume FIPS is not enabled.
 +			// Panicking would be too disruptive for apps that don't require FIPS.
 +			// If an app wants to be 100% sure that is running in FIPS mode
-+			// it should use boring.Enabled() or GOFIPS=1.
++			// it should use boring.Enabled() or GODEBUG=fips140=1.
 +			return false
 +		}
 +	}
@@ -2080,10 +2087,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..5ddcf98ea682a5
+index 00000000000000..0c4e0c9da6e1ce
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,360 @@
+@@ -0,0 +1,377 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2150,12 +2157,29 @@ index 00000000000000..5ddcf98ea682a5
 +		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
 +	}
 +	if fips140.Enabled() {
-+		// Use openssl.FIPSCapable instead of openssl.FIPS because some providers, e.g. SCOSSL, are FIPS compliant
-+		// even when FIPS mode is not enabled.
++		// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
++		// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
++		// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
++		// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
++		// openssl.FIPSCapable to determine whether FIPS mode is enabled.
 +		if !openssl.FIPSCapable() {
-+			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
++			// This path can be reached for the following reasons:
++			// - In OpenSSL 1, the active engine doesn't support FIPS mode.
++			// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
++			// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
++			//
++			// A best-effort attempt is made to enable FIPS mode. It will only succeed if the following conditions are met:
++			// - In OpenSSL 1, the active engine supports FIPS mode and FIPS mode can be enabled.
++			// - In OpenSSL 3, there is an available provider that supports the `fips=yes` query.
++			//
++			// Note that this best effort is mainly to support test environments. FIPS-compliant production environments
++			// like Mariner 2 and Azure Linux 3 (when executed in kernel FIPS mode) will already be properly configured.
++			if err := openssl.SetFIPS(true); err != nil {
++				panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText() + ": " + err.Error())
++			}
 +		}
 +	} else if fips140.Disabled() {
++		// TODO: Remove this block when GOFIPS=0 is no longer supported.
 +		if openssl.FIPS() {
 +			panic("opensslcrypto: FIPS mode explicitly disabled (" + fips140.Message + ") but enabled in " + openssl.VersionText())
 +		}
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 7f8cec486a6..122b6d26b9e 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -6,7 +6,7 @@ Subject: [PATCH] Use crypto backends
 ---
  src/cmd/api/boring_test.go                    |   2 +-
  src/cmd/dist/build.go                         |  13 ++
- src/cmd/dist/test.go                          |   8 +-
+ src/cmd/dist/test.go                          |  10 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
@@ -38,6 +38,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
+ src/crypto/internal/fips140test/check_test.go |   8 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  16 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   4 +
@@ -82,7 +83,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 78 files changed, 1110 insertions(+), 109 deletions(-)
+ 79 files changed, 1118 insertions(+), 111 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -132,9 +133,18 @@ index 1f467647f56143..4d770d7fc239e2 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0c992118f4287b..3316bb52a61ff1 100644
+index 0c992118f4287b..d224514552fd63 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
+@@ -714,7 +714,7 @@ func (t *tester) registerTests() {
+ 	})
+ 
+ 	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
+-	if t.fipsSupported() {
++	if false { // Disable these tests, they don't work if CNG/OpenSSL FIPS mode is not enabled. We already have dedicated builders for this.
+ 		// Test standard crypto packages with fips140=on.
+ 		t.registerTest("GODEBUG=fips140=on go test crypto/...", &goTest{
+ 			variant: "gofips140",
 @@ -1161,6 +1161,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
@@ -1155,6 +1165,39 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
  	"crypto/internal/impl"
  	"internal/goos"
  	"internal/testenv"
+diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
+index 6b0cd3f39e1695..aa586ed30454a2 100644
+--- a/src/crypto/internal/fips140test/check_test.go
++++ b/src/crypto/internal/fips140test/check_test.go
+@@ -5,6 +5,8 @@
+ package fipstest
+ 
+ import (
++	boring "crypto/internal/backend"
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/fips140"
+ 	. "crypto/internal/fips140/check"
+ 	"crypto/internal/fips140/check/checktest"
+@@ -18,7 +20,7 @@ import (
+ 	"unsafe"
+ )
+ 
+-const enableFIPSTest = true
++const enableFIPSTest = boring.Enabled
+ 
+ func TestFIPSCheckVerify(t *testing.T) {
+ 	if Verified {
+@@ -38,6 +40,10 @@ func TestFIPSCheckVerify(t *testing.T) {
+ 		t.Skipf("skipping: %v", err)
+ 	}
+ 
++	if !bfips140.Enabled() {
++		t.Skipf("skipping: FIPS is not enabled")
++	}
++
+ 	cmd := testenv.Command(t, os.Args[0], "-test.v", "-test.run=TestFIPSCheck")
+ 	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=on")
+ 	out, err := cmd.CombinedOutput()
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index a0384e175f31bd..f7aa6da36f02de 100644
 --- a/src/crypto/md5/md5.go

From ef475a708e0d7e7b2e208fea640936e496e7faa8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jan 2025 11:02:47 +0000
Subject: [PATCH 209/887] build(deps): bump golang.org/x/sys from 0.28.0 to
 0.29.0 in /eng/_util

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.28.0 to 0.29.0.
- [Commits](https://github.com/golang/sys/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 283c59e1cde..106ee16c17e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.22.0
 require (
 	github.com/microsoft/go-infra v0.0.6
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
-	golang.org/x/sys v0.28.0
+	golang.org/x/sys v0.29.0
 	gotest.tools/gotestsum v1.12.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 30bcc59b1ce..4e6e7c69b14 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -81,8 +81,8 @@ golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
+golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=

From 327cbbd0952047b54d3ac59f01d5026f5df5997b Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 22 Jan 2025 10:36:55 +0000
Subject: [PATCH 210/887] darwin: add macOS to CrossPlatformCryptography
 document (#1488)

* darwin: add macOS to CrossPlatformCryptography document

* align

* improvements

* feedback

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* Remove RSA warning note from documentation

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/CrossPlatformCryptography.md | 383 ++++++++++++++-------------
 1 file changed, 200 insertions(+), 183 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index d544ef55da6..2761a6c9f2a 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -26,12 +26,18 @@ OpenSSL 3 implements all the cryptographic algorithms using [Providers](https://
 Microsoft Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
 SCOSSL is expected to be used with the default built-in provider enabled as a fallback (which is the case when using [Azure Linux 3](https://github.com/microsoft/AzureLinux)).
 
+## macOS
+
+On macOS, Microsoft Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
+CommonCrypto and CryptoKit are shipped with macOS and don't require any additional installation nor configuration.
+Currently macOS 13 and above is supported.
+
 ## Table legend
 
 The following legend describes the symbols used in the tables to indicate the level of support for each cryptographic algorithm:
 
 | Symbol | Meaning                                                                                                                      |
-|--------|------------------------------------------------------------------------------------------------------------------------------|
+| ------ | ---------------------------------------------------------------------------------------------------------------------------- |
 | ✔️     | Supported, possibly with minor limitations that don't require special configuration when using the latest Go and OS versions |
 | ⚠️     | Supported with limitations that require special configuration action                                                         |
 | ❌     | Not supported                                                                                                                |
@@ -42,32 +48,32 @@ When an algorithm is not supported or the limitations are exceeded, Microsoft Go
 
 This section includes the following packages:
 
-* [crypto/md5](https://pkg.go.dev/crypto/md5)
-* [crypto/sha1](https://pkg.go.dev/crypto/sha1)
-* [crypto/sha256](https://pkg.go.dev/crypto/sha256)
-* [crypto/sha512](https://pkg.go.dev/crypto/sha512)
-* [crypto/sha3](https://pkg.go.dev/golang.org/x/crypto/sha3)
-* [crypto/hmac](https://pkg.go.dev/crypto/hmac)
-
-|Algorithm                  |Windows             |Linux                |
-|---------------------------|--------------------|---------------------|
-| MD5                       | ✔️                 | ✔️                 |
-| SHA-1                     | ✔️                 | ✔️                 |
-| SHA-2-224                 | ❌                 | ✔️                 |
-| SHA-2-256                 | ✔️                 | ✔️                 |
-| SHA-2-384                 | ✔️                 | ✔️                 |
-| SHA-2-512                 | ✔️                 | ✔️                 |
-| SHA-2-512_224             | ❌                 | ✔️<sup>1, 2</sup>  |
-| SHA-2-512_256             | ❌                 | ✔️<sup>1, 2</sup>  |
-| SHA-3-224                 | ❌                 | ❌                 |
-| SHA-3-256                 | ❌                 | ❌                 |
-| SHA-3-384                 | ❌                 | ❌                 |
-| SHA-3-512                 | ❌                 | ❌                 |
-| SHAKE-128                 | ❌                 | ❌                 |
-| SHAKE-256                 | ❌                 | ❌                 |
-| CSHAKE-128                | ❌                 | ❌                 |
-| CSHAKE-256                | ❌                 | ❌                 |
-| HMAC<sup>3</sup>          | ✔️                 | ✔️                 |
+- [crypto/md5](https://pkg.go.dev/crypto/md5)
+- [crypto/sha1](https://pkg.go.dev/crypto/sha1)
+- [crypto/sha256](https://pkg.go.dev/crypto/sha256)
+- [crypto/sha512](https://pkg.go.dev/crypto/sha512)
+- [crypto/sha3](https://pkg.go.dev/golang.org/x/crypto/sha3)
+- [crypto/hmac](https://pkg.go.dev/crypto/hmac)
+
+| Algorithm        | Windows | Linux             | macOS |
+| ---------------- | ------- | ----------------- | ----- |
+| MD5              | ✔️      | ✔️                | ✔️    |
+| SHA-1            | ✔️      | ✔️                | ✔️    |
+| SHA-2-224        | ❌      | ✔️                | ✔️    |
+| SHA-2-256        | ✔️      | ✔️                | ✔️    |
+| SHA-2-384        | ✔️      | ✔️                | ✔️    |
+| SHA-2-512        | ✔️      | ✔️                | ✔️    |
+| SHA-2-512_224    | ❌      | ✔️<sup>1, 2</sup> | ❌    |
+| SHA-2-512_256    | ❌      | ✔️<sup>1, 2</sup> | ❌    |
+| SHA-3-224        | ❌      | ❌                | ❌    |
+| SHA-3-256        | ❌      | ❌                | ❌    |
+| SHA-3-384        | ❌      | ❌                | ❌    |
+| SHA-3-512        | ❌      | ❌                | ❌    |
+| SHAKE-128        | ❌      | ❌                | ❌    |
+| SHAKE-256        | ❌      | ❌                | ❌    |
+| CSHAKE-128       | ❌      | ❌                | ❌    |
+| CSHAKE-256       | ❌      | ❌                | ❌    |
+| HMAC<sup>3</sup> | ✔️      | ✔️                | ✔️    |
 
 <sup>1</sup>Available starting in Microsoft Go 1.24.
 
@@ -79,83 +85,85 @@ This section includes the following packages:
 
 This section includes the following packages:
 
-* [crypto/aes](https://pkg.go.dev/crypto/aes)
-* [crypto/cipher](https://pkg.go.dev/crypto/cipher)
-* [crypto/des](https://pkg.go.dev/crypto/des)
-* [crypto/rc4](https://pkg.go.dev/crypto/rc4)
-
-| Cipher + Mode | Windows  | Linux            |
-|---------------|----------|------------------|
-| AES-ECB       | ✔️       | ✔️              |
-| AES-CBC       | ✔️       | ✔️              |
-| AES-CTR       | ❌       | ✔️              |
-| AES-CFB       | ❌       | ❌              |
-| AES-OFB       | ❌       | ❌              |
-| AES-GCM       | ✔️       | ✔️              |
-| DES-CBC       | ✔️       | ⚠️<sup>1</sup>  |
-| DES-ECB       | ✔️       | ⚠️<sup>1</sup>  |
-| 3DES-ECB      | ✔️       | ✔️              |
-| 3DES-CBC      | ✔️       | ✔️              |
-| RC4           | ✔️       | ⚠️<sup>1</sup>  |
+- [crypto/aes](https://pkg.go.dev/crypto/aes)
+- [crypto/cipher](https://pkg.go.dev/crypto/cipher)
+- [crypto/des](https://pkg.go.dev/crypto/des)
+- [crypto/rc4](https://pkg.go.dev/crypto/rc4)
+
+| Cipher + Mode | Windows | Linux          | macOS |
+| ------------- | ------- | -------------- | ----- |
+| AES-ECB       | ✔️      | ✔️             | ✔️    |
+| AES-CBC       | ✔️      | ✔️             | ✔️    |
+| AES-CTR       | ❌      | ✔️             | ❌    |
+| AES-CFB       | ❌      | ❌             | ❌    |
+| AES-OFB       | ❌      | ❌             | ❌    |
+| AES-GCM       | ✔️      | ✔️             | ✔️    |
+| DES-CBC       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| DES-ECB       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| 3DES-ECB      | ✔️      | ✔️             | ✔️    |
+| 3DES-CBC      | ✔️      | ✔️             | ✔️    |
+| RC4           | ✔️      | ⚠️<sup>1</sup> | ✔️    |
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
 ### AES-GCM keys, nonces, and tags
 
-* Key Sizes
+- Key Sizes
 
   AES-GCM works with 128, 192, and 256-bit keys.
 
-* Nonce Sizes
+- Nonce Sizes
 
   AES-GCM works with 12-byte nonces.
 
-* Tag Sizes
-  
+- Tag Sizes
+
   AES-GCM works with 16-byte tags.
 
 ## Asymmetric encryption
 
 This section includes the following subsections:
 
-* [RSA](#rsa)
-* [ECDSA](#ecdsa)
-* [ECDH](#ecdh)
-* [Ed25519](#ed25519)
-* [DSA](#dsa)
+- [RSA](#rsa)
+- [ECDSA](#ecdsa)
+- [ECDH](#ecdh)
+- [Ed25519](#ed25519)
+- [DSA](#dsa)
 
 ### RSA
 
 This section includes the following packages:
 
-* [crypto/rsa](https://pkg.go.dev/crypto/rsa)
-
-| Padding Mode                           | Windows              | Linux               |
-|----------------------------------------|----------------------|---------------------|
-| OAEP (MD5)                             | ✔️                   | ✔️                 |
-| OAEP (SHA-1)                           | ✔️                   | ✔️                 |
-| OAEP (SHA-2)<sup>1</sup>               | ✔️                   | ✔️                 |
-| OAEP (SHA-3)                           | ❌                   | ❌                 |
-| PSS (MD5)                              | ✔️                   | ✔️                 |
-| PSS (SHA-1)                            | ✔️                   | ✔️                 |
-| PSS (SHA-2)<sup>1</sup>                | ✔️                   | ✔️                 |
-| PSS (SHA-3)                            | ❌                   | ❌                 |
-| PKCS1v15 Signature (Unhashed)          | ✔️                   | ✔️                 |
-| PKCS1v15 Signature (RIPMED160)         | ❌                   | ✔️<sup>2</sup>     |
-| PKCS1v15 Signature (MD4)               | ❌                   | ✔️<sup>2</sup>     |
-| PKCS1v15 Signature (MD5)               | ✔️                   | ✔️                 |
-| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>2</sup>       | ✔️<sup>2</sup>     |
-| PKCS1v15 Signature (SHA-1)             | ✔️                   | ✔️                 |
-| PKCS1v15 Signature (SHA-2)<sup>1</sup> | ✔️                   | ✔️                 |
-| PKCS1v15 Signature (SHA-3)             | ❌                  | ❌                 |
+- [crypto/rsa](https://pkg.go.dev/crypto/rsa)
+
+| Padding Mode                           | Windows        | Linux          | macOS          |
+| -------------------------------------- | -------------- | -------------- | -------------- |
+| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>3</sup> |
+| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>3</sup> |
+| OAEP (SHA-2)<sup>1</sup>               | ✔️             | ✔️             | ✔️<sup>3</sup> |
+| OAEP (SHA-3)                           | ❌             | ❌             | ❌             |
+| PSS (MD5)                              | ✔️             | ✔️             | ❌             |
+| PSS (SHA-1)                            | ✔️             | ✔️             | ✔️             |
+| PSS (SHA-2)<sup>1</sup>                | ✔️             | ✔️             | ✔️             |
+| PSS (SHA-3)                            | ❌             | ❌             | ❌             |
+| PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
+| PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>2</sup> | ❌             |
+| PKCS1v15 Signature (MD4)               | ❌             | ✔️<sup>2</sup> | ❌             |
+| PKCS1v15 Signature (MD5)               | ✔️             | ✔️             | ❌             |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>2</sup> | ✔️<sup>2</sup> | ❌             |
+| PKCS1v15 Signature (SHA-1)             | ✔️             | ✔️             | ✔️             |
+| PKCS1v15 Signature (SHA-2)<sup>1</sup> | ✔️             | ✔️             | ✔️             |
+| PKCS1v15 Signature (SHA-3)             | ❌             | ❌             | ❌             |
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
 <sup>2</sup>Available starting in Microsoft Go 1.24.
 
+<sup>3</sup>macOS doesn't support passing a custom label to OAEP functions.
+
 #### RSA key sizes
 
-[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
+[`rsa.GenerateKey`](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
 
 Multi-prime RSA keys are not supported.
 
@@ -165,25 +173,27 @@ Please refer to the documentation of the underlying cryptographic library for th
 
 #### PSS salt length
 
-On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+On Windows, when verifying a PSS signature, [`rsa.PSSSaltLengthAuto`](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+
+On macOS, custom salt lengths are not supported, it always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
 
 #### Random number generation
 
-Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
 
 ### ECDSA
 
 This section includes the following packages:
 
-* [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
-* [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
+- [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
+- [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
 
-| Elliptic Curve            | Windows     | Linux        |
-|---------------------------|-------------|--------------|
-| NIST P-224 (secp224r1)    | ✔️          | ✔️          |
-| NIST P-256 (secp256r1)    | ✔️          | ✔️          |
-| NIST P-384 (secp384r1)    | ✔️          | ✔️          |
-| NIST P-521 (secp521r1)    | ✔️          | ✔️          |
+| Elliptic Curve         | Windows | Linux | macOS |
+| ---------------------- | ------- | ----- | ----- |
+| NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
+| NIST P-256 (secp256r1) | ✔️      | ✔️    | ✔️    |
+| NIST P-384 (secp384r1) | ✔️      | ✔️    | ✔️    |
+| NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
 
 #### Random number generation
 
@@ -193,56 +203,56 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 This section includes the following packages:
 
-* [crypto/ecdh](https://pkg.go.dev/crypto/ecdsa)
+- [crypto/ecdh](https://pkg.go.dev/crypto/ecdsa)
 
-| Elliptic Curve            | Windows     | Linux        |
-|---------------------------|-------------|--------------|
-| NIST P-224 (secp224r1)    | ✔️          | ✔️          |
-| NIST P-256 (secp256r1)    | ✔️          | ✔️          |
-| NIST P-384 (secp384r1)    | ✔️          | ✔️          |
-| NIST P-521 (secp521r1)    | ✔️          | ✔️          |
-| X25519 (curve25519)       | ❌          | ❌          |
+| Elliptic Curve         | Windows | Linux | macOS |
+| ---------------------- | ------- | ----- | ----- |
+| NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
+| NIST P-256 (secp256r1) | ✔️      | ✔️    | ✔️    |
+| NIST P-384 (secp384r1) | ✔️      | ✔️    | ✔️    |
+| NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
+| X25519 (curve25519)    | ❌      | ❌    | ❌    |
 
 #### Random number generation
 
-Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
 
 ### Ed25519
 
 This section includes the following packages:
 
-* [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
+- [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
 
-| Schemes     | Windows    | Linux         |
-|-------------|------------|---------------|
-| Ed25519     | ❌         | ✔️           |
-| Ed25519ctx  | ❌         | ❌           |
-| Ed25519ph   | ❌         | ❌           |
+| Schemes    | Windows | Linux | macOS |
+| ---------- | ------- | ----- | ----- |
+| Ed25519    | ❌      | ✔️    | ✔️    |
+| Ed25519ctx | ❌      | ❌    | ❌    |
+| Ed25519ph  | ❌      | ❌    | ❌    |
 
 #### Random number generation
 
-Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
 
 ### DSA
 
-| Parameters    | Windows     | Linux        |
-|---------------|-------------|--------------|
-| L1024N160     | ✔️          | ✔️          |
-| L2048N224     | ❌          | ✔️          |
-| L2048N256     | ✔️          | ✔️          |
-| L3072N256     | ✔️          | ✔️          |
+| Parameters | Windows | Linux | macOS |
+| ---------- | ------- | ----- | ----- |
+| L1024N160  | ✔️      | ✔️    | ❌    |
+| L2048N224  | ❌      | ✔️    | ❌    |
+| L2048N256  | ✔️      | ✔️    | ❌    |
+| L3072N256  | ✔️      | ✔️    | ❌    |
 
 ## KDF
 
 This section includes the following packages:
 
-* [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
-* [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
+- [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
+- [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
 
-| Functions     | Windows          | Linux             |
-|---------------|------------------|-------------------|
-| PBKDF2        | ✔️ <sup>1</sup>  | ✔️ <sup>1</sup>  |
-| HKDF          | ✔️ <sup>1</sup>  | ✔️ <sup>1</sup>  |
+| Functions | Windows         | Linux           | macOS           |
+| --------- | --------------- | --------------- | --------------- |
+| PBKDF2    | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
+| HKDF      | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
@@ -250,93 +260,100 @@ This section includes the following packages:
 
 This section includes the following packages:
 
-* [crypto/mlkem](https://pkg.go.dev/crypto/mlkem)
+- [crypto/mlkem](https://pkg.go.dev/crypto/mlkem)
 
-| Parameters    | Windows     | Linux        |
-|---------------|-------------|--------------|
-| 768           | ❌          | ❌          |
-| 1024          | ❌          | ❌          |
+| Parameters | Windows | Linux | macOS |
+| ---------- | ------- | ----- | ----- |
+| 768        | ❌      | ❌    | ❌    |
+| 1024       | ❌      | ❌    | ❌    |
 
 ## TLS
 
 This section includes the following subsections:
 
-* [TLS Versions](#tls-versions)
-* [Cipher Suites](#cipher-suites)
-* [Curves and Groups](#curves-and-groups)
-* [Signature Algorithms](#signature-algorithms)
+- [TLS Versions](#tls-versions)
+- [Cipher Suites](#cipher-suites)
+- [Curves and Groups](#curves-and-groups)
+- [Signature Algorithms](#signature-algorithms)
 
 This section includes the following packages:
 
-* [crypto/tls](https://pkg.go.dev/crypto/tls)
+- [crypto/tls](https://pkg.go.dev/crypto/tls)
 
 ### TLS Versions
 
-| Version        | Windows     | Linux   |
-|----------------|-------------|---------|
-| SSL 3.0        | ❌          | ❌     |
-| TLS 1.0        | ✔️          | ✔️     |
-| TLS 1.2        | ✔️          | ✔️     |
-| TLS 1.3        | ✔️          | ✔️     |
+The TLS stack is implemented using native Go code but the crypto primatives are provided by the system cryptographic libraries.
+
+| Version | Windows | Linux | macOS |
+| ------- | ------- | ----- | ----- |
+| SSL 3.0 | ❌      | ❌    | ❌    |
+| TLS 1.0 | ✔️      | ✔️    | ❌    |
+| TLS 1.1 | ✔️      | ✔️    | ❌    |
+| TLS 1.2 | ✔️      | ✔️    | ✔️    |
+| TLS 1.3 | ✔️      | ✔️    | ✔️    |
 
 ### Cipher Suites
 
-| Name                                              | Windows     | Linux             |
-|---------------------------------------------------|-------------|-------------------|
-| TLS_RSA_WITH_RC4_128_SHA                          | ✔️          | ⚠️<sup>1</sup>   |
-| TLS_RSA_WITH_3DES_EDE_CBC_SHA                     | ✔️          | ⚠️<sup>1</sup>   |
-| TLS_RSA_WITH_AES_128_CBC_SHA                      | ✔️          | ✔️               |
-| TLS_RSA_WITH_AES_256_CBC_SHA                      | ✔️          | ✔️               |
-| TLS_RSA_WITH_AES_128_CBC_SHA256                   | ✔️          | ✔️               |
-| TLS_RSA_WITH_AES_128_GCM_SHA256                   | ✔️          | ✔️               |
-| TLS_RSA_WITH_AES_256_GCM_SHA384                   | ✔️          | ✔️               |
-| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA                  | ✔️          | ⚠️<sup>1</sup>   |
-| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA              | ✔️          | ✔️               |
-| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA              | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_RC4_128_SHA                    | ✔️          | ⚠️<sup>1</sup>   |
-| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA               | ✔️          | ⚠️<sup>1</sup>   |
-| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                | ✔️          | ✔️               |
-| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256           | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256             | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256             | ✔️          | ✔️               |
-| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256           | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384             | ✔️          | ✔️               |
-| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384           | ✔️          | ✔️               |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256       | ❌          | ❌               |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256     | ❌          | ❌               |
-| TLS_AES_128_GCM_SHA256                            | ✔️          | ✔️               |
-| TLS_AES_256_GCM_SHA384                            | ✔️          | ✔️               |
-| TLS_CHACHA20_POLY1305_SHA256                      | ❌          | ❌               |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305              | ❌          | ❌               |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305              | ❌          | ❌               |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305            | ❌          | ❌               |
+| Name                                          | Windows | Linux          | macOS |
+| --------------------------------------------- | ------- | -------------- | ----- |
+| TLS_RSA_WITH_RC4_128_SHA                      | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_RSA_WITH_3DES_EDE_CBC_SHA                 | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_RSA_WITH_AES_128_CBC_SHA                  | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_256_CBC_SHA                  | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_128_CBC_SHA256               | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_128_GCM_SHA256               | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_256_GCM_SHA384               | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA              | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA          | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_RC4_128_SHA                | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA           | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA            | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA            | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256       | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256         | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   | ❌      | ❌             | ❌    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | ❌      | ❌             | ❌    |
+| TLS_AES_128_GCM_SHA256                        | ✔️      | ✔️             | ✔️    |
+| TLS_AES_256_GCM_SHA384                        | ✔️      | ✔️             | ✔️    |
+| TLS_CHACHA20_POLY1305_SHA256                  | ❌      | ❌             | ❌    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌      | ❌             | ❌    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌      | ❌             | ❌    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305        | ❌      | ❌             | ❌    |
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
 ### Curves and Groups
 
-| Name            | Windows     | Linux        |
-|-----------------|-------------|--------------|
-| CurveP256       | ✔️          | ✔️          |
-| CurveP384       | ✔️          | ✔️          |
-| CurveP521       | ✔️          | ✔️          |
-| X25519          | ❌          | ❌          |
-| X25519MLKEM768  | ❌          | ❌          |
-
-### Signature Algorithms
-
-| Name                      | Windows     | Linux        |
-|---------------------------|-------------|--------------|
-| PKCS1WithSHA256           | ✔️          | ✔️          |
-| PKCS1WithSHA384           | ✔️          | ✔️          |
-| PKCS1WithSHA512           | ✔️          | ✔️          |
-| PSSWithSHA256             | ✔️          | ✔️          |
-| PSSWithSHA384             | ✔️          | ✔️          |
-| PSSWithSHA512             | ✔️          | ✔️          |
-| ECDSAWithP256AndSHA256    | ✔️          | ✔️          |
-| ECDSAWithP384AndSHA384    | ✔️          | ✔️          |
-| ECDSAWithP521AndSHA512    | ✔️          | ✔️          |
-| Ed25519                   | ❌          | ✔️          |
-| PKCS1WithSHA1             | ✔️          | ✔️          |
-| ECDSAWithSHA1             | ✔️          | ✔️          |
+Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).
+
+| Name           | Windows | Linux | macOS |
+| -------------- | ------- | ----- | ----- |
+| CurveP256      | ✔️      | ✔️    | ✔️    |
+| CurveP384      | ✔️      | ✔️    | ✔️    |
+| CurveP521      | ✔️      | ✔️    | ✔️    |
+| X25519         | ❌      | ❌    | ❌    |
+| X25519MLKEM768 | ❌      | ❌    | ❌    |
+
+### Signature Schemes
+
+Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#SignatureScheme).
+
+| Name                   | Windows | Linux | macOS |
+| ---------------------- | ------- | ----- | ----- |
+| PKCS1WithSHA1          | ✔️      | ✔️    | ✔️    |
+| PKCS1WithSHA256        | ✔️      | ✔️    | ✔️    |
+| PKCS1WithSHA384        | ✔️      | ✔️    | ✔️    |
+| PKCS1WithSHA512        | ✔️      | ✔️    | ✔️    |
+| PSSWithSHA256          | ✔️      | ✔️    | ✔️    |
+| PSSWithSHA384          | ✔️      | ✔️    | ✔️    |
+| PSSWithSHA512          | ✔️      | ✔️    | ✔️    |
+| ECDSAWithSHA1          | ✔️      | ✔️    | ✔️    |
+| ECDSAWithP256AndSHA256 | ✔️      | ✔️    | ✔️    |
+| ECDSAWithP384AndSHA384 | ✔️      | ✔️    | ✔️    |
+| ECDSAWithP521AndSHA512 | ✔️      | ✔️    | ✔️    |
+| Ed25519                | ❌      | ✔️    | ✔️    |

From 225951c5ab29d76bb7a4b7c78b1ebc13d5e40104 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Jan 2025 10:49:04 +0000
Subject: [PATCH 211/887] build(deps): bump github/codeql-action from 3.28.1 to
 3.28.2

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c...d68b2d4edb4189fd2a5366ac14e72027bd4b37dd)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 952a97f8430..c4eb001d823 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/init@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/autobuild@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
+        uses: github/codeql-action/analyze@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
         with:
           category: /language:go

From 7002c13b2047fa95e557621672d24546ef9c872f Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 22 Jan 2025 09:15:20 -0800
Subject: [PATCH 212/887] CrossPlatformCryptography.md: more consistently
 associate limits to the table (#1507)

* CrossPlatformCryptography.md: more consistently associate limits to the table

* Remove redundant spaces and out of place space after superscript
---
 eng/doc/CrossPlatformCryptography.md | 66 ++++++++++++----------------
 1 file changed, 27 insertions(+), 39 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 2761a6c9f2a..dbb68033754 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -97,7 +97,7 @@ This section includes the following packages:
 | AES-CTR       | ❌      | ✔️             | ❌    |
 | AES-CFB       | ❌      | ❌             | ❌    |
 | AES-OFB       | ❌      | ❌             | ❌    |
-| AES-GCM       | ✔️      | ✔️             | ✔️    |
+| AES-GCM<sup>2</sup>       | ✔️      | ✔️             | ✔️    |
 | DES-CBC       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
 | DES-ECB       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
 | 3DES-ECB      | ✔️      | ✔️             | ✔️    |
@@ -106,7 +106,7 @@ This section includes the following packages:
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
-### AES-GCM keys, nonces, and tags
+<sup>2</sup>AES-GCM supports specific keys, nonces, and tags:
 
 - Key Sizes
 
@@ -136,15 +136,25 @@ This section includes the following packages:
 
 - [crypto/rsa](https://pkg.go.dev/crypto/rsa)
 
+[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
+
+Multi-prime RSA keys are not supported.
+
+The RSA key size is subject to the limitations of the underlying cryptographic library.
+For example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.
+Please refer to the documentation of the underlying cryptographic library for the specific limitations.
+
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
 | Padding Mode                           | Windows        | Linux          | macOS          |
 | -------------------------------------- | -------------- | -------------- | -------------- |
-| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>3</sup> |
-| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>3</sup> |
-| OAEP (SHA-2)<sup>1</sup>               | ✔️             | ✔️             | ✔️<sup>3</sup> |
+| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>5</sup> |
+| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>5</sup> |
+| OAEP (SHA-2)<sup>1</sup>               | ✔️             | ✔️             | ✔️<sup>5</sup> |
 | OAEP (SHA-3)                           | ❌             | ❌             | ❌             |
-| PSS (MD5)                              | ✔️             | ✔️             | ❌             |
-| PSS (SHA-1)                            | ✔️             | ✔️             | ✔️             |
-| PSS (SHA-2)<sup>1</sup>                | ✔️             | ✔️             | ✔️             |
+| PSS (MD5)                              | ✔️<sup>3</sup>             | ✔️             | ❌             |
+| PSS (SHA-1)                            | ✔️<sup>3</sup>             | ✔️             | ✔️<sup>4</sup>             |
+| PSS (SHA-2)<sup>1</sup>                | ✔️<sup>3</sup>             | ✔️             | ✔️<sup>4</sup>             |
 | PSS (SHA-3)                            | ❌             | ❌             | ❌             |
 | PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
 | PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>2</sup> | ❌             |
@@ -159,27 +169,11 @@ This section includes the following packages:
 
 <sup>2</sup>Available starting in Microsoft Go 1.24.
 
-<sup>3</sup>macOS doesn't support passing a custom label to OAEP functions.
-
-#### RSA key sizes
-
-[`rsa.GenerateKey`](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
-
-Multi-prime RSA keys are not supported.
-
-The RSA key size is subject to the limitations of the underlying cryptographic library.
-For example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.
-Please refer to the documentation of the underlying cryptographic library for the specific limitations.
+<sup>3</sup>On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
 
-#### PSS salt length
+<sup>4</sup>On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
 
-On Windows, when verifying a PSS signature, [`rsa.PSSSaltLengthAuto`](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
-
-On macOS, custom salt lengths are not supported, it always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
-
-#### Random number generation
-
-Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
+<sup>5</sup>macOS doesn't support passing a custom label to OAEP functions.
 
 ### ECDSA
 
@@ -188,6 +182,8 @@ This section includes the following packages:
 - [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
 - [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
 
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
 | Elliptic Curve         | Windows | Linux | macOS |
 | ---------------------- | ------- | ----- | ----- |
 | NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
@@ -195,16 +191,14 @@ This section includes the following packages:
 | NIST P-384 (secp384r1) | ✔️      | ✔️    | ✔️    |
 | NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
 
-#### Random number generation
-
-Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
-
 ### ECDH
 
 This section includes the following packages:
 
 - [crypto/ecdh](https://pkg.go.dev/crypto/ecdsa)
 
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
 | Elliptic Curve         | Windows | Linux | macOS |
 | ---------------------- | ------- | ----- | ----- |
 | NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
@@ -213,26 +207,20 @@ This section includes the following packages:
 | NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
 | X25519 (curve25519)    | ❌      | ❌    | ❌    |
 
-#### Random number generation
-
-Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
-
 ### Ed25519
 
 This section includes the following packages:
 
 - [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
 
+Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
+
 | Schemes    | Windows | Linux | macOS |
 | ---------- | ------- | ----- | ----- |
 | Ed25519    | ❌      | ✔️    | ✔️    |
 | Ed25519ctx | ❌      | ❌    | ❌    |
 | Ed25519ph  | ❌      | ❌    | ❌    |
 
-#### Random number generation
-
-Operations that require random numbers (rand io.Reader) only support [`rand.Reader`](https://pkg.go.dev/crypto/rand#Reader).
-
 ### DSA
 
 | Parameters | Windows | Linux | macOS |

From 6e77d76be47376bd8e59ad0599d1f2564550652b Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 22 Jan 2025 14:58:55 -0800
Subject: [PATCH 213/887] Update CrossPlatformCryptography.md: primitives typo
 (#1510)

---
 eng/doc/CrossPlatformCryptography.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index dbb68033754..dbdf1829362 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -270,7 +270,7 @@ This section includes the following packages:
 
 ### TLS Versions
 
-The TLS stack is implemented using native Go code but the crypto primatives are provided by the system cryptographic libraries.
+The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.
 
 | Version | Windows | Linux | macOS |
 | ------- | ------- | ----- | ----- |

From 7ac7461b5ecb69e6d1e138ba4f7439cb6074027b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 24 Jan 2025 10:41:09 +0000
Subject: [PATCH 214/887] build(deps): bump github/codeql-action from 3.28.2 to
 3.28.4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.2 to 3.28.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d68b2d4edb4189fd2a5366ac14e72027bd4b37dd...ee117c905ab18f32fa0f66c2fe40ecc8013f3e04)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c4eb001d823..23520183eae 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
+        uses: github/codeql-action/init@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
+        uses: github/codeql-action/autobuild@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
+        uses: github/codeql-action/analyze@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
         with:
           category: /language:go

From 89dd1db6edfac91f392ba1cb5087a5cb33943322 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 27 Jan 2025 16:07:53 +0000
Subject: [PATCH 215/887] Update submodule to latest master (608acff8):
 go/types: avoid importer.Default

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 368a9ec9983..608acff8479 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 368a9ec99834652ca3f7d8fe24862a7581e12358
+Subproject commit 608acff8479640b00c85371d91280b64f5ec9594

From 69a28cd439938c9891f2d6b4d47ceef8d1b76123 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jan 2025 16:44:01 +0000
Subject: [PATCH 216/887] build(deps): bump github/codeql-action from 3.28.4 to
 3.28.5 (#1514)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.4 to 3.28.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ee117c905ab18f32fa0f66c2fe40ecc8013f3e04...f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 23520183eae..123c1053e80 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
+        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
+        uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04 # v3.28.4
+        uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
         with:
           category: /language:go

From cefe8e6658c4778443d1b7021da974c48103087f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 28 Jan 2025 10:40:30 +0100
Subject: [PATCH 217/887] Remove `openssl.SetFIPS(true)` call (#1513)

* implement enableSystemWideFIPS for linux

* remove SetFIPS call

* fix patch

* execute run-builder as sudo

* move sudo to test step

* fix condition

* use OPENSSL_FORCE_FIPS_MODE

* don't run with sudo

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* use extraEnvKeys

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .../cmd/run-builder/systemfips_fallback.go    |  2 +-
 eng/_util/cmd/run-builder/systemfips_linux.go | 32 +++++++++++++++++++
 ...03-Implement-crypto-internal-backend.patch | 23 ++++---------
 patches/0004-Use-crypto-backends.patch        | 16 +++++++++-
 4 files changed, 55 insertions(+), 18 deletions(-)
 create mode 100644 eng/_util/cmd/run-builder/systemfips_linux.go

diff --git a/eng/_util/cmd/run-builder/systemfips_fallback.go b/eng/_util/cmd/run-builder/systemfips_fallback.go
index 1e37c82d67c..c876c9dc031 100644
--- a/eng/_util/cmd/run-builder/systemfips_fallback.go
+++ b/eng/_util/cmd/run-builder/systemfips_fallback.go
@@ -1,7 +1,7 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 
-//go:build !windows
+//go:build !windows && !linux
 
 package main
 
diff --git a/eng/_util/cmd/run-builder/systemfips_linux.go b/eng/_util/cmd/run-builder/systemfips_linux.go
new file mode 100644
index 00000000000..0fa5db5fe0b
--- /dev/null
+++ b/eng/_util/cmd/run-builder/systemfips_linux.go
@@ -0,0 +1,32 @@
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+
+package main
+
+import (
+	"log"
+	"os"
+)
+
+// enableSystemWideFIPS enables Mariner and Azure Linux 3 process-wide FIPS mode
+// for any process that inherits the current process' environment variables.
+func enableSystemWideFIPS() (restore func(), err error) {
+	// FIPS mode is enabled if OPENSSL_FORCE_FIPS_MODE is set, regardless of the value.
+	_, ok := os.LookupEnv("OPENSSL_FORCE_FIPS_MODE")
+	if ok {
+		log.Println("Mariner and Azure Linux 3 forced FIPS mode (OPENSSL_FORCE_FIPS_MODE) already enabled.")
+		return nil, nil
+	}
+
+	env("OPENSSL_FORCE_FIPS_MODE", "1")
+	log.Println("Enabled Mariner and Azure Linux 3 FIPS mode (OPENSSL_FORCE_FIPS_MODE).")
+
+	return func() {
+		err := os.Unsetenv("OPENSSL_FORCE_FIPS_MODE")
+		if err != nil {
+			log.Printf("Unable to unset OPENSSL_FORCE_FIPS_MODE: %v\n", err)
+			return
+		}
+		log.Println("Successfully unset OPENSSL_FORCE_FIPS_MODE.")
+	}, nil
+}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 65043bbdfaf..ea282f44d29 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -7,7 +7,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .gitignore                                    |   2 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 284 +++++++++++++
+ .../internal/backend/backendgen_test.go       | 284 ++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
@@ -25,8 +25,8 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
  .../internal/backend/fips140/openssl.go       |  41 ++
- src/crypto/internal/backend/nobackend.go      | 240 +++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 377 ++++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 368 ++++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |   7 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -45,7 +45,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2517 insertions(+), 1 deletion(-)
+ 41 files changed, 2508 insertions(+), 1 deletion(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -2087,10 +2087,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..0c4e0c9da6e1ce
+index 00000000000000..a66c66ca386847
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,377 @@
+@@ -0,0 +1,368 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2167,16 +2167,7 @@ index 00000000000000..0c4e0c9da6e1ce
 +			// - In OpenSSL 1, the active engine doesn't support FIPS mode.
 +			// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
 +			// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
-+			//
-+			// A best-effort attempt is made to enable FIPS mode. It will only succeed if the following conditions are met:
-+			// - In OpenSSL 1, the active engine supports FIPS mode and FIPS mode can be enabled.
-+			// - In OpenSSL 3, there is an available provider that supports the `fips=yes` query.
-+			//
-+			// Note that this best effort is mainly to support test environments. FIPS-compliant production environments
-+			// like Mariner 2 and Azure Linux 3 (when executed in kernel FIPS mode) will already be properly configured.
-+			if err := openssl.SetFIPS(true); err != nil {
-+				panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText() + ": " + err.Error())
-+			}
++			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
 +	} else if fips140.Disabled() {
 +		// TODO: Remove this block when GOFIPS=0 is no longer supported.
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 122b6d26b9e..6fd482bdc3c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -8,6 +8,7 @@ Subject: [PATCH] Use crypto backends
  src/cmd/dist/build.go                         |  13 ++
  src/cmd/dist/test.go                          |  10 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
+ src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
@@ -83,7 +84,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 79 files changed, 1118 insertions(+), 111 deletions(-)
+ 80 files changed, 1120 insertions(+), 111 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -198,6 +199,19 @@ index ed0fbf3d53d75b..8111b143a1295b 100644
  	tg := testgo(t)
  	defer tg.cleanup()
  	tg.parallel()
+diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
+index 390a36723787f4..0576ea8add72af 100644
+--- a/src/cmd/go/script_test.go
++++ b/src/cmd/go/script_test.go
+@@ -297,6 +297,8 @@ var extraEnvKeys = []string{
+ 	"GO_TESTING_GOTOOLS", // for gccgo testing
+ 	"GCCGO",              // for gccgo testing
+ 	"GCCGOTOOLDIR",       // for gccgo testing
++
++	"OPENSSL_FORCE_FIPS_MODE", // useful for testing on Mariner 2.
+ }
+ 
+ // updateSum runs 'go mod tidy', 'go list -mod=mod -m all', or
 diff --git a/src/cmd/go/testdata/script/darwin_no_cgo.txt b/src/cmd/go/testdata/script/darwin_no_cgo.txt
 index fa445925b7c374..e36ac86fcaa58d 100644
 --- a/src/cmd/go/testdata/script/darwin_no_cgo.txt

From 6b465900bb884ce9dcc2609084936874c124d74d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 28 Jan 2025 10:47:45 +0000
Subject: [PATCH 218/887] build(deps): bump github/codeql-action from 3.28.5 to
 3.28.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.5 to 3.28.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4...17a820bf2e43b47be2c72b39cc905417bc1ab6d0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 123c1053e80..de88e2a91d3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/init@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/autobuild@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/analyze@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
         with:
           category: /language:go

From 9b280682f290ffbf4d9ff0966876cd9f3ef59b4e Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 28 Jan 2025 14:16:49 +0100
Subject: [PATCH 219/887] fix conflicts

---
 patches/0002-Vendor-crypto-backends.patch | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 4fbc2631299..17d7c634036 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -222,7 +222,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 7a1318dcac32ba..a59c5f120e7dfb 100644
+index ccfdbd8ea22d77..848995bdafa375 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -236,7 +236,7 @@ index 7a1318dcac32ba..a59c5f120e7dfb 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 9e661352f16e0b..b4273d691cbe36 100644
+index 4d6a33e34a4e63..6a09a77031befa 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -248,7 +248,7 @@ index 9e661352f16e0b..b4273d691cbe36 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
- golang.org/x/net v0.32.1-0.20241206180132-552d8ac903a1 h1:+Yk1FZ5E+/ewA0nOO/HRYs9E4yeqpGOShuSAdzCNNoQ=
+ golang.org/x/net v0.32.1-0.20250121202134-9a960c88dd98 h1:36bTiCRO7f/J3t+LumnLTJDXqxsp1x6Q7754SsRD9u4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index e3e01077c18b17..e017efb1562379 100644
 --- a/src/go/build/deps_test.go
@@ -15149,7 +15149,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 1c8de570cc2f1f..a249bbfa93dac3 100644
+index d42f50b43ccdba..61fda0cbe57e34 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@

From a61b96fb0e5b76f61bfafa67fc9a0a745bf625bb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Jan 2025 10:55:39 +0000
Subject: [PATCH 220/887] build(deps): bump github/codeql-action from 3.28.6 to
 3.28.8

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.6 to 3.28.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/17a820bf2e43b47be2c72b39cc905417bc1ab6d0...dd746615b3b9d728a6a37ca2045b68ca76d4841a)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index de88e2a91d3..b64893ca067 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
+        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
+        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6
+        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           category: /language:go

From 4a90888c0c6b54888014cbbfd94e72531a6d312d Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 4 Feb 2025 07:55:24 +0100
Subject: [PATCH 221/887] Mention GODEBUG=fips140 in FIPS docs (#1508)

* mention GODEBUG=fips140 in FIPS docs

* promote note to warning

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* document that GOFIPS=1 no longer updates the configured FIPS mode

* reintroduce GOFIPS

* reintroduce GOFIPS

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* mention GOFIPS

* reword build options

* reword macos

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* add suggestion

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/fips/README.md | 65 +++++++++++++++++++++++++++---------------
 1 file changed, 42 insertions(+), 23 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 489d5b444e5..ac20296f092 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -39,10 +39,12 @@ The Microsoft Go fork provides several ways to configure the crypto backend and
   - [`GOEXPERIMENT=<backend>crypto` environment variable](#usage-build)
   - [`goexperiment.<backend>crypto` build tag](#usage-build)
   - [`requirefips` build tag](#build-option-to-require-fips-mode)
+  - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode)
   - [`GOEXPERIMENT` `allowcryptofallback`](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails)
   - [`import _ "crypto/tls/fipsonly"` source change](#tls-with-fips-compliant-settings)
 - Runtime configuration:
   - [`GOFIPS` environment variable](#usage-runtime)
+  - [`GODEBUG=fips140` setting](#usage-runtime)
   - (OpenSSL backend) [`GO_OPENSSL_VERSION_OVERRIDE` environment variable](#runtime-openssl-version-override)
   - (OpenSSL backend) [`/proc/sys/crypto/fips_enabled` file containing `1`](#linux-fips-mode-openssl)
   - (CNG backend) [Windows registry `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy` dword value `Enabled` set to `1`](#windows-fips-mode-cng)
@@ -52,7 +54,9 @@ The Microsoft Go fork provides several ways to configure the crypto backend and
 There are typically two goals that lead to this document. Creating a FIPS compliant app is one. The other is to comply with internal Microsoft crypto policies that have been set for Go. This table summarizes common configurations and how suitable each one is for these goals.
 
 > [!NOTE]
-> This section assumes the use of Microsoft Go 1.21 or later.
+> This section assumes the use of Microsoft Go 1.24 or later.
+>
+> 1.24 introduces `GODEBUG=fips140=on` as a preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
 >
 > 1.21 introduces `systemcrypto`, `requirefips`, and a build-time compatibility check for the selected crypto backend. The Usage sections go into more detail about the differences between 1.19/1.20 and 1.21 in context. See also [the Go 1.21 changelog](#go-121-aug-2023).
 
@@ -60,10 +64,9 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | --- | --- | --- | --- |
 | Default | Default | Not compliant | Crypto usage is not FIPS compliant. |
 | `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | `GOFIPS=0` | Compliant | Crypto usage is unlikely to be FIPS compliant. The exact behavior of `GOFIPS=0` varies per platform. See [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
-| `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
+| `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
 
 Other notes for common configurations:
 
@@ -200,40 +203,53 @@ Another approach that generally works for any build system is to modify the buil
 
 A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL), `cngcrypto` (always using CNG) and `darwincrypto` (always using CommonCrypto/CryptoKit). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
 
-The following sections describe how to enable FIPS mode and the effect of the `GOFIPS` environment variable on each supported platform.
+The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140` and `GOFIPS=1` settings on each supported platform.
+
+> [!NOTE]
+> Since Go 1.24, setting `GOFIPS=1` is equivalent to setting `GODEBUG=fips140=on`. The latter is the recommended way to enable FIPS mode. Support for the `GOFIPS` environment variable will be removed in Go 1.25.
 
 > [!NOTE]
 > The options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
 
 ### Linux FIPS mode (OpenSSL)
 
-To set FIPS mode on Linux, use one of the following options. The first match in this list wins:
+To set FIPS mode preference on Linux, use one of the following options. The first match in this list wins:
 
+- Explicitly enable it by setting the environment variable `GODEBUG=fips140=on`.
 - Explicitly enable it by setting the environment variable `GOFIPS=1`.
 - Explicitly disable it by setting the environment variable `GOFIPS=0`.
 - Implicitly enable it by booting the Linux Kernel in FIPS mode.
   - The Linux Kernel's FIPS mode sets the content of `/proc/sys/crypto/fips_enabled` to `1`. The Go runtime reads this file.
 
-If the Go runtime detects a FIPS preference, it configures OpenSSL during program initialization. This includes disabling FIPS mode if `GOFIPS=0` even if OpenSSL is configured to be in FIPS mode by default. If configuration fails, program initialization panics.
+If the Go runtime detects a preference to enable FIPS and OpenSSL is not using a FIPS-compliant engine or provider, the program will panic during program initialization. This may be useful to detect and refuse to run with incorrectly configured OpenSSL installations.
+
+If the Go runtime detects a preference to disable FIPS and OpenSSL is using a FIPS-compliant engine or provider, the program will panic during program initialization.
+
+Otherwise, FIPS preference has no effect.
+
+For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
 
-If no preference is detected, the Go runtime doesn't set the OpenSSL FIPS mode, and the standard OpenSSL configuration is left unchanged. For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
+> [!WARNING]
+> Prior to Go 1.24, setting `GOFIPS` makes the Go runtime attempt to modify the configured FIPS mode.
+> This includes disabling FIPS mode if `GOFIPS=0` even if OpenSSL is configured to be in FIPS mode by default.
+>
+> Since Go 1.24, the Go runtime no longer makes any attempt to modify OpenSSL FIPS mode.
 
 ### Windows FIPS mode (CNG)
 
 To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy).
 
-If the Go runtime detects `GOFIPS=1` and FIPS policy is not enabled, the program will panic during program initialization. This may be useful to detect and refuse to run on incorrectly configured Windows systems. Otherwise, `GOFIPS` has no effect.
-
-> [!NOTE]
-> Unlike `opensslcrypto`, a Windows program built with `cngcrypto` doesn't include the ability to enable/disable FIPS mode. The change must be made by configuring the OS, not the Go program.
->
-> This is because Windows FIPS mode is not a per-process setting, and changing it may require elevated permissions. We expect that adding a feature that attempts to change the Windows policy would have unintended consequences.
+If the Go runtime detects `GOFIPS=1` or `GODEBUG=fips140=on` and FIPS policy is not enabled, the program will panic during program initialization. This may be useful to detect and refuse to run on incorrectly configured Windows systems. Otherwise, `GODEBUG=fips140` has no effect.
 
 For testing purposes, Windows FIPS policy can be enabled via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
 
 ### macOS FIPS mode (CommonCrypto/CryptoKit)
 
-CommonCrypo/CrytoKit is FIPS compliant by default. This means that regardless of which mode you set `GOFIPS` to, the cryptographic functions will always be FIPS-enabled.
+macOS cryptographic primitives are FIPS compliant by default, so there is no need for system-wide nor process-wide configuration.
+Refer to the [About Apple security certifications](https://support.apple.com/guide/certifications/about-apple-security-certifications-apc30d0ed034/1/web/1.0) page for more information.
+
+This means that setting `GOFIPS=1` or `GODEBUG=fips140=on` will never cause a panic on macOS.
+They are still necessary to instruct Go to run in FIPS mode, as there is no system-provided parameter to do so.
 
 Prior to 1.24, CommonCrypto/CryptoKit is not used by Microsoft Go.
 
@@ -241,19 +257,18 @@ Prior to 1.24, CommonCrypto/CryptoKit is not used by Microsoft Go.
 
 ### Build option to require FIPS mode
 
-The `requirefips` feature is available since Go 1.21.
+FIPS mode preference is normally determined at runtime, but the `GOFIPS140=latest` and `requirefips` options can be used to make a program always require FIPS mode and panic if FIPS mode is not enabled:
 
-FIPS mode is normally determined at runtime, but the `requirefips` build tag can be used to make a program always require FIPS mode and panic if FIPS mode can't be enabled for any reason.
+- The `requirefips` build tag is available since Go 1.21. See [the "GOFLAGS" example in the build section](#modify-the-build-command).
+- The `GOFIPS140=latest` environment variable is available since Go 1.24.
 
-Most programs aren't expected to use this tag. Determining FIPS mode at runtime is normal for FIPS compliant applications. This allows the same binary to be deployed to run in both FIPS compliant contexts and non-FIPS contexts, and allows it to be bundled with other binaries that can also run in both contexts. However, in some situations, compile-time `requirefips` is desirable:
+Most programs aren't expected to use these options. Determining FIPS mode at runtime is normal for FIPS compliant applications. This allows the same binary to be deployed to run in both FIPS compliant contexts and non-FIPS contexts, and allows it to be bundled with other binaries that can also run in both contexts. However, it is useful in some cases:
 
-- Dependence on environment variables like `GOFIPS` in any way may be undesirable.
+- Dependence on environment variables like `GODEBUG` and `GOFIPS` in any way may be undesirable.
 - The program's documentation can state it will always run in FIPS mode without any nuance about environment variables.
 - If the program is used by someone unfamiliar with the system they're configuring, the panic will help catch mistakes before they become a problem.
 
-We chose to make a `requirefips` Go program panic if `GOFIPS=0` rather than silently ignoring the setting. This helps avoid a surprise if a user of a `requirefips` program sets `GOFIPS=0` and expects it to turn off FIPS mode. It may not be obvious which programs are built using `requirefips`, and the panic is intended to help avoid confusion.
-
-Modifying the `go build` command to include `-tags=requirefips` enables this feature. However, if it is difficult to change the build command but possible to change the environment (e.g. by modifying a Dockerfile's `FROM` image), the `GOFLAGS` environment variable can be used to pass `-tags=requirefips` to every `go build` command that runs. See [the "GOFLAGS" example in the build section](#modify-the-build-command).
+We chose to make a FIPS-only Go program panic if `GOFIPS=0` rather than silently ignoring the setting. This helps avoid a surprise if a user of such program sets `GOFIPS=0` and expects it to turn off FIPS mode.
 
 ### Build option to use Go crypto if the backend compatibility check fails
 
@@ -288,7 +303,7 @@ This table shows an example of the fragile behavior that results from using `all
 | `GOOS=linux GOEXPERIMENT=systemcrypto,allowcryptofallback` | Compliant | *Not recommended,* but can be used to create a compliant app, as `allowcryptofallback` has no effect in this situation. |
 | `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto,allowcryptofallback` | Not compliant | Crypto usage is not FIPS compliant. `systemcrypto` on `linux` picks the OpenSSL backend. The backend requires cgo, so `CGO_ENABLED=0` would normally result in a build error. However, `allowcryptofallback` causes the Go standard library crypto to be used and ignores the error. |
 
-A scenario we expect is that a dev attempts to rebuild an open source Go app with an OpenSSL backend to start working towards FIPS compliance. A Dockerfile or other build script provided by the open source project may set `CGO_ENABLED=0` in a non-obvious way. With *silent crypto backend fallback*, the dev needs to notice that the OpenSSL backend isn't being used in some situations (e.g. `GOFIPS=1` causes failure) and figure out why. If they don't notice, they may deliver an app that uses Go crypto without realizing it. The compatibility check makes it so this issue blocks the build and can't be missed.
+A scenario we expect is that a dev attempts to rebuild an open source Go app with an OpenSSL backend to start working towards FIPS compliance. A Dockerfile or other build script provided by the open source project may set `CGO_ENABLED=0` in a non-obvious way. With *silent crypto backend fallback*, the dev needs to notice that the OpenSSL backend isn't being used in some situations (e.g. `GODEBUG=fips140=on` and `GOFIPS=1` causes failure) and figure out why. If they don't notice, they may deliver an app that uses Go crypto without realizing it. The compatibility check makes it so this issue blocks the build and can't be missed.
 
 > [!NOTE]
 > In rare cases, it may be more practical to use `allowcryptofallback` than to remove the `GOEXPERIMENT`. For example, a generic build script that supports many platforms, some of which don't support crypto backends, may find it practical to use `GOEXPERIMENT=systemcrypto,allowcryptofallback` despite the risk of unclear or accidental fallback to Go crypto.
@@ -408,6 +423,10 @@ This list of major changes is intended for quick reference and for access to his
 ### Go 1.24 (Feb 2025)
 
 - Introduces macOS crypto backend `darwincrypto`.
+- Support `GODEBUG=fips140=on` as an alias for `GOFIPS=1`.
+- `GOFIPS=1` no longer tries to enable FIPS mode on Linux. It will now panic if FIPS mode is not enabled.
+- `GOFIPS=0` no longer tries to disable FIPS mode on Linux. It will now panic if FIPS mode is enabled.
+- Support for the `GOFIPS` environment variable will be removed in Go 1.25.
 
 ### Go [1.22.9-2](https://github.com/microsoft/go/releases/tag/v1.22.9-2) and [1.23.3-2](https://github.com/microsoft/go/releases/tag/v1.23.3-2) (Dec 2024)
 

From 32ecffa12c3f8b83f8424575613120307d2c77be Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 4 Feb 2025 09:51:34 +0100
Subject: [PATCH 222/887] Take into account the OpenSSL FIPS mode when setting
 GODEBUG=fips140 (#1519)

* check OpenSSL config

* add tests

* simplify deps

* fix bootstrap

* fix compilation

* review suggestions
---
 patches/0002-Vendor-crypto-backends.patch     |  68 ++--
 ...03-Implement-crypto-internal-backend.patch | 368 ++++++++++++++----
 patches/0004-Use-crypto-backends.patch        |  12 +-
 3 files changed, 343 insertions(+), 105 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 17d7c634036..d8083025015 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -9,7 +9,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |  22 +
  src/go.mod                                    |   6 +
  src/go.sum                                    |   6 +
- src/go/build/deps_test.go                     |  17 +-
+ src/go/build/deps_test.go                     |  35 +-
  src/go/build/vendor_test.go                   |   3 +
  .../golang-fips/openssl/v2/.gitignore         |   1 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
@@ -101,7 +101,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  16 +
- 95 files changed, 13799 insertions(+), 3 deletions(-)
+ 95 files changed, 13813 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -250,44 +250,64 @@ index 4d6a33e34a4e63..6a09a77031befa 100644
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20250121202134-9a960c88dd98 h1:36bTiCRO7f/J3t+LumnLTJDXqxsp1x6Q7754SsRD9u4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..e017efb1562379 100644
+index e3e01077c18b17..72e56b5da8e582 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -503,7 +503,7 @@ var depsRules = `
- 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
- 	sync/atomic < crypto/internal/boring/bcache;
+@@ -493,6 +493,24 @@ var depsRules = `
+ 	< crypto/internal/fips140/rsa
+ 	< FIPS;
  
--	FIPS, internal/godebug, hash, embed,
-+	FIPS, internal/godebug, hash, embed, encoding/binary,
- 	crypto/internal/boring/sig,
- 	crypto/internal/boring/syso,
- 	crypto/internal/boring/bcache
-@@ -513,6 +513,14 @@ var depsRules = `
- 	< crypto/sha3
- 	< crypto/internal/fips140hash
- 	< crypto/cipher
-+	< github.com/golang-fips/openssl/v2/internal/subtle
++	FIPS, hash < crypto/internal/fips140only;
++	crypto/internal/fips140/subtle,	hash < crypto;
++	crypto/internal/fips140/subtle < crypto/subtle;
++	crypto/subtle, crypto/internal/fips140only < crypto/cipher;
++
++	crypto,
++	crypto/subtle,
++	encoding/binary,
++	hash,
++	crypto/cipher
 +	< github.com/golang-fips/openssl/v2
 +	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +	< github.com/microsoft/go-crypto-darwin/xcrypto
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
 +	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
-+	< github.com/microsoft/go-crypto-winnative/cng
++	< github.com/microsoft/go-crypto-winnative/cng;
++
+ 	FIPS, internal/godebug < crypto/fips140;
+ 
+ 	crypto, hash !< FIPS;
+@@ -506,13 +524,12 @@ var depsRules = `
+ 	FIPS, internal/godebug, hash, embed,
+ 	crypto/internal/boring/sig,
+ 	crypto/internal/boring/syso,
+-	crypto/internal/boring/bcache
+-	< crypto/internal/fips140only
+-	< crypto
+-	< crypto/subtle
++	crypto/internal/boring/bcache,
++	crypto/internal/fips140only,
++	crypto,
++	crypto/cipher
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
+-	< crypto/cipher
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -534,6 +542,9 @@ var depsRules = `
+@@ -533,6 +550,10 @@ var depsRules = `
+ 
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
++	math/big, github.com/golang-fips/openssl/v2 < github.com/golang-fips/openssl/v2/bbig;
++	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
++	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
++
  	CRYPTO, FMT, math/big
-+	< github.com/golang-fips/openssl/v2/bbig
-+	< github.com/microsoft/go-crypto-darwin/bbig
-+	< github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
  	< crypto/rand
- 	< crypto/ed25519 # depends on crypto/rand.Reader
-@@ -837,7 +848,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -837,7 +858,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -296,7 +316,7 @@ index e3e01077c18b17..e017efb1562379 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -847,7 +858,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -847,7 +868,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index ea282f44d29..2004ba0694d 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,10 +13,10 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/boring_linux.go   | 279 +++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++
  src/crypto/internal/backend/cng_windows.go    | 336 ++++++++++++++++
  src/crypto/internal/backend/common.go         |  59 +++
- src/crypto/internal/backend/darwin_darwin.go  | 359 +++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 359 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/internal/backend/fips140/darwin.go |  11 +
@@ -24,11 +24,15 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
- .../internal/backend/fips140/openssl.go       |  41 ++
+ .../internal/backend/fips140/openssl_cgo.go   |  57 +++
+ .../internal/backend/fips140/openssl_nocgo.go |  15 +
+ .../internal/opensslsetup/opensslsetup.go     |  70 ++++
+ .../opensslsetup/opensslsetup_test.go         |  92 +++++
+ .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 368 ++++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 331 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/go/build/deps_test.go                     |   7 +-
+ src/go/build/deps_test.go                     |  27 +-
  .../exp_allowcryptofallback_off.go            |   9 +
  .../exp_allowcryptofallback_on.go             |   9 +
  src/internal/goexperiment/flags.go            |   8 +
@@ -45,7 +49,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 41 files changed, 2508 insertions(+), 1 deletion(-)
+ 45 files changed, 2690 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -65,7 +69,11 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl_cgo.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl_nocgo.go
+ create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
+ create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
+ create mode 100644 src/crypto/internal/backend/internal/opensslsetup/stub.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
@@ -1792,23 +1800,39 @@ index 00000000000000..83691d7dd42d51
 +func systemFIPSMode() bool {
 +	return false
 +}
-diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
+diff --git a/src/crypto/internal/backend/fips140/openssl_cgo.go b/src/crypto/internal/backend/fips140/openssl_cgo.go
 new file mode 100644
-index 00000000000000..2d126bcfc053de
+index 00000000000000..d9ea4e513db72d
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl.go
-@@ -0,0 +1,41 @@
++++ b/src/crypto/internal/backend/fips140/openssl_cgo.go
+@@ -0,0 +1,57 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto
++//go:build goexperiment.opensslcrypto && cgo
 +
 +package fips140
 +
-+import "syscall"
++import (
++	_ "crypto/internal/backend/internal/opensslsetup"
++	"syscall"
++
++	"github.com/golang-fips/openssl/v2"
++)
 +
++// systemFIPSMode reports whether the system is in FIPS mode.
++// It first checks the kernel, and if that is not available, it checks the
++// OpenSSL library.
 +func systemFIPSMode() bool {
++	if kernelFIPSMode() {
++		return true
++	}
++	return openssl.FIPS()
++}
++
++// kernelFIPSMode reports whether the kernel is in FIPS mode.
++func kernelFIPSMode() bool {
 +	var fd int
 +	for {
 +		var err error
@@ -1825,7 +1849,7 @@ index 00000000000000..2d126bcfc053de
 +			// If there is an error reading we could either panic or assume FIPS is not enabled.
 +			// Panicking would be too disruptive for apps that don't require FIPS.
 +			// If an app wants to be 100% sure that is running in FIPS mode
-+			// it should use boring.Enabled() or GODEBUG=fips140=1.
++			// it should use fips140.Enabled() or GODEBUG=fips140=1.
 +			return false
 +		}
 +	}
@@ -1839,6 +1863,215 @@ index 00000000000000..2d126bcfc053de
 +	// fips_enabled can be either '0' or '1'.
 +	return tmp[0] == '1'
 +}
+diff --git a/src/crypto/internal/backend/fips140/openssl_nocgo.go b/src/crypto/internal/backend/fips140/openssl_nocgo.go
+new file mode 100644
+index 00000000000000..60ed26591d05d8
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/openssl_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto && !cgo
++
++// The opensslcrypto experiment can be used even when cgo
++// is disabled. The OpenSSL backend can't be imported
++// without cgo, so we use a stub systemFIPSMode implementation.
++
++package fips140
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
+new file mode 100644
+index 00000000000000..c6c1f53e7452ab
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
+@@ -0,0 +1,70 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto && cgo
++
++// opensslsetup is a package that initializes the OpenSSL library.
++// It doesn't export any symbol, but blank importing it has the
++// side effect of initializing the OpenSSL library.
++package opensslsetup
++
++import (
++	"syscall"
++
++	"github.com/golang-fips/openssl/v2"
++)
++
++// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
++// FreeBSD library version numbering does not directly align to the version of OpenSSL.
++// Its preferred search order is 11 -> 111.
++// Some distributions use 1.0.0 and others (such as Debian) 1.0.2 to refer to the same OpenSSL 1.0.2 version.
++// Fedora derived distros use different naming for the version 1.0.x.
++var knownVersions = [...]string{"3", "1.1", "11", "111", "1.0.2", "1.0.0", "10"}
++
++const lcryptoPrefix = "libcrypto.so."
++
++func init() {
++	lib := library()
++	if err := openssl.Init(lib); err != nil {
++		panic("opensslcrypto: can't initialize OpenSSL " + lib + ": " + err.Error())
++	}
++}
++
++// library returns the name of the OpenSSL library to use.
++// It first checks the environment variable GO_OPENSSL_VERSION_OVERRIDE.
++// If that is not set, it searches a well-known list of library names.
++// If no library is found, it returns "libcrypto.so".
++func library() string {
++	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
++		return lcryptoPrefix + version
++	}
++	if lib := searchKnownLibrary(); lib != "" {
++		return lib
++	}
++	return lcryptoPrefix[:len(lcryptoPrefix)-1] // no version found, try without version suffix
++}
++
++// checkVersion is a variable that holds the openssl.CheckVersion function.
++// It is initialized in the init function to allow overriding in tests.
++var checkVersion = openssl.CheckVersion
++
++// searchKnownLibrary returns the name of the highest available FIPS-enabled version of OpenSSL
++// using the known library suffixes.
++// If no FIPS-enabled version is found, it returns the name of the highest available version.
++// If no version is found, it returns an empty string.
++func searchKnownLibrary() string {
++	var lcryptoFallback string
++	for _, v := range knownVersions {
++		lcryptoCandidate := lcryptoPrefix + v
++		if exists, fips := checkVersion(lcryptoCandidate); exists {
++			if fips {
++				return lcryptoCandidate
++			}
++			if lcryptoFallback == "" {
++				lcryptoFallback = lcryptoCandidate
++			}
++		}
++	}
++	return lcryptoFallback
++}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
+new file mode 100644
+index 00000000000000..e9f67449710d65
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
+@@ -0,0 +1,92 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto && cgo
++
++package opensslsetup
++
++import "testing"
++
++func mockCheckVersion(t *testing.T, fn func(string) (bool, bool)) {
++	original := checkVersion
++	t.Cleanup(func() {
++		checkVersion = original
++	})
++	checkVersion = fn
++}
++
++func assertLibrary(t *testing.T, expected string) {
++	if result := library(); result != expected {
++		t.Errorf("expected %s, got %s", expected, result)
++	}
++}
++
++func TestLibraryWithEnvOverride(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "1.1")
++	mockCheckVersion(t, func(s string) (bool, bool) { return false, false })
++	assertLibrary(t, "libcrypto.so.1.1")
++}
++
++func TestLibraryWithKnownVersion(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
++
++	const maxLib = "libcrypto.so.3"
++
++	t.Run("AllExistsNoneFIPS", func(t *testing.T) {
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, false
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, maxLib)
++			})
++		}
++	})
++
++	t.Run("OnlyOneExists", func(t *testing.T) {
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				expected := "libcrypto.so." + v
++				mockCheckVersion(t, func(s string) (bool, bool) {
++					if s == expected {
++						return true, false
++					}
++					return false, false
++				})
++				assertLibrary(t, expected)
++			})
++		}
++	})
++
++	t.Run("AllExistsOnlyOneFIPS", func(t *testing.T) {
++		fipsLib := "libcrypto.so.1.1"
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, s == fipsLib
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, fipsLib)
++			})
++		}
++	})
++
++	t.Run("AllExistsAndAreFIPS", func(t *testing.T) {
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, true
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, maxLib)
++			})
++		}
++	})
++}
++
++func TestLibraryNoVersionFound(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
++	mockCheckVersion(t, func(string) (bool, bool) {
++		return false, false
++	})
++	assertLibrary(t, "libcrypto.so")
++}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/stub.go b/src/crypto/internal/backend/internal/opensslsetup/stub.go
+new file mode 100644
+index 00000000000000..3b92bfc5fbabf6
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/stub.go
+@@ -0,0 +1,8 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Placeholder to allow the opensslsetup package to be imported
++// without cgo enabled or without goexperiment.opensslcrypto.
++
++package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
 index 00000000000000..7c3a95c2c64a2d
@@ -2087,10 +2320,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..a66c66ca386847
+index 00000000000000..fe575dd8c71435
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,368 @@
+@@ -0,0 +1,331 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2106,9 +2339,9 @@ index 00000000000000..a66c66ca386847
 +	"crypto"
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
++	_ "crypto/internal/backend/internal/opensslsetup"
 +	"crypto/internal/boring/sig"
 +	"hash"
-+	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2"
 +)
@@ -2118,44 +2351,7 @@ index 00000000000000..a66c66ca386847
 +
 +type BigInt = openssl.BigInt
 +
-+// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
-+// FreeBSD library version numbering does not directly align to the version of OpenSSL.
-+// Its preferred search order is 11 -> 111.
-+// Some distributions use 1.0.0 and others (such as Debian) 1.0.2 to refer to the same OpenSSL 1.0.2 version.
-+// Fedora derived distros use different naming for the version 1.0.x.
-+var knownVersions = [...]string{"3", "1.1", "11", "111", "1.0.2", "1.0.0", "10"}
-+
-+const lcryptoPrefix = "libcrypto.so."
-+
 +func init() {
-+	var lcrypto string
-+	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
-+		lcrypto = lcryptoPrefix + version
-+	} else {
-+		// Try to find the highest available FIPS-enabled version of OpenSSL
-+		// using the known library suffixes.
-+		var lcryptoFallback string
-+		for _, v := range knownVersions {
-+			lcryptoCandidate := lcryptoPrefix + v
-+			if exists, fips := openssl.CheckVersion(lcryptoCandidate); exists {
-+				if fips {
-+					lcrypto = lcryptoCandidate
-+					break
-+				}
-+				if lcryptoFallback == "" {
-+					lcryptoFallback = lcryptoCandidate
-+				}
-+			}
-+		}
-+		if lcrypto == "" && lcryptoFallback != "" {
-+			// There is no FIPS-enabled version of OpenSSL,
-+			// use the highest available version.
-+			lcrypto = lcryptoFallback
-+		}
-+	}
-+	if err := openssl.Init(lcrypto); err != nil {
-+		panic("opensslcrypto: can't initialize OpenSSL " + lcrypto + ": " + err.Error())
-+	}
 +	if fips140.Enabled() {
 +		// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
 +		// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
@@ -2476,39 +2672,61 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e017efb1562379..ab5539f978a266 100644
+index 72e56b5da8e582..45ceb3e2b4ce11 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -493,6 +493,8 @@ var depsRules = `
- 	< crypto/internal/fips140/rsa
- 	< FIPS;
+@@ -511,6 +511,11 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
+ 	< github.com/microsoft/go-crypto-winnative/cng;
  
-+	syscall < crypto/internal/backend/fips140;
++	syscall,
++	github.com/golang-fips/openssl/v2
++	< crypto/internal/backend/internal/opensslsetup
++	< crypto/internal/backend/fips140;
 +
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -506,7 +508,8 @@ var depsRules = `
- 	FIPS, internal/godebug, hash, embed, encoding/binary,
+@@ -521,16 +526,28 @@ var depsRules = `
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+ 	sync/atomic < crypto/internal/boring/bcache;
+ 
++	crypto,	crypto/cipher,
++	crypto/internal/boring/sig, crypto/internal/boring/syso
++	< crypto/internal/boring;
++
++	crypto/internal/boring/sig,
++	crypto/internal/backend/fips140,
++	github.com/golang-fips/openssl/v2,
++	github.com/microsoft/go-crypto-darwin/xcrypto,
++	github.com/microsoft/go-crypto-winnative/cng,
++	crypto/internal/boring
++	< crypto/internal/backend;
++
+ 	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
--	crypto/internal/boring/bcache
-+	crypto/internal/boring/bcache,
-+	crypto/internal/backend/fips140
- 	< crypto/internal/fips140only
- 	< crypto
- 	< crypto/subtle
-@@ -522,6 +525,7 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
- 	< github.com/microsoft/go-crypto-winnative/cng
- 	< crypto/internal/boring
-+	< crypto/internal/backend
+ 	crypto/internal/boring/bcache,
+ 	crypto/internal/fips140only,
+ 	crypto,
+-	crypto/cipher
++	crypto/cipher,
++	crypto/internal/backend
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
+-	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -546,6 +550,7 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-darwin/bbig
- 	< github.com/microsoft/go-crypto-winnative/cng/bbig
+@@ -554,8 +571,12 @@ var depsRules = `
+ 	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
+ 	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
+ 
+-	CRYPTO, FMT, math/big
++	CRYPTO, FMT, math/big,
++	github.com/golang-fips/openssl/v2/bbig,
++	github.com/microsoft/go-crypto-darwin/bbig,
++	github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
  	< crypto/rand
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 6fd482bdc3c..034c30c66fe 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -2557,19 +2557,19 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index ab5539f978a266..484c95dfb65f60 100644
+index e4e07843c8ce55..87e92a5d6d1ee9 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -495,7 +495,7 @@ var depsRules = `
- 
- 	syscall < crypto/internal/backend/fips140;
+@@ -510,7 +510,7 @@ var depsRules = `
+ 	< crypto/internal/backend/internal/opensslsetup
+ 	< crypto/internal/backend/fips140;
  
 -	FIPS, internal/godebug < crypto/fips140;
 +	FIPS, internal/godebug, crypto/internal/backend/fips140 < crypto/fips140;
  
  	crypto, hash !< FIPS;
  
-@@ -539,6 +539,7 @@ var depsRules = `
+@@ -551,6 +551,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -2577,7 +2577,7 @@ index ab5539f978a266..484c95dfb65f60 100644
  	< CRYPTO;
  
  	CGO, fmt, net !< CRYPTO;
-@@ -564,7 +565,7 @@ var depsRules = `
+@@ -576,7 +577,7 @@ var depsRules = `
  
  	# TLS, Prince of Dependencies.
  

From 08c5a085eaaf5a6eb0bd610e17f6dbf927cf9dcf Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 4 Feb 2025 20:04:03 +0100
Subject: [PATCH 223/887] retry Darwin CI builds (#1524)

---
 eng/pipeline/stages/builders-to-stages.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 5234e5f4b75..4d0905278c2 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -43,6 +43,10 @@ stages:
                 # "Access Denied" during EXE copying and general flakiness during tests.
                 ${{ if eq(builder.os, 'windows') }}:
                   retryAttempts: [1, 2, 3, 4, "FINAL"]
+                # Attempt to retry the build on macOS to mitigate flakiness:
+                # "read: connection reset by peer" in cmd/go tests
+                ${{ if eq(builder.os, 'darwin') }}:
+                  retryAttempts: [1, 2, "FINAL"]
 
     - ${{ if eq(parameters.sign, true) }}:
       - template: pool.yml

From 50908a9ba1f46c99fe7973e77d5164cebc431e6a Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 4 Feb 2025 20:04:40 +0100
Subject: [PATCH 224/887] Override prod branch classification settings (#1522)

* override prod branch classification settings

* add microsoft/main
---
 .azuredevops/policies/branchClassification.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 .azuredevops/policies/branchClassification.yml

diff --git a/.azuredevops/policies/branchClassification.yml b/.azuredevops/policies/branchClassification.yml
new file mode 100644
index 00000000000..ac2bb61d472
--- /dev/null
+++ b/.azuredevops/policies/branchClassification.yml
@@ -0,0 +1,15 @@
+# Schema taken from https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/product-catalog/branch-classification/branch-classification#optional-update-branch-classification-at-the-repo.
+name: branch_classification
+description: Branch classification configuration for repository
+resource: repository
+disabled: false
+where:
+configuration:
+  branchClassificationSettings:
+    defaultClassification: nonproduction
+    ruleset:
+      - name: prod-branches
+        branchNames:
+          - microsoft/main
+          - microsoft/release-branch.go*
+        classification: production

From 7dc0b5eaa6ac80d24ac03252381944e4e877cd46 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 4 Feb 2025 20:22:31 -0800
Subject: [PATCH 225/887] Add dotnet-public NuGet feed to Release Studio
 project

This helps the project be resilient to .NET SDK version changes in the build agent.
---
 eng/release-studio/NuGet.config | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/eng/release-studio/NuGet.config b/eng/release-studio/NuGet.config
index ec763b4e4a8..6ea4355ea85 100644
--- a/eng/release-studio/NuGet.config
+++ b/eng/release-studio/NuGet.config
@@ -7,6 +7,12 @@
   <packageSources>
     <clear />
     <add key="MicroBuildToolset" value="https://pkgs.dev.azure.com/dnceng/_packaging/MicroBuildToolset/nuget/v3/index.json" />
+    <!--
+      When the .NET SDK version doesn't match the TargetFramework, get targeting
+      packs (Microsoft.NETCore.App.Ref, Microsoft.WindowsDesktop.App.Ref, and
+      Microsoft.AspNetCore.App.Ref) from here.
+    -->
+    <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" />
   </packageSources>
   <disabledPackageSources>
     <clear />

From ee59bf71a9905d1c20f4e949d9c7ff71f7af6e70 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 7 Feb 2025 11:31:06 +0100
Subject: [PATCH 226/887] drop `gotest.tools/gotestsum` dependency (#1532)

---
 eng/_util/README.md                      |  22 -----
 eng/_util/buildutil/buildutil.go         |  28 ++++++
 eng/_util/cmd/build/build.go             |  41 +++------
 eng/_util/cmd/run-builder/run-builder.go | 100 ++++++---------------
 eng/_util/go.mod                         |  10 ---
 eng/_util/go.sum                         | 106 -----------------------
 eng/pipeline/stages/run-stage.yml        |   5 +-
 7 files changed, 68 insertions(+), 244 deletions(-)

diff --git a/eng/_util/README.md b/eng/_util/README.md
index 6bd3f0c301e..da664d9c3a9 100644
--- a/eng/_util/README.md
+++ b/eng/_util/README.md
@@ -16,25 +16,3 @@ The minimal dependencies are themselves tested by
 `TestMinimalCommandDependencies` in `testutil`. It uses `go list` to ensure that
 all commands that use more than the minimal set of dependencies include the
 conditional panic upon init.
-
-### Support for gotestsum wrapping
-The `run-builder` command implements a gotestsum wrapper around the `build`
-command. This isn't implemented in `build` itself to keep dependencies for the
-signed build low. There are some features in the build command that accommodate
-gotestsum but don't make sense as standalone features a dev would use. For
-example, JSON test output and stderr redirection to stdout.
-
-The high-level execution flow looks roughly like this when running in CI:
-
-* `eng/pipeline/jobs/run-stage.yml`  
-  runs:
-* `eng/run.ps1 run-builder -test -builder linux-amd64-test -junitfile [...]`  
-  which runs the Go function:
-* `gotestsum.Run(... eng/run.ps1 build -test -json ...)`  
-  which runs and captures the output of:
-* `eng/run.ps1 build -test -json`  
-  which runs [`cmd/build/build.go`](cmd/build/build.go) in this module.
-
-> [!NOTE]
-> This support is not currently used in our CI because this process seems to cut off some test output:
-> [microsoft/go#1114](https://github.com/microsoft/go/issues/1114).
diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index 6177f2f601d..b6cdb774ed6 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -6,8 +6,10 @@ package buildutil
 
 import (
 	"fmt"
+	"io"
 	"log"
 	"os"
+	"os/exec"
 	"strconv"
 	"strings"
 )
@@ -120,3 +122,29 @@ func UnassignGOROOT() error {
 	}
 	return nil
 }
+
+// RunAndSaveStdOut runs a command and outputs the stdout to [os.Stdout] and,
+// if outPath is not empty, to a file at outPath.
+func RunAndSaveStdOut(cmdline []string, outPath string) error {
+	var stdout io.Writer = os.Stdout
+	if outPath != "" {
+		f, err := os.Create(outPath)
+		if err != nil {
+			return err
+		}
+		defer func() {
+			closeErr := f.Close()
+			if err == nil {
+				err = closeErr
+			}
+		}()
+		stdout = io.MultiWriter(stdout, f)
+	}
+
+	c := exec.Command(cmdline[0], cmdline[1:]...)
+	c.Stdout = stdout
+	c.Stderr = os.Stderr
+
+	fmt.Printf("---- Running command: %v\n", c.Args)
+	return c.Run()
+}
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index e0d0ec0e626..220c0c789e9 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -53,6 +53,7 @@ func main() {
 			"For more refresh options, use the top level 'submodule-refresh' command instead of 'build'.")
 
 	flag.StringVar(&o.Experiment, "experiment", "", "Include this string in GOEXPERIMENT.")
+	flag.StringVar(&o.TestOutFile, "testout", "", "Write the tets output to this path if this builder runs tests.")
 
 	o.MaxMakeAttempts = buildutil.MaxMakeRetryAttemptsOrExit()
 
@@ -70,22 +71,22 @@ func main() {
 
 	// If build returns an error, handle it here with panic. Having build return an error makes it
 	// easier to adapt build in the future to somewhere else in the module to use it as an API. (For
-	// example, "build" could be changed to "Build" and run-builder could use it. The reason this
-	// hasn't been done yet is that gotestsum can only run a command line, not a Go function.)
+	// example, "build" could be changed to "Build" and run-builder could use it.)
 	if err := build(o); err != nil {
 		panic(err)
 	}
 }
 
 type options struct {
-	SkipBuild  bool
-	Test       bool
-	JSON       bool
-	PackBuild  bool
-	PackSource bool
-	CreatePDB  bool
-	Refresh    bool
-	Experiment string
+	SkipBuild   bool
+	Test        bool
+	JSON        bool
+	PackBuild   bool
+	PackSource  bool
+	CreatePDB   bool
+	Refresh     bool
+	Experiment  string
+	TestOutFile string
 
 	MaxMakeAttempts int
 }
@@ -224,25 +225,7 @@ func build(o *options) error {
 			testCommandLine = append(testCommandLine, "-json")
 		}
 
-		testCmd := exec.Command(testCommandLine[0], testCommandLine[1:]...)
-		testCmd.Stdout = os.Stdout
-		// Redirect stderr to stdout. We expect some lines of stderr to always show up during the
-		// test run, but "build"'s caller might not understand that.
-		//
-		// For example, if we're running in CI, gotestsum may be capturing our output to report in a
-		// JUnit file. If gotestsum detects output in stderr, it prints it in an error message. This
-		// error message stands out, and could mislead someone trying to diagnose a failed test run.
-		// Redirecting all stderr output avoids this scenario. (See /eng/_util/README.md for more
-		// info on why we may be wrapped by gotestsum.)
-		//
-		// An example of benign stderr output is when the tests check for machine capabilities. A
-		// Cgo static linking test emits "/usr/bin/ld: cannot find -lc" when it checks the
-		// capabilities of "ld" on the current system.
-		//
-		// The stderr output isn't used to determine whether the tests succeeded or not. (The
-		// redirect doesn't cause an issue where tests succeed that should have failed.)
-		testCmd.Stderr = os.Stdout
-		if err := runCmd(testCmd); err != nil {
+		if err := buildutil.RunAndSaveStdOut(testCommandLine, o.TestOutFile); err != nil {
 			return err
 		}
 	}
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 80f9cf275f0..9b52f62ac5d 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -14,7 +14,6 @@ import (
 	"strings"
 
 	"github.com/microsoft/go/_util/buildutil"
-	gotestsumcmd "gotest.tools/gotestsum/cmd"
 )
 
 const description = `
@@ -40,7 +39,8 @@ func main() {
 	var builder = flag.String("builder", "", "[Required] Specify a builder to run. Note, this may be destructive!")
 	var experiment = flag.String("experiment", "", "Include this string in GOEXPERIMENT.")
 	var fipsMode = flag.Bool("fipsmode", false, "Run the Go tests in FIPS mode.")
-	var jUnitFile = flag.String("junitfile", "", "Write a JUnit XML file to this path if this builder runs tests.")
+	var json = flag.Bool("json", false, "Runs tests with -json flag to emit verbose results in JSON format. For use in CI.")
+	var testOutFile = flag.String("testout", "", "Write the tets output to this path if this builder runs tests.")
 	var build = flag.Bool("build", false, "Run the build.")
 	var test = flag.Bool("test", false, "Run the tests.")
 
@@ -134,7 +134,13 @@ func main() {
 		// validate the run.ps1 script with "build" tool works to build and test Go. It runs a
 		// subset of the "test" builder's tests, but it uses the dev workflow.
 		testCmdline := append(buildCmdline, "-skipbuild", "-test")
-		if err := runTest(testCmdline, *jUnitFile); err != nil {
+		if *json {
+			testCmdline = append(testCmdline, "-json")
+		}
+		if *testOutFile != "" {
+			testCmdline = append(testCmdline, "-testout", *testOutFile)
+		}
+		if err := run(testCmdline...); err != nil {
 			log.Fatal(err)
 		}
 
@@ -194,15 +200,23 @@ func main() {
 			)
 		}
 
-		err := runTest(cmdline, *jUnitFile)
-		// If we got an ExitError, the error message was already printed by the command. We just
-		// need to exit with the same exit code.
-		if exitErr, ok := err.(*exec.ExitError); ok {
-			os.Exit(exitErr.ExitCode())
+		if *json {
+			cmdline = append(cmdline, "-json")
 		}
-		if err != nil {
-			// Something else happened: alert the user.
-			log.Fatal(err)
+
+		if *dryRun {
+			fmt.Printf("---- Dry run. Would have run test command: %v\n", cmdline)
+		} else {
+			err := buildutil.RunAndSaveStdOut(cmdline, *testOutFile)
+			// If we got an ExitError, the error message was already printed by the command. We just
+			// need to exit with the same exit code.
+			if exitErr, ok := err.(*exec.ExitError); ok {
+				os.Exit(exitErr.ExitCode())
+			}
+			if err != nil {
+				// Something else happened: alert the user.
+				log.Fatal(err)
+			}
 		}
 	}
 }
@@ -244,67 +258,3 @@ func runOrPanic(cmdline ...string) {
 		panic(err)
 	}
 }
-
-// runTest runs a testing command. If given a JUnit XML file path, runs the test command inside a
-// gotestsum command that converts the JSON output into JUnit XML and writes it to a file at this
-// path.
-func runTest(cmdline []string, jUnitFile string) error {
-	if jUnitFile != "" {
-		// Emit verbose JSON results in stdout for conversion.
-		cmdline = append(cmdline, "-json")
-	}
-
-	if *dryRun {
-		fmt.Printf("---- Dry run. Would have run test command: %v\n", cmdline)
-		return nil
-	}
-
-	if jUnitFile != "" {
-		// Set up gotestsum args. We rely on gotestsum to run the command, capture its output, and
-		// convert it to JUnit test result XML.
-		gotestsumArgs := append(
-			[]string{
-				"--junitfile", jUnitFile,
-				"--hide-summary", "skipped,output",
-				"--format", "standard-quiet",
-				// When a builder runs tests, some JSON lines are mixed in with standard output
-				// lines. Normally gotestsum treats this as an error, but we need to allow it.
-				"--ignore-non-json-output-lines",
-				// We don't use 'go test', we pass our own raw command. ("cmdline" args.)
-				"--raw-command",
-			},
-			cmdline...,
-		)
-
-		// gotestsum embeds the current version of Go into the JUnit file. This causes some
-		// problems, so use GOVERSION to override the behavior and use a simple placeholder.
-		//
-		// To find the Go version, gotestsum first looks up GOVERSION in env. If it doesn't exist,
-		// then it looks for "go" in PATH and uses the output of "go version". If Go doesn't exist
-		// in PATH, then gotestsum emits a warning.
-		//
-		// There are two problems. First, in CI, we don't have Go in PATH, so the warning shows up.
-		// It's shown as the last line of output in CI, so it seems more important than it really
-		// is. Second, even if gotestsum does find Go in PATH, it's the wrong version. We're running
-		// tests using the Go we just built, which is never in PATH. Both of these problems could
-		// end up being red herrings in the future, but we prevent them by setting GOVERSION.
-		//
-		// We could run "go version", parse the output, and use that as GOVERSION. However, this
-		// doesn't seem useful, because we know that we ran tests using the Go we just built.
-		env("GOVERSION", "gotestsum_go_version_placeholder")
-
-		fmt.Printf("---- Running gotestsum command: %v\n", gotestsumArgs)
-
-		// Use "ARG_0_PLACEHOLDER" as an arbitrary placeholder name. This is because here, we're
-		// essentially directly calling gotestsum's main method. The 0th arg to a main method is
-		// usually the program's path. This is used in the program's help text to give example
-		// commands that the user can copy-paste no matter where the executable lives or if it's
-		// been renamed. However, run-builder uses gotestsum as a library, so it's compiled into our
-		// binary and there is no actual 'gotestsum' program. We could pass run-builder's path, but
-		// that would be misleading if it ever shows up in gotestsum's output unexpectedly. Instead,
-		// pass an obvious placeholder.
-		return gotestsumcmd.Run("ARG_0_PLACEHOLDER", gotestsumArgs)
-	}
-	// If we don't have a jUnitFile target, run the command normally.
-	return run(cmdline...)
-}
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 106ee16c17e..9378b2eea5e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,20 +10,10 @@ require (
 	github.com/microsoft/go-infra v0.0.6
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
 	golang.org/x/sys v0.29.0
-	gotest.tools/gotestsum v1.12.0
 )
 
 require (
-	github.com/bitfield/gotestdox v0.2.2 // indirect
-	github.com/dnephin/pflag v1.0.7 // indirect
-	github.com/fatih/color v1.17.0 // indirect
-	github.com/fsnotify/fsnotify v1.7.0 // indirect
-	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.20 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/sync v0.10.0 // indirect
-	golang.org/x/term v0.20.0 // indirect
 	golang.org/x/text v0.21.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 4e6e7c69b14..4e3236a72fb 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -1,123 +1,17 @@
-github.com/bitfield/gotestdox v0.2.2 h1:x6RcPAbBbErKLnapz1QeAlf3ospg8efBsedU93CDsnE=
-github.com/bitfield/gotestdox v0.2.2/go.mod h1:D+gwtS0urjBrzguAkTM2wodsTQYFHdpx8eqRJ3N+9pY=
-github.com/dnephin/pflag v1.0.7 h1:oxONGlWxhmUct0YzKTgrpQv9AUA1wtPBn7zuSjJqptk=
-github.com/dnephin/pflag v1.0.7/go.mod h1:uxE91IoWURlOiTUIA8Mq5ZZkAv3dPUfZNaT80Zm7OQE=
-github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw=
-github.com/fatih/color v1.16.0/go.mod h1:fL2Sau1YI5c0pdGEVCbKQbLXB6edEj1ZgiY4NijnWvE=
-github.com/fatih/color v1.17.0 h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4=
-github.com/fatih/color v1.17.0/go.mod h1:YZ7TlrGPkiz6ku9fK3TLD/pl3CpsiFyu8N92HLgmosI=
-github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=
-github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
-github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
-github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
-github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
-github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
-github.com/mattn/go-isatty v0.0.17/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
-github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
-github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
-github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.6 h1:RB/Jx3bMC8I+16Ra9iy+HcrHe3Ss1iM46OZ0LzNUZ0Y=
 github.com/microsoft/go-infra v0.0.6/go.mod h1:L+TMMmm7bkfgUfx1FZmReNHXL9m4oqvc+bVXCuaKD30=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67 h1:i/EXV3vFmJ6UYZ8a4fM2ssKlvSstxvJfiUHau81iNZE=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M=
-github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA=
-github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
-golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
-golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
-golang.org/x/crypto v0.11.0/go.mod h1:xgJhtzW8F9jGdVFWZESrid1U1bjeNy4zgy5cRr/CIio=
-golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
-golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
-golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
-golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.6.0/go.mod h1:4mET923SAdbXp2ki8ey+zGs1SLqsuM2Y0uvdZR/fUNI=
-golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.9.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.16.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
-golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.12.0/go.mod h1:zEVYFnQC7m/vmpQFELhcD1EWkZlX69l4oqgmer6hfKA=
-golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
-golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
-golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
-golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
-golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.4.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
 golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
-golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
-golang.org/x/term v0.10.0/go.mod h1:lpqdcUyK/oCiQxvxVrppt5ggO2KCZ5QblwqPnfZ6d5o=
-golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
-golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
-golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58=
-golang.org/x/term v0.20.0 h1:VnkxpohqXaOBYJtBmEppKUG6mXpi+4O6purfc2+sMhw=
-golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
-golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
-golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.11.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
-golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.2.0/go.mod h1:y4OqIKeOV/fWJetJ8bXPU1sEVniLMIyDAZWeHdV+NTA=
-golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.11.0/go.mod h1:anzJrxPjNtfgiYQYirP2CPGzGLxrH2u2QBhn6Bf3qY8=
-golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
-golang.org/x/tools v0.19.0/go.mod h1:qoJWxmGSIBmAeriMx19ogtrEPrGtDbPK634QFIcLAhc=
 golang.org/x/tools v0.28.0 h1:WuB6qZ4RPCQo5aP3WdKZS7i595EdWqWR8vqJTlwTVK8=
 golang.org/x/tools v0.28.0/go.mod h1:dcIOrVd3mfQKTgrDVQHqCPMWy6lnhfhtX3hLXYVLfRw=
-golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-gotest.tools/gotestsum v1.12.0 h1:CmwtaGDkHxrZm4Ib0Vob89MTfpc3GrEFMJKovliPwGk=
-gotest.tools/gotestsum v1.12.0/go.mod h1:fAvqkSptospfSbQw26CTYzNwnsE/ztqLeyhP0h67ARY=
-gotest.tools/v3 v3.5.1 h1:EENdUnS3pdur5nybKYIh2Vfgc8IUNBjxDPSjtiJcOzU=
-gotest.tools/v3 v3.5.1/go.mod h1:isy3WKz7GK6uNw/sbHzfKBLvlvXwUyV06n6brMxxopU=
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 3a5d7af9612..328b724fc73 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -216,8 +216,7 @@ stages:
                   pwsh eng/run.ps1 build
               displayName: Build
 
-          # Use run-builder for any configuration that includes tests. run-builder uses the "gotestsum"
-          # module to convert test results to a JUnit file that Azure DevOps can understand.
+          # Use run-builder for any configuration that includes tests.
           - ${{ else }}:
             - ${{ if eq(parameters.builder.os, 'windows') }}:
               - pwsh: |
@@ -281,6 +280,8 @@ stages:
                     ) -join ';'
                   }
 
+                  # Test publishing currently used in our CI because this process seems to cut off some test output:
+                  # https://github.com/microsoft/go/issues/1114.
                   eng/run.ps1 cmdscan -envprefix GO_CMDSCAN_RULE_ -successvar TEST_BUILDER_SUCCESSFUL -- `
                     pwsh eng/run.ps1 run-builder -test `
                       -builder '${{ parameters.builder.os }}-${{ parameters.builder.arch }}-${{ parameters.builder.config }}' `

From 190482cb9c956db5470d680db84edccf777ebd81 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Feb 2025 10:32:15 +0000
Subject: [PATCH 227/887] build(deps): bump golang.org/x/sys from 0.29.0 to
 0.30.0 in /eng/_util

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.29.0 to 0.30.0.
- [Commits](https://github.com/golang/sys/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 9378b2eea5e..3ac18a8c002 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.22.0
 require (
 	github.com/microsoft/go-infra v0.0.6
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
-	golang.org/x/sys v0.29.0
+	golang.org/x/sys v0.30.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 4e3236a72fb..f9ed168a89b 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -9,8 +9,8 @@ github.com/microsoft/go-infra v0.0.6 h1:RB/Jx3bMC8I+16Ra9iy+HcrHe3Ss1iM46OZ0LzNU
 github.com/microsoft/go-infra v0.0.6/go.mod h1:L+TMMmm7bkfgUfx1FZmReNHXL9m4oqvc+bVXCuaKD30=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67 h1:i/EXV3vFmJ6UYZ8a4fM2ssKlvSstxvJfiUHau81iNZE=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
-golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
+golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
 golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
 golang.org/x/tools v0.28.0 h1:WuB6qZ4RPCQo5aP3WdKZS7i595EdWqWR8vqJTlwTVK8=

From b1892205c76e7b3752b0f23fdb7042e766b76de7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 7 Feb 2025 11:10:20 +0000
Subject: [PATCH 228/887] build(deps): bump github/codeql-action from 3.28.8 to
 3.28.9

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.8 to 3.28.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/dd746615b3b9d728a6a37ca2045b68ca76d4841a...9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b64893ca067..da1104a34b3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
         with:
           category: /language:go

From eefb598ae2ae30c6c7de111eaef804191d3d692d Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Sun, 9 Feb 2025 23:14:42 -0800
Subject: [PATCH 229/887] remove allowcryptofallback from runtime.Version()
 (#1540)

Co-authored-by: Quim Muntal <qmuntaldiaz@microsoft.com>
---
 patches/0004-Use-crypto-backends.patch | 33 +++++++++++++++++++++++++-
 1 file changed, 32 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 034c30c66fe..030657c00a9 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -13,6 +13,7 @@ Subject: [PATCH] Use crypto backends
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
  src/cmd/link/internal/ld/lib.go               |   1 +
+ src/cmd/link/internal/ld/main.go              |  12 +-
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
@@ -84,7 +85,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 80 files changed, 1120 insertions(+), 111 deletions(-)
+ 81 files changed, 1131 insertions(+), 112 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -282,6 +283,36 @@ index 2d8f964f3594c6..a587e1abde57c9 100644
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",
  	"crypto/x509",
+diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
+index 7614b6d194facf..f0f53ab2bab047 100644
+--- a/src/cmd/link/internal/ld/main.go
++++ b/src/cmd/link/internal/ld/main.go
+@@ -44,6 +44,7 @@ import (
+ 	"os"
+ 	"runtime"
+ 	"runtime/pprof"
++	"slices"
+ 	"strconv"
+ 	"strings"
+ )
+@@ -185,7 +186,16 @@ func Main(arch *sys.Arch, theArch Arch) {
+ 
+ 	buildVersion := buildcfg.Version
+ 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
+-		buildVersion += " X:" + goexperiment
++		// buildVersion is intended to contain non-default experiment flags.
++		// The Microsoft Go toolchain default behavior is to set the
++		// allowcryptofallback experiment, so we don't include it in the
++		// buildVersion string.
++		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
++			return s == "allowcryptofallback"
++		}), ",")
++		if goexperiment != "" {
++			buildVersion += " X:" + goexperiment
++		}
+ 	}
+ 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
+ 
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
 index 5bc2d13d673e0a..b803c77be62a66 100644
 --- a/src/crypto/aes/aes.go

From 16425663c4a5ad3c715e4f64361e3dfad6a3af58 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Feb 2025 19:25:44 +0000
Subject: [PATCH 230/887] correct references to Microsoft build of Go (#1542)

---
 README.md                                     |  8 ++---
 docs/go1.23.md                                |  2 +-
 eng/README.md                                 |  8 ++---
 eng/_util/cmd/sign/README.md                  |  2 +-
 eng/_util/cmd/sign/sign.go                    |  2 +-
 eng/_util/go-install.ps1                      | 24 ++++++-------
 eng/_util/go.mod                              |  2 +-
 eng/_util/go.sum                              |  4 +--
 eng/doc/CrossPlatformCryptography.md          | 22 ++++++------
 eng/doc/DeveloperGuide.md                     | 12 +++----
 eng/doc/fips/README.md                        | 34 +++++++++----------
 eng/doc/fips/UserGuide.md                     | 10 +++---
 eng/pipeline/stages/run-stage.yml             |  2 +-
 eng/run.ps1                                   |  4 +--
 eng/signing/README.md                         |  2 +-
 patches/0002-Vendor-crypto-backends.patch     |  2 +-
 patches/0004-Use-crypto-backends.patch        |  6 ++--
 .../0008-remove-long-path-support-hack.patch  |  4 +--
 patches/README.md                             |  4 +--
 19 files changed, 77 insertions(+), 77 deletions(-)

diff --git a/README.md b/README.md
index 7064b0dc31c..a3d1fd14b70 100644
--- a/README.md
+++ b/README.md
@@ -108,17 +108,17 @@ The first step is to clone this repository using Git and check out the desired
 tag or commit. The `zip` file that GitHub offers for download is incomplete: it
 doesn't include the `go` submodule.
 
-If you want to contribute to the Microsoft Go project, read the [Developer
+If you want to contribute to the Microsoft for Go developers project, read the [Developer
 Guide](eng/doc/DeveloperGuide.md). It lists the steps we recommend to set up a
-Microsoft Go development environment, execute your first Microsoft Go build, run
+Microsoft build of Go development environment, execute your first build, run
 the standard library test suite, and contribute a PR.
 
-If you just want to build Microsoft Go on your own machine, you may find it more
+If you just want to build on your own machine, you may find it more
 convenient to use the tools provided by the `eng/run.ps1` script. We use this
 script for CI builds. See [eng/README.md](eng/README.md) for more details about
 `eng/run.ps1` and other repository infrastructure.
 
-Once built, the Microsoft Go binary is found at `go/bin/go`.
+Once built, the Microsoft build of Go binary is found at `go/bin/go`.
 
 ## Contributing
 
diff --git a/docs/go1.23.md b/docs/go1.23.md
index d9b9f56fa98..c99b2796226 100644
--- a/docs/go1.23.md
+++ b/docs/go1.23.md
@@ -1,3 +1,3 @@
-# Microsoft Go 1.23 release notes
+# Microsoft build of Go 1.23 release notes
 
 After the release of 1.23, 1.21 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).
diff --git a/eng/README.md b/eng/README.md
index 5f43b5fabb3..9a8786749f2 100644
--- a/eng/README.md
+++ b/eng/README.md
@@ -64,12 +64,12 @@ complete, to match the content of the official binary releases of Go.
 
 ## Patch files
 
-The Microsoft Go repository uses patch files to store changes to the `go`
+The Microsoft build of Go repository uses patch files to store changes to the `go`
 submodule. The patch files are found in [`/patches`](/patches).
 
 We created [the `git-go-patch` tool][git-go-patch] to develop and maintain the
-patch files. We wrote this tool specifically for the Microsoft Go project. It's
-a Go program that can be invoked as `git go-patch` after it's installed. See
+patch files. We wrote this tool specifically for the Microsoft for Go developers project.
+It's a Go program that can be invoked as `git go-patch` after it's installed. See
 [the `git-go-patch` readme][git-go-patch] for more information.
 
 We also have some utilities in this repository to apply patches without
@@ -79,7 +79,7 @@ installing `git-go-patch`:
   patches.
   * Pass `-commits` to apply each patch as a separate commit.
 * `pwsh eng/run.ps1 build -refresh` refreshes the submodule and applies patches
-  and then goes on to build Microsoft Go.
+  and then goes on to build the Microsoft build of Go.
 
 The patch files are ordinary Git patches and can also be applied manually
 without any custom tooling. Git commands like [`git
diff --git a/eng/_util/cmd/sign/README.md b/eng/_util/cmd/sign/README.md
index a74a2beffdd..56f2794154c 100644
--- a/eng/_util/cmd/sign/README.md
+++ b/eng/_util/cmd/sign/README.md
@@ -1,4 +1,4 @@
-# `sign` and the Microsoft Go signing infrastructure
+# `sign` and the Microsoft build of Go signing infrastructure
 
 Most of the logic for signing (extracting files, repackaging, creating checksums) is implemented by this `sign` command.
 
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index b91959a2a8e..587758e8062 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -20,7 +20,7 @@ import (
 )
 
 const description = `
-This command signs build artifacts using MicroBuild. It is used in the Microsoft Go build pipeline.
+This command signs build artifacts using MicroBuild. It is used in the Microsoft build of Go build pipeline.
 Use '-n' to test the command locally.
 
 Signs in multiple passes. Some steps only apply to certain types of archives:
diff --git a/eng/_util/go-install.ps1 b/eng/_util/go-install.ps1
index 29cc7fc9a13..ddebb164aa1 100644
--- a/eng/_util/go-install.ps1
+++ b/eng/_util/go-install.ps1
@@ -3,14 +3,14 @@
 
 <#
 .SYNOPSIS
-    Installs Microsoft Go
+    Installs Microsoft build of Go
 .DESCRIPTION
-    Installs the Microsoft Go toolset.
+    Installs the Microsoft build of Go toolset.
 
     Note that the intended use of this script is for Continuous Integration (CI) scenarios, where:
     - The toolset needs to be installed without user interaction and without admin rights.
     - The toolset installation doesn't need to persist across multiple CI runs.
-    Visit https://github.com/microsoft/go for a list of other ways to install Microsoft Go.
+    Visit https://github.com/microsoft/go for a list of other ways to install Microsoft build of Go.
 
 .PARAMETER Version
     Default: Latest
@@ -21,11 +21,11 @@
           examples: go1.18, go1.23
     - 3-part version in format go1.A.B - latest revision of a specific release.
           examples: go1.18.0, go1.23.1
-    - 4-part version in format go1.A.B-C - a specific revision of Microsoft Go, immutable.
+    - 4-part version in format go1.A.B-C - a specific revision of Microsoft build of Go, immutable.
           examples: go1.18.0-1, go1.23.1-3
-    Microsoft Go doesn't publish prereleases, so they are not available.
+    Microsoft build of Go doesn't publish prereleases, so they are not available.
 .PARAMETER InstallDir
-    Path to where to install Microsoft Go. Note that if a directory is given, GOROOT is placed
+    Path to where to install Microsoft build of Go. Note that if a directory is given, GOROOT is placed
     directly in that directory.
     Default: <auto> - a folder automatically selected inside LocalApplicationData as evaluated by PowerShell.
     Example auto on Windows: C:\Users\myself\AppData\Local\microsoft-go\<version>
@@ -42,7 +42,7 @@
     Possible values are: <auto>, amd64, x64, 386, x86, arm64, arm
 .PARAMETER DryRun
     If set, it will not perform installation. Instead, it displays what command line to use to
-    consistently install currently requested version of Microsoft Go. For example, if you specify
+    consistently install currently requested version of Microsoft build of Go. For example, if you specify
     Version 'Latest', it will print a command with the specific 4-part version so this command can
     be used deterministicly in a build script.
     It also prints the location the binaries would have been installed to.
@@ -75,10 +75,10 @@
     Displays diagnostics information.
 .EXAMPLE
     go-install.ps1
-    Installs the latest released Microsoft Go version.
+    Installs the latest released Microsoft build of Go version.
 .EXAMPLE
     go-install.ps1 -Version Previous
-    Installs the latest version of the previous major (1.X) version of Microsoft Go.
+    Installs the latest version of the previous major (1.X) version of Microsoft build of Go.
 #>
 [cmdletbinding()]
 param(
@@ -802,12 +802,12 @@ if ($Help) {
     exit
 }
 
-Say "Microsoft Go Install Script version $MicrosoftGoInstallScriptVersion"
+Say "Microsoft build of Go Install Script version $MicrosoftGoInstallScriptVersion"
 
 Say-Verbose "Note that the intended use of this script is for Continuous Integration (CI) scenarios, where:"
 Say-Verbose "- The toolset needs to be installed without user interaction and without admin rights."
 Say-Verbose "- The toolset installation doesn't need to persist across multiple CI runs."
-Say-Verbose "Visit https://github.com/microsoft/go for a list of other ways to install Microsoft Go.`r`n"
+Say-Verbose "Visit https://github.com/microsoft/go for a list of other ways to install Microsoft build of Go.`r`n"
 
 Measure-Action "Product discovery" {
     $script:CLIArchitecture = Get-CLIArchitecture-From-Architecture $Architecture
@@ -835,7 +835,7 @@ Say-Verbose "Found download link $DownloadLink with version $SpecificVersion"
 if (-Not $DryRun) {
     Say-Verbose "Checking if the version $SpecificVersion is already installed"
     if (Is-ToolsetInstalled -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion) {
-        Say "Microsoft Go version '$SpecificVersion' is already installed."
+        Say "Microsoft build of Go version '$SpecificVersion' is already installed."
         Measure-Action "Setting up shell environment" { Prepend-ToolsetPathEnv -InstallRoot $InstallRoot -SpecificVersion $SpecificVersion }
         return
     }
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 3ac18a8c002..cf05917856a 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.22.0
 
 require (
 	github.com/microsoft/go-infra v0.0.6
-	github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67
+	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/sys v0.30.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index f9ed168a89b..2c2cea54f5d 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -7,8 +7,8 @@ github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHS
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.6 h1:RB/Jx3bMC8I+16Ra9iy+HcrHe3Ss1iM46OZ0LzNUZ0Y=
 github.com/microsoft/go-infra v0.0.6/go.mod h1:L+TMMmm7bkfgUfx1FZmReNHXL9m4oqvc+bVXCuaKD30=
-github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67 h1:i/EXV3vFmJ6UYZ8a4fM2ssKlvSstxvJfiUHau81iNZE=
-github.com/microsoft/go-infra/goinstallscript v0.0.0-20241113173623-26aea3823c67/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
+github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
+github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
 golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index dbdf1829362..83638ff681d 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -1,7 +1,7 @@
-# Cross-Platform Cryptography in Microsoft Go
+# Cross-Platform Cryptography in the Microsoft build of Go
 
-Cryptographic operations in Microsoft Go are delegated to the operating system (OS) libraries in some conditions.
-The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft Go FIPS README](./fips/README.md).
+Cryptographic operations in the Microsoft build of Go are delegated to the operating system (OS) libraries in some conditions.
+The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft build of Go FIPS README](./fips/README.md).
 At a fine-grained level, Go apps will fall back to the native Go implementation of an algorithm if the OS libraries don't support it.
 This article identifies the features that are supported on each platform.
 
@@ -9,26 +9,26 @@ This article assumes you have a working familiarity with cryptography in Go.
 
 ## Platform support
 
-Microsoft Go supports the following platforms:
+The Microsoft build of Go supports the following platforms:
 
 ### Windows
 
-On Windows, Microsoft Go uses the [CNG library (Cryptography API: Next Generation)](https://learn.microsoft.com/en-us/windows/win32/seccng/cng-portal) for cryptographic operations.
+On Windows, the Microsoft build of Go uses the [CNG library (Cryptography API: Next Generation)](https://learn.microsoft.com/en-us/windows/win32/seccng/cng-portal) for cryptographic operations.
 CNG is available since Windows Vista and Windows Server 2008 and it doesn't require any additional installation nor configuration.
 
 ### Linux
 
-On Linux, Microsoft Go uses the [OpenSSL crypto library](https://docs.openssl.org/3.0/man7/crypto/) for cryptographic operations.
+On Linux, the Microsoft build of Go uses the [OpenSSL crypto library](https://docs.openssl.org/3.0/man7/crypto/) for cryptographic operations.
 OpenSSL is normally available on Linux distributions, but it may not be installed by default.
 If it is not installed, you can install it using the package manager of your distribution.
 
 OpenSSL 3 implements all the cryptographic algorithms using [Providers](https://docs.openssl.org/3.0/man7/crypto/#providers).
-Microsoft Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
+The Microsoft build of Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
 SCOSSL is expected to be used with the default built-in provider enabled as a fallback (which is the case when using [Azure Linux 3](https://github.com/microsoft/AzureLinux)).
 
 ## macOS
 
-On macOS, Microsoft Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
+On macOS, th Microsoft build Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
 CommonCrypto and CryptoKit are shipped with macOS and don't require any additional installation nor configuration.
 Currently macOS 13 and above is supported.
 
@@ -42,7 +42,7 @@ The following legend describes the symbols used in the tables to indicate the le
 | ⚠️     | Supported with limitations that require special configuration action                                                         |
 | ❌     | Not supported                                                                                                                |
 
-When an algorithm is not supported or the limitations are exceeded, Microsoft Go will fall back to the Go implementation.
+When an algorithm is not supported or the limitations are exceeded, the Microsoft build of Go will fall back to the Go implementation.
 
 ## Hash and Message Authentication Algorithms
 
@@ -75,7 +75,7 @@ This section includes the following packages:
 | CSHAKE-256       | ❌      | ❌                | ❌    |
 | HMAC<sup>3</sup> | ✔️      | ✔️                | ✔️    |
 
-<sup>1</sup>Available starting in Microsoft Go 1.24.
+<sup>1</sup>Available starting in the Microsoft build of Go 1.24.
 
 <sup>2</sup>Requires OpenSSL 1.1.1 or later.
 
@@ -167,7 +167,7 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
-<sup>2</sup>Available starting in Microsoft Go 1.24.
+<sup>2</sup>Available starting in the Microsoft build of Go 1.24.
 
 <sup>3</sup>On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
 
diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 7f95f61ff70..65cae50fa63 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -1,6 +1,6 @@
 # Developer Guide
 
-This document is a guide for developers who want to contribute to the Microsoft Go repository.
+This document is a guide for developers who want to contribute to the Microsoft build of Go repository.
 It explains how to build the repository, how to work with the Go submodule, and how to use the different tools that help maintain the repository.
 
 This guide is primarily intended for developers working for the Go team at Microsoft, but it can also be useful for external contributors.
@@ -15,7 +15,7 @@ For details, visit https://cla.opensource.microsoft.com.
 ### Install a Go toolchain
 
 A preexisting Go toolchain is required to bootstrap the build process.
-You can use your system's package manager to install Go, download Go from the [official Go website](https://golang.org/dl/), or download a prebuilt version of Microsoft Go itself.
+You can use your system's package manager to install Go, download Go from the [official Go website](https://golang.org/dl/), or download a prebuilt version of the Microsoft build Go itself.
 
 The only requirement is that the Go version is high enough for the bootstrap process.
 If you attempt to build Go while using a bootstrap Go with a version that is too low, the bootstrap process will fail and ask you to install a newer version.
@@ -23,13 +23,13 @@ If you attempt to build Go while using a bootstrap Go with a version that is too
 > [!NOTE]
 > The in-support versions of Go found on the [official Go website](https://golang.org/dl/) are always high enough to bootstrap the development branch.
 > This is because:
-> * The [last two major versions of Go are supported by the Go project](https://go.dev/s/release#release-maintenance). (Microsoft Go has the same policy.)
+> * The [last two major versions of Go are supported by the Go project](https://go.dev/s/release#release-maintenance). (the Microsoft build of Go has the same policy.)
 > * Go N can always be bootstrapped by [both N-1 and N-2](https://tip.golang.org/doc/install/source#go14).
 
 > [!NOTE]
-> This repository's `eng/run.ps1` PowerShell script is able to download a correct bootstrapping Go version automatically before building Microsoft Go from source.
-> We recommend that Microsoft Go team members be familiar with this script because it is used by Microsoft Go CI.
-> However, it isn't necessary to use the script for most work on the Microsoft Go patches.
+> This repository's `eng/run.ps1` PowerShell script is able to download a correct bootstrapping Go version automatically before building the Microsoft build of Go from source.
+> We recommend that Microsoft developers team members be familiar with this script because it is used by our CI.
+> However, it isn't necessary to use the script for most work on the Microsoft build of Go patches.
 > See the [`eng` Readme](/eng/README.md) for more information about `eng/run.ps1`.
 
 ### Install git and the git-go-patch command
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index ac20296f092..827b376dc87 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -23,9 +23,9 @@ In addition to that, the boringcrypto flag also provides a mechanism to restrict
   import _ "crypto/tls/fipsonly"
 ```
 
-## Microsoft Go fork FIPS compliance
+## Microsoft build of Go FIPS compliance
 
-The Microsoft Go fork modifies the Go runtime to implement several crypto primitives using cgo to call into a platform-provided cryptographic library rather than use the standard Go crypto implementations. This allows Go programs to use a platform-provided FIPS 140-2 certified crypto library.
+The Microsoft build of Go modifies the Go runtime to implement several crypto primitives using cgo to call into a platform-provided cryptographic library rather than use the standard Go crypto implementations. This allows Go programs to use a platform-provided FIPS 140-2 certified crypto library.
 
 On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140-2 certified.
 
@@ -33,7 +33,7 @@ It is important to note that an application built with Microsoft's Go toolchain
 
 ## Configuration overview
 
-The Microsoft Go fork provides several ways to configure the crypto backend and its behavior. These are described in the following sections in detail.
+The Microsoft build of Go fork provides several ways to configure the crypto backend and its behavior. These are described in the following sections in detail.
 
 - Build-time configuration (`go build`):
   - [`GOEXPERIMENT=<backend>crypto` environment variable](#usage-build)
@@ -54,7 +54,7 @@ The Microsoft Go fork provides several ways to configure the crypto backend and
 There are typically two goals that lead to this document. Creating a FIPS compliant app is one. The other is to comply with internal Microsoft crypto policies that have been set for Go. This table summarizes common configurations and how suitable each one is for these goals.
 
 > [!NOTE]
-> This section assumes the use of Microsoft Go 1.24 or later.
+> This section assumes the use of the Microsoft build of Go 1.24 or later.
 >
 > 1.24 introduces `GODEBUG=fips140=on` as a preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
 >
@@ -117,10 +117,10 @@ If a crypto backend is selected but isn't supported, the build fails. For exampl
 > [!NOTE]
 > Prior to Go 1.21, instead of failing, the build automatically uses the Go standard library crypto implementation. This behavior can cause accidental or unclear fallback to Go crypto, silently breaking compliance with the internal Microsoft crypto policy.
 >
-> In 1.21, this behavior was changed. Fallback is now opt-in with the `GOEXPERIMENT` `allowcryptofallback`. This option is primarily intended for internal use during the Microsoft Go build and should be avoided in general use. See [`allowcryptofallback`](#build-option-to-allow-go-standard-library-crypto-fallback) for more information.
+> In 1.21, this behavior was changed. Fallback is now opt-in with the `GOEXPERIMENT` `allowcryptofallback`. This option is primarily intended for internal use during the Microsoft build of Go build and should be avoided in general use. See [`allowcryptofallback`](#build-option-to-allow-go-standard-library-crypto-fallback) for more information.
 
 
-The Microsoft Go fork must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
+The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
 
 > [!NOTE]
 > "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
@@ -129,14 +129,14 @@ The next sections describe how to select a crypto backend in some common scenari
 
 ### Dockerfile base image
 
-Since Go 1.21, you can swap your Dockerfile's base image to the special Microsoft Go images marked with `-fips-`. These images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images. These exist for convenience. See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
+Since Go 1.21, you can swap your Dockerfile's base image to the special Microsoft build of Go images marked with `-fips-`. These images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images. These exist for convenience. See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
 
 > [!NOTE]
 > Prior to Go 1.21, `-fips-` images do exist, but they are only available for Linux and include `env GOEXPERIMENT=opensslcrypto`. For this reason, these images can't easily be used to build Windows binaries on a Linux host.
 
 ### Dockerfile env instruction
 
-If you don't use the standard Go base images (e.g. your Dockerfile downloads Microsoft Go manually), use an `env` instruction before the build instruction in your Dockerfile:
+If you don't use the standard Go base images (e.g. your Dockerfile downloads the Microsoft build of Go manually), use an `env` instruction before the build instruction in your Dockerfile:
 
 ```dockerfile
 env GOEXPERIMENT=systemcrypto
@@ -251,7 +251,7 @@ Refer to the [About Apple security certifications](https://support.apple.com/gui
 This means that setting `GOFIPS=1` or `GODEBUG=fips140=on` will never cause a panic on macOS.
 They are still necessary to instruct Go to run in FIPS mode, as there is no system-provided parameter to do so.
 
-Prior to 1.24, CommonCrypto/CryptoKit is not used by Microsoft Go.
+Prior to 1.24, CommonCrypto/CryptoKit is not used by the Microsoft build of Go.
 
 ## Usage: Extra configuration options
 
@@ -308,7 +308,7 @@ A scenario we expect is that a dev attempts to rebuild an open source Go app wit
 > [!NOTE]
 > In rare cases, it may be more practical to use `allowcryptofallback` than to remove the `GOEXPERIMENT`. For example, a generic build script that supports many platforms, some of which don't support crypto backends, may find it practical to use `GOEXPERIMENT=systemcrypto,allowcryptofallback` despite the risk of unclear or accidental fallback to Go crypto.
 >
-> For example, `allowcryptofallback` plays an important role in the Microsoft Go build process. We have CI jobs that run the build and tests under the OpenSSL, CNG, and Boring crypto backends, but parts of the upstream build and tests disable cgo and run cross-builds. This would cause a failure because the backend can't be enabled, but by including `allowcryptofallback`, the build is allowed to continue and fall back to the Go standard library crypto implementation when necessary.
+> For example, `allowcryptofallback` plays an important role in the Microsoft build of Go build process. We have CI jobs that run the build and tests under the OpenSSL, CNG, and Boring crypto backends, but parts of the upstream build and tests disable cgo and run cross-builds. This would cause a failure because the backend can't be enabled, but by including `allowcryptofallback`, the build is allowed to continue and fall back to the Go standard library crypto implementation when necessary.
 
 ### Runtime OpenSSL version override
 
@@ -350,7 +350,7 @@ Since Go 1.21:
 > Prior to the introduction of the systemcrypto alias in Go 1.21, the constraint is:  
   `//go:build goexperiment.opensslcrypto && goexperiment.cngcrypto && goexperiment.boringcrypto`.
 
-The `goexperiment.systemcrypto` tag's behavior is implemented in a Microsoft Go patch to the build system. It is not available in builds of upstream Go. The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied even if the BoringCrypto backend is enabled.
+The `goexperiment.systemcrypto` tag's behavior is implemented in a patch to the build system. It is not available in builds of upstream Go. The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied even if the BoringCrypto backend is enabled.
 
 ## Features
 
@@ -372,7 +372,7 @@ Not all OpenSSL versions are supported. OpenSSL does not maintain ABI compatibil
 Versions not listed above are not supported at all.
 
 > [!NOTE]
-> Any build of OpenSSL might have various [OpenSSL features] enabled or disabled, diverging from the default configuration. Microsoft Go does not support all possible OpenSSL configurations. Some may cause the Go runtime to panic during initialization or not work as expected.
+> Any build of OpenSSL might have various [OpenSSL features] enabled or disabled, diverging from the default configuration. The Microsoft build of Go does not support all possible OpenSSL configurations. Some may cause the Go runtime to panic during initialization or not work as expected.
 >
 > The Go runtime is tested with the default configuration of each supported OpenSSL version and with the OpenSSL configurations in the [Azure Linux] 2 and [Azure Linux] 3 distributions.
 
@@ -384,7 +384,7 @@ For OpenSSL, Go uses [dlopen] when initializing. Sometimes this is called *dynam
 
 For CNG, Go uses Windows syscalls to call the CNG APIs. This can also not be considered *dynamic linking*, but like *dynamic loading*, syscalls also mean the app is using OS-provided crypto functionality.
 
-It's common in the Go ecosystem to statically link all dependencies to produce a single binary that can run standalone (e.g. in a minimal Docker container). Unfortunately, the requirements of FIPS and the way it's implemented in Microsoft mean this is not possible for a Go program that uses the Microsoft Go runtime and FIPS features. If you are responsible for a Go app in Microsoft and this is impossible, contact the crypto board for more details. We opened an issue to discuss support for static linking: [microsoft/go#744 *OpenSSL static linking proposal*](https://github.com/microsoft/go/issues/744). However, as we learned this would not be considered FIPS compliant for use in Microsoft, we don't have any plans to implement it.
+It's common in the Go ecosystem to statically link all dependencies to produce a single binary that can run standalone (e.g. in a minimal Docker container). Unfortunately, the requirements of FIPS and the way it's implemented in Microsoft mean this is not possible for a Go program that uses the Microsoft build of Go runtime and FIPS features. If you are responsible for a Go app in Microsoft and this is impossible, contact the crypto board for more details. We opened an issue to discuss support for static linking: [microsoft/go#744 *OpenSSL static linking proposal*](https://github.com/microsoft/go/issues/744). However, as we learned this would not be considered FIPS compliant for use in Microsoft, we don't have any plans to implement it.
 
 ### Portable OpenSSL
 
@@ -396,7 +396,7 @@ This feature does not require any additional configuration, but it only works wi
 
 The Go TLS stack will automatically use crypto primitives from the selected crypto backend. Yet, this isn't enough for FIPS compliance: the FIPS 140-2 standard places additional restrictions on TLS communications, mainly on which cyphers and signers are allowed. Note that this can reduce compatibility with old devices that do not support modern cryptography techniques such as TLS 1.2.
 
-Since Go 1.22, the Microsoft Go runtime automatically enforces that `crypto/tls` and `crypto/x509` only use FIPS-compliant settings when running in FIPS mode. This differs from upstream's BoringCrypto backend, which requires you to import `crypto/tls/fipsonly` to apply the FIPS-mandated restrictions. The Microsoft Go crypto backends do this automatically to reduce the source code changes necessary to produce a FIPS-compliant Go application, and to make it easier to use the same binary in both FIPS and non-FIPS environments.
+Since Go 1.22, the Microsoft build of Go runtime automatically enforces that `crypto/tls` and `crypto/x509` only use FIPS-compliant settings when running in FIPS mode. This differs from upstream's BoringCrypto backend, which requires you to import `crypto/tls/fipsonly` to apply the FIPS-mandated restrictions. The Microsoft build of Go crypto backends do this automatically to reduce the source code changes necessary to produce a FIPS-compliant Go application, and to make it easier to use the same binary in both FIPS and non-FIPS environments.
 
 Prior to Go 1.22, a program using the Go TLS stack must import the `crypto/tls/fipsonly` package to be compliant with these restrictions. The configuration is done by an `init()` function, so only importing it is necessary:
 
@@ -456,13 +456,13 @@ This list of major changes is intended for quick reference and for access to his
   - Upstream Go made this change for BoringCrypto, and we adopted it for our OpenSSL and CNG backends. See [the `dev.boringcrypto` branch readme](https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md). For more details about the merge, see [golang/go#51940](https://github.com/golang/go/issues/51940). `dev.boringcrypto*` branches are no longer maintained.
   - Downloading a different toolset build to build FIPS vs. non-FIPS programs is no longer necessary.
 - Backend selection is done at compile time. The backend is always used by the resulting program, and it can't be changed at runtime.
-- Only one Microsoft Go toolset is provided per platform. It supports building both FIPS and non-FIPS programs.
+- Only one Microsoft build of Go is provided per platform. It supports building both FIPS and non-FIPS programs.
 
 ### Go 1.16 (Feb 2022)
 
 - OpenSSL (Linux) backend introduced.
-- Introduction of FIPS features in the Microsoft Go fork based on the upstream `dev.boringcrypto*` branches of Go.
-- The backend is only used if FIPS mode is requested (e.g. `GOFIPS=1`), otherwise Microsoft Go falls back to the Go standard library at runtime.
+- Introduction of FIPS features in the Microsoft build of Go based on the upstream `dev.boringcrypto*` branches of Go.
+- The backend is only used if FIPS mode is requested (e.g. `GOFIPS=1`), otherwise the Microsoft build of Go falls back to the Go standard library at runtime.
 - To build a FIPS-compliant program, a FIPS-specific toolset build must be downloaded and used.
 - For historical information about Go 1.16-1.18, see [the FIPS documentation in the 1.20 release branch](https://github.com/microsoft/go/tree/microsoft/release-branch.go1.20/eng/doc/fips). It includes details about FIPS in 1.18 and the changes in 1.19.
 
diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index 7053637c545..af6c9599579 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -1,13 +1,13 @@
 # FIPS 140-2 User Guide
 
-This document is a user guide for the Microsoft Go crypto package running on FIPS 140-2 compatibility mode (hereafter referred to as FIPS). It is intended as a technical reference for developers using, and system administrators installing, the Go toolset, and for use in risk assessment reviews by security auditors. This is not a replacement for the Go crypto documentation, rather it is a collection of notes and more detailed explanations in the context of FIPS compatibility.
+This document is a user guide for the Microsoft build of Go crypto package running on FIPS 140-2 compatibility mode (hereafter referred to as FIPS). It is intended as a technical reference for developers using, and system administrators installing, the Go toolset, and for use in risk assessment reviews by security auditors. This is not a replacement for the Go crypto documentation, rather it is a collection of notes and more detailed explanations in the context of FIPS compatibility.
 
 The Go crypto documentation is available online at https://pkg.go.dev/crypto.
 
 <!-- The following table of contents is maintained using https://marketplace.visualstudio.com/items?itemName=yzhang.markdown-all-in-one -->
 
 - [FIPS 140-2 User Guide](#fips-140-2-user-guide)
-  - [The Microsoft Go crypto backends](#the-microsoft-go-crypto-backends)
+  - [The Microsoft build of Go crypto backends](#the-microsoft-build-of-go-crypto-backends)
   - [Using Go crypto APIs](#using-go-crypto-apis)
     - [crypto/aes](#cryptoaes)
       - [func NewCipher](#func-newcipher)
@@ -95,11 +95,11 @@ The Go crypto documentation is available online at https://pkg.go.dev/crypto.
     - [crypto/subtle](#cryptosubtle)
     - [crypto/tls](#cryptotls)
 
-## The Microsoft Go crypto backends
+## The Microsoft build of Go crypto backends
 
 The OpenSSL backend uses [golang-fips/openssl].
 The CNG backend uses [go-crypto-winnative].
-For more general information about the backends, such as how to enable them, see the [Microsoft Go FIPS README](./README.md).
+For more general information about the backends, such as how to enable them, see the [Microsoft build of Go FIPS README](./README.md).
 
 [golang-fips/openssl]: https://github.com/golang-fips/openssl
 [go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
@@ -1697,7 +1697,7 @@ Package tls partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3,
 
 Package tls will automatically use FIPS compliant primitives implemented in other crypto packages.
 
-Since Go 1.22, the Microsoft Go runtime automatically enforces that tls only uses FIPS-approved settings when running in FIPS mode.
+Since Go 1.22, the Microsoft build of Go runtime automatically enforces that tls only uses FIPS-approved settings when running in FIPS mode.
 Prior to Go 1.22, a program using tls must import the `crypto/tls/fipsonly` package to be compliant with these restrictions.
 
 When using TLS in FIPS-only mode the TLS handshake has the following restrictions:
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 328b724fc73..f9e8bc7f17f 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -94,7 +94,7 @@ stages:
             - name: MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS
               value: '1'
 
-          # On darwin (macOS) we haven't released a Microsoft Go toolchain.
+          # On darwin (macOS) we haven't released a Microsoft build Go toolchain.
           - ${{ if eq(parameters.builder.os, 'darwin') }}:
             - name: MS_USE_PATH_GO
               value: '1'
diff --git a/eng/run.ps1 b/eng/run.ps1
index d3cebeafba8..8fa0dfe07f2 100644
--- a/eng/run.ps1
+++ b/eng/run.ps1
@@ -17,8 +17,8 @@ To list all possible tools:
 
 Builds 'eng/_util/cmd/<tool>/<tool>.go' and runs it using the list of arguments.
 
-This command automatically installs a known version of Microsoft Go that will be
-used to build the tools. The known version of Go will also be used to build the
+This command automatically installs a known version of the Microsoft build Go that
+will be used to build the tools. The known version of Go will also be used to build the
 Go source code, if it's built. Set environment variable "MS_USE_PATH_GO" to 1 to
 your own Go from PATH instead.
 
diff --git a/eng/signing/README.md b/eng/signing/README.md
index 2ffc00ab368..5062fda3f25 100644
--- a/eng/signing/README.md
+++ b/eng/signing/README.md
@@ -1,6 +1,6 @@
 # MSBuild signing infrastructure
 
-This directory contains a component of the Microsoft Go signing infrastructure written using MSBuild.
+This directory contains a component of the Microsoft build of Go signing infrastructure written using MSBuild.
 `Sign.csproj` is the interface between the Go signing command [`/eng/_util/cmd/sign`][sign] and MicroBuild, an internal Microsoft toolset written to primarily support .NET projects that use MSBuild.
 
 See [`/eng/_util/cmd/sign`][sign] for more information about the signing infrastructure.
diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index d8083025015..45b684bd58e 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -427,7 +427,7 @@ index 00000000000000..1bfbaf60f4dd58
 +All supported OpenSSL versions pass a small set of automatic tests that ensure they can be built and that there are no major regressions.
 +These tests do not validate the cryptographic correctness of the `openssl` package.
 +
-+On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) -maintained by Red Hat- and the [Microsoft Go fork](https://github.com/microsoft/go), tests a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
++On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) -maintained by Red Hat- and the [Microsoft build of Go](https://github.com/microsoft/go), tests a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
 +These tests are much more exhaustive and validate a specific OpenSSL version can produce working applications.
 +
 +### Building without OpenSSL headers
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 030657c00a9..db8298b6bd0 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -301,7 +301,7 @@ index 7614b6d194facf..f0f53ab2bab047 100644
  	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
 -		buildVersion += " X:" + goexperiment
 +		// buildVersion is intended to contain non-default experiment flags.
-+		// The Microsoft Go toolchain default behavior is to set the
++		// The Microsoft build of Go default behavior is to set the
 +		// allowcryptofallback experiment, so we don't include it in the
 +		// buildVersion string.
 +		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
@@ -744,7 +744,7 @@ index 00000000000000..1dc05d09b2062d
 +
 +import _ "unsafe"
 +
-+// The symbols below are pulled by some crypto backend in the Microsoft Go compiler.
++// The symbols below are pulled by some crypto backend in the Microsoft build of Go compiler.
 +// We provide a push linkname here, to keep them accessible with pull linknames.
 +
 +//go:linkname encodeSignature
@@ -2304,7 +2304,7 @@ index 00000000000000..1adf3098356307
 +// license that can be found in the LICENSE file.
 +
 +/*
-+Microsoft Go only package.
++Microsoft build of Go only package.
 +
 +TLS 1.3 Key Schedule is normally not part of the FIPS boundary, but upstream Go
 +decided to include it in the FIPS boundary to facilitate the FIPS 140-3 certification
diff --git a/patches/0008-remove-long-path-support-hack.patch b/patches/0008-remove-long-path-support-hack.patch
index e8852986509..35bf86b183f 100644
--- a/patches/0008-remove-long-path-support-hack.patch
+++ b/patches/0008-remove-long-path-support-hack.patch
@@ -4,11 +4,11 @@ Date: Mon, 25 Mar 2024 12:14:00 +0100
 Subject: [PATCH] remove long path support hack
 
 Upstream Go tricks Windows into enabling long path support by setting an
-undocumented flag in the PEB. The Microsoft Go fork can't use undocumented
+undocumented flag in the PEB. The Microsoft build of Go can't use undocumented
 APIs, so this commit removes the hack.
 
 There is no documented way to enable long path support from within the
-process, so this this is a breaking change for the Microsoft Go fork.
+process, so this this is a breaking change for the Microsoft build of Go.
 Note that the Go standard library makes a best effort to support long
 paths by using the `\\?\` prefix when possible, so this change should
 only affect long relative paths, which can't be used with the `\\?\`.
diff --git a/patches/README.md b/patches/README.md
index 51e6703679a..9bf2fe6ed98 100644
--- a/patches/README.md
+++ b/patches/README.md
@@ -1,6 +1,6 @@
-# Microsoft Go patches
+# Microsoft build of Go patches
 
-The patches in this directory are applied to the `/go` submodule before building Microsoft Go.
+The patches in this directory are applied to the `/go` submodule before building th Microsoft build of Go.
 This is done automatically by the build tools provided in `/eng`.
 
 We use [`git-go-patch`](https://github.com/microsoft/go-infra/tree/main/cmd/git-go-patch) to maintain these patch files.

From 376cd32df307b0cd3793d8f6f149701d483618a9 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 11 Feb 2025 14:33:47 -0800
Subject: [PATCH 231/887] Fix single-feed error with Release Studio
 nuget.config (#1549)

---
 eng/release-studio/NuGet.config         |  7 +------
 eng/release-studio/ReleaseStudio.csproj | 12 +++++++++++-
 eng/signing/NuGet.config                |  1 +
 3 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/eng/release-studio/NuGet.config b/eng/release-studio/NuGet.config
index 6ea4355ea85..cfde83028f8 100644
--- a/eng/release-studio/NuGet.config
+++ b/eng/release-studio/NuGet.config
@@ -6,13 +6,8 @@
 <configuration>
   <packageSources>
     <clear />
+    <!-- Only one feed is allowed. https://aka.ms/cfs/nuget -->
     <add key="MicroBuildToolset" value="https://pkgs.dev.azure.com/dnceng/_packaging/MicroBuildToolset/nuget/v3/index.json" />
-    <!--
-      When the .NET SDK version doesn't match the TargetFramework, get targeting
-      packs (Microsoft.NETCore.App.Ref, Microsoft.WindowsDesktop.App.Ref, and
-      Microsoft.AspNetCore.App.Ref) from here.
-    -->
-    <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" />
   </packageSources>
   <disabledPackageSources>
     <clear />
diff --git a/eng/release-studio/ReleaseStudio.csproj b/eng/release-studio/ReleaseStudio.csproj
index 0c90dde172d..c7139c2c0ea 100644
--- a/eng/release-studio/ReleaseStudio.csproj
+++ b/eng/release-studio/ReleaseStudio.csproj
@@ -3,7 +3,17 @@
 
   <!-- Minimal info for '.csproj' to work. -->
   <PropertyGroup>
-    <TargetFramework>net7.0</TargetFramework>
+    <!--
+      We only have a single NuGet feed, and that feed doesn't have any targeting
+      packs (Microsoft.NETCore.App.Ref, Microsoft.WindowsDesktop.App.Ref, and
+      Microsoft.AspNetCore.App.Ref). To avoid downloading any targeting packs,
+      we need the Target Framework to match the .NET SDK exactly. The SDK may be
+      upgraded without our knowledge, so a hard-coded version is fragile. Use
+      BundledNETCoreAppTargetFrameworkVersion to be flexible.
+
+      We aren't actually building an app anyway, we just need the RM package.
+    -->
+    <TargetFramework>net$(BundledNETCoreAppTargetFrameworkVersion)</TargetFramework>
   </PropertyGroup>
 
   <ItemGroup>
diff --git a/eng/signing/NuGet.config b/eng/signing/NuGet.config
index 8f32de83184..d4ccd2557cf 100644
--- a/eng/signing/NuGet.config
+++ b/eng/signing/NuGet.config
@@ -6,6 +6,7 @@
 <configuration>
   <packageSources>
     <clear />
+    <!-- Multiple feeds are allowed, but only because they are both in dnceng/public. -->
     <add key="dotnet-eng" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-eng/nuget/v3/index.json" />
     <add key="dotnet-public" value="https://pkgs.dev.azure.com/dnceng/public/_packaging/dotnet-public/nuget/v3/index.json" />
   </packageSources>

From 43e5ee4c8a90c850ac9e75c710de1ef5fc189983 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 11 Feb 2025 16:42:42 -0800
Subject: [PATCH 232/887] Fix Release Studio script gathering: stable target
 dir (#1550)

---
 eng/pipeline/stages/public-publish-stage.yml |  3 ++-
 eng/release-studio/ReleaseStudio.csproj      | 17 +++++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/public-publish-stage.yml b/eng/pipeline/stages/public-publish-stage.yml
index 7dc8d5a32bf..614f57e9c8f 100644
--- a/eng/pipeline/stages/public-publish-stage.yml
+++ b/eng/pipeline/stages/public-publish-stage.yml
@@ -48,7 +48,7 @@ stages:
           - name: GoBinariesDir
             value: $(Pipeline.Workspace)/Binaries Signed
           - name: NetCorePublishingScripts
-            value: $(Build.SourcesDirectory)/eng/release-studio/bin/Debug/net7.0/MsGoPublishingScripts
+            value: $(Build.SourcesDirectory)/eng/release-studio/bin/MsGoPublishingScripts
 
           # This is read directly by release studio scripts through env.
           - name: RMExecutionEnvironment
@@ -70,6 +70,7 @@ stages:
               projects: '$(Build.SourcesDirectory)/eng/release-studio/ReleaseStudio.csproj'
               custom: build
               arguments: >-
+                /p:NetCorePublishingScripts=$(NetCorePublishingScripts)
                 /bl:eng/release-studio/Build.binlog
                 /v:n
 
diff --git a/eng/release-studio/ReleaseStudio.csproj b/eng/release-studio/ReleaseStudio.csproj
index c7139c2c0ea..2f5570c4a97 100644
--- a/eng/release-studio/ReleaseStudio.csproj
+++ b/eng/release-studio/ReleaseStudio.csproj
@@ -14,10 +14,27 @@
       We aren't actually building an app anyway, we just need the RM package.
     -->
     <TargetFramework>net$(BundledNETCoreAppTargetFrameworkVersion)</TargetFramework>
+
+    <!-- Default value for simple local repro. -->
+    <MsGoPublishingScripts>$(MSBuildThisFileDirectory)bin\MsGoPublishingScripts</MsGoPublishingScripts>
   </PropertyGroup>
 
   <ItemGroup>
     <PackageReference Include="DevDiv.RM.MS.Go.Publishing" Version="20240703.4.0" />
   </ItemGroup>
 
+  <!--
+    The scripts end up in a dir with Debug/Release and TargetFramework in the
+    path, which we don't want to rely on. So, copy them to a known place too.
+    Use the ScriptFilesToCopy items gathered by MsGoPublishingScriptsCopy.
+  -->
+  <Target
+    Name="CopyPublishingScriptsToStableLocation"
+    AfterTargets="MsGoPublishingScriptsCopy">
+
+    <Copy
+      SourceFiles="@(ScriptFilesToCopy)"
+      DestinationFolder="$([MSBuild]::NormalizeDirectory('$(MsGoPublishingScripts)', '%(RecursiveDir)'))" />
+  </Target>
+
 </Project>

From f1860777e4019da9508b2daf627021367f107de2 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 12 Feb 2025 16:06:43 +0000
Subject: [PATCH 233/887] Update submodule to latest master (d9cc4944):
 cmd/dist: correct gccheckmark test name

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 608acff8479..d9cc4944ce3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 608acff8479640b00c85371d91280b64f5ec9594
+Subproject commit d9cc4944ce3f36fc8fd1c63f35c206b308a3503f

From 1b499161c8c96cc2f5d52c564ad65fe8ea51359b Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 12 Feb 2025 10:22:59 -0600
Subject: [PATCH 234/887] Upgrade CNG backend

---
 patches/0002-Vendor-crypto-backends.patch | 25 ++++++++++++-----------
 1 file changed, 13 insertions(+), 12 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 45b684bd58e..7b33e81f68f 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -94,14 +94,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rc4.go  |  65 ++
  .../microsoft/go-crypto-winnative/cng/rsa.go  | 396 ++++++++++
  .../microsoft/go-crypto-winnative/cng/sha3.go | 311 ++++++++
- .../go-crypto-winnative/cng/tls1prf.go        |  88 +++
+ .../go-crypto-winnative/cng/tls1prf.go        |  89 +++
  .../internal/bcrypt/bcrypt_windows.go         | 368 +++++++++
  .../internal/bcrypt/ntstatus_windows.go       |  45 ++
  .../internal/bcrypt/zsyscall_windows.go       | 412 ++++++++++
  .../internal/subtle/aliasing.go               |  32 +
  .../internal/sysdll/sys_windows.go            |  55 ++
  src/vendor/modules.txt                        |  16 +
- 95 files changed, 13813 insertions(+), 7 deletions(-)
+ 95 files changed, 13814 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -222,7 +222,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index ccfdbd8ea22d77..848995bdafa375 100644
+index ccfdbd8ea22d77..8279edd727aada 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -233,10 +233,10 @@ index ccfdbd8ea22d77..848995bdafa375 100644
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4d6a33e34a4e63..6a09a77031befa 100644
+index 4d6a33e34a4e63..501aecb4cccb41 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -244,8 +244,8 @@ index 4d6a33e34a4e63..6a09a77031befa 100644
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67 h1:SI0IFiHducwfamZR7pv6jb92oc5o/z5tn66wynS6ADE=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70 h1:97wOagHu7OExwU929NjuPIlUEUaFIQtffQMaVj0mR5E=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea h1:JuRzAUOV9uaQdoNeuHyOEAJbpRahsICnwfPPGzzuzRw=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
  golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
  golang.org/x/net v0.32.1-0.20250121202134-9a960c88dd98 h1:36bTiCRO7f/J3t+LumnLTJDXqxsp1x6Q7754SsRD9u4=
@@ -427,7 +427,7 @@ index 00000000000000..1bfbaf60f4dd58
 +All supported OpenSSL versions pass a small set of automatic tests that ensure they can be built and that there are no major regressions.
 +These tests do not validate the cryptographic correctness of the `openssl` package.
 +
-+On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) -maintained by Red Hat- and the [Microsoft build of Go](https://github.com/microsoft/go), tests a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
++On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) -maintained by Red Hat- and the [Microsoft Go fork](https://github.com/microsoft/go), tests a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
 +These tests are much more exhaustive and validate a specific OpenSSL version can produce working applications.
 +
 +### Building without OpenSSL headers
@@ -14134,10 +14134,10 @@ index 00000000000000..15c1345475a3b1
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
 new file mode 100644
-index 00000000000000..5a3fb01606ef95
+index 00000000000000..56131a6bc93d3f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
-@@ -0,0 +1,88 @@
+@@ -0,0 +1,89 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14184,6 +14184,7 @@ index 00000000000000..5a3fb01606ef95
 +	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
 +		return err
 +	}
++	defer bcrypt.DestroyKey(kh)
 +
 +	buffers := make([]bcrypt.Buffer, 0, 3)
 +	if len(label) > 0 {
@@ -15169,7 +15170,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d42f50b43ccdba..61fda0cbe57e34 100644
+index d42f50b43ccdba..8f04bd6fc8fd78 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
@@ -15182,7 +15183,7 @@ index d42f50b43ccdba..61fda0cbe57e34 100644
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250110072644-50d2dfac4b70
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From fa16cc101843479cee11eee86d7cb221751baaff Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 12 Feb 2025 14:48:12 -0800
Subject: [PATCH 235/887] Additional FIPS readme updates for 1.24 (#1556)

* Refer to FIPS 140 without -2

* FIPS readme updates for 1.24
---
 eng/doc/fips/README.md | 160 +++++++++++++++++++++++++----------------
 1 file changed, 100 insertions(+), 60 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 827b376dc87..fdafdc59cdd 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -1,50 +1,60 @@
 This directory contains documentation about FIPS and the FIPS implementation in the Microsoft fork of Go.
 
 * README.md (this file): a general overview and first steps.
-* [**FIPS 140-2 User Guide** (UserGuide.md)](UserGuide.md): notes on FIPS compliance of specific crypto APIs.
+* [**FIPS 140 User Guide** (UserGuide.md)](UserGuide.md): notes on FIPS compliance of specific crypto APIs.
 
-# Crypto FIPS 140-2 support
+# Crypto FIPS 140 support
 
 ## Background
 
-FIPS 140-2 is a U.S. government computer security standard used to approve cryptographic modules. FIPS compliance may come up when working with U.S. government and other regulated industries.
+FIPS 140 is a U.S. government computer security standard used to approve cryptographic modules. FIPS compliance and specifically FIPS 140-3 certification may come up when working with U.S. government and other regulated industries.
 
 ### Go FIPS compliance
 
-The Go `crypto` package is not FIPS certified, and the Go team has stated that it won't be, e.g. in [golang/go/issues/21734](https://github.com/golang/go/issues/21734#issuecomment-326980213) Adam Langley says:
+The upstream plan to support building FIPS compliant Go apps is described in [FIPS 140-3 Compliance](https://go.dev/doc/security/fips140) and [crypto: obtain a FIPS 140-3 validation (golang/go#69536)](https://github.com/golang/go/issues/69536).
+Go 1.24 delivered some major steps in this plan: the crypto module itself (written in Go and Go assembly), the concept of FIPS mode in the Go runtime, and new toolset settings.
 
-> The status of FIPS 140 for Go itself remains "no plans, basically zero chance".
+Prior to Go 1.24, Google maintained the [goexperiment](https://pkg.go.dev/internal/goexperiment) `boringcrypto`, that uses cgo and BoringSSL to implement various crypto primitives.
+As BoringSSL is FIPS 140 certified, an application built using this flag is more likely to be FIPS 140 compliant, yet Google does not provide any liability about the suitability of this code in relation to the FIPS 140 standard.
 
-On the other hand, Google maintains the [goexperiment](https://pkg.go.dev/internal/goexperiment) `boringcrypto`, that uses cgo and BoringSSL to implement various crypto primitives. As BoringSSL is FIPS 140-2 certified, an application built using this flag is more likely to be FIPS 140-2 compliant, yet Google does not provide any liability about the suitability of this code in relation to the FIPS 140-2 standard.
-
-In addition to that, the boringcrypto flag also provides a mechanism to restrict all TLS configuration to FIPS-compliant settings. The effect is triggered by importing the fipsonly package anywhere in a program, as in:
+In addition to that, the `boringcrypto` flag also provides a mechanism to restrict all TLS configuration to FIPS-compliant settings.
+The effect is triggered by importing the fipsonly package anywhere in a program, as in:
 
 ```go
   import _ "crypto/tls/fipsonly"
 ```
 
+In Go 1.24, the TLS FIPS-compliant mode is controlled by the Go runtime's FIPS mode.
+
 ## Microsoft build of Go FIPS compliance
 
-The Microsoft build of Go modifies the Go runtime to implement several crypto primitives using cgo to call into a platform-provided cryptographic library rather than use the standard Go crypto implementations. This allows Go programs to use a platform-provided FIPS 140-2 certified crypto library.
+The Microsoft build of Go modifies the Go runtime to call into a platform-provided cryptographic library to implement crypto primitives rather than use the standard Go crypto implementations.
+Depending on the platform, this is done using cgo or syscalls.
+This allows Go programs to use a platform-provided FIPS 140 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140-2 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
 
-It is important to note that an application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_. It is the responsibility of the application development team to use FIPS-compliant crypto primitives and workflows. The modified crypto runtime will fall back to Go standard library crypto if it cannot provide a FIPS-compliant implementation, e.g. when hashing a message using `crypto/md5` hashes or when using an AES-GCM cipher with a non-standard nonce size.
+> [!IMPORTANT]
+> An application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_.
+> It is the responsibility of the application development team to use FIPS-compliant crypto primitives and workflows.
+>
+> For compatibility reasons, the modified crypto runtime will fall back to Go standard library crypto if it cannot provide a FIPS-compliant implementation, e.g. when hashing a message using `crypto/md5` hashes or when using an AES-GCM cipher with a non-standard nonce size.
 
 ## Configuration overview
 
-The Microsoft build of Go fork provides several ways to configure the crypto backend and its behavior. These are described in the following sections in detail.
+The Microsoft build of Go provides several ways to configure the crypto backend and its behavior.
+These are described in the following sections in detail.
 
 - Build-time configuration (`go build`):
   - [`GOEXPERIMENT=<backend>crypto` environment variable](#usage-build)
   - [`goexperiment.<backend>crypto` build tag](#usage-build)
   - [`requirefips` build tag](#build-option-to-require-fips-mode)
-  - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode)
+  - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode) (go1.24+)
   - [`GOEXPERIMENT` `allowcryptofallback`](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails)
   - [`import _ "crypto/tls/fipsonly"` source change](#tls-with-fips-compliant-settings)
 - Runtime configuration:
   - [`GOFIPS` environment variable](#usage-runtime)
-  - [`GODEBUG=fips140` setting](#usage-runtime)
+  - [`GODEBUG=fips140` setting](#usage-runtime) (go1.24+)
   - (OpenSSL backend) [`GO_OPENSSL_VERSION_OVERRIDE` environment variable](#runtime-openssl-version-override)
   - (OpenSSL backend) [`/proc/sys/crypto/fips_enabled` file containing `1`](#linux-fips-mode-openssl)
   - (CNG backend) [Windows registry `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy` dword value `Enabled` set to `1`](#windows-fips-mode-cng)
@@ -56,9 +66,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 > [!NOTE]
 > This section assumes the use of the Microsoft build of Go 1.24 or later.
 >
-> 1.24 introduces `GODEBUG=fips140=on` as a preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
->
-> 1.21 introduces `systemcrypto`, `requirefips`, and a build-time compatibility check for the selected crypto backend. The Usage sections go into more detail about the differences between 1.19/1.20 and 1.21 in context. See also [the Go 1.21 changelog](#go-121-aug-2023).
+> 1.24 introduces `GODEBUG=fips140=on` as the preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
 
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
@@ -68,10 +76,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
 
-Other notes for common configurations:
-
-- Prior to Go 1.22, if the app uses TLS, `import _ "crypto/tls/fipsonly"` is also necessary for FIPS compliance. See [TLS with FIPS-compliant settings](#tls-with-fips-compliant-settings)
-- A Docker image is available that includes suitable build-time config in the environment. See [Dockerfile base image](#dockerfile-base-image)
+A [Docker base image](#dockerfile-base-image) is available that includes suitable build-time config in the environment.
 
 Some configurations are invalid and intentionally result in a build error or runtime panic:
 
@@ -91,7 +96,7 @@ The `GOEXPERIMENT` environment variable is used at build time to select a crypto
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
 - Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
-- `boringcrypto` selects the upstream BoringCrypto backend, which is **not supported nor compliant**
+- `boringcrypto` selects the upstream BoringCrypto backend, which is **not supported and not compliant with internal Microsoft policy**
 - If no option is selected, Go standard library cryptography is used.
 
 The options are exclusive and must not be enabled at the same time as one another.
@@ -105,53 +110,44 @@ The options are exclusive and must not be enabled at the same time as one anothe
 | macOS (since 1.24) | `darwincrypto` | CommonCrypto & CryptoKit |
 | macOS (prior to 1.24) | N/A, build error | N/A |
 
-The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`. Prior to Go 1.21, the selection must be made manually: `GOOS=windows GOEXPERIMENT=cngcrypto`.
+The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`.
 
-Setting the `goexperiment.<option>` build tag can be used as an alternative to setting the `GOEXPERIMENT` environment variable.
+The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
 
 > [!NOTE]
-> For details about combining multiple `GOEXPERIMENT`s and using build tags to customize your build, see [Usage: GOEXPERIMENTs and backend build tags](#usage-goexperiments-and-backend-build-tags).
+> "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
 
-If a crypto backend is selected but isn't supported, the build fails. For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
+Setting the `goexperiment.<option>` build tag can be used as an alternative to setting the `GOEXPERIMENT` environment variable.
 
 > [!NOTE]
-> Prior to Go 1.21, instead of failing, the build automatically uses the Go standard library crypto implementation. This behavior can cause accidental or unclear fallback to Go crypto, silently breaking compliance with the internal Microsoft crypto policy.
->
-> In 1.21, this behavior was changed. Fallback is now opt-in with the `GOEXPERIMENT` `allowcryptofallback`. This option is primarily intended for internal use during the Microsoft build of Go build and should be avoided in general use. See [`allowcryptofallback`](#build-option-to-allow-go-standard-library-crypto-fallback) for more information.
-
+> For details about combining multiple `GOEXPERIMENT`s and using build tags to customize your build, see [Usage: GOEXPERIMENTs and backend build tags](#usage-goexperiments-and-backend-build-tags).
 
-The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
+If a crypto backend is selected but isn't supported, the build fails.
+For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
+It's possible to dismiss the build error by using [the `allowcryptofallback` experiment](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails), but this is dangerous.
 
-> [!NOTE]
-> "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
 
 The next sections describe how to select a crypto backend in some common scenarios.
 
 ### Dockerfile base image
 
-Since Go 1.21, you can swap your Dockerfile's base image to the special Microsoft build of Go images marked with `-fips-`. These images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images. These exist for convenience. See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
-
-> [!NOTE]
-> Prior to Go 1.21, `-fips-` images do exist, but they are only available for Linux and include `env GOEXPERIMENT=opensslcrypto`. For this reason, these images can't easily be used to build Windows binaries on a Linux host.
+If you use a Dockerfile, you can swap its base image to the special Microsoft build of Go images marked with `-fips-`.
+These images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images.
+They are provided for convenience.
+See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
 
 ### Dockerfile env instruction
 
-If you don't use the standard Go base images (e.g. your Dockerfile downloads the Microsoft build of Go manually), use an `env` instruction before the build instruction in your Dockerfile:
+If you don't use the standard Go base images (e.g. your Dockerfile downloads the Microsoft build of Go manually), you can use an `env` instruction before the build instruction in your Dockerfile:
 
 ```dockerfile
 env GOEXPERIMENT=systemcrypto
 ```
 
-> [!NOTE]
-> Prior to Go 1.21, `systemcrypto` doesn't exist and `opensslcrypto` or `cngcrypto` must be used depending on the target platform.
-
 ### Modify the build command
 
 Another approach that generally works for any build system is to modify the build command or build script. This section lists some helpful snippets to select a backend.
 
-> [!NOTE]
-> Prior to Go 1.21, `systemcrypto` doesn't exist and `opensslcrypto` or `cngcrypto` must be used depending on the target platform.
-
 #### Linux/macOS shell (bash) - Set `GOEXPERIMENT` environment variable
 
 - Set the environment variable for all future commands:
@@ -203,14 +199,26 @@ Another approach that generally works for any build system is to modify the buil
 
 A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL), `cngcrypto` (always using CNG) and `darwincrypto` (always using CommonCrypto/CryptoKit). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
 
-The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140` and `GOFIPS=1` settings on each supported platform.
+The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140=on` and `GOFIPS=1` settings on each supported platform.
 
 > [!NOTE]
-> Since Go 1.24, setting `GOFIPS=1` is equivalent to setting `GODEBUG=fips140=on`. The latter is the recommended way to enable FIPS mode. Support for the `GOFIPS` environment variable will be removed in Go 1.25.
+> Since Go 1.24, setting `GOFIPS=1` is equivalent to setting `GODEBUG=fips140=on`.
+> The latter is the recommended way to enable FIPS mode.
+> If `GODEBUG=fips140=[...]` is set to `on` or `only`, `GOFIPS` has no effect.
+>
+> Support for the `GOFIPS` environment variable will be removed in Go 1.25.
 
 > [!NOTE]
 > The options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
 
+Since Go 1.24, the Go runtime has an independent FIPS mode, and it may be important to distinguish its FIPS mode from the system or crypto engine's FIPS mode.
+The most familiar difference is that it changes TLS stack behavior.
+The [Go Runtime FIPS mode](#go-runtime-fips-mode) section describes this in more detail.
+
+Go 1.24 also introduces `GODEBUG=fips140=only`.
+It acts as `GODEBUG=fips140=on`, but also makes a best effort to panic if a non-FIPS 140-3 compliant algorithm is used.
+This setting is partially supported in Go 1.24.
+
 ### Linux FIPS mode (OpenSSL)
 
 To set FIPS mode preference on Linux, use one of the following options. The first match in this list wins:
@@ -235,6 +243,13 @@ For more information about the standard OpenSSL FIPS behavior, see https://www.o
 >
 > Since Go 1.24, the Go runtime no longer makes any attempt to modify OpenSSL FIPS mode.
 
+> [!NOTE]
+> Prior to Go 1.24, it was possible to test FIPS mode app behavior on a non-FIPS system by setting `GOFIPS=1`.
+> This is no longer possible in 1.24, but some mechanisms are provided by OpenSSL and distros to help run this type of test.
+>
+> For OpenSSL 3, see [`OPENSSL_CONF`](https://docs.openssl.org/3.0/man5/config/) to change to a FIPS crypto provider.
+> For Azure Linux, see [`OPENSSL_FORCE_FIPS_MODE=1`](https://github.com/microsoft/azurelinux/blob/bfd36df1487511735dbd5fade66b0b613c89b46a/SPECS/openssl/0009-Add-Kernel-FIPS-mode-flag-support.patch#L34).
+
 ### Windows FIPS mode (CNG)
 
 To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy).
@@ -253,6 +268,32 @@ They are still necessary to instruct Go to run in FIPS mode, as there is no syst
 
 Prior to 1.24, CommonCrypto/CryptoKit is not used by the Microsoft build of Go.
 
+### Go Runtime FIPS mode
+
+Since Go 1.24, the Go runtime has a FIPS mode.
+It is enabled by `GODEBUG=fips140=on` (or any equivalent).
+It can be checked by calling [crypto/fips140.Enabled](https://pkg.go.dev/crypto/fips140#Enabled).
+
+This mode has many effects described in [FIPS 140-3 Compliance](https://go.dev/doc/security/fips140).
+One notable effect is that the Go runtime TLS stack will only use FIPS-compliant settings.
+
+> [!NOTE]
+> Prior to Go 1.24, the Microsoft build of Go automatically applies FIPS compliance changes to the Go runtime (including TLS behavior) when FIPS mode is detected, but it doesn't use a documented mechanism.
+
+The mechanisms in the Mirosoft Build of Go for Linux and Windows automatically enable Go runtime FIPS mode when necessary, based on the system-wide FIPS mode.
+For example, if a Linux system is in FIPS mode, the fork enables OpenSSL FIPS mode and the Go runtime FIPS mode.
+If a Windows system is in FIPS mode, CNG is already in FIPS mode, and the fork enables the Go runtime FIPS mode.
+
+> [!WARNING]
+> On macOS, there is no such thing as system-wide FIPS mode.
+> That is: there is no universal way to configure a macOS system to indicate that all programs that run on that system should follow FIPS requirements.
+> As a result, the Microsoft build of Go has no reliable indicator that the Go runtime FIPS mode should be enabled.
+>
+> For compatibility reasons, the Microsoft build of Go defaults to not enabling FIPS settings.
+> For example, FIPS settings may prevent an application from connecting to a server that doesn't support FIPS-compliant TLS.
+>
+> To make the TLS stack use FIPS-compliant settings on macOS, `GODEBUG=fips140=on` (or an equivalent) must be set explicitly.
+
 ## Usage: Extra configuration options
 
 ### Build option to require FIPS mode
@@ -342,15 +383,13 @@ For example, `go build -tags=goexperiment.systemcrypto` command will enable the
 
 Normally this is not necessary, but a shared package may need to change its implementation when compiled with a crypto backend rather than the ordinary Go backend. For example, the library may need to remove use of cryptographic algorithms that would not be permitted by FIPS, in a way that will still allow the library to function. This is done using [build constraints](https://pkg.go.dev/go/build#hdr-Build_Constraints), also known as build tags.
 
-Since Go 1.21:
 - `//go:build goexperiment.systemcrypto` conditionally includes the source file if *any* crypto backend is enabled.
 - `//go:build !goexperiment.systemcrypto` includes the file if *no* crypto backend is enabled.
 
-> [!NOTE]
-> Prior to the introduction of the systemcrypto alias in Go 1.21, the constraint is:  
-  `//go:build goexperiment.opensslcrypto && goexperiment.cngcrypto && goexperiment.boringcrypto`.
-
-The `goexperiment.systemcrypto` tag's behavior is implemented in a patch to the build system. It is not available in builds of upstream Go. The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied even if the BoringCrypto backend is enabled.
+The `goexperiment.systemcrypto` tag's behavior is implemented in a patch to the build system in the Microsoft build of Go.
+It is not available in builds of upstream Go.
+The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied even if the BoringCrypto backend is enabled.
+The constraint also doesn't interact with the FIPS features introduced in Go 1.24.
 
 ## Features
 
@@ -358,7 +397,7 @@ The `goexperiment.systemcrypto` tag's behavior is implemented in a patch to the
 
 The steps above don't require any changes to the app's source code. These steps change the Go runtime, but the crypto APIs are the same. The Go runtime will then favor OpenSSL/CNG crypto primitives over the Go standard library implementation.
 
-Note that while using a FIPS-certified cryptographic module is a FIPS requirement, it is not the only one. Code changes may be needed for a specific app to conform to FIPS in ways that can't be fixed simply by using a modified Go runtime. For example, algorithms and key sizes forbidden by FIPS 140-2 need to be removed from the app without breaking it. Misuse of approved algorithms must also be fixed. For more information, see the [FIPS User Guide](UserGuide.md).
+Note that while using a FIPS-certified cryptographic module is a FIPS requirement, it is not the only one. Code changes may be needed for a specific app to conform to FIPS in ways that can't be fixed simply by using a modified Go runtime. For example, algorithms and key sizes forbidden by FIPS 140 need to be removed from the app without breaking it. Misuse of approved algorithms must also be fixed. For more information, see the [FIPS User Guide](UserGuide.md).
 
 ### Multiple OpenSSL versions allowed
 
@@ -394,15 +433,14 @@ This feature does not require any additional configuration, but it only works wi
 
 ### TLS with FIPS-compliant settings
 
-The Go TLS stack will automatically use crypto primitives from the selected crypto backend. Yet, this isn't enough for FIPS compliance: the FIPS 140-2 standard places additional restrictions on TLS communications, mainly on which cyphers and signers are allowed. Note that this can reduce compatibility with old devices that do not support modern cryptography techniques such as TLS 1.2.
-
-Since Go 1.22, the Microsoft build of Go runtime automatically enforces that `crypto/tls` and `crypto/x509` only use FIPS-compliant settings when running in FIPS mode. This differs from upstream's BoringCrypto backend, which requires you to import `crypto/tls/fipsonly` to apply the FIPS-mandated restrictions. The Microsoft build of Go crypto backends do this automatically to reduce the source code changes necessary to produce a FIPS-compliant Go application, and to make it easier to use the same binary in both FIPS and non-FIPS environments.
+The Go TLS stack will automatically use crypto primitives from the selected crypto backend. Yet, this isn't enough for FIPS compliance: the FIPS 140 standard places additional restrictions on TLS communications, mainly on which cyphers and signers are allowed. Note that this can reduce compatibility with old devices that do not support modern cryptography techniques such as TLS 1.2.
 
-Prior to Go 1.22, a program using the Go TLS stack must import the `crypto/tls/fipsonly` package to be compliant with these restrictions. The configuration is done by an `init()` function, so only importing it is necessary:
+The Microsoft build of Go automatically enforces that `crypto/tls` and `crypto/x509` only use FIPS-compliant settings when running in FIPS mode.
+This differs from upstream's BoringCrypto backend, which requires you to import `crypto/tls/fipsonly` to apply the FIPS-mandated restrictions.
+The Microsoft build of Go does this automatically to reduce the source code changes necessary to produce a FIPS-compliant Go application, and to make it easier to use the same binary in both FIPS and non-FIPS environments.
 
-```go
-  import _ "crypto/tls/fipsonly"
-```
+> [!NOTE]
+> The new upstream Go 1.24 approach ([FIPS 140-3 Compliance](https://go.dev/doc/security/fips140)) also improves upon the BoringCrypto backend by automatically enforcing FIPS-compliant settings in the Go TLS stack when Go is running in the newly introduced FIPS mode.
 
 ## Acknowledgements
 
@@ -422,6 +460,8 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.24 (Feb 2025)
 
+See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com/go/go-1-24-fips-update/) blog post for a summary of the Feb 2025 changes.
+
 - Introduces macOS crypto backend `darwincrypto`.
 - Support `GODEBUG=fips140=on` as an alias for `GOFIPS=1`.
 - `GOFIPS=1` no longer tries to enable FIPS mode on Linux. It will now panic if FIPS mode is not enabled.

From 798c1caf24cb78770d4724fa71e1ac86f1334fff Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 12 Feb 2025 16:30:19 -0800
Subject: [PATCH 236/887] Update download links for 1.24, including macOS

---
 .../cmd/updatelinktable/updatelinktable.go    |  17 ++-
 eng/doc/Downloads.md                          |  16 ++-
 eng/doc/release-branch-links.json             | 133 ++++++++++--------
 3 files changed, 97 insertions(+), 69 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index d5769fc883a..7c9510ac3d0 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -23,9 +23,11 @@ This command updates the table in ` + docPath + ` and data in ` + jsonPath + `.
 
 var supported = []version{
 	{
-		Number:       "1.23",
+		Number:       "1.24",
 		LatestStable: true,
 		Platforms: map[string]struct{}{
+			"darwin-amd64":  {},
+			"darwin-arm64":  {},
 			"linux-amd64":   {},
 			"linux-arm64":   {},
 			"linux-armv6l":  {},
@@ -35,8 +37,7 @@ var supported = []version{
 		},
 	},
 	{
-		Number:         "1.22",
-		PreviousStable: true,
+		Number: "1.23",
 		Platforms: map[string]struct{}{
 			"linux-amd64":   {},
 			"linux-arm64":   {},
@@ -60,7 +61,7 @@ type version struct {
 	Platforms      map[string]struct{}
 }
 
-var linuxFiles = []goFileType{
+var linuxLikeFiles = []goFileType{
 	{
 		Kind:      supportdata.Archive,
 		Name:      "Binaries (tar.gz)",
@@ -281,12 +282,18 @@ func platformPrettyName(p string) string {
 	if pretty, ok := platformPrettyNames[p]; ok {
 		return pretty
 	}
+	if strings.HasPrefix(p, "darwin-") {
+		p = p + " (macOS)"
+	}
 	return p
 }
 
 func fileTypes(platform string) []goFileType {
+	if strings.HasPrefix(platform, "darwin-") {
+		return linuxLikeFiles
+	}
 	if strings.HasPrefix(platform, "linux-") {
-		return linuxFiles
+		return linuxLikeFiles
 	}
 	if strings.HasPrefix(platform, "windows-") {
 		return windowsFiles
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index 96a22dc1654..ff14029c3cc 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -10,14 +10,16 @@ This document contains a list of links to the binary releases of the Microsoft b
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
-|   | 1.23 | 1.22 |
+|   | 1.24 | 1.23 |
 | --- | --- | --- |
-| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig)<br/> |
- Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.23.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.22.assets.json)<br/> |
- linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig)<br/> |
- linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig)<br/> |
- linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig)<br/> |
- windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256)<br/> |
+| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig)<br/> |
+ Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.23.assets.json)<br/> |
+ darwin-amd64 (macOS) | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> | N/A |
+ darwin-arm64 (macOS) | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> | N/A |
+ linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig)<br/> |
+ linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig)<br/> |
+ linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig)<br/> |
+ windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256)<br/> |
 
 
 <!-- END TABLES -->
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index 5a49cdb09ce..f96ff7e9882 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -1,129 +1,148 @@
 [
   {
-    "version": "go1.23",
+    "version": "go1.24",
     "stable": true,
     "latestStable": true,
     "files": [
       {
-        "filename": "go1.23.src.tar.gz",
+        "filename": "go1.24.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig"
       },
       {
-        "filename": "go1.23.assets.json",
+        "filename": "go1.24.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.23.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.24.assets.json"
       },
       {
-        "filename": "go1.23.linux-amd64.tar.gz",
+        "filename": "go1.24.darwin-amd64.tar.gz",
+        "os": "darwin",
+        "arch": "amd64",
+        "version": "go1.24",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.24.darwin-arm64.tar.gz",
+        "os": "darwin",
+        "arch": "arm64",
+        "version": "go1.24",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.24.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.23.linux-arm64.tar.gz",
+        "filename": "go1.24.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.23.linux-armv6l.tar.gz",
+        "filename": "go1.24.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.23.windows-amd64.zip",
+        "filename": "go1.24.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.23",
+        "version": "go1.24",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256"
       }
     ]
   },
   {
-    "version": "go1.22",
+    "version": "go1.23",
     "stable": true,
-    "previousStable": true,
     "files": [
       {
-        "filename": "go1.22.src.tar.gz",
+        "filename": "go1.23.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig"
       },
       {
-        "filename": "go1.22.assets.json",
+        "filename": "go1.23.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.22.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.23.assets.json"
       },
       {
-        "filename": "go1.22.linux-amd64.tar.gz",
+        "filename": "go1.23.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.22.linux-arm64.tar.gz",
+        "filename": "go1.23.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.22.linux-armv6l.tar.gz",
+        "filename": "go1.23.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.22.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.22.windows-amd64.zip",
+        "filename": "go1.23.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.22",
+        "version": "go1.23",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.22.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256"
       }
     ]
   }

From daacfe87822fd2722ab5883b386a36c7c0958df8 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 12 Feb 2025 16:42:08 -0800
Subject: [PATCH 237/887] Add preview note for macOS

---
 eng/_util/cmd/updatelinktable/updatelinktable.go | 2 +-
 eng/doc/Downloads.md                             | 7 +++++--
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 7c9510ac3d0..57c2d3a7f47 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -283,7 +283,7 @@ func platformPrettyName(p string) string {
 		return pretty
 	}
 	if strings.HasPrefix(p, "darwin-") {
-		p = p + " (macOS)"
+		p = p + " (macOS) **Preview**<sup>2</sup>"
 	}
 	return p
 }
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index ff14029c3cc..83947320939 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -14,8 +14,8 @@ This document contains a list of links to the binary releases of the Microsoft b
 | --- | --- | --- |
 | Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig)<br/> |
  Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.23.assets.json)<br/> |
- darwin-amd64 (macOS) | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> | N/A |
- darwin-arm64 (macOS) | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> | N/A |
+ darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> | N/A |
+ darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> | N/A |
  linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig)<br/> |
  linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig)<br/> |
  linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig)<br/> |
@@ -28,6 +28,9 @@ This document contains a list of links to the binary releases of the Microsoft b
 > * https://download.microsoft.com/download/f/a/2/fa2420dd-3f08-4621-82cf-5a22abcbc8f9/microsoft-managed-lang-compiler.asc
 > * Shortened link for sharing: https://aka.ms/managed-lang-compiler-public-key
 
+> <sup>2</sup> - The macOS builds and `systemcrypto` support are currently in preview and shouldn't be used in production.
+> Please [open an issue](https://github.com/microsoft/go/issues/new) if you encounter any problems.
+
 The links in this table "float": each one downloads the latest Go release built by Microsoft that matches that column's major release number. For example, a 1.20 link will download 1.20.8-1 if that is the latest version of 1.20 available.
 
 To download a specific version, create a static link by copying one of the above URLs and adding a patch and revision number to the end of the existing version number section. Browse recent [GitHub releases in the microsoft/go repository](https://github.com/microsoft/go/releases) to find valid patch and revision numbers to use. More aka.ms links are generated than the ones that appear in the table, because the table isn't updated after every single build. For example, if the latest release is `1.20.9-1`:

From 19a2295963ae2daccc8719f0dc4001ee419f8fcd Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 13 Feb 2025 11:56:48 +0000
Subject: [PATCH 238/887] set go1.23 as previous stable version (#1560)

---
 eng/_util/cmd/updatelinktable/updatelinktable.go | 3 ++-
 eng/doc/release-branch-links.json                | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 57c2d3a7f47..907da2240a2 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -37,7 +37,8 @@ var supported = []version{
 		},
 	},
 	{
-		Number: "1.23",
+		Number:         "1.23",
+		PreviousStable: true,
 		Platforms: map[string]struct{}{
 			"linux-amd64":   {},
 			"linux-arm64":   {},
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index f96ff7e9882..311ed63bc72 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -86,6 +86,7 @@
   {
     "version": "go1.23",
     "stable": true,
+    "previousStable": true,
     "files": [
       {
         "filename": "go1.23.src.tar.gz",

From 22089d0073688aece2aa2ad343a61723f2d8b9d8 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 13 Feb 2025 18:20:54 +0000
Subject: [PATCH 239/887] fix conflicts

---
 ...001-Add-crypto-backend-GOEXPERIMENTs.patch | 66 ++++++++-----------
 1 file changed, 28 insertions(+), 38 deletions(-)

diff --git a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
index c73646e0e06..334641e7fcf 100644
--- a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,9 +11,9 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/go/internal/modindex/build.go         | 57 +++++++++++++
+ src/cmd/go/internal/modindex/build.go         | 58 ++++++++++++-
  src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
- src/go/build/build.go                         | 57 +++++++++++++
+ src/go/build/build.go                         | 58 ++++++++++++-
  src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
  .../testdata/backendtags_openssl/main.go      |  3 +
  .../testdata/backendtags_openssl/openssl.go   |  3 +
@@ -28,7 +28,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 17 files changed, 365 insertions(+)
+ 17 files changed, 363 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -45,10 +45,10 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index b4dacb0f523a8d..4315c288d10cb3 100644
+index d7e09fed25f43a..10614d17e62453 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
-@@ -886,13 +886,70 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -887,9 +887,63 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -79,6 +79,9 @@ index b4dacb0f523a8d..4315c288d10cb3 100644
 +			(ctxt.GOOS == "windows" && name == cng) ||
 +			(ctxt.GOOS == "darwin" && name == darwin)
 +	satisfiedBy := func(tag string) bool {
++		if name == tag {
++			return true
++		}
 +		if satisfiedByAnyBackend {
 +			switch tag {
 +			case openssl, cng, darwin, boring:
@@ -104,21 +107,13 @@ index b4dacb0f523a8d..4315c288d10cb3 100644
 +	}
 +
  	// other tags
- 	for _, tag := range ctxt.BuildTags {
-+		if satisfiedBy(tag) {
-+			return true
-+		}
- 		if tag == name {
- 			return true
- 		}
- 	}
- 	for _, tag := range ctxt.ToolTags {
-+		if satisfiedBy(tag) {
-+			return true
-+		}
- 		if tag == name {
- 			return true
- 		}
+-	return slices.Contains(ctxt.BuildTags, name) || slices.Contains(ctxt.ToolTags, name) ||
+-		slices.Contains(ctxt.ReleaseTags, name)
++	return slices.ContainsFunc(ctxt.BuildTags, satisfiedBy) || slices.ContainsFunc(ctxt.ToolTags, satisfiedBy) ||
++		slices.ContainsFunc(ctxt.ReleaseTags, satisfiedBy)
+ }
+ 
+ // goodOSArchFile returns false if the name contains a $GOOS or $GOARCH
 diff --git a/src/cmd/go/internal/modindex/build_test.go b/src/cmd/go/internal/modindex/build_test.go
 new file mode 100644
 index 00000000000000..1756c5d027fee0
@@ -199,10 +194,10 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 9ffffda08a99b1..78fd536fa6a6d1 100644
+index 0e5c7e512d794c..21da6ac79e606e 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
-@@ -1984,13 +1984,70 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -1984,9 +1984,63 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -233,6 +228,9 @@ index 9ffffda08a99b1..78fd536fa6a6d1 100644
 +			(ctxt.GOOS == "windows" && name == cng) ||
 +			(ctxt.GOOS == "darwin" && name == darwin)
 +	satisfiedBy := func(tag string) bool {
++		if name == tag {
++			return true
++		}
 +		if satisfiedByAnyBackend {
 +			switch tag {
 +			case openssl, cng, darwin, boring:
@@ -258,21 +256,13 @@ index 9ffffda08a99b1..78fd536fa6a6d1 100644
 +	}
 +
  	// other tags
- 	for _, tag := range ctxt.BuildTags {
-+		if satisfiedBy(tag) {
-+			return true
-+		}
- 		if tag == name {
- 			return true
- 		}
- 	}
- 	for _, tag := range ctxt.ToolTags {
-+		if satisfiedBy(tag) {
-+			return true
-+		}
- 		if tag == name {
- 			return true
- 		}
+-	return slices.Contains(ctxt.BuildTags, name) || slices.Contains(ctxt.ToolTags, name) ||
+-		slices.Contains(ctxt.ReleaseTags, name)
++	return slices.ContainsFunc(ctxt.BuildTags, satisfiedBy) || slices.ContainsFunc(ctxt.ToolTags, satisfiedBy) ||
++		slices.ContainsFunc(ctxt.ReleaseTags, satisfiedBy)
+ }
+ 
+ // goodOSArchFile returns false if the name contains a $GOOS or $GOARCH
 diff --git a/src/go/build/buildbackend_test.go b/src/go/build/buildbackend_test.go
 new file mode 100644
 index 00000000000000..aa3c5f1007ed79
@@ -512,7 +502,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 31b3d0315b64f8..e6c9b7d5e62dc0 100644
+index dff5255e000992..4d0fbdffd44957 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {

From 45cf16fd417d51bbc3fa43c0d1662fd69125ff4b Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 13 Feb 2025 18:30:00 +0000
Subject: [PATCH 240/887] fix pbkdf2 tests

---
 patches/0004-Use-crypto-backends.patch | 63 +++++++++++++++++---------
 1 file changed, 41 insertions(+), 22 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index db8298b6bd0..b9feee870db 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -43,8 +43,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/check_test.go |   8 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  16 ++
- src/crypto/pbkdf2/pbkdf2.go                   |   4 +
- src/crypto/pbkdf2/pbkdf2_test.go              |   2 +-
+ src/crypto/pbkdf2/pbkdf2.go                   |   7 +
+ src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
  src/crypto/rand/rand.go                       |   2 +-
  src/crypto/rc4/rc4.go                         |  18 ++
@@ -85,7 +85,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 81 files changed, 1131 insertions(+), 112 deletions(-)
+ 81 files changed, 1138 insertions(+), 112 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -135,10 +135,10 @@ index 1f467647f56143..4d770d7fc239e2 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 0c992118f4287b..d224514552fd63 100644
+index 005e1da86a1dc2..7536a83a124740 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -714,7 +714,7 @@ func (t *tester) registerTests() {
+@@ -710,7 +710,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -147,7 +147,7 @@ index 0c992118f4287b..d224514552fd63 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GODEBUG=fips140=on go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1161,6 +1161,11 @@ func (t *tester) internalLink() bool {
+@@ -1165,6 +1165,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -159,7 +159,7 @@ index 0c992118f4287b..d224514552fd63 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1324,12 +1329,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1328,12 +1333,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -284,7 +284,7 @@ index 2d8f964f3594c6..a587e1abde57c9 100644
  	"crypto/internal/boring/syso",
  	"crypto/x509",
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 7614b6d194facf..f0f53ab2bab047 100644
+index 377dcd6c856fa6..1744ff2ca38973 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -44,6 +44,7 @@ import (
@@ -295,7 +295,7 @@ index 7614b6d194facf..f0f53ab2bab047 100644
  	"strconv"
  	"strings"
  )
-@@ -185,7 +186,16 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -186,7 +187,16 @@ func Main(arch *sys.Arch, theArch Arch) {
  
  	buildVersion := buildcfg.Version
  	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
@@ -314,7 +314,7 @@ index 7614b6d194facf..f0f53ab2bab047 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
-index 5bc2d13d673e0a..b803c77be62a66 100644
+index 22ea8819ed239a..1e2cba08c1c760 100644
 --- a/src/crypto/aes/aes.go
 +++ b/src/crypto/aes/aes.go
 @@ -15,7 +15,7 @@ package aes
@@ -730,7 +730,7 @@ index acef8298943c2b..ca6171cf775117 100644
  	"errors"
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
-index 00000000000000..1dc05d09b2062d
+index 00000000000000..168efdb820c85b
 --- /dev/null
 +++ b/src/crypto/ecdsa/badlinkname.go
 @@ -0,0 +1,19 @@
@@ -1146,7 +1146,7 @@ index 6b02522866d57f..37e67ec184af5d 100644
  }
  
 diff --git a/src/crypto/hkdf/hkdf_test.go b/src/crypto/hkdf/hkdf_test.go
-index 201b440289bb2d..4ed4960ff35b66 100644
+index 57d90f88e93e75..4069ab057a2525 100644
 --- a/src/crypto/hkdf/hkdf_test.go
 +++ b/src/crypto/hkdf/hkdf_test.go
 @@ -6,7 +6,7 @@ package hkdf
@@ -1337,7 +1337,7 @@ index 437d9b9d4c0e0d..50728df60ea7ec 100644
  			continue
  		}
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index 271d2b03312ef0..ff76299fbe4782 100644
+index dd5fc33f2120c3..7ce0da53887a40 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
 @@ -11,6 +11,7 @@
@@ -1348,20 +1348,23 @@ index 271d2b03312ef0..ff76299fbe4782 100644
  	"crypto/internal/fips140/pbkdf2"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
-@@ -47,5 +48,8 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
+@@ -50,5 +51,11 @@ func Key[Hash hash.Hash](h func() Hash, password string, salt []byte, iter, keyL
  			return nil, errors.New("crypto/pbkdf2: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
  		}
  	}
 +	if boring.Enabled && boring.SupportsPBKDF2() {
++		if keyLength <= 0 {
++			return nil, errors.New("pkbdf2: keyLength must be larger than 0")
++		}
 +		return boring.PBKDF2([]byte(password), salt, iter, keyLength, fh)
 +	}
  	return pbkdf2.Key(fh, password, salt, iter, keyLength)
  }
 diff --git a/src/crypto/pbkdf2/pbkdf2_test.go b/src/crypto/pbkdf2/pbkdf2_test.go
-index 03980c7e54d3be..4968a666fad4e5 100644
+index eb0ed14e243c6b..cd7223c89eeae5 100644
 --- a/src/crypto/pbkdf2/pbkdf2_test.go
 +++ b/src/crypto/pbkdf2/pbkdf2_test.go
-@@ -6,7 +6,7 @@ package pbkdf2_test
+@@ -6,12 +6,13 @@ package pbkdf2_test
  
  import (
  	"bytes"
@@ -1370,6 +1373,22 @@ index 03980c7e54d3be..4968a666fad4e5 100644
  	"crypto/internal/fips140"
  	"crypto/pbkdf2"
  	"crypto/sha1"
+ 	"crypto/sha256"
+ 	"hash"
++	"internal/goexperiment"
+ 	"testing"
+ )
+ 
+@@ -223,6 +224,9 @@ func TestPBKDF2ServiceIndicator(t *testing.T) {
+ }
+ 
+ func TestMaxKeyLength(t *testing.T) {
++	if goexperiment.SystemCrypto {
++		t.Skip("Some backends don't support keys longer than 32 bytes")
++	}
+ 	// This error cannot be triggered on platforms where int is 31 bits (i.e.
+ 	// 32-bit platforms), since the max value for keyLength is 1<<31-1 and
+ 	// 1<<31-1 * hLen will always be less than 1<<32-1 * hLen.
 diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
 index 62be347e0c6822..d284b5cf7814a6 100644
 --- a/src/crypto/purego_test.go
@@ -2200,7 +2219,7 @@ index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 76fff6974e7403..3ef8b56e5c7898 100644
+index b6d455cd397e31..c8f1c4ad43fdc3 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -8,13 +8,14 @@ import (
@@ -2295,7 +2314,7 @@ index 24d78d60cf5b64..0b87185683ab8b 100644
  }
 diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
 new file mode 100644
-index 00000000000000..1adf3098356307
+index 00000000000000..acfa551001af9c
 --- /dev/null
 +++ b/src/crypto/tls/internal/tls13/doc.go
 @@ -0,0 +1,18 @@
@@ -2588,10 +2607,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e4e07843c8ce55..87e92a5d6d1ee9 100644
+index f9c403aba45f5c..c956d394776ea0 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -510,7 +510,7 @@ var depsRules = `
+@@ -520,7 +520,7 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2600,7 +2619,7 @@ index e4e07843c8ce55..87e92a5d6d1ee9 100644
  
  	crypto, hash !< FIPS;
  
-@@ -551,6 +551,7 @@ var depsRules = `
+@@ -565,6 +565,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -2608,7 +2627,7 @@ index e4e07843c8ce55..87e92a5d6d1ee9 100644
  	< CRYPTO;
  
  	CGO, fmt, net !< CRYPTO;
-@@ -576,7 +577,7 @@ var depsRules = `
+@@ -594,7 +595,7 @@ var depsRules = `
  
  	# TLS, Prince of Dependencies.
  

From 935605ba21cb1d806d1c0d95f68a80e54cd8286e Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 13 Feb 2025 19:08:08 +0000
Subject: [PATCH 241/887] don't install custom pwsh on Linux (#1561)

---
 eng/init-pwsh.sh                      | 61 ---------------------------
 eng/pipeline/stages/run-stage.yml     |  1 -
 eng/pipeline/steps/init-pwsh-task.yml | 17 --------
 3 files changed, 79 deletions(-)
 delete mode 100755 eng/init-pwsh.sh
 delete mode 100644 eng/pipeline/steps/init-pwsh-task.yml

diff --git a/eng/init-pwsh.sh b/eng/init-pwsh.sh
deleted file mode 100755
index 82123bce5fe..00000000000
--- a/eng/init-pwsh.sh
+++ /dev/null
@@ -1,61 +0,0 @@
-#!/usr/bin/env bash
-# Copyright (c) Microsoft Corporation.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
-
-# This script sets up a copy of PowerShell (pwsh command) in $HOME that can run on Linux. This is
-# used in CI to set up PowerShell in a container that doesn't have pwsh installed already. It is not
-# intended for use on dev machines.
-
-set -euo pipefail
-
-# Default values for x64.
-pwsh_version='7.2.1'
-pwsh_sha256='337d9864799ad09b46d261071b9f835f69f078814409bc2681f4cc2857b6bda5'
-pwsh_arch='x64'
-
-# 'uname' approach adapted from .NET install script: https://github.com/dotnet/install-scripts/blob/df8f863720a462448ad244f03ffeb619f0631bad/src/dotnet-install.sh#L295-L315
-if command -v uname > /dev/null; then
-  CPUName=$(uname -m)
-  case $CPUName in
-    armv*l)
-      echo "armv*l was detected, but it is not supported by the microsoft/go build infrastructure."
-      exit 1
-      ;;
-    aarch64|arm64)
-      pwsh_sha256='f0d6c9c36d69e1466e5a9412085ef52cafd10b73f862d29479b806279a2975f4'
-      pwsh_arch='arm64'
-      ;;
-  esac
-else
-  echo "uname command not detected. Assuming $pwsh_arch."
-fi
-
-pwsh_url="https://github.com/PowerShell/PowerShell/releases/download/v$pwsh_version/powershell-$pwsh_version-linux-$pwsh_arch.tar.gz"
-
-# pwsh must be installed outside of the Go repo. If it's in the repo, longtest "TestAllDependencies"
-# fails. It tries to traverse the pwsh directory and can't handle the "no such file or directory"
-# error caused by the symlink in the extracted dir: "libcrypto.so.1.0.0 -> /lib64/libcrypto.so.10".
-# Ideally this should be in the repository. Tracked by: https://github.com/microsoft/go/issues/12
-pwsh_dir="$HOME/.go-ci-prereq/pwsh/$pwsh_version"
-download_complete_indicator="$pwsh_dir/.downloaded"
-
-if [ ! -f "$download_complete_indicator" ]; then
-  echo "Downloading PowerShell $pwsh_version and extracting to '$pwsh_dir' ..."
-  echo "URL: $pwsh_url"
-
-  # Clear existing dir in case it's in a broken state.
-  rm -rf "$pwsh_dir"
-  mkdir -p "$pwsh_dir"
-
-  tarball="$pwsh_dir/pwsh.tar.gz"
-
-  curl -SL --output "$tarball" "$pwsh_url"
-  echo "$pwsh_sha256  $tarball" | sha256sum -c -
-  tar -C "$pwsh_dir" -xzf "$tarball"
-  rm "$tarball"
-
-  touch "$download_complete_indicator"
-
-  echo "Done extracting to '$pwsh_dir'"
-fi
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index f9e8bc7f17f..1da8b938cd9 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -133,7 +133,6 @@ stages:
               displayName: Cleanup
 
             - template: ../steps/checkout-unix-task.yml
-            - template: ../steps/init-pwsh-task.yml
 
           - pwsh: |
               New-Item eng/artifacts/bin -ItemType Directory -ErrorAction Ignore
diff --git a/eng/pipeline/steps/init-pwsh-task.yml b/eng/pipeline/steps/init-pwsh-task.yml
deleted file mode 100644
index e3a903aa8ba..00000000000
--- a/eng/pipeline/steps/init-pwsh-task.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
-
-# On Linux, set up PowerShell and add to PATH. This allows it to be used in later "pwsh" steps in
-# yml. We need to set this up using a script rather than pre-installing it into the container
-# because we're using an existing container.
-
-steps:
-  - script: |
-      set -euo pipefail
-
-      . eng/init-pwsh.sh
-      echo "##vso[task.prependpath]$pwsh_dir"
-      # Enable invariant mode to make .NET/PowerShell work without libicu installed.
-      echo "##vso[task.setvariable variable=DOTNET_SYSTEM_GLOBALIZATION_INVARIANT]1"
-    displayName: Init PowerShell

From 423691af401d7a83292ad9c8c2acce73aedc2a0d Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 13 Feb 2025 19:08:25 +0000
Subject: [PATCH 242/887] Upgrade Go bootstrap version to go1.24.0-1 (#1562)

* upgrade Go bootstrap version to go1.24.0-1

* pass -AzurePipelinePath to go-install.ps1

* don't set MS_USE_PATH_GO
---
 eng/pipeline/stages/run-stage.yml | 19 ++++---------------
 eng/utilities.ps1                 |  2 +-
 2 files changed, 5 insertions(+), 16 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 1da8b938cd9..446ef0c10d2 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -94,11 +94,6 @@ stages:
             - name: MS_GO_UTIL_ALLOW_ONLY_MINIMAL_DEPS
               value: '1'
 
-          # On darwin (macOS) we haven't released a Microsoft build Go toolchain.
-          - ${{ if eq(parameters.builder.os, 'darwin') }}:
-            - name: MS_USE_PATH_GO
-              value: '1'
-
           - ${{ if eq(parameters.builder.config, 'codeql_inner') }}:
             # Manually specify the repository being scanned by this job because
             # CodeQL can't detect the inner repository (the submodule)
@@ -148,16 +143,10 @@ stages:
 
           # Initialize stage 0 toolset ahead of time so we can track timing data separately from the
           # build operations. When we call this script again later, it won't download Go again.
-          - ${{ if eq(parameters.builder.os, 'darwin') }}:
-            - task: GoTool@0
-              inputs:
-                version: '1.23.3'
-              displayName: Init upstream stage 0 Go toolset
-          - ${{ else }}:
-            - pwsh: |
-                . eng/utilities.ps1
-                Download-Stage0
-              displayName: Init stage 0 Go toolset
+          - pwsh: |
+              . eng/utilities.ps1
+              Download-Stage0
+            displayName: Init stage 0 Go toolset
 
           - template: ../steps/init-submodule-task.yml
 
diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index a6929ec1ebf..48ce2d25afc 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -24,7 +24,7 @@ function Download-Stage0() {
   # pre-installed (or the right version pre-installed). This CI script installs a consistent version
   # of Go to handle this. This also makes it easier to locally repro issues in CI that involve a
   # specific version of Go. The downloaded copy of Go is called the "stage 0" version.
-  $stage0_go_version = 'go1.23.3-1'
+  $stage0_go_version = 'go1.24.0-1'
 
   # Source the install script so that we can use the PATH it assigns.
   $installScriptPath = Join-Path $PSScriptRoot "_util" "go-install.ps1"

From 8319230910a39349a9539b0875031bd0628c2ede Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 17 Feb 2025 15:08:03 +0100
Subject: [PATCH 243/887] use run.bat instead of "go tool dist test" on Windows
 (#1564)

---
 eng/_util/cmd/build/build.go | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 220c0c789e9..c613e207b86 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -209,17 +209,6 @@ func build(o *options) error {
 			}...,
 		)
 
-		// "src/run.bat" doesn't pass arguments through to "dist test" like "src/run.bash" does.
-		// This prevents "-json" from working properly: in "src/run.bat -json", "-json" is a no-op.
-		// So, use "dist test" directly, here. Some environment variables may be subtly different,
-		// but it appears to work fine for dev scenarios. https://github.com/microsoft/go/issues/109
-		if runtime.GOOS == "windows" {
-			testCommandLine = []string{
-				filepath.Join("..", "bin", "go"+executableExtension),
-				"tool", "dist", "test",
-			}
-		}
-
 		// "-json": Get test results as lines of JSON.
 		if o.JSON {
 			testCommandLine = append(testCommandLine, "-json")

From abe3e37543097d1cd7b6e1d11e24a56661226cdd Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 17 Feb 2025 16:05:30 +0000
Subject: [PATCH 244/887] Update submodule to latest master (d524e1ec):
 cmd/compile: on AMD64, turn x < 128 into x <= 127

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d9cc4944ce3..d524e1eccd5 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d9cc4944ce3f36fc8fd1c63f35c206b308a3503f
+Subproject commit d524e1eccd559b40130c3bac77f3f7dc33d476ab

From 3ebb85a6c1e6ef1d45f0f00c04090c7940a66dd2 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 18 Feb 2025 15:26:02 +0100
Subject: [PATCH 245/887] Publish test results (#1533)

* publish test results

* use json2junit

* remove line

* close converter

* fix block
---
 eng/_util/buildutil/buildutil.go         | 52 ++++++++++++++++--------
 eng/_util/cmd/build/build.go             | 50 +++++++++++++++--------
 eng/_util/cmd/run-builder/run-builder.go | 30 +++++++++-----
 eng/_util/go.mod                         |  4 +-
 eng/_util/go.sum                         | 12 +++---
 eng/pipeline/stages/run-stage.yml        | 14 ++++++-
 6 files changed, 108 insertions(+), 54 deletions(-)

diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index b6cdb774ed6..f8017e75bca 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -5,6 +5,8 @@
 package buildutil
 
 import (
+	"bufio"
+	"encoding/json"
 	"fmt"
 	"io"
 	"log"
@@ -123,26 +125,44 @@ func UnassignGOROOT() error {
 	return nil
 }
 
-// RunAndSaveStdOut runs a command and outputs the stdout to [os.Stdout] and,
-// if outPath is not empty, to a file at outPath.
-func RunAndSaveStdOut(cmdline []string, outPath string) error {
-	var stdout io.Writer = os.Stdout
-	if outPath != "" {
-		f, err := os.Create(outPath)
-		if err != nil {
-			return err
+// NewStripTestJSONWriter strips all individual test results and output entries from a JSON stream.
+// Only the overall package test results are written to the underlying writer.
+func NewStripTestJSONWriter(w io.Writer) io.Writer {
+	pr, pw := io.Pipe()
+	go func() {
+		type test struct {
+			Action  string
+			Package string
+			Test    string
 		}
-		defer func() {
-			closeErr := f.Close()
-			if err == nil {
-				err = closeErr
+		sc := bufio.NewScanner(pr)
+		for sc.Scan() {
+			var t test
+			err := json.Unmarshal(sc.Bytes(), &t)
+			if err == nil && (t.Test != "" || t.Action == "output") {
+				// Omit the test result.
+				continue
 			}
-		}()
-		stdout = io.MultiWriter(stdout, f)
-	}
+			_, err = w.Write(append(sc.Bytes(), '\n'))
+			if err != nil {
+				pw.CloseWithError(err)
+				return
+			}
+		}
+		if err := sc.Err(); err != nil {
+			pw.CloseWithError(err)
+			return
+		}
+		pw.Close()
+	}()
+	return pw
+}
 
+// RunCmdMultiWriter runs a command and outputs the stdout to multiple [io.Writer].
+// The writers are closed after the command completes.
+func RunCmdMultiWriter(cmdline []string, stdout ...io.Writer) (err error) {
 	c := exec.Command(cmdline[0], cmdline[1:]...)
-	c.Stdout = stdout
+	c.Stdout = io.MultiWriter(stdout...)
 	c.Stderr = os.Stderr
 
 	fmt.Printf("---- Running command: %v\n", c.Args)
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index c613e207b86..7054fa854b6 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -15,6 +15,7 @@ import (
 	"runtime"
 	"strings"
 
+	"github.com/microsoft/go-infra/json2junit"
 	"github.com/microsoft/go-infra/patch"
 	"github.com/microsoft/go-infra/submodule"
 	"github.com/microsoft/go/_util/buildutil"
@@ -42,7 +43,6 @@ func main() {
 
 	flag.BoolVar(&o.SkipBuild, "skipbuild", false, "Disable building Go.")
 	flag.BoolVar(&o.Test, "test", false, "Enable running tests.")
-	flag.BoolVar(&o.JSON, "json", false, "Runs tests with -json flag to emit verbose results in JSON format. For use in CI.")
 	flag.BoolVar(&o.PackBuild, "packbuild", false, "Enable creating an archive of this build using upstream 'distpack' and placing it in eng/artifacts/bin.")
 	flag.BoolVar(&o.PackSource, "packsource", false, "Enable creating a source archive using upstream 'distpack' and placing it in eng/artifacts/bin.")
 	flag.BoolVar(&o.CreatePDB, "pdb", false, "Create PDB files for all the PE binaries in the bin and tool directories. The PE files are modified in place and PDBs are placed in eng/artifacts/symbols.")
@@ -53,7 +53,7 @@ func main() {
 			"For more refresh options, use the top level 'submodule-refresh' command instead of 'build'.")
 
 	flag.StringVar(&o.Experiment, "experiment", "", "Include this string in GOEXPERIMENT.")
-	flag.StringVar(&o.TestOutFile, "testout", "", "Write the tets output to this path if this builder runs tests.")
+	flag.StringVar(&o.JUnitOutFile, "junitout", "", "Write the test output to this path as a JUnit file if this builder runs tests.")
 
 	o.MaxMakeAttempts = buildutil.MaxMakeRetryAttemptsOrExit()
 
@@ -78,20 +78,19 @@ func main() {
 }
 
 type options struct {
-	SkipBuild   bool
-	Test        bool
-	JSON        bool
-	PackBuild   bool
-	PackSource  bool
-	CreatePDB   bool
-	Refresh     bool
-	Experiment  string
-	TestOutFile string
+	SkipBuild    bool
+	Test         bool
+	PackBuild    bool
+	PackSource   bool
+	CreatePDB    bool
+	Refresh      bool
+	Experiment   string
+	JUnitOutFile string
 
 	MaxMakeAttempts int
 }
 
-func build(o *options) error {
+func build(o *options) (err error) {
 
 	scriptExtension := ".bash"
 	executableExtension := ""
@@ -209,13 +208,28 @@ func build(o *options) error {
 			}...,
 		)
 
-		// "-json": Get test results as lines of JSON.
-		if o.JSON {
+		if o.JUnitOutFile != "" {
 			testCommandLine = append(testCommandLine, "-json")
-		}
-
-		if err := buildutil.RunAndSaveStdOut(testCommandLine, o.TestOutFile); err != nil {
-			return err
+			f, err := os.Create(o.JUnitOutFile)
+			if err != nil {
+				return err
+			}
+			conv := json2junit.NewConverter(f)
+			defer func() {
+				if closeErr := conv.Close(); err == nil {
+					err = closeErr
+				}
+				if closeErr := f.Close(); err == nil {
+					err = closeErr
+				}
+			}()
+			if err := buildutil.RunCmdMultiWriter(testCommandLine, conv, buildutil.NewStripTestJSONWriter(os.Stdout)); err != nil {
+				return err
+			}
+		} else {
+			if err := buildutil.RunCmdMultiWriter(testCommandLine, os.Stdout); err != nil {
+				return err
+			}
 		}
 	}
 
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 9b52f62ac5d..7be8140cd0f 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -13,6 +13,7 @@ import (
 	"strconv"
 	"strings"
 
+	"github.com/microsoft/go-infra/json2junit"
 	"github.com/microsoft/go/_util/buildutil"
 )
 
@@ -39,8 +40,7 @@ func main() {
 	var builder = flag.String("builder", "", "[Required] Specify a builder to run. Note, this may be destructive!")
 	var experiment = flag.String("experiment", "", "Include this string in GOEXPERIMENT.")
 	var fipsMode = flag.Bool("fipsmode", false, "Run the Go tests in FIPS mode.")
-	var json = flag.Bool("json", false, "Runs tests with -json flag to emit verbose results in JSON format. For use in CI.")
-	var testOutFile = flag.String("testout", "", "Write the tets output to this path if this builder runs tests.")
+	var junitOutFile = flag.String("junitout", "", "Write the test output to this path as a JUnit file if this builder runs tests.")
 	var build = flag.Bool("build", false, "Run the build.")
 	var test = flag.Bool("test", false, "Run the tests.")
 
@@ -134,11 +134,8 @@ func main() {
 		// validate the run.ps1 script with "build" tool works to build and test Go. It runs a
 		// subset of the "test" builder's tests, but it uses the dev workflow.
 		testCmdline := append(buildCmdline, "-skipbuild", "-test")
-		if *json {
-			testCmdline = append(testCmdline, "-json")
-		}
-		if *testOutFile != "" {
-			testCmdline = append(testCmdline, "-testout", *testOutFile)
+		if *junitOutFile != "" {
+			testCmdline = append(testCmdline, "-junitout", *junitOutFile)
 		}
 		if err := run(testCmdline...); err != nil {
 			log.Fatal(err)
@@ -200,14 +197,25 @@ func main() {
 			)
 		}
 
-		if *json {
-			cmdline = append(cmdline, "-json")
-		}
+		cmdline = append(cmdline, "-json")
 
 		if *dryRun {
 			fmt.Printf("---- Dry run. Would have run test command: %v\n", cmdline)
 		} else {
-			err := buildutil.RunAndSaveStdOut(cmdline, *testOutFile)
+			f, err := os.Create(*junitOutFile)
+			if err != nil {
+				log.Fatal(err)
+			}
+			conv := json2junit.NewConverter(f)
+			defer func() {
+				if err := conv.Close(); err != nil {
+					log.Fatal(err)
+				}
+				if err := f.Close(); err != nil {
+					log.Fatal(err)
+				}
+			}()
+			err = buildutil.RunCmdMultiWriter(cmdline, conv, buildutil.NewStripTestJSONWriter(os.Stdout))
 			// If we got an ExitError, the error message was already printed by the command. We just
 			// need to exit with the same exit code.
 			if exitErr, ok := err.(*exec.ExitError); ok {
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index cf05917856a..9e843b2af0a 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.22.0
 
 require (
-	github.com/microsoft/go-infra v0.0.6
+	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/sys v0.30.0
 )
@@ -15,5 +15,5 @@ require (
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.21.0 // indirect
+	golang.org/x/text v0.22.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 2c2cea54f5d..8d33c7c3f1d 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -5,13 +5,13 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.6 h1:RB/Jx3bMC8I+16Ra9iy+HcrHe3Ss1iM46OZ0LzNUZ0Y=
-github.com/microsoft/go-infra v0.0.6/go.mod h1:L+TMMmm7bkfgUfx1FZmReNHXL9m4oqvc+bVXCuaKD30=
+github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQUqiP0Msa0Ie9gcEt0rYArLZgBi9gHGQhv4=
+github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
 golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
-golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
-golang.org/x/tools v0.28.0 h1:WuB6qZ4RPCQo5aP3WdKZS7i595EdWqWR8vqJTlwTVK8=
-golang.org/x/tools v0.28.0/go.mod h1:dcIOrVd3mfQKTgrDVQHqCPMWy6lnhfhtX3hLXYVLfRw=
+golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
+golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
+golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=
+golang.org/x/tools v0.30.0/go.mod h1:c347cR/OJfw5TI+GfX7RUPNMdDRRbjvYTS0jPyvsVtY=
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 446ef0c10d2..3f4ef6441c1 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -274,7 +274,8 @@ stages:
                     pwsh eng/run.ps1 run-builder -test `
                       -builder '${{ parameters.builder.os }}-${{ parameters.builder.arch }}-${{ parameters.builder.config }}' `
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
-                      $(if ('${{ parameters.builder.fips }}') { '-fipsmode' })
+                      $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
+                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/TestResults.xml'
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -289,6 +290,17 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
+            - task: PublishTestResults@2
+              displayName: Publish test results
+              condition: succeededOrFailed()
+              inputs:
+                testResultsFormat: JUnit
+                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
+                testRunTitle: $(System.JobDisplayName)
+                buildPlatform: ${{ parameters.builder.arch }}
+                buildConfiguration: ${{ parameters.builder.config }}
+                publishRunAttachments: true
+
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
           #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:
           #     # Retain the build: https://github.com/microsoft/go-lab/issues/59

From 68e01a60e82406303e957251e3f5287571c6cb69 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 18 Feb 2025 15:35:54 +0100
Subject: [PATCH 246/887] fix conflicts

---
 patches/0002-Vendor-crypto-backends.patch | 26 ++++-----
 patches/0004-Use-crypto-backends.patch    | 71 ++++++++++++++---------
 2 files changed, 58 insertions(+), 39 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 7b33e81f68f..a56ef982529 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -222,12 +222,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index ccfdbd8ea22d77..8279edd727aada 100644
+index c0bbca7e29bcc4..bfdd6e7bfc1213 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.28.0 // indirect
- 	golang.org/x/text v0.21.0 // indirect
+ 	golang.org/x/sys v0.30.0 // indirect
+ 	golang.org/x/text v0.22.0 // indirect
  )
 +
 +require (
@@ -236,7 +236,7 @@ index ccfdbd8ea22d77..8279edd727aada 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4d6a33e34a4e63..501aecb4cccb41 100644
+index 61223c0bbb6ee0..8828ddafccac4d 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -246,14 +246,14 @@ index 4d6a33e34a4e63..501aecb4cccb41 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea h1:JuRzAUOV9uaQdoNeuHyOEAJbpRahsICnwfPPGzzuzRw=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.30.0 h1:RwoQn3GkWiMkzlX562cLB7OxWvjH1L8xutO2WoJcRoY=
- golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
- golang.org/x/net v0.32.1-0.20250121202134-9a960c88dd98 h1:36bTiCRO7f/J3t+LumnLTJDXqxsp1x6Q7754SsRD9u4=
+ golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108 h1:FwaGHNRX5GDt6vHr+Ly+yRTs0ADe4xTlGOzwaga4ZOs=
+ golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M=
+ golang.org/x/net v0.35.1-0.20250213222735-884432780bfd h1:NtufTkm/X6BNpniJAbESf1Mvax5jGy+/oP53IEn5RiA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e3e01077c18b17..72e56b5da8e582 100644
+index 580500c033e1fc..065ddf6ab67c9a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -493,6 +493,24 @@ var depsRules = `
+@@ -497,6 +497,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS;
  
@@ -278,7 +278,7 @@ index e3e01077c18b17..72e56b5da8e582 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -506,13 +524,12 @@ var depsRules = `
+@@ -510,13 +528,12 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -296,7 +296,7 @@ index e3e01077c18b17..72e56b5da8e582 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -533,6 +550,10 @@ var depsRules = `
+@@ -537,6 +554,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -15170,7 +15170,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d42f50b43ccdba..8f04bd6fc8fd78 100644
+index 791a7d8e874bae..5c0d5b8b520ebd 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
@@ -15190,6 +15190,6 @@ index d42f50b43ccdba..8f04bd6fc8fd78 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.30.0
+ # golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108
  ## explicit; go 1.20
  golang.org/x/crypto/chacha20
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b9feee870db..8039e518e8e 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -40,7 +40,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
- src/crypto/internal/fips140test/check_test.go |   8 +-
+ src/crypto/internal/fips140test/check_test.go |  16 ++
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  16 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
@@ -85,7 +85,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 81 files changed, 1138 insertions(+), 112 deletions(-)
+ 81 files changed, 1147 insertions(+), 111 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -111,10 +111,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 1f467647f56143..4d770d7fc239e2 100644
+index 4fcc508f8ed48e..eb5ef7df6eaca1 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1543,6 +1543,19 @@ func cmdbootstrap() {
+@@ -1534,6 +1534,19 @@ func cmdbootstrap() {
  	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
  	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
@@ -135,7 +135,7 @@ index 1f467647f56143..4d770d7fc239e2 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 005e1da86a1dc2..7536a83a124740 100644
+index b137c7db7990bd..73c39e8f4e5eda 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -145,7 +145,7 @@ index 005e1da86a1dc2..7536a83a124740 100644
 -	if t.fipsSupported() {
 +	if false { // Disable these tests, they don't work if CNG/OpenSSL FIPS mode is not enabled. We already have dedicated builders for this.
  		// Test standard crypto packages with fips140=on.
- 		t.registerTest("GODEBUG=fips140=on go test crypto/...", &goTest{
+ 		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
 @@ -1165,6 +1165,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
@@ -272,7 +272,7 @@ index b2d4ad7cb0e7f6..2859879041ff8f 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 2d8f964f3594c6..a587e1abde57c9 100644
+index b114ca2a3d4115..0be0f3d218b09b 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1172,6 +1172,7 @@ var hostobj []Hostobj
@@ -1081,7 +1081,7 @@ index 00000000000000..77b69a3be88183
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
-index 41d0d170cf9fc8..b6b413532d8104 100644
+index 1c4036d5e74735..05266dea864aa3 100644
 --- a/src/crypto/fips140/fips140.go
 +++ b/src/crypto/fips140/fips140.go
 @@ -5,6 +5,7 @@
@@ -1211,28 +1211,27 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
  	"internal/goos"
  	"internal/testenv"
 diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
-index 6b0cd3f39e1695..aa586ed30454a2 100644
+index c014fff2a6d80d..be2df5988694ef 100644
 --- a/src/crypto/internal/fips140test/check_test.go
 +++ b/src/crypto/internal/fips140test/check_test.go
-@@ -5,6 +5,8 @@
- package fipstest
+@@ -6,6 +6,8 @@ package fipstest
  
  import (
+ 	"bytes"
 +	boring "crypto/internal/backend"
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/fips140"
  	. "crypto/internal/fips140/check"
  	"crypto/internal/fips140/check/checktest"
-@@ -18,7 +20,7 @@ import (
- 	"unsafe"
- )
- 
--const enableFIPSTest = true
-+const enableFIPSTest = boring.Enabled
+@@ -31,10 +33,18 @@ func TestIntegrityCheck(t *testing.T) {
+ 		t.Fatalf("GODEBUG=fips140=on but verification did not run")
+ 	}
  
- func TestFIPSCheckVerify(t *testing.T) {
- 	if Verified {
-@@ -38,6 +40,10 @@ func TestFIPSCheckVerify(t *testing.T) {
++	if !boring.Enabled {
++		t.Skip("skipping: boring not enabled")
++	}
++
+ 	if err := fips140.Supported(); err != nil {
  		t.Skipf("skipping: %v", err)
  	}
  
@@ -1240,9 +1239,29 @@ index 6b0cd3f39e1695..aa586ed30454a2 100644
 +		t.Skipf("skipping: FIPS is not enabled")
 +	}
 +
- 	cmd := testenv.Command(t, os.Args[0], "-test.v", "-test.run=TestFIPSCheck")
+ 	cmd := testenv.Command(t, os.Args[0], "-test.v", "-test.run=TestIntegrityCheck")
  	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=on")
  	out, err := cmd.CombinedOutput()
+@@ -47,6 +57,9 @@ func TestIntegrityCheck(t *testing.T) {
+ func TestIntegrityCheckFailure(t *testing.T) {
+ 	moduleStatus(t)
+ 	testenv.MustHaveExec(t)
++	if !boring.Enabled {
++		t.Skip("skipping: boring not enabled")
++	}
+ 	if err := fips140.Supported(); err != nil {
+ 		t.Skipf("skipping: %v", err)
+ 	}
+@@ -90,6 +103,9 @@ func TestIntegrityCheckFailure(t *testing.T) {
+ }
+ 
+ func TestIntegrityCheckInfo(t *testing.T) {
++	if !boring.Enabled {
++		t.Skip("skipping: boring not enabled")
++	}
+ 	if err := fips140.Supported(); err != nil {
+ 		t.Skipf("skipping: %v", err)
+ 	}
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index a0384e175f31bd..f7aa6da36f02de 100644
 --- a/src/crypto/md5/md5.go
@@ -1803,7 +1822,7 @@ index 95bb4becd2ff8c..73991434dabaf1 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 73b0c3749eedb2..1a712a0e1c5d95 100644
+index 795439d1c13df0..cc497755a2de28 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1815,7 +1834,7 @@ index 73b0c3749eedb2..1a712a0e1c5d95 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	. "crypto/rsa"
-@@ -146,6 +146,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -149,6 +149,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -1827,7 +1846,7 @@ index 73b0c3749eedb2..1a712a0e1c5d95 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -226,6 +231,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+@@ -229,6 +234,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
  	if err := priv.Validate(); err != nil {
  		t.Errorf("Validate() failed: %s", err)
  	}
@@ -1839,7 +1858,7 @@ index 73b0c3749eedb2..1a712a0e1c5d95 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -853,6 +863,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -927,6 +937,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
@@ -2607,7 +2626,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f9c403aba45f5c..c956d394776ea0 100644
+index 1889403cac91e0..01609e5e6a9d62 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -520,7 +520,7 @@ var depsRules = `

From 27e2aa0b99f0c341e1fa23df2ed1fa1da28ccdbe Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 18 Feb 2025 18:01:42 +0100
Subject: [PATCH 247/887] fix tests

---
 patches/0004-Use-crypto-backends.patch | 41 +++++++++++++++++++++++++-
 1 file changed, 40 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 8039e518e8e..b91b64cbfbb 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -40,7 +40,9 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
+ src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/check_test.go |  16 ++
+ src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  16 ++
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
@@ -85,7 +87,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 81 files changed, 1147 insertions(+), 111 deletions(-)
+ 83 files changed, 1154 insertions(+), 112 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1210,6 +1212,30 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
  	"crypto/internal/impl"
  	"internal/goos"
  	"internal/testenv"
+diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
+index ddb234bab655e1..75cfc0440b8837 100644
+--- a/src/crypto/internal/fips140test/acvp_test.go
++++ b/src/crypto/internal/fips140test/acvp_test.go
+@@ -22,6 +22,8 @@ import (
+ 	"bufio"
+ 	"bytes"
+ 	"crypto/elliptic"
++	boring "crypto/internal/backend"
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140/aes"
+@@ -2072,6 +2074,10 @@ func cmdKtsIfcResponderAft(h func() fips140.Hash) command {
+ func TestACVP(t *testing.T) {
+ 	testenv.SkipIfShortAndSlow(t)
+ 
++	if boring.Enabled && !bfips140.Enabled() {
++		t.Skipf("skipping: FIPS is not enabled")
++	}
++
+ 	const (
+ 		bsslModule    = "boringssl.googlesource.com/boringssl.git"
+ 		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
 diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
 index c014fff2a6d80d..be2df5988694ef 100644
 --- a/src/crypto/internal/fips140test/check_test.go
@@ -1262,6 +1288,19 @@ index c014fff2a6d80d..be2df5988694ef 100644
  	if err := fips140.Supported(); err != nil {
  		t.Skipf("skipping: %v", err)
  	}
+diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
+index 81ccd0cf7fdd1d..34fdd6f5aed6cd 100644
+--- a/src/crypto/internal/fips140test/fips_test.go
++++ b/src/crypto/internal/fips140test/fips_test.go
+@@ -15,7 +15,7 @@ package fipstest
+ 
+ import (
+ 	"bytes"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140/aes"
+ 	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index a0384e175f31bd..f7aa6da36f02de 100644
 --- a/src/crypto/md5/md5.go

From da8693cc2a12d762b895bc742f29d4ffcbdfbf7f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 20 Feb 2025 10:22:04 +0100
Subject: [PATCH 248/887] log all stdout in CI (#1566)

---
 eng/_util/buildutil/buildutil.go         | 35 ------------------------
 eng/_util/cmd/build/build.go             |  2 +-
 eng/_util/cmd/run-builder/run-builder.go |  2 +-
 3 files changed, 2 insertions(+), 37 deletions(-)

diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index f8017e75bca..57f57f5b77d 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -5,8 +5,6 @@
 package buildutil
 
 import (
-	"bufio"
-	"encoding/json"
 	"fmt"
 	"io"
 	"log"
@@ -125,39 +123,6 @@ func UnassignGOROOT() error {
 	return nil
 }
 
-// NewStripTestJSONWriter strips all individual test results and output entries from a JSON stream.
-// Only the overall package test results are written to the underlying writer.
-func NewStripTestJSONWriter(w io.Writer) io.Writer {
-	pr, pw := io.Pipe()
-	go func() {
-		type test struct {
-			Action  string
-			Package string
-			Test    string
-		}
-		sc := bufio.NewScanner(pr)
-		for sc.Scan() {
-			var t test
-			err := json.Unmarshal(sc.Bytes(), &t)
-			if err == nil && (t.Test != "" || t.Action == "output") {
-				// Omit the test result.
-				continue
-			}
-			_, err = w.Write(append(sc.Bytes(), '\n'))
-			if err != nil {
-				pw.CloseWithError(err)
-				return
-			}
-		}
-		if err := sc.Err(); err != nil {
-			pw.CloseWithError(err)
-			return
-		}
-		pw.Close()
-	}()
-	return pw
-}
-
 // RunCmdMultiWriter runs a command and outputs the stdout to multiple [io.Writer].
 // The writers are closed after the command completes.
 func RunCmdMultiWriter(cmdline []string, stdout ...io.Writer) (err error) {
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 7054fa854b6..b07ab302f2b 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -223,7 +223,7 @@ func build(o *options) (err error) {
 					err = closeErr
 				}
 			}()
-			if err := buildutil.RunCmdMultiWriter(testCommandLine, conv, buildutil.NewStripTestJSONWriter(os.Stdout)); err != nil {
+			if err := buildutil.RunCmdMultiWriter(testCommandLine, conv, os.Stdout); err != nil {
 				return err
 			}
 		} else {
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 7be8140cd0f..917b2e45988 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -215,7 +215,7 @@ func main() {
 					log.Fatal(err)
 				}
 			}()
-			err = buildutil.RunCmdMultiWriter(cmdline, conv, buildutil.NewStripTestJSONWriter(os.Stdout))
+			err = buildutil.RunCmdMultiWriter(cmdline, conv, os.Stdout)
 			// If we got an ExitError, the error message was already printed by the command. We just
 			// need to exit with the same exit code.
 			if exitErr, ok := err.(*exec.ExitError); ok {

From 605582a2a1062995feaab06e5f684deaae7492f8 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Wed, 19 Feb 2025 16:07:45 +0000
Subject: [PATCH 249/887] Update submodule to latest master (4267fd38):
 syscall: don't truncate newly created files on Windows

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d524e1eccd5..4267fd389e9 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d524e1eccd559b40130c3bac77f3f7dc33d476ab
+Subproject commit 4267fd389e941cf197cc3890cc42e474866c0d30

From 852dadc9f9ba50515f113aec49c0f474b4f5f23a Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 20 Feb 2025 16:59:40 +0100
Subject: [PATCH 250/887] fix conflicts

---
 ...03-Implement-crypto-internal-backend.patch | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 2004ba0694d..6a8204ef276 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2672,10 +2672,10 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 72e56b5da8e582..45ceb3e2b4ce11 100644
+index 065ddf6ab67c9a..1889403cac91e0 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -511,6 +511,11 @@ var depsRules = `
+@@ -515,6 +515,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2687,7 +2687,7 @@ index 72e56b5da8e582..45ceb3e2b4ce11 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -521,16 +526,28 @@ var depsRules = `
+@@ -525,16 +530,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2718,7 +2718,7 @@ index 72e56b5da8e582..45ceb3e2b4ce11 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -554,8 +571,12 @@ var depsRules = `
+@@ -558,8 +575,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2763,7 +2763,7 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index e6c9b7d5e62dc0..65d339be7dde32 100644
+index 4d0fbdffd44957..12ff4499f3be50 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -78,6 +78,14 @@ type Flags struct {
@@ -3085,13 +3085,13 @@ index 00000000000000..95be7ad8d38cae
 +	`
 +}
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
-index 5a98b20253181c..9042f2c2795e19 100644
+index 831ee67afc952d..d2f00d57c10286 100644
 --- a/src/runtime/runtime_boring.go
 +++ b/src/runtime/runtime_boring.go
-@@ -17,3 +17,8 @@ func boring_runtime_arg0() string {
- 
- //go:linkname fipstls_runtime_arg0 crypto/internal/boring/fipstls.runtime_arg0
- func fipstls_runtime_arg0() string { return boring_runtime_arg0() }
+@@ -14,3 +14,8 @@ func boring_runtime_arg0() string {
+ 	}
+ 	return argslice[0]
+ }
 +
 +//go:linkname crypto_backend_runtime_arg0 crypto/internal/backend.runtime_arg0
 +func crypto_backend_runtime_arg0() string {

From 73af81be7fc1377af6c042c49e61ed2b460e23c9 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Fri, 21 Feb 2025 16:07:28 +0000
Subject: [PATCH 251/887] Update submodule to latest master (64d82cd7): os:
 don't log the entire environment in tests

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4267fd389e9..64d82cd72c2 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4267fd389e941cf197cc3890cc42e474866c0d30
+Subproject commit 64d82cd72c222caa93b2f71c5970a00ec4e7929a

From d2aa161424682e2d1801bbb950bcade5f4f9a31f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Feb 2025 12:37:48 +0000
Subject: [PATCH 252/887] build(deps): bump github/codeql-action from 3.28.9 to
 3.28.10

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.9 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index da1104a34b3..b2eb028ccff 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           category: /language:go

From e42ceb1e22675ecc622a8d4797e163d8084019e1 Mon Sep 17 00:00:00 2001
From: microsoft-golang-bot <microsoft-golang-bot@users.noreply.github.com>
Date: Mon, 24 Feb 2025 16:05:21 +0000
Subject: [PATCH 253/887] Update submodule to latest master (fba83cdf):
 cmd/compile/internal/ssa: correct MOVDnop handling for arm64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 64d82cd72c2..fba83cdfc6c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 64d82cd72c222caa93b2f71c5970a00ec4e7929a
+Subproject commit fba83cdfc6c4818af5b773afa39e457d16a6db7a

From 272faa1752997c267f06cc85542c9381828014f0 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 7 Mar 2025 16:07:44 +0000
Subject: [PATCH 254/887] Update submodule to latest master (d43c0f80): net:
 add comment about blocking to Conn.Close

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index fba83cdfc6c..d43c0f80d80 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit fba83cdfc6c4818af5b773afa39e457d16a6db7a
+Subproject commit d43c0f80d80ff274d30e46fa3737deb8863d7094

From 5a633e31132be92523bffbf7ad1a3703b7023afc Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 08:39:53 +0100
Subject: [PATCH 255/887] fix conflicts

---
 patches/0002-Vendor-crypto-backends.patch     | 16 +++++------
 patches/0004-Use-crypto-backends.patch        | 28 +++++++++----------
 .../0006-Skip-failing-tests-on-Windows.patch  |  6 ++--
 3 files changed, 25 insertions(+), 25 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index a56ef982529..d3917c185fe 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -222,7 +222,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c0bbca7e29bcc4..bfdd6e7bfc1213 100644
+index 703e75746b7c9a..efd694afcf61cc 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -236,7 +236,7 @@ index c0bbca7e29bcc4..bfdd6e7bfc1213 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 61223c0bbb6ee0..8828ddafccac4d 100644
+index 5a906675570d9d..835f7dd3136a09 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -246,9 +246,9 @@ index 61223c0bbb6ee0..8828ddafccac4d 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea h1:JuRzAUOV9uaQdoNeuHyOEAJbpRahsICnwfPPGzzuzRw=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108 h1:FwaGHNRX5GDt6vHr+Ly+yRTs0ADe4xTlGOzwaga4ZOs=
- golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108/go.mod h1:bVdXmD7IV/4GdElGPozy6U7lWdRXA4qyRVGJV57uQ5M=
- golang.org/x/net v0.35.1-0.20250213222735-884432780bfd h1:NtufTkm/X6BNpniJAbESf1Mvax5jGy+/oP53IEn5RiA=
+ golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
+ golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
+ golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 580500c033e1fc..065ddf6ab67c9a 100644
 --- a/src/go/build/deps_test.go
@@ -15170,7 +15170,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 791a7d8e874bae..5c0d5b8b520ebd 100644
+index 58763fb99b155e..a6e12f8e4f9ef5 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
@@ -15190,6 +15190,6 @@ index 791a7d8e874bae..5c0d5b8b520ebd 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.33.1-0.20250210163342-e47973b1c108
- ## explicit; go 1.20
+ # golang.org/x/crypto v0.35.0
+ ## explicit; go 1.23.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b91b64cbfbb..7c1eb5b4ad0 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -137,7 +137,7 @@ index 4fcc508f8ed48e..eb5ef7df6eaca1 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index b137c7db7990bd..73c39e8f4e5eda 100644
+index 6199dbbb93cdcc..6592cf97e482dd 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -364,7 +364,7 @@ index 33942467784ad3..0282ffa9fa23c8 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"encoding/hex"
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index ea2b4e29e2b67f..f884b0d0fbefe7 100644
+index e574822c9aa6f8..cf121d9e5f654d 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
 @@ -8,7 +8,7 @@ import (
@@ -696,7 +696,7 @@ index 231f1ea04c1010..cfa113e2345816 100644
  	"crypto/subtle"
  	"errors"
 diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
-index 75d2480775669f..6a4d26fbafe090 100644
+index 8a3eb87061ad8c..a09a9fc8148039 100644
 --- a/src/crypto/ecdh/ecdh_test.go
 +++ b/src/crypto/ecdh/ecdh_test.go
 @@ -9,6 +9,7 @@ import (
@@ -1237,7 +1237,7 @@ index ddb234bab655e1..75cfc0440b8837 100644
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
 diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
-index c014fff2a6d80d..be2df5988694ef 100644
+index c4f6a95e3ecbe5..4cca9bcfaf905a 100644
 --- a/src/crypto/internal/fips140test/check_test.go
 +++ b/src/crypto/internal/fips140test/check_test.go
 @@ -6,6 +6,8 @@ package fipstest
@@ -1265,7 +1265,7 @@ index c014fff2a6d80d..be2df5988694ef 100644
 +		t.Skipf("skipping: FIPS is not enabled")
 +	}
 +
- 	cmd := testenv.Command(t, os.Args[0], "-test.v", "-test.run=TestIntegrityCheck")
+ 	cmd := testenv.Command(t, testenv.Executable(t), "-test.v", "-test.run=^TestIntegrityCheck$")
  	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=on")
  	out, err := cmd.CombinedOutput()
 @@ -47,6 +57,9 @@ func TestIntegrityCheck(t *testing.T) {
@@ -1289,7 +1289,7 @@ index c014fff2a6d80d..be2df5988694ef 100644
  		t.Skipf("skipping: %v", err)
  	}
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
-index 81ccd0cf7fdd1d..34fdd6f5aed6cd 100644
+index 3ed6152ea380d0..510c41e0ee6d96 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
 +++ b/src/crypto/internal/fips140test/fips_test.go
 @@ -15,7 +15,7 @@ package fipstest
@@ -1337,7 +1337,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 437d9b9d4c0e0d..50728df60ea7ec 100644
+index 2353ea85b54baf..493eaf7dde6a29 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,12 +6,14 @@ package md5
@@ -1861,7 +1861,7 @@ index 95bb4becd2ff8c..73991434dabaf1 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 795439d1c13df0..cc497755a2de28 100644
+index 2f54deae689725..bb2077a60b69a7 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -1937,7 +1937,7 @@ index d2ffaac0aeb674..23d8ad44d0bd9a 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index 9d707b7cde5c2d..8e1f92ea7304a8 100644
+index f9243dbf506bb5..65ca0b65a10cdc 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,13 +8,14 @@ package sha1
@@ -2008,7 +2008,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index e1af9640e25547..8896c6e85f4ada 100644
+index b3b4e77f578e60..ee75c305ef97ec 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -2078,7 +2078,7 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 1fe9d132bb186d..0692be8461e964 100644
+index 7e80f49dea4315..57e6e8cf66b9f9 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,12 +8,14 @@ package sha512
@@ -2175,7 +2175,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 38bd417a0dca72..8c1ae3c7ec5485 100644
+index 1be0c82c4bce14..be59a46bc2fc6b 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2191,7 +2191,7 @@ index 38bd417a0dca72..8c1ae3c7ec5485 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -554,7 +554,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2256,7 +2256,7 @@ index c0396e75796add..2c00e119cb66e4 100644
  				confTranscript.Sum(nil),
  				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 7c75977ad3ffb2..b9db95ca7b9d5a 100644
+index 641bbec0c96fff..57704fb76d60a5 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
index 433d93b2746..38499ce6fc0 100644
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ b/patches/0006-Skip-failing-tests-on-Windows.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] Skip failing tests on Windows
  1 file changed, 3 insertions(+)
 
 diff --git a/src/cmd/cgo/internal/test/test.go b/src/cmd/cgo/internal/test/test.go
-index 9a6c6d82cefa1a..b0b6795f6920f6 100644
+index 844b2dd42c8cbf..9e73c1feaed003 100644
 --- a/src/cmd/cgo/internal/test/test.go
 +++ b/src/cmd/cgo/internal/test/test.go
-@@ -1074,6 +1074,9 @@ func testErrno(t *testing.T) {
+@@ -1096,6 +1096,9 @@ func testErrno(t *testing.T) {
  }
  
  func testMultipleAssign(t *testing.T) {
@@ -20,4 +20,4 @@ index 9a6c6d82cefa1a..b0b6795f6920f6 100644
 +	}
  	p := C.CString("234")
  	n, m := C.strtol(p, nil, 345), C.strtol(p, nil, 10)
- 	if runtime.GOOS == "openbsd" {
+ 	defer C.free(unsafe.Pointer(p))

From 34ef09747e0ab845baaba85dfbd9e7dd8b9a4984 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 12:17:33 +0100
Subject: [PATCH 256/887] publish raw test result file

---
 eng/pipeline/stages/run-stage.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 3f4ef6441c1..5917424bf1d 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -290,6 +290,17 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
+            # Upload TestResults.xml to the pipeline artifacts.
+            # Useful for debugging, but not required for the pipeline to succeed.
+            # TODO: remove
+            - task: PublishPipelineArtifact@1
+              displayName: Publish test results raw
+              condition: succeededOrFailed()
+              inputs:
+                targetPath: $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
+                artifact: TestResults
+                publishLocation: pipeline
+
             - task: PublishTestResults@2
               displayName: Publish test results
               condition: succeededOrFailed()

From 02e7e16208ba364e4951040ed6d3f7a52231bf76 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 12:41:39 +0100
Subject: [PATCH 257/887] fix

---
 eng/pipeline/stages/run-stage.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 5917424bf1d..8ba94033b27 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -293,13 +293,12 @@ stages:
             # Upload TestResults.xml to the pipeline artifacts.
             # Useful for debugging, but not required for the pipeline to succeed.
             # TODO: remove
-            - task: PublishPipelineArtifact@1
+            - task: 1ES.PublishPipelineArtifact@1
               displayName: Publish test results raw
               condition: succeededOrFailed()
               inputs:
                 targetPath: $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
-                artifact: TestResults
-                publishLocation: pipeline
+                artifactName: TestResults
 
             - task: PublishTestResults@2
               displayName: Publish test results

From c5ebb0997979814bcd4d0da7d48a39367a2b6979 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 14:19:17 +0100
Subject: [PATCH 258/887] print file contents

---
 eng/pipeline/stages/run-stage.yml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 8ba94033b27..9d9a39207af 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -293,12 +293,9 @@ stages:
             # Upload TestResults.xml to the pipeline artifacts.
             # Useful for debugging, but not required for the pipeline to succeed.
             # TODO: remove
-            - task: 1ES.PublishPipelineArtifact@1
+            - bash: cat $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
               displayName: Publish test results raw
               condition: succeededOrFailed()
-              inputs:
-                targetPath: $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
-                artifactName: TestResults
 
             - task: PublishTestResults@2
               displayName: Publish test results

From 65b3b739701aba37621d71982ab1a61c587d7dce Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 14:48:20 +0100
Subject: [PATCH 259/887] close the xml file

---
 eng/_util/cmd/build/build.go             | 17 ++++++++---------
 eng/_util/cmd/run-builder/run-builder.go | 17 +++++++++--------
 eng/pipeline/stages/run-stage.yml        |  7 -------
 3 files changed, 17 insertions(+), 24 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index b07ab302f2b..a24788a1aed 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -215,15 +215,14 @@ func build(o *options) (err error) {
 				return err
 			}
 			conv := json2junit.NewConverter(f)
-			defer func() {
-				if closeErr := conv.Close(); err == nil {
-					err = closeErr
-				}
-				if closeErr := f.Close(); err == nil {
-					err = closeErr
-				}
-			}()
-			if err := buildutil.RunCmdMultiWriter(testCommandLine, conv, os.Stdout); err != nil {
+			err = buildutil.RunCmdMultiWriter(testCommandLine, conv, os.Stdout)
+			if closeErr := conv.Close(); err == nil {
+				err = closeErr
+			}
+			if closeErr := f.Close(); err == nil {
+				err = closeErr
+			}
+			if err != nil {
 				return err
 			}
 		} else {
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 917b2e45988..a6a6f33f979 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -207,15 +207,16 @@ func main() {
 				log.Fatal(err)
 			}
 			conv := json2junit.NewConverter(f)
-			defer func() {
-				if err := conv.Close(); err != nil {
-					log.Fatal(err)
-				}
-				if err := f.Close(); err != nil {
-					log.Fatal(err)
-				}
-			}()
 			err = buildutil.RunCmdMultiWriter(cmdline, conv, os.Stdout)
+			if errClose := conv.Close(); err == nil {
+				err = errClose
+			}
+			if errClose := f.Close(); err == nil {
+				err = errClose
+			}
+			if err != nil {
+				log.Fatal(err)
+			}
 			// If we got an ExitError, the error message was already printed by the command. We just
 			// need to exit with the same exit code.
 			if exitErr, ok := err.(*exec.ExitError); ok {
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 9d9a39207af..3f4ef6441c1 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -290,13 +290,6 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
-            # Upload TestResults.xml to the pipeline artifacts.
-            # Useful for debugging, but not required for the pipeline to succeed.
-            # TODO: remove
-            - bash: cat $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
-              displayName: Publish test results raw
-              condition: succeededOrFailed()
-
             - task: PublishTestResults@2
               displayName: Publish test results
               condition: succeededOrFailed()

From 9d84fc849b5cb3283197aa0c6372e233d290f893 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 10 Mar 2025 15:40:41 +0100
Subject: [PATCH 260/887] fix failing tests

---
 patches/0004-Use-crypto-backends.patch | 96 +++++++++++++++++++++++---
 1 file changed, 87 insertions(+), 9 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 7c1eb5b4ad0..63f267b7e1a 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -15,6 +15,7 @@ Subject: [PATCH] Use crypto backends
  src/cmd/link/internal/ld/lib.go               |   1 +
  src/cmd/link/internal/ld/main.go              |  12 +-
  src/crypto/aes/aes.go                         |   2 +-
+ src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
  src/crypto/cipher/gcm_test.go                 |   2 +-
@@ -44,7 +45,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/check_test.go |  16 ++
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
- src/crypto/md5/md5_test.go                    |  16 ++
+ src/crypto/md5/md5_test.go                    |  18 +-
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
@@ -61,11 +62,11 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/rsa.go                         |   4 +-
  src/crypto/rsa/rsa_test.go                    |  15 +-
  src/crypto/sha1/sha1.go                       |   8 +-
- src/crypto/sha1/sha1_test.go                  |   9 +-
+ src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  16 ++
+ src/crypto/sha256/sha256_test.go              |  20 +-
  src/crypto/sha512/sha512.go                   |   2 +-
- src/crypto/sha512/sha512_test.go              |  16 ++
+ src/crypto/sha512/sha512_test.go              |  24 ++-
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
@@ -87,7 +88,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 83 files changed, 1154 insertions(+), 112 deletions(-)
+ 84 files changed, 1163 insertions(+), 121 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -328,6 +329,19 @@ index 22ea8819ed239a..1e2cba08c1c760 100644
  	"crypto/internal/fips140/aes"
  	"strconv"
  )
+diff --git a/src/crypto/aes/aes_test.go b/src/crypto/aes/aes_test.go
+index cfe75f4057a96b..19a5e7d757ca8c 100644
+--- a/src/crypto/aes/aes_test.go
++++ b/src/crypto/aes/aes_test.go
+@@ -5,7 +5,7 @@
+ package aes
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"fmt"
+ 	"testing"
 diff --git a/src/crypto/boring/boring.go b/src/crypto/boring/boring.go
 index 097c37e343fdb8..a5d603896d3890 100644
 --- a/src/crypto/boring/boring.go
@@ -1337,7 +1351,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 2353ea85b54baf..493eaf7dde6a29 100644
+index 2353ea85b54baf..f1d3668e6abff4 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,12 +6,14 @@ package md5
@@ -1394,6 +1408,15 @@ index 2353ea85b54baf..493eaf7dde6a29 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
+@@ -245,7 +261,7 @@ func TestMD5Hash(t *testing.T) {
+ 
+ func TestExtraMethods(t *testing.T) {
+ 	h := New()
+-	cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++	cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ }
+ 
+ var bench = New()
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
 index dd5fc33f2120c3..7ce0da53887a40 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
@@ -1937,7 +1960,7 @@ index d2ffaac0aeb674..23d8ad44d0bd9a 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index f9243dbf506bb5..65ca0b65a10cdc 100644
+index f9243dbf506bb5..ed56e748b1f851 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
 @@ -8,13 +8,14 @@ package sha1
@@ -1976,6 +1999,15 @@ index f9243dbf506bb5..65ca0b65a10cdc 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
+@@ -252,7 +259,7 @@ func TestSHA1Hash(t *testing.T) {
+ func TestExtraMethods(t *testing.T) {
+ 	h := New()
+ 	cryptotest.NoExtraMethods(t, &h, "ConstantTimeSum",
+-		"MarshalBinary", "UnmarshalBinary", "AppendBinary")
++		"MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ }
+ 
+ var bench = New()
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
 index 069938a22dbc5a..8d0e06b86f4359 100644
 --- a/src/crypto/sha256/sha256.go
@@ -2008,7 +2040,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index b3b4e77f578e60..ee75c305ef97ec 100644
+index b3b4e77f578e60..23c4c7b4823f6c 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -2064,6 +2096,22 @@ index b3b4e77f578e60..ee75c305ef97ec 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
+@@ -354,13 +370,13 @@ func TestExtraMethods(t *testing.T) {
+ 	t.Run("SHA-224", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
+ 			h := New224()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ 	t.Run("SHA-256", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
+ 			h := New()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ }
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
 index 1435eac1f5b5dc..17e8501154762a 100644
 --- a/src/crypto/sha512/sha512.go
@@ -2078,7 +2126,7 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 7e80f49dea4315..57e6e8cf66b9f9 100644
+index 7e80f49dea4315..6b21e0a7c8e386 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,12 +8,14 @@ package sha512
@@ -2135,6 +2183,36 @@ index 7e80f49dea4315..57e6e8cf66b9f9 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
+@@ -967,25 +983,25 @@ func TestExtraMethods(t *testing.T) {
+ 	t.Run("SHA-384", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
+ 			h := New384()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ 	t.Run("SHA-512/224", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
+ 			h := New512_224()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ 	t.Run("SHA-512/256", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
+ 			h := New512_256()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ 	t.Run("SHA-512", func(t *testing.T) {
+ 		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
+ 			h := New()
+-			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
++			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
+ 		})
+ 	})
+ }
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index 01d65688284f97..d8a26c24024348 100644
 --- a/src/crypto/tls/cipher_suites.go

From ef7c975ae669335d8b5141a96577c03df99d3157 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 14:52:06 +0000
Subject: [PATCH 261/887] build(deps): bump github/codeql-action from 3.28.10
 to 3.28.11 (#1583)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.10 to 3.28.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d...6bb031afdd8eb862ea3fc1848194185e076637e5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b2eb028ccff..0d63ab37d8a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           category: /language:go

From 48672494728397a232fd2fc637d4828d32fc6da1 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 10 Mar 2025 16:08:39 +0000
Subject: [PATCH 262/887] Update submodule to latest master (e256e640):
 debug/dwarf: fix problem with DWARF 5 and Seek method

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d43c0f80d80..e256e640604 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d43c0f80d80ff274d30e46fa3737deb8863d7094
+Subproject commit e256e640604bff7916ef09451da7f4a6423152a6

From b17d37609f146da7faa9840dcff94a02cf169885 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 17 Mar 2025 08:34:06 +0000
Subject: [PATCH 263/887] Update submodule to latest master (f41fdd96):
 cmd/internal/obj/loong64: add {V,XV}NEG{B/H/W/V} instructions support

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e256e640604..f41fdd962db 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e256e640604bff7916ef09451da7f4a6423152a6
+Subproject commit f41fdd962db3264e62ec6acb4a8f5e40d22bdfed

From 2df8458f32ed3466812bdabc3e7fe46525359c37 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 17 Mar 2025 10:35:00 +0100
Subject: [PATCH 264/887] fix conflicts

---
 patches/0004-Use-crypto-backends.patch        | 99 ++++++++++---------
 ...521-when-TLS-fipsonly-mode-is-enable.patch | 58 -----------
 2 files changed, 55 insertions(+), 102 deletions(-)
 delete mode 100644 patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 63f267b7e1a..fc693314490 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -68,18 +68,20 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  24 ++-
  src/crypto/tls/cipher_suites.go               |   2 +-
+ src/crypto/tls/defaults_boring.go             |   2 +-
+ src/crypto/tls/defaults_fips140.go            |   2 +-
+ src/crypto/tls/fips140_test.go                |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  12 +-
  src/crypto/tls/handshake_client_tls13.go      |  16 +-
  src/crypto/tls/handshake_server.go            |  10 +-
  src/crypto/tls/handshake_server_tls13.go      |  27 ++-
- src/crypto/tls/internal/fips140tls/fipstls.go |   4 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   5 +-
+ src/go/build/deps_test.go                     |   3 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   4 +
@@ -88,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 84 files changed, 1163 insertions(+), 121 deletions(-)
+ 86 files changed, 1163 insertions(+), 121 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -138,7 +140,7 @@ index 4fcc508f8ed48e..eb5ef7df6eaca1 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 6199dbbb93cdcc..6592cf97e482dd 100644
+index a380e46c5dadd4..1b43601edc9ffe 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -1303,7 +1305,7 @@ index c4f6a95e3ecbe5..4cca9bcfaf905a 100644
  		t.Skipf("skipping: %v", err)
  	}
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
-index 3ed6152ea380d0..510c41e0ee6d96 100644
+index 08d60933ef38b8..8840db05bde791 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
 +++ b/src/crypto/internal/fips140test/fips_test.go
 @@ -15,7 +15,7 @@ package fipstest
@@ -1418,7 +1420,7 @@ index 2353ea85b54baf..f1d3668e6abff4 100644
  
  var bench = New()
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index dd5fc33f2120c3..7ce0da53887a40 100644
+index dff2e6cb355c5f..7d1348cadc3f61 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
 @@ -11,6 +11,7 @@
@@ -2214,7 +2216,7 @@ index 7e80f49dea4315..6b21e0a7c8e386 100644
  	})
  }
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 01d65688284f97..d8a26c24024348 100644
+index 2a96fa69036a07..f3c19c7faf1c21 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -2226,6 +2228,45 @@ index 01d65688284f97..d8a26c24024348 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
  	"crypto/rc4"
+diff --git a/src/crypto/tls/defaults_boring.go b/src/crypto/tls/defaults_boring.go
+index 96406acfca0f54..45da186a7123bd 100644
+--- a/src/crypto/tls/defaults_boring.go
++++ b/src/crypto/tls/defaults_boring.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build boringcrypto
++//go:build goexperiment.systemcrypto
+ 
+ package tls
+ 
+diff --git a/src/crypto/tls/defaults_fips140.go b/src/crypto/tls/defaults_fips140.go
+index 472bb807f04dc5..28883a511d9091 100644
+--- a/src/crypto/tls/defaults_fips140.go
++++ b/src/crypto/tls/defaults_fips140.go
+@@ -2,7 +2,7 @@
+ // Use of this source code is governed by a BSD-style
+ // license that can be found in the LICENSE file.
+ 
+-//go:build !boringcrypto
++//go:build !goexperiment.systemcrypto
+ 
+ package tls
+ 
+diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
+index c22ad485ccdae5..7dfb00580890e5 100644
+--- a/src/crypto/tls/fips140_test.go
++++ b/src/crypto/tls/fips140_test.go
+@@ -7,7 +7,7 @@ package tls
+ import (
+ 	"crypto/ecdsa"
+ 	"crypto/elliptic"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	"crypto/rsa"
+ 	"crypto/x509"
 diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
 index e702f44e986746..e506a0d8841237 100644
 --- a/src/crypto/tls/fipsonly/fipsonly.go
@@ -2253,7 +2294,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 1be0c82c4bce14..be59a46bc2fc6b 100644
+index 30f2e2a2a2c43d..a25a29a2a26785 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2269,7 +2310,7 @@ index 1be0c82c4bce14..be59a46bc2fc6b 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -554,7 +554,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -543,7 +543,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2285,9 +2326,9 @@ index 1be0c82c4bce14..be59a46bc2fc6b 100644
 +	}()
  	c := hs.c
  
- 	isResume, err := hs.processServerHello()
+ 	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index c0396e75796add..2c00e119cb66e4 100644
+index fadca22e60eecf..7a2d7ba67e6e2a 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -8,12 +8,12 @@ import (
@@ -2334,7 +2375,7 @@ index c0396e75796add..2c00e119cb66e4 100644
  				confTranscript.Sum(nil),
  				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 641bbec0c96fff..57704fb76d60a5 100644
+index 68c14b8a5a9fc3..66ac35f294abcb 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2355,7 +2396,7 @@ index 641bbec0c96fff..57704fb76d60a5 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index b6d455cd397e31..c8f1c4ad43fdc3 100644
+index 1796052a3f1f1a..895060805e2254 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -8,13 +8,14 @@ import (
@@ -2427,27 +2468,6 @@ index b6d455cd397e31..c8f1c4ad43fdc3 100644
  			"ech accept confirmation",
  			echTranscript.Sum(nil),
  			8,
-diff --git a/src/crypto/tls/internal/fips140tls/fipstls.go b/src/crypto/tls/internal/fips140tls/fipstls.go
-index 24d78d60cf5b64..0b87185683ab8b 100644
---- a/src/crypto/tls/internal/fips140tls/fipstls.go
-+++ b/src/crypto/tls/internal/fips140tls/fipstls.go
-@@ -6,14 +6,14 @@
- package fips140tls
- 
- import (
--	"crypto/internal/fips140"
-+	"crypto/fips140"
- 	"sync/atomic"
- )
- 
- var required atomic.Bool
- 
- func init() {
--	if fips140.Enabled {
-+	if fips140.Enabled() {
- 		Force()
- 	}
- }
 diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
 new file mode 100644
 index 00000000000000..acfa551001af9c
@@ -2743,7 +2763,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 1889403cac91e0..01609e5e6a9d62 100644
+index 70f0713b6359f8..01609e5e6a9d62 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -520,7 +520,7 @@ var depsRules = `
@@ -2763,15 +2783,6 @@ index 1889403cac91e0..01609e5e6a9d62 100644
  	< CRYPTO;
  
  	CGO, fmt, net !< CRYPTO;
-@@ -594,7 +595,7 @@ var depsRules = `
- 
- 	# TLS, Prince of Dependencies.
- 
--	FIPS, sync/atomic < crypto/tls/internal/fips140tls;
-+	crypto/fips140, sync/atomic < crypto/tls/internal/fips140tls;
- 
- 	crypto/internal/boring/sig, crypto/tls/internal/fips140tls < crypto/tls/fipsonly;
- 
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
 index 00000000000000..52748c44698076
diff --git a/patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch b/patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
deleted file mode 100644
index 7b39f407e72..00000000000
--- a/patches/0010-Support-curve-P-521-when-TLS-fipsonly-mode-is-enable.patch
+++ /dev/null
@@ -1,58 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Mon, 30 Sep 2024 14:41:28 +0200
-Subject: [PATCH] Support curve P-521 when TLS fipsonly mode is enabled
-
-We have historically supported P-521 in TLS when fipsonly mode is
-enabled, as this aligns with CNG, OpenSSL and SymCrypt FIPs policies.
-
-Upstream follows the boringssl FIPS policy, which doesn't allow P-521.
-
-This change adds support for P-521 in TLS when fipsonly mode is enabled.
----
- src/crypto/tls/defaults.go  | 3 ++-
- src/crypto/tls/fips_test.go | 3 ++-
- 2 files changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index f25d0d3ce3f9eb..08c091168d6383 100644
---- a/src/crypto/tls/defaults.go
-+++ b/src/crypto/tls/defaults.go
-@@ -102,7 +102,7 @@ var defaultSupportedVersionsFIPS = []uint16{
- 
- // defaultCurvePreferencesFIPS are the FIPS-allowed curves,
- // in preference order (most preferable first).
--var defaultCurvePreferencesFIPS = []CurveID{CurveP256, CurveP384}
-+var defaultCurvePreferencesFIPS = []CurveID{CurveP256, CurveP384, CurveP521}
- 
- // defaultSupportedSignatureAlgorithmsFIPS currently are a subset of
- // defaultSupportedSignatureAlgorithms without Ed25519 and SHA-1.
-@@ -115,6 +115,7 @@ var defaultSupportedSignatureAlgorithmsFIPS = []SignatureScheme{
- 	PKCS1WithSHA384,
- 	ECDSAWithP384AndSHA384,
- 	PKCS1WithSHA512,
-+	ECDSAWithP521AndSHA512,
- }
- 
- // defaultCipherSuitesFIPS are the FIPS-allowed cipher suites.
-diff --git a/src/crypto/tls/fips_test.go b/src/crypto/tls/fips_test.go
-index ab3c4465ddff0c..fc47e8ba8313cd 100644
---- a/src/crypto/tls/fips_test.go
-+++ b/src/crypto/tls/fips_test.go
-@@ -111,7 +111,7 @@ func isFIPSCipherSuite(id uint16) bool {
- 
- func isFIPSCurve(id CurveID) bool {
- 	switch id {
--	case CurveP256, CurveP384:
-+	case CurveP256, CurveP384, CurveP521:
- 		return true
- 	}
- 	return false
-@@ -135,6 +135,7 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
- 		PKCS1WithSHA384,
- 		ECDSAWithP384AndSHA384,
- 		PKCS1WithSHA512,
-+		ECDSAWithP521AndSHA512,
- 		PSSWithSHA256,
- 		PSSWithSHA384,
- 		PSSWithSHA512:

From 623c46f62d1b69fda24152605449ae2eabe7e223 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 17 Mar 2025 16:06:18 +0000
Subject: [PATCH 265/887] Update submodule to latest master (57c44fde):
 html/template: document comment stripping

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f41fdd962db..57c44fdefc8 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f41fdd962db3264e62ec6acb4a8f5e40d22bdfed
+Subproject commit 57c44fdefc818f90b98fa1d5c0cd0fccdc35edf8

From cd68b784be98adaebaaf07322fdf22c879b2130a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Tue, 18 Mar 2025 09:20:58 +0000
Subject: [PATCH 266/887] Update submodule to latest master (06947183):
 runtime: add function runtime.cgoSigtramp support on loong64 and enable
 cgo-traceback testcases

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 57c44fdefc8..06947183899 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 57c44fdefc818f90b98fa1d5c0cd0fccdc35edf8
+Subproject commit 069471838998c304ac751b031a19283a9ad30bdb

From d3a4e632cbf6417f100335cd120e7b1b0c391df3 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 19 Mar 2025 16:06:36 +0000
Subject: [PATCH 267/887] Update submodule to latest master (56e5476e):
 runtime: in asan mode unregister root regions on free

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 06947183899..56e5476e10d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 069471838998c304ac751b031a19283a9ad30bdb
+Subproject commit 56e5476e10db25ce71f562bd6ee0910a83532b04

From ca1fd11f09f79edb3f707e28820d3f8888cfe4ac Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Mar 2025 10:41:33 +0000
Subject: [PATCH 268/887] build(deps): bump github/codeql-action from 3.28.11
 to 3.28.12

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.11 to 3.28.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/6bb031afdd8eb862ea3fc1848194185e076637e5...5f8171a638ada777af81d42b55959a643bb29017)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0d63ab37d8a..f1b7abac034 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
+        uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
         with:
           category: /language:go

From 732a3147676354b7a2e1b575aded403065556d1b Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 21 Mar 2025 15:22:10 +0000
Subject: [PATCH 269/887] Update submodule to latest master (c386ed10):
 cmd/internal/obj/riscv: fix the encoding for REV8 and ORCB

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 56e5476e10d..c386ed107e6 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 56e5476e10db25ce71f562bd6ee0910a83532b04
+Subproject commit c386ed107e65f495acb6aacb0efcaade27da6a15

From 80d943914de3696c289e934aadb6c0b7b1590fd9 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Fri, 21 Mar 2025 16:29:58 +0100
Subject: [PATCH 270/887] fix conflicts

---
 patches/0004-Use-crypto-backends.patch | 96 +-------------------------
 1 file changed, 2 insertions(+), 94 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index fc693314490..54b6b3cb562 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -87,10 +87,9 @@ Subject: [PATCH] Use crypto backends
  src/hash/marshal_test.go                      |   4 +
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
- src/net/smtp/smtp_test.go                     |  72 ++++---
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 86 files changed, 1163 insertions(+), 121 deletions(-)
+ 85 files changed, 1117 insertions(+), 95 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -140,7 +139,7 @@ index 4fcc508f8ed48e..eb5ef7df6eaca1 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index a380e46c5dadd4..1b43601edc9ffe 100644
+index e939768a2f4809..3197a8b81c2886 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -2862,97 +2861,6 @@ index 514cbd098ae772..8ec689416dde1d 100644
  	mustHaveExternalNetwork(t)
  
  	const testNXDOMAIN = "invalid.invalid."
-diff --git a/src/net/smtp/smtp_test.go b/src/net/smtp/smtp_test.go
-index 389eda9ad54b99..110d60beb0e70c 100644
---- a/src/net/smtp/smtp_test.go
-+++ b/src/net/smtp/smtp_test.go
-@@ -1136,40 +1136,60 @@ func sendMail(hostPort string) error {
- 
- // localhostCert is a PEM-encoded TLS cert generated from src/crypto/tls:
- //
--//	go run generate_cert.go --rsa-bits 1024 --host 127.0.0.1,::1,example.com \
-+//	Use a 2048-bits RSA key to make it FIPS-compliant.
-+//	go run generate_cert.go --rsa-bits 2048 --host 127.0.0.1,::1,example.com \
- //		--ca --start-date "Jan 1 00:00:00 1970" --duration=1000000h
- var localhostCert = []byte(`
- -----BEGIN CERTIFICATE-----
--MIICFDCCAX2gAwIBAgIRAK0xjnaPuNDSreeXb+z+0u4wDQYJKoZIhvcNAQELBQAw
--EjEQMA4GA1UEChMHQWNtZSBDbzAgFw03MDAxMDEwMDAwMDBaGA8yMDg0MDEyOTE2
--MDAwMFowEjEQMA4GA1UEChMHQWNtZSBDbzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
--gYkCgYEA0nFbQQuOWsjbGtejcpWz153OlziZM4bVjJ9jYruNw5n2Ry6uYQAffhqa
--JOInCmmcVe2siJglsyH9aRh6vKiobBbIUXXUU1ABd56ebAzlt0LobLlx7pZEMy30
--LqIi9E6zmL3YvdGzpYlkFRnRrqwEtWYbGBf3znO250S56CCWH2UCAwEAAaNoMGYw
--DgYDVR0PAQH/BAQDAgKkMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQF
--MAMBAf8wLgYDVR0RBCcwJYILZXhhbXBsZS5jb22HBH8AAAGHEAAAAAAAAAAAAAAA
--AAAAAAEwDQYJKoZIhvcNAQELBQADgYEAbZtDS2dVuBYvb+MnolWnCNqvw1w5Gtgi
--NmvQQPOMgM3m+oQSCPRTNGSg25e1Qbo7bgQDv8ZTnq8FgOJ/rbkyERw2JckkHpD4
--n4qcK27WkEDBtQFlPihIM8hLIuzWoi/9wygiElTy/tVL3y7fGCvY2/k1KBthtZGF
--tN8URjVmyEo=
-+MIIDOTCCAiGgAwIBAgIQKhWw7zkzXjX78HaPlVbNrjANBgkqhkiG9w0BAQsFADAS
-+MRAwDgYDVQQKEwdBY21lIENvMCAXDTcwMDEwMTAwMDAwMFoYDzIwODQwMTI5MTYw
-+MDAwWjASMRAwDgYDVQQKEwdBY21lIENvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
-+MIIBCgKCAQEAy1EYLA8IFvZyUPY+uI7KToneaQPvIzQiOeWlDnFnoanw6h3KpoVc
-++yNbinK41WfXoSN/1kJ9gmGiFhJTPZ4rQ7DJsD7ethcpuz4uIimdWPohcBzwgbx4
-+wjhUgfUsCO6m76fFqrhbkHMDiS2iUjg2gyMVQCrqi8EuBW16yFQdJqPU04p+2rYw
-+eJ9lzdeSLR4yvx7p1JS8sS4DbSyrAUaJ9J1sH/gu0nSHNMo7WtIu9K8JmPeYR4X5
-+5KLURBU9PmvoGW+5ss/xS6SnacHAD9FebNPQqGB/soBA9gdJIN+5KW0xcE38Zz5Q
-+wAAUiU+VlWuZmge0sI8Ix8uIPIvGQSKN0wIDAQABo4GIMIGFMA4GA1UdDwEB/wQE
-+AwICpDATBgNVHSUEDDAKBggrBgEFBQcDATAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
-+DgQWBBRNMP9Cr0yrXpMpsgEtDr8FPmUEazAuBgNVHREEJzAlggtleGFtcGxlLmNv
-+bYcEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0BAQsFAAOCAQEAF0/z
-+KEnZrAsz4ov4fEvKY42EbKPm8s0pklPLmKVIh/iS7jTxxxvgDtOToiJ6IXY8Cfb3
-+nG1i78YakoVPUL5Cfh5LKDefMoefk6575ur2+gSdzgNmKUnlVfOMfpflia/ugATZ
-+5ORhpmKRKWzwXQ67S5XeVlZAehTsywQstsDu8WEVoSUnRSk1jZsCThOQfdlpox+K
-+71rGPSTxB9yCHMzZsk4xyZlGLaC0vDSJ+Zb5gWvAcvkSnpREvmc3/9TaW/lbUed6
-+uhO17lARcUhPCzkR5wAZCo/PihHMSXL8cqT4QdIux75OBxB/3EgLHL7KQw28A50g
-+DogldK8zx1ZADmupUA==
- -----END CERTIFICATE-----`)
- 
- // localhostKey is the private key for localhostCert.
- var localhostKey = []byte(testingKey(`
- -----BEGIN RSA TESTING KEY-----
--MIICXgIBAAKBgQDScVtBC45ayNsa16NylbPXnc6XOJkzhtWMn2Niu43DmfZHLq5h
--AB9+Gpok4icKaZxV7ayImCWzIf1pGHq8qKhsFshRddRTUAF3np5sDOW3QuhsuXHu
--lkQzLfQuoiL0TrOYvdi90bOliWQVGdGurAS1ZhsYF/fOc7bnRLnoIJYfZQIDAQAB
--AoGBAMst7OgpKyFV6c3JwyI/jWqxDySL3caU+RuTTBaodKAUx2ZEmNJIlx9eudLA
--kucHvoxsM/eRxlxkhdFxdBcwU6J+zqooTnhu/FE3jhrT1lPrbhfGhyKnUrB0KKMM
--VY3IQZyiehpxaeXAwoAou6TbWoTpl9t8ImAqAMY8hlULCUqlAkEA+9+Ry5FSYK/m
--542LujIcCaIGoG1/Te6Sxr3hsPagKC2rH20rDLqXwEedSFOpSS0vpzlPAzy/6Rbb
--PHTJUhNdwwJBANXkA+TkMdbJI5do9/mn//U0LfrCR9NkcoYohxfKz8JuhgRQxzF2
--6jpo3q7CdTuuRixLWVfeJzcrAyNrVcBq87cCQFkTCtOMNC7fZnCTPUv+9q1tcJyB
--vNjJu3yvoEZeIeuzouX9TJE21/33FaeDdsXbRhQEj23cqR38qFHsF1qAYNMCQQDP
--QXLEiJoClkR2orAmqjPLVhR3t2oB3INcnEjLNSq8LHyQEfXyaFfu4U9l5+fRPL2i
--jiC0k/9L5dHUsF0XZothAkEA23ddgRs+Id/HxtojqqUT27B8MT/IGNrYsp4DvS/c
--qgkeluku4GjxRlDMBuXk94xOBEinUs+p/hwP1Alll80Tpg==
-+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDLURgsDwgW9nJQ
-+9j64jspOid5pA+8jNCI55aUOcWehqfDqHcqmhVz7I1uKcrjVZ9ehI3/WQn2CYaIW
-+ElM9nitDsMmwPt62Fym7Pi4iKZ1Y+iFwHPCBvHjCOFSB9SwI7qbvp8WquFuQcwOJ
-+LaJSODaDIxVAKuqLwS4FbXrIVB0mo9TTin7atjB4n2XN15ItHjK/HunUlLyxLgNt
-+LKsBRon0nWwf+C7SdIc0yjta0i70rwmY95hHhfnkotREFT0+a+gZb7myz/FLpKdp
-+wcAP0V5s09CoYH+ygED2B0kg37kpbTFwTfxnPlDAABSJT5WVa5maB7SwjwjHy4g8
-+i8ZBIo3TAgMBAAECggEAc7dv/oN/ozIY1iOQhxId6p1lTHfEv1CIulMNoi7BQK2s
-+RFM4Z5Y32WfCTgYFVNCJVVkTBStKq85Npio/3i4Libcw03K05wY/5iX5s8/jkiSq
-+q1iNOgm+4SuWTXDw4xSRRo1CX2wWERykwoqKfCkqPXDWQ3Mpkukb/FLXMvVMshRA
-+9v9L6MyrCnsFHl8q2J6hcC+RQJ0pb5I4NF6KhMxABWxxxlDO0zYLA0wfhEn8nj/l
-+J37QLHmsA7pzxo+NqDTPgpfBuuTbRVGMkC+fPCXYinbubBeURFO2j2yBlseK+Vbd
-+sEffiAnPr4ocCz0k0tHAMMY7hKHup2HWuJGFu0IhAQKBgQDkKFEEcYWNx5Ybl1LV
-+qr2qIYofpFL+Gu5MWSZxzZbE8u9v0tTsp8SRhXkgjeHY6qjBUBnLgklOKwSigQAm
-+j9de44cXjnUIArzeAHsH3fzpYrLfsvBla6wQyr34D0chVCZ0cX/s/zXkSN4PcEkA
-+GGfKAENrGskDyc4uq1sIactu8wKBgQDkIL/XT7ysvsaxA+SfIs2CHgb8GNKgtoI1
-+QyR0+MfeJGCLwI9qcLbVzXda34qrzQw3YLIm2VHqhzJ4zb0gnyJ4adPZYwpLTgiU
-+jVksBVIwBTfbxYvF2+07poCSobCFKLGQnAujhDDIGDAUKQXQmFcqUNWw0QHfQzkS
-+xs36H27doQKBgQCjM8+YLRgKbc0LGXhwTHz1GJ6zuZiAGYWB6XddimEhqmDpjVcv
-+nWY3bdFSHwuBXYGvHfwFncGP/6eGEl6oNtYpEvoMOKOwQj0VVCStYPZLf4VSDK52
-+7ckcDdpLeao4xffn7VRDk97Z1+G4C2q8fbioPv36vCMz6YPp0DsCzqJtTwKBgCUN
-+4LtDW10fu7xC6p6ik4jgAbhu+79ZBbtLBZ/uTOCbPgdVJrZeSoRd1FYxWx/etW5F
-+SYqf3/tdLGiM2nxy/LFcVynHOYPTz/b5IpPQ5XGhV1peMv7XYyg+OkIW+0oVuwnH
-+HujXbukBbMXJiAVCyV25NYx71ncCP0H6grhu5J4hAoGAUaketZWHD/ks9JCoPtfy
-+pNnXqrIvTp1cSGJpVUQT/DUqAjevyZ5Q8PFPf09BZ6uYlXtCqsp7pA/fqNdlJRPR
-+tHRjpZ5XauBiFdpRNH4tJBTiWWhyuWhkWn369Az7HP3CIlJLeq2FlKCvMClcO4op
-+Qc9LHT7jqtcy+LqAVBpsJ/o=
- -----END RSA TESTING KEY-----`))
- 
- func testingKey(s string) string { return strings.ReplaceAll(s, "TESTING KEY", "PRIVATE KEY") }
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
 index 8c623871932f7d..2fa55073f5c19c 100644
 --- a/src/os/exec/exec_test.go

From 3c55fe5f3502d3fe486667e545b849be5dfa68a1 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 24 Mar 2025 09:17:29 +0100
Subject: [PATCH 271/887] update submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c386ed107e6..3ada42ffedf 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c386ed107e65f495acb6aacb0efcaade27da6a15
+Subproject commit 3ada42ffedf61343cc8a7cd7d6293bd646ecf3a6

From 0177c6203a1a8f70d369a6a53510e22836269c87 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 24 Mar 2025 16:07:05 +0000
Subject: [PATCH 272/887] Update submodule to latest master (7372b644):
 net/url: document referenced RFCs

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 3ada42ffedf..7372b64425e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 3ada42ffedf61343cc8a7cd7d6293bd646ecf3a6
+Subproject commit 7372b64425eda6725fb84be71d6a3c4415b35d0d

From 0ee315b45a85f416190d99c5b898ea0bc79f940a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 25 Mar 2025 11:06:08 +0000
Subject: [PATCH 273/887] build(deps): bump github/codeql-action from 3.28.12
 to 3.28.13

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.12 to 3.28.13.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5f8171a638ada777af81d42b55959a643bb29017...1b549b9259bda1cb5ddde3b41741a82a2d15a841)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f1b7abac034..d153879d631 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
         with:
           category: /language:go

From d09c8aa897225f255b4e7f1da303926780a96171 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 26 Mar 2025 16:08:03 +0000
Subject: [PATCH 274/887] Update submodule to latest master (9ce47e66):
 cmd/internal/obj/arm64: add support for BTI instruction

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 7372b64425e..9ce47e66e8e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 7372b64425eda6725fb84be71d6a3c4415b35d0d
+Subproject commit 9ce47e66e8eb7348005f1e45a77a729e7f146a1e

From 85a3f1061c2b2f60a1465c7f8844be4ea912492d Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 27 Mar 2025 11:53:19 -0700
Subject: [PATCH 275/887] Add docs/ readme, update release note file (#1604)

---
 docs/README.md | 7 +++++++
 docs/go1.23.md | 3 ---
 docs/go1.25.md | 3 +++
 3 files changed, 10 insertions(+), 3 deletions(-)
 create mode 100644 docs/README.md
 delete mode 100644 docs/go1.23.md
 create mode 100644 docs/go1.25.md

diff --git a/docs/README.md b/docs/README.md
new file mode 100644
index 00000000000..d57f9a61fa7
--- /dev/null
+++ b/docs/README.md
@@ -0,0 +1,7 @@
+# Release Notes
+
+This directory contains release notes for the current branch's major version of the Microsoft build of Go.
+Each branch contains the final release notes for that major version and notes for minor releases of that major version, if any have been written.
+
+> [!IMPORTANT]
+> General docs for the Microsoft build of Go are in the [root README](/README.md), and additional docs are [in `eng/doc`](/eng/doc).
diff --git a/docs/go1.23.md b/docs/go1.23.md
deleted file mode 100644
index c99b2796226..00000000000
--- a/docs/go1.23.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# Microsoft build of Go 1.23 release notes
-
-After the release of 1.23, 1.21 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).
diff --git a/docs/go1.25.md b/docs/go1.25.md
new file mode 100644
index 00000000000..9bc2bbd1b67
--- /dev/null
+++ b/docs/go1.25.md
@@ -0,0 +1,3 @@
+# Microsoft build of Go 1.25 release notes
+
+After the release of 1.25, 1.23 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).

From 71b422340f18017a948868ddd89ad69e8781929e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 28 Mar 2025 16:06:12 +0000
Subject: [PATCH 276/887] Update submodule to latest master (e6c2e12c):
 cmd/compile/internal/ssa: optimise more branches with zero on riscv64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9ce47e66e8e..e6c2e12c63d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9ce47e66e8eb7348005f1e45a77a729e7f146a1e
+Subproject commit e6c2e12c63db5b24724db873009373af413cd1ea

From 408b537720344348c4dbf39141823c2a78b40922 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 31 Mar 2025 16:06:17 +0000
Subject: [PATCH 277/887] Update submodule to latest master (eec3745b):
 cmd/compile/internal/ssa: replace uses of interface{} with Sym/Aux

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e6c2e12c63d..eec3745bd78 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e6c2e12c63db5b24724db873009373af413cd1ea
+Subproject commit eec3745bd7861f447bfe5fe5a27314079d46acec

From b244259f0fa36e16ff3c3acd1949ff90ee560cce Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 2 Apr 2025 16:08:38 +0000
Subject: [PATCH 278/887] Update submodule to latest master (83bbf478):
 crypto/tls: use crypto/hkdf

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index eec3745bd78..83bbf47863d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit eec3745bd7861f447bfe5fe5a27314079d46acec
+Subproject commit 83bbf47863d6dffb29b5a638db6c89bed0c2a763

From 8221f00827fbcd2bbf0d253abbe3b0a562f76863 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Thu, 3 Apr 2025 15:14:33 +0200
Subject: [PATCH 279/887] fix conflicts

---
 patches/0002-Vendor-crypto-backends.patch | 10 +--
 patches/0004-Use-crypto-backends.patch    | 82 +++--------------------
 2 files changed, 14 insertions(+), 78 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index d3917c185fe..bf1ceb768cf 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -222,11 +222,11 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 703e75746b7c9a..efd694afcf61cc 100644
+index d7c0cfb6dd3cf8..e69b2b9bdd811a 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.30.0 // indirect
+ 	golang.org/x/sys v0.31.0 // indirect
  	golang.org/x/text v0.22.0 // indirect
  )
 +
@@ -236,7 +236,7 @@ index 703e75746b7c9a..efd694afcf61cc 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 5a906675570d9d..835f7dd3136a09 100644
+index 834044f135aba5..b247d0e1b17c74 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -250,7 +250,7 @@ index 5a906675570d9d..835f7dd3136a09 100644
  golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
  golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 580500c033e1fc..065ddf6ab67c9a 100644
+index c355cb42f7ec3b..23b17e1886310e 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -497,6 +497,24 @@ var depsRules = `
@@ -15170,7 +15170,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 58763fb99b155e..a6e12f8e4f9ef5 100644
+index 6eaae03de31d05..e2c997ee84ab0d 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,19 @@
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 54b6b3cb562..b4328fdf467 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -74,9 +74,9 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  12 +-
- src/crypto/tls/handshake_client_tls13.go      |  16 +-
+ src/crypto/tls/handshake_client_tls13.go      |   2 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  27 ++-
+ src/crypto/tls/handshake_server_tls13.go      |  13 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
@@ -89,7 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1117 insertions(+), 95 deletions(-)
+ 85 files changed, 1095 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2327,16 +2327,12 @@ index 30f2e2a2a2c43d..a25a29a2a26785 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index fadca22e60eecf..7a2d7ba67e6e2a 100644
+index 66dc76f72d6e6f..c8bb0c02d64afd 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
-@@ -8,12 +8,12 @@ import (
- 	"bytes"
- 	"context"
- 	"crypto"
-+	"crypto/hkdf"
+@@ -11,9 +11,9 @@ import (
+ 	"crypto/hkdf"
  	"crypto/hmac"
--	"crypto/internal/fips140/hkdf"
  	"crypto/internal/fips140/mlkem"
 -	"crypto/internal/fips140/tls13"
  	"crypto/rsa"
@@ -2345,34 +2341,6 @@ index fadca22e60eecf..7a2d7ba67e6e2a 100644
  	"errors"
  	"hash"
  	"slices"
-@@ -90,8 +90,12 @@ func (hs *clientHandshakeStateTLS13) handshake() error {
- 		confTranscript.Write(hs.serverHello.original[:30])
- 		confTranscript.Write(make([]byte, 8))
- 		confTranscript.Write(hs.serverHello.original[38:])
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
-+		if err != nil {
-+			return err
-+		}
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
-+			secret,
- 			"ech accept confirmation",
- 			confTranscript.Sum(nil),
- 			8,
-@@ -264,8 +268,12 @@ func (hs *clientHandshakeStateTLS13) processHelloRetryRequest() error {
- 			copy(hrrHello, hs.serverHello.original)
- 			hrrHello = bytes.Replace(hrrHello, hs.serverHello.encryptedClientHello, make([]byte, 8), 1)
- 			confTranscript.Write(hrrHello)
-+			secret, err := hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil)
-+			if err != nil {
-+				return err
-+			}
- 			acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--				hkdf.Extract(hs.suite.hash.New, hs.echContext.innerHello.random, nil),
-+				secret,
- 				"hrr ech accept confirmation",
- 				confTranscript.Sum(nil),
- 				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
 index 68c14b8a5a9fc3..66ac35f294abcb 100644
 --- a/src/crypto/tls/handshake_server.go
@@ -2395,16 +2363,13 @@ index 68c14b8a5a9fc3..66ac35f294abcb 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 1796052a3f1f1a..895060805e2254 100644
+index 929d865dd403ef..4548d0660987f5 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -8,13 +8,14 @@ import (
- 	"bytes"
- 	"context"
+@@ -10,11 +10,12 @@ import (
  	"crypto"
-+	"crypto/hkdf"
+ 	"crypto/hkdf"
  	"crypto/hmac"
--	"crypto/internal/fips140/hkdf"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
 -	"crypto/internal/fips140/tls13"
@@ -2438,35 +2403,6 @@ index 1796052a3f1f1a..895060805e2254 100644
  	state, err := marshaler.MarshalBinary()
  	if err != nil {
  		return nil
-@@ -572,8 +577,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
- 		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
- 			return nil, err
- 		}
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
-+		if err != nil {
-+			return nil, err
-+		}
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
-+			secret,
- 			"hrr ech accept confirmation",
- 			confTranscript.Sum(nil),
- 			8,
-@@ -734,9 +743,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
- 		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
- 			return err
- 		}
-+		secret, err := hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil)
-+		if err != nil {
-+			return err
-+		}
- 		// compute the acceptance message
- 		acceptConfirmation := tls13.ExpandLabel(hs.suite.hash.New,
--			hkdf.Extract(hs.suite.hash.New, hs.clientHello.random, nil),
-+			secret,
- 			"ech accept confirmation",
- 			echTranscript.Sum(nil),
- 			8,
 diff --git a/src/crypto/tls/internal/tls13/doc.go b/src/crypto/tls/internal/tls13/doc.go
 new file mode 100644
 index 00000000000000..acfa551001af9c

From b1cbb68f23e26c8eb6178462d10f80e4af96d5bb Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 3 Apr 2025 16:15:28 +0000
Subject: [PATCH 280/887] Update submodule to latest master (9326d9d0):
 make.bat: fix GOROOT_BOOTSTRAP detection

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 83bbf47863d..9326d9d0123 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 83bbf47863d6dffb29b5a638db6c89bed0c2a763
+Subproject commit 9326d9d01231a1834458810c3cb01701bf7293a9

From 7b3f00fec5ec2e2624ec28bd43fbbaf70b87cad1 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 3 Apr 2025 17:34:56 +0000
Subject: [PATCH 281/887] Update submodule to latest master (f2e90767):
 internal/bytealg: optimize Count/CountString on arm64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9326d9d0123..f2e9076764b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9326d9d01231a1834458810c3cb01701bf7293a9
+Subproject commit f2e9076764b35cc34d9a166aa3b074c203aea0a2

From 840ccce8ea37ba096a56fc52a2ee3744457ab6c8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 3 Apr 2025 20:59:23 +0000
Subject: [PATCH 282/887] Update submodule to latest master (ab292629):
 testing: clarify how B.Loop avoids optimizing away all the useful work

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f2e9076764b..ab2926291ba 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f2e9076764b35cc34d9a166aa3b074c203aea0a2
+Subproject commit ab2926291ba7003dcec7f46824d5f58c344ca849

From 20369bd39eb5508b23d7c7ab08e9d89a9333b4c0 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 4 Apr 2025 16:09:01 +0000
Subject: [PATCH 283/887] Update submodule to latest master (16a6b71f):
 cmd/compile: improve store-to-load forwarding with compatible types

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index ab2926291ba..16a6b71f18a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit ab2926291ba7003dcec7f46824d5f58c344ca849
+Subproject commit 16a6b71f18a5d05dde1a208a317a75fd652597f0

From b8eac4a9c2618cb577d612c8b2d14e9ca2566694 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 7 Apr 2025 16:06:41 +0000
Subject: [PATCH 284/887] Update submodule to latest master (a6e74454):
 cmd/go/internal/load: join incompatible and dirty build specifiers with .

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 16a6b71f18a..a6e74454577 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 16a6b71f18a5d05dde1a208a317a75fd652597f0
+Subproject commit a6e74454577c68ea96ce6512e3e92beffbe15c5c

From 10268a015b5515021008271eea81a60d04010af4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 7 Apr 2025 17:55:49 +0100
Subject: [PATCH 285/887] build(deps): bump github/codeql-action from 3.28.13
 to 3.28.14 (#1619)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.13 to 3.28.14.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1b549b9259bda1cb5ddde3b41741a82a2d15a841...fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d153879d631..d3b7a0c4b80 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/init@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/autobuild@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
+        uses: github/codeql-action/analyze@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
         with:
           category: /language:go

From 377de5105b8e4e50649e2635d5e09797fcc9e23d Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 9 Apr 2025 00:59:12 +0200
Subject: [PATCH 286/887] Disable GOTOOLCHAIN (#1612)

* disable GOTOOLCHAIN

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* add missing changes

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .../0005-Disable-GOTOOLCHAIN-support.patch    | 71 +++++++++++++++++++
 patches/0005-Update-default-go.env.patch      | 24 -------
 2 files changed, 71 insertions(+), 24 deletions(-)
 create mode 100644 patches/0005-Disable-GOTOOLCHAIN-support.patch
 delete mode 100644 patches/0005-Update-default-go.env.patch

diff --git a/patches/0005-Disable-GOTOOLCHAIN-support.patch b/patches/0005-Disable-GOTOOLCHAIN-support.patch
new file mode 100644
index 00000000000..c54e9148a3a
--- /dev/null
+++ b/patches/0005-Disable-GOTOOLCHAIN-support.patch
@@ -0,0 +1,71 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Thu, 8 Jun 2023 14:17:13 +0200
+Subject: [PATCH] Disable GOTOOLCHAIN support
+
+The GOTOOLCHAIN feature can potentially make a Go invocation switch
+to a non-Microsoft toolchain. To avoid it, change the GOTOOLCHAIN
+default value from "auto" to "local" and instruct the Go toolchain
+to panic if the user manually modifies the GOTOOLCHAIN variable.
+---
+ go.env                         |  6 ++++--
+ src/cmd/go/internal/cfg/cfg.go | 18 ++++++++++++++++++
+ src/cmd/go/script_test.go      |  1 +
+ 3 files changed, 23 insertions(+), 2 deletions(-)
+
+diff --git a/go.env b/go.env
+index 6ff2b921d464bc..36c3bdfc9b6087 100644
+--- a/go.env
++++ b/go.env
+@@ -7,6 +7,8 @@
+ GOPROXY=https://proxy.golang.org,direct
+ GOSUMDB=sum.golang.org
+ 
+-# Automatically download newer toolchains as directed by go.mod files.
++# Use the locally installed Go toolchain, never downloading a different one.
++# Upstream uses `GOTOOLCHAIN=auto` instead, but `auto` can download and switch
++# to a Go toolchain not built by Microsoft, and we want to avoid that.
+ # See https://go.dev/doc/toolchain for details.
+-GOTOOLCHAIN=auto
++GOTOOLCHAIN=local
+diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
+index 3b9f27e91d517e..3084f681499c2c 100644
+--- a/src/cmd/go/internal/cfg/cfg.go
++++ b/src/cmd/go/internal/cfg/cfg.go
+@@ -401,6 +401,24 @@ func Getenv(key string) string {
+ 	}
+ 	val := os.Getenv(key)
+ 	if val != "" {
++		if key == "GOTOOLCHAIN" && val != "local" {
++			// Don't allow GOTOOLCHAIN to be set to anything but "local".
++			// That could cause the go command to use a different toolchain
++			// than the Microsoft build of Go without warning. This can be
++			// difficult to diagnose and may silently cause the user to
++			// unintentionally build a program that violates Microsoft's
++			// internal policies for Go.
++			//
++			// We allow bypassing this safety feature. We need to while running
++			// the TestScript test from the cmd/go package, else many tests will fail.
++			// It's also possible for existing workflows to intentionally depend on this behavior.
++			if v := os.Getenv("MS_GOTOOLCHAIN_ALLOW_NON_LOCAL"); v != "1" {
++				println("GOTOOLCHAIN is set to \"" + val + "\" but only \"local\" is allowed.")
++				println("To allow this, set MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1 in your environment.")
++				print("Take into account that that could cause the go command to use a different toolchain than the Microsoft build of Go.")
++				os.Exit(1)
++			}
++		}
+ 		return val
+ 	}
+ 	envCache.once.Do(initEnvCache)
+diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
+index 0576ea8add72af..1345ea8bb8e530 100644
+--- a/src/cmd/go/script_test.go
++++ b/src/cmd/go/script_test.go
+@@ -253,6 +253,7 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
+ 		"CMDGO_TEST_RUN_MAIN=true",
+ 		"HGRCPATH=",
+ 		"GOTOOLCHAIN=auto",
++		"MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1", // allow non-local toolchains, some tests expect GOTOOLCHAIN to be honored
+ 		"newline=\n",
+ 	}
+ 
diff --git a/patches/0005-Update-default-go.env.patch b/patches/0005-Update-default-go.env.patch
deleted file mode 100644
index 6f522a43cf0..00000000000
--- a/patches/0005-Update-default-go.env.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Thu, 8 Jun 2023 14:17:13 +0200
-Subject: [PATCH] Update default go.env
-
----
- go.env | 6 ++++--
- 1 file changed, 4 insertions(+), 2 deletions(-)
-
-diff --git a/go.env b/go.env
-index 6ff2b921d464bc..4aca2ff2c63dbc 100644
---- a/go.env
-+++ b/go.env
-@@ -7,6 +7,8 @@
- GOPROXY=https://proxy.golang.org,direct
- GOSUMDB=sum.golang.org
- 
--# Automatically download newer toolchains as directed by go.mod files.
-+# Use the locally installed Go toolchain, never downloading a different one.
-+# Upstream uses `GOTOOLCHAIN=auto` instead, but `auto` can download and switch
-+# to a non-MSFT Go toolchain, and we want to avoid that.
- # See https://go.dev/doc/toolchain for details.
--GOTOOLCHAIN=auto
-+GOTOOLCHAIN=local

From 4ee485c69aa978250767e241176d100df136e3d5 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 8 Apr 2025 16:52:55 -0700
Subject: [PATCH 287/887] Work around Component Governance false positives
 (#1623)

---
 eng/_util/go.mod            |  8 +++++---
 eng/_util/go.sum            | 12 ++++++++----
 eng/_util/tools/cg_tools.go | 15 +++++++++++++++
 3 files changed, 28 insertions(+), 7 deletions(-)
 create mode 100644 eng/_util/tools/cg_tools.go

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 9e843b2af0a..873f6f7804e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -4,16 +4,18 @@
 
 module github.com/microsoft/go/_util
 
-go 1.22.0
+go 1.23.0
 
 require (
+	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/sys v0.30.0
+	golang.org/x/net v0.39.0
+	golang.org/x/sys v0.32.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.22.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 8d33c7c3f1d..ccc8eaf9aae 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -1,5 +1,7 @@
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -9,9 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
-golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/text v0.22.0 h1:bofq7m3/HAFvbF51jz3Q9wLg3jkvSPuiZu/pD1XwgtM=
-golang.org/x/text v0.22.0/go.mod h1:YRoo4H8PVmsu+E3Ou7cqLVH8oXWIHVoX0jqUWALQhfY=
+golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
+golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
 golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=
 golang.org/x/tools v0.30.0/go.mod h1:c347cR/OJfw5TI+GfX7RUPNMdDRRbjvYTS0jPyvsVtY=
diff --git a/eng/_util/tools/cg_tools.go b/eng/_util/tools/cg_tools.go
new file mode 100644
index 00000000000..e59b62ba88b
--- /dev/null
+++ b/eng/_util/tools/cg_tools.go
@@ -0,0 +1,15 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build tools
+
+package tools
+
+// Work around Go detector false positives: import dependencies just so that we can upgrade
+// them. See https://github.com/microsoft/component-detection/issues/1333
+
+import (
+	_ "github.com/golang-jwt/jwt/v5"
+	_ "golang.org/x/net/http2"
+)

From 43f1c7399484957f6f592db7f8d19d1a7b8b4a6e Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 14 Apr 2025 17:47:46 +0100
Subject: [PATCH 288/887] remove @microsoft-golang-review-bot from CODEOWNERS
 (#1631)

* remove @microsoft-golang-review-bot from CODEOWNERS

* Update CODEOWNERS bot username format

* Update CODEOWNERS review rules and exclusions

* Update .github/CODEOWNERS

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .github/CODEOWNERS | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index bf3c89b27bf..cab33b85916 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,8 +1,9 @@
-# Require review from golang-compiler team for changes in any file. This keeps us in the loop on
-# auto-merge PRs. The review bot is also an owner so that it can still trigger auto-merge for sync
-# PRs on its own. We may remove this rule once auto-merges are routine.
-* @microsoft/golang-compiler @microsoft-golang-review-bot
+# Require review from golang-compiler team for changes in all files.
 
-# Automatically request review from golang-compiler team for changes in the Microsoft-specific
-# files. This takes precedence over earlier rules in the file.
-/eng/ @microsoft/golang-compiler
+* @microsoft/golang-compiler
+
+# Don't assign a code owner to automatically updated files to allow GitHub apps to use the
+# auto-merge flow without human intervention.
+go/
+MICROSOFT_REVISION
+VERSION

From a09cb3f757302bc08885e896316b2441edbed451 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 14 Apr 2025 18:00:14 +0100
Subject: [PATCH 289/887] CODEOWNERS: Remove incorrect trailing slash (#1633)

---
 .github/CODEOWNERS | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index cab33b85916..b5dd7187f37 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -4,6 +4,6 @@
 
 # Don't assign a code owner to automatically updated files to allow GitHub apps to use the
 # auto-merge flow without human intervention.
-go/
-MICROSOFT_REVISION
-VERSION
+/go
+/MICROSOFT_REVISION
+/VERSION

From fc3cd57217a88108e0b67a5084f630e51a2abec8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 19:18:53 +0100
Subject: [PATCH 290/887] Update submodule to latest `master` in
 `microsoft/main` (#1632)

* Update submodule to latest master (adf21a9b): internal/cpu: add a detection for Neoverse(N3, V3, V3ae) cores

* resolve 3-way merge conflict

---------

Co-authored-by: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 go                                     |  2 +-
 patches/0004-Use-crypto-backends.patch | 16 ++++++++--------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/go b/go
index a6e74454577..adf21a9b56f 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a6e74454577c68ea96ce6512e3e92beffbe15c5c
+Subproject commit adf21a9b56f3498385152d701ddd0e8679fe57ed
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b4328fdf467..b46f05bd870 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -276,10 +276,10 @@ index b2d4ad7cb0e7f6..2859879041ff8f 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index b114ca2a3d4115..0be0f3d218b09b 100644
+index 7f22b6ba1c5bf0..c78af6f054293f 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1172,6 +1172,7 @@ var hostobj []Hostobj
+@@ -1176,6 +1176,7 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -288,7 +288,7 @@ index b114ca2a3d4115..0be0f3d218b09b 100644
  	"crypto/internal/boring/syso",
  	"crypto/x509",
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 377dcd6c856fa6..1744ff2ca38973 100644
+index 6a684890be0a03..1dcc126b7a0440 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -44,6 +44,7 @@ import (
@@ -299,7 +299,7 @@ index 377dcd6c856fa6..1744ff2ca38973 100644
  	"strconv"
  	"strings"
  )
-@@ -186,7 +187,16 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -187,7 +188,16 @@ func Main(arch *sys.Arch, theArch Arch) {
  
  	buildVersion := buildcfg.Version
  	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
@@ -2342,7 +2342,7 @@ index 66dc76f72d6e6f..c8bb0c02d64afd 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 68c14b8a5a9fc3..66ac35f294abcb 100644
+index 507b69a0ed1471..86ef3f9c5b7f24 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2363,7 +2363,7 @@ index 68c14b8a5a9fc3..66ac35f294abcb 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 929d865dd403ef..4548d0660987f5 100644
+index ab0cff9e28454e..3981994fbee904 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (
@@ -2378,9 +2378,9 @@ index 929d865dd403ef..4548d0660987f5 100644
  	"crypto/tls/internal/fips140tls"
 +	"crypto/tls/internal/tls13"
  	"errors"
+ 	"fmt"
  	"hash"
- 	"internal/byteorder"
-@@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
+@@ -472,15 +473,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
  // interfaces implemented by standard library hashes to clone the state of in
  // to a new instance of h. It returns nil if the operation fails.
  func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {

From f10f06228f690238ddbf07515edd06c1e8e0d20f Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 15 Apr 2025 08:57:19 +0100
Subject: [PATCH 291/887] fix:remove mariner1 and outdated docker registry

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 4 ----
 eng/pipeline/pr-pipeline.yml                | 4 ----
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ----
 eng/pipeline/rolling-pipeline.yml           | 4 ----
 eng/pipeline/stages/run-stage.yml           | 4 ----
 5 files changed, 20 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index b558d2e1095..29b4667dfb8 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -20,10 +20,6 @@ resources:
   containers:
     - container: ubuntu2204
       image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
-    - container: mariner1
-      image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
-    - container: mariner1arm64
-      image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
     - container: mariner2arm64
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index e8fd657e469..ae3296b9f72 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -17,10 +17,6 @@ resources:
     # separate changes.
     - container: ubuntu2204
       image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
-    - container: mariner1
-      image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
-    - container: mariner1arm64
-      image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
     - container: mariner2
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
     - container: mariner2arm64
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index ad3174cfc35..1210115d8bb 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -40,10 +40,6 @@ extends:
     containers:
       ubuntu2204:
         image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
-      mariner1:
-        image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
-      mariner1arm64:
-        image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
       mariner2arm64:
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 814709fca90..14d555602ba 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -33,10 +33,6 @@ extends:
     containers:
       ubuntu2204:
         image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
-      mariner1:
-        image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-1.0.20211027-20211201-0cccc22
-      mariner1arm64:
-        image: golangpublicimages.azurecr.io/go-infra-images/prereqs:cbl-mariner-arm64-1.0-20220314-a003148
       mariner2:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
       mariner2arm64:
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 3f4ef6441c1..33d83c85552 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -75,13 +75,9 @@ stages:
                 container: mariner2
               ${{ elseif eq(parameters.builder.distro, 'azurelinux3') }}:
                 container: azurelinux3
-              ${{ else }}:
-                container: mariner1
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:
               ${{ if eq(parameters.builder.distro, 'mariner2') }}:
                 container: mariner2arm64
-              ${{ else }}:
-               container: mariner1arm64
 
         variables:
           - group: go-cmdscan-rules

From 274e5b8b3d02159f479300aab59df81cdd94d394 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 16 Apr 2025 16:10:49 +0000
Subject: [PATCH 292/887] Update submodule to latest master (2cb9e7f6):
 crypto/cipher: use AEAD.NonceSize to make nonce in the example

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index adf21a9b56f..2cb9e7f68f9 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit adf21a9b56f3498385152d701ddd0e8679fe57ed
+Subproject commit 2cb9e7f68f90ea9119fd4172fc61630279d79d67

From dde2846ed3db0339831cf026f80b07b1e79b2a0b Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 18 Apr 2025 16:06:44 +0000
Subject: [PATCH 293/887] Update submodule to latest master (252c9394):
 internal/runtime/maps: move tombstone test to swiss file

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2cb9e7f68f9..252c939445b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2cb9e7f68f90ea9119fd4172fc61630279d79d67
+Subproject commit 252c939445b6b03c5c82b54f7657c5d984ce6348

From 0ea59abb41130f23894022b121cc1d973159e01b Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 21 Apr 2025 16:07:21 +0000
Subject: [PATCH 294/887] Update submodule to latest master (c0245b31):
 crypto/sha512: remove unnecessary move op, replace with direct add

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 252c939445b..c0245b31fb1 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 252c939445b6b03c5c82b54f7657c5d984ce6348
+Subproject commit c0245b31fb157590b69245f7dff27f0605b73138

From 67d434acb0a66612386d18a9f72537977f9eda3b Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 22 Apr 2025 01:53:30 -0700
Subject: [PATCH 295/887] Downloads.md: clarify, mention go-install.ps1 (#1645)

---
 eng/doc/Downloads.md | 46 +++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 41 insertions(+), 5 deletions(-)

diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index 83947320939..784898281cc 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -7,6 +7,9 @@ This document contains a list of links to the binary releases of the Microsoft b
 
 ## Downloads
 
+The links in this table download the latest Go release built by Microsoft matching that column's major release number.
+For example, a 1.20 link will download 1.20.8-1 if that is the latest version of 1.20 available.
+
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
@@ -31,10 +34,43 @@ This document contains a list of links to the binary releases of the Microsoft b
 > <sup>2</sup> - The macOS builds and `systemcrypto` support are currently in preview and shouldn't be used in production.
 > Please [open an issue](https://github.com/microsoft/go/issues/new) if you encounter any problems.
 
-The links in this table "float": each one downloads the latest Go release built by Microsoft that matches that column's major release number. For example, a 1.20 link will download 1.20.8-1 if that is the latest version of 1.20 available.
+## Downloading a specific version
+
+The table only shows a small subset of the aka.ms links we generate.
+We generate links in these formats: `1.X.Y-Z`, `1.X.Y`, and `1.X`.
+The `1.X.Y-Z` links are immutable.
+The `1.X.Y` and `1.X` links are updated whenever there's a new release that matches the specified numbers.
+
+We don't maintain a browseable list of all the links we generate, but you can assemble a URL yourself and use it.
+Browse recent [GitHub releases in the microsoft/go repository](https://github.com/microsoft/go/releases) to find valid patch and revision numbers to use.
+
+> [!NOTE]
+> A GitHub release may exist without corresponding aka.ms links.
+> This may happen if a release is in progress or if it was canceled.
+
+To quickly assemble an aka.ms URL for a specific release, copy one of the URLs in the table and add a patch and revision number to the end of the existing version number in the URL.
+For example, to assemble a URL that will download the source of go1.20.9-1:
+
+1. Copy `https://aka.ms/golang/release/latest/go1.20.src.tar.gz` from the table
+2. Change `1.20` to `1.20.9-1`
+3. Result: `https://aka.ms/golang/release/latest/go1.20.9-1.src.tar.gz`
+
+The URL format is `https://aka.ms/golang/release/latest/go1.{X}.{Y}-{Z}.{artifact}`, where:
+- `{X}` is the major version number. (Go versions [aren't Semantic Versions](https://go.dev/doc/devel/release).)
+- `{Y}` is the minor version number.
+- `{Z}` is the revision number. This number is specific to the Microsoft build of Go.
+- `{artifact}` is the artifact type. It may be a source archive, a binary build for a specific platform, or a metadata file. Explore the table to see the available artifact types.
+
+## Writing a tool that downloads the latest version
+
+<https://aka.ms/golang/release/latest/release-branch-links.json> is a JSON file with information about the currently maintained major releases.
+The file is currently maintained on GitHub at <https://github.com/microsoft/go/blob/microsoft/main/eng/doc/release-branch-links.json>. ([Raw](https://raw.githubusercontent.com/microsoft/go/refs/heads/microsoft/main/eng/doc/release-branch-links.json))
+
+To download the latest version, your tool can read this file, find the object with `"latestStable": true`, and download the desired artifact using one of the links provided.
+
+To determine the latest version of the Microsoft build of Go, your tool can download the artifact described as `"kind": "manifest"`, then parse that JSON file's `version` field.
 
-To download a specific version, create a static link by copying one of the above URLs and adding a patch and revision number to the end of the existing version number section. Browse recent [GitHub releases in the microsoft/go repository](https://github.com/microsoft/go/releases) to find valid patch and revision numbers to use. More aka.ms links are generated than the ones that appear in the table, because the table isn't updated after every single build. For example, if the latest release is `1.20.9-1`:
+## Using `go-install.ps1`
 
-1. Copy `https://aka.ms/golang/release/latest/go1.20.src.tar.gz`
-2. Change `go1.20` to `go1.20.9-1`
-3. Get `https://aka.ms/golang/release/latest/go1.20.9-1.src.tar.gz`.
+We have written [go-install.ps1](https://github.com/microsoft/go-infra/tree/main/goinstallscript), a PowerShell (Core) install script for the Microsoft build of Go.
+It can be used on Windows, Linux, and macOS to download and set up the builds listed in this document.

From 153fd99e6d2644a26e12f9a41fc2861bc8957b12 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 22 Apr 2025 18:21:20 +0200
Subject: [PATCH 296/887] Upgrade backends (#1596)

* upgrade backends

* fix TestDependencies

* upgrade darwin backend

* remove SHA224 support for darwin

* skip TestIssue71943

* fix TestBoringInternalLink

* upgrade backends

* [temp] add TestBoringInternalLink logs

* rebuild

* log

* upgrade ossl
---
 patches/0002-Vendor-crypto-backends.patch     | 13583 ++++++++++------
 ...03-Implement-crypto-internal-backend.patch |    10 +-
 patches/0004-Use-crypto-backends.patch        |    17 +-
 3 files changed, 8588 insertions(+), 5022 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index bf1ceb768cf..3310c4d46af 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -6,102 +6,104 @@ Subject: [PATCH] Vendor crypto backends
 To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
- src/crypto/internal/backend/deps_ignore.go    |  22 +
- src/go.mod                                    |   6 +
- src/go.sum                                    |   6 +
- src/go/build/deps_test.go                     |  35 +-
- src/go/build/vendor_test.go                   |   3 +
- .../golang-fips/openssl/v2/.gitignore         |   1 +
- .../golang-fips/openssl/v2/.gitleaks.toml     |   9 +
- .../github.com/golang-fips/openssl/v2/LICENSE |  20 +
- .../golang-fips/openssl/v2/README.md          |  66 ++
- .../github.com/golang-fips/openssl/v2/aes.go  | 147 ++++
- .../golang-fips/openssl/v2/bbig/big.go        |  37 +
- .../github.com/golang-fips/openssl/v2/big.go  |  11 +
- .../golang-fips/openssl/v2/cgo_go124.go       |  18 +
- .../golang-fips/openssl/v2/cipher.go          | 569 ++++++++++++++
- .../github.com/golang-fips/openssl/v2/des.go  | 114 +++
- .../github.com/golang-fips/openssl/v2/dsa.go  | 323 ++++++++
- .../github.com/golang-fips/openssl/v2/ec.go   |  68 ++
- .../github.com/golang-fips/openssl/v2/ecdh.go | 303 ++++++++
- .../golang-fips/openssl/v2/ecdsa.go           | 208 +++++
- .../golang-fips/openssl/v2/ed25519.go         | 228 ++++++
- .../github.com/golang-fips/openssl/v2/evp.go  | 580 ++++++++++++++
- .../golang-fips/openssl/v2/goopenssl.c        | 248 ++++++
- .../golang-fips/openssl/v2/goopenssl.h        | 261 +++++++
- .../github.com/golang-fips/openssl/v2/hash.go | 714 ++++++++++++++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go | 322 ++++++++
- .../github.com/golang-fips/openssl/v2/hmac.go | 274 +++++++
- .../github.com/golang-fips/openssl/v2/init.go |  64 ++
- .../golang-fips/openssl/v2/init_unix.go       |  31 +
- .../golang-fips/openssl/v2/init_windows.go    |  36 +
- .../golang-fips/openssl/v2/openssl.go         | 506 +++++++++++++
- .../golang-fips/openssl/v2/params.go          | 210 ++++++
- .../golang-fips/openssl/v2/pbkdf2.go          |  62 ++
- .../golang-fips/openssl/v2/port_dsa.c         |  85 +++
- .../github.com/golang-fips/openssl/v2/rand.go |  20 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |  66 ++
- .../github.com/golang-fips/openssl/v2/rsa.go  | 408 ++++++++++
- .../github.com/golang-fips/openssl/v2/shims.h | 413 ++++++++++
- .../golang-fips/openssl/v2/thread_setup.go    |  14 +
- .../golang-fips/openssl/v2/thread_setup.h     |   4 +
- .../openssl/v2/thread_setup_unix.c            |  64 ++
- .../openssl/v2/thread_setup_windows.c         |  64 ++
- .../golang-fips/openssl/v2/tls1prf.go         | 160 ++++
- .../github.com/golang-fips/openssl/v2/zaes.go |  86 +++
- .../microsoft/go-crypto-darwin/LICENSE        |  21 +
- .../microsoft/go-crypto-darwin/bbig/big.go    |  31 +
- .../internal/cryptokit/CryptoKit.o            | Bin 0 -> 100952 bytes
- .../internal/cryptokit/cryptokit.go           |  34 +
- .../internal/cryptokit/cryptokit.h            |  43 ++
- .../internal/cryptokit/ed25519.go             |  72 ++
- .../internal/cryptokit/gcm.go                 |  36 +
- .../internal/cryptokit/hkdf.go                |  77 ++
- .../microsoft/go-crypto-darwin/xcrypto/aes.go | 306 ++++++++
- .../microsoft/go-crypto-darwin/xcrypto/big.go |  16 +
- .../go-crypto-darwin/xcrypto/cgo_go124.go     |  21 +
- .../go-crypto-darwin/xcrypto/cipher.go        | 122 +++
- .../microsoft/go-crypto-darwin/xcrypto/des.go | 117 +++
- .../microsoft/go-crypto-darwin/xcrypto/ec.go  |  32 +
- .../go-crypto-darwin/xcrypto/ecdh.go          | 135 ++++
- .../go-crypto-darwin/xcrypto/ecdsa.go         | 181 +++++
- .../go-crypto-darwin/xcrypto/ed25519.go       | 100 +++
- .../microsoft/go-crypto-darwin/xcrypto/evp.go | 338 +++++++++
- .../go-crypto-darwin/xcrypto/hash.go          | 403 ++++++++++
- .../go-crypto-darwin/xcrypto/hkdf.go          |  66 ++
- .../go-crypto-darwin/xcrypto/hmac.go          | 113 +++
- .../go-crypto-darwin/xcrypto/pbkdf2.go        |  65 ++
- .../go-crypto-darwin/xcrypto/rand.go          |  26 +
- .../microsoft/go-crypto-darwin/xcrypto/rc4.go |  83 ++
- .../microsoft/go-crypto-darwin/xcrypto/rsa.go | 194 +++++
- .../go-crypto-darwin/xcrypto/xcrypto.go       |  59 ++
- .../microsoft/go-crypto-winnative/LICENSE     |  21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  | 393 ++++++++++
- .../go-crypto-winnative/cng/bbig/big.go       |  31 +
- .../microsoft/go-crypto-winnative/cng/big.go  |  30 +
- .../go-crypto-winnative/cng/cipher.go         |  52 ++
- .../microsoft/go-crypto-winnative/cng/cng.go  | 131 ++++
- .../microsoft/go-crypto-winnative/cng/des.go  | 106 +++
- .../microsoft/go-crypto-winnative/cng/dsa.go  | 465 ++++++++++++
- .../microsoft/go-crypto-winnative/cng/ecdh.go | 255 +++++++
- .../go-crypto-winnative/cng/ecdsa.go          | 169 +++++
- .../microsoft/go-crypto-winnative/cng/hash.go | 325 ++++++++
- .../microsoft/go-crypto-winnative/cng/hkdf.go | 124 +++
- .../microsoft/go-crypto-winnative/cng/hmac.go |  35 +
- .../microsoft/go-crypto-winnative/cng/keys.go | 220 ++++++
- .../go-crypto-winnative/cng/pbkdf2.go         |  70 ++
- .../microsoft/go-crypto-winnative/cng/rand.go |  28 +
- .../microsoft/go-crypto-winnative/cng/rc4.go  |  65 ++
- .../microsoft/go-crypto-winnative/cng/rsa.go  | 396 ++++++++++
- .../microsoft/go-crypto-winnative/cng/sha3.go | 311 ++++++++
- .../go-crypto-winnative/cng/tls1prf.go        |  89 +++
- .../internal/bcrypt/bcrypt_windows.go         | 368 +++++++++
- .../internal/bcrypt/ntstatus_windows.go       |  45 ++
- .../internal/bcrypt/zsyscall_windows.go       | 412 ++++++++++
- .../internal/subtle/aliasing.go               |  32 +
- .../internal/sysdll/sys_windows.go            |  55 ++
- src/vendor/modules.txt                        |  16 +
- 95 files changed, 13814 insertions(+), 7 deletions(-)
+ src/crypto/internal/backend/deps_ignore.go    |   22 +
+ src/go.mod                                    |    6 +
+ src/go.sum                                    |    6 +
+ src/go/build/deps_test.go                     |   35 +-
+ src/go/build/vendor_test.go                   |    3 +
+ .../golang-fips/openssl/v2/.gitignore         |    2 +
+ .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
+ .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
+ .../golang-fips/openssl/v2/README.md          |   66 +
+ .../github.com/golang-fips/openssl/v2/aes.go  |  146 ++
+ .../golang-fips/openssl/v2/bbig/big.go        |   37 +
+ .../github.com/golang-fips/openssl/v2/big.go  |   11 +
+ .../golang-fips/openssl/v2/cipher.go          |  603 +++++
+ .../golang-fips/openssl/v2/const.go           |   87 +
+ .../github.com/golang-fips/openssl/v2/des.go  |  113 +
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  309 +++
+ .../github.com/golang-fips/openssl/v2/ec.go   |   67 +
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  306 +++
+ .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
+ .../golang-fips/openssl/v2/ed25519.go         |  229 ++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  552 +++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  715 ++++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  348 +++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  249 ++
+ .../github.com/golang-fips/openssl/v2/init.go |  157 ++
+ .../golang-fips/openssl/v2/init_unix.go       |   31 +
+ .../golang-fips/openssl/v2/init_windows.go    |   36 +
+ .../openssl/v2/internal/ossl/errors.go        |  125 +
+ .../openssl/v2/internal/ossl/ossl.go          |   40 +
+ .../openssl/v2/internal/ossl/shims.h          |  390 ++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2011 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         | 1297 +++++++++++
+ .../openssl/v2/internal/ossl/zossl.h          |  330 +++
+ .../openssl/v2/internal/ossl/zossl_go124.go   |   33 +
+ .../golang-fips/openssl/v2/openssl.go         |  384 ++++
+ .../golang-fips/openssl/v2/params.go          |  185 ++
+ .../golang-fips/openssl/v2/pbkdf2.go          |   55 +
+ .../github.com/golang-fips/openssl/v2/rand.go |   22 +
+ .../github.com/golang-fips/openssl/v2/rc4.go  |   69 +
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  366 +++
+ .../golang-fips/openssl/v2/tls1prf.go         |  159 ++
+ .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
+ .../microsoft/go-crypto-darwin/LICENSE        |   21 +
+ .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
+ .../internal/cryptokit/CryptoKit.o            |  Bin 0 -> 199312 bytes
+ .../internal/cryptokit/cgo_go124.go           |   40 +
+ .../internal/cryptokit/cryptokit.go           |   39 +
+ .../internal/cryptokit/cryptokit.h            |   63 +
+ .../internal/cryptokit/ed25519.go             |   72 +
+ .../internal/cryptokit/gcm.go                 |   36 +
+ .../internal/cryptokit/hash.go                |  255 +++
+ .../internal/cryptokit/hkdf.go                |   77 +
+ .../internal/cryptokit/hmac.go                |  144 ++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  306 +++
+ .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
+ .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
+ .../go-crypto-darwin/xcrypto/cipher.go        |  122 +
+ .../microsoft/go-crypto-darwin/xcrypto/des.go |  117 +
+ .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   32 +
+ .../go-crypto-darwin/xcrypto/ecdh.go          |  135 ++
+ .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
+ .../go-crypto-darwin/xcrypto/ed25519.go       |  100 +
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 +++
+ .../go-crypto-darwin/xcrypto/hash.go          |   68 +
+ .../go-crypto-darwin/xcrypto/hkdf.go          |   66 +
+ .../go-crypto-darwin/xcrypto/hmac.go          |   21 +
+ .../go-crypto-darwin/xcrypto/pbkdf2.go        |   65 +
+ .../go-crypto-darwin/xcrypto/rand.go          |   26 +
+ .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   83 +
+ .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  194 ++
+ .../go-crypto-darwin/xcrypto/xcrypto.go       |   49 +
+ .../microsoft/go-crypto-winnative/LICENSE     |   21 +
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  393 ++++
+ .../go-crypto-winnative/cng/bbig/big.go       |   31 +
+ .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
+ .../go-crypto-winnative/cng/cipher.go         |   52 +
+ .../microsoft/go-crypto-winnative/cng/cng.go  |  131 ++
+ .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
+ .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 +++
+ .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 ++
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
+ .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
+ .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
+ .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
+ .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 ++++
+ .../microsoft/go-crypto-winnative/cng/sha3.go |  311 +++
+ .../go-crypto-winnative/cng/tls1prf.go        |   89 +
+ .../internal/bcrypt/bcrypt_windows.go         |  368 +++
+ .../internal/bcrypt/ntstatus_windows.go       |   45 +
+ .../internal/bcrypt/zsyscall_windows.go       |  412 ++++
+ .../internal/subtle/aliasing.go               |   32 +
+ .../internal/sysdll/sys_windows.go            |   55 +
+ src/vendor/modules.txt                        |   17 +
+ 97 files changed, 16912 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -110,8 +112,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/aes.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/const.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/des.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/dsa.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ec.go
@@ -119,36 +121,38 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/evp.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hash.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rand.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rc4.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rsa.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/shims.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/zaes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
@@ -222,7 +226,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d7c0cfb6dd3cf8..e69b2b9bdd811a 100644
+index d7c0cfb6dd3cf8..243a6d1537030f 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -231,29 +235,29 @@ index d7c0cfb6dd3cf8..e69b2b9bdd811a 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 834044f135aba5..b247d0e1b17c74 100644
+index 834044f135aba5..2550758ed18e51 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6 h1:FFp7Q2AwYX+IQhhQt3ljQDdWtG5ZbRu0u3ohWQdFow8=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67 h1:SI0IFiHducwfamZR7pv6jb92oc5o/z5tn66wynS6ADE=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea h1:JuRzAUOV9uaQdoNeuHyOEAJbpRahsICnwfPPGzzuzRw=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9 h1:FWWd0Sc4BULEU4m18Qgl1YWUkcHVXNThIplVp06ERbk=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56 h1:rignn19hDdGfSVEtNeR0msL6wnkiqr61/VoB0i3zbSI=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40 h1:6K+qAlu0vRBqoZ938zEdZ0+jFDVVU+67ZzKOrvTsNSk=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
  golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
  golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index c355cb42f7ec3b..23b17e1886310e 100644
+index 21bf8b76a5a6d0..0095243ce2b0b7 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -497,6 +497,24 @@ var depsRules = `
+@@ -517,6 +517,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS;
  
@@ -264,9 +268,9 @@ index c355cb42f7ec3b..23b17e1886310e 100644
 +
 +	crypto,
 +	crypto/subtle,
-+	encoding/binary,
 +	hash,
 +	crypto/cipher
++	< github.com/golang-fips/openssl/v2/internal/ossl
 +	< github.com/golang-fips/openssl/v2
 +	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +	< github.com/microsoft/go-crypto-darwin/xcrypto
@@ -278,7 +282,7 @@ index c355cb42f7ec3b..23b17e1886310e 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -510,13 +528,12 @@ var depsRules = `
+@@ -530,13 +548,12 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -296,7 +300,7 @@ index c355cb42f7ec3b..23b17e1886310e 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -537,6 +554,10 @@ var depsRules = `
+@@ -557,6 +574,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -307,7 +311,7 @@ index c355cb42f7ec3b..23b17e1886310e 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/rand
-@@ -837,7 +858,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -857,7 +878,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -316,12 +320,12 @@ index c355cb42f7ec3b..23b17e1886310e 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -847,7 +868,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -867,7 +888,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
 -	if pkg == "crypto/internal/boring" {
-+	if pkg == "crypto/internal/boring" || pkg == "github.com/golang-fips/openssl/v2" || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-darwin") {
++	if pkg == "crypto/internal/boring" || strings.HasPrefix(pkg, "github.com/golang-fips/openssl/v2") || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-darwin") {
  		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
  	}
  	fset := token.NewFileSet()
@@ -341,11 +345,12 @@ index 7f6237ffd59c11..6092c93d4c5b26 100644
  // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
-index 00000000000000..79b5594df7fa29
+index 00000000000000..b6c942fc91eec7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
-@@ -0,0 +1 @@
+@@ -0,0 +1,2 @@
 +**/.DS_Store
++.vscode/
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml b/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
 new file mode 100644
 index 00000000000000..aed2e22df2d555
@@ -390,7 +395,7 @@ index 00000000000000..97e85154015761
 \ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/README.md b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 new file mode 100644
-index 00000000000000..1bfbaf60f4dd58
+index 00000000000000..f63cf39e70c064
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 @@ -0,0 +1,66 @@
@@ -422,12 +427,12 @@ index 00000000000000..1bfbaf60f4dd58
 +
 +### Multiple OpenSSL versions supported
 +
-+The `openssl` package has support for multiple OpenSSL versions, namely 1.0.2, 1.1.0, 1.1.1 and 3.x.
++The `openssl` package has support for multiple OpenSSL versions, namely 1.1.0, 1.1.1 and 3.x.
 +
 +All supported OpenSSL versions pass a small set of automatic tests that ensure they can be built and that there are no major regressions.
 +These tests do not validate the cryptographic correctness of the `openssl` package.
 +
-+On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) -maintained by Red Hat- and the [Microsoft Go fork](https://github.com/microsoft/go), tests a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
++On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) (maintained by Red Hat) and the [Microsoft build of Go](https://github.com/microsoft/go) test a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
 +These tests are much more exhaustive and validate a specific OpenSSL version can produce working applications.
 +
 +### Building without OpenSSL headers
@@ -462,15 +467,14 @@ index 00000000000000..1bfbaf60f4dd58
 +This project adopts the Go code of conduct: https://go.dev/conduct.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 new file mode 100644
-index 00000000000000..18bb070a2e5bda
+index 00000000000000..3b3e247e86c8ae
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
-@@ -0,0 +1,147 @@
+@@ -0,0 +1,146 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"crypto/cipher"
@@ -673,51 +677,27 @@ index 00000000000000..6461f241f863fc
 +// This definition allows us to avoid importing math/big.
 +// Conversion between BigInt and *big.Int is in openssl/bbig.
 +type BigInt []uint
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
-new file mode 100644
-index 00000000000000..933a751873dd05
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/cgo_go124.go
-@@ -0,0 +1,18 @@
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package openssl
-+
-+// The following noescape and nocallback directives are used to prevent the Go
-+// compiler from allocating function parameters on the heap. See
-+// https://github.com/golang/go/blob/0733682e5ff4cd294f5eccb31cbe87a543147bc6/src/cmd/cgo/doc.go#L439-L461
-+//
-+// If possible, write a C wrapper function to optimize a call rather than using
-+// this feature so the optimization will work for all supported Go versions.
-+//
-+// This is just a performance optimization. Only add functions that have been
-+// observed to benefit from these directives, not every function that is merely
-+// expected to meet the noescape/nocallback criteria.
-+
-+// #cgo noescape go_openssl_RAND_bytes
-+// #cgo nocallback go_openssl_RAND_bytes
-+import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..72f7aebfc130e7
+index 00000000000000..2a3a91eb549a68
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,569 @@
+@@ -0,0 +1,603 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +
 +import (
 +	"crypto/cipher"
-+	"encoding/binary"
 +	"errors"
 +	"runtime"
 +	"strconv"
 +	"sync"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +type cipherKind int8
@@ -781,9 +761,9 @@ index 00000000000000..72f7aebfc130e7
 +}
 +
 +// loadCipher returns a cipher object for the given k.
-+func loadCipher(k cipherKind, mode cipherMode) (cipher C.GO_EVP_CIPHER_PTR) {
++func loadCipher(k cipherKind, mode cipherMode) (cipher ossl.EVP_CIPHER_PTR) {
 +	if v, ok := cacheCipher.Load(cacheCipherKey{k, mode}); ok {
-+		return v.(C.GO_EVP_CIPHER_PTR)
++		return v.(ossl.EVP_CIPHER_PTR)
 +	}
 +	defer func() {
 +		if cipher != nil && vMajor == 3 {
@@ -791,7 +771,7 @@ index 00000000000000..72f7aebfc130e7
 +			// not created by EVP_CIPHER has negative performance
 +			// implications, as cipher operations will have
 +			// to fetch it on every call. Better to just fetch it once here.
-+			cipher = C.go_openssl_EVP_CIPHER_fetch(nil, C.go_openssl_EVP_CIPHER_get0_name(cipher), nil)
++			cipher, _ = ossl.EVP_CIPHER_fetch(nil, ossl.EVP_CIPHER_get0_name(cipher), nil)
 +		}
 +		cacheCipher.Store(cacheCipherKey{k, mode}, cipher)
 +	}()
@@ -799,52 +779,52 @@ index 00000000000000..72f7aebfc130e7
 +	case cipherAES128:
 +		switch mode {
 +		case cipherModeECB:
-+			cipher = C.go_openssl_EVP_aes_128_ecb()
++			cipher = ossl.EVP_aes_128_ecb()
 +		case cipherModeCBC:
-+			cipher = C.go_openssl_EVP_aes_128_cbc()
++			cipher = ossl.EVP_aes_128_cbc()
 +		case cipherModeCTR:
-+			cipher = C.go_openssl_EVP_aes_128_ctr()
++			cipher = ossl.EVP_aes_128_ctr()
 +		case cipherModeGCM:
-+			cipher = C.go_openssl_EVP_aes_128_gcm()
++			cipher = ossl.EVP_aes_128_gcm()
 +		}
 +	case cipherAES192:
 +		switch mode {
 +		case cipherModeECB:
-+			cipher = C.go_openssl_EVP_aes_192_ecb()
++			cipher = ossl.EVP_aes_192_ecb()
 +		case cipherModeCBC:
-+			cipher = C.go_openssl_EVP_aes_192_cbc()
++			cipher = ossl.EVP_aes_192_cbc()
 +		case cipherModeCTR:
-+			cipher = C.go_openssl_EVP_aes_192_ctr()
++			cipher = ossl.EVP_aes_192_ctr()
 +		case cipherModeGCM:
-+			cipher = C.go_openssl_EVP_aes_192_gcm()
++			cipher = ossl.EVP_aes_192_gcm()
 +		}
 +	case cipherAES256:
 +		switch mode {
 +		case cipherModeECB:
-+			cipher = C.go_openssl_EVP_aes_256_ecb()
++			cipher = ossl.EVP_aes_256_ecb()
 +		case cipherModeCBC:
-+			cipher = C.go_openssl_EVP_aes_256_cbc()
++			cipher = ossl.EVP_aes_256_cbc()
 +		case cipherModeCTR:
-+			cipher = C.go_openssl_EVP_aes_256_ctr()
++			cipher = ossl.EVP_aes_256_ctr()
 +		case cipherModeGCM:
-+			cipher = C.go_openssl_EVP_aes_256_gcm()
++			cipher = ossl.EVP_aes_256_gcm()
 +		}
 +	case cipherDES:
 +		switch mode {
 +		case cipherModeECB:
-+			cipher = C.go_openssl_EVP_des_ecb()
++			cipher = ossl.EVP_des_ecb()
 +		case cipherModeCBC:
-+			cipher = C.go_openssl_EVP_des_cbc()
++			cipher = ossl.EVP_des_cbc()
 +		}
 +	case cipherDES3:
 +		switch mode {
 +		case cipherModeECB:
-+			cipher = C.go_openssl_EVP_des_ede3_ecb()
++			cipher = ossl.EVP_des_ede3_ecb()
 +		case cipherModeCBC:
-+			cipher = C.go_openssl_EVP_des_ede3_cbc()
++			cipher = ossl.EVP_des_ede3_cbc()
 +		}
 +	case cipherRC4:
-+		cipher = C.go_openssl_EVP_rc4()
++		cipher = ossl.EVP_rc4()
 +	}
 +	return cipher
 +}
@@ -862,7 +842,7 @@ index 00000000000000..72f7aebfc130e7
 +	}
 +	c := &evpCipher{key: make([]byte, len(key)), kind: kind}
 +	copy(c.key, key)
-+	c.blockSize = int(C.go_openssl_EVP_CIPHER_get_block_size(cipher))
++	c.blockSize = int(ossl.EVP_CIPHER_get_block_size(cipher))
 +	return c, nil
 +}
 +
@@ -882,10 +862,11 @@ index 00000000000000..72f7aebfc130e7
 +	if err != nil {
 +		return err
 +	}
-+	defer C.go_openssl_EVP_CIPHER_CTX_free(enc_ctx)
++	defer ossl.EVP_CIPHER_CTX_free(enc_ctx)
 +
-+	if C.go_openssl_EVP_EncryptUpdate_wrapper(enc_ctx, base(dst), base(src), C.int(c.blockSize)) != 1 {
-+		return errors.New("EncryptUpdate failed")
++	var outl int32
++	if _, err := ossl.EVP_EncryptUpdate(enc_ctx, base(dst), &outl, base(src), int32(c.blockSize)); err != nil {
++		return err
 +	}
 +	runtime.KeepAlive(c)
 +	return nil
@@ -907,24 +888,25 @@ index 00000000000000..72f7aebfc130e7
 +	if err != nil {
 +		return err
 +	}
-+	defer C.go_openssl_EVP_CIPHER_CTX_free(dec_ctx)
++	defer ossl.EVP_CIPHER_CTX_free(dec_ctx)
 +
-+	if C.go_openssl_EVP_CIPHER_CTX_set_padding(dec_ctx, 0) != 1 {
-+		return errors.New("could not disable cipher padding")
++	if _, err := ossl.EVP_CIPHER_CTX_set_padding(dec_ctx, 0); err != nil {
++		return err
 +	}
 +
-+	C.go_openssl_EVP_DecryptUpdate_wrapper(dec_ctx, base(dst), base(src), C.int(c.blockSize))
++	var outl int32
++	ossl.EVP_DecryptUpdate(dec_ctx, base(dst), &outl, base(src), int32(c.blockSize))
 +	runtime.KeepAlive(c)
 +	return nil
 +}
 +
 +type cipherCBC struct {
-+	ctx       C.GO_EVP_CIPHER_CTX_PTR
++	ctx       ossl.EVP_CIPHER_CTX_PTR
 +	blockSize int
 +}
 +
 +func (c *cipherCBC) finalize() {
-+	C.go_openssl_EVP_CIPHER_CTX_free(c.ctx)
++	ossl.EVP_CIPHER_CTX_free(c.ctx)
 +}
 +
 +func (x *cipherCBC) BlockSize() int { return x.blockSize }
@@ -940,8 +922,9 @@ index 00000000000000..72f7aebfc130e7
 +		panic("crypto/cipher: output smaller than input")
 +	}
 +	if len(src) > 0 {
-+		if C.go_openssl_EVP_CipherUpdate_wrapper(x.ctx, base(dst), base(src), C.int(len(src))) != 1 {
-+			panic("crypto/cipher: CipherUpdate failed")
++		var outl int32
++		if _, err := ossl.EVP_CipherUpdate(x.ctx, base(dst), &outl, base(src), int32(len(src))); err != nil {
++			panic("crypto/cipher: " + err.Error())
 +		}
 +		runtime.KeepAlive(x)
 +	}
@@ -949,10 +932,10 @@ index 00000000000000..72f7aebfc130e7
 +
 +func (x *cipherCBC) SetIV(iv []byte) {
 +	if len(iv) != x.blockSize {
-+		panic("cipher: incorrect length IV")
++		panic("crypto/cipher: incorrect length IV")
 +	}
-+	if C.go_openssl_EVP_CipherInit_ex(x.ctx, nil, nil, nil, base(iv), C.int(cipherOpNone)) != 1 {
-+		panic("cipher: unable to initialize EVP cipher ctx")
++	if _, err := ossl.EVP_CipherInit_ex(x.ctx, nil, nil, nil, base(iv), int32(cipherOpNone)); err != nil {
++		panic("crypto/cipher: " + err.Error())
 +	}
 +}
 +
@@ -963,14 +946,14 @@ index 00000000000000..72f7aebfc130e7
 +	}
 +	x := &cipherCBC{ctx: ctx, blockSize: c.blockSize}
 +	runtime.SetFinalizer(x, (*cipherCBC).finalize)
-+	if C.go_openssl_EVP_CIPHER_CTX_set_padding(x.ctx, 0) != 1 {
-+		panic("cipher: unable to set padding")
++	if _, err := ossl.EVP_CIPHER_CTX_set_padding(x.ctx, 0); err != nil {
++		panic("crypto/cipher: " + err.Error())
 +	}
 +	return x
 +}
 +
 +type cipherCTR struct {
-+	ctx C.GO_EVP_CIPHER_CTX_PTR
++	ctx ossl.EVP_CIPHER_CTX_PTR
 +}
 +
 +func (x *cipherCTR) XORKeyStream(dst, src []byte) {
@@ -983,8 +966,9 @@ index 00000000000000..72f7aebfc130e7
 +	if len(src) == 0 {
 +		return
 +	}
-+	if C.go_openssl_EVP_EncryptUpdate_wrapper(x.ctx, base(dst), base(src), C.int(len(src))) != 1 {
-+		panic("crypto/cipher: EncryptUpdate failed")
++	var outl int32
++	if _, err := ossl.EVP_EncryptUpdate(x.ctx, base(dst), &outl, base(src), int32(len(src))); err != nil {
++		panic("crypto/cipher: " + err.Error())
 +	}
 +	runtime.KeepAlive(x)
 +}
@@ -1000,7 +984,7 @@ index 00000000000000..72f7aebfc130e7
 +}
 +
 +func (c *cipherCTR) finalize() {
-+	C.go_openssl_EVP_CIPHER_CTX_free(c.ctx)
++	ossl.EVP_CIPHER_CTX_free(c.ctx)
 +}
 +
 +type cipherGCMTLS uint8
@@ -1082,7 +1066,7 @@ index 00000000000000..72f7aebfc130e7
 +	return gcmTagSize
 +}
 +
-+func (g *cipherGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++func (g *cipherGCM) Seal(dst, nonce, plaintext, aad []byte) []byte {
 +	if len(nonce) != gcmStandardNonceSize {
 +		panic("cipher: incorrect nonce length given to GCM")
 +	}
@@ -1093,12 +1077,12 @@ index 00000000000000..72f7aebfc130e7
 +		panic("cipher: message too large for buffer")
 +	}
 +	if g.tls != cipherGCMTLSNone {
-+		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
++		if g.tls == cipherGCMTLS12 && len(aad) != gcmTls12AddSize {
 +			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
-+		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
++		} else if g.tls == cipherGCMTLS13 && len(aad) != gcmTls13AddSize {
 +			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
 +		}
-+		counter := binary.BigEndian.Uint64(nonce[gcmTlsFixedNonceSize:])
++		counter := bigEndianUint64(nonce[gcmTlsFixedNonceSize:])
 +		if g.tls == cipherGCMTLS13 {
 +			// In TLS 1.3, the counter in the nonce has a mask and requires
 +			// further decoding.
@@ -1150,19 +1134,32 @@ index 00000000000000..72f7aebfc130e7
 +	if err != nil {
 +		panic(err)
 +	}
-+	defer C.go_openssl_EVP_CIPHER_CTX_free(ctx)
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
 +	// Encrypt additional data.
 +	// When sealing a TLS payload, OpenSSL app sets the additional data using
-+	// 'EVP_CIPHER_CTX_ctrl(g.ctx, C.EVP_CTRL_AEAD_TLS1_AAD, C.EVP_AEAD_TLS1_AAD_LEN, base(additionalData))'.
++	// '_EVP_CIPHER_CTX_ctrl(g.ctx, _EVP_CTRL_AEAD_TLS1_AAD, _EVP_AEAD_TLS1_AAD_LEN, base(additionalData))'.
 +	// This makes the explicit nonce component to monotonically increase on every Seal operation without
 +	// relying in the explicit nonce being securely set externally,
 +	// and it also gives some interesting speed gains.
 +	// Unfortunately we can't use it because Go expects AEAD.Seal to honor the provided nonce.
-+	if C.go_openssl_EVP_CIPHER_CTX_seal_wrapper(ctx, base(out), base(nonce),
-+		base(plaintext), C.int(len(plaintext)),
-+		base(additionalData), C.int(len(additionalData))) != 1 {
-+
-+		panic(fail("EVP_CIPHER_CTX_seal"))
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, baseNeverEmpty(plaintext), int32(len(plaintext))); err != nil {
++		panic(err)
++	}
++	if len(plaintext) != int(outl) {
++		panic("cipher: incorrect length returned from GCM EncryptUpdate")
++	}
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(g)
 +	return ret
@@ -1170,7 +1167,7 @@ index 00000000000000..72f7aebfc130e7
 +
 +var errOpen = errors.New("cipher: message authentication failed")
 +
-+func (g *cipherGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++func (g *cipherGCM) Open(dst, nonce, ciphertext, aad []byte) (_ []byte, err error) {
 +	if len(nonce) != gcmStandardNonceSize {
 +		panic("cipher: incorrect nonce length given to GCM")
 +	}
@@ -1197,19 +1194,36 @@ index 00000000000000..72f7aebfc130e7
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_EVP_CIPHER_CTX_free(ctx)
-+	ok := C.go_openssl_EVP_CIPHER_CTX_open_wrapper(
-+		ctx, base(out), base(nonce),
-+		base(ciphertext), C.int(len(ciphertext)),
-+		base(additionalData), C.int(len(additionalData)), base(tag))
-+	runtime.KeepAlive(g)
-+	if ok == 0 {
-+		// Zero output buffer on error.
-+		for i := range out {
-+			out[i] = 0
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++
++	defer func() {
++		if err != nil {
++			// Zero output buffer on error.
++			for i := range out {
++				out[i] = 0
++			}
 +		}
++	}()
++	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		return nil, errOpen
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		return nil, errOpen
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++		return nil, errOpen
++	}
++	if _, err := ossl.EVP_DecryptUpdate(ctx, base(out), &outl, baseNeverEmpty(ciphertext), int32(len(ciphertext))); err != nil {
++		return nil, errOpen
++	}
++	if len(ciphertext) != int(outl) {
++		return nil, errOpen
++	}
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
 +		return nil, errOpen
 +	}
++	runtime.KeepAlive(g)
 +	return ret, nil
 +}
 +
@@ -1225,35 +1239,35 @@ index 00000000000000..72f7aebfc130e7
 +	return
 +}
 +
-+func newCipherCtx(kind cipherKind, mode cipherMode, encrypt cipherOp, key, iv []byte) (_ C.GO_EVP_CIPHER_CTX_PTR, err error) {
++func newCipherCtx(kind cipherKind, mode cipherMode, encrypt cipherOp, key, iv []byte) (_ ossl.EVP_CIPHER_CTX_PTR, err error) {
 +	cipher := loadCipher(kind, mode)
 +	if cipher == nil {
 +		panic("crypto/cipher: unsupported cipher: " + kind.String())
 +	}
-+	ctx := C.go_openssl_EVP_CIPHER_CTX_new()
-+	if ctx == nil {
-+		return nil, fail("unable to create EVP cipher ctx")
++	ctx, err := ossl.EVP_CIPHER_CTX_new()
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if err != nil {
-+			C.go_openssl_EVP_CIPHER_CTX_free(ctx)
++			ossl.EVP_CIPHER_CTX_free(ctx)
 +		}
 +	}()
 +	if kind == cipherRC4 {
 +		// RC4 cipher supports a variable key length.
 +		// We need to set the key length before setting the key,
 +		// and to do so we need to have an initialized cipher ctx.
-+		if C.go_openssl_EVP_CipherInit_ex(ctx, cipher, nil, nil, nil, C.int(encrypt)) != 1 {
-+			return nil, newOpenSSLError("EVP_CipherInit_ex")
++		if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, nil, nil, int32(encrypt)); err != nil {
++			return nil, err
 +		}
-+		if C.go_openssl_EVP_CIPHER_CTX_set_key_length(ctx, C.int(len(key))) != 1 {
-+			return nil, newOpenSSLError("EVP_CIPHER_CTX_set_key_length")
++		if _, err := ossl.EVP_CIPHER_CTX_set_key_length(ctx, int32(len(key))); err != nil {
++			return nil, err
 +		}
 +		// Pass nil to the next call to EVP_CipherInit_ex to avoid resetting ctx's cipher.
 +		cipher = nil
 +	}
-+	if C.go_openssl_EVP_CipherInit_ex(ctx, cipher, nil, base(key), base(iv), C.int(encrypt)) != 1 {
-+		return nil, newOpenSSLError("unable to initialize EVP cipher ctx")
++	if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, base(key), base(iv), int32(encrypt)); err != nil {
++		return nil, err
 +	}
 +	return ctx, nil
 +}
@@ -1272,17 +1286,109 @@ index 00000000000000..72f7aebfc130e7
 +	}
 +	return anyOverlap(x, y)
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
+new file mode 100644
+index 00000000000000..aa4a163aaab405
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
+@@ -0,0 +1,87 @@
++package openssl
++
++import "C"
++import "unsafe"
++
++// cString is a null-terminated string,
++// akin to C's char*.
++type cString string
++
++// str returns the string value.
++func (s cString) str() string {
++	return string(s)
++}
++
++// ptr returns a pointer to the string data.
++// It panics if the string is not null-terminated.
++//
++// The memory pointed to by the returned pointer should
++// not be modified and it must only be passed to
++// "const char*" parameters. Any attempt to modify it
++// will result in a runtime panic, as Go strings are
++// allocated in read-only memory.
++func (s cString) ptr() *byte {
++	if len(s) == 0 {
++		return nil
++	}
++	if s[len(s)-1] != 0 {
++		panic("must be null-terminated")
++	}
++	return unsafe.StringData(string(s))
++}
++
++const ( //checkheader:ignore
++	// Provider names
++	_ProviderNameFips    cString = "fips\x00"
++	_ProviderNameDefault cString = "default\x00"
++
++	// Property strings
++	_PropFIPSYes cString = "fips=yes\x00"
++	_PropFIPSNo  cString = "-fips\x00"
++
++	// Key types
++	_KeyTypeRSA     cString = "RSA\x00"
++	_KeyTypeEC      cString = "EC\x00"
++	_KeyTypeED25519 cString = "ED25519\x00"
++
++	// Digest Names
++	_DigestNameSHA2_256 cString = "SHA2-256\x00"
++
++	// KDF names
++	_OSSL_KDF_NAME_HKDF     cString = "HKDF\x00"
++	_OSSL_KDF_NAME_PBKDF2   cString = "PBKDF2\x00"
++	_OSSL_KDF_NAME_TLS1_PRF cString = "TLS1-PRF\x00"
++	_OSSL_MAC_NAME_HMAC     cString = "HMAC\x00"
++
++	// KDF parameters
++	_OSSL_KDF_PARAM_DIGEST cString = "digest\x00"
++	_OSSL_KDF_PARAM_SECRET cString = "secret\x00"
++	_OSSL_KDF_PARAM_SEED   cString = "seed\x00"
++	_OSSL_KDF_PARAM_KEY    cString = "key\x00"
++	_OSSL_KDF_PARAM_INFO   cString = "info\x00"
++	_OSSL_KDF_PARAM_SALT   cString = "salt\x00"
++	_OSSL_KDF_PARAM_MODE   cString = "mode\x00"
++
++	// PKEY parameters
++	_OSSL_PKEY_PARAM_PUB_KEY          cString = "pub\x00"
++	_OSSL_PKEY_PARAM_PRIV_KEY         cString = "priv\x00"
++	_OSSL_PKEY_PARAM_GROUP_NAME       cString = "group\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_X         cString = "qx\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_Y         cString = "qy\x00"
++	_OSSL_PKEY_PARAM_FFC_PBITS        cString = "pbits\x00"
++	_OSSL_PKEY_PARAM_FFC_QBITS        cString = "qbits\x00"
++	_OSSL_PKEY_PARAM_RSA_N            cString = "n\x00"
++	_OSSL_PKEY_PARAM_RSA_E            cString = "e\x00"
++	_OSSL_PKEY_PARAM_RSA_D            cString = "d\x00"
++	_OSSL_PKEY_PARAM_FFC_P            cString = "p\x00"
++	_OSSL_PKEY_PARAM_FFC_Q            cString = "q\x00"
++	_OSSL_PKEY_PARAM_FFC_G            cString = "g\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR1      cString = "rsa-factor1\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR2      cString = "rsa-factor2\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT1    cString = "rsa-exponent1\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT2    cString = "rsa-exponent2\x00"
++	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1 cString = "rsa-coefficient1\x00"
++
++	// MAC parameters
++	_OSSL_MAC_PARAM_DIGEST cString = "digest\x00"
++)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..cd006544b5111b
+index 00000000000000..78ecb9888e18cb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-@@ -0,0 +1,114 @@
+@@ -0,0 +1,113 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"crypto/cipher"
@@ -1394,28 +1500,29 @@ index 00000000000000..cd006544b5111b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..384424c215dcf1
+index 00000000000000..37663591d7568a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,323 @@
+@@ -0,0 +1,309 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"runtime"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +// SupportsDSA returns true if the OpenSSL library supports DSA.
 +func SupportsDSA() bool {
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_DSA, nil)
-+	if ctx == nil {
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
++	if err != nil {
 +		return false
 +	}
-+	C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	ossl.EVP_PKEY_CTX_free(ctx)
 +	return true
 +}
 +
@@ -1430,14 +1537,14 @@ index 00000000000000..384424c215dcf1
 +	X, Y BigInt
 +
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PrivateKeyDSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func (k *PrivateKeyDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++func (k *PrivateKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
 +	defer runtime.KeepAlive(k)
 +	return f(k._pkey)
 +}
@@ -1448,14 +1555,14 @@ index 00000000000000..384424c215dcf1
 +	Y BigInt
 +
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PublicKeyDSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func (k *PublicKeyDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++func (k *PublicKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
 +	defer runtime.KeepAlive(k)
 +	return f(k._pkey)
 +}
@@ -1466,46 +1573,46 @@ index 00000000000000..384424c215dcf1
 +	// extracting the domain parameters from it.
 +
 +	// Generate a new DSA key context and set the known parameters.
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_DSA, nil)
-+	if ctx == nil {
-+		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_new_id failed")
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
++	if err != nil {
++		return DSAParameters{}, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	if C.go_openssl_EVP_PKEY_paramgen_init(ctx) != 1 {
-+		return DSAParameters{}, newOpenSSLError("EVP_PKEY_paramgen_init failed")
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_paramgen_init(ctx); err != nil {
++		return DSAParameters{}, err
 +	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_DSA, -1, C.GO_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, C.int(l), nil) != 1 {
-+		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, int32(l), nil); err != nil {
++		return DSAParameters{}, err
 +	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_DSA, -1, C.GO_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, C.int(n), nil) != 1 {
-+		return DSAParameters{}, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, int32(n), nil); err != nil {
++		return DSAParameters{}, err
 +	}
-+	var pkey C.GO_EVP_PKEY_PTR
-+	if C.go_openssl_EVP_PKEY_paramgen(ctx, &pkey) != 1 {
-+		return DSAParameters{}, newOpenSSLError("EVP_PKEY_paramgen failed")
++	var pkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_paramgen(ctx, &pkey); err != nil {
++		return DSAParameters{}, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_free(pkey)
++	defer ossl.EVP_PKEY_free(pkey)
 +
 +	// Extract the domain parameters from the generated key.
-+	var p, q, g C.GO_BIGNUM_PTR
++	var p, q, g ossl.BIGNUM_PTR
 +	switch vMajor {
 +	case 1:
 +		dsa := getDSA(pkey)
-+		if vMinor == 0 {
-+			C.go_openssl_DSA_get0_pqg_backport(dsa, &p, &q, &g)
-+		} else {
-+			C.go_openssl_DSA_get0_pqg(dsa, &p, &q, &g)
-+		}
++		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
 +	case 3:
 +		defer func() {
-+			C.go_openssl_BN_free(p)
-+			C.go_openssl_BN_free(q)
-+			C.go_openssl_BN_free(g)
++			ossl.BN_free(p)
++			ossl.BN_free(q)
++			ossl.BN_free(g)
 +		}()
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_P, &p) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_Q, &q) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G, &g) != 1 {
-+			return DSAParameters{}, newOpenSSLError("EVP_PKEY_get_bn_param")
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_P.ptr(), &p); err != nil {
++			return DSAParameters{}, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_Q.ptr(), &q); err != nil {
++			return DSAParameters{}, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G.ptr(), &g); err != nil {
++			return DSAParameters{}, err
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
@@ -1552,24 +1659,22 @@ index 00000000000000..384424c215dcf1
 +	if err != nil {
 +		return nil, nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_free(pkey)
-+	var bx, by C.GO_BIGNUM_PTR
++	defer ossl.EVP_PKEY_free(pkey)
++	var bx, by ossl.BIGNUM_PTR
 +	switch vMajor {
 +	case 1:
 +		dsa := getDSA(pkey)
-+		if vMinor == 0 {
-+			C.go_openssl_DSA_get0_key_backport(dsa, &by, &bx)
-+		} else {
-+			C.go_openssl_DSA_get0_key(dsa, &by, &bx)
-+		}
++		ossl.DSA_get0_key(dsa, &by, &bx)
 +	case 3:
 +		defer func() {
-+			C.go_openssl_BN_clear_free(bx)
-+			C.go_openssl_BN_free(by)
++			ossl.BN_clear_free(bx)
++			ossl.BN_free(by)
 +		}()
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY, &by) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &bx) != 1 {
-+			return nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), &by); err != nil {
++			return nil, nil, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bx); err != nil {
++			return nil, nil, err
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
@@ -1587,7 +1692,7 @@ index 00000000000000..384424c215dcf1
 +	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
 +}
 +
-+func newDSA(params DSAParameters, x, y BigInt) (C.GO_EVP_PKEY_PTR, error) {
++func newDSA(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
 +	switch vMajor {
 +	case 1:
 +		return newDSA1(params, x, y)
@@ -1598,61 +1703,54 @@ index 00000000000000..384424c215dcf1
 +	}
 +}
 +
-+func newDSA1(params DSAParameters, x, y BigInt) (pkey C.GO_EVP_PKEY_PTR, err error) {
++func newDSA1(params DSAParameters, x, y BigInt) (pkey ossl.EVP_PKEY_PTR, err error) {
 +	checkMajorVersion(1)
 +
-+	dsa := C.go_openssl_DSA_new()
-+	if dsa == nil {
-+		return nil, newOpenSSLError("DSA_new failed")
++	dsa, err := ossl.DSA_new()
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if pkey == nil {
-+			C.go_openssl_DSA_free(dsa)
++			ossl.DSA_free(dsa)
 +		}
 +	}()
-+
-+	p, q, g := bigToBN(params.P), bigToBN(params.Q), bigToBN(params.G)
-+	var ret C.int
-+	if vMinor == 0 {
-+		ret = C.go_openssl_DSA_set0_pqg_backport(dsa, p, q, g)
-+	} else {
-+		ret = C.go_openssl_DSA_set0_pqg(dsa, p, q, g)
-+	}
-+	if ret != 1 {
-+		C.go_openssl_BN_free(p)
-+		C.go_openssl_BN_free(q)
-+		C.go_openssl_BN_free(g)
-+		return nil, newOpenSSLError("DSA_set0_pqg failed")
++	// No need to check for errors here, DSA_set0_* functions will fail
++	// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++	p, _ := bigToBN(params.P)
++	q, _ := bigToBN(params.Q)
++	g, _ := bigToBN(params.G)
++	if _, err := ossl.DSA_set0_pqg(dsa, p, q, g); err != nil {
++		ossl.BN_free(p)
++		ossl.BN_free(q)
++		ossl.BN_free(g)
++		return nil, err
 +	}
 +	if y != nil {
-+		pub, priv := bigToBN(y), bigToBN(x)
-+		if vMinor == 0 {
-+			ret = C.go_openssl_DSA_set0_key_backport(dsa, pub, priv)
-+		} else {
-+			ret = C.go_openssl_DSA_set0_key(dsa, pub, priv)
-+		}
-+		if ret != 1 {
-+			C.go_openssl_BN_free(pub)
-+			C.go_openssl_BN_clear_free(priv)
-+			return nil, newOpenSSLError("DSA_set0_key failed")
++		pub, _ := bigToBN(y)
++		priv, _ := bigToBN(x)
++		if _, err := ossl.DSA_set0_key(dsa, pub, priv); err != nil {
++			ossl.BN_free(pub)
++			ossl.BN_clear_free(priv)
++			return nil, err
 +		}
 +	} else {
-+		if C.go_openssl_DSA_generate_key(dsa) != 1 {
-+			return nil, newOpenSSLError("DSA_generate_key failed")
++		if _, err := ossl.DSA_generate_key(dsa); err != nil {
++			return nil, err
 +		}
 +	}
-+	pkey = C.go_openssl_EVP_PKEY_new()
-+	if pkey == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_new failed")
++	pkey, err = ossl.EVP_PKEY_new()
++	if err != nil {
++		return nil, err
 +	}
-+	if C.go_openssl_EVP_PKEY_assign(pkey, C.GO_EVP_PKEY_DSA, unsafe.Pointer(dsa)) != 1 {
-+		C.go_openssl_EVP_PKEY_free(pkey)
-+		return nil, newOpenSSLError("EVP_PKEY_assign failed")
++	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_DSA, unsafe.Pointer(dsa)); err != nil {
++		ossl.EVP_PKEY_free(pkey)
++		return nil, err
 +	}
 +	return pkey, nil
 +}
 +
-+func newDSA3(params DSAParameters, x, y BigInt) (C.GO_EVP_PKEY_PTR, error) {
++func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
 +	bld, err := newParamBuilder()
@@ -1664,11 +1762,11 @@ index 00000000000000..384424c215dcf1
 +	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_P, params.P, false)
 +	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_Q, params.Q, false)
 +	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_G, params.G, false)
-+	selection := C.int(C.GO_EVP_PKEY_KEYPAIR)
++	selection := int32(ossl.EVP_PKEY_KEYPAIR)
 +	if y != nil {
 +		bld.addBigInt(_OSSL_PKEY_PARAM_PUB_KEY, y, false)
 +		if x == nil {
-+			selection = C.int(C.GO_EVP_PKEY_PUBLIC_KEY)
++			selection = ossl.EVP_PKEY_PUBLIC_KEY
 +		}
 +	}
 +	if x != nil {
@@ -1678,8 +1776,8 @@ index 00000000000000..384424c215dcf1
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(bldparams)
-+	pkey, err := newEvpFromParams(C.GO_EVP_PKEY_DSA, selection, bldparams)
++	defer ossl.OSSL_PARAM_free(bldparams)
++	pkey, err := newEvpFromParams(ossl.EVP_PKEY_DSA, selection, bldparams)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -1689,18 +1787,18 @@ index 00000000000000..384424c215dcf1
 +	// pkey doesn't contain the public component, but the crypto/dsa package
 +	// expects it to be always there. Generate a new key using pkey as domain
 +	// parameters placeholder.
-+	defer C.go_openssl_EVP_PKEY_free(pkey)
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new_from_pkey")
++	defer ossl.EVP_PKEY_free(pkey)
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	if C.go_openssl_EVP_PKEY_keygen_init(ctx) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_keygen_init")
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
++		return nil, err
 +	}
-+	var gkey C.GO_EVP_PKEY_PTR
-+	if C.go_openssl_EVP_PKEY_keygen(ctx, &gkey) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_keygen")
++	var gkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_keygen(ctx, &gkey); err != nil {
++		return nil, err
 +	}
 +	return gkey, nil
 +}
@@ -1708,42 +1806,36 @@ index 00000000000000..384424c215dcf1
 +// getDSA returns the DSA from pkey.
 +// If pkey does not contain an DSA it panics.
 +// The returned key should not be freed.
-+func getDSA(pkey C.GO_EVP_PKEY_PTR) (key C.GO_DSA_PTR) {
-+	if vMajor == 1 && vMinor == 0 {
-+		if key0 := C.go_openssl_EVP_PKEY_get0(pkey); key0 != nil {
-+			key = C.GO_DSA_PTR(key0)
-+		}
-+	} else {
-+		key = C.go_openssl_EVP_PKEY_get0_DSA(pkey)
-+	}
-+	if key == nil {
-+		panic("pkey does not contain an DSA")
++func getDSA(pkey ossl.EVP_PKEY_PTR) ossl.DSA_PTR {
++	key, err := ossl.EVP_PKEY_get0_DSA(pkey)
++	if err != nil {
++		panic(err)
 +	}
 +	return key
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..734c14b9bc1e3e
+index 00000000000000..1a4e89dc5790b6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,67 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
++import "github.com/golang-fips/openssl/v2/internal/ossl"
 +
-+func curveNID(curve string) C.int {
++func curveNID(curve string) int32 {
 +	switch curve {
 +	case "P-224":
-+		return C.GO_NID_secp224r1
++		return ossl.NID_secp224r1
 +	case "P-256":
-+		return C.GO_NID_X9_62_prime256v1
++		return ossl.NID_X9_62_prime256v1
 +	case "P-384":
-+		return C.GO_NID_secp384r1
++		return ossl.NID_secp384r1
 +	case "P-521":
-+		return C.GO_NID_secp521r1
++		return ossl.NID_secp521r1
 +	default:
 +		panic("openssl: unknown curve " + curve)
 +	}
@@ -1766,70 +1858,70 @@ index 00000000000000..734c14b9bc1e3e
 +}
 +
 +// encodeEcPoint encodes pt.
-+func encodeEcPoint(group C.GO_EC_GROUP_PTR, pt C.GO_EC_POINT_PTR) ([]byte, error) {
++func encodeEcPoint(group ossl.EC_GROUP_PTR, pt ossl.EC_POINT_PTR) ([]byte, error) {
 +	// Get encoded point size.
-+	n := C.go_openssl_EC_POINT_point2oct(group, pt, C.GO_POINT_CONVERSION_UNCOMPRESSED, nil, 0, nil)
-+	if n == 0 {
-+		return nil, newOpenSSLError("EC_POINT_point2oct")
++	n, err := ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, nil, 0, nil)
++	if err != nil {
++		return nil, err
 +	}
 +	// Encode point into bytes.
 +	bytes := make([]byte, n)
-+	n = C.go_openssl_EC_POINT_point2oct(group, pt, C.GO_POINT_CONVERSION_UNCOMPRESSED, base(bytes), n, nil)
-+	if n == 0 {
-+		return nil, newOpenSSLError("EC_POINT_point2oct")
++	if _, err = ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, base(bytes), n, nil); err != nil {
++		return nil, err
 +	}
 +	return bytes, nil
 +}
 +
 +// generateAndEncodeEcPublicKey calls newPubKeyPointFn to generate a public key point and then encodes it.
-+func generateAndEncodeEcPublicKey(nid C.int, newPubKeyPointFn func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error)) ([]byte, error) {
-+	group := C.go_openssl_EC_GROUP_new_by_curve_name(nid)
-+	if group == nil {
-+		return nil, newOpenSSLError("EC_GROUP_new_by_curve_name")
++func generateAndEncodeEcPublicKey(nid int32, newPubKeyPointFn func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error)) ([]byte, error) {
++	group, err := ossl.EC_GROUP_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_EC_GROUP_free(group)
++	defer ossl.EC_GROUP_free(group)
 +	pt, err := newPubKeyPointFn(group)
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_EC_POINT_free(pt)
++	defer ossl.EC_POINT_free(pt)
 +	return encodeEcPoint(group, pt)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..ad392dca1ced82
+index 00000000000000..d80d8b153f5a84
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,303 @@
+@@ -0,0 +1,306 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"errors"
 +	"runtime"
 +	"slices"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +type PublicKeyECDH struct {
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +	bytes []byte
 +}
 +
 +func (k *PublicKeyECDH) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
 +type PrivateKeyECDH struct {
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +	curve string
 +}
 +
 +func (k *PrivateKeyECDH) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
 +func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
@@ -1862,42 +1954,41 @@ index 00000000000000..ad392dca1ced82
 +
 +func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
 +	defer runtime.KeepAlive(k)
-+	var pkey C.GO_EVP_PKEY_PTR
++	var pkey ossl.EVP_PKEY_PTR
 +	defer func() {
-+		C.go_openssl_EVP_PKEY_free(pkey)
++		ossl.EVP_PKEY_free(pkey)
 +	}()
 +
 +	var bytes []byte
 +	switch vMajor {
 +	case 1:
-+		pkey = C.go_openssl_EVP_PKEY_new()
-+		if pkey == nil {
-+			return nil, newOpenSSLError("EVP_PKEY_new")
++		var err error
++		pkey, err = ossl.EVP_PKEY_new()
++		if err != nil {
++			return nil, err
 +		}
 +		key := getECKey(k._pkey)
-+		if C.go_openssl_EVP_PKEY_set1_EC_KEY(pkey, key) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_set1_EC_KEY")
++		if _, err := ossl.EVP_PKEY_set1_EC_KEY(pkey, key); err != nil {
++			return nil, err
 +		}
-+		pt := C.go_openssl_EC_KEY_get0_public_key(key)
++		pt := ossl.EC_KEY_get0_public_key(key)
 +		if pt == nil {
-+			return nil, newOpenSSLError("EC_KEY_get0_public_key")
++			return nil, fail("missing ECDH public key")
 +		}
-+		group := C.go_openssl_EC_KEY_get0_group(key)
-+		var err error
-+		bytes, err = encodeEcPoint(group, pt)
-+		if err != nil {
++		group := ossl.EC_KEY_get0_group(key)
++		if bytes, err = encodeEcPoint(group, pt); err != nil {
 +			return nil, err
 +		}
 +	case 3:
 +		pkey = k._pkey
-+		if C.go_openssl_EVP_PKEY_up_ref(pkey) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_up_ref")
++		if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
++			return nil, err
 +		}
 +
-+		var cbytes *C.uchar
-+		n := C.go_openssl_EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
-+		if n == 0 {
-+			return nil, newOpenSSLError("EVP_PKEY_get_octet_string_param")
++		var cbytes *byte
++		n, err := ossl.EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
++		if err != nil {
++			return nil, err
 +		}
 +		bytes = C.GoBytes(unsafe.Pointer(cbytes), C.int(n))
 +		cryptoFree(unsafe.Pointer(cbytes))
@@ -1910,7 +2001,7 @@ index 00000000000000..ad392dca1ced82
 +	return pub, nil
 +}
 +
-+func newECDHPkey(curve string, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, error) {
++func newECDHPkey(curve string, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
 +	nid := curveNID(curve)
 +	switch vMajor {
 +	case 1:
@@ -1922,50 +2013,50 @@ index 00000000000000..ad392dca1ced82
 +	}
 +}
 +
-+func newECDHPkey1(nid C.int, bytes []byte, isPrivate bool) (pkey C.GO_EVP_PKEY_PTR, err error) {
++func newECDHPkey1(nid int32, bytes []byte, isPrivate bool) (pkey ossl.EVP_PKEY_PTR, err error) {
 +	checkMajorVersion(1)
 +
-+	key := C.go_openssl_EC_KEY_new_by_curve_name(nid)
-+	if key == nil {
-+		return nil, newOpenSSLError("EC_KEY_new_by_curve_name")
++	key, err := ossl.EC_KEY_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if pkey == nil {
-+			C.go_openssl_EC_KEY_free(key)
++			ossl.EC_KEY_free(key)
 +		}
 +	}()
-+	group := C.go_openssl_EC_KEY_get0_group(key)
++	group := ossl.EC_KEY_get0_group(key)
 +	if isPrivate {
-+		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
-+		if priv == nil {
-+			return nil, newOpenSSLError("BN_bin2bn")
++		priv, err := ossl.BN_bin2bn(base(bytes), int32(len(bytes)), nil)
++		if err != nil {
++			return nil, err
 +		}
-+		defer C.go_openssl_BN_clear_free(priv)
-+		if C.go_openssl_EC_KEY_set_private_key(key, priv) != 1 {
-+			return nil, newOpenSSLError("EC_KEY_set_private_key")
++		defer ossl.BN_clear_free(priv)
++		if _, err := ossl.EC_KEY_set_private_key(key, priv); err != nil {
++			return nil, err
 +		}
 +		pub, err := pointMult(group, priv)
 +		if err != nil {
 +			return nil, err
 +		}
-+		defer C.go_openssl_EC_POINT_free(pub)
-+		if C.go_openssl_EC_KEY_set_public_key(key, pub) != 1 {
-+			return nil, newOpenSSLError("EC_KEY_set_public_key")
++		defer ossl.EC_POINT_free(pub)
++		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
++			return nil, err
 +		}
 +	} else {
-+		pub := C.go_openssl_EC_POINT_new(group)
-+		if pub == nil {
-+			return nil, newOpenSSLError("EC_POINT_new")
++		pub, err := ossl.EC_POINT_new(group)
++		if err != nil {
++			return nil, err
 +		}
-+		defer C.go_openssl_EC_POINT_free(pub)
-+		if C.go_openssl_EC_POINT_oct2point(group, pub, base(bytes), C.size_t(len(bytes)), nil) != 1 {
-+			return nil, errors.New("point not on curve")
++		defer ossl.EC_POINT_free(pub)
++		if _, err := ossl.EC_POINT_oct2point(group, pub, base(bytes), len(bytes), nil); err != nil {
++			return nil, err
 +		}
-+		if C.go_openssl_EC_KEY_set_public_key(key, pub) != 1 {
-+			return nil, newOpenSSLError("EC_KEY_set_public_key")
++		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
++			return nil, err
 +		}
 +	}
-+	if C.go_openssl_EC_KEY_check_key(key) != 1 {
++	if _, err := ossl.EC_KEY_check_key(key); err != nil {
 +		// Match upstream error message.
 +		if isPrivate {
 +			return nil, errors.New("crypto/ecdh: invalid private key")
@@ -1976,7 +2067,7 @@ index 00000000000000..ad392dca1ced82
 +	return newEVPPKEY(key)
 +}
 +
-+func newECDHPkey3(nid C.int, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, error) {
++func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
 +	bld, err := newParamBuilder()
@@ -1984,15 +2075,15 @@ index 00000000000000..ad392dca1ced82
 +		return nil, err
 +	}
 +	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
-+	var selection C.int
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
++	var selection int32
 +	if isPrivate {
-+		priv := C.go_openssl_BN_bin2bn(base(bytes), C.int(len(bytes)), nil)
-+		if priv == nil {
-+			return nil, newOpenSSLError("BN_bin2bn")
++		priv, err := ossl.BN_bin2bn(base(bytes), int32(len(bytes)), nil)
++		if err != nil {
++			return nil, err
 +		}
-+		defer C.go_openssl_BN_clear_free(priv)
-+		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error) {
++		defer ossl.BN_clear_free(priv)
++		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
 +			return pointMult(group, priv)
 +		})
 +		if err != nil {
@@ -2000,40 +2091,40 @@ index 00000000000000..ad392dca1ced82
 +		}
 +		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
 +		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, priv)
-+		selection = C.GO_EVP_PKEY_KEYPAIR
++		selection = ossl.EVP_PKEY_KEYPAIR
 +	} else {
 +		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, bytes)
-+		selection = C.GO_EVP_PKEY_PUBLIC_KEY
++		selection = ossl.EVP_PKEY_PUBLIC_KEY
 +	}
 +
 +	params, err := bld.build()
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
-+	pkey, err := newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
++	defer ossl.OSSL_PARAM_free(params)
++	pkey, err := newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
 +	if err != nil {
 +		return nil, err
 +	}
 +
 +	if err := checkPkey(pkey, isPrivate); err != nil {
-+		C.go_openssl_EVP_PKEY_free(pkey)
++		ossl.EVP_PKEY_free(pkey)
 +		return nil, errors.New("crypto/ecdh: " + err.Error())
 +	}
 +	return pkey, nil
 +}
 +
-+func pointMult(group C.GO_EC_GROUP_PTR, priv C.GO_BIGNUM_PTR) (C.GO_EC_POINT_PTR, error) {
++func pointMult(group ossl.EC_GROUP_PTR, priv ossl.BIGNUM_PTR) (ossl.EC_POINT_PTR, error) {
 +	// OpenSSL does not expose any method to generate the public
 +	// key from the private key [1], so we have to calculate it here.
 +	// [1] https://github.com/openssl/openssl/issues/18437#issuecomment-1144717206
-+	pt := C.go_openssl_EC_POINT_new(group)
-+	if pt == nil {
-+		return nil, newOpenSSLError("EC_POINT_new")
++	pt, err := ossl.EC_POINT_new(group)
++	if err != nil {
++		return nil, err
 +	}
-+	if C.go_openssl_EC_POINT_mul(group, pt, priv, nil, nil, nil) == 0 {
-+		C.go_openssl_EC_POINT_free(pt)
-+		return nil, newOpenSSLError("EC_POINT_mul")
++	if _, err := ossl.EC_POINT_mul(group, pt, priv, nil, nil, nil); err != nil {
++		ossl.EC_POINT_free(pt)
++		return nil, err
 +	}
 +	return pt, nil
 +}
@@ -2041,52 +2132,52 @@ index 00000000000000..ad392dca1ced82
 +func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
 +	defer runtime.KeepAlive(priv)
 +	defer runtime.KeepAlive(pub)
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new(priv._pkey, nil)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new")
++	ctx, err := ossl.EVP_PKEY_CTX_new(priv._pkey, nil)
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	if C.go_openssl_EVP_PKEY_derive_init(ctx) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_init")
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return nil, err
 +	}
-+	if C.go_openssl_EVP_PKEY_derive_set_peer(ctx, pub._pkey) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_set_peer")
++	if _, err := ossl.EVP_PKEY_derive_set_peer(ctx, pub._pkey); err != nil {
++		return nil, err
 +	}
-+	r := C.go_openssl_EVP_PKEY_derive_wrapper(ctx, nil, 0)
-+	if r.result != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_init")
++	var keylen int
++	if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
++		return nil, err
 +	}
-+	out := make([]byte, r.keylen)
-+	if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(out), r.keylen).result != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_derive_init")
++	out := make([]byte, keylen)
++	if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++		return nil, err
 +	}
 +	return out, nil
 +}
 +
 +func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	pkey, err := generateEVPPKey(C.GO_EVP_PKEY_EC, 0, curve)
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_EC, 0, curve)
 +	if err != nil {
 +		return nil, nil, err
 +	}
 +	var k *PrivateKeyECDH
 +	defer func() {
 +		if k == nil {
-+			C.go_openssl_EVP_PKEY_free(pkey)
++			ossl.EVP_PKEY_free(pkey)
 +		}
 +	}()
-+	var priv C.GO_BIGNUM_PTR
++	var priv ossl.BIGNUM_PTR
 +	switch vMajor {
 +	case 1:
 +		key := getECKey(pkey)
-+		priv = C.go_openssl_EC_KEY_get0_private_key(key)
++		priv = ossl.EC_KEY_get0_private_key(key)
 +		if priv == nil {
-+			return nil, nil, newOpenSSLError("EC_KEY_get0_private_key")
++			return nil, nil, fail("missing ECDH private key")
 +		}
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &priv) != 1 {
-+			return nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
++			return nil, nil, err
 +		}
-+		defer C.go_openssl_BN_clear_free(priv)
++		defer ossl.BN_clear_free(priv)
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -2095,7 +2186,10 @@ index 00000000000000..ad392dca1ced82
 +	// The fixed length is the order of the large prime subgroup of the curve,
 +	// returned by EVP_PKEY_get_bits, which is generally the upper bound for
 +	// generating a private ECDH key.
-+	bits := C.go_openssl_EVP_PKEY_get_bits(pkey)
++	bits, err := ossl.EVP_PKEY_get_bits(pkey)
++	if err != nil {
++		return nil, nil, err
++	}
 +	bytes := make([]byte, (bits+7)/8)
 +	if err := bnToBinPad(priv, bytes); err != nil {
 +		return nil, nil, err
@@ -2106,46 +2200,47 @@ index 00000000000000..ad392dca1ced82
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..bc5f1117fd4355
+index 00000000000000..e4d504de2146ba
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,208 @@
+@@ -0,0 +1,226 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"crypto"
 +	"errors"
 +	"runtime"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +type PrivateKeyECDSA struct {
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PrivateKeyECDSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func (k *PrivateKeyECDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++func (k *PrivateKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
 +	defer runtime.KeepAlive(k)
 +	return f(k._pkey)
 +}
 +
 +type PublicKeyECDSA struct {
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PublicKeyECDSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func (k *PublicKeyECDSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
++func (k *PublicKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
 +	defer runtime.KeepAlive(k)
 +	return f(k._pkey)
 +}
@@ -2174,41 +2269,49 @@ index 00000000000000..bc5f1117fd4355
 +
 +func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
 +	// Generate the private key.
-+	pkey, err := generateEVPPKey(C.GO_EVP_PKEY_EC, 0, curve)
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_EC, 0, curve)
 +	if err != nil {
 +		return nil, nil, nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_free(pkey)
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+	var bx, by, bd C.GO_BIGNUM_PTR
++	var bx, by, bd ossl.BIGNUM_PTR
 +	defer func() {
-+		C.go_openssl_BN_free(bx)
-+		C.go_openssl_BN_free(by)
++		ossl.BN_free(bx)
++		ossl.BN_free(by)
 +	}()
 +	switch vMajor {
 +	case 1:
 +		// Retrieve the internal EC_KEY, which holds the X, Y, and D coordinates.
 +		key := getECKey(pkey)
-+		group := C.go_openssl_EC_KEY_get0_group(key)
-+		pt := C.go_openssl_EC_KEY_get0_public_key(key)
++		group := ossl.EC_KEY_get0_group(key)
++		pt := ossl.EC_KEY_get0_public_key(key)
 +		// Allocate two big numbers to store the X and Y coordinates.
-+		bx, by = C.go_openssl_BN_new(), C.go_openssl_BN_new()
-+		if bx == nil || by == nil {
-+			return nil, nil, nil, newOpenSSLError("BN_new failed")
++		bx, err = ossl.BN_new()
++		if err != nil {
++			return nil, nil, nil, err
++		}
++		by, err = ossl.BN_new()
++		if err != nil {
++			return nil, nil, nil, err
 +		}
 +		// Get X and Y.
-+		if C.go_openssl_EC_POINT_get_affine_coordinates_GFp(group, pt, bx, by, nil) == 0 {
-+			return nil, nil, nil, newOpenSSLError("EC_POINT_get_affine_coordinates_GFp failed")
++		if _, err := ossl.EC_POINT_get_affine_coordinates_GFp(group, pt, bx, by, nil); err != nil {
++			return nil, nil, nil, err
 +		}
 +		// Get Z. We don't need to free it, get0 does not increase the reference count.
-+		bd = C.go_openssl_EC_KEY_get0_private_key(key)
++		bd = ossl.EC_KEY_get0_private_key(key)
 +	case 3:
-+		if C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X, &bx) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_Y, &by) != 1 ||
-+			C.go_openssl_EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY, &bd) != 1 {
-+			return nil, nil, nil, newOpenSSLError("EVP_PKEY_get_bn_param")
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X.ptr(), &bx); err != nil {
++			return nil, nil, nil, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_Y.ptr(), &by); err != nil {
++			return nil, nil, nil, err
 +		}
-+		defer C.go_openssl_BN_clear_free(bd)
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bd); err != nil {
++			return nil, nil, nil, err
++		}
++		defer ossl.BN_clear_free(bd)
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -2233,19 +2336,25 @@ index 00000000000000..bc5f1117fd4355
 +	return evpHashVerify(pub.withKey, h, msg, sig) == nil
 +}
 +
-+func newECDSAKey(curve string, x, y, d BigInt) (C.GO_EVP_PKEY_PTR, error) {
++func newECDSAKey(curve string, x, y, d BigInt) (ossl.EVP_PKEY_PTR, error) {
 +	nid := curveNID(curve)
-+	var bx, by, bd C.GO_BIGNUM_PTR
-+	defer func() {
-+		C.go_openssl_BN_free(bx)
-+		C.go_openssl_BN_free(by)
-+		C.go_openssl_BN_clear_free(bd)
-+	}()
-+	bx = bigToBN(x)
-+	by = bigToBN(y)
-+	bd = bigToBN(d)
-+	if bx == nil || by == nil || (d != nil && bd == nil) {
-+		return nil, newOpenSSLError("BN_lebin2bn failed")
++	bx, err := bigToBN(x)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.BN_free(bx)
++	by, err := bigToBN(y)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.BN_free(by)
++	var bd ossl.BIGNUM_PTR
++	if d != nil {
++		bd, err = bigToBN(d)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.BN_clear_free(bd)
 +	}
 +	switch vMajor {
 +	case 1:
@@ -2257,39 +2366,42 @@ index 00000000000000..bc5f1117fd4355
 +	}
 +}
 +
-+func newECDSAKey1(nid C.int, bx, by, bd C.GO_BIGNUM_PTR) (pkey C.GO_EVP_PKEY_PTR, err error) {
++func newECDSAKey1(nid int32, bx, by, bd ossl.BIGNUM_PTR) (pkey ossl.EVP_PKEY_PTR, err error) {
 +	checkMajorVersion(1)
 +
-+	key := C.go_openssl_EC_KEY_new_by_curve_name(nid)
-+	if key == nil {
-+		return nil, newOpenSSLError("EC_KEY_new_by_curve_name failed")
++	key, err := ossl.EC_KEY_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if pkey == nil {
-+			defer C.go_openssl_EC_KEY_free(key)
++			defer ossl.EC_KEY_free(key)
 +		}
 +	}()
-+	if C.go_openssl_EC_KEY_set_public_key_affine_coordinates(key, bx, by) != 1 {
-+		return nil, newOpenSSLError("EC_KEY_set_public_key_affine_coordinates failed")
++	if _, err := ossl.EC_KEY_set_public_key_affine_coordinates(key, bx, by); err != nil {
++		return nil, err
 +	}
-+	if bd != nil && C.go_openssl_EC_KEY_set_private_key(key, bd) != 1 {
-+		return nil, newOpenSSLError("EC_KEY_set_private_key failed")
++	if bd != nil {
++		if _, err := ossl.EC_KEY_set_private_key(key, bd); err != nil {
++			return nil, err
++		}
 +	}
++
 +	return newEVPPKEY(key)
 +}
 +
-+func newECDSAKey3(nid C.int, bx, by, bd C.GO_BIGNUM_PTR) (C.GO_EVP_PKEY_PTR, error) {
++func newECDSAKey3(nid int32, bx, by, bd ossl.BIGNUM_PTR) (ossl.EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
 +	// Create the encoded public key public key from bx and by.
-+	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group C.GO_EC_GROUP_PTR) (C.GO_EC_POINT_PTR, error) {
-+		pt := C.go_openssl_EC_POINT_new(group)
-+		if pt == nil {
-+			return nil, newOpenSSLError("EC_POINT_new")
++	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
++		pt, err := ossl.EC_POINT_new(group)
++		if err != nil {
++			return nil, err
 +		}
-+		if C.go_openssl_EC_POINT_set_affine_coordinates(group, pt, bx, by, nil) != 1 {
-+			C.go_openssl_EC_POINT_free(pt)
-+			return nil, newOpenSSLError("EC_POINT_set_affine_coordinates")
++		if _, err := ossl.EC_POINT_set_affine_coordinates(group, pt, bx, by, nil); err != nil {
++			ossl.EC_POINT_free(pt)
++			return nil, err
 +		}
 +		return pt, nil
 +	})
@@ -2302,39 +2414,40 @@ index 00000000000000..bc5f1117fd4355
 +		return nil, err
 +	}
 +	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, C.go_openssl_OBJ_nid2sn(nid), 0)
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
 +	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
-+	var selection C.int
++	var selection int32
 +	if bd != nil {
 +		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, bd)
-+		selection = C.GO_EVP_PKEY_KEYPAIR
++		selection = ossl.EVP_PKEY_KEYPAIR
 +	} else {
-+		selection = C.GO_EVP_PKEY_PUBLIC_KEY
++		selection = ossl.EVP_PKEY_PUBLIC_KEY
 +	}
 +	params, err := bld.build()
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
-+	return newEvpFromParams(C.GO_EVP_PKEY_EC, selection, params)
++	defer ossl.OSSL_PARAM_free(params)
++	return newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..f96db2cd5efcad
+index 00000000000000..50fd06e5c89fbd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,228 @@
+@@ -0,0 +1,229 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"errors"
 +	"runtime"
 +	"strconv"
 +	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +const (
@@ -2355,16 +2468,16 @@ index 00000000000000..f96db2cd5efcad
 +	switch vMajor {
 +	case 1:
 +		if versionAtOrAbove(1, 1, 1) {
-+			ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_ED25519, nil)
++			ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
 +			if ctx != nil {
-+				C.go_openssl_EVP_PKEY_CTX_free(ctx)
++				ossl.EVP_PKEY_CTX_free(ctx)
 +				return true
 +			}
 +		}
 +	case 3:
-+		sig := C.go_openssl_EVP_SIGNATURE_fetch(nil, keyTypeED25519, nil)
++		sig, _ := ossl.EVP_SIGNATURE_fetch(nil, _KeyTypeED25519.ptr(), nil)
 +		if sig != nil {
-+			C.go_openssl_EVP_SIGNATURE_free(sig)
++			ossl.EVP_SIGNATURE_free(sig)
 +			return true
 +		}
 +	}
@@ -2378,11 +2491,11 @@ index 00000000000000..f96db2cd5efcad
 +}
 +
 +type PublicKeyEd25519 struct {
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PublicKeyEd25519) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
 +func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
@@ -2395,11 +2508,11 @@ index 00000000000000..f96db2cd5efcad
 +}
 +
 +type PrivateKeyEd25519 struct {
-+	_pkey C.GO_EVP_PKEY_PTR
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
 +func (k *PrivateKeyEd25519) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
 +func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
@@ -2425,7 +2538,7 @@ index 00000000000000..f96db2cd5efcad
 +
 +// GenerateKeyEd25519 generates a private key.
 +func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
-+	pkeyPriv, err := generateEVPPKey(C.GO_EVP_PKEY_ED25519, 0, "")
++	pkeyPriv, err := generateEVPPKey(ossl.EVP_PKEY_ED25519, 0, "")
 +	if err != nil {
 +		return nil, err
 +	}
@@ -2455,9 +2568,9 @@ index 00000000000000..f96db2cd5efcad
 +	if len(pub) != publicKeySizeEd25519 {
 +		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
 +	}
-+	pkey := C.go_openssl_EVP_PKEY_new_raw_public_key(C.GO_EVP_PKEY_ED25519, nil, base(pub), C.size_t(len(pub)))
-+	if pkey == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_new_raw_public_key")
++	pkey, err := ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_ED25519, nil, base(pub), len(pub))
++	if err != nil {
++		return nil, err
 +	}
 +	pubk := &PublicKeyEd25519{_pkey: pkey}
 +	runtime.SetFinalizer(pubk, (*PublicKeyEd25519).finalize)
@@ -2471,36 +2584,36 @@ index 00000000000000..f96db2cd5efcad
 +	if len(seed) != seedSizeEd25519 {
 +		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
 +	}
-+	pkey := C.go_openssl_EVP_PKEY_new_raw_private_key(C.GO_EVP_PKEY_ED25519, nil, base(seed), C.size_t(len(seed)))
-+	if pkey == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_new_raw_private_key")
++	pkey, err := ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_ED25519, nil, base(seed), len(seed))
++	if err != nil {
++		return nil, err
 +	}
 +	priv := &PrivateKeyEd25519{_pkey: pkey}
 +	runtime.SetFinalizer(priv, (*PrivateKeyEd25519).finalize)
 +	return priv, nil
 +}
 +
-+func extractPKEYPubEd25519(pkey C.GO_EVP_PKEY_PTR, pub []byte) error {
-+	r := C.go_openssl_EVP_PKEY_get_raw_public_key_wrapper(pkey, base(pub), C.size_t(publicKeySizeEd25519))
-+	if r.result != 1 {
-+		return newOpenSSLError("EVP_PKEY_get_raw_public_key")
++func extractPKEYPubEd25519(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
++	keylen := publicKeySizeEd25519
++	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, base(pub), &keylen); err != nil {
++		return err
 +	}
-+	if r.len != publicKeySizeEd25519 {
-+		return errors.New("ed25519: bad public key length: " + strconv.Itoa(int(r.len)))
++	if keylen != publicKeySizeEd25519 {
++		return errors.New("ed25519: bad public key length: " + strconv.Itoa(keylen))
 +	}
 +	return nil
 +}
 +
-+func extractPKEYPrivEd25519(pkey C.GO_EVP_PKEY_PTR, priv []byte) error {
++func extractPKEYPrivEd25519(pkey ossl.EVP_PKEY_PTR, priv []byte) error {
 +	if err := extractPKEYPubEd25519(pkey, priv[seedSizeEd25519:]); err != nil {
 +		return err
 +	}
-+	r := C.go_openssl_EVP_PKEY_get_raw_private_key_wrapper(pkey, base(priv), C.size_t(seedSizeEd25519))
-+	if r.result != 1 {
-+		return newOpenSSLError("EVP_PKEY_get_raw_private_key")
++	keylen := seedSizeEd25519
++	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(priv), &keylen); err != nil {
++		return err
 +	}
-+	if r.len != seedSizeEd25519 {
-+		return errors.New("ed25519: bad private key length: " + strconv.Itoa(int(r.len)))
++	if keylen != seedSizeEd25519 {
++		return errors.New("ed25519: bad private key length: " + strconv.Itoa(keylen))
 +	}
 +	return nil
 +}
@@ -2518,20 +2631,20 @@ index 00000000000000..f96db2cd5efcad
 +
 +func signEd25519(priv *PrivateKeyEd25519, sig, message []byte) error {
 +	defer runtime.KeepAlive(priv)
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_MD_CTX_new")
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
 +	}
-+	defer C.go_openssl_EVP_MD_CTX_free(ctx)
-+	if C.go_openssl_EVP_DigestSignInit(ctx, nil, nil, nil, priv._pkey) != 1 {
-+		return newOpenSSLError("EVP_DigestSignInit")
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestSignInit(ctx, nil, nil, nil, priv._pkey); err != nil {
++		return err
 +	}
-+	r := C.go_openssl_EVP_DigestSign_wrapper(ctx, base(sig), C.size_t(signatureSizeEd25519), base(message), C.size_t(len(message)))
-+	if r.result != 1 {
-+		return newOpenSSLError("EVP_DigestSign")
++	siglen := signatureSizeEd25519
++	if _, err := ossl.EVP_DigestSign(ctx, base(sig), &siglen, base(message), len(message)); err != nil {
++		return err
 +	}
-+	if r.siglen != signatureSizeEd25519 {
-+		return errors.New("ed25519: bad signature length: " + strconv.Itoa(int(r.siglen)))
++	if siglen != signatureSizeEd25519 {
++		return errors.New("ed25519: bad signature length: " + strconv.Itoa(siglen))
 +	}
 +	return nil
 +}
@@ -2539,30 +2652,29 @@ index 00000000000000..f96db2cd5efcad
 +// VerifyEd25519 reports whether sig is a valid signature of message by pub.
 +func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
 +	defer runtime.KeepAlive(pub)
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_MD_CTX_new")
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
 +	}
-+	defer C.go_openssl_EVP_MD_CTX_free(ctx)
-+	if C.go_openssl_EVP_DigestVerifyInit(ctx, nil, nil, nil, pub._pkey) != 1 {
-+		return newOpenSSLError("EVP_DigestVerifyInit")
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestVerifyInit(ctx, nil, nil, nil, pub._pkey); err != nil {
++		return err
 +	}
-+	if C.go_openssl_EVP_DigestVerify(ctx, base(sig), C.size_t(len(sig)), base(message), C.size_t(len(message))) != 1 {
++	if _, err := ossl.EVP_DigestVerify(ctx, base(sig), len(sig), base(message), len(message)); err != nil {
 +		return errors.New("ed25519: invalid signature")
 +	}
 +	return nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..8b5b367f9f8092
+index 00000000000000..20777c0728c7c1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,580 @@
+@@ -0,0 +1,552 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"crypto"
@@ -2571,15 +2683,11 @@ index 00000000000000..8b5b367f9f8092
 +	"strconv"
 +	"sync"
 +	"unsafe"
-+)
 +
-+var (
-+	keyTypeRSA     = C.CString("RSA")
-+	keyTypeEC      = C.CString("EC")
-+	keyTypeED25519 = C.CString("ED25519")
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
-+// cacheMD is a cache of crypto.Hash to GO_EVP_MD_PTR.
++// cacheMD is a cache of crypto.Hash to GOossl.EVP_MD_PTR.
 +var cacheMD sync.Map
 +
 +// hashFuncHash calls fn() and returns its result.
@@ -2606,17 +2714,17 @@ index 00000000000000..8b5b367f9f8092
 +	return fn(), nil
 +}
 +
-+// hashToMD converts a hash.Hash implementation from this package to a GO_EVP_MD_PTR.
-+func hashToMD(h hash.Hash) C.GO_EVP_MD_PTR {
++// hashToMD converts a hash.Hash implementation from this package to a GOossl.EVP_MD_PTR.
++func hashToMD(h hash.Hash) ossl.EVP_MD_PTR {
 +	if h, ok := h.(*evpHash); ok {
 +		return h.alg.md
 +	}
 +	return nil
 +}
 +
-+// hashFuncToMD converts a hash.Hash function to a GO_EVP_MD_PTR.
++// hashFuncToMD converts a hash.Hash function to a GOossl.EVP_MD_PTR.
 +// See [hashFuncHash] for details on error handling.
-+func hashFuncToMD(fn func() hash.Hash) (C.GO_EVP_MD_PTR, error) {
++func hashFuncToMD(fn func() hash.Hash) (ossl.EVP_MD_PTR, error) {
 +	h, err := hashFuncHash(fn)
 +	if err != nil {
 +		return nil, err
@@ -2629,7 +2737,7 @@ index 00000000000000..8b5b367f9f8092
 +}
 +
 +type hashAlgorithm struct {
-+	md             C.GO_EVP_MD_PTR
++	md             ossl.EVP_MD_PTR
 +	ch             crypto.Hash
 +	size           int
 +	blockSize      int
@@ -2647,67 +2755,62 @@ index 00000000000000..8b5b367f9f8092
 +	var hash hashAlgorithm
 +	switch ch {
 +	case crypto.RIPEMD160:
-+		hash.md = C.go_openssl_EVP_ripemd160()
++		hash.md = ossl.EVP_ripemd160()
 +	case crypto.MD4:
-+		hash.md = C.go_openssl_EVP_md4()
++		hash.md = ossl.EVP_md4()
 +	case crypto.MD5:
-+		hash.md = C.go_openssl_EVP_md5()
++		hash.md = ossl.EVP_md5()
 +		hash.magic = md5Magic
 +		hash.marshalledSize = md5MarshaledSize
 +	case crypto.MD5SHA1:
-+		if vMajor == 1 && vMinor == 0 {
-+			// OpenSSL 1.0.2 does not support MD5SHA1.
-+			hash.md = nil
-+		} else {
-+			hash.md = C.go_openssl_EVP_md5_sha1()
-+		}
++		hash.md = ossl.EVP_md5_sha1()
 +	case crypto.SHA1:
-+		hash.md = C.go_openssl_EVP_sha1()
++		hash.md = ossl.EVP_sha1()
 +		hash.magic = sha1Magic
 +		hash.marshalledSize = sha1MarshaledSize
 +	case crypto.SHA224:
-+		hash.md = C.go_openssl_EVP_sha224()
++		hash.md = ossl.EVP_sha224()
 +		hash.magic = magic224
 +		hash.marshalledSize = marshaledSize256
 +	case crypto.SHA256:
-+		hash.md = C.go_openssl_EVP_sha256()
++		hash.md = ossl.EVP_sha256()
 +		hash.magic = magic256
 +		hash.marshalledSize = marshaledSize256
 +	case crypto.SHA384:
-+		hash.md = C.go_openssl_EVP_sha384()
++		hash.md = ossl.EVP_sha384()
 +		hash.magic = magic384
 +		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA512:
-+		hash.md = C.go_openssl_EVP_sha512()
++		hash.md = ossl.EVP_sha512()
 +		hash.magic = magic512
 +		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA512_224:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha512_224()
++			hash.md = ossl.EVP_sha512_224()
 +			hash.magic = magic512_224
 +			hash.marshalledSize = marshaledSize512
 +		}
 +	case crypto.SHA512_256:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha512_256()
++			hash.md = ossl.EVP_sha512_256()
 +			hash.magic = magic512_256
 +			hash.marshalledSize = marshaledSize512
 +		}
 +	case crypto.SHA3_224:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha3_224()
++			hash.md = ossl.EVP_sha3_224()
 +		}
 +	case crypto.SHA3_256:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha3_256()
++			hash.md = ossl.EVP_sha3_256()
 +		}
 +	case crypto.SHA3_384:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha3_384()
++			hash.md = ossl.EVP_sha3_384()
 +		}
 +	case crypto.SHA3_512:
 +		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = C.go_openssl_EVP_sha3_512()
++			hash.md = ossl.EVP_sha3_512()
 +		}
 +	}
 +	if hash.md == nil {
@@ -2715,14 +2818,14 @@ index 00000000000000..8b5b367f9f8092
 +		return nil
 +	}
 +	hash.ch = ch
-+	hash.size = int(C.go_openssl_EVP_MD_get_size(hash.md))
-+	hash.blockSize = int(C.go_openssl_EVP_MD_get_block_size(hash.md))
++	hash.size = int(ossl.EVP_MD_get_size(hash.md))
++	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
 +	if vMajor == 3 {
 +		// On OpenSSL 3, directly operating on a EVP_MD object
 +		// not created by EVP_MD_fetch has negative performance
 +		// implications, as digest operations will have
 +		// to fetch it on every call. Better to just fetch it once here.
-+		md := C.go_openssl_EVP_MD_fetch(nil, C.go_openssl_EVP_MD_get0_name(hash.md), nil)
++		md, _ := ossl.EVP_MD_fetch(nil, ossl.EVP_MD_get0_name(hash.md), nil)
 +		// Don't overwrite md in case it can't be fetched, as the md may still be used
 +		// outside of EVP_MD_CTX, for example to sign and verify RSA signatures.
 +		if md != nil {
@@ -2735,47 +2838,48 @@ index 00000000000000..8b5b367f9f8092
 +}
 +
 +// generateEVPPKey generates a new EVP_PKEY with the given id and properties.
-+func generateEVPPKey(id C.int, bits int, curve string) (C.GO_EVP_PKEY_PTR, error) {
++func generateEVPPKey(id, bits int32, curve string) (ossl.EVP_PKEY_PTR, error) {
 +	if bits != 0 && curve != "" {
 +		return nil, fail("incorrect generateEVPPKey parameters")
 +	}
-+	var pkey C.GO_EVP_PKEY_PTR
++	var pkey ossl.EVP_PKEY_PTR
 +	switch vMajor {
 +	case 1:
-+		ctx := C.go_openssl_EVP_PKEY_CTX_new_id(id, nil)
-+		if ctx == nil {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_new_id")
++		ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
++		if err != nil {
++			return nil, err
 +		}
-+		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+		if C.go_openssl_EVP_PKEY_keygen_init(ctx) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_keygen_init")
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
++			return nil, err
 +		}
 +		if bits != 0 {
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_RSA_KEYGEN_BITS, C.int(bits), nil) != 1 {
-+				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl")
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_RSA_KEYGEN_BITS, bits, nil); err != nil {
++				return nil, err
 +			}
 +		}
 +		if curve != "" {
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, id, -1, C.GO_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil) != 1 {
-+				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl")
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil); err != nil {
++				return nil, err
 +			}
 +		}
-+		if C.go_openssl_EVP_PKEY_keygen(ctx, &pkey) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_keygen")
++		if _, err := ossl.EVP_PKEY_keygen(ctx, &pkey); err != nil {
++			return nil, err
 +		}
 +	case 3:
++		var err error
 +		switch id {
-+		case C.GO_EVP_PKEY_RSA:
-+			pkey = C.go_openssl_EVP_PKEY_Q_keygen_RSA(nil, nil, keyTypeRSA, C.size_t(bits))
-+		case C.GO_EVP_PKEY_EC:
-+			pkey = C.go_openssl_EVP_PKEY_Q_keygen_EC(nil, nil, keyTypeEC, C.go_openssl_OBJ_nid2sn(curveNID(curve)))
-+		case C.GO_EVP_PKEY_ED25519:
-+			pkey = C.go_openssl_EVP_PKEY_Q_keygen(nil, nil, keyTypeED25519)
++		case ossl.EVP_PKEY_RSA:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_RSA(nil, nil, _KeyTypeRSA.ptr(), int(bits))
++		case ossl.EVP_PKEY_EC:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_EC(nil, nil, _KeyTypeEC.ptr(), ossl.OBJ_nid2sn(curveNID(curve)))
++		case ossl.EVP_PKEY_ED25519:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_ED25519(nil, nil, _KeyTypeED25519.ptr())
 +		default:
 +			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
 +		}
-+		if pkey == nil {
-+			return nil, newOpenSSLError("EVP_PKEY_Q_keygen")
++		if err != nil {
++			return nil, err
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
@@ -2784,26 +2888,25 @@ index 00000000000000..8b5b367f9f8092
 +	return pkey, nil
 +}
 +
-+type withKeyFunc func(func(C.GO_EVP_PKEY_PTR) C.int) C.int
-+type initFunc func(C.GO_EVP_PKEY_CTX_PTR) error
-+type cryptFunc func(C.GO_EVP_PKEY_CTX_PTR, *C.uchar, *C.size_t, *C.uchar, C.size_t) error
-+type verifyFunc func(C.GO_EVP_PKEY_CTX_PTR, *C.uchar, C.size_t, *C.uchar, C.size_t) error
++type withKeyFunc func(func(ossl.EVP_PKEY_PTR) error) error
++type initFunc func(ossl.EVP_PKEY_CTX_PTR) error
++type cryptFunc func(ossl.EVP_PKEY_CTX_PTR, *byte, *int, *byte, int) error
++type verifyFunc func(ossl.EVP_PKEY_CTX_PTR, *byte, int, *byte, int) error
 +
-+func setupEVP(withKey withKeyFunc, padding C.int,
-+	h, mgfHash hash.Hash, label []byte, saltLen C.int, ch crypto.Hash,
-+	init initFunc) (_ C.GO_EVP_PKEY_CTX_PTR, err error) {
-+	var ctx C.GO_EVP_PKEY_CTX_PTR
-+	withKey(func(pkey C.GO_EVP_PKEY_PTR) C.int {
-+		ctx = C.go_openssl_EVP_PKEY_CTX_new(pkey, nil)
-+		return 1
-+	})
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new failed")
++func setupEVP(withKey withKeyFunc, padding int32,
++	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
++	init initFunc) (_ ossl.EVP_PKEY_CTX_PTR, err error) {
++	var ctx ossl.EVP_PKEY_CTX_PTR
++	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) error {
++		ctx, err = ossl.EVP_PKEY_CTX_new(pkey, nil)
++		return err
++	}); err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if err != nil {
 +			if ctx != nil {
-+				C.go_openssl_EVP_PKEY_CTX_free(ctx)
++				ossl.EVP_PKEY_CTX_free(ctx)
 +				ctx = nil
 +			}
 +		}
@@ -2817,18 +2920,16 @@ index 00000000000000..8b5b367f9f8092
 +	// Each padding type has its own requirements in terms of when to apply the padding,
 +	// so it can't be just set at this point.
 +	setPadding := func() error {
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_RSA_PADDING, padding, nil) != 1 {
-+			return newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
-+		}
-+		return nil
++		_, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, padding, nil)
++		return err
 +	}
 +	switch padding {
-+	case C.GO_RSA_PKCS1_OAEP_PADDING:
++	case ossl.RSA_PKCS1_OAEP_PADDING:
 +		md := hashToMD(h)
 +		if md == nil {
 +			return nil, errors.New("crypto/rsa: unsupported hash function")
 +		}
-+		var mgfMD C.GO_EVP_MD_PTR
++		var mgfMD ossl.EVP_MD_PTR
 +		if mgfHash != nil {
 +			// mgfHash is optional, but if it is set it must match a supported hash function.
 +			mgfMD = hashToMD(mgfHash)
@@ -2840,65 +2941,59 @@ index 00000000000000..8b5b367f9f8092
 +		if err := setPadding(); err != nil {
 +			return nil, err
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)); err != nil {
++			return nil, err
 +		}
 +		if mgfHash != nil {
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)) != 1 {
-+				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)); err != nil {
++				return nil, err
 +			}
 +		}
 +		// ctx takes ownership of label, so malloc a copy for OpenSSL to free.
 +		// OpenSSL does not take ownership of the label if the length is zero,
 +		// so better avoid the allocation.
-+		var clabel *C.uchar
++		var clabel *byte
 +		if len(label) > 0 {
-+			clabel = (*C.uchar)(cryptoMalloc(len(label)))
++			clabel = (*byte)(cryptoMalloc(len(label)))
 +			copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
 +			var err error
 +			if vMajor == 3 {
-+				ret := C.go_openssl_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), C.int(len(label)))
-+				if ret != 1 {
-+					err = newOpenSSLError("EVP_PKEY_CTX_set0_rsa_oaep_label failed")
-+				}
++				_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), int32(len(label)))
 +			} else {
-+				ret := C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_RSA_OAEP_LABEL, C.int(len(label)), unsafe.Pointer(clabel))
-+				if ret != 1 {
-+					err = newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
-+				}
++				_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
 +			}
 +			if err != nil {
 +				cryptoFree(unsafe.Pointer(clabel))
 +				return nil, err
 +			}
 +		}
-+	case C.GO_RSA_PKCS1_PSS_PADDING:
++	case ossl.RSA_PKCS1_PSS_PADDING:
 +		alg := loadHash(ch)
 +		if alg == nil {
 +			return nil, errors.New("crypto/rsa: unsupported hash function")
 +		}
-+		if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)) != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++			return nil, err
 +		}
 +		// setPadding must happen after setting EVP_PKEY_CTRL_MD.
 +		if err := setPadding(); err != nil {
 +			return nil, err
 +		}
 +		if saltLen != 0 {
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, C.GO_EVP_PKEY_RSA, -1, C.GO_EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil) != 1 {
-+				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil); err != nil {
++				return nil, err
 +			}
 +		}
 +
-+	case C.GO_RSA_PKCS1_PADDING:
++	case ossl.RSA_PKCS1_PADDING:
 +		if ch != 0 {
 +			// We support unhashed messages.
 +			alg := loadHash(ch)
 +			if alg == nil {
 +				return nil, errors.New("crypto/rsa: unsupported hash function")
 +			}
-+			if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, -1, C.GO_EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)) != 1 {
-+				return nil, newOpenSSLError("EVP_PKEY_CTX_ctrl failed")
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++				return nil, err
 +			}
 +			if err := setPadding(); err != nil {
 +				return nil, err
@@ -2912,21 +3007,25 @@ index 00000000000000..8b5b367f9f8092
 +	return ctx, nil
 +}
 +
-+func cryptEVP(withKey withKeyFunc, padding C.int,
-+	h, mgfHash hash.Hash, label []byte, saltLen C.int, ch crypto.Hash,
++func cryptEVP(withKey withKeyFunc, padding int32,
++	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
 +	init initFunc, crypt cryptFunc, in []byte) ([]byte, error) {
 +
 +	ctx, err := setupEVP(withKey, padding, h, mgfHash, label, saltLen, ch, init)
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	pkeySize := withKey(func(pkey C.GO_EVP_PKEY_PTR) C.int {
-+		return C.go_openssl_EVP_PKEY_get_size(pkey)
-+	})
-+	outLen := C.size_t(pkeySize)
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	var pkeySize int32
++	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
++		pkeySize, err = ossl.EVP_PKEY_get_size(pkey)
++		return err
++	}); err != nil {
++		return nil, err
++	}
++	outLen := int(pkeySize)
 +	out := make([]byte, pkeySize)
-+	if err := crypt(ctx, base(out), &outLen, base(in), C.size_t(len(in))); err != nil {
++	if err := crypt(ctx, base(out), &outLen, base(in), len(in)); err != nil {
 +		return nil, err
 +	}
 +	// The size returned by EVP_PKEY_get_size() is only preliminary and not exact,
@@ -2934,8 +3033,8 @@ index 00000000000000..8b5b367f9f8092
 +	return out[:outLen], nil
 +}
 +
-+func verifyEVP(withKey withKeyFunc, padding C.int,
-+	h hash.Hash, label []byte, saltLen C.int, ch crypto.Hash,
++func verifyEVP(withKey withKeyFunc, padding int32,
++	h hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
 +	init initFunc, verify verifyFunc,
 +	sig, in []byte) error {
 +
@@ -2943,70 +3042,56 @@ index 00000000000000..8b5b367f9f8092
 +	if err != nil {
 +		return err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	return verify(ctx, base(sig), C.size_t(len(sig)), base(in), C.size_t(len(in)))
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	return verify(ctx, base(sig), len(sig), base(in), len(in))
 +}
 +
-+func evpEncrypt(withKey withKeyFunc, padding C.int, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
-+	encryptInit := func(ctx C.GO_EVP_PKEY_CTX_PTR) error {
-+		if ret := C.go_openssl_EVP_PKEY_encrypt_init(ctx); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_encrypt_init failed")
-+		}
-+		return nil
++func evpEncrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
++	encryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_encrypt_init(ctx)
++		return err
 +	}
-+	encrypt := func(ctx C.GO_EVP_PKEY_CTX_PTR, out *C.uchar, outLen *C.size_t, in *C.uchar, inLen C.size_t) error {
-+		if ret := C.go_openssl_EVP_PKEY_encrypt(ctx, out, outLen, in, inLen); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_encrypt failed")
++	encrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
++		if _, err := ossl.EVP_PKEY_encrypt(ctx, out, outLen, in, inLen); err != nil {
++			return err
 +		}
 +		return nil
 +	}
 +	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, encryptInit, encrypt, msg)
 +}
 +
-+func evpDecrypt(withKey withKeyFunc, padding C.int, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
-+	decryptInit := func(ctx C.GO_EVP_PKEY_CTX_PTR) error {
-+		if ret := C.go_openssl_EVP_PKEY_decrypt_init(ctx); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_decrypt_init failed")
-+		}
-+		return nil
++func evpDecrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
++	decryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_decrypt_init(ctx)
++		return err
 +	}
-+	decrypt := func(ctx C.GO_EVP_PKEY_CTX_PTR, out *C.uchar, outLen *C.size_t, in *C.uchar, inLen C.size_t) error {
-+		if ret := C.go_openssl_EVP_PKEY_decrypt(ctx, out, outLen, in, inLen); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_decrypt failed")
-+		}
-+		return nil
++	decrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
++		_, err := ossl.EVP_PKEY_decrypt(ctx, out, outLen, in, inLen)
++		return err
 +	}
 +	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, decryptInit, decrypt, msg)
 +}
 +
-+func evpSign(withKey withKeyFunc, padding C.int, saltLen C.int, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	signtInit := func(ctx C.GO_EVP_PKEY_CTX_PTR) error {
-+		if ret := C.go_openssl_EVP_PKEY_sign_init(ctx); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_sign_init failed")
-+		}
-+		return nil
++func evpSign(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, hashed []byte) ([]byte, error) {
++	signtInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_sign_init(ctx)
++		return err
 +	}
-+	sign := func(ctx C.GO_EVP_PKEY_CTX_PTR, out *C.uchar, outLen *C.size_t, in *C.uchar, inLen C.size_t) error {
-+		if ret := C.go_openssl_EVP_PKEY_sign(ctx, out, outLen, in, inLen); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_sign failed")
-+		}
-+		return nil
++	sign := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
++		_, err := ossl.EVP_PKEY_sign(ctx, out, outLen, in, inLen)
++		return err
 +	}
 +	return cryptEVP(withKey, padding, nil, nil, nil, saltLen, h, signtInit, sign, hashed)
 +}
 +
-+func evpVerify(withKey withKeyFunc, padding C.int, saltLen C.int, h crypto.Hash, sig, hashed []byte) error {
-+	verifyInit := func(ctx C.GO_EVP_PKEY_CTX_PTR) error {
-+		if ret := C.go_openssl_EVP_PKEY_verify_init(ctx); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_verify_init failed")
-+		}
-+		return nil
++func evpVerify(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, sig, hashed []byte) error {
++	verifyInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_verify_init(ctx)
++		return err
 +	}
-+	verify := func(ctx C.GO_EVP_PKEY_CTX_PTR, out *C.uchar, outLen C.size_t, in *C.uchar, inLen C.size_t) error {
-+		if ret := C.go_openssl_EVP_PKEY_verify(ctx, out, outLen, in, inLen); ret != 1 {
-+			return newOpenSSLError("EVP_PKEY_verify failed")
-+		}
-+		return nil
++	verify := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen int, in *byte, inLen int) error {
++		_, err := ossl.EVP_PKEY_verify(ctx, out, outLen, in, inLen)
++		return err
 +	}
 +	return verifyEVP(withKey, padding, nil, nil, saltLen, h, verifyInit, verify, sig, hashed)
 +}
@@ -3017,28 +3102,31 @@ index 00000000000000..8b5b367f9f8092
 +		return nil, errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
 +	var out []byte
-+	var outLen C.size_t
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_MD_CTX_new failed")
++	var outLen int
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_EVP_MD_CTX_free(ctx)
-+	if withKey(func(key C.GO_EVP_PKEY_PTR) C.int {
-+		return C.go_openssl_EVP_DigestSignInit(ctx, nil, alg.md, nil, key)
-+	}) != 1 {
-+		return nil, newOpenSSLError("EVP_DigestSignInit failed")
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
++		_, err := ossl.EVP_DigestSignInit(ctx, nil, alg.md, nil, key)
++		return err
++	}); err != nil {
++		return nil, err
 +	}
-+	if C.go_openssl_EVP_DigestUpdate(ctx, unsafe.Pointer(base(msg)), C.size_t(len(msg))) != 1 {
-+		return nil, newOpenSSLError("EVP_DigestUpdate failed")
++	if len(msg) > 0 {
++		if _, err := ossl.EVP_DigestUpdate(ctx, pbase(msg), len(msg)); err != nil {
++			return nil, err
++		}
 +	}
 +	// Obtain the signature length
-+	if C.go_openssl_EVP_DigestSignFinal(ctx, nil, &outLen) != 1 {
-+		return nil, newOpenSSLError("EVP_DigestSignFinal failed")
++	if _, err := ossl.EVP_DigestSignFinal(ctx, nil, &outLen); err != nil {
++		return nil, err
 +	}
 +	out = make([]byte, outLen)
 +	// Obtain the signature
-+	if C.go_openssl_EVP_DigestSignFinal(ctx, base(out), &outLen) != 1 {
-+		return nil, newOpenSSLError("EVP_DigestSignFinal failed")
++	if _, err := ossl.EVP_DigestSignFinal(ctx, base(out), &outLen); err != nil {
++		return nil, err
 +	}
 +	return out[:outLen], nil
 +}
@@ -3048,33 +3136,36 @@ index 00000000000000..8b5b367f9f8092
 +	if alg == nil {
 +		return errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
-+	ctx := C.go_openssl_EVP_MD_CTX_new()
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_MD_CTX_new failed")
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
 +	}
-+	defer C.go_openssl_EVP_MD_CTX_free(ctx)
-+	if withKey(func(key C.GO_EVP_PKEY_PTR) C.int {
-+		return C.go_openssl_EVP_DigestVerifyInit(ctx, nil, alg.md, nil, key)
-+	}) != 1 {
-+		return newOpenSSLError("EVP_DigestVerifyInit failed")
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
++		_, err := ossl.EVP_DigestVerifyInit(ctx, nil, alg.md, nil, key)
++		return err
++	}); err != nil {
++		return err
 +	}
-+	if C.go_openssl_EVP_DigestUpdate(ctx, unsafe.Pointer(base(msg)), C.size_t(len(msg))) != 1 {
-+		return newOpenSSLError("EVP_DigestUpdate failed")
++	if len(msg) > 0 {
++		if _, err := ossl.EVP_DigestUpdate(ctx, pbase(msg), len(msg)); err != nil {
++			return err
++		}
 +	}
-+	if C.go_openssl_EVP_DigestVerifyFinal(ctx, base(sig), C.size_t(len(sig))) != 1 {
-+		return newOpenSSLError("EVP_DigestVerifyFinal failed")
++	if _, err := ossl.EVP_DigestVerifyFinal(ctx, base(sig), len(sig)); err != nil {
++		return err
 +	}
 +	return nil
 +}
 +
-+func newEVPPKEY(key C.GO_EC_KEY_PTR) (C.GO_EVP_PKEY_PTR, error) {
-+	pkey := C.go_openssl_EVP_PKEY_new()
-+	if pkey == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_new failed")
++func newEVPPKEY(key ossl.EC_KEY_PTR) (ossl.EVP_PKEY_PTR, error) {
++	pkey, err := ossl.EVP_PKEY_new()
++	if err != nil {
++		return nil, err
 +	}
-+	if C.go_openssl_EVP_PKEY_assign(pkey, C.GO_EVP_PKEY_EC, unsafe.Pointer(key)) != 1 {
-+		C.go_openssl_EVP_PKEY_free(pkey)
-+		return nil, newOpenSSLError("EVP_PKEY_assign failed")
++	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_EC, unsafe.Pointer(key)); err != nil {
++		ossl.EVP_PKEY_free(pkey)
++		return nil, err
 +	}
 +	return pkey, nil
 +}
@@ -3082,595 +3173,66 @@ index 00000000000000..8b5b367f9f8092
 +// getECKey returns the EC_KEY from pkey.
 +// If pkey does not contain an EC_KEY it panics.
 +// The returned key should not be freed.
-+func getECKey(pkey C.GO_EVP_PKEY_PTR) (key C.GO_EC_KEY_PTR) {
-+	if vMajor == 1 && vMinor == 0 {
-+		if key0 := C.go_openssl_EVP_PKEY_get0(pkey); key0 != nil {
-+			key = C.GO_EC_KEY_PTR(key0)
-+		}
-+	} else {
-+		key = C.go_openssl_EVP_PKEY_get0_EC_KEY(pkey)
-+	}
-+	if key == nil {
-+		panic("pkey does not contain an EC_KEY")
++func getECKey(pkey ossl.EVP_PKEY_PTR) ossl.EC_KEY_PTR {
++	key, err := ossl.EVP_PKEY_get0_EC_KEY(pkey)
++	if err != nil {
++		panic(err)
 +	}
 +	return key
 +}
 +
-+func newEvpFromParams(id C.int, selection C.int, params C.GO_OSSL_PARAM_PTR) (C.GO_EVP_PKEY_PTR, error) {
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(id, nil)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new_id")
++func newEvpFromParams(id int32, selection int32, params ossl.OSSL_PARAM_PTR) (ossl.EVP_PKEY_PTR, error) {
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
++	if err != nil {
++		return nil, err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	if C.go_openssl_EVP_PKEY_fromdata_init(ctx) != 1 {
-+		return nil, newOpenSSLError("EVP_PKEY_fromdata_init")
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_fromdata_init(ctx); err != nil {
++		return nil, err
 +	}
-+	var pkey C.GO_EVP_PKEY_PTR
-+	if C.go_openssl_EVP_PKEY_fromdata(ctx, &pkey, selection, params) != 1 {
++	var pkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_fromdata(ctx, &pkey, selection, params); err != nil {
 +		if vMajor == 3 && vMinor <= 2 {
 +			// OpenSSL 3.0.1 and 3.0.2 have a bug where EVP_PKEY_fromdata
 +			// does not free the internally allocated EVP_PKEY on error.
 +			// See https://github.com/openssl/openssl/issues/17407.
-+			C.go_openssl_EVP_PKEY_free(pkey)
++			ossl.EVP_PKEY_free(pkey)
 +		}
-+		return nil, newOpenSSLError("EVP_PKEY_fromdata")
++		return nil, err
 +	}
 +	return pkey, nil
 +}
 +
-+func checkPkey(pkey C.GO_EVP_PKEY_PTR, isPrivate bool) error {
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new(pkey, nil)
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_PKEY_CTX_new")
++func checkPkey(pkey ossl.EVP_PKEY_PTR, isPrivate bool) error {
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return err
 +	}
-+	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
++	defer ossl.EVP_PKEY_CTX_free(ctx)
 +	if isPrivate {
-+		if C.go_openssl_EVP_PKEY_private_check(ctx) != 1 {
++		if _, err := ossl.EVP_PKEY_private_check(ctx); err != nil {
 +			// Match upstream error message.
 +			return errors.New("invalid private key")
 +		}
 +	} else {
 +		// Upstream Go does a partial check here, so do we.
-+		if C.go_openssl_EVP_PKEY_public_check_quick(ctx) != 1 {
++		if _, err := ossl.EVP_PKEY_public_check_quick(ctx); err != nil {
 +			// Match upstream error message.
 +			return errors.New("invalid public key")
 +		}
 +	}
 +	return nil
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
-new file mode 100644
-index 00000000000000..626f184badc53d
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.c
-@@ -0,0 +1,248 @@
-+//go:build unix || windows
-+
-+#include "goopenssl.h"
-+
-+#ifdef _WIN32
-+# include <windows.h>
-+# define dlsym (void*)GetProcAddress
-+#else
-+# include <dlfcn.h> // dlsym
-+#endif
-+#include <stdio.h> // fprintf
-+
-+// Approach taken from .Net System.Security.Cryptography.Native
-+// https://github.com/dotnet/runtime/blob/f64246ce08fb7a58221b2b7c8e68f69c02522b0d/src/libraries/Native/Unix/System.Security.Cryptography.Native/opensslshim.c
-+
-+#define DEFINEFUNC(ret, func, args, argscall)                  ret (*_g_##func)args;
-+#define DEFINEFUNC_LEGACY_1_1(ret, func, args, argscall)       DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_LEGACY_1_0(ret, func, args, argscall)       DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_LEGACY_1(ret, func, args, argscall)         DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_1_1(ret, func, args, argscall)              DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_1_1_1(ret, func, args, argscall)            DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_3_0(ret, func, args, argscall)              DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_RENAMED_1_1(ret, func, oldfunc, args, argscall) DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_RENAMED_3_0(ret, func, oldfunc, args, argscall) DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)  DEFINEFUNC(ret, newname, args, argscall)
-+
-+FOR_ALL_OPENSSL_FUNCTIONS
-+
-+#undef DEFINEFUNC
-+#undef DEFINEFUNC_LEGACY_1_1
-+#undef DEFINEFUNC_LEGACY_1_0
-+#undef DEFINEFUNC_LEGACY_1
-+#undef DEFINEFUNC_1_1
-+#undef DEFINEFUNC_1_1_1
-+#undef DEFINEFUNC_3_0
-+#undef DEFINEFUNC_RENAMED_1_1
-+#undef DEFINEFUNC_RENAMED_3_0
-+#undef DEFINEFUNC_VARIADIC_3_0
-+
-+// go_openssl_fips_enabled returns 1 if FIPS mode is enabled, 0 otherwise.
-+// As a special case, it returns -1 if it cannot determine if FIPS mode is enabled.
-+// See openssl.FIPS for details about its implementation.
-+//
-+// This function is reimplemented here because openssl.FIPS assumes that
-+// all the OpenSSL bindings are loaded, that is, go_openssl_load_functions has
-+// already been called. On the other hand, go_openssl_fips_enabled is called from
-+// openssl.CheckVersion, which is used to check if a given OpenSSL shared library
-+// exists and is FIPS compliant. That shared library might not be the one that
-+// was passed to go_openssl_load_functions, or it might not even have been called at all.
-+//
-+// It is written in C because it is not possible to directly call C function pointers
-+// retrieved using dlsym from Go.
-+int
-+go_openssl_fips_enabled(void* handle)
-+{
-+    // For OpenSSL 1.x.
-+    int (*FIPS_mode)(void);
-+    FIPS_mode = (int (*)(void))dlsym(handle, "FIPS_mode");
-+    if (FIPS_mode != NULL)
-+        return FIPS_mode();
-+
-+    // For OpenSSL 3.x.
-+    int (*EVP_default_properties_is_fips_enabled)(void*) = (int (*)(void*))dlsym(handle, "EVP_default_properties_is_fips_enabled");
-+    void *(*EVP_MD_fetch)(void*, const char*, const char*) = (void* (*)(void*, const char*, const char*))dlsym(handle, "EVP_MD_fetch");
-+    void (*EVP_MD_free)(void*) = (void (*)(void*))dlsym(handle, "EVP_MD_free");
-+
-+    if (EVP_default_properties_is_fips_enabled == NULL || EVP_MD_fetch == NULL || EVP_MD_free == NULL) {
-+        // Shouldn't happen, but if it does, we can't determine if FIPS mode is enabled.
-+        return -1;
-+    }
-+
-+    if (EVP_default_properties_is_fips_enabled(NULL) != 1)
-+        return 0;
-+
-+    void *md = EVP_MD_fetch(NULL, "SHA2-256", NULL);
-+    if (md == NULL)
-+        return 0;
-+
-+    EVP_MD_free(md);
-+    return 1;
-+}
-+
-+// Load all the functions stored in FOR_ALL_OPENSSL_FUNCTIONS
-+// and assign them to their corresponding function pointer
-+// defined in goopenssl.h.
-+void
-+go_openssl_load_functions(void* handle, unsigned int major, unsigned int minor, unsigned int patch)
-+{
-+#define DEFINEFUNC_INTERNAL(name, func)                                                                         \
-+    _g_##name = dlsym(handle, func);                                                                            \
-+    if (_g_##name == NULL) {                                                                                    \
-+        fprintf(stderr, "Cannot get required symbol " #func " from libcrypto version %u.%u\n", major, minor);   \
-+        abort();                                                                                                \
-+    }
-+#define DEFINEFUNC(ret, func, args, argscall) \
-+    DEFINEFUNC_INTERNAL(func, #func)
-+#define DEFINEFUNC_LEGACY_1_1(ret, func, args, argscall)  \
-+    if (major == 1 && minor == 1)                         \
-+    {                                                     \
-+        DEFINEFUNC_INTERNAL(func, #func)                  \
-+    }
-+#define DEFINEFUNC_LEGACY_1_0(ret, func, args, argscall)  \
-+    if (major == 1 && minor == 0)                         \
-+    {                                                     \
-+        DEFINEFUNC_INTERNAL(func, #func)                  \
-+    }
-+#define DEFINEFUNC_LEGACY_1(ret, func, args, argscall)  \
-+    if (major == 1)                                     \
-+    {                                                   \
-+        DEFINEFUNC_INTERNAL(func, #func)                \
-+    }
-+#define DEFINEFUNC_1_1(ret, func, args, argscall)     \
-+    if (major == 3 || (major == 1 && minor == 1))     \
-+    {                                                 \
-+        DEFINEFUNC_INTERNAL(func, #func)              \
-+    }
-+#define DEFINEFUNC_1_1_1(ret, func, args, argscall)     \
-+    if (major == 3 || (major == 1 && minor == 1 && patch == 1))     \
-+    {                                                 \
-+        DEFINEFUNC_INTERNAL(func, #func)              \
-+    }
-+#define DEFINEFUNC_3_0(ret, func, args, argscall)     \
-+    if (major == 3)                                   \
-+    {                                                 \
-+        DEFINEFUNC_INTERNAL(func, #func)              \
-+    }
-+#define DEFINEFUNC_RENAMED_1_1(ret, func, oldfunc, args, argscall)  \
-+    if (major == 1 && minor == 0)                                   \
-+    {                                                               \
-+        DEFINEFUNC_INTERNAL(func, #oldfunc)                         \
-+    }                                                               \
-+    else                                                            \
-+    {                                                               \
-+        DEFINEFUNC_INTERNAL(func, #func)                            \
-+    }
-+#define DEFINEFUNC_RENAMED_3_0(ret, func, oldfunc, args, argscall)  \
-+    if (major == 1)                                                 \
-+    {                                                               \
-+        DEFINEFUNC_INTERNAL(func, #oldfunc)                         \
-+    }                                                               \
-+    else                                                            \
-+    {                                                               \
-+        DEFINEFUNC_INTERNAL(func, #func)                            \
-+    }
-+#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)   \
-+    if (major == 3)                                                 \
-+    {                                                               \
-+        DEFINEFUNC_INTERNAL(newname, #func)                         \
-+    }
-+
-+FOR_ALL_OPENSSL_FUNCTIONS
-+
-+#undef DEFINEFUNC
-+#undef DEFINEFUNC_LEGACY_1_1
-+#undef DEFINEFUNC_LEGACY_1_0
-+#undef DEFINEFUNC_LEGACY_1
-+#undef DEFINEFUNC_1_1
-+#undef DEFINEFUNC_1_1_1
-+#undef DEFINEFUNC_3_0
-+#undef DEFINEFUNC_RENAMED_1_1
-+#undef DEFINEFUNC_RENAMED_3_0
-+#undef DEFINEFUNC_VARIADIC_3_0
-+}
-+
-+static unsigned long
-+version_num(void* handle)
-+{
-+    unsigned long (*fn)(void);
-+    // OPENSSL_version_num is defined in OpenSSL 1.1.0 and 1.1.1.
-+    fn = (unsigned long (*)(void))dlsym(handle, "OpenSSL_version_num");
-+    if (fn != NULL)
-+        return fn();
-+
-+    // SSLeay is defined in OpenSSL 1.0.2.
-+    fn = (unsigned long (*)(void))dlsym(handle, "SSLeay");
-+    if (fn != NULL)
-+        return fn();
-+
-+    return 0;
-+} 
-+
-+int
-+go_openssl_version_major(void* handle)
-+{
-+    unsigned int (*fn)(void);
-+    // OPENSSL_version_major is supported since OpenSSL 3.
-+    fn = (unsigned int (*)(void))dlsym(handle, "OPENSSL_version_major");
-+    if (fn != NULL)
-+        return (int)fn();
-+
-+    // If OPENSSL_version_major is not defined, try with OpenSSL 1 functions.
-+    unsigned long num = version_num(handle);
-+    if (num < 0x10000000L || num >= 0x20000000L)
-+        return -1;
-+
-+    return 1;
-+}
-+
-+int
-+go_openssl_version_minor(void* handle)
-+{
-+    unsigned int (*fn)(void);
-+    // OPENSSL_version_minor is supported since OpenSSL 3.
-+    fn = (unsigned int (*)(void))dlsym(handle, "OPENSSL_version_minor");
-+    if (fn != NULL)
-+        return (int)fn();
-+
-+    // If OPENSSL_version_minor is not defined, try with OpenSSL 1 functions.
-+    unsigned long num = version_num(handle);
-+    // OpenSSL version number follows this schema:
-+    // MNNFFPPS: major minor fix patch status.
-+    if (num < 0x10000000L || num >= 0x10200000L)
-+    {
-+        // We only support minor version 0 and 1,
-+        // so there is no need to implement an algorithm
-+        // that decodes the version number into individual components.
-+        return -1;
-+    }
-+
-+    if (num >= 0x10100000L)
-+        return 1;
-+    
-+    return 0;
-+}
-+
-+int
-+go_openssl_version_patch(void* handle)
-+{
-+    unsigned int (*fn)(void);
-+    // OPENSSL_version_patch is supported since OpenSSL 3.
-+    fn = (unsigned int (*)(void))dlsym(handle, "OPENSSL_version_patch");
-+    if (fn != NULL)
-+        return (int)fn();
-+
-+    // If OPENSSL_version_patch is not defined, try with OpenSSL 1 functions.
-+    unsigned long num = version_num(handle);
-+    // OpenSSL version number follows this schema:
-+    // MNNFFPPS: major minor fix patch status.
-+    if (num < 0x10000000L || num >= 0x10200000L)
-+    {
-+        // We only support minor version 0 and 1,
-+        // so there is no need to implement an algorithm
-+        // that decodes the version number into individual components.
-+        return -1;
-+    }
-+
-+    return (num >> 12) & 0xff;
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
-new file mode 100644
-index 00000000000000..f5cdced630679f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/goopenssl.h
-@@ -0,0 +1,261 @@
-+// This header file describes the OpenSSL ABI as built for use in Go.
-+
-+#include <stdlib.h> // size_t
-+
-+#include "shims.h"
-+
-+// Suppress warnings about unused parameters.
-+#define UNUSED(x) (void)(x)
-+
-+static inline void
-+go_openssl_do_leak_check(void)
-+{
-+#ifndef __has_feature
-+#define __has_feature(x) 0
-+#endif
-+
-+#if (defined(__SANITIZE_ADDRESS__) && __SANITIZE_ADDRESS__) ||	\
-+    __has_feature(address_sanitizer)
-+    extern void __lsan_do_leak_check(void);
-+    __lsan_do_leak_check();
-+#endif
-+}
-+
-+int go_openssl_fips_enabled(void* handle);
-+int go_openssl_version_major(void* handle);
-+int go_openssl_version_minor(void* handle);
-+int go_openssl_version_patch(void* handle);
-+int go_openssl_thread_setup(void);
-+void go_openssl_load_functions(void* handle, unsigned int major, unsigned int minor, unsigned int patch);
-+void go_openssl_DSA_get0_pqg_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *p, GO_BIGNUM_PTR *q, GO_BIGNUM_PTR *g);
-+int go_openssl_DSA_set0_pqg_backport(GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g);
-+void go_openssl_DSA_get0_key_backport(const GO_DSA_PTR d, GO_BIGNUM_PTR *pub_key, GO_BIGNUM_PTR *priv_key);
-+int go_openssl_DSA_set0_key_backport(GO_DSA_PTR d, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key);
-+
-+// Define pointers to all the used OpenSSL functions.
-+// Calling C function pointers from Go is currently not supported.
-+// It is possible to circumvent this by using a C function wrapper.
-+// https://pkg.go.dev/cmd/cgo
-+#define DEFINEFUNC(ret, func, args, argscall)      \
-+    extern ret (*_g_##func)args;                   \
-+    static inline ret go_openssl_##func args       \
-+    {                                              \
-+        return _g_##func argscall;                 \
-+    }
-+#define DEFINEFUNC_LEGACY_1_1(ret, func, args, argscall)    \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_LEGACY_1_0(ret, func, args, argscall)    \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_LEGACY_1(ret, func, args, argscall)  \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_1_1(ret, func, args, argscall)   \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_1_1_1(ret, func, args, argscall)     \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_3_0(ret, func, args, argscall)     \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_RENAMED_1_1(ret, func, oldfunc, args, argscall)     \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_RENAMED_3_0(ret, func, oldfunc, args, argscall)     \
-+    DEFINEFUNC(ret, func, args, argscall)
-+#define DEFINEFUNC_VARIADIC_3_0(ret, func, newname, args, argscall)     \
-+    DEFINEFUNC(ret, newname, args, argscall)
-+
-+FOR_ALL_OPENSSL_FUNCTIONS
-+
-+#undef DEFINEFUNC
-+#undef DEFINEFUNC_LEGACY_1_1
-+#undef DEFINEFUNC_LEGACY_1_0
-+#undef DEFINEFUNC_LEGACY_1
-+#undef DEFINEFUNC_1_1
-+#undef DEFINEFUNC_1_1_1
-+#undef DEFINEFUNC_3_0
-+#undef DEFINEFUNC_RENAMED_1_1
-+#undef DEFINEFUNC_RENAMED_3_0
-+#undef DEFINEFUNC_VARIADIC_3_0
-+
-+// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal using ctx2.
-+// This is necessary because Go hash.Hash mandates that Sum has no effect
-+// on the underlying stream. In particular it is OK to Sum, then Write more,
-+// then Sum again, and the second Sum acts as if the first didn't happen.
-+// It is written in C because Sum() tend to be in the hot path,
-+// and doing one cgo call instead of two is a significant performance win.
-+static inline int
-+go_hash_sum(GO_EVP_MD_CTX_PTR ctx, GO_EVP_MD_CTX_PTR ctx2, unsigned char *out)
-+{
-+    if (go_openssl_EVP_MD_CTX_copy(ctx2, ctx) != 1)
-+        return 0;
-+    // TODO: use EVP_DigestFinal_ex once we know why it leaks
-+    // memory on OpenSSL 1.0.2.
-+    return go_openssl_EVP_DigestFinal(ctx2, out, NULL);
-+}
-+
-+// These wrappers allocate out_len on the C stack to avoid having to pass a pointer from Go, which would escape to the heap.
-+// Use them only in situations where the output length can be safely discarded.
-+static inline int
-+go_openssl_EVP_EncryptUpdate_wrapper(GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, const unsigned char *in, int in_len)
-+{
-+    int len;
-+    return go_openssl_EVP_EncryptUpdate(ctx, out, &len, in, in_len);
-+}
-+
-+static inline int
-+go_openssl_EVP_DecryptUpdate_wrapper(GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, const unsigned char *in, int in_len)
-+{
-+    int len;
-+    return go_openssl_EVP_DecryptUpdate(ctx, out, &len, in, in_len);
-+}
-+
-+static inline int
-+go_openssl_EVP_CipherUpdate_wrapper(GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, const unsigned char *in, int in_len)
-+{
-+    int len;
-+    return go_openssl_EVP_CipherUpdate(ctx, out, &len, in, in_len);
-+}
-+
-+// These wrappers also allocate length variables on the C stack to avoid escape to the heap, but do return the result.
-+// A struct is returned that contains multiple return values instead of OpenSSL's approach of using pointers.
-+
-+typedef struct
-+{
-+    int result;
-+    size_t keylen;
-+} go_openssl_EVP_PKEY_derive_wrapper_out;
-+
-+static inline go_openssl_EVP_PKEY_derive_wrapper_out
-+go_openssl_EVP_PKEY_derive_wrapper(GO_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t keylen)
-+{
-+    go_openssl_EVP_PKEY_derive_wrapper_out r = {0, keylen};
-+    r.result = go_openssl_EVP_PKEY_derive(ctx, key, &r.keylen);
-+    return r;
-+}
-+
-+typedef struct
-+{
-+    int result;
-+    size_t len;
-+} go_openssl_EVP_PKEY_get_raw_key_out;
-+
-+static inline go_openssl_EVP_PKEY_get_raw_key_out
-+go_openssl_EVP_PKEY_get_raw_public_key_wrapper(const GO_EVP_PKEY_PTR pkey, unsigned char *pub, size_t len)
-+{
-+    go_openssl_EVP_PKEY_get_raw_key_out r = {0, len};
-+    r.result = go_openssl_EVP_PKEY_get_raw_public_key(pkey, pub, &r.len);
-+    return r;
-+}
-+
-+static inline go_openssl_EVP_PKEY_get_raw_key_out
-+go_openssl_EVP_PKEY_get_raw_private_key_wrapper(const GO_EVP_PKEY_PTR pkey, unsigned char *priv, size_t len)
-+{
-+    go_openssl_EVP_PKEY_get_raw_key_out r = {0, len};
-+    r.result = go_openssl_EVP_PKEY_get_raw_private_key(pkey, priv, &r.len);
-+    return r;
-+}
-+
-+typedef struct
-+{
-+    int result;
-+    size_t siglen;
-+} go_openssl_EVP_DigestSign_wrapper_out;
-+
-+static inline go_openssl_EVP_DigestSign_wrapper_out
-+go_openssl_EVP_DigestSign_wrapper(GO_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen)
-+{
-+    go_openssl_EVP_DigestSign_wrapper_out r = {0, siglen};
-+    r.result = go_openssl_EVP_DigestSign(ctx, sigret, &r.siglen, tbs, tbslen);
-+    return r;
-+}
-+
-+// These wrappers allocate out_len on the C stack, and check that it matches the expected
-+// value, to avoid having to pass a pointer from Go, which would escape to the heap.
-+
-+static inline int
-+go_openssl_EVP_CIPHER_CTX_seal_wrapper(const GO_EVP_CIPHER_CTX_PTR ctx,
-+                                       unsigned char *out,
-+                                       const unsigned char *nonce,
-+                                       const unsigned char *in, int in_len,
-+                                       const unsigned char *aad, int aad_len)
-+{
-+    if (in_len == 0) in = (const unsigned char *)"";
-+    if (aad_len == 0) aad = (const unsigned char *)"";
-+
-+    if (go_openssl_EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, nonce) != 1)
-+        return 0;
-+
-+    int discard_len, out_len;
-+    if (go_openssl_EVP_EncryptUpdate(ctx, NULL, &discard_len, aad, aad_len) != 1
-+        || go_openssl_EVP_EncryptUpdate(ctx, out, &out_len, in, in_len) != 1
-+        || go_openssl_EVP_EncryptFinal_ex(ctx, out + out_len, &discard_len) != 1)
-+    {
-+        return 0;
-+    }
-+
-+    if (in_len != out_len)
-+        return 0;
-+
-+    return go_openssl_EVP_CIPHER_CTX_ctrl(ctx, GO_EVP_CTRL_GCM_GET_TAG, 16, out + out_len);
-+}
-+
-+static inline int
-+go_openssl_EVP_CIPHER_CTX_open_wrapper(const GO_EVP_CIPHER_CTX_PTR ctx,
-+                                       unsigned char *out,
-+                                       const unsigned char *nonce,
-+                                       const unsigned char *in, int in_len,
-+                                       const unsigned char *aad, int aad_len,
-+                                       const unsigned char *tag)
-+{
-+    if (in_len == 0) {
-+        in = (const unsigned char *)"";
-+        // OpenSSL 1.0.2 in FIPS mode contains a bug: it will fail to verify
-+        // unless EVP_DecryptUpdate is called at least once with a non-NULL
-+        // output buffer.  OpenSSL will not dereference the output buffer when
-+        // the input length is zero, so set it to an arbitrary non-NULL pointer
-+        // to satisfy OpenSSL when the caller only has authenticated additional
-+        // data (AAD) to verify. While a stack-allocated buffer could be used,
-+        // that would risk a stack-corrupting buffer overflow if OpenSSL
-+        // unexpectedly dereferenced it. Instead pass a value which would
-+        // segfault if dereferenced on any modern platform where a NULL-pointer
-+        // dereference would also segfault.
-+        if (out == NULL) out = (unsigned char *)1;
-+    }
-+    if (aad_len == 0) aad = (const unsigned char *)"";
-+
-+    if (go_openssl_EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, nonce) != 1)
-+        return 0;
-+
-+    // OpenSSL 1.0.x FIPS Object Module 2.0 versions below 2.0.5 require that
-+    // the tag be set before the ciphertext, otherwise EVP_DecryptUpdate returns
-+    // an error. At least one extant commercially-supported, FIPS validated
-+    // build of OpenSSL 1.0.2 uses FIPS module version 2.0.1. Set the tag first
-+    // to maximize compatibility with all OpenSSL version combinations.
-+    if (go_openssl_EVP_CIPHER_CTX_ctrl(ctx, GO_EVP_CTRL_GCM_SET_TAG, 16, (unsigned char *)(tag)) != 1)
-+        return 0;
-+
-+    int discard_len, out_len;
-+    if (go_openssl_EVP_DecryptUpdate(ctx, NULL, &discard_len, aad, aad_len) != 1
-+        || go_openssl_EVP_DecryptUpdate(ctx, out, &out_len, in, in_len) != 1)
-+    {
-+        return 0;
-+    }
-+
-+    if (go_openssl_EVP_DecryptFinal_ex(ctx, out + out_len, &discard_len) != 1)
-+        return 0;
-+
-+    if (out_len != in_len)
-+        return 0;
-+
-+    return 1;
-+}
-+
-+// Hand-roll custom wrappers for CRYPTO_malloc and CRYPTO_free which cast the
-+// function pointers to the correct signatures for OpenSSL 1.0.2.
-+
-+static inline void *
-+go_openssl_CRYPTO_malloc_legacy102(int num, const char *file, int line) {
-+    return ((void *(*)(int, const char *, int))_g_CRYPTO_malloc)(num, file, line);
-+}
-+
-+static inline void
-+go_openssl_CRYPTO_free_legacy102(void *str) {
-+    ((void (*)(void *))_g_CRYPTO_free)(str);
-+}
-\ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..b2109857b49bdf
+index 00000000000000..d084fdf776696f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,714 @@
+@@ -0,0 +1,715 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"crypto"
@@ -3680,24 +3242,16 @@ index 00000000000000..b2109857b49bdf
 +	"strconv"
 +	"sync"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
 +const maxHashSize = 64
 +
-+// NOTE: Implementation ported from https://go-review.googlesource.com/c/go/+/404295.
-+// The cgo calls in this file are arranged to avoid marking the parameters as escaping.
-+// To do that, we call noescape (including via addr).
-+// We must also make sure that the data pointer arguments have the form unsafe.Pointer(&...)
-+// so that cgo does not annotate them with cgoCheckPointer calls. If it did that, it might look
-+// beyond the byte slice and find Go pointers in unprocessed parts of a larger allocation.
-+// To do both of these simultaneously, the idiom is unsafe.Pointer(&*addr(p)),
-+// where addr returns the base pointer of p, substituting a non-nil pointer for nil,
-+// and applying a noescape along the way.
-+// This is all to preserve compatibility with the allocation behavior of the non-openssl implementations.
-+
 +func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
-+	return C.go_openssl_EVP_Digest(unsafe.Pointer(&*addr(p)), C.size_t(len(p)), (*C.uchar)(unsafe.Pointer(&*addr(sum))), nil, loadHash(ch).md, nil) != 0
++	_, err := ossl.EVP_Digest(pbaseNeverEmpty(p), len(p), base(sum), nil, loadHash(ch).md, nil)
++	return err == nil
 +}
 +
 +func MD4(p []byte) (sum [16]byte) {
@@ -3780,9 +3334,10 @@ index 00000000000000..b2109857b49bdf
 +	// in a EVP_MD_CTX, e.g. MD5 in FIPS mode. We need to prove
 +	// if they can be used by passing them to a EVP_MD_CTX.
 +	var supported bool
-+	if ctx := C.go_openssl_EVP_MD_CTX_new(); ctx != nil {
-+		supported = C.go_openssl_EVP_DigestInit_ex(ctx, alg.md, nil) == 1
-+		C.go_openssl_EVP_MD_CTX_free(ctx)
++	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
++		_, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil)
++		supported = err == nil
++		ossl.EVP_MD_CTX_free(ctx)
 +	}
 +	cacheHashSupported.Store(h, supported)
 +	return supported
@@ -3885,19 +3440,19 @@ index 00000000000000..b2109857b49bdf
 +
 +// isHashMarshallable returns true if the memory layout of md
 +// is known by this library and can therefore be marshalled.
-+func isHashMarshallable(md C.GO_EVP_MD_PTR) bool {
++func isHashMarshallable(md ossl.EVP_MD_PTR) bool {
 +	if vMajor == 1 {
 +		return true
 +	}
-+	prov := C.go_openssl_EVP_MD_get0_provider(md)
++	prov := ossl.EVP_MD_get0_provider(md)
 +	if prov == nil {
 +		return false
 +	}
-+	cname := C.go_openssl_OSSL_PROVIDER_get0_name(prov)
++	cname := ossl.OSSL_PROVIDER_get0_name(prov)
 +	if cname == nil {
 +		return false
 +	}
-+	name := C.GoString(cname)
++	name := C.GoString((*C.char)(unsafe.Pointer(cname)))
 +	// We only know the memory layout of the built-in providers.
 +	// See evpHash.hashState for more details.
 +	marshallable := name == "default" || name == "fips"
@@ -3920,11 +3475,11 @@ index 00000000000000..b2109857b49bdf
 +// evpHash implements generic hash methods.
 +type evpHash struct {
 +	alg *hashAlgorithm
-+	ctx C.GO_EVP_MD_CTX_PTR
++	ctx ossl.EVP_MD_CTX_PTR
 +	// ctx2 is used in evpHash.sum to avoid changing
 +	// the state of ctx. Having it here allows reusing the
 +	// same allocated object multiple times.
-+	ctx2 C.GO_EVP_MD_CTX_PTR
++	ctx2 ossl.EVP_MD_CTX_PTR
 +}
 +
 +func newEvpHash(ch crypto.Hash) *evpHash {
@@ -3943,10 +3498,10 @@ index 00000000000000..b2109857b49bdf
 +
 +func (h *evpHash) finalize() {
 +	if h.ctx != nil {
-+		C.go_openssl_EVP_MD_CTX_free(h.ctx)
++		ossl.EVP_MD_CTX_free(h.ctx)
 +	}
 +	if h.ctx2 != nil {
-+		C.go_openssl_EVP_MD_CTX_free(h.ctx2)
++		ossl.EVP_MD_CTX_free(h.ctx2)
 +	}
 +}
 +
@@ -3954,12 +3509,20 @@ index 00000000000000..b2109857b49bdf
 +	if h.ctx != nil {
 +		return
 +	}
-+	h.ctx = C.go_openssl_EVP_MD_CTX_new()
-+	if C.go_openssl_EVP_DigestInit_ex(h.ctx, h.alg.md, nil) != 1 {
-+		C.go_openssl_EVP_MD_CTX_free(h.ctx)
-+		panic(newOpenSSLError("EVP_DigestInit_ex"))
++	var err error
++	h.ctx, err = ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestInit_ex(h.ctx, h.alg.md, nil); err != nil {
++		ossl.EVP_MD_CTX_free(h.ctx)
++		panic(err)
++	}
++	h.ctx2, err = ossl.EVP_MD_CTX_new()
++	if err != nil {
++		ossl.EVP_MD_CTX_free(h.ctx)
++		panic(err)
 +	}
-+	h.ctx2 = C.go_openssl_EVP_MD_CTX_new()
 +	runtime.SetFinalizer(h, (*evpHash).finalize)
 +}
 +
@@ -3970,8 +3533,8 @@ index 00000000000000..b2109857b49bdf
 +	}
 +	// There is no need to reset h.ctx2 because it is always reset after
 +	// use in evpHash.sum.
-+	if C.go_openssl_EVP_DigestInit_ex(h.ctx, nil, nil) != 1 {
-+		panic(newOpenSSLError("EVP_DigestInit_ex"))
++	if _, err := ossl.EVP_DigestInit_ex(h.ctx, nil, nil); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(h)
 +}
@@ -3981,8 +3544,8 @@ index 00000000000000..b2109857b49bdf
 +		return 0, nil
 +	}
 +	h.init()
-+	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(&*addr(p)), C.size_t(len(p))) != 1 {
-+		panic(newOpenSSLError("EVP_DigestUpdate"))
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, pbase(p), len(p)); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(h)
 +	return len(p), nil
@@ -3993,8 +3556,8 @@ index 00000000000000..b2109857b49bdf
 +		return 0, nil
 +	}
 +	h.init()
-+	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(unsafe.StringData(s)), C.size_t(len(s))) == 0 {
-+		panic("openssl: EVP_DigestUpdate failed")
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Pointer(unsafe.StringData(s)), len(s)); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(h)
 +	return len(s), nil
@@ -4002,8 +3565,8 @@ index 00000000000000..b2109857b49bdf
 +
 +func (h *evpHash) WriteByte(c byte) error {
 +	h.init()
-+	if C.go_openssl_EVP_DigestUpdate(h.ctx, unsafe.Pointer(&c), 1) == 0 {
-+		panic("openssl: EVP_DigestUpdate failed")
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Pointer(&c), 1); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(h)
 +	return nil
@@ -4020,8 +3583,8 @@ index 00000000000000..b2109857b49bdf
 +func (h *evpHash) Sum(in []byte) []byte {
 +	h.init()
 +	out := make([]byte, h.Size(), maxHashSize) // explicit cap to allow stack allocation
-+	if C.go_hash_sum(h.ctx, h.ctx2, base(out)) != 1 {
-+		panic(newOpenSSLError("go_hash_sum"))
++	if err := ossl.HashSum(h.ctx, h.ctx2, out); err != nil {
++		panic(err)
 +	}
 +	runtime.KeepAlive(h)
 +	return append(in, out...)
@@ -4033,18 +3596,19 @@ index 00000000000000..b2109857b49bdf
 +func (h *evpHash) Clone() hash.Hash {
 +	h2 := &evpHash{alg: h.alg}
 +	if h.ctx != nil {
-+		h2.ctx = C.go_openssl_EVP_MD_CTX_new()
-+		if h2.ctx == nil {
-+			panic(newOpenSSLError("EVP_MD_CTX_new"))
++		var err error
++		h2.ctx, err = ossl.EVP_MD_CTX_new()
++		if err != nil {
++			panic(err)
 +		}
-+		if C.go_openssl_EVP_MD_CTX_copy_ex(h2.ctx, h.ctx) != 1 {
-+			C.go_openssl_EVP_MD_CTX_free(h2.ctx)
-+			panic(newOpenSSLError("EVP_MD_CTX_copy"))
++		if _, err := ossl.EVP_MD_CTX_copy_ex(h2.ctx, h.ctx); err != nil {
++			ossl.EVP_MD_CTX_free(h2.ctx)
++			panic(err)
 +		}
-+		h2.ctx2 = C.go_openssl_EVP_MD_CTX_new()
-+		if h2.ctx2 == nil {
-+			C.go_openssl_EVP_MD_CTX_free(h2.ctx)
-+			panic(newOpenSSLError("EVP_MD_CTX_new"))
++		h2.ctx2, err = ossl.EVP_MD_CTX_new()
++		if err != nil {
++			ossl.EVP_MD_CTX_free(h2.ctx)
++			panic(err)
 +		}
 +		runtime.SetFinalizer(h2, (*evpHash).finalize)
 +	}
@@ -4056,7 +3620,7 @@ index 00000000000000..b2109857b49bdf
 +//
 +// The EVP_MD_CTX memory layout has changed in OpenSSL 3
 +// and the property holding the internal structure is no longer md_data but algctx.
-+func hashState(ctx C.GO_EVP_MD_CTX_PTR) unsafe.Pointer {
++func hashState(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
 +	switch vMajor {
 +	case 1:
 +		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
@@ -4382,15 +3946,14 @@ index 00000000000000..b2109857b49bdf
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..d4f8aa6a92a6fb
+index 00000000000000..a0c5f112e09682
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,322 @@
+@@ -0,0 +1,348 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"errors"
@@ -4399,6 +3962,8 @@ index 00000000000000..d4f8aa6a92a6fb
 +	"runtime"
 +	"sync"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +// SupprtHKDF reports whether the current OpenSSL version supports HKDF.
@@ -4414,53 +3979,51 @@ index 00000000000000..d4f8aa6a92a6fb
 +	}
 +}
 +
-+func newHKDFCtx1(md C.GO_EVP_MD_PTR, mode C.int, secret, salt, pseudorandomKey, info []byte) (ctx C.GO_EVP_PKEY_CTX_PTR, err error) {
++func newHKDFCtx1(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (ctx ossl.EVP_PKEY_CTX_PTR, err error) {
 +	checkMajorVersion(1)
 +
-+	ctx = C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_HKDF, nil)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_PKEY_CTX_new_id")
++	ctx, err = ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_HKDF, nil)
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if err != nil {
-+			C.go_openssl_EVP_PKEY_CTX_free(ctx)
++			ossl.EVP_PKEY_CTX_free(ctx)
 +		}
 +	}()
 +
-+	if C.go_openssl_EVP_PKEY_derive_init(ctx) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_derive_init")
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return ctx, err
 +	}
 +
-+	ctrlSlice := func(ctrl int, data []byte) C.int {
++	ctrlSlice := func(ctrl int32, data []byte) bool {
++		if err != nil {
++			return false
++		}
 +		if len(data) == 0 {
-+			return 1 // No data to set.
++			return true // No data to set.
 +		}
-+		return C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.int(ctrl), C.int(len(data)), unsafe.Pointer(base(data)))
++		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ctrl, int32(len(data)), unsafe.Pointer(base(data)))
++		return err == nil
 +	}
 +
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.GO_EVP_PKEY_CTRL_HKDF_MODE, mode, nil) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_mode")
-+	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1, C.GO1_EVP_PKEY_OP_DERIVE, C.GO_EVP_PKEY_CTRL_HKDF_MD, 0, unsafe.Pointer(md)) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_set_hkdf_md")
-+	}
-+	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_KEY, secret) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
-+	}
-+	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_SALT, salt) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_salt")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MODE, mode, nil); err != nil {
++		return ctx, err
 +	}
-+	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_KEY, pseudorandomKey) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_set1_hkdf_key")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MD, 0, unsafe.Pointer(md)); err != nil {
++		return ctx, err
 +	}
-+	if ctrlSlice(C.GO_EVP_PKEY_CTRL_HKDF_INFO, info) != 1 {
-+		return ctx, newOpenSSLError("EVP_PKEY_CTX_add1_hkdf_info")
++	if ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, secret) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_SALT, salt) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, pseudorandomKey) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_INFO, info) {
++		return ctx, err
 +	}
 +	return ctx, nil
 +}
 +
 +type hkdf1 struct {
-+	ctx C.GO_EVP_PKEY_CTX_PTR
++	ctx ossl.EVP_PKEY_CTX_PTR
 +
 +	hashLen int
 +	buf     []byte
@@ -4468,7 +4031,7 @@ index 00000000000000..d4f8aa6a92a6fb
 +
 +func (c *hkdf1) finalize() {
 +	if c.ctx != nil {
-+		C.go_openssl_EVP_PKEY_CTX_free(c.ctx)
++		ossl.EVP_PKEY_CTX_free(c.ctx)
 +	}
 +}
 +
@@ -4489,14 +4052,22 @@ index 00000000000000..d4f8aa6a92a6fb
 +		return 0, errors.New("hkdf: entropy limit reached")
 +	}
 +	c.buf = append(c.buf, make([]byte, needLen)...)
-+	outLen := C.size_t(prevLen + needLen)
-+	if C.go_openssl_EVP_PKEY_derive_wrapper(c.ctx, base(c.buf), outLen).result != 1 {
-+		return 0, newOpenSSLError("EVP_PKEY_derive")
++	outLen := prevLen + needLen
++	if _, err := ossl.EVP_PKEY_derive(c.ctx, base(c.buf), &outLen); err != nil {
++		return 0, err
 +	}
 +	n := copy(p, c.buf[prevLen:outLen])
 +	return n, nil
 +}
 +
++// hkdfAllZerosSalt is a preallocated buffer of zeros used in ExtractHKDF().
++// The size should be kept as large as the output length of any hash algorithm
++// used with HKDF.
++var hkdfAllZerosSalt [64]byte
++
++// ExtractHDKF implements the HDKF extract step.
++// If salt is nil, then this function replaces it internally with a buffer of
++// zeros whose length equals the output length of the specified hash algorithm.
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
 +	if !SupportsHKDF() {
 +		return nil, errUnsupportedVersion()
@@ -4507,31 +4078,49 @@ index 00000000000000..d4f8aa6a92a6fb
 +		return nil, err
 +	}
 +
++	// If calling code specifies nil salt, replace it with a buffer of hashLen
++	// zeros, as specified in RFC 5896 and as OpenSSL EVP_KDF-HKDF documentation
++	// instructs. Take a slice of a preallocated buffer to avoid allocating new
++	// buffer per call, but fall back to allocating a buffer if preallocated
++	// buffer is not large enough.
++	if salt == nil {
++		hlen := h().Size()
++		if hlen > len(hkdfAllZerosSalt) {
++			salt = make([]byte, hlen)
++		} else {
++			salt = hkdfAllZerosSalt[:hlen]
++		}
++	}
++
 +	switch vMajor {
 +	case 1:
-+		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
 +		if err != nil {
 +			return nil, err
 +		}
-+		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+		r := C.go_openssl_EVP_PKEY_derive_wrapper(ctx, nil, 0)
-+		if r.result != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_derive_init")
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		var keylen int
++		if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
++			return nil, err
 +		}
-+		out := make([]byte, r.keylen)
-+		if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(out), r.keylen).result != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_derive")
++		out := make([]byte, keylen)
++		if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++			return nil, err
 +		}
-+		return out[:r.keylen], nil
++		return out[:keylen], nil
 +	case 3:
-+		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_KDF_CTX_free(ctx)
++		size, err := ossl.EVP_KDF_CTX_get_kdf_size(ctx)
 +		if err != nil {
 +			return nil, err
 +		}
-+		defer C.go_openssl_EVP_KDF_CTX_free(ctx)
-+		out := make([]byte, C.go_openssl_EVP_KDF_CTX_get_kdf_size(ctx))
-+		if C.go_openssl_EVP_KDF_derive(ctx, base(out), C.size_t(len(out)), nil) != 1 {
-+			return nil, newOpenSSLError("EVP_KDF_derive")
++		out := make([]byte, size)
++		if _, err := ossl.EVP_KDF_derive(ctx, base(out), len(out), nil); err != nil {
++			return nil, err
 +		}
 +		return out, nil
 +	default:
@@ -4553,22 +4142,23 @@ index 00000000000000..d4f8aa6a92a6fb
 +	out := make([]byte, keyLength)
 +	switch vMajor {
 +	case 1:
-+		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
 +		}
-+		defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+		if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(out), C.size_t(keyLength)).result != 1 {
-+			return nil, newOpenSSLError("EVP_PKEY_derive")
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		keylen := keyLength
++		if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++			return nil, err
 +		}
 +	case 3:
-+		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
 +		}
-+		defer C.go_openssl_EVP_KDF_CTX_free(ctx)
-+		if C.go_openssl_EVP_KDF_derive(ctx, base(out), C.size_t(keyLength), nil) != 1 {
-+			return nil, newOpenSSLError("EVP_KDF_derive")
++		defer ossl.EVP_KDF_CTX_free(ctx)
++		if _, err := ossl.EVP_KDF_derive(ctx, base(out), keyLength, nil); err != nil {
++			return nil, err
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
@@ -4586,21 +4176,23 @@ index 00000000000000..d4f8aa6a92a6fb
 +		return nil, err
 +	}
 +
++	size := int(ossl.EVP_MD_get_size(md))
++
 +	switch vMajor {
 +	case 1:
-+		ctx, err := newHKDFCtx1(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
 +		}
-+		c := &hkdf1{ctx: ctx, hashLen: int(C.go_openssl_EVP_MD_get_size(md))}
++		c := &hkdf1{ctx: ctx, hashLen: size}
 +		runtime.SetFinalizer(c, (*hkdf1).finalize)
 +		return c, nil
 +	case 3:
-+		ctx, err := newHKDFCtx3(md, C.GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
 +		}
-+		c := &hkdf3{ctx: ctx, hashLen: int(C.go_openssl_EVP_MD_get_size(md))}
++		c := &hkdf3{ctx: ctx, hashLen: size}
 +		runtime.SetFinalizer(c, (*hkdf3).finalize)
 +		return c, nil
 +	default:
@@ -4609,7 +4201,7 @@ index 00000000000000..d4f8aa6a92a6fb
 +}
 +
 +type hkdf3 struct {
-+	ctx C.GO_EVP_KDF_CTX_PTR
++	ctx ossl.EVP_KDF_CTX_PTR
 +
 +	hashLen int
 +	buf     []byte
@@ -4617,40 +4209,38 @@ index 00000000000000..d4f8aa6a92a6fb
 +
 +func (c *hkdf3) finalize() {
 +	if c.ctx != nil {
-+		C.go_openssl_EVP_KDF_CTX_free(c.ctx)
++		ossl.EVP_KDF_CTX_free(c.ctx)
 +	}
 +}
 +
 +// fetchHKDF3 fetches the HKDF algorithm.
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchHKDF3 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
++var fetchHKDF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
 +	checkMajorVersion(3)
 +
-+	name := C.CString("HKDF")
-+	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
-+	C.free(unsafe.Pointer(name))
-+	if kdf == nil {
-+		return nil, newOpenSSLError("EVP_KDF_fetch")
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_HKDF.ptr(), nil)
++	if err != nil {
++		return nil, err
 +	}
 +	return kdf, nil
 +})
 +
 +// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
-+func newHKDFCtx3(md C.GO_EVP_MD_PTR, mode C.int, secret, salt, pseudorandomKey, info []byte) (_ C.GO_EVP_KDF_CTX_PTR, err error) {
++func newHKDFCtx3(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
 +	checkMajorVersion(3)
 +
 +	kdf, err := fetchHKDF3()
 +	if err != nil {
 +		return nil, err
 +	}
-+	ctx := C.go_openssl_EVP_KDF_CTX_new(kdf)
-+	if ctx == nil {
-+		return nil, newOpenSSLError("EVP_KDF_CTX_new")
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return nil, err
 +	}
 +	defer func() {
 +		if err != nil {
-+			C.go_openssl_EVP_KDF_CTX_free(ctx)
++			ossl.EVP_KDF_CTX_free(ctx)
 +		}
 +	}()
 +
@@ -4658,7 +4248,7 @@ index 00000000000000..d4f8aa6a92a6fb
 +	if err != nil {
 +		return ctx, err
 +	}
-+	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, C.go_openssl_EVP_MD_get0_name(md), 0)
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
 +	if len(secret) > 0 {
 +		bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
@@ -4676,10 +4266,10 @@ index 00000000000000..d4f8aa6a92a6fb
 +	if err != nil {
 +		return ctx, err
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	if C.go_openssl_EVP_KDF_CTX_set_params(ctx, params) != 1 {
-+		return ctx, newOpenSSLError("EVP_KDF_CTX_set_params")
++	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
++		return ctx, err
 +	}
 +	return ctx, nil
 +}
@@ -4701,30 +4291,31 @@ index 00000000000000..d4f8aa6a92a6fb
 +		return 0, errors.New("hkdf: entropy limit reached")
 +	}
 +	c.buf = append(c.buf, make([]byte, needLen)...)
-+	outLen := C.size_t(prevLen + needLen)
-+	if C.go_openssl_EVP_KDF_derive(c.ctx, base(c.buf), outLen, nil) != 1 {
-+		return 0, newOpenSSLError("EVP_KDF_derive")
++	outLen := prevLen + needLen
++	if _, err := ossl.EVP_KDF_derive(c.ctx, base(c.buf), outLen, nil); err != nil {
++		return 0, err
 +	}
 +	n := copy(p, c.buf[prevLen:outLen])
 +	return n, nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..b519ba3111dcc3
+index 00000000000000..35cbc289532524
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,274 @@
+@@ -0,0 +1,249 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"hash"
 +	"runtime"
 +	"sync"
 +	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
 +// NewHMAC returns a new HMAC using OpenSSL.
@@ -4744,7 +4335,7 @@ index 00000000000000..b519ba3111dcc3
 +		// HMAC_Init will try and reuse the key from the ctx. This is
 +		// not the behavior previously implemented, so as a workaround
 +		// we pass an "empty" key.
-+		key = make([]byte, C.GO_EVP_MAX_MD_SIZE)
++		key = make([]byte, ossl.EVP_MAX_MD_SIZE)
 +	}
 +
 +	hmac := &opensslHMAC{
@@ -4774,12 +4365,12 @@ index 00000000000000..b519ba3111dcc3
 +
 +// hmacCtx3 is used for OpenSSL 1.
 +type hmacCtx1 struct {
-+	ctx C.GO_HMAC_CTX_PTR
++	ctx ossl.HMAC_CTX_PTR
 +}
 +
 +// hmacCtx3 is used for OpenSSL 3.
 +type hmacCtx3 struct {
-+	ctx C.GO_EVP_MAC_CTX_PTR
++	ctx ossl.EVP_MAC_CTX_PTR
 +	key []byte // only set for OpenSSL 3.0.0, 3.0.1, and 3.0.2.
 +}
 +
@@ -4791,84 +4382,81 @@ index 00000000000000..b519ba3111dcc3
 +	sum       []byte
 +}
 +
-+func newHMAC1(key []byte, md C.GO_EVP_MD_PTR) hmacCtx1 {
-+	ctx := hmacCtxNew()
-+	if ctx == nil {
-+		panic("openssl: EVP_MAC_CTX_new failed")
++func newHMAC1(key []byte, md ossl.EVP_MD_PTR) hmacCtx1 {
++	ctx, err := ossl.HMAC_CTX_new()
++	if err != nil {
++		panic(err)
 +	}
-+	if C.go_openssl_HMAC_Init_ex(ctx, unsafe.Pointer(&key[0]), C.int(len(key)), md, nil) == 0 {
-+		panic(newOpenSSLError("HMAC_Init_ex failed"))
++	if _, err := ossl.HMAC_Init_ex(ctx, unsafe.Pointer(&key[0]), int32(len(key)), md, nil); err != nil {
++		panic(err)
 +	}
 +	return hmacCtx1{ctx}
 +}
 +
 +var hmacDigestsSupported sync.Map
-+var fetchHMAC3 = sync.OnceValue(func() C.GO_EVP_MAC_PTR {
-+	name := C.CString("HMAC")
-+	mac := C.go_openssl_EVP_MAC_fetch(nil, name, nil)
-+	C.free(unsafe.Pointer(name))
-+	if mac == nil {
-+		panic("openssl: HMAC not supported")
++var fetchHMAC3 = sync.OnceValue(func() ossl.EVP_MAC_PTR {
++	mac, err := ossl.EVP_MAC_fetch(nil, _OSSL_MAC_NAME_HMAC.ptr(), nil)
++	if err != nil {
++		panic(err)
 +	}
 +	return mac
 +})
 +
-+func buildHMAC3Params(digest *C.char) (C.GO_OSSL_PARAM_PTR, error) {
++func buildHMAC3Params(md ossl.EVP_MD_PTR) (ossl.OSSL_PARAM_PTR, error) {
 +	bld, err := newParamBuilder()
 +	if err != nil {
 +		return nil, err
 +	}
 +	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, digest, 0)
++	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	return bld.build()
 +}
 +
-+func isHMAC3DigestSupported(digest string) bool {
-+	if v, ok := hmacDigestsSupported.Load(digest); ok {
++func isHMAC3DigestSupported(md ossl.EVP_MD_PTR) bool {
++	nid := ossl.EVP_MD_get_type(md)
++	if v, ok := hmacDigestsSupported.Load(nid); ok {
 +		return v.(bool)
 +	}
-+	ctx := C.go_openssl_EVP_MAC_CTX_new(fetchHMAC3())
-+	if ctx == nil {
-+		panic(newOpenSSLError("EVP_MAC_CTX_new"))
++	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
++	if err != nil {
++		panic(err)
 +	}
-+	defer C.go_openssl_EVP_MAC_CTX_free(ctx)
++	defer ossl.EVP_MAC_CTX_free(ctx)
 +
-+	cdigest := C.CString(digest)
-+	defer C.free(unsafe.Pointer(cdigest))
-+	params, err := buildHMAC3Params(cdigest)
++	params, err := buildHMAC3Params(md)
 +	if err != nil {
 +		panic(err)
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	supported := C.go_openssl_EVP_MAC_CTX_set_params(ctx, params) != 0
-+	hmacDigestsSupported.Store(digest, supported)
++	_, err = ossl.EVP_MAC_CTX_set_params(ctx, params)
++	supported := err == nil
++	hmacDigestsSupported.Store(nid, supported)
 +	return supported
 +}
 +
-+func newHMAC3(key []byte, md C.GO_EVP_MD_PTR) hmacCtx3 {
-+	digest := C.go_openssl_EVP_MD_get0_name(md)
-+	if !isHMAC3DigestSupported(C.GoString(digest)) {
++func newHMAC3(key []byte, md ossl.EVP_MD_PTR) hmacCtx3 {
++	if !isHMAC3DigestSupported(md) {
 +		// The digest is not supported by the HMAC provider.
 +		// Don't panic here so the Go standard library to
 +		// fall back to the Go implementation.
 +		// See https://github.com/golang-fips/openssl/issues/153.
 +		return hmacCtx3{}
 +	}
-+	params, err := buildHMAC3Params(digest)
++	params, err := buildHMAC3Params(md)
 +	if err != nil {
 +		panic(err)
 +	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	ctx := C.go_openssl_EVP_MAC_CTX_new(fetchHMAC3())
-+	if ctx == nil {
-+		panic(newOpenSSLError("EVP_MAC_CTX_new"))
++	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
++	if err != nil {
++		panic(err)
 +	}
 +
-+	if C.go_openssl_EVP_MAC_init(ctx, base(key), C.size_t(len(key)), params) == 0 {
-+		C.go_openssl_EVP_MAC_CTX_free(ctx)
-+		panic(newOpenSSLError("EVP_MAC_init"))
++	if _, err := ossl.EVP_MAC_init(ctx, base(key), len(key), params); err != nil {
++		ossl.EVP_MAC_CTX_free(ctx)
++		panic(err)
 +	}
 +	var hkey []byte
 +	if vMinor == 0 && vPatch <= 2 {
@@ -4886,12 +4474,12 @@ index 00000000000000..b519ba3111dcc3
 +func (h *opensslHMAC) Reset() {
 +	switch vMajor {
 +	case 1:
-+		if C.go_openssl_HMAC_Init_ex(h.ctx1.ctx, nil, 0, nil, nil) == 0 {
-+			panic(newOpenSSLError("HMAC_Init_ex failed"))
++		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, 0, nil, nil); err != nil {
++			panic(err)
 +		}
 +	case 3:
-+		if C.go_openssl_EVP_MAC_init(h.ctx3.ctx, base(h.ctx3.key), C.size_t(len(h.ctx3.key)), nil) == 0 {
-+			panic(newOpenSSLError("EVP_MAC_init failed"))
++		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, base(h.ctx3.key), len(h.ctx3.key), nil); err != nil {
++			panic(err)
 +		}
 +	default:
 +		panic(errUnsupportedVersion())
@@ -4902,13 +4490,11 @@ index 00000000000000..b519ba3111dcc3
 +}
 +
 +func (h *opensslHMAC) finalize() {
-+	switch vMajor {
-+	case 1:
-+		hmacCtxFree(h.ctx1.ctx)
-+	case 3:
-+		C.go_openssl_EVP_MAC_CTX_free(h.ctx3.ctx)
-+	default:
-+		panic(errUnsupportedVersion())
++	if h.ctx1.ctx != nil {
++		ossl.HMAC_CTX_free(h.ctx1.ctx)
++	}
++	if h.ctx3.ctx != nil {
++		ossl.EVP_MAC_CTX_free(h.ctx3.ctx)
 +	}
 +}
 +
@@ -4916,9 +4502,9 @@ index 00000000000000..b519ba3111dcc3
 +	if len(p) > 0 {
 +		switch vMajor {
 +		case 1:
-+			C.go_openssl_HMAC_Update(h.ctx1.ctx, base(p), C.size_t(len(p)))
++			ossl.HMAC_Update(h.ctx1.ctx, base(p), len(p))
 +		case 3:
-+			C.go_openssl_EVP_MAC_update(h.ctx3.ctx, base(p), C.size_t(len(p)))
++			ossl.EVP_MAC_update(h.ctx3.ctx, base(p), len(p))
 +		default:
 +			panic(errUnsupportedVersion())
 +		}
@@ -4946,129 +4532,201 @@ index 00000000000000..b519ba3111dcc3
 +	// and the second Sum acts as if the first didn't happen.
 +	switch vMajor {
 +	case 1:
-+		ctx2 := hmacCtxNew()
-+		if ctx2 == nil {
-+			panic("openssl: HMAC_CTX_new failed")
++		ctx2, err := ossl.HMAC_CTX_new()
++		if err != nil {
++			panic(err)
 +		}
-+		defer hmacCtxFree(ctx2)
-+		if C.go_openssl_HMAC_CTX_copy(ctx2, h.ctx1.ctx) == 0 {
-+			panic("openssl: HMAC_CTX_copy failed")
++		defer ossl.HMAC_CTX_free(ctx2)
++		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
++			panic(err)
 +		}
-+		C.go_openssl_HMAC_Final(ctx2, base(h.sum), nil)
++		ossl.HMAC_Final(ctx2, base(h.sum), nil)
 +	case 3:
-+		ctx2 := C.go_openssl_EVP_MAC_CTX_dup(h.ctx3.ctx)
-+		if ctx2 == nil {
-+			panic("openssl: EVP_MAC_CTX_dup failed")
++		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
++		if err != nil {
++			panic(err)
 +		}
-+		defer C.go_openssl_EVP_MAC_CTX_free(ctx2)
-+		C.go_openssl_EVP_MAC_final(ctx2, base(h.sum), nil, C.size_t(len(h.sum)))
++		defer ossl.EVP_MAC_CTX_free(ctx2)
++		ossl.EVP_MAC_final(ctx2, base(h.sum), nil, len(h.sum))
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
 +	return append(in, h.sum...)
 +}
-+
-+func hmacCtxNew() C.GO_HMAC_CTX_PTR {
-+	if vMajor == 1 && vMinor == 0 {
-+		// 0x120 is the sizeof value when building against OpenSSL 1.0.2 on Ubuntu 16.04.
-+		ctx := (C.GO_HMAC_CTX_PTR)(C.malloc(0x120))
-+		if ctx != nil {
-+			C.go_openssl_HMAC_CTX_init(ctx)
-+		}
-+		return ctx
-+	}
-+	return C.go_openssl_HMAC_CTX_new()
-+}
-+
-+func hmacCtxFree(ctx C.GO_HMAC_CTX_PTR) {
-+	if vMajor == 1 && vMinor == 0 {
-+		C.go_openssl_HMAC_CTX_cleanup(ctx)
-+		C.free(unsafe.Pointer(ctx))
-+		return
-+	}
-+	C.go_openssl_HMAC_CTX_free(ctx)
-+}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init.go b/src/vendor/github.com/golang-fips/openssl/v2/init.go
 new file mode 100644
-index 00000000000000..a14663298b2fd4
+index 00000000000000..3ea2a896a38c5a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/init.go
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,157 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #include "goopenssl.h"
 +import "C"
 +import (
 +	"errors"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
-+// opensslInit loads and initialize OpenSSL.
-+// If successful, it returns the major and minor OpenSSL version
-+// as reported by the OpenSSL API.
++// osslHandle is the handle to the OpenSSL shared library loaded in the [Init] function.
++var osslHandle unsafe.Pointer
++
++// opensslInit loads and initializes OpenSSL.
 +//
-+// See Init() for details about file.
-+func opensslInit(file string) (major, minor, patch uint, err error) {
++// See [Init] for details about file.
++func opensslInit(file string) error {
 +	// Load the OpenSSL shared library using dlopen.
-+	handle, err := dlopen(file)
++	handle, close, err := openLibrary(file)
 +	if err != nil {
-+		return 0, 0, 0, err
++		return err
 +	}
 +
-+	// Retrieve the loaded OpenSSL version and check if it is supported.
-+	// Notice that major and minor could not match with the version parameter
-+	// in case the name of the shared library file differs from the OpenSSL
-+	// version it contains.
-+	imajor := int(C.go_openssl_version_major(handle))
-+	iminor := int(C.go_openssl_version_minor(handle))
-+	ipatch := int(C.go_openssl_version_patch(handle))
-+	if imajor < 0 || iminor < 0 || ipatch < 0 {
-+		return 0, 0, 0, errors.New("openssl: can't retrieve OpenSSL version")
-+	}
-+	major, minor, patch = uint(imajor), uint(iminor), uint(ipatch)
-+	var supported bool
-+	if major == 1 {
-+		supported = minor == 0 || minor == 1
-+	} else if major == 3 {
-+		// OpenSSL guarantees API and ABI compatibility within the same major version since OpenSSL 3.
-+		supported = true
-+	}
-+	if !supported {
-+		return 0, 0, 0, errUnsupportedVersion()
++	ossl.MkcgoLoad_(handle)
++	if vMajor == 1 {
++		ossl.MkcgoLoad_legacy_1(handle)
++		if vPatch == 1 {
++			ossl.MkcgoLoad_111(handle)
++		}
++	} else {
++		ossl.MkcgoLoad_111(handle)
++		ossl.MkcgoLoad_3(handle)
 +	}
 +
-+	// Load the OpenSSL functions.
-+	// See shims.go for the complete list of supported functions.
-+	C.go_openssl_load_functions(handle, C.uint(major), C.uint(minor), C.uint(patch))
-+
 +	// Initialize OpenSSL.
-+	C.go_openssl_OPENSSL_init()
-+	if major == 1 && minor == 0 {
-+		if C.go_openssl_thread_setup() != 1 {
-+			return 0, 0, 0, fail("openssl: thread setup")
-+		}
-+		C.go_openssl_OPENSSL_add_all_algorithms_conf()
-+		C.go_openssl_ERR_load_crypto_strings()
-+	} else {
-+		flags := C.uint64_t(C.GO_OPENSSL_INIT_ADD_ALL_CIPHERS | C.GO_OPENSSL_INIT_ADD_ALL_DIGESTS | C.GO_OPENSSL_INIT_LOAD_CONFIG | C.GO_OPENSSL_INIT_LOAD_CRYPTO_STRINGS)
-+		if C.go_openssl_OPENSSL_init_crypto(flags, nil) != 1 {
-+			return 0, 0, 0, fail("openssl: init crypto")
-+		}
++	ossl.OPENSSL_init()
++	if _, err = ossl.OPENSSL_init_crypto(
++		ossl.OPENSSL_INIT_ADD_ALL_CIPHERS|
++			ossl.OPENSSL_INIT_ADD_ALL_DIGESTS|
++			ossl.OPENSSL_INIT_LOAD_CONFIG|
++			ossl.OPENSSL_INIT_LOAD_CRYPTO_STRINGS,
++		nil); err != nil {
++		close()
++		return err
 +	}
-+	return major, minor, patch, nil
++	osslHandle = handle
++	return nil
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
-new file mode 100644
-index 00000000000000..5c09da86ee10f4
---- /dev/null
++
++// initForCheckVersion loads and initialize only the
++// functions required in [CheckVersion].
++// It returns a close function that must be called to release the resources.
++//
++// This function modifies the vMajor, vMinor, and vPatch global variables as
++// well as other internal global variables that facilitate OpenSSL calls.
++//
++// If the function succeeds, calling the close function restores the previous
++// state of the global variables. If it fails, the global variables are restored
++// before returning.
++func initForCheckVersion(file string) (func(), error) {
++	prevMajor, prevMinor, prevPatch := vMajor, vMinor, vPatch
++	restoreVersion := func() {
++		vMajor, vMinor, vPatch = prevMajor, prevMinor, prevPatch
++	}
++	handle, close, err := openLibrary(file)
++	if err != nil {
++		restoreVersion()
++		return nil, err
++	}
++	initFuncs := func() (loadX func(unsafe.Pointer), unloadX func()) {
++		switch vMajor {
++		case 1:
++			loadX = ossl.MkcgoLoad_init_1
++			unloadX = ossl.MkcgoUnload_init_1
++		case 3:
++			loadX = ossl.MkcgoLoad_init_3
++			unloadX = ossl.MkcgoUnload_init_3
++		default:
++			// We shouldn't get here: openLibrary should have already returned an error.
++			panic(errUnsupportedVersion())
++		}
++		return
++	}
++	loadX, unloadX := initFuncs()
++	loadX(handle)
++	return func() {
++		restoreVersion()
++		close()
++		unloadX()
++		if osslHandle != nil {
++			// If osslHandle is not nil, it means that the library was already loaded
++			// and initialized. In this case, we need to reload the functions from
++			// the original handle.
++			loadX, _ = initFuncs()
++			loadX(osslHandle)
++		}
++	}, nil
++}
++
++// openLibrary loads and initialize the version of OpenSSL.
++// It returns the handle to the OpenSSL shared library
++// and a function that can be called to release the resources.
++func openLibrary(file string) (handle unsafe.Pointer, close func(), err error) {
++	vMajor, vMinor, vPatch = 0, 0, 0
++	handle, err = dlopen(file)
++	if err != nil {
++		return nil, nil, err
++	}
++	// Retrieve the loaded OpenSSL version and check if it is supported.
++	// Notice that major and minor could not match with the version parameter
++	// in case the name of the shared library file differs from the OpenSSL
++	// version it contains.
++	ossl.MkcgoLoad_version(handle)
++	close = func() {
++		dlclose(handle)
++		if osslHandle == nil {
++			ossl.MkcgoUnload_version()
++		} else {
++			ossl.MkcgoLoad_version(osslHandle)
++		}
++	}
++	defer func() {
++		if err != nil {
++			close()
++		}
++	}()
++
++	if ossl.OPENSSL_version_major_Available() &&
++		ossl.OPENSSL_version_minor_Available() &&
++		ossl.OPENSSL_version_patch_Available() {
++		// Likely OpenSSL 3 or later.
++		vMajor = uint(ossl.OPENSSL_version_major())
++		vMinor = uint(ossl.OPENSSL_version_minor())
++		vPatch = uint(ossl.OPENSSL_version_patch())
++	} else if ossl.OpenSSL_version_num_Available() {
++		// Likely OpenSSL 1.
++		ver := ossl.OpenSSL_version_num()
++		vMajor = uint(ver >> 28)
++		vMinor = uint(ver >> 20 & 0xFF)
++		vPatch = uint(ver >> 12 & 0xFF)
++	} else {
++		return handle, nil, errors.New("openssl: version not available")
++	}
++	var supported bool
++	if vMajor == 1 {
++		supported = vMinor == 1
++	} else if vMajor == 3 {
++		// OpenSSL guarantees API and ABI compatibility within the same major version since OpenSSL 3.
++		supported = true
++	}
++	if !supported {
++		return handle, nil, errUnsupportedVersion()
++	}
++	return handle, close, nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
+new file mode 100644
+index 00000000000000..dbf5ac448fdf80
+--- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
 @@ -0,0 +1,31 @@
 +//go:build unix && !cmd_go_bootstrap
 +
 +package openssl
 +
-+// #cgo LDFLAGS: -ldl -pthread
++// #cgo LDFLAGS: -ldl
 +// #include <stdlib.h>
 +// #include <dlfcn.h>
 +import "C"
@@ -5137,2978 +4795,7278 @@ index 00000000000000..3778e21227abb9
 +func dlclose(handle unsafe.Pointer) error {
 +	return syscall.FreeLibrary(syscall.Handle(handle))
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
 new file mode 100644
-index 00000000000000..ec39bf1533cae0
+index 00000000000000..284952ca345475
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,506 @@
-+//go:build !cmd_go_bootstrap
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
+@@ -0,0 +1,125 @@
++package ossl
++
++/*
++#include <stdlib.h> // for calloc and free
++#include <string.h> // for strdup
++#include "zossl.h"
++
++// OpenSSL only allows a maximum of 16 errors to be stored in the error queue.
++#define ERR_NUM_MAX  16
++
++// ossl_err_state is a custom structure to hold the error state
++// of OpenSSL.
++typedef struct ossl_err_state_st {
++	unsigned long code[ERR_NUM_MAX];
++	int line[ERR_NUM_MAX];
++	char *file[ERR_NUM_MAX];
++} ossl_err_state;
++
++// mkcgo_err_clear clears the error queue in OpenSSL.
++void mkcgo_err_clear() {
++	// Clear the error queue.
++	_mkcgo_ERR_clear_error();
++}
++
++// mkcgo_err_retrieve retrieves the error state from OpenSSL.
++// It returns a pointer to a mkcgo_err_state structure
++// that contains the error codes, lines, and file names.
++// The caller is responsible for freeing the memory
++// by calling mkcgo_err_free.
++mkcgo_err_state mkcgo_err_retrieve() {
++	ossl_err_state *errs = (ossl_err_state *)calloc(1, sizeof(ossl_err_state));
++	if (errs == NULL) return NULL;
++
++	// Retrieve the errors from OpenSSL.
++	for (int i = 0; i < ERR_NUM_MAX; i++) {
++		const char *file;
++		if (_mkcgo_available_OPENSSL_version_major() == 1) { // Only available in OpenSSL 3.
++			// OpenSSL 3 error handling
++			errs->code[i] = _mkcgo_ERR_get_error_all(&file, &errs->line[i], NULL, NULL, NULL);
++		} else {
++			// OpenSSL 1 error handling
++			errs->code[i] = _mkcgo_ERR_get_error_line(&file, &errs->line[i]);
++		}
++		if (errs->code[i] == 0) {
++			break;
++		}
++		if (file != NULL) {
++			// Copy the file name as the pointer we just retrieved will be freed by OpenSSL
++			// when the error queue is cleared.
++			errs->file[i] = strdup(file);
++		}
++	}
++	return errs;
++}
 +
-+// Package openssl provides access to OpenSSL cryptographic functions.
-+package openssl
++// mkcgo_err_free frees the memory allocated for the mkcgo_err_state structure.
++void mkcgo_err_free(mkcgo_err_state errs) {
++	if (errs == NULL) return;
 +
-+// #include "goopenssl.h"
++	ossl_err_state *oerrs = (ossl_err_state *)errs;
++	for (int i = 0; i < ERR_NUM_MAX; i++) {
++		if (oerrs->file[i] != NULL) {
++			free((void *)oerrs->file[i]);
++		}
++	}
++	free(errs);
++}
++*/
 +import "C"
 +import (
-+	"encoding/binary"
++	"bytes"
 +	"errors"
-+	"math/bits"
-+	"runtime"
 +	"strconv"
 +	"strings"
-+	"sync"
 +	"unsafe"
 +)
 +
-+var (
-+	// vMajor and vMinor hold the major/minor OpenSSL version.
-+	// It is only populated if Init has been called.
-+	vMajor, vMinor, vPatch uint
-+)
++// newMkcgoErr creates a new error from the given mkcgo_err_state
++// and frees the state. If errst is nil, it returns nil.
++func newMkcgoErr(msg string, errst C.mkcgo_err_state) error {
++	if errst == nil {
++		return nil
++	}
++	defer C.mkcgo_err_free(errst)
++	oerrst := (*C.ossl_err_state)(unsafe.Pointer(errst))
++	var b strings.Builder
++	b.WriteString(msg)
++	b.WriteString("\nopenssl error(s):")
++	for i := range C.ERR_NUM_MAX {
++		e := uint32(oerrst.code[i])
++		if e == 0 {
++			break
++		}
++		b.WriteByte('\n')
++		var buf [256]byte
++		ERR_error_string_n(e, unsafe.SliceData(buf[:]), len(buf))
++		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
++			b.Write(buf[:termIdx])
++		} else {
++			b.Write(buf[:])
++		}
++		if oerrst.file[i] == nil {
++			// info not available
++			continue
++		}
++		b.WriteString("\n\t")
++		b.Write(cstrBytes(oerrst.file[i]))
++		b.WriteByte(':')
++		b.WriteString(strconv.Itoa(int(oerrst.line[i])))
++	}
++	return errors.New(b.String())
++}
 +
-+var (
-+	initOnce sync.Once
-+	initErr  error
-+)
++// cstrBytes returns a byte slice containing the contents of the C string
++// pointed to by p. The slice does not include the terminating null byte.
++func cstrBytes(p *C.char) []byte {
++	if p == nil {
++		return nil
++	}
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
++	}
++	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+new file mode 100644
+index 00000000000000..4a64c2f09f1f9c
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+@@ -0,0 +1,40 @@
++// Package ossl provides a Go interface to OpenSSL.
++package ossl
 +
-+var nativeEndian binary.ByteOrder
++//go:generate go run ../../cmd/mkcgo -out zossl.go -package ossl shims.h
 +
-+// CheckVersion checks if the OpenSSL version can be loaded
-+// and if the FIPS mode is enabled.
-+// This function can be called before Init.
-+func CheckVersion(version string) (exists, fips bool) {
-+	handle, _ := dlopen(version)
-+	if handle == nil {
-+		return false, false
++/*
++#include "zossl.h"
++// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal_ex using ctx2.
++// This is necessary because Go hash.Hash mandates that Sum has no effect
++// on the underlying stream. In particular it is OK to Sum, then Write more,
++// then Sum again, and the second Sum acts as if the first didn't happen.
++// It is written in C because Sum() tend to be in the hot path,
++// and doing one cgo call instead of two is a significant performance win.
++static inline int
++go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, mkcgo_err_state *_err_state)
++{
++	if (_mkcgo_EVP_MD_CTX_copy(ctx2, ctx, _err_state) != 1)
++		return -1;
++	if (_mkcgo_EVP_DigestFinal_ex(ctx2, out, NULL, _err_state) <= 0)
++		return -2;
++	return 1;
++}
++*/
++import "C"
++import "unsafe"
++
++func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
++	var errst C.mkcgo_err_state
++	if code := C.go_hash_sum(ctx1, ctx2, (*C.uchar)(unsafe.SliceData(out)), mkcgoNoEscape(&errst)); code != 1 {
++		msg := "go_hash_sum"
++		switch code {
++		case -1:
++			msg = "EVP_MD_CTX_copy"
++		case -2:
++			msg = "EVP_DigestFinal_ex"
++		}
++		return newMkcgoErr(msg, errst)
 +	}
-+	defer dlclose(handle)
-+	enabled := C.go_openssl_fips_enabled(handle)
-+	fips = enabled == 1
-+	// If go_openssl_fips_enabled returns -1, it means that all or some of the necessary
-+	// functions are not available. This can be due to the version of OpenSSL being too old,
-+	// too incompatible, or the shared library not being an OpenSSL library. In any case,
-+	// we shouldn't consider this library to be valid for our purposes.
-+	exists = enabled != -1
-+	return
++	return nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+new file mode 100644
+index 00000000000000..a5f0a56190f90e
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+@@ -0,0 +1,390 @@
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// OpenSSL C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zossl.h" instead.
 +
-+// Init loads and initializes OpenSSL from the shared library at path.
-+// It must be called before any other OpenSSL call, except CheckVersion.
-+//
-+// Only the first call to Init is effective.
-+// Subsequent calls will return the same error result as the one from the first call.
-+//
-+// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
-+// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
-+// library libcrypto.so.1.1.1k-fips.
-+func Init(file string) error {
-+	initOnce.Do(func() {
-+		buf := [2]byte{}
-+		*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
++#ifndef _GO_OSSL_SHIMS_H // only include this header once
++#define _GO_OSSL_SHIMS_H
 +
-+		switch buf {
-+		case [2]byte{0xCD, 0xAB}:
-+			nativeEndian = binary.LittleEndian
-+		case [2]byte{0xAB, 0xCD}:
-+			nativeEndian = binary.BigEndian
-+		default:
-+			panic("Could not determine native endianness.")
-+		}
-+		vMajor, vMinor, vPatch, initErr = opensslInit(file)
-+	})
-+	return initErr
++#include <stdlib.h> // size_t
++#include <stdint.h> // uint64_t
++
++// The following includes are used by the checkheader tool.
++// #include <openssl/crypto.h>
++// #include <openssl/evp.h>
++// #include <openssl/ec.h>
++// #include <openssl/kdf.h>
++// #include <openssl/obj_mac.h>
++// #include <openssl/rsa.h>
++// #include <openssl/err.h>
++// #include <openssl/hmac.h>
++// #include <openssl/rand.h>
++// #include <openssl/dsa.h>
++// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
++// #include <openssl/core_names.h>
++// #include <openssl/provider.h>
++// #include <openssl/param_build.h>
++// #endif
++// #if OPENSSL_VERSION_NUMBER < 0x10100000L
++// #include <openssl/bn.h>
++// #endif
++
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
++
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS     = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS     = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG         = 0x00000040,
++
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD     = 1,
++	_EVP_PKEY_RSA         = 6,
++	_EVP_PKEY_EC          = 408,
++	_EVP_PKEY_TLS1_PRF    = 1021,
++	_EVP_PKEY_HKDF        = 1036,
++	_EVP_PKEY_ED25519     = 1087,
++	_EVP_PKEY_DSA         = 116,
++	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
++	_EVP_MAX_MD_SIZE    = 64,
++
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR    = 0x87,
++
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY  = 2,
++
++	_EVP_PKEY_CTRL_TLS_MD     = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED   = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD    = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT  = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY   = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO  = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE  = 0x1007,
++
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1        = 713,
++	_NID_secp384r1        = 715,
++	_NID_secp521r1        = 716,
++
++	_RSA_PKCS1_PADDING                 = 1,
++	_RSA_NO_PADDING                    = 3,
++	_RSA_PKCS1_OAEP_PADDING            = 4,
++	_RSA_PKCS1_PSS_PADDING             = 6,
++	_RSA_PSS_SALTLEN_DIGEST            = -1,
++	_RSA_PSS_SALTLEN_AUTO              = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN          = -2,
++	_RSA_PSS_SALTLEN_MAX               = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING         = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN     = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS     = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD         = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD         = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++};
++
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef int point_conversion_form_t;
++
++// Tags used by mkcgo to determine which OpenSSL version each function is available in:
++// - no tag: OpenSSL 1.0 or later
++// - legacy_1: Only OpenSSL 1
++// - 3: OpenSSL 3.0 or later
++// - 111: OpenSSL 1.1.1 or later
++
++// The noescape/nocallback attributes are performance optimizations.
++// Only add functions that have been observed to benefit from these
++// directives, not every function that is merely expected to meet
++// the noescape/nocallback criteria.
++
++// ERR API
++void ERR_error_string_n(unsigned long e, char *buf, size_t len);
++void ERR_clear_error(void) __attribute__((tag(""),tag("init_3")));
++unsigned long ERR_get_error_line(const char **file, int *line) __attribute__((tag("legacy_1"),noerror));
++unsigned long ERR_get_error_all(const char **file, int *line, const char **func, const char **data, int *flags) __attribute__((tag("3"),noerror));
++
++// OPENSSL API
++const char *OpenSSL_version(int type) __attribute__((noerror));
++void OPENSSL_init(void);
++int OPENSSL_init_crypto(uint64_t ops, const _OPENSSL_INIT_SETTINGS_PTR settings);
++unsigned long OpenSSL_version_num(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_major(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_minor(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_patch(void) __attribute__((tag("version"),optional,noerror));
++
++// CRYPTO API
++void *CRYPTO_malloc(size_t num, const char *file, int line);
++void CRYPTO_free(void *str, const char *file, int line);
++
++// FIPS API
++int FIPS_mode(void) __attribute__((tag("legacy_1"),tag("init_1"),noerror));
++int FIPS_mode_set(int r) __attribute__((tag("legacy_1"),tag("init_1")));
++
++// EVP Config API
++int EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR libctx) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR libctx, int enable) __attribute__((tag("3")));
++
++// OSSL_PROVIDER API
++int OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR libctx, const char *name) __attribute__((tag("3"),noerror));
++_OSSL_PROVIDER_PTR OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks) __attribute__((tag("3")));
++const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
++
++// RAND API
++int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback));
++
++// EVP_MD API
++_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
++void EVP_MD_free(_EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3")));
++const char *EVP_MD_get0_name(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++int EVP_MD_get_type(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++const _OSSL_PROVIDER_PTR EVP_MD_get0_provider(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_MD_get_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_size"),noerror));
++int EVP_MD_get_block_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_block_size"),noerror));
++const _EVP_MD_PTR EVP_md5_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_ripemd160(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md4(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md5(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((tag("111"),noerror));
++
++_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
++void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
++int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
++int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
++int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
++int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,nocheckptr("d")));
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s);
++int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
++int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
++int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen);
++int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111")));
++
++// HMAC API
++int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1")));
++int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1")));
++int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1")));
++
++_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
++int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1")));
++void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1")));
++
++// EVP_CIPHER API
++_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++const char *EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
++int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
++
++_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
++int EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR x, int padding);
++int EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR x, int keylen);
++void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
++int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
++int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
++int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback));
++int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback));
++
++// EVP_PKEY API
++_EVP_PKEY_PTR EVP_PKEY_new(void);
++_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
++int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
++int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
++void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
++_RSA_PTR EVP_PKEY_get1_RSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
++_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3")));
++size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
++int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
++int EVP_PKEY_up_ref(_EVP_PKEY_PTR key) __attribute__((tag("3")));
++int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
++int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len) __attribute__((tag("111"),noescape,nocallback));
++int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len) __attribute__((tag("111"),noescape,nocallback));
++int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
++int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
++int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen);
++int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
++int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback));
++int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
++void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
++int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++
++// RSA API
++_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
++void RSA_free(_RSA_PTR arg0) __attribute__((tag("legacy_1")));
++void RSA_get0_factors(const _RSA_PTR rsa, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_factors(_RSA_PTR rsa, _BIGNUM_PTR p, _BIGNUM_PTR q) __attribute__((tag("legacy_1")));
++void RSA_get0_crt_params(const _RSA_PTR r, const _BIGNUM_PTR *dmp1, const _BIGNUM_PTR *dmq1, const _BIGNUM_PTR *iqmp) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_crt_params(_RSA_PTR rsa, _BIGNUM_PTR dmp1, _BIGNUM_PTR dmp2, _BIGNUM_PTR iqmp) __attribute__((tag("legacy_1")));
++void RSA_get0_key(const _RSA_PTR rsa, const _BIGNUM_PTR *n, const _BIGNUM_PTR *e, const _BIGNUM_PTR *d) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_key(_RSA_PTR r, _BIGNUM_PTR n, _BIGNUM_PTR e, _BIGNUM_PTR d) __attribute__((tag("legacy_1")));
++
++// BIGNUM API
++_BIGNUM_PTR BN_new(void);
++void BN_free(_BIGNUM_PTR arg0);
++void BN_clear(_BIGNUM_PTR arg0);
++void BN_clear_free(_BIGNUM_PTR arg0);
++int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
++_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2);
++_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int len, _BIGNUM_PTR ret);
++int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
++int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
++
++// EC API
++int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
++int EC_KEY_set_public_key(_EC_KEY_PTR key, const _EC_POINT_PTR pub) __attribute__((tag("legacy_1")));
++void EC_KEY_free(_EC_KEY_PTR arg0) __attribute__((tag("legacy_1")));
++const _EC_GROUP_PTR EC_KEY_get0_group(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _BIGNUM_PTR EC_KEY_get0_private_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _EC_POINT_PTR EC_KEY_get0_public_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++_EC_KEY_PTR EC_KEY_new_by_curve_name(int arg0) __attribute__((tag("legacy_1")));
++int EC_KEY_set_private_key(_EC_KEY_PTR arg0, const _BIGNUM_PTR arg1) __attribute__((tag("legacy_1")));
++int EC_KEY_check_key(const _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++_EC_POINT_PTR EC_POINT_new(const _EC_GROUP_PTR arg0);
++void EC_POINT_free(_EC_POINT_PTR arg0);
++int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
++int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
++int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
++size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
++int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
++_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
++void EC_GROUP_free(_EC_GROUP_PTR group);
++
++// EVP_MAC API
++_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3")));
++int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3")));
++
++// OSSL_PARAM API
++void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
++_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3")));
++void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
++
++// EVP_SIGNATURE API
++_EVP_SIGNATURE_PTR EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR signature) __attribute__((tag("3")));
++
++// DSA API
++_DSA_PTR DSA_new(void) __attribute__((tag("legacy_1")));
++void DSA_free(_DSA_PTR r) __attribute__((tag("legacy_1")));
++int DSA_generate_key(_DSA_PTR a) __attribute__((tag("legacy_1")));
++void DSA_get0_pqg(const _DSA_PTR d, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q, const _BIGNUM_PTR *g) __attribute__((tag("legacy_1")));
++int DSA_set0_pqg(_DSA_PTR d, _BIGNUM_PTR p, _BIGNUM_PTR q, _BIGNUM_PTR g) __attribute__((tag("legacy_1")));
++void DSA_get0_key(const _DSA_PTR d, const _BIGNUM_PTR *pub_key, const _BIGNUM_PTR *priv_key) __attribute__((tag("legacy_1")));
++int DSA_set0_key(_DSA_PTR d, _BIGNUM_PTR pub_key, _BIGNUM_PTR priv_key) __attribute__((tag("legacy_1")));
++
++// EVP_KDF API
++_EVP_KDF_PTR EVP_KDF_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_KDF_free(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++_EVP_KDF_CTX_PTR EVP_KDF_CTX_new(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out);
++
++// OBJ API
++const char *OBJ_nid2sn(int n) __attribute__((noerror));
++
++#endif // _GO_OSSL_SHIMS_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
+new file mode 100644
+index 00000000000000..0219d15b9c4fbf
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
+@@ -0,0 +1,2011 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zossl.h"
++
++#ifdef _WIN32
++#include <windows.h>
++#define dlsym GetProcAddress
++#else
++#include <dlfcn.h>
++#endif
++
++_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
++int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
++void (*_g_BN_clear)(_BIGNUM_PTR);
++void (*_g_BN_clear_free)(_BIGNUM_PTR);
++void (*_g_BN_free)(_BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_lebin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_new)(void);
++int (*_g_BN_num_bits)(const _BIGNUM_PTR);
++void (*_g_CRYPTO_free)(void*, const char*, int);
++void* (*_g_CRYPTO_malloc)(size_t, const char*, int);
++void (*_g_DSA_free)(_DSA_PTR);
++int (*_g_DSA_generate_key)(_DSA_PTR);
++void (*_g_DSA_get0_key)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_DSA_get0_pqg)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR (*_g_DSA_new)(void);
++int (*_g_DSA_set0_key)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_DSA_set0_pqg)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_GROUP_free)(_EC_GROUP_PTR);
++_EC_GROUP_PTR (*_g_EC_GROUP_new_by_curve_name)(int);
++int (*_g_EC_KEY_check_key)(const _EC_KEY_PTR);
++void (*_g_EC_KEY_free)(_EC_KEY_PTR);
++const _EC_GROUP_PTR (*_g_EC_KEY_get0_group)(const _EC_KEY_PTR);
++const _BIGNUM_PTR (*_g_EC_KEY_get0_private_key)(const _EC_KEY_PTR);
++const _EC_POINT_PTR (*_g_EC_KEY_get0_public_key)(const _EC_KEY_PTR);
++_EC_KEY_PTR (*_g_EC_KEY_new_by_curve_name)(int);
++int (*_g_EC_KEY_set_private_key)(_EC_KEY_PTR, const _BIGNUM_PTR);
++int (*_g_EC_KEY_set_public_key)(_EC_KEY_PTR, const _EC_POINT_PTR);
++int (*_g_EC_KEY_set_public_key_affine_coordinates)(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_POINT_free)(_EC_POINT_PTR);
++int (*_g_EC_POINT_get_affine_coordinates_GFp)(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR);
++int (*_g_EC_POINT_mul)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++_EC_POINT_PTR (*_g_EC_POINT_new)(const _EC_GROUP_PTR);
++int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
++size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
++int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++void (*_g_ERR_clear_error)(void);
++void (*_g_ERR_error_string_n)(unsigned long, char*, size_t);
++unsigned long (*_g_ERR_get_error_all)(const char**, int*, const char**, const char**, int*);
++unsigned long (*_g_ERR_get_error_line)(const char**, int*);
++int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
++void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
++int (*_g_EVP_CIPHER_CTX_set_key_length)(_EVP_CIPHER_CTX_PTR, int);
++int (*_g_EVP_CIPHER_CTX_set_padding)(_EVP_CIPHER_CTX_PTR, int);
++_EVP_CIPHER_PTR (*_g_EVP_CIPHER_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++const char* (*_g_EVP_CIPHER_get0_name)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CIPHER_get_block_size)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CipherInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int);
++int (*_g_EVP_CipherUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_Digest)(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const void*, size_t);
++int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_EncryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_EncryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_EncryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++void (*_g_EVP_KDF_CTX_free)(_EVP_KDF_CTX_PTR);
++size_t (*_g_EVP_KDF_CTX_get_kdf_size)(_EVP_KDF_CTX_PTR);
++_EVP_KDF_CTX_PTR (*_g_EVP_KDF_CTX_new)(_EVP_KDF_PTR);
++int (*_g_EVP_KDF_CTX_set_params)(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR);
++int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
++_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
++void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
++int (*_g_EVP_MAC_CTX_set_params)(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR);
++_EVP_MAC_PTR (*_g_EVP_MAC_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
++int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
++int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_MD_CTX_copy)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
++_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
++_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_MD_free)(_EVP_MD_PTR);
++const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR (*_g_EVP_MD_get0_provider)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_block_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_type)(const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_add1_hkdf_info)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_ctrl)(_EVP_PKEY_CTX_PTR, int, int, int, int, void*);
++void (*_g_EVP_PKEY_CTX_free)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
++int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, void*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
++int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
++int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
++void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_fromdata)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR);
++int (*_g_EVP_PKEY_fromdata_init)(_EVP_PKEY_CTX_PTR);
++_DSA_PTR (*_g_EVP_PKEY_get0_DSA)(_EVP_PKEY_PTR);
++_EC_KEY_PTR (*_g_EVP_PKEY_get0_EC_KEY)(_EVP_PKEY_PTR);
++_RSA_PTR (*_g_EVP_PKEY_get1_RSA)(_EVP_PKEY_PTR);
++size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
++int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
++int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_keygen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_keygen_init)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new)(void);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_private_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_public_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_paramgen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_paramgen_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_private_check)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_public_check_quick)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_set1_EC_KEY)(_EVP_PKEY_PTR, _EC_KEY_PTR);
++int (*_g_EVP_PKEY_set1_encoded_public_key)(_EVP_PKEY_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_up_ref)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_verify)(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_verify_init)(_EVP_PKEY_CTX_PTR);
++_EVP_SIGNATURE_PTR (*_g_EVP_SIGNATURE_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_SIGNATURE_free)(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
++int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
++int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_ecb)(void);
++const _EVP_MD_PTR (*_g_EVP_md4)(void);
++const _EVP_MD_PTR (*_g_EVP_md5)(void);
++const _EVP_MD_PTR (*_g_EVP_md5_sha1)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_rc4)(void);
++const _EVP_MD_PTR (*_g_EVP_ripemd160)(void);
++const _EVP_MD_PTR (*_g_EVP_sha1)(void);
++const _EVP_MD_PTR (*_g_EVP_sha224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_256)(void);
++int (*_g_FIPS_mode)(void);
++int (*_g_FIPS_mode_set)(int);
++int (*_g_HMAC_CTX_copy)(_HMAC_CTX_PTR, _HMAC_CTX_PTR);
++void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
++int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
++const char* (*_g_OBJ_nid2sn)(int);
++void (*_g_OPENSSL_init)(void);
++int (*_g_OPENSSL_init_crypto)(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR);
++unsigned int (*_g_OPENSSL_version_major)(void);
++unsigned int (*_g_OPENSSL_version_minor)(void);
++unsigned int (*_g_OPENSSL_version_patch)(void);
++void (*_g_OSSL_PARAM_BLD_free)(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
++int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
++int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
++int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t);
++int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
++_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
++void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
++int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
++const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
++const char* (*_g_OpenSSL_version)(int);
++unsigned long (*_g_OpenSSL_version_num)(void);
++int (*_g_PKCS5_PBKDF2_HMAC)(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*);
++int (*_g_RAND_bytes)(unsigned char*, int);
++void (*_g_RSA_free)(_RSA_PTR);
++void (*_g_RSA_get0_crt_params)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_factors)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_key)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR (*_g_RSA_new)(void);
++int (*_g_RSA_set0_crt_params)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_factors)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_key)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++
++#define __mkcgo__dlsym_nocheck(varname, funcname) _g_##varname = (typeof(_g_##varname))dlsym(handle, #funcname);
++
++#define __mkcgo__dlsym(name) __mkcgo__dlsym2(name, name)
++
++#define __mkcgo__dlsym2(varname, funcname) \
++	__mkcgo__dlsym_nocheck(varname, funcname) \
++	if (_g_##varname == NULL) { \
++		fprintf(stderr, "Cannot get required symbol " #funcname "\n"); \
++		abort(); \
++	}
++
++void __mkcgo_load_(void* handle) {
++	__mkcgo__dlsym(BN_bin2bn)
++	__mkcgo__dlsym(BN_bn2binpad)
++	__mkcgo__dlsym(BN_bn2lebinpad)
++	__mkcgo__dlsym(BN_clear)
++	__mkcgo__dlsym(BN_clear_free)
++	__mkcgo__dlsym(BN_free)
++	__mkcgo__dlsym(BN_lebin2bn)
++	__mkcgo__dlsym(BN_new)
++	__mkcgo__dlsym(BN_num_bits)
++	__mkcgo__dlsym(CRYPTO_free)
++	__mkcgo__dlsym(CRYPTO_malloc)
++	__mkcgo__dlsym(EC_GROUP_free)
++	__mkcgo__dlsym(EC_GROUP_new_by_curve_name)
++	__mkcgo__dlsym(EC_POINT_free)
++	__mkcgo__dlsym(EC_POINT_mul)
++	__mkcgo__dlsym(EC_POINT_new)
++	__mkcgo__dlsym(EC_POINT_oct2point)
++	__mkcgo__dlsym(EC_POINT_point2oct)
++	__mkcgo__dlsym(ERR_clear_error)
++	__mkcgo__dlsym(ERR_error_string_n)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_key_length)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_padding)
++	__mkcgo__dlsym(EVP_CipherInit_ex)
++	__mkcgo__dlsym(EVP_CipherUpdate)
++	__mkcgo__dlsym(EVP_DecryptFinal_ex)
++	__mkcgo__dlsym(EVP_DecryptInit_ex)
++	__mkcgo__dlsym(EVP_DecryptUpdate)
++	__mkcgo__dlsym(EVP_Digest)
++	__mkcgo__dlsym(EVP_DigestFinal_ex)
++	__mkcgo__dlsym(EVP_DigestInit)
++	__mkcgo__dlsym(EVP_DigestInit_ex)
++	__mkcgo__dlsym(EVP_DigestSignFinal)
++	__mkcgo__dlsym(EVP_DigestSignInit)
++	__mkcgo__dlsym(EVP_DigestUpdate)
++	__mkcgo__dlsym(EVP_DigestVerifyFinal)
++	__mkcgo__dlsym(EVP_DigestVerifyInit)
++	__mkcgo__dlsym(EVP_EncryptFinal_ex)
++	__mkcgo__dlsym(EVP_EncryptInit_ex)
++	__mkcgo__dlsym(EVP_EncryptUpdate)
++	__mkcgo__dlsym(EVP_MD_CTX_copy)
++	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
++	__mkcgo__dlsym(EVP_MD_CTX_free)
++	__mkcgo__dlsym(EVP_MD_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
++	__mkcgo__dlsym(EVP_PKEY_CTX_free)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_id)
++	__mkcgo__dlsym(EVP_PKEY_decrypt)
++	__mkcgo__dlsym(EVP_PKEY_decrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_derive)
++	__mkcgo__dlsym(EVP_PKEY_derive_init)
++	__mkcgo__dlsym(EVP_PKEY_derive_set_peer)
++	__mkcgo__dlsym(EVP_PKEY_encrypt)
++	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_free)
++	__mkcgo__dlsym(EVP_PKEY_keygen)
++	__mkcgo__dlsym(EVP_PKEY_keygen_init)
++	__mkcgo__dlsym(EVP_PKEY_new)
++	__mkcgo__dlsym(EVP_PKEY_paramgen)
++	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
++	__mkcgo__dlsym(EVP_PKEY_sign)
++	__mkcgo__dlsym(EVP_PKEY_sign_init)
++	__mkcgo__dlsym(EVP_PKEY_verify)
++	__mkcgo__dlsym(EVP_PKEY_verify_init)
++	__mkcgo__dlsym(EVP_aes_128_cbc)
++	__mkcgo__dlsym(EVP_aes_128_ctr)
++	__mkcgo__dlsym(EVP_aes_128_ecb)
++	__mkcgo__dlsym(EVP_aes_128_gcm)
++	__mkcgo__dlsym(EVP_aes_192_cbc)
++	__mkcgo__dlsym(EVP_aes_192_ctr)
++	__mkcgo__dlsym(EVP_aes_192_ecb)
++	__mkcgo__dlsym(EVP_aes_192_gcm)
++	__mkcgo__dlsym(EVP_aes_256_cbc)
++	__mkcgo__dlsym(EVP_aes_256_ctr)
++	__mkcgo__dlsym(EVP_aes_256_ecb)
++	__mkcgo__dlsym(EVP_aes_256_gcm)
++	__mkcgo__dlsym(EVP_des_cbc)
++	__mkcgo__dlsym(EVP_des_ecb)
++	__mkcgo__dlsym(EVP_des_ede3_cbc)
++	__mkcgo__dlsym(EVP_des_ede3_ecb)
++	__mkcgo__dlsym(EVP_md4)
++	__mkcgo__dlsym(EVP_md5)
++	__mkcgo__dlsym(EVP_md5_sha1)
++	__mkcgo__dlsym(EVP_rc4)
++	__mkcgo__dlsym(EVP_ripemd160)
++	__mkcgo__dlsym(EVP_sha1)
++	__mkcgo__dlsym(EVP_sha224)
++	__mkcgo__dlsym(EVP_sha256)
++	__mkcgo__dlsym(EVP_sha384)
++	__mkcgo__dlsym(EVP_sha512)
++	__mkcgo__dlsym(OBJ_nid2sn)
++	__mkcgo__dlsym(OPENSSL_init)
++	__mkcgo__dlsym(OPENSSL_init_crypto)
++	__mkcgo__dlsym(OpenSSL_version)
++	__mkcgo__dlsym(PKCS5_PBKDF2_HMAC)
++	__mkcgo__dlsym(RAND_bytes)
++}
++
++void __mkcgo_unload_() {
++	_g_BN_bin2bn = NULL;
++	_g_BN_bn2binpad = NULL;
++	_g_BN_bn2lebinpad = NULL;
++	_g_BN_clear = NULL;
++	_g_BN_clear_free = NULL;
++	_g_BN_free = NULL;
++	_g_BN_lebin2bn = NULL;
++	_g_BN_new = NULL;
++	_g_BN_num_bits = NULL;
++	_g_CRYPTO_free = NULL;
++	_g_CRYPTO_malloc = NULL;
++	_g_EC_GROUP_free = NULL;
++	_g_EC_GROUP_new_by_curve_name = NULL;
++	_g_EC_POINT_free = NULL;
++	_g_EC_POINT_mul = NULL;
++	_g_EC_POINT_new = NULL;
++	_g_EC_POINT_oct2point = NULL;
++	_g_EC_POINT_point2oct = NULL;
++	_g_ERR_clear_error = NULL;
++	_g_ERR_error_string_n = NULL;
++	_g_EVP_CIPHER_CTX_ctrl = NULL;
++	_g_EVP_CIPHER_CTX_free = NULL;
++	_g_EVP_CIPHER_CTX_new = NULL;
++	_g_EVP_CIPHER_CTX_set_key_length = NULL;
++	_g_EVP_CIPHER_CTX_set_padding = NULL;
++	_g_EVP_CipherInit_ex = NULL;
++	_g_EVP_CipherUpdate = NULL;
++	_g_EVP_DecryptFinal_ex = NULL;
++	_g_EVP_DecryptInit_ex = NULL;
++	_g_EVP_DecryptUpdate = NULL;
++	_g_EVP_Digest = NULL;
++	_g_EVP_DigestFinal_ex = NULL;
++	_g_EVP_DigestInit = NULL;
++	_g_EVP_DigestInit_ex = NULL;
++	_g_EVP_DigestSignFinal = NULL;
++	_g_EVP_DigestSignInit = NULL;
++	_g_EVP_DigestUpdate = NULL;
++	_g_EVP_DigestVerifyFinal = NULL;
++	_g_EVP_DigestVerifyInit = NULL;
++	_g_EVP_EncryptFinal_ex = NULL;
++	_g_EVP_EncryptInit_ex = NULL;
++	_g_EVP_EncryptUpdate = NULL;
++	_g_EVP_MD_CTX_copy = NULL;
++	_g_EVP_MD_CTX_copy_ex = NULL;
++	_g_EVP_MD_CTX_free = NULL;
++	_g_EVP_MD_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_ctrl = NULL;
++	_g_EVP_PKEY_CTX_free = NULL;
++	_g_EVP_PKEY_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_new_id = NULL;
++	_g_EVP_PKEY_decrypt = NULL;
++	_g_EVP_PKEY_decrypt_init = NULL;
++	_g_EVP_PKEY_derive = NULL;
++	_g_EVP_PKEY_derive_init = NULL;
++	_g_EVP_PKEY_derive_set_peer = NULL;
++	_g_EVP_PKEY_encrypt = NULL;
++	_g_EVP_PKEY_encrypt_init = NULL;
++	_g_EVP_PKEY_free = NULL;
++	_g_EVP_PKEY_keygen = NULL;
++	_g_EVP_PKEY_keygen_init = NULL;
++	_g_EVP_PKEY_new = NULL;
++	_g_EVP_PKEY_paramgen = NULL;
++	_g_EVP_PKEY_paramgen_init = NULL;
++	_g_EVP_PKEY_sign = NULL;
++	_g_EVP_PKEY_sign_init = NULL;
++	_g_EVP_PKEY_verify = NULL;
++	_g_EVP_PKEY_verify_init = NULL;
++	_g_EVP_aes_128_cbc = NULL;
++	_g_EVP_aes_128_ctr = NULL;
++	_g_EVP_aes_128_ecb = NULL;
++	_g_EVP_aes_128_gcm = NULL;
++	_g_EVP_aes_192_cbc = NULL;
++	_g_EVP_aes_192_ctr = NULL;
++	_g_EVP_aes_192_ecb = NULL;
++	_g_EVP_aes_192_gcm = NULL;
++	_g_EVP_aes_256_cbc = NULL;
++	_g_EVP_aes_256_ctr = NULL;
++	_g_EVP_aes_256_ecb = NULL;
++	_g_EVP_aes_256_gcm = NULL;
++	_g_EVP_des_cbc = NULL;
++	_g_EVP_des_ecb = NULL;
++	_g_EVP_des_ede3_cbc = NULL;
++	_g_EVP_des_ede3_ecb = NULL;
++	_g_EVP_md4 = NULL;
++	_g_EVP_md5 = NULL;
++	_g_EVP_md5_sha1 = NULL;
++	_g_EVP_rc4 = NULL;
++	_g_EVP_ripemd160 = NULL;
++	_g_EVP_sha1 = NULL;
++	_g_EVP_sha224 = NULL;
++	_g_EVP_sha256 = NULL;
++	_g_EVP_sha384 = NULL;
++	_g_EVP_sha512 = NULL;
++	_g_OBJ_nid2sn = NULL;
++	_g_OPENSSL_init = NULL;
++	_g_OPENSSL_init_crypto = NULL;
++	_g_OpenSSL_version = NULL;
++	_g_PKCS5_PBKDF2_HMAC = NULL;
++	_g_RAND_bytes = NULL;
++}
++
++void __mkcgo_load_111(void* handle) {
++	__mkcgo__dlsym(EVP_DigestSign)
++	__mkcgo__dlsym(EVP_DigestVerify)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
++	__mkcgo__dlsym(EVP_sha3_224)
++	__mkcgo__dlsym(EVP_sha3_256)
++	__mkcgo__dlsym(EVP_sha3_384)
++	__mkcgo__dlsym(EVP_sha3_512)
++	__mkcgo__dlsym(EVP_sha512_224)
++	__mkcgo__dlsym(EVP_sha512_256)
++}
++
++void __mkcgo_unload_111() {
++	_g_EVP_DigestSign = NULL;
++	_g_EVP_DigestVerify = NULL;
++	_g_EVP_PKEY_get_raw_private_key = NULL;
++	_g_EVP_PKEY_get_raw_public_key = NULL;
++	_g_EVP_PKEY_new_raw_private_key = NULL;
++	_g_EVP_PKEY_new_raw_public_key = NULL;
++	_g_EVP_sha3_224 = NULL;
++	_g_EVP_sha3_256 = NULL;
++	_g_EVP_sha3_384 = NULL;
++	_g_EVP_sha3_512 = NULL;
++	_g_EVP_sha512_224 = NULL;
++	_g_EVP_sha512_256 = NULL;
++}
++
++void __mkcgo_load_3(void* handle) {
++	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
++	__mkcgo__dlsym(ERR_get_error_all)
++	__mkcgo__dlsym(EVP_CIPHER_fetch)
++	__mkcgo__dlsym(EVP_CIPHER_get0_name)
++	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_free)
++	__mkcgo__dlsym(EVP_KDF_CTX_get_kdf_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_new)
++	__mkcgo__dlsym(EVP_KDF_CTX_set_params)
++	__mkcgo__dlsym(EVP_KDF_derive)
++	__mkcgo__dlsym(EVP_KDF_fetch)
++	__mkcgo__dlsym(EVP_KDF_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_dup)
++	__mkcgo__dlsym(EVP_MAC_CTX_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_new)
++	__mkcgo__dlsym(EVP_MAC_CTX_set_params)
++	__mkcgo__dlsym(EVP_MAC_fetch)
++	__mkcgo__dlsym(EVP_MAC_final)
++	__mkcgo__dlsym(EVP_MAC_init)
++	__mkcgo__dlsym(EVP_MAC_update)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_name)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_MD_get_block_size)
++	__mkcgo__dlsym(EVP_MD_get_size)
++	__mkcgo__dlsym(EVP_MD_get_type)
++	__mkcgo__dlsym(EVP_PKEY_CTX_add1_hkdf_info)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_from_pkey)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set0_rsa_oaep_label)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_key)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
++	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
++	__mkcgo__dlsym(EVP_PKEY_fromdata)
++	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
++	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
++	__mkcgo__dlsym(EVP_PKEY_get_bits)
++	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
++	__mkcgo__dlsym(EVP_PKEY_get_size)
++	__mkcgo__dlsym(EVP_PKEY_private_check)
++	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
++	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
++	__mkcgo__dlsym(EVP_PKEY_up_ref)
++	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
++	__mkcgo__dlsym(EVP_SIGNATURE_free)
++	__mkcgo__dlsym(EVP_default_properties_enable_fips)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_free)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_new)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_BN)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_int32)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_octet_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
++	__mkcgo__dlsym(OSSL_PARAM_free)
++	__mkcgo__dlsym(OSSL_PROVIDER_available)
++	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
++	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
++}
++
++void __mkcgo_unload_3() {
++	_g_EC_POINT_set_affine_coordinates = NULL;
++	_g_ERR_get_error_all = NULL;
++	_g_EVP_CIPHER_fetch = NULL;
++	_g_EVP_CIPHER_get0_name = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_KDF_CTX_free = NULL;
++	_g_EVP_KDF_CTX_get_kdf_size = NULL;
++	_g_EVP_KDF_CTX_new = NULL;
++	_g_EVP_KDF_CTX_set_params = NULL;
++	_g_EVP_KDF_derive = NULL;
++	_g_EVP_KDF_fetch = NULL;
++	_g_EVP_KDF_free = NULL;
++	_g_EVP_MAC_CTX_dup = NULL;
++	_g_EVP_MAC_CTX_free = NULL;
++	_g_EVP_MAC_CTX_new = NULL;
++	_g_EVP_MAC_CTX_set_params = NULL;
++	_g_EVP_MAC_fetch = NULL;
++	_g_EVP_MAC_final = NULL;
++	_g_EVP_MAC_init = NULL;
++	_g_EVP_MAC_update = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_name = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_MD_get_type = NULL;
++	_g_EVP_PKEY_CTX_add1_hkdf_info = NULL;
++	_g_EVP_PKEY_CTX_new_from_pkey = NULL;
++	_g_EVP_PKEY_CTX_set0_rsa_oaep_label = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_key = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
++	_g_EVP_PKEY_Q_keygen = NULL;
++	_g_EVP_PKEY_fromdata = NULL;
++	_g_EVP_PKEY_fromdata_init = NULL;
++	_g_EVP_PKEY_get1_encoded_public_key = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_bn_param = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_private_check = NULL;
++	_g_EVP_PKEY_public_check_quick = NULL;
++	_g_EVP_PKEY_set1_encoded_public_key = NULL;
++	_g_EVP_PKEY_up_ref = NULL;
++	_g_EVP_SIGNATURE_fetch = NULL;
++	_g_EVP_SIGNATURE_free = NULL;
++	_g_EVP_default_properties_enable_fips = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++	_g_OSSL_PARAM_BLD_free = NULL;
++	_g_OSSL_PARAM_BLD_new = NULL;
++	_g_OSSL_PARAM_BLD_push_BN = NULL;
++	_g_OSSL_PARAM_BLD_push_int32 = NULL;
++	_g_OSSL_PARAM_BLD_push_octet_string = NULL;
++	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
++	_g_OSSL_PARAM_BLD_to_param = NULL;
++	_g_OSSL_PARAM_free = NULL;
++	_g_OSSL_PROVIDER_available = NULL;
++	_g_OSSL_PROVIDER_get0_name = NULL;
++	_g_OSSL_PROVIDER_try_load = NULL;
++}
++
++void __mkcgo_load_init_1(void* handle) {
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++}
++
++void __mkcgo_unload_init_1() {
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++}
++
++void __mkcgo_load_init_3(void* handle) {
++	__mkcgo__dlsym(ERR_clear_error)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++}
++
++void __mkcgo_unload_init_3() {
++	_g_ERR_clear_error = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++}
++
++void __mkcgo_load_legacy_1(void* handle) {
++	__mkcgo__dlsym(DSA_free)
++	__mkcgo__dlsym(DSA_generate_key)
++	__mkcgo__dlsym(DSA_get0_key)
++	__mkcgo__dlsym(DSA_get0_pqg)
++	__mkcgo__dlsym(DSA_new)
++	__mkcgo__dlsym(DSA_set0_key)
++	__mkcgo__dlsym(DSA_set0_pqg)
++	__mkcgo__dlsym(EC_KEY_check_key)
++	__mkcgo__dlsym(EC_KEY_free)
++	__mkcgo__dlsym(EC_KEY_get0_group)
++	__mkcgo__dlsym(EC_KEY_get0_private_key)
++	__mkcgo__dlsym(EC_KEY_get0_public_key)
++	__mkcgo__dlsym(EC_KEY_new_by_curve_name)
++	__mkcgo__dlsym(EC_KEY_set_private_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
++	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
++	__mkcgo__dlsym(ERR_get_error_line)
++	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
++	__mkcgo__dlsym(EVP_PKEY_assign)
++	__mkcgo__dlsym(EVP_PKEY_get0_DSA)
++	__mkcgo__dlsym(EVP_PKEY_get0_EC_KEY)
++	__mkcgo__dlsym(EVP_PKEY_get1_RSA)
++	__mkcgo__dlsym2(EVP_PKEY_get_bits, EVP_PKEY_bits)
++	__mkcgo__dlsym2(EVP_PKEY_get_size, EVP_PKEY_size)
++	__mkcgo__dlsym(EVP_PKEY_set1_EC_KEY)
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++	__mkcgo__dlsym(HMAC_CTX_copy)
++	__mkcgo__dlsym(HMAC_CTX_free)
++	__mkcgo__dlsym(HMAC_CTX_new)
++	__mkcgo__dlsym(HMAC_Final)
++	__mkcgo__dlsym(HMAC_Init_ex)
++	__mkcgo__dlsym(HMAC_Update)
++	__mkcgo__dlsym(RSA_free)
++	__mkcgo__dlsym(RSA_get0_crt_params)
++	__mkcgo__dlsym(RSA_get0_factors)
++	__mkcgo__dlsym(RSA_get0_key)
++	__mkcgo__dlsym(RSA_new)
++	__mkcgo__dlsym(RSA_set0_crt_params)
++	__mkcgo__dlsym(RSA_set0_factors)
++	__mkcgo__dlsym(RSA_set0_key)
++}
++
++void __mkcgo_unload_legacy_1() {
++	_g_DSA_free = NULL;
++	_g_DSA_generate_key = NULL;
++	_g_DSA_get0_key = NULL;
++	_g_DSA_get0_pqg = NULL;
++	_g_DSA_new = NULL;
++	_g_DSA_set0_key = NULL;
++	_g_DSA_set0_pqg = NULL;
++	_g_EC_KEY_check_key = NULL;
++	_g_EC_KEY_free = NULL;
++	_g_EC_KEY_get0_group = NULL;
++	_g_EC_KEY_get0_private_key = NULL;
++	_g_EC_KEY_get0_public_key = NULL;
++	_g_EC_KEY_new_by_curve_name = NULL;
++	_g_EC_KEY_set_private_key = NULL;
++	_g_EC_KEY_set_public_key = NULL;
++	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
++	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
++	_g_ERR_get_error_line = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_PKEY_assign = NULL;
++	_g_EVP_PKEY_get0_DSA = NULL;
++	_g_EVP_PKEY_get0_EC_KEY = NULL;
++	_g_EVP_PKEY_get1_RSA = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_set1_EC_KEY = NULL;
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++	_g_HMAC_CTX_copy = NULL;
++	_g_HMAC_CTX_free = NULL;
++	_g_HMAC_CTX_new = NULL;
++	_g_HMAC_Final = NULL;
++	_g_HMAC_Init_ex = NULL;
++	_g_HMAC_Update = NULL;
++	_g_RSA_free = NULL;
++	_g_RSA_get0_crt_params = NULL;
++	_g_RSA_get0_factors = NULL;
++	_g_RSA_get0_key = NULL;
++	_g_RSA_new = NULL;
++	_g_RSA_set0_crt_params = NULL;
++	_g_RSA_set0_factors = NULL;
++	_g_RSA_set0_key = NULL;
++}
++
++void __mkcgo_load_version(void* handle) {
++	__mkcgo__dlsym_nocheck(OPENSSL_version_major, OPENSSL_version_major)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_minor, OPENSSL_version_minor)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_patch, OPENSSL_version_patch)
++	__mkcgo__dlsym_nocheck(OpenSSL_version_num, OpenSSL_version_num)
++}
++
++void __mkcgo_unload_version() {
++	_g_OPENSSL_version_major = NULL;
++	_g_OPENSSL_version_minor = NULL;
++	_g_OPENSSL_version_patch = NULL;
++	_g_OpenSSL_version_num = NULL;
++}
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func utoa(n uint) string {
-+	return strconv.FormatUint(uint64(n), 10)
++void _mkcgo_BN_clear(_BIGNUM_PTR _arg0) {
++	_g_BN_clear(_arg0);
 +}
 +
-+func errUnsupportedVersion() error {
-+	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
++void _mkcgo_BN_clear_free(_BIGNUM_PTR _arg0) {
++	_g_BN_clear_free(_arg0);
 +}
 +
-+// checkMajorVersion panics if the current major version is not expected.
-+func checkMajorVersion(expected uint) {
-+	if vMajor != expected {
-+		panic("openssl: incorrect major version (" + strconv.Itoa(int(vMajor)) + "), expected " + strconv.Itoa(int(expected)))
-+	}
++void _mkcgo_BN_free(_BIGNUM_PTR _arg0) {
++	_g_BN_free(_arg0);
 +}
 +
-+type fail string
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
++_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_BIGNUM_PTR _ret = _g_BN_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// VersionText returns the version text of the OpenSSL currently loaded.
-+func VersionText() string {
-+	return C.GoString(C.go_openssl_OpenSSL_version(0))
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR _arg0) {
++	return _g_BN_num_bits(_arg0);
 +}
 +
-+var (
-+	providerNameFips    = C.CString("fips")
-+	providerNameDefault = C.CString("default")
-+	propFIPS            = C.CString("fips=yes")
-+	propNoFIPS          = C.CString("-fips")
++void _mkcgo_CRYPTO_free(void* _arg0, const char* _arg1, int _arg2) {
++	_g_CRYPTO_free(_arg0, _arg1, _arg2);
++}
 +
-+	algorithmSHA256 = C.CString("SHA2-256")
-+)
++void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// FIPS returns true if OpenSSL is running in FIPS mode and there is
-+// a provider available that supports FIPS. It returns false otherwise.
-+func FIPS() bool {
-+	switch vMajor {
-+	case 1:
-+		return C.go_openssl_FIPS_mode() == 1
-+	case 3:
-+		// Check if the default properties contain `fips=1`.
-+		if C.go_openssl_EVP_default_properties_is_fips_enabled(nil) != 1 {
-+			// Note that it is still possible that the provider used by default is FIPS-compliant,
-+			// but that wouldn't be a system or user requirement.
-+			return false
-+		}
-+		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
-+		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
-+		//
-+		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
-+		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
-+		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
-+		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
-+		return proveSHA256(nil)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
++void _mkcgo_DSA_free(_DSA_PTR _arg0) {
++	_g_DSA_free(_arg0);
 +}
 +
-+// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
-+// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
-+// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
-+// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
-+// which is FIPS-capable.
-+//
-+// Considerations:
-+//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
-+//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
-+//     the default properties contain `fips=yes`.
-+//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
-+//   - When using OpenSSL 1, Will always return the same value as [FIPS].
-+//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
-+//     some heuristics that should be treated as an implementation detail that may change in the future.
-+func FIPSCapable() bool {
-+	if FIPS() {
-+		return true
-+	}
-+	if vMajor == 3 {
-+		// Load the provider with and without the `fips=yes` query.
-+		// If the providers are the same, then the default provider is FIPS-capable.
-+		provFIPS := sha256Provider(propFIPS)
-+		if provFIPS == nil {
-+			return false
-+		}
-+		provDefault := sha256Provider(nil)
-+		return provFIPS == provDefault
-+	}
-+	return false
++int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_DSA_generate_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// isProviderAvailable checks if the provider with the given name is available.
-+// This function is used in export_test.go, but must be defined here as test files can't access C functions.
-+func isProviderAvailable(name string) bool {
-+	if vMajor == 1 {
-+		return false
-+	}
-+	providerName := C.CString(name)
-+	defer C.free(unsafe.Pointer(providerName))
-+	return C.go_openssl_OSSL_PROVIDER_available(nil, providerName) == 1
++void _mkcgo_DSA_get0_key(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_DSA_get0_key(_arg0, _arg1, _arg2);
 +}
 +
-+// SetFIPS enables or disables FIPS mode.
-+//
-+// For OpenSSL 3, if there is no provider available that supports FIPS mode,
-+// SetFIPS will try to load a built-in provider that supports FIPS mode.
-+func SetFIPS(enable bool) error {
-+	if FIPS() == enable {
-+		// Already in the desired state.
-+		return nil
-+	}
-+	var mode C.int
-+	if enable {
-+		mode = C.int(1)
-+	} else {
-+		mode = C.int(0)
-+	}
-+	switch vMajor {
-+	case 1:
-+		if C.go_openssl_FIPS_mode_set(mode) != 1 {
-+			return newOpenSSLError("FIPS_mode_set")
-+		}
-+		return nil
-+	case 3:
-+		var shaProps, provName *C.char
-+		if enable {
-+			shaProps = propFIPS
-+			provName = providerNameFips
-+		} else {
-+			shaProps = propNoFIPS
-+			provName = providerNameDefault
-+		}
-+		if !proveSHA256(shaProps) {
-+			// There is no provider available that supports the desired FIPS mode.
-+			// Try to load the built-in provider associated with the given mode.
-+			if C.go_openssl_OSSL_PROVIDER_try_load(nil, provName, 1) == nil {
-+				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
-+				C.go_openssl_ERR_clear_error()
-+				return errors.New("openssl: FIPS mode not supported by any provider")
-+			}
-+		}
-+		if C.go_openssl_EVP_default_properties_enable_fips(nil, mode) != 1 {
-+			return newOpenSSLError("EVP_default_properties_enable_fips")
-+		}
-+		return nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+// sha256Provider returns the provider for the SHA-256 algorithm
-+// using the given properties.
-+func sha256Provider(props *C.char) C.GO_OSSL_PROVIDER_PTR {
-+	md := C.go_openssl_EVP_MD_fetch(nil, algorithmSHA256, props)
-+	if md == nil {
-+		C.go_openssl_ERR_clear_error()
-+		return nil
-+	}
-+	defer C.go_openssl_EVP_MD_free(md)
-+	return C.go_openssl_EVP_MD_get0_provider(md)
++_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_DSA_PTR _ret = _g_DSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// proveSHA256 checks if the SHA-256 algorithm is available
-+// using the given properties.
-+func proveSHA256(props *C.char) bool {
-+	return sha256Provider(props) != nil
++int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// noescape hides a pointer from escape analysis. noescape is
-+// the identity function but escape analysis doesn't think the
-+// output depends on the input. noescape is inlined and currently
-+// compiles down to zero instructions.
-+// USE CAREFULLY!
-+//
-+//go:nosplit
-+func noescape(p unsafe.Pointer) unsafe.Pointer {
-+	x := uintptr(p)
-+	return unsafe.Pointer(x ^ 0)
++int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+var zero byte
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR _arg0) {
++	_g_EC_GROUP_free(_arg0);
++}
 +
-+// addr converts p to its base addr, including a noescape along the way.
-+// If p is nil, addr returns a non-nil pointer, so that the result can always
-+// be dereferenced.
-+//
-+//go:nosplit
-+func addr(p []byte) *byte {
-+	if len(p) == 0 {
-+		return &zero
-+	}
-+	return (*byte)(noescape(unsafe.Pointer(&p[0])))
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func base(b []byte) *C.uchar {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*C.uchar)(unsafe.Pointer(&b[0]))
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_KEY_check_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func sbase(b []byte) *C.char {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*C.char)(unsafe.Pointer(&b[0]))
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR _arg0) {
++	_g_EC_KEY_free(_arg0);
 +}
 +
-+func newOpenSSLError(msg string) error {
-+	var b strings.Builder
-+	b.WriteString(msg)
-+	b.WriteString("\nopenssl error(s):")
-+	for {
-+		var (
-+			e    C.ulong
-+			file *C.char
-+			line C.int
-+		)
-+		switch vMajor {
-+		case 1:
-+			e = C.go_openssl_ERR_get_error_line(&file, &line)
-+		case 3:
-+			e = C.go_openssl_ERR_get_error_all(&file, &line, nil, nil, nil)
-+		default:
-+			panic(errUnsupportedVersion())
-+		}
-+		if e == 0 {
-+			break
-+		}
-+		b.WriteByte('\n')
-+		var buf [256]byte
-+		C.go_openssl_ERR_error_string_n(e, (*C.char)(unsafe.Pointer(&buf[0])), C.size_t(len(buf)))
-+		b.WriteString(string(buf[:]) + "\n\t" + C.GoString(file) + ":" + strconv.Itoa(int(line)))
-+	}
-+	return errors.New(b.String())
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_group(_arg0);
 +}
 +
-+var unknownFile = "<go code>\000"
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_private_key(_arg0);
++}
 +
-+// caller reports file and line number information about function invocations on
-+// the calling goroutine's stack, in a form suitable for passing to C code.
-+// The argument skip is the number of stack frames to ascend, with 0 identifying
-+// the caller of caller. The return values report the file name and line number
-+// within the file of the corresponding call. The returned file is a C string
-+// with static storage duration.
-+func caller(skip int) (file *C.char, line C.int) {
-+	_, f, l, ok := runtime.Caller(skip + 1)
-+	if !ok {
-+		f = unknownFile
-+	}
-+	// The underlying bytes of the file string are null-terminated rodata with
-+	// static lifetimes, so can be safely passed to C without worrying about
-+	// leaking memory or use-after-free.
-+	return (*C.char)(noescape(unsafe.Pointer(unsafe.StringData(f)))), C.int(l)
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_public_key(_arg0);
 +}
 +
-+// cryptoMalloc allocates n bytes of memory on the OpenSSL heap, which may be
-+// different from the heap which C.malloc allocates on. The allocated object
-+// must be freed using cryptoFree. cryptoMalloc is equivalent to the
-+// OPENSSL_malloc macro.
-+//
-+// Like C.malloc, this function is guaranteed to never return nil. If OpenSSL's
-+// malloc indicates out of memory, it crashes the program.
-+//
-+// Only objects which the OpenSSL library will take ownership of (i.e. will be
-+// freed by OPENSSL_free / CRYPTO_free) need to be allocated on the OpenSSL
-+// heap.
-+func cryptoMalloc(n int) unsafe.Pointer {
-+	file, line := caller(1)
-+	var p unsafe.Pointer
-+	if vMajor == 1 && vMinor == 0 {
-+		p = C.go_openssl_CRYPTO_malloc_legacy102(C.int(n), file, line)
-+	} else {
-+		p = C.go_openssl_CRYPTO_malloc(C.size_t(n), file, line)
-+	}
-+	if p == nil {
-+		// Un-recover()-ably crash the program in the same manner as the
-+		// C.malloc() wrapper function.
-+		runtime_throw("openssl: CRYPTO_malloc failed")
-+	}
-+	return p
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// cryptoFree frees an object allocated on the OpenSSL heap, which may be
-+// different from the heap which C.malloc allocates on. cryptoFree is equivalent
-+// to the OPENSSL_free macro.
-+func cryptoFree(p unsafe.Pointer) {
-+	if vMajor == 1 && vMinor == 0 {
-+		C.go_openssl_CRYPTO_free_legacy102(p)
-+		return
-+	}
-+	file, line := caller(1)
-+	C.go_openssl_CRYPTO_free(p, file, line)
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+const wordBytes = bits.UintSize / 8
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// Reverse each limb of z.
-+func (z BigInt) byteSwap() {
-+	for i, d := range z {
-+		var n uint = 0
-+		for j := range wordBytes {
-+			n |= uint(byte(d)) << (8 * (wordBytes - j - 1))
-+			d >>= 8
-+		}
-+		z[i] = n
-+	}
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func wbase(b BigInt) *C.uchar {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*C.uchar)(unsafe.Pointer(&b[0]))
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR _arg0) {
++	_g_EC_POINT_free(_arg0);
 +}
 +
-+// bignum_st_1_0_2 is bignum_st (BIGNUM) memory layout in OpenSSL 1.0.2.
-+type bignum_st_1_0_2 struct {
-+	d     unsafe.Pointer // Pointer to an array of BN_ULONG bit chunks
-+	top   C.int          // Index of last used d +1
-+	dmax  C.int
-+	neg   C.int
-+	flags C.int
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func bigToBN(x BigInt) C.GO_BIGNUM_PTR {
-+	if len(x) == 0 {
-+		return nil
-+	}
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	if vMajor == 1 && vMinor == 0 {
-+		// OpenSSL 1.0.x does not export bn_lebin2bn on all platforms,
-+		// so we have to emulate it.
-+		bn := C.go_openssl_BN_new()
-+		if bn == nil {
-+			return nil
-+		}
-+		if C.go_openssl_bn_expand2(bn, C.int(len(x))) == nil {
-+			C.go_openssl_BN_free(bn)
-+			panic(newOpenSSLError("BN_expand2"))
-+		}
-+		// The bytes of a BigInt are laid out in memory in the same order as a
-+		// BIGNUM, regardless of host endianness.
-+		bns := (*bignum_st_1_0_2)(unsafe.Pointer(bn))
-+		d := unsafe.Slice((*uint)(bns.d), len(x))
-+		bns.top = C.int(copy(d, x))
-+		return bn
-+	}
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	if nativeEndian == binary.BigEndian {
-+		z := make(BigInt, len(x))
-+		copy(z, x)
-+		z.byteSwap()
-+		x = z
-+	}
-+	// Limbs are always ordered in LSB first, so we can safely apply
-+	// BN_lebin2bn regardless of host endianness.
-+	return C.go_openssl_BN_lebin2bn(wbase(x), C.int(len(x)*wordBytes), nil)
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func bnToBig(bn C.GO_BIGNUM_PTR) BigInt {
-+	if bn == nil {
-+		return nil
-+	}
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	if vMajor == 1 && vMinor == 0 {
-+		// OpenSSL 1.0.x does not export bn_bn2lebinpad on all platforms,
-+		// so we have to emulate it.
-+		bns := (*bignum_st_1_0_2)(unsafe.Pointer(bn))
-+		d := unsafe.Slice((*uint)(bns.d), bns.top)
-+		x := make(BigInt, len(d))
-+		copy(x, d)
-+		return x
-+	}
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	// Limbs are always ordered in LSB first, so we can safely apply
-+	// BN_bn2lebinpad regardless of host endianness.
-+	x := make(BigInt, C.go_openssl_BN_num_bits(bn))
-+	if C.go_openssl_BN_bn2lebinpad(bn, wbase(x), C.int(len(x)*wordBytes)) == 0 {
-+		panic("openssl: bignum conversion failed")
-+	}
-+	if nativeEndian == binary.BigEndian {
-+		x.byteSwap()
-+	}
-+	return x
++void _mkcgo_ERR_clear_error(void) {
++	_g_ERR_clear_error();
 +}
 +
-+func bnNumBytes(bn C.GO_BIGNUM_PTR) int {
-+	return (int(C.go_openssl_BN_num_bits(bn)) + 7) / 8
++void _mkcgo_ERR_error_string_n(unsigned long _arg0, char* _arg1, size_t _arg2) {
++	_g_ERR_error_string_n(_arg0, _arg1, _arg2);
 +}
 +
-+// bnToBinPad converts the absolute value of bn into big-endian form and stores
-+// it at to, padding with zeroes if necessary. If len(to) is not large enough to
-+// hold the result, an error is returned.
-+func bnToBinPad(bn C.GO_BIGNUM_PTR, to []byte) error {
-+	if vMajor == 1 && vMinor == 0 {
-+		// OpenSSL 1.0.x does not export bn_bn2binpad on all platforms,
-+		// so we have to emulate it.
-+		n := bnNumBytes(bn)
-+		pad := len(to) - n
-+		if pad < 0 {
-+			return errors.New("openssl: destination buffer too small")
-+		}
-+		for i := range pad {
-+			to[i] = 0
-+		}
-+		if int(C.go_openssl_BN_bn2bin(bn, base(to[pad:]))) != n {
-+			return errors.New("openssl: BN_bn2bin short write")
-+		}
-+		return nil
-+	}
++unsigned long _mkcgo_ERR_get_error_all(const char** _arg0, int* _arg1, const char** _arg2, const char** _arg3, int* _arg4) {
++	return _g_ERR_get_error_all(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
 +
-+	if C.go_openssl_BN_bn2binpad(bn, base(to), C.int(len(to))) < 0 {
-+		return newOpenSSLError("BN_bn2binpad")
-+	}
-+	return nil
++unsigned long _mkcgo_ERR_get_error_line(const char** _arg0, int* _arg1) {
++	return _g_ERR_get_error_line(_arg0, _arg1);
 +}
 +
-+func CheckLeaks() {
-+	C.go_openssl_do_leak_check()
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// versionAtOrAbove returns true when
-+// (vMajor, vMinor, vPatch) >= (major, minor, patch),
-+// compared lexicographically.
-+func versionAtOrAbove(major, minor, patch uint) bool {
-+	return vMajor > major || (vMajor == major && vMinor > minor) || (vMajor == major && vMinor == minor && vPatch >= patch)
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR _arg0) {
++	_g_EVP_CIPHER_CTX_free(_arg0);
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-new file mode 100644
-index 00000000000000..fa24a8cd673ed0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-@@ -0,0 +1,210 @@
-+//go:build !cmd_go_bootstrap
 +
-+package openssl
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import (
-+	"runtime"
-+	"unsafe"
-+)
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+var (
-+	// KDF parameters
-+	_OSSL_KDF_PARAM_DIGEST = C.CString("digest")
-+	_OSSL_KDF_PARAM_SECRET = C.CString("secret")
-+	_OSSL_KDF_PARAM_SEED   = C.CString("seed")
-+	_OSSL_KDF_PARAM_KEY    = C.CString("key")
-+	_OSSL_KDF_PARAM_INFO   = C.CString("info")
-+	_OSSL_KDF_PARAM_SALT   = C.CString("salt")
-+	_OSSL_KDF_PARAM_MODE   = C.CString("mode")
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	// PKEY parameters
-+	_OSSL_PKEY_PARAM_PUB_KEY          = C.CString("pub")
-+	_OSSL_PKEY_PARAM_PRIV_KEY         = C.CString("priv")
-+	_OSSL_PKEY_PARAM_GROUP_NAME       = C.CString("group")
-+	_OSSL_PKEY_PARAM_EC_PUB_X         = C.CString("qx")
-+	_OSSL_PKEY_PARAM_EC_PUB_Y         = C.CString("qy")
-+	_OSSL_PKEY_PARAM_FFC_PBITS        = C.CString("pbits")
-+	_OSSL_PKEY_PARAM_FFC_QBITS        = C.CString("qbits")
-+	_OSSL_PKEY_PARAM_RSA_N            = C.CString("n")
-+	_OSSL_PKEY_PARAM_RSA_E            = C.CString("e")
-+	_OSSL_PKEY_PARAM_RSA_D            = C.CString("d")
-+	_OSSL_PKEY_PARAM_FFC_P            = C.CString("p")
-+	_OSSL_PKEY_PARAM_FFC_Q            = C.CString("q")
-+	_OSSL_PKEY_PARAM_FFC_G            = C.CString("g")
-+	_OSSL_PKEY_PARAM_RSA_FACTOR1      = C.CString("rsa-factor1")
-+	_OSSL_PKEY_PARAM_RSA_FACTOR2      = C.CString("rsa-factor2")
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT1    = C.CString("rsa-exponent1")
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT2    = C.CString("rsa-exponent2")
-+	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1 = C.CString("rsa-coefficient1")
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	// MAC parameters
-+	_OSSL_MAC_PARAM_DIGEST = C.CString("digest")
-+)
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get0_name(_arg0);
++}
 +
-+type bnParam struct {
-+	value   C.GO_BIGNUM_PTR
-+	private bool
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get_block_size(_arg0);
 +}
 +
-+// paramBuilder is a helper for building OSSL_PARAMs.
-+// If an error occurs when adding a new parameter,
-+// subsequent calls to add parameters are ignored
-+// and build() will return the error.
-+type paramBuilder struct {
-+	bld      C.GO_OSSL_PARAM_BLD_PTR
-+	pinner   runtime.Pinner
-+	bnToFree []bnParam
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	err error
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// newParamBuilder creates a new paramBuilder.
-+func newParamBuilder() (*paramBuilder, error) {
-+	bld := C.go_openssl_OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_new")
-+	}
-+	pb := &paramBuilder{
-+		bld:      bld,
-+		bnToFree: make([]bnParam, 0, 8), // the maximum known number of BIGNUMs to free are 8 for RSA
-+	}
-+	runtime.SetFinalizer(pb, (*paramBuilder).finalize)
-+	return pb, nil
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// finalize frees the builder.
-+func (b *paramBuilder) finalize() {
-+	if b.bld != nil {
-+		b.pinner.Unpin()
-+		for _, bn := range b.bnToFree {
-+			if bn.private {
-+				C.go_openssl_BN_clear_free(bn.value)
-+			} else {
-+				C.go_openssl_BN_free(bn.value)
-+			}
-+		}
-+		C.go_openssl_OSSL_PARAM_BLD_free(b.bld)
-+		b.bld = nil
-+	}
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// check is used internally to enforce invariants and should not be called by users of paramBuilder.
-+// Returns true if it's ok to add parameters to the builder or build it.
-+// Returns false if there has been an error while adding a parameter.
-+// Panics if the paramBuilder has been freed, e.g. if it has already been built.
-+func (b *paramBuilder) check() bool {
-+	if b.err != nil {
-+		return false
-+	}
-+	if b.bld == nil {
-+		panic("openssl: paramBuilder has been freed")
-+	}
-+	return true
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// build creates an OSSL_PARAM from the builder.
-+// The returned OSSL_PARAM must be freed with OSSL_PARAM_free.
-+// If an error occurred while adding parameters, the error is returned
-+// and the OSSL_PARAM is nil. Once build() is called, the builder is finalized
-+// and cannot be reused.
-+func (b *paramBuilder) build() (C.GO_OSSL_PARAM_PTR, error) {
-+	defer b.finalize()
-+	if !b.check() {
-+		return nil, b.err
-+	}
-+	param := C.go_openssl_OSSL_PARAM_BLD_to_param(b.bld)
-+	if param == nil {
-+		return nil, newOpenSSLError("OSSL_PARAM_BLD_build")
-+	}
-+	return param, nil
++int _mkcgo_EVP_Digest(const void* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addUTF8String adds a NUL-terminated UTF-8 string to the builder.
-+// size should not include the terminating NUL byte. If size is zero, then it will be calculated.
-+func (b *paramBuilder) addUTF8String(name *C.char, value *C.char, size C.size_t) {
-+	if !b.check() {
-+		return
-+	}
-+	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
-+	if C.go_openssl_OSSL_PARAM_BLD_push_utf8_string(b.bld, name, value, size) != 1 {
-+		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_utf8_string(" + C.GoString(name) + ")")
-+	}
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addOctetString adds an octet string to the builder.
-+// The value is pinned and will be unpinned when the builder is freed.
-+func (b *paramBuilder) addOctetString(name *C.char, value []byte) {
-+	if !b.check() {
-+		return
-+	}
-+	if len(value) != 0 {
-+		b.pinner.Pin(&value[0])
-+	}
-+	if C.go_openssl_OSSL_PARAM_BLD_push_octet_string(b.bld, name, unsafe.Pointer(sbase(value)), C.size_t(len(value))) != 1 {
-+		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_octet_string(" + C.GoString(name) + ")")
-+	}
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addInt32 adds an int32 to the builder.
-+func (b *paramBuilder) addInt32(name *C.char, value int32) {
-+	if !b.check() {
-+		return
-+	}
-+	if C.go_openssl_OSSL_PARAM_BLD_push_int32(b.bld, name, C.int32_t(value)) != 1 {
-+		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_int32(" + C.GoString(name) + ")")
-+	}
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addBN adds a GO_BIGNUM_PTR to the builder.
-+func (b *paramBuilder) addBN(name *C.char, value C.GO_BIGNUM_PTR) {
-+	if !b.check() {
-+		return
-+	}
-+	if C.go_openssl_OSSL_PARAM_BLD_push_BN(b.bld, name, value) != 1 {
-+		b.err = newOpenSSLError("OSSL_PARAM_BLD_push_BN(" + C.GoString(name) + ")")
-+	}
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addBin adds a byte slice to the builder.
-+// The slice is converted to a BIGNUM using BN_bin2bn and freed when the builder is finalized.
-+// If private is true, the BIGNUM will be cleared with BN_clear_free,
-+// otherwise it will be freed with BN_free.
-+func (b *paramBuilder) addBin(name *C.char, value []byte, private bool) {
-+	if !b.check() {
-+		return
-+	}
-+	if len(value) == 0 {
-+		// Nothing to do.
-+		return
-+	}
-+	bn := C.go_openssl_BN_bin2bn(base(value), C.int(len(value)), nil)
-+	if bn == nil {
-+		b.err = newOpenSSLError("BN_bin2bn")
-+		return
-+	}
-+	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
-+	b.addBN(name, bn)
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// addBigInt adds a BigInt to the builder.
-+// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
-+// If private is true, the BIGNUM will be cleared with BN_clear_free,
-+// otherwise it will be freed with BN_free.
-+func (b *paramBuilder) addBigInt(name *C.char, value BigInt, private bool) {
-+	if !b.check() {
-+		return
-+	}
-+	if len(value) == 0 {
-+		// Nothing to do.
-+		return
-+	}
-+	bn := bigToBN(value)
-+	if bn == nil {
-+		b.err = newOpenSSLError("bigToBN")
-+		return
-+	}
-+	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
-+	b.addBN(name, bn)
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-new file mode 100644
-index 00000000000000..92276c6aadf423
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-@@ -0,0 +1,62 @@
-+//go:build !cmd_go_bootstrap
 +
-+package openssl
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const void* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import (
-+	"errors"
-+	"hash"
-+	"sync"
-+	"unsafe"
-+)
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
-+func SupportsPBKDF2() bool {
-+	switch vMajor {
-+	case 1:
-+		return true
-+	case 3:
-+		_, err := fetchPBKDF2()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// fetchPBKDF2 fetches the PBKDF2 algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchPBKDF2 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	name := C.CString("PBKDF2")
-+	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
-+	C.free(unsafe.Pointer(name))
-+	if kdf == nil {
-+		return nil, newOpenSSLError("EVP_KDF_fetch")
-+	}
-+	return kdf, nil
-+})
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	h, err := hashFuncHash(fh)
-+	if err != nil {
-+		return nil, err
-+	}
-+	md := hashToMD(h)
-+	if md == nil {
-+		return nil, errors.New("unsupported hash function")
-+	}
-+	if len(password) == 0 && vMajor == 1 && vMinor == 0 {
-+		// x/crypto/pbkdf2 supports empty passwords, but OpenSSL 1.0.2
-+		// does not. As a workaround, we pass an "empty" password.
-+		password = make([]byte, C.GO_EVP_MAX_MD_SIZE)
-+	}
-+	out := make([]byte, keyLen)
-+	ok := C.go_openssl_PKCS5_PBKDF2_HMAC(sbase(password), C.int(len(password)), base(salt), C.int(len(salt)), C.int(iter), md, C.int(keyLen), base(out))
-+	if ok != 1 {
-+		return nil, newOpenSSLError("PKCS5_PBKDF2_HMAC")
-+	}
-+	return out, nil
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c b/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
-new file mode 100644
-index 00000000000000..5a948eafdbc6a7
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/port_dsa.c
-@@ -0,0 +1,85 @@
-+// The following is a partial backport of crypto/dsa/dsa_lockl.h
-+// and crypto/dsa/dsa_lib.c, commit cbc8a839959418d8a2c2e3ec6bdf394852c9501e
-+// on the OpenSSL_1_1_0-stable branch. Only pqg and key getters/setters
-+// are backported.
 +
-+#include "goopenssl.h"
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+struct dsa_st
-+{
-+    int _ignored0;
-+    long _ignored1;
-+    int _ignored2;
-+    GO_BIGNUM_PTR p;
-+    GO_BIGNUM_PTR q;
-+    GO_BIGNUM_PTR g;
-+    GO_BIGNUM_PTR pub_key;
-+    GO_BIGNUM_PTR priv_key;
-+    // The following members are not used by our backport,
-+    // so we don't define them here.
-+};
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR _arg0) {
++	_g_EVP_KDF_CTX_free(_arg0);
++}
 +
-+void go_openssl_DSA_get0_pqg_backport(const GO_DSA_PTR dsa,
-+                  GO_BIGNUM_PTR *p, GO_BIGNUM_PTR *q, GO_BIGNUM_PTR *g)
-+{
-+    const struct dsa_st *d = dsa;
-+    if (p != NULL)
-+        *p = d->p;
-+    if (q != NULL)
-+        *q = d->q;
-+    if (g != NULL)
-+        *g = d->g;
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+int go_openssl_DSA_set0_pqg_backport(GO_DSA_PTR dsa,
-+                  GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g)
-+{
-+    struct dsa_st *d = dsa;
-+    if ((d->p == NULL && p == NULL)
-+        || (d->q == NULL && q == NULL)
-+        || (d->g == NULL && g == NULL))
-+        return 0;
-+
-+    if (p != NULL) {
-+        go_openssl_BN_free(d->p);
-+        d->p = p;
-+    }
-+    if (q != NULL) {
-+        go_openssl_BN_free(d->q);
-+        d->q = q;
-+    }
-+    if (g != NULL) {
-+        go_openssl_BN_free(d->g);
-+        d->g = g;
-+    }
-+
-+    return 1;
-+}
-+
-+void go_openssl_DSA_get0_key_backport(const GO_DSA_PTR dsa,
-+                  GO_BIGNUM_PTR *pub_key, GO_BIGNUM_PTR *priv_key)
-+{
-+    const struct dsa_st *d = dsa;
-+    if (pub_key != NULL)
-+        *pub_key = d->pub_key;
-+    if (priv_key != NULL)
-+        *priv_key = d->priv_key;
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+int go_openssl_DSA_set0_key_backport(GO_DSA_PTR dsa, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key)
-+{
-+    struct dsa_st *d = dsa;
-+    if (d->pub_key == NULL && pub_key == NULL)
-+        return 0;
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+    if (pub_key != NULL) {
-+        go_openssl_BN_free(d->pub_key);
-+        d->pub_key = pub_key;
-+    }
-+    if (priv_key != NULL) {
-+        go_openssl_BN_free(d->priv_key);
-+        d->priv_key = priv_key;
-+    }
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+    return 1;
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-\ No newline at end of file
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
-new file mode 100644
-index 00000000000000..9fd709635c3b40
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
-@@ -0,0 +1,20 @@
-+//go:build !cmd_go_bootstrap
 +
-+package openssl
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR _arg0) {
++	_g_EVP_KDF_free(_arg0);
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import "unsafe"
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+type randReader int
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR _arg0) {
++	_g_EVP_MAC_CTX_free(_arg0);
++}
 +
-+func (randReader) Read(b []byte) (int, error) {
-+	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
-+	// We check it even so.
-+	if len(b) > 0 && C.go_openssl_RAND_bytes((*C.uchar)(unsafe.Pointer(&b[0])), C.int(len(b))) == 0 {
-+		return 0, newOpenSSLError("RAND_bytes")
-+	}
-+	return len(b), nil
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+const RandReader = randReader(0)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-new file mode 100644
-index 00000000000000..f1cd3647fb9753
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-@@ -0,0 +1,66 @@
-+//go:build !cmd_go_bootstrap
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+package openssl
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import "runtime"
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// SupportsRC4 returns true if NewRC4Cipher is supported.
-+func SupportsRC4() bool {
-+	// True for stock OpenSSL 1 w/o FIPS.
-+	// False for stock OpenSSL 3 unless the legacy provider is available.
-+	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherRC4, cipherModeNone) != nil
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// A RC4Cipher is an instance of RC4 using a particular key.
-+type RC4Cipher struct {
-+	ctx C.GO_EVP_CIPHER_CTX_PTR
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// NewRC4Cipher creates and returns a new Cipher.
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
-+	ctx, err := newCipherCtx(cipherRC4, cipherModeNone, cipherOpEncrypt, key, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	c := &RC4Cipher{ctx}
-+	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
-+	return c, nil
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MD_CTX_copy(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func (c *RC4Cipher) finalize() {
-+	if c.ctx != nil {
-+		C.go_openssl_EVP_CIPHER_CTX_free(c.ctx)
-+	}
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// Reset zeros the key data and makes the Cipher unusable.
-+func (c *RC4Cipher) Reset() {
-+	if c.ctx != nil {
-+		C.go_openssl_EVP_CIPHER_CTX_free(c.ctx)
-+		c.ctx = nil
-+	}
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
++	_g_EVP_MD_CTX_free(_arg0);
 +}
 +
-+// XORKeyStream sets dst to the result of XORing src with the key stream.
-+// Dst and src must overlap entirely or not at all.
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
-+	if c.ctx == nil || len(src) == 0 {
-+		return
-+	}
-+	if inexactOverlap(dst[:len(src)], src) {
-+		panic("crypto/rc4: invalid buffer overlap")
-+	}
-+	// panic if len(dst) < len(src) with a runtime out of bound error,
-+	// which is what crypto/rc4 does.
-+	_ = dst[len(src)-1]
-+	var outLen C.int
-+	if C.go_openssl_EVP_EncryptUpdate(c.ctx, base(dst), &outLen, base(src), C.int(len(src))) != 1 {
-+		panic("crypto/cipher: EncryptUpdate failed")
-+	}
-+	if int(outLen) != len(src) {
-+		panic("crypto/rc4: src not fully XORed")
-+	}
-+	runtime.KeepAlive(c)
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-new file mode 100644
-index 00000000000000..da5c7636173775
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,408 @@
-+//go:build !cmd_go_bootstrap
 +
-+package openssl
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import (
-+	"crypto"
-+	"crypto/subtle"
-+	"errors"
-+	"hash"
-+	"runtime"
-+	"unsafe"
-+)
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR _arg0) {
++	_g_EVP_MD_free(_arg0);
++}
 +
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+		return nil, nil, nil, nil, nil, nil, nil, nil, e
-+	}
-+	pkey, err := generateEVPPKey(C.GO_EVP_PKEY_RSA, bits, "")
-+	if err != nil {
-+		return bad(err)
-+	}
-+	defer C.go_openssl_EVP_PKEY_free(pkey)
-+	switch vMajor {
-+	case 1:
-+		key := C.go_openssl_EVP_PKEY_get1_RSA(pkey)
-+		if key == nil {
-+			return bad(newOpenSSLError("EVP_PKEY_get1_RSA failed"))
-+		}
-+		defer C.go_openssl_RSA_free(key)
-+		var n, e, d, p, q, dmp1, dmq1, iqmp C.GO_BIGNUM_PTR
-+		if vMinor == 0 {
-+			r := (*rsa_st_1_0_2)(unsafe.Pointer(key))
-+			n, e, d, p, q, dmp1, dmq1, iqmp = r.n, r.e, r.d, r.p, r.q, r.dmp1, r.dmq1, r.iqmp
-+		} else {
-+			C.go_openssl_RSA_get0_key(key, &n, &e, &d)
-+			C.go_openssl_RSA_get0_factors(key, &p, &q)
-+			C.go_openssl_RSA_get0_crt_params(key, &dmp1, &dmq1, &iqmp)
-+		}
-+		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
-+		P, Q = bnToBig(p), bnToBig(q)
-+		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
-+	case 3:
-+		tmp := C.go_openssl_BN_new()
-+		if tmp == nil {
-+			return bad(newOpenSSLError("BN_new failed"))
-+		}
-+		defer func() {
-+			C.go_openssl_BN_clear_free(tmp)
-+		}()
-+		var err error
-+		setBigInt := func(bi *BigInt, param *C.char) bool {
-+			if err != nil {
-+				return false
-+			}
-+			if C.go_openssl_EVP_PKEY_get_bn_param(pkey, param, &tmp) != 1 {
-+				err = newOpenSSLError("EVP_PKEY_get_bn_param failed")
-+				return false
-+			}
-+			*bi = bnToBig(tmp)
-+			C.go_openssl_BN_clear(tmp)
-+			return true
-+		}
-+		if !(setBigInt(&N, _OSSL_PKEY_PARAM_RSA_N) &&
-+			setBigInt(&E, _OSSL_PKEY_PARAM_RSA_E) &&
-+			setBigInt(&D, _OSSL_PKEY_PARAM_RSA_D) &&
-+			setBigInt(&P, _OSSL_PKEY_PARAM_RSA_FACTOR1) &&
-+			setBigInt(&Q, _OSSL_PKEY_PARAM_RSA_FACTOR2) &&
-+			setBigInt(&Dp, _OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
-+			setBigInt(&Dq, _OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
-+			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
-+			return bad(err)
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	return
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_name(_arg0);
 +}
 +
-+type PublicKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_provider(_arg0);
 +}
 +
-+func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
-+	var pkey C.GO_EVP_PKEY_PTR
-+	switch vMajor {
-+	case 1:
-+		key := C.go_openssl_RSA_new()
-+		if key == nil {
-+			return nil, newOpenSSLError("RSA_new failed")
-+		}
-+		if !rsaSetKey(key, n, e, nil) {
-+			return nil, fail("RSA_set0_key")
-+		}
-+		pkey = C.go_openssl_EVP_PKEY_new()
-+		if pkey == nil {
-+			C.go_openssl_RSA_free(key)
-+			return nil, newOpenSSLError("EVP_PKEY_new failed")
-+		}
-+		if C.go_openssl_EVP_PKEY_assign(pkey, C.GO_EVP_PKEY_RSA, (unsafe.Pointer)(key)) != 1 {
-+			C.go_openssl_RSA_free(key)
-+			C.go_openssl_EVP_PKEY_free(pkey)
-+			return nil, newOpenSSLError("EVP_PKEY_assign failed")
-+		}
-+	case 3:
-+		var err error
-+		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	k := &PublicKeyRSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PublicKeyRSA).finalize)
-+	return k, nil
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_block_size(_arg0);
 +}
 +
-+func (k *PublicKeyRSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_size(_arg0);
 +}
 +
-+func (k *PublicKeyRSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
-+	// Because of the finalizer, any time _pkey is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_type(_arg0);
 +}
 +
-+type PrivateKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.GO_EVP_PKEY_PTR
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
-+	var pkey C.GO_EVP_PKEY_PTR
-+	switch vMajor {
-+	case 1:
-+		key := C.go_openssl_RSA_new()
-+		if key == nil {
-+			return nil, newOpenSSLError("RSA_new failed")
-+		}
-+		if !rsaSetKey(key, n, e, d) {
-+			return nil, fail("RSA_set0_key")
-+		}
-+		if p != nil && q != nil {
-+			if !rsaSetFactors(key, p, q) {
-+				return nil, fail("RSA_set0_factors")
-+			}
-+		}
-+		if dp != nil && dq != nil && qinv != nil {
-+			if !rsaSetCRTParams(key, dp, dq, qinv) {
-+				return nil, fail("RSA_set0_crt_params")
-+			}
-+		}
-+		pkey = C.go_openssl_EVP_PKEY_new()
-+		if pkey == nil {
-+			C.go_openssl_RSA_free(key)
-+			return nil, newOpenSSLError("EVP_PKEY_new failed")
-+		}
-+		if C.go_openssl_EVP_PKEY_assign(pkey, C.GO_EVP_PKEY_RSA, (unsafe.Pointer)(key)) != 1 {
-+			C.go_openssl_RSA_free(key)
-+			C.go_openssl_EVP_PKEY_free(pkey)
-+			return nil, newOpenSSLError("EVP_PKEY_assign failed")
-+		}
-+	case 3:
-+		var err error
-+		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	k := &PrivateKeyRSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyRSA).finalize)
-+	return k, nil
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func (k *PrivateKeyRSA) finalize() {
-+	C.go_openssl_EVP_PKEY_free(k._pkey)
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR _arg0) {
++	_g_EVP_PKEY_CTX_free(_arg0);
 +}
 +
-+func (k *PrivateKeyRSA) withKey(f func(C.GO_EVP_PKEY_PTR) C.int) C.int {
-+	// Because of the finalizer, any time _pkey is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, C.GO_RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, ciphertext)
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, C.GO_RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, msg)
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, C.GO_RSA_PKCS1_PADDING, nil, nil, nil, ciphertext)
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, C.GO_RSA_PKCS1_PADDING, nil, nil, nil, msg)
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	ret, err := evpDecrypt(priv.withKey, C.GO_RSA_NO_PADDING, nil, nil, nil, ciphertext)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// We could return here, but the Go standard library test expects DecryptRSANoPadding to verify the result
-+	// in order to defend against errors in the CRT computation.
-+	//
-+	// The following code tries to replicate the verification implemented in the upstream function decryptAndCheck, found at
-+	// https://github.com/golang/go/blob/9de1ac6ac2cad3871760d0aa288f5ca713afd0a6/src/crypto/rsa/rsa.go#L569-L582.
-+	pub := &PublicKeyRSA{_pkey: priv._pkey}
-+	// A private EVP_PKEY can be used as a public key as it contains the public information.
-+	enc, err := EncryptRSANoPadding(pub, ret)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// Upstream does not do a constant time comparison because it works with math/big instead of byte slices,
-+	// and math/big does not support constant-time arithmetic yet. See #20654 for more info.
-+	if subtle.ConstantTimeCompare(ciphertext, enc) != 1 {
-+		return nil, errors.New("rsa: internal error")
-+	}
-+	return ret, nil
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, C.GO_RSA_NO_PADDING, nil, nil, nil, msg)
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func saltLength(saltLen int, sign bool) (C.int, error) {
-+	// A salt length of -2 is valid in OpenSSL, but not in crypto/rsa, so reject
-+	// it, and lengths < -2, before we convert to the OpenSSL sentinel values.
-+	if saltLen <= -2 {
-+		return 0, errors.New("crypto/rsa: invalid PSS salt length")
-+	}
-+	// OpenSSL uses sentinel salt length values like Go crypto does,
-+	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
-+	if saltLen == 0 {
-+		if sign {
-+			if vMajor == 1 {
-+				// OpenSSL 1.x uses -2 to mean maximal size when signing where Go crypto uses 0.
-+				return C.GO_RSA_PSS_SALTLEN_MAX_SIGN, nil
-+			}
-+			// OpenSSL 3.x deprecated RSA_PSS_SALTLEN_MAX_SIGN
-+			// and uses -3 to mean maximal size when signing where Go crypto uses 0.
-+			return C.GO_RSA_PSS_SALTLEN_MAX, nil
-+		}
-+		// OpenSSL uses -2 to mean auto-detect size when verifying where Go crypto uses 0.
-+		return C.GO_RSA_PSS_SALTLEN_AUTO, nil
-+	}
-+	return C.int(saltLen), nil
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	cSaltLen, err := saltLength(saltLen, true)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return evpSign(priv.withKey, C.GO_RSA_PKCS1_PSS_PADDING, cSaltLen, h, hashed)
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	cSaltLen, err := saltLength(saltLen, false)
-+	if err != nil {
-+		return err
-+	}
-+	return evpVerify(pub.withKey, C.GO_RSA_PKCS1_PSS_PADDING, cSaltLen, h, sig, hashed)
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, C.GO_RSA_PKCS1_PADDING, 0, h, hashed)
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func HashSignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, msg []byte) ([]byte, error) {
-+	return evpHashSign(priv.withKey, h, msg)
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	if pub.withKey(func(pkey C.GO_EVP_PKEY_PTR) C.int {
-+		size := C.go_openssl_EVP_PKEY_get_size(pkey)
-+		if len(sig) < int(size) {
-+			return 0
-+		}
-+		return 1
-+	}) == 0 {
-+		return errors.New("crypto/rsa: verification error")
-+	}
-+	return evpVerify(pub.withKey, C.GO_RSA_PKCS1_PADDING, 0, h, sig, hashed)
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func HashVerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, msg, sig []byte) error {
-+	return evpHashVerify(pub.withKey, h, msg, sig)
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+// rsa_st_1_0_2 is rsa_st memory layout in OpenSSL 1.0.2.
-+type rsa_st_1_0_2 struct {
-+	_                C.int
-+	_                C.long
-+	_                [2]unsafe.Pointer
-+	n, e, d          C.GO_BIGNUM_PTR
-+	p, q             C.GO_BIGNUM_PTR
-+	dmp1, dmq1, iqmp C.GO_BIGNUM_PTR
-+	// It contains more fields, but we are not interesed on them.
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func bnSet(b1 *C.GO_BIGNUM_PTR, b2 BigInt) {
-+	if b2 == nil {
-+		return
-+	}
-+	if *b1 != nil {
-+		C.go_openssl_BN_clear_free(*b1)
-+	}
-+	*b1 = bigToBN(b2)
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_derive_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func rsaSetKey(key C.GO_RSA_PTR, n, e, d BigInt) bool {
-+	if vMajor == 1 && vMinor == 0 {
-+		r := (*rsa_st_1_0_2)(unsafe.Pointer(key))
-+		// r.d and d will be nil for public keys.
-+		if (r.n == nil && n == nil) ||
-+			(r.e == nil && e == nil) {
-+			return false
-+		}
-+		bnSet(&r.n, n)
-+		bnSet(&r.e, e)
-+		bnSet(&r.d, d)
-+		return true
-+	}
-+	return C.go_openssl_RSA_set0_key(key, bigToBN(n), bigToBN(e), bigToBN(d)) == 1
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func rsaSetFactors(key C.GO_RSA_PTR, p, q BigInt) bool {
-+	if vMajor == 1 && vMinor == 0 {
-+		r := (*rsa_st_1_0_2)(unsafe.Pointer(key))
-+		if (r.p == nil && p == nil) ||
-+			(r.q == nil && q == nil) {
-+			return false
-+		}
-+		bnSet(&r.p, p)
-+		bnSet(&r.q, q)
-+		return true
-+	}
-+	return C.go_openssl_RSA_set0_factors(key, bigToBN(p), bigToBN(q)) == 1
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func rsaSetCRTParams(key C.GO_RSA_PTR, dmp1, dmq1, iqmp BigInt) bool {
-+	if vMajor == 1 && vMinor == 0 {
-+		r := (*rsa_st_1_0_2)(unsafe.Pointer(key))
-+		if (r.dmp1 == nil && dmp1 == nil) ||
-+			(r.dmq1 == nil && dmq1 == nil) ||
-+			(r.iqmp == nil && iqmp == nil) {
-+			return false
-+		}
-+		bnSet(&r.dmp1, dmp1)
-+		bnSet(&r.dmq1, dmq1)
-+		bnSet(&r.iqmp, iqmp)
-+		return true
-+	}
-+	return C.go_openssl_RSA_set0_crt_params(key, bigToBN(dmp1), bigToBN(dmq1), bigToBN(iqmp)) == 1
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-+func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (C.GO_EVP_PKEY_PTR, error) {
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer bld.finalize()
 +
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR _arg0) {
++	_g_EVP_PKEY_free(_arg0);
++}
 +
-+	if p != nil && q != nil {
-+		allPrecomputedExists := dp != nil && dq != nil && qinv != nil
-+		// The precomputed values should only be passed if P and Q are present
-+		// and every precomputed value is present. (If any precomputed value is
-+		// missing, don't pass any of them.)
-+		//
-+		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
-+		// value is missing. See https://github.com/openssl/openssl/pull/22334
-+		if vMinor >= 2 || allPrecomputedExists {
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
-+		}
-+		if allPrecomputedExists {
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
-+		}
-+	}
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
-+	selection := C.GO_EVP_PKEY_PUBLIC_KEY
-+	if isPriv {
-+		selection = C.GO_EVP_PKEY_KEYPAIR
-+	}
-+	return newEvpFromParams(C.GO_EVP_PKEY_RSA, C.int(selection), params)
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-new file mode 100644
-index 00000000000000..437312ad795fc3
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/shims.h
-@@ -0,0 +1,413 @@
-+#include <stdlib.h> // size_t
-+#include <stdint.h> // uint64_t
 +
-+// #include <openssl/crypto.h>
-+enum {
-+    GO_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002L,
-+    GO_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004L,
-+    GO_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008L,
-+    GO_OPENSSL_INIT_LOAD_CONFIG = 0x00000040L
-+};
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include <openssl/evp.h>
-+enum {
-+    GO_EVP_CTRL_GCM_GET_TAG = 0x10,
-+    GO_EVP_CTRL_GCM_SET_TAG = 0x11,
-+    GO_EVP_PKEY_CTRL_MD = 1,
-+    GO_EVP_PKEY_RSA = 6,
-+    GO_EVP_PKEY_EC = 408,
-+    GO_EVP_PKEY_TLS1_PRF = 1021,
-+    GO_EVP_PKEY_HKDF = 1036,
-+    GO_EVP_PKEY_ED25519 = 1087,
-+    GO_EVP_PKEY_DSA = 116,
-+    /* This is defined differently in OpenSSL 3 (1 << 11), but in our
-+     * code it is only used in OpenSSL 1.
-+     */
-+    GO1_EVP_PKEY_OP_DERIVE = (1 << 10),
-+    GO_EVP_MAX_MD_SIZE = 64,
-+
-+    GO_EVP_PKEY_PUBLIC_KEY = 0x86,
-+    GO_EVP_PKEY_KEYPAIR = 0x87
-+};
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include <openssl/ec.h>
-+enum {
-+    GO_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
-+};
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include <openssl/kdf.h>
-+enum {
-+    GO_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
-+    GO_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
-+
-+    GO_EVP_PKEY_CTRL_TLS_MD = 0x1000,
-+    GO_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
-+    GO_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
-+    GO_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
-+    GO_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
-+    GO_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
-+    GO_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
-+    GO_EVP_PKEY_CTRL_HKDF_MODE = 0x1007
-+};
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+typedef enum {
-+    GO_POINT_CONVERSION_UNCOMPRESSED = 4,
-+} point_conversion_form_t;
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_get_bits(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include <openssl/obj_mac.h>
-+enum {
-+    GO_NID_X9_62_prime256v1 = 415,
-+    GO_NID_secp224r1 = 713,
-+    GO_NID_secp384r1 = 715,
-+    GO_NID_secp521r1 = 716
-+};
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include <openssl/rsa.h>
-+enum {
-+    GO_RSA_PKCS1_PADDING = 1,
-+    GO_RSA_NO_PADDING = 3,
-+    GO_RSA_PKCS1_OAEP_PADDING = 4,
-+    GO_RSA_PKCS1_PSS_PADDING = 6,
-+    GO_RSA_PSS_SALTLEN_DIGEST = -1,
-+    GO_RSA_PSS_SALTLEN_AUTO = -2,
-+    GO_RSA_PSS_SALTLEN_MAX_SIGN = -2,
-+    GO_RSA_PSS_SALTLEN_MAX = -3,
-+    GO_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
-+    GO_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
-+    GO_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
-+    GO_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
-+    GO_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
-+    GO_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
-+    GO_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
-+    GO_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002
-+};
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+typedef void* GO_OPENSSL_INIT_SETTINGS_PTR;
-+typedef void* GO_OSSL_LIB_CTX_PTR;
-+typedef void* GO_OSSL_PROVIDER_PTR;
-+typedef void* GO_ENGINE_PTR;
-+typedef void* GO_EVP_PKEY_PTR;
-+typedef void* GO_EVP_PKEY_CTX_PTR;
-+typedef void* GO_EVP_MD_PTR;
-+typedef void* GO_EVP_MD_CTX_PTR;
-+typedef void* GO_HMAC_CTX_PTR;
-+typedef void* GO_EVP_CIPHER_PTR;
-+typedef void* GO_EVP_CIPHER_CTX_PTR;
-+typedef void* GO_EC_KEY_PTR;
-+typedef void* GO_EC_POINT_PTR;
-+typedef void* GO_EC_GROUP_PTR;
-+typedef void* GO_RSA_PTR;
-+typedef void* GO_BIGNUM_PTR;
-+typedef void* GO_BN_CTX_PTR;
-+typedef void* GO_EVP_MAC_PTR;
-+typedef void* GO_EVP_MAC_CTX_PTR;
-+typedef void* GO_OSSL_PARAM_BLD_PTR;
-+typedef void* GO_OSSL_PARAM_PTR;
-+typedef void* GO_CRYPTO_THREADID_PTR;
-+typedef void* GO_EVP_SIGNATURE_PTR;
-+typedef void* GO_DSA_PTR;
-+typedef void* GO_EVP_KDF_PTR;
-+typedef void* GO_EVP_KDF_CTX_PTR;
-+
-+// #include <openssl/md5.h>
-+typedef void* GO_MD5_CTX_PTR;
-+
-+// #include <openssl/sha.h>
-+typedef void* GO_SHA_CTX_PTR;
-+
-+// FOR_ALL_OPENSSL_FUNCTIONS is the list of all functions from libcrypto that are used in this package.
-+// Forgetting to add a function here results in build failure with message reporting the function
-+// that needs to be added.
-+//
-+// The purpose of FOR_ALL_OPENSSL_FUNCTIONS is to define all libcrypto functions
-+// without depending on the openssl headers so it is easier to use this package
-+// with an openssl version different that the one used at build time.
-+//
-+// The following macros may not be defined at this point,
-+// they are not resolved here but just accumulated in FOR_ALL_OPENSSL_FUNCTIONS.
-+//
-+// DEFINEFUNC defines and loads openssl functions that can be directly called from Go as their signatures match
-+// the OpenSSL API and do not require special logic.
-+// The process will be aborted if the function can't be loaded.
-+//
-+// DEFINEFUNC_LEGACY_1_1 acts like DEFINEFUNC but only aborts the process if the function can't be loaded
-+// when using 1.1.x. This indicates the function is required when using 1.1.x, but is unused when using later versions.
-+// It also might not exist in later versions.
-+//
-+// DEFINEFUNC_LEGACY_1_0 acts like DEFINEFUNC but only aborts the process if the function can't be loaded
-+// when using 1.0.x. This indicates the function is required when using 1.0.x, but is unused when using later versions.
-+// It also might not exist in later versions.
-+//
-+// DEFINEFUNC_LEGACY_1 acts like DEFINEFUNC but only aborts the process if the function can't be loaded
-+// when using 1.x. This indicates the function is required when using 1.x, but is unused when using later versions.
-+// It also might not exist in later versions.
-+//
-+// DEFINEFUNC_1_1 acts like DEFINEFUNC but only aborts the process if function can't be loaded
-+// when using 1.1.0 or higher.
-+//
-+// DEFINEFUNC_1_1_1 acts like DEFINEFUNC but only aborts the process if function can't be loaded
-+// when using 1.1.1 or higher.
-+//
-+// DEFINEFUNC_3_0 acts like DEFINEFUNC but only aborts the process if function can't be loaded
-+// when using 3.0.0 or higher.
-+//
-+// DEFINEFUNC_RENAMED_1_1 acts like DEFINEFUNC but tries to load the function using the new name when using >= 1.1.x
-+// and the old name when using 1.0.2. In both cases the function will have the new name.
-+//
-+// DEFINEFUNC_RENAMED_3_0 acts like DEFINEFUNC but tries to load the function using the new name when using >= 3.x
-+// and the old name when using 1.x. In both cases the function will have the new name.
-+//
-+// DEFINEFUNC_VARIADIC_3_0 acts like DEFINEFUNC but creates an alias with a more specific signature.
-+// This is necessary to call variadic functions (functions that accept a variable number of arguments)
-+// because variadic functions are not directly compatible with cgo. By defining a cgo-compatible alias
-+// for each desired signature, the C compiler handles the variadic arguments rather than cgo.
-+// Variadic functions are the only known incompatibility of this kind.
-+// If you use this macro for a different reason, consider renaming it to something more general first.
-+// See https://github.com/golang/go/issues/975.
-+// The process is aborted if the function can't be loaded when using 3.0.0 or higher.
-+//
-+// #include <openssl/crypto.h>
-+// #include <openssl/err.h>
-+// #include <openssl/rsa.h>
-+// #include <openssl/hmac.h>
-+// #include <openssl/ec.h>
-+// #include <openssl/rand.h>
-+// #include <openssl/evp.h>
-+// #include <openssl/dsa.h>
-+// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
-+// #include <openssl/provider.h>
-+// #include <openssl/param_build.h>
-+// #endif
-+// #if OPENSSL_VERSION_NUMBER < 0x10100000L
-+// #include <openssl/bn.h>
-+// #endif
-+#define FOR_ALL_OPENSSL_FUNCTIONS \
-+DEFINEFUNC(void, ERR_error_string_n, (unsigned long e, char *buf, size_t len), (e, buf, len)) \
-+DEFINEFUNC(void, ERR_clear_error, (void), ()) \
-+DEFINEFUNC_LEGACY_1(unsigned long, ERR_get_error_line, (const char **file, int *line), (file, line)) \
-+DEFINEFUNC_3_0(unsigned long, ERR_get_error_all, (const char **file, int *line, const char **func, const char **data, int *flags), (file, line, func, data, flags)) \
-+DEFINEFUNC_RENAMED_1_1(const char *, OpenSSL_version, SSLeay_version, (int type), (type)) \
-+DEFINEFUNC(void, OPENSSL_init, (void), ()) \
-+DEFINEFUNC_LEGACY_1_0(void, ERR_load_crypto_strings, (void), ()) \
-+DEFINEFUNC_LEGACY_1_0(void, ERR_remove_thread_state, (const GO_CRYPTO_THREADID_PTR tid), (tid)) \
-+DEFINEFUNC_LEGACY_1_0(int, CRYPTO_num_locks, (void), ()) \
-+DEFINEFUNC_LEGACY_1_0(int, CRYPTO_THREADID_set_callback, (void (*threadid_func) (GO_CRYPTO_THREADID_PTR)), (threadid_func)) \
-+DEFINEFUNC_LEGACY_1_0(void, CRYPTO_THREADID_set_numeric, (GO_CRYPTO_THREADID_PTR id, unsigned long val), (id, val)) \
-+DEFINEFUNC_LEGACY_1_0(void, CRYPTO_set_locking_callback, (void (*locking_function)(int mode, int n, const char *file, int line)), (locking_function)) \
-+/* CRYPTO_malloc argument num changes from int to size_t in OpenSSL 1.1.0, */ \
-+/* and CRYPTO_free has file and line arguments added. */ \
-+/* Exclude them from headercheck tool when using previous OpenSSL versions. */ \
-+/*check:from=1.1.0*/ DEFINEFUNC(void *, CRYPTO_malloc, (size_t num, const char *file, int line), (num, file, line)) \
-+/*check:from=1.1.0*/ DEFINEFUNC(void, CRYPTO_free, (void *str, const char *file, int line), (str, file, line)) \
-+DEFINEFUNC_LEGACY_1_0(void, OPENSSL_add_all_algorithms_conf, (void), ()) \
-+DEFINEFUNC_1_1(int, OPENSSL_init_crypto, (uint64_t ops, const GO_OPENSSL_INIT_SETTINGS_PTR settings), (ops, settings)) \
-+DEFINEFUNC_LEGACY_1(int, FIPS_mode, (void), ()) \
-+DEFINEFUNC_LEGACY_1(int, FIPS_mode_set, (int r), (r)) \
-+DEFINEFUNC_3_0(int, EVP_default_properties_is_fips_enabled, (GO_OSSL_LIB_CTX_PTR libctx), (libctx)) \
-+DEFINEFUNC_3_0(int, EVP_default_properties_enable_fips, (GO_OSSL_LIB_CTX_PTR libctx, int enable), (libctx, enable)) \
-+DEFINEFUNC_3_0(int, OSSL_PROVIDER_available, (GO_OSSL_LIB_CTX_PTR libctx, const char *name), (libctx, name)) \
-+DEFINEFUNC_3_0(GO_OSSL_PROVIDER_PTR, OSSL_PROVIDER_try_load, (GO_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks), (libctx, name, retain_fallbacks)) \
-+DEFINEFUNC_3_0(const char *, OSSL_PROVIDER_get0_name, (const GO_OSSL_PROVIDER_PTR prov), (prov)) \
-+DEFINEFUNC_3_0(GO_EVP_MD_PTR, EVP_MD_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
-+DEFINEFUNC_3_0(void, EVP_MD_free, (GO_EVP_MD_PTR md), (md)) \
-+DEFINEFUNC_3_0(const char *, EVP_MD_get0_name, (const GO_EVP_MD_PTR md), (md)) \
-+DEFINEFUNC_3_0(const GO_OSSL_PROVIDER_PTR, EVP_MD_get0_provider, (const GO_EVP_MD_PTR md), (md)) \
-+DEFINEFUNC_RENAMED_3_0(int, EVP_MD_get_size, EVP_MD_size, (const GO_EVP_MD_PTR md), (md)) \
-+DEFINEFUNC_RENAMED_3_0(int, EVP_MD_get_block_size, EVP_MD_block_size, (const GO_EVP_MD_PTR md), (md)) \
-+DEFINEFUNC(int, RAND_bytes, (unsigned char *arg0, int arg1), (arg0, arg1)) \
-+DEFINEFUNC_RENAMED_1_1(GO_EVP_MD_CTX_PTR, EVP_MD_CTX_new, EVP_MD_CTX_create, (void), ()) \
-+DEFINEFUNC_RENAMED_1_1(void, EVP_MD_CTX_free, EVP_MD_CTX_destroy, (GO_EVP_MD_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC(int, EVP_MD_CTX_copy, (GO_EVP_MD_CTX_PTR out, const GO_EVP_MD_CTX_PTR in), (out, in)) \
-+DEFINEFUNC(int, EVP_MD_CTX_copy_ex, (GO_EVP_MD_CTX_PTR out, const GO_EVP_MD_CTX_PTR in), (out, in)) \
-+DEFINEFUNC(int, EVP_Digest, (const void *data, size_t count, unsigned char *md, unsigned int *size, const GO_EVP_MD_PTR type, GO_ENGINE_PTR impl), (data, count, md, size, type, impl)) \
-+DEFINEFUNC(int, EVP_DigestInit_ex, (GO_EVP_MD_CTX_PTR ctx, const GO_EVP_MD_PTR type, GO_ENGINE_PTR impl), (ctx, type, impl)) \
-+DEFINEFUNC(int, EVP_DigestInit, (GO_EVP_MD_CTX_PTR ctx, const GO_EVP_MD_PTR type), (ctx, type)) \
-+DEFINEFUNC(int, EVP_DigestUpdate, (GO_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt), (ctx, d, cnt)) \
-+DEFINEFUNC(int, EVP_DigestFinal, (GO_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s), (ctx, md, s)) \
-+DEFINEFUNC_1_1_1(int, EVP_DigestSign, (GO_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen), (ctx, sigret, siglen, tbs, tbslen)) \
-+DEFINEFUNC(int, EVP_DigestSignInit, (GO_EVP_MD_CTX_PTR ctx, GO_EVP_PKEY_CTX_PTR *pctx, const GO_EVP_MD_PTR type, GO_ENGINE_PTR e, GO_EVP_PKEY_PTR pkey), (ctx, pctx, type, e, pkey)) \
-+DEFINEFUNC(int, EVP_DigestSignFinal, (GO_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen), (ctx, sig, siglen)) \
-+DEFINEFUNC(int, EVP_DigestVerifyInit, (GO_EVP_MD_CTX_PTR ctx, GO_EVP_PKEY_CTX_PTR *pctx, const GO_EVP_MD_PTR type, GO_ENGINE_PTR e, GO_EVP_PKEY_PTR pkey), (ctx, pctx, type, e, pkey)) \
-+DEFINEFUNC(int, EVP_DigestVerifyFinal, (GO_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen), (ctx, sig, siglen)) \
-+DEFINEFUNC_1_1_1(int, EVP_DigestVerify, (GO_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen), (ctx, sigret, siglen, tbs, tbslen)) \
-+DEFINEFUNC_1_1(const GO_EVP_MD_PTR, EVP_md5_sha1, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_ripemd160, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_md4, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_md5, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha1, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha224, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha256, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha384, (void), ()) \
-+DEFINEFUNC(const GO_EVP_MD_PTR, EVP_sha512, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha512_224, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha512_256, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_224, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_256, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_384, (void), ()) \
-+DEFINEFUNC_1_1_1(const GO_EVP_MD_PTR, EVP_sha3_512, (void), ()) \
-+DEFINEFUNC_LEGACY_1_0(void, HMAC_CTX_init, (GO_HMAC_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1_0(void, HMAC_CTX_cleanup, (GO_HMAC_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(int, HMAC_Init_ex, (GO_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const GO_EVP_MD_PTR arg3, GO_ENGINE_PTR arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC_LEGACY_1(int, HMAC_Update, (GO_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_LEGACY_1(int, HMAC_Final, (GO_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_LEGACY_1(int, HMAC_CTX_copy, (GO_HMAC_CTX_PTR dest, GO_HMAC_CTX_PTR src), (dest, src)) \
-+DEFINEFUNC_LEGACY_1_1(void, HMAC_CTX_free, (GO_HMAC_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1_1(GO_HMAC_CTX_PTR, HMAC_CTX_new, (void), ()) \
-+DEFINEFUNC(GO_EVP_CIPHER_CTX_PTR, EVP_CIPHER_CTX_new, (void), ()) \
-+DEFINEFUNC(int, EVP_CIPHER_CTX_set_padding, (GO_EVP_CIPHER_CTX_PTR x, int padding), (x, padding)) \
-+DEFINEFUNC(int, EVP_CipherInit_ex, (GO_EVP_CIPHER_CTX_PTR ctx, const GO_EVP_CIPHER_PTR type, GO_ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc), (ctx, type, impl, key, iv, enc)) \
-+DEFINEFUNC(int, EVP_CipherUpdate, (GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl), (ctx, out, outl, in, inl)) \
-+DEFINEFUNC(int, EVP_EncryptInit_ex, (GO_EVP_CIPHER_CTX_PTR ctx, const GO_EVP_CIPHER_PTR type, GO_ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv), (ctx, type, impl, key, iv)) \
-+DEFINEFUNC(int, EVP_EncryptUpdate, (GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl), (ctx, out, outl, in, inl)) \
-+DEFINEFUNC(int, EVP_EncryptFinal_ex, (GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl), (ctx, out, outl)) \
-+DEFINEFUNC(int, EVP_DecryptInit_ex, (GO_EVP_CIPHER_CTX_PTR ctx, const GO_EVP_CIPHER_PTR type, GO_ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv), (ctx, type, impl, key, iv)) \
-+DEFINEFUNC(int, EVP_DecryptUpdate, (GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl),	(ctx, out, outl, in, inl)) \
-+DEFINEFUNC(int, EVP_DecryptFinal_ex, (GO_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl),	(ctx, outm, outl)) \
-+DEFINEFUNC_3_0(GO_EVP_CIPHER_PTR, EVP_CIPHER_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
-+DEFINEFUNC_3_0(const char *, EVP_CIPHER_get0_name, (const GO_EVP_CIPHER_PTR cipher), (cipher)) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_128_gcm, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_128_cbc, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_128_ctr, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_128_ecb, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_192_gcm, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_192_cbc, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_192_ctr, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_192_ecb, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_256_cbc, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_256_ctr, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_256_ecb, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_aes_256_gcm, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_des_ecb, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_des_cbc, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_des_ede3_ecb, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_des_ede3_cbc, (void), ()) \
-+DEFINEFUNC(const GO_EVP_CIPHER_PTR, EVP_rc4, (void), ()) \
-+DEFINEFUNC_RENAMED_3_0(int, EVP_CIPHER_get_block_size, EVP_CIPHER_block_size, (const GO_EVP_CIPHER_PTR cipher), (cipher)) \
-+DEFINEFUNC(int, EVP_CIPHER_CTX_set_key_length, (GO_EVP_CIPHER_CTX_PTR x, int keylen), (x, keylen)) \
-+DEFINEFUNC(void, EVP_CIPHER_CTX_free, (GO_EVP_CIPHER_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_CIPHER_CTX_ctrl, (GO_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr), (ctx, type, arg, ptr)) \
-+DEFINEFUNC(GO_EVP_PKEY_PTR, EVP_PKEY_new, (void), ()) \
-+DEFINEFUNC_1_1_1(GO_EVP_PKEY_PTR, EVP_PKEY_new_raw_private_key, (int type, GO_ENGINE_PTR e, const unsigned char *key, size_t keylen), (type, e, key, keylen)) \
-+DEFINEFUNC_1_1_1(GO_EVP_PKEY_PTR, EVP_PKEY_new_raw_public_key, (int type, GO_ENGINE_PTR e, const unsigned char *key, size_t keylen), (type, e, key, keylen)) \
-+/* EVP_PKEY_size and EVP_PKEY_get_bits pkey parameter is const since OpenSSL 1.1.1. */ \
-+/* Exclude it from headercheck tool when using previous OpenSSL versions. */ \
-+/*check:from=1.1.1*/ DEFINEFUNC_RENAMED_3_0(int, EVP_PKEY_get_size, EVP_PKEY_size, (const GO_EVP_PKEY_PTR pkey), (pkey)) \
-+/*check:from=1.1.1*/ DEFINEFUNC_RENAMED_3_0(int, EVP_PKEY_get_bits, EVP_PKEY_bits, (const GO_EVP_PKEY_PTR pkey), (pkey)) \
-+DEFINEFUNC(void, EVP_PKEY_free, (GO_EVP_PKEY_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(GO_RSA_PTR, EVP_PKEY_get1_RSA, (GO_EVP_PKEY_PTR pkey), (pkey)) \
-+DEFINEFUNC_LEGACY_1(int, EVP_PKEY_assign, (GO_EVP_PKEY_PTR pkey, int type, void *key), (pkey, type, key)) \
-+DEFINEFUNC(int, EVP_PKEY_verify, (GO_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen), (ctx, sig, siglen, tbs, tbslen)) \
-+DEFINEFUNC(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new, (GO_EVP_PKEY_PTR arg0, GO_ENGINE_PTR arg1), (arg0, arg1)) \
-+DEFINEFUNC(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new_id, (int id, GO_ENGINE_PTR e), (id, e)) \
-+DEFINEFUNC_3_0(GO_EVP_PKEY_CTX_PTR, EVP_PKEY_CTX_new_from_pkey, (GO_OSSL_LIB_CTX_PTR libctx, GO_EVP_PKEY_PTR pkey, const char *propquery), (libctx, pkey, propquery)) \
-+DEFINEFUNC(int, EVP_PKEY_paramgen_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC(int, EVP_PKEY_paramgen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
-+DEFINEFUNC(int, EVP_PKEY_keygen_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC(int, EVP_PKEY_keygen, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *ppkey), (ctx, ppkey)) \
-+DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type), (ctx, propq, type)) \
-+DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen_RSA, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1), (ctx, propq, type, arg1)) \
-+DEFINEFUNC_VARIADIC_3_0(GO_EVP_PKEY_PTR, EVP_PKEY_Q_keygen, EVP_PKEY_Q_keygen_EC, (GO_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1), (ctx, propq, type, arg1)) \
-+DEFINEFUNC(void, EVP_PKEY_CTX_free, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_PKEY_CTX_ctrl, (GO_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2), (ctx, keytype, optype, cmd, p1, p2)) \
-+DEFINEFUNC(int, EVP_PKEY_decrypt, (GO_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC(int, EVP_PKEY_encrypt, (GO_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC(int, EVP_PKEY_decrypt_init, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_PKEY_encrypt_init, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_PKEY_sign_init, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_PKEY_verify_init, (GO_EVP_PKEY_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EVP_PKEY_sign, (GO_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC(int, EVP_PKEY_derive_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC(int, EVP_PKEY_derive_set_peer, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR peer), (ctx, peer)) \
-+DEFINEFUNC(int, EVP_PKEY_derive, (GO_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen), (ctx, key, keylen)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_public_check_quick, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_private_check, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC_LEGACY_1_0(void*, EVP_PKEY_get0, (GO_EVP_PKEY_PTR pkey), (pkey)) \
-+DEFINEFUNC_LEGACY_1_1(GO_EC_KEY_PTR, EVP_PKEY_get0_EC_KEY, (GO_EVP_PKEY_PTR pkey), (pkey)) \
-+DEFINEFUNC_LEGACY_1_1(GO_DSA_PTR, EVP_PKEY_get0_DSA, (GO_EVP_PKEY_PTR pkey), (pkey)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_fromdata_init, (GO_EVP_PKEY_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_fromdata, (GO_EVP_PKEY_CTX_PTR ctx, GO_EVP_PKEY_PTR *pkey, int selection, GO_OSSL_PARAM_PTR params), (ctx, pkey, selection, params)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_set1_encoded_public_key, (GO_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen), (pkey, pub, publen)) \
-+DEFINEFUNC_3_0(size_t, EVP_PKEY_get1_encoded_public_key, (GO_EVP_PKEY_PTR pkey, unsigned char **ppub), (pkey, ppub)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_get_bn_param, (const GO_EVP_PKEY_PTR pkey, const char *key_name, GO_BIGNUM_PTR *bn), (pkey, key_name, bn)) \
-+DEFINEFUNC_LEGACY_1(GO_RSA_PTR, RSA_new, (void), ()) \
-+DEFINEFUNC_LEGACY_1(void, RSA_free, (GO_RSA_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1_1(int, RSA_set0_factors, (GO_RSA_PTR rsa, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q), (rsa, p, q)) \
-+DEFINEFUNC_LEGACY_1_1(int, RSA_set0_crt_params, (GO_RSA_PTR rsa, GO_BIGNUM_PTR dmp1, GO_BIGNUM_PTR dmp2, GO_BIGNUM_PTR iqmp), (rsa, dmp1, dmp2, iqmp)) \
-+DEFINEFUNC_LEGACY_1_1(void, RSA_get0_crt_params, (const GO_RSA_PTR r, const GO_BIGNUM_PTR *dmp1, const GO_BIGNUM_PTR *dmq1, const GO_BIGNUM_PTR *iqmp), (r, dmp1, dmq1, iqmp)) \
-+DEFINEFUNC_LEGACY_1_1(int, RSA_set0_key, (GO_RSA_PTR r, GO_BIGNUM_PTR n, GO_BIGNUM_PTR e, GO_BIGNUM_PTR d), (r, n, e, d)) \
-+DEFINEFUNC_LEGACY_1_1(void, RSA_get0_factors, (const GO_RSA_PTR rsa, const GO_BIGNUM_PTR *p, const GO_BIGNUM_PTR *q), (rsa, p, q)) \
-+DEFINEFUNC_LEGACY_1_1(void, RSA_get0_key, (const GO_RSA_PTR rsa, const GO_BIGNUM_PTR *n, const GO_BIGNUM_PTR *e, const GO_BIGNUM_PTR *d), (rsa, n, e, d)) \
-+DEFINEFUNC(GO_BIGNUM_PTR, BN_new, (void), ()) \
-+DEFINEFUNC(void, BN_free, (GO_BIGNUM_PTR arg0), (arg0)) \
-+DEFINEFUNC(void, BN_clear, (GO_BIGNUM_PTR arg0), (arg0)) \
-+DEFINEFUNC(void, BN_clear_free, (GO_BIGNUM_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, BN_num_bits, (const GO_BIGNUM_PTR arg0), (arg0)) \
-+DEFINEFUNC(GO_BIGNUM_PTR, BN_bin2bn, (const unsigned char *arg0, int arg1, GO_BIGNUM_PTR arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_LEGACY_1_0(int, BN_bn2bin, (const GO_BIGNUM_PTR a, unsigned char *to), (a, to)) \
-+DEFINEFUNC_LEGACY_1_0(GO_BIGNUM_PTR, bn_expand2, (GO_BIGNUM_PTR a, int n), (a, n)) \
-+DEFINEFUNC_1_1(GO_BIGNUM_PTR, BN_lebin2bn, (const unsigned char *s, int len, GO_BIGNUM_PTR ret), (s, len, ret)) \
-+DEFINEFUNC_1_1(int, BN_bn2lebinpad, (const GO_BIGNUM_PTR a, unsigned char *to, int tolen), (a, to, tolen)) \
-+DEFINEFUNC_1_1(int, BN_bn2binpad, (const GO_BIGNUM_PTR a, unsigned char *to, int tolen), (a, to, tolen)) \
-+DEFINEFUNC_LEGACY_1(int, EC_KEY_set_public_key_affine_coordinates, (GO_EC_KEY_PTR key, GO_BIGNUM_PTR x, GO_BIGNUM_PTR y), (key, x, y)) \
-+DEFINEFUNC_LEGACY_1(int, EC_KEY_set_public_key, (GO_EC_KEY_PTR key, const GO_EC_POINT_PTR pub), (key, pub)) \
-+DEFINEFUNC_LEGACY_1(void, EC_KEY_free, (GO_EC_KEY_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(const GO_EC_GROUP_PTR, EC_KEY_get0_group, (const GO_EC_KEY_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(const GO_BIGNUM_PTR, EC_KEY_get0_private_key, (const GO_EC_KEY_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(const GO_EC_POINT_PTR, EC_KEY_get0_public_key, (const GO_EC_KEY_PTR arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(GO_EC_KEY_PTR, EC_KEY_new_by_curve_name, (int arg0), (arg0)) \
-+DEFINEFUNC_LEGACY_1(int, EC_KEY_set_private_key, (GO_EC_KEY_PTR arg0, const GO_BIGNUM_PTR arg1), (arg0, arg1)) \
-+DEFINEFUNC_LEGACY_1(int, EC_KEY_check_key, (const GO_EC_KEY_PTR key), (key)) \
-+DEFINEFUNC(GO_EC_POINT_PTR, EC_POINT_new, (const GO_EC_GROUP_PTR arg0), (arg0)) \
-+DEFINEFUNC(void, EC_POINT_free, (GO_EC_POINT_PTR arg0), (arg0)) \
-+DEFINEFUNC(int, EC_POINT_mul, (const GO_EC_GROUP_PTR group, GO_EC_POINT_PTR r, const GO_BIGNUM_PTR n, const GO_EC_POINT_PTR q, const GO_BIGNUM_PTR m, GO_BN_CTX_PTR ctx), (group, r, n, q, m, ctx)) \
-+DEFINEFUNC_LEGACY_1(int, EC_POINT_get_affine_coordinates_GFp, (const GO_EC_GROUP_PTR arg0, const GO_EC_POINT_PTR arg1, GO_BIGNUM_PTR arg2, GO_BIGNUM_PTR arg3, GO_BN_CTX_PTR arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC_3_0(int, EC_POINT_set_affine_coordinates, (const GO_EC_GROUP_PTR arg0, GO_EC_POINT_PTR arg1, const GO_BIGNUM_PTR arg2, const GO_BIGNUM_PTR arg3, GO_BN_CTX_PTR arg4), (arg0, arg1, arg2, arg3, arg4)) \
-+DEFINEFUNC(size_t, EC_POINT_point2oct, (const GO_EC_GROUP_PTR group, const GO_EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t len, GO_BN_CTX_PTR ctx), (group, p, form, buf, len, ctx)) \
-+DEFINEFUNC(int, EC_POINT_oct2point, (const GO_EC_GROUP_PTR group, GO_EC_POINT_PTR p, const unsigned char *buf, size_t len, GO_BN_CTX_PTR ctx), (group, p, buf, len, ctx)) \
-+DEFINEFUNC(const char *, OBJ_nid2sn, (int n), (n)) \
-+DEFINEFUNC(GO_EC_GROUP_PTR, EC_GROUP_new_by_curve_name, (int nid), (nid)) \
-+DEFINEFUNC(void, EC_GROUP_free, (GO_EC_GROUP_PTR group), (group)) \
-+DEFINEFUNC_3_0(GO_EVP_MAC_PTR, EVP_MAC_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
-+DEFINEFUNC_3_0(GO_EVP_MAC_CTX_PTR, EVP_MAC_CTX_new, (GO_EVP_MAC_PTR arg0), (arg0)) \
-+DEFINEFUNC_3_0(int, EVP_MAC_CTX_set_params, (GO_EVP_MAC_CTX_PTR ctx, const GO_OSSL_PARAM_PTR params), (ctx, params)) \
-+DEFINEFUNC_3_0(void, EVP_MAC_CTX_free, (GO_EVP_MAC_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC_3_0(GO_EVP_MAC_CTX_PTR, EVP_MAC_CTX_dup, (const GO_EVP_MAC_CTX_PTR arg0), (arg0)) \
-+DEFINEFUNC_3_0(int, EVP_MAC_init, (GO_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const GO_OSSL_PARAM_PTR params), (ctx, key, keylen, params)) \
-+DEFINEFUNC_3_0(int, EVP_MAC_update, (GO_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen), (ctx, data, datalen)) \
-+DEFINEFUNC_3_0(int, EVP_MAC_final, (GO_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize), (ctx, out, outl, outsize)) \
-+DEFINEFUNC_3_0(void, OSSL_PARAM_free, (GO_OSSL_PARAM_PTR p), (p)) \
-+DEFINEFUNC_3_0(GO_OSSL_PARAM_BLD_PTR, OSSL_PARAM_BLD_new, (void), ()) \
-+DEFINEFUNC_3_0(void, OSSL_PARAM_BLD_free, (GO_OSSL_PARAM_BLD_PTR bld), (bld)) \
-+DEFINEFUNC_3_0(GO_OSSL_PARAM_PTR, OSSL_PARAM_BLD_to_param, (GO_OSSL_PARAM_BLD_PTR bld), (bld)) \
-+DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_utf8_string, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize), (bld, key, buf, bsize)) \
-+DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_octet_string, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize), (bld, key, buf, bsize)) \
-+DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_BN, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, const GO_BIGNUM_PTR bn), (bld, key, bn)) \
-+DEFINEFUNC_3_0(int, OSSL_PARAM_BLD_push_int32, (GO_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num), (bld, key, num)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set_hkdf_mode, (GO_EVP_PKEY_CTX_PTR arg0, int arg1), (arg0, arg1)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set_hkdf_md, (GO_EVP_PKEY_CTX_PTR arg0, const GO_EVP_MD_PTR arg1), (arg0, arg1)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set1_hkdf_salt, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set1_hkdf_key, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_add1_hkdf_info, (GO_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2), (arg0, arg1, arg2)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_up_ref, (GO_EVP_PKEY_PTR key), (key)) \
-+DEFINEFUNC_LEGACY_1(int, EVP_PKEY_set1_EC_KEY, (GO_EVP_PKEY_PTR pkey, GO_EC_KEY_PTR key), (pkey, key)) \
-+DEFINEFUNC_3_0(int, EVP_PKEY_CTX_set0_rsa_oaep_label, (GO_EVP_PKEY_CTX_PTR ctx, void *label, int len), (ctx, label, len)) \
-+DEFINEFUNC(int, PKCS5_PBKDF2_HMAC, (const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const GO_EVP_MD_PTR digest, int keylen, unsigned char *out), (pass, passlen, salt, saltlen, iter, digest, keylen, out)) \
-+DEFINEFUNC_1_1_1(int, EVP_PKEY_get_raw_public_key, (const GO_EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len), (pkey, pub, len)) \
-+DEFINEFUNC_1_1_1(int, EVP_PKEY_get_raw_private_key, (const GO_EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len), (pkey, priv, len)) \
-+DEFINEFUNC_3_0(GO_EVP_SIGNATURE_PTR, EVP_SIGNATURE_fetch, (GO_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties), (ctx, algorithm, properties)) \
-+DEFINEFUNC_3_0(void, EVP_SIGNATURE_free, (GO_EVP_SIGNATURE_PTR signature), (signature)) \
-+DEFINEFUNC_LEGACY_1(GO_DSA_PTR, DSA_new, (void), ()) \
-+DEFINEFUNC_LEGACY_1(void, DSA_free, (GO_DSA_PTR r), (r)) \
-+DEFINEFUNC_LEGACY_1(int, DSA_generate_key, (GO_DSA_PTR a), (a)) \
-+DEFINEFUNC_LEGACY_1_1(void, DSA_get0_pqg, (const GO_DSA_PTR d, const GO_BIGNUM_PTR *p, const GO_BIGNUM_PTR *q, const GO_BIGNUM_PTR *g), (d, p, q, g)) \
-+DEFINEFUNC_LEGACY_1_1(int, DSA_set0_pqg, (GO_DSA_PTR d, GO_BIGNUM_PTR p, GO_BIGNUM_PTR q, GO_BIGNUM_PTR g), (d, p, q, g)) \
-+DEFINEFUNC_LEGACY_1_1(void, DSA_get0_key, (const GO_DSA_PTR d, const GO_BIGNUM_PTR *pub_key, const GO_BIGNUM_PTR *priv_key), (d, pub_key, priv_key)) \
-+DEFINEFUNC_LEGACY_1_1(int, DSA_set0_key, (GO_DSA_PTR d, GO_BIGNUM_PTR pub_key, GO_BIGNUM_PTR priv_key), (d, pub_key, priv_key)) \
-+DEFINEFUNC_3_0(GO_EVP_KDF_PTR, EVP_KDF_fetch, (GO_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties), (libctx, algorithm, properties)) \
-+DEFINEFUNC_3_0(void, EVP_KDF_free, (GO_EVP_KDF_PTR kdf), (kdf)) \
-+DEFINEFUNC_3_0(GO_EVP_KDF_CTX_PTR, EVP_KDF_CTX_new, (GO_EVP_KDF_PTR kdf), (kdf)) \
-+DEFINEFUNC_3_0(int, EVP_KDF_CTX_set_params, (GO_EVP_KDF_CTX_PTR ctx, const GO_OSSL_PARAM_PTR params), (ctx, params)) \
-+DEFINEFUNC_3_0(void, EVP_KDF_CTX_free, (GO_EVP_KDF_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC_3_0(size_t, EVP_KDF_CTX_get_kdf_size, (GO_EVP_KDF_CTX_PTR ctx), (ctx)) \
-+DEFINEFUNC_3_0(int, EVP_KDF_derive, (GO_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const GO_OSSL_PARAM_PTR params), (ctx, key, keylen, params)) \
-+
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go
-new file mode 100644
-index 00000000000000..5e0da7e362cd04
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.go
-@@ -0,0 +1,14 @@
-+//go:build !cmd_go_bootstrap
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+package openssl
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_get_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// Go wrappers for testing the thread setup code as _test.go files cannot import "C".
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// #include "thread_setup.h"
-+import "C"
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+// opensslThreadsCleanedUp returns the number of times the thread-local OpenSSL
-+// state has been cleaned up since the process started.
-+func opensslThreadsCleanedUp() uint {
-+	return uint(C.go_openssl_threads_cleaned_up)
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.h b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.h
-new file mode 100644
-index 00000000000000..98d12f82a27c37
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup.h
-@@ -0,0 +1,4 @@
-+#define CRYPTO_LOCK 0x01
 +
-+/* Used by unit tests. */
-+extern volatile unsigned int go_openssl_threads_cleaned_up;
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
-new file mode 100644
-index 00000000000000..c837f9cb4dd7a3
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_unix.c
-@@ -0,0 +1,64 @@
-+//go:build unix
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+#include "goopenssl.h"
-+#include "thread_setup.h"
-+#include <pthread.h>
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+/* This array will store all of the mutexes available to OpenSSL. */ 
-+static pthread_mutex_t *mutex_buf = NULL;
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+static pthread_key_t destructor_key;
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+/* Used by unit tests. */
-+volatile unsigned int go_openssl_threads_cleaned_up = 0;
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_private_check(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+static void locking_function(int mode, int n, const char *file, int line)
-+{
-+    if (mode & CRYPTO_LOCK)
-+        pthread_mutex_lock(&mutex_buf[n]);
-+    else
-+        pthread_mutex_unlock(&mutex_buf[n]);
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+static void thread_id(GO_CRYPTO_THREADID_PTR tid)
-+{
-+    go_openssl_CRYPTO_THREADID_set_numeric(tid, (unsigned long)pthread_self());
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+    // OpenSSL fetches the current thread ID whenever it does anything with the
-+    // per-thread error state, so this function is guaranteed to be executed at
-+    // least once on any thread with associated error state. The thread-local
-+    // variable needs to be set to a non-NULL value so that the destructor will
-+    // be called when the thread exits.
-+    // The actual value does not matter, but should be a pointer with a valid size.
-+    // See https://github.com/golang-fips/openssl/pull/162
-+    static char stub;
-+    (void) pthread_setspecific(destructor_key, &stub);
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+static void cleanup_thread_state(void *ignored)
-+{
-+    UNUSED(ignored);
-+    go_openssl_ERR_remove_thread_state(NULL);
-+    // ERR_remove_thread_state(NULL) in turn calls our registered thread_id
-+    // callback via CRYPTO_THREADID_current(), which sets the thread-local
-+    // variable associated with this destructor to a non-NULL value. We have to
-+    // clear the variable ourselves to prevent pthreads from calling the
-+    // destructor again for the same thread.
-+    (void) pthread_setspecific(destructor_key, NULL);
-+    go_openssl_threads_cleaned_up++;
-+}
-+
-+int go_openssl_thread_setup(void)
-+{
-+    if (pthread_key_create(&destructor_key, cleanup_thread_state) != 0)
-+        return 0;
-+    mutex_buf = malloc(go_openssl_CRYPTO_num_locks()*sizeof(pthread_mutex_t));
-+    if (!mutex_buf)
-+        return 0;
-+    int i;
-+    for (i = 0; i < go_openssl_CRYPTO_num_locks(); i++)
-+        pthread_mutex_init(&mutex_buf[i], NULL);
-+    go_openssl_CRYPTO_THREADID_set_callback(thread_id);
-+    go_openssl_CRYPTO_set_locking_callback(locking_function);
-+    return 1;
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c
-new file mode 100644
-index 00000000000000..93281d6cffc352
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/thread_setup_windows.c
-@@ -0,0 +1,64 @@
-+//go:build windows
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+#include "goopenssl.h"
-+#include "thread_setup.h"
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_sign_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+#include <stdlib.h>
-+#include <windows.h>
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_up_ref(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+/* This array will store all of the mutexes available to OpenSSL. */
-+static HANDLE *mutex_buf = NULL;
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+static DWORD fls_index = FLS_OUT_OF_INDEXES;
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_PKEY_verify_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+/* Used by unit tests. */
-+volatile unsigned int go_openssl_threads_cleaned_up = 0;
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+static void locking_function(int mode, int n, const char *file, int line)
-+{
-+    if (mode & CRYPTO_LOCK)
-+        WaitForSingleObject(mutex_buf[n], INFINITE);
-+    else
-+        ReleaseMutex(mutex_buf[n]);
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR _arg0) {
++	_g_EVP_SIGNATURE_free(_arg0);
 +}
 +
-+static void thread_id(GO_CRYPTO_THREADID_PTR tid)
-+{
-+    go_openssl_CRYPTO_THREADID_set_numeric(tid, (unsigned long)GetCurrentThreadId());
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void) {
++	return _g_EVP_aes_128_cbc();
++}
 +
-+    // OpenSSL fetches the current thread ID whenever it does anything with the
-+    // per-thread error state, so this function is guaranteed to be executed at
-+    // least once on any thread with associated error state. As the Win32 API
-+    // reference documentation is unclear on whether the fiber-local storage
-+    // slot needs to be set to trigger the destructor on thread exit, set it to
-+    // a non-NULL value just in case.
-+    (void) FlsSetValue(fls_index, (void*)1);
-+    go_openssl_threads_cleaned_up++;
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void) {
++	return _g_EVP_aes_128_ctr();
 +}
 +
-+static void cleanup_thread_state(void *ignored)
-+{
-+    UNUSED(ignored);
-+    go_openssl_ERR_remove_thread_state(NULL);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void) {
++	return _g_EVP_aes_128_ecb();
 +}
 +
-+int go_openssl_thread_setup(void)
-+{
-+    // Use the fiber-local storage API to hook a callback on thread exit.
-+    // https://devblogs.microsoft.com/oldnewthing/20191011-00/?p=102989
-+    fls_index = FlsAlloc(cleanup_thread_state);
-+    if (fls_index == FLS_OUT_OF_INDEXES)
-+        return 0;
-+    mutex_buf = malloc(go_openssl_CRYPTO_num_locks()*sizeof(HANDLE));
-+    if (!mutex_buf)
-+        return 0;
-+    int i;
-+    for (i = 0; i < go_openssl_CRYPTO_num_locks(); i++)
-+        mutex_buf[i] = CreateMutex(NULL, FALSE, NULL);
-+    go_openssl_CRYPTO_set_locking_callback(locking_function);
-+    // go_openssl_CRYPTO_set_id_callback is not strictly needed on Windows
-+    // as OpenSSL uses GetCurrentThreadId() by default.
-+    // But we need to piggyback off the callback for our own purposes.
-+    go_openssl_CRYPTO_THREADID_set_callback(thread_id);
-+    return 1;
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void) {
++	return _g_EVP_aes_128_gcm();
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-new file mode 100644
-index 00000000000000..33134548830d3e
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-@@ -0,0 +1,160 @@
-+//go:build !cmd_go_bootstrap
 +
-+package openssl
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void) {
++	return _g_EVP_aes_192_cbc();
++}
 +
-+// #include "goopenssl.h"
-+import "C"
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
-+	"sync"
-+	"unsafe"
-+)
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void) {
++	return _g_EVP_aes_192_ctr();
++}
 +
-+func SupportsTLS1PRF() bool {
-+	switch vMajor {
-+	case 1:
-+		return vMinor >= 1
-+	case 3:
-+		_, err := fetchTLS1PRF3()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void) {
++	return _g_EVP_aes_192_ecb();
 +}
 +
-+// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
-+// else it implements the TLS 1.2 pseudo-random function.
-+// The pseudo-random number will be written to result and will be of length len(result).
-+func TLS1PRF(result, secret, label, seed []byte, fh func() hash.Hash) error {
-+	var md C.GO_EVP_MD_PTR
-+	if fh == nil {
-+		// TLS 1.0/1.1 PRF doesn't allow to specify the hash function,
-+		// it always uses MD5SHA1. If h is nil, then assume
-+		// that the caller wants to use TLS 1.0/1.1 PRF.
-+		// OpenSSL detects this case by checking if the hash
-+		// function is MD5SHA1.
-+		md = loadHash(crypto.MD5SHA1).md
-+	} else {
-+		h, err := hashFuncHash(fh)
-+		if err != nil {
-+			return err
-+		}
-+		md = hashToMD(h)
-+	}
-+	if md == nil {
-+		return errors.New("unsupported hash function")
-+	}
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void) {
++	return _g_EVP_aes_192_gcm();
++}
 +
-+	switch vMajor {
-+	case 1:
-+		return tls1PRF1(result, secret, label, seed, md)
-+	case 3:
-+		return tls1PRF3(result, secret, label, seed, md)
-+	default:
-+		return errUnsupportedVersion()
-+	}
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void) {
++	return _g_EVP_aes_256_cbc();
 +}
 +
-+// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
-+func tls1PRF1(result, secret, label, seed []byte, md C.GO_EVP_MD_PTR) error {
-+	checkMajorVersion(1)
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void) {
++	return _g_EVP_aes_256_ctr();
++}
 +
-+	ctx := C.go_openssl_EVP_PKEY_CTX_new_id(C.GO_EVP_PKEY_TLS1_PRF, nil)
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_PKEY_CTX_new_id")
-+	}
-+	defer func() {
-+		C.go_openssl_EVP_PKEY_CTX_free(ctx)
-+	}()
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void) {
++	return _g_EVP_aes_256_ecb();
++}
 +
-+	if C.go_openssl_EVP_PKEY_derive_init(ctx) != 1 {
-+		return newOpenSSLError("EVP_PKEY_derive_init")
-+	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+		C.GO1_EVP_PKEY_OP_DERIVE,
-+		C.GO_EVP_PKEY_CTRL_TLS_MD,
-+		0, unsafe.Pointer(md)) != 1 {
-+		return newOpenSSLError("EVP_PKEY_CTX_set_tls1_prf_md")
-+	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+		C.GO1_EVP_PKEY_OP_DERIVE,
-+		C.GO_EVP_PKEY_CTRL_TLS_SECRET,
-+		C.int(len(secret)), unsafe.Pointer(base(secret))) != 1 {
-+		return newOpenSSLError("EVP_PKEY_CTX_set1_tls1_prf_secret")
-+	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+		C.GO1_EVP_PKEY_OP_DERIVE,
-+		C.GO_EVP_PKEY_CTRL_TLS_SEED,
-+		C.int(len(label)), unsafe.Pointer(base(label))) != 1 {
-+		return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+	}
-+	if C.go_openssl_EVP_PKEY_CTX_ctrl(ctx, -1,
-+		C.GO1_EVP_PKEY_OP_DERIVE,
-+		C.GO_EVP_PKEY_CTRL_TLS_SEED,
-+		C.int(len(seed)), unsafe.Pointer(base(seed))) != 1 {
-+		return newOpenSSLError("EVP_PKEY_CTX_add1_tls1_prf_seed")
-+	}
-+	outLen := C.size_t(len(result))
-+	if C.go_openssl_EVP_PKEY_derive_wrapper(ctx, base(result), outLen).result != 1 {
-+		return newOpenSSLError("EVP_PKEY_derive")
-+	}
-+	// The Go standard library expects TLS1PRF to return the requested number of bytes,
-+	// fail if it doesn't. While there is no known situation where this will happen,
-+	// EVP_PKEY_derive handles multiple algorithms and there could be a subtle mismatch
-+	// after more code changes in the future.
-+	if outLen != C.size_t(len(result)) {
-+		return errors.New("tls1-prf: derived less bytes than requested")
-+	}
-+	return nil
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void) {
++	return _g_EVP_aes_256_gcm();
 +}
 +
-+// fetchTLS1PRF3 fetches the TLS1-PRF KDF algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchTLS1PRF3 = sync.OnceValues(func() (C.GO_EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+	name := C.CString("TLS1-PRF")
-+	kdf := C.go_openssl_EVP_KDF_fetch(nil, name, nil)
-+	C.free(unsafe.Pointer(name))
-+	if kdf == nil {
-+		return nil, newOpenSSLError("EVP_KDF_fetch")
-+	}
-+	return kdf, nil
-+})
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR _arg0) {
++	return _g_EVP_default_properties_is_fips_enabled(_arg0);
++}
 +
-+// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
-+func tls1PRF3(result, secret, label, seed []byte, md C.GO_EVP_MD_PTR) error {
-+	checkMajorVersion(3)
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void) {
++	return _g_EVP_des_cbc();
++}
 +
-+	kdf, err := fetchTLS1PRF3()
-+	if err != nil {
-+		return err
-+	}
-+	ctx := C.go_openssl_EVP_KDF_CTX_new(kdf)
-+	if ctx == nil {
-+		return newOpenSSLError("EVP_KDF_CTX_new")
-+	}
-+	defer C.go_openssl_EVP_KDF_CTX_free(ctx)
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void) {
++	return _g_EVP_des_ecb();
++}
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return err
-+	}
-+	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, C.go_openssl_EVP_MD_get0_name(md), 0)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SEED, seed)
-+	params, err := bld.build()
-+	if err != nil {
-+		return err
-+	}
-+	defer C.go_openssl_OSSL_PARAM_free(params)
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void) {
++	return _g_EVP_des_ede3_cbc();
++}
 +
-+	if C.go_openssl_EVP_KDF_derive(ctx, base(result), C.size_t(len(result)), params) != 1 {
-+		return newOpenSSLError("EVP_KDF_derive")
-+	}
-+	return nil
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void) {
++	return _g_EVP_des_ede3_ecb();
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
-new file mode 100644
-index 00000000000000..e60a5dde390be6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
-@@ -0,0 +1,86 @@
-+// Code generated by cmd/genaesmodes. DO NOT EDIT.
 +
-+//go:build cgo && !cmd_go_bootstrap
++const _EVP_MD_PTR _mkcgo_EVP_md4(void) {
++	return _g_EVP_md4();
++}
 +
-+package openssl
++const _EVP_MD_PTR _mkcgo_EVP_md5(void) {
++	return _g_EVP_md5();
++}
 +
-+import "crypto/cipher"
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void) {
++	return _g_EVP_md5_sha1();
++}
 +
-+type cipherWithCBC struct {
-+	aesCipher
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void) {
++	return _g_EVP_rc4();
 +}
 +
-+type cipherWithCTR struct {
-+	aesCipher
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void) {
++	return _g_EVP_ripemd160();
 +}
 +
-+type cipherWithCBC_CTR struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithCTR
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void) {
++	return _g_EVP_sha1();
 +}
 +
-+type cipherWithGCM struct {
-+	aesCipher
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void) {
++	return _g_EVP_sha224();
 +}
 +
-+type cipherWithCBC_GCM struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithGCM
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void) {
++	return _g_EVP_sha256();
 +}
 +
-+type cipherWithCTR_GCM struct {
-+	aesCipher
-+	cipherWithCTR
-+	cipherWithGCM
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void) {
++	return _g_EVP_sha384();
 +}
 +
-+type cipherWithCBC_CTR_GCM struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithCTR
-+	cipherWithGCM
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void) {
++	return _g_EVP_sha3_224();
 +}
 +
-+func newAESBlock(c *evpCipher, kind cipherKind) cipher.Block {
-+	aes := aesCipher{c}
-+	var block cipher.Block
-+	supportsCBC := loadCipher(kind, cipherModeCBC) != nil
-+	supportsCTR := loadCipher(kind, cipherModeCTR) != nil
-+	supportsGCM := loadCipher(kind, cipherModeGCM) != nil
-+	switch {
-+	case !supportsCBC && !supportsCTR && !supportsGCM:
-+		block = aes
-+	case supportsCBC && !supportsCTR && !supportsGCM:
-+		block = cipherWithCBC{aes}
-+	case !supportsCBC && supportsCTR && !supportsGCM:
-+		block = cipherWithCTR{aes}
-+	case supportsCBC && supportsCTR && !supportsGCM:
-+		block = cipherWithCBC_CTR{aes,
-+			cipherWithCBC{aes},
-+			cipherWithCTR{aes},
-+		}
-+	case !supportsCBC && !supportsCTR && supportsGCM:
-+		block = cipherWithGCM{aes}
-+	case supportsCBC && !supportsCTR && supportsGCM:
-+		block = cipherWithCBC_GCM{aes,
-+			cipherWithCBC{aes},
-+			cipherWithGCM{aes},
-+		}
-+	case !supportsCBC && supportsCTR && supportsGCM:
-+		block = cipherWithCTR_GCM{aes,
-+			cipherWithCTR{aes},
-+			cipherWithGCM{aes},
-+		}
-+	case supportsCBC && supportsCTR && supportsGCM:
-+		block = cipherWithCBC_CTR_GCM{aes,
-+			cipherWithCBC{aes},
-+			cipherWithCTR{aes},
-+			cipherWithGCM{aes},
-+		}
-+	default:
-+		panic("unreachable")
-+	}
-+	return block
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void) {
++	return _g_EVP_sha3_256();
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
-new file mode 100644
-index 00000000000000..9e841e7a26e4eb
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
-@@ -0,0 +1,21 @@
-+    MIT License
 +
-+    Copyright (c) Microsoft Corporation.
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void) {
++	return _g_EVP_sha3_384();
++}
 +
-+    Permission is hereby granted, free of charge, to any person obtaining a copy
-+    of this software and associated documentation files (the "Software"), to deal
-+    in the Software without restriction, including without limitation the rights
-+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-+    copies of the Software, and to permit persons to whom the Software is
-+    furnished to do so, subject to the following conditions:
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void) {
++	return _g_EVP_sha3_512();
++}
 +
-+    The above copyright notice and this permission notice shall be included in all
-+    copies or substantial portions of the Software.
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void) {
++	return _g_EVP_sha512();
++}
 +
-+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-+    SOFTWARE
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
-new file mode 100644
-index 00000000000000..73891afeab93d7
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
-@@ -0,0 +1,31 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void) {
++	return _g_EVP_sha512_224();
++}
 +
-+package bbig
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void) {
++	return _g_EVP_sha512_256();
++}
 +
-+import (
-+	"math/big"
++int _mkcgo_FIPS_mode(void) {
++	return _g_FIPS_mode();
++}
 +
-+	"github.com/microsoft/go-crypto-darwin/xcrypto"
-+)
++int _mkcgo_FIPS_mode_set(int _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_FIPS_mode_set(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
 +
-+func Enc(b *big.Int) xcrypto.BigInt {
-+	if b == nil {
-+		return nil
-+	}
-+	x := b.Bytes()
-+	if len(x) == 0 {
-+		return xcrypto.BigInt{}
-+	}
-+	return x
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
 +}
 +
-+func Dec(b xcrypto.BigInt) *big.Int {
-+	if b == nil {
-+		return nil
-+	}
-+	if len(b) == 0 {
-+		return new(big.Int)
-+	}
-+	return new(big.Int).SetBytes(b)
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR _arg0) {
++	_g_HMAC_CTX_free(_arg0);
++}
++
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OBJ_nid2sn(int _arg0) {
++	return _g_OBJ_nid2sn(_arg0);
++}
++
++void _mkcgo_OPENSSL_init(void) {
++	_g_OPENSSL_init();
++}
++
++int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_available_OPENSSL_version_major() {
++	return _g_OPENSSL_version_major != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_major(void) {
++	return _g_OPENSSL_version_major();
++}
++
++int _mkcgo_available_OPENSSL_version_minor() {
++	return _g_OPENSSL_version_minor != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_minor(void) {
++	return _g_OPENSSL_version_minor();
++}
++
++int _mkcgo_available_OPENSSL_version_patch() {
++	return _g_OPENSSL_version_patch != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_patch(void) {
++	return _g_OPENSSL_version_patch();
++}
++
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR _arg0) {
++	_g_OSSL_PARAM_BLD_free(_arg0);
++}
++
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_OSSL_PARAM_BLD_PTR _ret = _g_OSSL_PARAM_BLD_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR _arg0) {
++	_g_OSSL_PARAM_free(_arg0);
++}
++
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
++	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
++}
++
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR _arg0) {
++	return _g_OSSL_PROVIDER_get0_name(_arg0);
++}
++
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OpenSSL_version(int _arg0) {
++	return _g_OpenSSL_version(_arg0);
++}
++
++int _mkcgo_available_OpenSSL_version_num() {
++	return _g_OpenSSL_version_num != NULL;
++}
++
++unsigned long _mkcgo_OpenSSL_version_num(void) {
++	return _g_OpenSSL_version_num();
++}
++
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_RAND_bytes(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_RSA_free(_RSA_PTR _arg0) {
++	_g_RSA_free(_arg0);
++}
++
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_crt_params(_arg0, _arg1, _arg2, _arg3);
++}
++
++void _mkcgo_RSA_get0_factors(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_RSA_get0_factors(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_RSA_get0_key(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
++}
++
++_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_RSA_PTR _ret = _g_RSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
+new file mode 100644
+index 00000000000000..568e410a533626
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
+@@ -0,0 +1,1297 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++package ossl
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#cgo unix LDFLAGS: -ldl
++
++#include "zossl.h"
++*/
++import "C"
++import "unsafe"
++
++const (
++	POINT_CONVERSION_UNCOMPRESSED       = 4
++	OPENSSL_INIT_LOAD_CRYPTO_STRINGS    = 0x00000002
++	OPENSSL_INIT_ADD_ALL_CIPHERS        = 0x00000004
++	OPENSSL_INIT_ADD_ALL_DIGESTS        = 0x00000008
++	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
++	EVP_CTRL_GCM_GET_TAG                = 0x10
++	EVP_CTRL_GCM_SET_TAG                = 0x11
++	EVP_PKEY_CTRL_MD                    = 1
++	EVP_PKEY_RSA                        = 6
++	EVP_PKEY_EC                         = 408
++	EVP_PKEY_TLS1_PRF                   = 1021
++	EVP_PKEY_HKDF                       = 1036
++	EVP_PKEY_ED25519                    = 1087
++	EVP_PKEY_DSA                        = 116
++	EVP_PKEY_OP_DERIVE                  = (1 << 10)
++	EVP_MAX_MD_SIZE                     = 64
++	EVP_PKEY_PUBLIC_KEY                 = 0x86
++	EVP_PKEY_KEYPAIR                    = 0x87
++	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
++	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
++	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
++	EVP_PKEY_CTRL_TLS_MD                = 0x1000
++	EVP_PKEY_CTRL_TLS_SECRET            = 0x1001
++	EVP_PKEY_CTRL_TLS_SEED              = 0x1002
++	EVP_PKEY_CTRL_HKDF_MD               = 0x1003
++	EVP_PKEY_CTRL_HKDF_SALT             = 0x1004
++	EVP_PKEY_CTRL_HKDF_KEY              = 0x1005
++	EVP_PKEY_CTRL_HKDF_INFO             = 0x1006
++	EVP_PKEY_CTRL_HKDF_MODE             = 0x1007
++	NID_X9_62_prime256v1                = 415
++	NID_secp224r1                       = 713
++	NID_secp384r1                       = 715
++	NID_secp521r1                       = 716
++	RSA_PKCS1_PADDING                   = 1
++	RSA_NO_PADDING                      = 3
++	RSA_PKCS1_OAEP_PADDING              = 4
++	RSA_PKCS1_PSS_PADDING               = 6
++	RSA_PSS_SALTLEN_DIGEST              = -1
++	RSA_PSS_SALTLEN_AUTO                = -2
++	RSA_PSS_SALTLEN_MAX_SIGN            = -2
++	RSA_PSS_SALTLEN_MAX                 = -3
++	EVP_PKEY_CTRL_RSA_PADDING           = 0x1001
++	EVP_PKEY_CTRL_RSA_PSS_SALTLEN       = 0x1002
++	EVP_PKEY_CTRL_RSA_KEYGEN_BITS       = 0x1003
++	EVP_PKEY_CTRL_RSA_MGF1_MD           = 0x1005
++	EVP_PKEY_CTRL_RSA_OAEP_MD           = 0x1009
++	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
++	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
++	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
++)
++
++type BIGNUM_PTR = C._BIGNUM_PTR
++type BN_CTX_PTR = C._BN_CTX_PTR
++type DSA_PTR = C._DSA_PTR
++type EC_GROUP_PTR = C._EC_GROUP_PTR
++type EC_KEY_PTR = C._EC_KEY_PTR
++type EC_POINT_PTR = C._EC_POINT_PTR
++type ENGINE_PTR = C._ENGINE_PTR
++type EVP_CIPHER_CTX_PTR = C._EVP_CIPHER_CTX_PTR
++type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
++type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
++type EVP_KDF_PTR = C._EVP_KDF_PTR
++type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
++type EVP_MAC_PTR = C._EVP_MAC_PTR
++type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
++type EVP_MD_PTR = C._EVP_MD_PTR
++type EVP_PKEY_CTX_PTR = C._EVP_PKEY_CTX_PTR
++type EVP_PKEY_PTR = C._EVP_PKEY_PTR
++type EVP_SIGNATURE_PTR = C._EVP_SIGNATURE_PTR
++type HMAC_CTX_PTR = C._HMAC_CTX_PTR
++type OPENSSL_INIT_SETTINGS_PTR = C._OPENSSL_INIT_SETTINGS_PTR
++type OSSL_LIB_CTX_PTR = C._OSSL_LIB_CTX_PTR
++type OSSL_PARAM_BLD_PTR = C._OSSL_PARAM_BLD_PTR
++type OSSL_PARAM_PTR = C._OSSL_PARAM_PTR
++type OSSL_PROVIDER_PTR = C._OSSL_PROVIDER_PTR
++type RSA_PTR = C._RSA_PTR
++type Point_conversion_form_t = C.point_conversion_form_t
++
++func MkcgoLoad_(handle unsafe.Pointer) {
++	C.__mkcgo_load_(handle)
++}
++
++func MkcgoUnload_() {
++	C.__mkcgo_unload_()
++}
++
++func MkcgoLoad_111(handle unsafe.Pointer) {
++	C.__mkcgo_load_111(handle)
++}
++
++func MkcgoUnload_111() {
++	C.__mkcgo_unload_111()
++}
++
++func MkcgoLoad_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_3(handle)
++}
++
++func MkcgoUnload_3() {
++	C.__mkcgo_unload_3()
++}
++
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_1(handle)
++}
++
++func MkcgoUnload_init_1() {
++	C.__mkcgo_unload_init_1()
++}
++
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_3(handle)
++}
++
++func MkcgoUnload_init_3() {
++	C.__mkcgo_unload_init_3()
++}
++
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_legacy_1(handle)
++}
++
++func MkcgoUnload_legacy_1() {
++	C.__mkcgo_unload_legacy_1()
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	C.__mkcgo_load_version(handle)
++}
++
++func MkcgoUnload_version() {
++	C.__mkcgo_unload_version()
++}
++
++//go:nosplit
++func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++}
++
++func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), arg2, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_bin2bn", _err)
++}
++
++func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2binpad", _err)
++}
++
++func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", _err)
++}
++
++func BN_clear(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear(arg0)
++}
++
++func BN_clear_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear_free(arg0)
++}
++
++func BN_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_free(arg0)
++}
++
++func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(s)), C.int(len), ret, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_lebin2bn", _err)
++}
++
++func BN_new() (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_new", _err)
++}
++
++func BN_num_bits(arg0 BIGNUM_PTR) int32 {
++	return int32(C._mkcgo_BN_num_bits(arg0))
++}
++
++func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
++	C._mkcgo_CRYPTO_free(str, (*C.char)(unsafe.Pointer(file)), C.int(line))
++}
++
++func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("CRYPTO_malloc", _err)
++}
++
++func DSA_free(r DSA_PTR) {
++	C._mkcgo_DSA_free(r)
++}
++
++func DSA_generate_key(a DSA_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_generate_key", _err)
++}
++
++func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_key(d, pub_key, priv_key)
++}
++
++func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_pqg(d, p, q, g)
++}
++
++func DSA_new() (DSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("DSA_new", _err)
++}
++
++func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_key", _err)
++}
++
++func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_pqg", _err)
++}
++
++func EC_GROUP_free(group EC_GROUP_PTR) {
++	C._mkcgo_EC_GROUP_free(group)
++}
++
++func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
++}
++
++func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_check_key", _err)
++}
++
++func EC_KEY_free(arg0 EC_KEY_PTR) {
++	C._mkcgo_EC_KEY_free(arg0)
++}
++
++func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
++	return C._mkcgo_EC_KEY_get0_group(arg0)
++}
++
++func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
++	return C._mkcgo_EC_KEY_get0_private_key(arg0)
++}
++
++func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
++	return C._mkcgo_EC_KEY_get0_public_key(arg0)
++}
++
++func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", _err)
++}
++
++func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", _err)
++}
++
++func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", _err)
++}
++
++func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
++}
++
++func EC_POINT_free(arg0 EC_POINT_PTR) {
++	C._mkcgo_EC_POINT_free(arg0)
++}
++
++func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
++}
++
++func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_mul", _err)
++}
++
++func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_POINT_new", _err)
++}
++
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", _err)
++}
++
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EC_POINT_point2oct", _err)
++}
++
++func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
++}
++
++func ERR_clear_error() {
++	C._mkcgo_ERR_clear_error()
++}
++
++func ERR_error_string_n(e uint32, buf *byte, len int) {
++	C._mkcgo_ERR_error_string_n(C.ulong(e), (*C.char)(unsafe.Pointer(buf)), C.size_t(len))
++}
++
++func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint32 {
++	return uint32(C._mkcgo_ERR_get_error_all((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line)), (**C.char)(unsafe.Pointer(__func)), (**C.char)(unsafe.Pointer(data)), (*C.int)(unsafe.Pointer(flags))))
++}
++
++func ERR_get_error_line(file **byte, line *int32) uint32 {
++	return uint32(C._mkcgo_ERR_get_error_line((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line))))
++}
++
++func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
++}
++
++func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
++	C._mkcgo_EVP_CIPHER_CTX_free(arg0)
++}
++
++func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", _err)
++}
++
++func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
++}
++
++func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
++}
++
++func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_fetch", _err)
++}
++
++func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_CIPHER_get0_name(cipher)))
++}
++
++func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
++	return int32(C._mkcgo_EVP_CIPHER_get_block_size(cipher))
++}
++
++func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", _err)
++}
++
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", _err)
++}
++
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(outm)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", _err)
++}
++
++func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", _err)
++}
++
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", _err)
++}
++
++func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_Digest(unsafe.Pointer(&*(*byte)(data)), C.size_t(count), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_Digest", _err)
++}
++
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", _err)
++}
++
++func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit", _err)
++}
++
++func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", _err)
++}
++
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(sigret)), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSign", _err)
++}
++
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", _err)
++}
++
++func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", _err)
++}
++
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestUpdate(ctx, unsafe.Pointer(&*(*byte)(d)), C.size_t(cnt), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", _err)
++}
++
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(sigret)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerify", _err)
++}
++
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", _err)
++}
++
++func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", _err)
++}
++
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", _err)
++}
++
++func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", _err)
++}
++
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", _err)
++}
++
++func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
++	C._mkcgo_EVP_KDF_CTX_free(ctx)
++}
++
++func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
++}
++
++func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_CTX_new", _err)
++}
++
++func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
++}
++
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_derive", _err)
++}
++
++func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_fetch", _err)
++}
++
++func EVP_KDF_free(kdf EVP_KDF_PTR) {
++	C._mkcgo_EVP_KDF_free(kdf)
++}
++
++func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", _err)
++}
++
++func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
++	C._mkcgo_EVP_MAC_CTX_free(arg0)
++}
++
++func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_new", _err)
++}
++
++func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
++}
++
++func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_fetch", _err)
++}
++
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(outsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_final", _err)
++}
++
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_init", _err)
++}
++
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(data)), C.size_t(datalen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_update", _err)
++}
++
++func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_copy(out, in, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", _err)
++}
++
++func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
++}
++
++func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
++	C._mkcgo_EVP_MD_CTX_free(ctx)
++}
++
++func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_new", _err)
++}
++
++func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_fetch", _err)
++}
++
++func EVP_MD_free(md EVP_MD_PTR) {
++	C._mkcgo_EVP_MD_free(md)
++}
++
++func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_MD_get0_name(md)))
++}
++
++func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
++	return C._mkcgo_EVP_MD_get0_provider(md)
++}
++
++func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_block_size(md))
++}
++
++func EVP_MD_get_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_size(md))
++}
++
++func EVP_MD_get_type(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_type(md))
++}
++
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
++}
++
++func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
++}
++
++func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
++	C._mkcgo_EVP_PKEY_CTX_free(arg0)
++}
++
++func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", _err)
++}
++
++func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
++}
++
++func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
++}
++
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, label, C.int(len), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
++}
++
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
++}
++
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
++}
++
++func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
++}
++
++func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
++}
++
++func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
++}
++
++func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++}
++
++func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
++}
++
++func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", _err)
++}
++
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", _err)
++}
++
++func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
++}
++
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", _err)
++}
++
++func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", _err)
++}
++
++func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++}
++
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", _err)
++}
++
++func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
++}
++
++func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
++	C._mkcgo_EVP_PKEY_free(arg0)
++}
++
++func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", _err)
++}
++
++func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
++}
++
++func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", _err)
++}
++
++func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
++}
++
++func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", _err)
++}
++
++func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
++}
++
++func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", _err)
++}
++
++func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++}
++
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(priv)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
++}
++
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
++}
++
++func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", _err)
++}
++
++func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", _err)
++}
++
++func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", _err)
++}
++
++func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new", _err)
++}
++
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
++}
++
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
++}
++
++func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", _err)
++}
++
++func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
++}
++
++func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", _err)
++}
++
++func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
++}
++
++func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
++}
++
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), C.size_t(publen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
++}
++
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", _err)
++}
++
++func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", _err)
++}
++
++func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", _err)
++}
++
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", _err)
++}
++
++func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", _err)
++}
++
++func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", _err)
++}
++
++func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
++	C._mkcgo_EVP_SIGNATURE_free(signature)
++}
++
++func EVP_aes_128_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_cbc()
++}
++
++func EVP_aes_128_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ctr()
++}
++
++func EVP_aes_128_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ecb()
++}
++
++func EVP_aes_128_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_gcm()
++}
++
++func EVP_aes_192_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_cbc()
++}
++
++func EVP_aes_192_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ctr()
++}
++
++func EVP_aes_192_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ecb()
++}
++
++func EVP_aes_192_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_gcm()
++}
++
++func EVP_aes_256_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_cbc()
++}
++
++func EVP_aes_256_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ctr()
++}
++
++func EVP_aes_256_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ecb()
++}
++
++func EVP_aes_256_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_gcm()
++}
++
++func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", _err)
++}
++
++func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
++	return int32(C._mkcgo_EVP_default_properties_is_fips_enabled(libctx))
++}
++
++func EVP_des_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_cbc()
++}
++
++func EVP_des_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ecb()
++}
++
++func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_cbc()
++}
++
++func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_ecb()
++}
++
++func EVP_md4() EVP_MD_PTR {
++	return C._mkcgo_EVP_md4()
++}
++
++func EVP_md5() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5()
++}
++
++func EVP_md5_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5_sha1()
++}
++
++func EVP_rc4() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_rc4()
++}
++
++func EVP_ripemd160() EVP_MD_PTR {
++	return C._mkcgo_EVP_ripemd160()
++}
++
++func EVP_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha1()
++}
++
++func EVP_sha224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha224()
++}
++
++func EVP_sha256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha256()
++}
++
++func EVP_sha384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha384()
++}
++
++func EVP_sha3_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_224()
++}
++
++func EVP_sha3_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_256()
++}
++
++func EVP_sha3_384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_384()
++}
++
++func EVP_sha3_512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_512()
++}
++
++func EVP_sha512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512()
++}
++
++func EVP_sha512_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_224()
++}
++
++func EVP_sha512_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_256()
++}
++
++func FIPS_mode() int32 {
++	return int32(C._mkcgo_FIPS_mode())
++}
++
++func FIPS_mode_set(r int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("FIPS_mode_set", _err)
++}
++
++func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", _err)
++}
++
++func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
++	C._mkcgo_HMAC_CTX_free(arg0)
++}
++
++func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("HMAC_CTX_new", _err)
++}
++
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Final", _err)
++}
++
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Init_ex(arg0, arg1, C.int(arg2), arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Init_ex", _err)
++}
++
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.size_t(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Update", _err)
++}
++
++func OBJ_nid2sn(n int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OBJ_nid2sn(C.int(n))))
++}
++
++func OPENSSL_init() {
++	C._mkcgo_OPENSSL_init()
++}
++
++func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", _err)
++}
++
++func OPENSSL_version_major_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_major() != 0
++}
++
++func OPENSSL_version_major() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_major())
++}
++
++func OPENSSL_version_minor_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_minor() != 0
++}
++
++func OPENSSL_version_minor() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_minor())
++}
++
++func OPENSSL_version_patch_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_patch() != 0
++}
++
++func OPENSSL_version_patch() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_patch())
++}
++
++func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
++	C._mkcgo_OSSL_PARAM_BLD_free(bld)
++}
++
++func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", _err)
++}
++
++func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
++}
++
++func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
++}
++
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), buf, C.size_t(bsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
++}
++
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(buf)), C.size_t(bsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
++}
++
++func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
++}
++
++func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
++	C._mkcgo_OSSL_PARAM_free(p)
++}
++
++func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
++	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
++}
++
++func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OSSL_PROVIDER_get0_name(prov)))
++}
++
++func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", _err)
++}
++
++func OpenSSL_version(__type int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OpenSSL_version(C.int(__type))))
++}
++
++func OpenSSL_version_num_Available() bool {
++	return C._mkcgo_available_OpenSSL_version_num() != 0
++}
++
++func OpenSSL_version_num() uint32 {
++	return uint32(C._mkcgo_OpenSSL_version_num())
++}
++
++func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(pass)), C.int(passlen), (*C.uchar)(unsafe.Pointer(salt)), C.int(saltlen), C.int(iter), digest, C.int(keylen), (*C.uchar)(unsafe.Pointer(out)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
++}
++
++func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RAND_bytes", _err)
++}
++
++func RSA_free(arg0 RSA_PTR) {
++	C._mkcgo_RSA_free(arg0)
++}
++
++func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_crt_params(r, dmp1, dmq1, iqmp)
++}
++
++func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_factors(rsa, p, q)
++}
++
++func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_key(rsa, n, e, d)
++}
++
++func RSA_new() (RSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("RSA_new", _err)
++}
++
++func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", _err)
++}
++
++func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_factors", _err)
++}
++
++func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_key", _err)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
+new file mode 100644
+index 00000000000000..66249349e78e22
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
+@@ -0,0 +1,330 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
++
++#include <stdlib.h>
++#include <stdint.h>
++
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef int point_conversion_form_t;
++
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD = 1,
++	_EVP_PKEY_RSA = 6,
++	_EVP_PKEY_EC = 408,
++	_EVP_PKEY_TLS1_PRF = 1021,
++	_EVP_PKEY_HKDF = 1036,
++	_EVP_PKEY_ED25519 = 1087,
++	_EVP_PKEY_DSA = 116,
++	_EVP_PKEY_OP_DERIVE = (1 << 10),
++	_EVP_MAX_MD_SIZE = 64,
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR = 0x87,
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
++	_EVP_PKEY_CTRL_TLS_MD = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE = 0x1007,
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1 = 713,
++	_NID_secp384r1 = 715,
++	_NID_secp521r1 = 716,
++	_RSA_PKCS1_PADDING = 1,
++	_RSA_NO_PADDING = 3,
++	_RSA_PKCS1_OAEP_PADDING = 4,
++	_RSA_PKCS1_PSS_PADDING = 6,
++	_RSA_PSS_SALTLEN_DIGEST = -1,
++	_RSA_PSS_SALTLEN_AUTO = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN = -2,
++	_RSA_PSS_SALTLEN_MAX = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++};
++
++typedef void* mkcgo_err_state;
++mkcgo_err_state mkcgo_err_retrieve();
++void mkcgo_err_free(mkcgo_err_state);
++void mkcgo_err_clear();
++
++void __mkcgo_load_(void* handle);
++void __mkcgo_unload_();
++void __mkcgo_load_111(void* handle);
++void __mkcgo_unload_111();
++void __mkcgo_load_3(void* handle);
++void __mkcgo_unload_3();
++void __mkcgo_load_init_1(void* handle);
++void __mkcgo_unload_init_1();
++void __mkcgo_load_init_3(void* handle);
++void __mkcgo_unload_init_3();
++void __mkcgo_load_legacy_1(void* handle);
++void __mkcgo_unload_legacy_1();
++void __mkcgo_load_version(void* handle);
++void __mkcgo_unload_version();
++
++int _mkcgo_available_OPENSSL_version_major();
++int _mkcgo_available_OPENSSL_version_minor();
++int _mkcgo_available_OPENSSL_version_patch();
++int _mkcgo_available_OpenSSL_version_num();
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_BN_clear(_BIGNUM_PTR);
++void _mkcgo_BN_clear_free(_BIGNUM_PTR);
++void _mkcgo_BN_free(_BIGNUM_PTR);
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
++_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *);
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
++void _mkcgo_CRYPTO_free(void*, const char*, int);
++void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, mkcgo_err_state *);
++void _mkcgo_DSA_free(_DSA_PTR);
++int _mkcgo_DSA_generate_key(_DSA_PTR, mkcgo_err_state *);
++void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *);
++int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, mkcgo_err_state *);
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, mkcgo_err_state *);
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_ERR_clear_error(void);
++void _mkcgo_ERR_error_string_n(unsigned long, char*, size_t);
++unsigned long _mkcgo_ERR_get_error_all(const char**, int*, const char**, const char**, int*);
++unsigned long _mkcgo_ERR_get_error_line(const char**, int*);
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, mkcgo_err_state *);
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *);
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_Digest(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const void*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, mkcgo_err_state *);
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *);
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, mkcgo_err_state *);
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, mkcgo_err_state *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, mkcgo_err_state *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, mkcgo_err_state *);
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, mkcgo_err_state *);
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, mkcgo_err_state *);
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, mkcgo_err_state *);
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void);
++const _EVP_MD_PTR _mkcgo_EVP_md4(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void);
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
++int _mkcgo_FIPS_mode(void);
++int _mkcgo_FIPS_mode_set(int, mkcgo_err_state *);
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *);
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++const char* _mkcgo_OBJ_nid2sn(int);
++void _mkcgo_OPENSSL_init(void);
++int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, mkcgo_err_state *);
++unsigned int _mkcgo_OPENSSL_version_major(void);
++unsigned int _mkcgo_OPENSSL_version_minor(void);
++unsigned int _mkcgo_OPENSSL_version_patch(void);
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, mkcgo_err_state *);
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, mkcgo_err_state *);
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, mkcgo_err_state *);
++const char* _mkcgo_OpenSSL_version(int);
++unsigned long _mkcgo_OpenSSL_version_num(void);
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, mkcgo_err_state *);
++int _mkcgo_RAND_bytes(unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_RSA_free(_RSA_PTR);
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *);
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
+new file mode 100644
+index 00000000000000..045bb3806745a0
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
+@@ -0,0 +1,33 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build go1.24 && !cmd_go_bootstrap
++
++package ossl
++
++/*
++#cgo noescape _mkcgo_EVP_CipherUpdate
++#cgo nocallback _mkcgo_EVP_CipherUpdate
++#cgo noescape _mkcgo_EVP_DecryptFinal_ex
++#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
++#cgo noescape _mkcgo_EVP_DecryptUpdate
++#cgo nocallback _mkcgo_EVP_DecryptUpdate
++#cgo noescape _mkcgo_EVP_Digest
++#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestSign
++#cgo nocallback _mkcgo_EVP_DigestSign
++#cgo noescape _mkcgo_EVP_DigestUpdate
++#cgo nocallback _mkcgo_EVP_DigestUpdate
++#cgo noescape _mkcgo_EVP_EncryptFinal_ex
++#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
++#cgo noescape _mkcgo_EVP_EncryptUpdate
++#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_PKEY_derive
++#cgo nocallback _mkcgo_EVP_PKEY_derive
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo noescape _mkcgo_RAND_bytes
++#cgo nocallback _mkcgo_RAND_bytes
++*/
++import "C"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
+new file mode 100644
+index 00000000000000..f3377d72c8aa46
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
+@@ -0,0 +1,384 @@
++//go:build !cmd_go_bootstrap
++
++// Package openssl provides access to OpenSSL cryptographic functions.
++package openssl
++
++/*
++#include <stdlib.h> // for free()
++
++static inline void
++go_openssl_do_leak_check(void)
++{
++#ifndef __has_feature
++#define __has_feature(x) 0
++#endif
++
++#if (defined(__SANITIZE_ADDRESS__) && __SANITIZE_ADDRESS__) ||	\
++    __has_feature(address_sanitizer)
++    extern void __lsan_do_leak_check(void);
++    __lsan_do_leak_check();
++#endif
++}
++*/
++import "C"
++import (
++	"errors"
++	"math/bits"
++	"strconv"
++	"sync"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++var (
++	// vMajor and vMinor hold the major/minor OpenSSL version.
++	// It is only populated if Init has been called.
++	vMajor, vMinor, vPatch uint
++)
++
++var (
++	initOnce sync.Once
++	initErr  error
++)
++
++var isBigEndian bool
++
++// CheckVersion checks if the OpenSSL version can be loaded
++// and if the FIPS mode is enabled.
++// This function can be called before Init.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++func CheckVersion(version string) (exists, fips bool) {
++	close, err := initForCheckVersion(version)
++	if err != nil {
++		return false, false
++	}
++	defer close()
++	return true, FIPS()
++}
++
++// Init loads and initializes OpenSSL from the shared library at path.
++// It must be called before any other OpenSSL call, except CheckVersion.
++//
++// Only the first call to Init is effective.
++// Subsequent calls will return the same error result as the one from the first call.
++//
++// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
++// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
++// library libcrypto.so.1.1.1k-fips.
++func Init(file string) error {
++	initOnce.Do(func() {
++		buf := [2]byte{}
++		*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
++
++		switch buf {
++		case [2]byte{0xCD, 0xAB}:
++			isBigEndian = false
++		case [2]byte{0xAB, 0xCD}:
++			isBigEndian = true
++		default:
++			panic("Could not determine native endianness.")
++		}
++		initErr = opensslInit(file)
++	})
++	return initErr
++}
++
++func utoa(n uint) string {
++	return strconv.FormatUint(uint64(n), 10)
++}
++
++func errUnsupportedVersion() error {
++	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
++}
++
++// checkMajorVersion panics if the current major version is not expected.
++func checkMajorVersion(expected uint) {
++	if vMajor != expected {
++		panic("openssl: incorrect major version (" + strconv.Itoa(int(vMajor)) + "), expected " + strconv.Itoa(int(expected)))
++	}
++}
++
++type fail string
++
++func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
++
++// VersionText returns the version text of the OpenSSL currently loaded.
++func VersionText() string {
++	return C.GoString((*C.char)(unsafe.Pointer(ossl.OpenSSL_version(0))))
++}
++
++// FIPS returns true if OpenSSL is running in FIPS mode and there is
++// a provider available that supports FIPS. It returns false otherwise.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++func FIPS() bool {
++	switch vMajor {
++	case 1:
++		return ossl.FIPS_mode() == 1
++	case 3:
++		// Check if the default properties contain `fips=1`.
++		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
++			// Note that it is still possible that the provider used by default is FIPS-compliant,
++			// but that wouldn't be a system or user requirement.
++			return false
++		}
++		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
++		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
++		//
++		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
++		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
++		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
++		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
++		return proveSHA256("")
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
++// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
++// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
++// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
++// which is FIPS-capable.
++//
++// Considerations:
++//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
++//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
++//     the default properties contain `fips=yes`.
++//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
++//   - When using OpenSSL 1, Will always return the same value as [FIPS].
++//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
++//     some heuristics that should be treated as an implementation detail that may change in the future.
++func FIPSCapable() bool {
++	if FIPS() {
++		return true
++	}
++	if vMajor == 3 {
++		// Load the provider with and without the `fips=yes` query.
++		// If the providers are the same, then the default provider is FIPS-capable.
++		provFIPS := sha256Provider(_ProviderNameFips)
++		if provFIPS == nil {
++			return false
++		}
++		provDefault := sha256Provider("")
++		return provFIPS == provDefault
++	}
++	return false
++}
++
++// isProviderAvailable checks if the provider with the given name is available.
++// This function is used in export_test.go, but must be defined here as test files can't access C functions.
++func isProviderAvailable(name string) bool {
++	if vMajor == 1 {
++		return false
++	}
++	providerName := C.CString(name)
++	defer C.free(unsafe.Pointer(providerName))
++	return ossl.OSSL_PROVIDER_available(nil, (*byte)(unsafe.Pointer(providerName))) == 1
++}
++
++// SetFIPS enables or disables FIPS mode.
++//
++// For OpenSSL 3, if there is no provider available that supports FIPS mode,
++// SetFIPS will try to load a built-in provider that supports FIPS mode.
++func SetFIPS(enable bool) error {
++	if FIPS() == enable {
++		// Already in the desired state.
++		return nil
++	}
++	var mode int32
++	if enable {
++		mode = int32(1)
++	} else {
++		mode = int32(0)
++	}
++	switch vMajor {
++	case 1:
++		if _, err := ossl.FIPS_mode_set(mode); err != nil {
++			return err
++		}
++		return nil
++	case 3:
++		var shaProps, provName cString
++		if enable {
++			shaProps = _PropFIPSYes
++			provName = _ProviderNameFips
++		} else {
++			shaProps = _PropFIPSNo
++			provName = _ProviderNameDefault
++		}
++		if !proveSHA256(shaProps) {
++			// There is no provider available that supports the desired FIPS mode.
++			// Try to load the built-in provider associated with the given mode.
++			if p, _ := ossl.OSSL_PROVIDER_try_load(nil, provName.ptr(), 1); p == nil {
++				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
++				ossl.ERR_clear_error()
++				return errors.New("openssl: FIPS mode not supported by any provider")
++			}
++		}
++		_, err := ossl.EVP_default_properties_enable_fips(nil, mode)
++		return err
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// sha256Provider returns the provider for the SHA-256 algorithm
++// using the given properties.
++func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
++	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
++	if md == nil {
++		ossl.ERR_clear_error()
++		return nil
++	}
++	defer ossl.EVP_MD_free(md)
++	return ossl.EVP_MD_get0_provider(md)
++}
++
++// proveSHA256 checks if the SHA-256 algorithm is available
++// using the given properties.
++func proveSHA256(props cString) bool {
++	return sha256Provider(props) != nil
++}
++
++var zero byte
++
++// baseNeverEmpty returns the address of the underlying array in b.
++// If b has zero length, it returns a pointer to a zero byte.
++func baseNeverEmpty(b []byte) *byte {
++	if len(b) == 0 {
++		return &zero
++	}
++	return unsafe.SliceData(b)
++}
++
++// pbaseNeverEmpty returns the address of the underlying array in b.
++// If b has zero length, it returns a pointer to a zero byte.
++func pbaseNeverEmpty(b []byte) unsafe.Pointer {
++	return unsafe.Pointer(baseNeverEmpty(b))
++}
++
++// pbase returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func pbase(b []byte) unsafe.Pointer {
++	return unsafe.Pointer(base(b))
++}
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func base(b []byte) *byte {
++	if len(b) == 0 {
++		return nil
++	}
++	return unsafe.SliceData(b)
++}
++
++// cryptoMalloc allocates n bytes of memory on the OpenSSL heap, which may be
++// different from the heap which C.malloc allocates on. The allocated object
++// must be freed using cryptoFree. cryptoMalloc is equivalent to the
++// OPENSSL_malloc macro.
++//
++// Like C.malloc, this function is guaranteed to never return nil. If OpenSSL's
++// malloc indicates out of memory, it crashes the program.
++//
++// Only objects which the OpenSSL library will take ownership of (i.e. will be
++// freed by OPENSSL_free / CRYPTO_free) need to be allocated on the OpenSSL
++// heap.
++func cryptoMalloc(n int) unsafe.Pointer {
++	p, _ := ossl.CRYPTO_malloc(n, nil, 0)
++	if p == nil {
++		// Un-recover()-ably crash the program in the same manner as the
++		// C.malloc() wrapper function.
++		runtime_throw("openssl: CRYPTO_malloc failed")
++	}
++	return p
++}
++
++// cryptoFree frees an object allocated on the OpenSSL heap, which may be
++// different from the heap which C.malloc allocates on. cryptoFree is equivalent
++// to the OPENSSL_free macro.
++func cryptoFree(p unsafe.Pointer) {
++	ossl.CRYPTO_free(p, nil, 0)
++}
++
++const wordBytes = bits.UintSize / 8
++
++// Reverse each limb of z.
++func (z BigInt) byteSwap() {
++	for i, d := range z {
++		var n uint = 0
++		for j := range wordBytes {
++			n |= uint(byte(d)) << (8 * (wordBytes - j - 1))
++			d >>= 8
++		}
++		z[i] = n
++	}
++}
++
++func wbase(b BigInt) *byte {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*byte)(unsafe.Pointer(unsafe.SliceData(b)))
++}
++
++func bigToBN(x BigInt) (ossl.BIGNUM_PTR, error) {
++	if len(x) == 0 {
++		return nil, nil
++	}
++	if isBigEndian {
++		z := make(BigInt, len(x))
++		copy(z, x)
++		z.byteSwap()
++		x = z
++	}
++	// Limbs are always ordered in LSB first, so we can safely apply
++	// BN_lebin2bn regardless of host endianness.
++	bn, err := ossl.BN_lebin2bn(wbase(x), int32(len(x)*wordBytes), nil)
++	if err != nil {
++		return nil, err
++	}
++	return bn, nil
++}
++
++func bnToBig(bn ossl.BIGNUM_PTR) BigInt {
++	if bn == nil {
++		return nil
++	}
++
++	// Limbs are always ordered in LSB first, so we can safely apply
++	// BN_bn2lebinpad regardless of host endianness.
++	x := make(BigInt, ossl.BN_num_bits(bn))
++	if _, err := ossl.BN_bn2lebinpad(bn, wbase(x), int32(len(x)*wordBytes)); err != nil {
++		panic(err)
++	}
++	if isBigEndian {
++		x.byteSwap()
++	}
++	return x
++}
++
++// bnToBinPad converts the absolute value of bn into big-endian form and stores
++// it at to, padding with zeroes if necessary. If len(to) is not large enough to
++// hold the result, an error is returned.
++func bnToBinPad(bn ossl.BIGNUM_PTR, to []byte) error {
++	_, err := ossl.BN_bn2binpad(bn, base(to), int32(len(to)))
++	return err
++}
++
++func CheckLeaks() {
++	C.go_openssl_do_leak_check()
++}
++
++// versionAtOrAbove returns true when
++// (vMajor, vMinor, vPatch) >= (major, minor, patch),
++// compared lexicographically.
++func versionAtOrAbove(major, minor, patch uint) bool {
++	return vMajor > major || (vMajor == major && vMinor > minor) || (vMajor == major && vMinor == minor && vPatch >= patch)
++}
++
++func bigEndianUint64(b []byte) uint64 {
++	_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
++	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+new file mode 100644
+index 00000000000000..a5b6cdb9ae6336
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+@@ -0,0 +1,185 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import (
++	"runtime"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++type addParamError struct {
++	name string
++	err  error
++}
++
++func (e addParamError) Error() string {
++	return "failed to add parameter " + e.name + ": " + e.err.Error()
++}
++
++type bnParam struct {
++	value   ossl.BIGNUM_PTR
++	private bool
++}
++
++// paramBuilder is a helper for building OSSL_PARAMs.
++// If an error occurs when adding a new parameter,
++// subsequent calls to add parameters are ignored
++// and build() will return the error.
++type paramBuilder struct {
++	bld      ossl.OSSL_PARAM_BLD_PTR
++	pinner   runtime.Pinner
++	bnToFree []bnParam
++
++	err error
++}
++
++// newParamBuilder creates a new paramBuilder.
++func newParamBuilder() (*paramBuilder, error) {
++	bld, err := ossl.OSSL_PARAM_BLD_new()
++	if err != nil {
++		return nil, err
++	}
++	pb := &paramBuilder{
++		bld:      bld,
++		bnToFree: make([]bnParam, 0, 8), // the maximum known number of BIGNUMs to free are 8 for RSA
++	}
++	runtime.SetFinalizer(pb, (*paramBuilder).finalize)
++	return pb, nil
++}
++
++// finalize frees the builder.
++func (b *paramBuilder) finalize() {
++	if b.bld != nil {
++		b.pinner.Unpin()
++		for _, bn := range b.bnToFree {
++			if bn.private {
++				ossl.BN_clear_free(bn.value)
++			} else {
++				ossl.BN_free(bn.value)
++			}
++		}
++		ossl.OSSL_PARAM_BLD_free(b.bld)
++		b.bld = nil
++	}
++}
++
++// check is used internally to enforce invariants and should not be called by users of paramBuilder.
++// Returns true if it's ok to add parameters to the builder or build it.
++// Returns false if there has been an error while adding a parameter.
++// Panics if the paramBuilder has been freed, e.g. if it has already been built.
++func (b *paramBuilder) check() bool {
++	if b.err != nil {
++		return false
++	}
++	if b.bld == nil {
++		panic("openssl: paramBuilder has been freed")
++	}
++	return true
++}
++
++// build creates an OSSL_PARAM from the builder.
++// The returned OSSL_PARAM must be freed with OSSL_PARAM_free.
++// If an error occurred while adding parameters, the error is returned
++// and the OSSL_PARAM is nil. Once build() is called, the builder is finalized
++// and cannot be reused.
++func (b *paramBuilder) build() (ossl.OSSL_PARAM_PTR, error) {
++	defer b.finalize()
++	if !b.check() {
++		return nil, b.err
++	}
++	param, err := ossl.OSSL_PARAM_BLD_to_param(b.bld)
++	if err != nil {
++		return nil, err
++	}
++	return param, nil
++}
++
++// addUTF8String adds a NUL-terminated UTF-8 string to the builder.
++// size should not include the terminating NUL byte. If size is zero, then it will be calculated.
++func (b *paramBuilder) addUTF8String(name cString, value *byte, size int) {
++	if !b.check() {
++		return
++	}
++	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
++	if _, err := ossl.OSSL_PARAM_BLD_push_utf8_string(b.bld, name.ptr(), value, size); err != nil {
++		b.err = addParamError{name.str(), err}
++	}
++}
++
++// addOctetString adds an octet string to the builder.
++// The value is pinned and will be unpinned when the builder is freed.
++func (b *paramBuilder) addOctetString(name cString, value []byte) {
++	if !b.check() {
++		return
++	}
++	if len(value) != 0 {
++		b.pinner.Pin(&value[0])
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_octet_string(b.bld, name.ptr(), pbase(value), len(value)); err != nil {
++		b.err = addParamError{name.str(), err}
++	}
++}
++
++// addInt32 adds an int32 to the builder.
++func (b *paramBuilder) addInt32(name cString, value int32) {
++	if !b.check() {
++		return
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_int32(b.bld, name.ptr(), value); err != nil {
++		b.err = addParamError{name.str(), err}
++	}
++}
++
++// addBN adds a GOossl.BIGNUM_PTR to the builder.
++func (b *paramBuilder) addBN(name cString, value ossl.BIGNUM_PTR) {
++	if !b.check() {
++		return
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_BN(b.bld, name.ptr(), value); err != nil {
++		b.err = addParamError{name.str(), err}
++	}
++}
++
++// addBin adds a byte slice to the builder.
++// The slice is converted to a BIGNUM using BN_bin2bn and freed when the builder is finalized.
++// If private is true, the BIGNUM will be cleared with BN_clear_free,
++// otherwise it will be freed with BN_free.
++func (b *paramBuilder) addBin(name cString, value []byte, private bool) {
++	if !b.check() {
++		return
++	}
++	if len(value) == 0 {
++		// Nothing to do.
++		return
++	}
++	bn, err := ossl.BN_bin2bn(base(value), int32(len(value)), nil)
++	if err != nil {
++		b.err = err
++		return
++	}
++	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
++	b.addBN(name, bn)
++}
++
++// addBigInt adds a BigInt to the builder.
++// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
++// If private is true, the BIGNUM will be cleared with BN_clear_free,
++// otherwise it will be freed with BN_free.
++func (b *paramBuilder) addBigInt(name cString, value BigInt, private bool) {
++	if !b.check() {
++		return
++	}
++	if len(value) == 0 {
++		// Nothing to do.
++		return
++	}
++	bn, err := bigToBN(value)
++	if err != nil {
++		b.err = err
++		return
++	}
++	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
++	b.addBN(name, bn)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
+new file mode 100644
+index 00000000000000..ace373e6d7bb0f
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
+@@ -0,0 +1,55 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import (
++	"errors"
++	"hash"
++	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
++func SupportsPBKDF2() bool {
++	switch vMajor {
++	case 1:
++		return true
++	case 3:
++		_, err := fetchPBKDF2()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// fetchPBKDF2 fetches the PBKDF2 algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchPBKDF2 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_PBKDF2.ptr(), nil)
++	if err != nil {
++		return nil, err
++	}
++	return kdf, nil
++})
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	h, err := hashFuncHash(fh)
++	if err != nil {
++		return nil, err
++	}
++	md := hashToMD(h)
++	if md == nil {
++		return nil, errors.New("unsupported hash function")
++	}
++	out := make([]byte, keyLen)
++	_, err = ossl.PKCS5_PBKDF2_HMAC(base(password), int32(len(password)), base(salt), int32(len(salt)), int32(iter), md, int32(keyLen), base(out))
++	if err != nil {
++		return nil, err
++	}
++	return out, nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
+new file mode 100644
+index 00000000000000..34f376bed8f091
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
+@@ -0,0 +1,22 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import "github.com/golang-fips/openssl/v2/internal/ossl"
++
++type randReader int
++
++func (randReader) Read(b []byte) (int, error) {
++	if len(b) == 0 {
++		return 0, nil
++	}
++	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
++	// We check it even so.
++	if _, err := ossl.RAND_bytes(base(b), int32(len(b))); err != nil {
++		return 0, err
++	}
++	return len(b), nil
++}
++
++const RandReader = randReader(0)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
+new file mode 100644
+index 00000000000000..b585668e281d2a
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
+@@ -0,0 +1,69 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import (
++	"runtime"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// SupportsRC4 returns true if NewRC4Cipher is supported.
++func SupportsRC4() bool {
++	// True for stock OpenSSL 1 w/o FIPS.
++	// False for stock OpenSSL 3 unless the legacy provider is available.
++	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherRC4, cipherModeNone) != nil
++}
++
++// A RC4Cipher is an instance of RC4 using a particular key.
++type RC4Cipher struct {
++	ctx ossl.EVP_CIPHER_CTX_PTR
++}
++
++// NewRC4Cipher creates and returns a new Cipher.
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
++	ctx, err := newCipherCtx(cipherRC4, cipherModeNone, cipherOpEncrypt, key, nil)
++	if err != nil {
++		return nil, err
++	}
++	c := &RC4Cipher{ctx}
++	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
++	return c, nil
++}
++
++func (c *RC4Cipher) finalize() {
++	if c.ctx != nil {
++		ossl.EVP_CIPHER_CTX_free(c.ctx)
++	}
++}
++
++// Reset zeros the key data and makes the Cipher unusable.
++func (c *RC4Cipher) Reset() {
++	if c.ctx != nil {
++		ossl.EVP_CIPHER_CTX_free(c.ctx)
++		c.ctx = nil
++	}
++}
++
++// XORKeyStream sets dst to the result of XORing src with the key stream.
++// Dst and src must overlap entirely or not at all.
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
++	if c.ctx == nil || len(src) == 0 {
++		return
++	}
++	if inexactOverlap(dst[:len(src)], src) {
++		panic("crypto/rc4: invalid buffer overlap")
++	}
++	// panic if len(dst) < len(src) with a runtime out of bound error,
++	// which is what crypto/rc4 does.
++	_ = dst[len(src)-1]
++	var outLen int32
++	if _, err := ossl.EVP_EncryptUpdate(c.ctx, base(dst), &outLen, base(src), int32(len(src))); err != nil {
++		panic("crypto/rc4: " + err.Error())
++	}
++	if int(outLen) != len(src) {
++		panic("crypto/rc4: src not fully XORed")
++	}
++	runtime.KeepAlive(c)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
+new file mode 100644
+index 00000000000000..7c1a3f06f5ec40
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
+@@ -0,0 +1,366 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import (
++	"crypto"
++	"crypto/subtle"
++	"errors"
++	"hash"
++	"runtime"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++		return nil, nil, nil, nil, nil, nil, nil, nil, e
++	}
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_RSA, int32(bits), "")
++	if err != nil {
++		return bad(err)
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++	switch vMajor {
++	case 1:
++		key, err := ossl.EVP_PKEY_get1_RSA(pkey)
++		if err != nil {
++			return bad(err)
++		}
++		defer ossl.RSA_free(key)
++		var n, e, d, p, q, dmp1, dmq1, iqmp ossl.BIGNUM_PTR
++		ossl.RSA_get0_key(key, &n, &e, &d)
++		ossl.RSA_get0_factors(key, &p, &q)
++		ossl.RSA_get0_crt_params(key, &dmp1, &dmq1, &iqmp)
++		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
++		P, Q = bnToBig(p), bnToBig(q)
++		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
++	case 3:
++		tmp, err := ossl.BN_new()
++		if err != nil {
++			return bad(err)
++		}
++		defer func() {
++			ossl.BN_clear_free(tmp)
++		}()
++		setBigInt := func(bi *BigInt, param cString) bool {
++			if err != nil {
++				return false
++			}
++			if _, err = ossl.EVP_PKEY_get_bn_param(pkey, param.ptr(), &tmp); err != nil {
++				return false
++			}
++			*bi = bnToBig(tmp)
++			ossl.BN_clear(tmp)
++			return true
++		}
++		if !(setBigInt(&N, _OSSL_PKEY_PARAM_RSA_N) &&
++			setBigInt(&E, _OSSL_PKEY_PARAM_RSA_E) &&
++			setBigInt(&D, _OSSL_PKEY_PARAM_RSA_D) &&
++			setBigInt(&P, _OSSL_PKEY_PARAM_RSA_FACTOR1) &&
++			setBigInt(&Q, _OSSL_PKEY_PARAM_RSA_FACTOR2) &&
++			setBigInt(&Dp, _OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
++			setBigInt(&Dq, _OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
++			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
++			return bad(err)
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return
++}
++
++type PublicKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
++
++func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
++	var pkey ossl.EVP_PKEY_PTR
++	switch vMajor {
++	case 1:
++		key, err := ossl.RSA_new()
++		if err != nil {
++			return nil, err
++		}
++		// No need to check for errors here, RSA_set0_* functions will fail
++		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++		bn, _ := bigToBN(n)
++		be, _ := bigToBN(e)
++		if _, err := ossl.RSA_set0_key(key, bn, be, nil); err != nil {
++			ossl.BN_free(bn)
++			ossl.BN_free(be)
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		pkey, err = ossl.EVP_PKEY_new()
++		if err != nil {
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
++			ossl.RSA_free(key)
++			ossl.EVP_PKEY_free(pkey)
++			return nil, err
++		}
++	case 3:
++		var err error
++		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
++			return nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	k := &PublicKeyRSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PublicKeyRSA).finalize)
++	return k, nil
++}
++
++func (k *PublicKeyRSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
++
++func (k *PublicKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++type PrivateKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
++
++func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
++	var pkey ossl.EVP_PKEY_PTR
++	switch vMajor {
++	case 1:
++		key, err := ossl.RSA_new()
++		if err != nil {
++			return nil, err
++		}
++		// No need to check for errors here, RSA_set0_* functions will fail
++		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++		bn, _ := bigToBN(n)
++		be, _ := bigToBN(e)
++		bd, _ := bigToBN(d)
++		if _, err := ossl.RSA_set0_key(key, bn, be, bd); err != nil {
++			ossl.BN_free(bn)
++			ossl.BN_free(be)
++			ossl.BN_clear_free(bd)
++			return nil, err
++		}
++		if p != nil && q != nil {
++			bp, _ := bigToBN(p)
++			bq, _ := bigToBN(q)
++			if _, err := ossl.RSA_set0_factors(key, bp, bq); err != nil {
++				ossl.BN_clear_free(bp)
++				ossl.BN_clear_free(bq)
++				return nil, err
++			}
++		}
++		if dp != nil && dq != nil && qinv != nil {
++			bdp, _ := bigToBN(dp)
++			bdq, _ := bigToBN(dq)
++			bqinv, _ := bigToBN(qinv)
++			if _, err := ossl.RSA_set0_crt_params(key, bdp, bdq, bqinv); err != nil {
++				ossl.BN_free(bdp)
++				ossl.BN_free(bdq)
++				ossl.BN_free(bqinv)
++				return nil, err
++			}
++		}
++		pkey, err = ossl.EVP_PKEY_new()
++		if err != nil {
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
++			ossl.RSA_free(key)
++			ossl.EVP_PKEY_free(pkey)
++			return nil, err
++		}
++	case 3:
++		var err error
++		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
++			return nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	k := &PrivateKeyRSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyRSA).finalize)
++	return k, nil
++}
++
++func (k *PrivateKeyRSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
++
++func (k *PrivateKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, ciphertext)
++}
++
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, msg)
++}
++
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, ciphertext)
++}
++
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, msg)
++}
++
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	ret, err := evpDecrypt(priv.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, ciphertext)
++	if err != nil {
++		return nil, err
++	}
++	// We could return here, but the Go standard library test expects DecryptRSANoPadding to verify the result
++	// in order to defend against errors in the CRT computation.
++	//
++	// The following code tries to replicate the verification implemented in the upstream function decryptAndCheck, found at
++	// https://github.com/golang/go/blob/9de1ac6ac2cad3871760d0aa288f5ca713afd0a6/src/crypto/rsa/rsa.go#L569-L582.
++	pub := &PublicKeyRSA{_pkey: priv._pkey}
++	// A private EVP_PKEY can be used as a public key as it contains the public information.
++	enc, err := EncryptRSANoPadding(pub, ret)
++	if err != nil {
++		return nil, err
++	}
++	// Upstream does not do a constant time comparison because it works with math/big instead of byte slices,
++	// and math/big does not support constant-time arithmetic yet. See #20654 for more info.
++	if subtle.ConstantTimeCompare(ciphertext, enc) != 1 {
++		return nil, errors.New("rsa: internal error")
++	}
++	return ret, nil
++}
++
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, msg)
++}
++
++func saltLength(saltLen int, sign bool) (int32, error) {
++	// A salt length of -2 is valid in OpenSSL, but not in crypto/rsa, so reject
++	// it, and lengths < -2, before we convert to the OpenSSL sentinel values.
++	if saltLen <= -2 {
++		return 0, errors.New("crypto/rsa: invalid PSS salt length")
++	}
++	// OpenSSL uses sentinel salt length values like Go crypto does,
++	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
++	if saltLen == 0 {
++		if sign {
++			if vMajor == 1 {
++				// OpenSSL 1.x uses -2 to mean maximal size when signing where Go crypto uses 0.
++				return ossl.RSA_PSS_SALTLEN_MAX_SIGN, nil
++			}
++			// OpenSSL 3.x deprecated RSA_PSS_SALTLEN_MAX_SIGN
++			// and uses -3 to mean maximal size when signing where Go crypto uses 0.
++			return ossl.RSA_PSS_SALTLEN_MAX, nil
++		}
++		// OpenSSL uses -2 to mean auto-detect size when verifying where Go crypto uses 0.
++		return ossl.RSA_PSS_SALTLEN_AUTO, nil
++	}
++	return int32(saltLen), nil
++}
++
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	cSaltLen, err := saltLength(saltLen, true)
++	if err != nil {
++		return nil, err
++	}
++	return evpSign(priv.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, hashed)
++}
++
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	cSaltLen, err := saltLength(saltLen, false)
++	if err != nil {
++		return err
++	}
++	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, sig, hashed)
++}
++
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, ossl.RSA_PKCS1_PADDING, 0, h, hashed)
++}
++
++func HashSignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, msg []byte) ([]byte, error) {
++	return evpHashSign(priv.withKey, h, msg)
++}
++
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	defer runtime.KeepAlive(pub)
++	var size int32
++	if err := pub.withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
++		size, err = ossl.EVP_PKEY_get_size(pkey)
++		if err != nil {
++			return err
++		}
++		if len(sig) < int(size) {
++			return errors.New("crypto/rsa: verification error")
++		}
++		return nil
++	}); err != nil {
++		return err
++	}
++	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PADDING, 0, h, sig, hashed)
++}
++
++func HashVerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, msg, sig []byte) error {
++	return evpHashVerify(pub.withKey, h, msg, sig)
++}
++
++func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (ossl.EVP_PKEY_PTR, error) {
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
++	}
++	defer bld.finalize()
++
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
++
++	if p != nil && q != nil {
++		allPrecomputedExists := dp != nil && dq != nil && qinv != nil
++		// The precomputed values should only be passed if P and Q are present
++		// and every precomputed value is present. (If any precomputed value is
++		// missing, don't pass any of them.)
++		//
++		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
++		// value is missing. See https://github.com/openssl/openssl/pull/22334
++		if vMinor >= 2 || allPrecomputedExists {
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
++		}
++		if allPrecomputedExists {
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
++			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
++		}
++	}
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++	selection := ossl.EVP_PKEY_PUBLIC_KEY
++	if isPriv {
++		selection = ossl.EVP_PKEY_KEYPAIR
++	}
++	return newEvpFromParams(ossl.EVP_PKEY_RSA, int32(selection), params)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
+new file mode 100644
+index 00000000000000..55fc0332c22d74
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
+@@ -0,0 +1,159 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import "C"
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"sync"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++func SupportsTLS1PRF() bool {
++	switch vMajor {
++	case 1:
++		return vMinor >= 1
++	case 3:
++		_, err := fetchTLS1PRF3()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
++// else it implements the TLS 1.2 pseudo-random function.
++// The pseudo-random number will be written to result and will be of length len(result).
++func TLS1PRF(result, secret, label, seed []byte, fh func() hash.Hash) error {
++	var md ossl.EVP_MD_PTR
++	if fh == nil {
++		// TLS 1.0/1.1 PRF doesn't allow to specify the hash function,
++		// it always uses MD5SHA1. If h is nil, then assume
++		// that the caller wants to use TLS 1.0/1.1 PRF.
++		// OpenSSL detects this case by checking if the hash
++		// function is MD5SHA1.
++		md = loadHash(crypto.MD5SHA1).md
++	} else {
++		h, err := hashFuncHash(fh)
++		if err != nil {
++			return err
++		}
++		md = hashToMD(h)
++	}
++	if md == nil {
++		return errors.New("unsupported hash function")
++	}
++
++	switch vMajor {
++	case 1:
++		return tls1PRF1(result, secret, label, seed, md)
++	case 3:
++		return tls1PRF3(result, secret, label, seed, md)
++	default:
++		return errUnsupportedVersion()
++	}
++}
++
++// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
++func tls1PRF1(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
++	checkMajorVersion(1)
++
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_TLS1_PRF, nil)
++	if err != nil {
++		return err
++	}
++	defer func() {
++		ossl.EVP_PKEY_CTX_free(ctx)
++	}()
++
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_MD,
++		0, unsafe.Pointer(md)); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SECRET,
++		int32(len(secret)), unsafe.Pointer(base(secret))); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SEED,
++		int32(len(label)), unsafe.Pointer(base(label))); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SEED,
++		int32(len(seed)), unsafe.Pointer(base(seed))); err != nil {
++		return err
++	}
++	outLen := len(result)
++	if _, err := ossl.EVP_PKEY_derive(ctx, base(result), &outLen); err != nil {
++		return err
++	}
++	// The Go standard library expects TLS1PRF to return the requested number of bytes,
++	// fail if it doesn't. While there is no known situation where this will happen,
++	// EVP_PKEY_derive handles multiple algorithms and there could be a subtle mismatch
++	// after more code changes in the future.
++	if outLen != len(result) {
++		return errors.New("tls1-prf: derived less bytes than requested")
++	}
++	return nil
++}
++
++// fetchTLS1PRF3 fetches the TLS1-PRF KDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchTLS1PRF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS1_PRF.ptr(), nil)
++	if err != nil {
++		return nil, err
++	}
++	return kdf, nil
++})
++
++// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
++func tls1PRF3(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
++	checkMajorVersion(3)
++
++	kdf, err := fetchTLS1PRF3()
++	if err != nil {
++		return err
++	}
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_KDF_CTX_free(ctx)
++
++	bld, err := newParamBuilder()
++	if err != nil {
++		return err
++	}
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, seed)
++	params, err := bld.build()
++	if err != nil {
++		return err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	if _, err := ossl.EVP_KDF_derive(ctx, base(result), len(result), params); err != nil {
++		return err
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
+new file mode 100644
+index 00000000000000..e60a5dde390be6
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
+@@ -0,0 +1,86 @@
++// Code generated by cmd/genaesmodes. DO NOT EDIT.
++
++//go:build cgo && !cmd_go_bootstrap
++
++package openssl
++
++import "crypto/cipher"
++
++type cipherWithCBC struct {
++	aesCipher
++}
++
++type cipherWithCTR struct {
++	aesCipher
++}
++
++type cipherWithCBC_CTR struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++}
++
++type cipherWithGCM struct {
++	aesCipher
++}
++
++type cipherWithCBC_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithGCM
++}
++
++type cipherWithCTR_GCM struct {
++	aesCipher
++	cipherWithCTR
++	cipherWithGCM
++}
++
++type cipherWithCBC_CTR_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++	cipherWithGCM
++}
++
++func newAESBlock(c *evpCipher, kind cipherKind) cipher.Block {
++	aes := aesCipher{c}
++	var block cipher.Block
++	supportsCBC := loadCipher(kind, cipherModeCBC) != nil
++	supportsCTR := loadCipher(kind, cipherModeCTR) != nil
++	supportsGCM := loadCipher(kind, cipherModeGCM) != nil
++	switch {
++	case !supportsCBC && !supportsCTR && !supportsGCM:
++		block = aes
++	case supportsCBC && !supportsCTR && !supportsGCM:
++		block = cipherWithCBC{aes}
++	case !supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCTR{aes}
++	case supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCBC_CTR{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++		}
++	case !supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithGCM{aes}
++	case supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithCBC_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithGCM{aes},
++		}
++	case !supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCTR_GCM{aes,
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	case supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCBC_CTR_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	default:
++		panic("unreachable")
++	}
++	return block
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+new file mode 100644
+index 00000000000000..9e841e7a26e4eb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
++
++    Copyright (c) Microsoft Corporation.
++
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
++
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
++
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+new file mode 100644
+index 00000000000000..73891afeab93d7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+@@ -0,0 +1,31 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package bbig
++
++import (
++	"math/big"
++
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
++)
++
++func Enc(b *big.Int) xcrypto.BigInt {
++	if b == nil {
++		return nil
++	}
++	x := b.Bytes()
++	if len(x) == 0 {
++		return xcrypto.BigInt{}
++	}
++	return x
++}
++
++func Dec(b xcrypto.BigInt) *big.Int {
++	if b == nil {
++		return nil
++	}
++	if len(b) == 0 {
++		return new(big.Int)
++	}
++	return new(big.Int).SetBytes(b)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
+new file mode 100644
+index 0000000000000000000000000000000000000000..ef63935aa987e96e905431ce24a24788d662b1d2
+GIT binary patch
+literal 199312
+zcmeFa31C#!**-o&P!J?>#|0fNR!}1ocC2WIBrt&lB4Kl3CLx(XAS7cl5n{#0BAPK$
+z)2jWb-BQ0#rB-e1S8Zym20=vIYTT(>jY}1bTC|E(t@%ICIq%8bIWv=l#kSx7$JNO*
+z&wbB(*7v+;x#tc~eEGmbE|;rcipzBf@F15f&E-ldTZQjKaBm0@ydIzHn($3?-aBv|
+zsDT4DaG(Yb)WCrnI8XxzYT!T(9H@Z<HE^H?4%EPb8aPk`|7U98sn6d35)1znEc{(q
+z@4Jr2r}bd`apQyQIDD2;nB>}8uLZlQgUfJkCh&78Z{i9B!ogKx{ay39ISc1TdG|NJ
+z{>J$F<7?ZsF4s1u-``cQCHik5P*ENZRu@-fOi(uh0V_U<2fG>S+Fh#S6Y3gjz6b^a
+zB{kvd^2#OMJT|^GiEpdO2L@x~>lYVa&C2q!@c2NuE)=W|mf88+Ch=_)y>`UM`meuT
+zw}BNM>aV1#vL;%Ac6_%4w1&yY_sVp9c07g$0>Pz$vg+a$NSBu#U$eyLIzr3WBR)1m
+z!5uEw@0n5SiqBuRcdj=YsQFU;JyUM2#|{(Y^W5ih4U~IM2n4DYFDnU@uP9y;EUzr9
+z3It-~>yY@2?l#0{%I=KEd=CUli^Ii+vAnVIZI}2|BOq9Z<S&H$xua^`-&o!iq2iKo
+zptf>ld1YxJkeA&p#Fy>Wnspo|Sf|Syy5Hrh(zjx=OEL_f<_BD^7F100C$RgF%QXh~
+z-1wy6<8lqg=P>o1b>~VMchD#RZG8K0(Qkq2_>9Dd@ujQwU0GGV+?6$LRxqr-;XW^h
+zbK_%&t6H(Ryb?B%ES{?B;IyjRN>pZfRi(s}C_RKL3|3!OUJ|T9sO0fg*M-7WGt0XT
+zJ4w3P<u%K_)r-r+)sk?Ma4~r^>ALa7DrfF&Nt5w-;^lc&CB+rq+VIj~Ww^Y=6c*ta
+z-W?ylFj!JsT^_Dea<(JeE4_j?j4%9-57W{2m2b$R0foyKm&23QWmQ!ohU#Et2@C}n
+z!$;$h@YO+epY<IRkJTnd-yIt+ySN&bN+B*&4o5twW8|k~X)<|C-6qiQuG1v(&tAMN
+zSQ0M3ESM$fTjg6=06~Iy1J1gk+$w*dP&w{`>M9spP1J>}awPjR&lmZtZ_Rt|)R8%9
+zd5!bjzQ!DnFOofCSYBlAh_uwh`;XX8Ro|M;?nRqYPj>B1_(eMyMOo^}@C?-VF7VFx
+z&hySK^j-DdHc0X#f6R|O=8NRF`Xck%e38HBM!wAG(&<KW*83VWcl#naO~6daOk1jN
+zO~+2(sLj5}Z3DZyy1GNJ^?->&v#-&Y>5FVlpp(W>i6p_6XjH!LsMcocuW`xeM*f<Y
+z^7p*Rr@qLmDw*8K7GLDq{FE>9B3*frx8>gE+{lZ0k=m`k$fEYV$bCx@o6`C5LX{7#
+zn%6j<)#PhDTEV*2Tk|3-HsnRN=S6m@c=94a+**woZYxqTyptDsut0tLQUy?de33_d
+z&_z48K+zYuc^E?EWV|I&+%^d`f9+eTYafE^^fj(Vi!U1HYpfmVOVP39MwngPX@#^c
+zdUs21<ayjl^QC-lN{d#}P1g8hU8Ao-t;N@Pvu=f)=B|P?mKz0OuH7oH4~|q&+kh&7
+zpgu41fyvt{C1J5b>YL6G%yXcx@i1L0sKj+QtB4x!W6S47cKRZ(<wj88AG4&nkw51(
+zszMg(>R7Wm4aLoCe2{sn^`c&o<s8-zEG?(KJK}lB<)_I0hTO<DrO8UV`dat}eII6+
+z)6`Wk(6??1bE1Mgl!<Q-aC+y9Jf@S2Y)TzD;Es!2uGGUb(|nKRY=zL}Yvo^D9ZWKB
+z-HNRbyTP=^x&a-?neQRWan<_<ZSg&Pk|rvw3MSR(OkJ{`*EoQIed`|7_4@%VK&hmr
+zv6xyI$(odUc$V9TQB_^9Kja4fma|e-eeF6gjjLfaU!tUFIn?>;4Zg<vbT?34K;3+h
+z=8O9a0iyL_k-k;nxW%?aC^n>ty8+c(uSw)Jg?W*86#kCx7wN&|YTG2lHs8A7wu`-&
+zco%v7-oT<wxsgYGk*D(`UmzS@RJ(8E_VY4c_N_a5IFx-Q{lD!?Y41V>Z-u~<djGc0
+zBhh#8-JLyZdusg?OrT^NEH^LmZf@i$l}P95xsA2Ma?h+yORfI}0yspu=oPtVE`s1D
+zm9?Bnz6g9GEu`BLRBgTe)z?;D<ZoydmE(+;cRc@PS6Av_{^wh#JjMgZAcx-8OqI_E
+zC!xZB%j#6&5$t5wd(ha8&j}C>#;5G;)RV792>9ftSbx0cy^+4iN4`;?`PRZeKJ81*
+ze#&>%Ke`Yy^@f$K=E#>h8Er7@C#h}ByCMGtgipPiDSCfL$;14kj2;HxV!pI_F*!q!
+z2l-cp^QwSeW&0|W_xCD<GSj@syjHLJ=3Dzr>eau2gq}^8>wefayia!O{lUjm@6UMx
+zUuyq=Kdb+kdjFz7;me9AQ}54z8aJK+S@bOa%zF-ha-R2Xe0?Csnik*2chYh<zBw#+
+z;~VbWjU6K)%zr9(<Li@hH~!V*+xX_l+>P%*@b)m@#tsC0Yarz9P;9#{|Ao%<oQ!93
+zGG5N;LT#Xg>Tg?4#^X5|?`OQ6lL3djD+BzkjAt;UwdM`_Ja15E{-C#ggL6Q3`UY*w
+z8?-flP<!6sMJ>L;tK0Ghy_PrVvDEvY_HBH_;~VrDhTD-2(@!0Y!Be-GYA=kQg#~(?
+z^o{zQZIzn+nhacxAy4XW3dR|SM3arYioT<&&A0aDRTD5qNm%6sV*S@+nVdzVp%=p1
+zKSDkRUd#@Nu^*NcGkzC#JCio#AiO9y@+rn`<O*2|&yI0aYd#-(rPp`W=ditRtzOut
+zjBb20>Z~$5&(C<d^E?#AbOT>x6FtBKh>(}dcgiE3Cnb=xD7fHLAMr)tOvIH$J3yTM
+z`*I_@awG6udN7V~I1?Ajfn)W0jAzX-!}Yp88;AKC;VHE@@~u1U&)OGV<xAO0U$hPW
+zCk+PDhG8jp<Bnmuk(Y8ezU$77yqvqSb7XGhmE4W*d2%Cv$=&$=q})h*t_lq!*fGo(
+zdBL~w1Gf(&@y5TQQ_|hRtF<*O+S;)Cag5pc_C$6={vWa%=KV3d0VdxNd@{RX#ZwLQ
+z+8b)0&ThzgrXl~?%!b<MG8<Mu?^}1`NZ*=G7~(Ks>e&Rl(vDrIoV=1ZeH%Y_=Z$(Z
+z_4*^2{Z?J6UFV}#wE{+dRa~*5w$!VC0!7$Se&lcJUhb&Psr4`7UVh5k`H_F_Sc|W*
+z@idmC`5G^VO)&#@d|}jjcU*aq*L|Zlrq*A_BvPJ4bjaGJ6FSeb-Hufl_@>UY(C-*}
+zVCrCG4MgX7@-|;;-ZsqC^4IRlP0hv-U`^P%8&pjvUV_>CV!9u_ZCR5CKJ*2A&PD}&
+z3!l`JGvns7^kR9DKjgtF<VK!E=WoxAe3FYn%Q0<G^V5Wr+2Drg^plQU&t#KMKQa5|
+z$Q#w+Xe&B;luk5b4zBN3$f=jPGA0V~L31PT<fr@<W3-u~sUdhChVj+yxhY?ETT*20
+zLZ*wdLei38eyCdk6I1C`>sGg7B8#cUZYVWHC#S(?H8cIEnwc&dme*LDh8ZF!1r5GP
+zZChUC?o~(#!=aAQo-iX|j_#NCq#QHa7krJ9P4weNO#IL*^BOt9{u|<N$!lC)pBMQI
+z9cyb>AyWNY#;ylAisnWB(N#DJv#*gV<=Z$L!W5p9NdPB2u$@-lx^+s>cpuw?Muces
+zW)m_u%a3f#YYa9c@}|O=X=&=!6WQZ1(b6Sy7)i3Z<;;TaxuqUg)nDWk?gk}Vx1#l7
+zH<-lN%iOY61w-kW`&biI^X=%|QkUB~w?r-O;oNe)%m>jDOOc+QV#2@H!U}V?>d7S=
+znC-3epJ<whMr+^EjB3k|e9~QWDma%d8{a)IV;3CpE3DU&qrU4)d7|qLG$MQ|+~<d#
+zr}`or@!d@ibAt-=Vdqd^V`!M~%n&AfSL)_~-_6;8c{CJN%#s_-L0`bY3g0X@a++zt
+zm_eJqU;;)*gc6lVe?1~VKX>B?9w?YNa#HW#)mf0&SOaTcj-jGkkU#1JmK1ig_0mbH
+zgL5&6tMQ;afOpiZsrBt>>im*jC_+?|K2S7KKO>PfbfjjE=CD6s<j*>fjb_rW{Y-Rz
+zzdCs{dAsJ080c$!Ft(9ky=Gi?I95!}8`V+|jn3X;QeBAe#-DJ2jGg4u(b^N+V^KyF
+zq}e&EZAyn9o{UdEJ{RM2J3bxwJcN%6NtpSP4}B2}g>(Cbk2^P|HrqKUVWs}5+L_>-
+ziu0+@ZK<^8t7;mw$OPXMoj#N`6_{SIwk_Q6!cD$LwK^0>C;F<JT!`Hh%%2K<jfeQw
+zwyo-SF=jAWNN@3N{L=0F^i^NUZePl48P8-qE=mVo3<W*DsJWggNJ@Cnx&3P0I#er4
+z$_qm^qI*r}Q<X`7-K6F>x@->Lf{hV)URctWt_v`E*(QNadOrB&##y@?a|=G*$Q{FQ
+zTI&6eue%`a)2B~)+IJ8XwsI>dIv@2lt{moToVI&c=A3@DhhQWbxCoP<#`9(0r+c-*
+z_%A?(>81SI#}Rg&`rh^Q!V5R){UP5JZsYpa<&79teXQ@Q9b{Jz@};Z0O15$brUzFK
+z+SH^jwq5f5CAFUUT!uSrY{+N_pObL3i;jz}60$9E$hYC*RSUoeNqar5XKd$TLAsd+
+zTXOENd?_zx?CN^Q7kL713Et-;dY?z|-974&)cW-*)JIP5gJ(Q0)h?K==5K`$(#vv;
+zlO`R^hE#gkTT=Tp&tnn<=h;H%xn`4FP3RFrUIadGhlJ#s73Ilk(+;;CR4<|&BYT2w
+zSk^QhmQ{$)5`1d$G4|0@eXrsIAhNnXT9xaiDw`8kr7sd}hz5nXTeUm4adu{cy*X^P
+zCAbUyCf~Xm_-nnPp!eT=k+o_j6uDV>Du>6mrVO&rwB1ZWF#QM*H=7a;XVwZQ?%HuE
+zU3p{?<_f_kU3b35dF`0VZ18q1aOX$<8Z`yZ+SNdGbf-3k2Ve|&jht^SYQPerH9zuB
+zQp>nE-ZGkTD?hS1k42$zw81!ZBcl6aY%q3#wS=_#=ed!`FwbTo^p*v;baJtct87GN
+z|1)DFw7JGw7)H(pZ6h$3+7?}!M(!obri_|#>)kr6coTT;lU?bslgaqx<8v`Sz4gyY
+z+Fsha`{-k0E=gvje@)cdIV~85Tb(1b)y|x2#x(Nr$r`zHnkqJZ1@=EMrPW=EJE5|z
+zrgvjx#^SIM#K=li>T$IbvwrWX|19)H{(xr7jeLw%Xm`)pf>q{jU*n9-1YICE@^*r|
+zzDNfa`{B#6Y1|H*ZPpW-T9jg5Ywo(0ZZxG76c+U?q?j4ZTi;U^!sK^4`^lNnD(vds
+z5PobE#^0_T6?n|#du$WFcI_zQclMeHEol*^Rh%uM=fJn-w00G^v0aj@c7R~xZN4?D
+z+g;(~^VhzA<<S`QvCjCXnJp-TegV-SC!Ael8ll&BVyJq>zHT*2@`&jN?9e%mppLKF
+z=p_>aO<|BG?Olxju}%ME5q^x04~sz3?K%RpfX$0^`ZjjL=MPv<-%v7Sy)Ok*{ncB$
+zUWdWuqwitWj*X?AomfI(8Px&q9<@8Qei4F0oL925^B7=$V|c`{{4>LN;!>XtkqWFk
+zTJD-JGxH-~GSb>puYNhar2g}i)U`LFt|YqbQ5~uEhpXhbbrw1_S$(F8@O=Zjv95BK
+z*3>Er<Sg$OEbrYac5a?x)Y=AJm=6}sjxnWM-I++|oLrV8SC^w6kzf(7XX%)Jau%*l
+zuJIBS79rDAHe{1uW%dK($MQz~oh1%s#$`O3TSp<1O(gZYy%sjP7N4Ku!@W@F{H-_t
+zv{d&;EI+sQaTSmL=yYb7X*GH?wTZ5AJhx)^OuhR1s-{;opo5^B(vRi0<*o~lK>yS`
+z<7&yx{)r}-hrSbCeAq4yRUFelXP7A9qaK2JxXgMMHh`%B4DxTL+aiR{;A3s5o~|9o
+z)0!S@!`H4IL-Ad0Z?+;-bWw~ku#L-sNob%JE-@mXk-8l{nLUZy$cvh=h+iK*31-&d
+zTZ^8*s2zP<o;IOmtymRx_UCQ*_DnO9L$H<px4Y<#i{RmZ%mE$Uzg~M0m1~`K^MDAp
+zy6!$b>_3qkY0Kr(dxh@KUOII;AFUDn+U?S1inJbCZIWn}JJ4R;n|lA|H61C|z!$Y9
+zGe6qX`F2m^0qk!c3X4ag|8!avpNOtirA#=JH5Q1<Ymo7@DarI}LtaX!!xXTynj3je
+zwgP<eEK-}A)Y=x<88_wNH!zP;H!&O4&Iq3Huxse=OVolFZ4W;kY{6;(i;O+l3f-Bj
+zLVu{YLO;@rA2)VHN9r9>PiE@<U3<0{+K_{-&{}MTjvMV;vjvY4vH$tL>VDW+DtQwl
+zhS~<5jBQXJ?1`=gxg&fEN-euicp53&B6)iCf_|pl<40I#x8+4X#30$F#v)x|cmT=z
+z#hB7r5{=Xs`OtUDMt1i+wKbYGOdC2LWy*>oVLDjIbL32zin47zXmpOUH%nPu?2y76
+zt6i>q-EhdN9+I~y0e!1!QSP;4qlPxdIiX%Xia}t+_N~j=nt_d6nQmf9p*pZ?W?DfL
+zYF4bkv_1#I-JK`Ed^iebkJ=f!Ft22H=b`zHR}RZR^UAbP9(+kXlI2!K_cnzZw_wET
+z;j3f1g|O_VGEgU&iw<sT#NhpPIJEEK^94S2D9SbX{1-ky!^iYjeIB6@&zU{2R!pZK
+z^_i_LK0(#X)d(N{V0RNXpSO-K59Yr`d<2|eXrOct?h!$#SZ-tyhQM0bOOR`9Pl5*!
+zeHecZ^#23>AHB&%KXah}n>ovV?EeSG-?&GS2gYBXI*K3X5A?qS{qMm1H@;tRd*HzQ
+z7c)dIbN;W*e-Dg*2gbhx>(77R`m?A0w=iNJUt)iNdpOwmQF}TGwiKNQdp1Z=Y!}2o
+z>cmsC=s9<sNNfz@soS(fF`DNxNOWsnV-bR7k4O}*J-RuS*SHkHauS4kW6h?nHJ|rS
+zz4l`6udExuLmaYa-t{^**K!Kh`BJca&e*kPcUo%Jhq;Zbeb}mzqXUsm7<gro%}qSD
+z<2cW~;|ng0u(gN?rZIx3_LZ^P*f7A8)MyOY-k8_q?V9i2!DFd?P{+25rQS;Q&ec3$
+z(Fc8O8d&;xa0vY=(9IqZoA)b5SedVFk1akjzg6wH#_xTjYCEvKk!wx{)#nbv(>ir9
+zLAI=XzdepCN|&qsA-+oW0N)B)=2}*?tlzR@bp_!;AvVuXc9mn_B#6j%08az*oJDlU
+zQ=cDBY`=wT9_w1uh1NbF&5T_w<Z6v-@Nuoalr3Fv`%>_H?L}YYN!cpF)5;gRA9&#)
+zg*?uY^Atxjw>zH4pS{uh@!simF5Qd7I>+vXlBxr28^Nx9k(Y2rN!{q)FWTD{U3wJ?
+zZZ&FI(=}*Ao>SWeJQK(>GtToIiQ7}Zud|yqiMMp{fYRZa*6u_U$veJ!AEUc%&2dJ0
+zvev}zNu5WFD)2y$_GfE(jy;LaLWGLyuz;eYPU$6dgSYV<T2v=3sxwf3P2k0D<CbW*
+zjyXZ84;&;+#Bsu5tvi~+u%szC{W$$MD=O*seRodQj*Q0516PS_soU}6q=Y_gF+D*U
+zyFGPzf90v~A?T-@U9aQeCpxa$^Zy73AJVY#i*3<uJgKRDN6cPv_eQaKcFfahc#(-G
+z)YSVKoGss~;+I2m`Zk_C?%c74&k`Dc>|=5GxCSp<+?=V(#wW*V@}>`-J>Ws3*^9Qf
+zs&N{STh%z8VRE3}Az6eh@cHO&nXtdcL#O(&MOTNut)ATOxDHMWxy7jsyoG@bU^})^
+zwKg(<ywMs^`UEA%IlQ>SqpqxUuT7TjQ!3rNX`v?Ro3&A|r9tb|Y4iJ%`ahx%Yhp`%
+zuP*fllk_|oBDdh#+Uxfv#XFLvcneZQ#C$d|YFldk%gg{Cj}KL6BhReClkq1Q0w*!F
+zlQfT$am;WMYoYNzIw5mJQJGBRea2XJRK>=AmBhZn`4GL5VUT2+^D(xXtEfb~AAchc
+zEl5uHH}%G$oSH$#&>`gM`i=oig9kfR=8tCNi88MYsPR7Sd)5wAO*;@F@yr8{Ikl<n
+zXi;vryK?w8lT|sK!z7GfnMmV(E>%a$f2!P?*SH)e)tTR2|Dh^If2hfRXmO&b)k#se
+zj(1phzA^LULn{5U96PN%;7|03Mj!VyfA@Nn`z6Y5jdB;`Ws__?|CxmY4O{Se0{jf%
+zt+;nTKAZ7L!{?W<8J<~r8lP`N-hq3C_+E_9VtoGy*bikJg3l7f@f_~$z~>+MnCC~y
+z$ICVEEyM$(cE?EB{X7;;n{Z;@)a}r7P>ag<<2hHtpwX8F)Hupv0(O}&sF}wrub+Gx
+zzf}^)Be3LyLx-8h|B5EJ?&yCIN`~BmX;0Vdcz&#1A)KpvD*7&Z#K_KX!fiBlyA3Ua
+zD}{~c)OQt(?7SHAws<+F2Rz$2vhy2|Z-|%E&el_Y0_1qUDQ?)Ljp1qTh>_Ow`n|TY
+z$K$Q6tcl&W0U!FCrTC1*r?>gBo*1t@8#$@fb%z=8#;(`39VPp_*ZF=qQNC|NKJUV(
+z8K2wnxdoqO_WUo-FCWTVy}7JuPx2dmzg+sC*Kw5YE9!vkc<g{lCbU7*0TBcffMhG=
+zH@o}a=H!d=H@s*NuUc9i$3bP?fB;}d$q;Qtd<z2q<0vA|Tw#5g*4xSyhl<og_cuCg
+z<YcQ-#t4KZHkP*aooDm3kAD1!Bf5O}&HJsL$KXC@2<qG;?l<fE>-(H2PL1Hy(0n&K
+zuGL9%c{=?yoe#c0j-EV^1yNfB(G`B|{(vb61G_u#-0Kc=EUMEoz@|Gf4pgC!d<i@T
+z_%<+6e^Gs9K+Q3DS-|($76k0_J@yEp`%Qzr&eqxS+0yH8JgUM}SiNPC7wJF3eATB@
+zv^T~f6rS1F?-T54_~`ivcU~kP6MekH9tpx-=i^Kq)&l&!2AvFEf(YT5rXo0_f`j^@
+zWw|L&;WS^UNQW@5;(eaKwhOP~y_SJx<BE1~7f!t5kn3th{sG2?G>HLo+gBl{0hl#0
+zO%Z1)+}&$q97aL>mp1FOemqaHr{()9!*{Pn^mc|mP^D}^-ghvIrGJy$J0GXj)GH~q
+zCtw2x@1#831^?THGc0&VQVzI84pMK3c>Vf)64f{~r)>Ru9{+A`&%b)(&hcR>EV==|
+zKB8XMd=}eO-pCix85q4ey*lQ!Nq$NsSfB9lbr36JIiDYM=(GE<9cEa%LzrWZ_Hj<w
+z{B{*0KLtmzoNqp(nY?Q@V+8o(pp|)8_`;!_fkhPtfM%XPj;v_n`DmQIYvyze>rKo+
+zqeW^<ytDQ*G`c>f#yOXI4Ip|x(wqgo2Og-eF?P=Bb4Z-&>sv0R#x^DFR7!|b+JcXu
+zR}aiHr$RA?;1npTl;^hKUpRc_;~-jNew%j=cD8iPa4VQcqD8T4`9MF=<PL3GcX~&o
+zmR!!$Z)QsYvA5<omJQUZ-md46z*fYCIk0&m$fLg98w~n({E0Y!?1{JwxDJdv5r=Yo
+zfFvM8OUpORglpHUQaH}Y#l420ePk!rE>kdmEy3rz_|#x{s>kQM`1}wbd;S{r|DJ!#
+z`M79*z3M%_HI)}x$3?B`wSUCh3#!*TelZAjVR~(%#ZZUtgz9AVtGeOU$!okpVs}DX
+zj0%yTf)nrfU&c8el6}#OM-$#PUmlctZG=s`ZopC4%0Vy08_?*5cXMHlU$Wt%0OyuN
+z0M#84CEphw4i)qz{nipZ4BleWJKgd_Lb$a)PakAPgQ`4WV2w@>O;*kDp)7MpE;^|0
+z#i)a5FP2=(iSC8mfzdByd}SGFQ>9ZceSB4EbOyfSLWpVT^(@Yjo0FjH@V0nlx7rwc
+z!~9r~Pu-ML^gJGFnoiD|WA%#(@_I+#g!$z+PET~Ob}iSE8M}BkS5CoVpOg2n+sK_i
+zV-Hc+!r!hD*OI4SL61Fii&xszn<scxBve5UGbF$93chf1#fY@fB5a_sJLxrmNfPIU
+z_0d{pS#Rj*cf-^xbJ+c&U8@@6{9lYViN84%{^mw}KE-Dt{0*NcRpYY;pBwOT`Ww>?
+zVtS%uzO<+F6%(KSsT>`V<Av0?_i^!h=4W^x_a*ED;uQro7vitFw23j`t=wpC&3sy)
+z_iy~xFkj<z^%87&unDf-t+L;*MH%#@Su&>s>vwY1-sU4+7r4>77xQ;loXN?2t1tR#
+zN%VWGkA0QP`^{nVezSB5c`Z6Rp+r3<oj=<1H{1W?1qHZ#ygjX*pVYPfbqDSF+Y@ht
+zsb9;mw3L6=T3o{?co=dUeYd5xinn?kWiT;}$zD!F@)dp1cz-DhT)%n|HqoP*U~_aX
+zhXG3sbZyC}r`QxrG!M;Bc@GYZ+kEmPb-svxEEl<1dm86*#JBFjOqAD*g=YJ22gi|h
+z1I|_tF!Y;mk-O=j)WiJg1?xg78ISWx{!~24|5o&IHs7tpyFr{{Vb+9S$-q3R4L`aO
+zEf<<kryn!AN##6(sZ}#yBH;T)=7mc&IP;}KY(6Y-?-<Rj;oaQS`=>gy;cL7+CL3_c
+z$Oa0QG$$~L9&=)T??X*1<z)numz(KTF$}lk9Y^&FA#${#*Bo)T1GD|4IqI!$_yz?A
+zCpztRRbzVIf(K{XW;rWxtGBw4ot9p+(_01gmL2s2aA+-EL5>`uv2NCVk2}2X&Tr{$
+zDyPjj&Ts6y&2X-~JKkn^2&6&nK{d*6DSpsZIFRFI?DGm3dIy?w&(BnhvUZYirs54e
+zXW$;vZj6W5VmvGZCVT$=)$J!O%Z$sJj4z4(FW-+z6Tds|aBMLu>oU&Ze=r5nFX*DC
+z-c<7u<r4TJEFZJhVuw#na66~kH!|!SZu>^6bwfOXdD5WfzL>CJvGr>AHc|BTVC-F_
+zb?+AKbvydwYRmO?wBa)LaeOYsXCgj5zt3~kd&ATcdLFh1YTLb$f5wgxYq!H1v`=5l
+zA2UfZ9`QM+rP$uBm~037HhN}DYanl_A!Myfe@!&}rNt|5>rT#$x``CI0<uyZ8BNih
+zJVj5uqMZA{X3SdcHTpDCE4RTRa_yw#sb$8eHcW@6qV}4JQi~no)&Au|c$loXs=)7P
+z#a07;2rGn;iB8<T<6ZM8R+az6xv4+(SL5pu*x1FYa)WwAgx5fQkq2pTbf|b2jcy+E
+zA#7HtpRL*s&)@wHwdw-On+2OC1M-uRsso|Ba%&4e8P$Nffb^-yuz=9f<A5EWc)y7O
+zj7KfF1~8$xa*i39am=AjEm-p5V!PKYcu<dn9_W`1DsG(sAD!dm2_7IsURQTGRH56d
+zRN!|}uD5qQj44H4<K5~|k$QC!qs)(0--x_~{IP3rTLwSsN~5M<@BX1EzS9gDc7E<-
+zpMc{@RCJUZ&H~$d>lQT_-R`FcjuIPL@)F}WJ>cCwl)^1SkufVtRAe0Ma-3Mu`NkNS
+z)4F3TCMzf{jUF}321RLAM^U9^KatXgdMGVB$ljG!btq}#udKj2>nN~FZO3!msA#-9
+zEvC!^!B|cDu!5ACP9#|i(+%xqnHM73ue!`S>nt-<+tGnh5oM;kk#<H8LsL&;RtjOw
+zGIi50{v!yw0()=ceZ!Q>-dM7{zpJ|MSJk%6HVe6m<=~HDzSg}@wx8xuSH_RMpMKWW
+z^&2$*Q<zKfM><}|*$lHD$ND&*KZ+vr13bNm6b{Ufe4J=Ky}$PpjAKl;-|$t-_jLV@
+zeyA?^Aa!M#e~6&4x@2^5u;y&_llvkBWCu$a0{`fNyR5jpB3SBPSsq^M4pvuJRiER=
+z=6Ge#@|gIS7S}A51g7C%rKr%+L=(fed6hM_p-@$I7%4HhyR5bnKc27t%>@RGjc-M9
+ziNx0rgQu&mE;QYxz6C;p-i)!{u>M}SBo^yb$m#gSGwK?R*t`EihA|M=QR*-LorBBg
+zxKdW7rKAlxWMC5-Z3ON!o4eWRaHUH)mv?B|HT|*<!#^9NuDuP%Uj|o~72jF7=}h-h
+z_1GCVO}K(Jhg^T~x&hzme}gK39sUkua3*|yY<N4r-_*H?#y@S%fOY-9bC4bHqjtFI
+zYaF?7x$N+KVy3Pn`LM&U?4_J`zUP|!1f@Nuu2J=IBJMlu?@SX8`QTSu&U~l~a-N2@
+z(>dQESM4t8*x{V<^b~HS9iMPJzEhKgv-5wv2`6aF&#>fuwfDZ-=ZrnHx4y=ESTFWt
+z*H>TT{nXS)61&{nco%DT675I5^t-<1cg!BvLoz$u-|arLm-5>E`!c)UXU6)Ey{-4&
+z@^K(uJx=UxJ*?Y9`|GP+-)j2}YdqQ8{HlLbj<#m{w>4hwZM+}Y`Q6L@ZKr>Y-7kdO
+z;gZ#>9d2Lav-|CW{nY+;KFz-m<qGsXpNjKmN$MwAIJ-Re*!A6uA4(RlU7mdnXOG*x
+zjqCqvxn17TrXHsbP4f;N<{j!@bI^BSD|R@({-`d~AB7$Ww{P{buj9F0|9$l@$->$F
+ztlxf~AK39fV#ja!`QG}IUH)YDY{zq?G@Aii&VNTyT}jpxaegAndLqLSk6KS;t--1+
+zzJDbPXXmT8eDACL3`c$wt)r6pfqk`O+b*8&FBviZ#<B~$-ILj~9d5ZPUoYcTviR(L
+z^34KunSAy#4)rzOdHmPXc$s*6DgP-tbToVtJKJCVV_)rTU-fM}HO1c-%sk`}vwNYU
+z`4sy_{PGXMPb_Zk?`fJJOFTx;#ADy@D>vbKLz7-#(4zwx>yA_DO|CX+^glZqr^_2n
+zsOhH{^3~78R|_OP$?KtZT*^U7_1h^Q+&`&26LXxN;&1LHe?^Et#g&pYeqBHP%&Z%s
+zV=pD|pIn}a;JwA)n_NW^n`}4J`9l&(F1NmKyl`A7>3>P(X<8#`{6&!TRR6u{yL)NB
+z-t<}WeM!F_WB9)4_hx@=pPt&cxAKL0$zMI<@2P+6YyAIz*KgTJ`)h;!?MwZ;F+bQB
+z`%Bx${5QjXa3$^Ey|sU{Qr~<1&_3or)JyuFeU!IAzo+)y*Z6zWckBEo_0RuqIrHCd
+zV1Kk?;ww$x-fR0hpsy-$uj|jVkK@PAUi96%eUsW}Z}!ofekSAZVSdH<dm3M<e~PPL
+z()#O7?uI_Dq~&uf@!rds|DMXXulBzaIp3G@C8W!jwElX_p9h*f`On_;L%ocT9^|j5
+z_NBZh|K!%?`^wsPU*l)~6WPbtc-!SlFBB|exPx5jFJry)OW?!6Z@65;e*qkba9jrw
+zZxpN-Tp@TAa3b{nfk=rr0U7?=z&pS%2mS(BE%$?ha|F*990a@t;ogAX!2Z~j7lAi|
+zKMMRW@P~lk2mS_#rcM79@EPRue}L-{?rI>;O%GoU{2ur`AO@GC`CRdK@X0{xjRQW7
+zaK``_;Qm3ta}e(<2<!*H6G;A3Ac~gGf2D&s8HoSWM+goTd>3|lA@u$P#95N`tw4t7
+z`Hc&3|0W>Pp0W<ec&`yTe~N<f%@iCB90Gn6a1QjoM6-~;CHOe-BHV8g{zG5@{C|-s
+z>L7hEDxKy02MReJ_%3iX@D(8M{|Pu2_zc1!iS%Cqai!k~WVp4We;JVBihxi_zZm!|
+z>T57I{_ubL7udjJzB_;!2=@q(<^2wD4EU8mj2-E9a(}AaKU?mPlKY<w(t76raVz~a
+zAnWOPAnWPgG;NRTfwaduAhMFaOmLpy48ijRKTg$l_!N-g?-#sT@Cv~K;3DL6rtnEX
+zm_qvLa{pA|M98-eb-6A9ZUQ1}=|2b3u73ukUH<^cbb`QJz|RBHe#Zi7zo!6czsCb<
+zzefUDuS0>fUl)+}+kt;Q<2>*`18Kka0#VOL-vMO%-3+8&6Oi^B0Wv=|z=e<(16gk!
+zFdDYcGeFwkqd?Z{LqN)Z17v$$3#8qK<bD~D_In|a`sWLd5<Cou|I>HF2rh!&8$j~M
+zfV9_pgx?6HU9J`$0y5vrfzKh|qYrnv?t=UzL6=|<*bccLcqil+0-4`Az)8Stk>3d1
+z0Qqx3*8gt>KLj$J_kc{te}tA_1w_>huLb@P@oWM1hu%Thux7jM#zrLZFF>~U{{p81
+ze*ydkuvzYB0nY{h2Jn2~X+V}g4VVf3IpQUM2bc{$0r4LU9CwV4f0W>ff+;|z_bgt@
+zV0wQ5GQ9_Zygv)b^iBmbf5!r8cZUL}0CyvPw(EyL*3-K{w(B2&Y`+#D^K*;fH9+Pw
+zB>Z9^^I3*`3;@o-zaGnUrU{-6WIm1rGJl82{Vx!n`S=?!3)lf<KK=}3KAr(GAHM}M
+zA3p^$AB{k!cNyaOvLE~g9(*#r-w56)c(q^^km>t`pDUOl_Xi38Cw`!n@w_ScqTr8#
+z%*Q#xj}sgMWd3&z(|VnPF9XlR{XYU(jz@v)4{boka|e*+nE_;a=K~qf7$Do@Ye3e+
+zi9qTf4W!-|C@=LM2eKaiSFjn#_Bi+i_#NO#yy(t&PY_HI+=T}~yuTgjMYulz8UJP=
+z^Y<{2>D&xtI#&n|0>ZVVrvRz{8q#5Yp8>MnHUXL6-vb%neL%+ZBOv2h3S@p40@-d^
+z!Y2UP&oY3|qhA#xpX8SS$*&<t_($A2-TMT82xNOs1vUaRfK2xcAYAS6BZ1R#|Fe@_
+zu4%w$fXw$MAi7lgL%{ljT={nZUqJX~;J2ZFGm!aS1Z22{K!!UX$Z(T@43`dMIPXb#
+zSp@N)1w;|jPX|)&210MjaX{(~0kR(chVrl;UIJbZy+?)L1B71sg{SCoaVC)A&j)fm
+z8v(q5@d3XJyaqTB;U5_x^&<E~psE+(HzCges(JyU>4qN(RQ2*TsTZKC7oe&a;I*t5
+z;ESvmU<B#i3{>?3RP_R6xbuMwHwnma=|EL4r%Js5RlNWycLSj}<v1Yqh5-AqUQixY
+zFTg8UFT(EuLNEQ`(=a{(r;gP59WQtSkmY^kbi4-#ycfvw-U&pN4!;q|@?H+49n1l;
+zyjeh&<2+zF%5gey8^XJR%b|ZXkmdNx*LApUK!$r5$Z)MdhPxZca2t_7+QD5wmiG=I
+z<;_6oP5A+kde;M4-YOu=dl7I3^m2rs4TN6$H7M7iz(>xM_7(ggP_-{`Cgd4F)xJQO
+z*zhBPEbnJ$Nc#d=-c3N&zCi5d=HCJQGr~6mtC7E(fdde35m2=+km1e;GTbB}!=(cm
+z&O1ul7pU47NVyvby(z~5sW$|u+85<f?F-C9{vH*64-k6k2cHGI2TmO=?JIZ!P_^&b
+z_*X3<zZa<57l<x6{6?T^U!ZDV;6UUr3#i%`xRUJ)d<o&*z&hmbXduh+mvm`gAj3Tj
+zWVlu!!`%&JxQ)o4YG0sgUm)epK<G{R0g!sv16BJ1hd}Ql;4I`jNBG%5=%rtSat#3<
+zImYF>3HVV4<^j;}1ZDzX1bTtL1U5k447?k7DezL@V&NIUW#Fd@|H$KVtpa}&$nY(|
+ztAMu&zZl4T%>>flj2HejU<CXy;a?zsw8OWVPlSIO$aeaj@Y{hb$28<0zrT{ceXK6W
+zW+2P)AduzwIgsV}0g&y}0A&5G0n!g#0i++O1tR?^%QdF^flUZM3rKsK4x~M00%>Ox
+zG^URNGTd=M_Ol~^>}P|4$p4fSjp-jFpA7dpknQynknQy>knQ-m#`NC<8Sdvm`tMtT
+z^xr=O(yxD4WBS!VhC5~)=7Yc|&(Y<-6Ug%aH<0DO0m$+PfwapBz=;U|@??$Q6!Zu_
+zG)dpT7)bv;9Y}l61i}>#pA1}!`#UD;{{K9X@+X0Cy~7^^RzkiUm<wDW@&e$gkmmxI
+z;Qr1Dx<9=Fr2g|j3=PAd1lB@c32X!|68U@}hScG+fmh=G03hw+lkwV)UIUVE269}x
+zNB9qbw5v73mjdbE=LkOsNIN@4_`yK>!}n3IjPDsB?e4e2e*&ccSSx%5kajp%cqWkj
+zZQ3_nt|Nitrs#G_1F~HP0og8}oU7ZV9mxLG0%X5x0<u4afb2(ef$Tr00-2v9fb2J4
+zAb#>rAj|i>@HQaJbEoi|fz1E6gf9a!zh%hB;lTGKe_JJg8zp~t18Fz61Fu22W?&WY
+z7T{9gO~A{5-vNFLc+7e5JHQ_S=}%SxS>8*5Ebk&9<C_n>8u9|*3g8T28890d2A&7R
+zo=5r?U@CAplo;PX5DDY^2*~(e#UIA^C{Xz&!7mVq{8k|A=X*fb*J|MvK-SlM;a(u?
+z>rCOt09jv5Ow}*)q5KRIOT+zNOMaSw2r@hZWPWOa_<#5^{J96=-T)qf^#1~U0ry`3
+zvj6@8$bNmqR4qRY_#)&71Cg&OpF>W+bT>Ht)q3Cwh-W!41AIPk3@{hy0e%EzI`0Fw
+zA)dE^D9@Caf#twcv$T9TkpAl!Aj&soFfat1Bl3LUOOQ_k(jR>TNI!KMkm+9vWWJXH
+zS&kAQ%k_Pce;3GnUk7A4)&N<q`$c{)komb2$o%~`kokQ<<WB>cpC^FK-zFgQyG!IB
+z0-2w8fz02VK<3w-t=HG%fvL!6j^I4OpkS@wTEUwIZxg&va0?Jqs`M8G-v)k;_1&MR
+zYybJA;N3v_(JWvAa5Rv9Y$WhB<ZB?X2=`x~rtd!sJQ(r*0f;F_`WE19gnt+~2iOXH
+z8G84K{O3TH_f{aw`9mPf-J~)7TR_&=Dj@6WQXuQCOk?^yAnSV;ko7zr$a+6lWBMsT
+zjt2(;*=}Ft==S;q$o6|zWBOgdehBvy-~}kp_kfcjZv?WuSBQKOko{$v;Ap{Pfhb>k
+zolmbTmIE1I0C*@c8+ZfanGF0cFgH)<>pa2Xz`+Q26p;1(o0*#b3^)$_Iw14028bbX
+zcrB3eE(T)ils+4H7BCA~jPPdz8GZ!tVB9|uI1+d)koBDgWPJ|;vc9`!C`|tZcqYQV
+z0mM`%{UzXE5bi19A>fYzUje@#$aeW9knOSo$aeXO#`K$jjOQvK<EaC7AY3Jo@st5y
+z1D^wA`^^Nh{jz~<zjHLEdw`5*IFRui4SWOP4h1rve!$nk-^tbW`8bg6{0NZ!@^?VC
+z^Sv6=?*KBsn}Ce(df;0KcNLKF)dAlG&j7Ohz6PW{91Em9qybs4DI$LZ?KuSD{sd(E
+z-;VZUJ^u_yyT1j9`%`WN((c=VcOu;1fK2~gAnWr@AnSQlzRUG<$QJ@{1Fi)!U-iIO
+zA%9eOoA53m<M|B8`usbP^?dRyegAkM>*q)y>+O8Ge-4o491CRmF9kAR<v{GgPgx8+
+z1M#i}o(B9r@CeA46zXwm8gMG(19DtA69|_+{L?uu*J6b00Ah-e{xXp5@f?ut@h2eL
+z;}MPN{|)3g76MXl0g!rgfV8ifK-yO}koGlMWBRc`>b-h_*4qlC-X<XJ>Gwd|(|thN
+z)14aA8-UcC4P<%~fYi$XvR|A5WWV?tko{tq#`IkUT5l7OdUpY-cL$K;MKh4&#1DYq
+z2LF!6^eQ0J8x5o#xq-B!<AAiI{y^H<UuSDOdQ$LyAnmDH_zghX!F9kLNGB}!OXR*E
+zxE=R>a^EBO&jh}M`$x$A&(MyH=M&)Dxc>@p2>52X|1j{cxc_~$=TM}dGFP{EhqU*f
+zrM(}O_I?1!dB8CU_XWm}(erfpp+MTlAwb&4-yx@cyapVI^qvEjK<`l?>)|0F{nY(H
+z=I>r0%hL>GK5qcB99IIFzZF2%!?{4#-+ZLgh4g=MiBA7IAk$w1WcpP=rhg%j=}!UD
+z&z=e7yzlG4!MJ}kkp9*MoPd1&<6=Blf!^PMheF;Cr2qIm@EqW8fb2&tzz={o152Sl
+z56JklfK|ZrfQ&yK$oPi=8UNux#(xNq@o&FK$NwCV@jnG*zupRb4|o@l@fQOb|7_q=
+z;0z$+pA2ODBY=#5IFRul31s{qU#R2n0G<Q>GLZh^IpF)iRv_aK0U5s^$ocPuK*sL_
+zGXAkZ#(x%&@t+E0{09SBKOZgB@xKpz1@gCnoxmr6jDIzd@h=B*UR?%c{PTc}-wR~?
+z=KvYM2gvvj1v36m7wGsu0=^4*C-85;7lDlbTR_@%6_EC{49IZv<bICa&jiwr&XD`5
+za{o{u+x5fwI-Zw+jOTeE?eh0>|7UXlM?lu&8o9qz?w0^*w=?AaXt{p|knMW7+}{QJ
+zW&9rkY46*B%zvBQ{~eI^c&psMR_=cr$o}vu?3Mk%y-54<^MP#NbAZ$v3uOHV<o-oK
+zre6r8U42XLUk+qBYJjwdpUVAPfUJ)jfwc37<^BUe*6aTQS^pmbIgacA&PDsZ0Xzfw
+zNO8GbH)G!iZR}bPJQDZ=;K{&?fu{p=fa8Ie14jc3fm49<fir<Mz#O>`Gjmmd7Ybhj
+zybiorcrB3eQ~`s)H9+dG7XDoz^&5r%6iEFa2)`S+2K)};zY~5Rkoh_h2-kB75lt|}
+zt<g_B;UL#gOsAEc$R_q_^b=DcuMjzrrWexaCms*^O(G}4<cF-+=qI`$-wa^-MAXHQ
+zts4DATth#`AIgd7`a^bW^b^q*Lr=sX%8772L);quMA*^LJdqP&T0;sn`iTcYeuc=1
+zXyPID8vVrnkl!V8q91ae3kUj%10d%Q<S>0=0P<}b{X~odLq8Tdu?X_r8vR7{lc7f;
+zlhh{`Lq1HSpEwZmb45;E40)zTKXDM`r9kQvOCVpW(N8=S^6N!TEQP#Dqn`*H9{OvM
+z6N8YqYV;G)Z-+i7a$*^7ZPVx{9tQakR3dEl65>+G(=_^tZnQ6appp~IA;+^+qMz6w
+za`-qUCoY2=V*t@lJOlFUMNV7}d6Pyz@nFb*FLEMma7dd*Kk-b+-x4`-1?1Z``iTP|
+zKMIY^{1Yo7AEwbyJPY!3MNUK?9FnQgPsDS?p%o%0!sdsBH2R5WL!akS7(ek+$k%K1
+z6AyxXv&f0nkZ;xKCl1B`{b6J^&?kl=AE?n!JR16EiJS;uF~p<MPdo(jOGHk*4Duq4
+zeqt)(zh30Tm5}qj2%w*M4D^33a^fn;TQ&NL10jD)<itA2w`=qhkA-{)Isx-fyd3g0
+zjeg=F$j=oy@tcrmYV;F_L0&3y;uVlD)#xW43i(YUC&DKVS+CJgJPz{Ti=22R<ZT-L
+z#KDliCvxJqAm6FcPaFaHQRt-1Kd~P2VH*8J*!<9JkrS`NEuTg|aU|pwA}4+ua-ItV
+z`iVzD{v(kS*FfH^(N8=b^35VAUJdzHjeg=`kbf+4;#$aeYxEOOgZxA|5$2zG4diZ(
+ze&Ugk=ZTznE#w6n{lu?B9u_&V0rFKE{lvo|{}GV!6C;o}YxEOOfqb*biPu5CRimHS
+z5Ayd!PQ(~CWT!?y@l?o<f|FDA54;}oVH*9!RLHYMPFx4MPotmsHOMPOPW%q!A&q__
+zeALjJL{7W`^7R`1#5DAe-;12s1bLfAKk;zL-x4_yWATvf8vVp0AU_IDSmhu1J;;Y?
+z^b?PS{9KU}Z-hKkqn~&b<fS4f-URtljeg?MkY6uy;?0mZY4j71f&4C!6Tc66i$*{3
+zSjhh<a^inM-mcM490vJ&A}6kge5Xb~@i@qbU=U&Xh?sK>Nz>>j9uN6hA}8Jgxksa)
+zcmm{eMNa%7<O?<WiI|fNy+Y)~A3<KP(N7!>`TvNV_+!X7X!H|Lg8YvnC;kNTc8z}G
+z$&i06a^g=R=lLR_pXi4CL=1u~AF&y7w?;ql6v(qhPW&0<K8=3jsgPHQoOmnbJnsbb
+z6Tb%eO(G}$H{|Oz`iUbTe-8LRNS}Bc<l8j*iNj&PUx=J|JLDXcfqvpYF+Pm|QlEGS
+z<Rdlui6=roPvpc6kQZq56S0pv^a_y^e-3%QMnCa1<nJz#6Yqq)MWdhib;w^4Iq?^e
+zcWCqzPlx;qkrVHNoP!?FPaFyP2%yS8@NURQYV;FFL7pvg;ysZ2H2R5WKwb)@KJk~3
+zFV*NLo(cK&A}6*$-lWk_JPYz)i=22b<gFV0#B|7C5jpW!kauYG6VHbH3n0@c{x9Sl
+zbb)^2Xvj|lQcnCe<Zg|Aq6hMGMNYgA@=T3>Vg}@wh@5yo<V70&#4(Wn2>2VsPi%#}
+zS)-pg3hlpH<iy`XzEz{2h<&o5JkLmd;scQH*61gm4Ec$0l9UsF2f16LpNM^zq1hrQ
+z{vL9lMn5qf@(Pg?AA~%l(NDxa%+Mc+ocIvr%^Lm0lc2v@<iv*|->T71#6HT<k3~*w
+zgM7C}KXELwcp{v*%0F-;<Zg|A;yB28?vHZfBar(v`ibKqFBLg)6XZ)Z`iT=DzgpzP
+z&5$=}^b;pS{y!ooJ_`8;jeg=J$Ty3exCQd98vVq{kiR8z;$x6+*XSpn1Gx)VGwKP$
+zsq0oCitYLd5Wd~@W1t)OQy}`9>%V~>;Lm_a+w~(L^`1ugiCKuB`p<w9v%wk9v*5%W
+za5wNdaN;y@#``=taXNSr@D*^P4?F~X6`Yt0z6$snIB^De1Mqcl;!N=Mz&F8(dEgs>
+ze+4JzgSP<R1}Dw}Zw0;sPMi(i2HXx#ECAmM+yPF!0K6UeE;w-xI6$p~-9WB)Gl5*!
+z76DzrdLrt%8GllMZNPrO4&Xtof86X3bOQ$fGl2&Ki-3m!>wyD-&A>sxHsGPa4&Y!Q
+zBSR*Jx`BrQx$bi_ePDm459B(j8OZfe8<6Xs4j|Vz%mmjl&{6A^Od!`KML@1U>VYtl
+zq0K<9C)$8qH*^5e#fLKUTnD&;obP7>Ij=7Qa{gWq<UG9@$oY61kn`>iAm`UCH0RN7
+zAm_`OK+cPcfSmu<13Axa268^z2IRc81IYO)D~t0`H<0tqOd#i#ML^CU>w%mnHUl{y
+zYy)!M*8$}Gj+LB-a=3x$5<@eAM*xd}M*{1CM**9GM+4h{oHum<j|IBWIKzN$Am=-o
+zz~g~MK+a$4ft;r_134dQ19INc0X!M#LZiBYZr~}vOyH@&BH-76^}rFpW+2D&HXz6C
+z4j{*87mR`9up4+9^?_ffKJawv14mLHI11PXJOkJP<oM=-5uF8e1Ji+-z_Woxz|p{Z
+zpa<9t%mB6lIc{_SIX<{xd>jYdK>GVk8Y8d>NdH|Aq@QjE(jT`0>32JT^sg=$E&Zq)
+zNPn3Lq+cuo(*M;1Cjpy*^k;2A`Yo;}(_H;soHr6%(THx~iD)eH0yGlwEi?x46;v|i
+zub?uCbU2EiDIA3*ccXAe0Y66Oh})1@DKK-2=DP(qoTvFnuY{kj^-J?Kh70xmbLVMn
+zy+q^F$j3=3^{SJ*aHX80c?;}`*I3~m*axp=!d+-@UUv)6M7eog3}az@9VkDqYlLUQ
+zn0ehJJS6;8;myJa!N`=p@O0s6=mfkj6rL%3t?-cW?+b4d{wv`HFm_&V3#W1OnuYpj
+zdTn0KXPl<_PT@WpZwl&gs+LcK5i@+d@Cj%)at=1Uz7C@%_Xs}*#!X%%+$X$V_&0?&
+z3%^}>oA9TFcL@IiocZBk#>)eHQRxZ)f$&V>{m;_!0^wD{i-f-<JS2Q%x(;72e5LRv
+z;ah|^3+FjQrr#pGRJhxx^EUu?OnI~Ln}j#PE_pr2PL1-k2v0%hX7~=_`NBC^@>(lA
+zQ~0lhhlF<sZxKE;L&vvM_(j6gX6g8D7w!@M894J(Alx@b>(>i^OL#l_4=<B{ZpQK&
+zkAAA!LwJ+$0^yy)L&B%Q*)V*Q@Sh8B5k8ns2>EFj&husPTdp*}POn1vNZ}#j9^ql(
+z1;SSe4++0Qc!ThI;myLY7TzYjfxLgcYn$*^;cp0kR`|QZKN7x6xEs#&B<O!B+%Np#
+zfG*GN!jBUEn(z~apAIKX{WFAD37;hVVd2w+e<Xaa@YCSDslQnGLg69dHwwQ}_@9Jd
+zFZ@I}{gVbXyKWIaiGu*f?q=arg|}L~!{P&rT<S96Jr*yrc$39jExz62!-`$%GV%K?
+z9<q3o#ak@C&EnkL=Vjs_Y4HM!hlHE@YO>@TEZ%N$SBaIL#TQz<-r_A5-)8ZFrLpmQ
+zEM6qs<iEj^H(PwG#dlkLWH2_p0*lvMe1pZeS)30$c$xO_SbU+y8!X;p@eYd*ToN1q
+zB#ReWyvgFN7T<31w53-37B8}RgT-4c-eK{9<+1U5EWXg<^%ifj_%@64ArLQ9|06B#
+zv-nbrH&}dw#kX2~r^SaYk4-<*;!7>wWbsyucUXL2MQr>Y;if+<wB#X+ueW%c#kX60
+z*oxTnd=_72@%0vOvv`Na`S6TacY9g9z~ZYczTV=k7T;#^-NH?MxvOH+pJeeOi#J)k
+z)#4o%9~iRYw|J4on=IaH@eYgg;UF(le{PFsTD-{O^}=UxJUyh@)hzr<;TweiN_dO#
+zH-xteKOXBL>bD8c6TVe=o$z+y8-#BY{x12Tde?U0M|?x`ox&#y-z}Wy?irpBKY3jw
+ze4y~v!qbGe2p=Z=4dHI#N1v<X8!0?fxJUSM;gf`aUwEeQ7liwSA2vnDS0MaC;R}Ud
+zBfLoXgTj{zA9SA94++l{zDoG@!s~_qL3o4klh4=sO~QHpo%OX|c!}_4;cJC&5dKTy
+zEyA}6Zxwz_rjD;o_@%<P3jd?<cHyUcb@*+<uM^%O{5|k7Xvarx{ks~GQt-W$f8_eb
+zRCNx)P_@pJp<LZNG>h*Sq{Qf-?a;p;@(~WsuOsmBNQ~sOEIIX!{87<2Jej^zPW>W@
+zza(3yZ@AG<6FE84cgm?B5_z@g8*cRZyq%ZPcgm^nI#`Kahv!K7g&TdIN8x4kO?YzZ
+zoBao`=o?Ns>#rUkUPj+3r@q;*s1bd`jefgU@78z9RsIL*0C$@F3pe_i{j}VqZ}vmT
+zsc-f}-WPqtjehfhSbe9Q`ey%x=kjSkh8z7Nt=^q~r(C6fxDK#I^v(W@(f3&TPC50>
+z{>%rWZ+J3&r=0p`Kj)<BI{$_n{Y)!;r(Bg^@}DdE9m0*ioqwmC`ewgqh3FfeOy4P|
+zzS&>;f#@5aOy4P|e&`5Yz(+;jaHH?G%I}m@ze)685Pidq{u!3Ok$;5nCT<2f)fdaB
+zSo{);UuW^#E&h_lhvvq{f1brJv-k#!KX38=Gh*YLX7Ngk-)Qk$Ezb8Pob|!_>&d_W
+z8R1J=adN!_p2)wqN&EcQOl{wWoAyZ)eezlO<CL>~+eQBuqHnm-FX9(m1nN8G)c0Ut
+znb-TGZ#cu#KicU#<<!p<{lR%U|ArfVx8>iQa_Scy!_-kXqHnm-x6^mZsUH&kZ;HO*
+zMqd>i@srPTgeO<}$KngFKN@}EM&C|9<d9RpUihCy-*BT}e~^x!oasB|)aSz#UcP)?
+ze})@<JAJ2|`e~xSK=cha`k7Y!JLS|j``HhPzTrmSqqEmte@6Zh!n;LA;J&AmQ@^MF
+zQG)Q!{!s~@sDIQCXY8n^*}8rVH~F*c$0=v|nnd3%`i2|*kkvj;xoV$Nboy1IZ}$6*
+ze!UiV*N;<9{d&=V(d1va(T~f&L$2~K{4XZ|4mta0T>c$$mH*Rp2Ga|~zJ#aXcB1~x
+zhi$wlr+%97@uF|I(YMog%2oMCs_0zTihjLtqaRm(hg_9k_zj}p<d7#UzeBFdf0j=F
+zb<yWTL0-wycgj`yCHxN2PqXyn%I}b?@{iW(ed7YLU*XBpuXo5*`GseTev?Da^0!$1
+z+bO4h<`|v+GSN3YS^7>n^$SG5R`d-w`fdDzi!jR(o}Bt=cn-nq9?>_P@<jIMlvCd=
+z`o9r<!;QZC5EXrQ`c66ZGqFzQ^`0reaHDVAp9xPn^$R5Yr>6Y2zE%GwywNYhx|r9g
+zb9DO~o-BQ*oau)||18lr+~_x}*rWCDlv6(q>uO$wqHnm-x6AL8Q{OH6i$&jXqu;Dz
+zkEZXGQ@>60ZxDUMjlP|}Q%?PM(f@(y8*cPNR{cBW)X((l3~m;E!;QY3zEe*90?~g`
+z^bI%qA*=jOxhlWt?>6NZZuC8tzIlF3IrYu+<Btoq{TQB1-zlfQdEWfdT&-`o(QmQR
+zcgm@6o=@+br}Ygt`gZ=Ea_YOXbOIgowZ7rW^qq3*o9Ex{3$(uB$@HCa>K94+Z40%&
+z;YQzWmES3+e!b}PeK@Y44Ns=;lvBT1^iR7`>l>a--zlelo9GvazTwIAopS1Ti2gT4
+z-|%GmPC4~m*}8&m7k$HxzTN&#IrTlF|B~n%ZuHZv`gh8ypDFrT7wP&lJej^zPW=MW
+zzen^9Pp0pbQ@=>`kGojxM|d)Q6P|MFha~*fqHlOIeW#rI^`ifb=o_9)-zlelljxsv
+ziO#>_$@HCa>NksiNc0U)rtg$fzeV&P7Jb8$=^OdbMeto>8-z@Y*I4`~7JuC0Os}W)
+z$j1m@>PW8(JkffjP0DkZU)QJM$;#uDvp(8I|F@!VcrtybocbN2e{MjhZ+J3&r=0pb
+zMc*g-h8um)LAnyiXF0-?Q{SA&X%~INDIbAPJwCk1sqd6i-<;pMv`FXQaHGG|O5Z7`
+zzB%v1mj>yN4LAC3q|1w(={x1rH|K*gi?zPt4A1=A{>&+-zBx~{Li7zc`fkL*i=62@
+z<<vLlkA7RM(>I(Vrk{xqFLLTT<<vLll|C%i`i3)TqWnAM)HmmwPFk$>4LACkh=&(B
+z(|5|L--2~NuRPH=Jej^zPW_#tf4S%zZuH$M_GtP}IrYtXt1Y5$crtyboci3S;B`ca
+zF2CW)^qq3*7l?kD=o@bIZToS`sc+7I{aW-5H~RK?XygT@E|**7T>n{b@uw|*Trf6#
+zvBmGT_=grBSr)4ww)oF1zRltzmc;5`Z1FoR{<g(gA3gc&bC$;X>m2Yz{<=xp>m$gO
+zzYw0RzD;<_*<Q^O{&Uec-01J@uiJxsmLohl^_wtn=QXBW(icwo2z>1JHsOtavxGla
+z^bI%qAx4giT&3@bpXsMz-p{K{^bI%qcKS{^_1&UhE&7HVeGk9jA~1cYocaY=H}JY!
+z^bKeDMCEtNsb3`ezY~4Kjeh756@7R5PC50>`O00QZ@AI-X!UM=r=0rcJm&Oey8R4K
+zrtg$f--CGsudwJFZuH$s8m&L4ocaZ#|CHz(o=o2<r+!HE&%ikx+P~q+^qq3*H;MjQ
+z(KkGqzEe*97SZ1>`i3Xdcgm^XF8VVnbp8!D`f=?i;qO3rQ@5<*mn?qRidcE3#lLCs
+z`z+qSGFJcV7WY|vnZ<9i_=6Vz+~V`AV$-|V;(VdVS>7s(v%Z}Ev>$kCio1J0c%5+5
+ze;*ZY=AS-9!0_hz#czb0{`Qe@B&)9PA_0as?K2wlI&!l=bct~DJYth@^L%Om{3^qn
+z=Q;C*o99RO3OD=pt^qoH(<v%>SAlS|AAPHlkJR#yja>F?ryVT%qqV$3xY<wqnQ-HO
+z{~+A#H|-K$;MMwW_$8J9DVk3gZpM!*g`54tpBp|#hkrx3d7kl(;ZnZ$g`55QPmEm3
+z_fI32@(mcM^HZdwcO4~MsOxLO&3a+9@V0Cn;#}dzKhF?u#;ds|{1H0*QsHT`f49=e
+zg<mDy?6)-vH~Zf=8M*AY{#3ZxAN{#-vtP`ASA+F!_OBllZpQO1!p-x`w}hMLiT@C8
+zp6?wzNXKW!!y|;7=WnNg!{ocKi!I(@@n2iK!{Yr8jg4=b#j7m7-r~<%{4<N6J~%f1
+z^DN$A@eYg68WOAjYm0YU{G`KT!++P}?^wKWXl(eaEq<THcUt^wsj>RgEnaW&pIUsI
+z#Xq&UCoMMq*%n`C@huiV{P0+PkHs&x_y&u=ZSlj=&z$zxXz>${jFp#J{921|uz07%
+zzkXC~eCsX#pv5mbIyU^<7C#Qp?Vb5&KXh{b`xQ=ppT#>Yei)v^JHwB$_$3x!W$`A9
+zZ?O2Y7U#>6&h$>R_-u<WxA+>1|Ip%FEdF<k4?8Y4{izoBTl_MMf5+laS$vnpM;;%W
+z-X#`qu=sB+{))vvxA^fV#Kxa*@o!uFmll8B;sZ{Mjqfyz=UDt|i~ro>zq9xw7T;m<
+z;lpFoA7OE?#p^8oCyRez@xxDwjX&4o^DSO#@g~JHyT`9vE&ja4zqI(tCo}!1{#1)E
+zvG}zXzsurJDBhhN7ylg+Xa9P`;-6T2kUKW~*%n`H@j8n)Sp54Izr*4WSlsOjjHt;N
+zlT}?83Rlf64;NOKWO#zBLdBJ(zM0w6GR7<|u30**wz4E#UR9al2~{sIs4A}v2dh24
+z33<WFCE=x>apjd|Rk<F|@);gahNm=GU4B`xbY`#)w<=c5@D!HUjL)qMj~z2VP*_k`
+zGkzY(r1{ee%e}J-%L_ww-h6xyPfL`K+E8h6IOxmwX4OH_L~>bdGznERf~&&S#U<ec
+zWf)r%EU6BL<BL&KToIOHj72$_{e8)OMosyW%AC?M<Hu)A&X^cNt)MKZ7L)MA6~UUC
+z;w3?!$CE2nIT<QbYs<=l)u<UqT?M?kg-dj0`KA{xNm$}BW#yH{73G&FsIE}7))T6Z
+zEk%u>{k=Jb)3fq3Jj<h*oYvjQXo=$K9#1*4JHE22vLpzy3}kF^aVfqo=htxY5`3-T
+z*Q(kuzOL}0`D03gX1^fzLlY>Nj=zQF(-UVeSh-)am*FWX4=oK=&xLI;o5-AGIX;gC
+z$fJCizu7d`3lis!9b{@nRmt)~R6Yt}3^kEOkG%}NqpZ$Y#e`7p;)?Q;o{hpY7FH2g
+zkJ=)<GZN-$(vo0huv(j&Nz2iybtqDIKMW*{VRB_~Wr4|Df+##=k@Z|Qt}`mMw0By<
+zMjSJV5q9?hiE&zW)r!Jkur$Wx#?|1?%)UoGHa~lO#+dTTP;Gag&M{Uy0cME%(>!&S
+z5wcOIC(P-%LZ3HdKgKr!@r@ZjVL!(>cG9^093$#*KgKwby<%2yWnJNAJ@f|^s<3uN
+ztao=<R3h7)R8}2~cXA0sG80)<p*lw{0)>|)4LS`G$7CgG$lkm9r1Hx0uo}6dHDHZ@
+ziDIA3EYAtn1jD^%L<L<?T^^3jv(wP^xQhPa3ec+6U)Z8TSdc=ryDJbg0Js7%4i~h0
+zI>7JU<Eks*9CE;<U0i{9_u~r0xJgafH2NEBUVnql=r5`g^jFrle5+ldzo>G%0<2`r
+z4qSnryo;7v&de2X49~7Wbf)17#Q116E%8jNs;$HT$SKg+Kp-1KVPUwc8iRM%_{DYM
+zV9kUIH5Kw^70xeQ5<s<=;5i#7Ry}A=2q@LU%L<oVwxqYf69YPh!t%a^ttu;n1@$Ft
+zesNsN<Fl$N!{tkAt7>bevTOyI)U7NJFP&FeQ(P9z^3+{g8VK-HxM1eOoS7BV<}S12
+z7{?l#pD}JuapjWWoFL{iu&7{Gd}0!Cd|*y6R1K@I4690>Ju7jHlS^PRDpO;^RpU$0
+zDB;+#ta~EqsCS))*Xx-&si3+lTvbw4;q~UnHIE6FVVB?QT~LrXJ1UoxyQj_>o~+vH
+z%YtgcH+y0sW`E_COJ-+yqQl;NkBs=!Jl-771U<k`^UT+6x<@f(Osp<m8Cz>kW7DPC
+zKk<5}uL^``Vp-tm1$HIPxxAvb4E=CK%^sD46W+?=aBX#PY*|&cGX-4$ChVQznbF;H
+zNJq`9_9zwa^tzJ0$ecFU-cp*}Jx!XQF`>L>KIY)1Y<pFz0E<<)cvaxiK-gKjj4|vX
+z#vJEd?p-!>PN3Qo=v(2ON$x*0=sDK?YXpw8_PCbwD=jk{<HML~mZ$|2v@6dTyI3ux
+zWVKaSxBwGf?Wr6s8ml_VjAs+F%a;Ue!WUd#*PF^JT2_3tdd{a~nV&H}>OPh8s#~?n
+z_)fbhF^X|jGX`Re+j|#pR54+^m<Q}#yivsj@z$+a5e!$WCC>bq4q!VF<C2|?Qy8PY
+zC$;EQ9EX9s*qa4cvKKCFOiUi^0*)C+(+ie*Yr{)1c9oZ?(JQN}G&tY3(jJ1=t(v}v
+zRnv2180seG>%E2298Y}3ju|h~_-yBgVhwUEwghI6#iqdQaaEyUWng@54aT&Lam9`T
+zgF8kB8Afv^7Y2(ff~8ZdR?QE1y&19fxC&l9*OMFL)h|k#at&gVl=aSooxazZ+N${E
+zygB1%amNC4Gx*_|&g{lH;!Ed<BTkwhiA$SRf}zoJ?eXJcv{EH1+pOXPSS~Lbz){U+
+zdn1e~y0eIhrveG1;0DfKs!Geq77O#h$h=ET)dyCw>SKGLRa4#-vvl3Z%_I_L)~>a2
+z-0Pb^K`&M^#)oQxwWU><ftFUSzy^!jq|6wv_XFsKvp9Q1SDD=1!>4=Zb6U%}ttY_!
+zwwP*+n-|VOSno{BfT*g*am##k<|fMO2@?fwS0G#Y*rcg0FRmEJ%}1}d*Nz>{EvAin
+z7QQ4lo3WLOJXTDL%L|rF^T%SB5BsXCrpNV8I7)lAG>$9T`7*RB%U7#_9w#*_>DW%K
+zqv;-Idn<39HPzGVwr7<M7A!Xwa~H0=ZMpohN^XKWa^T65!G6A-nh894v9XpOVq_&c
+zry=oP*F=XpkE>oIvrW4DzSaMEAH#WHi_D;XE;0l6T4V<5Tai`BBt@nyQIXaC1VzS7
+zqpw9~&^{NLfqN}71NE)QDrAx(Q<kX6>b_OvNx7AHRDrb-){toMj6I&7C5gaJKN^f%
+zseP$oOCws*S)S}<-O1AFvA(Uay;r-fkQ3j>tRTHqg6(9Y+G>Az&nii)>|rfwr9M`Z
+z4!kGzBpN+dln#@;rbM39Y$wB<_Q7Z!>N*dFg%gTHn1+^OL$^?k4TXiXIKmVzaL!ud
+zMryNz6B{gNVs&r{cJyj$s8CT6RF61km(8vW&c||by52k~T%b~@$;b#4Vj)wxWO{A5
+zX8yP()m1Bzi*l6<L=eF9y~=Q)wvt0o5E<l>|MGB6#sofXnysEfKtEW#!m-Y;$(R@@
+zuBi!Db7OH@ad`#$dLS^ath^#PuA;m$IKHf+cu7so_*p@0NzTSo+CpxRmFRrnX=<U@
+zS6Ev!fe%#ibX9LB*Nhn(h;HC{tE-Fa%vPng>6$SUvV&#CwH09<50rz|p{feCbeXRU
+z+hdRfWvbCTWHsY+s;jH2^&-MNV3JhF>k67&6ATsO$rLwxknRdRv&8qhx=?AL5XD1v
+z;wo9Xye7OnP+DBQvK+=0s99NF77k3CJtr$CkT=_#9T=f+WmT;RA=`_~E6T%lC^UQ}
+zHyW|0+=EJWFuIM^L%{6b63;HLLE<G#dx)b?3FXelQ}-SsnZ0-!E%UM<cGr>?YheMT
+zD}pOZxS_7AtGEKDh~-xd*O8f9LAKVMU`4RF2K(z;ZAmaZw=NW%ikWHU5-i|m6|V^9
+zR??zi$9)QvTbUmW7jw}~b9F|%pgdfOb?MyV#TDJRt7DVLgZW~%xz0>YMb%0#%i+9{
+zjpd-@R&6C_{HUQ|sWLvg1E(|4s~^vV+)DPSsh;_DSkf-wrcK$n%F+OmN)$fBlUH25
+zBv^=tvv3A|(umu`?vom(;Hyds=gzs@beD-a6~PtQOPCW@JF4ESz}zL{k=G?Audzop
+z#>PCViFuB?N008!;*s8JFQ1LGLd{iLnY3o(>S@7j*leOk@Rr2x*)OO-4-m^JudE3d
+zW5)#s#*PoO3DRu&K-poqiQ|R0j@>w)y<j%%(YbXUU2t~q94wg4t}e-ks;k&51B<Ix
+z1xo`}q2fzxgLpJnUK8dv5VkAutj&Zi#ZF>%Rb4M(ZJ!tG1OpWnm#x4UQ?=O2XyRuM
+zj_uXLB`V{n-x$N$r-$b8{i|@n!kn^s0lU8Khh=d)p?GXR9z%LX-KxS$p8p8wjnOck
+zD%FK)`JM@5o$V64$SUx9b9!BqPMtWhd!Jn`N$V!g(c^x=^tB5vgg_Ml<Gw<#H#*@{
+zlj4APn#bpv&m7Gd3y1Bw$TM3B=9XntR+c0%_y3HtN4MDas_c4(m#FYs@*iIMe@)BJ
+z#WU$x|Mj2I_IU89A9r%63LUCXc5k*E614gJ|M1q{>+*8H;s2%ba<ie=@<t!TSgz0;
+zjN9wt$n12}Q4Q@T`k-R$4ugKIlgHxCirwsf^)aa0j_EztXr7f{Pnc!t=`kazD&bzA
+zoa%WfjY&vq=wFo-I>o;#DYVePBB?%{Hrs>d*oW9WdZHB5y894a#{P|N%>IpTY=Y?i
+zJtxffpm8())#t~%7f-Uxi+W${(Wy7fS&T$mT?xEpQWvNlS~Rhqo<DiL^gxVix;!_E
+zeayV)%QNp{tc-9-Ke|>@D|@WzdR#0yN17g<Wd}kFW-pE%mwE|}ZHAb*lRw?B)0M%A
+zL-NYlv$$|BbHBtD9mn+8yT9_+Q^O}37ysp5$k{LSu1}IxsTTIK^HPG27Pn8}h;Z-v
+zj5CjY=)1jl$EXGF_o$-=xnHABY@c6I5^5@^d%%88A=VT28a4VyURDM^WAGV^&p3R>
+z<1+!DiTF&y24~%h#Z}mEbYtTv5WtT3baxMX`F8j~$Su3?II9{PRlu7u)*FUczj$Sf
+z3zxW~wj8(b)nn*hH=k_nI#ssmjs$zKaCdaTvExB$qj~PZsmImD-eiDX%+A2x#KZoy
+zukqNOr}y~unTa0iGQKD=Dt#+`j7r}M+O4t=Ws0h*j^2B1^lWZ%(U~pW>R_2X9^}gb
+zHF#R*%JBuJRpZ%6hN}!ON1h$*+jAg1x#~VHjyEka@k#b<EBe@{?>hRKRo}yBRXHDq
+z^<B?A`s%v|o=^2XuzDia_u$E%0>;G<yGN&I0ddb5@;C?V!ST{D=Vz-x`e|n%WT^J9
+zbhlH(`d-vY#W~i(C3cWry=lCPWw43%EL3@-`G{&H-<h#gWZz+aqV1LhLFq917&O_k
+z#ENx~S3s7251n4-@oH{sw?`k<60e2qEF?d2YwRc5M!hGjW_^2}U!~T!{Pw!^QM1E6
+z&q8!kX`fPFU{_g>S+MO``ea`#F;2ZtwW5cto@^#2M8Z~z36Zc8yF<if(ys0VA@zjU
+z4%o9rMbp_E?LC_c?@=Q&>Zr~3Hp|}QsH3*HU!#szr*i@R6(z9;3!FUH=y^D6R5QA|
+zwi0iLk6u|-y?peNs&w^keO0<XZ4-Y(i<g&&N1wg8w!ETrG@sW7N2_B)D}tqb0$+1>
+zC4Lj4G`MQCb8;iW<$OsZk)Gq!q*qo|uPCk<y=u~gz=UzJ0oC+qMOA4nPK@kh_6w_O
+zt4o44G4YRf6(jd5k$sK+UsOBHZ&lnIy7uG!jQ^l>A#raP$7eR?_2a!i#KJcYcz9)>
+ze}5wGeU<~~hfuFQ{q)Cy^FuLP#|ftU|2gM}Vz-C>b9S1{VmQHS+lb=NfJV<)#;x}b
+ztgYj#>;Ij#bx{BE(*LQ!-Q*bqe4?Mwh#NTf_;-GK{+SFr{{8r)Jxn<67dY(nGWPXX
+zhhl!xBQEv~hj{=0AXogahQvJI&-ki-`YF2P?ZXC=8iZo~f6V@WuTjK4A?-D|+Opy=
+zzx<!-hAPA8gX)KKY%}7DYp+kMu=@Tr2XXnrSbS>xc33I;`$2XoWRGwk>P0X0<8v%~
+z0Q(j*8Z2?l5bQ(Dv=jAvMRs+l!#t2Ues>CQwlMhr$KLzE#Z{g8|MxN^OcIP}NF<R?
+zut^m)DAuS%b9IuS#Y!txtY~v9Dk@e~RBTbxI^EE9T&bd>Qj2w>R0pIjRa8`5r<HZt
+zExRQR+p=4Bi%MH;*x#3~s1qg4_w%{WIdHjQfEaDNzi;k~nfE;RInVk3@1A?^MZLGk
+zYcS_`InfWiFl+DB%whkK#6Z1QY1$Y}|KcepOy?C$UZXs%n)=#1o}G9j-ri9?;lwEp
+z_O_MxLQNak^l$T`fAR{cX^j%S*UNR8_t&vw_s_Fm*(s5~y0jnIsqVa*YG3whPp&jN
+z%Yf5t>GeFLp!Vtf)s_8+-nq>s+-Z`1V5fSb*VX-Hp1}Fg<;xp$vzG7V4A|2krn?_n
+z!QO8=i^TUsJtk_dGwn^zX`J!~#&q{Xr*X>E&cW$iQaRm@y#1T}xo=?Xy}fSAwa)&|
+z2KO;2<nV`{#O-5H`!iqMhoI&#nfvqj_W$5c_38QsXLy~iH!0lr-o#@vQ*Sbj(?q?=
+zG)@!sCWS`%HDy=+@46sogn8G?{qkAwRR7Pu;dttcarcVOU(H+eCtu(D=X;y~K6Foi
+z_HsM$tcCMFjRVhGI4?ij`ym$h{BW*2XWUyo_S)H0F?E!f*-s7#?79;@w=vz!?$6$Y
+zW@z41SC{wRT|7hTXV|5DV8{2lQpKiLr2|_d`RXL+g{$sIvi5EN8(ZAuHnY82uV-pC
+zL;Y1zn08m+9L?sm4{>I{CNB?Fr?hXmv6p$GD3xD(>E-{sW|53AW|0&BG{8G$o8$j%
+znEXEndwHN$d;RkU_x~60TAh$PshwiD_rG$`FR140IN1|Sy_a;tKK&0M*DByg{6w4{
+z!lqrzknwBsDr@G-tiAe}p5dBo_U;kwBY84!?z>C(X?iey^ZZC-KN-Y6>@MA>MC@a!
+zvdYXht&qLYGt40No{3B`VNKY_P*}qIU^1DldL*B7nkG%15}7^F85$L`XfN;FGv0|!
+z<r9VE9Y3bHa9YreE~Xt0C;XU<OM=mA8kbTny@Ae<W(>@e;d~hDiM((I!`WKfKF=8D
+z-VN=u*K_ZN_Q~tX>{P|}(PzwL5c|*#6&eSQ137RY2M*-GfgCuH0|#>8Kn@(pfxl=D
+z{QUj@{!^;@7uWp1*!XwnM)!PtW#NMZ|E}FA_c=eO{mS~Loc5;(wM>zpg>o8iQgB{S
+ztt10-@tGyX6XL{=_?P7;{Y%2n?66@p&BKpmBP1I6#v3#7pEYm1wBm%5ofCWccZs-5
+zQ%3$P>BZ!+c=D(73vV^Y%dYVLcy-?EUz+l-Tj?`A{xPoZLp>35(j`@R?J=I1@%q=V
+z{QHSA8iaq$|AJ=?1OLK)uLJSJtMIEP&U^iPxKvcR%Ee<y2>nZRTyn`3<@k@FcteJ`
+z@cP$VD(A}&5%$ABR)dV^45NJ-kN1vW{)XZWV$1Km8|8OUU<7Xw|2keZ48J<(#wC|r
+zf7w?qzvSv`@lQPY|I6`TJ*W6rt^CurA^7JlgQ@=UjpvhRy#9rhe>&5`Dt>XqFKg0l
+z;uq74x7*_#(>Gs-x8UOqu7&v%O8f}jBvRxcVfa=_Z@kMeu9Z_$qDvtIpR7K^IGq(W
+z!!+s;r%&@7J|;efu?U}ooZn89G}ro$#u?V}QdKc?@H-nH`j_LBFP|eeHl6kPE2^Ad
+zIM0LbvheY`yZ+kC@E&&2Pv_5+SCS}y61Y46iW|R*_p?hzB#M{*zxMFTITE<TD^0H1
+zaN}iH<9&3zqmVFulaHIZ{L8{`PdeqT{y5L@*k(NX!s{=;v|{T2UxOnY3G(fH{v#Ot
+zmjg%7a%6esRIm=yYBC%-?>y0*=*1`#?kD|G?r*%p@t^rU#UJ-;VjSzqc)HxFf0-Z-
+zbUNI6{T~zPVjBIFyq!irk*5jlCtsPP{P(1f|0H3$aQXi-CjNB<!}X+J{o@b3O&OJq
+z|NoBRABT@_7cn-QS&m^}aMxRlg1d%~GMeEu-763JV%A%$HZ;Gr%4{C=g)F)mzy8JM
+z_pdUW<Ci2gzk8vtdF<Te=H0i=Yu>%dymyb!xBbbj%i_Cy^IP8a&1-qbm)!FBU2B`i
+zeP&DCXSAS)_yzo^kNDE!{?H}y=2gb_Y!knaKs<c@7R0?SEh)ImNIK(}Z~2US{T4p|
+zz2&}a)Bm%mZ&`e$Y22&*_yGQ;!;kPMr?*`Q+d|kLZKnRLdF#^n8L;(+F^n))Kz|9S
+z{f+q2ow!APOJ<GNiHO(jNyfdVFY~TJUk1`=)W3&#F}>T8mf_q|=N!}iF3vsw_PXZh
+z-#!6(d05NqzD!5A6ls1IX+~SD+h_!LMIJY|KjS+rKI~fpH)7xM>vhc?TMvyhjOVs4
+ziNEe!=GZd4arjM}7q`-8g=6yu{9dZ^`hvraXCo*>)9~L#_wU2~+lWhaYt_U#9lz+-
+zFUF7X`4R8sj{m#h_C2_5N128f26we@y#R4YZ`ro>!uU(RrSUg>hqoB!8NX!wUOYFi
+zx#QQlNLvQtung&4f^b$i{tP<tk~pIeue%)S+=e(m=1bb%;rk-uozX&nhkU-4-y-h6
+zQ+f0J*7W$z7<xZId@v-Zzwn!N&D#Dk*fXqcz6;|+%Kg7B61P#*E5BJ3_s<LN5;sM0
+z#`6WF4|!0B56au9H~pdW-Y`Pv>3s21XT~feIb`{b@n5|1_`2qHgag@e6MgcQ=IE2_
+zn(5Au`sDwnvE4K`JWV$-AM5t}|3kl?^<_*6=MChejyHz6x*C=<(#|}fd-}T&=Ra!(
+zcYSuHv8&*yB;@0Y78BtnWsU!0lNmZM8Km3n6xbsFxA`t`(iHWb@1!$=eAwnIcFsla
+zxPk4tKC<<^__nR*GcNUmPJNOxh}==>=oyCSq@JCKyx4^@-L|zD<t%l8cCTzQx9`5~
+zOtkfUwE0bF`y0^*Y-k?8{<Ub#cgZiukiHL4Pa-#MY|bA4#*P<}&kK;Aqmf5QSK6_+
+zL_0ofF1jmduKeZAzp31Tscm}rPo+EjX8JY1n`aa+{d(|z*7Y|~2i|0zLVRJDe&;7q
+zZ_Ncef0t|&yLCLj6z9*v`E9<UxGwJpe8w(a<}B}mk2J5+QLiO#OVGBS-?QhiEX-W=
+z2V+Xz5vW&e^FK`rowo{knT-0yw9pOvW%m8+@nK*7NyGTrO2hc$PT$`=eEV+SA4mK~
+z@t&;)^4UaRYTS#ysbvAe*>kxO--C4RJk3~_3VAU;2jO!tJ|;eC_#A={`!63pxMcXn
+zJbdQkvk)JDveAzE*FK0o?sfFB2)h0czTmpyl;FCzjtZ{Zd2Ddq@&8%9<Jy-ickDbY
+zxbBaK<NWc#bt5MR*NvVMTzA|f<vVJ>Ub<t!mrHhxt_-eA3l!`);q;;%rFO}Vod*Zk
+zy}l&4Zq=639c6I0a}nfK!F5-_ulewE=V=JXG+X@ULHI1jC$;68PZ)=yOj|DfMA0+d
+z#zLH%hfgv-K70&(4nd!i*0TGy4b8}pds)Aje`DwVJ;oWy8`d}Ep_6}a`@#?FzT3<V
+zzK~STS+-HnHpf2Yb=2Q6Uy_sV`_1_Cw4HE|_NCkZ%0jdGb+~7^W9R<Vsn-nm-3woa
+zjBsyDYTk|b1d*3xsOxXTpOXw@CoT|pMK{r>ymG4X$A3vOiv330p|2$QcP@1FGVZzK
+z$9PDal(xt6j(nqZhiPtn`e4+3(}<&-jdaG9zu6wdeY%sDBL;%^u^ml0XKZ+S_iY;y
+z-wkM|uR3Yi<4f8eza$y*Je;48bfh%ze$~8}W57EIQ|fJSm-K1DU9Ye5H4pwA<Nf8*
+zM=r<;HZR=$jUAXy)Ln!2jO*sKYj0`ks5K9|D}?rZ%<h66Z>=)c9lN_|$C}+GJN|H#
+zfjVWZJ7#z3j$?P1?-)7WSoen$DOc_|dN=CCDUeZ@7s754Y~DJ<SU0@MShoPSsj&IO
+zXJCI0_2oPKuzBlTW8KL4#yW&??;kES)~z+OopF`r%5omWd6wG=$ct0Zj~u<b^!}60
+z!*-sNVic#p6TFY@QM;vkmRkg43V#nL89UFKZxr8@BxB=BW7$rB+k+1u3cqN3vb_QQ
+zaANyz*k6f0i1zO!E!+8;)P?$$#!~q6z{BM@kNLqLUq>BfIU$eJ_q>VroMK>Hn)KI6
+z1Ja@6$NHu7UzhLh+dhNxI}7D_Ci>s}W|Zqh+h9G_ANDhi_zdF{MB&alU&A;)j``aA
+zYQ8pxG57<tmtBa1%-JUEHs@^qS>|e|U{16Lb0XcwXcP6F&^()+GsnX`%{|A9VElLN
+zG5499{nR;P1an5QKWtX}$+_I}iMians4H>g!==7-oRhvkg1H&<W?Rw<ryjD*B6qBF
+z##7F%bbI2QjB~g*FvjY+*wQTH+2`I|*Zdsjn1h%jy^i?{?K^yj#xXY3Wnez;o(DdM
+zadg<_E{ZY#o6h`9=8k&Yjo$RN=IHO&HNSwe3}Zeo^UEbIFJNx<2FG!Xh2fQQ9%IIN
+zpTy@)b^fLEPi$_#KChYaecYF{opZclr{7$LxF3c&SqA208JLr;X!*UGFT|0qr3*Nw
+z9OlFyX_)B$+;b|nHTEli={eO`0>-ZLBRQv9GVPoyig^;}4H4uw=RVA@DCSstF7dj`
+zs|e;-+kEFu%%@m(Y{w+$PA^?^Q*$TE2v`5<9k|Bngdfj*iG9dKK4DIl7Jmozhw~(k
+z--+f)+y1MPeQtVmYf*dw`bD&lYyS2iqu4|r$9|vZ{h!*<e1z%W`MXr3m~)_IxR!bm
+z;WM3&LI0+T8{@~e%zDe;yhdUFFLQO7=kYw_#5q6f{B-ep7xQe+;W#(cb=Smv?l8pX
+z<m;Kv$@7=`mhC(XbD9q1C+)^jcQ~${wx@K5+g-VD`87wPuh!{u>zF^ZqaQE+{-)-a
+zFxO=|4b1IXH{V1$8SiMy4b4(k7#p3kn=DT!o;cS%pL6aalpn4EATu0YmJ#HYzSh!h
+zhyHS&C)X~z?OzCY()O6gv(1ZjpR6f;!_+zA5ax;ui*EEBF&8I-_+aoiitx$CrxG9c
+z9EfGLa)EI}#4w6i&NFV<U>e0Ijs@?-^+h_{T^4@B1od;t#GD3lx_f@J`?gn{YZ(LA
+z9i<o(ci;AtDCb*nSBDtv(tR2IVLRqEkFopFZtYIThvCtE$cR7h_W$**p`VrhH0!P;
+z<Rj;%^rtk**!3Rf&f1o9UDib>JxE80=|Q@F0y^&B4c@2ygghnwQ~h8ZCi|h+5hrK7
+za;^bUPn<HJ%nPP7o8#FRf-iI%;gc62{{Bw{?_0RRxVON}{<|#Ge;3`Dsli=zx8Upz
+z>#jEZrzF9@ps^Bpgmnrjq8ZmjxK5$RLe94`;a7Oo^lKJ+y~8_(avWL$yYd8U9ojAr
+zWA92IuN`Du8B=7tXa36gl(^410&N-XKD_{K)Nii1<_TPzv0buGoy|1_Tyq_Xa~umf
+zt~p}}%5)fQQHM3A`Z|tHZ=wHTUl+!8n6#?}PC1lr#hMA{-WX?eA61U_sn-sqthkn;
+zuR%GFmwtAxZ7vOk!|Saz_~hY(W5#mY<1@E2t`XmI^zTwvxwf(|`L6BQzb-?0btfn<
+zy*9NLYfq12t~A}c)Zx(Gj<VeLH_~4q{?6JB%QBL3YBOcsJ}2f3TRG=QpPX-)9HS-Q
+zq#u*~%)(fOWykbquujo^DD(Yr<Zrq&-ZSsV)LiGkRlSkx1YGlCjj3~MM#5|RZT~6t
+zC+b|=FTI9yYh8bu)wTR<s6Ws6E^@}GHxRe?d<UTp9OU%lthYMs$@(PgY0;Ew)yJc5
+zBaWrWm&rOLeKPxariJTMd)Fb(w`Clb>q4<%ne9)VdjG1IFdsKDFHge!+=uHctcUur
+z7K&?m)+e@IT`$;Au0Xvgn5F%%MLTA_aF;#DZ?45fQcjz`>^IF+_FR*bw6p9nu5f6n
+zXSuRIaV{!(xpbmUbL~W5KTBRt`XSdYdftHiL)+PXTRzgi3Hh)Q`LO}(L;s-1l9}7x
+ztH$;?t~thW&A~M!8B3)7G4E!|FWrvTp{<;OwlZBiN>^<x1J~`BI&Dej40;YUb6Z+I
+z(UvZl(w4Y>EB>5hgzkG3`H4CHeUE?zOLV?1M|;A08|vzE)G=Pee}FOe(G=s4Pho7k
+z)LAo@c?IWOFQ83xPQpB3+3>?P4Bf^fXxlt@K@!_E=UHOw{ykY{67FQ%pN#JXh$rW#
+zT%%_B)BYv&dD_44?)k=!otWe3@gCzr+QM62>Nwh5c-J`EYZm5z<!I+CP4kbhW6ptl
+z6X{`RyvV%fHOxc(7%!seBL?Be>%K(@W08}d=+=_>PT14Vz%{d1&v<M@zrZx^oeuh?
+z`?1Ni+>EpY5&oSRoBSA?818GBb9((|xD20RZy4WGe7I?>y*<Ua;hR{e(Q)S-l<Sb_
+zOVe*g`eZEPnq(&C!;8=^Bpu?njIZuEvrRD`dcBhNwEe(k+i)T0$eArKA)Y$F-F`fq
+zl(F+jtRZwDu6yUfWV)xuVd*~4Lpj%E2e2BSCVWcp!7-<H`o3BlVBLWY=83Xy;moyW
+zSsOSF{TjzKcYipS`H=1pGq9HF?i1ODd0%DbHhlPG8+O``)FZhbKD^}!^oMditmlZ#
+zXIUrL*Zk-+@58z+vMhApsi3yS^~n_5@I>3^{7C#e9PNHN`i@J`?tg}Me}s?g2GVyj
+z582*Lj2Emg$jgcAG^Xj<|C5LM!f{L5I`u=aagX=g-ZZzri8A>u?zK_RIiB0b{X4u@
+zpYBd8`*(>~&=<UKwlQ&k=iZ3x%=Hap%DYGxuMIete8n{{V;VD2_ZqQY!g|McKim3{
+zx9&0T#dh|!Aw3`eX3`RrovgpQuBV+gpvy#GA9C(EjB*>pJXz*mGT+EX|B60!uX`iB
+zXB0%=>fckaqhssxyajuTb}ZaevLkx`^1SB9m*@G>$1d1YzN6)t<$2LpDOW;Yy`y;t
+z<Tsb+Wy9`h*tER8JnseHio9cBdn|0COIGAHuUY|pIrNn~T25S%_td5pc`c8d+oR{N
+z$lG8ZeHYh$a#0@Xw+HWEvZwU^+mq6F-i5V>chC+_evfOYlXU~v0?z#_tU=U$A8jAo
+zrs`h9wUC}GaLjubb@mYWcOq=*N4m2HGFLyup6!SCf}T}lf;$ci;rA<VE|0&mb$Og|
+z=Y2HJ8|9ir@|kvWU2^!8{O33zYXzM1;{F%LXVk?hWf+BjTzk;hGVQ;@eZN1=zFvcJ
+zow%>{1p0A3_tp2Y*tc`8<-YET-tjdxuf_Zfaglt~W8Gw)&DI|E8iVfJnV>;@)?)&Z
+z24>)+uZ8w(HMhU_rK$Js-$t2@;r@_}`@vmON4Ylu>t=Tt&9cre_mBL^LG(-Vn{zbI
+zOQ}Z?^$&j8Xnx08bCCOm?|o?#?&FxwS~c_s+Pv$2=z%t``;7x_esX^M@wE8^ZExyc
+zgad8wK->FsjkgEd-hs9^{e1brxOZUO!#+Z_&-K7{=H%Sxz;)){YXn>$;J$$WE!UZ|
+zj(b@9=Ng_~4|LXJe5cNFuh8<Tdxfw*G}C@?-Ns~}QHIAhBfgaDND1!OY1?&JzvO)e
+z9bc|PWx&oq%l#bh+7s7?X1YJ9!_#|`hUXh!Sb2zXL-r!0Sgy;Bd;gBtkyn@JeRhHD
+ztL@&nVckm0xMBFA@QT=xxOYDf`y_BZ&iv&*B>t9reX@?swdvDvJ^qaE;&{2sw$x+W
+zzLo1JvgTFp+$*GgI`)@b96uKJQI~DRV>_(Y6QdJ$%Ud4vmBc^6brP3d$Yb{m)@XE`
+z!xOgH(}Fb}Jj0gm-!z$4<0x-hWv$fjti>{}vMwZZy~Ac*E8nxp*uH0x@q#}!bRPC(
+zs(q2N*E<<|y^)X3T9F>lFU8*MjaUa>h5g???En59_H%p&GV>dL-OKeD{7&cn<##VM
+zagPl9NN>Y^!dKyEvXpBS<;p#OiOP0^;lsM4>|y2oG2U0yb&%^X`W}&vn_i3Ln)QdZ
+z<$awGYa7@PTkaA1u;DV#-$Z_J&kN@j&iyx>+kM+6<oib4o5Y@CthIAr2g^7+ZU4(y
+zm+y@GEVuf$KZbkf+pta@*_6?t%TCsxbLZCIVc(&9Z>02<C(q5+yRQ;^(`etkYG0ne
+znYuSq!e2Yb@Rv-9dlYR9d%PtMm+wm)rurjs`1Bm(aLCj+Y<0!q@wvreJ^KGgUH!kl
+zhv2N6eu#Tta~T6pMVObk!sNZ;!%%j^vy4@GFHm$-Nr!))^fLvkCdZG3u60PxD~9oW
+z57*eYq3_juM)^FE-iP7sTPD}YC-=9`b)Eb>XyY%ud2_Sh*{h2Cz6kSq?7ifkKK9ek
+z;aL{$dmU5bN8+%TP2AgiX2&hf;aS$`zlpii6;9aLFE}Oa^ITz{|FMOAtrPZ5p0JBu
+zVRP^8$CK_$5%zl+xA`2G?2#$KzD)L!xYvL@AI5w@@4ZQ!-;>Xk%{9L-Lb&D5exN1S
+z%wIftPvmN~ABcNe`8<={?~!>%6wfEgJ(^`L9K*EzS=e8|dn$Ndf8svNYZyDd_gT)u
+zIq`FHf0^tJ;+`_OFFQP6>bu_CtM9v<4!?EWj$EMq;k_soH}qGN&z3D~Y2IXPKLYzv
+z4|T=!Z`FQQT*FNGH6Q2pO6RJne(_l*mWAKBPs=?XhqZ8Ttxo@Z*M2-5$G^p1ioN_r
+ze>NG%%$DY@5=W<;opkfwm);}7u~O2uFZY<-_nW-G^&Dz=>Hd$edJe^VSYw#zjDyu+
+z2;{jiemCM1#fLI=wfHnBxe)Bcr(4M-U<E#ONB1R|ELGrBjSr4l?@w*px&mYPim79`
+z56=Y7(*I9)-QkR1TThwQR`=z4-Z0lOz&mzuFX~*bbG+jm=bUpHtMopN=%$M&#+-8O
+z0ZcTn)z=l>%eeRcV(f|G9>gUrygqPW14I|y((GTV-Qd{+=s7l_yy}N1Y*)Z`c?+)(
+z^#0fAUAVV8VVBX8;^^f5aCE{h6Lz>}K)ai*{_A?3z5JuA*Q|5;IskP!VP4Ul_rpDg
+z`k6S+XUh-Y|9I*7>_-)+=qEn9IL$c6#`P83rhEUOw68g~O{^cd=hqR;)#p;@opz1A
+z8&ho$o6~y2bnSC4b31SQ<o=lDm=k8tvJRp95wuBXJ)s=qX`;57?aYrjAG{c2GsXwB
+zk8Ia<cb4nAn|Yp%>uo-3LATsn{M?1uGvUlNmbJ8}+}f=Dh`O%(-RlMPgX;twm+1D>
+z@I&lZIB{rq<_Hpx+5KQ&kdD1wMtV2m@a*~3&OR!4TDo2Fh`H7u7>{lz9`Zag#)$M`
+zCmoq8FQl&+cG(Yl?1vru$$n)n&x+{2W%!f(-(K{XInlQ)HEwted(Q^3ZeU^$8=l9w
+zk2-Jv(fz6Y51ai5pDWpoYnDW7xCk59<npY^zPKGfct!k!Ys}_dmnSuQ_piK%XBc<k
+z8OAvF!ErCkyVz6A=YF}rj_Yj<lk0U6_3UTZXY8DhxzojXp6)hZ=FY#x-W<AFX&jDc
+zH^2LE0nX#P>yKml`C{K0zvTGIy?av6Wk0p7H*j8=j__D_W&O#!2WHph8=F742G7i=
+zoE7K#gPt?(OZq=9w@7y#KKEiuglE_%pFzYqjyZo;o!(a{{WzYnF^y+gj)N;h=VcjZ
+z{F2Z0=skF)f8w)9lh14G{6U=es$YMt=Tsg$WBZKb+pEU*?|(P1`F+&yU24BP_r9`D
+z>UkmajAPzA+{cw*KC1W3CwlheEwtM_?3rH)PPd=_FzEPv?@y94u_h_|WVu(>TX(o$
+zo%`>Y@9sUXY=eB}pgaX*&_Tux1=xeF$DoCtHHjCm;&U#O&jRQ$;HOh3F=cn&nQ{#3
+zY1Fx{k+p4(Rqp3q;KzN}!_8d%Tec5w`HbdV{bgQAc_nO9&ih>GZt&ohaam)=yHcFI
+z<U3LhbJoD$M7|GUp8PxXHNVGoJKeL-=k>gdnS5S~W3gQ8dh;s^|1b{x0?#b`g0{bO
+z@=o5B5W~B7+Aq9ypZ7cdZkqj$SK?g6Sx=h04j**(k}hdsIQm&j`91yfUM&CF=H<FC
+z#aL~W;!}$cF3|pJ_C3zruDQ>79>$Jjtn2$Qe#x`<Y$v+zvt1vKc3nQp{7&CLKEjtV
+zvBx}eN8a9T^UcY&xh;v$w#$A~{p@dnYMZ$Kk+5yP@Mc~!I<2~T^aZ*<j$n-&+3vJW
+zy`~Vs+&Ho|$+;KBd8$qm*G?0)=P#g5l{;%7?)E(SY%$yOJ#h1J#v%7(_CMoe_8;Zo
+z%y-D&BCqxPhxohzue;gyxb`=suA^B-)X{we+@{Lx#b14`nL1~$G;}P(CiEA&oOK@@
+zeKl#KPkB@M*?!^8jxGJ%*ZtFp`V;T|X~vcQ&s1OZ+8*8QYkvX*V+@~SR95ycD7T4y
+z)cEPtbzP5jUf_KC{>)>h`s?hg-pfDlv(|6mS?f#jtTpFJ`aMAK$9dlR-MyZ-MmxlF
+z&73Rv@mzD*@Sm*R%6kE(J}0fyvU`&}t1azV(oQ=*r{?%|2-j5AdZIH1e@K58%<Ru}
+z`7_sZIxX(`C9jK^4$dvbAE$oT&t-lI_cN~<zG`mg`&9T&g~+SC_cxhuvOY2U`k$;Z
+z==*;jd*8m^1Dv#v;C&%8JzuH!A;{Wgx?1CK+o#9pvR<M0F}Tytv1TsMew~c_U%$Z^
+zqsI*=&t_O})$`kvFi(92cGJya^)sQS?{JKL^4wM8Ijmaue|7Rc+VEkM<Ko|O&g$BS
+z5q7PSgj{PRd|v4J>u+h6wFExX#kEdZOVDX!oz#7a&MQ}+;<Pi~AChOfWKV}YbH;sB
+zy!Kq)g7~CAhqaPK>l+_cJYI0_(Jh}67p|Mg{7&|H;H8x51+M%Eehm5X9NrD$&65IW
+z?}y~cV|X9RnamTs_v2&F6X)GIGvo>GaefkUNwjvvvUve@MAqJ>uOl<<_duOdb!3Su
+z7r8#;denQU8+z{j7~W$uc`u0beyNAl&o<ZA>r~nE_J6JD!>&{L@m@X5P4{bW4zC%I
+zU+H@`abM2VXZN`mhxzQ@htjRqOry95$GI!VNqybw?E~Jy`{H!_#hfACE#v)ZQ)E1E
+zHAUt<L$`aDDdR$Ntx5L>gBXh^pHpRBk^aE_96r)EvDc-0(MOkOGhWa5lDBWW>!jw$
+zrlot2b-ua22P|!`u}1p+ecf*|IaWn4ckTDUeUrJqceeR)aVzWllm5xrJ;%K#c)yp|
+zKDr9?R=o!Xb#N~6ncPP>8IKS1E?wTUW_aE>ar~Lfn0yk(WR9)6j<aq?Uv=g0oBNQz
+zK1sVbF5I^`mwOueo})W1>__Kv??&H$iEg@J;(lep>cnHa^vitz?FAEiHh3SB*HX-b
+zZ0DMl{i*C@!E?NE9WNQzojj9w5c+T**_Y&8yYL<budm+VTm<vxZP;_Eb?&*gZu`+q
+z?rW_KXDx`~KXX2=)s&x<IiHPS+;i`(=yuk6xYm-<@@w=p?Z2v2_h}?u&usmI<DT*8
+zz`JAR-MrGb$Qqlh6H(8x_qjQy@p+6nocqYSl<Ym&w{*&y*L3OJhIB;HhL&O<hOB?_
+z9WWPQf1A1eMCV;$vJS?5XBm)nn)H4bNf-A-h`Z;o4`Z(Bimo!YA4WevrnG&9Y1?W{
+zq>cU2T7<`IS|^Q{8&lHQf%ntt^f9mYDl@!8ZLVp19`D8bxYD&2=?Xjd7?-N{q{;~W
+z!PGKR?`v?{mKx_!_t@VoLq5zkEzvhW-g26*tqnVEP3EC&FB8|sD3`g;v$_x7|8ZN-
+zv-GvET*u4v-mD{``TCjd$$Kf<t@}E8uJ>W!r)yor>GRS*>T}b@Z?4zzh>LTePj(LU
+ztIn}W|6_*pZ@m2YORu;|{U>3iHH`c#E~g9pFNUluFTJ|rin6S)U0qe4b;XT0UVr1M
+zS%z`ubu;Uy_+NhMP30<pv+!R!D#V+Ku=wMG>u$Qavhw;Hs}K^MXI**ob(hP(f^ghT
+z^>6ZDA3N!}<(A6N7|yRtDit@JaN>q4`F;LXQ+bQy@-y;3Aq;IX_3WQf!fNGdfi;Vb
+z^?{s&jZYlBEX7Dp@|p6r>4;CK8F%Jid4!SXPfa%ZuKM0dD%ZF^$HTn!Jj1LGm}#ji
+zo%K4*sqxZXIkX$P!#hNbM7rtpti<jEeb^NHJlwExj?&amq<znPB<X%%eewhI9-RMB
+zN`wD93m#th-9?R<{~N3Eafh3$E26d&U-oiWt<D>TF8^_k?{#qd7t`*FT<#bTb>8cK
+zREJ;UanE?e#+%O851Gy)9WPJ(z2y+p?(!Eq+33wL><N{lU~!htW}fi6%U904`Q>#N
+zOyJHNFWR{euRhDI#BW{KW~z_LE*oz?^96s-v3Z(uan&bpJluZL-s^8rcX+zKC8($S
+z>TlL;@s-r<)$V4CZ#}vL=lF=@yJn90z;b6CbsrLRB7-kaJ>K8)E}3IGz3q3RUnq9f
+zlLzNLq}%(xmg8LGall{c&-XPSlIK{?v-#_-2LrnOx$A+e-=EDtZ$D9r4YSVi5x2X_
+zIkvmm;_Gdfbt<|>Qod>ka^lbBk2n8vKcaH>rn5??vwTW2_Zt6LKb)iB!@2XOr%(Im
+z9*@}1G^BjT|L}tEE_7x$dym8W8xL>#6Zz*YXUgv5FRk~cW4(^tEc2N333oG>;{kV)
+zQQmw`lrQ@_UVH0LvMv|J+4O7Sjy4nXh&lET-hO_z@!lIw#~j1)#-FnL@aF4!t@PAi
+zuRjy{uiSh62`2Ez>uw@E&%Dd)u0Z?uA>GXu|NYf_<2#WqPd<9xP2{7eKi}7S?5!Wc
+zIbP3s)19pIS<xHcDy{d7Q?vQwt?v`p#~;zWrelut8gF_g#+_N}Rig6rrhB41RX+Wt
+z_1^R*N{24i{b4XAMb|pV8~jg*J^Zmt@g0w>&+luPW6B?Gr~UDspR26h%|;#GT&UWw
+zo)zz9GMir2qlETcm%{&=^ETIsa8&zBsONZtON)g181xuo66(3WgeI3z&-J94;#V|F
+z_(AA#=uu82*SD(23HAAKJ5&0Cv*=e#SPAn#YZkrAn1uFR2bw8=X0zvd&;HnRT?g;w
+zP{BxI+~2c>&-I)A37_jUGua0bnVHIOw)k<qV<!LAd@Eu7*<b(v|8CFqj+ydzw)Asd
+z170X+?wTjRXS3%z#{PuQ^@{zmubUFheUJbC+H)OZf8wv^aS8KZ&5J&?zE83wVf)%&
+z|7Wx3ybDLd{`W7fpKbh7<A1{Z|9@RSTmP`X`rs_>Yqs%&*XJ{}&)MqV9P3BI`W<wt
+z|IG8JnZ{RMZ|{#@)z5_S+h6@0^Cw~ZnXP{C`gx}Eo6WvT^8Z7J&-pv5(1*6?_3%vb
+zXa6}<`OYzaKeqDyxavnL(v5p)Ic$GqE_k=k$SFg4TggUF5qJUa0u~CbwIFPAvK6xw
+z(-r-S?I@{#fIkh2rBZT*n}t>uNPn=q!8i%wB!lZfJjd>w$DTlk*aPiwK(P(XhPyg2
+zGuf!971}l65jbBBehTNSgmxvk8ghluE(7sAYfdTnHqy0OXcdEp!+t$@A<pLstu-Lx
+znv)I|<9wRX@`Gz}ejFuE|Ki~PKtCq5dO$prmeT=t`;3Zqq1_0M;5^^O!}C?@Jm+87
+zYn@Z3m<b|?oMc5_Us4_fe-HZ@xDYbm`$M}X@HaSL2mT}c<@<p^8}D0j!l@D3A<zj2
+zq<=+<YrvzCPuW5{4IG4januK%9~0WWO72l|2Z%DtsaNMYkAr)=3jA-JA47fkH1f%h
+z_UGgmD%q<zKLWlC_Jcg%1O5bZ58NTiIc%?pLQWW@yJ}@$0n%L&$b2sZ5w}7-&q-Pl
+zBo5bcIdve@R|7J=e8}?^*sTX+U@rLg;2IErIjQ)fejJ-Ys2>HX$N#K%^fAR;5J@Ur
+zBeb$WypJa*4P?Hj3T;2g@=X@nVML1UsS0F!suWszAltzj#Z1LC#bm`U1j6>z2-1B>
+zu|zSbm<1xp!c3u+3hsoRU+Ks257*Jua)v>k9|Gxb7(^Bp)(EXi@DDg&0pc&G0AFmU
+zL6Ge<4`e)&LAJ*s2yBmoLc1Sid+Y((9=nBh7s&P)6WSdh%ds6~du$V0QIPGi4lKd>
+zTA>vJ*&gv;7pFaz39Zc_>roNt)C-X9u|R0$gNSO*S`g1&=5)dl>qjfdcGCc|{OW~v
+z9mw*l71}i*>q!Opd$=!A`eLOo1lb<*LHe7kn5h_t(rHIRdjMp+=}_m})%iwn5a+Aa
+z`6_k36l8k}s`KmB`86Pd$jJuZL3&pUtx?pQQ;{Eoin(cq@ki*_2(4@|5Bk+0)0ri-
+zGr`v&X9#USNV{aARSBL9yEc&ZAfnh0G9LT~zl=w(&<Y+R?()I=5dXGArQS3thC$Z9
+z60jF60{;ojSLerJ2d@g_LTd>8XXppOe*rr|=4*%0ZUX-m=WEpYkUC!h;^nnDBk;E#
+zG?q#{#?pnuiaj9X69E~Y29WWoRp-}(@TxFRXk~(o&)5>>56E^h0R9Z;dqCE!ZlT=;
+zGQVR&yAx!+Y6V$u>OiKaR%ll!xm?M`Ak(*2ozGS0GeM>=h;-dg;sp<=>N#r_GeD+m
+z9D1f}RHc6iWPJO<?Ks~JGQM3xI|eeookF_<WPGEb)4zg@Z%AlYfQ&~O!o%2{6I(9v
+zXjiON3@KKCj8}n@*DL0#^FtXDUMI-(v?<mrh84>}#w!a%5f^3(tu&<{#Y+ZhKLj$p
+zJxY!#wt+o}M-*gwn}l{Fh$fZO0Mh>&km(MBPX2=QFB@ceXMoJVbfKLF(!W%p?FZ>k
+z9Qi|k`a$MjpU`esa+{JHL6&#w3cS1qOvglx;rbOv@S;e{gNnW2&*82UWVjtdyA5PI
+zT0w?i2QvIEimO3Xp`1*R{>2d<(=`IJUJQUtSHIBi1L=RS(Cz{0Zzo89>p`ZgPH1ld
+zSuZxL^Cjwh0myzMAAA?(78F{=NFUD^fjnO*w6=f`z@I24^NeSsVhChC$^%ga3)c#*
+z)!=fZBOPRX(}Xs*%^JwsLch=&#S5MP4fg$DAJ`7k|0sAASPL#jdcs1x27C|pA)&Pe
+zOoP5!Xjg&Ej{=Z(`9eDg(r&%b$^&V)R%qvfwA;cL1j1dl(5eJ~iFlQOxzHDZ^tVuG
+z7l8CPUufllEQfTE<&Y+{<H)}i$d7)|sdqv<1~ML<Lc3j<Q<Nq1sUS%I)`FNy<Ya-L
+zfcs3LodK?doG!F0!3PoF##NG!b&6FW%V`aWrdgORv@*a2h?gH^IVB5i13Url#y{!M
+z8Uk5PJs`^|3Oe-wWI2VvrHIECp<NBeVP7S*D#62`uMpbhAoF`YNV`0ty%wZhuFzTo
+z(k@$QuLfyXc?8bGU4_sp16fXmAj>Hqq`yI-y&j~$c|vOq=z}{y$nr=Q+9Sxng~*Q{
+zkmtLFc00&;v<dB~FlPk$^bo?$KqfFhQWZy!l>Cl@Xj+9$LaQG972MZ=%<quU-U5Ca
+z?y7}WDaiaT0GZ#bLHeHoGQY<^g?b13xX>O0cfo#CXpNB24-4%fkondD(ym=-w^0wf
+zR-qLop>Gn}5s-ExtI?j}Zdhmyg3Rx3kog@0>2Igd?f~g;yU>b)%<meI`5F@1<zPS4
+zsm|xC^SL17u|{aG7Uq;A@eOcae~jcuSg`_R{ay{C2^D4utu*l8aozx#-{VI+wBz83
+za5pBj20-R_7s&jMfXwfDkojE={t5O~Lc0=tANCbOs~p4xzoJZNmx2pmw-%&buFzfs
+z(k@$Qtp;hACA2fa1+Xj6#ylME%7oTtkolbtGQZb@^fymvuLbFEuFzTyGQSOw`8|$A
+zfc6mhA55pn6)|<b6=Xc3LOUYN8A85&2kz63ll(|l9L|yaj)3So3mb)2E%<A=-vTnf
+ztA%zIxEAgzg;oj3{0@T5?@W;SodzQ4oUt{y-a~vwh4u*e0qlo`))1Hi{h-hu0GV%X
+zAnjU(b`+#tlhBHQv}+XF4Iu4?jzzx;cY{K!A7p;VK<0M`NPpXfb{j~4TZL8xWPWb}
+zncvkyyA;G4N={InU$4$*gN(;&p`9trDMkK14ELMS`F;}pP!PNb;j9;0dEmv6*9xs{
+z@Jo<a3$1=cb{YFG@H8+2?ty=GN-hKAkV}-j2E@Axb261Yay-Tz$b%s5JHYGUf4k7C
+z1)09E(5?b8e&rOa^F`|XdJz3(PNq7aq0T3RXxBM|NGJUn5Zc`!>R(QiIv-KzYeD2w
+zPC3%|80>;*w9J>)AoC?lXk~)Tmkgnm3Nl~(LTd<}E9+S=h@|H9fE*vXg?1On@gXL(
+zIzjgL9YVWJm=gg52)_<w`>Pe&VUX>wMregVwx=yZyGoc-2GYJ5WPe#Cv<pG@mjyyA
+zpM*XrwDW{H*&yvRK-R}}p`8Y@KBfvSKgjx(EVRdwf6T`bkoE&0=P~_4yAR|%rdMe7
+zfSi|f3+<RNrwyciJ$OCb*9olx<nwotzmZd=d}=_JPe^EO0WXGJEwm~?mQT6RN(EC<
+zE`95yU)iFVt2mq|=j#;<K@7cx1wtziT!4732HEdq3GGbqWVp)^TIt{txa&Iw>m)ee
+zE3{%D$B9;u_EDkT1j3{+BD5O8akwi1F%>B+7Fzk>uW&vWr2QJ9oekozaJA6N0^fnV
+z0YoYb=lg|LH^_do9i)Am&~62h1%*+e)dczw|56Y`V&P_?RS0svod?o>t<cT|PlCHO
+zLMt1@+HX!ACou&t91~jIAlqY?&~5|SuItqKT6Mk}<UF=SoiA4B*Mm-bSLZX-`8Ya#
+z&Zqi7`rj+GJ3;mX4eEToI$s5HK2W627pn7lAp3`Obv{j<A49$4c-9Nj{~n>;0kXc=
+ztMhg0{1%Y?aoTByu??)Yq`qzjFG7Bl2(4o9V#q~8D<5Qi4GOLJdg*5eK=!XOko{^C
+z$o{kjWItK~R>H1aXsrhs&pe^M8e~2vtMi6BKZ5u%KYKvB?-ttaAoHzWov%~pw}8x_
+z5_P^<oezS{hZ@BDQP`!OF6kYE%=C^5tr3vv9Tr*x;Flox3$0Et9sYEHyWvke_%7H6
+z;vPayD|ist0Nwz*dZCqp@ao{MNrf8*8E%cx3V{rFi_oeB8E%EpDgqCMzl9*)Z<$j7
+zj)D1L63z#~Mc^9nM%ZNwtyb_6xa->>>Fod+ZoANG0~v0s(29Tzw^3*nfgJzR6nlaq
+zhZXY`{oqZoOBPxKXGnSV3+*nD<=dprN7VURkmXyU&X=q6#URT!SDjy@&S!uu-!Y_%
+z^<h+K4}dJ+LB#WWuq)aq>0Jvly}3eb4aoFn3$09$>CF&Y<FH>3f2tvK{#6BXe5e%K
+z72tbtUoN!DK#mWkLc0m1T?FK~+9<Rez&Pycg%)0_>Wr(kLc3&>jLSig<8m7K3epjW
+zJ_e3}e-Ad{yyHK}akEiqH-Nk7ztE~9p|2I%y&&y+K#telLc0rmA9gXJ)d_OE?hxAJ
+zAnoEH$JsHVJqmsRyAh!^3?lz4hJ<!jzN8})Wd3Cc?R1d&l_s=PLFT7lXsrjC{ydQR
+zw^nH9f}Dq}5!%@x^K-S(DgkL%3_9}(p<M_v9}0waJ_);^(5eDyR|zs-Dui}9$b2Xh
+z+NB`#X|vF(18G+aGGD?%y9Q)FgoO4Mkoi<Cv^qhqd-sFOU_YX0oGEg;Vz%OX#UjNr
+z#cIVG5M4}8Sg{to6ZIrgAoGZN#Y&LZh1uX~%r~Kx4E`6+k9|hQ%Tb{{0-_5p92Q#L
+z;Qz<^C;Ezr&~5-1BK$fKO(&-o{7>X#SZLRPgOEc)dkZ+u{194rfZnmI0GW^FLc0uP
+zzLg5C%^>r&L}(WYbAlktZN1RW16fXMg;p-ea$F;{R||8}LDrKrp`8k{UigJpG6}sQ
+zwBu(va?TLQ`B@jp`WX}2ognLDhtO&VSzp_Pc2t;C3!VyhVWCwC`ruy~_#5PJ3CMNM
+zVxe6GavoDCwDUo_&j#85trps;O7<&x81;bqA)(y^q8xGx&X)DGJdpmZ0T+WAAlK8<
+zg?1Xq^|Vx>Jz6N~9#ZTE4~AU~WWA~e(KQ!V39WLa-wghg;et#@zR(VW=fM4Xp_L0V
+z9$6rgkdqD~$~k`U|G<6}j%hz4w1+^}y8)2(t{-Im=@Z($AnQ+$(CP+Rf4YQrr!c1t
+zL=((u0zV5jf`5WtgV3r27vX#u+>P@!LaQ2Ny{i)1l_2X~h0rPoo&G~;Zx-ehfebGn
+zWO(aA)5Ln5(8>iD;e0lT8_<QTg;oa0`kF4Z(?HhORH5Z3p-&dt<M14E&M3(6hCqfl
+zfG@n|p|D?Q^@59Vz8g%!`7WW=4yNLKJ;-`qC$wup*7LB?ssUNgLqfY+m{S2V+)@yK
+zIVJd-2mgzORw2l6^TA}C4+^bp5JP$4YN3@1vYyftwvRE?N4Aeqp*;e!UJMKEL6Gh{
+zLDv5cq1^<s{+E1C>Ps=meyT`l7lP1N6bS8nko{CpXw`u1x1%7UlG6mTK1768Bk0r{
+zp*0Ae0{5w($NCzW4>G+$a1ZR(3$0ppKCI5ysPo+*!|4K94`M>A6J&kq5LyEu-SvYk
+zzdoVW3$mPhgw`lXcOxM4dst`<fh?Cnp_O^Aq%#A=yYMQ~g?1{q3HEs)#)X`GFoOKt
+zQY`bVQgAcUwOMGDfEPn97Fq@1mmud0t)cS`V-)tiAhIf_2V_0#7TR4P>sd@_b%LyC
+z9YVWJm{SXKep(9BzXFi{<%4XWL7}}KWc$n$T5CbJ&s?FMEzC&<>0jS@;$J67|2jan
+zzjmSB2D1IN3auy!eUs2`6y{We^sf+P{MLf>FBfEgwMJ-XgY2(X3#}}W{Z*#WP8a5k
+zenI?;f%LBxq<>LxG2Ax^?Fh(uRin^q06Fif7uvPLoN|!y3xZW}zg}o%gKTe^AlqAp
+z&`t;0-qM7&A7pzQDU$X!EVR3o+@<6;knOKdov&5rt3kGlDsUm{VWrS27JWsL&|VMH
+zT^_gq?$!#ebkSF&3GH#zOS+4Lez+SGT74k<gI=NC3DR8$m;!h0LaSc%6?H;;3rKg>
+z;C#5N5?W!@<3^+>4t^5(HvqE!_Y18)koCV;Xmx?C|1qJ}1oAqAn{oaQ{;c_;_>%_G
+zpH!jc2kB3;(2B!7{TUNly&(JPF7S`=rvqg9v<vN4a3S<fAkz^6nSYH!s}5xPYlT(_
+zWWH??T9qKvT_LneL6*~Ip_LEbjQ9kFRyN4`uom(CHsUj6OS-y2rmIV6#XzR3Q)sn;
+zOjoPWss@>^%^>F&1t71x^TC60J`d!)A`9$7dNYM~28by`VY<*t1sB8pFaqaz)DNPG
+z=k$T>2YZE94|p)-ZlM(g{|Ek8gS^hK;(6GWgABI_WVnSwy8vXk`9f<w$Z#`3hMNj9
+zTtCSEJXvTlQx1YWj>Lo3AjohdAlDTdL55ogGTdsA;Z_OlN|51J2(2=Z;RZp5n+r1B
+zH6X`_Y@xLpTnsr&XeEOTw+n^Bb&MFuaN9wK+Xyn;2BBRKGTb_$6$Tk@ImmEJK!#fk
+z?uNS}p;ZW`BHRL@wFYFkqZdgz4}e@h=?58p56JM_L5ANZv|B-j9~D{=km1*W48ICw
+z_?6%ygjXT7%0cWcEG!dRg&@Pv1iuRZGKAJhiR#aUb|1+0(@Vm>M`*Q)zM@rVH}E{%
+z)q`v&bwaB`^cCeoy8xuSe9)Qy2(8tkugDVGsUY3?LAKjup*47+#BV@o$3VL41X<1<
+zLaR~q6%9hW8l<}_knOxuXcdXRqEKk(fpoVPWPQyQTB)M1@C)r>v~#)}0@;rY3auE(
+z{<c$SM?t!40$Cp-LMtTtiY-FB9HhH4ko``n&`SQY^eg!w=V9d_%eM@qf2BfeGsyZ?
+zBDA)EbXN^B9aTcB5@frp5L$I0-PMB3zp&7%0ohJMLaPa+y9mf~YZO`yAp4Jcq16G>
+zT|3D7(k8T8LDs*h&>8}no<Z;p)b9bI-3M~MWg^<El8vt;PmCkMCE!uuO7Jb8@%5v?
+z9pFizALow;Ux#dgL*O}}iSxLYa?YcA8}H*h;^xR#ff>+Ws$}%#jz8CfcrW4Cw}Q0)
+zx{~h&X@8fJ9|dXu9VPz&JOuKSN`6Vn&w`9s2KY7HnkK7JRGGp6+3YhGuT^^T7U=VY
+z0rDQ`F>E^a<gL(`2m@pk`YNR-Z-c&C7$EP4zE$bTEzq|K10?c#ai7wYNONkxFhC|j
+zKd$uTH=w5x7$7n3E#^LErjNWG`dndvOoo25(vu<RON9Y)KJ<JJmG<N}q38ct1q0*)
+z=(*pTdh&0ej|l@L#`(nqN>8HfQU`?r5_M=X_jA*ptbyJy43MeN^Epr_{@}N8DpwdF
+z4}!i}>B+x^zC;)x(f=;yesbEAcR<g5=3szCf4(>hhM_0#guYc6Ab*JR=~8;~@1XA%
+z2FUxM=YDtElc<BK%yck7c0ivAQcu=GpCt^C_0Sh9J^5|uON0UP1?a1kp1d3SYGHuH
+zzQ)C^N>APceVZ^qz6d?`@Hyd=b<p<;17t1q7+W1ZiMEuAHcJM`PUu%FJ$WDW*xO77
+zNbJ8`yjkhV`=Kut21xV`iyOdtq@R2M`bJ@Zd>r=eN>4rreTOhWJ^=lQ(vuHCKPn86
+z%iw?JJn^4wfS%7^fB~`z_Uo0NM4ylv6b8r#p|4VU@?q$!g#q&W(AO(H`CaH6gaPs)
+z=zEl&Y=pj77$Bd3enjcXN1z`S2FM2JSEG?Jf5`7apDhfKPePxs^d$PW)B<6E{0{V6
+zl%9-09}))0r=f3DdU6}|5n+IQ82Ub?Cm(~J&mVvR@;T_ol%9MX`nWJaJ_h~j6cvB4
+z3HoedfP5DEe5EJ94?Ukt00SiMOE2D{^yCxJhlBz08R#38o_rGeh%i9nKH=g%koiYO
+zq3;(4$ad(*l%8ycJ}wN9k3yg6SM>*Mfu7GVfC2JH(63i|@+s(p!T?zZeVNje=)+UX
+zg#i+6aB+>&lNgIq!@>ZG`(TSZm7e?|^f6(8{4w+cN>Ba>`axlU{2uhl=!BVm5@SZH
+zUl<@ih4#VcIjARp3_YLo00ZQa(DOME>dB{}FA)aFqoA)<dh!|Q`5XxtAhV%wS9-D?
+z`VL`$JR14|kp7bxb5jR}0rD8=lNYM^gU><l7Y4{<q38a6+LO;i&wc%1fLsH8zS5H&
+z&=&{;WDfLYN>9E3eYr3|9tVAm(vvSj9~K74<DqX-dJ=Po)Tl5(=0e}2^kgUWy}|%_
+z0`y}_PreL2pL+lU<fozM^AJoQ`S;Lg2?OMb(DV5T>d9B2FAxUEwb1kV3+l-j^p(N@
+zc@p$|euH}QC(!e`4lqET3_YLwpq~6G^f6(8JO%n8r6*s7epnbF^Po?~AWeI+3;Hx+
+zfLsSXpEvmj=*ichFBAsIr%-?SybAT?KSIyvSik^z7xXnsPj*8e76!-`=$n+D{3qz6
+z!T^c;PKyVWp8RL%2ZaH0J>!o_1j8qP27Q_^Kw8k}D?Ql*J)ipl17r~TGNmW~1^RMf
+zfZPCmElB^#e}%qI7$7%7->UTF&!KM<2FOj&_bENu3w^&ZK;}a~uJq(~=sD>D1LT>|
+zuLc=D`3vZ?g#q#`=nIve+yQ-&FhG6=`U<5d`=GBB2FL>FYn7h-H|Xnx0rG6<Ta}*t
+zCG>5=0Qp(y`;?yi74-eW0C^7deD13s@hATs`gCD{d>-Y?=ftQd{{#A5VStQ4U#9fr
+zuc0p&2FM>kU!(No0Q7t=4GfT2Pg~ro^yGg+-zE%@FG1g<^yGg*-zyA|SVvntuJq(@
+zpy$IoV1UG&Z84uOV*JTL=(B_Y66;lqi<O>y9r_YsfGkA*Y*Bjh4d_F{0QouSo0Oh>
+z6Z)tyKz<(jE~O`jpzjt2$aA3|QhM^Y&<_g(WD)eqhe-U%-$Cye2FNc!zZzuv$lpVs
+zEew$7L7%Vm<S_IF!T@<b^ahUOl8wcFFc(Cy#u_jKJQmCXbHHry1TYso9?S!e0crO?
+z2%og!KkeU!Onw<M{TYKyUIIA_d<QaF3Yq@C3z@tWGS2b(K9jr*awWJ2GI=@VYS1u^
+zOtK7e7{v8^CV2(q1`yZjndFs_qafB5GRdnTw}Du<$Rx`lcYs(I$t16a90RfLl1Y9A
+zayN)|olNo?$h{!0?=#5?$bfSln+5WEH3;&$v=rp^X9zTr&k-;QjDbFI5KLzNLpdMJ
+z0vCWma3NR<E&@X!0$CgZ(FHAzfhe@agCMH>VtUH!s4S4zOF^)M;e+)IALMmT1myKh
+z4CHmoAjs<zMuyiRSs<@Bg5VPPTMF{}Aq4U|Ap$PL`54G~{~*ZuJrlusd=|+0dJyEi
+zycFd8I|Oo`9RWF?j)9yv4}zQ@8}noyoCR{e8w5G8Ed@D$4S}4eMnKL-V<6|9gCOUZ
+z%skE`vp~)lgCOUHr6A{jA&~RD2*~+d4Ez-H4?L3jmm>49EHE2#5Ih<z1&;wk;IUu?
+zTm#0y9B>dk4mA8SkI4daAqT+|z*3O&j}Ukw7y;LUF_80yL6GwU1BK3cKo*z>20@PN
+zr69-e5Xf;l0&+Z#fgE=SL5{BmDvL#XFi3lF1MR_$U<lj<M!<Y92A&BHf@gsSD%oei
+zEU*9!f@g!J;Ag=Qcn%l=IUdA7)P==^Ap3U%m6QE=7RdfO2(n);1=;_GK=!i{un_*l
+zz|Vn$Ap1uHm74uv7FYxZ!7qTNAp5Tn$bQP7RO_qr`IBmVVSGoET9f=qV`kj+C-s=U
+z_^vbS@jaFtPxdFZ&+C{6_bGKLI5R&!-=8!xe{_CI(!l&de0R+6oS&3bH@_ag$L7W7
+z;k<v)pOVzGuy<ifQupGX#VJXxX>DonA*~MIHECgd_buyR2H%#(m%{(09rzwgkEi>S
+zI@4q6DM?M~QT(nytl=<N9ae|$!R15C{Yl-+d+;4w-nBd>scm^XzH67)El)}s${5Z-
+zSQ$O|t~oq>cuG=ZW+XEuX*4hvNJ^^73TGh>S#4SVq)1j1z8kU{ai;f(z9UkS;;Y72
+z`I9<Ub>cg;ss`WPNA(<qP>$-tckNMi_#QrT<Vb%~+mY=@BE8w2+5V)iW4n(<Y>$oM
+zJ9KOfzWZ|ebKoYY9pClGH5>=q<LdC;bbR!9#3whBi(Eaa{v>}=|Js4IDM_)lU2F0C
+zqye1iJ*f}h9jA1jf_%&C%|onC9X}Oiacb|WDM?+YcH?*5srC5oTi3r1;jW9}yK8;-
+z`jn*3^|AHH!}T5b4qLTWN>a$GvHVH#_2baCpWbmgY)`L0JtZl8dM$o81|vblFxU`G
+zNgCNWx)CYe*tHSq+SrNTH5<eD?%vR|0cqLLj_;2A&V1x{etSOZNq#H7$MZvHqO9}d
+z_&t(83T^bP*0W%HR`{%xr13LD_#Qrc<ZQ(A?AY0e!`U799Xh)P-(3aW1^%Sgf;N1&
+zpVM&;%H^E4bC65tMDZOzXB=ln&l$t-;d4gtyXkY$&%yR{HJ?MC6pk0BBn=e}7a>+f
+zokfUMQ9FK*pBut=?A)$%5yNv^@!fV_`+11fd9CN6#LsKO_t<%HoEbT96u*bg8^-TQ
+zaZ@pD&kq$NE$7G2Pe~fQaOgtB>cWl-5vvQ^@H_s+@h>73UyR|q>5EZ(w_enC5n^>w
+z^djWsMG<_DUNnX?!xxR<_uxfC_}%!W$d_Py@%Y6^%f(|Cqg*bjy#%HF<-RYY?tQrt
+z-vjobjkwuOHuC3^j!RIEm&Go_@5?&y-E>(L-*uPQUyd4b`M~9<tC#oTclYHz_^vN&
+zC_~LJt1CmEmxb}&Th@m&-DN%a9V_d?ckLB*SD-Ci5xxRxEDPbg`-&c%iCxi!-yK(U
+z;&<fArYlpD8m?@_clgTMD^WVvbYBD8YwGab_m%#yAhus=#CPx2eODvgs~hm$Q{G#S
+z8dYA8@1CoAufp%E>aRi`UK76tZNFl$0(n@`QGq<HXv25^wFB3pM6PYW7A10RE57@#
+z>%R^;d0pFeNa=M^eD_}8cRkAP`qt|atLvNa-CfyJiTtT-szeMc8}S{wx#ninfvWK;
+z<aX6a6;e^%S&h0;U4!rLul0NlG5K0OzWct~|5doD9;rs?w+`G2|8MQXckI?KeAnOB
+za2v|ywlRDU-!_8p{@Vud9o^Ep1v&Qh@Yhj?w}kLLvSoA&^8faM+Yyu7oA5pSjgfC4
+z=HF<;_vqKh;HD;IhC?RGZL8U_6>QyVwvmln%?R06W470T(HgUrY^X6CYtXZf)|g|I
+zhil9c%7ZoL5ZU-GGx9B*um6_W@GZ!--!kjS#yiZ&9Xx-B*>DHX-(l8~-FKKhJRiHm
+z?4sOphuKMv-C@Rge&h~wl=9FW<}le1HXFlWUD&J-Lmv*CwUpb#W(V0CHrsf<DQre5
+z_lC_rvO8?{@O&(6c2OP)o1^4V*c|5hfv`D9Iee#CdnXvW)2z7@=i^~>oag&$&Hh@j
+zr`GHxn`+G{8Ll;J$)UT<;k)2I{B5)L+mK`5HoLwJx#QbrC*`(po9$%X-DdsWba%H|
+zdpG3J-DVBhdAAwk`S!cb4$7@}n{DLq-R20-58iDKQSQIn9H87(XGZHFkKSXB-2-{}
+z9&_X#$dP-@CNg}FSxbiQF>9!g-))Z5zWzS5;XbhTKC_M-z26+W9~{2l93eaIH#_gA
+z|Mg~+BWT?NX8i+@!w;CX4?qq*VAfFXt2g`W!C1Z7MR)ZNnhg&^u6@v~dk}KXgJzg=
+z{{!X#-FH1;cGG_BK{L+tBM+LRbT{;%IZV0ZL9>%=deDsWeBVQ6|3i>_9x{6$g533x
+z*-g3OA+wRJdB_ZtV-04!f%*osy8&`%gBhbd@{l=7yWWS*zK6l?hs~acp^rUmc9D_q
+znoZvY8@_8clAVoatP!kv#0)<I#vU=d$c{(MPO|S2v!CpF#Ox)9A2CPB!AH!YN8o?`
+z_soXxfenwDjgNtKkD2x4@HTT~8`!nY>?UisnRVM>HySa=B9MC{W?uwyd&KOZTo*Cx
+zDUUsB#vi5rQM2z+>K`>bDAzq|)>9t)o*Dlh*!h?lV>nHZo6*N1H$HAg9*122xY<Cq
+zHkoZrIN#J{Mw=ivHklE!{rhIe_i?`U`)1qsAvb;BjFPb@%&sSJzT*kA^9jgpPnhjw
+z_mgJNlQ<uH((HN?a>tWqC*^^tIT!`|qGmtY6*arb{$_Ka8SHH~`^Z?c+2yds>}r8L
+z&|(gfBQ54AIo@K1o&sy1GV933r_9Jx2&eriv%@*xYSy*ld`+tvCdZyK<J1rT*c|yW
+z<end!y+4NB`eU<=a@~*3ddkCX=13dlSex0^207AZHc_r=GsBbzeq;{*2y(}d%+4P{
+zZupVeNO|;!=GYG*_x#Z8{UPMGADZoy!#^}@DG&a@9Qpy|&L5buA3%=$z-*#C-fD&@
+z54M^^jAz5sX5-U1-}a2z{tV>kGiEC}^0YbnG&uCMIZS=Svu5M7kn5f`>&f1Bv#%ZO
+zZZ~_{p&xtBj6Vl?<T-Pcj6P?!l9A`krstsV=`edcAa`|`-DFLN879Y{H$xrJH@;{_
+zUW8o#qS-+9zF_vf0CvA%_K;mKncXjeoiCX&vh^jijU4PWhdROjPIG`9>onu!NT)eU
+zhF>;oUj{=jn>A$P%VvbEf7xsx+g>)?$>_^w>&uA8z{}>~%eYqU&B7!etiW{}kNzwy
+z(wHG*i<13Eh}??nG9ITYnfE_<+@RzkCAUMSe|@+P;?b$~O8&|xMPG-DWF9vvIiloS
+zAv1igGx7Mol8rQx|3%3`CGS=;*MWFsuM+#1k_(m0m$mSyRx;ORcr-y~d<PB{xmC%z
+zOGVc49bYbTyRu)ODYCZjUn%mivL9CRsB#}yvi83R=XsQ@R^cnTRLKQLiN0LPB}&%u
+z={iRAI{*5VT&dg#aS_bp79|%c`EQimdaCH}QgTem^-Atl@*_$fRPqx_9#!&>l+1@2
+zc<?!UmS4$6k@;Ld<r*bF&5L{Fcbk&ikS<5RN!&-WMQ&4a-O(ZsC^>|5(!D=l+&``4
+z)k^-Yl7mW4J67EDc@Z9`DVfiK@VF8(<5REXhn2op$-XsWKcwXAlpI&`zbiTQOz|&2
+zN8D#A`93ADRr2dfE>LnV%7y9KtmNC3T&ZN;K6|kUz~f(`XM6{h{7dD2RLNgEUi>S^
+zVgZl&x#B+Sb0Tx0koLJsUIv-r2bKIqrQfXNtxDgZ<ew|KRmmwQi2aC?`5ZX?%l^EC
+zcbSqamCWaJspr0F9(?YXGWSRGaGocI%ze;2_`EXXJEr7+hD`Ul=ZgMHEaFfe#UdvU
+z9sf)$a`Jdy>A4Sy$Dvs4p?mH(;&H8#xvz*vx01Pkh{v&56ry|X6XNl0E)pR=ol5=#
+z^+`}%;;4=PL)nMDMM{2K$=OPNPszDT{y@n^O5UU7N+tWS7)AfWN={L7M9GVk98>ba
+zl#@e7zmm^T@*7INSjm4-@-0e!SIJK*`A<szt&-=LO8RoJC`SL&m3*a=GnM>9B_E^Y
+zca@x{<g>7tM*Fjre2bEcmE5Z2%ar^ZC08nW1s36G{|zM<E4fz5k5ir(F&<X(E07n@
+z!&;b<yOq36$=j9ugp&V5$xkWyO(nM}c|^(2D%t7(;s1+DcKUC~uPE8+uOW9S`5oG0
+zEbUeD9wiTXWG=e%(E2Qo9Q4T59y#KXyFGH;BWGVWHM~-f9QMdjkKF5#;~qKd@~Qp@
+zm8|ol)T6KR$aNmM+anKq<g7AJcpkahBR6>DUXMKLk+ZK5|8@L}l&s6E%p-?9a)(DA
+z_Q?J#J@NO*r5?G#BX@Y@QIDK<)l~lrJaV~5j(FslM;`UaY2_aOJ#x86j(FslM;`Xb
+z{;Q|@pX-r}JaX70M?G?{M~-{stglQBuf!vVJaW_{_j=?}kDPYRRR425a*;=_^vDe!
+zIp&dvJ#t#b)bR2=a;ZlSd*n8c+^=Na9*k?J`k(HRb3JmAN3Qh9QIFj3k<+f58eXnP
+zF7e3K9y#KXyFK!#N6xr@YIu1bxx^z^d*q0cb$)ew^aCC_?vZmVr-onTk*hs&gGcW6
+z$ip5v>xQZR7kK1Kk6h=G+dOiwM;`UaX*WuEDY&i(q(qE7C7-6`ppvgwa)FW`RdSJ%
+zf2HISB`?5r3H>Wo^2tgrSMn7~u2k}qloy1Ikdl9{<gk**lw7A|A8z*1eS?w@Q*uPf
+zrz$zB<ZG4OrsPMJ+@a)OC^@F&-Ae9OayD)%GQ3_TpReS8CEu^)K_&mQl82SN>~ygo
+zRq`e!$CZ4mlKBz|9<M3cujJiIPE+#PXNZ3pN)9VIOUZoy1ml~n<Uc7nSIJpH(dQ|7
+zqmqM4u26D;k{?iVk&<^PxkSmwZ4m!Tm3*g?%auH&<Vq!fW}~>TR&q1sPaD`1_SoCb
+zh-Tt<8NbwV)h1_ugBFcWkNg_sD-Cms{c$e)8}jj<9GA?WtMN%wK2rX?M^AgL4=H;s
+zC$e|zX`iM151c9CYgyZ;D?Md~@7B{EmqpHzqwKXz_l$quJke98y<1Ovy}rcf-<f_b
+z)BSYmck5}d*Q5HBy_U5-_x1B27`|Iid%b>@e3pc-Wx8kh)%ftx_HI4x^?KLI%3jOb
+zKIT|Y+Pn3%*Xv`~Dtj$!`%(VDK`{PqJ?-^+8sB5U{L?bsPnUmgy%YWd`i}J(9lnya
+zeXFPZhFp5u>-D-TKO^C5S=+no8{_ZR(_XLdU8n4|oXFm-r@dYe{Hn6ovbHah<W1zC
+zTTgr4fVL@nEo=Lr$KI`{eNZLvpOn3pwLQ9N=b-#~mwU>z*XxtJl)aXzXZhvh!-F#I
+z-Fn)`RQP;f2+Lo~bWi&rK0GMX-mRy-UjHmm_FC5V^n-`Cck5}d*GsFEy_U6omSa6>
+zuk{hQ*E%}kI+k1B>5&(nJyp;5W4PTHd*rZ3=KBWR?)hE<x6Jn$xaBW;<gFh0X^%YS
+zku%Sk>fZ*B%=b*V!z=U1rZMyQatGX(!Hqs1fIQv!l7EP};Cnq-KeSB$S+>c_1Inx)
+zZavGF`wn@OD0?kydp-xngP^@zPkX(7{;;ywGTk$LZ~x%d)1L2R=kb`b*Rr<v#^0@{
+z{iw2!DSItz`(TpzPnq#|>uImo`w#z|<e!$cy*K`DJ?;6vbsnpfy_U7TH~wxt?emp=
+zp0d}nw$I`Z90cR<*3+KvS?6)5vez=*GylEeyY;j$SN0Dodo62w>{)aU$_(GFr@g*E
+zGVk+}e_Gb|-u!dxY0vkX^EgP^YgyZS<L}nfK26zYDtj$!dp=LcgEHgq*3(|!&)KT%
+zwXE%fG{&Lrwf=dy&vG>K^^QlT`!as1!#jV>K6h&SJ`wVC?R!h6c<>wO*}k<*ucs?t
+zx1Q+>Df=O1uVrmt;wfLZp7#3w)`>+DzLvGUw|w1t+Uxsarzv|aC$e|zX|L~}ZBq7H
+z*7n}{n_Ex&$}Gvhr<A>xwY|4~x%ITKQuaSq_FC5V-u!dxX|M11nO~6nn~+ucrAhQA
+z>X%zj`+-&BV1csNvJT&C@7B|PMA;vr?6s`zz3F%BY0vwZJeDhaEo*yk`rUfk>-(A4
+zD0?kydvE;RdfMyzpEoIcEhn;f>uFzpl*IowWv^vz?@hm3Px}gGzg5|5S=)Ql@7B{^
+z->>~QWv^vz?@hm3PkViT_dk`rmJ`{#^|T*4M$-RVWv^vz?@hm3Py1nI|KG}9%i7+X
+zez%_X`hN5o=Slt7vbOi8->s*;zJFby?6sW8-mRy7>2Z?&FDQF0YkP0{-Fn)WDf^3+
+zy_P5JJ^iO!PkX*Enny_4Yk9(6)D!LBt*3p3vcF5&Ygya#IddMw=Uwh8)1L1`=Fz3>
+zwM_kLe7xy*>uF!8?EgjCYgyZurqK7v@ZEaa>-`2v=S%r(S=)QpAKZG{>-`Cfl)aX<
+zy|@0j^|aUf8Pb)#mJ`{#^|aUfA3mY%wVcS_t*5=-FL9)@*K#6zx1RQTf5q|2UdxH>
+z-Fn*d{lYx>-Yw1_w5;vD<?q(hK3&;wQubQb_WZwfJSczO<(@L_`MzHs*C~4~Q$Jn(
+zbL(jzR`%7(Ud!6P&hdRRe7BzVeD5!hN0q&nwY@j}ZawWYmHiKuy_U7TH+;9A_I&>@
+zk6$Z$Eo*yk_-;Mz+m!upmA#g=eXghfaqDS6xIw~CE0*%tvbOhz@7B|v>!v(bD0?ky
+z`zldSl)qa~d%Yis@10}))3UZ-<FR+^X|MMW@%>h`*K#6zx1RQTztQPm6niae`#w+j
+zZoL!!CULO-LKVJ}wY@j~H7>mqzLM9JsPJ8S)_<?P-v31ZX|MM`WnLuqT22(cTTgqv
+zUn=!tvDdP;SC<D9<>%JZUhl6uUD<0nk-b|_d%Yj)24%11MD}hy?e+dGzW<8lujNGc
+zZawYwey@L2_F7J4@7B{^?+^PQWv^vz?_K|M>uIm|lO6dbiNBV$eY&Uqx%ITy`_JxC
+z_F7J4@7B{^?^k<Y*=sqGy<1Ovy}#{>%@ThtC$e|zX|MOg@jY)WKP@M+ck5}d_s<1v
+zvDb1Ud$*qUdcWPZ%3jNf?A?0WZ^nHG9(+%pQ~#8l$X>grp7we_-=Z&zy_OT%YyHJ=
+ze<arC8%r5Fp0!o-wo*rQ_OVg_gpzMo`lpoq4JEfJ`3@!P{Y!k`R+ce&{L~}A<B_v2
+znd<%=kIeLx@k<@v^^UK?eVJB*--JBfdPj}Q-<(p(FD>i*@{U(-J@Y%P>`ztpT25r|
+z*3-UL*}tspwVcS_t*3pRvi~P#uVrl?^cl`U`SULKlxeT`dw$_kNxzn<=Xl|r@4EH>
+zx4o;6k>t4QgNdE+kp!Crl9-qUY{EbGcF))DN(i}cZ@=ztch=i?vyN@io}KBL8}Cfd
+zxVz_W=l(!^MA#yLVhd1E{;-S?vIPi19FYW~NRU_x2q6f6AQ7P$AzLU43J`+$h{StU
+z^`@&{_k8WH&u4i@n%((L)qC~o)z_<6uWOK=;zK{I=n0Rb*VB>y8{n76S546qCVK8~
+z(bJKh;!kfokn$5I`cJd^>*+{O@v6@#dcs7{>#wIHJ;k^FrlKc2j$ThkdWwgAUeOaK
+zdcI!j=}7+=_)+ooilQe>^nAV0(~+LyZQoUw`XfyAe7(@qk)GmnA5rv#iT*($U1Bfm
+z=}1rUyw56n!bH#I*VB=n;(tG{=m`_O>Rvg-J6e9kNKf&?Usv>mF&+Cqr`OYwp5lw|
+zhRFu!Yr;g&^{1yJJ;fup6g}Z_^m;ndQ~dHL6+Pi`^m;ndQ@r!reJMX-qUZY8(~+Ly
+zqpv7>!bH#OPwD>#`4>RH^jc|}IAr*<4Byr=^Y1bIEW=-7_`O$6`g05q8U7-}|HtrV
+z+vN8Y!>Er*>(xI%erUqc>s7#6>lNO^jjv~)knKg7^!+xOoI|_=fAn;0uT4e&2}Mts
+z=pVdYG9Y?A9qI8NWPJUtq9;uBynH<!>3><#e?`#~Ci+;iAIYz$BYh6`W%#<|P}ZL?
+z(ev{4bfkZqqQ6Vg6DE2d-=U`?J>GMSuWdz7nCN-=dOFfCEBZ$jJz=8%^xGwW#5-Dk
+z#7IxiAN+=*CyeR$!kh2!^mL@B=M`R4^n{6?k9R#C>FN1~_jIKG2@^dZ?|M4Y)AJBL
+zMNfDfy`GNr^!&tMD0;%<==F4@r{^v1>q_|vkE7Sqk)EE<cv{gD9!IaIBmL-k4n<Fx
+z=(+wWeIqdEmm3WKKEq#S`0k!be}&=S28{OoXCH@71h3yy`16kon0ra#FDU${jQ$@P
+z#vlJ$kfh@8k1~9T;Q_;+WcXcAn*7=fe}Ul-g=T)#uRj0Y2Ke3Iu`sfqe@S5)?_X4y
+z?Db7xfcfb>`i~W+@%!%z7l966&p-i~|N8`jJ7T_5V)EBLrZAlk|GB~x?*P9QAn57*
+zy{a(96a1mVbbgwHw!`x1JaAWGIv@Kjh3UNLn+ntU$@(3Vp3W0G3X^~Rd4*{{{!4|)
+z|MxA0$se}>^BBrQ{?QGEX+8NFg~`ABqQZ3E@J|ZU`SNQD_ZOr>zpgNyAO5Gpbe{HY
+zh3S0h_IF5m6nXAF3QKMfPoXgFuND=i{oYS1O!N5#g=u}etT4s9;Qf?XfAa5MSD5^*
+zKc_JHKR>E4od^Az!sH)+PGRy_zo;;spZt-+be{7$g=zhNSz(H2`DcYGKIFd@rg)7z
+zzDvqa>*rkxQ#{0v0LC#zuSXevn&Foi#`}wO`rE$S#On<A82&iJUuO7!82-@rnEZc=
+z;innK`;Bz@cD~odFERWzhVOZ&ng1DvUt`#Pmzn<~41bE@Z!r90?>6Z-82(v?pJVv%
+z8U8PZEttr3eN-6!6^37C_|7{`dW+#l8GeD`R~f$ZE|cF!8NU1b&GaV2Pci%g!(U_g
+z$HB1C>;G|vKgaMR?=|zk%JBPtz)XLf;pZ6s6vJO-_?<s!^2;;)7{f;le~jT582&QD
+zx%Zjn-N$f+;X{Uhf#FXu{4&G;!SMUuZ<c?K;h$#s8pFTJ@Lx0hErx&M17>-TG5j>c
+zpJDhb4F4~~AGq7(zs>N^GyDe(zryhCKV<T|kKr|jKf>^f4F3tkf5z~?F#N#}n&sci
+zu*2|>;lE<|Um3ph9+UqT!&QbG41bK_=LLR{mb2X7G5l?Y@A+XYKgsVf++_F{8U9^{
+zza;Re_}t$x{0hV0WcVEmrataxxW@1i!%s2%>kR)6!=GVzA?Mv2+4<FQ*pGV`+p!zg
+zZOcFE*Mi38#q;ZS{%S3{x;_Z%al04TRzE!4?X`p053SAeB|m7zSFK_@X!f=&>+phQ
+z*;d03+t>WYMSloib-EWUw;h$Xg1C^cdhYHpDqR7vT-|Wn&W_u5`$K0NKF8}>at!*7
+zTI_FbJF7z=BqrBPHkqWhe-wwcdYn;*Lgd#&KTcO8s&!&jjRMpY#XpJkcGPYKYmI!V
+zWUtsueb5Tj1=K<XFLnJWs<r%0%i2<^Tmh1EgJ#nYK{J}JJZH;oNo8$rxUI|@=bP=I
+z)@k3!P**?EdM0V10UCk!ch=mE)ot54OoUt?H8QkBZNswKAZ{t>1$7_5695XeS_3{F
+z;>Wnwf{z{i*c-&~vAYS)Z`1^u{UP&>U0`<u{<`grZ1McyRK&Bbdb@ws4=+RCKrul$
+zC30HEU64_|QN9Xx*N3vD!vS)x)2ko4pnRwVb=0gLUAP9LqdBBrQSJ{8I_>)8PGJ?G
+zSETePdxUc#Q>NvXANZl{Zd8`msza#KXdHT(999DV`Ys8V!NMwl=v&yhIxA>tXFanK
+z^UKI^GzJvM^|04<eZOIJxncz0T%4VCVf%c^&bNd9U^J%JsMnUE8^ZVN){u2VY}AcR
+zNsI2LW1k|wGVsfn%BRe+uv|Q4j-bO+<hX>RV#mKebgxYq4<eU4=$f;;)}yle=5jOi
+z)013gP84Fb*B@$9c<!~aS=WKFA<EdC(}((UJ7~vZ<w`Wb*1s(7D=6}wANlcAK}6R5
+zupOH+>m6OLt1v!t9`<VS7y6?34?Rfyhj!0-#sZM@j0qRu$Q;1Wqjfds=}QhE)h;<N
+zJ^kc7W15r@n?`;@&C5^FXXFQ=1o;uQtv(I9@`I>%&O;@Gb&&HW%`P&PO=dYyTb^@X
+zVrk?&V~!SPiM8Gv1h4?22~_aB^RN`UaW90$d$n{hjQyzG5vGu{>Q>#B2Wqc3>(eO9
+zo*;FvxvguhX_=QiS%TZ1C2z0UgdQ|Y-tAhd<kD&{h}*3}ZxEfsy6u8dcfB27y%I#V
+zroU<ppKN#@zTN$c53gP9tY3bD^C+T*s&;X&7PS05AM6?EQT}SWFqN_7?fLx>dVLTJ
+zC0BN`Ij+>9#|WYFaj#T|Mv2X}Y-C7kEhfuw9P8ZjZrF=^^<Kwuwo}bR*=$~a$JyV_
+z7Dq_AGBTZQYjqG_^M%1zS#rVpYX_~0Z6(WI)lw_|y5+1{Wx2qvTUFVnb8)hl!rFCH
+zYj&#Ar^DCTIP&6)ur1I=0aw!Ajn1G6<M7^Su3DhM8`R=K=ogy3P%l9?2NvvHur7>R
+z4$2XB)m)`G8^iiBgp=KMT1hJ-GpTBq+ffy4@CLTMsFjD+au1HYC%ss&ot?)KLfvui
+zhV#V5JukGp*(#?Od3xPoGS}1X1X@{hYk50h-7LQeYbI?`cgu1rw+jbiBc*m*Lw6qx
+zT{%-}Eozc3(|T4u-){L){LqczG?F9iS!uS?=965ib}5-Y#pE?SI-<FgSH&PqsU{D}
+zux=lZZ$g;K7wmxJ@l6Ob_zt^WKMutfr)mrUK7r7btT&EpP|u@9ov;WCcg<OaspJ?_
+zSl*C<S1@11uID$LL3|a~u6A9lUaP%^U*)}YLe}BY#+<5|%nX*grETe3XslUj#pX*Y
+zH7)jb-|UbDa0yfj;1sA7dwoCfN`na2G`m>SDhya#8Pqbmw&MD=j^8-fJF0q)W1D(B
+zf?0jb+A?PKN5+;M0Vh?m^gQtL9lf-pbaBpFX$L(PV4J}_d{GxSH4#6#rzYaD@+e-i
+zTV*VbY-&%hi-}SdE8eZr8Q7GUWYE-1?u{5sbiInQMYt)D$pRfX$0SuPqg*T~12S`3
+zq<ZfNRd0?!rYWbpBXys$Br=8NS}UTjuUeLy6}!}r{6V7!7HFf_1qX|8Qracy55QS?
+z6|F}YDl4NAzF}3-tVP?_^3dOAs4-<1?m=GXBI`g%D%Nq<eWY+pYWD<&0=g?etZi`8
+zgzZ|Vh|WjHnL4l&X~AriR(Q)4(^M+R*jZ1>0$ZkP0la+RS3TNDjZT;-xwTZpoorPt
+zt)l0PUBE=6MigxhYRP7_%ucKCkePatoX@Pv!2;Wj1N6d;+7`Dztmc$elfYV4i+z=s
+zMwwR*sJBeuh)UGWko2re>_F!!^->z|(xdO$_{Z;IIiI!4n04kVW9F$<#!RzSS>zm3
+zWlYPeviLru%3x{CT4l^SbCogk)GA}9*{UpZj;S)HWmQ>x&#Jt<6~Ivi?2TX#2@P(~
+zZJv!`z{^jvp(}M34Ks>F(W}<^al?txOw>2aJ6-LZU@bkySe7YD;FC;3E&RjtDM^yd
+zsU=A?qnc#qdGw?xCMrti8LugoKDOJgKzBMpr`5=%46a+Q^}!5nfJ4_6YlG|V;0ojJ
+z>sCu@r6v!KnQd(;^jqN3iy|cGbbN8dS!q@RzY5#M4QVmC`=W%%wmla%GC^x&5J%Nw
+zE9_kdDcV8`VBo>|UJ!eO0GA*i1jH@>jX1K)c-mAErw~Bz*Sgw1KeCs+S`_&qIu_S!
+z?GB7}&nq_D9lzLV2Y#v9skNf0wBv(IvI3{HF1p9+QVuvxb)8Lj5S8&j6;4;BJ2}c1
+zyu^X$gkfz+u1eXbqkQ?i->eNfvE&29e%SAI#MY%MD?2euMx7$*A&W|DVb}}hCV~!_
+zRH-GYpq0q)*WhFdojp))7tSo<^KjU2crH{A)aiNktA|m1=rwBL^)~b^FS_1t#@>2m
+zZ*|SPRB_IG_sXwUd)+=rebDZ-;~~@;rb_fPf=hV<N$4kDtO*&<Pb>U<JA%UNS10h8
+zsi3V29J)_nQaN}6JLWYXoNHsN_3$pFcKvQ0{pnI&wGQ+|*nJsTGNZ42Y^*)M<JTf^
+zuS>F)A738!{c~WL1})gX?bN#dR)8G}y75ezwt{UxuHl{=d#lcPza0m#ExlYj=#0J&
+z&Enx)zJ_fsg^4=7>kigK|KdFC2DPsS0T}$CA-^H|UaoWD@>apKa8}Ug1i1;a%3A>r
+ztaDa%2s_(-^xZUzLBoS0v+~>4rCQkXT{xqKIbkM>lq-8CGO)yt>h9&e8#HQ`);fL{
+zTnc-!aI8A3-sM&aWNo3WSjQz*M>BGxV4U0-$EtIk<kMafC$D23m7`+m)d-Z-%OEvM
+zzwE(bRHnvL`rEHSpU%qa)J>QEeg{T~>N)KoifiDIfewfh19U4NyEUFSYaKhAFHGj9
+zU%j$lf&Qv{wv+wn$g!|r!KpwM-w%5@YQ2Nrk>Buo{o0cQA5PBNQH)+9@Mb{mDQ^QD
+zjbU#%DKBcwR+=lycGuiwnWqk#gVk-JY?6o6y3uD&bbOv3V($LKYt1X3D6a_h#B$3@
+z_OimZrM`d<GKWoB;KS&fycD|Z73f2eKEQ#d*(La~T*~JP0Rkm39y-G#H^4{}Pr6`Z
+zIKLXkIJm5GL2qJnJGbjNYg2c>=a!a69(}R-9WL!j3&W$~{LqIXK`00;4DsJ_64O$c
+z-=4E>ZCX{7=t2S32I~>4A`&h)?I5V*NV+BKo;dT4Rd;DiW>sFM+~T#rIW2z~PQP!(
+zeh){S@?aHxVlbd)>i6W_$Y}HGE#BJ4t}l8v-b(dFx5m`^CTkg+3LQV?Rl`MIpQaNE
+zIZez!Lj4Zx2Xm5#Z6f1NezqC23dhfMu8GWIUe6R+jdWwB7BxI}jMn(28mAPaAf=(3
+zRTK=0n^hFF(9I}nhPbvln&SlA;8(;_t$PA?_UW?ApDw$Cv^oo5L8dDG#>BMG(a84A
+zj#wY<&uB+kQbu`6>Mxm<+2O6Ts#hz^*_JVjj-49iM3)pc=>*JiaArbQ8|viBJm{W(
+z2k0EY<_jJZNVa3bxd7Y7N&7Kl1)6Z0?)CR82j+S;B{z6F^wn*;GSHwHuZ;P4L1gHu
+z@JiM<xh9{Me3KeJYrVYbLrNbP(&0qAVVsXrK@wA(K6MyqDOZHX@OWcJ7h{I8J5LWh
+zb=FCTJXO}&{quDyLYR1R1e|IK=1e%1HH?oAJe`%hw3>%^0p3M;m*8E7_Y%C9;k^Qm
+z)?xRc2ma0la8P+3IOaDNCLAg7{9b=S9RfhetjWrA?1B?RvV8uFC%dhMq(i6tYZG&4
+z$K7fkFit%bb=%MioY2h|l2wQEf!ZcAPng+Lx;TyiIMZ_hj>88B)k*pA5j35j4BeQZ
+z%XC!?lG$o+kjz%m5y=Val#q(iK3yA=yIYDKxr#%-sZJ^J8HETA4W&OcPwrH74hu&w
+z`PuX2Y0XofJmy*3^wvW-*|Bp?c(U^Wf3{OBICmSxy2E3lU^9(7nM)3>W~Y%SZnNiK
+z?deB(v(wSR-Ru-_x;A@eah^AO_Hk#JDGpf%MCt_O5}J<_rfZzex6g}A@~GD96O^+u
+zPSWRM`CT%#rKV%I#j{MEgVQ9en`gN}M12xD5{mK89!8>E8PzNgPDWOoW@gMfZb!qo
+z&b@hJ^b@9vVX`u*R!vkjBU$z~ii<ElUYPpNJOzs_3-3SE<rQSJ$vZwOTd7PKmh+2{
+z*rPnedY`Loq6oYn&)Iq@@|m<E7rIG(#>kP`N=A-MC602WgyibZ$SG}Qo^f*5NXj`5
+z^?X+JT#byZlRi7mK%bj+(icyab)rsv@BTU!F~{EMQf~1I1WHAV;UIuV+ZV6*!o$T@
+z?|yMHK<|DTE0q31CLgxr#Rm=s?M`D6kAVF}5%bjb8yFuDJrKZ!77hPsQ8#W>b`>3y
+zl_YJP=>DJ=c59u*TG%ZY&3wW->h>A~2zNQ5^lonu*8RxfznH6m@S>2DvcEaXL2-Mj
+zhl}~)gMACdu%sT0P77;1Ieq+q8+=#-18q)pbq1RLXR%Kwy~X4#_DO#d`;Cr$VqT<M
+z$00?#-;7N;C8a}FlaSEV2JdV$omSUdXEW`~d!pV<%Q=Y*OM2FQAE~8s-b;yO#3DrU
+zPQKfNmveeI4WR%c+!6&yT_3{BwNH9wl5rnNio2~PpZaZLSW|QvW?X$@1cunJ*ZozA
+z|6m43k_fdm4;PHngQ+acL)NL;h3g8huX!_#P9ZN0O>y}T?@hSzI(8h4^e~gBIV;%W
+zMC|pwCObsMhv2a7%xI;Pg++<lkl!2wmhq+}*j%T}QLe<3>5bx?G0YiD0uMoUNsw@|
+zlIRFPgxW(%(BRo6LBh#OGQ+vWMNi@uC*DvZ@CZ`0+qmF)AMB{=HYZLn^9@(X1FjKE
+z*KdYcC)u5;U1pCz$1>F&Rhe>&wA3YDLQ-*^6(?GzB=ZVE{C0G^V7h{K!N`!Nm3M4q
+z7M6W88uF9Zab*&XyCY4DZa9m@Pp$`hW1d4ei^Uh$e9aS$o;W^*S281LnLUM}B93mk
+zet+!Pbo3}^RQoIzf85o7Z_L;}cKhOi<<#~~3~@FfvW{mvxE^Iuj6a@bB$JM3GqU1&
+zO4jjgMpmrt3|VKXWmatA$&AhkHZEUuPil3}S=33)&N+)ZiQPFzQ8So;H;3C>F&5vZ
+zup^tcST^lT#)Kw~nNh@|oHYksntu*rB$MW#jI874pp2~J=AcWttA~x|o64Jj^5WT@
+ze)}(<s&0C`wRtmfN}M<5XAI~NPX5pESDZbH;<BH9IC~TYVlmGiMZs$`^#HBxu%?bV
+z;m;Z!q=&PlqPOPaiR%T<?BgD5$ubvj`qVhVq%l3`>A33&8l4coeHIH}kzLH}o@e2o
+zc(;|f5myauw4de-c*GGW$g*byW_eBMzxwPlUzi~oiDL%+Tp}cUPBkgbCrXNZoK~)O
+zYxOskk%{txkvaNN2X4{L_?sHZ?@*)|P*Tb-umAo7r?Rai)gVm&)COH3j@PB)L|~p&
+z*>n9yljd2J=U}JyydbS$nf?*Ed?j9;>BA{m4E0s#?BPO~wQOZ2oT_4y2|(<MZ;6Ks
+zd6-t}2|F3?J;8uT8zKe?&i~UNtTIT@p*;slqE=eSr&&s)(h^e9BGU_<FsML9oE>f@
+t>HaS|s1)HEy7yHIa~9v9T*0sFLadR~M&VqmxM`G}I_tMwe1A^9{vT*&P7weA
+
+literal 0
+HcmV?d00001
+
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
+new file mode 100644
+index 00000000000000..853bd545336d1a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
+@@ -0,0 +1,40 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build go1.24 && darwin
++
++package cryptokit
++
++// See xcrypto/cgo_go124.go for context.
++
++/*
++#cgo noescape MD5
++#cgo nocallback MD5
++#cgo noescape SHA1
++#cgo nocallback SHA1
++#cgo noescape SHA256
++#cgo nocallback SHA256
++#cgo noescape SHA384
++#cgo nocallback SHA384
++#cgo noescape SHA512
++#cgo nocallback SHA512
++
++#cgo noescape hashWrite
++#cgo noescape hashSum
++#cgo nocallback hashNew
++#cgo nocallback hashWrite
++#cgo nocallback hashSum
++#cgo nocallback hashReset
++#cgo nocallback hashSize
++#cgo nocallback hashBlockSize
++#cgo nocallback hashCopy
++#cgo nocallback hashFree
++
++#cgo noescape updateHMAC
++#cgo noescape finalizeHMAC
++#cgo nocallback initMAC
++#cgo nocallback freeHMAC
++#cgo nocallback updateHMAC
++#cgo nocallback finalizeHMAC
++*/
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+new file mode 100644
+index 00000000000000..9f05af66b277d3
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+@@ -0,0 +1,39 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #cgo CFLAGS: -Wno-deprecated-declarations
++// #cgo LDFLAGS: -framework Security -framework CoreFoundation -L /Library/Developer/CommandLineTools/usr/lib/swift/macosx ${SRCDIR}/CryptoKit.o
++import "C"
++import "unsafe"
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func base(b []byte) *C.uchar {
++	return (*C.uchar)(unsafe.Pointer(addr(b)))
++}
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func addr(b []byte) *byte {
++	if len(b) == 0 {
++		return nil
++	}
++	return unsafe.SliceData(b)
++}
++
++var zero byte
++
++// addrNeverEmpty returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++// If b is empty, it returns a pointer to a zero byte
++// so that it can always be dereferenced.
++func addrNeverEmpty(b []byte) *byte {
++	if len(b) == 0 {
++		return &zero
++	}
++	return unsafe.SliceData(b)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
+new file mode 100644
+index 00000000000000..5bcc3d30c509c3
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
+@@ -0,0 +1,63 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++#ifndef CRYPTOKIT_H
++#define CRYPTOKIT_H
++
++#include <stdint.h>
++#include <stddef.h>
++
++// AES GCM encryption and decryption
++int encryptAESGCM(const uint8_t *key, size_t keyLength,
++                  const uint8_t *data, size_t dataLength,
++                  const uint8_t *nonce, size_t nonceLength,
++                  const uint8_t *aad, size_t aadLength,
++                  uint8_t *cipherText, size_t cipherTextLength,
++                  uint8_t *tag);
++int decryptAESGCM(const uint8_t *key, size_t keyLength,
++                  const uint8_t *data, size_t dataLength,
++                  const uint8_t *nonce, size_t nonceLength,
++                  const uint8_t *aad, size_t aadLength,
++                  const uint8_t *tag, size_t tagLength,
++                  uint8_t *out, size_t *outLength);
++
++// Generates an Ed25519 keypair.
++// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key).
++// The public key is 32 bytes.
++void generateKeyEd25519(uint8_t *key);
++int newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed);
++int newPublicKeyEd25519(uint8_t *key, const uint8_t *pub);
++int signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer);
++int verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig);
++
++// HKDF key derivation
++int extractHKDF(int32_t hashFunction,
++                const uint8_t *secret, size_t secretLength,
++                const uint8_t *salt, size_t saltLength,
++                uint8_t *prk, size_t prkLength);
++int expandHKDF(int32_t hashFunction,
++               const uint8_t *prk, size_t prkLength,
++               const uint8_t *info, size_t infoLength,
++               uint8_t *okm, size_t okmLength);
++
++void *initMAC(int32_t hashFunction, const uint8_t *key, int keyLength);
++void freeHMAC(int32_t hashFunction, void *ptr);
++void updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int length);
++void finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer);
++
++void MD5(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++void SHA1(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++void SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++void SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++void SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++
++void *hashNew(int32_t hashAlgorithm);
++void hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int length);
++void hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer);
++void hashReset(int32_t hashAlgorithm, void *ptr);
++int hashSize(int32_t hashAlgorithm);
++int hashBlockSize(int32_t hashAlgorithm);
++void *hashCopy(int32_t hashAlgorithm, void *ptr);
++void hashFree(int32_t hashAlgorithm, void *ptr);
++
++#endif /* CRYPTOKIT_H */
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
+new file mode 100644
+index 00000000000000..2fa15c8fa5529a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
+@@ -0,0 +1,72 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++import (
++	"errors"
++)
++
++// GenerateKeyEd25519 generates an Ed25519 private key using the Swift implementation.
++func GenerateKeyEd25519(key []byte) {
++	C.generateKeyEd25519(base(key))
++}
++
++// NewPrivateKeyEd25519FromSeed generates an Ed25519 private key from a seed.
++func NewPrivateKeyEd25519FromSeed(key, seed []byte) error {
++	result := C.newPrivateKeyEd25519FromSeed(base(key), base(seed))
++	if result != 0 {
++		return errors.New("failed to generate Ed25519 key from seed")
++	}
++	return nil
++}
++
++// NewPublicKeyEd25519 creates a new Ed25519 public key from raw bytes.
++func NewPublicKeyEd25519(key, pub []byte) error {
++	result := C.newPublicKeyEd25519(base(key), base(pub))
++	if result != 0 {
++		return errors.New("failed to create Ed25519 public key")
++	}
++	return nil
++}
++
++// SignEd25519 signs a message using the provided private key.
++func SignEd25519(sig, privateKey, message []byte) error {
++	result := C.signEd25519(base(privateKey), base(message), C.size_t(len(message)), base(sig))
++	if result < 0 {
++		switch result {
++		case -1:
++			return errors.New("invalid inputs to SignEd25519")
++		case -2:
++			return errors.New("failed to reconstruct private key")
++		case -3:
++			return errors.New("failed to sign the message")
++		case -4:
++			return errors.New("signature buffer too small")
++		default:
++			return errors.New("unknown error in SignEd25519")
++		}
++	}
++	return nil
++}
++
++// VerifyEd25519 verifies a signature using the provided public key and message.
++func VerifyEd25519(publicKey, message, sig []byte) error {
++	result := C.verifyEd25519(base(publicKey), base(message), C.size_t(len(message)), base(sig))
++	switch result {
++	case 1:
++		return nil // Valid signature
++	case 0:
++		return errors.New("ed25519: invalid signature")
++	case -1:
++		return errors.New("invalid inputs to VerifyEd25519")
++	case -2:
++		return errors.New("failed to reconstruct public key")
++	default:
++		return errors.New("unknown error in VerifyEd25519")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+new file mode 100644
+index 00000000000000..458e9eb57416b1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+@@ -0,0 +1,36 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++
++// EncryptAESGCM performs AES-GCM encryption using Swift.
++func EncryptAESGCM(key, plaintext, nonce, additionalData, ciphertext, tag []byte) int {
++	err := C.encryptAESGCM(
++		base(key), C.size_t(len(key)),
++		base(plaintext), C.size_t(len(plaintext)),
++		base(nonce), C.size_t(len(nonce)),
++		base(additionalData), C.size_t(len(additionalData)),
++		base(ciphertext), C.size_t(len(ciphertext)),
++		base(tag),
++	)
++	return int(err)
++}
++
++// DecryptAESGCM performs AES-GCM decryption using Swift.
++func DecryptAESGCM(key, ciphertext, nonce, additionalData, tag, plaintext []byte) (int, int) {
++	var decSize C.size_t
++	err := C.decryptAESGCM(
++		base(key), C.size_t(len(key)),
++		base(ciphertext), C.size_t(len(ciphertext)),
++		base(nonce), C.size_t(len(nonce)),
++		base(additionalData), C.size_t(len(additionalData)),
++		base(tag), C.size_t(len(tag)),
++		base(plaintext), &decSize,
++	)
++	return int(decSize), int(err)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
+new file mode 100644
+index 00000000000000..1b485e32cd30d0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
+@@ -0,0 +1,255 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++// #include "cryptokit.h"
++import "C"
++import (
++	"errors"
++	"hash"
++	"runtime"
++	"unsafe"
++)
++
++func MD5(p []byte) (sum [16]byte) {
++	C.MD5((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
++	return
++}
++
++func SHA1(p []byte) (sum [20]byte) {
++	C.SHA1((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
++	return
++}
++
++func SHA256(p []byte) (sum [32]byte) {
++	C.SHA256((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
++	return
++}
++
++func SHA384(p []byte) (sum [48]byte) {
++	C.SHA384((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
++	return
++}
++
++func SHA512(p []byte) (sum [64]byte) {
++	C.SHA512((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
++	return
++}
++
++const (
++	md5    = 1
++	sha1   = 2
++	sha256 = 3
++	sha384 = 4
++	sha512 = 5
++)
++
++var (
++	MD5BlockSize    = int(C.hashBlockSize(md5))
++	MD5Size         = int(C.hashSize(md5))
++	SHA1BlockSize   = int(C.hashBlockSize(sha1))
++	SHA1Size        = int(C.hashSize(sha1))
++	SHA256BlockSize = int(C.hashBlockSize(sha256))
++	SHA256Size      = int(C.hashSize(sha256))
++	SHA384BlockSize = int(C.hashBlockSize(sha384))
++	SHA384Size      = int(C.hashSize(sha384))
++	SHA512BlockSize = int(C.hashBlockSize(sha512))
++	SHA512Size      = int(C.hashSize(sha512))
++)
++
++// cloneHash is an interface that defines a Clone method.
++//
++// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
++// but we need it now.
++type cloneHash interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() hash.Hash
++}
++
++var _ hash.Hash = (*evpHash)(nil)
++var _ cloneHash = (*evpHash)(nil)
++
++type evpHash struct {
++	ptr           unsafe.Pointer
++	hashAlgorithm C.int
++	blockSize     int
++	size          int
++}
++
++func newEVPHash(ptr unsafe.Pointer, hashAlgorithm C.int, blockSize, size int) *evpHash {
++	h := &evpHash{
++		ptr:           ptr,
++		hashAlgorithm: hashAlgorithm,
++		blockSize:     blockSize,
++		size:          size,
++	}
++
++	runtime.SetFinalizer(h, (*evpHash).finalize)
++
++	return h
++}
++
++func (h *evpHash) finalize() {
++	if h.ptr != nil {
++		C.hashFree(h.hashAlgorithm, h.ptr)
++		h.ptr = nil
++	}
++}
++
++func (h *evpHash) Clone() hash.Hash {
++	if h.ptr == nil {
++		return nil
++	}
++
++	newHash := newEVPHash(C.hashCopy(h.hashAlgorithm, h.ptr), h.hashAlgorithm, h.blockSize, h.size)
++
++	runtime.KeepAlive(h)
++
++	return newHash
++}
++
++func (h *evpHash) Write(p []byte) (int, error) {
++	if len(p) == 0 {
++		return 0, nil
++	}
++	C.hashWrite(h.hashAlgorithm, h.ptr, (*C.uint8_t)(&*addrNeverEmpty(p)), C.int(len(p)))
++
++	runtime.KeepAlive(h)
++
++	return len(p), nil
++}
++
++func (h *evpHash) WriteString(s string) (int, error) {
++	if len(s) == 0 {
++		return 0, nil
++	}
++	C.hashWrite(h.hashAlgorithm, h.ptr, (*C.uchar)(unsafe.Pointer(unsafe.StringData(s))), C.int(len(s)))
++
++	runtime.KeepAlive(h)
++
++	return len(s), nil
++}
++
++func (h *evpHash) WriteByte(c byte) error {
++	C.hashWrite(h.hashAlgorithm, h.ptr, base([]byte{c}), 1)
++
++	runtime.KeepAlive(h)
++
++	return nil
++}
++
++func (h *evpHash) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
++	C.hashSum(h.hashAlgorithm, h.ptr, base(hashSlice))
++	runtime.KeepAlive(h)
++
++	b = append(b, hashSlice...)
++	return b
++}
++
++func (h *evpHash) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("cryptokit: hash state is not marshallable")
++}
++
++func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("cryptokit: hash state is not marshallable")
++}
++
++func (h *evpHash) UnmarshalBinary(data []byte) error {
++	return errors.New("cryptokit: hash state is not marshallable")
++}
++
++func (h *evpHash) Reset() {
++	C.hashReset(h.hashAlgorithm, h.ptr)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
-new file mode 100644
-index 0000000000000000000000000000000000000000..cedd5b03bd3078586649300d1baa94c8b12549f1
-GIT binary patch
-literal 100952
-zcmeFa3t&{$wLX3(6CglLq6CeKVN_J8jwHNHl++oMz(gk!Nr3dqWD=5rq=Y2qp+rSv
-z1Da`|jf%b0>TPIkn{d6ow4z4E8pKDev<0zBtJa{XV5nk?7!=I!`_A5b=FCYZiH|<+
-z|IdMwZ`NLW?Z?_{uf6s@^Z4!OkN-x~v<Qo)jRIOVEe`Oj1pJ9cS~L*XPTY^@<Bz17
-zcH%mrffE`yp@9<`IH7?P8aSbW6B;<7ffE`yp@9<`IH7?P8u-7Wfj@lu*Uz!>w_xM1
-zVZX1PfxBZQ{@8HiIvsZ@nPINUDT2{U8C;6yVFK?lOvL5&*7{b~ir0e9%goOU((2XD
-z3&bmy7m1g)%QfvMY*?h$AUNW$*IQmz>#Hs*PoAYGc)g+Jsd9Ll!K>?HQJ$bQEk?bN
-z==B!Y)K-^OEDO+~<#o$;c_n|3sl14O<<;C!wzPJpx3<2@SM6JBZl7ba5LhAQQl<+1
-zC%OB#jaksX%8Htx0?p<9QkJLM@pD<8EWRIjy}nZK((0lWKEX1Vw^^2#6eaj=D34~)
-ziuUd3SK2`B%W&p7gBiP%#A}C4+H;90Ps`ObSw%22UU|KhOTJy~En88v%vV;iw9@Mh
-zEzg!LvMbpH*rDosNI{bDdP|CGi-H_;d6Q*%tul)Z<*~mGv@bp=7I?++SW#6}T<fi?
-zxS_0~#Orlu1ekcyCCe+6^P*Fh*NyU~i;N-7C6R!;V}YjahrOp@sJmxt+BBrua3cxV
-zSllP+uk|TunPHuR6x#So$T@&^+#EWVXV=H~hRW*YTKb%;eYN^4r1N4v8*X#H$`wn>
-zDqs`g%BigO&8e)bfHKP}D`YtX)rWk!zUu4CihVW66~4Uc`l{N>tI7g~9j4xlvYO@2
-z>Lq2h)w1F+`9j*J>b2p8sh?T%WSuOBrfK54D~pTDoprUPzKYtiV%1sXV}4uz{JFm3
-zy6UppdY#X4<apW3X~THI*SJ}aNY{NsIt{3{Y)KhBS$%qC1xl#)RTS4VyQv(RzuKp#
-zQ{N%wn8rlO+d}hY6jj4g$;74lVJHVWMth1&!|_9OJAiyZr(w#Ux8&Qt;@Yz7ed)6P
-zpq}*p<>!DgK)GI{Zpb(F-<zvD?wsmM7+X!yh3owY_h*62|BkEipe=TCW}Lfufz8#N
-zndI_kOiFP3^Crc`o*X%8KSf=Q&)7WMV<&1~CcozZi&z>v5uSna&PC3J&IQiAT-R*}
-z_kfe_-;wQq-sR8kaQPQ>y8M67@_(M(C+hWQZg4d_dR_j^7NA2mrZd*n*nP+~<r$a%
-zXHk89eSzF-l0Zp;R#&sj;qrG4AQQ)2195ztgGIRlMXhm&m;I{G^1tJ@{N3&U#O42s
-zUQL$&IhTKTw&j@H-{<zfE7P9I^1tf#*LAu4o}F(0!=)%qm$^S*Z-)?dH_xP+T+QQk
-zShuRn?O)O6_V0K5kLcyN{XQhELJ2=B)Ju5J?SC>yfAzVZLI30OKkb4n#&I(QUH*F#
-zkRvmBpDf~MDIl}g?2BFV8@Nta^D2zEC&ATRH`!$orDXZpT%>e>+ZjxKF3bN%q{O)_
-zpQ+wrRK$=q-!C-!Cd4+on(q;#klEUo6UTm|BW$%zZ|jqjb*O8C3czS^`#(@^Td8x{
-ztt$PMXb{XZ%GG?5&<d2e?jF6M=7%}*ZvP>d|II8vI($ESn&tnKyIJpKu24tgGjZsy
-zyZK4Bsm=+#pvjrk4=gQnXQ1E(Xyqqpep{A*k1k0it-b?(L8QYBGh6y{qFn3J*b+U<
-zZyb2_IKw-a|9MfJe|zlY5jRZIwAhm!ajxexyTH_39sG-{n^n5kt>}8n21-b*8_|uH
-zx%l*nSA%QxbFQZn1)=BFvq|+CYnM%TH;-Uu*SaT#em{T(=pwOk?51G)(^FzkPPe%p
-z7v*Yue`CX|#~79B>f0&W(!2^r^ErBok%P`xwYi!f7SlkV0(#<;G+(6W1EkcGg(4}(
-zki@Y>E)JwBy9w%T5QP6t9o_!-bbNyD7xls9>N;hPJ+5`WJ=Z!HJ3Y<<r`NMR%m1v)
-zzbo5+4Ef-qcDlCh|7P-Qu65(jg0QPN@;ffe&ORu(3yh@LNA~oL!`#7ZTgH_Au?@dv
-z1;u+{xo-daS^huhmGoSY)m)d5bzxmxY{P#egMpQWS&?<22aNT4(=t<Be)vRMNWc<w
-zZN2-C*OuG=Ax1@Saq?>i{`h%cU+h@^bFI@o#^a}=h0YF#-p(gepzz12PCY-eP1FuT
-zq8Im>V2#DS^y1iwtC0gfxh2#eHy)hq^8d{><x|%h_{UwY*o;58ZadnCoUz}(fok@D
-zo|)VUv;IA$m3cR1zk>X+t68J-338s|AKmC-@SD|(PUmAxcRtC#dOoL~(W%?Mp3Ava
-z&!L;C+rOa0slRfqc`0`Fqu|i9iGDo-+lKeah<(KOLhK`%zr~BX7x8D+j@U;$zr%|a
-zzmI(+dlwR30^!+>KMP*QpUgkHw(X6=TC>@;?Y+3HZEq)JZF|d>wXJ(HnAv~G+O{_(
-zYuh_Xu5E8m&f4}K81E*ywsj-pz9{f_La_6@*{}52Gm~G+Onxo7586Nv^}n5&$uDFk
-z|26rw%w#y+BgvrmCBK9vt;0R~GxzA8?9uPK#%6*z<Ql!lJ-RD<^iKC!&t})yRh{n9
-zZ@Nc6AN$BI*S5EkT%$k5ay!{z`mtlNc#09z#|x`xZjM+dT~j{eSjA?%DHpEhs-)OQ
-zb7m-qM3eRZ1#?GNn`_N$D`#Pil6iF}5bD34cQA^^K<C5S|Aux%UCRlGwI7xgvVP|V
-zoJl8IQ0vL^e}Z)ztwNJ(=Y=?`#?NAIak_5%47PXcs{CO!blclOXXWU*Jo&YrZ=x$|
-z8o2!1=>Z-`fxI-=*-!T*4!~zuaKWcO?efE!NLLb^0R8OWmE}K@<%j1Ii?N@}nRKCC
-zI96@Ide#av+#vMXoZxDPrxf1EweF-p314)Z%hE+(v<Lnt4hGVRWhrahfrKpopR=~T
-zZ_Dz(mbI;Ca+d$~tZfIAvixskZTo9VmValKo*PDRAi?E-#kK7Nn+q%Pwhu8W>F(gw
-zI-5LQO{-qOnvGY#&1lMgF{5e0j*KRle3S3@8BHtx(6nG@Q{AqNrp%X`vUfY0>Rxs<
-zt@@*D-Gs@m#_d?*uwaU4f>Y_h5h%x9{I+Y`XEyhgw`13y!sd4frS@G8tqK9G{Can#
-z4Ryw@{x1l^j<Wq9>S<Y1o{4RE6=~U)ceDM+53Iq<&~loK<6O<x!lu{&b9uGUdY~+~
-zf3IuGw%CU6vI@)ZQ5>3f-K?IA%x=fj8Th82i!kq)J1TZ8ng&9&ICYOJ*1ZRjTK1YF
-zS+N;d0!#s0U_kY7;?FR9SIG3Ew_Vzj1Rwee?u((ITXDxubo7g7>BZds7u|3QS^nQ+
-z^6$*@f1HIy%Mdo`@#%oUtgkH?e$tVPNH%QviRhOrZ%~G-t&|a~^gt1_Z$m&Jvq8qn
-z2o(Bf&GNsOZFvW4v<lJmC3pdr@l`vsET0D~$-gF_^`fufY#ty!6r+H^RL-h(t2z+K
-zBGl-GP)jg4^|k7e>2W<W^(45P>*5e0GAL+r`Rh8}{{LBtim)7t0?h$4GG>Z-X%5N}
-z(Z1qpmd(UGZbsmTS?O+Ofc+uL-|TK))!_Djiiy?Lmy23IOg{2BS5deBXkTs$qOZw%
-z%|Bx_gb<#=B!B@AY^TGuZk^6(ewgDyBSM&fXhOzj+5T<rW?w4`Z^;b_OJi4G!WoA^
-zOZ3QKB;jJqGtUUbmSSDi|DvUEH|Wv26&+96K*{okh%GzxZ0H?ZA8Mj{yd8`!MZb-)
-zCA9bjW6KRP9>hqLqCOE~!oSwR3NyPzaLEDYc#HNA6eeQOb{=Sj+Oqv02Q;T==eA|r
-z``=7H0!REh^;#T%r_1u&zPB)l@TqX0AN8E$@^8ay8$HbT^*kT-#JHNP5?mKnA=tY`
-z3<vyfW*g#Y2<j!v)*uFb1q&;DvrNcrr2!*?R&zmR46X>pdL@x!MSy(PwhxjZpvuUM
-zedI__j=Q-A*1jA|MSzh#<pcH<cGGoTO6=GyEaLil5Xj)1@|W0#ofzuu;v?unP?A1S
-zN<u%A(KJk?R<7o-KbQYcqK(ZeXcvAa7~ii7KTOWPyh%~6<|ji33D&FDWrJfyXx^-E
-z^)Tq1EvnXhyjK2%3uI`JPe*GGY)?ZU(UDeTRNG>QA5O)cjr&^MKgZpT`!~2XRH5P}
-z7v>^13bP|>PoHh6%P=lV*r|V_pG+{OVm$SknJY*0FM1f{QQ5Z#!-u6UIcgTH>8y?T
-z)^=C3zB`nTPRi@k<XbpBLHv~KY98fU)44L@T0}6|NI&P=_PNdV$zNQ>y)Mg}$uA|p
-zAcd^gLO`r9daS29VyPWHJEG1ea&@4mys%WGxHm;R^*)K0+x7TH^v&Q~a4-VT3rl*g
-z?-~Rzdt_!+p9_Au`Rd;0tej7_@kFpTF7}ZZ)?E|#$*!|^xvUWA;!#jA9(6U}kl<>b
-z(|g1*Kca3FR+1<Wf}iHg<+)E_x54tSfx^UAe$5NWyH0=Iw=4f!+r{~iD~-pvu66E7
-z3Du{$ZaY9~^=Ow}Pt|!h96)%mdi3@d{o>e#KVQ=KGoQ)j4hI`@wS&(YaJ37riybm&
-z=fFANg^Slm06s{L*DevUeG?nfXK1j+vw!WfyqbKZ?>(3Qw{T1FK7XV4c^a>6Q=X1(
-z*r4b7o6-B+!6c3gqSfp!_#m+@$2zI%K{TY-hqER9oaT=Rg5W$i(|I;-x9I^rN^tw(
-z^A5<I+_R!TnVrJn?gS||QHGU$fN8k2WiBi$7xyyUb-0y%45sgu+yMAjH3U_;L8`KK
-zAXU2jzNTPSc)OLoS<Ukt1Dws_sBM5$$hWxG)xcki0|jyZ=JK!6BO(7ix~DRDY*WY}
-z&zbhC5Cq{z?OEzj!r;t0;Ka29W9Z8L9>fa17NI*=^Maj-WZIm4i)`8ccY>zCs9j%(
-z#`g$gcpS#yZf3mYX~GtwBisL8Sj+fTf6Hh^QnvpYH@iaP=!9{ILB#aM+Mw(LdkHz}
-zpJn-<N1V-0h$9Og>15#;SGN(p`JXBqq0Ked!7wu0gpI&l>NbnsH1jM`9?Iwuw>YiC
-zj&}ghJyEm6PEv7a<GvR6Q1dfI*h^<%jy^BVB}_#6&OoD`xf#oFhjC>#jWc7-kU>5p
-z+#vVN(YsAwf%6Z9v|>u}Bvc-&iPIPvu^4OwB~ppHct7og?B55QKlv{Iix{>n|6%Mx
-z12f|}>@s^@%~v`Gm;zb;cLzvy`Ma^%ue}k6#yerNts<bQLoXI|WUafwhM|-lg+=WK
-z7m>k&4TGr=CV$8{Pc96qurF{R{QP#TzkLVF@fgYV{C2$TJ5b2ioHc%0k_TZGqb1B7
-z_}0vhz8o8lOS1G6AlP`Pt8vv%t@e!UHGjQjJQjWIGmfihK{x1EPz+ka=o(>!*xyM*
-z6+8BItI(6D)jZ&Y&NO5-yc9++8xf^CgF0#N()gd>ew<yn9}^!IfvR_k0@Mc9?eB4I
-z>w(W7v4Os!IC_K2f>3`|SKnS3TsGz&cI`M=I@E(L1h!G#plwrnV;elk4z|1aP|vBr
-z?B?1@3E3Cc;)zQ`23UG#G10ObKX+vNKWCwJ=d6CMc3Hz`me@6SLszo6j49o*4JYf>
-z@9D`kNK$=DMR?uDX)ILE-YTu4L&p9dV}JigFP(>{She;*7UqLZvtdmMh#M>EnV-de
-zWQl$>pb%`rMU;;4lTo-Zx#q>_EON%_&5(!udSgFOe#|}P@9c4vqhG^=tu=HaTp%g-
-z?RBupHMoC_n`fcM_-!cvR4V2pwx3<Y+{I%)8l4#;t!Ae~m}sNnxfQ2p?CKxrnqJX_
-z34&=#KbGB@wXSv&=BGFr*SFl9pBRD#m^;DEhuOtJ#Ub<aN>v1W)Nf!On%d981`rCs
-zAU{;o7CA%%pYMcv`VO2yYkIyDFZ&L};I)3d*@0ZaO)=KMPHqQMFhHBR#qfVh(q@>+
-zoJl-J_OxIVzo9k}X4d3dgPHHyiMcJGHlb%7*cJ6eG8w+zp;mG*y6ArcU2pcl!{5&Z
-z9n-%-coDtTqUq`Z5o~qc!(!S0ZI-_?i(Bs%VmdqN)aiVLMDS(6rOOa$1De_*i`CtM
-z@aoRkN1kcywwM;apf#!Z=!?eN=JjAGI{5sw@nEUjpWTF~r}|;jZk#na{l@~!22VQl
-zXQ!C^VIGD0ph+1>7_HL>OB^7%+imF)b`v;JR>NdA$1XTPU4_{e9NQXCZZX`>#%KDR
-zjmNAvxZxq-J->l9;>zOaR(enW3fK!CvS88b+l#*_sBUMlOK@S*(aW9Ic$l_!V52^f
-zc$9-ai!dfQzRH$=NxL3qi9Pd&opbVVb4t70E>BuiPs9^norzUO;?sQW=~h;aXQ;4Z
-zs8n~?3*xY&M+kYy)tuewoR25zqGUvOm_}l5e1Hu<av?Nb7#FBd*A>=V*SgHEWE{i3
-zp%!$M-jUtBG)kWzA2|D7hA3BSOh2AsV}(13t_qLYj7QsC+IoA=<aw9=ob6CmfxEc3
-zXH0hUEeY8d-V#@J4ZK4W4hMMn5IA_CzhD*MVWj1&R*alHy9*x9_6wtgKkvb!oCZg=
-z4ELS5Yv2<aaNmjhN4SGC()fHU7Ya>6ID~NdS(iGx;uBJ_9rg3!4o)u-o4ePsiSS&{
-z3AHw-;D9Jfy!P`92uwLj9xQQn7$zV0&`AS4VBq=^oUgYX<gU-{Uzd+&>a%tSqAz{c
-z8s6~$U8q^xf18THPE105W%!G1m5hMRlMvldlMpL5{>#Ody?E8x_#7tT=hoOe{2bbK
-zBjR!Hidl#gT+G7%5ht1AX|Ml&?x*zWh$4C3c@{)4m&C3MJ{r3)F(2g{A&|7eEgZ30
-zT@b$o7DnvE2b#rMn4t78IIl9!V%ciBBIO4I%70ixI`!V^LF+%Njvg=E#y?V<%3!6b
-zZc~=N4yWDzUVY7bOTF2_r6<ZLfab4;POg<WIYd0R0Yj-`2AE%V^IY|I2$%3-x@%d(
-zv*P3<a4l-i;~g3L0dw>HJTO=G5Oghk_AXtETO6U|{782^!oy%ou1C%Yb*swhVWP8}
-zZ)U)J^Q5>c56&4mopd+zmZ}n`@?z0vlMUw7tZ(^oCdm_MT{D;$s!w73%^3KbyK#Sl
-zJ0JeW2hnQWjkv#$+vso9GzgiA`iY!8-;&ehU&VJWM0BDbLDroKPlhwdr~07%KKL{Y
-zt#o*Pt9~NrEZ82H*5a)Oq9cX_y?*DJINtgc=b3+Y6(2%~r<cvA;+@hMajF^AR%pD`
-zd~1TMd9HqlSUXl_*Y~F8^GWmprv`l3-2Y4y(H*vbeb?AvKiBfPwXr(&{CXJjabe`u
-z_=eNRSLMs|;aYV*ET^PARt^pj^cZ*^uPcj3vgjWisD8mm>Q}mYV`*-6@zf$;&Bgj#
-z3?&ng;VWhiyouGew5Y7yS7N)NthUtVtFErBzSO2^nH7WcBO*~qeSOtjO@HOBlITpH
-z?yMEBbC-o;y`FO}PL?UFBtlceP}abEkS#aP*DNdJEOF7JqFT`DNhpfN^<qBqvg5UW
-zIb-5(k4QgBzWw-1=Tq<B*G%PIgi4I{UZ)@SBT?ncX&kk7<hl{xi~K%TS4}hL|AiVb
-zl|MT)zqwyGu@GJ=|D47V>mt8rHJAIW$Q8^tx6#mw{_S7{u3xHLQ#;J%-!Mc!&F#)p
-z?eWR+xS~<l#{{Gs^>?Alhj#F#na_6U7x;~6v$>wj4SapvWj*G6#&QPBH`!dCq|N1>
-z6DFUz{djsCa+&$x2;m0bb3c^557$1g{DSs2+;UGE!hX#98g99tD1C&n%P(8*65aYx
-z_}5(Sv@fWKaCR6k`~79deYkoVZa(w;j~GIK=KR;2$MLGc{n69r@=bo!Ja2}YSO09j
-zS+DrmkhrdhiF3vzIAd&$*6+bq%>5Xr@<}xF`8gQ<3giF6*^{|F@?$wc`%iDgD$?Jd
-zhRbJe*HG>Ls{DXo4Abwi2E7>9dzJiE&@pP1TJ7{=K0$oJ7e^(2Y@${AaO*rQ<yC$q
-zZ%!YIrhJkpM0t5tWB`Za>x*tMj10)B7cJ1luKW>U%ij#nVEhIYbh^bFR(>b>V<W@z
-z9hftNmESr<`wCIMMYDu0U+5=7d2!?py>xzLc)kPKhbn(4zFtIVwE;@BFA(Mj($x!_
-zcoC^+Gs<}smLDes!s@3GoWb-zl)P<-@f%8>J^w28H^9ez75Sm;kK;4g_zu;-ugXsv
-zqJIr&-(d6W&=B%A$m0rYKQ^8Huj5ny5mAw0=kHMMbFlq`%<rMbm-1(8{2IA|F9(tb
-z<J*MTKTN-D|6u(KXMg8X3?EC(mADjmyG66V27mh=@G0Qgns(NI1EY|SewcW-#0H5g
-zB*p{pgWORRN?Z?Q{_g<yg1!;>4zOCL`y|enc)7&Uz?YHlE!gdEEn3>Ez~6&@mUax9
-zpK{v?d=!WeYT17ctU@~<0KR~HtAXc&UIqLe=mkI+&-kl=-Jnx}l$!ypM7~pjzec(h
-z_+ym&Ix^#piS|uE(mw{GYxdhErULQbK1pJX#P?w#TOfxzHJnY@yMUDAdBFc5eLe8M
-zP~JKq%Z09Wz8A>yu97$v7!5ieh{s#@&oM5f_ep#K_%PBpOZrDZJP5Wwgi8Mc91Eqh
-zpGVQj9|7M7-UECc$n@U<e+YaD`A~)Z*FaqMyMfHNM#^6gWWGWmMC{iBuY<nEA~3^$
-z`!Q_z*zRuNe<I)0K=${0K)iRtehcsiz<QZ}g-pL#rcaUSACDGtmjaPwKMzPfodKkt
-zegy-jJ#GM=jr!|>Xo~&Y5*J9kQsOry9*z}u_y-{KKO*rSi8o8k0pi_Y_NyeF0)#2p
-zFOccy0BO%%F`D)$a61r9v$q3j*BgPf>mLGHj}J)u{U(t1I~_>-JsU{-Jp)Ml9S5Xd
-zV}MoY7r(fH_S=o8SCc^h2}t|>6%cwJ{|g|;?;arKT7Z?v=LfPqHNc0!F9K3;-7p%C
-z&r3ks-?KpK^*2EB9|dx}?f}wmt7Q68Ano^CK+0b(af-x~fcS6kg%QvW-vW|;9!Pur
-zrKIl$(k@p?x(dj4F9%km-BVB2w0FTzl&DGc0V}{S0PX|-TR^sVJ`iu)Nz0J@yMb?k
-z|1yyJe@x;>K-O~*$a)G+5&YYLP|aC&z(1m#=YW35S+Ozaxb<Q~Lwp0s@qP%1xoiJ#
-zU@Ndyrl$ipg1!v+0Ps8@`yU7V8R*YYF6sAx?Vx9&{AS>cQ$_hxBu<cM0kXc`c$CZf
-zUIenfCxJ}A8p!(20kVCk0cm$*fcX9pdoRl8xPAnrp56y?Twero{5AvGo_i(U4rDv4
-zBz-NA?Ocj>d>1$$@6KjDb0l62WIM(I*}hRS{TTAI9UlVQfZag0<4-`g<0T;5@feWp
-z_%V>}Xa=&r>ru`c;M3U1v%W_q-Ys#p#7ZFRcS(A-#AKO1TGGeyg)S`TZHcc+ydTJR
-zTq^0)B}N0;{v!!Ou1Df)z@H+02ax@E7RdR~31m6H0J1+<0$JbXK$bHN$niKANIgsd
-zQhq#;a>vkL%Dn)j9v+g|3gmc<JX6z}fRphcmgSx)(IW8(Ht0;>5Bxduy$EFa&j8uJ
-zr+}>I9w6(vS>k9QT#MZTr2LzxhwXg{$Z^{aWP7&)S>D4ymUADF<&*;1-h3d(EnU*H
-zfShN^z#7b}BD9nAVj$_;fpEq4A4vQ;uo3b<w25|nPvQz7$JYvc5cuIl(T@E<xZbn6
-zfcP}AeWOgj8_51P17S+`+kyX$cHatw|4Ca3tb<&I<d*@rBYg?57U|alp8=gC(0)0v
-z6LbpjdhnBh+d!W$&^{jcB<L964d9Og{s#21L>=vWfz<1E;B!dd3S5bN4+EbEy-A?G
-z97uf@0O^nC1F83`fYkeJ$v+E7eUFs*A@oN2RUrLqDi%SwQ2T{ImNyZ|bu$w9BFZ@m
-zJ?;RGK2Nmkb1Wuo-y1;6y$qzj`H^<gMZkMOUkPM8(t#-AteHTTdkzpoY>x$Es@bi;
-zt;qkuxg!5QAjji%AjjiXAoaZyNPWKmq`sdLXnz=psb~KQ5URA_3%n8ez7M4R+ySfy
-zeLaxlQVHa^lma;}1p@7PK$hbKvYb@lD&)Hu$a2mH-VFK_AjfYkkmDB#<oJDhju^i~
-zK$i0ckmdXlcq{V#7RYj*2Hpbt7eMOK59Bz12gq^03CMB2PN01mkmcn8S)Lns8}d1U
-zEH4$<0Qw`0R|M#{fwYHLfwYI6K#s#U$^QwE<G&8b@n4E@rJjp`)boD;soz{6^?keK
-z-v;EoxDm*CQ3K?>__^e71X92E0;$)#fz<PJlD`c|y*&=3z8(TnfA32EULf`GXCV8(
-z8%TY`oiEnysX+Gs8$gcdxj>F{8SriNV*~I_;IlyLr4x7)_#-Y5v<4)7IgsUC3gmcB
-z2XdUfGW|b*9G_eu$L&^`ej|{2t^wW#{1tE?>T3t$Oe^gtzyy^0ED(OiZqYRD4;C#O
-zb3%Iwh~-?{4Mg4ABS2)+HUVb>p9M|@{x2{M_$%O5z^8$kGW}b?r$FaQdKnOVg6twm
-z!yWT%Z!s|$Lu?aRKwM|hVlsf_6Q_ai5?DaI1N?HyCr$?+F(k2oxEB2Nl24og{sw^s
-z#M{AtM)Ha1Q*@WW0wS)M!}!DciL=1(6<9!ou3{$O5BbDPz_$r3Ai}O=+>%dB0Y67z
-z0nrNn&5}<{1;0UH0WlK%2PL0)Dfk#OVgYdk_=vIf`iYl;zeivJaU}SMC7(DO{9b_t
-z#8KeKqmgVs5n~vgAh3WK1^#TwCw>!rhrj|N;_a9c$tPY8eyP9$BK&5|TFECmz;6*)
-zK!lCOYyq-<q7(cMfdxd&_n4O@pLhk5_6RH>B94uTh7!{uPlSy`#|bPTwqSg@zfA|9
-z2%C&f5m-R<gI@wn2cI|xe0~=muz+|c_-ldb;1lP9-y*Pph<G+;D=-~=B5X3cQ(yt{
-zF7WpO)4?ZZfxlm10TFR#OgsjeeBzbhCkQMc-VOe2$tPlNMLPr*5D_=VluJI*4Stot
-z0^)k`dH%riiP_+95LiG&oE7to<P)z3ze`{N5%E$?B#dkx<cT@pM+qz-;&Y}k7fC+x
-z8t{_@77$m1pC|dm`QYaZEFgXl{F^182p<vMAh3Yg2>yeTPs{^<v%mr({8h~Bl22R!
-zez(8^VjS%QlYs3fE(AYLU;z<ZqnL{%pSTG8B!LA)Y+Yj9l26PBKSy8zaUA&Nl23%M
-zi>?w_K#T`}t>hE`1N;_&1;p{-KPdUcYr)?vuz-m5E#_s(CoTqmkH7-rY2Y80e4+<@
-zey<|1fS3S&JSI8&Pb>gGL0|##bns_OKG6%lLtp{%4Dd@NpI8WfslWo_nc%OLd}0y!
-zEdmRO@aZuRN<MK3_?rb55YGaChvXBB!QUycfS3sWLCGhUfPY9}0TF9bOf;O7KE6O7
-z_;CUYh&J%yrnNuAjzDU!17Q;yd}9oBqrD2W0sjP?415C!U!=VTgs;|K0aC6K`Xipl
-z@_|*LiRXi6IoE+EUI5w#tOiX)nb9n_1~hRB=zL&3XyP|OmjbcAFD70H8f9~RUrf9R
-zbOR9U`eLFTbPEu#7ZWcA4bay~8<6Xv1GpAg2;}<K0K^s3ia&7qF`YoT&X{hXmHI&<
-zr@9S@DHG!W!gOK^flzTw1278M3Z%d91k$f}1L?n67#a~{lm6HNq~9$B(!VwU=|@|E
-z^p~AL`o(S_{T~}aKW78dpE-c^TZKUSrv@PXP%DuBrV~iN(ha2lVB_g0Y`|FLa{%Lj
-zg+R{l1|a8gE0FWG6Ucel4dnb|r#a7TK+Y!z5Mvor2;}@|0CFC*0%`A^K-zUTkoHSu
-z(N1kZ+M@$#1MUMqPK(qof|7_GXp{{&0hN=^L8ZifD4e(jLgY_6PvEzZFVWJV4+e%x
-z^GkX&28GuXl1{?l@cNs|k3r%!6P=^H1NHNIThiTV2d@~^uk)cKUb7@!C25|6kl!ll
-zJ0;yM>4zm92j%kGD`|(MPl7TjUnS{8Nw-M)Qc34PiM%Q#-EGrJEf#}7`NFdW{a=#K
-zIZx0pNV-bWqcK>_-y-Q5lHM$7ucUWM`YsNxMbi#R`YFk`oiEBCi*aFj4oRm=x<S%a
-zlHM%o|C00}N$-$!5}X3B1Q-v?%aL@6q^l&|LE}PuS|mLZM#lV|lKu&4*u46l+Mi3h
-zSMoPWnoft;FC}f0^sh-rqCb*;OVU?L`naU$OL_vvh4~94eWj$AO1eqX6_Va5>6;}z
-z8k2(Zt0jGnr0<gS4<+3y=>w!kv}(VU^axI-k=Ub18ejLN(_JR|kcm!!ljWuIJ4|$y
-ziEcH~T_(EML{Em(HkO}nq8m(ftBLM3(fdtw+=Zd#r<mwM6Wt(brLR^Kzr#d#o9H+!
-zGRFR-nCMay-D09UP4s>foq$ElSiZwVS4mp6e}jp?*+lO#(Od+L<xe)z`6jx_M0c2I
-ze($rfyj~NXFg29V?{zlj&o|KxCc4!`cbe$^COR%DwEPqkoo}L7n&=HCx<k^ZVLl~}
-zYSp?WeU+s5OPc41<R6ms|4O=7((g%{n|5BO+eH2-NzajVoTTd{ognE)Nsn&O)b}#K
-zDd{B1=Q$qvDUu#1X@{gQkhDwES4uiZ(yJt$FX=W(7fO1+q)R0|?i^8Hm88EZ>6Mb^
-zxfa{gAn7(qH%a=iq+29?_PHYe21(~jx>eE-NV-kZuSt5dq%W8x<U1t2RMMT2ejM~P
-z4STxhmMjBk7ThKLBd>a_YbA;R{@z6I0ln0UgBXMS#RmD+SjQ$AXud?1+^g#s>8nkA
-z$}9feQeM&F<c)mF7mDJwWUOnfU(rfFPVz~!ej}gqRg&+J@`_gSEh9t*C2!<Yp79*7
-zH>JFyl|0W~cqw@!pYkd`i^aOc_A8qCslNu?yp+6=Pk9y3Ii<X!mHbX29*{Tk_4bbz
-z8CFVpP0~u<5h3`hej}gqDqeg-$}3vQGY;mZ<c)mFtN5}E>n8iJXeD2$O9$nRe7*jY
-zMTYfK-XUovpJb9Z@+q(4*R4`s(c$Ece9EhM_n?$lw32t2>NoQB{>%2BhIL)<{}Ao(
-zHt;F0;_1tzyrNb8=KdS`lvnZhGAXa<aPmez<*Q_Tez%lYw34@(`fub@zD3GEAmtUU
-z<dLjjq^~yQXIx|xEdB2x6FnAji;@2g6P<6OYfW^UiGJNgM<Z@AmY-pwuQ$;@HPJ7b
-z=y=2_#`0#H=pqx%ILMfPwTZT9gZuYiAivSyKMZ;x|K2Ib$A`Fv_Ni!=PyZB$n-^)0
-zkCD&u-6`ekrM#k*d?8=pB2eDQr+gCjsl1+$@``5uf$BH%DesW-f0FWwR`NEJe>3ta
-zUx<AwuNjE5*ndSUd2|1be9Biz`79}~XeF<A9OaX~+K`{LE{}aKuX~leq?Nq6{wf2X
-z@(q&yg_Kvcl5enz@=3FPBcJj-#Nc%*90~icXucds|3*IL<D~p~QeM$Y-eJ<ekxzNG
-z-(M@`6|LlvtY4(re#P$u!zNhz-_K1n^Ox|Cyv*@Wa&qYWm<@WM`O$!VEUyFLQ$LDk
-z(F5tn$Y=jrr2G*nujp{{Mn2_RrF{J~QNN<Y$s75U-z??VNO?so`6QEl82Oa%wz2nk
-zwlZDRuV^LTpmT%vZRAs4o!9(Q$}3vQA2QW%<WoKeaVf8~8KQngD|wsF4c2euQ@%>d
-zmr8j>hm$w*Dc>UH+oZgr!^s=@l;14ncT0Iihm$w*DZf+7e=g+}9ZufJr~Dx)pFC6O
-zPti)=Jim;5%B%CQ0x7R(C2!WhkxzLC;(lJ6q`ab)yhG;($Ir;8e1nvKOUf%+$(!46
-z<WpXq$HmSP{a3V-H`j0EQ(m3lrAc{3hm$w*DX-4^mP>g>D|wr#|3*ILbFlB=^{A9r
-zbU1k<pYl~w-g=4XzoNs*8~K!Pk@AbAyrPx7S^q{p<<)uR&!oJfm3*A&USNGxd}m6i
-zfA^c{r%m*j)X@C%P4rJp^zTgcNtcGor<mws6a51d{W}wV`emWz%`wrdO!NyTnh)n~
-zQa1#*iEcL0)TeR1<FXrTu?779cO|XXmy;kszKRF<ego1~$j9qU6hK;y?_-iy>$eSl
-zn|u||Es?Z}e;$&winn4SMgBsR&Fd^l3kuJ+B(2u36iGM8^(#}-D*pVIq*Xk4gQQh_
-zwpP+AUizV=Rs7NhnmSY0TP8YoL@56<6TQqt`%U!kO!N^Gos4q@WBvIidX0&`&qTj#
-zqQ5yRw7dsR^eIuH{45iFvx)xDL}!i;mH(BAe#=CU8xxxU8Wa6p6a7aMeb_`#92;7m
-z$3!=o=!odh{CAn?H%#>BCVJvYq4G;i^!+9}HYPOx3=_S}M0;XG^WR~je{7;3HPL%b
-z^idOiG90VXzAiJ-xh8tKiN4=NKWU=hFwq~H=p!cjtdm3AGs#3dO?179zSl%QX`(+i
-z(Gl2}8v7q-qG#*0Lrs6}Y7@=(#apx>f0K!R(L{e>qQ~LkvQd7ziOx6C*XwkkIod5I
-z`g<mNqltdlME}`D$Ha%~<2(~R!$e<UqHUUYQcdzS<JYVtC;3)Z6;+hDuF9B`Jgu~-
-zrgTnS1%B|YvLZRDs(N`&WmyG&u`|gv%k8UJR$H1hgTL#Tm6Wvn%A};^q!M2>ej2Xi
-zDqlU4%2!;Olv`FaGpnL@`m}}K+?@KFnF~OqES#HL=Da$$EVruOnT^-Aa|UQfGJa{a
-z8b8fAKtrb2;Co+uwf);tQ&e6n+cF)EWgEUy6KcwqRb-Y-n>jN%HTjY%bgih?hrX$b
-zFIj<~s>4rPx{{Kzq&`w1az)+JrM_x(&(LA7Gb?wQ=&@^V?y>=UJiSDGosBaycW!!i
-za?<i(O>+Y3<_}=bO-d?5oii)&bAvt*-v%+gsHg-lm-A(9(K5U&=gZ2vTD)B0!a#&H
-z2Lo_T=*_{%nTx-<Wpf8^9)8x4-?sBro0ptaTvk=;tIop!vzcg|Y;ylL=Ae!8X8Y#R
-zaIP7+b=Sl6me#A$npIV|q`a(n@WD!&j?wC;8ZlDND+jD5Wtp!6KUk}qfvU?eQ1xhK
-zz{tG=mXKQEyCFw4Zh#_^rlaXu94}*07(C~k0mo%p3JVO_rYvzzb>)g&pRXjuie}Ux
-z<*M*ShuELy4H<8c0l&c4fw`%9`>RCr4%Q~YHK{=J8YY|O4H-?{J0t~vxiWb=e)tvh
-zAh))%8q+U*=92naU(Kv?-6J{Ea~I|=^TMkXFD)KQa+X&Y&AmQ%+4akY%6y4e)R0>?
-zoV=Awm)7`dhm$wEs9()9@oSm2Wy|U+>uRoG-*Vtv`PEhnDr$<B`qGo?ufuQE^3Gj!
-zRet7G<#Y1BZ7yR5HMB5!#{8m+Wxn}7cqELcFTH<dB4cWCWmUai*R<NonZ@{Z*xFEI
-z4!CK<KnPK%GwF&H{BUP&WpQP>)0y2*>ndBaxm!->qMU)-eKnI)0}E4fQhHtW^*-Gb
-z&$}cSZW+H2IxjgXX!i?~<dmP2<jhQ(C1%*1q=jOrzEDZYmsA(sFyB{I?W@5L$Lc>D
-zo7}I{Ur)KtxhuW3R}~wJ@28~sH<s5eP5;9B;7U|cR9jc=o4&NN+E{}a4p!{EGU>{|
-z$e|v69sWYPa?Y(U{t}H7Ryb5msR2K^FnLy4&BCJcvJ#HH-YYM=mAho6_d0K_v3JSS
-zX!yz;=ili3_Eqz})k)srb<SAj*JlQUm-_V@fuXK1tmW(qlbKD+tzWUihhOI9O1dya
-z&Hd-HnD~Z4HA&A5dNAG5)URBr+}EJh&S1>rOozdKiHQ>02D3({&2S;Y^_7JFNOXE-
-ziEp7<7lUN2UpW^(@RDp14VGjkDJK}z#k84{+rOsls?gp~M}ReNIwHV%Gb*cm72cV3
-z{5j<08AXO4vIgDHBRMlubA3hl62vPiS1$BAoynnHUy13Sm6R1S-TxzO%{3@V)-1wI
-zbNwN;t?XZ&GjrzE3{SBZV}f2~Y;M09dfj|EL&LU5mL)7<0H0}^^ZgxWP^q#gvnBM;
-zV44fT3<fo;Shf}ck+F-y#hTZM0gGU?{v}1_$jEq_ZD3)}WlHtll~jG`q%mpAx#DV}
-z`+iHzfQ>b4Z3cH|3ulSYFnMNGjjyhx5)ns9<q9|qeQ%gN6MK-Vx>`>8bcPj}Dyadt
-zGB;@<!x+XgNnY-dLe$uQEks`DRVD+XsP5oR<|7(+iHudTf>fXxXjV4D_v*5u@)_JN
-zI-NsK>|kpVPl%{%S!gpum5Mf&&oQ-SR<6rAZRV_noR)MsYE#|cQ>dI~RR_{dcFFYV
-zDKmyyGII`8vYtLb$upCu4YOqC9H?YH-BfZ)Rt2{32u<eAK<kr-QG;2+TvI>3USn?V
-ztfDIT(31N4++01l$<4i*J}-BXamw{GGZmNSF4A+?Bqz(Cr=MF_TeEP+vg*nkP-2;0
-zVomZ)FOCK(YQ1$8<(0+DeW;8<$&Ix&$+Nh}ou`{We%{_!w89XH)J&W14MzFS>gu9;
-zwVx47PtCMh8NQ`Ob>+2?#R`Cv6JK>zWw{=ZE))$LG|K?>*NAw#W@aY8B3G<DYQHLL
-zohdq#TH~uK!bX>&BkEmIhN!Eu8sC*$;?13w%bhK*;?m_cwadLFMb$TyLE&Eg>v_F%
-z=FLyf^t$IcGrW^TQhMczDl~gZS$SD)Jvxn{=We8aP?2h1aK|@D#*CpV&nT-w<;A6g
-zlrgM|vgTb?Ry#-`^Ok(uhl8@~eTdb=Y9c=e+!ekR#Z~CMP*+ho%m!<A2rUXzN%|KW
-z&-a!4ifVi+ZJDn&ufEE61>9N1GOYSn7p?GRRnVefbHmD%RgvwhEn;w$i(QVf;6-J%
-z6$obXik6fIlB+|j$N5_k$6WNGt^!K{dhaXI4U1FEIKjknm^3S^qP(oacSX{|dc-)3
-zuyM#+I-{b*i(&@KpPb|_s$S;H#W{{|m=ZI+q5HOZ!>Xtr!DVr7-uxTYRJbIw+_wUI
-zzxlQL-piTp&097TZC$3?8hT_pJ>;Y$<jCa<9o(sCf?nfGo{UkU>ME%StJ!{fS~L&#
-zIM5(Ci$iz!i^^f$a@5NzYHEvcP66ZLq=rfOXp%g8G8pB+<-%*4hHB9~*qU+EAB;c(
-zq2!`@oW`>Hs_IJ4IPa3mmA(>hWmVC2bv~R-mDSW@=&-(flY@Cnd^NSzmGwj9HT$zr
-z2j?v>zkUULedQ8ULkB*cFl@wfm+1}v_c&|sKQVI`<!3Hk;ME5z)UyBChwuUOl@l$v
-zfnu1W2P4J(A}E@q(QZr|A7{F;#{;ePCiy@_HFQ-fD8no<$93jbnIjaZZ%C0r`<%BT
-zwAX`$u}-HdYOXVVfZggBpVZDJm``{*6P#iCG6qjD=oB*!(;!=7Z`GoCOHADhzkz0M
-z{me0FEki4V0dII^gtRmK89}{JECc(mqb#$Dd>v&DHSofWOwR!S+0))QK}D>fT#`FI
-zS#zgP!#y4M48$AtE0$CuBCs+3^zyeGY=cD7=KS6&n~Z&N?i^Z_SO3umu*D-vGdp*g
-zEoff-R;EF754k*;rR(*+%{5dwh&|haliOSldK+x>Ak(d%F1}0yIHAl9_%h{iGJVx@
-z%o8c-rK){P%NeCtR`3y14N%K;dFNCkcuv-q;z{?#zTs^Yu(b(1oxrb?poVappWwb=
-z_%dQsGyMGNmB!uD@a5FrX!sJ?zzjdLzGWJI_Hf(8ekBYmP<3+w8N@fxcVuVinZ$P3
-zTct?h0_YL0s1<3!dDL(2=Pom68FIq+7g26{pg=<JNU#B4IJ_~*vno#3VN}Je`l;0b
-z;f<+O^OPGXyfKLk;?(5A%79OfQLz8R6dO3uF*jkbsKPv~LszT^6<<<pc<mitEb_&h
-zFh~evR@tCUFq^>_9KC+x;j}V!K@HsZ)atqlyd7ie4VBf)r!K3s>+esgw2Sko{t1G;
-zysUQW#Y^hS%1fr=aIoArRX<o;;Va=jw&vmryu+!)w{oh{yUXnI1ZE(XaPl?wipuI0
-zMdedhrp)rrnh}~&UmsRfmek=)<tsKnx3aFf*jE!${!}ga16g0O_<xdi*xt&1Z!_t)
-zN&YuFUD3Rzx5)HwY)FPLe-y+AIXnXT%J1Ro_n7d+DID}V*xTn$oWg~irVJ48{QI23
-zg>K>geRhLtH!#3<L$UflB?&%-=oj#w*j)5i*Z+Su7e4V8Wcllt|2GzQ)n+X41HC`A
-z-@^HY-&i~NJ50^xe~s^w9pL@D+(ep=(7x*1d_&$1+pqLw1N-ZLXL|oP--bRFm>!ZL
-z`D=Txb#RY2j2*PT2!;CpkTbd=iwHem9x}VWXD?k|vh@GdG}If+Alvwc?f&LuV4FVl
-z@elf}h4Ibg{hIUd@)4AONjt)yh4*(d|Lk-66OZSN4~7OivnxOGc#encd?)RR$8+J{
-zVr)F+9QdG1nvp5C_-9Z1L0nSk0{ms3_wbC@{JiJHgDd&Q$j}&NFo$D0r9JVGAnY6a
-zhn{sNT@Lc(R6Q~ZMy@9w5>(=Cl7nlZ-zonWdtT8`d|=<{4u0<X#H$k;IH7?P8aSbW
-z6B;<7ffE`yp@9<`IH7?P8aSbW6B_vcf(HKZ>0bk1b;s{VI}>*ozDrQE;l_13ZvNI`
-zxT_G~L&_@(-!I5Z(Ik1}Yy0%e>(xJ8C@K7woHs8sKQBNAUOafdc**kkot33&_}xdo
-zh}0ScNBqSHrOWW)(xUQY(ExLKn`Jrp+ByB|!1tZwD;)zDzJ4#{!Y5Mku@rn(R;HTE
-z>y+hrCBMs59-C;q<a;${dTa5qHoTX^T%PR$k$Z&{;_uQ>|5fwwJ4VKW<ZHCA5}%n1
-zaLna>PnM_J@dH_2K*03E>-Cj-m-5Z)f?+OCeQ#?Q#(~!clt(k@M*E)8Q$qjrZ(oKp
-z&l$|4e)q;9lV~TpSuNCmKQ5S2zVdo2mwda}Tebq<(!}qH!`C*2l(%83$cV3{)UQ^Q
-zr}{3FLcoiU8rK#Dlg#C*-`#1IS=wa#9B3cD`mW!_{^FC#_zYoP1wO%y5AM4&jF}us
-zg0gWg;d0^oZgu^kykwCS(p(Y=xDQ>6`amSD!tVpZ_NO7uhMTsb|Dv9DlKxuPon?j<
-zKSQB^Cx2<ao`JsssQ<(l%d_j_%XheH>2t33)#|TAHa(vWug&=?S1iHjZ1vv~9I%{_
-zPYbXP+>-|?r`nh6tG*tezpVi`d_I0H9FP6<OyTq4(+10()l16o$uT}03R_<AjZm^c
-zw$Fy!)KBq=Y^0OVp)&E^mBmHnp<lRyOt`|7m&@-Yz$esoKF5*cWiO`<Qz}@GNY~%c
-z8}2g;f&9U8Wd3SjK;I$d7(c<GO9$I&$R|JUE;6Wo82Rec?#wX&KSZ|!@B=yxBOm-U
-zi!9&NKYqY{pnCaT2Z4|MvtHVpq22Ne7Vy1IFgAYS4eN)y3e1ZpeX=k${I%ceIC@~L
-z<LLeiw07i*H`CqL&a?yPI@=GNYiaMcHehCI@y9A3Z~t_erM=f1(SBr+wf*qC$oAtm
-zjc7lfZn?A1YTfmV##4KbT1Rd=VjZ#RV{7E5pEl2EKW4RT>a}W{@J;3~p^Wvd*0|oN
-z25)csx!SJD7Q8+i?XX5|!n)NG7vVUnMO^;M0jqXrR2uHT-h9_&OVo>P)>C^YTC_V=
-z8K0rNc$Cp}&cL!`AnS(g6if7r?TzDmFNdtT4*cHmoo9gW1*&pet?_!>+N|S-Y}a(O
-z>(&VTl&5t<bGJ1C{nOTef_AaL8zW9d+IT&UeLsS<NB^GM{^;M6q07@Y?X^zOdE?RN
-zhtX%u#g;2H$I;fGT6R5TJ*{`YbsX{t`Ht68+dCRh>17>{G>+@tYduw$Wqrp`Hf0`f
-zq|6z*%v&gXywvrAGqs0XF@_c`s+sveMgG5|Ep3gpfi%^=w#J3MXIrDt?$h=1k0S3U
-z$h!q&+BC*-bW7s`v>|@e#>PdxPguwIzGXdglV-X66}Ip3c`5B3uO*>x324Kq=<hhx
-zbB10{x85$%W|(D5G5Wa?ZT^WhVpoTCA=;g=iRJFIS~tCew!bTN^JrsyZ=I%X`3&vB
-zSKG!v_GW6klK%<hS=UDEqTYQn{~yPSylt?nC`(Rn)Ck8>kte5@?R*UVgAQ77W4!T`
-zs!<K|-_jc9E4^S{ZP6^9X<B4MT9kI|rKf(H+P($#fY$T0{i43T?H8%-%ohcFin>kP
-zWwAJa%{-k}+V-b^V_6Sd6GG~F3wl)TMm*NCn&XVVQwPk?a>pS3N{i#@l@qn2t_vcd
-z$1^rrP;Z3o*h}e_hWU{|=AAqWve5rV>jJ$`ZPr}9pRLftMr)p))_TWvoX_i98|U|K
-zY|Ld_)_3dnB*viijw+qcIs{MH*>vdQD8_VSV;;s?*Z}38O1JDfep4pqdIsivI_CZr
-z@Bz;DW0lXfby~fz97g{>gPpY2T+u%H*e$yshn`2HKU1J1^egVd`nHZMEn}M<mWi*_
-zy;-#zUjrWB^m*a#C`<hEcSmS><5xNErmepP8+e;Gh4w-&-hU44)-t;1-AFCZ$Yc6=
-zq|ZV6Mr%&58t;3o+EF#;9B<dxs;hX|wP@Qo%&kZJ`cAWHwwKin-`sLG?22>#>4=8;
-z=R%i}urKz7dEndhSO;HOulw?IH0?$FT;NAN*6-YV>v8Kx2cxvSzD5mtw!oKacfvPq
-z8jX7TinZQ8^sDDGEj1c+4DOR~$Ktl&j>CO2Zu&1PZfqG|8i9Kx?lHKd@H4uwzb)PH
-zaeLuo*`D{Uj@1359H|E`aHRHJ=t!OV#>(9*o~+v4bDAUdqcf2{)scE|x+C?_C63gK
-z?=RiGc2(i-(FOUt4^4EW#wEITCx0_%ccCYLcTcP%b?-Pw>bW-;?k+*Tp0S|Mb)@=G
-z)<~4ua~bNfST;pjPQo37J9^Xdv$Rt%rkje+%6X_u8-uhFxFc~}acj6whEIvxbo?e~
-zJM?iU?Th+5JnuJHXM}EOZ&(j?{r%nAbg%N=mL$hx5v7iL_K|arK4mZL_pmiW@Auu7
-z-bX1L$dCD@=Kn;urF}2*v);q=p4RP}^&VODBxuxoQ$+i5w8sHm9)_*|9p%i_v>pVw
-z+|dPm%2StWAN?*u%Zt)BpYl{hRL>ZlFV;O{``8XKC&k?3c(>kCxZ7g6;@9{Z^LUHa
-zi*aTc&T;O=SZeVif4tt8vtM`I#d#Exra6Co{H80=UMJ@1cD)aM)`(rb-bm0RkUkRq
-z7}b7!yX8)<0Ux7IVYiN>!lyZo?mgGq-u(xx_r=0Tj<z}4#~i<9H@;fFWjW?Ez9K$u
-zMg69ZwU(2b8!(^0aon~0z`0uLg~xMtUvxZw_xl%UuqiF|8^;TGUwFK9_ra-J>ig44
-zSM8p195!(YXxQ=?$c=@}fy=ej{pnijXvjuG=KZ;lzl!|Q-BFM^Fi%T8n5(6tjyvC9
-zq@~WVOxD*`jw{Ex8|fUkWa#1&_>n2c3-6v~Ij!faQCeR7$Bw%=A5~uF=eV_EP2ubP
-z5n9ijky>6&gjgFVYNz%@ZT`W%r=Tp#&hj|nhr`QvL4GNG5amCPIJM_FVGHXgYU5GP
-zJ@=L(9r3|Odtsv-C+Il7?`_QIQ5x2zV7Yo9&=1u<+LzM58sFnL&Bgf5!8m5Z|7Nsf
-zTmy51cB*drnfq|>$L+x24jHdu9Y2P6?Nb@A9mX2`8RpATv_ZsdLEC1`7Bxhyb_rsl
-zKEy<7j!~w~n%q8=oF3yLPBX@MtyuqcdBi@$lMjs%TM;t~`O}7!55{t*2V%J+u$5lu
-zp~xDKG~xSO5t~sr8zaup?T};EdPl0ho-(#l^NBGTW4O1l#;RCsyiI%fk+)OZA3==S
-zjTmV!;up$ySWoH2zMv%m@whP#d<5(0enY-CtogU;@tKGn)w<hOb3=REd#UY@VJw>v
-z&x`nS+@{A6TfN0~9BX0IM3Ig)WBxg~-<Ii5<W6tjQkl}u_Wslwv5PU@e%)`LingDI
-zm@EM?Sps6RGd8^^<Aq-IYy4=gDW~b}M;`+I&lpp2uF<djt7EEfCu&Da&u2_EZortT
-z4RI3VhF0jCu@Cjth8Ro55__etS`lAuw9XI2Qye?aV<KaxCzjW=Z^am4_aEPZJ<e8?
-z@zAyOApt!hCX4I+81}<BiR*W`IBDZws_1j$+ZuCvN5d~-ek{NJBrVSZA4k8>^r-Wk
-z?Ppt}dftuJ@)!f1ioMk1sGt4(3HWczwy}Mj%d}g*<{pLqU&QJn&SN^;#F(EpKTx}l
-zAkJnC$JkKWt_AVjX=u-^O7=6DUSvJBXAWYT4(O9|$6z~L*DmWT+-=NPYCV1V`S8`M
-zUq&AFLphf5_<J?&PaxK1KQ+Ymw9U8CPqw>l)OGD*tgtrfV;3Axy`4zw8p)VD2jho5
-z0BF{u#<CT<QhO~mcUUgtJh69CbAJ)?iMdA|4;2?HpR7>$hR_&sA7Vw;#XKrTOhSSK
-zHx_>_2lr&$Rk)2Y5XWlbXzjXIP0O1&Lc7js(ekDrcHD*iMLg%74X+^r`y3aDX+Xyt
-z<D26*J*DquH0(PHu_hkBX<HlPE#zxK3yvyZ#&S51x#!W2|F}!#Q|)1W%-^8(K58s~
-zZ)3xYg-_d>BcMmdrYxs0LOc2iVrM1GSeLe__XquGV1LlBZ9qN$5yxGsOwb|i4=saj
-z2>PMDXp_EP>3cxfi9Y5*U9g{%xt?9)c&tlnnl&2jk2=e7*BGaEr^_<=yEaQyGxJ!Y
-z9Y>jObe1!<OpCfC0_8chiO><wDZ~&BdM3hi3bht8-kN~2n$8{g%tD=anAcFQL*pP<
-z8s@A+$)#ZJooMCWL98o>C34<VzhZp~?{m(^T*kbQcVUi3S<YDgbL`DHFKJU*JVU^q
-z>wKhfE#$hUuOS%I{g{iYuEWyTacw#P|3hEbgngKpSEKcDC~U-;31e@pGs;JmVt%T#
-z12I-S%TRkz#___>4tLJQVQ{dfY8T;7!HsLsaq6>LcCoFk*3;qNg{|^z<%{TD$<e=_
-zit*|SGhXU!Y6i}pevDXYpmV7+!Mhb>x$!%~U!eW^*$v0Cb=0Npq}BWk#0-s$IpTxy
-zhJ|ai(3|jMLZ3FQRq4>jLpZ1CI)!>a6Z(zU*L&*zu#9#7D(yz>6R_vS8PnFrgs^-2
-zjc*A1Y18-i<CinGR`$~__wvudejc)ZOJAejLfbyEo&*~>N%!NlTUB?^p2T@t+o+Y&
-z$HTVK#zN>NXhXs$)5o(fJfG@sLyWh@IxO~uLWX1ZRcz|hWlta;w;(Q$Kzwe+{tD-z
-zR-A=mFHd{o+*Ni#KY0f1!ZpPFpMiNyyD*MD*KeN1wT`-M;IU61Z0va^C;HB@$GXC$
-zWj)80_QY6J=yH5uPV?+U?Vp7%gJp=li;5edKg^xuH)Wvz>CnR!(1#P}L(i(UWbk>n
-zUE9@*J;yQZIe3O7))F!QsJp@RrRGs8=E~)mD+A4=csa)sux~HY=aPsSR17ruTsl24
-zmllM~C7$1ka%O4`cl{XpM2vse{Xo|^rMJ^DpK#s=TRj~%#y$LJSYv-YO8e-)v9=ZI
-zXT~C~V9fOx<}_mx>VRXzn`anmj<;fNGi^Zx=QQIiA!~dc95YdGaP9}&y8!KEe9ALw
-zjz8s}fX`Fq{iyGj-93nL)OwHgAZ|?k6CG15W15d)zS<D~m13Sxv{*jci<kq?CgPj)
-z^<u*E=MaZRVZCUBkLX4jd#z(p$5_2TZH@W8J&>oIhCQ>H&vtBtUtk~m_k(3AKNjpu
-z9s1%x{eG-XQCOQ;?{kPb&1JJ**3Y_~$NKWlv}iMK9i?4&8_sD|+ZluM91^}Xz7G8p
-zYZ1>RCm<dki+LgXA<7o(tFg_TQ*4JiucSO>KQqW~Si~54!lozCPNi>S84pJ!^qh|~
-zgbuW|zYc=^4sFBuFC2$5)}#ZNg!=*9`M7ZnYo2~8&jx5akU^X%&Mov<YlyRf%i!0z
-zrWyU=aN;554-;^fY4nMl!+fqX_#8enIEVGQBkV}*htJ$}HvFO3533lFdKTy8YR?a!
-zc^A%Yp|Xa%@Dr!;N*4Q*5ZR`{+-H0w$~zPD{&e^bFXsJ=nD=K}d2S$lCw0jAZozs%
-zdx0(k`!x3H;SW<_FI>08Tql1YWQ^<m#<wlI-o}``gJ*5zGsZK@7+*K_^XbOE(!Yy#
-zIjoMmhFTN9YV3`+(ggK;&@(Em4?p`+O8cki-%+_vaLkQyHP;N<-^V!L4tGwZ){1a3
-z*8$jN3f2n7&jYO^r-8?Ft!)u})+e8%V2qT1HjWA7VUC4ytT`@RYfDFI*Wh<GuXDlo
-zz_$+gjO6iUjPHVLpsE99>hn$2^$qB+O^<n`Z@^k(jPq!(mB=&P@=pB%d3iQ5+;XW4
-zF<zqmsz0h9<TKVLcE?Wa#ra0d&#=GRh&4|<8$4~(Pp~$;4ZZKfym}Y&;XU|K=I=|_
-z?mR;Oj^~piUZLL=a}WFweYK%Ho+)6h*7u^X=(-cn2s-i1dCQ_3+uJ@L`dkL%7JPmM
-zf30F%^}K2+(purejr$w1o{ZbXdej+%cs=kwhvPrg98~8Dap-6v?zOl(aFb5Jt@b{B
-z==UerhCZwRJ9KuK^94GJ!v0^_BHs&ubFw?Mc5$vQo)<+$I^c)IYsO@ZL&--K>wi$7
-zwSNqKtLKBCT$_&PHWvMCdhmH|*~Rw=9LBu<81uSUt}C1;%Jw<0&*Z*$h<I7;m(R8)
-z1bl1j9Vz|iCVZuun;Ro|rYqJ0b>`)ga}&>E!p_ad-cD(U(`s1{UqE}K4qCA<0_wKL
-zeUzSNP3UcHjL>5?<1;7vd}aSiM$Ln3U{|Gqy|P-5f@f-+&)-L$e`Fhy{=wzLF8`tJ
-zr|yLfY3tvCuGMpQu9MswbMA59xlf*DbBxH-#|*epj@jd{-q23oUYU<$_yGKcdCc0j
-zM+AJz+cNK#MRmF?%lx|h3D+E>KWUY19?V{ZKNL3pMg7ToH2yH|JQ%ClpC}zDJ686K
-zbgt+6JosnvR2(AqjTj$`_AsCKc28`WZ__S+h39~3o)&)2v&-P~-O#q`{w&^Hp7~7k
-zEu3i<;Y^d|tLN<~M?cp*((haoz6|GwdTfmI!zL|imdY#6-$TzMRo%za#hIw^8$zFy
-z<9<*t>twEVe1DKQ?>3(C^2~DB<%}M@oPqQ++%(k&<G6HV-C#dBCZZgDKCL&83(uvG
-zTgCdK&YF=QLn|)Wn|>L;b98F(>pUe_(=x;l1mnGvwxva7_|X>|e^Sq;|2)j4HciW{
-zDCS!+!}9fd_$_&w{>ob=QUB_5@j7=|DAwya=gRlxDv8k4FqBoFXKcLX#`&6MWuhf6
-zdZNCL<NOs5jm5>esICck5st?^W<DpU@tOg`D4&ABOTP-E&x-pm%l#2|Th~Y4GvWs$
-z|8vxas2`5Lcg&B*-iPP^`o7U9m!t+p$;o0S0gd@q%5=?bC?9EzQ;hjKRlXcUKDI-q
-zoAV!1_2--Nv)zy}_w&Io+0Pu+E>ru>dUmLM88NyV&3eFIQe3VWn^H3q%=t28HnYCW
-z`5a;LncGD<<7MXCj7+>%wl<hOMjB+ydgcMOek~qgTnzSPZilf<%A3n|C<mbIEsULh
-z(Q<7=wO90}-@F>Cz3UN#=-1cW-iwB*2aY@2sC<Y+Zw&sJ?D&h0_fYyBir;Tshp8v?
-z{15n*JcFJ6V8nkae_^htW0>`r+fUkf{j2%rah<IiXYwoNcE+oG63yi}6yH>iIbWbY
-zlO37!xm0;yGT%_`|Ehd*djtI%qW=Lsx}@Eyetr$;7&S_*QhI54X5PmaM<sr2qE-5E
-zt3E8{RemLJP9KV<y!0E&8>u1#I22#%F|0h}61-P7GEkuDg^WMK^64Mo+QafY!G}u-
-z%V&InkA#KgGoBc%eK|wa?*Jc{@=Ag-{FU|?mY;#VgZ0lb1b>pKE3E!)L-3_y!pbua
-z7)(Dy$#cE`D)L;{@!lg@jp&T=?@;w~{r)QTbDbVc-hsvpHhx33@2m11L-bFsuVL+v
-z>*-+qqkqN~);|8#{GsO8Q2xoGcW?0dJJ|Sgef%o?q1yLV`NPytzxl<zB4RK*$CsD{
-z{Ix~1m%v|+i_q*jzzY$Dx&@}q07Aw-S)xs1yu>JpTToLM%Gn^XP}J;REHKRmWI55m
-zlTc42@MIvKG3e<ySJ4sYygI%vaWfEBYHtA^v1sLM1$tHkKSg~jfya?vE6`H~JO;X4
-zpr-_g=OXq(Am)sFvB0!E;Kz`k4aD<ucZ$HYi-35Oojo4-4W!2jOp5|Wv%Q!xEUy=M
-z1NesprtJX!1#%t07g7Hffu8$-@35URy;i1I0dc->FOfI_h$`%n61l#S?grwvcLK+N
-z-U_7L1HeBay#@GN>P4WZ3CQ|a3-mMq^?HCTFGu1<Kud&HK3SkA4)|x3*9&zs{jfmK
-zPD$^ObO#XcF|e<f=`Aw77WgjG55peDKu=LvoOOM{$eu^~LEtvv9w5_q0G|cD1NqQp
-zdj}9rur~pjZ>5wk2Qps{ka~9m@nI4-o(mAuTG2VIBlZ>``?ng%{_<hLcF4^JJ_Aew
-zJ`KDGi2wFz{2~7s4kO4v1SB7y`O*2E5|e=FlKUcoX*OUC<l}(Ud$d4L6p(t46zFL}
-zqd1>xft*iO0@G4}oCg<4oFFkyVx+`pPzmSLeL&`KkeDygA<+gzmF@`w)1ra<AQvV1
-zhw*_GOf~y{Ak+5&S#A>$Ds-<Fm{tXR8|mdh{I|P^Xuku<d71)bJ0gLckNZGyK6VTA
-z>;ZB<?f`N=b_w)61LS<{6zJ&yavZk+IUhF*Olt#jKDGcaM*3QTX$?Tm$5J5YV~N1D
-z#X#Co4p6rXAm^h?U|I$cO|{Pez6trQ$VB^i5XgD60m$)NFVNEh<oK->=vfV<os<JP
-z|MDe2Px9SB&c_TO%T1CvL1HhM`aBZoc^$}k(;?Hh$n^VwoOdf_daX<^1adw(WcqBG
-zei0B=*e3&TM1Lm<OgjX-IR*OYmY5W$Y1e~)k-)Ucz&P+H0ohNRK+go=3!oDOdZK`o
-zixikv1&o2*W+3gLRpK5X+rc+TvmHAHra4X)`7(eHqy3vt5q9%{#3mr^FCU0E+uL)1
-zJAfH7{TSp>l)G18+CJd#z<(XM6Sx&fy><xnJOISQ9{XyU-XPP<fqz8$L6rL_P#Z7W
-zaTp6POv1ij;tn9&(+XsJHUQb4wK9D+5JkCD1g1>@vOR~#$#Q_4C$9s4kMtct+Etf8
-z&oe;kyHlWNE0A{eAdq&`0%U*I3iOmqx>VA6K=yBjOiz;O6M*cW1O0l0h&KwbUo#{o
-z0NJl&;Im(cWdHX8+1@?CmyzBDWP6_x=;;Kqy;}u(I)H3%8&LPJK(@C*pr;(jc9fvL
-zUjaK$7wy<0ajnD#iRD1H%O&aA5|d>5z64R<Rv`PcS>k$$O%h9iY?lp)A$Cs?m=-7b
-zhwuRi%I^cRzdIz|DRDFK4`@dlko|o?pyxgyrj&gHkmauivfmD%u3sR_n+)W5CjhCx
-zc!8ccAj^vu=!pWdoL=aM<?I1ce=iI4Y?1V4N#6(Lct@XsHzoq(5vZ}=D2WHp6m+-5
-zoj|;i(Y_VPdOHMqHUrs@2Z5}=1<3kumN*Fr6S7YLvix4u$9^3I(k@;HvR``ydR_*y
-z{G9?lJAf>AE0E=`2eMx+0zEeaX%~xSdcI6|0qHj~fHz^>90Jqw&_AZ<0GaL<n07M|
-zDzrC9Tn+qRl)C|&8@79`#8M#b$_9i<x+e%sJC>+vdysw*$oB6S=-CH^s@>fJ(>j6g
-zA>Vz1U%o-0rv*qoHUUwjeKqh^l+z&4b2AYByL_cUPc3j2%B>QZRtltC3GhSYD-`Hi
-z47?fn@&%^l0S|$nBhcd#XiotiMEVSYo+RKckh@4=+GOBg!Jj11GeMv|8h8NdQ35@Y
-zz*`}w2~0b7mZrTAey>2!A%XVSfz<0(;NQUS5a`(gY=Hb`foTr{{|<heKu@bc`)VLu
-zq`N_2S}BnBu^7m8HwQ?&atrjhfE<?$fu7kw=C=W9PZI=sA|<U!x*K*t{_6rg&j7iO
-zI&2~yOaii;NkD``_Bh}ts3%&WCkogLI#Qr#|GA>yuS@I%VkxzE0BKiMK)5J(xxlnS
-z$<G5m$9jS6$83R~6yOx(pCK@9GLY>^08Ro%1M%O^Kl>rS{~RH|PoU>@AnopDAnj)-
-zkoL1fpr;E+`*}uSS|^b9vsIvHi$HrD5dZD>;m>5?df;~;*CH^j3CMZZ0K5(9Hw#Rw
-z0@Civ1$s(>w}4+FFs%?syIU;KlPA#b0^+}YHvX`_8NfA=OA?qi8OZu<z|}~fATTWs
-zNPCSI=!pW-ULysju~6FUv9opb92RKb4+P8pI*|3f47>w!I|Zh70a;%s@OGqc6`1xQ
-zQ1>4|+If>e&uU-;@-+xdyBSD3Un$U2CD2|1WWD)7)|&(LL(VNQEd$7UX9Js%o+2>K
-z2E-EOo**zS5@<!fUf3b$$3Y<H$9{pHeL&h(w?NMxAoFhlT44X11$yoS(*AQ`T(lQA
-zkoMvd=*a-mJ{$r)vw^gq6oF~wK+2T@>EB8OdJ2K`Z;J(b@`0-$mnSf-2}rrsK-x=#
-zK+nxU+Q&+Po?0O7r%GVj13=2P0y*yY3G{3La-7!-^t1qPh1^<!X`MjIZ3XK7NuXy7
-zkmIyjpyxqg1LWESrX2(_{*60Nj8`=9Ht?earbPn316mW9<^skde=Tq<@IfN#Z38wU
-z-va{E4$JgIGX0=TPdZ=Ja}jVg@=q3+HVL=}v`t`I29WmS0N#%D*#gs2fVATo0@Lz=
-z%$EnGJ>>{Ya|3C2E`e#Qf$V1k@O9|pW`UksAWY5P3dFi+w`iL7nMGTLK53r=5esO2
-zK<HL`3wQzW72r(ZN5HAT*MMojH-J|GKLBRR^lt%sK<7$&8SpUZB1yyMwM+5#2jXRz
-zdT`goMB-x>EoO$~6K8{;A~2Eo5cqkLPedD{^93dnJHW4%eBw93Unww=_-pVVlzigl
-z;BOX~NQ5q8UY2~K1N=P#6NwSv9|N-eL?`$Z0wxkMA7d^8l25z>{3L;i#7OWLOFl6j
-z{6c|=#F5~ymwaLd_!|T!5=Vo-Rq~0@d32}1L?YISnAatrI0yW0fr&(naSYFu*goQ1
-z@S_AK65$79E|Pqr3rR@=6N%VI$K**qF$?^Bfr&({YcV|6V)?`?!RL7wFp-FLG^Py*
-zo0&j#ga4qwL?ZeW^Ni#Zv%&8Ym`HpWe4e{eo_IC*R5~z`_$2rffaDYBfo~I-NW}gx
-zhUb0c6LY}N7nn%=4fwT^PrL?vo+|<qiP&GoJSh3Z`QY<h5|~JQ3j7_CPsALE-YGDV
-z_$%;v-pTrjdEiG0OeA6qV<t&HaRK;~1tt==fX{PO$`coYUnnq<h`AfXbJs=S6Z65p
-zPhcYP3CQz&mV6@SYIKLdMB--fUzU90e}KP7U?TBx@DEEq@mlbE1tt>z7yOGxi1LYx
-z!A}yHNQA$MSuFWP5BP-w6N!lLW7bPPu>kxH0uza6fWJlZiC*wK1SS&C1pj5pCl-Rg
-zM_?jx0{Dj|pI8KbufRm&S>VTG5>h|JCEzCrOe7|PKST0~#o(t1OeDf*#w?b6VhQ+#
-z0uzZg@NbrUq7VEAfr-Sk!GA#ViA%w66PQRm2YjBFvVBDO*65uA6N%@7e^~N~rQr7p
-zOe9VMf5IpsPb>r9CNPnB9{95*pZIO?9Rd@H=Yzjk@`=mAFBF(aya4>0fovbK9Q+1>
-ziA1bhF%L*SaRvBo0uzZ-z=vDaMn-5cQNSo5&VV%ds+a_z6=(yF0HQ2yG%yJ`3YY?n
-z08;J-)KA1(6;1h-poz#E&2s8N6O%#PfH#6BP6N$yZvsu64muxr8))JT(51je&_t|>
-z(N)0Jpoz0UHvn%3O}qqj3$O_^F$FY0U*~K<u4fJ)*R4Vz*QW-c1$t-&!o|gO0<FMq
-zAf{LhnHb6#8*ntx0UQG?1datZ08vRyEAS*>Cy;)*8%Y1lLg{C1K>AY$kbbieNdMRX
-zq#tYr(%*Fg>DRh}^j~ZY%8a2ur9W~2>30f&^e+uS`jJ*3{Y58`exV!4`Oi+A2DAY=
-zpB+HX+d?4cX9JM)uocMp)(Pai>IT|?JcK_RXak-DbO6r<(tk_>HUQ59wgPFdoxlr#
-z-N4B}Dvx#+6|vUZVvUMeZEeEewulEKq9P7kdM!~AJ1jf#x5a|5po=&h*&7)Zv1LTZ
-z2;?8tG72dpdq+k^92|LQ<fw?(M|R_H$H=WCBO+QxuE*=cBYH<5J*qouRK$)kJI9QQ
-z=!)49Gb-Z2xXp1WA+7~~SI0Hs@5`s|ITfXi?;Vfw$9LfG;rQP8sEDoco$;e09*A$l
-z>-DE?I1N&#wcu~}>HAKPis(9h2mW^czxJ*^wyo>BGhA9J+ZuaG2G~oQF|eCtOKd$#
-zq&_S;&=d7V>&x+zC2wf(Oo>kvV~S+>VT)N%2&l5Efd>eKv3Y~jYJjn+m@&ABfvSKD
-zXsg?LMY=hKH#mR`c$v}Z4{tGsEJzA(*g5Z=L*94zA^M|9hWP?~e7|?@@7{C2&pq#v
-zZ~KMq4c@cc&%yEd_T}wf@AYjP+aRxPZ^Lo%@ukNbyr-U6d7{C4^T`jM^m-S4OFq!S
-zch=YFUGbfU<4NBsxN_;K%TG0UKiY9?N27Ob$9Xs|>{x{3#b@4r26B1k0vwM&vkb?L
-zr*Ayn=so-Nxu>DL&z^s_(R<;!i_d|!&#l98;kiXPUfy+O7sT0h4vr^wpWF@H-OF%1
-z-L%>S`e-W})N1fVu+e)Za5d22T@PFcz<Ka0T)7my49B&$^KDRX?U&l274}@(1G((E
-z2**=<R^Yg>XAzE9JFay!co#YsJ0X7O`A(>Z&U0|S+Ia?!OI^piK-#s~)#&}G^A=n=
-z*R=*$&UBrHE2q0w;drg<I$XKZbrsGpbzO$@Q!lK%0A<{JV{e1^+TQDXp?>zBg5$#8
-zML2%cbqnI$?D_!WAMal7h8FBzg5!pMLx<G#>u@})pVJ|oo|PWZA#^+hI)oNO!0ox!
-z110LY1jn_W^B_ImyW9(H)VtK%=)DzMfb&bC%Mky3XdU9;=)DP7uJ>+$^lI-lI6vEa
-z4vwdKSK!LqeV6(gychZ|_Cd|}t;6|p-w8P0>Ro{2jsBbcaJ_%MzrlO1e+|yB_iaGT
-zi-T_uLTe6Q7z7;#&%^ok!3{WG9lQotE)QOT^M&wY7_=R{1y^nkegIcag;(IpiSWrV
-z^s(?VoUet?!|`nR99&rqpMm4jzT^9#r27`(czS4c2y_^_3CGppGs6wumEqHHJU_e+
-z$8*DLaJ)2p8IBi+-yVjt4=;?sl;%0~7z{?3n-VZSF&qZ`<O2(y*9b2YJ_F+x!`~6!
-z3F`%hj|pEV-1VDIdY55x#Lx>E)4NXiKS{m}lOcv*5MCkdg-HtIpC!DDFh59jkZ|`_
-zhyOa^*9fEk7WwOh(Z7orZywkICO^bG2|tgMA(a0rIIl4T2y37h2G;l1b_aJ6zY8Wy
-z3|xN~VUom<CjJ$|^AvxB@b+y^{)c^bbk8ba%zqn9o*2;2j`&%^YZSko@V^qqeLsdB
-zpcj@0_wyJ=3FAH;LxC{vzcHKvjOkw>{4U9H(#G&5SQIe5#|Xbfc%1MXgqI1g5xzqB
-z=Y)MQ`D18?#Rb#D{WFHI5XOBnhM(f%1NwZKun+1L<DVpa9x<$a{QvELix}3jb&~&p
-z@D;*;Pxu<)pAg1H2*W#wA6)S8|E)g&iyh+MB{}*z5jPX=B>V#5IN^T6e?@qd@cV?n
-zOc?#bm|m1H`lAtN2(J-dAlwN3<jK#ic=-R@cLIL+^YFtVlJ6#bTHtkouL+EcF9znf
-z3w&7MC4tuj-VoRai@KWrpun>NFAKaT@HK()rZWbv4<BJJPe9=P0xt=?D)2Rd@nHcB
-zoPN8&hXh_0_^iMigjxTs&%4v#DR8&IhXq~`cun99fqlE&`E?6?Sl|VLR|H-ccthaE
-z-R}G}fe#71An>Zd7X{uBxUos(N4OQoQ^Sgf-#73w;lm{V2H{!4|3ElR`13x8KTo)w
-z@B(3r@Dkw@gqI2bGvbF9JS&9%hwv)l9Zxy(vxJ)ouMzGiyiPby_#)v`gf9{P5#cL@
-z8^B1%{I3yiCcHuTCBioe<NXMX{}JII5w`yn-vfIMF!oX2r~!b`O?WHeV}!R6{yt$J
-z;a?DbmT*6;LztdM_;teVgx>`W`$Esi52s?7-vjW8;(@}S!nzY>0N?2MRq=;_XMm;h
-zcPsqAfOTT0g7FlxWOKvLZ&b*Uzm@XDbqV>5tMOGi@_od|bp!c~;ndC_%qlw|#{7K_
-zwDm!LfbdJiXN>Vt|Mt&05fCF^l_Q_+y<5a*%zRZ}<g0Szvwip=tOKY&W9Fm36$5@D
-zUzH=D?a2V~8Do6Ze;z&<n6Ju_&-UjG@fkCJ-Da2gsvP-juf9oq#>~HoClK%p^;hM{
-zXZ!XV@fl<MO8rNb+xb6)slz=-&Yv*z&xrP8`x)iPXZ!h2V4cMJXUu%reySY#Y;S*q
-z_>8OZRXOt6KL1PNGiLsNyL6@cQ{~9#0rL*=88g3I@KrhTyQzR56Q42jy98gABcJyR
-zzXR*O-G3=P=JyId$45Ex*D3xu@fkC}Tkuu6U4Ghs%oCsYC(Oq_gaPp=9w<JZBA@p!
-zr-{!P<;eBH2Loc{v-}do_o09T*d;zbhwsM)-Xrj=z>5N}34BA~C%`UI^BWiV4+VZp
-z;P(XHxyzm2u)wbfjCPHh{|SK~fI5icfr4CLz60^2EQIeL0IsyY^iq4}z)r#b#Tb*u
-z_IZ%fK#c99%CUV1iN8dA#>~h2QyB0I`KlcGyr2Cs@fl-$%%8e%k*~^;kI(C2_$l!j
-zGhgbj%8`GQ_&15qnEBmaCw;`IzbZ#Q@4tt@4#E0kjPWb!ugZ~+&*Nb*h|ie$Qh!yB
-zeDqsjm?b`A=KJsj0)C<XsvP<F93F=65}z@~NBw2~svP;V#Q!1j88iRHuVCt>{8c&f
-z*<TUVocd$TeA)i09QpX%8-~5aXUu%5zbZ%mR^ks6pE2|C{w4;*qe^_l$Y=k`Tf}FK
-za;(2@_+UVce3t(k#P^|q!k7GRjPYxY??Vtj%4GPS23%=;zXpB;3|qiB#s0|{(?|Ve
-z{it#*-vaTUAU@-2d{vHoeEtr@H;K=<8ef$oe~I{iO?<}8?-u<_l_Q`1T`h2v2FuTw
-z`CA?JitVGyk<b3IPU17J##iOY-++A@h7j=?Ghf<|svP-;eKy^5o%oEIzb4AB%8}3h
-zx-1yhSboOLm*rRG$Y=lF9}u5$HNGlGKKlc|N_@u5r{*ozzbZ#Q`w#zy_>8OZRXOt6
-z-}oQIXIzc1%8}3h$?ZX>{uo!|t8(PCKeLzkjH~fgIr7>6d5rjsncwAfk7E6)a^$nW
-z^fd7qGygHcSLMiO|LRTRGiH9b;Hz@vvp@FPR;T_LGhgbj%8}3h+k?bs%=|%-zbZ#Q
-z`+L7ie8$!IsvP<3AO1G+88ctjpDIT_`;-5h_>8OZRXOt6{~T^}>W^_XzA8sP`>Wq1
-zK4a#~`d8)1Xa6?5^TnP&7&Bj%pXFa`hq|M-!LNT5xUs`6-!Je<fj0zxbdQ^F2>ca+
-zza{WhfgkO3r)LU$T;T5uyag&!EpNZT_~)al{2hU@KGpRe&5kV(_=@Y_8-#g%{Q?kB
-z&i2%6gkhSq!{d+u%6WeOF5};F<UUw8P|o)F6k)ax-y+QR?!#axV0@oL_k58sLC^Dq
-zdHrrD%=SbdVctLd9$~h}j}d13_Bdg-H~)+<+i$CYvCcTWC-4^VOQ`Zrfnx%HUErSx
-z{Gq^pxYwbke@Nih1wJM4&jo&=!JXb2fgfpf%fkY{Ch+?L_dVq1e_P=91b*~a-SJ-(
-z_zi*oN#G9z{_S6Lr}vV;O9Fd;-5vjr1^$`9#g{=-hk*ZQb+ylwz;6n?<zaXHfWYqv
-z{L&V8{I3c8O@Y57@V^NBvB19p16S=|odO#I9})OXfxjp4&jfy7;131<BJA^3eRc}0
-z3tSNR&jtRT!2cz%_Yrq~TLtbCc*MrtJRNuz1pb!5KNk4k1%BjF%)gXgv%r%A=WSff
-z-hMz@t*<{4@)d#43H+|WUx0;HO>d{bEduKT`#k2(tiM_PyFI^V&8H*D=-^OqzrT4l
-zlAZ0(C#UhR^!!>nb7X%io`g4*YlE%BRx*~G)dKiF>#(LB*{5lKEox=rN3H0PRe(#0
-zxqX@u&j!QETubwWY3wg#g9ib$PYf7webk5>>4H82=ehn0dibq*ct7%Vu7V;hS@{1y
-zD_5>dHj>DZE-j!e>Tp*oWaF`9U$i+G^mq8%(onQW&VsUW#%*)(ie7l7_n@YQsXjV@
-z(vzQ=u`*CRrNE{hHeybR2M3H;#S*tfoxe5I`;39mh+jKW%BjCt-T30~0ZofTp1~x%
-zO4tJMGJuvyBnqcT@H7{R!D#|dQ~4a6&J99CxYU6Lc+vgA#@IgqM<YH^Sv|}7SH-(k
-z&#z6#)3a7)92ywa1m#HOavk@Bj`TtO#<1hOSXsNH(Dh~t+*+;a{8S=7UAwWg7HF-q
-zs&QIM-&Zl4_L!Bl;I-Y@4LC2Qp$ed7v6Gt>Q|L%q$M&;w6_U_eK=m-Tmzoqbp59-v
-zU7Fi5!D8Q}6#Fx&Im5D|u3i+#!j+-wNxS-=$8@zfz~a1s=f$z<G0UsOW7g8ik%}tt
-zn95-Dn6B2eX9unH#%_NLyzm~zfsspPVEBcCQ-z$BZB5uSk{&W9jF<_t%Jj_iX3SR8
-zrW!|$*wNT#k=sls2P0lj+|<lW*2>ircO+7la}eGVo{PuwseHBv%eEipR{V?8gUM`U
-z#tLbLSE8ngA7gUpP~T9ZfBa>cMgVJQ!XG#gNye-L7R*S{o>r(lGbdulbSho2^J>ne
-zg43ydGUx8h#c5h;2#2ccT2DK?usoNVP9=1Gq^#CCnqL-6*C+Q^)_W8$cN7;UzZS}8
-zj#~CiJl1Bwv<z=XAM<Oaem|knknh*@KCRUmVg1^K(^R*WlD{nzId;HGXRNH1%tf5F
-zuhjdT(%hSL^?`XaH#F^6>a?tq4!oMk&xCHfK5!*UMsoR#)iRUHs5v+Vz>M{M+P-4T
-zK|c06d|P#;4-}^FKsl!uZkAI=ah{y;x5l#*kwiR-ZEu&##9|p!^X4mNPA#3k89P3A
-z#{;kGFAp6sGn!dn;nXbeT{ozm>b>m*N?x~J%OgqA&6<tE+?<um*emITtD4KlvNQ0N
-zMiuN}X$G?=n!@}%PhT~&4WP}VhoHmW!9a2AAZw&KFbEc|71i^(Ss3f_X?wJXQc-I{
-z)<un|h4}%P1KUO%YcSfU@g!KPi{>Cn%X1n@yG!2!2G&>$Sb$@JRN6|K!F(1bJAWXe
-z=m=PuGH8D7>oBYc{26vnYJS4hb-%ml^Dx}QTG%z*f4^$ZSxAX;cFatfzpmysU!I-b
-z7aT?N6xL!GphK#<Wh3;J12jUb>O*NcJ)y#!DaL&HgjuRoN=o*G@(5xqlp-kA%(iR}
-z3?j9NmDh-hNuafUhg51AvZql8OiYh))tmEJ_3l9<YD%9Qb?UxsiK(cpthE5{&L&zN
-z)6gGGXRUlR1r|p%H3tT=y*Km+VGokd=Wxh}(5!%=(ovjN2DAw@W6+k-Oxz*4s<C`6
-zgt+>U=s-xdCwS3)9Oc@`R)rNL32J~^BVfK~;*mrEw~M;I>A)^&3-*L#b;aCjx+@iQ
-zO!Ny~T8%-yIoLXZ!xE<)-c*;*6dY4lb@96Bmw3IUJy2)L7_(B!_Vo%W2mQ@;ri?Kw
-zrEFgpDYu7{u!RTHWGn#M`|HR-GGtC=ayv)EXpN*{4viKHhG82whB1nBo-wHoxw3A?
-zcBwIG$IklwrU8p!GB%LUWhVl$OzIe<7`Ic*`hzC829h~5pG>5tk64fy8YQphvi?@w
-z<Br+gANW>ePO(I?%`Ilh%GWcQNP+h=&eD@@Ztb;ZBKbtl$s0T;RwkWF*h|!eqgc%-
-z74pwI_I5Vdm&v3u&dS64RmwH!6s99<r6aJ>Mbi=Tor{CjmCC?76QZWkY~aq;G^b~e
-zWOGN%Xe4ti4)twjkHu$lX8+iMP@g$GruUjVolBwATpF~ViYMZ^0+bnA9ycR}nv{%H
-zGP!F+?A<K$-gp)=pPsFeMqL?&$A;p$8i|Zey=;M>?5G8%dexdZv>&8%*4%U&3hz``
-zBmun!mTVVx65~tudo2!F2`iGd_*%@$jTh2Z56ouC7%cjukvS`z#0~{ruC7So<cO7v
-zplxNqCPz(pGM-C<Ei)dON)#_=+}VTsErM<Clp&vl6#z<aMeTm&N$eXBx0o7^G<BRg
-ztD@E#PA1|>t4EtCfT=SH`-kzFKr(7Va+Tuywc$u6W*OklvFc<5P51U~tgeg-U}H`j
-z;|E^l5z*F{u;#!lJdm@uV0y?Lj|D;380v~;Y@;%|J*X`%$BD}Wb6b8qHZE`yxkE=8
-zRxF2TlC*9Itx@}S(_f{=%j$1(4Ek%O#?hzUoBzoK^nU6U@nkj^0izl^7Y=&pG8T4O
-zbWJIpwsN{Ksfs3?9D}~7`UFY_O3~7s9K&Hw*{3rp9FgW!YTk;PsdVI(yakS{cs7TY
-zKA5*qdX5{lvbjvEP%AFhn4fAc;Iw<myszw^P_|-540UtHg;VS9KJ%$~-OI<OF?pzO
-z=Adb}iCe)>+8tl)xjfc_RQExr*OuxY4ItZ0nJ%-fus5n*Mr?`nkXi$ktN_6;+FF}u
-z#pW6e5NYvAt)%UuTboj9mU(>6UFuo}uC8-Z1A3^!KKAy<vpxkw3GUmJ2A93U!6Z;?
-zbh(<T#%9?}PmWEA;#J>TV{F?SS?VpDR|cBG)hk2oPMfENCjY%iOLmcak>+L%?{p(^
-zckq**2GjxSm=8QfCE$LeXE@XhpBDH8;1dLUq%b#?0!zUMQ@d&6E53X+3~d?TO#8?*
-z2Dh|3Dbs#87>J!am{M%Se5F2CwldX>z3JK^*#*0714@Q9I-;*M!eu&8+LF#S##~ul
-z+=&7>s-yyUk`9ijyG=)qrqWcEv1Srz#ix>Z2PzBSp1wh|KLf_K-!lU@!gpKsZ6sjp
-zQ@nX$WMB>=qojOuRN6Px&v7<A^~VpT)ZJA5Jl;Fi&wve1{gLf0RsGScZ6nK4sLN0t
-z##N-o+<<e(NUt5q*)5xChRzg#GeS?!xmFrSWn<rn$tar+_;L!*)s?IXyC5Y6ZrjEY
-ze9Q_5YaLl(RNJXl!Nw7(${|<D#u1bnlUkuPsZkr1%3mj~vb7^ssAXEnX5Bnv+p@Sr
-zT7CLfznwu<W*a28uR;wwMpju(6=XNK&DJZUSF4q#gISoqn=<(%Jgw1mER{LZ6ie-z
-z#+QPob~*m4@(YgmNIciHdnzAKM4P~On6R2`zuTM@#eHmccM=|eidyqc>g-O@$wN~~
-z<V^C}UCC5tE|O@9Wae4}?s&E%WiA!XgUjVEwKr1v%(RttrQhT!y+-velmBEY2h~lL
-zJ%a)>yL(&u8S=GwO!53oxw5VZckUR%yFBO+x~m7g9ACtJAKl$OYj@vAr#vMy_G$a*
-z#GdW5v;AZ9zry~4Mddq#(rt+{3-|tRqP)8P|Li6#=aJ;yw#{(2*1{*VoU_WXq*r=e
-zv}~!o-RErCJHN?;r!t>=_wXz#VBZ#~@OUq7B8A;@w@(4P9+oXj-LHu6`Gf0NQoMy!
-z;Tc_Fo4Fq1_208cvP*ltI(E|bEg`on&*iJzGzqt}dDH0j-hK8+bmsrk=(P1kYg>J+
-zyS!H^V)4_EU(zo!)JM+C)cI6ynH6tsJLdEKTY0cM-t5Oc_iyE?&wI(cf3;kDiTk(m
-z&=-%-<KDlOSM5P%)frmZA4c6sm>{2>TX}NZcK`mC+hDof`()Bh>Na6&O*q1td;eZS
-o)t?7!KI%kW*0{mSca}<q?frWRDR|nlb}h(W{>!?T06*XUUsb2uT>t<8
-
-literal 0
-HcmV?d00001
-
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
-new file mode 100644
-index 00000000000000..5d331b8ed22252
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
-@@ -0,0 +1,34 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++func (h *evpHash) BlockSize() int {
++	return h.blockSize
++}
 +
-+package cryptokit
++func (h *evpHash) Size() int {
++	return h.size
++}
 +
-+// #cgo CFLAGS: -Wno-deprecated-declarations
-+// #cgo LDFLAGS: -L /Library/Developer/CommandLineTools/usr/lib/swift/macosx ${SRCDIR}/CryptoKit.o
-+import "C"
-+import "unsafe"
++type MD5Hash struct {
++	*evpHash
++}
 +
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func base(b []byte) *C.uchar {
-+	if len(b) == 0 {
-+		return nil
++func NewMD5() hash.Hash {
++	return &MD5Hash{
++		evpHash: newEVPHash(
++			C.hashNew(md5),
++			C.int(md5),
++			MD5BlockSize,
++			MD5Size,
++		),
 +	}
-+	return (*C.uchar)(unsafe.Pointer(&b[0]))
 +}
 +
-+func sbase(b []byte) *C.char {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*C.char)(unsafe.Pointer(&b[0]))
++type SHA1Hash struct {
++	*evpHash
 +}
 +
-+func pbase(b []byte) unsafe.Pointer {
-+	if len(b) == 0 {
-+		return nil
++// NewSHA1 initializes a new SHA1 hasher.
++func NewSHA1() hash.Hash {
++	return &SHA1Hash{
++		evpHash: newEVPHash(
++			C.hashNew(sha1),
++			sha1,
++			SHA1BlockSize,
++			SHA1Size,
++		),
 +	}
-+	return unsafe.Pointer(&b[0])
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
-new file mode 100644
-index 00000000000000..dfc73697c392f8
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
-@@ -0,0 +1,43 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+#ifndef CRYPTOKIT_H
-+#define CRYPTOKIT_H
++type SHA256Hash struct {
++	*evpHash
++}
 +
-+#include <stdint.h>
-+#include <stddef.h>
++// NewSHA256 initializes a new SHA256 hasher.
++func NewSHA256() hash.Hash {
++	return &SHA256Hash{
++		evpHash: newEVPHash(
++			C.hashNew(sha256),
++			sha256,
++			SHA256BlockSize,
++			SHA256Size,
++		),
++	}
++}
 +
-+// AES GCM encryption and decryption
-+int encryptAESGCM(const uint8_t* key, size_t keyLength, 
-+                         const uint8_t* data, size_t dataLength, 
-+                         const uint8_t* nonce, size_t nonceLength, 
-+                         const uint8_t* aad, size_t aadLength, 
-+                         uint8_t* cipherText, size_t cipherTextLength, 
-+                         uint8_t* tag);
-+int decryptAESGCM(const uint8_t* key, size_t keyLength, 
-+                         const uint8_t* data, size_t dataLength, 
-+                         const uint8_t* nonce, size_t nonceLength, 
-+                         const uint8_t* aad, size_t aadLength, 
-+                         const uint8_t* tag, size_t tagLength, 
-+                         uint8_t* out, size_t* outLength);
++type SHA384Hash struct {
++	*evpHash
++}
 +
-+// Generates an Ed25519 keypair.
-+// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key).
-+// The public key is 32 bytes.
-+void generateKeyEd25519(uint8_t* key);
-+int newPrivateKeyEd25519FromSeed(uint8_t* key, const uint8_t* seed);
-+int newPublicKeyEd25519(uint8_t* key, const uint8_t* pub);
-+int signEd25519(const uint8_t* privateKey, const uint8_t* message, size_t messageLength, uint8_t* sigBuffer);
-+int verifyEd25519(const uint8_t* publicKey, const uint8_t* message, size_t messageLength, const uint8_t* sig);
++// NewSHA384 initializes a new SHA384 hasher.
++func NewSHA384() hash.Hash {
++	return &SHA384Hash{
++		evpHash: newEVPHash(
++			C.hashNew(sha384),
++			sha384,
++			SHA384BlockSize,
++			SHA384Size,
++		),
++	}
++}
 +
-+// HKDF key derivation
-+int extractHKDF(int32_t hashFunction, 
-+                      const uint8_t* secret, size_t secretLength, 
-+                      const uint8_t* salt, size_t saltLength, 
-+                      uint8_t* prk, size_t prkLength);
-+int expandHKDF(int32_t hashFunction,
-+                        const uint8_t* prk, size_t prkLength,
-+                        const uint8_t* info, size_t infoLength,
-+                        uint8_t* okm, size_t okmLength);
++type SHA512Hash struct {
++	*evpHash
++}
 +
-+#endif /* CRYPTOKIT_H */
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
++// NewSHA512 initializes a new SHA512 hasher.
++func NewSHA512() hash.Hash {
++	return &SHA512Hash{
++		evpHash: newEVPHash(
++			C.hashNew(sha512),
++			sha512,
++			SHA512BlockSize,
++			SHA512Size,
++		),
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
 new file mode 100644
-index 00000000000000..2fa15c8fa5529a
+index 00000000000000..da161adcd88ea6
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
-@@ -0,0 +1,72 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
+@@ -0,0 +1,77 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8119,74 +12077,79 @@ index 00000000000000..2fa15c8fa5529a
 +// #include "cryptokit.h"
 +import "C"
 +import (
++	"crypto"
 +	"errors"
 +)
 +
-+// GenerateKeyEd25519 generates an Ed25519 private key using the Swift implementation.
-+func GenerateKeyEd25519(key []byte) {
-+	C.generateKeyEd25519(base(key))
-+}
++// ExtractHKDF performs the extract step of HKDF using the specified hash function.
++func ExtractHKDF(hash crypto.Hash, secret, salt []byte) ([]byte, error) {
++	h, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// Allocate buffer for derived key
++	prk := make([]byte, hash.Size())
++
++	// Call Swift function
++	result := C.extractHKDF(
++		h,
++		base(secret), C.size_t(len(secret)),
++		base(salt), C.size_t(len(salt)),
++		base(prk), C.size_t(len(prk)),
++	)
 +
-+// NewPrivateKeyEd25519FromSeed generates an Ed25519 private key from a seed.
-+func NewPrivateKeyEd25519FromSeed(key, seed []byte) error {
-+	result := C.newPrivateKeyEd25519FromSeed(base(key), base(seed))
 +	if result != 0 {
-+		return errors.New("failed to generate Ed25519 key from seed")
++		return nil, errors.New("HKDF derivation failed")
 +	}
-+	return nil
++
++	return prk, nil
 +}
 +
-+// NewPublicKeyEd25519 creates a new Ed25519 public key from raw bytes.
-+func NewPublicKeyEd25519(key, pub []byte) error {
-+	result := C.newPublicKeyEd25519(base(key), base(pub))
-+	if result != 0 {
-+		return errors.New("failed to create Ed25519 public key")
++func ExpandHKDF(hash crypto.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	h, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
 +	}
-+	return nil
-+}
 +
-+// SignEd25519 signs a message using the provided private key.
-+func SignEd25519(sig, privateKey, message []byte) error {
-+	result := C.signEd25519(base(privateKey), base(message), C.size_t(len(message)), base(sig))
-+	if result < 0 {
-+		switch result {
-+		case -1:
-+			return errors.New("invalid inputs to SignEd25519")
-+		case -2:
-+			return errors.New("failed to reconstruct private key")
-+		case -3:
-+			return errors.New("failed to sign the message")
-+		case -4:
-+			return errors.New("signature buffer too small")
-+		default:
-+			return errors.New("unknown error in SignEd25519")
-+		}
++	// Allocate buffer for derived key
++	expandedKey := make([]byte, keyLength)
++
++	// Call Swift function
++	result := C.expandHKDF(
++		h,
++		base(pseudorandomKey), C.size_t(len(pseudorandomKey)),
++		base(info), C.size_t(len(info)),
++		base(expandedKey), C.size_t(len(expandedKey)),
++	)
++
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
 +	}
-+	return nil
++
++	return expandedKey, nil
 +}
 +
-+// VerifyEd25519 verifies a signature using the provided public key and message.
-+func VerifyEd25519(publicKey, message, sig []byte) error {
-+	result := C.verifyEd25519(base(publicKey), base(message), C.size_t(len(message)), base(sig))
-+	switch result {
-+	case 1:
-+		return nil // Valid signature
-+	case 0:
-+		return errors.New("ed25519: invalid signature")
-+	case -1:
-+		return errors.New("invalid inputs to VerifyEd25519")
-+	case -2:
-+		return errors.New("failed to reconstruct public key")
++func cryptoHashToSwift(hash crypto.Hash) (C.int32_t, error) {
++	switch hash {
++	case crypto.SHA1:
++		return 1, nil
++	case crypto.SHA256:
++		return 2, nil
++	case crypto.SHA384:
++		return 3, nil
++	case crypto.SHA512:
++		return 4, nil
 +	default:
-+		return errors.New("unknown error in VerifyEd25519")
++		return 0, errors.New("unsupported hash function")
 +	}
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
 new file mode 100644
-index 00000000000000..458e9eb57416b1
+index 00000000000000..c9f4d67de4c9f3
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
-@@ -0,0 +1,36 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
+@@ -0,0 +1,144 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8196,114 +12159,139 @@ index 00000000000000..458e9eb57416b1
 +
 +// #include "cryptokit.h"
 +import "C"
++import (
++	"errors"
++	"hash"
++	"runtime"
++	"slices"
++	"unsafe"
++)
 +
-+// EncryptAESGCM performs AES-GCM encryption using Swift.
-+func EncryptAESGCM(key, plaintext, nonce, additionalData, ciphertext, tag []byte) int {
-+	err := C.encryptAESGCM(
-+		base(key), C.size_t(len(key)),
-+		base(plaintext), C.size_t(len(plaintext)),
-+		base(nonce), C.size_t(len(nonce)),
-+		base(additionalData), C.size_t(len(additionalData)),
-+		base(ciphertext), C.size_t(len(ciphertext)),
-+		base(tag),
-+	)
-+	return int(err)
++var _ hash.Hash = (*cryptoKitHMAC)(nil)
++var _ cloneHash = (*cryptoKitHMAC)(nil)
++
++type cryptoKitHMAC struct {
++	ptr unsafe.Pointer
++
++	kind int
++	key  []byte
++
++	blockSize int
++	size      int
 +}
 +
-+// DecryptAESGCM performs AES-GCM decryption using Swift.
-+func DecryptAESGCM(key, ciphertext, nonce, additionalData, tag, plaintext []byte) (int, int) {
-+	var decSize C.size_t
-+	err := C.decryptAESGCM(
-+		base(key), C.size_t(len(key)),
-+		base(ciphertext), C.size_t(len(ciphertext)),
-+		base(nonce), C.size_t(len(nonce)),
-+		base(additionalData), C.size_t(len(additionalData)),
-+		base(tag), C.size_t(len(tag)),
-+		base(plaintext), &decSize,
-+	)
-+	return int(decSize), int(err)
++func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
++	h := fh()
++	if h == nil {
++		return nil
++	}
++
++	// copying the key here to ensure that it is not modified
++	// while this algorithm is using it.
++	key = slices.Clone(key)
++	kind := hashToHMACEnum(h)
++	if kind == 0 {
++		// The hash function is not supported by the HMAC implementation.
++		return nil
++	}
++
++	hmac := &cryptoKitHMAC{
++		ptr: C.initMAC(
++			C.int(kind),
++			base(key), C.int(len(key)),
++		),
++		kind:      kind,
++		key:       key,
++		blockSize: h.BlockSize(),
++		size:      h.Size(),
++	}
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		C.freeHMAC(
++			C.int(h.kind),
++			h.ptr,
++		)
++	})
++
++	return hmac
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
-new file mode 100644
-index 00000000000000..da161adcd88ea6
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
-@@ -0,0 +1,77 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++func (h *cryptoKitHMAC) Write(p []byte) (n int, err error) {
++	C.updateHMAC(C.int(h.kind),
++		h.ptr,
++		(*C.uint8_t)(&*addrNeverEmpty(p)), C.int(len(p)))
++
++	runtime.KeepAlive(h)
 +
-+package cryptokit
++	return len(p), nil
++}
 +
-+// #include "cryptokit.h"
-+import "C"
-+import (
-+	"crypto"
-+	"errors"
-+)
++func (h *cryptoKitHMAC) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
++	C.finalizeHMAC(
++		C.int(h.kind),
++		h.ptr,
++		base(hashSlice),
++	)
++	runtime.KeepAlive(h)
 +
-+// ExtractHKDF performs the extract step of HKDF using the specified hash function.
-+func ExtractHKDF(hash crypto.Hash, secret, salt []byte) ([]byte, error) {
-+	h, err := cryptoHashToSwift(hash)
-+	if err != nil {
-+		return nil, err
-+	}
++	b = append(b, hashSlice...)
 +
-+	// Allocate buffer for derived key
-+	prk := make([]byte, hash.Size())
++	return b
++}
 +
-+	// Call Swift function
-+	result := C.extractHKDF(
-+		h,
-+		base(secret), C.size_t(len(secret)),
-+		base(salt), C.size_t(len(salt)),
-+		base(prk), C.size_t(len(prk)),
-+	)
++func (h *cryptoKitHMAC) MarshalBinary() ([]byte, error) {
++	return nil, errors.New("cryptokit: hash state is not marshallable")
++}
 +
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
-+	}
++func (h *cryptoKitHMAC) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errors.New("cryptokit: hash state is not marshallable")
++}
 +
-+	return prk, nil
++func (h *cryptoKitHMAC) UnmarshalBinary(data []byte) error {
++	return errors.New("cryptokit: hash state is not marshallable")
 +}
 +
-+func ExpandHKDF(hash crypto.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	h, err := cryptoHashToSwift(hash)
-+	if err != nil {
-+		return nil, err
-+	}
++func (h *cryptoKitHMAC) Clone() hash.Hash {
++	panic("cryptokit: hash state is not cloneable")
++}
 +
-+	// Allocate buffer for derived key
-+	expandedKey := make([]byte, keyLength)
++func (h *cryptoKitHMAC) Reset() {
++	C.freeHMAC(
++		C.int(h.kind),
++		h.ptr,
++	)
 +
-+	// Call Swift function
-+	result := C.expandHKDF(
-+		h,
-+		base(pseudorandomKey), C.size_t(len(pseudorandomKey)),
-+		base(info), C.size_t(len(info)),
-+		base(expandedKey), C.size_t(len(expandedKey)),
++	h.ptr = C.initMAC(
++		C.int(h.kind),
++		(*C.uint8_t)(&*addrNeverEmpty(h.key)), C.int(len(h.key)),
 +	)
 +
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
-+	}
++	runtime.KeepAlive(h)
++}
 +
-+	return expandedKey, nil
++func (h *cryptoKitHMAC) Size() int {
++	return h.size
 +}
 +
-+func cryptoHashToSwift(hash crypto.Hash) (C.int32_t, error) {
-+	switch hash {
-+	case crypto.SHA1:
-+		return 1, nil
-+	case crypto.SHA256:
-+		return 2, nil
-+	case crypto.SHA384:
-+		return 3, nil
-+	case crypto.SHA512:
-+		return 4, nil
++func (h *cryptoKitHMAC) BlockSize() int {
++	return h.blockSize
++}
++
++func hashToHMACEnum(h hash.Hash) int {
++	switch h.(type) {
++	case *MD5Hash:
++		return 1
++	case *SHA1Hash:
++		return 2
++	case *SHA256Hash:
++		return 3
++	case *SHA384Hash:
++		return 4
++	case *SHA512Hash:
++		return 5
 +	default:
-+		return 0, errors.New("unsupported hash function")
++		return 0
 +	}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
@@ -8642,10 +12630,10 @@ index 00000000000000..865e22ab6a3dda
 +type BigInt []byte
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
 new file mode 100644
-index 00000000000000..375bc368162acb
+index 00000000000000..02f265fe56b592
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
-@@ -0,0 +1,21 @@
+@@ -0,0 +1,23 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -8664,8 +12652,10 @@ index 00000000000000..375bc368162acb
 +// observed to benefit from these directives, not every function that is merely
 +// expected to meet the noescape/nocallback criteria.
 +
-+// #cgo noescape SecRandomCopyBytes
-+// #cgo nocallback SecRandomCopyBytes
++/*
++#cgo noescape SecRandomCopyBytes
++#cgo nocallback SecRandomCopyBytes
++*/
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
 new file mode 100644
@@ -9392,10 +13382,10 @@ index 00000000000000..f59e6f9af58cd4
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 new file mode 100644
-index 00000000000000..fcdce4c49b6723
+index 00000000000000..f01b519ee2c4e7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
-@@ -0,0 +1,338 @@
+@@ -0,0 +1,345 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -9409,7 +13399,10 @@ index 00000000000000..fcdce4c49b6723
 +	"crypto"
 +	"errors"
 +	"hash"
++	"strconv"
 +	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
 +type algorithmType int
@@ -9423,35 +13416,6 @@ index 00000000000000..fcdce4c49b6723
 +	algorithmTypeECDSA
 +)
 +
-+// Algorithm maps for translating crypto.Hash to SecKeyAlgorithm.
-+var (
-+	rsaRaw = map[crypto.Hash]C.CFStringRef{
-+		0: C.kSecKeyAlgorithmRSAEncryptionRaw,
-+	}
-+	rsaPKCS1v15Algorithms = map[crypto.Hash]C.CFStringRef{
-+		crypto.SHA1:   C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1,
-+		crypto.SHA224: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224,
-+		crypto.SHA256: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256,
-+		crypto.SHA384: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384,
-+		crypto.SHA512: C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512,
-+		0:             C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw,
-+	}
-+	rsaPSSAlgorithms = map[crypto.Hash]C.CFStringRef{
-+		crypto.SHA1:   C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1,
-+		crypto.SHA224: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224,
-+		crypto.SHA256: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256,
-+		crypto.SHA384: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384,
-+		crypto.SHA512: C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512,
-+	}
-+	rsaOAEPAlgorithms = map[crypto.Hash]C.CFStringRef{
-+		crypto.SHA1:   C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1,
-+		crypto.SHA224: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224,
-+		crypto.SHA256: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256,
-+		crypto.SHA384: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384,
-+		crypto.SHA512: C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512,
-+	}
-+)
-+
 +type withKeyFunc func(func(C.SecKeyRef) C.int) C.int
 +
 +// Encrypt encrypts a plaintext message using a given key and algorithm.
@@ -9594,15 +13558,13 @@ index 00000000000000..fcdce4c49b6723
 +// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
 +func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
 +	switch hash.(type) {
-+	case *sha1Hash:
++	case *cryptokit.SHA1Hash:
 +		return crypto.SHA1, nil
-+	case *sha224Hash:
-+		return crypto.SHA224, nil
-+	case *sha256Hash:
++	case *cryptokit.SHA256Hash:
 +		return crypto.SHA256, nil
-+	case *sha384Hash:
++	case *cryptokit.SHA384Hash:
 +		return crypto.SHA384, nil
-+	case *sha512Hash:
++	case *cryptokit.SHA512Hash:
 +		return crypto.SHA512, nil
 +	default:
 +		return 0, errors.New("unsupported hash function")
@@ -9611,30 +13573,65 @@ index 00000000000000..fcdce4c49b6723
 +
 +// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
 +func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (C.CFStringRef, error) {
-+	var algorithmMap map[crypto.Hash]C.CFStringRef
++	var algo C.CFStringRef
 +	switch algorithmType {
 +	case algorithmTypePSS:
-+		algorithmMap = rsaPSSAlgorithms
++		switch hash {
++		case crypto.SHA1:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++		case crypto.SHA224:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++		case crypto.SHA256:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++		case crypto.SHA384:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++		case crypto.SHA512:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++		default:
++			return 0, errors.New("unsupported PSS hash: " + hash.String())
++		}
 +	case algorithmTypeRAW:
-+		algorithmMap = rsaRaw
++		algo = C.kSecKeyAlgorithmRSAEncryptionRaw
 +	case algorithmTypePKCS1v15Enc:
 +		return C.kSecKeyAlgorithmRSAEncryptionPKCS1, nil
 +	case algorithmTypePKCS1v15Sig:
-+		algorithmMap = rsaPKCS1v15Algorithms
++		switch hash {
++		case crypto.SHA1:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++		case crypto.SHA224:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++		case crypto.SHA256:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++		case crypto.SHA384:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++		case crypto.SHA512:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++		case 0:
++			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++		default:
++			return 0, errors.New("unsupported PKCS1v15 hash: " + hash.String())
++		}
 +	case algorithmTypeOAEP:
-+		algorithmMap = rsaOAEPAlgorithms
++		switch hash {
++		case crypto.SHA1:
++			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++		case crypto.SHA224:
++			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++		case crypto.SHA256:
++			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++		case crypto.SHA384:
++			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++		case crypto.SHA512:
++			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++		default:
++			return 0, errors.New("unsupported OAEP hash: " + hash.String())
++		}
 +	case algorithmTypeECDSA:
 +		return C.kSecKeyAlgorithmECDSASignatureDigestX962, nil
 +	default:
-+		return 0, errors.New("unsupported algorithm type")
++		return 0, errors.New("unsupported algorithm type: " + strconv.Itoa(int(algorithmType)))
 +	}
-+
-+	algorithm, ok := algorithmMap[hash]
-+	if !ok {
-+		return 0, errors.New("unsupported combination of algorithm type and hash")
-+	}
-+
-+	return algorithm, nil
++	return algo, nil
 +}
 +
 +// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
@@ -9666,482 +13663,147 @@ index 00000000000000..fcdce4c49b6723
 +		C.CFTypeRef(C.kSecAttrKeyClass),
 +	}
 +
-+	attrValues := []C.CFTypeRef{
-+		C.CFTypeRef(keyType),
-+		C.CFTypeRef(keyClass),
-+	}
-+
-+	// Create attributes dictionary for the key
-+	attrDict := C.CFDictionaryCreate(
-+		C.kCFAllocatorDefault,
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
-+		C.CFIndex(len(attrKeys)),
-+		nil,
-+		nil,
-+	)
-+	if attrDict == 0 {
-+		return 0, errors.New("xcrypto: failed to create attributes dictionary")
-+	}
-+	defer C.CFRelease(C.CFTypeRef(attrDict))
-+
-+	// Generate the SecKey
-+	var errorRef C.CFErrorRef
-+	key := C.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return 0, err
-+	}
-+	return key, nil
-+}
-+
-+// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
-+func createSecKeyRandom(keyType C.CFStringRef, keySize int) ([]byte, C.SecKeyRef, error) {
-+	keyAttrs := C.CFDictionaryCreateMutable(C.kCFAllocatorDefault, 0, nil, nil)
-+	if keyAttrs == 0 {
-+		return nil, 0, errors.New("failed to create key attributes dictionary")
-+	}
-+	defer C.CFRelease(C.CFTypeRef(keyAttrs))
-+
-+	C.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(C.kSecAttrKeyType),
-+		unsafe.Pointer(keyType),
-+	)
-+
-+	C.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(C.kSecAttrKeySizeInBits),
-+		unsafe.Pointer(C.CFNumberCreate(C.kCFAllocatorDefault, C.kCFNumberIntType, unsafe.Pointer(&keySize))),
-+	)
-+
-+	// Generate the private key
-+	var errorRef C.CFErrorRef
-+	var privKeyRef C.SecKeyRef = C.SecKeyCreateRandomKey(C.CFDictionaryRef(keyAttrs), &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, 0, err
-+	}
-+
-+	// Export the private key as DER
-+	privData := C.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, 0, err
-+	}
-+	defer C.CFRelease(C.CFTypeRef(privData))
-+
-+	privKeyDER := cfDataToBytes(privData)
-+	if privKeyDER == nil {
-+		return nil, 0, errors.New("failed to convert CFData to bytes")
-+	}
-+	return privKeyDER, privKeyRef, nil
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-new file mode 100644
-index 00000000000000..94442fde5def16
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,403 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build darwin
-+
-+package xcrypto
-+
-+// #include <CommonCrypto/CommonCrypto.h>
-+import "C"
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
-+	"runtime"
-+	"unsafe"
-+)
-+
-+// NOTE: Implementation ported from https://go-review.googlesource.com/c/go/+/404295.
-+// The cgo calls in this file are arranged to avoid marking the parameters as escaping.
-+// To do that, we call noescape (including via addr).
-+// We must also make sure that the data pointer arguments have the form unsafe.Pointer(&...)
-+// so that cgo does not annotate them with cgoCheckPointer calls. If it did that, it might look
-+// beyond the byte slice and find Go pointers in unprocessed parts of a larger allocation.
-+// To do both of these simultaneously, the idiom is unsafe.Pointer(&*addr(p)),
-+// where addr returns the base pointer of p, substituting a non-nil pointer for nil,
-+// and applying a noescape along the way.
-+// This is all to preserve compatibility with the allocation behavior of the non-commoncrypto implementations.
-+
-+// SupportsHash returns true if a hash.Hash implementation is supported for h.
-+func SupportsHash(h crypto.Hash) bool {
-+	switch h {
-+	case crypto.MD4, crypto.MD5, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
-+		return true
-+	default:
-+		return false
-+	}
-+}
-+
-+func MD4(p []byte) (sum [16]byte) {
-+	result := C.CC_MD4(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: MD4 failed")
-+	}
-+	return
-+}
-+
-+func MD5(p []byte) (sum [16]byte) {
-+	result := C.CC_MD5(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: MD5 failed")
-+	}
-+	return
-+}
-+
-+func SHA1(p []byte) (sum [20]byte) {
-+	result := C.CC_SHA1(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: SHA1 failed")
-+	}
-+	return
-+}
-+
-+func SHA224(p []byte) (sum [28]byte) {
-+	result := C.CC_SHA224(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: SHA224 failed")
-+	}
-+	return
-+}
-+
-+func SHA256(p []byte) (sum [32]byte) {
-+	result := C.CC_SHA256(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: SHA256 failed")
-+	}
-+	return
-+}
-+
-+func SHA384(p []byte) (sum [48]byte) {
-+	result := C.CC_SHA384(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: SHA384 failed")
-+	}
-+	return
-+}
-+
-+func SHA512(p []byte) (sum [64]byte) {
-+	result := C.CC_SHA512(unsafe.Pointer(&*addr(p)), C.CC_LONG(len(p)), (*C.uchar)(&*addr(sum[:])))
-+	if result == nil {
-+		panic("commoncrypto: SHA512 failed")
-+	}
-+	return
-+}
-+
-+// cloneHash is an interface that defines a Clone method.
-+//
-+// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
-+// but we need it now.
-+type cloneHash interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() hash.Hash
-+}
-+
-+var _ hash.Hash = (*evpHash)(nil)
-+var _ cloneHash = (*evpHash)(nil)
-+
-+// evpHash implements generic hash methods.
-+type evpHash struct {
-+	ctx unsafe.Pointer
-+	// ctx2 is used in evpHash.sum to avoid changing
-+	// the state of ctx. Having it here allows reusing the
-+	// same allocated object multiple times.
-+	ctx2      unsafe.Pointer
-+	init      func(ctx unsafe.Pointer) C.int
-+	update    func(ctx unsafe.Pointer, data []byte) C.int
-+	final     func(ctx unsafe.Pointer, digest []byte) C.int
-+	blockSize int
-+	size      int
-+	ctxSize   int
-+}
-+
-+func newEvpHash(init func(ctx unsafe.Pointer) C.int, update func(ctx unsafe.Pointer, data []byte) C.int, final func(ctx unsafe.Pointer, digest []byte) C.int, ctxSize, blockSize, size int) *evpHash {
-+	h := &evpHash{
-+		init:      init,
-+		update:    update,
-+		final:     final,
-+		blockSize: blockSize,
-+		size:      size,
-+		ctxSize:   ctxSize,
-+	}
-+	runtime.SetFinalizer(h, (*evpHash).finalize)
-+	return h
-+}
-+
-+func (h *evpHash) finalize() {
-+	if h.ctx != nil {
-+		C.free(h.ctx)
++	attrValues := []C.CFTypeRef{
++		C.CFTypeRef(keyType),
++		C.CFTypeRef(keyClass),
 +	}
-+	if h.ctx2 != nil {
-+		C.free(h.ctx2)
++
++	// Create attributes dictionary for the key
++	attrDict := C.CFDictionaryCreate(
++		C.kCFAllocatorDefault,
++		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
++		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
++		C.CFIndex(len(attrKeys)),
++		nil,
++		nil,
++	)
++	if attrDict == 0 {
++		return 0, errors.New("xcrypto: failed to create attributes dictionary")
 +	}
-+}
++	defer C.CFRelease(C.CFTypeRef(attrDict))
 +
-+func (h *evpHash) initialize() {
-+	if h.ctx == nil {
-+		h.ctx = C.malloc(C.size_t(h.ctxSize))
-+		h.ctx2 = C.malloc(C.size_t(h.ctxSize))
-+		if h.init(h.ctx) != 1 {
-+			C.free(h.ctx)
-+			C.free(h.ctx2)
-+			panic("commoncrypto: initialization failed")
-+		}
++	// Generate the SecKey
++	var errorRef C.CFErrorRef
++	key := C.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return 0, err
 +	}
++	return key, nil
 +}
 +
-+func (h *evpHash) Reset() {
-+	if h.ctx == nil {
-+		// The hash is not initialized yet, no need to reset.
-+		return
++// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
++func createSecKeyRandom(keyType C.CFStringRef, keySize int) ([]byte, C.SecKeyRef, error) {
++	keyAttrs := C.CFDictionaryCreateMutable(C.kCFAllocatorDefault, 0, nil, nil)
++	if keyAttrs == 0 {
++		return nil, 0, errors.New("failed to create key attributes dictionary")
 +	}
-+	// There is no need to reset h.ctx2 because it is always reset after
-+	// use in evpHash.sum.
-+	h.init(h.ctx)
-+	runtime.KeepAlive(h)
-+}
++	defer C.CFRelease(C.CFTypeRef(keyAttrs))
 +
-+func (h *evpHash) Write(p []byte) (int, error) {
-+	h.initialize()
-+	if len(p) > 0 {
-+		// Use a local variable to prevent the compiler from misinterpreting the pointer
-+		data := p
-+		if h.update(h.ctx, data) != 1 {
-+			return 0, errors.New("commoncrypto: Update function failed")
-+		}
++	C.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(C.kSecAttrKeyType),
++		unsafe.Pointer(keyType),
++	)
++
++	C.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(C.kSecAttrKeySizeInBits),
++		unsafe.Pointer(C.CFNumberCreate(C.kCFAllocatorDefault, C.kCFNumberIntType, unsafe.Pointer(&keySize))),
++	)
++
++	// Generate the private key
++	var errorRef C.CFErrorRef
++	var privKeyRef C.SecKeyRef = C.SecKeyCreateRandomKey(C.CFDictionaryRef(keyAttrs), &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, 0, err
 +	}
-+	runtime.KeepAlive(h) // Ensure the hash object is not garbage-collected
-+	return len(p), nil
-+}
 +
-+func (h *evpHash) WriteString(s string) (int, error) {
-+	h.initialize()
-+	if len(s) > 0 {
-+		data := []byte(s)
-+		if h.update(h.ctx, data) != 1 {
-+			return 0, errors.New("commoncrypto: Update function failed")
-+		}
++	// Export the private key as DER
++	privData := C.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, 0, err
 +	}
-+	runtime.KeepAlive(h)
-+	return len(s), nil
-+}
++	defer C.CFRelease(C.CFTypeRef(privData))
 +
-+func (h *evpHash) WriteByte(c byte) error {
-+	h.initialize()
-+	if h.update(h.ctx, []byte{c}) != 1 {
-+		return errors.New("commoncrypto: Update function failed")
++	privKeyDER := cfDataToBytes(privData)
++	if privKeyDER == nil {
++		return nil, 0, errors.New("failed to convert CFData to bytes")
 +	}
-+	runtime.KeepAlive(h)
-+	return nil
-+}
-+func (h *evpHash) Size() int {
-+	return h.size
++	return privKeyDER, privKeyRef, nil
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+new file mode 100644
+index 00000000000000..b03a3ca13bdc7f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+@@ -0,0 +1,68 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (h *evpHash) BlockSize() int {
-+	return h.blockSize
-+}
++//go:build darwin && cgo
 +
-+func (h *evpHash) Sum(b []byte) []byte {
-+	h.initialize()
-+	digest := make([]byte, h.size)
-+	C.memcpy(h.ctx2, h.ctx, C.size_t(h.ctxSize))
-+	h.final(h.ctx2, digest)
-+	return append(b, digest...)
-+}
++package xcrypto
 +
-+func (h *evpHash) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("xcrypto: hash state is not marshallable")
-+}
++import (
++	"crypto"
++	"hash"
 +
-+func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("xcrypto: hash state is not marshallable")
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++// SupportsHash returns true if a hash.Hash implementation is supported for h.
++func SupportsHash(h crypto.Hash) bool {
++	switch h {
++	case crypto.MD5, crypto.SHA1, crypto.SHA256, crypto.SHA384, crypto.SHA512:
++		return true
++	default:
++		return false
++	}
 +}
 +
-+func (h *evpHash) UnmarshalBinary(data []byte) error {
-+	return errors.New("xcrypto: hash state is not marshallable")
++func MD5(p []byte) (sum [16]byte) {
++	return cryptokit.MD5(p)
 +}
 +
-+// Clone returns a new evpHash object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *evpHash) Clone() hash.Hash {
-+	h.initialize()
-+	cloned := &evpHash{
-+		init:      h.init,
-+		update:    h.update,
-+		final:     h.final,
-+		blockSize: h.blockSize,
-+		size:      h.size,
-+		ctxSize:   h.ctxSize,
-+	}
-+	cloned.ctx = C.malloc(C.size_t(h.ctxSize))
-+	cloned.ctx2 = C.malloc(C.size_t(h.ctxSize))
-+	C.memcpy(cloned.ctx, h.ctx, C.size_t(h.ctxSize))
-+	C.memcpy(cloned.ctx2, h.ctx2, C.size_t(h.ctxSize))
-+	runtime.SetFinalizer(cloned, (*evpHash).finalize)
-+	runtime.KeepAlive(h)
-+	return cloned
++func SHA1(p []byte) (sum [20]byte) {
++	return cryptokit.SHA1(p)
 +}
 +
-+type md4Hash struct {
-+	*evpHash
++func SHA256(p []byte) (sum [32]byte) {
++	return cryptokit.SHA256(p)
 +}
 +
-+// NewMD4 initializes a new MD4 hasher.
-+func NewMD4() hash.Hash {
-+	return &md4Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_MD4_Init((*C.CC_MD4_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_MD4_Update((*C.CC_MD4_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_MD4_Final(base(digest), (*C.CC_MD4_CTX)(ctx))
-+			},
-+			C.sizeof_CC_MD4_CTX,
-+			C.CC_MD4_BLOCK_BYTES,
-+			C.CC_MD4_DIGEST_LENGTH,
-+		),
-+	}
++func SHA384(p []byte) (sum [48]byte) {
++	return cryptokit.SHA384(p)
 +}
 +
-+type md5Hash struct {
-+	*evpHash
++func SHA512(p []byte) (sum [64]byte) {
++	return cryptokit.SHA512(p)
 +}
 +
 +// NewMD5 initializes a new MD5 hasher.
 +func NewMD5() hash.Hash {
-+	return &md5Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_MD5_Init((*C.CC_MD5_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_MD5_Update((*C.CC_MD5_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_MD5_Final(base(digest), (*C.CC_MD5_CTX)(ctx))
-+			},
-+			C.sizeof_CC_MD5_CTX,
-+			C.CC_MD5_BLOCK_BYTES,
-+			C.CC_MD5_DIGEST_LENGTH,
-+		),
-+	}
-+}
-+
-+type sha1Hash struct {
-+	*evpHash
++	return cryptokit.NewMD5()
 +}
 +
 +// NewSHA1 initializes a new SHA1 hasher.
 +func NewSHA1() hash.Hash {
-+	return &sha1Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_SHA1_Init((*C.CC_SHA1_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_SHA1_Update((*C.CC_SHA1_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_SHA1_Final(base(digest), (*C.CC_SHA1_CTX)(ctx))
-+			},
-+			C.sizeof_CC_SHA1_CTX,
-+			C.CC_SHA1_BLOCK_BYTES,
-+			C.CC_SHA1_DIGEST_LENGTH,
-+		),
-+	}
-+}
-+
-+type sha224Hash struct {
-+	*evpHash
-+}
-+
-+// NewSHA224 initializes a new SHA224 hasher.
-+func NewSHA224() hash.Hash {
-+	return &sha224Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_SHA224_Init((*C.CC_SHA256_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_SHA224_Update((*C.CC_SHA256_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_SHA224_Final(base(digest), (*C.CC_SHA256_CTX)(ctx))
-+			},
-+			C.sizeof_CC_SHA256_CTX,
-+			C.CC_SHA224_BLOCK_BYTES,
-+			C.CC_SHA224_DIGEST_LENGTH,
-+		),
-+	}
-+}
-+
-+type sha256Hash struct {
-+	*evpHash
++	return cryptokit.NewSHA1()
 +}
 +
 +// NewSHA256 initializes a new SHA256 hasher.
 +func NewSHA256() hash.Hash {
-+	return &sha256Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_SHA256_Init((*C.CC_SHA256_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_SHA256_Update((*C.CC_SHA256_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_SHA256_Final(base(digest), (*C.CC_SHA256_CTX)(ctx))
-+			},
-+			C.sizeof_CC_SHA256_CTX,
-+			C.CC_SHA256_BLOCK_BYTES,
-+			C.CC_SHA256_DIGEST_LENGTH,
-+		),
-+	}
-+}
-+
-+type sha384Hash struct {
-+	*evpHash
++	return cryptokit.NewSHA256()
 +}
 +
 +// NewSHA384 initializes a new SHA384 hasher.
 +func NewSHA384() hash.Hash {
-+	return &sha384Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_SHA384_Init((*C.CC_SHA512_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_SHA384_Update((*C.CC_SHA512_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_SHA384_Final(base(digest), (*C.CC_SHA512_CTX)(ctx))
-+			},
-+			C.sizeof_CC_SHA512_CTX,
-+			C.CC_SHA384_BLOCK_BYTES,
-+			C.CC_SHA384_DIGEST_LENGTH,
-+		),
-+	}
-+}
-+
-+type sha512Hash struct {
-+	*evpHash
++	return cryptokit.NewSHA384()
 +}
 +
 +// NewSHA512 initializes a new SHA512 hasher.
 +func NewSHA512() hash.Hash {
-+	return &sha512Hash{
-+		evpHash: newEvpHash(
-+			func(ctx unsafe.Pointer) C.int { return C.CC_SHA512_Init((*C.CC_SHA512_CTX)(ctx)) },
-+			func(ctx unsafe.Pointer, data []byte) C.int {
-+				return C.CC_SHA512_Update((*C.CC_SHA512_CTX)(ctx), unsafe.Pointer(&*addr(data)), C.CC_LONG(len(data)))
-+			},
-+			func(ctx unsafe.Pointer, digest []byte) C.int {
-+				return C.CC_SHA512_Final(base(digest), (*C.CC_SHA512_CTX)(ctx))
-+			},
-+			C.sizeof_CC_SHA512_CTX,
-+			C.CC_SHA512_BLOCK_BYTES,
-+			C.CC_SHA512_DIGEST_LENGTH,
-+		),
-+	}
++	return cryptokit.NewSHA512()
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
 new file mode 100644
@@ -10217,10 +13879,10 @@ index 00000000000000..3cc2d5d31927e0
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
 new file mode 100644
-index 00000000000000..1b22b0a331f825
+index 00000000000000..ceb33c5cf99ca2
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
-@@ -0,0 +1,113 @@
+@@ -0,0 +1,21 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -10228,115 +13890,23 @@ index 00000000000000..1b22b0a331f825
 +
 +package xcrypto
 +
-+// #include <CommonCrypto/CommonCrypto.h>
 +import "C"
 +import (
-+	"errors"
 +	"hash"
-+	"runtime"
-+	"slices"
-+	"unsafe"
-+)
 +
-+// commonCryptoHMAC encapsulates an HMAC using xcrypto.
-+type commonCryptoHMAC struct {
-+	ctx       C.CCHmacContext
-+	alg       C.CCAlgorithm
-+	key       []byte
-+	output    []byte
-+	size      int
-+	blockSize int
-+}
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
 +
 +// NewHMAC returns a new HMAC using xcrypto.
 +// The function h must return a hash implemented by
 +// CommonCrypto (for example, h could be xcrypto.NewSHA256).
 +// If h is not recognized, NewHMAC returns nil.
 +func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
-+	h := fh()
-+	ccDigest, err := hashToCCDigestHMAC(h)
-+	if err != nil {
-+		return nil // Unsupported hash function.
-+	}
-+
-+	// Handle empty key case to match CommonCrypto's behavior.
-+	if len(key) == 0 {
-+		key = make([]byte, C.CC_SHA512_DIGEST_LENGTH)
-+	} else {
-+		key = slices.Clone(key)
-+	}
-+
-+	hmac := &commonCryptoHMAC{
-+		alg:       ccDigest,
-+		key:       key,
-+		size:      h.Size(),
-+		blockSize: h.BlockSize(),
-+	}
-+
-+	// Initialize the HMAC context with xcrypto.
-+	C.CCHmacInit(&hmac.ctx, hmac.alg, pbase(hmac.key), C.size_t(len(hmac.key)))
-+	return hmac
-+}
-+
-+// Write adds more data to the running HMAC hash.
-+func (h *commonCryptoHMAC) Write(p []byte) (int, error) {
-+	if len(p) > 0 {
-+		C.CCHmacUpdate(&h.ctx, unsafe.Pointer(&*addr(p)), C.size_t(len(p)))
-+	}
-+	runtime.KeepAlive(h)
-+	return len(p), nil
-+}
-+
-+// Sum appends the current HMAC of the data to `in`.
-+func (h *commonCryptoHMAC) Sum(in []byte) []byte {
-+	if h.output == nil {
-+		h.output = make([]byte, h.size)
-+	}
-+	// Copy the context to preserve it for further operations after Sum is called.
-+	hmacCtxCopy := h.ctx
-+	C.CCHmacFinal(&hmacCtxCopy, pbase(h.output))
-+	return append(in, h.output...)
-+}
-+
-+// Reset resets the HMAC state to initial values.
-+func (h *commonCryptoHMAC) Reset() {
-+	// Re-initialize the HMAC context with the stored key and algorithm.
-+	C.CCHmacInit(&h.ctx, h.alg, pbase(h.key), C.size_t(len(h.key)))
-+	runtime.KeepAlive(h)
-+}
-+
-+// Size returns the size of the HMAC output.
-+func (h commonCryptoHMAC) Size() int {
-+	return h.size
-+}
-+
-+// BlockSize returns the block size of the underlying hash function.
-+func (h commonCryptoHMAC) BlockSize() int {
-+	return h.blockSize
-+}
-+
-+// Mapping Go hash functions to CommonCrypto hash constants
-+func hashToCCDigestHMAC(hash hash.Hash) (C.CCAlgorithm, error) {
-+	switch hash.(type) {
-+	case *md5Hash:
-+		return C.kCCHmacAlgMD5, nil
-+	case *sha1Hash:
-+		return C.kCCHmacAlgSHA1, nil
-+	case *sha224Hash:
-+		return C.kCCHmacAlgSHA224, nil
-+	case *sha256Hash:
-+		return C.kCCHmacAlgSHA256, nil
-+	case *sha384Hash:
-+		return C.kCCHmacAlgSHA384, nil
-+	case *sha512Hash:
-+		return C.kCCHmacAlgSHA512, nil
-+	default:
-+		return 0, errors.New("unsupported hash function")
-+	}
++	return cryptokit.NewHMAC(fh, key)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
-index 00000000000000..e49dc1c0de3cef
+index 00000000000000..f29d30e599117c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 @@ -0,0 +1,65 @@
@@ -10353,6 +13923,8 @@ index 00000000000000..e49dc1c0de3cef
 +	"errors"
 +	"hash"
 +	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
 +func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
@@ -10391,15 +13963,13 @@ index 00000000000000..e49dc1c0de3cef
 +// Mapping Go hash functions to CommonCrypto hash constants
 +func hashToCCDigestPBKDF2(hash hash.Hash) (C.CCAlgorithm, error) {
 +	switch hash.(type) {
-+	case *sha1Hash:
++	case *cryptokit.SHA1Hash:
 +		return C.kCCPRFHmacAlgSHA1, nil
-+	case *sha224Hash:
-+		return C.kCCPRFHmacAlgSHA224, nil
-+	case *sha256Hash:
++	case *cryptokit.SHA256Hash:
 +		return C.kCCPRFHmacAlgSHA256, nil
-+	case *sha384Hash:
++	case *cryptokit.SHA384Hash:
 +		return C.kCCPRFHmacAlgSHA384, nil
-+	case *sha512Hash:
++	case *cryptokit.SHA512Hash:
 +		return C.kCCPRFHmacAlgSHA512, nil
 +	default:
 +		return 0, errors.New("unsupported hash function")
@@ -10439,7 +14009,7 @@ index 00000000000000..e58c0b3b19a68b
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
 new file mode 100644
-index 00000000000000..415889c4f1bdd2
+index 00000000000000..e30a9e10ae3730
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
 @@ -0,0 +1,83 @@
@@ -10514,8 +14084,8 @@ index 00000000000000..415889c4f1bdd2
 +	var outLen C.size_t
 +	status := C.CCCryptorUpdate(
 +		c.ctx,
-+		unsafe.Pointer(&*addr(src)), C.size_t(len(src)), // Input
-+		unsafe.Pointer(&*addr(dst)), C.size_t(len(dst)), // Output
++		unsafe.Pointer(&*addrNeverEmpty(src)), C.size_t(len(src)), // Input
++		unsafe.Pointer(&*addrNeverEmpty(dst)), C.size_t(len(dst)), // Output
 +		&outLen,
 +	)
 +	if status != C.kCCSuccess {
@@ -10728,10 +14298,10 @@ index 00000000000000..63df684569e671
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
 new file mode 100644
-index 00000000000000..9451d05599f3a8
+index 00000000000000..d6b428e7ebb68b
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
-@@ -0,0 +1,59 @@
+@@ -0,0 +1,49 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -10740,56 +14310,46 @@ index 00000000000000..9451d05599f3a8
 +package xcrypto
 +
 +// #cgo CFLAGS: -Wno-deprecated-declarations
++// #cgo LDFLAGS: -framework Security -framework CoreFoundation
 +import "C"
 +import "unsafe"
 +
-+// noescape hides a pointer from escape analysis. noescape is
-+// the identity function but escape analysis doesn't think the
-+// output depends on the input. noescape is inlined and currently
-+// compiles down to zero instructions.
-+// USE CAREFULLY!
-+//
-+//go:nosplit
-+func noescape(p unsafe.Pointer) unsafe.Pointer {
-+	x := uintptr(p)
-+	return unsafe.Pointer(x ^ 0)
-+}
-+
 +var zero byte
 +
-+// addr converts p to its base addr, including a noescape along the way.
-+// If p is nil, addr returns a non-nil pointer, so that the result can always
-+// be dereferenced.
-+//
-+//go:nosplit
-+func addr(p []byte) *byte {
-+	if len(p) == 0 {
-+		return &zero
-+	}
-+	return (*byte)(noescape(unsafe.Pointer(&p[0])))
-+}
-+
 +// base returns the address of the underlying array in b,
 +// being careful not to panic when b has zero length.
 +func base(b []byte) *C.uchar {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*C.uchar)(unsafe.Pointer(&b[0]))
++	return (*C.uchar)(unsafe.Pointer(addr(b)))
 +}
 +
 +func sbase(b []byte) *C.char {
++	return (*C.char)(unsafe.Pointer(addr(b)))
++}
++
++func pbase(b []byte) unsafe.Pointer {
++	return unsafe.Pointer(addr(b))
++}
++
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++// If b is empty, it returns a pointer to a zero byte
++// so that it can always be dereferenced.
++func addr(b []byte) *byte {
 +	if len(b) == 0 {
-+		return nil
++		return &zero
 +	}
-+	return (*C.char)(unsafe.Pointer(&b[0]))
++	return unsafe.SliceData(b)
 +}
 +
-+func pbase(b []byte) unsafe.Pointer {
++// addrNeverEmpty returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++// If b is empty, it returns a pointer to a zero byte
++// so that it can always be dereferenced.
++func addrNeverEmpty(b []byte) *byte {
 +	if len(b) == 0 {
-+		return nil
++		return &zero
 +	}
-+	return unsafe.Pointer(&b[0])
++	return unsafe.SliceData(b)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE b/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
 new file mode 100644
@@ -12837,10 +16397,10 @@ index 00000000000000..b97e638e4a98ed
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
-index 00000000000000..20bcc79a46ba0d
+index 00000000000000..2647c6bc06cd57
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -0,0 +1,124 @@
+@@ -0,0 +1,128 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -12850,7 +16410,6 @@ index 00000000000000..20bcc79a46ba0d
 +package cng
 +
 +import (
-+	"encoding/binary"
 +	"errors"
 +	"hash"
 +	"runtime"
@@ -12926,7 +16485,7 @@ index 00000000000000..20bcc79a46ba0d
 +	if len(blob) < 4 {
 +		return nil, errors.New("cng: exported key is corrupted")
 +	}
-+	cbHashName := binary.BigEndian.Uint32(blob)
++	cbHashName := bigEndianUint32(blob)
 +	blob = blob[4:]
 +	if len(blob) < int(cbHashName) {
 +		return nil, errors.New("cng: exported key is corrupted")
@@ -12965,6 +16524,11 @@ index 00000000000000..20bcc79a46ba0d
 +	}
 +	return out, err
 +}
++
++func bigEndianUint32(b []byte) uint32 {
++	_ = b[3] // bounds check hint to compiler; see golang.org/issue/14808
++	return uint32(b[3]) | uint32(b[2])<<8 | uint32(b[1])<<16 | uint32(b[0])<<24
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
 index 00000000000000..2d9fd36ce7252e
@@ -15170,20 +18734,21 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 6eaae03de31d05..e2c997ee84ab0d 100644
+index 6eaae03de31d05..efdc01d1d9cfe5 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,19 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250115103809-bf655f6d08d6
+@@ -1,3 +1,20 @@
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250116101429-467bd63a2d67
++github.com/golang-fips/openssl/v2/internal/ossl
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250211154640-f49c8e1379ea
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 6a8204ef276..24653615be2 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -1246,7 +1246,7 @@ index 00000000000000..9436b00381aaf8
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..2250852ada8cc8
+index 00000000000000..e09524cd430125
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
 @@ -0,0 +1,359 @@
@@ -1312,14 +1312,14 @@ index 00000000000000..2250852ada8cc8
 +
 +func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
 +func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
-+func NewSHA224() hash.Hash { return xcrypto.NewSHA224() }
++func NewSHA224() hash.Hash { panic("cryptobackend: not available") }
 +func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
 +func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
 +func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
 +
 +func MD5(p []byte) (sum [16]byte)        { return xcrypto.MD5(p) }
 +func SHA1(p []byte) (sum [20]byte)       { return xcrypto.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return xcrypto.SHA224(p) }
++func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
 +func SHA256(p []byte) (sum [32]byte)     { return xcrypto.SHA256(p) }
 +func SHA384(p []byte) (sum [48]byte)     { return xcrypto.SHA384(p) }
 +func SHA512(p []byte) (sum [64]byte)     { return xcrypto.SHA512(p) }
@@ -2672,7 +2672,7 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 065ddf6ab67c9a..1889403cac91e0 100644
+index fd1ee4f0e36bce..9881eab7c523a2 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -515,6 +515,11 @@ var depsRules = `
@@ -2763,7 +2763,7 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 4d0fbdffd44957..12ff4499f3be50 100644
+index 33110d172fc009..1791c684524e08 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -78,6 +78,14 @@ type Flags struct {
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b46f05bd870..60eaeb39bc6 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -12,7 +12,7 @@ Subject: [PATCH] Use crypto backends
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
- src/cmd/link/internal/ld/lib.go               |   1 +
+ src/cmd/link/internal/ld/lib.go               |   2 +
  src/cmd/link/internal/ld/main.go              |  12 +-
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/aes/aes_test.go                    |   2 +-
@@ -89,7 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1095 insertions(+), 89 deletions(-)
+ 85 files changed, 1096 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -115,7 +115,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 4fcc508f8ed48e..eb5ef7df6eaca1 100644
+index 596036fce9f7f1..3e4b8d9e5e3903 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1534,6 +1534,19 @@ func cmdbootstrap() {
@@ -276,13 +276,14 @@ index b2d4ad7cb0e7f6..2859879041ff8f 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 7f22b6ba1c5bf0..c78af6f054293f 100644
+index 7f22b6ba1c5bf0..6d9c27f5537700 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1176,6 +1176,7 @@ var hostobj []Hostobj
+@@ -1176,6 +1176,8 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
++	"vendor/github.com/golang-fips/openssl/v2/internal/ossl",
 +	"vendor/github.com/golang-fips/openssl/v2",
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",
@@ -2698,10 +2699,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 70f0713b6359f8..01609e5e6a9d62 100644
+index af62328edf5eca..09c16fd2db0b58 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -520,7 +520,7 @@ var depsRules = `
+@@ -540,7 +540,7 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2710,7 +2711,7 @@ index 70f0713b6359f8..01609e5e6a9d62 100644
  
  	crypto, hash !< FIPS;
  
-@@ -565,6 +565,7 @@ var depsRules = `
+@@ -585,6 +585,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 479398e21c7f486303da77962c0e35f7b6c98c4e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 23 Apr 2025 16:06:36 +0000
Subject: [PATCH 297/887] Update submodule to latest master (f1ebad19):
 internal/goexperiment: add Green Tea GC goexperiment

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c0245b31fb1..f1ebad19bd3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c0245b31fb157590b69245f7dff27f0605b73138
+Subproject commit f1ebad19bd3fcaaed98e8652172a7e55c105de75

From bdfc5807654237a6784f9ba8aa227c0e3ae33e88 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 23 Apr 2025 17:56:55 +0100
Subject: [PATCH 298/887] fix:completely remove mariner2 and make it default OS

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 3 ---
 eng/pipeline/stages/run-stage.yml                | 4 ++--
 2 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index b53f3920bd1..570ea88199d 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -91,13 +91,10 @@ stages:
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { os: linux, arch: amd64, config: test, distro: mariner2 }
           - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 33d83c85552..e01e914c413 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -71,10 +71,10 @@ stages:
             ${{ if eq(parameters.builder.hostArch, 'amd64') }}:
               ${{ if eq(parameters.builder.distro, 'ubuntu') }}:
                 container: ubuntu2204
-              ${{ elseif eq(parameters.builder.distro, 'mariner2') }}:
-                container: mariner2
               ${{ elseif eq(parameters.builder.distro, 'azurelinux3') }}:
                 container: azurelinux3
+              ${{ else }}:
+                container: mariner2
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:
               ${{ if eq(parameters.builder.distro, 'mariner2') }}:
                 container: mariner2arm64

From 67e9c520c857270742befd99d3071e3f351502cf Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 23 Apr 2025 19:45:48 +0100
Subject: [PATCH 299/887] Create bug-report.yml (#1650)

* Create bug-report.yml

This will help us triage bugs more easily. Loosely based off the upstream Go template although I did add the platform question as I think it's useful for us

* Update bug-report.yml

* Update .github/ISSUE_TEMPLATE/bug-report.yml

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .github/ISSUE_TEMPLATE/bug-report.yml | 103 ++++++++++++++++++++++++++
 1 file changed, 103 insertions(+)
 create mode 100644 .github/ISSUE_TEMPLATE/bug-report.yml

diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml
new file mode 100644
index 00000000000..c42793e13e3
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug-report.yml
@@ -0,0 +1,103 @@
+# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/configuring-issue-templates-for-your-repository#creating-issue-forms
+# https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/syntax-for-githubs-form-schema
+name: Bugs
+description: Report a bug with the Microsoft build of Go
+title: "issue title"
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping us improve! 🙏 Please answer these questions and provide as much information as possible about your problem.
+
+  - type: input
+    id: go-version
+    attributes:
+      label: Microsoft build of Go version
+      description: |
+        What version of Go are you using (`go version`)?
+
+        Note: we only [support](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md) the two most recent major releases.
+      placeholder: ex. go version go1.24.1 darwin/arm64
+    validations:
+      required: true
+
+  - type: textarea
+    id: platform
+    attributes:
+      label: What is your operating system and platform?
+      description: Please add as much information here as possible. For example, if you have a problem related to platform-provided crypto (`systemcrypto`), your Linux distro+version or specific version of Windows may be necessary to reproduce it.
+      placeholder: e.g. "Ubuntu 24.04 on ARM64" or "Windows 10 2004 on x86-64"
+    validations:
+      required: true
+
+  - type: textarea
+    id: go-env
+    attributes:
+      label: "Output of `go env` in your module/workspace:"
+      placeholder: |
+        GO111MODULE=""
+        GOARCH="arm64"
+        GOBIN="/Users/gopher/go/bin"
+        GOCACHE="/Users/gopher/go/cache"
+        GOENV="/Users/gopher/Library/Application Support/go/env"
+        GOEXE=""
+        GOEXPERIMENT=""
+        GOFLAGS=""
+        GOHOSTARCH="arm64"
+        GOHOSTOS="darwin"
+        GOINSECURE=""
+        GOMODCACHE="/Users/gopher/go/pkg/mod"
+        GONOPROXY=""
+        GONOSUMDB=""
+        GOOS="darwin"
+        GOPATH="/Users/gopher/go"
+        GOPRIVATE=""
+        GOPROXY="https://proxy.golang.org,direct"
+        GOROOT="/usr/local/go"
+        GOSUMDB="sum.golang.org"
+        GOTMPDIR=""
+        GOTOOLDIR="/usr/local/go/pkg/tool/darwin_arm64"
+        GOVCS=""
+        GOVERSION="go1.20.7"
+        GCCGO="gccgo"
+        AR="ar"
+        CC="clang"
+        CXX="clang++"
+        CGO_ENABLED="1"
+        GOMOD="/dev/null"
+        GOWORK=""
+        CGO_CFLAGS="-O2 -g"
+        CGO_CPPFLAGS=""
+        CGO_CXXFLAGS="-O2 -g"
+        CGO_FFLAGS="-O2 -g"
+        CGO_LDFLAGS="-O2 -g"
+        PKG_CONFIG="pkg-config"
+        GOGCCFLAGS="-fPIC -arch arm64 -pthread -fno-caret-diagnostics -Qunused-arguments -fmessage-length=0 -fdebug-prefix-map=/var/folders/44/nbbyll_10jd0z8rj_qxm43740000gn/T/go-build2331607515=/tmp/go-build -gno-record-gcc-switches -fno-common"
+      render: shell
+    validations:
+      required: true
+
+  - type: textarea
+    id: what-did-you-do
+    attributes:
+      label: "What did you do?"
+      description: "If possible, provide a recipe for reproducing the error. A complete runnable program is good."
+    validations:
+      required: true
+
+  - type: textarea
+    id: actual-behavior
+    attributes:
+      label: "What did you see happen?"
+      description: Command invocations and their associated output, functions with their arguments and return results, full stacktraces for panics (upload a file if it is very long), etc. Prefer copying text output over using screenshots.
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected-behavior
+    attributes:
+      label: "What did you expect to see?"
+      description: Why is the current output incorrect, and any additional context we may need to understand the issue.
+    validations:
+      required: true

From ed2715e40c57c7c05f4eac24bba6d69669859f8d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 23 Apr 2025 16:08:22 -0700
Subject: [PATCH 300/887] build(deps): bump github/codeql-action from 3.28.14
 to 3.28.15 (#1622)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.14 to 3.28.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2...45775bd8235c68ba998cffa5171334d58593da47)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d3b7a0c4b80..0ad1a29127c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+        uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
         with:
           category: /language:go

From 41ef7ebfaa74081f0f94628f0d56a4f54d58582a Mon Sep 17 00:00:00 2001
From: Mert Akman <mertakman2012@gmail.com>
Date: Thu, 24 Apr 2025 17:57:36 +0100
Subject: [PATCH 301/887] fix:make mariner2arm64 default distro when no distro
 is specified (#1653)

---
 eng/pipeline/stages/run-stage.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index e01e914c413..a32d7d937d7 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -76,8 +76,7 @@ stages:
               ${{ else }}:
                 container: mariner2
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:
-              ${{ if eq(parameters.builder.distro, 'mariner2') }}:
-                container: mariner2arm64
+              container: mariner2arm64
 
         variables:
           - group: go-cmdscan-rules

From 1f5e531ecca937cb8dc1fe8e705038090b71d1e3 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Apr 2025 08:04:58 +0200
Subject: [PATCH 302/887] remove unnecessary hash from fips140 godebug (#1652)

---
 .../0003-Implement-crypto-internal-backend.patch   | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 24653615be2..fd3004c717b 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -1684,7 +1684,7 @@ index 00000000000000..ef5af5d956163e
 +}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
-index 00000000000000..72f7a1644deedd
+index 00000000000000..7e5dd9b1544940
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/fips140.go
 @@ -0,0 +1,63 @@
@@ -1699,7 +1699,7 @@ index 00000000000000..72f7a1644deedd
 +	"syscall"
 +)
 +
-+var fips140GODEBUG = godebug.New("#fips140")
++var fips140GODEBUG = godebug.New("fips140")
 +
 +// Enabled reports whether FIPS 140 mode is enabled by using GODEBUG, GOFIPS, GOLANG_FIPS,
 +// the 'requirefips' build tag, or any other platform-specific mechanism.
@@ -2672,10 +2672,10 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index fd1ee4f0e36bce..9881eab7c523a2 100644
+index 2adf8c897229cf..74d0bc1d6439a3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -515,6 +515,11 @@ var depsRules = `
+@@ -536,6 +536,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2687,7 +2687,7 @@ index fd1ee4f0e36bce..9881eab7c523a2 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -525,16 +530,28 @@ var depsRules = `
+@@ -546,16 +551,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2718,7 +2718,7 @@ index fd1ee4f0e36bce..9881eab7c523a2 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -558,8 +575,12 @@ var depsRules = `
+@@ -579,8 +596,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2763,7 +2763,7 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 33110d172fc009..1791c684524e08 100644
+index 6b4289503d57ae..12fba96b868c9e 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -78,6 +78,14 @@ type Flags struct {

From a7b7b6cd6549f4f032d862237a248773cdb76129 Mon Sep 17 00:00:00 2001
From: Nicholas Berlin <nicholas.berlin@elastic.co>
Date: Fri, 25 Apr 2025 08:23:13 -0400
Subject: [PATCH 303/887] Fix minor document typo

---
 eng/doc/DeveloperGuide.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/DeveloperGuide.md b/eng/doc/DeveloperGuide.md
index 65cae50fa63..3035b1dc90d 100644
--- a/eng/doc/DeveloperGuide.md
+++ b/eng/doc/DeveloperGuide.md
@@ -44,7 +44,7 @@ The [`git-go-patch`](https://github.com/microsoft/go-infra/tree/main/cmd/git-go-
 To install the `git-go-patch` command, run the following command:
 
 ```
-go install github.com/microsoft/go-infra/cmd/go-patch@latest
+go install github.com/microsoft/go-infra/cmd/git-go-patch@latest
 ```
 
 > [!NOTE]

From 2febd3523b461e8ce9d1a1e70de939b2fca1ac25 Mon Sep 17 00:00:00 2001
From: Nicholas Berlin <nicholas.berlin@elastic.co>
Date: Fri, 25 Apr 2025 08:23:52 -0400
Subject: [PATCH 304/887] Add TLS13-KDF support

- Update golang-fips to c494c21
- Use new functions in openssl backend
- Add stub functions for other backends
---
 patches/0002-Vendor-crypto-backends.patch     | 187 ++++++++++++++----
 ...03-Implement-crypto-internal-backend.patch |  80 ++++++--
 patches/0004-Use-crypto-backends.patch        |  25 ++-
 3 files changed, 223 insertions(+), 69 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 3310c4d46af..b8c5d5c4417 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -19,7 +19,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  603 +++++
- .../golang-fips/openssl/v2/const.go           |   87 +
+ .../golang-fips/openssl/v2/const.go           |   93 +
  .../github.com/golang-fips/openssl/v2/des.go  |  113 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  309 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |   67 +
@@ -27,9 +27,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
  .../golang-fips/openssl/v2/ed25519.go         |  229 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  552 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  715 ++++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  348 +++
- .../github.com/golang-fips/openssl/v2/hmac.go |  249 ++
+ .../github.com/golang-fips/openssl/v2/hash.go |  717 ++++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  444 ++++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  244 ++
  .../github.com/golang-fips/openssl/v2/init.go |  157 ++
  .../golang-fips/openssl/v2/init_unix.go       |   31 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
@@ -39,7 +39,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/zossl.c          | 2011 +++++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         | 1297 +++++++++++
  .../openssl/v2/internal/ossl/zossl.h          |  330 +++
- .../openssl/v2/internal/ossl/zossl_go124.go   |   33 +
+ .../openssl/v2/internal/ossl/zossl_go124.go   |   37 +
  .../golang-fips/openssl/v2/openssl.go         |  384 ++++
  .../golang-fips/openssl/v2/params.go          |  185 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   55 +
@@ -103,7 +103,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 97 files changed, 16912 insertions(+), 7 deletions(-)
+ 97 files changed, 17015 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -226,7 +226,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d7c0cfb6dd3cf8..243a6d1537030f 100644
+index d7c0cfb6dd3cf8..6d98327ccad050 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -235,17 +235,17 @@ index d7c0cfb6dd3cf8..243a6d1537030f 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 834044f135aba5..2550758ed18e51 100644
+index 834044f135aba5..d2c1817e26f50f 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9 h1:FWWd0Sc4BULEU4m18Qgl1YWUkcHVXNThIplVp06ERbk=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791 h1:5PZl6k34BcDxn4DT+f8GLx51OZBtmx22oQ01ygrbGt0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56 h1:rignn19hDdGfSVEtNeR0msL6wnkiqr61/VoB0i3zbSI=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40 h1:6K+qAlu0vRBqoZ938zEdZ0+jFDVVU+67ZzKOrvTsNSk=
@@ -1288,10 +1288,10 @@ index 00000000000000..2a3a91eb549a68
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..aa4a163aaab405
+index 00000000000000..e4aaf3bbe8a6dc
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,87 @@
+@@ -0,0 +1,93 @@
 +package openssl
 +
 +import "C"
@@ -1342,10 +1342,11 @@ index 00000000000000..aa4a163aaab405
 +	_DigestNameSHA2_256 cString = "SHA2-256\x00"
 +
 +	// KDF names
-+	_OSSL_KDF_NAME_HKDF     cString = "HKDF\x00"
-+	_OSSL_KDF_NAME_PBKDF2   cString = "PBKDF2\x00"
-+	_OSSL_KDF_NAME_TLS1_PRF cString = "TLS1-PRF\x00"
-+	_OSSL_MAC_NAME_HMAC     cString = "HMAC\x00"
++	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
++	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
++	_OSSL_KDF_NAME_TLS1_PRF	 cString = "TLS1-PRF\x00"
++	_OSSL_KDF_NAME_TLS13_KDF cString = "TLS13-KDF\x00"
++	_OSSL_MAC_NAME_HMAC      cString = "HMAC\x00"
 +
 +	// KDF parameters
 +	_OSSL_KDF_PARAM_DIGEST cString = "digest\x00"
@@ -1356,6 +1357,11 @@ index 00000000000000..aa4a163aaab405
 +	_OSSL_KDF_PARAM_SALT   cString = "salt\x00"
 +	_OSSL_KDF_PARAM_MODE   cString = "mode\x00"
 +
++	// TLS3-KDF parameters
++	_OSSL_KDF_PARAM_PREFIX cString = "prefix\x00"
++	_OSSL_KDF_PARAM_LABEL  cString = "label\x00"
++	_OSSL_KDF_PARAM_DATA   cString = "data\x00"
++
 +	// PKEY parameters
 +	_OSSL_PKEY_PARAM_PUB_KEY          cString = "pub\x00"
 +	_OSSL_PKEY_PARAM_PRIV_KEY         cString = "priv\x00"
@@ -3225,10 +3231,10 @@ index 00000000000000..20777c0728c7c1
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..d084fdf776696f
+index 00000000000000..033169bece66b8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,715 @@
+@@ -0,0 +1,717 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3480,6 +3486,7 @@ index 00000000000000..d084fdf776696f
 +	// the state of ctx. Having it here allows reusing the
 +	// same allocated object multiple times.
 +	ctx2 ossl.EVP_MD_CTX_PTR
++	out  [maxHashSize]byte
 +}
 +
 +func newEvpHash(ch crypto.Hash) *evpHash {
@@ -3582,12 +3589,13 @@ index 00000000000000..d084fdf776696f
 +
 +func (h *evpHash) Sum(in []byte) []byte {
 +	h.init()
-+	out := make([]byte, h.Size(), maxHashSize) // explicit cap to allow stack allocation
-+	if err := ossl.HashSum(h.ctx, h.ctx2, out); err != nil {
++	tmp := h.out[:h.Size()] // Create slice view
++	clear(tmp)
++	if err := ossl.HashSum(h.ctx, h.ctx2, tmp); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
-+	return append(in, out...)
++	return append(in, tmp...)
 +}
 +
 +// Clone returns a new evpHash object that is a deep clone of itself.
@@ -3946,10 +3954,10 @@ index 00000000000000..d084fdf776696f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..a0c5f112e09682
+index 00000000000000..e95268a352ebb9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,348 @@
+@@ -0,0 +1,444 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3979,6 +3987,20 @@ index 00000000000000..a0c5f112e09682
 +	}
 +}
 +
++// SupprtsTLS13KDF reports whether the current OpenSSL version supports TLS13-KDF.
++func SupportsTLS13KDF() bool {
++	switch vMajor {
++	case 1:
++		return false
++	case 3:
++		// TLS13-KDF is available in OpenSSL 3.0.0 and later.
++		_, err := fetchTLS13_KDF()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
 +func newHKDFCtx1(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (ctx ossl.EVP_PKEY_CTX_PTR, err error) {
 +	checkMajorVersion(1)
 +
@@ -4166,6 +4188,31 @@ index 00000000000000..a0c5f112e09682
 +	return out, nil
 +}
 +
++// ExpandTLS13KDF derives a key from the given hash, key, label and context. It will use
++// "TLS13-KDF" algorithm to do so.
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	if !SupportsTLS13KDF() {
++		return nil, errUnsupportedVersion()
++	}
++
++	md, err := hashFuncToMD(h)
++	if err != nil {
++		return nil, err
++	}
++
++	out := make([]byte, keyLength)
++
++	ctx, err := newTLS13KDFExpandCtx3(md, label, context, pseudorandomKey)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_KDF_CTX_free(ctx)
++	if _, err := ossl.EVP_KDF_derive(ctx, base(out), keyLength, nil); err != nil {
++		return nil, err
++	}
++	return out, nil
++}
++
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
 +	if !SupportsHKDF() {
 +		return nil, errUnsupportedVersion()
@@ -4213,6 +4260,63 @@ index 00000000000000..a0c5f112e09682
 +	}
 +}
 +
++// fetchTLS13_KDF fetches the TLS13-KDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchTLS13_KDF = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3)
++
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS13_KDF.ptr(), nil)
++	if err != nil {
++		return nil, err
++	}
++	return kdf, nil
++})
++
++// newTLS13KDFExpandCtx3 fetches the "TLS13-KDF" for TLS 1.3 handshakes.
++func newTLS13KDFExpandCtx3(md ossl.EVP_MD_PTR, label, context, pseudorandomKey []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
++	checkMajorVersion(3)
++
++	kdf, err := fetchTLS13_KDF()
++	if err != nil {
++		return nil, err
++	}
++
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			ossl.EVP_KDF_CTX_free(ctx)
++		}
++	}()
++
++	bld, err := newParamBuilder()
++	if err != nil {
++		return ctx, err
++	}
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY))
++	bld.addOctetString(_OSSL_KDF_PARAM_PREFIX, []byte("tls13 "))
++	bld.addOctetString(_OSSL_KDF_PARAM_LABEL, label)
++	bld.addOctetString(_OSSL_KDF_PARAM_DATA, context)
++	if len(pseudorandomKey) > 0 {
++		bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
++	}
++
++	params, err := bld.build()
++	if err != nil {
++		return ctx, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
++		return ctx, err
++	}
++	return ctx, nil
++}
++
 +// fetchHKDF3 fetches the HKDF algorithm.
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
@@ -4300,10 +4404,10 @@ index 00000000000000..a0c5f112e09682
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..35cbc289532524
+index 00000000000000..a6bb884d15d747
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,249 @@
+@@ -0,0 +1,244 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4379,7 +4483,7 @@ index 00000000000000..35cbc289532524
 +	ctx3      hmacCtx3
 +	size      int
 +	blockSize int
-+	sum       []byte
++	sum       [maxHashSize]byte
 +}
 +
 +func newHMAC1(key []byte, md ossl.EVP_MD_PTR) hmacCtx1 {
@@ -4486,7 +4590,6 @@ index 00000000000000..35cbc289532524
 +	}
 +
 +	runtime.KeepAlive(h) // Next line will keep h alive too; just making doubly sure.
-+	h.sum = nil
 +}
 +
 +func (h *opensslHMAC) finalize() {
@@ -4522,10 +4625,6 @@ index 00000000000000..35cbc289532524
 +}
 +
 +func (h *opensslHMAC) Sum(in []byte) []byte {
-+	if h.sum == nil {
-+		size := h.Size()
-+		h.sum = make([]byte, size)
-+	}
 +	// Make copy of context because Go hash.Hash mandates
 +	// that Sum has no effect on the underlying stream.
 +	// In particular it is OK to Sum, then Write more, then Sum again,
@@ -4540,18 +4639,18 @@ index 00000000000000..35cbc289532524
 +		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
 +			panic(err)
 +		}
-+		ossl.HMAC_Final(ctx2, base(h.sum), nil)
++		ossl.HMAC_Final(ctx2, base(h.sum[:h.size]), nil)
 +	case 3:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
 +		}
 +		defer ossl.EVP_MAC_CTX_free(ctx2)
-+		ossl.EVP_MAC_final(ctx2, base(h.sum), nil, len(h.sum))
++		ossl.EVP_MAC_final(ctx2, base(h.sum[:h.size]), nil, len(h.sum))
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
-+	return append(in, h.sum...)
++	return append(in, h.sum[:h.size]...)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init.go b/src/vendor/github.com/golang-fips/openssl/v2/init.go
 new file mode 100644
@@ -4974,7 +5073,7 @@ index 00000000000000..4a64c2f09f1f9c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..a5f0a56190f90e
+index 00000000000000..012d60f83eed85
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 @@ -0,0 +1,390 @@
@@ -5167,13 +5266,13 @@ index 00000000000000..a5f0a56190f90e
 +
 +_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
 +void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
-+int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in) __attribute__((noescape,nocallback));
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
 +int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
 +int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,nocheckptr("d")));
-+int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s);
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback));
 +int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
 +int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
@@ -9026,10 +9125,10 @@ index 00000000000000..66249349e78e22
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
 new file mode 100644
-index 00000000000000..045bb3806745a0
+index 00000000000000..ae64d2f7ee9990
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
-@@ -0,0 +1,33 @@
+@@ -0,0 +1,37 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build go1.24 && !cmd_go_bootstrap
@@ -9045,6 +9144,8 @@ index 00000000000000..045bb3806745a0
 +#cgo nocallback _mkcgo_EVP_DecryptUpdate
 +#cgo noescape _mkcgo_EVP_Digest
 +#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestFinal_ex
++#cgo nocallback _mkcgo_EVP_DigestFinal_ex
 +#cgo noescape _mkcgo_EVP_DigestSign
 +#cgo nocallback _mkcgo_EVP_DigestSign
 +#cgo noescape _mkcgo_EVP_DigestUpdate
@@ -9053,6 +9154,8 @@ index 00000000000000..045bb3806745a0
 +#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
 +#cgo noescape _mkcgo_EVP_EncryptUpdate
 +#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_MD_CTX_copy
++#cgo nocallback _mkcgo_EVP_MD_CTX_copy
 +#cgo noescape _mkcgo_EVP_PKEY_derive
 +#cgo nocallback _mkcgo_EVP_PKEY_derive
 +#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
@@ -18734,11 +18837,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 6eaae03de31d05..efdc01d1d9cfe5 100644
+index 6eaae03de31d05..a773f0dfb0e3db 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250422132932-d1d9967cabc9
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index fd3004c717b..be603559978 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,10 +13,10 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/boring_linux.go   | 279 ++++++++++++++
- src/crypto/internal/backend/cng_windows.go    | 336 ++++++++++++++++
+ src/crypto/internal/backend/boring_linux.go   | 287 ++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 344 ++++++++++++++++
  src/crypto/internal/backend/common.go         |  59 +++
- src/crypto/internal/backend/darwin_darwin.go  | 359 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 367 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/internal/backend/fips140/darwin.go |  11 +
@@ -29,8 +29,8 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/opensslsetup/opensslsetup.go     |  70 ++++
  .../opensslsetup/opensslsetup_test.go         |  92 +++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 240 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 331 ++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 246 ++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 339 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |  27 +-
  .../exp_allowcryptofallback_off.go            |   9 +
@@ -49,7 +49,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2690 insertions(+), 3 deletions(-)
+ 45 files changed, 2728 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -554,10 +554,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..f06fcc63b5af11
+index 00000000000000..48d44ec1723ab6
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,279 @@
+@@ -0,0 +1,287 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -724,6 +724,14 @@ index 00000000000000..f06fcc63b5af11
 +	return boring.NewPublicKeyECDH(curve, bytes)
 +}
 +
++func SupportsTLS13KDF() bool {
++	return false
++}
++
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsHKDF() bool { return false }
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
@@ -839,10 +847,10 @@ index 00000000000000..f06fcc63b5af11
 +}
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..31dfc9b19ee63e
+index 00000000000000..6abb6ff007c99f
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,336 @@
+@@ -0,0 +1,344 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1058,6 +1066,14 @@ index 00000000000000..31dfc9b19ee63e
 +	return cng.NewPublicKeyECDH(curve, bytes)
 +}
 +
++func SupportsTLS13KDF() bool {
++	return false
++}
++
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsHKDF() bool {
 +	return cng.SupportsHKDF()
 +}
@@ -1246,10 +1262,10 @@ index 00000000000000..9436b00381aaf8
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..e09524cd430125
+index 00000000000000..0c374baf8d3f80
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,359 @@
+@@ -0,0 +1,367 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1498,6 +1514,14 @@ index 00000000000000..e09524cd430125
 +	return xcrypto.NewPublicKeyECDH(curve, bytes)
 +}
 +
++func SupportsTLS13KDF() bool {
++	return false
++}
++
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsHKDF() bool {
 +	return true
 +}
@@ -2074,10 +2098,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..7c3a95c2c64a2d
+index 00000000000000..1675358749323f
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,240 @@
+@@ -0,0 +1,246 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2211,6 +2235,12 @@ index 00000000000000..7c3a95c2c64a2d
 +func (*PublicKeyECDH) Bytes() []byte                          { panic("cryptobackend: not available") }
 +func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)    { panic("cryptobackend: not available") }
 +
++func SupportsTLS13KDF() bool { panic("cryptobackend: not available") }
++
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
++
 +func SupportsHKDF() bool { panic("cryptobackend: not available") }
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
@@ -2320,10 +2350,10 @@ index 00000000000000..7c3a95c2c64a2d
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..fe575dd8c71435
+index 00000000000000..ac656468e3ed32
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,331 @@
+@@ -0,0 +1,339 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2518,6 +2548,14 @@ index 00000000000000..fe575dd8c71435
 +	return openssl.NewPublicKeyECDH(curve, bytes)
 +}
 +
++func SupportsTLS13KDF() bool {
++	return openssl.SupportsTLS13KDF()
++}
++
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	return openssl.ExpandTLS13KDF(h, pseudorandomKey, label, context, keyLength)
++}
++
 +func SupportsHKDF() bool {
 +	return openssl.SupportsHKDF()
 +}
@@ -2672,10 +2710,10 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 2adf8c897229cf..74d0bc1d6439a3 100644
+index 0095243ce2b0b7..af62328edf5eca 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -536,6 +536,11 @@ var depsRules = `
+@@ -535,6 +535,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2687,7 +2725,7 @@ index 2adf8c897229cf..74d0bc1d6439a3 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -546,16 +551,28 @@ var depsRules = `
+@@ -545,16 +550,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2718,7 +2756,7 @@ index 2adf8c897229cf..74d0bc1d6439a3 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -579,8 +596,12 @@ var depsRules = `
+@@ -578,8 +595,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2763,7 +2801,7 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 6b4289503d57ae..12fba96b868c9e 100644
+index c2a8b7f860d780..451a8924ae423d 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -78,6 +78,14 @@ type Flags struct {
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 60eaeb39bc6..a64fc46299c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -20,8 +20,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
  src/crypto/cipher/gcm_test.go                 |   2 +-
  src/crypto/des/cipher.go                      |   7 +
- src/crypto/dsa/boring.go                      | 113 +++++++++++
- src/crypto/dsa/dsa.go                         |  88 +++++++++
+ src/crypto/dsa/boring.go                      | 113 ++++++++++
+ src/crypto/dsa/dsa.go                         |  88 ++++++++
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
  src/crypto/ecdh/ecdh_test.go                  |   4 +
@@ -78,7 +78,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/handshake_server.go            |  10 +-
  src/crypto/tls/handshake_server_tls13.go      |  13 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
- src/crypto/tls/internal/tls13/tls13.go        | 182 ++++++++++++++++++
+ src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/go/build/deps_test.go                     |   3 +-
@@ -89,7 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1096 insertions(+), 89 deletions(-)
+ 85 files changed, 1109 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2430,10 +2430,10 @@ index 00000000000000..acfa551001af9c
 +package tls13
 diff --git a/src/crypto/tls/internal/tls13/tls13.go b/src/crypto/tls/internal/tls13/tls13.go
 new file mode 100644
-index 00000000000000..573896b9c1e6a8
+index 00000000000000..579aaedabb188a
 --- /dev/null
 +++ b/src/crypto/tls/internal/tls13/tls13.go
-@@ -0,0 +1,182 @@
+@@ -0,0 +1,195 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2443,6 +2443,9 @@ index 00000000000000..573896b9c1e6a8
 +package tls13
 +
 +import (
++	boring "crypto/internal/backend"
++	"crypto/internal/fips140hash"
++
 +	"crypto/hkdf"
 +	"hash"
 +	"internal/byteorder"
@@ -2465,6 +2468,16 @@ index 00000000000000..573896b9c1e6a8
 +		// confusing to users.
 +		panic("tls13: label or context too long")
 +	}
++
++	if boring.Enabled && boring.SupportsTLS13KDF() {
++		fh := fips140hash.UnwrapNew(hash)
++		key, err := boring.ExpandTLS13KDF(fh, secret, []byte(label), context, length)
++		if err != nil {
++			panic(err)
++		}
++		return key
++	}
++
 +	hkdfLabel := make([]byte, 0, 2+1+len("tls13 ")+len(label)+1+len(context))
 +	hkdfLabel = byteorder.BEAppendUint16(hkdfLabel, uint16(length))
 +	hkdfLabel = append(hkdfLabel, byte(len("tls13 ")+len(label)))

From e198032b260a1dc9f27603a9513ca319247c2413 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 28 Apr 2025 16:09:00 +0000
Subject: [PATCH 305/887] Update submodule to latest master (f9ce1ddd): mime:
 speed up ParseMediaType

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f1ebad19bd3..f9ce1dddc26 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f1ebad19bd3fcaaed98e8652172a7e55c105de75
+Subproject commit f9ce1dddc264cb30e68bfedbabf159b32bb6a719

From 16cbef261dd889e2fe6f841640079b16c3c57459 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 29 Apr 2025 16:47:37 +0200
Subject: [PATCH 306/887] fix conflicts

---
 patches/0002-Vendor-crypto-backends.patch | 30 +++++++++++------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index b8c5d5c4417..32879d21f4d 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -226,12 +226,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d7c0cfb6dd3cf8..6d98327ccad050 100644
+index 28e250668dd52c..0856b1d14f7d34 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.31.0 // indirect
- 	golang.org/x/text v0.22.0 // indirect
+ 	golang.org/x/sys v0.32.0 // indirect
+ 	golang.org/x/text v0.24.0 // indirect
  )
 +
 +require (
@@ -240,7 +240,7 @@ index d7c0cfb6dd3cf8..6d98327ccad050 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 834044f135aba5..d2c1817e26f50f 100644
+index ca2e7027fad3bd..00efdf0cb6041e 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -250,14 +250,14 @@ index 834044f135aba5..d2c1817e26f50f 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40 h1:6K+qAlu0vRBqoZ938zEdZ0+jFDVVU+67ZzKOrvTsNSk=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
- golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
- golang.org/x/net v0.36.0 h1:vWF2fRbw4qslQsQzgFqZff+BItCvGFQqKzKIzx1rmoA=
+ golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
+ golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
+ golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 21bf8b76a5a6d0..0095243ce2b0b7 100644
+index 1eb683a5ae77b7..2adf8c897229cf 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -517,6 +517,24 @@ var depsRules = `
+@@ -518,6 +518,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS;
  
@@ -282,7 +282,7 @@ index 21bf8b76a5a6d0..0095243ce2b0b7 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -530,13 +548,12 @@ var depsRules = `
+@@ -531,13 +549,12 @@ var depsRules = `
  	FIPS, internal/godebug, hash, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -300,7 +300,7 @@ index 21bf8b76a5a6d0..0095243ce2b0b7 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -557,6 +574,10 @@ var depsRules = `
+@@ -558,6 +575,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -311,7 +311,7 @@ index 21bf8b76a5a6d0..0095243ce2b0b7 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/rand
-@@ -857,7 +878,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -858,7 +879,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -320,7 +320,7 @@ index 21bf8b76a5a6d0..0095243ce2b0b7 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -867,7 +888,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -868,7 +889,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -18837,7 +18837,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 6eaae03de31d05..a773f0dfb0e3db 100644
+index 4c87639632f887..35848b6d6cd2dd 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -18858,6 +18858,6 @@ index 6eaae03de31d05..a773f0dfb0e3db 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.35.0
+ # golang.org/x/crypto v0.37.0
  ## explicit; go 1.23.0
  golang.org/x/crypto/chacha20

From e34e087bb72dbedeb12ee3f2559ccd3b059aa6cc Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 30 Apr 2025 16:06:51 +0000
Subject: [PATCH 307/887] Update submodule to latest master (3cebfb67): os:
 test overlapped pipes deadlines on Windows

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f9ce1dddc26..3cebfb678bf 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f9ce1dddc264cb30e68bfedbabf159b32bb6a719
+Subproject commit 3cebfb678bf27ed30844512c0d78329d0b0ded53

From c9a874f9509828d65c5f2b0b395f4f418df1092f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 2 May 2025 10:59:32 +0000
Subject: [PATCH 308/887] build(deps): bump github/codeql-action from 3.28.16
 to 3.28.17

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/28deaeda66b76a05916b6923827895f2b14ab387...60168efe1c415ce0f5521ea06d5c2062adbeed1b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0ad1a29127c..ed1dd4fa656 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
+        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
         with:
           category: /language:go

From 5478a5733c1675f7069d659035a8466092496d6a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 6 May 2025 10:30:03 +0000
Subject: [PATCH 309/887] build(deps): bump golang.org/x/sys from 0.32.0 to
 0.33.0 in /eng/_util

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.32.0 to 0.33.0.
- [Commits](https://github.com/golang/sys/compare/v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 873f6f7804e..f4ba1b8a36b 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/net v0.39.0
-	golang.org/x/sys v0.32.0
+	golang.org/x/sys v0.33.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index ccc8eaf9aae..686af094bca 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -13,8 +13,8 @@ github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
 golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
-golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
-golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
+golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
 golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
 golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=

From 8dffa31b705261b37567ecd4e731293a8e3554a9 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 6 May 2025 14:56:48 -0700
Subject: [PATCH 310/887] Disable innerloop network isolation

---
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 1210115d8bb..34f6b7ab5e4 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -30,6 +30,10 @@ resources:
 extends:
   template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
+    featureFlags:
+      # Network Isolation causes standard library DNS net tests on Windows to fail.
+      # See https://github.com/microsoft/go-lab/issues/206
+      disableNetworkIsolation: true
     sdl:
       sourceAnalysisPool:
         name: NetCore1ESPool-Internal

From 1f43e723fe581fe84403a3e1cecb62f63e1d5cac Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 May 2025 04:36:12 +0000
Subject: [PATCH 311/887] build(deps): bump golang.org/x/net from 0.39.0 to
 0.40.0 in /eng/_util

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/net/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 4 ++--
 eng/_util/go.sum | 8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index f4ba1b8a36b..1280fca55ee 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/net v0.39.0
+	golang.org/x/net v0.40.0
 	golang.org/x/sys v0.33.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.24.0 // indirect
+	golang.org/x/text v0.25.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 686af094bca..8407c112a10 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
-golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
+golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
+golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
 golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
 golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
-golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
+golang.org/x/text v0.25.0 h1:qVyWApTSYLk/drJRO5mDlNYskwQznZmkpV2c8q9zls4=
+golang.org/x/text v0.25.0/go.mod h1:WEdwpYrmk1qmdHvhkSTNPm3app7v4rsT8F2UD6+VHIA=
 golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=
 golang.org/x/tools v0.30.0/go.mod h1:c347cR/OJfw5TI+GfX7RUPNMdDRRbjvYTS0jPyvsVtY=

From 8b0f87956e6e0822cfec6610328373ae8b9594cc Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 9 May 2025 16:07:39 +0000
Subject: [PATCH 312/887] Update submodule to latest master (49d6777d):
 crypto/internal/fips140/subtle: add assembly implementation of xorBytes for
 mips64x

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 3cebfb678bf..49d6777d87a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 3cebfb678bf27ed30844512c0d78329d0b0ded53
+Subproject commit 49d6777d87a0abb3eda032da95eff024156835f7

From 0aa8affac55af989483508aae420466bf95734bb Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 12 May 2025 15:25:40 +0200
Subject: [PATCH 313/887] fix VERSION format

---
 eng/_util/cmd/build/build.go | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index a24788a1aed..a2460dc5851 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -355,20 +355,19 @@ func writeDevelVersionFile(goRootDir, toolsDir string) (string, error) {
 	if err != nil {
 		return "", fmt.Errorf("unable to get dist version: %v (%v)", err, string(vBytes))
 	}
-	fields := strings.Fields(string(vBytes))
-	if len(fields) < 2 {
-		return "", fmt.Errorf("expected at least 2 fields in dist version output, got %q in %q", len(fields), string(vBytes))
+	ver, _, _ := strings.Cut(string(vBytes), " ")
+	// The version string is something like "go1.21-devel_abcde1234 Mon Oct 16 12:34:56 2023"
+	// Just using the first field removing the devel_ substring: the full VERSION file string
+	// is placed into the archive filename, so this keeps it simple and avoids special characters.
+	const devel = "devel_"
+	if !strings.Contains(ver, devel) {
+		return "", fmt.Errorf("expected substring %q in dist version, got %q", devel, ver)
 	}
-	if fields[0] != "devel" {
-		return "", fmt.Errorf("expected first field 'devel' in dist version, got %q", fields[0])
-	}
-	// The second field should be something like "go1.21-abcde1234", and the remaining fields are a
-	// timestamp. Just using the second field as is: the full VERSION file string is placed into the
-	// archive filename, so this keeps it simple and avoids special characters.
-	if err := os.WriteFile(filepath.Join(goRootDir, "VERSION"), []byte(fields[1]), 0o666); err != nil {
+	ver = strings.Replace(ver, devel, "", 1)
+	if err := os.WriteFile(filepath.Join(goRootDir, "VERSION"), []byte(ver), 0o666); err != nil {
 		return "", err
 	}
-	return fields[1], nil
+	return ver, nil
 }
 
 // copyFile copies src to dst, creating dst's directory if necessary. Handles errors robustly,

From 8b43383ffba88a707787eceab73cfeaaa3a1c8f4 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 12 May 2025 16:06:21 +0000
Subject: [PATCH 314/887] Update submodule to latest master (c0eb7ab3): bytes,
 strings: micro-optimize EqualFold

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 49d6777d87a..c0eb7ab3062 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 49d6777d87a0abb3eda032da95eff024156835f7
+Subproject commit c0eb7ab3062fae802639545770f6a897d75b0085

From ed549c1018aa085c697f2c241da0703ec4fff286 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 14 May 2025 16:08:13 +0000
Subject: [PATCH 315/887] Update submodule to latest master (c62099cf):
 cmd/intarnal/obj: add new assembly format for VANDV and VANDB on loong64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c0eb7ab3062..c62099cfac6 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c0eb7ab3062fae802639545770f6a897d75b0085
+Subproject commit c62099cfac6b0fd46efbdab7205bb17597096472

From 5d3fe633a57010e073f752fe5eedfe3ee2b70d6a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 16 May 2025 16:08:53 +0000
Subject: [PATCH 316/887] Update submodule to latest master (f529d565): cmd/go:
 add global ignore mechanism

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c62099cfac6..f529d56508b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c62099cfac6b0fd46efbdab7205bb17597096472
+Subproject commit f529d56508b4bbb1e3707917404be57e9b815ccd

From 1ecfbd3341a782b0e663a916226fd6d32c03d2a1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 14:20:01 +0100
Subject: [PATCH 317/887] build(deps): bump github/codeql-action from 3.28.17
 to 3.28.18 (#1677)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.17 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/60168efe1c415ce0f5521ea06d5c2062adbeed1b...ff0a06e83cb2de871e5a09832bc6a81e7276941f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ed1dd4fa656..adb2408aa64 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
+        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           category: /language:go

From f0145b111f20f20a95ca596089a6de06a2fcbada Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 16:11:04 +0000
Subject: [PATCH 318/887] Update submodule to latest master (da9c5b14):
 cmd/compile: add prefetch intrinsic support on loong64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f529d56508b..da9c5b142c8 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f529d56508b4bbb1e3707917404be57e9b815ccd
+Subproject commit da9c5b142c855496222f0ab167c3f1d9e98403c4

From 866021ad933dc2ad851aa3b626690b292638810f Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 23 May 2025 09:58:51 -0700
Subject: [PATCH 319/887] Remove network isolation feature disable setting
 (#1682)

---
 eng/pipeline/rolling-innerloop-pipeline.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 34f6b7ab5e4..1210115d8bb 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -30,10 +30,6 @@ resources:
 extends:
   template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
-    featureFlags:
-      # Network Isolation causes standard library DNS net tests on Windows to fail.
-      # See https://github.com/microsoft/go-lab/issues/206
-      disableNetworkIsolation: true
     sdl:
       sourceAnalysisPool:
         name: NetCore1ESPool-Internal

From ef79040c6fcec788354bde10c1d6caa22ba39e95 Mon Sep 17 00:00:00 2001
From: Mert Akman <mertakman2012@gmail.com>
Date: Thu, 29 May 2025 14:27:34 +0100
Subject: [PATCH 320/887] Support backend ciphers in
 cipher.NewGCMWithRandomNonce (#1673)

* fix: implement aes aead

* fix:correct return value

* fix: implement extended aed

* fix:patch the gcmwithrandomnonce

* fix:wrap returned interface

* fix:add missing returns

* fix:use correct consts

* use custom interface for checking if cipher returned from boring or not

* Fix:openssl patches

* add missing const

* fix:update all backends

* fix:remove extra token

* fix:remove unneccesary code

* revert changes in gcm

* update:panic when none of the cases met for interface casting

* fix: revert backend changes for minimal diff

* fix:use newgcm

* fix:use correct panic msg

* fix:add extra check

* fix:return customgcmwrapper by value

* fix:address PR comments

* readd checks in testgcmaead

* fix:typo
---
 patches/0002-Vendor-crypto-backends.patch     | 147 +++++++++++--
 ...03-Implement-crypto-internal-backend.patch |  10 +-
 patches/0004-Use-crypto-backends.patch        | 196 +++++++++++++++---
 3 files changed, 306 insertions(+), 47 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 32879d21f4d..f3dd2e8fe0b 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -18,7 +18,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/aes.go  |  146 ++
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../golang-fips/openssl/v2/cipher.go          |  603 +++++
+ .../golang-fips/openssl/v2/cipher.go          |  654 ++++++
  .../golang-fips/openssl/v2/const.go           |   93 +
  .../github.com/golang-fips/openssl/v2/des.go  |  113 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  309 +++
@@ -59,7 +59,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/hash.go                |  255 +++
  .../internal/cryptokit/hkdf.go                |   77 +
  .../internal/cryptokit/hmac.go                |  144 ++
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  306 +++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  122 +
@@ -78,7 +78,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  194 ++
  .../go-crypto-darwin/xcrypto/xcrypto.go       |   49 +
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  393 ++++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  427 ++++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
@@ -103,7 +103,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 97 files changed, 17015 insertions(+), 7 deletions(-)
+ 97 files changed, 17130 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -226,7 +226,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 28e250668dd52c..0856b1d14f7d34 100644
+index 28e250668dd52c..e5aa4b223a54d4 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -240,7 +240,7 @@ index 28e250668dd52c..0856b1d14f7d34 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ca2e7027fad3bd..00efdf0cb6041e 100644
+index ca2e7027fad3bd..f623f220d18598 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -254,7 +254,7 @@ index ca2e7027fad3bd..00efdf0cb6041e 100644
  golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
  golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 1eb683a5ae77b7..2adf8c897229cf 100644
+index b261af47e2167c..3ad0b0a3f2f465 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -518,6 +518,24 @@ var depsRules = `
@@ -311,7 +311,7 @@ index 1eb683a5ae77b7..2adf8c897229cf 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/rand
-@@ -858,7 +879,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -861,7 +882,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -320,7 +320,7 @@ index 1eb683a5ae77b7..2adf8c897229cf 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -868,7 +889,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -871,7 +892,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -679,10 +679,10 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..2a3a91eb549a68
+index 00000000000000..c9b2a64e181d3e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,603 @@
+@@ -0,0 +1,654 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -1010,6 +1010,7 @@ index 00000000000000..2a3a91eb549a68
 +}
 +
 +const (
++	aesBlockSize         = 16
 +	gcmTagSize           = 16
 +	gcmStandardNonceSize = 12
 +	// TLS 1.2 additional data is constructed as:
@@ -1165,6 +1166,56 @@ index 00000000000000..2a3a91eb549a68
 +	return ret
 +}
 +
++func (g *cipherGCM) SealWithRandomNonce(out, nonce, plaintext, aad []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if inexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, aad) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: encryption failed")
++	}
++
++	RandReader.Read(nonce)
++	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, baseNeverEmpty(plaintext), int32(len(plaintext))); err != nil {
++		panic(err)
++	}
++	if len(plaintext) != int(outl) {
++		panic("cipher: incorrect length returned from GCM EncryptUpdate")
++	}
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(g)
++	return
++}
++
 +var errOpen = errors.New("cipher: message authentication failed")
 +
 +func (g *cipherGCM) Open(dst, nonce, ciphertext, aad []byte) (_ []byte, err error) {
@@ -12399,10 +12450,10 @@ index 00000000000000..c9f4d67de4c9f3
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
 new file mode 100644
-index 00000000000000..27a42bfc89ca06
+index 00000000000000..c9611eef5e2697
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
-@@ -0,0 +1,306 @@
+@@ -0,0 +1,336 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -12623,6 +12674,36 @@ index 00000000000000..27a42bfc89ca06
 +	return ret
 +}
 +
++func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if inexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
++	}
++
++	tag := out[len(out)-gcmTagSize:]
++	// Generate a random nonce
++	RandReader.Read(nonce)
++	err := cryptokit.EncryptAESGCM(g.key, plaintext, nonce, additionalData, out[:len(out)-gcmTagSize], tag)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++}
++
 +var errOpen = errors.New("cipher: message authentication failed")
 +
 +func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
@@ -14483,10 +14564,10 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 new file mode 100644
-index 00000000000000..097a0fc77f0adb
+index 00000000000000..692a36ec7079cc
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-@@ -0,0 +1,393 @@
+@@ -0,0 +1,427 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14826,6 +14907,40 @@ index 00000000000000..097a0fc77f0adb
 +	return ret
 +}
 +
++func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if subtle.InexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if subtle.AnyOverlap(out, additionalData) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
++	}
++
++	RandReader.Read(nonce)
++	info := bcrypt.NewAUTHENTICATED_CIPHER_MODE_INFO(nonce, additionalData, out[len(out)-gcmTagSize:])
++	var encSize uint32
++	err := bcrypt.Encrypt(g.kh, plaintext, unsafe.Pointer(info), nil, out, &encSize, 0)
++	if err != nil {
++		panic(err)
++	}
++	if int(encSize) != len(plaintext) {
++		panic("crypto/cipher: plaintext not fully encrypted")
++	}
++	runtime.KeepAlive(g)
++}
++
 +var errOpen = errors.New("cipher: message authentication failed")
 +
 +func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
@@ -18837,7 +18952,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 4c87639632f887..35848b6d6cd2dd 100644
+index 4c87639632f887..271c698c1d681b 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index be603559978..76e24d2e11d 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2710,10 +2710,10 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 0095243ce2b0b7..af62328edf5eca 100644
+index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -535,6 +535,11 @@ var depsRules = `
+@@ -536,6 +536,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2725,7 +2725,7 @@ index 0095243ce2b0b7..af62328edf5eca 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -545,16 +550,28 @@ var depsRules = `
+@@ -546,16 +551,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2756,7 +2756,7 @@ index 0095243ce2b0b7..af62328edf5eca 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -578,8 +595,12 @@ var depsRules = `
+@@ -579,8 +596,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2801,7 +2801,7 @@ index 00000000000000..8d0c3fde9ab5e8
 +const AllowCryptoFallback = true
 +const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index c2a8b7f860d780..451a8924ae423d 100644
+index 6b4289503d57ae..12fba96b868c9e 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -78,6 +78,14 @@ type Flags struct {
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index a64fc46299c..d186b9b83d7 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -18,7 +18,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
- src/crypto/cipher/gcm_test.go                 |   2 +-
+ src/crypto/cipher/gcm.go                      |  59 +++++-
+ src/crypto/cipher/gcm_test.go                 |  10 +-
  src/crypto/des/cipher.go                      |   7 +
  src/crypto/dsa/boring.go                      | 113 ++++++++++
  src/crypto/dsa/dsa.go                         |  88 ++++++++
@@ -89,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1109 insertions(+), 89 deletions(-)
+ 86 files changed, 1170 insertions(+), 95 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -115,10 +116,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 596036fce9f7f1..3e4b8d9e5e3903 100644
+index b50f3342fe8714..e2099ee5eff6ba 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1534,6 +1534,19 @@ func cmdbootstrap() {
+@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
  	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
  	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
@@ -139,7 +140,7 @@ index 596036fce9f7f1..3e4b8d9e5e3903 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index e939768a2f4809..3197a8b81c2886 100644
+index d335e4cfbce468..542b16e1f1f18a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -379,19 +380,162 @@ index 33942467784ad3..0282ffa9fa23c8 100644
  	"crypto/internal/cryptotest"
  	fipsaes "crypto/internal/fips140/aes"
  	"encoding/hex"
+diff --git a/src/crypto/cipher/gcm.go b/src/crypto/cipher/gcm.go
+index 5580f96d55a0fb..9599e9bf604d3f 100644
+--- a/src/crypto/cipher/gcm.go
++++ b/src/crypto/cipher/gcm.go
+@@ -93,6 +93,15 @@ func newGCM(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+ func NewGCMWithRandomNonce(cipher Block) (AEAD, error) {
+ 	c, ok := cipher.(*aes.Block)
+ 	if !ok {
++		if cipher, ok := cipher.(gcmAble); ok {
++			g, err := cipher.NewGCM(gcmStandardNonceSize, gcmTagSize)
++			if err != nil {
++				return nil, err
++			}
++			if _, ok := g.(randomNonceSealer); ok {
++				return gcmWithRandomNonce{g}, nil
++			}
++		}
+ 		return nil, errors.New("cipher: NewGCMWithRandomNonce requires aes.Block")
+ 	}
+ 	g, err := gcm.New(c, gcmStandardNonceSize, gcmTagSize)
+@@ -103,7 +112,7 @@ func NewGCMWithRandomNonce(cipher Block) (AEAD, error) {
+ }
+ 
+ type gcmWithRandomNonce struct {
+-	*gcm.GCM
++	aead AEAD
+ }
+ 
+ func (g gcmWithRandomNonce) NonceSize() int {
+@@ -157,7 +166,14 @@ func (g gcmWithRandomNonce) Seal(dst, nonce, plaintext, additionalData []byte) [
+ 		plaintext = ciphertext[:len(plaintext)]
+ 	}
+ 
+-	gcm.SealWithRandomNonce(g.GCM, nonce, ciphertext, plaintext, additionalData)
++	if aeadGCM, ok := g.aead.(*gcm.GCM); ok {
++		gcm.SealWithRandomNonce(aeadGCM, nonce, ciphertext, plaintext, additionalData)
++	} else if aeadGCM, ok := g.aead.(randomNonceSealer); ok {
++		aeadGCM.SealWithRandomNonce(ciphertext, nonce, plaintext, additionalData)
++	} else {
++		panic("cipher: NewGCMWithRandomNonce requires aes.Block")
++	}
++
+ 	return ret
+ }
+ 
+@@ -190,7 +206,7 @@ func (g gcmWithRandomNonce) Open(dst, nonce, ciphertext, additionalData []byte)
+ 		ciphertext = ciphertext[gcmStandardNonceSize:]
+ 	}
+ 
+-	_, err := g.GCM.Open(out[:0], nonce, ciphertext, additionalData)
++	_, err := g.aead.Open(out[:0], nonce, ciphertext, additionalData)
+ 	if err != nil {
+ 		return nil, err
+ 	}
+@@ -204,6 +220,14 @@ type gcmAble interface {
+ 	NewGCM(nonceSize, tagSize int) (AEAD, error)
+ }
+ 
++// randomNonceSealer is an interface for AEAD implementations that support
++// sealing messages using a randomly generated nonce.
++// It is used by NewGCMWithRandomNonce to determine whether the AEAD instance
++// provides its own implementation of SealWithRandomNonce.
++type randomNonceSealer interface {
++	SealWithRandomNonce(out, nonce, plaintext, additionalData []byte)
++}
++
+ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+ 	if tagSize < gcmMinimumTagSize || tagSize > gcmBlockSize {
+ 		return nil, errors.New("cipher: incorrect tag size given to GCM")
+@@ -212,7 +236,16 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+ 		return nil, errors.New("cipher: the nonce can't have zero length")
+ 	}
+ 	if cipher, ok := cipher.(gcmAble); ok {
+-		return cipher.NewGCM(nonceSize, tagSize)
++		g, err := cipher.NewGCM(nonceSize, tagSize)
++		if err != nil {
++			return nil, err
++		}
++
++		if _, ok := g.(randomNonceSealer); ok {
++			return customGCMWrapper{g}, nil
++		}
++
++		return g, err
+ 	}
+ 	if cipher.BlockSize() != gcmBlockSize {
+ 		return nil, errors.New("cipher: NewGCM requires 128-bit block cipher")
+@@ -220,6 +253,24 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+ 	return &gcmFallback{cipher: cipher, nonceSize: nonceSize, tagSize: tagSize}, nil
+ }
+ 
++// customGCMWrapper wraps an AEAD implementation to expose only the AEAD interface methods.
++// This prevents extra exported methods from causing test failures in cryptotest.NoExtraMethods.
++type customGCMWrapper struct {
++	aead AEAD
++}
++
++func (g customGCMWrapper) NonceSize() int { return g.aead.NonceSize() }
++
++func (g customGCMWrapper) Overhead() int { return g.aead.Overhead() }
++
++func (g customGCMWrapper) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	return g.aead.Seal(dst, nonce, plaintext, additionalData)
++}
++
++func (g customGCMWrapper) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	return g.aead.Open(dst, nonce, ciphertext, additionalData)
++}
++
+ // gcmFallback is only used for non-AES ciphers, which regrettably we
+ // theoretically support. It's a copy of the generic implementation from
+ // crypto/internal/fips140/aes/gcm/gcm_generic.go, refer to that file for more details.
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index e574822c9aa6f8..cf121d9e5f654d 100644
+index e574822c9aa6f8..5d9f27fb6b1931 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
-@@ -8,7 +8,7 @@ import (
+@@ -8,7 +8,6 @@ import (
  	"bytes"
  	"crypto/aes"
  	"crypto/cipher"
 -	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	fipsaes "crypto/internal/fips140/aes"
+@@ -17,6 +16,7 @@ import (
+ 	"encoding/hex"
+ 	"errors"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"io"
+ 	"reflect"
+ 	"testing"
+@@ -727,9 +727,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
+ 
+ 			// Test NewGCMWithRandomNonce.
+ 			t.Run("GCMWithRandomNonce", func(t *testing.T) {
+-				if _, ok := block.(*wrapper); ok || boring.Enabled {
++				if _, ok := block.(*wrapper); ok || goexperiment.BoringCrypto {
+ 					t.Skip("NewGCMWithRandomNonce requires an AES block cipher")
+ 				}
++				a, _ := cipher.NewGCMWithRandomNonce(block)
++				if a.NonceSize() != 0 {
++					t.Errorf("NewGCMWithRandomNonce returned AEAD with non-zero nonce size: %d", a.NonceSize())
++				}
+ 				cryptotest.TestAEAD(t, func() (cipher.AEAD, error) { return cipher.NewGCMWithRandomNonce(block) })
+ 			})
+ 		})
+@@ -752,7 +756,7 @@ func TestGCMExtraMethods(t *testing.T) {
+ 		})
+ 		t.Run("NewGCMWithRandomNonce", func(t *testing.T) {
+ 			block := newCipher(make([]byte, 16))
+-			if _, ok := block.(*wrapper); ok || boring.Enabled {
++			if _, ok := block.(*wrapper); ok || goexperiment.BoringCrypto {
+ 				t.Skip("NewGCMWithRandomNonce requires an AES block cipher")
+ 			}
+ 			a, _ := cipher.NewGCMWithRandomNonce(block)
 diff --git a/src/crypto/des/cipher.go b/src/crypto/des/cipher.go
 index 21303b384cf757..0d3c4f810cfd8f 100644
 --- a/src/crypto/des/cipher.go
@@ -1318,7 +1462,7 @@ index 08d60933ef38b8..8840db05bde791 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index a0384e175f31bd..f7aa6da36f02de 100644
+index dc586fb21787c9..7b7dc2f011bdf8 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1329,7 +1473,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
-@@ -104,6 +105,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
+@@ -109,6 +110,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New() hash.Hash {
@@ -1339,7 +1483,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	d := new(digest)
  	d.Reset()
  	return d
-@@ -188,6 +192,12 @@ func (d *digest) checkSum() [Size]byte {
+@@ -198,6 +202,12 @@ func (d *digest) checkSum() [Size]byte {
  
  // Sum returns the MD5 checksum of the data.
  func Sum(data []byte) [Size]byte {
@@ -1353,7 +1497,7 @@ index a0384e175f31bd..f7aa6da36f02de 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 2353ea85b54baf..f1d3668e6abff4 100644
+index c0bb15f05bac7c..1ef4f4e1471ada 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,12 +6,14 @@ package md5
@@ -1381,7 +1525,7 @@ index 2353ea85b54baf..f1d3668e6abff4 100644
  			t.Errorf("could not marshal: %v", err)
  			continue
  		}
-@@ -157,6 +162,9 @@ func TestLarge(t *testing.T) {
+@@ -183,6 +188,9 @@ func TestExtraLarge(t *testing.T) {
  
  // Tests that blockGeneric (pure Go) and block (in assembly for amd64, 386, arm) match.
  func TestBlockGeneric(t *testing.T) {
@@ -1391,7 +1535,7 @@ index 2353ea85b54baf..f1d3668e6abff4 100644
  	gen, asm := New().(*digest), New().(*digest)
  	buf := make([]byte, BlockSize*20) // arbitrary factor
  	rand.Read(buf)
-@@ -204,10 +212,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -230,10 +238,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  }
  
  func TestLargeHashes(t *testing.T) {
@@ -1410,7 +1554,7 @@ index 2353ea85b54baf..f1d3668e6abff4 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -245,7 +261,7 @@ func TestMD5Hash(t *testing.T) {
+@@ -271,7 +287,7 @@ func TestMD5Hash(t *testing.T) {
  
  func TestExtraMethods(t *testing.T) {
  	h := New()
@@ -2042,7 +2186,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index b3b4e77f578e60..23c4c7b4823f6c 100644
+index 38a7f25afb3fd1..9bbe4a86e1341f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -2069,7 +2213,7 @@ index b3b4e77f578e60..23c4c7b4823f6c 100644
  					t.Errorf("could not marshal: %v", err)
  					continue
  				}
-@@ -206,6 +211,9 @@ func TestMarshalTypeMismatch(t *testing.T) {
+@@ -256,6 +261,9 @@ func TestMarshalTypeMismatch(t *testing.T) {
  
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
@@ -2079,7 +2223,7 @@ index b3b4e77f578e60..23c4c7b4823f6c 100644
  		t.Errorf("could not marshal: %v", err)
  	}
  
-@@ -275,10 +283,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -325,10 +333,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -2098,7 +2242,7 @@ index b3b4e77f578e60..23c4c7b4823f6c 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -354,13 +370,13 @@ func TestExtraMethods(t *testing.T) {
+@@ -404,13 +420,13 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-224", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
  			h := New224()
@@ -2294,7 +2438,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 30f2e2a2a2c43d..a25a29a2a26785 100644
+index bb5b7a042a7399..58e7320d3f166b 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2328,7 +2472,7 @@ index 30f2e2a2a2c43d..a25a29a2a26785 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 66dc76f72d6e6f..c8bb0c02d64afd 100644
+index 444c6f311ce1e3..bf52c619b2a1fc 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -2343,7 +2487,7 @@ index 66dc76f72d6e6f..c8bb0c02d64afd 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 507b69a0ed1471..86ef3f9c5b7f24 100644
+index 5be74e2967ffd4..0522e20589c2ff 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2364,7 +2508,7 @@ index 507b69a0ed1471..86ef3f9c5b7f24 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index ab0cff9e28454e..3981994fbee904 100644
+index fbdf55d46186cc..c69edb4336d6cc 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (
@@ -2712,10 +2856,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index af62328edf5eca..09c16fd2db0b58 100644
+index 2e4b1fd1b370cc..adf9baf1a38705 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -540,7 +540,7 @@ var depsRules = `
+@@ -541,7 +541,7 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2724,7 +2868,7 @@ index af62328edf5eca..09c16fd2db0b58 100644
  
  	crypto, hash !< FIPS;
  
-@@ -585,6 +585,7 @@ var depsRules = `
+@@ -586,6 +586,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 4129fd098b4a8080f8585700159d93e2e83ee1a4 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 3 Jun 2025 00:57:19 +0100
Subject: [PATCH 321/887] fix:update vendors in patches

---
 patches/0002-Vendor-crypto-backends.patch | 1200 +++++++++++++++------
 1 file changed, 862 insertions(+), 338 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index f3dd2e8fe0b..578b6e5eb29 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -8,7 +8,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
 ---
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
- src/go.sum                                    |    6 +
+ src/go.sum                                    |   12 +
  src/go/build/deps_test.go                     |   35 +-
  src/go/build/vendor_test.go                   |    3 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
@@ -26,23 +26,25 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/ecdh.go |  306 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
  .../golang-fips/openssl/v2/ed25519.go         |  229 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  552 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  717 ++++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  590 +++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  465 ++++
  .../github.com/golang-fips/openssl/v2/hkdf.go |  444 ++++
  .../github.com/golang-fips/openssl/v2/hmac.go |  244 ++
  .../github.com/golang-fips/openssl/v2/init.go |  157 ++
  .../golang-fips/openssl/v2/init_unix.go       |   31 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
  .../openssl/v2/internal/ossl/errors.go        |  125 +
- .../openssl/v2/internal/ossl/ossl.go          |   40 +
- .../openssl/v2/internal/ossl/shims.h          |  390 ++++
- .../openssl/v2/internal/ossl/zossl.c          | 2011 +++++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         | 1297 +++++++++++
- .../openssl/v2/internal/ossl/zossl.h          |  330 +++
+ .../openssl/v2/internal/ossl/ossl.go          |   81 +
+ .../openssl/v2/internal/ossl/shims.h          |  399 ++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2061 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         | 1329 +++++++++++
+ .../openssl/v2/internal/ossl/zossl.h          |  337 +++
  .../openssl/v2/internal/ossl/zossl_go124.go   |   37 +
- .../golang-fips/openssl/v2/openssl.go         |  384 ++++
+ .../golang-fips/openssl/v2/openssl.go         |  384 +++
  .../golang-fips/openssl/v2/params.go          |  185 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   55 +
+ .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
+ .../openssl/v2/providersymcrypt.go            |  338 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   22 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   69 +
  .../github.com/golang-fips/openssl/v2/rsa.go  |  366 +++
@@ -56,7 +58,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/cryptokit.h            |   63 +
  .../internal/cryptokit/ed25519.go             |   72 +
  .../internal/cryptokit/gcm.go                 |   36 +
- .../internal/cryptokit/hash.go                |  255 +++
+ .../internal/cryptokit/hash.go                |  255 ++
  .../internal/cryptokit/hkdf.go                |   77 +
  .../internal/cryptokit/hmac.go                |  144 ++
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
@@ -85,10 +87,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/cng.go  |  131 ++
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
- .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 +++
+ .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
  .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 ++
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
@@ -103,7 +105,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 97 files changed, 17130 insertions(+), 7 deletions(-)
+ 99 files changed, 17638 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -137,6 +139,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rand.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rc4.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rsa.go
@@ -226,7 +230,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 28e250668dd52c..e5aa4b223a54d4 100644
+index 28e250668dd52c..ad0c97b35c174c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -235,21 +239,27 @@ index 28e250668dd52c..e5aa4b223a54d4 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ca2e7027fad3bd..f623f220d18598 100644
+index ca2e7027fad3bd..f8a640dc9f26f4 100644
 --- a/src/go.sum
 +++ b/src/go.sum
-@@ -1,3 +1,9 @@
+@@ -1,3 +1,15 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791 h1:5PZl6k34BcDxn4DT+f8GLx51OZBtmx22oQ01ygrbGt0=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8 h1:+7pPRMRv1wcUtn81ocQbQ0mvxZWPsP2obrXfgEo8YVo=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56 h1:rignn19hDdGfSVEtNeR0msL6wnkiqr61/VoB0i3zbSI=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e h1:4AiS64Ia2K2cT5VQdOTo41sgmrr3yuKpt+GAcvpWPvw=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40 h1:6K+qAlu0vRBqoZ938zEdZ0+jFDVVU+67ZzKOrvTsNSk=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc h1:JuI6hAMIiQhfuIv/wYVWSAlO4xZBfhBjUiov/1v//AQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
  golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
  golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
@@ -679,7 +689,7 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..c9b2a64e181d3e
+index 00000000000000..e2b90fc0e9bfd4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 @@ -0,0 +1,654 @@
@@ -1193,6 +1203,7 @@ index 00000000000000..c9b2a64e181d3e
 +		panic(err)
 +	}
 +	defer ossl.EVP_CIPHER_CTX_free(ctx)
++
 +	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
 +		panic(err)
 +	}
@@ -1213,7 +1224,6 @@ index 00000000000000..c9b2a64e181d3e
 +		panic(err)
 +	}
 +	runtime.KeepAlive(g)
-+	return
 +}
 +
 +var errOpen = errors.New("cipher: message authentication failed")
@@ -1339,7 +1349,7 @@ index 00000000000000..c9b2a64e181d3e
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..e4aaf3bbe8a6dc
+index 00000000000000..9f99a9dc456242
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 @@ -0,0 +1,93 @@
@@ -1395,7 +1405,7 @@ index 00000000000000..e4aaf3bbe8a6dc
 +	// KDF names
 +	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
 +	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
-+	_OSSL_KDF_NAME_TLS1_PRF	 cString = "TLS1-PRF\x00"
++	_OSSL_KDF_NAME_TLS1_PRF  cString = "TLS1-PRF\x00"
 +	_OSSL_KDF_NAME_TLS13_KDF cString = "TLS13-KDF\x00"
 +	_OSSL_MAC_NAME_HMAC      cString = "HMAC\x00"
 +
@@ -2724,10 +2734,10 @@ index 00000000000000..50fd06e5c89fbd
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..20777c0728c7c1
+index 00000000000000..a6ad55906ecd8a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,552 @@
+@@ -0,0 +1,590 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2793,11 +2803,22 @@ index 00000000000000..20777c0728c7c1
 +	return md, nil
 +}
 +
++// provider is an identifier for a known provider.
++type provider uint8
++
++const (
++	providerNone provider = iota
++	providerOSSLDefault
++	providerOSSLFIPS
++	providerSymCrypt
++)
++
 +type hashAlgorithm struct {
 +	md             ossl.EVP_MD_PTR
 +	ch             crypto.Hash
 +	size           int
 +	blockSize      int
++	provider       provider
 +	marshallable   bool
 +	magic          string
 +	marshalledSize int
@@ -2817,14 +2838,14 @@ index 00000000000000..20777c0728c7c1
 +		hash.md = ossl.EVP_md4()
 +	case crypto.MD5:
 +		hash.md = ossl.EVP_md5()
-+		hash.magic = md5Magic
-+		hash.marshalledSize = md5MarshaledSize
++		hash.magic = magicMD5
++		hash.marshalledSize = marshaledSizeMD5
 +	case crypto.MD5SHA1:
 +		hash.md = ossl.EVP_md5_sha1()
 +	case crypto.SHA1:
 +		hash.md = ossl.EVP_sha1()
-+		hash.magic = sha1Magic
-+		hash.marshalledSize = sha1MarshaledSize
++		hash.magic = magic1
++		hash.marshalledSize = marshaledSize1
 +	case crypto.SHA224:
 +		hash.md = ossl.EVP_sha224()
 +		hash.magic = magic224
@@ -2889,7 +2910,34 @@ index 00000000000000..20777c0728c7c1
 +			hash.md = md
 +		}
 +	}
-+	hash.marshallable = hash.magic != "" && isHashMarshallable(hash.md)
++	if hash.magic != "" {
++		if hash.marshalledSize == 0 {
++			panic("marshalledSize must be set for " + hash.magic)
++		}
++	}
++
++	switch vMajor {
++	case 1:
++		hash.provider = providerOSSLDefault
++	case 3:
++		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
++			cname := ossl.OSSL_PROVIDER_get0_name(prov)
++			switch C.GoString((*C.char)(unsafe.Pointer(cname))) {
++			case "default":
++				hash.provider = providerOSSLDefault
++				hash.marshallable = hash.magic != ""
++			case "fips":
++				hash.provider = providerOSSLFIPS
++				hash.marshallable = hash.magic != ""
++			case "symcryptprovider":
++				hash.provider = providerSymCrypt
++				hash.marshallable = hash.magic != "" && isSymCryptHashStateSerializable(hash.md)
++			}
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++
 +	cacheMD.Store(ch, &hash)
 +	return &hash
 +}
@@ -3282,10 +3330,10 @@ index 00000000000000..20777c0728c7c1
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..033169bece66b8
+index 00000000000000..85ab3fac6526f8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,717 @@
+@@ -0,0 +1,465 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3303,6 +3351,22 @@ index 00000000000000..033169bece66b8
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
++const (
++	magicMD5     = "md5\x01"
++	magic1       = "sha\x01"
++	magic224     = "sha\x02"
++	magic256     = "sha\x03"
++	magic384     = "sha\x04"
++	magic512_224 = "sha\x05"
++	magic512_256 = "sha\x06"
++	magic512     = "sha\x07"
++
++	marshaledSizeMD5 = len(magicMD5) + 4*4 + 64 + 8  // from crypto/md5
++	marshaledSize1   = len(magic1) + 5*4 + 64 + 8    // from crypto/sha1
++	marshaledSize256 = len(magic256) + 8*4 + 64 + 8  // from crypto/sha256
++	marshaledSize512 = len(magic512) + 8*8 + 128 + 8 // from crypto/sha512
++)
++
 +// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
 +const maxHashSize = 64
 +
@@ -3495,27 +3559,6 @@ index 00000000000000..033169bece66b8
 +	return newEvpHash(crypto.SHA3_512)
 +}
 +
-+// isHashMarshallable returns true if the memory layout of md
-+// is known by this library and can therefore be marshalled.
-+func isHashMarshallable(md ossl.EVP_MD_PTR) bool {
-+	if vMajor == 1 {
-+		return true
-+	}
-+	prov := ossl.EVP_MD_get0_provider(md)
-+	if prov == nil {
-+		return false
-+	}
-+	cname := ossl.OSSL_PROVIDER_get0_name(prov)
-+	if cname == nil {
-+		return false
-+	}
-+	name := C.GoString((*C.char)(unsafe.Pointer(cname)))
-+	// We only know the memory layout of the built-in providers.
-+	// See evpHash.hashState for more details.
-+	marshallable := name == "default" || name == "fips"
-+	return marshallable
-+}
-+
 +// cloneHash is an interface that defines a Clone method.
 +//
 +// hahs.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
@@ -3675,37 +3718,11 @@ index 00000000000000..033169bece66b8
 +	return h2
 +}
 +
-+// hashState returns a pointer to the internal hash structure.
-+//
-+// The EVP_MD_CTX memory layout has changed in OpenSSL 3
-+// and the property holding the internal structure is no longer md_data but algctx.
-+func hashState(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
-+	switch vMajor {
-+	case 1:
-+		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
-+		type mdCtx struct {
-+			_       [2]unsafe.Pointer
-+			_       C.ulong
-+			md_data unsafe.Pointer
-+		}
-+		return (*mdCtx)(unsafe.Pointer(ctx)).md_data
-+	case 3:
-+		// https://github.com/openssl/openssl/blob/5675a5aaf6a2e489022bcfc18330dae9263e598e/crypto/evp/evp_local.h#L16.
-+		type mdCtx struct {
-+			_      [3]unsafe.Pointer
-+			_      C.ulong
-+			_      [3]unsafe.Pointer
-+			algctx unsafe.Pointer
-+		}
-+		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
++var errHashNotMarshallable = errors.New("openssl: hash state is not marshallable")
 +
 +func (d *evpHash) MarshalBinary() ([]byte, error) {
 +	if !d.alg.marshallable {
-+		return nil, errors.New("openssl: hash state is not marshallable")
++		return nil, errHashNotMarshallable
 +	}
 +	buf := make([]byte, 0, d.alg.marshalledSize)
 +	return d.AppendBinary(buf)
@@ -3713,261 +3730,40 @@ index 00000000000000..033169bece66b8
 +
 +func (d *evpHash) AppendBinary(buf []byte) ([]byte, error) {
 +	defer runtime.KeepAlive(d)
-+	d.init()
 +	if !d.alg.marshallable {
-+		return nil, errors.New("openssl: hash state is not marshallable")
-+	}
-+	state := hashState(d.ctx)
-+	if state == nil {
-+		return nil, errors.New("openssl: can't retrieve hash state")
++		return nil, errHashNotMarshallable
 +	}
-+	var appender interface {
-+		AppendBinary([]byte) ([]byte, error)
-+	}
-+	switch d.alg.ch {
-+	case crypto.MD5:
-+		appender = (*md5State)(state)
-+	case crypto.SHA1:
-+		appender = (*sha1State)(state)
-+	case crypto.SHA224:
-+		appender = (*sha256State)(state)
-+	case crypto.SHA256:
-+		appender = (*sha256State)(state)
-+	case crypto.SHA384:
-+		appender = (*sha512State)(state)
-+	case crypto.SHA512:
-+		appender = (*sha512State)(state)
-+	case crypto.SHA512_224:
-+		appender = (*sha512State)(state)
-+	case crypto.SHA512_256:
-+		appender = (*sha512State)(state)
++	d.init()
++	switch d.alg.provider {
++	case providerOSSLDefault, providerOSSLFIPS:
++		return osslHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
++	case providerSymCrypt:
++		return symCryptHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
 +	default:
-+		panic("openssl: unsupported hash function: " + strconv.Itoa(int(d.alg.ch)))
++		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
 +	}
-+	buf = append(buf, d.alg.magic[:]...)
-+	return appender.AppendBinary(buf)
 +}
 +
 +func (d *evpHash) UnmarshalBinary(b []byte) error {
 +	defer runtime.KeepAlive(d)
 +	d.init()
 +	if !d.alg.marshallable {
-+		return errors.New("openssl: hash state is not marshallable")
++		return errHashNotMarshallable
 +	}
-+	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != string(d.alg.magic[:]) {
++	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != d.alg.magic {
 +		return errors.New("openssl: invalid hash state identifier")
 +	}
 +	if len(b) != d.alg.marshalledSize {
 +		return errors.New("openssl: invalid hash state size")
 +	}
-+	state := hashState(d.ctx)
-+	if state == nil {
-+		return errors.New("openssl: can't retrieve hash state")
-+	}
-+	b = b[len(d.alg.magic):]
-+	var unmarshaler interface {
-+		UnmarshalBinary([]byte) error
-+	}
-+	switch d.alg.ch {
-+	case crypto.MD5:
-+		unmarshaler = (*md5State)(state)
-+	case crypto.SHA1:
-+		unmarshaler = (*sha1State)(state)
-+	case crypto.SHA224:
-+		unmarshaler = (*sha256State)(state)
-+	case crypto.SHA256:
-+		unmarshaler = (*sha256State)(state)
-+	case crypto.SHA384:
-+		unmarshaler = (*sha512State)(state)
-+	case crypto.SHA512:
-+		unmarshaler = (*sha512State)(state)
-+	case crypto.SHA512_224:
-+		unmarshaler = (*sha512State)(state)
-+	case crypto.SHA512_256:
-+		unmarshaler = (*sha512State)(state)
++	switch d.alg.provider {
++	case providerOSSLDefault, providerOSSLFIPS:
++		return osslHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
++	case providerSymCrypt:
++		return symCryptHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
 +	default:
-+		panic("openssl: unsupported hash function: " + strconv.Itoa(int(d.alg.ch)))
++		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
 +	}
-+	return unmarshaler.UnmarshalBinary(b)
-+}
-+
-+// md5State layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/md5.h#L33.
-+type md5State struct {
-+	h      [4]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+const (
-+	md5Magic         = "md5\x01"
-+	md5MarshaledSize = len(md5Magic) + 4*4 + 64 + 8
-+)
-+
-+func (d *md5State) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *md5State) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// sha1State layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
-+type sha1State struct {
-+	h      [5]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+const (
-+	sha1Magic         = "sha\x01"
-+	sha1MarshaledSize = len(sha1Magic) + 5*4 + 64 + 8
-+)
-+
-+func (d *sha1State) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b, d.h[4] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *sha1State) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = appendUint32(buf, d.h[4])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+const (
-+	magic224         = "sha\x02"
-+	magic256         = "sha\x03"
-+	marshaledSize256 = len(magic256) + 8*4 + 64 + 8
-+)
-+
-+// sha256State layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L51.
-+type sha256State struct {
-+	h      [8]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+func (d *sha256State) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b, d.h[4] = consumeUint32(b)
-+	b, d.h[5] = consumeUint32(b)
-+	b, d.h[6] = consumeUint32(b)
-+	b, d.h[7] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *sha256State) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = appendUint32(buf, d.h[4])
-+	buf = appendUint32(buf, d.h[5])
-+	buf = appendUint32(buf, d.h[6])
-+	buf = appendUint32(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// sha512State layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
-+type sha512State struct {
-+	h      [8]uint64
-+	nl, nh uint64
-+	x      [128]byte
-+	nx     uint32
-+}
-+
-+const (
-+	magic384         = "sha\x04"
-+	magic512_224     = "sha\x05"
-+	magic512_256     = "sha\x06"
-+	magic512         = "sha\x07"
-+	marshaledSize512 = len(magic512) + 8*8 + 128 + 8
-+)
-+
-+func (d *sha512State) MarshalBinary() ([]byte, error) {
-+	buf := make([]byte, 0, marshaledSize512)
-+	return d.AppendBinary(buf)
-+}
-+
-+func (d *sha512State) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint64(b)
-+	b, d.h[1] = consumeUint64(b)
-+	b, d.h[2] = consumeUint64(b)
-+	b, d.h[3] = consumeUint64(b)
-+	b, d.h[4] = consumeUint64(b)
-+	b, d.h[5] = consumeUint64(b)
-+	b, d.h[6] = consumeUint64(b)
-+	b, d.h[7] = consumeUint64(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = n << 3
-+	d.nh = n >> 61
-+	d.nx = uint32(n) % 128
-+	return nil
-+}
-+
-+func (d *sha512State) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint64(buf, d.h[0])
-+	buf = appendUint64(buf, d.h[1])
-+	buf = appendUint64(buf, d.h[2])
-+	buf = appendUint64(buf, d.h[3])
-+	buf = appendUint64(buf, d.h[4])
-+	buf = appendUint64(buf, d.h[5])
-+	buf = appendUint64(buf, d.h[6])
-+	buf = appendUint64(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
-+	return buf, nil
 +}
 +
 +// appendUint64 appends x into b as a big endian byte sequence.
@@ -5078,10 +4874,10 @@ index 00000000000000..284952ca345475
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
 new file mode 100644
-index 00000000000000..4a64c2f09f1f9c
+index 00000000000000..e0d0b8e8bd8cf3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
-@@ -0,0 +1,40 @@
+@@ -0,0 +1,81 @@
 +// Package ossl provides a Go interface to OpenSSL.
 +package ossl
 +
@@ -5106,7 +4902,9 @@ index 00000000000000..4a64c2f09f1f9c
 +}
 +*/
 +import "C"
-+import "unsafe"
++import (
++	"unsafe"
++)
 +
 +func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
 +	var errst C.mkcgo_err_state
@@ -5122,12 +4920,51 @@ index 00000000000000..4a64c2f09f1f9c
 +	}
 +	return nil
 +}
++
++const _OSSL_PARAM_UNMODIFIED uint = uint(^uintptr(0))
++
++// OSSL_PARAM is a structure to pass or request object parameters.
++// https://docs.openssl.org/3.0/man3/OSSL_PARAM/.
++type OSSL_PARAM struct {
++	Key        *byte
++	DataType   uint32
++	Data       unsafe.Pointer
++	DataSize   uint
++	ReturnSize uint
++}
++
++func ossl_param_construct(key *byte, dataType uint32, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return OSSL_PARAM{
++		Key:        key,
++		DataType:   dataType,
++		Data:       data,
++		DataSize:   uint(dataSize),
++		ReturnSize: _OSSL_PARAM_UNMODIFIED,
++	}
++}
++
++func OSSL_PARAM_construct_octet_string(key *byte, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_OCTET_STRING, data, dataSize)
++}
++
++func OSSL_PARAM_construct_int32(key *byte, data *int32) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_INTEGER, unsafe.Pointer(data), 4)
++}
++
++func OSSL_PARAM_construct_end() OSSL_PARAM {
++	return OSSL_PARAM{}
++}
++
++func OSSL_PARAM_modified(param *OSSL_PARAM) bool {
++	// If ReturnSize is not set, the parameter has not been modified.
++	return param != nil && param.ReturnSize != _OSSL_PARAM_UNMODIFIED
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..012d60f83eed85
+index 00000000000000..5790defeb6eb55
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,390 @@
+@@ -0,0 +1,399 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -5153,6 +4990,7 @@ index 00000000000000..012d60f83eed85
 +// #include <openssl/core_names.h>
 +// #include <openssl/provider.h>
 +// #include <openssl/param_build.h>
++// #include <openssl/params.h>
 +// #endif
 +// #if OPENSSL_VERSION_NUMBER < 0x10100000L
 +// #include <openssl/bn.h>
@@ -5216,6 +5054,9 @@ index 00000000000000..012d60f83eed85
 +	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
 +	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
 +	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
 +};
 +
 +typedef void* _OPENSSL_INIT_SETTINGS_PTR;
@@ -5319,6 +5160,10 @@ index 00000000000000..012d60f83eed85
 +void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
 +int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in) __attribute__((noescape,nocallback));
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
@@ -5483,6 +5328,7 @@ index 00000000000000..012d60f83eed85
 +
 +// OSSL_PARAM API
 +void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
 +_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3")));
 +void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
 +_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
@@ -5520,10 +5366,10 @@ index 00000000000000..012d60f83eed85
 +#endif // _GO_OSSL_SHIMS_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..0219d15b9c4fbf
+index 00000000000000..1444f551331fb6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2011 @@
+@@ -0,0 +1,2061 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -5624,7 +5470,11 @@ index 00000000000000..0219d15b9c4fbf
 +int (*_g_EVP_MD_CTX_copy)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
 +int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
 +void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
 +_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
++int (*_g_EVP_MD_CTX_set_params)(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_settable_params)(_EVP_MD_CTX_PTR);
 +_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
 +void (*_g_EVP_MD_free)(_EVP_MD_PTR);
 +const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
@@ -5738,6 +5588,7 @@ index 00000000000000..0219d15b9c4fbf
 +int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
 +_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
 +void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_OSSL_PARAM_locate_const)(const _OSSL_PARAM_PTR, const char*);
 +int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
 +const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
 +_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
@@ -6020,6 +5871,10 @@ index 00000000000000..0219d15b9c4fbf
 +	__mkcgo__dlsym(EVP_MAC_final)
 +	__mkcgo__dlsym(EVP_MAC_init)
 +	__mkcgo__dlsym(EVP_MAC_update)
++	__mkcgo__dlsym(EVP_MD_CTX_get_params)
++	__mkcgo__dlsym(EVP_MD_CTX_gettable_params)
++	__mkcgo__dlsym(EVP_MD_CTX_set_params)
++	__mkcgo__dlsym(EVP_MD_CTX_settable_params)
 +	__mkcgo__dlsym(EVP_MD_fetch)
 +	__mkcgo__dlsym(EVP_MD_free)
 +	__mkcgo__dlsym(EVP_MD_get0_name)
@@ -6057,6 +5912,7 @@ index 00000000000000..0219d15b9c4fbf
 +	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
 +	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
 +	__mkcgo__dlsym(OSSL_PARAM_free)
++	__mkcgo__dlsym(OSSL_PARAM_locate_const)
 +	__mkcgo__dlsym(OSSL_PROVIDER_available)
 +	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
 +	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
@@ -6083,6 +5939,10 @@ index 00000000000000..0219d15b9c4fbf
 +	_g_EVP_MAC_final = NULL;
 +	_g_EVP_MAC_init = NULL;
 +	_g_EVP_MAC_update = NULL;
++	_g_EVP_MD_CTX_get_params = NULL;
++	_g_EVP_MD_CTX_gettable_params = NULL;
++	_g_EVP_MD_CTX_set_params = NULL;
++	_g_EVP_MD_CTX_settable_params = NULL;
 +	_g_EVP_MD_fetch = NULL;
 +	_g_EVP_MD_free = NULL;
 +	_g_EVP_MD_get0_name = NULL;
@@ -6120,6 +5980,7 @@ index 00000000000000..0219d15b9c4fbf
 +	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
 +	_g_OSSL_PARAM_BLD_to_param = NULL;
 +	_g_OSSL_PARAM_free = NULL;
++	_g_OSSL_PARAM_locate_const = NULL;
 +	_g_OSSL_PROVIDER_available = NULL;
 +	_g_OSSL_PROVIDER_get0_name = NULL;
 +	_g_OSSL_PROVIDER_try_load = NULL;
@@ -6779,16 +6640,44 @@ index 00000000000000..0219d15b9c4fbf
 +	_g_EVP_MD_CTX_free(_arg0);
 +}
 +
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
 +	mkcgo_err_clear();
-+	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
 +	mkcgo_err_clear();
-+	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
@@ -7450,6 +7339,13 @@ index 00000000000000..0219d15b9c4fbf
 +	_g_OSSL_PARAM_free(_arg0);
 +}
 +
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, mkcgo_err_state *_err_state) {
++	mkcgo_err_clear();
++	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
 +	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
 +}
@@ -7537,10 +7433,10 @@ index 00000000000000..0219d15b9c4fbf
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..568e410a533626
+index 00000000000000..9079f7a0cffc40
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,1297 @@
+@@ -0,0 +1,1329 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -7604,6 +7500,8 @@ index 00000000000000..568e410a533626
 +	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
 +	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
 +	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
++	OSSL_PARAM_INTEGER                  = 1
++	OSSL_PARAM_OCTET_STRING             = 5
 +)
 +
 +type BIGNUM_PTR = C._BIGNUM_PTR
@@ -8155,12 +8053,36 @@ index 00000000000000..568e410a533626
 +	C._mkcgo_EVP_MD_CTX_free(ctx)
 +}
 +
++func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", _err)
++}
++
++func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
++}
++
 +func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
 +	var _err C.mkcgo_err_state
 +	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
 +	return _ret, newMkcgoErr("EVP_MD_CTX_new", _err)
 +}
 +
++func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", _err)
++}
++
++func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", _err)
++}
++
 +func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
 +	var _err C.mkcgo_err_state
 +	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
@@ -8761,6 +8683,12 @@ index 00000000000000..568e410a533626
 +	C._mkcgo_OSSL_PARAM_free(p)
 +}
 +
++func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", _err)
++}
++
 +func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
 +	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
 +}
@@ -8840,10 +8768,10 @@ index 00000000000000..568e410a533626
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..66249349e78e22
+index 00000000000000..ea01eed750a1c5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,330 @@
+@@ -0,0 +1,337 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -8929,6 +8857,8 @@ index 00000000000000..66249349e78e22
 +	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
 +	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
 +	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
 +};
 +
 +typedef void* mkcgo_err_state;
@@ -9041,7 +8971,11 @@ index 00000000000000..66249349e78e22
 +int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
 +int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
 +void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, mkcgo_err_state *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
 +_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
 +_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
 +void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
 +const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
@@ -9157,6 +9091,7 @@ index 00000000000000..66249349e78e22
 +int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, mkcgo_err_state *);
 +_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, mkcgo_err_state *);
 +void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, mkcgo_err_state *);
 +int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
 +const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
 +_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, mkcgo_err_state *);
@@ -9859,6 +9794,595 @@ index 00000000000000..ace373e6d7bb0f
 +	}
 +	return out, nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
+new file mode 100644
+index 00000000000000..1d8f3ad00ead7e
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
+@@ -0,0 +1,239 @@
++//go:build !cmd_go_bootstrap && cgo
++
++package openssl
++
++import (
++	"crypto"
++	"errors"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// This file contains code specific to the built-in OpenSSL providers.
++
++// _OSSL_MD5_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/md5.h#L33.
++type _OSSL_MD5_CTX struct {
++	h      [4]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
++}
++
++func (d *_OSSL_MD5_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
++
++func (d *_OSSL_MD5_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
++// _OSSL_SHA_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
++type _OSSL_SHA_CTX struct {
++	h      [5]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
++}
++
++func (d *_OSSL_SHA_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b, d.h[4] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
++
++func (d *_OSSL_SHA_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
++// _OSSL_SHA256_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L51.
++type _OSSL_SHA256_CTX struct {
++	h      [8]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
++}
++
++func (d *_OSSL_SHA256_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b, d.h[4] = consumeUint32(b)
++	b, d.h[5] = consumeUint32(b)
++	b, d.h[6] = consumeUint32(b)
++	b, d.h[7] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
++
++func (d *_OSSL_SHA256_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = appendUint32(buf, d.h[5])
++	buf = appendUint32(buf, d.h[6])
++	buf = appendUint32(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
++// _OSSL_SHA512_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
++type _OSSL_SHA512_CTX struct {
++	h      [8]uint64
++	nl, nh uint64
++	x      [128]byte
++	nx     uint32
++}
++
++func (d *_OSSL_SHA512_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint64(b)
++	b, d.h[1] = consumeUint64(b)
++	b, d.h[2] = consumeUint64(b)
++	b, d.h[3] = consumeUint64(b)
++	b, d.h[4] = consumeUint64(b)
++	b, d.h[5] = consumeUint64(b)
++	b, d.h[6] = consumeUint64(b)
++	b, d.h[7] = consumeUint64(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = n << 3
++	d.nh = n >> 61
++	d.nx = uint32(n) % 128
++	return nil
++}
++
++func (d *_OSSL_SHA512_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint64(buf, d.h[0])
++	buf = appendUint64(buf, d.h[1])
++	buf = appendUint64(buf, d.h[2])
++	buf = appendUint64(buf, d.h[3])
++	buf = appendUint64(buf, d.h[4])
++	buf = appendUint64(buf, d.h[5])
++	buf = appendUint64(buf, d.h[6])
++	buf = appendUint64(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
++	return buf, nil
++}
++
++func getOSSLDigetsContext(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
++	switch vMajor {
++	case 1:
++		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
++		type mdCtx struct {
++			_       [2]unsafe.Pointer
++			_       uint32
++			md_data unsafe.Pointer
++		}
++		return (*mdCtx)(unsafe.Pointer(ctx)).md_data
++	case 3:
++		// The EVP_MD_CTX memory layout has changed in OpenSSL 3
++		// and the property holding the internal structure is no longer md_data but algctx.
++		// https://github.com/openssl/openssl/blob/5675a5aaf6a2e489022bcfc18330dae9263e598e/crypto/evp/evp_local.h#L16.
++		type mdCtx struct {
++			_      [3]unsafe.Pointer
++			_      uint32
++			_      [3]unsafe.Pointer
++			algctx unsafe.Pointer
++		}
++		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++var errHashStateInvalid = errors.New("openssl: can't retrieve hash state")
++
++func osslHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
++	algctx := getOSSLDigetsContext(ctx)
++	if algctx == nil {
++		return nil, errHashStateInvalid
++	}
++	buf = append(buf, magic...)
++	switch ch {
++	case crypto.MD5:
++		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA1:
++		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA224, crypto.SHA256:
++		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++}
++
++func osslHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
++	algctx := getOSSLDigetsContext(ctx)
++	if algctx == nil {
++		return errHashStateInvalid
++	}
++	b = b[len(magic):]
++	switch ch {
++	case crypto.MD5:
++		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA1:
++		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA224, crypto.SHA256:
++		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
+new file mode 100644
+index 00000000000000..693849f152f9c1
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
+@@ -0,0 +1,338 @@
++//go:build !cmd_go_bootstrap && cgo
++
++package openssl
++
++import (
++	"crypto"
++	"errors"
++	"runtime"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// This file contains code specific to the SymCrypt provider.
++
++const (
++	_SCOSSL_DIGEST_PARAM_STATE              cString = "state\x00"
++	_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM cString = "recompute_checksum\x00"
++)
++
++const (
++	_SYMCRYPT_BLOB_MAGIC = 0x636D7973 // "cysm" in little-endian
++
++	_SymCryptBlobTypeHashState       = 0x100
++	_SymCryptBlobTypeMd2State        = _SymCryptBlobTypeHashState + 1
++	_SymCryptBlobTypeMd4State        = _SymCryptBlobTypeHashState + 2
++	_SymCryptBlobTypeMd5State        = _SymCryptBlobTypeHashState + 3
++	_SymCryptBlobTypeSha1State       = _SymCryptBlobTypeHashState + 4
++	_SymCryptBlobTypeSha256State     = _SymCryptBlobTypeHashState + 5
++	_SymCryptBlobTypeSha384State     = _SymCryptBlobTypeHashState + 6
++	_SymCryptBlobTypeSha512State     = _SymCryptBlobTypeHashState + 7
++	_SymCryptBlobTypeSha3_256State   = _SymCryptBlobTypeHashState + 8
++	_SymCryptBlobTypeSha3_384State   = _SymCryptBlobTypeHashState + 9
++	_SymCryptBlobTypeSha3_512State   = _SymCryptBlobTypeHashState + 10
++	_SymCryptBlobTypeSha224State     = _SymCryptBlobTypeHashState + 11
++	_SymCryptBlobTypeSha512_224State = _SymCryptBlobTypeHashState + 12
++	_SymCryptBlobTypeSha512_256State = _SymCryptBlobTypeHashState + 13
++	_SymCryptBlobTypeSha3_224State   = _SymCryptBlobTypeHashState + 14
++
++	_SYMCRYPT_MD5_STATE_EXPORT_SIZE    = uint32(unsafe.Sizeof(_SYMCRYPT_MD5_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA1_STATE_EXPORT_SIZE   = uint32(unsafe.Sizeof(_SYMCRYPT_SHA1_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA256_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA256_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA512_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA512_STATE_EXPORT_BLOB{}))
++)
++
++type _SYMCRYPT_BLOB_HEADER struct {
++	magic uint32
++	size  uint32
++	_type uint32
++}
++
++type _SYMCRYPT_BLOB_TRAILER struct {
++	checksum [8]uint8
++}
++
++// _UINT64 is a 64-bit unsigned integer, stored in native endianess.
++// It is used to represent a SymCrypt UINT64 type without making the
++// parent struct 8-byte aligned, given that the Windows ABI makes
++// the struct 4-byte aligned.
++type _UINT64 [2]uint32
++
++func newUINT64(v uint64) _UINT64 {
++	var u _UINT64
++	if isBigEndian {
++		u[0], u[1] = uint32(v>>32), uint32(v)
++	} else {
++		u[0], u[1] = uint32(v), uint32(v>>32)
++	}
++	return u
++}
++
++func (u *_UINT64) uint64() uint64 {
++	if isBigEndian {
++		return uint64(u[0])<<32 | (uint64(u[1]))
++	}
++	return uint64(u[0]) | (uint64(u[1]) << 32)
++}
++
++// symCryptAppendBinary appends the binary representation of a SymCrypt state
++// to the given destination slice.
++func symCryptAppendBinary(dst, chain, buffer []byte, blength _UINT64) []byte {
++	length := blength.uint64()
++	var nx uint64
++	if len(buffer) <= 64 {
++		nx = length & 0x3f
++	} else {
++		nx = length & 0x7f
++	}
++	dst = append(dst, chain...)
++	dst = append(dst, buffer[:nx]...)
++	dst = append(dst, make([]byte, len(buffer)-int(nx))...)
++	dst = appendUint64(dst, length)
++	return dst
++}
++
++// symCryptUnmarshalBinary unmarshals the binary representation of a SymCrypt state
++// from the given source slice. It returns the length of the data.
++func symCryptUnmarshalBinary(d []byte, chain, buffer []byte) _UINT64 {
++	copy(chain[:], d)
++	d = d[len(chain):]
++	copy(buffer[:], d)
++	d = d[len(buffer):]
++	_, length := consumeUint64(d)
++	return newUINT64(length)
++}
++
++// swapEndianessUint32 swaps the endianness of the given byte slice
++// in place. It assumes the slice is a backup of a 32-bit integer array.
++func swapEndianessUint32(d []uint8) {
++	for i := 0; i < len(d); i += 4 {
++		d[i], d[i+3] = d[i+3], d[i]
++		d[i+1], d[i+2] = d[i+2], d[i+1]
++	}
++
++}
++
++type _SYMCRYPT_MD5_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [16]uint8 // little endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
++}
++
++func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	// b.chain is little endian, but Go expects big endian,
++	// we need to swap the bytes.
++	swapEndianessUint32(b.chain[:])
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
++
++func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++	swapEndianessUint32(b.chain[:])
++}
++
++type _SYMCRYPT_SHA1_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [20]uint8 // big endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
++}
++
++func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
++
++func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++}
++
++type _SYMCRYPT_SHA256_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [32]uint8 // big endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
++}
++
++func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
++
++func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++}
++
++type _SYMCRYPT_SHA512_STATE_EXPORT_BLOB struct {
++	header  _SYMCRYPT_BLOB_HEADER
++	chain   [64]uint8 // big endian
++	lengthL _UINT64   // native endian
++	lengthH _UINT64   // native endian
++	buffer  [128]uint8
++	_       [8]uint8 // reserved
++	_       _SYMCRYPT_BLOB_TRAILER
++}
++
++func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	if b.lengthH.uint64() != 0 {
++		return nil, errors.New("exporting state with more than 2^63-1 bytes of data is not supported")
++	}
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.lengthL), nil
++}
++
++func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.lengthL = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++}
++
++func symCryptHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
++	size, typ := symCryptHashStateInfo(ch)
++	state := make([]byte, size, _SYMCRYPT_SHA512_STATE_EXPORT_SIZE) // 512 is the largest size
++	var pinner runtime.Pinner
++	pinner.Pin(&state[0])
++	defer pinner.Unpin()
++	params := [2]ossl.OSSL_PARAM{
++		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), unsafe.Pointer(&state[0]), len(state)),
++		ossl.OSSL_PARAM_construct_end(),
++	}
++	if _, err := ossl.EVP_MD_CTX_get_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0]))); err != nil {
++		return nil, err
++	}
++	if !ossl.OSSL_PARAM_modified(&params[0]) {
++		return nil, errors.New("EVP_MD_CTX_get_params did not retrieve the state")
++	}
++
++	header := (*_SYMCRYPT_BLOB_HEADER)(unsafe.Pointer(&state[0]))
++	if header.magic != _SYMCRYPT_BLOB_MAGIC {
++		return nil, errors.New("invalid blob magic")
++	}
++	if header.size != size {
++		return nil, errors.New("invalid blob size")
++	}
++	if header._type != typ {
++		return nil, errors.New("invalid blob type")
++	}
++
++	buf = append(buf, magic...)
++	switch ch {
++	case crypto.MD5:
++		blob := (*_SYMCRYPT_MD5_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA1:
++		blob := (*_SYMCRYPT_SHA1_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA224, crypto.SHA256:
++		blob := (*_SYMCRYPT_SHA256_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		blob := (*_SYMCRYPT_SHA512_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++}
++
++func symCryptHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
++	size, typ := symCryptHashStateInfo(ch)
++	hdr := _SYMCRYPT_BLOB_HEADER{
++		magic: _SYMCRYPT_BLOB_MAGIC,
++		size:  size,
++		_type: typ,
++	}
++	var blobPtr unsafe.Pointer
++	b = b[len(magic):]
++	switch ch {
++	case crypto.MD5:
++		var blob _SYMCRYPT_MD5_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA1:
++		var blob _SYMCRYPT_SHA1_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA224, crypto.SHA256:
++		var blob _SYMCRYPT_SHA256_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		var blob _SYMCRYPT_SHA512_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++	var checksum int32 = 1
++	var pinner runtime.Pinner
++	pinner.Pin(blobPtr)
++	pinner.Pin(&checksum)
++	defer pinner.Unpin()
++	params := [3]ossl.OSSL_PARAM{
++		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), blobPtr, int(hdr.size)),
++		ossl.OSSL_PARAM_construct_int32(_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr(), &checksum),
++		ossl.OSSL_PARAM_construct_end(),
++	}
++	_, err := ossl.EVP_MD_CTX_set_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0])))
++	return err
++}
++
++func symCryptHashStateInfo(ch crypto.Hash) (size, typ uint32) {
++	switch ch {
++	case crypto.MD5:
++		return _SYMCRYPT_MD5_STATE_EXPORT_SIZE, _SymCryptBlobTypeMd5State
++	case crypto.SHA1:
++		return _SYMCRYPT_SHA1_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha1State
++	case crypto.SHA224:
++		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha224State
++	case crypto.SHA256:
++		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha256State
++	case crypto.SHA384:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha384State
++	case crypto.SHA512_224:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_224State
++	case crypto.SHA512_256:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_256State
++	case crypto.SHA512:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512State
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++}
++
++// isSymCryptHashStateSerializable checks if the SymCrypt hash state is serializable.
++func isSymCryptHashStateSerializable(md ossl.EVP_MD_PTR) bool {
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestInit_ex(ctx, md, nil); err != nil {
++		return false
++	}
++	params, err := ossl.EVP_MD_CTX_gettable_params(ctx)
++	if err != nil {
++		return false
++	}
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
++		return false
++	}
++	params, err = ossl.EVP_MD_CTX_settable_params(ctx)
++	if err != nil {
++		return false
++	}
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
++		return false
++	}
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr()); err != nil {
++		return false
++	}
++	return true
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 new file mode 100644
 index 00000000000000..34f376bed8f091
@@ -18952,21 +19476,21 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 4c87639632f887..271c698c1d681b 100644
+index 4c87639632f887..52b36b8bb07730 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From ab771ca5c4db695b05b2b5448905e1c0a38cf263 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 3 Jun 2025 10:21:32 +0100
Subject: [PATCH 322/887] run go mod tidy

---
 patches/0002-Vendor-crypto-backends.patch | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0002-Vendor-crypto-backends.patch
index 578b6e5eb29..4e6f1fbf4aa 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0002-Vendor-crypto-backends.patch
@@ -8,7 +8,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
 ---
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
- src/go.sum                                    |   12 +
+ src/go.sum                                    |    6 +
  src/go/build/deps_test.go                     |   35 +-
  src/go/build/vendor_test.go                   |    3 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
@@ -105,7 +105,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 99 files changed, 17638 insertions(+), 7 deletions(-)
+ 99 files changed, 17632 insertions(+), 7 deletions(-)
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -244,20 +244,14 @@ index 28e250668dd52c..ad0c97b35c174c 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ca2e7027fad3bd..f8a640dc9f26f4 100644
+index ca2e7027fad3bd..ff280decc565b6 100644
 --- a/src/go.sum
 +++ b/src/go.sum
-@@ -1,3 +1,15 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791 h1:5PZl6k34BcDxn4DT+f8GLx51OZBtmx22oQ01ygrbGt0=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250424082917-c494c2169791/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
+@@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8 h1:+7pPRMRv1wcUtn81ocQbQ0mvxZWPsP2obrXfgEo8YVo=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56 h1:rignn19hDdGfSVEtNeR0msL6wnkiqr61/VoB0i3zbSI=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250422083516-a883ce76dd56/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e h1:4AiS64Ia2K2cT5VQdOTo41sgmrr3yuKpt+GAcvpWPvw=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40 h1:6K+qAlu0vRBqoZ938zEdZ0+jFDVVU+67ZzKOrvTsNSk=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250224213920-97653fcd3f40/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc h1:JuI6hAMIiQhfuIv/wYVWSAlO4xZBfhBjUiov/1v//AQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=

From ced71390ba7869a967036df9f06fe45c21be1f39 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Jun 2025 08:56:57 -0700
Subject: [PATCH 323/887] Merge pull request #1688 from
 microsoft/dependabot/github_actions/github/codeql-action-3.28.19

build(deps): bump github/codeql-action from 3.28.18 to 3.28.19
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index adb2408aa64..9f6ab6a5144 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           category: /language:go

From 10ecb9b6660694fbc1ad960c9b6ec73de7669c2d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Jun 2025 10:27:18 -0700
Subject: [PATCH 324/887] build(deps): bump golang.org/x/net from 0.40.0 to
 0.41.0 in /eng/_util (#1695)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.40.0 to 0.41.0.
- [Commits](https://github.com/golang/net/compare/v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  4 ++--
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1280fca55ee..458bb38a941 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/net v0.40.0
+	golang.org/x/net v0.41.0
 	golang.org/x/sys v0.33.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.25.0 // indirect
+	golang.org/x/text v0.26.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 8407c112a10..76df5a72828 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
-golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
+golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
+golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
 golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
 golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.25.0 h1:qVyWApTSYLk/drJRO5mDlNYskwQznZmkpV2c8q9zls4=
-golang.org/x/text v0.25.0/go.mod h1:WEdwpYrmk1qmdHvhkSTNPm3app7v4rsT8F2UD6+VHIA=
-golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=
-golang.org/x/tools v0.30.0/go.mod h1:c347cR/OJfw5TI+GfX7RUPNMdDRRbjvYTS0jPyvsVtY=
+golang.org/x/text v0.26.0 h1:P42AVeLghgTYr4+xUnTRKDMqpar+PtX7KWuNQL21L8M=
+golang.org/x/text v0.26.0/go.mod h1:QK15LZJUUQVJxhz7wXgxSy/CJaTFjd0G+YLonydOVQA=
+golang.org/x/tools v0.33.0 h1:4qz2S3zmRxbGIhDIAgjxvFutSvH5EfnsYrRBj0UI0bc=
+golang.org/x/tools v0.33.0/go.mod h1:CIJMaWEY88juyUfo7UbgPqbC8rU2OqfAV1h2Qp0oMYI=

From 476a12f481f4a089baf0e5cc11ea187b57127b71 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 6 Jun 2025 20:59:44 +0200
Subject: [PATCH 325/887] Add appinsights telemetry (#1684)

* add appinsights telemetry

* fix test

* fix test

* move cmd vendoring to the backend vendoring patch file

* change telemetry variable values

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* add data collection notice to product readme

* wrap data collection paragraph

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 README.md                                     |   15 +
 ...> 0001-Vendor-external-dependencies.patch} | 1592 ++++++++++++++++-
 ...02-Add-crypto-backend-GOEXPERIMENTs.patch} |    0
 patches/0010-add-appinsights-telemetry.patch  |  238 +++
 4 files changed, 1843 insertions(+), 2 deletions(-)
 rename patches/{0002-Vendor-crypto-backends.patch => 0001-Vendor-external-dependencies.patch} (92%)
 rename patches/{0001-Add-crypto-backend-GOEXPERIMENTs.patch => 0002-Add-crypto-backend-GOEXPERIMENTs.patch} (100%)
 create mode 100644 patches/0010-add-appinsights-telemetry.patch

diff --git a/README.md b/README.md
index a3d1fd14b70..0c9a3f14159 100644
--- a/README.md
+++ b/README.md
@@ -143,3 +143,18 @@ trademarks or logos is subject to and must follow
 [Microsoft's Trademark & Brand Guidelines](https://www.microsoft.com/en-us/legal/intellectualproperty/trademarks/usage/general).
 Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship.
 Any use of third-party trademarks or logos are subject to those third-party's policies.
+
+## Data Collection
+
+The software may collect information about you and your use of the software and
+send it to Microsoft. Microsoft may use this information to provide services
+and improve our products and services. You may turn off the telemetry by
+setting the `MS_GOTOOLCHAIN_TELEMETRY_ENABLED` environment variable to `0`.
+There are also some features in the software that may enable you and Microsoft
+to collect data from users of your applications. If you use these features,
+you must comply with applicable law, including providing appropriate notices to
+users of your applications together with a copy of Microsoft’s privacy
+statement. Our privacy statement is located at https://go.microsoft.com/fwlink/?LinkID=824704.
+You can learn more about data collection and use in the help documentation and
+our privacy statement. Your use of the software operates as your consent to
+these practices.
\ No newline at end of file
diff --git a/patches/0002-Vendor-crypto-backends.patch b/patches/0001-Vendor-external-dependencies.patch
similarity index 92%
rename from patches/0002-Vendor-crypto-backends.patch
rename to patches/0001-Vendor-external-dependencies.patch
index 4e6f1fbf4aa..8f8bfc9129b 100644
--- a/patches/0002-Vendor-crypto-backends.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1,11 +1,35 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: Quim Muntal <qmuntaldiaz@microsoft.com>
 Date: Mon, 23 May 2022 12:59:36 +0000
-Subject: [PATCH] Vendor crypto backends
+Subject: [PATCH] Vendor external dependencies
 
 To reproduce changes in 'src/vendor', run 'go mod vendor' in 'src'.
+To reproduce changes in 'src/cmd/vendor', run 'go mod vendor' in 'src/cmd'.
+If 'go mod vendor' makes any changes, run 'go mod tidy'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
+ src/cmd/go.mod                                |    1 +
+ src/cmd/go.sum                                |    2 +
+ .../internal/telemetry/counter/deps_ignore.go |   16 +
+ .../microsoft/go-infra/telemetry/LICENSE      |   21 +
+ .../microsoft/go-infra/telemetry/README.md    |    7 +
+ .../microsoft/go-infra/telemetry/config.json  |   67 +
+ .../go-infra/telemetry/counter/counter.go     |   63 +
+ .../telemetry/internal/appinsights/README.md  |   12 +
+ .../telemetry/internal/appinsights/client.go  |  175 ++
+ .../internal/appinsights/inmemorychannel.go   |  310 +++
+ .../internal/contracts/contexttagkeys.go      |   50 +
+ .../internal/contracts/envelope.go            |  123 +
+ .../internal/contracts/response.go            |   32 +
+ .../internal/appinsights/jsonserializer.go    |   33 +
+ .../telemetry/internal/appinsights/package.go |   13 +
+ .../internal/appinsights/telemetrycontext.go  |   44 +
+ .../internal/appinsights/transmitter.go       |  169 ++
+ .../telemetry/internal/config/config.go       |   64 +
+ .../telemetry/internal/telemetry/proginfo.go  |   32 +
+ .../telemetry/internal/telemetry/telemetry.go |   32 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  123 +
+ src/cmd/vendor/modules.txt                    |    8 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
@@ -105,7 +129,26 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 99 files changed, 17632 insertions(+), 7 deletions(-)
+ 121 files changed, 19029 insertions(+), 7 deletions(-)
+ create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/README.md
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/envelope.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/response.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/jsonserializer.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/package.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/telemetrycontext.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/telemetry.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
@@ -201,6 +244,1551 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/subtle/aliasing.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
+diff --git a/src/cmd/go.mod b/src/cmd/go.mod
+index df479393c00d26..569714fc62d4e5 100644
+--- a/src/cmd/go.mod
++++ b/src/cmd/go.mod
+@@ -4,6 +4,7 @@ go 1.25
+ 
+ require (
+ 	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
++	github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
+ 	golang.org/x/arch v0.14.0
+ 	golang.org/x/build v0.0.0-20250211223606-a5e3f75caa63
+ 	golang.org/x/mod v0.24.1-0.20250508140430-9d3333156f46
+diff --git a/src/cmd/go.sum b/src/cmd/go.sum
+index d95c0e3a862fb8..acd611a5b8cde7 100644
+--- a/src/cmd/go.sum
++++ b/src/cmd/go.sum
+@@ -4,6 +4,8 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
+ github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
+ github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
+ github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784 h1:ZMTsT8szMuZcaqRWSiJtpRjAXp0dMKzwFEz8WvUAsV4=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
+ github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
+ github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+ golang.org/x/arch v0.14.0 h1:z9JUEZWr8x4rR0OU6c4/4t6E6jOZ8/QBS2bBYBm4tx4=
+diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
+new file mode 100644
+index 00000000000000..0f1edc8966e6f2
+--- /dev/null
++++ b/src/cmd/internal/telemetry/counter/deps_ignore.go
+@@ -0,0 +1,16 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build ms_ignore_cmd_deps
++
++package main
++
++import (
++	_ "github.com/microsoft/go-infra/telemetry"
++	_ "github.com/microsoft/go-infra/telemetry/counter"
++)
++
++// This file is here just to declare the external dependencies
++// that are used by the cmd module. This allows to track
++// their versions in a single patch file.
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
+new file mode 100644
+index 00000000000000..9e841e7a26e4eb
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
++
++    Copyright (c) Microsoft Corporation.
++
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
++
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
++
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
+new file mode 100644
+index 00000000000000..472894e2011f93
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
+@@ -0,0 +1,7 @@
++# telemetry
++
++This directory, the `telemetry` package, contains the telemetry transmission code for the Microsoft build of Go.
++It is specialized to work similarly to the upstream telemetry counters.
++
++The [`appinsights`](appinsights) package is an alternative client that can send more arbitrary telemetry event data to Application Insights.
++It only supports a few features of Application Insights that are used in other projects maintained by the Microsoft build of Go team.
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+new file mode 100644
+index 00000000000000..01f28774efbb35
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+@@ -0,0 +1,67 @@
++{
++	"GOOS": [
++		"aix",
++		"android",
++		"darwin",
++		"dragonfly",
++		"freebsd",
++		"hurd",
++		"illumos",
++		"ios",
++		"js",
++		"linux",
++		"nacl",
++		"netbsd",
++		"openbsd",
++		"plan9",
++		"solaris",
++		"wasip1",
++		"windows",
++		"zos"
++	],
++	"GOARCH": [
++		"386",
++		"amd64",
++		"amd64p32",
++		"arm",
++		"arm64",
++		"arm64be",
++		"armbe",
++		"loong64",
++		"mips",
++		"mips64",
++		"mips64le",
++		"mips64p32",
++		"mips64p32le",
++		"mipsle",
++		"ppc",
++		"ppc64",
++		"ppc64le",
++		"riscv",
++		"riscv64",
++		"s390",
++		"s390x",
++		"sparc",
++		"sparc64",
++		"wasm"
++	],
++	"GoVersion": [
++		"go1.24rc1",
++		"go1.24rc2",
++		"go1.24rc3",
++		"go1.24.0",
++		"go1.24.1",
++		"go1.24.2",
++		"go1.24.3"
++	],
++	"Programs": [
++		{
++			"Name": "cmd/go",
++			"Counters": [
++				{
++					"Name": "go/invocations"
++				}
++			]
++		}
++	]
++}
+\ No newline at end of file
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
+new file mode 100644
+index 00000000000000..542b9c780b5f1b
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
+@@ -0,0 +1,63 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package counter
++
++import (
++	"flag"
++	"path"
++	"runtime/debug"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights"
++	"github.com/microsoft/go-infra/telemetry/internal/telemetry"
++)
++
++// A Counter is a single named event counter.
++type Counter = appinsights.Event
++
++// Inc increments the counter with the given name.
++func Inc(name string) {
++	New(name).Inc()
++}
++
++// Add adds n to the counter with the given name.
++func Add(name string, n int64) {
++	New(name).Add(n)
++}
++
++// New returns a counter with the given name.
++func New(name string) *Counter {
++	return telemetry.Client.NewEvent(name, nil)
++}
++
++// CountFlags creates a counter for every flag that is set
++// and increments the counter. The name of the counter is
++// the concatenation of prefix and the flag name.
++//
++//	For instance, CountFlags("gopls/flag:", *flag.CommandLine)
++func CountFlags(prefix string, fs flag.FlagSet) {
++	fs.Visit(func(f *flag.Flag) {
++		New(prefix + f.Name).Inc()
++	})
++}
++
++// CountCommandLineFlags creates a counter for every flag
++// that is set in the default flag.CommandLine FlagSet using
++// the counter name binaryName+"/flag:"+flagName where
++// binaryName is the base name of the Path embedded in the
++// binary's build info. If the binary does not have embedded build
++// info, the "flag:"+flagName counter will be incremented.
++//
++// CountCommandLineFlags must be called after flags are parsed
++// with flag.Parse.
++//
++// For instance, if the -S flag is passed to cmd/compile and
++// CountCommandLineFlags is called after flags are parsed,
++// the "compile/flag:S" counter will be incremented.
++func CountCommandLineFlags() {
++	prefix := "flag:"
++	if buildInfo, ok := debug.ReadBuildInfo(); ok && buildInfo.Path != "" {
++		prefix = path.Base(buildInfo.Path) + "/" + prefix
++	}
++	CountFlags(prefix, *flag.CommandLine)
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/README.md b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/README.md
+new file mode 100644
+index 00000000000000..2e96890f60b871
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/README.md
+@@ -0,0 +1,12 @@
++# appinsights
++
++This package is a trimmed down version of https://github.com/microsoft/ApplicationInsights-Go.
++It is tailored for the use of the [Microsoft build of Go](https://github.com/microsoft/go).
++
++These are the changes made to the original package:
++
++- Remove all external dependencies.
++- Remove all telemetry types except for `Event`.
++- Simplify implementation.
++- Modernize the code.
++- Improve testing.
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
+new file mode 100644
+index 00000000000000..1a629e35709231
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
+@@ -0,0 +1,175 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package appinsights
++
++import (
++	"cmp"
++	"context"
++	"log"
++	"maps"
++	"net/http"
++	"sync"
++	"sync/atomic"
++	"time"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts"
++)
++
++// Client is the main entry point for sending telemetry to Application Insights.
++// Changing its properties after a telemetry item is created will have no effect.
++type Client struct {
++	// The instrumentation key used to identify the application.
++	// This key is required and must be set before sending any telemetry.
++	InstrumentationKey string
++
++	// The endpoint URL to which telemetry will be sent.
++	// If empty, it defaults to https://dc.services.visualstudio.com/v2/track.
++	Endpoint string
++
++	// Maximum number of telemetry items that can be submitted in each
++	// request. If this many items are buffered, the buffer will be
++	// flushed before MaxBatchInterval expires.
++	// If zero, it defaults to 1024.
++	MaxBatchSize int
++
++	// Maximum time to wait before sending a batch of telemetry.
++	// If zero, it defaults to 10 seconds.
++	MaxBatchInterval time.Duration
++
++	// Customized http client.
++	// If nil, it defaults to http.DefaultClient.
++	HTTPClient *http.Client
++
++	// Tags to be sent with every telemetry item.
++	// If nil, no additional tags will be sent.
++	Tags map[string]string
++
++	// ErrorLog specifies an optional logger for errors
++	// that occur when attempting to upload telemetry.
++	// If nil, logging is done via the log package's standard logger.
++	ErrorLog *log.Logger
++
++	// Function to filter out telemetry items by name before they are sent.
++	// If nil, all telemetry items are sent.
++	UploadFilter func(name string) bool
++
++	channel *inMemoryChannel
++	context *telemetryContext
++
++	initialized atomic.Bool
++	initOnce    sync.Once
++}
++
++// init initializes the client.
++// It is safe to call this method multiple times concurrently.
++func (c *Client) init() {
++	c.initOnce.Do(func() {
++		if c.InstrumentationKey == "" {
++			panic("instrumentation key is required")
++		}
++		endpoint := cmp.Or(c.Endpoint, "https://dc.services.visualstudio.com/v2/track")
++		batchSize := cmp.Or(c.MaxBatchSize, 1024)
++		batchInterval := cmp.Or(c.MaxBatchInterval, 10*time.Second)
++		httpClient := cmp.Or(c.HTTPClient, http.DefaultClient)
++		errorLog := c.ErrorLog
++		if errorLog == nil {
++			std := log.Default()
++			errorLog = log.New(std.Writer(), std.Prefix()+"appinsights: ", std.Flags())
++		}
++		c.channel = newInMemoryChannel(endpoint, batchSize, batchInterval, httpClient, errorLog)
++		c.context = setupContext(c.InstrumentationKey, c.Tags)
++		if err := contracts.SanitizeTags(c.context.Tags); err != nil {
++			c.channel.logf("Warning sanitizing tags: %v", err)
++		}
++
++		go c.channel.acceptLoop()
++		c.initialized.Store(true)
++	})
++}
++
++func setupContext(instrumentationKey string, tags map[string]string) *telemetryContext {
++	context := newTelemetryContext(instrumentationKey)
++	context.Tags["ai.internal.sdkVersion"] = internalVersion
++	maps.Copy(context.Tags, tags)
++	return context
++}
++
++// NewEvent creates a new event with the specified name.
++// If c is nil, returns a usable Event that does not send any telemetry.
++func (c *Client) NewEvent(name string, properties map[string]string) *Event {
++	return &Event{
++		name:       name,
++		client:     c,
++		properties: properties,
++	}
++}
++
++// TrackEvent logs a user action with the specified name.
++// If c is nil, nothing is logged.
++func (c *Client) TrackEvent(name string, properties map[string]string) {
++	c.NewEvent(name, properties).Inc()
++}
++
++// Forces the current queue to be sent.
++func (c *Client) Flush() {
++	if !c.initialized.Load() {
++		return
++	}
++	c.channel.flush()
++}
++
++// Close flushes and tears down the submission goroutine and closes internal channels.
++// Waits until all pending telemetry items have been submitted.
++func (c *Client) Close(ctx context.Context) {
++	if !c.initialized.Load() {
++		return
++	}
++	c.channel.close(ctx)
++}
++
++// Stop tears down the submission goroutines, closes internal channels.
++// Any telemetry waiting to be sent is discarded.
++// This is a more abrupt version of [Client.Close].
++func (c *Client) Stop() {
++	c.channel.stop()
++}
++
++// Submits the specified telemetry item.
++func (c *Client) track(data contracts.EventData, n int64) {
++	if n == 0 || (c.UploadFilter != nil && !c.UploadFilter(data.Name)) {
++		return
++	}
++	c.init()
++	ev := c.context.envelop(data)
++	if err := ev.Sanitize(); err != nil {
++		c.channel.logf("Warning sanitizing telemetry item: %v", err)
++	}
++	for range n {
++		c.channel.send(ev)
++	}
++}
++
++// Event represents an event to be tracked.
++type Event struct {
++	name       string
++	client     *Client
++	properties map[string]string
++}
++
++// Inc adds 1 to the counter.
++func (e *Event) Inc() {
++	e.Add(1)
++}
++
++// Add adds n to the counter. n cannot be negative, as counts cannot decrease.
++func (e *Event) Add(n int64) {
++	if e == nil || e.client == nil {
++		return
++	}
++	e.client.track(contracts.EventData{
++		Name:       e.name,
++		Ver:        2,
++		Properties: e.properties,
++	}, n)
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
+new file mode 100644
+index 00000000000000..05dbdfe0e3efcd
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
+@@ -0,0 +1,310 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package appinsights
++
++import (
++	"context"
++	"errors"
++	"log"
++	"net/http"
++	"slices"
++	"sync"
++	"sync/atomic"
++	"time"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts"
++)
++
++// batchItem is a telemetry item that is sent in a batch.
++type batchItem struct {
++	item    *contracts.Envelope
++	retries int
++}
++
++// inMemoryChannel stores events exclusively in memory.
++// Presently the only telemetry channel implementation available.
++type inMemoryChannel struct {
++	endpointAddr  string
++	batchSize     int
++	batchInterval time.Duration
++	errorLog      *log.Logger
++
++	collectChan chan *contracts.Envelope
++	flushChan   chan struct{}
++	retryChan   chan retryMessage
++
++	transmitter transmitter
++
++	// Use a context instead of a channel to
++	// allow propagating the cancellation to the
++	// transmitter and to the underlying HTTP client.
++	cancelCtx       context.Context
++	cancelCauseFunc context.CancelCauseFunc
++
++	throttled   atomic.Bool
++	closed      atomic.Bool
++	sendQueue   []*[]batchItem
++	sendQueueMu sync.Mutex
++	sendMu      sync.Mutex
++
++	itemsBuf sync.Pool
++}
++
++type retryMessage struct {
++	throttled  bool
++	retryAfter time.Time
++	items      []batchItem
++}
++
++// newInMemoryChannel creates an inMemoryChannel instance and starts a background submission goroutine.
++func newInMemoryChannel(endpointUrl string, batchSize int, batchInterval time.Duration, httpClient *http.Client, errorLog *log.Logger) *inMemoryChannel {
++	// Set up the channel
++	channel := &inMemoryChannel{
++		endpointAddr:  endpointUrl,
++		batchSize:     batchSize,
++		batchInterval: batchInterval,
++		errorLog:      errorLog,
++		collectChan:   make(chan *contracts.Envelope),
++		flushChan:     make(chan struct{}),
++		retryChan:     make(chan retryMessage),
++		transmitter:   newTransmitter(endpointUrl, httpClient),
++		itemsBuf: sync.Pool{
++			New: func() any {
++				buf := make([]batchItem, 0, batchSize)
++				return &buf
++			},
++		},
++	}
++	channel.cancelCtx, channel.cancelCauseFunc = context.WithCancelCause(context.Background())
++	return channel
++}
++
++func (channel *inMemoryChannel) logf(format string, args ...any) {
++	channel.errorLog.Printf(format, args...)
++}
++
++// Queues a single telemetry item
++func (channel *inMemoryChannel) send(item *contracts.Envelope) {
++	if item != nil && !channel.closed.Load() {
++		channel.collectChan <- item
++	}
++}
++
++// Forces the current queue to be sent
++func (channel *inMemoryChannel) flush() {
++	if channel.closed.Load() {
++		return
++	}
++	channel.flushChan <- struct{}{}
++}
++
++func (channel *inMemoryChannel) retry(throttled bool, retryAfter time.Time, items []batchItem) {
++	// Retry even if the channel is closed to allow for
++	// retrying items that were already sent.
++	channel.retryChan <- retryMessage{throttled, retryAfter, items}
++}
++
++var errStopped = errors.New("client stopped")
++var errClosed = errors.New("client closed")
++
++func (channel *inMemoryChannel) stop() {
++	if channel.closed.Load() {
++		return
++	}
++
++	channel.closed.Store(true)
++	channel.cancelCauseFunc(errStopped)
++}
++
++// close flushes and tears down the submission goroutine and closes internal
++// channels. Returns when all pending telemetry items have been submitted
++// (it is then safe to shut down without losing telemetry) or when
++// the context is canceled.
++func (channel *inMemoryChannel) close(ctx context.Context) {
++	if channel.closed.Load() {
++		return
++	}
++
++	channel.closed.Store(true)
++	channel.flushChan <- struct{}{}
++	select {
++	case <-ctx.Done():
++		channel.cancelCauseFunc(context.Cause(ctx))
++	case <-channel.cancelCtx.Done():
++		// Successfully flushed
++	}
++}
++
++func (channel *inMemoryChannel) acceptLoop() {
++	channel.start()
++}
++
++// Part of channel accept loop: Initialize buffer and accept first message, handle controls.
++func (channel *inMemoryChannel) start() {
++	items := make([]batchItem, 0, channel.batchSize)
++	timer := time.NewTimer(time.Hour)
++	timer.Stop() // Stop timer until we need it.
++	var dropped int
++	for {
++		select {
++		case item := <-channel.collectChan:
++			if item == nil {
++				panic("received nil event")
++			}
++			if channel.throttled.Load() {
++				// Check if there is space to add the item to the batch.
++				// If not, then drop the event.
++				if len(items) < channel.batchSize {
++					items = append(items, batchItem{item, 0})
++				} else {
++					dropped++
++				}
++				continue
++			}
++			items = append(items, batchItem{item, 0})
++			if len(items) >= channel.batchSize {
++				timer.Stop()
++				channel.sendBatch(items)
++				items = items[:0]
++			} else if len(items) == 1 {
++				// Start the timer if this is the first item in the batch.
++				timer.Reset(channel.batchInterval)
++			}
++
++		case <-channel.flushChan:
++			if channel.throttled.Load() {
++				// Ignore the flush request if we are throttled.
++				continue
++			}
++			timer.Stop()
++			channel.sendBatch(items)
++			items = items[:0]
++
++		case <-timer.C:
++			if channel.throttled.Load() {
++				// When throttled, the timer is reset to the retry time,
++				// so if we get here, then we're no longer throttled.
++				channel.throttled.Store(false)
++				if dropped > 0 {
++					channel.logf("Dropped %d telemetry items due to throttling", dropped)
++					dropped = 0
++				}
++			}
++			channel.sendBatch(items)
++			items = items[:0]
++
++		case msg := <-channel.retryChan:
++			// If there is not enough space in the batch, drop the items.
++			space := channel.batchSize - len(items)
++			if space < len(msg.items) {
++				dropped += len(msg.items) - space
++				msg.items = msg.items[:space]
++			}
++			items = append(items, msg.items...)
++
++			if msg.throttled {
++				channel.throttled.Store(true)
++			}
++			if msg.retryAfter.IsZero() {
++				// If the retry time is not set, use the default batch interval.
++				timer.Reset(channel.batchInterval)
++			} else {
++				timer.Reset(time.Until(msg.retryAfter))
++			}
++
++		case <-channel.cancelCtx.Done():
++			// This is the only path to exit the loop.
++			timer.Stop()
++			return
++		}
++	}
++}
++
++// sendBatch schedules a batch of items for transmission.
++func (channel *inMemoryChannel) sendBatch(items []batchItem) {
++	channel.sendQueueMu.Lock()
++	defer channel.sendQueueMu.Unlock()
++
++	if len(items) == 0 {
++		// Cancel the accept loop if we are closed and the queue is empty.
++		if len(channel.sendQueue) == 0 && channel.closed.Load() {
++			channel.cancelCauseFunc(errClosed)
++		}
++		return
++	}
++
++	// Copy the items to a temporary buffer to let the caller
++	// reuse the item slice. The size of items is capped to the
++	// maximum batch size, so the length of the polled buffer
++	// can't grow unbounded.
++	buf := channel.itemsBuf.Get().(*[]batchItem)
++	*buf = (*buf)[:0]
++	*buf = append(*buf, items...)
++	channel.sendQueue = append(channel.sendQueue, buf)
++
++	// Start a goroutine to transmit the items without blocking
++	// the accept loop.
++	go func() {
++		retry := channel.transmitRetry()
++		channel.sendQueueMu.Lock()
++		defer channel.sendQueueMu.Unlock()
++		if !retry && len(channel.sendQueue) == 0 && channel.closed.Load() {
++			// Cancel the accept loop if we are closed and the queue is empty.
++			channel.cancelCauseFunc(errClosed)
++		}
++	}()
++}
++
++// transmitRetry pops the first item from the queue and transmits it.
++// If the transmission fails, it retries the items that can be retried.
++// Returns true if some items were retried.
++func (channel *inMemoryChannel) transmitRetry() bool {
++	// Allow only one goroutine to transmit at a time.
++	channel.sendMu.Lock()
++	defer channel.sendMu.Unlock()
++
++	// Pop the first item from the queue.
++	channel.sendQueueMu.Lock()
++	itemsPtr := channel.sendQueue[0]
++	channel.sendQueue = channel.sendQueue[1:]
++	channel.sendQueueMu.Unlock()
++	defer channel.itemsBuf.Put(itemsPtr)
++
++	result, err := channel.transmitter.transmit(channel.cancelCtx, *itemsPtr)
++	if err != nil {
++		channel.logf("Error transmitting payload: %v", err)
++		if result == nil {
++			return false
++		}
++	}
++	if result.isSuccess() {
++		return false
++	}
++	canRetry := result.canRetry()
++	throttled := result.isThrottled()
++	channel.logf("Failed to transmit payload: code=%v, received=%d, accepted=%d, canRetry=%t, throttled=%t",
++		result.statusCode, result.response.ItemsReceived, result.response.ItemsAccepted, canRetry, throttled)
++
++	if !canRetry {
++		return false
++	}
++
++	// Filter down to failed items.
++	retryItems := result.getRetryItems(*itemsPtr)
++
++	// Delete items that have been retried more than 2 times.
++	retryItems = slices.DeleteFunc(retryItems, func(item batchItem) bool {
++		return item.retries > 2
++	})
++	if len(retryItems) == 0 {
++		return false
++	}
++	for i := range retryItems {
++		item := &retryItems[i]
++		item.retries++
++	}
++
++	channel.retry(throttled, result.retryAfter, retryItems)
++	return true
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go
+new file mode 100644
+index 00000000000000..58b0d5dc34d954
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go
+@@ -0,0 +1,50 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package contracts
++
++import (
++	"errors"
++	"fmt"
++)
++
++type ContextTags map[string]string
++
++var tagMaxLengths = map[string]int{
++	"ai.application.ver":             1024,
++	"ai.device.id":                   1024,
++	"ai.device.locale":               64,
++	"ai.device.model":                256,
++	"ai.device.oemName":              256,
++	"ai.device.osVersion":            256,
++	"ai.device.type":                 64,
++	"ai.location.ip":                 46,
++	"ai.operation.id":                128,
++	"ai.operation.name":              1024,
++	"ai.operation.parentId":          128,
++	"ai.operation.syntheticSource":   1024,
++	"ai.operation.correlationVector": 64,
++	"ai.session.id":                  64,
++	"ai.session.isFirst":             5,
++	"ai.user.accountId":              1024,
++	"ai.user.id":                     128,
++	"ai.user.authUserId":             1024,
++	"ai.cloud.role":                  256,
++	"ai.cloud.roleInstance":          256,
++	"ai.internal.sdkVersion":         64,
++	"ai.internal.agentVersion":       64,
++	"ai.internal.nodeName":           256,
++}
++
++// Truncates tag values that exceed their maximum supported lengths.  Returns
++// warnings for each affected field.
++func SanitizeTags(tags map[string]string) error {
++	var errs []error
++	for k, v := range tags {
++		if maxlen, ok := tagMaxLengths[k]; ok && len(v) > maxlen {
++			tags[k] = v[:maxlen]
++			errs = append(errs, fmt.Errorf("%s exceeded maximum length of %d", k, maxlen))
++		}
++	}
++	return errors.Join(errs...)
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/envelope.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/envelope.go
+new file mode 100644
+index 00000000000000..511b8c4a62f551
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/envelope.go
+@@ -0,0 +1,123 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package contracts
++
++import (
++	"errors"
++	"fmt"
++	"time"
++)
++
++// Data struct to contain both B and C sections.
++type Data struct {
++	BaseType string    `json:"baseType"`
++	BaseData EventData `json:"baseData"`
++}
++
++// EventData represents structured event records that can be grouped
++// and searched by their properties. Event data item also creates a metric of
++// event count by name.
++type EventData struct {
++	// Schema version
++	Ver int `json:"ver"`
++
++	// Event name. Keep it low cardinality to allow proper grouping and useful
++	// metrics.
++	Name string `json:"name"`
++
++	// Properties is a collection of custom properties for this specific event.
++	Properties map[string]string `json:"properties,omitempty"`
++}
++
++// Envelope is the telemetry payload that is sent to the Application Insights.
++type Envelope struct {
++	// Envelope version. For internal use only. By assigning this the default, it
++	// will not be serialized within the payload unless changed to a value other
++	// than #1.
++	Ver int `json:"ver"`
++
++	// Type name of telemetry data item.
++	Name string `json:"name"`
++
++	// Event date time when telemetry item was created. This is the wall clock
++	// time on the client when the event was generated. There is no guarantee that
++	// the client's time is accurate. This field must be formatted in UTC ISO 8601
++	// format, with a trailing 'Z' character, as described publicly on
++	// https://en.wikipedia.org/wiki/ISO_8601#UTC. Note: the number of decimal
++	// seconds digits provided are variable (and unspecified). Consumers should
++	// handle this, i.e. managed code consumers should not use format 'O' for
++	// parsing as it specifies a fixed length. Example:
++	// 2009-06-15T13:45:30.0000000Z.
++	Time time.Time `json:"time"`
++
++	// Sampling rate used in application. This telemetry item represents 1 /
++	// sampleRate actual telemetry items.
++	SampleRate float64 `json:"sampleRate"`
++
++	// Sequence field used to track absolute order of uploaded events.
++	Seq string `json:"seq"`
++
++	// The application's instrumentation key. The key is typically represented as
++	// a GUID, but there are cases when it is not a guid. No code should rely on
++	// iKey being a GUID. Instrumentation key is case insensitive.
++	IKey string `json:"iKey"`
++
++	// Key/value collection of context properties. See ContextTagKeys for
++	// information on available properties.
++	Tags map[string]string `json:"tags,omitempty"`
++
++	// Telemetry data item.
++	Data Data `json:"data"`
++}
++
++// Sanitize truncates string fields that exceed their maximum supported sizes for this
++// object and all objects it references. Returns a warning for each affected
++// field.
++func (data *Envelope) Sanitize() error {
++	var errs []error
++
++	if len(data.Name) > 1024 {
++		data.Name = data.Name[:1024]
++		errs = append(errs, errors.New("Envelope.Name exceeded maximum length of 1024"))
++	}
++
++	if props := data.Data.BaseData.Properties; len(props) > 0 {
++		for k, v := range props {
++			if len(v) > 8192 {
++				props[k] = v[:8192]
++				errs = append(errs, fmt.Errorf("EventData.Properties has value with length exceeding max of 8192: %v", v))
++			}
++			if len(k) > 150 {
++				props[k[:150]] = props[k]
++				delete(props, k)
++				errs = append(errs, fmt.Errorf("EventData.Properties has key with length exceeding max of 150: %v", k))
++			}
++		}
++	}
++
++	if len(data.Seq) > 64 {
++		data.Seq = data.Seq[:64]
++		errs = append(errs, errors.New("Envelope.Seq exceeded maximum length of 64"))
++	}
++
++	if len(data.IKey) > 40 {
++		data.IKey = data.IKey[:40]
++		errs = append(errs, errors.New("Envelope.IKey exceeded maximum length of 40"))
++	}
++
++	if len(data.Data.BaseData.Name) > 512 {
++		data.Data.BaseData.Name = data.Data.BaseData.Name[:512]
++		errs = append(errs, errors.New("EventData.Name exceeded maximum length of 512"))
++	}
++
++	return errors.Join(errs...)
++}
++
++// NewEnvelope creates a new [Envelope] instance with default values set by the schema.
++func NewEnvelope() *Envelope {
++	return &Envelope{
++		Ver:        1,
++		SampleRate: 100.0,
++	}
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/response.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/response.go
+new file mode 100644
+index 00000000000000..f7d291fdab8927
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/response.go
+@@ -0,0 +1,32 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package contracts
++
++import "fmt"
++
++const (
++	tooManyRequestsOverExtendedTimeResponse = 439
++)
++
++// BackendResponse represents the response from the Application Insights backend.
++type BackendResponse struct {
++	ItemsReceived int                    `json:"itemsReceived"`
++	ItemsAccepted int                    `json:"itemsAccepted"`
++	Errors        []BackendResponseError `json:"errors"`
++}
++
++func (r *BackendResponse) IsSucess() bool {
++	return r.ItemsReceived == r.ItemsAccepted
++}
++
++// BackendResponseError represents an error in the response from the Application Insights backend.
++type BackendResponseError struct {
++	Index      int    `json:"index"`
++	StatusCode int    `json:"statusCode"`
++	Message    string `json:"message"`
++}
++
++func (r BackendResponseError) Error() string {
++	return fmt.Errorf("index: %d, statusCode: %d, message: %s", r.Index, r.StatusCode, r.Message).Error()
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/jsonserializer.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/jsonserializer.go
+new file mode 100644
+index 00000000000000..02fe54dae88963
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/jsonserializer.go
+@@ -0,0 +1,33 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package appinsights
++
++import (
++	"bytes"
++	"encoding/json"
++	"fmt"
++)
++
++func serialize(items []batchItem) ([]byte, error) {
++	var result bytes.Buffer
++	encoder := json.NewEncoder(&result)
++
++	var nfail int
++	for _, item := range items {
++		end := result.Len()
++		if err := encoder.Encode(item.item); err != nil {
++			nfail++
++			result.Truncate(end)
++		}
++	}
++	ret := result.Bytes()
++	if nfail > 0 {
++		if nfail == len(items) {
++			ret = nil
++		}
++		return ret, fmt.Errorf("failed to serialize %d items out of %d", nfail, len(items))
++	}
++
++	return ret, nil
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/package.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/package.go
+new file mode 100644
+index 00000000000000..9c2f950a309e5e
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/package.go
+@@ -0,0 +1,13 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Package appinsights provides an interface to submit telemetry to Application Insights,
++// a component of Azure Monitor. This package calls the Classic API.
++// See https://learn.microsoft.com/en-us/azure/azure-monitor/app/api-custom-events-metrics
++package appinsights
++
++const (
++	sdkName         = "go-infra/telemetry"
++	Version         = "v0.0.1"
++	internalVersion = sdkName + ":" + Version
++)
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/telemetrycontext.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/telemetrycontext.go
+new file mode 100644
+index 00000000000000..a2e954ae84aa6e
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/telemetrycontext.go
+@@ -0,0 +1,44 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package appinsights
++
++import (
++	"time"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts"
++)
++
++// telemetryContext encapsulates contextual data common to all telemetry submitted through a
++// TelemetryClient instance such as including instrumentation key, tags, and
++// common properties.
++type telemetryContext struct {
++	// Instrumentation key
++	iKey string
++
++	// Collection of tag data to attach to the telemetry item.
++	Tags contracts.ContextTags
++}
++
++// newTelemetryContext creates a new, empty telemetryContext.
++func newTelemetryContext(ikey string) *telemetryContext {
++	return &telemetryContext{
++		iKey: ikey,
++		Tags: make(contracts.ContextTags),
++	}
++}
++
++// Wraps a telemetry item in an envelope with the information found in this
++// context.
++func (context *telemetryContext) envelop(data contracts.EventData) *contracts.Envelope {
++	envelope := contracts.NewEnvelope()
++	envelope.Name = "Microsoft.ApplicationInsights.Event"
++	envelope.Data = contracts.Data{
++		BaseType: "EventData",
++		BaseData: data,
++	}
++	envelope.IKey = context.iKey
++	envelope.Time = time.Now().UTC()
++	envelope.Tags = context.Tags
++	return envelope
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go
+new file mode 100644
+index 00000000000000..3cca77e3070fd2
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go
+@@ -0,0 +1,169 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package appinsights
++
++import (
++	"bytes"
++	"cmp"
++	"compress/gzip"
++	"context"
++	"encoding/json"
++	"errors"
++	"fmt"
++	"io"
++	"net/http"
++	"slices"
++	"time"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts"
++)
++
++type transmitter interface {
++	transmit(ctx context.Context, items []batchItem) (*transmissionResponse, error)
++}
++
++type httpTransmitter struct {
++	endpoint string
++	client   *http.Client
++}
++
++type transmissionResponse struct {
++	statusCode int
++	retryAfter time.Time
++	response   contracts.BackendResponse
++}
++
++const (
++	successResponse                         = http.StatusOK
++	partialSuccessResponse                  = http.StatusPartialContent
++	requestTimeoutResponse                  = http.StatusRequestTimeout
++	tooManyRequestsResponse                 = http.StatusTooManyRequests
++	tooManyRequestsOverExtendedTimeResponse = 439
++	errorResponse                           = http.StatusInternalServerError
++	serviceUnavailableResponse              = http.StatusServiceUnavailable
++)
++
++func newTransmitter(endpointAddress string, client *http.Client) transmitter {
++	if client == nil {
++		client = http.DefaultClient
++	}
++	return &httpTransmitter{endpointAddress, client}
++}
++
++func (transmitter *httpTransmitter) transmit(ctx context.Context, items []batchItem) (*transmissionResponse, error) {
++	// Serialize the items. It could be that some items can't be serialized,
++	// in which case we will skip them and return an error together with the
++	// transmission result.
++	payload, jsonErr := serialize(items)
++	if jsonErr != nil && payload == nil {
++		return nil, jsonErr
++	}
++
++	// Compress the payload
++	var postBody bytes.Buffer
++	gzipWriter := gzip.NewWriter(&postBody)
++	if _, err := gzipWriter.Write(payload); err != nil {
++		gzipWriter.Close()
++		return nil, fmt.Errorf("failed to compress the payload: %v", err)
++	}
++
++	if err := gzipWriter.Close(); err != nil {
++		return nil, fmt.Errorf("failed to close gzip writer: %v", err)
++	}
++
++	req, err := http.NewRequestWithContext(ctx, http.MethodPost, transmitter.endpoint, &postBody)
++	if err != nil {
++		return nil, fmt.Errorf("failed to create request: %v", err)
++	}
++
++	req.Header.Set("Content-Encoding", "gzip")
++	req.Header.Set("Content-Type", "application/x-json-stream")
++	req.Header.Set("Accept-Encoding", "gzip, deflate")
++
++	resp, err := transmitter.client.Do(req)
++	if err != nil {
++		return nil, fmt.Errorf("failed to transmit telemetry: %v", err)
++	}
++	defer resp.Body.Close()
++
++	result := &transmissionResponse{statusCode: resp.StatusCode}
++	if retryAfterValue := resp.Header.Get("Retry-After"); retryAfterValue != "" {
++		if result.retryAfter, err = time.Parse(time.RFC1123, retryAfterValue); err != nil {
++			return nil, fmt.Errorf("failed to parse Retry-After header: %v", err)
++		}
++	}
++	if err := json.NewDecoder(resp.Body).Decode(&result.response); err != nil {
++		if errors.Is(err, io.EOF) {
++			// Empty response is valid, possibly throttling.
++			return result, nil
++		}
++		return nil, fmt.Errorf("failed to parse response: %v", err)
++	}
++	return result, jsonErr
++}
++
++func (result *transmissionResponse) isSuccess() bool {
++	return result.statusCode == successResponse ||
++		// Partial response but all items accepted
++		(result.statusCode == partialSuccessResponse &&
++			result.response.ItemsReceived == result.response.ItemsAccepted)
++}
++
++func (result *transmissionResponse) isFailure() bool {
++	return result.statusCode != successResponse && result.statusCode != partialSuccessResponse
++}
++
++func (result *transmissionResponse) canRetry() bool {
++	if result.isSuccess() {
++		return false
++	}
++
++	return result.statusCode == partialSuccessResponse ||
++		!result.retryAfter.IsZero() ||
++		(result.statusCode == requestTimeoutResponse ||
++			result.statusCode == serviceUnavailableResponse ||
++			result.statusCode == errorResponse ||
++			result.statusCode == tooManyRequestsResponse ||
++			result.statusCode == tooManyRequestsOverExtendedTimeResponse)
++}
++
++func (result *transmissionResponse) isThrottled() bool {
++	return result.statusCode == tooManyRequestsResponse ||
++		result.statusCode == tooManyRequestsOverExtendedTimeResponse ||
++		!result.retryAfter.IsZero()
++}
++
++func canRetryBackendError(berror contracts.BackendResponseError) bool {
++	return berror.StatusCode == requestTimeoutResponse ||
++		berror.StatusCode == serviceUnavailableResponse ||
++		berror.StatusCode == errorResponse ||
++		berror.StatusCode == tooManyRequestsResponse ||
++		berror.StatusCode == tooManyRequestsOverExtendedTimeResponse
++}
++
++func (result *transmissionResponse) getRetryItems(items []batchItem) []batchItem {
++	if result.statusCode == partialSuccessResponse {
++		// Make sure errors are ordered by index
++		slices.SortFunc(result.response.Errors, func(a, b contracts.BackendResponseError) int {
++			return cmp.Compare(a.Index, b.Index)
++		})
++
++		resultItems := make([]batchItem, 0, len(result.response.Errors))
++		// Find each retryable error
++		for _, responseResult := range result.response.Errors {
++			if !canRetryBackendError(responseResult) {
++				continue
++			}
++			if responseResult.Index >= len(items) {
++				continue
++			}
++			resultItems = append(resultItems, items[responseResult.Index])
++		}
++
++		return resultItems
++	} else if result.canRetry() {
++		return items
++	}
++	return nil
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
+new file mode 100644
+index 00000000000000..1ad030cea6659d
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
+@@ -0,0 +1,64 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package config
++
++import (
++	"encoding/json"
++	"os"
++	"strings"
++)
++
++// An UploadConfig controls what data is uploaded.
++type UploadConfig struct {
++	GOOS      []string
++	GOARCH    []string
++	GoVersion []string
++	Programs  []*ProgramConfig
++}
++
++// A ProgramConfig contains the configuration for a single program.
++type ProgramConfig struct {
++	// the counter names may have to be
++	// repeated for each program. (e.g., if the counters are in a package
++	// that is used in more than one program.)
++	Name     string
++	Counters []CounterConfig `json:",omitempty"`
++}
++
++// A CounterConfig contains the configuration for a single counter.
++type CounterConfig struct {
++	Name string // The "collapsed" counter: <chart>:{<bucket1>,<bucket2>,...}
++}
++
++func ReadConfig(file string) (*UploadConfig, error) {
++	data, err := os.ReadFile(file)
++	if err != nil {
++		return nil, err
++	}
++	return UnmarshalConfig(data)
++}
++
++func UnmarshalConfig(data []byte) (*UploadConfig, error) {
++	var cfg UploadConfig
++	if err := json.Unmarshal(data, &cfg); err != nil {
++		return nil, err
++	}
++	return &cfg, nil
++}
++
++// Expand takes a counter defined with buckets and expands it into distinct
++// strings for each bucket.
++func Expand(counter string) []string {
++	prefix, rest, hasBuckets := strings.Cut(counter, "{")
++	var counters []string
++	if hasBuckets {
++		buckets := strings.SplitSeq(strings.TrimSuffix(rest, "}"), ",")
++		for b := range buckets {
++			counters = append(counters, prefix+b)
++		}
++	} else {
++		counters = append(counters, prefix)
++	}
++	return counters
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
+new file mode 100644
+index 00000000000000..1ac9e000e65c77
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
+@@ -0,0 +1,32 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package telemetry
++
++import (
++	"go/version"
++	"os"
++	"path/filepath"
++	"runtime/debug"
++	"strings"
++)
++
++// ProgramInfo extracts the go version and program package path to use for counter files.
++//
++// For programs in the Go toolchain, the program version will be the same as
++// the Go version, and will typically be of the form "go1.2.3", not a semantic
++// version of the form "v1.2.3". Go versions may also include spaces and
++// special characters.
++func ProgramInfo(info *debug.BuildInfo) (goVers, progPath string) {
++	goVers = info.GoVersion
++	if strings.Contains(goVers, "devel") || strings.Contains(goVers, "-") || !version.IsValid(goVers) {
++		goVers = "devel"
++	}
++
++	progPath = info.Path
++	if progPath == "" {
++		progPath = strings.TrimSuffix(filepath.Base(os.Args[0]), ".exe")
++	}
++
++	return goVers, progPath
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/telemetry.go
+new file mode 100644
+index 00000000000000..02d112edb8ad3e
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/telemetry.go
+@@ -0,0 +1,32 @@
++package telemetry
++
++import (
++	"crypto/rand"
++	"fmt"
++	"runtime"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights"
++)
++
++// Client is the global telemetry client used to send telemetry data.
++//
++// It is kept in an internal package to prevent direct access
++// from outside the telemetry package.
++var Client *appinsights.Client
++
++// Init adds common tags to the telemetry client then assigns it to [Client].
++func Init(client *appinsights.Client) {
++	if client.Tags == nil {
++		client.Tags = make(map[string]string)
++	}
++
++	// Generate a random session ID to uniquely identify this telemetry session.
++	var sessionID [32]byte
++	rand.Read(sessionID[:])
++
++	// Add common tags to the client.
++	client.Tags["ai.device.osVersion"] = runtime.GOOS + "/" + runtime.GOARCH
++	client.Tags["ai.session.id"] = fmt.Sprintf("%x", sessionID[:])
++
++	Client = client
++}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
+new file mode 100644
+index 00000000000000..23b60d189f102d
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
+@@ -0,0 +1,123 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package telemetry
++
++import (
++	"context"
++	_ "embed"
++	"fmt"
++	"runtime"
++	"runtime/debug"
++	"slices"
++	"time"
++
++	"github.com/microsoft/go-infra/telemetry/internal/appinsights"
++	"github.com/microsoft/go-infra/telemetry/internal/config"
++	"github.com/microsoft/go-infra/telemetry/internal/telemetry"
++)
++
++// Config holds the configuration for the telemetry client.
++type Config struct {
++	// The instrumentation key used to identify the application.
++	// This key is required and must be set before sending any telemetry.
++	InstrumentationKey string
++
++	// The endpoint URL to which telemetry will be sent.
++	// If empty, it defaults to https://dc.services.visualstudio.com/v2/track.
++	Endpoint string
++
++	// Maximum number of telemetry items that can be submitted in each
++	// request. If this many items are buffered, the buffer will be
++	// flushed before MaxBatchInterval expires.
++	// If zero, it defaults to 1024.
++	MaxBatchSize int
++
++	// Maximum time to wait before sending a batch of telemetry.
++	// If zero, it defaults to 10 seconds.
++	MaxBatchInterval time.Duration
++
++	// UploadConfigPath is the path to the telemetry upload configuration file.
++	// If empty, the default configuration embedded in the binary will be used.
++	UploadConfigPath string
++
++	// Allow uploading telemetry for Go development versions even if the
++	// upload configuration does not explicitly include them.
++	AllowGoDevel bool
++}
++
++//go:embed config.json
++var uploadConfigData []byte
++
++var countersToUpload map[string]struct{}
++
++// Start initializes telemetry using the specified configuration.
++func Start(cfg Config) {
++	var uploadConfig *config.UploadConfig
++	var err error
++	if cfg.UploadConfigPath != "" {
++		uploadConfig, err = config.ReadConfig(cfg.UploadConfigPath)
++	} else {
++		uploadConfig, err = config.UnmarshalConfig(uploadConfigData)
++	}
++	if err != nil {
++		panic(fmt.Errorf("failed to unmarshal telemetry config: %v", err))
++	}
++	if cfg.AllowGoDevel {
++		uploadConfig.GoVersion = append(uploadConfig.GoVersion, "devel")
++	}
++	bi, ok := debug.ReadBuildInfo()
++	if !ok {
++		panic("failed to read build info for telemetry")
++	}
++	ver, prog := telemetry.ProgramInfo(bi)
++	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
++		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) ||
++		!slices.Contains(uploadConfig.GoVersion, ver) {
++		// Only start telemetry if the current GOOS, GOARCH, and Go version
++		// are supported by the telemetry configuration.
++		return
++	}
++
++	progIdx := slices.IndexFunc(uploadConfig.Programs, func(p *config.ProgramConfig) bool {
++		return p.Name == prog
++	})
++	if progIdx == -1 {
++		return // Program not configured for telemetry
++	}
++	countersToUpload = make(map[string]struct{})
++	for _, c := range uploadConfig.Programs[progIdx].Counters {
++		if c.Name == "" {
++			continue // Skip empty counter names
++		}
++		for _, e := range config.Expand(c.Name) {
++			countersToUpload[e] = struct{}{}
++		}
++	}
++
++	telemetry.Init(&appinsights.Client{
++		InstrumentationKey: cfg.InstrumentationKey,
++		Endpoint:           cfg.Endpoint,
++		MaxBatchSize:       cfg.MaxBatchSize,
++		MaxBatchInterval:   cfg.MaxBatchInterval,
++		Tags: map[string]string{
++			"ai.application.ver": ver,
++			"ai.cloud.role":      prog,
++		},
++		UploadFilter: uploadFilter,
++	})
++}
++
++// Close closes the telemetry client and flushes any remaining telemetry data.
++// It should be called when the application is shutting down to ensure all
++// telemetry data is sent before the program exits.
++func Close(ctx context.Context) {
++	if telemetry.Client != nil {
++		telemetry.Client.Close(ctx)
++	}
++}
++
++func uploadFilter(name string) bool {
++	_, ok := countersToUpload[name]
++	return ok
++}
+diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
+index 84f62bf19fb4ac..485d2569cdaacd 100644
+--- a/src/cmd/vendor/modules.txt
++++ b/src/cmd/vendor/modules.txt
+@@ -16,6 +16,14 @@ github.com/google/pprof/third_party/svgpan
+ # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
+ ## explicit; go 1.13
+ github.com/ianlancetaylor/demangle
++# github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
++## explicit; go 1.24
++github.com/microsoft/go-infra/telemetry
++github.com/microsoft/go-infra/telemetry/counter
++github.com/microsoft/go-infra/telemetry/internal/appinsights
++github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
++github.com/microsoft/go-infra/telemetry/internal/config
++github.com/microsoft/go-infra/telemetry/internal/telemetry
+ # golang.org/x/arch v0.14.0
+ ## explicit; go 1.18
+ golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
 index 00000000000000..ae4055d2d71303
diff --git a/patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
similarity index 100%
rename from patches/0001-Add-crypto-backend-GOEXPERIMENTs.patch
rename to patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
new file mode 100644
index 00000000000..83655fbf25f
--- /dev/null
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -0,0 +1,238 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Thu, 29 May 2025 14:53:58 +0200
+Subject: [PATCH] Add appinsights telemetry
+
+---
+ README.md                                     | 15 ++++++
+ src/cmd/go/main.go                            |  1 +
+ src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
+ src/cmd/go/script_test.go                     |  7 +++
+ src/cmd/internal/telemetry/counter/counter.go | 31 ++++++++++-
+ .../telemetry/counter/counter_bootstrap.go    |  2 +
+ src/go/build/vendor_test.go                   |  1 +
+ 7 files changed, 108 insertions(+), 1 deletion(-)
+ create mode 100644 src/cmd/go/mstelemetry_test.go
+
+diff --git a/README.md b/README.md
+index 71c9d1dc299388..8cab5daec4da54 100644
+--- a/README.md
++++ b/README.md
+@@ -40,3 +40,18 @@ places to ask questions about the Go language.
+ 
+ [rf]: https://reneefrench.blogspot.com/
+ [cc4-by]: https://creativecommons.org/licenses/by/4.0/
++
++### Data Collection
++
++The software may collect information about you and your use of the software and
++send it to Microsoft. Microsoft may use this information to provide services
++and improve our products and services. You may turn off the telemetry by
++setting the `MS_GOTOOLCHAIN_TELEMETRY_ENABLED` environment variable to `0`.
++There are also some features in the software that may enable you and Microsoft
++to collect data from users of your applications. If you use these features,
++you must comply with applicable law, including providing appropriate notices to
++users of your applications together with a copy of Microsoft’s privacy
++statement. Our privacy statement is located at https://go.microsoft.com/fwlink/?LinkID=824704.
++You can learn more about data collection and use in the help documentation and
++our privacy statement. Your use of the software operates as your consent to
++these practices.
+\ No newline at end of file
+diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
+index e81969ca4a3144..61b9219df8f389 100644
+--- a/src/cmd/go/main.go
++++ b/src/cmd/go/main.go
+@@ -102,6 +102,7 @@ func main() {
+ 	cmdIsGoTelemetryOff := cmdIsGoTelemetryOff()
+ 	if !cmdIsGoTelemetryOff {
+ 		counter.Open() // Open the telemetry counter file so counters can be written to it.
++		base.AtExit(counter.Close)
+ 	}
+ 	handleChdirFlag()
+ 	toolchain.Select()
+diff --git a/src/cmd/go/mstelemetry_test.go b/src/cmd/go/mstelemetry_test.go
+new file mode 100644
+index 00000000000000..6993137ad56e8c
+--- /dev/null
++++ b/src/cmd/go/mstelemetry_test.go
+@@ -0,0 +1,52 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package main_test
++
++import (
++	"flag"
++	"fmt"
++	"log"
++	"net"
++	"net/http"
++	"os"
++	"sync"
++	"sync/atomic"
++)
++
++var (
++	appInsightsAddr = flag.String("appInsights", "", "run a fake App Insights server on this network address")
++	appInsightsURL  string
++)
++
++var appInsightsOnce sync.Once
++
++var appInsightsRequests atomic.Int64
++
++// StartAppInsightsServer starts a fake App Insights server running on *appInsightsAddr (like "localhost:1234")
++// and sets appInsightsURL to the MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT setting to use to access the server.
++// Subsequent calls are no-ops.
++func StartAppInsightsServer() {
++	appInsightsOnce.Do(func() {
++		addr := *appInsightsAddr
++		if addr == "" {
++			addr = "localhost:0"
++		}
++		l, err := net.Listen("tcp", addr)
++		if err != nil {
++			log.Fatal(err)
++		}
++		*appInsightsAddr = l.Addr().String()
++		appInsightsURL = "http://" + *appInsightsAddr
++		fmt.Fprintf(os.Stderr, "go test App Insights server running at MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT=%s\n", appInsightsURL)
++		go func() {
++			log.Fatalf("App Insights: http.Serve: %v", http.Serve(l, http.HandlerFunc(appInsightsHandler)))
++		}()
++	})
++}
++
++func appInsightsHandler(w http.ResponseWriter, r *http.Request) {
++	appInsightsRequests.Add(1)
++	fmt.Fprint(w, `{"itemsReceived": 1, "itemsAccepted": 1}`)
++}
+diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
+index 1345ea8bb8e530..f915bd26994ffe 100644
+--- a/src/cmd/go/script_test.go
++++ b/src/cmd/go/script_test.go
+@@ -60,6 +60,7 @@ func TestScript(t *testing.T) {
+ 	}
+ 
+ 	StartProxy()
++	StartAppInsightsServer()
+ 
+ 	var (
+ 		ctx         = context.Background()
+@@ -254,6 +255,9 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
+ 		"HGRCPATH=",
+ 		"GOTOOLCHAIN=auto",
+ 		"MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1", // allow non-local toolchains, some tests expect GOTOOLCHAIN to be honored
++		"MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT=" + appInsightsURL,
++		"MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL=1", // allow telemetry for Go development versions
++		"MS_GOTOOLCHAIN_TELEMETRY_INSTRUMENTATION_KEY=fake_key",
+ 		"newline=\n",
+ 	}
+ 
+@@ -404,6 +408,9 @@ func readCounters(t *testing.T, telemetryDir string) map[string]uint64 {
+ func checkCounters(t *testing.T, telemetryDir string) {
+ 	counters := readCounters(t, telemetryDir)
+ 	if _, ok := scriptGoInvoked.Load(testing.TB(t)); ok {
++		if appInsightsRequests.Load() == 0 {
++			t.Fatal("go was invoked but no App Insights request were recorded")
++		}
+ 		if !disabledOnPlatform && len(counters) == 0 {
+ 			t.Fatal("go was invoked but no counters were incremented")
+ 		}
+diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
+index 5cef0b0041551a..9125e9550f4047 100644
+--- a/src/cmd/internal/telemetry/counter/counter.go
++++ b/src/cmd/internal/telemetry/counter/counter.go
+@@ -7,12 +7,20 @@
+ package counter
+ 
+ import (
++	"context"
+ 	"flag"
++	"log"
+ 	"os"
++	"time"
+ 
+ 	"golang.org/x/telemetry/counter"
++
++	mstelemetry "github.com/microsoft/go-infra/telemetry"
++	mscounter "github.com/microsoft/go-infra/telemetry/counter"
+ )
+ 
++var appInsightsInstrumentationKey = os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_INSTRUMENTATION_KEY") // TODO: hardcode to the correct value once we have a real key
++
+ var openCalled bool
+ 
+ func OpenCalled() bool { return openCalled }
+@@ -22,11 +30,29 @@ func OpenCalled() bool { return openCalled }
+ func Open() {
+ 	openCalled = true
+ 	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
++	if appInsightsInstrumentationKey != "" && os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") != "0" {
++		mstelemetry.Start(mstelemetry.Config{
++			InstrumentationKey: appInsightsInstrumentationKey,
++			Endpoint:           os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"),
++			AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
++		})
++	}
++}
++
++func Close() {
++	ctx, cancel := context.WithTimeout(context.Background(), 1*time.Second)
++	defer cancel()
++	start := time.Now()
++	mstelemetry.Close(ctx)
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_STATS") == "on" {
++		log.Printf("telemetry: closed in %s\n", time.Since(start))
++	}
+ }
+ 
+ // Inc increments the counter with the given name.
+ func Inc(name string) {
+ 	counter.Inc(name)
++	mscounter.Inc(name)
+ }
+ 
+ // New returns a counter with the given name.
+@@ -44,6 +70,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+ // the concatenation of prefix and the flag name.
+ func CountFlags(prefix string, flagSet flag.FlagSet) {
+ 	counter.CountFlags(prefix, flagSet)
++	mscounter.CountFlags(prefix, flagSet)
+ }
+ 
+ // CountFlagValue creates a counter for the flag value
+@@ -56,7 +83,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+ 	// TODO(matloob): Add this to x/telemetry?
+ 	flagSet.Visit(func(f *flag.Flag) {
+ 		if f.Name == flagName {
+-			counter.New(prefix + f.Name + ":" + f.Value.String()).Inc()
++			name := prefix + f.Name + ":" + f.Value.String()
++			counter.New(name).Inc()
++			mscounter.New(name).Inc()
+ 		}
+ 	})
+ }
+diff --git a/src/cmd/internal/telemetry/counter/counter_bootstrap.go b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
+index 00808294053c23..1adda045749c29 100644
+--- a/src/cmd/internal/telemetry/counter/counter_bootstrap.go
++++ b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
+@@ -18,3 +18,5 @@ func New(name string) dummyCounter                                        { retu
+ func NewStack(name string, depth int) dummyCounter                        { return dummyCounter{} }
+ func CountFlags(name string, flagSet flag.FlagSet)                        {}
+ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {}
++
++func Close() {}
+diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
+index 6092c93d4c5b26..8f68bc361081f1 100644
+--- a/src/go/build/vendor_test.go
++++ b/src/go/build/vendor_test.go
+@@ -25,6 +25,7 @@ var allowedPackagePrefixes = []string{
+ 	"github.com/golang-fips/openssl",
+ 	"github.com/microsoft/go-crypto-winnative",
+ 	"github.com/microsoft/go-crypto-darwin",
++	"github.com/microsoft/go-infra/telemetry",
+ }
+ 
+ // Verify that the vendor directories contain only packages matching the list above.

From d8df02317359eb15095ff6ceeda95980ce903705 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 12 Jun 2025 10:20:48 +0000
Subject: [PATCH 326/887] build(deps): bump github/codeql-action from 3.28.19
 to 3.29.0

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.19 to 3.29.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fca7ace96b7d713c7035871441bd52efbe39e27e...ce28f5bb42b7a9f2c824e633a3f6ee835bab6858)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9f6ab6a5144..9f5fb24ca15 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+        uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+        uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
+        uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
         with:
           category: /language:go

From a9d2e8450f753f15824d289ab53b385b7f305044 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 12 Jun 2025 13:15:16 +0100
Subject: [PATCH 327/887] move allocryptofallback experiment to the correct
 patch (#1697)

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 50 +++++++++++++++--
 ...03-Implement-crypto-internal-backend.patch | 56 +------------------
 2 files changed, 46 insertions(+), 60 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 334641e7fcf..842d9593550 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -19,6 +19,8 @@ maintain this feature. For more information, see the test files.
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
+ .../exp_allowcryptofallback_off.go            |  8 ++
+ .../exp_allowcryptofallback_on.go             |  8 ++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -27,14 +29,16 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 18 ++++
- 17 files changed, 363 insertions(+), 4 deletions(-)
+ src/internal/goexperiment/flags.go            | 26 ++++++
+ 19 files changed, 387 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/openssl.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
  create mode 100644 src/go/build/testdata/backendtags_system/systemcrypto.go
+ create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
+ create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_off.go
@@ -194,7 +198,7 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 0e5c7e512d794c..21da6ac79e606e 100644
+index 50288fcec64141..44be2e6a4c580a 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
 @@ -1984,9 +1984,63 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
@@ -389,6 +393,34 @@ index 00000000000000..eb8a026982259c
 +//go:build goexperiment.systemcrypto
 +
 +package main
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+new file mode 100644
+index 00000000000000..b8bdf689af6fb5
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = false
++const AllowCryptoFallbackInt = 0
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+new file mode 100644
+index 00000000000000..d03c0284e949ba
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = true
++const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..eb879f94fa0c42
@@ -502,10 +534,10 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index dff5255e000992..4d0fbdffd44957 100644
+index ceff24193d89a5..12fba96b868c9e 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,24 @@ type Flags struct {
+@@ -59,6 +59,32 @@ type Flags struct {
  	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
@@ -527,6 +559,14 @@ index dff5255e000992..4d0fbdffd44957 100644
 +	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
 +	// being used to build the Go program.
 +	SystemCrypto bool
++
++	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
++	// experiment is enabled but the backend's requirements are not met. This is
++	// used during the Go build itself to allow running the test suite with a
++	// backend experiment enabled. Some parts of the Go build (bootstrapping)
++	// and parts of the test suite run without cgo, so
++	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
++	AllowCryptoFallback bool
  
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 76e24d2e11d..e86623bdbbb 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -33,9 +33,6 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/openssl_linux.go  | 339 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/go/build/deps_test.go                     |  27 +-
- .../exp_allowcryptofallback_off.go            |   9 +
- .../exp_allowcryptofallback_on.go             |   9 +
- src/internal/goexperiment/flags.go            |   8 +
  .../backenderr_gen_conflict_boring_cng.go     |  17 +
  .../backenderr_gen_conflict_boring_darwin.go  |  17 +
  .../backenderr_gen_conflict_boring_openssl.go |  17 +
@@ -49,7 +46,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2728 insertions(+), 3 deletions(-)
+ 42 files changed, 2702 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -77,8 +74,6 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
  create mode 100644 src/runtime/backenderr_gen_conflict_boring_cng.go
  create mode 100644 src/runtime/backenderr_gen_conflict_boring_darwin.go
  create mode 100644 src/runtime/backenderr_gen_conflict_boring_openssl.go
@@ -2770,55 +2765,6 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
  	< encoding/asn1
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-new file mode 100644
-index 00000000000000..dfce36d834c46e
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.allowcryptofallback
-+// +build !goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = false
-+const AllowCryptoFallbackInt = 0
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-new file mode 100644
-index 00000000000000..8d0c3fde9ab5e8
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.allowcryptofallback
-+// +build goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = true
-+const AllowCryptoFallbackInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 6b4289503d57ae..12fba96b868c9e 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -78,6 +78,14 @@ type Flags struct {
- 	// being used to build the Go program.
- 	SystemCrypto bool
- 
-+	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
-+	// experiment is enabled but the backend's requirements are not met. This is
-+	// used during the Go build itself to allow running the test suite with a
-+	// backend experiment enabled. Some parts of the Go build (bootstrapping)
-+	// and parts of the test suite run without cgo, so
-+	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
-+	AllowCryptoFallback bool
-+
- 	// Regabi is split into several sub-experiments that can be
- 	// enabled individually. Not all combinations work.
- 	// The "regabi" GOEXPERIMENT is an alias for all "working"
 diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
 new file mode 100644
 index 00000000000000..361db2a962d60f

From e269febaa013f18378fecb87aa988748f479e815 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 16 Jun 2025 08:42:31 +0100
Subject: [PATCH 328/887] move allowcryptofallback handling to the correct
 patch (#1700)

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 58 ++++++++++++++++++-
 patches/0004-Use-crypto-backends.patch        | 58 +------------------
 2 files changed, 58 insertions(+), 58 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 842d9593550..9ae9a20f371 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,8 +11,10 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
+ src/cmd/dist/build.go                         | 13 +++
  src/cmd/go/internal/modindex/build.go         | 58 ++++++++++++-
  src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
+ src/cmd/link/internal/ld/main.go              | 12 ++-
  src/go/build/build.go                         | 58 ++++++++++++-
  src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
  .../testdata/backendtags_openssl/main.go      |  3 +
@@ -30,7 +32,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 26 ++++++
- 19 files changed, 387 insertions(+), 4 deletions(-)
+ 21 files changed, 411 insertions(+), 5 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -48,6 +50,30 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
+diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
+index b50f3342fe8714..5120c23556ebe3 100644
+--- a/src/cmd/dist/build.go
++++ b/src/cmd/dist/build.go
+@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
+ 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
+ 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
+ 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
++	//
++	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
++	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
++	// when GODEBUG=fips140=on is set. For example, when running
++	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
++	// Shadow goexperiment so that the global variable is not modified.
++	goexperiment := goexperiment
++	if !strings.Contains(goexperiment, "allowcryptofallback") {
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "allowcryptofallback"
++	}
+ 	os.Setenv("GOEXPERIMENT", goexperiment)
+ 	// No need to enable PGO for toolchain2.
+ 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
 index d7e09fed25f43a..10614d17e62453 100644
 --- a/src/cmd/go/internal/modindex/build.go
@@ -197,6 +223,36 @@ index 00000000000000..1756c5d027fee0
 +		})
 +	}
 +}
+diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
+index 6a684890be0a03..1dcc126b7a0440 100644
+--- a/src/cmd/link/internal/ld/main.go
++++ b/src/cmd/link/internal/ld/main.go
+@@ -44,6 +44,7 @@ import (
+ 	"os"
+ 	"runtime"
+ 	"runtime/pprof"
++	"slices"
+ 	"strconv"
+ 	"strings"
+ )
+@@ -187,7 +188,16 @@ func Main(arch *sys.Arch, theArch Arch) {
+ 
+ 	buildVersion := buildcfg.Version
+ 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
+-		buildVersion += " X:" + goexperiment
++		// buildVersion is intended to contain non-default experiment flags.
++		// The Microsoft build of Go default behavior is to set the
++		// allowcryptofallback experiment, so we don't include it in the
++		// buildVersion string.
++		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
++			return s == "allowcryptofallback"
++		}), ",")
++		if goexperiment != "" {
++			buildVersion += " X:" + goexperiment
++		}
+ 	}
+ 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
+ 
 diff --git a/src/go/build/build.go b/src/go/build/build.go
 index 50288fcec64141..44be2e6a4c580a 100644
 --- a/src/go/build/build.go
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index d186b9b83d7..5241af5705a 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,6 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/build.go                         |  13 ++
  src/cmd/dist/test.go                          |  10 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/script_test.go                     |   2 +
@@ -13,7 +12,6 @@ Subject: [PATCH] Use crypto backends
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
  src/cmd/link/internal/ld/lib.go               |   2 +
- src/cmd/link/internal/ld/main.go              |  12 +-
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
@@ -90,7 +88,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 86 files changed, 1170 insertions(+), 95 deletions(-)
+ 84 files changed, 1146 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -115,30 +113,6 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  
  package main
  
-diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index b50f3342fe8714..e2099ee5eff6ba 100644
---- a/src/cmd/dist/build.go
-+++ b/src/cmd/dist/build.go
-@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
- 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
- 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
- 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
-+	//
-+	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
-+	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
-+	// when GOFIPS=1 is set. For example, when running "GOFIPS=1 go test ./..."
-+	// or "GOFIPS=1 go run .".
-+	// Shadow goexperiment so that the global variable is not modified.
-+	goexperiment := goexperiment
-+	if !strings.Contains(goexperiment, "allowcryptofallback") {
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "allowcryptofallback"
-+	}
- 	os.Setenv("GOEXPERIMENT", goexperiment)
- 	// No need to enable PGO for toolchain2.
- 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index d335e4cfbce468..542b16e1f1f18a 100644
 --- a/src/cmd/dist/test.go
@@ -289,36 +263,6 @@ index 7f22b6ba1c5bf0..6d9c27f5537700 100644
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",
  	"crypto/x509",
-diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 6a684890be0a03..1dcc126b7a0440 100644
---- a/src/cmd/link/internal/ld/main.go
-+++ b/src/cmd/link/internal/ld/main.go
-@@ -44,6 +44,7 @@ import (
- 	"os"
- 	"runtime"
- 	"runtime/pprof"
-+	"slices"
- 	"strconv"
- 	"strings"
- )
-@@ -187,7 +188,16 @@ func Main(arch *sys.Arch, theArch Arch) {
- 
- 	buildVersion := buildcfg.Version
- 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
--		buildVersion += " X:" + goexperiment
-+		// buildVersion is intended to contain non-default experiment flags.
-+		// The Microsoft build of Go default behavior is to set the
-+		// allowcryptofallback experiment, so we don't include it in the
-+		// buildVersion string.
-+		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
-+			return s == "allowcryptofallback"
-+		}), ",")
-+		if goexperiment != "" {
-+			buildVersion += " X:" + goexperiment
-+		}
- 	}
- 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
- 
 diff --git a/src/crypto/aes/aes.go b/src/crypto/aes/aes.go
 index 22ea8819ed239a..1e2cba08c1c760 100644
 --- a/src/crypto/aes/aes.go

From 93c97f756ae43166dc82442f7173c71a32226eff Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Jun 2025 08:05:04 +0200
Subject: [PATCH 329/887] Downgrade `GOEXPERIMENT=allowcryptofallback` to a
 build tag (#1701)

* update docs and build scripts

* downgrade allowcryptofallback to build tag

* fix readme

* fix build

* fix build

* fix build

* fix build

* fix build

* fix boringcrypto

* fix boringcrypto

* Update eng/doc/fips/README.md

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/_util/buildutil/buildutil.go              |  36 +--
 eng/_util/cmd/run-builder/run-builder.go      |  35 +--
 eng/_util/cmd/run-builder/systemfips_linux.go |   4 +-
 eng/doc/fips/README.md                        |  29 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 100 +-----
 ...03-Implement-crypto-internal-backend.patch | 290 +++++++++++++++---
 6 files changed, 291 insertions(+), 203 deletions(-)

diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index 57f57f5b77d..1d9132753d4 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -11,7 +11,6 @@ import (
 	"os"
 	"os/exec"
 	"strconv"
-	"strings"
 )
 
 // Retry runs f until it succeeds or the attempt limit is reached.
@@ -85,26 +84,27 @@ func GetEnvOrDefault(varName, defaultValue string) (string, error) {
 	return v, nil
 }
 
+// SetEnv sets an env var and logs it. Panics if it doesn't succeed.
+func SetEnv(key, value string) {
+	fmt.Printf("Setting env '%s' to '%s'\n", key, value)
+	if err := os.Setenv(key, value); err != nil {
+		panic(err)
+	}
+}
+
+// AppendEnv sets the given environment variable to the given value, or if the
+// environment variable is already set, appends sep and then the given value.
+func AppendEnv(key, value, sep string) {
+	if v, ok := os.LookupEnv(key); ok {
+		value = v + sep + value
+	}
+	SetEnv(key, value)
+}
+
 // AppendExperimentEnv sets the GOEXPERIMENT env var to the given value, or if GOEXPERIMENT is
 // already set, appends a comma separator and then the given value.
 func AppendExperimentEnv(experiment string) {
-	// If the experiment enables a crypto backend, allow fallback to Go crypto. Go turns off cgo
-	// and/or cross-builds in various situations during the build/tests, so we need to allow for it.
-	if strings.Contains(experiment, "opensslcrypto") ||
-		strings.Contains(experiment, "cngcrypto") ||
-		strings.Contains(experiment, "boringcrypto") ||
-		strings.Contains(experiment, "darwincrypto") ||
-		strings.Contains(experiment, "systemcrypto") {
-
-		experiment += ",allowcryptofallback"
-	}
-	if v, ok := os.LookupEnv("GOEXPERIMENT"); ok {
-		experiment = v + "," + experiment
-	}
-	fmt.Printf("Setting GOEXPERIMENT: %v\n", experiment)
-	if err := os.Setenv("GOEXPERIMENT", experiment); err != nil {
-		panic(err)
-	}
+	AppendEnv("GOEXPERIMENT", experiment, ",")
 }
 
 // UnassignGOROOT unsets the GOROOT env var if it is set.
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index a6a6f33f979..71150f5979c 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -79,18 +79,18 @@ func main() {
 	// running tests:
 	switch config {
 	case "clang":
-		env("CC", "/usr/bin/clang-3.9")
+		buildutil.SetEnv("CC", "/usr/bin/clang-3.9")
 	case "longtest":
-		env("GO_TEST_SHORT", "false")
+		buildutil.SetEnv("GO_TEST_SHORT", "false")
 		timeoutScale *= 5
 	case "nocgo":
-		env("CGO_ENABLED", "0")
+		buildutil.SetEnv("CGO_ENABLED", "0")
 	case "noopt":
-		env("GO_GCFLAGS", "-N -l")
+		buildutil.SetEnv("GO_GCFLAGS", "-N -l")
 	case "regabi":
 		buildutil.AppendExperimentEnv("regabi")
 	case "ssacheck":
-		env("GO_GCFLAGS", "-d=ssa/check/on")
+		buildutil.SetEnv("GO_GCFLAGS", "-d=ssa/check/on")
 	case "staticlockranking":
 		buildutil.AppendExperimentEnv("staticlockranking")
 	}
@@ -102,7 +102,7 @@ func main() {
 	}
 
 	if timeoutScale != 1 {
-		env("GO_TEST_TIMEOUT_SCALE", strconv.Itoa(timeoutScale))
+		buildutil.SetEnv("GO_TEST_TIMEOUT_SCALE", strconv.Itoa(timeoutScale))
 	}
 
 	if err := buildutil.UnassignGOROOT(); err != nil {
@@ -150,7 +150,7 @@ func main() {
 		}
 
 		if *fipsMode {
-			envAppend("GODEBUG", "fips140=on")
+			buildutil.AppendEnv("GODEBUG", "fips140=on", ",")
 			// Enable system-wide FIPS if supported by the host platform.
 			restore, err := enableSystemWideFIPS()
 			if err != nil {
@@ -163,14 +163,14 @@ func main() {
 
 		// The tests read GO_BUILDER_NAME and make decisions based on it. For some configurations,
 		// we only need to set this env var.
-		env("GO_BUILDER_NAME", *builder)
+		buildutil.SetEnv("GO_BUILDER_NAME", *builder)
 
 		// The "fake" config "test" is a sentinel value that means we should omit the config part of
 		// the builder name. This lets us have a stable "{os}-{arch}-{config}" API (particularly
 		// useful when dealing with AzDO YAML limitations) while still being able to test e.g. the
 		// "linux-amd64" builder from upstream.
 		if config == "test" {
-			env("GO_BUILDER_NAME", goos+"-"+goarch)
+			buildutil.SetEnv("GO_BUILDER_NAME", goos+"-"+goarch)
 		}
 
 		cmdline := []string{
@@ -230,23 +230,6 @@ func main() {
 	}
 }
 
-// env sets an env var and logs it. Panics if it doesn't succeed.
-func env(key, value string) {
-	fmt.Printf("Setting env '%s' to '%s'\n", key, value)
-	if err := os.Setenv(key, value); err != nil {
-		panic(err)
-	}
-}
-
-// envAppend appends a value to an env var and logs it.
-// Panics if it doesn't succeed.
-func envAppend(key, value string) {
-	if v, ok := os.LookupEnv(key); ok {
-		value = v + "," + value
-	}
-	env(key, value)
-}
-
 func run(cmdline ...string) error {
 	c := exec.Command(cmdline[0], cmdline[1:]...)
 	c.Stdout = os.Stdout
diff --git a/eng/_util/cmd/run-builder/systemfips_linux.go b/eng/_util/cmd/run-builder/systemfips_linux.go
index 0fa5db5fe0b..b7afe7d3ada 100644
--- a/eng/_util/cmd/run-builder/systemfips_linux.go
+++ b/eng/_util/cmd/run-builder/systemfips_linux.go
@@ -6,6 +6,8 @@ package main
 import (
 	"log"
 	"os"
+
+	"github.com/microsoft/go/_util/buildutil"
 )
 
 // enableSystemWideFIPS enables Mariner and Azure Linux 3 process-wide FIPS mode
@@ -18,7 +20,7 @@ func enableSystemWideFIPS() (restore func(), err error) {
 		return nil, nil
 	}
 
-	env("OPENSSL_FORCE_FIPS_MODE", "1")
+	buildutil.SetEnv("OPENSSL_FORCE_FIPS_MODE", "1")
 	log.Println("Enabled Mariner and Azure Linux 3 FIPS mode (OPENSSL_FORCE_FIPS_MODE).")
 
 	return func() {
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index fdafdc59cdd..d63efe3cb0b 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -50,7 +50,6 @@ These are described in the following sections in detail.
   - [`goexperiment.<backend>crypto` build tag](#usage-build)
   - [`requirefips` build tag](#build-option-to-require-fips-mode)
   - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode) (go1.24+)
-  - [`GOEXPERIMENT` `allowcryptofallback`](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails)
   - [`import _ "crypto/tls/fipsonly"` source change](#tls-with-fips-compliant-settings)
 - Runtime configuration:
   - [`GOFIPS` environment variable](#usage-runtime)
@@ -85,7 +84,7 @@ Some configurations are invalid and intentionally result in a build error or run
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | `GOFIPS=0` | The app panics due to the conflict between build-time and runtime configuration. |
 | `-tags=requirefips` | | The build fails. A crypto backend must be specified to enable FIPS features. |
 | `GOEXPERIMENT=cngcrypto,opensslcrypto` | | The build fails. Only one crypto backend can be enabled at a time. |
-| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. <br/> Prior to Go 1.21 or if [`allowcryptofallback`](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails) is enabled, the build would succeed but use standard Go crypto, making the app non-compliant. |
+| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. <br/> Prior to Go 1.21 the build would succeed but use standard Go crypto, making the app non-compliant. |
 
 ## Usage: Build
 
@@ -124,8 +123,6 @@ Setting the `goexperiment.<option>` build tag can be used as an alternative to s
 
 If a crypto backend is selected but isn't supported, the build fails.
 For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
-It's possible to dismiss the build error by using [the `allowcryptofallback` experiment](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails), but this is dangerous.
-
 
 The next sections describe how to select a crypto backend in some common scenarios.
 
@@ -329,28 +326,10 @@ We recommend one of these fixes:
 - Fix the build environment to allow the crypto backend to be used. (Enable cgo.)
 - Remove `GOEXPERIMENT` entirely. This intentionally doesn't comply with the internal Microsoft crypto policy or FIPS, so for builds within Microsoft, this should only be done under a documented exception.
 
-Prior to Go 1.21, if the backend is not compatible with the build environment and target, the assigned backend is completely ignored and the standard Go crypto implementation is used by the built app. This is called *silent crypto backend fallback* and makes the built Go app noncompliant with internal Microsoft crypto policy and FIPS. For backward compatibility and exceptional cases, this behavior can be enabled in Go 1.21 and above using the `allowcryptofallback` experiment.
-
-We recommend against using `allowcryptofallback`. It makes it unclear whether or not the app is intended to be compliant, and could lead to accidental use of Go crypto in a context where FIPS compliance is expected.
 
 > [!IMPORTANT]
-> Even if `allowcryptofallback` is not enabled, a Go app may use Go standard library crypto and not be FIPS compliant.
 > Individual crypto calls may fall back to standard Go crypto at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information.
 
-This table shows an example of the fragile behavior that results from using `allowcryptofallback`:
-
-| Build-time config | Internal Microsoft crypto policy | FIPS behavior |
-| --- | --- | --- |
-| `GOOS=linux GOEXPERIMENT=systemcrypto,allowcryptofallback` | Compliant | *Not recommended,* but can be used to create a compliant app, as `allowcryptofallback` has no effect in this situation. |
-| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto,allowcryptofallback` | Not compliant | Crypto usage is not FIPS compliant. `systemcrypto` on `linux` picks the OpenSSL backend. The backend requires cgo, so `CGO_ENABLED=0` would normally result in a build error. However, `allowcryptofallback` causes the Go standard library crypto to be used and ignores the error. |
-
-A scenario we expect is that a dev attempts to rebuild an open source Go app with an OpenSSL backend to start working towards FIPS compliance. A Dockerfile or other build script provided by the open source project may set `CGO_ENABLED=0` in a non-obvious way. With *silent crypto backend fallback*, the dev needs to notice that the OpenSSL backend isn't being used in some situations (e.g. `GODEBUG=fips140=on` and `GOFIPS=1` causes failure) and figure out why. If they don't notice, they may deliver an app that uses Go crypto without realizing it. The compatibility check makes it so this issue blocks the build and can't be missed.
-
-> [!NOTE]
-> In rare cases, it may be more practical to use `allowcryptofallback` than to remove the `GOEXPERIMENT`. For example, a generic build script that supports many platforms, some of which don't support crypto backends, may find it practical to use `GOEXPERIMENT=systemcrypto,allowcryptofallback` despite the risk of unclear or accidental fallback to Go crypto.
->
-> For example, `allowcryptofallback` plays an important role in the Microsoft build of Go build process. We have CI jobs that run the build and tests under the OpenSSL, CNG, and Boring crypto backends, but parts of the upstream build and tests disable cgo and run cross-builds. This would cause a failure because the backend can't be enabled, but by including `allowcryptofallback`, the build is allowed to continue and fall back to the Go standard library crypto implementation when necessary.
-
 ### Runtime OpenSSL version override
 
 The `opensslcrypto` Go runtime automatically loads the OpenSSL shared library `libcrypto` using [dlopen] when initializing. Therefore, dlopen's shared library search conventions also apply here.
@@ -458,6 +437,10 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp
 
 This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary.
 
+### Go 1.25 (Aug 2025)
+
+- `GOEXPERIMENT=allowcryptofallback` has been downgraded to the `allowcryptofallback` build tag. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
+
 ### Go 1.24 (Feb 2025)
 
 See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com/go/go-1-24-fips-update/) blog post for a summary of the Feb 2025 changes.
@@ -480,7 +463,7 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
 
 - Adds build errors if a crypto backend is selected but not supported.
   - Before 1.21, selecting an unsupported backend causes *silent crypto backend fallback* and the built Go app will never use the crypto backend. This is generally not desirable because it can lead to accidental or unclear fallback to Go crypto.
-    - The old behavior can be enabled using the [`allowcryptofallback` experiment](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails) if necessary, but it is not recommended.
+    - The old behavior can be enabled using `GOEXPERIMENT=allowcryptofallback` if necessary, but it is not recommended.
   - Individual crypto calls may still fall back to the Go standard library at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information. (This behavior is unaffected by this change.)
 - Adds [`systemcrypto` experiment alias](#usage-build).
 - Adds [`requirefips` build tag](#build-option-to-require-fips-mode).
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 9ae9a20f371..da48fb74859 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,18 +11,15 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/dist/build.go                         | 13 +++
+ src/cmd/dist/build.go                         |  6 ++
  src/cmd/go/internal/modindex/build.go         | 58 ++++++++++++-
  src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
- src/cmd/link/internal/ld/main.go              | 12 ++-
  src/go/build/build.go                         | 58 ++++++++++++-
  src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
  .../testdata/backendtags_openssl/main.go      |  3 +
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- .../exp_allowcryptofallback_off.go            |  8 ++
- .../exp_allowcryptofallback_on.go             |  8 ++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -31,16 +28,14 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 26 ++++++
- 21 files changed, 411 insertions(+), 5 deletions(-)
+ src/internal/goexperiment/flags.go            | 18 ++++
+ 18 files changed, 369 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/openssl.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
  create mode 100644 src/go/build/testdata/backendtags_system/systemcrypto.go
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_off.go
- create mode 100644 src/internal/goexperiment/exp_allowcryptofallback_on.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_off.go
@@ -51,29 +46,22 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index b50f3342fe8714..5120c23556ebe3 100644
+index b50f3342fe8714..75629c2a6bd9ba 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
- 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
+@@ -1539,6 +1539,12 @@ func cmdbootstrap() {
  	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
-+	//
-+	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
+ 	os.Setenv("GOEXPERIMENT", goexperiment)
++	// Build the Go toolchain with "-tags=allowcryptofallback". This
 +	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
 +	// when GODEBUG=fips140=on is set. For example, when running
 +	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
 +	// Shadow goexperiment so that the global variable is not modified.
-+	goexperiment := goexperiment
-+	if !strings.Contains(goexperiment, "allowcryptofallback") {
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "allowcryptofallback"
-+	}
- 	os.Setenv("GOEXPERIMENT", goexperiment)
++	os.Setenv("GOFLAGS", "-tags=allowcryptofallback")
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
+ 	if debug {
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
 index d7e09fed25f43a..10614d17e62453 100644
 --- a/src/cmd/go/internal/modindex/build.go
@@ -223,36 +211,6 @@ index 00000000000000..1756c5d027fee0
 +		})
 +	}
 +}
-diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 6a684890be0a03..1dcc126b7a0440 100644
---- a/src/cmd/link/internal/ld/main.go
-+++ b/src/cmd/link/internal/ld/main.go
-@@ -44,6 +44,7 @@ import (
- 	"os"
- 	"runtime"
- 	"runtime/pprof"
-+	"slices"
- 	"strconv"
- 	"strings"
- )
-@@ -187,7 +188,16 @@ func Main(arch *sys.Arch, theArch Arch) {
- 
- 	buildVersion := buildcfg.Version
- 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
--		buildVersion += " X:" + goexperiment
-+		// buildVersion is intended to contain non-default experiment flags.
-+		// The Microsoft build of Go default behavior is to set the
-+		// allowcryptofallback experiment, so we don't include it in the
-+		// buildVersion string.
-+		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
-+			return s == "allowcryptofallback"
-+		}), ",")
-+		if goexperiment != "" {
-+			buildVersion += " X:" + goexperiment
-+		}
- 	}
- 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
- 
 diff --git a/src/go/build/build.go b/src/go/build/build.go
 index 50288fcec64141..44be2e6a4c580a 100644
 --- a/src/go/build/build.go
@@ -449,34 +407,6 @@ index 00000000000000..eb8a026982259c
 +//go:build goexperiment.systemcrypto
 +
 +package main
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-new file mode 100644
-index 00000000000000..b8bdf689af6fb5
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = false
-+const AllowCryptoFallbackInt = 0
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-new file mode 100644
-index 00000000000000..d03c0284e949ba
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = true
-+const AllowCryptoFallbackInt = 1
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..eb879f94fa0c42
@@ -590,10 +520,10 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ceff24193d89a5..12fba96b868c9e 100644
+index ceff24193d89a5..6b4289503d57ae 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,32 @@ type Flags struct {
+@@ -59,6 +59,24 @@ type Flags struct {
  	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
@@ -615,14 +545,6 @@ index ceff24193d89a5..12fba96b868c9e 100644
 +	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
 +	// being used to build the Go program.
 +	SystemCrypto bool
-+
-+	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
-+	// experiment is enabled but the backend's requirements are not met. This is
-+	// used during the Go build itself to allow running the test suite with a
-+	// backend experiment enabled. Some parts of the Go build (bootstrapping)
-+	// and parts of the test suite run without cgo, so
-+	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
-+	AllowCryptoFallback bool
  
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index e86623bdbbb..1c69cdb906a 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -5,9 +5,20 @@ Subject: [PATCH] Implement crypto/internal/backend
 
 ---
  .gitignore                                    |   2 +
+ .../compile/internal/loopvar/loopvar_test.go  |   2 +-
+ src/cmd/compile/internal/ssa/fmahash_test.go  |   2 +-
+ src/cmd/dist/test.go                          |   7 +
+ src/cmd/internal/obj/x86/pcrelative_test.go   |   2 +-
+ src/cmd/internal/testdir/testdir_test.go      |  12 +
+ src/cmd/link/internal/ld/ld_test.go           |   2 +-
+ src/cmd/link/internal/ld/stackcheck_test.go   |   2 +-
+ src/cmd/link/link_test.go                     |   4 +-
+ src/cmd/vet/vet_test.go                       |   2 +-
+ .../backend/allocryptofallback_off.go         |   9 +
+ .../internal/backend/allocryptofallback_on.go |   9 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 284 ++++++++++++++
+ .../internal/backend/backendgen_test.go       | 280 +++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
@@ -15,7 +26,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/backend/bbig/big_openssl.go      |  12 +
  src/crypto/internal/backend/boring_linux.go   | 287 ++++++++++++++
  src/crypto/internal/backend/cng_windows.go    | 344 ++++++++++++++++
- src/crypto/internal/backend/common.go         |  59 +++
+ src/crypto/internal/backend/common.go         |  58 +++
  src/crypto/internal/backend/darwin_darwin.go  | 367 ++++++++++++++++++
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
@@ -39,14 +50,17 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../backenderr_gen_conflict_cng_darwin.go     |  17 +
  .../backenderr_gen_conflict_cng_openssl.go    |  17 +
  .../backenderr_gen_conflict_darwin_openssl.go |  17 +
- .../backenderr_gen_nofallback_boring.go       |  24 ++
- src/runtime/backenderr_gen_nofallback_cng.go  |  24 ++
- .../backenderr_gen_nofallback_darwin.go       |  24 ++
- .../backenderr_gen_nofallback_openssl.go      |  24 ++
+ .../backenderr_gen_nofallback_boring.go       |  20 +
+ src/runtime/backenderr_gen_nofallback_cng.go  |  20 +
+ .../backenderr_gen_nofallback_darwin.go       |  20 +
+ .../backenderr_gen_nofallback_openssl.go      |  20 +
  ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
  .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
- 42 files changed, 2702 insertions(+), 3 deletions(-)
+ src/syscall/exec_linux_test.go                |   2 +-
+ 54 files changed, 2727 insertions(+), 12 deletions(-)
+ create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
+ create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -100,6 +114,198 @@ index c6512e64a4ef39..b3b01db73b009d 100644
  # This file includes artifacts of Go build that should not be checked in.
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
+diff --git a/src/cmd/compile/internal/loopvar/loopvar_test.go b/src/cmd/compile/internal/loopvar/loopvar_test.go
+index b19962f0fd4023..ce018311a35d7d 100644
+--- a/src/cmd/compile/internal/loopvar/loopvar_test.go
++++ b/src/cmd/compile/internal/loopvar/loopvar_test.go
+@@ -189,7 +189,7 @@ func TestLoopVarHashes(t *testing.T) {
+ 		// -trimpath is necessary so we get the same answer no matter where the
+ 		// Go repository is checked out. This is not normally a concern since people
+ 		// do not normally rely on the meaning of specific hashes.
+-		cmd := testenv.Command(t, gocmd, "run", "-trimpath", root)
++		cmd := testenv.Command(t, gocmd, "run", "-trimpath", "-tags=allowcryptofallback", root)
+ 		cmd.Env = append(cmd.Env, "GOCOMPILEDEBUG=loopvarhash="+hash, "HOME="+tmpdir)
+ 		cmd.Dir = filepath.Join("testdata", "inlines")
+ 
+diff --git a/src/cmd/compile/internal/ssa/fmahash_test.go b/src/cmd/compile/internal/ssa/fmahash_test.go
+index c563d5b8d9d01b..ed063d7ded8fd9 100644
+--- a/src/cmd/compile/internal/ssa/fmahash_test.go
++++ b/src/cmd/compile/internal/ssa/fmahash_test.go
+@@ -33,7 +33,7 @@ func TestFmaHash(t *testing.T) {
+ 	tmpdir := t.TempDir()
+ 	source := filepath.Join("testdata", "fma.go")
+ 	output := filepath.Join(tmpdir, "fma.exe")
+-	cmd := testenv.Command(t, gocmd, "build", "-o", output, source)
++	cmd := testenv.Command(t, gocmd, "build", "-o", output, "-tags=allowcryptofallback", source)
+ 	// The hash-dependence on file path name is dodged by specifying "all hashes ending in 1" plus "all hashes ending in 0"
+ 	// i.e., all hashes.  This will print all the FMAs; this test is only interested in one of them (that should appear near the end).
+ 	cmd.Env = append(cmd.Env, "GOCOMPILEDEBUG=fmahash=1/0", "GOOS=linux", "GOARCH=arm64", "HOME="+tmpdir)
+diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
+index d335e4cfbce468..7e362c80be609a 100644
+--- a/src/cmd/dist/test.go
++++ b/src/cmd/dist/test.go
+@@ -847,6 +847,11 @@ func (t *tester) registerTests() {
+ 
+ 	// Test internal linking of PIE binaries where it is supported.
+ 	if t.internalLinkPIE() && !disablePIE {
++		var tags []string
++		if goos != "windows" {
++			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
++			tags = append(tags, "allowcryptofallback")
++		}
+ 		t.registerTest("internal linking, -buildmode=pie",
+ 			&goTest{
+ 				variant:   "pie_internal",
+@@ -855,6 +860,7 @@ func (t *tester) registerTests() {
+ 				ldflags:   "-linkmode=internal",
+ 				env:       []string{"CGO_ENABLED=0"},
+ 				pkg:       "reflect",
++				tags:      tags,
+ 			})
+ 		t.registerTest("internal linking, -buildmode=pie",
+ 			&goTest{
+@@ -865,6 +871,7 @@ func (t *tester) registerTests() {
+ 				env:       []string{"CGO_ENABLED=0"},
+ 				pkg:       "crypto/internal/fips140test",
+ 				runTests:  "TestFIPSCheck",
++				tags:      tags,
+ 			})
+ 		// Also test a cgo package.
+ 		if t.cgoEnabled && t.internalLink() && !disablePIE {
+diff --git a/src/cmd/internal/obj/x86/pcrelative_test.go b/src/cmd/internal/obj/x86/pcrelative_test.go
+index 1ca9ea22cf7182..3cf10b0933abc0 100644
+--- a/src/cmd/internal/obj/x86/pcrelative_test.go
++++ b/src/cmd/internal/obj/x86/pcrelative_test.go
+@@ -56,7 +56,7 @@ func objdumpOutput(t *testing.T, mname, source string) []byte {
+ 	}
+ 
+ 	cmd := testenv.Command(t,
+-		testenv.GoToolPath(t), "build", "-o",
++		testenv.GoToolPath(t), "build", "-tags=allowcryptofallback", "-o",
+ 		filepath.Join(tmpdir, "output"))
+ 
+ 	cmd.Env = append(os.Environ(),
+diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
+index 7e7867d83f9c47..d593aaa5f7adb5 100644
+--- a/src/cmd/internal/testdir/testdir_test.go
++++ b/src/cmd/internal/testdir/testdir_test.go
+@@ -280,6 +280,10 @@ func (t test) expectFail() bool {
+ 		failureSets = append(failureSets, types2Failures32Bit)
+ 	}
+ 
++	if strings.Contains(goExperiment, "boringcrypto") {
++		failureSets = append(failureSets, boringFailures)
++	}
++
+ 	testName := path.Join(t.dir, t.goFile) // Test name is '/'-separated.
+ 
+ 	for _, set := range failureSets {
+@@ -1864,6 +1868,14 @@ var types2Failures32Bit = setOf(
+ 	"fixedbugs/issue23305.go", // large untyped int passed to println (32-bit)
+ )
+ 
++// List of files that fail with boringcrypto due
++// to it not supporting 32-bit architectures.
++var boringFailures = setOf(
++	"codegen/copy.go",
++	"codegen/memcombine.go",
++	"codegen/stack.go",
++)
++
+ // In all of these cases, the 1.17 compiler reports reasonable errors, but either the
+ // 1.17 or 1.18 compiler report extra errors, so we can't match correctly on both. We
+ // now set the patterns to match correctly on all the 1.18 errors.
+diff --git a/src/cmd/link/internal/ld/ld_test.go b/src/cmd/link/internal/ld/ld_test.go
+index c954ab6bca7294..d455f4ecd2edbd 100644
+--- a/src/cmd/link/internal/ld/ld_test.go
++++ b/src/cmd/link/internal/ld/ld_test.go
+@@ -417,7 +417,7 @@ func d()
+ 	if err := os.WriteFile(filepath.Join(tmpDir, "x.go"), []byte(main), 0644); err != nil {
+ 		t.Fatalf("failed to write main: %v\n", err)
+ 	}
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal")
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-tags=allowcryptofallback")
+ 	cmd.Dir = tmpDir
+ 	cmd.Env = append(os.Environ(), "GOARCH=riscv64", "GOOS=linux")
+ 	out, err := cmd.CombinedOutput()
+diff --git a/src/cmd/link/internal/ld/stackcheck_test.go b/src/cmd/link/internal/ld/stackcheck_test.go
+index dd7e20528f0959..693d4ca473f95a 100644
+--- a/src/cmd/link/internal/ld/stackcheck_test.go
++++ b/src/cmd/link/internal/ld/stackcheck_test.go
+@@ -19,7 +19,7 @@ func TestStackCheckOutput(t *testing.T) {
+ 	testenv.MustHaveGoBuild(t)
+ 	t.Parallel()
+ 
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-o", os.DevNull, "./testdata/stackcheck")
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-tags=allowcryptofallback", "-o", os.DevNull, "./testdata/stackcheck")
+ 	// The rules for computing frame sizes on all of the
+ 	// architectures are complicated, so just do this on amd64.
+ 	cmd.Env = append(os.Environ(), "GOARCH=amd64", "GOOS=linux")
+diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
+index 53c4ee77fed4b4..43effb152f63f5 100644
+--- a/src/cmd/link/link_test.go
++++ b/src/cmd/link/link_test.go
+@@ -167,7 +167,7 @@ TEXT ·x(SB),0,$0
+         MOVD ·zero(SB), AX
+         RET
+ `)
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "build")
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-tags=allowcryptofallback")
+ 	cmd.Dir = tmpdir
+ 	cmd.Env = append(os.Environ(),
+ 		"GOARCH=amd64", "GOOS=linux", "GOPATH="+filepath.Join(tmpdir, "_gopath"))
+@@ -370,7 +370,7 @@ func TestMachOBuildVersion(t *testing.T) {
+ 	}
+ 
+ 	exe := filepath.Join(tmpdir, "main")
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-o", exe, src)
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-tags=allowcryptofallback", "-o", exe, src)
+ 	cmd.Env = append(os.Environ(),
+ 		"CGO_ENABLED=0",
+ 		"GOOS=darwin",
+diff --git a/src/cmd/vet/vet_test.go b/src/cmd/vet/vet_test.go
+index 54eabca938c3a9..56546c413b330c 100644
+--- a/src/cmd/vet/vet_test.go
++++ b/src/cmd/vet/vet_test.go
+@@ -38,7 +38,7 @@ func vetPath(t testing.TB) string {
+ }
+ 
+ func vetCmd(t *testing.T, arg, pkg string) *exec.Cmd {
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "vet", "-vettool="+vetPath(t), arg, path.Join("cmd/vet/testdata", pkg))
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "vet", "-tags=allowcryptofallback", "-vettool="+vetPath(t), arg, path.Join("cmd/vet/testdata", pkg))
+ 	cmd.Env = os.Environ()
+ 	return cmd
+ }
+diff --git a/src/crypto/internal/backend/allocryptofallback_off.go b/src/crypto/internal/backend/allocryptofallback_off.go
+new file mode 100644
+index 00000000000000..7718cc02f48556
+--- /dev/null
++++ b/src/crypto/internal/backend/allocryptofallback_off.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !allowcryptofallback
++
++package backend
++
++const allowCryptoFallback = false
+diff --git a/src/crypto/internal/backend/allocryptofallback_on.go b/src/crypto/internal/backend/allocryptofallback_on.go
+new file mode 100644
+index 00000000000000..fc30aba8ad8228
+--- /dev/null
++++ b/src/crypto/internal/backend/allocryptofallback_on.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build allowcryptofallback
++
++package backend
++
++const allowCryptoFallback = true
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
 index 00000000000000..c2c06d3bff8c74
@@ -164,10 +370,10 @@ index 00000000000000..acf0113bbefb6c
 +//go:generate go test -run TestGenerated -fix
 diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
 new file mode 100644
-index 00000000000000..1ba948c8f207e5
+index 00000000000000..1da2926a7b960f
 --- /dev/null
 +++ b/src/crypto/internal/backend/backendgen_test.go
-@@ -0,0 +1,284 @@
+@@ -0,0 +1,280 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -332,7 +538,7 @@ index 00000000000000..1ba948c8f207e5
 +
 +func testPreventUnintendedFallback(t *testing.T, backend *backend) string {
 +	expTag := &constraint.TagExpr{Tag: "goexperiment." + backend.name + "crypto"}
-+	optOutTag := &constraint.TagExpr{Tag: "goexperiment.allowcryptofallback"}
++	optOutTag := &constraint.TagExpr{Tag: "allowcryptofallback"}
 +	c := constraint.AndExpr{
 +		X: &constraint.AndExpr{
 +			X: expTag,
@@ -348,10 +554,6 @@ index 00000000000000..1ba948c8f207e5
 +		"Required build tags:",
 +		"  "+backend.constraint.String(),
 +		"Please check your build environment and build command for a reason one or more of these tags weren't specified.",
-+		"",
-+		"If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.",
-+		"As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.",
-+		"Removing "+backend.name+"crypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.",
 +		"")
 +}
 +
@@ -1192,10 +1394,10 @@ index 00000000000000..6abb6ff007c99f
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..9436b00381aaf8
+index 00000000000000..9dec441fa63856
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,59 @@
+@@ -0,0 +1,58 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1205,12 +1407,11 @@ index 00000000000000..9436b00381aaf8
 +import (
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
-+	"internal/goexperiment"
 +	"runtime"
 +)
 +
 +func init() {
-+	if !goexperiment.AllowCryptoFallback && fips140.Enabled() {
++	if !allowCryptoFallback && fips140.Enabled() {
 +		if !Enabled {
 +			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
 +				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
@@ -2905,17 +3106,17 @@ index 00000000000000..90f4361e28cd94
 +}
 diff --git a/src/runtime/backenderr_gen_nofallback_boring.go b/src/runtime/backenderr_gen_nofallback_boring.go
 new file mode 100644
-index 00000000000000..6db0ed6dc09639
+index 00000000000000..08926e5f836698
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_boring.go
-@@ -0,0 +1,24 @@
+@@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !goexperiment.allowcryptofallback
++//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !allowcryptofallback
 +
 +package runtime
 +
@@ -2926,26 +3127,22 @@ index 00000000000000..6db0ed6dc09639
 +	  goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
 +	Please check your build environment and build command for a reason one or more of these tags weren't specified.
 +	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing boringcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
 diff --git a/src/runtime/backenderr_gen_nofallback_cng.go b/src/runtime/backenderr_gen_nofallback_cng.go
 new file mode 100644
-index 00000000000000..ae7f798ea41225
+index 00000000000000..fcd86ebaa37814
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_cng.go
-@@ -0,0 +1,24 @@
+@@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows) && !goexperiment.allowcryptofallback
++//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows) && !allowcryptofallback
 +
 +package runtime
 +
@@ -2956,26 +3153,22 @@ index 00000000000000..ae7f798ea41225
 +	  goexperiment.cngcrypto && windows
 +	Please check your build environment and build command for a reason one or more of these tags weren't specified.
 +	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing cngcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
 diff --git a/src/runtime/backenderr_gen_nofallback_darwin.go b/src/runtime/backenderr_gen_nofallback_darwin.go
 new file mode 100644
-index 00000000000000..8a32f2cb25bda2
+index 00000000000000..bcca3e1a5a548d
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_darwin.go
-@@ -0,0 +1,24 @@
+@@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !goexperiment.allowcryptofallback
++//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !allowcryptofallback
 +
 +package runtime
 +
@@ -2986,26 +3179,22 @@ index 00000000000000..8a32f2cb25bda2
 +	  goexperiment.darwincrypto && darwin && cgo
 +	Please check your build environment and build command for a reason one or more of these tags weren't specified.
 +	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing darwincrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
 diff --git a/src/runtime/backenderr_gen_nofallback_openssl.go b/src/runtime/backenderr_gen_nofallback_openssl.go
 new file mode 100644
-index 00000000000000..7e1679dfc37a23
+index 00000000000000..c88593ad85fc76
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_openssl.go
-@@ -0,0 +1,24 @@
+@@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !goexperiment.allowcryptofallback
++//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !allowcryptofallback
 +
 +package runtime
 +
@@ -3016,10 +3205,6 @@ index 00000000000000..7e1679dfc37a23
 +	  goexperiment.opensslcrypto && linux && cgo
 +	Please check your build environment and build command for a reason one or more of these tags weren't specified.
 +	
-+	If you only performed a Go toolset upgrade and didn't expect this error, your code was likely depending on fallback to Go standard library crypto.
-+	As of Go 1.21, Go crypto fallback is a build error. This helps prevent accidental fallback.
-+	Removing opensslcrypto will restore pre-1.21 behavior by intentionally using Go standard library crypto.
-+	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
@@ -3081,3 +3266,16 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +func crypto_backend_runtime_arg0() string {
 +	return boring_runtime_arg0()
 +}
+diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
+index 69d49169446d1c..9c16f665d4a223 100644
+--- a/src/syscall/exec_linux_test.go
++++ b/src/syscall/exec_linux_test.go
+@@ -299,7 +299,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
+ 		}
+ 	})
+ 
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-tags=allowcryptofallback", "-o", x, "syscall")
+ 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
+ 	if o, err := cmd.CombinedOutput(); err != nil {
+ 		t.Fatalf("%v: %v\n%s", cmd, err, o)

From f43e210a83d132edd1d561f83b0c48ba1e81ab4a Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 18 Jun 2025 21:37:37 +0200
Subject: [PATCH 330/887] don't use the CNG backend on 32-bit Windows (#1703)

---
 eng/doc/fips/README.md                             |  2 +-
 .../0003-Implement-crypto-internal-backend.patch   | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index d63efe3cb0b..d9615046990 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -105,7 +105,7 @@ The options are exclusive and must not be enabled at the same time as one anothe
 | Target platform | `systemcrypto` selection | Library |
 | --- | --- | --- |
 | Linux | `opensslcrypto` | OpenSSL |
-| Windows | `cngcrypto` | CNG |
+| Windows (amd64 and arm64) | `cngcrypto` | CNG |
 | macOS (since 1.24) | `darwincrypto` | CommonCrypto & CryptoKit |
 | macOS (prior to 1.24) | N/A, build error | N/A |
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 1c69cdb906a..31a46d2af93 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -1044,7 +1044,7 @@ index 00000000000000..48d44ec1723ab6
 +}
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..6abb6ff007c99f
+index 00000000000000..7a89cfb5d2f596
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,344 @@
@@ -1052,7 +1052,7 @@ index 00000000000000..6abb6ff007c99f
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.cngcrypto && windows
++//go:build goexperiment.cngcrypto && windows && (amd64 || arm64)
 +
 +// Package cng provides access to CNGCrypto implementation functions.
 +// Check the variable Enabled to find out whether CNGCrypto is available.
@@ -2294,7 +2294,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..1675358749323f
+index 00000000000000..dc8513b535f19b
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,246 @@
@@ -2304,7 +2304,7 @@ index 00000000000000..1675358749323f
 +
 +// Do not edit the build constraint by hand. It is generated by "backendgen.go".
 +
-+//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
++//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
 +
 +package backend
 +
@@ -3132,7 +3132,7 @@ index 00000000000000..08926e5f836698
 +}
 diff --git a/src/runtime/backenderr_gen_nofallback_cng.go b/src/runtime/backenderr_gen_nofallback_cng.go
 new file mode 100644
-index 00000000000000..fcd86ebaa37814
+index 00000000000000..f8e36f8c8406af
 --- /dev/null
 +++ b/src/runtime/backenderr_gen_nofallback_cng.go
 @@ -0,0 +1,20 @@
@@ -3142,7 +3142,7 @@ index 00000000000000..fcd86ebaa37814
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
 +
-+//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows) && !allowcryptofallback
++//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !allowcryptofallback
 +
 +package runtime
 +
@@ -3150,7 +3150,7 @@ index 00000000000000..fcd86ebaa37814
 +	`
 +	The goexperiment.cngcrypto tag is specified, but other tags required to enable that backend were not met.
 +	Required build tags:
-+	  goexperiment.cngcrypto && windows
++	  goexperiment.cngcrypto && windows && (amd64 || arm64)
 +	Please check your build environment and build command for a reason one or more of these tags weren't specified.
 +	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips

From bc56b82ebafc0d8e8355b561fe46a5d833432de3 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 19 Jun 2025 11:06:19 +0100
Subject: [PATCH 331/887] update submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index da9c5b142c8..96a6e147b2b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit da9c5b142c855496222f0ab167c3f1d9e98403c4
+Subproject commit 96a6e147b2b02b1f070d559cb2c8e1c25c9b78c3

From 8deb85de42c1990f459ff7fb46e5b46129a0fde7 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Mon, 26 May 2025 11:58:11 +0200
Subject: [PATCH 332/887] fix conflicts

---
 .../0001-Vendor-external-dependencies.patch   |  28 +--
 ...03-Implement-crypto-internal-backend.patch |  66 ++++++-
 patches/0004-Use-crypto-backends.patch        | 186 ++++++++++--------
 3 files changed, 181 insertions(+), 99 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 8f8bfc9129b..9e4f1ed5d40 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1818,7 +1818,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 28e250668dd52c..ad0c97b35c174c 100644
+index 28e250668dd52c..e5aa4b223a54d4 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1832,7 +1832,7 @@ index 28e250668dd52c..ad0c97b35c174c 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ca2e7027fad3bd..ff280decc565b6 100644
+index ca2e7027fad3bd..f623f220d18598 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1846,12 +1846,12 @@ index ca2e7027fad3bd..ff280decc565b6 100644
  golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
  golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b261af47e2167c..3ad0b0a3f2f465 100644
+index b2668a3d7d4fbe..05675718966f54 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -518,6 +518,24 @@ var depsRules = `
+@@ -521,6 +521,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
- 	< FIPS;
+ 	< FIPS < crypto/fips140;
  
 +	FIPS, hash < crypto/internal/fips140only;
 +	crypto/internal/fips140/subtle,	hash < crypto;
@@ -1871,11 +1871,11 @@ index b261af47e2167c..3ad0b0a3f2f465 100644
 +	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +	< github.com/microsoft/go-crypto-winnative/cng;
 +
- 	FIPS, internal/godebug < crypto/fips140;
+ 	crypto !< FIPS;
  
- 	crypto, hash !< FIPS;
-@@ -531,13 +549,12 @@ var depsRules = `
- 	FIPS, internal/godebug, hash, embed,
+ 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
+@@ -532,13 +550,12 @@ var depsRules = `
+ 	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
 -	crypto/internal/boring/bcache
@@ -1892,7 +1892,7 @@ index b261af47e2167c..3ad0b0a3f2f465 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -558,6 +575,10 @@ var depsRules = `
+@@ -559,6 +576,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -1902,8 +1902,8 @@ index b261af47e2167c..3ad0b0a3f2f465 100644
 +
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
- 	< crypto/rand
-@@ -861,7 +882,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+ 	< crypto/internal/fips140cache
+@@ -868,7 +889,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -1912,7 +1912,7 @@ index b261af47e2167c..3ad0b0a3f2f465 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -871,7 +892,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -878,7 +899,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -21058,7 +21058,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 4c87639632f887..52b36b8bb07730 100644
+index 4c87639632f887..271c698c1d681b 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 31a46d2af93..504b0d319c3 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2906,10 +2906,10 @@ index 00000000000000..5e4b436554d44d
 +// from complaining about the missing body
 +// (because the implementation might be here).
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
+index 05675718966f54..a676a8c831a84d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -536,6 +536,11 @@ var depsRules = `
+@@ -539,6 +539,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2918,10 +2918,10 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
 +	< crypto/internal/backend/internal/opensslsetup
 +	< crypto/internal/backend/fips140;
 +
- 	FIPS, internal/godebug < crypto/fips140;
+ 	crypto !< FIPS;
  
- 	crypto, hash !< FIPS;
-@@ -546,16 +551,28 @@ var depsRules = `
+ 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
+@@ -547,16 +552,28 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2937,7 +2937,7 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
 +	crypto/internal/boring
 +	< crypto/internal/backend;
 +
- 	FIPS, internal/godebug, hash, embed,
+ 	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
  	crypto/internal/boring/bcache,
@@ -2952,7 +2952,7 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -579,8 +596,12 @@ var depsRules = `
+@@ -580,8 +597,12 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2963,9 +2963,59 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
 +	github.com/microsoft/go-crypto-winnative/cng/bbig
  	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
+ 	< crypto/internal/fips140cache
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
- 	< encoding/asn1
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+new file mode 100644
+index 00000000000000..dfce36d834c46e
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
+@@ -0,0 +1,9 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.allowcryptofallback
++// +build !goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = false
++const AllowCryptoFallbackInt = 0
+diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+new file mode 100644
+index 00000000000000..8d0c3fde9ab5e8
+--- /dev/null
++++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
+@@ -0,0 +1,9 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.allowcryptofallback
++// +build goexperiment.allowcryptofallback
++
++package goexperiment
++
++const AllowCryptoFallback = true
++const AllowCryptoFallbackInt = 1
+diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
+index 6b4289503d57ae..12fba96b868c9e 100644
+--- a/src/internal/goexperiment/flags.go
++++ b/src/internal/goexperiment/flags.go
+@@ -78,6 +78,14 @@ type Flags struct {
+ 	// being used to build the Go program.
+ 	SystemCrypto bool
+ 
++	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
++	// experiment is enabled but the backend's requirements are not met. This is
++	// used during the Go build itself to allow running the test suite with a
++	// backend experiment enabled. Some parts of the Go build (bootstrapping)
++	// and parts of the test suite run without cgo, so
++	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
++	AllowCryptoFallback bool
++
+ 	// Regabi is split into several sub-experiments that can be
+ 	// enabled individually. Not all combinations work.
+ 	// The "regabi" GOEXPERIMENT is an alias for all "working"
+>>>>>>> 8a8521a (fix conflicts)
 diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
 new file mode 100644
 index 00000000000000..361db2a962d60f
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5241af5705a..bc3591eb839 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -80,7 +80,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/go/build/deps_test.go                     |   3 +-
+ src/go/build/deps_test.go                     |   5 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   4 +
@@ -88,7 +88,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 84 files changed, 1146 insertions(+), 94 deletions(-)
+ 85 files changed, 1111 insertions(+), 89 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -113,8 +113,32 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  
  package main
  
+diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
+index 23deece6fbf7ad..3da3678d5503cc 100644
+--- a/src/cmd/dist/build.go
++++ b/src/cmd/dist/build.go
+@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
+ 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
+ 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
+ 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
++	//
++	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
++	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
++	// when GOFIPS=1 is set. For example, when running "GOFIPS=1 go test ./..."
++	// or "GOFIPS=1 go run .".
++	// Shadow goexperiment so that the global variable is not modified.
++	goexperiment := goexperiment
++	if !strings.Contains(goexperiment, "allowcryptofallback") {
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "allowcryptofallback"
++	}
+ 	os.Setenv("GOEXPERIMENT", goexperiment)
+ 	// No need to enable PGO for toolchain2.
+ 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d335e4cfbce468..542b16e1f1f18a 100644
+index 82c6ee4631ee87..cdf02ca115ce3f 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -126,7 +150,7 @@ index d335e4cfbce468..542b16e1f1f18a 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1165,6 +1165,11 @@ func (t *tester) internalLink() bool {
+@@ -1166,6 +1166,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -138,7 +162,7 @@ index d335e4cfbce468..542b16e1f1f18a 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1328,12 +1333,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1329,12 +1334,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -881,7 +905,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index cb308b41e9df86..7bfdc76759baeb 100644
+index 9affc1ff786125..7e1b98f344cc0a 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -893,9 +917,9 @@ index cb308b41e9df86..7bfdc76759baeb 100644
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
  	"crypto/internal/fips140/ecdsa"
- 	"crypto/internal/fips140hash"
- 	"crypto/internal/fips140only"
-@@ -162,7 +162,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
+ 	"crypto/internal/fips140/nistec"
+ 	"crypto/internal/fips140cache"
+@@ -337,7 +337,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
  func GenerateKey(c elliptic.Curve, rand io.Reader) (*PrivateKey, error) {
  	randutil.MaybeReadByte(rand)
  
@@ -904,7 +928,7 @@ index cb308b41e9df86..7bfdc76759baeb 100644
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
  			return nil, err
-@@ -211,7 +211,7 @@ var errNoAsm = errors.New("no assembly implementation available")
+@@ -386,7 +386,7 @@ var errNoAsm = errors.New("no assembly implementation available")
  func SignASN1(rand io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
  	randutil.MaybeReadByte(rand)
  
@@ -913,7 +937,7 @@ index cb308b41e9df86..7bfdc76759baeb 100644
  		b, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -326,7 +326,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
+@@ -498,7 +498,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
  // The inputs are not considered confidential, and may leak through timing side
  // channels, or if an attacker has control of part of the inputs.
  func VerifyASN1(pub *PublicKey, hash, sig []byte) bool {
@@ -1018,7 +1042,7 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index c1f8ff784e4a5c..6476bfbe896d6c 100644
+index 0e268139587075..b770c8c4987ca6 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
 @@ -17,6 +17,7 @@ package ed25519
@@ -1027,9 +1051,9 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  	"crypto"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/ed25519"
+ 	"crypto/internal/fips140cache"
  	"crypto/internal/fips140only"
- 	cryptorand "crypto/rand"
-@@ -24,6 +25,7 @@ import (
+@@ -25,6 +26,7 @@ import (
  	"errors"
  	"io"
  	"strconv"
@@ -1037,7 +1061,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  )
  
  const (
-@@ -138,6 +140,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -144,6 +146,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  	if rand == nil {
  		rand = cryptorand.Reader
  	}
@@ -1060,7 +1084,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  
  	seed := make([]byte, SeedSize)
  	if _, err := io.ReadFull(rand, seed); err != nil {
-@@ -154,6 +172,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -160,6 +178,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1078,7 +1102,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -172,6 +201,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -178,6 +207,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1096,7 +1120,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -200,6 +240,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -207,6 +247,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1129,7 +1153,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -228,6 +294,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -235,6 +301,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
@@ -1144,7 +1168,7 @@ index c1f8ff784e4a5c..6476bfbe896d6c 100644
  	default:
  		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
 diff --git a/src/crypto/ed25519/ed25519_test.go b/src/crypto/ed25519/ed25519_test.go
-index 87d0132df11d8b..00dd5224a70418 100644
+index c8a23e3246a949..7f3d012f1a0707 100644
 --- a/src/crypto/ed25519/ed25519_test.go
 +++ b/src/crypto/ed25519/ed25519_test.go
 @@ -13,6 +13,7 @@ import (
@@ -1187,7 +1211,7 @@ index 00000000000000..77b69a3be88183
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
-index 1c4036d5e74735..05266dea864aa3 100644
+index 830b6f80af5f22..1fad281448b201 100644
 --- a/src/crypto/fips140/fips140.go
 +++ b/src/crypto/fips140/fips140.go
 @@ -5,6 +5,7 @@
@@ -1197,8 +1221,8 @@ index 1c4036d5e74735..05266dea864aa3 100644
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/check"
- 	"internal/godebug"
-@@ -29,5 +30,5 @@ func Enabled() bool {
+ )
+@@ -21,5 +22,5 @@ func Enabled() bool {
  	if fips140.Enabled && !check.Verified {
  		panic("crypto/fips140: FIPS 140-3 mode enabled, but integrity check didn't pass")
  	}
@@ -1278,7 +1302,7 @@ index 554c8c9b78940b..c68a394280cc2c 100644
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
-index 7accad763244a1..dd3211f2c37af3 100644
+index 9b7eee7bf7873e..1755c95a08868b 100644
 --- a/src/crypto/hmac/hmac_test.go
 +++ b/src/crypto/hmac/hmac_test.go
 @@ -5,7 +5,7 @@
@@ -1304,7 +1328,7 @@ index 70055af70b42ec..3c4b4fbaa98ded 100644
  	"internal/msan"
  	"internal/race"
 diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
-index 3fa730459050f6..1f28f12a6e7b4f 100644
+index f0ba665403e4e2..e1869abd3ccc4b 100644
 --- a/src/crypto/internal/cryptotest/implementations.go
 +++ b/src/crypto/internal/cryptotest/implementations.go
 @@ -5,7 +5,7 @@
@@ -1314,10 +1338,10 @@ index 3fa730459050f6..1f28f12a6e7b4f 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/impl"
+ 	"internal/goarch"
  	"internal/goos"
- 	"internal/testenv"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index ddb234bab655e1..75cfc0440b8837 100644
+index 5871bde8be4b2b..3ebefad8898bf2 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1329,7 +1353,7 @@ index ddb234bab655e1..75cfc0440b8837 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/aes"
-@@ -2072,6 +2074,10 @@ func cmdKtsIfcResponderAft(h func() fips140.Hash) command {
+@@ -2073,6 +2075,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
  func TestACVP(t *testing.T) {
  	testenv.SkipIfShortAndSlow(t)
  
@@ -1406,7 +1430,7 @@ index 08d60933ef38b8..8840db05bde791 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index dc586fb21787c9..7b7dc2f011bdf8 100644
+index 9274f89d3e2c15..605c37c15f1012 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1417,7 +1441,7 @@ index dc586fb21787c9..7b7dc2f011bdf8 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
-@@ -109,6 +110,9 @@ func consumeUint32(b []byte) ([]byte, uint32) {
+@@ -114,6 +115,9 @@ func (d *digest) Clone() (hash.Cloner, error) {
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New() hash.Hash {
@@ -1427,7 +1451,7 @@ index dc586fb21787c9..7b7dc2f011bdf8 100644
  	d := new(digest)
  	d.Reset()
  	return d
-@@ -198,6 +202,12 @@ func (d *digest) checkSum() [Size]byte {
+@@ -203,6 +207,12 @@ func (d *digest) checkSum() [Size]byte {
  
  // Sum returns the MD5 checksum of the data.
  func Sum(data []byte) [Size]byte {
@@ -1441,7 +1465,7 @@ index dc586fb21787c9..7b7dc2f011bdf8 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index c0bb15f05bac7c..1ef4f4e1471ada 100644
+index 403ff2881f4b68..5c689e332d847c 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
 @@ -6,12 +6,14 @@ package md5
@@ -1501,12 +1525,12 @@ index c0bb15f05bac7c..1ef4f4e1471ada 100644
 @@ -271,7 +287,7 @@ func TestMD5Hash(t *testing.T) {
  
  func TestExtraMethods(t *testing.T) {
- 	h := New()
+ 	h := maybeCloner(New())
 -	cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +	cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  }
  
- var bench = New()
+ func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
 index dff2e6cb355c5f..7d1348cadc3f61 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
@@ -2021,7 +2045,7 @@ index 2f54deae689725..bb2077a60b69a7 100644
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index d2ffaac0aeb674..23d8ad44d0bd9a 100644
+index 3acc5b11fb789e..36187a8d5bc4ac 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -2033,7 +2057,7 @@ index d2ffaac0aeb674..23d8ad44d0bd9a 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
-@@ -266,12 +266,12 @@ func (d *digest) constSum() [Size]byte {
+@@ -271,12 +271,12 @@ func (d *digest) constSum() [Size]byte {
  
  // Sum returns the SHA-1 checksum of the data.
  func Sum(data []byte) [Size]byte {
@@ -2050,17 +2074,16 @@ index d2ffaac0aeb674..23d8ad44d0bd9a 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index f9243dbf506bb5..ed56e748b1f851 100644
+index ef6e5ddcbb2d97..3ef46e3be515df 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
-@@ -8,13 +8,14 @@ package sha1
+@@ -8,12 +8,13 @@ package sha1
  
  import (
  	"bytes"
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
- 	"crypto/rand"
  	"encoding"
  	"fmt"
  	"hash"
@@ -2069,7 +2092,7 @@ index f9243dbf506bb5..ed56e748b1f851 100644
  	"testing"
  )
  
-@@ -107,6 +108,9 @@ func TestGoldenMarshal(t *testing.T) {
+@@ -112,6 +113,9 @@ func testGoldenMarshal(t *testing.T) {
  
  		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  		if err != nil {
@@ -2079,8 +2102,8 @@ index f9243dbf506bb5..ed56e748b1f851 100644
  			t.Errorf("could not marshal: %v", err)
  			continue
  		}
-@@ -214,6 +218,9 @@ func TestLargeHashes(t *testing.T) {
- 
+@@ -204,6 +208,9 @@ func testLargeHashes(t *testing.T) {
+ 	for i, test := range largeUnmarshalTests {
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
 +			if strings.Contains(err.Error(), "hash state is not marshallable") {
@@ -2089,15 +2112,15 @@ index f9243dbf506bb5..ed56e748b1f851 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -252,7 +259,7 @@ func TestSHA1Hash(t *testing.T) {
+@@ -244,7 +251,7 @@ func TestSHA1Hash(t *testing.T) {
  func TestExtraMethods(t *testing.T) {
- 	h := New()
+ 	h := maybeCloner(New())
  	cryptotest.NoExtraMethods(t, &h, "ConstantTimeSum",
 -		"MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +		"MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  }
  
- var bench = New()
+ func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/sha256/sha256.go b/src/crypto/sha256/sha256.go
 index 069938a22dbc5a..8d0e06b86f4359 100644
 --- a/src/crypto/sha256/sha256.go
@@ -2130,7 +2153,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 38a7f25afb3fd1..9bbe4a86e1341f 100644
+index 11b24db7d6b0a0..cacfad5c30e4c8 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -2189,15 +2212,15 @@ index 38a7f25afb3fd1..9bbe4a86e1341f 100644
 @@ -404,13 +420,13 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-224", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
- 			h := New224()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New224())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
  	t.Run("SHA-256", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
- 			h := New()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
@@ -2216,7 +2239,7 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 7e80f49dea4315..6b21e0a7c8e386 100644
+index 080bf694f03652..8962a54f1bcddd 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,12 +8,14 @@ package sha512
@@ -2276,29 +2299,29 @@ index 7e80f49dea4315..6b21e0a7c8e386 100644
 @@ -967,25 +983,25 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-384", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
- 			h := New384()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New384())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
  	t.Run("SHA-512/224", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
- 			h := New512_224()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New512_224())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
  	t.Run("SHA-512/256", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
- 			h := New512_256()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New512_256())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
  	t.Run("SHA-512", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
- 			h := New()
--			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
+ 			h := maybeCloner(New())
+-			cryptotest.NoExtraMethods(t, h, "MarshalBinary", "UnmarshalBinary", "AppendBinary")
 +			cryptotest.NoExtraMethods(t, &h, "MarshalBinary", "UnmarshalBinary", "AppendBinary", "WriteByte", "WriteString", "Clone")
  		})
  	})
@@ -2317,7 +2340,7 @@ index 2a96fa69036a07..f3c19c7faf1c21 100644
  	"crypto/internal/fips140/aes/gcm"
  	"crypto/rc4"
 diff --git a/src/crypto/tls/defaults_boring.go b/src/crypto/tls/defaults_boring.go
-index 96406acfca0f54..45da186a7123bd 100644
+index e88f05cc505cfb..2067bd9ebc3e50 100644
 --- a/src/crypto/tls/defaults_boring.go
 +++ b/src/crypto/tls/defaults_boring.go
 @@ -2,7 +2,7 @@
@@ -2330,7 +2353,7 @@ index 96406acfca0f54..45da186a7123bd 100644
  package tls
  
 diff --git a/src/crypto/tls/defaults_fips140.go b/src/crypto/tls/defaults_fips140.go
-index 472bb807f04dc5..28883a511d9091 100644
+index 00176795eba6b7..c6352af84f1f1d 100644
 --- a/src/crypto/tls/defaults_fips140.go
 +++ b/src/crypto/tls/defaults_fips140.go
 @@ -2,7 +2,7 @@
@@ -2343,7 +2366,7 @@ index 472bb807f04dc5..28883a511d9091 100644
  package tls
  
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index c22ad485ccdae5..7dfb00580890e5 100644
+index 46d3076864fc5a..b6fe54406f8e85 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -7,7 +7,7 @@ package tls
@@ -2382,7 +2405,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index bb5b7a042a7399..58e7320d3f166b 100644
+index 2d3a2ef25b8c8d..1d44bd2b1f1f03 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2398,7 +2421,7 @@ index bb5b7a042a7399..58e7320d3f166b 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -543,7 +543,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -548,7 +548,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2416,7 +2439,7 @@ index bb5b7a042a7399..58e7320d3f166b 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 444c6f311ce1e3..bf52c619b2a1fc 100644
+index bf3cab97b8a7c5..49cae0b257dd94 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -2431,7 +2454,7 @@ index 444c6f311ce1e3..bf52c619b2a1fc 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 5be74e2967ffd4..0522e20589c2ff 100644
+index 6848407e74b70c..b0cc9876c877bc 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2452,7 +2475,7 @@ index 5be74e2967ffd4..0522e20589c2ff 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index fbdf55d46186cc..c69edb4336d6cc 100644
+index 090ff67fb75a62..cbd563cd10f60e 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (
@@ -2718,7 +2741,7 @@ index 00000000000000..579aaedabb188a
 +	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
 +}
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 38d6d3f7be1673..b236ae44a34030 100644
+index 1426a276bf2de0..13a67c1b792806 100644
 --- a/src/crypto/tls/key_schedule.go
 +++ b/src/crypto/tls/key_schedule.go
 @@ -8,7 +8,7 @@ import (
@@ -2800,19 +2823,28 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 2e4b1fd1b370cc..adf9baf1a38705 100644
+index a676a8c831a84d..9fd56ccae8727e 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -541,7 +541,7 @@ var depsRules = `
+@@ -519,7 +519,7 @@ var depsRules = `
+ 	< crypto/internal/fips140/edwards25519
+ 	< crypto/internal/fips140/ed25519
+ 	< crypto/internal/fips140/rsa
+-	< FIPS < crypto/fips140;
++	< FIPS;
+ 
+ 	FIPS, hash < crypto/internal/fips140only;
+ 	crypto/internal/fips140/subtle,	hash < crypto;
+@@ -544,6 +544,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
--	FIPS, internal/godebug < crypto/fips140;
-+	FIPS, internal/godebug, crypto/internal/backend/fips140 < crypto/fips140;
- 
- 	crypto, hash !< FIPS;
++	FIPS, crypto/internal/backend/fips140 < crypto/fips140;
++
+ 	crypto !< FIPS;
  
-@@ -586,6 +586,7 @@ var depsRules = `
+ 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
+@@ -587,6 +589,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -2900,7 +2932,7 @@ index 514cbd098ae772..8ec689416dde1d 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 8c623871932f7d..2fa55073f5c19c 100644
+index 3bded3dea604fb..64fa1960ae9891 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
@@ -2911,7 +2943,7 @@ index 8c623871932f7d..2fa55073f5c19c 100644
  	"internal/poll"
  	"internal/testenv"
  	"io"
-@@ -689,6 +690,14 @@ func TestExtraFiles(t *testing.T) {
+@@ -692,6 +693,14 @@ func TestExtraFiles(t *testing.T) {
  		t.Skipf("skipping test on %q", runtime.GOOS)
  	}
  

From 6a5ca01cb1f3f194426e0065c24a850b31670468 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 19 Jun 2025 11:36:54 +0100
Subject: [PATCH 333/887] fixup Quim's patches

---
 .../0001-Vendor-external-dependencies.patch   | 48 +++++++++----------
 patches/0004-Use-crypto-backends.patch        | 24 ----------
 2 files changed, 24 insertions(+), 48 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 9e4f1ed5d40..4db187d33b1 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -245,7 +245,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index df479393c00d26..569714fc62d4e5 100644
+index 5624b81cc51bac..1d4b7f30894cbd 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,7 @@ go 1.25
@@ -253,11 +253,11 @@ index df479393c00d26..569714fc62d4e5 100644
  require (
  	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
- 	golang.org/x/arch v0.14.0
- 	golang.org/x/build v0.0.0-20250211223606-a5e3f75caa63
- 	golang.org/x/mod v0.24.1-0.20250508140430-9d3333156f46
+ 	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
+ 	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
+ 	golang.org/x/mod v0.25.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d95c0e3a862fb8..acd611a5b8cde7 100644
+index d5d1553e5b7829..06a00930d6a8b3 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,8 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
@@ -268,7 +268,7 @@ index d95c0e3a862fb8..acd611a5b8cde7 100644
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.14.0 h1:z9JUEZWr8x4rR0OU6c4/4t6E6jOZ8/QBS2bBYBm4tx4=
+ golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..0f1edc8966e6f2
@@ -1771,7 +1771,7 @@ index 00000000000000..23b60d189f102d
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 84f62bf19fb4ac..485d2569cdaacd 100644
+index 6e5783fdd4767a..9791fd2c5fbb46 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,14 @@ github.com/google/pprof/third_party/svgpan
@@ -1786,8 +1786,8 @@ index 84f62bf19fb4ac..485d2569cdaacd 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
- # golang.org/x/arch v0.14.0
- ## explicit; go 1.18
+ # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
+ ## explicit; go 1.23.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
@@ -1818,12 +1818,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 28e250668dd52c..e5aa4b223a54d4 100644
+index b81f19068aef23..58d7bd9cb7ae94 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.32.0 // indirect
- 	golang.org/x/text v0.24.0 // indirect
+ 	golang.org/x/sys v0.33.0 // indirect
+ 	golang.org/x/text v0.26.0 // indirect
  )
 +
 +require (
@@ -1832,7 +1832,7 @@ index 28e250668dd52c..e5aa4b223a54d4 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ca2e7027fad3bd..f623f220d18598 100644
+index 410eb8648a710a..8d8c0c8007d338 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1842,14 +1842,14 @@ index ca2e7027fad3bd..f623f220d18598 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc h1:JuI6hAMIiQhfuIv/wYVWSAlO4xZBfhBjUiov/1v//AQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
- golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
- golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+ golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
+ golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
+ golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b2668a3d7d4fbe..05675718966f54 100644
+index 6d92542e31b652..9b7613a62b5a31 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -521,6 +521,24 @@ var depsRules = `
+@@ -519,6 +519,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -1874,7 +1874,7 @@ index b2668a3d7d4fbe..05675718966f54 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -532,13 +550,12 @@ var depsRules = `
+@@ -530,13 +548,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -1892,7 +1892,7 @@ index b2668a3d7d4fbe..05675718966f54 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -559,6 +576,10 @@ var depsRules = `
+@@ -557,6 +574,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -1903,7 +1903,7 @@ index b2668a3d7d4fbe..05675718966f54 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -868,7 +889,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -866,7 +887,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -1912,7 +1912,7 @@ index b2668a3d7d4fbe..05675718966f54 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -878,7 +899,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -876,7 +897,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -21058,7 +21058,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 4c87639632f887..271c698c1d681b 100644
+index 8507f01b12f518..ecf9df95b6aa4b 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21079,6 +21079,6 @@ index 4c87639632f887..271c698c1d681b 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.37.0
+ # golang.org/x/crypto v0.39.0
  ## explicit; go 1.23.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index bc3591eb839..5b824ab02d2 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -113,30 +113,6 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  
  package main
  
-diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 23deece6fbf7ad..3da3678d5503cc 100644
---- a/src/cmd/dist/build.go
-+++ b/src/cmd/dist/build.go
-@@ -1538,6 +1538,19 @@ func cmdbootstrap() {
- 	xprintf("Building Go toolchain2 using go_bootstrap and Go toolchain1.\n")
- 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
- 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
-+	//
-+	// Build the Go toolchain with "GOEXPERIMENT=allowcryptofallback". This
-+	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
-+	// when GOFIPS=1 is set. For example, when running "GOFIPS=1 go test ./..."
-+	// or "GOFIPS=1 go run .".
-+	// Shadow goexperiment so that the global variable is not modified.
-+	goexperiment := goexperiment
-+	if !strings.Contains(goexperiment, "allowcryptofallback") {
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "allowcryptofallback"
-+	}
- 	os.Setenv("GOEXPERIMENT", goexperiment)
- 	// No need to enable PGO for toolchain2.
- 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index 82c6ee4631ee87..cdf02ca115ce3f 100644
 --- a/src/cmd/dist/test.go

From ee30932c91e6809f555b93b165ea6560b6f3a79a Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 19 Jun 2025 11:54:38 +0100
Subject: [PATCH 334/887] add:update patches

---
 .../0001-Vendor-external-dependencies.patch   | 2481 +++++++++--------
 1 file changed, 1345 insertions(+), 1136 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 4db187d33b1..0f5c14e47cd 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -51,9 +51,11 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
  .../golang-fips/openssl/v2/ed25519.go         |  229 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  590 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  465 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  455 ++++
+ .../golang-fips/openssl/v2/hashclone.go       |   14 +
+ .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  444 ++++
- .../github.com/golang-fips/openssl/v2/hmac.go |  244 ++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  283 +++
  .../github.com/golang-fips/openssl/v2/init.go |  157 ++
  .../golang-fips/openssl/v2/init_unix.go       |   31 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
@@ -76,15 +78,17 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
- .../internal/cryptokit/CryptoKit.o            |  Bin 0 -> 199312 bytes
+ .../internal/cryptokit/CryptoKit.o            |  Bin 0 -> 208856 bytes
  .../internal/cryptokit/cgo_go124.go           |   40 +
  .../internal/cryptokit/cryptokit.go           |   39 +
- .../internal/cryptokit/cryptokit.h            |   63 +
+ .../internal/cryptokit/cryptokit.h            |   67 +
  .../internal/cryptokit/ed25519.go             |   72 +
  .../internal/cryptokit/gcm.go                 |   36 +
- .../internal/cryptokit/hash.go                |  255 ++
+ .../internal/cryptokit/hash.go                |  245 ++
+ .../internal/cryptokit/hashclone.go           |   17 +
+ .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
- .../internal/cryptokit/hmac.go                |  144 ++
+ .../internal/cryptokit/hmac.go                |  159 ++
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
@@ -113,7 +117,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  315 +++
+ .../go-crypto-winnative/cng/hashclone.go      |   18 +
+ .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
@@ -129,7 +135,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 121 files changed, 19029 insertions(+), 7 deletions(-)
+ 127 files changed, 19140 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -167,6 +173,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/evp.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hash.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init.go
@@ -198,6 +206,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
@@ -229,6 +239,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
@@ -1818,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..58d7bd9cb7ae94 100644
+index b81f19068aef23..6055d417e2aeda 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1827,21 +1839,21 @@ index b81f19068aef23..58d7bd9cb7ae94 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..8d8c0c8007d338 100644
+index 410eb8648a710a..c6d033d4499dbe 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8 h1:+7pPRMRv1wcUtn81ocQbQ0mvxZWPsP2obrXfgEo8YVo=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e h1:4AiS64Ia2K2cT5VQdOTo41sgmrr3yuKpt+GAcvpWPvw=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc h1:JuI6hAMIiQhfuIv/wYVWSAlO4xZBfhBjUiov/1v//AQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a h1:Bf0rrNsFSEXprsNTKEC6M6sHK2irrczIXFH+Lxb8J9k=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f h1:s/pm8GJwZM8lvH9o9ou4/jGLPFfFZvTIpQJEZKZS+p4=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9 h1:aqmgFR6VKmhz88A5Wzm0jajHxKuM0lOsezmtzP3v6iY=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
@@ -4912,10 +4924,10 @@ index 00000000000000..a6ad55906ecd8a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..85ab3fac6526f8
+index 00000000000000..621822102024f8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,465 @@
+@@ -0,0 +1,455 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5141,18 +5153,8 @@ index 00000000000000..85ab3fac6526f8
 +	return newEvpHash(crypto.SHA3_512)
 +}
 +
-+// cloneHash is an interface that defines a Clone method.
-+//
-+// hahs.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
-+// but we need it now.
-+type cloneHash interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() hash.Hash
-+}
-+
 +var _ hash.Hash = (*evpHash)(nil)
-+var _ cloneHash = (*evpHash)(nil)
++var _ HashCloner = (*evpHash)(nil)
 +
 +// evpHash implements generic hash methods.
 +type evpHash struct {
@@ -5277,7 +5279,7 @@ index 00000000000000..85ab3fac6526f8
 +// Clone returns a new evpHash object that is a deep clone of itself.
 +// The duplicate object contains all state and data contained in the
 +// original object at the point of duplication.
-+func (h *evpHash) Clone() hash.Hash {
++func (h *evpHash) Clone() (HashCloner, error) {
 +	h2 := &evpHash{alg: h.alg}
 +	if h.ctx != nil {
 +		var err error
@@ -5297,7 +5299,7 @@ index 00000000000000..85ab3fac6526f8
 +		runtime.SetFinalizer(h2, (*evpHash).finalize)
 +	}
 +	runtime.KeepAlive(h)
-+	return h2
++	return h2, nil
 +}
 +
 +var errHashNotMarshallable = errors.New("openssl: hash state is not marshallable")
@@ -5381,6 +5383,41 @@ index 00000000000000..85ab3fac6526f8
 +	x := uint32(b[3]) | uint32(b[2])<<8 | uint32(b[1])<<16 | uint32(b[0])<<24
 +	return b[4:], x
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
+new file mode 100644
+index 00000000000000..c44be3d87b4300
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
+@@ -0,0 +1,14 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import (
++	"hash"
++)
++
++// HashCloner is an interface that defines a Clone method.
++type HashCloner interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() (HashCloner, error)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go b/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
+new file mode 100644
+index 00000000000000..f1f2364c7246d4
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
+@@ -0,0 +1,9 @@
++//go:build go1.25 && !cmd_go_bootstrap
++
++package openssl
++
++import (
++	"hash"
++)
++
++type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
 index 00000000000000..e95268a352ebb9
@@ -5833,10 +5870,10 @@ index 00000000000000..e95268a352ebb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..a6bb884d15d747
+index 00000000000000..f600f0f4e036e4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,244 @@
+@@ -0,0 +1,283 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5845,6 +5882,7 @@ index 00000000000000..a6bb884d15d747
 +import (
 +	"hash"
 +	"runtime"
++	"slices"
 +	"sync"
 +	"unsafe"
 +
@@ -6081,6 +6119,44 @@ index 00000000000000..a6bb884d15d747
 +	}
 +	return append(in, h.sum[:h.size]...)
 +}
++
++func (h *opensslHMAC) Clone() (HashCloner, error) {
++	switch vMajor {
++	case 1:
++		ctx2, err := ossl.HMAC_CTX_new()
++		if err != nil {
++			panic(err)
++		}
++		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
++			ossl.HMAC_CTX_free(ctx2)
++			panic(err)
++		}
++		cl := &opensslHMAC{
++			ctx1:      hmacCtx1{ctx: ctx2},
++			size:      h.size,
++			blockSize: h.blockSize,
++		}
++		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
++		return cl, nil
++
++	case 3:
++		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
++		if err != nil {
++			panic(err)
++		}
++
++		cl := &opensslHMAC{
++			ctx3:      hmacCtx3{ctx: ctx2, key: slices.Clone(h.ctx3.key)},
++			size:      h.size,
++			blockSize: h.blockSize,
++		}
++		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
++		return cl, nil
++
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init.go b/src/vendor/github.com/golang-fips/openssl/v2/init.go
 new file mode 100644
 index 00000000000000..3ea2a896a38c5a
@@ -12763,1026 +12839,1076 @@ index 00000000000000..73891afeab93d7
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
 new file mode 100644
-index 0000000000000000000000000000000000000000..ef63935aa987e96e905431ce24a24788d662b1d2
+index 0000000000000000000000000000000000000000..0f28482a272ec4195170331ca856d75840fb8859
 GIT binary patch
-literal 199312
-zcmeFa31C#!**-o&P!J?>#|0fNR!}1ocC2WIBrt&lB4Kl3CLx(XAS7cl5n{#0BAPK$
-z)2jWb-BQ0#rB-e1S8Zym20=vIYTT(>jY}1bTC|E(t@%ICIq%8bIWv=l#kSx7$JNO*
-z&wbB(*7v+;x#tc~eEGmbE|;rcipzBf@F15f&E-ldTZQjKaBm0@ydIzHn($3?-aBv|
-zsDT4DaG(Yb)WCrnI8XxzYT!T(9H@Z<HE^H?4%EPb8aPk`|7U98sn6d35)1znEc{(q
-z@4Jr2r}bd`apQyQIDD2;nB>}8uLZlQgUfJkCh&78Z{i9B!ogKx{ay39ISc1TdG|NJ
-z{>J$F<7?ZsF4s1u-``cQCHik5P*ENZRu@-fOi(uh0V_U<2fG>S+Fh#S6Y3gjz6b^a
-zB{kvd^2#OMJT|^GiEpdO2L@x~>lYVa&C2q!@c2NuE)=W|mf88+Ch=_)y>`UM`meuT
-zw}BNM>aV1#vL;%Ac6_%4w1&yY_sVp9c07g$0>Pz$vg+a$NSBu#U$eyLIzr3WBR)1m
-z!5uEw@0n5SiqBuRcdj=YsQFU;JyUM2#|{(Y^W5ih4U~IM2n4DYFDnU@uP9y;EUzr9
-z3It-~>yY@2?l#0{%I=KEd=CUli^Ii+vAnVIZI}2|BOq9Z<S&H$xua^`-&o!iq2iKo
-zptf>ld1YxJkeA&p#Fy>Wnspo|Sf|Syy5Hrh(zjx=OEL_f<_BD^7F100C$RgF%QXh~
-z-1wy6<8lqg=P>o1b>~VMchD#RZG8K0(Qkq2_>9Dd@ujQwU0GGV+?6$LRxqr-;XW^h
-zbK_%&t6H(Ryb?B%ES{?B;IyjRN>pZfRi(s}C_RKL3|3!OUJ|T9sO0fg*M-7WGt0XT
-zJ4w3P<u%K_)r-r+)sk?Ma4~r^>ALa7DrfF&Nt5w-;^lc&CB+rq+VIj~Ww^Y=6c*ta
-z-W?ylFj!JsT^_Dea<(JeE4_j?j4%9-57W{2m2b$R0foyKm&23QWmQ!ohU#Et2@C}n
-z!$;$h@YO+epY<IRkJTnd-yIt+ySN&bN+B*&4o5twW8|k~X)<|C-6qiQuG1v(&tAMN
-zSQ0M3ESM$fTjg6=06~Iy1J1gk+$w*dP&w{`>M9spP1J>}awPjR&lmZtZ_Rt|)R8%9
-zd5!bjzQ!DnFOofCSYBlAh_uwh`;XX8Ro|M;?nRqYPj>B1_(eMyMOo^}@C?-VF7VFx
-z&hySK^j-DdHc0X#f6R|O=8NRF`Xck%e38HBM!wAG(&<KW*83VWcl#naO~6daOk1jN
-zO~+2(sLj5}Z3DZyy1GNJ^?->&v#-&Y>5FVlpp(W>i6p_6XjH!LsMcocuW`xeM*f<Y
-z^7p*Rr@qLmDw*8K7GLDq{FE>9B3*frx8>gE+{lZ0k=m`k$fEYV$bCx@o6`C5LX{7#
-zn%6j<)#PhDTEV*2Tk|3-HsnRN=S6m@c=94a+**woZYxqTyptDsut0tLQUy?de33_d
-z&_z48K+zYuc^E?EWV|I&+%^d`f9+eTYafE^^fj(Vi!U1HYpfmVOVP39MwngPX@#^c
-zdUs21<ayjl^QC-lN{d#}P1g8hU8Ao-t;N@Pvu=f)=B|P?mKz0OuH7oH4~|q&+kh&7
-zpgu41fyvt{C1J5b>YL6G%yXcx@i1L0sKj+QtB4x!W6S47cKRZ(<wj88AG4&nkw51(
-zszMg(>R7Wm4aLoCe2{sn^`c&o<s8-zEG?(KJK}lB<)_I0hTO<DrO8UV`dat}eII6+
-z)6`Wk(6??1bE1Mgl!<Q-aC+y9Jf@S2Y)TzD;Es!2uGGUb(|nKRY=zL}Yvo^D9ZWKB
-z-HNRbyTP=^x&a-?neQRWan<_<ZSg&Pk|rvw3MSR(OkJ{`*EoQIed`|7_4@%VK&hmr
-zv6xyI$(odUc$V9TQB_^9Kja4fma|e-eeF6gjjLfaU!tUFIn?>;4Zg<vbT?34K;3+h
-z=8O9a0iyL_k-k;nxW%?aC^n>ty8+c(uSw)Jg?W*86#kCx7wN&|YTG2lHs8A7wu`-&
-zco%v7-oT<wxsgYGk*D(`UmzS@RJ(8E_VY4c_N_a5IFx-Q{lD!?Y41V>Z-u~<djGc0
-zBhh#8-JLyZdusg?OrT^NEH^LmZf@i$l}P95xsA2Ma?h+yORfI}0yspu=oPtVE`s1D
-zm9?Bnz6g9GEu`BLRBgTe)z?;D<ZoydmE(+;cRc@PS6Av_{^wh#JjMgZAcx-8OqI_E
-zC!xZB%j#6&5$t5wd(ha8&j}C>#;5G;)RV792>9ftSbx0cy^+4iN4`;?`PRZeKJ81*
-ze#&>%Ke`Yy^@f$K=E#>h8Er7@C#h}ByCMGtgipPiDSCfL$;14kj2;HxV!pI_F*!q!
-z2l-cp^QwSeW&0|W_xCD<GSj@syjHLJ=3Dzr>eau2gq}^8>wefayia!O{lUjm@6UMx
-zUuyq=Kdb+kdjFz7;me9AQ}54z8aJK+S@bOa%zF-ha-R2Xe0?Csnik*2chYh<zBw#+
-z;~VbWjU6K)%zr9(<Li@hH~!V*+xX_l+>P%*@b)m@#tsC0Yarz9P;9#{|Ao%<oQ!93
-zGG5N;LT#Xg>Tg?4#^X5|?`OQ6lL3djD+BzkjAt;UwdM`_Ja15E{-C#ggL6Q3`UY*w
-z8?-flP<!6sMJ>L;tK0Ghy_PrVvDEvY_HBH_;~VrDhTD-2(@!0Y!Be-GYA=kQg#~(?
-z^o{zQZIzn+nhacxAy4XW3dR|SM3arYioT<&&A0aDRTD5qNm%6sV*S@+nVdzVp%=p1
-zKSDkRUd#@Nu^*NcGkzC#JCio#AiO9y@+rn`<O*2|&yI0aYd#-(rPp`W=ditRtzOut
-zjBb20>Z~$5&(C<d^E?#AbOT>x6FtBKh>(}dcgiE3Cnb=xD7fHLAMr)tOvIH$J3yTM
-z`*I_@awG6udN7V~I1?Ajfn)W0jAzX-!}Yp88;AKC;VHE@@~u1U&)OGV<xAO0U$hPW
-zCk+PDhG8jp<Bnmuk(Y8ezU$77yqvqSb7XGhmE4W*d2%Cv$=&$=q})h*t_lq!*fGo(
-zdBL~w1Gf(&@y5TQQ_|hRtF<*O+S;)Cag5pc_C$6={vWa%=KV3d0VdxNd@{RX#ZwLQ
-z+8b)0&ThzgrXl~?%!b<MG8<Mu?^}1`NZ*=G7~(Ks>e&Rl(vDrIoV=1ZeH%Y_=Z$(Z
-z_4*^2{Z?J6UFV}#wE{+dRa~*5w$!VC0!7$Se&lcJUhb&Psr4`7UVh5k`H_F_Sc|W*
-z@idmC`5G^VO)&#@d|}jjcU*aq*L|Zlrq*A_BvPJ4bjaGJ6FSeb-Hufl_@>UY(C-*}
-zVCrCG4MgX7@-|;;-ZsqC^4IRlP0hv-U`^P%8&pjvUV_>CV!9u_ZCR5CKJ*2A&PD}&
-z3!l`JGvns7^kR9DKjgtF<VK!E=WoxAe3FYn%Q0<G^V5Wr+2Drg^plQU&t#KMKQa5|
-z$Q#w+Xe&B;luk5b4zBN3$f=jPGA0V~L31PT<fr@<W3-u~sUdhChVj+yxhY?ETT*20
-zLZ*wdLei38eyCdk6I1C`>sGg7B8#cUZYVWHC#S(?H8cIEnwc&dme*LDh8ZF!1r5GP
-zZChUC?o~(#!=aAQo-iX|j_#NCq#QHa7krJ9P4weNO#IL*^BOt9{u|<N$!lC)pBMQI
-z9cyb>AyWNY#;ylAisnWB(N#DJv#*gV<=Z$L!W5p9NdPB2u$@-lx^+s>cpuw?Muces
-zW)m_u%a3f#YYa9c@}|O=X=&=!6WQZ1(b6Sy7)i3Z<;;TaxuqUg)nDWk?gk}Vx1#l7
-zH<-lN%iOY61w-kW`&biI^X=%|QkUB~w?r-O;oNe)%m>jDOOc+QV#2@H!U}V?>d7S=
-znC-3epJ<whMr+^EjB3k|e9~QWDma%d8{a)IV;3CpE3DU&qrU4)d7|qLG$MQ|+~<d#
-zr}`or@!d@ibAt-=Vdqd^V`!M~%n&AfSL)_~-_6;8c{CJN%#s_-L0`bY3g0X@a++zt
-zm_eJqU;;)*gc6lVe?1~VKX>B?9w?YNa#HW#)mf0&SOaTcj-jGkkU#1JmK1ig_0mbH
-zgL5&6tMQ;afOpiZsrBt>>im*jC_+?|K2S7KKO>PfbfjjE=CD6s<j*>fjb_rW{Y-Rz
-zzdCs{dAsJ080c$!Ft(9ky=Gi?I95!}8`V+|jn3X;QeBAe#-DJ2jGg4u(b^N+V^KyF
-zq}e&EZAyn9o{UdEJ{RM2J3bxwJcN%6NtpSP4}B2}g>(Cbk2^P|HrqKUVWs}5+L_>-
-ziu0+@ZK<^8t7;mw$OPXMoj#N`6_{SIwk_Q6!cD$LwK^0>C;F<JT!`Hh%%2K<jfeQw
-zwyo-SF=jAWNN@3N{L=0F^i^NUZePl48P8-qE=mVo3<W*DsJWggNJ@Cnx&3P0I#er4
-z$_qm^qI*r}Q<X`7-K6F>x@->Lf{hV)URctWt_v`E*(QNadOrB&##y@?a|=G*$Q{FQ
-zTI&6eue%`a)2B~)+IJ8XwsI>dIv@2lt{moToVI&c=A3@DhhQWbxCoP<#`9(0r+c-*
-z_%A?(>81SI#}Rg&`rh^Q!V5R){UP5JZsYpa<&79teXQ@Q9b{Jz@};Z0O15$brUzFK
-z+SH^jwq5f5CAFUUT!uSrY{+N_pObL3i;jz}60$9E$hYC*RSUoeNqar5XKd$TLAsd+
-zTXOENd?_zx?CN^Q7kL713Et-;dY?z|-974&)cW-*)JIP5gJ(Q0)h?K==5K`$(#vv;
-zlO`R^hE#gkTT=Tp&tnn<=h;H%xn`4FP3RFrUIadGhlJ#s73Ilk(+;;CR4<|&BYT2w
-zSk^QhmQ{$)5`1d$G4|0@eXrsIAhNnXT9xaiDw`8kr7sd}hz5nXTeUm4adu{cy*X^P
-zCAbUyCf~Xm_-nnPp!eT=k+o_j6uDV>Du>6mrVO&rwB1ZWF#QM*H=7a;XVwZQ?%HuE
-zU3p{?<_f_kU3b35dF`0VZ18q1aOX$<8Z`yZ+SNdGbf-3k2Ve|&jht^SYQPerH9zuB
-zQp>nE-ZGkTD?hS1k42$zw81!ZBcl6aY%q3#wS=_#=ed!`FwbTo^p*v;baJtct87GN
-z|1)DFw7JGw7)H(pZ6h$3+7?}!M(!obri_|#>)kr6coTT;lU?bslgaqx<8v`Sz4gyY
-z+Fsha`{-k0E=gvje@)cdIV~85Tb(1b)y|x2#x(Nr$r`zHnkqJZ1@=EMrPW=EJE5|z
-zrgvjx#^SIM#K=li>T$IbvwrWX|19)H{(xr7jeLw%Xm`)pf>q{jU*n9-1YICE@^*r|
-zzDNfa`{B#6Y1|H*ZPpW-T9jg5Ywo(0ZZxG76c+U?q?j4ZTi;U^!sK^4`^lNnD(vds
-z5PobE#^0_T6?n|#du$WFcI_zQclMeHEol*^Rh%uM=fJn-w00G^v0aj@c7R~xZN4?D
-z+g;(~^VhzA<<S`QvCjCXnJp-TegV-SC!Ael8ll&BVyJq>zHT*2@`&jN?9e%mppLKF
-z=p_>aO<|BG?Olxju}%ME5q^x04~sz3?K%RpfX$0^`ZjjL=MPv<-%v7Sy)Ok*{ncB$
-zUWdWuqwitWj*X?AomfI(8Px&q9<@8Qei4F0oL925^B7=$V|c`{{4>LN;!>XtkqWFk
-zTJD-JGxH-~GSb>puYNhar2g}i)U`LFt|YqbQ5~uEhpXhbbrw1_S$(F8@O=Zjv95BK
-z*3>Er<Sg$OEbrYac5a?x)Y=AJm=6}sjxnWM-I++|oLrV8SC^w6kzf(7XX%)Jau%*l
-zuJIBS79rDAHe{1uW%dK($MQz~oh1%s#$`O3TSp<1O(gZYy%sjP7N4Ku!@W@F{H-_t
-zv{d&;EI+sQaTSmL=yYb7X*GH?wTZ5AJhx)^OuhR1s-{;opo5^B(vRi0<*o~lK>yS`
-z<7&yx{)r}-hrSbCeAq4yRUFelXP7A9qaK2JxXgMMHh`%B4DxTL+aiR{;A3s5o~|9o
-z)0!S@!`H4IL-Ad0Z?+;-bWw~ku#L-sNob%JE-@mXk-8l{nLUZy$cvh=h+iK*31-&d
-zTZ^8*s2zP<o;IOmtymRx_UCQ*_DnO9L$H<px4Y<#i{RmZ%mE$Uzg~M0m1~`K^MDAp
-zy6!$b>_3qkY0Kr(dxh@KUOII;AFUDn+U?S1inJbCZIWn}JJ4R;n|lA|H61C|z!$Y9
-zGe6qX`F2m^0qk!c3X4ag|8!avpNOtirA#=JH5Q1<Ymo7@DarI}LtaX!!xXTynj3je
-zwgP<eEK-}A)Y=x<88_wNH!zP;H!&O4&Iq3Huxse=OVolFZ4W;kY{6;(i;O+l3f-Bj
-zLVu{YLO;@rA2)VHN9r9>PiE@<U3<0{+K_{-&{}MTjvMV;vjvY4vH$tL>VDW+DtQwl
-zhS~<5jBQXJ?1`=gxg&fEN-euicp53&B6)iCf_|pl<40I#x8+4X#30$F#v)x|cmT=z
-z#hB7r5{=Xs`OtUDMt1i+wKbYGOdC2LWy*>oVLDjIbL32zin47zXmpOUH%nPu?2y76
-zt6i>q-EhdN9+I~y0e!1!QSP;4qlPxdIiX%Xia}t+_N~j=nt_d6nQmf9p*pZ?W?DfL
-zYF4bkv_1#I-JK`Ed^iebkJ=f!Ft22H=b`zHR}RZR^UAbP9(+kXlI2!K_cnzZw_wET
-z;j3f1g|O_VGEgU&iw<sT#NhpPIJEEK^94S2D9SbX{1-ky!^iYjeIB6@&zU{2R!pZK
-z^_i_LK0(#X)d(N{V0RNXpSO-K59Yr`d<2|eXrOct?h!$#SZ-tyhQM0bOOR`9Pl5*!
-zeHecZ^#23>AHB&%KXah}n>ovV?EeSG-?&GS2gYBXI*K3X5A?qS{qMm1H@;tRd*HzQ
-z7c)dIbN;W*e-Dg*2gbhx>(77R`m?A0w=iNJUt)iNdpOwmQF}TGwiKNQdp1Z=Y!}2o
-z>cmsC=s9<sNNfz@soS(fF`DNxNOWsnV-bR7k4O}*J-RuS*SHkHauS4kW6h?nHJ|rS
-zz4l`6udExuLmaYa-t{^**K!Kh`BJca&e*kPcUo%Jhq;Zbeb}mzqXUsm7<gro%}qSD
-z<2cW~;|ng0u(gN?rZIx3_LZ^P*f7A8)MyOY-k8_q?V9i2!DFd?P{+25rQS;Q&ec3$
-z(Fc8O8d&;xa0vY=(9IqZoA)b5SedVFk1akjzg6wH#_xTjYCEvKk!wx{)#nbv(>ir9
-zLAI=XzdepCN|&qsA-+oW0N)B)=2}*?tlzR@bp_!;AvVuXc9mn_B#6j%08az*oJDlU
-zQ=cDBY`=wT9_w1uh1NbF&5T_w<Z6v-@Nuoalr3Fv`%>_H?L}YYN!cpF)5;gRA9&#)
-zg*?uY^Atxjw>zH4pS{uh@!simF5Qd7I>+vXlBxr28^Nx9k(Y2rN!{q)FWTD{U3wJ?
-zZZ&FI(=}*Ao>SWeJQK(>GtToIiQ7}Zud|yqiMMp{fYRZa*6u_U$veJ!AEUc%&2dJ0
-zvev}zNu5WFD)2y$_GfE(jy;LaLWGLyuz;eYPU$6dgSYV<T2v=3sxwf3P2k0D<CbW*
-zjyXZ84;&;+#Bsu5tvi~+u%szC{W$$MD=O*seRodQj*Q0516PS_soU}6q=Y_gF+D*U
-zyFGPzf90v~A?T-@U9aQeCpxa$^Zy73AJVY#i*3<uJgKRDN6cPv_eQaKcFfahc#(-G
-z)YSVKoGss~;+I2m`Zk_C?%c74&k`Dc>|=5GxCSp<+?=V(#wW*V@}>`-J>Ws3*^9Qf
-zs&N{STh%z8VRE3}Az6eh@cHO&nXtdcL#O(&MOTNut)ATOxDHMWxy7jsyoG@bU^})^
-zwKg(<ywMs^`UEA%IlQ>SqpqxUuT7TjQ!3rNX`v?Ro3&A|r9tb|Y4iJ%`ahx%Yhp`%
-zuP*fllk_|oBDdh#+Uxfv#XFLvcneZQ#C$d|YFldk%gg{Cj}KL6BhReClkq1Q0w*!F
-zlQfT$am;WMYoYNzIw5mJQJGBRea2XJRK>=AmBhZn`4GL5VUT2+^D(xXtEfb~AAchc
-zEl5uHH}%G$oSH$#&>`gM`i=oig9kfR=8tCNi88MYsPR7Sd)5wAO*;@F@yr8{Ikl<n
-zXi;vryK?w8lT|sK!z7GfnMmV(E>%a$f2!P?*SH)e)tTR2|Dh^If2hfRXmO&b)k#se
-zj(1phzA^LULn{5U96PN%;7|03Mj!VyfA@Nn`z6Y5jdB;`Ws__?|CxmY4O{Se0{jf%
-zt+;nTKAZ7L!{?W<8J<~r8lP`N-hq3C_+E_9VtoGy*bikJg3l7f@f_~$z~>+MnCC~y
-z$ICVEEyM$(cE?EB{X7;;n{Z;@)a}r7P>ag<<2hHtpwX8F)Hupv0(O}&sF}wrub+Gx
-zzf}^)Be3LyLx-8h|B5EJ?&yCIN`~BmX;0Vdcz&#1A)KpvD*7&Z#K_KX!fiBlyA3Ua
-zD}{~c)OQt(?7SHAws<+F2Rz$2vhy2|Z-|%E&el_Y0_1qUDQ?)Ljp1qTh>_Ow`n|TY
-z$K$Q6tcl&W0U!FCrTC1*r?>gBo*1t@8#$@fb%z=8#;(`39VPp_*ZF=qQNC|NKJUV(
-z8K2wnxdoqO_WUo-FCWTVy}7JuPx2dmzg+sC*Kw5YE9!vkc<g{lCbU7*0TBcffMhG=
-zH@o}a=H!d=H@s*NuUc9i$3bP?fB;}d$q;Qtd<z2q<0vA|Tw#5g*4xSyhl<og_cuCg
-z<YcQ-#t4KZHkP*aooDm3kAD1!Bf5O}&HJsL$KXC@2<qG;?l<fE>-(H2PL1Hy(0n&K
-zuGL9%c{=?yoe#c0j-EV^1yNfB(G`B|{(vb61G_u#-0Kc=EUMEoz@|Gf4pgC!d<i@T
-z_%<+6e^Gs9K+Q3DS-|($76k0_J@yEp`%Qzr&eqxS+0yH8JgUM}SiNPC7wJF3eATB@
-zv^T~f6rS1F?-T54_~`ivcU~kP6MekH9tpx-=i^Kq)&l&!2AvFEf(YT5rXo0_f`j^@
-zWw|L&;WS^UNQW@5;(eaKwhOP~y_SJx<BE1~7f!t5kn3th{sG2?G>HLo+gBl{0hl#0
-zO%Z1)+}&$q97aL>mp1FOemqaHr{()9!*{Pn^mc|mP^D}^-ghvIrGJy$J0GXj)GH~q
-zCtw2x@1#831^?THGc0&VQVzI84pMK3c>Vf)64f{~r)>Ru9{+A`&%b)(&hcR>EV==|
-zKB8XMd=}eO-pCix85q4ey*lQ!Nq$NsSfB9lbr36JIiDYM=(GE<9cEa%LzrWZ_Hj<w
-z{B{*0KLtmzoNqp(nY?Q@V+8o(pp|)8_`;!_fkhPtfM%XPj;v_n`DmQIYvyze>rKo+
-zqeW^<ytDQ*G`c>f#yOXI4Ip|x(wqgo2Og-eF?P=Bb4Z-&>sv0R#x^DFR7!|b+JcXu
-zR}aiHr$RA?;1npTl;^hKUpRc_;~-jNew%j=cD8iPa4VQcqD8T4`9MF=<PL3GcX~&o
-zmR!!$Z)QsYvA5<omJQUZ-md46z*fYCIk0&m$fLg98w~n({E0Y!?1{JwxDJdv5r=Yo
-zfFvM8OUpORglpHUQaH}Y#l420ePk!rE>kdmEy3rz_|#x{s>kQM`1}wbd;S{r|DJ!#
-z`M79*z3M%_HI)}x$3?B`wSUCh3#!*TelZAjVR~(%#ZZUtgz9AVtGeOU$!okpVs}DX
-zj0%yTf)nrfU&c8el6}#OM-$#PUmlctZG=s`ZopC4%0Vy08_?*5cXMHlU$Wt%0OyuN
-z0M#84CEphw4i)qz{nipZ4BleWJKgd_Lb$a)PakAPgQ`4WV2w@>O;*kDp)7MpE;^|0
-z#i)a5FP2=(iSC8mfzdByd}SGFQ>9ZceSB4EbOyfSLWpVT^(@Yjo0FjH@V0nlx7rwc
-z!~9r~Pu-ML^gJGFnoiD|WA%#(@_I+#g!$z+PET~Ob}iSE8M}BkS5CoVpOg2n+sK_i
-zV-Hc+!r!hD*OI4SL61Fii&xszn<scxBve5UGbF$93chf1#fY@fB5a_sJLxrmNfPIU
-z_0d{pS#Rj*cf-^xbJ+c&U8@@6{9lYViN84%{^mw}KE-Dt{0*NcRpYY;pBwOT`Ww>?
-zVtS%uzO<+F6%(KSsT>`V<Av0?_i^!h=4W^x_a*ED;uQro7vitFw23j`t=wpC&3sy)
-z_iy~xFkj<z^%87&unDf-t+L;*MH%#@Su&>s>vwY1-sU4+7r4>77xQ;loXN?2t1tR#
-zN%VWGkA0QP`^{nVezSB5c`Z6Rp+r3<oj=<1H{1W?1qHZ#ygjX*pVYPfbqDSF+Y@ht
-zsb9;mw3L6=T3o{?co=dUeYd5xinn?kWiT;}$zD!F@)dp1cz-DhT)%n|HqoP*U~_aX
-zhXG3sbZyC}r`QxrG!M;Bc@GYZ+kEmPb-svxEEl<1dm86*#JBFjOqAD*g=YJ22gi|h
-z1I|_tF!Y;mk-O=j)WiJg1?xg78ISWx{!~24|5o&IHs7tpyFr{{Vb+9S$-q3R4L`aO
-zEf<<kryn!AN##6(sZ}#yBH;T)=7mc&IP;}KY(6Y-?-<Rj;oaQS`=>gy;cL7+CL3_c
-z$Oa0QG$$~L9&=)T??X*1<z)numz(KTF$}lk9Y^&FA#${#*Bo)T1GD|4IqI!$_yz?A
-zCpztRRbzVIf(K{XW;rWxtGBw4ot9p+(_01gmL2s2aA+-EL5>`uv2NCVk2}2X&Tr{$
-zDyPjj&Ts6y&2X-~JKkn^2&6&nK{d*6DSpsZIFRFI?DGm3dIy?w&(BnhvUZYirs54e
-zXW$;vZj6W5VmvGZCVT$=)$J!O%Z$sJj4z4(FW-+z6Tds|aBMLu>oU&Ze=r5nFX*DC
-z-c<7u<r4TJEFZJhVuw#na66~kH!|!SZu>^6bwfOXdD5WfzL>CJvGr>AHc|BTVC-F_
-zb?+AKbvydwYRmO?wBa)LaeOYsXCgj5zt3~kd&ATcdLFh1YTLb$f5wgxYq!H1v`=5l
-zA2UfZ9`QM+rP$uBm~037HhN}DYanl_A!Myfe@!&}rNt|5>rT#$x``CI0<uyZ8BNih
-zJVj5uqMZA{X3SdcHTpDCE4RTRa_yw#sb$8eHcW@6qV}4JQi~no)&Au|c$loXs=)7P
-z#a07;2rGn;iB8<T<6ZM8R+az6xv4+(SL5pu*x1FYa)WwAgx5fQkq2pTbf|b2jcy+E
-zA#7HtpRL*s&)@wHwdw-On+2OC1M-uRsso|Ba%&4e8P$Nffb^-yuz=9f<A5EWc)y7O
-zj7KfF1~8$xa*i39am=AjEm-p5V!PKYcu<dn9_W`1DsG(sAD!dm2_7IsURQTGRH56d
-zRN!|}uD5qQj44H4<K5~|k$QC!qs)(0--x_~{IP3rTLwSsN~5M<@BX1EzS9gDc7E<-
-zpMc{@RCJUZ&H~$d>lQT_-R`FcjuIPL@)F}WJ>cCwl)^1SkufVtRAe0Ma-3Mu`NkNS
-z)4F3TCMzf{jUF}321RLAM^U9^KatXgdMGVB$ljG!btq}#udKj2>nN~FZO3!msA#-9
-zEvC!^!B|cDu!5ACP9#|i(+%xqnHM73ue!`S>nt-<+tGnh5oM;kk#<H8LsL&;RtjOw
-zGIi50{v!yw0()=ceZ!Q>-dM7{zpJ|MSJk%6HVe6m<=~HDzSg}@wx8xuSH_RMpMKWW
-z^&2$*Q<zKfM><}|*$lHD$ND&*KZ+vr13bNm6b{Ufe4J=Ky}$PpjAKl;-|$t-_jLV@
-zeyA?^Aa!M#e~6&4x@2^5u;y&_llvkBWCu$a0{`fNyR5jpB3SBPSsq^M4pvuJRiER=
-z=6Ge#@|gIS7S}A51g7C%rKr%+L=(fed6hM_p-@$I7%4HhyR5bnKc27t%>@RGjc-M9
-ziNx0rgQu&mE;QYxz6C;p-i)!{u>M}SBo^yb$m#gSGwK?R*t`EihA|M=QR*-LorBBg
-zxKdW7rKAlxWMC5-Z3ON!o4eWRaHUH)mv?B|HT|*<!#^9NuDuP%Uj|o~72jF7=}h-h
-z_1GCVO}K(Jhg^T~x&hzme}gK39sUkua3*|yY<N4r-_*H?#y@S%fOY-9bC4bHqjtFI
-zYaF?7x$N+KVy3Pn`LM&U?4_J`zUP|!1f@Nuu2J=IBJMlu?@SX8`QTSu&U~l~a-N2@
-z(>dQESM4t8*x{V<^b~HS9iMPJzEhKgv-5wv2`6aF&#>fuwfDZ-=ZrnHx4y=ESTFWt
-z*H>TT{nXS)61&{nco%DT675I5^t-<1cg!BvLoz$u-|arLm-5>E`!c)UXU6)Ey{-4&
-z@^K(uJx=UxJ*?Y9`|GP+-)j2}YdqQ8{HlLbj<#m{w>4hwZM+}Y`Q6L@ZKr>Y-7kdO
-z;gZ#>9d2Lav-|CW{nY+;KFz-m<qGsXpNjKmN$MwAIJ-Re*!A6uA4(RlU7mdnXOG*x
-zjqCqvxn17TrXHsbP4f;N<{j!@bI^BSD|R@({-`d~AB7$Ww{P{buj9F0|9$l@$->$F
-ztlxf~AK39fV#ja!`QG}IUH)YDY{zq?G@Aii&VNTyT}jpxaegAndLqLSk6KS;t--1+
-zzJDbPXXmT8eDACL3`c$wt)r6pfqk`O+b*8&FBviZ#<B~$-ILj~9d5ZPUoYcTviR(L
-z^34KunSAy#4)rzOdHmPXc$s*6DgP-tbToVtJKJCVV_)rTU-fM}HO1c-%sk`}vwNYU
-z`4sy_{PGXMPb_Zk?`fJJOFTx;#ADy@D>vbKLz7-#(4zwx>yA_DO|CX+^glZqr^_2n
-zsOhH{^3~78R|_OP$?KtZT*^U7_1h^Q+&`&26LXxN;&1LHe?^Et#g&pYeqBHP%&Z%s
-zV=pD|pIn}a;JwA)n_NW^n`}4J`9l&(F1NmKyl`A7>3>P(X<8#`{6&!TRR6u{yL)NB
-z-t<}WeM!F_WB9)4_hx@=pPt&cxAKL0$zMI<@2P+6YyAIz*KgTJ`)h;!?MwZ;F+bQB
-z`%Bx${5QjXa3$^Ey|sU{Qr~<1&_3or)JyuFeU!IAzo+)y*Z6zWckBEo_0RuqIrHCd
-zV1Kk?;ww$x-fR0hpsy-$uj|jVkK@PAUi96%eUsW}Z}!ofekSAZVSdH<dm3M<e~PPL
-z()#O7?uI_Dq~&uf@!rds|DMXXulBzaIp3G@C8W!jwElX_p9h*f`On_;L%ocT9^|j5
-z_NBZh|K!%?`^wsPU*l)~6WPbtc-!SlFBB|exPx5jFJry)OW?!6Z@65;e*qkba9jrw
-zZxpN-Tp@TAa3b{nfk=rr0U7?=z&pS%2mS(BE%$?ha|F*990a@t;ogAX!2Z~j7lAi|
-zKMMRW@P~lk2mS_#rcM79@EPRue}L-{?rI>;O%GoU{2ur`AO@GC`CRdK@X0{xjRQW7
-zaK``_;Qm3ta}e(<2<!*H6G;A3Ac~gGf2D&s8HoSWM+goTd>3|lA@u$P#95N`tw4t7
-z`Hc&3|0W>Pp0W<ec&`yTe~N<f%@iCB90Gn6a1QjoM6-~;CHOe-BHV8g{zG5@{C|-s
-z>L7hEDxKy02MReJ_%3iX@D(8M{|Pu2_zc1!iS%Cqai!k~WVp4We;JVBihxi_zZm!|
-z>T57I{_ubL7udjJzB_;!2=@q(<^2wD4EU8mj2-E9a(}AaKU?mPlKY<w(t76raVz~a
-zAnWOPAnWPgG;NRTfwaduAhMFaOmLpy48ijRKTg$l_!N-g?-#sT@Cv~K;3DL6rtnEX
-zm_qvLa{pA|M98-eb-6A9ZUQ1}=|2b3u73ukUH<^cbb`QJz|RBHe#Zi7zo!6czsCb<
-zzefUDuS0>fUl)+}+kt;Q<2>*`18Kka0#VOL-vMO%-3+8&6Oi^B0Wv=|z=e<(16gk!
-zFdDYcGeFwkqd?Z{LqN)Z17v$$3#8qK<bD~D_In|a`sWLd5<Cou|I>HF2rh!&8$j~M
-zfV9_pgx?6HU9J`$0y5vrfzKh|qYrnv?t=UzL6=|<*bccLcqil+0-4`Az)8Stk>3d1
-z0Qqx3*8gt>KLj$J_kc{te}tA_1w_>huLb@P@oWM1hu%Thux7jM#zrLZFF>~U{{p81
-ze*ydkuvzYB0nY{h2Jn2~X+V}g4VVf3IpQUM2bc{$0r4LU9CwV4f0W>ff+;|z_bgt@
-zV0wQ5GQ9_Zygv)b^iBmbf5!r8cZUL}0CyvPw(EyL*3-K{w(B2&Y`+#D^K*;fH9+Pw
-zB>Z9^^I3*`3;@o-zaGnUrU{-6WIm1rGJl82{Vx!n`S=?!3)lf<KK=}3KAr(GAHM}M
-zA3p^$AB{k!cNyaOvLE~g9(*#r-w56)c(q^^km>t`pDUOl_Xi38Cw`!n@w_ScqTr8#
-z%*Q#xj}sgMWd3&z(|VnPF9XlR{XYU(jz@v)4{boka|e*+nE_;a=K~qf7$Do@Ye3e+
-zi9qTf4W!-|C@=LM2eKaiSFjn#_Bi+i_#NO#yy(t&PY_HI+=T}~yuTgjMYulz8UJP=
-z^Y<{2>D&xtI#&n|0>ZVVrvRz{8q#5Yp8>MnHUXL6-vb%neL%+ZBOv2h3S@p40@-d^
-z!Y2UP&oY3|qhA#xpX8SS$*&<t_($A2-TMT82xNOs1vUaRfK2xcAYAS6BZ1R#|Fe@_
-zu4%w$fXw$MAi7lgL%{ljT={nZUqJX~;J2ZFGm!aS1Z22{K!!UX$Z(T@43`dMIPXb#
-zSp@N)1w;|jPX|)&210MjaX{(~0kR(chVrl;UIJbZy+?)L1B71sg{SCoaVC)A&j)fm
-z8v(q5@d3XJyaqTB;U5_x^&<E~psE+(HzCges(JyU>4qN(RQ2*TsTZKC7oe&a;I*t5
-z;ESvmU<B#i3{>?3RP_R6xbuMwHwnma=|EL4r%Js5RlNWycLSj}<v1Yqh5-AqUQixY
-zFTg8UFT(EuLNEQ`(=a{(r;gP59WQtSkmY^kbi4-#ycfvw-U&pN4!;q|@?H+49n1l;
-zyjeh&<2+zF%5gey8^XJR%b|ZXkmdNx*LApUK!$r5$Z)MdhPxZca2t_7+QD5wmiG=I
-z<;_6oP5A+kde;M4-YOu=dl7I3^m2rs4TN6$H7M7iz(>xM_7(ggP_-{`Cgd4F)xJQO
-z*zhBPEbnJ$Nc#d=-c3N&zCi5d=HCJQGr~6mtC7E(fdde35m2=+km1e;GTbB}!=(cm
-z&O1ul7pU47NVyvby(z~5sW$|u+85<f?F-C9{vH*64-k6k2cHGI2TmO=?JIZ!P_^&b
-z_*X3<zZa<57l<x6{6?T^U!ZDV;6UUr3#i%`xRUJ)d<o&*z&hmbXduh+mvm`gAj3Tj
-zWVlu!!`%&JxQ)o4YG0sgUm)epK<G{R0g!sv16BJ1hd}Ql;4I`jNBG%5=%rtSat#3<
-zImYF>3HVV4<^j;}1ZDzX1bTtL1U5k447?k7DezL@V&NIUW#Fd@|H$KVtpa}&$nY(|
-ztAMu&zZl4T%>>flj2HejU<CXy;a?zsw8OWVPlSIO$aeaj@Y{hb$28<0zrT{ceXK6W
-zW+2P)AduzwIgsV}0g&y}0A&5G0n!g#0i++O1tR?^%QdF^flUZM3rKsK4x~M00%>Ox
-zG^URNGTd=M_Ol~^>}P|4$p4fSjp-jFpA7dpknQynknQy>knQ-m#`NC<8Sdvm`tMtT
-z^xr=O(yxD4WBS!VhC5~)=7Yc|&(Y<-6Ug%aH<0DO0m$+PfwapBz=;U|@??$Q6!Zu_
-zG)dpT7)bv;9Y}l61i}>#pA1}!`#UD;{{K9X@+X0Cy~7^^RzkiUm<wDW@&e$gkmmxI
-z;Qr1Dx<9=Fr2g|j3=PAd1lB@c32X!|68U@}hScG+fmh=G03hw+lkwV)UIUVE269}x
-zNB9qbw5v73mjdbE=LkOsNIN@4_`yK>!}n3IjPDsB?e4e2e*&ccSSx%5kajp%cqWkj
-zZQ3_nt|Nitrs#G_1F~HP0og8}oU7ZV9mxLG0%X5x0<u4afb2(ef$Tr00-2v9fb2J4
-zAb#>rAj|i>@HQaJbEoi|fz1E6gf9a!zh%hB;lTGKe_JJg8zp~t18Fz61Fu22W?&WY
-z7T{9gO~A{5-vNFLc+7e5JHQ_S=}%SxS>8*5Ebk&9<C_n>8u9|*3g8T28890d2A&7R
-zo=5r?U@CAplo;PX5DDY^2*~(e#UIA^C{Xz&!7mVq{8k|A=X*fb*J|MvK-SlM;a(u?
-z>rCOt09jv5Ow}*)q5KRIOT+zNOMaSw2r@hZWPWOa_<#5^{J96=-T)qf^#1~U0ry`3
-zvj6@8$bNmqR4qRY_#)&71Cg&OpF>W+bT>Ht)q3Cwh-W!41AIPk3@{hy0e%EzI`0Fw
-zA)dE^D9@Caf#twcv$T9TkpAl!Aj&soFfat1Bl3LUOOQ_k(jR>TNI!KMkm+9vWWJXH
-zS&kAQ%k_Pce;3GnUk7A4)&N<q`$c{)komb2$o%~`kokQ<<WB>cpC^FK-zFgQyG!IB
-z0-2w8fz02VK<3w-t=HG%fvL!6j^I4OpkS@wTEUwIZxg&va0?Jqs`M8G-v)k;_1&MR
-zYybJA;N3v_(JWvAa5Rv9Y$WhB<ZB?X2=`x~rtd!sJQ(r*0f;F_`WE19gnt+~2iOXH
-z8G84K{O3TH_f{aw`9mPf-J~)7TR_&=Dj@6WQXuQCOk?^yAnSV;ko7zr$a+6lWBMsT
-zjt2(;*=}Ft==S;q$o6|zWBOgdehBvy-~}kp_kfcjZv?WuSBQKOko{$v;Ap{Pfhb>k
-zolmbTmIE1I0C*@c8+ZfanGF0cFgH)<>pa2Xz`+Q26p;1(o0*#b3^)$_Iw14028bbX
-zcrB3eE(T)ils+4H7BCA~jPPdz8GZ!tVB9|uI1+d)koBDgWPJ|;vc9`!C`|tZcqYQV
-z0mM`%{UzXE5bi19A>fYzUje@#$aeW9knOSo$aeXO#`K$jjOQvK<EaC7AY3Jo@st5y
-z1D^wA`^^Nh{jz~<zjHLEdw`5*IFRui4SWOP4h1rve!$nk-^tbW`8bg6{0NZ!@^?VC
-z^Sv6=?*KBsn}Ce(df;0KcNLKF)dAlG&j7Ohz6PW{91Em9qybs4DI$LZ?KuSD{sd(E
-z-;VZUJ^u_yyT1j9`%`WN((c=VcOu;1fK2~gAnWr@AnSQlzRUG<$QJ@{1Fi)!U-iIO
-zA%9eOoA53m<M|B8`usbP^?dRyegAkM>*q)y>+O8Ge-4o491CRmF9kAR<v{GgPgx8+
-z1M#i}o(B9r@CeA46zXwm8gMG(19DtA69|_+{L?uu*J6b00Ah-e{xXp5@f?ut@h2eL
-z;}MPN{|)3g76MXl0g!rgfV8ifK-yO}koGlMWBRc`>b-h_*4qlC-X<XJ>Gwd|(|thN
-z)14aA8-UcC4P<%~fYi$XvR|A5WWV?tko{tq#`IkUT5l7OdUpY-cL$K;MKh4&#1DYq
-z2LF!6^eQ0J8x5o#xq-B!<AAiI{y^H<UuSDOdQ$LyAnmDH_zghX!F9kLNGB}!OXR*E
-zxE=R>a^EBO&jh}M`$x$A&(MyH=M&)Dxc>@p2>52X|1j{cxc_~$=TM}dGFP{EhqU*f
-zrM(}O_I?1!dB8CU_XWm}(erfpp+MTlAwb&4-yx@cyapVI^qvEjK<`l?>)|0F{nY(H
-z=I>r0%hL>GK5qcB99IIFzZF2%!?{4#-+ZLgh4g=MiBA7IAk$w1WcpP=rhg%j=}!UD
-z&z=e7yzlG4!MJ}kkp9*MoPd1&<6=Blf!^PMheF;Cr2qIm@EqW8fb2&tzz={o152Sl
-z56JklfK|ZrfQ&yK$oPi=8UNux#(xNq@o&FK$NwCV@jnG*zupRb4|o@l@fQOb|7_q=
-z;0z$+pA2ODBY=#5IFRul31s{qU#R2n0G<Q>GLZh^IpF)iRv_aK0U5s^$ocPuK*sL_
-zGXAkZ#(x%&@t+E0{09SBKOZgB@xKpz1@gCnoxmr6jDIzd@h=B*UR?%c{PTc}-wR~?
-z=KvYM2gvvj1v36m7wGsu0=^4*C-85;7lDlbTR_@%6_EC{49IZv<bICa&jiwr&XD`5
-za{o{u+x5fwI-Zw+jOTeE?eh0>|7UXlM?lu&8o9qz?w0^*w=?AaXt{p|knMW7+}{QJ
-zW&9rkY46*B%zvBQ{~eI^c&psMR_=cr$o}vu?3Mk%y-54<^MP#NbAZ$v3uOHV<o-oK
-zre6r8U42XLUk+qBYJjwdpUVAPfUJ)jfwc37<^BUe*6aTQS^pmbIgacA&PDsZ0Xzfw
-zNO8GbH)G!iZR}bPJQDZ=;K{&?fu{p=fa8Ie14jc3fm49<fir<Mz#O>`Gjmmd7Ybhj
-zybiorcrB3eQ~`s)H9+dG7XDoz^&5r%6iEFa2)`S+2K)};zY~5Rkoh_h2-kB75lt|}
-zt<g_B;UL#gOsAEc$R_q_^b=DcuMjzrrWexaCms*^O(G}4<cF-+=qI`$-wa^-MAXHQ
-zts4DATth#`AIgd7`a^bW^b^q*Lr=sX%8772L);quMA*^LJdqP&T0;sn`iTcYeuc=1
-zXyPID8vVrnkl!V8q91ae3kUj%10d%Q<S>0=0P<}b{X~odLq8Tdu?X_r8vR7{lc7f;
-zlhh{`Lq1HSpEwZmb45;E40)zTKXDM`r9kQvOCVpW(N8=S^6N!TEQP#Dqn`*H9{OvM
-z6N8YqYV;G)Z-+i7a$*^7ZPVx{9tQakR3dEl65>+G(=_^tZnQ6appp~IA;+^+qMz6w
-za`-qUCoY2=V*t@lJOlFUMNV7}d6Pyz@nFb*FLEMma7dd*Kk-b+-x4`-1?1Z``iTP|
-zKMIY^{1Yo7AEwbyJPY!3MNUK?9FnQgPsDS?p%o%0!sdsBH2R5WL!akS7(ek+$k%K1
-z6AyxXv&f0nkZ;xKCl1B`{b6J^&?kl=AE?n!JR16EiJS;uF~p<MPdo(jOGHk*4Duq4
-zeqt)(zh30Tm5}qj2%w*M4D^33a^fn;TQ&NL10jD)<itA2w`=qhkA-{)Isx-fyd3g0
-zjeg=F$j=oy@tcrmYV;F_L0&3y;uVlD)#xW43i(YUC&DKVS+CJgJPz{Ti=22R<ZT-L
-z#KDliCvxJqAm6FcPaFaHQRt-1Kd~P2VH*8J*!<9JkrS`NEuTg|aU|pwA}4+ua-ItV
-z`iVzD{v(kS*FfH^(N8=b^35VAUJdzHjeg=`kbf+4;#$aeYxEOOgZxA|5$2zG4diZ(
-ze&Ugk=ZTznE#w6n{lu?B9u_&V0rFKE{lvo|{}GV!6C;o}YxEOOfqb*biPu5CRimHS
-z5Ayd!PQ(~CWT!?y@l?o<f|FDA54;}oVH*9!RLHYMPFx4MPotmsHOMPOPW%q!A&q__
-zeALjJL{7W`^7R`1#5DAe-;12s1bLfAKk;zL-x4_yWATvf8vVp0AU_IDSmhu1J;;Y?
-z^b?PS{9KU}Z-hKkqn~&b<fS4f-URtljeg?MkY6uy;?0mZY4j71f&4C!6Tc66i$*{3
-zSjhh<a^inM-mcM490vJ&A}6kge5Xb~@i@qbU=U&Xh?sK>Nz>>j9uN6hA}8Jgxksa)
-zcmm{eMNa%7<O?<WiI|fNy+Y)~A3<KP(N7!>`TvNV_+!X7X!H|Lg8YvnC;kNTc8z}G
-z$&i06a^g=R=lLR_pXi4CL=1u~AF&y7w?;ql6v(qhPW&0<K8=3jsgPHQoOmnbJnsbb
-z6Tb%eO(G}$H{|Oz`iUbTe-8LRNS}Bc<l8j*iNj&PUx=J|JLDXcfqvpYF+Pm|QlEGS
-z<Rdlui6=roPvpc6kQZq56S0pv^a_y^e-3%QMnCa1<nJz#6Yqq)MWdhib;w^4Iq?^e
-zcWCqzPlx;qkrVHNoP!?FPaFyP2%yS8@NURQYV;FFL7pvg;ysZ2H2R5WKwb)@KJk~3
-zFV*NLo(cK&A}6*$-lWk_JPYz)i=22b<gFV0#B|7C5jpW!kauYG6VHbH3n0@c{x9Sl
-zbb)^2Xvj|lQcnCe<Zg|Aq6hMGMNYgA@=T3>Vg}@wh@5yo<V70&#4(Wn2>2VsPi%#}
-zS)-pg3hlpH<iy`XzEz{2h<&o5JkLmd;scQH*61gm4Ec$0l9UsF2f16LpNM^zq1hrQ
-z{vL9lMn5qf@(Pg?AA~%l(NDxa%+Mc+ocIvr%^Lm0lc2v@<iv*|->T71#6HT<k3~*w
-zgM7C}KXELwcp{v*%0F-;<Zg|A;yB28?vHZfBar(v`ibKqFBLg)6XZ)Z`iT=DzgpzP
-z&5$=}^b;pS{y!ooJ_`8;jeg=J$Ty3exCQd98vVq{kiR8z;$x6+*XSpn1Gx)VGwKP$
-zsq0oCitYLd5Wd~@W1t)OQy}`9>%V~>;Lm_a+w~(L^`1ugiCKuB`p<w9v%wk9v*5%W
-za5wNdaN;y@#``=taXNSr@D*^P4?F~X6`Yt0z6$snIB^De1Mqcl;!N=Mz&F8(dEgs>
-ze+4JzgSP<R1}Dw}Zw0;sPMi(i2HXx#ECAmM+yPF!0K6UeE;w-xI6$p~-9WB)Gl5*!
-z76DzrdLrt%8GllMZNPrO4&Xtof86X3bOQ$fGl2&Ki-3m!>wyD-&A>sxHsGPa4&Y!Q
-zBSR*Jx`BrQx$bi_ePDm459B(j8OZfe8<6Xs4j|Vz%mmjl&{6A^Od!`KML@1U>VYtl
-zq0K<9C)$8qH*^5e#fLKUTnD&;obP7>Ij=7Qa{gWq<UG9@$oY61kn`>iAm`UCH0RN7
-zAm_`OK+cPcfSmu<13Axa268^z2IRc81IYO)D~t0`H<0tqOd#i#ML^CU>w%mnHUl{y
-zYy)!M*8$}Gj+LB-a=3x$5<@eAM*xd}M*{1CM**9GM+4h{oHum<j|IBWIKzN$Am=-o
-zz~g~MK+a$4ft;r_134dQ19INc0X!M#LZiBYZr~}vOyH@&BH-76^}rFpW+2D&HXz6C
-z4j{*87mR`9up4+9^?_ffKJawv14mLHI11PXJOkJP<oM=-5uF8e1Ji+-z_Woxz|p{Z
-zpa<9t%mB6lIc{_SIX<{xd>jYdK>GVk8Y8d>NdH|Aq@QjE(jT`0>32JT^sg=$E&Zq)
-zNPn3Lq+cuo(*M;1Cjpy*^k;2A`Yo;}(_H;soHr6%(THx~iD)eH0yGlwEi?x46;v|i
-zub?uCbU2EiDIA3*ccXAe0Y66Oh})1@DKK-2=DP(qoTvFnuY{kj^-J?Kh70xmbLVMn
-zy+q^F$j3=3^{SJ*aHX80c?;}`*I3~m*axp=!d+-@UUv)6M7eog3}az@9VkDqYlLUQ
-zn0ehJJS6;8;myJa!N`=p@O0s6=mfkj6rL%3t?-cW?+b4d{wv`HFm_&V3#W1OnuYpj
-zdTn0KXPl<_PT@WpZwl&gs+LcK5i@+d@Cj%)at=1Uz7C@%_Xs}*#!X%%+$X$V_&0?&
-z3%^}>oA9TFcL@IiocZBk#>)eHQRxZ)f$&V>{m;_!0^wD{i-f-<JS2Q%x(;72e5LRv
-z;ah|^3+FjQrr#pGRJhxx^EUu?OnI~Ln}j#PE_pr2PL1-k2v0%hX7~=_`NBC^@>(lA
-zQ~0lhhlF<sZxKE;L&vvM_(j6gX6g8D7w!@M894J(Alx@b>(>i^OL#l_4=<B{ZpQK&
-zkAAA!LwJ+$0^yy)L&B%Q*)V*Q@Sh8B5k8ns2>EFj&husPTdp*}POn1vNZ}#j9^ql(
-z1;SSe4++0Qc!ThI;myLY7TzYjfxLgcYn$*^;cp0kR`|QZKN7x6xEs#&B<O!B+%Np#
-zfG*GN!jBUEn(z~apAIKX{WFAD37;hVVd2w+e<Xaa@YCSDslQnGLg69dHwwQ}_@9Jd
-zFZ@I}{gVbXyKWIaiGu*f?q=arg|}L~!{P&rT<S96Jr*yrc$39jExz62!-`$%GV%K?
-z9<q3o#ak@C&EnkL=Vjs_Y4HM!hlHE@YO>@TEZ%N$SBaIL#TQz<-r_A5-)8ZFrLpmQ
-zEM6qs<iEj^H(PwG#dlkLWH2_p0*lvMe1pZeS)30$c$xO_SbU+y8!X;p@eYd*ToN1q
-zB#ReWyvgFN7T<31w53-37B8}RgT-4c-eK{9<+1U5EWXg<^%ifj_%@64ArLQ9|06B#
-zv-nbrH&}dw#kX2~r^SaYk4-<*;!7>wWbsyucUXL2MQr>Y;if+<wB#X+ueW%c#kX60
-z*oxTnd=_72@%0vOvv`Na`S6TacY9g9z~ZYczTV=k7T;#^-NH?MxvOH+pJeeOi#J)k
-z)#4o%9~iRYw|J4on=IaH@eYgg;UF(le{PFsTD-{O^}=UxJUyh@)hzr<;TweiN_dO#
-zH-xteKOXBL>bD8c6TVe=o$z+y8-#BY{x12Tde?U0M|?x`ox&#y-z}Wy?irpBKY3jw
-ze4y~v!qbGe2p=Z=4dHI#N1v<X8!0?fxJUSM;gf`aUwEeQ7liwSA2vnDS0MaC;R}Ud
-zBfLoXgTj{zA9SA94++l{zDoG@!s~_qL3o4klh4=sO~QHpo%OX|c!}_4;cJC&5dKTy
-zEyA}6Zxwz_rjD;o_@%<P3jd?<cHyUcb@*+<uM^%O{5|k7Xvarx{ks~GQt-W$f8_eb
-zRCNx)P_@pJp<LZNG>h*Sq{Qf-?a;p;@(~WsuOsmBNQ~sOEIIX!{87<2Jej^zPW>W@
-zza(3yZ@AG<6FE84cgm?B5_z@g8*cRZyq%ZPcgm^nI#`Kahv!K7g&TdIN8x4kO?YzZ
-zoBao`=o?Ns>#rUkUPj+3r@q;*s1bd`jefgU@78z9RsIL*0C$@F3pe_i{j}VqZ}vmT
-zsc-f}-WPqtjehfhSbe9Q`ey%x=kjSkh8z7Nt=^q~r(C6fxDK#I^v(W@(f3&TPC50>
-z{>%rWZ+J3&r=0p`Kj)<BI{$_n{Y)!;r(Bg^@}DdE9m0*ioqwmC`ewgqh3FfeOy4P|
-zzS&>;f#@5aOy4P|e&`5Yz(+;jaHH?G%I}m@ze)685Pidq{u!3Ok$;5nCT<2f)fdaB
-zSo{);UuW^#E&h_lhvvq{f1brJv-k#!KX38=Gh*YLX7Ngk-)Qk$Ezb8Pob|!_>&d_W
-z8R1J=adN!_p2)wqN&EcQOl{wWoAyZ)eezlO<CL>~+eQBuqHnm-FX9(m1nN8G)c0Ut
-znb-TGZ#cu#KicU#<<!p<{lR%U|ArfVx8>iQa_Scy!_-kXqHnm-x6^mZsUH&kZ;HO*
-zMqd>i@srPTgeO<}$KngFKN@}EM&C|9<d9RpUihCy-*BT}e~^x!oasB|)aSz#UcP)?
-ze})@<JAJ2|`e~xSK=cha`k7Y!JLS|j``HhPzTrmSqqEmte@6Zh!n;LA;J&AmQ@^MF
-zQG)Q!{!s~@sDIQCXY8n^*}8rVH~F*c$0=v|nnd3%`i2|*kkvj;xoV$Nboy1IZ}$6*
-ze!UiV*N;<9{d&=V(d1va(T~f&L$2~K{4XZ|4mta0T>c$$mH*Rp2Ga|~zJ#aXcB1~x
-zhi$wlr+%97@uF|I(YMog%2oMCs_0zTihjLtqaRm(hg_9k_zj}p<d7#UzeBFdf0j=F
-zb<yWTL0-wycgj`yCHxN2PqXyn%I}b?@{iW(ed7YLU*XBpuXo5*`GseTev?Da^0!$1
-z+bO4h<`|v+GSN3YS^7>n^$SG5R`d-w`fdDzi!jR(o}Bt=cn-nq9?>_P@<jIMlvCd=
-z`o9r<!;QZC5EXrQ`c66ZGqFzQ^`0reaHDVAp9xPn^$R5Yr>6Y2zE%GwywNYhx|r9g
-zb9DO~o-BQ*oau)||18lr+~_x}*rWCDlv6(q>uO$wqHnm-x6AL8Q{OH6i$&jXqu;Dz
-zkEZXGQ@>60ZxDUMjlP|}Q%?PM(f@(y8*cPNR{cBW)X((l3~m;E!;QY3zEe*90?~g`
-z^bI%qA*=jOxhlWt?>6NZZuC8tzIlF3IrYu+<Btoq{TQB1-zlfQdEWfdT&-`o(QmQR
-zcgm@6o=@+br}Ygt`gZ=Ea_YOXbOIgowZ7rW^qq3*o9Ex{3$(uB$@HCa>K94+Z40%&
-z;YQzWmES3+e!b}PeK@Y44Ns=;lvBT1^iR7`>l>a--zlelo9GvazTwIAopS1Ti2gT4
-z-|%GmPC4~m*}8&m7k$HxzTN&#IrTlF|B~n%ZuHZv`gh8ypDFrT7wP&lJej^zPW=MW
-zzen^9Pp0pbQ@=>`kGojxM|d)Q6P|MFha~*fqHlOIeW#rI^`ifb=o_9)-zlelljxsv
-ziO#>_$@HCa>NksiNc0U)rtg$fzeV&P7Jb8$=^OdbMeto>8-z@Y*I4`~7JuC0Os}W)
-z$j1m@>PW8(JkffjP0DkZU)QJM$;#uDvp(8I|F@!VcrtybocbN2e{MjhZ+J3&r=0pb
-zMc*g-h8um)LAnyiXF0-?Q{SA&X%~INDIbAPJwCk1sqd6i-<;pMv`FXQaHGG|O5Z7`
-zzB%v1mj>yN4LAC3q|1w(={x1rH|K*gi?zPt4A1=A{>&+-zBx~{Li7zc`fkL*i=62@
-z<<vLlkA7RM(>I(Vrk{xqFLLTT<<vLll|C%i`i3)TqWnAM)HmmwPFk$>4LACkh=&(B
-z(|5|L--2~NuRPH=Jej^zPW_#tf4S%zZuH$M_GtP}IrYtXt1Y5$crtyboci3S;B`ca
-zF2CW)^qq3*7l?kD=o@bIZToS`sc+7I{aW-5H~RK?XygT@E|**7T>n{b@uw|*Trf6#
-zvBmGT_=grBSr)4ww)oF1zRltzmc;5`Z1FoR{<g(gA3gc&bC$;X>m2Yz{<=xp>m$gO
-zzYw0RzD;<_*<Q^O{&Uec-01J@uiJxsmLohl^_wtn=QXBW(icwo2z>1JHsOtavxGla
-z^bI%qAx4giT&3@bpXsMz-p{K{^bI%qcKS{^_1&UhE&7HVeGk9jA~1cYocaY=H}JY!
-z^bKeDMCEtNsb3`ezY~4Kjeh756@7R5PC50>`O00QZ@AI-X!UM=r=0rcJm&Oey8R4K
-zrtg$f--CGsudwJFZuH$s8m&L4ocaZ#|CHz(o=o2<r+!HE&%ikx+P~q+^qq3*H;MjQ
-z(KkGqzEe*97SZ1>`i3Xdcgm^XF8VVnbp8!D`f=?i;qO3rQ@5<*mn?qRidcE3#lLCs
-z`z+qSGFJcV7WY|vnZ<9i_=6Vz+~V`AV$-|V;(VdVS>7s(v%Z}Ev>$kCio1J0c%5+5
-ze;*ZY=AS-9!0_hz#czb0{`Qe@B&)9PA_0as?K2wlI&!l=bct~DJYth@^L%Om{3^qn
-z=Q;C*o99RO3OD=pt^qoH(<v%>SAlS|AAPHlkJR#yja>F?ryVT%qqV$3xY<wqnQ-HO
-z{~+A#H|-K$;MMwW_$8J9DVk3gZpM!*g`54tpBp|#hkrx3d7kl(;ZnZ$g`55QPmEm3
-z_fI32@(mcM^HZdwcO4~MsOxLO&3a+9@V0Cn;#}dzKhF?u#;ds|{1H0*QsHT`f49=e
-zg<mDy?6)-vH~Zf=8M*AY{#3ZxAN{#-vtP`ASA+F!_OBllZpQO1!p-x`w}hMLiT@C8
-zp6?wzNXKW!!y|;7=WnNg!{ocKi!I(@@n2iK!{Yr8jg4=b#j7m7-r~<%{4<N6J~%f1
-z^DN$A@eYg68WOAjYm0YU{G`KT!++P}?^wKWXl(eaEq<THcUt^wsj>RgEnaW&pIUsI
-z#Xq&UCoMMq*%n`C@huiV{P0+PkHs&x_y&u=ZSlj=&z$zxXz>${jFp#J{921|uz07%
-zzkXC~eCsX#pv5mbIyU^<7C#Qp?Vb5&KXh{b`xQ=ppT#>Yei)v^JHwB$_$3x!W$`A9
-zZ?O2Y7U#>6&h$>R_-u<WxA+>1|Ip%FEdF<k4?8Y4{izoBTl_MMf5+laS$vnpM;;%W
-z-X#`qu=sB+{))vvxA^fV#Kxa*@o!uFmll8B;sZ{Mjqfyz=UDt|i~ro>zq9xw7T;m<
-z;lpFoA7OE?#p^8oCyRez@xxDwjX&4o^DSO#@g~JHyT`9vE&ja4zqI(tCo}!1{#1)E
-zvG}zXzsurJDBhhN7ylg+Xa9P`;-6T2kUKW~*%n`H@j8n)Sp54Izr*4WSlsOjjHt;N
-zlT}?83Rlf64;NOKWO#zBLdBJ(zM0w6GR7<|u30**wz4E#UR9al2~{sIs4A}v2dh24
-z33<WFCE=x>apjd|Rk<F|@);gahNm=GU4B`xbY`#)w<=c5@D!HUjL)qMj~z2VP*_k`
-zGkzY(r1{ee%e}J-%L_ww-h6xyPfL`K+E8h6IOxmwX4OH_L~>bdGznERf~&&S#U<ec
-zWf)r%EU6BL<BL&KToIOHj72$_{e8)OMosyW%AC?M<Hu)A&X^cNt)MKZ7L)MA6~UUC
-z;w3?!$CE2nIT<QbYs<=l)u<UqT?M?kg-dj0`KA{xNm$}BW#yH{73G&FsIE}7))T6Z
-zEk%u>{k=Jb)3fq3Jj<h*oYvjQXo=$K9#1*4JHE22vLpzy3}kF^aVfqo=htxY5`3-T
-z*Q(kuzOL}0`D03gX1^fzLlY>Nj=zQF(-UVeSh-)am*FWX4=oK=&xLI;o5-AGIX;gC
-z$fJCizu7d`3lis!9b{@nRmt)~R6Yt}3^kEOkG%}NqpZ$Y#e`7p;)?Q;o{hpY7FH2g
-zkJ=)<GZN-$(vo0huv(j&Nz2iybtqDIKMW*{VRB_~Wr4|Df+##=k@Z|Qt}`mMw0By<
-zMjSJV5q9?hiE&zW)r!Jkur$Wx#?|1?%)UoGHa~lO#+dTTP;Gag&M{Uy0cME%(>!&S
-z5wcOIC(P-%LZ3HdKgKr!@r@ZjVL!(>cG9^093$#*KgKwby<%2yWnJNAJ@f|^s<3uN
-ztao=<R3h7)R8}2~cXA0sG80)<p*lw{0)>|)4LS`G$7CgG$lkm9r1Hx0uo}6dHDHZ@
-ziDIA3EYAtn1jD^%L<L<?T^^3jv(wP^xQhPa3ec+6U)Z8TSdc=ryDJbg0Js7%4i~h0
-zI>7JU<Eks*9CE;<U0i{9_u~r0xJgafH2NEBUVnql=r5`g^jFrle5+ldzo>G%0<2`r
-z4qSnryo;7v&de2X49~7Wbf)17#Q116E%8jNs;$HT$SKg+Kp-1KVPUwc8iRM%_{DYM
-zV9kUIH5Kw^70xeQ5<s<=;5i#7Ry}A=2q@LU%L<oVwxqYf69YPh!t%a^ttu;n1@$Ft
-zesNsN<Fl$N!{tkAt7>bevTOyI)U7NJFP&FeQ(P9z^3+{g8VK-HxM1eOoS7BV<}S12
-z7{?l#pD}JuapjWWoFL{iu&7{Gd}0!Cd|*y6R1K@I4690>Ju7jHlS^PRDpO;^RpU$0
-zDB;+#ta~EqsCS))*Xx-&si3+lTvbw4;q~UnHIE6FVVB?QT~LrXJ1UoxyQj_>o~+vH
-z%YtgcH+y0sW`E_COJ-+yqQl;NkBs=!Jl-771U<k`^UT+6x<@f(Osp<m8Cz>kW7DPC
-zKk<5}uL^``Vp-tm1$HIPxxAvb4E=CK%^sD46W+?=aBX#PY*|&cGX-4$ChVQznbF;H
-zNJq`9_9zwa^tzJ0$ecFU-cp*}Jx!XQF`>L>KIY)1Y<pFz0E<<)cvaxiK-gKjj4|vX
-z#vJEd?p-!>PN3Qo=v(2ON$x*0=sDK?YXpw8_PCbwD=jk{<HML~mZ$|2v@6dTyI3ux
-zWVKaSxBwGf?Wr6s8ml_VjAs+F%a;Ue!WUd#*PF^JT2_3tdd{a~nV&H}>OPh8s#~?n
-z_)fbhF^X|jGX`Re+j|#pR54+^m<Q}#yivsj@z$+a5e!$WCC>bq4q!VF<C2|?Qy8PY
-zC$;EQ9EX9s*qa4cvKKCFOiUi^0*)C+(+ie*Yr{)1c9oZ?(JQN}G&tY3(jJ1=t(v}v
-zRnv2180seG>%E2298Y}3ju|h~_-yBgVhwUEwghI6#iqdQaaEyUWng@54aT&Lam9`T
-zgF8kB8Afv^7Y2(ff~8ZdR?QE1y&19fxC&l9*OMFL)h|k#at&gVl=aSooxazZ+N${E
-zygB1%amNC4Gx*_|&g{lH;!Ed<BTkwhiA$SRf}zoJ?eXJcv{EH1+pOXPSS~Lbz){U+
-zdn1e~y0eIhrveG1;0DfKs!Geq77O#h$h=ET)dyCw>SKGLRa4#-vvl3Z%_I_L)~>a2
-z-0Pb^K`&M^#)oQxwWU><ftFUSzy^!jq|6wv_XFsKvp9Q1SDD=1!>4=Zb6U%}ttY_!
-zwwP*+n-|VOSno{BfT*g*am##k<|fMO2@?fwS0G#Y*rcg0FRmEJ%}1}d*Nz>{EvAin
-z7QQ4lo3WLOJXTDL%L|rF^T%SB5BsXCrpNV8I7)lAG>$9T`7*RB%U7#_9w#*_>DW%K
-zqv;-Idn<39HPzGVwr7<M7A!Xwa~H0=ZMpohN^XKWa^T65!G6A-nh894v9XpOVq_&c
-zry=oP*F=XpkE>oIvrW4DzSaMEAH#WHi_D;XE;0l6T4V<5Tai`BBt@nyQIXaC1VzS7
-zqpw9~&^{NLfqN}71NE)QDrAx(Q<kX6>b_OvNx7AHRDrb-){toMj6I&7C5gaJKN^f%
-zseP$oOCws*S)S}<-O1AFvA(Uay;r-fkQ3j>tRTHqg6(9Y+G>Az&nii)>|rfwr9M`Z
-z4!kGzBpN+dln#@;rbM39Y$wB<_Q7Z!>N*dFg%gTHn1+^OL$^?k4TXiXIKmVzaL!ud
-zMryNz6B{gNVs&r{cJyj$s8CT6RF61km(8vW&c||by52k~T%b~@$;b#4Vj)wxWO{A5
-zX8yP()m1Bzi*l6<L=eF9y~=Q)wvt0o5E<l>|MGB6#sofXnysEfKtEW#!m-Y;$(R@@
-zuBi!Db7OH@ad`#$dLS^ath^#PuA;m$IKHf+cu7so_*p@0NzTSo+CpxRmFRrnX=<U@
-zS6Ev!fe%#ibX9LB*Nhn(h;HC{tE-Fa%vPng>6$SUvV&#CwH09<50rz|p{feCbeXRU
-z+hdRfWvbCTWHsY+s;jH2^&-MNV3JhF>k67&6ATsO$rLwxknRdRv&8qhx=?AL5XD1v
-z;wo9Xye7OnP+DBQvK+=0s99NF77k3CJtr$CkT=_#9T=f+WmT;RA=`_~E6T%lC^UQ}
-zHyW|0+=EJWFuIM^L%{6b63;HLLE<G#dx)b?3FXelQ}-SsnZ0-!E%UM<cGr>?YheMT
-zD}pOZxS_7AtGEKDh~-xd*O8f9LAKVMU`4RF2K(z;ZAmaZw=NW%ikWHU5-i|m6|V^9
-zR??zi$9)QvTbUmW7jw}~b9F|%pgdfOb?MyV#TDJRt7DVLgZW~%xz0>YMb%0#%i+9{
-zjpd-@R&6C_{HUQ|sWLvg1E(|4s~^vV+)DPSsh;_DSkf-wrcK$n%F+OmN)$fBlUH25
-zBv^=tvv3A|(umu`?vom(;Hyds=gzs@beD-a6~PtQOPCW@JF4ESz}zL{k=G?Audzop
-z#>PCViFuB?N008!;*s8JFQ1LGLd{iLnY3o(>S@7j*leOk@Rr2x*)OO-4-m^JudE3d
-zW5)#s#*PoO3DRu&K-poqiQ|R0j@>w)y<j%%(YbXUU2t~q94wg4t}e-ks;k&51B<Ix
-z1xo`}q2fzxgLpJnUK8dv5VkAutj&Zi#ZF>%Rb4M(ZJ!tG1OpWnm#x4UQ?=O2XyRuM
-zj_uXLB`V{n-x$N$r-$b8{i|@n!kn^s0lU8Khh=d)p?GXR9z%LX-KxS$p8p8wjnOck
-zD%FK)`JM@5o$V64$SUx9b9!BqPMtWhd!Jn`N$V!g(c^x=^tB5vgg_Ml<Gw<#H#*@{
-zlj4APn#bpv&m7Gd3y1Bw$TM3B=9XntR+c0%_y3HtN4MDas_c4(m#FYs@*iIMe@)BJ
-z#WU$x|Mj2I_IU89A9r%63LUCXc5k*E614gJ|M1q{>+*8H;s2%ba<ie=@<t!TSgz0;
-zjN9wt$n12}Q4Q@T`k-R$4ugKIlgHxCirwsf^)aa0j_EztXr7f{Pnc!t=`kazD&bzA
-zoa%WfjY&vq=wFo-I>o;#DYVePBB?%{Hrs>d*oW9WdZHB5y894a#{P|N%>IpTY=Y?i
-zJtxffpm8())#t~%7f-Uxi+W${(Wy7fS&T$mT?xEpQWvNlS~Rhqo<DiL^gxVix;!_E
-zeayV)%QNp{tc-9-Ke|>@D|@WzdR#0yN17g<Wd}kFW-pE%mwE|}ZHAb*lRw?B)0M%A
-zL-NYlv$$|BbHBtD9mn+8yT9_+Q^O}37ysp5$k{LSu1}IxsTTIK^HPG27Pn8}h;Z-v
-zj5CjY=)1jl$EXGF_o$-=xnHABY@c6I5^5@^d%%88A=VT28a4VyURDM^WAGV^&p3R>
-z<1+!DiTF&y24~%h#Z}mEbYtTv5WtT3baxMX`F8j~$Su3?II9{PRlu7u)*FUczj$Sf
-z3zxW~wj8(b)nn*hH=k_nI#ssmjs$zKaCdaTvExB$qj~PZsmImD-eiDX%+A2x#KZoy
-zukqNOr}y~unTa0iGQKD=Dt#+`j7r}M+O4t=Ws0h*j^2B1^lWZ%(U~pW>R_2X9^}gb
-zHF#R*%JBuJRpZ%6hN}!ON1h$*+jAg1x#~VHjyEka@k#b<EBe@{?>hRKRo}yBRXHDq
-z^<B?A`s%v|o=^2XuzDia_u$E%0>;G<yGN&I0ddb5@;C?V!ST{D=Vz-x`e|n%WT^J9
-zbhlH(`d-vY#W~i(C3cWry=lCPWw43%EL3@-`G{&H-<h#gWZz+aqV1LhLFq917&O_k
-z#ENx~S3s7251n4-@oH{sw?`k<60e2qEF?d2YwRc5M!hGjW_^2}U!~T!{Pw!^QM1E6
-z&q8!kX`fPFU{_g>S+MO``ea`#F;2ZtwW5cto@^#2M8Z~z36Zc8yF<if(ys0VA@zjU
-z4%o9rMbp_E?LC_c?@=Q&>Zr~3Hp|}QsH3*HU!#szr*i@R6(z9;3!FUH=y^D6R5QA|
-zwi0iLk6u|-y?peNs&w^keO0<XZ4-Y(i<g&&N1wg8w!ETrG@sW7N2_B)D}tqb0$+1>
-zC4Lj4G`MQCb8;iW<$OsZk)Gq!q*qo|uPCk<y=u~gz=UzJ0oC+qMOA4nPK@kh_6w_O
-zt4o44G4YRf6(jd5k$sK+UsOBHZ&lnIy7uG!jQ^l>A#raP$7eR?_2a!i#KJcYcz9)>
-ze}5wGeU<~~hfuFQ{q)Cy^FuLP#|ftU|2gM}Vz-C>b9S1{VmQHS+lb=NfJV<)#;x}b
-ztgYj#>;Ij#bx{BE(*LQ!-Q*bqe4?Mwh#NTf_;-GK{+SFr{{8r)Jxn<67dY(nGWPXX
-zhhl!xBQEv~hj{=0AXogahQvJI&-ki-`YF2P?ZXC=8iZo~f6V@WuTjK4A?-D|+Opy=
-zzx<!-hAPA8gX)KKY%}7DYp+kMu=@Tr2XXnrSbS>xc33I;`$2XoWRGwk>P0X0<8v%~
-z0Q(j*8Z2?l5bQ(Dv=jAvMRs+l!#t2Ues>CQwlMhr$KLzE#Z{g8|MxN^OcIP}NF<R?
-zut^m)DAuS%b9IuS#Y!txtY~v9Dk@e~RBTbxI^EE9T&bd>Qj2w>R0pIjRa8`5r<HZt
-zExRQR+p=4Bi%MH;*x#3~s1qg4_w%{WIdHjQfEaDNzi;k~nfE;RInVk3@1A?^MZLGk
-zYcS_`InfWiFl+DB%whkK#6Z1QY1$Y}|KcepOy?C$UZXs%n)=#1o}G9j-ri9?;lwEp
-z_O_MxLQNak^l$T`fAR{cX^j%S*UNR8_t&vw_s_Fm*(s5~y0jnIsqVa*YG3whPp&jN
-z%Yf5t>GeFLp!Vtf)s_8+-nq>s+-Z`1V5fSb*VX-Hp1}Fg<;xp$vzG7V4A|2krn?_n
-z!QO8=i^TUsJtk_dGwn^zX`J!~#&q{Xr*X>E&cW$iQaRm@y#1T}xo=?Xy}fSAwa)&|
-z2KO;2<nV`{#O-5H`!iqMhoI&#nfvqj_W$5c_38QsXLy~iH!0lr-o#@vQ*Sbj(?q?=
-zG)@!sCWS`%HDy=+@46sogn8G?{qkAwRR7Pu;dttcarcVOU(H+eCtu(D=X;y~K6Foi
-z_HsM$tcCMFjRVhGI4?ij`ym$h{BW*2XWUyo_S)H0F?E!f*-s7#?79;@w=vz!?$6$Y
-zW@z41SC{wRT|7hTXV|5DV8{2lQpKiLr2|_d`RXL+g{$sIvi5EN8(ZAuHnY82uV-pC
-zL;Y1zn08m+9L?sm4{>I{CNB?Fr?hXmv6p$GD3xD(>E-{sW|53AW|0&BG{8G$o8$j%
-znEXEndwHN$d;RkU_x~60TAh$PshwiD_rG$`FR140IN1|Sy_a;tKK&0M*DByg{6w4{
-z!lqrzknwBsDr@G-tiAe}p5dBo_U;kwBY84!?z>C(X?iey^ZZC-KN-Y6>@MA>MC@a!
-zvdYXht&qLYGt40No{3B`VNKY_P*}qIU^1DldL*B7nkG%15}7^F85$L`XfN;FGv0|!
-z<r9VE9Y3bHa9YreE~Xt0C;XU<OM=mA8kbTny@Ae<W(>@e;d~hDiM((I!`WKfKF=8D
-z-VN=u*K_ZN_Q~tX>{P|}(PzwL5c|*#6&eSQ137RY2M*-GfgCuH0|#>8Kn@(pfxl=D
-z{QUj@{!^;@7uWp1*!XwnM)!PtW#NMZ|E}FA_c=eO{mS~Loc5;(wM>zpg>o8iQgB{S
-ztt10-@tGyX6XL{=_?P7;{Y%2n?66@p&BKpmBP1I6#v3#7pEYm1wBm%5ofCWccZs-5
-zQ%3$P>BZ!+c=D(73vV^Y%dYVLcy-?EUz+l-Tj?`A{xPoZLp>35(j`@R?J=I1@%q=V
-z{QHSA8iaq$|AJ=?1OLK)uLJSJtMIEP&U^iPxKvcR%Ee<y2>nZRTyn`3<@k@FcteJ`
-z@cP$VD(A}&5%$ABR)dV^45NJ-kN1vW{)XZWV$1Km8|8OUU<7Xw|2keZ48J<(#wC|r
-zf7w?qzvSv`@lQPY|I6`TJ*W6rt^CurA^7JlgQ@=UjpvhRy#9rhe>&5`Dt>XqFKg0l
-z;uq74x7*_#(>Gs-x8UOqu7&v%O8f}jBvRxcVfa=_Z@kMeu9Z_$qDvtIpR7K^IGq(W
-z!!+s;r%&@7J|;efu?U}ooZn89G}ro$#u?V}QdKc?@H-nH`j_LBFP|eeHl6kPE2^Ad
-zIM0LbvheY`yZ+kC@E&&2Pv_5+SCS}y61Y46iW|R*_p?hzB#M{*zxMFTITE<TD^0H1
-zaN}iH<9&3zqmVFulaHIZ{L8{`PdeqT{y5L@*k(NX!s{=;v|{T2UxOnY3G(fH{v#Ot
-zmjg%7a%6esRIm=yYBC%-?>y0*=*1`#?kD|G?r*%p@t^rU#UJ-;VjSzqc)HxFf0-Z-
-zbUNI6{T~zPVjBIFyq!irk*5jlCtsPP{P(1f|0H3$aQXi-CjNB<!}X+J{o@b3O&OJq
-z|NoBRABT@_7cn-QS&m^}aMxRlg1d%~GMeEu-763JV%A%$HZ;Gr%4{C=g)F)mzy8JM
-z_pdUW<Ci2gzk8vtdF<Te=H0i=Yu>%dymyb!xBbbj%i_Cy^IP8a&1-qbm)!FBU2B`i
-zeP&DCXSAS)_yzo^kNDE!{?H}y=2gb_Y!knaKs<c@7R0?SEh)ImNIK(}Z~2US{T4p|
-zz2&}a)Bm%mZ&`e$Y22&*_yGQ;!;kPMr?*`Q+d|kLZKnRLdF#^n8L;(+F^n))Kz|9S
-z{f+q2ow!APOJ<GNiHO(jNyfdVFY~TJUk1`=)W3&#F}>T8mf_q|=N!}iF3vsw_PXZh
-z-#!6(d05NqzD!5A6ls1IX+~SD+h_!LMIJY|KjS+rKI~fpH)7xM>vhc?TMvyhjOVs4
-ziNEe!=GZd4arjM}7q`-8g=6yu{9dZ^`hvraXCo*>)9~L#_wU2~+lWhaYt_U#9lz+-
-zFUF7X`4R8sj{m#h_C2_5N128f26we@y#R4YZ`ro>!uU(RrSUg>hqoB!8NX!wUOYFi
-zx#QQlNLvQtung&4f^b$i{tP<tk~pIeue%)S+=e(m=1bb%;rk-uozX&nhkU-4-y-h6
-zQ+f0J*7W$z7<xZId@v-Zzwn!N&D#Dk*fXqcz6;|+%Kg7B61P#*E5BJ3_s<LN5;sM0
-z#`6WF4|!0B56au9H~pdW-Y`Pv>3s21XT~feIb`{b@n5|1_`2qHgag@e6MgcQ=IE2_
-zn(5Au`sDwnvE4K`JWV$-AM5t}|3kl?^<_*6=MChejyHz6x*C=<(#|}fd-}T&=Ra!(
-zcYSuHv8&*yB;@0Y78BtnWsU!0lNmZM8Km3n6xbsFxA`t`(iHWb@1!$=eAwnIcFsla
-zxPk4tKC<<^__nR*GcNUmPJNOxh}==>=oyCSq@JCKyx4^@-L|zD<t%l8cCTzQx9`5~
-zOtkfUwE0bF`y0^*Y-k?8{<Ub#cgZiukiHL4Pa-#MY|bA4#*P<}&kK;Aqmf5QSK6_+
-zL_0ofF1jmduKeZAzp31Tscm}rPo+EjX8JY1n`aa+{d(|z*7Y|~2i|0zLVRJDe&;7q
-zZ_Ncef0t|&yLCLj6z9*v`E9<UxGwJpe8w(a<}B}mk2J5+QLiO#OVGBS-?QhiEX-W=
-z2V+Xz5vW&e^FK`rowo{knT-0yw9pOvW%m8+@nK*7NyGTrO2hc$PT$`=eEV+SA4mK~
-z@t&;)^4UaRYTS#ysbvAe*>kxO--C4RJk3~_3VAU;2jO!tJ|;eC_#A={`!63pxMcXn
-zJbdQkvk)JDveAzE*FK0o?sfFB2)h0czTmpyl;FCzjtZ{Zd2Ddq@&8%9<Jy-ickDbY
-zxbBaK<NWc#bt5MR*NvVMTzA|f<vVJ>Ub<t!mrHhxt_-eA3l!`);q;;%rFO}Vod*Zk
-zy}l&4Zq=639c6I0a}nfK!F5-_ulewE=V=JXG+X@ULHI1jC$;68PZ)=yOj|DfMA0+d
-z#zLH%hfgv-K70&(4nd!i*0TGy4b8}pds)Aje`DwVJ;oWy8`d}Ep_6}a`@#?FzT3<V
-zzK~STS+-HnHpf2Yb=2Q6Uy_sV`_1_Cw4HE|_NCkZ%0jdGb+~7^W9R<Vsn-nm-3woa
-zjBsyDYTk|b1d*3xsOxXTpOXw@CoT|pMK{r>ymG4X$A3vOiv330p|2$QcP@1FGVZzK
-z$9PDal(xt6j(nqZhiPtn`e4+3(}<&-jdaG9zu6wdeY%sDBL;%^u^ml0XKZ+S_iY;y
-z-wkM|uR3Yi<4f8eza$y*Je;48bfh%ze$~8}W57EIQ|fJSm-K1DU9Ye5H4pwA<Nf8*
-zM=r<;HZR=$jUAXy)Ln!2jO*sKYj0`ks5K9|D}?rZ%<h66Z>=)c9lN_|$C}+GJN|H#
-zfjVWZJ7#z3j$?P1?-)7WSoen$DOc_|dN=CCDUeZ@7s754Y~DJ<SU0@MShoPSsj&IO
-zXJCI0_2oPKuzBlTW8KL4#yW&??;kES)~z+OopF`r%5omWd6wG=$ct0Zj~u<b^!}60
-z!*-sNVic#p6TFY@QM;vkmRkg43V#nL89UFKZxr8@BxB=BW7$rB+k+1u3cqN3vb_QQ
-zaANyz*k6f0i1zO!E!+8;)P?$$#!~q6z{BM@kNLqLUq>BfIU$eJ_q>VroMK>Hn)KI6
-z1Ja@6$NHu7UzhLh+dhNxI}7D_Ci>s}W|Zqh+h9G_ANDhi_zdF{MB&alU&A;)j``aA
-zYQ8pxG57<tmtBa1%-JUEHs@^qS>|e|U{16Lb0XcwXcP6F&^()+GsnX`%{|A9VElLN
-zG5499{nR;P1an5QKWtX}$+_I}iMians4H>g!==7-oRhvkg1H&<W?Rw<ryjD*B6qBF
-z##7F%bbI2QjB~g*FvjY+*wQTH+2`I|*Zdsjn1h%jy^i?{?K^yj#xXY3Wnez;o(DdM
-zadg<_E{ZY#o6h`9=8k&Yjo$RN=IHO&HNSwe3}Zeo^UEbIFJNx<2FG!Xh2fQQ9%IIN
-zpTy@)b^fLEPi$_#KChYaecYF{opZclr{7$LxF3c&SqA208JLr;X!*UGFT|0qr3*Nw
-z9OlFyX_)B$+;b|nHTEli={eO`0>-ZLBRQv9GVPoyig^;}4H4uw=RVA@DCSstF7dj`
-zs|e;-+kEFu%%@m(Y{w+$PA^?^Q*$TE2v`5<9k|Bngdfj*iG9dKK4DIl7Jmozhw~(k
-z--+f)+y1MPeQtVmYf*dw`bD&lYyS2iqu4|r$9|vZ{h!*<e1z%W`MXr3m~)_IxR!bm
-z;WM3&LI0+T8{@~e%zDe;yhdUFFLQO7=kYw_#5q6f{B-ep7xQe+;W#(cb=Smv?l8pX
-z<m;Kv$@7=`mhC(XbD9q1C+)^jcQ~${wx@K5+g-VD`87wPuh!{u>zF^ZqaQE+{-)-a
-zFxO=|4b1IXH{V1$8SiMy4b4(k7#p3kn=DT!o;cS%pL6aalpn4EATu0YmJ#HYzSh!h
-zhyHS&C)X~z?OzCY()O6gv(1ZjpR6f;!_+zA5ax;ui*EEBF&8I-_+aoiitx$CrxG9c
-z9EfGLa)EI}#4w6i&NFV<U>e0Ijs@?-^+h_{T^4@B1od;t#GD3lx_f@J`?gn{YZ(LA
-z9i<o(ci;AtDCb*nSBDtv(tR2IVLRqEkFopFZtYIThvCtE$cR7h_W$**p`VrhH0!P;
-z<Rj;%^rtk**!3Rf&f1o9UDib>JxE80=|Q@F0y^&B4c@2ygghnwQ~h8ZCi|h+5hrK7
-za;^bUPn<HJ%nPP7o8#FRf-iI%;gc62{{Bw{?_0RRxVON}{<|#Ge;3`Dsli=zx8Upz
-z>#jEZrzF9@ps^Bpgmnrjq8ZmjxK5$RLe94`;a7Oo^lKJ+y~8_(avWL$yYd8U9ojAr
-zWA92IuN`Du8B=7tXa36gl(^410&N-XKD_{K)Nii1<_TPzv0buGoy|1_Tyq_Xa~umf
-zt~p}}%5)fQQHM3A`Z|tHZ=wHTUl+!8n6#?}PC1lr#hMA{-WX?eA61U_sn-sqthkn;
-zuR%GFmwtAxZ7vOk!|Saz_~hY(W5#mY<1@E2t`XmI^zTwvxwf(|`L6BQzb-?0btfn<
-zy*9NLYfq12t~A}c)Zx(Gj<VeLH_~4q{?6JB%QBL3YBOcsJ}2f3TRG=QpPX-)9HS-Q
-zq#u*~%)(fOWykbquujo^DD(Yr<Zrq&-ZSsV)LiGkRlSkx1YGlCjj3~MM#5|RZT~6t
-zC+b|=FTI9yYh8bu)wTR<s6Ws6E^@}GHxRe?d<UTp9OU%lthYMs$@(PgY0;Ew)yJc5
-zBaWrWm&rOLeKPxariJTMd)Fb(w`Clb>q4<%ne9)VdjG1IFdsKDFHge!+=uHctcUur
-z7K&?m)+e@IT`$;Au0Xvgn5F%%MLTA_aF;#DZ?45fQcjz`>^IF+_FR*bw6p9nu5f6n
-zXSuRIaV{!(xpbmUbL~W5KTBRt`XSdYdftHiL)+PXTRzgi3Hh)Q`LO}(L;s-1l9}7x
-ztH$;?t~thW&A~M!8B3)7G4E!|FWrvTp{<;OwlZBiN>^<x1J~`BI&Dej40;YUb6Z+I
-z(UvZl(w4Y>EB>5hgzkG3`H4CHeUE?zOLV?1M|;A08|vzE)G=Pee}FOe(G=s4Pho7k
-z)LAo@c?IWOFQ83xPQpB3+3>?P4Bf^fXxlt@K@!_E=UHOw{ykY{67FQ%pN#JXh$rW#
-zT%%_B)BYv&dD_44?)k=!otWe3@gCzr+QM62>Nwh5c-J`EYZm5z<!I+CP4kbhW6ptl
-z6X{`RyvV%fHOxc(7%!seBL?Be>%K(@W08}d=+=_>PT14Vz%{d1&v<M@zrZx^oeuh?
-z`?1Ni+>EpY5&oSRoBSA?818GBb9((|xD20RZy4WGe7I?>y*<Ua;hR{e(Q)S-l<Sb_
-zOVe*g`eZEPnq(&C!;8=^Bpu?njIZuEvrRD`dcBhNwEe(k+i)T0$eArKA)Y$F-F`fq
-zl(F+jtRZwDu6yUfWV)xuVd*~4Lpj%E2e2BSCVWcp!7-<H`o3BlVBLWY=83Xy;moyW
-zSsOSF{TjzKcYipS`H=1pGq9HF?i1ODd0%DbHhlPG8+O``)FZhbKD^}!^oMditmlZ#
-zXIUrL*Zk-+@58z+vMhApsi3yS^~n_5@I>3^{7C#e9PNHN`i@J`?tg}Me}s?g2GVyj
-z582*Lj2Emg$jgcAG^Xj<|C5LM!f{L5I`u=aagX=g-ZZzri8A>u?zK_RIiB0b{X4u@
-zpYBd8`*(>~&=<UKwlQ&k=iZ3x%=Hap%DYGxuMIete8n{{V;VD2_ZqQY!g|McKim3{
-zx9&0T#dh|!Aw3`eX3`RrovgpQuBV+gpvy#GA9C(EjB*>pJXz*mGT+EX|B60!uX`iB
-zXB0%=>fckaqhssxyajuTb}ZaevLkx`^1SB9m*@G>$1d1YzN6)t<$2LpDOW;Yy`y;t
-z<Tsb+Wy9`h*tER8JnseHio9cBdn|0COIGAHuUY|pIrNn~T25S%_td5pc`c8d+oR{N
-z$lG8ZeHYh$a#0@Xw+HWEvZwU^+mq6F-i5V>chC+_evfOYlXU~v0?z#_tU=U$A8jAo
-zrs`h9wUC}GaLjubb@mYWcOq=*N4m2HGFLyup6!SCf}T}lf;$ci;rA<VE|0&mb$Og|
-z=Y2HJ8|9ir@|kvWU2^!8{O33zYXzM1;{F%LXVk?hWf+BjTzk;hGVQ;@eZN1=zFvcJ
-zow%>{1p0A3_tp2Y*tc`8<-YET-tjdxuf_Zfaglt~W8Gw)&DI|E8iVfJnV>;@)?)&Z
-z24>)+uZ8w(HMhU_rK$Js-$t2@;r@_}`@vmON4Ylu>t=Tt&9cre_mBL^LG(-Vn{zbI
-zOQ}Z?^$&j8Xnx08bCCOm?|o?#?&FxwS~c_s+Pv$2=z%t``;7x_esX^M@wE8^ZExyc
-zgad8wK->FsjkgEd-hs9^{e1brxOZUO!#+Z_&-K7{=H%Sxz;)){YXn>$;J$$WE!UZ|
-zj(b@9=Ng_~4|LXJe5cNFuh8<Tdxfw*G}C@?-Ns~}QHIAhBfgaDND1!OY1?&JzvO)e
-z9bc|PWx&oq%l#bh+7s7?X1YJ9!_#|`hUXh!Sb2zXL-r!0Sgy;Bd;gBtkyn@JeRhHD
-ztL@&nVckm0xMBFA@QT=xxOYDf`y_BZ&iv&*B>t9reX@?swdvDvJ^qaE;&{2sw$x+W
-zzLo1JvgTFp+$*GgI`)@b96uKJQI~DRV>_(Y6QdJ$%Ud4vmBc^6brP3d$Yb{m)@XE`
-z!xOgH(}Fb}Jj0gm-!z$4<0x-hWv$fjti>{}vMwZZy~Ac*E8nxp*uH0x@q#}!bRPC(
-zs(q2N*E<<|y^)X3T9F>lFU8*MjaUa>h5g???En59_H%p&GV>dL-OKeD{7&cn<##VM
-zagPl9NN>Y^!dKyEvXpBS<;p#OiOP0^;lsM4>|y2oG2U0yb&%^X`W}&vn_i3Ln)QdZ
-z<$awGYa7@PTkaA1u;DV#-$Z_J&kN@j&iyx>+kM+6<oib4o5Y@CthIAr2g^7+ZU4(y
-zm+y@GEVuf$KZbkf+pta@*_6?t%TCsxbLZCIVc(&9Z>02<C(q5+yRQ;^(`etkYG0ne
-znYuSq!e2Yb@Rv-9dlYR9d%PtMm+wm)rurjs`1Bm(aLCj+Y<0!q@wvreJ^KGgUH!kl
-zhv2N6eu#Tta~T6pMVObk!sNZ;!%%j^vy4@GFHm$-Nr!))^fLvkCdZG3u60PxD~9oW
-z57*eYq3_juM)^FE-iP7sTPD}YC-=9`b)Eb>XyY%ud2_Sh*{h2Cz6kSq?7ifkKK9ek
-z;aL{$dmU5bN8+%TP2AgiX2&hf;aS$`zlpii6;9aLFE}Oa^ITz{|FMOAtrPZ5p0JBu
-zVRP^8$CK_$5%zl+xA`2G?2#$KzD)L!xYvL@AI5w@@4ZQ!-;>Xk%{9L-Lb&D5exN1S
-z%wIftPvmN~ABcNe`8<={?~!>%6wfEgJ(^`L9K*EzS=e8|dn$Ndf8svNYZyDd_gT)u
-zIq`FHf0^tJ;+`_OFFQP6>bu_CtM9v<4!?EWj$EMq;k_soH}qGN&z3D~Y2IXPKLYzv
-z4|T=!Z`FQQT*FNGH6Q2pO6RJne(_l*mWAKBPs=?XhqZ8Ttxo@Z*M2-5$G^p1ioN_r
-ze>NG%%$DY@5=W<;opkfwm);}7u~O2uFZY<-_nW-G^&Dz=>Hd$edJe^VSYw#zjDyu+
-z2;{jiemCM1#fLI=wfHnBxe)Bcr(4M-U<E#ONB1R|ELGrBjSr4l?@w*px&mYPim79`
-z56=Y7(*I9)-QkR1TThwQR`=z4-Z0lOz&mzuFX~*bbG+jm=bUpHtMopN=%$M&#+-8O
-z0ZcTn)z=l>%eeRcV(f|G9>gUrygqPW14I|y((GTV-Qd{+=s7l_yy}N1Y*)Z`c?+)(
-z^#0fAUAVV8VVBX8;^^f5aCE{h6Lz>}K)ai*{_A?3z5JuA*Q|5;IskP!VP4Ul_rpDg
-z`k6S+XUh-Y|9I*7>_-)+=qEn9IL$c6#`P83rhEUOw68g~O{^cd=hqR;)#p;@opz1A
-z8&ho$o6~y2bnSC4b31SQ<o=lDm=k8tvJRp95wuBXJ)s=qX`;57?aYrjAG{c2GsXwB
-zk8Ia<cb4nAn|Yp%>uo-3LATsn{M?1uGvUlNmbJ8}+}f=Dh`O%(-RlMPgX;twm+1D>
-z@I&lZIB{rq<_Hpx+5KQ&kdD1wMtV2m@a*~3&OR!4TDo2Fh`H7u7>{lz9`Zag#)$M`
-zCmoq8FQl&+cG(Yl?1vru$$n)n&x+{2W%!f(-(K{XInlQ)HEwted(Q^3ZeU^$8=l9w
-zk2-Jv(fz6Y51ai5pDWpoYnDW7xCk59<npY^zPKGfct!k!Ys}_dmnSuQ_piK%XBc<k
-z8OAvF!ErCkyVz6A=YF}rj_Yj<lk0U6_3UTZXY8DhxzojXp6)hZ=FY#x-W<AFX&jDc
-zH^2LE0nX#P>yKml`C{K0zvTGIy?av6Wk0p7H*j8=j__D_W&O#!2WHph8=F742G7i=
-zoE7K#gPt?(OZq=9w@7y#KKEiuglE_%pFzYqjyZo;o!(a{{WzYnF^y+gj)N;h=VcjZ
-z{F2Z0=skF)f8w)9lh14G{6U=es$YMt=Tsg$WBZKb+pEU*?|(P1`F+&yU24BP_r9`D
-z>UkmajAPzA+{cw*KC1W3CwlheEwtM_?3rH)PPd=_FzEPv?@y94u_h_|WVu(>TX(o$
-zo%`>Y@9sUXY=eB}pgaX*&_Tux1=xeF$DoCtHHjCm;&U#O&jRQ$;HOh3F=cn&nQ{#3
-zY1Fx{k+p4(Rqp3q;KzN}!_8d%Tec5w`HbdV{bgQAc_nO9&ih>GZt&ohaam)=yHcFI
-z<U3LhbJoD$M7|GUp8PxXHNVGoJKeL-=k>gdnS5S~W3gQ8dh;s^|1b{x0?#b`g0{bO
-z@=o5B5W~B7+Aq9ypZ7cdZkqj$SK?g6Sx=h04j**(k}hdsIQm&j`91yfUM&CF=H<FC
-z#aL~W;!}$cF3|pJ_C3zruDQ>79>$Jjtn2$Qe#x`<Y$v+zvt1vKc3nQp{7&CLKEjtV
-zvBx}eN8a9T^UcY&xh;v$w#$A~{p@dnYMZ$Kk+5yP@Mc~!I<2~T^aZ*<j$n-&+3vJW
-zy`~Vs+&Ho|$+;KBd8$qm*G?0)=P#g5l{;%7?)E(SY%$yOJ#h1J#v%7(_CMoe_8;Zo
-z%y-D&BCqxPhxohzue;gyxb`=suA^B-)X{we+@{Lx#b14`nL1~$G;}P(CiEA&oOK@@
-zeKl#KPkB@M*?!^8jxGJ%*ZtFp`V;T|X~vcQ&s1OZ+8*8QYkvX*V+@~SR95ycD7T4y
-z)cEPtbzP5jUf_KC{>)>h`s?hg-pfDlv(|6mS?f#jtTpFJ`aMAK$9dlR-MyZ-MmxlF
-z&73Rv@mzD*@Sm*R%6kE(J}0fyvU`&}t1azV(oQ=*r{?%|2-j5AdZIH1e@K58%<Ru}
-z`7_sZIxX(`C9jK^4$dvbAE$oT&t-lI_cN~<zG`mg`&9T&g~+SC_cxhuvOY2U`k$;Z
-z==*;jd*8m^1Dv#v;C&%8JzuH!A;{Wgx?1CK+o#9pvR<M0F}Tytv1TsMew~c_U%$Z^
-zqsI*=&t_O})$`kvFi(92cGJya^)sQS?{JKL^4wM8Ijmaue|7Rc+VEkM<Ko|O&g$BS
-z5q7PSgj{PRd|v4J>u+h6wFExX#kEdZOVDX!oz#7a&MQ}+;<Pi~AChOfWKV}YbH;sB
-zy!Kq)g7~CAhqaPK>l+_cJYI0_(Jh}67p|Mg{7&|H;H8x51+M%Eehm5X9NrD$&65IW
-z?}y~cV|X9RnamTs_v2&F6X)GIGvo>GaefkUNwjvvvUve@MAqJ>uOl<<_duOdb!3Su
-z7r8#;denQU8+z{j7~W$uc`u0beyNAl&o<ZA>r~nE_J6JD!>&{L@m@X5P4{bW4zC%I
-zU+H@`abM2VXZN`mhxzQ@htjRqOry95$GI!VNqybw?E~Jy`{H!_#hfACE#v)ZQ)E1E
-zHAUt<L$`aDDdR$Ntx5L>gBXh^pHpRBk^aE_96r)EvDc-0(MOkOGhWa5lDBWW>!jw$
-zrlot2b-ua22P|!`u}1p+ecf*|IaWn4ckTDUeUrJqceeR)aVzWllm5xrJ;%K#c)yp|
-zKDr9?R=o!Xb#N~6ncPP>8IKS1E?wTUW_aE>ar~Lfn0yk(WR9)6j<aq?Uv=g0oBNQz
-zK1sVbF5I^`mwOueo})W1>__Kv??&H$iEg@J;(lep>cnHa^vitz?FAEiHh3SB*HX-b
-zZ0DMl{i*C@!E?NE9WNQzojj9w5c+T**_Y&8yYL<budm+VTm<vxZP;_Eb?&*gZu`+q
-z?rW_KXDx`~KXX2=)s&x<IiHPS+;i`(=yuk6xYm-<@@w=p?Z2v2_h}?u&usmI<DT*8
-zz`JAR-MrGb$Qqlh6H(8x_qjQy@p+6nocqYSl<Ym&w{*&y*L3OJhIB;HhL&O<hOB?_
-z9WWPQf1A1eMCV;$vJS?5XBm)nn)H4bNf-A-h`Z;o4`Z(Bimo!YA4WevrnG&9Y1?W{
-zq>cU2T7<`IS|^Q{8&lHQf%ntt^f9mYDl@!8ZLVp19`D8bxYD&2=?Xjd7?-N{q{;~W
-z!PGKR?`v?{mKx_!_t@VoLq5zkEzvhW-g26*tqnVEP3EC&FB8|sD3`g;v$_x7|8ZN-
-zv-GvET*u4v-mD{``TCjd$$Kf<t@}E8uJ>W!r)yor>GRS*>T}b@Z?4zzh>LTePj(LU
-ztIn}W|6_*pZ@m2YORu;|{U>3iHH`c#E~g9pFNUluFTJ|rin6S)U0qe4b;XT0UVr1M
-zS%z`ubu;Uy_+NhMP30<pv+!R!D#V+Ku=wMG>u$Qavhw;Hs}K^MXI**ob(hP(f^ghT
-z^>6ZDA3N!}<(A6N7|yRtDit@JaN>q4`F;LXQ+bQy@-y;3Aq;IX_3WQf!fNGdfi;Vb
-z^?{s&jZYlBEX7Dp@|p6r>4;CK8F%Jid4!SXPfa%ZuKM0dD%ZF^$HTn!Jj1LGm}#ji
-zo%K4*sqxZXIkX$P!#hNbM7rtpti<jEeb^NHJlwExj?&amq<znPB<X%%eewhI9-RMB
-zN`wD93m#th-9?R<{~N3Eafh3$E26d&U-oiWt<D>TF8^_k?{#qd7t`*FT<#bTb>8cK
-zREJ;UanE?e#+%O851Gy)9WPJ(z2y+p?(!Eq+33wL><N{lU~!htW}fi6%U904`Q>#N
-zOyJHNFWR{euRhDI#BW{KW~z_LE*oz?^96s-v3Z(uan&bpJluZL-s^8rcX+zKC8($S
-z>TlL;@s-r<)$V4CZ#}vL=lF=@yJn90z;b6CbsrLRB7-kaJ>K8)E}3IGz3q3RUnq9f
-zlLzNLq}%(xmg8LGall{c&-XPSlIK{?v-#_-2LrnOx$A+e-=EDtZ$D9r4YSVi5x2X_
-zIkvmm;_Gdfbt<|>Qod>ka^lbBk2n8vKcaH>rn5??vwTW2_Zt6LKb)iB!@2XOr%(Im
-z9*@}1G^BjT|L}tEE_7x$dym8W8xL>#6Zz*YXUgv5FRk~cW4(^tEc2N333oG>;{kV)
-zQQmw`lrQ@_UVH0LvMv|J+4O7Sjy4nXh&lET-hO_z@!lIw#~j1)#-FnL@aF4!t@PAi
-zuRjy{uiSh62`2Ez>uw@E&%Dd)u0Z?uA>GXu|NYf_<2#WqPd<9xP2{7eKi}7S?5!Wc
-zIbP3s)19pIS<xHcDy{d7Q?vQwt?v`p#~;zWrelut8gF_g#+_N}Rig6rrhB41RX+Wt
-z_1^R*N{24i{b4XAMb|pV8~jg*J^Zmt@g0w>&+luPW6B?Gr~UDspR26h%|;#GT&UWw
-zo)zz9GMir2qlETcm%{&=^ETIsa8&zBsONZtON)g181xuo66(3WgeI3z&-J94;#V|F
-z_(AA#=uu82*SD(23HAAKJ5&0Cv*=e#SPAn#YZkrAn1uFR2bw8=X0zvd&;HnRT?g;w
-zP{BxI+~2c>&-I)A37_jUGua0bnVHIOw)k<qV<!LAd@Eu7*<b(v|8CFqj+ydzw)Asd
-z170X+?wTjRXS3%z#{PuQ^@{zmubUFheUJbC+H)OZf8wv^aS8KZ&5J&?zE83wVf)%&
-z|7Wx3ybDLd{`W7fpKbh7<A1{Z|9@RSTmP`X`rs_>Yqs%&*XJ{}&)MqV9P3BI`W<wt
-z|IG8JnZ{RMZ|{#@)z5_S+h6@0^Cw~ZnXP{C`gx}Eo6WvT^8Z7J&-pv5(1*6?_3%vb
-zXa6}<`OYzaKeqDyxavnL(v5p)Ic$GqE_k=k$SFg4TggUF5qJUa0u~CbwIFPAvK6xw
-z(-r-S?I@{#fIkh2rBZT*n}t>uNPn=q!8i%wB!lZfJjd>w$DTlk*aPiwK(P(XhPyg2
-zGuf!971}l65jbBBehTNSgmxvk8ghluE(7sAYfdTnHqy0OXcdEp!+t$@A<pLstu-Lx
-znv)I|<9wRX@`Gz}ejFuE|Ki~PKtCq5dO$prmeT=t`;3Zqq1_0M;5^^O!}C?@Jm+87
-zYn@Z3m<b|?oMc5_Us4_fe-HZ@xDYbm`$M}X@HaSL2mT}c<@<p^8}D0j!l@D3A<zj2
-zq<=+<YrvzCPuW5{4IG4januK%9~0WWO72l|2Z%DtsaNMYkAr)=3jA-JA47fkH1f%h
-z_UGgmD%q<zKLWlC_Jcg%1O5bZ58NTiIc%?pLQWW@yJ}@$0n%L&$b2sZ5w}7-&q-Pl
-zBo5bcIdve@R|7J=e8}?^*sTX+U@rLg;2IErIjQ)fejJ-Ys2>HX$N#K%^fAR;5J@Ur
-zBeb$WypJa*4P?Hj3T;2g@=X@nVML1UsS0F!suWszAltzj#Z1LC#bm`U1j6>z2-1B>
-zu|zSbm<1xp!c3u+3hsoRU+Ks257*Jua)v>k9|Gxb7(^Bp)(EXi@DDg&0pc&G0AFmU
-zL6Ge<4`e)&LAJ*s2yBmoLc1Sid+Y((9=nBh7s&P)6WSdh%ds6~du$V0QIPGi4lKd>
-zTA>vJ*&gv;7pFaz39Zc_>roNt)C-X9u|R0$gNSO*S`g1&=5)dl>qjfdcGCc|{OW~v
-z9mw*l71}i*>q!Opd$=!A`eLOo1lb<*LHe7kn5h_t(rHIRdjMp+=}_m})%iwn5a+Aa
-z`6_k36l8k}s`KmB`86Pd$jJuZL3&pUtx?pQQ;{Eoin(cq@ki*_2(4@|5Bk+0)0ri-
-zGr`v&X9#USNV{aARSBL9yEc&ZAfnh0G9LT~zl=w(&<Y+R?()I=5dXGArQS3thC$Z9
-z60jF60{;ojSLerJ2d@g_LTd>8XXppOe*rr|=4*%0ZUX-m=WEpYkUC!h;^nnDBk;E#
-zG?q#{#?pnuiaj9X69E~Y29WWoRp-}(@TxFRXk~(o&)5>>56E^h0R9Z;dqCE!ZlT=;
-zGQVR&yAx!+Y6V$u>OiKaR%ll!xm?M`Ak(*2ozGS0GeM>=h;-dg;sp<=>N#r_GeD+m
-z9D1f}RHc6iWPJO<?Ks~JGQM3xI|eeookF_<WPGEb)4zg@Z%AlYfQ&~O!o%2{6I(9v
-zXjiON3@KKCj8}n@*DL0#^FtXDUMI-(v?<mrh84>}#w!a%5f^3(tu&<{#Y+ZhKLj$p
-zJxY!#wt+o}M-*gwn}l{Fh$fZO0Mh>&km(MBPX2=QFB@ceXMoJVbfKLF(!W%p?FZ>k
-z9Qi|k`a$MjpU`esa+{JHL6&#w3cS1qOvglx;rbOv@S;e{gNnW2&*82UWVjtdyA5PI
-zT0w?i2QvIEimO3Xp`1*R{>2d<(=`IJUJQUtSHIBi1L=RS(Cz{0Zzo89>p`ZgPH1ld
-zSuZxL^Cjwh0myzMAAA?(78F{=NFUD^fjnO*w6=f`z@I24^NeSsVhChC$^%ga3)c#*
-z)!=fZBOPRX(}Xs*%^JwsLch=&#S5MP4fg$DAJ`7k|0sAASPL#jdcs1x27C|pA)&Pe
-zOoP5!Xjg&Ej{=Z(`9eDg(r&%b$^&V)R%qvfwA;cL1j1dl(5eJ~iFlQOxzHDZ^tVuG
-z7l8CPUufllEQfTE<&Y+{<H)}i$d7)|sdqv<1~ML<Lc3j<Q<Nq1sUS%I)`FNy<Ya-L
-zfcs3LodK?doG!F0!3PoF##NG!b&6FW%V`aWrdgORv@*a2h?gH^IVB5i13Url#y{!M
-z8Uk5PJs`^|3Oe-wWI2VvrHIECp<NBeVP7S*D#62`uMpbhAoF`YNV`0ty%wZhuFzTo
-z(k@$QuLfyXc?8bGU4_sp16fXmAj>Hqq`yI-y&j~$c|vOq=z}{y$nr=Q+9Sxng~*Q{
-zkmtLFc00&;v<dB~FlPk$^bo?$KqfFhQWZy!l>Cl@Xj+9$LaQG972MZ=%<quU-U5Ca
-z?y7}WDaiaT0GZ#bLHeHoGQY<^g?b13xX>O0cfo#CXpNB24-4%fkondD(ym=-w^0wf
-zR-qLop>Gn}5s-ExtI?j}Zdhmyg3Rx3kog@0>2Igd?f~g;yU>b)%<meI`5F@1<zPS4
-zsm|xC^SL17u|{aG7Uq;A@eOcae~jcuSg`_R{ay{C2^D4utu*l8aozx#-{VI+wBz83
-za5pBj20-R_7s&jMfXwfDkojE={t5O~Lc0=tANCbOs~p4xzoJZNmx2pmw-%&buFzfs
-z(k@$Qtp;hACA2fa1+Xj6#ylME%7oTtkolbtGQZb@^fymvuLbFEuFzTyGQSOw`8|$A
-zfc6mhA55pn6)|<b6=Xc3LOUYN8A85&2kz63ll(|l9L|yaj)3So3mb)2E%<A=-vTnf
-ztA%zIxEAgzg;oj3{0@T5?@W;SodzQ4oUt{y-a~vwh4u*e0qlo`))1Hi{h-hu0GV%X
-zAnjU(b`+#tlhBHQv}+XF4Iu4?jzzx;cY{K!A7p;VK<0M`NPpXfb{j~4TZL8xWPWb}
-zncvkyyA;G4N={InU$4$*gN(;&p`9trDMkK14ELMS`F;}pP!PNb;j9;0dEmv6*9xs{
-z@Jo<a3$1=cb{YFG@H8+2?ty=GN-hKAkV}-j2E@Axb261Yay-Tz$b%s5JHYGUf4k7C
-z1)09E(5?b8e&rOa^F`|XdJz3(PNq7aq0T3RXxBM|NGJUn5Zc`!>R(QiIv-KzYeD2w
-zPC3%|80>;*w9J>)AoC?lXk~)Tmkgnm3Nl~(LTd<}E9+S=h@|H9fE*vXg?1On@gXL(
-zIzjgL9YVWJm=gg52)_<w`>Pe&VUX>wMregVwx=yZyGoc-2GYJ5WPe#Cv<pG@mjyyA
-zpM*XrwDW{H*&yvRK-R}}p`8Y@KBfvSKgjx(EVRdwf6T`bkoE&0=P~_4yAR|%rdMe7
-zfSi|f3+<RNrwyciJ$OCb*9olx<nwotzmZd=d}=_JPe^EO0WXGJEwm~?mQT6RN(EC<
-zE`95yU)iFVt2mq|=j#;<K@7cx1wtziT!4732HEdq3GGbqWVp)^TIt{txa&Iw>m)ee
-zE3{%D$B9;u_EDkT1j3{+BD5O8akwi1F%>B+7Fzk>uW&vWr2QJ9oekozaJA6N0^fnV
-z0YoYb=lg|LH^_do9i)Am&~62h1%*+e)dczw|56Y`V&P_?RS0svod?o>t<cT|PlCHO
-zLMt1@+HX!ACou&t91~jIAlqY?&~5|SuItqKT6Mk}<UF=SoiA4B*Mm-bSLZX-`8Ya#
-z&Zqi7`rj+GJ3;mX4eEToI$s5HK2W627pn7lAp3`Obv{j<A49$4c-9Nj{~n>;0kXc=
-ztMhg0{1%Y?aoTByu??)Yq`qzjFG7Bl2(4o9V#q~8D<5Qi4GOLJdg*5eK=!XOko{^C
-z$o{kjWItK~R>H1aXsrhs&pe^M8e~2vtMi6BKZ5u%KYKvB?-ttaAoHzWov%~pw}8x_
-z5_P^<oezS{hZ@BDQP`!OF6kYE%=C^5tr3vv9Tr*x;Flox3$0Et9sYEHyWvke_%7H6
-z;vPayD|ist0Nwz*dZCqp@ao{MNrf8*8E%cx3V{rFi_oeB8E%EpDgqCMzl9*)Z<$j7
-zj)D1L63z#~Mc^9nM%ZNwtyb_6xa->>>Fod+ZoANG0~v0s(29Tzw^3*nfgJzR6nlaq
-zhZXY`{oqZoOBPxKXGnSV3+*nD<=dprN7VURkmXyU&X=q6#URT!SDjy@&S!uu-!Y_%
-z^<h+K4}dJ+LB#WWuq)aq>0Jvly}3eb4aoFn3$09$>CF&Y<FH>3f2tvK{#6BXe5e%K
-z72tbtUoN!DK#mWkLc0m1T?FK~+9<Rez&Pycg%)0_>Wr(kLc3&>jLSig<8m7K3epjW
-zJ_e3}e-Ad{yyHK}akEiqH-Nk7ztE~9p|2I%y&&y+K#telLc0rmA9gXJ)d_OE?hxAJ
-zAnoEH$JsHVJqmsRyAh!^3?lz4hJ<!jzN8})Wd3Cc?R1d&l_s=PLFT7lXsrjC{ydQR
-zw^nH9f}Dq}5!%@x^K-S(DgkL%3_9}(p<M_v9}0waJ_);^(5eDyR|zs-Dui}9$b2Xh
-z+NB`#X|vF(18G+aGGD?%y9Q)FgoO4Mkoi<Cv^qhqd-sFOU_YX0oGEg;Vz%OX#UjNr
-z#cIVG5M4}8Sg{to6ZIrgAoGZN#Y&LZh1uX~%r~Kx4E`6+k9|hQ%Tb{{0-_5p92Q#L
-z;Qz<^C;Ezr&~5-1BK$fKO(&-o{7>X#SZLRPgOEc)dkZ+u{194rfZnmI0GW^FLc0uP
-zzLg5C%^>r&L}(WYbAlktZN1RW16fXMg;p-ea$F;{R||8}LDrKrp`8k{UigJpG6}sQ
-zwBu(va?TLQ`B@jp`WX}2ognLDhtO&VSzp_Pc2t;C3!VyhVWCwC`ruy~_#5PJ3CMNM
-zVxe6GavoDCwDUo_&j#85trps;O7<&x81;bqA)(y^q8xGx&X)DGJdpmZ0T+WAAlK8<
-zg?1Xq^|Vx>Jz6N~9#ZTE4~AU~WWA~e(KQ!V39WLa-wghg;et#@zR(VW=fM4Xp_L0V
-z9$6rgkdqD~$~k`U|G<6}j%hz4w1+^}y8)2(t{-Im=@Z($AnQ+$(CP+Rf4YQrr!c1t
-zL=((u0zV5jf`5WtgV3r27vX#u+>P@!LaQ2Ny{i)1l_2X~h0rPoo&G~;Zx-ehfebGn
-zWO(aA)5Ln5(8>iD;e0lT8_<QTg;oa0`kF4Z(?HhORH5Z3p-&dt<M14E&M3(6hCqfl
-zfG@n|p|D?Q^@59Vz8g%!`7WW=4yNLKJ;-`qC$wup*7LB?ssUNgLqfY+m{S2V+)@yK
-zIVJd-2mgzORw2l6^TA}C4+^bp5JP$4YN3@1vYyftwvRE?N4Aeqp*;e!UJMKEL6Gh{
-zLDv5cq1^<s{+E1C>Ps=meyT`l7lP1N6bS8nko{CpXw`u1x1%7UlG6mTK1768Bk0r{
-zp*0Ae0{5w($NCzW4>G+$a1ZR(3$0ppKCI5ysPo+*!|4K94`M>A6J&kq5LyEu-SvYk
-zzdoVW3$mPhgw`lXcOxM4dst`<fh?Cnp_O^Aq%#A=yYMQ~g?1{q3HEs)#)X`GFoOKt
-zQY`bVQgAcUwOMGDfEPn97Fq@1mmud0t)cS`V-)tiAhIf_2V_0#7TR4P>sd@_b%LyC
-z9YVWJm{SXKep(9BzXFi{<%4XWL7}}KWc$n$T5CbJ&s?FMEzC&<>0jS@;$J67|2jan
-zzjmSB2D1IN3auy!eUs2`6y{We^sf+P{MLf>FBfEgwMJ-XgY2(X3#}}W{Z*#WP8a5k
-zenI?;f%LBxq<>LxG2Ax^?Fh(uRin^q06Fif7uvPLoN|!y3xZW}zg}o%gKTe^AlqAp
-z&`t;0-qM7&A7pzQDU$X!EVR3o+@<6;knOKdov&5rt3kGlDsUm{VWrS27JWsL&|VMH
-zT^_gq?$!#ebkSF&3GH#zOS+4Lez+SGT74k<gI=NC3DR8$m;!h0LaSc%6?H;;3rKg>
-z;C#5N5?W!@<3^+>4t^5(HvqE!_Y18)koCV;Xmx?C|1qJ}1oAqAn{oaQ{;c_;_>%_G
-zpH!jc2kB3;(2B!7{TUNly&(JPF7S`=rvqg9v<vN4a3S<fAkz^6nSYH!s}5xPYlT(_
-zWWH??T9qKvT_LneL6*~Ip_LEbjQ9kFRyN4`uom(CHsUj6OS-y2rmIV6#XzR3Q)sn;
-zOjoPWss@>^%^>F&1t71x^TC60J`d!)A`9$7dNYM~28by`VY<*t1sB8pFaqaz)DNPG
-z=k$T>2YZE94|p)-ZlM(g{|Ek8gS^hK;(6GWgABI_WVnSwy8vXk`9f<w$Z#`3hMNj9
-zTtCSEJXvTlQx1YWj>Lo3AjohdAlDTdL55ogGTdsA;Z_OlN|51J2(2=Z;RZp5n+r1B
-zH6X`_Y@xLpTnsr&XeEOTw+n^Bb&MFuaN9wK+Xyn;2BBRKGTb_$6$Tk@ImmEJK!#fk
-z?uNS}p;ZW`BHRL@wFYFkqZdgz4}e@h=?58p56JM_L5ANZv|B-j9~D{=km1*W48ICw
-z_?6%ygjXT7%0cWcEG!dRg&@Pv1iuRZGKAJhiR#aUb|1+0(@Vm>M`*Q)zM@rVH}E{%
-z)q`v&bwaB`^cCeoy8xuSe9)Qy2(8tkugDVGsUY3?LAKjup*47+#BV@o$3VL41X<1<
-zLaR~q6%9hW8l<}_knOxuXcdXRqEKk(fpoVPWPQyQTB)M1@C)r>v~#)}0@;rY3auE(
-z{<c$SM?t!40$Cp-LMtTtiY-FB9HhH4ko``n&`SQY^eg!w=V9d_%eM@qf2BfeGsyZ?
-zBDA)EbXN^B9aTcB5@frp5L$I0-PMB3zp&7%0ohJMLaPa+y9mf~YZO`yAp4Jcq16G>
-zT|3D7(k8T8LDs*h&>8}no<Z;p)b9bI-3M~MWg^<El8vt;PmCkMCE!uuO7Jb8@%5v?
-z9pFizALow;Ux#dgL*O}}iSxLYa?YcA8}H*h;^xR#ff>+Ws$}%#jz8CfcrW4Cw}Q0)
-zx{~h&X@8fJ9|dXu9VPz&JOuKSN`6Vn&w`9s2KY7HnkK7JRGGp6+3YhGuT^^T7U=VY
-z0rDQ`F>E^a<gL(`2m@pk`YNR-Z-c&C7$EP4zE$bTEzq|K10?c#ai7wYNONkxFhC|j
-zKd$uTH=w5x7$7n3E#^LErjNWG`dndvOoo25(vu<RON9Y)KJ<JJmG<N}q38ct1q0*)
-z=(*pTdh&0ej|l@L#`(nqN>8HfQU`?r5_M=X_jA*ptbyJy43MeN^Epr_{@}N8DpwdF
-z4}!i}>B+x^zC;)x(f=;yesbEAcR<g5=3szCf4(>hhM_0#guYc6Ab*JR=~8;~@1XA%
-z2FUxM=YDtElc<BK%yck7c0ivAQcu=GpCt^C_0Sh9J^5|uON0UP1?a1kp1d3SYGHuH
-zzQ)C^N>APceVZ^qz6d?`@Hyd=b<p<;17t1q7+W1ZiMEuAHcJM`PUu%FJ$WDW*xO77
-zNbJ8`yjkhV`=Kut21xV`iyOdtq@R2M`bJ@Zd>r=eN>4rreTOhWJ^=lQ(vuHCKPn86
-z%iw?JJn^4wfS%7^fB~`z_Uo0NM4ylv6b8r#p|4VU@?q$!g#q&W(AO(H`CaH6gaPs)
-z=zEl&Y=pj77$Bd3enjcXN1z`S2FM2JSEG?Jf5`7apDhfKPePxs^d$PW)B<6E{0{V6
-zl%9-09}))0r=f3DdU6}|5n+IQ82Ub?Cm(~J&mVvR@;T_ol%9MX`nWJaJ_h~j6cvB4
-z3HoedfP5DEe5EJ94?Ukt00SiMOE2D{^yCxJhlBz08R#38o_rGeh%i9nKH=g%koiYO
-zq3;(4$ad(*l%8ycJ}wN9k3yg6SM>*Mfu7GVfC2JH(63i|@+s(p!T?zZeVNje=)+UX
-zg#i+6aB+>&lNgIq!@>ZG`(TSZm7e?|^f6(8{4w+cN>Ba>`axlU{2uhl=!BVm5@SZH
-zUl<@ih4#VcIjARp3_YLo00ZQa(DOME>dB{}FA)aFqoA)<dh!|Q`5XxtAhV%wS9-D?
-z`VL`$JR14|kp7bxb5jR}0rD8=lNYM^gU><l7Y4{<q38a6+LO;i&wc%1fLsH8zS5H&
-z&=&{;WDfLYN>9E3eYr3|9tVAm(vvSj9~K74<DqX-dJ=Po)Tl5(=0e}2^kgUWy}|%_
-z0`y}_PreL2pL+lU<fozM^AJoQ`S;Lg2?OMb(DV5T>d9B2FAxUEwb1kV3+l-j^p(N@
-zc@p$|euH}QC(!e`4lqET3_YLwpq~6G^f6(8JO%n8r6*s7epnbF^Po?~AWeI+3;Hx+
-zfLsSXpEvmj=*ichFBAsIr%-?SybAT?KSIyvSik^z7xXnsPj*8e76!-`=$n+D{3qz6
-z!T^c;PKyVWp8RL%2ZaH0J>!o_1j8qP27Q_^Kw8k}D?Ql*J)ipl17r~TGNmW~1^RMf
-zfZPCmElB^#e}%qI7$7%7->UTF&!KM<2FOj&_bENu3w^&ZK;}a~uJq(~=sD>D1LT>|
-zuLc=D`3vZ?g#q#`=nIve+yQ-&FhG6=`U<5d`=GBB2FL>FYn7h-H|Xnx0rG6<Ta}*t
-zCG>5=0Qp(y`;?yi74-eW0C^7deD13s@hATs`gCD{d>-Y?=ftQd{{#A5VStQ4U#9fr
-zuc0p&2FM>kU!(No0Q7t=4GfT2Pg~ro^yGg+-zE%@FG1g<^yGg*-zyA|SVvntuJq(@
-zpy$IoV1UG&Z84uOV*JTL=(B_Y66;lqi<O>y9r_YsfGkA*Y*Bjh4d_F{0QouSo0Oh>
-z6Z)tyKz<(jE~O`jpzjt2$aA3|QhM^Y&<_g(WD)eqhe-U%-$Cye2FNc!zZzuv$lpVs
-zEew$7L7%Vm<S_IF!T@<b^ahUOl8wcFFc(Cy#u_jKJQmCXbHHry1TYso9?S!e0crO?
-z2%og!KkeU!Onw<M{TYKyUIIA_d<QaF3Yq@C3z@tWGS2b(K9jr*awWJ2GI=@VYS1u^
-zOtK7e7{v8^CV2(q1`yZjndFs_qafB5GRdnTw}Du<$Rx`lcYs(I$t16a90RfLl1Y9A
-zayN)|olNo?$h{!0?=#5?$bfSln+5WEH3;&$v=rp^X9zTr&k-;QjDbFI5KLzNLpdMJ
-z0vCWma3NR<E&@X!0$CgZ(FHAzfhe@agCMH>VtUH!s4S4zOF^)M;e+)IALMmT1myKh
-z4CHmoAjs<zMuyiRSs<@Bg5VPPTMF{}Aq4U|Ap$PL`54G~{~*ZuJrlusd=|+0dJyEi
-zycFd8I|Oo`9RWF?j)9yv4}zQ@8}noyoCR{e8w5G8Ed@D$4S}4eMnKL-V<6|9gCOUZ
-z%skE`vp~)lgCOUHr6A{jA&~RD2*~+d4Ez-H4?L3jmm>49EHE2#5Ih<z1&;wk;IUu?
-zTm#0y9B>dk4mA8SkI4daAqT+|z*3O&j}Ukw7y;LUF_80yL6GwU1BK3cKo*z>20@PN
-zr69-e5Xf;l0&+Z#fgE=SL5{BmDvL#XFi3lF1MR_$U<lj<M!<Y92A&BHf@gsSD%oei
-zEU*9!f@g!J;Ag=Qcn%l=IUdA7)P==^Ap3U%m6QE=7RdfO2(n);1=;_GK=!i{un_*l
-zz|Vn$Ap1uHm74uv7FYxZ!7qTNAp5Tn$bQP7RO_qr`IBmVVSGoET9f=qV`kj+C-s=U
-z_^vbS@jaFtPxdFZ&+C{6_bGKLI5R&!-=8!xe{_CI(!l&de0R+6oS&3bH@_ag$L7W7
-z;k<v)pOVzGuy<ifQupGX#VJXxX>DonA*~MIHECgd_buyR2H%#(m%{(09rzwgkEi>S
-zI@4q6DM?M~QT(nytl=<N9ae|$!R15C{Yl-+d+;4w-nBd>scm^XzH67)El)}s${5Z-
-zSQ$O|t~oq>cuG=ZW+XEuX*4hvNJ^^73TGh>S#4SVq)1j1z8kU{ai;f(z9UkS;;Y72
-z`I9<Ub>cg;ss`WPNA(<qP>$-tckNMi_#QrT<Vb%~+mY=@BE8w2+5V)iW4n(<Y>$oM
-zJ9KOfzWZ|ebKoYY9pClGH5>=q<LdC;bbR!9#3whBi(Eaa{v>}=|Js4IDM_)lU2F0C
-zqye1iJ*f}h9jA1jf_%&C%|onC9X}Oiacb|WDM?+YcH?*5srC5oTi3r1;jW9}yK8;-
-z`jn*3^|AHH!}T5b4qLTWN>a$GvHVH#_2baCpWbmgY)`L0JtZl8dM$o81|vblFxU`G
-zNgCNWx)CYe*tHSq+SrNTH5<eD?%vR|0cqLLj_;2A&V1x{etSOZNq#H7$MZvHqO9}d
-z_&t(83T^bP*0W%HR`{%xr13LD_#Qrc<ZQ(A?AY0e!`U799Xh)P-(3aW1^%Sgf;N1&
-zpVM&;%H^E4bC65tMDZOzXB=ln&l$t-;d4gtyXkY$&%yR{HJ?MC6pk0BBn=e}7a>+f
-zokfUMQ9FK*pBut=?A)$%5yNv^@!fV_`+11fd9CN6#LsKO_t<%HoEbT96u*bg8^-TQ
-zaZ@pD&kq$NE$7G2Pe~fQaOgtB>cWl-5vvQ^@H_s+@h>73UyR|q>5EZ(w_enC5n^>w
-z^djWsMG<_DUNnX?!xxR<_uxfC_}%!W$d_Py@%Y6^%f(|Cqg*bjy#%HF<-RYY?tQrt
-z-vjobjkwuOHuC3^j!RIEm&Go_@5?&y-E>(L-*uPQUyd4b`M~9<tC#oTclYHz_^vN&
-zC_~LJt1CmEmxb}&Th@m&-DN%a9V_d?ckLB*SD-Ci5xxRxEDPbg`-&c%iCxi!-yK(U
-z;&<fArYlpD8m?@_clgTMD^WVvbYBD8YwGab_m%#yAhus=#CPx2eODvgs~hm$Q{G#S
-z8dYA8@1CoAufp%E>aRi`UK76tZNFl$0(n@`QGq<HXv25^wFB3pM6PYW7A10RE57@#
-z>%R^;d0pFeNa=M^eD_}8cRkAP`qt|atLvNa-CfyJiTtT-szeMc8}S{wx#ninfvWK;
-z<aX6a6;e^%S&h0;U4!rLul0NlG5K0OzWct~|5doD9;rs?w+`G2|8MQXckI?KeAnOB
-za2v|ywlRDU-!_8p{@Vud9o^Ep1v&Qh@Yhj?w}kLLvSoA&^8faM+Yyu7oA5pSjgfC4
-z=HF<;_vqKh;HD;IhC?RGZL8U_6>QyVwvmln%?R06W470T(HgUrY^X6CYtXZf)|g|I
-zhil9c%7ZoL5ZU-GGx9B*um6_W@GZ!--!kjS#yiZ&9Xx-B*>DHX-(l8~-FKKhJRiHm
-z?4sOphuKMv-C@Rge&h~wl=9FW<}le1HXFlWUD&J-Lmv*CwUpb#W(V0CHrsf<DQre5
-z_lC_rvO8?{@O&(6c2OP)o1^4V*c|5hfv`D9Iee#CdnXvW)2z7@=i^~>oag&$&Hh@j
-zr`GHxn`+G{8Ll;J$)UT<;k)2I{B5)L+mK`5HoLwJx#QbrC*`(po9$%X-DdsWba%H|
-zdpG3J-DVBhdAAwk`S!cb4$7@}n{DLq-R20-58iDKQSQIn9H87(XGZHFkKSXB-2-{}
-z9&_X#$dP-@CNg}FSxbiQF>9!g-))Z5zWzS5;XbhTKC_M-z26+W9~{2l93eaIH#_gA
-z|Mg~+BWT?NX8i+@!w;CX4?qq*VAfFXt2g`W!C1Z7MR)ZNnhg&^u6@v~dk}KXgJzg=
-z{{!X#-FH1;cGG_BK{L+tBM+LRbT{;%IZV0ZL9>%=deDsWeBVQ6|3i>_9x{6$g533x
-z*-g3OA+wRJdB_ZtV-04!f%*osy8&`%gBhbd@{l=7yWWS*zK6l?hs~acp^rUmc9D_q
-znoZvY8@_8clAVoatP!kv#0)<I#vU=d$c{(MPO|S2v!CpF#Ox)9A2CPB!AH!YN8o?`
-z_soXxfenwDjgNtKkD2x4@HTT~8`!nY>?UisnRVM>HySa=B9MC{W?uwyd&KOZTo*Cx
-zDUUsB#vi5rQM2z+>K`>bDAzq|)>9t)o*Dlh*!h?lV>nHZo6*N1H$HAg9*122xY<Cq
-zHkoZrIN#J{Mw=ivHklE!{rhIe_i?`U`)1qsAvb;BjFPb@%&sSJzT*kA^9jgpPnhjw
-z_mgJNlQ<uH((HN?a>tWqC*^^tIT!`|qGmtY6*arb{$_Ka8SHH~`^Z?c+2yds>}r8L
-z&|(gfBQ54AIo@K1o&sy1GV933r_9Jx2&eriv%@*xYSy*ld`+tvCdZyK<J1rT*c|yW
-z<end!y+4NB`eU<=a@~*3ddkCX=13dlSex0^207AZHc_r=GsBbzeq;{*2y(}d%+4P{
-zZupVeNO|;!=GYG*_x#Z8{UPMGADZoy!#^}@DG&a@9Qpy|&L5buA3%=$z-*#C-fD&@
-z54M^^jAz5sX5-U1-}a2z{tV>kGiEC}^0YbnG&uCMIZS=Svu5M7kn5f`>&f1Bv#%ZO
-zZZ~_{p&xtBj6Vl?<T-Pcj6P?!l9A`krstsV=`edcAa`|`-DFLN879Y{H$xrJH@;{_
-zUW8o#qS-+9zF_vf0CvA%_K;mKncXjeoiCX&vh^jijU4PWhdROjPIG`9>onu!NT)eU
-zhF>;oUj{=jn>A$P%VvbEf7xsx+g>)?$>_^w>&uA8z{}>~%eYqU&B7!etiW{}kNzwy
-z(wHG*i<13Eh}??nG9ITYnfE_<+@RzkCAUMSe|@+P;?b$~O8&|xMPG-DWF9vvIiloS
-zAv1igGx7Mol8rQx|3%3`CGS=;*MWFsuM+#1k_(m0m$mSyRx;ORcr-y~d<PB{xmC%z
-zOGVc49bYbTyRu)ODYCZjUn%mivL9CRsB#}yvi83R=XsQ@R^cnTRLKQLiN0LPB}&%u
-z={iRAI{*5VT&dg#aS_bp79|%c`EQimdaCH}QgTem^-Atl@*_$fRPqx_9#!&>l+1@2
-zc<?!UmS4$6k@;Ld<r*bF&5L{Fcbk&ikS<5RN!&-WMQ&4a-O(ZsC^>|5(!D=l+&``4
-z)k^-Yl7mW4J67EDc@Z9`DVfiK@VF8(<5REXhn2op$-XsWKcwXAlpI&`zbiTQOz|&2
-zN8D#A`93ADRr2dfE>LnV%7y9KtmNC3T&ZN;K6|kUz~f(`XM6{h{7dD2RLNgEUi>S^
-zVgZl&x#B+Sb0Tx0koLJsUIv-r2bKIqrQfXNtxDgZ<ew|KRmmwQi2aC?`5ZX?%l^EC
-zcbSqamCWaJspr0F9(?YXGWSRGaGocI%ze;2_`EXXJEr7+hD`Ul=ZgMHEaFfe#UdvU
-z9sf)$a`Jdy>A4Sy$Dvs4p?mH(;&H8#xvz*vx01Pkh{v&56ry|X6XNl0E)pR=ol5=#
-z^+`}%;;4=PL)nMDMM{2K$=OPNPszDT{y@n^O5UU7N+tWS7)AfWN={L7M9GVk98>ba
-zl#@e7zmm^T@*7INSjm4-@-0e!SIJK*`A<szt&-=LO8RoJC`SL&m3*a=GnM>9B_E^Y
-zca@x{<g>7tM*Fjre2bEcmE5Z2%ar^ZC08nW1s36G{|zM<E4fz5k5ir(F&<X(E07n@
-z!&;b<yOq36$=j9ugp&V5$xkWyO(nM}c|^(2D%t7(;s1+DcKUC~uPE8+uOW9S`5oG0
-zEbUeD9wiTXWG=e%(E2Qo9Q4T59y#KXyFGH;BWGVWHM~-f9QMdjkKF5#;~qKd@~Qp@
-zm8|ol)T6KR$aNmM+anKq<g7AJcpkahBR6>DUXMKLk+ZK5|8@L}l&s6E%p-?9a)(DA
-z_Q?J#J@NO*r5?G#BX@Y@QIDK<)l~lrJaV~5j(FslM;`UaY2_aOJ#x86j(FslM;`Xb
-z{;Q|@pX-r}JaX70M?G?{M~-{stglQBuf!vVJaW_{_j=?}kDPYRRR425a*;=_^vDe!
-zIp&dvJ#t#b)bR2=a;ZlSd*n8c+^=Na9*k?J`k(HRb3JmAN3Qh9QIFj3k<+f58eXnP
-zF7e3K9y#KXyFK!#N6xr@YIu1bxx^z^d*q0cb$)ew^aCC_?vZmVr-onTk*hs&gGcW6
-z$ip5v>xQZR7kK1Kk6h=G+dOiwM;`UaX*WuEDY&i(q(qE7C7-6`ppvgwa)FW`RdSJ%
-zf2HISB`?5r3H>Wo^2tgrSMn7~u2k}qloy1Ikdl9{<gk**lw7A|A8z*1eS?w@Q*uPf
-zrz$zB<ZG4OrsPMJ+@a)OC^@F&-Ae9OayD)%GQ3_TpReS8CEu^)K_&mQl82SN>~ygo
-zRq`e!$CZ4mlKBz|9<M3cujJiIPE+#PXNZ3pN)9VIOUZoy1ml~n<Uc7nSIJpH(dQ|7
-zqmqM4u26D;k{?iVk&<^PxkSmwZ4m!Tm3*g?%auH&<Vq!fW}~>TR&q1sPaD`1_SoCb
-zh-Tt<8NbwV)h1_ugBFcWkNg_sD-Cms{c$e)8}jj<9GA?WtMN%wK2rX?M^AgL4=H;s
-zC$e|zX`iM151c9CYgyZ;D?Md~@7B{EmqpHzqwKXz_l$quJke98y<1Ovy}rcf-<f_b
-z)BSYmck5}d*Q5HBy_U5-_x1B27`|Iid%b>@e3pc-Wx8kh)%ftx_HI4x^?KLI%3jOb
-zKIT|Y+Pn3%*Xv`~Dtj$!`%(VDK`{PqJ?-^+8sB5U{L?bsPnUmgy%YWd`i}J(9lnya
-zeXFPZhFp5u>-D-TKO^C5S=+no8{_ZR(_XLdU8n4|oXFm-r@dYe{Hn6ovbHah<W1zC
-zTTgr4fVL@nEo=Lr$KI`{eNZLvpOn3pwLQ9N=b-#~mwU>z*XxtJl)aXzXZhvh!-F#I
-z-Fn)`RQP;f2+Lo~bWi&rK0GMX-mRy-UjHmm_FC5V^n-`Cck5}d*GsFEy_U6omSa6>
-zuk{hQ*E%}kI+k1B>5&(nJyp;5W4PTHd*rZ3=KBWR?)hE<x6Jn$xaBW;<gFh0X^%YS
-zku%Sk>fZ*B%=b*V!z=U1rZMyQatGX(!Hqs1fIQv!l7EP};Cnq-KeSB$S+>c_1Inx)
-zZavGF`wn@OD0?kydp-xngP^@zPkX(7{;;ywGTk$LZ~x%d)1L2R=kb`b*Rr<v#^0@{
-z{iw2!DSItz`(TpzPnq#|>uImo`w#z|<e!$cy*K`DJ?;6vbsnpfy_U7TH~wxt?emp=
-zp0d}nw$I`Z90cR<*3+KvS?6)5vez=*GylEeyY;j$SN0Dodo62w>{)aU$_(GFr@g*E
-zGVk+}e_Gb|-u!dxY0vkX^EgP^YgyZS<L}nfK26zYDtj$!dp=LcgEHgq*3(|!&)KT%
-zwXE%fG{&Lrwf=dy&vG>K^^QlT`!as1!#jV>K6h&SJ`wVC?R!h6c<>wO*}k<*ucs?t
-zx1Q+>Df=O1uVrmt;wfLZp7#3w)`>+DzLvGUw|w1t+Uxsarzv|aC$e|zX|L~}ZBq7H
-z*7n}{n_Ex&$}Gvhr<A>xwY|4~x%ITKQuaSq_FC5V-u!dxX|M11nO~6nn~+ucrAhQA
-z>X%zj`+-&BV1csNvJT&C@7B|PMA;vr?6s`zz3F%BY0vwZJeDhaEo*yk`rUfk>-(A4
-zD0?kydvE;RdfMyzpEoIcEhn;f>uFzpl*IowWv^vz?@hm3Px}gGzg5|5S=)Ql@7B{^
-z->>~QWv^vz?@hm3PkViT_dk`rmJ`{#^|T*4M$-RVWv^vz?@hm3Py1nI|KG}9%i7+X
-zez%_X`hN5o=Slt7vbOi8->s*;zJFby?6sW8-mRy7>2Z?&FDQF0YkP0{-Fn)WDf^3+
-zy_P5JJ^iO!PkX*Enny_4Yk9(6)D!LBt*3p3vcF5&Ygya#IddMw=Uwh8)1L1`=Fz3>
-zwM_kLe7xy*>uF!8?EgjCYgyZurqK7v@ZEaa>-`2v=S%r(S=)QpAKZG{>-`Cfl)aX<
-zy|@0j^|aUf8Pb)#mJ`{#^|aUfA3mY%wVcS_t*5=-FL9)@*K#6zx1RQTf5q|2UdxH>
-z-Fn*d{lYx>-Yw1_w5;vD<?q(hK3&;wQubQb_WZwfJSczO<(@L_`MzHs*C~4~Q$Jn(
-zbL(jzR`%7(Ud!6P&hdRRe7BzVeD5!hN0q&nwY@j}ZawWYmHiKuy_U7TH+;9A_I&>@
-zk6$Z$Eo*yk_-;Mz+m!upmA#g=eXghfaqDS6xIw~CE0*%tvbOhz@7B|v>!v(bD0?ky
-z`zldSl)qa~d%Yis@10}))3UZ-<FR+^X|MMW@%>h`*K#6zx1RQTztQPm6niae`#w+j
-zZoL!!CULO-LKVJ}wY@j~H7>mqzLM9JsPJ8S)_<?P-v31ZX|MM`WnLuqT22(cTTgqv
-zUn=!tvDdP;SC<D9<>%JZUhl6uUD<0nk-b|_d%Yj)24%11MD}hy?e+dGzW<8lujNGc
-zZawYwey@L2_F7J4@7B{^?+^PQWv^vz?_K|M>uIm|lO6dbiNBV$eY&Uqx%ITy`_JxC
-z_F7J4@7B{^?^k<Y*=sqGy<1Ovy}#{>%@ThtC$e|zX|MOg@jY)WKP@M+ck5}d_s<1v
-zvDb1Ud$*qUdcWPZ%3jNf?A?0WZ^nHG9(+%pQ~#8l$X>grp7we_-=Z&zy_OT%YyHJ=
-ze<arC8%r5Fp0!o-wo*rQ_OVg_gpzMo`lpoq4JEfJ`3@!P{Y!k`R+ce&{L~}A<B_v2
-znd<%=kIeLx@k<@v^^UK?eVJB*--JBfdPj}Q-<(p(FD>i*@{U(-J@Y%P>`ztpT25r|
-z*3-UL*}tspwVcS_t*3pRvi~P#uVrl?^cl`U`SULKlxeT`dw$_kNxzn<=Xl|r@4EH>
-zx4o;6k>t4QgNdE+kp!Crl9-qUY{EbGcF))DN(i}cZ@=ztch=i?vyN@io}KBL8}Cfd
-zxVz_W=l(!^MA#yLVhd1E{;-S?vIPi19FYW~NRU_x2q6f6AQ7P$AzLU43J`+$h{StU
-z^`@&{_k8WH&u4i@n%((L)qC~o)z_<6uWOK=;zK{I=n0Rb*VB>y8{n76S546qCVK8~
-z(bJKh;!kfokn$5I`cJd^>*+{O@v6@#dcs7{>#wIHJ;k^FrlKc2j$ThkdWwgAUeOaK
-zdcI!j=}7+=_)+ooilQe>^nAV0(~+LyZQoUw`XfyAe7(@qk)GmnA5rv#iT*($U1Bfm
-z=}1rUyw56n!bH#I*VB=n;(tG{=m`_O>Rvg-J6e9kNKf&?Usv>mF&+Cqr`OYwp5lw|
-zhRFu!Yr;g&^{1yJJ;fup6g}Z_^m;ndQ~dHL6+Pi`^m;ndQ@r!reJMX-qUZY8(~+Ly
-zqpv7>!bH#OPwD>#`4>RH^jc|}IAr*<4Byr=^Y1bIEW=-7_`O$6`g05q8U7-}|HtrV
-z+vN8Y!>Er*>(xI%erUqc>s7#6>lNO^jjv~)knKg7^!+xOoI|_=fAn;0uT4e&2}Mts
-z=pVdYG9Y?A9qI8NWPJUtq9;uBynH<!>3><#e?`#~Ci+;iAIYz$BYh6`W%#<|P}ZL?
-z(ev{4bfkZqqQ6Vg6DE2d-=U`?J>GMSuWdz7nCN-=dOFfCEBZ$jJz=8%^xGwW#5-Dk
-z#7IxiAN+=*CyeR$!kh2!^mL@B=M`R4^n{6?k9R#C>FN1~_jIKG2@^dZ?|M4Y)AJBL
-zMNfDfy`GNr^!&tMD0;%<==F4@r{^v1>q_|vkE7Sqk)EE<cv{gD9!IaIBmL-k4n<Fx
-z=(+wWeIqdEmm3WKKEq#S`0k!be}&=S28{OoXCH@71h3yy`16kon0ra#FDU${jQ$@P
-z#vlJ$kfh@8k1~9T;Q_;+WcXcAn*7=fe}Ul-g=T)#uRj0Y2Ke3Iu`sfqe@S5)?_X4y
-z?Db7xfcfb>`i~W+@%!%z7l966&p-i~|N8`jJ7T_5V)EBLrZAlk|GB~x?*P9QAn57*
-zy{a(96a1mVbbgwHw!`x1JaAWGIv@Kjh3UNLn+ntU$@(3Vp3W0G3X^~Rd4*{{{!4|)
-z|MxA0$se}>^BBrQ{?QGEX+8NFg~`ABqQZ3E@J|ZU`SNQD_ZOr>zpgNyAO5Gpbe{HY
-zh3S0h_IF5m6nXAF3QKMfPoXgFuND=i{oYS1O!N5#g=u}etT4s9;Qf?XfAa5MSD5^*
-zKc_JHKR>E4od^Az!sH)+PGRy_zo;;spZt-+be{7$g=zhNSz(H2`DcYGKIFd@rg)7z
-zzDvqa>*rkxQ#{0v0LC#zuSXevn&Foi#`}wO`rE$S#On<A82&iJUuO7!82-@rnEZc=
-z;innK`;Bz@cD~odFERWzhVOZ&ng1DvUt`#Pmzn<~41bE@Z!r90?>6Z-82(v?pJVv%
-z8U8PZEttr3eN-6!6^37C_|7{`dW+#l8GeD`R~f$ZE|cF!8NU1b&GaV2Pci%g!(U_g
-z$HB1C>;G|vKgaMR?=|zk%JBPtz)XLf;pZ6s6vJO-_?<s!^2;;)7{f;le~jT582&QD
-zx%Zjn-N$f+;X{Uhf#FXu{4&G;!SMUuZ<c?K;h$#s8pFTJ@Lx0hErx&M17>-TG5j>c
-zpJDhb4F4~~AGq7(zs>N^GyDe(zryhCKV<T|kKr|jKf>^f4F3tkf5z~?F#N#}n&sci
-zu*2|>;lE<|Um3ph9+UqT!&QbG41bK_=LLR{mb2X7G5l?Y@A+XYKgsVf++_F{8U9^{
-zza;Re_}t$x{0hV0WcVEmrataxxW@1i!%s2%>kR)6!=GVzA?Mv2+4<FQ*pGV`+p!zg
-zZOcFE*Mi38#q;ZS{%S3{x;_Z%al04TRzE!4?X`p053SAeB|m7zSFK_@X!f=&>+phQ
-z*;d03+t>WYMSloib-EWUw;h$Xg1C^cdhYHpDqR7vT-|Wn&W_u5`$K0NKF8}>at!*7
-zTI_FbJF7z=BqrBPHkqWhe-wwcdYn;*Lgd#&KTcO8s&!&jjRMpY#XpJkcGPYKYmI!V
-zWUtsueb5Tj1=K<XFLnJWs<r%0%i2<^Tmh1EgJ#nYK{J}JJZH;oNo8$rxUI|@=bP=I
-z)@k3!P**?EdM0V10UCk!ch=mE)ot54OoUt?H8QkBZNswKAZ{t>1$7_5695XeS_3{F
-z;>Wnwf{z{i*c-&~vAYS)Z`1^u{UP&>U0`<u{<`grZ1McyRK&Bbdb@ws4=+RCKrul$
-zC30HEU64_|QN9Xx*N3vD!vS)x)2ko4pnRwVb=0gLUAP9LqdBBrQSJ{8I_>)8PGJ?G
-zSETePdxUc#Q>NvXANZl{Zd8`msza#KXdHT(999DV`Ys8V!NMwl=v&yhIxA>tXFanK
-z^UKI^GzJvM^|04<eZOIJxncz0T%4VCVf%c^&bNd9U^J%JsMnUE8^ZVN){u2VY}AcR
-zNsI2LW1k|wGVsfn%BRe+uv|Q4j-bO+<hX>RV#mKebgxYq4<eU4=$f;;)}yle=5jOi
-z)013gP84Fb*B@$9c<!~aS=WKFA<EdC(}((UJ7~vZ<w`Wb*1s(7D=6}wANlcAK}6R5
-zupOH+>m6OLt1v!t9`<VS7y6?34?Rfyhj!0-#sZM@j0qRu$Q;1Wqjfds=}QhE)h;<N
-zJ^kc7W15r@n?`;@&C5^FXXFQ=1o;uQtv(I9@`I>%&O;@Gb&&HW%`P&PO=dYyTb^@X
-zVrk?&V~!SPiM8Gv1h4?22~_aB^RN`UaW90$d$n{hjQyzG5vGu{>Q>#B2Wqc3>(eO9
-zo*;FvxvguhX_=QiS%TZ1C2z0UgdQ|Y-tAhd<kD&{h}*3}ZxEfsy6u8dcfB27y%I#V
-zroU<ppKN#@zTN$c53gP9tY3bD^C+T*s&;X&7PS05AM6?EQT}SWFqN_7?fLx>dVLTJ
-zC0BN`Ij+>9#|WYFaj#T|Mv2X}Y-C7kEhfuw9P8ZjZrF=^^<Kwuwo}bR*=$~a$JyV_
-z7Dq_AGBTZQYjqG_^M%1zS#rVpYX_~0Z6(WI)lw_|y5+1{Wx2qvTUFVnb8)hl!rFCH
-zYj&#Ar^DCTIP&6)ur1I=0aw!Ajn1G6<M7^Su3DhM8`R=K=ogy3P%l9?2NvvHur7>R
-z4$2XB)m)`G8^iiBgp=KMT1hJ-GpTBq+ffy4@CLTMsFjD+au1HYC%ss&ot?)KLfvui
-zhV#V5JukGp*(#?Od3xPoGS}1X1X@{hYk50h-7LQeYbI?`cgu1rw+jbiBc*m*Lw6qx
-zT{%-}Eozc3(|T4u-){L){LqczG?F9iS!uS?=965ib}5-Y#pE?SI-<FgSH&PqsU{D}
-zux=lZZ$g;K7wmxJ@l6Ob_zt^WKMutfr)mrUK7r7btT&EpP|u@9ov;WCcg<OaspJ?_
-zSl*C<S1@11uID$LL3|a~u6A9lUaP%^U*)}YLe}BY#+<5|%nX*grETe3XslUj#pX*Y
-zH7)jb-|UbDa0yfj;1sA7dwoCfN`na2G`m>SDhya#8Pqbmw&MD=j^8-fJF0q)W1D(B
-zf?0jb+A?PKN5+;M0Vh?m^gQtL9lf-pbaBpFX$L(PV4J}_d{GxSH4#6#rzYaD@+e-i
-zTV*VbY-&%hi-}SdE8eZr8Q7GUWYE-1?u{5sbiInQMYt)D$pRfX$0SuPqg*T~12S`3
-zq<ZfNRd0?!rYWbpBXys$Br=8NS}UTjuUeLy6}!}r{6V7!7HFf_1qX|8Qracy55QS?
-z6|F}YDl4NAzF}3-tVP?_^3dOAs4-<1?m=GXBI`g%D%Nq<eWY+pYWD<&0=g?etZi`8
-zgzZ|Vh|WjHnL4l&X~AriR(Q)4(^M+R*jZ1>0$ZkP0la+RS3TNDjZT;-xwTZpoorPt
-zt)l0PUBE=6MigxhYRP7_%ucKCkePatoX@Pv!2;Wj1N6d;+7`Dztmc$elfYV4i+z=s
-zMwwR*sJBeuh)UGWko2re>_F!!^->z|(xdO$_{Z;IIiI!4n04kVW9F$<#!RzSS>zm3
-zWlYPeviLru%3x{CT4l^SbCogk)GA}9*{UpZj;S)HWmQ>x&#Jt<6~Ivi?2TX#2@P(~
-zZJv!`z{^jvp(}M34Ks>F(W}<^al?txOw>2aJ6-LZU@bkySe7YD;FC;3E&RjtDM^yd
-zsU=A?qnc#qdGw?xCMrti8LugoKDOJgKzBMpr`5=%46a+Q^}!5nfJ4_6YlG|V;0ojJ
-z>sCu@r6v!KnQd(;^jqN3iy|cGbbN8dS!q@RzY5#M4QVmC`=W%%wmla%GC^x&5J%Nw
-zE9_kdDcV8`VBo>|UJ!eO0GA*i1jH@>jX1K)c-mAErw~Bz*Sgw1KeCs+S`_&qIu_S!
-z?GB7}&nq_D9lzLV2Y#v9skNf0wBv(IvI3{HF1p9+QVuvxb)8Lj5S8&j6;4;BJ2}c1
-zyu^X$gkfz+u1eXbqkQ?i->eNfvE&29e%SAI#MY%MD?2euMx7$*A&W|DVb}}hCV~!_
-zRH-GYpq0q)*WhFdojp))7tSo<^KjU2crH{A)aiNktA|m1=rwBL^)~b^FS_1t#@>2m
-zZ*|SPRB_IG_sXwUd)+=rebDZ-;~~@;rb_fPf=hV<N$4kDtO*&<Pb>U<JA%UNS10h8
-zsi3V29J)_nQaN}6JLWYXoNHsN_3$pFcKvQ0{pnI&wGQ+|*nJsTGNZ42Y^*)M<JTf^
-zuS>F)A738!{c~WL1})gX?bN#dR)8G}y75ezwt{UxuHl{=d#lcPza0m#ExlYj=#0J&
-z&Enx)zJ_fsg^4=7>kigK|KdFC2DPsS0T}$CA-^H|UaoWD@>apKa8}Ug1i1;a%3A>r
-ztaDa%2s_(-^xZUzLBoS0v+~>4rCQkXT{xqKIbkM>lq-8CGO)yt>h9&e8#HQ`);fL{
-zTnc-!aI8A3-sM&aWNo3WSjQz*M>BGxV4U0-$EtIk<kMafC$D23m7`+m)d-Z-%OEvM
-zzwE(bRHnvL`rEHSpU%qa)J>QEeg{T~>N)KoifiDIfewfh19U4NyEUFSYaKhAFHGj9
-zU%j$lf&Qv{wv+wn$g!|r!KpwM-w%5@YQ2Nrk>Buo{o0cQA5PBNQH)+9@Mb{mDQ^QD
-zjbU#%DKBcwR+=lycGuiwnWqk#gVk-JY?6o6y3uD&bbOv3V($LKYt1X3D6a_h#B$3@
-z_OimZrM`d<GKWoB;KS&fycD|Z73f2eKEQ#d*(La~T*~JP0Rkm39y-G#H^4{}Pr6`Z
-zIKLXkIJm5GL2qJnJGbjNYg2c>=a!a69(}R-9WL!j3&W$~{LqIXK`00;4DsJ_64O$c
-z-=4E>ZCX{7=t2S32I~>4A`&h)?I5V*NV+BKo;dT4Rd;DiW>sFM+~T#rIW2z~PQP!(
-zeh){S@?aHxVlbd)>i6W_$Y}HGE#BJ4t}l8v-b(dFx5m`^CTkg+3LQV?Rl`MIpQaNE
-zIZez!Lj4Zx2Xm5#Z6f1NezqC23dhfMu8GWIUe6R+jdWwB7BxI}jMn(28mAPaAf=(3
-zRTK=0n^hFF(9I}nhPbvln&SlA;8(;_t$PA?_UW?ApDw$Cv^oo5L8dDG#>BMG(a84A
-zj#wY<&uB+kQbu`6>Mxm<+2O6Ts#hz^*_JVjj-49iM3)pc=>*JiaArbQ8|viBJm{W(
-z2k0EY<_jJZNVa3bxd7Y7N&7Kl1)6Z0?)CR82j+S;B{z6F^wn*;GSHwHuZ;P4L1gHu
-z@JiM<xh9{Me3KeJYrVYbLrNbP(&0qAVVsXrK@wA(K6MyqDOZHX@OWcJ7h{I8J5LWh
-zb=FCTJXO}&{quDyLYR1R1e|IK=1e%1HH?oAJe`%hw3>%^0p3M;m*8E7_Y%C9;k^Qm
-z)?xRc2ma0la8P+3IOaDNCLAg7{9b=S9RfhetjWrA?1B?RvV8uFC%dhMq(i6tYZG&4
-z$K7fkFit%bb=%MioY2h|l2wQEf!ZcAPng+Lx;TyiIMZ_hj>88B)k*pA5j35j4BeQZ
-z%XC!?lG$o+kjz%m5y=Val#q(iK3yA=yIYDKxr#%-sZJ^J8HETA4W&OcPwrH74hu&w
-z`PuX2Y0XofJmy*3^wvW-*|Bp?c(U^Wf3{OBICmSxy2E3lU^9(7nM)3>W~Y%SZnNiK
-z?deB(v(wSR-Ru-_x;A@eah^AO_Hk#JDGpf%MCt_O5}J<_rfZzex6g}A@~GD96O^+u
-zPSWRM`CT%#rKV%I#j{MEgVQ9en`gN}M12xD5{mK89!8>E8PzNgPDWOoW@gMfZb!qo
-z&b@hJ^b@9vVX`u*R!vkjBU$z~ii<ElUYPpNJOzs_3-3SE<rQSJ$vZwOTd7PKmh+2{
-z*rPnedY`Loq6oYn&)Iq@@|m<E7rIG(#>kP`N=A-MC602WgyibZ$SG}Qo^f*5NXj`5
-z^?X+JT#byZlRi7mK%bj+(icyab)rsv@BTU!F~{EMQf~1I1WHAV;UIuV+ZV6*!o$T@
-z?|yMHK<|DTE0q31CLgxr#Rm=s?M`D6kAVF}5%bjb8yFuDJrKZ!77hPsQ8#W>b`>3y
-zl_YJP=>DJ=c59u*TG%ZY&3wW->h>A~2zNQ5^lonu*8RxfznH6m@S>2DvcEaXL2-Mj
-zhl}~)gMACdu%sT0P77;1Ieq+q8+=#-18q)pbq1RLXR%Kwy~X4#_DO#d`;Cr$VqT<M
-z$00?#-;7N;C8a}FlaSEV2JdV$omSUdXEW`~d!pV<%Q=Y*OM2FQAE~8s-b;yO#3DrU
-zPQKfNmveeI4WR%c+!6&yT_3{BwNH9wl5rnNio2~PpZaZLSW|QvW?X$@1cunJ*ZozA
-z|6m43k_fdm4;PHngQ+acL)NL;h3g8huX!_#P9ZN0O>y}T?@hSzI(8h4^e~gBIV;%W
-zMC|pwCObsMhv2a7%xI;Pg++<lkl!2wmhq+}*j%T}QLe<3>5bx?G0YiD0uMoUNsw@|
-zlIRFPgxW(%(BRo6LBh#OGQ+vWMNi@uC*DvZ@CZ`0+qmF)AMB{=HYZLn^9@(X1FjKE
-z*KdYcC)u5;U1pCz$1>F&Rhe>&wA3YDLQ-*^6(?GzB=ZVE{C0G^V7h{K!N`!Nm3M4q
-z7M6W88uF9Zab*&XyCY4DZa9m@Pp$`hW1d4ei^Uh$e9aS$o;W^*S281LnLUM}B93mk
-zet+!Pbo3}^RQoIzf85o7Z_L;}cKhOi<<#~~3~@FfvW{mvxE^Iuj6a@bB$JM3GqU1&
-zO4jjgMpmrt3|VKXWmatA$&AhkHZEUuPil3}S=33)&N+)ZiQPFzQ8So;H;3C>F&5vZ
-zup^tcST^lT#)Kw~nNh@|oHYksntu*rB$MW#jI874pp2~J=AcWttA~x|o64Jj^5WT@
-ze)}(<s&0C`wRtmfN}M<5XAI~NPX5pESDZbH;<BH9IC~TYVlmGiMZs$`^#HBxu%?bV
-z;m;Z!q=&PlqPOPaiR%T<?BgD5$ubvj`qVhVq%l3`>A33&8l4coeHIH}kzLH}o@e2o
-zc(;|f5myauw4de-c*GGW$g*byW_eBMzxwPlUzi~oiDL%+Tp}cUPBkgbCrXNZoK~)O
-zYxOskk%{txkvaNN2X4{L_?sHZ?@*)|P*Tb-umAo7r?Rai)gVm&)COH3j@PB)L|~p&
-z*>n9yljd2J=U}JyydbS$nf?*Ed?j9;>BA{m4E0s#?BPO~wQOZ2oT_4y2|(<MZ;6Ks
-zd6-t}2|F3?J;8uT8zKe?&i~UNtTIT@p*;slqE=eSr&&s)(h^e9BGU_<FsML9oE>f@
-t>HaS|s1)HEy7yHIa~9v9T*0sFLadR~M&VqmxM`G}I_tMwe1A^9{vT*&P7weA
+literal 208856
+zcmeFa34B!5`TsuwR1hR_#|0e~HHgs(o8X!u2}~q`NZ710laNeEFq>H<Sh2B)%@|W-
+zU5ZuP)K;Zd+xTszv2_WH5|?URs#L7Tr7Fe+tqU$S|Ig=~=gizWnMqjm`+fcXFRo7B
+z^W5h=XW#F+!xP{B^<kIGH7LR5+6Nr$awWN33Cq&(eFW}}03o;F^Q+Cgr{q0<_T<2x
+z9N3csdvah;4(!Q+Jvp!^2lnK^o*dYd1AB5{PY&$Kf&Zs+;F+&J_!bNQ1T6erSns<I
+z$ESU7{Bh%h>o9yusEl(ZU#%6}X@kqi+)UtSU*5zO2-F7aYxQ?6&&^yoHzJ#FtwH^b
+z{tdxb_jNAUczzk;YS0?}HxMW*tqoQel%-BqHv)lZ|BOG_%~03sGVPy;u94=8Fc2uL
+zsjV)pSQ3__{cDqWb&7tC<=>z_{?#liEv}sus9jzatPU32@vAS^2J6JGs$A!P+yCe?
+zu)IV56;@W%L^9C!?{tZ{iO2W~?Vs(BkpqEXNuap8pj^^r`<G@i;y`UN1^%%bH2lfs
+zdVv+iy86a1!#md-ag=tc{+=ecrd*-@bFX)~hDMx)zXbx7i<cG#O3MqD1WPN5D+7UO
+z{~E+UV_OgZOxnYqIKBh|MFq75ksG#ujpCnb1aQ_M@ykd2+!3?zH>S6|s-UnoP*<_6
+zw4x{w$j%5W@ul&HT56Sw*6?GU-uw+NSDjWxMVG=Td^T@F{vxAC?Umq4u14L*JvTlH
+z__$od@!3y(S4}cu;^48k!#X|`c3of!KFRpdzZ6xz%POlca-~n76|7a?aGw|5x$&{x
+zRhBO<tw5cK=TBvIaC&831v0a=5>=u<cX`3;OG*oaHE<Q*UG?&++RB-w;fft6+>Fwi
+zi@eo~OKYno;5hE0;%35i<BOHftl1JK{qgkGXIB;$lzHoFOM(@(rG+N3a7Xv<zV7pa
+zg>}`Xwab;B<;e0%DPtYR7k<Zw;pqFSZ%Ahasx4hyik@tFdSwNCs18;XE~j(LA8}tD
+zRQFlFQT|wEV(i_~?lKChQB$eJWzymB2YHP66qdx(N9An{`*5Dd@qhN>rNP45(o2Hr
+z5`H9~RQeX?LJ`B?fHQBXx6&WTQyq71btNiWO{5D~>4^7do-g!o-^%yhiOHEs*-i7@
+zzNSo%FO)H6RCZ|Yn54x0hm3ibroNRM-HSFP9_`u{_lvgDi{iwi(KFEAyTCi&JI^~e
+z&v(W9+)U32J(UyM<O}7r`$F?Ne4+njg}zPg)!~LRSNodMw);YvEnu2NrX$g}vU{6v
+z>_%Vcj-kE1y<yj@Jdnho)z{=p^MyKN*d)<aEKRU2;*~G#)v7f8wNLO_p?_y5{3ko~
+zg)j7~3MMP`m@o8vPQo|Yq2BD!+j4JXR_LYdP+g}lw5TgPbbkqaQ#Q9PRPoTJ*-ev}
+zO}?gs6`EIcW{1kxWQX3(4t=it$qof^YXy9`BVYOOPIl;_T=nf+<v{)Mh1UCEi*js(
+zp)YjfD7eT>eM`K!V+zEaRc|G(dKg`&uW1EJe9<UhQ(dwzLHm*wVsvq*9omk_-N&**
+z|G=FjU&7ZWwI~%`WKFl}9DNODZN8=(btz=F_U0xr-AD*y?N)JpC|RMd5m^95Lw4vx
+z6SsP$VX~^!Hyt5V&!N7i{dBG%6Ps^T9yQ(1lFtrp^Mzi^3L(L_F{N3de`YtSMCR%2
+zSh+C?$<1zhh;gd(B3}^YOy&=2T4q<+<9UeX7l{6vtk7m<$xOQPC+HXSeN@BDmfqZ<
+zzUH$S6XoRLG<^H(KKSDcZPLMoHY6tRHDj^MmAHRel5bOHCzLK<JOAS9W{}y<<(-eX
+zA!&=|y}A)IAD=$)YVZwv%=gGqT2OA4Gs!+@=o0nproHIc*Zh#q-w#m(lu2R|lc|-V
+z^eKt^r@MWB)&9C(f7p$04{%nhvad_WrD+8!&9_J?N)CCxVvVoqe%%aI6HqrFV)e!S
+zg@9N+l&^2)I&QHn;fe)m{BA_{HfSOAnqqe79mT(~`$c%Da&;ZzVzaL~xcLI_h2BM8
+zzc;XGLssZfU+CGK&^K_0E~?A7?%lIfxA>Y59t~q(;gBEu61sYk!JSZe64!3-IS_3J
+z-`yEw-%V_If&mn6M$OF*y_XewMg`JyVpdb#sH|~yNr?@=hXaQy3#}q++#)D$P*KaA
+z;tQcqWDN<|1eIHFfB(6a9r_5RqGFu7W$Qn_?d?q*&i{PPs>k^2A&8;3Jx#^)p()7l
+z2bi78J)9lwdLI_s@i_vj;rJAvl6dr$aDhI#CAvRe`F^r5^oeimSH4x~AD{IlW<2A&
+z;>%vROuTj(vpMu_W@-nj_0zOA)w?n0MYvDAk|BEkM$IGqqbfZre4F{w;eCMjy$|uP
+za_3bJy{hgjSKbGe3sp_CL-X3b>YH!XbBR~}1se8jI$di~x6%7#B(4oUp13yi34E!0
+z5`R`amAH1%-|?mV>BO};&*H{&5Eea;Kl5I|pUi*w*1bLyV@;cH-8)HH>)srdweAgf
+z*1GOwD0804TKD>ttabnP_}0CdoVD&9DBd3BTh|STZw-aM3x*w6=e*dHl9~EkX6lyI
+zUgQQ+sQz|jraqpT`a$ZJ%v5x^pQl28EA=@HY3<p=zRn)jlQZmX-|$Qb+kC?|XAkSl
+z8P=6Od{LWk_==9~VXtKm+myKWS>L)hJicLHVYp3pRQ<%^7(8`}sq(_;nU|}_N#EG7
+zSyqV|ugSpGROLzhOYTI|A+gGaUPaqc+2&idrG7HTC~>Pgf$08gQyOQ{DCmW#?VlhX
+zLoZ+h#MqCT6g7V5g*%fD#GrOjR_F_i+lUpSR69GWqgwg($jiOHE51hE`_YPpI~37%
+zZ$>(+w4QTPxAdHiq?l&l3vFNz@K<=q%jG*}ea}%b^h^pa^r`E8A#^6vl|&jqpZf31
+z3VogxLeHfK;}C~4=|VYhtXPfltQFO8wa(9`QNAYhl)5+aHShON-4|WqOXy@@v>E+R
+z5-LashNY}^TSsMuUd~$go;xeFC2L(za#rY-taa~uvO@pLTKB<}tWZ~$a*ax`b(Amk
+zqHo=YZXZVCbswQovb#gC*3r1AvvI}a7_;&1iHydaCo>x7J(bajD&H7<I-{}tnZ|it
+zjdjmvG-f{6nDcyEW8DjBjVu1)Yd$jBw{io9I1HG2Ho>N}^>buScHx`8bzi%)$G(|(
+z%>j&lyUx_!bC9dr03*LjuGFE9#4CRZL)4?3&`0WC*4T}S4KLwdPQu$cq5p1Og|E^6
+zG!-WKnl3<{VgzjeYLV+<zp_KG`^K(IY~Y4UR>ITp4pF;!a?i<jw__y+eN)fLXm@ly
+zG;uhh20_Po>SkYJ_GZk~a#nqwm6(Acz?!gy3sg-fUPiU|MKwS6w#6+T^r0`}a|$x(
+zNBATjoz`bQ%U&!y^kg<Vg{;uiX#8DSq0h1~XgQ`0YJM7XG8<eInSQb(*E89;(@)HP
+zIr2tqINFMh9;IW=n1ids2AK^qSH?u4uhXp1J2?se#u#m;Xle+ahhcn0S60He;hGd$
+zwUFT=t<bc^m>=p=z{FHqRr88=Ok^?D*bbwX$mBHGs%EDDRWs8?qq3Xok}yN$q@d9k
+zs_V!O-CK`<FdS+R?Flm+X6klnPs%Z)ebLt>(L_6L!o&})GP{Wr?2q7oTXxfmhV0N+
+zXjq-Sc?k8R)X)FQQ8YXBWpCaT%)XLU$aioygeg2HlK>|?s5|Yx=4Pd6x}W92N`z?w
+zW)m_u%L%Q^ZVI--^On4*X=&n>r?JIhqNP*hs3h^`mOTr?b4xw0s=tUSx*MdZxxD=m
+zHze_IfVpM6a)#6~_R&>T&9@_SOPy}#+!DFClXJ_}G9N@qlps7k#YF#Fhgz7~sVA2#
+zV3xOzf2?UD3ax8vE3z#o^jSFPlyfdy*1dOj>gVW)Utzu$9(0{A;fdZiP>ASL(S3g0
+zbF4444&UAEVXjqfKJFRmYpNRM8&`$N-sQSD(C=oh!8{s<%4dlU=AbWPU`5|7H!@pU
+zfiZ(NZNWH<j0lA)kRf_RfPL1w4?Qq2eq<)D{k$hPyQv1X{UQt%VMWf^51CTbo6d`;
+zBo5EQAg;!PumkVdR}&k!)s<8DIg${uWFIJ&$e(0H4GpQ4qdDrIFZ53x$0jpr*ZoXn
+ze!n7qF?oCEjv4A}dMLV(P<zd|?C4lAHE&W&Jrp`yiwSihzMKAp17!3hpB=3|u{{)N
+zL_%7fv)Yyv^utr}$-(CWeD1`j8=r^qaUlpZU-F?XVxe&6pxVREOsLCn4oX<5f1!3J
+zIH%%#>T6porTMCw1}!qqH$<in#Vxs}6|Cy09d!N%Uz1uLN=GO5s+pXR-4o28@_bGE
+z_*Qk)54r#|7%Ze8^R4^V?fc?YU*UFN!fUC|r9Li3gD-%A9$(a4&m<(FcG#JN>fG8@
+zJ5tIELp8j6O~+HENq^m-<~KTRj=lvOBj|ZilOF3m50jV8;@E`eL%-ZKYkN~x?icI0
+zV_2J%xc2ep^OC-J_LygVgJICgt)R$!)Yr6Zl&@*}_RrJi4654)BgxQ3nEW)IBl|w#
+z)du}P4;iMH@~a+)+h+B>_t}N#Z_xWgzO%TE>ub&)GphPf-xXUaT{+B`qV6i)vaOgN
+zTsdq*i@I2L@%NY1dgf~x?y#{TqaFI3n4?`}Tx=JY9kE@$jV@l50Qw*)uV?j)?QASa
+zH?qPOp7}q%gqKo3?|sJ?dIH@NdY@0&`>e-z_t^D`4Xc%_Pn^BaPk4*vg4t?LC;A}0
+zEXO!$!oh4vg@?T*wNLX8OoGsPwz2bExxuX_^zb1&gg$Spxa67@>B;QS9c~vyy@+y*
+z>@k{Qamx(UtUP>{;8TZ>sUQ92cRd#Xp%o30tXwTw*%~V=eW74u#3_2a`t4awv(sYi
+z&0(u8#$DLA_?m0bU+WD8z5nJ5tx_|g(2c66a`f2NltK2H-ZfJYOh0Nzn@tHvXV#8R
+z+_iOIcIBZ(m@5QZbl&-z=5=8vv&P%Iz?~ENccdzC)~*JkgL`yk_$w+yb`$4YiyE<n
+zXwM0~6SrpE*SBW0;#N**V>Xk*%F%(!p$ies7h{8|7g$S3sehdn+Jt#F6QQ>(xTTYY
+zZCq7HRP?_xb%b@UsSXt*bB(Ses4jJFIyFt)OO#C+HRIO1by)Gn=(&$}rJ$Zn#U}@!
+z3-B4JeNNH!r6b%%H%WDgGb8<XtkTYG!!X?L9GR_h=3FzXkPnYn$UW0lve{Q){{vH6
+z-K4k^D%)y$H%4YGjyeJ#nTg80Pwqsm-}`Gn3w@y{QEXYEPq7LOw~WWI%G~a2IyWsw
+z6UYj^9pkPq)Q!b{?WNc>?n0ey)f1XJq+(usR`W79ic%7a8udK1m>JAl-Cq`>%5QVF
+zlW~zO><w=SZ`y$Iw|8q99y9qiZNS&wt@-@URuf`PT7+p8XG>@~=vy<}dvo2`F3D0m
+zK&ay#zLhJwT(yVitoq>cgE8o1o$+5YTTm7HMR<dlaCVJpgkIlCMb#_z<`qcEdeaWr
+zpfep#9ba{&mq-jXi9wjG?^5|UZTK&fa2pyvY6ODr(jJ%vY<8%}x2^|${$8uuHx!Oo
+z?MuK^e?@2S>!@%!XnR<-V`FJs50(&EMs-7WkKLZwun5kf&Mw^6a|oEzR6Ax=&bV4U
+zacRhaN;%dIEo<esX*r>9>1o}uS8l0Y((rXc;;QSBSK?j9*zUxJ{Z;Urd-5EX%s!Jv
+z_`ZhCSZ6s?YjPC{a;EniruSauJ2y`;YHfxsst*>;jxi-{?hK@7P8QRVrPI*>Pp}Br
+zvvf>9ISbcSuIWM~7A})iG-Q)sMfO9}k7bYj4^v!~)+geT*g6ssZz8GJ?RBV=tMK_1
+zKHLj+&ff;=pGtIl#PYLq2UqcEkIv2vGp#0Xny#WN9nY=UJQJ_HN#%5TBN_;rDf_XU
+zj;!X|F=(H9XIw40**;MO^U!u8ix0btLl#H1&vT6z=%XG+^>CT>Eb0KJ0;rH5nPv+Y
+zI)a-zkUhOy4`*%K)Pb+PTSwx%+TLu3tH`1lV_*lD15;2yZCql6zM|-Mv}Cp<ZX+*h
+z!6JTj?NO*^jlNZA`HQ;Hw&iIPQr3=DQO^+GM&F)hMsg@R+5d)<-n0lk{B0c2(fk{9
+zFQQ_tqi!A$p{_RHuZR67vO*nMTzZ%5=Imvs&dx_$M81Z*beSTpMpRqGTh$%tUfr9x
+zcH_$K1Z&`n)Fv}O+S&Pbf8zn_-#jE1k3|3LtW|s>x=N)o=1kVqKxAH{jHfMereABa
+z6M7s~0XwT%p%-K;z$eclbybsGdkpoAn{wzkFpp6;F&ovL5qiS?u3~>*s202^d-T)6
+zHmnA)$k>^!&}~`D^~ZWE^b@`Kabrg`S?`E?(h}G9?%ZBzV<xsj>#!9%@l@Z+$M6^t
+z`=1}E=7*i7!Z$HusBO@x*am%&^}n6fAJ;kD5k3Z~mR%=2jg)PXY`uCxJ5$}`Cs<~8
+zWQRV+Ala+NBAsD)0LlEtn9@@i@zfXk*mul2Hur3`HJUz3S9CnelodtHaIlc)$Qd&f
+zRk!t^(KFWGEM;=BLyF#5?Q-Slf<sjGki1zb*tePz<z72BYFNiOC)BG)sSp^kea)Gj
+zso2Ps=_ZyGssXEFW-Vwz&PpvXrO$zId(RQ5J{$!z#%`-RKf7>y&%QZLmygOBcX?7(
+zHu{nV1k0_8@HT}Sw@``I!&k?23vSs=WuT5R7aiWxgu(j+bZ9@r=No*MBPmzm^K*QD
+zjgM)s`aD7&o-=z;TQQw})MvJ~_ykoiS3`XGgWXNk`RrzPd8q!6Ngshuuxh9@5AG2`
+zsidsXA`F3bs4qdTu{|*!K<vQyv#0&<Y5!<VF7`8f+P|5ze249S&-mNtQRJTSm#2>U
+zj`Mrk-=6ljXa3u_U2uC~&-@oNL@smwUz`8#8UOZ-e|y%S|99)p{@UNdka>KG{Q>Ub
+zVB<&a>BQJlbRO(kBTlhh(DzX%o|;9@x#L7)Qx%@NO^@ZHc`k!MJF}be;VffJEO%Xz
+z&8h6B5;)6@;p&Z*8+uoMJtXlb7jS>2c`qK~kUjI>*Ri>lncM73!16iu^Of6^64O7<
+zYFgpLR*f7T2yMW?D~oJy;;9|SdG4*>aA}0CMR+is9z?7!kG95!0iL8re8Bd`ycTco
+zeD_u!OWgr;Y`a+I?KJOM!SfY6V2@1$%N`F7VSg5EGsZ;6{jxDu<m<YklaI)EsvXz9
+zd*8^~ZftL4nUg^cS;O$OP902;Ei2yxe4i0l*Ta03>aW<cb1ii(&0jib>7hD<@SqTz
+z=SRCrv2PNDXIsJJL7uaS?0D+)!?Ejc-pWnAD|=De=b)IetA$vtR0Te<-IwrK@7ulv
+zJYRds7kXN@O7OJu#qa|!9HfxPIdY!jV8(XqKk#Q)>~7mNyPlF=2&`wqE*Pmiz_t<U
+zwJ-EC&M2uH;r*grEzy!IkZ`L|i(9Tj8S<Rk=ioSyXJ(w|IbxTmeqU!ha}saq-~pwh
+zXIixlUc_(s>V1rG*_z{w?8(|=cTeg(TEu_{dUSubis#tl*eryrhz%1cHtLjK%x>@w
+zo<ob+Bt>k7>aQ_+u{*dW8n!VfDD{DZn1MJ>IIMC<LKqb{1ZO|a{+k&Ucl$mZlU2zP
+zzj@#)b}ofGew>uhr!8j0NMpFCE*+wJ>OT<r>1OZic=(BitM>dq!NG?lZ2V$dbTdzC
+z>b@gtuQ<F>Y@QwSbQ)e{;t4hNeg<dDw=4hUket4aCy(2<uH>_XrrUf>4j<RxWs4ir
+zRNDCDI7#00!LtWEXf%7#_Et4c19Gbx$1_X})H@`L5CuLT-7XXM*LdhuKep)Y*0<G@
+z+pSll(?V=<Y6EX!AOhHqZBnI;2q12(4M=^Al;a#;pTr}ttZ;u4FWhHTxc9P#nxJpg
+zm3kE`v<{thes@CuGV-t{I@R~-RIf2X&qGDz7CcLP_3ngtSG*8^fe_&_pAC%NoY=61
+z5y0c|k?L&ZxEeeee}XP>5<_>A=5aEP8BSp?G~Lfm$Q)5rRi^2FQ(3lFM*Dt+_+IXO
+zh+aWA2r|j}7+cL%RG{I<--tsSg469yy>Td~W)Lwn2zk1`6>l!1;^1JXiu}R!JXYjY
+z1!}rq_dTnIs-hhVmw4uZ$DF#VZEaKCZa8!JHj|Y(oWsQQUsaK&`&}xJRR5`BYhL4W
+zRH>evaQ;_S())c)^s5%f@>-n~b!&e|h2xExCm&Mjm*v=K<pF=JM>P7lr}?|fqud{n
+zc59To056+l;Q7xi9B6n9pC=%n1m2E&Yw_8LPZB<VM4jQ8m1pt!G4$QImxu2K_$<cv
+zPryM)+X#G?z>gPjZ!11u;$xm4#UC$MzP}I;jJg~nW%zk4iZ<rNyd~VBXCfC>-;d{9
+zF`Y(U7Et3ThY8fnm`=?+UiJF%r}3Q<I39t;9~`>PG#)?EfNA`}UlN5Qet~IE@9TJe
+zth+*VuIj1iduS2KJwHUZ(Gu=9v<_V<>Ud^DZ*FqW1<-f&)nj_VvyI6;XF$KEub%a6
+zHT6e8kLR1x4V$nrJk1@GY(1~v<y!W5-&$7O!e-lu5Br-Ee3J1QXnw3G#>-AYOzL#r
+zVMe^J_jO&5;{Dy_cyEan?;8-$d+=$+=T3Znfls{p{J$JuK9sjwb8*Yg#5eMOxwJp8
+z<0#$t)BxG=*Z|{9XoIE!!U-k-@m9!hhTGr9_>1y4yeJT_T3Q{(L8W=G0B~;M2wjW#
+z76kssQAC`%!um34pp_{O6{&~rZ}im2$yQ~I5eQ3cENvTlPT^@E{rC|_boua`_uG38
+z!F|jS)VW98Z`Jo#?{J_vHG)$^^WA8;RwK>gDd^X9Jox@NTJk(5L~Rj7R`}8T112GK
+z?C!aHmmAEX$WE&Qw%m<zpb~B5TksI@Z7^1QQEg?fnnUoifN#@daM<hHw4MmRX|T)D
+zI;C&4^!gi*sxTE+Zy98VhKw;^_30Gd8{-fP&+O~>33k?f<a~rXJCuWoKHgyu1<_sS
+z;7lCW0{p!O9SmNAsKPN#CE$z-4(eAe%}RI%r}?V#wF~nq-q$&+dhsgWYpGZ^mUnr3
+zapDz+Tvx#J4>2wzi4U0Dz6w1nfLRl>D&j1KJG?f=VHEg(ajQP-$MY0Bo4)VUeRwsZ
+zw=?vCDpeQceFw8x`ajZp=i{`RdL^aq2yDRMos>s<(f{`13=7_olmjlI!RieWuV24U
+zq6&xADMSCB$N#l#&%Xweo#R6ZYIGxheMG&i`8>9%yrFL*Gcfk%?A0-+jq_6?!G@TJ
+zuY*_-%lZ7ML!aTpc9>!524Rjl+Q&Ij=igN>auRS9%lYOripjfjBSwI41~1FT!WSLN
+zNmx{20BGgu<4}1E&qw3zT`Q+!SZ`tm8c9+|?47k=qtNv+HO{%zYXFh+k>)JuAJ7Bs
+zsE<8!cGxA(^zB$ICC4_zY*b2#Q`*AyXw^fr&8bj~Avgt!EakZ^^e-H~a&Qo>DW}6b
+z2RmEZXLKu=N1{ZrYWYw<(BuwnQaHSWkxMS;={K{b0N>klnu>>NQ*ZAJ2%r;wVGeAb
+z2=b_Jc!NRT?t3E6AAKV3Jgx)#oQOj@K12}Ep`_&-X2Nx=RVo~3<odjZp!>)ktX<B+
+z__YL|>+q?;@YI0Mb@<$Zk3D~l^#7j!lk;(r_Ikzpd}}H@)XYV#YPC<{?FH3p9lsca
+zyfCdc)?%nzH$ru?`c+-<>f|-vAh8=EYm9P{lYkTN_+Q339+G{@i$@dQmER6d{7HyK
+z+q~C7*vdgG#2e6Ph4*q{jbF0iq5$WXs{qv;;U(V}9t{(;CH>YCdKkRLq<6aIhlFrz
+zb+$gpi~?10z`z=r9-63{;X~ETtyyTGx)mc2BCS|rEhoAcatB7gknz1mq(h}nz4Y;Y
+zh0zoEo)aNeL$7CXj@+CCZN}T;q3vp8><#l{K|Xa;PSNvts3|%*YmU_~CdjKDZ4=cm
+zr)fs4gSD%;mQ4MeXLIEgEcQ8h54(-r`7`w)(zWonYou$*)~}#PpSi^=ZR*Vvyed*v
+z#vW!wPSa(4;pDP0NmYxmfyU;f*8nC+oEO$dYZ+y|p`+goQ?JZn_lxyf<q+rpQfcG#
+zH~XT$xgMV{@L7odhR>6#@mYz_wfH#u8`BJ;TB2jVw6pUS<DdSi9PN?gh15Rp<Kp$q
+zukb$Z%h(6RD++2Z#9wvkkjj9!awD-d^J#tFzv)M#d`&adOR%-WjdS&GmHmD#(x4~J
+z5;^Tyzmu!>HrMx_=SJyXz~5bQ1}F2a9kEY}V?R)S?5<wkZ>}}(H%pU{*P<g6O5|hQ
+z`J+95v-^L%pnxtPZ%^yaPx4y-x`XcdyJByHsb9;mtW^K3t+<Ad@i62L_T83MJ#Y0p
+z%3xv`6}`;H_$&IL>HQ@s==#-*u(2M^1Y09>ISg28pzDY~J;kP2ta)fo!u#mJxXmX&
+zQs)cl$8w<?bx-45j`*4%N<(_hSZKEYwsIV4-s=?g07Jj|7P^-mlzNyyBe%IKA@y-S
+z$)AQN`9F$0&gQ$7csGbsEX<nlD;bz4b>K%gBI!c$>F}dQH_4p!m|C^+B?7)*WL~&b
+zgEL<$#OA{S_tsMxHN2afxOSQ|8os7WqoRQ>8PPz(;>HA3qTiU9-}_M0N_iQ<#N|fz
+zsu+g5@Q$N;g%B}XGhmFk+kx4B+!zg%H++KvgA+ULE|p_?-hu~by3TS|;8t&SAv$dX
+zMrWW58YnvI2jEazI)fZBLSfyg+a7m#-910j+f>dv<2b*u`*ntM<?Vgz3=e@csy(PC
+z`7Ol{d-H~Jyo`Qcfr{RZ;@tT&6=SWPB%G;u1J4<_hqN8z;ZHCg7K8Dgzkh%GNlVlE
+z#7xGQ*!?fxk4ch#cjEroVpO%ubOyi06hyzEi=28>%|}$1z!zcpn6(Z&d}@N*GtIt{
+zYTt0%HxjKI(i4~`4QlR-2@4imuZFjYBCiKy?;<I@TeQpN=<kzTt`ks(OWDTpIUk?X
+z@EPcRo`pWF#<3r54-V3kH^d%-`V0`5-m9K}bsYC=EdSAuDfb*PVhnNEQi~p}`rD&+
+zI^|o@aZiu+-Kh3seX?hx8b8&dcieY(qnhhZt6KgZ{fSy@f`_6$zQg_{JmKx{yp}%S
+zGfHjo%)|B-tLcB8W$g>CdKbRwnzV{PwiCND-NEPZmSI=eFy0fAJ2-Q&tcLQIs<^9M
+z`fH53dq+}V!_DE~%&ah$Ay?>Dh{=%<-SI>8^fi=oN!To0rAM_`&8*K%QVnZtn5(A5
+z4=t^4Xrr`i8tPF!R%p>PP_@6l5F=oEpRB;|yhUdNeyFVqE@PbteaE}<QS5sB7w7u^
+zK19v`4#0y4wCOeK5hh+!_Jtl|hsXgR?@DqSg84c&)6~zZy^EPi_#J=MMXS*^*eVf_
+zpEOk+Jcbi)z2Ya$8ZlRuK7SJyxY~Oh0L6)nH!;EDQ6R2SjVtc#M9my=45vdasB<s{
+z2(PJekOT*jFm5y|zjXjS+JTc%c)%5UUESeS3d4#D1@i)=>+P+NV9J}_bgw$}re5vE
+zEa*1XHbO5Wery`tHpGt(vr=>35&j`FzH<*9b|&v<o4~*rE9po#1~Y6sH!o^5w&700
+zkz%8ZpJM#x3`XCNC2@<8WXzglB^k#K9VcpZyfH`1Y~R|6$uv^SN{<|7fg-i4p{Ufd
+zok(h{`bjMt$gZVUH7F_K?=8VP>PWB(Z7ct22c$VED$PS7F`M*Z8c8!dk$5G{ZfF<N
+zyb#`g-)YuSXPOz>)^3a@NHe<|DQC1W6!jEFB@eY(mKOSlDc}T6fvvac{!z+gS8B4n
+zU#^<(_f@uxHWOLTbnwSoUkmT!em8UclHc_mhrjr$xA!k7{%0`P=a0y|j<Z8%zsR0n
+z|1Y1f;4d#*vxZ$gU!nKo@pIbz%?SKLrx(8&5H*ohM-}xDjvg)M-181rKFf+VQ>^05
+zSnnw5YsCVV=>nT`?BJqDMRc+)5)jTJ#T-RfN5?JGOug|;FsA#q@ID3(v8zcpwkcvh
+zJ&gC0X5IQ}1LxM^2M#;1JJYQ?d3h><@%a?JKXVBnPbGR^&*5_|He7YU;$@zi+Nqrv
+zd4?9*UBHUE1G^PiMI&D_*KGYII?jOtL6P>msd6uCgnCxTaO6<23FpRKRkWF1TPN&5
+zP^feL2E~7VfO8U#YGwkU(<9p@>ZI@1PBfW;QZ-Oea*{VrXu8H{w)f=kZaC$5$`Ct{
+zd8q1{jW{l+w}jAle@B}fC7b(pDcI-Wp8sT&Rw4Sqr}5!_2iM2gzs}*0mdW}Zrwc-P
+zLvuo(#@g@xuJ`-R#4z6TfbUzsv-{(y<LW{qR#&?Dhl28|3r{Tw)|{gL$rw=r8Nouj
+zz&}dlE-ol73l_PTmDZNHgVoiQ)u+4h@VcUZeU$$t1vMoSz;yhpQDxejNMQIjucD@|
+zs;aWO79r8OyST0b|G16%H<9Qt+Q0IGLh)}977woF%d2L%)VDyD(3?8JTdTk4Es5rG
+z<#Gmok(9Q^BKq$CqJ%X7u7lKH{5wRK&T%EwCnY3}*k@=93T+JTGn(5`|9Pc|JC}E4
+z(p7`f_mh7nZkOHhU+z$s<=@G;=?wQ`bu0`wjl0~H`&_ek^Ikt4a;-{$?fx!P;f(v7
+zX!mxyeyC#+@qhZty_$#obg=F3qqe&lD;=?Lxor15(W0(6@vz-58z7x_yyu$u1f@Kt
+ztyKAOB<?%&Z=7+5c<`&OXFSveJ>OQb!#T&HSLH6@*zTPE^ye<w_D^KnzhmRLv*Ulb
+zaVNC(Ct3O(t?xTpKhNFC`nIF~?l(aFvGZ$3{r$q^N1S@OtNt$5-ASY!4bbj(G`{0^
+zG9TjA!|%G>XAY2FyM13`=ljg){$p43eV};k@mG%%yP6NpJ6ZpBv|itC_Z!xDva9h`
+z|K=;}nrYwGc)6?oerU&c7u&ZT{#ACn5ZQJYFJEnUyX&9bZWnw<<!{H+{QHfrK>zcp
+zKK)so{E6qzPR}3g{2rhmis!GLp51k4kJ|%{>;Kz&JH4lxe4I8i$vbkCccgpe;Gd$d
+z*zWlA1nM&FQN%s&b}wIccRaWAe@FY5c<$_WHt0K^AK3n{xBa*J`GMM#o&I?B+4e{N
+z8EGlJzUvA8JICsZv!3YFPsCYIq&oaj>xuN0Se5l{U-8`SY`h0b*FgG{9Py2{j*8b0
+z>~1}_>&3G}BqFB2vFe3g?(yog?d~Fzz5&Loc>dY(<ePu$GVvT>9NJNTtG=W0+K%r+
+z{wt}xOnkqieEqKHD`R)E{EyM8ili$}JNvHshk@GB_pP_vsY(9sFm0cG%<hfy<_qkX
+z@ynOO&n(&8-`Oxf6@QGK@yEWuqq1=~5KVYHLXUQ2T6Z6lf%IyVO8>LyeQbH71v&lf
+zLjE*G?5ho${`3tnJ1k*vT>CEShYyLXPecFGpZ~1`#4jKIC%6*g`mgh6km<$XI{H%j
+zA@TKTa6XX#1L>6)(ZPl#9X|vS=W^@&rWfktO4?sseUi3_>wi8p{pJ5a_U-}7Zy<Z7
+ze0Rccz#L|G><6lUET8_$ccAoD4G_Nu_}^dq*j@ks|8C#5oAs{)^>26b-;H_9?$p1e
+z-Hd-L>JP5C?R%i|Z&l{IZqNDQ?xeqJfbc!Lsc(aQf91Qo{tsmD*71+qKmT9r8UH~;
+zhoBT=UrGA*F4wO;_9_E+IsZJnIeu&#z}~IPH*WnLsD2D&pGN=tnP1WW{>E3@ALAMn
+zH~$9GyJ3$jZu;Cxz3Y0$zrXbDZvEeen17%B>p=1IAm{t*KL@gJ+1>GBH^<jjUA}Sa
+z&p`1{8zBEZ@V~$MNqv9)t6RtKd#j(j>p$Zkt9~EH+b&m1p0F4^YOpJ13)XATgO7k`
+zxLl)u4-SPpuH(q-g$=@T;X&X9u=^68k~e^K|6}k;$d`i8fYow8D4ZiaM>q_881CLc
+zzxO|bU1z-n{sr=*;NKua=lUy%doEP16u5EWwA$$3g7?AQl_1_r8@&Qt3wa)hDts`X
+z3qJvQDoDGD;7f3K2>3(X9}N28?<;WpW5{=dlz#;xX({|y(8#GE{!bYr94UMcH56f{
+z{2kmI`c9DUdH$vj_iq3f!M|pZ{$3?|{?r%!n<+dM90B<t@DkX4i*lj-mhf@#a@=nd
+z`4$i-T~hvpKs&+V$aJRjOC<7q@I5dOd<EqFzk>_F=im-Or2G$vE9H8S?pBHYB_Q49
+zgD^?C0Q@KNYdAJ;@qfxU*nnibyFuh}%6gFL{V6yf^5x)MaJk%{CihQ~`(x$)XT!AJ
+z=^$>U91k*|4hNY}_a*82xEf@ATn-{CDNBX(gy#y+7Jizj>)|sX-LDniD7;LV3toYE
+z&J=kHh^mlsqTD|gWPR=&>2hJMnz8{z)KY#2vR?lhWWBx_WH>?aVaR8LtiKaL*56}5
+z*5AWH*53m`=Icn1_16Wm{&wSECp#PRKS9>t`#|LL!FPcyzZ*f?wScU@A&~K@0WX8T
+z0A#*(qtdW^o&#C`9tD}N4};YI1!Q^s1Z2IflKaIV>+ks>?avX8748S(|CH^h1ee3^
+z4UqCCkoENsB3}=(Uak<i3S_)50$)bFPu(9sRu279LYFWIz6iY^d>Z=mLB@9ucp;b}
+z`s=}`pnm~m{y!l67-Tr_gAB)ifYx6DB5Ow1fq32LtjEA(VK*2L99VAKvC&HY3uJl!
+z2`mPG4+g+ixt|W^Lp}p61dj)q{v@yn^4IW}@;hJ&<jL@V3^?%+?f+Qek-`L!;XRL+
+zUK!q#Aj5kI<o#J7!#fsa{0;?K@Ad@?!0qs#<@zzme0mRLxjqT9{Mtaq=NH1OK*qC5
+z<O@K?vl#I>4xDqS4rjXX6p-;a5M=!Jk^A4kJ>&5axCHD58IOO0jK^~z<M9B<c>D@v
+zJeoj;cM1GC5?qf5*G$)6gx3qN6jp)^-zV~!!c@6GOyvLK2k`07o5Gibw}Fhu=^`H{
+z904-^pO4aZJ;E*EV%&cUWI7%N*&aGT`g0e^^qdPaymLVMGah7l90xKVjs$6cFi5*^
+zkY3t74l*D9By0s)9(x~wc?g({9}=R!M+g&ypW^`@@4pKM;qFP0{%-^szehlZb0f%b
+zE)xy|(Y2%`fV6)N;V{0>fh@NTAmjTWNdN8!>Cdeo{V4$%--RH{EnVcvAlq3gxCQO1
+z0P&=JAxQZu@OZdi@7CeoFT4e0c}@fW2&RGz_aqQq?dSu+i*Wy|qw!J;_#DW1ZvfGx
+zQXU3>JJ^+T7x)U?w}N-V{zj1TUIfzJLXhsx0qJfENOvh9-Fc64xys=G$sm%Daw15*
+z8-(3ihk>*k0Wu#xLVB1FFN1BcdsO5<fUrwB{}??k&IIZH9FXJL81PT@54<0|3OoVs
+z*N>5W5#9o-d;xz2eJZH(1w_$}J`hy-a-8G~sPY9=`2zl)`2zln`2yaH@NNWEzJMxU
+zK)O2zq`N5~-KBskUyhZ00ad<$)Vo30opl&UyAj|Z<_prJ@&#;VzKHw>5OyhhAMbLV
+z2u@4Z@tq_*0%UsEpXhRxgZF_<@7*A>boBKg(|ak%dN2oMdecFs<7}`Q={OO574F^O
+zwXi=JWIFzJf_AqVq`OBzx@!mN?p~1Y)**hZ2ls$X?_D7Etsv~qx*4S1H6YVl2{OGu
+z04rdZDe@^G>{6~mx{|^5<D`6rw}7gA!Aj^;K~=sWs@UiQL8kYslcan>rgsCV$``zW
+z<qN(B_pRVfh~JIiUU0VvROJiO-8mrLO#$gH1*ALgSSepnl`lxW8-(3ihk>*k0jlyv
+zdQ|y>RfylCBL4w|UCQ1kyIf<zX{Sp03XcF)`JUo(T@3wwpekPwO>p$}pekQbl`l9H
+z@k<9)`GU8we8FzGcZ0Vfeg}h0$G=jfd_lT<1f;umknZjU>24k3r^**p<qJ~Z3c~KJ
+zn?c%L1FG@`N5Jj}U^U{MDe@^G>{6~mx=sQQ9Pe_qgP)|jT<5^P2TTKB0=?iL!F!-@
+z1)l{k25$rxi<}DL{6@;LB7fp>xo(C0CP?>f;2q!{B3}S9UNb@VH<Ls@4!jrgej<N^
+z_^}?o4buIyAj|1*BHsxz9n%s2iQu~vbUHSIOvghY)A2iy>9`qW`80yezm*{Sfy+Sl
+z19c$6KkFjR6hHW9xSs{GKFt7GpVC0qv&ot%V?nw*3}iby0AxEG4zm3vXr_FMc+%bL
+zAj|7zkmdC}$Z~vKGvz^$?tTZd|Gph$|9uOH{5tD8&6F!ax;tc|%QX&s`gEQCyFsS^
+zHz3o0Ey(l-LDtL3;018MWvb>6g&yI<Q}q1{K=$7=K-Tv(5MANuso?K$f9q+w{r>}`
+z{%H_h@90h7&!E2uEC&~eJ{LR|`Yf;s_qR>f?dcVe_WuAeG>m>4yczlm@Q>gk(a#6n
+z(9Z^M$NjxP){D<3>3Z}UNO>d3aqSNx-wd)|trWQgWdA-#<kLacvtvZw8)Sd@0rHjp
+zJqNPhJs|QgLG~Z3L@oze59f-U2C}_PKf~pk08TthmrD}Jav27)Ts}KfmrEDO_SFWm
+zUA2I0PgNk>(Oi)2=U9;OIRIq4`3C+|?g5#;e~8=xGCg;Td?U#C|48JeAmdw%czD3~
+zC4QX}zjYG7dqLKlJHfl*t`)o<`~`Rocmwzg@TcH!z(dYP`GB{A>`&@JruSly>0JcU
+zzxm)A=ySpAz;nT?!3=OUcsBTJ@G<Zda5RkQ-<R-&{(S<{zgO{x{yhq+eo6QZ98ta<
+zWd8gNWPYs>xeR1}%@^4VGQY-&d<e+=VqhwN5f9bRAh1($|IZSi77$KGhd{=s4#fYX
+zm*UTJaQ6my0K)$l_zLd72(tY?39?-uFiq?C1OEm6-XP+2*4NOpU%D4E`>WO95%A|C
+za319O;CwI(oC|&eGMo><SK-gwAkuTz7O)vSHeKsSgRen<2#EBZH5|MFoFn=iup9d6
+zAp4^;K=xCYfDHd)knvs$G985=({+>RuLBwHt3jq?CCGHG75#l6<8wF2`27ZCd|wp(
+zv)~Q5{{+bRZ2%eH&qe<+$oRYmGJbD@jITRGudgS8iHK*WaGo$ItP`#h-YC37c)##5
+z5L2p@7lm(whasQ;IYalKPYdq_*^j1!wcx2B`>|y3c*JWccqQ(?K3(5`9^4!LJ_%yV
+zk@6T=1NV=Bmw@fy>#+NS=zj+?y|;r*=Pe-9-J+TDBar!34>F%F2AOZgnkn-@=Jza+
+z`8)$;zMrX?atz4vU@*vX`zBMD*JmKh?>)_wd%!_(_e-!2>G>JB2>K?F>Ag(!i$J!Q
+z>B3Wmhk{67%5tAxS6l?rzW}%|m;wF?{!9h$2eYzuyv`Pm28YAlK_K({FEh3LYj7dt
+zt3k$NC5Rz$bR9^47lW8OrOXCT2GhY+aDNI&_hZ1lasNm#89WqZekXy<?_nVGyZ2nh
+zl+VC%aQ6m?sZPqv;G1yw47d;EP2d}l*McmUKY}cmH6Y97mzpUzfb{1Ikp3(O--f#i
+zkp2{d|AssVWckemS$-KH%kOl}6c0#$MuYU{VDMeI+ZUuigTQwnzmui&^Kp>nydGq`
+z{2Rz}zE3mdE|C7+0Mfr}!1v(p3XuLS2e(2_1zCQ_fvgXQf~*foAoDdr^lzX%N5I|R
+zL6-lWC_m=&uR+%PUx2uO*7YFkeHZvN+<gQx{P#fS=bIq&d2Ei$^>^qOf{%l%K*p;9
+zd<*(VMeY!}7o<O5fy~eUfXwHkXX*QggUp`;LFU^za{qL2E940v(|<9@c$I?75#Pn&
+zN$__ScszI$I3D^Xd3v0h4o;(gU>Z0MM3+ALi#aaWRdCl0Vv3Nm1!Q@=0J1#(4zfJf
+zYo`1L<TzFZ(ry7ryE!21*G!Q0D+6TxnyQ&{C`h|k&(n6DAni7QtWOVutWWoYtWS4q
+zrZj@In+-C&$sp}gLAHyNK(>qHK(>ofnkk>>YP$^}?d}0-cNfU<q7~#gaWi-)<ezG$
+zRDuleRFL(^4YD2`2C^Ov0a?%fJzLkKr-f@l)~8mHuLW5Tt_D9sIJI)WQ11J|4{_fo
+z_dRld9QXn5A0YR?LOIf(&%pO_{}pfq<c)Iw5wHjMZ$f#dApC^6y1cuky#FcX{iu}p
+zUqQ|T4uQMF!BgjH_ai~pk9|PakN-f=`tce#6kfjo{sitH1(^>IgY2i)f{fpN;D>PE
+z3NoJ8f=tKdAmdjKegvKgGXLfyoRi_-V+(Znw}TA-7Leip1Z4OXAj{)$;T`j}JQHL-
+zoB=ZY$sqkdM(!uc{ox?v^%=sW`)-i#w}6b_qjJAZ?*ATS{BM-|4RZg7Ak*<V;xQWW
+znHA9SJ_%&Jj{_O+M3C|R(y#OFUm(YaCqd3v9|MOY{QE(U6RqG6ke@e$6JU2OxG(fo
+z;5hI?5KE(!1t8mhF8C=p32cP@XN$D|Z-UoDeifwue+TJ*J4pZU1L^-=ApLIy>3=Oq
+z|0_ZEM<w7VU^Ynq6F|oQqYL%?`aO{T{}ZJD8$tU25J><31k(Q-K>FVR(*GZV??7J*
+z{s&wL(*Goo{(pOcp0|Gq(*Jis`u{vg|DOWs|9X)A-wD$HpMmth8GHl!tH6)Jr6Bzu
+z4buPNAlCzXgY^HiA87wy2kHOIApP$G>Hpmz{r@?5I`}hi8}v=!XW%lB{vQppUL}I8
+zSNno=_u2XS{=Y%q?*>^vpOE{1l>2vsEZ6Jg{-tui4rIN(Q0{x>{+S^2@i@6ZRPGN3
+zS)boqsKb2*WVla&EZ6(w{!McKI*|3eUhe11{R=?m<21Q{qTD|g?7{s@P`^`=?r*?$
+za5KpI|18M*{}9OfzZPVDZv$B`?*_R(`z`nj@RuOV<Ai*dYZ5rSNc%Sqq<>>T`j-T%
+zeyC9Q<Bx+Ak*<v($Ek<Fe=$6e<J9jpQ!WMB?-zh{e<8^6X&(3*+|L3zKBa4>i~#BW
+z^Tpcz#~{b0_rO=-{!NhM(q_$+--2}C1k(Sjz+0gI5!em)^&rQia?O-8LApNyr2At)
+zjzfooufY9*;GK|%YNq_XK#xBUgB*YU0<zz|9UKJvl_2X~xo|$n@h45>aUje81d#PE
+zN$!7*{O0}7LDsKskp4U>_d7t=qr2q(wQ~PzkoDzaxqrUgp9`{HT#j;LygES6OI`y{
+zhx{`52K3K^Y?r-q|0|I7@;@N^o1=r;{o&v{kPigePn;w7PY2cf2mBQG19JZdAlq9W
+z$aZ-h$nZm8J@V_v;7N!_g3IN40Q;C|`>qGU1Hp&Dqro46CxWHmB=DEuso*m3Ebvlr
+zCirtOQ|_a=xmqCSiM#~-17u{gva18>PbC-vSAw)(A@X$~?VCjY6-fJ=MZOoj3-Vne
+z|4rokLB{Jya4sI%lJii6ZcRUV)?nAj43K(~Ln5ZTq@O$*`ZCdz7}7>mY5K`Cp}#@&
+zB)fvuntt*q=r@X<L|%;O)bx|MMt+Jv44*`oIAXh|pF~-VJQ9DXC($L3aBKQW)T5Ev
+zq9-v#jL6mWlY^nZO!Op%s1XgCesT!(_lTavP&tC{X@GumFX&$oJsE(0v!<WKyk_L5
+zq9^mA->&H=_ksQ(M3V6*3!opR=_iLmf2Qck#n7i|`pIF?7lE`V3!yL3^phBWMqVR&
+zvIu&f69fGu>hQ=vi=IRkAJMMqCr3d4g6PR&+}f<^C-;MX1TqnI_Cm4*`Xo(1ISu7I
+zQS@Xf^iwqb<gw5fiJn{veTk-@%z++#z4D*D2zu0Y(oc?o9&J$RNz}m+9h!b}7W8k4
+zo-Bv{T}?lE9P|gFkQsln0{T&!eli#OGeu9L4UXVBHPBBU34NL9N!0lfRhoWs4)i=<
+zMgPf*p<k`(Cy#-Cqv*+M=sPw2<VgHK1eL4?_GB&eLpA;6WZ0i9dJ=ub2#=<p#B<$|
+z7mA*|1p0hUKbZ*suMs`D4Eh#LKY1GL|15g49{P4oKY0T5Z;75<4*k2DeiCIoas(Oy
+z<4;}+eUhf1JQ4acMNj?^`ZP^HITiXM(UX@!U!v(JlcB#s^d$Pk5vw)*<mu2qD0=d8
+z=sPt1<XGt67d`nS=(lP5$?4D^ghtBvlMT?1()5!jL7yRd@(SpEntt+J=*vV;{uufy
+zO+Se?G4fW?lPjTb)%25D&~Fqyc_s9nntpN|^q-2JTm}7hO+PsU`XkYaF#hCK(7QGL
+z<OJxmMNj?&`dm#v>4Uyj^kgIS^_qUt1O2Ta{U<}vw`%&ybm%vVp1d0RPE9}QhW>rg
+zlNiHBY}53U8PFeuPEO@Ncn$QUH2vf$&}WFAY=+*a=_fOxFB3iaQ|PNS{p6|8-ynMO
+zTIg46`pG1;j|W9hwm{#Z=_mJx{w>jy7>h@|tLY~Xfc_wK!YcmY&!8Wr=_e0_{!G!6
+z*F&GC=_e0@zDV@s4bYcp`pJW#zee=rjnKDf`pH9}zen`sP0+V#`pH9~e@gV^&!O+q
+z^pm5Ye_!<EYUsCV`pLtfAAv!H=_4`c7?GsuCl81IWYLqqfZn6&Cy#)BuIR~IpkJuz
+zCov}(d70?RTcK~z^pm5Z|E=iB+n`^g=_ikZ{wdLuzl6R^(@!1^{imWQe+50y%YlB<
+z4gHZA1erdv6?(U(pF9To4AGOnhTf;?Cy#}`O!VaK(DVEr=qHbZ{sz&Lzkz<Wrk@-G
+z{R`l45k7eb^qV#P<T<Fn--w>P6M7EHpr1Sf`Y|Bw$-AIW*7TESL!T{rat-vkntt*y
+z=r0pJ`8((vH2vi9h~GV;C+~*7P18@F0R1bXCw~upx2B&w5&CaLPu>GP2R+bFCPP04
+zRPhJzg+5u+PmYB?L-gbyp!aF|$&;Wj0%=eF5&9BMKRFKiYeY}BLEob3Cr^g{&!Q*q
+zgT7tUPo_Zsis;GzfxcVQPo4t(Hz30&{{%e;UC>XS3jL8F_2i$ScWe4d5A<h>p1dFW
+zG)+I53jKwmC)YxsujwbpLw_sy7x+)ML*J_DC$mw$8%0k(0DY&XpTxfJNS@E7J^5GY
+zw`=-IFZ4&Elcb*f8}x2XKbZo3hUm!$q4#O}$@8Eu6FvD5^i`UE@^I*H6+QVd^sSnH
+z@(k!Vik^G~`c6$hc{22$ik|F%e!HfhOoRSNbmA)h;5z8tntpOL^x2{(*F&GH=_hAG
+zUn_cY1N8NpeiHi|BX1Qwxe@wSO+Pss`i-I|ABDbC(@$bQW8|lzCm(};yQZI<!1{wh
+zM#Uf81if3+PfmnBL-b@P^gc~LISKkA(UXruU!v(JCqsXw=*cIbZ`AaYr$PT)(UVU?
+zzedwfPJw=-=*g#`@6_~@Q=xxL^yJ^6e^=8_o({bW*GA+6rUS0WKopy6J&3W%wGMQH
+z8$k3Gu1%l^d=y03F028R-AkySv`>fswBHPw%z#XP{t21PgzN@ihD=U}On<jPCTBp-
+z2j759`XE<<Z$T!rAlHNchD@Fdxe<H^GC33SYH%xLG8^(5um>`k1Gx=+A2K-$ay$3|
+zWO6p-4)8<BWG>`R@FU3Nd62unZIH=1kO8%hcY|E7r-59T=Yw2-H-NZCw&G6$*Z~d#
+zyTQTCf7~1by1~7`G;nV)AKV9Q0EdFD;4rWQ+!yQyhlBJCkr?R)_XE>Ft_$-)uKyZ9
+zuJc;KF<=MCbz3*c^%*0<b(kCEdMgd&x+)*!`l$g#B^lWYay`@ma^2GnCQ^mSa~<Ob
+zxn4;Fxh}~Ex&CMXxz1<>xt{0%xo+qNxjtZ`xejoHobRWBoY&`roWD1KoTs;foR4>a
+zoOgGFoL@7uIFELNoG+(=oEPVVZm<F5Jhv6(e6|DRytNzT{FIrTgmkz;H2INfAezR=
+zeDFZ90pvWf736%d1LVA~8$1+rp>RflZtyTL4Llso2RZ+006EWU1v#JU06A~!29E|^
+zC{#D-29E*Lz+=ID@Hnsm90Rt3oR4&XoOg7CoL{(5890w{gU8bzJc0J$iL?ikX%CJC
+zJHV5`Zg3pvLM1vGbb~2i8h8qr51tA(fF7_FOa(i@@nAQ|@y&(G$8pRJa=c0dIWFac
+z9Df=>jx((w$CD0_<3=}_2D(sbIS#l%_V;NZ`}KT~{dWV%e!3N8f7}7G-|gmo5dW!u
+z)D5z~OarHY`5^nh29W(6*Uw3=Aui67$#xXF8$1$)OF0*XO1_1{BVR$GQ2z=tpJWH6
+z<Z&V+b11u!83%!%B68$r1Xcv5ou%dN!Zl}WIoT`jXK4GPY|Yv{egDjPnq3Pt7X~zk
+z=4)P9q<Psfs7DD6s<Uw6x<}+T)JtBkitIr><8?49m2!`I!)u|)X~+*=d!w>Z-;I3X
+zl`3)?8U?TOMXnM#Br?ZYUVk?BB5xKs35|)@5ac8MPZQZAa+Szlky}JwByuhq4X^7&
+zW+UPCrN|v#Eq`{r_J5nm|6wCYK;BN%`j62V7=D+?ucJIwexz&tvuGTYJtD6|BcYrx
+z@_$5b5cveu1L|8vK2PKhkuMXuTjaYSGd>&?d2JEBN92r?wSQ?M|54;zkq=Li_=vnp
+z<SLP$7r8;?V^7iUTSUHC<W`Y8L~au~5%rnrar<=q+C**@`5bft)VH9%^7;`w1*E4<
+z<a<QlE%J7eIq358q-y&#kr#<vC32I<Z6ZG)@-~t88n5k>W@-P<6WJs39grEHT#^4H
+z`Ua7&Mf+s@tBSO}iGQoe-J<Uj`3!V2biYmHn?z0uYWt5x_J}+eoe|yVioBMc6XH`P
+z@`0G_VLsq$6Zue)J4HT1<Svnq7I~Y<$BCR&tiwN1<YbY@iJT_#sUqi#Jc06%23Nhv
+zg(Cl0<jY0ATIAbAzDeXKMgFD8!_e8%zdJ=fPvk#~e6`3Aiu|0&Pl$XtI%(Q(7I~@2
+zZ;O1J$e)VbCGwypI{kyuxzj#L<g-OSO5}QxPZoI-<-J;6r;Ge1<dJ)03=;VRkr!HW
+zgC(!A<St9*COt3XpU09HT5_W$w_EbNmYh^-`ESX&mRxVit(M$r$=fVBX{ip+<d;We
+zlRlp%S6OnaC3jl#c1w0&6rH|YORl%%HJ03E$$V(R%fvrfWE1~1OD?hG)t208$=fX1
+zU9Q73{`)Ms-jZ7_xyzEbTXJ$mwEwx5++fLTEP1mf^I;1w6JL)dFSO)FOK!8|&6doE
+zHctPOEjibc8!UN^C3ji!c1w0&935V+CD&VWt0i|@^1GHiv^v`VWJ~s0a)~9kSaQ21
+zcU$t%n&|L6mb}oC8!UN^C3lHz+QW8BpHv$i-V{sDx8z1kZnxxjEqPR(<-aB8TXKUX
+zw_0+iC2zCjQI}ZZS@J?luD9gXBAfi`u=JZPnGgARh1-)QFSO(aOI~Bin=P3S38VbC
+z<b{^pXvuAsyxEfZkTJ@COI~Qn4VK($$sLy5ZOMFS=?u>;@@G>qUhmWDN)vf3)>V{!
+zA}<m-SL9}q7mEC-$oV3FA##bxW6se2Rf(J@a=plW@8zgr4X#F!9}>Am<TpfKE%L`A
+zw~D;inc9Ah$jKtNiF|>`?IJge+#zy@$ekkhh}<ReAy`*3ew#)1irg*o6(YYYa=Xae
+zL>_Xsw%;yts>pmu%&SD?p(6iT<Rp=ML>?vbY3FGF+#+8ha<a%zi0l#heUYb#JTgt&
+zr-|$l*(dT3M9vj?rN|3KUMF(C$VYm$e<dO>6S+#{=R~d-c@oxz%+Cgqe-3%P3wuGo
+zI9JWU67ao<f8?5vb)75?)Scg3^8JvD@pGb1`%@hD1sT}aamf5S1|N_3PkEN5r@hg0
+z-A8*P(`hVwr=Irt;{V7@ZEs{_pCo$94Bx4zeU<1(i@lMJJ<m1pGWJeA?Om92^LkM1
+zjcn|B?uVDLcj{?x_BY-adm|hB24x+wcj{?x_Ct=EF8Mc98yNd8%ig%BUd4ZycEI;z
+zRQZW)?9&EC{F}v_4n6J7e#>gHH?pzkJ|{2Aw0G)hZ}w-V&(Pr;+1TgP7?-hk>Q(sr
+zYyHJyZ}xYLy+^CV_D((R&Hm5LVsGSl_D((R&3@72VsB()pJs*c)T{JM{69767und`
+z@$Yu%X>azUM)`F989AQ4Q%`%df5rEXSpG(iXYbV0zUly-z$&pfvaxqt>38aB-y-%`
+zh`o`G{YjR+(ccF5#&0^|do@n^T}$34D_TFvlFzf`RhImKC2zIlW6q8CKhKgIESc{^
+zIph1WB_B33T7R}B^I)jczQB?bkS9g_BbVL3UkUd`MhX55a;*NnL&|4bwyqyWrq}GB
+zlf)0ov+&2MXZd!C{d}=Eva!$S7hDAGoqF1P4pM5@YOyym-Ny>wsi%FK*sm3PBO80S
+z)xSCQw9h|8hrfT0PQQ_jy`6rip7vE@e}dQ>+1RUuBM8c~9PTMA`$Kj3%Z$Cq#@-IU
+z%Au!ygUDBky^)Q5!(i<{Wrpw6)1D7~c=3HPH9m-J?CtQ4d+KSQB<=^z()LC+_GwoB
+zJN2|T`{jJ!jNu#E*n3p$BKc?Zx52$zbi@`*rhR|yW901U_Hh{GSnZ=>v<~Dk=ovpF
+zoA}xJ<J2>KEn@$q*c;i{S6Sub)T{D2Mu&fRu9T0+#=b$T!}ZHNZ=jy`4dVXCVsB()
+z-zWa!o_ZC3ksHOn#i3{W>=S>7Ud8`-9l^~e{vy-=SnZn+1$j|V`y`RO#ooxq-VWcX
+zSLshy-nqt~C*>!yvG0?9hhC*$<kQ8z#i5UxeurMA|70EhHDb?)m%QSI@6@aGi~AeI
+zKFPB0lYWO@rT<hN-rFYqBF78A!J${_7x^QTeutjvZ?oEWi$hQQwDCIpgXie{H*&o2
+zoqF2mioILxjcn{Y_yrd+%i*3f?UN=_i|2u2Z)ECY)jy}6_HMCXEcQk=_U?U@_u=rJ
+zdfKO*q4hr(dm|fryZ$-#w9gg$+fDjK4%=J#Z`@N)`+TgUdGUQ)_FqO0+iP_={!TsZ
+ztHk~#u{W}@Z?){5dfF#p-OcM;u{W}@x6|*`)7~xi`{n8Q8`;>mD&HgJ@6^-2L+no%
+zdm|frJA9{}_FZD1A@)W#_ElE?JN2|r^XdpzioKDIy&b+&Py1Z4UoQ4WHuhCk`ki`}
+zezE_JNx#U(-ecLD=hM{F-aMcF)m)wbMviCi)YINP&%SM*l;1QRps{bW!Z+@zr@eXp
+zean1pZ)9U{$KR=^y(?V@(6m6?8#$i6Q%`&IeEo+DwY`z!**o>L&zJBoI$zrx+1R^v
+z^djv~+*42c29a+Qdn3oQcj{^1D)wDsZ{&FPPCe~A#QtlsH*!3Cr=IrRVt>L9boz}P
+z&)%u0y*Ynyp4c1N*xTjr)YIORp)+`u*c;i{Ct3OL)YCpq>^~HHBgeCM>S>=V_UB)q
+z({JQ>_D((R^TmFn*c&;Xy;D#7DzQKHLLI)5<Jmj)v~Ljm6=HAXc=k>`?OVkDDX}+l
+zJbR~}_N`)n#3CJkBgeCM>S^C5_DjXy$norr{sFjmOWh!PEcqyZv_8v{Yb}}K^|v1R
+z72Fp&!n+%Cto2BTq-Q}u=ZBHwrN^mfesqa_k=PqKp1o5~`);v+N9>Ip&)%u0{Wh`x
+zkJua8*n0-+OrSi=;hr+>&3T_6=IitunffvKG~mOFGVPsu+MDx1M;1tZ@+s%aJ?*zy
+z;T!k#kM`y~(eK6H$kfx`jSnx%4Bx4zy*Yo>Q=r2)GTqbO?$4Zh+MDxAqZVs>BO7}+
+z{NP2I;XC!TH|Lv*#NNopJ`GNI8GEOm_U1g)tzvIvV{gabsi(a;KlQlS8`;>Wsn8?g
+zJN2}0!#)MCFT~!+@$8*?+HVv4;|q2E8QIvomG6=8oqF1v^IR8;y^-VDJN2~pV4s55
+zLt<~_c=k>`?Q_L`{~{fKBO7}=|DAf;oAYG>u{W}@x5q=H{~GSyD(3o6dN5kP%#t@+
+z@`&PS_ZM37t(N?}B_F*c+CJNoS6cEjmb`aKwEY}QzRr@FAN}>$|Au>HN%-0ZIaYt&
+zBIR{ksV*-g$IEZ0p5@gl_IHWBk&XSfAvy|_XF1$crhN<M{k&c^;fqZD7<}yVHtvmm
+ztGIvHgm2kb(Q{mMuflie8GaJh4ZIFms?%@ec;P$sw0DdBQDSdoWAEV?Tm-{+>S>>g
+zbqBBW#oowtA1nP%J?-<wzEJFqZ0z~oJTJ-&->IklHmo~%{Z#CYZ0zm)cj{@+A4%YK
+ztJoXa*jMeN^^_UDQ&0OUjI+F65_=;Xdpmrmp7sr5|GL;4+1R%#-y`XF>S^!J*A9kW
+zq|4vP#@-I!si(b1><<)sBOCiPtNuInD*Z(|{A{r|=V^_-N2|l-=hV}_RqSsQdn3oQ
+zcj{?x&gVWM_C_}LZYzAJp7z@${Nu}X{uw!*y;D#7B=p0)8pPhn@$8*?+Iz%)i`W}E
+zp1o5~`&_X<yIjZL$nor*dfHcsJ<lC-|H{b5zEAmy`~SkdTcuq8@l-_1g_eAiB|mG)
+z!z-ihe_+X%S@JI}xx<p*v*ZJ-qWwS5lJBwPeJ+l6zu1x=wPfa(b39|Wm6+fT&&RJ8
+z+4P@}ifrcpK6pU)=K0ZIL^l1+Cn6)7>bedA(7i`wyt|}ivp;vC$mV$v-q}-n^L%hG
+zv}@X%=V|jrHqY<w6WKg3aqXquo97d`BAe#{w;O%3j?kw@FZ<=w_ZIt8wZ2Sbv!DBG
+zkxl>pl*nd${9I(S|91@fWyU|(tNoiPve_T47TNTdH;Zh>_by{E`@LTqdA#;-;!y3s
+z>F>%#HqW1`jeLxD&);WYe9ZHe2BS~b`bMLd{Adx`jEBDvIbS<>{m!@-xm{$l-sA5(
+zFuaZo?ciCF&G`13$Y#E=)wn-EyZ^7qNoQ+$#4zzs<U>R@`=xG?&GU<~Mlbm{QDn2f
+zeYVJEzkh~tFZnx1WHTOKD6*NK6^m@1M_(zjc|Lrz$YwnIt;pv2?R_Gf`OZTko9C-f
+zK}M4bUwiKxEl;rIfF(Cs^1YV)u_YfqJlg+sOTOHa@37?OEP1OXPZ$yHf0HGDX~}{8
+zqTSzQ$&Xv|nIog!|ICuVwd7M1quu9Q@-3G9v?YIH$>Wlu{o}uD<t)FImVCP<Z?WXB
+zEP2ZQ(f(a*$q!oc7E9h6?aCRSJWIaLk{`6>$p=Q;KW54M9~7-0Z^?O<e3K<VYsu*c
+zNBdV|$$R14g)=?ZS@K3p9*%PoPWR_pa=s-uS#rB2|I3p185Qk6|2-jRcxPC0o+V#y
+z$-lScE=&H(k`Fm7I=oXXdAcQEY{|d0<PDbmfhF_bZ*r#Z7)zdN$(LI4uPym`OWx;*
+zX#Xcza*-wf#FFo{<VP)eyCtU_86DmaEcqHsZnNYrOWtP5r;d*Hf377LTXMN2-(bm|
+zmi&w*zi-K7j*1Sy-jZ*&<OePJQ%g=bI@-TPOFl!%Y2opUKZuy%ipUL?{5wm2!jeC*
+z<OAH%{*AZf1(sZ=WLNlFVad&w+-k{xw&Z_W@_xre=Li4&C};baV98!fo@2>DOLn^g
+zV`@^zr&lkps;!(^TANp0nCc1ER~1wg`DSKJPaR)UP*XC!uA;EEw6Y@AQ&oLYZe?jj
+zZLr$oo17i2SW;W!nOIs;T$$zZTy(C-lj<o7R+nB9ESecyj$38r=X&x=YbIq?)J_;b
+zKaiKZyk^oo2vg?I$Sd{E$}7#QTJFuk_uA>P;!#&sR8SlA<#^MV!_atgNwhaHO;dyQ
+zwbccMwK38#p(a>Z9jxt}jGBV7T1mzPq?6I#o!F<=lrE{rEE+#)QtH&y)2fgwNDH#X
+z1bkX~u%@P9Nzmu<WJy*|g~_zK;^JU6a>kKY0dH2`5}jGT8F@=$rg(gDX+=R<>7_BU
+zt16P~F-<2FAxBXD-psri={c#Miz1Pn9xh~*M8OP?rxekhR8d(`7=*AC!i0i?B7D7w
+zUuz4N;A<JbR@T+xYq<}_AC(dm`+3nHR)O3Z_?uTcBX;zH72iqpQay#GRVBgdxu_eA
+zCL$+M?i<Hk#8Ezs-)vUb^J2%24P;tbW#L76$b2NiRMc2Cdcq}W9mUH{t(aU@x45jd
+zu>VTonSff+Cm(f<@SYnpPE(cyD}vR!x|y&XrMetR3b(^ROdqCJ1efKS$i?u&GXYW0
+zV&OWyLP>k4$1KG0Q|Mv14Tz7^t1HX%g2AGwDmSqPcV_Om*AsFwCZ&!qt*ELCx9Ln%
+zYbT=`;{J5ca;p-uP-n!9>BKyrH}yO8Z!-KFKWXxJ?Bj$f6Tf30k%!-*kEgL!%nB}B
+zo_9$<?LoQ9t1FN0-5oV5R^6OZSXs4PjR_II19_LkbXr^;?Ass4bjkRp!(&H;<9Vt^
+zM0gw(>$si{+$&5eDK9A80cWKZrL}$1of~P%u}9IVjP9IZO|W*r_$sFhs!MC5ljdwX
+zal)vk|2r^Fqp7+AY+&jynuQ`Nvm&aXD_~036^I&@T!E-j0AhHK!tde1-W70;gOH>K
+zxB`9qL|1@$6YjgU$V#BUO^2!ehKj7esC?94Szz+5u3UdnS%<GuoUVW=F;}3!-cM_-
+z&ejzO=cy~;m`S(-kx7v&5H*~r8I)&wWnBfvYR=Xs1OgctwexB#t1-_=pR{;+ZLnr?
+znVPkE)AQ!%EeW7J3yTW}vYZ@Hrg@j-ExBaLK#orf=n(Qscf@UFaWSgSj=0S!=o9j!
+z^va6b(j|43bv4tNwp`3VmzCC*%&Vv=C=RB3mS0>H2=J4)VCKTinPt=GF17ub$Q+uV
+zI&n@x#ggEhAf{fZXTkKofr-OOfjPk{7EML1%H-LzV*5Ci^;kt}d~M~VLKI4E^spOl
+zNsbcJVR*fsX;X5mD{CtYE6cpzoIb^4oTb|7_j(uP#*U7P<<#&jKh=|7SA9uP%}r;Y
+zmWPRIX~mM+sh-FPJ>Mgflj$CBrf0IA3rzRS*JZj>KBb;kU9c=V*HZf=`n&PhJEJ~O
+zI}<AyM=P*1Y0jl(b;aq-rkzR!=jIg!wRP3O3B{Gw&Jc8QFktVwo^!(`hj7#saHm4?
+z&RAZ!3z5^+b)b-@hG%s1Qzw_!%*S$}h-I%*6=1UR7S{(Z4%9kRmpYy;#8k&QmwK1Z
+zoD-<_1a>TO&LF?LYS6#0-)$vugtgPToKs;{v++I*IA%4SJ6U(-sS_5fHJ>aDm**|O
+zoLu)*juMSFonl70$r+_ff;F}0UAlZAlX}*yzTWETsrF@l>ZC~bsXDLa_4TIjw38BL
+z*e7eoLyd8L*Zhqb#`G8SgkAGDVi?2U<>lqU+G@2Ln;+Ex><+|q$<D&bi?ZICTyz>v
+z#K2wPO-EO<3tiaws5saO96ym&FIeQQt1ZFURa&S<uk^~I;C#E5_TzMU{fwQ=n*Ke*
+zP<L96-Ucbk^z_Zx@smW`H`+N>(G_w6b}wd6!2ZSTiIr8siom408jNYF6AK&(hU^#_
+zWEjnynini63l>eQte+q7dQ+qGu^zp8mM1H!SN}oWkZa(RgseA7?C`zL(CYgJ=gpin
+zi<>K$o1q_`>5Oilj`-p^(h<jvkNBmlRg9t0>e~B`i;+wfuk32o*MZgLMI1P?+3dvB
+zV&d*hqAn48DiG5P?ltYAsg#WD1~Crw%)7*7eW0FMAKe12obr~>(s|!!CJ{5TcCJn2
+zw&eWDdI^&{sj4PeS5%1^Xi;T3_JY)YYU(7tb-`XZowG+Ym8sztKEpGg(^}4LJppbF
+zMrC84dEp$m_0F^^5KYxMZdD&0xzl7#g^2=pRuHWm>?c*17L-loKB?C`V8f2Y7Sl#O
+z3tti)&FD-;9LuKni3|3A=TE?fB({L-XY^^E=qT;k(nKyp=gZKlYQ9<p^gF3hK}R=g
+z?M--?9Vorat*M?iw|iFE3&L_^F*gjuWy|G{m2%_M5d%-U4EFQw(2V1$i%o6m$46$O
+za~jgO*EQZD&--Mr(b-ixeBWySypQ30N0UsaJDg-X9x%ytv|~wDF5@Jbx>!k8_hTd(
+zGmRZhGM(;llIeKBB-7E3C0V(QlVs{*C0X6Kk~}4=0#8-2Ho_Vb1)jRo)3Z1p*x^T<
+zao2Z8a@ewnWOTYGBVKc|Z2HY_%k99~ZX0CwZDW>`0W!hvWFppTD|_cMNt^6sE@`73
+z%qH!4XYxrb`pqcqCVozdK5n(0it4l*mDXXd<B*p(xu6Qu&?0Oo=c%zFFK-q{n7jqf
+zSxcXh+U(#&JIg$+I=BQodNnmPC@Tx9r?In(XIBL0W4Sm(&zSNSs1RyWQv-Qe$W$zu
+zQCC|tf8vtr%4LW}sfq<W2;fm<MQxz2f<sUc5#*Bp(%PET$$T(2TRkv=eXyY1vCgka
+zJuOgBQxmM_#^UsX(lWI5Kwx5VX<2Y$S!qRZQgK<qlA4-Hvx3-?oQ(&{dE6c=)bYTB
+z-#o7`udZe?pZ(%Nu-+`M89yNq*}(HwR~IZdTa~&_*NmT>5iBmKE34K1z&Kc4RavH%
+zF7tI_`*ji{O*MLltY%VXb#-O6UPPE@VG`;jok3G;f>i~0h{nwxgj<fstN6Zrc~wy$
+z56MGz;wmh;sHXO!Kv6;UvQkv8K+Uq!;@ZIU*>ln}1KG2^8G$kSR(fT56{5Ykw5+st
+zITDS&k{gZKY3|3QIvCl;>c?TmK!InJ)*$f0l79Typ@6bx<A6Xvp3Gjnlr{5`Aa>W{
+zCTn3XwB^C_LT<C`>?$ZjRmAcuO4gp4TS1oAoM2h7pa#3{+H6U%cJA`3;55ukE0$mZ
+zH>;pLm{q|Vg?hY0j<PCpg0%%)bhElTJzh{+TY+`y+=9hr;oH^G!Q%`;0n1!RrlzcN
+znV0Es-pIgm&~dA-0yBQ(P_Rf<K6VGr&OonzJd?93*rKL+<}b&Rb^$kSiYHbS1rSs$
+z_o<%jg6bu~JUmB6XRt#SefF?-$P82P`og@qb1pT_<+RMQU^(^@=G3YkRd0G=?vhD}
+z>k<>!=u;&Vq8{KxJ@VbDQwC=7$lhufALBDa%~ezpH)s3g(}LNkv#|=nTNu4(zn}~)
+zKx#&5MNMr1c3e=w*zi$pf~>ZD_U)*+vHeAF9ldcrd%<kfN9WdcWWgEUIan~8O<jVo
+zs;*?K3@om!5B`7by$@hqRhjpHZzgS~C4^wpHZ5@)Y=r<FNNs@>a&_7U2ofc>fd=fg
+zfu;~_paFsgsT#LY#wB8a09gz&g{YGl-7Ex{LX=S=MhR|evzqrcy9S6FY<xGa5vH2j
+z-}if;b2F34pP4iT@wc6J?q|+<&i}v9IrrR~((St|uDkV)ow#9k)9sbq2Euj)?#0<|
+zOR<x9+wMDKxQ!n3CJutz%gaA?Gv=7x*GDCE>U$0m+pAk{v=SbD9BEGX_b2zSEnAB(
+zx#6nq(d8X|vux5%C{7rhk14(U&Z;f9@Tkgm*%+<FU8OrK+48e5SQ}X{6Bk*98#Y`L
+zb4|MO!VAau*{vn%ofmGFd4Idz*FJU)1Xczx?_1okA*}FOO7Zp$muBZ@U(FPKcr6C(
+z>}#{Hv;;*rthwcu9aA*-cSqjCTWrUachT^s%DhP4<+*=nYQ6|}swa+L?~c01jYqlN
+z$(<^6sJPm_z2z`PonQSfukB;bFZUb%H|3X`4Kec@z7Z2O6mHl#X|IbjbL21`_94SW
+z9A4~phe?0pAdkgcROt5ZSDa3*?U>l1hSO|~>r*CK_4ElUn3cn0KIAp?R5~FdRYLDn
+zROl4%R8**;cOt4d4#v%*I_3~swkS#yYIhF7tvSBIec<>8w|0u){yvA{XHmIp-sz+6
+z<BKP?%nOgcQMXPvY>LdrR9jtBjF!_5fij?lBb({|(}oQkff&?f>b}v$+sw0Ho^7}u
+zD<eEl5MC=;D|@WzW?U>q&NMUJ%idnG^~&of&Py>|W1C?@*wf$Lzf%f>io^7UF}tvE
+zZu7W=6`sdr?mb@Vo2lZbnit>kE)>}>WY=e!RjCML?7ZwiN1L=y5E0<9^_j>t#?g0U
+zcgJuGJnlh<8{}~fdg}K1Hbr5na?%5iYYY=d!k9s$e-vz5gYO6MU5oEJe9y=C0(>vT
+zHwPP>ciw#cZtOQ^V&iE0cI=2>mN~;-ezg1T6`5-H9cNW12DN>|nzb7$A(m&vqQzTo
+z%nY~XN&8+ix{kT|6z%&?D{q%YL^wkW&kRpE(cvJs;WW=Ms81@3V@UwJSabr8B^>sr
+zxrP(nd18krXC`JS%gI@p;3dA?Pw*07M#sI(Ax~kiR!5Ir8Z$SyNx|7$xVP=RLERqY
+z!vVMBZk={X{`O06!@ZF;+6{P)^W2^B-3P**tMTLFcqkN#&vf^;!nb|m_apbL;&;Dk
+zcjV2m`2E?pzT)?R`&02dw(f|<?|izufRjR)xJM^iz@&Q&1=Im&7<f4_e<aUxBzHTv
+zSJ*}wUpd@vtQ5QOAT?=V-Ew2JlbECFWG_(-cB(xKD?j0MgndlEGZW=S?K@mO)ppAi
+zPB~!2>2$hfNmQt_UI9h<pP|z$J>Jr7qw6D1Z&R;@qLVQFkz2d{gzG4F#Fo}K`}A7g
+z;!AJLrH`c@&OQlYr84@I^491gn=uK|?O656cnfio_qa+$rmUIT%mf!x*3twQQx@X5
+zi%E%$F77E@iozT1aOM^jj^|i>&rTJdRV6d%aGQ;#WzRb3a9cdCL5GVoasmD}MKOy7
+zPJwpbRXA&O`+2wBaSI+~Kkw7KZ`*a=jl12}YXEk;<+ROY3lZ<Ssq(yYufOA_^3wBo
+zzjo(&*0G_Rcb4)F{O#x7g4b7+?yNd5Qn^vi)%lXCM55!|?!IOBZ8u+6eqL411=}xJ
+zH_@S`9^JgV^bVXDnPc*|?7ri+9XoHI5dL}Ebx6Gx$y|efhf0U(-972K-RRr<Yu-iY
+zLMA<PJUOuw9!fs;Lo9safQMJ+{Hlye&$FC3KZJ6f=`AHE&JRu4I-Ww^fA^dpnz%jm
+z?%8Rw7sFGmwr$bmGoax!mXp?dC)U=Ji|c>S+IpwFB<de(a<|ir34W><YfPFrXZ=c|
+znctWZ9sY5AzYrsy^fHd<_}0wz1xXWL=`ktvH4)<D|L(BKZw;Ane}B!}^_Hsek~fYG
+zBx@3yIQ~!A|Bo5O#5<%hom*R0d>_m|R5!E|j6P_+SSPv}am97ar&U;d6W<Fsr{E$N
+zl~K1m`M}uZ*yeUvDg1t+=v=5h!a0<SEcGX+SnUDKEo4;K)FDGKhmhG$thX3N7l(D2
+z2a<^QUg60WI#+KqiuMrqOQIMC-t9FxH*uUFk`$=7ElrsMOE&3^R#u$Wi<zQ5<=CQ$
+zZ|I|K#0#LJeXUtL!NFv|^0ugGZ&qX!MU<*~n;65B7fVg)iK0olg3E|y-n-+(?mKf{
+z*=juRy1bt_scyZRYBp!J!#j=EHsBOTdZV6EQ0H{sb#;HtC%3tUJ4LonoK&Cgb#;HA
+zCvc9retBaqX8ndW;HVBU)&0<Nj($`5nErlflozGzOnH-Y3a7k*G1dLhDV#F5aX5`9
+zms6d{o15|%Ia@~Qn$eT)T(!YjMuieSW+iTxQO!kPoJCY|D0A;jX#WdOs!ugGSkvoN
+zqe;Q+N0TToGmR!wIGt`ZnZoIGqe+2QwyX4pf2;*L6U@6_k*}nU9(CUF1IH6zmpdsr
+z@0u6>hhOUZ&i&zmSqx9_c)gu?*1~$9#))Swte2lneuyPfKaBU}Oyp6INhh1iC(aTx
+zhsg<nL-%ygZA_)vz2jYIhVDIacX{&Z;u&&3!ztwxC%&(gCN{Atoj4lFS0`C7T#bAr
+zYj)?~*yF;-%qI2TDAj6)_N$UG<*B|ny~TA7apthX%R@CN&8{>id7myxd?WuqmKMnb
+zLyHXm0fA_pEyos3*kYda*C4`w{$Nr7wrJ9JbL1Zwi1xK6J1m{xaq=ID;0y5iE=~>u
+z6K^EV@E1Jn*IG~QaZUVx<S6_{7$(JTize>oNBp^kXdmmxWihf0j}aS|$NAwsd$yf&
+z+eN0@@PcsWerE^uHa%_@9-$(O<G4IT82>@oS!ps;k0i%6_2DS2CHmV`^kH=@X5!go
+zVrf8fY<mV}XR^{X!3$f$EMs8}&%#T%SZ$>v?mUIPS~U_o(iu7xifB@Bk;?h_`S<az
+z7d_QYaAEbJ8C^^{bB~7+PRleC>l7}fSw=@XL!O~SgyT6D-{WOr&D*gW?5vfW_=llc
+z2Oa+~G^?P)#i^?8_!mq#idhUp1=@+vi4r(b0w+q~L<yWIffFTgq6GfoO5orB@`t}A
+zt3REsBlY+*?ONA-Tr%;+2Y-fMD|1*sr@VOX5o>3X&^FV^??SQ0YZ9!tPb-rKbI~Qm
+zMdQZtA0;=+PllI(pZWJ|+67EcqE;;ux#D%0_<NkUU01&50?Q&gJUg6J<*Doz1`+<G
+zgnwGU@XB($$qFxrSN752RVYE1l2=8A$FxR%)Z;GaZ?D8Vjqx~4ba**s;`#^5lV`V7
+zLg+<JTOJvZ`i=DAJ@=L4lIZaMqQd*2a*<Fm@$aFJdmImMXBqwoC|-Xd7SZA5+$8oT
+z?-6<s9-Bc|r>1qYp+tQqr!Q|q(T1?2hP&jqM_Kv)Ny5uIsA<lyv+-Zsx9`6GlRLKG
+zbTj@!C;yH*{$%Hb@cLAEw%-AS7hMPAf#Jt?yo<i_y0A@jcmpat`;W*Esq~d0eVJiz
+z<G+|+yt*DQkiO#<yy70OXD!GZ7vjgj9x;`uhBmZU@>|xcX}61LLUL(H$G7-5=x=DK
+zednN%QQaSaT_(OT;d2tcCtJU*E~&3`oCO=JjrUQmX>NS8@MU;ztA6>Au(s*akM69r
+ze!-p}y352j+THG(ug6Q)rw?bs`$kkaQ^f~&TXx>|DZG4LaywnR`1jR!^Y!`aGmSgE
+zuVmMT+pfO}FPr1-f@#wiewHjEyiEL#%BQ@tANGtdd$PP>_m1nzC;o9YIKpR|a@)ec
+z@`68MV98mJtS@&t+c15F;}Lu7apmdWdNS@l9FB5-+fFNdmiL5kBHsaH`3|Qu!kzki
+z2;#ubN2J{Ta|m=Xg?vKUP9YyJ(`o#N--n~ZkIEna0>V`B@{eJR|6K^i8<l_cS3U5m
+zWHdJZaXZF;F1~iZC_b4sGk=C0p2KgP<T*Tarq&FXY0>5ZN6>g<<%Z@rR_e_Ij%tH$
+z#&$o~{FfW`=Fs+p<~O%Gnn$lpY(8?=yyhdD^!tuF90$I&cS-25V}8q<j(IJAb|khu
+zanHKuF^Ap~a%e4@R{e8?QSWo4hMd*gL(MC-16ewLpN@1moGnOuU21~ou$J(lU%cVa
+z?sFRW{$bDkS-SIOzhg;gg|6Lahw)d0mxeIB@0;51LijC!-?Q}Omz(!44t)rIqvIGt
+z9Lpi!4%*@R9BEeC{EkI2)3p}q`h0?RpYF)GXTXt;{Au-XAzjSxzJw*PTWr}e?{C8H
+z**~pse)dmmP?k$uUUg(xvc<^r)5tUWYTZW7bJ+KUe&8v`($J7&5!{IXz^~Rf2ll=v
+z#5kVWyD0RkV~ORL@r@yD`gv|I{VccqyoRtBtFpf8H0^00>QL95)LQEQ0{4GHTKsz}
+z$L;L&`S)HOI^E$!x|dnuABNkv;I<ug>RsqL+`jiJq#><k-`=gE=N*efuQ^U@(ew}f
+zg6Vti%ADrFud<Q1bfjSk^1BG}EVsfLu+k-I#u#3=1Nq#CG(YZ0I1q4LjdZ8CFx)|h
+zqvbb9`)^g*Ji9k7bcd$3{}t&u6>V?-uh%!*{vU^b#<kC}H8iN)|Hnz<){l1O)C)t-
+zd7i`KrZB{G?nnMm26gzNzO{PYS-tr+t$MRvE>6nyprIvJ8%}NP=Px|5zPTOoz-+nk
+zf9uX>|F_mR)14FT$@vBCfUa+Nl5T<yw(Y<C55s!ekv<`w*HDgjx-rew)v%tCca{O&
+zGu(x+|FG^k{NWYa;rufbP>#!6bi|vGIrj5SdiCZ+kZ!Y*;1}h;&vBKNC%<Ehl}{ha
+zVV|SOvh&@2EBkZ3Z|~;NzP($Rmihs!JxLw-?yj)pj6-D7&eozV4x>)@?JYt*OB<lS
+z7dGh!j@)$#`g$Jv{3i7MjTi$qG>`3m$scrV|HUZs_gAzN-|ZWlv&KGm@Hv$80_5i`
+zlo9fkdd{8xz=!pd?(yg=esRaID-O;>U3&jka?q)#?fUIJt!VLQJrA(0zlJvOI@=V|
+z3x8=}ejnPczTnVr6Sbm98SNLt{!-ZQa}<W``hL)%9k%P7^__oQ%PI}+TGF-%ee2ny
+zN0(-5nZ5QGb4uOmXjkm>KTN3Jyb@)Zi1x+2&<)3Bj{Uj#ax8zJroFsE)BbqK@lTI@
+z{)pp`!%nT}=w1!wtYa+I?!(yBvH<ZM-Jyk!B439t*48J(oPzJk_@08Vj&CZyr{c@;
+z%YiSJ3_qWT?|gh0;_FP*+R^^n2QbFHiZK>Z*Z<z(SwEEIS^vhFp7n>$@vJ}ZKdTPj
+z{Jn~Uhn9NQ|M4`~pXXUWyw<aR<U-H-a~~}`So_(Mg9|=Ud~jriXML(G|KOSr79K1y
+ziw_<;#k2m^MV|F5_mmtgg}Xy1!MxJ5eka13k1!8ijCgdt#i^f+ZwkK2ExX>Uy$5yL
+za@~6ipX$;U!fqbEiTFD3)$lzPV@hhvk-IiDqde|o`(pWxUip2@Gg3BeZzw~n{Ql(d
+zK4OpEdbVeOLYe1I=8=7lW6G;&zoU)>E8h?3p=arL+&%i2-Tzk<=*_RfJ>wm{@`qNt
+zX1s51{T|GS_pXHIBS?=2WjTtr{wIWUzNQ_*0-*@;jgKiWT%`T+l?1KGskOc5g#_oJ
+zg_d0Ay~y-29nvSI@3FpppDQ`2>l>du1#Mr~La1jgjcMg?_6KpFX65Dde$V~vM-%L{
+z4No4qYa`OT0sZtvD-TB<2?s*k6JeeQ`}xR6QuC1)_4_yn{26gdyY(EFG0k)M)s>Fs
+zfq%z*zeC2z1(}}ag-1Sj5L$TMF7#)tn^SMTvn5cgpL|a>`t#XG@(;eTQd@t{k-~$k
+zj}#yL{h1otl(zotBP9pVIZ}3T_&ja>@7K~?aqz4oXcHI0jJCWG{!W6QH$J4TAKIj?
+zUjV<!@bml2;QtEB%MLo>=Z!11^}}1V^@!uX-*45{uhX-vd6o6bdLDp1>un9n;zEog
+zXB{bd-~xT=p(~QKqO?DI?q`3r-O@el&4)RKzlRdELzm9iif&Jkxp9TI<dC!Np-0|>
+zu;}*!a|6cV>HT-X{|y*}=>N|NOAfsxZJ~aJwiw|&_(&P-p&$J5RkTso6UsR4=<Ddu
+zNgC#*aJW_;kPkb3Y+rWy+x2_ouFFt=m!cjo!T6ikjCvjK8*Hccm*Y$$zC-wWP`NSn
+zHO%8<(AWN=^tDmU!GA@6IgB)j&K7Rl)Y+UdbhQhi6CH(4WcM-p@jKQu$MR?Cc+k@#
+zbvz&Df6G5~pZNSw)DeBq8O8t7nEu1M+_G_9?oG6n5X#{?M;h#8?Ds)8W7+IWSZ=jL
+z)|v0__11h!-OBDy)XAvBy@ol~*2NZQYEM7&`ugT)pkod|M|u_d3;hQi?+IaUs7r@F
+z9;pXDgL!l)!kr&;{ueC$Oms(k-u2)9>1O}$);I4*U3#I<i+;JNWj}PQ*Eo-3F7&Pt
+zd(0V|--qw(%KrH+Yn$75=QK0DPdE||P{$jx#?2*2`%>s+>Cnm2p_46d`JK`iLde(R
+z1)NisTIoj~#>c-%or-;p<I3M#r~0HzJ6v`Kb*e>E>QsK{Nz@yBC~xXMEH6KFEL)d&
+zRh5+w`qe(i=5c+Bb;o{8Qg?cO*X_+6s3WZY(*juIbRdkUKF%>@yquturH1~D_Cr01
+z^Y?Um(!T$y;Fz1{-&+`3fN>H1W7n5X){1nDaUAz)?|lD;=F@fOq2DHJMbv?oU@i3=
+z;%7b|hx~PwHl~k#neCRpxklmmFS@$ud9-JmsPnVUPnE7Wp=VQvqi$%oT^;(|Ql#gC
+z-OOj${yN8!LzhCQ37|abZwzgR^V-EnOAbc5D|0N{bq2<2J71A9mJj_gjOTuLd-L<q
+zb(v2Mx;@+G>&Pe5?N7S3S?UUNqg8j|`n1vsyRP}vxeHN$SOdV!c<j3Lp{(q+mfd$4
+zF7-TFyV!kyE8I!nV;RTNi|sMlri={}b;LpFij0eHY#lKh79M;t`D=yvX5m|bZ=?>y
+zx>~V7yVa*@MJwiMw{Fn2qP3%*`?0=AW53J9Z+JobTr{rJz?>GT-yFH?1#2y%Vck)J
+zIq}F{Kk!rEg1b7T;IKWGF&y?|u6eX0k9FDZ?DQ}`y06wk&qjv->fY*?OMaMnPXfx3
+zx+%jcNze|z1>M>9OI??3(aI0<QO*1yUq1jX_iuXcx5I>aLi#6$!8C-&p;wV6YreA9
+zfM_RHorlYU`OM;c_A$@?F3o$v0;J#hUeEmtH)!|e>skMtsXOnX8$H=`nC=!_zG3}M
+zn)AX0gy+##pp39jAyqWvo(T6T?75KoRtCcIuAF+$!rt$Qo<lhgErP$YY4$p7e>s?Y
+zS2(zKka=ZPk^P?KEA!LzW6tU5%joxM`RJogefh3$Vr|BL$u@O4_Ykn=Is<l`3puY@
+za|r5m2z}9xYgCPOoSWXj_`|Wzi*=avs|8j)l<dWx33YGGGxiu&hW=^q9Y|eqFT-Ag
+zQjeE$Hr_s$ipt@7Yc;+(_~J8TJsoxE2bfl$V;RPGX{+2@nN7Ld{y4raL49>iQ(yMp
+z)H>`vJqBHAs(q=`Ap1P(a^FA6c!Bg=dpE30U(!X*G~4}iTxZxzog*!*Z|Iz(rQBp3
+zlk&{OT!n4Nw5PC7(e)md`)MfOG;6+R*^eq+=MSpg$T|UQUhFY->`k9`ZNKk7rTzG=
+zwf*8<)UECI)2!C=FQNTB<+#S0qh3SW-g2CbHgK{vj<em`afjQJ?5FvYs?->dwv9BF
+zpj^UjNXBH2@yrYNrzW={>f168%eqkfu+HYvrv7r{^U%k2=;aB}&mCA_VL#M?y-=*>
+z*`C;U?RLR&ayi;XevJOV4*i(zBC_r|e{(O+mvr&eb-!t*y62vp<ehbod4*F;J?oY2
+ziMpti<>K)^&Ak(Q{VZh}4nx*1w%&m9L*F@aS03`e3FWX6<*@<#LqD?Tl9~J6i`sz@
+z)*NG4b8rty<`U_DEW4S?%kD?((N{i%zA{xmN>hC-9qab%tiB{VgRKM2+?SS(_ob^Q
+z^d;`!N;v0h)%QP!@`R3m|D$03BD>s{p+8~24Q+K9+8EdHf5ja8Sd#X~Z)0w|&e}5;
+zy@EQ|e)MVTBrF5g4ZqyOu=}_VeVcYyC9qFZ&l10pzr%GV@rL_;IK5XPozzdcN6q@D
+z|K~C0+2MWd=;sa|f{tU)_m~e-7vA}N;4FRNJ!9yvnb7~r(9c)s`X66~&VhRqX<lo-
+z$k_D~^iU_}3qQt)0fh0Y<0Qm!l9eC--r~?9_@_S&YvyP<)3FcZ0`oXI9}LSL$HIBJ
+z19|Zv{x4&0a$;^`ye~oLj1HUeGJeLrVeDwpX}Y%V^GVvRU%)<%op$P=+=s+insx{B
+zCvy?^Br~87pM-uP`H-+>evM2s`xMh*?^n`4{r)w=Z^KsV$QdoqBb|16M~3lqLi(XI
+zu!j&pS|^u5INuY~uz1#bD0NK^0ITqA!nYV-eB$b-e^Gk_Y&-A+JyG^8EL|(c-oV8e
+z*Epv|j)(E+L-u%>j=jvtF_C?k_f=-@!>5J&u+?{@9m#t5w3gE`9?E*y))86GvQKWW
+z`7vhRk9}JdS@r!Ffwo_)PbT>Fj`w})M-tv?==aMoc5Fw#e;NJ$bO-khWb9-avcKz?
+zFW6pCmgDO*=IQDG&Ov+Oyd`~|@<I5CobUI&t{-?Eb@ChBYonYxUZkJM-`+`MdSqTX
+zzDv414$u9u=ES+`-bm}r?G1Cvo5&Z}2Gk{Ah|tTJ#|*T+M(mfc-Lc=t+8>H;dn|kL
+z8+&ia*2lk)un2W0`>zq}X{!&|bz-j%sXGp#-bSG(i|!@*Mi$0bjH#3Ejqsk42V<-A
+zX#T;#-eoxpjuswVc(nMS|AA#W%}*@Labk>JaJ1}T%Tvp8{4dg60eRKI=7TW5zAPsT
+z{?3A*mOm}a+3#4Mb2j{*13&&n%X6AnE{D7f@`{5kYnSJId(-lqmM8QB{w>RMHt1*F
+z!@Zwu)JNLqJr688TJpf>6VeXdgT017qaR%G7WYuYZ3Alo>;4t?AnLw>zK>%{buVEp
+zWa|o?^WH?8Jr&`tg<pn|X6=E*8;1C2|KYu$r`4PgnTCZ3`-Rt+g<jaZEX1_)J{t8#
+zS(8XP)1RzMPMc8voCjpDfI2Vke_?(`TbxjbeuT%p2YW5k{!85V`&;b&8r19feXVa|
+z9Jh5}`#u)OcIsM@>mL8zpH_M;^fRPI%F&+d!eth#KiYc?_Snu04d9y#1tJwp$Jbs9
+z9o?%Rc<bX6@7@0ibvBCoLo)As4oe&5*#PXD-K{mtKD*pMawd8(F3E4|Xw*w7M-=rB
+zeL`#gv$f|S_Y2?p_$J)P(XG8|$WQe7i2I=@`n)}Eoapmm{r2tY^C$Y=#Ipz|`re7Y
+z_fE~XC;HxrzBjeLd}7`^G4J6Vp*rV!Vx1Y*eNL=1C+`t(e}Lx#{!!MMG3Pz({c{h`
+z-Ve0)V;mR7c~)rI#Ir)!ADZbrxZTI(oKbp|-}KO8?jucezs~l%9{ZQP&tRvQ`%vld
+z=ZtYbCwlLRdqXqbAGG7M&m;}a*FLu5RPENRle8jPmuvU^GuM$fmF0YRft;)D+PGo;
+z3PZbf=wa{j;2F4gKM&_5upVdm@*EO>%e_9?N9Nx2#aNF&<+wIf7U8!f%5VE#?xV<_
+zSDAIMkp9zfzU11_Iq>g~@av26JEZm#{p0?YwLI=94!xKABoY3qqx?OEJsLaB-f_P;
+z(}F!6JX)0I+!W5Mc4l;5Wv|p}?Zq;!vM(gM-qM(R<wrMZ2acYk?RO?uZ^oHSbuLoQ
+zdMDznH_Fl4E3)VF>u@%EBldw;;{3M*=f8i8^BkAK%<@K9_i;Z4ztebs`OU35?vddf
+z>0P)__#(nglzR1}UU}wky1Lz<Ik4|2XIOcEjQ17oHpu-K`yP><HhV9Ud)CM5m-ls!
+z)vs#~etAadSmR}xzmD?YnHTC6*8Mlw9l2{0%6%j5P2x;3_S$)_gLRyhI`=xZ>vzU;
+zmU|rs9>=}&eb}e=ZAuT=btn7J+3}5cICmI%Hd4mQ3*z$|eXbH`)9Al><!qk6nRqr+
+z;$IhM{EH@}-H$$oGv1Ph9kWTp#Bd}HABZyzr%p`6-iS0j5nmc|G5$XmG5*{45UhRE
+zW4QMf&m3?O;@ln)C+`(6Mcoa>n5*owK>kg|0p~m!XYyBu=Z}RE`;gQthVXn3_t^Jg
+z?6uE~@_8cr97gom65b;ZpKpzKpZs6Y$M?T}N3+v9tBU)+i1S&Tz2uobj?>TJSr(pq
+z9aZzk^l>j4zqj|)!8@D1G4|-c0NrV)6*tZcPKbMRMBH26wzzM$;=Vm9?xKjedG_}0
+z$@g`L`z_4de2z=b$Q0vTCdWwJYe1O~K_9Ts-b`QK;pfWYE$?d(Z<%!-Xwk0uDdBq}
+zH>vYLJk!eOndE+t=ox-IpCtEamb7pVv;AL+^98)8avJRH=Z9Xx+!=kJ<x<#5nBntf
+zayE!(%H+Q6(0pm{_Ss(hz6+iuPqWi@#sWJW-iuOc!*~^bwrojD^Cs=U={S%2o``gQ
+zNu6iK8fHAK`LLUm&y^Fy;<HSw3#WCTmS;Scw(xANo&Wg}=ke?`ehFtOCWVXfES$!S
+zmgc>ZMysB!eDmIyeMW?HrQ~fk_n0E@H%0%pb*Q1mbDv*r9g6p`Mxp48fmL8NNINfn
+zH{$EZmuAXp@oiA%0<Z($E@dtT%kiZ<x-W*ZRE}>IzWBtvKecb~a?Ih&C(hvxJQEmW
+z{GV#wVa;EAFO2Ee9?NaLA>KJ4dhXy^)Ogl8(eoU2&Uof3`<#Y<)3xJsP8rSsPN&z}
+z>x!-=JbQmF&cyHx;-VI=4<gq9{*&%(b}qKv;MoJnIX9uc>W9YtE{ES`EnFYi=U@Hz
+z;NI%Ezx0+QOD6Y+{p0>J;16pC^t)K?-)`4g%Z^{WW}CCu0cgw9mKEJae|g5xekP9k
+zY}sjZPnWIF9<Ma{-+TPhG^37<^%eVO<oQAAUvc(L>>otx*FNa#@w9oXU*qh?M88Yp
+z+E19Of5xNRMfXphk68wtFe}DBgguU+Pg?s4WtdN=>zi4YenfrnTFlLuAJ9LtBG%oR
+z5$kT2c^1~&eAa?)dA9hOtvEAb=^9H~+LJ!hY=_~GSocTn7cdO&6L4Ol+YcZN@xR<k
+zL%XFTNIGJN!Lc9>XS=ktE~Me<EmhVzs>r-_MWiDbvH!qybXn<;=aDf-qzzg5$WUb=
+zW5rN}|A8p~Lze&WxDwB^BKFua^uD?G7kkbeA6ph{w?2-uX9L(b&~b(h&tu$AS@ihP
+z_5QiX&GCcJl^nsEWx73F#Emt%JZmx=w_~R)5B+tQ-h6mRLUZ)_mACK=<6%6*7{WO?
+zo@IFxXNvjUFVEL;zm0Knzs{$g{q#DtL-V0KU5n@G?s8-t`V!9O(9H_%G(5ZcwMX({
+zk9F4{NA2f}9UuAy=TDy9lXfoWsb#-`dSx2oW80Per|2^<hj(mj{_8G0GoN&6i2Dz=
+z&NQ3+zg=#T?>c<%gGz*F*u&2t!j5y!J1Vo!70Nh{XKZxsY1ZSwit5do+J}C@=X&fj
+zcqM=1vq<6Rwe9jjnkTidcdMN$V{2}oaejMIJMfLK<uv~V?fbAgFVC~DY?HQL$TH)c
+z_h+8tnnoYB&&*Hv?8zJGw>da7zXF`<JpEG0_<ZjV5;CwSDd%K)RyDfq@Vq+D-?7{y
+z&%Ck^@|lCOB+Nl4Yq#d(47NQ7EsWZec<x3%=MsJvz>Wi9T5S?4yY<eLv(Zld*1AUa
+zwmDZtKJS7s?%xeJ@rJi#7H;{BX1w9DETq1s?NiqKT<C7#locV_W5&Butg_@gQkGhK
+z;IE_H2cakb7Gurtux_V&j`>{A%bdyQr8pPMS~t49{0I;8z|Zl_!q4gV7gpKHyApzU
+z_fGrP&&>L~<8P-p?|1|3eAa$acpW}qoh4n=!g%awE#>#r&wH`{W9jAgSc<t?E5WxG
+zUo6nxHRm2@?$<o$JP&h6BKGwin7`!Nd-fB%?XzE>hJIZZL%*}{AD`|>A3tO6yE|uc
+z-+VpXH}@s**>*W^YCrp%ulgqLe@xpq_rIRgj6tie9%F$$9{aGzjbgX@roE@&gKq5G
+zn_%6GqMmB!iF>Eh_2-YFPnB7FAd&q!{A@A%^H<^K?My@V+Z=xS+Z;aX!P0lg-=M7R
+z_Yd)T0j|5*_qg{rsMgV}Bg*LB2kujK_S`Q&-AtKvRvI$aVH3s+yPoYa*#Ba}_?Ys#
+z3bTFd9hP5)IotEo(~T$5=ck!ghCfq#vG?}qZnonIJZPi%7NN0nd_ld9pQFZ4tF7DZ
+z*e(m$r_Du=nHa8hu6j~<(a&1HhG(s>!?V`ZlkE2ZAsp*@>o+GoZ;gJ4=bEW2IPqMw
+zS94xqyOs9>Ongq-&dZTa@~pP>W63-H@i{dstW&wCs`eADIrtdESuk@rQ<YD=c6MGO
+z^-Hdcm=Eff5{}ir>*LWc;eO^l!x!}fe4h&6so;B&_x{4=Ci@ey_y1&%!M^_&<=-*e
+zdw^m8KD;kvrspf|a|p6`nWpwQBK@a@;@PjT&oM;iopVh*&wgEi`(MAt9AnQLR+-JP
+z-)if(=R;3@0sf}aVeMx^b;oI#`{cQ+>2+AO@Bd=>KHAXI@VxlX)LA3WVR$3<NU9_D
+zNcg<av%BwXmc0Z%)5X0`*-NnV#x`k>C3aawj44(><NYCdrc2Ir$TMd=H^sH*vKFK#
+z?HTNqOt-&rywb7Xx<|KcLRz?QBKn=2^T10f)AA$A!}B(j$1`|0NOYOxTW3F{OdiMk
+zP%dGa;JqJjdzo18&Y7W1aF6qSNXvA4N35IuXd|-sHgy}B>AVNpjA|o`RK3XhjQde<
+zp>5c@_v3hvP553A^?qrGl*iJw?R~1Od2`<@I@WzEC*G?E-E>Z8bGT+ed8HlQ#B(_l
+zpWWwK9F}wBIg~E7XX?j2IO?vPC+&4>^ce7Gyf4n~zt9=dBF%Vz+5|J6x0+z)J;O-%
+ztW&0i<X)3K9t>bE4nL>Lwj$#}<a7AQ+xS_Ru9J>mna#MKaYXLJhvy2J>t?$bANGH2
+z`|*+fXS*jK_RBSUJo8+5Uq0;j#NND|L*(4%xAw*Varfr4PMv!niX8K1?nj9S_T6)S
+zvv1Sl$vUGW-uLOHPSV*#f12&Nt#Etx?}#`zh5L{3zQ4Ko32`g;$-?2uxDe+VF1#l%
+z+P{A#)_?X{GK}T%q$hkHH=K@Rc_%f`elWi1G_kG6quZVj-IhA4Jy&py_rDlXzOT=s
+zd@=4$l@^}=jpyE=eeXUpE!0Qixd&?B$MkQyYW%)`{;KJ9WYKT<9_g#b&pz>fKKCS8
+z23gkL5A_l`4~FOALw34EKeozD-sS1Qc??H_wFkg^ecY#bjXFKnpZjoj*_K7FS?xL0
+zzbSIhBHh|kW&BTV!JdZ-lV+|9eb65x&nR_Sd#2p8OmF!W=Ir)gR;c@(lCP)se#~;u
+zbOi7YW_ic8%+az}E&HvMQ-^&f&OAN~-HmGq+255jJhRKE>>W>)&wa>;AAM*s&NInA
+zGT)_i70!w32i98e+>`xep5IJ|+0K)FZcOsUvqj?W8JuT|H(&mh+JU7E^KHu8Cz-ds
+z+IZeL9<4)s+#9m;xI>$e#{k~*Xy=b*HL1?<F2Z>8_AK5n`F7=N9rES1?$s|={Yljk
+z#)FA<q~3dC^)00@qU~|KS%PwiH!uFz-`;wfs;>=MeNEPL>@VYcOsJQ**DJ^IEE?Lw
+z@jJ7#bnZHZy_T6-pGY|H1kSV^#$MDuj5WSZ%O>j;ahyeayY`|)4~VUoOtqIJe%Ho4
+zM>myzPTfA9J+ScnDEG`buQJ|H9QRr;z+M#hu%_CJTCDb|_+FC8zr8U1ew6fM|E6ok
+z=h~rDr=M$`*4V&z4f8yU%%`*4Z{ocI`j@#Ye<{!5U8BzGoz}90ePNDqv|D>g6XW68
+zJ>G+vDQwQ^vG>ck7sB+beY|@r)tNx%VNuK47;(h2CuhGiIkKGmCw(d+p0t)_#~~h`
+z(Vh^;Jvd8loo{4ba32_BqjP+Gm%5I3d~_a%vxD~9#@=I>`vvk|8P1{A^X+%TgwJf)
+zZduOOJ5^_K-UDGq+<&oj!nEUUH&y!Ly<dQ~X?>t?TAxk!AAZ_$+m7?D+j;xB)}J_1
+zLLhJF4!XeKddj@vx|_;(mS%qXrpmI+owwb#`?iZRHSLmHW|mI~zwEl(%TxrH;;(>}
+zOEBTc@aw8uZoi|VV)t#8h>6ZKZ@A-@9rCB9EO!&byZO2uDm*JccivfXnP&akUZJ>Q
+z&Dsr>@_WmT6M3iQ@-p@J%4{DKZQnr??uK6MTAiZhy4<H|?>%Knl9rg@(B-n}^be$J
+zU(UPXbS>4HoTypG-W$JuzDRduU%m``de%q(%w|oma_OnbE3Es1*t^5a{pDl3p+mf@
+zOq)(Nm7I+@@&g@jg8v*G46!~X$?r}5y8dXw1CIK{2j@LB|KX$t=f5m?WZ~CNYQ#RH
+zwhG_Kc(d&WY5S8<Cb_Fp_F6$i_^{*qqawo#+U^P?+%X->KHB|=9e;6@d!`$HqVw5$
+zjQK3I(-oEe=z8$j?($NsVvH^?JbNOa{FF?)m}wF1E>Ag&F0W{Jo@v}gr;Gj~Khg5c
+zNFjdPZEdFZm>A(Fx}5nUVe7MPih7A?Ptoa!43qw&!}Zt$pWWW3X{WOdH#1gxB{!4$
+zU99xhV_2|0$2q;L<17c(JJV>7As#C+xJ0$%xz=}aocWCIzvJUVQA9g=Xx_tif1hnV
+z#+!~4;mUYE+j2;Zvz}vx8{H22?fw_p4kE_=Sm8yF6D4>s$NC)SepeA^zl)XL=zdwJ
+zlB*@;sg58P?^HO^<(GY&>Nz@}m3BVMCS-Hc{KxiTee#dZU37kW?eHS!BaSl-N&n(}
+zWWm=KTH4Lzd3dhrh|d3X;YHUo&5@tKw>&x@xpv}W=rL*I?q;sX6Yiv-qRV-@a+&RX
+z9o>Es?Rrs+C0_@3^fRtU#5q1hkMptS`{;NAamEv!ewrgc(dC+J3!~a^bU5SXuiQt6
+z<C!L$Xm{iBMd@A9?(*&Mj?rDL^v_iuo!;?$MU`W;yYX_28qa6jj-%U$C(iX;biNbq
+za#oB^Z>24dnx|rg6W!j&*T=_6ugN>c{t%tt=yD7kCw(cp9FJA6iB6x_&Oi)(E;|14
+z`8Gy>nywv3*LRxTE)@UX^630dmyf7qACu9Olw|id%Rm0+)=~aAtoY|Bvu!`y$VOE-
+zwm&<ZX#050w!2ug<BNxC+_F~#lf1-|t9CT4f9}WOZ~5A-ep2{qT$xtRc@|5mY2`u4
+zF_cUz=e`<-glXm6N1G{qg)!pyK#q?+nu#gms@n0i@;tbmDSw_A@>LSowB?@}L#_&D
+zTL0YtnyGwZ`R6{@T>NuC3-3Ks(MV<@ud(9izSUgf=l;}8{yj*{O!XHlecb1nDSV}8
+zPTPLw8vg&^{d1pZrt*!If9~fX2<0rY<;m|@{<(iMm-x9)GZ+6#Z#m}l&(%NoU*?kj
+z$_d3hx%`!0G;RK3$$KTpY5P|!|8td7@4{!=@%Qg7k2Qa(`G4B-|KBc;H9pK$?upUA
+zV$C1imzb%4#%h0YwvTDsx5sM!GwV+?&9B^Nn2TJs&uP;)S9zS}Gj0Eg)jqgyFjM`-
+z@?R<Cf6Vbye@7EKX8+s=m`nP(-k*#Axz2A~&(9P;=ZBfvXPoWhZEK%zSNl#zzH#r<
+z&GCcG2A_0j?ozbZ8xu8mA$S$;-WCXrbs+q>vlKHG(-fVG?I`d6MmP<MCDQT=wh4_)
+zkm2BTinbl`B!W9YyywWW$GJF*ct*}*zhWD>8Sd)9OB1#7TA^73UIF_m@JiTM3e5`e
+zqcE2X%~BBWJ8_qQW60Mwp-}{00{^+-R@mnVjn&|XVV?#T!9G=JIKfZAehf9v@Iv5U
+zAs-bQ-QX#Z2f+VvXyxrfvk_bZd%mlY_La(>`XipjbC)V+fQZ7KsL1s(%>&@6@E-&h
+z!p!$V(q9t^`#SKC2$%1V1Wmk;&x)r;XjX$(JRrj>R9p>iK{;g!%~Wt9!V952(0){C
+z_9%0=G6%r-z+JtvXFr8|vl3hi`%$z9)VbS<{%@5R8rdJvE{4J1fqfwDyTL;+cf%dB
+z?B;lZB)GjG-Bl_7<sjV^f-Ls}@CeEs@B1JPA2Nq^sJjki{%SzxmoEXqdx6}!;P1g~
+z5N*r78pMBhGA@*l;SdkyBOv9&Amu^DY!F#0SS>U%LA<ZgoeHwtlZB=eWc?-zO)nC~
+z{!|IFKUD~g9FYBBwPJ>1s$!yICn8~gY6R)NTCrHsqnHUI%7P4`kqj<o`78P8$<`#`
+z9s+4U2r^tRh$1Yg5gHX>8sz05{=4&WVL$bN?58;((~$_WKMumc{x~2s`#|=`Zjk-4
+zOK5h2?2kdA830+2?I8POo6zus?2mO|G3;xFMm5O(i1+?k{jpSNYy;Vj3PGz~fb5U?
+zLL(1EQr+voRJiMaBesuLko~3sWc}3(%{q|vS1UAYK(>Q&ko~V%$%~Y{0Azp60~v0%
+zVuoS}LaQGM&3=&mCZO!wm3<?~epjXJE0ui-$o}L}_PNS_HHawOS>WH0-&I0m1ns62
+z?gtdJQ#I``kgpaRS>W}MuL7CROre<pj=-EQG@T&*B?^rS5M#N!4P-m;DfWR(M=!{9
+z^au^lsp2jVd<N~T4KEo+6}X!ey&&6PF^KmCxeGy@qjl#g`!V=KPz52OF$iLAaQA~a
+zzwYh;S*`)0*#w4QU!&}+m3=vgxy3z<aG^`PHN1e8=@?BD4k>nnOpgy_dKy5cr&ihL
+zf(WW0M`&b#OwZ^d6%NRL(huSpYj-!ucGV>`J3*FrP-u35Y*(!y+f5zF{L~7~a%C=4
+z<|2^!Tc_-^m3;=t{CSYCXGy#OjQLxqm<}>uV~{gnBP#!cAk*6i;yD6$7s&K>3e6zM
+z^mYi%0Lb+EL2G;kncixlSq?HCrHHQ$4C2r@)6uS2t5~gA4l-T&%ABj1t?UQWCB6=j
+z;j}5%D|!{nK&C4bL=_ig2#r)FAHhqg>3<Mpe!G=9sMrSL8FjZGWPY23W+R9$<!%5O
+zehtWcdqAsvL57zFvcA(nmS39COa&QUve0yb3@3#0VK{vt%db~xwkva+GB<*(@8sp0
+z_B5CVMUC+~6^Bm~^MGOxi1(7XJ3z)85Sncu^U(@2{yLEH?@?R@q6xV(K!zVee9YG{
+z$ac{WGGBc{vlnFeJwme^WVjt5!>tFIuR5W*2V}e0rtFKAeLl!>BM&@^dh-a4BIJ+u
+zg&^$<gvK6lKf>`tnP)m16{|tEqZ|-Tuwb3gSOsoEKGHy@H&tljxU+_$EpQ5r5&XfA
+zqwwDc{tavg8NMGp6RZVukRPwmtO22*6jTe1J>W%<R|(BZkmZpN(qEp?^nmo2D>QOI
+z`dcS7vqAdX!xu;+eN{rE0>tXgT?}SJUI;SW0->2tIl|2o8aW{AAq`|bqzcUt$}bP$
+z^nq5p6PiJg>F5xe?Lv29rsz{1km0QZp-Q+j!OP%2LujUhm&2SUG%LX8P>zi&r5x)N
+zD?!%NY7kwsAWLYZgKLp4C&+qA6q*{i2JXh*XVDl0Sx?;{>&XvV?EqvwRf8WwI`#<7
+zDo{tcR0@p>a0BG!LbD8HdFO)kmm@USf%KOxG**N3mnAe;f%I2#I_71huUu%9f~=<k
+zkoA-YGF*?)%mo>4j?h>QI^fO;vOW@p<}k`{9m44bY2PI@+d-zIO=$Xs?qQVE^C*vW
+z6avd5S#jhHDQ`cBu2s+^H0nVe;n#pH?`omB2mAosRSAs}kma2Zvb<M;3_l%Yd5^tc
+z(@sZvLPB#COhEodgvKzq67nITIS8`c0wDdh3(Yo={#u2GAEdt~q3HwZZ+MlaVQMHC
+z5*h;_%exC?c?Us;+aWXqAj54J8h()FT?4XQtA%D6<p?KV+2<+yY>??#Ei_jN-DSvp
+z2g;-VY$*?~VmZk6y$VDZD##QXsh|VlYaq*e>@16B2wV$yqe7z}WO;XjEN>sk@~#J2
+z-c?{0(o-okD?mK;QBW>4%D}TBFBO_4-~#wt2hv}*&|D4DUzX5V1=3%p(98fAz+YLG
+zreR7bC>0vpK$dqN$nwqw8E%fyTn94TY@xA=ggXsnd5<9zpg9O)&F}6Mb9qqNw}MQE
+zUugP-?m?8>_fQ_G=Sq1bDh|1&ynP^s&VojvQ47vP_<KN>ca_kr1lPe`h0rJlS>7Iy
+z<(&btyi-9$?H*mNY3Ct5BSLc+Oho>MgvKDa2J!)+*$=YZ+Cchi6`FpK{+fh_52U|F
+zq1gb^-{3i#hM~G(Kxp)VEbk!5@(zFuw_Rwqfeg1*X!t;u_a2btT_rS2K)fs3?NRo*
+z%03HZI#vnI457OO<@<e<$2JbW^aoyppSeOK2fP;MbwVQx{5Z_3ghn3{>w&*+a3|;k
+z&jRa|xfFaK%*D#Q8q9_{Lz#!q)3o(44}kO^0B=F~?Lwm#Wd6KDvl7Jo<t|e8g~~n`
+z+`w>^eY&zw1ktbE1IQ=C=@*(^Alje1N!k09eJzM`a+e{0U2HGxv@ov%SuUAEBLif)
+zqzjE?kmceO8iN>I+0J@EWYygba(?I%nw=o$hoI2t0FnOkfY59cx_w|i;;#eQ|7wM%
+z7i9md5gOGX`_mqwSt)dvg7jYma=a`Qngt-o%Y31c2Xg%L2+bU!I}4=$bdc>aO=zZq
+zY>&x8!wIr|B?`?klpo7+7^MGxka|p?(Ch`N$Mgt|ZjgFOm(UCf-EAQK*MqxJzI8$)
+zALaZ4%GY-hEFrG}SwGc6V-I*O%vD089Ay2J35{eh8THb;UdEL@irI=oIbvV0SO8+`
+zEyx!dIpA8vy9(sElPNSazzg6mU1+3%2Hf>ti1LShkI)E$oF`gA`u7XXCJ<f<d_toU
+zJOl2EL8u}HMM5JF)M1|u(*J6qnFZp1!78DV39f*<ek3Xr_I*O53*@-j4$^;{&};=!
+z1O<Mf(FD5Tt^~xCSg=iK6o8vxp99kWI-!{jo)34cg+>;50o;XP2^G9xRA_X8?2ny7
+zvkhdwu2c54%DxJu9$T#Ji<EsXi2mZvQ1<D{K7>J^`cyB-@Oy-22gq@tLD|<U`$~}d
+zK%ufPQ1&?>$A>g!pQ`Lf(e5~(^?(e&TWAJAw)c8vU#IN%fE<rgFV?glqrFxcC<K_d
+zf!E+?vCt?2uZ6i#Xyk!xuO6Wh%9U}pALRHN1UarYfgDe3K#rs3U<Le@35{Hk>C6$D
+zt3Z}>qO#YN{V>wU^6UobzDsDfgDkgtWnZW4_kb*)Vr5^X>^&gMp$6&hM1E60h{V7=
+z3N!ONA~c3U=66VF^n)LVxld?xfFFdv0C*<Y4rYRF;JIKccp=yT-U@&9LL(jVwIkjp
+z6|Wa$yfs3j8f3hCghmC(c*})GA()GB3&8h-`JfBT16P9{@O*GJcpLm>35{0phlsa#
+z11upAfQ+|YXtaThw^eBPK*rlBGzvk^f2oSy9x;0r^Aw%n?TkWb^nXa|t50Zlf~?;r
+zW$#n=wIJ)aT-lc?`y!C_o2~3uEBkbi^*f4uu|13k&3=&eJAib)i2N3AWMZIqg3NEW
+z&{z#Jzga>f17v>Fg~k~C-vEDAFjN1k1UWxc2+eYk^Fx`?C<Qq`lnBixkp6ri=ha4`
+z*#L50trr@2>Ap3u)(XwyO)@WgK+emlAnyl+Am{ynVUYI&nqY5*51!8Og=PcDd9z+<
+z)PX3!@>-$U1JYkNm<9VTq1g#?z77hF4v_P8KxmGE^cMm-&yEVs5s>rju+SI+QU2wF
+zLNhZ@@{s|u{L+PH8p!fW6`IK)%hM?|azW-l2W0uJ6Pno|+DZ9pp_v7;JXZ;gVvzod
+zK$c6P&@2F14*5be4`excghnMue-$9hrCey1foH>9Dl|(#meV$&Q3ujrEy!~53e6gj
+z<xnj&_kb*?DxuK<UXS+G2QGpCVMXl{F{deJDds8`DwZl%Db|1(V%%QETJSq)C%$~O
+zZd0rPxh~8CFGhP`B{UL2C(<)|nar0XLUS0z5L_@MG`hfaxN8!5xld>|fC~|S9f+>u
+zt_71=9zwH*a+ZhC+yl;Ic?b=>0KxKC4ze7}gk~woaw`!U+d!6UvCu3Ox;-H4Emvsf
+zfUKu=LL(bwJ+2m-tAy?}knJQ@XeNVf7fzv(2(sO1LNj!!j7NhY^|MZp?K3DeJ3zL_
+zfY4|M*<Ra(reEl;1usImdWA*>=s<X--~yCyG01(+BB5Cb{twIrLNgDf`z(;--zuS*
+ztjtbj9zr{yd{Ah1gQy30{^hctmIE@J)nE#k4st&&O=zZqm&2SaG)D>~--C)>;3@DI
+z1lg{tKn%?Vl|rLT$+v;SkmrNUN1o91fLFkMuF%K^nT|{lS#YO;NV3}rE<?IU;F$i0
+zh2|j0cGnNG-SvTNKfOY;2W0!{78+e3+fS#^>=3%!Ky*QO6Zm1U5ln)=2BA?0o&<X@
+zI3M;kLZb>~yQ>tM6(HMPxzH#B+3re(<~E_b5M+FLAmhsg7s6kT(8vZ)f_)aa0QRed
+zMmos$nkF<;LAKXqq2UDCUK54p7y^gcJpwYmL6GtF<B|-2eL|xLJPGz)B<wqdMmy!O
+zuLs%A>x5=4$ad}(8Z{u>d9~2261vMl##;j7zq=Th6!<F=8U-NZ%>z${y+>$dftbn*
+zRtb${knNO#uz!rAJ+gm{2+d)T?P5r14uEvu0kZuEgk}@S_Fw!FX)i?}$EiZ0SpY&_
+zo-Z`>K#o%$p-}@~5C47;NpUxUY!5!6(Fj`YMraIx*TH@AM>Wj^^FZd;13KX^S7_8K
+zd#|#uQTAOR<LLz14uV3X17v#%2#tP_?)pI1U$4;U0a?%8LSqD^yJ3*!JtQ;+LDtKF
+z(8#z_@|g~vjPghmn#tfM_|E|`FSzr-m(Z{G6rr+^zY=g8er^*Q#US;pBB7BFQqRg0
+z8iQM~9}IszAd1S}4YHke3C&KB?JOuXIzYCwfY59cx@$q|rzIf6%Lf@=9?1Ub5t_Lm
+z`)7{OSO>CyW(&<Mp*s;|c)gn?ybh4z1wi({cA?n@vj4RT4L`{K*CaF>h3+bl;T3>P
+z-#U=tWrG~ARtwE6kmJ=Vp^*u4yvh)oX+rnN$0WQU$naW0hUW*VXEg~;A4t8bQD`)P
+z7eQVxG;4+KGLY%>fR(79T%nN#vcF}3>~HBpGYw>aOBI?<ko|4AQ2N`D(Ckv?PGxQb
+z+5hU4eXX*u0@*Jr!9_@Kh0rJxd3mAG%mwK#2Ye6QtrHq)A}>!Bnqz2}bQc0og}YIq
+z(F<}s=n<M7Al(H(oHZ(F7aH{<FRv4tdqBFY0#AXvN}=IJJN^OMe+Xpz?+4lb`-Da>
+z$oAhOG&(`H|De!l0&jpn9>)1D!dZQ_gp&#~oMfTl1Q|}E&<Mdj!x<GCJs`*FPVh8@
+z7XVp5?LxB^TnKp+$b9%fmS3aLr~{e*TA@)5vfTCvjS7(YE*BalAnR$H(8vStKzckv
+zBMW4EScmimk*^9azL2gWkohVU8U-Npl`k}MLFOw*XbcxiyKGe~Q(UDuuvO$u;HTiv
+zCp4-+)^nxMECHGCZ6MQKEHrXOUY;W~SAlew39@`LgoY;a@-gHG;hIAr-3@{)rvaf6
+z6nS}v(DZ|J*95YBeL|yJ<mG#WW*JC#r69|>L}=_mIs6;j#dXLW$}bhP+J(??f>yf_
+z8le)^E`&x9WV>hrsh`z>A4E8{;3=@L2C0{of&UNfrBrB^fKa&#wh4_QFa_?jLC)uy
+zAcjbH2FQ6NU1+3%=`g1XjgjrR|AhF0Aooc+K*rk!GTsJ|@zx8?I*{?!3XK|&@s@&&
+zw+Ljsg&^m{0-=!)E`d2uXk>wmcjyzcFEa=--ae4=20_N#Av6OZ<82ojtsvv|f{eEc
+zWW1Fi=hq6MQ4TJJxlCvjfQ&a8JQs9=jCahGcn3koJ0LXsLB`uBG<rbB+XgaTAINwc
+zLFyR|LZcpB40D~(s00~r4rtx?1G)c{2{QgPkog`%<6-<Ep*hONg#RN#V+dsY-5}%d
+z02zM(OhbI_LZb~_26L;>s0SH;DfnrGS0Xglf$WFbLNfzoJ5L80UYgJdq0`gdsL&h$
+z>8>ASf9(?*?IJI46Pk4(-PM9@hhCvkF7om+p;-jdT_MPRT_7~FL|(p1XgWc<OC;fr
+zgAr&9qLVRw141(h(p?A0{vQw;4I(eE7n;=|-R%L{UaN#gk;uyng=RKLcdJ2;6InvT
+zDf03}p*e!_fbNDtwud31(FHPnokFt>q`Ov-<B4Br<Y1im5!yi~$nnGvq6!L{goY19
+zR0WMfqYgw76x0fh3XtPRImrH826ErC6l8lZ0om>fz$*C57aHB*PY`dx4X}hf8)Uqz
+zg+><0cvlIHbdd3;35|}OqUZQQ>N!my^+cc0Yy_z%HVBP+ka}XB(DVx3#US-156EzG
+zLF$J&LUSER{V-c-tOltcW(mzqp?joM!s!PYP9I3UuvcjIfYb}Sg+>=hy|7bgb_m@K
+zAk$L~GMqgi^}#BkSqV}ftPmRIAoamAp;;nyXM+qU17tYqAoajBp_vL&4@?#sPLO(F
+zqR<@MVVT`M;GHP<ZlMtXssFWt)c^1|3rMpGq<-NOnhl@>@m7Ib5N@T=EK=q|WzGSq
+z|D`MYG-a=WY_DV2OMedujed~f^$E>RknVyY`*DZR@QJ*<QD}NWx~l=%KdXgCiO9>h
+z3C(<v?(#tPJCD%F6nS}u&~$=ymk6E$cbd>BNBeZZz7@P4`RV~VUUq}*pIt(u6XbXu
+z6dHpd-3@>o7y5-pAIN#ES7?Mlx*G*C4i$_DjbV`U&XCYZzERvcL5_ooLPG;NACJKu
+zXk;pP86d~sbfJ+3ay(BJ8U-NplMg1N{PTonF1QKl(b1eflBj(aWug^=i@=Y8E5JqI
+zncxwJ_Sy5n55RmLcoJxUDc}|0Ip8JA9>bHi3TEWha))TNjWA=_u*}dct#EdO?}hzd
+zkp4fb%=dxxe~&Uh2Gak(DD!u~i(&qjGC!}(PlHTXI`|n(VdP!Na)!`F9&l(W>y(__
+z19^_nMLq>N)OgE3i8Lh_3teOn<dsTJeh%^~p^JPH@>V4$KM#4E&_$xGQ+k!0tcJW#
+z=pqv!9|M_w@(YmD6X+t*K2!Ky1?A*FL7pvik%^FRQ*shzn_MDvk@F$vbN%#B)<E7M
+zbdd`n=kp(wlV5~9D0Goncck<yIr$~X2ZSyXZ77A$m(V|XH{?#Ci%f=`&(&M$2feV$
+z7P`ojAum#L^2?AH3tc4inG`<XLjUAHL(b=3Ko<%9D8&z=?PQR(khcn5<S$S^ok~uA
+z1@bPTi+l!hK7T|1<h_uy&_Nf8_wc7=fRvM8g*;Q}B5@8prAW!iI>?KKF7h?VE0vr?
+zTTiYMx=5U}PH9zg@_xv1=9zSngOGPCIr#wOXp^LigqsxHGq%!4)<f<Ty2#%`j=p8d
+z$p<0FoJqP!oCi+XrsU*9ke3KuB*uo62Jm6zpKO4<QRpIn3jcggi*gcuHaQ@4kvM0Y
+zGOXm}Ban{>UE~skpD|DTlV5|J&x3(3@@4qXRdTWsa*xnOJ_mWFl9P`@UL|yqD6^D$
+zB`3cQd4teJJ`Z`fl9L#Fl6!<M@)gL3m7MfJJ|c9HIKP*&3Z0DkC-*^~C3KNLgFH{k
+z$;Tnj7rIECM@!kG<m3~OR|{R_|Ao9!$;l?jeL@%ceaL&2ocspld>#sPk^cqxsFIW4
+zgghj4kvNBxvMNcXAH*1&oF#OT{|R{>$o!Fh$oZTU=pu1WCS{M3lg*G<3ti-|Aa7K1
+zvITOV&_&|hLQ1cali!BCPv|21As<z85@T#~Na!MQ4j?7NsoD>Sxgwd*Q-Ln>myqWw
+zIr&}4Jwg}R4tc4Plm7~Nnb1Y{L0+TeB*ye)uh2#Q5b_QsC;tudpwLDBAISTaoO}}U
+z0ilb;eeRS*48km5@+rujLKpdd^bbB?MmgCIIiEWNUE~>%^SLz2Nz94K#X=W(CginB
+zPCf%UpKAkMWESM@N=`ltc|hnQ&w{)kWcXwN@&TcXJR9=Fg)05ve#o6d7kLike4dE@
+z$>$*Fb4H+xTn%}il9QO*lk<fx(hYg3l9L^fmkC|uxscZ=Ir%-vy+Rjx9^_3*PJSP9
+zztBZyL*A|A<O`7Z2wmhF$VZi&3_{N5us|320m%7$7V}5`0P;+si(CtNo|2P4ggjs9
+zBG*CA=fUWod=c^rp^H2paz0N+IoSz0pECnp<OPuPIW)@2A3+`zy2uM5A5?PkCCG<_
+zE;0x5WK7cZPyQJ4RH2Jp4>_NI>w=v83FHMr7kLovm(R~pPW}{fK3502$bW^rM#;&S
+zA@>Sh<j)~*QgX5za=*|;;y!pvKgjUOS0En{y2xCn|74MqKZ86~=pqfs^OT(YcgXo1
+zBIqJLke4bs*#mi*&_!;5yjID{1CZAVUF1f{Ta}#rIpl3Z7r6=YUL_|FLf$8Ik$I4h
+zDLL5-Ih7vJMP35=Dv<dn{{!+Yp^Ll}@&Y9%e*t-+&_!MbdAX94zl6L(=pyqWuT^pq
+zI%#s9&_!Mjd8?9>{|E9mp^N-5<h@Ex{$I%Zgf8+5$oU-VuaJJSAM!MziyT1x^0`&Y
+z$^V2rTj(Nje=4O^$;tnMyiDjK{{!+GB`1FkIiHgST_pDRQ(Bdr9Duw{=pykq;ZwSm
+zoO~7X9-)i;F63iMPQC^?A0`A{<iA7C=N*}T@^#2Fg)TA(d6ANngOC>sU1Trhl}b+j
+z2J$MQi^TqMN~@BSzlEI7O@c1+*N}HBIr%%t`P?MvBC%hTGOFa{5ac1Di+mmOv{NPh
+z<QtHu3tc4keNqaPoculHg+doufcmXea`F)5RYDi}5y%^roE(PSCv=e?g`Ce{vi!(D
+zKpqsj$SWc5S90?IK|UaKk%f?tDLMJykn`a^&_#X>@(j?bA8-WnOreY140$d{Ir&G(
+zJwg|`1#%6a;zTXQ30@1L*tDy`bnq%L6Wj`BfgcC6!D~Q_ty&RCe}6^zq>1q9e+*{w
+z6EHKJBQTTOnLhAuFq0)PGu)#vlh?rvJMK?pkk`Xp0pfmi2Dt;~DiHe;8DuHUUJ&~a
+z8RSlw8$j$cWRN$&><6(gl0n`Ga~p{Llnk;A<^YI&m<;kJn1dkpZ!*YF!rTR7pErZt
+z1#=IG{fP{+9A>~;hi8IZZ+k$jT~bOwuAi$x9p&r;6Tl$o00+QCmOq5^!Ax)g=m8gk
+zCE!V5HHb)3eBjAo5JaV=41lNbCj#X<Fcai@&jWH@R{{nYKge~O59E3*2y)#u0CIiB
+z#Bd#z339#U0T&_M5|HbkYLM$3AGieeL6GZ~0g&qxW`gUGOpxmh56E>z3CQ(BHOO^>
+z59E3v2vYAK0IA<=^F)u&1gWoc-9x>+1f>354N}kcfz+piAob<}koqwTk9u$>NPX7>
+zQm-umslQf()Kh&R_0b^sewH722Fou=^vFyw3uX^^7FYtF4OWBafIe_F7zEwm0C+B_
+zIYkf41hZlGfNQ`K@B?5qNIl61QXdL})O!X%>NgrHoq9|rm;-u1>Ln#0^^a<hdWH|A
+zJ`n_|Hw=K(4>U9ugZ@De{ev6mAKVC5gPTAfm<I;IOTYo}Qcy!9y9~?(^Fa@IIamUI
+z7_0`b0DU0pJS7Nn-WmWoKWS*3oQE<&&Nm*A^GXTG`J);{n@RD3oDYH^$Nd42<GY4N
+z&2c;v<aq4?IWCug1&km32;&Do3I@R|!2z%k#6N2s%mg>X>;XBhITLCfbq;4jjl+wp
+zKcO|jnJ}t{bZ0`h-h*qMUXSZ&Vkps>&^|9P5AKudl3+7GG~bypJbz?<QbPay0bB#~
+zJLV@O)XlHQ@6maod9Zg5IFk~(7xpYnO6W@IPDx5=O>Ij>2&r|r)}(rI?OoEh1feYs
+zEk^i@1GtW+h0>e}9cjU|q=cq4KYrIQZCDClOY3kQST?xKnb5VY8`t2n&SgmnZOhtm
+ztzA~PEFobqeJCAqrFY|6bDH<Gq=d!{Uq({Gh-=i9kWiE9%|se9+cKRAzRV_E8!{VV
+z({p<7=}8Hpm18TN34xUzxK^*M!L{qm?lTd~nVq=So>_<M&>6#LI1}2=Xg>q_&FaW<
+zCUl<Dbq-Q{P7v4Xb82wyb@#d9#@&u<{kaY2!tc3txHg^VKM(22_GP0~&#yn<nb5bc
+ze_c{Sa9!s*{64=QHa+L};u^TH<3f~MPEQU}b<x;GsEdnwE=o%1yr>Jm>n^ItwRe5r
+zdc?avh-+tVS8h^5M{Y0|Wtbbl)oaumNeR_Pjp0lP<&Htx{=vWp;rD~}A52Q{ey|q5
+z8$CV`Qs`;$Bqa=Q9NCDRZtUEMd~NK&@0yKXT)Q@OZ$Mr)wBs7c>&QcC=e6gdo#eIR
+zI+j;`3F<m8gx|w?Bar$pZM_tJFZEuUlrVNlHLgRK4_}USULL$0X}COq-_@7b;M$qr
+zmG4Yw&2PiC{ffX9sFy3+u0SbW;m0*}#TaZxt{BDdp(}>*yXhnTkHGIoYCeK8DHtnA
+zN*F90DnzOZI|`Ai!gl-~yRsVB;FX<MB86AB;@Y;keKS(ExpgyYd~*}7qnksp8QwgC
+z--DZn@Y`3^R0O|Us*8}9Euk$*2?JXPw<1+r16z@*t!?-nx_azt<l^ceu1#0_ac#Y(
+z?HZ)&8vivY$!mPLj$AVeo1trl@q6H!LHus~xbNfed+pe@$jh~(*P>pw*KS8Gf1>vj
+zXnUV%#I@fXFp)O1$wc{V4{S$0ULU+3zpoGA+H}1i*Sa0`JJ3RQ^zT4h-O-ERT|2sQ
+ztuJjTMawU(D@B=?dU5S3?S)NOX*YfcOFMC`-C4I2ePO3}C-PWYjceD=ZrB8OcH(zn
+zX9s@!ZfLq8DWTzpMqIr&)ZT#F+10fRes|U3+WX1APa?ISY{a$arrw(n?@bN3c9->(
+zp+%L|<Jx^=&yDzfWBrXN!(E|W==<dZ<tW4QKsm~=ybagBoBMA@jojRRGiv1KR$O~;
+z>AM9bc}v?Z$muP9Tzhu+?nd41ZrzPk?QX)gtD?IC<x|mAffQCW;#z%2%^he1m1C7C
+z?aJXw<f5vh3T>mR2G_1ncYhiw`E)(5y`Sp)6x>t|S0VP#^nV87f2J4L;Ac8<t-q_`
+zF4W6iqqq*;HH>TDUH!QF_q6UoiG9}lS+wCj)wmAt8QFvK|9t=Fk&@3h;X3rW;m;xE
+zpKHT)<g=r2Q&X*bt98`dUOliEY~8E3k&SzGAK6x;x7UFF8oiZlsL>m1FtU!+=%X|b
+z)#$@C57g*`WaAfg-xpzD|3$swi!j%IQLiH#@78^H)BbL~;cnXBt=ExVckA7>58kbJ
+z(j2&3?;uC-)<d)(zFQxmdGKz1h-~ocjb5<MtJixW_j>hOn%lj4fNb^ZZM1Ll>VBGg
+zym~L$<<+}sAN1;-G!J|A5pvM057EBgs}IoZ{jy&BWw83odd-(%AM)yBwC}Ce`)a}N
+zTD^yCs@46Zw^pwu2k+5`?ty#nSM=Jiz#ROF-uV@n17FcQXm0z8-cHuttJmL4clYYG
+z_rhF#uU<oT+^Yv^-+r$ipt<#4y^S2YS0ASRz`gn)&3*Uk{WLe#>Ha#HN4~0$eii1S
+zuj<2Jh1vI2y@~XGRj(zhzpB?z9=cZ_qyPH*^@jVw+WYl7a^wMh^Z{__0ezSZJfL?x
+z!0_vJKWEUo2le^~VfH?#*FFey^@Dm1&As({Up*MC*E{L1{vo~LA((3)((4|Ax#l6=
+zOLO0YdOzKFKB#xm|L8+{i1xz|=_7PE_>ewCbKoJpgKT<8_tU=jVZHBRn7bd=dme_l
+z^I^S<=7xv$MzZE%-Aj%(=%EJ68}zOQm^&KuAkD)M>m&5n^N8O22-x+A-u(#V!AJB?
+z()TsJ>1$xa*YrlRqfrkwf;Ero-bcaUqk1P9cvSBodmq*N$nHn=9&+eWeV810R3Cg4
+z;n#m%Z}>Xc@VMUiI9T_%UQZ6~(}(wgo%{4IvUZ<dw-5eCeEO&l<{qEk>w~%7rw3@R
+z^Xc_8k3Ob{9;5s*z4tN7AJYRg*FC1!(>(fhJ@j?3<8eL6c$%Kj{ZGK$_=N6z0_OTB
+z^airENpEX{eN&U}Z-Tk8N%xWM-_Qf!fPL#X^tNxn-1H6IPX@oKcYYK0fp6*^--NmC
+zn|eFh^)0>oTd)s)OYi&^%z<y|9W?j*^#MQF>(~3pPQTto_BHGM&0tTn-b)6X^-hZ|
+zdS?sF{Vn<cIozU;kYg=+^|!&=Z|ikr<F|F+w-HbKxAlN!->TQO!oH?e_mZRE)<cw!
+zepe5D7v{e2>iyqky1uJ-(A@Z4-AD7-cl2tS2fm{Zeh21`@94qr!0h{u-bC|Qt6oj>
+zK&w8;aDD%(H~lNv^Q7MUB-r(&-c1Ic)H|Mp`?i4I9)P(%pf?0y9(`61JqvT+vwHut
+zls~Jt)9ig#ucdkD8GZN}n7g0Rd!B*0=^5QmbM-TN4b1~j>w{0j9C%vqcpB#Vr}YM!
+zL+$!lJIp=pdT%?-{&u~U=9+fhOY_iE`tVaQcRr<eJw^FbdMh~)&<B~W(0+YvKg=Wh
+z^-;2YzaAi4_v>x@As={NAABC>zUTFRvf+8Xk*s@OuYVr$j_>Kg@4?*uJv~5<bm*fU
+z;82G?+yQz03wpx~FxS4I*OA@d*L%JXc79*)`aa}?L47C)bAM1DARB^uBUu;J>&e<5
+z>UBQ^YksJE$<ZI^p&x)<Kh(QvZhBGozX&$IsQbv;7xlUq5w8Eodh3rt-;ebsa`YuV
+z^b*+flHN<!zoa+31oxpI>0>{Fx$j4M|Bqnq_>mr@x$#H3kLKzh=`}R>cj^P3Fb6yJ
+z&Q8iZbsx>uoq7$~{bRj{@zi(e4P7wTcIkCpFxPbHUNY3BkI{alOCP0qs7oIvdw-($
+z{e=F1qWAm+=FXq!U1Z>=ddE*;-}Y0z{iiVdf2y~VzL)i;mto)VvflVI%ylp8^)$D3
+z>uud&Q@8FX>$~*^vg;MS`xP+wirz`~zoHM2y|3tf<j5=fC^__sK1|m9O!xi_9D7Bt
+zCL4aHH<EQf)9ZhR_&R^4cl``|4tJf7#T8hN^*29zVRq@&+8$+oN|{@+zUJpQ%FO$4
+z{A9dO+z%@Ac9<DnFV?gC+-S>{dGSh-*I~1RpZ6-WPnq8jGvnueCqISC%>7G#s+8HI
+z%zkCwqs#}DIjGEU+5WNL#?Q)C68<V>z7l4pw;%gw{A^X`?8RcX(>u0I%-fa!+zc_>
+z{`*#l`2ppBNSVK;+=rCe4!;}e;>YoR6~8i{q|EteihPkW7b~-!p3bvHZkJ!LGM}d0
+zd(IX4DrGKIX16l8UL^7hlsTx(A5!KXWzJXT0cHM}GLI<pwaUzg{P@`cGwZJyn-%<Q
+z$EFO;HOg!vA1v=SW&U`Ul5Z0CSDYp0Hf6pT`J(@RWj^N|F+20by{XKrl(|lsJ<9yN
+zGH+An-zsyJGM~Cy(o?U@m%z;UdX)LQ$~>sd%iJOlDRYf7Cto7z`EO;;RAvL^&hXYL
+zGvBL0bG|bFN}0DQ^V#Q#yh54n{@H`g9DeSEoaHy5%wJIMN0j+}+2X$pn?C&f8_aZ{
+z`4KViSLSSG{(*AuQD&W+U2wlmna_op>1|Nv&nR=NGC!%z!^-??WzPDj#CI|_&FH^E
+znJ-pmK2OBY-O9}8hWI(C%md1NCO6xVo>67K17?PoeWkcR6`OE07vCUeJN-4ve7%zM
+zJRCpYQ)Zrf<A?7{pnslk<L7o|<~cTgexb}fuf`AG^T711QsxI?b|q;4Uwh{Q9M@Ie
+z@ePTS@F+Mbg#aligWHBe>|L!S%Mhs7dio_PT1Rry!1Y>twOV_%yWU;dQeePsDR>}L
+zOv`|w1q=h!K%psZsoSQlO9_O5DW-I$X`$2%j|Lj33k<`v?f1Xu`}Usu-Fx>T2`3D`
+zGm`eF@BGi}o_o%@-#Pbg;sEnoz*o|{2bkZ+e1iF%%qN-O!+bCE`<Tx&e~|eh<_|H$
+z*^T4F%stG11-|NdVvzak%sZGjkaH6DUCekt26%>fn)xNnCz<D&A7pMYUq?<(=wHTs
+z2lH!~-@$x}`G1(-!@P-{qtO2u^DOg6m|w$up80;}FEIZf^TW&&)Gs}A!|B8im=6&@
+zaRaSkFxQ!{C?>oE??-|CYUbZ&emwK<FmGgj6Z0=Hd;LG@pU&*{-^9;i_WEn$P0U{Z
+zO#B>X$=_yX$zPiJG}618+8y)znD;1NP<%r18O0YAUwg>Zhs2*$d_eI@#SbXHsCeVy
+zVEluM4=6sN_zbhu#{<g#dBxvToGb;?pHh56@fpPz6ekvg@eL~8ulOXh<o~R)e@gK~
+zihIhz^rjS76`xW3fMUEv2#1{S9>x0=FDt%R@p;A9R)g{1ta!iTWySX@KCk%NBPxEy
+zQ;MsKPbogD_@d&CwP1RKiVrA0q4=EQhZJwDtN0b~SG=tFl;X3BA5@HoFLB8Ezgh8=
+z;$_9B6+fW(qT(Btg6VB%mg`|b*<Yskl;X3BA5^^Ys7g=qvf@*U&ndp3_}XK^_>+qF
+zD?YCHwBmD$FDSlt*`z1+m1LIlH>~)8;!}#xD!!l?4`<+z_>+pK6rWIhM)3v3*d%So
+zf3xCo#m5z&QG8zUMa3Im8cZ*#cuH}V`9sgA`NTD+6Q`KJ%6yvn=`S$$Gt9e~?`8f?
+z=CjOrj}+oN$NWX+2bed~A~5XdnWw>zJ)XG0d^ht$%x`DD$oxU(?=gRb84nZS_zLs2
+z%s0?tGveRKyo>n;W;{p%dk^y&=9`&6%baBXU*<vP7rn^nw=*v>k2C*0^Az(pnfEjQ
+z(ytl)0p=sj3(RMjtIXeFUS>{jH~QnuuVy~M{9fjh%%5aF#rzHC)67rJnE1{xZ)d)j
+z`Q^-Kng5mf95dbzh5CGe`E|_anZL#SAoD)D@9j;{9+tP58T%FVIgej_Tu=9*c>(%c
+zP<(`VK5<1rzuD5?I6`w%i}7(2{cPko!4t|3z1W}2df_;|ZHK;x<NpNfg+>2lwu6zr
+zZHK;(?GLhE7~zrs!3`z=7<$_dz4*J1jhgZci{8#J^tK&(@sGWN^}?dZ^Da2>2YTBM
+zz4+7qnDxR4kNk6Y+|=84=*9o`Mb-<8{v5@D1B~=-JM`kOyJ5_fUs&`P@qrHff!?-5
+zFaEt>XT31ON3|c@?xp`&#7_PqNuOEtf27Xemn}Q=;y=7@+~i+a^!ohScId_5_%zlF
+z$LVc5^x~hqiS@#wpEAX3)}L*MUM`?LtQQvjcBQxN&~N7gHdrq#`dgLWwnH!e(s!|5
+zSoFh6Z`+|i$LW8X^}?dp`M2#}`L8nxd|S%TEPAvd9N-E3vh2`{|Mpos&G{D=eGf@+
+zh+gcwDSVG-F~44__>GGHT=AC_|DWRYu3-EH#cxvlX~kFU4(c~6ezD@WEB?6RhZX-&
+z@ssuh(?fl=8ee)TeBP?R?Zi>z%P^m>|0X-e7h%MYb9)uX0mk{Y?Kr>VtiN)v(F=<n
+z&j;ebALwm6^y1GSVZAWIBYoXJ*mmggy(u{MvR+v9I{&sE`irbT%z9zbZ-0!5AB_Cl
+zcIajO;bW{97QN2DZHFG;i-O}HSuZSloqyX7{V?ml#Cl=T_uvB^_=Ei0cIfeaC^-5i
+z%=r^Wc+|g6-?l@)!1@g9g+>1c^0DFoBYoQry{y;V%X(qa>-w|p(Bu0@aKKNE_A4xU
+zoqyX7{YKV*ob|$@$8)AQz{tOChhEl~Hcy)Lg+;#|Vmd@G_Jb6@$FrDUrxhc7tLyu-
+z6h3e1zd#&yeZTBR6X-QlCV#?`KV3hz9pyXD`q!~uSoHhV`L*rP%X-@vST8JkeSU2_
+z^s+wpRn`l~>1{jovYz)%)(eYX&);l2^wl0ye>1n4`V$ttu0PujeS`IPv0hm8y8diC
+z^s@el_j#dx3yWUYpKXW!^UpT<|1;JL$LVc5^bfQCKGqA1UYFmtLw}L=A7#C;=ymyR
+zJM^-?`jlx?eqqt;^4oUkWj*$ptQU^c+ji&|e#O+^FSA})^t$}E9r_aMH?v+?^t$}E
+z9eP<mKF)e!(d+WtcIaij`2_2Q<Mg&2`Y->gDgQ~<3yWTt-?l^l5bIB|URd<H{I(r>
+zSs(v8>xD(H%WvDEm-X~-vtBq(Z`+|iu-TOVN30hXy)M6Phd$5x4O!EEg`0ZSf7*8F
+z@x2Z>p38dSrrwyF<BM&FzQp<g)(eXs?_a=yKND7XF!cD|0vr|A3&XyNesuY5JM?>4
+zzs!1J(I2=5vHR)UcIajQ!v|O|EPCyKu<g*FBR?RH53^oa^t%1ncIah)#ow`BI8JZd
+zp})ZC<NcNBzlG!UwjFxezwsH?3&-hgJM^;O<KI{>9H+PK(BpdmaD0jN!lKvb-?l^l
+zWY&L^^}?dZ_sik{Pgvo>(Br-QIG(o8)SocyQSHyRLw|zx&t|=_=udjF`{~<u=<$Aj
+z9J^RAEP7pj+YbGWtiOZx!lKvd+ji*jo_-v!V!g2Fb^5j)`g>V_lJ&x(PpbaMwnKj*
+zW77X?)(eYXr*GS#|1#_EXT7lK8z%bZ`M2%R%l@SQX1%cJpQrS;9eUZ%^k27g`yszA
+zjyS!9haGy^|MayPqZbzaKYOwH?Z>uz=?|Fz|2fO)GmBp5|CN^AOP~2)_H+7{9qnK1
+zWj~hWU-n~t{0^fRj!WORBYoMw^%r*<y|C!{_MmzGY&-O_-|K6v7mm~0cIah)*p0t#
+z(ie`?+ji(>KiL@Th2!+L9eUY+R%5+zoZhxWFZ<Qr%6ehZYyY2ZhhFx#eTMbIqJOe#
+zf3_WZ*$?;pyG;EF$LVc5^s;~M-K-am)7y6FWxw6V7n}5j<Mg&2dfA`%Qq~K{>1{jo
+zvY+o0tQU^c+ji(>|KANSG5Hsc)7y6F@1k`N90k@3$LVc5^s>M3!>kvM(~EtBL(kcg
+zZ(jCOJ&{@VQ$3Yg_EYsR%YLfoFw1_bUS`=(^#bA^uVm)eqT<tvKdJb;icy|c{*Idt
+z1pOV)BaZTSyprqtL9%1MB`o!&$1B^8`aZ$>udrS?PH)?xzlZgB4<^zVj?>$A=ufh~
+z!FplQZ@)6(9pDKoJQ#Y}fBK`GNnaRtj2C*oYullh{i=Acp*LS8zdw#Ry@ZDydfDIl
+z1l9|SUi({YJM^+2_5-XJ7X4XOe%lVc?4P}L&g5TM^t$}E9eUYsJIs3FIK6F$UiRni
+zVZE^E^>}I9p}&j#xH#@%y|C!@cwyV2m;Jwg$$DYY>+!<2LofS<H{?zI35$NampgyH
+zW80yZ{lzb2y|CzY{%t$-vLE>n>xD(n&CzR*6IOWGp_l#3r&uo>r?>6U%YNsNv0hm8
+zy8diC^s+ztde_vSaGc(@LofTOU&4CfIK6F$UiM#qi1osv*Y$7Pp_l#I)VX@szp&_a
+z`NjSR6uyVs2L60m@h=vFc31HS6#rQ93m1ZV>}$5uJE!;?im|WP4qsLLhl;<gxc5*{
+zkNRjeUcHLKQxj?)uP2Tgukd{tI9_<z)VDC=-$XxG!AJ*qf_~X{oUd`#kFj1@^xHRh
+z@}}OlLyzw(!0~d{3yWT-Z`+~2hxOP8?2UKKqHmb!o9Rn<*r89*eHo4qv0hm8I(^#?
+z{Z*|0Th<GUUhnU)?a<@<2ylF#^}?dp>DzYb2U&k*$&_DM^ut%0_`wracrf&MpFfVx
+ztQUrT6aDD)Z9DYGS$`|*g++h%8pQ6mAKUKbKWFU6B>&8!*XiSZ;W%K2{#NGSV7)Nx
+z$iMb)*mmgg9&jAk$Bp(QEP9>3ZHN9m>;IJX!lFOH5r8MG@L=fWd6b7)FAO{K|2+D^
+z0fyeTLod&-yl~OvUs&|IzqReqpQC;f$061Wi~h;R+)UrLLod(A+|PR9IK6F$UY@7H
+zzID{UaGc(@Lod(Yyp;9AaeCVh{YL8NaeRUG!f|@r4!u0zv%O;SFD!ap|6+eDh41lF
+zHoveh-sUT-K^{<iMDhC-|9}|xU-G=kV~!Y>=S?2REYF)<&n(ZIJcC)DH`&B2&zsyr
+zZ0C1U@e#$pr}%Fae^v3OS}^`sDE>Fa{q<mY>~pvCcLi0mJzhSB_(@mvH1Bs_!z}&t
+z{mgQIHBJ#AyzC$N3ufuhzQx=}IvlU31Q33sNA#{J>W9JNU%iW2*7NBdRi0h;r);2p
+z1L0-A#0<0S|M(MTS?^BJxkh+dznx;1^~`rN%lh7Tm}R|d^lGD*^`8>6tcSdVS;m)7
+zG0S-RU1ss$-bDRA@+1D#-OS?Ot}#o0{AOmEADm|vfBg@cW&Nn{S`)wYw~NfOf1t)(
+z?MZmYGPA4?A7_^JQoQ%p%kQt6@F$sNynPEZN0)dnvk6V}c4oPs{wTBD-+zW##?Sv?
+zmif%rm}P&{kD0}v|Afby{E2`4Da_*U?qQbozvnQ^dPpC$tWUg%S=P(Om}UKLnpwu%
+zyO?GEH_t5lnO?~(`-9%hEaT<7m}URYpD@dO>Tj53f6S+dam~tc_2Yt^R_rK#t>O<T
+z{vX9pe|#|hA;m9O{BFhnr1)!!(@zM-|60Z0SM2;;F#H=8e?sxCPYj0tUB&;ac*~Q5
+z;SVVOeZ~K%_*;sfOC6nkzIG}8EyeFt{5i!xP&{~DF#aQo?^FCa#aCY+)MpjHUh#d3
+z2Yx=N|Cr+IXrg47zgKZq@f#I?M)A-u1mjy!yn*(;+3CGr@kbRu{;9$6yA&T#{946l
+z75}^9Yi<a}|7^uCP@Gl#a>eggd|vSn6hGx@!SpvP9#woq@!J&tgW_)}e(ckO>D{Dw
+zo8r3_zeDk76<_m=VEk#tdBv|*{2s;kEB>D1TW$=dcc<ce6yK}(yyA<BxBOx-{(Xw)
+z6)!4&gW?Aie_HXwiZ?wonEtZjH!HqR@plwo@vLBcPg48>#d|#7F2h;k6^hR&{)FO(
+z6<^nb^!@l!if0sKUTF6hFH?Mv;<qdQQ^gM|e!@+`_@Aw~SMhemw<*pm?nyYC>Z#tL
+z+Df%i*<Ea8YjdfjyIjqc^W(dRM^n8Ex%$HBQhBaXtdvv9YVGh;rC4sbwdDA~9=BX*
+zEF}Ai<@w6aWb*K?WHOb^yS3s`H^19mp?{SYcO|pMdjHOHBi%dWWT#f@{kIbg&WvS?
+znTc#MTV2WQrO%DgsC+C{^SOpQzBe<pLPCk;XfT>cY06!0)N*r;h%%(>?p)1ngo{zn
+zl^R@(G?f$CUrX*&^<tqslJD*BPi;$Wtx~N}S*Thh;jN2qy`C$$<H_VsuF7pB*|9V~
+z@7Abhth#bCJF^8-S>t2bLS%`1=ZocBsd#rpbyfXZkCdkKR3mi$Gb7otp}nc(VLy|j
+z&67-LA~%*y7Ad>^<w|+ZB{)Qo&gJs-@i0C%as~QW!pF)|gFY^f)9DYCgiiZy!5=h%
+zsWJMUEsjNJ&n>S@_EO2YVs*i-?W4AVY*OYp%i%muQ6BjR`I|&@y)8O-xIlK4DszXk
+zRQXg0X{b>xI(?L`j`<a76$90!gQenJ>qe1GQ>zHoqiGSDU6FYjEVyO2W}2I%Wu4U(
+zDpK=0bRuKeR(6j~N#-J=NTw<4J8^RDsOU^*Mk7yR?;s*<UIQHCXsxoCb=`cR$@SIg
+zKf61RI=y$eKh;|-SC^XC^oX?D0cwWy|Iy@%YJ@ncW05)S%Z_JK>lohv#n;<Eu+A~2
+z2m97JMykVgjBzWjiV64FO7>`r>%j|^U0MwG?pBM6YMX;|mFkK&CirnX*`tv`=WA}b
+zKa32C{0>pXR)*su^+rUBIFReuNZa=cgA0qfxekIA%f&{h+*AIQ96gF|Lw2X#y4z@*
+zUoYrvt=I?_&AxPE(x@T+4#sJ^R1*#^Fz+{A7T#ZK%-&yWf(b{?Zo&zSN(m=03J^Bu
+zDEQnQ>=TYX4ia$-NI2m>G2x(YntiuHGy?N!l%(bpHDvR_t4H$@CyYNWEt(Hr)zL>j
+zoe4+ISi))5`x&e1Y!gniP7{tblSnxJq$uG8h7)fFl^m@sm1(TTY%T3L!!&AV8<iT(
+zGlu#Pt~A{GK*^i6Wrngd*@8pob8ddFopQkOq}ij{!qGyzz*`-YLbljR*vkAoHJwhv
+z?#+c#?jNd@8^yv>WvRXcWt*b;=dogA;r4PpH}4K5SB~Tz2S3@_-TOy&mqzy;(sA^m
+zhGtTI)46iNopx#JMeWQT3Ma+^`<-dGic?c=c$GXk5gp?;v|}$*y^Tu$9G#R#aM*2L
+zN!A%NX=F0V9fMP~N~1DYDP=NyL#IcArF8i-nc1o6?0C7{)|}<1l0!?iqpmkMo!pwG
+ziE6Q2m`o-85qc)clatY8W+XXa<^rS18FNm%iYc|VmOB=#wN$9k>l1HgY}sk-raKtx
+zD$tcQeRpYTehAgnRVgqxFXtLdH8(w9so5!*(}9FDyOO(_XO7bGrhr|gk{Mf>TSewf
+zb8VN>w&sj(CN)s3&(Q5c9_QXGm4jks4=y`LoQ7SxR4=X&X^zu(XAbS2c4|qdv%=X)
+zu3s}~9qalw0xPYqYk6;3HM8Dv8gS%pdTPLQ<*D>R@1Bou3|F$VG$%Jbm32mg(m@&J
+z28N3Tx8Atz?v-|uWwfktv}Ss0Vwp+x``xG4d95rjOW&!B5)g)}rkBh#uCFd$Ul<uL
+z%@bA^uP=;<cV%(WZPdKGv6;XHpgR!hlI@d|4XC@RMO)ZM19vVnL|w@$y0G3r9&`bF
+z`_S~<d}gV!Kx0>N&KtdkDtUKCx6&3tSC+@RteV!5(NMQ_uW^IqN0Q-+?d@l4INN)x
+z!3LQo@5N-A{1=mbm8x5I`j_f7rltCFR)LAFk%5QNk!@KwS90?^D$6rYCX))*<1+Q?
+zJCi#Dz51Q8Dc30`PT4p~bov=PwdHVfnUVepI9F(HM*Z+^JG-Hd_{cPO#IgC|xJ<K(
+z7#daA9v&C{O690@vkC`LU7jDns%G)TG-%>(7tx#%Jr#(I0=}kIO8LyNHwbw^WSN3g
+zy|av}4_<+)rZS5YrtU*CiO9_ATI+*ba%RBX!le4Eb$2OWp&4ktvPixl&!3v=H?9lx
+z!b6xn(xtMkd4-Q9XE3eB+&1aJH5jPI(7bS(!e(}>1_Y@$j;rQlGPjlQsc51A&kAL0
+zFZq*d#ayWme$q^)?S<{<mZptn7G4NuGgzsV$I@shFXa23Ns~j8T)@j?p{tWRN<CZZ
+z!)@pc53OFy_wE8(PHMcQgBP`lra8>EEANV$>KVE2S=kpvw;KoHFl?S%-2SMNOHeBZ
+z$sr!>XLM>3c-ui~EiGb1CEC-FaIY)TQJsgXS8TdTH~+7$fBc_@^G=J5pdA+(f!h`t
+zfjTR)7c!>EutgQw`+r1{X{OO>krA}xA|r6yA|p^|MfO6*6dAUtB76T=MIPK)rd1WX
+zH==t;I^n6Vr)Mz{==A+y@cMRA!%E>-^iXm*?s8I^mi4W|wy$<A7ztlvDoC43(4CC0
+z_FUQBRg#f(SxZLLVKte+-P98+T2_<^6JJwok8QTws5z~n(OPnohirBrSEXrao*c?q
+zZ*0hBCosZfXYE-_XrvYoPB7TW)|y)&k6yhFL8;_=tFe>wlVx{?ZWqVQj43<orBF|$
+zoGjhQlnY}^jrvSqp;kFYxhQ(Mpa>jViYzyrr80&fmokW3{<|CX)BqO7CcOm{(!04u
+z>ps7p+Un%$b+-n`;%Kf|qHEo8`sRxzx35$zyZ!T}T%lg?pK!?~IY|r3S-8jMOg?Dg
+zH=7yHF4YIH_Dc)F##vtPO*_5=FH@`KR>W0l+H}2lVA!3{EtMK39um8?YNh1ey3Clu
+zwhR(crn>Qv)%!<kwMxz0M95kgr`m5SXj|Q_=4cTO&K^p4k(O8K^U6v!?_{ZXRGp49
+zw{W=LIPBzewPQtUTTcC0alYY<PEHSvIC~~D!_Fr2uc69fm2!QsSSmJFsLa$=!p}&K
+z<`$Bg>wB?U1RQRc_;9gKiO(&xh@+!~c23g%fEJNV9z2AGdDJE6T5PfQPmy)eU7UlL
+z-BeeuL@kl-z5;9_lYhB5S<`OG&DF{2Ze#_wv2Ug7?x2Zjxj^@C6S+lqXBiEOnsG;g
+zc9!?LjU4W|(OT_@XN!$8-Ingl9V|8fT?-~pTL^ME=O#1tQsr0%<*@%TOm~CUzn020
+z;inpM^IqFaly>dgnRb%s73@C2+yo^Dc9wBr?MTk7(4Flpd^hub<-9{lMukr$_vC5?
+zH%rUO)F*VL2)VL5lF>|jc`mze`fj;uwvLqCMRF-jH$2B`X2{uB=%>6EkXMv(E0;02
+z$s`?E&k3vmceUw2?j_NAt#VZ#6)Q)+%()(<TqE~`4lPzi)_AD?W+$mlM+MEy1zq~H
+zCAvbm<rK^HMvfdZ)Bw>jP_uH;tg$q1HSFkksWT7y)hA~sslD2sZU26>=~$SZL|4Gc
+zS8Ekqwa&rHvYU4*)!dOKm)6sY^#;5|<jtVcOV~U)8f%r6R$)<NDXzIbbKWgCS>&pN
+z<zUSgkT(;Dsr5jcS<^~?_!7&`?jM=I-SN`vqjDnM0nYmXb1KRIpbsWQN`lab=6`xk
+zrU#s~eCU%8wBQ+R5_(xK<a4FH4E;2DD6K4K%h(j-7#D1V)~{9?xVVx7Y5NohZ|9~m
+znUS`4zdN>WZF=;*o8OhK(`JU@$mM+79c1t-h-Mhx-%Q4zT6)uOCo`HHPtG7myV5i^
+zB=1a4dWL=Tsd9M^SJI=h?7lN^Rb@AG$*95`%cH#Xm*&jxqc!nIW4os%PP4EIpBP<G
+z9kqLLZbY2(nMe8AUUhll+4xy1FWee!%j=J2sw>R6A+H(+dApnT6{ef$KqBpq<`2P6
+zo^BIW?BZwZFsSGFX&<YfXRlw6%ral;fsxuP;i|Wj#Shi!QUVEa4PC0F=%Tn(Nzoa)
+z6iIck1+R<Kv4+@^jyGTg&h8qbORaBo^qQnl+gn5K(q`6~rWs@?+DB&leHSM=b*VSk
+zH}B8nj<TO8<^87q{9ait-e!jEVnsRIB6`u-uF-UKeqyawz%m*1Oo(cXSFVB!-QC{-
+zW)9NL7d_G7-;R0C1-fl)bw3sufm*DlJJs3AgTe8tO=$9T*rQwf%D{vozB0Oti*}B#
+zOI-f=X2#_8%3rG!A2nWH@=MCTE{wxT?uOAHg*HjFar(^Bg%)x}SP`!7nz6Id!L{2>
+z3tac8{RX+NQAfAWpHLFs6wh1%>zYEaCu|!vT^}WSkSwuhsF!}y^wUQ_{q!?HKU?W%
+zkbbt2qjhERV1@jhJ>;Nr9CFN$^|V-0(BYkG4=)1Hmf2ubP9~MkG{|foRnz8dp~r8~
+zA^%#-(9!#DEf1JhuXtq}vl494%zOM%N5?~@_4C}KXAjlIYBGSHUT0u6@!+CbYdrc2
+zY9F83y3wL8!$k>5IxBrZ(pf>9k~NgcmwH!w``T#T+(OZbtGMRQ^C~5tQK-|Rq49_I
+ziaQm~Vb9Ske)eARwDwAvUW6GLcSdWpvXe^8(?h76-Og6AXx**3*PWhdr8!gF%ACJw
+z)w#y3xOE<WsA4bWb*__zyUrD~y4HDMZ#}Q`;Bjl1p%|hj5TO;2J(xbW=&sS7?;Z96
+znWb8%DrkCTbkaK-=6`<I7V3_(1s$Yq9~_pbW*+4R@yg@p!&k&Rdz6G-88cBHoQR<4
+zW;zTScSoaQ?fT|P>05LaEB?sDXVtH&4rS4|Q929p`-P?bbd#`m%c9#)`}}&c&hi_-
+zE1Rp#n^<<A1%E!Ow^+~WDr=bq-Hy9Fdm(v8wPFUkR&6E_BJwN+LPS<#Gejtpy1FAm
+znz^zL*t%)>>8wWG-7LDRlZ>eSHrsB3-gVS|TU^(u{pz&u-G4$!ba8LAC$Z&r+9*}u
+zQd=t1Q}|nsRceQ~6e_oP?=Yy`V)hD!|6$CBi;XRt4=xo;`7KxicDHzYo)+Ca_6O8A
+zm+9Rbd3Sk>J-OlFygMe!Wac>aTgsK%Vy?6$S6dwD3x@M%M~jvG5^Z-`WA3w+rP`cZ
+z55&JEk)zCeiL5pHOH(<>ZYA`{v0i*gJ&N|QgdUd;XEyLW_3Ag=;9&`Dv{}<zJ}~va
+zy!UCXFI>62_sM<|`;p%Jq`XLv9*30N{YKoBiz&Qi)!z~ty1~1AGaat3pPid&*Syl|
+zr)fBsEYpx4^%juOP}%MKlgy4q+R5AcH6J>i^?NB2GT?2uL<T}{64B|V*7|m*!23u-
+zv8OEay1)1gC56i{;?*aCtpll_)T_39|3L?iByX#2aB(59deAnC;38|=;GXLWFSYq;
+zx;nl5(xvIW97wk&+<2{eAB^!Zi>Eniv&EXCx9>I8A}St&!?_FYR$AM(D6cf)H^+u$
+zyh({}uEXiDD{*c0Ci|SR%^4|?hafs7GOR5nSpx93+EYq&!lP3n!`e~`Zs+!1|Kz>f
+zNuMZhYY$nhw}H{~K4_@?jwdbX_|;j6gWh-+E?)<`iA-~r^V0eLbEL^{u8PdJXA8X@
+z%*(0wk}EA56jShRhxo7cGA*r2r2_%NTJz>DE%OqC$vPMOW;VoUUeXmQf+<ug3Tf?b
+zxV#tNe?8bE^BltEz4+d1zPj0s?mIp`uVlogW%U#W?>KtYwfj}?O@~K0qS%-B;>W%E
+z?~%E-SABl5VA=Nk`V(<=K}0RjmN4K(DdLxBm88}3Y(!A3r$jB!Mg&D^I|$lIDWmol
+zu5Hq3kCtkVs|Ve+&N{nHYAw^wE|Xfzyt9j>I+y}pn%I68_u{8y+fhnxu~Kqh60<ca
+zrbqDx<)}VrPxpP0lC<iBB7(;CK@maY`k+0Dg~R#zpDJ$x@{6@Q`<=kLtGeX-t%L6?
+z4rS+&`NjoVgfo95{1ulUMaimfskr<o3hl+b{3r@un`v**ir&^#3U>IN?hdlIvxIhU
+zbrmPZ3-s)9kF`Wi7cY6&*kVc(^qhzHUAL&w7W=m^?}eW<O)S_vFK_?EyRE!8;_{`9
+z`BRr09&yEavgjT`&AeK)U%PkdZkwS@5@Rm<uCn0Yb8@HDT~<Q!xLUziCj3-QGLc`J
+zWcpw5pr>?$VhXseL*Lfne?3Jg0x^YL*!CAdXjLldTLZ%Imw4a{3h=H}^a8<Usutg{
+zBCj2f7N$D?5-R^oGD4|~DY!y_oj#4|WVbbKZHi1uSx!*n&RDlc8)dMKbmf?l)^|X)
+zzw-TY+s^al=OC$rP4R?gT`R`#tGpZdN5ylHdPiC4VL-Dpy~SK7JZB0>FjTdF1}q?f
+z@4X9&U#&9dXg8^Arshk%GtxfM78ey&k&X^`z4EFuSyL5{kH1bF@CpSyJ|>@+pHlF@
+dNWiWOZ=`Q`fp#?)2~MrnJ?fvirxX(2@&B<FHZK4G
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
 new file mode 100644
-index 00000000000000..853bd545336d1a
+index 00000000000000..d0c5f989546d15
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
 @@ -0,0 +1,40 @@
@@ -13820,7 +13946,7 @@ index 00000000000000..853bd545336d1a
 +
 +#cgo noescape updateHMAC
 +#cgo noescape finalizeHMAC
-+#cgo nocallback initMAC
++#cgo nocallback initHMAC
 +#cgo nocallback freeHMAC
 +#cgo nocallback updateHMAC
 +#cgo nocallback finalizeHMAC
@@ -13873,65 +13999,69 @@ index 00000000000000..9f05af66b277d3
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
 new file mode 100644
-index 00000000000000..5bcc3d30c509c3
+index 00000000000000..8306f0f74e055b
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
-@@ -0,0 +1,63 @@
+@@ -0,0 +1,67 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
 +#ifndef CRYPTOKIT_H
 +#define CRYPTOKIT_H
 +
-+#include <stdint.h>
 +#include <stddef.h>
++#include <stdint.h>
 +
 +// AES GCM encryption and decryption
-+int encryptAESGCM(const uint8_t *key, size_t keyLength,
-+                  const uint8_t *data, size_t dataLength,
-+                  const uint8_t *nonce, size_t nonceLength,
-+                  const uint8_t *aad, size_t aadLength,
-+                  uint8_t *cipherText, size_t cipherTextLength,
-+                  uint8_t *tag);
-+int decryptAESGCM(const uint8_t *key, size_t keyLength,
-+                  const uint8_t *data, size_t dataLength,
-+                  const uint8_t *nonce, size_t nonceLength,
-+                  const uint8_t *aad, size_t aadLength,
-+                  const uint8_t *tag, size_t tagLength,
-+                  uint8_t *out, size_t *outLength);
++int encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data,
++                  size_t dataLength, const uint8_t *nonce, size_t nonceLength,
++                  const uint8_t *aad, size_t aadLength, uint8_t *cipherText,
++                  size_t cipherTextLength, uint8_t *tag);
++int decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data,
++                  size_t dataLength, const uint8_t *nonce, size_t nonceLength,
++                  const uint8_t *aad, size_t aadLength, const uint8_t *tag,
++                  size_t tagLength, uint8_t *out, size_t *outLength);
 +
 +// Generates an Ed25519 keypair.
-+// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key).
-+// The public key is 32 bytes.
++// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are
++// the public key). The public key is 32 bytes.
 +void generateKeyEd25519(uint8_t *key);
 +int newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed);
 +int newPublicKeyEd25519(uint8_t *key, const uint8_t *pub);
-+int signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer);
-+int verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig);
++int signEd25519(const uint8_t *privateKey, const uint8_t *message,
++                size_t messageLength, uint8_t *sigBuffer);
++int verifyEd25519(const uint8_t *publicKey, const uint8_t *message,
++                  size_t messageLength, const uint8_t *sig);
 +
 +// HKDF key derivation
-+int extractHKDF(int32_t hashFunction,
-+                const uint8_t *secret, size_t secretLength,
-+                const uint8_t *salt, size_t saltLength,
++int extractHKDF(int32_t hashFunction, const uint8_t *secret,
++                size_t secretLength, const uint8_t *salt, size_t saltLength,
 +                uint8_t *prk, size_t prkLength);
-+int expandHKDF(int32_t hashFunction,
-+               const uint8_t *prk, size_t prkLength,
-+               const uint8_t *info, size_t infoLength,
-+               uint8_t *okm, size_t okmLength);
++int expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength,
++               const uint8_t *info, size_t infoLength, uint8_t *okm,
++               size_t okmLength);
 +
-+void *initMAC(int32_t hashFunction, const uint8_t *key, int keyLength);
++void *initHMAC(int32_t hashFunction, const uint8_t *key, int keyLength);
 +void freeHMAC(int32_t hashFunction, void *ptr);
-+void updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int length);
++void updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data,
++                int length);
 +void finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer);
-+
-+void MD5(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
-+void SHA1(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
-+void SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
-+void SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
-+void SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer);
++void *copyHMAC(int32_t hashAlgorithm, void *ptr);
++
++void MD5(const uint8_t *inputPointer, size_t inputLength,
++         const uint8_t *outputPointer);
++void SHA1(const uint8_t *inputPointer, size_t inputLength,
++          const uint8_t *outputPointer);
++void SHA256(const uint8_t *inputPointer, size_t inputLength,
++            const uint8_t *outputPointer);
++void SHA384(const uint8_t *inputPointer, size_t inputLength,
++            const uint8_t *outputPointer);
++void SHA512(const uint8_t *inputPointer, size_t inputLength,
++            const uint8_t *outputPointer);
 +
 +void *hashNew(int32_t hashAlgorithm);
-+void hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int length);
++void hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data,
++               int length);
 +void hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer);
 +void hashReset(int32_t hashAlgorithm, void *ptr);
 +int hashSize(int32_t hashAlgorithm);
@@ -14062,10 +14192,10 @@ index 00000000000000..458e9eb57416b1
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
 new file mode 100644
-index 00000000000000..1b485e32cd30d0
+index 00000000000000..469bcb16f4c7e5
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
-@@ -0,0 +1,255 @@
+@@ -0,0 +1,245 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14128,18 +14258,8 @@ index 00000000000000..1b485e32cd30d0
 +	SHA512Size      = int(C.hashSize(sha512))
 +)
 +
-+// cloneHash is an interface that defines a Clone method.
-+//
-+// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
-+// but we need it now.
-+type cloneHash interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() hash.Hash
-+}
-+
 +var _ hash.Hash = (*evpHash)(nil)
-+var _ cloneHash = (*evpHash)(nil)
++var _ HashCloner = (*evpHash)(nil)
 +
 +type evpHash struct {
 +	ptr           unsafe.Pointer
@@ -14168,16 +14288,16 @@ index 00000000000000..1b485e32cd30d0
 +	}
 +}
 +
-+func (h *evpHash) Clone() hash.Hash {
++func (h *evpHash) Clone() (HashCloner, error) {
 +	if h.ptr == nil {
-+		return nil
++		panic("cryptokit: hash already finalized")
 +	}
 +
 +	newHash := newEVPHash(C.hashCopy(h.hashAlgorithm, h.ptr), h.hashAlgorithm, h.blockSize, h.size)
 +
 +	runtime.KeepAlive(h)
 +
-+	return newHash
++	return newHash, nil
 +}
 +
 +func (h *evpHash) Write(p []byte) (int, error) {
@@ -14321,6 +14441,47 @@ index 00000000000000..1b485e32cd30d0
 +		),
 +	}
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
+new file mode 100644
+index 00000000000000..537718d6b6a24d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
+@@ -0,0 +1,17 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package cryptokit
++
++import (
++	"hash"
++)
++
++// HashCloner is an interface that defines a Clone method.
++type HashCloner interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() (HashCloner, error)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
+new file mode 100644
+index 00000000000000..d690254202bde6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
+@@ -0,0 +1,12 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build go1.25 && darwin
++
++package cryptokit
++
++import (
++	"hash"
++)
++
++type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
 new file mode 100644
 index 00000000000000..da161adcd88ea6
@@ -14406,10 +14567,10 @@ index 00000000000000..da161adcd88ea6
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
 new file mode 100644
-index 00000000000000..c9f4d67de4c9f3
+index 00000000000000..a1ec1262a36247
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
-@@ -0,0 +1,144 @@
+@@ -0,0 +1,159 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14428,7 +14589,7 @@ index 00000000000000..c9f4d67de4c9f3
 +)
 +
 +var _ hash.Hash = (*cryptoKitHMAC)(nil)
-+var _ cloneHash = (*cryptoKitHMAC)(nil)
++var _ HashCloner = (*cryptoKitHMAC)(nil)
 +
 +type cryptoKitHMAC struct {
 +	ptr unsafe.Pointer
@@ -14456,7 +14617,7 @@ index 00000000000000..c9f4d67de4c9f3
 +	}
 +
 +	hmac := &cryptoKitHMAC{
-+		ptr: C.initMAC(
++		ptr: C.initHMAC(
 +			C.int(kind),
 +			base(key), C.int(len(key)),
 +		),
@@ -14512,8 +14673,23 @@ index 00000000000000..c9f4d67de4c9f3
 +	return errors.New("cryptokit: hash state is not marshallable")
 +}
 +
-+func (h *cryptoKitHMAC) Clone() hash.Hash {
-+	panic("cryptokit: hash state is not cloneable")
++func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
++	if h.ptr == nil {
++		panic("cryptokit: hash already finalized")
++	}
++
++	hmac := &cryptoKitHMAC{ptr: C.copyHMAC(C.int(h.kind), h.ptr), kind: h.kind, key: slices.Clone(h.key), blockSize: h.blockSize, size: h.size}
++
++	runtime.KeepAlive(h)
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		C.freeHMAC(
++			C.int(h.kind),
++			h.ptr,
++		)
++	})
++
++	return hmac, nil
 +}
 +
 +func (h *cryptoKitHMAC) Reset() {
@@ -14522,7 +14698,7 @@ index 00000000000000..c9f4d67de4c9f3
 +		h.ptr,
 +	)
 +
-+	h.ptr = C.initMAC(
++	h.ptr = C.initHMAC(
 +		C.int(h.kind),
 +		(*C.uint8_t)(&*addrNeverEmpty(h.key)), C.int(len(h.key)),
 +	)
@@ -16670,7 +16846,7 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 new file mode 100644
-index 00000000000000..692a36ec7079cc
+index 00000000000000..99fe3c7189d9d2
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 @@ -0,0 +1,427 @@
@@ -16781,10 +16957,10 @@ index 00000000000000..692a36ec7079cc
 +	}
 +	// Fall back to standard library for GCM with non-standard nonce or tag size.
 +	if nonceSize != gcmStandardNonceSize {
-+		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
++		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize) // CodeQL [SM04391] This is to keep compatibility with upstream, it's on end user teams to raise exceptions with the Crypto Board.
 +	}
 +	if tagSize != gcmTagSize {
-+		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize) // CodeQL [SM04391] This is to keep compatibility with upstream, it's on end user teams to raise exceptions with the Crypto Board.
 +	}
 +	return newGCM(c.key, cipherGCMTLSNone)
 +}
@@ -18390,10 +18566,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..b97e638e4a98ed
+index 00000000000000..2c871ee31a327d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,325 @@
+@@ -0,0 +1,315 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -18545,18 +18721,8 @@ index 00000000000000..b97e638e4a98ed
 +	return hx.alg.id
 +}
 +
-+// cloneHash is an interface that defines a Clone method.
-+//
-+// hash.CloneHash will probably be added in Go 1.25, see https://golang.org/issue/69521,
-+// but we need it now.
-+type cloneHash interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() hash.Hash
-+}
-+
 +var _ hash.Hash = (*hashX)(nil)
-+var _ cloneHash = (*hashX)(nil)
++var _ HashCloner = (*hashX)(nil)
 +
 +// hashX implements [hash.Hash].
 +type hashX struct {
@@ -18597,14 +18763,14 @@ index 00000000000000..b97e638e4a98ed
 +	runtime.SetFinalizer(h, (*hashX).finalize)
 +}
 +
-+func (h *hashX) Clone() hash.Hash {
++func (h *hashX) Clone() (HashCloner, error) {
 +	defer runtime.KeepAlive(h)
 +	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
 +	if h.ctx != 0 {
 +		hashClone(h.ctx, &h2.ctx)
 +		runtime.SetFinalizer(h2, (*hashX).finalize)
 +	}
-+	return h2
++	return h2, nil
 +}
 +
 +func (h *hashX) Reset() {
@@ -18719,6 +18885,49 @@ index 00000000000000..b97e638e4a98ed
 +		panic(err)
 +	}
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
+new file mode 100644
+index 00000000000000..411f36108a924d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
+@@ -0,0 +1,18 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"hash"
++)
++
++// HashCloner is an interface that defines a Clone method.
++type HashCloner interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() (HashCloner, error)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
+new file mode 100644
+index 00000000000000..f86a9e9bfd47a9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
+@@ -0,0 +1,13 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build go1.25 && windows
++// +build go1.25,windows
++
++package cng
++
++import (
++	"hash"
++)
++
++type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
 index 00000000000000..2647c6bc06cd57
@@ -19705,7 +19914,7 @@ index 00000000000000..0269f9cf86539e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
 new file mode 100644
-index 00000000000000..15c1345475a3b1
+index 00000000000000..bd366bfd130ba7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
 @@ -0,0 +1,311 @@
@@ -19787,7 +19996,7 @@ index 00000000000000..15c1345475a3b1
 +}
 +
 +var _ hash.Hash = (*DigestSHA3)(nil)
-+var _ cloneHash = (*DigestSHA3)(nil)
++var _ HashCloner = (*DigestSHA3)(nil)
 +
 +// DigestSHA3 is the [sha3.SHA3] implementation using the CNG API.
 +type DigestSHA3 struct {
@@ -19826,14 +20035,14 @@ index 00000000000000..15c1345475a3b1
 +	runtime.SetFinalizer(h, (*DigestSHA3).finalize)
 +}
 +
-+func (h *DigestSHA3) Clone() hash.Hash {
++func (h *DigestSHA3) Clone() (HashCloner, error) {
 +	defer runtime.KeepAlive(h)
 +	h2 := &DigestSHA3{alg: h.alg}
 +	if h.ctx != 0 {
 +		hashClone(h.ctx, &h2.ctx)
 +		runtime.SetFinalizer(h2, (*DigestSHA3).finalize)
 +	}
-+	return h2
++	return h2, nil
 +}
 +
 +func (h *DigestSHA3) Reset() {
@@ -20117,14 +20326,14 @@ index 00000000000000..56131a6bc93d3f
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..7d34e6661d3086
+index 00000000000000..2a57d5e6e93b4f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 @@ -0,0 +1,368 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:generate go run github.com/microsoft/go-crypto-winnative/cmd/mksyscall -output zsyscall_windows.go bcrypt_windows.go
++//go:generate go run github.com/microsoft/go-crypto-winnative/cmd/mksyscall -output zsyscall_windows.go bcrypt_windows.go ntstatus_windows.go
 +
 +// Package bcrypt implements interop with bcrypt.dll, a component of Windows CNG.
 +// See https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/
@@ -21058,21 +21267,21 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..ecf9df95b6aa4b 100644
+index 8507f01b12f518..03cd2e4d00a5cb 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250527092458-6200bfa7d0c8
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250527093256-c19cfa9cfe2e
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250527092650-fa74f148acbc
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From a457d7065eb0c0236de84d20dcde71f053fcb5e6 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 19 Jun 2025 13:45:40 +0100
Subject: [PATCH 335/887] update vendors

---
 .../0001-Vendor-external-dependencies.patch   | 30 +++++++++----------
 ...03-Implement-crypto-internal-backend.patch |  1 -
 2 files changed, 15 insertions(+), 16 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 0f5c14e47cd..4f1d38ad7d4 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1830,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..6055d417e2aeda 100644
+index b81f19068aef23..0029972e9ce669 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1839,19 +1839,19 @@ index b81f19068aef23..6055d417e2aeda 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..c6d033d4499dbe 100644
+index 410eb8648a710a..d95aa40835851e 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a h1:Bf0rrNsFSEXprsNTKEC6M6sHK2irrczIXFH+Lxb8J9k=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f h1:s/pm8GJwZM8lvH9o9ou4/jGLPFfFZvTIpQJEZKZS+p4=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7 h1:ZjpSTr5uh4P3EKwrZQ8Fr/NZJ6NBgf+8UabCp9Kmtoc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba h1:sz9TMONxImn6w1ryWkahKg1k9v+063oM9xWVnQSLWdE=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9 h1:aqmgFR6VKmhz88A5Wzm0jajHxKuM0lOsezmtzP3v6iY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
@@ -5385,11 +5385,11 @@ index 00000000000000..621822102024f8
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
 new file mode 100644
-index 00000000000000..c44be3d87b4300
+index 00000000000000..423668c6acf239
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
 @@ -0,0 +1,14 @@
-+//go:build !cmd_go_bootstrap
++//go:build !go1.25 && !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -14443,14 +14443,14 @@ index 00000000000000..469bcb16f4c7e5
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
 new file mode 100644
-index 00000000000000..537718d6b6a24d
+index 00000000000000..5416b7882c1891
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
 @@ -0,0 +1,17 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++//go:build !go1.25 && darwin
 +
 +package cryptokit
 +
@@ -21267,16 +21267,16 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..03cd2e4d00a5cb 100644
+index 8507f01b12f518..ce4441177c3650 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250612114952-b03187964f0a
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250616121214-c1db0735688f
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 504b0d319c3..e0b2126b42a 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -3015,7 +3015,6 @@ index 6b4289503d57ae..12fba96b868c9e 100644
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
  	// The "regabi" GOEXPERIMENT is an alias for all "working"
->>>>>>> 8a8521a (fix conflicts)
 diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
 new file mode 100644
 index 00000000000000..361db2a962d60f

From b356714c9436aa204f0e129bbf1874ebded9c68b Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 19 Jun 2025 14:52:35 +0100
Subject: [PATCH 336/887] vendor dependences

---
 .../0001-Vendor-external-dependencies.patch   | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 4f1d38ad7d4..b7cab665c15 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1830,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..0029972e9ce669 100644
+index b81f19068aef23..df286892b11fba 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1841,10 +1841,10 @@ index b81f19068aef23..0029972e9ce669 100644
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..d95aa40835851e 100644
+index 410eb8648a710a..5c756b00335489 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1852,8 +1852,8 @@ index 410eb8648a710a..d95aa40835851e 100644
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba h1:sz9TMONxImn6w1ryWkahKg1k9v+063oM9xWVnQSLWdE=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9 h1:aqmgFR6VKmhz88A5Wzm0jajHxKuM0lOsezmtzP3v6iY=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942 h1:F8E3HYNP5BBk77l1RbQcTUORGl8raCpMGvXYjnhnsC4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
@@ -18887,15 +18887,15 @@ index 00000000000000..2c871ee31a327d
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
 new file mode 100644
-index 00000000000000..411f36108a924d
+index 00000000000000..2340cb2f0127f9
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
 @@ -0,0 +1,18 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build windows
-+// +build windows
++//go:build !go1.25 && windows
++// +build !go1.25,windows
 +
 +package cng
 +
@@ -21267,7 +21267,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..ce4441177c3650 100644
+index 8507f01b12f518..974352d2bde9d7 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21281,7 +21281,7 @@ index 8507f01b12f518..ce4441177c3650 100644
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250616121346-2ff681f226b9
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 84fe052ffe26af6c6c844af6cdc51336eeaf20b1 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 19 Jun 2025 15:30:01 +0100
Subject: [PATCH 337/887] fix dist version cmd

---
 eng/_util/cmd/build/build.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index a2460dc5851..c765aaec2a4 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -288,7 +288,7 @@ func build(o *options) (err error) {
 		var version string
 		if data, err := os.ReadFile(filepath.Join(goRootDir, "VERSION")); err != nil {
 			if errors.Is(err, os.ErrNotExist) {
-				if version, err = writeDevelVersionFile(goRootDir, toolsDir); err != nil {
+				if version, err = writeDevelVersionFile(goRootDir, executableExtension); err != nil {
 					return fmt.Errorf("unable to pack: failed writing development VERSION file: %v", err)
 				}
 				// Best effort: clean up the VERSION file when we're done. This is just for dev
@@ -348,8 +348,8 @@ func build(o *options) (err error) {
 	return nil
 }
 
-func writeDevelVersionFile(goRootDir, toolsDir string) (string, error) {
-	cmd := exec.Command(filepath.Join(toolsDir, "dist"), "version")
+func writeDevelVersionFile(goRootDir, executableExtension string) (string, error) {
+	cmd := exec.Command(filepath.Join(goRootDir, "bin", "go"+executableExtension), "tool", "dist", "version")
 	cmd.Env = append(os.Environ(), "GOROOT="+goRootDir)
 	vBytes, err := cmd.CombinedOutput()
 	if err != nil {

From d0baa12e01fe78c06bbfc089eaff9566fff4490e Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 19 Jun 2025 15:39:51 +0100
Subject: [PATCH 338/887] fix distpack command

---
 eng/_util/cmd/build/build.go | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index c765aaec2a4..465a3b20926 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -281,8 +281,6 @@ func build(o *options) (err error) {
 	}
 
 	if o.PackBuild || o.PackSource {
-		// Find the host version of distpack. (Not the target version, which might not run.)
-		toolsDir := filepath.Join(goRootDir, "pkg", "tool", runtime.GOOS+"_"+runtime.GOARCH)
 		// distpack needs a VERSION file to run. If we're on the main branch, we don't have one, so
 		// use dist's version calculation to create a temp dev version and put it in VERSION.
 		var version string
@@ -300,7 +298,7 @@ func build(o *options) (err error) {
 		} else {
 			version, _, _ = strings.Cut(string(data), "\n")
 		}
-		cmd := exec.Command(filepath.Join(toolsDir, "distpack"+executableExtension))
+		cmd := exec.Command(filepath.Join(goRootDir, "bin", "go"+executableExtension), "tool", "distpack")
 		cmd.Env = append(os.Environ(), "GOROOT="+goRootDir)
 		cmd.Stdout = os.Stdout
 		cmd.Stderr = os.Stderr

From 5cd3c631fa7adbed43f0224225457ad5221e9a23 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 19 Jun 2025 19:54:35 +0200
Subject: [PATCH 339/887] move backend error files to the `crypto` package

---
 ...03-Implement-crypto-internal-backend.patch | 334 +++++++++---------
 1 file changed, 166 insertions(+), 168 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 31a46d2af93..cbe164947bc 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -18,7 +18,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../internal/backend/allocryptofallback_on.go |   9 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 280 +++++++++++++
+ .../internal/backend/backendgen_test.go       | 278 +++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
@@ -43,22 +43,22 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/nobackend.go      | 246 ++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 339 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
+ src/crypto/zbackenderrconflict_boring_cng.go  |  17 +
+ .../zbackenderrconflict_boring_darwin.go      |  17 +
+ .../zbackenderrconflict_boring_openssl.go     |  17 +
+ src/crypto/zbackenderrconflict_cng_darwin.go  |  17 +
+ src/crypto/zbackenderrconflict_cng_openssl.go |  17 +
+ .../zbackenderrconflict_darwin_openssl.go     |  17 +
+ src/crypto/zbackenderrnofallback_boring.go    |  20 +
+ src/crypto/zbackenderrnofallback_cng.go       |  20 +
+ src/crypto/zbackenderrnofallback_darwin.go    |  20 +
+ src/crypto/zbackenderrnofallback_openssl.go   |  20 +
+ .../zbackenderrrequirefips_nosystemcrypto.go  |  17 +
+ .../zbackenderrsystemcrypto_nobackend.go      |  16 +
  src/go/build/deps_test.go                     |  27 +-
- .../backenderr_gen_conflict_boring_cng.go     |  17 +
- .../backenderr_gen_conflict_boring_darwin.go  |  17 +
- .../backenderr_gen_conflict_boring_openssl.go |  17 +
- .../backenderr_gen_conflict_cng_darwin.go     |  17 +
- .../backenderr_gen_conflict_cng_openssl.go    |  17 +
- .../backenderr_gen_conflict_darwin_openssl.go |  17 +
- .../backenderr_gen_nofallback_boring.go       |  20 +
- src/runtime/backenderr_gen_nofallback_cng.go  |  20 +
- .../backenderr_gen_nofallback_darwin.go       |  20 +
- .../backenderr_gen_nofallback_openssl.go      |  20 +
- ...ckenderr_gen_requirefips_nosystemcrypto.go |  17 +
- .../backenderr_gen_systemcrypto_nobackend.go  |  16 +
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 54 files changed, 2727 insertions(+), 12 deletions(-)
+ 54 files changed, 2725 insertions(+), 12 deletions(-)
  create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
  create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -88,18 +88,18 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_cng.go
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_darwin.go
- create mode 100644 src/runtime/backenderr_gen_conflict_boring_openssl.go
- create mode 100644 src/runtime/backenderr_gen_conflict_cng_darwin.go
- create mode 100644 src/runtime/backenderr_gen_conflict_cng_openssl.go
- create mode 100644 src/runtime/backenderr_gen_conflict_darwin_openssl.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_boring.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_cng.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_darwin.go
- create mode 100644 src/runtime/backenderr_gen_nofallback_openssl.go
- create mode 100644 src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
- create mode 100644 src/runtime/backenderr_gen_systemcrypto_nobackend.go
+ create mode 100644 src/crypto/zbackenderrconflict_boring_cng.go
+ create mode 100644 src/crypto/zbackenderrconflict_boring_darwin.go
+ create mode 100644 src/crypto/zbackenderrconflict_boring_openssl.go
+ create mode 100644 src/crypto/zbackenderrconflict_cng_darwin.go
+ create mode 100644 src/crypto/zbackenderrconflict_cng_openssl.go
+ create mode 100644 src/crypto/zbackenderrconflict_darwin_openssl.go
+ create mode 100644 src/crypto/zbackenderrnofallback_boring.go
+ create mode 100644 src/crypto/zbackenderrnofallback_cng.go
+ create mode 100644 src/crypto/zbackenderrnofallback_darwin.go
+ create mode 100644 src/crypto/zbackenderrnofallback_openssl.go
+ create mode 100644 src/crypto/zbackenderrrequirefips_nosystemcrypto.go
+ create mode 100644 src/crypto/zbackenderrsystemcrypto_nobackend.go
 
 diff --git a/.gitignore b/.gitignore
 index c6512e64a4ef39..b3b01db73b009d 100644
@@ -370,10 +370,10 @@ index 00000000000000..acf0113bbefb6c
 +//go:generate go test -run TestGenerated -fix
 diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
 new file mode 100644
-index 00000000000000..1da2926a7b960f
+index 00000000000000..063e0bb4948236
 --- /dev/null
 +++ b/src/crypto/internal/backend/backendgen_test.go
-@@ -0,0 +1,280 @@
+@@ -0,0 +1,278 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -395,13 +395,13 @@ index 00000000000000..1da2926a7b960f
 +
 +var fix = flag.Bool("fix", false, "if true, update the generated files to the wanted value")
 +
-+const runtimePackageDir = "../../../runtime"
++const cryptoPackageDir = "../../../crypto"
 +
 +// backendErrPrefix is the prefix of the generated backend error files. Any file
-+// in the runtime package with this prefix will be considered a backend error
++// in the crypto package with this prefix will be considered a backend error
 +// file, so it's important that this prefix is unique or this generator may
 +// delete unexpected files.
-+const backendErrPrefix = "backenderr_gen_"
++const backendErrPrefix = "zbackenderr"
 +
 +const generateInstruction = "run 'go generate crypto/internal/backend' to fix"
 +
@@ -471,29 +471,27 @@ index 00000000000000..1da2926a7b960f
 +// The error files are Go files that detect issues with the backend selection
 +// and report an error at compile time.
 +//
-+// The issue detection files are placed in the runtime package rather than the
++// The issue detection files are placed in the crypto package rather than the
 +// crypto/internal/backend package to make sure these helpful errors will show
 +// up. If the files were in the backend package, DuplicateDecl and other errors
 +// would show up first, causing these informative errors to be skipped because
-+// there are too many total errors already reported. The errors would also show
-+// up if we put the files in the crypto package rather than the runtime package.
-+// (Crypto is imported before the backend backage, so the errors would show up.)
-+// However, then these errors would show up only if the Go program is using
-+// crypto. This could cause a confusing situation: if the user has a
-+// misconfigured backend and doesn't use crypto in their Go app, they will not
-+// get any errors. If they start using crypto later, they would only then get an
-+// error, but the cause would be much less apparent.
++// there are too many total errors already reported.
++//
++// Issues will only be detected if the binary uses a crypto package, else
++// the issue dection files will not be built and the errors will not be reported.
++// That done on purpose to avoid putting unnecessary restrictions on applications
++// that do not use crypto, like for example requiring cgo.
 +func TestGeneratedBackendErrorFiles(t *testing.T) {
 +	// Chip away at a list of files that should come from this generator.
 +	// Any remaining are unexpected.
 +	existingFiles := make(map[string]struct{})
-+	entries, err := os.ReadDir(runtimePackageDir)
++	entries, err := os.ReadDir(cryptoPackageDir)
 +	if err != nil {
 +		t.Fatal(err)
 +	}
 +	for _, e := range entries {
 +		if strings.HasPrefix(e.Name(), backendErrPrefix) && strings.HasSuffix(e.Name(), ".go") {
-+			existingFiles[filepath.Join(runtimePackageDir, e.Name())] = struct{}{}
++			existingFiles[filepath.Join(cryptoPackageDir, e.Name())] = struct{}{}
 +		}
 +	}
 +
@@ -530,7 +528,7 @@ index 00000000000000..1da2926a7b960f
 +func testConflict(t *testing.T, a, b string) string {
 +	return testErrorFile(
 +		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"conflict_"+a+"_"+b+".go"),
++		filepath.Join(cryptoPackageDir, backendErrPrefix+"conflict_"+a+"_"+b+".go"),
 +		"//go:build goexperiment."+a+"crypto && goexperiment."+b+"crypto",
 +		"The "+a+" and "+b+" backends are both enabled, but they are mutually exclusive.",
 +		"Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.")
@@ -548,7 +546,7 @@ index 00000000000000..1da2926a7b960f
 +	}
 +	return testErrorFile(
 +		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"nofallback_"+backend.name+".go"),
++		filepath.Join(cryptoPackageDir, backendErrPrefix+"nofallback_"+backend.name+".go"),
 +		"//go:build "+c.String(),
 +		"The "+expTag.String()+" tag is specified, but other tags required to enable that backend were not met.",
 +		"Required build tags:",
@@ -566,7 +564,7 @@ index 00000000000000..1da2926a7b960f
 +	}
 +	return testErrorFile(
 +		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"systemcrypto_nobackend.go"),
++		filepath.Join(cryptoPackageDir, backendErrPrefix+"systemcrypto_nobackend.go"),
 +		constraint,
 +		"The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.")
 +}
@@ -574,7 +572,7 @@ index 00000000000000..1da2926a7b960f
 +func testRequireFIPSWithoutBackend(t *testing.T) string {
 +	return testErrorFile(
 +		t,
-+		filepath.Join(runtimePackageDir, backendErrPrefix+"requirefips_nosystemcrypto.go"),
++		filepath.Join(cryptoPackageDir, backendErrPrefix+"requirefips_nosystemcrypto.go"),
 +		"//go:build requirefips && !goexperiment.systemcrypto",
 +		"The requirefips tag is enabled, but no crypto backend is enabled.",
 +		"A crypto backend is required to enable FIPS mode.")
@@ -589,7 +587,7 @@ index 00000000000000..1da2926a7b960f
 +// license that can be found in the LICENSE file.
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "` + backendErrPrefix + `".`
-+	c := header + "\n\n" + constraint + "\n\npackage runtime\n\nfunc init() {\n\t`\n"
++	c := header + "\n\n" + constraint + "\n\npackage crypto\n\nfunc init() {\n\t`\n"
 +	for _, m := range message {
 +		c += "\t" + m + "\n"
 +	}
@@ -2905,82 +2903,21 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
---- a/src/go/build/deps_test.go
-+++ b/src/go/build/deps_test.go
-@@ -536,6 +536,11 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
- 	< github.com/microsoft/go-crypto-winnative/cng;
- 
-+	syscall,
-+	github.com/golang-fips/openssl/v2
-+	< crypto/internal/backend/internal/opensslsetup
-+	< crypto/internal/backend/fips140;
-+
- 	FIPS, internal/godebug < crypto/fips140;
- 
- 	crypto, hash !< FIPS;
-@@ -546,16 +551,28 @@ var depsRules = `
- 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
- 	sync/atomic < crypto/internal/boring/bcache;
- 
-+	crypto,	crypto/cipher,
-+	crypto/internal/boring/sig, crypto/internal/boring/syso
-+	< crypto/internal/boring;
-+
-+	crypto/internal/boring/sig,
-+	crypto/internal/backend/fips140,
-+	github.com/golang-fips/openssl/v2,
-+	github.com/microsoft/go-crypto-darwin/xcrypto,
-+	github.com/microsoft/go-crypto-winnative/cng,
-+	crypto/internal/boring
-+	< crypto/internal/backend;
-+
- 	FIPS, internal/godebug, hash, embed,
- 	crypto/internal/boring/sig,
- 	crypto/internal/boring/syso,
- 	crypto/internal/boring/bcache,
- 	crypto/internal/fips140only,
- 	crypto,
--	crypto/cipher
-+	crypto/cipher,
-+	crypto/internal/backend
- 	< crypto/sha3
- 	< crypto/internal/fips140hash
--	< crypto/internal/boring
- 	< crypto/boring
- 	< crypto/aes,
- 	  crypto/des,
-@@ -579,8 +596,12 @@ var depsRules = `
- 	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
- 	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
- 
--	CRYPTO, FMT, math/big
-+	CRYPTO, FMT, math/big,
-+	github.com/golang-fips/openssl/v2/bbig,
-+	github.com/microsoft/go-crypto-darwin/bbig,
-+	github.com/microsoft/go-crypto-winnative/cng/bbig
- 	< crypto/internal/boring/bbig
-+	< crypto/internal/backend/bbig
- 	< crypto/rand
- 	< crypto/ed25519 # depends on crypto/rand.Reader
- 	< encoding/asn1
-diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
+diff --git a/src/crypto/zbackenderrconflict_boring_cng.go b/src/crypto/zbackenderrconflict_boring_cng.go
 new file mode 100644
-index 00000000000000..361db2a962d60f
+index 00000000000000..03aa67a60bd92b
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_cng.go
++++ b/src/crypto/zbackenderrconflict_boring_cng.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.boringcrypto && goexperiment.cngcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -2989,21 +2926,21 @@ index 00000000000000..361db2a962d60f
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_conflict_boring_darwin.go b/src/runtime/backenderr_gen_conflict_boring_darwin.go
+diff --git a/src/crypto/zbackenderrconflict_boring_darwin.go b/src/crypto/zbackenderrconflict_boring_darwin.go
 new file mode 100644
-index 00000000000000..6c48a4e50fa72e
+index 00000000000000..fa463937e0453a
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_darwin.go
++++ b/src/crypto/zbackenderrconflict_boring_darwin.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.boringcrypto && goexperiment.darwincrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3012,21 +2949,21 @@ index 00000000000000..6c48a4e50fa72e
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_conflict_boring_openssl.go b/src/runtime/backenderr_gen_conflict_boring_openssl.go
+diff --git a/src/crypto/zbackenderrconflict_boring_openssl.go b/src/crypto/zbackenderrconflict_boring_openssl.go
 new file mode 100644
-index 00000000000000..91fac35011b24c
+index 00000000000000..ba99c374422357
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_boring_openssl.go
++++ b/src/crypto/zbackenderrconflict_boring_openssl.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.boringcrypto && goexperiment.opensslcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3035,21 +2972,21 @@ index 00000000000000..91fac35011b24c
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_conflict_cng_darwin.go b/src/runtime/backenderr_gen_conflict_cng_darwin.go
+diff --git a/src/crypto/zbackenderrconflict_cng_darwin.go b/src/crypto/zbackenderrconflict_cng_darwin.go
 new file mode 100644
-index 00000000000000..2e82a5cff034b7
+index 00000000000000..046f94d615efa7
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_cng_darwin.go
++++ b/src/crypto/zbackenderrconflict_cng_darwin.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.cngcrypto && goexperiment.darwincrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3058,21 +2995,21 @@ index 00000000000000..2e82a5cff034b7
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_conflict_cng_openssl.go b/src/runtime/backenderr_gen_conflict_cng_openssl.go
+diff --git a/src/crypto/zbackenderrconflict_cng_openssl.go b/src/crypto/zbackenderrconflict_cng_openssl.go
 new file mode 100644
-index 00000000000000..bf44084570bbbc
+index 00000000000000..11070cf8303a8c
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_cng_openssl.go
++++ b/src/crypto/zbackenderrconflict_cng_openssl.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.cngcrypto && goexperiment.opensslcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3081,21 +3018,21 @@ index 00000000000000..bf44084570bbbc
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_conflict_darwin_openssl.go b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
+diff --git a/src/crypto/zbackenderrconflict_darwin_openssl.go b/src/crypto/zbackenderrconflict_darwin_openssl.go
 new file mode 100644
-index 00000000000000..90f4361e28cd94
+index 00000000000000..8d16f2133615bb
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_conflict_darwin_openssl.go
++++ b/src/crypto/zbackenderrconflict_darwin_openssl.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.darwincrypto && goexperiment.opensslcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3104,21 +3041,21 @@ index 00000000000000..90f4361e28cd94
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_nofallback_boring.go b/src/runtime/backenderr_gen_nofallback_boring.go
+diff --git a/src/crypto/zbackenderrnofallback_boring.go b/src/crypto/zbackenderrnofallback_boring.go
 new file mode 100644
-index 00000000000000..08926e5f836698
+index 00000000000000..f3f5d73b4ec1e6
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_boring.go
++++ b/src/crypto/zbackenderrnofallback_boring.go
 @@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !allowcryptofallback
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3130,21 +3067,21 @@ index 00000000000000..08926e5f836698
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_nofallback_cng.go b/src/runtime/backenderr_gen_nofallback_cng.go
+diff --git a/src/crypto/zbackenderrnofallback_cng.go b/src/crypto/zbackenderrnofallback_cng.go
 new file mode 100644
-index 00000000000000..f8e36f8c8406af
+index 00000000000000..50198a70ebb639
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_cng.go
++++ b/src/crypto/zbackenderrnofallback_cng.go
 @@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !allowcryptofallback
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3156,21 +3093,21 @@ index 00000000000000..f8e36f8c8406af
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_nofallback_darwin.go b/src/runtime/backenderr_gen_nofallback_darwin.go
+diff --git a/src/crypto/zbackenderrnofallback_darwin.go b/src/crypto/zbackenderrnofallback_darwin.go
 new file mode 100644
-index 00000000000000..bcca3e1a5a548d
+index 00000000000000..8b4c2a0b549e46
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_darwin.go
++++ b/src/crypto/zbackenderrnofallback_darwin.go
 @@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !allowcryptofallback
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3182,21 +3119,21 @@ index 00000000000000..bcca3e1a5a548d
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_nofallback_openssl.go b/src/runtime/backenderr_gen_nofallback_openssl.go
+diff --git a/src/crypto/zbackenderrnofallback_openssl.go b/src/crypto/zbackenderrnofallback_openssl.go
 new file mode 100644
-index 00000000000000..c88593ad85fc76
+index 00000000000000..5f137d23b6bc97
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_nofallback_openssl.go
++++ b/src/crypto/zbackenderrnofallback_openssl.go
 @@ -0,0 +1,20 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !allowcryptofallback
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3208,21 +3145,21 @@ index 00000000000000..c88593ad85fc76
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
+diff --git a/src/crypto/zbackenderrrequirefips_nosystemcrypto.go b/src/crypto/zbackenderrrequirefips_nosystemcrypto.go
 new file mode 100644
-index 00000000000000..1c015dd2b08972
+index 00000000000000..91bede3aa030a5
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_requirefips_nosystemcrypto.go
++++ b/src/crypto/zbackenderrrequirefips_nosystemcrypto.go
 @@ -0,0 +1,17 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build requirefips && !goexperiment.systemcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3231,21 +3168,21 @@ index 00000000000000..1c015dd2b08972
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/runtime/backenderr_gen_systemcrypto_nobackend.go b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
+diff --git a/src/crypto/zbackenderrsystemcrypto_nobackend.go b/src/crypto/zbackenderrsystemcrypto_nobackend.go
 new file mode 100644
-index 00000000000000..95be7ad8d38cae
+index 00000000000000..919c4d8ffa3740
 --- /dev/null
-+++ b/src/runtime/backenderr_gen_systemcrypto_nobackend.go
++++ b/src/crypto/zbackenderrsystemcrypto_nobackend.go
 @@ -0,0 +1,16 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "backenderr_gen_".
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
 +//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
 +
-+package runtime
++package crypto
 +
 +func init() {
 +	`
@@ -3253,6 +3190,67 @@ index 00000000000000..95be7ad8d38cae
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
+index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
+--- a/src/go/build/deps_test.go
++++ b/src/go/build/deps_test.go
+@@ -536,6 +536,11 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
+ 	< github.com/microsoft/go-crypto-winnative/cng;
+ 
++	syscall,
++	github.com/golang-fips/openssl/v2
++	< crypto/internal/backend/internal/opensslsetup
++	< crypto/internal/backend/fips140;
++
+ 	FIPS, internal/godebug < crypto/fips140;
+ 
+ 	crypto, hash !< FIPS;
+@@ -546,16 +551,28 @@ var depsRules = `
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+ 	sync/atomic < crypto/internal/boring/bcache;
+ 
++	crypto,	crypto/cipher,
++	crypto/internal/boring/sig, crypto/internal/boring/syso
++	< crypto/internal/boring;
++
++	crypto/internal/boring/sig,
++	crypto/internal/backend/fips140,
++	github.com/golang-fips/openssl/v2,
++	github.com/microsoft/go-crypto-darwin/xcrypto,
++	github.com/microsoft/go-crypto-winnative/cng,
++	crypto/internal/boring
++	< crypto/internal/backend;
++
+ 	FIPS, internal/godebug, hash, embed,
+ 	crypto/internal/boring/sig,
+ 	crypto/internal/boring/syso,
+ 	crypto/internal/boring/bcache,
+ 	crypto/internal/fips140only,
+ 	crypto,
+-	crypto/cipher
++	crypto/cipher,
++	crypto/internal/backend
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
+-	< crypto/internal/boring
+ 	< crypto/boring
+ 	< crypto/aes,
+ 	  crypto/des,
+@@ -579,8 +596,12 @@ var depsRules = `
+ 	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
+ 	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
+ 
+-	CRYPTO, FMT, math/big
++	CRYPTO, FMT, math/big,
++	github.com/golang-fips/openssl/v2/bbig,
++	github.com/microsoft/go-crypto-darwin/bbig,
++	github.com/microsoft/go-crypto-winnative/cng/bbig
+ 	< crypto/internal/boring/bbig
++	< crypto/internal/backend/bbig
+ 	< crypto/rand
+ 	< crypto/ed25519 # depends on crypto/rand.Reader
+ 	< encoding/asn1
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
 index 831ee67afc952d..d2f00d57c10286 100644
 --- a/src/runtime/runtime_boring.go

From 4ead3c46cb63e1aa8d7ddd5d43aa0b818c9f5411 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 19 Jun 2025 20:19:24 +0200
Subject: [PATCH 340/887] remove most cryptofallback usages

---
 ...03-Implement-crypto-internal-backend.patch | 168 +-----------------
 1 file changed, 4 insertions(+), 164 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index cbe164947bc..6ed116d8173 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -5,15 +5,7 @@ Subject: [PATCH] Implement crypto/internal/backend
 
 ---
  .gitignore                                    |   2 +
- .../compile/internal/loopvar/loopvar_test.go  |   2 +-
- src/cmd/compile/internal/ssa/fmahash_test.go  |   2 +-
- src/cmd/dist/test.go                          |   7 +
- src/cmd/internal/obj/x86/pcrelative_test.go   |   2 +-
- src/cmd/internal/testdir/testdir_test.go      |  12 +
- src/cmd/link/internal/ld/ld_test.go           |   2 +-
- src/cmd/link/internal/ld/stackcheck_test.go   |   2 +-
- src/cmd/link/link_test.go                     |   4 +-
- src/cmd/vet/vet_test.go                       |   2 +-
+ src/cmd/dist/test.go                          |   6 +
  .../backend/allocryptofallback_off.go         |   9 +
  .../internal/backend/allocryptofallback_on.go |   9 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
@@ -57,8 +49,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../zbackenderrsystemcrypto_nobackend.go      |  16 +
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
- src/syscall/exec_linux_test.go                |   2 +-
- 54 files changed, 2725 insertions(+), 12 deletions(-)
+ 45 files changed, 2703 insertions(+), 3 deletions(-)
  create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
  create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -114,34 +105,8 @@ index c6512e64a4ef39..b3b01db73b009d 100644
  # This file includes artifacts of Go build that should not be checked in.
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
-diff --git a/src/cmd/compile/internal/loopvar/loopvar_test.go b/src/cmd/compile/internal/loopvar/loopvar_test.go
-index b19962f0fd4023..ce018311a35d7d 100644
---- a/src/cmd/compile/internal/loopvar/loopvar_test.go
-+++ b/src/cmd/compile/internal/loopvar/loopvar_test.go
-@@ -189,7 +189,7 @@ func TestLoopVarHashes(t *testing.T) {
- 		// -trimpath is necessary so we get the same answer no matter where the
- 		// Go repository is checked out. This is not normally a concern since people
- 		// do not normally rely on the meaning of specific hashes.
--		cmd := testenv.Command(t, gocmd, "run", "-trimpath", root)
-+		cmd := testenv.Command(t, gocmd, "run", "-trimpath", "-tags=allowcryptofallback", root)
- 		cmd.Env = append(cmd.Env, "GOCOMPILEDEBUG=loopvarhash="+hash, "HOME="+tmpdir)
- 		cmd.Dir = filepath.Join("testdata", "inlines")
- 
-diff --git a/src/cmd/compile/internal/ssa/fmahash_test.go b/src/cmd/compile/internal/ssa/fmahash_test.go
-index c563d5b8d9d01b..ed063d7ded8fd9 100644
---- a/src/cmd/compile/internal/ssa/fmahash_test.go
-+++ b/src/cmd/compile/internal/ssa/fmahash_test.go
-@@ -33,7 +33,7 @@ func TestFmaHash(t *testing.T) {
- 	tmpdir := t.TempDir()
- 	source := filepath.Join("testdata", "fma.go")
- 	output := filepath.Join(tmpdir, "fma.exe")
--	cmd := testenv.Command(t, gocmd, "build", "-o", output, source)
-+	cmd := testenv.Command(t, gocmd, "build", "-o", output, "-tags=allowcryptofallback", source)
- 	// The hash-dependence on file path name is dodged by specifying "all hashes ending in 1" plus "all hashes ending in 0"
- 	// i.e., all hashes.  This will print all the FMAs; this test is only interested in one of them (that should appear near the end).
- 	cmd.Env = append(cmd.Env, "GOCOMPILEDEBUG=fmahash=1/0", "GOOS=linux", "GOARCH=arm64", "HOME="+tmpdir)
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d335e4cfbce468..7e362c80be609a 100644
+index d335e4cfbce468..786dcdf971dbb1 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -847,6 +847,11 @@ func (t *tester) registerTests() {
@@ -156,15 +121,7 @@ index d335e4cfbce468..7e362c80be609a 100644
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -855,6 +860,7 @@ func (t *tester) registerTests() {
- 				ldflags:   "-linkmode=internal",
- 				env:       []string{"CGO_ENABLED=0"},
- 				pkg:       "reflect",
-+				tags:      tags,
- 			})
- 		t.registerTest("internal linking, -buildmode=pie",
- 			&goTest{
-@@ -865,6 +871,7 @@ func (t *tester) registerTests() {
+@@ -865,6 +870,7 @@ func (t *tester) registerTests() {
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",
@@ -172,110 +129,6 @@ index d335e4cfbce468..7e362c80be609a 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-diff --git a/src/cmd/internal/obj/x86/pcrelative_test.go b/src/cmd/internal/obj/x86/pcrelative_test.go
-index 1ca9ea22cf7182..3cf10b0933abc0 100644
---- a/src/cmd/internal/obj/x86/pcrelative_test.go
-+++ b/src/cmd/internal/obj/x86/pcrelative_test.go
-@@ -56,7 +56,7 @@ func objdumpOutput(t *testing.T, mname, source string) []byte {
- 	}
- 
- 	cmd := testenv.Command(t,
--		testenv.GoToolPath(t), "build", "-o",
-+		testenv.GoToolPath(t), "build", "-tags=allowcryptofallback", "-o",
- 		filepath.Join(tmpdir, "output"))
- 
- 	cmd.Env = append(os.Environ(),
-diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 7e7867d83f9c47..d593aaa5f7adb5 100644
---- a/src/cmd/internal/testdir/testdir_test.go
-+++ b/src/cmd/internal/testdir/testdir_test.go
-@@ -280,6 +280,10 @@ func (t test) expectFail() bool {
- 		failureSets = append(failureSets, types2Failures32Bit)
- 	}
- 
-+	if strings.Contains(goExperiment, "boringcrypto") {
-+		failureSets = append(failureSets, boringFailures)
-+	}
-+
- 	testName := path.Join(t.dir, t.goFile) // Test name is '/'-separated.
- 
- 	for _, set := range failureSets {
-@@ -1864,6 +1868,14 @@ var types2Failures32Bit = setOf(
- 	"fixedbugs/issue23305.go", // large untyped int passed to println (32-bit)
- )
- 
-+// List of files that fail with boringcrypto due
-+// to it not supporting 32-bit architectures.
-+var boringFailures = setOf(
-+	"codegen/copy.go",
-+	"codegen/memcombine.go",
-+	"codegen/stack.go",
-+)
-+
- // In all of these cases, the 1.17 compiler reports reasonable errors, but either the
- // 1.17 or 1.18 compiler report extra errors, so we can't match correctly on both. We
- // now set the patterns to match correctly on all the 1.18 errors.
-diff --git a/src/cmd/link/internal/ld/ld_test.go b/src/cmd/link/internal/ld/ld_test.go
-index c954ab6bca7294..d455f4ecd2edbd 100644
---- a/src/cmd/link/internal/ld/ld_test.go
-+++ b/src/cmd/link/internal/ld/ld_test.go
-@@ -417,7 +417,7 @@ func d()
- 	if err := os.WriteFile(filepath.Join(tmpDir, "x.go"), []byte(main), 0644); err != nil {
- 		t.Fatalf("failed to write main: %v\n", err)
- 	}
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal")
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-tags=allowcryptofallback")
- 	cmd.Dir = tmpDir
- 	cmd.Env = append(os.Environ(), "GOARCH=riscv64", "GOOS=linux")
- 	out, err := cmd.CombinedOutput()
-diff --git a/src/cmd/link/internal/ld/stackcheck_test.go b/src/cmd/link/internal/ld/stackcheck_test.go
-index dd7e20528f0959..693d4ca473f95a 100644
---- a/src/cmd/link/internal/ld/stackcheck_test.go
-+++ b/src/cmd/link/internal/ld/stackcheck_test.go
-@@ -19,7 +19,7 @@ func TestStackCheckOutput(t *testing.T) {
- 	testenv.MustHaveGoBuild(t)
- 	t.Parallel()
- 
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-o", os.DevNull, "./testdata/stackcheck")
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-tags=allowcryptofallback", "-o", os.DevNull, "./testdata/stackcheck")
- 	// The rules for computing frame sizes on all of the
- 	// architectures are complicated, so just do this on amd64.
- 	cmd.Env = append(os.Environ(), "GOARCH=amd64", "GOOS=linux")
-diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 53c4ee77fed4b4..43effb152f63f5 100644
---- a/src/cmd/link/link_test.go
-+++ b/src/cmd/link/link_test.go
-@@ -167,7 +167,7 @@ TEXT ·x(SB),0,$0
-         MOVD ·zero(SB), AX
-         RET
- `)
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "build")
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-tags=allowcryptofallback")
- 	cmd.Dir = tmpdir
- 	cmd.Env = append(os.Environ(),
- 		"GOARCH=amd64", "GOOS=linux", "GOPATH="+filepath.Join(tmpdir, "_gopath"))
-@@ -370,7 +370,7 @@ func TestMachOBuildVersion(t *testing.T) {
- 	}
- 
- 	exe := filepath.Join(tmpdir, "main")
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-o", exe, src)
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "build", "-ldflags=-linkmode=internal", "-tags=allowcryptofallback", "-o", exe, src)
- 	cmd.Env = append(os.Environ(),
- 		"CGO_ENABLED=0",
- 		"GOOS=darwin",
-diff --git a/src/cmd/vet/vet_test.go b/src/cmd/vet/vet_test.go
-index 54eabca938c3a9..56546c413b330c 100644
---- a/src/cmd/vet/vet_test.go
-+++ b/src/cmd/vet/vet_test.go
-@@ -38,7 +38,7 @@ func vetPath(t testing.TB) string {
- }
- 
- func vetCmd(t *testing.T, arg, pkg string) *exec.Cmd {
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "vet", "-vettool="+vetPath(t), arg, path.Join("cmd/vet/testdata", pkg))
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "vet", "-tags=allowcryptofallback", "-vettool="+vetPath(t), arg, path.Join("cmd/vet/testdata", pkg))
- 	cmd.Env = os.Environ()
- 	return cmd
- }
 diff --git a/src/crypto/internal/backend/allocryptofallback_off.go b/src/crypto/internal/backend/allocryptofallback_off.go
 new file mode 100644
 index 00000000000000..7718cc02f48556
@@ -3264,16 +3117,3 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +func crypto_backend_runtime_arg0() string {
 +	return boring_runtime_arg0()
 +}
-diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index 69d49169446d1c..9c16f665d4a223 100644
---- a/src/syscall/exec_linux_test.go
-+++ b/src/syscall/exec_linux_test.go
-@@ -299,7 +299,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
- 		}
- 	})
- 
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-tags=allowcryptofallback", "-o", x, "syscall")
- 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
- 	if o, err := cmd.CombinedOutput(); err != nil {
- 		t.Fatalf("%v: %v\n%s", cmd, err, o)

From 7ed0b33b56f63e0e7e104756384d551dba780c42 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 19 Jun 2025 21:06:05 +0100
Subject: [PATCH 341/887] revert AllowCryptoFallback flag

---
 ...03-Implement-crypto-internal-backend.patch | 49 -------------------
 1 file changed, 49 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index e0b2126b42a..92c53acddcf 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2966,55 +2966,6 @@ index 05675718966f54..a676a8c831a84d 100644
  	< crypto/internal/fips140cache
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_off.go b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-new file mode 100644
-index 00000000000000..dfce36d834c46e
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_off.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.allowcryptofallback
-+// +build !goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = false
-+const AllowCryptoFallbackInt = 0
-diff --git a/src/internal/goexperiment/exp_allowcryptofallback_on.go b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-new file mode 100644
-index 00000000000000..8d0c3fde9ab5e8
---- /dev/null
-+++ b/src/internal/goexperiment/exp_allowcryptofallback_on.go
-@@ -0,0 +1,9 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.allowcryptofallback
-+// +build goexperiment.allowcryptofallback
-+
-+package goexperiment
-+
-+const AllowCryptoFallback = true
-+const AllowCryptoFallbackInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 6b4289503d57ae..12fba96b868c9e 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -78,6 +78,14 @@ type Flags struct {
- 	// being used to build the Go program.
- 	SystemCrypto bool
- 
-+	// AllowCryptoFallback allows the use of pure Go crypto if a crypto backend
-+	// experiment is enabled but the backend's requirements are not met. This is
-+	// used during the Go build itself to allow running the test suite with a
-+	// backend experiment enabled. Some parts of the Go build (bootstrapping)
-+	// and parts of the test suite run without cgo, so
-+	// GOEXPERIMENT=opensslcrypto,allowcryptofallback must be used to succeed.
-+	AllowCryptoFallback bool
-+
- 	// Regabi is split into several sub-experiments that can be
- 	// enabled individually. Not all combinations work.
- 	// The "regabi" GOEXPERIMENT is an alias for all "working"
 diff --git a/src/runtime/backenderr_gen_conflict_boring_cng.go b/src/runtime/backenderr_gen_conflict_boring_cng.go
 new file mode 100644
 index 00000000000000..361db2a962d60f

From 9b6221b50dee76114b6c581b266d27fbc0ed7c3e Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 20 Jun 2025 10:10:04 +0200
Subject: [PATCH 342/887] fix test

---
 .../0003-Implement-crypto-internal-backend.patch | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 6ed116d8173..153755974ed 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -49,7 +49,8 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../zbackenderrsystemcrypto_nobackend.go      |  16 +
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2703 insertions(+), 3 deletions(-)
+ src/syscall/exec_linux_test.go                |   2 +-
+ 46 files changed, 2704 insertions(+), 4 deletions(-)
  create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
  create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -3117,3 +3118,16 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +func crypto_backend_runtime_arg0() string {
 +	return boring_runtime_arg0()
 +}
+diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
+index 69d49169446d1c..9c16f665d4a223 100644
+--- a/src/syscall/exec_linux_test.go
++++ b/src/syscall/exec_linux_test.go
+@@ -299,7 +299,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
+ 		}
+ 	})
+ 
+-	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
++	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-tags=allowcryptofallback", "-o", x, "syscall")
+ 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
+ 	if o, err := cmd.CombinedOutput(); err != nil {
+ 		t.Fatalf("%v: %v\n%s", cmd, err, o)

From 61a1f688c521698d3f596c800f8bed355648303b Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 20 Jun 2025 12:17:04 +0200
Subject: [PATCH 343/887] fix tests

---
 .../0003-Implement-crypto-internal-backend.patch | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 153755974ed..b04f760ebec 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Implement crypto/internal/backend
 
 ---
  .gitignore                                    |   2 +
- src/cmd/dist/test.go                          |   6 +
+ src/cmd/dist/test.go                          |   7 +
  .../backend/allocryptofallback_off.go         |   9 +
  .../internal/backend/allocryptofallback_on.go |   9 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
@@ -50,7 +50,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2704 insertions(+), 4 deletions(-)
+ 46 files changed, 2705 insertions(+), 4 deletions(-)
  create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
  create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -107,7 +107,7 @@ index c6512e64a4ef39..b3b01db73b009d 100644
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d335e4cfbce468..786dcdf971dbb1 100644
+index d335e4cfbce468..7e362c80be609a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -847,6 +847,11 @@ func (t *tester) registerTests() {
@@ -122,7 +122,15 @@ index d335e4cfbce468..786dcdf971dbb1 100644
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -865,6 +870,7 @@ func (t *tester) registerTests() {
+@@ -855,6 +860,7 @@ func (t *tester) registerTests() {
+ 				ldflags:   "-linkmode=internal",
+ 				env:       []string{"CGO_ENABLED=0"},
+ 				pkg:       "reflect",
++				tags:      tags,
+ 			})
+ 		t.registerTest("internal linking, -buildmode=pie",
+ 			&goTest{
+@@ -865,6 +871,7 @@ func (t *tester) registerTests() {
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",

From 7703a2fdabcdcfe048ffa6ee31b875ed03b56f09 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 20 Jun 2025 09:54:25 -0700
Subject: [PATCH 344/887] For CodeQL, rebuild existing Go build: no bootstrap
 (#1705)

* For CodeQL, rebuild existing Go build: no bootstrap

* Simplify split between CodeQL and ordinary run-stage.yml

* Apply CodeQL Go wrapper, include all platforms
---
 eng/pipeline/stages/builders-to-stages.yml |   5 +-
 eng/pipeline/stages/run-codeql.yml         | 126 +++++++++++++++++++++
 2 files changed, 130 insertions(+), 1 deletion(-)
 create mode 100644 eng/pipeline/stages/run-codeql.yml

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 4d0905278c2..5bd1916e581 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -32,7 +32,10 @@ stages:
         - template: pool.yml
           parameters:
             inner:
-              template: run-stage.yml
+              ${{ if startsWith(builder.config, 'codeql') }}:
+                template: run-codeql.yml
+              ${{ else }}:
+                template: run-stage.yml
               parameters:
                 builder: ${{ builder }}
                 createSourceArchive: ${{ parameters.createSourceArchive }}
diff --git a/eng/pipeline/stages/run-codeql.yml b/eng/pipeline/stages/run-codeql.yml
new file mode 100644
index 00000000000..4a6addb8e8e
--- /dev/null
+++ b/eng/pipeline/stages/run-codeql.yml
@@ -0,0 +1,126 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This job runs a builder for any OS.
+
+parameters:
+  # { id, os, arch, hostArch, config, distro?, experiment?, fips?, broken? }
+  - name: builder
+    type: object
+
+  - name: createSourceArchive # Ignored
+    type: boolean
+    default: false
+
+  - name: createSymbols # Ignored
+    type: boolean
+    default: false
+
+  - name: releaseVersion # Ignored
+    type: string
+    default: 'nil'
+
+  - name: pool
+    type: object
+
+  - name: official # Ignored
+    type: boolean
+
+  - name: retryAttempts # Ignored
+    type: object
+    default: ["FINAL"]
+
+  - name: osArchList
+    type: object
+    default:
+      - { os: 'linux', arch: 'amd64' }
+      - { os: 'windows', arch: 'amd64' }
+      - { os: 'linux', arch: 'arm' }
+      - { os: 'linux', arch: 'arm64' }
+      - { os: 'darwin', arch: 'amd64' }
+      - { os: 'darwin', arch: 'arm64' }
+
+stages:
+  - stage: ${{ parameters.builder.id }}
+    # For display name, try for readability. Use some parameters set by
+    # shorthand-builders-to-builders.yml that let us add some formatting.
+    displayName: ${{ parameters.builder.os }}-${{ parameters.builder.arch }} ${{ parameters.builder.hostParens}} ${{ parameters.builder.config }} ${{ parameters.builder.distroParens}} ${{ parameters.builder.experimentBrackets }} ${{ parameters.builder.fipsAcronym }}
+    dependsOn: []
+    jobs:
+      - job: ${{ parameters.builder.id }}
+        displayName: ${{ parameters.builder.os }}-${{ parameters.builder.arch }} ${{ parameters.builder.hostParens}} ${{ parameters.builder.config }} ${{ parameters.builder.distroParens}} ${{ parameters.builder.experimentBrackets }} ${{ parameters.builder.fipsAcronym }}
+        workspace:
+          clean: all
+
+        # Validation for complex inputs.
+        ${{ if startsWith(parameters.builder.config, 'codeql') }}:
+          ${{ if not(or(eq(parameters.builder.config, 'codeql_inner'), eq(parameters.builder.config, 'codeql_outer'))) }}:
+            'The CodeQL configuration must include "_inner" or "_outer" suffix': error
+
+        # Allow CodeQL to take a while. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/configuring-codeql3000-ado-pipelines#other-issues
+        timeoutInMinutes: 420
+
+        pool: ${{ parameters.pool }}
+
+        variables:
+          - ${{ if eq(parameters.builder.config, 'codeql_inner') }}:
+            # Manually specify the repository being scanned by this job because
+            # CodeQL can't detect the inner repository (the submodule)
+            # automatically. See https://stackoverflow.microsoft.com/a/368419
+            - name: Codeql.ADO.Build.Repository.Provider
+              value: override
+            - name: Codeql.ADO.Build.Repository.Uri
+              value: https://dev.azure.com/dnceng/internal/_git/microsoft-go-mirror
+          - name: GoExecutable
+            value: '$(Pipeline.Workspace)/Binaries Signed/go/bin/go'
+
+        steps:
+          - template: ../steps/checkout-unix-task.yml
+
+          - template: ../steps/download-signed-binaries-task.yml
+            parameters:
+              runID: $(resources.pipeline.build.runID)
+
+          - bash: |
+              set -eux
+
+              for f in "$(Pipeline.Workspace)/Binaries Signed/"go*.linux-amd64.tar.gz; do
+                if [ "${found:-}" ]; then
+                  echo "Found multiple Go binaries in Binaries Signed: $found and $f"
+                  exit 1
+                fi
+                found=$f
+              done
+
+              tar -xf "$found" -C "$(Pipeline.Workspace)/Binaries Signed"
+              ls "$(Pipeline.Workspace)/Binaries Signed/go"
+            displayName: Extract Microsoft build of Go (linux-amd64)
+
+          - ${{ each c in parameters.osArchList }}:
+            - bash: |
+                set -eux
+                export GOOS=${{ c.os }}
+                export GOARCH=${{ c.arch }}
+
+                # Static binary workaround for CodeQL and Go 1.21 and higher
+                # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/troubleshooting/onboarding/language-compiled#go-121-and-higher-on-linux
+
+                WORKAROUND_DIR=$AGENT_TEMPDIRECTORY/codeql-go-tracing-${{ c.os }}-${{ c.arch }}
+                mkdir "${WORKAROUND_DIR}"
+                WHICH_GO="$(GoExecutable)"
+
+                cat > "${WORKAROUND_DIR}/go" <<EOF
+                #!/bin/bash
+                exec "$WHICH_GO" "\$@"
+                EOF
+
+                chmod 755 "${WORKAROUND_DIR}/go"
+                export PATH="${WORKAROUND_DIR}:${PATH}"
+
+                # Build Go itself.
+                go build std
+                go build cmd/...
+                # Build our infra tools.
+                ( cd eng/_util/ && go build ./... )
+              displayName: Build ${{ c.os }}-${{ c.arch }}

From 769aa9f56b16adfb826fc4a38342b5756c5089d7 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 26 Jun 2025 11:39:09 +0200
Subject: [PATCH 345/887] Remove `GOFIPS=0` support (#1708)

* remove gofips=0 support

* fix build
---
 eng/doc/fips/README.md                        |  6 +--
 ...03-Implement-crypto-internal-backend.patch | 37 ++++---------------
 2 files changed, 10 insertions(+), 33 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index d9615046990..544cba59b0b 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -81,7 +81,6 @@ Some configurations are invalid and intentionally result in a build error or run
 
 | Build-time config | Runtime config | Behavior |
 | --- | --- | --- |
-| `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | `GOFIPS=0` | The app panics due to the conflict between build-time and runtime configuration. |
 | `-tags=requirefips` | | The build fails. A crypto backend must be specified to enable FIPS features. |
 | `GOEXPERIMENT=cngcrypto,opensslcrypto` | | The build fails. Only one crypto backend can be enabled at a time. |
 | `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. <br/> Prior to Go 1.21 the build would succeed but use standard Go crypto, making the app non-compliant. |
@@ -222,7 +221,6 @@ To set FIPS mode preference on Linux, use one of the following options. The firs
 
 - Explicitly enable it by setting the environment variable `GODEBUG=fips140=on`.
 - Explicitly enable it by setting the environment variable `GOFIPS=1`.
-- Explicitly disable it by setting the environment variable `GOFIPS=0`.
 - Implicitly enable it by booting the Linux Kernel in FIPS mode.
   - The Linux Kernel's FIPS mode sets the content of `/proc/sys/crypto/fips_enabled` to `1`. The Go runtime reads this file.
 
@@ -306,8 +304,6 @@ Most programs aren't expected to use these options. Determining FIPS mode at run
 - The program's documentation can state it will always run in FIPS mode without any nuance about environment variables.
 - If the program is used by someone unfamiliar with the system they're configuring, the panic will help catch mistakes before they become a problem.
 
-We chose to make a FIPS-only Go program panic if `GOFIPS=0` rather than silently ignoring the setting. This helps avoid a surprise if a user of such program sets `GOFIPS=0` and expects it to turn off FIPS mode.
-
 ### Build option to use Go crypto if the backend compatibility check fails
 
 When building a Go program with a crypto backend, the build will check that the build environment and target are compatible with that backend. If not, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=opensslcrypto`. The OpenSSL backend requires cgo, so the build fails:
@@ -439,6 +435,8 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.25 (Aug 2025)
 
+- `GOFIPS=0` support has been removed. It now has no effect.
+
 - `GOEXPERIMENT=allowcryptofallback` has been downgraded to the `allowcryptofallback` build tag. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
 
 ### Go 1.24 (Feb 2025)
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index b04f760ebec..afe91fa6afe 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -23,7 +23,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/internal/backend/fips140/boring.go |  11 +
  src/crypto/internal/backend/fips140/cng.go    |  33 ++
  src/crypto/internal/backend/fips140/darwin.go |  11 +
- .../internal/backend/fips140/fips140.go       |  63 +++
+ .../internal/backend/fips140/fips140.go       |  47 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  11 +
@@ -33,7 +33,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  .../opensslsetup/opensslsetup_test.go         |  92 +++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 246 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 339 ++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 334 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/zbackenderrconflict_boring_cng.go  |  17 +
  .../zbackenderrconflict_boring_darwin.go      |  17 +
@@ -50,7 +50,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2705 insertions(+), 4 deletions(-)
+ 46 files changed, 2684 insertions(+), 4 deletions(-)
  create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
  create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
@@ -1764,10 +1764,10 @@ index 00000000000000..ef5af5d956163e
 +}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
-index 00000000000000..7e5dd9b1544940
+index 00000000000000..b11251ad4c6c9c
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,63 @@
+@@ -0,0 +1,47 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1789,13 +1789,6 @@ index 00000000000000..7e5dd9b1544940
 +
 +var enabled bool
 +
-+// Disabled reports whether FIPS 140 mode is disabled by using GOFIPS or GOLANG_FIPS.
-+func Disabled() bool {
-+	return disabled
-+}
-+
-+var disabled bool
-+
 +// Message is a human-readable message about how [Enabled] was set.
 +var Message string
 +
@@ -1815,17 +1808,8 @@ index 00000000000000..7e5dd9b1544940
 +		Message = "system FIPS mode"
 +		value = "1"
 +	}
-+	if value == "1" {
-+		enabled = true
-+	} else if value == "0" {
-+		disabled = true
-+	}
++	enabled = value == "1"
 +	if isRequireFIPS {
-+		if disabled {
-+			panic("the 'requirefips' build tag is enabled, but it conflicts " +
-+				"with the " + Message + "=" + value +
-+				" which would disable FIPS mode")
-+		}
 +		Message = "requirefips tag set"
 +		enabled = true
 +		return
@@ -2406,10 +2390,10 @@ index 00000000000000..dc8513b535f19b
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..ac656468e3ed32
+index 00000000000000..89a5fe5d170c41
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,339 @@
+@@ -0,0 +1,334 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2451,11 +2435,6 @@ index 00000000000000..ac656468e3ed32
 +			// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
 +			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
 +		}
-+	} else if fips140.Disabled() {
-+		// TODO: Remove this block when GOFIPS=0 is no longer supported.
-+		if openssl.FIPS() {
-+			panic("opensslcrypto: FIPS mode explicitly disabled (" + fips140.Message + ") but enabled in " + openssl.VersionText())
-+		}
 +	}
 +	sig.BoringCrypto()
 +}

From 79f219591277e7e62491cd994794b8b03278a726 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 27 Jun 2025 10:57:38 +0000
Subject: [PATCH 346/887] build(deps): bump github/codeql-action from 3.29.0 to
 3.29.1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.0 to 3.29.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ce28f5bb42b7a9f2c824e633a3f6ee835bab6858...39edc492dbe16b1465b0cafca41432d857bdb31a)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9f5fb24ca15..9d088f345b0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+        uses: github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+        uses: github/codeql-action/autobuild@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
+        uses: github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
         with:
           category: /language:go

From c89f4f4d67dedae57bdeccf43f3a4655c6874a2b Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 30 Jun 2025 10:39:10 +0200
Subject: [PATCH 347/887] Use `skipfipscheck` instead of `allowcryptofallback`
 (sometimes) (#1709)

* use skipfipscheck instead of allowcryptofallback

* fix tests

* fix tests

* fix devscript

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* code review comments

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  20 +-
 ...03-Implement-crypto-internal-backend.patch | 465 +++++++++++++-----
 2 files changed, 348 insertions(+), 137 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index da48fb74859..ce91482f1b0 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,7 +11,6 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/dist/build.go                         |  6 ++
  src/cmd/go/internal/modindex/build.go         | 58 ++++++++++++-
  src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
  src/go/build/build.go                         | 58 ++++++++++++-
@@ -29,7 +28,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 369 insertions(+), 4 deletions(-)
+ 17 files changed, 363 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -45,23 +44,6 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
-diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index b50f3342fe8714..75629c2a6bd9ba 100644
---- a/src/cmd/dist/build.go
-+++ b/src/cmd/dist/build.go
-@@ -1539,6 +1539,12 @@ func cmdbootstrap() {
- 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
- 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
- 	os.Setenv("GOEXPERIMENT", goexperiment)
-+	// Build the Go toolchain with "-tags=allowcryptofallback". This
-+	// allows toolchains not built with "GOEXPERIMENT=systemcrypto" to be used
-+	// when GODEBUG=fips140=on is set. For example, when running
-+	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
-+	// Shadow goexperiment so that the global variable is not modified.
-+	os.Setenv("GOFLAGS", "-tags=allowcryptofallback")
- 	// No need to enable PGO for toolchain2.
- 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
- 	if debug {
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
 index d7e09fed25f43a..10614d17e62453 100644
 --- a/src/cmd/go/internal/modindex/build.go
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index afe91fa6afe..7149568f5c9 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -3,37 +3,44 @@ From: qmuntal <qmuntaldiaz@microsoft.com>
 Date: Wed, 15 Jan 2025 16:32:26 +0100
 Subject: [PATCH] Implement crypto/internal/backend
 
+Implement the supporting code for using the crypto backends,
+but without using them yet.
+
+Update the Go toolchain build settings so that it uses the
+desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
- src/cmd/dist/test.go                          |   7 +
- .../backend/allocryptofallback_off.go         |   9 +
- .../internal/backend/allocryptofallback_on.go |   9 +
+ src/cmd/dist/build.go                         |   5 +
+ src/cmd/dist/test.go                          |  17 +-
+ src/cmd/go/systemcrypto_test.go               |  97 +++++
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 278 +++++++++++++
+ .../internal/backend/backendgen_test.go       | 288 ++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/boring_linux.go   | 287 ++++++++++++++
- src/crypto/internal/backend/cng_windows.go    | 344 ++++++++++++++++
- src/crypto/internal/backend/common.go         |  58 +++
- src/crypto/internal/backend/darwin_darwin.go  | 367 ++++++++++++++++++
- src/crypto/internal/backend/fips140/boring.go |  11 +
- src/crypto/internal/backend/fips140/cng.go    |  33 ++
- src/crypto/internal/backend/fips140/darwin.go |  11 +
- .../internal/backend/fips140/fips140.go       |  47 +++
+ src/crypto/internal/backend/boring_linux.go   | 294 ++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 345 ++++++++++++++++
+ src/crypto/internal/backend/common.go         |  46 +++
+ src/crypto/internal/backend/darwin_darwin.go  | 372 ++++++++++++++++++
+ src/crypto/internal/backend/fips140/boring.go |  13 +
+ src/crypto/internal/backend/fips140/cng.go    |  35 ++
+ src/crypto/internal/backend/fips140/darwin.go |  13 +
+ .../internal/backend/fips140/fips140.go       |  70 ++++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
- .../backend/fips140/nosystemcrypto.go         |  11 +
- .../internal/backend/fips140/openssl_cgo.go   |  57 +++
- .../internal/backend/fips140/openssl_nocgo.go |  15 +
+ .../backend/fips140/nosystemcrypto.go         |  13 +
+ .../internal/backend/fips140/openssl_cgo.go   |  59 +++
+ .../internal/backend/fips140/openssl_nocgo.go |  17 +
+ .../backend/fips140/skipfipscheck_off.go      |   9 +
+ .../backend/fips140/skipfipscheck_on.go       |   9 +
  .../internal/opensslsetup/opensslsetup.go     |  70 ++++
  .../opensslsetup/opensslsetup_test.go         |  92 +++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 246 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 334 ++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 253 ++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/zbackenderrconflict_boring_cng.go  |  17 +
  .../zbackenderrconflict_boring_darwin.go      |  17 +
@@ -46,13 +53,13 @@ Subject: [PATCH] Implement crypto/internal/backend
  src/crypto/zbackenderrnofallback_darwin.go    |  20 +
  src/crypto/zbackenderrnofallback_openssl.go   |  20 +
  .../zbackenderrrequirefips_nosystemcrypto.go  |  17 +
+ .../zbackenderrrequirefips_skipfipscheck.go   |  16 +
  .../zbackenderrsystemcrypto_nobackend.go      |  16 +
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2684 insertions(+), 4 deletions(-)
- create mode 100644 src/crypto/internal/backend/allocryptofallback_off.go
- create mode 100644 src/crypto/internal/backend/allocryptofallback_on.go
+ 49 files changed, 2859 insertions(+), 8 deletions(-)
+ create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
@@ -74,6 +81,8 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl_cgo.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl_nocgo.go
+ create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_off.go
+ create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_on.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/stub.go
@@ -91,6 +100,7 @@ Subject: [PATCH] Implement crypto/internal/backend
  create mode 100644 src/crypto/zbackenderrnofallback_darwin.go
  create mode 100644 src/crypto/zbackenderrnofallback_openssl.go
  create mode 100644 src/crypto/zbackenderrrequirefips_nosystemcrypto.go
+ create mode 100644 src/crypto/zbackenderrrequirefips_skipfipscheck.go
  create mode 100644 src/crypto/zbackenderrsystemcrypto_nobackend.go
 
 diff --git a/.gitignore b/.gitignore
@@ -106,23 +116,66 @@ index c6512e64a4ef39..b3b01db73b009d 100644
  # This file includes artifacts of Go build that should not be checked in.
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
+diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
+index b50f3342fe8714..3d3dde18a6562b 100644
+--- a/src/cmd/dist/build.go
++++ b/src/cmd/dist/build.go
+@@ -1539,6 +1539,11 @@ func cmdbootstrap() {
+ 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
+ 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
+ 	os.Setenv("GOEXPERIMENT", goexperiment)
++	// Build the Go toolchain with "-tags=allowcryptofallback,ms_skipfipscheck". This
++	// allows toolchains not built with the systemcrypto goexperiment to be used
++	// when GODEBUG=fips140=on is set. For example, when running
++	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
++	os.Setenv("GOFLAGS", "-tags=allowcryptofallback,ms_skipfipscheck")
+ 	// No need to enable PGO for toolchain2.
+ 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
+ 	if debug {
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d335e4cfbce468..7e362c80be609a 100644
+index d335e4cfbce468..5663aa3286a816 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -847,6 +847,11 @@ func (t *tester) registerTests() {
+@@ -156,10 +156,12 @@ func (t *tester) run() {
+ 		}
+ 	}
+ 
++	tags := []string{"-tags=allowcryptofallback,ms_skipfipscheck"}
++
+ 	if t.rebuild {
+ 		t.out("Building packages and commands.")
+ 		// Force rebuild the whole toolchain.
+-		goInstall(toolenv(), gorootBinGo, append([]string{"-a"}, toolchain...)...)
++		goInstall(toolenv(), gorootBinGo, append([]string{"-a"}, append(tags, toolchain...)...)...)
+ 	}
+ 
+ 	if !t.listMode {
+@@ -176,9 +178,9 @@ func (t *tester) run() {
+ 			// and virtualization we usually start with a clean GOCACHE, so we would
+ 			// end up rebuilding large parts of the standard library that aren't
+ 			// otherwise relevant to the actual set of packages under test.
+-			goInstall(toolenv(), gorootBinGo, toolchain...)
+-			goInstall(toolenv(), gorootBinGo, toolchain...)
+-			goInstall(toolenv(), gorootBinGo, "cmd")
++			goInstall(toolenv(), gorootBinGo, append(tags, toolchain...)...)
++			goInstall(toolenv(), gorootBinGo, append(tags, toolchain...)...)
++			goInstall(toolenv(), gorootBinGo, append(tags, "cmd")...)
+ 		}
+ 	}
+ 
+@@ -847,6 +849,11 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
 +		var tags []string
 +		if goos != "windows" {
 +			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
-+			tags = append(tags, "allowcryptofallback")
++			tags = append(tags, "allowcryptofallback,ms_skipfipscheck")
 +		}
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -855,6 +860,7 @@ func (t *tester) registerTests() {
+@@ -855,6 +862,7 @@ func (t *tester) registerTests() {
  				ldflags:   "-linkmode=internal",
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "reflect",
@@ -130,7 +183,7 @@ index d335e4cfbce468..7e362c80be609a 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -865,6 +871,7 @@ func (t *tester) registerTests() {
+@@ -865,6 +873,7 @@ func (t *tester) registerTests() {
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",
@@ -138,36 +191,109 @@ index d335e4cfbce468..7e362c80be609a 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-diff --git a/src/crypto/internal/backend/allocryptofallback_off.go b/src/crypto/internal/backend/allocryptofallback_off.go
+diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..7718cc02f48556
+index 00000000000000..9bc2e228fee3a6
 --- /dev/null
-+++ b/src/crypto/internal/backend/allocryptofallback_off.go
-@@ -0,0 +1,9 @@
++++ b/src/cmd/go/systemcrypto_test.go
+@@ -0,0 +1,97 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !allowcryptofallback
++package main_test
 +
-+package backend
++import (
++	"internal/goexperiment"
++	"internal/testenv"
++	"os"
++	"path/filepath"
++	"strings"
++	"testing"
++)
 +
-+const allowCryptoFallback = false
-diff --git a/src/crypto/internal/backend/allocryptofallback_on.go b/src/crypto/internal/backend/allocryptofallback_on.go
-new file mode 100644
-index 00000000000000..fc30aba8ad8228
---- /dev/null
-+++ b/src/crypto/internal/backend/allocryptofallback_on.go
-@@ -0,0 +1,9 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++const fileWithCrypto = `
++package main
 +
-+//go:build allowcryptofallback
++import (
++	"crypto/sha256"
++	"fmt"
++)
 +
-+package backend
++func main() {
++	fmt.Println(sha256.Sum256([]byte("Hello, World!")))
++}
++`
++
++const fileWithoutCrypto = `
++package main
++
++import (
++	"fmt"
++)
++
++func main() {
++	fmt.Println("Hello, World!")
++}
++`
++
++func execGoTool(t *testing.T, command string, env []string, args ...string) {
++	t.Helper()
++	cmdArgs := []string{command}
++	if command == "build" {
++		out := filepath.Join(t.TempDir(), "out")
++		cmdArgs = append(cmdArgs, "-o", out)
++	}
++	cmdArgs = append(cmdArgs, args...)
++	cmd := testenv.Command(t, testenv.GoToolPath(t), cmdArgs...)
++	cmd = testenv.CleanCmdEnv(cmd)
++	cmd.Env = append(cmd.Env, env...)
++	out, err := cmd.CombinedOutput()
++	if err != nil {
++		t.Fatalf("go build failed: %v\n%s", err, out)
++	}
++}
++
++// writeFile creates a temporary file with the given content and returns its path.
++func writeFile(t *testing.T, content string) string {
++	t.Helper()
++	name := "main.go"
++	if strings.Contains(content, "testing") {
++		name = "main_test.go"
++	}
++	name = filepath.Join(t.TempDir(), name)
++	if err := os.WriteFile(name, []byte(content), 0o644); err != nil {
++		t.Fatal(err)
++	}
++	return name
++}
++
++func TestSystemCryptoFIPS(t *testing.T) {
++	// Test different go commands with GODEBUG=fips140=on
++	// to exercise the ms_skipfipscheck build tag.
++	if goexperiment.BoringCrypto {
++		t.Skip("BoringCrypto doesn't support GODEBUG=fips140=on")
++	}
++	t.Parallel()
++	env := []string{"GODEBUG=fips140=on"}
++
++	cryptoFile := writeFile(t, fileWithCrypto)
++	nonCryptoFile := writeFile(t, fileWithoutCrypto)
++
++	// Build should always succeed given that the go toolchain
++	// is built with the ms_skipfipscheck build tag.
++	execGoTool(t, "build", env, cryptoFile)
++	execGoTool(t, "build", env, nonCryptoFile)
 +
-+const allowCryptoFallback = true
++	// Run should always succeed if the target go package
++	// doesn't use crypto.
++	execGoTool(t, "run", env, nonCryptoFile)
++
++	// Run may or may not fail if the target go package uses crypto,
++	// because while the toolchain was built with ms_skipfipscheck, the
++	// target program was not. Failure depends on system crypto mode
++	// and presence of system-provided crypto, and it can't be tested here.
++}
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
 index 00000000000000..c2c06d3bff8c74
@@ -232,10 +358,10 @@ index 00000000000000..acf0113bbefb6c
 +//go:generate go test -run TestGenerated -fix
 diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
 new file mode 100644
-index 00000000000000..063e0bb4948236
+index 00000000000000..647d9f0b871aff
 --- /dev/null
 +++ b/src/crypto/internal/backend/backendgen_test.go
-@@ -0,0 +1,278 @@
+@@ -0,0 +1,288 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -370,6 +496,8 @@ index 00000000000000..063e0bb4948236
 +	delete(existingFiles, f)
 +	f = testRequireFIPSWithoutBackend(t)
 +	delete(existingFiles, f)
++	f = testRequireFIPSWithSkipFIPSCheck(t)
++	delete(existingFiles, f)
 +
 +	for f := range existingFiles {
 +		if *fix {
@@ -440,6 +568,14 @@ index 00000000000000..063e0bb4948236
 +		"A crypto backend is required to enable FIPS mode.")
 +}
 +
++func testRequireFIPSWithSkipFIPSCheck(t *testing.T) string {
++	return testErrorFile(
++		t,
++		filepath.Join(cryptoPackageDir, backendErrPrefix+"requirefips_skipfipscheck.go"),
++		"//go:build requirefips && ms_skipfipscheck",
++		"The requirefips tag is enabled but conflicts with the ms_skipfipscheck tag.")
++}
++
 +// testErrorFile checks/generates a Go file with a given build constraint that
 +// fails to compile. The file uses an unused string to convey an error message
 +// to the dev on the "go build" command line.
@@ -611,10 +747,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
 new file mode 100644
-index 00000000000000..48d44ec1723ab6
+index 00000000000000..1d6ec4eef5a5b4
 --- /dev/null
 +++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,287 @@
+@@ -0,0 +1,294 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -629,10 +765,17 @@ index 00000000000000..48d44ec1723ab6
 +import (
 +	"crypto"
 +	"crypto/cipher"
++	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring"
 +	"hash"
 +)
 +
++func init() {
++	if err := fips140.Check(func() bool { return true }); err != nil {
++		panic(err)
++	}
++}
++
 +const Enabled = true
 +
 +type BigInt = boring.BigInt
@@ -904,10 +1047,10 @@ index 00000000000000..48d44ec1723ab6
 +}
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..7a89cfb5d2f596
+index 00000000000000..448311cbfd3f10
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,344 @@
+@@ -0,0 +1,345 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -930,24 +1073,25 @@ index 00000000000000..7a89cfb5d2f596
 +	"github.com/microsoft/go-crypto-winnative/cng"
 +)
 +
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = cng.BigInt
-+
 +func init() {
-+	if fips140.Enabled() {
++	fn := func() bool {
 +		enabled, err := cng.FIPS()
 +		if err != nil {
 +			panic("cngcrypto: unknown FIPS mode: " + err.Error())
 +		}
-+		if !enabled {
-+			panic("cngcrypto: not in FIPS mode")
-+		}
++		return enabled
++	}
++	if err := fips140.Check(fn); err != nil {
++		panic("cngcrypto: " + err.Error())
 +	}
 +	sig.BoringCrypto()
 +}
 +
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = cng.BigInt
++
 +const RandReader = cng.RandReader
 +
 +func SupportsHash(h crypto.Hash) bool {
@@ -1254,10 +1398,10 @@ index 00000000000000..7a89cfb5d2f596
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
-index 00000000000000..9dec441fa63856
+index 00000000000000..a9682181ffa154
 --- /dev/null
 +++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,46 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1265,22 +1409,10 @@ index 00000000000000..9dec441fa63856
 +package backend
 +
 +import (
-+	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"runtime"
 +)
 +
-+func init() {
-+	if !allowCryptoFallback && fips140.Enabled() {
-+		if !Enabled {
-+			if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
-+				panic("FIPS mode requested (" + fips140.Message + ") but no crypto backend is supported on " + runtime.GOOS)
-+			}
-+			panic("FIPS mode requested (" + fips140.Message + ") but no supported crypto backend is enabled")
-+		}
-+	}
-+}
-+
 +// Unreachable marks code that should be unreachable
 +// when backend is in use.
 +func Unreachable() {
@@ -1318,10 +1450,10 @@ index 00000000000000..9dec441fa63856
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..0c374baf8d3f80
+index 00000000000000..fea0f284de2439
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,367 @@
+@@ -0,0 +1,372 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1336,6 +1468,7 @@ index 00000000000000..0c374baf8d3f80
 +import (
 +	"crypto"
 +	"crypto/cipher"
++	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140/nistec"
 +	"errors"
@@ -1345,15 +1478,19 @@ index 00000000000000..0c374baf8d3f80
 +	"github.com/microsoft/go-crypto-darwin/xcrypto"
 +)
 +
++func init() {
++	// Darwin is considered FIPS compliant.
++	if err := fips140.Check(func() bool { return true }); err != nil {
++		panic("darwincrypto: " + err.Error())
++	}
++	sig.BoringCrypto()
++}
++
 +// Enabled controls whether FIPS crypto is enabled.
 +const Enabled = true
 +
 +type BigInt = xcrypto.BigInt
 +
-+func init() {
-+	sig.BoringCrypto()
-+}
-+
 +const RandReader = xcrypto.RandReader
 +
 +func SupportsHash(h crypto.Hash) bool {
@@ -1691,10 +1828,10 @@ index 00000000000000..0c374baf8d3f80
 +}
 diff --git a/src/crypto/internal/backend/fips140/boring.go b/src/crypto/internal/backend/fips140/boring.go
 new file mode 100644
-index 00000000000000..3b583dc0eb0235
+index 00000000000000..4a955f7d781022
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/boring.go
-@@ -0,0 +1,11 @@
+@@ -0,0 +1,13 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1703,15 +1840,17 @@ index 00000000000000..3b583dc0eb0235
 +
 +package fips140
 +
++const backendEnabled = true
++
 +func systemFIPSMode() bool {
 +	return false
 +}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
-index 00000000000000..f769d15f94ab05
+index 00000000000000..e4a1ddeeb7dc09
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/cng.go
-@@ -0,0 +1,33 @@
+@@ -0,0 +1,35 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1726,6 +1865,8 @@ index 00000000000000..f769d15f94ab05
 +	"unsafe"
 +)
 +
++const backendEnabled = true
++
 +// Don't use github.com/microsoft/go-crypto-winnative here.
 +// The fips140 package should have minimal dependencies.
 +// Also, don't directly query the system FIPS mode from the registry,
@@ -1747,10 +1888,10 @@ index 00000000000000..f769d15f94ab05
 +}
 diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
 new file mode 100644
-index 00000000000000..ef5af5d956163e
+index 00000000000000..8a2efe2346e84c
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/darwin.go
-@@ -0,0 +1,11 @@
+@@ -0,0 +1,13 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1759,15 +1900,17 @@ index 00000000000000..ef5af5d956163e
 +
 +package fips140
 +
++const backendEnabled = true
++
 +func systemFIPSMode() bool {
 +	return false
 +}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
-index 00000000000000..b11251ad4c6c9c
+index 00000000000000..1bf7c3b7d63da8
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,47 @@
+@@ -0,0 +1,70 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1775,7 +1918,9 @@ index 00000000000000..b11251ad4c6c9c
 +package fips140
 +
 +import (
++	"errors"
 +	"internal/godebug"
++	"runtime"
 +	"syscall"
 +)
 +
@@ -1789,8 +1934,8 @@ index 00000000000000..b11251ad4c6c9c
 +
 +var enabled bool
 +
-+// Message is a human-readable message about how [Enabled] was set.
-+var Message string
++// message is a human-readable message about how [Enabled] was set.
++var message string
 +
 +func init() {
 +	// TODO: Decide which environment variable to use.
@@ -1798,23 +1943,44 @@ index 00000000000000..b11251ad4c6c9c
 +	var ok bool
 +	value := fips140GODEBUG.Value()
 +	if value == "on" || value == "only" || value == "debug" {
-+		Message = "environment variable GODEBUG=fips140=" + value
++		message = "environment variable GODEBUG=fips140=" + value
 +		value = "1"
 +	} else if value, ok = syscall.Getenv("GOFIPS"); ok {
-+		Message = "environment variable GOFIPS"
++		message = "environment variable GOFIPS"
 +	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
-+		Message = "environment variable GOLANG_FIPS"
++		message = "environment variable GOLANG_FIPS"
 +	} else if systemFIPSMode() {
-+		Message = "system FIPS mode"
++		message = "system FIPS mode"
 +		value = "1"
 +	}
 +	enabled = value == "1"
 +	if isRequireFIPS {
-+		Message = "requirefips tag set"
++		if isSkipFIPSCheck {
++			panic("the 'requirefips' build tag is enabled, but it conflicts " +
++				"with the 'ms_skipfipscheck' build tag")
++		}
++		message = "requirefips tag set"
 +		enabled = true
-+		return
 +	}
 +}
++
++// Check checks whether fips mode, as returned by fips(),
++// is valid given the current settings.
++func Check(fips func() bool) error {
++	if isSkipFIPSCheck || !enabled {
++		return nil
++	}
++	if !backendEnabled {
++		if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
++			return errors.New("FIPS mode requested (" + message + ") but no crypto backend is supported on " + runtime.GOOS)
++		}
++		return errors.New("FIPS mode requested (" + message + ") but no supported crypto backend is enabled")
++	}
++	if !fips() {
++		return errors.New("FIPS mode requested (" + message + ") but not available")
++	}
++	return nil
++}
 diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
 new file mode 100644
 index 00000000000000..b33d08c84e2dae
@@ -1849,10 +2015,10 @@ index 00000000000000..6f01b9a3524dee
 \ No newline at end of file
 diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
 new file mode 100644
-index 00000000000000..83691d7dd42d51
+index 00000000000000..289d6594eac54b
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
-@@ -0,0 +1,11 @@
+@@ -0,0 +1,13 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1861,15 +2027,17 @@ index 00000000000000..83691d7dd42d51
 +
 +package fips140
 +
++const backendEnabled = false
++
 +func systemFIPSMode() bool {
 +	return false
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl_cgo.go b/src/crypto/internal/backend/fips140/openssl_cgo.go
 new file mode 100644
-index 00000000000000..d9ea4e513db72d
+index 00000000000000..a24db78572f528
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl_cgo.go
-@@ -0,0 +1,57 @@
+@@ -0,0 +1,59 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1885,6 +2053,8 @@ index 00000000000000..d9ea4e513db72d
 +	"github.com/golang-fips/openssl/v2"
 +)
 +
++const backendEnabled = true
++
 +// systemFIPSMode reports whether the system is in FIPS mode.
 +// It first checks the kernel, and if that is not available, it checks the
 +// OpenSSL library.
@@ -1929,10 +2099,10 @@ index 00000000000000..d9ea4e513db72d
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl_nocgo.go b/src/crypto/internal/backend/fips140/openssl_nocgo.go
 new file mode 100644
-index 00000000000000..60ed26591d05d8
+index 00000000000000..a8ff666b6d182e
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl_nocgo.go
-@@ -0,0 +1,15 @@
+@@ -0,0 +1,17 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1945,9 +2115,41 @@ index 00000000000000..60ed26591d05d8
 +
 +package fips140
 +
++const backendEnabled = true
++
 +func systemFIPSMode() bool {
 +	return false
 +}
+diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_off.go b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
+new file mode 100644
+index 00000000000000..f60b10dfa3aaf3
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !ms_skipfipscheck
++
++package fips140
++
++const isSkipFIPSCheck = false
+diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_on.go b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
+new file mode 100644
+index 00000000000000..d3d39fd77f98db
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build ms_skipfipscheck
++
++package fips140
++
++const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
 index 00000000000000..c6c1f53e7452ab
@@ -2138,10 +2340,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..dc8513b535f19b
+index 00000000000000..6eea4e1c93b314
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,246 @@
+@@ -0,0 +1,253 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2155,9 +2357,16 @@ index 00000000000000..dc8513b535f19b
 +import (
 +	"crypto"
 +	"crypto/cipher"
++	"crypto/internal/backend/fips140"
 +	"hash"
 +)
 +
++func init() {
++	if err := fips140.Check(func() bool { return false }); err != nil {
++		panic(err)
++	}
++}
++
 +const Enabled = false
 +
 +type BigInt = []uint
@@ -2390,10 +2599,10 @@ index 00000000000000..dc8513b535f19b
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..89a5fe5d170c41
+index 00000000000000..02c3c67f822ae2
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,334 @@
+@@ -0,0 +1,332 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2422,19 +2631,17 @@ index 00000000000000..89a5fe5d170c41
 +type BigInt = openssl.BigInt
 +
 +func init() {
-+	if fips140.Enabled() {
-+		// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
-+		// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
-+		// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
-+		// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
-+		// openssl.FIPSCapable to determine whether FIPS mode is enabled.
-+		if !openssl.FIPSCapable() {
-+			// This path can be reached for the following reasons:
-+			// - In OpenSSL 1, the active engine doesn't support FIPS mode.
-+			// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
-+			// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
-+			panic("opensslcrypto: FIPS mode requested (" + fips140.Message + ") but not available in " + openssl.VersionText())
-+		}
++	// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
++	// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
++	// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
++	// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
++	// openssl.FIPSCapable to determine whether FIPS mode is enabled.
++	if err := fips140.Check(func() bool { return openssl.FIPSCapable() }); err != nil {
++		// This path can be reached for the following reasons:
++		// - In OpenSSL 1, the active engine doesn't support FIPS mode.
++		// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
++		// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
++		panic("opensslcrypto: " + err.Error() + ": " + openssl.VersionText())
 +	}
 +	sig.BoringCrypto()
 +}
@@ -3009,6 +3216,28 @@ index 00000000000000..91bede3aa030a5
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
+diff --git a/src/crypto/zbackenderrrequirefips_skipfipscheck.go b/src/crypto/zbackenderrrequirefips_skipfipscheck.go
+new file mode 100644
+index 00000000000000..8ba88a888eb8c0
+--- /dev/null
++++ b/src/crypto/zbackenderrrequirefips_skipfipscheck.go
+@@ -0,0 +1,16 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
++
++//go:build requirefips && ms_skipfipscheck
++
++package crypto
++
++func init() {
++	`
++	The requirefips tag is enabled but conflicts with the ms_skipfipscheck tag.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/crypto/zbackenderrsystemcrypto_nobackend.go b/src/crypto/zbackenderrsystemcrypto_nobackend.go
 new file mode 100644
 index 00000000000000..919c4d8ffa3740

From bee5a27089e5f64a80a6289837edbbfd2752e2d5 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 30 Jun 2025 13:16:42 +0100
Subject: [PATCH 348/887] fix ci errors

---
 .../0001-Vendor-external-dependencies.patch   | 49 ++++++++++++++-----
 patches/0004-Use-crypto-backends.patch        | 43 +++++++++-------
 2 files changed, 61 insertions(+), 31 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index b7cab665c15..62915180666 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -121,7 +121,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
- .../microsoft/go-crypto-winnative/cng/hmac.go |   35 +
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   60 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
@@ -135,7 +135,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 127 files changed, 19140 insertions(+), 7 deletions(-)
+ 127 files changed, 19165 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -1830,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..df286892b11fba 100644
+index b81f19068aef23..29ee969cf70680 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1841,10 +1841,10 @@ index b81f19068aef23..df286892b11fba 100644
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..5c756b00335489 100644
+index 410eb8648a710a..154d4177f0e138 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1852,8 +1852,8 @@ index 410eb8648a710a..5c756b00335489 100644
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba h1:sz9TMONxImn6w1ryWkahKg1k9v+063oM9xWVnQSLWdE=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942 h1:F8E3HYNP5BBk77l1RbQcTUORGl8raCpMGvXYjnhnsC4=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a h1:O3O6LIZWKqNod6d3OCAwfl3qtiRYSnBf6z5tZ24l2m8=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
@@ -19064,10 +19064,10 @@ index 00000000000000..2647c6bc06cd57
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
-index 00000000000000..2d9fd36ce7252e
+index 00000000000000..0c4ec93968daad
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
-@@ -0,0 +1,35 @@
+@@ -0,0 +1,60 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19101,7 +19101,32 @@ index 00000000000000..2d9fd36ce7252e
 +		ch.Write(key)
 +		key = ch.Sum(nil)
 +	}
-+	return newHashX(id, bcrypt.ALG_HANDLE_HMAC_FLAG, key)
++
++	return hmacWrapper{hashX: newHashX(id, bcrypt.ALG_HANDLE_HMAC_FLAG, key)}
++}
++
++type hmacWrapper struct {
++	hashX *hashX
++}
++
++func (h hmacWrapper) Write(p []byte) (n int, err error) {
++	return h.hashX.Write(p)
++}
++
++func (h hmacWrapper) Sum(b []byte) []byte {
++	return h.hashX.Sum(b)
++}
++
++func (h hmacWrapper) Reset() {
++	h.hashX.Reset()
++}
++
++func (h hmacWrapper) Size() int {
++	return h.hashX.Size()
++}
++
++func (h hmacWrapper) BlockSize() int {
++	return h.hashX.BlockSize()
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
 new file mode 100644
@@ -21267,7 +21292,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..974352d2bde9d7 100644
+index 8507f01b12f518..d9fce2083730f5 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21281,7 +21306,7 @@ index 8507f01b12f518..974352d2bde9d7 100644
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250619133927-7462545b7942
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5b824ab02d2..e9bec4050d1 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -75,7 +75,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/handshake_client.go            |  12 +-
  src/crypto/tls/handshake_client_tls13.go      |   2 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  13 +-
+ src/crypto/tls/handshake_server_tls13.go      |  18 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
@@ -88,7 +88,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1111 insertions(+), 89 deletions(-)
+ 84 files changed, 1153 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -114,7 +114,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 82c6ee4631ee87..cdf02ca115ce3f 100644
+index dd7f5970a6e673..8312607e8c475f 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -710,7 +710,7 @@ func (t *tester) registerTests() {
@@ -126,7 +126,7 @@ index 82c6ee4631ee87..cdf02ca115ce3f 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1166,6 +1166,11 @@ func (t *tester) internalLink() bool {
+@@ -1173,6 +1173,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -138,7 +138,7 @@ index 82c6ee4631ee87..cdf02ca115ce3f 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1329,12 +1334,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1336,12 +1341,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -2342,7 +2342,7 @@ index 00176795eba6b7..c6352af84f1f1d 100644
  package tls
  
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 46d3076864fc5a..b6fe54406f8e85 100644
+index d3fa61dc97d398..711ce750a71a93 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -7,7 +7,7 @@ package tls
@@ -2381,7 +2381,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 2d3a2ef25b8c8d..1d44bd2b1f1f03 100644
+index 90c5bdacd82318..c4ca03ddfb4de0 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2397,7 +2397,7 @@ index 2d3a2ef25b8c8d..1d44bd2b1f1f03 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -548,7 +548,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -542,7 +542,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2415,7 +2415,7 @@ index 2d3a2ef25b8c8d..1d44bd2b1f1f03 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index bf3cab97b8a7c5..49cae0b257dd94 100644
+index 4f4966904f59f4..b2d3949e2ede38 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -2430,10 +2430,10 @@ index bf3cab97b8a7c5..49cae0b257dd94 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 6848407e74b70c..b0cc9876c877bc 100644
+index 8240e6afae3c6b..5dd00e27037a0f 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
-@@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+@@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
  	return hs.handshake()
  }
  
@@ -2451,7 +2451,7 @@ index 6848407e74b70c..b0cc9876c877bc 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 090ff67fb75a62..cbd563cd10f60e 100644
+index dbd6ff2c4f4d94..ef11e56aaec4b9 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (
@@ -2468,15 +2468,20 @@ index 090ff67fb75a62..cbd563cd10f60e 100644
  	"errors"
  	"fmt"
  	"hash"
-@@ -472,15 +473,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
+@@ -472,15 +473,24 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
  // interfaces implemented by standard library hashes to clone the state of in
  // to a new instance of h. It returns nil if the operation fails.
  func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
 +	if boring.Enabled {
 +		// CNG and OpenSSL with SymCrypt hash functions do not implement the
 +		// encoding.BinaryMarshaler interface, but they do implement the Clone method.
-+		if cloner, ok := in.(interface{ Clone() hash.Hash }); ok {
-+			return cloner.Clone()
++		if cloner, ok := in.(hash.Cloner); ok {
++			clone, err := cloner.Clone()
++			if err != nil {
++				// If Clone fails, we can't clone the hash.
++				return nil
++			}
++			return clone
 +		}
 +	}
  	// Recreate the interface to avoid importing encoding.
@@ -2799,10 +2804,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index a676a8c831a84d..9fd56ccae8727e 100644
+index c5a42266a9f736..3ec19155c70c31 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -519,7 +519,7 @@ var depsRules = `
+@@ -517,7 +517,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2811,7 +2816,7 @@ index a676a8c831a84d..9fd56ccae8727e 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -544,6 +544,8 @@ var depsRules = `
+@@ -542,6 +542,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2820,7 +2825,7 @@ index a676a8c831a84d..9fd56ccae8727e 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -587,6 +589,7 @@ var depsRules = `
+@@ -585,6 +587,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From f5792cbc291e3986a481b7c70eebe7c2dc161ad9 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 30 Jun 2025 22:08:54 +0200
Subject: [PATCH 349/887] Add `microsoft_systemcrypto` setting (#1712)

* add microsoft_systemcrypto setting

* fix tests
---
 eng/doc/fips/README.md                        | 15 ++-
 ...03-Implement-crypto-internal-backend.patch | 99 ++++++++++++++++---
 2 files changed, 95 insertions(+), 19 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 544cba59b0b..fc1063442b6 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -306,7 +306,7 @@ Most programs aren't expected to use these options. Determining FIPS mode at run
 
 ### Build option to use Go crypto if the backend compatibility check fails
 
-When building a Go program with a crypto backend, the build will check that the build environment and target are compatible with that backend. If not, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=opensslcrypto`. The OpenSSL backend requires cgo, so the build fails:
+When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=opensslcrypto`. The OpenSSL backend requires cgo, so the build fails:
 
 ```
 # runtime
@@ -317,11 +317,12 @@ When building a Go program with a crypto backend, the build will check that the
         Please check your build environment and build command for a reason one or more of these tags weren't specified.
 ```
 
-We recommend one of these fixes:
+We recommend fixing the build environment to allow the crypto backend to be used. (Enable cgo.)
 
-- Fix the build environment to allow the crypto backend to be used. (Enable cgo.)
-- Remove `GOEXPERIMENT` entirely. This intentionally doesn't comply with the internal Microsoft crypto policy or FIPS, so for builds within Microsoft, this should only be done under a documented exception.
+These are other fixes that may be used on a case-by-case basis:
 
+- Remove `GOEXPERIMENT` entirely. This intentionally doesn't comply with the internal Microsoft crypto policy or FIPS, so for builds within Microsoft, this should only be done under a documented exception.
+- Refactor the code to not use a `crypto` package. For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
 
 > [!IMPORTANT]
 > Individual crypto calls may fall back to standard Go crypto at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information.
@@ -435,6 +436,12 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.25 (Aug 2025)
 
+- Running `go version -m` on a binary which uses a system crypto backend now shows the `microsoft_systemcrypto=1` build setting.
+
+ - The build-time backend compatibility check now only runs when a crypto package is required for the build.
+   - If your app doesn't depend on a crypto package, you may, for example, use `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`.
+   - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
+
 - `GOFIPS=0` support has been removed. It now has no effect.
 
 - `GOEXPERIMENT=allowcryptofallback` has been downgraded to the `allowcryptofallback` build tag. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 7149568f5c9..0de809d0341 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -12,7 +12,8 @@ desired goexperiments and build tags.
  .gitignore                                    |   2 +
  src/cmd/dist/build.go                         |   5 +
  src/cmd/dist/test.go                          |  17 +-
- src/cmd/go/systemcrypto_test.go               |  97 +++++
+ src/cmd/go/internal/load/pkg.go               |   6 +
+ src/cmd/go/systemcrypto_test.go               | 148 +++++++
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
  .../internal/backend/backendgen_test.go       | 288 ++++++++++++++
@@ -58,7 +59,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  27 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 49 files changed, 2859 insertions(+), 8 deletions(-)
+ 50 files changed, 2916 insertions(+), 8 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
@@ -191,12 +192,29 @@ index d335e4cfbce468..5663aa3286a816 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
+diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
+index e913f9885234fd..123a77518106c5 100644
+--- a/src/cmd/go/internal/load/pkg.go
++++ b/src/cmd/go/internal/load/pkg.go
+@@ -2412,6 +2412,12 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
+ 			buildmode = "archive"
+ 		}
+ 	}
++	if cfg.Experiment.SystemCrypto ||
++		cfg.Experiment.OpenSSLCrypto ||
++		cfg.Experiment.CNGCrypto ||
++		cfg.Experiment.DarwinCrypto {
++		appendSetting("microsoft_systemcrypto", "1")
++	}
+ 	appendSetting("-buildmode", buildmode)
+ 	appendSetting("-compiler", cfg.BuildContext.Compiler)
+ 	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..9bc2e228fee3a6
+index 00000000000000..385226588b5dcc
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,97 @@
+@@ -0,0 +1,148 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -208,6 +226,7 @@ index 00000000000000..9bc2e228fee3a6
 +	"internal/testenv"
 +	"os"
 +	"path/filepath"
++	"runtime"
 +	"strings"
 +	"testing"
 +)
@@ -237,21 +256,20 @@ index 00000000000000..9bc2e228fee3a6
 +}
 +`
 +
-+func execGoTool(t *testing.T, command string, env []string, args ...string) {
++func execGoTool(t *testing.T, allowFail bool, env []string, args ...string) (bool, string) {
 +	t.Helper()
-+	cmdArgs := []string{command}
-+	if command == "build" {
-+		out := filepath.Join(t.TempDir(), "out")
-+		cmdArgs = append(cmdArgs, "-o", out)
-+	}
-+	cmdArgs = append(cmdArgs, args...)
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), cmdArgs...)
++	cmd := testenv.Command(t, testenv.GoToolPath(t), args...)
 +	cmd = testenv.CleanCmdEnv(cmd)
 +	cmd.Env = append(cmd.Env, env...)
 +	out, err := cmd.CombinedOutput()
++	sout := strings.TrimSpace(string(out))
 +	if err != nil {
++		if allowFail {
++			return false, sout
++		}
 +		t.Fatalf("go build failed: %v\n%s", err, out)
 +	}
++	return true, sout
 +}
 +
 +// writeFile creates a temporary file with the given content and returns its path.
@@ -268,6 +286,11 @@ index 00000000000000..9bc2e228fee3a6
 +	return name
 +}
 +
++func outPath(t *testing.T) string {
++	t.Helper()
++	return filepath.Join(t.TempDir(), "out")
++}
++
 +func TestSystemCryptoFIPS(t *testing.T) {
 +	// Test different go commands with GODEBUG=fips140=on
 +	// to exercise the ms_skipfipscheck build tag.
@@ -282,18 +305,64 @@ index 00000000000000..9bc2e228fee3a6
 +
 +	// Build should always succeed given that the go toolchain
 +	// is built with the ms_skipfipscheck build tag.
-+	execGoTool(t, "build", env, cryptoFile)
-+	execGoTool(t, "build", env, nonCryptoFile)
++	execGoTool(t, false, env, "build", "-o", outPath(t), cryptoFile)
++	execGoTool(t, false, env, "build", "-o", outPath(t), nonCryptoFile)
 +
 +	// Run should always succeed if the target go package
 +	// doesn't use crypto.
-+	execGoTool(t, "run", env, nonCryptoFile)
++	execGoTool(t, false, env, "run", nonCryptoFile)
 +
 +	// Run may or may not fail if the target go package uses crypto,
 +	// because while the toolchain was built with ms_skipfipscheck, the
 +	// target program was not. Failure depends on system crypto mode
 +	// and presence of system-provided crypto, and it can't be tested here.
 +}
++
++func TestSystemCryptoSetting(t *testing.T) {
++	t.Parallel()
++	file := writeFile(t, fileWithCrypto)
++
++	type testCase struct {
++		enabled bool
++		exp     string
++	}
++	tests := []testCase{
++		{false, "nosystemcrypto"},
++		{true, "systemcrypto"},
++	}
++	switch runtime.GOOS {
++	case "linux":
++		tests = append(tests, testCase{true, "opensslcrypto"})
++	case "windows":
++		switch runtime.GOARCH {
++		case "amd64", "arm64":
++			tests = append(tests, testCase{true, "cngcrypto"})
++		}
++	case "darwin":
++		tests = append(tests, testCase{true, "darwincrypto"})
++	}
++	for _, tt := range tests {
++		t.Run(tt.exp, func(t *testing.T) {
++			t.Parallel()
++			out := outPath(t)
++
++			// Build the binary with the specified GOEXPERIMENT.
++			fail, _ := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
++			if fail && tt.enabled {
++				t.Skip("skipping test because GOEXPERIMENT not supported by the current toolchain")
++			}
++
++			// Check that the binary has the correct settings.
++			_, settings := execGoTool(t, false, nil, "version", "-m", out)
++			hashSetting := strings.Contains(settings, "microsoft_systemcrypto=1")
++			if tt.enabled && !hashSetting {
++				t.Errorf("expected microsoft_systemcrypto=1 in settings, got %v", settings)
++			} else if !tt.enabled && hashSetting {
++				t.Errorf("expected microsoft_systemcrypto=1 not to be in settings, got %v", settings)
++			}
++		})
++	}
++}
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
 index 00000000000000..c2c06d3bff8c74

From 037e29d925b3e85534eeb98a5c243deb80a1fe23 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Tue, 1 Jul 2025 16:04:45 +0100
Subject: [PATCH 350/887] fix:skip ed25519 test

---
 patches/0004-Use-crypto-backends.patch | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index e9bec4050d1..cec97735e48 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -66,6 +66,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha256/sha256_test.go              |  20 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  24 ++-
+ src/crypto/tls/auth_test.go                   |   2 +
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/defaults_boring.go             |   2 +-
  src/crypto/tls/defaults_fips140.go            |   2 +-
@@ -88,7 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 84 files changed, 1153 insertions(+), 94 deletions(-)
+ 85 files changed, 1155 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -114,10 +115,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index dd7f5970a6e673..8312607e8c475f 100644
+index a45b47b549d775..b992ef3db64406 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -710,7 +710,7 @@ func (t *tester) registerTests() {
+@@ -712,7 +712,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -126,7 +127,7 @@ index dd7f5970a6e673..8312607e8c475f 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1173,6 +1173,11 @@ func (t *tester) internalLink() bool {
+@@ -1175,6 +1175,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -138,7 +139,7 @@ index dd7f5970a6e673..8312607e8c475f 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1336,12 +1341,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1338,12 +1343,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -2302,6 +2303,19 @@ index 080bf694f03652..8962a54f1bcddd 100644
  		})
  	})
  }
+diff --git a/src/crypto/tls/auth_test.go b/src/crypto/tls/auth_test.go
+index 727bdc4df76393..c71b2b63943fd4 100644
+--- a/src/crypto/tls/auth_test.go
++++ b/src/crypto/tls/auth_test.go
+@@ -12,6 +12,8 @@ import (
+ )
+ 
+ func TestSignatureSelection(t *testing.T) {
++	// Skipping this test until #1715 is resolved.
++	t.Skip()
+ 	rsaCert := &Certificate{
+ 		Certificate: [][]byte{testRSACertificate},
+ 		PrivateKey:  testRSAPrivateKey,
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index 2a96fa69036a07..f3c19c7faf1c21 100644
 --- a/src/crypto/tls/cipher_suites.go

From 9799d698194a81c85ebdd787d5fca293a8656875 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Jul 2025 17:02:20 +0100
Subject: [PATCH 351/887] build(deps): bump github/codeql-action from 3.29.1 to
 3.29.2 (#1714)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.1 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/39edc492dbe16b1465b0cafca41432d857bdb31a...181d5eefc20863364f96762470ba6f862bdef56b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9d088f345b0..df48dea0e84 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         with:
           category: /language:go

From c9eb9330f32d0b4a7fbadfd83268d7a6b4b5923a Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 2 Jul 2025 12:00:52 +0200
Subject: [PATCH 352/887] Remove `GOEXPERIMENT=boringcrypto` support (#1716)

* remove boringcrypto support

* fix tests
---
 eng/doc/fips/README.md                        |   5 +-
 .../stages/go-builder-matrix-stages.yml       |   2 -
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  41 +-
 ...03-Implement-crypto-internal-backend.patch | 482 +-----------------
 patches/0004-Use-crypto-backends.patch        |  32 +-
 5 files changed, 58 insertions(+), 504 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index fc1063442b6..428f15efd56 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -94,7 +94,6 @@ The `GOEXPERIMENT` environment variable is used at build time to select a crypto
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
 - Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
-- `boringcrypto` selects the upstream BoringCrypto backend, which is **not supported and not compliant with internal Microsoft policy**
 - If no option is selected, Go standard library cryptography is used.
 
 The options are exclusive and must not be enabled at the same time as one another.
@@ -364,7 +363,7 @@ Normally this is not necessary, but a shared package may need to change its impl
 
 The `goexperiment.systemcrypto` tag's behavior is implemented in a patch to the build system in the Microsoft build of Go.
 It is not available in builds of upstream Go.
-The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied even if the BoringCrypto backend is enabled.
+The constraint `//go:build !goexperiment.systemcrypto` won't cause a build to fail with upstream Go, but it is always satisfied.
 The constraint also doesn't interact with the FIPS features introduced in Go 1.24.
 
 ## Features
@@ -444,6 +443,8 @@ This list of major changes is intended for quick reference and for access to his
 
 - `GOFIPS=0` support has been removed. It now has no effect.
 
+- `GOEXPERIMENT=boringcrypto` support has been removed.
+
 - `GOEXPERIMENT=allowcryptofallback` has been downgraded to the `allowcryptofallback` build tag. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
 
 ### Go 1.24 (Feb 2025)
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 570ea88199d..045a958db39 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -97,8 +97,6 @@ stages:
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
-          - { experiment: boringcrypto, os: linux, arch: amd64, config: test }
-          - { experiment: boringcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: windows, arch: amd64, config: devscript }
           - { os: windows, arch: amd64, config: test }
           - { experiment: cngcrypto, os: windows, arch: amd64, config: test }
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index ce91482f1b0..753755fbb92 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,14 +11,15 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/go/internal/modindex/build.go         | 58 ++++++++++++-
+ src/cmd/go/internal/modindex/build.go         | 56 ++++++++++++-
  src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
- src/go/build/build.go                         | 58 ++++++++++++-
+ src/go/build/build.go                         | 56 ++++++++++++-
  src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
  .../testdata/backendtags_openssl/main.go      |  3 +
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
+ src/internal/buildcfg/exp.go                  |  3 +
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -28,7 +29,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 17 files changed, 363 insertions(+), 4 deletions(-)
+ 18 files changed, 362 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -45,10 +46,10 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index d7e09fed25f43a..10614d17e62453 100644
+index d7e09fed25f43a..89dcbea0819a1e 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
-@@ -887,9 +887,63 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -887,9 +887,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -56,7 +57,6 @@ index d7e09fed25f43a..10614d17e62453 100644
 +	const openssl = "goexperiment.opensslcrypto"
 +	const cng = "goexperiment.cngcrypto"
 +	const darwin = "goexperiment.darwincrypto"
-+	const boring = "goexperiment.boringcrypto"
 +	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
 +	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
 +	// will work with "go build".
@@ -84,7 +84,7 @@ index d7e09fed25f43a..10614d17e62453 100644
 +		}
 +		if satisfiedByAnyBackend {
 +			switch tag {
-+			case openssl, cng, darwin, boring:
++			case openssl, cng, darwin:
 +				return true
 +			}
 +		}
@@ -99,7 +99,6 @@ index d7e09fed25f43a..10614d17e62453 100644
 +			allTags[openssl] = true
 +			allTags[cng] = true
 +			allTags[darwin] = true
-+			allTags[boring] = true
 +		}
 +		if satisfiedBySystemCrypto {
 +			allTags[system] = true
@@ -194,10 +193,10 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 50288fcec64141..44be2e6a4c580a 100644
+index 50288fcec64141..c557a49b8bd05c 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
-@@ -1984,9 +1984,63 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -1984,9 +1984,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -205,7 +204,6 @@ index 50288fcec64141..44be2e6a4c580a 100644
 +	const openssl = "goexperiment.opensslcrypto"
 +	const cng = "goexperiment.cngcrypto"
 +	const darwin = "goexperiment.darwincrypto"
-+	const boring = "goexperiment.boringcrypto"
 +	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
 +	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
 +	// will work with "go build".
@@ -233,7 +231,7 @@ index 50288fcec64141..44be2e6a4c580a 100644
 +		}
 +		if satisfiedByAnyBackend {
 +			switch tag {
-+			case openssl, cng, darwin, boring:
++			case openssl, cng, darwin:
 +				return true
 +			}
 +		}
@@ -248,7 +246,6 @@ index 50288fcec64141..44be2e6a4c580a 100644
 +			allTags[openssl] = true
 +			allTags[cng] = true
 +			allTags[darwin] = true
-+			allTags[boring] = true
 +		}
 +		if satisfiedBySystemCrypto {
 +			allTags[system] = true
@@ -265,7 +262,7 @@ index 50288fcec64141..44be2e6a4c580a 100644
  // goodOSArchFile returns false if the name contains a $GOOS or $GOARCH
 diff --git a/src/go/build/buildbackend_test.go b/src/go/build/buildbackend_test.go
 new file mode 100644
-index 00000000000000..aa3c5f1007ed79
+index 00000000000000..7d324f1d971eb8
 --- /dev/null
 +++ b/src/go/build/buildbackend_test.go
 @@ -0,0 +1,84 @@
@@ -326,7 +323,7 @@ index 00000000000000..aa3c5f1007ed79
 +	if err != nil {
 +		t.Fatal(err)
 +	}
-+	want = []string{"goexperiment.boringcrypto", "goexperiment.cngcrypto", "goexperiment.darwincrypto", "goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
++	want = []string{"goexperiment.cngcrypto", "goexperiment.darwincrypto", "goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
 +	if !reflect.DeepEqual(p.AllTags, want) {
 +		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
 +	}
@@ -389,6 +386,20 @@ index 00000000000000..eb8a026982259c
 +//go:build goexperiment.systemcrypto
 +
 +package main
+diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
+index e36ec08a5b0232..e30e156089847c 100644
+--- a/src/internal/buildcfg/exp.go
++++ b/src/internal/buildcfg/exp.go
+@@ -152,6 +152,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 	if flags.RegabiArgs && !flags.RegabiWrappers {
+ 		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
+ 	}
++	if flags.BoringCrypto {
++		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
++	}
+ 	return flags, nil
+ }
+ 
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..eb879f94fa0c42
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0de809d0341..37d2027254c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,20 +13,17 @@ desired goexperiments and build tags.
  src/cmd/dist/build.go                         |   5 +
  src/cmd/dist/test.go                          |  17 +-
  src/cmd/go/internal/load/pkg.go               |   6 +
- src/cmd/go/systemcrypto_test.go               | 148 +++++++
+ src/cmd/go/systemcrypto_test.go               | 144 +++++++
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
  .../internal/backend/backendgen_test.go       | 288 ++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
- .../internal/backend/bbig/big_boring.go       |  12 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/boring_linux.go   | 294 ++++++++++++++
  src/crypto/internal/backend/cng_windows.go    | 345 ++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 +++
  src/crypto/internal/backend/darwin_darwin.go  | 372 ++++++++++++++++++
- src/crypto/internal/backend/fips140/boring.go |  13 +
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 ++++
@@ -43,37 +40,30 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/nobackend.go      | 253 ++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/zbackenderrconflict_boring_cng.go  |  17 +
- .../zbackenderrconflict_boring_darwin.go      |  17 +
- .../zbackenderrconflict_boring_openssl.go     |  17 +
  src/crypto/zbackenderrconflict_cng_darwin.go  |  17 +
  src/crypto/zbackenderrconflict_cng_openssl.go |  17 +
  .../zbackenderrconflict_darwin_openssl.go     |  17 +
- src/crypto/zbackenderrnofallback_boring.go    |  20 +
  src/crypto/zbackenderrnofallback_cng.go       |  20 +
  src/crypto/zbackenderrnofallback_darwin.go    |  20 +
  src/crypto/zbackenderrnofallback_openssl.go   |  20 +
  .../zbackenderrrequirefips_nosystemcrypto.go  |  17 +
  .../zbackenderrrequirefips_skipfipscheck.go   |  16 +
  .../zbackenderrsystemcrypto_nobackend.go      |  16 +
- src/go/build/deps_test.go                     |  27 +-
+ src/go/build/deps_test.go                     |  30 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 50 files changed, 2916 insertions(+), 8 deletions(-)
+ 43 files changed, 2524 insertions(+), 9 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
  create mode 100644 src/crypto/internal/backend/backendgen_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
- create mode 100644 src/crypto/internal/backend/bbig/big_boring.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
  create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
- create mode 100644 src/crypto/internal/backend/boring_linux.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/common.go
  create mode 100644 src/crypto/internal/backend/darwin_darwin.go
- create mode 100644 src/crypto/internal/backend/fips140/boring.go
  create mode 100644 src/crypto/internal/backend/fips140/cng.go
  create mode 100644 src/crypto/internal/backend/fips140/darwin.go
  create mode 100644 src/crypto/internal/backend/fips140/fips140.go
@@ -90,13 +80,9 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/crypto/zbackenderrconflict_boring_cng.go
- create mode 100644 src/crypto/zbackenderrconflict_boring_darwin.go
- create mode 100644 src/crypto/zbackenderrconflict_boring_openssl.go
  create mode 100644 src/crypto/zbackenderrconflict_cng_darwin.go
  create mode 100644 src/crypto/zbackenderrconflict_cng_openssl.go
  create mode 100644 src/crypto/zbackenderrconflict_darwin_openssl.go
- create mode 100644 src/crypto/zbackenderrnofallback_boring.go
  create mode 100644 src/crypto/zbackenderrnofallback_cng.go
  create mode 100644 src/crypto/zbackenderrnofallback_darwin.go
  create mode 100644 src/crypto/zbackenderrnofallback_openssl.go
@@ -211,10 +197,10 @@ index e913f9885234fd..123a77518106c5 100644
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..385226588b5dcc
+index 00000000000000..b2298b8157ae92
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,148 @@
+@@ -0,0 +1,144 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -222,7 +208,6 @@ index 00000000000000..385226588b5dcc
 +package main_test
 +
 +import (
-+	"internal/goexperiment"
 +	"internal/testenv"
 +	"os"
 +	"path/filepath"
@@ -294,9 +279,6 @@ index 00000000000000..385226588b5dcc
 +func TestSystemCryptoFIPS(t *testing.T) {
 +	// Test different go commands with GODEBUG=fips140=on
 +	// to exercise the ms_skipfipscheck build tag.
-+	if goexperiment.BoringCrypto {
-+		t.Skip("BoringCrypto doesn't support GODEBUG=fips140=on")
-+	}
 +	t.Parallel()
 +	env := []string{"GODEBUG=fips140=on"}
 +
@@ -742,24 +724,6 @@ index 00000000000000..ab3f30825dcfa1
 +func Dec(b []uint) *big.Int {
 +	return nil
 +}
-diff --git a/src/crypto/internal/backend/bbig/big_boring.go b/src/crypto/internal/backend/bbig/big_boring.go
-new file mode 100644
-index 00000000000000..0b62cef68546d0
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_boring.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto
-+
-+package bbig
-+
-+import "crypto/internal/boring/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
 new file mode 100644
 index 00000000000000..92623031fd87d0
@@ -814,306 +778,6 @@ index 00000000000000..e6695dd66b1d02
 +
 +var Enc = bbig.Enc
 +var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/boring_linux.go b/src/crypto/internal/backend/boring_linux.go
-new file mode 100644
-index 00000000000000..1d6ec4eef5a5b4
---- /dev/null
-+++ b/src/crypto/internal/backend/boring_linux.go
-@@ -0,0 +1,294 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
-+
-+// Package boring provides access to BoringCrypto implementation functions.
-+// Check the variable Enabled to find out whether BoringCrypto is available.
-+// If BoringCrypto is not available, the functions in this package all panic.
-+package backend
-+
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/backend/fips140"
-+	"crypto/internal/boring"
-+	"hash"
-+)
-+
-+func init() {
-+	if err := fips140.Check(func() bool { return true }); err != nil {
-+		panic(err)
-+	}
-+}
-+
-+const Enabled = true
-+
-+type BigInt = boring.BigInt
-+
-+const RandReader = boring.RandReader
-+
-+func SupportsHash(h crypto.Hash) bool {
-+	switch h {
-+	case crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512:
-+		return true
-+	default:
-+		return false
-+	}
-+}
-+
-+func SupportsCurve(curve string) bool            { return true }
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
-+
-+func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash       { return boring.NewSHA1() }
-+func NewSHA224() hash.Hash     { return boring.NewSHA224() }
-+func NewSHA256() hash.Hash     { return boring.NewSHA256() }
-+func NewSHA384() hash.Hash     { return boring.NewSHA384() }
-+func NewSHA512() hash.Hash     { return boring.NewSHA512() }
-+func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)       { return boring.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return boring.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)     { return boring.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return boring.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return boring.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return boring.NewHMAC(h, key) }
-+
-+func NewAESCipher(key []byte) (cipher.Block, error)   { return boring.NewAESCipher(key) }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return boring.NewGCMTLS(c) }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return boring.NewGCMTLS13(c) }
-+
-+type PublicKeyECDSA = boring.PublicKeyECDSA
-+type PrivateKeyECDSA = boring.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D boring.BigInt, err error) {
-+	return boring.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D boring.BigInt) (*boring.PrivateKeyECDSA, error) {
-+	return boring.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y boring.BigInt) (*boring.PublicKeyECDSA, error) {
-+	return boring.NewPublicKeyECDSA(curve, X, Y)
-+}
-+
-+func SignMarshalECDSA(priv *boring.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return boring.SignMarshalECDSA(priv, hash)
-+}
-+
-+func VerifyECDSA(pub *boring.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return boring.VerifyECDSA(pub, hash, sig)
-+}
-+
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	return true
-+}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	return true
-+}
-+
-+type PublicKeyRSA = boring.PublicKeyRSA
-+type PrivateKeyRSA = boring.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *boring.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return boring.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
-+}
-+
-+func DecryptRSAPKCS1(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return boring.DecryptRSAPKCS1(priv, ciphertext)
-+}
-+
-+func DecryptRSANoPadding(priv *boring.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return boring.DecryptRSANoPadding(priv, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *boring.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return boring.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
-+}
-+
-+func EncryptRSAPKCS1(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return boring.EncryptRSAPKCS1(pub, msg)
-+}
-+
-+func EncryptRSANoPadding(pub *boring.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return boring.EncryptRSANoPadding(pub, msg)
-+}
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt, err error) {
-+	return boring.GenerateKeyRSA(bits)
-+}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv boring.BigInt) (*boring.PrivateKeyRSA, error) {
-+	return boring.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+}
-+
-+func NewPublicKeyRSA(N, E boring.BigInt) (*boring.PublicKeyRSA, error) {
-+	return boring.NewPublicKeyRSA(N, E)
-+}
-+
-+func SignRSAPKCS1v15(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return boring.SignRSAPKCS1v15(priv, h, hashed)
-+}
-+
-+func SignRSAPSS(priv *boring.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return boring.SignRSAPSS(priv, h, hashed, saltLen)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return boring.VerifyRSAPKCS1v15(pub, h, hashed, sig)
-+}
-+
-+func VerifyRSAPSS(pub *boring.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return boring.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
-+}
-+
-+type PublicKeyECDH = boring.PublicKeyECDH
-+type PrivateKeyECDH = boring.PrivateKeyECDH
-+
-+func ECDH(priv *boring.PrivateKeyECDH, pub *boring.PublicKeyECDH) ([]byte, error) {
-+	return boring.ECDH(priv, pub)
-+}
-+
-+func GenerateKeyECDH(curve string) (*boring.PrivateKeyECDH, []byte, error) {
-+	return boring.GenerateKeyECDH(curve)
-+}
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*boring.PrivateKeyECDH, error) {
-+	return boring.NewPrivateKeyECDH(curve, bytes)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*boring.PublicKeyECDH, error) {
-+	return boring.NewPublicKeyECDH(curve, bytes)
-+}
-+
-+func SupportsTLS13KDF() bool {
-+	return false
-+}
-+
-+func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsHKDF() bool { return false }
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsPBKDF2() bool { return false }
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsTLS1PRF() bool { return false }
-+
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDESCipher() bool { return false }
-+
-+func SupportsTripleDESCipher() bool { return false }
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsRC4() bool { return false }
-+
-+type RC4Cipher struct{}
-+
-+func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsEd25519() bool { return false }
-+
-+type PublicKeyEd25519 struct{}
-+
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyEd25519 struct{}
-+
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SupportsDSA(l, n int) bool {
-+	return false
-+}
-+
-+func GenerateParametersDSA(l, n int) (p, q, g boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+type PrivateKeyDSA struct{}
-+type PublicKeyDSA struct{}
-+
-+func GenerateKeyDSA(p, q, g boring.BigInt) (x, y boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPrivateKeyDSA(p, q, g, x, y boring.BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func NewPublicKeyDSA(p, q, g, y boring.BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (boring.BigInt, boring.BigInt, error)) (r, s boring.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s boring.BigInt, encodeSignature func(r, s boring.BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
 index 00000000000000..448311cbfd3f10
@@ -1895,25 +1559,6 @@ index 00000000000000..fea0f284de2439
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
-diff --git a/src/crypto/internal/backend/fips140/boring.go b/src/crypto/internal/backend/fips140/boring.go
-new file mode 100644
-index 00000000000000..4a955f7d781022
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/boring.go
-@@ -0,0 +1,13 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.boringcrypto
-+
-+package fips140
-+
-+const backendEnabled = true
-+
-+func systemFIPSMode() bool {
-+	return false
-+}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
 index 00000000000000..e4a1ddeeb7dc09
@@ -2409,7 +2054,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..6eea4e1c93b314
+index 00000000000000..eb73b4e9cb57d8
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,253 @@
@@ -2419,7 +2064,7 @@ index 00000000000000..6eea4e1c93b314
 +
 +// Do not edit the build constraint by hand. It is generated by "backendgen.go".
 +
-+//go:build !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
++//go:build !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
 +
 +package backend
 +
@@ -3020,75 +2665,6 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/zbackenderrconflict_boring_cng.go b/src/crypto/zbackenderrconflict_boring_cng.go
-new file mode 100644
-index 00000000000000..03aa67a60bd92b
---- /dev/null
-+++ b/src/crypto/zbackenderrconflict_boring_cng.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.cngcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The boring and cng backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrconflict_boring_darwin.go b/src/crypto/zbackenderrconflict_boring_darwin.go
-new file mode 100644
-index 00000000000000..fa463937e0453a
---- /dev/null
-+++ b/src/crypto/zbackenderrconflict_boring_darwin.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.darwincrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The boring and darwin backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrconflict_boring_openssl.go b/src/crypto/zbackenderrconflict_boring_openssl.go
-new file mode 100644
-index 00000000000000..ba99c374422357
---- /dev/null
-+++ b/src/crypto/zbackenderrconflict_boring_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.boringcrypto && goexperiment.opensslcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The boring and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
 diff --git a/src/crypto/zbackenderrconflict_cng_darwin.go b/src/crypto/zbackenderrconflict_cng_darwin.go
 new file mode 100644
 index 00000000000000..046f94d615efa7
@@ -3158,32 +2734,6 @@ index 00000000000000..8d16f2133615bb
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/crypto/zbackenderrnofallback_boring.go b/src/crypto/zbackenderrnofallback_boring.go
-new file mode 100644
-index 00000000000000..f3f5d73b4ec1e6
---- /dev/null
-+++ b/src/crypto/zbackenderrnofallback_boring.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.boringcrypto && !(goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan) && !allowcryptofallback
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The goexperiment.boringcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.boringcrypto && linux && cgo && (amd64 || arm64) && !android && !msan
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
 diff --git a/src/crypto/zbackenderrnofallback_cng.go b/src/crypto/zbackenderrnofallback_cng.go
 new file mode 100644
 index 00000000000000..50198a70ebb639
@@ -3309,7 +2859,7 @@ index 00000000000000..8ba88a888eb8c0
 +}
 diff --git a/src/crypto/zbackenderrsystemcrypto_nobackend.go b/src/crypto/zbackenderrsystemcrypto_nobackend.go
 new file mode 100644
-index 00000000000000..919c4d8ffa3740
+index 00000000000000..73404496a46f07
 --- /dev/null
 +++ b/src/crypto/zbackenderrsystemcrypto_nobackend.go
 @@ -0,0 +1,16 @@
@@ -3319,7 +2869,7 @@ index 00000000000000..919c4d8ffa3740
 +
 +// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
 +
-+//go:build goexperiment.systemcrypto && !goexperiment.boringcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
++//go:build goexperiment.systemcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
 +
 +package crypto
 +
@@ -3330,7 +2880,7 @@ index 00000000000000..919c4d8ffa3740
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
+index 3ad0b0a3f2f465..8477ba131082a8 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -536,6 +536,11 @@ var depsRules = `
@@ -3345,7 +2895,7 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
  	FIPS, internal/godebug < crypto/fips140;
  
  	crypto, hash !< FIPS;
-@@ -546,16 +551,28 @@ var depsRules = `
+@@ -546,16 +551,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -3357,8 +2907,7 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
 +	crypto/internal/backend/fips140,
 +	github.com/golang-fips/openssl/v2,
 +	github.com/microsoft/go-crypto-darwin/xcrypto,
-+	github.com/microsoft/go-crypto-winnative/cng,
-+	crypto/internal/boring
++	github.com/microsoft/go-crypto-winnative/cng
 +	< crypto/internal/backend;
 +
  	FIPS, internal/godebug, hash, embed,
@@ -3376,16 +2925,19 @@ index 3ad0b0a3f2f465..2e4b1fd1b370cc 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -579,8 +596,12 @@ var depsRules = `
+@@ -579,8 +595,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
 -	CRYPTO, FMT, math/big
+-	< crypto/internal/boring/bbig
++	FMT, math/big, crypto/internal/boring
++	< crypto/internal/boring/bbig;
++
 +	CRYPTO, FMT, math/big,
 +	github.com/golang-fips/openssl/v2/bbig,
 +	github.com/microsoft/go-crypto-darwin/bbig,
 +	github.com/microsoft/go-crypto-winnative/cng/bbig
- 	< crypto/internal/boring/bbig
 +	< crypto/internal/backend/bbig
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5241af5705a..834af4a5b92 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -17,7 +17,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/boring/boring.go                   |   4 +-
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
  src/crypto/cipher/gcm.go                      |  59 +++++-
- src/crypto/cipher/gcm_test.go                 |  10 +-
+ src/crypto/cipher/gcm_test.go                 |   9 +-
  src/crypto/des/cipher.go                      |   7 +
  src/crypto/dsa/boring.go                      | 113 ++++++++++
  src/crypto/dsa/dsa.go                         |  88 ++++++++
@@ -88,7 +88,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 84 files changed, 1146 insertions(+), 94 deletions(-)
+ 84 files changed, 1145 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -114,10 +114,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index d335e4cfbce468..542b16e1f1f18a 100644
+index 5663aa3286a816..07929009c069ea 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -710,7 +710,7 @@ func (t *tester) registerTests() {
+@@ -712,7 +712,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -126,7 +126,7 @@ index d335e4cfbce468..542b16e1f1f18a 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1165,6 +1165,11 @@ func (t *tester) internalLink() bool {
+@@ -1174,6 +1174,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -138,12 +138,12 @@ index d335e4cfbce468..542b16e1f1f18a 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1328,12 +1333,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1337,12 +1342,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
 -			if staticCheck.skip == nil && goos == "linux" && strings.Contains(goexperiment, "boringcrypto") {
-+			if staticCheck.skip == nil && goos == "linux" && (strings.Contains(goexperiment, "boringcrypto") || strings.Contains(goexperiment, "opensslcrypto")) {
++			if staticCheck.skip == nil && goos == "linux" && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "opensslcrypto")) {
  				staticCheck.skip = func(*distTest) (string, bool) {
  					return "skipping static linking check on Linux when using boringcrypto to avoid C linker warning about getaddrinfo", true
  				}
@@ -437,7 +437,7 @@ index 5580f96d55a0fb..9599e9bf604d3f 100644
  // theoretically support. It's a copy of the generic implementation from
  // crypto/internal/fips140/aes/gcm/gcm_generic.go, refer to that file for more details.
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index e574822c9aa6f8..5d9f27fb6b1931 100644
+index e574822c9aa6f8..15b141ba4c45cf 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
 @@ -8,7 +8,6 @@ import (
@@ -448,20 +448,12 @@ index e574822c9aa6f8..5d9f27fb6b1931 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	fipsaes "crypto/internal/fips140/aes"
-@@ -17,6 +16,7 @@ import (
- 	"encoding/hex"
- 	"errors"
- 	"fmt"
-+	"internal/goexperiment"
- 	"io"
- 	"reflect"
- 	"testing"
-@@ -727,9 +727,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
+@@ -727,9 +726,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
  
  			// Test NewGCMWithRandomNonce.
  			t.Run("GCMWithRandomNonce", func(t *testing.T) {
 -				if _, ok := block.(*wrapper); ok || boring.Enabled {
-+				if _, ok := block.(*wrapper); ok || goexperiment.BoringCrypto {
++				if _, ok := block.(*wrapper); ok {
  					t.Skip("NewGCMWithRandomNonce requires an AES block cipher")
  				}
 +				a, _ := cipher.NewGCMWithRandomNonce(block)
@@ -471,12 +463,12 @@ index e574822c9aa6f8..5d9f27fb6b1931 100644
  				cryptotest.TestAEAD(t, func() (cipher.AEAD, error) { return cipher.NewGCMWithRandomNonce(block) })
  			})
  		})
-@@ -752,7 +756,7 @@ func TestGCMExtraMethods(t *testing.T) {
+@@ -752,7 +755,7 @@ func TestGCMExtraMethods(t *testing.T) {
  		})
  		t.Run("NewGCMWithRandomNonce", func(t *testing.T) {
  			block := newCipher(make([]byte, 16))
 -			if _, ok := block.(*wrapper); ok || boring.Enabled {
-+			if _, ok := block.(*wrapper); ok || goexperiment.BoringCrypto {
++			if _, ok := block.(*wrapper); ok {
  				t.Skip("NewGCMWithRandomNonce requires an AES block cipher")
  			}
  			a, _ := cipher.NewGCMWithRandomNonce(block)

From 9486eaf349b0286a0bb73d200e1aa561616cb81c Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Wed, 2 Jul 2025 14:19:12 +0100
Subject: [PATCH 353/887] fix:skip failing tests

---
 patches/0004-Use-crypto-backends.patch          | 11 +++++------
 .../0006-Skip-failing-tests-on-Windows.patch    | 17 +++++++++++++++--
 2 files changed, 20 insertions(+), 8 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index cec97735e48..421a3885583 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -66,7 +66,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha256/sha256_test.go              |  20 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  24 ++-
- src/crypto/tls/auth_test.go                   |   2 +
+ src/crypto/tls/auth_test.go                   |   1 +
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/defaults_boring.go             |   2 +-
  src/crypto/tls/defaults_fips140.go            |   2 +-
@@ -89,7 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1155 insertions(+), 94 deletions(-)
+ 85 files changed, 1154 insertions(+), 94 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2304,15 +2304,14 @@ index 080bf694f03652..8962a54f1bcddd 100644
  	})
  }
 diff --git a/src/crypto/tls/auth_test.go b/src/crypto/tls/auth_test.go
-index 727bdc4df76393..c71b2b63943fd4 100644
+index 727bdc4df76393..8fd9fc75cf05ef 100644
 --- a/src/crypto/tls/auth_test.go
 +++ b/src/crypto/tls/auth_test.go
-@@ -12,6 +12,8 @@ import (
+@@ -12,6 +12,7 @@ import (
  )
  
  func TestSignatureSelection(t *testing.T) {
-+	// Skipping this test until #1715 is resolved.
-+	t.Skip()
++	t.Skip("Skipping this test until #1715 is resolved.")
  	rsaCert := &Certificate{
  		Certificate: [][]byte{testRSACertificate},
  		PrivateKey:  testRSAPrivateKey,
diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
index 38499ce6fc0..73d3f6c1a95 100644
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ b/patches/0006-Skip-failing-tests-on-Windows.patch
@@ -4,8 +4,9 @@ Date: Wed, 11 Oct 2023 10:44:22 +0200
 Subject: [PATCH] Skip failing tests on Windows
 
 ---
- src/cmd/cgo/internal/test/test.go | 3 +++
- 1 file changed, 3 insertions(+)
+ src/cmd/cgo/internal/test/test.go                | 3 +++
+ src/cmd/cgo/internal/testsanitizers/asan_test.go | 1 +
+ 2 files changed, 4 insertions(+)
 
 diff --git a/src/cmd/cgo/internal/test/test.go b/src/cmd/cgo/internal/test/test.go
 index 844b2dd42c8cbf..9e73c1feaed003 100644
@@ -21,3 +22,15 @@ index 844b2dd42c8cbf..9e73c1feaed003 100644
  	p := C.CString("234")
  	n, m := C.strtol(p, nil, 345), C.strtol(p, nil, 10)
  	defer C.free(unsafe.Pointer(p))
+diff --git a/src/cmd/cgo/internal/testsanitizers/asan_test.go b/src/cmd/cgo/internal/testsanitizers/asan_test.go
+index c2cdf7b6d645e8..575da5149d9c7b 100644
+--- a/src/cmd/cgo/internal/testsanitizers/asan_test.go
++++ b/src/cmd/cgo/internal/testsanitizers/asan_test.go
+@@ -108,6 +108,7 @@ func TestASANLinkerX(t *testing.T) {
+ 
+ // Issue 66966.
+ func TestASANFuzz(t *testing.T) {
++	t.Skip("Test is flaky, see https://github.com/golang/go/issues/73979")
+ 	config := mustHaveASAN(t)
+ 
+ 	t.Parallel()

From d1d693538e235a58e09fd618068ef6687192f353 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 2 Jul 2025 17:57:08 +0100
Subject: [PATCH 354/887] ci: add workflow to check if vendor patch is clean
 (#1717)

* ci: add workflow to check if vendor patch is clean

* try now

* malicious commit

* check go mod in go/src/cmd too

* Revert "malicious commit"

This reverts commit b11132bb4e5fcddbca3ef0fa070f9bd7d8982922.
---
 .github/workflows/test.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b25c85d3124..15eea64ba6e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,3 +31,22 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow
+
+      - name: Build Go toolchain
+        working-directory: go/src
+        run: ./make.bash
+
+      - name: Run go mod vendor (go/src)
+        working-directory: go/src
+        run: |
+          ../bin/go mod vendor
+
+      - name: Run go mod vendor (go/src/cmd)
+        working-directory: go/src/cmd
+        run: |
+          ../../bin/go mod vendor
+
+      - name: Check if vendor directory is clean
+        working-directory: go/src
+        run: |
+          git diff --exit-code vendor cmd/vendor || (echo "Vendor directories are not clean. Please run 'go mod vendor' in the appropriate directories and commit the changes." && exit 1)

From 818b53c05b52bde0167010cbdca033f3718c2832 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 3 Jul 2025 11:20:18 +0100
Subject: [PATCH 355/887] fix:replace boring with backend

---
 patches/0004-Use-crypto-backends.patch | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 33debb19846..01054939aa8 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -39,6 +39,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
+ src/crypto/internal/cryptotest/hash.go        |   2 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/check_test.go |  16 ++
@@ -89,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 85 files changed, 1153 insertions(+), 94 deletions(-)
+ 86 files changed, 1154 insertions(+), 95 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -115,7 +116,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 5663aa3286a816..07929009c069ea 100644
+index a45b47b549d775..731296e29e3666 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -712,7 +712,7 @@ func (t *tester) registerTests() {
@@ -1296,6 +1297,19 @@ index 70055af70b42ec..3c4b4fbaa98ded 100644
  	"internal/asan"
  	"internal/msan"
  	"internal/race"
+diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
+index f00e9c80d3c86a..6e3e61446fc053 100644
+--- a/src/crypto/internal/cryptotest/hash.go
++++ b/src/crypto/internal/cryptotest/hash.go
+@@ -5,7 +5,7 @@
+ package cryptotest
+ 
+ import (
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140"
+ 	"hash"
+ 	"internal/testhash"
 diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
 index f0ba665403e4e2..e1869abd3ccc4b 100644
 --- a/src/crypto/internal/cryptotest/implementations.go
@@ -2809,7 +2823,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index c5a42266a9f736..3ec19155c70c31 100644
+index eddaf170772e19..dbd96efb9a7dce 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -517,7 +517,7 @@ var depsRules = `
@@ -2830,7 +2844,7 @@ index c5a42266a9f736..3ec19155c70c31 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -585,6 +587,7 @@ var depsRules = `
+@@ -584,6 +586,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 7604d39d3725d913ceeac364f635b24408738738 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 3 Jul 2025 11:26:24 +0100
Subject: [PATCH 356/887] update hmac extramethods

---
 .../0001-Vendor-external-dependencies.patch   | 31 +++++++------------
 1 file changed, 11 insertions(+), 20 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 62915180666..f939fe441b1 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -88,7 +88,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/hashclone.go           |   17 +
  .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
- .../internal/cryptokit/hmac.go                |  159 ++
+ .../internal/cryptokit/hmac.go                |  146 ++
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
@@ -121,7 +121,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
- .../microsoft/go-crypto-winnative/cng/hmac.go |   60 +
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   64 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
@@ -135,7 +135,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 127 files changed, 19165 insertions(+), 7 deletions(-)
+ 127 files changed, 19156 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -14567,10 +14567,10 @@ index 00000000000000..da161adcd88ea6
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
 new file mode 100644
-index 00000000000000..a1ec1262a36247
+index 00000000000000..53790ffa74310e
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
-@@ -0,0 +1,159 @@
+@@ -0,0 +1,146 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14581,7 +14581,6 @@ index 00000000000000..a1ec1262a36247
 +// #include "cryptokit.h"
 +import "C"
 +import (
-+	"errors"
 +	"hash"
 +	"runtime"
 +	"slices"
@@ -14661,18 +14660,6 @@ index 00000000000000..a1ec1262a36247
 +	return b
 +}
 +
-+func (h *cryptoKitHMAC) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("cryptokit: hash state is not marshallable")
-+}
-+
-+func (h *cryptoKitHMAC) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("cryptokit: hash state is not marshallable")
-+}
-+
-+func (h *cryptoKitHMAC) UnmarshalBinary(data []byte) error {
-+	return errors.New("cryptokit: hash state is not marshallable")
-+}
-+
 +func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
 +	if h.ptr == nil {
 +		panic("cryptokit: hash already finalized")
@@ -19064,10 +19051,10 @@ index 00000000000000..2647c6bc06cd57
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
-index 00000000000000..0c4ec93968daad
+index 00000000000000..ebea5e45d00570
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
-@@ -0,0 +1,60 @@
+@@ -0,0 +1,64 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19128,6 +19115,10 @@ index 00000000000000..0c4ec93968daad
 +func (h hmacWrapper) BlockSize() int {
 +	return h.hashX.BlockSize()
 +}
++
++func (h hmacWrapper) Clone() (hash.Hash, error) {
++	return hmacWrapper{hashX: h.hashX.Clone()}, nil
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
 new file mode 100644
 index 00000000000000..bc150a7bd39272

From a8b1dd5236c2ac84b2d6da068d20b02def8c4a99 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 3 Jul 2025 11:45:53 +0100
Subject: [PATCH 357/887] fix:pull branches from backends

---
 .../0001-Vendor-external-dependencies.patch   | 38 ++++++++++---------
 1 file changed, 21 insertions(+), 17 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index f939fe441b1..c40d2b639d2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -121,7 +121,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
- .../microsoft/go-crypto-winnative/cng/hmac.go |   64 +
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   68 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
@@ -135,7 +135,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 127 files changed, 19156 insertions(+), 7 deletions(-)
+ 127 files changed, 19160 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -1830,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..29ee969cf70680 100644
+index b81f19068aef23..88b18ff3156d39 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1840,20 +1840,20 @@ index b81f19068aef23..29ee969cf70680 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..154d4177f0e138 100644
+index 410eb8648a710a..9dbb5e7e73ae49 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7 h1:ZjpSTr5uh4P3EKwrZQ8Fr/NZJ6NBgf+8UabCp9Kmtoc=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba h1:sz9TMONxImn6w1ryWkahKg1k9v+063oM9xWVnQSLWdE=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a h1:O3O6LIZWKqNod6d3OCAwfl3qtiRYSnBf6z5tZ24l2m8=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18 h1:IqXzSNOEkOtNZQiWQv1Er6ngsKOkSs2Y5zy7AVSm3s4=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a h1:jKDkR4bv1FnPXIVhfJa5q44w9Hm6qrr7+qeTmLZhhU4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
@@ -19051,10 +19051,10 @@ index 00000000000000..2647c6bc06cd57
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
-index 00000000000000..ebea5e45d00570
+index 00000000000000..939076cb971001
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,68 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19116,8 +19116,12 @@ index 00000000000000..ebea5e45d00570
 +	return h.hashX.BlockSize()
 +}
 +
-+func (h hmacWrapper) Clone() (hash.Hash, error) {
-+	return hmacWrapper{hashX: h.hashX.Clone()}, nil
++func (h hmacWrapper) Clone() (HashCloner, error) {
++	clone, err := h.hashX.Clone()
++	if err != nil {
++		return nil, err
++	}
++	return hmacWrapper{hashX: clone.(*hashX)}, nil
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
 new file mode 100644
@@ -21283,7 +21287,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..d9fce2083730f5 100644
+index 8507f01b12f518..47d762b5b5c149 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21292,12 +21296,12 @@ index 8507f01b12f518..d9fce2083730f5 100644
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250619123811-0128e7463bba
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250630111834-0997e7427e4a
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 33a9ba36a65a4f2e7e95b6a89bbaac917eeacc5a Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Thu, 3 Jul 2025 12:57:11 +0100
Subject: [PATCH 358/887] update patches

---
 .../0001-Vendor-external-dependencies.patch   | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index c40d2b639d2..bcb6795da22 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1830,7 +1830,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..88b18ff3156d39 100644
+index b81f19068aef23..74c129d7995deb 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1840,20 +1840,20 @@ index b81f19068aef23..88b18ff3156d39 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..9dbb5e7e73ae49 100644
+index 410eb8648a710a..31a26b0d5104e1 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7 h1:ZjpSTr5uh4P3EKwrZQ8Fr/NZJ6NBgf+8UabCp9Kmtoc=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18 h1:IqXzSNOEkOtNZQiWQv1Er6ngsKOkSs2Y5zy7AVSm3s4=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a h1:jKDkR4bv1FnPXIVhfJa5q44w9Hm6qrr7+qeTmLZhhU4=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498 h1:UbccQbkPCI4kCh2s4gnJevJEaNyb/R19lXsII1RC8Nw=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b h1:Yf6lm9r6Aid3PG5FoeSX2v4iU+xWnAmCRQNjBxgceWI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
@@ -21287,7 +21287,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..47d762b5b5c149 100644
+index 8507f01b12f518..13b7bb0fa3777e 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21296,12 +21296,12 @@ index 8507f01b12f518..47d762b5b5c149 100644
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703102827-13fda770ba18
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250703103639-5a6a43c44e9a
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From bbd010ce78567294e16f6f8e925136077e932a44 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 3 Jul 2025 13:06:09 +0000
Subject: [PATCH 359/887] Update submodule to latest master (b3251514):
 cmd/cgo/internal/testsanitizers: skip asan tests when FIPS140 mode is on

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 96a6e147b2b..b3251514531 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 96a6e147b2b02b1f070d559cb2c8e1c25c9b78c3
+Subproject commit b3251514531123d7fd007682389bce7428d159a0

From 20dc3323fb323f0566b52c79f5b3e37530a68dab Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 3 Jul 2025 14:09:23 +0100
Subject: [PATCH 360/887] remove duplicated asan skip for test

---
 .../0006-Skip-failing-tests-on-Windows.patch    | 17 ++---------------
 1 file changed, 2 insertions(+), 15 deletions(-)

diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
index 73d3f6c1a95..38499ce6fc0 100644
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ b/patches/0006-Skip-failing-tests-on-Windows.patch
@@ -4,9 +4,8 @@ Date: Wed, 11 Oct 2023 10:44:22 +0200
 Subject: [PATCH] Skip failing tests on Windows
 
 ---
- src/cmd/cgo/internal/test/test.go                | 3 +++
- src/cmd/cgo/internal/testsanitizers/asan_test.go | 1 +
- 2 files changed, 4 insertions(+)
+ src/cmd/cgo/internal/test/test.go | 3 +++
+ 1 file changed, 3 insertions(+)
 
 diff --git a/src/cmd/cgo/internal/test/test.go b/src/cmd/cgo/internal/test/test.go
 index 844b2dd42c8cbf..9e73c1feaed003 100644
@@ -22,15 +21,3 @@ index 844b2dd42c8cbf..9e73c1feaed003 100644
  	p := C.CString("234")
  	n, m := C.strtol(p, nil, 345), C.strtol(p, nil, 10)
  	defer C.free(unsafe.Pointer(p))
-diff --git a/src/cmd/cgo/internal/testsanitizers/asan_test.go b/src/cmd/cgo/internal/testsanitizers/asan_test.go
-index c2cdf7b6d645e8..575da5149d9c7b 100644
---- a/src/cmd/cgo/internal/testsanitizers/asan_test.go
-+++ b/src/cmd/cgo/internal/testsanitizers/asan_test.go
-@@ -108,6 +108,7 @@ func TestASANLinkerX(t *testing.T) {
- 
- // Issue 66966.
- func TestASANFuzz(t *testing.T) {
-+	t.Skip("Test is flaky, see https://github.com/golang/go/issues/73979")
- 	config := mustHaveASAN(t)
- 
- 	t.Parallel()

From 633e8a270a93f99226f651e3a62d812659f122ff Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 3 Jul 2025 15:56:01 +0200
Subject: [PATCH 361/887] fix tests

---
 ...03-Implement-crypto-internal-backend.patch | 28 +++++++++++++------
 1 file changed, 20 insertions(+), 8 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 44484fc6c85..ef2f6546865 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -11,7 +11,7 @@ desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
  src/cmd/dist/build.go                         |   5 +
- src/cmd/dist/test.go                          |  17 +-
+ src/cmd/dist/test.go                          |  22 +-
  src/cmd/go/internal/load/pkg.go               |   6 +
  src/cmd/go/systemcrypto_test.go               | 144 +++++++
  src/crypto/internal/backend/backend_test.go   |  30 ++
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  30 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 43 files changed, 2524 insertions(+), 9 deletions(-)
+ 43 files changed, 2529 insertions(+), 9 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
@@ -120,7 +120,7 @@ index 024050c2dd70c4..e8f388badaeb3c 100644
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
  	if debug {
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 637433d45135a2..a45b47b549d775 100644
+index aa09d1eba34be8..c2adb959460ac2 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -150,7 +150,19 @@ index 637433d45135a2..a45b47b549d775 100644
  		}
  	}
  
-@@ -847,6 +849,11 @@ func (t *tester) registerTests() {
+@@ -749,6 +751,11 @@ func (t *tester) registerTests() {
+ 			variant: "jsonv2",
+ 			env:     []string{"GOEXPERIMENT=jsonv2"},
+ 			pkg:     "encoding/json/...",
++			// Skip FIPS checks. The test overrides GOEXPERIMENT,
++			// so if we have been executed with GOEXPERIMENT=systemcrypto
++			// and FIPS mode is required, then the test will fail because
++			// the systemcrypto package will not be available.
++			tags: []string{"ms_skipfipscheck"},
+ 		})
+ 	}
+ 
+@@ -863,6 +870,11 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -162,7 +174,7 @@ index 637433d45135a2..a45b47b549d775 100644
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -855,6 +862,7 @@ func (t *tester) registerTests() {
+@@ -871,6 +883,7 @@ func (t *tester) registerTests() {
  				ldflags:   "-linkmode=internal",
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "reflect",
@@ -170,7 +182,7 @@ index 637433d45135a2..a45b47b549d775 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -865,6 +873,7 @@ func (t *tester) registerTests() {
+@@ -881,6 +894,7 @@ func (t *tester) registerTests() {
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",
@@ -2880,10 +2892,10 @@ index 00000000000000..73404496a46f07
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3ad0b0a3f2f465..8477ba131082a8 100644
+index 9b7613a62b5a31..eddaf170772e19 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -536,6 +536,11 @@ var depsRules = `
+@@ -537,6 +537,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  

From ced86b2366f05520e2b4ae1c1db8c1c644387107 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 4 Jul 2025 09:48:36 +0200
Subject: [PATCH 362/887] Set `goexperiment.SystemCrypto` when any crypto
 backend is enabled (#1719)

* set goexperiment.SystemCrypto when any crypto backend is enabled

* use systemcrypto in CI

* fix comment

* revert matrix

* fix conflict
---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 34 ++++++++++++++++---
 ...03-Implement-crypto-internal-backend.patch | 15 ++++----
 patches/0004-Use-crypto-backends.patch        |  4 +--
 3 files changed, 38 insertions(+), 15 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 753755fbb92..f00a58dcddc 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -19,7 +19,7 @@ maintain this feature. For more information, see the test files.
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- src/internal/buildcfg/exp.go                  |  3 +
+ src/internal/buildcfg/exp.go                  | 15 ++++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -29,7 +29,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 362 insertions(+), 4 deletions(-)
+ 18 files changed, 374 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -387,10 +387,36 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index e36ec08a5b0232..e30e156089847c 100644
+index e36ec08a5b0232..c1bd89cf694bea 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
-@@ -152,6 +152,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -126,6 +126,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 				// to build with any experiment flags.
+ 				flags.Flags = goexperiment.Flags{}
+ 				continue
++			} else if f == "nosystemcrypto" {
++				// GOEXPERIMENT=nosystemcrypto disables all system
++				// crypto experiments.
++				flags.Flags.OpenSSLCrypto = false
++				flags.Flags.CNGCrypto = false
++				flags.Flags.DarwinCrypto = false
++				flags.Flags.SystemCrypto = false
++				continue
+ 			}
+ 			val := true
+ 			if strings.HasPrefix(f, "no") {
+@@ -139,6 +147,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		}
+ 	}
+ 
++	if flags.OpenSSLCrypto || flags.CNGCrypto || flags.DarwinCrypto {
++		flags.SystemCrypto = true
++	}
++
+ 	if regabiAlwaysOn {
+ 		flags.RegabiWrappers = true
+ 		flags.RegabiArgs = true
+@@ -152,6 +164,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index ef2f6546865..d99c56ac862 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -11,8 +11,8 @@ desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
  src/cmd/dist/build.go                         |   5 +
- src/cmd/dist/test.go                          |  22 +-
- src/cmd/go/internal/load/pkg.go               |   6 +
+ src/cmd/dist/test.go                          |  17 +-
+ src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/systemcrypto_test.go               | 144 +++++++
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/backendgen.go     |  20 +
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  30 +-
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 43 files changed, 2529 insertions(+), 9 deletions(-)
+ 43 files changed, 2521 insertions(+), 9 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/backendgen.go
@@ -191,17 +191,14 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index e913f9885234fd..123a77518106c5 100644
+index e913f9885234fd..ef331980a816a3 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
-@@ -2412,6 +2412,12 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
+@@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
  			buildmode = "archive"
  		}
  	}
-+	if cfg.Experiment.SystemCrypto ||
-+		cfg.Experiment.OpenSSLCrypto ||
-+		cfg.Experiment.CNGCrypto ||
-+		cfg.Experiment.DarwinCrypto {
++	if cfg.Experiment.SystemCrypto {
 +		appendSetting("microsoft_systemcrypto", "1")
 +	}
  	appendSetting("-buildmode", buildmode)
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 01054939aa8..db0853398d2 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -227,7 +227,7 @@ index 4aaf46b5d0f0dc..ec58a217400caa 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/config.go b/src/cmd/link/internal/ld/config.go
-index b2d4ad7cb0e7f6..2859879041ff8f 100644
+index b2d4ad7cb0e7f6..f5b109fc6cc069 100644
 --- a/src/cmd/link/internal/ld/config.go
 +++ b/src/cmd/link/internal/ld/config.go
 @@ -7,6 +7,7 @@ package ld
@@ -244,7 +244,7 @@ index b2d4ad7cb0e7f6..2859879041ff8f 100644
  		switch buildcfg.GOOS + "/" + buildcfg.GOARCH {
 +		case "darwin/amd64":
 +			// We can't link against the static object file when using no_pie
-+			if goexperiment.DarwinCrypto || goexperiment.SystemCrypto {
++			if goexperiment.SystemCrypto {
 +				*mode = BuildModePIE
 +			} else {
 +				*mode = BuildModeExe

From 31bce552b60b0208e91bd57d3c615c8b4522d5f8 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 4 Jul 2025 10:30:08 +0100
Subject: [PATCH 363/887] fix: unskip inadvertently skipped hash.Cloner tests
 (#1722)

---
 patches/0004-Use-crypto-backends.patch | 36 ++++++++++++++++----------
 1 file changed, 22 insertions(+), 14 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index db0853398d2..9a728288290 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -39,7 +39,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   2 +-
- src/crypto/internal/cryptotest/hash.go        |   2 +-
+ src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/check_test.go |  16 ++
@@ -90,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 86 files changed, 1154 insertions(+), 95 deletions(-)
+ 86 files changed, 1154 insertions(+), 96 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -116,10 +116,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index a45b47b549d775..731296e29e3666 100644
+index c2adb959460ac2..ee766afaca06e7 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -712,7 +712,7 @@ func (t *tester) registerTests() {
+@@ -719,7 +719,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -128,7 +128,7 @@ index a45b47b549d775..731296e29e3666 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1175,6 +1175,11 @@ func (t *tester) internalLink() bool {
+@@ -1199,6 +1199,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -140,7 +140,7 @@ index a45b47b549d775..731296e29e3666 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1338,12 +1343,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1362,12 +1367,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -327,7 +327,7 @@ index 33942467784ad3..0282ffa9fa23c8 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"encoding/hex"
 diff --git a/src/crypto/cipher/gcm.go b/src/crypto/cipher/gcm.go
-index 5580f96d55a0fb..9599e9bf604d3f 100644
+index 73493f6cd2311b..8dfba7cdff5405 100644
 --- a/src/crypto/cipher/gcm.go
 +++ b/src/crypto/cipher/gcm.go
 @@ -93,6 +93,15 @@ func newGCM(cipher Block, nonceSize, tagSize int) (AEAD, error) {
@@ -875,7 +875,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 9affc1ff786125..7e1b98f344cc0a 100644
+index 340edbbaba7807..4490f67e22f88a 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -1272,7 +1272,7 @@ index 554c8c9b78940b..c68a394280cc2c 100644
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
-index 9b7eee7bf7873e..1755c95a08868b 100644
+index 4046a9555a8e35..4721a2a7ac04f7 100644
 --- a/src/crypto/hmac/hmac_test.go
 +++ b/src/crypto/hmac/hmac_test.go
 @@ -5,7 +5,7 @@
@@ -1298,18 +1298,26 @@ index 70055af70b42ec..3c4b4fbaa98ded 100644
  	"internal/msan"
  	"internal/race"
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
-index f00e9c80d3c86a..6e3e61446fc053 100644
+index f00e9c80d3c86a..e24b6cbbd00f68 100644
 --- a/src/crypto/internal/cryptotest/hash.go
 +++ b/src/crypto/internal/cryptotest/hash.go
-@@ -5,7 +5,7 @@
+@@ -5,7 +5,6 @@
  package cryptotest
  
  import (
 -	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
  	"crypto/internal/fips140"
  	"hash"
  	"internal/testhash"
+@@ -20,7 +19,7 @@ type MakeHash func() hash.Hash
+ // TestHash performs a set of tests on hash.Hash implementations, checking the
+ // documented requirements of Write, Sum, Reset, Size, and BlockSize.
+ func TestHash(t *testing.T, mh MakeHash) {
+-	if boring.Enabled || fips140.Version() == "v1.0" {
++	if fips140.Version() == "v1.0" {
+ 		testhash.TestHashWithoutClone(t, testhash.MakeHash(mh))
+ 		return
+ 	}
 diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
 index f0ba665403e4e2..e1869abd3ccc4b 100644
 --- a/src/crypto/internal/cryptotest/implementations.go
@@ -2434,7 +2442,7 @@ index 90c5bdacd82318..c4ca03ddfb4de0 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 4f4966904f59f4..b2d3949e2ede38 100644
+index 7018bb2336b8f3..d5e02272d7afe1 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -2470,7 +2478,7 @@ index 8240e6afae3c6b..5dd00e27037a0f 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index dbd6ff2c4f4d94..ef11e56aaec4b9 100644
+index a52bc76a0d1a9f..6c32550b0129b8 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (

From 952ebc6659407a1edcefe06d403c158a3a9d2037 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 4 Jul 2025 12:51:01 +0200
Subject: [PATCH 364/887] Support for excluding OS-disabled cipher suites in
 TLS handshake (#1721)

* Support retrieving the cipher suites from Schannel

* add docs

* rename experiment

* code review comments

* fix tests
---
 eng/doc/CrossPlatformCryptography.md          |   2 +
 .../stages/go-builder-matrix-stages.yml       |   1 +
 ...nt-ms_tls_config_schannel-experiment.patch | 454 ++++++++++++++++++
 3 files changed, 457 insertions(+)
 create mode 100644 patches/0011-implement-ms_tls_config_schannel-experiment.patch

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 83638ff681d..1dcc8ada025 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -315,6 +315,8 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
+On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.
+
 ### Curves and Groups
 
 Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 045a958db39..522bf0e145d 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -101,6 +101,7 @@ stages:
           - { os: windows, arch: amd64, config: test }
           - { experiment: cngcrypto, os: windows, arch: amd64, config: test }
           - { experiment: cngcrypto, os: windows, arch: amd64, config: test, fips: true }
+          - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { os: windows, hostArch: amd64, arch: 386, config: buildandpack }
         - ${{ if parameters.outerloop }}:
diff --git a/patches/0011-implement-ms_tls_config_schannel-experiment.patch b/patches/0011-implement-ms_tls_config_schannel-experiment.patch
new file mode 100644
index 00000000000..1a8838bfa36
--- /dev/null
+++ b/patches/0011-implement-ms_tls_config_schannel-experiment.patch
@@ -0,0 +1,454 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: qmuntal <qmuntaldiaz@microsoft.com>
+Date: Thu, 3 Jul 2025 15:13:26 +0200
+Subject: [PATCH] implement ms_tls_config_schannel experiment
+
+---
+ src/crypto/tls/fips140_test.go                | 10 +++
+ src/crypto/tls/handshake_client_test.go       |  6 ++
+ src/crypto/tls/handshake_server_test.go       |  4 +
+ src/crypto/tls/schannel_disabled_test.go      | 11 +++
+ src/crypto/tls/schannel_windows.go            | 75 +++++++++++++++++
+ src/crypto/tls/schannel_windows_test.go       | 81 +++++++++++++++++++
+ src/crypto/tls/tls_test.go                    | 13 +++
+ .../exp_ms_tls_config_schannel_off.go         |  8 ++
+ .../exp_ms_tls_config_schannel_on.go          |  8 ++
+ src/internal/goexperiment/flags.go            |  4 +
+ .../syscall/windows/security_windows.go       | 28 +++++++
+ .../syscall/windows/zsyscall_windows.go       | 16 ++++
+ 12 files changed, 264 insertions(+)
+ create mode 100644 src/crypto/tls/schannel_disabled_test.go
+ create mode 100644 src/crypto/tls/schannel_windows.go
+ create mode 100644 src/crypto/tls/schannel_windows_test.go
+ create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+ create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+
+diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
+index 711ce750a71a93..f3b993fc0c669e 100644
+--- a/src/crypto/tls/fips140_test.go
++++ b/src/crypto/tls/fips140_test.go
+@@ -14,6 +14,7 @@ import (
+ 	"crypto/x509/pkix"
+ 	"encoding/pem"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"internal/obscuretestdata"
+ 	"internal/testenv"
+ 	"math/big"
+@@ -52,6 +53,12 @@ func generateKeyShare(group CurveID) keyShare {
+ 
+ func TestFIPSServerProtocolVersion(t *testing.T) {
+ 	test := func(t *testing.T, name string, v uint16, msg string) {
++		if goexperiment.MS_TLS_Config_Schannel {
++			if v < VersionTLS12 {
++				// Most Windows versions do not support TLS 1.0 or 1.1.
++				t.Skipf("skipping Schannel cipher suite test for version %x", v)
++			}
++		}
+ 		t.Run(name, func(t *testing.T) {
+ 			serverConfig := testConfig.Clone()
+ 			serverConfig.MinVersion = VersionSSL30
+@@ -187,6 +194,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
+ 		}
+ 		serverConfig.BuildNameToCertificate()
+ 		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
++			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(id) {
++				t.Skip("skipping Schannel unsupported cipher suite")
++			}
+ 			clientHello := &clientHelloMsg{
+ 				vers:                         VersionTLS12,
+ 				random:                       make([]byte, 32),
+diff --git a/src/crypto/tls/handshake_client_test.go b/src/crypto/tls/handshake_client_test.go
+index 6118711a0eb65a..93ce0c90875cd8 100644
+--- a/src/crypto/tls/handshake_client_test.go
++++ b/src/crypto/tls/handshake_client_test.go
+@@ -20,6 +20,7 @@ import (
+ 	"errors"
+ 	"fmt"
+ 	"internal/byteorder"
++	"internal/goexperiment"
+ 	"io"
+ 	"math/big"
+ 	"net"
+@@ -2398,6 +2399,11 @@ func testGetClientCertificate(t *testing.T, version uint16) {
+ 			t.Logf("skipping test %d for FIPS mode", i)
+ 			continue
+ 		}
++		if goexperiment.MS_TLS_Config_Schannel && clientConfig.MaxVersion == VersionTLS11 {
++			// TLS 1.1 isn't available on Schannel
++			t.Logf("skipping test %d on Schannel", i)
++			continue
++		}
+ 
+ 		type serverResult struct {
+ 			cs  ConnectionState
+diff --git a/src/crypto/tls/handshake_server_test.go b/src/crypto/tls/handshake_server_test.go
+index a6d64a506a0542..0c604228f7786f 100644
+--- a/src/crypto/tls/handshake_server_test.go
++++ b/src/crypto/tls/handshake_server_test.go
+@@ -16,6 +16,7 @@ import (
+ 	"encoding/pem"
+ 	"errors"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"io"
+ 	"net"
+ 	"os"
+@@ -341,6 +342,9 @@ func TestTLSPointFormats(t *testing.T) {
+ 			continue
+ 		}
+ 		t.Run(tt.name, func(t *testing.T) {
++			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(tt.cipherSuites[0]) {
++				t.Skip("skipping Schannel unsupported cipher suite")
++			}
+ 			clientHello := &clientHelloMsg{
+ 				vers:               VersionTLS12,
+ 				random:             make([]byte, 32),
+diff --git a/src/crypto/tls/schannel_disabled_test.go b/src/crypto/tls/schannel_disabled_test.go
+new file mode 100644
+index 00000000000000..d598d48dedf762
+--- /dev/null
++++ b/src/crypto/tls/schannel_disabled_test.go
+@@ -0,0 +1,11 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !windows || !goexperiment.ms_tls_config_schannel
++
++package tls
++
++func isSchannelCipherSuite(id uint16) bool {
++	return false
++}
+diff --git a/src/crypto/tls/schannel_windows.go b/src/crypto/tls/schannel_windows.go
+new file mode 100644
+index 00000000000000..cf660080f24c2f
+--- /dev/null
++++ b/src/crypto/tls/schannel_windows.go
+@@ -0,0 +1,75 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package tls
++
++import (
++	"internal/syscall/windows"
++	"slices"
++	"unsafe"
++)
++
++func init() {
++	cipherSuitesSchannel, err := cipherSuitesSchannel()
++	if err != nil {
++		panic(err) // This should never happen, as Schannel is always available on Windows.
++	}
++	cipherSuitesPreferenceOrder = filterCipherSuites(cipherSuitesSchannel, cipherSuitesPreferenceOrder)
++	cipherSuitesPreferenceOrderNoAES = filterCipherSuites(cipherSuitesSchannel, cipherSuitesPreferenceOrderNoAES)
++	defaultCipherSuitesTLS13 = filterCipherSuites(cipherSuitesSchannel, defaultCipherSuitesTLS13)
++	defaultCipherSuitesTLS13NoAES = filterCipherSuites(cipherSuitesSchannel, defaultCipherSuitesTLS13NoAES)
++	allowedCipherSuitesFIPS = filterCipherSuites(cipherSuitesSchannel, allowedCipherSuitesFIPS)
++	allowedCipherSuitesTLS13FIPS = filterCipherSuites(cipherSuitesSchannel, allowedCipherSuitesTLS13FIPS)
++}
++
++func cipherSuiteID(name string) (uint16, bool) {
++	for _, c := range CipherSuites() {
++		if c.Name == name {
++			return c.ID, true
++		}
++	}
++	for _, c := range InsecureCipherSuites() {
++		if c.Name == name {
++			return c.ID, true
++		}
++	}
++	return 0, false
++}
++
++// cipherSuitesSchannel returns all the cipher suites that Schannel supports in Schannel's preference order.
++func cipherSuitesSchannel() ([]uint16, error) {
++	// Get all the cipher suites that Schannel supports in preference order.
++	var size uint32
++	var funcs *windows.CRYPT_CONTEXT_FUNCTIONS
++	err := windows.BCryptEnumContextFunctions(windows.CRYPT_LOCAL, unsafe.SliceData(windows.SSL_CONTEXT[:]), windows.NCRYPT_SCHANNEL_INTERFACE, &size, &funcs)
++	if err != nil {
++		return nil, err
++	}
++	defer windows.BCryptFreeBuffer(unsafe.Pointer(funcs))
++
++	suites := make([]uint16, 0, funcs.Count) // order[i] will be the index of suites[i] in the Schannel list
++	for i := range funcs.Count {
++		name := windows.UTF16PtrToString(funcs.At(int(i)))
++		id, ok := cipherSuiteID(name)
++		if !ok {
++			continue // cipher suite not found in the provided list
++		}
++		suites = append(suites, id)
++	}
++	return suites, nil
++}
++
++// filterCipherSuites filters the provided cipher suites, creating a new slice
++// that only includes those that are in the allowed list.
++func filterCipherSuites(suites, allowed []uint16) []uint16 {
++	out := make([]uint16, 0, len(suites))
++	for _, suite := range suites {
++		if slices.Contains(allowed, suite) {
++			out = append(out, suite)
++		}
++	}
++	return out
++}
+diff --git a/src/crypto/tls/schannel_windows_test.go b/src/crypto/tls/schannel_windows_test.go
+new file mode 100644
+index 00000000000000..3387e8419b950f
+--- /dev/null
++++ b/src/crypto/tls/schannel_windows_test.go
+@@ -0,0 +1,81 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package tls
++
++import (
++	"bytes"
++	"os/exec"
++	"slices"
++	"sync"
++	"testing"
++)
++
++var schannelSuites = sync.OnceValue(func() []uint16 {
++	cipherSuites, err := cipherSuitesSchannel()
++	if err != nil {
++		panic(err) // This should never happen, as Schannel is always available on Windows.
++	}
++	return cipherSuites
++})
++
++func isSchannelCipherSuite(id uint16) bool {
++	return slices.Contains(schannelSuites(), id)
++}
++
++func TestCipherSuitesSchannel(t *testing.T) {
++	cipherSuites, err := cipherSuitesSchannel()
++	if err != nil {
++		t.Fatal(err)
++	}
++	if len(cipherSuites) == 0 {
++		t.Fatal("cipherSuitesSchannel returned no cipher suites")
++	}
++
++	for _, suite := range cipherSuites {
++		if suite == 0 {
++			t.Fatal("cipherSuitesSchannel returned a 0 cipher suite")
++		}
++	}
++
++	// Check that all the cipher suites are present in the Get-TlsCipherSuite output.
++	output, err := exec.Command("powershell", "-Command", "Get-TlsCipherSuite").CombinedOutput()
++	if err != nil {
++		t.Fatalf("failed to get TLS cipher suites: %v\n%s", err, output)
++	}
++	for _, id := range cipherSuites {
++		name := CipherSuiteName(id)
++		if !bytes.Contains(output, []byte(name)) {
++			t.Errorf("cipher suite %s not found in PowerShell output", name)
++		}
++	}
++}
++
++func TestCipherSuitePreferenceSchannel(t *testing.T) {
++	// Schannel should prefer AES-256 over AES-128.
++	serverConfig := &Config{
++		CipherSuites: []uint16{TLS_RSA_WITH_RC4_128_SHA, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384},
++		Certificates: testConfig.Certificates,
++		MaxVersion:   VersionTLS13,
++		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
++			if chi.CipherSuites[0] != TLS_AES_256_GCM_SHA384 {
++				t.Error("the advertised order should not depend on Config.CipherSuites")
++			}
++			return nil, nil
++		},
++	}
++	clientConfig := &Config{
++		CipherSuites:       []uint16{TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384},
++		InsecureSkipVerify: true,
++	}
++	state, _, err := testHandshake(t, clientConfig, serverConfig)
++	if err != nil {
++		t.Fatalf("handshake failed: %s", err)
++	}
++	if state.CipherSuite != TLS_AES_256_GCM_SHA384 {
++		t.Error("the preference order should not depend on Config.CipherSuites")
++	}
++}
+diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
+index bfcc62ccfb8ba0..737157b881881b 100644
+--- a/src/crypto/tls/tls_test.go
++++ b/src/crypto/tls/tls_test.go
+@@ -21,6 +21,7 @@ import (
+ 	"encoding/pem"
+ 	"errors"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"io"
+ 	"math"
+@@ -211,6 +212,10 @@ func skipFIPS(t *testing.T) {
+ 	if fips140tls.Required() {
+ 		t.Skip("skipping test in FIPS mode")
+ 	}
++	if goexperiment.MS_TLS_Config_Schannel {
++		// Reuse the FIPS skip logic for Schannel.
++		t.Skip("skipping test in Schannel mode")
++	}
+ }
+ 
+ func TestDialTimeout(t *testing.T) {
+@@ -1289,6 +1294,9 @@ func TestConnectionState(t *testing.T) {
+ 		if !isFIPSVersion(v) && fips140tls.Required() {
+ 			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
+ 		}
++		if goexperiment.MS_TLS_Config_Schannel && v < VersionTLS12 {
++			t.Skipf("skipping test for Schannel unsupported version %x", v)
++		}
+ 		var name string
+ 		switch v {
+ 		case VersionTLS10:
+@@ -1545,6 +1553,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+ }
+ 
+ func TestCipherSuites(t *testing.T) {
++	if goexperiment.MS_TLS_Config_Schannel {
++		// Schannel modifies the cipher suite list, so this test
++		// is not applicable.
++		t.Skip("skipping CipherSuites test in Schannel mode")
++	}
+ 	var lastID uint16
+ 	for _, c := range CipherSuites() {
+ 		if lastID > c.ID {
+diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+new file mode 100644
+index 00000000000000..db7790d1a1f1b9
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.ms_tls_config_schannel
++
++package goexperiment
++
++const MS_TLS_Config_Schannel = false
++const MS_TLS_Config_SchannelInt = 0
+diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+new file mode 100644
+index 00000000000000..a2dbc6187da2a0
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package goexperiment
++
++const MS_TLS_Config_Schannel = true
++const MS_TLS_Config_SchannelInt = 1
+diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
+index 6b4289503d57ae..90b046af1965f1 100644
+--- a/src/internal/goexperiment/flags.go
++++ b/src/internal/goexperiment/flags.go
+@@ -147,4 +147,8 @@ type Flags struct {
+ 
+ 	// GreenTeaGC enables the Green Tea GC implementation.
+ 	GreenTeaGC bool
++
++	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher suites
++	// according to the Windows Schannel settings.
++	MS_TLS_Config_Schannel bool
+ }
+diff --git a/src/internal/syscall/windows/security_windows.go b/src/internal/syscall/windows/security_windows.go
+index f0ab52ac819baf..d6ef32c0e5c089 100644
+--- a/src/internal/syscall/windows/security_windows.go
++++ b/src/internal/syscall/windows/security_windows.go
+@@ -262,3 +262,31 @@ func GetSidSubAuthorityCount(sid *syscall.SID) uint8 {
+ 	defer runtime.KeepAlive(sid)
+ 	return *(*uint8)(unsafe.Pointer(getSidSubAuthorityCount(sid)))
+ }
++
++const (
++	CRYPT_LOCAL = 0x00000001
++
++	CRYPT_UM = 0x00000001
++
++	NCRYPT_SCHANNEL_INTERFACE = 0x00010002
++)
++
++var SSL_CONTEXT = [...]uint16{'S', 'S', 'L', 0}
++
++type CRYPT_CONTEXT_FUNCTIONS struct {
++	Count     uint32
++	Functions **uint16 // pointer to an array of pointers to null-terminated UTF-16 function names
++}
++
++func (ccf *CRYPT_CONTEXT_FUNCTIONS) At(i int) *uint16 {
++	if i < 0 || i >= int(ccf.Count) {
++		panic("index out of range")
++	}
++	if ccf.Functions == nil || *ccf.Functions == nil {
++		return nil
++	}
++	return *(**uint16)(unsafe.Add(unsafe.Pointer(ccf.Functions), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
++
++//sys	BCryptFreeBuffer(buffer unsafe.Pointer) = bcrypt.BCryptFreeBuffer
++//sys	BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) = bcrypt.BCryptEnumContextFunctions
+diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
+index 90cf0b92a49bc4..db43b5da72f00e 100644
+--- a/src/internal/syscall/windows/zsyscall_windows.go
++++ b/src/internal/syscall/windows/zsyscall_windows.go
+@@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
+ 
+ var (
+ 	modadvapi32         = syscall.NewLazyDLL(sysdll.Add("advapi32.dll"))
++	modbcrypt           = syscall.NewLazyDLL(sysdll.Add("bcrypt.dll"))
+ 	modbcryptprimitives = syscall.NewLazyDLL(sysdll.Add("bcryptprimitives.dll"))
+ 	modiphlpapi         = syscall.NewLazyDLL(sysdll.Add("iphlpapi.dll"))
+ 	modkernel32         = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
+@@ -63,6 +64,8 @@ var (
+ 	procQueryServiceStatus                = modadvapi32.NewProc("QueryServiceStatus")
+ 	procRevertToSelf                      = modadvapi32.NewProc("RevertToSelf")
+ 	procSetTokenInformation               = modadvapi32.NewProc("SetTokenInformation")
++	procBCryptEnumContextFunctions        = modbcrypt.NewProc("BCryptEnumContextFunctions")
++	procBCryptFreeBuffer                  = modbcrypt.NewProc("BCryptFreeBuffer")
+ 	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
+ 	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
+ 	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
+@@ -242,6 +245,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+ 	return
+ }
+ 
++func BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) {
++	r0, _, _ := syscall.Syscall6(procBCryptEnumContextFunctions.Addr(), 5, uintptr(table), uintptr(unsafe.Pointer(context)), uintptr(iface), uintptr(unsafe.Pointer(bufferSize)), uintptr(unsafe.Pointer(buffer)), 0)
++	if r0 != 0 {
++		ntstatus = NTStatus(r0)
++	}
++	return
++}
++
++func BCryptFreeBuffer(buffer unsafe.Pointer) {
++	syscall.Syscall(procBCryptFreeBuffer.Addr(), 1, uintptr(buffer), 0, 0)
++	return
++}
++
+ func ProcessPrng(buf []byte) (err error) {
+ 	var _p0 *byte
+ 	if len(buf) > 0 {

From 566b5820ee25d6d13304c014374197094a408a47 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 4 Jul 2025 16:07:35 +0000
Subject: [PATCH 365/887] Update submodule to latest master (6c3b5a27):
 runtime: correct vdsoSP on S390X

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index b3251514531..6c3b5a2798c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit b3251514531123d7fd007682389bce7428d159a0
+Subproject commit 6c3b5a2798c83d583cb37dba9f39c47300d19f1f

From b2c4911c8d180372e6210940255c874aafa3125c Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 7 Jul 2025 10:35:34 +0200
Subject: [PATCH 366/887] Validate backend constraints while parsing
 goexperiments (#1723)

* validate backend constraints while parsing goexperiments

* add missing constraint

* fix tests

* remove code

* fix more tests

* fix test

* fix darwin test
---
 .../stages/go-builder-matrix-stages.yml       |  34 +-
 ...03-Implement-crypto-internal-backend.patch | 846 ++++++------------
 2 files changed, 301 insertions(+), 579 deletions(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 522bf0e145d..19106359464 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -82,25 +82,25 @@ stages:
         - ${{ if parameters.innerloop }}:
           - { os: darwin, arch: amd64, config: devscript }
           - { os: darwin, arch: amd64, config: test }
-          - { experiment: darwincrypto, os: darwin, arch: amd64, config: test }
-          - { experiment: darwincrypto, os: darwin, arch: amd64, config: test, fips: true }
+          - { experiment: systemcrypto, os: darwin, arch: amd64, config: test }
+          - { experiment: systemcrypto, os: darwin, arch: amd64, config: test, fips: true }
           # - { os: darwin, arch: arm64, config: devscript }
           # - { os: darwin, arch: arm64, config: test }
-          # - { experiment: darwincrypto, os: darwin, arch: arm64, config: test }
-          # - { experiment: darwincrypto, os: darwin, arch: arm64, config: test, fips: true }
+          # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test }
+          # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test, fips: true }
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
           - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: test }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: test, fips: true }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
           - { os: windows, arch: amd64, config: devscript }
           - { os: windows, arch: amd64, config: test }
-          - { experiment: cngcrypto, os: windows, arch: amd64, config: test }
-          - { experiment: cngcrypto, os: windows, arch: amd64, config: test, fips: true }
+          - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
+          - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
           - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { os: windows, hostArch: amd64, arch: 386, config: buildandpack }
@@ -115,9 +115,9 @@ stages:
           - { os: linux, arch: amd64, config: regabi }
           - { os: linux, arch: amd64, config: ssacheck }
           - { os: linux, arch: amd64, config: staticlockranking }
-          # - { experiment: opensslcrypto, os: linux, arch: amd64, config: clang } https://github.com/microsoft/go/issues/342
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: longtest }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: race }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: regabi }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: ssacheck }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: staticlockranking }
+          # - { experiment: systemcrypto, os: linux, arch: amd64, config: clang } https://github.com/microsoft/go/issues/342
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: longtest }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: race }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: regabi }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: ssacheck }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: staticlockranking }
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index d99c56ac862..39ee27b1907 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -10,13 +10,18 @@ Update the Go toolchain build settings so that it uses the
 desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
+ .../compile/internal/logopt/logopt_test.go    |   6 +-
+ .../compile/internal/ssa/stmtlines_test.go    |   1 -
  src/cmd/dist/build.go                         |   5 +
- src/cmd/dist/test.go                          |  17 +-
+ src/cmd/dist/test.go                          |  26 +-
+ src/cmd/go/go_test.go                         |   4 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/systemcrypto_test.go               | 144 +++++++
+ .../go/testdata/script/env_cross_build.txt    |   2 +
+ .../script/test_android_issue62123.txt        |   2 +
+ src/cmd/internal/testdir/testdir_test.go      |   7 +
+ src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
- src/crypto/internal/backend/backendgen.go     |  20 +
- .../internal/backend/backendgen_test.go       | 288 ++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
@@ -32,31 +37,23 @@ desired goexperiments and build tags.
  .../backend/fips140/nosystemcrypto.go         |  13 +
  .../internal/backend/fips140/openssl_cgo.go   |  59 +++
  .../internal/backend/fips140/openssl_nocgo.go |  17 +
+ .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
  .../internal/opensslsetup/opensslsetup.go     |  70 ++++
  .../opensslsetup/opensslsetup_test.go         |  92 +++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 253 ++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 251 ++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/zbackenderrconflict_cng_darwin.go  |  17 +
- src/crypto/zbackenderrconflict_cng_openssl.go |  17 +
- .../zbackenderrconflict_darwin_openssl.go     |  17 +
- src/crypto/zbackenderrnofallback_cng.go       |  20 +
- src/crypto/zbackenderrnofallback_darwin.go    |  20 +
- src/crypto/zbackenderrnofallback_openssl.go   |  20 +
- .../zbackenderrrequirefips_nosystemcrypto.go  |  17 +
- .../zbackenderrrequirefips_skipfipscheck.go   |  16 +
- .../zbackenderrsystemcrypto_nobackend.go      |  16 +
- src/go/build/deps_test.go                     |  30 +-
+ src/crypto/systemcrypto_nocgo.go              |  15 +
+ src/go/build/deps_test.go                     |  32 +-
+ src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 43 files changed, 2521 insertions(+), 9 deletions(-)
+ 42 files changed, 2172 insertions(+), 13 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
- create mode 100644 src/crypto/internal/backend/backendgen.go
- create mode 100644 src/crypto/internal/backend/backendgen_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
  create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
  create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
@@ -72,6 +69,7 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl_cgo.go
  create mode 100644 src/crypto/internal/backend/fips140/openssl_nocgo.go
+ create mode 100644 src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_off.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_on.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
@@ -80,15 +78,7 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/crypto/zbackenderrconflict_cng_darwin.go
- create mode 100644 src/crypto/zbackenderrconflict_cng_openssl.go
- create mode 100644 src/crypto/zbackenderrconflict_darwin_openssl.go
- create mode 100644 src/crypto/zbackenderrnofallback_cng.go
- create mode 100644 src/crypto/zbackenderrnofallback_darwin.go
- create mode 100644 src/crypto/zbackenderrnofallback_openssl.go
- create mode 100644 src/crypto/zbackenderrrequirefips_nosystemcrypto.go
- create mode 100644 src/crypto/zbackenderrrequirefips_skipfipscheck.go
- create mode 100644 src/crypto/zbackenderrsystemcrypto_nobackend.go
+ create mode 100644 src/crypto/systemcrypto_nocgo.go
 
 diff --git a/.gitignore b/.gitignore
 index c6512e64a4ef39..b3b01db73b009d 100644
@@ -103,6 +93,42 @@ index c6512e64a4ef39..b3b01db73b009d 100644
  # This file includes artifacts of Go build that should not be checked in.
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
+diff --git a/src/cmd/compile/internal/logopt/logopt_test.go b/src/cmd/compile/internal/logopt/logopt_test.go
+index 1edabf9fb7ff04..026f8cb0278ab6 100644
+--- a/src/cmd/compile/internal/logopt/logopt_test.go
++++ b/src/cmd/compile/internal/logopt/logopt_test.go
+@@ -5,6 +5,7 @@
+ package logopt
+ 
+ import (
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"os"
+ 	"path/filepath"
+@@ -147,7 +148,10 @@ func s15a8(x *[15]int64) [15]int64 {
+ 		arches := []string{runtime.GOARCH}
+ 		goos0 := runtime.GOOS
+ 		if runtime.GOARCH == "amd64" { // Test many things with "linux" (wasm will get "js")
+-			arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
++			if !goexperiment.SystemCrypto {
++				// SystemCrypto does not support cross-compilation.
++				arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
++			}
+ 			goos0 = "linux"
+ 		}
+ 
+diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
+index e17a5402af818d..e83c4c5b79d11b 100644
+--- a/src/cmd/compile/internal/ssa/stmtlines_test.go
++++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
+@@ -113,7 +113,6 @@ func TestStmtLines(t *testing.T) {
+ 		must(err)
+ 
+ 		var le dwarf.LineEntry
+-
+ 		for {
+ 			err := lrdr.Next(&le)
+ 			if err == io.EOF {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
 index 024050c2dd70c4..e8f388badaeb3c 100644
 --- a/src/cmd/dist/build.go
@@ -120,7 +146,7 @@ index 024050c2dd70c4..e8f388badaeb3c 100644
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
  	if debug {
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index aa09d1eba34be8..c2adb959460ac2 100644
+index aa09d1eba34be8..f4d720ab213eb1 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -150,7 +176,7 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  		}
  	}
  
-@@ -749,6 +751,11 @@ func (t *tester) registerTests() {
+@@ -749,11 +751,18 @@ func (t *tester) registerTests() {
  			variant: "jsonv2",
  			env:     []string{"GOEXPERIMENT=jsonv2"},
  			pkg:     "encoding/json/...",
@@ -162,7 +188,15 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  		})
  	}
  
-@@ -863,6 +870,11 @@ func (t *tester) registerTests() {
+ 	// Test ios/amd64 for the iOS simulator.
+-	if goos == "darwin" && goarch == "amd64" && t.cgoEnabled {
++	if goos == "darwin" && goarch == "amd64" && t.cgoEnabled &&
++		// IOS is not supported with darwincrypto.
++		!(strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
+ 		t.registerTest("GOOS=ios on darwin/amd64",
+ 			&goTest{
+ 				variant:  "amd64ios",
+@@ -863,6 +872,11 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -174,7 +208,7 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -871,6 +883,7 @@ func (t *tester) registerTests() {
+@@ -871,6 +885,7 @@ func (t *tester) registerTests() {
  				ldflags:   "-linkmode=internal",
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "reflect",
@@ -182,7 +216,7 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -881,6 +894,7 @@ func (t *tester) registerTests() {
+@@ -881,6 +896,7 @@ func (t *tester) registerTests() {
  				env:       []string{"CGO_ENABLED=0"},
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",
@@ -190,6 +224,28 @@ index aa09d1eba34be8..c2adb959460ac2 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
+diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
+index 3e691abe41f702..2c4eed0bc575cf 100644
+--- a/src/cmd/go/go_test.go
++++ b/src/cmd/go/go_test.go
+@@ -14,6 +14,7 @@ import (
+ 	"fmt"
+ 	"go/format"
+ 	"internal/godebug"
++	"internal/goexperiment"
+ 	"internal/platform"
+ 	"internal/testenv"
+ 	"io"
+@@ -1861,6 +1862,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+ }
+ 
+ func TestGoEnv(t *testing.T) {
++	if goexperiment.SystemCrypto {
++		t.Skip("freebsd is not supported by system crypto")
++	}
+ 	tg := testgo(t)
+ 	tg.parallel()
+ 	defer tg.cleanup()
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
 index e913f9885234fd..ef331980a816a3 100644
 --- a/src/cmd/go/internal/load/pkg.go
@@ -206,7 +262,7 @@ index e913f9885234fd..ef331980a816a3 100644
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..b2298b8157ae92
+index 00000000000000..33d85d0df477d7
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
 @@ -0,0 +1,144 @@
@@ -338,8 +394,8 @@ index 00000000000000..b2298b8157ae92
 +			out := outPath(t)
 +
 +			// Build the binary with the specified GOEXPERIMENT.
-+			fail, _ := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
-+			if fail && tt.enabled {
++			succed, _ := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
++			if !succed {
 +				t.Skip("skipping test because GOEXPERIMENT not supported by the current toolchain")
 +			}
 +
@@ -354,6 +410,80 @@ index 00000000000000..b2298b8157ae92
 +		})
 +	}
 +}
+diff --git a/src/cmd/go/testdata/script/env_cross_build.txt b/src/cmd/go/testdata/script/env_cross_build.txt
+index 91d1cb936d3652..b7f503d9506324 100644
+--- a/src/cmd/go/testdata/script/env_cross_build.txt
++++ b/src/cmd/go/testdata/script/env_cross_build.txt
+@@ -1,6 +1,8 @@
+ # Test that the correct default GOEXPERIMENT is used when cross
+ # building with GOENV (#46815).
+ 
++[GOEXPERIMENT:systemcrypto] skip # systemcrypto is not supported on ios nor mips
++
+ # Unset variables set by the TestScript harness. Users typically won't
+ # explicitly configure these, and #46815 doesn't repro if they are.
+ env GOOS=
+diff --git a/src/cmd/go/testdata/script/test_android_issue62123.txt b/src/cmd/go/testdata/script/test_android_issue62123.txt
+index 2f46a6b44bffe1..69071289e2de81 100644
+--- a/src/cmd/go/testdata/script/test_android_issue62123.txt
++++ b/src/cmd/go/testdata/script/test_android_issue62123.txt
+@@ -1,3 +1,5 @@
++[GOEXPERIMENT:systemcrypto] skip # systemcrypto is not supported on android
++
+ env GOOS=android GOARCH=amd64 CGO_ENABLED=0
+ 
+ ! go build -o $devnull cmd/buildid
+diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
+index 483a9ec33c6798..fad922e3f844ab 100644
+--- a/src/cmd/internal/testdir/testdir_test.go
++++ b/src/cmd/internal/testdir/testdir_test.go
+@@ -118,6 +118,13 @@ func Test(t *testing.T) {
+ 	goDebug = env.GODEBUG
+ 	tmpDir = t.TempDir()
+ 
++	if slices.ContainsFunc(strings.Split(goExperiment, ","), func(s string) bool {
++		return s == "systemcrypto" || s == "opensslcrypto" || s == "cngcrypto" || s == "darwincrypto"
++	}) {
++		// Codegen tests cross-compile to platforms that do not support system crypto.
++		*allCodegen = false
++	}
++
+ 	common := testCommon{
+ 		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
+ 		runoutputGate: make(chan bool, *runoutputLimit),
+diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
+index 2fe32600f1d6c7..f84cbdc5ee25f0 100644
+--- a/src/cmd/link/link_test.go
++++ b/src/cmd/link/link_test.go
+@@ -9,6 +9,7 @@ import (
+ 	"bytes"
+ 	"debug/macho"
+ 	"errors"
++	"internal/goexperiment"
+ 	"internal/platform"
+ 	"internal/testenv"
+ 	"os"
+@@ -280,6 +281,9 @@ func TestBuildForTvOS(t *testing.T) {
+ 	if runtime.GOOS != "darwin" {
+ 		t.Skip("skipping on non-darwin platform")
+ 	}
++	if goexperiment.SystemCrypto {
++		t.Skip("tvOS is not supported by system crypto")
++	}
+ 	if testing.Short() && os.Getenv("GO_BUILDER_NAME") == "" {
+ 		t.Skip("skipping in -short mode with $GO_BUILDER_NAME empty")
+ 	}
+@@ -512,6 +516,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
+ 		t.Skip("skipping on non-{linux,darwin}/amd64 platform")
+ 	}
+ 
++	if goexperiment.SystemCrypto {
++		t.Skip("skipping on system crypto, which does not support android/386")
++	}
++
+ 	t.Parallel()
+ 
+ 	tmpdir := t.TempDir()
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
 index 00000000000000..c2c06d3bff8c74
@@ -390,326 +520,6 @@ index 00000000000000..c2c06d3bff8c74
 +func TestUnreachableExceptTests(t *testing.T) {
 +	UnreachableExceptTests()
 +}
-diff --git a/src/crypto/internal/backend/backendgen.go b/src/crypto/internal/backend/backendgen.go
-new file mode 100644
-index 00000000000000..acf0113bbefb6c
---- /dev/null
-+++ b/src/crypto/internal/backend/backendgen.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+// Generate files and Go code based on the set of backends:
-+//
-+// - The build constraint in nobackend.go.
-+// - Go files in the runtime package that detect issues with backend selection
-+//   and report an error at compile time.
-+//
-+// Runs in -mod=readonly mode so that it is able to run during each crypto
-+// backend patch. This is before the final vendoring refresh patch, so it would
-+// normally fail to build due to inconsistent vendoring.
-+
-+// Use "go generate -run TestGenerated crypto/internal/backend"
-+// to run only this generator.
-+
-+//go:generate go test -run TestGenerated -fix
-diff --git a/src/crypto/internal/backend/backendgen_test.go b/src/crypto/internal/backend/backendgen_test.go
-new file mode 100644
-index 00000000000000..647d9f0b871aff
---- /dev/null
-+++ b/src/crypto/internal/backend/backendgen_test.go
-@@ -0,0 +1,288 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"bytes"
-+	"flag"
-+	"go/build/constraint"
-+	"go/parser"
-+	"go/token"
-+	"os"
-+	"path/filepath"
-+	"sort"
-+	"strings"
-+	"testing"
-+)
-+
-+var fix = flag.Bool("fix", false, "if true, update the generated files to the wanted value")
-+
-+const cryptoPackageDir = "../../../crypto"
-+
-+// backendErrPrefix is the prefix of the generated backend error files. Any file
-+// in the crypto package with this prefix will be considered a backend error
-+// file, so it's important that this prefix is unique or this generator may
-+// delete unexpected files.
-+const backendErrPrefix = "zbackenderr"
-+
-+const generateInstruction = "run 'go generate crypto/internal/backend' to fix"
-+
-+// TestGeneratedBackendErrorFiles tests that the current nobackend constraint
-+// is correct.
-+//
-+// Generate the build constraint in nobackend.go. This build constraint enables
-+// nobackend when all of the backends are not enabled. This constraint is fairly
-+// long and would not be trivial to maintain manually.
-+func TestGeneratedNobackendConstraint(t *testing.T) {
-+	backends := parseBackends(t)
-+	// none is a constraint that is met when all crypto backend constraints are
-+	// unmet. (That is: no backend constraint is met.)
-+	var none constraint.Expr
-+	for _, b := range backends {
-+		notB := &constraint.NotExpr{X: b.constraint}
-+		if none == nil {
-+			none = notB
-+		} else {
-+			none = &constraint.AndExpr{
-+				X: none,
-+				Y: notB,
-+			}
-+		}
-+	}
-+	bytes, err := os.ReadFile("nobackend.go")
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	lines := strings.Split(string(bytes), "\n")
-+
-+	var gotIndex int
-+	var gotLine string
-+	for i, line := range lines {
-+		if strings.HasPrefix(line, "//go:build ") {
-+			gotIndex, gotLine = i, line
-+			break
-+		}
-+	}
-+	_ = gotIndex
-+
-+	var wantLine string
-+	if none == nil {
-+		// If there are no backends yet, use a trivially true constraint.
-+		// We could remove the constraint line, but this would make generation
-+		// more complicated.
-+		wantLine = "//go:build go1.1"
-+	} else {
-+		wantLine = "//go:build " + none.String()
-+	}
-+	if wantLine != gotLine {
-+		if *fix {
-+			lines[gotIndex] = wantLine
-+			want := strings.Join(lines, "\n")
-+			if err := os.WriteFile("nobackend.go", []byte(want), 0o666); err != nil {
-+				t.Fatal(err)
-+			}
-+		} else {
-+			t.Errorf("nobackend.go build constraint:\ngot %q\nwant %q\n%v", gotLine, wantLine, generateInstruction)
-+		}
-+	}
-+}
-+
-+// TestGeneratedBackendErrorFiles tests that the current backend error files are
-+// the same as what would generated under the current conditions.
-+//
-+// The error files are Go files that detect issues with the backend selection
-+// and report an error at compile time.
-+//
-+// The issue detection files are placed in the crypto package rather than the
-+// crypto/internal/backend package to make sure these helpful errors will show
-+// up. If the files were in the backend package, DuplicateDecl and other errors
-+// would show up first, causing these informative errors to be skipped because
-+// there are too many total errors already reported.
-+//
-+// Issues will only be detected if the binary uses a crypto package, else
-+// the issue dection files will not be built and the errors will not be reported.
-+// That done on purpose to avoid putting unnecessary restrictions on applications
-+// that do not use crypto, like for example requiring cgo.
-+func TestGeneratedBackendErrorFiles(t *testing.T) {
-+	// Chip away at a list of files that should come from this generator.
-+	// Any remaining are unexpected.
-+	existingFiles := make(map[string]struct{})
-+	entries, err := os.ReadDir(cryptoPackageDir)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	for _, e := range entries {
-+		if strings.HasPrefix(e.Name(), backendErrPrefix) && strings.HasSuffix(e.Name(), ".go") {
-+			existingFiles[filepath.Join(cryptoPackageDir, e.Name())] = struct{}{}
-+		}
-+	}
-+
-+	backends := parseBackends(t)
-+	for i := 0; i < len(backends); i++ {
-+		for j := i + 1; j < len(backends); j++ {
-+			f := testConflict(t, backends[i].name, backends[j].name)
-+			delete(existingFiles, f)
-+		}
-+		f := testPreventUnintendedFallback(t, backends[i])
-+		delete(existingFiles, f)
-+	}
-+	f := testUnsatisfied(t, backends)
-+	delete(existingFiles, f)
-+	f = testRequireFIPSWithoutBackend(t)
-+	delete(existingFiles, f)
-+	f = testRequireFIPSWithSkipFIPSCheck(t)
-+	delete(existingFiles, f)
-+
-+	for f := range existingFiles {
-+		if *fix {
-+			if err := os.Remove(f); err != nil {
-+				t.Fatal(err)
-+			}
-+		} else {
-+			t.Errorf("unexpected file: %q", f)
-+		}
-+	}
-+	if !*fix && len(existingFiles) > 0 {
-+		t.Log(generateInstruction)
-+	}
-+}
-+
-+// testConflict checks/generates a file that fails if two backends are enabled
-+// at the same time.
-+func testConflict(t *testing.T, a, b string) string {
-+	return testErrorFile(
-+		t,
-+		filepath.Join(cryptoPackageDir, backendErrPrefix+"conflict_"+a+"_"+b+".go"),
-+		"//go:build goexperiment."+a+"crypto && goexperiment."+b+"crypto",
-+		"The "+a+" and "+b+" backends are both enabled, but they are mutually exclusive.",
-+		"Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.")
-+}
-+
-+func testPreventUnintendedFallback(t *testing.T, backend *backend) string {
-+	expTag := &constraint.TagExpr{Tag: "goexperiment." + backend.name + "crypto"}
-+	optOutTag := &constraint.TagExpr{Tag: "allowcryptofallback"}
-+	c := constraint.AndExpr{
-+		X: &constraint.AndExpr{
-+			X: expTag,
-+			Y: &constraint.NotExpr{X: backend.constraint},
-+		},
-+		Y: &constraint.NotExpr{X: optOutTag},
-+	}
-+	return testErrorFile(
-+		t,
-+		filepath.Join(cryptoPackageDir, backendErrPrefix+"nofallback_"+backend.name+".go"),
-+		"//go:build "+c.String(),
-+		"The "+expTag.String()+" tag is specified, but other tags required to enable that backend were not met.",
-+		"Required build tags:",
-+		"  "+backend.constraint.String(),
-+		"Please check your build environment and build command for a reason one or more of these tags weren't specified.",
-+		"")
-+}
-+
-+// testUnsatisfied checks/generates a file that fails if systemcrypto is enabled
-+// on an OS with no suitable backend.
-+func testUnsatisfied(t *testing.T, backends []*backend) string {
-+	constraint := "//go:build goexperiment.systemcrypto"
-+	for _, b := range backends {
-+		constraint += ` && !goexperiment.` + b.name + "crypto"
-+	}
-+	return testErrorFile(
-+		t,
-+		filepath.Join(cryptoPackageDir, backendErrPrefix+"systemcrypto_nobackend.go"),
-+		constraint,
-+		"The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.")
-+}
-+
-+func testRequireFIPSWithoutBackend(t *testing.T) string {
-+	return testErrorFile(
-+		t,
-+		filepath.Join(cryptoPackageDir, backendErrPrefix+"requirefips_nosystemcrypto.go"),
-+		"//go:build requirefips && !goexperiment.systemcrypto",
-+		"The requirefips tag is enabled, but no crypto backend is enabled.",
-+		"A crypto backend is required to enable FIPS mode.")
-+}
-+
-+func testRequireFIPSWithSkipFIPSCheck(t *testing.T) string {
-+	return testErrorFile(
-+		t,
-+		filepath.Join(cryptoPackageDir, backendErrPrefix+"requirefips_skipfipscheck.go"),
-+		"//go:build requirefips && ms_skipfipscheck",
-+		"The requirefips tag is enabled but conflicts with the ms_skipfipscheck tag.")
-+}
-+
-+// testErrorFile checks/generates a Go file with a given build constraint that
-+// fails to compile. The file uses an unused string to convey an error message
-+// to the dev on the "go build" command line.
-+func testErrorFile(t *testing.T, file, constraint string, message ...string) string {
-+	const header = `// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "` + backendErrPrefix + `".`
-+	c := header + "\n\n" + constraint + "\n\npackage crypto\n\nfunc init() {\n\t`\n"
-+	for _, m := range message {
-+		c += "\t" + m + "\n"
-+	}
-+	c += "\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips\n"
-+	c += "\t`" + "\n}\n"
-+	if *fix {
-+		if err := os.WriteFile(file, []byte(c), 0o666); err != nil {
-+			t.Fatal(err)
-+		}
-+	} else {
-+		existing, err := os.ReadFile(file)
-+		if err != nil {
-+			t.Fatal(err)
-+		}
-+		if !bytes.Equal(existing, []byte(c)) {
-+			t.Errorf("file %v doesn't match expected value; %v", file, generateInstruction)
-+			t.Log("found:", string(existing))
-+			t.Log("would generate:", c)
-+		}
-+	}
-+	return file
-+}
-+
-+type backend struct {
-+	filename   string
-+	name       string
-+	constraint constraint.Expr
-+}
-+
-+func parseBackends(t *testing.T) []*backend {
-+	fs := token.NewFileSet()
-+	pkgs, err := parser.ParseDir(fs, ".", nil, parser.ParseComments)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	var bs []*backend
-+	// Any file in this dir that defines "Enabled" is a backend.
-+	for k, v := range pkgs["backend"].Files {
-+		if en := v.Scope.Lookup("Enabled"); en != nil {
-+			// nobackend defines Enabled, but it is specifically not a backend.
-+			if k == "nobackend.go" {
-+				continue
-+			}
-+			b := backend{filename: k}
-+			b.name, _, _ = strings.Cut(strings.TrimSuffix(k, ".go"), "_")
-+			for _, comment := range v.Comments {
-+				for _, c := range comment.List {
-+					if strings.HasPrefix(c.Text, "//go:build ") {
-+						if c, err := constraint.Parse(c.Text); err == nil {
-+							b.constraint = c
-+						} else {
-+							t.Fatal(err)
-+						}
-+					}
-+				}
-+			}
-+			bs = append(bs, &b)
-+		}
-+	}
-+	sort.Slice(bs, func(i, j int) bool {
-+		return bs[i].name < bs[j].name
-+	})
-+	return bs
-+}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
 index 00000000000000..ab3f30825dcfa1
@@ -789,7 +599,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..448311cbfd3f10
+index 00000000000000..c5bffa7b6c3949
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,345 @@
@@ -797,7 +607,7 @@ index 00000000000000..448311cbfd3f10
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.cngcrypto && windows && (amd64 || arm64)
++//go:build goexperiment.cngcrypto && windows
 +
 +// Package cng provides access to CNGCrypto implementation functions.
 +// Check the variable Enabled to find out whether CNGCrypto is available.
@@ -1843,6 +1653,27 @@ index 00000000000000..a8ff666b6d182e
 +func systemFIPSMode() bool {
 +	return false
 +}
+diff --git a/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
+new file mode 100644
+index 00000000000000..dad6bcea9451e2
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
+@@ -0,0 +1,15 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build requirefips && !goexperiment.systemcrypto
++
++package fips140
++
++func init() {
++	`
++	The requirefips tag is enabled, but no crypto backend is enabled.
++	A crypto backend is required to enable FIPS mode.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
 diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_off.go b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
 new file mode 100644
 index 00000000000000..f60b10dfa3aaf3
@@ -2063,17 +1894,15 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..eb73b4e9cb57d8
+index 00000000000000..ce267825dc6ddc
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,253 @@
+@@ -0,0 +1,251 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// Do not edit the build constraint by hand. It is generated by "backendgen.go".
-+
-+//go:build !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !(goexperiment.darwincrypto && darwin && cgo) && !(goexperiment.opensslcrypto && linux && cgo)
++//go:build !goexperiment.systemcrypto || ((goexperiment.opensslcrypto || goexperiment.darwincrypto) && !cgo)
 +
 +package backend
 +
@@ -2674,224 +2503,40 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/zbackenderrconflict_cng_darwin.go b/src/crypto/zbackenderrconflict_cng_darwin.go
+diff --git a/src/crypto/systemcrypto_nocgo.go b/src/crypto/systemcrypto_nocgo.go
 new file mode 100644
-index 00000000000000..046f94d615efa7
+index 00000000000000..99cf22dc13ef89
 --- /dev/null
-+++ b/src/crypto/zbackenderrconflict_cng_darwin.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.cngcrypto && goexperiment.darwincrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The cng and darwin backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrconflict_cng_openssl.go b/src/crypto/zbackenderrconflict_cng_openssl.go
-new file mode 100644
-index 00000000000000..11070cf8303a8c
---- /dev/null
-+++ b/src/crypto/zbackenderrconflict_cng_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.cngcrypto && goexperiment.opensslcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The cng and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrconflict_darwin_openssl.go b/src/crypto/zbackenderrconflict_darwin_openssl.go
-new file mode 100644
-index 00000000000000..8d16f2133615bb
---- /dev/null
-+++ b/src/crypto/zbackenderrconflict_darwin_openssl.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.darwincrypto && goexperiment.opensslcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The darwin and openssl backends are both enabled, but they are mutually exclusive.
-+	Please make sure only one crypto backend experiment is enabled by GOEXPERIMENT or '-tags'.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrnofallback_cng.go b/src/crypto/zbackenderrnofallback_cng.go
-new file mode 100644
-index 00000000000000..50198a70ebb639
---- /dev/null
-+++ b/src/crypto/zbackenderrnofallback_cng.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.cngcrypto && !(goexperiment.cngcrypto && windows && (amd64 || arm64)) && !allowcryptofallback
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The goexperiment.cngcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.cngcrypto && windows && (amd64 || arm64)
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrnofallback_darwin.go b/src/crypto/zbackenderrnofallback_darwin.go
-new file mode 100644
-index 00000000000000..8b4c2a0b549e46
---- /dev/null
-+++ b/src/crypto/zbackenderrnofallback_darwin.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.darwincrypto && !(goexperiment.darwincrypto && darwin && cgo) && !allowcryptofallback
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The goexperiment.darwincrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.darwincrypto && darwin && cgo
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrnofallback_openssl.go b/src/crypto/zbackenderrnofallback_openssl.go
-new file mode 100644
-index 00000000000000..5f137d23b6bc97
---- /dev/null
-+++ b/src/crypto/zbackenderrnofallback_openssl.go
-@@ -0,0 +1,20 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
++++ b/src/crypto/systemcrypto_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.opensslcrypto && !(goexperiment.opensslcrypto && linux && cgo) && !allowcryptofallback
++//go:build !cgo && (goexperiment.opensslcrypto || goexperiment.darwincrypto) && !allowcryptofallback
 +
 +package crypto
 +
 +func init() {
 +	`
-+	The goexperiment.opensslcrypto tag is specified, but other tags required to enable that backend were not met.
-+	Required build tags:
-+	  goexperiment.opensslcrypto && linux && cgo
-+	Please check your build environment and build command for a reason one or more of these tags weren't specified.
++	Using a crypto backend requires CGO_ENABLED=1.
 +	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
-diff --git a/src/crypto/zbackenderrrequirefips_nosystemcrypto.go b/src/crypto/zbackenderrrequirefips_nosystemcrypto.go
-new file mode 100644
-index 00000000000000..91bede3aa030a5
---- /dev/null
-+++ b/src/crypto/zbackenderrrequirefips_nosystemcrypto.go
-@@ -0,0 +1,17 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build requirefips && !goexperiment.systemcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The requirefips tag is enabled, but no crypto backend is enabled.
-+	A crypto backend is required to enable FIPS mode.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrrequirefips_skipfipscheck.go b/src/crypto/zbackenderrrequirefips_skipfipscheck.go
-new file mode 100644
-index 00000000000000..8ba88a888eb8c0
---- /dev/null
-+++ b/src/crypto/zbackenderrrequirefips_skipfipscheck.go
-@@ -0,0 +1,16 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build requirefips && ms_skipfipscheck
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The requirefips tag is enabled but conflicts with the ms_skipfipscheck tag.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
-diff --git a/src/crypto/zbackenderrsystemcrypto_nobackend.go b/src/crypto/zbackenderrsystemcrypto_nobackend.go
-new file mode 100644
-index 00000000000000..73404496a46f07
---- /dev/null
-+++ b/src/crypto/zbackenderrsystemcrypto_nobackend.go
-@@ -0,0 +1,16 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// This file is generated by crypto/internal/backend. DO NOT EDIT. DO NOT manually create files with the prefix "zbackenderr".
-+
-+//go:build goexperiment.systemcrypto && !goexperiment.cngcrypto && !goexperiment.darwincrypto && !goexperiment.opensslcrypto
-+
-+package crypto
-+
-+func init() {
-+	`
-+	The systemcrypto feature is enabled, but it was unable to enable an appropriate crypto backend for the target GOOS.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 9b7613a62b5a31..eddaf170772e19 100644
+index 9b7613a62b5a31..1997d90f2f20ba 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
+@@ -348,7 +348,7 @@ var depsRules = `
+ 	math/big, go/token
+ 	< go/constant;
+ 
+-	FMT, internal/goexperiment
++	FMT, internal/goexperiment, internal/platform
+ 	< internal/buildcfg;
+ 
+ 	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
 @@ -537,6 +537,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
@@ -2951,6 +2596,83 @@ index 9b7613a62b5a31..eddaf170772e19 100644
  	< crypto/internal/fips140cache
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
+diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
+index bba73cfab9a108..c6bc4f165e6048 100644
+--- a/src/internal/buildcfg/exp.go
++++ b/src/internal/buildcfg/exp.go
+@@ -5,11 +5,14 @@
+ package buildcfg
+ 
+ import (
++	"errors"
+ 	"fmt"
+ 	"reflect"
++	"slices"
+ 	"strings"
+ 
+ 	"internal/goexperiment"
++	goplatform "internal/platform"
+ )
+ 
+ // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
+@@ -167,6 +170,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 	if flags.BoringCrypto {
+ 		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
+ 	}
++	// Check crypto backend conflicts.
++	type platform struct {
++		goos   string
++		goarch []string // if nil or empty, enabled on all architectures
++	}
++	var backends = []struct {
++		name     string
++		enabled  bool
++		platform []platform
++	}{
++		{"systemcrypto", flags.SystemCrypto, []platform{
++			{"linux", nil},
++			{"windows", []string{"amd64", "arm64"}},
++			{"darwin", nil},
++		}},
++		{"opensslcrypto", flags.OpenSSLCrypto, []platform{{"linux", nil}}},
++		{"cngcrypto", flags.CNGCrypto, []platform{{"windows", []string{"amd64", "arm64"}}}},
++		{"darwincrypto", flags.DarwinCrypto, []platform{{"darwin", nil}}},
++	}
++	var errs []string
++	for i, backend := range backends {
++		if !backend.enabled {
++			continue
++		}
++		// Don't report an error if the build mode is not supported,
++		// since that is not a problem with the experiment configuration.
++		if goplatform.BuildModeSupported("gc", "default", goos, goarch) {
++			if !slices.ContainsFunc(backend.platform, func(p platform) bool { return p.goos == goos }) {
++				errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s is not supported on %s", backend.name, goos))
++			} else {
++				for _, platform := range backend.platform {
++					if platform.goos == goos && (len(platform.goarch) > 0 && !slices.Contains(platform.goarch, goarch)) {
++						errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s is not supported on %s/%s", backend.name, goos, goarch))
++					}
++				}
++			}
++		}
++		if backend.name != "systemcrypto" { // systemcrypto can coexist with other valid backends
++			for _, backend2 := range backends[i+1:] {
++				if !backend2.enabled {
++					continue
++				}
++				errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s and %s are both enabled, but they are mutually exclusive",
++					backend.name, backend2.name))
++			}
++		}
++	}
++	if len(errs) > 0 {
++		errs = append(errs, "For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips")
++		return nil, errors.New(strings.Join(errs, "\n\t"))
++	}
+ 	return flags, nil
+ }
+ 
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
 index 831ee67afc952d..d2f00d57c10286 100644
 --- a/src/runtime/runtime_boring.go

From 7133848f8fab6b757f68d8b825a17ff88f340316 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 7 Jul 2025 16:37:22 +0000
Subject: [PATCH 367/887] Update submodule to latest master (20978f46):
 crypto/rsa: remove another forgotten note to future self

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 6c3b5a2798c..20978f46fdf 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 6c3b5a2798c83d583cb37dba9f39c47300d19f1f
+Subproject commit 20978f46fdf097cf3d9164918441dd296ee274f2

From 4a0192bc99150d0906d5b46a759470b9cac541fa Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 8 Jul 2025 10:47:38 +0200
Subject: [PATCH 368/887] Remove `allowcryptofallback` (#1713)

* remove allowcryptofallback

* fix darwin tests

* fix darwin tests

* fix darwin tests

* fix darwin tests

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* code review comments

* fix cmd/compile

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/fips/README.md                        |  10 +-
 ...03-Implement-crypto-internal-backend.patch | 150 ++++++++++++++----
 2 files changed, 128 insertions(+), 32 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 428f15efd56..46a4be0e68e 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -437,15 +437,15 @@ This list of major changes is intended for quick reference and for access to his
 
 - Running `go version -m` on a binary which uses a system crypto backend now shows the `microsoft_systemcrypto=1` build setting.
 
- - The build-time backend compatibility check now only runs when a crypto package is required for the build.
-   - If your app doesn't depend on a crypto package, you may, for example, use `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`.
-   - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
+- The build-time backend compatibility check now only runs when a crypto package is required for the build.
+  - If your app doesn't depend on a crypto package, you may, for example, use `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`.
+  - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
 
 - `GOFIPS=0` support has been removed. It now has no effect.
 
-- `GOEXPERIMENT=boringcrypto` support has been removed.
+- `GOEXPERIMENT=boringcrypto` has been removed.
 
-- `GOEXPERIMENT=allowcryptofallback` has been downgraded to the `allowcryptofallback` build tag. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
+- `GOEXPERIMENT=allowcryptofallback` has been removed. Instead, if it's necessary to opt out from using a system crypto backend, use `GOEXPERIMENT=nosystemcrypto`. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
 
 ### Go 1.24 (Feb 2025)
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 39ee27b1907..cec96a3e5db 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -12,9 +12,10 @@ desired goexperiments and build tags.
  .gitignore                                    |   2 +
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  .../compile/internal/ssa/stmtlines_test.go    |   1 -
- src/cmd/dist/build.go                         |   5 +
- src/cmd/dist/test.go                          |  26 +-
- src/cmd/go/go_test.go                         |   4 +
+ src/cmd/compile/script_test.go                |   8 +
+ src/cmd/dist/build.go                         |  11 +
+ src/cmd/dist/test.go                          |  44 ++-
+ src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/systemcrypto_test.go               | 144 +++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
@@ -51,7 +52,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 42 files changed, 2172 insertions(+), 13 deletions(-)
+ 43 files changed, 2207 insertions(+), 17 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -129,31 +130,70 @@ index e17a5402af818d..e83c4c5b79d11b 100644
  		for {
  			err := lrdr.Next(&le)
  			if err == io.EOF {
+diff --git a/src/cmd/compile/script_test.go b/src/cmd/compile/script_test.go
+index 0e32e0769ee2e2..eda2d576acc6c6 100644
+--- a/src/cmd/compile/script_test.go
++++ b/src/cmd/compile/script_test.go
+@@ -7,6 +7,7 @@ package main
+ import (
+ 	"cmd/internal/script/scripttest"
+ 	"flag"
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"os"
+ 	"runtime"
+@@ -50,6 +51,13 @@ func TestScript(t *testing.T) {
+ 		// the installed linker with our test binary.
+ 		doReplacement = false
+ 	}
++	if goexperiment.SystemCrypto {
++		// If systemcrypto is enabled, we can't replace the compiler
++		// because the test binary is built with systemcrypto, but the
++		// compiler is not. This would cause a mismatch in the
++		// compiler version check in the script tests.
++		doReplacement = false
++	}
+ 	repls := []scripttest.ToolReplacement{}
+ 	if doReplacement {
+ 		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 024050c2dd70c4..e8f388badaeb3c 100644
+index 024050c2dd70c4..3c82b7436d10bf 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1548,6 +1548,11 @@ func cmdbootstrap() {
+@@ -1387,6 +1387,12 @@ func toolenv() []string {
+ 		// still have full paths for stack traces for compiler crashes and the like.
+ 		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
+ 	}
++	if goexp := os.Getenv("GOEXPERIMENT"); goexp != "" {
++		// Remove systemcrypto from GOEXPERIMENT: to favor portability, the
++		// Microsoft build of Go should not use it. Go only uses crypto packages
++		// for non-crypto purposes, such as generating build IDs.
++		env = append(env, "GOEXPERIMENT="+goexp+",nosystemcrypto")
++	}
+ 	return env
+ }
+ 
+@@ -1548,6 +1554,11 @@ func cmdbootstrap() {
  	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
  	os.Setenv("GOEXPERIMENT", goexperiment)
-+	// Build the Go toolchain with "-tags=allowcryptofallback,ms_skipfipscheck". This
++	// Build the Go toolchain with "-tags=ms_skipfipscheck". This
 +	// allows toolchains not built with the systemcrypto goexperiment to be used
 +	// when GODEBUG=fips140=on is set. For example, when running
 +	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
-+	os.Setenv("GOFLAGS", "-tags=allowcryptofallback,ms_skipfipscheck")
++	os.Setenv("GOFLAGS", "-tags=ms_skipfipscheck")
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
  	if debug {
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index aa09d1eba34be8..f4d720ab213eb1 100644
+index aa09d1eba34be8..c3f3a8324c507c 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
  		}
  	}
  
-+	tags := []string{"-tags=allowcryptofallback,ms_skipfipscheck"}
++	tags := []string{"-tags=ms_skipfipscheck"}
 +
  	if t.rebuild {
  		t.out("Building packages and commands.")
@@ -196,36 +236,78 @@ index aa09d1eba34be8..f4d720ab213eb1 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -863,6 +872,11 @@ func (t *tester) registerTests() {
+@@ -863,14 +872,21 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
-+		var tags []string
++		var tags, env []string
 +		if goos != "windows" {
 +			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
-+			tags = append(tags, "allowcryptofallback,ms_skipfipscheck")
++			tags = append(tags, "ms_skipfipscheck")
++			env = append(env, "GOEXPERIMENT=nosystemcrypto")
 +		}
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
  				variant:   "pie_internal",
-@@ -871,6 +885,7 @@ func (t *tester) registerTests() {
+ 				timeout:   60 * time.Second,
+ 				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
- 				env:       []string{"CGO_ENABLED=0"},
+-				env:       []string{"CGO_ENABLED=0"},
++				env:       append([]string{"CGO_ENABLED=0"}, env...),
  				pkg:       "reflect",
 +				tags:      tags,
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -881,6 +896,7 @@ func (t *tester) registerTests() {
- 				env:       []string{"CGO_ENABLED=0"},
+@@ -878,9 +894,10 @@ func (t *tester) registerTests() {
+ 				timeout:   60 * time.Second,
+ 				buildmode: "pie",
+ 				ldflags:   "-linkmode=internal",
+-				env:       []string{"CGO_ENABLED=0"},
++				env:       append([]string{"CGO_ENABLED=0"}, env...),
  				pkg:       "crypto/internal/fips140test",
  				runTests:  "TestFIPSCheck",
 +				tags:      tags,
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
+@@ -897,15 +914,22 @@ func (t *tester) registerTests() {
+ 
+ 	if t.extLink() && !t.compileOnly {
+ 		if goos != "android" { // Android does not support non-PIE linking
++			var tags, env []string
++			if goos == "darwin" {
++				// Darwincrypto doesn't support external linking.
++				tags = append(tags, "ms_skipfipscheck")
++				env = append(env, "GOEXPERIMENT=nosystemcrypto")
++			}
+ 			t.registerTest("external linking, -buildmode=exe",
+ 				&goTest{
+ 					variant:   "exe_external",
+ 					timeout:   60 * time.Second,
+ 					buildmode: "exe",
+ 					ldflags:   "-linkmode=external",
+-					env:       []string{"CGO_ENABLED=1"},
++					env:       append([]string{"CGO_ENABLED=1"}, env...),
+ 					pkg:       "crypto/internal/fips140test",
+ 					runTests:  "TestFIPSCheck",
++					tags:      tags,
+ 				})
+ 		}
+ 		if t.externalLinkPIE() && !disablePIE {
+@@ -984,7 +1008,9 @@ func (t *tester) registerTests() {
+ 		t.registerRaceTests()
+ 	}
+ 
+-	if goos != "android" && !t.iOS() {
++	// cmd/internal/testdir uses -buildmode=exe on darwin,
++	// which is not supported by darwincrypto.
++	if goos != "android" && !t.iOS() && !(strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
+ 		// Only start multiple test dir shards on builders,
+ 		// where they get distributed to multiple machines.
+ 		// See issues 20141 and 31834.
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
-index 3e691abe41f702..2c4eed0bc575cf 100644
+index 3e691abe41f702..b799031d598892 100644
 --- a/src/cmd/go/go_test.go
 +++ b/src/cmd/go/go_test.go
 @@ -14,6 +14,7 @@ import (
@@ -236,7 +318,21 @@ index 3e691abe41f702..2c4eed0bc575cf 100644
  	"internal/platform"
  	"internal/testenv"
  	"io"
-@@ -1861,6 +1862,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+@@ -111,6 +112,13 @@ func TestMain(m *testing.M) {
+ 		if v := os.Getenv("TESTGO_TOOLCHAIN_VERSION"); v != "" {
+ 			work.ToolchainVersion = v
+ 		}
++		// Remove the " X:systemcrypto" suffix from the toolchain version,
++		// else it won't match the compiler version and the tests will fail.
++		// This happens because "go" invocations inside TestScript don't
++		// really call the go binary, which is never built with systemcrypto,
++		// but it instead calls the test binary with CMDGO_TEST_RUN_MAIN=1,
++		// which can be built with systemcrypto.
++		work.ToolchainVersion = strings.ReplaceAll(work.ToolchainVersion, " X:systemcrypto", "")
+ 
+ 		if testGOROOT := os.Getenv("TESTGO_GOROOT"); testGOROOT != "" {
+ 			// Disallow installs to the GOROOT from which testgo was built.
+@@ -1861,6 +1869,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
  }
  
  func TestGoEnv(t *testing.T) {
@@ -2505,7 +2601,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo.go b/src/crypto/systemcrypto_nocgo.go
 new file mode 100644
-index 00000000000000..99cf22dc13ef89
+index 00000000000000..13782a8241b99a
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo.go
 @@ -0,0 +1,15 @@
@@ -2513,7 +2609,7 @@ index 00000000000000..99cf22dc13ef89
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && (goexperiment.opensslcrypto || goexperiment.darwincrypto) && !allowcryptofallback
++//go:build !cgo && (goexperiment.opensslcrypto || goexperiment.darwincrypto)
 +
 +package crypto
 +
@@ -2687,15 +2783,15 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +	return boring_runtime_arg0()
 +}
 diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index 69d49169446d1c..9c16f665d4a223 100644
+index 69d49169446d1c..e6d344ff67a8aa 100644
 --- a/src/syscall/exec_linux_test.go
 +++ b/src/syscall/exec_linux_test.go
-@@ -299,7 +299,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
- 		}
+@@ -300,7 +300,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
  	})
  
--	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
-+	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-tags=allowcryptofallback", "-o", x, "syscall")
- 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
+ 	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
+-	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
++	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0", "GOEXPERIMENT=nosystemcrypto")
  	if o, err := cmd.CombinedOutput(); err != nil {
  		t.Fatalf("%v: %v\n%s", cmd, err, o)
+ 	}

From f6567897a35bcc5cc62d6a122b073863ce8a372c Mon Sep 17 00:00:00 2001
From: Mert Akman <mertakman2012@gmail.com>
Date: Tue, 8 Jul 2025 17:02:50 +0100
Subject: [PATCH 369/887] Fix Ed25519 tests for supported algorithm check.
 (#1726)

* add comment on skipping reason

* fix: remove unnecessary skip
---
 patches/0004-Use-crypto-backends.patch | 34 +++++++++++++++-----------
 1 file changed, 20 insertions(+), 14 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 9a728288290..07f0a6276bb 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -67,7 +67,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha256/sha256_test.go              |  20 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  24 ++-
- src/crypto/tls/auth_test.go                   |   1 +
+ src/crypto/tls/auth_test.go                   |   7 +
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/defaults_boring.go             |   2 +-
  src/crypto/tls/defaults_fips140.go            |   2 +-
@@ -90,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 86 files changed, 1154 insertions(+), 96 deletions(-)
+ 86 files changed, 1160 insertions(+), 96 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -116,7 +116,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index c2adb959460ac2..ee766afaca06e7 100644
+index c3f3a8324c507c..aedd8cd2902f27 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -719,7 +719,7 @@ func (t *tester) registerTests() {
@@ -128,7 +128,7 @@ index c2adb959460ac2..ee766afaca06e7 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1199,6 +1199,11 @@ func (t *tester) internalLink() bool {
+@@ -1211,6 +1211,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -140,7 +140,7 @@ index c2adb959460ac2..ee766afaca06e7 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1362,12 +1367,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1374,12 +1379,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -2318,17 +2318,23 @@ index 080bf694f03652..8962a54f1bcddd 100644
  	})
  }
 diff --git a/src/crypto/tls/auth_test.go b/src/crypto/tls/auth_test.go
-index 727bdc4df76393..8fd9fc75cf05ef 100644
+index 727bdc4df76393..73dee851e1bb4a 100644
 --- a/src/crypto/tls/auth_test.go
 +++ b/src/crypto/tls/auth_test.go
-@@ -12,6 +12,7 @@ import (
- )
+@@ -67,6 +67,13 @@ func TestSignatureSelection(t *testing.T) {
+ 			t.Logf("skipping test[%d] - not compatible with TLS FIPS mode", testNo)
+ 			continue
+ 		}
++
++		if fips140tls.Required() && test.expectedSigAlg == Ed25519 {
++			// CNG and SymCrypt do not support Ed25519.
++			t.Logf("skipping test[%d] - Ed25519 is not compatible with Microsoft TLS FIPS mode", testNo)
++			continue
++		}
++
+ 		savedGODEBUG := os.Getenv("GODEBUG")
+ 		os.Setenv("GODEBUG", savedGODEBUG+","+test.godebug)
  
- func TestSignatureSelection(t *testing.T) {
-+	t.Skip("Skipping this test until #1715 is resolved.")
- 	rsaCert := &Certificate{
- 		Certificate: [][]byte{testRSACertificate},
- 		PrivateKey:  testRSAPrivateKey,
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index 2a96fa69036a07..f3c19c7faf1c21 100644
 --- a/src/crypto/tls/cipher_suites.go
@@ -2831,7 +2837,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index eddaf170772e19..dbd96efb9a7dce 100644
+index 1997d90f2f20ba..f69862c628eea4 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -517,7 +517,7 @@ var depsRules = `

From 5b7153553abd33c5ca7b5949444514616e6f6da6 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 8 Jul 2025 21:18:29 +0100
Subject: [PATCH 370/887] Update area path in tsaoptions.json

Some BinSkim issues have been showing up in Jared's area path, moving them to the non-dotnet spcific area path
---
 .config/tsa/tsaoptions.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.config/tsa/tsaoptions.json b/.config/tsa/tsaoptions.json
index c67efa26b34..8a0660b7893 100644
--- a/.config/tsa/tsaoptions.json
+++ b/.config/tsa/tsaoptions.json
@@ -8,7 +8,7 @@
   ],
   "instanceUrl": "https://devdiv.visualstudio.com/",
   "projectName": "DEVDIV",
-  "areaPath": "DevDiv\\NET Compilers\\GoLang",
+  "areaPath": "DevDiv\\GoLang",
   "iterationPath": "DevDiv",
   "allTools": true
 }

From 7a77bb18224e95fde5b332cd9e12387865f1a9ed Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 9 Jul 2025 17:57:25 +0200
Subject: [PATCH 371/887] document that `requirefips` only works if `crypto` is
 imported (#1732)

---
 eng/doc/fips/README.md                        |  2 +-
 ...03-Implement-crypto-internal-backend.patch | 20 +++++++++----------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 46a4be0e68e..c582cfca84b 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -292,7 +292,7 @@ If a Windows system is in FIPS mode, CNG is already in FIPS mode, and the fork e
 
 ### Build option to require FIPS mode
 
-FIPS mode preference is normally determined at runtime, but the `GOFIPS140=latest` and `requirefips` options can be used to make a program always require FIPS mode and panic if FIPS mode is not enabled:
+FIPS mode preference is normally determined at runtime, but the `GOFIPS140=latest` and `requirefips` options can be used to make a program (that depends on the `crypto` package) always require FIPS mode and panic if FIPS mode is not enabled:
 
 - The `requirefips` build tag is available since Go 1.21. See [the "GOFLAGS" example in the build section](#modify-the-build-command).
 - The `GOFIPS140=latest` environment variable is available since Go 1.24.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index cec96a3e5db..5a8cf17fa31 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -119,7 +119,7 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  		}
  
 diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
-index e17a5402af818d..e83c4c5b79d11b 100644
+index 8cd11e9828e0f9..4de8629a078d58 100644
 --- a/src/cmd/compile/internal/ssa/stmtlines_test.go
 +++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
 @@ -113,7 +113,6 @@ func TestStmtLines(t *testing.T) {
@@ -358,7 +358,7 @@ index e913f9885234fd..ef331980a816a3 100644
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..33d85d0df477d7
+index 00000000000000..5ee9c2e050cf24
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
 @@ -0,0 +1,144 @@
@@ -402,7 +402,7 @@ index 00000000000000..33d85d0df477d7
 +}
 +`
 +
-+func execGoTool(t *testing.T, allowFail bool, env []string, args ...string) (bool, string) {
++func execGoTool(t *testing.T, allowFail bool, env []string, args ...string) (string, bool) {
 +	t.Helper()
 +	cmd := testenv.Command(t, testenv.GoToolPath(t), args...)
 +	cmd = testenv.CleanCmdEnv(cmd)
@@ -411,11 +411,11 @@ index 00000000000000..33d85d0df477d7
 +	sout := strings.TrimSpace(string(out))
 +	if err != nil {
 +		if allowFail {
-+			return false, sout
++			return sout, false
 +		}
 +		t.Fatalf("go build failed: %v\n%s", err, out)
 +	}
-+	return true, sout
++	return sout, true
 +}
 +
 +// writeFile creates a temporary file with the given content and returns its path.
@@ -490,13 +490,13 @@ index 00000000000000..33d85d0df477d7
 +			out := outPath(t)
 +
 +			// Build the binary with the specified GOEXPERIMENT.
-+			succed, _ := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
-+			if !succed {
++			_, ok := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
++			if !ok {
 +				t.Skip("skipping test because GOEXPERIMENT not supported by the current toolchain")
 +			}
 +
 +			// Check that the binary has the correct settings.
-+			_, settings := execGoTool(t, false, nil, "version", "-m", out)
++			settings, _ := execGoTool(t, false, nil, "version", "-m", out)
 +			hashSetting := strings.Contains(settings, "microsoft_systemcrypto=1")
 +			if tt.enabled && !hashSetting {
 +				t.Errorf("expected microsoft_systemcrypto=1 in settings, got %v", settings)
@@ -2693,7 +2693,7 @@ index 9b7613a62b5a31..1997d90f2f20ba 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index bba73cfab9a108..c6bc4f165e6048 100644
+index bba73cfab9a108..11ffdf2213dc7b 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,11 +5,14 @@
@@ -2754,7 +2754,7 @@ index bba73cfab9a108..c6bc4f165e6048 100644
 +		}
 +		if backend.name != "systemcrypto" { // systemcrypto can coexist with other valid backends
 +			for _, backend2 := range backends[i+1:] {
-+				if !backend2.enabled {
++				if !backend2.enabled || backend2.name == "systemcrypto" {
 +					continue
 +				}
 +				errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s and %s are both enabled, but they are mutually exclusive",

From d2007ad77c4c921541e4ef9801c7612726a89ee3 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 9 Jul 2025 16:08:28 +0000
Subject: [PATCH 372/887] Update submodule to latest master (67c17044):
 crypto/tls: empty server_name conf. ext. from server

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 20978f46fdf..67c1704444b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 20978f46fdf097cf3d9164918441dd296ee274f2
+Subproject commit 67c1704444ba9661699a80d0ea0a2df20b4107e2

From 917347439ecb471d1271825e00a9718b50ee5582 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 10 Jul 2025 12:03:50 +0100
Subject: [PATCH 373/887] move vendor checks to patch-build.yml (#1734)

* move vendor checks to patch-build.yml

* test with broken vendor patch

* remove test change
---
 .github/workflows/patch-build.yml | 17 +++++++++++++----
 .github/workflows/test.yml        | 19 -------------------
 2 files changed, 13 insertions(+), 23 deletions(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 55f6160d2c3..c50eade202d 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -10,6 +10,10 @@ on:
   pull_request:
     branches: [ microsoft/* ]
 
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/microsoft/main' }}
+
 jobs:
   build_patches:
     name: Patches Build in Order
@@ -29,10 +33,15 @@ jobs:
         run: |
           for file in $(ls -v patches/*.patch); do
             echo "::group::Building $file"
-            cd go
-            git am --whitespace=nowarn ../$file
-            cd src
+            cd ${{ github.workspace }}/go
+            git am --whitespace=nowarn ${{ github.workspace }}/$file
+            cd ${{ github.workspace }}/go/src
             bash make.bash
-            cd ../../
+            ${{ github.workspace }}/go/bin/go mod vendor
+            cd ${{ github.workspace }}/go/src/cmd
+            ${{ github.workspace }}/go/bin/go mod vendor
+            cd ${{ github.workspace }}/go/src
+            # Check if the vendor directory is clean
+            git diff --exit-code vendor cmd/vendor || (echo "Vendor directories are not clean. Please run 'go mod vendor' in the appropriate directories and commit the changes." && exit 1)
             echo "::endgroup::"
           done
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 15eea64ba6e..b25c85d3124 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,22 +31,3 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow
-
-      - name: Build Go toolchain
-        working-directory: go/src
-        run: ./make.bash
-
-      - name: Run go mod vendor (go/src)
-        working-directory: go/src
-        run: |
-          ../bin/go mod vendor
-
-      - name: Run go mod vendor (go/src/cmd)
-        working-directory: go/src/cmd
-        run: |
-          ../../bin/go mod vendor
-
-      - name: Check if vendor directory is clean
-        working-directory: go/src
-        run: |
-          git diff --exit-code vendor cmd/vendor || (echo "Vendor directories are not clean. Please run 'go mod vendor' in the appropriate directories and commit the changes." && exit 1)

From 2733d98ddeea0c96dba096d9290ac2823ecdb287 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 10 Jul 2025 12:06:11 +0100
Subject: [PATCH 374/887] build(deps): bump golang.org/x/sys from 0.33.0 to
 0.34.0 in /eng/_util (#1735)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.33.0 to 0.34.0.
- [Commits](https://github.com/golang/sys/compare/v0.33.0...v0.34.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 458bb38a941..164d0d33dde 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/net v0.41.0
-	golang.org/x/sys v0.33.0
+	golang.org/x/sys v0.34.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 76df5a72828..b422ca82ef0 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -13,8 +13,8 @@ github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
 golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
-golang.org/x/sys v0.33.0 h1:q3i8TbbEz+JRD9ywIRlyRAQbM0qF7hu24q3teo2hbuw=
-golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/sys v0.34.0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA=
+golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/text v0.26.0 h1:P42AVeLghgTYr4+xUnTRKDMqpar+PtX7KWuNQL21L8M=
 golang.org/x/text v0.26.0/go.mod h1:QK15LZJUUQVJxhz7wXgxSy/CJaTFjd0G+YLonydOVQA=
 golang.org/x/tools v0.33.0 h1:4qz2S3zmRxbGIhDIAgjxvFutSvH5EfnsYrRBj0UI0bc=

From 4ff5c062653784b8b746288aa3dd8fef9d7c2a06 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 11 Jul 2025 16:07:01 +0000
Subject: [PATCH 375/887] Update submodule to latest master (88cf0c5d):
 cmd/link: do size fixups after symbol references are loaded

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 67c1704444b..88cf0c5d55a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 67c1704444ba9661699a80d0ea0a2df20b4107e2
+Subproject commit 88cf0c5d55a8c18da515485f4a3fcf008b96cb07

From 149f9495694eb032f0139c147b2fa26a96ad85ce Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 11 Jul 2025 10:15:19 -0700
Subject: [PATCH 376/887] build(deps): bump golang.org/x/net from 0.41.0 to
 0.42.0 in /eng/_util (#1736)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/net/compare/v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  4 ++--
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 164d0d33dde..b4b942b64fd 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/net v0.41.0
+	golang.org/x/net v0.42.0
 	golang.org/x/sys v0.34.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.26.0 // indirect
+	golang.org/x/text v0.27.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index b422ca82ef0..1afacbd1883 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
-golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
+golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
+golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
 golang.org/x/sys v0.34.0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA=
 golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.26.0 h1:P42AVeLghgTYr4+xUnTRKDMqpar+PtX7KWuNQL21L8M=
-golang.org/x/text v0.26.0/go.mod h1:QK15LZJUUQVJxhz7wXgxSy/CJaTFjd0G+YLonydOVQA=
-golang.org/x/tools v0.33.0 h1:4qz2S3zmRxbGIhDIAgjxvFutSvH5EfnsYrRBj0UI0bc=
-golang.org/x/tools v0.33.0/go.mod h1:CIJMaWEY88juyUfo7UbgPqbC8rU2OqfAV1h2Qp0oMYI=
+golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
+golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
+golang.org/x/tools v0.34.0 h1:qIpSLOxeCYGg9TrcJokLBG4KFA6d795g0xkBkiESGlo=
+golang.org/x/tools v0.34.0/go.mod h1:pAP9OwEaY1CAW3HOmg3hLZC5Z0CCmzjAF2UQMSqNARg=

From 49e111809b44db1f8449466487f3dc0a27ee6759 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 14 Jul 2025 16:06:48 +0000
Subject: [PATCH 377/887] Update submodule to latest master (9159cd4e):
 encoding/json: decompose legacy options

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 88cf0c5d55a..9159cd4ec6b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 88cf0c5d55a8c18da515485f4a3fcf008b96cb07
+Subproject commit 9159cd4ec6b0e9475dc9c71c830035c1c4c13483

From 62a3516c571912c61e97f9482935d2c8f8b4a6fa Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 15 Jul 2025 12:01:45 +0200
Subject: [PATCH 378/887] Enable the `systemcrypto` goexperiment by default
 (#1698)

* enable systemcrypto by default

* disable systemcrypto on CI

* correctly override  goexperiment

* fix tests

* fix disableSystemCrypto

* fix cross compilation

* fix compilation

* fix tests

* fix tests

* remove unnecessary change

* remove goexperiments from matrix

* fix buildandpack

* fix compilation

* fix tests

* improve goexp

* fox fips tests

* fix docs

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* fix readme

* code review feedback

* remove duplication

* fix build

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/fips/README.md                        |  17 +-
 .../stages/go-builder-matrix-stages.yml       |  40 ++---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  41 ++++-
 ...03-Implement-crypto-internal-backend.patch | 155 ++++++++++++++++--
 4 files changed, 209 insertions(+), 44 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index c582cfca84b..b66dabbd2e8 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -67,6 +67,9 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 >
 > 1.24 introduces `GODEBUG=fips140=on` as the preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
 
+> [!NOTE]
+> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
+
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
 | Default | Default | Not compliant | Crypto usage is not FIPS compliant. |
@@ -74,6 +77,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
+| `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
 
 A [Docker base image](#dockerfile-base-image) is available that includes suitable build-time config in the environment.
 
@@ -89,8 +93,9 @@ Some configurations are invalid and intentionally result in a build error or run
 
 The `GOEXPERIMENT` environment variable is used at build time to select a cryptographic library backend. This modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API. The `GOEXPERIMENT` values that pick a crypto backend are:
 
-- *Recommended:* `systemcrypto` automatically selects the suggested crypto backend for the target platform
-  - Prior to Go 1.21, this alias is not available and the backend must be selected manually
+- `systemcrypto` automatically selects the suggested crypto backend for the target platform
+   - Prior to Go 1.21, this experiment is not available and the backend must be selected manually
+   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. It can be disabled like any other `GOEXPERIMENT`: setting `GOEXPERIMENT=nosystemcrypto`
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
 - Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
@@ -133,6 +138,9 @@ See [the microsoft/go-images documentation][microsoft-go-images] for more inform
 
 ### Dockerfile env instruction
 
+> [!NOTE]
+> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
+
 If you don't use the standard Go base images (e.g. your Dockerfile downloads the Microsoft build of Go manually), you can use an `env` instruction before the build instruction in your Dockerfile:
 
 ```dockerfile
@@ -141,6 +149,9 @@ env GOEXPERIMENT=systemcrypto
 
 ### Modify the build command
 
+> [!NOTE]
+> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
+
 Another approach that generally works for any build system is to modify the build command or build script. This section lists some helpful snippets to select a backend.
 
 #### Linux/macOS shell (bash) - Set `GOEXPERIMENT` environment variable
@@ -435,6 +446,8 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.25 (Aug 2025)
 
+- The `systemcrypto` goexperiment is now enabled by default on Windows and Linux. To disable it, set `GOEXPERIMENT=nosystemcrypto`.
+
 - Running `go version -m` on a binary which uses a system crypto backend now shows the `microsoft_systemcrypto=1` build setting.
 
 - The build-time backend compatibility check now only runs when a crypto package is required for the build.
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 19106359464..6cbeb1b363a 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -80,41 +80,41 @@ stages:
           - ${{ if parameters.includeArm64Host }}:
             - { os: linux, arch: arm64, config: buildandpack }
         - ${{ if parameters.innerloop }}:
-          - { os: darwin, arch: amd64, config: devscript }
-          - { os: darwin, arch: amd64, config: test }
+          - { experiment: nosystemcrypto, os: darwin, arch: amd64, config: devscript }
+          - { experiment: nosystemcrypto, os: darwin, arch: amd64, config: test }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test, fips: true }
-          # - { os: darwin, arch: arm64, config: devscript }
-          # - { os: darwin, arch: arm64, config: test }
+          # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: devscript }
+          # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: test }
           # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test }
           # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test, fips: true }
-          - { os: linux, arch: amd64, config: devscript }
-          - { os: linux, arch: amd64, config: test }
-          - { os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: devscript }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
-          - { os: windows, arch: amd64, config: devscript }
-          - { os: windows, arch: amd64, config: test }
+          - { experiment: nosystemcrypto, os: windows, arch: amd64, config: devscript }
+          - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
           - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
-          - { os: windows, hostArch: amd64, arch: 386, config: buildandpack }
+          - { experiment: nosystemcrypto, os: windows, hostArch: amd64, arch: 386, config: buildandpack }
         - ${{ if parameters.outerloop }}:
           # Upstream builders.
-          # - { os: linux, arch: amd64, config: clang } https://github.com/microsoft/go/issues/342
-          - { os: linux, arch: amd64, config: longtest }
-          - { os: linux, arch: amd64, config: nocgo }
-          - { os: linux, arch: amd64, config: noopt }
-          - { os: linux, arch: amd64, config: race }
-          # - { os: linux, arch: amd64, config: racecompile } https://github.com/microsoft/go/issues/54
-          - { os: linux, arch: amd64, config: regabi }
-          - { os: linux, arch: amd64, config: ssacheck }
-          - { os: linux, arch: amd64, config: staticlockranking }
+          # - { experiment: nosystemcrypto, os: linux, arch: amd64, config: clang } https://github.com/microsoft/go/issues/342
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: longtest }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: nocgo }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: noopt }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: race }
+          # - { os: experiment: nosystemcrypto, linux, arch: amd64, config: racecompile } https://github.com/microsoft/go/issues/54
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: regabi }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: ssacheck }
+          - { experiment: nosystemcrypto, os: linux, arch: amd64, config: staticlockranking }
           # - { experiment: systemcrypto, os: linux, arch: amd64, config: clang } https://github.com/microsoft/go/issues/342
           - { experiment: systemcrypto, os: linux, arch: amd64, config: longtest }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: race }
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index f00a58dcddc..de0bad3cc2b 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -19,7 +19,7 @@ maintain this feature. For more information, see the test files.
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- src/internal/buildcfg/exp.go                  | 15 ++++
+ src/internal/buildcfg/exp.go                  | 28 +++++++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -29,7 +29,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 374 insertions(+), 4 deletions(-)
+ 18 files changed, 387 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -387,10 +387,37 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index e36ec08a5b0232..c1bd89cf694bea 100644
+index 689ca8ce58a6f2..9b3bafd0fc6cd9 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
-@@ -126,6 +126,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		regabiSupported = true
+ 	}
+ 
++	// These are the goos/goarch combinations where systemcrypto is
++	// enabled by default.
++	var systemCryptoSupported bool
++	switch goos {
++	case "windows":
++		systemCryptoSupported = goarch == "amd64" || goarch == "arm64"
++	case "linux":
++		systemCryptoSupported = true
++	case "darwin":
++		// darwincrypto is still experimental.
++	}
++
+ 	// Older versions (anything before V16) of dsymutil don't handle
+ 	// the .debug_rnglists section in DWARF5. See
+ 	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
+@@ -85,6 +97,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		SwissMap:        true,
+ 		SyncHashTrieMap: true,
+ 		Dwarf5:          dwarf5Supported,
++		SystemCrypto:    systemCryptoSupported,
+ 	}
+ 
+ 	// Start with the statically enabled set of experiments.
+@@ -126,6 +139,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -405,7 +432,7 @@ index e36ec08a5b0232..c1bd89cf694bea 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -139,6 +147,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -139,6 +160,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -416,7 +443,7 @@ index e36ec08a5b0232..c1bd89cf694bea 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -152,6 +164,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -152,6 +177,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -539,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ceff24193d89a5..6b4289503d57ae 100644
+index 63a338883991e0..04f8fce2dfed03 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 5a8cf17fa31..2a6a903d47c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,14 +13,17 @@ desired goexperiments and build tags.
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  .../compile/internal/ssa/stmtlines_test.go    |   1 -
  src/cmd/compile/script_test.go                |   8 +
- src/cmd/dist/build.go                         |  11 +
+ src/cmd/dist/build.go                         |  29 +-
  src/cmd/dist/test.go                          |  44 ++-
  src/cmd/go/go_test.go                         |  11 +
+ src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
+ src/cmd/go/internal/tool/tool.go              |   9 +-
  src/cmd/go/systemcrypto_test.go               | 144 +++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
+ src/cmd/link/internal/ld/main.go              |  14 +-
  src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/bbig/big.go       |  17 +
@@ -52,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 43 files changed, 2207 insertions(+), 17 deletions(-)
+ 46 files changed, 2258 insertions(+), 23 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -157,23 +160,35 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 024050c2dd70c4..3c82b7436d10bf 100644
+index 024050c2dd70c4..a3ae7ef562cace 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1387,6 +1387,12 @@ func toolenv() []string {
+@@ -1387,7 +1387,23 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
-+	if goexp := os.Getenv("GOEXPERIMENT"); goexp != "" {
-+		// Remove systemcrypto from GOEXPERIMENT: to favor portability, the
-+		// Microsoft build of Go should not use it. Go only uses crypto packages
-+		// for non-crypto purposes, such as generating build IDs.
-+		env = append(env, "GOEXPERIMENT="+goexp+",nosystemcrypto")
-+	}
- 	return env
+-	return env
++	return toolchainGOEXPERIMENT(env)
++}
++
++// toolchainGOEXPERIMENT appends a GOEXPERIMENT to env
++// that contains all the experiments from the current
++// environment, but with "systemcrypto" removed and
++// "nosystemcrypto" added. This is used when building
++// the Microsoft build of Go to favor portability.
++// Go only uses crypto packages for non-crypto purposes,
++// such as generating build IDs.
++func toolchainGOEXPERIMENT(env []string) []string {
++	goexp := strings.Split(os.Getenv("GOEXPERIMENT"), ",")
++	goexp = slices.DeleteFunc(goexp, func(s string) bool {
++		return s == "systemcrypto" || s == "nosystemcrypto" || s == ""
++	})
++	goexp = append(goexp, "nosystemcrypto")
++	return append(env, "GOEXPERIMENT="+strings.Join(goexp, ","))
  }
  
-@@ -1548,6 +1554,11 @@ func cmdbootstrap() {
+ var (
+@@ -1548,6 +1564,11 @@ func cmdbootstrap() {
  	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
  	os.Setenv("GOEXPERIMENT", goexperiment)
@@ -185,6 +200,22 @@ index 024050c2dd70c4..3c82b7436d10bf 100644
  	// No need to enable PGO for toolchain2.
  	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
  	if debug {
+@@ -1629,12 +1650,12 @@ func cmdbootstrap() {
+ 		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
+ 		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
+ 	}
+-	goInstall(nil, goBootstrap, "std")
++	goInstall(toolchainGOEXPERIMENT(nil), goBootstrap, "std")
+ 	goInstall(toolenv(), goBootstrap, toolsToInstall...)
+ 	checkNotStale(toolenv(), goBootstrap, toolchain...)
+-	checkNotStale(nil, goBootstrap, "std")
++	checkNotStale(toolchainGOEXPERIMENT(nil), goBootstrap, "std")
+ 	checkNotStale(toolenv(), goBootstrap, toolsToInstall...)
+-	checkNotStale(nil, gorootBinGo, "std")
++	checkNotStale(toolchainGOEXPERIMENT(nil), gorootBinGo, "std")
+ 	checkNotStale(toolenv(), gorootBinGo, toolsToInstall...)
+ 	if debug {
+ 		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
 index aa09d1eba34be8..c3f3a8324c507c 100644
 --- a/src/cmd/dist/test.go
@@ -342,8 +373,42 @@ index 3e691abe41f702..b799031d598892 100644
  	tg := testgo(t)
  	tg.parallel()
  	defer tg.cleanup()
+diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
+index a4edd854f1d35a..10ee92536b96cd 100644
+--- a/src/cmd/go/internal/cfg/cfg.go
++++ b/src/cmd/go/internal/cfg/cfg.go
+@@ -19,6 +19,7 @@ import (
+ 	"os"
+ 	"path/filepath"
+ 	"runtime"
++	"runtime/debug"
+ 	"strings"
+ 	"sync"
+ 	"time"
+@@ -229,6 +230,21 @@ func ForceHost() {
+ 	BuildContext = defaultContext()
+ 	// Call SetGOROOT to properly set the GOROOT on the new context.
+ 	SetGOROOT(Getenv("GOROOT"), false)
++	// The Microsoft build of Go might be built with non-default
++	// GOEXPERIMENT and BuildTags, so we need to get them from
++	// the build info.
++	bi, ok := debug.ReadBuildInfo()
++	if !ok {
++		panic("missing build info")
++	}
++	for _, s := range bi.Settings {
++		switch s.Key {
++		case "-tags":
++			BuildContext.BuildTags = strings.Split(s.Value, ",")
++		case "GOEXPERIMENT":
++			RawGOEXPERIMENT = s.Value
++		}
++	}
+ 	// Recompute experiments: the settings determined depend on GOOS and GOARCH.
+ 	// This will also update the BuildContext's tool tags to include the new
+ 	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index e913f9885234fd..ef331980a816a3 100644
+index 1f791546f90088..d20890b4e70fae 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
@@ -356,6 +421,34 @@ index e913f9885234fd..ef331980a816a3 100644
  	appendSetting("-buildmode", buildmode)
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
+diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
+index 16e1a4f47f49c0..f987e499da4c15 100644
+--- a/src/cmd/go/internal/tool/tool.go
++++ b/src/cmd/go/internal/tool/tool.go
+@@ -281,6 +281,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
+ 	// Override GOOS and GOARCH for the build to build the tool using
+ 	// the same GOOS and GOARCH as this go command.
+ 	cfg.ForceHost()
++	// The tool might build some additional packages, set the GOEXPERIMENT
++	// environment variable to the one we just computed in cfg.ForceHost.
++	originalGOEXPERIMENT := os.Getenv("GOEXPERIMENT")
++	os.Setenv("GOEXPERIMENT", cfg.RawGOEXPERIMENT)
+ 
+ 	// Ignore go.mod and go.work: we don't need them, and we want to be able
+ 	// to run the tool even if there's an issue with the module or workspace the
+@@ -288,8 +292,11 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
+ 	modload.RootMode = modload.NoRoot
+ 
+ 	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
++		// Now that the tool is built, revert the GOEXPERIMENT
++		// environment variable to the original value.
++		env := append(os.Environ(), "GOEXPERIMENT="+originalGOEXPERIMENT)
+ 		cmdline := str.StringList(a.Deps[0].BuiltTarget(), a.Args)
+-		return runBuiltTool(toolName, nil, cmdline)
++		return runBuiltTool(toolName, env, cmdline)
+ 	}
+ 
+ 	buildAndRunTool(ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
 index 00000000000000..5ee9c2e050cf24
@@ -547,6 +640,38 @@ index 483a9ec33c6798..fad922e3f844ab 100644
  	common := testCommon{
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
+diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
+index 6a684890be0a03..09554a60b23471 100644
+--- a/src/cmd/link/internal/ld/main.go
++++ b/src/cmd/link/internal/ld/main.go
+@@ -44,6 +44,7 @@ import (
+ 	"os"
+ 	"runtime"
+ 	"runtime/pprof"
++	"slices"
+ 	"strconv"
+ 	"strings"
+ )
+@@ -187,7 +188,18 @@ func Main(arch *sys.Arch, theArch Arch) {
+ 
+ 	buildVersion := buildcfg.Version
+ 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
+-		buildVersion += " X:" + goexperiment
++		// buildVersion is intended to contain non-default experiment flags.
++		// The Microsoft build of Go default behavior is to set the
++		// nosystemcrypto experiments, so we don't include it in the buildVersion string.
++		// This is also important because runtime.Version() gets the value from
++		// the buildVersion string, and many code out there, e.g. the standard library
++		// go/version package, doesn't expect the version to contain experiments.
++		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
++			return s == "nosystemcrypto"
++		}), ",")
++		if goexperiment != "" {
++			buildVersion += " X:" + goexperiment
++		}
+ 	}
+ 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
+ 
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
 index 2fe32600f1d6c7..f84cbdc5ee25f0 100644
 --- a/src/cmd/link/link_test.go
@@ -2693,7 +2818,7 @@ index 9b7613a62b5a31..1997d90f2f20ba 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index bba73cfab9a108..11ffdf2213dc7b 100644
+index 9b3bafd0fc6cd9..b7cc2bdfa6ffd9 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,11 +5,14 @@
@@ -2711,7 +2836,7 @@ index bba73cfab9a108..11ffdf2213dc7b 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -167,6 +170,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -180,6 +183,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}

From 049483f90c7b49cc20c4af5c8dd3fa4cc6073161 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 15 Jul 2025 14:49:09 +0200
Subject: [PATCH 379/887] upgrade go-infra/telemetry (#1744)

---
 patches/0010-add-appinsights-telemetry.patch | 242 ++++++++++++++++++-
 1 file changed, 235 insertions(+), 7 deletions(-)

diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index 83655fbf25f..cb2fa0e2f2f 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -5,14 +5,25 @@ Subject: [PATCH] Add appinsights telemetry
 
 ---
  README.md                                     | 15 ++++++
+ src/cmd/go.mod                                |  3 +-
+ src/cmd/go.sum                                |  6 ++-
  src/cmd/go/main.go                            |  1 +
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
  src/cmd/go/script_test.go                     |  7 +++
- src/cmd/internal/telemetry/counter/counter.go | 31 ++++++++++-
+ src/cmd/internal/telemetry/counter/counter.go | 33 +++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  2 +
+ .../go-infra/telemetry/config/LICENSE         | 21 ++++++++
+ .../go-infra/telemetry/config/config.go       | 11 ++++
+ .../telemetry/{ => config}/config.json        |  9 ----
+ .../telemetry/internal/config/config.go       |  7 ++-
+ .../microsoft/go-infra/telemetry/telemetry.go | 39 +++++++-------
+ src/cmd/vendor/modules.txt                    |  5 +-
  src/go/build/vendor_test.go                   |  1 +
- 7 files changed, 108 insertions(+), 1 deletion(-)
+ 15 files changed, 173 insertions(+), 39 deletions(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+ rename src/cmd/vendor/github.com/microsoft/go-infra/telemetry/{ => config}/config.json (84%)
 
 diff --git a/README.md b/README.md
 index 71c9d1dc299388..8cab5daec4da54 100644
@@ -38,6 +49,37 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +our privacy statement. Your use of the software operates as your consent to
 +these practices.
 \ No newline at end of file
+diff --git a/src/cmd/go.mod b/src/cmd/go.mod
+index 1d4b7f30894cbd..edaa5d3cb8b2c5 100644
+--- a/src/cmd/go.mod
++++ b/src/cmd/go.mod
+@@ -4,7 +4,8 @@ go 1.25
+ 
+ require (
+ 	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
+-	github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
++	github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b
+ 	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
+ 	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
+ 	golang.org/x/mod v0.25.0
+diff --git a/src/cmd/go.sum b/src/cmd/go.sum
+index 06a00930d6a8b3..e6fa9f04be91b0 100644
+--- a/src/cmd/go.sum
++++ b/src/cmd/go.sum
+@@ -4,8 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
+ github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
+ github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
+ github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
+-github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784 h1:ZMTsT8szMuZcaqRWSiJtpRjAXp0dMKzwFEz8WvUAsV4=
+-github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b h1:AilXE4hfoVOBNL9brZKV8SDn1LKz6frE0slMqrdWSt4=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b h1:GfdjYN/VWPWMbnrdetSbflL15N9sD7uVslcbDoDMQFQ=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
+ github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
+ github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+ golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
 index e81969ca4a3144..61b9219df8f389 100644
 --- a/src/cmd/go/main.go
@@ -141,10 +183,10 @@ index 1345ea8bb8e530..f915bd26994ffe 100644
  			t.Fatal("go was invoked but no counters were incremented")
  		}
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..9125e9550f4047 100644
+index 5cef0b0041551a..ec2a0b962bf29c 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
-@@ -7,12 +7,20 @@
+@@ -7,12 +7,21 @@
  package counter
  
  import (
@@ -157,6 +199,7 @@ index 5cef0b0041551a..9125e9550f4047 100644
  	"golang.org/x/telemetry/counter"
 +
 +	mstelemetry "github.com/microsoft/go-infra/telemetry"
++	msconfig "github.com/microsoft/go-infra/telemetry/config"
 +	mscounter "github.com/microsoft/go-infra/telemetry/counter"
  )
  
@@ -165,7 +208,7 @@ index 5cef0b0041551a..9125e9550f4047 100644
  var openCalled bool
  
  func OpenCalled() bool { return openCalled }
-@@ -22,11 +30,29 @@ func OpenCalled() bool { return openCalled }
+@@ -22,11 +31,30 @@ func OpenCalled() bool { return openCalled }
  func Open() {
  	openCalled = true
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
@@ -174,6 +217,7 @@ index 5cef0b0041551a..9125e9550f4047 100644
 +			InstrumentationKey: appInsightsInstrumentationKey,
 +			Endpoint:           os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"),
 +			AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
++			UploadConfig:       msconfig.Config,
 +		})
 +	}
 +}
@@ -195,7 +239,7 @@ index 5cef0b0041551a..9125e9550f4047 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +70,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +72,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -203,7 +247,7 @@ index 5cef0b0041551a..9125e9550f4047 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +83,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +85,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {
@@ -224,6 +268,190 @@ index 00808294053c23..1adda045749c29 100644
  func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {}
 +
 +func Close() {}
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
+new file mode 100644
+index 00000000000000..9e841e7a26e4eb
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
++
++    Copyright (c) Microsoft Corporation.
++
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
++
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
++
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+new file mode 100644
+index 00000000000000..044268a046a54d
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+@@ -0,0 +1,11 @@
++// The config package holds the config.json file defining the Go telemetry
++// upload configuration.
++//
++// An upload configuration specifies the set of values that are permitted in
++// telemetry uploads: GOOS, GOARCH, and per-program counters.
++package config
++
++import _ "embed" // for config.json
++
++//go:embed config.json
++var Config []byte
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
+similarity index 84%
+rename from src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+rename to src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
+index 01f28774efbb35..189f42aa9bd51a 100644
+--- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
+@@ -45,15 +45,6 @@
+ 		"sparc64",
+ 		"wasm"
+ 	],
+-	"GoVersion": [
+-		"go1.24rc1",
+-		"go1.24rc2",
+-		"go1.24rc3",
+-		"go1.24.0",
+-		"go1.24.1",
+-		"go1.24.2",
+-		"go1.24.3"
+-	],
+ 	"Programs": [
+ 		{
+ 			"Name": "cmd/go",
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
+index 1ad030cea6659d..7980b1505b2caa 100644
+--- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
+@@ -11,10 +11,9 @@ import (
+ 
+ // An UploadConfig controls what data is uploaded.
+ type UploadConfig struct {
+-	GOOS      []string
+-	GOARCH    []string
+-	GoVersion []string
+-	Programs  []*ProgramConfig
++	GOOS     []string
++	GOARCH   []string
++	Programs []*ProgramConfig
+ }
+ 
+ // A ProgramConfig contains the configuration for a single program.
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
+index 23b60d189f102d..338e225866a5b0 100644
+--- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
+@@ -23,6 +23,10 @@ type Config struct {
+ 	// This key is required and must be set before sending any telemetry.
+ 	InstrumentationKey string
+ 
++	// UploadConfig is the json-encoded telemetry upload configuration.
++	// This parameter is required.
++	UploadConfig []byte
++
+ 	// The endpoint URL to which telemetry will be sent.
+ 	// If empty, it defaults to https://dc.services.visualstudio.com/v2/track.
+ 	Endpoint string
+@@ -37,46 +41,39 @@ type Config struct {
+ 	// If zero, it defaults to 10 seconds.
+ 	MaxBatchInterval time.Duration
+ 
+-	// UploadConfigPath is the path to the telemetry upload configuration file.
+-	// If empty, the default configuration embedded in the binary will be used.
+-	UploadConfigPath string
+-
+ 	// Allow uploading telemetry for Go development versions even if the
+ 	// upload configuration does not explicitly include them.
+ 	AllowGoDevel bool
+ }
+ 
+-//go:embed config.json
+-var uploadConfigData []byte
+-
+ var countersToUpload map[string]struct{}
+ 
+ // Start initializes telemetry using the specified configuration.
+ func Start(cfg Config) {
+-	var uploadConfig *config.UploadConfig
+-	var err error
+-	if cfg.UploadConfigPath != "" {
+-		uploadConfig, err = config.ReadConfig(cfg.UploadConfigPath)
+-	} else {
+-		uploadConfig, err = config.UnmarshalConfig(uploadConfigData)
++	if cfg.UploadConfig == nil {
++		panic("UploadConfigPath must be set in telemetry.Config")
+ 	}
++	uploadConfig, err := config.UnmarshalConfig(cfg.UploadConfig)
+ 	if err != nil {
+ 		panic(fmt.Errorf("failed to unmarshal telemetry config: %v", err))
+ 	}
+-	if cfg.AllowGoDevel {
+-		uploadConfig.GoVersion = append(uploadConfig.GoVersion, "devel")
++	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
++		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) {
++		// Only start telemetry if the current GOOS and GOARCH
++		// are supported by the telemetry configuration.
++		return
+ 	}
+ 	bi, ok := debug.ReadBuildInfo()
+ 	if !ok {
+ 		panic("failed to read build info for telemetry")
+ 	}
+ 	ver, prog := telemetry.ProgramInfo(bi)
+-	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
+-		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) ||
+-		!slices.Contains(uploadConfig.GoVersion, ver) {
+-		// Only start telemetry if the current GOOS, GOARCH, and Go version
+-		// are supported by the telemetry configuration.
+-		return
++	if ver == "devel" {
++		if !cfg.AllowGoDevel {
++			// If the Go version is a development version and we are not allowing
++			// development versions, do not start telemetry.
++			return
++		}
+ 	}
+ 
+ 	progIdx := slices.IndexFunc(uploadConfig.Programs, func(p *config.ProgramConfig) bool {
+diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
+index 9791fd2c5fbb46..de41cc34c42163 100644
+--- a/src/cmd/vendor/modules.txt
++++ b/src/cmd/vendor/modules.txt
+@@ -16,7 +16,7 @@ github.com/google/pprof/third_party/svgpan
+ # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
+ ## explicit; go 1.13
+ github.com/ianlancetaylor/demangle
+-# github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
++# github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b
+ ## explicit; go 1.24
+ github.com/microsoft/go-infra/telemetry
+ github.com/microsoft/go-infra/telemetry/counter
+@@ -24,6 +24,9 @@ github.com/microsoft/go-infra/telemetry/internal/appinsights
+ github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
+ github.com/microsoft/go-infra/telemetry/internal/config
+ github.com/microsoft/go-infra/telemetry/internal/telemetry
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b
++## explicit; go 1.24
++github.com/microsoft/go-infra/telemetry/config
+ # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
+ ## explicit; go 1.23.0
+ golang.org/x/arch/arm/armasm
 diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
 index 6092c93d4c5b26..8f68bc361081f1 100644
 --- a/src/go/build/vendor_test.go

From cbd0a67f961956ca33eec7625d2e1fcbea1eb0cc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 15 Jul 2025 10:00:14 -0700
Subject: [PATCH 380/887] build(deps): bump github.com/golang-jwt/jwt/v5 in
 /eng/_util (#1743)

Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.2 to 5.2.3.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.2...v5.2.3)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index b4b942b64fd..aa196db9db8 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.23.0
 
 require (
-	github.com/golang-jwt/jwt/v5 v5.2.2
+	github.com/golang-jwt/jwt/v5 v5.2.3
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/net v0.42.0
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 1afacbd1883..f642b8f3210 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -1,7 +1,7 @@
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
-github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
-github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.2.3 h1:kkGXqQOBSDDWRhWNXTFpqGSCMyh/PLnqUvMGJPDJDs0=
+github.com/golang-jwt/jwt/v5 v5.2.3/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=

From fadbad41cd6116209345e93a34ebd926811ca3b2 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 16 Jul 2025 08:29:43 +0200
Subject: [PATCH 381/887] Add telemetry counters for goexperiments (#1745)

* add telemetry counters for goexperiments

* fix null pointer exception
---
 patches/0010-add-appinsights-telemetry.patch | 32 +++++++++++++++++++-
 1 file changed, 31 insertions(+), 1 deletion(-)

diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index cb2fa0e2f2f..8b153c051a3 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -7,6 +7,7 @@ Subject: [PATCH] Add appinsights telemetry
  README.md                                     | 15 ++++++
  src/cmd/go.mod                                |  3 +-
  src/cmd/go.sum                                |  6 ++-
+ .../internal/telemetrystats/telemetrystats.go | 13 +++++
  src/cmd/go/main.go                            |  1 +
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
  src/cmd/go/script_test.go                     |  7 +++
@@ -19,7 +20,7 @@ Subject: [PATCH] Add appinsights telemetry
  .../microsoft/go-infra/telemetry/telemetry.go | 39 +++++++-------
  src/cmd/vendor/modules.txt                    |  5 +-
  src/go/build/vendor_test.go                   |  1 +
- 15 files changed, 173 insertions(+), 39 deletions(-)
+ 16 files changed, 186 insertions(+), 39 deletions(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
@@ -80,6 +81,35 @@ index 06a00930d6a8b3..e6fa9f04be91b0 100644
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
+diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
+index 950453fa951374..d5b642240f16b7 100644
+--- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
++++ b/src/cmd/go/internal/telemetrystats/telemetrystats.go
+@@ -11,6 +11,7 @@ import (
+ 	"cmd/go/internal/cfg"
+ 	"cmd/go/internal/modload"
+ 	"cmd/internal/telemetry/counter"
++	"strings"
+ )
+ 
+ func Increment() {
+@@ -48,4 +49,16 @@ func incrementConfig() {
+ 	case "wasm":
+ 		counter.Inc("go/platform/target/gowasm:" + cfg.GOWASM)
+ 	}
++
++	// Use cfg.Experiment.String instead of cfg.Experiment.Enabled
++	// because we only want to count the experiments that differ
++	// from the baseline.
++	if cfg.Experiment != nil {
++		for exp := range strings.SplitSeq(cfg.Experiment.String(), ",") {
++			if exp == "" {
++				continue
++			}
++			counter.Inc("go/goexperiment:" + exp)
++		}
++	}
+ }
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
 index e81969ca4a3144..61b9219df8f389 100644
 --- a/src/cmd/go/main.go

From 88c7341f1d6108ed7ac462134b111a72c05b6c79 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 16 Jul 2025 12:12:22 +0200
Subject: [PATCH 382/887] upgrade telemetry module (#1749)

---
 .../0001-Vendor-external-dependencies.patch   | 178 ++++++++-----
 patches/0010-add-appinsights-telemetry.patch  | 241 +-----------------
 2 files changed, 113 insertions(+), 306 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index bcb6795da22..1a1c44c360c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -8,12 +8,14 @@ To reproduce changes in 'src/cmd/vendor', run 'go mod vendor' in 'src/cmd'.
 If 'go mod vendor' makes any changes, run 'go mod tidy'.
 Use a 'go' that was recently built by the current branch to ensure stable results.
 ---
- src/cmd/go.mod                                |    1 +
- src/cmd/go.sum                                |    2 +
- .../internal/telemetry/counter/deps_ignore.go |   16 +
+ src/cmd/go.mod                                |    2 +
+ src/cmd/go.sum                                |    4 +
+ .../internal/telemetry/counter/deps_ignore.go |   17 +
  .../microsoft/go-infra/telemetry/LICENSE      |   21 +
  .../microsoft/go-infra/telemetry/README.md    |    7 +
- .../microsoft/go-infra/telemetry/config.json  |   67 +
+ .../go-infra/telemetry/config/LICENSE         |   21 +
+ .../go-infra/telemetry/config/config.go       |   11 +
+ .../go-infra/telemetry/config/config.json     |   61 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
  .../telemetry/internal/appinsights/client.go  |  175 ++
@@ -25,16 +27,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  169 ++
- .../telemetry/internal/config/config.go       |   64 +
+ .../telemetry/internal/config/config.go       |   63 +
  .../telemetry/internal/telemetry/proginfo.go  |   32 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
- .../microsoft/go-infra/telemetry/telemetry.go |  123 +
- src/cmd/vendor/modules.txt                    |    8 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  120 +
+ src/cmd/vendor/modules.txt                    |   11 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
  src/go/build/deps_test.go                     |   35 +-
- src/go/build/vendor_test.go                   |    3 +
+ src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
@@ -135,11 +137,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 127 files changed, 19160 insertions(+), 7 deletions(-)
+ 129 files changed, 19190 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
- create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/README.md
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
@@ -257,36 +261,39 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 5624b81cc51bac..1d4b7f30894cbd 100644
+index 5624b81cc51bac..caebaf25fad844 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
-@@ -4,6 +4,7 @@ go 1.25
+@@ -4,6 +4,8 @@ go 1.25
  
  require (
  	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
++	github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1
  	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
  	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
  	golang.org/x/mod v0.25.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d5d1553e5b7829..06a00930d6a8b3 100644
+index d5d1553e5b7829..be5d9688943e8d 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,8 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
  github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
  github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
  github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784 h1:ZMTsT8szMuZcaqRWSiJtpRjAXp0dMKzwFEz8WvUAsV4=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1 h1:GrwQB5oC7TORdL+bRRKP+7ceLwr2iK0+vBpG82zgLyI=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1 h1:2doxdRr67OgtkPNjGuLcdf+i4+HVQgikubr3xv0dXg8=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
-index 00000000000000..0f1edc8966e6f2
+index 00000000000000..d3155d34977b32
 --- /dev/null
 +++ b/src/cmd/internal/telemetry/counter/deps_ignore.go
-@@ -0,0 +1,16 @@
+@@ -0,0 +1,17 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -297,6 +304,7 @@ index 00000000000000..0f1edc8966e6f2
 +
 +import (
 +	_ "github.com/microsoft/go-infra/telemetry"
++	_ "github.com/microsoft/go-infra/telemetry/config"
 +	_ "github.com/microsoft/go-infra/telemetry/counter"
 +)
 +
@@ -343,12 +351,56 @@ index 00000000000000..472894e2011f93
 +
 +The [`appinsights`](appinsights) package is an alternative client that can send more arbitrary telemetry event data to Application Insights.
 +It only supports a few features of Application Insights that are used in other projects maintained by the Microsoft build of Go team.
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
 new file mode 100644
-index 00000000000000..01f28774efbb35
+index 00000000000000..9e841e7a26e4eb
 --- /dev/null
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
-@@ -0,0 +1,67 @@
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
++
++    Copyright (c) Microsoft Corporation.
++
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
++
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
++
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+new file mode 100644
+index 00000000000000..044268a046a54d
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
+@@ -0,0 +1,11 @@
++// The config package holds the config.json file defining the Go telemetry
++// upload configuration.
++//
++// An upload configuration specifies the set of values that are permitted in
++// telemetry uploads: GOOS, GOARCH, and per-program counters.
++package config
++
++import _ "embed" // for config.json
++
++//go:embed config.json
++var Config []byte
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
+new file mode 100644
+index 00000000000000..8c1a4bff90bf9b
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
+@@ -0,0 +1,61 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -396,21 +448,15 @@ index 00000000000000..01f28774efbb35
 +		"sparc64",
 +		"wasm"
 +	],
-+	"GoVersion": [
-+		"go1.24rc1",
-+		"go1.24rc2",
-+		"go1.24rc3",
-+		"go1.24.0",
-+		"go1.24.1",
-+		"go1.24.2",
-+		"go1.24.3"
-+	],
 +	"Programs": [
 +		{
 +			"Name": "cmd/go",
 +			"Counters": [
 +				{
 +					"Name": "go/invocations"
++				},
++				{
++					"Name": "go/goexperiment:{ms_tls_config_schannel,systemcrypto,nosystemcrypto,opensslcrypto,cngcrypto,darwincrypto}"
 +				}
 +			]
 +		}
@@ -1509,10 +1555,10 @@ index 00000000000000..3cca77e3070fd2
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
 new file mode 100644
-index 00000000000000..1ad030cea6659d
+index 00000000000000..7980b1505b2caa
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,63 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1526,10 +1572,9 @@ index 00000000000000..1ad030cea6659d
 +
 +// An UploadConfig controls what data is uploaded.
 +type UploadConfig struct {
-+	GOOS      []string
-+	GOARCH    []string
-+	GoVersion []string
-+	Programs  []*ProgramConfig
++	GOOS     []string
++	GOARCH   []string
++	Programs []*ProgramConfig
 +}
 +
 +// A ProgramConfig contains the configuration for a single program.
@@ -1655,10 +1700,10 @@ index 00000000000000..02d112edb8ad3e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
 new file mode 100644
-index 00000000000000..23b60d189f102d
+index 00000000000000..338e225866a5b0
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -0,0 +1,123 @@
+@@ -0,0 +1,120 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1684,6 +1729,10 @@ index 00000000000000..23b60d189f102d
 +	// This key is required and must be set before sending any telemetry.
 +	InstrumentationKey string
 +
++	// UploadConfig is the json-encoded telemetry upload configuration.
++	// This parameter is required.
++	UploadConfig []byte
++
 +	// The endpoint URL to which telemetry will be sent.
 +	// If empty, it defaults to https://dc.services.visualstudio.com/v2/track.
 +	Endpoint string
@@ -1698,46 +1747,39 @@ index 00000000000000..23b60d189f102d
 +	// If zero, it defaults to 10 seconds.
 +	MaxBatchInterval time.Duration
 +
-+	// UploadConfigPath is the path to the telemetry upload configuration file.
-+	// If empty, the default configuration embedded in the binary will be used.
-+	UploadConfigPath string
-+
 +	// Allow uploading telemetry for Go development versions even if the
 +	// upload configuration does not explicitly include them.
 +	AllowGoDevel bool
 +}
 +
-+//go:embed config.json
-+var uploadConfigData []byte
-+
 +var countersToUpload map[string]struct{}
 +
 +// Start initializes telemetry using the specified configuration.
 +func Start(cfg Config) {
-+	var uploadConfig *config.UploadConfig
-+	var err error
-+	if cfg.UploadConfigPath != "" {
-+		uploadConfig, err = config.ReadConfig(cfg.UploadConfigPath)
-+	} else {
-+		uploadConfig, err = config.UnmarshalConfig(uploadConfigData)
++	if cfg.UploadConfig == nil {
++		panic("UploadConfigPath must be set in telemetry.Config")
 +	}
++	uploadConfig, err := config.UnmarshalConfig(cfg.UploadConfig)
 +	if err != nil {
 +		panic(fmt.Errorf("failed to unmarshal telemetry config: %v", err))
 +	}
-+	if cfg.AllowGoDevel {
-+		uploadConfig.GoVersion = append(uploadConfig.GoVersion, "devel")
++	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
++		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) {
++		// Only start telemetry if the current GOOS and GOARCH
++		// are supported by the telemetry configuration.
++		return
 +	}
 +	bi, ok := debug.ReadBuildInfo()
 +	if !ok {
 +		panic("failed to read build info for telemetry")
 +	}
 +	ver, prog := telemetry.ProgramInfo(bi)
-+	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
-+		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) ||
-+		!slices.Contains(uploadConfig.GoVersion, ver) {
-+		// Only start telemetry if the current GOOS, GOARCH, and Go version
-+		// are supported by the telemetry configuration.
-+		return
++	if ver == "devel" {
++		if !cfg.AllowGoDevel {
++			// If the Go version is a development version and we are not allowing
++			// development versions, do not start telemetry.
++			return
++		}
 +	}
 +
 +	progIdx := slices.IndexFunc(uploadConfig.Programs, func(p *config.ProgramConfig) bool {
@@ -1783,14 +1825,14 @@ index 00000000000000..23b60d189f102d
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 6e5783fdd4767a..9791fd2c5fbb46 100644
+index 6e5783fdd4767a..7ab070975606f8 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
-@@ -16,6 +16,14 @@ github.com/google/pprof/third_party/svgpan
+@@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
++# github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -1798,6 +1840,9 @@ index 6e5783fdd4767a..9791fd2c5fbb46 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1
++## explicit; go 1.24
++github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
  ## explicit; go 1.23.0
  golang.org/x/arch/arm/armasm
@@ -1934,16 +1979,17 @@ index 6d92542e31b652..9b7613a62b5a31 100644
  	}
  	fset := token.NewFileSet()
 diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 7f6237ffd59c11..6092c93d4c5b26 100644
+index 7f6237ffd59c11..8f68bc361081f1 100644
 --- a/src/go/build/vendor_test.go
 +++ b/src/go/build/vendor_test.go
-@@ -22,6 +22,9 @@ var allowedPackagePrefixes = []string{
+@@ -22,6 +22,10 @@ var allowedPackagePrefixes = []string{
  	"github.com/google/pprof",
  	"github.com/ianlancetaylor/demangle",
  	"rsc.io/markdown",
 +	"github.com/golang-fips/openssl",
 +	"github.com/microsoft/go-crypto-winnative",
 +	"github.com/microsoft/go-crypto-darwin",
++	"github.com/microsoft/go-infra/telemetry",
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index 8b153c051a3..e75eda7772c 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -5,26 +5,14 @@ Subject: [PATCH] Add appinsights telemetry
 
 ---
  README.md                                     | 15 ++++++
- src/cmd/go.mod                                |  3 +-
- src/cmd/go.sum                                |  6 ++-
  .../internal/telemetrystats/telemetrystats.go | 13 +++++
  src/cmd/go/main.go                            |  1 +
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
  src/cmd/go/script_test.go                     |  7 +++
  src/cmd/internal/telemetry/counter/counter.go | 33 +++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  2 +
- .../go-infra/telemetry/config/LICENSE         | 21 ++++++++
- .../go-infra/telemetry/config/config.go       | 11 ++++
- .../telemetry/{ => config}/config.json        |  9 ----
- .../telemetry/internal/config/config.go       |  7 ++-
- .../microsoft/go-infra/telemetry/telemetry.go | 39 +++++++-------
- src/cmd/vendor/modules.txt                    |  5 +-
- src/go/build/vendor_test.go                   |  1 +
- 16 files changed, 186 insertions(+), 39 deletions(-)
+ 7 files changed, 122 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
- create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
- create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
- rename src/cmd/vendor/github.com/microsoft/go-infra/telemetry/{ => config}/config.json (84%)
 
 diff --git a/README.md b/README.md
 index 71c9d1dc299388..8cab5daec4da54 100644
@@ -50,37 +38,6 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +our privacy statement. Your use of the software operates as your consent to
 +these practices.
 \ No newline at end of file
-diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 1d4b7f30894cbd..edaa5d3cb8b2c5 100644
---- a/src/cmd/go.mod
-+++ b/src/cmd/go.mod
-@@ -4,7 +4,8 @@ go 1.25
- 
- require (
- 	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
--	github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b
- 	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
- 	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
- 	golang.org/x/mod v0.25.0
-diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 06a00930d6a8b3..e6fa9f04be91b0 100644
---- a/src/cmd/go.sum
-+++ b/src/cmd/go.sum
-@@ -4,8 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
- github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
- github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
- github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
--github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784 h1:ZMTsT8szMuZcaqRWSiJtpRjAXp0dMKzwFEz8WvUAsV4=
--github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b h1:AilXE4hfoVOBNL9brZKV8SDn1LKz6frE0slMqrdWSt4=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b h1:GfdjYN/VWPWMbnrdetSbflL15N9sD7uVslcbDoDMQFQ=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
- github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
- github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
 diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
 index 950453fa951374..d5b642240f16b7 100644
 --- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
@@ -298,199 +255,3 @@ index 00808294053c23..1adda045749c29 100644
  func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {}
 +
 +func Close() {}
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
-new file mode 100644
-index 00000000000000..9e841e7a26e4eb
---- /dev/null
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
-@@ -0,0 +1,21 @@
-+    MIT License
-+
-+    Copyright (c) Microsoft Corporation.
-+
-+    Permission is hereby granted, free of charge, to any person obtaining a copy
-+    of this software and associated documentation files (the "Software"), to deal
-+    in the Software without restriction, including without limitation the rights
-+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-+    copies of the Software, and to permit persons to whom the Software is
-+    furnished to do so, subject to the following conditions:
-+
-+    The above copyright notice and this permission notice shall be included in all
-+    copies or substantial portions of the Software.
-+
-+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-+    SOFTWARE
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
-new file mode 100644
-index 00000000000000..044268a046a54d
---- /dev/null
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
-@@ -0,0 +1,11 @@
-+// The config package holds the config.json file defining the Go telemetry
-+// upload configuration.
-+//
-+// An upload configuration specifies the set of values that are permitted in
-+// telemetry uploads: GOOS, GOARCH, and per-program counters.
-+package config
-+
-+import _ "embed" // for config.json
-+
-+//go:embed config.json
-+var Config []byte
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-similarity index 84%
-rename from src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
-rename to src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-index 01f28774efbb35..189f42aa9bd51a 100644
---- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config.json
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -45,15 +45,6 @@
- 		"sparc64",
- 		"wasm"
- 	],
--	"GoVersion": [
--		"go1.24rc1",
--		"go1.24rc2",
--		"go1.24rc3",
--		"go1.24.0",
--		"go1.24.1",
--		"go1.24.2",
--		"go1.24.3"
--	],
- 	"Programs": [
- 		{
- 			"Name": "cmd/go",
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-index 1ad030cea6659d..7980b1505b2caa 100644
---- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-@@ -11,10 +11,9 @@ import (
- 
- // An UploadConfig controls what data is uploaded.
- type UploadConfig struct {
--	GOOS      []string
--	GOARCH    []string
--	GoVersion []string
--	Programs  []*ProgramConfig
-+	GOOS     []string
-+	GOARCH   []string
-+	Programs []*ProgramConfig
- }
- 
- // A ProgramConfig contains the configuration for a single program.
-diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-index 23b60d189f102d..338e225866a5b0 100644
---- a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-+++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -23,6 +23,10 @@ type Config struct {
- 	// This key is required and must be set before sending any telemetry.
- 	InstrumentationKey string
- 
-+	// UploadConfig is the json-encoded telemetry upload configuration.
-+	// This parameter is required.
-+	UploadConfig []byte
-+
- 	// The endpoint URL to which telemetry will be sent.
- 	// If empty, it defaults to https://dc.services.visualstudio.com/v2/track.
- 	Endpoint string
-@@ -37,46 +41,39 @@ type Config struct {
- 	// If zero, it defaults to 10 seconds.
- 	MaxBatchInterval time.Duration
- 
--	// UploadConfigPath is the path to the telemetry upload configuration file.
--	// If empty, the default configuration embedded in the binary will be used.
--	UploadConfigPath string
--
- 	// Allow uploading telemetry for Go development versions even if the
- 	// upload configuration does not explicitly include them.
- 	AllowGoDevel bool
- }
- 
--//go:embed config.json
--var uploadConfigData []byte
--
- var countersToUpload map[string]struct{}
- 
- // Start initializes telemetry using the specified configuration.
- func Start(cfg Config) {
--	var uploadConfig *config.UploadConfig
--	var err error
--	if cfg.UploadConfigPath != "" {
--		uploadConfig, err = config.ReadConfig(cfg.UploadConfigPath)
--	} else {
--		uploadConfig, err = config.UnmarshalConfig(uploadConfigData)
-+	if cfg.UploadConfig == nil {
-+		panic("UploadConfigPath must be set in telemetry.Config")
- 	}
-+	uploadConfig, err := config.UnmarshalConfig(cfg.UploadConfig)
- 	if err != nil {
- 		panic(fmt.Errorf("failed to unmarshal telemetry config: %v", err))
- 	}
--	if cfg.AllowGoDevel {
--		uploadConfig.GoVersion = append(uploadConfig.GoVersion, "devel")
-+	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
-+		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) {
-+		// Only start telemetry if the current GOOS and GOARCH
-+		// are supported by the telemetry configuration.
-+		return
- 	}
- 	bi, ok := debug.ReadBuildInfo()
- 	if !ok {
- 		panic("failed to read build info for telemetry")
- 	}
- 	ver, prog := telemetry.ProgramInfo(bi)
--	if !slices.Contains(uploadConfig.GOOS, runtime.GOOS) ||
--		!slices.Contains(uploadConfig.GOARCH, runtime.GOARCH) ||
--		!slices.Contains(uploadConfig.GoVersion, ver) {
--		// Only start telemetry if the current GOOS, GOARCH, and Go version
--		// are supported by the telemetry configuration.
--		return
-+	if ver == "devel" {
-+		if !cfg.AllowGoDevel {
-+			// If the Go version is a development version and we are not allowing
-+			// development versions, do not start telemetry.
-+			return
-+		}
- 	}
- 
- 	progIdx := slices.IndexFunc(uploadConfig.Programs, func(p *config.ProgramConfig) bool {
-diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 9791fd2c5fbb46..de41cc34c42163 100644
---- a/src/cmd/vendor/modules.txt
-+++ b/src/cmd/vendor/modules.txt
-@@ -16,7 +16,7 @@ github.com/google/pprof/third_party/svgpan
- # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
- ## explicit; go 1.13
- github.com/ianlancetaylor/demangle
--# github.com/microsoft/go-infra/telemetry v0.0.0-20250603171931-8d11a613d784
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20250715111012-2d08bb42a36b
- ## explicit; go 1.24
- github.com/microsoft/go-infra/telemetry
- github.com/microsoft/go-infra/telemetry/counter
-@@ -24,6 +24,9 @@ github.com/microsoft/go-infra/telemetry/internal/appinsights
- github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
- github.com/microsoft/go-infra/telemetry/internal/config
- github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250715111012-2d08bb42a36b
-+## explicit; go 1.24
-+github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
- ## explicit; go 1.23.0
- golang.org/x/arch/arm/armasm
-diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 6092c93d4c5b26..8f68bc361081f1 100644
---- a/src/go/build/vendor_test.go
-+++ b/src/go/build/vendor_test.go
-@@ -25,6 +25,7 @@ var allowedPackagePrefixes = []string{
- 	"github.com/golang-fips/openssl",
- 	"github.com/microsoft/go-crypto-winnative",
- 	"github.com/microsoft/go-crypto-darwin",
-+	"github.com/microsoft/go-infra/telemetry",
- }
- 
- // Verify that the vendor directories contain only packages matching the list above.

From 48557c3476ffaa68d06a917fd4d119ff38c87b23 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 16 Jul 2025 16:06:17 +0000
Subject: [PATCH 383/887] Update submodule to latest master (f506ad26):
 cmd/compile/internal/escape: speed up analyzing some functions with many
 closures

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9159cd4ec6b..f506ad2644f 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9159cd4ec6b0e9475dc9c71c830035c1c4c13483
+Subproject commit f506ad2644ff9c76d7e9fa00710248009d449cac

From 8b9316c18d93df8e6f17eef8892c8007ef64d27f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 18 Jul 2025 13:20:40 +0200
Subject: [PATCH 384/887] set definitive instrumentation key and endpoint
 (#1751)

---
 patches/0010-add-appinsights-telemetry.patch | 39 ++++++++++----------
 1 file changed, 20 insertions(+), 19 deletions(-)

diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index e75eda7772c..59b6c9685e7 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -8,10 +8,10 @@ Subject: [PATCH] Add appinsights telemetry
  .../internal/telemetrystats/telemetrystats.go | 13 +++++
  src/cmd/go/main.go                            |  1 +
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
- src/cmd/go/script_test.go                     |  7 +++
- src/cmd/internal/telemetry/counter/counter.go | 33 +++++++++++-
+ src/cmd/go/script_test.go                     |  6 +++
+ src/cmd/internal/telemetry/counter/counter.go | 37 ++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  2 +
- 7 files changed, 122 insertions(+), 1 deletion(-)
+ 7 files changed, 125 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -138,7 +138,7 @@ index 00000000000000..6993137ad56e8c
 +	fmt.Fprint(w, `{"itemsReceived": 1, "itemsAccepted": 1}`)
 +}
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index 1345ea8bb8e530..f915bd26994ffe 100644
+index 1345ea8bb8e530..1a7a62fdc7c19d 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
 @@ -60,6 +60,7 @@ func TestScript(t *testing.T) {
@@ -149,17 +149,16 @@ index 1345ea8bb8e530..f915bd26994ffe 100644
  
  	var (
  		ctx         = context.Background()
-@@ -254,6 +255,9 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
+@@ -254,6 +255,8 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
  		"HGRCPATH=",
  		"GOTOOLCHAIN=auto",
  		"MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1", // allow non-local toolchains, some tests expect GOTOOLCHAIN to be honored
 +		"MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT=" + appInsightsURL,
 +		"MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL=1", // allow telemetry for Go development versions
-+		"MS_GOTOOLCHAIN_TELEMETRY_INSTRUMENTATION_KEY=fake_key",
  		"newline=\n",
  	}
  
-@@ -404,6 +408,9 @@ func readCounters(t *testing.T, telemetryDir string) map[string]uint64 {
+@@ -404,6 +407,9 @@ func readCounters(t *testing.T, telemetryDir string) map[string]uint64 {
  func checkCounters(t *testing.T, telemetryDir string) {
  	counters := readCounters(t, telemetryDir)
  	if _, ok := scriptGoInvoked.Load(testing.TB(t)); ok {
@@ -170,13 +169,14 @@ index 1345ea8bb8e530..f915bd26994ffe 100644
  			t.Fatal("go was invoked but no counters were incremented")
  		}
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..ec2a0b962bf29c 100644
+index 5cef0b0041551a..a099b4698a21c4 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
-@@ -7,12 +7,21 @@
+@@ -7,10 +7,23 @@
  package counter
  
  import (
++	"cmp"
 +	"context"
  	"flag"
 +	"log"
@@ -188,21 +188,22 @@ index 5cef0b0041551a..ec2a0b962bf29c 100644
 +	mstelemetry "github.com/microsoft/go-infra/telemetry"
 +	msconfig "github.com/microsoft/go-infra/telemetry/config"
 +	mscounter "github.com/microsoft/go-infra/telemetry/counter"
++)
++
++const (
++	appInsightsInstrumentationKey = "128126c8-4e88-44c2-a70a-dfb7fbe94fb7"
++	appInsightsEndpoint           = "https://centralus-2.in.applicationinsights.azure.com/v2/track"
  )
  
-+var appInsightsInstrumentationKey = os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_INSTRUMENTATION_KEY") // TODO: hardcode to the correct value once we have a real key
-+
  var openCalled bool
- 
- func OpenCalled() bool { return openCalled }
-@@ -22,11 +31,30 @@ func OpenCalled() bool { return openCalled }
+@@ -22,11 +35,30 @@ func OpenCalled() bool { return openCalled }
  func Open() {
  	openCalled = true
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
-+	if appInsightsInstrumentationKey != "" && os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") != "0" {
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") != "0" {
 +		mstelemetry.Start(mstelemetry.Config{
 +			InstrumentationKey: appInsightsInstrumentationKey,
-+			Endpoint:           os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"),
++			Endpoint:           cmp.Or(os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"), appInsightsEndpoint), // configurable for testing purposes
 +			AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
 +			UploadConfig:       msconfig.Config,
 +		})
@@ -214,7 +215,7 @@ index 5cef0b0041551a..ec2a0b962bf29c 100644
 +	defer cancel()
 +	start := time.Now()
 +	mstelemetry.Close(ctx)
-+	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_STATS") == "on" {
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_STATS") == "1" {
 +		log.Printf("telemetry: closed in %s\n", time.Since(start))
 +	}
  }
@@ -226,7 +227,7 @@ index 5cef0b0041551a..ec2a0b962bf29c 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +72,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +76,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -234,7 +235,7 @@ index 5cef0b0041551a..ec2a0b962bf29c 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +85,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +89,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {

From 253f38819e36420670da2c8f0493d09b8b2b5dd7 Mon Sep 17 00:00:00 2001
From: Mert Akman <mertakman2012@gmail.com>
Date: Fri, 18 Jul 2025 12:34:47 +0100
Subject: [PATCH 385/887] Do not skip allocation tests and remove extra
 allocations from hash structs (#1746)

* rebase

* fix:update rand allocation count
---
 .../0001-Vendor-external-dependencies.patch   |  82 ++++-----
 patches/0004-Use-crypto-backends.patch        | 163 ++++++++++++++++--
 2 files changed, 186 insertions(+), 59 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 1a1c44c360c..09d003a9c1d 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -86,7 +86,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/cryptokit.h            |   67 +
  .../internal/cryptokit/ed25519.go             |   72 +
  .../internal/cryptokit/gcm.go                 |   36 +
- .../internal/cryptokit/hash.go                |  245 ++
+ .../internal/cryptokit/hash.go                |  247 ++
  .../internal/cryptokit/hashclone.go           |   17 +
  .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
@@ -137,7 +137,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 129 files changed, 19190 insertions(+), 7 deletions(-)
+ 129 files changed, 19192 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -1875,7 +1875,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..74c129d7995deb 100644
+index b81f19068aef23..da03dfd87e7aec 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1885,18 +1885,18 @@ index b81f19068aef23..74c129d7995deb 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..31a26b0d5104e1 100644
+index 410eb8648a710a..928d040435b4b7 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7 h1:ZjpSTr5uh4P3EKwrZQ8Fr/NZJ6NBgf+8UabCp9Kmtoc=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498 h1:UbccQbkPCI4kCh2s4gnJevJEaNyb/R19lXsII1RC8Nw=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7 h1:6a0YcJOAJWLtEqDW55bUhhe4Nx/9Rpmm80KVMUxD6B4=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b h1:Yf6lm9r6Aid3PG5FoeSX2v4iU+xWnAmCRQNjBxgceWI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
@@ -14238,10 +14238,10 @@ index 00000000000000..458e9eb57416b1
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
 new file mode 100644
-index 00000000000000..469bcb16f4c7e5
+index 00000000000000..977ee3152ada71
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
-@@ -0,0 +1,245 @@
+@@ -0,0 +1,247 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14314,9 +14314,9 @@ index 00000000000000..469bcb16f4c7e5
 +	size          int
 +}
 +
-+func newEVPHash(ptr unsafe.Pointer, hashAlgorithm C.int, blockSize, size int) *evpHash {
++func newEVPHash(hashAlgorithm C.int, blockSize, size int) *evpHash {
 +	h := &evpHash{
-+		ptr:           ptr,
++		ptr:           C.hashNew(hashAlgorithm),
 +		hashAlgorithm: hashAlgorithm,
 +		blockSize:     blockSize,
 +		size:          size,
@@ -14339,7 +14339,14 @@ index 00000000000000..469bcb16f4c7e5
 +		panic("cryptokit: hash already finalized")
 +	}
 +
-+	newHash := newEVPHash(C.hashCopy(h.hashAlgorithm, h.ptr), h.hashAlgorithm, h.blockSize, h.size)
++	newHash := &evpHash{
++		ptr:           C.hashCopy(h.hashAlgorithm, h.ptr),
++		hashAlgorithm: h.hashAlgorithm,
++		blockSize:     h.blockSize,
++		size:          h.size,
++	}
++
++	runtime.SetFinalizer(newHash, (*evpHash).finalize)
 +
 +	runtime.KeepAlive(h)
 +
@@ -14414,9 +14421,8 @@ index 00000000000000..469bcb16f4c7e5
 +}
 +
 +func NewMD5() hash.Hash {
-+	return &MD5Hash{
++	return MD5Hash{
 +		evpHash: newEVPHash(
-+			C.hashNew(md5),
 +			C.int(md5),
 +			MD5BlockSize,
 +			MD5Size,
@@ -14430,9 +14436,8 @@ index 00000000000000..469bcb16f4c7e5
 +
 +// NewSHA1 initializes a new SHA1 hasher.
 +func NewSHA1() hash.Hash {
-+	return &SHA1Hash{
++	return SHA1Hash{
 +		evpHash: newEVPHash(
-+			C.hashNew(sha1),
 +			sha1,
 +			SHA1BlockSize,
 +			SHA1Size,
@@ -14446,9 +14451,8 @@ index 00000000000000..469bcb16f4c7e5
 +
 +// NewSHA256 initializes a new SHA256 hasher.
 +func NewSHA256() hash.Hash {
-+	return &SHA256Hash{
++	return SHA256Hash{
 +		evpHash: newEVPHash(
-+			C.hashNew(sha256),
 +			sha256,
 +			SHA256BlockSize,
 +			SHA256Size,
@@ -14462,9 +14466,8 @@ index 00000000000000..469bcb16f4c7e5
 +
 +// NewSHA384 initializes a new SHA384 hasher.
 +func NewSHA384() hash.Hash {
-+	return &SHA384Hash{
++	return SHA384Hash{
 +		evpHash: newEVPHash(
-+			C.hashNew(sha384),
 +			sha384,
 +			SHA384BlockSize,
 +			SHA384Size,
@@ -14478,9 +14481,8 @@ index 00000000000000..469bcb16f4c7e5
 +
 +// NewSHA512 initializes a new SHA512 hasher.
 +func NewSHA512() hash.Hash {
-+	return &SHA512Hash{
++	return SHA512Hash{
 +		evpHash: newEVPHash(
-+			C.hashNew(sha512),
 +			sha512,
 +			SHA512BlockSize,
 +			SHA512Size,
@@ -14613,7 +14615,7 @@ index 00000000000000..da161adcd88ea6
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
 new file mode 100644
-index 00000000000000..53790ffa74310e
+index 00000000000000..f06abe11e3854d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
 @@ -0,0 +1,146 @@
@@ -14749,15 +14751,15 @@ index 00000000000000..53790ffa74310e
 +
 +func hashToHMACEnum(h hash.Hash) int {
 +	switch h.(type) {
-+	case *MD5Hash:
++	case MD5Hash:
 +		return 1
-+	case *SHA1Hash:
++	case SHA1Hash:
 +		return 2
-+	case *SHA256Hash:
++	case SHA256Hash:
 +		return 3
-+	case *SHA384Hash:
++	case SHA384Hash:
 +		return 4
-+	case *SHA512Hash:
++	case SHA512Hash:
 +		return 5
 +	default:
 +		return 0
@@ -15881,7 +15883,7 @@ index 00000000000000..f59e6f9af58cd4
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 new file mode 100644
-index 00000000000000..f01b519ee2c4e7
+index 00000000000000..6928418b4d26b9
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 @@ -0,0 +1,345 @@
@@ -16057,13 +16059,13 @@ index 00000000000000..f01b519ee2c4e7
 +// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
 +func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
 +	switch hash.(type) {
-+	case *cryptokit.SHA1Hash:
++	case cryptokit.SHA1Hash:
 +		return crypto.SHA1, nil
-+	case *cryptokit.SHA256Hash:
++	case cryptokit.SHA256Hash:
 +		return crypto.SHA256, nil
-+	case *cryptokit.SHA384Hash:
++	case cryptokit.SHA384Hash:
 +		return crypto.SHA384, nil
-+	case *cryptokit.SHA512Hash:
++	case cryptokit.SHA512Hash:
 +		return crypto.SHA512, nil
 +	default:
 +		return 0, errors.New("unsupported hash function")
@@ -16405,7 +16407,7 @@ index 00000000000000..ceb33c5cf99ca2
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
-index 00000000000000..f29d30e599117c
+index 00000000000000..1f1b25d36981c3
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 @@ -0,0 +1,65 @@
@@ -16462,13 +16464,13 @@ index 00000000000000..f29d30e599117c
 +// Mapping Go hash functions to CommonCrypto hash constants
 +func hashToCCDigestPBKDF2(hash hash.Hash) (C.CCAlgorithm, error) {
 +	switch hash.(type) {
-+	case *cryptokit.SHA1Hash:
++	case cryptokit.SHA1Hash:
 +		return C.kCCPRFHmacAlgSHA1, nil
-+	case *cryptokit.SHA256Hash:
++	case cryptokit.SHA256Hash:
 +		return C.kCCPRFHmacAlgSHA256, nil
-+	case *cryptokit.SHA384Hash:
++	case cryptokit.SHA384Hash:
 +		return C.kCCPRFHmacAlgSHA384, nil
-+	case *cryptokit.SHA512Hash:
++	case cryptokit.SHA512Hash:
 +		return C.kCCPRFHmacAlgSHA512, nil
 +	default:
 +		return 0, errors.New("unsupported hash function")
@@ -21333,7 +21335,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..13b7bb0fa3777e 100644
+index 8507f01b12f518..918aaab0a32fef 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21342,7 +21344,7 @@ index 8507f01b12f518..13b7bb0fa3777e 100644
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250703113729-2543273fb498
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 07f0a6276bb..02ccacd8f70 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -31,14 +31,14 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
  src/crypto/ed25519/ed25519.go                 |  73 +++++++
- src/crypto/ed25519/ed25519_test.go            |   3 +-
+ src/crypto/ed25519/ed25519_test.go            |  13 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/fips140.go                 |   3 +-
  src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
- src/crypto/internal/cryptotest/allocations.go |   2 +-
+ src/crypto/internal/cryptotest/allocations.go |   6 -
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
@@ -50,6 +50,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
  src/crypto/rand/rand.go                       |   2 +-
+ src/crypto/rand/rand_test.go                  |   9 +-
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
@@ -64,9 +65,9 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  20 +-
+ src/crypto/sha256/sha256_test.go              |  35 +++-
  src/crypto/sha512/sha512.go                   |   2 +-
- src/crypto/sha512/sha512_test.go              |  24 ++-
+ src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
  src/crypto/tls/cipher_suites.go               |   2 +-
  src/crypto/tls/defaults_boring.go             |   2 +-
@@ -90,7 +91,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 86 files changed, 1160 insertions(+), 96 deletions(-)
+ 87 files changed, 1186 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1138,10 +1139,15 @@ index 0e268139587075..b770c8c4987ca6 100644
  	default:
  		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
 diff --git a/src/crypto/ed25519/ed25519_test.go b/src/crypto/ed25519/ed25519_test.go
-index c8a23e3246a949..7f3d012f1a0707 100644
+index c8a23e3246a949..393a1e40ce704e 100644
 --- a/src/crypto/ed25519/ed25519_test.go
 +++ b/src/crypto/ed25519/ed25519_test.go
-@@ -13,6 +13,7 @@ import (
+@@ -9,10 +9,12 @@ import (
+ 	"bytes"
+ 	"compress/gzip"
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"crypto/sha512"
  	"encoding/hex"
@@ -1149,7 +1155,7 @@ index c8a23e3246a949..7f3d012f1a0707 100644
  	"log"
  	"os"
  	"strings"
-@@ -316,7 +317,7 @@ func TestGolden(t *testing.T) {
+@@ -316,7 +318,7 @@ func TestGolden(t *testing.T) {
  		copy(priv[32:], pubKey)
  
  		sig2 := Sign(priv[:], msg)
@@ -1158,6 +1164,29 @@ index c8a23e3246a949..7f3d012f1a0707 100644
  			t.Errorf("different signature result on line %d: %x vs %x", lineNo, sig, sig2)
  		}
  
+@@ -371,6 +373,11 @@ func TestAllocations(t *testing.T) {
+ 	cryptotest.SkipTestAllocations(t)
+ 	seed := make([]byte, SeedSize)
+ 	priv := NewKeyFromSeed(seed)
++	expectedAllocations := 0.0
++	if boring.Enabled {
++		expectedAllocations = 6
++	}
++
+ 	if allocs := testing.AllocsPerRun(100, func() {
+ 		message := []byte("Hello, world!")
+ 		pub := priv.Public().(PublicKey)
+@@ -378,8 +385,8 @@ func TestAllocations(t *testing.T) {
+ 		if !Verify(pub, message, signature) {
+ 			t.Fatal("signature didn't verify")
+ 		}
+-	}); allocs > 0 {
+-		t.Errorf("expected zero allocations, got %0.1f", allocs)
++	}); allocs > expectedAllocations {
++		t.Errorf("expected %v allocations, got %0.1f", expectedAllocations, allocs)
+ 	}
+ }
+ 
 diff --git a/src/crypto/ed25519/notboring.go b/src/crypto/ed25519/notboring.go
 new file mode 100644
 index 00000000000000..77b69a3be88183
@@ -1285,18 +1314,29 @@ index 4046a9555a8e35..4721a2a7ac04f7 100644
  	"crypto/md5"
  	"crypto/sha1"
 diff --git a/src/crypto/internal/cryptotest/allocations.go b/src/crypto/internal/cryptotest/allocations.go
-index 70055af70b42ec..3c4b4fbaa98ded 100644
+index 70055af70b42ec..21528faa0d6145 100644
 --- a/src/crypto/internal/cryptotest/allocations.go
 +++ b/src/crypto/internal/cryptotest/allocations.go
-@@ -5,7 +5,7 @@
+@@ -5,7 +5,6 @@
  package cryptotest
  
  import (
 -	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
  	"internal/asan"
  	"internal/msan"
  	"internal/race"
+@@ -17,11 +16,6 @@ import (
+ // SkipTestAllocations skips the test if there are any factors that interfere
+ // with allocation optimizations.
+ func SkipTestAllocations(t *testing.T) {
+-	// Go+BoringCrypto uses cgo.
+-	if boring.Enabled {
+-		t.Skip("skipping allocations test with BoringCrypto")
+-	}
+-
+ 	// The sanitizers sometimes cause allocations.
+ 	if race.Enabled || msan.Enabled || asan.Enabled {
+ 		t.Skip("skipping allocations test with sanitizers")
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
 index f00e9c80d3c86a..e24b6cbbd00f68 100644
 --- a/src/crypto/internal/cryptotest/hash.go
@@ -1601,6 +1641,38 @@ index 1ca16caa9563e6..3ef22b5ff8222b 100644
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/sysrand"
+diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
+index 22ccb8a35334c9..832910da482f44 100644
+--- a/src/crypto/rand/rand_test.go
++++ b/src/crypto/rand/rand_test.go
+@@ -7,6 +7,7 @@ package rand
+ import (
+ 	"bytes"
+ 	"compress/flate"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"errors"
+ 	"internal/testenv"
+@@ -154,13 +155,17 @@ var sink byte
+ 
+ func TestAllocations(t *testing.T) {
+ 	cryptotest.SkipTestAllocations(t)
++	expectedAllocations := 0
++	if boring.Enabled {
++		expectedAllocations = 1
++	}
+ 	n := int(testing.AllocsPerRun(10, func() {
+ 		buf := make([]byte, 32)
+ 		Read(buf)
+ 		sink ^= buf[0]
+ 	}))
+-	if n > 0 {
+-		t.Errorf("allocs = %d, want 0", n)
++	if n > expectedAllocations {
++		t.Errorf("allocs = %d, want %d", n, expectedAllocations)
+ 	}
+ }
+ 
 diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
 index 90943a0935befb..09ebdfd733e5d6 100644
 --- a/src/crypto/rc4/rc4.go
@@ -1974,10 +2046,10 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 95bb4becd2ff8c..73991434dabaf1 100644
+index c557c3710af710..42832da8349355 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
-@@ -42,8 +42,8 @@ package rsa
+@@ -43,8 +43,8 @@ package rsa
  
  import (
  	"crypto"
@@ -2144,7 +2216,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 11b24db7d6b0a0..cacfad5c30e4c8 100644
+index 11b24db7d6b0a0..9aa28dd024385f 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,11 +8,13 @@ package sha256
@@ -2200,7 +2272,38 @@ index 11b24db7d6b0a0..cacfad5c30e4c8 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -404,13 +420,13 @@ func TestExtraMethods(t *testing.T) {
+@@ -347,6 +363,10 @@ func TestLargeHashes(t *testing.T) {
+ 
+ func TestAllocations(t *testing.T) {
+ 	cryptotest.SkipTestAllocations(t)
++	expectedAllocations := 0.0
++	if boring.Enabled {
++		expectedAllocations = 1
++	}
+ 	if n := testing.AllocsPerRun(10, func() {
+ 		in := []byte("hello, world!")
+ 		out := make([]byte, 0, Size)
+@@ -357,17 +377,10 @@ func TestAllocations(t *testing.T) {
+ 			h.Write(in)
+ 			out = h.Sum(out[:0])
+ 		}
+-		{
+-			h := New224()
+-			h.Reset()
+-			h.Write(in)
+-			out = h.Sum(out[:0])
+-		}
+ 
+ 		Sum256(in)
+-		Sum224(in)
+-	}); n > 0 {
+-		t.Errorf("allocs = %v, want 0", n)
++	}); n > expectedAllocations {
++		t.Errorf("allocs = %v, want %v", n, expectedAllocations)
+ 	}
+ }
+ 
+@@ -404,13 +417,13 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-224", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
  			h := maybeCloner(New224())
@@ -2230,7 +2333,7 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 080bf694f03652..8962a54f1bcddd 100644
+index 080bf694f03652..d6058d541e9e61 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,12 +8,14 @@ package sha512
@@ -2287,7 +2390,29 @@ index 080bf694f03652..8962a54f1bcddd 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -967,25 +983,25 @@ func TestExtraMethods(t *testing.T) {
+@@ -902,6 +918,10 @@ func TestLargeHashes(t *testing.T) {
+ 
+ func TestAllocations(t *testing.T) {
+ 	cryptotest.SkipTestAllocations(t)
++	expectedAllocations := 0.0
++	if boring.Enabled {
++		expectedAllocations = 2
++	}
+ 	if n := testing.AllocsPerRun(10, func() {
+ 		in := []byte("hello, world!")
+ 		out := make([]byte, 0, Size)
+@@ -935,8 +955,8 @@ func TestAllocations(t *testing.T) {
+ 		Sum384(in)
+ 		Sum512_224(in)
+ 		Sum512_256(in)
+-	}); n > 0 {
+-		t.Errorf("allocs = %v, want 0", n)
++	}); n > expectedAllocations {
++		t.Errorf("allocs = %v, want %v", n, expectedAllocations)
+ 	}
+ }
+ 
+@@ -967,25 +987,25 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-384", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha512", func(t *testing.T) {
  			h := maybeCloner(New384())
@@ -2463,7 +2588,7 @@ index 7018bb2336b8f3..d5e02272d7afe1 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 8240e6afae3c6b..5dd00e27037a0f 100644
+index 1e0b5f06672d15..9f72e2376e42ce 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2484,7 +2609,7 @@ index 8240e6afae3c6b..5dd00e27037a0f 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index a52bc76a0d1a9f..6c32550b0129b8 100644
+index 501bdeb66b05a8..571369cdbfcd34 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -10,11 +10,12 @@ import (

From 292c827dacf82fe0165e5af571b713974d152ceb Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 18 Jul 2025 16:06:33 +0000
Subject: [PATCH 386/887] Update submodule to latest master (66536242):
 cmd/compile/internal/escape: improve DWARF .debug_line numbering for literal
 rewriting optimizations

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f506ad2644f..66536242fce 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f506ad2644ff9c76d7e9fa00710248009d449cac
+Subproject commit 66536242fce34787230c42078a7bbd373ef8dcb0

From 1d38d48ecb7d4fa7abda552f022bbc41f1497d24 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Jul 2025 14:20:26 +0100
Subject: [PATCH 387/887] build(deps): bump github/codeql-action from 3.29.2 to
 3.29.3 (#1758)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.2 to 3.29.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/181d5eefc20863364f96762470ba6f862bdef56b...d6bbdef45e766d081b84a2def353b0055f728d3e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index df48dea0e84..72b5d55e686 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/autobuild@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
         with:
           category: /language:go

From 578e07049d06b9da8860dc1f293b6873effffe59 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 21 Jul 2025 16:07:42 +0000
Subject: [PATCH 388/887] Update submodule to latest master (e5502e09): cmd/go:
 check subcommand properties

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 66536242fce..e5502e0959b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 66536242fce34787230c42078a7bbd373ef8dcb0
+Subproject commit e5502e0959bb54ec70ca500e8d2b6f5ac5efbc53

From 327c7e7c8c8afd253cdc2a6fb9dba7bed51978ac Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 22 Jul 2025 14:40:51 +0200
Subject: [PATCH 389/887] Delete ms_tls_config_schannel patch (#1764)

* delete ms_tls_config_schannel patch

* remove ms_tls_config_schannel experiment from CI
---
 .../stages/go-builder-matrix-stages.yml       |   1 -
 ...nt-ms_tls_config_schannel-experiment.patch | 454 ------------------
 2 files changed, 455 deletions(-)
 delete mode 100644 patches/0011-implement-ms_tls_config_schannel-experiment.patch

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 6cbeb1b363a..c42048f42a0 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -101,7 +101,6 @@ stages:
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
-          - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { experiment: nosystemcrypto, os: windows, hostArch: amd64, arch: 386, config: buildandpack }
         - ${{ if parameters.outerloop }}:
diff --git a/patches/0011-implement-ms_tls_config_schannel-experiment.patch b/patches/0011-implement-ms_tls_config_schannel-experiment.patch
deleted file mode 100644
index 1a8838bfa36..00000000000
--- a/patches/0011-implement-ms_tls_config_schannel-experiment.patch
+++ /dev/null
@@ -1,454 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
-Date: Thu, 3 Jul 2025 15:13:26 +0200
-Subject: [PATCH] implement ms_tls_config_schannel experiment
-
----
- src/crypto/tls/fips140_test.go                | 10 +++
- src/crypto/tls/handshake_client_test.go       |  6 ++
- src/crypto/tls/handshake_server_test.go       |  4 +
- src/crypto/tls/schannel_disabled_test.go      | 11 +++
- src/crypto/tls/schannel_windows.go            | 75 +++++++++++++++++
- src/crypto/tls/schannel_windows_test.go       | 81 +++++++++++++++++++
- src/crypto/tls/tls_test.go                    | 13 +++
- .../exp_ms_tls_config_schannel_off.go         |  8 ++
- .../exp_ms_tls_config_schannel_on.go          |  8 ++
- src/internal/goexperiment/flags.go            |  4 +
- .../syscall/windows/security_windows.go       | 28 +++++++
- .../syscall/windows/zsyscall_windows.go       | 16 ++++
- 12 files changed, 264 insertions(+)
- create mode 100644 src/crypto/tls/schannel_disabled_test.go
- create mode 100644 src/crypto/tls/schannel_windows.go
- create mode 100644 src/crypto/tls/schannel_windows_test.go
- create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
- create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
-
-diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 711ce750a71a93..f3b993fc0c669e 100644
---- a/src/crypto/tls/fips140_test.go
-+++ b/src/crypto/tls/fips140_test.go
-@@ -14,6 +14,7 @@ import (
- 	"crypto/x509/pkix"
- 	"encoding/pem"
- 	"fmt"
-+	"internal/goexperiment"
- 	"internal/obscuretestdata"
- 	"internal/testenv"
- 	"math/big"
-@@ -52,6 +53,12 @@ func generateKeyShare(group CurveID) keyShare {
- 
- func TestFIPSServerProtocolVersion(t *testing.T) {
- 	test := func(t *testing.T, name string, v uint16, msg string) {
-+		if goexperiment.MS_TLS_Config_Schannel {
-+			if v < VersionTLS12 {
-+				// Most Windows versions do not support TLS 1.0 or 1.1.
-+				t.Skipf("skipping Schannel cipher suite test for version %x", v)
-+			}
-+		}
- 		t.Run(name, func(t *testing.T) {
- 			serverConfig := testConfig.Clone()
- 			serverConfig.MinVersion = VersionSSL30
-@@ -187,6 +194,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
- 		}
- 		serverConfig.BuildNameToCertificate()
- 		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
-+			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(id) {
-+				t.Skip("skipping Schannel unsupported cipher suite")
-+			}
- 			clientHello := &clientHelloMsg{
- 				vers:                         VersionTLS12,
- 				random:                       make([]byte, 32),
-diff --git a/src/crypto/tls/handshake_client_test.go b/src/crypto/tls/handshake_client_test.go
-index 6118711a0eb65a..93ce0c90875cd8 100644
---- a/src/crypto/tls/handshake_client_test.go
-+++ b/src/crypto/tls/handshake_client_test.go
-@@ -20,6 +20,7 @@ import (
- 	"errors"
- 	"fmt"
- 	"internal/byteorder"
-+	"internal/goexperiment"
- 	"io"
- 	"math/big"
- 	"net"
-@@ -2398,6 +2399,11 @@ func testGetClientCertificate(t *testing.T, version uint16) {
- 			t.Logf("skipping test %d for FIPS mode", i)
- 			continue
- 		}
-+		if goexperiment.MS_TLS_Config_Schannel && clientConfig.MaxVersion == VersionTLS11 {
-+			// TLS 1.1 isn't available on Schannel
-+			t.Logf("skipping test %d on Schannel", i)
-+			continue
-+		}
- 
- 		type serverResult struct {
- 			cs  ConnectionState
-diff --git a/src/crypto/tls/handshake_server_test.go b/src/crypto/tls/handshake_server_test.go
-index a6d64a506a0542..0c604228f7786f 100644
---- a/src/crypto/tls/handshake_server_test.go
-+++ b/src/crypto/tls/handshake_server_test.go
-@@ -16,6 +16,7 @@ import (
- 	"encoding/pem"
- 	"errors"
- 	"fmt"
-+	"internal/goexperiment"
- 	"io"
- 	"net"
- 	"os"
-@@ -341,6 +342,9 @@ func TestTLSPointFormats(t *testing.T) {
- 			continue
- 		}
- 		t.Run(tt.name, func(t *testing.T) {
-+			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(tt.cipherSuites[0]) {
-+				t.Skip("skipping Schannel unsupported cipher suite")
-+			}
- 			clientHello := &clientHelloMsg{
- 				vers:               VersionTLS12,
- 				random:             make([]byte, 32),
-diff --git a/src/crypto/tls/schannel_disabled_test.go b/src/crypto/tls/schannel_disabled_test.go
-new file mode 100644
-index 00000000000000..d598d48dedf762
---- /dev/null
-+++ b/src/crypto/tls/schannel_disabled_test.go
-@@ -0,0 +1,11 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !windows || !goexperiment.ms_tls_config_schannel
-+
-+package tls
-+
-+func isSchannelCipherSuite(id uint16) bool {
-+	return false
-+}
-diff --git a/src/crypto/tls/schannel_windows.go b/src/crypto/tls/schannel_windows.go
-new file mode 100644
-index 00000000000000..cf660080f24c2f
---- /dev/null
-+++ b/src/crypto/tls/schannel_windows.go
-@@ -0,0 +1,75 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.ms_tls_config_schannel
-+
-+package tls
-+
-+import (
-+	"internal/syscall/windows"
-+	"slices"
-+	"unsafe"
-+)
-+
-+func init() {
-+	cipherSuitesSchannel, err := cipherSuitesSchannel()
-+	if err != nil {
-+		panic(err) // This should never happen, as Schannel is always available on Windows.
-+	}
-+	cipherSuitesPreferenceOrder = filterCipherSuites(cipherSuitesSchannel, cipherSuitesPreferenceOrder)
-+	cipherSuitesPreferenceOrderNoAES = filterCipherSuites(cipherSuitesSchannel, cipherSuitesPreferenceOrderNoAES)
-+	defaultCipherSuitesTLS13 = filterCipherSuites(cipherSuitesSchannel, defaultCipherSuitesTLS13)
-+	defaultCipherSuitesTLS13NoAES = filterCipherSuites(cipherSuitesSchannel, defaultCipherSuitesTLS13NoAES)
-+	allowedCipherSuitesFIPS = filterCipherSuites(cipherSuitesSchannel, allowedCipherSuitesFIPS)
-+	allowedCipherSuitesTLS13FIPS = filterCipherSuites(cipherSuitesSchannel, allowedCipherSuitesTLS13FIPS)
-+}
-+
-+func cipherSuiteID(name string) (uint16, bool) {
-+	for _, c := range CipherSuites() {
-+		if c.Name == name {
-+			return c.ID, true
-+		}
-+	}
-+	for _, c := range InsecureCipherSuites() {
-+		if c.Name == name {
-+			return c.ID, true
-+		}
-+	}
-+	return 0, false
-+}
-+
-+// cipherSuitesSchannel returns all the cipher suites that Schannel supports in Schannel's preference order.
-+func cipherSuitesSchannel() ([]uint16, error) {
-+	// Get all the cipher suites that Schannel supports in preference order.
-+	var size uint32
-+	var funcs *windows.CRYPT_CONTEXT_FUNCTIONS
-+	err := windows.BCryptEnumContextFunctions(windows.CRYPT_LOCAL, unsafe.SliceData(windows.SSL_CONTEXT[:]), windows.NCRYPT_SCHANNEL_INTERFACE, &size, &funcs)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer windows.BCryptFreeBuffer(unsafe.Pointer(funcs))
-+
-+	suites := make([]uint16, 0, funcs.Count) // order[i] will be the index of suites[i] in the Schannel list
-+	for i := range funcs.Count {
-+		name := windows.UTF16PtrToString(funcs.At(int(i)))
-+		id, ok := cipherSuiteID(name)
-+		if !ok {
-+			continue // cipher suite not found in the provided list
-+		}
-+		suites = append(suites, id)
-+	}
-+	return suites, nil
-+}
-+
-+// filterCipherSuites filters the provided cipher suites, creating a new slice
-+// that only includes those that are in the allowed list.
-+func filterCipherSuites(suites, allowed []uint16) []uint16 {
-+	out := make([]uint16, 0, len(suites))
-+	for _, suite := range suites {
-+		if slices.Contains(allowed, suite) {
-+			out = append(out, suite)
-+		}
-+	}
-+	return out
-+}
-diff --git a/src/crypto/tls/schannel_windows_test.go b/src/crypto/tls/schannel_windows_test.go
-new file mode 100644
-index 00000000000000..3387e8419b950f
---- /dev/null
-+++ b/src/crypto/tls/schannel_windows_test.go
-@@ -0,0 +1,81 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.ms_tls_config_schannel
-+
-+package tls
-+
-+import (
-+	"bytes"
-+	"os/exec"
-+	"slices"
-+	"sync"
-+	"testing"
-+)
-+
-+var schannelSuites = sync.OnceValue(func() []uint16 {
-+	cipherSuites, err := cipherSuitesSchannel()
-+	if err != nil {
-+		panic(err) // This should never happen, as Schannel is always available on Windows.
-+	}
-+	return cipherSuites
-+})
-+
-+func isSchannelCipherSuite(id uint16) bool {
-+	return slices.Contains(schannelSuites(), id)
-+}
-+
-+func TestCipherSuitesSchannel(t *testing.T) {
-+	cipherSuites, err := cipherSuitesSchannel()
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	if len(cipherSuites) == 0 {
-+		t.Fatal("cipherSuitesSchannel returned no cipher suites")
-+	}
-+
-+	for _, suite := range cipherSuites {
-+		if suite == 0 {
-+			t.Fatal("cipherSuitesSchannel returned a 0 cipher suite")
-+		}
-+	}
-+
-+	// Check that all the cipher suites are present in the Get-TlsCipherSuite output.
-+	output, err := exec.Command("powershell", "-Command", "Get-TlsCipherSuite").CombinedOutput()
-+	if err != nil {
-+		t.Fatalf("failed to get TLS cipher suites: %v\n%s", err, output)
-+	}
-+	for _, id := range cipherSuites {
-+		name := CipherSuiteName(id)
-+		if !bytes.Contains(output, []byte(name)) {
-+			t.Errorf("cipher suite %s not found in PowerShell output", name)
-+		}
-+	}
-+}
-+
-+func TestCipherSuitePreferenceSchannel(t *testing.T) {
-+	// Schannel should prefer AES-256 over AES-128.
-+	serverConfig := &Config{
-+		CipherSuites: []uint16{TLS_RSA_WITH_RC4_128_SHA, TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384},
-+		Certificates: testConfig.Certificates,
-+		MaxVersion:   VersionTLS13,
-+		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
-+			if chi.CipherSuites[0] != TLS_AES_256_GCM_SHA384 {
-+				t.Error("the advertised order should not depend on Config.CipherSuites")
-+			}
-+			return nil, nil
-+		},
-+	}
-+	clientConfig := &Config{
-+		CipherSuites:       []uint16{TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384},
-+		InsecureSkipVerify: true,
-+	}
-+	state, _, err := testHandshake(t, clientConfig, serverConfig)
-+	if err != nil {
-+		t.Fatalf("handshake failed: %s", err)
-+	}
-+	if state.CipherSuite != TLS_AES_256_GCM_SHA384 {
-+		t.Error("the preference order should not depend on Config.CipherSuites")
-+	}
-+}
-diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index bfcc62ccfb8ba0..737157b881881b 100644
---- a/src/crypto/tls/tls_test.go
-+++ b/src/crypto/tls/tls_test.go
-@@ -21,6 +21,7 @@ import (
- 	"encoding/pem"
- 	"errors"
- 	"fmt"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"io"
- 	"math"
-@@ -211,6 +212,10 @@ func skipFIPS(t *testing.T) {
- 	if fips140tls.Required() {
- 		t.Skip("skipping test in FIPS mode")
- 	}
-+	if goexperiment.MS_TLS_Config_Schannel {
-+		// Reuse the FIPS skip logic for Schannel.
-+		t.Skip("skipping test in Schannel mode")
-+	}
- }
- 
- func TestDialTimeout(t *testing.T) {
-@@ -1289,6 +1294,9 @@ func TestConnectionState(t *testing.T) {
- 		if !isFIPSVersion(v) && fips140tls.Required() {
- 			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
- 		}
-+		if goexperiment.MS_TLS_Config_Schannel && v < VersionTLS12 {
-+			t.Skipf("skipping test for Schannel unsupported version %x", v)
-+		}
- 		var name string
- 		switch v {
- 		case VersionTLS10:
-@@ -1545,6 +1553,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
- }
- 
- func TestCipherSuites(t *testing.T) {
-+	if goexperiment.MS_TLS_Config_Schannel {
-+		// Schannel modifies the cipher suite list, so this test
-+		// is not applicable.
-+		t.Skip("skipping CipherSuites test in Schannel mode")
-+	}
- 	var lastID uint16
- 	for _, c := range CipherSuites() {
- 		if lastID > c.ID {
-diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
-new file mode 100644
-index 00000000000000..db7790d1a1f1b9
---- /dev/null
-+++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.ms_tls_config_schannel
-+
-+package goexperiment
-+
-+const MS_TLS_Config_Schannel = false
-+const MS_TLS_Config_SchannelInt = 0
-diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
-new file mode 100644
-index 00000000000000..a2dbc6187da2a0
---- /dev/null
-+++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.ms_tls_config_schannel
-+
-+package goexperiment
-+
-+const MS_TLS_Config_Schannel = true
-+const MS_TLS_Config_SchannelInt = 1
-diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 6b4289503d57ae..90b046af1965f1 100644
---- a/src/internal/goexperiment/flags.go
-+++ b/src/internal/goexperiment/flags.go
-@@ -147,4 +147,8 @@ type Flags struct {
- 
- 	// GreenTeaGC enables the Green Tea GC implementation.
- 	GreenTeaGC bool
-+
-+	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher suites
-+	// according to the Windows Schannel settings.
-+	MS_TLS_Config_Schannel bool
- }
-diff --git a/src/internal/syscall/windows/security_windows.go b/src/internal/syscall/windows/security_windows.go
-index f0ab52ac819baf..d6ef32c0e5c089 100644
---- a/src/internal/syscall/windows/security_windows.go
-+++ b/src/internal/syscall/windows/security_windows.go
-@@ -262,3 +262,31 @@ func GetSidSubAuthorityCount(sid *syscall.SID) uint8 {
- 	defer runtime.KeepAlive(sid)
- 	return *(*uint8)(unsafe.Pointer(getSidSubAuthorityCount(sid)))
- }
-+
-+const (
-+	CRYPT_LOCAL = 0x00000001
-+
-+	CRYPT_UM = 0x00000001
-+
-+	NCRYPT_SCHANNEL_INTERFACE = 0x00010002
-+)
-+
-+var SSL_CONTEXT = [...]uint16{'S', 'S', 'L', 0}
-+
-+type CRYPT_CONTEXT_FUNCTIONS struct {
-+	Count     uint32
-+	Functions **uint16 // pointer to an array of pointers to null-terminated UTF-16 function names
-+}
-+
-+func (ccf *CRYPT_CONTEXT_FUNCTIONS) At(i int) *uint16 {
-+	if i < 0 || i >= int(ccf.Count) {
-+		panic("index out of range")
-+	}
-+	if ccf.Functions == nil || *ccf.Functions == nil {
-+		return nil
-+	}
-+	return *(**uint16)(unsafe.Add(unsafe.Pointer(ccf.Functions), uintptr(i)*unsafe.Sizeof(uintptr(0))))
-+}
-+
-+//sys	BCryptFreeBuffer(buffer unsafe.Pointer) = bcrypt.BCryptFreeBuffer
-+//sys	BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) = bcrypt.BCryptEnumContextFunctions
-diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index 90cf0b92a49bc4..db43b5da72f00e 100644
---- a/src/internal/syscall/windows/zsyscall_windows.go
-+++ b/src/internal/syscall/windows/zsyscall_windows.go
-@@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
- 
- var (
- 	modadvapi32         = syscall.NewLazyDLL(sysdll.Add("advapi32.dll"))
-+	modbcrypt           = syscall.NewLazyDLL(sysdll.Add("bcrypt.dll"))
- 	modbcryptprimitives = syscall.NewLazyDLL(sysdll.Add("bcryptprimitives.dll"))
- 	modiphlpapi         = syscall.NewLazyDLL(sysdll.Add("iphlpapi.dll"))
- 	modkernel32         = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
-@@ -63,6 +64,8 @@ var (
- 	procQueryServiceStatus                = modadvapi32.NewProc("QueryServiceStatus")
- 	procRevertToSelf                      = modadvapi32.NewProc("RevertToSelf")
- 	procSetTokenInformation               = modadvapi32.NewProc("SetTokenInformation")
-+	procBCryptEnumContextFunctions        = modbcrypt.NewProc("BCryptEnumContextFunctions")
-+	procBCryptFreeBuffer                  = modbcrypt.NewProc("BCryptFreeBuffer")
- 	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
- 	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
- 	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -242,6 +245,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
- 	return
- }
- 
-+func BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall6(procBCryptEnumContextFunctions.Addr(), 5, uintptr(table), uintptr(unsafe.Pointer(context)), uintptr(iface), uintptr(unsafe.Pointer(bufferSize)), uintptr(unsafe.Pointer(buffer)), 0)
-+	if r0 != 0 {
-+		ntstatus = NTStatus(r0)
-+	}
-+	return
-+}
-+
-+func BCryptFreeBuffer(buffer unsafe.Pointer) {
-+	syscall.Syscall(procBCryptFreeBuffer.Addr(), 1, uintptr(buffer), 0, 0)
-+	return
-+}
-+
- func ProcessPrng(buf []byte) (err error) {
- 	var _p0 *byte
- 	if len(buf) > 0 {

From df57fd4eb65540d669cd1eb601d4c2e734652e15 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 22 Jul 2025 18:09:11 +0100
Subject: [PATCH 390/887] codeql: set GOEXPERIMENT=nosystemcrypto (#1763)

* codeql: set GOEXPERIMENT=nosystemcrypto for linux arm32

* set GOEXPERIMENT=nosystemcrypto on all backends for parity
---
 eng/pipeline/stages/run-codeql.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eng/pipeline/stages/run-codeql.yml b/eng/pipeline/stages/run-codeql.yml
index 4a6addb8e8e..8d51a4caf08 100644
--- a/eng/pipeline/stages/run-codeql.yml
+++ b/eng/pipeline/stages/run-codeql.yml
@@ -123,4 +123,6 @@ stages:
                 go build cmd/...
                 # Build our infra tools.
                 ( cd eng/_util/ && go build ./... )
+              env:
+                GOEXPERIMENT: nosystemcrypto
               displayName: Build ${{ c.os }}-${{ c.arch }}

From 765ca6be24863ab7192db63f805ee1a1446fee06 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Tue, 22 Jul 2025 18:53:48 +0000
Subject: [PATCH 391/887] Update submodule to latest master (c74399e7): net:
 correct comment for ListenConfig.ListenPacket

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e5502e0959b..c74399e7f5e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e5502e0959bb54ec70ca500e8d2b6f5ac5efbc53
+Subproject commit c74399e7f5e763e6c25978d090122a0a73a695ee

From 147b645a07f158f4666d254ca0599fb076e036b6 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 23 Jul 2025 20:37:49 +0200
Subject: [PATCH 392/887] Add Windows 2019 CI builder (#1765)

* add Windows 2019 CI builder

* read darwin code

* add missing EOF

* mark builder as broken

* move distro default to shirthand-builders

* reduce broken retries on windows

* don't retry on broken builders
---
 eng/pipeline/stages/builders-to-stages.yml      | 17 +++++++++--------
 .../stages/go-builder-matrix-stages.yml         |  1 +
 eng/pipeline/stages/pool-1.yml                  |  2 ++
 eng/pipeline/stages/pool-2.yml                  |  8 +++++---
 eng/pipeline/stages/pool.yml                    |  1 +
 .../stages/shorthand-builders-to-builders.yml   |  2 ++
 6 files changed, 20 insertions(+), 11 deletions(-)

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 5bd1916e581..79447b2318f 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -42,14 +42,15 @@ stages:
                 releaseVersion: ${{ parameters.releaseVersion }}
                 official: ${{ parameters.official }}
                 createSymbols: ${{ parameters.createSymbols }}
-                # Attempt to retry the build on Windows to mitigate flakiness:
-                # "Access Denied" during EXE copying and general flakiness during tests.
-                ${{ if eq(builder.os, 'windows') }}:
-                  retryAttempts: [1, 2, 3, 4, "FINAL"]
-                # Attempt to retry the build on macOS to mitigate flakiness:
-                # "read: connection reset by peer" in cmd/go tests
-                ${{ if eq(builder.os, 'darwin') }}:
-                  retryAttempts: [1, 2, "FINAL"]
+                ${{ if not(builder.broken) }}:
+                  # Attempt to retry the build on Windows to mitigate flakiness:
+                  # "Access Denied" during EXE copying and general flakiness during tests.
+                  ${{ if eq(builder.os, 'windows') }}:
+                    retryAttempts: [1, 2, 3, 4, "FINAL"]
+                  # Attempt to retry the build on macOS to mitigate flakiness:
+                  # "read: connection reset by peer" in cmd/go tests
+                  ${{ if eq(builder.os, 'darwin') }}:
+                    retryAttempts: [1, 2, "FINAL"]
 
     - ${{ if eq(parameters.sign, true) }}:
       - template: pool.yml
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index c42048f42a0..ce317cf9601 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -101,6 +101,7 @@ stages:
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
+          - { experiment: systemcrypto, os: windows, arch: amd64, config: test, distro: '2019', broken: true } # Affected by https://golang.org/issue/10842.
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { experiment: nosystemcrypto, os: windows, hostArch: amd64, arch: 386, config: buildandpack }
         - ${{ if parameters.outerloop }}:
diff --git a/eng/pipeline/stages/pool-1.yml b/eng/pipeline/stages/pool-1.yml
index a53b4a72498..6fdee5e4fee 100644
--- a/eng/pipeline/stages/pool-1.yml
+++ b/eng/pipeline/stages/pool-1.yml
@@ -16,6 +16,8 @@ parameters:
     type: string
   - name: hostArch
     type: string
+  - name: distro
+    type: string
 
 stages:
   - template: pool-2.yml
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 5e9bbf76427..8ad85a5dc26 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -16,6 +16,8 @@ parameters:
     type: string
   - name: hostArch
     type: string
+  - name: distro
+    type: string
 
   - name: name
     type: string
@@ -30,13 +32,13 @@ stages:
 
         ${{ if eq(parameters.os, 'windows') }}:
           ${{ if parameters.official }}:
-            image: 1es-windows-2022
+            image: 1es-windows-${{ parameters.distro }}
             os: windows
           ${{ elseif parameters.public }}:
             # https://helix.dot.net/#1esPools
-            demands: ImageOverride -equals 1es-windows-2022-open
+            demands: ImageOverride -equals 1es-windows-${{ parameters.distro }}-open
           ${{ else }}:
-            demands: ImageOverride -equals 1es-windows-2022
+            demands: ImageOverride -equals 1es-windows-${{ parameters.distro }}
             os: windows
 
         ${{ elseif eq(parameters.os, 'linux') }}:
diff --git a/eng/pipeline/stages/pool.yml b/eng/pipeline/stages/pool.yml
index 610fe485301..5fc23de590b 100644
--- a/eng/pipeline/stages/pool.yml
+++ b/eng/pipeline/stages/pool.yml
@@ -27,4 +27,5 @@ stages:
       official: ${{ parameters.inner.parameters.official }}
       os: ${{ parameters.inner.parameters.builder.os }}
       hostArch: ${{ parameters.inner.parameters.builder.hostArch }}
+      distro: ${{ parameters.inner.parameters.builder.distro }}
       inner: ${{ parameters.inner }}
diff --git a/eng/pipeline/stages/shorthand-builders-to-builders.yml b/eng/pipeline/stages/shorthand-builders-to-builders.yml
index 123790bcad9..ce798ddff94 100644
--- a/eng/pipeline/stages/shorthand-builders-to-builders.yml
+++ b/eng/pipeline/stages/shorthand-builders-to-builders.yml
@@ -33,6 +33,8 @@ stages:
             id: ${{ builder.os }}_${{ coalesce(builder.distro, 'default') }}_${{ coalesce(builder.hostArch, 'default') }}_${{ builder.arch }}_${{ builder.config }}_${{ coalesce(builder.experiment, 'default') }}_${{ coalesce(builder.fips, false) }}
             ${{ if not(builder.hostArch) }}:
               hostArch: ${{ builder.arch }}
+            ${{ if and(not(builder.distro), eq(builder.os, 'windows')) }}:
+              distro: '2022'
             # Set up some parameters that are for display purposes. AzDO YAML expressions can't
             # branch, so we must to prepare these values here rather than where they're used.
             ${{ if builder.distro }}:

From 656f5b5ba81be4e856190bb3357a1c79d9cb88f0 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 16:53:05 -0700
Subject: [PATCH 393/887] Summarize test JSON output to stdout

---
 eng/_util/buildutil/buildutil.go         |   2 +-
 eng/_util/buildutil/testjson.go          | 145 +++++++++++++++++++++++
 eng/_util/cmd/build/build.go             |  44 ++-----
 eng/_util/cmd/run-builder/run-builder.go |  39 ++----
 eng/pipeline/stages/run-stage.yml        |   3 +-
 5 files changed, 172 insertions(+), 61 deletions(-)
 create mode 100644 eng/_util/buildutil/testjson.go

diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index 1d9132753d4..47edeb72036 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -125,7 +125,7 @@ func UnassignGOROOT() error {
 
 // RunCmdMultiWriter runs a command and outputs the stdout to multiple [io.Writer].
 // The writers are closed after the command completes.
-func RunCmdMultiWriter(cmdline []string, stdout ...io.Writer) (err error) {
+func RunCmdMultiWriter(cmdline []string, stdout ...io.Writer) error {
 	c := exec.Command(cmdline[0], cmdline[1:]...)
 	c.Stdout = io.MultiWriter(stdout...)
 	c.Stderr = os.Stderr
diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
new file mode 100644
index 00000000000..3a6a0201652
--- /dev/null
+++ b/eng/_util/buildutil/testjson.go
@@ -0,0 +1,145 @@
+package buildutil
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"flag"
+	"fmt"
+	"io"
+	"os"
+	"time"
+
+	"github.com/microsoft/go-infra/json2junit"
+)
+
+type TestJSONFlags struct {
+	JUnitOutFile           string
+	RawTestOutArtifactName string
+}
+
+func BindTestJSONFlags() *TestJSONFlags {
+	var f TestJSONFlags
+	flag.StringVar(
+		&f.JUnitOutFile, "junitout", "junit.xml",
+		"Write the test output to this path as a JUnit file if running tests.")
+	flag.StringVar(
+		&f.RawTestOutArtifactName, "rawtestoutartifact", "",
+		"Upload raw test output to AzDO as an artifact with this name\n"+
+			"and summarize any test JSON before it reaches stdout.")
+	return &f
+}
+
+func (f *TestJSONFlags) AppendToCmdline(cmdline []string) []string {
+	if f != nil {
+		if f.JUnitOutFile != "" {
+			cmdline = append(cmdline, "-junitout", f.JUnitOutFile)
+		}
+		if f.RawTestOutArtifactName != "" {
+			cmdline = append(cmdline, "-rawtestoutartifact", f.RawTestOutArtifactName)
+		}
+	}
+	return cmdline
+}
+
+func (f *TestJSONFlags) RunTestCmd(cmdline []string) error {
+	var writers []io.Writer
+	var extraClosers []func() error
+
+	var needJSON bool
+
+	if f != nil {
+		if f.JUnitOutFile != "" {
+			jf, err := os.Create(f.JUnitOutFile)
+			if err != nil {
+				return err
+			}
+			writers = append(writers, json2junit.NewConverter(jf))
+			extraClosers = append(extraClosers, jf.Close)
+			needJSON = true
+		}
+		if f.RawTestOutArtifactName != "" {
+			tmpFile, err := os.CreateTemp("", "ms-go-raw-test-out-*.txt")
+			if err != nil {
+				return err
+			}
+			fmt.Printf("---- Created temp file for raw JSON test output: %v\n", tmpFile.Name())
+			writers = append(
+				writers,
+				&testJSONSummaryConverter{w: os.Stdout},
+				tmpFile,
+			)
+			extraClosers = append(extraClosers, func() error {
+				err := tmpFile.Close()
+				fmt.Fprintf(os.Stdout, "##vso[artifact.upload artifactname=%s]%s\n", f.RawTestOutArtifactName, tmpFile.Name())
+				return err
+			})
+			needJSON = true
+		} else {
+			// If we don't summarize, we need to write directly to stdout.
+			writers = append(writers, os.Stdout)
+		}
+	}
+	if needJSON {
+		cmdline = append(cmdline, "-json")
+	}
+
+	errs := []error{RunCmdMultiWriter(cmdline, writers...)}
+	for _, closer := range extraClosers {
+		errs = append(errs, closer())
+	}
+	return errors.Join(errs...)
+}
+
+// testJSONSummaryConverter reads Go JSON test output and writes a summary that
+// is sufficient for human readability in CI while filtering out excessive
+// details that would otherwise result in hard-to-load CI logs.
+//
+// It is very similar to default "go test" output, but only good enough. It
+// doesn't have the same behavior in some situations.
+type testJSONSummaryConverter struct {
+	b bytes.Buffer
+	w io.Writer
+}
+
+func (c *testJSONSummaryConverter) Write(b []byte) (int, error) {
+	c.b.Write(b)
+	lines := bytes.Split(c.b.Bytes(), []byte("\n"))
+	if len(lines) < 2 {
+		// We don't have a complete line yet.
+		return len(b), nil
+	}
+	completeLines := lines[:len(lines)-1]
+	for _, line := range completeLines {
+		var entry jsonEntry
+		if err := json.Unmarshal(line, &entry); err != nil {
+			// An error means it either isn't a JSON line, or it's an invalid one.
+			// In both cases, simply write it for the summary.
+			fmt.Fprintf(c.w, "%q %v\n", line, err)
+			continue
+		}
+		if entry.Action != "output" || entry.Test != "" {
+			// Too much info for a summary.
+			continue
+		}
+		if entry.Output == "PASS\n" ||
+			entry.Output == "FAIL\n" {
+			continue
+		}
+		_, _ = c.w.Write([]byte(entry.Output))
+	}
+	// Keep the last, incomplete line in the buffer for the next call, if any.
+	c.b.Reset()
+	_, _ = c.b.Write(lines[len(lines)-1])
+	return len(b), nil
+}
+
+// jsonEntry is the parts of a single entry in the JSON file relevant to testJSONHumanConverter.
+type jsonEntry struct {
+	Time    time.Time
+	Action  string
+	Package string
+	Test    string
+	Output  string
+	Elapsed float64
+}
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 465a3b20926..148f62d2fe3 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -15,7 +15,6 @@ import (
 	"runtime"
 	"strings"
 
-	"github.com/microsoft/go-infra/json2junit"
 	"github.com/microsoft/go-infra/patch"
 	"github.com/microsoft/go-infra/submodule"
 	"github.com/microsoft/go/_util/buildutil"
@@ -53,7 +52,8 @@ func main() {
 			"For more refresh options, use the top level 'submodule-refresh' command instead of 'build'.")
 
 	flag.StringVar(&o.Experiment, "experiment", "", "Include this string in GOEXPERIMENT.")
-	flag.StringVar(&o.JUnitOutFile, "junitout", "", "Write the test output to this path as a JUnit file if this builder runs tests.")
+
+	o.TestJSONFlags = buildutil.BindTestJSONFlags()
 
 	o.MaxMakeAttempts = buildutil.MaxMakeRetryAttemptsOrExit()
 
@@ -78,14 +78,15 @@ func main() {
 }
 
 type options struct {
-	SkipBuild    bool
-	Test         bool
-	PackBuild    bool
-	PackSource   bool
-	CreatePDB    bool
-	Refresh      bool
-	Experiment   string
-	JUnitOutFile string
+	SkipBuild  bool
+	Test       bool
+	PackBuild  bool
+	PackSource bool
+	CreatePDB  bool
+	Refresh    bool
+	Experiment string
+
+	TestJSONFlags *buildutil.TestJSONFlags
 
 	MaxMakeAttempts int
 }
@@ -208,27 +209,8 @@ func build(o *options) (err error) {
 			}...,
 		)
 
-		if o.JUnitOutFile != "" {
-			testCommandLine = append(testCommandLine, "-json")
-			f, err := os.Create(o.JUnitOutFile)
-			if err != nil {
-				return err
-			}
-			conv := json2junit.NewConverter(f)
-			err = buildutil.RunCmdMultiWriter(testCommandLine, conv, os.Stdout)
-			if closeErr := conv.Close(); err == nil {
-				err = closeErr
-			}
-			if closeErr := f.Close(); err == nil {
-				err = closeErr
-			}
-			if err != nil {
-				return err
-			}
-		} else {
-			if err := buildutil.RunCmdMultiWriter(testCommandLine, os.Stdout); err != nil {
-				return err
-			}
+		if err := o.TestJSONFlags.RunTestCmd(testCommandLine); err != nil {
+			return err
 		}
 	}
 
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 71150f5979c..4c2b2ba1272 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -5,6 +5,7 @@
 package main
 
 import (
+	"errors"
 	"flag"
 	"fmt"
 	"log"
@@ -13,7 +14,6 @@ import (
 	"strconv"
 	"strings"
 
-	"github.com/microsoft/go-infra/json2junit"
 	"github.com/microsoft/go/_util/buildutil"
 )
 
@@ -40,10 +40,11 @@ func main() {
 	var builder = flag.String("builder", "", "[Required] Specify a builder to run. Note, this may be destructive!")
 	var experiment = flag.String("experiment", "", "Include this string in GOEXPERIMENT.")
 	var fipsMode = flag.Bool("fipsmode", false, "Run the Go tests in FIPS mode.")
-	var junitOutFile = flag.String("junitout", "", "Write the test output to this path as a JUnit file if this builder runs tests.")
 	var build = flag.Bool("build", false, "Run the build.")
 	var test = flag.Bool("test", false, "Run the tests.")
 
+	var testJSONFlags = buildutil.BindTestJSONFlags()
+
 	var help = flag.Bool("h", false, "Print this help message.")
 
 	flag.Usage = func() {
@@ -134,9 +135,7 @@ func main() {
 		// validate the run.ps1 script with "build" tool works to build and test Go. It runs a
 		// subset of the "test" builder's tests, but it uses the dev workflow.
 		testCmdline := append(buildCmdline, "-skipbuild", "-test")
-		if *junitOutFile != "" {
-			testCmdline = append(testCmdline, "-junitout", *junitOutFile)
-		}
+		testCmdline = testJSONFlags.AppendToCmdline(testCmdline)
 		if err := run(testCmdline...); err != nil {
 			log.Fatal(err)
 		}
@@ -197,32 +196,16 @@ func main() {
 			)
 		}
 
-		cmdline = append(cmdline, "-json")
-
 		if *dryRun {
 			fmt.Printf("---- Dry run. Would have run test command: %v\n", cmdline)
 		} else {
-			f, err := os.Create(*junitOutFile)
-			if err != nil {
-				log.Fatal(err)
-			}
-			conv := json2junit.NewConverter(f)
-			err = buildutil.RunCmdMultiWriter(cmdline, conv, os.Stdout)
-			if errClose := conv.Close(); err == nil {
-				err = errClose
-			}
-			if errClose := f.Close(); err == nil {
-				err = errClose
-			}
-			if err != nil {
-				log.Fatal(err)
-			}
-			// If we got an ExitError, the error message was already printed by the command. We just
-			// need to exit with the same exit code.
-			if exitErr, ok := err.(*exec.ExitError); ok {
-				os.Exit(exitErr.ExitCode())
-			}
-			if err != nil {
+			if err := testJSONFlags.RunTestCmd(cmdline); err != nil {
+				// If we got an ExitError, the error message was already printed by the command. We just
+				// need to exit with the same exit code.
+				var exitErr *exec.ExitError
+				if errors.As(err, &exitErr) {
+					os.Exit(exitErr.ExitCode())
+				}
 				// Something else happened: alert the user.
 				log.Fatal(err)
 			}
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index a32d7d937d7..a7edf8e793d 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -270,7 +270,8 @@ stages:
                       -builder '${{ parameters.builder.os }}-${{ parameters.builder.arch }}-${{ parameters.builder.config }}' `
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
-                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/TestResults.xml'
+                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/TestResults.xml' `
+                      -rawtestoutartifact '${{ parameters.builder.id }}-raw-test-output-${{ attempt }}'
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:

From ef8a629e463919acc39757d00cb5a1c39fc0744b Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 21:48:24 -0700
Subject: [PATCH 394/887] License in new file

---
 eng/_util/buildutil/testjson.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 3a6a0201652..e25f0193e53 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -1,3 +1,7 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
 package buildutil
 
 import (

From 5dd4b8d66424557c659a8115f1bbb1970c07d936 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 21:49:36 -0700
Subject: [PATCH 395/887] Join errs as we go

---
 eng/_util/buildutil/testjson.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index e25f0193e53..eb19c3a7550 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -88,11 +88,11 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) error {
 		cmdline = append(cmdline, "-json")
 	}
 
-	errs := []error{RunCmdMultiWriter(cmdline, writers...)}
+	err := RunCmdMultiWriter(cmdline, writers...)
 	for _, closer := range extraClosers {
-		errs = append(errs, closer())
+		err = errors.Join(err, closer())
 	}
-	return errors.Join(errs...)
+	return err
 }
 
 // testJSONSummaryConverter reads Go JSON test output and writes a summary that

From d009af238a0e7ebe1b8de3e4cf3d2aea277ef9b8 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 22:15:44 -0700
Subject: [PATCH 396/887] Use 1ES.PublishPipelineArtifact: log command appears
 not to work in containers

---
 eng/_util/buildutil/testjson.go   | 54 ++++++++++++++-----------------
 eng/pipeline/stages/run-stage.yml |  9 +++++-
 2 files changed, 33 insertions(+), 30 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index eb19c3a7550..402b00f15af 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -12,25 +12,25 @@ import (
 	"fmt"
 	"io"
 	"os"
+	"path/filepath"
 	"time"
 
 	"github.com/microsoft/go-infra/json2junit"
 )
 
 type TestJSONFlags struct {
-	JUnitOutFile           string
-	RawTestOutArtifactName string
+	JUnitOutFile   string
+	RawTestOutFile string
 }
 
 func BindTestJSONFlags() *TestJSONFlags {
 	var f TestJSONFlags
 	flag.StringVar(
 		&f.JUnitOutFile, "junitout", "junit.xml",
-		"Write the test output to this path as a JUnit file if running tests.")
+		"Write the test output to a new file at this path as a JUnit file if running tests.")
 	flag.StringVar(
-		&f.RawTestOutArtifactName, "rawtestoutartifact", "",
-		"Upload raw test output to AzDO as an artifact with this name\n"+
-			"and summarize any test JSON before it reaches stdout.")
+		&f.RawTestOutFile, "rawtestout", "",
+		"Write raw test output to a new file at this path and summarize any test JSON before it reaches stdout.")
 	return &f
 }
 
@@ -39,45 +39,45 @@ func (f *TestJSONFlags) AppendToCmdline(cmdline []string) []string {
 		if f.JUnitOutFile != "" {
 			cmdline = append(cmdline, "-junitout", f.JUnitOutFile)
 		}
-		if f.RawTestOutArtifactName != "" {
-			cmdline = append(cmdline, "-rawtestoutartifact", f.RawTestOutArtifactName)
+		if f.RawTestOutFile != "" {
+			cmdline = append(cmdline, "-rawtestout", f.RawTestOutFile)
 		}
 	}
 	return cmdline
 }
 
-func (f *TestJSONFlags) RunTestCmd(cmdline []string) error {
+func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 	var writers []io.Writer
-	var extraClosers []func() error
-
 	var needJSON bool
 
 	if f != nil {
 		if f.JUnitOutFile != "" {
-			jf, err := os.Create(f.JUnitOutFile)
-			if err != nil {
+			var jf *os.File
+			if jf, err = os.Create(f.JUnitOutFile); err != nil {
 				return err
 			}
+			defer func() {
+				err = errors.Join(err, jf.Close())
+			}()
 			writers = append(writers, json2junit.NewConverter(jf))
-			extraClosers = append(extraClosers, jf.Close)
 			needJSON = true
 		}
-		if f.RawTestOutArtifactName != "" {
-			tmpFile, err := os.CreateTemp("", "ms-go-raw-test-out-*.txt")
-			if err != nil {
+		if f.RawTestOutFile != "" {
+			var rf *os.File
+			if err := os.MkdirAll(filepath.Dir(f.RawTestOutFile), 0o755); err != nil {
+				return fmt.Errorf("failed to create directory for raw test output: %w", err)
+			}
+			if rf, err = os.Create(f.RawTestOutFile); err != nil {
 				return err
 			}
-			fmt.Printf("---- Created temp file for raw JSON test output: %v\n", tmpFile.Name())
+			defer func() {
+				err = errors.Join(err, rf.Close())
+			}()
 			writers = append(
 				writers,
 				&testJSONSummaryConverter{w: os.Stdout},
-				tmpFile,
+				rf,
 			)
-			extraClosers = append(extraClosers, func() error {
-				err := tmpFile.Close()
-				fmt.Fprintf(os.Stdout, "##vso[artifact.upload artifactname=%s]%s\n", f.RawTestOutArtifactName, tmpFile.Name())
-				return err
-			})
 			needJSON = true
 		} else {
 			// If we don't summarize, we need to write directly to stdout.
@@ -88,11 +88,7 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) error {
 		cmdline = append(cmdline, "-json")
 	}
 
-	err := RunCmdMultiWriter(cmdline, writers...)
-	for _, closer := range extraClosers {
-		err = errors.Join(err, closer())
-	}
-	return err
+	return RunCmdMultiWriter(cmdline, writers...)
 }
 
 // testJSONSummaryConverter reads Go JSON test output and writes a summary that
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index a7edf8e793d..aed5a1d6c1c 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -271,7 +271,7 @@ stages:
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
                       -junitout '$(Build.SourcesDirectory)/eng/artifacts/TestResults.xml' `
-                      -rawtestoutartifact '${{ parameters.builder.id }}-raw-test-output-${{ attempt }}'
+                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/RawTestOutput-attempt-${{ attempt }}.txt'
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -297,6 +297,13 @@ stages:
                 buildConfiguration: ${{ parameters.builder.config }}
                 publishRunAttachments: true
 
+            - task: 1ES.PublishPipelineArtifact@1
+              displayName: Publish raw test results
+              condition: succeededOrFailed()
+              inputs:
+                targetPath: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput
+                artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.JobAttempt)
+
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
           #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:
           #     # Retain the build: https://github.com/microsoft/go-lab/issues/59

From b743d09b6bb8cab928083478c9bc9cf822bfd701 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 22:38:17 -0700
Subject: [PATCH 397/887] Use 1ES.PublishPipelineArtifact and
 PublishPipelineArtifact conditionally

---
 eng/pipeline/stages/run-stage.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index aed5a1d6c1c..30f9cb48b3a 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -297,7 +297,7 @@ stages:
                 buildConfiguration: ${{ parameters.builder.config }}
                 publishRunAttachments: true
 
-            - task: 1ES.PublishPipelineArtifact@1
+            - task: ${{ iif(eq(variables['System.TeamProject'], 'public'), '', '1ES.') }}PublishPipelineArtifact@1
               displayName: Publish raw test results
               condition: succeededOrFailed()
               inputs:

From c386e1f1cc81dcd12c4c805375f66b2ee8f6497e Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 23 Jul 2025 22:51:17 -0700
Subject: [PATCH 398/887] Fix testJSONSummaryConverter typo

---
 eng/_util/buildutil/testjson.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 402b00f15af..9e2f219c3dd 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -134,7 +134,7 @@ func (c *testJSONSummaryConverter) Write(b []byte) (int, error) {
 	return len(b), nil
 }
 
-// jsonEntry is the parts of a single entry in the JSON file relevant to testJSONHumanConverter.
+// jsonEntry is the parts of a single entry in the JSON file relevant to testJSONSummaryConverter.
 type jsonEntry struct {
 	Time    time.Time
 	Action  string

From c5338aa468ca08e46e3984641e85e2d7db922f94 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 24 Jul 2025 13:22:57 +0100
Subject: [PATCH 399/887] build(deps): bump github/codeql-action from 3.29.3 to
 3.29.4 (#1772)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.3 to 3.29.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d6bbdef45e766d081b84a2def353b0055f728d3e...4e828ff8d448a8a6e532957b1811f387a63867e8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 72b5d55e686..fe5b5765e40 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
+        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
+        uses: github/codeql-action/autobuild@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
+        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
         with:
           category: /language:go

From 675a332befe1ab21660f1f80595d87e366208212 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 25 Jul 2025 00:08:44 -0700
Subject: [PATCH 400/887] Fix missing JUnit converter Close and other test JSON
 summarization issues (#1775)

* Fix missing JUnit converter Close, improve diagnosability

* Fix accidentally producing JUnit XML by default
---
 eng/_util/buildutil/testjson.go   | 13 ++++++++++---
 eng/pipeline/stages/run-stage.yml |  8 +++++---
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 9e2f219c3dd..6a60709b2fe 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -26,7 +26,7 @@ type TestJSONFlags struct {
 func BindTestJSONFlags() *TestJSONFlags {
 	var f TestJSONFlags
 	flag.StringVar(
-		&f.JUnitOutFile, "junitout", "junit.xml",
+		&f.JUnitOutFile, "junitout", "",
 		"Write the test output to a new file at this path as a JUnit file if running tests.")
 	flag.StringVar(
 		&f.RawTestOutFile, "rawtestout", "",
@@ -53,19 +53,26 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 	if f != nil {
 		if f.JUnitOutFile != "" {
 			var jf *os.File
+			if err := os.MkdirAll(filepath.Dir(f.JUnitOutFile), 0o755); err != nil {
+				return fmt.Errorf("failed to create directory for JUnit output: %v", err)
+			}
 			if jf, err = os.Create(f.JUnitOutFile); err != nil {
 				return err
 			}
 			defer func() {
 				err = errors.Join(err, jf.Close())
 			}()
-			writers = append(writers, json2junit.NewConverter(jf))
+			c := json2junit.NewConverter(jf)
+			defer func() {
+				err = errors.Join(err, c.Close())
+			}()
+			writers = append(writers, c)
 			needJSON = true
 		}
 		if f.RawTestOutFile != "" {
 			var rf *os.File
 			if err := os.MkdirAll(filepath.Dir(f.RawTestOutFile), 0o755); err != nil {
-				return fmt.Errorf("failed to create directory for raw test output: %w", err)
+				return fmt.Errorf("failed to create directory for raw test output: %v", err)
 			}
 			if rf, err = os.Create(f.RawTestOutFile); err != nil {
 				return err
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 30f9cb48b3a..307721ca260 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -270,8 +270,8 @@ stages:
                       -builder '${{ parameters.builder.os }}-${{ parameters.builder.arch }}-${{ parameters.builder.config }}' `
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
-                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/TestResults.xml' `
-                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/RawTestOutput-attempt-${{ attempt }}.txt'
+                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults.xml' `
+                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt'
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -286,17 +286,19 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
+            # Publish test results. Use the last-overwritten result, if multiple attempts were made.
             - task: PublishTestResults@2
               displayName: Publish test results
               condition: succeededOrFailed()
               inputs:
                 testResultsFormat: JUnit
-                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/TestResults.xml
+                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults.xml
                 testRunTitle: $(System.JobDisplayName)
                 buildPlatform: ${{ parameters.builder.arch }}
                 buildConfiguration: ${{ parameters.builder.config }}
                 publishRunAttachments: true
 
+            # Publish raw test JSON output and the published (or attempted to publish) JUnit XML.
             - task: ${{ iif(eq(variables['System.TeamProject'], 'public'), '', '1ES.') }}PublishPipelineArtifact@1
               displayName: Publish raw test results
               condition: succeededOrFailed()

From 1c591df57821d92b7573351bb81278af604a6624 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 25 Jul 2025 08:38:33 +0000
Subject: [PATCH 401/887] Update submodule to latest master (3636ced1):
 encoding/json: fix extra data regression under goexperiment.jsonv2

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c74399e7f5e..3636ced112d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c74399e7f5e763e6c25978d090122a0a73a695ee
+Subproject commit 3636ced112d89da03739fa7d5468c0270addaa28

From da310b00d1b50bcbaa28ae4677ff0390b7f9d66f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 25 Jul 2025 11:00:36 +0200
Subject: [PATCH 402/887] fix conflicts

---
 patches/0003-Implement-crypto-internal-backend.patch | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 2a6a903d47c..fc7e27fbd06 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -422,10 +422,10 @@ index 1f791546f90088..d20890b4e70fae 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index 16e1a4f47f49c0..f987e499da4c15 100644
+index 120ef5339bede0..b7b145fdfc9972 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
-@@ -281,6 +281,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
+@@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
  	// Override GOOS and GOARCH for the build to build the tool using
  	// the same GOOS and GOARCH as this go command.
  	cfg.ForceHost()
@@ -436,14 +436,14 @@ index 16e1a4f47f49c0..f987e499da4c15 100644
  
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
-@@ -288,8 +292,11 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
+@@ -311,8 +315,11 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
  	modload.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
 +		// Now that the tool is built, revert the GOEXPERIMENT
 +		// environment variable to the original value.
 +		env := append(os.Environ(), "GOEXPERIMENT="+originalGOEXPERIMENT)
- 		cmdline := str.StringList(a.Deps[0].BuiltTarget(), a.Args)
+ 		cmdline := str.StringList(builtTool(a), a.Args)
 -		return runBuiltTool(toolName, nil, cmdline)
 +		return runBuiltTool(toolName, env, cmdline)
  	}
@@ -2746,7 +2746,7 @@ index 00000000000000..13782a8241b99a
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 9b7613a62b5a31..1997d90f2f20ba 100644
+index 09e91285502bcf..b2c6db15a23e98 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -348,7 +348,7 @@ var depsRules = `

From ccec81bf937987cfeca0d00bfd292a9ae511d9d3 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Jul 2025 11:53:27 +0200
Subject: [PATCH 403/887] disable telemetry while running CI (#1777)

---
 eng/pipeline/pr-outerloop-pipeline.yml                | 3 +++
 eng/pipeline/pr-pipeline.yml                          | 3 +++
 eng/pipeline/rolling-innerloop-pipeline.yml           | 3 +++
 eng/pipeline/rolling-internal-pipeline.yml            | 2 ++
 eng/pipeline/rolling-internal-validation-pipeline.yml | 2 ++
 eng/pipeline/rolling-pipeline.yml                     | 3 +++
 6 files changed, 16 insertions(+)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 29b4667dfb8..0f775d423c2 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -16,6 +16,9 @@ pr:
   - microsoft/*
   - dev/*
 
+variables:
+  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+
 resources:
   containers:
     - container: ubuntu2204
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index ae3296b9f72..c70163b1086 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -9,6 +9,9 @@ pr:
   - microsoft/*
   - dev/*
 
+variables:
+  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+
 resources:
   containers:
     # Predefine named containers. Using "container:" inside the job would work, because this is not
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 1210115d8bb..c6d2c8e8778 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -20,6 +20,9 @@ parameters:
     type: boolean
     default: false
 
+variables:
+  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+
 resources:
   repositories:
     - repository: 1ESPipelineTemplates
diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index 8f558e8d892..a23a4a52c63 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -43,6 +43,8 @@ variables:
   # MicroBuild configuration.
   - name: TeamName
     value: golang
+  - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
+    value: '0'
 
 resources:
   repositories:
diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index 49210cfc352..1cabd269de1 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -32,6 +32,8 @@ variables:
     # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
     - name: Codeql.Cadence
       value: 0
+  - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
+    value: '0'
 
 resources:
   pipelines:
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 14d555602ba..a0bb9b5b1bb 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -13,6 +13,9 @@ trigger:
       - dev/official/*
 pr: none
 
+variables:
+  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+
 resources:
   repositories:
     - repository: 1ESPipelineTemplates

From ac04aaf8594ece424cf8491cb17770b0027534bd Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Jul 2025 13:52:48 +0200
Subject: [PATCH 404/887] only upload MS telemetry when building code (#1779)

---
 patches/0010-add-appinsights-telemetry.patch | 111 ++++++++++++++-----
 1 file changed, 82 insertions(+), 29 deletions(-)

diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index 59b6c9685e7..6b96153bbe3 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -6,12 +6,13 @@ Subject: [PATCH] Add appinsights telemetry
 ---
  README.md                                     | 15 ++++++
  .../internal/telemetrystats/telemetrystats.go | 13 +++++
- src/cmd/go/main.go                            |  1 +
+ src/cmd/go/main.go                            |  8 +++
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
- src/cmd/go/script_test.go                     |  6 +++
- src/cmd/internal/telemetry/counter/counter.go | 37 ++++++++++++-
- .../telemetry/counter/counter_bootstrap.go    |  2 +
- 7 files changed, 125 insertions(+), 1 deletion(-)
+ src/cmd/go/script_test.go                     |  8 +++
+ src/cmd/go/scriptcmds_test.go                 | 11 ++++
+ src/cmd/internal/telemetry/counter/counter.go | 50 +++++++++++++++++-
+ .../telemetry/counter/counter_bootstrap.go    |  3 ++
+ 8 files changed, 159 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -68,17 +69,24 @@ index 950453fa951374..d5b642240f16b7 100644
 +	}
  }
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index e81969ca4a3144..61b9219df8f389 100644
+index e81969ca4a3144..67dbcb2e7a3cb9 100644
 --- a/src/cmd/go/main.go
 +++ b/src/cmd/go/main.go
-@@ -102,6 +102,7 @@ func main() {
- 	cmdIsGoTelemetryOff := cmdIsGoTelemetryOff()
- 	if !cmdIsGoTelemetryOff {
- 		counter.Open() // Open the telemetry counter file so counters can be written to it.
-+		base.AtExit(counter.Close)
+@@ -111,6 +111,14 @@ func main() {
  	}
- 	handleChdirFlag()
- 	toolchain.Select()
+ 	flag.Usage = base.Usage
+ 	flag.Parse()
++	if args := flag.Args(); len(args) > 0 {
++		switch args[0] {
++		case "build", "install", "run":
++			// Don't start Microsoft telemetry for commands that don't build anything.
++			counter.OpenMicrosoft()
++			base.AtExit(counter.CloseMicrosoft)
++		}
++	}
+ 	counter.Inc("go/invocations")
+ 	counter.CountFlags("go/flag:", *flag.CommandLine)
+ 
 diff --git a/src/cmd/go/mstelemetry_test.go b/src/cmd/go/mstelemetry_test.go
 new file mode 100644
 index 00000000000000..6993137ad56e8c
@@ -138,7 +146,7 @@ index 00000000000000..6993137ad56e8c
 +	fmt.Fprint(w, `{"itemsReceived": 1, "itemsAccepted": 1}`)
 +}
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index 1345ea8bb8e530..1a7a62fdc7c19d 100644
+index 1345ea8bb8e530..e2b75957e21d3a 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
 @@ -60,6 +60,7 @@ func TestScript(t *testing.T) {
@@ -158,18 +166,49 @@ index 1345ea8bb8e530..1a7a62fdc7c19d 100644
  		"newline=\n",
  	}
  
-@@ -404,6 +407,9 @@ func readCounters(t *testing.T, telemetryDir string) map[string]uint64 {
- func checkCounters(t *testing.T, telemetryDir string) {
- 	counters := readCounters(t, telemetryDir)
- 	if _, ok := scriptGoInvoked.Load(testing.TB(t)); ok {
+@@ -408,6 +411,11 @@ func checkCounters(t *testing.T, telemetryDir string) {
+ 			t.Fatal("go was invoked but no counters were incremented")
+ 		}
+ 	}
++	if _, ok := scriptGoBuildInvoked.Load(testing.TB(t)); ok {
 +		if appInsightsRequests.Load() == 0 {
 +			t.Fatal("go was invoked but no App Insights request were recorded")
 +		}
- 		if !disabledOnPlatform && len(counters) == 0 {
- 			t.Fatal("go was invoked but no counters were incremented")
++	}
+ }
+ 
+ // Copied from https://go.googlesource.com/telemetry/+/5f08a0cbff3f/internal/telemetry/mode.go#122
+diff --git a/src/cmd/go/scriptcmds_test.go b/src/cmd/go/scriptcmds_test.go
+index ced8d880e9ae3a..b3ad521ff94873 100644
+--- a/src/cmd/go/scriptcmds_test.go
++++ b/src/cmd/go/scriptcmds_test.go
+@@ -71,6 +71,7 @@ func scriptCC(cmdExec script.Cmd) script.Cmd {
+ }
+ 
+ var scriptGoInvoked sync.Map // testing.TB → go command was invoked
++var scriptGoBuildInvoked sync.Map
+ 
+ // scriptGo runs the go command.
+ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd {
+@@ -85,6 +86,16 @@ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd
+ 		if !dup {
+ 			t.Cleanup(func() { scriptGoInvoked.Delete(t) })
  		}
++		if len(s) > 0 {
++			// If the first argument is a subcommand, record it.
++			switch s[0] {
++			case "build", "install", "run":
++				_, dup = scriptGoBuildInvoked.LoadOrStore(t, true)
++				if !dup {
++					t.Cleanup(func() { scriptGoBuildInvoked.Delete(t) })
++				}
++			}
++		}
+ 		return cmd.Run(state, s...)
+ 	})
+ }
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..a099b4698a21c4 100644
+index 5cef0b0041551a..6c180bf9e60482 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
 @@ -7,10 +7,23 @@
@@ -196,7 +235,7 @@ index 5cef0b0041551a..a099b4698a21c4 100644
  )
  
  var openCalled bool
-@@ -22,11 +35,30 @@ func OpenCalled() bool { return openCalled }
+@@ -22,11 +35,43 @@ func OpenCalled() bool { return openCalled }
  func Open() {
  	openCalled = true
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
@@ -210,8 +249,21 @@ index 5cef0b0041551a..a099b4698a21c4 100644
 +	}
 +}
 +
-+func Close() {
-+	ctx, cancel := context.WithTimeout(context.Background(), 1*time.Second)
++func OpenMicrosoft() {
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") == "0" {
++		// Telemetry disabled.
++		return
++	}
++	mstelemetry.Start(mstelemetry.Config{
++		InstrumentationKey: appInsightsInstrumentationKey,
++		Endpoint:           cmp.Or(os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"), appInsightsEndpoint), // configurable for testing purposes
++		AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
++		UploadConfig:       msconfig.Config,
++	})
++}
++
++func CloseMicrosoft() {
++	ctx, cancel := context.WithTimeout(context.Background(), 3*time.Second)
 +	defer cancel()
 +	start := time.Now()
 +	mstelemetry.Close(ctx)
@@ -227,7 +279,7 @@ index 5cef0b0041551a..a099b4698a21c4 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +76,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +89,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -235,7 +287,7 @@ index 5cef0b0041551a..a099b4698a21c4 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +89,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +102,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {
@@ -247,12 +299,13 @@ index 5cef0b0041551a..a099b4698a21c4 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter_bootstrap.go b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
-index 00808294053c23..1adda045749c29 100644
+index 00808294053c23..e19970cf926e16 100644
 --- a/src/cmd/internal/telemetry/counter/counter_bootstrap.go
 +++ b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
-@@ -18,3 +18,5 @@ func New(name string) dummyCounter                                        { retu
+@@ -18,3 +18,6 @@ func New(name string) dummyCounter                                        { retu
  func NewStack(name string, depth int) dummyCounter                        { return dummyCounter{} }
  func CountFlags(name string, flagSet flag.FlagSet)                        {}
  func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {}
 +
-+func Close() {}
++func OpenMicrosoft()  {}
++func CloseMicrosoft() {}

From c5891c7030ffc3e779178a622dd40efc3dc7ecd4 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 25 Jul 2025 15:24:57 +0200
Subject: [PATCH 405/887] set -tags=ms_skipfipscheck in release builds (#1780)

---
 ...03-Implement-crypto-internal-backend.patch | 116 ++++++++++++------
 1 file changed, 80 insertions(+), 36 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index fc7e27fbd06..666e20d162c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,7 +13,7 @@ desired goexperiments and build tags.
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  .../compile/internal/ssa/stmtlines_test.go    |   1 -
  src/cmd/compile/script_test.go                |   8 +
- src/cmd/dist/build.go                         |  29 +-
+ src/cmd/dist/build.go                         |  80 +++-
  src/cmd/dist/test.go                          |  44 ++-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2258 insertions(+), 23 deletions(-)
+ 46 files changed, 2310 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -160,59 +160,103 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 024050c2dd70c4..a3ae7ef562cace 100644
+index 024050c2dd70c4..f91bf0a7c4ad1c 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1387,7 +1387,23 @@ func toolenv() []string {
+@@ -1387,6 +1387,80 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
--	return env
-+	return toolchainGOEXPERIMENT(env)
-+}
-+
-+// toolchainGOEXPERIMENT appends a GOEXPERIMENT to env
-+// that contains all the experiments from the current
-+// environment, but with "systemcrypto" removed and
-+// "nosystemcrypto" added. This is used when building
-+// the Microsoft build of Go to favor portability.
-+// Go only uses crypto packages for non-crypto purposes,
-+// such as generating build IDs.
-+func toolchainGOEXPERIMENT(env []string) []string {
-+	goexp := strings.Split(os.Getenv("GOEXPERIMENT"), ",")
-+	goexp = slices.DeleteFunc(goexp, func(s string) bool {
-+		return s == "systemcrypto" || s == "nosystemcrypto" || s == ""
++	return toolenvMicrosoft(env)
++}
++
++// updateEnv updates the environment variable named name in env
++// by applying the function fn to its value.
++// If the variable is not present in env, the value is taken from
++// the current environment (os.Getenv), and the updated value is appended
++// to env.
++// If the variable is not present in the current environment, the new value
++// is appended to env.
++func updateEnv(name string, env []string, fn func(string) string) []string {
++	// Find the variable in env.
++	for i, e := range env {
++		if value, ok := strings.CutPrefix(e, name+"="); ok {
++			// Found it, update it.
++			env[i] = name + "=" + fn(value)
++			return env
++		}
++	}
++
++	// Not found, use the current environment.
++	val := os.Getenv(name)
++	if val == "" {
++		val = fn("")
++	} else {
++		val = fn(val)
++	}
++	return append(env, name+"="+val)
++}
++
++// toolenvMicrosoft appends Microsoft-specific environment variables to env.
++func toolenvMicrosoft(env []string) []string {
++	// Keep all the experiments from the current
++	// environment, but with "systemcrypto" removed and
++	// "nosystemcrypto" added. This is used when building
++	// the Microsoft build of Go to favor portability.
++	// Go only uses crypto packages for non-crypto purposes,
++	// such as generating build IDs.
++	env = updateEnv("GOEXPERIMENT", env, func(value string) string {
++		if value == "" {
++			return "nosystemcrypto"
++		}
++		goexp := strings.Split(value, ",")
++		goexp = slices.DeleteFunc(goexp, func(s string) bool {
++			return s == "systemcrypto" || s == "nosystemcrypto"
++		})
++		goexp = append(goexp, "nosystemcrypto")
++		return strings.Join(goexp, ",")
 +	})
-+	goexp = append(goexp, "nosystemcrypto")
-+	return append(env, "GOEXPERIMENT="+strings.Join(goexp, ","))
- }
- 
- var (
-@@ -1548,6 +1564,11 @@ func cmdbootstrap() {
- 	os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
- 	// Now that cmd/go is in charge of the build process, enable GOEXPERIMENT.
- 	os.Setenv("GOEXPERIMENT", goexperiment)
++
 +	// Build the Go toolchain with "-tags=ms_skipfipscheck". This
 +	// allows toolchains not built with the systemcrypto goexperiment to be used
 +	// when GODEBUG=fips140=on is set. For example, when running
 +	// "GODEBUG=fips140=on go test ./..." or "GODEBUG=fips140=on go run .".
-+	os.Setenv("GOFLAGS", "-tags=ms_skipfipscheck")
- 	// No need to enable PGO for toolchain2.
- 	goInstall(toolenv(), goBootstrap, append([]string{"-pgo=off"}, toolchain...)...)
- 	if debug {
-@@ -1629,12 +1650,12 @@ func cmdbootstrap() {
++	env = updateEnv("GOFLAGS", env, func(value string) string {
++		if value == "" {
++			return "-tags=ms_skipfipscheck"
++		}
++		goflags := strings.Fields(value)
++		// If -tags= is already set, append "ms_skipfipscheck" to it.
++		// If not, add it as a new flag.
++		var found bool
++		for i, e := range goflags {
++			if value, ok := strings.CutPrefix(e, "-tags="); ok {
++				goflags[i] = "-tags=" + value + ",ms_skipfipscheck"
++				found = true
++				break
++			}
++		}
++		if !found {
++			goflags = append(goflags, "-tags=ms_skipfipscheck")
++		}
++		return strings.Join(goflags, " ")
++	})
+ 	return env
+ }
+ 
+@@ -1629,12 +1703,12 @@ func cmdbootstrap() {
  		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
  	}
 -	goInstall(nil, goBootstrap, "std")
-+	goInstall(toolchainGOEXPERIMENT(nil), goBootstrap, "std")
++	goInstall(toolenvMicrosoft(nil), goBootstrap, "std")
  	goInstall(toolenv(), goBootstrap, toolsToInstall...)
  	checkNotStale(toolenv(), goBootstrap, toolchain...)
 -	checkNotStale(nil, goBootstrap, "std")
-+	checkNotStale(toolchainGOEXPERIMENT(nil), goBootstrap, "std")
++	checkNotStale(toolenvMicrosoft(nil), goBootstrap, "std")
  	checkNotStale(toolenv(), goBootstrap, toolsToInstall...)
 -	checkNotStale(nil, gorootBinGo, "std")
-+	checkNotStale(toolchainGOEXPERIMENT(nil), gorootBinGo, "std")
++	checkNotStale(toolenvMicrosoft(nil), gorootBinGo, "std")
  	checkNotStale(toolenv(), gorootBinGo, toolsToInstall...)
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")

From 6ff098ee16910e5855ec22bfadbc50be89ec0149 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 28 Jul 2025 11:30:05 +0200
Subject: [PATCH 406/887] upgrade telemetry module (#1782)

---
 .../0001-Vendor-external-dependencies.patch   | 242 ++++++++++--------
 patches/0010-add-appinsights-telemetry.patch  |  40 ++-
 2 files changed, 157 insertions(+), 125 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 09d003a9c1d..e173ee347d6 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -15,22 +15,22 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-infra/telemetry/README.md    |    7 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   61 +
+ .../go-infra/telemetry/config/config.json     |   64 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  175 ++
- .../internal/appinsights/inmemorychannel.go   |  310 +++
+ .../telemetry/internal/appinsights/client.go  |  169 ++
+ .../internal/appinsights/inmemorychannel.go   |  341 +++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
  .../internal/contracts/response.go            |   32 +
  .../internal/appinsights/jsonserializer.go    |   33 +
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
- .../internal/appinsights/transmitter.go       |  169 ++
+ .../internal/appinsights/transmitter.go       |  172 ++
  .../telemetry/internal/config/config.go       |   63 +
  .../telemetry/internal/telemetry/proginfo.go  |   32 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
- .../microsoft/go-infra/telemetry/telemetry.go |  120 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  125 +
  src/cmd/vendor/modules.txt                    |   11 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
@@ -137,7 +137,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 129 files changed, 19192 insertions(+), 7 deletions(-)
+ 129 files changed, 19228 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -261,30 +261,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 5624b81cc51bac..caebaf25fad844 100644
+index 5624b81cc51bac..c915383a7bd7d6 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.25
  
  require (
  	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1
++	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
  	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
  	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
  	golang.org/x/mod v0.25.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d5d1553e5b7829..be5d9688943e8d 100644
+index d5d1553e5b7829..cb73d0abe4e905 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
  github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
  github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
  github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1 h1:GrwQB5oC7TORdL+bRRKP+7ceLwr2iK0+vBpG82zgLyI=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1 h1:2doxdRr67OgtkPNjGuLcdf+i4+HVQgikubr3xv0dXg8=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
++github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed h1:+WzG8k10xzL+oOrycm6GJTGi/sMZkWtnAhAUZ+Fpvwg=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
@@ -397,10 +397,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..8c1a4bff90bf9b
+index 00000000000000..7c662b93fcd017
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,61 @@
+@@ -0,0 +1,64 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -457,6 +457,9 @@ index 00000000000000..8c1a4bff90bf9b
 +				},
 +				{
 +					"Name": "go/goexperiment:{ms_tls_config_schannel,systemcrypto,nosystemcrypto,opensslcrypto,cngcrypto,darwincrypto}"
++				},
++				{
++					"Name": "go/subcommand:{build,install,run}"
 +				}
 +			]
 +		}
@@ -552,10 +555,10 @@ index 00000000000000..2e96890f60b871
 +- Improve testing.
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
 new file mode 100644
-index 00000000000000..1a629e35709231
+index 00000000000000..8e280f7c675a46
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
-@@ -0,0 +1,175 @@
+@@ -0,0 +1,169 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -564,7 +567,7 @@ index 00000000000000..1a629e35709231
 +import (
 +	"cmp"
 +	"context"
-+	"log"
++	"log/slog"
 +	"maps"
 +	"net/http"
 +	"sync"
@@ -603,10 +606,9 @@ index 00000000000000..1a629e35709231
 +	// If nil, no additional tags will be sent.
 +	Tags map[string]string
 +
-+	// ErrorLog specifies an optional logger for errors
-+	// that occur when attempting to upload telemetry.
-+	// If nil, logging is done via the log package's standard logger.
-+	ErrorLog *log.Logger
++	// Logger specifies a structured logger.
++	// If nil nothing is logged.
++	Logger *slog.Logger
 +
 +	// Function to filter out telemetry items by name before they are sent.
 +	// If nil, all telemetry items are sent.
@@ -630,15 +632,10 @@ index 00000000000000..1a629e35709231
 +		batchSize := cmp.Or(c.MaxBatchSize, 1024)
 +		batchInterval := cmp.Or(c.MaxBatchInterval, 10*time.Second)
 +		httpClient := cmp.Or(c.HTTPClient, http.DefaultClient)
-+		errorLog := c.ErrorLog
-+		if errorLog == nil {
-+			std := log.Default()
-+			errorLog = log.New(std.Writer(), std.Prefix()+"appinsights: ", std.Flags())
-+		}
-+		c.channel = newInMemoryChannel(endpoint, batchSize, batchInterval, httpClient, errorLog)
++		c.channel = newInMemoryChannel(endpoint, batchSize, batchInterval, httpClient, c.Logger)
 +		c.context = setupContext(c.InstrumentationKey, c.Tags)
 +		if err := contracts.SanitizeTags(c.context.Tags); err != nil {
-+			c.channel.logf("Warning sanitizing tags: %v", err)
++			c.channel.warn("tags were not sanitary and have been sanitized", "error", err)
 +		}
 +
 +		go c.channel.acceptLoop()
@@ -701,7 +698,7 @@ index 00000000000000..1a629e35709231
 +	c.init()
 +	ev := c.context.envelop(data)
 +	if err := ev.Sanitize(); err != nil {
-+		c.channel.logf("Warning sanitizing telemetry item: %v", err)
++		c.channel.warn("tags were not sanitary and have been sanitized", "error", err)
 +	}
 +	for range n {
 +		c.channel.send(ev)
@@ -733,10 +730,10 @@ index 00000000000000..1a629e35709231
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
 new file mode 100644
-index 00000000000000..05dbdfe0e3efcd
+index 00000000000000..af13a2102d2933
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
-@@ -0,0 +1,310 @@
+@@ -0,0 +1,341 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -745,7 +742,7 @@ index 00000000000000..05dbdfe0e3efcd
 +import (
 +	"context"
 +	"errors"
-+	"log"
++	"log/slog"
 +	"net/http"
 +	"slices"
 +	"sync"
@@ -767,7 +764,7 @@ index 00000000000000..05dbdfe0e3efcd
 +	endpointAddr  string
 +	batchSize     int
 +	batchInterval time.Duration
-+	errorLog      *log.Logger
++	logger        *slog.Logger
 +
 +	collectChan chan *contracts.Envelope
 +	flushChan   chan struct{}
@@ -786,6 +783,7 @@ index 00000000000000..05dbdfe0e3efcd
 +	sendQueue   []*[]batchItem
 +	sendQueueMu sync.Mutex
 +	sendMu      sync.Mutex
++	inflight    atomic.Int64 // Number of items currently being sent.
 +
 +	itemsBuf sync.Pool
 +}
@@ -797,13 +795,13 @@ index 00000000000000..05dbdfe0e3efcd
 +}
 +
 +// newInMemoryChannel creates an inMemoryChannel instance and starts a background submission goroutine.
-+func newInMemoryChannel(endpointUrl string, batchSize int, batchInterval time.Duration, httpClient *http.Client, errorLog *log.Logger) *inMemoryChannel {
++func newInMemoryChannel(endpointUrl string, batchSize int, batchInterval time.Duration, httpClient *http.Client, logger *slog.Logger) *inMemoryChannel {
 +	// Set up the channel
 +	channel := &inMemoryChannel{
 +		endpointAddr:  endpointUrl,
 +		batchSize:     batchSize,
 +		batchInterval: batchInterval,
-+		errorLog:      errorLog,
++		logger:        logger,
 +		collectChan:   make(chan *contracts.Envelope),
 +		flushChan:     make(chan struct{}),
 +		retryChan:     make(chan retryMessage),
@@ -819,8 +817,25 @@ index 00000000000000..05dbdfe0e3efcd
 +	return channel
 +}
 +
-+func (channel *inMemoryChannel) logf(format string, args ...any) {
-+	channel.errorLog.Printf(format, args...)
++func (channel *inMemoryChannel) info(msg string, args ...any) {
++	if channel.logger == nil {
++		return
++	}
++	channel.logger.Info("telemetry: "+msg, args...)
++}
++
++func (channel *inMemoryChannel) warn(msg string, args ...any) {
++	if channel.logger == nil {
++		return
++	}
++	channel.logger.Warn("telemetry: "+msg, args...)
++}
++
++func (channel *inMemoryChannel) error(msg string, args ...any) {
++	if channel.logger == nil {
++		return
++	}
++	channel.logger.Error("telemetry: "+msg, args...)
 +}
 +
 +// Queues a single telemetry item
@@ -854,6 +869,7 @@ index 00000000000000..05dbdfe0e3efcd
 +
 +	channel.closed.Store(true)
 +	channel.cancelCauseFunc(errStopped)
++	channel.checkInflight()
 +}
 +
 +// close flushes and tears down the submission goroutine and closes internal
@@ -873,6 +889,13 @@ index 00000000000000..05dbdfe0e3efcd
 +	case <-channel.cancelCtx.Done():
 +		// Successfully flushed
 +	}
++	channel.checkInflight()
++}
++
++func (channel *inMemoryChannel) checkInflight() {
++	if inflight := channel.inflight.Load(); inflight > 0 {
++		channel.error("client closed with pending items", "itemsLost", inflight)
++	}
 +}
 +
 +func (channel *inMemoryChannel) acceptLoop() {
@@ -895,12 +918,14 @@ index 00000000000000..05dbdfe0e3efcd
 +				// Check if there is space to add the item to the batch.
 +				// If not, then drop the event.
 +				if len(items) < channel.batchSize {
++					channel.inflight.Add(1)
 +					items = append(items, batchItem{item, 0})
 +				} else {
 +					dropped++
 +				}
 +				continue
 +			}
++			channel.inflight.Add(1)
 +			items = append(items, batchItem{item, 0})
 +			if len(items) >= channel.batchSize {
 +				timer.Stop()
@@ -926,7 +951,7 @@ index 00000000000000..05dbdfe0e3efcd
 +				// so if we get here, then we're no longer throttled.
 +				channel.throttled.Store(false)
 +				if dropped > 0 {
-+					channel.logf("Dropped %d telemetry items due to throttling", dropped)
++					channel.error("items dropped due to throttling", "itemsLost", dropped)
 +					dropped = 0
 +				}
 +			}
@@ -934,6 +959,7 @@ index 00000000000000..05dbdfe0e3efcd
 +			items = items[:0]
 +
 +		case msg := <-channel.retryChan:
++			channel.info("items enqueued for retry", "count", len(msg.items), "throttled", msg.throttled, "retryAfter", msg.retryAfter)
 +			// If there is not enough space in the batch, drop the items.
 +			space := channel.batchSize - len(items)
 +			if space < len(msg.items) {
@@ -1008,43 +1034,45 @@ index 00000000000000..05dbdfe0e3efcd
 +	itemsPtr := channel.sendQueue[0]
 +	channel.sendQueue = channel.sendQueue[1:]
 +	channel.sendQueueMu.Unlock()
-+	defer channel.itemsBuf.Put(itemsPtr)
 +
-+	result, err := channel.transmitter.transmit(channel.cancelCtx, *itemsPtr)
++	defer channel.itemsBuf.Put(itemsPtr)
++	resp, err := channel.transmitter.transmit(channel.cancelCtx, *itemsPtr)
 +	if err != nil {
-+		channel.logf("Error transmitting payload: %v", err)
-+		if result == nil {
++		if resp == nil {
++			channel.inflight.Add(-int64(len(*itemsPtr)))
++			channel.error("upload request failed", "itemsLost", len(*itemsPtr), "error", err)
 +			return false
 +		}
 +	}
-+	if result.isSuccess() {
++	if resp.isSuccess() {
++		channel.inflight.Add(-int64(len(*itemsPtr)))
 +		return false
 +	}
-+	canRetry := result.canRetry()
-+	throttled := result.isThrottled()
-+	channel.logf("Failed to transmit payload: code=%v, received=%d, accepted=%d, canRetry=%t, throttled=%t",
-+		result.statusCode, result.response.ItemsReceived, result.response.ItemsAccepted, canRetry, throttled)
 +
-+	if !canRetry {
-+		return false
-+	}
-+
-+	// Filter down to failed items.
-+	retryItems := result.getRetryItems(*itemsPtr)
++	// If the response is not successful, check if we can retry.
++	succCount, failCount, retryItems := resp.result(*itemsPtr)
 +
-+	// Delete items that have been retried more than 2 times.
++	// Remove items that have been retried too many times.
++	retries := len(retryItems)
 +	retryItems = slices.DeleteFunc(retryItems, func(item batchItem) bool {
 +		return item.retries > 2
 +	})
-+	if len(retryItems) == 0 {
-+		return false
-+	}
 +	for i := range retryItems {
-+		item := &retryItems[i]
-+		item.retries++
++		retryItems[i].retries++
 +	}
 +
-+	channel.retry(throttled, result.retryAfter, retryItems)
++	dropped := retries - len(retryItems)
++	channel.inflight.Add(-int64(succCount + failCount + dropped))
++	if failCount > 0 {
++		channel.error("server rejected items", "itemsLost", failCount, "statusCode", resp.statusCode)
++	}
++	if dropped > 0 {
++		channel.error("items dropped due to retry limit", "itemsLost", dropped)
++	}
++	if len(retryItems) == 0 {
++		return false
++	}
++	channel.retry(resp.isThrottled(), resp.retryAfter, retryItems)
 +	return true
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts/contexttagkeys.go
@@ -1380,10 +1408,10 @@ index 00000000000000..a2e954ae84aa6e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go
 new file mode 100644
-index 00000000000000..3cca77e3070fd2
+index 00000000000000..0299c87c81cb41
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/transmitter.go
-@@ -0,0 +1,169 @@
+@@ -0,0 +1,172 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1469,7 +1497,7 @@ index 00000000000000..3cca77e3070fd2
 +
 +	resp, err := transmitter.client.Do(req)
 +	if err != nil {
-+		return nil, fmt.Errorf("failed to transmit telemetry: %v", err)
++		return nil, fmt.Errorf("failed to send request: %v", err)
 +	}
 +	defer resp.Body.Close()
 +
@@ -1489,35 +1517,31 @@ index 00000000000000..3cca77e3070fd2
 +	return result, jsonErr
 +}
 +
-+func (result *transmissionResponse) isSuccess() bool {
-+	return result.statusCode == successResponse ||
++func (resp *transmissionResponse) isSuccess() bool {
++	return resp.statusCode == successResponse ||
 +		// Partial response but all items accepted
-+		(result.statusCode == partialSuccessResponse &&
-+			result.response.ItemsReceived == result.response.ItemsAccepted)
++		(resp.statusCode == partialSuccessResponse &&
++			resp.response.ItemsReceived == resp.response.ItemsAccepted)
 +}
 +
-+func (result *transmissionResponse) isFailure() bool {
-+	return result.statusCode != successResponse && result.statusCode != partialSuccessResponse
-+}
-+
-+func (result *transmissionResponse) canRetry() bool {
-+	if result.isSuccess() {
++func (resp *transmissionResponse) canRetry() bool {
++	if resp.isSuccess() {
 +		return false
 +	}
 +
-+	return result.statusCode == partialSuccessResponse ||
-+		!result.retryAfter.IsZero() ||
-+		(result.statusCode == requestTimeoutResponse ||
-+			result.statusCode == serviceUnavailableResponse ||
-+			result.statusCode == errorResponse ||
-+			result.statusCode == tooManyRequestsResponse ||
-+			result.statusCode == tooManyRequestsOverExtendedTimeResponse)
++	return resp.statusCode == partialSuccessResponse ||
++		!resp.retryAfter.IsZero() ||
++		(resp.statusCode == requestTimeoutResponse ||
++			resp.statusCode == serviceUnavailableResponse ||
++			resp.statusCode == errorResponse ||
++			resp.statusCode == tooManyRequestsResponse ||
++			resp.statusCode == tooManyRequestsOverExtendedTimeResponse)
 +}
 +
-+func (result *transmissionResponse) isThrottled() bool {
-+	return result.statusCode == tooManyRequestsResponse ||
-+		result.statusCode == tooManyRequestsOverExtendedTimeResponse ||
-+		!result.retryAfter.IsZero()
++func (resp *transmissionResponse) isThrottled() bool {
++	return resp.statusCode == tooManyRequestsResponse ||
++		resp.statusCode == tooManyRequestsOverExtendedTimeResponse ||
++		!resp.retryAfter.IsZero()
 +}
 +
 +func canRetryBackendError(berror contracts.BackendResponseError) bool {
@@ -1528,30 +1552,37 @@ index 00000000000000..3cca77e3070fd2
 +		berror.StatusCode == tooManyRequestsOverExtendedTimeResponse
 +}
 +
-+func (result *transmissionResponse) getRetryItems(items []batchItem) []batchItem {
-+	if result.statusCode == partialSuccessResponse {
++// result returns the number of succeeded and failed items, and a list of items that can be retried.
++// Items is the complete list of result that was sent.
++func (resp *transmissionResponse) result(items []batchItem) (succeed, failed int, retries []batchItem) {
++	if resp.statusCode == partialSuccessResponse {
 +		// Make sure errors are ordered by index
-+		slices.SortFunc(result.response.Errors, func(a, b contracts.BackendResponseError) int {
++		slices.SortFunc(resp.response.Errors, func(a, b contracts.BackendResponseError) int {
 +			return cmp.Compare(a.Index, b.Index)
 +		})
 +
-+		resultItems := make([]batchItem, 0, len(result.response.Errors))
++		retries = make([]batchItem, 0, len(resp.response.Errors))
 +		// Find each retryable error
-+		for _, responseResult := range result.response.Errors {
++		for _, responseResult := range resp.response.Errors {
++			if responseResult.StatusCode == successResponse {
++				succeed++
++				continue
++			}
 +			if !canRetryBackendError(responseResult) {
++				failed++
 +				continue
 +			}
 +			if responseResult.Index >= len(items) {
 +				continue
 +			}
-+			resultItems = append(resultItems, items[responseResult.Index])
++			retries = append(retries, items[responseResult.Index])
 +		}
 +
-+		return resultItems
-+	} else if result.canRetry() {
-+		return items
++		return succeed, failed, retries
++	} else if resp.canRetry() {
++		return 0, 0, items
 +	}
-+	return nil
++	return 0, len(items), nil
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
 new file mode 100644
@@ -1700,10 +1731,10 @@ index 00000000000000..02d112edb8ad3e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
 new file mode 100644
-index 00000000000000..338e225866a5b0
+index 00000000000000..d592037b570130
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -0,0 +1,120 @@
+@@ -0,0 +1,125 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1711,8 +1742,8 @@ index 00000000000000..338e225866a5b0
 +
 +import (
 +	"context"
-+	_ "embed"
 +	"fmt"
++	"log/slog"
 +	"runtime"
 +	"runtime/debug"
 +	"slices"
@@ -1750,6 +1781,10 @@ index 00000000000000..338e225866a5b0
 +	// Allow uploading telemetry for Go development versions even if the
 +	// upload configuration does not explicitly include them.
 +	AllowGoDevel bool
++
++	// Logger specifies a structured logger.
++	// If nil nothing is logged.
++	Logger *slog.Logger
 +}
 +
 +var countersToUpload map[string]struct{}
@@ -1808,6 +1843,7 @@ index 00000000000000..338e225866a5b0
 +			"ai.cloud.role":      prog,
 +		},
 +		UploadFilter: uploadFilter,
++		Logger:       cfg.Logger,
 +	})
 +}
 +
@@ -1825,14 +1861,14 @@ index 00000000000000..338e225866a5b0
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 6e5783fdd4767a..7ab070975606f8 100644
+index 6e5783fdd4767a..81dd9beff245d6 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20250716090631-5672f943a6c1
++# github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -1840,7 +1876,7 @@ index 6e5783fdd4767a..7ab070975606f8 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250716090631-5672f943a6c1
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
@@ -1903,7 +1939,7 @@ index 410eb8648a710a..928d040435b4b7 100644
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6d92542e31b652..9b7613a62b5a31 100644
+index b3d8f66bc761ee..09e91285502bcf 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -519,6 +519,24 @@ var depsRules = `
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index 6b96153bbe3..559fcf0f761 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -10,9 +10,9 @@ Subject: [PATCH] Add appinsights telemetry
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
  src/cmd/go/script_test.go                     |  8 +++
  src/cmd/go/scriptcmds_test.go                 | 11 ++++
- src/cmd/internal/telemetry/counter/counter.go | 50 +++++++++++++++++-
+ src/cmd/internal/telemetry/counter/counter.go | 48 ++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 ++
- 8 files changed, 159 insertions(+), 1 deletion(-)
+ 8 files changed, 157 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -208,10 +208,10 @@ index ced8d880e9ae3a..b3ad521ff94873 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..6c180bf9e60482 100644
+index 5cef0b0041551a..2c1b8143d60764 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
-@@ -7,10 +7,23 @@
+@@ -7,10 +7,24 @@
  package counter
  
  import (
@@ -219,6 +219,7 @@ index 5cef0b0041551a..6c180bf9e60482 100644
 +	"context"
  	"flag"
 +	"log"
++	"log/slog"
  	"os"
 +	"time"
  
@@ -235,30 +236,25 @@ index 5cef0b0041551a..6c180bf9e60482 100644
  )
  
  var openCalled bool
-@@ -22,11 +35,43 @@ func OpenCalled() bool { return openCalled }
- func Open() {
- 	openCalled = true
+@@ -24,9 +38,38 @@ func Open() {
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
-+	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") != "0" {
-+		mstelemetry.Start(mstelemetry.Config{
-+			InstrumentationKey: appInsightsInstrumentationKey,
-+			Endpoint:           cmp.Or(os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"), appInsightsEndpoint), // configurable for testing purposes
-+			AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
-+			UploadConfig:       msconfig.Config,
-+		})
-+	}
-+}
-+
+ }
+ 
 +func OpenMicrosoft() {
 +	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENABLED") == "0" {
 +		// Telemetry disabled.
 +		return
 +	}
++	var logger *slog.Logger
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_VERBOSE") == "1" {
++		logger = slog.Default()
++	}
 +	mstelemetry.Start(mstelemetry.Config{
 +		InstrumentationKey: appInsightsInstrumentationKey,
 +		Endpoint:           cmp.Or(os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT"), appInsightsEndpoint), // configurable for testing purposes
 +		AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
 +		UploadConfig:       msconfig.Config,
++		Logger:             logger,
 +	})
 +}
 +
@@ -267,11 +263,11 @@ index 5cef0b0041551a..6c180bf9e60482 100644
 +	defer cancel()
 +	start := time.Now()
 +	mstelemetry.Close(ctx)
-+	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_STATS") == "1" {
++	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_VERBOSE") == "1" {
 +		log.Printf("telemetry: closed in %s\n", time.Since(start))
 +	}
- }
- 
++}
++
  // Inc increments the counter with the given name.
  func Inc(name string) {
  	counter.Inc(name)
@@ -279,7 +275,7 @@ index 5cef0b0041551a..6c180bf9e60482 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +89,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +87,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -287,7 +283,7 @@ index 5cef0b0041551a..6c180bf9e60482 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +102,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +100,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {

From 1ce4dc01e7a16868e4f167bf312282c2d2d6fe51 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 28 Jul 2025 13:45:19 +0100
Subject: [PATCH 407/887] vendor

---
 .../0001-Vendor-external-dependencies.patch   | 119 +++++++++++-------
 1 file changed, 73 insertions(+), 46 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 09d003a9c1d..3afb02d47b4 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -53,7 +53,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
  .../golang-fips/openssl/v2/ed25519.go         |  229 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  590 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  455 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  463 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  444 ++++
@@ -86,7 +86,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/cryptokit.h            |   67 +
  .../internal/cryptokit/ed25519.go             |   72 +
  .../internal/cryptokit/gcm.go                 |   36 +
- .../internal/cryptokit/hash.go                |  247 ++
+ .../internal/cryptokit/hash.go                |  257 ++
  .../internal/cryptokit/hashclone.go           |   17 +
  .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
@@ -119,7 +119,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  315 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
@@ -129,7 +129,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 ++++
- .../microsoft/go-crypto-winnative/cng/sha3.go |  311 +++
+ .../microsoft/go-crypto-winnative/cng/sha3.go |  310 +++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
  .../internal/bcrypt/bcrypt_windows.go         |  368 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
@@ -137,7 +137,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 129 files changed, 19192 insertions(+), 7 deletions(-)
+ 129 files changed, 19219 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -1875,7 +1875,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..da03dfd87e7aec 100644
+index b81f19068aef23..26eb72c358987f 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1884,26 +1884,26 @@ index b81f19068aef23..da03dfd87e7aec 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
++	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..928d040435b4b7 100644
+index 410eb8648a710a..f4132c078c86a5 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7 h1:ZjpSTr5uh4P3EKwrZQ8Fr/NZJ6NBgf+8UabCp9Kmtoc=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7 h1:6a0YcJOAJWLtEqDW55bUhhe4Nx/9Rpmm80KVMUxD6B4=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b h1:Yf6lm9r6Aid3PG5FoeSX2v4iU+xWnAmCRQNjBxgceWI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f h1:fIaGpyow9azEUBACTdiDwF4oFCxNhtfb3Yy7GstINQI=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05 h1:I6L7NzERXHhyif6YpLgL8GTvSbF8ac3j1bwUBDri9Fo=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
++github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
  golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
  golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6d92542e31b652..9b7613a62b5a31 100644
+index b3d8f66bc761ee..09e91285502bcf 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -519,6 +519,24 @@ var depsRules = `
@@ -4970,10 +4970,10 @@ index 00000000000000..a6ad55906ecd8a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..621822102024f8
+index 00000000000000..3c4db5fe3f851d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,455 @@
+@@ -0,0 +1,463 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5348,11 +5348,19 @@ index 00000000000000..621822102024f8
 +	return h2, nil
 +}
 +
-+var errHashNotMarshallable = errors.New("openssl: hash state is not marshallable")
++type errMarshallUnsupported struct{}
++
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
++}
++
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
++}
 +
 +func (d *evpHash) MarshalBinary() ([]byte, error) {
 +	if !d.alg.marshallable {
-+		return nil, errHashNotMarshallable
++		return nil, errMarshallUnsupported{}
 +	}
 +	buf := make([]byte, 0, d.alg.marshalledSize)
 +	return d.AppendBinary(buf)
@@ -5361,7 +5369,7 @@ index 00000000000000..621822102024f8
 +func (d *evpHash) AppendBinary(buf []byte) ([]byte, error) {
 +	defer runtime.KeepAlive(d)
 +	if !d.alg.marshallable {
-+		return nil, errHashNotMarshallable
++		return nil, errMarshallUnsupported{}
 +	}
 +	d.init()
 +	switch d.alg.provider {
@@ -5378,7 +5386,7 @@ index 00000000000000..621822102024f8
 +	defer runtime.KeepAlive(d)
 +	d.init()
 +	if !d.alg.marshallable {
-+		return errHashNotMarshallable
++		return errMarshallUnsupported{}
 +	}
 +	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != d.alg.magic {
 +		return errors.New("openssl: invalid hash state identifier")
@@ -14238,10 +14246,10 @@ index 00000000000000..458e9eb57416b1
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
 new file mode 100644
-index 00000000000000..977ee3152ada71
+index 00000000000000..14b5e1b1c0d8ae
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
-@@ -0,0 +1,247 @@
+@@ -0,0 +1,257 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -14392,16 +14400,26 @@ index 00000000000000..977ee3152ada71
 +	return b
 +}
 +
++type errMarshallUnsupported struct{}
++
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
++}
++
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
++}
++
 +func (h *evpHash) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("cryptokit: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("cryptokit: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (h *evpHash) UnmarshalBinary(data []byte) error {
-+	return errors.New("cryptokit: hash state is not marshallable")
++	return errMarshallUnsupported{}
 +}
 +
 +func (h *evpHash) Reset() {
@@ -18601,10 +18619,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..2c871ee31a327d
+index 00000000000000..d22f6231cbf33a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,315 @@
+@@ -0,0 +1,325 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -18848,16 +18866,26 @@ index 00000000000000..2c871ee31a327d
 +	return int(h.alg.blockSize)
 +}
 +
++type errMarshallUnsupported struct{}
++
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
++}
++
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
++}
++
 +func (hx *hashX) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (hx *hashX) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (hx *hashX) UnmarshalBinary(data []byte) error {
-+	return errors.New("cng: hash state is not marshallable")
++	return errMarshallUnsupported{}
 +}
 +
 +// hashData writes p to ctx. It panics on error.
@@ -19982,10 +20010,10 @@ index 00000000000000..0269f9cf86539e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
 new file mode 100644
-index 00000000000000..bd366bfd130ba7
+index 00000000000000..36a7c6125fe7a1
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
-@@ -0,0 +1,311 @@
+@@ -0,0 +1,310 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19995,7 +20023,6 @@ index 00000000000000..bd366bfd130ba7
 +package cng
 +
 +import (
-+	"errors"
 +	"hash"
 +	"runtime"
 +	"unsafe"
@@ -20154,15 +20181,15 @@ index 00000000000000..bd366bfd130ba7
 +}
 +
 +func (ds *DigestSHA3) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (ds *DigestSHA3) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (ds *DigestSHA3) UnmarshalBinary(data []byte) error {
-+	return errors.New("cng: hash state is not marshallable")
++	return errMarshallUnsupported{}
 +}
 +
 +// NewSHA3_256 returns a new SHA256 hash.
@@ -20287,15 +20314,15 @@ index 00000000000000..bd366bfd130ba7
 +}
 +
 +func (s *SHAKE) MarshalBinary() ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (s *SHAKE) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errors.New("cng: hash state is not marshallable")
++	return nil, errMarshallUnsupported{}
 +}
 +
 +func (s *SHAKE) UnmarshalBinary(data []byte) error {
-+	return errors.New("cng: hash state is not marshallable")
++	return errMarshallUnsupported{}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/tls1prf.go
 new file mode 100644
@@ -21335,21 +21362,21 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..918aaab0a32fef 100644
+index 8507f01b12f518..c1b4f54a6195dd 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250619123805-fe4bc89177d7
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250714125817-871ed82e87d7
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250703113837-e4483837c98b
++# github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From e49ecb6201a6a3eb1ecea96da5013d1243be1c62 Mon Sep 17 00:00:00 2001
From: mertakman <mertakman2012@gmail.com>
Date: Mon, 28 Jul 2025 13:59:56 +0100
Subject: [PATCH 408/887] replace string comparison with errors.Is

---
 patches/0004-Use-crypto-backends.patch | 76 +++++++++++---------------
 1 file changed, 32 insertions(+), 44 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 02ccacd8f70..6da9f85e50b 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -1496,10 +1496,10 @@ index 9274f89d3e2c15..605c37c15f1012 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/md5/md5_test.go b/src/crypto/md5/md5_test.go
-index 403ff2881f4b68..5c689e332d847c 100644
+index 403ff2881f4b68..5417556a86700e 100644
 --- a/src/crypto/md5/md5_test.go
 +++ b/src/crypto/md5/md5_test.go
-@@ -6,12 +6,14 @@ package md5
+@@ -6,9 +6,11 @@ package md5
  
  import (
  	"bytes"
@@ -1507,18 +1507,15 @@ index 403ff2881f4b68..5c689e332d847c 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	"encoding"
++	"errors"
  	"fmt"
  	"hash"
  	"io"
-+	"strings"
- 	"testing"
- 	"unsafe"
- )
 @@ -96,6 +98,9 @@ func TestGoldenMarshal(t *testing.T) {
  
  		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  		if err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("could not marshal: %v", err)
@@ -1547,7 +1544,7 @@ index 403ff2881f4b68..5c689e332d847c 100644
  
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("test %d could not unmarshal: %v", i, err)
@@ -2137,10 +2134,10 @@ index 3acc5b11fb789e..36187a8d5bc4ac 100644
  	d.Reset()
  	d.Write(data)
 diff --git a/src/crypto/sha1/sha1_test.go b/src/crypto/sha1/sha1_test.go
-index ef6e5ddcbb2d97..3ef46e3be515df 100644
+index ef6e5ddcbb2d97..cc88965f966aae 100644
 --- a/src/crypto/sha1/sha1_test.go
 +++ b/src/crypto/sha1/sha1_test.go
-@@ -8,12 +8,13 @@ package sha1
+@@ -8,9 +8,10 @@ package sha1
  
  import (
  	"bytes"
@@ -2148,18 +2145,15 @@ index ef6e5ddcbb2d97..3ef46e3be515df 100644
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"encoding"
++	"errors"
  	"fmt"
  	"hash"
  	"io"
-+	"strings"
- 	"testing"
- )
- 
 @@ -112,6 +113,9 @@ func testGoldenMarshal(t *testing.T) {
  
  		state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  		if err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("could not marshal: %v", err)
@@ -2169,7 +2163,7 @@ index ef6e5ddcbb2d97..3ef46e3be515df 100644
  	for i, test := range largeUnmarshalTests {
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("test %d could not unmarshal: %v", i, err)
@@ -2216,28 +2210,25 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 11b24db7d6b0a0..9aa28dd024385f 100644
+index 11b24db7d6b0a0..837ace4f7200fb 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -8,11 +8,13 @@ package sha256
+@@ -8,8 +8,10 @@ package sha256
  
  import (
  	"bytes"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"encoding"
++	"errors"
  	"fmt"
  	"hash"
  	"io"
-+	"strings"
- 	"testing"
- )
- 
 @@ -163,6 +165,9 @@ func testGoldenMarshal(t *testing.T) {
  
  				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  				if err != nil {
-+					if strings.Contains(err.Error(), "hash state is not marshallable") {
++					if errors.Is(err, errors.ErrUnsupported) {
 +						t.Skip("BinaryMarshaler not supported")
 +					}
  					t.Errorf("could not marshal: %v", err)
@@ -2247,7 +2238,7 @@ index 11b24db7d6b0a0..9aa28dd024385f 100644
  
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
-+		if strings.Contains(err.Error(), "hash state is not marshallable") {
++		if errors.Is(err, errors.ErrUnsupported) {
 +			t.Skip("BinaryMarshaler not supported")
 +		}
  		t.Errorf("could not marshal: %v", err)
@@ -2266,7 +2257,7 @@ index 11b24db7d6b0a0..9aa28dd024385f 100644
  
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("test %d could not unmarshal: %v", i, err)
@@ -2333,10 +2324,10 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"hash"
  )
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 080bf694f03652..d6058d541e9e61 100644
+index 080bf694f03652..0c899f5c407ffa 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
-@@ -8,12 +8,14 @@ package sha512
+@@ -8,9 +8,11 @@ package sha512
  
  import (
  	"bytes"
@@ -2344,18 +2335,15 @@ index 080bf694f03652..d6058d541e9e61 100644
  	"crypto/internal/cryptotest"
  	"encoding"
  	"encoding/hex"
++	"errors"
  	"fmt"
  	"hash"
  	"io"
-+	"strings"
- 	"testing"
- )
- 
 @@ -751,6 +753,9 @@ func testGoldenMarshal(t *testing.T) {
  
  				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  				if err != nil {
-+					if strings.Contains(err.Error(), "hash state is not marshallable") {
++					if errors.Is(err, errors.ErrUnsupported) {
 +						t.Skip("BinaryMarshaler not supported")
 +					}
  					t.Errorf("could not marshal: %v", err)
@@ -2365,7 +2353,7 @@ index 080bf694f03652..d6058d541e9e61 100644
  
  			state, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  			if err != nil {
-+				if strings.Contains(err.Error(), "hash state is not marshallable") {
++				if errors.Is(err, errors.ErrUnsupported) {
 +					t.Skip("BinaryMarshaler not supported")
 +				}
  				t.Errorf("i=%d: could not marshal: %v", i, err)
@@ -2384,7 +2372,7 @@ index 080bf694f03652..d6058d541e9e61 100644
  
  		h := New()
  		if err := h.(encoding.BinaryUnmarshaler).UnmarshalBinary([]byte(test.state)); err != nil {
-+			if strings.Contains(err.Error(), "hash state is not marshallable") {
++			if errors.Is(err, errors.ErrUnsupported) {
 +				t.Skip("BinaryMarshaler not supported")
 +			}
  			t.Errorf("test %d could not unmarshal: %v", i, err)
@@ -2962,7 +2950,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 1997d90f2f20ba..f69862c628eea4 100644
+index b2c6db15a23e98..55e34940125e86 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -517,7 +517,7 @@ var depsRules = `
@@ -3020,22 +3008,22 @@ index f07b9aaa2c4898..b380537215634d 100644
  
  import (
 diff --git a/src/hash/marshal_test.go b/src/hash/marshal_test.go
-index 3091f7a67acede..d952cf45797ac6 100644
+index 3091f7a67acede..fa3f0fd82cfd30 100644
 --- a/src/hash/marshal_test.go
 +++ b/src/hash/marshal_test.go
-@@ -21,6 +21,7 @@ import (
+@@ -16,6 +16,7 @@ import (
+ 	"crypto/sha512"
+ 	"encoding"
+ 	"encoding/hex"
++	"errors"
+ 	"hash"
+ 	"hash/adler32"
  	"hash/crc32"
- 	"hash/crc64"
- 	"hash/fnv"
-+	"strings"
- 	"testing"
- )
- 
 @@ -80,6 +81,9 @@ func TestMarshalHash(t *testing.T) {
  			}
  			enc, err := h2m.MarshalBinary()
  			if err != nil {
-+				if strings.Contains(err.Error(), "hash state is not marshallable") {
++				if errors.Is(err, errors.ErrUnsupported) {
 +					t.Skip("BinaryMarshaler not supported")
 +				}
  				t.Fatalf("MarshalBinary: %v", err)

From d2fdcc1de41ad89776ccf7a100411ad615204c7a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 28 Jul 2025 16:06:52 +0000
Subject: [PATCH 409/887] Update submodule to latest master (e81eac19):
 hash/crc32: fix incorrect checksums with avx512+race

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 3636ced112d..e81eac19d30 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 3636ced112d89da03739fa7d5468c0270addaa28
+Subproject commit e81eac19d30f373496cd1d08ce2f89c0469a21fd

From bc397dd372800e0427bd433cf4ed1877f24f63a3 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 29 Jul 2025 23:54:02 -0700
Subject: [PATCH 410/887] Attribute patch files to bot: clarify lack of
 ownership (#1787)

---
 .git-go-patch                                              | 7 +++++++
 patches/0001-Vendor-external-dependencies.patch            | 2 +-
 patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch        | 4 ++--
 patches/0003-Implement-crypto-internal-backend.patch       | 2 +-
 patches/0004-Use-crypto-backends.patch                     | 2 +-
 patches/0005-Disable-GOTOOLCHAIN-support.patch             | 6 +++---
 patches/0006-Skip-failing-tests-on-Windows.patch           | 2 +-
 .../0007-add-support-for-logging-used-Windows-APIs.patch   | 6 +++---
 patches/0008-remove-long-path-support-hack.patch           | 4 ++--
 .../0009-Omit-internal-go.mod-files-used-for-codegen.patch | 2 +-
 patches/0010-add-appinsights-telemetry.patch               | 2 +-
 11 files changed, 23 insertions(+), 16 deletions(-)
 create mode 100644 .git-go-patch

diff --git a/.git-go-patch b/.git-go-patch
new file mode 100644
index 00000000000..74a8f15c009
--- /dev/null
+++ b/.git-go-patch
@@ -0,0 +1,7 @@
+{
+  "MinimumToolVersion": "v1.0.1",
+  "SubmoduleDir": "go",
+  "PatchesDir": "patches",
+  "StatusFileDir": "eng/artifacts/go-patch",
+  "ExtractAsAuthor": "bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>"
+}
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 73af9f6979d..5fc2c7964a6 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Quim Muntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Mon, 23 May 2022 12:59:36 +0000
 Subject: [PATCH] Vendor external dependencies
 
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index de0bad3cc2b..b1f0fae461b 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Davis Goodin <dagood@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Wed, 31 May 2023 16:54:31 -0500
 Subject: [PATCH] Add crypto backend GOEXPERIMENTs
 
@@ -566,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 63a338883991e0..04f8fce2dfed03 100644
+index d0ae75d4e1a1a3..8eb3f97bdd4dbd 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 666e20d162c..1f5ce190fcf 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Wed, 15 Jan 2025 16:32:26 +0100
 Subject: [PATCH] Implement crypto/internal/backend
 
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 6da9f85e50b..83337934058 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Tue, 14 Jan 2025 11:10:21 +0100
 Subject: [PATCH] Use crypto backends
 
diff --git a/patches/0005-Disable-GOTOOLCHAIN-support.patch b/patches/0005-Disable-GOTOOLCHAIN-support.patch
index c54e9148a3a..42d4befff5f 100644
--- a/patches/0005-Disable-GOTOOLCHAIN-support.patch
+++ b/patches/0005-Disable-GOTOOLCHAIN-support.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Thu, 8 Jun 2023 14:17:13 +0200
 Subject: [PATCH] Disable GOTOOLCHAIN support
 
@@ -29,10 +29,10 @@ index 6ff2b921d464bc..36c3bdfc9b6087 100644
 -GOTOOLCHAIN=auto
 +GOTOOLCHAIN=local
 diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
-index 3b9f27e91d517e..3084f681499c2c 100644
+index 10ee92536b96cd..200ba17202276f 100644
 --- a/src/cmd/go/internal/cfg/cfg.go
 +++ b/src/cmd/go/internal/cfg/cfg.go
-@@ -401,6 +401,24 @@ func Getenv(key string) string {
+@@ -452,6 +452,24 @@ func Getenv(key string) string {
  	}
  	val := os.Getenv(key)
  	if val != "" {
diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
index 38499ce6fc0..af0848b76f2 100644
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ b/patches/0006-Skip-failing-tests-on-Windows.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Wed, 11 Oct 2023 10:44:22 +0200
 Subject: [PATCH] Skip failing tests on Windows
 
diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index 7c26330910b..61fe2d19c79 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Tue, 19 Mar 2024 16:48:18 +0100
 Subject: [PATCH] add support for logging used Windows APIs
 
@@ -17,10 +17,10 @@ Subject: [PATCH] add support for logging used Windows APIs
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index 7183e79f7df093..2b382202bf7e49 100644
+index 04752f26036d22..cbabc52b639bdd 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
-@@ -223,6 +223,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
+@@ -222,6 +222,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
  	if name[len(name)-1] != 0 {
  		throw("usage")
  	}
diff --git a/patches/0008-remove-long-path-support-hack.patch b/patches/0008-remove-long-path-support-hack.patch
index 35bf86b183f..fb4b8c4e9b4 100644
--- a/patches/0008-remove-long-path-support-hack.patch
+++ b/patches/0008-remove-long-path-support-hack.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Mon, 25 Mar 2024 12:14:00 +0100
 Subject: [PATCH] remove long path support hack
 
@@ -17,7 +17,7 @@ only affect long relative paths, which can't be used with the `\\?\`.
  1 file changed, 1 insertion(+), 22 deletions(-)
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index fc7296f28ab12f..d3e0149c90febc 100644
+index cbabc52b639bdd..abbe437183ba86 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
 @@ -136,7 +136,6 @@ var (
diff --git a/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
index 39e77834982..c616ec0edd1 100644
--- a/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
+++ b/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: Davis Goodin <dagood@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Fri, 24 May 2024 15:38:31 -0700
 Subject: [PATCH] Omit internal go.mod files used for codegen
 
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index 559fcf0f761..eef15f4ee50 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -1,5 +1,5 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: qmuntal <qmuntaldiaz@microsoft.com>
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Thu, 29 May 2025 14:53:58 +0200
 Subject: [PATCH] Add appinsights telemetry
 

From 89393e30e8479a9f6f7f4657b6d0c963c76fb63d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 30 Jul 2025 11:35:20 +0000
Subject: [PATCH 411/887] build(deps): bump github/codeql-action from 3.29.4 to
 3.29.5 (#1788)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.4 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/4e828ff8d448a8a6e532957b1811f387a63867e8...51f77329afa6477de8c49fc9c7046c15b9a4e79d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fe5b5765e40..39359918615 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
+        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           category: /language:go

From b7452b712c221489a1cc7c4a46b08873965afcba Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 30 Jul 2025 16:06:22 +0000
Subject: [PATCH 412/887] Update submodule to latest master (2174a793):
 crypto/tls: use standard chacha20-poly1305 cipher suite names

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e81eac19d30..2174a7936c9 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e81eac19d30f373496cd1d08ce2f89c0469a21fd
+Subproject commit 2174a7936c9e6109e2786369072f5b9dc5d631f5

From 56b955ddd822ce38520d3a80264212ffe36b01cf Mon Sep 17 00:00:00 2001
From: Dimitri John Ledkov <19779+xnox@users.noreply.github.com>
Date: Wed, 30 Jul 2025 17:57:32 +0100
Subject: [PATCH 413/887] ed25519: check for boring enabled, and rand at the
 same time (#1786)

When compiling upstream projects (in particular
https://github.com/nats-io/nkeys) it is possible to reach Unreachable
code path.

It seems much safer to check for rand reader at the same time as
boring.Enabled and boring.SupportsEd25519 as otherwise automatic
fallback to the other implementation does not happen.

If the intention is to automatically allow using fallback, as the code
suggests to be the case.

Reported-by: @javacruft
---
 ...r-boring-enabled-and-rand-at-the-sam.patch | 59 +++++++++++++++++++
 1 file changed, 59 insertions(+)
 create mode 100644 patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch

diff --git a/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch b/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch
new file mode 100644
index 00000000000..0df10364b76
--- /dev/null
+++ b/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch
@@ -0,0 +1,59 @@
+From 3accfa5a92997343c59ccbd52cee112fa30d971f Mon Sep 17 00:00:00 2001
+From: Dimitri John Ledkov <dimitri.ledkov@surgut.co.uk>
+Date: Tue, 29 Jul 2025 21:50:56 +0100
+Subject: [PATCH] ed25519: check for boring enabled, and rand at the same time
+
+When compiling upstream projects (in particular
+https://github.com/nats-io/nkeys) it is possible to reach Unreachable
+code path.
+
+It seems much safer to check for rand reader at the same time as
+boring.Enabled and boring.SupportsEd25519 as otherwise automatic
+fallback to the other implementation does not happen.
+
+If the intention is to automatically allow using fallback, as the code
+suggests to be the case.
+---
+ src/crypto/ed25519/ed25519.go | 25 +++++++++++--------------
+ 1 file changed, 11 insertions(+), 14 deletions(-)
+
+diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
+index b770c8c498..4ac5e90bb7 100644
+--- a/src/crypto/ed25519/ed25519.go
++++ b/src/crypto/ed25519/ed25519.go
+@@ -146,21 +146,18 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+ 	if rand == nil {
+ 		rand = cryptorand.Reader
+ 	}
+-	if boring.Enabled && boring.SupportsEd25519() {
+-		if rand == boring.RandReader {
+-			priv, err := boring.GenerateKeyEd25519()
+-			if err != nil {
+-				return nil, nil, err
+-			}
+-			privData, err := priv.Bytes()
+-			if err != nil {
+-				return nil, nil, err
+-			}
+-			privKey := PrivateKey(privData)
+-			pubKey := privKey.Public().(PublicKey)
+-			return pubKey, privKey, err
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsEd25519() {
++		priv, err := boring.GenerateKeyEd25519()
++		if err != nil {
++			return nil, nil, err
++		}
++		privData, err := priv.Bytes()
++		if err != nil {
++			return nil, nil, err
+ 		}
+-		boring.UnreachableExceptTests()
++		privKey := PrivateKey(privData)
++		pubKey := privKey.Public().(PublicKey)
++		return pubKey, privKey, err
+ 	}
+ 
+ 	seed := make([]byte, SeedSize)
+-- 
+2.48.1
+

From 95c7bb4dd2ff311000b8ec1ef1b0436f98b42666 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 31 Jul 2025 10:06:32 +0100
Subject: [PATCH 414/887] run 3-way merge

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 14 ++++----
 ...upport-for-logging-used-Windows-APIs.patch |  8 ++---
 patches/0010-add-appinsights-telemetry.patch  | 32 +------------------
 3 files changed, 12 insertions(+), 42 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index b1f0fae461b..1298f4a2eaf 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 689ca8ce58a6f2..9b3bafd0fc6cd9 100644
+index 3f3db8f25f710d..4fb619cc061269 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
@@ -409,15 +409,15 @@ index 689ca8ce58a6f2..9b3bafd0fc6cd9 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -85,6 +97,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -84,6 +96,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		AliasTypeParams: true,
  		SwissMap:        true,
- 		SyncHashTrieMap: true,
  		Dwarf5:          dwarf5Supported,
 +		SystemCrypto:    systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -126,6 +139,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -125,6 +138,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -432,7 +432,7 @@ index 689ca8ce58a6f2..9b3bafd0fc6cd9 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -139,6 +160,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -138,6 +159,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -443,7 +443,7 @@ index 689ca8ce58a6f2..9b3bafd0fc6cd9 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -152,6 +177,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -151,6 +176,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -566,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index d0ae75d4e1a1a3..8eb3f97bdd4dbd 100644
+index ca99bfbb5cb034..820f3852c53670 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index 61fe2d19c79..d62e50d6d25 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -17,7 +17,7 @@ Subject: [PATCH] add support for logging used Windows APIs
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index 04752f26036d22..cbabc52b639bdd 100644
+index 88d730aa026a7f..53e3332d9fa77f 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
 @@ -222,6 +222,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
@@ -29,15 +29,15 @@ index 04752f26036d22..cbabc52b639bdd 100644
  	return stdFunction(unsafe.Pointer(f))
  }
 diff --git a/src/runtime/syscall_windows.go b/src/runtime/syscall_windows.go
-index 85b1b8c9024a73..384be25350726e 100644
+index 0f74ebbe240eaf..11c680630b2f00 100644
 --- a/src/runtime/syscall_windows.go
 +++ b/src/runtime/syscall_windows.go
-@@ -443,6 +443,7 @@ func syscall_loadlibrary(filename *uint16) (handle, err uintptr) {
+@@ -444,6 +444,7 @@ func syscall_loadlibrary(filename *uint16) (handle, err uintptr) {
  //
  //go:linkname syscall_getprocaddress syscall.getprocaddress
  func syscall_getprocaddress(handle uintptr, procname *byte) (outhandle, err uintptr) {
 +	syscallTrace(handle, procname)
- 	outhandle, _, err = syscall_SyscallN(uintptr(unsafe.Pointer(_GetProcAddress)), handle, uintptr(unsafe.Pointer(procname)))
+ 	outhandle, _, err = syscall_syscalln(uintptr(unsafe.Pointer(_GetProcAddress)), 2, handle, uintptr(unsafe.Pointer(procname)))
  	KeepAlive(procname)
  	if outhandle != 0 {
 diff --git a/src/runtime/syscalltrace_generate_windows.go b/src/runtime/syscalltrace_generate_windows.go
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0010-add-appinsights-telemetry.patch
index eef15f4ee50..edbc0e10aa7 100644
--- a/patches/0010-add-appinsights-telemetry.patch
+++ b/patches/0010-add-appinsights-telemetry.patch
@@ -5,14 +5,13 @@ Subject: [PATCH] Add appinsights telemetry
 
 ---
  README.md                                     | 15 ++++++
- .../internal/telemetrystats/telemetrystats.go | 13 +++++
  src/cmd/go/main.go                            |  8 +++
  src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
  src/cmd/go/script_test.go                     |  8 +++
  src/cmd/go/scriptcmds_test.go                 | 11 ++++
  src/cmd/internal/telemetry/counter/counter.go | 48 ++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 ++
- 8 files changed, 157 insertions(+), 1 deletion(-)
+ 7 files changed, 144 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -39,35 +38,6 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +our privacy statement. Your use of the software operates as your consent to
 +these practices.
 \ No newline at end of file
-diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
-index 950453fa951374..d5b642240f16b7 100644
---- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
-+++ b/src/cmd/go/internal/telemetrystats/telemetrystats.go
-@@ -11,6 +11,7 @@ import (
- 	"cmd/go/internal/cfg"
- 	"cmd/go/internal/modload"
- 	"cmd/internal/telemetry/counter"
-+	"strings"
- )
- 
- func Increment() {
-@@ -48,4 +49,16 @@ func incrementConfig() {
- 	case "wasm":
- 		counter.Inc("go/platform/target/gowasm:" + cfg.GOWASM)
- 	}
-+
-+	// Use cfg.Experiment.String instead of cfg.Experiment.Enabled
-+	// because we only want to count the experiments that differ
-+	// from the baseline.
-+	if cfg.Experiment != nil {
-+		for exp := range strings.SplitSeq(cfg.Experiment.String(), ",") {
-+			if exp == "" {
-+				continue
-+			}
-+			counter.Inc("go/goexperiment:" + exp)
-+		}
-+	}
- }
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
 index e81969ca4a3144..67dbcb2e7a3cb9 100644
 --- a/src/cmd/go/main.go

From def512036a2dad70dd5d0758a75efbc096608552 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 31 Jul 2025 11:26:07 +0100
Subject: [PATCH 415/887] merge ed25519 changes into patch 4 and update FIPS
 doc (#1790)

---
 eng/doc/fips/UserGuide.md                     |  2 +-
 patches/0004-Use-crypto-backends.patch        | 41 ++++++-------
 ...r-boring-enabled-and-rand-at-the-sam.patch | 59 -------------------
 3 files changed, 20 insertions(+), 82 deletions(-)
 delete mode 100644 patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch

diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index af6c9599579..94cd3436654 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -784,7 +784,7 @@ GenerateKey generates a public/private key pair using entropy from rand. If rand
 
 **Requirements**
 
-- `rand` must be boring.RandReader or nil, else GenerateKey will panic. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+- `rand` must be boring.RandReader or nil. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
 
 **Implementation**
 
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 83337934058..9f0fa32a444 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -30,7 +30,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ecdsa/ecdsa.go                     |  10 +-
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
- src/crypto/ed25519/ed25519.go                 |  73 +++++++
+ src/crypto/ed25519/ed25519.go                 |  70 +++++++
  src/crypto/ed25519/ed25519_test.go            |  13 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/fips140.go                 |   3 +-
@@ -91,7 +91,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 87 files changed, 1186 insertions(+), 116 deletions(-)
+ 87 files changed, 1183 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1013,7 +1013,7 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index 0e268139587075..b770c8c4987ca6 100644
+index 0e268139587075..4ac5e90bb73e57 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
 @@ -17,6 +17,7 @@ package ed25519
@@ -1032,30 +1032,27 @@ index 0e268139587075..b770c8c4987ca6 100644
  )
  
  const (
-@@ -144,6 +146,22 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -144,6 +146,19 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  	if rand == nil {
  		rand = cryptorand.Reader
  	}
-+	if boring.Enabled && boring.SupportsEd25519() {
-+		if rand == boring.RandReader {
-+			priv, err := boring.GenerateKeyEd25519()
-+			if err != nil {
-+				return nil, nil, err
-+			}
-+			privData, err := priv.Bytes()
-+			if err != nil {
-+				return nil, nil, err
-+			}
-+			privKey := PrivateKey(privData)
-+			pubKey := privKey.Public().(PublicKey)
-+			return pubKey, privKey, err
++	if boring.Enabled && rand == boring.RandReader && boring.SupportsEd25519() {
++		priv, err := boring.GenerateKeyEd25519()
++		if err != nil {
++			return nil, nil, err
++		}
++		privData, err := priv.Bytes()
++		if err != nil {
++			return nil, nil, err
 +		}
-+		boring.UnreachableExceptTests()
++		privKey := PrivateKey(privData)
++		pubKey := privKey.Public().(PublicKey)
++		return pubKey, privKey, err
 +	}
  
  	seed := make([]byte, SeedSize)
  	if _, err := io.ReadFull(rand, seed); err != nil {
-@@ -160,6 +178,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+@@ -160,6 +175,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1073,7 +1070,7 @@ index 0e268139587075..b770c8c4987ca6 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -178,6 +207,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -178,6 +204,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1091,7 +1088,7 @@ index 0e268139587075..b770c8c4987ca6 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -207,6 +247,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -207,6 +244,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1124,7 +1121,7 @@ index 0e268139587075..b770c8c4987ca6 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -235,6 +301,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -235,6 +298,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
diff --git a/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch b/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch
deleted file mode 100644
index 0df10364b76..00000000000
--- a/patches/0099-ed25519-check-for-boring-enabled-and-rand-at-the-sam.patch
+++ /dev/null
@@ -1,59 +0,0 @@
-From 3accfa5a92997343c59ccbd52cee112fa30d971f Mon Sep 17 00:00:00 2001
-From: Dimitri John Ledkov <dimitri.ledkov@surgut.co.uk>
-Date: Tue, 29 Jul 2025 21:50:56 +0100
-Subject: [PATCH] ed25519: check for boring enabled, and rand at the same time
-
-When compiling upstream projects (in particular
-https://github.com/nats-io/nkeys) it is possible to reach Unreachable
-code path.
-
-It seems much safer to check for rand reader at the same time as
-boring.Enabled and boring.SupportsEd25519 as otherwise automatic
-fallback to the other implementation does not happen.
-
-If the intention is to automatically allow using fallback, as the code
-suggests to be the case.
----
- src/crypto/ed25519/ed25519.go | 25 +++++++++++--------------
- 1 file changed, 11 insertions(+), 14 deletions(-)
-
-diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index b770c8c498..4ac5e90bb7 100644
---- a/src/crypto/ed25519/ed25519.go
-+++ b/src/crypto/ed25519/ed25519.go
-@@ -146,21 +146,18 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
- 	if rand == nil {
- 		rand = cryptorand.Reader
- 	}
--	if boring.Enabled && boring.SupportsEd25519() {
--		if rand == boring.RandReader {
--			priv, err := boring.GenerateKeyEd25519()
--			if err != nil {
--				return nil, nil, err
--			}
--			privData, err := priv.Bytes()
--			if err != nil {
--				return nil, nil, err
--			}
--			privKey := PrivateKey(privData)
--			pubKey := privKey.Public().(PublicKey)
--			return pubKey, privKey, err
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsEd25519() {
-+		priv, err := boring.GenerateKeyEd25519()
-+		if err != nil {
-+			return nil, nil, err
-+		}
-+		privData, err := priv.Bytes()
-+		if err != nil {
-+			return nil, nil, err
- 		}
--		boring.UnreachableExceptTests()
-+		privKey := PrivateKey(privData)
-+		pubKey := privKey.Public().(PublicKey)
-+		return pubKey, privKey, err
- 	}
- 
- 	seed := make([]byte, SeedSize)
--- 
-2.48.1
-

From 12dd239abc979e1739f4f98527c132e06e602e25 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 31 Jul 2025 11:17:16 +0000
Subject: [PATCH 416/887] build(deps): bump github.com/golang-jwt/jwt/v5 in
 /eng/_util (#1792)

Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.3 to 5.3.0.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.3...v5.3.0)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index aa196db9db8..f6dccab6531 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.23.0
 
 require (
-	github.com/golang-jwt/jwt/v5 v5.2.3
+	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/net v0.42.0
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index f642b8f3210..d1ec6a45657 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -1,7 +1,7 @@
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
-github.com/golang-jwt/jwt/v5 v5.2.3 h1:kkGXqQOBSDDWRhWNXTFpqGSCMyh/PLnqUvMGJPDJDs0=
-github.com/golang-jwt/jwt/v5 v5.2.3/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
+github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
+github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=

From f4d2dea94fb40779a8318e8df46e16aa4b99b75a Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 31 Jul 2025 18:17:26 +0100
Subject: [PATCH 417/887] Fix missing distro parameter causing Windows agent
 failures (#1791)

Added missing distro: '2022' to signing and publishing stage builder
objects to fix "Image 1es-windows- doesn't exist" error.
---
 eng/pipeline/stages/builders-to-stages.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 79447b2318f..d5d59bac03f 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -59,7 +59,7 @@ stages:
             template: sign-stage.yml
             parameters:
               # This is not a builder, but provide partial builder info for agent selection.
-              builder: { os: windows, arch: amd64 }
+              builder: { os: windows, arch: amd64, distro: '2022' }
               official: ${{ parameters.official }}
               # The list of builders to depend on and grab artifacts from.
               builders:
@@ -80,7 +80,7 @@ stages:
         inner:
           template: internal-publish-stage.yml
           parameters:
-            builder: { os: windows, arch: amd64 }
+            builder: { os: windows, arch: amd64, distro: '2022' }
             official: true
             builders:
               - ${{ each builder in parameters.builders }}:

From e7dd712ced286e2fd185e36bf10db7d103f1ab22 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 1 Aug 2025 16:07:30 +0000
Subject: [PATCH 418/887] Update submodule to latest master (e666972a):
 runtime: deduplicate Windows stdcall

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2174a7936c9..e666972a674 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2174a7936c9e6109e2786369072f5b9dc5d631f5
+Subproject commit e666972a674eb96f5847c7bbeb5c6e1bcb572af5

From 7a1ceabde7a95d2e7d7d961545ed70dfe4cb9bf7 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Sun, 3 Aug 2025 21:45:41 +0100
Subject: [PATCH 419/887] resolve merge conflicts

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 14 +++---
 ...upport-for-logging-used-Windows-APIs.patch | 44 ++++++++++++-------
 .../0008-remove-long-path-support-hack.patch  | 12 ++---
 3 files changed, 40 insertions(+), 30 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 1298f4a2eaf..dc32721d67d 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 3f3db8f25f710d..4fb619cc061269 100644
+index df84e9fdf46feb..1abe360b68a2b0 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
@@ -409,15 +409,15 @@ index 3f3db8f25f710d..4fb619cc061269 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -84,6 +96,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -83,6 +95,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RegabiArgs:      regabiSupported,
  		AliasTypeParams: true,
- 		SwissMap:        true,
  		Dwarf5:          dwarf5Supported,
 +		SystemCrypto:    systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -125,6 +138,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -124,6 +137,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -432,7 +432,7 @@ index 3f3db8f25f710d..4fb619cc061269 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -138,6 +159,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -137,6 +158,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -443,7 +443,7 @@ index 3f3db8f25f710d..4fb619cc061269 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -151,6 +176,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +175,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -566,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ca99bfbb5cb034..820f3852c53670 100644
+index dd7a4f446c1a57..4dfc4cf46a0951 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index d62e50d6d25..e41e19d332b 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -4,42 +4,52 @@ Date: Tue, 19 Mar 2024 16:48:18 +0100
 Subject: [PATCH] add support for logging used Windows APIs
 
 ---
- src/runtime/os_windows.go                    |   1 +
- src/runtime/syscall_windows.go               |   1 +
- src/runtime/syscalltrace_generate_windows.go |  50 +++++++
- src/runtime/syscalltrace_windows.go          | 131 +++++++++++++++++++
- src/runtime/syscalltrace_windows_test.go     |  81 ++++++++++++
- src/runtime/zsyscalltrace_windows.go         |  60 +++++++++
- 6 files changed, 324 insertions(+)
+ src/runtime/os_windows.go                     |   1 +
+ src/runtime/syscall_windows.go                |  11 ++
+ src/runtime/syscalltrace_generate_windows.go  |  50 +++++++
+ src/runtime/syscalltrace_windows.go           | 131 ++++++++++++++++++
+ src/runtime/syscalltrace_windows_test.go      |  81 +++++++++++
+ src/runtime/zsyscalltrace_windows.go          |  60 ++++++++
+ 6 files changed, 335 insertions(+), 1 deletion(-)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index 88d730aa026a7f..53e3332d9fa77f 100644
+index ab4e165baecfb0..608ee8bc962a0c 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
-@@ -222,6 +222,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
+@@ -220,6 +220,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
  	if name[len(name)-1] != 0 {
  		throw("usage")
  	}
 +	syscallTrace(lib, &name[0])
- 	f := stdcall2(_GetProcAddress, lib, uintptr(unsafe.Pointer(&name[0])))
+ 	f := stdcall(_GetProcAddress, lib, uintptr(unsafe.Pointer(&name[0])))
  	return stdFunction(unsafe.Pointer(f))
  }
 diff --git a/src/runtime/syscall_windows.go b/src/runtime/syscall_windows.go
-index 0f74ebbe240eaf..11c680630b2f00 100644
+index b3c3d8c0d53864..be225e825ff421 100644
 --- a/src/runtime/syscall_windows.go
 +++ b/src/runtime/syscall_windows.go
-@@ -444,6 +444,7 @@ func syscall_loadlibrary(filename *uint16) (handle, err uintptr) {
+@@ -417,6 +417,17 @@ func callbackWrap(a *callbackArgs) {
+ // It shouldn't be used in the runtime package,
+ // use [stdcall] instead.
  //
- //go:linkname syscall_getprocaddress syscall.getprocaddress
- func syscall_getprocaddress(handle uintptr, procname *byte) (outhandle, err uintptr) {
++//go:linkname syscall_getprocaddress syscall.getprocaddress
++func syscall_getprocaddress(handle uintptr, procname *byte) (outhandle, err uintptr) {
 +	syscallTrace(handle, procname)
- 	outhandle, _, err = syscall_syscalln(uintptr(unsafe.Pointer(_GetProcAddress)), 2, handle, uintptr(unsafe.Pointer(procname)))
- 	KeepAlive(procname)
- 	if outhandle != 0 {
++	outhandle, _, err = syscall_syscalln(uintptr(unsafe.Pointer(_GetProcAddress)), 2, handle, uintptr(unsafe.Pointer(procname)))
++	KeepAlive(procname)
++	if outhandle != 0 {
++		err = 0
++	}
++	return
++}
++
+ //go:linkname syscall_syscalln syscall.syscalln
+ //go:nosplit
+ //go:uintptrkeepalive
 diff --git a/src/runtime/syscalltrace_generate_windows.go b/src/runtime/syscalltrace_generate_windows.go
 new file mode 100644
 index 00000000000000..17fb696be88776
diff --git a/patches/0008-remove-long-path-support-hack.patch b/patches/0008-remove-long-path-support-hack.patch
index fb4b8c4e9b4..af1e22a30fc 100644
--- a/patches/0008-remove-long-path-support-hack.patch
+++ b/patches/0008-remove-long-path-support-hack.patch
@@ -17,10 +17,10 @@ only affect long relative paths, which can't be used with the `\\?\`.
  1 file changed, 1 insertion(+), 22 deletions(-)
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index cbabc52b639bdd..abbe437183ba86 100644
+index 608ee8bc962a0c..b07d10084596fd 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
-@@ -136,7 +136,6 @@ var (
+@@ -135,7 +135,6 @@ var (
  	_NtCreateWaitCompletionPacket    stdFunction
  	_NtAssociateWaitCompletionPacket stdFunction
  	_NtCancelWaitCompletionPacket    stdFunction
@@ -28,7 +28,7 @@ index cbabc52b639bdd..abbe437183ba86 100644
  	_RtlGetVersion                   stdFunction
  
  	// These are from non-kernel32.dll, so we prefer to LoadLibraryEx them.
-@@ -286,7 +285,6 @@ func loadOptionalSyscalls() {
+@@ -285,7 +284,6 @@ func loadOptionalSyscalls() {
  			throw("NtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does not")
  		}
  	}
@@ -36,7 +36,7 @@ index cbabc52b639bdd..abbe437183ba86 100644
  	_RtlGetVersion = windowsFindfunc(n32, []byte("RtlGetVersion\000"))
  }
  
-@@ -450,26 +448,7 @@ var canUseLongPaths bool
+@@ -449,26 +447,7 @@ var canUseLongPaths bool
  
  // initLongPathSupport enables long path support.
  func initLongPathSupport() {
@@ -48,7 +48,7 @@ index cbabc52b639bdd..abbe437183ba86 100644
 -	// Check that we're ≥ 10.0.15063.
 -	info := _OSVERSIONINFOW{}
 -	info.osVersionInfoSize = uint32(unsafe.Sizeof(info))
--	stdcall1(_RtlGetVersion, uintptr(unsafe.Pointer(&info)))
+-	stdcall(_RtlGetVersion, uintptr(unsafe.Pointer(&info)))
 -	if info.majorVersion < 10 || (info.majorVersion == 10 && info.minorVersion == 0 && info.buildNumber < 15063) {
 -		return
 -	}
@@ -56,7 +56,7 @@ index cbabc52b639bdd..abbe437183ba86 100644
 -	// Set the IsLongPathAwareProcess flag of the PEB's bit field.
 -	// This flag is not documented, but it's known to be used
 -	// by Windows to enable long path support.
--	bitField := (*byte)(unsafe.Pointer(stdcall0(_RtlGetCurrentPeb) + PebBitFieldOffset))
+-	bitField := (*byte)(unsafe.Pointer(stdcall(_RtlGetCurrentPeb) + PebBitFieldOffset))
 -	*bitField |= IsLongPathAwareProcess
 -
 -	canUseLongPaths = true

From 7097fc7049596e45ca7f1b2eccdc70802edde870 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Sun, 3 Aug 2025 21:56:40 +0100
Subject: [PATCH 420/887] replace stdcall

---
 .../0007-add-support-for-logging-used-Windows-APIs.patch  | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index e41e19d332b..dce7ac5fc9a 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -168,7 +168,7 @@ index 00000000000000..ed9161b797c4f9
 +	n += 1
 +	// Use GetModuleFileNameA instead of GetModuleFileNameW to avoid
 +	// having to allocate memory for the UTF-16 string.
-+	n1 := stdcall3(_GetModuleFileNameA, modHandle, uintptr(unsafe.Pointer(&buf[n])), _MAX_PATH)
++	n1 := stdcall(_GetModuleFileNameA, modHandle, uintptr(unsafe.Pointer(&buf[n])), _MAX_PATH)
 +	if n1 == 0 || n1 == _MAX_PATH {
 +		// Failed or short buffer.
 +		buf[n] = '?'
@@ -194,7 +194,7 @@ index 00000000000000..ed9161b797c4f9
 +// initSyscallTrace initializes syscall tracing.
 +func initSyscallTrace() bool {
 +	// Get the name of the current process.
-+	n := int(stdcall3(_GetModuleFileNameA, 0, uintptr(unsafe.Pointer(&currentProcessName[0])), uintptr(len(currentProcessName))))
++	n := int(stdcall(_GetModuleFileNameA, 0, uintptr(unsafe.Pointer(&currentProcessName[0])), uintptr(len(currentProcessName))))
 +	if n == 0 || n == len(currentProcessName) {
 +		// Failed or short buffer.
 +		currentProcessName[0] = '?'
@@ -203,7 +203,7 @@ index 00000000000000..ed9161b797c4f9
 +	// and if so, use it as the trace file.
 +	envName := [...]uint16{'M', 'S', '_', 'G', 'O', '_', 'S', 'Y', 'S', 'C', 'A', 'L', 'L', '_', 'T', 'R', 'A', 'C', 'E', 0}
 +	var file [_MAX_PATH + 1]uint16
-+	if stdcall3(_GetEnvironmentVariableW, uintptr(unsafe.Pointer(&envName[0])), uintptr(unsafe.Pointer(&file[0])), uintptr(len(file))) == 0 {
++	if stdcall(_GetEnvironmentVariableW, uintptr(unsafe.Pointer(&envName[0])), uintptr(unsafe.Pointer(&file[0])), uintptr(len(file))) == 0 {
 +		// Disable syscall tracing.
 +		syscallTraceFileHandle = _INVALID_HANDLE_VALUE
 +		return false
@@ -218,7 +218,7 @@ index 00000000000000..ed9161b797c4f9
 +	)
 +	// Create the file with FILE_APPEND_DATA access to ensure that
 +	// writes are atomic.
-+	syscallTraceFileHandle = stdcall7(_CreateFileW, uintptr(unsafe.Pointer(&file[0])), FILE_APPEND_DATA, FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, 0, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, 0)
++	syscallTraceFileHandle = stdcall(_CreateFileW, uintptr(unsafe.Pointer(&file[0])), FILE_APPEND_DATA, FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, 0, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, 0)
 +	if syscallTraceFileHandle == _INVALID_HANDLE_VALUE {
 +		println("runtime: CreateFileA failed; errno=", getlasterror())
 +		throw("failed to create syscall trace file")

From 21974ed563b88d267366cfe768a7388944a33f87 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Sun, 3 Aug 2025 22:14:42 +0100
Subject: [PATCH 421/887] remove duplicate syscall implementation

---
 ...upport-for-logging-used-Windows-APIs.patch | 25 +------------------
 1 file changed, 1 insertion(+), 24 deletions(-)

diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index dce7ac5fc9a..51ee3c87c58 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -5,12 +5,11 @@ Subject: [PATCH] add support for logging used Windows APIs
 
 ---
  src/runtime/os_windows.go                     |   1 +
- src/runtime/syscall_windows.go                |  11 ++
  src/runtime/syscalltrace_generate_windows.go  |  50 +++++++
  src/runtime/syscalltrace_windows.go           | 131 ++++++++++++++++++
  src/runtime/syscalltrace_windows_test.go      |  81 +++++++++++
  src/runtime/zsyscalltrace_windows.go          |  60 ++++++++
- 6 files changed, 335 insertions(+), 1 deletion(-)
+ 5 files changed, 335 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
@@ -28,28 +27,6 @@ index ab4e165baecfb0..608ee8bc962a0c 100644
  	f := stdcall(_GetProcAddress, lib, uintptr(unsafe.Pointer(&name[0])))
  	return stdFunction(unsafe.Pointer(f))
  }
-diff --git a/src/runtime/syscall_windows.go b/src/runtime/syscall_windows.go
-index b3c3d8c0d53864..be225e825ff421 100644
---- a/src/runtime/syscall_windows.go
-+++ b/src/runtime/syscall_windows.go
-@@ -417,6 +417,17 @@ func callbackWrap(a *callbackArgs) {
- // It shouldn't be used in the runtime package,
- // use [stdcall] instead.
- //
-+//go:linkname syscall_getprocaddress syscall.getprocaddress
-+func syscall_getprocaddress(handle uintptr, procname *byte) (outhandle, err uintptr) {
-+	syscallTrace(handle, procname)
-+	outhandle, _, err = syscall_syscalln(uintptr(unsafe.Pointer(_GetProcAddress)), 2, handle, uintptr(unsafe.Pointer(procname)))
-+	KeepAlive(procname)
-+	if outhandle != 0 {
-+		err = 0
-+	}
-+	return
-+}
-+
- //go:linkname syscall_syscalln syscall.syscalln
- //go:nosplit
- //go:uintptrkeepalive
 diff --git a/src/runtime/syscalltrace_generate_windows.go b/src/runtime/syscalltrace_generate_windows.go
 new file mode 100644
 index 00000000000000..17fb696be88776

From 5f5dbff8a4cca8f905ca7db21ddaa0854da16025 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Sun, 3 Aug 2025 22:21:26 +0100
Subject: [PATCH 422/887] decrease insertion count

---
 patches/0007-add-support-for-logging-used-Windows-APIs.patch | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index 51ee3c87c58..4a0bef72f83 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -9,7 +9,7 @@ Subject: [PATCH] add support for logging used Windows APIs
  src/runtime/syscalltrace_windows.go           | 131 ++++++++++++++++++
  src/runtime/syscalltrace_windows_test.go      |  81 +++++++++++
  src/runtime/zsyscalltrace_windows.go          |  60 ++++++++
- 5 files changed, 335 insertions(+)
+ 5 files changed, 323 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go

From 2b84e3cc971e58d3ec6f61428a6294fd84396c0f Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 4 Aug 2025 09:34:47 +0100
Subject: [PATCH 423/887] add syscall trace to dll_windows.go

---
 ...upport-for-logging-used-Windows-APIs.patch | 41 ++++++++++++++-----
 1 file changed, 30 insertions(+), 11 deletions(-)

diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index 4a0bef72f83..1c1dcd7a0e7 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -4,12 +4,13 @@ Date: Tue, 19 Mar 2024 16:48:18 +0100
 Subject: [PATCH] add support for logging used Windows APIs
 
 ---
- src/runtime/os_windows.go                     |   1 +
- src/runtime/syscalltrace_generate_windows.go  |  50 +++++++
- src/runtime/syscalltrace_windows.go           | 131 ++++++++++++++++++
- src/runtime/syscalltrace_windows_test.go      |  81 +++++++++++
- src/runtime/zsyscalltrace_windows.go          |  60 ++++++++
- 5 files changed, 323 insertions(+)
+ src/runtime/os_windows.go                    |   1 +
+ src/runtime/syscalltrace_generate_windows.go |  50 +++++++
+ src/runtime/syscalltrace_windows.go          | 133 +++++++++++++++++++
+ src/runtime/syscalltrace_windows_test.go     |  81 +++++++++++
+ src/runtime/zsyscalltrace_windows.go         |  59 ++++++++
+ src/syscall/dll_windows.go                   |   4 +
+ 6 files changed, 328 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
@@ -85,10 +86,10 @@ index 00000000000000..17fb696be88776
 +}
 diff --git a/src/runtime/syscalltrace_windows.go b/src/runtime/syscalltrace_windows.go
 new file mode 100644
-index 00000000000000..ed9161b797c4f9
+index 00000000000000..11187541b1153f
 --- /dev/null
 +++ b/src/runtime/syscalltrace_windows.go
-@@ -0,0 +1,131 @@
+@@ -0,0 +1,133 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -121,6 +122,8 @@ index 00000000000000..ed9161b797c4f9
 +// If the underlying file supports atomic writes, the trace is guaranteed
 +// to be written atomically.
 +// procName should be a pointer to a null-terminated string.
++//
++//go:linkname syscallTrace
 +func syscallTrace(modHandle uintptr, procName *byte) {
 +	if syscallTraceFileHandle == _INVALID_HANDLE_VALUE {
 +		return
@@ -309,10 +312,10 @@ index 00000000000000..626c5e98f7eae4
 +}
 diff --git a/src/runtime/zsyscalltrace_windows.go b/src/runtime/zsyscalltrace_windows.go
 new file mode 100644
-index 00000000000000..4731d6fa34a29c
+index 00000000000000..d827281b8e9f7b
 --- /dev/null
 +++ b/src/runtime/zsyscalltrace_windows.go
-@@ -0,0 +1,60 @@
+@@ -0,0 +1,59 @@
 +// Code generated by syscalltrace_generate_windows.go. DO NOT EDIT.
 +
 +package runtime
@@ -342,7 +345,6 @@ index 00000000000000..4731d6fa34a29c
 +	"GetThreadContext\x00",
 +	"SetThreadContext\x00",
 +	"LoadLibraryExW\x00",
-+	"LoadLibraryW\x00",
 +	"PostQueuedCompletionStatus\x00",
 +	"QueryPerformanceCounter\x00",
 +	"QueryPerformanceFrequency\x00",
@@ -373,3 +375,20 @@ index 00000000000000..4731d6fa34a29c
 +	"GetEnvironmentVariableW\x00",
 +	"GetModuleFileNameA\x00",
 +}
+diff --git a/src/syscall/dll_windows.go b/src/syscall/dll_windows.go
+index 9d779869531788..d659736fcb720a 100644
+--- a/src/syscall/dll_windows.go
++++ b/src/syscall/dll_windows.go
+@@ -128,8 +128,12 @@ func loadsystemlibrary(filename *uint16) (uintptr, Errno) {
+ 	return handle, err
+ }
+ 
++//go:linkname syscallTrace runtime.syscallTrace
++func syscallTrace(lib uintptr, procname *byte)
++
+ //go:linkname getprocaddress
+ func getprocaddress(handle uintptr, procname *uint8) (uintptr, Errno) {
++	syscallTrace(handle, (*byte)(procname))
+ 	proc, _, err := SyscallN(uintptr(__GetProcAddress), handle, uintptr(unsafe.Pointer(procname)))
+ 	if proc != 0 {
+ 		err = 0

From 9801f48cdc55fa8241f5334028aa54020d4263b2 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Tue, 5 Aug 2025 16:39:03 +0000
Subject: [PATCH 424/887] Update submodule to latest master (cd55f86b):
 cmd/compile: allow multi-field structs to be stored directly in interfaces

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e666972a674..cd55f86b8dc 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e666972a674eb96f5847c7bbeb5c6e1bcb572af5
+Subproject commit cd55f86b8dcfc139ee5c17d32530ac9e758c8bc0

From a0d289fc24dc45a2b19c6aef3cdd098ad891bff7 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 5 Aug 2025 18:25:24 +0100
Subject: [PATCH 425/887] release notes: bump to go1.26 (#1799)

---
 docs/go1.25.md | 3 ---
 docs/go1.26.md | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)
 delete mode 100644 docs/go1.25.md
 create mode 100644 docs/go1.26.md

diff --git a/docs/go1.25.md b/docs/go1.25.md
deleted file mode 100644
index 9bc2bbd1b67..00000000000
--- a/docs/go1.25.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# Microsoft build of Go 1.25 release notes
-
-After the release of 1.25, 1.23 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).
diff --git a/docs/go1.26.md b/docs/go1.26.md
new file mode 100644
index 00000000000..fbaee696950
--- /dev/null
+++ b/docs/go1.26.md
@@ -0,0 +1,3 @@
+# Microsoft build of Go 1.26 release notes
+
+After the release of 1.26, 1.24 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).

From f5612cd11b0541a74643a9a90fe1ec9bf6f17eda Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 5 Aug 2025 13:46:50 -0700
Subject: [PATCH 426/887] Introduce ctx and use it to convey official and sign
 type data (#1795)

* Introduce ctx and use it to convey official and sign type data

* Fix publishing buildandpack in unofficial pipeline

* Handle test signing by skipping MicroBuild
---
 eng/_util/cmd/sign/sign.go                    | 17 +++-
 eng/pipeline/pr-outerloop-pipeline.yml        |  3 +-
 eng/pipeline/pr-pipeline.yml                  |  3 +-
 eng/pipeline/rolling-innerloop-pipeline.yml   |  3 +-
 eng/pipeline/rolling-internal-pipeline.yml    | 52 ++++++++++--
 .../rolling-internal-validation-pipeline.yml  |  6 +-
 eng/pipeline/rolling-pipeline.yml             |  3 +-
 eng/pipeline/stages/builders-to-stages.yml    | 80 ++++++++++++-------
 .../stages/go-builder-matrix-stages.yml       | 12 +--
 .../stages/internal-publish-stage.yml         |  5 +-
 eng/pipeline/stages/pool-1.yml                |  5 +-
 eng/pipeline/stages/pool-2.yml                |  9 ++-
 eng/pipeline/stages/pool.yml                  |  5 +-
 eng/pipeline/stages/public-publish-stage.yml  |  3 +
 eng/pipeline/stages/public-publish-stages.yml |  8 ++
 eng/pipeline/stages/run-codeql.yml            |  6 +-
 eng/pipeline/stages/run-stage.yml             | 12 ++-
 .../stages/shorthand-builders-to-builders.yml | 14 +++-
 eng/pipeline/stages/sign-stage.yml            |  9 ++-
 eng/pipeline/variables/pipeline.yml           | 26 ++++++
 20 files changed, 201 insertions(+), 80 deletions(-)
 create mode 100644 eng/pipeline/variables/pipeline.yml

diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index 587758e8062..fe33e6a115d 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -39,7 +39,10 @@ var (
 	tempDir          = flag.String("temp-dir", "eng/signing/signing-temp", "Directory to store temporary files.")
 	signingCsprojDir = flag.String("signing-csproj-dir", "eng/signing", "Directory containing Sign.csproj and related files.")
 
-	signType = flag.String("sign-type", "test", "Type of signing to perform. Options: test, real.")
+	signType = flag.String("sign-type", "test",
+		"Type of signing to perform. Options: test, real. "+
+			// https://github.com/microsoft/go-lab/issues/231
+			"Test signing skips using MicroBuild tooling because it throws exception 'The test signing method for cert (8020) has NOT been implemented.'")
 
 	timeout = flag.Duration("timeout", 0,
 		"Timeout for signing operations. Zero means no timeout. "+
@@ -232,6 +235,18 @@ func sign(ctx context.Context, step string, files []*fileToSign) error {
 		log.Printf("Dry run: skipping signing.")
 		return nil
 	}
+	if *signType == "test" {
+		log.Printf("Testing signing: skipping MicroBuild tooling.")
+		for _, f := range files {
+			if strings.HasSuffix(f.fullPath, ".sig") {
+				log.Printf("Replacing file with placeholder content to reduce size and simulate signature: %q", f.fullPath)
+				if err := os.WriteFile(f.fullPath, []byte("This is a placeholder test signature file."), 0o666); err != nil {
+					return fmt.Errorf("failed to write test signature file %q: %v", f.fullPath, err)
+				}
+			}
+		}
+		return nil
+	}
 
 	if err := os.MkdirAll(*tempDir, 0o777); err != nil {
 		return err
diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 0f775d423c2..5306bf126ca 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -17,7 +17,7 @@ pr:
   - dev/*
 
 variables:
-  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+  - template: variables/pipeline.yml
 
 resources:
   containers:
@@ -33,4 +33,5 @@ resources:
 stages:
   - template: stages/go-builder-matrix-stages.yml
     parameters:
+      ctx: {}
       outerloop: true
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index c70163b1086..468d4b4239a 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -10,7 +10,7 @@ pr:
   - dev/*
 
 variables:
-  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+  - template: variables/pipeline.yml
 
 resources:
   containers:
@@ -30,5 +30,6 @@ resources:
 stages:
   - template: stages/go-builder-matrix-stages.yml
     parameters:
+      ctx: {}
       innerloop: true
       buildandpack: true
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index c6d2c8e8778..15a3f1e14f1 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -21,7 +21,7 @@ parameters:
     default: false
 
 variables:
-  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+  - template: variables/pipeline.yml
 
 resources:
   repositories:
@@ -53,6 +53,7 @@ extends:
     stages:
       - template: stages/go-builder-matrix-stages.yml
         parameters:
+          ctx: {}
           innerloop: true
           # Include buildandpack builders. The official internal build uses slightly different build
           # machines than this pipeline. This one tests against our minimum requirements.
diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index a23a4a52c63..db132cfa605 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -22,9 +22,9 @@ parameters:
 
   - name: publishReleaseStudio
     displayName: >
-      [Release automation input]
-      Publish artifacts to the public using Release Studio integration.
-      To save resources, leave false for builds that definitely won't be released, like microsoft/main rolling builds.
+      For debugging publish steps: force publishing artifacts to the public
+      using Release Studio integration, even if this isn't the official pipeline
+      or this isn't a release branch.
     type: boolean
     default: false
 
@@ -39,12 +39,32 @@ parameters:
     default: 'nil'
 
 variables:
+  - template: variables/pipeline.yml
   - template: variables/pool-providers.yml
+
   # MicroBuild configuration.
   - name: TeamName
     value: golang
-  - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
-    value: '0'
+
+  - name: GoSigningType # Note: not quite SignType. MicroBuild generates SignType.
+    ${{ if variables['Go1ESOfficial'] }}:
+      value: 'real'
+    ${{ else }}:
+      value: 'test'
+
+  # Publish buildandpack artifacts to pipeline using 1ES PT.
+  - name: GoPublishArtifacts
+    value: 'true'
+
+  - name: GoPublishReleaseStudio
+    ${{ if startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/') }}:
+      value: '' # Never publish internal branches using release studio.
+    ${{ elseif parameters.publishReleaseStudio }}:
+      value: 'true'
+    ${{ elseif and(variables['Go1ESOfficial'], ne(variables['Build.SourceBranch'], 'refs/heads/main')) }}:
+      value: 'true'
+    ${{ else }}:
+      value: ''
 
 resources:
   repositories:
@@ -54,7 +74,10 @@ resources:
       ref: refs/tags/release
 
 extends:
-  template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
+  ${{ if variables['Go1ESOfficial'] }}:
+    template: azure-pipelines/MicroBuild.1ES.Official.yml@MicroBuildTemplate
+  ${{ else }}:
+    template: azure-pipelines/MicroBuild.1ES.Unofficial.yml@MicroBuildTemplate
   parameters:
     pool:
       # Default, used for SDL analysis.
@@ -62,6 +85,7 @@ extends:
       image: 1es-windows-2022
       os: windows
     sdl:
+      enableProductionSDL: true
       codeql:
         compiled:
           enabled: false
@@ -75,13 +99,25 @@ extends:
     stages:
       - template: stages/go-builder-matrix-stages.yml
         parameters:
+          # There is a limitation with compile-time references to user-defined
+          # variables: each stages template actually has its own "variables" map
+          # and doesn't inherit global variables other than default ones. Values
+          # that can be used in this file like "variables['Go1ESOfficial']" must
+          # be passed along manually for compile-time use like
+          # "parameters.ctx['Go1ESOfficial']" by templates. This limitation is not
+          # documented as of writing.
+          #
+          # Only pass "Go*" variables to avoid built-in variables. There are a
+          # lot, and they clutter attempts to debug pipeline behavior.
+          ctx:
+            ${{ each variable in variables }}:
+              ${{ if startsWith(variable.key, 'Go') }}:
+                ${{ variable.key }}: ${{ variable.value }}
           buildandpack: true
-          official: true
           sign: true
           signExistingRunID: ${{ parameters.signExistingRunID }}
           createSourceArchive: true
           createSymbols: true
           publish: true
-          publishReleaseStudio: ${{ parameters.publishReleaseStudio }}
           publishExistingRunID: ${{ parameters.publishExistingRunID }}
           releaseVersion: ${{ parameters.releaseVersion }}
diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index 1cabd269de1..0c0e5849438 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -19,6 +19,7 @@ parameters:
     default: false
 
 variables:
+  - template: variables/pipeline.yml
   - template: variables/pool-providers.yml
   - name: Codeql.PublishDatabase
     value: true
@@ -32,8 +33,6 @@ variables:
     # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
     - name: Codeql.Cadence
       value: 0
-  - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
-    value: '0'
 
 resources:
   pipelines:
@@ -77,9 +76,8 @@ extends:
     stages:
       - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
         parameters:
+          ctx: {}
           jobsTemplate: builders-to-stages.yml
-          jobsParameters:
-            official: true
           shorthandBuilders:
             # CodeQL doesn't submit the scan to both the outer repo
             # (microsoft-go) and inner repo (microsoft-go-mirror).
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index a0bb9b5b1bb..90ecc522018 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -14,7 +14,7 @@ trigger:
 pr: none
 
 variables:
-  MS_GOTOOLCHAIN_TELEMETRY_ENABLED: '0'
+  - template: variables/pipeline.yml
 
 resources:
   repositories:
@@ -46,4 +46,5 @@ extends:
     stages:
       - template: stages/go-builder-matrix-stages.yml
         parameters:
+          ctx: {}
           outerloop: true
diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index d5d59bac03f..39d56d08546 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -5,25 +5,39 @@
 # This template expands a list of builders into a list of jobs.
 
 parameters:
+  - name: ctx
+    type: object
+
   # [] of { id, os, arch, hostarch, config, distro?, experiment?, broken? }
-  builders: []
+  - name: builders
+    type: object
   # If true, include a signing stage+job that depends on all 'buildandpack' builder jobs finishing.
-  sign: false
+  - name: sign
+    type: boolean
+    default: false
   # If changed to specify an existing pipeline run, skip build and sign the existing run.
-  signExistingRunID: 'nil'
-  # If true, publish build artifacts to blob storage.
-  publish: false
-  # If true, publish artifacts to the public using Release Studio integration.
-  publishReleaseStudio: false
+  - name: signExistingRunID
+    type: string
+    default: 'nil'
+  # If true, publish build artifacts.
+  - name: publish
+    type: boolean
+    default: false
   # If changed to specify an existing pipeline run, skip build/sign and publish the existing run.
-  publishExistingRunID: 'nil'
-  # If true, the stage will run in 1ES PT Official template compatibility mode.
-  official: false
+  - name: publishExistingRunID
+    type: string
+    default: 'nil'
   # If true, generate source archive tarballs.
-  createSourceArchive: false
+  - name: createSourceArchive
+    type: boolean
+    default: false
   # If true, generate and publish symbols (aka PDBs).
-  createSymbols: false
-  releaseVersion: 'nil'
+  - name: createSymbols
+    type: boolean
+    default: false
+  - name: releaseVersion
+    type: string
+    default: 'nil'
 
 stages:
   - ${{ if eq(parameters.publishExistingRunID, 'nil') }}:
@@ -31,16 +45,17 @@ stages:
       - ${{ each builder in parameters.builders }}:
         - template: pool.yml
           parameters:
+            ctx: ${{ parameters.ctx }}
             inner:
               ${{ if startsWith(builder.config, 'codeql') }}:
                 template: run-codeql.yml
               ${{ else }}:
                 template: run-stage.yml
               parameters:
+                ctx: ${{ parameters.ctx }}
                 builder: ${{ builder }}
                 createSourceArchive: ${{ parameters.createSourceArchive }}
                 releaseVersion: ${{ parameters.releaseVersion }}
-                official: ${{ parameters.official }}
                 createSymbols: ${{ parameters.createSymbols }}
                 ${{ if not(builder.broken) }}:
                   # Attempt to retry the build on Windows to mitigate flakiness:
@@ -55,12 +70,13 @@ stages:
     - ${{ if eq(parameters.sign, true) }}:
       - template: pool.yml
         parameters:
+          ctx: ${{ parameters.ctx }}
           inner:
             template: sign-stage.yml
             parameters:
+              ctx: ${{ parameters.ctx }}
               # This is not a builder, but provide partial builder info for agent selection.
               builder: { os: windows, arch: amd64, distro: '2022' }
-              official: ${{ parameters.official }}
               # The list of builders to depend on and grab artifacts from.
               builders:
                 - ${{ each builder in parameters.builders }}:
@@ -69,22 +85,26 @@ stages:
               signExistingRunID: ${{ parameters.signExistingRunID }}
 
   - ${{ if eq(parameters.publish, true) }}:
-    - ${{ if and(not(startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/')), eq(parameters.publishReleaseStudio, true)) }}:
+    - ${{ if parameters.ctx['GoPublishReleaseStudio'] }}:
       - template: public-publish-stages.yml
         parameters:
+          ctx: ${{ parameters.ctx }}
           publishExistingRunID: ${{ parameters.publishExistingRunID }}
 
-    # Always publish the results to a private storage account and publish symbols to AzDO.
-    - template: pool.yml
-      parameters:
-        inner:
-          template: internal-publish-stage.yml
-          parameters:
-            builder: { os: windows, arch: amd64, distro: '2022' }
-            official: true
-            builders:
-              - ${{ each builder in parameters.builders }}:
-                - ${{ if eq(builder.config, 'buildandpack') }}:
-                  - ${{ builder }}
-            publishSymbols: ${{ parameters.createSymbols }}
-            publishExistingRunID: ${{ parameters.publishExistingRunID }}
+    # If publishing, always publish the results to a private storage account and
+    # publish symbols to AzDO.
+    - ${{ if parameters.ctx['Go1ESOfficial'] }}:
+      - template: pool.yml
+        parameters:
+          ctx: ${{ parameters.ctx }}
+          inner:
+            template: internal-publish-stage.yml
+            parameters:
+              ctx: ${{ parameters.ctx }}
+              builder: { os: windows, arch: amd64, distro: '2022' }
+              builders:
+                - ${{ each builder in parameters.builders }}:
+                  - ${{ if eq(builder.config, 'buildandpack') }}:
+                    - ${{ builder }}
+              publishSymbols: ${{ parameters.createSymbols }}
+              publishExistingRunID: ${{ parameters.publishExistingRunID }}
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index ce317cf9601..401471e9c8e 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -5,6 +5,9 @@
 # This template defines the build/test matrix of jobs/stages based on the given flags.
 
 parameters:
+  - name: ctx
+    type: object
+
   # buildandpack builders build the tar.gz/zips of our distribution.
   # Minimal dependencies, and runnable in the official pipeline.
   - name: buildandpack
@@ -25,9 +28,6 @@ parameters:
     default: false
 
   # Passthrough to the build job.
-  - name: official
-    type: boolean
-    default: false
   - name: sign
     type: boolean
     default: false
@@ -46,9 +46,6 @@ parameters:
   - name: releaseVersion
     type: string
     default: 'nil'
-  - name: publishReleaseStudio
-    type: boolean
-    default: false
   - name: publishExistingRunID
     type: string
     default: 'nil'
@@ -56,13 +53,12 @@ parameters:
 stages:
   - template: shorthand-builders-to-builders.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
       jobsTemplate: builders-to-stages.yml
       jobsParameters:
-        official: ${{ parameters.official }}
         sign: ${{ parameters.sign }}
         signExistingRunID: ${{ parameters.signExistingRunID }}
         publish: ${{ parameters.publish }}
-        publishReleaseStudio: ${{ parameters.publishReleaseStudio }}
         publishExistingRunID: ${{ parameters.publishExistingRunID }}
         createSourceArchive: ${{ parameters.createSourceArchive }}
         createSymbols: ${{ parameters.createSymbols }}
diff --git a/eng/pipeline/stages/internal-publish-stage.yml b/eng/pipeline/stages/internal-publish-stage.yml
index 68de6916585..c854130e2ce 100644
--- a/eng/pipeline/stages/internal-publish-stage.yml
+++ b/eng/pipeline/stages/internal-publish-stage.yml
@@ -5,6 +5,9 @@
 # Create a build asset JSON file as a pipeline artifact and publish build artifacts to blob storage.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: pool
     type: object
 
@@ -15,8 +18,6 @@ parameters:
   # Unused. Declared so pool selection doesn't fail when trying to pass them.
   - name: builder
     type: object
-  - name: official
-    type: boolean
   - name: builders
     type: object
     default: []
diff --git a/eng/pipeline/stages/pool-1.yml b/eng/pipeline/stages/pool-1.yml
index 6fdee5e4fee..5a2a095f08f 100644
--- a/eng/pipeline/stages/pool-1.yml
+++ b/eng/pipeline/stages/pool-1.yml
@@ -3,6 +3,9 @@
 # license that can be found in the LICENSE file.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: inner
     type: object
 
@@ -10,8 +13,6 @@ parameters:
     type: boolean
   - name: servicing
     type: boolean
-  - name: official
-    type: boolean
   - name: os
     type: string
   - name: hostArch
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 8ad85a5dc26..6b3b72b424a 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -3,6 +3,9 @@
 # license that can be found in the LICENSE file.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: inner
     type: object
 
@@ -10,8 +13,6 @@ parameters:
     type: boolean
   - name: servicing
     type: boolean
-  - name: official
-    type: boolean
   - name: os
     type: string
   - name: hostArch
@@ -31,7 +32,7 @@ stages:
         name: ${{ parameters.name }}
 
         ${{ if eq(parameters.os, 'windows') }}:
-          ${{ if parameters.official }}:
+          ${{ if parameters.ctx['Go1ESOfficial'] }}:
             image: 1es-windows-${{ parameters.distro }}
             os: windows
           ${{ elseif parameters.public }}:
@@ -44,7 +45,7 @@ stages:
         ${{ elseif eq(parameters.os, 'linux') }}:
           # The arm64 pool doesn't need demands: it runs on a uniform pool.
           ${{ if ne(parameters.name, 'Docker-Linux-Arm-Internal') }}:
-            ${{ if parameters.official }}:
+            ${{ if parameters.ctx['Go1ESOfficial'] }}:
               image: 1es-ubuntu-2004
               os: linux
             ${{ elseif parameters.public }}:
diff --git a/eng/pipeline/stages/pool.yml b/eng/pipeline/stages/pool.yml
index 5fc23de590b..4d9441442f9 100644
--- a/eng/pipeline/stages/pool.yml
+++ b/eng/pipeline/stages/pool.yml
@@ -14,6 +14,9 @@
 # choices. Each pool*.yml feeds more information into the next one.
 
 parameters:
+  - name: ctx
+    type: object
+
   # The inner template: { template string, parameters object }
   # Note: the template path is relative to this file (inside "stages/"), not the caller's file path.
   - name: inner
@@ -22,9 +25,9 @@ parameters:
 stages:
   - template: pool-1.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
       public: ${{ eq(variables['System.TeamProject'], 'public') }}
       servicing: ${{ startsWith(variables['Build.SourceBranch'], 'refs/heads/microsoft/release-branch') }}
-      official: ${{ parameters.inner.parameters.official }}
       os: ${{ parameters.inner.parameters.builder.os }}
       hostArch: ${{ parameters.inner.parameters.builder.hostArch }}
       distro: ${{ parameters.inner.parameters.builder.distro }}
diff --git a/eng/pipeline/stages/public-publish-stage.yml b/eng/pipeline/stages/public-publish-stage.yml
index 614f57e9c8f..5fe72dd3ea9 100644
--- a/eng/pipeline/stages/public-publish-stage.yml
+++ b/eng/pipeline/stages/public-publish-stage.yml
@@ -8,6 +8,9 @@
 # stage involved, and then executes some provided steps.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: id 
     type: string
 
diff --git a/eng/pipeline/stages/public-publish-stages.yml b/eng/pipeline/stages/public-publish-stages.yml
index ad263b77f62..f05f2d35185 100644
--- a/eng/pipeline/stages/public-publish-stages.yml
+++ b/eng/pipeline/stages/public-publish-stages.yml
@@ -6,6 +6,9 @@
 # Studio integration.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: publishExistingRunID
     type: string
     default: 'nil'
@@ -13,6 +16,8 @@ parameters:
 stages:
   - template: public-publish-stage.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
+
       id: PublishPublicBinaries
 
       ${{ if eq(parameters.publishExistingRunID, 'nil') }}:
@@ -45,6 +50,7 @@ stages:
 
   - template: public-publish-stage.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
       id: WaitPublicBinaries
       dependsOn: PublishPublicBinaries
       variables:
@@ -82,6 +88,7 @@ stages:
 
   - template: public-publish-stage.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
       id: PublishAssetManifest
       dependsOn: WaitPublicBinaries
       variables:
@@ -134,6 +141,7 @@ stages:
 
   - template: public-publish-stage.yml
     parameters:
+      ctx: ${{ parameters.ctx }}
       id: WaitAssetManifest
       dependsOn: PublishAssetManifest
       variables:
diff --git a/eng/pipeline/stages/run-codeql.yml b/eng/pipeline/stages/run-codeql.yml
index 8d51a4caf08..1403c081bd0 100644
--- a/eng/pipeline/stages/run-codeql.yml
+++ b/eng/pipeline/stages/run-codeql.yml
@@ -5,6 +5,9 @@
 # This job runs a builder for any OS.
 
 parameters:
+  - name: ctx
+    type: object
+
   # { id, os, arch, hostArch, config, distro?, experiment?, fips?, broken? }
   - name: builder
     type: object
@@ -24,9 +27,6 @@ parameters:
   - name: pool
     type: object
 
-  - name: official # Ignored
-    type: boolean
-
   - name: retryAttempts # Ignored
     type: object
     default: ["FINAL"]
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 307721ca260..a5d3c9c20dc 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -5,6 +5,9 @@
 # This job runs a builder for any OS.
 
 parameters:
+  - name: ctx
+    type: object
+
   # { id, os, arch, hostArch, config, distro?, experiment?, fips?, broken? }
   - name: builder
     type: object
@@ -24,11 +27,6 @@ parameters:
   - name: pool
     type: object
 
-  # Indicates that this is in the official pipeline: image usage is restricted, and the artifacts
-  # will be signed by a followup step.
-  - name: official
-    type: boolean
-
   # List of retry attempt numbers. Pass a list of each index (values are only for display purposes),
   # where the final element is "FINAL" instead. AzDO has limited looping capabilities, and this is a
   # way around that.
@@ -66,7 +64,7 @@ stages:
 
         pool: ${{ parameters.pool }}
 
-        ${{ if not(parameters.official) }}:
+        ${{ if not(parameters.ctx['Go1ESOfficial']) }}:
           ${{ if eq(parameters.builder.os, 'linux') }}:
             ${{ if eq(parameters.builder.hostArch, 'amd64') }}:
               ${{ if eq(parameters.builder.distro, 'ubuntu') }}:
@@ -98,7 +96,7 @@ stages:
             - name: Codeql.ADO.Build.Repository.Uri
               value: https://dev.azure.com/dnceng/internal/_git/microsoft-go-mirror
 
-        ${{ if and(parameters.official, eq(parameters.builder.config, 'buildandpack')) }}:
+        ${{ if and(parameters.ctx['GoPublishArtifacts'], eq(parameters.builder.config, 'buildandpack')) }}:
           templateContext:
             outputs:
               # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/outputs
diff --git a/eng/pipeline/stages/shorthand-builders-to-builders.yml b/eng/pipeline/stages/shorthand-builders-to-builders.yml
index ce798ddff94..25d6157bc0c 100644
--- a/eng/pipeline/stages/shorthand-builders-to-builders.yml
+++ b/eng/pipeline/stages/shorthand-builders-to-builders.yml
@@ -11,19 +11,27 @@
 # to be used by template expressions, as of writing.
 
 parameters:
+  - name: ctx
+    type: object
+
   # [] of { os, arch, hostArch, config, distro?, experiment?, broken? }
   # If hostArch is not defined, defaults to the arch value.
   # The job ID is generated based on these values.
-  shorthandBuilders: []
+  - name: shorthandBuilders
+    type: object
   # The inner jobs template to pass the filed-out builders into.
   #
   # It should accept parameter "builders", [] of { id, os, arch, hostArch, config, distro?, fips?, broken? }
-  jobsTemplate: ""
-  jobsParameters: {}
+  - name: jobsTemplate
+    type: string
+  - name: jobsParameters
+    type: object
+    default: {}
 
 stages:
   - template: ${{ parameters.jobsTemplate }}
     parameters:
+      ctx: ${{ parameters.ctx }}
       ${{ insert }}: ${{ parameters.jobsParameters }}
       builders:
         - ${{ each builder in parameters.shorthandBuilders }}:
diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index 2d50a05f009..66727f8e7ab 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -6,10 +6,11 @@
 # publishes the signed files and signatures into a consolidated pipeline artifact.
 
 parameters:
+  - name: ctx
+    type: object
+
   - name: builder
     type: object
-  - name: official
-    type: boolean
   - name: pool
     type: object
 
@@ -22,6 +23,7 @@ parameters:
 
 stages:
   - stage: Sign
+    displayName: Sign (${{ parameters.ctx['GoSigningType'] }})
     ${{ if eq(parameters.signExistingRunID, 'nil') }}:
       dependsOn:
         # Depend on all build stages that produced artifacts that need signing.
@@ -32,6 +34,7 @@ stages:
     jobs:
       - ${{ if and(ne(variables['System.TeamProject'], 'public'), ne(variables['Build.Reason'], 'PullRequest')) }}:
         - job: Sign
+          displayName: Sign (${{ parameters.ctx['GoSigningType'] }})
           pool: ${{ parameters.pool }}
           workspace:
             clean: all
@@ -43,7 +46,7 @@ stages:
             mb:
               signing:
                 enabled: true
-                signType: $(SigningType)
+                signType: ${{ parameters.ctx['GoSigningType'] }}
                 zipSources: false
                 feedSource: 'https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json'
             outputs:
diff --git a/eng/pipeline/variables/pipeline.yml b/eng/pipeline/variables/pipeline.yml
new file mode 100644
index 00000000000..f8083fc6945
--- /dev/null
+++ b/eng/pipeline/variables/pipeline.yml
@@ -0,0 +1,26 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Variables that are evaluated the same way by all pipelines.
+
+variables:
+  # Go1ESOfficial compile-time variable. Indicates that this is in the official
+  # pipeline. For example, image usage may be restricted, and the artifacts may
+  # be signed by a followup step, if this is the rolling build.
+  #
+  # Check for not ending in (unofficial), rather than ending in (official).
+  # Existing official pipeline names doing signing are "stuck" with their old
+  # names due to how signing authorization is checked, so not all pipelines that
+  # are official have an "(official)" suffix.
+  #
+  # Note that the value is coerced when used as a bool because variables are
+  # always strings. Not-defined evaluates as false and works fine in conditions.
+  - ${{ if not(endsWith(variables['Build.DefinitionName'], '(unofficial)')) }}:
+    - name: Go1ESOfficial
+      value: 'true'
+
+  # Don't include our own CI in telemetry data.
+  - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
+    value: '0'
+

From e3b027c2cb75b9f228b7c88f697fdda80794ccbb Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 5 Aug 2025 23:31:02 +0100
Subject: [PATCH 427/887] microbuild: switch to prod signing (#1794)

---
 eng/pipeline/stages/sign-stage.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index 66727f8e7ab..7915ab30145 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -46,6 +46,8 @@ stages:
             mb:
               signing:
                 enabled: true
+                ${{ if eq(parameters.ctx['GoSigningType'], 'real') }}:
+                  signWithProd: true
                 signType: ${{ parameters.ctx['GoSigningType'] }}
                 zipSources: false
                 feedSource: 'https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json'

From 5fa16e2415582e2f15573727406f9a1510e89897 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 5 Aug 2025 15:49:28 -0700
Subject: [PATCH 428/887] Fix GoPublishReleaseStudio microsoft/main exclusion

---
 eng/pipeline/rolling-internal-pipeline.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index db132cfa605..21e7b671d50 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -61,7 +61,7 @@ variables:
       value: '' # Never publish internal branches using release studio.
     ${{ elseif parameters.publishReleaseStudio }}:
       value: 'true'
-    ${{ elseif and(variables['Go1ESOfficial'], ne(variables['Build.SourceBranch'], 'refs/heads/main')) }}:
+    ${{ elseif and(variables['Go1ESOfficial'], ne(variables['Build.SourceBranch'], 'refs/heads/microsoft/main')) }}:
       value: 'true'
     ${{ else }}:
       value: ''

From 115539ed690f6a52d059d5323acf0c5507d811ae Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 5 Aug 2025 23:07:18 -0700
Subject: [PATCH 429/887] Stop batching the rolling pipeline CI trigger (#1802)

---
 eng/pipeline/rolling-internal-pipeline.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index 21e7b671d50..efd97ea3071 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -6,7 +6,10 @@
 # internally, via commit trigger.
 
 trigger:
-  batch: true
+  # We need a build to automatically trigger on each release branch commit as
+  # quickly as possible. According to the AzDO pipeline schema, there is no way
+  # to configure the non-batching trigger to only apply to certain branches.
+  batch: false
   branches:
     include:
       - microsoft/*

From 69002eaf60099fb9dac19bd5aa14188a94061e31 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 6 Aug 2025 16:02:47 +0000
Subject: [PATCH 430/887] Update submodule to latest master (3406a617):
 internal/bytealg: vector implementation of indexbyte for riscv64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index cd55f86b8dc..3406a617d96 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit cd55f86b8dcfc139ee5c17d32530ac9e758c8bc0
+Subproject commit 3406a617d9643902e932ca99c6f276fa7b19e030

From ee763e33eee7ec9fabdfeb53781230a34075c685 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 6 Aug 2025 17:43:20 +0100
Subject: [PATCH 431/887] linter: extract linter fixes from #1762 (#1803)

---
 .github/workflows/patch-build.yml             |  5 ++--
 .github/workflows/test.yml                    |  2 +-
 eng/_util/.golangci.yml                       | 18 ++++++++++++++
 eng/_util/buildutil/buildutil.go              |  2 +-
 eng/_util/cmd/build/build.go                  |  3 +--
 eng/_util/cmd/cmdscan/cmdscan.go              |  2 +-
 eng/_util/cmd/run-builder/run-builder.go      | 14 +++++------
 eng/_util/cmd/selftest/selftest.go            |  2 +-
 eng/_util/cmd/sign/archive.go                 |  4 ----
 eng/_util/cmd/sign/sign.go                    |  3 +++
 .../submodule-refresh/submodule-refresh.go    | 14 ++++++-----
 .../cmd/updatelinktable/updatelinktable.go    | 24 ++++++++++++-------
 12 files changed, 59 insertions(+), 34 deletions(-)
 create mode 100644 eng/_util/.golangci.yml

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index c50eade202d..2983ec4c4c7 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -10,9 +10,10 @@ on:
   pull_request:
     branches: [ microsoft/* ]
 
+# Cancel existing runs if user makes another push.
 concurrency:
-  group: ${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/microsoft/main' }}
+  group: "${{ github.ref }}-${{ github.workflow}}"
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
   build_patches:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b25c85d3124..5c16432367f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,7 +19,7 @@ on:
 
 # Cancel existing runs if user makes another push.
 concurrency:
-  group: "${{ github.ref }}"
+  group: "${{ github.ref }}-${{ github.workflow}}"
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
diff --git a/eng/_util/.golangci.yml b/eng/_util/.golangci.yml
new file mode 100644
index 00000000000..e7be9d9583c
--- /dev/null
+++ b/eng/_util/.golangci.yml
@@ -0,0 +1,18 @@
+version: "2"
+linters:
+  enable:
+    - bodyclose
+    - godox
+    - nakedret
+    - predeclared
+    - unconvert
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+formatters:
+  enable:
+    - gofumpt
diff --git a/eng/_util/buildutil/buildutil.go b/eng/_util/buildutil/buildutil.go
index 47edeb72036..3699591662e 100644
--- a/eng/_util/buildutil/buildutil.go
+++ b/eng/_util/buildutil/buildutil.go
@@ -15,7 +15,7 @@ import (
 
 // Retry runs f until it succeeds or the attempt limit is reached.
 func Retry(attempts int, f func() error) error {
-	var i = 0
+	i := 0
 	for ; i < attempts; i++ {
 		if attempts > 1 {
 			fmt.Printf("---- Running attempt %v of %v...\n", i+1, attempts)
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 148f62d2fe3..6f4ff353614 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -37,7 +37,7 @@ Example: Build Go, run tests, and produce an archive file:
 `
 
 func main() {
-	var help = flag.Bool("h", false, "Print this help message.")
+	help := flag.Bool("h", false, "Print this help message.")
 	o := &options{}
 
 	flag.BoolVar(&o.SkipBuild, "skipbuild", false, "Disable building Go.")
@@ -92,7 +92,6 @@ type options struct {
 }
 
 func build(o *options) (err error) {
-
 	scriptExtension := ".bash"
 	executableExtension := ""
 	archiveExtension := ".tar.gz"
diff --git a/eng/_util/cmd/cmdscan/cmdscan.go b/eng/_util/cmd/cmdscan/cmdscan.go
index 3c4c8a3e06d..08853261f8e 100644
--- a/eng/_util/cmd/cmdscan/cmdscan.go
+++ b/eng/_util/cmd/cmdscan/cmdscan.go
@@ -186,7 +186,7 @@ func scan(r io.Reader, commands, echo *os.File) error {
 		for _, f := range filters {
 			if f.regexp.MatchString(s.Text()) {
 				fmt.Fprintf(echo, "Found pattern '%v'\n", f.regexp)
-				fmt.Fprintf(commands, warn(&f, s.Text()))
+				fmt.Fprint(commands, warn(&f, s.Text()))
 			}
 		}
 	}
diff --git a/eng/_util/cmd/run-builder/run-builder.go b/eng/_util/cmd/run-builder/run-builder.go
index 4c2b2ba1272..caec910f4c1 100644
--- a/eng/_util/cmd/run-builder/run-builder.go
+++ b/eng/_util/cmd/run-builder/run-builder.go
@@ -37,15 +37,15 @@ in your repository to read-only.
 var dryRun = flag.Bool("n", false, "Enable dry run: print the commands that would be run, but do not run them.")
 
 func main() {
-	var builder = flag.String("builder", "", "[Required] Specify a builder to run. Note, this may be destructive!")
-	var experiment = flag.String("experiment", "", "Include this string in GOEXPERIMENT.")
-	var fipsMode = flag.Bool("fipsmode", false, "Run the Go tests in FIPS mode.")
-	var build = flag.Bool("build", false, "Run the build.")
-	var test = flag.Bool("test", false, "Run the tests.")
+	builder := flag.String("builder", "", "[Required] Specify a builder to run. Note, this may be destructive!")
+	experiment := flag.String("experiment", "", "Include this string in GOEXPERIMENT.")
+	fipsMode := flag.Bool("fipsmode", false, "Run the Go tests in FIPS mode.")
+	build := flag.Bool("build", false, "Run the build.")
+	test := flag.Bool("test", false, "Run the tests.")
 
-	var testJSONFlags = buildutil.BindTestJSONFlags()
+	testJSONFlags := buildutil.BindTestJSONFlags()
 
-	var help = flag.Bool("h", false, "Print this help message.")
+	help := flag.Bool("h", false, "Print this help message.")
 
 	flag.Usage = func() {
 		fmt.Fprintf(flag.CommandLine.Output(), "Usage of run-builder.go:\n")
diff --git a/eng/_util/cmd/selftest/selftest.go b/eng/_util/cmd/selftest/selftest.go
index dad8a235c4b..05ff5cb4f51 100644
--- a/eng/_util/cmd/selftest/selftest.go
+++ b/eng/_util/cmd/selftest/selftest.go
@@ -18,7 +18,7 @@ This command runs the _util self-tests using the stage 0 Go toolchain.
 `
 
 func main() {
-	var help = flag.Bool("h", false, "Print this help message.")
+	help := flag.Bool("h", false, "Print this help message.")
 
 	flag.Usage = func() {
 		fmt.Fprintf(flag.CommandLine.Output(), "Usage of selftest:\n")
diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
index 920671c004d..91c3f0fa499 100644
--- a/eng/_util/cmd/sign/archive.go
+++ b/eng/_util/cmd/sign/archive.go
@@ -102,10 +102,6 @@ func (a *archive) macIndividualNotarizePackPath() string {
 	return filepath.Join(a.workDir, a.name+".FilesToNotarize.zip")
 }
 
-func (a *archive) macBundleNotarizePackPath() string {
-	return filepath.Join(a.workDir, a.name+".BundlesToNotarize.zip")
-}
-
 // entrySignInfo returns signing details for a given file in the Go archive, or nil if the given
 // file entry doesn't need to be signed.
 func (a *archive) entrySignInfo(name string) *fileToSign {
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index fe33e6a115d..d41bd086418 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -109,6 +109,9 @@ func run() error {
 	individualFilesToNotarize, err := flatMapSlice(archives, func(a *archive) ([]*fileToSign, error) {
 		return a.prepareIndividualNotarize(ctx)
 	})
+	if err != nil {
+		return err
+	}
 
 	if err := sign(ctx, "2-Notarize-Individual", individualFilesToNotarize); err != nil {
 		return err
diff --git a/eng/_util/cmd/submodule-refresh/submodule-refresh.go b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
index e7902442346..effc1f99b22 100644
--- a/eng/_util/cmd/submodule-refresh/submodule-refresh.go
+++ b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
@@ -19,11 +19,13 @@ This command refreshes the Go submodule: initializes it, resets the content, and
 applies patches to the stage by default, or optionally as commits.
 `
 
-var commits = flag.Bool("commits", false, "Apply the patches as commits.")
-var skipPatch = flag.Bool("skip-patch", false, "Skip applying patches.")
-var origin = flag.String("origin", "", "Use this origin instead of the default defined in '.gitmodules' to fetch the repository.")
-var shallow = flag.Bool("shallow", false, "Clone the submodule with depth 1.")
-var fetchBearerToken = flag.String("fetch-bearer-token", "", "Use this bearer token to fetch the submodule repository.")
+var (
+	commits          = flag.Bool("commits", false, "Apply the patches as commits.")
+	skipPatch        = flag.Bool("skip-patch", false, "Skip applying patches.")
+	origin           = flag.String("origin", "", "Use this origin instead of the default defined in '.gitmodules' to fetch the repository.")
+	shallow          = flag.Bool("shallow", false, "Clone the submodule with depth 1.")
+	fetchBearerToken = flag.String("fetch-bearer-token", "", "Use this bearer token to fetch the submodule repository.")
+)
 
 func main() {
 	repoRootDir, err := os.Getwd()
@@ -31,7 +33,7 @@ func main() {
 		panic(err)
 	}
 
-	var help = flag.Bool("h", false, "Print this help message.")
+	help := flag.Bool("h", false, "Print this help message.")
 
 	flag.Usage = func() {
 		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")
diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 907da2240a2..2cd2528686b 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -129,21 +129,27 @@ func filename(version, platform, ext string) string {
 	return "go" + version + "." + platform + ext
 }
 
-const checksumSuffix = ".sha256"
-const checksumMsg = "Checksum (SHA256)"
-const signatureSuffix = ".sig"
-const signatureMsg = "Signature<sup>1</sup>"
+const (
+	checksumSuffix  = ".sha256"
+	checksumMsg     = "Checksum (SHA256)"
+	signatureSuffix = ".sig"
+	signatureMsg    = "Signature<sup>1</sup>"
+)
 
 const baseURL = "https://aka.ms/golang/release/latest/"
 
-var docPath = filepath.Join("eng", "doc", "Downloads.md")
-var jsonPath = filepath.Join("eng", "doc", "release-branch-links.json")
+var (
+	docPath  = filepath.Join("eng", "doc", "Downloads.md")
+	jsonPath = filepath.Join("eng", "doc", "release-branch-links.json")
+)
 
-const beginMark = "<!-- BEGIN TABLES -->"
-const endMark = "<!-- END TABLES -->"
+const (
+	beginMark = "<!-- BEGIN TABLES -->"
+	endMark   = "<!-- END TABLES -->"
+)
 
 func main() {
-	var help = flag.Bool("h", false, "Print this help message.")
+	help := flag.Bool("h", false, "Print this help message.")
 
 	flag.Usage = func() {
 		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")

From 5849c1cfa022f1f8a27a30dc1ae3502c261ca1c5 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 7 Aug 2025 09:12:11 -0700
Subject: [PATCH 432/887] Add content checksum to simulated test sig file
 (#1813)

---
 eng/_util/cmd/sign/sign.go | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index d41bd086418..35ecf394e50 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -6,6 +6,7 @@ package main
 
 import (
 	"context"
+	"crypto/sha256"
 	"flag"
 	"fmt"
 	"io"
@@ -243,7 +244,18 @@ func sign(ctx context.Context, step string, files []*fileToSign) error {
 		for _, f := range files {
 			if strings.HasSuffix(f.fullPath, ".sig") {
 				log.Printf("Replacing file with placeholder content to reduce size and simulate signature: %q", f.fullPath)
-				if err := os.WriteFile(f.fullPath, []byte("This is a placeholder test signature file."), 0o666); err != nil {
+				// Get a checksum to make the file content unique. Otherwise,
+				// publishing rejects the repeated file content.
+				data, err := os.ReadFile(f.fullPath)
+				if err != nil {
+					return fmt.Errorf("failed to read file %q: %v", f.fullPath, err)
+				}
+				checksum := fmt.Sprintf("%x", sha256.Sum256(data))
+				if err := os.WriteFile(
+					f.fullPath,
+					fmt.Appendf(nil, "This is a placeholder test signature file. Original content checksum: %v\n", checksum),
+					0o666,
+				); err != nil {
 					return fmt.Errorf("failed to write test signature file %q: %v", f.fullPath, err)
 				}
 			}

From a8f04268c6163fbe317de09ef1202fc2702bba55 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 7 Aug 2025 17:50:32 +0100
Subject: [PATCH 433/887] ci: enable linter on files in eng/_util (#1762)

* ci: enable linter on files in eng/_util

* move to go tool dep

* switch to go tool

* move golang lint to tools.go.mod

* fix CI

* move to golangci

* fix workflows

* move back to main mod

* switch back to docker-based approach
---
 .github/workflows/linter.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .github/workflows/linter.yml

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
new file mode 100644
index 00000000000..a61b72f1b6c
--- /dev/null
+++ b/.github/workflows/linter.yml
@@ -0,0 +1,22 @@
+name: golangci-lint
+on:
+  push:
+    branches:
+      - "microsoft/*"
+  pull_request:
+    branches:
+      - "microsoft/*"
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  golangci:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Run golangci-lint
+        working-directory: eng/_util
+        run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v

From 978f9261df38be495605e0a9c8c433230553ae3d Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 7 Aug 2025 11:33:46 -0700
Subject: [PATCH 434/887] Match prod/official state for validation pipeline
 (#1814)

---
 eng/pipeline/rolling-internal-validation-pipeline.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index 0c0e5849438..1c055d288b8 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -57,7 +57,10 @@ resources:
       ref: refs/tags/release
 
 extends:
-  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  ${{ if variables['Go1ESOfficial'] }}:
+    template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  ${{ else }}:
+    template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
     pool:
       name: $(DncEngInternalBuildPool)

From 9ab06144d6e90e1686f7916bb6acc46134f0bd72 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 7 Aug 2025 11:53:01 -0700
Subject: [PATCH 435/887] Update pipeline links: fix, add folders, embed
 individual (#1815)

---
 eng/pipeline/README.md                        | 22 ++++---------------
 eng/pipeline/pr-outerloop-pipeline.yml        |  2 ++
 eng/pipeline/pr-pipeline.yml                  |  2 ++
 eng/pipeline/rolling-innerloop-pipeline.yml   |  2 ++
 eng/pipeline/rolling-internal-pipeline.yml    |  3 +++
 .../rolling-internal-validation-pipeline.yml  |  3 +++
 eng/pipeline/rolling-pipeline.yml             |  2 ++
 7 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/eng/pipeline/README.md b/eng/pipeline/README.md
index 69e8c959703..59d7aeb50c6 100644
--- a/eng/pipeline/README.md
+++ b/eng/pipeline/README.md
@@ -2,24 +2,10 @@
 
 This directory contains Azure DevOps (AzDO) YAML pipelines for CI.
 
-Pipeline definitions currently using each YAML file are:
+* [The dnceng-public Go folder](https://dev.azure.com/dnceng-public/public/_build?definitionScope=%5CMicrosoft%5Cgo) contains public Go pipelines used by PR validation.
+* [The internal dnceng Go folder](https://dev.azure.com/dnceng/internal/_build?definitionScope=%5CMicrosoft%5Cgo) contains internal builds, like CI.
 
-### dnceng-public
-
-* [`pr-pipeline.yml`](pr-pipeline.yml) - Required PR check.
-  * [microsoft-go](https://dev.azure.com/dnceng/public/_build?definitionId=1099)
-* [`pr-outerloop-pipeline.yml`](pr-outerloop-pipeline.yml) - Optional PR check. Runs outerloop.
-  * [microsoft-go-outerloop](https://dev.azure.com/dnceng/public/_build/index?definitionId=1100)
-    * Comment `/azp run microsoft-go-outerloop` on a PR to run.
-
-### dnceng (internal)
-
-* [`rolling-innerloop-pipeline.yml`](rolling-innerloop-pipeline.yml) - Triggers on merge, runs innerloop.
-  * [microsoft-go-innerloop](https://dev.azure.com/dnceng/internal/_build?definitionId=1342)
-* [`rolling-pipeline.yml`](rolling-pipeline.yml) - Triggers on merge, runs outerloop.
-  * [microsoft-go-rolling](https://dev.azure.com/dnceng/internal/_build?definitionId=987)
-* [`rolling-internal-pipeline.yml`](rolling-internal-pipeline.yml) - Triggers on merge. Builds, signs, and publishes. Does not run tests.
-  * [microsoft-go](https://dev.azure.com/dnceng/internal/_build?definitionId=958)
+Each pipeline yml file contains links to its pipeline or pipelines.
 
 The pipeline filenames are (mostly) based on the trigger scenario, not what they
 do. This means we can change their content later without worrying about
@@ -36,5 +22,5 @@ and the quirks involved with the way they're implemented, visit
 
 The subdirectories hold AzDO pipeline YAML templates, based on type of template.
 
-Quick link: [`jobs/go-builder-matrix-jobs.yml`](jobs/go-builder-matrix-jobs.yml)
+Quick link: [`stages/go-builder-matrix-stages.yml`](stages/go-builder-matrix-stages.yml)
 defines the set of builders that should run based on the scenario.
diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 5306bf126ca..bcac1eb3cf4 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -4,6 +4,8 @@
 
 # This pipeline can be triggered via PR comment to run outerloop builders.
 
+# https://dev.azure.com/dnceng-public/public/_build?definitionId=192
+
 trigger: none
 pr:
   # Configure this pipeline to *potentially* run on any Microsoft-maintained branch. The pattern
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 468d4b4239a..915a337b91b 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -4,6 +4,8 @@
 
 # This pipeline validates PRs. It builds Go and runs inner loop tests.
 
+# https://dev.azure.com/dnceng-public/public/_build?definitionId=191
+
 trigger: none
 pr:
   - microsoft/*
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 15a3f1e14f1..6c88808fa37 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -5,6 +5,8 @@
 # This pipeline runs innerloop (reliable, relatively quick) tests on rolling builds.
 # The intent is that if this pipeline fails, it should block official release for a good reason.
 
+# https://dev.azure.com/dnceng/internal/_build?definitionId=1342
+
 trigger:
   batch: true
   branches:
diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index efd97ea3071..b0ce2a9fb0d 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -5,6 +5,9 @@
 # This pipeline builds Go, runs inner loop tests, signs the packages, and publishes. It only runs
 # internally, via commit trigger.
 
+# official: https://dev.azure.com/dnceng/internal/_build?definitionId=958
+# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1485
+
 trigger:
   # We need a build to automatically trigger on each release branch commit as
   # quickly as possible. According to the AzDO pipeline schema, there is no way
diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index 1c055d288b8..0206160cbee 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -4,6 +4,9 @@
 
 # This pipeline runs rolling validation, like CodeQL.
 
+# official: https://dev.azure.com/dnceng/internal/_build?definitionId=1354
+# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
+
 trigger: none
 pr: none
 
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 90ecc522018..5f5c8780c92 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -5,6 +5,8 @@
 # This pipeline runs rolling builders that include tests that may be unreliable or very slow.
 # If a test is reliable/fast, it should be run by rolling-innerloop-pipeline.yml.
 
+# https://dev.azure.com/dnceng/internal/_build?definitionId=987
+
 trigger:
   batch: true
   branches:

From 2ec0ab9f5a5dbd1b3f3953b2632233aef3f6b014 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 8 Aug 2025 16:18:10 +0000
Subject: [PATCH 436/887] Update submodule to latest master (768c51e3):
 internal/runtime/maps: remove unused var bitsetDeleted

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 3406a617d96..768c51e368e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 3406a617d9643902e932ca99c6f276fa7b19e030
+Subproject commit 768c51e368e05739854c1413fdf7fd129d01e482

From ba884401014750b644376f1ff2ec5b8b559cbe7f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 9 Aug 2025 15:57:50 +0100
Subject: [PATCH 437/887] build(deps): bump github/codeql-action from 3.29.7 to
 3.29.8 (#1820)

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 39359918615..81e75e5c91c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/autobuild@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
+        uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
         with:
           category: /language:go

From bfbb2691d0c27a2c5821c173820fd91dbbd027f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 9 Aug 2025 15:58:21 +0100
Subject: [PATCH 438/887] build(deps): bump golang.org/x/net from 0.42.0 to
 0.43.0 in /eng/_util (#1819)

---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index f6dccab6531..688ce8519ff 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/net v0.42.0
-	golang.org/x/sys v0.34.0
+	golang.org/x/net v0.43.0
+	golang.org/x/sys v0.35.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.27.0 // indirect
+	golang.org/x/text v0.28.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index d1ec6a45657..9ae731a4f67 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
-golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
-golang.org/x/sys v0.34.0 h1:H5Y5sJ2L2JRdyv7ROF1he/lPdvFsd0mJHFw2ThKHxLA=
-golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
-golang.org/x/text v0.27.0 h1:4fGWRpyh641NLlecmyl4LOe6yDdfaYNrGb2zdfo4JV4=
-golang.org/x/text v0.27.0/go.mod h1:1D28KMCvyooCX9hBiosv5Tz/+YLxj0j7XhWjpSUF7CU=
-golang.org/x/tools v0.34.0 h1:qIpSLOxeCYGg9TrcJokLBG4KFA6d795g0xkBkiESGlo=
-golang.org/x/tools v0.34.0/go.mod h1:pAP9OwEaY1CAW3HOmg3hLZC5Z0CCmzjAF2UQMSqNARg=
+golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE=
+golang.org/x/net v0.43.0/go.mod h1:vhO1fvI4dGsIjh73sWfUVjj3N7CA9WkKJNQm2svM6Jg=
+golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
+golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
+golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
+golang.org/x/tools v0.35.0 h1:mBffYraMEf7aa0sB+NuKnuCy8qI/9Bughn8dC2Gu5r0=
+golang.org/x/tools v0.35.0/go.mod h1:NKdj5HkL/73byiZSJjqJgKn3ep7KjFkBOkR/Hps3VPw=

From 20ab91fdd422a35cbe84975d4d6731e990e624fe Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 11 Aug 2025 09:31:09 +0100
Subject: [PATCH 439/887] resolve conflict

---
 patches/0004-Use-crypto-backends.patch | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 9f0fa32a444..66524a72ffc 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -228,7 +228,7 @@ index 4aaf46b5d0f0dc..ec58a217400caa 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/config.go b/src/cmd/link/internal/ld/config.go
-index b2d4ad7cb0e7f6..f5b109fc6cc069 100644
+index 802fb35aee4e65..4416731b69ec26 100644
 --- a/src/cmd/link/internal/ld/config.go
 +++ b/src/cmd/link/internal/ld/config.go
 @@ -7,6 +7,7 @@ package ld
@@ -250,7 +250,7 @@ index b2d4ad7cb0e7f6..f5b109fc6cc069 100644
 +			} else {
 +				*mode = BuildModeExe
 +			}
- 		case "darwin/arm64", "windows/arm", "windows/arm64": // On these platforms, everything is PIE
+ 		case "darwin/arm64", "windows/arm64": // On these platforms, everything is PIE
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
@@ -2446,7 +2446,7 @@ index 727bdc4df76393..73dee851e1bb4a 100644
  		os.Setenv("GODEBUG", savedGODEBUG+","+test.godebug)
  
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 2a96fa69036a07..f3c19c7faf1c21 100644
+index 6ed63ccc2dc1f5..3bc1c16e697b88 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -2947,10 +2947,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b2c6db15a23e98..55e34940125e86 100644
+index ecf705b1333f28..cbd6d45ac3139a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -517,7 +517,7 @@ var depsRules = `
+@@ -518,7 +518,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2959,7 +2959,7 @@ index b2c6db15a23e98..55e34940125e86 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -542,6 +542,8 @@ var depsRules = `
+@@ -543,6 +543,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2968,7 +2968,7 @@ index b2c6db15a23e98..55e34940125e86 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -584,6 +586,7 @@ var depsRules = `
+@@ -585,6 +587,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 4f92b991394f9405d032d8894a169c269bcb7aef Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 11 Aug 2025 16:02:37 +0000
Subject: [PATCH 440/887] Update submodule to latest master (a2431776): net,
 os, file/filepath, syscall: use slices.Equal in tests

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 768c51e368e..a2431776ebc 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 768c51e368e05739854c1413fdf7fd129d01e482
+Subproject commit a2431776ebc57ebc385d3fd9d3cc6eb89acb9d9c

From b9ea8747246b62668a669eb88e93323cdd1d2af7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Aug 2025 18:07:17 +0100
Subject: [PATCH 441/887] build(deps): bump actions/checkout from 4.2.2 to
 4.3.0 (#1823)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 4.3.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08eba0b27e820071cde6df949e0beb9ba4906955)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 81e75e5c91c..c6795fcee1b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index a61b72f1b6c..fb26cc5acb7 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 2983ec4c4c7..65bd397a056 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5c16432367f..c2ea1d5f17f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From df3f71aab8e3f949e958f06a33fe9e7edbf4a9ce Mon Sep 17 00:00:00 2001
From: Mert Akman <mertakman2012@gmail.com>
Date: Mon, 11 Aug 2025 19:03:01 +0100
Subject: [PATCH 442/887] Document installation of Microsoft build of Go for
 Ubuntu  (#1804)

* fix:add Ubuntu guide

* fix:typo

* add: specific version installation guide

* fix:add newline on codeblocks

* fix:address reviews

* fix:add learn mcirosoft link for steps

* decapitalize build

* fix:address comment update

* fix:add missing newline
---
 README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/README.md b/README.md
index 0c9a3f14159..3bd04c11514 100644
--- a/README.md
+++ b/README.md
@@ -88,6 +88,17 @@ includes builds of this Go fork.
 * In Azure Linux 2.0, the package `msft-golang` installs this fork.
 * In Azure Linux 3.0, the `golang` package installs this fork.
 
+### Ubuntu
+
+To install the Microsoft build of Go using an Ubuntu package, first set up the [Linux package repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages).
+Packages are available in the Ubuntu 22.04 and 24.04 repositories.
+
+After the repository is added, install the Microsoft build of Go by running the following commands:
+
+```bash
+sudo apt-get update && sudo apt-get install msft-golang
+```
+
 ### Binary archive
 
 [Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)

From 9af1d002eec869dfefc673f04e4e83fc63769fed Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Mon, 11 Aug 2025 15:39:14 -0700
Subject: [PATCH 443/887] Split validation pipeline for resource trigger
 (#1825)

---
 ...nternal-validation-pipeline-unofficial.yml | 34 ++++++++++
 .../rolling-internal-validation-pipeline.yml  | 66 +++----------------
 eng/pipeline/rolling-internal-validation.yml  | 48 ++++++++++++++
 eng/pipeline/variables/codeql.yml             | 11 ++++
 4 files changed, 101 insertions(+), 58 deletions(-)
 create mode 100644 eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
 create mode 100644 eng/pipeline/rolling-internal-validation.yml
 create mode 100644 eng/pipeline/variables/codeql.yml

diff --git a/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml b/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
new file mode 100644
index 00000000000..af64c9f400c
--- /dev/null
+++ b/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
@@ -0,0 +1,34 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This pipeline runs rolling validation, like CodeQL.
+
+# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
+
+trigger: none
+pr: none
+
+variables:
+  - template: variables/pipeline.yml
+  - template: variables/codeql.yml
+  - template: variables/pool-providers.yml
+
+  # The default cadence is ok for official branches. The cadence is per-branch.
+  # For a dev build, the cadence would prevent dev iteration.
+  # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
+  - name: Codeql.Cadence
+    value: 0
+
+resources:
+  pipelines:
+    - pipeline: build
+      source: microsoft-go
+
+extends:
+  template: rolling-internal-validation.yml
+  parameters:
+    ctx:
+      ${{ each variable in variables }}:
+        ${{ if startsWith(variable.key, 'Go') }}:
+          ${{ variable.key }}: ${{ variable.value }}
diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index 0206160cbee..de9422f14a0 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -5,37 +5,14 @@
 # This pipeline runs rolling validation, like CodeQL.
 
 # official: https://dev.azure.com/dnceng/internal/_build?definitionId=1354
-# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
 
 trigger: none
 pr: none
 
-# For info about runtime parameters, see https://github.com/microsoft/go-infra/blob/main/docs/pipeline-yml-style.md#runtime-parameters
-parameters:
-  - name: enableCodeQL
-    displayName: '[Debug input] Enable CodeQL, ignoring cadence. Use to try modifications in dev branches.'
-    type: boolean
-    default: false
-  - name: disableTSA
-    displayName: '[Debug input] Disable TSA reporting. Use to try modifications in dev branches.'
-    type: boolean
-    default: false
-
 variables:
   - template: variables/pipeline.yml
+  - template: variables/codeql.yml
   - template: variables/pool-providers.yml
-  - name: Codeql.PublishDatabase
-    value: true
-  - name: Codeql.PublishDatabaseLog
-    value: true
-  - name: Codeql.PublishDatabaseLog
-    value: true
-  - ${{ if parameters.enableCodeQL }}:
-    # The default cadence is ok for official branches. The cadence is per-branch.
-    # For a dev build, the cadence would prevent dev iteration.
-    # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
-    - name: Codeql.Cadence
-      value: 0
 
 resources:
   pipelines:
@@ -48,45 +25,18 @@ resources:
       # This means we can have SDL scan the currently-checked-out source code as the way to scan the
       # source code of the internal rolling build.
       source: microsoft-go
+      # Trigger can't be conditioned, so this resource can't be declared inside
+      # the template. "A template expression is not allowed in this context".
       trigger:
         branches:
           include:
             - microsoft/main
             - microsoft/release-branch.*
-  repositories:
-    - repository: 1ESPipelineTemplates
-      type: git
-      name: 1ESPipelineTemplates/1ESPipelineTemplates
-      ref: refs/tags/release
 
 extends:
-  ${{ if variables['Go1ESOfficial'] }}:
-    template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
-  ${{ else }}:
-    template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
+  template: rolling-internal-validation.yml
   parameters:
-    pool:
-      name: $(DncEngInternalBuildPool)
-      image: 1es-windows-2022
-      os: windows
-    sdl:
-      codeql:
-        enabledOnNonDefaultBranches: ${{ parameters.enableCodeQL }}
-        language: go,cpp,powershell,javascript
-      suppression:
-        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
-      tsa:
-        enabled: ${{ not(parameters.disableTSA) }}
-        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
-
-    stages:
-      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
-        parameters:
-          ctx: {}
-          jobsTemplate: builders-to-stages.yml
-          shorthandBuilders:
-            # CodeQL doesn't submit the scan to both the outer repo
-            # (microsoft-go) and inner repo (microsoft-go-mirror).
-            # Use two jobs to submit two scans.
-            - { os: linux, arch: amd64, config: codeql_outer }
-            - { os: linux, arch: amd64, config: codeql_inner }
+    ctx:
+      ${{ each variable in variables }}:
+        ${{ if startsWith(variable.key, 'Go') }}:
+          ${{ variable.key }}: ${{ variable.value }}
diff --git a/eng/pipeline/rolling-internal-validation.yml b/eng/pipeline/rolling-internal-validation.yml
new file mode 100644
index 00000000000..e33cd272cab
--- /dev/null
+++ b/eng/pipeline/rolling-internal-validation.yml
@@ -0,0 +1,48 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This pipeline runs rolling validation, like CodeQL.
+
+parameters:
+  - name: ctx
+    type: object
+
+resources:
+  repositories:
+    - repository: 1ESPipelineTemplates
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
+
+extends:
+  ${{ if variables['Go1ESOfficial'] }}:
+    template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  ${{ else }}:
+    template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    pool:
+      name: $(DncEngInternalBuildPool)
+      image: 1es-windows-2022
+      os: windows
+    sdl:
+      codeql:
+        enabledOnNonDefaultBranches: ${{ not(variables['Go1ESOfficial']) }}
+        language: go,cpp,powershell,javascript
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+      tsa:
+        enabled: ${{ variables['Go1ESOfficial'] }}
+        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
+
+    stages:
+      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
+        parameters:
+          ctx: ${{ parameters.ctx }}
+          jobsTemplate: builders-to-stages.yml
+          shorthandBuilders:
+            # CodeQL doesn't submit the scan to both the outer repo
+            # (microsoft-go) and inner repo (microsoft-go-mirror).
+            # Use two jobs to submit two scans.
+            - { os: linux, arch: amd64, config: codeql_outer }
+            - { os: linux, arch: amd64, config: codeql_inner }
diff --git a/eng/pipeline/variables/codeql.yml b/eng/pipeline/variables/codeql.yml
new file mode 100644
index 00000000000..599ade703db
--- /dev/null
+++ b/eng/pipeline/variables/codeql.yml
@@ -0,0 +1,11 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+variables:
+  - name: Codeql.PublishDatabase
+    value: true
+  - name: Codeql.PublishDatabaseLog
+    value: true
+  - name: Codeql.PublishDatabaseLog
+    value: true

From b885e9fb122798451b311a164bb6477005abf189 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 22:12:10 +0100
Subject: [PATCH 444/887] build(deps): bump actions/checkout from 4.3.0 to
 5.0.0 (#1828)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/08eba0b27e820071cde6df949e0beb9ba4906955...08c6903cd8c0fde910a37f88322edcfb5dd907a8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c6795fcee1b..c6c6d9af944 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index fb26cc5acb7..b72b58671de 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 65bd397a056..17b943159ba 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c2ea1d5f17f..8057a7f82ea 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From 9f206711a1e87c9145a8bc2312167de83a625f44 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 21:54:45 +0000
Subject: [PATCH 445/887] build(deps): bump github/codeql-action from 3.29.8 to
 3.29.9 (#1829)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.8 to 3.29.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/76621b61decf072c1cee8dd1ce2d2a82d33c17ed...df559355d593797519d70b90fc8edd5db049e7a2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c6c6d9af944..a767f1fb7de 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
+        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
         with:
           category: /language:go

From 3325312116efeeb6372b31426351537182bc48c2 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 12 Aug 2025 15:18:46 -0700
Subject: [PATCH 446/887] More specific GoPublishReleaseStudio to avoid dev
 branches (#1830)

---
 eng/pipeline/rolling-internal-pipeline.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index b0ce2a9fb0d..62e0d56ea9d 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -64,11 +64,12 @@ variables:
 
   - name: GoPublishReleaseStudio
     ${{ if startsWith(variables['Build.SourceBranch'], 'refs/heads/internal/') }}:
-      value: '' # Never publish internal branches using release studio.
+      value: '' # Never publish internal branches using release studio, even if checkbox ticked.
     ${{ elseif parameters.publishReleaseStudio }}:
       value: 'true'
-    ${{ elseif and(variables['Go1ESOfficial'], ne(variables['Build.SourceBranch'], 'refs/heads/microsoft/main')) }}:
-      value: 'true'
+    # We've dealt with manual opt-in. Next, determine the default behavior:
+    ${{ elseif and(variables['Go1ESOfficial'], startsWith(variables['Build.SourceBranch'], 'refs/heads/microsoft/release-branch.go')) }}:
+      value: 'true' # Publish a release branch built in the official pipeline by default.
     ${{ else }}:
       value: ''
 

From d38182e72d4aee085fdf778bd80f92e8cf26e5f7 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 13 Aug 2025 00:47:10 -0700
Subject: [PATCH 447/887] Consolidate signing diag files, use
 outputParentDirectory (#1835)

---
 eng/_util/cmd/sign/archive.go      | 80 +++++++++++++++++++++++++++++-
 eng/_util/cmd/sign/archiveutil.go  | 24 +++++++++
 eng/_util/cmd/sign/sign.go         | 17 +++++--
 eng/pipeline/stages/sign-stage.yml | 23 ++++++---
 eng/signing/.gitignore             |  1 +
 5 files changed, 132 insertions(+), 13 deletions(-)

diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
index 91c3f0fa499..1ee24fb7b27 100644
--- a/eng/_util/cmd/sign/archive.go
+++ b/eng/_util/cmd/sign/archive.go
@@ -11,6 +11,7 @@ import (
 	"context"
 	"fmt"
 	"io"
+	"io/fs"
 	"log"
 	"os"
 	"path/filepath"
@@ -44,6 +45,8 @@ type archive struct {
 	notarizedPath string
 }
 
+const signingWorkingDirPrefix = "sign-work-"
+
 func newArchive(p string) (*archive, error) {
 	name := filepath.Base(p)
 	a := archive{
@@ -65,7 +68,7 @@ func newArchive(p string) (*archive, error) {
 	if err := os.MkdirAll(*tempDir, 0o777); err != nil {
 		return nil, err
 	}
-	workDir, err := os.MkdirTemp(*tempDir, "sign-work-"+name)
+	workDir, err := os.MkdirTemp(*tempDir, signingWorkingDirPrefix+name)
 	if err != nil {
 		return nil, fmt.Errorf("failed to create work directory: %v", err)
 	}
@@ -459,3 +462,78 @@ func (a *archive) copyToDestination(ctx context.Context) error {
 	}
 	return nil
 }
+
+func consolidateDiagnosticFiles() error {
+	// Signing process logs.
+	if err := copyGlobFilesToDir(
+		*consolidateDiagDir,
+		filepath.Join(*signingCsprojDir, "*.log"),
+		filepath.Join(*tempDir, "*.binlog"),
+		filepath.Join(*tempDir, "*.props"),
+	); err != nil {
+		return err
+	}
+	// .NET diag data, for package versions etc.
+	if err := copyGlobFilesToDir(
+		filepath.Join(*consolidateDiagDir, "obj"),
+		filepath.Join(*signingCsprojDir, "obj", "*"),
+	); err != nil {
+		return err
+	}
+
+	// Signing working dirs. These contain the files actually sent to sign. Make
+	// it clear that they're not production-ready files through the filename.
+	cleanTempDir := filepath.Clean(*tempDir)
+	if err := withTarGzCreate(
+		filepath.Join(*consolidateDiagDir, "sign-work-archives.nonproduction.tar.gz"),
+		func(tw *tar.Writer) error {
+			if err := filepath.WalkDir(cleanTempDir, func(path string, d fs.DirEntry, err error) error {
+				if err != nil {
+					return err
+				}
+				// At the top level, only walk into working dirs.
+				if d.IsDir() &&
+					filepath.Dir(path) == cleanTempDir &&
+					!strings.HasPrefix(d.Name(), signingWorkingDirPrefix) {
+
+					return filepath.SkipDir
+				}
+				// Inside a given working dir, we are free to walk recursively.
+				if d.IsDir() {
+					return nil
+				}
+				// This is a file: archive it.
+				df, err := d.Info()
+				if err != nil {
+					return err
+				}
+				// Basic sanity checks.
+				if !filepath.IsLocal(path) {
+					return fmt.Errorf("path %q is not a local path", path)
+				}
+				tarPath, ok := strings.CutPrefix(path, cleanTempDir+string(filepath.Separator))
+				if !ok {
+					return fmt.Errorf("path %q is not under temp dir %q", path, *tempDir)
+				}
+				tarPath = filepath.ToSlash(tarPath)
+
+				err = tw.WriteHeader(&tar.Header{
+					Name: tarPath,
+					Size: df.Size(),
+					Mode: 0o644,
+				})
+				if err != nil {
+					return err
+				}
+				return copyFromFile(tw, path)
+			}); err != nil {
+				return err
+			}
+			return nil
+		},
+	); err != nil {
+		return err
+	}
+
+	return nil
+}
diff --git a/eng/_util/cmd/sign/archiveutil.go b/eng/_util/cmd/sign/archiveutil.go
index 091053752c9..2abe41dd7b7 100644
--- a/eng/_util/cmd/sign/archiveutil.go
+++ b/eng/_util/cmd/sign/archiveutil.go
@@ -124,6 +124,30 @@ func copyToFile(path string, r io.Reader) error {
 	return cmp.Or(err, f.Close())
 }
 
+func copyFromFile(w io.Writer, path string) error {
+	f, err := os.Open(path)
+	if err != nil {
+		return err
+	}
+	_, err = io.Copy(w, f)
+	return cmp.Or(err, f.Close())
+}
+
+func copyGlobFilesToDir(dir string, globs ...string) error {
+	for _, glob := range globs {
+		files, err := filepath.Glob(glob)
+		if err != nil {
+			return err
+		}
+		for _, f := range files {
+			if err := copyFile(filepath.Join(dir, filepath.Base(f)), f); err != nil {
+				return err
+			}
+		}
+	}
+	return nil
+}
+
 // matchOrPanic returns whether name matches the pattern glob, or panics if pattern is invalid.
 func matchOrPanic(pattern, name string) bool {
 	ok, err := filepath.Match(pattern, name)
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index 35ecf394e50..b324bc2297f 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -35,10 +35,11 @@ See /eng/_util/cmd/sign/README.md for more information.
 `
 
 var (
-	filesGlob        = flag.String("files", "eng/signing/tosign/*", "Glob of Go archives to sign.")
-	destinationDir   = flag.String("o", "eng/signing/signed", "Directory to store signed files.")
-	tempDir          = flag.String("temp-dir", "eng/signing/signing-temp", "Directory to store temporary files.")
-	signingCsprojDir = flag.String("signing-csproj-dir", "eng/signing", "Directory containing Sign.csproj and related files.")
+	filesGlob          = flag.String("files", "eng/signing/tosign/*", "Glob of Go archives to sign.")
+	destinationDir     = flag.String("o", "eng/signing/signed", "Directory to store signed files.")
+	consolidateDiagDir = flag.String("consolidate-diag-dir", "eng/signing/diag", "Directory to store consolidated diagnostic files.")
+	tempDir            = flag.String("temp-dir", "eng/signing/signing-temp", "Directory to store temporary files.")
+	signingCsprojDir   = flag.String("signing-csproj-dir", "eng/signing", "Directory containing Sign.csproj and related files.")
 
 	signType = flag.String("sign-type", "test",
 		"Type of signing to perform. Options: test, real. "+
@@ -157,6 +158,7 @@ func run() error {
 	}
 
 	log.Println("Copying finished files to destination")
+	log.Printf("Destination directory: %q", *destinationDir)
 
 	for _, a := range archives {
 		if err := a.copyToDestination(ctx); err != nil {
@@ -172,6 +174,13 @@ func run() error {
 		}
 	}
 
+	log.Println("Consolidating diagnostic files")
+	log.Printf("Consolidated diagnostic directory: %q", *consolidateDiagDir)
+
+	if err := consolidateDiagnosticFiles(); err != nil {
+		return err
+	}
+
 	return nil
 }
 
diff --git a/eng/pipeline/stages/sign-stage.yml b/eng/pipeline/stages/sign-stage.yml
index 7915ab30145..77191b24075 100644
--- a/eng/pipeline/stages/sign-stage.yml
+++ b/eng/pipeline/stages/sign-stage.yml
@@ -42,6 +42,14 @@ stages:
           # Give the sign task leeway to finish up after hitting its own timeout.
           timeoutInMinutes: 80
 
+          variables:
+            - name: ArtifactsDir
+              value: $(Build.ArtifactStagingDirectory)\SigningArtifacts
+            - name: SignedDir
+              value: $(ArtifactsDir)\signed
+            - name: DiagnosticsDir
+              value: $(ArtifactsDir)\diag
+
           templateContext:
             mb:
               signing:
@@ -51,20 +59,17 @@ stages:
                 signType: ${{ parameters.ctx['GoSigningType'] }}
                 zipSources: false
                 feedSource: 'https://dnceng.pkgs.visualstudio.com/_packaging/MicroBuildToolset/nuget/v3/index.json'
+            # If we consolidate outputs, 1ES PT can avoid some scan overhead.
+            outputParentDirectory: $(ArtifactsDir)
             outputs:
               # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/outputs
               - output: pipelineArtifact
-                path: 'eng\signing\signed'
+                path: '$(SignedDir)'
                 artifact: Binaries Signed
 
               - output: pipelineArtifact
-                path: 'eng\signing\signing-temp'
-                artifact: Signing temp directory $(System.JobAttempt)
-                condition: always()
-
-              - output: pipelineArtifact
-                path: 'eng\signing'
-                artifact: Signing diagnosis directory $(System.JobAttempt)
+                path: '$(DiagnosticsDir)'
+                artifact: Signing diagnosis files $(System.JobAttempt)
                 condition: always()
 
           steps:
@@ -95,5 +100,7 @@ stages:
                 eng/run.ps1 sign `
                   -files '$(Pipeline.Workspace)/Binaries */*' `
                   -sign-type '$(SignType)' `
+                  -o '$(SignedDir)' `
+                  -consolidate-diag-dir '$(DiagnosticsDir)' `
                   -timeout 60m
               displayName: Sign Files
diff --git a/eng/signing/.gitignore b/eng/signing/.gitignore
index a784cf86ebb..46f843c4821 100644
--- a/eng/signing/.gitignore
+++ b/eng/signing/.gitignore
@@ -6,6 +6,7 @@
 *.binlog
 bin/
 obj/
+diag/
 signing-log/
 signing-temp/
 tosign/

From 107d51cee74e262a489d75ca053421d82768123a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 13 Aug 2025 16:03:03 +0000
Subject: [PATCH 448/887] Update submodule to latest master (9fcb87c3):
 cmd/compile: teach prove about len's & cap's max based on the element size

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a2431776ebc..9fcb87c352b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a2431776ebc57ebc385d3fd9d3cc6eb89acb9d9c
+Subproject commit 9fcb87c352b398aa650310160346c8d9bfcdcc45

From 9df9f53b6f0e25b5ada36d5edc6869f48026550f Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 14 Aug 2025 10:38:56 +0100
Subject: [PATCH 449/887] resolve merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 48 +++++++++----------
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 24 +++++-----
 2 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 5fc2c7964a6..4296c4ab8b3 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -261,20 +261,20 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 5624b81cc51bac..c915383a7bd7d6 100644
+index dcea08e01589e1..74725efce3cb8b 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
-@@ -4,6 +4,8 @@ go 1.25
+@@ -4,6 +4,8 @@ go 1.26
  
  require (
  	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
- 	golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
- 	golang.org/x/build v0.0.0-20250606033421-8c8ff6f34a83
- 	golang.org/x/mod v0.25.0
+ 	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
+ 	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
+ 	golang.org/x/mod v0.27.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d5d1553e5b7829..cb73d0abe4e905 100644
+index de01e8e294cc57..de1ad4a9620348 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
@@ -287,7 +287,7 @@ index d5d1553e5b7829..cb73d0abe4e905 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec h1:fCOjXc18tBlkVy4m+VuL1WU8VTukYOGtAk7nC5QYPRY=
+ golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58 h1:uxPa6+/WsUfzikIAPMqpTho10y4qtYpINBurU+6NrHE=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -1861,7 +1861,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 6e5783fdd4767a..81dd9beff245d6 100644
+index 964a4ffa629edb..16e29c3d50cb53 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -1879,7 +1879,7 @@ index 6e5783fdd4767a..81dd9beff245d6 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.18.1-0.20250605182141-b2f4e2807dec
+ # golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
  ## explicit; go 1.23.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
@@ -1911,12 +1911,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index b81f19068aef23..26eb72c358987f 100644
+index 51c38f3bc0310d..a80ca7e2b9e765 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.33.0 // indirect
- 	golang.org/x/text v0.26.0 // indirect
+ 	golang.org/x/sys v0.35.0 // indirect
+ 	golang.org/x/text v0.28.0 // indirect
  )
 +
 +require (
@@ -1925,7 +1925,7 @@ index b81f19068aef23..26eb72c358987f 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 410eb8648a710a..f4132c078c86a5 100644
+index 3bc4cb53724095..15b1a41c8ed285 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1935,14 +1935,14 @@ index 410eb8648a710a..f4132c078c86a5 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
- golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
- golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
+ golang.org/x/crypto v0.41.0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4=
+ golang.org/x/crypto v0.41.0/go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc=
+ golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b3d8f66bc761ee..09e91285502bcf 100644
+index 41dde20bf9cc9b..6c4d25ec9b256b 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -519,6 +519,24 @@ var depsRules = `
+@@ -521,6 +521,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -1967,7 +1967,7 @@ index b3d8f66bc761ee..09e91285502bcf 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -530,13 +548,12 @@ var depsRules = `
+@@ -532,13 +550,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -1985,7 +1985,7 @@ index b3d8f66bc761ee..09e91285502bcf 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -557,6 +574,10 @@ var depsRules = `
+@@ -559,6 +576,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -1996,7 +1996,7 @@ index b3d8f66bc761ee..09e91285502bcf 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -866,7 +887,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -883,7 +904,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2005,7 +2005,7 @@ index b3d8f66bc761ee..09e91285502bcf 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -876,7 +897,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -893,7 +914,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -21398,7 +21398,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 8507f01b12f518..c1b4f54a6195dd 100644
+index 645cec45e2f7eb..0140c3f98b1863 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21419,6 +21419,6 @@ index 8507f01b12f518..c1b4f54a6195dd 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.39.0
+ # golang.org/x/crypto v0.41.0
  ## explicit; go 1.23.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index dc32721d67d..1d58b9bd20a 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -46,10 +46,10 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index d7e09fed25f43a..89dcbea0819a1e 100644
+index 761bda8d39b158..adf154e0955c1b 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
-@@ -887,9 +887,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -700,9 +700,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index df84e9fdf46feb..1abe360b68a2b0 100644
+index 310226bc0146e5..16a25b602b6966 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
@@ -409,15 +409,15 @@ index df84e9fdf46feb..1abe360b68a2b0 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -83,6 +95,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RegabiArgs:      regabiSupported,
- 		AliasTypeParams: true,
- 		Dwarf5:          dwarf5Supported,
-+		SystemCrypto:    systemCryptoSupported,
+@@ -82,6 +94,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RegabiWrappers: regabiSupported,
+ 		RegabiArgs:     regabiSupported,
+ 		Dwarf5:         dwarf5Supported,
++		SystemCrypto:   systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -124,6 +137,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -123,6 +136,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -432,7 +432,7 @@ index df84e9fdf46feb..1abe360b68a2b0 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -137,6 +158,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -136,6 +157,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -443,7 +443,7 @@ index df84e9fdf46feb..1abe360b68a2b0 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -150,6 +175,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -149,6 +174,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -566,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index dd7a4f446c1a57..4dfc4cf46a0951 100644
+index 3144d3adfc7aba..ff6d59de20818d 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {

From 0dac67d5e536a01e0eee0185448c9a3f2647769a Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 14 Aug 2025 10:50:27 +0100
Subject: [PATCH 450/887] bump bootstrap version

---
 .github/workflows/patch-build.yml | 4 ++++
 eng/utilities.ps1                 | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 17b943159ba..b056405f8c6 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -25,6 +25,10 @@ jobs:
         with:
           submodules: true
 
+      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+        with:
+          go-version: '1.25'
+
       - name: Set mock git config name/email
         run: |
           git config --global user.email "joe@blogs.com"
diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index 48ce2d25afc..6437e48171b 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -24,7 +24,7 @@ function Download-Stage0() {
   # pre-installed (or the right version pre-installed). This CI script installs a consistent version
   # of Go to handle this. This also makes it easier to locally repro issues in CI that involve a
   # specific version of Go. The downloaded copy of Go is called the "stage 0" version.
-  $stage0_go_version = 'go1.24.0-1'
+  $stage0_go_version = 'go1.25.0-1'
 
   # Source the install script so that we can use the PATH it assigns.
   $installScriptPath = Join-Path $PSScriptRoot "_util" "go-install.ps1"

From adfb49819edb650f0662cea7328be21f294ae12b Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Thu, 14 Aug 2025 08:52:09 -0700
Subject: [PATCH 451/887] Update download links for 1.25

---
 .../cmd/updatelinktable/updatelinktable.go    |   6 +-
 eng/doc/Downloads.md                          |  18 +--
 eng/doc/release-branch-links.json             | 150 ++++++++++--------
 3 files changed, 98 insertions(+), 76 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 2cd2528686b..6f72c6c6958 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -23,7 +23,7 @@ This command updates the table in ` + docPath + ` and data in ` + jsonPath + `.
 
 var supported = []version{
 	{
-		Number:       "1.24",
+		Number:       "1.25",
 		LatestStable: true,
 		Platforms: map[string]struct{}{
 			"darwin-amd64":  {},
@@ -37,9 +37,11 @@ var supported = []version{
 		},
 	},
 	{
-		Number:         "1.23",
+		Number:         "1.24",
 		PreviousStable: true,
 		Platforms: map[string]struct{}{
+			"darwin-amd64":  {},
+			"darwin-arm64":  {},
 			"linux-amd64":   {},
 			"linux-arm64":   {},
 			"linux-armv6l":  {},
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index 784898281cc..a997dfd0682 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -13,16 +13,16 @@ For example, a 1.20 link will download 1.20.8-1 if that is the latest version of
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
-|   | 1.24 | 1.23 |
+|   | 1.25 | 1.24 |
 | --- | --- | --- |
-| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig)<br/> |
- Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.23.assets.json)<br/> |
- darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> | N/A |
- darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> | N/A |
- linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig)<br/> |
- linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig)<br/> |
- linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig)<br/> |
- windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256)<br/> |
+| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> |
+ Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.25.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> |
+ darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> |
+ darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> |
+ linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> |
+ linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> |
+ linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> |
+ windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256)<br/> |
 
 
 <!-- END TABLES -->
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index 311ed63bc72..d0a935fe8ab 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -1,8 +1,92 @@
 [
   {
-    "version": "go1.24",
+    "version": "go1.25",
     "stable": true,
     "latestStable": true,
+    "files": [
+      {
+        "filename": "go1.25.src.tar.gz",
+        "os": "",
+        "arch": "",
+        "version": "go1.25",
+        "kind": "source",
+        "url": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.assets.json",
+        "os": "",
+        "arch": "",
+        "version": "go1.25",
+        "kind": "manifest",
+        "url": "https://aka.ms/golang/release/latest/go1.25.assets.json"
+      },
+      {
+        "filename": "go1.25.darwin-amd64.tar.gz",
+        "os": "darwin",
+        "arch": "amd64",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.darwin-arm64.tar.gz",
+        "os": "darwin",
+        "arch": "arm64",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.linux-amd64.tar.gz",
+        "os": "linux",
+        "arch": "amd64",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.linux-arm64.tar.gz",
+        "os": "linux",
+        "arch": "arm64",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.linux-armv6l.tar.gz",
+        "os": "linux",
+        "arch": "armv6l",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig"
+      },
+      {
+        "filename": "go1.25.windows-amd64.zip",
+        "os": "windows",
+        "arch": "amd64",
+        "version": "go1.25",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256"
+      }
+    ]
+  },
+  {
+    "version": "go1.24",
+    "stable": true,
+    "previousStable": true,
     "files": [
       {
         "filename": "go1.24.src.tar.gz",
@@ -82,69 +166,5 @@
         "checksumURL": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256"
       }
     ]
-  },
-  {
-    "version": "go1.23",
-    "stable": true,
-    "previousStable": true,
-    "files": [
-      {
-        "filename": "go1.23.src.tar.gz",
-        "os": "",
-        "arch": "",
-        "version": "go1.23",
-        "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.src.tar.gz.sig"
-      },
-      {
-        "filename": "go1.23.assets.json",
-        "os": "",
-        "arch": "",
-        "version": "go1.23",
-        "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.23.assets.json"
-      },
-      {
-        "filename": "go1.23.linux-amd64.tar.gz",
-        "os": "linux",
-        "arch": "amd64",
-        "version": "go1.23",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-amd64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.23.linux-arm64.tar.gz",
-        "os": "linux",
-        "arch": "arm64",
-        "version": "go1.23",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-arm64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.23.linux-armv6l.tar.gz",
-        "os": "linux",
-        "arch": "armv6l",
-        "version": "go1.23",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.23.linux-armv6l.tar.gz.sig"
-      },
-      {
-        "filename": "go1.23.windows-amd64.zip",
-        "os": "windows",
-        "arch": "amd64",
-        "version": "go1.23",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.23.windows-amd64.zip.sha256"
-      }
-    ]
   }
 ]

From 36e949520bf05e8eb771ab0dbbbd427311177ad5 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 15 Aug 2025 16:02:47 +0000
Subject: [PATCH 452/887] Update submodule to latest master (bca3e98b): cmd/go:
 test barrier actions

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9fcb87c352b..bca3e98b8aa 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9fcb87c352b398aa650310160346c8d9bfcdcc45
+Subproject commit bca3e98b8aa4f754ea3604b62ef42f64dec88800

From 00d8e2777ae39e9a00485e0018e74489bea0913f Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 18 Aug 2025 08:56:22 +0100
Subject: [PATCH 453/887] rebase patch

---
 .../0001-Vendor-external-dependencies.patch    | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 4296c4ab8b3..6dd40b5b9b9 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -261,26 +261,26 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index dcea08e01589e1..74725efce3cb8b 100644
+index 46630f4ed83f05..b0674e93de8590 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
  
  require (
- 	github.com/google/pprof v0.0.0-20250208200701-d0013a598941
+ 	github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
  	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.27.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index de01e8e294cc57..de1ad4a9620348 100644
+index 57c506936c4475..4e0099400aa890 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250208200701-d0013a598941 h1:43XjGa6toxLpeksjcx
- github.com/google/pprof v0.0.0-20250208200701-d0013a598941/go.mod h1:vavhavw2zAxS5dIdcRluK6cSGGPlZynqzFM8NdvU144=
- github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd h1:EVX1s+XNss9jkRW9K6XGJn2jL2lB1h5H804oKPsxOec=
- github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
+ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5/go.mod h1:5hDyRhoBCxViHszMt12TnOpEI4VVi+U8Gm9iphldiMA=
+ github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
+ github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed h1:+WzG8k10xzL+oOrycm6GJTGi/sMZkWtnAhAUZ+Fpvwg=
@@ -1861,11 +1861,11 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 964a4ffa629edb..16e29c3d50cb53 100644
+index 457fc9d619f6ca..7ec34fab577e8d 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
- # github.com/ianlancetaylor/demangle v0.0.0-20240912202439-0a2b6291aafd
+ # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
 +# github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed

From d18b30e4df1c400d5218169b8f78eca72d15be71 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 Aug 2025 16:56:25 +0000
Subject: [PATCH 454/887] build(deps): bump github/codeql-action from 3.29.9 to
 3.29.10 (#1843)

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a767f1fb7de..c4a7106c2c5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/autobuild@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
         with:
           category: /language:go

From f5fc235106cddb475a4507094c0277d5c3906b5e Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 21 Aug 2025 10:20:04 +0200
Subject: [PATCH 455/887] Implement ms_tls_config_schannel experiment (#1844)

* Implement ms_tls_config_schannel experiment

* add ms_tls_config_schannel goexperiment to test matrix

* fix test

* Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

* add newline

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .../stages/go-builder-matrix-stages.yml       |   1 +
 ...nt-ms_tls_config_schannel-experiment.patch | 682 ++++++++++++++++++
 2 files changed, 683 insertions(+)
 create mode 100644 patches/0011-Implement-ms_tls_config_schannel-experiment.patch

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 401471e9c8e..61849c80c1d 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -98,6 +98,7 @@ stages:
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, distro: '2019', broken: true } # Affected by https://golang.org/issue/10842.
+          - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { experiment: nosystemcrypto, os: windows, hostArch: amd64, arch: 386, config: buildandpack }
         - ${{ if parameters.outerloop }}:
diff --git a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
new file mode 100644
index 00000000000..e20e9241514
--- /dev/null
+++ b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
@@ -0,0 +1,682 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Tue, 19 Aug 2025 15:16:09 +0200
+Subject: [PATCH] Implement ms_tls_config_schannel experiment
+
+---
+ src/crypto/tls/fips140_test.go                |   4 +
+ src/crypto/tls/schannel_disabled_test.go      |  11 +
+ src/crypto/tls/schannel_windows.go            | 166 +++++++++++++
+ src/crypto/tls/schannel_windows_test.go       | 226 ++++++++++++++++++
+ src/crypto/tls/tls_test.go                    |  19 ++
+ .../exp_ms_tls_config_schannel_off.go         |   8 +
+ .../exp_ms_tls_config_schannel_on.go          |   8 +
+ src/internal/goexperiment/flags.go            |   8 +
+ .../syscall/windows/security_windows.go       |  28 +++
+ .../syscall/windows/version_windows.go        |  11 +
+ .../syscall/windows/version_windows_test.go   |   7 +
+ .../syscall/windows/zsyscall_windows.go       |  16 ++
+ 12 files changed, 512 insertions(+)
+ create mode 100644 src/crypto/tls/schannel_disabled_test.go
+ create mode 100644 src/crypto/tls/schannel_windows.go
+ create mode 100644 src/crypto/tls/schannel_windows_test.go
+ create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+ create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+
+diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
+index 711ce750a71a93..05312aaf9bcb9d 100644
+--- a/src/crypto/tls/fips140_test.go
++++ b/src/crypto/tls/fips140_test.go
+@@ -14,6 +14,7 @@ import (
+ 	"crypto/x509/pkix"
+ 	"encoding/pem"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"internal/obscuretestdata"
+ 	"internal/testenv"
+ 	"math/big"
+@@ -187,6 +188,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
+ 		}
+ 		serverConfig.BuildNameToCertificate()
+ 		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
++			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(id) {
++				t.Skip("skipping Schannel unsupported cipher suite")
++			}
+ 			clientHello := &clientHelloMsg{
+ 				vers:                         VersionTLS12,
+ 				random:                       make([]byte, 32),
+diff --git a/src/crypto/tls/schannel_disabled_test.go b/src/crypto/tls/schannel_disabled_test.go
+new file mode 100644
+index 00000000000000..d598d48dedf762
+--- /dev/null
++++ b/src/crypto/tls/schannel_disabled_test.go
+@@ -0,0 +1,11 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !windows || !goexperiment.ms_tls_config_schannel
++
++package tls
++
++func isSchannelCipherSuite(id uint16) bool {
++	return false
++}
+diff --git a/src/crypto/tls/schannel_windows.go b/src/crypto/tls/schannel_windows.go
+new file mode 100644
+index 00000000000000..cccfb8866f88ab
+--- /dev/null
++++ b/src/crypto/tls/schannel_windows.go
+@@ -0,0 +1,166 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package tls
++
++import (
++	"internal/syscall/windows"
++	"slices"
++	"unsafe"
++)
++
++func init() {
++	if !windows.SupportsTLSConfigSchannel() {
++		return
++	}
++	cipherSuitesSchannel, versionsSchannel, err := getCipherSuitesSchannel()
++	if err != nil {
++		panic(err) // This should never happen, as Schannel is always available on Windows.
++	}
++	setSchannelCipherSuites(cipherSuitesSchannel, versionsSchannel)
++}
++
++// setSchannelCipherSuites modifies the default cipher suites, the preference order, and the disabled cipher suites
++// based on provided suites.
++//
++// The user-visible behavior changes are:
++// - The cipher suites used when [Config.CipherSuites] is nil, or when using TLS 1.3, only include those that Schannel supports.
++// - The order in which cipher suites are tried, regardless of whether the user sets [Config.CipherSuites] or not, is the order that Schannel prefers.
++// - The TLS supported versions are filtered to only include those that Schannel supports.
++func setSchannelCipherSuites(suites, versions []uint16) {
++	disableCipherSuites(CipherSuites(), suites, disabledCipherSuites)
++	disableCipherSuites(InsecureCipherSuites(), suites, disabledCipherSuites)
++
++	cipherSuitesPreferenceOrder = orderCipherSuites(cipherSuitesPreferenceOrder, suites)
++
++	allowedCipherSuitesFIPS = filterCipherSuites(suites, allowedCipherSuitesFIPS)
++	defaultCipherSuitesTLS13 = filterCipherSuites(suites, defaultCipherSuitesTLS13)
++	allowedCipherSuitesTLS13FIPS = filterCipherSuites(suites, allowedCipherSuitesTLS13FIPS)
++
++	// Schannel doesn't have a separate preference order without AES.
++	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder
++	defaultCipherSuitesTLS13NoAES = defaultCipherSuitesTLS13
++
++	// Now filter the supported versions to only include those that Schannel supports.
++	supportedVersions = filterSupportedVersions(supportedVersions, versions)
++	allowedSupportedVersionsFIPS = filterSupportedVersions(allowedSupportedVersionsFIPS, versions)
++}
++
++// cipherSuiteByName returns the [CipherSuite] with the given name.
++func cipherSuiteByName(name string) (*CipherSuite, bool) {
++	for _, c := range CipherSuites() {
++		if c.Name == name {
++			return c, true
++		}
++	}
++	for _, c := range InsecureCipherSuites() {
++		if c.Name == name {
++			return c, true
++		}
++	}
++	return nil, false
++}
++
++// getCipherSuitesSchannel returns all the cipher suites that Schannel supports in Schannel's preference order.
++func getCipherSuitesSchannel() (suites, versions []uint16, err error) {
++	// Get all the cipher suites that Schannel supports in preference order.
++	var size uint32
++	var funcs *windows.CRYPT_CONTEXT_FUNCTIONS
++	err = windows.BCryptEnumContextFunctions(windows.CRYPT_LOCAL, unsafe.SliceData(windows.SSL_CONTEXT[:]), windows.NCRYPT_SCHANNEL_INTERFACE, &size, &funcs)
++	if err != nil {
++		return nil, nil, err
++	}
++	defer windows.BCryptFreeBuffer(unsafe.Pointer(funcs))
++
++	suites = make([]uint16, 0, funcs.Count)
++	for i := range funcs.Count {
++		name := windows.UTF16PtrToString(funcs.At(int(i)))
++		name = removeCipherSuiteCurveSuffix(name)
++		suite, ok := cipherSuiteByName(name)
++		if !ok {
++			continue // cipher suite not found in the provided list
++		}
++		if slices.Contains(suites, suite.ID) {
++			continue // already added
++		}
++		for _, v := range suite.SupportedVersions {
++			if !slices.Contains(versions, v) {
++				versions = append(versions, v)
++			}
++		}
++		suites = append(suites, suite.ID)
++	}
++	return suites, versions, nil
++}
++
++// removeCipherSuiteCurveSuffix removes the curve suffix from the cipher suite name.
++// Windows Schannel supports cipher suites with curve suffixes, in the form of
++// _P256, _P384, or _P521, which are not present in the Go cipher suite names.
++// This is not common, as since Windows 2016 the curve suffix is discarded by Schannel,
++// but it can still be present in case Windows was upgraded from an earlier version.
++func removeCipherSuiteCurveSuffix(name string) string {
++	const suffixLength = 5 // Length of "_P256", "_P384", or "_P521"
++	if len(name) < suffixLength {
++		return name // No curve suffix to remove
++	}
++	switch name[len(name)-suffixLength:] {
++	case "_P256", "_P384", "_P521":
++		name = name[:len(name)-suffixLength] // Remove the curve suffix
++	}
++	return name
++}
++
++// filterCipherSuites filters the provided cipher suites, creating a new slice
++// that only includes those that are in the allowed list.
++func filterCipherSuites(suites, allowed []uint16) []uint16 {
++	out := make([]uint16, 0, len(allowed))
++	for _, id := range suites {
++		if slices.Contains(allowed, id) {
++			out = append(out, id)
++		}
++	}
++	return out
++}
++
++// orderCipherSuites returns a new slice of cipher suites ordered according to the provided order.
++// If suites contains a cipher suite that is not in the order, it will be placed
++// at the end of the returned slice in the order they appear in suites.
++func orderCipherSuites(suites, order []uint16) []uint16 {
++	out := make([]uint16, 0, len(suites))
++	for _, id := range order {
++		if slices.Contains(suites, id) {
++			out = append(out, id)
++		}
++	}
++	for _, id := range suites {
++		if !slices.Contains(out, id) {
++			out = append(out, id)
++		}
++	}
++	return out
++}
++
++// disableCipherSuites modifies the disabled map, adding the cipher suites in supported
++// that are not in allowed.
++func disableCipherSuites(supported []*CipherSuite, allowed []uint16, disabled map[uint16]bool) {
++	for _, suite := range supported {
++		if !slices.Contains(allowed, suite.ID) {
++			disabled[suite.ID] = true
++		}
++	}
++}
++
++// filterSupportedVersions filters the provided supported versions, creating a new slice
++// that only includes those that are in the allowed list.
++func filterSupportedVersions(supported, allowed []uint16) []uint16 {
++	out := make([]uint16, 0, len(allowed))
++	for _, v := range supported {
++		if slices.Contains(allowed, v) {
++			out = append(out, v)
++		}
++	}
++	return out
++}
+diff --git a/src/crypto/tls/schannel_windows_test.go b/src/crypto/tls/schannel_windows_test.go
+new file mode 100644
+index 00000000000000..b1bdb31863cc7a
+--- /dev/null
++++ b/src/crypto/tls/schannel_windows_test.go
+@@ -0,0 +1,226 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package tls
++
++import (
++	"bytes"
++	"internal/testenv"
++	"os"
++	"os/exec"
++	"slices"
++	"sync"
++	"testing"
++)
++
++var schannelSuites = sync.OnceValue(func() []uint16 {
++	cipherSuites, _, err := getCipherSuitesSchannel()
++	if err != nil {
++		panic(err) // This should never happen, as Schannel is always available on Windows.
++	}
++	return cipherSuites
++})
++
++func isSchannelCipherSuite(id uint16) bool {
++	return slices.Contains(schannelSuites(), id)
++}
++
++func init() {
++	// Many tests require TLS 1.1 and TLS 1.0 to be available, so we override the
++	// supported versions previously set in Schannel init() to include them.
++	// This increases the coverage for Schannel cipher suites.
++	supportedVersions = []uint16{
++		VersionTLS13,
++		VersionTLS12,
++		VersionTLS11,
++		VersionTLS10,
++	}
++}
++
++// testSchannel runs the provided function in a child process with Schannel cipher suites set.
++func testSchannel(t *testing.T, ids, versions []uint16, fn func()) {
++	// We need to run this in a child process because the cipher suites are set in init(),
++	// and it is difficult to restore the original state in the same process without
++	// incurring a performance penalty for non-testing code.
++	if os.Getenv("GO_WANT_HELPER_PROCESS") == "1" {
++		setSchannelCipherSuites(ids, versions)
++		fn()
++		os.Exit(0)
++	}
++	exe, err := os.Executable()
++	if err != nil {
++		t.Fatalf("failed to get executable path: %v", err)
++	}
++	cmd := testenv.Command(t, exe, "-test.v", "-test.run=^"+t.Name()+"$")
++	cmd.Env = append(cmd.Environ(), "GO_WANT_HELPER_PROCESS=1")
++	output, err := cmd.CombinedOutput()
++	if err != nil {
++		t.Fatalf("failed to spawn child process: %v\n%s", err, output)
++	}
++}
++
++func cipherSuiteFromID(id uint16) (*CipherSuite, bool) {
++	for _, c := range CipherSuites() {
++		if c.ID == id {
++			return c, true
++		}
++	}
++	for _, c := range InsecureCipherSuites() {
++		if c.ID == id {
++			return c, true
++		}
++	}
++	return nil, false
++}
++
++func TestCipherSuitesSchannel(t *testing.T) {
++	cipherSuites, versions, err := getCipherSuitesSchannel()
++	if err != nil {
++		t.Fatal(err)
++	}
++	if len(cipherSuites) == 0 {
++		t.Fatal("cipherSuitesSchannel returned no cipher suites")
++	}
++	if len(versions) == 0 {
++		t.Fatal("cipherSuitesSchannel returned no versions")
++	}
++
++	// Check that all the cipher suites are present in the Get-TlsCipherSuite output.
++	output, err := exec.Command("powershell", "-Command", "Get-TlsCipherSuite").CombinedOutput()
++	if err != nil {
++		t.Fatalf("failed to get TLS cipher suites: %v\n%s", err, output)
++	}
++	for _, id := range cipherSuites {
++		suite, ok := cipherSuiteFromID(id)
++		if !ok {
++			t.Fatalf("cipher suite with ID %d not found", id)
++		}
++		if !bytes.Contains(output, []byte(suite.Name)) {
++			t.Errorf("cipher suite %s not found in PowerShell output", suite.Name)
++		}
++	}
++}
++
++func TestCipherSuitePreferenceSchannelTLS12(t *testing.T) {
++	testSchannel(t, []uint16{
++		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
++		TLS_RSA_WITH_RC4_128_SHA,
++	}, []uint16{VersionTLS12}, func() {
++		serverConfig := &Config{
++			CipherSuites: []uint16{TLS_RSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
++			Certificates: testConfig.Certificates,
++			MaxVersion:   VersionTLS12,
++			GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
++				if chi.CipherSuites[0] != TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 {
++					t.Error("the advertised order should not depend on Config.CipherSuites")
++				}
++				return nil, nil
++			},
++		}
++		clientConfig := &Config{
++			CipherSuites:       []uint16{TLS_RSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
++			InsecureSkipVerify: true,
++		}
++		state, _, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatalf("handshake failed: %s", err)
++		}
++		if state.CipherSuite != TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 {
++			t.Error("the preference order should not depend on Config.CipherSuites")
++		}
++	})
++
++}
++
++func TestCipherSuitePreferenceSchannelNoTLS12(t *testing.T) {
++	testSchannel(t, []uint16{
++		TLS_AES_256_GCM_SHA384,
++	}, []uint16{VersionTLS13}, func() {
++		serverConfig := &Config{
++			Certificates: testConfig.Certificates,
++		}
++		clientConfig := &Config{
++			InsecureSkipVerify: true,
++		}
++		state, _, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatalf("handshake failed: %s", err)
++		}
++		if state.CipherSuite != TLS_AES_256_GCM_SHA384 {
++			t.Error("the preference order should not depend on Config.CipherSuites")
++		}
++		if state.Version != VersionTLS13 {
++			t.Error("the version should be TLS 1.3 when available")
++		}
++	})
++}
++
++func TestCipherSuitePreferenceSchannel(t *testing.T) {
++	testSchannel(t, []uint16{
++		TLS_AES_256_GCM_SHA384,
++		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
++	}, []uint16{VersionTLS13, VersionTLS12}, func() {
++		serverConfig := &Config{
++			Certificates: testConfig.Certificates,
++			MaxVersion:   VersionTLS13,
++		}
++		clientConfig := &Config{
++			InsecureSkipVerify: true,
++		}
++		state, _, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatalf("handshake failed: %s", err)
++		}
++		if state.CipherSuite != TLS_AES_256_GCM_SHA384 {
++			t.Error("the preference order should not depend on Config.CipherSuites")
++		}
++	})
++}
++
++func TestCipherSuitePreferenceSchannelNoTLS13(t *testing.T) {
++	testSchannel(t, []uint16{
++		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
++	}, []uint16{VersionTLS12}, func() {
++		serverConfig := &Config{
++			Certificates: testConfig.Certificates,
++		}
++		clientConfig := &Config{
++			InsecureSkipVerify: true,
++		}
++		state, _, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatalf("handshake failed: %s", err)
++		}
++		if state.CipherSuite != TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 {
++			t.Error("the preference order should not depend on Config.CipherSuites")
++		}
++		if state.Version != VersionTLS12 {
++			t.Error("the version should be TLS 1.2 when TLS 1.3 is not available")
++		}
++	})
++}
++
++func TestRemoveCipherSuiteCurvePrefix(t *testing.T) {
++	tests := []struct {
++		in, want string
++	}{
++		{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256_P256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
++		{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256_P384", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
++		{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256_P521", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
++		{"TLS_RSA_WITH_AES_128_CBC_SHA", "TLS_RSA_WITH_AES_128_CBC_SHA"},
++		{"_P256", ""},
++		{"_P384", ""},
++		{"_P521", ""},
++		{"TLS_AES_128_GCM_SHA256", "TLS_AES_128_GCM_SHA256"},
++		{"", ""},
++	}
++	for _, tt := range tests {
++		got := removeCipherSuiteCurveSuffix(tt.in)
++		if got != tt.want {
++			t.Errorf("removeCipherSuiteCurvePrefix(%q) = %q, want %q", tt.in, got, tt.want)
++		}
++	}
++}
+diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
+index bfcc62ccfb8ba0..1a2f7e2fc96f5e 100644
+--- a/src/crypto/tls/tls_test.go
++++ b/src/crypto/tls/tls_test.go
+@@ -21,6 +21,7 @@ import (
+ 	"encoding/pem"
+ 	"errors"
+ 	"fmt"
++	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"io"
+ 	"math"
+@@ -211,6 +212,11 @@ func skipFIPS(t *testing.T) {
+ 	if fips140tls.Required() {
+ 		t.Skip("skipping test in FIPS mode")
+ 	}
++	if goexperiment.MS_TLS_Config_Schannel {
++		// Schannel mode is not supported for these tests,
++		// as available cipher suites are not reproducable.
++		t.Skip("skipping test in Schannel mode")
++	}
+ }
+ 
+ func TestDialTimeout(t *testing.T) {
+@@ -1289,6 +1295,9 @@ func TestConnectionState(t *testing.T) {
+ 		if !isFIPSVersion(v) && fips140tls.Required() {
+ 			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
+ 		}
++		if goexperiment.MS_TLS_Config_Schannel && v < VersionTLS12 {
++			t.Skipf("skipping test for Schannel unsupported version %x", v)
++		}
+ 		var name string
+ 		switch v {
+ 		case VersionTLS10:
+@@ -1532,6 +1541,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+ 		}, ""}, // static RSA fallback
+ 	}
+ 	for i, tt := range tests {
++		if goexperiment.MS_TLS_Config_Schannel &&
++			len(tt.chi.SupportedVersions) == 1 && tt.chi.SupportedVersions[0] == VersionTLS10 {
++			// Schannel might not support TLS 1.0.
++			continue
++		}
+ 		err := tt.chi.SupportsCertificate(tt.c)
+ 		switch {
+ 		case tt.wantErr == "" && err != nil:
+@@ -1545,6 +1559,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+ }
+ 
+ func TestCipherSuites(t *testing.T) {
++	if goexperiment.MS_TLS_Config_Schannel {
++		// Schannel mode is not supported for these tests,
++		// as available cipher suites are not reproducible.
++		t.Skip("skipping cipher suite test in Schannel mode")
++	}
+ 	var lastID uint16
+ 	for _, c := range CipherSuites() {
+ 		if lastID > c.ID {
+diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+new file mode 100644
+index 00000000000000..db7790d1a1f1b9
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.ms_tls_config_schannel
++
++package goexperiment
++
++const MS_TLS_Config_Schannel = false
++const MS_TLS_Config_SchannelInt = 0
+diff --git a/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+new file mode 100644
+index 00000000000000..a2dbc6187da2a0
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.ms_tls_config_schannel
++
++package goexperiment
++
++const MS_TLS_Config_Schannel = true
++const MS_TLS_Config_SchannelInt = 1
+diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
+index ff6d59de20818d..f9eb4fbb2521ab 100644
+--- a/src/internal/goexperiment/flags.go
++++ b/src/internal/goexperiment/flags.go
+@@ -133,4 +133,12 @@ type Flags struct {
+ 	// RandomizedHeapBase enables heap base address randomization on 64-bit
+ 	// platforms.
+ 	RandomizedHeapBase64 bool
++
++	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
++	// suites according to the Windows Schannel settings.
++	//
++	// Does nothing on Windows Server 2012 (Windows 8) and earlier. In these
++	// versions, very few cipher suites are implemented by both Windows and Go,
++	// so it's unlikely the resulting TLS configuration will be usable.
++	MS_TLS_Config_Schannel bool
+ }
+diff --git a/src/internal/syscall/windows/security_windows.go b/src/internal/syscall/windows/security_windows.go
+index 2c35ad31f4d039..3f498852f619ec 100644
+--- a/src/internal/syscall/windows/security_windows.go
++++ b/src/internal/syscall/windows/security_windows.go
+@@ -265,3 +265,31 @@ func GetSidSubAuthorityCount(sid *syscall.SID) uint8 {
+ 
+ //sys	InitializeAcl(acl *ACL, length uint32, revision uint32) (err error) = advapi32.InitializeAcl
+ //sys	SetNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *syscall.SID, group *syscall.SID, dacl *ACL, sacl *ACL) (ret error) = advapi32.SetNamedSecurityInfoW
++
++const (
++	CRYPT_LOCAL = 0x00000001
++
++	CRYPT_UM = 0x00000001
++
++	NCRYPT_SCHANNEL_INTERFACE = 0x00010002
++)
++
++var SSL_CONTEXT = [...]uint16{'S', 'S', 'L', 0}
++
++type CRYPT_CONTEXT_FUNCTIONS struct {
++	Count     uint32
++	Functions **uint16 // pointer to an array of pointers to null-terminated UTF-16 function names
++}
++
++func (ccf *CRYPT_CONTEXT_FUNCTIONS) At(i int) *uint16 {
++	if i < 0 || i >= int(ccf.Count) {
++		panic("index out of range")
++	}
++	if ccf.Functions == nil || *ccf.Functions == nil {
++		return nil
++	}
++	return *(**uint16)(unsafe.Add(unsafe.Pointer(ccf.Functions), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
++
++//sys	BCryptFreeBuffer(buffer unsafe.Pointer) = bcrypt.BCryptFreeBuffer
++//sys	BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) = bcrypt.BCryptEnumContextFunctions
+diff --git a/src/internal/syscall/windows/version_windows.go b/src/internal/syscall/windows/version_windows.go
+index 5edf7a01e270d4..3cb6af21f52978 100644
+--- a/src/internal/syscall/windows/version_windows.go
++++ b/src/internal/syscall/windows/version_windows.go
+@@ -136,3 +136,14 @@ var SupportUnixSocket = sync.OnceValue(func() bool {
+ 	}
+ 	return false
+ })
++
++// SupportsTLSConfigSchannel returns true if the current Windows version
++// supports getting the TLS configuration from Schannel.
++func SupportsTLSConfigSchannel() bool {
++	major, _, _ := Version()
++	// Prior to Windows 10, Schannel is implemented, however Windows 10 and Go
++	// only share a few cipher suites. This makes it infeasible to negotiate a
++	// secure connection, so we do not use Schannel even when the GOEXPERIMENT
++	// is active.
++	return major >= 10
++}
+diff --git a/src/internal/syscall/windows/version_windows_test.go b/src/internal/syscall/windows/version_windows_test.go
+index 09be2eb0807932..b74b311279e81f 100644
+--- a/src/internal/syscall/windows/version_windows_test.go
++++ b/src/internal/syscall/windows/version_windows_test.go
+@@ -29,3 +29,10 @@ func TestSupportUnixSocket(t *testing.T) {
+ 		t.Errorf("SupportUnixSocket = %v; want %v", got, want)
+ 	}
+ }
++
++func TestSupportsTLSConfigSchannel(t *testing.T) {
++	if !windows.SupportsTLSConfigSchannel() {
++		// Sanity check. CI only runs on Windows 10 and later, so this should never happen.
++		t.Fatal("SupportsTLSConfigSchannel should return true on Windows 10 and later")
++	}
++}
+diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
+index c08b2ccdbab3d0..5ae4d82c1dbfce 100644
+--- a/src/internal/syscall/windows/zsyscall_windows.go
++++ b/src/internal/syscall/windows/zsyscall_windows.go
+@@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
+ 
+ var (
+ 	modadvapi32         = syscall.NewLazyDLL(sysdll.Add("advapi32.dll"))
++	modbcrypt           = syscall.NewLazyDLL(sysdll.Add("bcrypt.dll"))
+ 	modbcryptprimitives = syscall.NewLazyDLL(sysdll.Add("bcryptprimitives.dll"))
+ 	modiphlpapi         = syscall.NewLazyDLL(sysdll.Add("iphlpapi.dll"))
+ 	modkernel32         = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
+@@ -65,6 +66,8 @@ var (
+ 	procRevertToSelf                      = modadvapi32.NewProc("RevertToSelf")
+ 	procSetNamedSecurityInfoW             = modadvapi32.NewProc("SetNamedSecurityInfoW")
+ 	procSetTokenInformation               = modadvapi32.NewProc("SetTokenInformation")
++	procBCryptEnumContextFunctions        = modbcrypt.NewProc("BCryptEnumContextFunctions")
++	procBCryptFreeBuffer                  = modbcrypt.NewProc("BCryptFreeBuffer")
+ 	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
+ 	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
+ 	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
+@@ -269,6 +272,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+ 	return
+ }
+ 
++func BCryptEnumContextFunctions(table uint32, context *uint16, iface uint32, bufferSize *uint32, buffer **CRYPT_CONTEXT_FUNCTIONS) (ntstatus error) {
++	r0, _, _ := syscall.Syscall6(procBCryptEnumContextFunctions.Addr(), 5, uintptr(table), uintptr(unsafe.Pointer(context)), uintptr(iface), uintptr(unsafe.Pointer(bufferSize)), uintptr(unsafe.Pointer(buffer)), 0)
++	if r0 != 0 {
++		ntstatus = NTStatus(r0)
++	}
++	return
++}
++
++func BCryptFreeBuffer(buffer unsafe.Pointer) {
++	syscall.Syscall(procBCryptFreeBuffer.Addr(), 1, uintptr(buffer), 0, 0)
++	return
++}
++
+ func ProcessPrng(buf []byte) (err error) {
+ 	var _p0 *byte
+ 	if len(buf) > 0 {

From ec38a984f92a8a9f3b526e0616b8462b04fb3ba1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 23 Aug 2025 11:56:57 +0100
Subject: [PATCH 456/887] build(deps): bump github/codeql-action from 3.29.10
 to 3.29.11 (#1849)

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c4a7106c2c5..49e7c0f928a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
+        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
+        uses: github/codeql-action/autobuild@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@96f518a34f7a870018057716cc4d7a5c014bd61c # v3.29.5
+        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
         with:
           category: /language:go

From 3032b02790f13d5f7c39c5cb8a22485116943e0a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Sep 2025 11:01:12 +0000
Subject: [PATCH 457/887] build(deps): bump github/codeql-action from 3.29.11
 to 3.30.0 (#1851)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.11 to 3.30.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3c3833e0f8c1c83d449a7478aa59c036a9165498...2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 49e7c0f928a..7b71d0586a0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/autobuild@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
         with:
           category: /language:go

From 5b48ce20fb0a78143b8058e7a23dd6e5396ed9e4 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 4 Sep 2025 00:37:07 -0700
Subject: [PATCH 458/887] Swap RS publish to ordinary pool using service
 connection (#1855)

---
 eng/pipeline/stages/builders-to-stages.yml    |  9 ++-
 eng/pipeline/stages/public-publish-stage.yml  | 53 ++++++++-----
 eng/pipeline/stages/public-publish-stages.yml | 77 +++++++++++--------
 eng/release-studio/.gitignore                 |  8 --
 eng/release-studio/NuGet.config               | 15 ----
 eng/release-studio/README.md                  |  9 ---
 eng/release-studio/ReleaseStudio.csproj       | 40 ----------
 7 files changed, 89 insertions(+), 122 deletions(-)
 delete mode 100644 eng/release-studio/.gitignore
 delete mode 100644 eng/release-studio/NuGet.config
 delete mode 100644 eng/release-studio/README.md
 delete mode 100644 eng/release-studio/ReleaseStudio.csproj

diff --git a/eng/pipeline/stages/builders-to-stages.yml b/eng/pipeline/stages/builders-to-stages.yml
index 39d56d08546..98de2fedb81 100644
--- a/eng/pipeline/stages/builders-to-stages.yml
+++ b/eng/pipeline/stages/builders-to-stages.yml
@@ -86,10 +86,15 @@ stages:
 
   - ${{ if eq(parameters.publish, true) }}:
     - ${{ if parameters.ctx['GoPublishReleaseStudio'] }}:
-      - template: public-publish-stages.yml
+      - template: pool.yml
         parameters:
           ctx: ${{ parameters.ctx }}
-          publishExistingRunID: ${{ parameters.publishExistingRunID }}
+          inner:
+            template: public-publish-stages.yml
+            parameters:
+              ctx: ${{ parameters.ctx }}
+              builder: { os: windows, arch: amd64, distro: '2022' }
+              publishExistingRunID: ${{ parameters.publishExistingRunID }}
 
     # If publishing, always publish the results to a private storage account and
     # publish symbols to AzDO.
diff --git a/eng/pipeline/stages/public-publish-stage.yml b/eng/pipeline/stages/public-publish-stage.yml
index 5fe72dd3ea9..771c5b47b71 100644
--- a/eng/pipeline/stages/public-publish-stage.yml
+++ b/eng/pipeline/stages/public-publish-stage.yml
@@ -11,6 +11,9 @@ parameters:
   - name: ctx
     type: object
 
+  - name: pool
+    type: object
+
   - name: id 
     type: string
 
@@ -35,8 +38,7 @@ stages:
 
     jobs:
       - job: ${{ parameters.id }}
-        pool:
-          name: DotNet-Publishing-1ES-MI
+        pool: ${{ parameters.pool }}
         workspace:
           clean: all
         timeoutInMinutes: 240 # 4hr
@@ -44,38 +46,53 @@ stages:
           templateContext: ${{ parameters.templateContext }}
         variables:
           # Group includes these relevant variables:
-          # - MI_ClientId
           # - ReleaseStudioPublishOwnerAliases
           - group: go-release-config
 
-          - name: GoBinariesDir
-            value: $(Pipeline.Workspace)/Binaries Signed
-          - name: NetCorePublishingScripts
-            value: $(Build.SourcesDirectory)/eng/release-studio/bin/MsGoPublishingScripts
-
           # This is read directly by release studio scripts through env.
           - name: RMExecutionEnvironment
             value: Production
 
+          - name: GoBinariesDir
+            value: $(Pipeline.Workspace)/Binaries Signed
+
+          - name: NetCorePublishingScriptsPackages
+            value: $(Build.SourcesDirectory)/eng/artifacts/MsGoPublishingScripts/Packages
+
           - ${{ each variable in parameters.variables }}:
             - ${{ variable }}
         steps:
           - template: ../steps/checkout-windows-task.yml
           - template: ../steps/find-PublishBranchAlias-task.yml
 
-          - task: NuGetAuthenticate@1
-            displayName: 'Authenticate to AzDO Feeds'
-
-          - task: DotNetCoreCLI@2
-            displayName: 'Acquire tools using csproj'
+          # Install the latest version of the publish tools package. The
+          # floating dependency is recommended by the RM team to allow them to
+          # make updates to the system. UI to fetch the package as a dev is at:
+          # https://dev.azure.com/dnceng/internal/_artifacts/feed/MicroBuildToolset/NuGet/DevDiv.RM.MS.Go.Publishing
+          - task: NuGetCommand@2
+            displayName: NuGet install RM Tools Package
             inputs:
               command: custom
-              projects: '$(Build.SourcesDirectory)/eng/release-studio/ReleaseStudio.csproj'
-              custom: build
+              feedRestore: MicroBuildToolset
               arguments: >-
-                /p:NetCorePublishingScripts=$(NetCorePublishingScripts)
-                /bl:eng/release-studio/Build.binlog
-                /v:n
+                install DevDiv.RM.MS.Go.Publishing
+                -Source https://pkgs.dev.azure.com/dnceng/_packaging/MicroBuildToolset/nuget/v3/index.json
+                -OutputDirectory $(NetCorePublishingScriptsPackages)
+                -Verbosity Detailed
+
+          - pwsh: |
+              $packageDir = Get-ChildItem `
+                -Path $(NetCorePublishingScriptsPackages) `
+                -Filter "DevDiv.RM.MS.Go.Publishing*" `
+                -Directory
+
+              Write-Host "Tools package dir: $packageDir"
+              if ($packageDir.Count -ne 1) {
+                throw "Expected exactly one publishing tools package installed, found $($packageDir.Count)."
+              }
+
+              Write-Output "##vso[task.setvariable variable=NetCorePublishingScripts]$packageDir\scripts"
+            displayName: Find RM Tools scripts directory
 
           - ${{ each step in parameters.steps }}:
             - ${{ step }}
diff --git a/eng/pipeline/stages/public-publish-stages.yml b/eng/pipeline/stages/public-publish-stages.yml
index f05f2d35185..d7100307788 100644
--- a/eng/pipeline/stages/public-publish-stages.yml
+++ b/eng/pipeline/stages/public-publish-stages.yml
@@ -9,14 +9,22 @@ parameters:
   - name: ctx
     type: object
 
+  - name: pool
+    type: object
+
   - name: publishExistingRunID
     type: string
     default: 'nil'
 
+  # Unused. Declared so pool selection doesn't fail when trying to pass them.
+  - name: builder
+    type: object
+
 stages:
   - template: public-publish-stage.yml
     parameters:
       ctx: ${{ parameters.ctx }}
+      pool: ${{ parameters.pool }}
 
       id: PublishPublicBinaries
 
@@ -30,13 +38,14 @@ stages:
           parameters:
             runID: ${{ parameters.publishExistingRunID }}
 
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: ➡️ Send Publishing Request To Release Studio
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.SendPublishRequest.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.SendPublishRequest.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -PublishingFilesPath "$(GoBinariesDir)"
               -BuildNumber "$(Build.BuildNumber)"
               -BranchName "$(PublishBranchAlias)"
@@ -51,6 +60,7 @@ stages:
   - template: public-publish-stage.yml
     parameters:
       ctx: ${{ parameters.ctx }}
+      pool: ${{ parameters.pool }}
       id: WaitPublicBinaries
       dependsOn: PublishPublicBinaries
       variables:
@@ -64,31 +74,34 @@ stages:
             path: $(ReleaseStudioBinariesManifestDir)
             artifact: Release Studio Binaries Manifest
       steps:
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: ⌚ Wait for Publishing Request Completion
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.WaitForPublishingRequestToBeLive.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.WaitForPublishingRequestToBeLive.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -RequestId "$(RequestID)"
 
         - pwsh: New-Item "$(ReleaseStudioBinariesManifestDir)" -ItemType Directory -ErrorAction Ignore
           displayName: 'Create Publish Manifest File Output Directory'
 
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: 🗃️ Create Publish Manifest File
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.CreateOutputManifestFile.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.CreateOutputManifestFile.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -OutputDirectory "$(ReleaseStudioBinariesManifestDir)"
               -RequestId "$(RequestID)"
 
   - template: public-publish-stage.yml
     parameters:
       ctx: ${{ parameters.ctx }}
+      pool: ${{ parameters.pool }}
       id: PublishAssetManifest
       dependsOn: WaitPublicBinaries
       variables:
@@ -121,13 +134,14 @@ stages:
               -o '$(BuildAssetsPrePublishDir)/assets.json'
           displayName: 🏗️ Create build asset JSON
 
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: ➡️ Send Publishing Request To Release Studio
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.SendPublishRequest.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.SendPublishRequest.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -PublishingFilesPath "$(BuildAssetsPrePublishDir)"
               -BuildNumber "$(Build.BuildNumber)"
               -BranchName "$(PublishBranchAlias)"
@@ -142,6 +156,7 @@ stages:
   - template: public-publish-stage.yml
     parameters:
       ctx: ${{ parameters.ctx }}
+      pool: ${{ parameters.pool }}
       id: WaitAssetManifest
       dependsOn: PublishAssetManifest
       variables:
@@ -160,25 +175,27 @@ stages:
             path: $(ReleaseStudioMetaManifestDir)
             artifact: Release Studio Meta Manifest
       steps:
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: ⌚ Wait for Publishing Request Completion
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.WaitForPublishingRequestToBeLive.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.WaitForPublishingRequestToBeLive.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -RequestId "$(RequestID)"
 
         - pwsh: New-Item "$(ReleaseStudioMetaManifestDir)" -ItemType Directory -ErrorAction Ignore
           displayName: 'Create Meta Manifest File Output Directory'
 
-        - task: PowerShell@2
+        - task: AzurePowerShell@5
           displayName: 🗃️ Create Meta Manifest File
           inputs:
-            targetType: filePath
-            filePath: '$(NetCorePublishingScripts)/RM.MsGo.CreateOutputManifestFile.ps1'
-            arguments:
-              -MIClientId "$(MI_ClientId)"
+            ScriptType: FilePath
+            ScriptPath: '$(NetCorePublishingScripts)/RM.MsGo.CreateOutputManifestFile.ps1'
+            azureSubscription: 'golang-dnceng-rs-publish'
+            azurePowerShellVersion: 'LatestVersion'
+            ScriptArguments:
               -OutputDirectory "$(ReleaseStudioMetaManifestDir)"
               -RequestId "$(RequestID)"
 
diff --git a/eng/release-studio/.gitignore b/eng/release-studio/.gitignore
deleted file mode 100644
index 5b876ec019e..00000000000
--- a/eng/release-studio/.gitignore
+++ /dev/null
@@ -1,8 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
-
-# Ignore results of getting the tools locally.
-*.binlog
-bin/
-obj/
diff --git a/eng/release-studio/NuGet.config b/eng/release-studio/NuGet.config
deleted file mode 100644
index cfde83028f8..00000000000
--- a/eng/release-studio/NuGet.config
+++ /dev/null
@@ -1,15 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<!-- Copyright (c) Microsoft Corporation. Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. -->
-<!--
-  This NuGet.config specifies the sources used to get the Release Studio integration packages.
--->
-<configuration>
-  <packageSources>
-    <clear />
-    <!-- Only one feed is allowed. https://aka.ms/cfs/nuget -->
-    <add key="MicroBuildToolset" value="https://pkgs.dev.azure.com/dnceng/_packaging/MicroBuildToolset/nuget/v3/index.json" />
-  </packageSources>
-  <disabledPackageSources>
-    <clear />
-  </disabledPackageSources>
-</configuration>
diff --git a/eng/release-studio/README.md b/eng/release-studio/README.md
deleted file mode 100644
index cb01587c198..00000000000
--- a/eng/release-studio/README.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# Release Studio infrastructure
-
-This directory contains a .NET project that can download the infrastructure used by Microsoft to publish the Go binaries to official locations.
-The infrastructure runs in PowerShell, but NuGet is used to acquire the tools.
-
-## Getting tools locally
-
-1. Run `dotnet restore` to get the package. If asked, use `dotnet restore --interactive` to set up auth.
-1. Run `dotnet build` to get the package and let the package copy its scripts into `bin/*PublishingScripts`.
diff --git a/eng/release-studio/ReleaseStudio.csproj b/eng/release-studio/ReleaseStudio.csproj
deleted file mode 100644
index 2f5570c4a97..00000000000
--- a/eng/release-studio/ReleaseStudio.csproj
+++ /dev/null
@@ -1,40 +0,0 @@
-<!-- Copyright (c) Microsoft Corporation. Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. -->
-<Project Sdk="Microsoft.NET.Sdk">
-
-  <!-- Minimal info for '.csproj' to work. -->
-  <PropertyGroup>
-    <!--
-      We only have a single NuGet feed, and that feed doesn't have any targeting
-      packs (Microsoft.NETCore.App.Ref, Microsoft.WindowsDesktop.App.Ref, and
-      Microsoft.AspNetCore.App.Ref). To avoid downloading any targeting packs,
-      we need the Target Framework to match the .NET SDK exactly. The SDK may be
-      upgraded without our knowledge, so a hard-coded version is fragile. Use
-      BundledNETCoreAppTargetFrameworkVersion to be flexible.
-
-      We aren't actually building an app anyway, we just need the RM package.
-    -->
-    <TargetFramework>net$(BundledNETCoreAppTargetFrameworkVersion)</TargetFramework>
-
-    <!-- Default value for simple local repro. -->
-    <MsGoPublishingScripts>$(MSBuildThisFileDirectory)bin\MsGoPublishingScripts</MsGoPublishingScripts>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="DevDiv.RM.MS.Go.Publishing" Version="20240703.4.0" />
-  </ItemGroup>
-
-  <!--
-    The scripts end up in a dir with Debug/Release and TargetFramework in the
-    path, which we don't want to rely on. So, copy them to a known place too.
-    Use the ScriptFilesToCopy items gathered by MsGoPublishingScriptsCopy.
-  -->
-  <Target
-    Name="CopyPublishingScriptsToStableLocation"
-    AfterTargets="MsGoPublishingScriptsCopy">
-
-    <Copy
-      SourceFiles="@(ScriptFilesToCopy)"
-      DestinationFolder="$([MSBuild]::NormalizeDirectory('$(MsGoPublishingScripts)', '%(RecursiveDir)'))" />
-  </Target>
-
-</Project>

From e3a38edb9b9d8c5055811a8328bb076dc897b4b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Sep 2025 13:44:50 +0000
Subject: [PATCH 459/887] build(deps): bump actions/setup-go from 5.5.0 to
 6.0.0 (#1856)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.5.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/d35c59abb061a4a6fb18e82ac0862c26744d6ab5...44694675825211faa026b3c33043df3e48a5fa00)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/patch-build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index b056405f8c6..d5a44aedb8a 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           submodules: true
 
-      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version: '1.25'
 

From 894bb7b307bfbbe46ebb280f04f835d3ef290ff7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 16:40:45 +0100
Subject: [PATCH 460/887] build(deps): bump github/codeql-action from 3.30.0 to
 3.30.1 (#1861)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.0 to 3.30.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d...f1f6e5f6af878fb37288ce1c627459e94dbf7d01)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7b71d0586a0..916f6582973 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
+        uses: github/codeql-action/init@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
+        uses: github/codeql-action/autobuild@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
+        uses: github/codeql-action/analyze@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
         with:
           category: /language:go

From bc34475d7f5897f053453bef809a2f31afc7a268 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 16:41:02 +0100
Subject: [PATCH 461/887] build(deps): bump golang.org/x/sys from 0.35.0 to
 0.36.0 in /eng/_util (#1860)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/sys/compare/v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 4 ++--
 eng/_util/go.sum | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 688ce8519ff..1ef6a560d87 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -4,14 +4,14 @@
 
 module github.com/microsoft/go/_util
 
-go 1.23.0
+go 1.24.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 	golang.org/x/net v0.43.0
-	golang.org/x/sys v0.35.0
+	golang.org/x/sys v0.36.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 9ae731a4f67..e58b8640d0d 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -13,8 +13,8 @@ github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE=
 golang.org/x/net v0.43.0/go.mod h1:vhO1fvI4dGsIjh73sWfUVjj3N7CA9WkKJNQm2svM6Jg=
-golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
-golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
+golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
 golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
 golang.org/x/tools v0.35.0 h1:mBffYraMEf7aa0sB+NuKnuCy8qI/9Bughn8dC2Gu5r0=

From 7a68abfa4f07f2d15ffc5a8a49b5f68f48602894 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 8 Sep 2025 16:02:52 +0000
Subject: [PATCH 462/887] Update submodule to latest master (4cc7cc74): crypto:
 update Hash comments to point to crypto/sha3

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index bca3e98b8aa..4cc7cc74c3d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit bca3e98b8aa4f754ea3604b62ef42f64dec88800
+Subproject commit 4cc7cc74c3d8fe7aba458824b0fce6e72ceee048

From 12028c057d8218589b01c5ce67bbf4e254632188 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 9 Sep 2025 13:22:39 +0200
Subject: [PATCH 463/887] fix conflicts

---
 patches/0004-Use-crypto-backends.patch        | 40 +++++--------------
 .../0006-Skip-failing-tests-on-Windows.patch  |  2 +-
 2 files changed, 11 insertions(+), 31 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 66524a72ffc..aae160934a0 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -78,7 +78,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/handshake_client.go            |  12 +-
  src/crypto/tls/handshake_client_tls13.go      |   2 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |  18 +-
+ src/crypto/tls/handshake_server_tls13.go      |   5 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
@@ -91,7 +91,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 87 files changed, 1183 insertions(+), 116 deletions(-)
+ 87 files changed, 1170 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -117,7 +117,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index c3f3a8324c507c..aedd8cd2902f27 100644
+index 1543e96f061d66..11ecb032339282 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -719,7 +719,7 @@ func (t *tester) registerTests() {
@@ -2594,14 +2594,12 @@ index 1e0b5f06672d15..9f72e2376e42ce 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 501bdeb66b05a8..571369cdbfcd34 100644
+index dbbdb5d6a2b268..b97b6eef0b0c22 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -10,11 +10,12 @@ import (
- 	"crypto"
+@@ -11,10 +11,10 @@ import (
  	"crypto/hkdf"
  	"crypto/hmac"
-+	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
 -	"crypto/internal/fips140/tls13"
  	"crypto/internal/hpke"
@@ -2611,25 +2609,7 @@ index 501bdeb66b05a8..571369cdbfcd34 100644
  	"errors"
  	"fmt"
  	"hash"
-@@ -472,15 +473,24 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
- // interfaces implemented by standard library hashes to clone the state of in
- // to a new instance of h. It returns nil if the operation fails.
- func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
-+	if boring.Enabled {
-+		// CNG and OpenSSL with SymCrypt hash functions do not implement the
-+		// encoding.BinaryMarshaler interface, but they do implement the Clone method.
-+		if cloner, ok := in.(hash.Cloner); ok {
-+			clone, err := cloner.Clone()
-+			if err != nil {
-+				// If Clone fails, we can't clone the hash.
-+				return nil
-+			}
-+			return clone
-+		}
-+	}
- 	// Recreate the interface to avoid importing encoding.
- 	type binaryMarshaler interface {
- 		MarshalBinary() (data []byte, err error)
+@@ -485,9 +485,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
  	marshaler, ok := in.(binaryMarshaler)
@@ -2947,10 +2927,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index ecf705b1333f28..cbd6d45ac3139a 100644
+index 51ea2b8f994d4a..c0bfad417f0dfa 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -518,7 +518,7 @@ var depsRules = `
+@@ -519,7 +519,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2959,7 +2939,7 @@ index ecf705b1333f28..cbd6d45ac3139a 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -543,6 +543,8 @@ var depsRules = `
+@@ -544,6 +544,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2968,7 +2948,7 @@ index ecf705b1333f28..cbd6d45ac3139a 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -585,6 +587,7 @@ var depsRules = `
+@@ -586,6 +588,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
index af0848b76f2..b947d8aac0e 100644
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ b/patches/0006-Skip-failing-tests-on-Windows.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] Skip failing tests on Windows
  1 file changed, 3 insertions(+)
 
 diff --git a/src/cmd/cgo/internal/test/test.go b/src/cmd/cgo/internal/test/test.go
-index 844b2dd42c8cbf..9e73c1feaed003 100644
+index fb4a8250a2666f..1933a410e3cb26 100644
 --- a/src/cmd/cgo/internal/test/test.go
 +++ b/src/cmd/cgo/internal/test/test.go
 @@ -1096,6 +1096,9 @@ func testErrno(t *testing.T) {

From 2bcd84e0bb869ed2278c55bd35b97e8863eb0387 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 10 Sep 2025 07:51:46 +0200
Subject: [PATCH 464/887] fix TestReadMetricsSched

---
 patches/0012-fix-TestReadMetricsSched.patch | 66 +++++++++++++++++++++
 1 file changed, 66 insertions(+)
 create mode 100644 patches/0012-fix-TestReadMetricsSched.patch

diff --git a/patches/0012-fix-TestReadMetricsSched.patch b/patches/0012-fix-TestReadMetricsSched.patch
new file mode 100644
index 00000000000..f6da1997ec0
--- /dev/null
+++ b/patches/0012-fix-TestReadMetricsSched.patch
@@ -0,0 +1,66 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Wed, 10 Sep 2025 07:50:27 +0200
+Subject: [PATCH] fix TestReadMetricsSched
+
+---
+ src/runtime/metrics_test.go | 18 ++++++++----------
+ 1 file changed, 8 insertions(+), 10 deletions(-)
+
+diff --git a/src/runtime/metrics_test.go b/src/runtime/metrics_test.go
+index f565d8a59f0100..3989b7929349fc 100644
+--- a/src/runtime/metrics_test.go
++++ b/src/runtime/metrics_test.go
+@@ -1632,15 +1632,13 @@ func TestReadMetricsSched(t *testing.T) {
+ 	checkEq := func(t *testing.T, s *metrics.Sample, value uint64) {
+ 		check(t, s, value, value)
+ 	}
+-	spinUntil := func(f func() bool, timeout time.Duration) bool {
+-		start := time.Now()
+-		for time.Since(start) < timeout {
++	spinUntil := func(f func() bool) bool {
++		for {
+ 			if f() {
+ 				return true
+ 			}
+-			time.Sleep(time.Millisecond)
++			time.Sleep(50 * time.Millisecond)
+ 		}
+-		return false
+ 	}
+ 
+ 	// Check base values.
+@@ -1693,12 +1691,12 @@ func TestReadMetricsSched(t *testing.T) {
+ 		t.Run("running", func(t *testing.T) {
+ 			defer runtime.GOMAXPROCS(runtime.GOMAXPROCS(count + 4))
+ 			// It can take a little bit for the scheduler to
+-			// distribute the goroutines to Ps, so retry for a
+-			// while.
++			// distribute the goroutines to Ps, so retry until
++			// we see the count we expect or the test times out.
+ 			spinUntil(func() bool {
+ 				metrics.Read(s[:])
+ 				return s[running].Value.Uint64() >= count
+-			}, time.Second)
++			})
+ 			logMetrics(t, s[:])
+ 			check(t, &s[running], count, count+4)
+ 			check(t, &s[threads], count, count+4+threadsSlack)
+@@ -1761,7 +1759,7 @@ func TestReadMetricsSched(t *testing.T) {
+ 		spinUntil(func() bool {
+ 			metrics.Read(s[:])
+ 			return s[notInGo].Value.Uint64() >= count
+-		}, time.Second)
++		})
+ 
+ 		metrics.Read(s[:])
+ 		logMetrics(t, s[:])
+@@ -1783,7 +1781,7 @@ func TestReadMetricsSched(t *testing.T) {
+ 		spinUntil(func() bool {
+ 			metrics.Read(s[:])
+ 			return s[waiting].Value.Uint64() >= waitingCount
+-		}, time.Second)
++		})
+ 
+ 		metrics.Read(s[:])
+ 		logMetrics(t, s[:])

From 04de5759c01f5d69dd2cdb8fc49f35eb1363e585 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 11:53:16 +0100
Subject: [PATCH 465/887] build(deps): bump github/codeql-action from 3.30.1 to
 3.30.2 (#1863)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f1f6e5f6af878fb37288ce1c627459e94dbf7d01...d3678e237b9c32a6c9bffb3315c335f976f3549f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 916f6582973..cf82ed06fb5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
+        uses: github/codeql-action/init@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
+        uses: github/codeql-action/autobuild@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
+        uses: github/codeql-action/analyze@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
         with:
           category: /language:go

From 60f65cdacd4905989bd836468d23e8a59284dd25 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 11:53:34 +0100
Subject: [PATCH 466/887] build(deps): bump golang.org/x/net from 0.43.0 to
 0.44.0 in /eng/_util (#1862)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/net/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  4 ++--
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1ef6a560d87..b68df743a9e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
-	golang.org/x/net v0.43.0
+	golang.org/x/net v0.44.0
 	golang.org/x/sys v0.36.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.28.0 // indirect
+	golang.org/x/text v0.29.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index e58b8640d0d..255f0d5b89a 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
 github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE=
-golang.org/x/net v0.43.0/go.mod h1:vhO1fvI4dGsIjh73sWfUVjj3N7CA9WkKJNQm2svM6Jg=
+golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
+golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
 golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
 golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
-golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
-golang.org/x/tools v0.35.0 h1:mBffYraMEf7aa0sB+NuKnuCy8qI/9Bughn8dC2Gu5r0=
-golang.org/x/tools v0.35.0/go.mod h1:NKdj5HkL/73byiZSJjqJgKn3ep7KjFkBOkR/Hps3VPw=
+golang.org/x/text v0.29.0 h1:1neNs90w9YzJ9BocxfsQNHKuAT4pkghyXc4nhZ6sJvk=
+golang.org/x/text v0.29.0/go.mod h1:7MhJOA9CD2qZyOKYazxdYMF85OwPdEr9jTtBpO7ydH4=
+golang.org/x/tools v0.36.0 h1:kWS0uv/zsvHEle1LbV5LE8QujrxB3wfQyxHfhOk0Qkg=
+golang.org/x/tools v0.36.0/go.mod h1:WBDiHKJK8YgLHlcQPYQzNCkUxUypCaa5ZegCVutKm+s=

From 44bf899f1ca0a6f2dbfc17d8411e69be1fcbcd19 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 10 Sep 2025 16:02:48 +0000
Subject: [PATCH 467/887] Update submodule to latest master (f327a054):
 go/token, syscall: annotate if blocks that defeat vet's unreachable pass

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4cc7cc74c3d..f327a054198 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4cc7cc74c3d8fe7aba458824b0fce6e72ceee048
+Subproject commit f327a05419860a782c81a0d57a2e8fb9c517a1d1

From 12126dd78bf6d20949fc45deca7cef75cca90901 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 10 Sep 2025 17:35:04 +0100
Subject: [PATCH 468/887] resolve 3-way merge conflicts

---
 patches/0004-Use-crypto-backends.patch        | 22 +++++++++----------
 ...nt-ms_tls_config_schannel-experiment.patch | 18 +++++++--------
 2 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index aae160934a0..b578b1afd75 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -876,7 +876,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 340edbbaba7807..4490f67e22f88a 100644
+index 54fbecb5764aab..b5598e6f610d1d 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -890,7 +890,7 @@ index 340edbbaba7807..4490f67e22f88a 100644
  	"crypto/internal/fips140/ecdsa"
  	"crypto/internal/fips140/nistec"
  	"crypto/internal/fips140cache"
-@@ -337,7 +337,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
+@@ -333,7 +333,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
  func GenerateKey(c elliptic.Curve, rand io.Reader) (*PrivateKey, error) {
  	randutil.MaybeReadByte(rand)
  
@@ -899,7 +899,7 @@ index 340edbbaba7807..4490f67e22f88a 100644
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
  			return nil, err
-@@ -386,7 +386,7 @@ var errNoAsm = errors.New("no assembly implementation available")
+@@ -382,7 +382,7 @@ var errNoAsm = errors.New("no assembly implementation available")
  func SignASN1(rand io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
  	randutil.MaybeReadByte(rand)
  
@@ -908,7 +908,7 @@ index 340edbbaba7807..4490f67e22f88a 100644
  		b, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -498,7 +498,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
+@@ -494,7 +494,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
  // The inputs are not considered confidential, and may leak through timing side
  // channels, or if an attacker has control of part of the inputs.
  func VerifyASN1(pub *PublicKey, hash, sig []byte) bool {
@@ -2040,7 +2040,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index c557c3710af710..42832da8349355 100644
+index b6b94a79bbca51..32abaf174bfb5b 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2055,7 +2055,7 @@ index c557c3710af710..42832da8349355 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 2f54deae689725..bb2077a60b69a7 100644
+index f438b3696db07d..6e81df81ac2d6b 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2067,7 +2067,7 @@ index 2f54deae689725..bb2077a60b69a7 100644
  	"crypto/internal/cryptotest"
  	"crypto/rand"
  	. "crypto/rsa"
-@@ -149,6 +149,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -150,6 +150,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -2079,9 +2079,9 @@ index 2f54deae689725..bb2077a60b69a7 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -229,6 +234,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
- 	if err := priv.Validate(); err != nil {
- 		t.Errorf("Validate() failed: %s", err)
+@@ -231,6 +236,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+ 	if validateErr != nil && len(priv.Primes) >= 2 {
+ 		t.Errorf("Validate() failed: %s", validateErr)
  	}
 +	if boring.Enabled && priv.N.BitLen() < 512 {
 +		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
@@ -2091,7 +2091,7 @@ index 2f54deae689725..bb2077a60b69a7 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -927,6 +937,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -939,6 +949,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
diff --git a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
index e20e9241514..c96259ff24b 100644
--- a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
@@ -570,13 +570,13 @@ index ff6d59de20818d..f9eb4fbb2521ab 100644
 +	MS_TLS_Config_Schannel bool
  }
 diff --git a/src/internal/syscall/windows/security_windows.go b/src/internal/syscall/windows/security_windows.go
-index 2c35ad31f4d039..3f498852f619ec 100644
+index f0ab52ac819baf..d6ef32c0e5c089 100644
 --- a/src/internal/syscall/windows/security_windows.go
 +++ b/src/internal/syscall/windows/security_windows.go
-@@ -265,3 +265,31 @@ func GetSidSubAuthorityCount(sid *syscall.SID) uint8 {
- 
- //sys	InitializeAcl(acl *ACL, length uint32, revision uint32) (err error) = advapi32.InitializeAcl
- //sys	SetNamedSecurityInfo(objectName string, objectType SE_OBJECT_TYPE, securityInformation SECURITY_INFORMATION, owner *syscall.SID, group *syscall.SID, dacl *ACL, sacl *ACL) (ret error) = advapi32.SetNamedSecurityInfoW
+@@ -262,3 +262,31 @@ func GetSidSubAuthorityCount(sid *syscall.SID) uint8 {
+ 	defer runtime.KeepAlive(sid)
+ 	return *(*uint8)(unsafe.Pointer(getSidSubAuthorityCount(sid)))
+ }
 +
 +const (
 +	CRYPT_LOCAL = 0x00000001
@@ -640,7 +640,7 @@ index 09be2eb0807932..b74b311279e81f 100644
 +	}
 +}
 diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index c08b2ccdbab3d0..5ae4d82c1dbfce 100644
+index 90cf0b92a49bc4..db43b5da72f00e 100644
 --- a/src/internal/syscall/windows/zsyscall_windows.go
 +++ b/src/internal/syscall/windows/zsyscall_windows.go
 @@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
@@ -651,16 +651,16 @@ index c08b2ccdbab3d0..5ae4d82c1dbfce 100644
  	modbcryptprimitives = syscall.NewLazyDLL(sysdll.Add("bcryptprimitives.dll"))
  	modiphlpapi         = syscall.NewLazyDLL(sysdll.Add("iphlpapi.dll"))
  	modkernel32         = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
-@@ -65,6 +66,8 @@ var (
+@@ -63,6 +64,8 @@ var (
+ 	procQueryServiceStatus                = modadvapi32.NewProc("QueryServiceStatus")
  	procRevertToSelf                      = modadvapi32.NewProc("RevertToSelf")
- 	procSetNamedSecurityInfoW             = modadvapi32.NewProc("SetNamedSecurityInfoW")
  	procSetTokenInformation               = modadvapi32.NewProc("SetTokenInformation")
 +	procBCryptEnumContextFunctions        = modbcrypt.NewProc("BCryptEnumContextFunctions")
 +	procBCryptFreeBuffer                  = modbcrypt.NewProc("BCryptFreeBuffer")
  	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
  	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
  	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -269,6 +272,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+@@ -242,6 +245,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
  	return
  }
  

From e1b4b9dda6354114f1054517383408008409ea29 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 11 Sep 2025 10:45:37 +0000
Subject: [PATCH 469/887] build(deps): bump github/codeql-action from 3.30.2 to
 3.30.3 (#1865)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.2 to 3.30.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d3678e237b9c32a6c9bffb3315c335f976f3549f...192325c86100d080feab897ff886c34abd4c83a3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index cf82ed06fb5..fd229eb7893 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
+        uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
+        uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d3678e237b9c32a6c9bffb3315c335f976f3549f # v3.29.5
+        uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         with:
           category: /language:go

From 0dabf4a79b1e7ae26f623045df357f19cd52d7c0 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 12 Sep 2025 09:42:43 +0100
Subject: [PATCH 470/887] initial Migration guide (#1574)

* take another pass at migration guide

* initial dagood review

* WIP: Try rearranging migration guide

* Touchups and emphasis up until testing section

* Flesh out section about Go version

* Include microsoft_systemcrypto=1, clarify nosystemcrypto

* Split toolset ID, doc nosystemcrypto and major version pin, add nocgo diag

* Add more examples and details

* minor formatting tweaks

---------

Co-authored-by: Davis Goodin <dagood@microsoft.com>
---
 README.md                                 |  10 +
 SUPPORT.md                                |   2 +
 eng/doc/MicrosoftToolsetIdentification.md |  39 +++
 eng/doc/MigrationGuide.md                 | 328 ++++++++++++++++++++++
 4 files changed, 379 insertions(+)
 create mode 100644 eng/doc/MicrosoftToolsetIdentification.md
 create mode 100644 eng/doc/MigrationGuide.md

diff --git a/README.md b/README.md
index 3bd04c11514..5fa5685393d 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,10 @@ Each microsoft/go release is announced at the
 Check out the upstream [golang-announce mailing list](https://groups.google.com/g/golang-announce)
 for a summary of the changes in each Go version.
 
+See [SUPPORT.md](SUPPORT.md) for more information about reporting bugs, requesting features, and asking questions.
+
 There are a few additional support resources internal to Microsoft:
+
 * [Languages at Microsoft: Go](https://eng.ms/docs/more/languages-at-microsoft/go/articles/overview).
 * [A Microsoft-internal email distribution list 📧 (instant join link)](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join)
   for release announcements.
@@ -104,6 +107,13 @@ sudo apt-get update && sudo apt-get install msft-golang
 [Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
 for several platforms are available as `zip` and `tar.gz` files.
 
+### The `go-install.ps1` script
+
+The [cross-platform `go-install.ps1` script](https://github.com/microsoft/go-infra/tree/main/goinstallscript) installs the Microsoft build of Go.
+It can install specific versions or the latest releases.
+
+If you use Azure Pipelines, try running the script in a [script step](https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/cmd-line-v2?view=azure-pipelines) and pass the `-AzurePipelinePath` argument to automatically set up `go` in the environment for future steps.
+
 ### Build from source
 
 #### Pre-patched source tarball
diff --git a/SUPPORT.md b/SUPPORT.md
index 4a664139f0d..33f5b49c969 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -10,6 +10,8 @@ feature request as a new Issue][file].
 
 For help and questions about the microsoft/go project, please [file an issue][file].
 
+If you believe you have found a security vulnerability, please report it privately following the instructions in [SECURITY.md](SECURITY.md).
+
 ## Microsoft Support Policy
 
 Support for this project is limited to the resources listed above.
diff --git a/eng/doc/MicrosoftToolsetIdentification.md b/eng/doc/MicrosoftToolsetIdentification.md
new file mode 100644
index 00000000000..9887d72e6a4
--- /dev/null
+++ b/eng/doc/MicrosoftToolsetIdentification.md
@@ -0,0 +1,39 @@
+# Microsoft Toolset Identification
+
+Identifying whether a Go binary or toolset is from the Microsoft build of Go or the official Go distribution can be important for diagnostics and verifying expectations.
+
+As of Go 1.25, `go version` and `go version -m` don't clearly indicate the source of the toolset or binary.
+We plan to address this: see [microsoft/go#262](https://github.com/microsoft/go/issues/262).
+In the meantime, this document describes how to identify a Go program or Go toolset.
+
+## Identifying a Go toolset
+
+If you are able to run `go` commands but aren't sure which distribution `go` is from, you can identify it with these steps.
+
+1. Run `go env GOROOT` to find the root directory of the toolset.
+    * If the path contains clues, it might be clear already which toolset this is.
+1. Go to the path and read the content of the `go.env` file.
+1. Look for the `GOTOOLCHAIN` setting.
+    * If it's `GOTOOLCHAIN=local`, it's likely the Microsoft build of Go. To confirm, read the comment above this line, which should mention Microsoft.
+    * If it's `GOTOOLCHAIN=auto`, it's not the Microsoft build of Go.
+
+
+## Examining Go binaries
+
+First, read the version data from your application binary:
+
+```sh
+go version -m <your-application>
+```
+
+Then, look for a line that contains one of these values:
+
+* `microsoft_systemcrypto=1`
+* `GOEXPERIMENT=systemcrypto`
+
+`systemcrypto` is unique to the Microsoft build of Go, so if either of these strings is present, it confirms that the binary is built by the Microsoft build of Go.
+
+If `GOEXPERIMENT=nosystemcrypto` is present (note the `no` prefix), it confirms that the binary was built with the Microsoft build of Go, but `systemcrypto` was explicitly disabled.
+
+If none of the above are present, we can't confirm which build of Go was used.
+However, this situation means that the application doesn't meet Microsoft internal crypto policy, which may be enough information in some cases.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
new file mode 100644
index 00000000000..e86b713e720
--- /dev/null
+++ b/eng/doc/MigrationGuide.md
@@ -0,0 +1,328 @@
+# Migration Guide: Microsoft build of Go
+
+This guide provides high-level guidance to help migrate from the [official Go distribution](https://go.dev/) to the [Microsoft build of Go](https://github.com/microsoft/go).
+It's intended for developers who work on a Go project at Microsoft.
+
+The Microsoft build of Go is designed to be a drop-in replacement for official Go.
+It's a fork, and some runtime behavior slightly differs, but in most cases it has full compatibility with ordinary Go projects.
+We expect that most projects don't require any Go code changes to work with the Microsoft build of Go.
+
+Note that the Microsoft build of Go has [toolset telemetry enabled by default](https://devblogs.microsoft.com/go/microsoft-go-telemetry/) (opt-out telemetry).
+See [the Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
+
+## Quick start
+
+To comply with Microsoft internal policy for the use of Go, most projects need to:
+
+1. Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**
+    - If you use a version of Go prior to 1.25, you must enable `systemcrypto`. Starting with 1.25, `systemcrypto` is enabled by default.
+    - If your build targets a preview platform (such as macOS), [additional configuration](fips/README.md#configuration-overview) may be required to enable `systemcrypto`.
+1. **Test** your program.
+    - It's important to test on all target platforms. The changes to runtime behavior are platform-specific.
+1. Consider **whether your project must be FIPS compliant** and if so, review your project.
+    - `systemcrypto` may be sufficient, however, you must review your project for compliant use of cryptography and a compliant environment.
+    - For example, FedRAMP approval generally requires FIPS compliance.
+
+For local development, it's not required to use the Microsoft build of Go.
+Consider [installing the toolset](/README.md#download-and-install) on a developer machine if you need to use it to debug behavior that's specific to the Microsoft build.
+
+Like the official Go distribution, the Microsoft build of Go has no Go runtime component that must be installed in the target environment.
+Your Go application is still a single executable binary.
+However, in some cases, it may now have additional dependencies.
+
+Regardless of which method you use to install Go, we recommend picking a specific major version of Go and setting up your build system to use the latest update to that major version, a.k.a. pinning the major version.
+Both official Go and the Microsoft build of Go occasionally have breaking changes in new major versions, and pinning lets you plan for and execute migrations at your own pace.
+However, we recognize that pinning increases maintenance burden when there are no breaking changes, and ultimately the risk must be evaluated in the context of each project.
+
+## What's different?
+
+The Microsoft build of Go includes [patches](/patches/) that:
+
+- **Integrate `crypto` packages with system-provided cryptographic engines** on Linux and Windows. A macOS implementation is in preview.
+- **Enable FIPS compliance** in a way compatible with Microsoft internal crypto policy: using system-provided engines.
+- **Enhance FIPS mode runtime behavior** for scenarios we have encountered in Microsoft's and others' Go applications.
+- **Add [toolset telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/)**, enabled by default.
+- **Disable [GOTOOLCHAIN](https://go.dev/doc/toolchain) by default** to avoid mixups with the official Go distribution.
+- **Remove use of undocumented Windows APIs** for compatibility, security, and compliance.
+
+The patches directory at each Git tag specifies the exact code changes we have made to the official Go toolchain of that version.
+If it's critical to you to understand the exact set of changes we've made, please review the patch files.
+
+## Migration steps
+
+This section describes some migration scenarios we know about and what path we recommend following for each one.
+
+Note that any method of installing the Microsoft build of Go specified [in the project README file](/README.md#download-and-install) is valid.
+If you see a good fit, go ahead and use it.
+The scenarios in the following sections simply offer targeted guidance to help find the easiest approach.
+
+If it's not clear which distribution of Go is currently in use, see [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md).
+
+### The `GoTool@0` Azure Pipelines step
+
+The `GoTool@0` step doesn't currently support the Microsoft build of Go, and there is no equivalent step.
+(See [microsoft/go#483](https://github.com/microsoft/go/issues/483).)
+
+The most direct replacement is to use a `script` step to run [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+
+### A `go` toolset that happens to be on my build agent
+
+Some build agents (VMs, containers, etc.) have `go` conveniently pre-installed, but it's the official distribution of Go rather than the Microsoft build.
+There is no universal migration. You may be able to:
+
+* Request that your agent provider includes the Microsoft build of Go.
+* Pick a different agent.
+* Use a [Microsoft build of Go container image](https://github.com/microsoft/go-images/blob/microsoft/main/README.md) on the agent.
+
+Otherwise, you need to find a suitable way to install it manually, such as [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+
+### An Azure Pipelines container job referring to the official `golang` container image
+
+If you use [container jobs](https://learn.microsoft.com/en-us/azure/devops/pipelines/process/container-phases?view=azure-devops&tabs=linux) with the official Go container images on Dockerhub (or a mirror), swap the image to a Microsoft build of Go container image hosted on MAR (Microsoft Artifact Registry).
+
+You may be able to simply prepend `mcr.microsoft.com/oss/go/microsoft/` to your tag reference.
+
+See the [Microsoft build of Go container image documentation](https://github.com/microsoft/go-images/blob/microsoft/main/README.md) for more information about available container images.
+
+### A Dockerfile based on the official `golang` image
+
+You may be able to simply prepend `mcr.microsoft.com/oss/go/microsoft/` to your `BASE` tag reference.
+See the [Microsoft build of Go container image documentation](https://github.com/microsoft/go-images/blob/microsoft/main/README.md) for more information about available container images.
+
+> [!Note]
+> Make sure to [use a multi-stage Dockerfile](https://docs.docker.com/build/building/multi-stage/) so you don't deploy all build dependencies to production.
+> The Microsoft build of Go's container images are designed to be used for the build stage, not the final, deployment, stage.
+
+### The Azure Linux 3 `golang` package
+
+The `golang` package in the Azure Linux 3 Linux distribution is the Microsoft build of Go.
+If you're using it, no action is needed.
+
+### An Ubuntu `golang` package
+
+Ubuntu packages for the Microsoft build of Go are `msft-golang` on the [Linux Software Repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages), also known as PMC (packages.microsoft.com).
+Install instructions [are in the project README file](/README.md#ubuntu).
+
+### A OneBranch Azure Pipeline
+
+We are not aware of an enhanced migration path for OneBranch pipelines that should be preferred over the Azure Pipelines migrations mentioned above.
+See the above sections for [`GoTool@0`](#the-gotool0-azure-pipelines-step) and [container jobs](#azure-pipelines-container-jobs-using-the-official-golang-image) to find the best fit for your project.
+
+### Direct download of the Go `tar.gz` or `zip` file
+
+If you currently download an archived binary release of Go directly, you can switch to [Microsoft build of Go binary archives](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md).
+That page provides links that redirect to the latest version and also immutable links to specific releases.
+
+## Testing
+
+Make sure pipelines that run `go test` also use the Microsoft build of Go.
+It's important that tests exercise the same runtime behavior as a build that is eventually deployed or shipped.
+
+We recommend that in addition to your normal tests, you [examine your final binary](./MicrosoftToolsetIdentification.md#examining-go-binaries) to confirm that it was built with the Microsoft build of Go.
+
+### Common build issues
+
+After switching to the Microsoft build of Go, you may encounter new build errors.
+
+#### Cgo is not enabled
+
+```
+Using a crypto backend requires CGO_ENABLED=1.
+
+For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
+```
+
+When targeting Linux, `systemcrypto` requires cgo.
+Cgo is disabled by default on some platforms or when a C compiler is not detected
+Sometimes a project's build scripts might explicitly disable cgo.
+There are good reasons to disable cgo, but unfortunately, cgo is currently necessary to use `systemcrypto` on Linux.
+
+In this case, you should first try to install a C compiler, like `gcc`.
+
+You may also need to set the `CGO_ENABLED` environment variable to `1` or [otherwise enable cgo](https://pkg.go.dev/cmd/cgo).
+
+If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+
+> [!NOTE]
+> The macOS `systemcrytpo` implementation also requires cgo.
+> macOS support is in preview, and the dependency on cgo may be removed before we fully support this build configuration.
+
+#### No C compiler is installed
+
+```
+# runtime/cgo
+cgo: C compiler "gcc" not found: exec: "gcc": executable file not found in $PATH
+```
+
+If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+
+#### Missing C toolchain and dependencies
+
+A C toolchain is required to build programs that use `systemcrypto` on Linux.
+The errors shown with a partially missing C toolchain can be unintuitive, so some errors and corresponding missing packages with the names they have on Azure Linux 3 are listed below.
+
+```
+_cgo_export.c:3:10: fatal error: stdlib.h: No such file or directory
+    3 | #include <stdlib.h>
+      |          ^~~~~~~~~~
+```
+
+`glibc-devel`
+
+```
+gcc: fatal error: cannot execute ‘as’: execvp: No such file or directory
+```
+
+`binutils`
+
+```
+In file included from /usr/include/errno.h:28,
+                 from cgo-gcc-prolog:32:
+/usr/include/bits/errno.h:26:11: fatal error: linux/errno.h: No such file or directory
+   26 | # include <linux/errno.h>
+      |           ^~~~~~~~~~~~~~~
+```
+
+`kernel-headers`
+
+If you're using Azure Linux 3, you can run this command to make sure all required C toolchain packages are installed:
+
+```bash
+sudo tdnf install gcc glibc-devel binutils kernel-headers
+```
+
+Alternatively, the `build-essential` package contains all of these packages and more.
+
+If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+
+### Common test or runtime issues
+
+#### Missing OpenSSL or SymCrypt dependencies
+
+```
+panic: opensslcrypto: can't initialize OpenSSL libcrypto.so: openssl: can't load libcrypto.so: libcrypto.so: cannot open shared object file: No such file or directory
+```
+
+You may be missing a required runtime dependency.
+Required OpenSSL packages on Azure Linux 3 are:
+
+- `openssl`
+- `symcrypt` `>=` 103.6.0-1
+- `symcrypt-openssl` (SCOSSL) `>=` 1.6.1-1
+
+You may need to run `tdnf install -y openssl symcrypt symcrypt-openssl`.
+Otherwise, identify why these packages are not present.
+
+If your system has a `libcrypto.so[...]` file that doesn't follow [the expected naming conventions, you can set the `GO_OPENSSL_VERSION_OVERRIDE` environment variable](fips/README.md#runtime-openssl-version-override) to make your Go program look for a specific suffix.
+
+If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+
+#### FIPS mode requested but not available
+
+```
+panic: opensslcrypto: FIPS mode requested (environment variable GODEBUG=fips140=on) but not available: OpenSSL 3.3.3 11 Feb 2025
+```
+
+```
+panic: opensslcrypto: FIPS mode requested (requirefips tag set) but not available: OpenSSL 3.3.3 11 Feb 2025
+```
+
+```
+panic: opensslcrypto: FIPS mode requested (system FIPS mode) but not available: OpenSSL 3.3.3 11 Feb 2025
+```
+
+These error messages indicate that the program is attempting to run in FIPS mode, but FIPS mode isn't available on the current system.
+The message in parentheses indicates why the Go program has requested FIPS mode.
+
+On Azure Linux 3, this may be caused by [missing OpenSSL or SymCrypt dependencies](#missing-openssl-or-symcrypt-dependencies).
+
+#### Performance seems significantly worse
+
+We expect performance to be comparable to standard Go.
+Some patterns of using `crypto` may be more particularly impacted than others.
+
+Please [contact us](/SUPPORT.md) for help with specific performance problems.
+
+#### Long path errors on Windows
+
+Removing the use of undocumented Windows APIs unfortunately removed a feature that allows long paths to work by default for Go programs.
+Long paths do work in many scenarios, because the Go standard library uses the `\\?\` prefix when possible.
+However, some use of long paths, in particular outside of the `os` package, may fail.
+
+See [the upstream proposal golang/go#66560](https://github.com/golang/go/issues/66560) for more information on this limitation and why the official Go distribution uses the undocumented API.
+
+Application code and libraries that use Windows paths may need to be updated to [use the `\\?\` prefix to exceed the long path limit](https://learn.microsoft.com/en-us/windows/win32/fileio/naming-a-file#win32-file-namespaces).
+
+#### glibc resolution failure on Linux
+
+```
+./app: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found (required by ./app)
+./app: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by ./app)
+```
+
+When building a program with cgo on Linux (required when using `systemcrypto`), the system's glibc version is linked into the binary.
+When the program runs on a different system with an older version of glibc, it may fail to start with an error like the above.
+
+There are several approaches to resolve this problem:
+
+- **Always build on the same platform as the target system.** This may be feasible for services, but it makes shipping an application that can run on a variety of Linux systems difficult to manage.
+- **Build on the oldest possible Linux distribution.** This is a common approach, and often works well. However, it may pose a challenge for maintenance, because you need to keep an older system available for builds, and the upgrade window is narrow: you need to upgrade to avoid Linux distro EOL, but not too far in advance to break your compatibility goal.
+- **Use a rootfs that links against an old version of glibc.** This is very effective and also allows cross-compilation, but it requires more complicated setup.
+    - For more information about how to implement this approach, see [microsoft/go#1866](https://github.com/microsoft/go/issues/1866).
+
+On Alpine Linux, `glibc` isn't present at all.
+It uses `musl` instead of `glibc`.
+Try installing the `gcompat` or `libc6-compat` Alpine packages to use a `glibc` compatibility layer.
+Gathering more information about behavior on Alpine is tracked by [microsoft/go#1867](https://github.com/microsoft/go/issues/1867).
+
+If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+
+#### Cryptography package failures while in FIPS mode
+
+While in FIPS mode:
+
+- Some crypto algorithms may be restricted.
+- TLS connections use FIPS-approved ciphers only.
+- Some legacy crypto operations may not be available.
+
+If you encounter an unexpected failure while using a `crypto` package, find the function in the [FIPS User Guide](fips/UserGuide.md) to see any known limitations.
+A summary of compatible algorithms for each supported platform can be found at [Cross-Platform Cryptography in the Microsoft build of Go](CrossPlatformCryptography.md).
+
+## Review project for FIPS compliance
+
+If your project targets FIPS compliance, you need to do additional manual validation to ensure your project meets FIPS requirements.
+These resources may help:
+
+- Read the [FIPS Overview](fips/README.md) for background and additional build and runtime configuration
+- See [CrossPlatformCryptography.md](CrossPlatformCryptography.md) for an overview of supported algorithms on various platforms.
+- Review the [FIPS User Guide](fips/UserGuide.md) for deep API-specific guidance
+
+For specific guidance within Microsoft:
+
+- Read [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
+- Contact the crypto board
+
+## Migration to `systemcrypto`
+
+The difficulty of migrating to using `systemcrypto` can vary significantly depending on the Go project.
+If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto`.
+
+To do so, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
+If you have already set `GOEXPERIMENT`, append `,nosystemcrypto` to the existing value.
+
+If you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
+This will disable `systemcrypto` by default and give you time to plan the migration.
+You can choose to upgrade at your own pace: as of writing, 1.24 will be supported until February 2025.
+Like any major version of Go, there may be more breaking changes that you need to evaluate before upgrading, not only `systemcrypto`.
+
+More information about exceptions to the Microsoft cryptography policy can be found at [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
+
+> [!NOTE]
+> The Microsoft build of Go does apply [other changes](#whats-different) to the official Go distribution, but `systemcrypto` is the most impactful, and the only one that adds additional dependencies.
+
+## Additional Resources
+
+The [project README](/README.md) provides more links to specialized documentation, context, and support resources for the Microsoft build of Go.
+We recommend reading this migration guide for a broad overview of the process, then following applicable links in this document and the README for more specific details.
+
+[msc10010]: https://liquid.microsoft.com/Web/Object/Read/MS.Security/Requirements/Microsoft.Security.Cryptography.10010

From fb3a95919bc5cea271a6138d1456de2205075a18 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 12 Sep 2025 16:02:33 +0000
Subject: [PATCH 471/887] Update submodule to latest master (7acb0d04):
 runtime: fix syscall9 on darwin/arm64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f327a054198..7acb0d04469 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f327a05419860a782c81a0d57a2e8fb9c517a1d1
+Subproject commit 7acb0d044695ca0fbedf94dca7abfdfd991bc69a

From d5618c94afe266fd4e64103bca790e09f056ede8 Mon Sep 17 00:00:00 2001
From: GitOps <gitops@microsoft.com>
Date: Fri, 12 Sep 2025 18:11:34 +0000
Subject: [PATCH 472/887] Inventory drift

---
 es-metadata.yml | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 es-metadata.yml

diff --git a/es-metadata.yml b/es-metadata.yml
new file mode 100644
index 00000000000..5a9cded81fb
--- /dev/null
+++ b/es-metadata.yml
@@ -0,0 +1,8 @@
+schemaVersion: 0.0.1
+isProduction: true
+accountableOwners:
+  service: 5afbffc6-5070-413d-84a2-cf156c3dce91
+routing:
+  defaultAreaPath:
+    org: msazure
+    path: One\DevDiv\GoLang

From bd5bce9ade591ffd00d536bbb8ee0f8f17a6ab81 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 12 Sep 2025 12:50:03 -0700
Subject: [PATCH 473/887] Migration guide fix; point to guide from root docs
 (#1869)

---
 README.md                 |  6 +++++-
 SUPPORT.md                |  2 ++
 eng/doc/MigrationGuide.md | 12 +++++-------
 3 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index 5fa5685393d..b79c897f1a0 100644
--- a/README.md
+++ b/README.md
@@ -71,7 +71,11 @@ cross-compilation may be necessary.
 * `linux_arm64`
 * `windows_amd64`
 
-The following sections list the ways to get a build of the Microsoft fork of Go.
+For guidance about how we recommend migrating existing Go projects to use the
+Microsoft build of Go, visit the [Migration Guide](eng/doc/MigrationGuide.md).
+This guide also helps resolve commonly encountered issues.
+
+The following sections list the ways to get the Microsoft build of Go.
 
 > [!NOTE]
 > Don't see an option that works for you? Let us know!  
diff --git a/SUPPORT.md b/SUPPORT.md
index 33f5b49c969..115f96c43fc 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -2,6 +2,8 @@
 
 For help and questions about the Go programming language and tools, visit the official website: <https://go.dev/>.
 
+Take a look at the [Migration Guide](eng/doc/MigrationGuide.md) for more information about migrating from the official build of Go to the Microsoft build of Go, specifically.
+
 ## How to file issues and get help
 
 This project uses GitHub Issues to track bugs and feature requests. Please search the existing
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index e86b713e720..fcdeb3a6e64 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -147,19 +147,17 @@ If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcr
 > The macOS `systemcrytpo` implementation also requires cgo.
 > macOS support is in preview, and the dependency on cgo may be removed before we fully support this build configuration.
 
-#### No C compiler is installed
+#### Missing C toolchain and dependencies
+
+A C toolchain is required to build programs that use `systemcrypto` on Linux.
+The errors shown with a partially missing C toolchain can be unintuitive, so some errors and corresponding missing packages with the names they have on Azure Linux 3 are listed below.
 
 ```
 # runtime/cgo
 cgo: C compiler "gcc" not found: exec: "gcc": executable file not found in $PATH
 ```
 
-If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
-
-#### Missing C toolchain and dependencies
-
-A C toolchain is required to build programs that use `systemcrypto` on Linux.
-The errors shown with a partially missing C toolchain can be unintuitive, so some errors and corresponding missing packages with the names they have on Azure Linux 3 are listed below.
+`gcc`
 
 ```
 _cgo_export.c:3:10: fatal error: stdlib.h: No such file or directory

From 474c40e19b9a1be69d37a6dc9588901362831148 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 15 Sep 2025 09:16:42 +0100
Subject: [PATCH 474/887] resolve conficlts

---
 patches/0004-Use-crypto-backends.patch        | 14 ++--
 ...nt-ms_tls_config_schannel-experiment.patch | 10 +--
 patches/0012-fix-TestReadMetricsSched.patch   | 66 -------------------
 3 files changed, 12 insertions(+), 78 deletions(-)
 delete mode 100644 patches/0012-fix-TestReadMetricsSched.patch

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b578b1afd75..69f2a0d722d 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -117,7 +117,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1543e96f061d66..11ecb032339282 100644
+index 6ec763259efee6..9c21be3038f5c3 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -719,7 +719,7 @@ func (t *tester) registerTests() {
@@ -254,7 +254,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 7f22b6ba1c5bf0..6d9c27f5537700 100644
+index 516150a0a717cd..02420614048264 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,8 @@ var hostobj []Hostobj
@@ -2055,7 +2055,7 @@ index b6b94a79bbca51..32abaf174bfb5b 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index f438b3696db07d..6e81df81ac2d6b 100644
+index d471ecbf8375f3..4600fc39191366 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2065,9 +2065,9 @@ index f438b3696db07d..6e81df81ac2d6b 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140"
  	"crypto/rand"
- 	. "crypto/rsa"
-@@ -150,6 +150,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -151,6 +151,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -2079,7 +2079,7 @@ index f438b3696db07d..6e81df81ac2d6b 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -231,6 +236,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+@@ -232,6 +237,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
  	if validateErr != nil && len(priv.Primes) >= 2 {
  		t.Errorf("Validate() failed: %s", validateErr)
  	}
@@ -2091,7 +2091,7 @@ index f438b3696db07d..6e81df81ac2d6b 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -939,6 +949,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -940,6 +950,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
diff --git a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
index c96259ff24b..3e9eea88793 100644
--- a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0011-Implement-ms_tls_config_schannel-experiment.patch
@@ -553,13 +553,13 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index ff6d59de20818d..f9eb4fbb2521ab 100644
+index 372ec1f019212b..7fef3145b3be87 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -133,4 +133,12 @@ type Flags struct {
- 	// RandomizedHeapBase enables heap base address randomization on 64-bit
- 	// platforms.
- 	RandomizedHeapBase64 bool
+@@ -136,4 +136,12 @@ type Flags struct {
+ 
+ 	// SizeSpecializedMalloc enables malloc implementations that are specialized per size class.
+ 	SizeSpecializedMalloc bool
 +
 +	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
 +	// suites according to the Windows Schannel settings.
diff --git a/patches/0012-fix-TestReadMetricsSched.patch b/patches/0012-fix-TestReadMetricsSched.patch
deleted file mode 100644
index f6da1997ec0..00000000000
--- a/patches/0012-fix-TestReadMetricsSched.patch
+++ /dev/null
@@ -1,66 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Wed, 10 Sep 2025 07:50:27 +0200
-Subject: [PATCH] fix TestReadMetricsSched
-
----
- src/runtime/metrics_test.go | 18 ++++++++----------
- 1 file changed, 8 insertions(+), 10 deletions(-)
-
-diff --git a/src/runtime/metrics_test.go b/src/runtime/metrics_test.go
-index f565d8a59f0100..3989b7929349fc 100644
---- a/src/runtime/metrics_test.go
-+++ b/src/runtime/metrics_test.go
-@@ -1632,15 +1632,13 @@ func TestReadMetricsSched(t *testing.T) {
- 	checkEq := func(t *testing.T, s *metrics.Sample, value uint64) {
- 		check(t, s, value, value)
- 	}
--	spinUntil := func(f func() bool, timeout time.Duration) bool {
--		start := time.Now()
--		for time.Since(start) < timeout {
-+	spinUntil := func(f func() bool) bool {
-+		for {
- 			if f() {
- 				return true
- 			}
--			time.Sleep(time.Millisecond)
-+			time.Sleep(50 * time.Millisecond)
- 		}
--		return false
- 	}
- 
- 	// Check base values.
-@@ -1693,12 +1691,12 @@ func TestReadMetricsSched(t *testing.T) {
- 		t.Run("running", func(t *testing.T) {
- 			defer runtime.GOMAXPROCS(runtime.GOMAXPROCS(count + 4))
- 			// It can take a little bit for the scheduler to
--			// distribute the goroutines to Ps, so retry for a
--			// while.
-+			// distribute the goroutines to Ps, so retry until
-+			// we see the count we expect or the test times out.
- 			spinUntil(func() bool {
- 				metrics.Read(s[:])
- 				return s[running].Value.Uint64() >= count
--			}, time.Second)
-+			})
- 			logMetrics(t, s[:])
- 			check(t, &s[running], count, count+4)
- 			check(t, &s[threads], count, count+4+threadsSlack)
-@@ -1761,7 +1759,7 @@ func TestReadMetricsSched(t *testing.T) {
- 		spinUntil(func() bool {
- 			metrics.Read(s[:])
- 			return s[notInGo].Value.Uint64() >= count
--		}, time.Second)
-+		})
- 
- 		metrics.Read(s[:])
- 		logMetrics(t, s[:])
-@@ -1783,7 +1781,7 @@ func TestReadMetricsSched(t *testing.T) {
- 		spinUntil(func() bool {
- 			metrics.Read(s[:])
- 			return s[waiting].Value.Uint64() >= waitingCount
--		}, time.Second)
-+		})
- 
- 		metrics.Read(s[:])
- 		logMetrics(t, s[:])

From ee22dacc340d019f93b02ab88f17e25f8884ce3e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 15 Sep 2025 16:06:29 +0000
Subject: [PATCH 475/887] Update submodule to latest master (e5ee1f26):
 test/codegen: check zerobase for newobject on 0-sized types

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 7acb0d04469..e5ee1f26001 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 7acb0d044695ca0fbedf94dca7abfdfd991bc69a
+Subproject commit e5ee1f2600138ce4f34dd1f50d3d1bc482a2e7b0

From 65ee64b9d005916807ed3efa239f10d02cb054c4 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 16 Sep 2025 09:35:09 +0100
Subject: [PATCH 476/887] resolve conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 34 +++++++++----------
 .../0008-remove-long-path-support-hack.patch  | 10 +++---
 2 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 6dd40b5b9b9..76c63938f0c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -261,7 +261,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 46630f4ed83f05..b0674e93de8590 100644
+index e6431c0f20adf8..1052bcd1419c9f 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -272,9 +272,9 @@ index 46630f4ed83f05..b0674e93de8590 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
  	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
- 	golang.org/x/mod v0.27.0
+ 	golang.org/x/mod v0.28.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 57c506936c4475..4e0099400aa890 100644
+index 5a70558fe9cef0..9b87e101a9db5f 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -1861,7 +1861,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 457fc9d619f6ca..7ec34fab577e8d 100644
+index 37cd448bc9e8c0..24a25977511c2b 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -1911,12 +1911,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 51c38f3bc0310d..a80ca7e2b9e765 100644
+index 4b400fe87189d1..d5505e8b8871b4 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.35.0 // indirect
- 	golang.org/x/text v0.28.0 // indirect
+ 	golang.org/x/sys v0.36.0 // indirect
+ 	golang.org/x/text v0.29.0 // indirect
  )
 +
 +require (
@@ -1925,7 +1925,7 @@ index 51c38f3bc0310d..a80ca7e2b9e765 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 3bc4cb53724095..15b1a41c8ed285 100644
+index c90970a9cbaaad..df9d1d1399c4cc 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1935,11 +1935,11 @@ index 3bc4cb53724095..15b1a41c8ed285 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.41.0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4=
- golang.org/x/crypto v0.41.0/go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc=
- golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE=
+ golang.org/x/crypto v0.42.0 h1:chiH31gIWm57EkTXpwnqf8qeuMUi0yekh6mT2AvFlqI=
+ golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
+ golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 41dde20bf9cc9b..6c4d25ec9b256b 100644
+index d50a98d34c9092..bc85bf170eb2eb 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -521,6 +521,24 @@ var depsRules = `
@@ -1996,7 +1996,7 @@ index 41dde20bf9cc9b..6c4d25ec9b256b 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -883,7 +904,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -893,7 +914,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2005,7 +2005,7 @@ index 41dde20bf9cc9b..6c4d25ec9b256b 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -893,7 +914,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -903,7 +924,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -21398,7 +21398,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 645cec45e2f7eb..0140c3f98b1863 100644
+index cf5c27c74579d0..73f67512f60ed3 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
@@ -21419,6 +21419,6 @@ index 645cec45e2f7eb..0140c3f98b1863 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.41.0
- ## explicit; go 1.23.0
+ # golang.org/x/crypto v0.42.0
+ ## explicit; go 1.24.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0008-remove-long-path-support-hack.patch b/patches/0008-remove-long-path-support-hack.patch
index af1e22a30fc..213a496118d 100644
--- a/patches/0008-remove-long-path-support-hack.patch
+++ b/patches/0008-remove-long-path-support-hack.patch
@@ -17,7 +17,7 @@ only affect long relative paths, which can't be used with the `\\?\`.
  1 file changed, 1 insertion(+), 22 deletions(-)
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index 608ee8bc962a0c..b07d10084596fd 100644
+index f08a01b0801fd7..3fba53c53690bb 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
 @@ -135,7 +135,6 @@ var (
@@ -36,7 +36,7 @@ index 608ee8bc962a0c..b07d10084596fd 100644
  	_RtlGetVersion = windowsFindfunc(n32, []byte("RtlGetVersion\000"))
  }
  
-@@ -449,26 +447,7 @@ var canUseLongPaths bool
+@@ -437,26 +435,7 @@ var canUseLongPaths bool
  
  // initLongPathSupport enables long path support.
  func initLongPathSupport() {
@@ -46,10 +46,10 @@ index 608ee8bc962a0c..b07d10084596fd 100644
 -	)
 -
 -	// Check that we're ≥ 10.0.15063.
--	info := _OSVERSIONINFOW{}
--	info.osVersionInfoSize = uint32(unsafe.Sizeof(info))
+-	info := windows.OSVERSIONINFOW{}
+-	info.OSVersionInfoSize = uint32(unsafe.Sizeof(info))
 -	stdcall(_RtlGetVersion, uintptr(unsafe.Pointer(&info)))
--	if info.majorVersion < 10 || (info.majorVersion == 10 && info.minorVersion == 0 && info.buildNumber < 15063) {
+-	if info.MajorVersion < 10 || (info.MajorVersion == 10 && info.MinorVersion == 0 && info.BuildNumber < 15063) {
 -		return
 -	}
 -

From fd620ec2493f8caa6d4c82f4437929eaa7e8cec9 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 16 Sep 2025 10:03:41 +0100
Subject: [PATCH 477/887] fix _INVALID_HANDLE_VALUE import

---
 ...upport-for-logging-used-Windows-APIs.patch | 21 +++++++++++--------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
index 1c1dcd7a0e7..9fcb00b2f31 100644
--- a/patches/0007-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0007-add-support-for-logging-used-Windows-APIs.patch
@@ -6,18 +6,18 @@ Subject: [PATCH] add support for logging used Windows APIs
 ---
  src/runtime/os_windows.go                    |   1 +
  src/runtime/syscalltrace_generate_windows.go |  50 +++++++
- src/runtime/syscalltrace_windows.go          | 133 +++++++++++++++++++
+ src/runtime/syscalltrace_windows.go          | 136 +++++++++++++++++++
  src/runtime/syscalltrace_windows_test.go     |  81 +++++++++++
  src/runtime/zsyscalltrace_windows.go         |  59 ++++++++
  src/syscall/dll_windows.go                   |   4 +
- 6 files changed, 328 insertions(+)
+ 6 files changed, 331 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index ab4e165baecfb0..608ee8bc962a0c 100644
+index f47419cf7dfe0d..f08a01b0801fd7 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
 @@ -220,6 +220,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
@@ -86,10 +86,10 @@ index 00000000000000..17fb696be88776
 +}
 diff --git a/src/runtime/syscalltrace_windows.go b/src/runtime/syscalltrace_windows.go
 new file mode 100644
-index 00000000000000..11187541b1153f
+index 00000000000000..a3a0bf6d15721d
 --- /dev/null
 +++ b/src/runtime/syscalltrace_windows.go
-@@ -0,0 +1,133 @@
+@@ -0,0 +1,136 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -98,7 +98,10 @@ index 00000000000000..11187541b1153f
 +
 +package runtime
 +
-+import "unsafe"
++import (
++	"internal/runtime/syscall/windows"
++	"unsafe"
++)
 +
 +//go:cgo_import_dynamic runtime._CreateFileW CreateFileW%7 "kernel32.dll"
 +//go:cgo_import_dynamic runtime._GetEnvironmentVariableW GetEnvironmentVariableW%3 "kernel32.dll"
@@ -125,7 +128,7 @@ index 00000000000000..11187541b1153f
 +//
 +//go:linkname syscallTrace
 +func syscallTrace(modHandle uintptr, procName *byte) {
-+	if syscallTraceFileHandle == _INVALID_HANDLE_VALUE {
++	if syscallTraceFileHandle == windows.INVALID_HANDLE_VALUE {
 +		return
 +	}
 +	if syscallTraceFileHandle == 0 {
@@ -185,7 +188,7 @@ index 00000000000000..11187541b1153f
 +	var file [_MAX_PATH + 1]uint16
 +	if stdcall(_GetEnvironmentVariableW, uintptr(unsafe.Pointer(&envName[0])), uintptr(unsafe.Pointer(&file[0])), uintptr(len(file))) == 0 {
 +		// Disable syscall tracing.
-+		syscallTraceFileHandle = _INVALID_HANDLE_VALUE
++		syscallTraceFileHandle = windows.INVALID_HANDLE_VALUE
 +		return false
 +	}
 +	const (
@@ -199,7 +202,7 @@ index 00000000000000..11187541b1153f
 +	// Create the file with FILE_APPEND_DATA access to ensure that
 +	// writes are atomic.
 +	syscallTraceFileHandle = stdcall(_CreateFileW, uintptr(unsafe.Pointer(&file[0])), FILE_APPEND_DATA, FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE, 0, OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, 0)
-+	if syscallTraceFileHandle == _INVALID_HANDLE_VALUE {
++	if syscallTraceFileHandle == windows.INVALID_HANDLE_VALUE {
 +		println("runtime: CreateFileA failed; errno=", getlasterror())
 +		throw("failed to create syscall trace file")
 +	}

From 398f19f1baaa0ddd9790235895d8e1f50e16c1ef Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 16 Sep 2025 09:41:17 -0700
Subject: [PATCH 478/887] Add guidance for Azure Linux 3 specific major version

---
 README.md                 |  4 ++++
 eng/doc/MigrationGuide.md | 32 +++++++++++++++++++++++++++++---
 2 files changed, 33 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index b79c897f1a0..10d6dbd6602 100644
--- a/README.md
+++ b/README.md
@@ -95,6 +95,10 @@ includes builds of this Go fork.
 * In Azure Linux 2.0, the package `msft-golang` installs this fork.
 * In Azure Linux 3.0, the `golang` package installs this fork.
 
+For more information about how to manage the `systemcrypto` migration from 1.24
+to 1.25 in Azure Linux 3, see
+[the `systemcrypto` section of the Migration Guide](eng/doc/MigrationGuide.md#migration-to-systemcrypto).
+
 ### Ubuntu
 
 To install the Microsoft build of Go using an Ubuntu package, first set up the [Linux package repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages).
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index fcdeb3a6e64..46f12f58316 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -307,14 +307,40 @@ If the change requires further planning and if it's acceptable for your project
 
 To do so, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
 If you have already set `GOEXPERIMENT`, append `,nosystemcrypto` to the existing value.
+After that, build commands won't encounter errors related to `systemcrypto`, and the resulting program won't attempt to use system-provided cryptography at runtime.
 
-If you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
+Alternatively, if you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
 This will disable `systemcrypto` by default and give you time to plan the migration.
-You can choose to upgrade at your own pace: as of writing, 1.24 will be supported until February 2025.
-Like any major version of Go, there may be more breaking changes that you need to evaluate before upgrading, not only `systemcrypto`.
+You can choose to upgrade at your own pace, as long as you complete the migration before 1.24 reaches EOL (End of Life).
+**1.24 EOL is expected in February 2025.**
+
+For most installation methods, specify 1.24, and you will get the latest, most secure version of 1.24.
+
+> [!TIP]
+> To update to the latest version of 1.24 in Azure Linux 3, use this command:
+>
+> ```bash
+> sudo tdnf install -y 'golang < 1.25'
+> ```
+>
+> Using the constraint `< 1.25` rather than a specific version ensures that you get the latest, most secure version of Go 1.24.
+>
+> Some care may be needed: the above command installs, downgrades, or updates `golang`, but it doesn't lock the version to 1.24.
+> `golang` will be updated to the latest version of 1.25 the next time you run `tdnf update`.
+> This command may only be suitable for some situations, such as CI, and may need to be run just before any steps that use `go`.
+>
+> `dnf` has `versionlock` capabilities, but it doesn't enable upgrades to newer patches within the major version.
+> It will only lock to a specific version.
+
+If you're unable to complete migration to `systemcrypto` right away, we recommend using `nosystemcrypto` with 1.25 rather than using 1.24, if possible.
+This approach lets you benefit from other changes in 1.25.
+It also avoids setting the migration deadline of 1.24 EOL.
 
 More information about exceptions to the Microsoft cryptography policy can be found at [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
 
+> [!NOTE]
+> Like any major version of Go, there may be more breaking changes that you need to evaluate before upgrading, not only `systemcrypto`.
+
 > [!NOTE]
 > The Microsoft build of Go does apply [other changes](#whats-different) to the official Go distribution, but `systemcrypto` is the most impactful, and the only one that adds additional dependencies.
 

From 14975ae448fc9d8f4e5ce1a3bb742638f23ae562 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 16 Sep 2025 13:42:13 -0700
Subject: [PATCH 479/887] Add links from quick start to sections (#1873)

---
 eng/doc/MigrationGuide.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 46f12f58316..d803de388a9 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -14,12 +14,12 @@ See [the Data Collection policy for the Microsoft build of Go](/README.md#data-c
 
 To comply with Microsoft internal policy for the use of Go, most projects need to:
 
-1. Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**
+1. [Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**](#migration-steps)
     - If you use a version of Go prior to 1.25, you must enable `systemcrypto`. Starting with 1.25, `systemcrypto` is enabled by default.
     - If your build targets a preview platform (such as macOS), [additional configuration](fips/README.md#configuration-overview) may be required to enable `systemcrypto`.
-1. **Test** your program.
+1. [**Test** your program.](#testing)
     - It's important to test on all target platforms. The changes to runtime behavior are platform-specific.
-1. Consider **whether your project must be FIPS compliant** and if so, review your project.
+1. [Consider **whether your project must be FIPS compliant** and if so, review your project](#review-project-for-fips-compliance).
     - `systemcrypto` may be sufficient, however, you must review your project for compliant use of cryptography and a compliant environment.
     - For example, FedRAMP approval generally requires FIPS compliance.
 

From 43b07fcc7b7ceec72c941aaa3260dc227aa183aa Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 17 Sep 2025 00:33:14 -0700
Subject: [PATCH 480/887] Update/refine README, Migration Guide (#1874)

---
 README.md                 | 29 +++++++++++------------
 eng/doc/MigrationGuide.md | 48 ++++++++++++++++++++++++---------------
 2 files changed, 43 insertions(+), 34 deletions(-)

diff --git a/README.md b/README.md
index 10d6dbd6602..901a8d519db 100644
--- a/README.md
+++ b/README.md
@@ -17,15 +17,15 @@ BSD-style license found in the LICENSE file.
 
 ## Why does this fork exist?
 
-This repository produces a modified version of Go that can be used to build FIPS
-140-2 compliant applications. Our goal is to share this implementation with
-others in the Go community who have the same requirement, and to merge this
-capability into upstream Go as soon as possible. See
-[eng/doc/fips](eng/doc/fips) for more information about this feature and the
-history of FIPS 140-2 compliance in Go.
+This repository produces a modified version of Go that:
 
-The binaries produced by this repository are also intended for general use
-within Microsoft instead of the official binary distribution of Go.
+* Builds programs that are compliant with internal Microsoft policies by default.
+* Can be used to build FIPS 140 compliant applications.
+  * See [eng/doc/fips](eng/doc/fips) for more information about this feature and the history of FIPS 140 compliance in Go.
+
+We submit changes to the upstream Go project rather than patching it, when
+possible. Our goals are to avoid breaking compatibility and to minimize the
+number of changes we maintain in this fork.
 
 We call this repository a fork even though it isn't a traditional Git fork. Its
 branches do not share Git ancestry with the Go repository. However, the
@@ -71,9 +71,9 @@ cross-compilation may be necessary.
 * `linux_arm64`
 * `windows_amd64`
 
-For guidance about how we recommend migrating existing Go projects to use the
-Microsoft build of Go, visit the [Migration Guide](eng/doc/MigrationGuide.md).
-This guide also helps resolve commonly encountered issues.
+Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we
+recommend migrating existing Go projects to use the Microsoft build of Go. This
+guide also helps resolve commonly encountered issues.
 
 The following sections list the ways to get the Microsoft build of Go.
 
@@ -90,10 +90,7 @@ documents container images that are available on Microsoft Artifact Registry.
 ### Azure Linux
 
 The **[Azure Linux](https://github.com/microsoft/azurelinux)** distribution
-includes builds of this Go fork.
-
-* In Azure Linux 2.0, the package `msft-golang` installs this fork.
-* In Azure Linux 3.0, the `golang` package installs this fork.
+includes the `golang` package, a build of this fork of Go.
 
 For more information about how to manage the `systemcrypto` migration from 1.24
 to 1.25 in Azure Linux 3, see
@@ -186,4 +183,4 @@ users of your applications together with a copy of Microsoft’s privacy
 statement. Our privacy statement is located at https://go.microsoft.com/fwlink/?LinkID=824704.
 You can learn more about data collection and use in the help documentation and
 our privacy statement. Your use of the software operates as your consent to
-these practices.
\ No newline at end of file
+these practices.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index d803de388a9..7a0638a47b8 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -1,6 +1,6 @@
 # Migration Guide: Microsoft build of Go
 
-This guide provides high-level guidance to help migrate from the [official Go distribution](https://go.dev/) to the [Microsoft build of Go](https://github.com/microsoft/go).
+This guide provides high-level guidance to help migrate from the [official Go distribution](https://go.dev/) to the [Microsoft build of Go](https://github.com/microsoft/go), comply with Microsoft internal cryptography policy, and (in some cases) build a FIPS compliant Go program.
 It's intended for developers who work on a Go project at Microsoft.
 
 The Microsoft build of Go is designed to be a drop-in replacement for official Go.
@@ -14,14 +14,16 @@ See [the Data Collection policy for the Microsoft build of Go](/README.md#data-c
 
 To comply with Microsoft internal policy for the use of Go, most projects need to:
 
-1. [Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**](#migration-steps)
-    - If you use a version of Go prior to 1.25, you must enable `systemcrypto`. Starting with 1.25, `systemcrypto` is enabled by default.
+1. [Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**](#ci-and-build-environment-migration-steps)
+    - See [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md) if it's not clear which distribution of Go you're currently using.
+1. If you use a version of Go prior to 1.25, [enable `systemcrypto`](#enable-systemcrypto).
+    - Starting with 1.25, `systemcrypto` is enabled by default, and no action is required.
     - If your build targets a preview platform (such as macOS), [additional configuration](fips/README.md#configuration-overview) may be required to enable `systemcrypto`.
 1. [**Test** your program.](#testing)
     - It's important to test on all target platforms. The changes to runtime behavior are platform-specific.
-1. [Consider **whether your project must be FIPS compliant** and if so, review your project](#review-project-for-fips-compliance).
-    - `systemcrypto` may be sufficient, however, you must review your project for compliant use of cryptography and a compliant environment.
+1. Consider **whether your project must be FIPS compliant** and if so, [**review your project**](#review-project-for-fips-compliance).
     - For example, FedRAMP approval generally requires FIPS compliance.
+    - Using `systemcrypto` is not sufficient to claim FIPS compliance. A specific review is necessary.
 
 For local development, it's not required to use the Microsoft build of Go.
 Consider [installing the toolset](/README.md#download-and-install) on a developer machine if you need to use it to debug behavior that's specific to the Microsoft build.
@@ -48,33 +50,32 @@ The Microsoft build of Go includes [patches](/patches/) that:
 The patches directory at each Git tag specifies the exact code changes we have made to the official Go toolchain of that version.
 If it's critical to you to understand the exact set of changes we've made, please review the patch files.
 
-## Migration steps
+## CI and build environment migration steps
 
-This section describes some migration scenarios we know about and what path we recommend following for each one.
+This section describes some migration scenarios we know about and the path we recommend following for each one.
 
-Note that any method of installing the Microsoft build of Go specified [in the project README file](/README.md#download-and-install) is valid.
-If you see a good fit, go ahead and use it.
-The scenarios in the following sections simply offer targeted guidance to help find the easiest approach.
-
-If it's not clear which distribution of Go is currently in use, see [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md).
+> [!NOTE]
+> Any method of installing the Microsoft build of Go specified [in the project README file](/README.md#download-and-install) is valid.
+> If you see a good fit, go ahead and use it.
+>
+> The scenarios in the following sections simply offer targeted guidance to help find the easiest approach.
 
 ### The `GoTool@0` Azure Pipelines step
 
 The `GoTool@0` step doesn't currently support the Microsoft build of Go, and there is no equivalent step.
 (See [microsoft/go#483](https://github.com/microsoft/go/issues/483).)
 
-The most direct replacement is to use a `script` step to run [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+The most universal replacement is to use a `script` step to run [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
 
 ### A `go` toolset that happens to be on my build agent
 
 Some build agents (VMs, containers, etc.) have `go` conveniently pre-installed, but it's the official distribution of Go rather than the Microsoft build.
-There is no universal migration. You may be able to:
+A universal migration is to use [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+However, we recommend looking at these options first:
 
 * Request that your agent provider includes the Microsoft build of Go.
 * Pick a different agent.
-* Use a [Microsoft build of Go container image](https://github.com/microsoft/go-images/blob/microsoft/main/README.md) on the agent.
-
-Otherwise, you need to find a suitable way to install it manually, such as [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+* Run a [container job that uses Microsoft build of Go container image](#an-azure-pipelines-container-job-referring-to-the-official-golang-container-image).
 
 ### An Azure Pipelines container job referring to the official `golang` container image
 
@@ -106,13 +107,24 @@ Install instructions [are in the project README file](/README.md#ubuntu).
 ### A OneBranch Azure Pipeline
 
 We are not aware of an enhanced migration path for OneBranch pipelines that should be preferred over the Azure Pipelines migrations mentioned above.
-See the above sections for [`GoTool@0`](#the-gotool0-azure-pipelines-step) and [container jobs](#azure-pipelines-container-jobs-using-the-official-golang-image) to find the best fit for your project.
+See the above sections for [`GoTool@0`](#the-gotool0-azure-pipelines-step) and [container jobs](#an-azure-pipelines-container-job-referring-to-the-official-golang-container-image) to find the best fit for your project.
 
 ### Direct download of the Go `tar.gz` or `zip` file
 
 If you currently download an archived binary release of Go directly, you can switch to [Microsoft build of Go binary archives](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md).
 That page provides links that redirect to the latest version and also immutable links to specific releases.
 
+## Enable `systemcrypto`
+
+These instructions are for projects using versions of Go prior to 1.25.
+Starting with 1.25, `systemcrypto` is enabled by default.
+
+To comply with Microsoft internal cryptography policy, enable the `systemcrypto` feature in your build environment before building your project.
+This is done by setting the `GOEXPERIMENT` environment variable to `systemcrypto`.
+
+See [the FIPS documentation sections about build configuration](fips/README.md#usage-common-configurations) for more detailed instructions.
+Even if you don't need FIPS compliance, the `GOEXPERIMENT` instructions are located in that document.
+
 ## Testing
 
 Make sure pipelines that run `go test` also use the Microsoft build of Go.

From 83ec7215bbe0b708a7eb4e05d2f4fe776b1a9c3b Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 17 Sep 2025 10:22:15 +0200
Subject: [PATCH 481/887] telemetry: add target goos and goarch to the upload
 config (#1875)

---
 .../0001-Vendor-external-dependencies.patch   | 28 +++++++++++--------
 1 file changed, 17 insertions(+), 11 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 76c63938f0c..a93604ee4b0 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -15,7 +15,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-infra/telemetry/README.md    |    7 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   64 +
+ .../go-infra/telemetry/config/config.json     |   70 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
  .../telemetry/internal/appinsights/client.go  |  169 ++
@@ -137,7 +137,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   17 +
- 129 files changed, 19255 insertions(+), 7 deletions(-)
+ 129 files changed, 19261 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -261,7 +261,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index e6431c0f20adf8..1052bcd1419c9f 100644
+index e6431c0f20adf8..287fa9c6ceea6b 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -269,12 +269,12 @@ index e6431c0f20adf8..1052bcd1419c9f 100644
  require (
  	github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
  	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.28.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 5a70558fe9cef0..9b87e101a9db5f 100644
+index 5a70558fe9cef0..4e06980a282694 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -283,8 +283,8 @@ index 5a70558fe9cef0..9b87e101a9db5f 100644
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed h1:+WzG8k10xzL+oOrycm6GJTGi/sMZkWtnAhAUZ+Fpvwg=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57 h1:+EIywWbZ+Onkl/aUE0vf5nSFy5NV0OPcd/4dJQKLaMg=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58 h1:uxPa6+/WsUfzikIAPMqpTho10y4qtYpINBurU+6NrHE=
@@ -397,10 +397,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..7c662b93fcd017
+index 00000000000000..b4d1b3712f0f10
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,70 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -460,6 +460,12 @@ index 00000000000000..7c662b93fcd017
 +				},
 +				{
 +					"Name": "go/subcommand:{build,install,run}"
++				},
++				{
++					"Name": "go/platform/target/goos:{aix,android,darwin,dragonfly,freebsd,hurd,illumos,ios,js,linux,nacl,netbsd,openbsd,plan9,solaris,wasip1,windows,zos}"
++				},
++				{
++					"Name": "go/platform/target/goarch:{386,amd64,amd64p32,arm,arm64,arm64be,armbe,loong64,mips,mips64,mips64le,mips64p32,mips64p32le,mipsle,ppc,ppc64,ppc64le,riscv,riscv64,s390,s390x,sparc,sparc64,wasm}"
 +				}
 +			]
 +		}
@@ -1861,7 +1867,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 37cd448bc9e8c0..24a25977511c2b 100644
+index 37cd448bc9e8c0..c48c2757435845 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -1876,7 +1882,7 @@ index 37cd448bc9e8c0..24a25977511c2b 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250728075224-e97e760169ed
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58

From 4a49710188a407a1f18502e2d4c83e1ed376826f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 18 Sep 2025 13:36:35 +0000
Subject: [PATCH 482/887] build(deps): bump
 github.com/microsoft/go-infra/goinstallscript (#1879)

Bumps [github.com/microsoft/go-infra/goinstallscript](https://github.com/microsoft/go-infra) from 0.0.0-20250210150554-f31015b54477 to 1.0.0.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/commits/goinstallscript/v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra/goinstallscript
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index b68df743a9e..90f988fd592 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.24.0
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
-	github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477
+	github.com/microsoft/go-infra/goinstallscript v1.0.0
 	golang.org/x/net v0.44.0
 	golang.org/x/sys v0.36.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 255f0d5b89a..d3b6e5be70d 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -9,8 +9,8 @@ github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHS
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQUqiP0Msa0Ie9gcEt0rYArLZgBi9gHGQhv4=
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
-github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477 h1:wTb+eE4fmHYaHok8MROCDSNBprhBPlj5IAx3KP4MGfU=
-github.com/microsoft/go-infra/goinstallscript v0.0.0-20250210150554-f31015b54477/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
+github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
+github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
 golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
 golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=

From 623ec09033d2d1a4affa8562d21b573aa66593c5 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 19 Sep 2025 05:42:40 -0700
Subject: [PATCH 483/887] Add notes about unknown GOEXPERIMENT (#1878)

* Add notes about unknown GOEXPERIMENT

* Add issue link, more specific desc

* Clarify example of selective nosystemcrypto
---
 eng/doc/MigrationGuide.md | 47 +++++++++++++++++++++++++++++++++++++++
 eng/doc/fips/README.md    |  7 ++++++
 2 files changed, 54 insertions(+)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 7a0638a47b8..ef01aa7530b 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -205,6 +205,53 @@ Alternatively, the `build-essential` package contains all of these packages and
 
 If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
 
+#### Unknown GOEXPERIMENT systemcrypto
+
+```
+go: unknown GOEXPERIMENT systemcrypto
+```
+
+```
+go.exe: unknown GOEXPERIMENT systemcrypto
+```
+
+This error indicates you aren't using the Microsoft build of Go.
+It happens when the `GOEXPERIMENT` environment variable includes `systemcrypto` (or `nosystemcrypto`) and the Go toolset doesn't recognize it.
+
+If you're trying to migrate to the Microsoft build of Go, check your build environment to ensure that the `go` command is the Microsoft build of Go.
+See [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md).
+
+If you're trying to make a build command compliant with Microsoft crypto policy but still compatible with **both the Microsoft build of Go and the official Go distribution**, this is possible:
+
+- If you're using Go 1.25 or later, remove `systemcrypto` from `GOEXPERIMENT`. Starting in 1.25, `systemcrypto` is enabled by default.
+  - If `GOEXPERIMENT` only contains `systemcrypto`, delete the assignment entirely.
+  - If it's not possible to find the `GOEXPERIMENT` setting in your build scripts and remove `systemcrypto`, reassign `GOEXPERIMENT` to remove `systemcrypto` just before your build commands.
+- If you're using Go 1.24 or earlier, or want to use both 1.24 and 1.25, use build tags instead of `GOEXPERIMENT`.
+  - Manually enabling `systemcrypto` in the Microsoft build of Go 1.25 is unnecessary, but harmless.
+
+**Build tags** (also known as build constraints) are more flexible than `GOEXPERIMENT`: build tag names are not verified against the list of known experiments.
+You can pass build tags to a `go build` command using the `-tags` flag:
+
+```
+go build -tags=goexperiment.systemcrypto .
+```
+
+See [Build Tags](fips/README.md#build-tags) in the FIPS README documentation for more information about using build tags with `systemcrypto`.
+
+If passing additional arguments to `go build` is undesirable, you can alternatively set up the `GOFLAGS` environment variable to include `-tags=goexperiment.systemcrypto`.
+This makes all subsequent `go` commands automatically use that build tag.
+See [`cmd/go` documentation](https://pkg.go.dev/cmd/go#hdr-Environment_variables) and [the FIPS readme](fips/README.md#assign-goflags-environment-variable-to-automatically-pass--tags-to-go-build) for more information about using GOFLAGS.
+
+> [!WARNING]
+> Unfortunately, `nosystemcrypto` can't be specified as a build tag.
+> If you need to disable `systemcrypto` and maintain build command compatibility with the official Go distribution, you must use `GOEXPERIMENT=nosystemcrypto` selectively, or use 1.24.
+>
+> For example, we would recommend setting `GOEXPERIMENT=nosystemcrypto` in specific CI pipelines and only using the Microsoft build of Go in those pipelines.
+
+> [!NOTE]
+> We plan to implement a compatibility improvement that allows using `nosystemcrypto` without reducing build command compatibility with the official Go distribution.
+> See [microsoft/go#1880](https://github.com/microsoft/go/issues/1880).
+
 ### Common test or runtime issues
 
 #### Missing OpenSSL or SymCrypt dependencies
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index b66dabbd2e8..8b47d8008ef 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -365,6 +365,13 @@ Selecting most `GOEXPERIMENT`s can also be done by setting the corresponding `go
 
 For example, `go build -tags=goexperiment.systemcrypto` command will enable the same backend as setting `GOEXPERIMENT=systemcrypto` then running the build command.
 
+> [!NOTE]
+> Experiments can't be disabled by a build tag.
+> For example, `go build -tags=goexperiment.nosystemcrypto` has no effect.
+>
+> We plan to implement a compatibility improvement that allows using `nosystemcrypto` without reducing build command compatibility with the official Go distribution.
+> See [microsoft/go#1880](https://github.com/microsoft/go/issues/1880).
+
 ### Conditional behavior if a crypto backend is enabled
 
 Normally this is not necessary, but a shared package may need to change its implementation when compiled with a crypto backend rather than the ordinary Go backend. For example, the library may need to remove use of cryptographic algorithms that would not be permitted by FIPS, in a way that will still allow the library to function. This is done using [build constraints](https://pkg.go.dev/go/build#hdr-Build_Constraints), also known as build tags.

From f57e73fe8cae9827f4c5c197fcca22b3ec4c2943 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Sun, 21 Sep 2025 23:52:33 -0700
Subject: [PATCH 484/887] Stop trying to load OpenSSL 1.0, update docs (#1881)

---
 eng/doc/fips/README.md                        |  9 ++++-
 ...03-Implement-crypto-internal-backend.patch | 38 +++++++++----------
 2 files changed, 25 insertions(+), 22 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 8b47d8008ef..bbc9aab528a 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -344,7 +344,9 @@ The `opensslcrypto` Go runtime automatically loads the OpenSSL shared library `l
 The `libcrypto` shared library file name varies among different platforms, so a best effort is done to find and load the right file:
 
 - The base name is always `libcrypto.so.`
-- Well-known version strings are appended to the base name in this order: `3` -> `1.1` -> `11` -> `111` -> `1.0.2` -> `1.0.0`.
+- Well-known version strings are appended to the base name in this order:
+  - Since Go 1.25: `3` -> `1.1` -> `11` -> `111`.
+  - Prior to Go 1.25: `3` -> `1.1` -> `11` -> `111` -> `1.0.2` -> `1.0.0`.
 - This may find multiple libraries installed on the machine, so to pick one:
   - A matching library with FIPS mode on by default (e.g. set by system configuration) is chosen immediately.
   - If none have FIPS mode on by default, the first match is used.
@@ -399,7 +401,8 @@ The `opensslcrypto` Go runtime supports multiple OpenSSL versions. It discovers
 Not all OpenSSL versions are supported. OpenSSL does not maintain ABI compatibility between different releases, even if only the patch version is increased, it needs specific attention to implement support. The relative importance of each version also results in a different amount of automated testing that has been implemented for various supported version. These are supported versions and the amount of automated validation for each one:
 
 - OpenSSL 1.1.1: the Microsoft CI builds official releases and runs the Go toolset test suite with this version.
-- OpenSSL 1.0.2, 1.1.0, 1.1.1, and 3.0.2: the [golang-fips/openssl] and [go-crypto-openssl] repository CI tests basic operation, but not the integration with the Go runtime.
+- OpenSSL 1.1.0, 1.1.1, and 3.0.2: the [golang-fips/openssl] and [go-crypto-openssl] repository CI tests basic operation, but not the integration with the Go runtime.
+  - Prior to Go 1.25, this list includes 1.0.2.
 
 Versions not listed above are not supported at all.
 
@@ -467,6 +470,8 @@ This list of major changes is intended for quick reference and for access to his
 
 - `GOEXPERIMENT=allowcryptofallback` has been removed. Instead, if it's necessary to opt out from using a system crypto backend, use `GOEXPERIMENT=nosystemcrypto`. This is an internal mechanism that is not intended for use when building a Go application. This document has always recommended against using it, so we anticipate that this change won't affect users of the Microsoft build of Go. Please [contact the maintainers of the Microsoft build of Go](https://github.com/microsoft/go/blob/microsoft/main/SUPPORT.md) if you need to use it so we can understand the scenario and help find a safer alternative.
 
+- The OpenSSL backend [no longer supports OpenSSL 1.0](https://github.com/golang-fips/openssl/issues/244). The supported versions are now OpenSSL 1.1.0, 1.1.1, and 3.x.
+
 ### Go 1.24 (Feb 2025)
 
 See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com/go/go-1-24-fips-update/) blog post for a summary of the Feb 2025 changes.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 1f5ce190fcf..eb8b39a7fbb 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -44,7 +44,7 @@ desired goexperiments and build tags.
  .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
- .../internal/opensslsetup/opensslsetup.go     |  70 ++++
+ .../internal/opensslsetup/opensslsetup.go     |  68 ++++
  .../opensslsetup/opensslsetup_test.go         |  92 +++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 251 ++++++++++++
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2310 insertions(+), 22 deletions(-)
+ 46 files changed, 2308 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -160,7 +160,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 024050c2dd70c4..f91bf0a7c4ad1c 100644
+index fb70047dd0e81c..bb7ff4a68764da 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1387,6 +1387,80 @@ func toolenv() []string {
@@ -261,7 +261,7 @@ index 024050c2dd70c4..f91bf0a7c4ad1c 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index aa09d1eba34be8..c3f3a8324c507c 100644
+index ec4ff649b3815d..6ec763259efee6 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -667,7 +667,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 483a9ec33c6798..fad922e3f844ab 100644
+index 5781276afadba7..f684b73098954c 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -685,7 +685,7 @@ index 483a9ec33c6798..fad922e3f844ab 100644
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 6a684890be0a03..09554a60b23471 100644
+index d913953944bc43..daa8aa3d964ed0 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -44,6 +44,7 @@ import (
@@ -696,7 +696,7 @@ index 6a684890be0a03..09554a60b23471 100644
  	"strconv"
  	"strings"
  )
-@@ -187,7 +188,18 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -188,7 +189,18 @@ func Main(arch *sys.Arch, theArch Arch) {
  
  	buildVersion := buildcfg.Version
  	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
@@ -717,7 +717,7 @@ index 6a684890be0a03..09554a60b23471 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 2fe32600f1d6c7..f84cbdc5ee25f0 100644
+index a87d452ed39446..c03aba6e415873 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -9,6 +9,7 @@ import (
@@ -1971,10 +1971,10 @@ index 00000000000000..d3d39fd77f98db
 +const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
-index 00000000000000..c6c1f53e7452ab
+index 00000000000000..d816f1be17b6a1
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
-@@ -0,0 +1,70 @@
+@@ -0,0 +1,68 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1995,9 +1995,7 @@ index 00000000000000..c6c1f53e7452ab
 +// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
 +// FreeBSD library version numbering does not directly align to the version of OpenSSL.
 +// Its preferred search order is 11 -> 111.
-+// Some distributions use 1.0.0 and others (such as Debian) 1.0.2 to refer to the same OpenSSL 1.0.2 version.
-+// Fedora derived distros use different naming for the version 1.0.x.
-+var knownVersions = [...]string{"3", "1.1", "11", "111", "1.0.2", "1.0.0", "10"}
++var knownVersions = [...]string{"3", "1.1", "11", "111"}
 +
 +const lcryptoPrefix = "libcrypto.so."
 +
@@ -2790,10 +2788,10 @@ index 00000000000000..13782a8241b99a
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 09e91285502bcf..b2c6db15a23e98 100644
+index bc85bf170eb2eb..51ea2b8f994d4a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -348,7 +348,7 @@ var depsRules = `
+@@ -350,7 +350,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -2802,7 +2800,7 @@ index 09e91285502bcf..b2c6db15a23e98 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -537,6 +537,11 @@ var depsRules = `
+@@ -539,6 +539,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2814,7 +2812,7 @@ index 09e91285502bcf..b2c6db15a23e98 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -545,16 +550,27 @@ var depsRules = `
+@@ -547,16 +552,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2844,7 +2842,7 @@ index 09e91285502bcf..b2c6db15a23e98 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -578,8 +594,14 @@ var depsRules = `
+@@ -580,8 +596,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2862,7 +2860,7 @@ index 09e91285502bcf..b2c6db15a23e98 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 9b3bafd0fc6cd9..b7cc2bdfa6ffd9 100644
+index 16a25b602b6966..57067754466b0a 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,11 +5,14 @@
@@ -2880,7 +2878,7 @@ index 9b3bafd0fc6cd9..b7cc2bdfa6ffd9 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -180,6 +183,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -177,6 +180,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}

From 271c364acf44459e27070fa71dfca233bb883e12 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 22 Sep 2025 11:28:20 +0000
Subject: [PATCH 485/887] Update submodule to latest `master` in
 `microsoft/main` (#1877)

* Update submodule to latest master (3db5979e): testing: use reflect.TypeAssert and reflect.TypeFor

* resolve merge conflicts

* refactor

* fix test

---------

Co-authored-by: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
Co-authored-by: qmuntal <quimmuntal@gmail.com>
---
 go                                            |   2 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  24 ++--
 ...03-Implement-crypto-internal-backend.patch |   6 +-
 patches/0004-Use-crypto-backends.patch        | 104 ++++++++----------
 4 files changed, 59 insertions(+), 77 deletions(-)

diff --git a/go b/go
index e5ee1f26001..3db5979e8cc 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e5ee1f2600138ce4f34dd1f50d3d1bc482a2e7b0
+Subproject commit 3db5979e8cc4cc86c4fefb4cecc5a2041b32404d
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 1d58b9bd20a..790d6f3092a 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -46,7 +46,7 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index 761bda8d39b158..adf154e0955c1b 100644
+index 0fa78afe2c08ef..2f65c7b6133474 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
 @@ -700,9 +700,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
@@ -193,7 +193,7 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 50288fcec64141..c557a49b8bd05c 100644
+index 76866c7487adf4..2ef2d71dc27951 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
 @@ -1984,9 +1984,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 310226bc0146e5..16a25b602b6966 100644
+index 707776b374b0d4..91b4a71e1ee836 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
@@ -409,15 +409,15 @@ index 310226bc0146e5..16a25b602b6966 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -82,6 +94,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RegabiWrappers: regabiSupported,
- 		RegabiArgs:     regabiSupported,
- 		Dwarf5:         dwarf5Supported,
-+		SystemCrypto:   systemCryptoSupported,
+@@ -83,6 +95,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RegabiArgs:           regabiSupported,
+ 		Dwarf5:               dwarf5Supported,
+ 		RandomizedHeapBase64: true,
++		SystemCrypto:         systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -123,6 +136,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -124,6 +137,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -432,7 +432,7 @@ index 310226bc0146e5..16a25b602b6966 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -136,6 +157,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -137,6 +158,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -443,7 +443,7 @@ index 310226bc0146e5..16a25b602b6966 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -149,6 +174,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +175,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -566,7 +566,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 3144d3adfc7aba..ff6d59de20818d 100644
+index 84dbf594b8792a..372ec1f019212b 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index eb8b39a7fbb..0511bc68486 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -418,7 +418,7 @@ index 3e691abe41f702..b799031d598892 100644
  	tg.parallel()
  	defer tg.cleanup()
 diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
-index a4edd854f1d35a..10ee92536b96cd 100644
+index 97e4eeeff3c8cf..eb23d4e66a750c 100644
 --- a/src/cmd/go/internal/cfg/cfg.go
 +++ b/src/cmd/go/internal/cfg/cfg.go
 @@ -19,6 +19,7 @@ import (
@@ -429,7 +429,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	"strings"
  	"sync"
  	"time"
-@@ -229,6 +230,21 @@ func ForceHost() {
+@@ -230,6 +231,21 @@ func ForceHost() {
  	BuildContext = defaultContext()
  	// Call SetGOROOT to properly set the GOROOT on the new context.
  	SetGOROOT(Getenv("GOROOT"), false)
@@ -735,7 +735,7 @@ index a87d452ed39446..c03aba6e415873 100644
 +	if goexperiment.SystemCrypto {
 +		t.Skip("tvOS is not supported by system crypto")
 +	}
- 	if testing.Short() && os.Getenv("GO_BUILDER_NAME") == "" {
+ 	if testing.Short() && testenv.Builder() == "" {
  		t.Skip("skipping in -short mode with $GO_BUILDER_NAME empty")
  	}
 @@ -512,6 +516,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 69f2a0d722d..eb5817b4533 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |  10 +-
+ src/cmd/dist/test.go                          |  11 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -39,10 +39,10 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/internal/cryptotest/allocations.go |   6 -
+ src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
- src/crypto/internal/fips140test/check_test.go |  16 ++
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
@@ -91,7 +91,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 87 files changed, 1170 insertions(+), 116 deletions(-)
+ 87 files changed, 1163 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -117,10 +117,18 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 6ec763259efee6..9c21be3038f5c3 100644
+index e0baef4c294907..f2faf8fd8f7c08 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -719,7 +719,7 @@ func (t *tester) registerTests() {
+@@ -707,6 +707,7 @@ func (t *tester) registerTests() {
+ 				timeout: 300 * time.Second,
+ 				tags:    []string{"purego"},
+ 				pkg:     "hash/maphash",
++				env:     []string{"GODEBUG=fips140=off"}, // purego is not supported in FIPS mode
+ 			})
+ 	}
+ 
+@@ -719,7 +720,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -129,7 +137,7 @@ index 6ec763259efee6..9c21be3038f5c3 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1211,6 +1211,11 @@ func (t *tester) internalLink() bool {
+@@ -1211,6 +1212,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -141,7 +149,7 @@ index 6ec763259efee6..9c21be3038f5c3 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1374,12 +1379,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1374,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -254,7 +262,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 516150a0a717cd..02420614048264 100644
+index 1a1bc186755f4f..bc452a7f597baf 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,8 @@ var hostobj []Hostobj
@@ -1334,6 +1342,32 @@ index 70055af70b42ec..21528faa0d6145 100644
  	// The sanitizers sometimes cause allocations.
  	if race.Enabled || msan.Enabled || asan.Enabled {
  		t.Skip("skipping allocations test with sanitizers")
+diff --git a/src/crypto/internal/cryptotest/fips140.go b/src/crypto/internal/cryptotest/fips140.go
+index c24622ce5ac3c2..bdc5a63e204922 100644
+--- a/src/crypto/internal/cryptotest/fips140.go
++++ b/src/crypto/internal/cryptotest/fips140.go
+@@ -5,13 +5,21 @@
+ package cryptotest
+ 
+ import (
++	boring "crypto/internal/backend"
++	bfips140 "crypto/internal/backend/fips140"
+ 	"crypto/internal/fips140"
+ 	"testing"
+ )
+ 
+ func MustSupportFIPS140(t *testing.T) {
+ 	t.Helper()
++	if !boring.Enabled {
++		t.Skip("skipping: boring not enabled")
++	}
+ 	if err := fips140.Supported(); err != nil {
+ 		t.Skipf("test requires FIPS 140 mode: %v", err)
+ 	}
++	if !bfips140.Enabled() {
++		t.Skipf("skipping: FIPS is not enabled")
++	}
+ }
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
 index f00e9c80d3c86a..e24b6cbbd00f68 100644
 --- a/src/crypto/internal/cryptotest/hash.go
@@ -1356,7 +1390,7 @@ index f00e9c80d3c86a..e24b6cbbd00f68 100644
  		return
  	}
 diff --git a/src/crypto/internal/cryptotest/implementations.go b/src/crypto/internal/cryptotest/implementations.go
-index f0ba665403e4e2..e1869abd3ccc4b 100644
+index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
 --- a/src/crypto/internal/cryptotest/implementations.go
 +++ b/src/crypto/internal/cryptotest/implementations.go
 @@ -5,7 +5,7 @@
@@ -1392,58 +1426,6 @@ index 5871bde8be4b2b..3ebefad8898bf2 100644
  	const (
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
-diff --git a/src/crypto/internal/fips140test/check_test.go b/src/crypto/internal/fips140test/check_test.go
-index c4f6a95e3ecbe5..4cca9bcfaf905a 100644
---- a/src/crypto/internal/fips140test/check_test.go
-+++ b/src/crypto/internal/fips140test/check_test.go
-@@ -6,6 +6,8 @@ package fipstest
- 
- import (
- 	"bytes"
-+	boring "crypto/internal/backend"
-+	bfips140 "crypto/internal/backend/fips140"
- 	"crypto/internal/fips140"
- 	. "crypto/internal/fips140/check"
- 	"crypto/internal/fips140/check/checktest"
-@@ -31,10 +33,18 @@ func TestIntegrityCheck(t *testing.T) {
- 		t.Fatalf("GODEBUG=fips140=on but verification did not run")
- 	}
- 
-+	if !boring.Enabled {
-+		t.Skip("skipping: boring not enabled")
-+	}
-+
- 	if err := fips140.Supported(); err != nil {
- 		t.Skipf("skipping: %v", err)
- 	}
- 
-+	if !bfips140.Enabled() {
-+		t.Skipf("skipping: FIPS is not enabled")
-+	}
-+
- 	cmd := testenv.Command(t, testenv.Executable(t), "-test.v", "-test.run=^TestIntegrityCheck$")
- 	cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=on")
- 	out, err := cmd.CombinedOutput()
-@@ -47,6 +57,9 @@ func TestIntegrityCheck(t *testing.T) {
- func TestIntegrityCheckFailure(t *testing.T) {
- 	moduleStatus(t)
- 	testenv.MustHaveExec(t)
-+	if !boring.Enabled {
-+		t.Skip("skipping: boring not enabled")
-+	}
- 	if err := fips140.Supported(); err != nil {
- 		t.Skipf("skipping: %v", err)
- 	}
-@@ -90,6 +103,9 @@ func TestIntegrityCheckFailure(t *testing.T) {
- }
- 
- func TestIntegrityCheckInfo(t *testing.T) {
-+	if !boring.Enabled {
-+		t.Skip("skipping: boring not enabled")
-+	}
- 	if err := fips140.Supported(); err != nil {
- 		t.Skipf("skipping: %v", err)
- 	}
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
 index 08d60933ef38b8..8840db05bde791 100644
 --- a/src/crypto/internal/fips140test/fips_test.go

From e643d08e0dc107106f40bd7e7791dd021b5630c5 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 22 Sep 2025 16:02:35 +0000
Subject: [PATCH 486/887] Update submodule to latest master (2353c157):
 cmd/cgo/internal/test: skip TestMultipleAssign when using UCRT on Windows

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 3db5979e8cc..2353c157859 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 3db5979e8cc4cc86c4fefb4cecc5a2041b32404d
+Subproject commit 2353c1578596aae7128f028c75b52c6047f0b057

From 78a7f6e2936559ccf2d2a841006bb3974d627e20 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 23 Sep 2025 13:13:10 +0200
Subject: [PATCH 487/887] fix conflicts

---
 patches/0004-Use-crypto-backends.patch        | 30 +++++++------------
 .../0006-Skip-failing-tests-on-Windows.patch  | 23 --------------
 ...pport-for-logging-used-Windows-APIs.patch} |  0
 ... 0007-remove-long-path-support-hack.patch} |  0
 ...ernal-go.mod-files-used-for-codegen.patch} |  0
 ...h => 0009-Add-appinsights-telemetry.patch} |  0
 ...t-ms_tls_config_schannel-experiment.patch} |  0
 7 files changed, 11 insertions(+), 42 deletions(-)
 delete mode 100644 patches/0006-Skip-failing-tests-on-Windows.patch
 rename patches/{0007-add-support-for-logging-used-Windows-APIs.patch => 0006-add-support-for-logging-used-Windows-APIs.patch} (100%)
 rename patches/{0008-remove-long-path-support-hack.patch => 0007-remove-long-path-support-hack.patch} (100%)
 rename patches/{0009-Omit-internal-go.mod-files-used-for-codegen.patch => 0008-Omit-internal-go.mod-files-used-for-codegen.patch} (100%)
 rename patches/{0010-add-appinsights-telemetry.patch => 0009-Add-appinsights-telemetry.patch} (100%)
 rename patches/{0011-Implement-ms_tls_config_schannel-experiment.patch => 0010-Implement-ms_tls_config_schannel-experiment.patch} (100%)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index eb5817b4533..4cf297f2d67 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |  11 +-
+ src/cmd/dist/test.go                          |  10 +-
  src/cmd/go/go_boring_test.go                  |  11 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -91,7 +91,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 87 files changed, 1163 insertions(+), 116 deletions(-)
+ 87 files changed, 1162 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -117,18 +117,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index e0baef4c294907..f2faf8fd8f7c08 100644
+index 8cf96bd906ea36..41377c1e002ae6 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -707,6 +707,7 @@ func (t *tester) registerTests() {
- 				timeout: 300 * time.Second,
- 				tags:    []string{"purego"},
- 				pkg:     "hash/maphash",
-+				env:     []string{"GODEBUG=fips140=off"}, // purego is not supported in FIPS mode
- 			})
- 	}
- 
-@@ -719,7 +720,7 @@ func (t *tester) registerTests() {
+@@ -720,7 +720,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -137,7 +129,7 @@ index e0baef4c294907..f2faf8fd8f7c08 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1211,6 +1212,11 @@ func (t *tester) internalLink() bool {
+@@ -1212,6 +1212,11 @@ func (t *tester) internalLink() bool {
  	if goos == "windows" && goarch == "arm64" {
  		return false
  	}
@@ -149,7 +141,7 @@ index e0baef4c294907..f2faf8fd8f7c08 100644
  	// Internally linking cgo is incomplete on some architectures.
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
-@@ -1374,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1375,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -1650,7 +1642,7 @@ index 22ccb8a35334c9..832910da482f44 100644
  }
  
 diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
-index 90943a0935befb..09ebdfd733e5d6 100644
+index eebc1c04cbfedb..a402b7760f917d 100644
 --- a/src/crypto/rc4/rc4.go
 +++ b/src/crypto/rc4/rc4.go
 @@ -10,6 +10,7 @@
@@ -1692,10 +1684,10 @@ index 90943a0935befb..09ebdfd733e5d6 100644
 +		c.boring.Reset()
 +		return
 +	}
- 	for i := range c.s {
- 		c.s[i] = 0
- 	}
-@@ -64,6 +78,10 @@ func (c *Cipher) Reset() {
+ 	clear(c.s[:])
+ 	c.i, c.j = 0, 0
+ }
+@@ -62,6 +76,10 @@ func (c *Cipher) Reset() {
  // XORKeyStream sets dst to the result of XORing src with the key stream.
  // Dst and src must overlap entirely or not at all.
  func (c *Cipher) XORKeyStream(dst, src []byte) {
diff --git a/patches/0006-Skip-failing-tests-on-Windows.patch b/patches/0006-Skip-failing-tests-on-Windows.patch
deleted file mode 100644
index b947d8aac0e..00000000000
--- a/patches/0006-Skip-failing-tests-on-Windows.patch
+++ /dev/null
@@ -1,23 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Wed, 11 Oct 2023 10:44:22 +0200
-Subject: [PATCH] Skip failing tests on Windows
-
----
- src/cmd/cgo/internal/test/test.go | 3 +++
- 1 file changed, 3 insertions(+)
-
-diff --git a/src/cmd/cgo/internal/test/test.go b/src/cmd/cgo/internal/test/test.go
-index fb4a8250a2666f..1933a410e3cb26 100644
---- a/src/cmd/cgo/internal/test/test.go
-+++ b/src/cmd/cgo/internal/test/test.go
-@@ -1096,6 +1096,9 @@ func testErrno(t *testing.T) {
- }
- 
- func testMultipleAssign(t *testing.T) {
-+	if runtime.GOOS == "windows" {
-+		t.Skip("fails with internal linking: https://github.com/microsoft/go/issues/1059")
-+	}
- 	p := C.CString("234")
- 	n, m := C.strtol(p, nil, 345), C.strtol(p, nil, 10)
- 	defer C.free(unsafe.Pointer(p))
diff --git a/patches/0007-add-support-for-logging-used-Windows-APIs.patch b/patches/0006-add-support-for-logging-used-Windows-APIs.patch
similarity index 100%
rename from patches/0007-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0006-add-support-for-logging-used-Windows-APIs.patch
diff --git a/patches/0008-remove-long-path-support-hack.patch b/patches/0007-remove-long-path-support-hack.patch
similarity index 100%
rename from patches/0008-remove-long-path-support-hack.patch
rename to patches/0007-remove-long-path-support-hack.patch
diff --git a/patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch b/patches/0008-Omit-internal-go.mod-files-used-for-codegen.patch
similarity index 100%
rename from patches/0009-Omit-internal-go.mod-files-used-for-codegen.patch
rename to patches/0008-Omit-internal-go.mod-files-used-for-codegen.patch
diff --git a/patches/0010-add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
similarity index 100%
rename from patches/0010-add-appinsights-telemetry.patch
rename to patches/0009-Add-appinsights-telemetry.patch
diff --git a/patches/0011-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
similarity index 100%
rename from patches/0011-Implement-ms_tls_config_schannel-experiment.patch
rename to patches/0010-Implement-ms_tls_config_schannel-experiment.patch

From 3c03b97cc8bb9dfe457d4ef13e112bc455247edd Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 24 Sep 2025 16:02:19 +0000
Subject: [PATCH 488/887] Update submodule to latest master (371c1d2f):
 cmd/internal/obj/riscv: add support for vector unit-stride fault-only-first
 load instructions

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2353c157859..371c1d2fcb4 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2353c1578596aae7128f028c75b52c6047f0b057
+Subproject commit 371c1d2fcb48fa79ac30812231ecef0e26f539dc

From 3c983b3397b78a59296653ee1c86c00a22095a7f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 26 Sep 2025 12:34:02 +0100
Subject: [PATCH 489/887] build(deps): bump github/codeql-action from 3.30.3 to
 3.30.4 (#1887)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.3 to 3.30.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/192325c86100d080feab897ff886c34abd4c83a3...303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fd229eb7893..55573910efb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/init@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/autobuild@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
+        uses: github/codeql-action/analyze@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
         with:
           category: /language:go

From 568d0cdaba7d0794c74ec9abe0d2cdf3d74d64bd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 29 Sep 2025 14:10:17 +0000
Subject: [PATCH 490/887] build(deps): bump github/codeql-action from 3.30.4 to
 3.30.5

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.4 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9...3599b3baa15b485a2e49ef411a7a4bb2452e7f93)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 55573910efb..e2369661538 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
+        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.29.5
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         with:
           category: /language:go

From e2c90711687f165296bb9f253f1e31fee8e3d5fd Mon Sep 17 00:00:00 2001
From: Martijn Verburg <martijnverburg@gmail.com>
Date: Tue, 30 Sep 2025 04:11:01 +1300
Subject: [PATCH 491/887] Update .github/workflows/codeql.yml

---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e2369661538..0cd33cc398a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
         with:
           languages: go
 

From a5fb47c6982b1a03569473c19d2c0ffed819e009 Mon Sep 17 00:00:00 2001
From: Martijn Verburg <martijnverburg@gmail.com>
Date: Tue, 30 Sep 2025 04:11:07 +1300
Subject: [PATCH 492/887] Update .github/workflows/codeql.yml

---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0cd33cc398a..4a72d87ef10 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
         with:
           working-directory: eng/_util
 

From 2406e565fc2e20db59209181ed11b935c93c6a50 Mon Sep 17 00:00:00 2001
From: Martijn Verburg <martijnverburg@gmail.com>
Date: Tue, 30 Sep 2025 04:11:12 +1300
Subject: [PATCH 493/887] Update .github/workflows/codeql.yml

---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4a72d87ef10..8f8e0092dbb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,6 +33,6 @@ jobs:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
         with:
           category: /language:go

From 5808e0527ce62d9b0155fe5f46c3cff3ebbb8cdf Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 30 Sep 2025 18:04:14 +0200
Subject: [PATCH 494/887] Support disabling systemcrypto using the
 MS_GO_NOSYSTEMCRYPTO env (#1886)

* support disabling systemcrypto using the MS_GO_NOSYSTEMCRYPTO env

* improve readme

* doc improvements

* Update eng/doc/MigrationGuide.md

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>

---------

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/MigrationGuide.md                     | 29 +++----
 eng/doc/fips/README.md                        | 17 ++--
 eng/pipeline/stages/run-codeql.yml            |  2 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 44 +++++++++--
 ...03-Implement-crypto-internal-backend.patch | 79 +++++++++++--------
 5 files changed, 106 insertions(+), 65 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index ef01aa7530b..82c12487cd9 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -153,7 +153,7 @@ In this case, you should first try to install a C compiler, like `gcc`.
 
 You may also need to set the `CGO_ENABLED` environment variable to `1` or [otherwise enable cgo](https://pkg.go.dev/cmd/cgo).
 
-If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+If this isn't feasible, see [disabling systemcrypto](#disabling-systemcrypto).
 
 > [!NOTE]
 > The macOS `systemcrytpo` implementation also requires cgo.
@@ -203,7 +203,7 @@ sudo tdnf install gcc glibc-devel binutils kernel-headers
 
 Alternatively, the `build-essential` package contains all of these packages and more.
 
-If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+If this isn't feasible, see [disabling systemcrypto](#disabling-systemcrypto).
 
 #### Unknown GOEXPERIMENT systemcrypto
 
@@ -243,14 +243,9 @@ This makes all subsequent `go` commands automatically use that build tag.
 See [`cmd/go` documentation](https://pkg.go.dev/cmd/go#hdr-Environment_variables) and [the FIPS readme](fips/README.md#assign-goflags-environment-variable-to-automatically-pass--tags-to-go-build) for more information about using GOFLAGS.
 
 > [!WARNING]
-> Unfortunately, `nosystemcrypto` can't be specified as a build tag.
-> If you need to disable `systemcrypto` and maintain build command compatibility with the official Go distribution, you must use `GOEXPERIMENT=nosystemcrypto` selectively, or use 1.24.
->
-> For example, we would recommend setting `GOEXPERIMENT=nosystemcrypto` in specific CI pipelines and only using the Microsoft build of Go in those pipelines.
+> `nosystemcrypto` can't be specified as a build tag.
 
-> [!NOTE]
-> We plan to implement a compatibility improvement that allows using `nosystemcrypto` without reducing build command compatibility with the official Go distribution.
-> See [microsoft/go#1880](https://github.com/microsoft/go/issues/1880).
+See [Disabling `systemcrypto`](#disabling-systemcrypto) for information about how to disable `systemcrypto` if you need to temporarily avoid migrating to it.
 
 ### Common test or runtime issues
 
@@ -272,7 +267,7 @@ Otherwise, identify why these packages are not present.
 
 If your system has a `libcrypto.so[...]` file that doesn't follow [the expected naming conventions, you can set the `GO_OPENSSL_VERSION_OVERRIDE` environment variable](fips/README.md#runtime-openssl-version-override) to make your Go program look for a specific suffix.
 
-If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+If this isn't feasible, see [disabling systemcrypto](#disabling-systemcrypto).
 
 #### FIPS mode requested but not available
 
@@ -332,7 +327,7 @@ It uses `musl` instead of `glibc`.
 Try installing the `gcompat` or `libc6-compat` Alpine packages to use a `glibc` compatibility layer.
 Gathering more information about behavior on Alpine is tracked by [microsoft/go#1867](https://github.com/microsoft/go/issues/1867).
 
-If this isn't feasible, see [migration to `systemcrypto`](#migration-to-systemcrypto).
+If this isn't feasible, see [disabling systemcrypto](#disabling-systemcrypto).
 
 #### Cryptography package failures while in FIPS mode
 
@@ -359,13 +354,15 @@ For specific guidance within Microsoft:
 - Read [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
 - Contact the crypto board
 
-## Migration to `systemcrypto`
+## Disabling `systemcrypto`
 
 The difficulty of migrating to using `systemcrypto` can vary significantly depending on the Go project.
-If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto`.
+If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto` by following these instructions:
+
+- If you're using Go 1.25.2 or later, set the `MS_GO_NOSYSTEMCRYPTO` environment variable to 1.
+- Otherwise, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
+  - If you have already set `GOEXPERIMENT`, append `,nosystemcrypto` to the existing value.
 
-To do so, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
-If you have already set `GOEXPERIMENT`, append `,nosystemcrypto` to the existing value.
 After that, build commands won't encounter errors related to `systemcrypto`, and the resulting program won't attempt to use system-provided cryptography at runtime.
 
 Alternatively, if you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
@@ -391,7 +388,7 @@ For most installation methods, specify 1.24, and you will get the latest, most s
 > `dnf` has `versionlock` capabilities, but it doesn't enable upgrades to newer patches within the major version.
 > It will only lock to a specific version.
 
-If you're unable to complete migration to `systemcrypto` right away, we recommend using `nosystemcrypto` with 1.25 rather than using 1.24, if possible.
+If you're unable to complete migration to `systemcrypto` right away, we recommend disabling systemcrypto with 1.25 rather than using 1.24, if possible.
 This approach lets you benefit from other changes in 1.25.
 It also avoids setting the migration deadline of 1.24 EOL.
 
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index bbc9aab528a..17385a0f1cf 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -77,7 +77,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
-| `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
+| `MS_GO_DISABLE_SYSTEMCRYPTO=1` (since Go 1.25.2) or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
 
 A [Docker base image](#dockerfile-base-image) is available that includes suitable build-time config in the environment.
 
@@ -95,7 +95,7 @@ The `GOEXPERIMENT` environment variable is used at build time to select a crypto
 
 - `systemcrypto` automatically selects the suggested crypto backend for the target platform
    - Prior to Go 1.21, this experiment is not available and the backend must be selected manually
-   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. It can be disabled like any other `GOEXPERIMENT`: setting `GOEXPERIMENT=nosystemcrypto`
+   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. To disable it, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
 - Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
@@ -368,11 +368,8 @@ Selecting most `GOEXPERIMENT`s can also be done by setting the corresponding `go
 For example, `go build -tags=goexperiment.systemcrypto` command will enable the same backend as setting `GOEXPERIMENT=systemcrypto` then running the build command.
 
 > [!NOTE]
-> Experiments can't be disabled by a build tag.
+> Experiments can't be disabled by a build tag, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto) for how to disable `systemcrypto`.
 > For example, `go build -tags=goexperiment.nosystemcrypto` has no effect.
->
-> We plan to implement a compatibility improvement that allows using `nosystemcrypto` without reducing build command compatibility with the official Go distribution.
-> See [microsoft/go#1880](https://github.com/microsoft/go/issues/1880).
 
 ### Conditional behavior if a crypto backend is enabled
 
@@ -454,6 +451,14 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp
 
 This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary.
 
+### Go 1.26 (Feb 2026)
+
+- `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+
+### Go 1.25.2 (Oct 2025)
+
+- `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+
 ### Go 1.25 (Aug 2025)
 
 - The `systemcrypto` goexperiment is now enabled by default on Windows and Linux. To disable it, set `GOEXPERIMENT=nosystemcrypto`.
diff --git a/eng/pipeline/stages/run-codeql.yml b/eng/pipeline/stages/run-codeql.yml
index 1403c081bd0..f29e84b46c4 100644
--- a/eng/pipeline/stages/run-codeql.yml
+++ b/eng/pipeline/stages/run-codeql.yml
@@ -124,5 +124,5 @@ stages:
                 # Build our infra tools.
                 ( cd eng/_util/ && go build ./... )
               env:
-                GOEXPERIMENT: nosystemcrypto
+                MS_GO_NOSYSTEMCRYPTO: 1
               displayName: Build ${{ c.os }}-${{ c.arch }}
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 790d6f3092a..207102eef87 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -19,7 +19,7 @@ maintain this feature. For more information, see the test files.
  .../testdata/backendtags_openssl/openssl.go   |  3 +
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- src/internal/buildcfg/exp.go                  | 28 +++++++
+ src/internal/buildcfg/exp.go                  | 42 ++++++++++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -29,7 +29,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 387 insertions(+), 4 deletions(-)
+ 18 files changed, 401 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -387,10 +387,38 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 707776b374b0d4..91b4a71e1ee836 100644
+index 707776b374b0d4..6eab28497a3f2e 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
-@@ -67,6 +67,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -6,6 +6,7 @@ package buildcfg
+ 
+ import (
+ 	"fmt"
++	"os"
+ 	"reflect"
+ 	"strings"
+ 
+@@ -29,6 +30,19 @@ type ExperimentFlags struct {
+ // default in the current toolchain. This is, in effect, the "control"
+ // configuration and any variation from this is an experiment.
+ var Experiment ExperimentFlags = func() ExperimentFlags {
++	if os.Getenv("MS_GO_NOSYSTEMCRYPTO") == "1" {
++		// If MS_GO_NOSYSTEMCRYPTO is set, ensure that nosystemcrypto is in GOEXPERIMENT.
++		// We do it here because it is the earliest point where the toolchain tries to retrive
++		// the GOEXPERIMENT value.
++		// The environment variable is updated rather than appending "nosystemcrypto" to the
++		// result of ParseGOEXPERIMENT because the latter will be moved at some point to
++		// internal/goexperiment, which can't import the os package.
++		v := os.Getenv("GOEXPERIMENT")
++		if v != "" {
++			v += ","
++		}
++		os.Setenv("GOEXPERIMENT", v+"nosystemcrypto")
++	}
+ 	flags, err := ParseGOEXPERIMENT(GOOS, GOARCH, envOr("GOEXPERIMENT", defaultGOEXPERIMENT))
+ 	if err != nil {
+ 		Error = err
+@@ -67,6 +81,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		regabiSupported = true
  	}
  
@@ -409,7 +437,7 @@ index 707776b374b0d4..91b4a71e1ee836 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -83,6 +95,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -83,6 +109,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		RegabiArgs:           regabiSupported,
  		Dwarf5:               dwarf5Supported,
  		RandomizedHeapBase64: true,
@@ -417,7 +445,7 @@ index 707776b374b0d4..91b4a71e1ee836 100644
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -124,6 +137,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -124,6 +151,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -432,7 +460,7 @@ index 707776b374b0d4..91b4a71e1ee836 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -137,6 +158,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -137,6 +172,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -443,7 +471,7 @@ index 707776b374b0d4..91b4a71e1ee836 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -150,6 +175,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +189,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0511bc68486..ee4a182d327 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -19,7 +19,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 144 +++++++
+ src/cmd/go/systemcrypto_test.go               | 154 ++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  54 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2308 insertions(+), 22 deletions(-)
+ 46 files changed, 2318 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -160,7 +160,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index fb70047dd0e81c..bb7ff4a68764da 100644
+index 9a7951726f6f04..a09cdd9550cbab 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1387,6 +1387,80 @@ func toolenv() []string {
@@ -261,7 +261,7 @@ index fb70047dd0e81c..bb7ff4a68764da 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index ec4ff649b3815d..6ec763259efee6 100644
+index 1e74438f48db39..6c31b623897048 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -291,7 +291,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
  		}
  	}
  
-@@ -749,11 +751,18 @@ func (t *tester) registerTests() {
+@@ -750,11 +752,18 @@ func (t *tester) registerTests() {
  			variant: "jsonv2",
  			env:     []string{"GOEXPERIMENT=jsonv2"},
  			pkg:     "encoding/json/...",
@@ -311,7 +311,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -863,14 +872,21 @@ func (t *tester) registerTests() {
+@@ -864,14 +873,21 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -319,7 +319,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
 +		if goos != "windows" {
 +			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
 +			tags = append(tags, "ms_skipfipscheck")
-+			env = append(env, "GOEXPERIMENT=nosystemcrypto")
++			env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
 +		}
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
@@ -334,7 +334,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -878,9 +894,10 @@ func (t *tester) registerTests() {
+@@ -879,9 +895,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -346,7 +346,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -897,15 +914,22 @@ func (t *tester) registerTests() {
+@@ -898,15 +915,22 @@ func (t *tester) registerTests() {
  
  	if t.extLink() && !t.compileOnly {
  		if goos != "android" { // Android does not support non-PIE linking
@@ -354,7 +354,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
 +			if goos == "darwin" {
 +				// Darwincrypto doesn't support external linking.
 +				tags = append(tags, "ms_skipfipscheck")
-+				env = append(env, "GOEXPERIMENT=nosystemcrypto")
++				env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
 +			}
  			t.registerTest("external linking, -buildmode=exe",
  				&goTest{
@@ -370,7 +370,7 @@ index ec4ff649b3815d..6ec763259efee6 100644
  				})
  		}
  		if t.externalLinkPIE() && !disablePIE {
-@@ -984,7 +1008,9 @@ func (t *tester) registerTests() {
+@@ -985,7 +1009,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -382,10 +382,10 @@ index ec4ff649b3815d..6ec763259efee6 100644
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
-index 3e691abe41f702..b799031d598892 100644
+index e4ee9bd1e8d2ec..3bdb6b4d31fe46 100644
 --- a/src/cmd/go/go_test.go
 +++ b/src/cmd/go/go_test.go
-@@ -14,6 +14,7 @@ import (
+@@ -13,6 +13,7 @@ import (
  	"fmt"
  	"go/format"
  	"internal/godebug"
@@ -393,7 +393,7 @@ index 3e691abe41f702..b799031d598892 100644
  	"internal/platform"
  	"internal/testenv"
  	"io"
-@@ -111,6 +112,13 @@ func TestMain(m *testing.M) {
+@@ -110,6 +111,13 @@ func TestMain(m *testing.M) {
  		if v := os.Getenv("TESTGO_TOOLCHAIN_VERSION"); v != "" {
  			work.ToolchainVersion = v
  		}
@@ -407,7 +407,7 @@ index 3e691abe41f702..b799031d598892 100644
  
  		if testGOROOT := os.Getenv("TESTGO_GOROOT"); testGOROOT != "" {
  			// Disallow installs to the GOROOT from which testgo was built.
-@@ -1861,6 +1869,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+@@ -1860,6 +1868,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
  }
  
  func TestGoEnv(t *testing.T) {
@@ -418,7 +418,7 @@ index 3e691abe41f702..b799031d598892 100644
  	tg.parallel()
  	defer tg.cleanup()
 diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
-index 97e4eeeff3c8cf..eb23d4e66a750c 100644
+index a4edd854f1d35a..10ee92536b96cd 100644
 --- a/src/cmd/go/internal/cfg/cfg.go
 +++ b/src/cmd/go/internal/cfg/cfg.go
 @@ -19,6 +19,7 @@ import (
@@ -429,7 +429,7 @@ index 97e4eeeff3c8cf..eb23d4e66a750c 100644
  	"strings"
  	"sync"
  	"time"
-@@ -230,6 +231,21 @@ func ForceHost() {
+@@ -229,6 +230,21 @@ func ForceHost() {
  	BuildContext = defaultContext()
  	// Call SetGOROOT to properly set the GOROOT on the new context.
  	SetGOROOT(Getenv("GOROOT"), false)
@@ -495,10 +495,10 @@ index 120ef5339bede0..b7b145fdfc9972 100644
  	buildAndRunTool(ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..5ee9c2e050cf24
+index 00000000000000..d12c79c4713e51
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,144 @@
+@@ -0,0 +1,154 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -604,30 +604,40 @@ index 00000000000000..5ee9c2e050cf24
 +
 +	type testCase struct {
 +		enabled bool
-+		exp     string
++		env     []string
 +	}
 +	tests := []testCase{
-+		{false, "nosystemcrypto"},
-+		{true, "systemcrypto"},
++		{false, []string{"GOEXPERIMENT=nosystemcrypto"}},
++		{false, []string{"GOEXPERIMENT=systemcrypto,nosystemcrypto"}},
++		{false, []string{"MS_GO_NOSYSTEMCRYPTO=1"}},
++		{true, []string{"GOEXPERIMENT=systemcrypto"}},
++		{true, []string{"GOEXPERIMENT=nosystemcrypto,systemcrypto"}},
 +	}
 +	switch runtime.GOOS {
 +	case "linux":
-+		tests = append(tests, testCase{true, "opensslcrypto"})
++		tests = append(tests, testCase{true, []string{"GOEXPERIMENT=opensslcrypto"}})
 +	case "windows":
 +		switch runtime.GOARCH {
 +		case "amd64", "arm64":
-+			tests = append(tests, testCase{true, "cngcrypto"})
++			tests = append(tests, testCase{true, []string{"GOEXPERIMENT=cngcrypto"}})
 +		}
 +	case "darwin":
-+		tests = append(tests, testCase{true, "darwincrypto"})
++		tests = append(tests, testCase{true, []string{"GOEXPERIMENT=darwincrypto"}})
++	}
++	// Duplicate each test with MS_GO_NOSYSTEMCRYPTO=1, which should always result
++	// in systemcrypto being disabled.
++	n := len(tests)
++	for i := range n {
++		tt := tests[i]
++		tests = append(tests, testCase{false, append(tt.env, "MS_GO_NOSYSTEMCRYPTO=1")})
 +	}
 +	for _, tt := range tests {
-+		t.Run(tt.exp, func(t *testing.T) {
++		t.Run(strings.Join(tt.env, ","), func(t *testing.T) {
 +			t.Parallel()
 +			out := outPath(t)
 +
 +			// Build the binary with the specified GOEXPERIMENT.
-+			_, ok := execGoTool(t, true, []string{"GOEXPERIMENT=" + tt.exp}, "build", "-o", out, file)
++			_, ok := execGoTool(t, true, tt.env, "build", "-o", out, file)
 +			if !ok {
 +				t.Skip("skipping test because GOEXPERIMENT not supported by the current toolchain")
 +			}
@@ -667,7 +677,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 5781276afadba7..f684b73098954c 100644
+index c5aa91ba4732e7..9e838fa785af46 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -717,7 +727,7 @@ index d913953944bc43..daa8aa3d964ed0 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index a87d452ed39446..c03aba6e415873 100644
+index 0125ba8e0f56be..2bc0b65f1035ed 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -9,6 +9,7 @@ import (
@@ -2860,15 +2870,16 @@ index bc85bf170eb2eb..51ea2b8f994d4a 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 16a25b602b6966..57067754466b0a 100644
+index 6eab28497a3f2e..81296762c7e231 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
-@@ -5,11 +5,14 @@
+@@ -5,12 +5,15 @@
  package buildcfg
  
  import (
 +	"errors"
  	"fmt"
+ 	"os"
  	"reflect"
 +	"slices"
  	"strings"
@@ -2878,7 +2889,7 @@ index 16a25b602b6966..57067754466b0a 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -177,6 +180,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -192,6 +195,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -2950,7 +2961,7 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +	return boring_runtime_arg0()
 +}
 diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index 69d49169446d1c..e6d344ff67a8aa 100644
+index 69d49169446d1c..0e6360a353f07f 100644
 --- a/src/syscall/exec_linux_test.go
 +++ b/src/syscall/exec_linux_test.go
 @@ -300,7 +300,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
@@ -2958,7 +2969,7 @@ index 69d49169446d1c..e6d344ff67a8aa 100644
  
  	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
 -	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
-+	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0", "GOEXPERIMENT=nosystemcrypto")
++	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0", "MS_GO_NOSYSTEMCRYPTO=1")
  	if o, err := cmd.CombinedOutput(); err != nil {
  		t.Fatalf("%v: %v\n%s", cmd, err, o)
  	}

From 0213ae5043040c427dc69ad3a2356d93b32ef077 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Oct 2025 10:46:07 +0000
Subject: [PATCH 495/887] build(deps): bump golang.org/x/net from 0.44.0 to
 0.45.0 in /eng/_util (#1897)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/net/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 90f988fd592..a9380f941cb 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v1.0.0
-	golang.org/x/net v0.44.0
+	golang.org/x/net v0.45.0
 	golang.org/x/sys v0.36.0
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index d3b6e5be70d..07b0fdbd57f 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,8 +11,8 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
 github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
-golang.org/x/net v0.44.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
+golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
 golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
 golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.29.0 h1:1neNs90w9YzJ9BocxfsQNHKuAT4pkghyXc4nhZ6sJvk=

From ccb7904b9c526f22a8ab6866fe91f77312d35fd2 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 26 Sep 2025 16:02:36 +0000
Subject: [PATCH 496/887] Update submodule to latest master (dd1d597c): Revert
 "cmd/internal/obj/loong64: use the MOVVP instruction to optimize prologue"

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 371c1d2fcb4..dd1d597c3ac 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 371c1d2fcb48fa79ac30812231ecef0e26f539dc
+Subproject commit dd1d597c3ac049de7865a9cb98627fde0baacc69

From 638d619782b94a71eed49fc94c29abaca6c3e6d1 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 26 Sep 2025 17:31:55 +0100
Subject: [PATCH 497/887] resolve merge conflicts

---
 patches/0004-Use-crypto-backends.patch | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4cf297f2d67..a0c0884fddb 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -254,7 +254,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 1a1bc186755f4f..bc452a7f597baf 100644
+index 623acc1ad48997..2ee424f5fb585e 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,8 @@ var hostobj []Hostobj
@@ -1361,7 +1361,7 @@ index c24622ce5ac3c2..bdc5a63e204922 100644
 +	}
  }
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
-index f00e9c80d3c86a..e24b6cbbd00f68 100644
+index 37fd96a2d9d0b9..6d4b190831d57d 100644
 --- a/src/crypto/internal/cryptotest/hash.go
 +++ b/src/crypto/internal/cryptotest/hash.go
 @@ -5,7 +5,6 @@
@@ -1376,8 +1376,8 @@ index f00e9c80d3c86a..e24b6cbbd00f68 100644
  // TestHash performs a set of tests on hash.Hash implementations, checking the
  // documented requirements of Write, Sum, Reset, Size, and BlockSize.
  func TestHash(t *testing.T, mh MakeHash) {
--	if boring.Enabled || fips140.Version() == "v1.0" {
-+	if fips140.Version() == "v1.0" {
+-	if boring.Enabled || fips140.Version() == "v1.0.0" {
++	if fips140.Version() == "v1.0.0" {
  		testhash.TestHashWithoutClone(t, testhash.MakeHash(mh))
  		return
  	}
@@ -1395,7 +1395,7 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 5871bde8be4b2b..3ebefad8898bf2 100644
+index 47a42cce1bcc22..7e04972a68b570 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1419,7 +1419,7 @@ index 5871bde8be4b2b..3ebefad8898bf2 100644
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
-index 08d60933ef38b8..8840db05bde791 100644
+index 52fc9d34886003..9afaf522df475c 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
 +++ b/src/crypto/internal/fips140test/fips_test.go
 @@ -15,7 +15,7 @@ package fipstest
@@ -2029,7 +2029,7 @@ index b6b94a79bbca51..32abaf174bfb5b 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index d471ecbf8375f3..4600fc39191366 100644
+index 0d5b6e08f0e223..b4d4c819fe3deb 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (

From 41c85c2fddddff2f4679454bdfed1d050ff7eb2e Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 7 Oct 2025 15:28:45 +0200
Subject: [PATCH 498/887] updatre submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index dd1d597c3ac..4c0fd3a2b45 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit dd1d597c3ac049de7865a9cb98627fde0baacc69
+Subproject commit 4c0fd3a2b45675a581ef6fa273a221d7131b5647

From 0921ce79de9c449964a13eef5a15d812d2c97d6b Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Oct 2025 12:47:11 +0200
Subject: [PATCH 499/887] fix conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 26 +++++++++----------
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 18 ++++++-------
 ...nt-ms_tls_config_schannel-experiment.patch | 10 +++----
 3 files changed, 27 insertions(+), 27 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index a93604ee4b0..5b9b2ae585b 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -261,7 +261,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index e6431c0f20adf8..287fa9c6ceea6b 100644
+index 017883a7870cd2..f3aa8b075bb51e 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -274,7 +274,7 @@ index e6431c0f20adf8..287fa9c6ceea6b 100644
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.28.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 5a70558fe9cef0..4e06980a282694 100644
+index 0906ffcc605854..a7292cfc44a710 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -1867,7 +1867,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 37cd448bc9e8c0..c48c2757435845 100644
+index 133271355f2caf..d43e982ea529bc 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -1917,7 +1917,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 4b400fe87189d1..d5505e8b8871b4 100644
+index f134f0c7b571da..027cdc1ed79e04 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1931,7 +1931,7 @@ index 4b400fe87189d1..d5505e8b8871b4 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index c90970a9cbaaad..df9d1d1399c4cc 100644
+index f24bea029a2239..bd4418e98014aa 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -1943,12 +1943,12 @@ index c90970a9cbaaad..df9d1d1399c4cc 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.42.0 h1:chiH31gIWm57EkTXpwnqf8qeuMUi0yekh6mT2AvFlqI=
  golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
- golang.org/x/net v0.44.0 h1:evd8IRDyfNBMBTTY5XRF1vaZlD+EmWx6x8PkhR04H/I=
+ golang.org/x/net v0.44.1-0.20251002015445-edb764c2296f h1:vNklv+oJQSYNGsWXHoCPi2MHMcpj9/Q7aBhvvfnJvGg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d50a98d34c9092..bc85bf170eb2eb 100644
+index c76b254b23ffc8..c8402799726bf5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -521,6 +521,24 @@ var depsRules = `
+@@ -526,6 +526,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -1973,7 +1973,7 @@ index d50a98d34c9092..bc85bf170eb2eb 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -532,13 +550,12 @@ var depsRules = `
+@@ -537,13 +555,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -1991,7 +1991,7 @@ index d50a98d34c9092..bc85bf170eb2eb 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -559,6 +576,10 @@ var depsRules = `
+@@ -564,6 +581,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2002,7 +2002,7 @@ index d50a98d34c9092..bc85bf170eb2eb 100644
  	CRYPTO, FMT, math/big
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -893,7 +914,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -898,7 +919,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2011,7 +2011,7 @@ index d50a98d34c9092..bc85bf170eb2eb 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -903,7 +924,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -908,7 +929,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -21404,7 +21404,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index cf5c27c74579d0..73f67512f60ed3 100644
+index a2a0c0b3e85f23..3b04f684e7203c 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,20 @@
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 207102eef87..96253e72d7a 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 707776b374b0d4..6eab28497a3f2e 100644
+index fb6b5859e31a1e..365fb07dc48b5b 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -437,15 +437,15 @@ index 707776b374b0d4..6eab28497a3f2e 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -83,6 +109,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RegabiArgs:           regabiSupported,
- 		Dwarf5:               dwarf5Supported,
- 		RandomizedHeapBase64: true,
+@@ -90,6 +102,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RandomizedHeapBase64:  true,
+ 		SizeSpecializedMalloc: true,
+ 		GreenTeaGC:            greenTeaGCSupported,
 +		SystemCrypto:         systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -124,6 +151,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -131,6 +144,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -460,7 +460,7 @@ index 707776b374b0d4..6eab28497a3f2e 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -137,6 +172,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -144,6 +165,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -471,7 +471,7 @@ index 707776b374b0d4..6eab28497a3f2e 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -150,6 +189,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -157,6 +182,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -594,7 +594,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 84dbf594b8792a..372ec1f019212b 100644
+index 07aa1d0aeed15d..643700e55830e4 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,24 @@ type Flags struct {
diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 3e9eea88793..ea7399397e5 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -553,13 +553,13 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 372ec1f019212b..7fef3145b3be87 100644
+index 643700e55830e4..c7df9d70ab4a27 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -136,4 +136,12 @@ type Flags struct {
  
- 	// SizeSpecializedMalloc enables malloc implementations that are specialized per size class.
- 	SizeSpecializedMalloc bool
+ 	// GoroutineLeakProfile enables the collection of goroutine leak profiles.
+ 	GoroutineLeakProfile bool
 +
 +	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
 +	// suites according to the Windows Schannel settings.
@@ -640,7 +640,7 @@ index 09be2eb0807932..b74b311279e81f 100644
 +	}
 +}
 diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index 90cf0b92a49bc4..db43b5da72f00e 100644
+index 70c4d76dff0d0f..93e38cd3b9e761 100644
 --- a/src/internal/syscall/windows/zsyscall_windows.go
 +++ b/src/internal/syscall/windows/zsyscall_windows.go
 @@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
@@ -660,7 +660,7 @@ index 90cf0b92a49bc4..db43b5da72f00e 100644
  	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
  	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
  	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -242,6 +245,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+@@ -243,6 +246,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
  	return
  }
  

From a52ce67fdf83394fab0e9b0a91a63464484cbd49 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Oct 2025 11:08:41 +0000
Subject: [PATCH 500/887] build(deps): bump github/codeql-action from 3.30.5 to
 4.30.7 (#1898)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.30.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3599b3baa15b485a2e49ef411a7a4bb2452e7f93...e296a935590eb16afc0c0108289f68c87e2a89a5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8f8e0092dbb..973d6368d27 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/init@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/autobuild@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/analyze@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
         with:
           category: /language:go

From 52d22fc08847c783c7ace6c5f88e83daa9766118 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Oct 2025 14:58:00 +0200
Subject: [PATCH 501/887] fix tests

---
 patches/0004-Use-crypto-backends.patch | 41 +++++++++++++++++++-------
 1 file changed, 31 insertions(+), 10 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index a0c0884fddb..e1338be9e99 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -43,6 +43,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
+ src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
@@ -91,7 +92,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 87 files changed, 1162 insertions(+), 116 deletions(-)
+ 88 files changed, 1164 insertions(+), 116 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -117,7 +118,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 8cf96bd906ea36..41377c1e002ae6 100644
+index 6c31b623897048..6db889494bae8e 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -254,10 +255,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 623acc1ad48997..2ee424f5fb585e 100644
+index 5f5ebfc1d9855c..5272a7aed714df 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1176,6 +1176,8 @@ var hostobj []Hostobj
+@@ -1180,6 +1180,8 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -1418,6 +1419,26 @@ index 47a42cce1bcc22..7e04972a68b570 100644
  	const (
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
+diff --git a/src/crypto/internal/fips140test/cast_test.go b/src/crypto/internal/fips140test/cast_test.go
+index 5bbc964b617b2b..4b95749788027c 100644
+--- a/src/crypto/internal/fips140test/cast_test.go
++++ b/src/crypto/internal/fips140test/cast_test.go
+@@ -148,6 +148,7 @@ func TestConditionals(t *testing.T) {
+ }
+ 
+ func TestCASTPasses(t *testing.T) {
++	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
+ 	moduleStatus(t)
+ 	testenv.MustHaveExec(t)
+ 	cryptotest.MustSupportFIPS140(t)
+@@ -172,6 +173,7 @@ func TestCASTPasses(t *testing.T) {
+ }
+ 
+ func TestCASTFailures(t *testing.T) {
++	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
+ 	moduleStatus(t)
+ 	testenv.MustHaveExec(t)
+ 	cryptotest.MustSupportFIPS140(t)
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
 index 52fc9d34886003..9afaf522df475c 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
@@ -2547,7 +2568,7 @@ index 7018bb2336b8f3..d5e02272d7afe1 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 1e0b5f06672d15..9f72e2376e42ce 100644
+index 088c66fadb2a44..ca33ba92665d44 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2568,7 +2589,7 @@ index 1e0b5f06672d15..9f72e2376e42ce 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index dbbdb5d6a2b268..b97b6eef0b0c22 100644
+index c5b0552cae6134..24777e1797d1c6 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,10 +11,10 @@ import (
@@ -2901,10 +2922,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 51ea2b8f994d4a..c0bfad417f0dfa 100644
+index 31eb47ae249a0e..6f6b0aa62485ac 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -519,7 +519,7 @@ var depsRules = `
+@@ -524,7 +524,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2913,7 +2934,7 @@ index 51ea2b8f994d4a..c0bfad417f0dfa 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -544,6 +544,8 @@ var depsRules = `
+@@ -549,6 +549,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2922,7 +2943,7 @@ index 51ea2b8f994d4a..c0bfad417f0dfa 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -586,6 +588,7 @@ var depsRules = `
+@@ -591,6 +593,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From da5b83a5356565f3bfe8aa2b427ff1947b6cbbf9 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 8 Oct 2025 16:02:51 +0000
Subject: [PATCH 502/887] Update submodule to latest master (e5d004c7):
 net/http: update HTTP/2 documentation to reference new config features

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4c0fd3a2b45..e5d004c7a87 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4c0fd3a2b45675a581ef6fa273a221d7131b5647
+Subproject commit e5d004c7a8777c8333b965266994a8fd2cd45394

From d8d0d335e6c70a2ab3e56b48ec1c9019f58516de Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 9 Oct 2025 11:18:29 +0100
Subject: [PATCH 503/887] resolve conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 14 +++++------
 ...03-Implement-crypto-internal-backend.patch | 24 +++++++++----------
 2 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 5b9b2ae585b..79b21ddf8a5 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -1945,10 +1945,10 @@ index f24bea029a2239..bd4418e98014aa 100644
  golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
  golang.org/x/net v0.44.1-0.20251002015445-edb764c2296f h1:vNklv+oJQSYNGsWXHoCPi2MHMcpj9/Q7aBhvvfnJvGg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index c76b254b23ffc8..c8402799726bf5 100644
+index 8966254d0d9110..7981fbcb6dd57d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -526,6 +526,24 @@ var depsRules = `
+@@ -528,6 +528,24 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -1973,7 +1973,7 @@ index c76b254b23ffc8..c8402799726bf5 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -537,13 +555,12 @@ var depsRules = `
+@@ -539,13 +557,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -1991,7 +1991,7 @@ index c76b254b23ffc8..c8402799726bf5 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -564,6 +581,10 @@ var depsRules = `
+@@ -566,6 +583,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -1999,10 +1999,10 @@ index c76b254b23ffc8..c8402799726bf5 100644
 +	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
 +	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
 +
- 	CRYPTO, FMT, math/big
+ 	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -898,7 +919,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -900,7 +921,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2011,7 +2011,7 @@ index c76b254b23ffc8..c8402799726bf5 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -908,7 +929,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -910,7 +931,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index ee4a182d327..56d55687af0 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -452,7 +452,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index 1f791546f90088..d20890b4e70fae 100644
+index 135d7579d65dff..687a781693b779 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
@@ -466,7 +466,7 @@ index 1f791546f90088..d20890b4e70fae 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index 120ef5339bede0..b7b145fdfc9972 100644
+index e25c06a8f046bd..6192880b654cb5 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
 @@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
@@ -481,7 +481,7 @@ index 120ef5339bede0..b7b145fdfc9972 100644
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
 @@ -311,8 +315,11 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
- 	modload.RootMode = modload.NoRoot
+ 	modload.LoaderState.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
 +		// Now that the tool is built, revert the GOEXPERIMENT
@@ -2798,10 +2798,10 @@ index 00000000000000..13782a8241b99a
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index bc85bf170eb2eb..51ea2b8f994d4a 100644
+index 7981fbcb6dd57d..e1dd6331d96052 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -350,7 +350,7 @@ var depsRules = `
+@@ -355,7 +355,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -2810,7 +2810,7 @@ index bc85bf170eb2eb..51ea2b8f994d4a 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -539,6 +539,11 @@ var depsRules = `
+@@ -546,6 +546,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2822,7 +2822,7 @@ index bc85bf170eb2eb..51ea2b8f994d4a 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -547,16 +552,27 @@ var depsRules = `
+@@ -554,16 +559,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2852,16 +2852,16 @@ index bc85bf170eb2eb..51ea2b8f994d4a 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -580,8 +596,14 @@ var depsRules = `
+@@ -587,8 +603,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
--	CRYPTO, FMT, math/big
+-	CRYPTO, FMT, math/big, internal/saferio
 -	< crypto/internal/boring/bbig
 +	FMT, math/big, crypto/internal/boring
 +	< crypto/internal/boring/bbig;
 +
-+	CRYPTO, FMT, math/big,
++	CRYPTO, FMT, math/big, internal/saferio,
 +	github.com/golang-fips/openssl/v2/bbig,
 +	github.com/microsoft/go-crypto-darwin/bbig,
 +	github.com/microsoft/go-crypto-winnative/cng/bbig
@@ -2870,7 +2870,7 @@ index bc85bf170eb2eb..51ea2b8f994d4a 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 6eab28497a3f2e..81296762c7e231 100644
+index 2c0995a449694a..19027a6be32850 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -2889,7 +2889,7 @@ index 6eab28497a3f2e..81296762c7e231 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -192,6 +195,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -199,6 +202,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}

From b5066f3a5282cb40baca2a00c1def6ea6ea08eea Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 9 Oct 2025 10:44:13 +0000
Subject: [PATCH 504/887] build(deps): bump golang.org/x/sys from 0.36.0 to
 0.37.0 in /eng/_util (#1902)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/sys/compare/v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index a9380f941cb..df41b1f9ff3 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v1.0.0
 	golang.org/x/net v0.45.0
-	golang.org/x/sys v0.36.0
+	golang.org/x/sys v0.37.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 07b0fdbd57f..8e786ad9ac1 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -13,8 +13,8 @@ github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6O
 github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
 golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
-golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k=
-golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
+golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.29.0 h1:1neNs90w9YzJ9BocxfsQNHKuAT4pkghyXc4nhZ6sJvk=
 golang.org/x/text v0.29.0/go.mod h1:7MhJOA9CD2qZyOKYazxdYMF85OwPdEr9jTtBpO7ydH4=
 golang.org/x/tools v0.36.0 h1:kWS0uv/zsvHEle1LbV5LE8QujrxB3wfQyxHfhOk0Qkg=

From a7ce6adb222406c8b5e97d1ad7907a9d333d717d Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Oct 2025 14:41:51 +0200
Subject: [PATCH 505/887] fix TestCertificateChainSignedByECDSA

---
 patches/0004-Use-crypto-backends.patch | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index e1338be9e99..9079fd82565 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -84,6 +84,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
+ src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |   5 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
@@ -92,7 +93,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 88 files changed, 1164 insertions(+), 116 deletions(-)
+ 89 files changed, 1164 insertions(+), 117 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2921,6 +2922,19 @@ index e7369542a73270..ff52175e4ac636 100644
  		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
  	}
  }
+diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
+index 5595f99ea5e43a..e1a87fa839033a 100644
+--- a/src/crypto/x509/verify_test.go
++++ b/src/crypto/x509/verify_test.go
+@@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
+ 	t.Helper()
+ 	var params dsa.Parameters
+ 	if err := dsa.GenerateParameters(&params, rand.Reader, dsa.L1024N160); err != nil {
+-		t.Fatal(err)
++		t.Skip(err) // CBL-Mariner doesn't support dsa.L1024N160, skip test
+ 	}
+ 
+ 	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 31eb47ae249a0e..6f6b0aa62485ac 100644
 --- a/src/go/build/deps_test.go

From 1906d37e26d6d80dfeb79750eac03f67fc65e9f7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 9 Oct 2025 11:20:36 +0000
Subject: [PATCH 506/887] build(deps): bump golang.org/x/net from 0.45.0 to
 0.46.0 in /eng/_util (#1901)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/net/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  4 ++--
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index df41b1f9ff3..db726b541e6 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,12 +10,12 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
 	github.com/microsoft/go-infra/goinstallscript v1.0.0
-	golang.org/x/net v0.45.0
+	golang.org/x/net v0.46.0
 	golang.org/x/sys v0.37.0
 )
 
 require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/text v0.29.0 // indirect
+	golang.org/x/text v0.30.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 8e786ad9ac1..d53ccd4f10d 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -11,11 +11,11 @@ github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQU
 github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
 github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
 github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.45.0 h1:RLBg5JKixCy82FtLJpeNlVM0nrSqpCRYzVU1n8kj0tM=
-golang.org/x/net v0.45.0/go.mod h1:ECOoLqd5U3Lhyeyo/QDCEVQ4sNgYsqvCZ722XogGieY=
+golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
+golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
 golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
 golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.29.0 h1:1neNs90w9YzJ9BocxfsQNHKuAT4pkghyXc4nhZ6sJvk=
-golang.org/x/text v0.29.0/go.mod h1:7MhJOA9CD2qZyOKYazxdYMF85OwPdEr9jTtBpO7ydH4=
-golang.org/x/tools v0.36.0 h1:kWS0uv/zsvHEle1LbV5LE8QujrxB3wfQyxHfhOk0Qkg=
-golang.org/x/tools v0.36.0/go.mod h1:WBDiHKJK8YgLHlcQPYQzNCkUxUypCaa5ZegCVutKm+s=
+golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
+golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
+golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=

From 657b6dd798560f437bb89bebbb761f4e7d067084 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 10 Oct 2025 02:04:45 -0700
Subject: [PATCH 507/887] Update pools to fix 1ES pool container job issue
 (#1904)

---
 eng/pipeline/stages/pool-2.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 6b3b72b424a..1656506a99c 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -46,12 +46,12 @@ stages:
           # The arm64 pool doesn't need demands: it runs on a uniform pool.
           ${{ if ne(parameters.name, 'Docker-Linux-Arm-Internal') }}:
             ${{ if parameters.ctx['Go1ESOfficial'] }}:
-              image: 1es-ubuntu-2004
+              image: 1es-ubuntu-2204
               os: linux
             ${{ elseif parameters.public }}:
               demands: ImageOverride -equals 1es-ubuntu-2004-open
             ${{ else }}:
-              demands: ImageOverride -equals 1es-ubuntu-2004
+              demands: ImageOverride -equals 1es-ubuntu-2204
               os: linux
 
         ${{ elseif eq(parameters.os, 'darwin') }}:

From 80d95bf425cc115439ae164f60790ee8004e09d8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 10 Oct 2025 16:02:32 +0000
Subject: [PATCH 508/887] Update submodule to latest master (5368e774):
 net/http: run TestRequestWriteTransport with fake time to avoid flakes

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e5d004c7a87..5368e774297 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e5d004c7a8777c8333b965266994a8fd2cd45394
+Subproject commit 5368e7742971c8dbcb75a405eb2319e71fb1d0c7

From 0e7b967496fbb396bd0b9b3649f225dae2421e9e Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 13 Oct 2025 12:17:19 +0100
Subject: [PATCH 509/887] resolve 3-way merge conflicts

---
 .../0002-Add-crypto-backend-GOEXPERIMENTs.patch    | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 96253e72d7a..ea5aa831294 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -387,7 +387,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index fb6b5859e31a1e..365fb07dc48b5b 100644
+index f1a1d8632ef507..0d1e9dd6d1171c 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -437,15 +437,15 @@ index fb6b5859e31a1e..365fb07dc48b5b 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -90,6 +102,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		RandomizedHeapBase64:  true,
  		SizeSpecializedMalloc: true,
- 		GreenTeaGC:            greenTeaGCSupported,
-+		SystemCrypto:         systemCryptoSupported,
+ 		GreenTeaGC:            true,
++		SystemCrypto:          systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -131,6 +144,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -126,6 +153,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -460,7 +460,7 @@ index fb6b5859e31a1e..365fb07dc48b5b 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -144,6 +165,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -139,6 +174,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -471,7 +471,7 @@ index fb6b5859e31a1e..365fb07dc48b5b 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -157,6 +182,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -152,6 +191,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}

From e47371a7de7bdd271f304f6d5c4ccc61a253459f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Oct 2025 11:30:09 +0000
Subject: [PATCH 510/887] build(deps): bump github/codeql-action from 4.30.7 to
 4.30.8 (#1909)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.7 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e296a935590eb16afc0c0108289f68c87e2a89a5...f443b600d91635bebf5b0d9ebc620189c0d6fba5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 973d6368d27..ab7105ef4d2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
+        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
+        uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
+        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           category: /language:go

From d3732a7c5a19c93c5f33c7dab71b99467186294a Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 14 Oct 2025 10:06:19 +0200
Subject: [PATCH 511/887] upgrade openssl backend (#1913)

---
 .../0001-Vendor-external-dependencies.patch   | 12884 +++++++++++-----
 1 file changed, 9127 insertions(+), 3757 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 79b21ddf8a5..b47eb55c77b 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -18,15 +18,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-infra/telemetry/config/config.json     |   70 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  169 ++
- .../internal/appinsights/inmemorychannel.go   |  341 +++
+ .../telemetry/internal/appinsights/client.go  |  169 +
+ .../internal/appinsights/inmemorychannel.go   |  341 ++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
  .../internal/contracts/response.go            |   32 +
  .../internal/appinsights/jsonserializer.go    |   33 +
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
- .../internal/appinsights/transmitter.go       |  172 ++
+ .../internal/appinsights/transmitter.go       |  172 +
  .../telemetry/internal/config/config.go       |   63 +
  .../telemetry/internal/telemetry/proginfo.go  |   32 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
@@ -35,48 +35,91 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
- src/go/build/deps_test.go                     |   35 +-
+ src/go/build/deps_test.go                     |   36 +-
  src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 +
- .../github.com/golang-fips/openssl/v2/aes.go  |  146 ++
+ .../github.com/golang-fips/openssl/v2/aes.go  |  145 +
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../golang-fips/openssl/v2/cipher.go          |  654 ++++++
- .../golang-fips/openssl/v2/const.go           |   93 +
- .../github.com/golang-fips/openssl/v2/des.go  |  113 +
- .../github.com/golang-fips/openssl/v2/dsa.go  |  309 +++
- .../github.com/golang-fips/openssl/v2/ec.go   |   67 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  306 +++
- .../golang-fips/openssl/v2/ecdsa.go           |  226 ++
- .../golang-fips/openssl/v2/ed25519.go         |  229 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  590 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  463 ++++
+ .../golang-fips/openssl/v2/cipher.go          |  652 ++++
+ .../golang-fips/openssl/v2/const.go           |   92 +
+ .../github.com/golang-fips/openssl/v2/des.go  |  112 +
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  308 ++
+ .../github.com/golang-fips/openssl/v2/ec.go   |   66 +
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  305 ++
+ .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
+ .../golang-fips/openssl/v2/ed25519.go         |  228 ++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  589 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  462 +++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
- .../github.com/golang-fips/openssl/v2/hkdf.go |  444 ++++
- .../github.com/golang-fips/openssl/v2/hmac.go |  283 +++
- .../github.com/golang-fips/openssl/v2/init.go |  157 ++
- .../golang-fips/openssl/v2/init_unix.go       |   31 +
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  443 +++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
+ .../github.com/golang-fips/openssl/v2/init.go |  156 +
+ .../golang-fips/openssl/v2/init_cgo_unix.go   |   31 +
+ .../golang-fips/openssl/v2/init_nocgo_unix.go |   32 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
- .../openssl/v2/internal/ossl/errors.go        |  125 +
- .../openssl/v2/internal/ossl/ossl.go          |   81 +
- .../openssl/v2/internal/ossl/shims.h          |  399 ++++
- .../openssl/v2/internal/ossl/zossl.c          | 2061 +++++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         | 1329 +++++++++++
- .../openssl/v2/internal/ossl/zossl.h          |  337 +++
- .../openssl/v2/internal/ossl/zossl_go124.go   |   37 +
- .../golang-fips/openssl/v2/openssl.go         |  384 +++
- .../golang-fips/openssl/v2/params.go          |  185 ++
- .../golang-fips/openssl/v2/pbkdf2.go          |   55 +
+ .../openssl/v2/internal/fakecgo/abi_amd64.h   |   34 +
+ .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
+ .../openssl/v2/internal/fakecgo/asm_amd64.s   |   29 +
+ .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
+ .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
+ .../openssl/v2/internal/fakecgo/doc.go        |   32 +
+ .../openssl/v2/internal/fakecgo/fakecgo.go    |   27 +
+ .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
+ .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
+ .../openssl/v2/internal/fakecgo/go_linux.go   |  100 +
+ .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
+ .../openssl/v2/internal/fakecgo/go_util.go    |   37 +
+ .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
+ .../openssl/v2/internal/fakecgo/libcgo.go     |   38 +
+ .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
+ .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
+ .../openssl/v2/internal/fakecgo/linux.go      |   34 +
+ .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
+ .../openssl/v2/internal/fakecgo/symbols.go    |  225 ++
+ .../v2/internal/fakecgo/symbols_darwin.go     |   30 +
+ .../v2/internal/fakecgo/symbols_linux.go      |  277 ++
+ .../v2/internal/fakecgo/trampolines_amd64.s   |  104 +
+ .../v2/internal/fakecgo/trampolines_arm64.s   |   72 +
+ .../v2/internal/fakecgo/trampolines_stubs.s   |   94 +
+ .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
+ .../fakecgo/ztrampolines_linux_arm64.s        |  103 +
+ .../openssl/v2/internal/ossl/asm_amd64.s      |   73 +
+ .../openssl/v2/internal/ossl/asm_arm64.s      |   83 +
+ .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
+ .../openssl/v2/internal/ossl/errors_cgo.go    |  119 +
+ .../openssl/v2/internal/ossl/errors_nocgo.go  |   99 +
+ .../openssl/v2/internal/ossl/ossl.go          |   59 +
+ .../openssl/v2/internal/ossl/ossl_cgo.go      |   39 +
+ .../openssl/v2/internal/ossl/ossl_nocgo.go    |   34 +
+ .../openssl/v2/internal/ossl/shims.h          |  399 +++
+ .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
+ .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
+ .../v2/internal/ossl/syscall_nocgo_unix.go    |   55 +
+ .../v2/internal/ossl/syscall_nocgo_windows.go |   28 +
+ .../openssl/v2/internal/ossl/zdl.s            |   51 +
+ .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
+ .../openssl/v2/internal/ossl/zossl.c          | 1924 +++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   57 +
+ .../openssl/v2/internal/ossl/zossl.h          |  335 ++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1275 ++++++++
+ .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2852 +++++++++++++++++
+ .../golang-fips/openssl/v2/openssl.go         |  363 +++
+ .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
+ .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
+ .../golang-fips/openssl/v2/params.go          |  184 ++
+ .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
  .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
- .../openssl/v2/providersymcrypt.go            |  338 +++
- .../github.com/golang-fips/openssl/v2/rand.go |   22 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |   69 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  366 +++
- .../golang-fips/openssl/v2/tls1prf.go         |  159 ++
+ .../openssl/v2/providersymcrypt.go            |  338 ++
+ .../github.com/golang-fips/openssl/v2/rand.go |   21 +
+ .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  365 +++
+ .../golang-fips/openssl/v2/tls1prf.go         |  158 +
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
@@ -90,17 +133,17 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/hashclone.go           |   17 +
  .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
- .../internal/cryptokit/hmac.go                |  146 ++
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
+ .../internal/cryptokit/hmac.go                |  146 +
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 ++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  122 +
  .../microsoft/go-crypto-darwin/xcrypto/des.go |  117 +
  .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   32 +
- .../go-crypto-darwin/xcrypto/ecdh.go          |  135 ++
+ .../go-crypto-darwin/xcrypto/ecdh.go          |  135 +
  .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
  .../go-crypto-darwin/xcrypto/ed25519.go       |  100 +
- .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 +++
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 ++
  .../go-crypto-darwin/xcrypto/hash.go          |   68 +
  .../go-crypto-darwin/xcrypto/hkdf.go          |   66 +
  .../go-crypto-darwin/xcrypto/hmac.go          |   21 +
@@ -110,16 +153,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  194 ++
  .../go-crypto-darwin/xcrypto/xcrypto.go       |   49 +
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  427 ++++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  427 +++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
- .../microsoft/go-crypto-winnative/cng/cng.go  |  131 ++
+ .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 +++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
- .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
+ .../go-crypto-winnative/cng/ecdsa.go          |  169 +
+ .../microsoft/go-crypto-winnative/cng/hash.go |  325 ++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
@@ -128,16 +171,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
- .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 ++++
- .../microsoft/go-crypto-winnative/cng/sha3.go |  310 +++
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
+ .../microsoft/go-crypto-winnative/cng/sha3.go |  310 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
  .../internal/bcrypt/bcrypt_windows.go         |  368 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
- .../internal/bcrypt/zsyscall_windows.go       |  412 ++++
+ .../internal/bcrypt/zsyscall_windows.go       |  412 +++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
- src/vendor/modules.txt                        |   17 +
- 129 files changed, 19261 insertions(+), 7 deletions(-)
+ src/vendor/modules.txt                        |   18 +
+ 172 files changed, 24287 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -182,16 +225,59 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
@@ -1917,7 +2003,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f134f0c7b571da..027cdc1ed79e04 100644
+index f134f0c7b571da..7a86899914be85 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -1926,17 +2012,17 @@ index f134f0c7b571da..027cdc1ed79e04 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index f24bea029a2239..bd4418e98014aa 100644
+index f24bea029a2239..6f63f50be10d91 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f h1:fIaGpyow9azEUBACTdiDwF4oFCxNhtfb3Yy7GstINQI=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b h1:Fc+ydbkWZuwSwF6RK20jaBJQHn87SBQ6PAAFk14xAbs=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05 h1:I6L7NzERXHhyif6YpLgL8GTvSbF8ac3j1bwUBDri9Fo=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
@@ -1945,10 +2031,10 @@ index f24bea029a2239..bd4418e98014aa 100644
  golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
  golang.org/x/net v0.44.1-0.20251002015445-edb764c2296f h1:vNklv+oJQSYNGsWXHoCPi2MHMcpj9/Q7aBhvvfnJvGg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 8966254d0d9110..7981fbcb6dd57d 100644
+index 8966254d0d9110..3d726ec66b3c10 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -528,6 +528,24 @@ var depsRules = `
+@@ -528,6 +528,25 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -1961,6 +2047,7 @@ index 8966254d0d9110..7981fbcb6dd57d 100644
 +	crypto/subtle,
 +	hash,
 +	crypto/cipher
++	< github.com/golang-fips/openssl/v2/internal/fakecgo
 +	< github.com/golang-fips/openssl/v2/internal/ossl
 +	< github.com/golang-fips/openssl/v2
 +	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
@@ -1973,7 +2060,7 @@ index 8966254d0d9110..7981fbcb6dd57d 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -539,13 +557,12 @@ var depsRules = `
+@@ -539,13 +558,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -1991,7 +2078,7 @@ index 8966254d0d9110..7981fbcb6dd57d 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -566,6 +583,10 @@ var depsRules = `
+@@ -566,6 +584,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2002,7 +2089,7 @@ index 8966254d0d9110..7981fbcb6dd57d 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -900,7 +921,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -900,7 +922,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2011,7 +2098,7 @@ index 8966254d0d9110..7981fbcb6dd57d 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -910,7 +931,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -910,7 +932,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -2159,15 +2246,14 @@ index 00000000000000..f63cf39e70c064
 +This project adopts the Go code of conduct: https://go.dev/conduct.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 new file mode 100644
-index 00000000000000..3b3e247e86c8ae
+index 00000000000000..71b94b31aa9d3f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
-@@ -0,0 +1,146 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,145 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto/cipher"
 +	"errors"
@@ -2371,16 +2457,14 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..e2b90fc0e9bfd4
+index 00000000000000..8d8f12fecda346
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,654 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,652 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
-+
 +import (
 +	"crypto/cipher"
 +	"errors"
@@ -3031,13 +3115,12 @@ index 00000000000000..e2b90fc0e9bfd4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..9f99a9dc456242
+index 00000000000000..0bd0e69694b65c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,93 @@
+@@ -0,0 +1,92 @@
 +package openssl
 +
-+import "C"
 +import "unsafe"
 +
 +// cString is a null-terminated string,
@@ -3130,15 +3213,14 @@ index 00000000000000..9f99a9dc456242
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..78ecb9888e18cb
+index 00000000000000..177c5bdb1afa2a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-@@ -0,0 +1,113 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,112 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto/cipher"
 +	"errors"
@@ -3249,15 +3331,14 @@ index 00000000000000..78ecb9888e18cb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..37663591d7568a
+index 00000000000000..695dfbda74b807
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,309 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,308 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"runtime"
 +	"unsafe"
@@ -3564,15 +3645,14 @@ index 00000000000000..37663591d7568a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..1a4e89dc5790b6
+index 00000000000000..86009c7f35be5f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,67 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,66 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import "github.com/golang-fips/openssl/v2/internal/ossl"
 +
 +func curveNID(curve string) int32 {
@@ -3637,15 +3717,14 @@ index 00000000000000..1a4e89dc5790b6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..d80d8b153f5a84
+index 00000000000000..13c8e1e1181f9d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,306 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,305 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"errors"
 +	"runtime"
@@ -3739,7 +3818,7 @@ index 00000000000000..d80d8b153f5a84
 +		if err != nil {
 +			return nil, err
 +		}
-+		bytes = C.GoBytes(unsafe.Pointer(cbytes), C.int(n))
++		bytes = goBytes(unsafe.Pointer(cbytes), n)
 +		cryptoFree(unsafe.Pointer(cbytes))
 +	default:
 +		panic(errUnsupportedVersion())
@@ -3949,15 +4028,14 @@ index 00000000000000..d80d8b153f5a84
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..e4d504de2146ba
+index 00000000000000..3cfe69f0445ee4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,226 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,225 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto"
 +	"errors"
@@ -4181,15 +4259,14 @@ index 00000000000000..e4d504de2146ba
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..50fd06e5c89fbd
+index 00000000000000..d160bbe220c927
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,229 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,228 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"errors"
 +	"runtime"
@@ -4416,15 +4493,14 @@ index 00000000000000..50fd06e5c89fbd
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..a6ad55906ecd8a
+index 00000000000000..1465ae67339f8d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,590 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,589 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto"
 +	"errors"
@@ -4604,7 +4680,7 @@ index 00000000000000..a6ad55906ecd8a
 +	case 3:
 +		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
 +			cname := ossl.OSSL_PROVIDER_get0_name(prov)
-+			switch C.GoString((*C.char)(unsafe.Pointer(cname))) {
++			switch goString(cname) {
 +			case "default":
 +				hash.provider = providerOSSLDefault
 +				hash.marshallable = hash.magic != ""
@@ -5012,15 +5088,14 @@ index 00000000000000..a6ad55906ecd8a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..3c4db5fe3f851d
+index 00000000000000..9c6b9fcd4fe922
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,463 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,462 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto"
 +	"errors"
@@ -5516,15 +5591,14 @@ index 00000000000000..f1f2364c7246d4
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..e95268a352ebb9
+index 00000000000000..3aeff4f917fdde
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,444 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,443 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"errors"
 +	"hash"
@@ -5966,15 +6040,14 @@ index 00000000000000..e95268a352ebb9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..f600f0f4e036e4
+index 00000000000000..72ac5f1b11cbc3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,283 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,282 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"hash"
 +	"runtime"
@@ -6255,15 +6328,14 @@ index 00000000000000..f600f0f4e036e4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init.go b/src/vendor/github.com/golang-fips/openssl/v2/init.go
 new file mode 100644
-index 00000000000000..3ea2a896a38c5a
+index 00000000000000..729d51d38c0265
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/init.go
-@@ -0,0 +1,157 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,156 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"errors"
 +	"unsafe"
@@ -6416,11 +6488,11 @@ index 00000000000000..3ea2a896a38c5a
 +	}
 +	return handle, close, nil
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
 new file mode 100644
 index 00000000000000..dbf5ac448fdf80
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/init_unix.go
++++ b/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
 @@ -0,0 +1,31 @@
 +//go:build unix && !cmd_go_bootstrap
 +
@@ -6453,6 +6525,44 @@ index 00000000000000..dbf5ac448fdf80
 +	}
 +	return nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
+new file mode 100644
+index 00000000000000..9fed365a2c6e3f
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
+@@ -0,0 +1,32 @@
++//go:build unix && !cmd_go_bootstrap && !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package openssl
++
++import (
++	"errors"
++	"runtime"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	const RTLD_LAZY = 1
++	var RTLD_LOCAL = 0
++	if runtime.GOOS == "darwin" {
++		RTLD_LOCAL = 4 // darwin uses 4 as RTLD_LOCAL
++	}
++	handle = ossl.Dlopen(unsafe.StringData(file+"\x00"), int32(RTLD_LAZY|RTLD_LOCAL))
++	if handle == nil {
++		return nil, errors.New(goString(ossl.Dlerror()))
++	}
++	return handle, nil
++}
++
++func dlclose(handle unsafe.Pointer) error {
++	if ossl.Dlclose(handle) != 0 {
++		errstr := goString(ossl.Dlerror())
++		return errors.New("openssl: can't close libcrypto: " + errstr)
++	}
++	return nil
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
 new file mode 100644
 index 00000000000000..3778e21227abb9
@@ -6495,4446 +6605,9654 @@ index 00000000000000..3778e21227abb9
 +func dlclose(handle unsafe.Pointer) error {
 +	return syscall.FreeLibrary(syscall.Handle(handle))
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
 new file mode 100644
-index 00000000000000..284952ca345475
+index 00000000000000..c646c454a788fd
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
-@@ -0,0 +1,125 @@
-+package ossl
-+
-+/*
-+#include <stdlib.h> // for calloc and free
-+#include <string.h> // for strdup
-+#include "zossl.h"
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
+@@ -0,0 +1,34 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// OpenSSL only allows a maximum of 16 errors to be stored in the error queue.
-+#define ERR_NUM_MAX  16
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These save the frame pointer, so in general, functions that use
++// these should have zero frame size to suppress the automatic frame
++// pointer, though it's harmless to not do this.
++
++#define REGS_HOST_TO_ABI0_STACK (6*8)
++
++// SysV MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++// Both SysV and Go require DF to be cleared, so that's already clear.
++// The SysV and Go frame pointer conventions are compatible.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
++	MOVQ	BP, (5*8)(SP)	\
++	LEAQ	(5*8)(SP), BP	\
++	MOVQ	BX, (0*8)(SP)	\
++	MOVQ	R12, (1*8)(SP)	\
++	MOVQ	R13, (2*8)(SP)	\
++	MOVQ	R14, (3*8)(SP)	\
++	MOVQ	R15, (4*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*8)(SP), BX	\
++	MOVQ	(1*8)(SP), R12	\
++	MOVQ	(2*8)(SP), R13	\
++	MOVQ	(3*8)(SP), R14	\
++	MOVQ	(4*8)(SP), R15	\
++	MOVQ	(5*8)(SP), BP	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+new file mode 100644
+index 00000000000000..5d5061ec1dbf8c
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+@@ -0,0 +1,39 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// ossl_err_state is a custom structure to hold the error state
-+// of OpenSSL.
-+typedef struct ossl_err_state_st {
-+	unsigned long code[ERR_NUM_MAX];
-+	int line[ERR_NUM_MAX];
-+	char *file[ERR_NUM_MAX];
-+} ossl_err_state;
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
++//
++// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
++//
++// R29 is not saved because Go will save and restore it.
++
++#define SAVE_R19_TO_R28(offset) \
++	STP	(R19, R20), ((offset)+0*8)(RSP) \
++	STP	(R21, R22), ((offset)+2*8)(RSP) \
++	STP	(R23, R24), ((offset)+4*8)(RSP) \
++	STP	(R25, R26), ((offset)+6*8)(RSP) \
++	STP	(R27, g), ((offset)+8*8)(RSP)
++#define RESTORE_R19_TO_R28(offset) \
++	LDP	((offset)+0*8)(RSP), (R19, R20) \
++	LDP	((offset)+2*8)(RSP), (R21, R22) \
++	LDP	((offset)+4*8)(RSP), (R23, R24) \
++	LDP	((offset)+6*8)(RSP), (R25, R26) \
++	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
++#define SAVE_F8_TO_F15(offset) \
++	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
++	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
++	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
++	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
++#define RESTORE_F8_TO_F15(offset) \
++	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
++	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
++	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
++	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
+new file mode 100644
+index 00000000000000..fe133dacac6959
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
+@@ -0,0 +1,29 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// mkcgo_err_clear clears the error queue in OpenSSL.
-+void mkcgo_err_clear() {
-+	// Clear the error queue.
-+	_mkcgo_ERR_clear_error();
-+}
++#include "textflag.h"
++#include "abi_amd64.h"
 +
-+// mkcgo_err_retrieve retrieves the error state from OpenSSL.
-+// It returns a pointer to a mkcgo_err_state structure
-+// that contains the error codes, lines, and file names.
-+// The caller is responsible for freeing the memory
-+// by calling mkcgo_err_free.
-+mkcgo_err_state mkcgo_err_retrieve() {
-+	ossl_err_state *errs = (ossl_err_state *)calloc(1, sizeof(ossl_err_state));
-+	if (errs == NULL) return NULL;
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++// This signature is known to SWIG, so we can't change it.
++TEXT crosscall2(SB), NOSPLIT, $0-0
++	PUSH_REGS_HOST_TO_ABI0()
 +
-+	// Retrieve the errors from OpenSSL.
-+	for (int i = 0; i < ERR_NUM_MAX; i++) {
-+		const char *file;
-+		if (_mkcgo_available_OPENSSL_version_major() == 1) { // Only available in OpenSSL 3.
-+			// OpenSSL 3 error handling
-+			errs->code[i] = _mkcgo_ERR_get_error_all(&file, &errs->line[i], NULL, NULL, NULL);
-+		} else {
-+			// OpenSSL 1 error handling
-+			errs->code[i] = _mkcgo_ERR_get_error_line(&file, &errs->line[i]);
-+		}
-+		if (errs->code[i] == 0) {
-+			break;
-+		}
-+		if (file != NULL) {
-+			// Copy the file name as the pointer we just retrieved will be freed by OpenSSL
-+			// when the error queue is cleared.
-+			errs->file[i] = strdup(file);
-+		}
-+	}
-+	return errs;
-+}
++	// Make room for arguments to cgocallback.
++	ADJSP $0x18
 +
-+// mkcgo_err_free frees the memory allocated for the mkcgo_err_state structure.
-+void mkcgo_err_free(mkcgo_err_state errs) {
-+	if (errs == NULL) return;
++	MOVQ DI, 0x0(SP) // fn
++	MOVQ SI, 0x8(SP) // arg
 +
-+	ossl_err_state *oerrs = (ossl_err_state *)errs;
-+	for (int i = 0; i < ERR_NUM_MAX; i++) {
-+		if (oerrs->file[i] != NULL) {
-+			free((void *)oerrs->file[i]);
-+		}
-+	}
-+	free(errs);
-+}
-+*/
-+import "C"
-+import (
-+	"bytes"
-+	"errors"
-+	"strconv"
-+	"strings"
-+	"unsafe"
-+)
++	// Skip n in DX.
++	MOVQ CX, 0x10(SP) // ctxt
 +
-+// newMkcgoErr creates a new error from the given mkcgo_err_state
-+// and frees the state. If errst is nil, it returns nil.
-+func newMkcgoErr(msg string, errst C.mkcgo_err_state) error {
-+	if errst == nil {
-+		return nil
-+	}
-+	defer C.mkcgo_err_free(errst)
-+	oerrst := (*C.ossl_err_state)(unsafe.Pointer(errst))
-+	var b strings.Builder
-+	b.WriteString(msg)
-+	b.WriteString("\nopenssl error(s):")
-+	for i := range C.ERR_NUM_MAX {
-+		e := uint32(oerrst.code[i])
-+		if e == 0 {
-+			break
-+		}
-+		b.WriteByte('\n')
-+		var buf [256]byte
-+		ERR_error_string_n(e, unsafe.SliceData(buf[:]), len(buf))
-+		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
-+			b.Write(buf[:termIdx])
-+		} else {
-+			b.Write(buf[:])
-+		}
-+		if oerrst.file[i] == nil {
-+			// info not available
-+			continue
-+		}
-+		b.WriteString("\n\t")
-+		b.Write(cstrBytes(oerrst.file[i]))
-+		b.WriteByte(':')
-+		b.WriteString(strconv.Itoa(int(oerrst.line[i])))
-+	}
-+	return errors.New(b.String())
-+}
++	CALL runtime·cgocallback(SB)
 +
-+// cstrBytes returns a byte slice containing the contents of the C string
-+// pointed to by p. The slice does not include the terminating null byte.
-+func cstrBytes(p *C.char) []byte {
-+	if p == nil {
-+		return nil
-+	}
-+	end := unsafe.Pointer(p)
-+	for *(*byte)(end) != 0 {
-+		end = unsafe.Add(end, 1)
-+	}
-+	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
++	ADJSP $-0x18
++	POP_REGS_HOST_TO_ABI0()
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
 new file mode 100644
-index 00000000000000..e0d0b8e8bd8cf3
+index 00000000000000..50e5261d922c56
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
-@@ -0,0 +1,81 @@
-+// Package ossl provides a Go interface to OpenSSL.
-+package ossl
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
+@@ -0,0 +1,36 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+//go:generate go run ../../cmd/mkcgo -out zossl.go -package ossl shims.h
++#include "textflag.h"
++#include "abi_arm64.h"
 +
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
 +/*
-+#include "zossl.h"
-+// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal_ex using ctx2.
-+// This is necessary because Go hash.Hash mandates that Sum has no effect
-+// on the underlying stream. In particular it is OK to Sum, then Write more,
-+// then Sum again, and the second Sum acts as if the first didn't happen.
-+// It is written in C because Sum() tend to be in the hot path,
-+// and doing one cgo call instead of two is a significant performance win.
-+static inline int
-+go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, mkcgo_err_state *_err_state)
-+{
-+	if (_mkcgo_EVP_MD_CTX_copy(ctx2, ctx, _err_state) != 1)
-+		return -1;
-+	if (_mkcgo_EVP_DigestFinal_ex(ctx2, out, NULL, _err_state) <= 0)
-+		return -2;
-+	return 1;
-+}
-+*/
-+import "C"
++ * We still need to save all callee save register as before, and then
++ *  push 3 args for fn (R0, R1, R3), skipping R2.
++ * Also note that at procedure entry in gc world, 8(RSP) will be the
++ *  first arg.
++ */
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	// Initialize Go ABI environment
++	BL runtime·load_g(SB)
++	BL runtime·cgocallback(SB)
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
+new file mode 100644
+index 00000000000000..5f70632fa7cc33
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
+@@ -0,0 +1,93 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || linux)
++
++package fakecgo
++
 +import (
-+	"unsafe"
++	_ "unsafe"
 +)
 +
-+func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
-+	var errst C.mkcgo_err_state
-+	if code := C.go_hash_sum(ctx1, ctx2, (*C.uchar)(unsafe.SliceData(out)), mkcgoNoEscape(&errst)); code != 1 {
-+		msg := "go_hash_sum"
-+		switch code {
-+		case -1:
-+			msg = "EVP_MD_CTX_copy"
-+		case -2:
-+			msg = "EVP_DigestFinal_ex"
-+		}
-+		return newMkcgoErr(msg, errst)
-+	}
-+	return nil
-+}
++// TODO: decide if we need _runtime_cgo_panic_internal
 +
-+const _OSSL_PARAM_UNMODIFIED uint = uint(^uintptr(0))
++//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
++//go:linkname _cgo_init _cgo_init
++var x_cgo_init_trampoline byte
++var _cgo_init = &x_cgo_init_trampoline
 +
-+// OSSL_PARAM is a structure to pass or request object parameters.
-+// https://docs.openssl.org/3.0/man3/OSSL_PARAM/.
-+type OSSL_PARAM struct {
-+	Key        *byte
-+	DataType   uint32
-+	Data       unsafe.Pointer
-+	DataSize   uint
-+	ReturnSize uint
-+}
++// Creates a new system thread without updating any Go state.
++//
++// This method is invoked during shared library loading to create a new OS
++// thread to perform the runtime initialization. This method is similar to
++// _cgo_sys_thread_start except that it doesn't update any Go state.
 +
-+func ossl_param_construct(key *byte, dataType uint32, data unsafe.Pointer, dataSize int) OSSL_PARAM {
-+	return OSSL_PARAM{
-+		Key:        key,
-+		DataType:   dataType,
-+		Data:       data,
-+		DataSize:   uint(dataSize),
-+		ReturnSize: _OSSL_PARAM_UNMODIFIED,
-+	}
-+}
++//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
++//go:linkname _cgo_thread_start _cgo_thread_start
++var x_cgo_thread_start_trampoline byte
++var _cgo_thread_start = &x_cgo_thread_start_trampoline
 +
-+func OSSL_PARAM_construct_octet_string(key *byte, data unsafe.Pointer, dataSize int) OSSL_PARAM {
-+	return ossl_param_construct(key, OSSL_PARAM_OCTET_STRING, data, dataSize)
-+}
++// Notifies that the runtime has been initialized.
++//
++// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
++// to ensure that the runtime has been initialized before the CGO call is
++// executed. This is necessary for shared libraries where we kickoff runtime
++// initialization in a separate thread and return without waiting for this
++// thread to complete the init.
++
++//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
++//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
++var x_cgo_notify_runtime_init_done_trampoline byte
++var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
++
++// Indicates whether a dummy thread key has been created or not.
++//
++// When calling go exported function from C, we register a destructor
++// callback, for a dummy thread key, by using pthread_key_create.
 +
-+func OSSL_PARAM_construct_int32(key *byte, data *int32) OSSL_PARAM {
-+	return ossl_param_construct(key, OSSL_PARAM_INTEGER, unsafe.Pointer(data), 4)
-+}
++//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
++var x_cgo_pthread_key_created uintptr
++var _cgo_pthread_key_created = &x_cgo_pthread_key_created
 +
-+func OSSL_PARAM_construct_end() OSSL_PARAM {
-+	return OSSL_PARAM{}
++// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
++// It's for the runtime package to call at init time.
++func set_crosscall2() {
++	// nothing needs to be done here for fakecgo
++	// because it's possible to just call cgocallback directly
 +}
 +
-+func OSSL_PARAM_modified(param *OSSL_PARAM) bool {
-+	// If ReturnSize is not set, the parameter has not been modified.
-+	return param != nil && param.ReturnSize != _OSSL_PARAM_UNMODIFIED
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
++//go:linkname _set_crosscall2 runtime.set_crosscall2
++var _set_crosscall2 = set_crosscall2
++
++// Store the g into the thread-specific value.
++// So that pthread_key_destructor will dropm when the thread is exiting.
++
++//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
++//go:linkname _cgo_bindm _cgo_bindm
++var x_cgo_bindm_trampoline byte
++var _cgo_bindm = &x_cgo_bindm_trampoline
++
++// TODO: decide if we need x_cgo_set_context_function
++// TODO: decide if we need _cgo_yield
++
++var (
++	// In Go 1.20 the race detector was rewritten to pure Go
++	// on darwin. This means that when CGO_ENABLED=0 is set
++	// fakecgo is built with race detector code. This is not
++	// good since this code is pretending to be C. The go:norace
++	// pragma is not enough, since it only applies to the native
++	// ABIInternal function. The ABIO wrapper (which is necessary,
++	// since all references to text symbols from assembly will use it)
++	// does not inherit the go:norace pragma, so it will still be
++	// instrumented by the race detector.
++	//
++	// To circumvent this issue, using closure calls in the
++	// assembly, which forces the compiler to use the ABIInternal
++	// native implementation (which has go:norace) instead.
++	threadentry_call        = threadentry
++	x_cgo_init_call         = x_cgo_init
++	x_cgo_setenv_call       = x_cgo_setenv
++	x_cgo_unsetenv_call     = x_cgo_unsetenv
++	x_cgo_thread_start_call = x_cgo_thread_start
++)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
 new file mode 100644
-index 00000000000000..5790defeb6eb55
+index 00000000000000..84159b1b1eb914
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,399 @@
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// OpenSSL C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zossl.h" instead.
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
+@@ -0,0 +1,32 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+#ifndef _GO_OSSL_SHIMS_H // only include this header once
-+#define _GO_OSSL_SHIMS_H
++//go:build !cgo && (darwin || linux)
 +
-+#include <stdlib.h> // size_t
-+#include <stdint.h> // uint64_t
++// Package fakecgo implements the Cgo runtime (runtime/cgo) entirely in Go.
++// This allows code that calls into C to function properly when CGO_ENABLED=0.
++//
++// # Goals
++//
++// fakecgo attempts to replicate the same naming structure as in the runtime.
++// For example, functions that have the prefix "gcc_*" are named "go_*".
++// This makes it easier to port other GOOSs and GOARCHs as well as to keep
++// it in sync with runtime/cgo.
++//
++// # Support
++//
++// Currently, fakecgo only supports macOS on amd64 & arm64. It also cannot
++// be used with -buildmode=c-archive because that requires special initialization
++// that fakecgo does not implement at the moment.
++//
++// # Usage
++//
++// Using fakecgo is easy just import _ "github.com/ebitengine/purego" and then
++// set the environment variable CGO_ENABLED=0.
++// The recommended usage for fakecgo is to prefer using runtime/cgo if possible
++// but if cross-compiling or fast build times are important fakecgo is available.
++// Purego will pick which ever Cgo runtime is available and prefer the one that
++// comes with Go (runtime/cgo).
++package fakecgo
++
++//go:generate go run gen.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
+new file mode 100644
+index 00000000000000..59c8c1674baa67
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
+@@ -0,0 +1,27 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+// The following includes are used by the checkheader tool.
-+// #include <openssl/crypto.h>
-+// #include <openssl/evp.h>
-+// #include <openssl/ec.h>
-+// #include <openssl/kdf.h>
-+// #include <openssl/obj_mac.h>
-+// #include <openssl/rsa.h>
-+// #include <openssl/err.h>
-+// #include <openssl/hmac.h>
-+// #include <openssl/rand.h>
-+// #include <openssl/dsa.h>
-+// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
-+// #include <openssl/core_names.h>
-+// #include <openssl/provider.h>
-+// #include <openssl/param_build.h>
-+// #include <openssl/params.h>
-+// #endif
-+// #if OPENSSL_VERSION_NUMBER < 0x10100000L
-+// #include <openssl/bn.h>
-+// #endif
++//go:build !cgo && (darwin || linux)
 +
-+enum {
-+	_POINT_CONVERSION_UNCOMPRESSED = 4,
++package fakecgo
 +
-+	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
-+	_OPENSSL_INIT_ADD_ALL_CIPHERS     = 0x00000004,
-+	_OPENSSL_INIT_ADD_ALL_DIGESTS     = 0x00000008,
-+	_OPENSSL_INIT_LOAD_CONFIG         = 0x00000040,
++import "unsafe"
 +
-+	_EVP_CTRL_GCM_GET_TAG = 0x10,
-+	_EVP_CTRL_GCM_SET_TAG = 0x11,
-+	_EVP_PKEY_CTRL_MD     = 1,
-+	_EVP_PKEY_RSA         = 6,
-+	_EVP_PKEY_EC          = 408,
-+	_EVP_PKEY_TLS1_PRF    = 1021,
-+	_EVP_PKEY_HKDF        = 1036,
-+	_EVP_PKEY_ED25519     = 1087,
-+	_EVP_PKEY_DSA         = 116,
-+	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
-+	_EVP_MAX_MD_SIZE    = 64,
++// setg_trampoline calls setg with the G provided
++func setg_trampoline(setg uintptr, G uintptr)
 +
-+	_EVP_PKEY_PUBLIC_KEY = 0x86,
-+	_EVP_PKEY_KEYPAIR    = 0x87,
++// call5 takes fn the C function and 5 arguments and calls the function with those arguments
++func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
 +
-+	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++// argset matches runtime/cgocall.go:argset.
++type argset struct {
++	args   *uintptr
++	retval uintptr
++}
 +
-+	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
-+	_EVP_KDF_HKDF_MODE_EXPAND_ONLY  = 2,
++//go:nosplit
++//go:norace
++func (a *argset) arg(i int) unsafe.Pointer {
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
+new file mode 100644
+index 00000000000000..d0868f0f790351
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
+@@ -0,0 +1,88 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+	_EVP_PKEY_CTRL_TLS_MD     = 0x1000,
-+	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
-+	_EVP_PKEY_CTRL_TLS_SEED   = 0x1002,
-+	_EVP_PKEY_CTRL_HKDF_MD    = 0x1003,
-+	_EVP_PKEY_CTRL_HKDF_SALT  = 0x1004,
-+	_EVP_PKEY_CTRL_HKDF_KEY   = 0x1005,
-+	_EVP_PKEY_CTRL_HKDF_INFO  = 0x1006,
-+	_EVP_PKEY_CTRL_HKDF_MODE  = 0x1007,
++//go:build !cgo
 +
-+	_NID_X9_62_prime256v1 = 415,
-+	_NID_secp224r1        = 713,
-+	_NID_secp384r1        = 715,
-+	_NID_secp521r1        = 716,
++package fakecgo
 +
-+	_RSA_PKCS1_PADDING                 = 1,
-+	_RSA_NO_PADDING                    = 3,
-+	_RSA_PKCS1_OAEP_PADDING            = 4,
-+	_RSA_PKCS1_PSS_PADDING             = 6,
-+	_RSA_PSS_SALTLEN_DIGEST            = -1,
-+	_RSA_PSS_SALTLEN_AUTO              = -2,
-+	_RSA_PSS_SALTLEN_MAX_SIGN          = -2,
-+	_RSA_PSS_SALTLEN_MAX               = -3,
-+	_EVP_PKEY_CTRL_RSA_PADDING         = 0x1001,
-+	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN     = 0x1002,
-+	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS     = 0x1003,
-+	_EVP_PKEY_CTRL_RSA_MGF1_MD         = 0x1005,
-+	_EVP_PKEY_CTRL_RSA_OAEP_MD         = 0x1009,
-+	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++import "unsafe"
 +
-+	_OSSL_PARAM_INTEGER = 1,
-+	_OSSL_PARAM_OCTET_STRING = 5,
-+};
++//go:nosplit
++//go:norace
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
 +
-+typedef void* _OPENSSL_INIT_SETTINGS_PTR;
-+typedef void* _OSSL_LIB_CTX_PTR;
-+typedef void* _OSSL_PROVIDER_PTR;
-+typedef void* _ENGINE_PTR;
-+typedef void* _EVP_PKEY_PTR;
-+typedef void* _EVP_PKEY_CTX_PTR;
-+typedef void* _EVP_MD_PTR;
-+typedef void* _EVP_MD_CTX_PTR;
-+typedef void* _HMAC_CTX_PTR;
-+typedef void* _EVP_CIPHER_PTR;
-+typedef void* _EVP_CIPHER_CTX_PTR;
-+typedef void* _EC_KEY_PTR;
-+typedef void* _EC_POINT_PTR;
-+typedef void* _EC_GROUP_PTR;
-+typedef void* _RSA_PTR;
-+typedef void* _BIGNUM_PTR;
-+typedef void* _BN_CTX_PTR;
-+typedef void* _EVP_MAC_PTR;
-+typedef void* _EVP_MAC_CTX_PTR;
-+typedef void* _OSSL_PARAM_BLD_PTR;
-+typedef void* _OSSL_PARAM_PTR;
-+typedef void* _EVP_SIGNATURE_PTR;
-+typedef void* _DSA_PTR;
-+typedef void* _EVP_KDF_PTR;
-+typedef void* _EVP_KDF_CTX_PTR;
-+typedef int point_conversion_form_t;
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
 +
-+// Tags used by mkcgo to determine which OpenSSL version each function is available in:
-+// - no tag: OpenSSL 1.0 or later
-+// - legacy_1: Only OpenSSL 1
-+// - 3: OpenSSL 3.0 or later
-+// - 111: OpenSSL 1.1.1 or later
++	size = pthread_get_stacksize_np(pthread_self())
++	pthread_attr_init(&attr)
++	pthread_attr_setstacksize(&attr, size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
 +
-+// The noescape/nocallback attributes are performance optimizations.
-+// Only add functions that have been observed to benefit from these
-+// directives, not every function that is merely expected to meet
-+// the noescape/nocallback criteria.
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
 +
-+// ERR API
-+void ERR_error_string_n(unsigned long e, char *buf, size_t len);
-+void ERR_clear_error(void) __attribute__((tag(""),tag("init_3")));
-+unsigned long ERR_get_error_line(const char **file, int *line) __attribute__((tag("legacy_1"),noerror));
-+unsigned long ERR_get_error_all(const char **file, int *line, const char **func, const char **data, int *flags) __attribute__((tag("3"),noerror));
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
 +
-+// OPENSSL API
-+const char *OpenSSL_version(int type) __attribute__((noerror));
-+void OPENSSL_init(void);
-+int OPENSSL_init_crypto(uint64_t ops, const _OPENSSL_INIT_SETTINGS_PTR settings);
-+unsigned long OpenSSL_version_num(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_major(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_minor(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_patch(void) __attribute__((tag("version"),optional,noerror));
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
 +
-+// CRYPTO API
-+void *CRYPTO_malloc(size_t num, const char *file, int line);
-+void CRYPTO_free(void *str, const char *file, int line);
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
 +
-+// FIPS API
-+int FIPS_mode(void) __attribute__((tag("legacy_1"),tag("init_1"),noerror));
-+int FIPS_mode_set(int r) __attribute__((tag("legacy_1"),tag("init_1")));
++//go:nosplit
++//go:norace
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
 +
-+// EVP Config API
-+int EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR libctx) __attribute__((tag("3"),tag("init_3"),noerror));
-+int EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR libctx, int enable) __attribute__((tag("3")));
++	// TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_thread_exception_port();
++	//#endif
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
 +
-+// OSSL_PROVIDER API
-+int OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR libctx, const char *name) __attribute__((tag("3"),noerror));
-+_OSSL_PROVIDER_PTR OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks) __attribute__((tag("3")));
-+const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
 +
-+// RAND API
-+int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback));
++	return nil
++}
 +
-+// EVP_MD API
-+_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
-+void EVP_MD_free(_EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3")));
-+const char *EVP_MD_get0_name(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
-+int EVP_MD_get_type(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
-+const _OSSL_PROVIDER_PTR EVP_MD_get0_provider(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3"),noerror));
-+int EVP_MD_get_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_size"),noerror));
-+int EVP_MD_get_block_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_block_size"),noerror));
-+const _EVP_MD_PTR EVP_md5_sha1(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_ripemd160(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_md4(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_md5(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha1(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha224(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((tag("111"),noerror));
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
 +
-+_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
-+void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
-+int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in) __attribute__((noescape,nocallback));
-+int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
-+const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
-+const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
-+int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
-+int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
-+int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,nocheckptr("d")));
-+int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback));
-+int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
-+int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
-+int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen);
-+int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111")));
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++//go:norace
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++
++	setg_func = setg
++	size = pthread_get_stacksize_np(pthread_self())
++	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
++
++	//TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_mach_exception_handler();
++	//	darwin_arm_init_thread_exception_port();
++	//	init_working_dir();
++	//#endif
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
+new file mode 100644
+index 00000000000000..0eadc51daecc75
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
+@@ -0,0 +1,72 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+// HMAC API
-+int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1")));
-+int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1")));
-+int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1")));
++//go:build !cgo && (darwin || linux)
 +
-+_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
-+int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1")));
-+void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1")));
++package fakecgo
 +
-+// EVP_CIPHER API
-+_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+const char *EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
-+int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
++import (
++	"syscall"
++	"unsafe"
++)
 +
-+_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
-+int EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR x, int padding);
-+int EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR x, int keylen);
-+void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
-+int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
-+int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
-+int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
-+int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
-+int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback));
-+int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
-+int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback));
++var (
++	pthread_g pthread_key_t
 +
-+// EVP_PKEY API
-+_EVP_PKEY_PTR EVP_PKEY_new(void);
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
-+int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
-+int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
-+void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
-+_RSA_PTR EVP_PKEY_get1_RSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
-+_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3")));
-+size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
-+int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
-+int EVP_PKEY_up_ref(_EVP_PKEY_PTR key) __attribute__((tag("3")));
-+int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
-+int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len) __attribute__((tag("111"),noescape,nocallback));
-+int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len) __attribute__((tag("111"),noescape,nocallback));
-+int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
-+int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
-+int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
-+int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
-+int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
-+int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen);
-+int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
-+int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback));
-+int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++	runtime_init_cond = PTHREAD_COND_INITIALIZER
++	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
++	runtime_init_done int
++)
 +
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
-+void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
-+int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++//go:nosplit
++//go:norace
++func x_cgo_notify_runtime_init_done() {
++	pthread_mutex_lock(&runtime_init_mu)
++	runtime_init_done = 1
++	pthread_cond_broadcast(&runtime_init_cond)
++	pthread_mutex_unlock(&runtime_init_mu)
++}
 +
-+// RSA API
-+_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
-+void RSA_free(_RSA_PTR arg0) __attribute__((tag("legacy_1")));
-+void RSA_get0_factors(const _RSA_PTR rsa, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_factors(_RSA_PTR rsa, _BIGNUM_PTR p, _BIGNUM_PTR q) __attribute__((tag("legacy_1")));
-+void RSA_get0_crt_params(const _RSA_PTR r, const _BIGNUM_PTR *dmp1, const _BIGNUM_PTR *dmq1, const _BIGNUM_PTR *iqmp) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_crt_params(_RSA_PTR rsa, _BIGNUM_PTR dmp1, _BIGNUM_PTR dmp2, _BIGNUM_PTR iqmp) __attribute__((tag("legacy_1")));
-+void RSA_get0_key(const _RSA_PTR rsa, const _BIGNUM_PTR *n, const _BIGNUM_PTR *e, const _BIGNUM_PTR *d) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_key(_RSA_PTR r, _BIGNUM_PTR n, _BIGNUM_PTR e, _BIGNUM_PTR d) __attribute__((tag("legacy_1")));
++// Store the g into a thread-specific value associated with the pthread key pthread_g.
++// And pthread_key_destructor will dropm when the thread is exiting.
++//
++//go:norace
++func x_cgo_bindm(g unsafe.Pointer) {
++	// We assume this will always succeed, otherwise, there might be extra M leaking,
++	// when a C thread exits after a cgo call.
++	// We only invoke this function once per thread in runtime.needAndBindM,
++	// and the next calls just reuse the bound m.
++	pthread_setspecific(pthread_g, g)
++}
 +
-+// BIGNUM API
-+_BIGNUM_PTR BN_new(void);
-+void BN_free(_BIGNUM_PTR arg0);
-+void BN_clear(_BIGNUM_PTR arg0);
-+void BN_clear_free(_BIGNUM_PTR arg0);
-+int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
-+_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2);
-+_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int len, _BIGNUM_PTR ret);
-+int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
-+int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
++// _cgo_try_pthread_create retries pthread_create if it fails with
++// EAGAIN.
++//
++//go:nosplit
++//go:norace
++func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
++	var ts syscall.Timespec
++	// tries needs to be the same type as syscall.Timespec.Nsec
++	// but the fields are int32 on 32bit and int64 on 64bit.
++	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
++	tries := ts.Nsec
++	var err int
++
++	for tries = 0; tries < 20; tries++ {
++		// inlined this call because it ran out of stack when inlining was disabled
++		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
++		if err == 0 {
++			// inlined this call because it ran out of stack when inlining was disabled
++			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
++			return 0
++		}
++		if err != int(syscall.EAGAIN) {
++			return err
++		}
++		ts.Sec = 0
++		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
++		// inlined this call because it ran out of stack when inlining was disabled
++		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
++	}
++	return int(syscall.EAGAIN)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
+new file mode 100644
+index 00000000000000..9f380c1b431807
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
+@@ -0,0 +1,100 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// EC API
-+int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
-+int EC_KEY_set_public_key(_EC_KEY_PTR key, const _EC_POINT_PTR pub) __attribute__((tag("legacy_1")));
-+void EC_KEY_free(_EC_KEY_PTR arg0) __attribute__((tag("legacy_1")));
-+const _EC_GROUP_PTR EC_KEY_get0_group(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+const _BIGNUM_PTR EC_KEY_get0_private_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+const _EC_POINT_PTR EC_KEY_get0_public_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+_EC_KEY_PTR EC_KEY_new_by_curve_name(int arg0) __attribute__((tag("legacy_1")));
-+int EC_KEY_set_private_key(_EC_KEY_PTR arg0, const _BIGNUM_PTR arg1) __attribute__((tag("legacy_1")));
-+int EC_KEY_check_key(const _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
-+_EC_POINT_PTR EC_POINT_new(const _EC_GROUP_PTR arg0);
-+void EC_POINT_free(_EC_POINT_PTR arg0);
-+int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
-+int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
-+int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
-+size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
-+int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
-+_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
-+void EC_GROUP_free(_EC_GROUP_PTR group);
++//go:build !cgo
 +
-+// EVP_MAC API
-+_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
-+int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
-+_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
-+int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3")));
-+int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3")));
++package fakecgo
 +
-+// OSSL_PARAM API
-+void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
-+const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
-+_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3")));
-+void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
-+_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
++import "unsafe"
 +
-+// EVP_SIGNATURE API
-+_EVP_SIGNATURE_PTR EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+void EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR signature) __attribute__((tag("3")));
++//go:nosplit
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
 +
-+// DSA API
-+_DSA_PTR DSA_new(void) __attribute__((tag("legacy_1")));
-+void DSA_free(_DSA_PTR r) __attribute__((tag("legacy_1")));
-+int DSA_generate_key(_DSA_PTR a) __attribute__((tag("legacy_1")));
-+void DSA_get0_pqg(const _DSA_PTR d, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q, const _BIGNUM_PTR *g) __attribute__((tag("legacy_1")));
-+int DSA_set0_pqg(_DSA_PTR d, _BIGNUM_PTR p, _BIGNUM_PTR q, _BIGNUM_PTR g) __attribute__((tag("legacy_1")));
-+void DSA_get0_key(const _DSA_PTR d, const _BIGNUM_PTR *pub_key, const _BIGNUM_PTR *priv_key) __attribute__((tag("legacy_1")));
-+int DSA_set0_key(_DSA_PTR d, _BIGNUM_PTR pub_key, _BIGNUM_PTR priv_key) __attribute__((tag("legacy_1")));
++	//fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
 +
-+// EVP_KDF API
-+_EVP_KDF_PTR EVP_KDF_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+void EVP_KDF_free(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
-+_EVP_KDF_CTX_PTR EVP_KDF_CTX_new(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
-+int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
-+size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out);
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
 +
-+// OBJ API
-+const char *OBJ_nid2sn(int n) __attribute__((noerror));
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
 +
-+#endif // _GO_OSSL_SHIMS_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++	var attr *pthread_attr_t
++
++	/* The memory sanitizer distributed with versions of clang
++	   before 3.8 has a bug: if you call mmap before malloc, mmap
++	   may return an address that is later overwritten by the msan
++	   library.  Avoid this problem by forcing a call to malloc
++	   here, before we ever call malloc.
++
++	   This is only required for the memory sanitizer, so it's
++	   unfortunate that we always run it.  It should be possible
++	   to remove this when we no longer care about versions of
++	   clang before 3.8.  The test for this is
++	   misc/cgo/testsanitizers.
++
++	   GCC works hard to eliminate a seemingly unnecessary call to
++	   malloc, so we actually use the memory we allocate.  */
++
++	setg_func = setg
++	attr = (*pthread_attr_t)(malloc(unsafe.Sizeof(*attr)))
++	if attr == nil {
++		println("fakecgo: malloc failed")
++		abort()
++	}
++	pthread_attr_init(attr)
++	pthread_attr_getstacksize(attr, &size)
++	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
++	// but this should be OK since we are taking the address of the first variable in this function.
++	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
++	pthread_attr_destroy(attr)
++	free(unsafe.Pointer(attr))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
 new file mode 100644
-index 00000000000000..1444f551331fb6
+index 00000000000000..6c2f981d730980
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2061 @@
-+// Code generated by mkcgo. DO NOT EDIT.
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
+@@ -0,0 +1,18 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+#include <stddef.h>
-+#include <stdlib.h>
-+#include <stdint.h>
-+#include <stdio.h>
-+#include "zossl.h"
++//go:build !cgo && (darwin || linux)
 +
-+#ifdef _WIN32
-+#include <windows.h>
-+#define dlsym GetProcAddress
-+#else
-+#include <dlfcn.h>
-+#endif
++package fakecgo
 +
-+_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
-+int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
-+int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
-+void (*_g_BN_clear)(_BIGNUM_PTR);
-+void (*_g_BN_clear_free)(_BIGNUM_PTR);
-+void (*_g_BN_free)(_BIGNUM_PTR);
-+_BIGNUM_PTR (*_g_BN_lebin2bn)(const unsigned char*, int, _BIGNUM_PTR);
-+_BIGNUM_PTR (*_g_BN_new)(void);
-+int (*_g_BN_num_bits)(const _BIGNUM_PTR);
-+void (*_g_CRYPTO_free)(void*, const char*, int);
-+void* (*_g_CRYPTO_malloc)(size_t, const char*, int);
-+void (*_g_DSA_free)(_DSA_PTR);
-+int (*_g_DSA_generate_key)(_DSA_PTR);
-+void (*_g_DSA_get0_key)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_DSA_get0_pqg)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_DSA_PTR (*_g_DSA_new)(void);
-+int (*_g_DSA_set0_key)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_DSA_set0_pqg)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+void (*_g_EC_GROUP_free)(_EC_GROUP_PTR);
-+_EC_GROUP_PTR (*_g_EC_GROUP_new_by_curve_name)(int);
-+int (*_g_EC_KEY_check_key)(const _EC_KEY_PTR);
-+void (*_g_EC_KEY_free)(_EC_KEY_PTR);
-+const _EC_GROUP_PTR (*_g_EC_KEY_get0_group)(const _EC_KEY_PTR);
-+const _BIGNUM_PTR (*_g_EC_KEY_get0_private_key)(const _EC_KEY_PTR);
-+const _EC_POINT_PTR (*_g_EC_KEY_get0_public_key)(const _EC_KEY_PTR);
-+_EC_KEY_PTR (*_g_EC_KEY_new_by_curve_name)(int);
-+int (*_g_EC_KEY_set_private_key)(_EC_KEY_PTR, const _BIGNUM_PTR);
-+int (*_g_EC_KEY_set_public_key)(_EC_KEY_PTR, const _EC_POINT_PTR);
-+int (*_g_EC_KEY_set_public_key_affine_coordinates)(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+void (*_g_EC_POINT_free)(_EC_POINT_PTR);
-+int (*_g_EC_POINT_get_affine_coordinates_GFp)(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR);
-+int (*_g_EC_POINT_mul)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
-+_EC_POINT_PTR (*_g_EC_POINT_new)(const _EC_GROUP_PTR);
-+int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
-+size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
-+int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
-+void (*_g_ERR_clear_error)(void);
-+void (*_g_ERR_error_string_n)(unsigned long, char*, size_t);
-+unsigned long (*_g_ERR_get_error_all)(const char**, int*, const char**, const char**, int*);
-+unsigned long (*_g_ERR_get_error_line)(const char**, int*);
-+int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
-+void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
-+_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
-+int (*_g_EVP_CIPHER_CTX_set_key_length)(_EVP_CIPHER_CTX_PTR, int);
-+int (*_g_EVP_CIPHER_CTX_set_padding)(_EVP_CIPHER_CTX_PTR, int);
-+_EVP_CIPHER_PTR (*_g_EVP_CIPHER_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+const char* (*_g_EVP_CIPHER_get0_name)(const _EVP_CIPHER_PTR);
-+int (*_g_EVP_CIPHER_get_block_size)(const _EVP_CIPHER_PTR);
-+int (*_g_EVP_CipherInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int);
-+int (*_g_EVP_CipherUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
-+int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
-+int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+int (*_g_EVP_Digest)(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
-+int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
-+int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const void*, size_t);
-+int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
-+int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_EncryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
-+int (*_g_EVP_EncryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
-+int (*_g_EVP_EncryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+void (*_g_EVP_KDF_CTX_free)(_EVP_KDF_CTX_PTR);
-+size_t (*_g_EVP_KDF_CTX_get_kdf_size)(_EVP_KDF_CTX_PTR);
-+_EVP_KDF_CTX_PTR (*_g_EVP_KDF_CTX_new)(_EVP_KDF_PTR);
-+int (*_g_EVP_KDF_CTX_set_params)(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
-+_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
-+_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
-+void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
-+_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
-+int (*_g_EVP_MAC_CTX_set_params)(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR);
-+_EVP_MAC_PTR (*_g_EVP_MAC_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
-+int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_MD_CTX_copy)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
-+int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
-+void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
-+int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
-+_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
-+int (*_g_EVP_MD_CTX_set_params)(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_settable_params)(_EVP_MD_CTX_PTR);
-+_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_MD_free)(_EVP_MD_PTR);
-+const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
-+const _OSSL_PROVIDER_PTR (*_g_EVP_MD_get0_provider)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_block_size)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_size)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_type)(const _EVP_MD_PTR);
-+int (*_g_EVP_PKEY_CTX_add1_hkdf_info)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_ctrl)(_EVP_PKEY_CTX_PTR, int, int, int, int, void*);
-+void (*_g_EVP_PKEY_CTX_free)(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
-+int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, void*, int);
-+int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
-+int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
-+int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
-+int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
-+void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_fromdata)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR);
-+int (*_g_EVP_PKEY_fromdata_init)(_EVP_PKEY_CTX_PTR);
-+_DSA_PTR (*_g_EVP_PKEY_get0_DSA)(_EVP_PKEY_PTR);
-+_EC_KEY_PTR (*_g_EVP_PKEY_get0_EC_KEY)(_EVP_PKEY_PTR);
-+_RSA_PTR (*_g_EVP_PKEY_get1_RSA)(_EVP_PKEY_PTR);
-+size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
-+int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
-+int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_keygen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
-+int (*_g_EVP_PKEY_keygen_init)(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new)(void);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_private_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_public_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_paramgen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
-+int (*_g_EVP_PKEY_paramgen_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_private_check)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_public_check_quick)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_set1_EC_KEY)(_EVP_PKEY_PTR, _EC_KEY_PTR);
-+int (*_g_EVP_PKEY_set1_encoded_public_key)(_EVP_PKEY_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_sign)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_sign_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_up_ref)(_EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_verify)(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_verify_init)(_EVP_PKEY_CTX_PTR);
-+_EVP_SIGNATURE_PTR (*_g_EVP_SIGNATURE_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_SIGNATURE_free)(_EVP_SIGNATURE_PTR);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_gcm)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_gcm)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
-+int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
-+int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_ecb)(void);
-+const _EVP_MD_PTR (*_g_EVP_md4)(void);
-+const _EVP_MD_PTR (*_g_EVP_md5)(void);
-+const _EVP_MD_PTR (*_g_EVP_md5_sha1)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_rc4)(void);
-+const _EVP_MD_PTR (*_g_EVP_ripemd160)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha1)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha256)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha384)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_256)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_384)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_512)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512_224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512_256)(void);
-+int (*_g_FIPS_mode)(void);
-+int (*_g_FIPS_mode_set)(int);
-+int (*_g_HMAC_CTX_copy)(_HMAC_CTX_PTR, _HMAC_CTX_PTR);
-+void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
-+_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
-+int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
-+int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
-+const char* (*_g_OBJ_nid2sn)(int);
-+void (*_g_OPENSSL_init)(void);
-+int (*_g_OPENSSL_init_crypto)(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR);
-+unsigned int (*_g_OPENSSL_version_major)(void);
-+unsigned int (*_g_OPENSSL_version_minor)(void);
-+unsigned int (*_g_OPENSSL_version_patch)(void);
-+void (*_g_OSSL_PARAM_BLD_free)(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
-+int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
-+int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
-+int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t);
-+int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
-+_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
-+void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_OSSL_PARAM_locate_const)(const _OSSL_PARAM_PTR, const char*);
-+int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
-+const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
-+_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
-+const char* (*_g_OpenSSL_version)(int);
-+unsigned long (*_g_OpenSSL_version_num)(void);
-+int (*_g_PKCS5_PBKDF2_HMAC)(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*);
-+int (*_g_RAND_bytes)(unsigned char*, int);
-+void (*_g_RSA_free)(_RSA_PTR);
-+void (*_g_RSA_get0_crt_params)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_RSA_get0_factors)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_RSA_get0_key)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_RSA_PTR (*_g_RSA_new)(void);
-+int (*_g_RSA_set0_crt_params)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_RSA_set0_factors)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_RSA_set0_key)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++//go:nosplit
++//go:norace
++func x_cgo_setenv(arg *[2]*byte) {
++	setenv(arg[0], arg[1], 1)
++}
 +
-+#define __mkcgo__dlsym_nocheck(varname, funcname) _g_##varname = (typeof(_g_##varname))dlsym(handle, #funcname);
++//go:nosplit
++//go:norace
++func x_cgo_unsetenv(arg *[1]*byte) {
++	unsetenv(arg[0])
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
+new file mode 100644
+index 00000000000000..c2497488ef6578
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
+@@ -0,0 +1,37 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+#define __mkcgo__dlsym(name) __mkcgo__dlsym2(name, name)
++//go:build !cgo && (darwin || linux)
 +
-+#define __mkcgo__dlsym2(varname, funcname) \
-+	__mkcgo__dlsym_nocheck(varname, funcname) \
-+	if (_g_##varname == NULL) { \
-+		fprintf(stderr, "Cannot get required symbol " #funcname "\n"); \
-+		abort(); \
++package fakecgo
++
++import "unsafe"
++
++// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
++
++// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
++// This get's called instead of the go code for creating new threads
++// -> pthread_* stuff is used, so threads are setup correctly for C
++// If this is missing, TLS is only setup correctly on thread 1!
++// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
++//
++//go:nosplit
++//go:norace
++func x_cgo_thread_start(arg *ThreadStart) {
++	var ts *ThreadStart
++	// Make our own copy that can persist after we return.
++	//	_cgo_tsan_acquire();
++	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
++	//	_cgo_tsan_release();
++	if ts == nil {
++		println("fakecgo: out of memory in thread_start")
++		abort()
++	}
++	// *ts = *arg would cause a writebarrier so copy using slices
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/8)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/8)
++	for i := range s2 {
++		s1[i] = s2[i]
++	}
++	_cgo_sys_thread_start(ts) // OS-dependent half
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
+new file mode 100644
+index 00000000000000..ba142ec481d026
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
+@@ -0,0 +1,19 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || linux)
++
++// The runtime package contains an uninitialized definition
++// for runtime·iscgo. Override it to tell the runtime we're here.
++// There are various function pointers that should be set too,
++// but those depend on dynamic linker magic to get initialized
++// correctly, and sometimes they break. This variable is a
++// backup: it depends only on old C style static linking rules.
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname _iscgo runtime.iscgo
++var _iscgo bool = true
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
+new file mode 100644
+index 00000000000000..1d56bf2b83f4b4
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
+@@ -0,0 +1,38 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++package fakecgo
++
++type (
++	size_t uintptr
++	// Sources:
++	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
++	sigset_t       [128]byte
++	pthread_attr_t [64]byte
++	pthread_t      int
++	pthread_key_t  uint64
++)
++
++// for pthread_sigmask:
++
++type sighow int32
++
++const (
++	SIG_BLOCK   sighow = 0
++	SIG_UNBLOCK sighow = 1
++	SIG_SETMASK sighow = 2
++)
++
++type G struct {
++	stacklo uintptr
++	stackhi uintptr
++}
++
++type ThreadStart struct {
++	g   *G
++	tls *uintptr
++	fn  uintptr
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
+new file mode 100644
+index 00000000000000..ecdcb2e7852560
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
+@@ -0,0 +1,26 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_mutex_t struct {
++		sig    int64
++		opaque [56]byte
++	}
++	pthread_cond_t struct {
++		sig    int64
++		opaque [40]byte
 +	}
++)
 +
-+void __mkcgo_load_(void* handle) {
-+	__mkcgo__dlsym(BN_bin2bn)
-+	__mkcgo__dlsym(BN_bn2binpad)
-+	__mkcgo__dlsym(BN_bn2lebinpad)
-+	__mkcgo__dlsym(BN_clear)
-+	__mkcgo__dlsym(BN_clear_free)
-+	__mkcgo__dlsym(BN_free)
-+	__mkcgo__dlsym(BN_lebin2bn)
-+	__mkcgo__dlsym(BN_new)
-+	__mkcgo__dlsym(BN_num_bits)
-+	__mkcgo__dlsym(CRYPTO_free)
-+	__mkcgo__dlsym(CRYPTO_malloc)
-+	__mkcgo__dlsym(EC_GROUP_free)
-+	__mkcgo__dlsym(EC_GROUP_new_by_curve_name)
-+	__mkcgo__dlsym(EC_POINT_free)
-+	__mkcgo__dlsym(EC_POINT_mul)
-+	__mkcgo__dlsym(EC_POINT_new)
-+	__mkcgo__dlsym(EC_POINT_oct2point)
-+	__mkcgo__dlsym(EC_POINT_point2oct)
-+	__mkcgo__dlsym(ERR_clear_error)
-+	__mkcgo__dlsym(ERR_error_string_n)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_set_key_length)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_set_padding)
-+	__mkcgo__dlsym(EVP_CipherInit_ex)
-+	__mkcgo__dlsym(EVP_CipherUpdate)
-+	__mkcgo__dlsym(EVP_DecryptFinal_ex)
-+	__mkcgo__dlsym(EVP_DecryptInit_ex)
-+	__mkcgo__dlsym(EVP_DecryptUpdate)
-+	__mkcgo__dlsym(EVP_Digest)
-+	__mkcgo__dlsym(EVP_DigestFinal_ex)
-+	__mkcgo__dlsym(EVP_DigestInit)
-+	__mkcgo__dlsym(EVP_DigestInit_ex)
-+	__mkcgo__dlsym(EVP_DigestSignFinal)
-+	__mkcgo__dlsym(EVP_DigestSignInit)
-+	__mkcgo__dlsym(EVP_DigestUpdate)
-+	__mkcgo__dlsym(EVP_DigestVerifyFinal)
-+	__mkcgo__dlsym(EVP_DigestVerifyInit)
-+	__mkcgo__dlsym(EVP_EncryptFinal_ex)
-+	__mkcgo__dlsym(EVP_EncryptInit_ex)
-+	__mkcgo__dlsym(EVP_EncryptUpdate)
-+	__mkcgo__dlsym(EVP_MD_CTX_copy)
-+	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
-+	__mkcgo__dlsym(EVP_MD_CTX_free)
-+	__mkcgo__dlsym(EVP_MD_CTX_new)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_free)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new_id)
-+	__mkcgo__dlsym(EVP_PKEY_decrypt)
-+	__mkcgo__dlsym(EVP_PKEY_decrypt_init)
-+	__mkcgo__dlsym(EVP_PKEY_derive)
-+	__mkcgo__dlsym(EVP_PKEY_derive_init)
-+	__mkcgo__dlsym(EVP_PKEY_derive_set_peer)
-+	__mkcgo__dlsym(EVP_PKEY_encrypt)
-+	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
-+	__mkcgo__dlsym(EVP_PKEY_free)
-+	__mkcgo__dlsym(EVP_PKEY_keygen)
-+	__mkcgo__dlsym(EVP_PKEY_keygen_init)
-+	__mkcgo__dlsym(EVP_PKEY_new)
-+	__mkcgo__dlsym(EVP_PKEY_paramgen)
-+	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
-+	__mkcgo__dlsym(EVP_PKEY_sign)
-+	__mkcgo__dlsym(EVP_PKEY_sign_init)
-+	__mkcgo__dlsym(EVP_PKEY_verify)
-+	__mkcgo__dlsym(EVP_PKEY_verify_init)
-+	__mkcgo__dlsym(EVP_aes_128_cbc)
-+	__mkcgo__dlsym(EVP_aes_128_ctr)
-+	__mkcgo__dlsym(EVP_aes_128_ecb)
-+	__mkcgo__dlsym(EVP_aes_128_gcm)
-+	__mkcgo__dlsym(EVP_aes_192_cbc)
-+	__mkcgo__dlsym(EVP_aes_192_ctr)
-+	__mkcgo__dlsym(EVP_aes_192_ecb)
-+	__mkcgo__dlsym(EVP_aes_192_gcm)
-+	__mkcgo__dlsym(EVP_aes_256_cbc)
-+	__mkcgo__dlsym(EVP_aes_256_ctr)
-+	__mkcgo__dlsym(EVP_aes_256_ecb)
-+	__mkcgo__dlsym(EVP_aes_256_gcm)
-+	__mkcgo__dlsym(EVP_des_cbc)
-+	__mkcgo__dlsym(EVP_des_ecb)
-+	__mkcgo__dlsym(EVP_des_ede3_cbc)
-+	__mkcgo__dlsym(EVP_des_ede3_ecb)
-+	__mkcgo__dlsym(EVP_md4)
-+	__mkcgo__dlsym(EVP_md5)
-+	__mkcgo__dlsym(EVP_md5_sha1)
-+	__mkcgo__dlsym(EVP_rc4)
-+	__mkcgo__dlsym(EVP_ripemd160)
-+	__mkcgo__dlsym(EVP_sha1)
-+	__mkcgo__dlsym(EVP_sha224)
-+	__mkcgo__dlsym(EVP_sha256)
-+	__mkcgo__dlsym(EVP_sha384)
-+	__mkcgo__dlsym(EVP_sha512)
-+	__mkcgo__dlsym(OBJ_nid2sn)
-+	__mkcgo__dlsym(OPENSSL_init)
-+	__mkcgo__dlsym(OPENSSL_init_crypto)
-+	__mkcgo__dlsym(OpenSSL_version)
-+	__mkcgo__dlsym(PKCS5_PBKDF2_HMAC)
-+	__mkcgo__dlsym(RAND_bytes)
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
++)
++
++type stack_t struct {
++	/* not implemented */
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
+new file mode 100644
+index 00000000000000..b08a44a1001bc0
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
+@@ -0,0 +1,20 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+void __mkcgo_unload_() {
-+	_g_BN_bin2bn = NULL;
-+	_g_BN_bn2binpad = NULL;
-+	_g_BN_bn2lebinpad = NULL;
-+	_g_BN_clear = NULL;
-+	_g_BN_clear_free = NULL;
-+	_g_BN_free = NULL;
-+	_g_BN_lebin2bn = NULL;
-+	_g_BN_new = NULL;
-+	_g_BN_num_bits = NULL;
-+	_g_CRYPTO_free = NULL;
-+	_g_CRYPTO_malloc = NULL;
-+	_g_EC_GROUP_free = NULL;
-+	_g_EC_GROUP_new_by_curve_name = NULL;
-+	_g_EC_POINT_free = NULL;
-+	_g_EC_POINT_mul = NULL;
-+	_g_EC_POINT_new = NULL;
-+	_g_EC_POINT_oct2point = NULL;
-+	_g_EC_POINT_point2oct = NULL;
-+	_g_ERR_clear_error = NULL;
-+	_g_ERR_error_string_n = NULL;
-+	_g_EVP_CIPHER_CTX_ctrl = NULL;
-+	_g_EVP_CIPHER_CTX_free = NULL;
-+	_g_EVP_CIPHER_CTX_new = NULL;
-+	_g_EVP_CIPHER_CTX_set_key_length = NULL;
-+	_g_EVP_CIPHER_CTX_set_padding = NULL;
-+	_g_EVP_CipherInit_ex = NULL;
-+	_g_EVP_CipherUpdate = NULL;
-+	_g_EVP_DecryptFinal_ex = NULL;
-+	_g_EVP_DecryptInit_ex = NULL;
-+	_g_EVP_DecryptUpdate = NULL;
-+	_g_EVP_Digest = NULL;
-+	_g_EVP_DigestFinal_ex = NULL;
-+	_g_EVP_DigestInit = NULL;
-+	_g_EVP_DigestInit_ex = NULL;
-+	_g_EVP_DigestSignFinal = NULL;
-+	_g_EVP_DigestSignInit = NULL;
-+	_g_EVP_DigestUpdate = NULL;
-+	_g_EVP_DigestVerifyFinal = NULL;
-+	_g_EVP_DigestVerifyInit = NULL;
-+	_g_EVP_EncryptFinal_ex = NULL;
-+	_g_EVP_EncryptInit_ex = NULL;
-+	_g_EVP_EncryptUpdate = NULL;
-+	_g_EVP_MD_CTX_copy = NULL;
-+	_g_EVP_MD_CTX_copy_ex = NULL;
-+	_g_EVP_MD_CTX_free = NULL;
-+	_g_EVP_MD_CTX_new = NULL;
-+	_g_EVP_PKEY_CTX_ctrl = NULL;
-+	_g_EVP_PKEY_CTX_free = NULL;
-+	_g_EVP_PKEY_CTX_new = NULL;
-+	_g_EVP_PKEY_CTX_new_id = NULL;
-+	_g_EVP_PKEY_decrypt = NULL;
-+	_g_EVP_PKEY_decrypt_init = NULL;
-+	_g_EVP_PKEY_derive = NULL;
-+	_g_EVP_PKEY_derive_init = NULL;
-+	_g_EVP_PKEY_derive_set_peer = NULL;
-+	_g_EVP_PKEY_encrypt = NULL;
-+	_g_EVP_PKEY_encrypt_init = NULL;
-+	_g_EVP_PKEY_free = NULL;
-+	_g_EVP_PKEY_keygen = NULL;
-+	_g_EVP_PKEY_keygen_init = NULL;
-+	_g_EVP_PKEY_new = NULL;
-+	_g_EVP_PKEY_paramgen = NULL;
-+	_g_EVP_PKEY_paramgen_init = NULL;
-+	_g_EVP_PKEY_sign = NULL;
-+	_g_EVP_PKEY_sign_init = NULL;
-+	_g_EVP_PKEY_verify = NULL;
-+	_g_EVP_PKEY_verify_init = NULL;
-+	_g_EVP_aes_128_cbc = NULL;
-+	_g_EVP_aes_128_ctr = NULL;
-+	_g_EVP_aes_128_ecb = NULL;
-+	_g_EVP_aes_128_gcm = NULL;
-+	_g_EVP_aes_192_cbc = NULL;
-+	_g_EVP_aes_192_ctr = NULL;
-+	_g_EVP_aes_192_ecb = NULL;
-+	_g_EVP_aes_192_gcm = NULL;
-+	_g_EVP_aes_256_cbc = NULL;
-+	_g_EVP_aes_256_ctr = NULL;
-+	_g_EVP_aes_256_ecb = NULL;
-+	_g_EVP_aes_256_gcm = NULL;
-+	_g_EVP_des_cbc = NULL;
-+	_g_EVP_des_ecb = NULL;
-+	_g_EVP_des_ede3_cbc = NULL;
-+	_g_EVP_des_ede3_ecb = NULL;
-+	_g_EVP_md4 = NULL;
-+	_g_EVP_md5 = NULL;
-+	_g_EVP_md5_sha1 = NULL;
-+	_g_EVP_rc4 = NULL;
-+	_g_EVP_ripemd160 = NULL;
-+	_g_EVP_sha1 = NULL;
-+	_g_EVP_sha224 = NULL;
-+	_g_EVP_sha256 = NULL;
-+	_g_EVP_sha384 = NULL;
-+	_g_EVP_sha512 = NULL;
-+	_g_OBJ_nid2sn = NULL;
-+	_g_OPENSSL_init = NULL;
-+	_g_OPENSSL_init_crypto = NULL;
-+	_g_OpenSSL_version = NULL;
-+	_g_PKCS5_PBKDF2_HMAC = NULL;
-+	_g_RAND_bytes = NULL;
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_cond_t  [48]byte
++	pthread_mutex_t [48]byte
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{}
++)
++
++type stack_t struct {
++	/* not implemented */
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
+new file mode 100644
+index 00000000000000..42c2b7d0b8176f
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
+@@ -0,0 +1,34 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+void __mkcgo_load_111(void* handle) {
-+	__mkcgo__dlsym(EVP_DigestSign)
-+	__mkcgo__dlsym(EVP_DigestVerify)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
-+	__mkcgo__dlsym(EVP_sha3_224)
-+	__mkcgo__dlsym(EVP_sha3_256)
-+	__mkcgo__dlsym(EVP_sha3_384)
-+	__mkcgo__dlsym(EVP_sha3_512)
-+	__mkcgo__dlsym(EVP_sha512_224)
-+	__mkcgo__dlsym(EVP_sha512_256)
++//go:build !cgo && linux
++
++package fakecgo
++
++import "unsafe"
++
++//go:linkname _cgo_libc_setegid syscall.cgo_libc_setegid
++//go:linkname _cgo_libc_seteuid syscall.cgo_libc_seteuid
++//go:linkname _cgo_libc_setgid syscall.cgo_libc_setgid
++//go:linkname _cgo_libc_setregid syscall.cgo_libc_setregid
++//go:linkname _cgo_libc_setresgid syscall.cgo_libc_setresgid
++//go:linkname _cgo_libc_setresuid syscall.cgo_libc_setresuid
++//go:linkname _cgo_libc_setreuid syscall.cgo_libc_setreuid
++//go:linkname _cgo_libc_setuid syscall.cgo_libc_setuid
++//go:linkname _cgo_libc_setgroups syscall.cgo_libc_setgroups
++
++var _cgo_libc_setegid = &_cgo_purego_setegid_trampoline
++var _cgo_libc_seteuid = &_cgo_purego_seteuid_trampoline
++var _cgo_libc_setgid = &_cgo_purego_setgid_trampoline
++var _cgo_libc_setregid = &_cgo_purego_setregid_trampoline
++var _cgo_libc_setresgid = &_cgo_purego_setresgid_trampoline
++var _cgo_libc_setresuid = &_cgo_purego_setresuid_trampoline
++var _cgo_libc_setreuid = &_cgo_purego_setreuid_trampoline
++var _cgo_libc_setuid = &_cgo_purego_setuid_trampoline
++var _cgo_libc_setgroups = &_cgo_purego_setgroups_trampoline
++
++func errno() int32 {
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	loc := __errno_location()
++	return **(**int32)(unsafe.Pointer(&loc))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
+new file mode 100644
+index 00000000000000..8d7b9831d31fae
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
+@@ -0,0 +1,19 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || linux)
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
++//go:linkname _cgo_setenv runtime._cgo_setenv
++var x_cgo_setenv_trampoline byte
++var _cgo_setenv = &x_cgo_setenv_trampoline
++
++//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
++//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
++var x_cgo_unsetenv_trampoline byte
++var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
+new file mode 100644
+index 00000000000000..52e7e7e3824dcb
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
+@@ -0,0 +1,225 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++//go:nosplit
++//go:norace
++func malloc(size uintptr) unsafe.Pointer {
++	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
 +}
 +
-+void __mkcgo_unload_111() {
-+	_g_EVP_DigestSign = NULL;
-+	_g_EVP_DigestVerify = NULL;
-+	_g_EVP_PKEY_get_raw_private_key = NULL;
-+	_g_EVP_PKEY_get_raw_public_key = NULL;
-+	_g_EVP_PKEY_new_raw_private_key = NULL;
-+	_g_EVP_PKEY_new_raw_public_key = NULL;
-+	_g_EVP_sha3_224 = NULL;
-+	_g_EVP_sha3_256 = NULL;
-+	_g_EVP_sha3_384 = NULL;
-+	_g_EVP_sha3_512 = NULL;
-+	_g_EVP_sha512_224 = NULL;
-+	_g_EVP_sha512_256 = NULL;
++//go:nosplit
++//go:norace
++func free(ptr unsafe.Pointer) {
++	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
 +}
 +
-+void __mkcgo_load_3(void* handle) {
-+	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
-+	__mkcgo__dlsym(ERR_get_error_all)
-+	__mkcgo__dlsym(EVP_CIPHER_fetch)
-+	__mkcgo__dlsym(EVP_CIPHER_get0_name)
-+	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
-+	__mkcgo__dlsym(EVP_KDF_CTX_free)
-+	__mkcgo__dlsym(EVP_KDF_CTX_get_kdf_size)
-+	__mkcgo__dlsym(EVP_KDF_CTX_new)
-+	__mkcgo__dlsym(EVP_KDF_CTX_set_params)
-+	__mkcgo__dlsym(EVP_KDF_derive)
-+	__mkcgo__dlsym(EVP_KDF_fetch)
-+	__mkcgo__dlsym(EVP_KDF_free)
-+	__mkcgo__dlsym(EVP_MAC_CTX_dup)
-+	__mkcgo__dlsym(EVP_MAC_CTX_free)
-+	__mkcgo__dlsym(EVP_MAC_CTX_new)
-+	__mkcgo__dlsym(EVP_MAC_CTX_set_params)
-+	__mkcgo__dlsym(EVP_MAC_fetch)
-+	__mkcgo__dlsym(EVP_MAC_final)
-+	__mkcgo__dlsym(EVP_MAC_init)
-+	__mkcgo__dlsym(EVP_MAC_update)
-+	__mkcgo__dlsym(EVP_MD_CTX_get_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_gettable_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_set_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_settable_params)
-+	__mkcgo__dlsym(EVP_MD_fetch)
-+	__mkcgo__dlsym(EVP_MD_free)
-+	__mkcgo__dlsym(EVP_MD_get0_name)
-+	__mkcgo__dlsym(EVP_MD_get0_provider)
-+	__mkcgo__dlsym(EVP_MD_get_block_size)
-+	__mkcgo__dlsym(EVP_MD_get_size)
-+	__mkcgo__dlsym(EVP_MD_get_type)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_add1_hkdf_info)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new_from_pkey)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set0_rsa_oaep_label)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_key)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
-+	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
-+	__mkcgo__dlsym(EVP_PKEY_fromdata)
-+	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
-+	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_get_bits)
-+	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
-+	__mkcgo__dlsym(EVP_PKEY_get_size)
-+	__mkcgo__dlsym(EVP_PKEY_private_check)
-+	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
-+	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_up_ref)
-+	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
-+	__mkcgo__dlsym(EVP_SIGNATURE_free)
-+	__mkcgo__dlsym(EVP_default_properties_enable_fips)
-+	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_free)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_new)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_BN)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_int32)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_octet_string)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
-+	__mkcgo__dlsym(OSSL_PARAM_free)
-+	__mkcgo__dlsym(OSSL_PARAM_locate_const)
-+	__mkcgo__dlsym(OSSL_PROVIDER_available)
-+	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
-+	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
++//go:nosplit
++//go:norace
++func setenv(name *byte, value *byte, overwrite int32) int32 {
++	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
 +}
 +
-+void __mkcgo_unload_3() {
-+	_g_EC_POINT_set_affine_coordinates = NULL;
-+	_g_ERR_get_error_all = NULL;
-+	_g_EVP_CIPHER_fetch = NULL;
-+	_g_EVP_CIPHER_get0_name = NULL;
-+	_g_EVP_CIPHER_get_block_size = NULL;
-+	_g_EVP_KDF_CTX_free = NULL;
-+	_g_EVP_KDF_CTX_get_kdf_size = NULL;
-+	_g_EVP_KDF_CTX_new = NULL;
-+	_g_EVP_KDF_CTX_set_params = NULL;
-+	_g_EVP_KDF_derive = NULL;
-+	_g_EVP_KDF_fetch = NULL;
-+	_g_EVP_KDF_free = NULL;
-+	_g_EVP_MAC_CTX_dup = NULL;
-+	_g_EVP_MAC_CTX_free = NULL;
-+	_g_EVP_MAC_CTX_new = NULL;
-+	_g_EVP_MAC_CTX_set_params = NULL;
-+	_g_EVP_MAC_fetch = NULL;
-+	_g_EVP_MAC_final = NULL;
-+	_g_EVP_MAC_init = NULL;
-+	_g_EVP_MAC_update = NULL;
-+	_g_EVP_MD_CTX_get_params = NULL;
-+	_g_EVP_MD_CTX_gettable_params = NULL;
-+	_g_EVP_MD_CTX_set_params = NULL;
-+	_g_EVP_MD_CTX_settable_params = NULL;
-+	_g_EVP_MD_fetch = NULL;
-+	_g_EVP_MD_free = NULL;
-+	_g_EVP_MD_get0_name = NULL;
-+	_g_EVP_MD_get0_provider = NULL;
-+	_g_EVP_MD_get_block_size = NULL;
-+	_g_EVP_MD_get_size = NULL;
-+	_g_EVP_MD_get_type = NULL;
-+	_g_EVP_PKEY_CTX_add1_hkdf_info = NULL;
-+	_g_EVP_PKEY_CTX_new_from_pkey = NULL;
-+	_g_EVP_PKEY_CTX_set0_rsa_oaep_label = NULL;
-+	_g_EVP_PKEY_CTX_set1_hkdf_key = NULL;
-+	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
-+	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
-+	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
-+	_g_EVP_PKEY_Q_keygen = NULL;
-+	_g_EVP_PKEY_fromdata = NULL;
-+	_g_EVP_PKEY_fromdata_init = NULL;
-+	_g_EVP_PKEY_get1_encoded_public_key = NULL;
-+	_g_EVP_PKEY_get_bits = NULL;
-+	_g_EVP_PKEY_get_bn_param = NULL;
-+	_g_EVP_PKEY_get_size = NULL;
-+	_g_EVP_PKEY_private_check = NULL;
-+	_g_EVP_PKEY_public_check_quick = NULL;
-+	_g_EVP_PKEY_set1_encoded_public_key = NULL;
-+	_g_EVP_PKEY_up_ref = NULL;
-+	_g_EVP_SIGNATURE_fetch = NULL;
-+	_g_EVP_SIGNATURE_free = NULL;
-+	_g_EVP_default_properties_enable_fips = NULL;
-+	_g_EVP_default_properties_is_fips_enabled = NULL;
-+	_g_OSSL_PARAM_BLD_free = NULL;
-+	_g_OSSL_PARAM_BLD_new = NULL;
-+	_g_OSSL_PARAM_BLD_push_BN = NULL;
-+	_g_OSSL_PARAM_BLD_push_int32 = NULL;
-+	_g_OSSL_PARAM_BLD_push_octet_string = NULL;
-+	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
-+	_g_OSSL_PARAM_BLD_to_param = NULL;
-+	_g_OSSL_PARAM_free = NULL;
-+	_g_OSSL_PARAM_locate_const = NULL;
-+	_g_OSSL_PROVIDER_available = NULL;
-+	_g_OSSL_PROVIDER_get0_name = NULL;
-+	_g_OSSL_PROVIDER_try_load = NULL;
++//go:nosplit
++//go:norace
++func unsetenv(name *byte) int32 {
++	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
 +}
 +
-+void __mkcgo_load_init_1(void* handle) {
-+	__mkcgo__dlsym(FIPS_mode)
-+	__mkcgo__dlsym(FIPS_mode_set)
++//go:nosplit
++//go:norace
++func sigfillset(set *sigset_t) int32 {
++	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
 +}
 +
-+void __mkcgo_unload_init_1() {
-+	_g_FIPS_mode = NULL;
-+	_g_FIPS_mode_set = NULL;
++//go:nosplit
++//go:norace
++func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
++	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
 +}
 +
-+void __mkcgo_load_init_3(void* handle) {
-+	__mkcgo__dlsym(ERR_clear_error)
-+	__mkcgo__dlsym(EVP_MD_fetch)
-+	__mkcgo__dlsym(EVP_MD_free)
-+	__mkcgo__dlsym(EVP_MD_get0_provider)
-+	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++//go:nosplit
++//go:norace
++func abort() {
++	call5(abortABI0, 0, 0, 0, 0, 0)
 +}
 +
-+void __mkcgo_unload_init_3() {
-+	_g_ERR_clear_error = NULL;
-+	_g_EVP_MD_fetch = NULL;
-+	_g_EVP_MD_free = NULL;
-+	_g_EVP_MD_get0_provider = NULL;
-+	_g_EVP_default_properties_is_fips_enabled = NULL;
++//go:nosplit
++//go:norace
++func sigaltstack(ss *stack_t, old_ss *stack_t) int32 {
++	return int32(call5(sigaltstackABI0, uintptr(unsafe.Pointer(ss)), uintptr(unsafe.Pointer(old_ss)), 0, 0, 0))
 +}
 +
-+void __mkcgo_load_legacy_1(void* handle) {
-+	__mkcgo__dlsym(DSA_free)
-+	__mkcgo__dlsym(DSA_generate_key)
-+	__mkcgo__dlsym(DSA_get0_key)
-+	__mkcgo__dlsym(DSA_get0_pqg)
-+	__mkcgo__dlsym(DSA_new)
-+	__mkcgo__dlsym(DSA_set0_key)
-+	__mkcgo__dlsym(DSA_set0_pqg)
-+	__mkcgo__dlsym(EC_KEY_check_key)
-+	__mkcgo__dlsym(EC_KEY_free)
-+	__mkcgo__dlsym(EC_KEY_get0_group)
-+	__mkcgo__dlsym(EC_KEY_get0_private_key)
-+	__mkcgo__dlsym(EC_KEY_get0_public_key)
-+	__mkcgo__dlsym(EC_KEY_new_by_curve_name)
-+	__mkcgo__dlsym(EC_KEY_set_private_key)
-+	__mkcgo__dlsym(EC_KEY_set_public_key)
-+	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
-+	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
-+	__mkcgo__dlsym(ERR_get_error_line)
-+	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
-+	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
-+	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
-+	__mkcgo__dlsym(EVP_PKEY_assign)
-+	__mkcgo__dlsym(EVP_PKEY_get0_DSA)
-+	__mkcgo__dlsym(EVP_PKEY_get0_EC_KEY)
-+	__mkcgo__dlsym(EVP_PKEY_get1_RSA)
-+	__mkcgo__dlsym2(EVP_PKEY_get_bits, EVP_PKEY_bits)
-+	__mkcgo__dlsym2(EVP_PKEY_get_size, EVP_PKEY_size)
-+	__mkcgo__dlsym(EVP_PKEY_set1_EC_KEY)
-+	__mkcgo__dlsym(FIPS_mode)
-+	__mkcgo__dlsym(FIPS_mode_set)
-+	__mkcgo__dlsym(HMAC_CTX_copy)
-+	__mkcgo__dlsym(HMAC_CTX_free)
-+	__mkcgo__dlsym(HMAC_CTX_new)
-+	__mkcgo__dlsym(HMAC_Final)
-+	__mkcgo__dlsym(HMAC_Init_ex)
-+	__mkcgo__dlsym(HMAC_Update)
-+	__mkcgo__dlsym(RSA_free)
-+	__mkcgo__dlsym(RSA_get0_crt_params)
-+	__mkcgo__dlsym(RSA_get0_factors)
-+	__mkcgo__dlsym(RSA_get0_key)
-+	__mkcgo__dlsym(RSA_new)
-+	__mkcgo__dlsym(RSA_set0_crt_params)
-+	__mkcgo__dlsym(RSA_set0_factors)
-+	__mkcgo__dlsym(RSA_set0_key)
++//go:nosplit
++//go:norace
++func pthread_attr_init(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
 +}
 +
-+void __mkcgo_unload_legacy_1() {
-+	_g_DSA_free = NULL;
-+	_g_DSA_generate_key = NULL;
-+	_g_DSA_get0_key = NULL;
-+	_g_DSA_get0_pqg = NULL;
-+	_g_DSA_new = NULL;
-+	_g_DSA_set0_key = NULL;
-+	_g_DSA_set0_pqg = NULL;
-+	_g_EC_KEY_check_key = NULL;
-+	_g_EC_KEY_free = NULL;
-+	_g_EC_KEY_get0_group = NULL;
-+	_g_EC_KEY_get0_private_key = NULL;
-+	_g_EC_KEY_get0_public_key = NULL;
-+	_g_EC_KEY_new_by_curve_name = NULL;
-+	_g_EC_KEY_set_private_key = NULL;
-+	_g_EC_KEY_set_public_key = NULL;
-+	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
-+	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
-+	_g_ERR_get_error_line = NULL;
-+	_g_EVP_CIPHER_get_block_size = NULL;
-+	_g_EVP_MD_get_block_size = NULL;
-+	_g_EVP_MD_get_size = NULL;
-+	_g_EVP_PKEY_assign = NULL;
-+	_g_EVP_PKEY_get0_DSA = NULL;
-+	_g_EVP_PKEY_get0_EC_KEY = NULL;
-+	_g_EVP_PKEY_get1_RSA = NULL;
-+	_g_EVP_PKEY_get_bits = NULL;
-+	_g_EVP_PKEY_get_size = NULL;
-+	_g_EVP_PKEY_set1_EC_KEY = NULL;
-+	_g_FIPS_mode = NULL;
-+	_g_FIPS_mode_set = NULL;
-+	_g_HMAC_CTX_copy = NULL;
-+	_g_HMAC_CTX_free = NULL;
-+	_g_HMAC_CTX_new = NULL;
-+	_g_HMAC_Final = NULL;
-+	_g_HMAC_Init_ex = NULL;
-+	_g_HMAC_Update = NULL;
-+	_g_RSA_free = NULL;
-+	_g_RSA_get0_crt_params = NULL;
-+	_g_RSA_get0_factors = NULL;
-+	_g_RSA_get0_key = NULL;
-+	_g_RSA_new = NULL;
-+	_g_RSA_set0_crt_params = NULL;
-+	_g_RSA_set0_factors = NULL;
-+	_g_RSA_set0_key = NULL;
++//go:nosplit
++//go:norace
++func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
++	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
 +}
 +
-+void __mkcgo_load_version(void* handle) {
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_major, OPENSSL_version_major)
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_minor, OPENSSL_version_minor)
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_patch, OPENSSL_version_patch)
-+	__mkcgo__dlsym_nocheck(OpenSSL_version_num, OpenSSL_version_num)
++//go:nosplit
++//go:norace
++func pthread_detach(thread pthread_t) int32 {
++	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
 +}
 +
-+void __mkcgo_unload_version() {
-+	_g_OPENSSL_version_major = NULL;
-+	_g_OPENSSL_version_minor = NULL;
-+	_g_OPENSSL_version_patch = NULL;
-+	_g_OpenSSL_version_num = NULL;
++//go:nosplit
++//go:norace
++func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
++	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
 +}
 +
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
-+	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
 +}
 +
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
-+	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
 +}
 +
-+void _mkcgo_BN_clear(_BIGNUM_PTR _arg0) {
-+	_g_BN_clear(_arg0);
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
 +}
 +
-+void _mkcgo_BN_clear_free(_BIGNUM_PTR _arg0) {
-+	_g_BN_clear_free(_arg0);
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
 +}
 +
-+void _mkcgo_BN_free(_BIGNUM_PTR _arg0) {
-+	_g_BN_free(_arg0);
++//go:nosplit
++//go:norace
++func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_BIGNUM_PTR _ret = _g_BN_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
++	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
 +}
 +
-+int _mkcgo_BN_num_bits(const _BIGNUM_PTR _arg0) {
-+	return _g_BN_num_bits(_arg0);
++//go:nosplit
++//go:norace
++func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
++	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
 +}
 +
-+void _mkcgo_CRYPTO_free(void* _arg0, const char* _arg1, int _arg2) {
-+	_g_CRYPTO_free(_arg0, _arg1, _arg2);
-+}
++//go:linkname _malloc _malloc
++var _malloc uint8
++var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
 +
-+void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _free _free
++var _free uint8
++var freeABI0 = uintptr(unsafe.Pointer(&_free))
 +
-+void _mkcgo_DSA_free(_DSA_PTR _arg0) {
-+	_g_DSA_free(_arg0);
-+}
++//go:linkname _setenv _setenv
++var _setenv uint8
++var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
 +
-+int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_DSA_generate_key(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _unsetenv _unsetenv
++var _unsetenv uint8
++var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
 +
-+void _mkcgo_DSA_get0_key(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
-+	_g_DSA_get0_key(_arg0, _arg1, _arg2);
-+}
++//go:linkname _sigfillset _sigfillset
++var _sigfillset uint8
++var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
 +
-+void _mkcgo_DSA_get0_pqg(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
-+}
++//go:linkname _nanosleep _nanosleep
++var _nanosleep uint8
++var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
 +
-+_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_DSA_PTR _ret = _g_DSA_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _abort _abort
++var _abort uint8
++var abortABI0 = uintptr(unsafe.Pointer(&_abort))
 +
-+int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _sigaltstack _sigaltstack
++var _sigaltstack uint8
++var sigaltstackABI0 = uintptr(unsafe.Pointer(&_sigaltstack))
 +
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_attr_init _pthread_attr_init
++var _pthread_attr_init uint8
++var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
 +
-+void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR _arg0) {
-+	_g_EC_GROUP_free(_arg0);
-+}
++//go:linkname _pthread_create _pthread_create
++var _pthread_create uint8
++var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
 +
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_detach _pthread_detach
++var _pthread_detach uint8
++var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
 +
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_KEY_check_key(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_sigmask _pthread_sigmask
++var _pthread_sigmask uint8
++var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
 +
-+void _mkcgo_EC_KEY_free(_EC_KEY_PTR _arg0) {
-+	_g_EC_KEY_free(_arg0);
-+}
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
 +
-+const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_group(_arg0);
-+}
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
 +
-+const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_private_key(_arg0);
-+}
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
 +
-+const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_public_key(_arg0);
-+}
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
 +
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
 +
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_mutex_lock _pthread_mutex_lock
++var _pthread_mutex_lock uint8
++var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
 +
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
++var _pthread_mutex_unlock uint8
++var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
 +
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
++var _pthread_cond_broadcast uint8
++var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
 +
-+void _mkcgo_EC_POINT_free(_EC_POINT_PTR _arg0) {
-+	_g_EC_POINT_free(_arg0);
-+}
++//go:linkname _pthread_setspecific _pthread_setspecific
++var _pthread_setspecific uint8
++var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
+new file mode 100644
+index 00000000000000..8c4489f0369c25
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
+@@ -0,0 +1,30 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
+new file mode 100644
+index 00000000000000..a890cacc7147b2
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
+@@ -0,0 +1,277 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:build !cgo
 +
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++package fakecgo
 +
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++import "unsafe"
 +
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.6"
++//go:cgo_import_dynamic purego_free free "libc.so.6"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.6"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.6"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.6"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.6"
++//go:cgo_import_dynamic purego_abort abort "libc.so.6"
++//go:cgo_import_dynamic purego_sigaltstack sigaltstack "libc.so.6"
++//go:cgo_import_dynamic purego___errno_location __errno_location "libc.so.6"
++//go:cgo_import_dynamic purego_setegid setegid "libc.so.6"
++//go:cgo_import_dynamic purego_seteuid seteuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgid setgid "libc.so.6"
++//go:cgo_import_dynamic purego_setregid setregid "libc.so.6"
++//go:cgo_import_dynamic purego_setresgid setresgid "libc.so.6"
++//go:cgo_import_dynamic purego_setresuid setresuid "libc.so.6"
++//go:cgo_import_dynamic purego_setreuid setreuid "libc.so.6"
++//go:cgo_import_dynamic purego_setuid setuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgroups setgroups "libc.so.6"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
 +
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func __errno_location() uintptr {
++	return uintptr(call5(__errno_locationABI0, 0, 0, 0, 0, 0))
 +}
 +
-+void _mkcgo_ERR_clear_error(void) {
-+	_g_ERR_clear_error();
++//go:nosplit
++//go:norace
++func setegid(egid int) int32 {
++	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
 +}
 +
-+void _mkcgo_ERR_error_string_n(unsigned long _arg0, char* _arg1, size_t _arg2) {
-+	_g_ERR_error_string_n(_arg0, _arg1, _arg2);
++//go:nosplit
++//go:norace
++func seteuid(euid int) int32 {
++	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
 +}
 +
-+unsigned long _mkcgo_ERR_get_error_all(const char** _arg0, int* _arg1, const char** _arg2, const char** _arg3, int* _arg4) {
-+	return _g_ERR_get_error_all(_arg0, _arg1, _arg2, _arg3, _arg4);
++//go:nosplit
++//go:norace
++func setgid(gid int) int32 {
++	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
 +}
 +
-+unsigned long _mkcgo_ERR_get_error_line(const char** _arg0, int* _arg1) {
-+	return _g_ERR_get_error_line(_arg0, _arg1);
++//go:nosplit
++//go:norace
++func setregid(rgid int, egid int) int32 {
++	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func setresgid(rgid int, egid int, sgid int) int32 {
++	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
 +}
 +
-+void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR _arg0) {
-+	_g_EVP_CIPHER_CTX_free(_arg0);
++//go:nosplit
++//go:norace
++func setresuid(ruid int, euid int, suid int) int32 {
++	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
 +}
 +
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func setreuid(ruid int, euid int) int32 {
++	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func setuid(uid int) int32 {
++	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func setgroups(ngid int, gidset *int) int32 {
++	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
 +}
 +
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname ___errno_location ___errno_location
++var ___errno_location uint8
++var __errno_locationABI0 = uintptr(unsafe.Pointer(&___errno_location))
 +
-+const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR _arg0) {
-+	return _g_EVP_CIPHER_get0_name(_arg0);
-+}
++//go:linkname _setegid _setegid
++var _setegid uint8
++var setegidABI0 = uintptr(unsafe.Pointer(&_setegid))
 +
-+int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR _arg0) {
-+	return _g_EVP_CIPHER_get_block_size(_arg0);
-+}
++//go:linkname _seteuid _seteuid
++var _seteuid uint8
++var seteuidABI0 = uintptr(unsafe.Pointer(&_seteuid))
 +
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setgid _setgid
++var _setgid uint8
++var setgidABI0 = uintptr(unsafe.Pointer(&_setgid))
 +
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setregid _setregid
++var _setregid uint8
++var setregidABI0 = uintptr(unsafe.Pointer(&_setregid))
 +
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setresgid _setresgid
++var _setresgid uint8
++var setresgidABI0 = uintptr(unsafe.Pointer(&_setresgid))
 +
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setresuid _setresuid
++var _setresuid uint8
++var setresuidABI0 = uintptr(unsafe.Pointer(&_setresuid))
 +
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setreuid _setreuid
++var _setreuid uint8
++var setreuidABI0 = uintptr(unsafe.Pointer(&_setreuid))
 +
-+int _mkcgo_EVP_Digest(const void* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setuid _setuid
++var _setuid uint8
++var setuidABI0 = uintptr(unsafe.Pointer(&_setuid))
 +
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _setgroups _setgroups
++var _setgroups uint8
++var setgroupsABI0 = uintptr(unsafe.Pointer(&_setgroups))
 +
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setegid_trampoline _cgo_purego_setegid_trampoline
++var _cgo_purego_setegid_trampoline byte
++var x_cgo_purego_setegid_call = x_cgo_purego_setegid
 +
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setegid(c *argset) {
++	ret := setegid(int(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:linkname _cgo_purego_seteuid_trampoline _cgo_purego_seteuid_trampoline
++var _cgo_purego_seteuid_trampoline byte
++var x_cgo_purego_seteuid_call = x_cgo_purego_seteuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_seteuid(c *argset) {
++	ret := seteuid(int(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:linkname _cgo_purego_setgid_trampoline _cgo_purego_setgid_trampoline
++var _cgo_purego_setgid_trampoline byte
++var x_cgo_purego_setgid_call = x_cgo_purego_setgid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgid(c *argset) {
++	ret := setgid(int(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setregid_trampoline _cgo_purego_setregid_trampoline
++var _cgo_purego_setregid_trampoline byte
++var x_cgo_purego_setregid_call = x_cgo_purego_setregid
 +
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const void* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setregid(c *argset) {
++	ret := setregid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setresgid_trampoline _cgo_purego_setresgid_trampoline
++var _cgo_purego_setresgid_trampoline byte
++var x_cgo_purego_setresgid_call = x_cgo_purego_setresgid
 +
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresgid(c *argset) {
++	ret := setresgid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))), int(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setresuid_trampoline _cgo_purego_setresuid_trampoline
++var _cgo_purego_setresuid_trampoline byte
++var x_cgo_purego_setresuid_call = x_cgo_purego_setresuid
 +
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresuid(c *argset) {
++	ret := setresuid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))), int(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setreuid_trampoline _cgo_purego_setreuid_trampoline
++var _cgo_purego_setreuid_trampoline byte
++var x_cgo_purego_setreuid_call = x_cgo_purego_setreuid
 +
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setreuid(c *argset) {
++	ret := setreuid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR _arg0) {
-+	_g_EVP_KDF_CTX_free(_arg0);
-+}
++//go:linkname _cgo_purego_setuid_trampoline _cgo_purego_setuid_trampoline
++var _cgo_purego_setuid_trampoline byte
++var x_cgo_purego_setuid_call = x_cgo_purego_setuid
 +
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setuid(c *argset) {
++	ret := setuid(int(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
 +
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname _cgo_purego_setgroups_trampoline _cgo_purego_setgroups_trampoline
++var _cgo_purego_setgroups_trampoline byte
++var x_cgo_purego_setgroups_call = x_cgo_purego_setgroups
 +
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgroups(c *argset) {
++	ret := setgroups(int(uintptr(c.arg(0))), (*int)(c.arg(1)))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+new file mode 100644
+index 00000000000000..fb0c77210562e9
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,104 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:build !cgo && (darwin || linux)
 +
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
++
++Since we're called from go and call into C we can cheat a bit with the calling conventions:
++ - in go all the registers are caller saved
++ - in C we have a couple of callee saved registers
++
++=> we can use BX, R12, R13, R14, R15 instead of the stack
++
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++*/
++#include "textflag.h"
++#include "go_asm.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), BX
++	XORL AX, AX
++	CALL BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), BX
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL BX
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..e943f137d30225
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,72 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD R1, 16(RSP)
++	MOVD ·x_cgo_init_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_thread_start_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_setenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_unsetenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R1
++	CALL R1
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·threadentry_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	MOVD $0, R0                     // TODO: get the return value from threadentry
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R6
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R6
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
+new file mode 100644
+index 00000000000000..dcd1412237a0a3
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
+@@ -0,0 +1,94 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR _arg0) {
-+	_g_EVP_KDF_free(_arg0);
-+}
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:build !cgo && (darwin || linux)
 +
-+void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR _arg0) {
-+	_g_EVP_MAC_CTX_free(_arg0);
-+}
++#include "textflag.h"
 +
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// these stubs are here because it is not possible to go:linkname directly the C functions on darwin arm64
 +
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_malloc(SB)
++	RET
 +
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_free(SB)
++	RET
 +
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setenv(SB)
++	RET
 +
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_unsetenv(SB)
++	RET
 +
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigfillset(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MD_CTX_copy(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_nanosleep(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_abort(SB)
++	RET
 +
-+void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
-+	_g_EVP_MD_CTX_free(_arg0);
-+}
++TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigaltstack(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_init(SB)
++	RET
 +
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_create(SB)
++	RET
 +
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_detach(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_sigmask(SB)
++	RET
 +
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
++	RET
 +
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
++	RET
 +
-+void _mkcgo_EVP_MD_free(_EVP_MD_PTR _arg0) {
-+	_g_EVP_MD_free(_arg0);
-+}
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++	RET
 +
-+const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get0_name(_arg0);
-+}
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
++	RET
 +
-+const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get0_provider(_arg0);
-+}
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_block_size(_arg0);
-+}
++TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_lock(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_size(_arg0);
-+}
++TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_unlock(SB)
++	RET
 +
-+int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_type(_arg0);
-+}
++TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_cond_broadcast(SB)
++	RET
 +
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_setspecific(SB)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
+new file mode 100644
+index 00000000000000..771f4ba36ce7c9
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
+@@ -0,0 +1,103 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setegid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_seteuid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setgid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setregid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setresgid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setresuid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setreuid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setuid_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOVQ	DI, AX
++	MOVQ	·x_cgo_purego_setgroups_call(SB), DX
++	MOVQ	(DX), CX
++	CALL	CX
++	RET
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	JMP purego_setgroups(SB)
++
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+new file mode 100644
+index 00000000000000..019837bf469751
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+@@ -0,0 +1,103 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setegid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_seteuid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setgid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setregid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setresgid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setresuid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setreuid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setuid_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
++	MOVD	R0, 8(RSP)
++	MOVD	·x_cgo_purego_setgroups_call(SB), R26
++	MOVD	(R26), R2
++	CALL	(R2)
++	RET
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	JMP purego_setgroups(SB)
++
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
+new file mode 100644
+index 00000000000000..c5fc8062b19d60
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
+@@ -0,0 +1,73 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++
++#include "go_asm.h"
++#include "textflag.h"
++
++GLOBL ·syscallNABI0(SB), NOPTR|RODATA, $8
++DATA ·syscallNABI0(SB)/8, $syscallN_trampoline(SB)
++TEXT syscallN_trampoline(SB),NOSPLIT,$0
++	// store argument and original SP in a callee-saved register
++	MOVQ	DI, R13
++	MOVQ	SP, R14
++
++	MOVQ	libcCallInfo_fn(R13), R11
++	MOVQ	libcCallInfo_n(R13), CX
++	MOVQ	libcCallInfo_args(R13), R10
++
++	// Fast version, do not store args on the stack.
++	CMPL	CX, $0;	JE	_0args
++	CMPL	CX, $1;	JE	_1args
++	CMPL	CX, $2;	JE	_2args
++	CMPL	CX, $3;	JE	_3args
++	CMPL	CX, $4;	JE	_4args
++	CMPL	CX, $5;	JE	_5args
++	CMPL	CX, $6;	JE	_6args
++
++	// Reserve stack space for remaining args
++	MOVQ	CX, R12
++	SUBQ	$6, R12
++	ADDQ	$1, R12 // make even number of words for stack alignment
++	ANDQ	$~1, R12
++	SHLQ	$3, R12
++	SUBQ	R12, SP
++
++	// Copy args to the stack.
++	// CX: count of stack arguments (n-6)
++	// SI: &args[6]
++	// DI: copy of RSP
++	SUBQ	$6, CX
++	MOVQ	R10, SI
++	ADDQ	$(8*6), SI
++	MOVQ	SP, DI
++	CLD
++	REP; MOVSQ
++
++_6args:
++	MOVQ	(5*8)(R10), R9
++_5args:
++	MOVQ	(4*8)(R10), R8
++_4args:
++	MOVQ	(3*8)(R10), CX
++_3args:
++	MOVQ	(2*8)(R10), DX
++_2args:
++	MOVQ	(1*8)(R10), SI
++_1args:
++	MOVQ	(0*8)(R10), DI
++_0args:
++
++	XORL	AX, AX	    // vararg: say "no float args"
++
++	CALL	R11
++
++	MOVQ	R14, SP		// free stack space
++
++	// Return result.
++	MOVQ	AX, libcCallInfo_r1(R13)
++	MOVQ	DX, libcCallInfo_r2(R13)
++
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
+new file mode 100644
+index 00000000000000..bda119cb5abd63
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
+@@ -0,0 +1,83 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR _arg0) {
-+	_g_EVP_PKEY_CTX_free(_arg0);
-+}
++//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++
++#include "go_asm.h"
++#include "textflag.h"
++
++GLOBL ·syscallNABI0(SB), NOPTR|RODATA, $8
++DATA ·syscallNABI0(SB)/8, $syscallN_trampoline(SB)
++TEXT syscallN_trampoline(SB),NOSPLIT,$0
++	STP	(R19, R20), 16(RSP) // save old R19, R20
++	MOVD	R0, R19	// save struct pointer
++	MOVD	RSP, R20	// save stack pointer
++	SUB	$16, RSP // reserve 16 bytes for sp-8 where fp may be saved.
++
++	MOVD	libcCallInfo_args(R19), R12
++	// Do we have more than 8 arguments?
++	MOVD	libcCallInfo_n(R19), R0
++	CMP	$0,	R0; BEQ	_0args
++	CMP	$1,	R0; BEQ	_1args
++	CMP	$2,	R0; BEQ	_2args
++	CMP	$3,	R0; BEQ	_3args
++	CMP	$4,	R0; BEQ	_4args
++	CMP	$5,	R0; BEQ	_5args
++	CMP	$6,	R0; BEQ	_6args
++	CMP	$7,	R0; BEQ	_7args
++	CMP	$8,	R0; BEQ	_8args
++
++	// Reserve stack space for remaining args
++	SUB	$8, R0, R2
++	ADD	$1, R2, R3 // make even number of words for stack alignment
++	AND	$~1, R3
++	LSL	$3, R3
++	SUB	R3, RSP
++
++	// R4: size of stack arguments (n-8)*8
++	// R5: &args[8]
++	// R6: loop counter, from 0 to (n-8)*8
++	// R7: scratch
++	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
++	SUB	$8, R0, R4
++	LSL	$3, R4
++	ADD	$(8*8), R12, R5
++	MOVD	$0, R6
++	MOVD	RSP, R8
++stackargs:
++	MOVD	(R6)(R5), R7
++	MOVD	R7, (R6)(R8)
++	ADD	$8, R6
++	CMP	R6, R4
++	BNE	stackargs
++
++_8args:
++	MOVD	(7*8)(R12), R7
++_7args:
++	MOVD	(6*8)(R12), R6
++_6args:
++	MOVD	(5*8)(R12), R5
++_5args:
++	MOVD	(4*8)(R12), R4
++_4args:
++	MOVD	(3*8)(R12), R3
++_3args:
++	MOVD	(2*8)(R12), R2
++_2args:
++	MOVD	(1*8)(R12), R1
++_1args:
++	MOVD	(0*8)(R12), R0
++_0args:
++
++	MOVD	libcCallInfo_fn(R19), R12
++	BL	(R12)
++
++	MOVD	R20, RSP			// free stack space
++
++	MOVD	R0, libcCallInfo_r1(R19)	// save r1
++	MOVD	R1, libcCallInfo_r2(R19)	// save r2
++
++	// Restore callee-saved registers.
++	LDP	16(RSP), (R19, R20)
++    RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
+new file mode 100644
+index 00000000000000..e94cca9e27e30a
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
+@@ -0,0 +1,12 @@
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++#ifndef _GO_DL_SHIMS_H // only include this header once
++#define _GO_DL_SHIMS_H
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++void *dlopen(const char *path, int flags);
++int dlclose(void *handle);
++void *dlsym(void *handle, const char *symbol);
++char *dlerror(void);
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++#endif // _GO_DL_SHIMS_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+new file mode 100644
+index 00000000000000..af5d8e618e8095
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+@@ -0,0 +1,119 @@
++package ossl
 +
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++/*
++#include <stdlib.h> // for calloc and free
++#include <string.h> // for strdup
++#include "zossl.h"
 +
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// OpenSSL only allows a maximum of 16 errors to be stored in the error queue.
++#define ERR_NUM_MAX  16
 +
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// ossl_err_state is a custom structure to hold the error state
++// of OpenSSL.
++typedef struct ossl_err_state_st {
++	unsigned long code[ERR_NUM_MAX];
++	int line[ERR_NUM_MAX];
++	char *file[ERR_NUM_MAX];
++} ossl_err_state;
 +
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// mkcgo_err_retrieve retrieves the error state from OpenSSL.
++// It returns a pointer to a mkcgo_err_state structure
++// that contains the error codes, lines, and file names.
++// The caller is responsible for freeing the memory
++// by calling mkcgo_err_free.
++mkcgo_err_state mkcgo_err_retrieve() {
++	ossl_err_state *errs = (ossl_err_state *)calloc(1, sizeof(ossl_err_state));
++	if (errs == NULL) return NULL;
 +
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++	// Retrieve the errors from OpenSSL.
++	for (int i = 0; i < ERR_NUM_MAX; i++) {
++		const char *file;
++		if (_mkcgo_available_OPENSSL_version_major() == 1) { // Only available in OpenSSL 3.
++			// OpenSSL 3 error handling
++			errs->code[i] = _mkcgo_ERR_get_error_all(&file, &errs->line[i], NULL, NULL, NULL);
++		} else {
++			// OpenSSL 1 error handling
++			errs->code[i] = _mkcgo_ERR_get_error_line(&file, &errs->line[i]);
++		}
++		if (errs->code[i] == 0) {
++			break;
++		}
++		if (file != NULL) {
++			// Copy the file name as the pointer we just retrieved will be freed by OpenSSL
++			// when the error queue is cleared.
++			errs->file[i] = strdup(file);
++		}
++	}
++	return errs;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// mkcgo_err_free frees the memory allocated for the mkcgo_err_state structure.
++void mkcgo_err_free(mkcgo_err_state errs) {
++	if (errs == NULL) return;
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++	ossl_err_state *oerrs = (ossl_err_state *)errs;
++	for (int i = 0; i < ERR_NUM_MAX; i++) {
++		if (oerrs->file[i] != NULL) {
++			free((void *)oerrs->file[i]);
++		}
++	}
++	free(errs);
 +}
++*/
++import "C"
++import (
++	"bytes"
++	"errors"
++	"strconv"
++	"strings"
++	"unsafe"
++)
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++// newMkcgoErr creates a new error from the given mkcgo_err_state
++// and frees the state. If errst is nil, it returns nil.
++func newMkcgoErr(msg string, errst C.mkcgo_err_state) error {
++	if errst == nil {
++		return nil
++	}
++	defer C.mkcgo_err_free(errst)
++	oerrst := (*C.ossl_err_state)(unsafe.Pointer(errst))
++	var b strings.Builder
++	b.WriteString(msg)
++	b.WriteString("\nopenssl error(s):")
++	for i := range C.ERR_NUM_MAX {
++		e := uint64(oerrst.code[i])
++		if e == 0 {
++			break
++		}
++		b.WriteByte('\n')
++		var buf [256]byte
++		ERR_error_string_n(e, unsafe.SliceData(buf[:]), len(buf))
++		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
++			b.Write(buf[:termIdx])
++		} else {
++			b.Write(buf[:])
++		}
++		if oerrst.file[i] == nil {
++			// info not available
++			continue
++		}
++		b.WriteString("\n\t")
++		b.Write(cstrBytes(oerrst.file[i]))
++		b.WriteByte(':')
++		b.WriteString(strconv.Itoa(int(oerrst.line[i])))
++	}
++	return errors.New(b.String())
 +}
 +
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++// cstrBytes returns a byte slice containing the contents of the C string
++// pointed to by p. The slice does not include the terminating null byte.
++func cstrBytes(p *C.char) []byte {
++	if p == nil {
++		return nil
++	}
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
++	}
++	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
+new file mode 100644
+index 00000000000000..51ce80d803017e
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
+@@ -0,0 +1,99 @@
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++package ossl
 +
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++import (
++	"bytes"
++	"errors"
++	"strconv"
++	"strings"
++	"unsafe"
++)
 +
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++const ERR_NUM_MAX = 16
 +
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_derive_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++// errState represents the OpenSSL error state for nocgo version
++type errState struct {
++	codes []uint64
++	files []string
++	lines []int32
 +}
 +
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// retrieveErrorState retrieves errors from the OpenSSL error queue
++func retrieveErrorState() *errState {
++	state := &errState{
++		codes: make([]uint64, 0, ERR_NUM_MAX),
++		files: make([]string, 0, ERR_NUM_MAX),
++		lines: make([]int32, 0, ERR_NUM_MAX),
++	}
 +
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	for range ERR_NUM_MAX {
++		var file *byte
++		var line int32
 +
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++		var code uint64
++		if OPENSSL_version_major_Available() && OPENSSL_version_major() >= 3 {
++			// OpenSSL 3 error handling
++			code = ERR_get_error_all(&file, &line, nil, nil, nil)
++		} else {
++			// OpenSSL 1 error handling
++			code = ERR_get_error_line(&file, &line)
++		}
 +
-+void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR _arg0) {
-+	_g_EVP_PKEY_free(_arg0);
-+}
++		if code == 0 {
++			break
++		}
 +
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++		state.codes = append(state.codes, code)
++		state.lines = append(state.lines, line)
 +
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++		if file != nil {
++			// Convert C string to Go string
++			filename := goString(file)
++			state.files = append(state.files, filename)
++		} else {
++			state.files = append(state.files, "")
++		}
++	}
 +
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++	return state
 +}
 +
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// newMkcgoErr creates a new error from the OpenSSL error queue for the nocgo version.
++// The errst parameter is present for API compatibility with the CGO implementation,
++// but is intentionally ignored in nocgo mode; errors are always retrieved directly from OpenSSL.
++func newMkcgoErr(msg string, errst interface{}) error {
++	// Retrieve error state from OpenSSL error queue
++	state := retrieveErrorState()
 +
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	// If no errors in queue, return simple message
++	if len(state.codes) == 0 {
++		return errors.New(msg + " failed")
++	}
 +
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	var b strings.Builder
++	b.WriteString(msg)
++	b.WriteString("\nopenssl error(s):")
 +
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_get_bits(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	for i, code := range state.codes {
++		b.WriteByte('\n')
++		var buf [256]byte
++		ERR_error_string_n(code, unsafe.SliceData(buf[:]), len(buf))
++		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
++			b.Write(buf[:termIdx])
++		} else {
++			b.Write(buf[:])
++		}
 +
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++		if i < len(state.files) && state.files[i] != "" {
++			b.WriteString("\n\t")
++			b.WriteString(state.files[i])
++			b.WriteByte(':')
++			if i < len(state.lines) {
++				b.WriteString(strconv.Itoa(int(state.lines[i])))
++			}
++		}
++	}
 +
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++	return errors.New(b.String())
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+new file mode 100644
+index 00000000000000..bb8ea6fafdc4d9
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
+@@ -0,0 +1,59 @@
++// Package ossl provides a Go interface to OpenSSL.
++package ossl
 +
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:generate go run ../../cmd/mkcgo -out zossl.go -mode dynload -package ossl shims.h
++//go:generate go run ../../cmd/mkcgo -out zossl.go -nocgo -mode dynload -package ossl -tags goexperiment.ms_nocgo_opensslcrypto shims.h
++//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package ossl -tags "unix && goexperiment.ms_nocgo_opensslcrypto" dl.h
 +
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_get_size(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++import "unsafe"
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++const _OSSL_PARAM_UNMODIFIED uint = uint(^uintptr(0))
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++// OSSL_PARAM is a structure to pass or request object parameters.
++// https://docs.openssl.org/3.0/man3/OSSL_PARAM/.
++type OSSL_PARAM struct {
++	Key        *byte
++	DataType   uint32
++	Data       unsafe.Pointer
++	DataSize   uint
++	ReturnSize uint
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func ossl_param_construct(key *byte, dataType uint32, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return OSSL_PARAM{
++		Key:        key,
++		DataType:   dataType,
++		Data:       data,
++		DataSize:   uint(dataSize),
++		ReturnSize: _OSSL_PARAM_UNMODIFIED,
++	}
 +}
 +
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func OSSL_PARAM_construct_octet_string(key *byte, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_OCTET_STRING, data, dataSize)
 +}
 +
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func OSSL_PARAM_construct_int32(key *byte, data *int32) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_INTEGER, unsafe.Pointer(data), 4)
 +}
 +
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_private_check(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func OSSL_PARAM_construct_end() OSSL_PARAM {
++	return OSSL_PARAM{}
 +}
 +
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func OSSL_PARAM_modified(param *OSSL_PARAM) bool {
++	// If ReturnSize is not set, the parameter has not been modified.
++	return param != nil && param.ReturnSize != _OSSL_PARAM_UNMODIFIED
 +}
 +
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++// goString converts a C string (byte pointer) to a Go string
++func goString(p *byte) string {
++	if p == nil {
++		return ""
++	}
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
++	}
++	return string(unsafe.Slice(p, uintptr(end)-uintptr(unsafe.Pointer(p))))
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
+new file mode 100644
+index 00000000000000..5fb8d79a809845
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
+@@ -0,0 +1,39 @@
++package ossl
 +
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++/*
++#include "zossl.h"
++// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal_ex using ctx2.
++// This is necessary because Go hash.Hash mandates that Sum has no effect
++// on the underlying stream. In particular it is OK to Sum, then Write more,
++// then Sum again, and the second Sum acts as if the first didn't happen.
++// It is written in C because Sum() tend to be in the hot path,
++// and doing one cgo call instead of two is a significant performance win.
++static inline int
++go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, mkcgo_err_state *_err_state)
++{
++	if (_mkcgo_EVP_MD_CTX_copy(ctx2, ctx, _err_state) != 1)
++		return -1;
++	if (_mkcgo_EVP_DigestFinal_ex(ctx2, out, NULL, _err_state) <= 0)
++		return -2;
++	return 1;
 +}
++*/
++import "C"
++import (
++	"unsafe"
++)
 +
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
++	var errst C.mkcgo_err_state
++	if code := C.go_hash_sum(ctx1, ctx2, (*C.uchar)(unsafe.SliceData(out)), mkcgoNoEscape(&errst)); code != 1 {
++		msg := "go_hash_sum"
++		switch code {
++		case -1:
++			msg = "EVP_MD_CTX_copy"
++		case -2:
++			msg = "EVP_DigestFinal_ex"
++		}
++		return newMkcgoErr(msg, errst)
++	}
++	return nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
+new file mode 100644
+index 00000000000000..c330e5ed56a477
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
+@@ -0,0 +1,34 @@
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_sign_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++package ossl
 +
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_up_ref(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++import "unsafe"
 +
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// HashSum copies ctx1 into ctx2 and calls EVP_DigestFinal_ex using ctx2.
++// This is necessary because Go hash.Hash mandates that Sum has no effect
++// on the underlying stream. In particular it is OK to Sum, then Write more,
++// then Sum again, and the second Sum acts as if the first didn't happen.
++func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
++	// Clear any existing errors
++	ERR_clear_error()
 +
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_PKEY_verify_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	// Copy ctx1 to ctx2 using EVP_MD_CTX_copy_ex
++	code, err := EVP_MD_CTX_copy_ex(ctx2, ctx1)
++	if err != nil {
++		return err
++	}
++	if code != 1 {
++		return newMkcgoErr("EVP_MD_CTX_copy_ex", nil)
++	}
 +
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++	// Finalize the hash using ctx2
++	code, err = EVP_DigestFinal_ex(ctx2, (*byte)(unsafe.SliceData(out)), nil)
++	if err != nil {
++		return err
++	}
++	if code <= 0 {
++		return newMkcgoErr("EVP_DigestFinal_ex", nil)
++	}
 +
-+void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR _arg0) {
-+	_g_EVP_SIGNATURE_free(_arg0);
++	return nil
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+new file mode 100644
+index 00000000000000..5790defeb6eb55
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+@@ -0,0 +1,399 @@
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// OpenSSL C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zossl.h" instead.
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void) {
-+	return _g_EVP_aes_128_cbc();
-+}
++#ifndef _GO_OSSL_SHIMS_H // only include this header once
++#define _GO_OSSL_SHIMS_H
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void) {
-+	return _g_EVP_aes_128_ctr();
-+}
++#include <stdlib.h> // size_t
++#include <stdint.h> // uint64_t
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void) {
-+	return _g_EVP_aes_128_ecb();
-+}
++// The following includes are used by the checkheader tool.
++// #include <openssl/crypto.h>
++// #include <openssl/evp.h>
++// #include <openssl/ec.h>
++// #include <openssl/kdf.h>
++// #include <openssl/obj_mac.h>
++// #include <openssl/rsa.h>
++// #include <openssl/err.h>
++// #include <openssl/hmac.h>
++// #include <openssl/rand.h>
++// #include <openssl/dsa.h>
++// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
++// #include <openssl/core_names.h>
++// #include <openssl/provider.h>
++// #include <openssl/param_build.h>
++// #include <openssl/params.h>
++// #endif
++// #if OPENSSL_VERSION_NUMBER < 0x10100000L
++// #include <openssl/bn.h>
++// #endif
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void) {
-+	return _g_EVP_aes_128_gcm();
-+}
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void) {
-+	return _g_EVP_aes_192_cbc();
-+}
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS     = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS     = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG         = 0x00000040,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void) {
-+	return _g_EVP_aes_192_ctr();
-+}
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD     = 1,
++	_EVP_PKEY_RSA         = 6,
++	_EVP_PKEY_EC          = 408,
++	_EVP_PKEY_TLS1_PRF    = 1021,
++	_EVP_PKEY_HKDF        = 1036,
++	_EVP_PKEY_ED25519     = 1087,
++	_EVP_PKEY_DSA         = 116,
++	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
++	_EVP_MAX_MD_SIZE    = 64,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void) {
-+	return _g_EVP_aes_192_ecb();
-+}
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR    = 0x87,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void) {
-+	return _g_EVP_aes_192_gcm();
-+}
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void) {
-+	return _g_EVP_aes_256_cbc();
-+}
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY  = 2,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void) {
-+	return _g_EVP_aes_256_ctr();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void) {
-+	return _g_EVP_aes_256_ecb();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void) {
-+	return _g_EVP_aes_256_gcm();
-+}
-+
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR _arg0) {
-+	return _g_EVP_default_properties_is_fips_enabled(_arg0);
-+}
++	_EVP_PKEY_CTRL_TLS_MD     = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED   = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD    = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT  = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY   = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO  = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE  = 0x1007,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void) {
-+	return _g_EVP_des_cbc();
-+}
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1        = 713,
++	_NID_secp384r1        = 715,
++	_NID_secp521r1        = 716,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void) {
-+	return _g_EVP_des_ecb();
-+}
++	_RSA_PKCS1_PADDING                 = 1,
++	_RSA_NO_PADDING                    = 3,
++	_RSA_PKCS1_OAEP_PADDING            = 4,
++	_RSA_PKCS1_PSS_PADDING             = 6,
++	_RSA_PSS_SALTLEN_DIGEST            = -1,
++	_RSA_PSS_SALTLEN_AUTO              = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN          = -2,
++	_RSA_PSS_SALTLEN_MAX               = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING         = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN     = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS     = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD         = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD         = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void) {
-+	return _g_EVP_des_ede3_cbc();
-+}
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
++};
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void) {
-+	return _g_EVP_des_ede3_ecb();
-+}
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef int point_conversion_form_t;
 +
-+const _EVP_MD_PTR _mkcgo_EVP_md4(void) {
-+	return _g_EVP_md4();
-+}
++// Tags used by mkcgo to determine which OpenSSL version each function is available in:
++// - no tag: OpenSSL 1.0 or later
++// - legacy_1: Only OpenSSL 1
++// - 3: OpenSSL 3.0 or later
++// - 111: OpenSSL 1.1.1 or later
 +
-+const _EVP_MD_PTR _mkcgo_EVP_md5(void) {
-+	return _g_EVP_md5();
-+}
++// The noescape/nocallback attributes are performance optimizations.
++// Only add functions that have been observed to benefit from these
++// directives, not every function that is merely expected to meet
++// the noescape/nocallback criteria.
 +
-+const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void) {
-+	return _g_EVP_md5_sha1();
-+}
++// ERR API
++void ERR_error_string_n(unsigned long e, char *buf, size_t len);
++void ERR_clear_error(void) __attribute__((tag(""),tag("init_3")));
++unsigned long ERR_get_error_line(const char **file, int *line) __attribute__((tag("legacy_1"),noerror));
++unsigned long ERR_get_error_all(const char **file, int *line, const char **func, const char **data, int *flags) __attribute__((tag("3"),noerror));
 +
-+const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void) {
-+	return _g_EVP_rc4();
-+}
++// OPENSSL API
++const char *OpenSSL_version(int type) __attribute__((noerror));
++void OPENSSL_init(void);
++int OPENSSL_init_crypto(uint64_t ops, const _OPENSSL_INIT_SETTINGS_PTR settings);
++unsigned long OpenSSL_version_num(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_major(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_minor(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_patch(void) __attribute__((tag("version"),optional,noerror));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void) {
-+	return _g_EVP_ripemd160();
-+}
++// CRYPTO API
++void *CRYPTO_malloc(size_t num, const char *file, int line);
++void CRYPTO_free(void *str, const char *file, int line);
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha1(void) {
-+	return _g_EVP_sha1();
-+}
++// FIPS API
++int FIPS_mode(void) __attribute__((tag("legacy_1"),tag("init_1"),noerror));
++int FIPS_mode_set(int r) __attribute__((tag("legacy_1"),tag("init_1")));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha224(void) {
-+	return _g_EVP_sha224();
-+}
++// EVP Config API
++int EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR libctx) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR libctx, int enable) __attribute__((tag("3")));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha256(void) {
-+	return _g_EVP_sha256();
-+}
++// OSSL_PROVIDER API
++int OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR libctx, const char *name) __attribute__((tag("3"),noerror));
++_OSSL_PROVIDER_PTR OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks) __attribute__((tag("3")));
++const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha384(void) {
-+	return _g_EVP_sha384();
-+}
++// RAND API
++int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void) {
-+	return _g_EVP_sha3_224();
-+}
++// EVP_MD API
++_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
++void EVP_MD_free(_EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3")));
++const char *EVP_MD_get0_name(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++int EVP_MD_get_type(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++const _OSSL_PROVIDER_PTR EVP_MD_get0_provider(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_MD_get_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_size"),noerror));
++int EVP_MD_get_block_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_block_size"),noerror));
++const _EVP_MD_PTR EVP_md5_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_ripemd160(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md4(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md5(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((tag("111"),noerror));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void) {
-+	return _g_EVP_sha3_256();
-+}
++_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
++void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
++int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in) __attribute__((noescape,nocallback));
++int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
++int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
++int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
++int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,nocheckptr("d")));
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback));
++int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
++int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
++int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen);
++int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111")));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void) {
-+	return _g_EVP_sha3_384();
-+}
++// HMAC API
++int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1")));
++int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1")));
++int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1")));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void) {
-+	return _g_EVP_sha3_512();
-+}
++_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
++int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1")));
++void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1")));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha512(void) {
-+	return _g_EVP_sha512();
-+}
++// EVP_CIPHER API
++_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++const char *EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
++int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void) {
-+	return _g_EVP_sha512_224();
-+}
++_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
++int EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR x, int padding);
++int EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR x, int keylen);
++void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
++int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
++int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
++int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback));
++int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback));
 +
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void) {
-+	return _g_EVP_sha512_256();
-+}
++// EVP_PKEY API
++_EVP_PKEY_PTR EVP_PKEY_new(void);
++_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
++int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
++int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
++void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
++_RSA_PTR EVP_PKEY_get1_RSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
++_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3")));
++size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
++int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
++int EVP_PKEY_up_ref(_EVP_PKEY_PTR key) __attribute__((tag("3")));
++int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
++int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len) __attribute__((tag("111"),noescape,nocallback));
++int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len) __attribute__((tag("111"),noescape,nocallback));
++int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
++int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
++int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen);
++int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
++int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback));
++int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +
-+int _mkcgo_FIPS_mode(void) {
-+	return _g_FIPS_mode();
-+}
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
++void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
++int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
 +
-+int _mkcgo_FIPS_mode_set(int _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_FIPS_mode_set(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// RSA API
++_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
++void RSA_free(_RSA_PTR arg0) __attribute__((tag("legacy_1")));
++void RSA_get0_factors(const _RSA_PTR rsa, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_factors(_RSA_PTR rsa, _BIGNUM_PTR p, _BIGNUM_PTR q) __attribute__((tag("legacy_1")));
++void RSA_get0_crt_params(const _RSA_PTR r, const _BIGNUM_PTR *dmp1, const _BIGNUM_PTR *dmq1, const _BIGNUM_PTR *iqmp) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_crt_params(_RSA_PTR rsa, _BIGNUM_PTR dmp1, _BIGNUM_PTR dmp2, _BIGNUM_PTR iqmp) __attribute__((tag("legacy_1")));
++void RSA_get0_key(const _RSA_PTR rsa, const _BIGNUM_PTR *n, const _BIGNUM_PTR *e, const _BIGNUM_PTR *d) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_key(_RSA_PTR r, _BIGNUM_PTR n, _BIGNUM_PTR e, _BIGNUM_PTR d) __attribute__((tag("legacy_1")));
 +
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// BIGNUM API
++_BIGNUM_PTR BN_new(void);
++void BN_free(_BIGNUM_PTR arg0);
++void BN_clear(_BIGNUM_PTR arg0);
++void BN_clear_free(_BIGNUM_PTR arg0);
++int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
++_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2);
++_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int len, _BIGNUM_PTR ret);
++int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
++int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
 +
-+void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR _arg0) {
-+	_g_HMAC_CTX_free(_arg0);
-+}
++// EC API
++int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
++int EC_KEY_set_public_key(_EC_KEY_PTR key, const _EC_POINT_PTR pub) __attribute__((tag("legacy_1")));
++void EC_KEY_free(_EC_KEY_PTR arg0) __attribute__((tag("legacy_1")));
++const _EC_GROUP_PTR EC_KEY_get0_group(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _BIGNUM_PTR EC_KEY_get0_private_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _EC_POINT_PTR EC_KEY_get0_public_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++_EC_KEY_PTR EC_KEY_new_by_curve_name(int arg0) __attribute__((tag("legacy_1")));
++int EC_KEY_set_private_key(_EC_KEY_PTR arg0, const _BIGNUM_PTR arg1) __attribute__((tag("legacy_1")));
++int EC_KEY_check_key(const _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++_EC_POINT_PTR EC_POINT_new(const _EC_GROUP_PTR arg0);
++void EC_POINT_free(_EC_POINT_PTR arg0);
++int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
++int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
++int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
++size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
++int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
++_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
++void EC_GROUP_free(_EC_GROUP_PTR group);
 +
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// EVP_MAC API
++_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3")));
++int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3")));
 +
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// OSSL_PARAM API
++void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
++_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3")));
++void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
 +
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// EVP_SIGNATURE API
++_EVP_SIGNATURE_PTR EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR signature) __attribute__((tag("3")));
 +
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++// DSA API
++_DSA_PTR DSA_new(void) __attribute__((tag("legacy_1")));
++void DSA_free(_DSA_PTR r) __attribute__((tag("legacy_1")));
++int DSA_generate_key(_DSA_PTR a) __attribute__((tag("legacy_1")));
++void DSA_get0_pqg(const _DSA_PTR d, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q, const _BIGNUM_PTR *g) __attribute__((tag("legacy_1")));
++int DSA_set0_pqg(_DSA_PTR d, _BIGNUM_PTR p, _BIGNUM_PTR q, _BIGNUM_PTR g) __attribute__((tag("legacy_1")));
++void DSA_get0_key(const _DSA_PTR d, const _BIGNUM_PTR *pub_key, const _BIGNUM_PTR *priv_key) __attribute__((tag("legacy_1")));
++int DSA_set0_key(_DSA_PTR d, _BIGNUM_PTR pub_key, _BIGNUM_PTR priv_key) __attribute__((tag("legacy_1")));
 +
-+const char* _mkcgo_OBJ_nid2sn(int _arg0) {
-+	return _g_OBJ_nid2sn(_arg0);
-+}
++// EVP_KDF API
++_EVP_KDF_PTR EVP_KDF_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_KDF_free(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++_EVP_KDF_CTX_PTR EVP_KDF_CTX_new(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out);
 +
-+void _mkcgo_OPENSSL_init(void) {
-+	_g_OPENSSL_init();
-+}
++// OBJ API
++const char *OBJ_nid2sn(int n) __attribute__((noerror));
 +
-+int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++#endif // _GO_OSSL_SHIMS_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
+new file mode 100644
+index 00000000000000..dffedf87367375
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
+@@ -0,0 +1,5 @@
++//go:build !cgo && darwin && goexperiment.ms_nocgo_opensslcrypto
 +
-+int _mkcgo_available_OPENSSL_version_major() {
-+	return _g_OPENSSL_version_major != NULL;
-+}
++package ossl
 +
-+unsigned int _mkcgo_OPENSSL_version_major(void) {
-+	return _g_OPENSSL_version_major();
-+}
++//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
+new file mode 100644
+index 00000000000000..63a5798fe55a75
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
+@@ -0,0 +1,5 @@
++//go:build !cgo && linux && goexperiment.ms_nocgo_opensslcrypto
 +
-+int _mkcgo_available_OPENSSL_version_minor() {
-+	return _g_OPENSSL_version_minor != NULL;
-+}
++package ossl
 +
-+unsigned int _mkcgo_OPENSSL_version_minor(void) {
-+	return _g_OPENSSL_version_minor();
-+}
++//go:cgo_import_dynamic _ _ "libdl.so.2"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
+new file mode 100644
+index 00000000000000..48f1016c336e55
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
+@@ -0,0 +1,55 @@
++//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
 +
-+int _mkcgo_available_OPENSSL_version_patch() {
-+	return _g_OPENSSL_version_patch != NULL;
-+}
++package ossl
 +
-+unsigned int _mkcgo_OPENSSL_version_patch(void) {
-+	return _g_OPENSSL_version_patch();
-+}
++import (
++	"syscall"
++	"unsafe"
 +
-+void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR _arg0) {
-+	_g_OSSL_PARAM_BLD_free(_arg0);
-+}
++	_ "github.com/golang-fips/openssl/v2/internal/fakecgo"
++)
 +
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_OSSL_PARAM_BLD_PTR _ret = _g_OSSL_PARAM_BLD_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:linkname runtime_cgocall runtime.cgocall
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++//go:noescape
++func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:linkname noescape
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++type libcCallInfo struct {
++	fn     uintptr
++	n      uintptr // number of parameters
++	args   uintptr // parameters
++	r1, r2 uintptr // return values
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++var syscallNABI0 uintptr
 +
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++//go:nosplit
++func syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr, err syscall.Errno) {
++	libcArgs := libcCallInfo{
++		fn: fn,
++		n:  uintptr(len(args)),
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	runtime_cgocall(syscallNABI0, unsafe.Pointer(&libcArgs))
++	return libcArgs.r1, libcArgs.r2, 0
 +}
 +
-+void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR _arg0) {
-+	_g_OSSL_PARAM_free(_arg0);
++func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
++	r0 := Dlsym(handle, unsafe.StringData(symbol))
++	if r0 == nil {
++		if !optional {
++			panic("cannot get required symbol " + symbol)
++		}
++		return 0
++	}
++	return uintptr(r0)
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
+new file mode 100644
+index 00000000000000..73e75d91e1b783
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
+@@ -0,0 +1,28 @@
++//go:build !cgo && windows
 +
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
-+	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
-+}
-+
-+const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR _arg0) {
-+	return _g_OSSL_PROVIDER_get0_name(_arg0);
-+}
-+
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const char* _mkcgo_OpenSSL_version(int _arg0) {
-+	return _g_OpenSSL_version(_arg0);
-+}
-+
-+int _mkcgo_available_OpenSSL_version_num() {
-+	return _g_OpenSSL_version_num != NULL;
-+}
-+
-+unsigned long _mkcgo_OpenSSL_version_num(void) {
-+	return _g_OpenSSL_version_num();
-+}
-+
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++package ossl
 +
-+int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_RAND_bytes(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++import (
++	"syscall"
++	"unsafe"
++)
 +
-+void _mkcgo_RSA_free(_RSA_PTR _arg0) {
-+	_g_RSA_free(_arg0);
-+}
++var modkernel32 = syscall.NewLazyDLL("kernel32.dll")
++var procGetProcAddress = modkernel32.NewProc("GetProcAddress")
 +
-+void _mkcgo_RSA_get0_crt_params(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_RSA_get0_crt_params(_arg0, _arg1, _arg2, _arg3);
++//go:nosplit
++func syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr, err syscall.Errno) {
++	r1, r2, err = syscall.SyscallN(fn, args...)
++	return
 +}
 +
-+void _mkcgo_RSA_get0_factors(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
-+	_g_RSA_get0_factors(_arg0, _arg1, _arg2);
++func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
++	r0, _, err := syscall.SyscallN(procGetProcAddress.Addr(), uintptr(handle), uintptr(unsafe.Pointer(unsafe.StringData(symbol))))
++	if err != 0 {
++		if !optional {
++			panic("cannot get required symbol " + symbol + ": " + err.Error())
++		}
++		return 0
++	}
++	return r0
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
+new file mode 100644
+index 00000000000000..4d03a5f97cec27
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
+@@ -0,0 +1,51 @@
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+void _mkcgo_RSA_get0_key(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
-+}
++//go:build !cgo && (unix && goexperiment.ms_nocgo_opensslcrypto)
 +
-+_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	_RSA_PTR _ret = _g_RSA_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++#include "textflag.h"
 +
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
 +
-+int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
 +
-+int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
-+	mkcgo_err_clear();
-+	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
 +
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_dlclose_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlclose(SB)
++GLOBL   ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
++
++TEXT _mkcgo_dlerror_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlerror(SB)
++GLOBL   ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
++
++TEXT _mkcgo_dlopen_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlopen(SB)
++GLOBL   ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
++
++TEXT _mkcgo_dlsym_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlsym(SB)
++GLOBL   ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 new file mode 100644
-index 00000000000000..9079f7a0cffc40
+index 00000000000000..fa9d321875f3b5
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,1329 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
+@@ -0,0 +1,45 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
-+package ossl
-+
-+/*
-+#cgo CFLAGS: -Wno-attributes
-+#cgo unix LDFLAGS: -ldl
++//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
 +
-+#include "zossl.h"
-+*/
-+import "C"
-+import "unsafe"
++package ossl
 +
-+const (
-+	POINT_CONVERSION_UNCOMPRESSED       = 4
-+	OPENSSL_INIT_LOAD_CRYPTO_STRINGS    = 0x00000002
-+	OPENSSL_INIT_ADD_ALL_CIPHERS        = 0x00000004
-+	OPENSSL_INIT_ADD_ALL_DIGESTS        = 0x00000008
-+	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
-+	EVP_CTRL_GCM_GET_TAG                = 0x10
-+	EVP_CTRL_GCM_SET_TAG                = 0x11
-+	EVP_PKEY_CTRL_MD                    = 1
-+	EVP_PKEY_RSA                        = 6
-+	EVP_PKEY_EC                         = 408
-+	EVP_PKEY_TLS1_PRF                   = 1021
-+	EVP_PKEY_HKDF                       = 1036
-+	EVP_PKEY_ED25519                    = 1087
-+	EVP_PKEY_DSA                        = 116
-+	EVP_PKEY_OP_DERIVE                  = (1 << 10)
-+	EVP_MAX_MD_SIZE                     = 64
-+	EVP_PKEY_PUBLIC_KEY                 = 0x86
-+	EVP_PKEY_KEYPAIR                    = 0x87
-+	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
-+	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
-+	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
-+	EVP_PKEY_CTRL_TLS_MD                = 0x1000
-+	EVP_PKEY_CTRL_TLS_SECRET            = 0x1001
-+	EVP_PKEY_CTRL_TLS_SEED              = 0x1002
-+	EVP_PKEY_CTRL_HKDF_MD               = 0x1003
-+	EVP_PKEY_CTRL_HKDF_SALT             = 0x1004
-+	EVP_PKEY_CTRL_HKDF_KEY              = 0x1005
-+	EVP_PKEY_CTRL_HKDF_INFO             = 0x1006
-+	EVP_PKEY_CTRL_HKDF_MODE             = 0x1007
-+	NID_X9_62_prime256v1                = 415
-+	NID_secp224r1                       = 713
-+	NID_secp384r1                       = 715
-+	NID_secp521r1                       = 716
-+	RSA_PKCS1_PADDING                   = 1
-+	RSA_NO_PADDING                      = 3
-+	RSA_PKCS1_OAEP_PADDING              = 4
-+	RSA_PKCS1_PSS_PADDING               = 6
-+	RSA_PSS_SALTLEN_DIGEST              = -1
-+	RSA_PSS_SALTLEN_AUTO                = -2
-+	RSA_PSS_SALTLEN_MAX_SIGN            = -2
-+	RSA_PSS_SALTLEN_MAX                 = -3
-+	EVP_PKEY_CTRL_RSA_PADDING           = 0x1001
-+	EVP_PKEY_CTRL_RSA_PSS_SALTLEN       = 0x1002
-+	EVP_PKEY_CTRL_RSA_KEYGEN_BITS       = 0x1003
-+	EVP_PKEY_CTRL_RSA_MGF1_MD           = 0x1005
-+	EVP_PKEY_CTRL_RSA_OAEP_MD           = 0x1009
-+	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
-+	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
-+	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
-+	OSSL_PARAM_INTEGER                  = 1
-+	OSSL_PARAM_OCTET_STRING             = 5
++import (
++	"runtime"
++	"unsafe"
 +)
 +
-+type BIGNUM_PTR = C._BIGNUM_PTR
-+type BN_CTX_PTR = C._BN_CTX_PTR
-+type DSA_PTR = C._DSA_PTR
-+type EC_GROUP_PTR = C._EC_GROUP_PTR
-+type EC_KEY_PTR = C._EC_KEY_PTR
-+type EC_POINT_PTR = C._EC_POINT_PTR
-+type ENGINE_PTR = C._ENGINE_PTR
-+type EVP_CIPHER_CTX_PTR = C._EVP_CIPHER_CTX_PTR
-+type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
-+type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
-+type EVP_KDF_PTR = C._EVP_KDF_PTR
-+type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
-+type EVP_MAC_PTR = C._EVP_MAC_PTR
-+type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
-+type EVP_MD_PTR = C._EVP_MD_PTR
-+type EVP_PKEY_CTX_PTR = C._EVP_PKEY_CTX_PTR
-+type EVP_PKEY_PTR = C._EVP_PKEY_PTR
-+type EVP_SIGNATURE_PTR = C._EVP_SIGNATURE_PTR
-+type HMAC_CTX_PTR = C._HMAC_CTX_PTR
-+type OPENSSL_INIT_SETTINGS_PTR = C._OPENSSL_INIT_SETTINGS_PTR
-+type OSSL_LIB_CTX_PTR = C._OSSL_LIB_CTX_PTR
-+type OSSL_PARAM_BLD_PTR = C._OSSL_PARAM_BLD_PTR
-+type OSSL_PARAM_PTR = C._OSSL_PARAM_PTR
-+type OSSL_PROVIDER_PTR = C._OSSL_PROVIDER_PTR
-+type RSA_PTR = C._RSA_PTR
-+type Point_conversion_form_t = C.point_conversion_form_t
-+
-+func MkcgoLoad_(handle unsafe.Pointer) {
-+	C.__mkcgo_load_(handle)
-+}
-+
-+func MkcgoUnload_() {
-+	C.__mkcgo_unload_()
-+}
-+
-+func MkcgoLoad_111(handle unsafe.Pointer) {
-+	C.__mkcgo_load_111(handle)
-+}
-+
-+func MkcgoUnload_111() {
-+	C.__mkcgo_unload_111()
-+}
-+
-+func MkcgoLoad_3(handle unsafe.Pointer) {
-+	C.__mkcgo_load_3(handle)
-+}
++//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
++//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
++//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
++//go:cgo_import_dynamic _mkcgo_dlsym dlsym ""
 +
-+func MkcgoUnload_3() {
-+	C.__mkcgo_unload_3()
-+}
++var _mkcgo_dlclose_trampoline_addr uintptr
 +
-+func MkcgoLoad_init_1(handle unsafe.Pointer) {
-+	C.__mkcgo_load_init_1(handle)
++func Dlclose(handle unsafe.Pointer) int32 {
++	r0, _, _ := syscallN(_mkcgo_dlclose_trampoline_addr, uintptr(handle))
++	return int32(r0)
 +}
 +
-+func MkcgoUnload_init_1() {
-+	C.__mkcgo_unload_init_1()
-+}
++var _mkcgo_dlerror_trampoline_addr uintptr
 +
-+func MkcgoLoad_init_3(handle unsafe.Pointer) {
-+	C.__mkcgo_load_init_3(handle)
++func Dlerror() *byte {
++	r0, _, _ := syscallN(_mkcgo_dlerror_trampoline_addr)
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func MkcgoUnload_init_3() {
-+	C.__mkcgo_unload_init_3()
-+}
++var _mkcgo_dlopen_trampoline_addr uintptr
 +
-+func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
-+	C.__mkcgo_load_legacy_1(handle)
++func Dlopen(path *byte, flags int32) unsafe.Pointer {
++	r0, _, _ := syscallN(_mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
++	runtime.KeepAlive(path)
++	return unsafe.Pointer(r0)
 +}
 +
-+func MkcgoUnload_legacy_1() {
-+	C.__mkcgo_unload_legacy_1()
-+}
++var _mkcgo_dlsym_trampoline_addr uintptr
 +
-+func MkcgoLoad_version(handle unsafe.Pointer) {
-+	C.__mkcgo_load_version(handle)
++func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
++	r0, _, _ := syscallN(_mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
++	runtime.KeepAlive(symbol)
++	return unsafe.Pointer(r0)
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
+new file mode 100644
+index 00000000000000..8124dfd70a22e3
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
+@@ -0,0 +1,1924 @@
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+func MkcgoUnload_version() {
-+	C.__mkcgo_unload_version()
-+}
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zossl.h"
 +
-+//go:nosplit
-+func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
-+	x := uintptr(unsafe.Pointer(p))
-+	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
-+}
++#ifdef _WIN32
++#include <windows.h>
++#define dlsym GetProcAddress
++#else
++#include <dlfcn.h>
++#endif
 +
-+func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), arg2, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_bin2bn", _err)
++_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
++int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
++void (*_g_BN_clear)(_BIGNUM_PTR);
++void (*_g_BN_clear_free)(_BIGNUM_PTR);
++void (*_g_BN_free)(_BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_lebin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_new)(void);
++int (*_g_BN_num_bits)(const _BIGNUM_PTR);
++void (*_g_CRYPTO_free)(void*, const char*, int);
++void* (*_g_CRYPTO_malloc)(size_t, const char*, int);
++void (*_g_DSA_free)(_DSA_PTR);
++int (*_g_DSA_generate_key)(_DSA_PTR);
++void (*_g_DSA_get0_key)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_DSA_get0_pqg)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR (*_g_DSA_new)(void);
++int (*_g_DSA_set0_key)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_DSA_set0_pqg)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_GROUP_free)(_EC_GROUP_PTR);
++_EC_GROUP_PTR (*_g_EC_GROUP_new_by_curve_name)(int);
++int (*_g_EC_KEY_check_key)(const _EC_KEY_PTR);
++void (*_g_EC_KEY_free)(_EC_KEY_PTR);
++const _EC_GROUP_PTR (*_g_EC_KEY_get0_group)(const _EC_KEY_PTR);
++const _BIGNUM_PTR (*_g_EC_KEY_get0_private_key)(const _EC_KEY_PTR);
++const _EC_POINT_PTR (*_g_EC_KEY_get0_public_key)(const _EC_KEY_PTR);
++_EC_KEY_PTR (*_g_EC_KEY_new_by_curve_name)(int);
++int (*_g_EC_KEY_set_private_key)(_EC_KEY_PTR, const _BIGNUM_PTR);
++int (*_g_EC_KEY_set_public_key)(_EC_KEY_PTR, const _EC_POINT_PTR);
++int (*_g_EC_KEY_set_public_key_affine_coordinates)(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_POINT_free)(_EC_POINT_PTR);
++int (*_g_EC_POINT_get_affine_coordinates_GFp)(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR);
++int (*_g_EC_POINT_mul)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++_EC_POINT_PTR (*_g_EC_POINT_new)(const _EC_GROUP_PTR);
++int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
++size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
++int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++void (*_g_ERR_clear_error)(void);
++void (*_g_ERR_error_string_n)(unsigned long, char*, size_t);
++unsigned long (*_g_ERR_get_error_all)(const char**, int*, const char**, const char**, int*);
++unsigned long (*_g_ERR_get_error_line)(const char**, int*);
++int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
++void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
++int (*_g_EVP_CIPHER_CTX_set_key_length)(_EVP_CIPHER_CTX_PTR, int);
++int (*_g_EVP_CIPHER_CTX_set_padding)(_EVP_CIPHER_CTX_PTR, int);
++_EVP_CIPHER_PTR (*_g_EVP_CIPHER_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++const char* (*_g_EVP_CIPHER_get0_name)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CIPHER_get_block_size)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CipherInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int);
++int (*_g_EVP_CipherUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_Digest)(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const void*, size_t);
++int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_EncryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_EncryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_EncryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++void (*_g_EVP_KDF_CTX_free)(_EVP_KDF_CTX_PTR);
++size_t (*_g_EVP_KDF_CTX_get_kdf_size)(_EVP_KDF_CTX_PTR);
++_EVP_KDF_CTX_PTR (*_g_EVP_KDF_CTX_new)(_EVP_KDF_PTR);
++int (*_g_EVP_KDF_CTX_set_params)(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR);
++int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
++_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
++void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
++int (*_g_EVP_MAC_CTX_set_params)(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR);
++_EVP_MAC_PTR (*_g_EVP_MAC_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
++int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
++int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_MD_CTX_copy)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
++_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
++int (*_g_EVP_MD_CTX_set_params)(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_settable_params)(_EVP_MD_CTX_PTR);
++_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_MD_free)(_EVP_MD_PTR);
++const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR (*_g_EVP_MD_get0_provider)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_block_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_type)(const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_add1_hkdf_info)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_ctrl)(_EVP_PKEY_CTX_PTR, int, int, int, int, void*);
++void (*_g_EVP_PKEY_CTX_free)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
++int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, void*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
++int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
++int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
++void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_fromdata)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR);
++int (*_g_EVP_PKEY_fromdata_init)(_EVP_PKEY_CTX_PTR);
++_DSA_PTR (*_g_EVP_PKEY_get0_DSA)(_EVP_PKEY_PTR);
++_EC_KEY_PTR (*_g_EVP_PKEY_get0_EC_KEY)(_EVP_PKEY_PTR);
++_RSA_PTR (*_g_EVP_PKEY_get1_RSA)(_EVP_PKEY_PTR);
++size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
++int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
++int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_keygen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_keygen_init)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new)(void);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_private_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_public_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_paramgen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_paramgen_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_private_check)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_public_check_quick)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_set1_EC_KEY)(_EVP_PKEY_PTR, _EC_KEY_PTR);
++int (*_g_EVP_PKEY_set1_encoded_public_key)(_EVP_PKEY_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_up_ref)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_verify)(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_verify_init)(_EVP_PKEY_CTX_PTR);
++_EVP_SIGNATURE_PTR (*_g_EVP_SIGNATURE_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_SIGNATURE_free)(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
++int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
++int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_ecb)(void);
++const _EVP_MD_PTR (*_g_EVP_md4)(void);
++const _EVP_MD_PTR (*_g_EVP_md5)(void);
++const _EVP_MD_PTR (*_g_EVP_md5_sha1)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_rc4)(void);
++const _EVP_MD_PTR (*_g_EVP_ripemd160)(void);
++const _EVP_MD_PTR (*_g_EVP_sha1)(void);
++const _EVP_MD_PTR (*_g_EVP_sha224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_256)(void);
++int (*_g_FIPS_mode)(void);
++int (*_g_FIPS_mode_set)(int);
++int (*_g_HMAC_CTX_copy)(_HMAC_CTX_PTR, _HMAC_CTX_PTR);
++void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
++int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
++const char* (*_g_OBJ_nid2sn)(int);
++void (*_g_OPENSSL_init)(void);
++int (*_g_OPENSSL_init_crypto)(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR);
++unsigned int (*_g_OPENSSL_version_major)(void);
++unsigned int (*_g_OPENSSL_version_minor)(void);
++unsigned int (*_g_OPENSSL_version_patch)(void);
++void (*_g_OSSL_PARAM_BLD_free)(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
++int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
++int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
++int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t);
++int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
++_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
++void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_OSSL_PARAM_locate_const)(const _OSSL_PARAM_PTR, const char*);
++int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
++const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
++const char* (*_g_OpenSSL_version)(int);
++unsigned long (*_g_OpenSSL_version_num)(void);
++int (*_g_PKCS5_PBKDF2_HMAC)(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*);
++int (*_g_RAND_bytes)(unsigned char*, int);
++void (*_g_RSA_free)(_RSA_PTR);
++void (*_g_RSA_get0_crt_params)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_factors)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_key)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR (*_g_RSA_new)(void);
++int (*_g_RSA_set0_crt_params)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_factors)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_key)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++
++#define __mkcgo__dlsym_nocheck(varname, funcname) _g_##varname = (typeof(_g_##varname))dlsym(handle, #funcname);
++
++#define __mkcgo__dlsym(name) __mkcgo__dlsym2(name, name)
++
++#define __mkcgo__dlsym2(varname, funcname) \
++	__mkcgo__dlsym_nocheck(varname, funcname) \
++	if (_g_##varname == NULL) { \
++		fprintf(stderr, "Cannot get required symbol " #funcname "\n"); \
++		abort(); \
++	}
++
++void __mkcgo_load_(void* handle) {
++	__mkcgo__dlsym(BN_bin2bn)
++	__mkcgo__dlsym(BN_bn2binpad)
++	__mkcgo__dlsym(BN_bn2lebinpad)
++	__mkcgo__dlsym(BN_clear)
++	__mkcgo__dlsym(BN_clear_free)
++	__mkcgo__dlsym(BN_free)
++	__mkcgo__dlsym(BN_lebin2bn)
++	__mkcgo__dlsym(BN_new)
++	__mkcgo__dlsym(BN_num_bits)
++	__mkcgo__dlsym(CRYPTO_free)
++	__mkcgo__dlsym(CRYPTO_malloc)
++	__mkcgo__dlsym(EC_GROUP_free)
++	__mkcgo__dlsym(EC_GROUP_new_by_curve_name)
++	__mkcgo__dlsym(EC_POINT_free)
++	__mkcgo__dlsym(EC_POINT_mul)
++	__mkcgo__dlsym(EC_POINT_new)
++	__mkcgo__dlsym(EC_POINT_oct2point)
++	__mkcgo__dlsym(EC_POINT_point2oct)
++	__mkcgo__dlsym(ERR_clear_error)
++	__mkcgo__dlsym(ERR_error_string_n)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_key_length)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_padding)
++	__mkcgo__dlsym(EVP_CipherInit_ex)
++	__mkcgo__dlsym(EVP_CipherUpdate)
++	__mkcgo__dlsym(EVP_DecryptFinal_ex)
++	__mkcgo__dlsym(EVP_DecryptInit_ex)
++	__mkcgo__dlsym(EVP_DecryptUpdate)
++	__mkcgo__dlsym(EVP_Digest)
++	__mkcgo__dlsym(EVP_DigestFinal_ex)
++	__mkcgo__dlsym(EVP_DigestInit)
++	__mkcgo__dlsym(EVP_DigestInit_ex)
++	__mkcgo__dlsym(EVP_DigestSignFinal)
++	__mkcgo__dlsym(EVP_DigestSignInit)
++	__mkcgo__dlsym(EVP_DigestUpdate)
++	__mkcgo__dlsym(EVP_DigestVerifyFinal)
++	__mkcgo__dlsym(EVP_DigestVerifyInit)
++	__mkcgo__dlsym(EVP_EncryptFinal_ex)
++	__mkcgo__dlsym(EVP_EncryptInit_ex)
++	__mkcgo__dlsym(EVP_EncryptUpdate)
++	__mkcgo__dlsym(EVP_MD_CTX_copy)
++	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
++	__mkcgo__dlsym(EVP_MD_CTX_free)
++	__mkcgo__dlsym(EVP_MD_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
++	__mkcgo__dlsym(EVP_PKEY_CTX_free)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_id)
++	__mkcgo__dlsym(EVP_PKEY_decrypt)
++	__mkcgo__dlsym(EVP_PKEY_decrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_derive)
++	__mkcgo__dlsym(EVP_PKEY_derive_init)
++	__mkcgo__dlsym(EVP_PKEY_derive_set_peer)
++	__mkcgo__dlsym(EVP_PKEY_encrypt)
++	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_free)
++	__mkcgo__dlsym(EVP_PKEY_keygen)
++	__mkcgo__dlsym(EVP_PKEY_keygen_init)
++	__mkcgo__dlsym(EVP_PKEY_new)
++	__mkcgo__dlsym(EVP_PKEY_paramgen)
++	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
++	__mkcgo__dlsym(EVP_PKEY_sign)
++	__mkcgo__dlsym(EVP_PKEY_sign_init)
++	__mkcgo__dlsym(EVP_PKEY_verify)
++	__mkcgo__dlsym(EVP_PKEY_verify_init)
++	__mkcgo__dlsym(EVP_aes_128_cbc)
++	__mkcgo__dlsym(EVP_aes_128_ctr)
++	__mkcgo__dlsym(EVP_aes_128_ecb)
++	__mkcgo__dlsym(EVP_aes_128_gcm)
++	__mkcgo__dlsym(EVP_aes_192_cbc)
++	__mkcgo__dlsym(EVP_aes_192_ctr)
++	__mkcgo__dlsym(EVP_aes_192_ecb)
++	__mkcgo__dlsym(EVP_aes_192_gcm)
++	__mkcgo__dlsym(EVP_aes_256_cbc)
++	__mkcgo__dlsym(EVP_aes_256_ctr)
++	__mkcgo__dlsym(EVP_aes_256_ecb)
++	__mkcgo__dlsym(EVP_aes_256_gcm)
++	__mkcgo__dlsym(EVP_des_cbc)
++	__mkcgo__dlsym(EVP_des_ecb)
++	__mkcgo__dlsym(EVP_des_ede3_cbc)
++	__mkcgo__dlsym(EVP_des_ede3_ecb)
++	__mkcgo__dlsym(EVP_md4)
++	__mkcgo__dlsym(EVP_md5)
++	__mkcgo__dlsym(EVP_md5_sha1)
++	__mkcgo__dlsym(EVP_rc4)
++	__mkcgo__dlsym(EVP_ripemd160)
++	__mkcgo__dlsym(EVP_sha1)
++	__mkcgo__dlsym(EVP_sha224)
++	__mkcgo__dlsym(EVP_sha256)
++	__mkcgo__dlsym(EVP_sha384)
++	__mkcgo__dlsym(EVP_sha512)
++	__mkcgo__dlsym(OBJ_nid2sn)
++	__mkcgo__dlsym(OPENSSL_init)
++	__mkcgo__dlsym(OPENSSL_init_crypto)
++	__mkcgo__dlsym(OpenSSL_version)
++	__mkcgo__dlsym(PKCS5_PBKDF2_HMAC)
++	__mkcgo__dlsym(RAND_bytes)
++}
++
++void __mkcgo_unload_() {
++	_g_BN_bin2bn = NULL;
++	_g_BN_bn2binpad = NULL;
++	_g_BN_bn2lebinpad = NULL;
++	_g_BN_clear = NULL;
++	_g_BN_clear_free = NULL;
++	_g_BN_free = NULL;
++	_g_BN_lebin2bn = NULL;
++	_g_BN_new = NULL;
++	_g_BN_num_bits = NULL;
++	_g_CRYPTO_free = NULL;
++	_g_CRYPTO_malloc = NULL;
++	_g_EC_GROUP_free = NULL;
++	_g_EC_GROUP_new_by_curve_name = NULL;
++	_g_EC_POINT_free = NULL;
++	_g_EC_POINT_mul = NULL;
++	_g_EC_POINT_new = NULL;
++	_g_EC_POINT_oct2point = NULL;
++	_g_EC_POINT_point2oct = NULL;
++	_g_ERR_clear_error = NULL;
++	_g_ERR_error_string_n = NULL;
++	_g_EVP_CIPHER_CTX_ctrl = NULL;
++	_g_EVP_CIPHER_CTX_free = NULL;
++	_g_EVP_CIPHER_CTX_new = NULL;
++	_g_EVP_CIPHER_CTX_set_key_length = NULL;
++	_g_EVP_CIPHER_CTX_set_padding = NULL;
++	_g_EVP_CipherInit_ex = NULL;
++	_g_EVP_CipherUpdate = NULL;
++	_g_EVP_DecryptFinal_ex = NULL;
++	_g_EVP_DecryptInit_ex = NULL;
++	_g_EVP_DecryptUpdate = NULL;
++	_g_EVP_Digest = NULL;
++	_g_EVP_DigestFinal_ex = NULL;
++	_g_EVP_DigestInit = NULL;
++	_g_EVP_DigestInit_ex = NULL;
++	_g_EVP_DigestSignFinal = NULL;
++	_g_EVP_DigestSignInit = NULL;
++	_g_EVP_DigestUpdate = NULL;
++	_g_EVP_DigestVerifyFinal = NULL;
++	_g_EVP_DigestVerifyInit = NULL;
++	_g_EVP_EncryptFinal_ex = NULL;
++	_g_EVP_EncryptInit_ex = NULL;
++	_g_EVP_EncryptUpdate = NULL;
++	_g_EVP_MD_CTX_copy = NULL;
++	_g_EVP_MD_CTX_copy_ex = NULL;
++	_g_EVP_MD_CTX_free = NULL;
++	_g_EVP_MD_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_ctrl = NULL;
++	_g_EVP_PKEY_CTX_free = NULL;
++	_g_EVP_PKEY_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_new_id = NULL;
++	_g_EVP_PKEY_decrypt = NULL;
++	_g_EVP_PKEY_decrypt_init = NULL;
++	_g_EVP_PKEY_derive = NULL;
++	_g_EVP_PKEY_derive_init = NULL;
++	_g_EVP_PKEY_derive_set_peer = NULL;
++	_g_EVP_PKEY_encrypt = NULL;
++	_g_EVP_PKEY_encrypt_init = NULL;
++	_g_EVP_PKEY_free = NULL;
++	_g_EVP_PKEY_keygen = NULL;
++	_g_EVP_PKEY_keygen_init = NULL;
++	_g_EVP_PKEY_new = NULL;
++	_g_EVP_PKEY_paramgen = NULL;
++	_g_EVP_PKEY_paramgen_init = NULL;
++	_g_EVP_PKEY_sign = NULL;
++	_g_EVP_PKEY_sign_init = NULL;
++	_g_EVP_PKEY_verify = NULL;
++	_g_EVP_PKEY_verify_init = NULL;
++	_g_EVP_aes_128_cbc = NULL;
++	_g_EVP_aes_128_ctr = NULL;
++	_g_EVP_aes_128_ecb = NULL;
++	_g_EVP_aes_128_gcm = NULL;
++	_g_EVP_aes_192_cbc = NULL;
++	_g_EVP_aes_192_ctr = NULL;
++	_g_EVP_aes_192_ecb = NULL;
++	_g_EVP_aes_192_gcm = NULL;
++	_g_EVP_aes_256_cbc = NULL;
++	_g_EVP_aes_256_ctr = NULL;
++	_g_EVP_aes_256_ecb = NULL;
++	_g_EVP_aes_256_gcm = NULL;
++	_g_EVP_des_cbc = NULL;
++	_g_EVP_des_ecb = NULL;
++	_g_EVP_des_ede3_cbc = NULL;
++	_g_EVP_des_ede3_ecb = NULL;
++	_g_EVP_md4 = NULL;
++	_g_EVP_md5 = NULL;
++	_g_EVP_md5_sha1 = NULL;
++	_g_EVP_rc4 = NULL;
++	_g_EVP_ripemd160 = NULL;
++	_g_EVP_sha1 = NULL;
++	_g_EVP_sha224 = NULL;
++	_g_EVP_sha256 = NULL;
++	_g_EVP_sha384 = NULL;
++	_g_EVP_sha512 = NULL;
++	_g_OBJ_nid2sn = NULL;
++	_g_OPENSSL_init = NULL;
++	_g_OPENSSL_init_crypto = NULL;
++	_g_OpenSSL_version = NULL;
++	_g_PKCS5_PBKDF2_HMAC = NULL;
++	_g_RAND_bytes = NULL;
++}
++
++void __mkcgo_load_111(void* handle) {
++	__mkcgo__dlsym(EVP_DigestSign)
++	__mkcgo__dlsym(EVP_DigestVerify)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
++	__mkcgo__dlsym(EVP_sha3_224)
++	__mkcgo__dlsym(EVP_sha3_256)
++	__mkcgo__dlsym(EVP_sha3_384)
++	__mkcgo__dlsym(EVP_sha3_512)
++	__mkcgo__dlsym(EVP_sha512_224)
++	__mkcgo__dlsym(EVP_sha512_256)
++}
++
++void __mkcgo_unload_111() {
++	_g_EVP_DigestSign = NULL;
++	_g_EVP_DigestVerify = NULL;
++	_g_EVP_PKEY_get_raw_private_key = NULL;
++	_g_EVP_PKEY_get_raw_public_key = NULL;
++	_g_EVP_PKEY_new_raw_private_key = NULL;
++	_g_EVP_PKEY_new_raw_public_key = NULL;
++	_g_EVP_sha3_224 = NULL;
++	_g_EVP_sha3_256 = NULL;
++	_g_EVP_sha3_384 = NULL;
++	_g_EVP_sha3_512 = NULL;
++	_g_EVP_sha512_224 = NULL;
++	_g_EVP_sha512_256 = NULL;
++}
++
++void __mkcgo_load_3(void* handle) {
++	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
++	__mkcgo__dlsym(ERR_get_error_all)
++	__mkcgo__dlsym(EVP_CIPHER_fetch)
++	__mkcgo__dlsym(EVP_CIPHER_get0_name)
++	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_free)
++	__mkcgo__dlsym(EVP_KDF_CTX_get_kdf_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_new)
++	__mkcgo__dlsym(EVP_KDF_CTX_set_params)
++	__mkcgo__dlsym(EVP_KDF_derive)
++	__mkcgo__dlsym(EVP_KDF_fetch)
++	__mkcgo__dlsym(EVP_KDF_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_dup)
++	__mkcgo__dlsym(EVP_MAC_CTX_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_new)
++	__mkcgo__dlsym(EVP_MAC_CTX_set_params)
++	__mkcgo__dlsym(EVP_MAC_fetch)
++	__mkcgo__dlsym(EVP_MAC_final)
++	__mkcgo__dlsym(EVP_MAC_init)
++	__mkcgo__dlsym(EVP_MAC_update)
++	__mkcgo__dlsym(EVP_MD_CTX_get_params)
++	__mkcgo__dlsym(EVP_MD_CTX_gettable_params)
++	__mkcgo__dlsym(EVP_MD_CTX_set_params)
++	__mkcgo__dlsym(EVP_MD_CTX_settable_params)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_name)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_MD_get_block_size)
++	__mkcgo__dlsym(EVP_MD_get_size)
++	__mkcgo__dlsym(EVP_MD_get_type)
++	__mkcgo__dlsym(EVP_PKEY_CTX_add1_hkdf_info)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_from_pkey)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set0_rsa_oaep_label)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_key)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
++	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
++	__mkcgo__dlsym(EVP_PKEY_fromdata)
++	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
++	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
++	__mkcgo__dlsym(EVP_PKEY_get_bits)
++	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
++	__mkcgo__dlsym(EVP_PKEY_get_size)
++	__mkcgo__dlsym(EVP_PKEY_private_check)
++	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
++	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
++	__mkcgo__dlsym(EVP_PKEY_up_ref)
++	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
++	__mkcgo__dlsym(EVP_SIGNATURE_free)
++	__mkcgo__dlsym(EVP_default_properties_enable_fips)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_free)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_new)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_BN)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_int32)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_octet_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
++	__mkcgo__dlsym(OSSL_PARAM_free)
++	__mkcgo__dlsym(OSSL_PARAM_locate_const)
++	__mkcgo__dlsym(OSSL_PROVIDER_available)
++	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
++	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
++}
++
++void __mkcgo_unload_3() {
++	_g_EC_POINT_set_affine_coordinates = NULL;
++	_g_ERR_get_error_all = NULL;
++	_g_EVP_CIPHER_fetch = NULL;
++	_g_EVP_CIPHER_get0_name = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_KDF_CTX_free = NULL;
++	_g_EVP_KDF_CTX_get_kdf_size = NULL;
++	_g_EVP_KDF_CTX_new = NULL;
++	_g_EVP_KDF_CTX_set_params = NULL;
++	_g_EVP_KDF_derive = NULL;
++	_g_EVP_KDF_fetch = NULL;
++	_g_EVP_KDF_free = NULL;
++	_g_EVP_MAC_CTX_dup = NULL;
++	_g_EVP_MAC_CTX_free = NULL;
++	_g_EVP_MAC_CTX_new = NULL;
++	_g_EVP_MAC_CTX_set_params = NULL;
++	_g_EVP_MAC_fetch = NULL;
++	_g_EVP_MAC_final = NULL;
++	_g_EVP_MAC_init = NULL;
++	_g_EVP_MAC_update = NULL;
++	_g_EVP_MD_CTX_get_params = NULL;
++	_g_EVP_MD_CTX_gettable_params = NULL;
++	_g_EVP_MD_CTX_set_params = NULL;
++	_g_EVP_MD_CTX_settable_params = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_name = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_MD_get_type = NULL;
++	_g_EVP_PKEY_CTX_add1_hkdf_info = NULL;
++	_g_EVP_PKEY_CTX_new_from_pkey = NULL;
++	_g_EVP_PKEY_CTX_set0_rsa_oaep_label = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_key = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
++	_g_EVP_PKEY_Q_keygen = NULL;
++	_g_EVP_PKEY_fromdata = NULL;
++	_g_EVP_PKEY_fromdata_init = NULL;
++	_g_EVP_PKEY_get1_encoded_public_key = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_bn_param = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_private_check = NULL;
++	_g_EVP_PKEY_public_check_quick = NULL;
++	_g_EVP_PKEY_set1_encoded_public_key = NULL;
++	_g_EVP_PKEY_up_ref = NULL;
++	_g_EVP_SIGNATURE_fetch = NULL;
++	_g_EVP_SIGNATURE_free = NULL;
++	_g_EVP_default_properties_enable_fips = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++	_g_OSSL_PARAM_BLD_free = NULL;
++	_g_OSSL_PARAM_BLD_new = NULL;
++	_g_OSSL_PARAM_BLD_push_BN = NULL;
++	_g_OSSL_PARAM_BLD_push_int32 = NULL;
++	_g_OSSL_PARAM_BLD_push_octet_string = NULL;
++	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
++	_g_OSSL_PARAM_BLD_to_param = NULL;
++	_g_OSSL_PARAM_free = NULL;
++	_g_OSSL_PARAM_locate_const = NULL;
++	_g_OSSL_PROVIDER_available = NULL;
++	_g_OSSL_PROVIDER_get0_name = NULL;
++	_g_OSSL_PROVIDER_try_load = NULL;
++}
++
++void __mkcgo_load_init_1(void* handle) {
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++}
++
++void __mkcgo_unload_init_1() {
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++}
++
++void __mkcgo_load_init_3(void* handle) {
++	__mkcgo__dlsym(ERR_clear_error)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++}
++
++void __mkcgo_unload_init_3() {
++	_g_ERR_clear_error = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++}
++
++void __mkcgo_load_legacy_1(void* handle) {
++	__mkcgo__dlsym(DSA_free)
++	__mkcgo__dlsym(DSA_generate_key)
++	__mkcgo__dlsym(DSA_get0_key)
++	__mkcgo__dlsym(DSA_get0_pqg)
++	__mkcgo__dlsym(DSA_new)
++	__mkcgo__dlsym(DSA_set0_key)
++	__mkcgo__dlsym(DSA_set0_pqg)
++	__mkcgo__dlsym(EC_KEY_check_key)
++	__mkcgo__dlsym(EC_KEY_free)
++	__mkcgo__dlsym(EC_KEY_get0_group)
++	__mkcgo__dlsym(EC_KEY_get0_private_key)
++	__mkcgo__dlsym(EC_KEY_get0_public_key)
++	__mkcgo__dlsym(EC_KEY_new_by_curve_name)
++	__mkcgo__dlsym(EC_KEY_set_private_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
++	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
++	__mkcgo__dlsym(ERR_get_error_line)
++	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
++	__mkcgo__dlsym(EVP_PKEY_assign)
++	__mkcgo__dlsym(EVP_PKEY_get0_DSA)
++	__mkcgo__dlsym(EVP_PKEY_get0_EC_KEY)
++	__mkcgo__dlsym(EVP_PKEY_get1_RSA)
++	__mkcgo__dlsym2(EVP_PKEY_get_bits, EVP_PKEY_bits)
++	__mkcgo__dlsym2(EVP_PKEY_get_size, EVP_PKEY_size)
++	__mkcgo__dlsym(EVP_PKEY_set1_EC_KEY)
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++	__mkcgo__dlsym(HMAC_CTX_copy)
++	__mkcgo__dlsym(HMAC_CTX_free)
++	__mkcgo__dlsym(HMAC_CTX_new)
++	__mkcgo__dlsym(HMAC_Final)
++	__mkcgo__dlsym(HMAC_Init_ex)
++	__mkcgo__dlsym(HMAC_Update)
++	__mkcgo__dlsym(RSA_free)
++	__mkcgo__dlsym(RSA_get0_crt_params)
++	__mkcgo__dlsym(RSA_get0_factors)
++	__mkcgo__dlsym(RSA_get0_key)
++	__mkcgo__dlsym(RSA_new)
++	__mkcgo__dlsym(RSA_set0_crt_params)
++	__mkcgo__dlsym(RSA_set0_factors)
++	__mkcgo__dlsym(RSA_set0_key)
++}
++
++void __mkcgo_unload_legacy_1() {
++	_g_DSA_free = NULL;
++	_g_DSA_generate_key = NULL;
++	_g_DSA_get0_key = NULL;
++	_g_DSA_get0_pqg = NULL;
++	_g_DSA_new = NULL;
++	_g_DSA_set0_key = NULL;
++	_g_DSA_set0_pqg = NULL;
++	_g_EC_KEY_check_key = NULL;
++	_g_EC_KEY_free = NULL;
++	_g_EC_KEY_get0_group = NULL;
++	_g_EC_KEY_get0_private_key = NULL;
++	_g_EC_KEY_get0_public_key = NULL;
++	_g_EC_KEY_new_by_curve_name = NULL;
++	_g_EC_KEY_set_private_key = NULL;
++	_g_EC_KEY_set_public_key = NULL;
++	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
++	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
++	_g_ERR_get_error_line = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_PKEY_assign = NULL;
++	_g_EVP_PKEY_get0_DSA = NULL;
++	_g_EVP_PKEY_get0_EC_KEY = NULL;
++	_g_EVP_PKEY_get1_RSA = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_set1_EC_KEY = NULL;
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++	_g_HMAC_CTX_copy = NULL;
++	_g_HMAC_CTX_free = NULL;
++	_g_HMAC_CTX_new = NULL;
++	_g_HMAC_Final = NULL;
++	_g_HMAC_Init_ex = NULL;
++	_g_HMAC_Update = NULL;
++	_g_RSA_free = NULL;
++	_g_RSA_get0_crt_params = NULL;
++	_g_RSA_get0_factors = NULL;
++	_g_RSA_get0_key = NULL;
++	_g_RSA_new = NULL;
++	_g_RSA_set0_crt_params = NULL;
++	_g_RSA_set0_factors = NULL;
++	_g_RSA_set0_key = NULL;
++}
++
++void __mkcgo_load_version(void* handle) {
++	__mkcgo__dlsym_nocheck(OPENSSL_version_major, OPENSSL_version_major)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_minor, OPENSSL_version_minor)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_patch, OPENSSL_version_patch)
++	__mkcgo__dlsym_nocheck(OpenSSL_version_num, OpenSSL_version_num)
++}
++
++void __mkcgo_unload_version() {
++	_g_OPENSSL_version_major = NULL;
++	_g_OPENSSL_version_minor = NULL;
++	_g_OPENSSL_version_patch = NULL;
++	_g_OpenSSL_version_num = NULL;
++}
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_BN_clear(_BIGNUM_PTR _arg0) {
++	_g_BN_clear(_arg0);
++}
++
++void _mkcgo_BN_clear_free(_BIGNUM_PTR _arg0) {
++	_g_BN_clear_free(_arg0);
++}
++
++void _mkcgo_BN_free(_BIGNUM_PTR _arg0) {
++	_g_BN_free(_arg0);
++}
++
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR _arg0) {
++	return _g_BN_num_bits(_arg0);
++}
++
++void _mkcgo_CRYPTO_free(void* _arg0, const char* _arg1, int _arg2) {
++	_g_CRYPTO_free(_arg0, _arg1, _arg2);
++}
++
++void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_DSA_free(_DSA_PTR _arg0) {
++	_g_DSA_free(_arg0);
++}
++
++int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_DSA_generate_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_DSA_get0_key(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_DSA_get0_key(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
++}
++
++_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *_err_state) {
++	_DSA_PTR _ret = _g_DSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR _arg0) {
++	_g_EC_GROUP_free(_arg0);
++}
++
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_KEY_check_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR _arg0) {
++	_g_EC_KEY_free(_arg0);
++}
++
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_group(_arg0);
++}
++
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_private_key(_arg0);
++}
++
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_public_key(_arg0);
++}
++
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR _arg0) {
++	_g_EC_POINT_free(_arg0);
++}
++
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, mkcgo_err_state *_err_state) {
++	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_ERR_clear_error(void) {
++	_g_ERR_clear_error();
++}
++
++void _mkcgo_ERR_error_string_n(unsigned long _arg0, char* _arg1, size_t _arg2) {
++	_g_ERR_error_string_n(_arg0, _arg1, _arg2);
++}
++
++unsigned long _mkcgo_ERR_get_error_all(const char** _arg0, int* _arg1, const char** _arg2, const char** _arg3, int* _arg4) {
++	return _g_ERR_get_error_all(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++unsigned long _mkcgo_ERR_get_error_line(const char** _arg0, int* _arg1) {
++	return _g_ERR_get_error_line(_arg0, _arg1);
++}
++
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR _arg0) {
++	_g_EVP_CIPHER_CTX_free(_arg0);
++}
++
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *_err_state) {
++	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get0_name(_arg0);
++}
++
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get_block_size(_arg0);
++}
++
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_Digest(const void* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const void* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR _arg0) {
++	_g_EVP_KDF_CTX_free(_arg0);
++}
++
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, mkcgo_err_state *_err_state) {
++	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR _arg0) {
++	_g_EVP_KDF_free(_arg0);
++}
++
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR _arg0) {
++	_g_EVP_MAC_CTX_free(_arg0);
++}
++
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, mkcgo_err_state *_err_state) {
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MD_CTX_copy(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
++	_g_EVP_MD_CTX_free(_arg0);
++}
++
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
++	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR _arg0) {
++	_g_EVP_MD_free(_arg0);
++}
++
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_name(_arg0);
++}
++
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_provider(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_block_size(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_size(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_type(_arg0);
++}
++
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR _arg0) {
++	_g_EVP_PKEY_CTX_free(_arg0);
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_derive_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR _arg0) {
++	_g_EVP_PKEY_free(_arg0);
++}
++
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, mkcgo_err_state *_err_state) {
++	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_get_bits(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_get_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_private_check(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_sign_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_up_ref(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_PKEY_verify_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR _arg0) {
++	_g_EVP_SIGNATURE_free(_arg0);
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void) {
++	return _g_EVP_aes_128_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void) {
++	return _g_EVP_aes_128_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void) {
++	return _g_EVP_aes_128_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void) {
++	return _g_EVP_aes_128_gcm();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void) {
++	return _g_EVP_aes_192_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void) {
++	return _g_EVP_aes_192_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void) {
++	return _g_EVP_aes_192_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void) {
++	return _g_EVP_aes_192_gcm();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void) {
++	return _g_EVP_aes_256_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void) {
++	return _g_EVP_aes_256_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void) {
++	return _g_EVP_aes_256_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void) {
++	return _g_EVP_aes_256_gcm();
++}
++
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR _arg0) {
++	return _g_EVP_default_properties_is_fips_enabled(_arg0);
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void) {
++	return _g_EVP_des_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void) {
++	return _g_EVP_des_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void) {
++	return _g_EVP_des_ede3_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void) {
++	return _g_EVP_des_ede3_ecb();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md4(void) {
++	return _g_EVP_md4();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md5(void) {
++	return _g_EVP_md5();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void) {
++	return _g_EVP_md5_sha1();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void) {
++	return _g_EVP_rc4();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void) {
++	return _g_EVP_ripemd160();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void) {
++	return _g_EVP_sha1();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void) {
++	return _g_EVP_sha224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void) {
++	return _g_EVP_sha256();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void) {
++	return _g_EVP_sha384();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void) {
++	return _g_EVP_sha3_224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void) {
++	return _g_EVP_sha3_256();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void) {
++	return _g_EVP_sha3_384();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void) {
++	return _g_EVP_sha3_512();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void) {
++	return _g_EVP_sha512();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void) {
++	return _g_EVP_sha512_224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void) {
++	return _g_EVP_sha512_256();
++}
++
++int _mkcgo_FIPS_mode(void) {
++	return _g_FIPS_mode();
++}
++
++int _mkcgo_FIPS_mode_set(int _arg0, mkcgo_err_state *_err_state) {
++	int _ret = _g_FIPS_mode_set(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR _arg0) {
++	_g_HMAC_CTX_free(_arg0);
++}
++
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *_err_state) {
++	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, mkcgo_err_state *_err_state) {
++	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OBJ_nid2sn(int _arg0) {
++	return _g_OBJ_nid2sn(_arg0);
++}
++
++void _mkcgo_OPENSSL_init(void) {
++	_g_OPENSSL_init();
++}
++
++int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_available_OPENSSL_version_major() {
++	return _g_OPENSSL_version_major != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_major(void) {
++	return _g_OPENSSL_version_major();
++}
++
++int _mkcgo_available_OPENSSL_version_minor() {
++	return _g_OPENSSL_version_minor != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_minor(void) {
++	return _g_OPENSSL_version_minor();
++}
++
++int _mkcgo_available_OPENSSL_version_patch() {
++	return _g_OPENSSL_version_patch != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_patch(void) {
++	return _g_OPENSSL_version_patch();
++}
++
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR _arg0) {
++	_g_OSSL_PARAM_BLD_free(_arg0);
++}
++
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *_err_state) {
++	_OSSL_PARAM_BLD_PTR _ret = _g_OSSL_PARAM_BLD_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, mkcgo_err_state *_err_state) {
++	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR _arg0) {
++	_g_OSSL_PARAM_free(_arg0);
++}
++
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, mkcgo_err_state *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
++	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
++}
++
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR _arg0) {
++	return _g_OSSL_PROVIDER_get0_name(_arg0);
++}
++
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OpenSSL_version(int _arg0) {
++	return _g_OpenSSL_version(_arg0);
++}
++
++int _mkcgo_available_OpenSSL_version_num() {
++	return _g_OpenSSL_version_num != NULL;
++}
++
++unsigned long _mkcgo_OpenSSL_version_num(void) {
++	return _g_OpenSSL_version_num();
++}
++
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, mkcgo_err_state *_err_state) {
++	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, mkcgo_err_state *_err_state) {
++	int _ret = _g_RAND_bytes(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_RSA_free(_RSA_PTR _arg0) {
++	_g_RSA_free(_arg0);
++}
++
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_crt_params(_arg0, _arg1, _arg2, _arg3);
++}
++
++void _mkcgo_RSA_get0_factors(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_RSA_get0_factors(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_RSA_get0_key(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
++}
++
++_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *_err_state) {
++	_RSA_PTR _ret = _g_RSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
+new file mode 100644
+index 00000000000000..619b7d730f72fa
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
+@@ -0,0 +1,57 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++package ossl
++
++const (
++	POINT_CONVERSION_UNCOMPRESSED       = 4
++	OPENSSL_INIT_LOAD_CRYPTO_STRINGS    = 0x00000002
++	OPENSSL_INIT_ADD_ALL_CIPHERS        = 0x00000004
++	OPENSSL_INIT_ADD_ALL_DIGESTS        = 0x00000008
++	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
++	EVP_CTRL_GCM_GET_TAG                = 0x10
++	EVP_CTRL_GCM_SET_TAG                = 0x11
++	EVP_PKEY_CTRL_MD                    = 1
++	EVP_PKEY_RSA                        = 6
++	EVP_PKEY_EC                         = 408
++	EVP_PKEY_TLS1_PRF                   = 1021
++	EVP_PKEY_HKDF                       = 1036
++	EVP_PKEY_ED25519                    = 1087
++	EVP_PKEY_DSA                        = 116
++	EVP_PKEY_OP_DERIVE                  = (1 << 10)
++	EVP_MAX_MD_SIZE                     = 64
++	EVP_PKEY_PUBLIC_KEY                 = 0x86
++	EVP_PKEY_KEYPAIR                    = 0x87
++	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
++	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
++	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
++	EVP_PKEY_CTRL_TLS_MD                = 0x1000
++	EVP_PKEY_CTRL_TLS_SECRET            = 0x1001
++	EVP_PKEY_CTRL_TLS_SEED              = 0x1002
++	EVP_PKEY_CTRL_HKDF_MD               = 0x1003
++	EVP_PKEY_CTRL_HKDF_SALT             = 0x1004
++	EVP_PKEY_CTRL_HKDF_KEY              = 0x1005
++	EVP_PKEY_CTRL_HKDF_INFO             = 0x1006
++	EVP_PKEY_CTRL_HKDF_MODE             = 0x1007
++	NID_X9_62_prime256v1                = 415
++	NID_secp224r1                       = 713
++	NID_secp384r1                       = 715
++	NID_secp521r1                       = 716
++	RSA_PKCS1_PADDING                   = 1
++	RSA_NO_PADDING                      = 3
++	RSA_PKCS1_OAEP_PADDING              = 4
++	RSA_PKCS1_PSS_PADDING               = 6
++	RSA_PSS_SALTLEN_DIGEST              = -1
++	RSA_PSS_SALTLEN_AUTO                = -2
++	RSA_PSS_SALTLEN_MAX_SIGN            = -2
++	RSA_PSS_SALTLEN_MAX                 = -3
++	EVP_PKEY_CTRL_RSA_PADDING           = 0x1001
++	EVP_PKEY_CTRL_RSA_PSS_SALTLEN       = 0x1002
++	EVP_PKEY_CTRL_RSA_KEYGEN_BITS       = 0x1003
++	EVP_PKEY_CTRL_RSA_MGF1_MD           = 0x1005
++	EVP_PKEY_CTRL_RSA_OAEP_MD           = 0x1009
++	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
++	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
++	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
++	OSSL_PARAM_INTEGER                  = 1
++	OSSL_PARAM_OCTET_STRING             = 5
++)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
+new file mode 100644
+index 00000000000000..335d129bb345cd
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
+@@ -0,0 +1,335 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
++
++#include <stdlib.h>
++#include <stdint.h>
++
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef int point_conversion_form_t;
++
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD = 1,
++	_EVP_PKEY_RSA = 6,
++	_EVP_PKEY_EC = 408,
++	_EVP_PKEY_TLS1_PRF = 1021,
++	_EVP_PKEY_HKDF = 1036,
++	_EVP_PKEY_ED25519 = 1087,
++	_EVP_PKEY_DSA = 116,
++	_EVP_PKEY_OP_DERIVE = (1 << 10),
++	_EVP_MAX_MD_SIZE = 64,
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR = 0x87,
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
++	_EVP_PKEY_CTRL_TLS_MD = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE = 0x1007,
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1 = 713,
++	_NID_secp384r1 = 715,
++	_NID_secp521r1 = 716,
++	_RSA_PKCS1_PADDING = 1,
++	_RSA_NO_PADDING = 3,
++	_RSA_PKCS1_OAEP_PADDING = 4,
++	_RSA_PKCS1_PSS_PADDING = 6,
++	_RSA_PSS_SALTLEN_DIGEST = -1,
++	_RSA_PSS_SALTLEN_AUTO = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN = -2,
++	_RSA_PSS_SALTLEN_MAX = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
++};
++
++typedef void* mkcgo_err_state;
++mkcgo_err_state mkcgo_err_retrieve();
++void mkcgo_err_free(mkcgo_err_state);
++void __mkcgo_load_(void* handle);
++void __mkcgo_unload_();
++void __mkcgo_load_111(void* handle);
++void __mkcgo_unload_111();
++void __mkcgo_load_3(void* handle);
++void __mkcgo_unload_3();
++void __mkcgo_load_init_1(void* handle);
++void __mkcgo_unload_init_1();
++void __mkcgo_load_init_3(void* handle);
++void __mkcgo_unload_init_3();
++void __mkcgo_load_legacy_1(void* handle);
++void __mkcgo_unload_legacy_1();
++void __mkcgo_load_version(void* handle);
++void __mkcgo_unload_version();
++
++int _mkcgo_available_OPENSSL_version_major();
++int _mkcgo_available_OPENSSL_version_minor();
++int _mkcgo_available_OPENSSL_version_patch();
++int _mkcgo_available_OpenSSL_version_num();
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_BN_clear(_BIGNUM_PTR);
++void _mkcgo_BN_clear_free(_BIGNUM_PTR);
++void _mkcgo_BN_free(_BIGNUM_PTR);
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
++_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *);
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
++void _mkcgo_CRYPTO_free(void*, const char*, int);
++void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, mkcgo_err_state *);
++void _mkcgo_DSA_free(_DSA_PTR);
++int _mkcgo_DSA_generate_key(_DSA_PTR, mkcgo_err_state *);
++void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *);
++int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, mkcgo_err_state *);
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, mkcgo_err_state *);
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, mkcgo_err_state *);
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_ERR_clear_error(void);
++void _mkcgo_ERR_error_string_n(unsigned long, char*, size_t);
++unsigned long _mkcgo_ERR_get_error_all(const char**, int*, const char**, const char**, int*);
++unsigned long _mkcgo_ERR_get_error_line(const char**, int*);
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, mkcgo_err_state *);
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *);
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_Digest(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const void*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, mkcgo_err_state *);
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, mkcgo_err_state *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, mkcgo_err_state *);
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, mkcgo_err_state *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, mkcgo_err_state *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, mkcgo_err_state *);
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, mkcgo_err_state *);
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, mkcgo_err_state *);
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, mkcgo_err_state *);
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void);
++const _EVP_MD_PTR _mkcgo_EVP_md4(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void);
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
++int _mkcgo_FIPS_mode(void);
++int _mkcgo_FIPS_mode_set(int, mkcgo_err_state *);
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, mkcgo_err_state *);
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *);
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++const char* _mkcgo_OBJ_nid2sn(int);
++void _mkcgo_OPENSSL_init(void);
++int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, mkcgo_err_state *);
++unsigned int _mkcgo_OPENSSL_version_major(void);
++unsigned int _mkcgo_OPENSSL_version_minor(void);
++unsigned int _mkcgo_OPENSSL_version_patch(void);
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, mkcgo_err_state *);
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, mkcgo_err_state *);
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, mkcgo_err_state *);
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, mkcgo_err_state *);
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, mkcgo_err_state *);
++const char* _mkcgo_OpenSSL_version(int);
++unsigned long _mkcgo_OpenSSL_version_num(void);
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, mkcgo_err_state *);
++int _mkcgo_RAND_bytes(unsigned char*, int, mkcgo_err_state *);
++void _mkcgo_RSA_free(_RSA_PTR);
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *);
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
+new file mode 100644
+index 00000000000000..fdec005aa9bcaa
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
+@@ -0,0 +1,1275 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++package ossl
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#cgo unix LDFLAGS: -ldl
++
++#include "zossl.h"
++*/
++import "C"
++import "unsafe"
++
++type BIGNUM_PTR = C._BIGNUM_PTR
++type BN_CTX_PTR = C._BN_CTX_PTR
++type DSA_PTR = C._DSA_PTR
++type EC_GROUP_PTR = C._EC_GROUP_PTR
++type EC_KEY_PTR = C._EC_KEY_PTR
++type EC_POINT_PTR = C._EC_POINT_PTR
++type ENGINE_PTR = C._ENGINE_PTR
++type EVP_CIPHER_CTX_PTR = C._EVP_CIPHER_CTX_PTR
++type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
++type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
++type EVP_KDF_PTR = C._EVP_KDF_PTR
++type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
++type EVP_MAC_PTR = C._EVP_MAC_PTR
++type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
++type EVP_MD_PTR = C._EVP_MD_PTR
++type EVP_PKEY_CTX_PTR = C._EVP_PKEY_CTX_PTR
++type EVP_PKEY_PTR = C._EVP_PKEY_PTR
++type EVP_SIGNATURE_PTR = C._EVP_SIGNATURE_PTR
++type HMAC_CTX_PTR = C._HMAC_CTX_PTR
++type OPENSSL_INIT_SETTINGS_PTR = C._OPENSSL_INIT_SETTINGS_PTR
++type OSSL_LIB_CTX_PTR = C._OSSL_LIB_CTX_PTR
++type OSSL_PARAM_BLD_PTR = C._OSSL_PARAM_BLD_PTR
++type OSSL_PARAM_PTR = C._OSSL_PARAM_PTR
++type OSSL_PROVIDER_PTR = C._OSSL_PROVIDER_PTR
++type RSA_PTR = C._RSA_PTR
++type Point_conversion_form_t = C.point_conversion_form_t
++
++func MkcgoLoad_(handle unsafe.Pointer) {
++	C.__mkcgo_load_(handle)
++}
++
++func MkcgoUnload_() {
++	C.__mkcgo_unload_()
++}
++
++func MkcgoLoad_111(handle unsafe.Pointer) {
++	C.__mkcgo_load_111(handle)
++}
++
++func MkcgoUnload_111() {
++	C.__mkcgo_unload_111()
++}
++
++func MkcgoLoad_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_3(handle)
++}
++
++func MkcgoUnload_3() {
++	C.__mkcgo_unload_3()
++}
++
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_1(handle)
++}
++
++func MkcgoUnload_init_1() {
++	C.__mkcgo_unload_init_1()
++}
++
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_3(handle)
++}
++
++func MkcgoUnload_init_3() {
++	C.__mkcgo_unload_init_3()
++}
++
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_legacy_1(handle)
++}
++
++func MkcgoUnload_legacy_1() {
++	C.__mkcgo_unload_legacy_1()
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	C.__mkcgo_load_version(handle)
++}
++
++func MkcgoUnload_version() {
++	C.__mkcgo_unload_version()
++}
++
++//go:nosplit
++func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++}
++
++func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), arg2, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_bin2bn", _err)
++}
++
++func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2binpad", _err)
++}
++
++func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", _err)
++}
++
++func BN_clear(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear(arg0)
++}
++
++func BN_clear_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear_free(arg0)
++}
++
++func BN_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_free(arg0)
++}
++
++func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(s)), C.int(len), ret, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_lebin2bn", _err)
++}
++
++func BN_new() (BIGNUM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_new", _err)
++}
++
++func BN_num_bits(arg0 BIGNUM_PTR) int32 {
++	return int32(C._mkcgo_BN_num_bits(arg0))
++}
++
++func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
++	C._mkcgo_CRYPTO_free(str, (*C.char)(unsafe.Pointer(file)), C.int(line))
++}
++
++func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("CRYPTO_malloc", _err)
++}
++
++func DSA_free(r DSA_PTR) {
++	C._mkcgo_DSA_free(r)
++}
++
++func DSA_generate_key(a DSA_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_generate_key", _err)
++}
++
++func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_key(d, pub_key, priv_key)
++}
++
++func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_pqg(d, p, q, g)
++}
++
++func DSA_new() (DSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("DSA_new", _err)
++}
++
++func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_key", _err)
++}
++
++func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_pqg", _err)
++}
++
++func EC_GROUP_free(group EC_GROUP_PTR) {
++	C._mkcgo_EC_GROUP_free(group)
++}
++
++func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
++}
++
++func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_check_key", _err)
++}
++
++func EC_KEY_free(arg0 EC_KEY_PTR) {
++	C._mkcgo_EC_KEY_free(arg0)
++}
++
++func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
++	return C._mkcgo_EC_KEY_get0_group(arg0)
++}
++
++func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
++	return C._mkcgo_EC_KEY_get0_private_key(arg0)
++}
++
++func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
++	return C._mkcgo_EC_KEY_get0_public_key(arg0)
++}
++
++func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", _err)
++}
++
++func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", _err)
++}
++
++func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", _err)
++}
++
++func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
++}
++
++func EC_POINT_free(arg0 EC_POINT_PTR) {
++	C._mkcgo_EC_POINT_free(arg0)
++}
++
++func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
++}
++
++func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_mul", _err)
++}
++
++func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_POINT_new", _err)
++}
++
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", _err)
++}
++
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EC_POINT_point2oct", _err)
++}
++
++func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
++}
++
++func ERR_clear_error() {
++	C._mkcgo_ERR_clear_error()
++}
++
++func ERR_error_string_n(e uint64, buf *byte, len int) {
++	C._mkcgo_ERR_error_string_n(C.ulong(e), (*C.char)(unsafe.Pointer(buf)), C.size_t(len))
++}
++
++func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
++	return uint64(C._mkcgo_ERR_get_error_all((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line)), (**C.char)(unsafe.Pointer(__func)), (**C.char)(unsafe.Pointer(data)), (*C.int)(unsafe.Pointer(flags))))
++}
++
++func ERR_get_error_line(file **byte, line *int32) uint64 {
++	return uint64(C._mkcgo_ERR_get_error_line((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line))))
++}
++
++func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
++}
++
++func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
++	C._mkcgo_EVP_CIPHER_CTX_free(arg0)
++}
++
++func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", _err)
++}
++
++func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
++}
++
++func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
++}
++
++func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_fetch", _err)
++}
++
++func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_CIPHER_get0_name(cipher)))
++}
++
++func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
++	return int32(C._mkcgo_EVP_CIPHER_get_block_size(cipher))
++}
++
++func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", _err)
++}
++
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", _err)
++}
++
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(outm)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", _err)
++}
++
++func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", _err)
++}
++
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", _err)
++}
++
++func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_Digest(unsafe.Pointer(&*(*byte)(data)), C.size_t(count), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_Digest", _err)
++}
++
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", _err)
++}
++
++func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit", _err)
++}
++
++func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", _err)
++}
++
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(sigret)), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSign", _err)
++}
++
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", _err)
++}
++
++func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", _err)
++}
++
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestUpdate(ctx, unsafe.Pointer(&*(*byte)(d)), C.size_t(cnt), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", _err)
++}
++
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(sigret)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerify", _err)
++}
++
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", _err)
++}
++
++func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", _err)
++}
++
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", _err)
++}
++
++func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", _err)
++}
++
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", _err)
++}
++
++func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
++	C._mkcgo_EVP_KDF_CTX_free(ctx)
++}
++
++func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
++}
++
++func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_CTX_new", _err)
++}
++
++func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
++}
++
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_derive", _err)
++}
++
++func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_fetch", _err)
++}
++
++func EVP_KDF_free(kdf EVP_KDF_PTR) {
++	C._mkcgo_EVP_KDF_free(kdf)
++}
++
++func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", _err)
++}
++
++func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
++	C._mkcgo_EVP_MAC_CTX_free(arg0)
++}
++
++func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_new", _err)
++}
++
++func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
++}
++
++func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_fetch", _err)
++}
++
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(outsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_final", _err)
++}
++
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_init", _err)
++}
++
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(data)), C.size_t(datalen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_update", _err)
++}
++
++func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_copy(out, in, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", _err)
++}
++
++func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
++}
++
++func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
++	C._mkcgo_EVP_MD_CTX_free(ctx)
++}
++
++func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", _err)
++}
++
++func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
++}
++
++func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_new", _err)
++}
++
++func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", _err)
++}
++
++func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", _err)
++}
++
++func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_fetch", _err)
++}
++
++func EVP_MD_free(md EVP_MD_PTR) {
++	C._mkcgo_EVP_MD_free(md)
++}
++
++func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_MD_get0_name(md)))
++}
++
++func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
++	return C._mkcgo_EVP_MD_get0_provider(md)
++}
++
++func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_block_size(md))
++}
++
++func EVP_MD_get_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_size(md))
++}
++
++func EVP_MD_get_type(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_type(md))
++}
++
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
++}
++
++func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
++}
++
++func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
++	C._mkcgo_EVP_PKEY_CTX_free(arg0)
++}
++
++func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", _err)
++}
++
++func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
++}
++
++func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
++}
++
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, label, C.int(len), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
++}
++
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
++}
++
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
++}
++
++func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
++}
++
++func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
++}
++
++func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
++}
++
++func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++}
++
++func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
++}
++
++func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", _err)
++}
++
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", _err)
++}
++
++func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
++}
++
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", _err)
++}
++
++func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", _err)
++}
++
++func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++}
++
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", _err)
++}
++
++func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
++}
++
++func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
++	C._mkcgo_EVP_PKEY_free(arg0)
++}
++
++func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", _err)
++}
++
++func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
++}
++
++func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", _err)
++}
++
++func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
++}
++
++func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", _err)
++}
++
++func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
++}
++
++func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", _err)
++}
++
++func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++}
++
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(priv)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
++}
++
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
++}
++
++func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", _err)
++}
++
++func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", _err)
++}
++
++func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", _err)
++}
++
++func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new", _err)
++}
++
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
++}
++
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
++}
++
++func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", _err)
++}
++
++func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
++}
++
++func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", _err)
++}
++
++func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
++}
++
++func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
++}
++
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), C.size_t(publen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
++}
++
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", _err)
++}
++
++func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", _err)
++}
++
++func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", _err)
++}
++
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", _err)
++}
++
++func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", _err)
++}
++
++func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", _err)
++}
++
++func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
++	C._mkcgo_EVP_SIGNATURE_free(signature)
++}
++
++func EVP_aes_128_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_cbc()
++}
++
++func EVP_aes_128_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ctr()
++}
++
++func EVP_aes_128_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ecb()
++}
++
++func EVP_aes_128_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_gcm()
++}
++
++func EVP_aes_192_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_cbc()
++}
++
++func EVP_aes_192_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ctr()
++}
++
++func EVP_aes_192_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ecb()
++}
++
++func EVP_aes_192_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_gcm()
++}
++
++func EVP_aes_256_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_cbc()
++}
++
++func EVP_aes_256_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ctr()
++}
++
++func EVP_aes_256_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ecb()
++}
++
++func EVP_aes_256_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_gcm()
++}
++
++func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", _err)
++}
++
++func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
++	return int32(C._mkcgo_EVP_default_properties_is_fips_enabled(libctx))
++}
++
++func EVP_des_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_cbc()
++}
++
++func EVP_des_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ecb()
++}
++
++func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_cbc()
++}
++
++func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_ecb()
++}
++
++func EVP_md4() EVP_MD_PTR {
++	return C._mkcgo_EVP_md4()
++}
++
++func EVP_md5() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5()
++}
++
++func EVP_md5_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5_sha1()
++}
++
++func EVP_rc4() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_rc4()
++}
++
++func EVP_ripemd160() EVP_MD_PTR {
++	return C._mkcgo_EVP_ripemd160()
++}
++
++func EVP_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha1()
++}
++
++func EVP_sha224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha224()
++}
++
++func EVP_sha256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha256()
++}
++
++func EVP_sha384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha384()
++}
++
++func EVP_sha3_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_224()
++}
++
++func EVP_sha3_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_256()
++}
++
++func EVP_sha3_384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_384()
++}
++
++func EVP_sha3_512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_512()
++}
++
++func EVP_sha512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512()
++}
++
++func EVP_sha512_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_224()
++}
++
++func EVP_sha512_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_256()
++}
++
++func FIPS_mode() int32 {
++	return int32(C._mkcgo_FIPS_mode())
++}
++
++func FIPS_mode_set(r int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("FIPS_mode_set", _err)
 +}
 +
-+func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2binpad", _err)
++	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", _err)
 +}
 +
-+func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
++	C._mkcgo_HMAC_CTX_free(arg0)
++}
++
++func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", _err)
++	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("HMAC_CTX_new", _err)
 +}
 +
-+func BN_clear(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_clear(arg0)
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Final", _err)
 +}
 +
-+func BN_clear_free(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_clear_free(arg0)
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Init_ex(arg0, arg1, C.int(arg2), arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Init_ex", _err)
 +}
 +
-+func BN_free(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_free(arg0)
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.size_t(arg2), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Update", _err)
 +}
 +
-+func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++func OBJ_nid2sn(n int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OBJ_nid2sn(C.int(n))))
++}
++
++func OPENSSL_init() {
++	C._mkcgo_OPENSSL_init()
++}
++
++func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(s)), C.int(len), ret, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_lebin2bn", _err)
++	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", _err)
 +}
 +
-+func BN_new() (BIGNUM_PTR, error) {
++func OPENSSL_version_major_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_major() != 0
++}
++
++func OPENSSL_version_major() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_major())
++}
++
++func OPENSSL_version_minor_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_minor() != 0
++}
++
++func OPENSSL_version_minor() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_minor())
++}
++
++func OPENSSL_version_patch_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_patch() != 0
++}
++
++func OPENSSL_version_patch() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_patch())
++}
++
++func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
++	C._mkcgo_OSSL_PARAM_BLD_free(bld)
++}
++
++func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_new", _err)
++	_ret := C._mkcgo_OSSL_PARAM_BLD_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", _err)
 +}
 +
-+func BN_num_bits(arg0 BIGNUM_PTR) int32 {
-+	return int32(C._mkcgo_BN_num_bits(arg0))
++func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
 +}
 +
-+func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
-+	C._mkcgo_CRYPTO_free(str, (*C.char)(unsafe.Pointer(file)), C.int(line))
++func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
 +}
 +
-+func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("CRYPTO_malloc", _err)
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), buf, C.size_t(bsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
 +}
 +
-+func DSA_free(r DSA_PTR) {
-+	C._mkcgo_DSA_free(r)
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(buf)), C.size_t(bsize), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
 +}
 +
-+func DSA_generate_key(a DSA_PTR) (int32, error) {
++func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
 +	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_generate_key", _err)
++	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
++}
++
++func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
++	C._mkcgo_OSSL_PARAM_free(p)
++}
++
++func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", _err)
++}
++
++func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
++	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
++}
++
++func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OSSL_PROVIDER_get0_name(prov)))
++}
++
++func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", _err)
++}
++
++func OpenSSL_version(__type int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OpenSSL_version(C.int(__type))))
++}
++
++func OpenSSL_version_num_Available() bool {
++	return C._mkcgo_available_OpenSSL_version_num() != 0
++}
++
++func OpenSSL_version_num() uint64 {
++	return uint64(C._mkcgo_OpenSSL_version_num())
++}
++
++func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(pass)), C.int(passlen), (*C.uchar)(unsafe.Pointer(salt)), C.int(saltlen), C.int(iter), digest, C.int(keylen), (*C.uchar)(unsafe.Pointer(out)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
++}
++
++func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RAND_bytes", _err)
++}
++
++func RSA_free(arg0 RSA_PTR) {
++	C._mkcgo_RSA_free(arg0)
++}
++
++func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_crt_params(r, dmp1, dmq1, iqmp)
++}
++
++func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_factors(rsa, p, q)
++}
++
++func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_key(rsa, n, e, d)
++}
++
++func RSA_new() (RSA_PTR, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("RSA_new", _err)
++}
++
++func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", _err)
++}
++
++func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_factors", _err)
++}
++
++func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
++	var _err C.mkcgo_err_state
++	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_key", _err)
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
+new file mode 100644
+index 00000000000000..ae64d2f7ee9990
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
+@@ -0,0 +1,37 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build go1.24 && !cmd_go_bootstrap
++
++package ossl
++
++/*
++#cgo noescape _mkcgo_EVP_CipherUpdate
++#cgo nocallback _mkcgo_EVP_CipherUpdate
++#cgo noescape _mkcgo_EVP_DecryptFinal_ex
++#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
++#cgo noescape _mkcgo_EVP_DecryptUpdate
++#cgo nocallback _mkcgo_EVP_DecryptUpdate
++#cgo noescape _mkcgo_EVP_Digest
++#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestFinal_ex
++#cgo nocallback _mkcgo_EVP_DigestFinal_ex
++#cgo noescape _mkcgo_EVP_DigestSign
++#cgo nocallback _mkcgo_EVP_DigestSign
++#cgo noescape _mkcgo_EVP_DigestUpdate
++#cgo nocallback _mkcgo_EVP_DigestUpdate
++#cgo noescape _mkcgo_EVP_EncryptFinal_ex
++#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
++#cgo noescape _mkcgo_EVP_EncryptUpdate
++#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_MD_CTX_copy
++#cgo nocallback _mkcgo_EVP_MD_CTX_copy
++#cgo noescape _mkcgo_EVP_PKEY_derive
++#cgo nocallback _mkcgo_EVP_PKEY_derive
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo noescape _mkcgo_RAND_bytes
++#cgo nocallback _mkcgo_RAND_bytes
++*/
++import "C"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
+new file mode 100644
+index 00000000000000..4f7e9296c1552d
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
+@@ -0,0 +1,2852 @@
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package ossl
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++type OPENSSL_INIT_SETTINGS_PTR unsafe.Pointer
++type OSSL_LIB_CTX_PTR unsafe.Pointer
++type OSSL_PROVIDER_PTR unsafe.Pointer
++type ENGINE_PTR unsafe.Pointer
++type EVP_PKEY_PTR unsafe.Pointer
++type EVP_PKEY_CTX_PTR unsafe.Pointer
++type EVP_MD_PTR unsafe.Pointer
++type EVP_MD_CTX_PTR unsafe.Pointer
++type HMAC_CTX_PTR unsafe.Pointer
++type EVP_CIPHER_PTR unsafe.Pointer
++type EVP_CIPHER_CTX_PTR unsafe.Pointer
++type EC_KEY_PTR unsafe.Pointer
++type EC_POINT_PTR unsafe.Pointer
++type EC_GROUP_PTR unsafe.Pointer
++type RSA_PTR unsafe.Pointer
++type BIGNUM_PTR unsafe.Pointer
++type BN_CTX_PTR unsafe.Pointer
++type EVP_MAC_PTR unsafe.Pointer
++type EVP_MAC_CTX_PTR unsafe.Pointer
++type OSSL_PARAM_BLD_PTR unsafe.Pointer
++type OSSL_PARAM_PTR unsafe.Pointer
++type EVP_SIGNATURE_PTR unsafe.Pointer
++type DSA_PTR unsafe.Pointer
++type EVP_KDF_PTR unsafe.Pointer
++type EVP_KDF_CTX_PTR unsafe.Pointer
++type Point_conversion_form_t = int32
++
++var _mkcgo_BN_bin2bn uintptr
++
++func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_BN_bin2bn, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(arg2))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg2)
++	if BIGNUM_PTR(r0) == nil {
++		return nil, newMkcgoErr("BN_bin2bn", nil)
++	}
++	return BIGNUM_PTR(r0), nil
 +}
 +
-+func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
-+	C._mkcgo_DSA_get0_key(d, pub_key, priv_key)
-+}
++var _mkcgo_BN_bn2binpad uintptr
 +
-+func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
-+	C._mkcgo_DSA_get0_pqg(d, p, q, g)
++func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_BN_bn2binpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen))
++	runtime.KeepAlive(a)
++	runtime.KeepAlive(to)
++	if int32(r0) == -1 {
++		return 0, newMkcgoErr("BN_bn2binpad", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func DSA_new() (DSA_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("DSA_new", _err)
-+}
++var _mkcgo_BN_bn2lebinpad uintptr
 +
-+func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_key", _err)
++func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen))
++	runtime.KeepAlive(a)
++	runtime.KeepAlive(to)
++	if int32(r0) == -1 {
++		return 0, newMkcgoErr("BN_bn2lebinpad", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_pqg", _err)
-+}
++var _mkcgo_BN_clear uintptr
 +
-+func EC_GROUP_free(group EC_GROUP_PTR) {
-+	C._mkcgo_EC_GROUP_free(group)
++func BN_clear(arg0 BIGNUM_PTR) {
++	syscallN(_mkcgo_BN_clear, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
-+}
++var _mkcgo_BN_clear_free uintptr
 +
-+func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_check_key", _err)
++func BN_clear_free(arg0 BIGNUM_PTR) {
++	syscallN(_mkcgo_BN_clear_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EC_KEY_free(arg0 EC_KEY_PTR) {
-+	C._mkcgo_EC_KEY_free(arg0)
-+}
++var _mkcgo_BN_free uintptr
 +
-+func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
-+	return C._mkcgo_EC_KEY_get0_group(arg0)
++func BN_free(arg0 BIGNUM_PTR) {
++	syscallN(_mkcgo_BN_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
-+	return C._mkcgo_EC_KEY_get0_private_key(arg0)
-+}
++var _mkcgo_BN_lebin2bn uintptr
 +
-+func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
-+	return C._mkcgo_EC_KEY_get0_public_key(arg0)
++func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_BN_lebin2bn, uintptr(unsafe.Pointer(s)), uintptr(len), uintptr(ret))
++	runtime.KeepAlive(s)
++	runtime.KeepAlive(ret)
++	if BIGNUM_PTR(r0) == nil {
++		return nil, newMkcgoErr("BN_lebin2bn", nil)
++	}
++	return BIGNUM_PTR(r0), nil
 +}
 +
-+func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", _err)
-+}
++var _mkcgo_BN_new uintptr
 +
-+func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", _err)
++func BN_new() (BIGNUM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_BN_new)
++	if BIGNUM_PTR(r0) == nil {
++		return nil, newMkcgoErr("BN_new", nil)
++	}
++	return BIGNUM_PTR(r0), nil
 +}
 +
-+func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", _err)
-+}
++var _mkcgo_BN_num_bits uintptr
 +
-+func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
++func BN_num_bits(arg0 BIGNUM_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_BN_num_bits, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	return int32(r0)
 +}
 +
-+func EC_POINT_free(arg0 EC_POINT_PTR) {
-+	C._mkcgo_EC_POINT_free(arg0)
-+}
++var _mkcgo_CRYPTO_free uintptr
 +
-+func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
++func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
++	syscallN(_mkcgo_CRYPTO_free, uintptr(str), uintptr(unsafe.Pointer(file)), uintptr(line))
++	runtime.KeepAlive(file)
 +}
 +
-+func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_mul", _err)
-+}
++var _mkcgo_CRYPTO_malloc uintptr
 +
-+func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_POINT_new", _err)
++func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++	r0, _, _ := syscallN(_mkcgo_CRYPTO_malloc, uintptr(num), uintptr(unsafe.Pointer(file)), uintptr(line))
++	runtime.KeepAlive(file)
++	if unsafe.Pointer(r0) == nil {
++		return nil, newMkcgoErr("CRYPTO_malloc", nil)
++	}
++	return unsafe.Pointer(r0), nil
 +}
 +
-+func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", _err)
-+}
++var _mkcgo_DSA_free uintptr
 +
-+func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EC_POINT_point2oct", _err)
++func DSA_free(r DSA_PTR) {
++	syscallN(_mkcgo_DSA_free, uintptr(r))
++	runtime.KeepAlive(r)
 +}
 +
-+func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
-+}
++var _mkcgo_DSA_generate_key uintptr
 +
-+func ERR_clear_error() {
-+	C._mkcgo_ERR_clear_error()
++func DSA_generate_key(a DSA_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_DSA_generate_key, uintptr(a))
++	runtime.KeepAlive(a)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("DSA_generate_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func ERR_error_string_n(e uint32, buf *byte, len int) {
-+	C._mkcgo_ERR_error_string_n(C.ulong(e), (*C.char)(unsafe.Pointer(buf)), C.size_t(len))
-+}
++var _mkcgo_DSA_get0_key uintptr
 +
-+func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint32 {
-+	return uint32(C._mkcgo_ERR_get_error_all((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line)), (**C.char)(unsafe.Pointer(__func)), (**C.char)(unsafe.Pointer(data)), (*C.int)(unsafe.Pointer(flags))))
++func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
++	syscallN(_mkcgo_DSA_get0_key, uintptr(d), uintptr(unsafe.Pointer(pub_key)), uintptr(unsafe.Pointer(priv_key)))
++	runtime.KeepAlive(d)
++	runtime.KeepAlive(pub_key)
++	runtime.KeepAlive(priv_key)
 +}
 +
-+func ERR_get_error_line(file **byte, line *int32) uint32 {
-+	return uint32(C._mkcgo_ERR_get_error_line((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line))))
-+}
++var _mkcgo_DSA_get0_pqg uintptr
 +
-+func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
++func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
++	syscallN(_mkcgo_DSA_get0_pqg, uintptr(d), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)), uintptr(unsafe.Pointer(g)))
++	runtime.KeepAlive(d)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(q)
++	runtime.KeepAlive(g)
 +}
 +
-+func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
-+	C._mkcgo_EVP_CIPHER_CTX_free(arg0)
-+}
++var _mkcgo_DSA_new uintptr
 +
-+func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", _err)
++func DSA_new() (DSA_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_DSA_new)
++	if DSA_PTR(r0) == nil {
++		return nil, newMkcgoErr("DSA_new", nil)
++	}
++	return DSA_PTR(r0), nil
 +}
 +
-+func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
-+}
++var _mkcgo_DSA_set0_key uintptr
 +
-+func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
++func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key))
++	runtime.KeepAlive(d)
++	runtime.KeepAlive(pub_key)
++	runtime.KeepAlive(priv_key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("DSA_set0_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_fetch", _err)
-+}
++var _mkcgo_DSA_set0_pqg uintptr
 +
-+func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_CIPHER_get0_name(cipher)))
++func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g))
++	runtime.KeepAlive(d)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(q)
++	runtime.KeepAlive(g)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("DSA_set0_pqg", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
-+	return int32(C._mkcgo_EVP_CIPHER_get_block_size(cipher))
-+}
++var _mkcgo_EC_GROUP_free uintptr
 +
-+func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", _err)
++func EC_GROUP_free(group EC_GROUP_PTR) {
++	syscallN(_mkcgo_EC_GROUP_free, uintptr(group))
++	runtime.KeepAlive(group)
 +}
 +
-+func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", _err)
-+}
++var _mkcgo_EC_GROUP_new_by_curve_name uintptr
 +
-+func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(outm)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", _err)
++func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid))
++	if EC_GROUP_PTR(r0) == nil {
++		return nil, newMkcgoErr("EC_GROUP_new_by_curve_name", nil)
++	}
++	return EC_GROUP_PTR(r0), nil
 +}
 +
-+func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", _err)
-+}
++var _mkcgo_EC_KEY_check_key uintptr
 +
-+func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", _err)
++func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_check_key, uintptr(key))
++	runtime.KeepAlive(key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_KEY_check_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_Digest(unsafe.Pointer(&*(*byte)(data)), C.size_t(count), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_Digest", _err)
-+}
++var _mkcgo_EC_KEY_free uintptr
 +
-+func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", _err)
++func EC_KEY_free(arg0 EC_KEY_PTR) {
++	syscallN(_mkcgo_EC_KEY_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit", _err)
++var _mkcgo_EC_KEY_get0_group uintptr
++
++func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_group, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	return EC_GROUP_PTR(r0)
 +}
 +
-+func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", _err)
++var _mkcgo_EC_KEY_get0_private_key uintptr
++
++func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_private_key, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	return BIGNUM_PTR(r0)
 +}
 +
-+func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(sigret)), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSign", _err)
++var _mkcgo_EC_KEY_get0_public_key uintptr
++
++func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_public_key, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	return EC_POINT_PTR(r0)
 +}
 +
-+func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", _err)
++var _mkcgo_EC_KEY_new_by_curve_name uintptr
++
++func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0))
++	if EC_KEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EC_KEY_new_by_curve_name", nil)
++	}
++	return EC_KEY_PTR(r0), nil
 +}
 +
-+func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", _err)
++var _mkcgo_EC_KEY_set_private_key uintptr
++
++func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_KEY_set_private_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestUpdate(ctx, unsafe.Pointer(&*(*byte)(d)), C.size_t(cnt), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", _err)
++var _mkcgo_EC_KEY_set_public_key uintptr
++
++func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub))
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(pub)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_KEY_set_public_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(sigret)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerify", _err)
++var _mkcgo_EC_KEY_set_public_key_affine_coordinates uintptr
++
++func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y))
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(x)
++	runtime.KeepAlive(y)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", _err)
++var _mkcgo_EC_POINT_free uintptr
++
++func EC_POINT_free(arg0 EC_POINT_PTR) {
++	syscallN(_mkcgo_EC_POINT_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", _err)
++var _mkcgo_EC_POINT_get_affine_coordinates_GFp uintptr
++
++func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	runtime.KeepAlive(arg3)
++	runtime.KeepAlive(arg4)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", _err)
++var _mkcgo_EC_POINT_mul uintptr
++
++func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx))
++	runtime.KeepAlive(group)
++	runtime.KeepAlive(r)
++	runtime.KeepAlive(n)
++	runtime.KeepAlive(q)
++	runtime.KeepAlive(m)
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_POINT_mul", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", _err)
++var _mkcgo_EC_POINT_new uintptr
++
++func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_new, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if EC_POINT_PTR(r0) == nil {
++		return nil, newMkcgoErr("EC_POINT_new", nil)
++	}
++	return EC_POINT_PTR(r0), nil
 +}
 +
-+func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", _err)
++var _mkcgo_EC_POINT_oct2point uintptr
++
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx))
++	runtime.KeepAlive(group)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(buf)
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_POINT_oct2point", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
-+	C._mkcgo_EVP_KDF_CTX_free(ctx)
++var _mkcgo_EC_POINT_point2oct uintptr
++
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx))
++	runtime.KeepAlive(group)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(buf)
++	runtime.KeepAlive(ctx)
++	if int(r0) <= 0 {
++		return 0, newMkcgoErr("EC_POINT_point2oct", nil)
++	}
++	return int(r0), nil
 +}
 +
-+func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
++var _mkcgo_EC_POINT_set_affine_coordinates uintptr
++
++func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	runtime.KeepAlive(arg3)
++	runtime.KeepAlive(arg4)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EC_POINT_set_affine_coordinates", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_CTX_new", _err)
++var _mkcgo_ERR_clear_error uintptr
++
++func ERR_clear_error() {
++	syscallN(_mkcgo_ERR_clear_error)
 +}
 +
-+func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
++var _mkcgo_ERR_error_string_n uintptr
++
++func ERR_error_string_n(e uint64, buf *byte, len int) {
++	syscallN(_mkcgo_ERR_error_string_n, uintptr(e), uintptr(unsafe.Pointer(buf)), uintptr(len))
++	runtime.KeepAlive(buf)
 +}
 +
-+func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_derive", _err)
++var _mkcgo_ERR_get_error_all uintptr
++
++func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
++	r0, _, _ := syscallN(_mkcgo_ERR_get_error_all, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)), uintptr(unsafe.Pointer(__func)), uintptr(unsafe.Pointer(data)), uintptr(unsafe.Pointer(flags)))
++	runtime.KeepAlive(file)
++	runtime.KeepAlive(line)
++	runtime.KeepAlive(__func)
++	runtime.KeepAlive(data)
++	runtime.KeepAlive(flags)
++	return uint64(r0)
 +}
 +
-+func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_fetch", _err)
++var _mkcgo_ERR_get_error_line uintptr
++
++func ERR_get_error_line(file **byte, line *int32) uint64 {
++	r0, _, _ := syscallN(_mkcgo_ERR_get_error_line, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)))
++	runtime.KeepAlive(file)
++	runtime.KeepAlive(line)
++	return uint64(r0)
 +}
 +
-+func EVP_KDF_free(kdf EVP_KDF_PTR) {
-+	C._mkcgo_EVP_KDF_free(kdf)
++var _mkcgo_EVP_CIPHER_CTX_ctrl uintptr
++
++func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_CIPHER_CTX_ctrl", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", _err)
++var _mkcgo_EVP_CIPHER_CTX_free uintptr
++
++func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
++	syscallN(_mkcgo_EVP_CIPHER_CTX_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
-+	C._mkcgo_EVP_MAC_CTX_free(arg0)
++var _mkcgo_EVP_CIPHER_CTX_new uintptr
++
++func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_new)
++	if EVP_CIPHER_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_CIPHER_CTX_new", nil)
++	}
++	return EVP_CIPHER_CTX_PTR(r0), nil
 +}
 +
-+func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_new", _err)
++var _mkcgo_EVP_CIPHER_CTX_set_key_length uintptr
++
++func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen))
++	runtime.KeepAlive(x)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_CIPHER_CTX_set_key_length", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
++var _mkcgo_EVP_CIPHER_CTX_set_padding uintptr
++
++func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding))
++	runtime.KeepAlive(x)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_CIPHER_CTX_set_padding", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_fetch", _err)
++var _mkcgo_EVP_CIPHER_fetch uintptr
++
++func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(algorithm)
++	runtime.KeepAlive(properties)
++	if EVP_CIPHER_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_CIPHER_fetch", nil)
++	}
++	return EVP_CIPHER_PTR(r0), nil
 +}
 +
-+func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(outsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_final", _err)
++var _mkcgo_EVP_CIPHER_get0_name uintptr
++
++func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_get0_name, uintptr(cipher))
++	runtime.KeepAlive(cipher)
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_init", _err)
++var _mkcgo_EVP_CIPHER_get_block_size uintptr
++
++func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_get_block_size, uintptr(cipher))
++	runtime.KeepAlive(cipher)
++	return int32(r0)
 +}
 +
-+func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(data)), C.size_t(datalen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_update", _err)
++var _mkcgo_EVP_CipherInit_ex uintptr
++
++func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(enc))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(impl)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(iv)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_CipherInit_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_copy(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", _err)
++var _mkcgo_EVP_CipherUpdate uintptr
++
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(outl)
++	runtime.KeepAlive(in)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_CipherUpdate", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
++var _mkcgo_EVP_DecryptFinal_ex uintptr
++
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(outm)), uintptr(unsafe.Pointer(outl)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(outm)
++	runtime.KeepAlive(outl)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DecryptFinal_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
-+	C._mkcgo_EVP_MD_CTX_free(ctx)
++var _mkcgo_EVP_DecryptInit_ex uintptr
++
++func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(impl)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(iv)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DecryptInit_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", _err)
++var _mkcgo_EVP_DecryptUpdate uintptr
++
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(outl)
++	runtime.KeepAlive(in)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DecryptUpdate", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
++var _mkcgo_EVP_Digest uintptr
++
++func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_Digest, uintptr(data), uintptr(count), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl))
++	runtime.KeepAlive(md)
++	runtime.KeepAlive(size)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(impl)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_Digest", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_new", _err)
++var _mkcgo_EVP_DigestFinal_ex uintptr
++
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(s)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(md)
++	runtime.KeepAlive(s)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestFinal_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", _err)
++var _mkcgo_EVP_DigestInit uintptr
++
++func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(__type)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestInit", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", _err)
++var _mkcgo_EVP_DigestInit_ex uintptr
++
++func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(impl)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestInit_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_fetch", _err)
++var _mkcgo_EVP_DigestSign uintptr
++
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(sigret)
++	runtime.KeepAlive(siglen)
++	runtime.KeepAlive(tbs)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestSign", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_free(md EVP_MD_PTR) {
-+	C._mkcgo_EVP_MD_free(md)
++var _mkcgo_EVP_DigestSignFinal uintptr
++
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(unsafe.Pointer(siglen)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(sig)
++	runtime.KeepAlive(siglen)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestSignFinal", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_MD_get0_name(md)))
++var _mkcgo_EVP_DigestSignInit uintptr
++
++func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(pctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(pkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestSignInit", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
-+	return C._mkcgo_EVP_MD_get0_provider(md)
++var _mkcgo_EVP_DigestUpdate uintptr
++
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(d), uintptr(cnt))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestUpdate", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_block_size(md))
++var _mkcgo_EVP_DigestVerify uintptr
++
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(sigret)
++	runtime.KeepAlive(tbs)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestVerify", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_get_size(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_size(md))
++var _mkcgo_EVP_DigestVerifyFinal uintptr
++
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(sig)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestVerifyFinal", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_MD_get_type(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_type(md))
++var _mkcgo_EVP_DigestVerifyInit uintptr
++
++func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(pctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(pkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_DigestVerifyInit", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
++var _mkcgo_EVP_EncryptFinal_ex uintptr
++
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(outl)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_EncryptFinal_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
++var _mkcgo_EVP_EncryptInit_ex uintptr
++
++func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(impl)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(iv)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_EncryptInit_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
-+	C._mkcgo_EVP_PKEY_CTX_free(arg0)
++var _mkcgo_EVP_EncryptUpdate uintptr
++
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(outl)
++	runtime.KeepAlive(in)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_EncryptUpdate", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", _err)
++var _mkcgo_EVP_KDF_CTX_free uintptr
++
++func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
++	syscallN(_mkcgo_EVP_KDF_CTX_free, uintptr(ctx))
++	runtime.KeepAlive(ctx)
 +}
 +
-+func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
++var _mkcgo_EVP_KDF_CTX_get_kdf_size uintptr
++
++func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_KDF_CTX_get_kdf_size", nil)
++	}
++	return int(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
++var _mkcgo_EVP_KDF_CTX_new uintptr
++
++func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_new, uintptr(kdf))
++	runtime.KeepAlive(kdf)
++	if EVP_KDF_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_KDF_CTX_new", nil)
++	}
++	return EVP_KDF_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, label, C.int(len), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
++var _mkcgo_EVP_KDF_CTX_set_params uintptr
++
++func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_KDF_CTX_set_params", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
++var _mkcgo_EVP_KDF_derive uintptr
++
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_KDF_derive", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
++var _mkcgo_EVP_KDF_fetch uintptr
++
++func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
++	runtime.KeepAlive(libctx)
++	runtime.KeepAlive(algorithm)
++	runtime.KeepAlive(properties)
++	if EVP_KDF_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_KDF_fetch", nil)
++	}
++	return EVP_KDF_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
++var _mkcgo_EVP_KDF_free uintptr
++
++func EVP_KDF_free(kdf EVP_KDF_PTR) {
++	syscallN(_mkcgo_EVP_KDF_free, uintptr(kdf))
++	runtime.KeepAlive(kdf)
 +}
 +
-+func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
++var _mkcgo_EVP_MAC_CTX_dup uintptr
++
++func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_dup, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if EVP_MAC_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MAC_CTX_dup", nil)
++	}
++	return EVP_MAC_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
++var _mkcgo_EVP_MAC_CTX_free uintptr
++
++func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
++	syscallN(_mkcgo_EVP_MAC_CTX_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++var _mkcgo_EVP_MAC_CTX_new uintptr
++
++func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_new, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if EVP_MAC_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MAC_CTX_new", nil)
++	}
++	return EVP_MAC_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
++var _mkcgo_EVP_MAC_CTX_set_params uintptr
++
++func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MAC_CTX_set_params", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", _err)
++var _mkcgo_EVP_MAC_fetch uintptr
++
++func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(algorithm)
++	runtime.KeepAlive(properties)
++	if EVP_MAC_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MAC_fetch", nil)
++	}
++	return EVP_MAC_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", _err)
++var _mkcgo_EVP_MAC_final uintptr
++
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(outsize))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(outl)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MAC_final", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
++var _mkcgo_EVP_MAC_init uintptr
++
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MAC_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", _err)
++var _mkcgo_EVP_MAC_update uintptr
++
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(data)), uintptr(datalen))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(data)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MAC_update", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", _err)
++var _mkcgo_EVP_MD_CTX_copy uintptr
++
++func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_copy, uintptr(out), uintptr(in))
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(in)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MD_CTX_copy", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++var _mkcgo_EVP_MD_CTX_copy_ex uintptr
++
++func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in))
++	runtime.KeepAlive(out)
++	runtime.KeepAlive(in)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MD_CTX_copy_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", _err)
++var _mkcgo_EVP_MD_CTX_free uintptr
++
++func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
++	syscallN(_mkcgo_EVP_MD_CTX_free, uintptr(ctx))
++	runtime.KeepAlive(ctx)
 +}
 +
-+func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
++var _mkcgo_EVP_MD_CTX_get_params uintptr
++
++func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MD_CTX_get_params", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
-+	C._mkcgo_EVP_PKEY_free(arg0)
++var _mkcgo_EVP_MD_CTX_gettable_params uintptr
++
++func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if OSSL_PARAM_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MD_CTX_gettable_params", nil)
++	}
++	return OSSL_PARAM_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", _err)
++var _mkcgo_EVP_MD_CTX_new uintptr
++
++func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_new)
++	if EVP_MD_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MD_CTX_new", nil)
++	}
++	return EVP_MD_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
++var _mkcgo_EVP_MD_CTX_set_params uintptr
++
++func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_MD_CTX_set_params", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", _err)
++var _mkcgo_EVP_MD_CTX_settable_params uintptr
++
++func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if OSSL_PARAM_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MD_CTX_settable_params", nil)
++	}
++	return OSSL_PARAM_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
++var _mkcgo_EVP_MD_fetch uintptr
++
++func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(algorithm)
++	runtime.KeepAlive(properties)
++	if EVP_MD_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_MD_fetch", nil)
++	}
++	return EVP_MD_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", _err)
++var _mkcgo_EVP_MD_free uintptr
++
++func EVP_MD_free(md EVP_MD_PTR) {
++	syscallN(_mkcgo_EVP_MD_free, uintptr(md))
++	runtime.KeepAlive(md)
 +}
 +
-+func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
++var _mkcgo_EVP_MD_get0_name uintptr
++
++func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_get0_name, uintptr(md))
++	runtime.KeepAlive(md)
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", _err)
++var _mkcgo_EVP_MD_get0_provider uintptr
++
++func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_get0_provider, uintptr(md))
++	runtime.KeepAlive(md)
++	return OSSL_PROVIDER_PTR(r0)
 +}
 +
-+func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++var _mkcgo_EVP_MD_get_block_size uintptr
++
++func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_block_size, uintptr(md))
++	runtime.KeepAlive(md)
++	return int32(r0)
 +}
 +
-+func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(priv)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
++var _mkcgo_EVP_MD_get_size uintptr
++
++func EVP_MD_get_size(md EVP_MD_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_size, uintptr(md))
++	runtime.KeepAlive(md)
++	return int32(r0)
 +}
 +
-+func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
++var _mkcgo_EVP_MD_get_type uintptr
++
++func EVP_MD_get_type(md EVP_MD_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_type, uintptr(md))
++	runtime.KeepAlive(md)
++	return int32(r0)
 +}
 +
-+func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", _err)
++var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
++
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", _err)
++var _mkcgo_EVP_PKEY_CTX_ctrl uintptr
++
++func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_ctrl", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", _err)
++var _mkcgo_EVP_PKEY_CTX_free uintptr
++
++func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
++	syscallN(_mkcgo_EVP_PKEY_CTX_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new", _err)
++var _mkcgo_EVP_PKEY_CTX_new uintptr
++
++func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if EVP_PKEY_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_CTX_new", nil)
++	}
++	return EVP_PKEY_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
++var _mkcgo_EVP_PKEY_CTX_new_from_pkey uintptr
++
++func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(unsafe.Pointer(propquery)))
++	runtime.KeepAlive(libctx)
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(propquery)
++	if EVP_PKEY_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", nil)
++	}
++	return EVP_PKEY_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
++var _mkcgo_EVP_PKEY_CTX_new_id uintptr
++
++func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e))
++	runtime.KeepAlive(e)
++	if EVP_PKEY_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_CTX_new_id", nil)
++	}
++	return EVP_PKEY_CTX_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", _err)
++var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
++
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(label), uintptr(len))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
++var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
++
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", _err)
++var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
++
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
++var _mkcgo_EVP_PKEY_CTX_set_hkdf_md uintptr
++
++func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
++var _mkcgo_EVP_PKEY_CTX_set_hkdf_mode uintptr
++
++func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), C.size_t(publen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
++var _mkcgo_EVP_PKEY_Q_keygen uintptr
++
++func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)))
++	} else {
++		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)))
++	}
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(propq)
++	runtime.KeepAlive(__type)
++	runtime.KeepAlive(arg1)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_EC", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", _err)
++func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(propq)
++	runtime.KeepAlive(__type)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", _err)
++func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1))
++	} else {
++		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1))
++	}
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(propq)
++	runtime.KeepAlive(__type)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", _err)
-+}
++var _mkcgo_EVP_PKEY_assign uintptr
 +
-+func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", _err)
++func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key))
++	runtime.KeepAlive(pkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_assign", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", _err)
++var _mkcgo_EVP_PKEY_decrypt uintptr
++
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	runtime.KeepAlive(arg3)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_decrypt", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", _err)
++var _mkcgo_EVP_PKEY_decrypt_init uintptr
++
++func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_decrypt_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
-+	C._mkcgo_EVP_SIGNATURE_free(signature)
++var _mkcgo_EVP_PKEY_derive uintptr
++
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(keylen)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(keylen)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_derive", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_128_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_cbc()
++var _mkcgo_EVP_PKEY_derive_init uintptr
++
++func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive_init, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_derive_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_128_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_ctr()
++var _mkcgo_EVP_PKEY_derive_set_peer uintptr
++
++func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(peer)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_derive_set_peer", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_128_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_ecb()
++var _mkcgo_EVP_PKEY_encrypt uintptr
++
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	runtime.KeepAlive(arg3)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_encrypt", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_128_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_gcm()
++var _mkcgo_EVP_PKEY_encrypt_init uintptr
++
++func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_encrypt_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_192_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_cbc()
++var _mkcgo_EVP_PKEY_free uintptr
++
++func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
++	syscallN(_mkcgo_EVP_PKEY_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func EVP_aes_192_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_ctr()
++var _mkcgo_EVP_PKEY_fromdata uintptr
++
++func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(unsafe.Pointer(pkey)), uintptr(selection), uintptr(params))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(params)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_fromdata", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_192_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_ecb()
++var _mkcgo_EVP_PKEY_fromdata_init uintptr
++
++func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_fromdata_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_aes_192_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_gcm()
++var _mkcgo_EVP_PKEY_get0_DSA uintptr
++
++func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey))
++	runtime.KeepAlive(pkey)
++	if DSA_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_get0_DSA", nil)
++	}
++	return DSA_PTR(r0), nil
 +}
 +
-+func EVP_aes_256_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_cbc()
++var _mkcgo_EVP_PKEY_get0_EC_KEY uintptr
++
++func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey))
++	runtime.KeepAlive(pkey)
++	if EC_KEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_get0_EC_KEY", nil)
++	}
++	return EC_KEY_PTR(r0), nil
 +}
 +
-+func EVP_aes_256_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_ctr()
++var _mkcgo_EVP_PKEY_get1_RSA uintptr
++
++func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey))
++	runtime.KeepAlive(pkey)
++	if RSA_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_get1_RSA", nil)
++	}
++	return RSA_PTR(r0), nil
 +}
 +
-+func EVP_aes_256_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_ecb()
++var _mkcgo_EVP_PKEY_get1_encoded_public_key uintptr
++
++func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(ppub)))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(ppub)
++	if int(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get1_encoded_public_key", nil)
++	}
++	return int(r0), nil
 +}
 +
-+func EVP_aes_256_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_gcm()
++var _mkcgo_EVP_PKEY_get_bits uintptr
++
++func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_bits, uintptr(pkey))
++	runtime.KeepAlive(pkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get_bits", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", _err)
++var _mkcgo_EVP_PKEY_get_bn_param uintptr
++
++func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(key_name)
++	runtime.KeepAlive(bn)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get_bn_param", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
-+	return int32(C._mkcgo_EVP_default_properties_is_fips_enabled(libctx))
++var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
++
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(priv)), uintptr(unsafe.Pointer(len)))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(priv)
++	runtime.KeepAlive(len)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get_raw_private_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_des_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_cbc()
++var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
++
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(unsafe.Pointer(len)))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(pub)
++	runtime.KeepAlive(len)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get_raw_public_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_des_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ecb()
++var _mkcgo_EVP_PKEY_get_size uintptr
++
++func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_size, uintptr(pkey))
++	runtime.KeepAlive(pkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_get_size", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ede3_cbc()
++var _mkcgo_EVP_PKEY_keygen uintptr
++
++func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(ppkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_keygen", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ede3_ecb()
++var _mkcgo_EVP_PKEY_keygen_init uintptr
++
++func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_keygen_init, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_keygen_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_md4() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md4()
++var _mkcgo_EVP_PKEY_new uintptr
++
++func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_new", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_md5() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md5()
++var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
++
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen))
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(key)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_new_raw_private_key", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_md5_sha1() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md5_sha1()
++var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
++
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen))
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(key)
++	if EVP_PKEY_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_PKEY_new_raw_public_key", nil)
++	}
++	return EVP_PKEY_PTR(r0), nil
 +}
 +
-+func EVP_rc4() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_rc4()
++var _mkcgo_EVP_PKEY_paramgen uintptr
++
++func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(ppkey)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_paramgen", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_ripemd160() EVP_MD_PTR {
-+	return C._mkcgo_EVP_ripemd160()
++var _mkcgo_EVP_PKEY_paramgen_init uintptr
++
++func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_paramgen_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha1() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha1()
++var _mkcgo_EVP_PKEY_private_check uintptr
++
++func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_private_check, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_private_check", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha224()
++var _mkcgo_EVP_PKEY_public_check_quick uintptr
++
++func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx))
++	runtime.KeepAlive(ctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_public_check_quick", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha256()
++var _mkcgo_EVP_PKEY_set1_EC_KEY uintptr
++
++func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_set1_EC_KEY", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha384() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha384()
++var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
++
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(publen))
++	runtime.KeepAlive(pkey)
++	runtime.KeepAlive(pub)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_set1_encoded_public_key", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha3_224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_224()
++var _mkcgo_EVP_PKEY_sign uintptr
++
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	runtime.KeepAlive(arg3)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_sign", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha3_256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_256()
++var _mkcgo_EVP_PKEY_sign_init uintptr
++
++func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_sign_init, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_sign_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha3_384() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_384()
++var _mkcgo_EVP_PKEY_up_ref uintptr
++
++func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_up_ref, uintptr(key))
++	runtime.KeepAlive(key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_up_ref", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha3_512() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_512()
++var _mkcgo_EVP_PKEY_verify uintptr
++
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(sig)
++	runtime.KeepAlive(tbs)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_verify", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha512() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512()
++var _mkcgo_EVP_PKEY_verify_init uintptr
++
++func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_verify_init, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_PKEY_verify_init", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func EVP_sha512_224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512_224()
++var _mkcgo_EVP_SIGNATURE_fetch uintptr
++
++func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
++	runtime.KeepAlive(ctx)
++	runtime.KeepAlive(algorithm)
++	runtime.KeepAlive(properties)
++	if EVP_SIGNATURE_PTR(r0) == nil {
++		return nil, newMkcgoErr("EVP_SIGNATURE_fetch", nil)
++	}
++	return EVP_SIGNATURE_PTR(r0), nil
 +}
 +
-+func EVP_sha512_256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512_256()
++var _mkcgo_EVP_SIGNATURE_free uintptr
++
++func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
++	syscallN(_mkcgo_EVP_SIGNATURE_free, uintptr(signature))
++	runtime.KeepAlive(signature)
 +}
 +
-+func FIPS_mode() int32 {
-+	return int32(C._mkcgo_FIPS_mode())
++var _mkcgo_EVP_aes_128_cbc uintptr
++
++func EVP_aes_128_cbc() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func FIPS_mode_set(r int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("FIPS_mode_set", _err)
++var _mkcgo_EVP_aes_128_ctr uintptr
++
++func EVP_aes_128_ctr() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", _err)
++var _mkcgo_EVP_aes_128_ecb uintptr
++
++func EVP_aes_128_ecb() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
-+	C._mkcgo_HMAC_CTX_free(arg0)
++var _mkcgo_EVP_aes_128_gcm uintptr
++
++func EVP_aes_128_gcm() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("HMAC_CTX_new", _err)
++var _mkcgo_EVP_aes_192_cbc uintptr
++
++func EVP_aes_192_cbc() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Final", _err)
++var _mkcgo_EVP_aes_192_ctr uintptr
++
++func EVP_aes_192_ctr() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_HMAC_Init_ex(arg0, arg1, C.int(arg2), arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Init_ex", _err)
++var _mkcgo_EVP_aes_192_ecb uintptr
++
++func EVP_aes_192_ecb() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.size_t(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Update", _err)
++var _mkcgo_EVP_aes_192_gcm uintptr
++
++func EVP_aes_192_gcm() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OBJ_nid2sn(n int32) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OBJ_nid2sn(C.int(n))))
++var _mkcgo_EVP_aes_256_cbc uintptr
++
++func EVP_aes_256_cbc() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_init() {
-+	C._mkcgo_OPENSSL_init()
++var _mkcgo_EVP_aes_256_ctr uintptr
++
++func EVP_aes_256_ctr() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", _err)
++var _mkcgo_EVP_aes_256_ecb uintptr
++
++func EVP_aes_256_ecb() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_version_major_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_major() != 0
++var _mkcgo_EVP_aes_256_gcm uintptr
++
++func EVP_aes_256_gcm() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_version_major() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_major())
++var _mkcgo_EVP_default_properties_enable_fips uintptr
++
++func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable))
++	runtime.KeepAlive(libctx)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("EVP_default_properties_enable_fips", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func OPENSSL_version_minor_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_minor() != 0
++var _mkcgo_EVP_default_properties_is_fips_enabled uintptr
++
++func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
++	r0, _, _ := syscallN(_mkcgo_EVP_default_properties_is_fips_enabled, uintptr(libctx))
++	runtime.KeepAlive(libctx)
++	return int32(r0)
 +}
 +
-+func OPENSSL_version_minor() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_minor())
++var _mkcgo_EVP_des_cbc uintptr
++
++func EVP_des_cbc() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_des_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_version_patch_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_patch() != 0
++var _mkcgo_EVP_des_ecb uintptr
++
++func EVP_des_ecb() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_des_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OPENSSL_version_patch() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_patch())
++var _mkcgo_EVP_des_ede3_cbc uintptr
++
++func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_des_ede3_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
-+	C._mkcgo_OSSL_PARAM_BLD_free(bld)
++var _mkcgo_EVP_des_ede3_ecb uintptr
++
++func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_des_ede3_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", _err)
++var _mkcgo_EVP_md4 uintptr
++
++func EVP_md4() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_md4)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
++var _mkcgo_EVP_md5 uintptr
++
++func EVP_md5() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_md5)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
++var _mkcgo_EVP_md5_sha1 uintptr
++
++func EVP_md5_sha1() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_md5_sha1)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), buf, C.size_t(bsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
++var _mkcgo_EVP_rc4 uintptr
++
++func EVP_rc4() EVP_CIPHER_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_rc4)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(buf)), C.size_t(bsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
++var _mkcgo_EVP_ripemd160 uintptr
++
++func EVP_ripemd160() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_ripemd160)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
++var _mkcgo_EVP_sha1 uintptr
++
++func EVP_sha1() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha1)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
-+	C._mkcgo_OSSL_PARAM_free(p)
++var _mkcgo_EVP_sha224 uintptr
++
++func EVP_sha224() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha224)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", _err)
++var _mkcgo_EVP_sha256 uintptr
++
++func EVP_sha256() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha256)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
-+	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
++var _mkcgo_EVP_sha384 uintptr
++
++func EVP_sha384() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha384)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OSSL_PROVIDER_get0_name(prov)))
++var _mkcgo_EVP_sha3_224 uintptr
++
++func EVP_sha3_224() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha3_224)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", _err)
++var _mkcgo_EVP_sha3_256 uintptr
++
++func EVP_sha3_256() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha3_256)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OpenSSL_version(__type int32) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OpenSSL_version(C.int(__type))))
++var _mkcgo_EVP_sha3_384 uintptr
++
++func EVP_sha3_384() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha3_384)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OpenSSL_version_num_Available() bool {
-+	return C._mkcgo_available_OpenSSL_version_num() != 0
++var _mkcgo_EVP_sha3_512 uintptr
++
++func EVP_sha3_512() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha3_512)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func OpenSSL_version_num() uint32 {
-+	return uint32(C._mkcgo_OpenSSL_version_num())
++var _mkcgo_EVP_sha512 uintptr
++
++func EVP_sha512() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha512)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(pass)), C.int(passlen), (*C.uchar)(unsafe.Pointer(salt)), C.int(saltlen), C.int(iter), digest, C.int(keylen), (*C.uchar)(unsafe.Pointer(out)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
++var _mkcgo_EVP_sha512_224 uintptr
++
++func EVP_sha512_224() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha512_224)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RAND_bytes", _err)
++var _mkcgo_EVP_sha512_256 uintptr
++
++func EVP_sha512_256() EVP_MD_PTR {
++	r0, _, _ := syscallN(_mkcgo_EVP_sha512_256)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func RSA_free(arg0 RSA_PTR) {
-+	C._mkcgo_RSA_free(arg0)
++var _mkcgo_FIPS_mode uintptr
++
++func FIPS_mode() int32 {
++	r0, _, _ := syscallN(_mkcgo_FIPS_mode)
++	return int32(r0)
 +}
 +
-+func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_crt_params(r, dmp1, dmq1, iqmp)
++var _mkcgo_FIPS_mode_set uintptr
++
++func FIPS_mode_set(r int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_FIPS_mode_set, uintptr(r))
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("FIPS_mode_set", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_factors(rsa, p, q)
++var _mkcgo_HMAC_CTX_copy uintptr
++
++func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src))
++	runtime.KeepAlive(dest)
++	runtime.KeepAlive(src)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("HMAC_CTX_copy", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_key(rsa, n, e, d)
++var _mkcgo_HMAC_CTX_free uintptr
++
++func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
++	syscallN(_mkcgo_HMAC_CTX_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
 +}
 +
-+func RSA_new() (RSA_PTR, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("RSA_new", _err)
++var _mkcgo_HMAC_CTX_new uintptr
++
++func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_HMAC_CTX_new)
++	if HMAC_CTX_PTR(r0) == nil {
++		return nil, newMkcgoErr("HMAC_CTX_new", nil)
++	}
++	return HMAC_CTX_PTR(r0), nil
 +}
 +
-+func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", _err)
++var _mkcgo_HMAC_Final uintptr
++
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	runtime.KeepAlive(arg2)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("HMAC_Final", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_factors", _err)
++var _mkcgo_HMAC_Init_ex uintptr
++
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg3)
++	runtime.KeepAlive(arg4)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("HMAC_Init_ex", nil)
++	}
++	return int32(r0), nil
 +}
 +
-+func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_key", _err)
++var _mkcgo_HMAC_Update uintptr
++
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
++	runtime.KeepAlive(arg0)
++	runtime.KeepAlive(arg1)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("HMAC_Update", nil)
++	}
++	return int32(r0), nil
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-new file mode 100644
-index 00000000000000..ea01eed750a1c5
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,337 @@
-+// Code generated by mkcgo. DO NOT EDIT.
 +
-+#ifndef MKCGO_H // only include this header once
-+#define MKCGO_H
++var _mkcgo_OBJ_nid2sn uintptr
 +
-+#include <stdlib.h>
-+#include <stdint.h>
++func OBJ_nid2sn(n int32) *byte {
++	r0, _, _ := syscallN(_mkcgo_OBJ_nid2sn, uintptr(n))
++	return (*byte)(unsafe.Pointer(r0))
++}
 +
-+typedef void* _OPENSSL_INIT_SETTINGS_PTR;
-+typedef void* _OSSL_LIB_CTX_PTR;
-+typedef void* _OSSL_PROVIDER_PTR;
-+typedef void* _ENGINE_PTR;
-+typedef void* _EVP_PKEY_PTR;
-+typedef void* _EVP_PKEY_CTX_PTR;
-+typedef void* _EVP_MD_PTR;
-+typedef void* _EVP_MD_CTX_PTR;
-+typedef void* _HMAC_CTX_PTR;
-+typedef void* _EVP_CIPHER_PTR;
-+typedef void* _EVP_CIPHER_CTX_PTR;
-+typedef void* _EC_KEY_PTR;
-+typedef void* _EC_POINT_PTR;
-+typedef void* _EC_GROUP_PTR;
-+typedef void* _RSA_PTR;
-+typedef void* _BIGNUM_PTR;
-+typedef void* _BN_CTX_PTR;
-+typedef void* _EVP_MAC_PTR;
-+typedef void* _EVP_MAC_CTX_PTR;
-+typedef void* _OSSL_PARAM_BLD_PTR;
-+typedef void* _OSSL_PARAM_PTR;
-+typedef void* _EVP_SIGNATURE_PTR;
-+typedef void* _DSA_PTR;
-+typedef void* _EVP_KDF_PTR;
-+typedef void* _EVP_KDF_CTX_PTR;
-+typedef int point_conversion_form_t;
++var _mkcgo_OPENSSL_init uintptr
 +
-+enum {
-+	_POINT_CONVERSION_UNCOMPRESSED = 4,
-+	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
-+	_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004,
-+	_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008,
-+	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
-+	_EVP_CTRL_GCM_GET_TAG = 0x10,
-+	_EVP_CTRL_GCM_SET_TAG = 0x11,
-+	_EVP_PKEY_CTRL_MD = 1,
-+	_EVP_PKEY_RSA = 6,
-+	_EVP_PKEY_EC = 408,
-+	_EVP_PKEY_TLS1_PRF = 1021,
-+	_EVP_PKEY_HKDF = 1036,
-+	_EVP_PKEY_ED25519 = 1087,
-+	_EVP_PKEY_DSA = 116,
-+	_EVP_PKEY_OP_DERIVE = (1 << 10),
-+	_EVP_MAX_MD_SIZE = 64,
-+	_EVP_PKEY_PUBLIC_KEY = 0x86,
-+	_EVP_PKEY_KEYPAIR = 0x87,
-+	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
-+	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
-+	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
-+	_EVP_PKEY_CTRL_TLS_MD = 0x1000,
-+	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
-+	_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
-+	_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
-+	_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
-+	_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
-+	_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
-+	_EVP_PKEY_CTRL_HKDF_MODE = 0x1007,
-+	_NID_X9_62_prime256v1 = 415,
-+	_NID_secp224r1 = 713,
-+	_NID_secp384r1 = 715,
-+	_NID_secp521r1 = 716,
-+	_RSA_PKCS1_PADDING = 1,
-+	_RSA_NO_PADDING = 3,
-+	_RSA_PKCS1_OAEP_PADDING = 4,
-+	_RSA_PKCS1_PSS_PADDING = 6,
-+	_RSA_PSS_SALTLEN_DIGEST = -1,
-+	_RSA_PSS_SALTLEN_AUTO = -2,
-+	_RSA_PSS_SALTLEN_MAX_SIGN = -2,
-+	_RSA_PSS_SALTLEN_MAX = -3,
-+	_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
-+	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
-+	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
-+	_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
-+	_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
-+	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
-+	_OSSL_PARAM_INTEGER = 1,
-+	_OSSL_PARAM_OCTET_STRING = 5,
-+};
++func OPENSSL_init() {
++	syscallN(_mkcgo_OPENSSL_init)
++}
++
++var _mkcgo_OPENSSL_init_crypto uintptr
 +
-+typedef void* mkcgo_err_state;
-+mkcgo_err_state mkcgo_err_retrieve();
-+void mkcgo_err_free(mkcgo_err_state);
-+void mkcgo_err_clear();
++func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings))
++	runtime.KeepAlive(settings)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("OPENSSL_init_crypto", nil)
++	}
++	return int32(r0), nil
++}
 +
-+void __mkcgo_load_(void* handle);
-+void __mkcgo_unload_();
-+void __mkcgo_load_111(void* handle);
-+void __mkcgo_unload_111();
-+void __mkcgo_load_3(void* handle);
-+void __mkcgo_unload_3();
-+void __mkcgo_load_init_1(void* handle);
-+void __mkcgo_unload_init_1();
-+void __mkcgo_load_init_3(void* handle);
-+void __mkcgo_unload_init_3();
-+void __mkcgo_load_legacy_1(void* handle);
-+void __mkcgo_unload_legacy_1();
-+void __mkcgo_load_version(void* handle);
-+void __mkcgo_unload_version();
++func OPENSSL_version_major_Available() bool {
++	return _mkcgo_OPENSSL_version_major != 0
++}
 +
-+int _mkcgo_available_OPENSSL_version_major();
-+int _mkcgo_available_OPENSSL_version_minor();
-+int _mkcgo_available_OPENSSL_version_patch();
-+int _mkcgo_available_OpenSSL_version_num();
++var _mkcgo_OPENSSL_version_major uintptr
 +
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
-+void _mkcgo_BN_clear(_BIGNUM_PTR);
-+void _mkcgo_BN_clear_free(_BIGNUM_PTR);
-+void _mkcgo_BN_free(_BIGNUM_PTR);
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
-+_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *);
-+int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
-+void _mkcgo_CRYPTO_free(void*, const char*, int);
-+void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, mkcgo_err_state *);
-+void _mkcgo_DSA_free(_DSA_PTR);
-+int _mkcgo_DSA_generate_key(_DSA_PTR, mkcgo_err_state *);
-+void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *);
-+int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, mkcgo_err_state *);
-+void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
-+const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
-+const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
-+const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_ERR_clear_error(void);
-+void _mkcgo_ERR_error_string_n(unsigned long, char*, size_t);
-+unsigned long _mkcgo_ERR_get_error_all(const char**, int*, const char**, const char**, int*);
-+unsigned long _mkcgo_ERR_get_error_line(const char**, int*);
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, mkcgo_err_state *);
-+void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *);
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
-+int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_Digest(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const void*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
-+void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, mkcgo_err_state *);
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, mkcgo_err_state *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
-+const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
-+const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, mkcgo_err_state *);
-+void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, mkcgo_err_state *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, mkcgo_err_state *);
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, mkcgo_err_state *);
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, mkcgo_err_state *);
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, mkcgo_err_state *);
-+int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md4(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md5(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void);
-+const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha1(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha256(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha384(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
-+int _mkcgo_FIPS_mode(void);
-+int _mkcgo_FIPS_mode_set(int, mkcgo_err_state *);
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *);
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+const char* _mkcgo_OBJ_nid2sn(int);
-+void _mkcgo_OPENSSL_init(void);
-+int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, mkcgo_err_state *);
-+unsigned int _mkcgo_OPENSSL_version_major(void);
-+unsigned int _mkcgo_OPENSSL_version_minor(void);
-+unsigned int _mkcgo_OPENSSL_version_patch(void);
-+void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, mkcgo_err_state *);
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, mkcgo_err_state *);
-+void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, mkcgo_err_state *);
-+int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
-+const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, mkcgo_err_state *);
-+const char* _mkcgo_OpenSSL_version(int);
-+unsigned long _mkcgo_OpenSSL_version_num(void);
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, mkcgo_err_state *);
-+int _mkcgo_RAND_bytes(unsigned char*, int, mkcgo_err_state *);
-+void _mkcgo_RSA_free(_RSA_PTR);
-+void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *);
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++func OPENSSL_version_major() uint32 {
++	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_major)
++	return uint32(r0)
++}
++
++func OPENSSL_version_minor_Available() bool {
++	return _mkcgo_OPENSSL_version_minor != 0
++}
++
++var _mkcgo_OPENSSL_version_minor uintptr
++
++func OPENSSL_version_minor() uint32 {
++	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_minor)
++	return uint32(r0)
++}
 +
-+#endif // MKCGO_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
-new file mode 100644
-index 00000000000000..ae64d2f7ee9990
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_go124.go
-@@ -0,0 +1,37 @@
-+// Code generated by mkcgo. DO NOT EDIT.
++func OPENSSL_version_patch_Available() bool {
++	return _mkcgo_OPENSSL_version_patch != 0
++}
 +
-+//go:build go1.24 && !cmd_go_bootstrap
++var _mkcgo_OPENSSL_version_patch uintptr
 +
-+package ossl
++func OPENSSL_version_patch() uint32 {
++	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_patch)
++	return uint32(r0)
++}
 +
-+/*
-+#cgo noescape _mkcgo_EVP_CipherUpdate
-+#cgo nocallback _mkcgo_EVP_CipherUpdate
-+#cgo noescape _mkcgo_EVP_DecryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
-+#cgo noescape _mkcgo_EVP_DecryptUpdate
-+#cgo nocallback _mkcgo_EVP_DecryptUpdate
-+#cgo noescape _mkcgo_EVP_Digest
-+#cgo nocallback _mkcgo_EVP_Digest
-+#cgo noescape _mkcgo_EVP_DigestFinal_ex
-+#cgo nocallback _mkcgo_EVP_DigestFinal_ex
-+#cgo noescape _mkcgo_EVP_DigestSign
-+#cgo nocallback _mkcgo_EVP_DigestSign
-+#cgo noescape _mkcgo_EVP_DigestUpdate
-+#cgo nocallback _mkcgo_EVP_DigestUpdate
-+#cgo noescape _mkcgo_EVP_EncryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
-+#cgo noescape _mkcgo_EVP_EncryptUpdate
-+#cgo nocallback _mkcgo_EVP_EncryptUpdate
-+#cgo noescape _mkcgo_EVP_MD_CTX_copy
-+#cgo nocallback _mkcgo_EVP_MD_CTX_copy
-+#cgo noescape _mkcgo_EVP_PKEY_derive
-+#cgo nocallback _mkcgo_EVP_PKEY_derive
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo noescape _mkcgo_RAND_bytes
-+#cgo nocallback _mkcgo_RAND_bytes
-+*/
-+import "C"
++var _mkcgo_OSSL_PARAM_BLD_free uintptr
++
++func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
++	syscallN(_mkcgo_OSSL_PARAM_BLD_free, uintptr(bld))
++	runtime.KeepAlive(bld)
++}
++
++var _mkcgo_OSSL_PARAM_BLD_new uintptr
++
++func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_new)
++	if OSSL_PARAM_BLD_PTR(r0) == nil {
++		return nil, newMkcgoErr("OSSL_PARAM_BLD_new", nil)
++	}
++	return OSSL_PARAM_BLD_PTR(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
++
++func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(bn))
++	runtime.KeepAlive(bld)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(bn)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_BN", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_BLD_push_int32 uintptr
++
++func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(num))
++	runtime.KeepAlive(bld)
++	runtime.KeepAlive(key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_int32", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
++
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(buf), uintptr(bsize))
++	runtime.KeepAlive(bld)
++	runtime.KeepAlive(key)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
++
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(buf)), uintptr(bsize))
++	runtime.KeepAlive(bld)
++	runtime.KeepAlive(key)
++	runtime.KeepAlive(buf)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_BLD_to_param uintptr
++
++func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld))
++	runtime.KeepAlive(bld)
++	if OSSL_PARAM_PTR(r0) == nil {
++		return nil, newMkcgoErr("OSSL_PARAM_BLD_to_param", nil)
++	}
++	return OSSL_PARAM_PTR(r0), nil
++}
++
++var _mkcgo_OSSL_PARAM_free uintptr
++
++func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
++	syscallN(_mkcgo_OSSL_PARAM_free, uintptr(p))
++	runtime.KeepAlive(p)
++}
++
++var _mkcgo_OSSL_PARAM_locate_const uintptr
++
++func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(unsafe.Pointer(key)))
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(key)
++	if OSSL_PARAM_PTR(r0) == nil {
++		return nil, newMkcgoErr("OSSL_PARAM_locate_const", nil)
++	}
++	return OSSL_PARAM_PTR(r0), nil
++}
++
++var _mkcgo_OSSL_PROVIDER_available uintptr
++
++func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(unsafe.Pointer(name)))
++	runtime.KeepAlive(libctx)
++	runtime.KeepAlive(name)
++	return int32(r0)
++}
++
++var _mkcgo_OSSL_PROVIDER_get0_name uintptr
++
++func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_get0_name, uintptr(prov))
++	runtime.KeepAlive(prov)
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_OSSL_PROVIDER_try_load uintptr
++
++func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(unsafe.Pointer(name)), uintptr(retain_fallbacks))
++	runtime.KeepAlive(libctx)
++	runtime.KeepAlive(name)
++	if OSSL_PROVIDER_PTR(r0) == nil {
++		return nil, newMkcgoErr("OSSL_PROVIDER_try_load", nil)
++	}
++	return OSSL_PROVIDER_PTR(r0), nil
++}
++
++var _mkcgo_OpenSSL_version uintptr
++
++func OpenSSL_version(__type int32) *byte {
++	r0, _, _ := syscallN(_mkcgo_OpenSSL_version, uintptr(__type))
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++func OpenSSL_version_num_Available() bool {
++	return _mkcgo_OpenSSL_version_num != 0
++}
++
++var _mkcgo_OpenSSL_version_num uintptr
++
++func OpenSSL_version_num() uint64 {
++	r0, _, _ := syscallN(_mkcgo_OpenSSL_version_num)
++	return uint64(r0)
++}
++
++var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
++
++func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_PKCS5_PBKDF2_HMAC, uintptr(unsafe.Pointer(pass)), uintptr(passlen), uintptr(unsafe.Pointer(salt)), uintptr(saltlen), uintptr(iter), uintptr(digest), uintptr(keylen), uintptr(unsafe.Pointer(out)))
++	runtime.KeepAlive(pass)
++	runtime.KeepAlive(salt)
++	runtime.KeepAlive(digest)
++	runtime.KeepAlive(out)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("PKCS5_PBKDF2_HMAC", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_RAND_bytes uintptr
++
++func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_RAND_bytes, uintptr(unsafe.Pointer(arg0)), uintptr(arg1))
++	runtime.KeepAlive(arg0)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("RAND_bytes", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_RSA_free uintptr
++
++func RSA_free(arg0 RSA_PTR) {
++	syscallN(_mkcgo_RSA_free, uintptr(arg0))
++	runtime.KeepAlive(arg0)
++}
++
++var _mkcgo_RSA_get0_crt_params uintptr
++
++func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
++	syscallN(_mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(unsafe.Pointer(dmp1)), uintptr(unsafe.Pointer(dmq1)), uintptr(unsafe.Pointer(iqmp)))
++	runtime.KeepAlive(r)
++	runtime.KeepAlive(dmp1)
++	runtime.KeepAlive(dmq1)
++	runtime.KeepAlive(iqmp)
++}
++
++var _mkcgo_RSA_get0_factors uintptr
++
++func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
++	syscallN(_mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)))
++	runtime.KeepAlive(rsa)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(q)
++}
++
++var _mkcgo_RSA_get0_key uintptr
++
++func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
++	syscallN(_mkcgo_RSA_get0_key, uintptr(rsa), uintptr(unsafe.Pointer(n)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(d)))
++	runtime.KeepAlive(rsa)
++	runtime.KeepAlive(n)
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(d)
++}
++
++var _mkcgo_RSA_new uintptr
++
++func RSA_new() (RSA_PTR, error) {
++	r0, _, _ := syscallN(_mkcgo_RSA_new)
++	if RSA_PTR(r0) == nil {
++		return nil, newMkcgoErr("RSA_new", nil)
++	}
++	return RSA_PTR(r0), nil
++}
++
++var _mkcgo_RSA_set0_crt_params uintptr
++
++func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp))
++	runtime.KeepAlive(rsa)
++	runtime.KeepAlive(dmp1)
++	runtime.KeepAlive(dmp2)
++	runtime.KeepAlive(iqmp)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("RSA_set0_crt_params", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_RSA_set0_factors uintptr
++
++func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q))
++	runtime.KeepAlive(rsa)
++	runtime.KeepAlive(p)
++	runtime.KeepAlive(q)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("RSA_set0_factors", nil)
++	}
++	return int32(r0), nil
++}
++
++var _mkcgo_RSA_set0_key uintptr
++
++func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
++	r0, _, _ := syscallN(_mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d))
++	runtime.KeepAlive(r)
++	runtime.KeepAlive(n)
++	runtime.KeepAlive(e)
++	runtime.KeepAlive(d)
++	if int32(r0) <= 0 {
++		return 0, newMkcgoErr("RSA_set0_key", nil)
++	}
++	return int32(r0), nil
++}
++
++func MkcgoLoad_(handle unsafe.Pointer) {
++	_mkcgo_BN_bin2bn = dlsym(handle, "BN_bin2bn\x00", false)
++	_mkcgo_BN_bn2binpad = dlsym(handle, "BN_bn2binpad\x00", false)
++	_mkcgo_BN_bn2lebinpad = dlsym(handle, "BN_bn2lebinpad\x00", false)
++	_mkcgo_BN_clear = dlsym(handle, "BN_clear\x00", false)
++	_mkcgo_BN_clear_free = dlsym(handle, "BN_clear_free\x00", false)
++	_mkcgo_BN_free = dlsym(handle, "BN_free\x00", false)
++	_mkcgo_BN_lebin2bn = dlsym(handle, "BN_lebin2bn\x00", false)
++	_mkcgo_BN_new = dlsym(handle, "BN_new\x00", false)
++	_mkcgo_BN_num_bits = dlsym(handle, "BN_num_bits\x00", false)
++	_mkcgo_CRYPTO_free = dlsym(handle, "CRYPTO_free\x00", false)
++	_mkcgo_CRYPTO_malloc = dlsym(handle, "CRYPTO_malloc\x00", false)
++	_mkcgo_EC_GROUP_free = dlsym(handle, "EC_GROUP_free\x00", false)
++	_mkcgo_EC_GROUP_new_by_curve_name = dlsym(handle, "EC_GROUP_new_by_curve_name\x00", false)
++	_mkcgo_EC_POINT_free = dlsym(handle, "EC_POINT_free\x00", false)
++	_mkcgo_EC_POINT_mul = dlsym(handle, "EC_POINT_mul\x00", false)
++	_mkcgo_EC_POINT_new = dlsym(handle, "EC_POINT_new\x00", false)
++	_mkcgo_EC_POINT_oct2point = dlsym(handle, "EC_POINT_oct2point\x00", false)
++	_mkcgo_EC_POINT_point2oct = dlsym(handle, "EC_POINT_point2oct\x00", false)
++	_mkcgo_ERR_clear_error = dlsym(handle, "ERR_clear_error\x00", false)
++	_mkcgo_ERR_error_string_n = dlsym(handle, "ERR_error_string_n\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_ctrl = dlsym(handle, "EVP_CIPHER_CTX_ctrl\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_free = dlsym(handle, "EVP_CIPHER_CTX_free\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_new = dlsym(handle, "EVP_CIPHER_CTX_new\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_set_key_length = dlsym(handle, "EVP_CIPHER_CTX_set_key_length\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_set_padding = dlsym(handle, "EVP_CIPHER_CTX_set_padding\x00", false)
++	_mkcgo_EVP_CipherInit_ex = dlsym(handle, "EVP_CipherInit_ex\x00", false)
++	_mkcgo_EVP_CipherUpdate = dlsym(handle, "EVP_CipherUpdate\x00", false)
++	_mkcgo_EVP_DecryptFinal_ex = dlsym(handle, "EVP_DecryptFinal_ex\x00", false)
++	_mkcgo_EVP_DecryptInit_ex = dlsym(handle, "EVP_DecryptInit_ex\x00", false)
++	_mkcgo_EVP_DecryptUpdate = dlsym(handle, "EVP_DecryptUpdate\x00", false)
++	_mkcgo_EVP_Digest = dlsym(handle, "EVP_Digest\x00", false)
++	_mkcgo_EVP_DigestFinal_ex = dlsym(handle, "EVP_DigestFinal_ex\x00", false)
++	_mkcgo_EVP_DigestInit = dlsym(handle, "EVP_DigestInit\x00", false)
++	_mkcgo_EVP_DigestInit_ex = dlsym(handle, "EVP_DigestInit_ex\x00", false)
++	_mkcgo_EVP_DigestSignFinal = dlsym(handle, "EVP_DigestSignFinal\x00", false)
++	_mkcgo_EVP_DigestSignInit = dlsym(handle, "EVP_DigestSignInit\x00", false)
++	_mkcgo_EVP_DigestUpdate = dlsym(handle, "EVP_DigestUpdate\x00", false)
++	_mkcgo_EVP_DigestVerifyFinal = dlsym(handle, "EVP_DigestVerifyFinal\x00", false)
++	_mkcgo_EVP_DigestVerifyInit = dlsym(handle, "EVP_DigestVerifyInit\x00", false)
++	_mkcgo_EVP_EncryptFinal_ex = dlsym(handle, "EVP_EncryptFinal_ex\x00", false)
++	_mkcgo_EVP_EncryptInit_ex = dlsym(handle, "EVP_EncryptInit_ex\x00", false)
++	_mkcgo_EVP_EncryptUpdate = dlsym(handle, "EVP_EncryptUpdate\x00", false)
++	_mkcgo_EVP_MD_CTX_copy = dlsym(handle, "EVP_MD_CTX_copy\x00", false)
++	_mkcgo_EVP_MD_CTX_copy_ex = dlsym(handle, "EVP_MD_CTX_copy_ex\x00", false)
++	_mkcgo_EVP_MD_CTX_free = dlsym(handle, "EVP_MD_CTX_free\x00", false)
++	_mkcgo_EVP_MD_CTX_new = dlsym(handle, "EVP_MD_CTX_new\x00", false)
++	_mkcgo_EVP_PKEY_CTX_ctrl = dlsym(handle, "EVP_PKEY_CTX_ctrl\x00", false)
++	_mkcgo_EVP_PKEY_CTX_free = dlsym(handle, "EVP_PKEY_CTX_free\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new = dlsym(handle, "EVP_PKEY_CTX_new\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new_id = dlsym(handle, "EVP_PKEY_CTX_new_id\x00", false)
++	_mkcgo_EVP_PKEY_decrypt = dlsym(handle, "EVP_PKEY_decrypt\x00", false)
++	_mkcgo_EVP_PKEY_decrypt_init = dlsym(handle, "EVP_PKEY_decrypt_init\x00", false)
++	_mkcgo_EVP_PKEY_derive = dlsym(handle, "EVP_PKEY_derive\x00", false)
++	_mkcgo_EVP_PKEY_derive_init = dlsym(handle, "EVP_PKEY_derive_init\x00", false)
++	_mkcgo_EVP_PKEY_derive_set_peer = dlsym(handle, "EVP_PKEY_derive_set_peer\x00", false)
++	_mkcgo_EVP_PKEY_encrypt = dlsym(handle, "EVP_PKEY_encrypt\x00", false)
++	_mkcgo_EVP_PKEY_encrypt_init = dlsym(handle, "EVP_PKEY_encrypt_init\x00", false)
++	_mkcgo_EVP_PKEY_free = dlsym(handle, "EVP_PKEY_free\x00", false)
++	_mkcgo_EVP_PKEY_keygen = dlsym(handle, "EVP_PKEY_keygen\x00", false)
++	_mkcgo_EVP_PKEY_keygen_init = dlsym(handle, "EVP_PKEY_keygen_init\x00", false)
++	_mkcgo_EVP_PKEY_new = dlsym(handle, "EVP_PKEY_new\x00", false)
++	_mkcgo_EVP_PKEY_paramgen = dlsym(handle, "EVP_PKEY_paramgen\x00", false)
++	_mkcgo_EVP_PKEY_paramgen_init = dlsym(handle, "EVP_PKEY_paramgen_init\x00", false)
++	_mkcgo_EVP_PKEY_sign = dlsym(handle, "EVP_PKEY_sign\x00", false)
++	_mkcgo_EVP_PKEY_sign_init = dlsym(handle, "EVP_PKEY_sign_init\x00", false)
++	_mkcgo_EVP_PKEY_verify = dlsym(handle, "EVP_PKEY_verify\x00", false)
++	_mkcgo_EVP_PKEY_verify_init = dlsym(handle, "EVP_PKEY_verify_init\x00", false)
++	_mkcgo_EVP_aes_128_cbc = dlsym(handle, "EVP_aes_128_cbc\x00", false)
++	_mkcgo_EVP_aes_128_ctr = dlsym(handle, "EVP_aes_128_ctr\x00", false)
++	_mkcgo_EVP_aes_128_ecb = dlsym(handle, "EVP_aes_128_ecb\x00", false)
++	_mkcgo_EVP_aes_128_gcm = dlsym(handle, "EVP_aes_128_gcm\x00", false)
++	_mkcgo_EVP_aes_192_cbc = dlsym(handle, "EVP_aes_192_cbc\x00", false)
++	_mkcgo_EVP_aes_192_ctr = dlsym(handle, "EVP_aes_192_ctr\x00", false)
++	_mkcgo_EVP_aes_192_ecb = dlsym(handle, "EVP_aes_192_ecb\x00", false)
++	_mkcgo_EVP_aes_192_gcm = dlsym(handle, "EVP_aes_192_gcm\x00", false)
++	_mkcgo_EVP_aes_256_cbc = dlsym(handle, "EVP_aes_256_cbc\x00", false)
++	_mkcgo_EVP_aes_256_ctr = dlsym(handle, "EVP_aes_256_ctr\x00", false)
++	_mkcgo_EVP_aes_256_ecb = dlsym(handle, "EVP_aes_256_ecb\x00", false)
++	_mkcgo_EVP_aes_256_gcm = dlsym(handle, "EVP_aes_256_gcm\x00", false)
++	_mkcgo_EVP_des_cbc = dlsym(handle, "EVP_des_cbc\x00", false)
++	_mkcgo_EVP_des_ecb = dlsym(handle, "EVP_des_ecb\x00", false)
++	_mkcgo_EVP_des_ede3_cbc = dlsym(handle, "EVP_des_ede3_cbc\x00", false)
++	_mkcgo_EVP_des_ede3_ecb = dlsym(handle, "EVP_des_ede3_ecb\x00", false)
++	_mkcgo_EVP_md4 = dlsym(handle, "EVP_md4\x00", false)
++	_mkcgo_EVP_md5 = dlsym(handle, "EVP_md5\x00", false)
++	_mkcgo_EVP_md5_sha1 = dlsym(handle, "EVP_md5_sha1\x00", false)
++	_mkcgo_EVP_rc4 = dlsym(handle, "EVP_rc4\x00", false)
++	_mkcgo_EVP_ripemd160 = dlsym(handle, "EVP_ripemd160\x00", false)
++	_mkcgo_EVP_sha1 = dlsym(handle, "EVP_sha1\x00", false)
++	_mkcgo_EVP_sha224 = dlsym(handle, "EVP_sha224\x00", false)
++	_mkcgo_EVP_sha256 = dlsym(handle, "EVP_sha256\x00", false)
++	_mkcgo_EVP_sha384 = dlsym(handle, "EVP_sha384\x00", false)
++	_mkcgo_EVP_sha512 = dlsym(handle, "EVP_sha512\x00", false)
++	_mkcgo_OBJ_nid2sn = dlsym(handle, "OBJ_nid2sn\x00", false)
++	_mkcgo_OPENSSL_init = dlsym(handle, "OPENSSL_init\x00", false)
++	_mkcgo_OPENSSL_init_crypto = dlsym(handle, "OPENSSL_init_crypto\x00", false)
++	_mkcgo_OpenSSL_version = dlsym(handle, "OpenSSL_version\x00", false)
++	_mkcgo_PKCS5_PBKDF2_HMAC = dlsym(handle, "PKCS5_PBKDF2_HMAC\x00", false)
++	_mkcgo_RAND_bytes = dlsym(handle, "RAND_bytes\x00", false)
++}
++
++func MkcgoUnload_() {
++	_mkcgo_BN_bin2bn = 0
++	_mkcgo_BN_bn2binpad = 0
++	_mkcgo_BN_bn2lebinpad = 0
++	_mkcgo_BN_clear = 0
++	_mkcgo_BN_clear_free = 0
++	_mkcgo_BN_free = 0
++	_mkcgo_BN_lebin2bn = 0
++	_mkcgo_BN_new = 0
++	_mkcgo_BN_num_bits = 0
++	_mkcgo_CRYPTO_free = 0
++	_mkcgo_CRYPTO_malloc = 0
++	_mkcgo_EC_GROUP_free = 0
++	_mkcgo_EC_GROUP_new_by_curve_name = 0
++	_mkcgo_EC_POINT_free = 0
++	_mkcgo_EC_POINT_mul = 0
++	_mkcgo_EC_POINT_new = 0
++	_mkcgo_EC_POINT_oct2point = 0
++	_mkcgo_EC_POINT_point2oct = 0
++	_mkcgo_ERR_clear_error = 0
++	_mkcgo_ERR_error_string_n = 0
++	_mkcgo_EVP_CIPHER_CTX_ctrl = 0
++	_mkcgo_EVP_CIPHER_CTX_free = 0
++	_mkcgo_EVP_CIPHER_CTX_new = 0
++	_mkcgo_EVP_CIPHER_CTX_set_key_length = 0
++	_mkcgo_EVP_CIPHER_CTX_set_padding = 0
++	_mkcgo_EVP_CipherInit_ex = 0
++	_mkcgo_EVP_CipherUpdate = 0
++	_mkcgo_EVP_DecryptFinal_ex = 0
++	_mkcgo_EVP_DecryptInit_ex = 0
++	_mkcgo_EVP_DecryptUpdate = 0
++	_mkcgo_EVP_Digest = 0
++	_mkcgo_EVP_DigestFinal_ex = 0
++	_mkcgo_EVP_DigestInit = 0
++	_mkcgo_EVP_DigestInit_ex = 0
++	_mkcgo_EVP_DigestSignFinal = 0
++	_mkcgo_EVP_DigestSignInit = 0
++	_mkcgo_EVP_DigestUpdate = 0
++	_mkcgo_EVP_DigestVerifyFinal = 0
++	_mkcgo_EVP_DigestVerifyInit = 0
++	_mkcgo_EVP_EncryptFinal_ex = 0
++	_mkcgo_EVP_EncryptInit_ex = 0
++	_mkcgo_EVP_EncryptUpdate = 0
++	_mkcgo_EVP_MD_CTX_copy = 0
++	_mkcgo_EVP_MD_CTX_copy_ex = 0
++	_mkcgo_EVP_MD_CTX_free = 0
++	_mkcgo_EVP_MD_CTX_new = 0
++	_mkcgo_EVP_PKEY_CTX_ctrl = 0
++	_mkcgo_EVP_PKEY_CTX_free = 0
++	_mkcgo_EVP_PKEY_CTX_new = 0
++	_mkcgo_EVP_PKEY_CTX_new_id = 0
++	_mkcgo_EVP_PKEY_decrypt = 0
++	_mkcgo_EVP_PKEY_decrypt_init = 0
++	_mkcgo_EVP_PKEY_derive = 0
++	_mkcgo_EVP_PKEY_derive_init = 0
++	_mkcgo_EVP_PKEY_derive_set_peer = 0
++	_mkcgo_EVP_PKEY_encrypt = 0
++	_mkcgo_EVP_PKEY_encrypt_init = 0
++	_mkcgo_EVP_PKEY_free = 0
++	_mkcgo_EVP_PKEY_keygen = 0
++	_mkcgo_EVP_PKEY_keygen_init = 0
++	_mkcgo_EVP_PKEY_new = 0
++	_mkcgo_EVP_PKEY_paramgen = 0
++	_mkcgo_EVP_PKEY_paramgen_init = 0
++	_mkcgo_EVP_PKEY_sign = 0
++	_mkcgo_EVP_PKEY_sign_init = 0
++	_mkcgo_EVP_PKEY_verify = 0
++	_mkcgo_EVP_PKEY_verify_init = 0
++	_mkcgo_EVP_aes_128_cbc = 0
++	_mkcgo_EVP_aes_128_ctr = 0
++	_mkcgo_EVP_aes_128_ecb = 0
++	_mkcgo_EVP_aes_128_gcm = 0
++	_mkcgo_EVP_aes_192_cbc = 0
++	_mkcgo_EVP_aes_192_ctr = 0
++	_mkcgo_EVP_aes_192_ecb = 0
++	_mkcgo_EVP_aes_192_gcm = 0
++	_mkcgo_EVP_aes_256_cbc = 0
++	_mkcgo_EVP_aes_256_ctr = 0
++	_mkcgo_EVP_aes_256_ecb = 0
++	_mkcgo_EVP_aes_256_gcm = 0
++	_mkcgo_EVP_des_cbc = 0
++	_mkcgo_EVP_des_ecb = 0
++	_mkcgo_EVP_des_ede3_cbc = 0
++	_mkcgo_EVP_des_ede3_ecb = 0
++	_mkcgo_EVP_md4 = 0
++	_mkcgo_EVP_md5 = 0
++	_mkcgo_EVP_md5_sha1 = 0
++	_mkcgo_EVP_rc4 = 0
++	_mkcgo_EVP_ripemd160 = 0
++	_mkcgo_EVP_sha1 = 0
++	_mkcgo_EVP_sha224 = 0
++	_mkcgo_EVP_sha256 = 0
++	_mkcgo_EVP_sha384 = 0
++	_mkcgo_EVP_sha512 = 0
++	_mkcgo_OBJ_nid2sn = 0
++	_mkcgo_OPENSSL_init = 0
++	_mkcgo_OPENSSL_init_crypto = 0
++	_mkcgo_OpenSSL_version = 0
++	_mkcgo_PKCS5_PBKDF2_HMAC = 0
++	_mkcgo_RAND_bytes = 0
++}
++
++func MkcgoLoad_111(handle unsafe.Pointer) {
++	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
++	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_public_key = dlsym(handle, "EVP_PKEY_new_raw_public_key\x00", false)
++	_mkcgo_EVP_sha3_224 = dlsym(handle, "EVP_sha3_224\x00", false)
++	_mkcgo_EVP_sha3_256 = dlsym(handle, "EVP_sha3_256\x00", false)
++	_mkcgo_EVP_sha3_384 = dlsym(handle, "EVP_sha3_384\x00", false)
++	_mkcgo_EVP_sha3_512 = dlsym(handle, "EVP_sha3_512\x00", false)
++	_mkcgo_EVP_sha512_224 = dlsym(handle, "EVP_sha512_224\x00", false)
++	_mkcgo_EVP_sha512_256 = dlsym(handle, "EVP_sha512_256\x00", false)
++}
++
++func MkcgoUnload_111() {
++	_mkcgo_EVP_DigestSign = 0
++	_mkcgo_EVP_DigestVerify = 0
++	_mkcgo_EVP_PKEY_get_raw_private_key = 0
++	_mkcgo_EVP_PKEY_get_raw_public_key = 0
++	_mkcgo_EVP_PKEY_new_raw_private_key = 0
++	_mkcgo_EVP_PKEY_new_raw_public_key = 0
++	_mkcgo_EVP_sha3_224 = 0
++	_mkcgo_EVP_sha3_256 = 0
++	_mkcgo_EVP_sha3_384 = 0
++	_mkcgo_EVP_sha3_512 = 0
++	_mkcgo_EVP_sha512_224 = 0
++	_mkcgo_EVP_sha512_256 = 0
++}
++
++func MkcgoLoad_3(handle unsafe.Pointer) {
++	_mkcgo_EC_POINT_set_affine_coordinates = dlsym(handle, "EC_POINT_set_affine_coordinates\x00", false)
++	_mkcgo_ERR_get_error_all = dlsym(handle, "ERR_get_error_all\x00", false)
++	_mkcgo_EVP_CIPHER_fetch = dlsym(handle, "EVP_CIPHER_fetch\x00", false)
++	_mkcgo_EVP_CIPHER_get0_name = dlsym(handle, "EVP_CIPHER_get0_name\x00", false)
++	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_get_block_size\x00", false)
++	_mkcgo_EVP_KDF_CTX_free = dlsym(handle, "EVP_KDF_CTX_free\x00", false)
++	_mkcgo_EVP_KDF_CTX_get_kdf_size = dlsym(handle, "EVP_KDF_CTX_get_kdf_size\x00", false)
++	_mkcgo_EVP_KDF_CTX_new = dlsym(handle, "EVP_KDF_CTX_new\x00", false)
++	_mkcgo_EVP_KDF_CTX_set_params = dlsym(handle, "EVP_KDF_CTX_set_params\x00", false)
++	_mkcgo_EVP_KDF_derive = dlsym(handle, "EVP_KDF_derive\x00", false)
++	_mkcgo_EVP_KDF_fetch = dlsym(handle, "EVP_KDF_fetch\x00", false)
++	_mkcgo_EVP_KDF_free = dlsym(handle, "EVP_KDF_free\x00", false)
++	_mkcgo_EVP_MAC_CTX_dup = dlsym(handle, "EVP_MAC_CTX_dup\x00", false)
++	_mkcgo_EVP_MAC_CTX_free = dlsym(handle, "EVP_MAC_CTX_free\x00", false)
++	_mkcgo_EVP_MAC_CTX_new = dlsym(handle, "EVP_MAC_CTX_new\x00", false)
++	_mkcgo_EVP_MAC_CTX_set_params = dlsym(handle, "EVP_MAC_CTX_set_params\x00", false)
++	_mkcgo_EVP_MAC_fetch = dlsym(handle, "EVP_MAC_fetch\x00", false)
++	_mkcgo_EVP_MAC_final = dlsym(handle, "EVP_MAC_final\x00", false)
++	_mkcgo_EVP_MAC_init = dlsym(handle, "EVP_MAC_init\x00", false)
++	_mkcgo_EVP_MAC_update = dlsym(handle, "EVP_MAC_update\x00", false)
++	_mkcgo_EVP_MD_CTX_get_params = dlsym(handle, "EVP_MD_CTX_get_params\x00", false)
++	_mkcgo_EVP_MD_CTX_gettable_params = dlsym(handle, "EVP_MD_CTX_gettable_params\x00", false)
++	_mkcgo_EVP_MD_CTX_set_params = dlsym(handle, "EVP_MD_CTX_set_params\x00", false)
++	_mkcgo_EVP_MD_CTX_settable_params = dlsym(handle, "EVP_MD_CTX_settable_params\x00", false)
++	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
++	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
++	_mkcgo_EVP_MD_get0_name = dlsym(handle, "EVP_MD_get0_name\x00", false)
++	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
++	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_get_block_size\x00", false)
++	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_get_size\x00", false)
++	_mkcgo_EVP_MD_get_type = dlsym(handle, "EVP_MD_get_type\x00", false)
++	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = dlsym(handle, "EVP_PKEY_CTX_add1_hkdf_info\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new_from_pkey = dlsym(handle, "EVP_PKEY_CTX_new_from_pkey\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = dlsym(handle, "EVP_PKEY_CTX_set0_rsa_oaep_label\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_key\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_salt\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_md\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_mode\x00", false)
++	_mkcgo_EVP_PKEY_Q_keygen = dlsym(handle, "EVP_PKEY_Q_keygen\x00", false)
++	_mkcgo_EVP_PKEY_fromdata = dlsym(handle, "EVP_PKEY_fromdata\x00", false)
++	_mkcgo_EVP_PKEY_fromdata_init = dlsym(handle, "EVP_PKEY_fromdata_init\x00", false)
++	_mkcgo_EVP_PKEY_get1_encoded_public_key = dlsym(handle, "EVP_PKEY_get1_encoded_public_key\x00", false)
++	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_get_bits\x00", false)
++	_mkcgo_EVP_PKEY_get_bn_param = dlsym(handle, "EVP_PKEY_get_bn_param\x00", false)
++	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_get_size\x00", false)
++	_mkcgo_EVP_PKEY_private_check = dlsym(handle, "EVP_PKEY_private_check\x00", false)
++	_mkcgo_EVP_PKEY_public_check_quick = dlsym(handle, "EVP_PKEY_public_check_quick\x00", false)
++	_mkcgo_EVP_PKEY_set1_encoded_public_key = dlsym(handle, "EVP_PKEY_set1_encoded_public_key\x00", false)
++	_mkcgo_EVP_PKEY_up_ref = dlsym(handle, "EVP_PKEY_up_ref\x00", false)
++	_mkcgo_EVP_SIGNATURE_fetch = dlsym(handle, "EVP_SIGNATURE_fetch\x00", false)
++	_mkcgo_EVP_SIGNATURE_free = dlsym(handle, "EVP_SIGNATURE_free\x00", false)
++	_mkcgo_EVP_default_properties_enable_fips = dlsym(handle, "EVP_default_properties_enable_fips\x00", false)
++	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_free = dlsym(handle, "OSSL_PARAM_BLD_free\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_new = dlsym(handle, "OSSL_PARAM_BLD_new\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_BN = dlsym(handle, "OSSL_PARAM_BLD_push_BN\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_int32 = dlsym(handle, "OSSL_PARAM_BLD_push_int32\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_octet_string = dlsym(handle, "OSSL_PARAM_BLD_push_octet_string\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = dlsym(handle, "OSSL_PARAM_BLD_push_utf8_string\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_to_param = dlsym(handle, "OSSL_PARAM_BLD_to_param\x00", false)
++	_mkcgo_OSSL_PARAM_free = dlsym(handle, "OSSL_PARAM_free\x00", false)
++	_mkcgo_OSSL_PARAM_locate_const = dlsym(handle, "OSSL_PARAM_locate_const\x00", false)
++	_mkcgo_OSSL_PROVIDER_available = dlsym(handle, "OSSL_PROVIDER_available\x00", false)
++	_mkcgo_OSSL_PROVIDER_get0_name = dlsym(handle, "OSSL_PROVIDER_get0_name\x00", false)
++	_mkcgo_OSSL_PROVIDER_try_load = dlsym(handle, "OSSL_PROVIDER_try_load\x00", false)
++}
++
++func MkcgoUnload_3() {
++	_mkcgo_EC_POINT_set_affine_coordinates = 0
++	_mkcgo_ERR_get_error_all = 0
++	_mkcgo_EVP_CIPHER_fetch = 0
++	_mkcgo_EVP_CIPHER_get0_name = 0
++	_mkcgo_EVP_CIPHER_get_block_size = 0
++	_mkcgo_EVP_KDF_CTX_free = 0
++	_mkcgo_EVP_KDF_CTX_get_kdf_size = 0
++	_mkcgo_EVP_KDF_CTX_new = 0
++	_mkcgo_EVP_KDF_CTX_set_params = 0
++	_mkcgo_EVP_KDF_derive = 0
++	_mkcgo_EVP_KDF_fetch = 0
++	_mkcgo_EVP_KDF_free = 0
++	_mkcgo_EVP_MAC_CTX_dup = 0
++	_mkcgo_EVP_MAC_CTX_free = 0
++	_mkcgo_EVP_MAC_CTX_new = 0
++	_mkcgo_EVP_MAC_CTX_set_params = 0
++	_mkcgo_EVP_MAC_fetch = 0
++	_mkcgo_EVP_MAC_final = 0
++	_mkcgo_EVP_MAC_init = 0
++	_mkcgo_EVP_MAC_update = 0
++	_mkcgo_EVP_MD_CTX_get_params = 0
++	_mkcgo_EVP_MD_CTX_gettable_params = 0
++	_mkcgo_EVP_MD_CTX_set_params = 0
++	_mkcgo_EVP_MD_CTX_settable_params = 0
++	_mkcgo_EVP_MD_fetch = 0
++	_mkcgo_EVP_MD_free = 0
++	_mkcgo_EVP_MD_get0_name = 0
++	_mkcgo_EVP_MD_get0_provider = 0
++	_mkcgo_EVP_MD_get_block_size = 0
++	_mkcgo_EVP_MD_get_size = 0
++	_mkcgo_EVP_MD_get_type = 0
++	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = 0
++	_mkcgo_EVP_PKEY_CTX_new_from_pkey = 0
++	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = 0
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = 0
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = 0
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = 0
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = 0
++	_mkcgo_EVP_PKEY_Q_keygen = 0
++	_mkcgo_EVP_PKEY_fromdata = 0
++	_mkcgo_EVP_PKEY_fromdata_init = 0
++	_mkcgo_EVP_PKEY_get1_encoded_public_key = 0
++	_mkcgo_EVP_PKEY_get_bits = 0
++	_mkcgo_EVP_PKEY_get_bn_param = 0
++	_mkcgo_EVP_PKEY_get_size = 0
++	_mkcgo_EVP_PKEY_private_check = 0
++	_mkcgo_EVP_PKEY_public_check_quick = 0
++	_mkcgo_EVP_PKEY_set1_encoded_public_key = 0
++	_mkcgo_EVP_PKEY_up_ref = 0
++	_mkcgo_EVP_SIGNATURE_fetch = 0
++	_mkcgo_EVP_SIGNATURE_free = 0
++	_mkcgo_EVP_default_properties_enable_fips = 0
++	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++	_mkcgo_OSSL_PARAM_BLD_free = 0
++	_mkcgo_OSSL_PARAM_BLD_new = 0
++	_mkcgo_OSSL_PARAM_BLD_push_BN = 0
++	_mkcgo_OSSL_PARAM_BLD_push_int32 = 0
++	_mkcgo_OSSL_PARAM_BLD_push_octet_string = 0
++	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = 0
++	_mkcgo_OSSL_PARAM_BLD_to_param = 0
++	_mkcgo_OSSL_PARAM_free = 0
++	_mkcgo_OSSL_PARAM_locate_const = 0
++	_mkcgo_OSSL_PROVIDER_available = 0
++	_mkcgo_OSSL_PROVIDER_get0_name = 0
++	_mkcgo_OSSL_PROVIDER_try_load = 0
++}
++
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++}
++
++func MkcgoUnload_init_1() {
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++}
++
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	_mkcgo_ERR_clear_error = dlsym(handle, "ERR_clear_error\x00", false)
++	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
++	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
++	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
++	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++}
++
++func MkcgoUnload_init_3() {
++	_mkcgo_ERR_clear_error = 0
++	_mkcgo_EVP_MD_fetch = 0
++	_mkcgo_EVP_MD_free = 0
++	_mkcgo_EVP_MD_get0_provider = 0
++	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++}
++
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	_mkcgo_DSA_free = dlsym(handle, "DSA_free\x00", false)
++	_mkcgo_DSA_generate_key = dlsym(handle, "DSA_generate_key\x00", false)
++	_mkcgo_DSA_get0_key = dlsym(handle, "DSA_get0_key\x00", false)
++	_mkcgo_DSA_get0_pqg = dlsym(handle, "DSA_get0_pqg\x00", false)
++	_mkcgo_DSA_new = dlsym(handle, "DSA_new\x00", false)
++	_mkcgo_DSA_set0_key = dlsym(handle, "DSA_set0_key\x00", false)
++	_mkcgo_DSA_set0_pqg = dlsym(handle, "DSA_set0_pqg\x00", false)
++	_mkcgo_EC_KEY_check_key = dlsym(handle, "EC_KEY_check_key\x00", false)
++	_mkcgo_EC_KEY_free = dlsym(handle, "EC_KEY_free\x00", false)
++	_mkcgo_EC_KEY_get0_group = dlsym(handle, "EC_KEY_get0_group\x00", false)
++	_mkcgo_EC_KEY_get0_private_key = dlsym(handle, "EC_KEY_get0_private_key\x00", false)
++	_mkcgo_EC_KEY_get0_public_key = dlsym(handle, "EC_KEY_get0_public_key\x00", false)
++	_mkcgo_EC_KEY_new_by_curve_name = dlsym(handle, "EC_KEY_new_by_curve_name\x00", false)
++	_mkcgo_EC_KEY_set_private_key = dlsym(handle, "EC_KEY_set_private_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key = dlsym(handle, "EC_KEY_set_public_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = dlsym(handle, "EC_KEY_set_public_key_affine_coordinates\x00", false)
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = dlsym(handle, "EC_POINT_get_affine_coordinates_GFp\x00", false)
++	_mkcgo_ERR_get_error_line = dlsym(handle, "ERR_get_error_line\x00", false)
++	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_block_size\x00", false)
++	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_block_size\x00", false)
++	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_size\x00", false)
++	_mkcgo_EVP_PKEY_assign = dlsym(handle, "EVP_PKEY_assign\x00", false)
++	_mkcgo_EVP_PKEY_get0_DSA = dlsym(handle, "EVP_PKEY_get0_DSA\x00", false)
++	_mkcgo_EVP_PKEY_get0_EC_KEY = dlsym(handle, "EVP_PKEY_get0_EC_KEY\x00", false)
++	_mkcgo_EVP_PKEY_get1_RSA = dlsym(handle, "EVP_PKEY_get1_RSA\x00", false)
++	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_bits\x00", false)
++	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_size\x00", false)
++	_mkcgo_EVP_PKEY_set1_EC_KEY = dlsym(handle, "EVP_PKEY_set1_EC_KEY\x00", false)
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++	_mkcgo_HMAC_CTX_copy = dlsym(handle, "HMAC_CTX_copy\x00", false)
++	_mkcgo_HMAC_CTX_free = dlsym(handle, "HMAC_CTX_free\x00", false)
++	_mkcgo_HMAC_CTX_new = dlsym(handle, "HMAC_CTX_new\x00", false)
++	_mkcgo_HMAC_Final = dlsym(handle, "HMAC_Final\x00", false)
++	_mkcgo_HMAC_Init_ex = dlsym(handle, "HMAC_Init_ex\x00", false)
++	_mkcgo_HMAC_Update = dlsym(handle, "HMAC_Update\x00", false)
++	_mkcgo_RSA_free = dlsym(handle, "RSA_free\x00", false)
++	_mkcgo_RSA_get0_crt_params = dlsym(handle, "RSA_get0_crt_params\x00", false)
++	_mkcgo_RSA_get0_factors = dlsym(handle, "RSA_get0_factors\x00", false)
++	_mkcgo_RSA_get0_key = dlsym(handle, "RSA_get0_key\x00", false)
++	_mkcgo_RSA_new = dlsym(handle, "RSA_new\x00", false)
++	_mkcgo_RSA_set0_crt_params = dlsym(handle, "RSA_set0_crt_params\x00", false)
++	_mkcgo_RSA_set0_factors = dlsym(handle, "RSA_set0_factors\x00", false)
++	_mkcgo_RSA_set0_key = dlsym(handle, "RSA_set0_key\x00", false)
++}
++
++func MkcgoUnload_legacy_1() {
++	_mkcgo_DSA_free = 0
++	_mkcgo_DSA_generate_key = 0
++	_mkcgo_DSA_get0_key = 0
++	_mkcgo_DSA_get0_pqg = 0
++	_mkcgo_DSA_new = 0
++	_mkcgo_DSA_set0_key = 0
++	_mkcgo_DSA_set0_pqg = 0
++	_mkcgo_EC_KEY_check_key = 0
++	_mkcgo_EC_KEY_free = 0
++	_mkcgo_EC_KEY_get0_group = 0
++	_mkcgo_EC_KEY_get0_private_key = 0
++	_mkcgo_EC_KEY_get0_public_key = 0
++	_mkcgo_EC_KEY_new_by_curve_name = 0
++	_mkcgo_EC_KEY_set_private_key = 0
++	_mkcgo_EC_KEY_set_public_key = 0
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = 0
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = 0
++	_mkcgo_ERR_get_error_line = 0
++	_mkcgo_EVP_CIPHER_get_block_size = 0
++	_mkcgo_EVP_MD_get_block_size = 0
++	_mkcgo_EVP_MD_get_size = 0
++	_mkcgo_EVP_PKEY_assign = 0
++	_mkcgo_EVP_PKEY_get0_DSA = 0
++	_mkcgo_EVP_PKEY_get0_EC_KEY = 0
++	_mkcgo_EVP_PKEY_get1_RSA = 0
++	_mkcgo_EVP_PKEY_get_bits = 0
++	_mkcgo_EVP_PKEY_get_size = 0
++	_mkcgo_EVP_PKEY_set1_EC_KEY = 0
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++	_mkcgo_HMAC_CTX_copy = 0
++	_mkcgo_HMAC_CTX_free = 0
++	_mkcgo_HMAC_CTX_new = 0
++	_mkcgo_HMAC_Final = 0
++	_mkcgo_HMAC_Init_ex = 0
++	_mkcgo_HMAC_Update = 0
++	_mkcgo_RSA_free = 0
++	_mkcgo_RSA_get0_crt_params = 0
++	_mkcgo_RSA_get0_factors = 0
++	_mkcgo_RSA_get0_key = 0
++	_mkcgo_RSA_new = 0
++	_mkcgo_RSA_set0_crt_params = 0
++	_mkcgo_RSA_set0_factors = 0
++	_mkcgo_RSA_set0_key = 0
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	_mkcgo_OPENSSL_version_major = dlsym(handle, "OPENSSL_version_major\x00", true)
++	_mkcgo_OPENSSL_version_minor = dlsym(handle, "OPENSSL_version_minor\x00", true)
++	_mkcgo_OPENSSL_version_patch = dlsym(handle, "OPENSSL_version_patch\x00", true)
++	_mkcgo_OpenSSL_version_num = dlsym(handle, "OpenSSL_version_num\x00", true)
++}
++
++func MkcgoUnload_version() {
++	_mkcgo_OPENSSL_version_major = 0
++	_mkcgo_OPENSSL_version_minor = 0
++	_mkcgo_OPENSSL_version_patch = 0
++	_mkcgo_OpenSSL_version_num = 0
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..f3377d72c8aa46
+index 00000000000000..b03b43d33e6f4f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,384 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,363 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
 +package openssl
 +
-+/*
-+#include <stdlib.h> // for free()
-+
-+static inline void
-+go_openssl_do_leak_check(void)
-+{
-+#ifndef __has_feature
-+#define __has_feature(x) 0
-+#endif
-+
-+#if (defined(__SANITIZE_ADDRESS__) && __SANITIZE_ADDRESS__) ||	\
-+    __has_feature(address_sanitizer)
-+    extern void __lsan_do_leak_check(void);
-+    __lsan_do_leak_check();
-+#endif
-+}
-+*/
-+import "C"
 +import (
 +	"errors"
 +	"math/bits"
@@ -11019,7 +16337,7 @@ index 00000000000000..f3377d72c8aa46
 +
 +// VersionText returns the version text of the OpenSSL currently loaded.
 +func VersionText() string {
-+	return C.GoString((*C.char)(unsafe.Pointer(ossl.OpenSSL_version(0))))
++	return goString(ossl.OpenSSL_version(0))
 +}
 +
 +// FIPS returns true if OpenSSL is running in FIPS mode and there is
@@ -11086,9 +16404,7 @@ index 00000000000000..f3377d72c8aa46
 +	if vMajor == 1 {
 +		return false
 +	}
-+	providerName := C.CString(name)
-+	defer C.free(unsafe.Pointer(providerName))
-+	return ossl.OSSL_PROVIDER_available(nil, (*byte)(unsafe.Pointer(providerName))) == 1
++	return ossl.OSSL_PROVIDER_available(nil, unsafe.StringData(name+"\x00")) == 1
 +}
 +
 +// SetFIPS enables or disables FIPS mode.
@@ -11187,6 +16503,9 @@ index 00000000000000..f3377d72c8aa46
 +	return unsafe.SliceData(b)
 +}
 +
++//go:linkname throw runtime.throw
++func throw(string)
++
 +// cryptoMalloc allocates n bytes of memory on the OpenSSL heap, which may be
 +// different from the heap which C.malloc allocates on. The allocated object
 +// must be freed using cryptoFree. cryptoMalloc is equivalent to the
@@ -11203,7 +16522,7 @@ index 00000000000000..f3377d72c8aa46
 +	if p == nil {
 +		// Un-recover()-ably crash the program in the same manner as the
 +		// C.malloc() wrapper function.
-+		runtime_throw("openssl: CRYPTO_malloc failed")
++		throw("openssl: CRYPTO_malloc failed")
 +	}
 +	return p
 +}
@@ -11280,10 +16599,6 @@ index 00000000000000..f3377d72c8aa46
 +	return err
 +}
 +
-+func CheckLeaks() {
-+	C.go_openssl_do_leak_check()
-+}
-+
 +// versionAtOrAbove returns true when
 +// (vMajor, vMinor, vPatch) >= (major, minor, patch),
 +// compared lexicographically.
@@ -11296,17 +16611,76 @@ index 00000000000000..f3377d72c8aa46
 +	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
 +		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
 new file mode 100644
-index 00000000000000..a5b6cdb9ae6336
+index 00000000000000..c35f1bdcbef80b
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-@@ -0,0 +1,185 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
+@@ -0,0 +1,16 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
 +import "C"
++import "unsafe"
++
++// goString converts a C string pointer to a Go string for cgo mode
++func goString(ptr *byte) string {
++	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
++}
++
++// goBytes converts a C byte array to a Go byte slice for cgo mode
++func goBytes(ptr unsafe.Pointer, length int) []byte {
++	return C.GoBytes(ptr, C.int(length))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
+new file mode 100644
+index 00000000000000..c464f41a5076fb
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
+@@ -0,0 +1,32 @@
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package openssl
++
++import "unsafe"
++
++// goString converts a C string pointer to a Go string for nocgo mode
++func goString(ptr *byte) string {
++	if ptr == nil {
++		return ""
++	}
++	var result []byte
++	for i := 0; ; i++ {
++		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
++		if b == 0 {
++			break
++		}
++		result = append(result, b)
++	}
++	return string(result)
++}
++
++// goBytes converts a C byte array to a Go byte slice for nocgo mode
++func goBytes(ptr unsafe.Pointer, length int) []byte {
++	if ptr == nil || length == 0 {
++		return nil
++	}
++	// Copy the data to Go memory, similar to C.GoBytes
++	result := make([]byte, length)
++	copy(result, unsafe.Slice((*byte)(ptr), length))
++	return result
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+new file mode 100644
+index 00000000000000..a9310fd6ec4721
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
+@@ -0,0 +1,184 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package openssl
++
 +import (
 +	"runtime"
 +
@@ -11489,15 +16863,14 @@ index 00000000000000..a5b6cdb9ae6336
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..ace373e6d7bb0f
+index 00000000000000..939b88d31c80c0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-@@ -0,0 +1,55 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,54 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"errors"
 +	"hash"
@@ -11550,11 +16923,11 @@ index 00000000000000..ace373e6d7bb0f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 new file mode 100644
-index 00000000000000..1d8f3ad00ead7e
+index 00000000000000..767fbda4053df8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 @@ -0,0 +1,239 @@
-+//go:build !cmd_go_bootstrap && cgo
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
@@ -11795,11 +17168,11 @@ index 00000000000000..1d8f3ad00ead7e
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 new file mode 100644
-index 00000000000000..693849f152f9c1
+index 00000000000000..004d1f32799708
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 @@ -0,0 +1,338 @@
-+//go:build !cmd_go_bootstrap && cgo
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
@@ -12139,15 +17512,14 @@ index 00000000000000..693849f152f9c1
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 new file mode 100644
-index 00000000000000..34f376bed8f091
+index 00000000000000..3c70b19cce3513
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
-@@ -0,0 +1,22 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,21 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import "github.com/golang-fips/openssl/v2/internal/ossl"
 +
 +type randReader int
@@ -12167,15 +17539,14 @@ index 00000000000000..34f376bed8f091
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 new file mode 100644
-index 00000000000000..b585668e281d2a
+index 00000000000000..e933228919296d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-@@ -0,0 +1,69 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,68 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"runtime"
 +
@@ -12242,15 +17613,14 @@ index 00000000000000..b585668e281d2a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..7c1a3f06f5ec40
+index 00000000000000..59e3eb5acc07f8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,366 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,365 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto"
 +	"crypto/subtle"
@@ -12614,15 +17984,14 @@ index 00000000000000..7c1a3f06f5ec40
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..55fc0332c22d74
+index 00000000000000..f28cebc2b944cf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-@@ -0,0 +1,159 @@
-+//go:build !cmd_go_bootstrap
+@@ -0,0 +1,158 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "C"
 +import (
 +	"crypto"
 +	"errors"
@@ -12779,13 +18148,13 @@ index 00000000000000..55fc0332c22d74
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 new file mode 100644
-index 00000000000000..e60a5dde390be6
+index 00000000000000..a40affbb5d6273
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 @@ -0,0 +1,86 @@
 +// Code generated by cmd/genaesmodes. DO NOT EDIT.
 +
-+//go:build cgo && !cmd_go_bootstrap
++//go:build (cgo || goexperiment.ms_nocgo_opensslcrypto) && !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -21404,14 +26773,15 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index a2a0c0b3e85f23..3b04f684e7203c 100644
+index a2a0c0b3e85f23..937a48ef603334 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,20 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20250725144648-7a97d5786d1f
+@@ -1,3 +1,21 @@
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
++github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
 +## explicit; go 1.22

From d73fa0d88439bed17a1ac749c848a430b6dbaa29 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 15 Oct 2025 09:41:08 +0100
Subject: [PATCH 512/887] fixup sha allocations test

---
 patches/0004-Use-crypto-backends.patch | 49 +++++++++++++++++---------
 1 file changed, 33 insertions(+), 16 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 9079fd82565..c32bbc19407 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -66,7 +66,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
- src/crypto/sha256/sha256_test.go              |  35 +++-
+ src/crypto/sha256/sha256_test.go              |  44 ++--
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
@@ -93,7 +93,7 @@ Subject: [PATCH] Use crypto backends
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
  src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 89 files changed, 1164 insertions(+), 117 deletions(-)
+ 89 files changed, 1172 insertions(+), 119 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -256,10 +256,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 5f5ebfc1d9855c..5272a7aed714df 100644
+index 2c861129b52f9a..851e6ad02dc722 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1180,6 +1180,8 @@ var hostobj []Hostobj
+@@ -1176,6 +1176,8 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -2203,10 +2203,10 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index 11b24db7d6b0a0..837ace4f7200fb 100644
+index a18a536ba2896f..ca18239b3e2af7 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
-@@ -8,8 +8,10 @@ package sha256
+@@ -8,10 +8,13 @@ package sha256
  
  import (
  	"bytes"
@@ -2216,8 +2216,11 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
 +	"errors"
  	"fmt"
  	"hash"
++	"internal/goexperiment"
  	"io"
-@@ -163,6 +165,9 @@ func testGoldenMarshal(t *testing.T) {
+ 	"testing"
+ )
+@@ -163,6 +166,9 @@ func testGoldenMarshal(t *testing.T) {
  
  				state, err := h.(encoding.BinaryMarshaler).MarshalBinary()
  				if err != nil {
@@ -2227,7 +2230,7 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  					t.Errorf("could not marshal: %v", err)
  					continue
  				}
-@@ -256,6 +261,9 @@ func TestMarshalTypeMismatch(t *testing.T) {
+@@ -256,6 +262,9 @@ func TestMarshalTypeMismatch(t *testing.T) {
  
  	state1, err := h1.(encoding.BinaryMarshaler).MarshalBinary()
  	if err != nil {
@@ -2237,7 +2240,7 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  		t.Errorf("could not marshal: %v", err)
  	}
  
-@@ -325,10 +333,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
+@@ -325,10 +334,18 @@ func safeSum(h hash.Hash) (sum []byte, err error) {
  	return h.Sum(nil), nil
  }
  func TestLargeHashes(t *testing.T) {
@@ -2256,7 +2259,7 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  			t.Errorf("test %d could not unmarshal: %v", i, err)
  			continue
  		}
-@@ -347,6 +363,10 @@ func TestLargeHashes(t *testing.T) {
+@@ -347,6 +364,10 @@ func TestLargeHashes(t *testing.T) {
  
  func TestAllocations(t *testing.T) {
  	cryptotest.SkipTestAllocations(t)
@@ -2267,7 +2270,7 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  	if n := testing.AllocsPerRun(10, func() {
  		in := []byte("hello, world!")
  		out := make([]byte, 0, Size)
-@@ -357,17 +377,10 @@ func TestAllocations(t *testing.T) {
+@@ -357,17 +378,10 @@ func TestAllocations(t *testing.T) {
  			h.Write(in)
  			out = h.Sum(out[:0])
  		}
@@ -2287,7 +2290,7 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  	}
  }
  
-@@ -404,13 +417,13 @@ func TestExtraMethods(t *testing.T) {
+@@ -404,13 +418,13 @@ func TestExtraMethods(t *testing.T) {
  	t.Run("SHA-224", func(t *testing.T) {
  		cryptotest.TestAllImplementations(t, "sha256", func(t *testing.T) {
  			h := maybeCloner(New224())
@@ -2303,6 +2306,20 @@ index 11b24db7d6b0a0..837ace4f7200fb 100644
  		})
  	})
  }
+@@ -481,7 +495,11 @@ func TestAllocatonsWithTypeAsserts(t *testing.T) {
+ 		marshaled, _ = h.(encoding.BinaryAppender).AppendBinary(marshaled[:0])
+ 		h.(encoding.BinaryUnmarshaler).UnmarshalBinary(marshaled)
+ 	})
+-	if allocs != 0 {
+-		t.Fatalf("allocs = %v; want = 0", allocs)
++	expectedAllocs := 0
++	if goexperiment.SystemCrypto {
++		expectedAllocs = 1
++	}
++	if allocs != float64(expectedAllocs) {
++		t.Fatalf("allocs = %v; want = %v", allocs, expectedAllocs)
+ 	}
+ }
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
 index 1435eac1f5b5dc..17e8501154762a 100644
 --- a/src/crypto/sha512/sha512.go
@@ -2936,10 +2953,10 @@ index 5595f99ea5e43a..e1a87fa839033a 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 31eb47ae249a0e..6f6b0aa62485ac 100644
+index e1dd6331d96052..1cfca2f1634837 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -524,7 +524,7 @@ var depsRules = `
+@@ -526,7 +526,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2948,7 +2965,7 @@ index 31eb47ae249a0e..6f6b0aa62485ac 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -549,6 +549,8 @@ var depsRules = `
+@@ -551,6 +551,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2957,7 +2974,7 @@ index 31eb47ae249a0e..6f6b0aa62485ac 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -591,6 +593,7 @@ var depsRules = `
+@@ -593,6 +595,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 575ef4b9e7e5018f857e32840f65ebfd11e64f57 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 15 Oct 2025 11:14:56 +0100
Subject: [PATCH 513/887] fixup sha allocations test

---
 patches/0004-Use-crypto-backends.patch | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index c32bbc19407..b0486a67d65 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -2203,7 +2203,7 @@ index 069938a22dbc5a..8d0e06b86f4359 100644
  	}
  	h := New224()
 diff --git a/src/crypto/sha256/sha256_test.go b/src/crypto/sha256/sha256_test.go
-index a18a536ba2896f..ca18239b3e2af7 100644
+index a18a536ba2896f..7b3b37c3b0c10d 100644
 --- a/src/crypto/sha256/sha256_test.go
 +++ b/src/crypto/sha256/sha256_test.go
 @@ -8,10 +8,13 @@ package sha256
@@ -2312,12 +2312,12 @@ index a18a536ba2896f..ca18239b3e2af7 100644
  	})
 -	if allocs != 0 {
 -		t.Fatalf("allocs = %v; want = 0", allocs)
-+	expectedAllocs := 0
++	maxAllocs := 0
 +	if goexperiment.SystemCrypto {
-+		expectedAllocs = 1
++		maxAllocs = 2
 +	}
-+	if allocs != float64(expectedAllocs) {
-+		t.Fatalf("allocs = %v; want = %v", allocs, expectedAllocs)
++	if allocs > float64(maxAllocs) {
++		t.Fatalf("allocs = %v; want <= %v", allocs, maxAllocs)
  	}
  }
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go

From d1041e3581fdc6c4b61ca59c670facee65cfc932 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 15 Oct 2025 16:02:59 +0000
Subject: [PATCH 514/887] Update submodule to latest master (5b29875c): cmd/go:
 inject State parameter into `run.runRun`

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 5368e774297..5b29875c8eb 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 5368e7742971c8dbcb75a405eb2319e71fb1d0c7
+Subproject commit 5b29875c8eb1002c4509eb9ebd9a4d32cfd7d494

From 4914e8c26600c857d6e56bcf17576bf827770c7f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 16 Oct 2025 19:10:44 +0200
Subject: [PATCH 515/887] Support cgoless openssl backend behind goexperiment
 (#1903)

* support cgoless openssl backend behind goexperiment

* fix eol

* fix stage names

* fix exp check

* fix build constraints

* fix test

* fix tests

* upgrade openssl

* fix conflict

* bump openssl
---
 .../stages/go-builder-matrix-stages.yml       |   4 +
 .../stages/shorthand-builders-to-builders.yml |   2 +-
 .../0001-Vendor-external-dependencies.patch   | 133 ++++++++++--------
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  44 +++++-
 ...03-Implement-crypto-internal-backend.patch | 109 +++++++++-----
 5 files changed, 188 insertions(+), 104 deletions(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 61849c80c1d..63301de3875 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -90,9 +90,13 @@ stages:
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, fips: true }
+          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, fips: true }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
+          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: ubuntu }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
+          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
+          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: azurelinux3, fips: true }
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: devscript }
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
diff --git a/eng/pipeline/stages/shorthand-builders-to-builders.yml b/eng/pipeline/stages/shorthand-builders-to-builders.yml
index 25d6157bc0c..50ddb375a48 100644
--- a/eng/pipeline/stages/shorthand-builders-to-builders.yml
+++ b/eng/pipeline/stages/shorthand-builders-to-builders.yml
@@ -38,7 +38,7 @@ stages:
           - ${{ insert }}: ${{ builder }}
             # Use 'default' in place of null to define ID. This value just needs to be unique and
             # only contain "[A-z_]+".
-            id: ${{ builder.os }}_${{ coalesce(builder.distro, 'default') }}_${{ coalesce(builder.hostArch, 'default') }}_${{ builder.arch }}_${{ builder.config }}_${{ coalesce(builder.experiment, 'default') }}_${{ coalesce(builder.fips, false) }}
+            id: ${{ builder.os }}_${{ coalesce(builder.distro, 'default') }}_${{ coalesce(builder.hostArch, 'default') }}_${{ builder.arch }}_${{ builder.config }}_${{ coalesce(replace(builder.experiment, ',', '_'), 'default') }}_${{ coalesce(builder.fips, false) }}
             ${{ if not(builder.hostArch) }}:
               hostArch: ${{ builder.arch }}
             ${{ if and(not(builder.distro), eq(builder.os, 'windows')) }}:
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index b47eb55c77b..9dfd785cc4c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -83,11 +83,11 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/symbols.go    |  225 ++
  .../v2/internal/fakecgo/symbols_darwin.go     |   30 +
  .../v2/internal/fakecgo/symbols_linux.go      |  277 ++
- .../v2/internal/fakecgo/trampolines_amd64.s   |  104 +
- .../v2/internal/fakecgo/trampolines_arm64.s   |   72 +
+ .../v2/internal/fakecgo/trampolines_amd64.s   |  112 +
+ .../v2/internal/fakecgo/trampolines_arm64.s   |   82 +
  .../v2/internal/fakecgo/trampolines_stubs.s   |   94 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
- .../fakecgo/ztrampolines_linux_arm64.s        |  103 +
+ .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |   73 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   83 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
@@ -180,7 +180,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   18 +
- 172 files changed, 24287 insertions(+), 7 deletions(-)
+ 172 files changed, 24296 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2003,7 +2003,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f134f0c7b571da..7a86899914be85 100644
+index f134f0c7b571da..7515443e6e15d5 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2012,17 +2012,17 @@ index f134f0c7b571da..7a86899914be85 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index f24bea029a2239..6f63f50be10d91 100644
+index f24bea029a2239..33e06348c353ce 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b h1:Fc+ydbkWZuwSwF6RK20jaBJQHn87SBQ6PAAFk14xAbs=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404 h1:A+29iZp7zVSTlS7hvpb7u2DIz0+woEDubEj85N9rDhQ=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05 h1:I6L7NzERXHhyif6YpLgL8GTvSbF8ac3j1bwUBDri9Fo=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
@@ -7743,7 +7743,7 @@ index 00000000000000..8c4489f0369c25
 +//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
 new file mode 100644
-index 00000000000000..a890cacc7147b2
+index 00000000000000..85728bb394c248
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
 @@ -0,0 +1,277 @@
@@ -7798,55 +7798,55 @@ index 00000000000000..a890cacc7147b2
 +
 +//go:nosplit
 +//go:norace
-+func setegid(egid int) int32 {
++func setegid(egid uint32) int32 {
 +	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func seteuid(euid int) int32 {
++func seteuid(euid uint32) int32 {
 +	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setgid(gid int) int32 {
++func setgid(gid uint32) int32 {
 +	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setregid(rgid int, egid int) int32 {
++func setregid(rgid uint32, egid uint32) int32 {
 +	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setresgid(rgid int, egid int, sgid int) int32 {
++func setresgid(rgid uint32, egid uint32, sgid uint32) int32 {
 +	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setresuid(ruid int, euid int, suid int) int32 {
++func setresuid(ruid uint32, euid uint32, suid uint32) int32 {
 +	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setreuid(ruid int, euid int) int32 {
++func setreuid(ruid uint32, euid uint32) int32 {
 +	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setuid(uid int) int32 {
++func setuid(uid uint32) int32 {
 +	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
 +}
 +
 +//go:nosplit
 +//go:norace
-+func setgroups(ngid int, gidset *int) int32 {
++func setgroups(ngid uint32, gidset *uint32) int32 {
 +	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
 +}
 +
@@ -7897,7 +7897,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setegid(c *argset) {
-+	ret := setegid(int(uintptr(c.arg(0))))
++	ret := setegid(uint32(uintptr(c.arg(0))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7912,7 +7912,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_seteuid(c *argset) {
-+	ret := seteuid(int(uintptr(c.arg(0))))
++	ret := seteuid(uint32(uintptr(c.arg(0))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7927,7 +7927,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setgid(c *argset) {
-+	ret := setgid(int(uintptr(c.arg(0))))
++	ret := setgid(uint32(uintptr(c.arg(0))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7942,7 +7942,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setregid(c *argset) {
-+	ret := setregid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))))
++	ret := setregid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7957,7 +7957,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setresgid(c *argset) {
-+	ret := setresgid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))), int(uintptr(c.arg(2))))
++	ret := setresgid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7972,7 +7972,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setresuid(c *argset) {
-+	ret := setresuid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))), int(uintptr(c.arg(2))))
++	ret := setresuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -7987,7 +7987,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setreuid(c *argset) {
-+	ret := setreuid(int(uintptr(c.arg(0))), int(uintptr(c.arg(1))))
++	ret := setreuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -8002,7 +8002,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setuid(c *argset) {
-+	ret := setuid(int(uintptr(c.arg(0))))
++	ret := setuid(uint32(uintptr(c.arg(0))))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -8017,7 +8017,7 @@ index 00000000000000..a890cacc7147b2
 +//go:nosplit
 +//go:norace
 +func x_cgo_purego_setgroups(c *argset) {
-+	ret := setgroups(int(uintptr(c.arg(0))), (*int)(c.arg(1)))
++	ret := setgroups(uint32(uintptr(c.arg(0))), (*uint32)(c.arg(1)))
 +	if ret == -1 {
 +		c.retval = uintptr(errno())
 +	} else {
@@ -8026,10 +8026,10 @@ index 00000000000000..a890cacc7147b2
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
-index 00000000000000..fb0c77210562e9
+index 00000000000000..7c72b78a866bbd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,104 @@
+@@ -0,0 +1,112 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -8057,6 +8057,7 @@ index 00000000000000..fb0c77210562e9
 +*/
 +#include "textflag.h"
 +#include "go_asm.h"
++#include "abi_amd64.h"
 +
 +// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
 +
@@ -8105,11 +8106,18 @@ index 00000000000000..fb0c77210562e9
 +	CALL BX
 +	RET
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $16
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	PXOR	X15, X15
++
 +	MOVQ DI, AX
 +	MOVQ ·threadentry_call(SB), DX
 +	MOVQ (DX), CX
 +	CALL CX
++
++	POP_REGS_HOST_TO_ABI0()
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-56
@@ -8136,10 +8144,10 @@ index 00000000000000..fb0c77210562e9
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..e943f137d30225
+index 00000000000000..2a03bc53f1c39c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,72 @@
+@@ -0,0 +1,82 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -8147,33 +8155,29 @@ index 00000000000000..e943f137d30225
 +
 +#include "textflag.h"
 +#include "go_asm.h"
++#include "abi_arm64.h"
 +
 +// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
-+	MOVD R1, 16(RSP)
 +	MOVD ·x_cgo_init_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_thread_start_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_setenv_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_unsetenv_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
@@ -8195,11 +8199,25 @@ index 00000000000000..e943f137d30225
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
 +	MOVD ·threadentry_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	MOVD $0, R0                     // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-0
@@ -8314,7 +8332,7 @@ index 00000000000000..dcd1412237a0a3
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
 new file mode 100644
-index 00000000000000..771f4ba36ce7c9
+index 00000000000000..603cd6802eea20
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
 @@ -0,0 +1,103 @@
@@ -8331,7 +8349,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT ___errno_location(SB), NOSPLIT, $0-0
 +	JMP purego___errno_location(SB)
 +
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setegid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8341,7 +8359,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setegid(SB), NOSPLIT, $0-0
 +	JMP purego_setegid(SB)
 +
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_seteuid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8351,7 +8369,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _seteuid(SB), NOSPLIT, $0-0
 +	JMP purego_seteuid(SB)
 +
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setgid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8361,7 +8379,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setgid(SB), NOSPLIT, $0-0
 +	JMP purego_setgid(SB)
 +
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setregid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8371,7 +8389,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setregid(SB), NOSPLIT, $0-0
 +	JMP purego_setregid(SB)
 +
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setresgid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8381,7 +8399,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setresgid(SB), NOSPLIT, $0-0
 +	JMP purego_setresgid(SB)
 +
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setresuid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8391,7 +8409,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setresuid(SB), NOSPLIT, $0-0
 +	JMP purego_setresuid(SB)
 +
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setreuid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8401,7 +8419,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setreuid(SB), NOSPLIT, $0-0
 +	JMP purego_setreuid(SB)
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setuid_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8411,7 +8429,7 @@ index 00000000000000..771f4ba36ce7c9
 +TEXT _setuid(SB), NOSPLIT, $0-0
 +	JMP purego_setuid(SB)
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
 +	MOVQ	DI, AX
 +	MOVQ	·x_cgo_purego_setgroups_call(SB), DX
 +	MOVQ	(DX), CX
@@ -8423,10 +8441,10 @@ index 00000000000000..771f4ba36ce7c9
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
 new file mode 100644
-index 00000000000000..019837bf469751
+index 00000000000000..b5aeb4b47a2e55
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
-@@ -0,0 +1,103 @@
+@@ -0,0 +1,94 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8441,7 +8459,6 @@ index 00000000000000..019837bf469751
 +	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setegid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8451,7 +8468,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setegid(SB)
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_seteuid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8461,7 +8477,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_seteuid(SB)
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setgid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8471,7 +8486,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setgid(SB)
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setregid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8481,7 +8495,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setregid(SB)
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setresgid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8491,7 +8504,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setresgid(SB)
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setresuid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8501,7 +8513,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setresuid(SB)
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setreuid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8511,7 +8522,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setreuid(SB)
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setuid_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -8521,7 +8531,6 @@ index 00000000000000..019837bf469751
 +	JMP purego_setuid(SB)
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVD	R0, 8(RSP)
 +	MOVD	·x_cgo_purego_setgroups_call(SB), R26
 +	MOVD	(R26), R2
 +	CALL	(R2)
@@ -26773,11 +26782,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index a2a0c0b3e85f23..937a48ef603334 100644
+index a2a0c0b3e85f23..e9939cbd43e3c5 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,21 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251010102802-436be240916b
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404
 +## explicit; go 1.22
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index ea5aa831294..083e9c75ec5 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -24,12 +24,14 @@ maintain this feature. For more information, see the test files.
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
  .../goexperiment/exp_darwincrypto_on.go       |  8 ++
+ .../exp_ms_nocgo_opensslcrypto_off.go         |  8 ++
+ .../exp_ms_nocgo_opensslcrypto_on.go          |  8 ++
  .../goexperiment/exp_opensslcrypto_off.go     |  8 ++
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 401 insertions(+), 4 deletions(-)
+ src/internal/goexperiment/flags.go            | 22 +++++
+ 20 files changed, 421 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -40,6 +42,8 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_on.go
+ create mode 100644 src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
+ create mode 100644 src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
@@ -537,6 +541,34 @@ index 00000000000000..4bf785b999ecce
 +
 +const DarwinCrypto = true
 +const DarwinCryptoInt = 1
+diff --git a/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
+new file mode 100644
+index 00000000000000..d6448ed71cc83e
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build !goexperiment.ms_nocgo_opensslcrypto
++
++package goexperiment
++
++const MS_Nocgo_OpenSSLCrypto = false
++const MS_Nocgo_OpenSSLCryptoInt = 0
+diff --git a/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
+new file mode 100644
+index 00000000000000..b2faba81e67362
+--- /dev/null
++++ b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
+@@ -0,0 +1,8 @@
++// Code generated by mkconsts.go. DO NOT EDIT.
++
++//go:build goexperiment.ms_nocgo_opensslcrypto
++
++package goexperiment
++
++const MS_Nocgo_OpenSSLCrypto = true
++const MS_Nocgo_OpenSSLCryptoInt = 1
 diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
 new file mode 100644
 index 00000000000000..b28c0976a94cb0
@@ -594,10 +626,10 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 07aa1d0aeed15d..643700e55830e4 100644
+index 07aa1d0aeed15d..180e1db72bfdbc 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,24 @@ type Flags struct {
+@@ -59,6 +59,28 @@ type Flags struct {
  	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
@@ -619,6 +651,10 @@ index 07aa1d0aeed15d..643700e55830e4 100644
 +	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
 +	// being used to build the Go program.
 +	SystemCrypto bool
++
++	// MS_Nocgo_OpenSSLCrypto enables the OpenSSL crypto backend
++	// to be used in builds that do not use cgo.
++	MS_Nocgo_OpenSSLCrypto bool
  
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 56d55687af0..61f82b27f8d 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -50,12 +50,13 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/nobackend.go      | 251 ++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/systemcrypto_nocgo.go              |  15 +
+ src/crypto/systemcrypto_nocgo_darwin.go       |  15 +
+ src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
- src/internal/buildcfg/exp.go                  |  54 +++
+ src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
- src/syscall/exec_linux_test.go                |   2 +-
- 46 files changed, 2318 insertions(+), 22 deletions(-)
+ src/syscall/exec_linux_test.go                |   4 +
+ 47 files changed, 2339 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -82,7 +83,8 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/crypto/systemcrypto_nocgo.go
+ create mode 100644 src/crypto/systemcrypto_nocgo_darwin.go
+ create mode 100644 src/crypto/systemcrypto_nocgo_linux.go
 
 diff --git a/.gitignore b/.gitignore
 index c6512e64a4ef39..b3b01db73b009d 100644
@@ -160,7 +162,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 9a7951726f6f04..a09cdd9550cbab 100644
+index 9a7951726f6f04..53a2da17665ecc 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1387,6 +1387,80 @@ func toolenv() []string {
@@ -211,7 +213,7 @@ index 9a7951726f6f04..a09cdd9550cbab 100644
 +		}
 +		goexp := strings.Split(value, ",")
 +		goexp = slices.DeleteFunc(goexp, func(s string) bool {
-+			return s == "systemcrypto" || s == "nosystemcrypto"
++			return s == "systemcrypto" || s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
 +		})
 +		goexp = append(goexp, "nosystemcrypto")
 +		return strings.Join(goexp, ",")
@@ -261,7 +263,7 @@ index 9a7951726f6f04..a09cdd9550cbab 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1e74438f48db39..6c31b623897048 100644
+index 1e74438f48db39..53e2bc09d4ee6d 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -316,7 +318,7 @@ index 1e74438f48db39..6c31b623897048 100644
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
 +		var tags, env []string
-+		if goos != "windows" {
++		if goos == "darwin" || (goos == "linux" && !strings.Contains(goexperiment, "ms_nocgo_opensslcrypto")) {
 +			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
 +			tags = append(tags, "ms_skipfipscheck")
 +			env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
@@ -695,7 +697,7 @@ index c5aa91ba4732e7..9e838fa785af46 100644
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index d913953944bc43..daa8aa3d964ed0 100644
+index d913953944bc43..3349e53cd07809 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -44,6 +44,7 @@ import (
@@ -718,7 +720,7 @@ index d913953944bc43..daa8aa3d964ed0 100644
 +		// the buildVersion string, and many code out there, e.g. the standard library
 +		// go/version package, doesn't expect the version to contain experiments.
 +		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
-+			return s == "nosystemcrypto"
++			return s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
 +		}), ",")
 +		if goexperiment != "" {
 +			buildVersion += " X:" + goexperiment
@@ -1842,7 +1844,7 @@ index 00000000000000..289d6594eac54b
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl_cgo.go b/src/crypto/internal/backend/fips140/openssl_cgo.go
 new file mode 100644
-index 00000000000000..a24db78572f528
+index 00000000000000..9bf15a24d3a4f4
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl_cgo.go
 @@ -0,0 +1,59 @@
@@ -1850,7 +1852,7 @@ index 00000000000000..a24db78572f528
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && cgo
++//go:build goexperiment.opensslcrypto && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package fips140
 +
@@ -1907,7 +1909,7 @@ index 00000000000000..a24db78572f528
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl_nocgo.go b/src/crypto/internal/backend/fips140/openssl_nocgo.go
 new file mode 100644
-index 00000000000000..a8ff666b6d182e
+index 00000000000000..ae8274aa38579f
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl_nocgo.go
 @@ -0,0 +1,17 @@
@@ -1915,7 +1917,7 @@ index 00000000000000..a8ff666b6d182e
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !cgo
++//go:build goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// The opensslcrypto experiment can be used even when cgo
 +// is disabled. The OpenSSL backend can't be imported
@@ -1981,7 +1983,7 @@ index 00000000000000..d3d39fd77f98db
 +const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
-index 00000000000000..d816f1be17b6a1
+index 00000000000000..eda4bde128ae46
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 @@ -0,0 +1,68 @@
@@ -1989,7 +1991,7 @@ index 00000000000000..d816f1be17b6a1
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && cgo
++//go:build goexperiment.opensslcrypto && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// opensslsetup is a package that initializes the OpenSSL library.
 +// It doesn't export any symbol, but blank importing it has the
@@ -2167,7 +2169,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..ce267825dc6ddc
+index 00000000000000..a59c6cc736c6da
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,251 @@
@@ -2175,7 +2177,7 @@ index 00000000000000..ce267825dc6ddc
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.systemcrypto || ((goexperiment.opensslcrypto || goexperiment.darwincrypto) && !cgo)
++//go:build !goexperiment.systemcrypto || (goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto)) || (goexperiment.darwincrypto && !cgo)
 +
 +package backend
 +
@@ -2424,7 +2426,7 @@ index 00000000000000..ce267825dc6ddc
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..02c3c67f822ae2
+index 00000000000000..882b1e5340a570
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,332 @@
@@ -2432,7 +2434,7 @@ index 00000000000000..02c3c67f822ae2
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && linux && cgo
++//go:build goexperiment.opensslcrypto && linux && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// Package openssl provides access to OpenSSLCrypto implementation functions.
 +// Check the variable Enabled to find out whether OpenSSLCrypto is available.
@@ -2776,29 +2778,50 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/systemcrypto_nocgo.go b/src/crypto/systemcrypto_nocgo.go
+diff --git a/src/crypto/systemcrypto_nocgo_darwin.go b/src/crypto/systemcrypto_nocgo_darwin.go
 new file mode 100644
-index 00000000000000..13782a8241b99a
+index 00000000000000..aed8fc5e152405
 --- /dev/null
-+++ b/src/crypto/systemcrypto_nocgo.go
++++ b/src/crypto/systemcrypto_nocgo_darwin.go
 @@ -0,0 +1,15 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && (goexperiment.opensslcrypto || goexperiment.darwincrypto)
++//go:build goexperiment.darwincrypto && !cgo
 +
 +package crypto
 +
 +func init() {
 +	`
-+	Using a crypto backend requires CGO_ENABLED=1.
++	Using GOEXPERIMENT=systemcrypto on Darwin requires CGO_ENABLED=1.
++	
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
+new file mode 100644
+index 00000000000000..0d8474217df59e
+--- /dev/null
++++ b/src/crypto/systemcrypto_nocgo_linux.go
+@@ -0,0 +1,15 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto) && !amd64 && !arm64
++
++package crypto
++
++func init() {
++	`
++	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 +	
 +	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 7981fbcb6dd57d..e1dd6331d96052 100644
+index 3d726ec66b3c10..ed59db7bb24722 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -355,7 +355,7 @@ var depsRules = `
@@ -2810,7 +2833,7 @@ index 7981fbcb6dd57d..e1dd6331d96052 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -546,6 +546,11 @@ var depsRules = `
+@@ -547,6 +547,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2822,7 +2845,7 @@ index 7981fbcb6dd57d..e1dd6331d96052 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -554,16 +559,27 @@ var depsRules = `
+@@ -555,16 +560,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2852,7 +2875,7 @@ index 7981fbcb6dd57d..e1dd6331d96052 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -587,8 +603,14 @@ var depsRules = `
+@@ -588,8 +604,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -2870,7 +2893,7 @@ index 7981fbcb6dd57d..e1dd6331d96052 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 2c0995a449694a..19027a6be32850 100644
+index 0d1e9dd6d1171c..adf26041b0cf89 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -2889,7 +2912,7 @@ index 2c0995a449694a..19027a6be32850 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -199,6 +202,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -194,6 +197,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -2940,6 +2963,9 @@ index 2c0995a449694a..19027a6be32850 100644
 +			}
 +		}
 +	}
++	if flags.MS_Nocgo_OpenSSLCrypto && !flags.SystemCrypto {
++		errs = append(errs, "GOEXPERIMENT ms_nocgo_opensslcrypto requires systemcrypto")
++	}
 +	if len(errs) > 0 {
 +		errs = append(errs, "For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips")
 +		return nil, errors.New(strings.Join(errs, "\n\t"))
@@ -2961,15 +2987,24 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +	return boring_runtime_arg0()
 +}
 diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index 69d49169446d1c..0e6360a353f07f 100644
+index 69d49169446d1c..a710a533511d95 100644
 --- a/src/syscall/exec_linux_test.go
 +++ b/src/syscall/exec_linux_test.go
-@@ -300,7 +300,7 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
- 	})
+@@ -12,6 +12,7 @@ import (
+ 	"flag"
+ 	"fmt"
+ 	"internal/asan"
++	"internal/goexperiment"
+ 	"internal/platform"
+ 	"internal/syscall/unix"
+ 	"internal/testenv"
+@@ -301,6 +302,9 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
  
  	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
--	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
-+	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0", "MS_GO_NOSYSTEMCRYPTO=1")
+ 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
++	if !goexperiment.MS_Nocgo_OpenSSLCrypto {
++		cmd.Env = append(cmd.Env, "MS_GO_NOSYSTEMCRYPTO=1")
++	}
  	if o, err := cmd.CombinedOutput(); err != nil {
  		t.Fatalf("%v: %v\n%s", cmd, err, o)
  	}

From 69b9dfcbf9c075b79248925db4504a03e11072b1 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 20 Oct 2025 16:26:18 +0200
Subject: [PATCH 516/887] Fix nocgo build-time checks (#1916)

* fix nocgo build-time check

* fix test
---
 ...03-Implement-crypto-internal-backend.patch | 95 ++++++++++++++-----
 1 file changed, 72 insertions(+), 23 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 61f82b27f8d..ffa24aa43d6 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -14,12 +14,12 @@ desired goexperiments and build tags.
  .../compile/internal/ssa/stmtlines_test.go    |   1 -
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
- src/cmd/dist/test.go                          |  44 ++-
+ src/cmd/dist/test.go                          |  47 ++-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 154 ++++++++
+ src/cmd/go/systemcrypto_test.go               | 197 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -56,7 +56,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 47 files changed, 2339 insertions(+), 21 deletions(-)
+ 47 files changed, 2384 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -162,7 +162,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 9a7951726f6f04..53a2da17665ecc 100644
+index 2fcdb2d3915b9b..c04c50e69e4070 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1387,6 +1387,80 @@ func toolenv() []string {
@@ -263,7 +263,7 @@ index 9a7951726f6f04..53a2da17665ecc 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1e74438f48db39..53e2bc09d4ee6d 100644
+index 1e74438f48db39..1e9844174dbb5c 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -293,15 +293,21 @@ index 1e74438f48db39..53e2bc09d4ee6d 100644
  		}
  	}
  
-@@ -750,11 +752,18 @@ func (t *tester) registerTests() {
+@@ -746,15 +748,23 @@ func (t *tester) registerTests() {
+ 
+ 	// Test GOEXPERIMENT=jsonv2.
+ 	if !strings.Contains(goexperiment, "jsonv2") {
++		// Don't override existing GOEXPERIMENTs.
++		goexperiment := goexperiment
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "jsonv2"
+ 		t.registerTest("GOEXPERIMENT=jsonv2 go test encoding/json/...", &goTest{
  			variant: "jsonv2",
- 			env:     []string{"GOEXPERIMENT=jsonv2"},
+-			env:     []string{"GOEXPERIMENT=jsonv2"},
++			env:     []string{"GOEXPERIMENT=" + goexperiment},
  			pkg:     "encoding/json/...",
-+			// Skip FIPS checks. The test overrides GOEXPERIMENT,
-+			// so if we have been executed with GOEXPERIMENT=systemcrypto
-+			// and FIPS mode is required, then the test will fail because
-+			// the systemcrypto package will not be available.
-+			tags: []string{"ms_skipfipscheck"},
  		})
  	}
  
@@ -313,7 +319,7 @@ index 1e74438f48db39..53e2bc09d4ee6d 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -864,14 +873,21 @@ func (t *tester) registerTests() {
+@@ -864,14 +874,21 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -336,7 +342,7 @@ index 1e74438f48db39..53e2bc09d4ee6d 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -879,9 +895,10 @@ func (t *tester) registerTests() {
+@@ -879,9 +896,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -348,7 +354,7 @@ index 1e74438f48db39..53e2bc09d4ee6d 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -898,15 +915,22 @@ func (t *tester) registerTests() {
+@@ -898,15 +916,22 @@ func (t *tester) registerTests() {
  
  	if t.extLink() && !t.compileOnly {
  		if goos != "android" { // Android does not support non-PIE linking
@@ -372,7 +378,7 @@ index 1e74438f48db39..53e2bc09d4ee6d 100644
  				})
  		}
  		if t.externalLinkPIE() && !disablePIE {
-@@ -985,7 +1009,9 @@ func (t *tester) registerTests() {
+@@ -985,7 +1010,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -454,7 +460,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index 135d7579d65dff..687a781693b779 100644
+index cfaece2072dbb9..a8ef746a6a2048 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
@@ -468,7 +474,7 @@ index 135d7579d65dff..687a781693b779 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index e25c06a8f046bd..6192880b654cb5 100644
+index e95b07d8c813aa..8d93a5fc310b49 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
 @@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
@@ -497,10 +503,10 @@ index e25c06a8f046bd..6192880b654cb5 100644
  	buildAndRunTool(ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..d12c79c4713e51
+index 00000000000000..c4129cd74ee73d
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,154 @@
+@@ -0,0 +1,197 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -576,6 +582,49 @@ index 00000000000000..d12c79c4713e51
 +	return filepath.Join(t.TempDir(), "out")
 +}
 +
++func TestSystemCryptoNoCgoChecks(t *testing.T) {
++	t.Parallel()
++
++	cryptoFile := writeFile(t, fileWithCrypto)
++
++	tt := []struct {
++		goos    string
++		goarch  string
++		goexp   string
++		succeed bool
++	}{
++		{"linux", "amd64", "noms_nocgo_opensslcrypto", false}, // cgoless OpenSSL requires ms_nocgo_opensslcrypto on linux/amd64
++		{"linux", "arm64", "noms_nocgo_opensslcrypto", false}, // cgoless OpenSSL requires ms_nocgo_opensslcrypto on linux/arm64
++		{"linux", "ppc64le", "ms_nocgo_cngcrypto", false},     // cgoless OpenSSL not supported on linux/ppc64le
++		{"linux", "arm", "ms_nocgo_cngcrypto", false},         // cgoless OpenSSL not supported on linux/arm
++		{"linux", "amd64", "ms_nocgo_opensslcrypto", true},
++		{"linux", "arm64", "ms_nocgo_opensslcrypto", true},
++		{"darwin", "amd64", "", false}, // cgoless system crypto not supported on darwin/amd64
++		{"darwin", "arm64", "", false}, // cgoless system crypto not supported on darwin/arm64
++		{"windows", "386", "", false},  // cgoless system crypto not supported on windows/386
++		{"windows", "amd64", "", true},
++		{"windows", "arm64", "", true},
++	}
++	for _, tc := range tt {
++		t.Run(tc.goos+"/"+tc.goarch+"/"+tc.goexp, func(t *testing.T) {
++			t.Parallel()
++			if tc.goexp == "" {
++				tc.goexp = "systemcrypto"
++			} else {
++				tc.goexp += ",systemcrypto"
++			}
++			env := []string{"CGO_ENABLED=0", "GOOS=" + tc.goos, "GOARCH=" + tc.goarch, "GOEXPERIMENT=" + tc.goexp}
++			if out, ok := execGoTool(t, true, env, "build", "-o", outPath(t), cryptoFile); ok != tc.succeed {
++				if tc.succeed {
++					t.Fatalf("expected success, got failure: %s", out)
++				} else {
++					t.Fatalf("expected failure, got success")
++				}
++			}
++		})
++	}
++}
++
 +func TestSystemCryptoFIPS(t *testing.T) {
 +	// Test different go commands with GODEBUG=fips140=on
 +	// to exercise the ms_skipfipscheck build tag.
@@ -729,7 +778,7 @@ index d913953944bc43..3349e53cd07809 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 0125ba8e0f56be..2bc0b65f1035ed 100644
+index 31822d21f39d31..71d23e76f91e1b 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -9,6 +9,7 @@ import (
@@ -2801,7 +2850,7 @@ index 00000000000000..aed8fc5e152405
 +}
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..0d8474217df59e
+index 00000000000000..b79491c6cb7c08
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,15 @@
@@ -2809,7 +2858,7 @@ index 00000000000000..0d8474217df59e
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto) && !amd64 && !arm64
++//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (amd64 || arm64)))
 +
 +package crypto
 +

From 3debba53bcdbc6ebd2b40df6ab016f31e8b14744 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 16:02:49 +0000
Subject: [PATCH 517/887] Update submodule to latest master (a5f55a44):
 cmd/fix: add modernize and inline analyzers

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 5b29875c8eb..a5f55a441ef 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 5b29875c8eb1002c4509eb9ebd9a4d32cfd7d494
+Subproject commit a5f55a441ef497d8e2a12610f4ec2bd32fdc04b2

From e9dd77f66877d6298834307ca894d1606e49dc40 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 17:19:05 +0100
Subject: [PATCH 518/887] build(deps): bump github/codeql-action from 4.30.8 to
 4.30.9 (#1917)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.8 to 4.30.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f443b600d91635bebf5b0d9ebc620189c0d6fba5...16140ae1a102900babc80a33c44059580f687047)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ab7105ef4d2..4f55a9f0b35 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/autobuild@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
+        uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           category: /language:go

From f4b08f07e5418cc1ab726a3914fa5412b739678e Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 20 Oct 2025 17:39:37 +0100
Subject: [PATCH 519/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 26 +++++++++----------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 9dfd785cc4c..43cf435ce7e 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -347,7 +347,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 017883a7870cd2..f3aa8b075bb51e 100644
+index 1fc256ae6f2ce7..4bd5187444ff47 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -358,9 +358,9 @@ index 017883a7870cd2..f3aa8b075bb51e 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
  	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
- 	golang.org/x/mod v0.28.0
+ 	golang.org/x/mod v0.29.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 0906ffcc605854..a7292cfc44a710 100644
+index eb7af161552020..741109d5821e86 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -1953,7 +1953,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 133271355f2caf..d43e982ea529bc 100644
+index 7ae23d5b6cecf0..02440bec5b533e 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2003,12 +2003,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f134f0c7b571da..7515443e6e15d5 100644
+index c5e901b9ef22e8..07b9cf079dc510 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.36.0 // indirect
- 	golang.org/x/text v0.29.0 // indirect
+ 	golang.org/x/sys v0.37.0 // indirect
+ 	golang.org/x/text v0.30.0 // indirect
  )
 +
 +require (
@@ -2017,7 +2017,7 @@ index f134f0c7b571da..7515443e6e15d5 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index f24bea029a2239..33e06348c353ce 100644
+index 4a52682161fc23..2b2d09d2948721 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2027,9 +2027,9 @@ index f24bea029a2239..33e06348c353ce 100644
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
- golang.org/x/crypto v0.42.0 h1:chiH31gIWm57EkTXpwnqf8qeuMUi0yekh6mT2AvFlqI=
- golang.org/x/crypto v0.42.0/go.mod h1:4+rDnOTJhQCx2q7/j6rAN5XDw8kPjeaXEUR2eL94ix8=
- golang.org/x/net v0.44.1-0.20251002015445-edb764c2296f h1:vNklv+oJQSYNGsWXHoCPi2MHMcpj9/Q7aBhvvfnJvGg=
+ golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
+ golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
+ golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 8966254d0d9110..3d726ec66b3c10 100644
 --- a/src/go/build/deps_test.go
@@ -26782,7 +26782,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index a2a0c0b3e85f23..e9939cbd43e3c5 100644
+index f1e33686ed0626..33a7ff4e5c1614 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,21 @@
@@ -26804,6 +26804,6 @@ index a2a0c0b3e85f23..e9939cbd43e3c5 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.42.0
+ # golang.org/x/crypto v0.43.0
  ## explicit; go 1.24.0
  golang.org/x/crypto/chacha20

From 7f6c6358c2daad292f57b718a9ca4e29614c8df4 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 21 Oct 2025 17:56:04 +0200
Subject: [PATCH 520/887] update submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a5f55a441ef..b31dc77ceab 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a5f55a441ef497d8e2a12610f4ec2bd32fdc04b2
+Subproject commit b31dc77ceab962c0f4f5e4a9fc5e1a403fbd2d7c

From 5b06db94c2170f847f65d9ec17e066623dde4755 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 21 Oct 2025 17:58:30 +0200
Subject: [PATCH 521/887] resolve 3-way merge conflict

---
 ...03-Implement-crypto-internal-backend.patch | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index ffa24aa43d6..0374cf8d451 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -124,7 +124,7 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  		}
  
 diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
-index 8cd11e9828e0f9..4de8629a078d58 100644
+index d0f09da86ffce2..0f9e2867363d19 100644
 --- a/src/cmd/compile/internal/ssa/stmtlines_test.go
 +++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
 @@ -113,7 +113,6 @@ func TestStmtLines(t *testing.T) {
@@ -460,7 +460,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index cfaece2072dbb9..a8ef746a6a2048 100644
+index 554963240049e4..2a2647fde9ce91 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
@@ -474,10 +474,10 @@ index cfaece2072dbb9..a8ef746a6a2048 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index e95b07d8c813aa..8d93a5fc310b49 100644
+index 75a8fab78ad31b..57f1d79e89f36e 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
-@@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
+@@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
  	// Override GOOS and GOARCH for the build to build the tool using
  	// the same GOOS and GOARCH as this go command.
  	cfg.ForceHost()
@@ -488,8 +488,8 @@ index e95b07d8c813aa..8d93a5fc310b49 100644
  
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
-@@ -311,8 +315,11 @@ func buildAndRunBuiltinTool(ctx context.Context, toolName, tool string, args []s
- 	modload.LoaderState.RootMode = modload.NoRoot
+@@ -311,8 +315,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+ 	loaderstate.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
 +		// Now that the tool is built, revert the GOEXPERIMENT
@@ -500,7 +500,7 @@ index e95b07d8c813aa..8d93a5fc310b49 100644
 +		return runBuiltTool(toolName, env, cmdline)
  	}
  
- 	buildAndRunTool(ctx, tool, args, runFunc)
+ 	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
 index 00000000000000..c4129cd74ee73d
@@ -2870,7 +2870,7 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3d726ec66b3c10..ed59db7bb24722 100644
+index db5e6ba6d64978..569a7084c46f11 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -355,7 +355,7 @@ var depsRules = `
@@ -3036,7 +3036,7 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +	return boring_runtime_arg0()
 +}
 diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index 69d49169446d1c..a710a533511d95 100644
+index ac04e51b144cb3..f5dd63858bd61f 100644
 --- a/src/syscall/exec_linux_test.go
 +++ b/src/syscall/exec_linux_test.go
 @@ -12,6 +12,7 @@ import (
@@ -3047,7 +3047,7 @@ index 69d49169446d1c..a710a533511d95 100644
  	"internal/platform"
  	"internal/syscall/unix"
  	"internal/testenv"
-@@ -301,6 +302,9 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
+@@ -300,6 +301,9 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
  
  	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
  	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")

From 0d72a2813453562d32a325e47d68bf917c87668a Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 21 Oct 2025 16:57:29 -0700
Subject: [PATCH 522/887] Replace download table with 1.26 preview links

---
 .../cmd/updatelinktable/updatelinktable.go    |  19 +--
 eng/doc/Downloads.md                          |  39 +++--
 eng/doc/release-branch-links.json             | 161 +++++-------------
 3 files changed, 69 insertions(+), 150 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 6f72c6c6958..5a7e79cebbd 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -23,22 +23,7 @@ This command updates the table in ` + docPath + ` and data in ` + jsonPath + `.
 
 var supported = []version{
 	{
-		Number:       "1.25",
-		LatestStable: true,
-		Platforms: map[string]struct{}{
-			"darwin-amd64":  {},
-			"darwin-arm64":  {},
-			"linux-amd64":   {},
-			"linux-arm64":   {},
-			"linux-armv6l":  {},
-			"windows-amd64": {},
-			"src":           {},
-			"assets":        {},
-		},
-	},
-	{
-		Number:         "1.24",
-		PreviousStable: true,
+		Number: ".0main",
 		Platforms: map[string]struct{}{
 			"darwin-amd64":  {},
 			"darwin-arm64":  {},
@@ -138,7 +123,7 @@ const (
 	signatureMsg    = "Signature<sup>1</sup>"
 )
 
-const baseURL = "https://aka.ms/golang/release/latest/"
+const baseURL = "https://aka.ms/golang/release/cgoless/latest/"
 
 var (
 	docPath  = filepath.Join("eng", "doc", "Downloads.md")
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index a997dfd0682..abfe7abd5c2 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -10,19 +10,23 @@ This document contains a list of links to the binary releases of the Microsoft b
 The links in this table download the latest Go release built by Microsoft matching that column's major release number.
 For example, a 1.20 link will download 1.20.8-1 if that is the latest version of 1.20 available.
 
+The `.0main` "version" shown below is an artefact of publishing infrastructure that doesn't support preview publishing.
+This is a 1.26 preview build from the `microsoft/main` branch.
+See `go version`.
+
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
-|   | 1.25 | 1.24 |
-| --- | --- | --- |
-| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> |
- Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.25.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> |
- darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> |
- darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> |
- linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> |
- linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> |
- linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> |
- windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256)<br/> |
+|   | .0main |
+| --- | --- |
+| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz.sig)<br/> |
+ Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/cgoless/latest/go.0main.assets.json)<br/> |
+ darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz.sig)<br/> |
+ darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz.sig)<br/> |
+ linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz.sig)<br/> |
+ linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz.sig)<br/> |
+ linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz.sig)<br/> |
+ windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/cgoless/latest/go.0main.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/cgoless/latest/go.0main.windows-amd64.zip.sha256)<br/> |
 
 
 <!-- END TABLES -->
@@ -34,6 +38,21 @@ For example, a 1.20 link will download 1.20.8-1 if that is the latest version of
 > <sup>2</sup> - The macOS builds and `systemcrypto` support are currently in preview and shouldn't be used in production.
 > Please [open an issue](https://github.com/microsoft/go/issues/new) if you encounter any problems.
 
+## Go wrapper download program
+
+An alternative way to fetch the 1.26 preview is to use your existing build of Go to install [our dl tool](https://github.com/microsoft/go-infra/tree/dev-dl-experiment/dl) based on [golang.org/dl](https://pkg.go.dev/golang.org/dl).
+Our dl tool may be more convenient if you aren't already fetching Go tarballs from the aka.ms links.
+The tool handles Go download and setup.
+
+To use it, insert these commands steps in your existing build or pipeline:
+
+```
+go install github.com/microsoft/go-infra/dev-dl-experiment/dl/msgo1.26.0preview2@417d3fa14958d73e02dbcc4de2681cdd32777f37
+msgo1.26.0preview2 download
+```
+
+Then, change `go` in your "go build" and "go test" comamnds (for example) to `msgo1.26.0preview2` to use the downloaded Go.
+
 ## Downloading a specific version
 
 The table only shows a small subset of the aka.ms links we generate.
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index d0a935fe8ab..add9ddfbd2c 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -1,169 +1,84 @@
 [
   {
-    "version": "go1.25",
+    "version": "go.0main",
     "stable": true,
-    "latestStable": true,
     "files": [
       {
-        "filename": "go1.25.src.tar.gz",
+        "filename": "go.0main.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.src.tar.gz.sig"
       },
       {
-        "filename": "go1.25.assets.json",
+        "filename": "go.0main.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.25.assets.json"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.assets.json"
       },
       {
-        "filename": "go1.25.darwin-amd64.tar.gz",
+        "filename": "go.0main.darwin-amd64.tar.gz",
         "os": "darwin",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.darwin-arm64.tar.gz",
+        "filename": "go.0main.darwin-arm64.tar.gz",
         "os": "darwin",
         "arch": "arm64",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.darwin-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-amd64.tar.gz",
+        "filename": "go.0main.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-arm64.tar.gz",
+        "filename": "go.0main.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-armv6l.tar.gz",
+        "filename": "go.0main.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.25.windows-amd64.zip",
+        "filename": "go.0main.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go.0main",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256"
-      }
-    ]
-  },
-  {
-    "version": "go1.24",
-    "stable": true,
-    "previousStable": true,
-    "files": [
-      {
-        "filename": "go1.24.src.tar.gz",
-        "os": "",
-        "arch": "",
-        "version": "go1.24",
-        "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.assets.json",
-        "os": "",
-        "arch": "",
-        "version": "go1.24",
-        "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.24.assets.json"
-      },
-      {
-        "filename": "go1.24.darwin-amd64.tar.gz",
-        "os": "darwin",
-        "arch": "amd64",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.darwin-arm64.tar.gz",
-        "os": "darwin",
-        "arch": "arm64",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.linux-amd64.tar.gz",
-        "os": "linux",
-        "arch": "amd64",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.linux-arm64.tar.gz",
-        "os": "linux",
-        "arch": "arm64",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.linux-armv6l.tar.gz",
-        "os": "linux",
-        "arch": "armv6l",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig"
-      },
-      {
-        "filename": "go1.24.windows-amd64.zip",
-        "os": "windows",
-        "arch": "amd64",
-        "version": "go1.24",
-        "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/cgoless/latest/go.0main.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/cgoless/latest/go.0main.windows-amd64.zip.sha256"
       }
     ]
   }

From ba8c2364120bfd8e41eba7582bb88c2a855e1da2 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 22 Oct 2025 07:52:09 +0000
Subject: [PATCH 523/887] relax TestStmtLines limits

---
 .../0003-Implement-crypto-internal-backend.patch  | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0374cf8d451..4368fed7b2e 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -11,7 +11,7 @@ desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
  .../compile/internal/logopt/logopt_test.go    |   6 +-
- .../compile/internal/ssa/stmtlines_test.go    |   1 -
+ .../compile/internal/ssa/stmtlines_test.go    |   3 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
  src/cmd/dist/test.go                          |  47 ++-
@@ -56,7 +56,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 47 files changed, 2384 insertions(+), 22 deletions(-)
+ 47 files changed, 2385 insertions(+), 23 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -124,7 +124,7 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  		}
  
 diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
-index d0f09da86ffce2..0f9e2867363d19 100644
+index d0f09da86ffce2..10d3e5d8d41eb1 100644
 --- a/src/cmd/compile/internal/ssa/stmtlines_test.go
 +++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
 @@ -113,7 +113,6 @@ func TestStmtLines(t *testing.T) {
@@ -135,6 +135,15 @@ index d0f09da86ffce2..0f9e2867363d19 100644
  		for {
  			err := lrdr.Next(&le)
  			if err == io.EOF {
+@@ -139,7 +138,7 @@ func TestStmtLines(t *testing.T) {
+ 
+ 	var m float64
+ 	if runtime.GOARCH == "amd64" {
+-		m = 0.011 // > 98.9% obtained on amd64, no backsliding
++		m = 0.012 // > 98.8% obtained on amd64, no backsliding
+ 	} else if runtime.GOARCH == "riscv64" {
+ 		m = 0.03 // XXX temporary update threshold to 97% for regabi
+ 	} else {
 diff --git a/src/cmd/compile/script_test.go b/src/cmd/compile/script_test.go
 index 0e32e0769ee2e2..eda2d576acc6c6 100644
 --- a/src/cmd/compile/script_test.go

From 8987242051a70e7d84de7ab8d5bbfd652d508c4c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 22 Oct 2025 08:35:23 +0000
Subject: [PATCH 524/887] Update submodule to latest master (29d43df8):
 go/build, cmd/go: use ast.ParseDirective for go:embed

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index b31dc77ceab..29d43df8ab2 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit b31dc77ceab962c0f4f5e4a9fc5e1a403fbd2d7c
+Subproject commit 29d43df8ab212910487345c354491b67780798cf

From b506e7bd893031d02d6ba2f5873304b393a66320 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 22 Oct 2025 14:39:40 +0200
Subject: [PATCH 525/887] upgrade OpenSSL backend (#1920)

---
 .../0001-Vendor-external-dependencies.patch   | 2114 ++++++-----------
 1 file changed, 785 insertions(+), 1329 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 43cf435ce7e..fcef7397c66 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -18,15 +18,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-infra/telemetry/config/config.json     |   70 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  169 +
- .../internal/appinsights/inmemorychannel.go   |  341 ++
+ .../telemetry/internal/appinsights/client.go  |  169 ++
+ .../internal/appinsights/inmemorychannel.go   |  341 +++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
  .../internal/contracts/response.go            |   32 +
  .../internal/appinsights/jsonserializer.go    |   33 +
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
- .../internal/appinsights/transmitter.go       |  172 +
+ .../internal/appinsights/transmitter.go       |  172 ++
  .../telemetry/internal/config/config.go       |   63 +
  .../telemetry/internal/telemetry/proginfo.go  |   32 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
@@ -41,24 +41,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 +
- .../github.com/golang-fips/openssl/v2/aes.go  |  145 +
+ .../github.com/golang-fips/openssl/v2/aes.go  |  145 ++
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../golang-fips/openssl/v2/cipher.go          |  652 ++++
+ .../golang-fips/openssl/v2/cipher.go          |  652 +++++
  .../golang-fips/openssl/v2/const.go           |   92 +
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
- .../github.com/golang-fips/openssl/v2/dsa.go  |  308 ++
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |   66 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  305 ++
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  305 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
  .../golang-fips/openssl/v2/ed25519.go         |  228 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  589 ++++
- .../github.com/golang-fips/openssl/v2/hash.go |  462 +++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  589 +++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  462 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
- .../github.com/golang-fips/openssl/v2/hkdf.go |  443 +++
- .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
- .../github.com/golang-fips/openssl/v2/init.go |  156 +
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  443 ++++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  282 +++
+ .../github.com/golang-fips/openssl/v2/init.go |  156 ++
  .../golang-fips/openssl/v2/init_cgo_unix.go   |   31 +
  .../golang-fips/openssl/v2/init_nocgo_unix.go |   32 +
  .../golang-fips/openssl/v2/init_windows.go    |   36 +
@@ -88,38 +88,39 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_stubs.s   |   94 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
- .../openssl/v2/internal/ossl/asm_amd64.s      |   73 +
- .../openssl/v2/internal/ossl/asm_arm64.s      |   83 +
+ .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
+ .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |  119 +
- .../openssl/v2/internal/ossl/errors_nocgo.go  |   99 +
+ .../openssl/v2/internal/ossl/errors_nocgo.go  |   70 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
  .../openssl/v2/internal/ossl/ossl_cgo.go      |   39 +
  .../openssl/v2/internal/ossl/ossl_nocgo.go    |   34 +
- .../openssl/v2/internal/ossl/shims.h          |  399 +++
+ .../openssl/v2/internal/ossl/shims.h          |  400 +++
+ .../openssl/v2/internal/ossl/syscall_nocgo.go |   68 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
- .../v2/internal/ossl/syscall_nocgo_unix.go    |   55 +
- .../v2/internal/ossl/syscall_nocgo_windows.go |   28 +
+ .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
+ .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 1924 +++++++++++
+ .../openssl/v2/internal/ossl/zossl.c          | 1931 ++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         |   57 +
- .../openssl/v2/internal/ossl/zossl.h          |  335 ++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1275 ++++++++
+ .../openssl/v2/internal/ossl/zossl.h          |  336 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1279 ++++++++++
  .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2852 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2250 +++++++++++++++++
  .../golang-fips/openssl/v2/openssl.go         |  363 +++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
  .../golang-fips/openssl/v2/params.go          |  184 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
  .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
- .../openssl/v2/providersymcrypt.go            |  338 ++
+ .../openssl/v2/providersymcrypt.go            |  338 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
  .../github.com/golang-fips/openssl/v2/rsa.go  |  365 +++
- .../golang-fips/openssl/v2/tls1prf.go         |  158 +
+ .../golang-fips/openssl/v2/tls1prf.go         |  158 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
@@ -133,8 +134,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/hashclone.go           |   17 +
  .../internal/cryptokit/hashclone_go125.go     |   12 +
  .../internal/cryptokit/hkdf.go                |   77 +
- .../internal/cryptokit/hmac.go                |  146 +
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 ++
+ .../internal/cryptokit/hmac.go                |  146 ++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  122 +
@@ -143,7 +144,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/ecdh.go          |  135 +
  .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
  .../go-crypto-darwin/xcrypto/ed25519.go       |  100 +
- .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 ++
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 +++
  .../go-crypto-darwin/xcrypto/hash.go          |   68 +
  .../go-crypto-darwin/xcrypto/hkdf.go          |   66 +
  .../go-crypto-darwin/xcrypto/hmac.go          |   21 +
@@ -153,16 +154,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  194 ++
  .../go-crypto-darwin/xcrypto/xcrypto.go       |   49 +
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  427 +++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  427 ++++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 +++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
- .../go-crypto-winnative/cng/ecdsa.go          |  169 +
- .../microsoft/go-crypto-winnative/cng/hash.go |  325 ++
+ .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
@@ -172,7 +173,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
- .../microsoft/go-crypto-winnative/cng/sha3.go |  310 ++
+ .../microsoft/go-crypto-winnative/cng/sha3.go |  310 +++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
  .../internal/bcrypt/bcrypt_windows.go         |  368 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
@@ -180,7 +181,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   18 +
- 172 files changed, 24296 insertions(+), 7 deletions(-)
+ 173 files changed, 23744 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -263,6 +264,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
@@ -2003,7 +2005,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..07b9cf079dc510 100644
+index c5e901b9ef22e8..803e29766922fd 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2012,17 +2014,17 @@ index c5e901b9ef22e8..07b9cf079dc510 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
 +	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..2b2d09d2948721 100644
+index 4a52682161fc23..dd74b66c6b29f3 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404 h1:A+29iZp7zVSTlS7hvpb7u2DIz0+woEDubEj85N9rDhQ=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404/go.mod h1:OYUBsoxLpFu8OFyhZHxfpN8lgcsw8JhTC3BQK7+XUc0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3 h1:A406U4ZlIBfkU7taBsFNxLEZHov9jn3O0GVuIfbTSBk=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3/go.mod h1:v3d8e4DPboAOvaae2pm/QTTRlcdJJYmMegkHB8hEvjU=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05 h1:I6L7NzERXHhyif6YpLgL8GTvSbF8ac3j1bwUBDri9Fo=
 +github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
@@ -2031,7 +2033,7 @@ index 4a52682161fc23..2b2d09d2948721 100644
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 8966254d0d9110..3d726ec66b3c10 100644
+index 853605f5c29df2..db5e6ba6d64978 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -528,6 +528,25 @@ var depsRules = `
@@ -8541,25 +8543,42 @@ index 00000000000000..b5aeb4b47a2e55
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
 new file mode 100644
-index 00000000000000..c5fc8062b19d60
+index 00000000000000..8c86ce392c8323
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
-@@ -0,0 +1,73 @@
+@@ -0,0 +1,108 @@
 +// Copyright 2009 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+GLOBL ·syscallNABI0(SB), NOPTR|RODATA, $8
-+DATA ·syscallNABI0(SB)/8, $syscallN_trampoline(SB)
-+TEXT syscallN_trampoline(SB),NOSPLIT,$0
-+	// store argument and original SP in a callee-saved register
-+	MOVQ	DI, R13
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++#ifdef GOOS_windows
++	MOVQ	CX, 0(SP)
++#else
++	MOVQ	DI, 0(SP)
++#endif
++	CALL	·syscallNSystemStack(SB)
++	RET
++
++#ifdef GOOS_windows
++#define RegArgsN 4
++#else
++#define RegArgsN 6
++#endif
++
++TEXT ·syscallNAsm(SB),NOSPLIT,$16-8
++	// Load pointer from stack (ABI0 calling convention)
++	// Store argument and original SP in a callee-saved register
++	MOVQ	libcArgs+0(FP), R13
 +	MOVQ	SP, R14
++	
++	// Align stack to 16 bytes
++	ANDQ	$~15, SP
 +
 +	MOVQ	libcCallInfo_fn(R13), R11
 +	MOVQ	libcCallInfo_n(R13), CX
@@ -8571,32 +8590,36 @@ index 00000000000000..c5fc8062b19d60
 +	CMPL	CX, $2;	JE	_2args
 +	CMPL	CX, $3;	JE	_3args
 +	CMPL	CX, $4;	JE	_4args
++#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
 +	CMPL	CX, $5;	JE	_5args
 +	CMPL	CX, $6;	JE	_6args
++#endif
 +
 +	// Reserve stack space for remaining args
 +	MOVQ	CX, R12
-+	SUBQ	$6, R12
++	SUBQ	$RegArgsN, R12
 +	ADDQ	$1, R12 // make even number of words for stack alignment
 +	ANDQ	$~1, R12
 +	SHLQ	$3, R12
 +	SUBQ	R12, SP
 +
 +	// Copy args to the stack.
-+	// CX: count of stack arguments (n-6)
-+	// SI: &args[6]
++	// CX: count of stack arguments (n-RegArgsN)
++	// SI: &args[RegArgsN]
 +	// DI: copy of RSP
-+	SUBQ	$6, CX
++	SUBQ	$RegArgsN, CX
 +	MOVQ	R10, SI
-+	ADDQ	$(8*6), SI
++	ADDQ	$(8*RegArgsN), SI
 +	MOVQ	SP, DI
 +	CLD
 +	REP; MOVSQ
 +
++#ifndef GOOS_windows
 +_6args:
 +	MOVQ	(5*8)(R10), R9
 +_5args:
 +	MOVQ	(4*8)(R10), R8
++#endif
 +_4args:
 +	MOVQ	(3*8)(R10), CX
 +_3args:
@@ -8609,8 +8632,22 @@ index 00000000000000..c5fc8062b19d60
 +
 +	XORL	AX, AX	    // vararg: say "no float args"
 +
++#ifdef GOOS_windows
++	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
++	// and 32 bytes of shadow space on the stack.
++	ADJSP	$32
++	MOVQ	CX, R9
++	MOVQ	DX, R8
++	MOVQ	SI, DX
++	MOVQ	DI, CX
++#endif
++
 +	CALL	R11
 +
++#ifdef GOOS_windows
++	ADJSP	$-32
++#endif
++
 +	MOVQ	R14, SP		// free stack space
 +
 +	// Return result.
@@ -8620,30 +8657,35 @@ index 00000000000000..c5fc8062b19d60
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
 new file mode 100644
-index 00000000000000..bda119cb5abd63
+index 00000000000000..10f3da0ab4e951
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
-@@ -0,0 +1,83 @@
+@@ -0,0 +1,87 @@
 +// Copyright 2015 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+GLOBL ·syscallNABI0(SB), NOPTR|RODATA, $8
-+DATA ·syscallNABI0(SB)/8, $syscallN_trampoline(SB)
-+TEXT syscallN_trampoline(SB),NOSPLIT,$0
-+	STP	(R19, R20), 16(RSP) // save old R19, R20
-+	MOVD	R0, R19	// save struct pointer
-+	MOVD	RSP, R20	// save stack pointer
-+	SUB	$16, RSP // reserve 16 bytes for sp-8 where fp may be saved.
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++	MOVD	R0, 8(RSP)
++	CALL	·syscallNSystemStack(SB)
++	RET
 +
-+	MOVD	libcCallInfo_args(R19), R12
++TEXT ·syscallNAsm(SB),NOSPLIT,$0-16
++	// Save original stack pointer
++	MOVD	RSP, R20
++
++	// Load pointer from stack (ABI0 calling convention)
++	MOVD	libcArgs+0(FP), R3
++
++	MOVD	libcCallInfo_args(R3), R12
++	MOVD	libcCallInfo_fn(R3), R13
 +	// Do we have more than 8 arguments?
-+	MOVD	libcCallInfo_n(R19), R0
++	MOVD	libcCallInfo_n(R3), R0
 +	CMP	$0,	R0; BEQ	_0args
 +	CMP	$1,	R0; BEQ	_1args
 +	CMP	$2,	R0; BEQ	_2args
@@ -8696,16 +8738,15 @@ index 00000000000000..bda119cb5abd63
 +	MOVD	(0*8)(R12), R0
 +_0args:
 +
-+	MOVD	libcCallInfo_fn(R19), R12
-+	BL	(R12)
++	BL	(R13)
 +
-+	MOVD	R20, RSP			// free stack space
++	// Restore original stack pointer
++	MOVD	R20, RSP
 +
-+	MOVD	R0, libcCallInfo_r1(R19)	// save r1
-+	MOVD	R1, libcCallInfo_r2(R19)	// save r2
++	MOVD	libcArgs+0(FP), R3
++	MOVD	R0, libcCallInfo_r1(R3)	// save r1
++	MOVD	R1, libcCallInfo_r2(R3)	// save r2
 +
-+	// Restore callee-saved registers.
-+	LDP	16(RSP), (R19, R20)
 +    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
 new file mode 100644
@@ -8852,10 +8893,10 @@ index 00000000000000..af5d8e618e8095
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
 new file mode 100644
-index 00000000000000..51ce80d803017e
+index 00000000000000..a80ffac40d1697
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
-@@ -0,0 +1,99 @@
+@@ -0,0 +1,70 @@
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
 +package ossl
@@ -8863,7 +8904,6 @@ index 00000000000000..51ce80d803017e
 +import (
 +	"bytes"
 +	"errors"
-+	"strconv"
 +	"strings"
 +	"unsafe"
 +)
@@ -8872,60 +8912,38 @@ index 00000000000000..51ce80d803017e
 +
 +// errState represents the OpenSSL error state for nocgo version
 +type errState struct {
-+	codes []uint64
-+	files []string
-+	lines []int32
++	hasError bool
++	codes    [ERR_NUM_MAX]uint64
 +}
 +
-+// retrieveErrorState retrieves errors from the OpenSSL error queue
-+func retrieveErrorState() *errState {
-+	state := &errState{
-+		codes: make([]uint64, 0, ERR_NUM_MAX),
-+		files: make([]string, 0, ERR_NUM_MAX),
-+		lines: make([]int32, 0, ERR_NUM_MAX),
++// retrieveErrorState retrieves errors from the OpenSSL error queue.
++// It might run on the system stack, so it can't allocate Go memory
++// nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func retrieveErrorState(state *errState) {
++	state.hasError = true
++	libcArgs := libcCallInfo{
++		fn: _mkcgo_ERR_get_error,
 +	}
-+
-+	for range ERR_NUM_MAX {
-+		var file *byte
-+		var line int32
-+
-+		var code uint64
-+		if OPENSSL_version_major_Available() && OPENSSL_version_major() >= 3 {
-+			// OpenSSL 3 error handling
-+			code = ERR_get_error_all(&file, &line, nil, nil, nil)
-+		} else {
-+			// OpenSSL 1 error handling
-+			code = ERR_get_error_line(&file, &line)
-+		}
-+
-+		if code == 0 {
++	for i := range ERR_NUM_MAX {
++		syscallNAsm(&libcArgs)
++		if libcArgs.r1 == 0 {
 +			break
 +		}
-+
-+		state.codes = append(state.codes, code)
-+		state.lines = append(state.lines, line)
-+
-+		if file != nil {
-+			// Convert C string to Go string
-+			filename := goString(file)
-+			state.files = append(state.files, filename)
-+		} else {
-+			state.files = append(state.files, "")
-+		}
++		state.codes[i] = uint64(libcArgs.r1)
 +	}
-+
-+	return state
 +}
 +
 +// newMkcgoErr creates a new error from the OpenSSL error queue for the nocgo version.
 +// The errst parameter is present for API compatibility with the CGO implementation,
 +// but is intentionally ignored in nocgo mode; errors are always retrieved directly from OpenSSL.
-+func newMkcgoErr(msg string, errst interface{}) error {
-+	// Retrieve error state from OpenSSL error queue
-+	state := retrieveErrorState()
-+
-+	// If no errors in queue, return simple message
-+	if len(state.codes) == 0 {
++func newMkcgoErr(msg string, state *errState) error {
++	if !state.hasError {
++		return nil
++	}
++	if state.codes[0] == 0 {
++		// If no errors in queue, return simple message
 +		return errors.New(msg + " failed")
 +	}
 +
@@ -8933,7 +8951,10 @@ index 00000000000000..51ce80d803017e
 +	b.WriteString(msg)
 +	b.WriteString("\nopenssl error(s):")
 +
-+	for i, code := range state.codes {
++	for _, code := range state.codes {
++		if code == 0 {
++			break
++		}
 +		b.WriteByte('\n')
 +		var buf [256]byte
 +		ERR_error_string_n(code, unsafe.SliceData(buf[:]), len(buf))
@@ -8942,15 +8963,6 @@ index 00000000000000..51ce80d803017e
 +		} else {
 +			b.Write(buf[:])
 +		}
-+
-+		if i < len(state.files) && state.files[i] != "" {
-+			b.WriteString("\n\t")
-+			b.WriteString(state.files[i])
-+			b.WriteByte(':')
-+			if i < len(state.lines) {
-+				b.WriteString(strconv.Itoa(int(state.lines[i])))
-+			}
-+		}
 +	}
 +
 +	return errors.New(b.String())
@@ -9067,7 +9079,7 @@ index 00000000000000..5fb8d79a809845
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
 new file mode 100644
-index 00000000000000..c330e5ed56a477
+index 00000000000000..463a873dfa8595
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
 @@ -0,0 +1,34 @@
@@ -9082,16 +9094,15 @@ index 00000000000000..c330e5ed56a477
 +// on the underlying stream. In particular it is OK to Sum, then Write more,
 +// then Sum again, and the second Sum acts as if the first didn't happen.
 +func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
-+	// Clear any existing errors
-+	ERR_clear_error()
-+
 +	// Copy ctx1 to ctx2 using EVP_MD_CTX_copy_ex
 +	code, err := EVP_MD_CTX_copy_ex(ctx2, ctx1)
 +	if err != nil {
 +		return err
 +	}
++	var errState errState
 +	if code != 1 {
-+		return newMkcgoErr("EVP_MD_CTX_copy_ex", nil)
++		retrieveErrorState(&errState)
++		return newMkcgoErr("EVP_MD_CTX_copy_ex", &errState)
 +	}
 +
 +	// Finalize the hash using ctx2
@@ -9100,17 +9111,18 @@ index 00000000000000..c330e5ed56a477
 +		return err
 +	}
 +	if code <= 0 {
-+		return newMkcgoErr("EVP_DigestFinal_ex", nil)
++		retrieveErrorState(&errState)
++		return newMkcgoErr("EVP_DigestFinal_ex", &errState)
 +	}
 +
 +	return nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..5790defeb6eb55
+index 00000000000000..b516221e50e834
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,399 @@
+@@ -0,0 +1,400 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -9244,6 +9256,7 @@ index 00000000000000..5790defeb6eb55
 +// the noescape/nocallback criteria.
 +
 +// ERR API
++unsigned long ERR_get_error(void) __attribute__((noerror));
 +void ERR_error_string_n(unsigned long e, char *buf, size_t len);
 +void ERR_clear_error(void) __attribute__((tag(""),tag("init_3")));
 +unsigned long ERR_get_error_line(const char **file, int *line) __attribute__((tag("legacy_1"),noerror));
@@ -9510,6 +9523,80 @@ index 00000000000000..5790defeb6eb55
 +const char *OBJ_nid2sn(int n) __attribute__((noerror));
 +
 +#endif // _GO_OSSL_SHIMS_H
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..a95e2cec86e552
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
+@@ -0,0 +1,68 @@
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package ossl
++
++import (
++	"unsafe"
++)
++
++//go:linkname runtime_cgocall runtime.cgocall
++
++//go:noescape
++func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
++
++//go:linkname noescape
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
++}
++
++type libcCallInfo struct {
++	fn      uintptr
++	n       uintptr // number of parameters
++	args    uintptr // parameters
++	r1, r2  uintptr // return values
++	errType uintptr
++}
++
++//go:noescape
++func syscallNAsm(libcArgs *libcCallInfo)
++
++// syscallNSystemStack performs a syscall on the system stack.
++// It can't allocate Go memory nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func syscallNSystemStack(libcArgs *libcCallInfo) {
++	if libcArgs.errType != 0 {
++		libcArgs.n--
++	}
++	syscallNAsm(libcArgs)
++	if libcArgs.errType != 0 {
++		_mkcgo_error_check(libcArgs.errType, libcArgs.r1, libcArgs.args, libcArgs.n)
++	}
++}
++
++var syscallNSystemStack_trampoline byte
++var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
++
++// syscallN performs a syscall with the given function and arguments.
++//
++// All its parameters and return values must be uintptr in order
++// for the Go compiler to automatically set the //go:uintptrkeepalive
++// directive (which we can't set manually here).
++// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
++//
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	libcArgs := libcCallInfo{
++		fn:      fn,
++		n:       uintptr(len(args)),
++		errType: errType,
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
++	return libcArgs.r1, libcArgs.r2
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 new file mode 100644
 index 00000000000000..dffedf87367375
@@ -9534,55 +9621,20 @@ index 00000000000000..63a5798fe55a75
 +//go:cgo_import_dynamic _ _ "libdl.so.2"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
 new file mode 100644
-index 00000000000000..48f1016c336e55
+index 00000000000000..6c2ae8d47bac94
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
-@@ -0,0 +1,55 @@
+@@ -0,0 +1,20 @@
 +//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
 +
 +package ossl
 +
 +import (
-+	"syscall"
 +	"unsafe"
 +
 +	_ "github.com/golang-fips/openssl/v2/internal/fakecgo"
 +)
 +
-+//go:linkname runtime_cgocall runtime.cgocall
-+
-+//go:noescape
-+func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
-+
-+//go:linkname noescape
-+//go:nosplit
-+func noescape(p unsafe.Pointer) unsafe.Pointer {
-+	x := uintptr(p)
-+	return unsafe.Pointer(x ^ 0)
-+}
-+
-+type libcCallInfo struct {
-+	fn     uintptr
-+	n      uintptr // number of parameters
-+	args   uintptr // parameters
-+	r1, r2 uintptr // return values
-+}
-+
-+var syscallNABI0 uintptr
-+
-+//go:nosplit
-+func syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr, err syscall.Errno) {
-+	libcArgs := libcCallInfo{
-+		fn: fn,
-+		n:  uintptr(len(args)),
-+	}
-+	if libcArgs.n != 0 {
-+		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
-+	}
-+	runtime_cgocall(syscallNABI0, unsafe.Pointer(&libcArgs))
-+	return libcArgs.r1, libcArgs.r2, 0
-+}
-+
 +func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
 +	r0 := Dlsym(handle, unsafe.StringData(symbol))
 +	if r0 == nil {
@@ -9595,11 +9647,11 @@ index 00000000000000..48f1016c336e55
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
 new file mode 100644
-index 00000000000000..73e75d91e1b783
+index 00000000000000..0e541464f568cb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
-@@ -0,0 +1,28 @@
-+//go:build !cgo && windows
+@@ -0,0 +1,22 @@
++//go:build !cgo && windows && goexperiment.ms_nocgo_opensslcrypto
 +
 +package ossl
 +
@@ -9611,12 +9663,6 @@ index 00000000000000..73e75d91e1b783
 +var modkernel32 = syscall.NewLazyDLL("kernel32.dll")
 +var procGetProcAddress = modkernel32.NewProc("GetProcAddress")
 +
-+//go:nosplit
-+func syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr, err syscall.Errno) {
-+	r1, r2, err = syscall.SyscallN(fn, args...)
-+	return
-+}
-+
 +func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
 +	r0, _, err := syscall.SyscallN(procGetProcAddress.Addr(), uintptr(handle), uintptr(unsafe.Pointer(unsafe.StringData(symbol))))
 +	if err != 0 {
@@ -9686,7 +9732,7 @@ index 00000000000000..4d03a5f97cec27
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 new file mode 100644
-index 00000000000000..fa9d321875f3b5
+index 00000000000000..fb345aac77ea48
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 @@ -0,0 +1,45 @@
@@ -9701,6 +9747,8 @@ index 00000000000000..fa9d321875f3b5
 +	"unsafe"
 +)
 +
++var _ = runtime.GOOS
++
 +//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
 +//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
 +//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
@@ -9709,38 +9757,36 @@ index 00000000000000..fa9d321875f3b5
 +var _mkcgo_dlclose_trampoline_addr uintptr
 +
 +func Dlclose(handle unsafe.Pointer) int32 {
-+	r0, _, _ := syscallN(_mkcgo_dlclose_trampoline_addr, uintptr(handle))
++	r0, _ := syscallN(0, _mkcgo_dlclose_trampoline_addr, uintptr(handle))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_dlerror_trampoline_addr uintptr
 +
 +func Dlerror() *byte {
-+	r0, _, _ := syscallN(_mkcgo_dlerror_trampoline_addr)
++	r0, _ := syscallN(0, _mkcgo_dlerror_trampoline_addr)
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
 +var _mkcgo_dlopen_trampoline_addr uintptr
 +
 +func Dlopen(path *byte, flags int32) unsafe.Pointer {
-+	r0, _, _ := syscallN(_mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
-+	runtime.KeepAlive(path)
++	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
 +	return unsafe.Pointer(r0)
 +}
 +
 +var _mkcgo_dlsym_trampoline_addr uintptr
 +
 +func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
-+	r0, _, _ := syscallN(_mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
-+	runtime.KeepAlive(symbol)
++	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
 +	return unsafe.Pointer(r0)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..8124dfd70a22e3
+index 00000000000000..9cf871d0fd1b61
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,1924 @@
+@@ -0,0 +1,1931 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -9794,6 +9840,7 @@ index 00000000000000..8124dfd70a22e3
 +int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
 +void (*_g_ERR_clear_error)(void);
 +void (*_g_ERR_error_string_n)(unsigned long, char*, size_t);
++unsigned long (*_g_ERR_get_error)(void);
 +unsigned long (*_g_ERR_get_error_all)(const char**, int*, const char**, const char**, int*);
 +unsigned long (*_g_ERR_get_error_line)(const char**, int*);
 +int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
@@ -10008,6 +10055,7 @@ index 00000000000000..8124dfd70a22e3
 +	__mkcgo__dlsym(EC_POINT_point2oct)
 +	__mkcgo__dlsym(ERR_clear_error)
 +	__mkcgo__dlsym(ERR_error_string_n)
++	__mkcgo__dlsym(ERR_get_error)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
@@ -10110,6 +10158,7 @@ index 00000000000000..8124dfd70a22e3
 +	_g_EC_POINT_point2oct = NULL;
 +	_g_ERR_clear_error = NULL;
 +	_g_ERR_error_string_n = NULL;
++	_g_ERR_get_error = NULL;
 +	_g_EVP_CIPHER_CTX_ctrl = NULL;
 +	_g_EVP_CIPHER_CTX_free = NULL;
 +	_g_EVP_CIPHER_CTX_new = NULL;
@@ -10687,6 +10736,10 @@ index 00000000000000..8124dfd70a22e3
 +	_g_ERR_error_string_n(_arg0, _arg1, _arg2);
 +}
 +
++unsigned long _mkcgo_ERR_get_error(void) {
++	return _g_ERR_get_error();
++}
++
 +unsigned long _mkcgo_ERR_get_error_all(const char** _arg0, int* _arg1, const char** _arg2, const char** _arg3, int* _arg4) {
 +	return _g_ERR_get_error_all(_arg0, _arg1, _arg2, _arg3, _arg4);
 +}
@@ -11730,10 +11783,10 @@ index 00000000000000..619b7d730f72fa
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..335d129bb345cd
+index 00000000000000..e4083838bf2ba3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,335 @@
+@@ -0,0 +1,336 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -11884,6 +11937,7 @@ index 00000000000000..335d129bb345cd
 +int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
 +void _mkcgo_ERR_clear_error(void);
 +void _mkcgo_ERR_error_string_n(unsigned long, char*, size_t);
++unsigned long _mkcgo_ERR_get_error(void);
 +unsigned long _mkcgo_ERR_get_error_all(const char**, int*, const char**, const char**, int*);
 +unsigned long _mkcgo_ERR_get_error_line(const char**, int*);
 +int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, mkcgo_err_state *);
@@ -12071,10 +12125,10 @@ index 00000000000000..335d129bb345cd
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..fdec005aa9bcaa
+index 00000000000000..15dd292a0bafff
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1275 @@
+@@ -0,0 +1,1279 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -12373,6 +12427,10 @@ index 00000000000000..fdec005aa9bcaa
 +	C._mkcgo_ERR_error_string_n(C.ulong(e), (*C.char)(unsafe.Pointer(buf)), C.size_t(len))
 +}
 +
++func ERR_get_error() uint64 {
++	return uint64(C._mkcgo_ERR_get_error())
++}
++
 +func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
 +	return uint64(C._mkcgo_ERR_get_error_all((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line)), (**C.char)(unsafe.Pointer(__func)), (**C.char)(unsafe.Pointer(data)), (*C.int)(unsafe.Pointer(flags))))
 +}
@@ -13395,10 +13453,10 @@ index 00000000000000..ae64d2f7ee9990
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..4f7e9296c1552d
+index 00000000000000..24a6d76c3d6b31
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2852 @@
+@@ -0,0 +1,2250 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -13410,6 +13468,8 @@ index 00000000000000..4f7e9296c1552d
 +	"unsafe"
 +)
 +
++var _ = runtime.GOOS
++
 +type OPENSSL_INIT_SETTINGS_PTR unsafe.Pointer
 +type OSSL_LIB_CTX_PTR unsafe.Pointer
 +type OSSL_PROVIDER_PTR unsafe.Pointer
@@ -13440,2023 +13500,1472 @@ index 00000000000000..4f7e9296c1552d
 +var _mkcgo_BN_bin2bn uintptr
 +
 +func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_BN_bin2bn, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(arg2))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg2)
-+	if BIGNUM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("BN_bin2bn", nil)
-+	}
-+	return BIGNUM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", &_err)
 +}
 +
 +var _mkcgo_BN_bn2binpad uintptr
 +
 +func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_BN_bn2binpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen))
-+	runtime.KeepAlive(a)
-+	runtime.KeepAlive(to)
-+	if int32(r0) == -1 {
-+		return 0, newMkcgoErr("BN_bn2binpad", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("BN_bn2binpad", &_err)
 +}
 +
 +var _mkcgo_BN_bn2lebinpad uintptr
 +
 +func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen))
-+	runtime.KeepAlive(a)
-+	runtime.KeepAlive(to)
-+	if int32(r0) == -1 {
-+		return 0, newMkcgoErr("BN_bn2lebinpad", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("BN_bn2lebinpad", &_err)
 +}
 +
 +var _mkcgo_BN_clear uintptr
 +
 +func BN_clear(arg0 BIGNUM_PTR) {
-+	syscallN(_mkcgo_BN_clear, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_BN_clear, uintptr(arg0))
 +}
 +
 +var _mkcgo_BN_clear_free uintptr
 +
 +func BN_clear_free(arg0 BIGNUM_PTR) {
-+	syscallN(_mkcgo_BN_clear_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_BN_clear_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_BN_free uintptr
 +
 +func BN_free(arg0 BIGNUM_PTR) {
-+	syscallN(_mkcgo_BN_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_BN_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_BN_lebin2bn uintptr
 +
 +func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_BN_lebin2bn, uintptr(unsafe.Pointer(s)), uintptr(len), uintptr(ret))
-+	runtime.KeepAlive(s)
-+	runtime.KeepAlive(ret)
-+	if BIGNUM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("BN_lebin2bn", nil)
-+	}
-+	return BIGNUM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(unsafe.Pointer(s)), uintptr(len), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", &_err)
 +}
 +
 +var _mkcgo_BN_new uintptr
 +
 +func BN_new() (BIGNUM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_BN_new)
-+	if BIGNUM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("BN_new", nil)
-+	}
-+	return BIGNUM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_BN_new, uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_new", &_err)
 +}
 +
 +var _mkcgo_BN_num_bits uintptr
 +
 +func BN_num_bits(arg0 BIGNUM_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_BN_num_bits, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	r0, _ := syscallN(0, _mkcgo_BN_num_bits, uintptr(arg0))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_CRYPTO_free uintptr
 +
 +func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
-+	syscallN(_mkcgo_CRYPTO_free, uintptr(str), uintptr(unsafe.Pointer(file)), uintptr(line))
-+	runtime.KeepAlive(file)
++	syscallN(0, _mkcgo_CRYPTO_free, uintptr(str), uintptr(unsafe.Pointer(file)), uintptr(line))
 +}
 +
 +var _mkcgo_CRYPTO_malloc uintptr
 +
 +func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
-+	r0, _, _ := syscallN(_mkcgo_CRYPTO_malloc, uintptr(num), uintptr(unsafe.Pointer(file)), uintptr(line))
-+	runtime.KeepAlive(file)
-+	if unsafe.Pointer(r0) == nil {
-+		return nil, newMkcgoErr("CRYPTO_malloc", nil)
-+	}
-+	return unsafe.Pointer(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(unsafe.Pointer(file)), uintptr(line), uintptr(unsafe.Pointer(&_err)))
++	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", &_err)
 +}
 +
 +var _mkcgo_DSA_free uintptr
 +
 +func DSA_free(r DSA_PTR) {
-+	syscallN(_mkcgo_DSA_free, uintptr(r))
-+	runtime.KeepAlive(r)
++	syscallN(0, _mkcgo_DSA_free, uintptr(r))
 +}
 +
 +var _mkcgo_DSA_generate_key uintptr
 +
 +func DSA_generate_key(a DSA_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_DSA_generate_key, uintptr(a))
-+	runtime.KeepAlive(a)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("DSA_generate_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_DSA_generate_key, uintptr(a), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_generate_key", &_err)
 +}
 +
 +var _mkcgo_DSA_get0_key uintptr
 +
 +func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
-+	syscallN(_mkcgo_DSA_get0_key, uintptr(d), uintptr(unsafe.Pointer(pub_key)), uintptr(unsafe.Pointer(priv_key)))
-+	runtime.KeepAlive(d)
-+	runtime.KeepAlive(pub_key)
-+	runtime.KeepAlive(priv_key)
++	syscallN(0, _mkcgo_DSA_get0_key, uintptr(d), uintptr(unsafe.Pointer(pub_key)), uintptr(unsafe.Pointer(priv_key)))
 +}
 +
 +var _mkcgo_DSA_get0_pqg uintptr
 +
 +func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
-+	syscallN(_mkcgo_DSA_get0_pqg, uintptr(d), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)), uintptr(unsafe.Pointer(g)))
-+	runtime.KeepAlive(d)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(q)
-+	runtime.KeepAlive(g)
++	syscallN(0, _mkcgo_DSA_get0_pqg, uintptr(d), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)), uintptr(unsafe.Pointer(g)))
 +}
 +
 +var _mkcgo_DSA_new uintptr
 +
 +func DSA_new() (DSA_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_DSA_new)
-+	if DSA_PTR(r0) == nil {
-+		return nil, newMkcgoErr("DSA_new", nil)
-+	}
-+	return DSA_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_DSA_new, uintptr(unsafe.Pointer(&_err)))
++	return DSA_PTR(r0), newMkcgoErr("DSA_new", &_err)
 +}
 +
 +var _mkcgo_DSA_set0_key uintptr
 +
 +func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key))
-+	runtime.KeepAlive(d)
-+	runtime.KeepAlive(pub_key)
-+	runtime.KeepAlive(priv_key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("DSA_set0_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_set0_key", &_err)
 +}
 +
 +var _mkcgo_DSA_set0_pqg uintptr
 +
 +func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g))
-+	runtime.KeepAlive(d)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(q)
-+	runtime.KeepAlive(g)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("DSA_set0_pqg", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_set0_pqg", &_err)
 +}
 +
 +var _mkcgo_EC_GROUP_free uintptr
 +
 +func EC_GROUP_free(group EC_GROUP_PTR) {
-+	syscallN(_mkcgo_EC_GROUP_free, uintptr(group))
-+	runtime.KeepAlive(group)
++	syscallN(0, _mkcgo_EC_GROUP_free, uintptr(group))
 +}
 +
 +var _mkcgo_EC_GROUP_new_by_curve_name uintptr
 +
 +func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid))
-+	if EC_GROUP_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EC_GROUP_new_by_curve_name", nil)
-+	}
-+	return EC_GROUP_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid), uintptr(unsafe.Pointer(&_err)))
++	return EC_GROUP_PTR(r0), newMkcgoErr("EC_GROUP_new_by_curve_name", &_err)
 +}
 +
 +var _mkcgo_EC_KEY_check_key uintptr
 +
 +func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_check_key, uintptr(key))
-+	runtime.KeepAlive(key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_KEY_check_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_check_key, uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_check_key", &_err)
 +}
 +
 +var _mkcgo_EC_KEY_free uintptr
 +
 +func EC_KEY_free(arg0 EC_KEY_PTR) {
-+	syscallN(_mkcgo_EC_KEY_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EC_KEY_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EC_KEY_get0_group uintptr
 +
 +func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_group, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_group, uintptr(arg0))
 +	return EC_GROUP_PTR(r0)
 +}
 +
 +var _mkcgo_EC_KEY_get0_private_key uintptr
 +
 +func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_private_key, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_private_key, uintptr(arg0))
 +	return BIGNUM_PTR(r0)
 +}
 +
 +var _mkcgo_EC_KEY_get0_public_key uintptr
 +
 +func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_get0_public_key, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_public_key, uintptr(arg0))
 +	return EC_POINT_PTR(r0)
 +}
 +
 +var _mkcgo_EC_KEY_new_by_curve_name uintptr
 +
 +func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0))
-+	if EC_KEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EC_KEY_new_by_curve_name", nil)
-+	}
-+	return EC_KEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EC_KEY_PTR(r0), newMkcgoErr("EC_KEY_new_by_curve_name", &_err)
 +}
 +
 +var _mkcgo_EC_KEY_set_private_key uintptr
 +
 +func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_KEY_set_private_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_private_key", &_err)
 +}
 +
 +var _mkcgo_EC_KEY_set_public_key uintptr
 +
 +func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub))
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(pub)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_KEY_set_public_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key", &_err)
 +}
 +
 +var _mkcgo_EC_KEY_set_public_key_affine_coordinates uintptr
 +
 +func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y))
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(x)
-+	runtime.KeepAlive(y)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_free uintptr
 +
 +func EC_POINT_free(arg0 EC_POINT_PTR) {
-+	syscallN(_mkcgo_EC_POINT_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EC_POINT_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EC_POINT_get_affine_coordinates_GFp uintptr
 +
 +func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	runtime.KeepAlive(arg3)
-+	runtime.KeepAlive(arg4)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_mul uintptr
 +
 +func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx))
-+	runtime.KeepAlive(group)
-+	runtime.KeepAlive(r)
-+	runtime.KeepAlive(n)
-+	runtime.KeepAlive(q)
-+	runtime.KeepAlive(m)
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_POINT_mul", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_mul", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_new uintptr
 +
 +func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_new, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if EC_POINT_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EC_POINT_new", nil)
-+	}
-+	return EC_POINT_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EC_POINT_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EC_POINT_PTR(r0), newMkcgoErr("EC_POINT_new", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_oct2point uintptr
 +
 +func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx))
-+	runtime.KeepAlive(group)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(buf)
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_POINT_oct2point", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_oct2point", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_point2oct uintptr
 +
 +func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx))
-+	runtime.KeepAlive(group)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(buf)
-+	runtime.KeepAlive(ctx)
-+	if int(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_POINT_point2oct", nil)
-+	}
-+	return int(r0), nil
++	var _err errState
++	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EC_POINT_point2oct", &_err)
 +}
 +
 +var _mkcgo_EC_POINT_set_affine_coordinates uintptr
 +
 +func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	runtime.KeepAlive(arg3)
-+	runtime.KeepAlive(arg4)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EC_POINT_set_affine_coordinates", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_set_affine_coordinates", &_err)
 +}
 +
 +var _mkcgo_ERR_clear_error uintptr
 +
 +func ERR_clear_error() {
-+	syscallN(_mkcgo_ERR_clear_error)
++	syscallN(0, _mkcgo_ERR_clear_error)
 +}
 +
 +var _mkcgo_ERR_error_string_n uintptr
 +
 +func ERR_error_string_n(e uint64, buf *byte, len int) {
-+	syscallN(_mkcgo_ERR_error_string_n, uintptr(e), uintptr(unsafe.Pointer(buf)), uintptr(len))
-+	runtime.KeepAlive(buf)
++	syscallN(0, _mkcgo_ERR_error_string_n, uintptr(e), uintptr(unsafe.Pointer(buf)), uintptr(len))
++}
++
++var _mkcgo_ERR_get_error uintptr
++
++func ERR_get_error() uint64 {
++	r0, _ := syscallN(0, _mkcgo_ERR_get_error)
++	return uint64(r0)
 +}
 +
 +var _mkcgo_ERR_get_error_all uintptr
 +
 +func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
-+	r0, _, _ := syscallN(_mkcgo_ERR_get_error_all, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)), uintptr(unsafe.Pointer(__func)), uintptr(unsafe.Pointer(data)), uintptr(unsafe.Pointer(flags)))
-+	runtime.KeepAlive(file)
-+	runtime.KeepAlive(line)
-+	runtime.KeepAlive(__func)
-+	runtime.KeepAlive(data)
-+	runtime.KeepAlive(flags)
++	r0, _ := syscallN(0, _mkcgo_ERR_get_error_all, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)), uintptr(unsafe.Pointer(__func)), uintptr(unsafe.Pointer(data)), uintptr(unsafe.Pointer(flags)))
 +	return uint64(r0)
 +}
 +
 +var _mkcgo_ERR_get_error_line uintptr
 +
 +func ERR_get_error_line(file **byte, line *int32) uint64 {
-+	r0, _, _ := syscallN(_mkcgo_ERR_get_error_line, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)))
-+	runtime.KeepAlive(file)
-+	runtime.KeepAlive(line)
++	r0, _ := syscallN(0, _mkcgo_ERR_get_error_line, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)))
 +	return uint64(r0)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_ctrl uintptr
 +
 +func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_CIPHER_CTX_ctrl", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_ctrl", &_err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_free uintptr
 +
 +func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
-+	syscallN(_mkcgo_EVP_CIPHER_CTX_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EVP_CIPHER_CTX_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_new uintptr
 +
 +func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_new)
-+	if EVP_CIPHER_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_CIPHER_CTX_new", nil)
-+	}
-+	return EVP_CIPHER_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_CIPHER_CTX_PTR(r0), newMkcgoErr("EVP_CIPHER_CTX_new", &_err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_set_key_length uintptr
 +
 +func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen))
-+	runtime.KeepAlive(x)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_CIPHER_CTX_set_key_length", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", &_err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_set_padding uintptr
 +
 +func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding))
-+	runtime.KeepAlive(x)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_CIPHER_CTX_set_padding", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_padding", &_err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_fetch uintptr
 +
 +func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(algorithm)
-+	runtime.KeepAlive(properties)
-+	if EVP_CIPHER_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_CIPHER_fetch", nil)
-+	}
-+	return EVP_CIPHER_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", &_err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_get0_name uintptr
 +
 +func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_get0_name, uintptr(cipher))
-+	runtime.KeepAlive(cipher)
++	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get0_name, uintptr(cipher))
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
 +var _mkcgo_EVP_CIPHER_get_block_size uintptr
 +
 +func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CIPHER_get_block_size, uintptr(cipher))
-+	runtime.KeepAlive(cipher)
++	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get_block_size, uintptr(cipher))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_EVP_CipherInit_ex uintptr
 +
 +func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(enc))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(impl)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(iv)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_CipherInit_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_CipherUpdate uintptr
 +
 +func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(outl)
-+	runtime.KeepAlive(in)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_CipherUpdate", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CipherUpdate", &_err)
 +}
 +
 +var _mkcgo_EVP_DecryptFinal_ex uintptr
 +
 +func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(outm)), uintptr(unsafe.Pointer(outl)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(outm)
-+	runtime.KeepAlive(outl)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DecryptFinal_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(outm)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_DecryptInit_ex uintptr
 +
 +func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(impl)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(iv)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DecryptInit_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_DecryptUpdate uintptr
 +
 +func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(outl)
-+	runtime.KeepAlive(in)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DecryptUpdate", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", &_err)
 +}
 +
 +var _mkcgo_EVP_Digest uintptr
 +
 +func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_Digest, uintptr(data), uintptr(count), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl))
-+	runtime.KeepAlive(md)
-+	runtime.KeepAlive(size)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(impl)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_Digest", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(data), uintptr(count), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_Digest", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestFinal_ex uintptr
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(s)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(md)
-+	runtime.KeepAlive(s)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestFinal_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestInit uintptr
 +
 +func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(__type)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestInit", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestInit", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestInit_ex uintptr
 +
 +func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(impl)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestInit_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestInit_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestSign uintptr
 +
 +func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(sigret)
-+	runtime.KeepAlive(siglen)
-+	runtime.KeepAlive(tbs)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestSign", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSign", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestSignFinal uintptr
 +
 +func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(unsafe.Pointer(siglen)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(sig)
-+	runtime.KeepAlive(siglen)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestSignFinal", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestSignInit uintptr
 +
 +func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(pctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(pkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestSignInit", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSignInit", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestUpdate uintptr
 +
 +func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(d), uintptr(cnt))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestUpdate", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(d), uintptr(cnt), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestUpdate", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestVerify uintptr
 +
 +func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(sigret)
-+	runtime.KeepAlive(tbs)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestVerify", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerify", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestVerifyFinal uintptr
 +
 +func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(sig)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestVerifyFinal", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", &_err)
 +}
 +
 +var _mkcgo_EVP_DigestVerifyInit uintptr
 +
 +func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(pctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(pkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_DigestVerifyInit", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", &_err)
 +}
 +
 +var _mkcgo_EVP_EncryptFinal_ex uintptr
 +
 +func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(outl)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_EncryptFinal_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_EncryptInit_ex uintptr
 +
 +func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(impl)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(iv)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_EncryptInit_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_EncryptUpdate uintptr
 +
 +func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(outl)
-+	runtime.KeepAlive(in)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_EncryptUpdate", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_free uintptr
 +
 +func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
-+	syscallN(_mkcgo_EVP_KDF_CTX_free, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
++	syscallN(0, _mkcgo_EVP_KDF_CTX_free, uintptr(ctx))
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_get_kdf_size uintptr
 +
 +func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_KDF_CTX_get_kdf_size", nil)
-+	}
-+	return int(r0), nil
++	var _err errState
++	r0, _ := syscallN(4, _mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_new uintptr
 +
 +func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_new, uintptr(kdf))
-+	runtime.KeepAlive(kdf)
-+	if EVP_KDF_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_KDF_CTX_new", nil)
-+	}
-+	return EVP_KDF_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_KDF_CTX_new, uintptr(kdf), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KDF_CTX_PTR(r0), newMkcgoErr("EVP_KDF_CTX_new", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_set_params uintptr
 +
 +func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_KDF_CTX_set_params", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_KDF_CTX_set_params", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_derive uintptr
 +
 +func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_KDF_derive", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_KDF_derive", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_fetch uintptr
 +
 +func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
-+	runtime.KeepAlive(libctx)
-+	runtime.KeepAlive(algorithm)
-+	runtime.KeepAlive(properties)
-+	if EVP_KDF_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_KDF_fetch", nil)
-+	}
-+	return EVP_KDF_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", &_err)
 +}
 +
 +var _mkcgo_EVP_KDF_free uintptr
 +
 +func EVP_KDF_free(kdf EVP_KDF_PTR) {
-+	syscallN(_mkcgo_EVP_KDF_free, uintptr(kdf))
-+	runtime.KeepAlive(kdf)
++	syscallN(0, _mkcgo_EVP_KDF_free, uintptr(kdf))
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_dup uintptr
 +
 +func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_dup, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if EVP_MAC_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MAC_CTX_dup", nil)
-+	}
-+	return EVP_MAC_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_dup, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_dup", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_free uintptr
 +
 +func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
-+	syscallN(_mkcgo_EVP_MAC_CTX_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EVP_MAC_CTX_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_new uintptr
 +
 +func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_new, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if EVP_MAC_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MAC_CTX_new", nil)
-+	}
-+	return EVP_MAC_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_new", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_set_params uintptr
 +
 +func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MAC_CTX_set_params", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_CTX_set_params", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_fetch uintptr
 +
 +func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(algorithm)
-+	runtime.KeepAlive(properties)
-+	if EVP_MAC_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MAC_fetch", nil)
-+	}
-+	return EVP_MAC_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_final uintptr
 +
 +func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(outsize))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(outl)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MAC_final", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(outsize), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_final", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_init uintptr
 +
 +func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MAC_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_init", &_err)
 +}
 +
 +var _mkcgo_EVP_MAC_update uintptr
 +
 +func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(data)), uintptr(datalen))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(data)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MAC_update", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(data)), uintptr(datalen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_update", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_copy uintptr
 +
 +func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_copy, uintptr(out), uintptr(in))
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(in)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MD_CTX_copy", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_copy_ex uintptr
 +
 +func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in))
-+	runtime.KeepAlive(out)
-+	runtime.KeepAlive(in)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MD_CTX_copy_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_free uintptr
 +
 +func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
-+	syscallN(_mkcgo_EVP_MD_CTX_free, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
++	syscallN(0, _mkcgo_EVP_MD_CTX_free, uintptr(ctx))
 +}
 +
 +var _mkcgo_EVP_MD_CTX_get_params uintptr
 +
 +func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MD_CTX_get_params", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_get_params", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_gettable_params uintptr
 +
 +func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if OSSL_PARAM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MD_CTX_gettable_params", nil)
-+	}
-+	return OSSL_PARAM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_gettable_params", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_new uintptr
 +
 +func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_new)
-+	if EVP_MD_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MD_CTX_new", nil)
-+	}
-+	return EVP_MD_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_MD_CTX_PTR(r0), newMkcgoErr("EVP_MD_CTX_new", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_set_params uintptr
 +
 +func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_MD_CTX_set_params", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_set_params", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_settable_params uintptr
 +
 +func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if OSSL_PARAM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MD_CTX_settable_params", nil)
-+	}
-+	return OSSL_PARAM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_settable_params", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_fetch uintptr
 +
 +func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(algorithm)
-+	runtime.KeepAlive(properties)
-+	if EVP_MD_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_MD_fetch", nil)
-+	}
-+	return EVP_MD_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", &_err)
 +}
 +
 +var _mkcgo_EVP_MD_free uintptr
 +
 +func EVP_MD_free(md EVP_MD_PTR) {
-+	syscallN(_mkcgo_EVP_MD_free, uintptr(md))
-+	runtime.KeepAlive(md)
++	syscallN(0, _mkcgo_EVP_MD_free, uintptr(md))
 +}
 +
 +var _mkcgo_EVP_MD_get0_name uintptr
 +
 +func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_get0_name, uintptr(md))
-+	runtime.KeepAlive(md)
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_name, uintptr(md))
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
 +var _mkcgo_EVP_MD_get0_provider uintptr
 +
 +func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_get0_provider, uintptr(md))
-+	runtime.KeepAlive(md)
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_provider, uintptr(md))
 +	return OSSL_PROVIDER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_MD_get_block_size uintptr
 +
 +func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_block_size, uintptr(md))
-+	runtime.KeepAlive(md)
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_block_size, uintptr(md))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_EVP_MD_get_size uintptr
 +
 +func EVP_MD_get_size(md EVP_MD_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_size, uintptr(md))
-+	runtime.KeepAlive(md)
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_size, uintptr(md))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_EVP_MD_get_type uintptr
 +
 +func EVP_MD_get_type(md EVP_MD_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_EVP_MD_get_type, uintptr(md))
-+	runtime.KeepAlive(md)
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_type, uintptr(md))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
 +
 +func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_ctrl uintptr
 +
 +func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_ctrl", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_ctrl", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_free uintptr
 +
 +func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
-+	syscallN(_mkcgo_EVP_PKEY_CTX_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EVP_PKEY_CTX_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_new uintptr
 +
 +func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if EVP_PKEY_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_CTX_new", nil)
-+	}
-+	return EVP_PKEY_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_new_from_pkey uintptr
 +
 +func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(unsafe.Pointer(propquery)))
-+	runtime.KeepAlive(libctx)
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(propquery)
-+	if EVP_PKEY_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", nil)
-+	}
-+	return EVP_PKEY_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(unsafe.Pointer(propquery)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_new_id uintptr
 +
 +func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e))
-+	runtime.KeepAlive(e)
-+	if EVP_PKEY_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_CTX_new_id", nil)
-+	}
-+	return EVP_PKEY_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_id", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
 +
 +func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(label), uintptr(len))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(label), uintptr(len), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
 +
 +func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
 +
 +func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set_hkdf_md uintptr
 +
 +func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set_hkdf_mode uintptr
 +
 +func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_Q_keygen uintptr
 +
 +func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var _err errState
 +	var r0 uintptr
 +	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
-+		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)))
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	} else {
-+		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)))
-+	}
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(propq)
-+	runtime.KeepAlive(__type)
-+	runtime.KeepAlive(arg1)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_EC", nil)
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	}
-+	return EVP_PKEY_PTR(r0), nil
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_EC", &_err)
 +}
 +
 +func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(propq)
-+	runtime.KeepAlive(__type)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", nil)
-+	}
-+	return EVP_PKEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", &_err)
 +}
 +
 +func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var _err errState
 +	var r0 uintptr
 +	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
-+		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1))
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
 +	} else {
-+		r0, _, _ = syscallN(_mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1))
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
 +	}
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(propq)
-+	runtime.KeepAlive(__type)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", nil)
-+	}
-+	return EVP_PKEY_PTR(r0), nil
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_assign uintptr
 +
 +func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key))
-+	runtime.KeepAlive(pkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_assign", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_assign", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_decrypt uintptr
 +
 +func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	runtime.KeepAlive(arg3)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_decrypt", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_decrypt_init uintptr
 +
 +func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_decrypt_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive uintptr
 +
 +func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(keylen)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(keylen)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_derive", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive_init uintptr
 +
 +func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive_init, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_derive_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive_set_peer uintptr
 +
 +func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(peer)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_derive_set_peer", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_set_peer", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_encrypt uintptr
 +
 +func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	runtime.KeepAlive(arg3)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_encrypt", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_encrypt_init uintptr
 +
 +func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_encrypt_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_free uintptr
 +
 +func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
-+	syscallN(_mkcgo_EVP_PKEY_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_EVP_PKEY_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_EVP_PKEY_fromdata uintptr
 +
 +func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(unsafe.Pointer(pkey)), uintptr(selection), uintptr(params))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(params)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_fromdata", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(unsafe.Pointer(pkey)), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_fromdata_init uintptr
 +
 +func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_fromdata_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get0_DSA uintptr
 +
 +func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey))
-+	runtime.KeepAlive(pkey)
-+	if DSA_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_get0_DSA", nil)
-+	}
-+	return DSA_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return DSA_PTR(r0), newMkcgoErr("EVP_PKEY_get0_DSA", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get0_EC_KEY uintptr
 +
 +func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey))
-+	runtime.KeepAlive(pkey)
-+	if EC_KEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_get0_EC_KEY", nil)
-+	}
-+	return EC_KEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return EC_KEY_PTR(r0), newMkcgoErr("EVP_PKEY_get0_EC_KEY", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get1_RSA uintptr
 +
 +func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey))
-+	runtime.KeepAlive(pkey)
-+	if RSA_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_get1_RSA", nil)
-+	}
-+	return RSA_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return RSA_PTR(r0), newMkcgoErr("EVP_PKEY_get1_RSA", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get1_encoded_public_key uintptr
 +
 +func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(ppub)))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(ppub)
-+	if int(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get1_encoded_public_key", nil)
-+	}
-+	return int(r0), nil
++	var _err errState
++	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(ppub)), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_bits uintptr
 +
 +func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_bits, uintptr(pkey))
-+	runtime.KeepAlive(pkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get_bits", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bits, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bits", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_bn_param uintptr
 +
 +func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(key_name)
-+	runtime.KeepAlive(bn)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get_bn_param", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bn_param", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
 +
 +func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(priv)), uintptr(unsafe.Pointer(len)))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(priv)
-+	runtime.KeepAlive(len)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get_raw_private_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(priv)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
 +
 +func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(unsafe.Pointer(len)))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(pub)
-+	runtime.KeepAlive(len)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get_raw_public_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_size uintptr
 +
 +func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_get_size, uintptr(pkey))
-+	runtime.KeepAlive(pkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_get_size", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_size, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_size", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_keygen uintptr
 +
 +func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(ppkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_keygen", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_keygen_init uintptr
 +
 +func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_keygen_init, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_keygen_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new uintptr
 +
 +func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_new", nil)
-+	}
-+	return EVP_PKEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
 +
 +func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen))
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(key)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_new_raw_private_key", nil)
-+	}
-+	return EVP_PKEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
 +
 +func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen))
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(key)
-+	if EVP_PKEY_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_PKEY_new_raw_public_key", nil)
-+	}
-+	return EVP_PKEY_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_paramgen uintptr
 +
 +func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(ppkey)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_paramgen", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_paramgen_init uintptr
 +
 +func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_paramgen_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_private_check uintptr
 +
 +func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_private_check, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_private_check", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_private_check, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_private_check", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_public_check_quick uintptr
 +
 +func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx))
-+	runtime.KeepAlive(ctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_public_check_quick", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_public_check_quick", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_set1_EC_KEY uintptr
 +
 +func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_set1_EC_KEY", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_EC_KEY", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
 +
 +func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(publen))
-+	runtime.KeepAlive(pkey)
-+	runtime.KeepAlive(pub)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_set1_encoded_public_key", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(publen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_sign uintptr
 +
 +func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	runtime.KeepAlive(arg3)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_sign", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_sign_init uintptr
 +
 +func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_sign_init, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_sign_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign_init", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_up_ref uintptr
 +
 +func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_up_ref, uintptr(key))
-+	runtime.KeepAlive(key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_up_ref", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_up_ref, uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_up_ref", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_verify uintptr
 +
 +func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(sig)
-+	runtime.KeepAlive(tbs)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_verify", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify", &_err)
 +}
 +
 +var _mkcgo_EVP_PKEY_verify_init uintptr
 +
 +func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_PKEY_verify_init, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_PKEY_verify_init", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify_init", &_err)
 +}
 +
 +var _mkcgo_EVP_SIGNATURE_fetch uintptr
 +
 +func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)))
-+	runtime.KeepAlive(ctx)
-+	runtime.KeepAlive(algorithm)
-+	runtime.KeepAlive(properties)
-+	if EVP_SIGNATURE_PTR(r0) == nil {
-+		return nil, newMkcgoErr("EVP_SIGNATURE_fetch", nil)
-+	}
-+	return EVP_SIGNATURE_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", &_err)
 +}
 +
 +var _mkcgo_EVP_SIGNATURE_free uintptr
 +
 +func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
-+	syscallN(_mkcgo_EVP_SIGNATURE_free, uintptr(signature))
-+	runtime.KeepAlive(signature)
++	syscallN(0, _mkcgo_EVP_SIGNATURE_free, uintptr(signature))
 +}
 +
 +var _mkcgo_EVP_aes_128_cbc uintptr
 +
 +func EVP_aes_128_cbc() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_cbc)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_cbc)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_128_ctr uintptr
 +
 +func EVP_aes_128_ctr() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_ctr)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ctr)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_128_ecb uintptr
 +
 +func EVP_aes_128_ecb() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_ecb)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ecb)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_128_gcm uintptr
 +
 +func EVP_aes_128_gcm() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_128_gcm)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_gcm)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_192_cbc uintptr
 +
 +func EVP_aes_192_cbc() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_cbc)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_cbc)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_192_ctr uintptr
 +
 +func EVP_aes_192_ctr() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_ctr)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ctr)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_192_ecb uintptr
 +
 +func EVP_aes_192_ecb() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_ecb)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ecb)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_192_gcm uintptr
 +
 +func EVP_aes_192_gcm() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_192_gcm)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_gcm)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_256_cbc uintptr
 +
 +func EVP_aes_256_cbc() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_cbc)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_cbc)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_256_ctr uintptr
 +
 +func EVP_aes_256_ctr() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_ctr)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ctr)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_256_ecb uintptr
 +
 +func EVP_aes_256_ecb() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_ecb)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ecb)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_aes_256_gcm uintptr
 +
 +func EVP_aes_256_gcm() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_aes_256_gcm)
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_gcm)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_default_properties_enable_fips uintptr
 +
 +func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable))
-+	runtime.KeepAlive(libctx)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("EVP_default_properties_enable_fips", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_default_properties_enable_fips", &_err)
 +}
 +
 +var _mkcgo_EVP_default_properties_is_fips_enabled uintptr
 +
 +func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
-+	r0, _, _ := syscallN(_mkcgo_EVP_default_properties_is_fips_enabled, uintptr(libctx))
-+	runtime.KeepAlive(libctx)
++	r0, _ := syscallN(0, _mkcgo_EVP_default_properties_is_fips_enabled, uintptr(libctx))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_EVP_des_cbc uintptr
 +
 +func EVP_des_cbc() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_des_cbc)
++	r0, _ := syscallN(0, _mkcgo_EVP_des_cbc)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_des_ecb uintptr
 +
 +func EVP_des_ecb() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_des_ecb)
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ecb)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_des_ede3_cbc uintptr
 +
 +func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_des_ede3_cbc)
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_cbc)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_des_ede3_ecb uintptr
 +
 +func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_des_ede3_ecb)
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_ecb)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_md4 uintptr
 +
 +func EVP_md4() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_md4)
++	r0, _ := syscallN(0, _mkcgo_EVP_md4)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_md5 uintptr
 +
 +func EVP_md5() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_md5)
++	r0, _ := syscallN(0, _mkcgo_EVP_md5)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_md5_sha1 uintptr
 +
 +func EVP_md5_sha1() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_md5_sha1)
++	r0, _ := syscallN(0, _mkcgo_EVP_md5_sha1)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_rc4 uintptr
 +
 +func EVP_rc4() EVP_CIPHER_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_rc4)
++	r0, _ := syscallN(0, _mkcgo_EVP_rc4)
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_ripemd160 uintptr
 +
 +func EVP_ripemd160() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_ripemd160)
++	r0, _ := syscallN(0, _mkcgo_EVP_ripemd160)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha1 uintptr
 +
 +func EVP_sha1() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha1)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha1)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha224 uintptr
 +
 +func EVP_sha224() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha224)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha224)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha256 uintptr
 +
 +func EVP_sha256() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha256)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha256)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha384 uintptr
 +
 +func EVP_sha384() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha384)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha384)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha3_224 uintptr
 +
 +func EVP_sha3_224() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha3_224)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_224)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha3_256 uintptr
 +
 +func EVP_sha3_256() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha3_256)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_256)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha3_384 uintptr
 +
 +func EVP_sha3_384() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha3_384)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_384)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha3_512 uintptr
 +
 +func EVP_sha3_512() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha3_512)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_512)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha512 uintptr
 +
 +func EVP_sha512() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha512)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha512_224 uintptr
 +
 +func EVP_sha512_224() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha512_224)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512_224)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_EVP_sha512_256 uintptr
 +
 +func EVP_sha512_256() EVP_MD_PTR {
-+	r0, _, _ := syscallN(_mkcgo_EVP_sha512_256)
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512_256)
 +	return EVP_MD_PTR(r0)
 +}
 +
 +var _mkcgo_FIPS_mode uintptr
 +
 +func FIPS_mode() int32 {
-+	r0, _, _ := syscallN(_mkcgo_FIPS_mode)
++	r0, _ := syscallN(0, _mkcgo_FIPS_mode)
 +	return int32(r0)
 +}
 +
 +var _mkcgo_FIPS_mode_set uintptr
 +
 +func FIPS_mode_set(r int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_FIPS_mode_set, uintptr(r))
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("FIPS_mode_set", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_FIPS_mode_set, uintptr(r), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("FIPS_mode_set", &_err)
 +}
 +
 +var _mkcgo_HMAC_CTX_copy uintptr
 +
 +func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src))
-+	runtime.KeepAlive(dest)
-+	runtime.KeepAlive(src)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("HMAC_CTX_copy", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_CTX_copy", &_err)
 +}
 +
 +var _mkcgo_HMAC_CTX_free uintptr
 +
 +func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
-+	syscallN(_mkcgo_HMAC_CTX_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_HMAC_CTX_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_HMAC_CTX_new uintptr
 +
 +func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_HMAC_CTX_new)
-+	if HMAC_CTX_PTR(r0) == nil {
-+		return nil, newMkcgoErr("HMAC_CTX_new", nil)
-+	}
-+	return HMAC_CTX_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_HMAC_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return HMAC_CTX_PTR(r0), newMkcgoErr("HMAC_CTX_new", &_err)
 +}
 +
 +var _mkcgo_HMAC_Final uintptr
 +
 +func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	runtime.KeepAlive(arg2)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("HMAC_Final", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Final", &_err)
 +}
 +
 +var _mkcgo_HMAC_Init_ex uintptr
 +
 +func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg3)
-+	runtime.KeepAlive(arg4)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("HMAC_Init_ex", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Init_ex", &_err)
 +}
 +
 +var _mkcgo_HMAC_Update uintptr
 +
 +func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2))
-+	runtime.KeepAlive(arg0)
-+	runtime.KeepAlive(arg1)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("HMAC_Update", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Update", &_err)
 +}
 +
 +var _mkcgo_OBJ_nid2sn uintptr
 +
 +func OBJ_nid2sn(n int32) *byte {
-+	r0, _, _ := syscallN(_mkcgo_OBJ_nid2sn, uintptr(n))
++	r0, _ := syscallN(0, _mkcgo_OBJ_nid2sn, uintptr(n))
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
 +var _mkcgo_OPENSSL_init uintptr
 +
 +func OPENSSL_init() {
-+	syscallN(_mkcgo_OPENSSL_init)
++	syscallN(0, _mkcgo_OPENSSL_init)
 +}
 +
 +var _mkcgo_OPENSSL_init_crypto uintptr
 +
 +func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings))
-+	runtime.KeepAlive(settings)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("OPENSSL_init_crypto", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OPENSSL_init_crypto", &_err)
 +}
 +
 +func OPENSSL_version_major_Available() bool {
@@ -15466,7 +14975,7 @@ index 00000000000000..4f7e9296c1552d
 +var _mkcgo_OPENSSL_version_major uintptr
 +
 +func OPENSSL_version_major() uint32 {
-+	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_major)
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_major)
 +	return uint32(r0)
 +}
 +
@@ -15477,7 +14986,7 @@ index 00000000000000..4f7e9296c1552d
 +var _mkcgo_OPENSSL_version_minor uintptr
 +
 +func OPENSSL_version_minor() uint32 {
-+	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_minor)
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_minor)
 +	return uint32(r0)
 +}
 +
@@ -15488,140 +14997,104 @@ index 00000000000000..4f7e9296c1552d
 +var _mkcgo_OPENSSL_version_patch uintptr
 +
 +func OPENSSL_version_patch() uint32 {
-+	r0, _, _ := syscallN(_mkcgo_OPENSSL_version_patch)
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_patch)
 +	return uint32(r0)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_free uintptr
 +
 +func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
-+	syscallN(_mkcgo_OSSL_PARAM_BLD_free, uintptr(bld))
-+	runtime.KeepAlive(bld)
++	syscallN(0, _mkcgo_OSSL_PARAM_BLD_free, uintptr(bld))
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_new uintptr
 +
 +func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_new)
-+	if OSSL_PARAM_BLD_PTR(r0) == nil {
-+		return nil, newMkcgoErr("OSSL_PARAM_BLD_new", nil)
-+	}
-+	return OSSL_PARAM_BLD_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_new, uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_BLD_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_new", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
 +
 +func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(bn))
-+	runtime.KeepAlive(bld)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(bn)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_BN", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_int32 uintptr
 +
 +func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(num))
-+	runtime.KeepAlive(bld)
-+	runtime.KeepAlive(key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_int32", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(num), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
 +
 +func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(buf), uintptr(bsize))
-+	runtime.KeepAlive(bld)
-+	runtime.KeepAlive(key)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(buf), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
 +
 +func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(buf)), uintptr(bsize))
-+	runtime.KeepAlive(bld)
-+	runtime.KeepAlive(key)
-+	runtime.KeepAlive(buf)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(buf)), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_to_param uintptr
 +
 +func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld))
-+	runtime.KeepAlive(bld)
-+	if OSSL_PARAM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("OSSL_PARAM_BLD_to_param", nil)
-+	}
-+	return OSSL_PARAM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_to_param", &_err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_free uintptr
 +
 +func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
-+	syscallN(_mkcgo_OSSL_PARAM_free, uintptr(p))
-+	runtime.KeepAlive(p)
++	syscallN(0, _mkcgo_OSSL_PARAM_free, uintptr(p))
 +}
 +
 +var _mkcgo_OSSL_PARAM_locate_const uintptr
 +
 +func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(unsafe.Pointer(key)))
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(key)
-+	if OSSL_PARAM_PTR(r0) == nil {
-+		return nil, newMkcgoErr("OSSL_PARAM_locate_const", nil)
-+	}
-+	return OSSL_PARAM_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", &_err)
 +}
 +
 +var _mkcgo_OSSL_PROVIDER_available uintptr
 +
 +func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(unsafe.Pointer(name)))
-+	runtime.KeepAlive(libctx)
-+	runtime.KeepAlive(name)
++	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(unsafe.Pointer(name)))
 +	return int32(r0)
 +}
 +
 +var _mkcgo_OSSL_PROVIDER_get0_name uintptr
 +
 +func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_get0_name, uintptr(prov))
-+	runtime.KeepAlive(prov)
++	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_get0_name, uintptr(prov))
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
 +var _mkcgo_OSSL_PROVIDER_try_load uintptr
 +
 +func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(unsafe.Pointer(name)), uintptr(retain_fallbacks))
-+	runtime.KeepAlive(libctx)
-+	runtime.KeepAlive(name)
-+	if OSSL_PROVIDER_PTR(r0) == nil {
-+		return nil, newMkcgoErr("OSSL_PROVIDER_try_load", nil)
-+	}
-+	return OSSL_PROVIDER_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(unsafe.Pointer(name)), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", &_err)
 +}
 +
 +var _mkcgo_OpenSSL_version uintptr
 +
 +func OpenSSL_version(__type int32) *byte {
-+	r0, _, _ := syscallN(_mkcgo_OpenSSL_version, uintptr(__type))
++	r0, _ := syscallN(0, _mkcgo_OpenSSL_version, uintptr(__type))
 +	return (*byte)(unsafe.Pointer(r0))
 +}
 +
@@ -15632,120 +15105,101 @@ index 00000000000000..4f7e9296c1552d
 +var _mkcgo_OpenSSL_version_num uintptr
 +
 +func OpenSSL_version_num() uint64 {
-+	r0, _, _ := syscallN(_mkcgo_OpenSSL_version_num)
++	r0, _ := syscallN(0, _mkcgo_OpenSSL_version_num)
 +	return uint64(r0)
 +}
 +
 +var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
 +
 +func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_PKCS5_PBKDF2_HMAC, uintptr(unsafe.Pointer(pass)), uintptr(passlen), uintptr(unsafe.Pointer(salt)), uintptr(saltlen), uintptr(iter), uintptr(digest), uintptr(keylen), uintptr(unsafe.Pointer(out)))
-+	runtime.KeepAlive(pass)
-+	runtime.KeepAlive(salt)
-+	runtime.KeepAlive(digest)
-+	runtime.KeepAlive(out)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("PKCS5_PBKDF2_HMAC", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(unsafe.Pointer(pass)), uintptr(passlen), uintptr(unsafe.Pointer(salt)), uintptr(saltlen), uintptr(iter), uintptr(digest), uintptr(keylen), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", &_err)
 +}
 +
 +var _mkcgo_RAND_bytes uintptr
 +
 +func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_RAND_bytes, uintptr(unsafe.Pointer(arg0)), uintptr(arg1))
-+	runtime.KeepAlive(arg0)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("RAND_bytes", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RAND_bytes", &_err)
 +}
 +
 +var _mkcgo_RSA_free uintptr
 +
 +func RSA_free(arg0 RSA_PTR) {
-+	syscallN(_mkcgo_RSA_free, uintptr(arg0))
-+	runtime.KeepAlive(arg0)
++	syscallN(0, _mkcgo_RSA_free, uintptr(arg0))
 +}
 +
 +var _mkcgo_RSA_get0_crt_params uintptr
 +
 +func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
-+	syscallN(_mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(unsafe.Pointer(dmp1)), uintptr(unsafe.Pointer(dmq1)), uintptr(unsafe.Pointer(iqmp)))
-+	runtime.KeepAlive(r)
-+	runtime.KeepAlive(dmp1)
-+	runtime.KeepAlive(dmq1)
-+	runtime.KeepAlive(iqmp)
++	syscallN(0, _mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(unsafe.Pointer(dmp1)), uintptr(unsafe.Pointer(dmq1)), uintptr(unsafe.Pointer(iqmp)))
 +}
 +
 +var _mkcgo_RSA_get0_factors uintptr
 +
 +func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
-+	syscallN(_mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)))
-+	runtime.KeepAlive(rsa)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(q)
++	syscallN(0, _mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)))
 +}
 +
 +var _mkcgo_RSA_get0_key uintptr
 +
 +func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
-+	syscallN(_mkcgo_RSA_get0_key, uintptr(rsa), uintptr(unsafe.Pointer(n)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(d)))
-+	runtime.KeepAlive(rsa)
-+	runtime.KeepAlive(n)
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(d)
++	syscallN(0, _mkcgo_RSA_get0_key, uintptr(rsa), uintptr(unsafe.Pointer(n)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(d)))
 +}
 +
 +var _mkcgo_RSA_new uintptr
 +
 +func RSA_new() (RSA_PTR, error) {
-+	r0, _, _ := syscallN(_mkcgo_RSA_new)
-+	if RSA_PTR(r0) == nil {
-+		return nil, newMkcgoErr("RSA_new", nil)
-+	}
-+	return RSA_PTR(r0), nil
++	var _err errState
++	r0, _ := syscallN(1, _mkcgo_RSA_new, uintptr(unsafe.Pointer(&_err)))
++	return RSA_PTR(r0), newMkcgoErr("RSA_new", &_err)
 +}
 +
 +var _mkcgo_RSA_set0_crt_params uintptr
 +
 +func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp))
-+	runtime.KeepAlive(rsa)
-+	runtime.KeepAlive(dmp1)
-+	runtime.KeepAlive(dmp2)
-+	runtime.KeepAlive(iqmp)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("RSA_set0_crt_params", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_crt_params", &_err)
 +}
 +
 +var _mkcgo_RSA_set0_factors uintptr
 +
 +func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q))
-+	runtime.KeepAlive(rsa)
-+	runtime.KeepAlive(p)
-+	runtime.KeepAlive(q)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("RSA_set0_factors", nil)
-+	}
-+	return int32(r0), nil
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_factors", &_err)
 +}
 +
 +var _mkcgo_RSA_set0_key uintptr
 +
 +func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	r0, _, _ := syscallN(_mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d))
-+	runtime.KeepAlive(r)
-+	runtime.KeepAlive(n)
-+	runtime.KeepAlive(e)
-+	runtime.KeepAlive(d)
-+	if int32(r0) <= 0 {
-+		return 0, newMkcgoErr("RSA_set0_key", nil)
++	var _err errState
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_key", &_err)
++}
++
++//go:nosplit
++func _mkcgo_error_check(errType, r1, args, n uintptr) {
++	var hasError bool
++	switch errType {
++	case 1:
++		hasError = r1 == 0
++	case 2:
++		hasError = int32(r1) == -1
++	case 3:
++		hasError = int32(r1) <= 0
++	case 4:
++		hasError = int64(r1) <= 0
++	default:
++		panic("invalid error check type")
++	}
++	if hasError {
++		errPtr := (*errState)(unsafe.Pointer(*(*uintptr)(unsafe.Pointer(args + unsafe.Sizeof(uintptr(0))*n))))
++		retrieveErrorState(errPtr)
 +	}
-+	return int32(r0), nil
 +}
 +
 +func MkcgoLoad_(handle unsafe.Pointer) {
@@ -15769,6 +15223,7 @@ index 00000000000000..4f7e9296c1552d
 +	_mkcgo_EC_POINT_point2oct = dlsym(handle, "EC_POINT_point2oct\x00", false)
 +	_mkcgo_ERR_clear_error = dlsym(handle, "ERR_clear_error\x00", false)
 +	_mkcgo_ERR_error_string_n = dlsym(handle, "ERR_error_string_n\x00", false)
++	_mkcgo_ERR_get_error = dlsym(handle, "ERR_get_error\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_ctrl = dlsym(handle, "EVP_CIPHER_CTX_ctrl\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_free = dlsym(handle, "EVP_CIPHER_CTX_free\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_new = dlsym(handle, "EVP_CIPHER_CTX_new\x00", false)
@@ -15871,6 +15326,7 @@ index 00000000000000..4f7e9296c1552d
 +	_mkcgo_EC_POINT_point2oct = 0
 +	_mkcgo_ERR_clear_error = 0
 +	_mkcgo_ERR_error_string_n = 0
++	_mkcgo_ERR_get_error = 0
 +	_mkcgo_EVP_CIPHER_CTX_ctrl = 0
 +	_mkcgo_EVP_CIPHER_CTX_free = 0
 +	_mkcgo_EVP_CIPHER_CTX_new = 0
@@ -26782,12 +26238,12 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..33a7ff4e5c1614 100644
+index f1e33686ed0626..837ca8869e5c65 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,21 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251016123339-09326914d404
-+## explicit; go 1.22
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
++## explicit; go 1.23
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo

From 3c257cec152d8f0b635f2318787ff60b934e36a8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 22 Oct 2025 16:02:31 +0000
Subject: [PATCH 526/887] Update submodule to latest master (d09a8c8e):
 go/types, types2: simplify locking in Named.resolveUnderlying

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 29d43df8ab2..d09a8c8ef47 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 29d43df8ab212910487345c354491b67780798cf
+Subproject commit d09a8c8ef473ba51244d6da9118b956bedb1b20d

From db59ad5ce8ec1b37468e68753614dd62b2d51365 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 23 Oct 2025 17:48:22 +0200
Subject: [PATCH 527/887] upgrade darwin backend (#1921)

---
 .../0001-Vendor-external-dependencies.patch   | 9119 +++++++++++------
 1 file changed, 5996 insertions(+), 3123 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index fcef7397c66..7f171e0efdb 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -35,7 +35,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
- src/go/build/deps_test.go                     |   36 +-
+ src/go/build/deps_test.go                     |   38 +-
  src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
@@ -124,35 +124,60 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
- .../internal/cryptokit/CryptoKit.o            |  Bin 0 -> 208856 bytes
- .../internal/cryptokit/cgo_go124.go           |   40 +
- .../internal/cryptokit/cryptokit.go           |   39 +
- .../internal/cryptokit/cryptokit.h            |   67 +
- .../internal/cryptokit/ed25519.go             |   72 +
- .../internal/cryptokit/gcm.go                 |   36 +
- .../internal/cryptokit/hash.go                |  257 ++
- .../internal/cryptokit/hashclone.go           |   17 +
- .../internal/cryptokit/hashclone_go125.go     |   12 +
- .../internal/cryptokit/hkdf.go                |   77 +
- .../internal/cryptokit/hmac.go                |  146 ++
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  336 +++
+ .../internal/commoncrypto/commoncrypto.go     |    9 +
+ .../internal/commoncrypto/shims.h             |   72 +
+ .../internal/commoncrypto/syscall_nocgo.go    |   20 +
+ .../internal/commoncrypto/zcommoncrypto.c     |   47 +
+ .../internal/commoncrypto/zcommoncrypto.go    |   50 +
+ .../internal/commoncrypto/zcommoncrypto.h     |   71 +
+ .../internal/commoncrypto/zcommoncrypto.s     |   69 +
+ .../commoncrypto/zcommoncrypto_cgo.go         |   58 +
+ .../commoncrypto/zcommoncrypto_go124.go       |   11 +
+ .../commoncrypto/zcommoncrypto_nocgo.go       |   96 +
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 94232 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 92360 bytes
+ .../internal/cryptokit/cryptokit.go           |    8 +
+ .../internal/cryptokit/cryptokit_cgo.go       |   10 +
+ .../internal/cryptokit/shims.h                |   57 +
+ .../internal/cryptokit/syscall_nocgo.go       |   20 +
+ .../internal/cryptokit/zcryptokit.c           |  167 ++
+ .../internal/cryptokit/zcryptokit.h           |   49 +
+ .../internal/cryptokit/zcryptokit.s           |  189 ++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  143 ++
+ .../cryptokit/zcryptokit_cgo_go124.go         |   45 +
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  218 ++
+ .../cryptokit/zcryptokit_swift_amd64.go       |  146 ++
+ .../cryptokit/zcryptokit_swift_arm64.go       |  145 ++
+ .../internal/security/security.go             |    9 +
+ .../internal/security/shims.h                 |  111 +
+ .../internal/security/syscall_nocgo.go        |   20 +
+ .../internal/security/zsecurity.c             |  132 +
+ .../internal/security/zsecurity.go            |   22 +
+ .../internal/security/zsecurity.h             |  104 +
+ .../internal/security/zsecurity.s             |  154 ++
+ .../internal/security/zsecurity_cgo.go        |  166 ++
+ .../internal/security/zsecurity_cgo_go124.go  |   14 +
+ .../internal/security/zsecurity_go124.go      |   13 +
+ .../internal/security/zsecurity_nocgo.go      |  480 ++++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 ++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
- .../go-crypto-darwin/xcrypto/cgo_go124.go     |   23 +
- .../go-crypto-darwin/xcrypto/cipher.go        |  122 +
- .../microsoft/go-crypto-darwin/xcrypto/des.go |  117 +
+ .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
+ .../microsoft/go-crypto-darwin/xcrypto/des.go |  111 +
  .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   32 +
  .../go-crypto-darwin/xcrypto/ecdh.go          |  135 +
  .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
- .../go-crypto-darwin/xcrypto/ed25519.go       |  100 +
- .../microsoft/go-crypto-darwin/xcrypto/evp.go |  345 +++
- .../go-crypto-darwin/xcrypto/hash.go          |   68 +
- .../go-crypto-darwin/xcrypto/hkdf.go          |   66 +
- .../go-crypto-darwin/xcrypto/hmac.go          |   21 +
- .../go-crypto-darwin/xcrypto/pbkdf2.go        |   65 +
- .../go-crypto-darwin/xcrypto/rand.go          |   26 +
- .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   83 +
- .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  194 ++
- .../go-crypto-darwin/xcrypto/xcrypto.go       |   49 +
+ .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go |  341 +++
+ .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
+ .../go-crypto-darwin/xcrypto/hash.go          |  325 +++
+ .../go-crypto-darwin/xcrypto/hashclone.go     |   17 +
+ .../xcrypto/hashclone_go125.go                |   12 +
+ .../go-crypto-darwin/xcrypto/hkdf.go          |   98 +
+ .../go-crypto-darwin/xcrypto/hmac.go          |  121 +
+ .../go-crypto-darwin/xcrypto/pbkdf2.go        |   68 +
+ .../go-crypto-darwin/xcrypto/rand.go          |   28 +
+ .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
+ .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  208 ++
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
  .../microsoft/go-crypto-winnative/cng/aes.go  |  427 ++++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
@@ -180,8 +205,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/bcrypt/zsyscall_windows.go       |  412 +++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
- src/vendor/modules.txt                        |   18 +
- 173 files changed, 23744 insertions(+), 7 deletions(-)
+ src/vendor/modules.txt                        |   20 +
+ 198 files changed, 26305 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -291,20 +316,43 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/zaes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
@@ -312,14 +360,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/bbig/big.go
@@ -2005,7 +2055,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..803e29766922fd 100644
+index c5e901b9ef22e8..b03eab71fde329 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2015,28 +2065,28 @@ index c5e901b9ef22e8..803e29766922fd 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
++	github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..dd74b66c6b29f3 100644
+index 4a52682161fc23..571e4ecde24ba8 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3 h1:A406U4ZlIBfkU7taBsFNxLEZHov9jn3O0GVuIfbTSBk=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3/go.mod h1:v3d8e4DPboAOvaae2pm/QTTRlcdJJYmMegkHB8hEvjU=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05 h1:I6L7NzERXHhyif6YpLgL8GTvSbF8ac3j1bwUBDri9Fo=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1 h1:4wwHA6hOmqxHhar9TvjXjXHAUozBWvaBsUx4DrDms7c=
++github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 853605f5c29df2..db5e6ba6d64978 100644
+index 853605f5c29df2..373efd8319c675 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -528,6 +528,25 @@ var depsRules = `
+@@ -528,6 +528,27 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -2052,6 +2102,8 @@ index 853605f5c29df2..db5e6ba6d64978 100644
 +	< github.com/golang-fips/openssl/v2/internal/fakecgo
 +	< github.com/golang-fips/openssl/v2/internal/ossl
 +	< github.com/golang-fips/openssl/v2
++	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto
++	< github.com/microsoft/go-crypto-darwin/internal/security
 +	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +	< github.com/microsoft/go-crypto-darwin/xcrypto
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
@@ -2062,7 +2114,7 @@ index 853605f5c29df2..db5e6ba6d64978 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -539,13 +558,12 @@ var depsRules = `
+@@ -539,13 +560,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2080,7 +2132,7 @@ index 853605f5c29df2..db5e6ba6d64978 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -566,6 +584,10 @@ var depsRules = `
+@@ -566,6 +586,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2091,7 +2143,7 @@ index 853605f5c29df2..db5e6ba6d64978 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -900,7 +922,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -900,7 +924,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2100,7 +2152,7 @@ index 853605f5c29df2..db5e6ba6d64978 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -910,7 +932,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -910,7 +934,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -17767,3453 +17819,6179 @@ index 00000000000000..73891afeab93d7
 +	}
 +	return new(big.Int).SetBytes(b)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit.o
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
 new file mode 100644
-index 0000000000000000000000000000000000000000..0f28482a272ec4195170331ca856d75840fb8859
-GIT binary patch
-literal 208856
-zcmeFa34B!5`TsuwR1hR_#|0e~HHgs(o8X!u2}~q`NZ710laNeEFq>H<Sh2B)%@|W-
-zU5ZuP)K;Zd+xTszv2_WH5|?URs#L7Tr7Fe+tqU$S|Ig=~=gizWnMqjm`+fcXFRo7B
-z^W5h=XW#F+!xP{B^<kIGH7LR5+6Nr$awWN33Cq&(eFW}}03o;F^Q+Cgr{q0<_T<2x
-z9N3csdvah;4(!Q+Jvp!^2lnK^o*dYd1AB5{PY&$Kf&Zs+;F+&J_!bNQ1T6erSns<I
-z$ESU7{Bh%h>o9yusEl(ZU#%6}X@kqi+)UtSU*5zO2-F7aYxQ?6&&^yoHzJ#FtwH^b
-z{tdxb_jNAUczzk;YS0?}HxMW*tqoQel%-BqHv)lZ|BOG_%~03sGVPy;u94=8Fc2uL
-zsjV)pSQ3__{cDqWb&7tC<=>z_{?#liEv}sus9jzatPU32@vAS^2J6JGs$A!P+yCe?
-zu)IV56;@W%L^9C!?{tZ{iO2W~?Vs(BkpqEXNuap8pj^^r`<G@i;y`UN1^%%bH2lfs
-zdVv+iy86a1!#md-ag=tc{+=ecrd*-@bFX)~hDMx)zXbx7i<cG#O3MqD1WPN5D+7UO
-z{~E+UV_OgZOxnYqIKBh|MFq75ksG#ujpCnb1aQ_M@ykd2+!3?zH>S6|s-UnoP*<_6
-zw4x{w$j%5W@ul&HT56Sw*6?GU-uw+NSDjWxMVG=Td^T@F{vxAC?Umq4u14L*JvTlH
-z__$od@!3y(S4}cu;^48k!#X|`c3of!KFRpdzZ6xz%POlca-~n76|7a?aGw|5x$&{x
-zRhBO<tw5cK=TBvIaC&831v0a=5>=u<cX`3;OG*oaHE<Q*UG?&++RB-w;fft6+>Fwi
-zi@eo~OKYno;5hE0;%35i<BOHftl1JK{qgkGXIB;$lzHoFOM(@(rG+N3a7Xv<zV7pa
-zg>}`Xwab;B<;e0%DPtYR7k<Zw;pqFSZ%Ahasx4hyik@tFdSwNCs18;XE~j(LA8}tD
-zRQFlFQT|wEV(i_~?lKChQB$eJWzymB2YHP66qdx(N9An{`*5Dd@qhN>rNP45(o2Hr
-z5`H9~RQeX?LJ`B?fHQBXx6&WTQyq71btNiWO{5D~>4^7do-g!o-^%yhiOHEs*-i7@
-zzNSo%FO)H6RCZ|Yn54x0hm3ibroNRM-HSFP9_`u{_lvgDi{iwi(KFEAyTCi&JI^~e
-z&v(W9+)U32J(UyM<O}7r`$F?Ne4+njg}zPg)!~LRSNodMw);YvEnu2NrX$g}vU{6v
-z>_%Vcj-kE1y<yj@Jdnho)z{=p^MyKN*d)<aEKRU2;*~G#)v7f8wNLO_p?_y5{3ko~
-zg)j7~3MMP`m@o8vPQo|Yq2BD!+j4JXR_LYdP+g}lw5TgPbbkqaQ#Q9PRPoTJ*-ev}
-zO}?gs6`EIcW{1kxWQX3(4t=it$qof^YXy9`BVYOOPIl;_T=nf+<v{)Mh1UCEi*js(
-zp)YjfD7eT>eM`K!V+zEaRc|G(dKg`&uW1EJe9<UhQ(dwzLHm*wVsvq*9omk_-N&**
-z|G=FjU&7ZWwI~%`WKFl}9DNODZN8=(btz=F_U0xr-AD*y?N)JpC|RMd5m^95Lw4vx
-z6SsP$VX~^!Hyt5V&!N7i{dBG%6Ps^T9yQ(1lFtrp^Mzi^3L(L_F{N3de`YtSMCR%2
-zSh+C?$<1zhh;gd(B3}^YOy&=2T4q<+<9UeX7l{6vtk7m<$xOQPC+HXSeN@BDmfqZ<
-zzUH$S6XoRLG<^H(KKSDcZPLMoHY6tRHDj^MmAHRel5bOHCzLK<JOAS9W{}y<<(-eX
-zA!&=|y}A)IAD=$)YVZwv%=gGqT2OA4Gs!+@=o0nproHIc*Zh#q-w#m(lu2R|lc|-V
-z^eKt^r@MWB)&9C(f7p$04{%nhvad_WrD+8!&9_J?N)CCxVvVoqe%%aI6HqrFV)e!S
-zg@9N+l&^2)I&QHn;fe)m{BA_{HfSOAnqqe79mT(~`$c%Da&;ZzVzaL~xcLI_h2BM8
-zzc;XGLssZfU+CGK&^K_0E~?A7?%lIfxA>Y59t~q(;gBEu61sYk!JSZe64!3-IS_3J
-z-`yEw-%V_If&mn6M$OF*y_XewMg`JyVpdb#sH|~yNr?@=hXaQy3#}q++#)D$P*KaA
-z;tQcqWDN<|1eIHFfB(6a9r_5RqGFu7W$Qn_?d?q*&i{PPs>k^2A&8;3Jx#^)p()7l
-z2bi78J)9lwdLI_s@i_vj;rJAvl6dr$aDhI#CAvRe`F^r5^oeimSH4x~AD{IlW<2A&
-z;>%vROuTj(vpMu_W@-nj_0zOA)w?n0MYvDAk|BEkM$IGqqbfZre4F{w;eCMjy$|uP
-za_3bJy{hgjSKbGe3sp_CL-X3b>YH!XbBR~}1se8jI$di~x6%7#B(4oUp13yi34E!0
-z5`R`amAH1%-|?mV>BO};&*H{&5Eea;Kl5I|pUi*w*1bLyV@;cH-8)HH>)srdweAgf
-z*1GOwD0804TKD>ttabnP_}0CdoVD&9DBd3BTh|STZw-aM3x*w6=e*dHl9~EkX6lyI
-zUgQQ+sQz|jraqpT`a$ZJ%v5x^pQl28EA=@HY3<p=zRn)jlQZmX-|$Qb+kC?|XAkSl
-z8P=6Od{LWk_==9~VXtKm+myKWS>L)hJicLHVYp3pRQ<%^7(8`}sq(_;nU|}_N#EG7
-zSyqV|ugSpGROLzhOYTI|A+gGaUPaqc+2&idrG7HTC~>Pgf$08gQyOQ{DCmW#?VlhX
-zLoZ+h#MqCT6g7V5g*%fD#GrOjR_F_i+lUpSR69GWqgwg($jiOHE51hE`_YPpI~37%
-zZ$>(+w4QTPxAdHiq?l&l3vFNz@K<=q%jG*}ea}%b^h^pa^r`E8A#^6vl|&jqpZf31
-z3VogxLeHfK;}C~4=|VYhtXPfltQFO8wa(9`QNAYhl)5+aHShON-4|WqOXy@@v>E+R
-z5-LashNY}^TSsMuUd~$go;xeFC2L(za#rY-taa~uvO@pLTKB<}tWZ~$a*ax`b(Amk
-zqHo=YZXZVCbswQovb#gC*3r1AvvI}a7_;&1iHydaCo>x7J(bajD&H7<I-{}tnZ|it
-zjdjmvG-f{6nDcyEW8DjBjVu1)Yd$jBw{io9I1HG2Ho>N}^>buScHx`8bzi%)$G(|(
-z%>j&lyUx_!bC9dr03*LjuGFE9#4CRZL)4?3&`0WC*4T}S4KLwdPQu$cq5p1Og|E^6
-zG!-WKnl3<{VgzjeYLV+<zp_KG`^K(IY~Y4UR>ITp4pF;!a?i<jw__y+eN)fLXm@ly
-zG;uhh20_Po>SkYJ_GZk~a#nqwm6(Acz?!gy3sg-fUPiU|MKwS6w#6+T^r0`}a|$x(
-zNBATjoz`bQ%U&!y^kg<Vg{;uiX#8DSq0h1~XgQ`0YJM7XG8<eInSQb(*E89;(@)HP
-zIr2tqINFMh9;IW=n1ids2AK^qSH?u4uhXp1J2?se#u#m;Xle+ahhcn0S60He;hGd$
-zwUFT=t<bc^m>=p=z{FHqRr88=Ok^?D*bbwX$mBHGs%EDDRWs8?qq3Xok}yN$q@d9k
-zs_V!O-CK`<FdS+R?Flm+X6klnPs%Z)ebLt>(L_6L!o&})GP{Wr?2q7oTXxfmhV0N+
-zXjq-Sc?k8R)X)FQQ8YXBWpCaT%)XLU$aioygeg2HlK>|?s5|Yx=4Pd6x}W92N`z?w
-zW)m_u%L%Q^ZVI--^On4*X=&n>r?JIhqNP*hs3h^`mOTr?b4xw0s=tUSx*MdZxxD=m
-zHze_IfVpM6a)#6~_R&>T&9@_SOPy}#+!DFClXJ_}G9N@qlps7k#YF#Fhgz7~sVA2#
-zV3xOzf2?UD3ax8vE3z#o^jSFPlyfdy*1dOj>gVW)Utzu$9(0{A;fdZiP>ASL(S3g0
-zbF4444&UAEVXjqfKJFRmYpNRM8&`$N-sQSD(C=oh!8{s<%4dlU=AbWPU`5|7H!@pU
-zfiZ(NZNWH<j0lA)kRf_RfPL1w4?Qq2eq<)D{k$hPyQv1X{UQt%VMWf^51CTbo6d`;
-zBo5EQAg;!PumkVdR}&k!)s<8DIg${uWFIJ&$e(0H4GpQ4qdDrIFZ53x$0jpr*ZoXn
-ze!n7qF?oCEjv4A}dMLV(P<zd|?C4lAHE&W&Jrp`yiwSihzMKAp17!3hpB=3|u{{)N
-zL_%7fv)Yyv^utr}$-(CWeD1`j8=r^qaUlpZU-F?XVxe&6pxVREOsLCn4oX<5f1!3J
-zIH%%#>T6porTMCw1}!qqH$<in#Vxs}6|Cy09d!N%Uz1uLN=GO5s+pXR-4o28@_bGE
-z_*Qk)54r#|7%Ze8^R4^V?fc?YU*UFN!fUC|r9Li3gD-%A9$(a4&m<(FcG#JN>fG8@
-zJ5tIELp8j6O~+HENq^m-<~KTRj=lvOBj|ZilOF3m50jV8;@E`eL%-ZKYkN~x?icI0
-zV_2J%xc2ep^OC-J_LygVgJICgt)R$!)Yr6Zl&@*}_RrJi4654)BgxQ3nEW)IBl|w#
-z)du}P4;iMH@~a+)+h+B>_t}N#Z_xWgzO%TE>ub&)GphPf-xXUaT{+B`qV6i)vaOgN
-zTsdq*i@I2L@%NY1dgf~x?y#{TqaFI3n4?`}Tx=JY9kE@$jV@l50Qw*)uV?j)?QASa
-zH?qPOp7}q%gqKo3?|sJ?dIH@NdY@0&`>e-z_t^D`4Xc%_Pn^BaPk4*vg4t?LC;A}0
-zEXO!$!oh4vg@?T*wNLX8OoGsPwz2bExxuX_^zb1&gg$Spxa67@>B;QS9c~vyy@+y*
-z>@k{Qamx(UtUP>{;8TZ>sUQ92cRd#Xp%o30tXwTw*%~V=eW74u#3_2a`t4awv(sYi
-z&0(u8#$DLA_?m0bU+WD8z5nJ5tx_|g(2c66a`f2NltK2H-ZfJYOh0Nzn@tHvXV#8R
-z+_iOIcIBZ(m@5QZbl&-z=5=8vv&P%Iz?~ENccdzC)~*JkgL`yk_$w+yb`$4YiyE<n
-zXwM0~6SrpE*SBW0;#N**V>Xk*%F%(!p$ies7h{8|7g$S3sehdn+Jt#F6QQ>(xTTYY
-zZCq7HRP?_xb%b@UsSXt*bB(Ses4jJFIyFt)OO#C+HRIO1by)Gn=(&$}rJ$Zn#U}@!
-z3-B4JeNNH!r6b%%H%WDgGb8<XtkTYG!!X?L9GR_h=3FzXkPnYn$UW0lve{Q){{vH6
-z-K4k^D%)y$H%4YGjyeJ#nTg80Pwqsm-}`Gn3w@y{QEXYEPq7LOw~WWI%G~a2IyWsw
-z6UYj^9pkPq)Q!b{?WNc>?n0ey)f1XJq+(usR`W79ic%7a8udK1m>JAl-Cq`>%5QVF
-zlW~zO><w=SZ`y$Iw|8q99y9qiZNS&wt@-@URuf`PT7+p8XG>@~=vy<}dvo2`F3D0m
-zK&ay#zLhJwT(yVitoq>cgE8o1o$+5YTTm7HMR<dlaCVJpgkIlCMb#_z<`qcEdeaWr
-zpfep#9ba{&mq-jXi9wjG?^5|UZTK&fa2pyvY6ODr(jJ%vY<8%}x2^|${$8uuHx!Oo
-z?MuK^e?@2S>!@%!XnR<-V`FJs50(&EMs-7WkKLZwun5kf&Mw^6a|oEzR6Ax=&bV4U
-zacRhaN;%dIEo<esX*r>9>1o}uS8l0Y((rXc;;QSBSK?j9*zUxJ{Z;Urd-5EX%s!Jv
-z_`ZhCSZ6s?YjPC{a;EniruSauJ2y`;YHfxsst*>;jxi-{?hK@7P8QRVrPI*>Pp}Br
-zvvf>9ISbcSuIWM~7A})iG-Q)sMfO9}k7bYj4^v!~)+geT*g6ssZz8GJ?RBV=tMK_1
-zKHLj+&ff;=pGtIl#PYLq2UqcEkIv2vGp#0Xny#WN9nY=UJQJ_HN#%5TBN_;rDf_XU
-zj;!X|F=(H9XIw40**;MO^U!u8ix0btLl#H1&vT6z=%XG+^>CT>Eb0KJ0;rH5nPv+Y
-zI)a-zkUhOy4`*%K)Pb+PTSwx%+TLu3tH`1lV_*lD15;2yZCql6zM|-Mv}Cp<ZX+*h
-z!6JTj?NO*^jlNZA`HQ;Hw&iIPQr3=DQO^+GM&F)hMsg@R+5d)<-n0lk{B0c2(fk{9
-zFQQ_tqi!A$p{_RHuZR67vO*nMTzZ%5=Imvs&dx_$M81Z*beSTpMpRqGTh$%tUfr9x
-zcH_$K1Z&`n)Fv}O+S&Pbf8zn_-#jE1k3|3LtW|s>x=N)o=1kVqKxAH{jHfMereABa
-z6M7s~0XwT%p%-K;z$eclbybsGdkpoAn{wzkFpp6;F&ovL5qiS?u3~>*s202^d-T)6
-zHmnA)$k>^!&}~`D^~ZWE^b@`Kabrg`S?`E?(h}G9?%ZBzV<xsj>#!9%@l@Z+$M6^t
-z`=1}E=7*i7!Z$HusBO@x*am%&^}n6fAJ;kD5k3Z~mR%=2jg)PXY`uCxJ5$}`Cs<~8
-zWQRV+Ala+NBAsD)0LlEtn9@@i@zfXk*mul2Hur3`HJUz3S9CnelodtHaIlc)$Qd&f
-zRk!t^(KFWGEM;=BLyF#5?Q-Slf<sjGki1zb*tePz<z72BYFNiOC)BG)sSp^kea)Gj
-zso2Ps=_ZyGssXEFW-Vwz&PpvXrO$zId(RQ5J{$!z#%`-RKf7>y&%QZLmygOBcX?7(
-zHu{nV1k0_8@HT}Sw@``I!&k?23vSs=WuT5R7aiWxgu(j+bZ9@r=No*MBPmzm^K*QD
-zjgM)s`aD7&o-=z;TQQw})MvJ~_ykoiS3`XGgWXNk`RrzPd8q!6Ngshuuxh9@5AG2`
-zsidsXA`F3bs4qdTu{|*!K<vQyv#0&<Y5!<VF7`8f+P|5ze249S&-mNtQRJTSm#2>U
-zj`Mrk-=6ljXa3u_U2uC~&-@oNL@smwUz`8#8UOZ-e|y%S|99)p{@UNdka>KG{Q>Ub
-zVB<&a>BQJlbRO(kBTlhh(DzX%o|;9@x#L7)Qx%@NO^@ZHc`k!MJF}be;VffJEO%Xz
-z&8h6B5;)6@;p&Z*8+uoMJtXlb7jS>2c`qK~kUjI>*Ri>lncM73!16iu^Of6^64O7<
-zYFgpLR*f7T2yMW?D~oJy;;9|SdG4*>aA}0CMR+is9z?7!kG95!0iL8re8Bd`ycTco
-zeD_u!OWgr;Y`a+I?KJOM!SfY6V2@1$%N`F7VSg5EGsZ;6{jxDu<m<YklaI)EsvXz9
-zd*8^~ZftL4nUg^cS;O$OP902;Ei2yxe4i0l*Ta03>aW<cb1ii(&0jib>7hD<@SqTz
-z=SRCrv2PNDXIsJJL7uaS?0D+)!?Ejc-pWnAD|=De=b)IetA$vtR0Te<-IwrK@7ulv
-zJYRds7kXN@O7OJu#qa|!9HfxPIdY!jV8(XqKk#Q)>~7mNyPlF=2&`wqE*Pmiz_t<U
-zwJ-EC&M2uH;r*grEzy!IkZ`L|i(9Tj8S<Rk=ioSyXJ(w|IbxTmeqU!ha}saq-~pwh
-zXIixlUc_(s>V1rG*_z{w?8(|=cTeg(TEu_{dUSubis#tl*eryrhz%1cHtLjK%x>@w
-zo<ob+Bt>k7>aQ_+u{*dW8n!VfDD{DZn1MJ>IIMC<LKqb{1ZO|a{+k&Ucl$mZlU2zP
-zzj@#)b}ofGew>uhr!8j0NMpFCE*+wJ>OT<r>1OZic=(BitM>dq!NG?lZ2V$dbTdzC
-z>b@gtuQ<F>Y@QwSbQ)e{;t4hNeg<dDw=4hUket4aCy(2<uH>_XrrUf>4j<RxWs4ir
-zRNDCDI7#00!LtWEXf%7#_Et4c19Gbx$1_X})H@`L5CuLT-7XXM*LdhuKep)Y*0<G@
-z+pSll(?V=<Y6EX!AOhHqZBnI;2q12(4M=^Al;a#;pTr}ttZ;u4FWhHTxc9P#nxJpg
-zm3kE`v<{thes@CuGV-t{I@R~-RIf2X&qGDz7CcLP_3ngtSG*8^fe_&_pAC%NoY=61
-z5y0c|k?L&ZxEeeee}XP>5<_>A=5aEP8BSp?G~Lfm$Q)5rRi^2FQ(3lFM*Dt+_+IXO
-zh+aWA2r|j}7+cL%RG{I<--tsSg469yy>Td~W)Lwn2zk1`6>l!1;^1JXiu}R!JXYjY
-z1!}rq_dTnIs-hhVmw4uZ$DF#VZEaKCZa8!JHj|Y(oWsQQUsaK&`&}xJRR5`BYhL4W
-zRH>evaQ;_S())c)^s5%f@>-n~b!&e|h2xExCm&Mjm*v=K<pF=JM>P7lr}?|fqud{n
-zc59To056+l;Q7xi9B6n9pC=%n1m2E&Yw_8LPZB<VM4jQ8m1pt!G4$QImxu2K_$<cv
-zPryM)+X#G?z>gPjZ!11u;$xm4#UC$MzP}I;jJg~nW%zk4iZ<rNyd~VBXCfC>-;d{9
-zF`Y(U7Et3ThY8fnm`=?+UiJF%r}3Q<I39t;9~`>PG#)?EfNA`}UlN5Qet~IE@9TJe
-zth+*VuIj1iduS2KJwHUZ(Gu=9v<_V<>Ud^DZ*FqW1<-f&)nj_VvyI6;XF$KEub%a6
-zHT6e8kLR1x4V$nrJk1@GY(1~v<y!W5-&$7O!e-lu5Br-Ee3J1QXnw3G#>-AYOzL#r
-zVMe^J_jO&5;{Dy_cyEan?;8-$d+=$+=T3Znfls{p{J$JuK9sjwb8*Yg#5eMOxwJp8
-z<0#$t)BxG=*Z|{9XoIE!!U-k-@m9!hhTGr9_>1y4yeJT_T3Q{(L8W=G0B~;M2wjW#
-z76kssQAC`%!um34pp_{O6{&~rZ}im2$yQ~I5eQ3cENvTlPT^@E{rC|_boua`_uG38
-z!F|jS)VW98Z`Jo#?{J_vHG)$^^WA8;RwK>gDd^X9Jox@NTJk(5L~Rj7R`}8T112GK
-z?C!aHmmAEX$WE&Qw%m<zpb~B5TksI@Z7^1QQEg?fnnUoifN#@daM<hHw4MmRX|T)D
-zI;C&4^!gi*sxTE+Zy98VhKw;^_30Gd8{-fP&+O~>33k?f<a~rXJCuWoKHgyu1<_sS
-z;7lCW0{p!O9SmNAsKPN#CE$z-4(eAe%}RI%r}?V#wF~nq-q$&+dhsgWYpGZ^mUnr3
-zapDz+Tvx#J4>2wzi4U0Dz6w1nfLRl>D&j1KJG?f=VHEg(ajQP-$MY0Bo4)VUeRwsZ
-zw=?vCDpeQceFw8x`ajZp=i{`RdL^aq2yDRMos>s<(f{`13=7_olmjlI!RieWuV24U
-zq6&xADMSCB$N#l#&%Xweo#R6ZYIGxheMG&i`8>9%yrFL*Gcfk%?A0-+jq_6?!G@TJ
-zuY*_-%lZ7ML!aTpc9>!524Rjl+Q&Ij=igN>auRS9%lYOripjfjBSwI41~1FT!WSLN
-zNmx{20BGgu<4}1E&qw3zT`Q+!SZ`tm8c9+|?47k=qtNv+HO{%zYXFh+k>)JuAJ7Bs
-zsE<8!cGxA(^zB$ICC4_zY*b2#Q`*AyXw^fr&8bj~Avgt!EakZ^^e-H~a&Qo>DW}6b
-z2RmEZXLKu=N1{ZrYWYw<(BuwnQaHSWkxMS;={K{b0N>klnu>>NQ*ZAJ2%r;wVGeAb
-z2=b_Jc!NRT?t3E6AAKV3Jgx)#oQOj@K12}Ep`_&-X2Nx=RVo~3<odjZp!>)ktX<B+
-z__YL|>+q?;@YI0Mb@<$Zk3D~l^#7j!lk;(r_Ikzpd}}H@)XYV#YPC<{?FH3p9lsca
-zyfCdc)?%nzH$ru?`c+-<>f|-vAh8=EYm9P{lYkTN_+Q339+G{@i$@dQmER6d{7HyK
-z+q~C7*vdgG#2e6Ph4*q{jbF0iq5$WXs{qv;;U(V}9t{(;CH>YCdKkRLq<6aIhlFrz
-zb+$gpi~?10z`z=r9-63{;X~ETtyyTGx)mc2BCS|rEhoAcatB7gknz1mq(h}nz4Y;Y
-zh0zoEo)aNeL$7CXj@+CCZN}T;q3vp8><#l{K|Xa;PSNvts3|%*YmU_~CdjKDZ4=cm
-zr)fs4gSD%;mQ4MeXLIEgEcQ8h54(-r`7`w)(zWonYou$*)~}#PpSi^=ZR*Vvyed*v
-z#vW!wPSa(4;pDP0NmYxmfyU;f*8nC+oEO$dYZ+y|p`+goQ?JZn_lxyf<q+rpQfcG#
-zH~XT$xgMV{@L7odhR>6#@mYz_wfH#u8`BJ;TB2jVw6pUS<DdSi9PN?gh15Rp<Kp$q
-zukb$Z%h(6RD++2Z#9wvkkjj9!awD-d^J#tFzv)M#d`&adOR%-WjdS&GmHmD#(x4~J
-z5;^Tyzmu!>HrMx_=SJyXz~5bQ1}F2a9kEY}V?R)S?5<wkZ>}}(H%pU{*P<g6O5|hQ
-z`J+95v-^L%pnxtPZ%^yaPx4y-x`XcdyJByHsb9;mtW^K3t+<Ad@i62L_T83MJ#Y0p
-z%3xv`6}`;H_$&IL>HQ@s==#-*u(2M^1Y09>ISg28pzDY~J;kP2ta)fo!u#mJxXmX&
-zQs)cl$8w<?bx-45j`*4%N<(_hSZKEYwsIV4-s=?g07Jj|7P^-mlzNyyBe%IKA@y-S
-z$)AQN`9F$0&gQ$7csGbsEX<nlD;bz4b>K%gBI!c$>F}dQH_4p!m|C^+B?7)*WL~&b
-zgEL<$#OA{S_tsMxHN2afxOSQ|8os7WqoRQ>8PPz(;>HA3qTiU9-}_M0N_iQ<#N|fz
-zsu+g5@Q$N;g%B}XGhmFk+kx4B+!zg%H++KvgA+ULE|p_?-hu~by3TS|;8t&SAv$dX
-zMrWW58YnvI2jEazI)fZBLSfyg+a7m#-910j+f>dv<2b*u`*ntM<?Vgz3=e@csy(PC
-z`7Ol{d-H~Jyo`Qcfr{RZ;@tT&6=SWPB%G;u1J4<_hqN8z;ZHCg7K8Dgzkh%GNlVlE
-z#7xGQ*!?fxk4ch#cjEroVpO%ubOyi06hyzEi=28>%|}$1z!zcpn6(Z&d}@N*GtIt{
-zYTt0%HxjKI(i4~`4QlR-2@4imuZFjYBCiKy?;<I@TeQpN=<kzTt`ks(OWDTpIUk?X
-z@EPcRo`pWF#<3r54-V3kH^d%-`V0`5-m9K}bsYC=EdSAuDfb*PVhnNEQi~p}`rD&+
-zI^|o@aZiu+-Kh3seX?hx8b8&dcieY(qnhhZt6KgZ{fSy@f`_6$zQg_{JmKx{yp}%S
-zGfHjo%)|B-tLcB8W$g>CdKbRwnzV{PwiCND-NEPZmSI=eFy0fAJ2-Q&tcLQIs<^9M
-z`fH53dq+}V!_DE~%&ah$Ay?>Dh{=%<-SI>8^fi=oN!To0rAM_`&8*K%QVnZtn5(A5
-z4=t^4Xrr`i8tPF!R%p>PP_@6l5F=oEpRB;|yhUdNeyFVqE@PbteaE}<QS5sB7w7u^
-zK19v`4#0y4wCOeK5hh+!_Jtl|hsXgR?@DqSg84c&)6~zZy^EPi_#J=MMXS*^*eVf_
-zpEOk+Jcbi)z2Ya$8ZlRuK7SJyxY~Oh0L6)nH!;EDQ6R2SjVtc#M9my=45vdasB<s{
-z2(PJekOT*jFm5y|zjXjS+JTc%c)%5UUESeS3d4#D1@i)=>+P+NV9J}_bgw$}re5vE
-zEa*1XHbO5Wery`tHpGt(vr=>35&j`FzH<*9b|&v<o4~*rE9po#1~Y6sH!o^5w&700
-zkz%8ZpJM#x3`XCNC2@<8WXzglB^k#K9VcpZyfH`1Y~R|6$uv^SN{<|7fg-i4p{Ufd
-zok(h{`bjMt$gZVUH7F_K?=8VP>PWB(Z7ct22c$VED$PS7F`M*Z8c8!dk$5G{ZfF<N
-zyb#`g-)YuSXPOz>)^3a@NHe<|DQC1W6!jEFB@eY(mKOSlDc}T6fvvac{!z+gS8B4n
-zU#^<(_f@uxHWOLTbnwSoUkmT!em8UclHc_mhrjr$xA!k7{%0`P=a0y|j<Z8%zsR0n
-z|1Y1f;4d#*vxZ$gU!nKo@pIbz%?SKLrx(8&5H*ohM-}xDjvg)M-181rKFf+VQ>^05
-zSnnw5YsCVV=>nT`?BJqDMRc+)5)jTJ#T-RfN5?JGOug|;FsA#q@ID3(v8zcpwkcvh
-zJ&gC0X5IQ}1LxM^2M#;1JJYQ?d3h><@%a?JKXVBnPbGR^&*5_|He7YU;$@zi+Nqrv
-zd4?9*UBHUE1G^PiMI&D_*KGYII?jOtL6P>msd6uCgnCxTaO6<23FpRKRkWF1TPN&5
-zP^feL2E~7VfO8U#YGwkU(<9p@>ZI@1PBfW;QZ-Oea*{VrXu8H{w)f=kZaC$5$`Ct{
-zd8q1{jW{l+w}jAle@B}fC7b(pDcI-Wp8sT&Rw4Sqr}5!_2iM2gzs}*0mdW}Zrwc-P
-zLvuo(#@g@xuJ`-R#4z6TfbUzsv-{(y<LW{qR#&?Dhl28|3r{Tw)|{gL$rw=r8Nouj
-zz&}dlE-ol73l_PTmDZNHgVoiQ)u+4h@VcUZeU$$t1vMoSz;yhpQDxejNMQIjucD@|
-zs;aWO79r8OyST0b|G16%H<9Qt+Q0IGLh)}977woF%d2L%)VDyD(3?8JTdTk4Es5rG
-z<#Gmok(9Q^BKq$CqJ%X7u7lKH{5wRK&T%EwCnY3}*k@=93T+JTGn(5`|9Pc|JC}E4
-z(p7`f_mh7nZkOHhU+z$s<=@G;=?wQ`bu0`wjl0~H`&_ek^Ikt4a;-{$?fx!P;f(v7
-zX!mxyeyC#+@qhZty_$#obg=F3qqe&lD;=?Lxor15(W0(6@vz-58z7x_yyu$u1f@Kt
-ztyKAOB<?%&Z=7+5c<`&OXFSveJ>OQb!#T&HSLH6@*zTPE^ye<w_D^KnzhmRLv*Ulb
-zaVNC(Ct3O(t?xTpKhNFC`nIF~?l(aFvGZ$3{r$q^N1S@OtNt$5-ASY!4bbj(G`{0^
-zG9TjA!|%G>XAY2FyM13`=ljg){$p43eV};k@mG%%yP6NpJ6ZpBv|itC_Z!xDva9h`
-z|K=;}nrYwGc)6?oerU&c7u&ZT{#ACn5ZQJYFJEnUyX&9bZWnw<<!{H+{QHfrK>zcp
-zKK)so{E6qzPR}3g{2rhmis!GLp51k4kJ|%{>;Kz&JH4lxe4I8i$vbkCccgpe;Gd$d
-z*zWlA1nM&FQN%s&b}wIccRaWAe@FY5c<$_WHt0K^AK3n{xBa*J`GMM#o&I?B+4e{N
-z8EGlJzUvA8JICsZv!3YFPsCYIq&oaj>xuN0Se5l{U-8`SY`h0b*FgG{9Py2{j*8b0
-z>~1}_>&3G}BqFB2vFe3g?(yog?d~Fzz5&Loc>dY(<ePu$GVvT>9NJNTtG=W0+K%r+
-z{wt}xOnkqieEqKHD`R)E{EyM8ili$}JNvHshk@GB_pP_vsY(9sFm0cG%<hfy<_qkX
-z@ynOO&n(&8-`Oxf6@QGK@yEWuqq1=~5KVYHLXUQ2T6Z6lf%IyVO8>LyeQbH71v&lf
-zLjE*G?5ho${`3tnJ1k*vT>CEShYyLXPecFGpZ~1`#4jKIC%6*g`mgh6km<$XI{H%j
-zA@TKTa6XX#1L>6)(ZPl#9X|vS=W^@&rWfktO4?sseUi3_>wi8p{pJ5a_U-}7Zy<Z7
-ze0Rccz#L|G><6lUET8_$ccAoD4G_Nu_}^dq*j@ks|8C#5oAs{)^>26b-;H_9?$p1e
-z-Hd-L>JP5C?R%i|Z&l{IZqNDQ?xeqJfbc!Lsc(aQf91Qo{tsmD*71+qKmT9r8UH~;
-zhoBT=UrGA*F4wO;_9_E+IsZJnIeu&#z}~IPH*WnLsD2D&pGN=tnP1WW{>E3@ALAMn
-zH~$9GyJ3$jZu;Cxz3Y0$zrXbDZvEeen17%B>p=1IAm{t*KL@gJ+1>GBH^<jjUA}Sa
-z&p`1{8zBEZ@V~$MNqv9)t6RtKd#j(j>p$Zkt9~EH+b&m1p0F4^YOpJ13)XATgO7k`
-zxLl)u4-SPpuH(q-g$=@T;X&X9u=^68k~e^K|6}k;$d`i8fYow8D4ZiaM>q_881CLc
-zzxO|bU1z-n{sr=*;NKua=lUy%doEP16u5EWwA$$3g7?AQl_1_r8@&Qt3wa)hDts`X
-z3qJvQDoDGD;7f3K2>3(X9}N28?<;WpW5{=dlz#;xX({|y(8#GE{!bYr94UMcH56f{
-z{2kmI`c9DUdH$vj_iq3f!M|pZ{$3?|{?r%!n<+dM90B<t@DkX4i*lj-mhf@#a@=nd
-z`4$i-T~hvpKs&+V$aJRjOC<7q@I5dOd<EqFzk>_F=im-Or2G$vE9H8S?pBHYB_Q49
-zgD^?C0Q@KNYdAJ;@qfxU*nnibyFuh}%6gFL{V6yf^5x)MaJk%{CihQ~`(x$)XT!AJ
-z=^$>U91k*|4hNY}_a*82xEf@ATn-{CDNBX(gy#y+7Jizj>)|sX-LDniD7;LV3toYE
-z&J=kHh^mlsqTD|gWPR=&>2hJMnz8{z)KY#2vR?lhWWBx_WH>?aVaR8LtiKaL*56}5
-z*5AWH*53m`=Icn1_16Wm{&wSECp#PRKS9>t`#|LL!FPcyzZ*f?wScU@A&~K@0WX8T
-z0A#*(qtdW^o&#C`9tD}N4};YI1!Q^s1Z2IflKaIV>+ks>?avX8748S(|CH^h1ee3^
-z4UqCCkoENsB3}=(Uak<i3S_)50$)bFPu(9sRu279LYFWIz6iY^d>Z=mLB@9ucp;b}
-z`s=}`pnm~m{y!l67-Tr_gAB)ifYx6DB5Ow1fq32LtjEA(VK*2L99VAKvC&HY3uJl!
-z2`mPG4+g+ixt|W^Lp}p61dj)q{v@yn^4IW}@;hJ&<jL@V3^?%+?f+Qek-`L!;XRL+
-zUK!q#Aj5kI<o#J7!#fsa{0;?K@Ad@?!0qs#<@zzme0mRLxjqT9{Mtaq=NH1OK*qC5
-z<O@K?vl#I>4xDqS4rjXX6p-;a5M=!Jk^A4kJ>&5axCHD58IOO0jK^~z<M9B<c>D@v
-zJeoj;cM1GC5?qf5*G$)6gx3qN6jp)^-zV~!!c@6GOyvLK2k`07o5Gibw}Fhu=^`H{
-z904-^pO4aZJ;E*EV%&cUWI7%N*&aGT`g0e^^qdPaymLVMGah7l90xKVjs$6cFi5*^
-zkY3t74l*D9By0s)9(x~wc?g({9}=R!M+g&ypW^`@@4pKM;qFP0{%-^szehlZb0f%b
-zE)xy|(Y2%`fV6)N;V{0>fh@NTAmjTWNdN8!>Cdeo{V4$%--RH{EnVcvAlq3gxCQO1
-z0P&=JAxQZu@OZdi@7CeoFT4e0c}@fW2&RGz_aqQq?dSu+i*Wy|qw!J;_#DW1ZvfGx
-zQXU3>JJ^+T7x)U?w}N-V{zj1TUIfzJLXhsx0qJfENOvh9-Fc64xys=G$sm%Daw15*
-z8-(3ihk>*k0Wu#xLVB1FFN1BcdsO5<fUrwB{}??k&IIZH9FXJL81PT@54<0|3OoVs
-z*N>5W5#9o-d;xz2eJZH(1w_$}J`hy-a-8G~sPY9=`2zl)`2zln`2yaH@NNWEzJMxU
-zK)O2zq`N5~-KBskUyhZ00ad<$)Vo30opl&UyAj|Z<_prJ@&#;VzKHw>5OyhhAMbLV
-z2u@4Z@tq_*0%UsEpXhRxgZF_<@7*A>boBKg(|ak%dN2oMdecFs<7}`Q={OO574F^O
-zwXi=JWIFzJf_AqVq`OBzx@!mN?p~1Y)**hZ2ls$X?_D7Etsv~qx*4S1H6YVl2{OGu
-z04rdZDe@^G>{6~mx{|^5<D`6rw}7gA!Aj^;K~=sWs@UiQL8kYslcan>rgsCV$``zW
-z<qN(B_pRVfh~JIiUU0VvROJiO-8mrLO#$gH1*ALgSSepnl`lxW8-(3ihk>*k0jlyv
-zdQ|y>RfylCBL4w|UCQ1kyIf<zX{Sp03XcF)`JUo(T@3wwpekPwO>p$}pekQbl`l9H
-z@k<9)`GU8we8FzGcZ0Vfeg}h0$G=jfd_lT<1f;umknZjU>24k3r^**p<qJ~Z3c~KJ
-zn?c%L1FG@`N5Jj}U^U{MDe@^G>{6~mx=sQQ9Pe_qgP)|jT<5^P2TTKB0=?iL!F!-@
-z1)l{k25$rxi<}DL{6@;LB7fp>xo(C0CP?>f;2q!{B3}S9UNb@VH<Ls@4!jrgej<N^
-z_^}?o4buIyAj|1*BHsxz9n%s2iQu~vbUHSIOvghY)A2iy>9`qW`80yezm*{Sfy+Sl
-z19c$6KkFjR6hHW9xSs{GKFt7GpVC0qv&ot%V?nw*3}iby0AxEG4zm3vXr_FMc+%bL
-zAj|7zkmdC}$Z~vKGvz^$?tTZd|Gph$|9uOH{5tD8&6F!ax;tc|%QX&s`gEQCyFsS^
-zHz3o0Ey(l-LDtL3;018MWvb>6g&yI<Q}q1{K=$7=K-Tv(5MANuso?K$f9q+w{r>}`
-z{%H_h@90h7&!E2uEC&~eJ{LR|`Yf;s_qR>f?dcVe_WuAeG>m>4yczlm@Q>gk(a#6n
-z(9Z^M$NjxP){D<3>3Z}UNO>d3aqSNx-wd)|trWQgWdA-#<kLacvtvZw8)Sd@0rHjp
-zJqNPhJs|QgLG~Z3L@oze59f-U2C}_PKf~pk08TthmrD}Jav27)Ts}KfmrEDO_SFWm
-zUA2I0PgNk>(Oi)2=U9;OIRIq4`3C+|?g5#;e~8=xGCg;Td?U#C|48JeAmdw%czD3~
-zC4QX}zjYG7dqLKlJHfl*t`)o<`~`Rocmwzg@TcH!z(dYP`GB{A>`&@JruSly>0JcU
-zzxm)A=ySpAz;nT?!3=OUcsBTJ@G<Zda5RkQ-<R-&{(S<{zgO{x{yhq+eo6QZ98ta<
-zWd8gNWPYs>xeR1}%@^4VGQY-&d<e+=VqhwN5f9bRAh1($|IZSi77$KGhd{=s4#fYX
-zm*UTJaQ6my0K)$l_zLd72(tY?39?-uFiq?C1OEm6-XP+2*4NOpU%D4E`>WO95%A|C
-za319O;CwI(oC|&eGMo><SK-gwAkuTz7O)vSHeKsSgRen<2#EBZH5|MFoFn=iup9d6
-zAp4^;K=xCYfDHd)knvs$G985=({+>RuLBwHt3jq?CCGHG75#l6<8wF2`27ZCd|wp(
-zv)~Q5{{+bRZ2%eH&qe<+$oRYmGJbD@jITRGudgS8iHK*WaGo$ItP`#h-YC37c)##5
-z5L2p@7lm(whasQ;IYalKPYdq_*^j1!wcx2B`>|y3c*JWccqQ(?K3(5`9^4!LJ_%yV
-zk@6T=1NV=Bmw@fy>#+NS=zj+?y|;r*=Pe-9-J+TDBar!34>F%F2AOZgnkn-@=Jza+
-z`8)$;zMrX?atz4vU@*vX`zBMD*JmKh?>)_wd%!_(_e-!2>G>JB2>K?F>Ag(!i$J!Q
-z>B3Wmhk{67%5tAxS6l?rzW}%|m;wF?{!9h$2eYzuyv`Pm28YAlK_K({FEh3LYj7dt
-zt3k$NC5Rz$bR9^47lW8OrOXCT2GhY+aDNI&_hZ1lasNm#89WqZekXy<?_nVGyZ2nh
-zl+VC%aQ6m?sZPqv;G1yw47d;EP2d}l*McmUKY}cmH6Y97mzpUzfb{1Ikp3(O--f#i
-zkp2{d|AssVWckemS$-KH%kOl}6c0#$MuYU{VDMeI+ZUuigTQwnzmui&^Kp>nydGq`
-z{2Rz}zE3mdE|C7+0Mfr}!1v(p3XuLS2e(2_1zCQ_fvgXQf~*foAoDdr^lzX%N5I|R
-zL6-lWC_m=&uR+%PUx2uO*7YFkeHZvN+<gQx{P#fS=bIq&d2Ei$^>^qOf{%l%K*p;9
-zd<*(VMeY!}7o<O5fy~eUfXwHkXX*QggUp`;LFU^za{qL2E940v(|<9@c$I?75#Pn&
-zN$__ScszI$I3D^Xd3v0h4o;(gU>Z0MM3+ALi#aaWRdCl0Vv3Nm1!Q@=0J1#(4zfJf
-zYo`1L<TzFZ(ry7ryE!21*G!Q0D+6TxnyQ&{C`h|k&(n6DAni7QtWOVutWWoYtWS4q
-zrZj@In+-C&$sp}gLAHyNK(>qHK(>ofnkk>>YP$^}?d}0-cNfU<q7~#gaWi-)<ezG$
-zRDuleRFL(^4YD2`2C^Ov0a?%fJzLkKr-f@l)~8mHuLW5Tt_D9sIJI)WQ11J|4{_fo
-z_dRld9QXn5A0YR?LOIf(&%pO_{}pfq<c)Iw5wHjMZ$f#dApC^6y1cuky#FcX{iu}p
-zUqQ|T4uQMF!BgjH_ai~pk9|PakN-f=`tce#6kfjo{sitH1(^>IgY2i)f{fpN;D>PE
-z3NoJ8f=tKdAmdjKegvKgGXLfyoRi_-V+(Znw}TA-7Leip1Z4OXAj{)$;T`j}JQHL-
-zoB=ZY$sqkdM(!uc{ox?v^%=sW`)-i#w}6b_qjJAZ?*ATS{BM-|4RZg7Ak*<V;xQWW
-znHA9SJ_%&Jj{_O+M3C|R(y#OFUm(YaCqd3v9|MOY{QE(U6RqG6ke@e$6JU2OxG(fo
-z;5hI?5KE(!1t8mhF8C=p32cP@XN$D|Z-UoDeifwue+TJ*J4pZU1L^-=ApLIy>3=Oq
-z|0_ZEM<w7VU^Ynq6F|oQqYL%?`aO{T{}ZJD8$tU25J><31k(Q-K>FVR(*GZV??7J*
-z{s&wL(*Goo{(pOcp0|Gq(*Jis`u{vg|DOWs|9X)A-wD$HpMmth8GHl!tH6)Jr6Bzu
-z4buPNAlCzXgY^HiA87wy2kHOIApP$G>Hpmz{r@?5I`}hi8}v=!XW%lB{vQppUL}I8
-zSNno=_u2XS{=Y%q?*>^vpOE{1l>2vsEZ6Jg{-tui4rIN(Q0{x>{+S^2@i@6ZRPGN3
-zS)boqsKb2*WVla&EZ6(w{!McKI*|3eUhe11{R=?m<21Q{qTD|g?7{s@P`^`=?r*?$
-za5KpI|18M*{}9OfzZPVDZv$B`?*_R(`z`nj@RuOV<Ai*dYZ5rSNc%Sqq<>>T`j-T%
-zeyC9Q<Bx+Ak*<v($Ek<Fe=$6e<J9jpQ!WMB?-zh{e<8^6X&(3*+|L3zKBa4>i~#BW
-z^Tpcz#~{b0_rO=-{!NhM(q_$+--2}C1k(Sjz+0gI5!em)^&rQia?O-8LApNyr2At)
-zjzfooufY9*;GK|%YNq_XK#xBUgB*YU0<zz|9UKJvl_2X~xo|$n@h45>aUje81d#PE
-zN$!7*{O0}7LDsKskp4U>_d7t=qr2q(wQ~PzkoDzaxqrUgp9`{HT#j;LygES6OI`y{
-zhx{`52K3K^Y?r-q|0|I7@;@N^o1=r;{o&v{kPigePn;w7PY2cf2mBQG19JZdAlq9W
-z$aZ-h$nZm8J@V_v;7N!_g3IN40Q;C|`>qGU1Hp&Dqro46CxWHmB=DEuso*m3Ebvlr
-zCirtOQ|_a=xmqCSiM#~-17u{gva18>PbC-vSAw)(A@X$~?VCjY6-fJ=MZOoj3-Vne
-z|4rokLB{Jya4sI%lJii6ZcRUV)?nAj43K(~Ln5ZTq@O$*`ZCdz7}7>mY5K`Cp}#@&
-zB)fvuntt*q=r@X<L|%;O)bx|MMt+Jv44*`oIAXh|pF~-VJQ9DXC($L3aBKQW)T5Ev
-zq9-v#jL6mWlY^nZO!Op%s1XgCesT!(_lTavP&tC{X@GumFX&$oJsE(0v!<WKyk_L5
-zq9^mA->&H=_ksQ(M3V6*3!opR=_iLmf2Qck#n7i|`pIF?7lE`V3!yL3^phBWMqVR&
-zvIu&f69fGu>hQ=vi=IRkAJMMqCr3d4g6PR&+}f<^C-;MX1TqnI_Cm4*`Xo(1ISu7I
-zQS@Xf^iwqb<gw5fiJn{veTk-@%z++#z4D*D2zu0Y(oc?o9&J$RNz}m+9h!b}7W8k4
-zo-Bv{T}?lE9P|gFkQsln0{T&!eli#OGeu9L4UXVBHPBBU34NL9N!0lfRhoWs4)i=<
-zMgPf*p<k`(Cy#-Cqv*+M=sPw2<VgHK1eL4?_GB&eLpA;6WZ0i9dJ=ub2#=<p#B<$|
-z7mA*|1p0hUKbZ*suMs`D4Eh#LKY1GL|15g49{P4oKY0T5Z;75<4*k2DeiCIoas(Oy
-z<4;}+eUhf1JQ4acMNj?^`ZP^HITiXM(UX@!U!v(JlcB#s^d$Pk5vw)*<mu2qD0=d8
-z=sPt1<XGt67d`nS=(lP5$?4D^ghtBvlMT?1()5!jL7yRd@(SpEntt+J=*vV;{uufy
-zO+Se?G4fW?lPjTb)%25D&~Fqyc_s9nntpN|^q-2JTm}7hO+PsU`XkYaF#hCK(7QGL
-z<OJxmMNj?&`dm#v>4Uyj^kgIS^_qUt1O2Ta{U<}vw`%&ybm%vVp1d0RPE9}QhW>rg
-zlNiHBY}53U8PFeuPEO@Ncn$QUH2vf$&}WFAY=+*a=_fOxFB3iaQ|PNS{p6|8-ynMO
-zTIg46`pG1;j|W9hwm{#Z=_mJx{w>jy7>h@|tLY~Xfc_wK!YcmY&!8Wr=_e0_{!G!6
-z*F&GC=_e0@zDV@s4bYcp`pJW#zee=rjnKDf`pH9}zen`sP0+V#`pH9~e@gV^&!O+q
-z^pm5Ye_!<EYUsCV`pLtfAAv!H=_4`c7?GsuCl81IWYLqqfZn6&Cy#)BuIR~IpkJuz
-zCov}(d70?RTcK~z^pm5Z|E=iB+n`^g=_ikZ{wdLuzl6R^(@!1^{imWQe+50y%YlB<
-z4gHZA1erdv6?(U(pF9To4AGOnhTf;?Cy#}`O!VaK(DVEr=qHbZ{sz&Lzkz<Wrk@-G
-z{R`l45k7eb^qV#P<T<Fn--w>P6M7EHpr1Sf`Y|Bw$-AIW*7TESL!T{rat-vkntt*y
-z=r0pJ`8((vH2vi9h~GV;C+~*7P18@F0R1bXCw~upx2B&w5&CaLPu>GP2R+bFCPP04
-zRPhJzg+5u+PmYB?L-gbyp!aF|$&;Wj0%=eF5&9BMKRFKiYeY}BLEob3Cr^g{&!Q*q
-zgT7tUPo_Zsis;GzfxcVQPo4t(Hz30&{{%e;UC>XS3jL8F_2i$ScWe4d5A<h>p1dFW
-zG)+I53jKwmC)YxsujwbpLw_sy7x+)ML*J_DC$mw$8%0k(0DY&XpTxfJNS@E7J^5GY
-zw`=-IFZ4&Elcb*f8}x2XKbZo3hUm!$q4#O}$@8Eu6FvD5^i`UE@^I*H6+QVd^sSnH
-z@(k!Vik^G~`c6$hc{22$ik|F%e!HfhOoRSNbmA)h;5z8tntpOL^x2{(*F&GH=_hAG
-zUn_cY1N8NpeiHi|BX1Qwxe@wSO+Pss`i-I|ABDbC(@$bQW8|lzCm(};yQZI<!1{wh
-zM#Uf81if3+PfmnBL-b@P^gc~LISKkA(UXruU!v(JCqsXw=*cIbZ`AaYr$PT)(UVU?
-zzedwfPJw=-=*g#`@6_~@Q=xxL^yJ^6e^=8_o({bW*GA+6rUS0WKopy6J&3W%wGMQH
-z8$k3Gu1%l^d=y03F028R-AkySv`>fswBHPw%z#XP{t21PgzN@ihD=U}On<jPCTBp-
-z2j759`XE<<Z$T!rAlHNchD@Fdxe<H^GC33SYH%xLG8^(5um>`k1Gx=+A2K-$ay$3|
-zWO6p-4)8<BWG>`R@FU3Nd62unZIH=1kO8%hcY|E7r-59T=Yw2-H-NZCw&G6$*Z~d#
-zyTQTCf7~1by1~7`G;nV)AKV9Q0EdFD;4rWQ+!yQyhlBJCkr?R)_XE>Ft_$-)uKyZ9
-zuJc;KF<=MCbz3*c^%*0<b(kCEdMgd&x+)*!`l$g#B^lWYay`@ma^2GnCQ^mSa~<Ob
-zxn4;Fxh}~Ex&CMXxz1<>xt{0%xo+qNxjtZ`xejoHobRWBoY&`roWD1KoTs;foR4>a
-zoOgGFoL@7uIFELNoG+(=oEPVVZm<F5Jhv6(e6|DRytNzT{FIrTgmkz;H2INfAezR=
-zeDFZ90pvWf736%d1LVA~8$1+rp>RflZtyTL4Llso2RZ+006EWU1v#JU06A~!29E|^
-zC{#D-29E*Lz+=ID@Hnsm90Rt3oR4&XoOg7CoL{(5890w{gU8bzJc0J$iL?ikX%CJC
-zJHV5`Zg3pvLM1vGbb~2i8h8qr51tA(fF7_FOa(i@@nAQ|@y&(G$8pRJa=c0dIWFac
-z9Df=>jx((w$CD0_<3=}_2D(sbIS#l%_V;NZ`}KT~{dWV%e!3N8f7}7G-|gmo5dW!u
-z)D5z~OarHY`5^nh29W(6*Uw3=Aui67$#xXF8$1$)OF0*XO1_1{BVR$GQ2z=tpJWH6
-z<Z&V+b11u!83%!%B68$r1Xcv5ou%dN!Zl}WIoT`jXK4GPY|Yv{egDjPnq3Pt7X~zk
-z=4)P9q<Psfs7DD6s<Uw6x<}+T)JtBkitIr><8?49m2!`I!)u|)X~+*=d!w>Z-;I3X
-zl`3)?8U?TOMXnM#Br?ZYUVk?BB5xKs35|)@5ac8MPZQZAa+Szlky}JwByuhq4X^7&
-zW+UPCrN|v#Eq`{r_J5nm|6wCYK;BN%`j62V7=D+?ucJIwexz&tvuGTYJtD6|BcYrx
-z@_$5b5cveu1L|8vK2PKhkuMXuTjaYSGd>&?d2JEBN92r?wSQ?M|54;zkq=Li_=vnp
-z<SLP$7r8;?V^7iUTSUHC<W`Y8L~au~5%rnrar<=q+C**@`5bft)VH9%^7;`w1*E4<
-z<a<QlE%J7eIq358q-y&#kr#<vC32I<Z6ZG)@-~t88n5k>W@-P<6WJs39grEHT#^4H
-z`Ua7&Mf+s@tBSO}iGQoe-J<Uj`3!V2biYmHn?z0uYWt5x_J}+eoe|yVioBMc6XH`P
-z@`0G_VLsq$6Zue)J4HT1<Svnq7I~Y<$BCR&tiwN1<YbY@iJT_#sUqi#Jc06%23Nhv
-zg(Cl0<jY0ATIAbAzDeXKMgFD8!_e8%zdJ=fPvk#~e6`3Aiu|0&Pl$XtI%(Q(7I~@2
-zZ;O1J$e)VbCGwypI{kyuxzj#L<g-OSO5}QxPZoI-<-J;6r;Ge1<dJ)03=;VRkr!HW
-zgC(!A<St9*COt3XpU09HT5_W$w_EbNmYh^-`ESX&mRxVit(M$r$=fVBX{ip+<d;We
-zlRlp%S6OnaC3jl#c1w0&6rH|YORl%%HJ03E$$V(R%fvrfWE1~1OD?hG)t208$=fX1
-zU9Q73{`)Ms-jZ7_xyzEbTXJ$mwEwx5++fLTEP1mf^I;1w6JL)dFSO)FOK!8|&6doE
-zHctPOEjibc8!UN^C3ji!c1w0&935V+CD&VWt0i|@^1GHiv^v`VWJ~s0a)~9kSaQ21
-zcU$t%n&|L6mb}oC8!UN^C3lHz+QW8BpHv$i-V{sDx8z1kZnxxjEqPR(<-aB8TXKUX
-zw_0+iC2zCjQI}ZZS@J?luD9gXBAfi`u=JZPnGgARh1-)QFSO(aOI~Bin=P3S38VbC
-z<b{^pXvuAsyxEfZkTJ@COI~Qn4VK($$sLy5ZOMFS=?u>;@@G>qUhmWDN)vf3)>V{!
-zA}<m-SL9}q7mEC-$oV3FA##bxW6se2Rf(J@a=plW@8zgr4X#F!9}>Am<TpfKE%L`A
-zw~D;inc9Ah$jKtNiF|>`?IJge+#zy@$ekkhh}<ReAy`*3ew#)1irg*o6(YYYa=Xae
-zL>_Xsw%;yts>pmu%&SD?p(6iT<Rp=ML>?vbY3FGF+#+8ha<a%zi0l#heUYb#JTgt&
-zr-|$l*(dT3M9vj?rN|3KUMF(C$VYm$e<dO>6S+#{=R~d-c@oxz%+Cgqe-3%P3wuGo
-zI9JWU67ao<f8?5vb)75?)Scg3^8JvD@pGb1`%@hD1sT}aamf5S1|N_3PkEN5r@hg0
-z-A8*P(`hVwr=Irt;{V7@ZEs{_pCo$94Bx4zeU<1(i@lMJJ<m1pGWJeA?Om92^LkM1
-zjcn|B?uVDLcj{?x_BY-adm|hB24x+wcj{?x_Ct=EF8Mc98yNd8%ig%BUd4ZycEI;z
-zRQZW)?9&EC{F}v_4n6J7e#>gHH?pzkJ|{2Aw0G)hZ}w-V&(Pr;+1TgP7?-hk>Q(sr
-zYyHJyZ}xYLy+^CV_D((R&Hm5LVsGSl_D((R&3@72VsB()pJs*c)T{JM{69767und`
-z@$Yu%X>azUM)`F989AQ4Q%`%df5rEXSpG(iXYbV0zUly-z$&pfvaxqt>38aB-y-%`
-zh`o`G{YjR+(ccF5#&0^|do@n^T}$34D_TFvlFzf`RhImKC2zIlW6q8CKhKgIESc{^
-zIph1WB_B33T7R}B^I)jczQB?bkS9g_BbVL3UkUd`MhX55a;*NnL&|4bwyqyWrq}GB
-zlf)0ov+&2MXZd!C{d}=Eva!$S7hDAGoqF1P4pM5@YOyym-Ny>wsi%FK*sm3PBO80S
-z)xSCQw9h|8hrfT0PQQ_jy`6rip7vE@e}dQ>+1RUuBM8c~9PTMA`$Kj3%Z$Cq#@-IU
-z%Au!ygUDBky^)Q5!(i<{Wrpw6)1D7~c=3HPH9m-J?CtQ4d+KSQB<=^z()LC+_GwoB
-zJN2|T`{jJ!jNu#E*n3p$BKc?Zx52$zbi@`*rhR|yW901U_Hh{GSnZ=>v<~Dk=ovpF
-zoA}xJ<J2>KEn@$q*c;i{S6Sub)T{D2Mu&fRu9T0+#=b$T!}ZHNZ=jy`4dVXCVsB()
-z-zWa!o_ZC3ksHOn#i3{W>=S>7Ud8`-9l^~e{vy-=SnZn+1$j|V`y`RO#ooxq-VWcX
-zSLshy-nqt~C*>!yvG0?9hhC*$<kQ8z#i5UxeurMA|70EhHDb?)m%QSI@6@aGi~AeI
-zKFPB0lYWO@rT<hN-rFYqBF78A!J${_7x^QTeutjvZ?oEWi$hQQwDCIpgXie{H*&o2
-zoqF2mioILxjcn{Y_yrd+%i*3f?UN=_i|2u2Z)ECY)jy}6_HMCXEcQk=_U?U@_u=rJ
-zdfKO*q4hr(dm|fryZ$-#w9gg$+fDjK4%=J#Z`@N)`+TgUdGUQ)_FqO0+iP_={!TsZ
-ztHk~#u{W}@Z?){5dfF#p-OcM;u{W}@x6|*`)7~xi`{n8Q8`;>mD&HgJ@6^-2L+no%
-zdm|frJA9{}_FZD1A@)W#_ElE?JN2|r^XdpzioKDIy&b+&Py1Z4UoQ4WHuhCk`ki`}
-zezE_JNx#U(-ecLD=hM{F-aMcF)m)wbMviCi)YINP&%SM*l;1QRps{bW!Z+@zr@eXp
-zean1pZ)9U{$KR=^y(?V@(6m6?8#$i6Q%`&IeEo+DwY`z!**o>L&zJBoI$zrx+1R^v
-z^djv~+*42c29a+Qdn3oQcj{^1D)wDsZ{&FPPCe~A#QtlsH*!3Cr=IrRVt>L9boz}P
-z&)%u0y*Ynyp4c1N*xTjr)YIORp)+`u*c;i{Ct3OL)YCpq>^~HHBgeCM>S>=V_UB)q
-z({JQ>_D((R^TmFn*c&;Xy;D#7DzQKHLLI)5<Jmj)v~Ljm6=HAXc=k>`?OVkDDX}+l
-zJbR~}_N`)n#3CJkBgeCM>S^C5_DjXy$norr{sFjmOWh!PEcqyZv_8v{Yb}}K^|v1R
-z72Fp&!n+%Cto2BTq-Q}u=ZBHwrN^mfesqa_k=PqKp1o5~`);v+N9>Ip&)%u0{Wh`x
-zkJua8*n0-+OrSi=;hr+>&3T_6=IitunffvKG~mOFGVPsu+MDx1M;1tZ@+s%aJ?*zy
-z;T!k#kM`y~(eK6H$kfx`jSnx%4Bx4zy*Yo>Q=r2)GTqbO?$4Zh+MDxAqZVs>BO7}+
-z{NP2I;XC!TH|Lv*#NNopJ`GNI8GEOm_U1g)tzvIvV{gabsi(a;KlQlS8`;>Wsn8?g
-zJN2}0!#)MCFT~!+@$8*?+HVv4;|q2E8QIvomG6=8oqF1v^IR8;y^-VDJN2~pV4s55
-zLt<~_c=k>`?Q_L`{~{fKBO7}=|DAf;oAYG>u{W}@x5q=H{~GSyD(3o6dN5kP%#t@+
-z@`&PS_ZM37t(N?}B_F*c+CJNoS6cEjmb`aKwEY}QzRr@FAN}>$|Au>HN%-0ZIaYt&
-zBIR{ksV*-g$IEZ0p5@gl_IHWBk&XSfAvy|_XF1$crhN<M{k&c^;fqZD7<}yVHtvmm
-ztGIvHgm2kb(Q{mMuflie8GaJh4ZIFms?%@ec;P$sw0DdBQDSdoWAEV?Tm-{+>S>>g
-zbqBBW#oowtA1nP%J?-<wzEJFqZ0z~oJTJ-&->IklHmo~%{Z#CYZ0zm)cj{@+A4%YK
-ztJoXa*jMeN^^_UDQ&0OUjI+F65_=;Xdpmrmp7sr5|GL;4+1R%#-y`XF>S^!J*A9kW
-zq|4vP#@-I!si(b1><<)sBOCiPtNuInD*Z(|{A{r|=V^_-N2|l-=hV}_RqSsQdn3oQ
-zcj{?x&gVWM_C_}LZYzAJp7z@${Nu}X{uw!*y;D#7B=p0)8pPhn@$8*?+Iz%)i`W}E
-zp1o5~`&_X<yIjZL$nor*dfHcsJ<lC-|H{b5zEAmy`~SkdTcuq8@l-_1g_eAiB|mG)
-z!z-ihe_+X%S@JI}xx<p*v*ZJ-qWwS5lJBwPeJ+l6zu1x=wPfa(b39|Wm6+fT&&RJ8
-z+4P@}ifrcpK6pU)=K0ZIL^l1+Cn6)7>bedA(7i`wyt|}ivp;vC$mV$v-q}-n^L%hG
-zv}@X%=V|jrHqY<w6WKg3aqXquo97d`BAe#{w;O%3j?kw@FZ<=w_ZIt8wZ2Sbv!DBG
-zkxl>pl*nd${9I(S|91@fWyU|(tNoiPve_T47TNTdH;Zh>_by{E`@LTqdA#;-;!y3s
-z>F>%#HqW1`jeLxD&);WYe9ZHe2BS~b`bMLd{Adx`jEBDvIbS<>{m!@-xm{$l-sA5(
-zFuaZo?ciCF&G`13$Y#E=)wn-EyZ^7qNoQ+$#4zzs<U>R@`=xG?&GU<~Mlbm{QDn2f
-zeYVJEzkh~tFZnx1WHTOKD6*NK6^m@1M_(zjc|Lrz$YwnIt;pv2?R_Gf`OZTko9C-f
-zK}M4bUwiKxEl;rIfF(Cs^1YV)u_YfqJlg+sOTOHa@37?OEP1OXPZ$yHf0HGDX~}{8
-zqTSzQ$&Xv|nIog!|ICuVwd7M1quu9Q@-3G9v?YIH$>Wlu{o}uD<t)FImVCP<Z?WXB
-zEP2ZQ(f(a*$q!oc7E9h6?aCRSJWIaLk{`6>$p=Q;KW54M9~7-0Z^?O<e3K<VYsu*c
-zNBdV|$$R14g)=?ZS@K3p9*%PoPWR_pa=s-uS#rB2|I3p185Qk6|2-jRcxPC0o+V#y
-z$-lScE=&H(k`Fm7I=oXXdAcQEY{|d0<PDbmfhF_bZ*r#Z7)zdN$(LI4uPym`OWx;*
-zX#Xcza*-wf#FFo{<VP)eyCtU_86DmaEcqHsZnNYrOWtP5r;d*Hf377LTXMN2-(bm|
-zmi&w*zi-K7j*1Sy-jZ*&<OePJQ%g=bI@-TPOFl!%Y2opUKZuy%ipUL?{5wm2!jeC*
-z<OAH%{*AZf1(sZ=WLNlFVad&w+-k{xw&Z_W@_xre=Li4&C};baV98!fo@2>DOLn^g
-zV`@^zr&lkps;!(^TANp0nCc1ER~1wg`DSKJPaR)UP*XC!uA;EEw6Y@AQ&oLYZe?jj
-zZLr$oo17i2SW;W!nOIs;T$$zZTy(C-lj<o7R+nB9ESecyj$38r=X&x=YbIq?)J_;b
-zKaiKZyk^oo2vg?I$Sd{E$}7#QTJFuk_uA>P;!#&sR8SlA<#^MV!_atgNwhaHO;dyQ
-zwbccMwK38#p(a>Z9jxt}jGBV7T1mzPq?6I#o!F<=lrE{rEE+#)QtH&y)2fgwNDH#X
-z1bkX~u%@P9Nzmu<WJy*|g~_zK;^JU6a>kKY0dH2`5}jGT8F@=$rg(gDX+=R<>7_BU
-zt16P~F-<2FAxBXD-psri={c#Miz1Pn9xh~*M8OP?rxekhR8d(`7=*AC!i0i?B7D7w
-zUuz4N;A<JbR@T+xYq<}_AC(dm`+3nHR)O3Z_?uTcBX;zH72iqpQay#GRVBgdxu_eA
-zCL$+M?i<Hk#8Ezs-)vUb^J2%24P;tbW#L76$b2NiRMc2Cdcq}W9mUH{t(aU@x45jd
-zu>VTonSff+Cm(f<@SYnpPE(cyD}vR!x|y&XrMetR3b(^ROdqCJ1efKS$i?u&GXYW0
-zV&OWyLP>k4$1KG0Q|Mv14Tz7^t1HX%g2AGwDmSqPcV_Om*AsFwCZ&!qt*ELCx9Ln%
-zYbT=`;{J5ca;p-uP-n!9>BKyrH}yO8Z!-KFKWXxJ?Bj$f6Tf30k%!-*kEgL!%nB}B
-zo_9$<?LoQ9t1FN0-5oV5R^6OZSXs4PjR_II19_LkbXr^;?Ass4bjkRp!(&H;<9Vt^
-zM0gw(>$si{+$&5eDK9A80cWKZrL}$1of~P%u}9IVjP9IZO|W*r_$sFhs!MC5ljdwX
-zal)vk|2r^Fqp7+AY+&jynuQ`Nvm&aXD_~036^I&@T!E-j0AhHK!tde1-W70;gOH>K
-zxB`9qL|1@$6YjgU$V#BUO^2!ehKj7esC?94Szz+5u3UdnS%<GuoUVW=F;}3!-cM_-
-z&ejzO=cy~;m`S(-kx7v&5H*~r8I)&wWnBfvYR=Xs1OgctwexB#t1-_=pR{;+ZLnr?
-znVPkE)AQ!%EeW7J3yTW}vYZ@Hrg@j-ExBaLK#orf=n(Qscf@UFaWSgSj=0S!=o9j!
-z^va6b(j|43bv4tNwp`3VmzCC*%&Vv=C=RB3mS0>H2=J4)VCKTinPt=GF17ub$Q+uV
-zI&n@x#ggEhAf{fZXTkKofr-OOfjPk{7EML1%H-LzV*5Ci^;kt}d~M~VLKI4E^spOl
-zNsbcJVR*fsX;X5mD{CtYE6cpzoIb^4oTb|7_j(uP#*U7P<<#&jKh=|7SA9uP%}r;Y
-zmWPRIX~mM+sh-FPJ>Mgflj$CBrf0IA3rzRS*JZj>KBb;kU9c=V*HZf=`n&PhJEJ~O
-zI}<AyM=P*1Y0jl(b;aq-rkzR!=jIg!wRP3O3B{Gw&Jc8QFktVwo^!(`hj7#saHm4?
-z&RAZ!3z5^+b)b-@hG%s1Qzw_!%*S$}h-I%*6=1UR7S{(Z4%9kRmpYy;#8k&QmwK1Z
-zoD-<_1a>TO&LF?LYS6#0-)$vugtgPToKs;{v++I*IA%4SJ6U(-sS_5fHJ>aDm**|O
-zoLu)*juMSFonl70$r+_ff;F}0UAlZAlX}*yzTWETsrF@l>ZC~bsXDLa_4TIjw38BL
-z*e7eoLyd8L*Zhqb#`G8SgkAGDVi?2U<>lqU+G@2Ln;+Ex><+|q$<D&bi?ZICTyz>v
-z#K2wPO-EO<3tiaws5saO96ym&FIeQQt1ZFURa&S<uk^~I;C#E5_TzMU{fwQ=n*Ke*
-zP<L96-Ucbk^z_Zx@smW`H`+N>(G_w6b}wd6!2ZSTiIr8siom408jNYF6AK&(hU^#_
-zWEjnynini63l>eQte+q7dQ+qGu^zp8mM1H!SN}oWkZa(RgseA7?C`zL(CYgJ=gpin
-zi<>K$o1q_`>5Oilj`-p^(h<jvkNBmlRg9t0>e~B`i;+wfuk32o*MZgLMI1P?+3dvB
-zV&d*hqAn48DiG5P?ltYAsg#WD1~Crw%)7*7eW0FMAKe12obr~>(s|!!CJ{5TcCJn2
-zw&eWDdI^&{sj4PeS5%1^Xi;T3_JY)YYU(7tb-`XZowG+Ym8sztKEpGg(^}4LJppbF
-zMrC84dEp$m_0F^^5KYxMZdD&0xzl7#g^2=pRuHWm>?c*17L-loKB?C`V8f2Y7Sl#O
-z3tti)&FD-;9LuKni3|3A=TE?fB({L-XY^^E=qT;k(nKyp=gZKlYQ9<p^gF3hK}R=g
-z?M--?9Vorat*M?iw|iFE3&L_^F*gjuWy|G{m2%_M5d%-U4EFQw(2V1$i%o6m$46$O
-za~jgO*EQZD&--Mr(b-ixeBWySypQ30N0UsaJDg-X9x%ytv|~wDF5@Jbx>!k8_hTd(
-zGmRZhGM(;llIeKBB-7E3C0V(QlVs{*C0X6Kk~}4=0#8-2Ho_Vb1)jRo)3Z1p*x^T<
-zao2Z8a@ewnWOTYGBVKc|Z2HY_%k99~ZX0CwZDW>`0W!hvWFppTD|_cMNt^6sE@`73
-z%qH!4XYxrb`pqcqCVozdK5n(0it4l*mDXXd<B*p(xu6Qu&?0Oo=c%zFFK-q{n7jqf
-zSxcXh+U(#&JIg$+I=BQodNnmPC@Tx9r?In(XIBL0W4Sm(&zSNSs1RyWQv-Qe$W$zu
-zQCC|tf8vtr%4LW}sfq<W2;fm<MQxz2f<sUc5#*Bp(%PET$$T(2TRkv=eXyY1vCgka
-zJuOgBQxmM_#^UsX(lWI5Kwx5VX<2Y$S!qRZQgK<qlA4-Hvx3-?oQ(&{dE6c=)bYTB
-z-#o7`udZe?pZ(%Nu-+`M89yNq*}(HwR~IZdTa~&_*NmT>5iBmKE34K1z&Kc4RavH%
-zF7tI_`*ji{O*MLltY%VXb#-O6UPPE@VG`;jok3G;f>i~0h{nwxgj<fstN6Zrc~wy$
-z56MGz;wmh;sHXO!Kv6;UvQkv8K+Uq!;@ZIU*>ln}1KG2^8G$kSR(fT56{5Ykw5+st
-zITDS&k{gZKY3|3QIvCl;>c?TmK!InJ)*$f0l79Typ@6bx<A6Xvp3Gjnlr{5`Aa>W{
-zCTn3XwB^C_LT<C`>?$ZjRmAcuO4gp4TS1oAoM2h7pa#3{+H6U%cJA`3;55ukE0$mZ
-zH>;pLm{q|Vg?hY0j<PCpg0%%)bhElTJzh{+TY+`y+=9hr;oH^G!Q%`;0n1!RrlzcN
-znV0Es-pIgm&~dA-0yBQ(P_Rf<K6VGr&OonzJd?93*rKL+<}b&Rb^$kSiYHbS1rSs$
-z_o<%jg6bu~JUmB6XRt#SefF?-$P82P`og@qb1pT_<+RMQU^(^@=G3YkRd0G=?vhD}
-z>k<>!=u;&Vq8{KxJ@VbDQwC=7$lhufALBDa%~ezpH)s3g(}LNkv#|=nTNu4(zn}~)
-zKx#&5MNMr1c3e=w*zi$pf~>ZD_U)*+vHeAF9ldcrd%<kfN9WdcWWgEUIan~8O<jVo
-zs;*?K3@om!5B`7by$@hqRhjpHZzgS~C4^wpHZ5@)Y=r<FNNs@>a&_7U2ofc>fd=fg
-zfu;~_paFsgsT#LY#wB8a09gz&g{YGl-7Ex{LX=S=MhR|evzqrcy9S6FY<xGa5vH2j
-z-}if;b2F34pP4iT@wc6J?q|+<&i}v9IrrR~((St|uDkV)ow#9k)9sbq2Euj)?#0<|
-zOR<x9+wMDKxQ!n3CJutz%gaA?Gv=7x*GDCE>U$0m+pAk{v=SbD9BEGX_b2zSEnAB(
-zx#6nq(d8X|vux5%C{7rhk14(U&Z;f9@Tkgm*%+<FU8OrK+48e5SQ}X{6Bk*98#Y`L
-zb4|MO!VAau*{vn%ofmGFd4Idz*FJU)1Xczx?_1okA*}FOO7Zp$muBZ@U(FPKcr6C(
-z>}#{Hv;;*rthwcu9aA*-cSqjCTWrUachT^s%DhP4<+*=nYQ6|}swa+L?~c01jYqlN
-z$(<^6sJPm_z2z`PonQSfukB;bFZUb%H|3X`4Kec@z7Z2O6mHl#X|IbjbL21`_94SW
-z9A4~phe?0pAdkgcROt5ZSDa3*?U>l1hSO|~>r*CK_4ElUn3cn0KIAp?R5~FdRYLDn
-zROl4%R8**;cOt4d4#v%*I_3~swkS#yYIhF7tvSBIec<>8w|0u){yvA{XHmIp-sz+6
-z<BKP?%nOgcQMXPvY>LdrR9jtBjF!_5fij?lBb({|(}oQkff&?f>b}v$+sw0Ho^7}u
-zD<eEl5MC=;D|@WzW?U>q&NMUJ%idnG^~&of&Py>|W1C?@*wf$Lzf%f>io^7UF}tvE
-zZu7W=6`sdr?mb@Vo2lZbnit>kE)>}>WY=e!RjCML?7ZwiN1L=y5E0<9^_j>t#?g0U
-zcgJuGJnlh<8{}~fdg}K1Hbr5na?%5iYYY=d!k9s$e-vz5gYO6MU5oEJe9y=C0(>vT
-zHwPP>ciw#cZtOQ^V&iE0cI=2>mN~;-ezg1T6`5-H9cNW12DN>|nzb7$A(m&vqQzTo
-z%nY~XN&8+ix{kT|6z%&?D{q%YL^wkW&kRpE(cvJs;WW=Ms81@3V@UwJSabr8B^>sr
-zxrP(nd18krXC`JS%gI@p;3dA?Pw*07M#sI(Ax~kiR!5Ir8Z$SyNx|7$xVP=RLERqY
-z!vVMBZk={X{`O06!@ZF;+6{P)^W2^B-3P**tMTLFcqkN#&vf^;!nb|m_apbL;&;Dk
-zcjV2m`2E?pzT)?R`&02dw(f|<?|izufRjR)xJM^iz@&Q&1=Im&7<f4_e<aUxBzHTv
-zSJ*}wUpd@vtQ5QOAT?=V-Ew2JlbECFWG_(-cB(xKD?j0MgndlEGZW=S?K@mO)ppAi
-zPB~!2>2$hfNmQt_UI9h<pP|z$J>Jr7qw6D1Z&R;@qLVQFkz2d{gzG4F#Fo}K`}A7g
-z;!AJLrH`c@&OQlYr84@I^491gn=uK|?O656cnfio_qa+$rmUIT%mf!x*3twQQx@X5
-zi%E%$F77E@iozT1aOM^jj^|i>&rTJdRV6d%aGQ;#WzRb3a9cdCL5GVoasmD}MKOy7
-zPJwpbRXA&O`+2wBaSI+~Kkw7KZ`*a=jl12}YXEk;<+ROY3lZ<Ssq(yYufOA_^3wBo
-zzjo(&*0G_Rcb4)F{O#x7g4b7+?yNd5Qn^vi)%lXCM55!|?!IOBZ8u+6eqL411=}xJ
-zH_@S`9^JgV^bVXDnPc*|?7ri+9XoHI5dL}Ebx6Gx$y|efhf0U(-972K-RRr<Yu-iY
-zLMA<PJUOuw9!fs;Lo9safQMJ+{Hlye&$FC3KZJ6f=`AHE&JRu4I-Ww^fA^dpnz%jm
-z?%8Rw7sFGmwr$bmGoax!mXp?dC)U=Ji|c>S+IpwFB<de(a<|ir34W><YfPFrXZ=c|
-znctWZ9sY5AzYrsy^fHd<_}0wz1xXWL=`ktvH4)<D|L(BKZw;Ane}B!}^_Hsek~fYG
-zBx@3yIQ~!A|Bo5O#5<%hom*R0d>_m|R5!E|j6P_+SSPv}am97ar&U;d6W<Fsr{E$N
-zl~K1m`M}uZ*yeUvDg1t+=v=5h!a0<SEcGX+SnUDKEo4;K)FDGKhmhG$thX3N7l(D2
-z2a<^QUg60WI#+KqiuMrqOQIMC-t9FxH*uUFk`$=7ElrsMOE&3^R#u$Wi<zQ5<=CQ$
-zZ|I|K#0#LJeXUtL!NFv|^0ugGZ&qX!MU<*~n;65B7fVg)iK0olg3E|y-n-+(?mKf{
-z*=juRy1bt_scyZRYBp!J!#j=EHsBOTdZV6EQ0H{sb#;HtC%3tUJ4LonoK&Cgb#;HA
-zCvc9retBaqX8ndW;HVBU)&0<Nj($`5nErlflozGzOnH-Y3a7k*G1dLhDV#F5aX5`9
-zms6d{o15|%Ia@~Qn$eT)T(!YjMuieSW+iTxQO!kPoJCY|D0A;jX#WdOs!ugGSkvoN
-zqe;Q+N0TToGmR!wIGt`ZnZoIGqe+2QwyX4pf2;*L6U@6_k*}nU9(CUF1IH6zmpdsr
-z@0u6>hhOUZ&i&zmSqx9_c)gu?*1~$9#))Swte2lneuyPfKaBU}Oyp6INhh1iC(aTx
-zhsg<nL-%ygZA_)vz2jYIhVDIacX{&Z;u&&3!ztwxC%&(gCN{Atoj4lFS0`C7T#bAr
-zYj)?~*yF;-%qI2TDAj6)_N$UG<*B|ny~TA7apthX%R@CN&8{>id7myxd?WuqmKMnb
-zLyHXm0fA_pEyos3*kYda*C4`w{$Nr7wrJ9JbL1Zwi1xK6J1m{xaq=ID;0y5iE=~>u
-z6K^EV@E1Jn*IG~QaZUVx<S6_{7$(JTize>oNBp^kXdmmxWihf0j}aS|$NAwsd$yf&
-z+eN0@@PcsWerE^uHa%_@9-$(O<G4IT82>@oS!ps;k0i%6_2DS2CHmV`^kH=@X5!go
-zVrf8fY<mV}XR^{X!3$f$EMs8}&%#T%SZ$>v?mUIPS~U_o(iu7xifB@Bk;?h_`S<az
-z7d_QYaAEbJ8C^^{bB~7+PRleC>l7}fSw=@XL!O~SgyT6D-{WOr&D*gW?5vfW_=llc
-z2Oa+~G^?P)#i^?8_!mq#idhUp1=@+vi4r(b0w+q~L<yWIffFTgq6GfoO5orB@`t}A
-zt3REsBlY+*?ONA-Tr%;+2Y-fMD|1*sr@VOX5o>3X&^FV^??SQ0YZ9!tPb-rKbI~Qm
-zMdQZtA0;=+PllI(pZWJ|+67EcqE;;ux#D%0_<NkUU01&50?Q&gJUg6J<*Doz1`+<G
-zgnwGU@XB($$qFxrSN752RVYE1l2=8A$FxR%)Z;GaZ?D8Vjqx~4ba**s;`#^5lV`V7
-zLg+<JTOJvZ`i=DAJ@=L4lIZaMqQd*2a*<Fm@$aFJdmImMXBqwoC|-Xd7SZA5+$8oT
-z?-6<s9-Bc|r>1qYp+tQqr!Q|q(T1?2hP&jqM_Kv)Ny5uIsA<lyv+-Zsx9`6GlRLKG
-zbTj@!C;yH*{$%Hb@cLAEw%-AS7hMPAf#Jt?yo<i_y0A@jcmpat`;W*Esq~d0eVJiz
-z<G+|+yt*DQkiO#<yy70OXD!GZ7vjgj9x;`uhBmZU@>|xcX}61LLUL(H$G7-5=x=DK
-zednN%QQaSaT_(OT;d2tcCtJU*E~&3`oCO=JjrUQmX>NS8@MU;ztA6>Au(s*akM69r
-ze!-p}y352j+THG(ug6Q)rw?bs`$kkaQ^f~&TXx>|DZG4LaywnR`1jR!^Y!`aGmSgE
-zuVmMT+pfO}FPr1-f@#wiewHjEyiEL#%BQ@tANGtdd$PP>_m1nzC;o9YIKpR|a@)ec
-z@`68MV98mJtS@&t+c15F;}Lu7apmdWdNS@l9FB5-+fFNdmiL5kBHsaH`3|Qu!kzki
-z2;#ubN2J{Ta|m=Xg?vKUP9YyJ(`o#N--n~ZkIEna0>V`B@{eJR|6K^i8<l_cS3U5m
-zWHdJZaXZF;F1~iZC_b4sGk=C0p2KgP<T*Tarq&FXY0>5ZN6>g<<%Z@rR_e_Ij%tH$
-z#&$o~{FfW`=Fs+p<~O%Gnn$lpY(8?=yyhdD^!tuF90$I&cS-25V}8q<j(IJAb|khu
-zanHKuF^Ap~a%e4@R{e8?QSWo4hMd*gL(MC-16ewLpN@1moGnOuU21~ou$J(lU%cVa
-z?sFRW{$bDkS-SIOzhg;gg|6Lahw)d0mxeIB@0;51LijC!-?Q}Omz(!44t)rIqvIGt
-z9Lpi!4%*@R9BEeC{EkI2)3p}q`h0?RpYF)GXTXt;{Au-XAzjSxzJw*PTWr}e?{C8H
-z**~pse)dmmP?k$uUUg(xvc<^r)5tUWYTZW7bJ+KUe&8v`($J7&5!{IXz^~Rf2ll=v
-z#5kVWyD0RkV~ORL@r@yD`gv|I{VccqyoRtBtFpf8H0^00>QL95)LQEQ0{4GHTKsz}
-z$L;L&`S)HOI^E$!x|dnuABNkv;I<ug>RsqL+`jiJq#><k-`=gE=N*efuQ^U@(ew}f
-zg6Vti%ADrFud<Q1bfjSk^1BG}EVsfLu+k-I#u#3=1Nq#CG(YZ0I1q4LjdZ8CFx)|h
-zqvbb9`)^g*Ji9k7bcd$3{}t&u6>V?-uh%!*{vU^b#<kC}H8iN)|Hnz<){l1O)C)t-
-zd7i`KrZB{G?nnMm26gzNzO{PYS-tr+t$MRvE>6nyprIvJ8%}NP=Px|5zPTOoz-+nk
-zf9uX>|F_mR)14FT$@vBCfUa+Nl5T<yw(Y<C55s!ekv<`w*HDgjx-rew)v%tCca{O&
-zGu(x+|FG^k{NWYa;rufbP>#!6bi|vGIrj5SdiCZ+kZ!Y*;1}h;&vBKNC%<Ehl}{ha
-zVV|SOvh&@2EBkZ3Z|~;NzP($Rmihs!JxLw-?yj)pj6-D7&eozV4x>)@?JYt*OB<lS
-z7dGh!j@)$#`g$Jv{3i7MjTi$qG>`3m$scrV|HUZs_gAzN-|ZWlv&KGm@Hv$80_5i`
-zlo9fkdd{8xz=!pd?(yg=esRaID-O;>U3&jka?q)#?fUIJt!VLQJrA(0zlJvOI@=V|
-z3x8=}ejnPczTnVr6Sbm98SNLt{!-ZQa}<W``hL)%9k%P7^__oQ%PI}+TGF-%ee2ny
-zN0(-5nZ5QGb4uOmXjkm>KTN3Jyb@)Zi1x+2&<)3Bj{Uj#ax8zJroFsE)BbqK@lTI@
-z{)pp`!%nT}=w1!wtYa+I?!(yBvH<ZM-Jyk!B439t*48J(oPzJk_@08Vj&CZyr{c@;
-z%YiSJ3_qWT?|gh0;_FP*+R^^n2QbFHiZK>Z*Z<z(SwEEIS^vhFp7n>$@vJ}ZKdTPj
-z{Jn~Uhn9NQ|M4`~pXXUWyw<aR<U-H-a~~}`So_(Mg9|=Ud~jriXML(G|KOSr79K1y
-ziw_<;#k2m^MV|F5_mmtgg}Xy1!MxJ5eka13k1!8ijCgdt#i^f+ZwkK2ExX>Uy$5yL
-za@~6ipX$;U!fqbEiTFD3)$lzPV@hhvk-IiDqde|o`(pWxUip2@Gg3BeZzw~n{Ql(d
-zK4OpEdbVeOLYe1I=8=7lW6G;&zoU)>E8h?3p=arL+&%i2-Tzk<=*_RfJ>wm{@`qNt
-zX1s51{T|GS_pXHIBS?=2WjTtr{wIWUzNQ_*0-*@;jgKiWT%`T+l?1KGskOc5g#_oJ
-zg_d0Ay~y-29nvSI@3FpppDQ`2>l>du1#Mr~La1jgjcMg?_6KpFX65Dde$V~vM-%L{
-z4No4qYa`OT0sZtvD-TB<2?s*k6JeeQ`}xR6QuC1)_4_yn{26gdyY(EFG0k)M)s>Fs
-zfq%z*zeC2z1(}}ag-1Sj5L$TMF7#)tn^SMTvn5cgpL|a>`t#XG@(;eTQd@t{k-~$k
-zj}#yL{h1otl(zotBP9pVIZ}3T_&ja>@7K~?aqz4oXcHI0jJCWG{!W6QH$J4TAKIj?
-zUjV<!@bml2;QtEB%MLo>=Z!11^}}1V^@!uX-*45{uhX-vd6o6bdLDp1>un9n;zEog
-zXB{bd-~xT=p(~QKqO?DI?q`3r-O@el&4)RKzlRdELzm9iif&Jkxp9TI<dC!Np-0|>
-zu;}*!a|6cV>HT-X{|y*}=>N|NOAfsxZJ~aJwiw|&_(&P-p&$J5RkTso6UsR4=<Ddu
-zNgC#*aJW_;kPkb3Y+rWy+x2_ouFFt=m!cjo!T6ikjCvjK8*Hccm*Y$$zC-wWP`NSn
-zHO%8<(AWN=^tDmU!GA@6IgB)j&K7Rl)Y+UdbhQhi6CH(4WcM-p@jKQu$MR?Cc+k@#
-zbvz&Df6G5~pZNSw)DeBq8O8t7nEu1M+_G_9?oG6n5X#{?M;h#8?Ds)8W7+IWSZ=jL
-z)|v0__11h!-OBDy)XAvBy@ol~*2NZQYEM7&`ugT)pkod|M|u_d3;hQi?+IaUs7r@F
-z9;pXDgL!l)!kr&;{ueC$Oms(k-u2)9>1O}$);I4*U3#I<i+;JNWj}PQ*Eo-3F7&Pt
-zd(0V|--qw(%KrH+Yn$75=QK0DPdE||P{$jx#?2*2`%>s+>Cnm2p_46d`JK`iLde(R
-z1)NisTIoj~#>c-%or-;p<I3M#r~0HzJ6v`Kb*e>E>QsK{Nz@yBC~xXMEH6KFEL)d&
-zRh5+w`qe(i=5c+Bb;o{8Qg?cO*X_+6s3WZY(*juIbRdkUKF%>@yquturH1~D_Cr01
-z^Y?Um(!T$y;Fz1{-&+`3fN>H1W7n5X){1nDaUAz)?|lD;=F@fOq2DHJMbv?oU@i3=
-z;%7b|hx~PwHl~k#neCRpxklmmFS@$ud9-JmsPnVUPnE7Wp=VQvqi$%oT^;(|Ql#gC
-z-OOj${yN8!LzhCQ37|abZwzgR^V-EnOAbc5D|0N{bq2<2J71A9mJj_gjOTuLd-L<q
-zb(v2Mx;@+G>&Pe5?N7S3S?UUNqg8j|`n1vsyRP}vxeHN$SOdV!c<j3Lp{(q+mfd$4
-zF7-TFyV!kyE8I!nV;RTNi|sMlri={}b;LpFij0eHY#lKh79M;t`D=yvX5m|bZ=?>y
-zx>~V7yVa*@MJwiMw{Fn2qP3%*`?0=AW53J9Z+JobTr{rJz?>GT-yFH?1#2y%Vck)J
-zIq}F{Kk!rEg1b7T;IKWGF&y?|u6eX0k9FDZ?DQ}`y06wk&qjv->fY*?OMaMnPXfx3
-zx+%jcNze|z1>M>9OI??3(aI0<QO*1yUq1jX_iuXcx5I>aLi#6$!8C-&p;wV6YreA9
-zfM_RHorlYU`OM;c_A$@?F3o$v0;J#hUeEmtH)!|e>skMtsXOnX8$H=`nC=!_zG3}M
-zn)AX0gy+##pp39jAyqWvo(T6T?75KoRtCcIuAF+$!rt$Qo<lhgErP$YY4$p7e>s?Y
-zS2(zKka=ZPk^P?KEA!LzW6tU5%joxM`RJogefh3$Vr|BL$u@O4_Ykn=Is<l`3puY@
-za|r5m2z}9xYgCPOoSWXj_`|Wzi*=avs|8j)l<dWx33YGGGxiu&hW=^q9Y|eqFT-Ag
-zQjeE$Hr_s$ipt@7Yc;+(_~J8TJsoxE2bfl$V;RPGX{+2@nN7Ld{y4raL49>iQ(yMp
-z)H>`vJqBHAs(q=`Ap1P(a^FA6c!Bg=dpE30U(!X*G~4}iTxZxzog*!*Z|Iz(rQBp3
-zlk&{OT!n4Nw5PC7(e)md`)MfOG;6+R*^eq+=MSpg$T|UQUhFY->`k9`ZNKk7rTzG=
-zwf*8<)UECI)2!C=FQNTB<+#S0qh3SW-g2CbHgK{vj<em`afjQJ?5FvYs?->dwv9BF
-zpj^UjNXBH2@yrYNrzW={>f168%eqkfu+HYvrv7r{^U%k2=;aB}&mCA_VL#M?y-=*>
-z*`C;U?RLR&ayi;XevJOV4*i(zBC_r|e{(O+mvr&eb-!t*y62vp<ehbod4*F;J?oY2
-ziMpti<>K)^&Ak(Q{VZh}4nx*1w%&m9L*F@aS03`e3FWX6<*@<#LqD?Tl9~J6i`sz@
-z)*NG4b8rty<`U_DEW4S?%kD?((N{i%zA{xmN>hC-9qab%tiB{VgRKM2+?SS(_ob^Q
-z^d;`!N;v0h)%QP!@`R3m|D$03BD>s{p+8~24Q+K9+8EdHf5ja8Sd#X~Z)0w|&e}5;
-zy@EQ|e)MVTBrF5g4ZqyOu=}_VeVcYyC9qFZ&l10pzr%GV@rL_;IK5XPozzdcN6q@D
-z|K~C0+2MWd=;sa|f{tU)_m~e-7vA}N;4FRNJ!9yvnb7~r(9c)s`X66~&VhRqX<lo-
-z$k_D~^iU_}3qQt)0fh0Y<0Qm!l9eC--r~?9_@_S&YvyP<)3FcZ0`oXI9}LSL$HIBJ
-z19|Zv{x4&0a$;^`ye~oLj1HUeGJeLrVeDwpX}Y%V^GVvRU%)<%op$P=+=s+insx{B
-zCvy?^Br~87pM-uP`H-+>evM2s`xMh*?^n`4{r)w=Z^KsV$QdoqBb|16M~3lqLi(XI
-zu!j&pS|^u5INuY~uz1#bD0NK^0ITqA!nYV-eB$b-e^Gk_Y&-A+JyG^8EL|(c-oV8e
-z*Epv|j)(E+L-u%>j=jvtF_C?k_f=-@!>5J&u+?{@9m#t5w3gE`9?E*y))86GvQKWW
-z`7vhRk9}JdS@r!Ffwo_)PbT>Fj`w})M-tv?==aMoc5Fw#e;NJ$bO-khWb9-avcKz?
-zFW6pCmgDO*=IQDG&Ov+Oyd`~|@<I5CobUI&t{-?Eb@ChBYonYxUZkJM-`+`MdSqTX
-zzDv414$u9u=ES+`-bm}r?G1Cvo5&Z}2Gk{Ah|tTJ#|*T+M(mfc-Lc=t+8>H;dn|kL
-z8+&ia*2lk)un2W0`>zq}X{!&|bz-j%sXGp#-bSG(i|!@*Mi$0bjH#3Ejqsk42V<-A
-zX#T;#-eoxpjuswVc(nMS|AA#W%}*@Labk>JaJ1}T%Tvp8{4dg60eRKI=7TW5zAPsT
-z{?3A*mOm}a+3#4Mb2j{*13&&n%X6AnE{D7f@`{5kYnSJId(-lqmM8QB{w>RMHt1*F
-z!@Zwu)JNLqJr688TJpf>6VeXdgT017qaR%G7WYuYZ3Alo>;4t?AnLw>zK>%{buVEp
-zWa|o?^WH?8Jr&`tg<pn|X6=E*8;1C2|KYu$r`4PgnTCZ3`-Rt+g<jaZEX1_)J{t8#
-zS(8XP)1RzMPMc8voCjpDfI2Vke_?(`TbxjbeuT%p2YW5k{!85V`&;b&8r19feXVa|
-z9Jh5}`#u)OcIsM@>mL8zpH_M;^fRPI%F&+d!eth#KiYc?_Snu04d9y#1tJwp$Jbs9
-z9o?%Rc<bX6@7@0ibvBCoLo)As4oe&5*#PXD-K{mtKD*pMawd8(F3E4|Xw*w7M-=rB
-zeL`#gv$f|S_Y2?p_$J)P(XG8|$WQe7i2I=@`n)}Eoapmm{r2tY^C$Y=#Ipz|`re7Y
-z_fE~XC;HxrzBjeLd}7`^G4J6Vp*rV!Vx1Y*eNL=1C+`t(e}Lx#{!!MMG3Pz({c{h`
-z-Ve0)V;mR7c~)rI#Ir)!ADZbrxZTI(oKbp|-}KO8?jucezs~l%9{ZQP&tRvQ`%vld
-z=ZtYbCwlLRdqXqbAGG7M&m;}a*FLu5RPENRle8jPmuvU^GuM$fmF0YRft;)D+PGo;
-z3PZbf=wa{j;2F4gKM&_5upVdm@*EO>%e_9?N9Nx2#aNF&<+wIf7U8!f%5VE#?xV<_
-zSDAIMkp9zfzU11_Iq>g~@av26JEZm#{p0?YwLI=94!xKABoY3qqx?OEJsLaB-f_P;
-z(}F!6JX)0I+!W5Mc4l;5Wv|p}?Zq;!vM(gM-qM(R<wrMZ2acYk?RO?uZ^oHSbuLoQ
-zdMDznH_Fl4E3)VF>u@%EBldw;;{3M*=f8i8^BkAK%<@K9_i;Z4ztebs`OU35?vddf
-z>0P)__#(nglzR1}UU}wky1Lz<Ik4|2XIOcEjQ17oHpu-K`yP><HhV9Ud)CM5m-ls!
-z)vs#~etAadSmR}xzmD?YnHTC6*8Mlw9l2{0%6%j5P2x;3_S$)_gLRyhI`=xZ>vzU;
-zmU|rs9>=}&eb}e=ZAuT=btn7J+3}5cICmI%Hd4mQ3*z$|eXbH`)9Al><!qk6nRqr+
-z;$IhM{EH@}-H$$oGv1Ph9kWTp#Bd}HABZyzr%p`6-iS0j5nmc|G5$XmG5*{45UhRE
-zW4QMf&m3?O;@ln)C+`(6Mcoa>n5*owK>kg|0p~m!XYyBu=Z}RE`;gQthVXn3_t^Jg
-z?6uE~@_8cr97gom65b;ZpKpzKpZs6Y$M?T}N3+v9tBU)+i1S&Tz2uobj?>TJSr(pq
-z9aZzk^l>j4zqj|)!8@D1G4|-c0NrV)6*tZcPKbMRMBH26wzzM$;=Vm9?xKjedG_}0
-z$@g`L`z_4de2z=b$Q0vTCdWwJYe1O~K_9Ts-b`QK;pfWYE$?d(Z<%!-Xwk0uDdBq}
-zH>vYLJk!eOndE+t=ox-IpCtEamb7pVv;AL+^98)8avJRH=Z9Xx+!=kJ<x<#5nBntf
-zayE!(%H+Q6(0pm{_Ss(hz6+iuPqWi@#sWJW-iuOc!*~^bwrojD^Cs=U={S%2o``gQ
-zNu6iK8fHAK`LLUm&y^Fy;<HSw3#WCTmS;Scw(xANo&Wg}=ke?`ehFtOCWVXfES$!S
-zmgc>ZMysB!eDmIyeMW?HrQ~fk_n0E@H%0%pb*Q1mbDv*r9g6p`Mxp48fmL8NNINfn
-zH{$EZmuAXp@oiA%0<Z($E@dtT%kiZ<x-W*ZRE}>IzWBtvKecb~a?Ih&C(hvxJQEmW
-z{GV#wVa;EAFO2Ee9?NaLA>KJ4dhXy^)Ogl8(eoU2&Uof3`<#Y<)3xJsP8rSsPN&z}
-z>x!-=JbQmF&cyHx;-VI=4<gq9{*&%(b}qKv;MoJnIX9uc>W9YtE{ES`EnFYi=U@Hz
-z;NI%Ezx0+QOD6Y+{p0>J;16pC^t)K?-)`4g%Z^{WW}CCu0cgw9mKEJae|g5xekP9k
-zY}sjZPnWIF9<Ma{-+TPhG^37<^%eVO<oQAAUvc(L>>otx*FNa#@w9oXU*qh?M88Yp
-z+E19Of5xNRMfXphk68wtFe}DBgguU+Pg?s4WtdN=>zi4YenfrnTFlLuAJ9LtBG%oR
-z5$kT2c^1~&eAa?)dA9hOtvEAb=^9H~+LJ!hY=_~GSocTn7cdO&6L4Ol+YcZN@xR<k
-zL%XFTNIGJN!Lc9>XS=ktE~Me<EmhVzs>r-_MWiDbvH!qybXn<;=aDf-qzzg5$WUb=
-zW5rN}|A8p~Lze&WxDwB^BKFua^uD?G7kkbeA6ph{w?2-uX9L(b&~b(h&tu$AS@ihP
-z_5QiX&GCcJl^nsEWx73F#Emt%JZmx=w_~R)5B+tQ-h6mRLUZ)_mACK=<6%6*7{WO?
-zo@IFxXNvjUFVEL;zm0Knzs{$g{q#DtL-V0KU5n@G?s8-t`V!9O(9H_%G(5ZcwMX({
-zk9F4{NA2f}9UuAy=TDy9lXfoWsb#-`dSx2oW80Per|2^<hj(mj{_8G0GoN&6i2Dz=
-z&NQ3+zg=#T?>c<%gGz*F*u&2t!j5y!J1Vo!70Nh{XKZxsY1ZSwit5do+J}C@=X&fj
-zcqM=1vq<6Rwe9jjnkTidcdMN$V{2}oaejMIJMfLK<uv~V?fbAgFVC~DY?HQL$TH)c
-z_h+8tnnoYB&&*Hv?8zJGw>da7zXF`<JpEG0_<ZjV5;CwSDd%K)RyDfq@Vq+D-?7{y
-z&%Ck^@|lCOB+Nl4Yq#d(47NQ7EsWZec<x3%=MsJvz>Wi9T5S?4yY<eLv(Zld*1AUa
-zwmDZtKJS7s?%xeJ@rJi#7H;{BX1w9DETq1s?NiqKT<C7#locV_W5&Butg_@gQkGhK
-z;IE_H2cakb7Gurtux_V&j`>{A%bdyQr8pPMS~t49{0I;8z|Zl_!q4gV7gpKHyApzU
-z_fGrP&&>L~<8P-p?|1|3eAa$acpW}qoh4n=!g%awE#>#r&wH`{W9jAgSc<t?E5WxG
-zUo6nxHRm2@?$<o$JP&h6BKGwin7`!Nd-fB%?XzE>hJIZZL%*}{AD`|>A3tO6yE|uc
-z-+VpXH}@s**>*W^YCrp%ulgqLe@xpq_rIRgj6tie9%F$$9{aGzjbgX@roE@&gKq5G
-zn_%6GqMmB!iF>Eh_2-YFPnB7FAd&q!{A@A%^H<^K?My@V+Z=xS+Z;aX!P0lg-=M7R
-z_Yd)T0j|5*_qg{rsMgV}Bg*LB2kujK_S`Q&-AtKvRvI$aVH3s+yPoYa*#Ba}_?Ys#
-z3bTFd9hP5)IotEo(~T$5=ck!ghCfq#vG?}qZnonIJZPi%7NN0nd_ld9pQFZ4tF7DZ
-z*e(m$r_Du=nHa8hu6j~<(a&1HhG(s>!?V`ZlkE2ZAsp*@>o+GoZ;gJ4=bEW2IPqMw
-zS94xqyOs9>Ongq-&dZTa@~pP>W63-H@i{dstW&wCs`eADIrtdESuk@rQ<YD=c6MGO
-z^-Hdcm=Eff5{}ir>*LWc;eO^l!x!}fe4h&6so;B&_x{4=Ci@ey_y1&%!M^_&<=-*e
-zdw^m8KD;kvrspf|a|p6`nWpwQBK@a@;@PjT&oM;iopVh*&wgEi`(MAt9AnQLR+-JP
-z-)if(=R;3@0sf}aVeMx^b;oI#`{cQ+>2+AO@Bd=>KHAXI@VxlX)LA3WVR$3<NU9_D
-zNcg<av%BwXmc0Z%)5X0`*-NnV#x`k>C3aawj44(><NYCdrc2Ir$TMd=H^sH*vKFK#
-z?HTNqOt-&rywb7Xx<|KcLRz?QBKn=2^T10f)AA$A!}B(j$1`|0NOYOxTW3F{OdiMk
-zP%dGa;JqJjdzo18&Y7W1aF6qSNXvA4N35IuXd|-sHgy}B>AVNpjA|o`RK3XhjQde<
-zp>5c@_v3hvP553A^?qrGl*iJw?R~1Od2`<@I@WzEC*G?E-E>Z8bGT+ed8HlQ#B(_l
-zpWWwK9F}wBIg~E7XX?j2IO?vPC+&4>^ce7Gyf4n~zt9=dBF%Vz+5|J6x0+z)J;O-%
-ztW&0i<X)3K9t>bE4nL>Lwj$#}<a7AQ+xS_Ru9J>mna#MKaYXLJhvy2J>t?$bANGH2
-z`|*+fXS*jK_RBSUJo8+5Uq0;j#NND|L*(4%xAw*Varfr4PMv!niX8K1?nj9S_T6)S
-zvv1Sl$vUGW-uLOHPSV*#f12&Nt#Etx?}#`zh5L{3zQ4Ko32`g;$-?2uxDe+VF1#l%
-z+P{A#)_?X{GK}T%q$hkHH=K@Rc_%f`elWi1G_kG6quZVj-IhA4Jy&py_rDlXzOT=s
-zd@=4$l@^}=jpyE=eeXUpE!0Qixd&?B$MkQyYW%)`{;KJ9WYKT<9_g#b&pz>fKKCS8
-z23gkL5A_l`4~FOALw34EKeozD-sS1Qc??H_wFkg^ecY#bjXFKnpZjoj*_K7FS?xL0
-zzbSIhBHh|kW&BTV!JdZ-lV+|9eb65x&nR_Sd#2p8OmF!W=Ir)gR;c@(lCP)se#~;u
-zbOi7YW_ic8%+az}E&HvMQ-^&f&OAN~-HmGq+255jJhRKE>>W>)&wa>;AAM*s&NInA
-zGT)_i70!w32i98e+>`xep5IJ|+0K)FZcOsUvqj?W8JuT|H(&mh+JU7E^KHu8Cz-ds
-z+IZeL9<4)s+#9m;xI>$e#{k~*Xy=b*HL1?<F2Z>8_AK5n`F7=N9rES1?$s|={Yljk
-z#)FA<q~3dC^)00@qU~|KS%PwiH!uFz-`;wfs;>=MeNEPL>@VYcOsJQ**DJ^IEE?Lw
-z@jJ7#bnZHZy_T6-pGY|H1kSV^#$MDuj5WSZ%O>j;ahyeayY`|)4~VUoOtqIJe%Ho4
-zM>myzPTfA9J+ScnDEG`buQJ|H9QRr;z+M#hu%_CJTCDb|_+FC8zr8U1ew6fM|E6ok
-z=h~rDr=M$`*4V&z4f8yU%%`*4Z{ocI`j@#Ye<{!5U8BzGoz}90ePNDqv|D>g6XW68
-zJ>G+vDQwQ^vG>ck7sB+beY|@r)tNx%VNuK47;(h2CuhGiIkKGmCw(d+p0t)_#~~h`
-z(Vh^;Jvd8loo{4ba32_BqjP+Gm%5I3d~_a%vxD~9#@=I>`vvk|8P1{A^X+%TgwJf)
-zZduOOJ5^_K-UDGq+<&oj!nEUUH&y!Ly<dQ~X?>t?TAxk!AAZ_$+m7?D+j;xB)}J_1
-zLLhJF4!XeKddj@vx|_;(mS%qXrpmI+owwb#`?iZRHSLmHW|mI~zwEl(%TxrH;;(>}
-zOEBTc@aw8uZoi|VV)t#8h>6ZKZ@A-@9rCB9EO!&byZO2uDm*JccivfXnP&akUZJ>Q
-z&Dsr>@_WmT6M3iQ@-p@J%4{DKZQnr??uK6MTAiZhy4<H|?>%Knl9rg@(B-n}^be$J
-zU(UPXbS>4HoTypG-W$JuzDRduU%m``de%q(%w|oma_OnbE3Es1*t^5a{pDl3p+mf@
-zOq)(Nm7I+@@&g@jg8v*G46!~X$?r}5y8dXw1CIK{2j@LB|KX$t=f5m?WZ~CNYQ#RH
-zwhG_Kc(d&WY5S8<Cb_Fp_F6$i_^{*qqawo#+U^P?+%X->KHB|=9e;6@d!`$HqVw5$
-zjQK3I(-oEe=z8$j?($NsVvH^?JbNOa{FF?)m}wF1E>Ag&F0W{Jo@v}gr;Gj~Khg5c
-zNFjdPZEdFZm>A(Fx}5nUVe7MPih7A?Ptoa!43qw&!}Zt$pWWW3X{WOdH#1gxB{!4$
-zU99xhV_2|0$2q;L<17c(JJV>7As#C+xJ0$%xz=}aocWCIzvJUVQA9g=Xx_tif1hnV
-z#+!~4;mUYE+j2;Zvz}vx8{H22?fw_p4kE_=Sm8yF6D4>s$NC)SepeA^zl)XL=zdwJ
-zlB*@;sg58P?^HO^<(GY&>Nz@}m3BVMCS-Hc{KxiTee#dZU37kW?eHS!BaSl-N&n(}
-zWWm=KTH4Lzd3dhrh|d3X;YHUo&5@tKw>&x@xpv}W=rL*I?q;sX6Yiv-qRV-@a+&RX
-z9o>Es?Rrs+C0_@3^fRtU#5q1hkMptS`{;NAamEv!ewrgc(dC+J3!~a^bU5SXuiQt6
-z<C!L$Xm{iBMd@A9?(*&Mj?rDL^v_iuo!;?$MU`W;yYX_28qa6jj-%U$C(iX;biNbq
-za#oB^Z>24dnx|rg6W!j&*T=_6ugN>c{t%tt=yD7kCw(cp9FJA6iB6x_&Oi)(E;|14
-z`8Gy>nywv3*LRxTE)@UX^630dmyf7qACu9Olw|id%Rm0+)=~aAtoY|Bvu!`y$VOE-
-zwm&<ZX#050w!2ug<BNxC+_F~#lf1-|t9CT4f9}WOZ~5A-ep2{qT$xtRc@|5mY2`u4
-zF_cUz=e`<-glXm6N1G{qg)!pyK#q?+nu#gms@n0i@;tbmDSw_A@>LSowB?@}L#_&D
-zTL0YtnyGwZ`R6{@T>NuC3-3Ks(MV<@ud(9izSUgf=l;}8{yj*{O!XHlecb1nDSV}8
-zPTPLw8vg&^{d1pZrt*!If9~fX2<0rY<;m|@{<(iMm-x9)GZ+6#Z#m}l&(%NoU*?kj
-z$_d3hx%`!0G;RK3$$KTpY5P|!|8td7@4{!=@%Qg7k2Qa(`G4B-|KBc;H9pK$?upUA
-zV$C1imzb%4#%h0YwvTDsx5sM!GwV+?&9B^Nn2TJs&uP;)S9zS}Gj0Eg)jqgyFjM`-
-z@?R<Cf6Vbye@7EKX8+s=m`nP(-k*#Axz2A~&(9P;=ZBfvXPoWhZEK%zSNl#zzH#r<
-z&GCcG2A_0j?ozbZ8xu8mA$S$;-WCXrbs+q>vlKHG(-fVG?I`d6MmP<MCDQT=wh4_)
-zkm2BTinbl`B!W9YyywWW$GJF*ct*}*zhWD>8Sd)9OB1#7TA^73UIF_m@JiTM3e5`e
-zqcE2X%~BBWJ8_qQW60Mwp-}{00{^+-R@mnVjn&|XVV?#T!9G=JIKfZAehf9v@Iv5U
-zAs-bQ-QX#Z2f+VvXyxrfvk_bZd%mlY_La(>`XipjbC)V+fQZ7KsL1s(%>&@6@E-&h
-z!p!$V(q9t^`#SKC2$%1V1Wmk;&x)r;XjX$(JRrj>R9p>iK{;g!%~Wt9!V952(0){C
-z_9%0=G6%r-z+JtvXFr8|vl3hi`%$z9)VbS<{%@5R8rdJvE{4J1fqfwDyTL;+cf%dB
-z?B;lZB)GjG-Bl_7<sjV^f-Ls}@CeEs@B1JPA2Nq^sJjki{%SzxmoEXqdx6}!;P1g~
-z5N*r78pMBhGA@*l;SdkyBOv9&Amu^DY!F#0SS>U%LA<ZgoeHwtlZB=eWc?-zO)nC~
-z{!|IFKUD~g9FYBBwPJ>1s$!yICn8~gY6R)NTCrHsqnHUI%7P4`kqj<o`78P8$<`#`
-z9s+4U2r^tRh$1Yg5gHX>8sz05{=4&WVL$bN?58;((~$_WKMumc{x~2s`#|=`Zjk-4
-zOK5h2?2kdA830+2?I8POo6zus?2mO|G3;xFMm5O(i1+?k{jpSNYy;Vj3PGz~fb5U?
-zLL(1EQr+voRJiMaBesuLko~3sWc}3(%{q|vS1UAYK(>Q&ko~V%$%~Y{0Azp60~v0%
-zVuoS}LaQGM&3=&mCZO!wm3<?~epjXJE0ui-$o}L}_PNS_HHawOS>WH0-&I0m1ns62
-z?gtdJQ#I``kgpaRS>W}MuL7CROre<pj=-EQG@T&*B?^rS5M#N!4P-m;DfWR(M=!{9
-z^au^lsp2jVd<N~T4KEo+6}X!ey&&6PF^KmCxeGy@qjl#g`!V=KPz52OF$iLAaQA~a
-zzwYh;S*`)0*#w4QU!&}+m3=vgxy3z<aG^`PHN1e8=@?BD4k>nnOpgy_dKy5cr&ihL
-zf(WW0M`&b#OwZ^d6%NRL(huSpYj-!ucGV>`J3*FrP-u35Y*(!y+f5zF{L~7~a%C=4
-z<|2^!Tc_-^m3;=t{CSYCXGy#OjQLxqm<}>uV~{gnBP#!cAk*6i;yD6$7s&K>3e6zM
-z^mYi%0Lb+EL2G;kncixlSq?HCrHHQ$4C2r@)6uS2t5~gA4l-T&%ABj1t?UQWCB6=j
-z;j}5%D|!{nK&C4bL=_ig2#r)FAHhqg>3<Mpe!G=9sMrSL8FjZGWPY23W+R9$<!%5O
-zehtWcdqAsvL57zFvcA(nmS39COa&QUve0yb3@3#0VK{vt%db~xwkva+GB<*(@8sp0
-z_B5CVMUC+~6^Bm~^MGOxi1(7XJ3z)85Sncu^U(@2{yLEH?@?R@q6xV(K!zVee9YG{
-z$ac{WGGBc{vlnFeJwme^WVjt5!>tFIuR5W*2V}e0rtFKAeLl!>BM&@^dh-a4BIJ+u
-zg&^$<gvK6lKf>`tnP)m16{|tEqZ|-Tuwb3gSOsoEKGHy@H&tljxU+_$EpQ5r5&XfA
-zqwwDc{tavg8NMGp6RZVukRPwmtO22*6jTe1J>W%<R|(BZkmZpN(qEp?^nmo2D>QOI
-z`dcS7vqAdX!xu;+eN{rE0>tXgT?}SJUI;SW0->2tIl|2o8aW{AAq`|bqzcUt$}bP$
-z^nq5p6PiJg>F5xe?Lv29rsz{1km0QZp-Q+j!OP%2LujUhm&2SUG%LX8P>zi&r5x)N
-zD?!%NY7kwsAWLYZgKLp4C&+qA6q*{i2JXh*XVDl0Sx?;{>&XvV?EqvwRf8WwI`#<7
-zDo{tcR0@p>a0BG!LbD8HdFO)kmm@USf%KOxG**N3mnAe;f%I2#I_71huUu%9f~=<k
-zkoA-YGF*?)%mo>4j?h>QI^fO;vOW@p<}k`{9m44bY2PI@+d-zIO=$Xs?qQVE^C*vW
-z6avd5S#jhHDQ`cBu2s+^H0nVe;n#pH?`omB2mAosRSAs}kma2Zvb<M;3_l%Yd5^tc
-z(@sZvLPB#COhEodgvKzq67nITIS8`c0wDdh3(Yo={#u2GAEdt~q3HwZZ+MlaVQMHC
-z5*h;_%exC?c?Us;+aWXqAj54J8h()FT?4XQtA%D6<p?KV+2<+yY>??#Ei_jN-DSvp
-z2g;-VY$*?~VmZk6y$VDZD##QXsh|VlYaq*e>@16B2wV$yqe7z}WO;XjEN>sk@~#J2
-z-c?{0(o-okD?mK;QBW>4%D}TBFBO_4-~#wt2hv}*&|D4DUzX5V1=3%p(98fAz+YLG
-zreR7bC>0vpK$dqN$nwqw8E%fyTn94TY@xA=ggXsnd5<9zpg9O)&F}6Mb9qqNw}MQE
-zUugP-?m?8>_fQ_G=Sq1bDh|1&ynP^s&VojvQ47vP_<KN>ca_kr1lPe`h0rJlS>7Iy
-z<(&btyi-9$?H*mNY3Ct5BSLc+Oho>MgvKDa2J!)+*$=YZ+Cchi6`FpK{+fh_52U|F
-zq1gb^-{3i#hM~G(Kxp)VEbk!5@(zFuw_Rwqfeg1*X!t;u_a2btT_rS2K)fs3?NRo*
-z%03HZI#vnI457OO<@<e<$2JbW^aoyppSeOK2fP;MbwVQx{5Z_3ghn3{>w&*+a3|;k
-z&jRa|xfFaK%*D#Q8q9_{Lz#!q)3o(44}kO^0B=F~?Lwm#Wd6KDvl7Jo<t|e8g~~n`
-z+`w>^eY&zw1ktbE1IQ=C=@*(^Alje1N!k09eJzM`a+e{0U2HGxv@ov%SuUAEBLif)
-zqzjE?kmceO8iN>I+0J@EWYygba(?I%nw=o$hoI2t0FnOkfY59cx_w|i;;#eQ|7wM%
-z7i9md5gOGX`_mqwSt)dvg7jYma=a`Qngt-o%Y31c2Xg%L2+bU!I}4=$bdc>aO=zZq
-zY>&x8!wIr|B?`?klpo7+7^MGxka|p?(Ch`N$Mgt|ZjgFOm(UCf-EAQK*MqxJzI8$)
-zALaZ4%GY-hEFrG}SwGc6V-I*O%vD089Ay2J35{eh8THb;UdEL@irI=oIbvV0SO8+`
-zEyx!dIpA8vy9(sElPNSazzg6mU1+3%2Hf>ti1LShkI)E$oF`gA`u7XXCJ<f<d_toU
-zJOl2EL8u}HMM5JF)M1|u(*J6qnFZp1!78DV39f*<ek3Xr_I*O53*@-j4$^;{&};=!
-z1O<Mf(FD5Tt^~xCSg=iK6o8vxp99kWI-!{jo)34cg+>;50o;XP2^G9xRA_X8?2ny7
-zvkhdwu2c54%DxJu9$T#Ji<EsXi2mZvQ1<D{K7>J^`cyB-@Oy-22gq@tLD|<U`$~}d
-zK%ufPQ1&?>$A>g!pQ`Lf(e5~(^?(e&TWAJAw)c8vU#IN%fE<rgFV?glqrFxcC<K_d
-zf!E+?vCt?2uZ6i#Xyk!xuO6Wh%9U}pALRHN1UarYfgDe3K#rs3U<Le@35{Hk>C6$D
-zt3Z}>qO#YN{V>wU^6UobzDsDfgDkgtWnZW4_kb*)Vr5^X>^&gMp$6&hM1E60h{V7=
-z3N!ONA~c3U=66VF^n)LVxld?xfFFdv0C*<Y4rYRF;JIKccp=yT-U@&9LL(jVwIkjp
-z6|Wa$yfs3j8f3hCghmC(c*})GA()GB3&8h-`JfBT16P9{@O*GJcpLm>35{0phlsa#
-z11upAfQ+|YXtaThw^eBPK*rlBGzvk^f2oSy9x;0r^Aw%n?TkWb^nXa|t50Zlf~?;r
-zW$#n=wIJ)aT-lc?`y!C_o2~3uEBkbi^*f4uu|13k&3=&eJAib)i2N3AWMZIqg3NEW
-z&{z#Jzga>f17v>Fg~k~C-vEDAFjN1k1UWxc2+eYk^Fx`?C<Qq`lnBixkp6ri=ha4`
-z*#L50trr@2>Ap3u)(XwyO)@WgK+emlAnyl+Am{ynVUYI&nqY5*51!8Og=PcDd9z+<
-z)PX3!@>-$U1JYkNm<9VTq1g#?z77hF4v_P8KxmGE^cMm-&yEVs5s>rju+SI+QU2wF
-zLNhZ@@{s|u{L+PH8p!fW6`IK)%hM?|azW-l2W0uJ6Pno|+DZ9pp_v7;JXZ;gVvzod
-zK$c6P&@2F14*5be4`excghnMue-$9hrCey1foH>9Dl|(#meV$&Q3ujrEy!~53e6gj
-z<xnj&_kb*?DxuK<UXS+G2QGpCVMXl{F{deJDds8`DwZl%Db|1(V%%QETJSq)C%$~O
-zZd0rPxh~8CFGhP`B{UL2C(<)|nar0XLUS0z5L_@MG`hfaxN8!5xld>|fC~|S9f+>u
-zt_71=9zwH*a+ZhC+yl;Ic?b=>0KxKC4ze7}gk~woaw`!U+d!6UvCu3Ox;-H4Emvsf
-zfUKu=LL(bwJ+2m-tAy?}knJQ@XeNVf7fzv(2(sO1LNj!!j7NhY^|MZp?K3DeJ3zL_
-zfY4|M*<Ra(reEl;1usImdWA*>=s<X--~yCyG01(+BB5Cb{twIrLNgDf`z(;--zuS*
-ztjtbj9zr{yd{Ah1gQy30{^hctmIE@J)nE#k4st&&O=zZqm&2SaG)D>~--C)>;3@DI
-z1lg{tKn%?Vl|rLT$+v;SkmrNUN1o91fLFkMuF%K^nT|{lS#YO;NV3}rE<?IU;F$i0
-zh2|j0cGnNG-SvTNKfOY;2W0!{78+e3+fS#^>=3%!Ky*QO6Zm1U5ln)=2BA?0o&<X@
-zI3M;kLZb>~yQ>tM6(HMPxzH#B+3re(<~E_b5M+FLAmhsg7s6kT(8vZ)f_)aa0QRed
-zMmos$nkF<;LAKXqq2UDCUK54p7y^gcJpwYmL6GtF<B|-2eL|xLJPGz)B<wqdMmy!O
-zuLs%A>x5=4$ad}(8Z{u>d9~2261vMl##;j7zq=Th6!<F=8U-NZ%>z${y+>$dftbn*
-zRtb${knNO#uz!rAJ+gm{2+d)T?P5r14uEvu0kZuEgk}@S_Fw!FX)i?}$EiZ0SpY&_
-zo-Z`>K#o%$p-}@~5C47;NpUxUY!5!6(Fj`YMraIx*TH@AM>Wj^^FZd;13KX^S7_8K
-zd#|#uQTAOR<LLz14uV3X17v#%2#tP_?)pI1U$4;U0a?%8LSqD^yJ3*!JtQ;+LDtKF
-z(8#z_@|g~vjPghmn#tfM_|E|`FSzr-m(Z{G6rr+^zY=g8er^*Q#US;pBB7BFQqRg0
-z8iQM~9}IszAd1S}4YHke3C&KB?JOuXIzYCwfY59cx@$q|rzIf6%Lf@=9?1Ub5t_Lm
-z`)7{OSO>CyW(&<Mp*s;|c)gn?ybh4z1wi({cA?n@vj4RT4L`{K*CaF>h3+bl;T3>P
-z-#U=tWrG~ARtwE6kmJ=Vp^*u4yvh)oX+rnN$0WQU$naW0hUW*VXEg~;A4t8bQD`)P
-z7eQVxG;4+KGLY%>fR(79T%nN#vcF}3>~HBpGYw>aOBI?<ko|4AQ2N`D(Ckv?PGxQb
-z+5hU4eXX*u0@*Jr!9_@Kh0rJxd3mAG%mwK#2Ye6QtrHq)A}>!Bnqz2}bQc0og}YIq
-z(F<}s=n<M7Al(H(oHZ(F7aH{<FRv4tdqBFY0#AXvN}=IJJN^OMe+Xpz?+4lb`-Da>
-z$oAhOG&(`H|De!l0&jpn9>)1D!dZQ_gp&#~oMfTl1Q|}E&<Mdj!x<GCJs`*FPVh8@
-z7XVp5?LxB^TnKp+$b9%fmS3aLr~{e*TA@)5vfTCvjS7(YE*BalAnR$H(8vStKzckv
-zBMW4EScmimk*^9azL2gWkohVU8U-Npl`k}MLFOw*XbcxiyKGe~Q(UDuuvO$u;HTiv
-zCp4-+)^nxMECHGCZ6MQKEHrXOUY;W~SAlew39@`LgoY;a@-gHG;hIAr-3@{)rvaf6
-z6nS}v(DZ|J*95YBeL|yJ<mG#WW*JC#r69|>L}=_mIs6;j#dXLW$}bhP+J(??f>yf_
-z8le)^E`&x9WV>hrsh`z>A4E8{;3=@L2C0{of&UNfrBrB^fKa&#wh4_QFa_?jLC)uy
-zAcjbH2FQ6NU1+3%=`g1XjgjrR|AhF0Aooc+K*rk!GTsJ|@zx8?I*{?!3XK|&@s@&&
-zw+Ljsg&^m{0-=!)E`d2uXk>wmcjyzcFEa=--ae4=20_N#Av6OZ<82ojtsvv|f{eEc
-zWW1Fi=hq6MQ4TJJxlCvjfQ&a8JQs9=jCahGcn3koJ0LXsLB`uBG<rbB+XgaTAINwc
-zLFyR|LZcpB40D~(s00~r4rtx?1G)c{2{QgPkog`%<6-<Ep*hONg#RN#V+dsY-5}%d
-z02zM(OhbI_LZb~_26L;>s0SH;DfnrGS0Xglf$WFbLNfzoJ5L80UYgJdq0`gdsL&h$
-z>8>ASf9(?*?IJI46Pk4(-PM9@hhCvkF7om+p;-jdT_MPRT_7~FL|(p1XgWc<OC;fr
-zgAr&9qLVRw141(h(p?A0{vQw;4I(eE7n;=|-R%L{UaN#gk;uyng=RKLcdJ2;6InvT
-zDf03}p*e!_fbNDtwud31(FHPnokFt>q`Ov-<B4Br<Y1im5!yi~$nnGvq6!L{goY19
-zR0WMfqYgw76x0fh3XtPRImrH826ErC6l8lZ0om>fz$*C57aHB*PY`dx4X}hf8)Uqz
-zg+><0cvlIHbdd3;35|}OqUZQQ>N!my^+cc0Yy_z%HVBP+ka}XB(DVx3#US-156EzG
-zLF$J&LUSER{V-c-tOltcW(mzqp?joM!s!PYP9I3UuvcjIfYb}Sg+>=hy|7bgb_m@K
-zAk$L~GMqgi^}#BkSqV}ftPmRIAoamAp;;nyXM+qU17tYqAoajBp_vL&4@?#sPLO(F
-zqR<@MVVT`M;GHP<ZlMtXssFWt)c^1|3rMpGq<-NOnhl@>@m7Ib5N@T=EK=q|WzGSq
-z|D`MYG-a=WY_DV2OMedujed~f^$E>RknVyY`*DZR@QJ*<QD}NWx~l=%KdXgCiO9>h
-z3C(<v?(#tPJCD%F6nS}u&~$=ymk6E$cbd>BNBeZZz7@P4`RV~VUUq}*pIt(u6XbXu
-z6dHpd-3@>o7y5-pAIN#ES7?Mlx*G*C4i$_DjbV`U&XCYZzERvcL5_ooLPG;NACJKu
-zXk;pP86d~sbfJ+3ay(BJ8U-NplMg1N{PTonF1QKl(b1eflBj(aWug^=i@=Y8E5JqI
-zncxwJ_Sy5n55RmLcoJxUDc}|0Ip8JA9>bHi3TEWha))TNjWA=_u*}dct#EdO?}hzd
-zkp4fb%=dxxe~&Uh2Gak(DD!u~i(&qjGC!}(PlHTXI`|n(VdP!Na)!`F9&l(W>y(__
-z19^_nMLq>N)OgE3i8Lh_3teOn<dsTJeh%^~p^JPH@>V4$KM#4E&_$xGQ+k!0tcJW#
-z=pqv!9|M_w@(YmD6X+t*K2!Ky1?A*FL7pvik%^FRQ*shzn_MDvk@F$vbN%#B)<E7M
-zbdd`n=kp(wlV5~9D0Goncck<yIr$~X2ZSyXZ77A$m(V|XH{?#Ci%f=`&(&M$2feV$
-z7P`ojAum#L^2?AH3tc4inG`<XLjUAHL(b=3Ko<%9D8&z=?PQR(khcn5<S$S^ok~uA
-z1@bPTi+l!hK7T|1<h_uy&_Nf8_wc7=fRvM8g*;Q}B5@8prAW!iI>?KKF7h?VE0vr?
-zTTiYMx=5U}PH9zg@_xv1=9zSngOGPCIr#wOXp^LigqsxHGq%!4)<f<Ty2#%`j=p8d
-z$p<0FoJqP!oCi+XrsU*9ke3KuB*uo62Jm6zpKO4<QRpIn3jcggi*gcuHaQ@4kvM0Y
-zGOXm}Ban{>UE~skpD|DTlV5|J&x3(3@@4qXRdTWsa*xnOJ_mWFl9P`@UL|yqD6^D$
-zB`3cQd4teJJ`Z`fl9L#Fl6!<M@)gL3m7MfJJ|c9HIKP*&3Z0DkC-*^~C3KNLgFH{k
-z$;Tnj7rIECM@!kG<m3~OR|{R_|Ao9!$;l?jeL@%ceaL&2ocspld>#sPk^cqxsFIW4
-zgghj4kvNBxvMNcXAH*1&oF#OT{|R{>$o!Fh$oZTU=pu1WCS{M3lg*G<3ti-|Aa7K1
-zvITOV&_&|hLQ1cali!BCPv|21As<z85@T#~Na!MQ4j?7NsoD>Sxgwd*Q-Ln>myqWw
-zIr&}4Jwg}R4tc4Plm7~Nnb1Y{L0+TeB*ye)uh2#Q5b_QsC;tudpwLDBAISTaoO}}U
-z0ilb;eeRS*48km5@+rujLKpdd^bbB?MmgCIIiEWNUE~>%^SLz2Nz94K#X=W(CginB
-zPCf%UpKAkMWESM@N=`ltc|hnQ&w{)kWcXwN@&TcXJR9=Fg)05ve#o6d7kLike4dE@
-z$>$*Fb4H+xTn%}il9QO*lk<fx(hYg3l9L^fmkC|uxscZ=Ir%-vy+Rjx9^_3*PJSP9
-zztBZyL*A|A<O`7Z2wmhF$VZi&3_{N5us|320m%7$7V}5`0P;+si(CtNo|2P4ggjs9
-zBG*CA=fUWod=c^rp^H2paz0N+IoSz0pECnp<OPuPIW)@2A3+`zy2uM5A5?PkCCG<_
-zE;0x5WK7cZPyQJ4RH2Jp4>_NI>w=v83FHMr7kLovm(R~pPW}{fK3502$bW^rM#;&S
-zA@>Sh<j)~*QgX5za=*|;;y!pvKgjUOS0En{y2xCn|74MqKZ86~=pqfs^OT(YcgXo1
-zBIqJLke4bs*#mi*&_!;5yjID{1CZAVUF1f{Ta}#rIpl3Z7r6=YUL_|FLf$8Ik$I4h
-zDLL5-Ih7vJMP35=Dv<dn{{!+Yp^Ll}@&Y9%e*t-+&_!MbdAX94zl6L(=pyqWuT^pq
-zI%#s9&_!Mjd8?9>{|E9mp^N-5<h@Ex{$I%Zgf8+5$oU-VuaJJSAM!MziyT1x^0`&Y
-z$^V2rTj(Nje=4O^$;tnMyiDjK{{!+GB`1FkIiHgST_pDRQ(Bdr9Duw{=pykq;ZwSm
-zoO~7X9-)i;F63iMPQC^?A0`A{<iA7C=N*}T@^#2Fg)TA(d6ANngOC>sU1Trhl}b+j
-z2J$MQi^TqMN~@BSzlEI7O@c1+*N}HBIr%%t`P?MvBC%hTGOFa{5ac1Di+mmOv{NPh
-z<QtHu3tc4keNqaPoculHg+doufcmXea`F)5RYDi}5y%^roE(PSCv=e?g`Ce{vi!(D
-zKpqsj$SWc5S90?IK|UaKk%f?tDLMJykn`a^&_#X>@(j?bA8-WnOreY140$d{Ir&G(
-zJwg|`1#%6a;zTXQ30@1L*tDy`bnq%L6Wj`BfgcC6!D~Q_ty&RCe}6^zq>1q9e+*{w
-z6EHKJBQTTOnLhAuFq0)PGu)#vlh?rvJMK?pkk`Xp0pfmi2Dt;~DiHe;8DuHUUJ&~a
-z8RSlw8$j$cWRN$&><6(gl0n`Ga~p{Llnk;A<^YI&m<;kJn1dkpZ!*YF!rTR7pErZt
-z1#=IG{fP{+9A>~;hi8IZZ+k$jT~bOwuAi$x9p&r;6Tl$o00+QCmOq5^!Ax)g=m8gk
-zCE!V5HHb)3eBjAo5JaV=41lNbCj#X<Fcai@&jWH@R{{nYKge~O59E3*2y)#u0CIiB
-z#Bd#z339#U0T&_M5|HbkYLM$3AGieeL6GZ~0g&qxW`gUGOpxmh56E>z3CQ(BHOO^>
-z59E3v2vYAK0IA<=^F)u&1gWoc-9x>+1f>354N}kcfz+piAob<}koqwTk9u$>NPX7>
-zQm-umslQf()Kh&R_0b^sewH722Fou=^vFyw3uX^^7FYtF4OWBafIe_F7zEwm0C+B_
-zIYkf41hZlGfNQ`K@B?5qNIl61QXdL})O!X%>NgrHoq9|rm;-u1>Ln#0^^a<hdWH|A
-zJ`n_|Hw=K(4>U9ugZ@De{ev6mAKVC5gPTAfm<I;IOTYo}Qcy!9y9~?(^Fa@IIamUI
-z7_0`b0DU0pJS7Nn-WmWoKWS*3oQE<&&Nm*A^GXTG`J);{n@RD3oDYH^$Nd42<GY4N
-z&2c;v<aq4?IWCug1&km32;&Do3I@R|!2z%k#6N2s%mg>X>;XBhITLCfbq;4jjl+wp
-zKcO|jnJ}t{bZ0`h-h*qMUXSZ&Vkps>&^|9P5AKudl3+7GG~bypJbz?<QbPay0bB#~
-zJLV@O)XlHQ@6maod9Zg5IFk~(7xpYnO6W@IPDx5=O>Ij>2&r|r)}(rI?OoEh1feYs
-zEk^i@1GtW+h0>e}9cjU|q=cq4KYrIQZCDClOY3kQST?xKnb5VY8`t2n&SgmnZOhtm
-ztzA~PEFobqeJCAqrFY|6bDH<Gq=d!{Uq({Gh-=i9kWiE9%|se9+cKRAzRV_E8!{VV
-z({p<7=}8Hpm18TN34xUzxK^*M!L{qm?lTd~nVq=So>_<M&>6#LI1}2=Xg>q_&FaW<
-zCUl<Dbq-Q{P7v4Xb82wyb@#d9#@&u<{kaY2!tc3txHg^VKM(22_GP0~&#yn<nb5bc
-ze_c{Sa9!s*{64=QHa+L};u^TH<3f~MPEQU}b<x;GsEdnwE=o%1yr>Jm>n^ItwRe5r
-zdc?avh-+tVS8h^5M{Y0|Wtbbl)oaumNeR_Pjp0lP<&Htx{=vWp;rD~}A52Q{ey|q5
-z8$CV`Qs`;$Bqa=Q9NCDRZtUEMd~NK&@0yKXT)Q@OZ$Mr)wBs7c>&QcC=e6gdo#eIR
-zI+j;`3F<m8gx|w?Bar$pZM_tJFZEuUlrVNlHLgRK4_}USULL$0X}COq-_@7b;M$qr
-zmG4Yw&2PiC{ffX9sFy3+u0SbW;m0*}#TaZxt{BDdp(}>*yXhnTkHGIoYCeK8DHtnA
-zN*F90DnzOZI|`Ai!gl-~yRsVB;FX<MB86AB;@Y;keKS(ExpgyYd~*}7qnksp8QwgC
-z--DZn@Y`3^R0O|Us*8}9Euk$*2?JXPw<1+r16z@*t!?-nx_azt<l^ceu1#0_ac#Y(
-z?HZ)&8vivY$!mPLj$AVeo1trl@q6H!LHus~xbNfed+pe@$jh~(*P>pw*KS8Gf1>vj
-zXnUV%#I@fXFp)O1$wc{V4{S$0ULU+3zpoGA+H}1i*Sa0`JJ3RQ^zT4h-O-ERT|2sQ
-ztuJjTMawU(D@B=?dU5S3?S)NOX*YfcOFMC`-C4I2ePO3}C-PWYjceD=ZrB8OcH(zn
-zX9s@!ZfLq8DWTzpMqIr&)ZT#F+10fRes|U3+WX1APa?ISY{a$arrw(n?@bN3c9->(
-zp+%L|<Jx^=&yDzfWBrXN!(E|W==<dZ<tW4QKsm~=ybagBoBMA@jojRRGiv1KR$O~;
-z>AM9bc}v?Z$muP9Tzhu+?nd41ZrzPk?QX)gtD?IC<x|mAffQCW;#z%2%^he1m1C7C
-z?aJXw<f5vh3T>mR2G_1ncYhiw`E)(5y`Sp)6x>t|S0VP#^nV87f2J4L;Ac8<t-q_`
-zF4W6iqqq*;HH>TDUH!QF_q6UoiG9}lS+wCj)wmAt8QFvK|9t=Fk&@3h;X3rW;m;xE
-zpKHT)<g=r2Q&X*bt98`dUOliEY~8E3k&SzGAK6x;x7UFF8oiZlsL>m1FtU!+=%X|b
-z)#$@C57g*`WaAfg-xpzD|3$swi!j%IQLiH#@78^H)BbL~;cnXBt=ExVckA7>58kbJ
-z(j2&3?;uC-)<d)(zFQxmdGKz1h-~ocjb5<MtJixW_j>hOn%lj4fNb^ZZM1Ll>VBGg
-zym~L$<<+}sAN1;-G!J|A5pvM057EBgs}IoZ{jy&BWw83odd-(%AM)yBwC}Ce`)a}N
-zTD^yCs@46Zw^pwu2k+5`?ty#nSM=Jiz#ROF-uV@n17FcQXm0z8-cHuttJmL4clYYG
-z_rhF#uU<oT+^Yv^-+r$ipt<#4y^S2YS0ASRz`gn)&3*Uk{WLe#>Ha#HN4~0$eii1S
-zuj<2Jh1vI2y@~XGRj(zhzpB?z9=cZ_qyPH*^@jVw+WYl7a^wMh^Z{__0ezSZJfL?x
-z!0_vJKWEUo2le^~VfH?#*FFey^@Dm1&As({Up*MC*E{L1{vo~LA((3)((4|Ax#l6=
-zOLO0YdOzKFKB#xm|L8+{i1xz|=_7PE_>ewCbKoJpgKT<8_tU=jVZHBRn7bd=dme_l
-z^I^S<=7xv$MzZE%-Aj%(=%EJ68}zOQm^&KuAkD)M>m&5n^N8O22-x+A-u(#V!AJB?
-z()TsJ>1$xa*YrlRqfrkwf;Ero-bcaUqk1P9cvSBodmq*N$nHn=9&+eWeV810R3Cg4
-z;n#m%Z}>Xc@VMUiI9T_%UQZ6~(}(wgo%{4IvUZ<dw-5eCeEO&l<{qEk>w~%7rw3@R
-z^Xc_8k3Ob{9;5s*z4tN7AJYRg*FC1!(>(fhJ@j?3<8eL6c$%Kj{ZGK$_=N6z0_OTB
-z^airENpEX{eN&U}Z-Tk8N%xWM-_Qf!fPL#X^tNxn-1H6IPX@oKcYYK0fp6*^--NmC
-zn|eFh^)0>oTd)s)OYi&^%z<y|9W?j*^#MQF>(~3pPQTto_BHGM&0tTn-b)6X^-hZ|
-zdS?sF{Vn<cIozU;kYg=+^|!&=Z|ikr<F|F+w-HbKxAlN!->TQO!oH?e_mZRE)<cw!
-zepe5D7v{e2>iyqky1uJ-(A@Z4-AD7-cl2tS2fm{Zeh21`@94qr!0h{u-bC|Qt6oj>
-zK&w8;aDD%(H~lNv^Q7MUB-r(&-c1Ic)H|Mp`?i4I9)P(%pf?0y9(`61JqvT+vwHut
-zls~Jt)9ig#ucdkD8GZN}n7g0Rd!B*0=^5QmbM-TN4b1~j>w{0j9C%vqcpB#Vr}YM!
-zL+$!lJIp=pdT%?-{&u~U=9+fhOY_iE`tVaQcRr<eJw^FbdMh~)&<B~W(0+YvKg=Wh
-z^-;2YzaAi4_v>x@As={NAABC>zUTFRvf+8Xk*s@OuYVr$j_>Kg@4?*uJv~5<bm*fU
-z;82G?+yQz03wpx~FxS4I*OA@d*L%JXc79*)`aa}?L47C)bAM1DARB^uBUu;J>&e<5
-z>UBQ^YksJE$<ZI^p&x)<Kh(QvZhBGozX&$IsQbv;7xlUq5w8Eodh3rt-;ebsa`YuV
-z^b*+flHN<!zoa+31oxpI>0>{Fx$j4M|Bqnq_>mr@x$#H3kLKzh=`}R>cj^P3Fb6yJ
-z&Q8iZbsx>uoq7$~{bRj{@zi(e4P7wTcIkCpFxPbHUNY3BkI{alOCP0qs7oIvdw-($
-z{e=F1qWAm+=FXq!U1Z>=ddE*;-}Y0z{iiVdf2y~VzL)i;mto)VvflVI%ylp8^)$D3
-z>uud&Q@8FX>$~*^vg;MS`xP+wirz`~zoHM2y|3tf<j5=fC^__sK1|m9O!xi_9D7Bt
-zCL4aHH<EQf)9ZhR_&R^4cl``|4tJf7#T8hN^*29zVRq@&+8$+oN|{@+zUJpQ%FO$4
-z{A9dO+z%@Ac9<DnFV?gC+-S>{dGSh-*I~1RpZ6-WPnq8jGvnueCqISC%>7G#s+8HI
-z%zkCwqs#}DIjGEU+5WNL#?Q)C68<V>z7l4pw;%gw{A^X`?8RcX(>u0I%-fa!+zc_>
-z{`*#l`2ppBNSVK;+=rCe4!;}e;>YoR6~8i{q|EteihPkW7b~-!p3bvHZkJ!LGM}d0
-zd(IX4DrGKIX16l8UL^7hlsTx(A5!KXWzJXT0cHM}GLI<pwaUzg{P@`cGwZJyn-%<Q
-z$EFO;HOg!vA1v=SW&U`Ul5Z0CSDYp0Hf6pT`J(@RWj^N|F+20by{XKrl(|lsJ<9yN
-zGH+An-zsyJGM~Cy(o?U@m%z;UdX)LQ$~>sd%iJOlDRYf7Cto7z`EO;;RAvL^&hXYL
-zGvBL0bG|bFN}0DQ^V#Q#yh54n{@H`g9DeSEoaHy5%wJIMN0j+}+2X$pn?C&f8_aZ{
-z`4KViSLSSG{(*AuQD&W+U2wlmna_op>1|Nv&nR=NGC!%z!^-??WzPDj#CI|_&FH^E
-znJ-pmK2OBY-O9}8hWI(C%md1NCO6xVo>67K17?PoeWkcR6`OE07vCUeJN-4ve7%zM
-zJRCpYQ)Zrf<A?7{pnslk<L7o|<~cTgexb}fuf`AG^T711QsxI?b|q;4Uwh{Q9M@Ie
-z@ePTS@F+Mbg#aligWHBe>|L!S%Mhs7dio_PT1Rry!1Y>twOV_%yWU;dQeePsDR>}L
-zOv`|w1q=h!K%psZsoSQlO9_O5DW-I$X`$2%j|Lj33k<`v?f1Xu`}Usu-Fx>T2`3D`
-zGm`eF@BGi}o_o%@-#Pbg;sEnoz*o|{2bkZ+e1iF%%qN-O!+bCE`<Tx&e~|eh<_|H$
-z*^T4F%stG11-|NdVvzak%sZGjkaH6DUCekt26%>fn)xNnCz<D&A7pMYUq?<(=wHTs
-z2lH!~-@$x}`G1(-!@P-{qtO2u^DOg6m|w$up80;}FEIZf^TW&&)Gs}A!|B8im=6&@
-zaRaSkFxQ!{C?>oE??-|CYUbZ&emwK<FmGgj6Z0=Hd;LG@pU&*{-^9;i_WEn$P0U{Z
-zO#B>X$=_yX$zPiJG}618+8y)znD;1NP<%r18O0YAUwg>Zhs2*$d_eI@#SbXHsCeVy
-zVEluM4=6sN_zbhu#{<g#dBxvToGb;?pHh56@fpPz6ekvg@eL~8ulOXh<o~R)e@gK~
-zihIhz^rjS76`xW3fMUEv2#1{S9>x0=FDt%R@p;A9R)g{1ta!iTWySX@KCk%NBPxEy
-zQ;MsKPbogD_@d&CwP1RKiVrA0q4=EQhZJwDtN0b~SG=tFl;X3BA5@HoFLB8Ezgh8=
-z;$_9B6+fW(qT(Btg6VB%mg`|b*<Yskl;X3BA5^^Ys7g=qvf@*U&ndp3_}XK^_>+qF
-zD?YCHwBmD$FDSlt*`z1+m1LIlH>~)8;!}#xD!!l?4`<+z_>+pK6rWIhM)3v3*d%So
-zf3xCo#m5z&QG8zUMa3Im8cZ*#cuH}V`9sgA`NTD+6Q`KJ%6yvn=`S$$Gt9e~?`8f?
-z=CjOrj}+oN$NWX+2bed~A~5XdnWw>zJ)XG0d^ht$%x`DD$oxU(?=gRb84nZS_zLs2
-z%s0?tGveRKyo>n;W;{p%dk^y&=9`&6%baBXU*<vP7rn^nw=*v>k2C*0^Az(pnfEjQ
-z(ytl)0p=sj3(RMjtIXeFUS>{jH~QnuuVy~M{9fjh%%5aF#rzHC)67rJnE1{xZ)d)j
-z`Q^-Kng5mf95dbzh5CGe`E|_anZL#SAoD)D@9j;{9+tP58T%FVIgej_Tu=9*c>(%c
-zP<(`VK5<1rzuD5?I6`w%i}7(2{cPko!4t|3z1W}2df_;|ZHK;x<NpNfg+>2lwu6zr
-zZHK;(?GLhE7~zrs!3`z=7<$_dz4*J1jhgZci{8#J^tK&(@sGWN^}?dZ^Da2>2YTBM
-zz4+7qnDxR4kNk6Y+|=84=*9o`Mb-<8{v5@D1B~=-JM`kOyJ5_fUs&`P@qrHff!?-5
-zFaEt>XT31ON3|c@?xp`&#7_PqNuOEtf27Xemn}Q=;y=7@+~i+a^!ohScId_5_%zlF
-z$LVc5^x~hqiS@#wpEAX3)}L*MUM`?LtQQvjcBQxN&~N7gHdrq#`dgLWwnH!e(s!|5
-zSoFh6Z`+|i$LW8X^}?dp`M2#}`L8nxd|S%TEPAvd9N-E3vh2`{|Mpos&G{D=eGf@+
-zh+gcwDSVG-F~44__>GGHT=AC_|DWRYu3-EH#cxvlX~kFU4(c~6ezD@WEB?6RhZX-&
-z@ssuh(?fl=8ee)TeBP?R?Zi>z%P^m>|0X-e7h%MYb9)uX0mk{Y?Kr>VtiN)v(F=<n
-z&j;ebALwm6^y1GSVZAWIBYoXJ*mmggy(u{MvR+v9I{&sE`irbT%z9zbZ-0!5AB_Cl
-zcIajO;bW{97QN2DZHFG;i-O}HSuZSloqyX7{V?ml#Cl=T_uvB^_=Ei0cIfeaC^-5i
-z%=r^Wc+|g6-?l@)!1@g9g+>1c^0DFoBYoQry{y;V%X(qa>-w|p(Bu0@aKKNE_A4xU
-zoqyX7{YKV*ob|$@$8)AQz{tOChhEl~Hcy)Lg+;#|Vmd@G_Jb6@$FrDUrxhc7tLyu-
-z6h3e1zd#&yeZTBR6X-QlCV#?`KV3hz9pyXD`q!~uSoHhV`L*rP%X-@vST8JkeSU2_
-z^s+wpRn`l~>1{jovYz)%)(eYX&);l2^wl0ye>1n4`V$ttu0PujeS`IPv0hm8y8diC
-z^s@el_j#dx3yWUYpKXW!^UpT<|1;JL$LVc5^bfQCKGqA1UYFmtLw}L=A7#C;=ymyR
-zJM^-?`jlx?eqqt;^4oUkWj*$ptQU^c+ji&|e#O+^FSA})^t$}E9r_aMH?v+?^t$}E
-z9eP<mKF)e!(d+WtcIaij`2_2Q<Mg&2`Y->gDgQ~<3yWTt-?l^l5bIB|URd<H{I(r>
-zSs(v8>xD(H%WvDEm-X~-vtBq(Z`+|iu-TOVN30hXy)M6Phd$5x4O!EEg`0ZSf7*8F
-z@x2Z>p38dSrrwyF<BM&FzQp<g)(eXs?_a=yKND7XF!cD|0vr|A3&XyNesuY5JM?>4
-zzs!1J(I2=5vHR)UcIajQ!v|O|EPCyKu<g*FBR?RH53^oa^t%1ncIah)#ow`BI8JZd
-zp})ZC<NcNBzlG!UwjFxezwsH?3&-hgJM^;O<KI{>9H+PK(BpdmaD0jN!lKvb-?l^l
-zWY&L^^}?dZ_sik{Pgvo>(Br-QIG(o8)SocyQSHyRLw|zx&t|=_=udjF`{~<u=<$Aj
-z9J^RAEP7pj+YbGWtiOZx!lKvd+ji*jo_-v!V!g2Fb^5j)`g>V_lJ&x(PpbaMwnKj*
-zW77X?)(eYXr*GS#|1#_EXT7lK8z%bZ`M2%R%l@SQX1%cJpQrS;9eUZ%^k27g`yszA
-zjyS!9haGy^|MayPqZbzaKYOwH?Z>uz=?|Fz|2fO)GmBp5|CN^AOP~2)_H+7{9qnK1
-zWj~hWU-n~t{0^fRj!WORBYoMw^%r*<y|C!{_MmzGY&-O_-|K6v7mm~0cIah)*p0t#
-z(ie`?+ji(>KiL@Th2!+L9eUY+R%5+zoZhxWFZ<Qr%6ehZYyY2ZhhFx#eTMbIqJOe#
-zf3_WZ*$?;pyG;EF$LVc5^s;~M-K-am)7y6FWxw6V7n}5j<Mg&2dfA`%Qq~K{>1{jo
-zvY+o0tQU^c+ji(>|KANSG5Hsc)7y6F@1k`N90k@3$LVc5^s>M3!>kvM(~EtBL(kcg
-zZ(jCOJ&{@VQ$3Yg_EYsR%YLfoFw1_bUS`=(^#bA^uVm)eqT<tvKdJb;icy|c{*Idt
-z1pOV)BaZTSyprqtL9%1MB`o!&$1B^8`aZ$>udrS?PH)?xzlZgB4<^zVj?>$A=ufh~
-z!FplQZ@)6(9pDKoJQ#Y}fBK`GNnaRtj2C*oYullh{i=Acp*LS8zdw#Ry@ZDydfDIl
-z1l9|SUi({YJM^+2_5-XJ7X4XOe%lVc?4P}L&g5TM^t$}E9eUYsJIs3FIK6F$UiRni
-zVZE^E^>}I9p}&j#xH#@%y|C!@cwyV2m;Jwg$$DYY>+!<2LofS<H{?zI35$NampgyH
-zW80yZ{lzb2y|CzY{%t$-vLE>n>xD(n&CzR*6IOWGp_l#3r&uo>r?>6U%YNsNv0hm8
-zy8diC^s+ztde_vSaGc(@LofTOU&4CfIK6F$UiM#qi1osv*Y$7Pp_l#I)VX@szp&_a
-z`NjSR6uyVs2L60m@h=vFc31HS6#rQ93m1ZV>}$5uJE!;?im|WP4qsLLhl;<gxc5*{
-zkNRjeUcHLKQxj?)uP2Tgukd{tI9_<z)VDC=-$XxG!AJ*qf_~X{oUd`#kFj1@^xHRh
-z@}}OlLyzw(!0~d{3yWT-Z`+~2hxOP8?2UKKqHmb!o9Rn<*r89*eHo4qv0hm8I(^#?
-z{Z*|0Th<GUUhnU)?a<@<2ylF#^}?dp>DzYb2U&k*$&_DM^ut%0_`wracrf&MpFfVx
-ztQUrT6aDD)Z9DYGS$`|*g++h%8pQ6mAKUKbKWFU6B>&8!*XiSZ;W%K2{#NGSV7)Nx
-z$iMb)*mmgg9&jAk$Bp(QEP9>3ZHN9m>;IJX!lFOH5r8MG@L=fWd6b7)FAO{K|2+D^
-z0fyeTLod&-yl~OvUs&|IzqReqpQC;f$061Wi~h;R+)UrLLod(A+|PR9IK6F$UY@7H
-zzID{UaGc(@Lod(Yyp;9AaeCVh{YL8NaeRUG!f|@r4!u0zv%O;SFD!ap|6+eDh41lF
-zHoveh-sUT-K^{<iMDhC-|9}|xU-G=kV~!Y>=S?2REYF)<&n(ZIJcC)DH`&B2&zsyr
-zZ0C1U@e#$pr}%Fae^v3OS}^`sDE>Fa{q<mY>~pvCcLi0mJzhSB_(@mvH1Bs_!z}&t
-z{mgQIHBJ#AyzC$N3ufuhzQx=}IvlU31Q33sNA#{J>W9JNU%iW2*7NBdRi0h;r);2p
-z1L0-A#0<0S|M(MTS?^BJxkh+dznx;1^~`rN%lh7Tm}R|d^lGD*^`8>6tcSdVS;m)7
-zG0S-RU1ss$-bDRA@+1D#-OS?Ot}#o0{AOmEADm|vfBg@cW&Nn{S`)wYw~NfOf1t)(
-z?MZmYGPA4?A7_^JQoQ%p%kQt6@F$sNynPEZN0)dnvk6V}c4oPs{wTBD-+zW##?Sv?
-zmif%rm}P&{kD0}v|Afby{E2`4Da_*U?qQbozvnQ^dPpC$tWUg%S=P(Om}UKLnpwu%
-zyO?GEH_t5lnO?~(`-9%hEaT<7m}URYpD@dO>Tj53f6S+dam~tc_2Yt^R_rK#t>O<T
-z{vX9pe|#|hA;m9O{BFhnr1)!!(@zM-|60Z0SM2;;F#H=8e?sxCPYj0tUB&;ac*~Q5
-z;SVVOeZ~K%_*;sfOC6nkzIG}8EyeFt{5i!xP&{~DF#aQo?^FCa#aCY+)MpjHUh#d3
-z2Yx=N|Cr+IXrg47zgKZq@f#I?M)A-u1mjy!yn*(;+3CGr@kbRu{;9$6yA&T#{946l
-z75}^9Yi<a}|7^uCP@Gl#a>eggd|vSn6hGx@!SpvP9#woq@!J&tgW_)}e(ckO>D{Dw
-zo8r3_zeDk76<_m=VEk#tdBv|*{2s;kEB>D1TW$=dcc<ce6yK}(yyA<BxBOx-{(Xw)
-z6)!4&gW?Aie_HXwiZ?wonEtZjH!HqR@plwo@vLBcPg48>#d|#7F2h;k6^hR&{)FO(
-z6<^nb^!@l!if0sKUTF6hFH?Mv;<qdQQ^gM|e!@+`_@Aw~SMhemw<*pm?nyYC>Z#tL
-z+Df%i*<Ea8YjdfjyIjqc^W(dRM^n8Ex%$HBQhBaXtdvv9YVGh;rC4sbwdDA~9=BX*
-zEF}Ai<@w6aWb*K?WHOb^yS3s`H^19mp?{SYcO|pMdjHOHBi%dWWT#f@{kIbg&WvS?
-znTc#MTV2WQrO%DgsC+C{^SOpQzBe<pLPCk;XfT>cY06!0)N*r;h%%(>?p)1ngo{zn
-zl^R@(G?f$CUrX*&^<tqslJD*BPi;$Wtx~N}S*Thh;jN2qy`C$$<H_VsuF7pB*|9V~
-z@7Abhth#bCJF^8-S>t2bLS%`1=ZocBsd#rpbyfXZkCdkKR3mi$Gb7otp}nc(VLy|j
-z&67-LA~%*y7Ad>^<w|+ZB{)Qo&gJs-@i0C%as~QW!pF)|gFY^f)9DYCgiiZy!5=h%
-zsWJMUEsjNJ&n>S@_EO2YVs*i-?W4AVY*OYp%i%muQ6BjR`I|&@y)8O-xIlK4DszXk
-zRQXg0X{b>xI(?L`j`<a76$90!gQenJ>qe1GQ>zHoqiGSDU6FYjEVyO2W}2I%Wu4U(
-zDpK=0bRuKeR(6j~N#-J=NTw<4J8^RDsOU^*Mk7yR?;s*<UIQHCXsxoCb=`cR$@SIg
-zKf61RI=y$eKh;|-SC^XC^oX?D0cwWy|Iy@%YJ@ncW05)S%Z_JK>lohv#n;<Eu+A~2
-z2m97JMykVgjBzWjiV64FO7>`r>%j|^U0MwG?pBM6YMX;|mFkK&CirnX*`tv`=WA}b
-zKa32C{0>pXR)*su^+rUBIFReuNZa=cgA0qfxekIA%f&{h+*AIQ96gF|Lw2X#y4z@*
-zUoYrvt=I?_&AxPE(x@T+4#sJ^R1*#^Fz+{A7T#ZK%-&yWf(b{?Zo&zSN(m=03J^Bu
-zDEQnQ>=TYX4ia$-NI2m>G2x(YntiuHGy?N!l%(bpHDvR_t4H$@CyYNWEt(Hr)zL>j
-zoe4+ISi))5`x&e1Y!gniP7{tblSnxJq$uG8h7)fFl^m@sm1(TTY%T3L!!&AV8<iT(
-zGlu#Pt~A{GK*^i6Wrngd*@8pob8ddFopQkOq}ij{!qGyzz*`-YLbljR*vkAoHJwhv
-z?#+c#?jNd@8^yv>WvRXcWt*b;=dogA;r4PpH}4K5SB~Tz2S3@_-TOy&mqzy;(sA^m
-zhGtTI)46iNopx#JMeWQT3Ma+^`<-dGic?c=c$GXk5gp?;v|}$*y^Tu$9G#R#aM*2L
-zN!A%NX=F0V9fMP~N~1DYDP=NyL#IcArF8i-nc1o6?0C7{)|}<1l0!?iqpmkMo!pwG
-ziE6Q2m`o-85qc)clatY8W+XXa<^rS18FNm%iYc|VmOB=#wN$9k>l1HgY}sk-raKtx
-zD$tcQeRpYTehAgnRVgqxFXtLdH8(w9so5!*(}9FDyOO(_XO7bGrhr|gk{Mf>TSewf
-zb8VN>w&sj(CN)s3&(Q5c9_QXGm4jks4=y`LoQ7SxR4=X&X^zu(XAbS2c4|qdv%=X)
-zu3s}~9qalw0xPYqYk6;3HM8Dv8gS%pdTPLQ<*D>R@1Bou3|F$VG$%Jbm32mg(m@&J
-z28N3Tx8Atz?v-|uWwfktv}Ss0Vwp+x``xG4d95rjOW&!B5)g)}rkBh#uCFd$Ul<uL
-z%@bA^uP=;<cV%(WZPdKGv6;XHpgR!hlI@d|4XC@RMO)ZM19vVnL|w@$y0G3r9&`bF
-z`_S~<d}gV!Kx0>N&KtdkDtUKCx6&3tSC+@RteV!5(NMQ_uW^IqN0Q-+?d@l4INN)x
-z!3LQo@5N-A{1=mbm8x5I`j_f7rltCFR)LAFk%5QNk!@KwS90?^D$6rYCX))*<1+Q?
-zJCi#Dz51Q8Dc30`PT4p~bov=PwdHVfnUVepI9F(HM*Z+^JG-Hd_{cPO#IgC|xJ<K(
-z7#daA9v&C{O690@vkC`LU7jDns%G)TG-%>(7tx#%Jr#(I0=}kIO8LyNHwbw^WSN3g
-zy|av}4_<+)rZS5YrtU*CiO9_ATI+*ba%RBX!le4Eb$2OWp&4ktvPixl&!3v=H?9lx
-z!b6xn(xtMkd4-Q9XE3eB+&1aJH5jPI(7bS(!e(}>1_Y@$j;rQlGPjlQsc51A&kAL0
-zFZq*d#ayWme$q^)?S<{<mZptn7G4NuGgzsV$I@shFXa23Ns~j8T)@j?p{tWRN<CZZ
-z!)@pc53OFy_wE8(PHMcQgBP`lra8>EEANV$>KVE2S=kpvw;KoHFl?S%-2SMNOHeBZ
-z$sr!>XLM>3c-ui~EiGb1CEC-FaIY)TQJsgXS8TdTH~+7$fBc_@^G=J5pdA+(f!h`t
-zfjTR)7c!>EutgQw`+r1{X{OO>krA}xA|r6yA|p^|MfO6*6dAUtB76T=MIPK)rd1WX
-zH==t;I^n6Vr)Mz{==A+y@cMRA!%E>-^iXm*?s8I^mi4W|wy$<A7ztlvDoC43(4CC0
-z_FUQBRg#f(SxZLLVKte+-P98+T2_<^6JJwok8QTws5z~n(OPnohirBrSEXrao*c?q
-zZ*0hBCosZfXYE-_XrvYoPB7TW)|y)&k6yhFL8;_=tFe>wlVx{?ZWqVQj43<orBF|$
-zoGjhQlnY}^jrvSqp;kFYxhQ(Mpa>jViYzyrr80&fmokW3{<|CX)BqO7CcOm{(!04u
-z>ps7p+Un%$b+-n`;%Kf|qHEo8`sRxzx35$zyZ!T}T%lg?pK!?~IY|r3S-8jMOg?Dg
-zH=7yHF4YIH_Dc)F##vtPO*_5=FH@`KR>W0l+H}2lVA!3{EtMK39um8?YNh1ey3Clu
-zwhR(crn>Qv)%!<kwMxz0M95kgr`m5SXj|Q_=4cTO&K^p4k(O8K^U6v!?_{ZXRGp49
-zw{W=LIPBzewPQtUTTcC0alYY<PEHSvIC~~D!_Fr2uc69fm2!QsSSmJFsLa$=!p}&K
-z<`$Bg>wB?U1RQRc_;9gKiO(&xh@+!~c23g%fEJNV9z2AGdDJE6T5PfQPmy)eU7UlL
-z-BeeuL@kl-z5;9_lYhB5S<`OG&DF{2Ze#_wv2Ug7?x2Zjxj^@C6S+lqXBiEOnsG;g
-zc9!?LjU4W|(OT_@XN!$8-Ingl9V|8fT?-~pTL^ME=O#1tQsr0%<*@%TOm~CUzn020
-z;inpM^IqFaly>dgnRb%s73@C2+yo^Dc9wBr?MTk7(4Flpd^hub<-9{lMukr$_vC5?
-zH%rUO)F*VL2)VL5lF>|jc`mze`fj;uwvLqCMRF-jH$2B`X2{uB=%>6EkXMv(E0;02
-z$s`?E&k3vmceUw2?j_NAt#VZ#6)Q)+%()(<TqE~`4lPzi)_AD?W+$mlM+MEy1zq~H
-zCAvbm<rK^HMvfdZ)Bw>jP_uH;tg$q1HSFkksWT7y)hA~sslD2sZU26>=~$SZL|4Gc
-zS8Ekqwa&rHvYU4*)!dOKm)6sY^#;5|<jtVcOV~U)8f%r6R$)<NDXzIbbKWgCS>&pN
-z<zUSgkT(;Dsr5jcS<^~?_!7&`?jM=I-SN`vqjDnM0nYmXb1KRIpbsWQN`lab=6`xk
-zrU#s~eCU%8wBQ+R5_(xK<a4FH4E;2DD6K4K%h(j-7#D1V)~{9?xVVx7Y5NohZ|9~m
-znUS`4zdN>WZF=;*o8OhK(`JU@$mM+79c1t-h-Mhx-%Q4zT6)uOCo`HHPtG7myV5i^
-zB=1a4dWL=Tsd9M^SJI=h?7lN^Rb@AG$*95`%cH#Xm*&jxqc!nIW4os%PP4EIpBP<G
-z9kqLLZbY2(nMe8AUUhll+4xy1FWee!%j=J2sw>R6A+H(+dApnT6{ef$KqBpq<`2P6
-zo^BIW?BZwZFsSGFX&<YfXRlw6%ral;fsxuP;i|Wj#Shi!QUVEa4PC0F=%Tn(Nzoa)
-z6iIck1+R<Kv4+@^jyGTg&h8qbORaBo^qQnl+gn5K(q`6~rWs@?+DB&leHSM=b*VSk
-zH}B8nj<TO8<^87q{9ait-e!jEVnsRIB6`u-uF-UKeqyawz%m*1Oo(cXSFVB!-QC{-
-zW)9NL7d_G7-;R0C1-fl)bw3sufm*DlJJs3AgTe8tO=$9T*rQwf%D{vozB0Oti*}B#
-zOI-f=X2#_8%3rG!A2nWH@=MCTE{wxT?uOAHg*HjFar(^Bg%)x}SP`!7nz6Id!L{2>
-z3tac8{RX+NQAfAWpHLFs6wh1%>zYEaCu|!vT^}WSkSwuhsF!}y^wUQ_{q!?HKU?W%
-zkbbt2qjhERV1@jhJ>;Nr9CFN$^|V-0(BYkG4=)1Hmf2ubP9~MkG{|foRnz8dp~r8~
-zA^%#-(9!#DEf1JhuXtq}vl494%zOM%N5?~@_4C}KXAjlIYBGSHUT0u6@!+CbYdrc2
-zY9F83y3wL8!$k>5IxBrZ(pf>9k~NgcmwH!w``T#T+(OZbtGMRQ^C~5tQK-|Rq49_I
-ziaQm~Vb9Ske)eARwDwAvUW6GLcSdWpvXe^8(?h76-Og6AXx**3*PWhdr8!gF%ACJw
-z)w#y3xOE<WsA4bWb*__zyUrD~y4HDMZ#}Q`;Bjl1p%|hj5TO;2J(xbW=&sS7?;Z96
-znWb8%DrkCTbkaK-=6`<I7V3_(1s$Yq9~_pbW*+4R@yg@p!&k&Rdz6G-88cBHoQR<4
-zW;zTScSoaQ?fT|P>05LaEB?sDXVtH&4rS4|Q929p`-P?bbd#`m%c9#)`}}&c&hi_-
-zE1Rp#n^<<A1%E!Ow^+~WDr=bq-Hy9Fdm(v8wPFUkR&6E_BJwN+LPS<#Gejtpy1FAm
-znz^zL*t%)>>8wWG-7LDRlZ>eSHrsB3-gVS|TU^(u{pz&u-G4$!ba8LAC$Z&r+9*}u
-zQd=t1Q}|nsRceQ~6e_oP?=Yy`V)hD!|6$CBi;XRt4=xo;`7KxicDHzYo)+Ca_6O8A
-zm+9Rbd3Sk>J-OlFygMe!Wac>aTgsK%Vy?6$S6dwD3x@M%M~jvG5^Z-`WA3w+rP`cZ
-z55&JEk)zCeiL5pHOH(<>ZYA`{v0i*gJ&N|QgdUd;XEyLW_3Ag=;9&`Dv{}<zJ}~va
-zy!UCXFI>62_sM<|`;p%Jq`XLv9*30N{YKoBiz&Qi)!z~ty1~1AGaat3pPid&*Syl|
-zr)fBsEYpx4^%juOP}%MKlgy4q+R5AcH6J>i^?NB2GT?2uL<T}{64B|V*7|m*!23u-
-zv8OEay1)1gC56i{;?*aCtpll_)T_39|3L?iByX#2aB(59deAnC;38|=;GXLWFSYq;
-zx;nl5(xvIW97wk&+<2{eAB^!Zi>Eniv&EXCx9>I8A}St&!?_FYR$AM(D6cf)H^+u$
-zyh({}uEXiDD{*c0Ci|SR%^4|?hafs7GOR5nSpx93+EYq&!lP3n!`e~`Zs+!1|Kz>f
-zNuMZhYY$nhw}H{~K4_@?jwdbX_|;j6gWh-+E?)<`iA-~r^V0eLbEL^{u8PdJXA8X@
-z%*(0wk}EA56jShRhxo7cGA*r2r2_%NTJz>DE%OqC$vPMOW;VoUUeXmQf+<ug3Tf?b
-zxV#tNe?8bE^BltEz4+d1zPj0s?mIp`uVlogW%U#W?>KtYwfj}?O@~K0qS%-B;>W%E
-z?~%E-SABl5VA=Nk`V(<=K}0RjmN4K(DdLxBm88}3Y(!A3r$jB!Mg&D^I|$lIDWmol
-zu5Hq3kCtkVs|Ve+&N{nHYAw^wE|Xfzyt9j>I+y}pn%I68_u{8y+fhnxu~Kqh60<ca
-zrbqDx<)}VrPxpP0lC<iBB7(;CK@maY`k+0Dg~R#zpDJ$x@{6@Q`<=kLtGeX-t%L6?
-z4rS+&`NjoVgfo95{1ulUMaimfskr<o3hl+b{3r@un`v**ir&^#3U>IN?hdlIvxIhU
-zbrmPZ3-s)9kF`Wi7cY6&*kVc(^qhzHUAL&w7W=m^?}eW<O)S_vFK_?EyRE!8;_{`9
-z`BRr09&yEavgjT`&AeK)U%PkdZkwS@5@Rm<uCn0Yb8@HDT~<Q!xLUziCj3-QGLc`J
-zWcpw5pr>?$VhXseL*Lfne?3Jg0x^YL*!CAdXjLldTLZ%Imw4a{3h=H}^a8<Usutg{
-zBCj2f7N$D?5-R^oGD4|~DY!y_oj#4|WVbbKZHi1uSx!*n&RDlc8)dMKbmf?l)^|X)
-zzw-TY+s^al=OC$rP4R?gT`R`#tGpZdN5ylHdPiC4VL-Dpy~SK7JZB0>FjTdF1}q?f
-z@4X9&U#&9dXg8^Arshk%GtxfM78ey&k&X^`z4EFuSyL5{kH1bF@CpSyJ|>@+pHlF@
-dNWiWOZ=`Q`fp#?)2~MrnJ?fvirxX(2@&B<FHZK4G
-
-literal 0
-HcmV?d00001
-
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
-new file mode 100644
-index 00000000000000..d0c5f989546d15
+index 00000000000000..e1b9ee1d005406
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cgo_go124.go
-@@ -0,0 +1,40 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
+@@ -0,0 +1,9 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build go1.24 && darwin
-+
-+package cryptokit
-+
-+// See xcrypto/cgo_go124.go for context.
++// Package commoncrypto provides a Go interface to the CommonCrypto API
++package commoncrypto
 +
-+/*
-+#cgo noescape MD5
-+#cgo nocallback MD5
-+#cgo noescape SHA1
-+#cgo nocallback SHA1
-+#cgo noescape SHA256
-+#cgo nocallback SHA256
-+#cgo noescape SHA384
-+#cgo nocallback SHA384
-+#cgo noescape SHA512
-+#cgo nocallback SHA512
-+
-+#cgo noescape hashWrite
-+#cgo noescape hashSum
-+#cgo nocallback hashNew
-+#cgo nocallback hashWrite
-+#cgo nocallback hashSum
-+#cgo nocallback hashReset
-+#cgo nocallback hashSize
-+#cgo nocallback hashBlockSize
-+#cgo nocallback hashCopy
-+#cgo nocallback hashFree
-+
-+#cgo noescape updateHMAC
-+#cgo noescape finalizeHMAC
-+#cgo nocallback initHMAC
-+#cgo nocallback freeHMAC
-+#cgo nocallback updateHMAC
-+#cgo nocallback finalizeHMAC
-+*/
-+import "C"
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
++//go:generate go run ../../cmd/checkheader shims.h
++//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -package commoncrypto --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -nocgo -package commoncrypto --noerrors shims.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
 new file mode 100644
-index 00000000000000..9f05af66b277d3
+index 00000000000000..b186cf8723ed20
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
-@@ -0,0 +1,39 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
+@@ -0,0 +1,72 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++// This header file is used by the mkcgo tool to generate cgo and Go bindings
++// for the CommonCrypto C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zcommoncrypto.h" instead.
 +
-+package cryptokit
++#ifndef _GO_COMMONCRYPTO_SHIMS_H // only include this header once
++#define _GO_COMMONCRYPTO_SHIMS_H
 +
-+// #cgo CFLAGS: -Wno-deprecated-declarations
-+// #cgo LDFLAGS: -framework Security -framework CoreFoundation -L /Library/Developer/CommandLineTools/usr/lib/swift/macosx ${SRCDIR}/CryptoKit.o
-+import "C"
-+import "unsafe"
++#include <stdint.h> // uint64_t
++#include <stdlib.h> // size_t
 +
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func base(b []byte) *C.uchar {
-+	return (*C.uchar)(unsafe.Pointer(addr(b)))
-+}
++// The following includes are used by the checkheader tool.
++// #include <CommonCrypto/CommonCrypto.h>
 +
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func addr(b []byte) *byte {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return unsafe.SliceData(b)
-+}
++typedef void *CCCryptorRef;
++typedef uint32_t CCModeOptions;
 +
-+var zero byte
++typedef enum {
++  kCCEncrypt = 0,
++  kCCDecrypt = 1,
++} CCOperation;
 +
-+// addrNeverEmpty returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+// If b is empty, it returns a pointer to a zero byte
-+// so that it can always be dereferenced.
-+func addrNeverEmpty(b []byte) *byte {
-+	if len(b) == 0 {
-+		return &zero
-+	}
-+	return unsafe.SliceData(b)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
-new file mode 100644
-index 00000000000000..8306f0f74e055b
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.h
-@@ -0,0 +1,67 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++typedef enum {
++  kCCModeCBC = 2,
++} CCMode;
 +
-+#ifndef CRYPTOKIT_H
-+#define CRYPTOKIT_H
++typedef enum {
++  KCCOptionECBMode = 2,
++} CCOptions;
 +
-+#include <stddef.h>
-+#include <stdint.h>
++typedef enum {
++  kCCSuccess = 0,
++} CCCryptorStatus;
 +
-+// AES GCM encryption and decryption
-+int encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data,
-+                  size_t dataLength, const uint8_t *nonce, size_t nonceLength,
-+                  const uint8_t *aad, size_t aadLength, uint8_t *cipherText,
-+                  size_t cipherTextLength, uint8_t *tag);
-+int decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data,
-+                  size_t dataLength, const uint8_t *nonce, size_t nonceLength,
-+                  const uint8_t *aad, size_t aadLength, const uint8_t *tag,
-+                  size_t tagLength, uint8_t *out, size_t *outLength);
++typedef enum {
++  kCCPBKDF2 = 2,
++} CCPBKDFAlgorithm;
 +
-+// Generates an Ed25519 keypair.
-+// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are
-+// the public key). The public key is 32 bytes.
-+void generateKeyEd25519(uint8_t *key);
-+int newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed);
-+int newPublicKeyEd25519(uint8_t *key, const uint8_t *pub);
-+int signEd25519(const uint8_t *privateKey, const uint8_t *message,
-+                size_t messageLength, uint8_t *sigBuffer);
-+int verifyEd25519(const uint8_t *publicKey, const uint8_t *message,
-+                  size_t messageLength, const uint8_t *sig);
++typedef enum {
++  kCCPRFHmacAlgSHA1 = 1,
++  kCCPRFHmacAlgSHA256 = 3,
++  kCCPRFHmacAlgSHA384 = 4,
++  kCCPRFHmacAlgSHA512 = 5,
++} CCPseudoRandomAlgorithm;
 +
-+// HKDF key derivation
-+int extractHKDF(int32_t hashFunction, const uint8_t *secret,
-+                size_t secretLength, const uint8_t *salt, size_t saltLength,
-+                uint8_t *prk, size_t prkLength);
-+int expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength,
-+               const uint8_t *info, size_t infoLength, uint8_t *okm,
-+               size_t okmLength);
-+
-+void *initHMAC(int32_t hashFunction, const uint8_t *key, int keyLength);
-+void freeHMAC(int32_t hashFunction, void *ptr);
-+void updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data,
-+                int length);
-+void finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer);
-+void *copyHMAC(int32_t hashAlgorithm, void *ptr);
-+
-+void MD5(const uint8_t *inputPointer, size_t inputLength,
-+         const uint8_t *outputPointer);
-+void SHA1(const uint8_t *inputPointer, size_t inputLength,
-+          const uint8_t *outputPointer);
-+void SHA256(const uint8_t *inputPointer, size_t inputLength,
-+            const uint8_t *outputPointer);
-+void SHA384(const uint8_t *inputPointer, size_t inputLength,
-+            const uint8_t *outputPointer);
-+void SHA512(const uint8_t *inputPointer, size_t inputLength,
-+            const uint8_t *outputPointer);
-+
-+void *hashNew(int32_t hashAlgorithm);
-+void hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data,
-+               int length);
-+void hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer);
-+void hashReset(int32_t hashAlgorithm, void *ptr);
-+int hashSize(int32_t hashAlgorithm);
-+int hashBlockSize(int32_t hashAlgorithm);
-+void *hashCopy(int32_t hashAlgorithm, void *ptr);
-+void hashFree(int32_t hashAlgorithm, void *ptr);
-+
-+#endif /* CRYPTOKIT_H */
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
++enum {
++  kCCBlockSizeAES128 = 16,
++  kCCBlockSizeDES = 8,
++};
++
++typedef enum {
++  ccNoPadding = 0,
++} CCPadding;
++
++typedef enum {
++  kCCAlgorithmAES = 0,
++  kCCAlgorithmDES = 1,
++  kCCAlgorithm3DES = 2,
++  kCCAlgorithmRC4 = 4,
++} CCAlgorithm;
++
++CCCryptorStatus CCCryptorCreate(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(key, keyLength), slice(iv)));
++CCCryptorStatus CCCryptorRelease(CCCryptorRef cryptorRef) __attribute__((framework(System, B)));
++CCCryptorStatus CCCryptorUpdate(CCCryptorRef cryptorRef, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((framework(System, B), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm algorithm, const char *password, size_t passwordLen, const uint8_t *salt, size_t saltLen, CCPseudoRandomAlgorithm prf, unsigned rounds, uint8_t *derivedKey, size_t derivedKeyLen) __attribute__((framework(System, B), slice(password, passwordLen), slice(salt, saltLen), slice(derivedKey, derivedKeyLen)));
++CCCryptorStatus CCCrypt(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((framework(System, B), slice(key, keyLength), slice(iv), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCCryptorCreateWithMode(CCOperation op, CCMode mode, CCAlgorithm alg, CCPadding padding, const void *iv, const void *key, size_t keyLength, const void *tweak, size_t tweakLength, int numRounds, CCModeOptions options, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(iv), slice(key, keyLength), slice(tweak, tweakLength)));
++CCCryptorStatus CCCryptorReset(CCCryptorRef cryptorRef, const void *iv) __attribute__((framework(System, B), slice(iv)));
++
++#endif // _GO_COMMONCRYPTO_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..2fa15c8fa5529a
+index 00000000000000..196dbd4dbb4238
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/ed25519.go
-@@ -0,0 +1,72 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
+@@ -0,0 +1,20 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++//go:build !cgo
 +
-+package cryptokit
++package commoncrypto
 +
-+// #include "cryptokit.h"
-+import "C"
 +import (
-+	"errors"
++	_ "unsafe"
 +)
 +
-+// GenerateKeyEd25519 generates an Ed25519 private key using the Swift implementation.
-+func GenerateKeyEd25519(key []byte) {
-+	C.generateKeyEd25519(base(key))
-+}
-+
-+// NewPrivateKeyEd25519FromSeed generates an Ed25519 private key from a seed.
-+func NewPrivateKeyEd25519FromSeed(key, seed []byte) error {
-+	result := C.newPrivateKeyEd25519FromSeed(base(key), base(seed))
-+	if result != 0 {
-+		return errors.New("failed to generate Ed25519 key from seed")
-+	}
-+	return nil
-+}
-+
-+// NewPublicKeyEd25519 creates a new Ed25519 public key from raw bytes.
-+func NewPublicKeyEd25519(key, pub []byte) error {
-+	result := C.newPublicKeyEd25519(base(key), base(pub))
-+	if result != 0 {
-+		return errors.New("failed to create Ed25519 public key")
-+	}
-+	return nil
-+}
++//go:linkname syscall_syscallN syscall.syscalln
 +
-+// SignEd25519 signs a message using the provided private key.
-+func SignEd25519(sig, privateKey, message []byte) error {
-+	result := C.signEd25519(base(privateKey), base(message), C.size_t(len(message)), base(sig))
-+	if result < 0 {
-+		switch result {
-+		case -1:
-+			return errors.New("invalid inputs to SignEd25519")
-+		case -2:
-+			return errors.New("failed to reconstruct private key")
-+		case -3:
-+			return errors.New("failed to sign the message")
-+		case -4:
-+			return errors.New("signature buffer too small")
-+		default:
-+			return errors.New("unknown error in SignEd25519")
-+		}
-+	}
-+	return nil
-+}
++//go:noescape
++func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
 +
-+// VerifyEd25519 verifies a signature using the provided public key and message.
-+func VerifyEd25519(publicKey, message, sig []byte) error {
-+	result := C.verifyEd25519(base(publicKey), base(message), C.size_t(len(message)), base(sig))
-+	switch result {
-+	case 1:
-+		return nil // Valid signature
-+	case 0:
-+		return errors.New("ed25519: invalid signature")
-+	case -1:
-+		return errors.New("invalid inputs to VerifyEd25519")
-+	case -2:
-+		return errors.New("failed to reconstruct public key")
-+	default:
-+		return errors.New("unknown error in VerifyEd25519")
-+	}
++//go:nosplit
++func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return syscall_syscallN(fn, args...)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
 new file mode 100644
-index 00000000000000..458e9eb57416b1
+index 00000000000000..24f6e3d3f50dc1
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/gcm.go
-@@ -0,0 +1,36 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
+@@ -0,0 +1,47 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package cryptokit
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zcommoncrypto.h"
 +
-+// #include "cryptokit.h"
-+import "C"
++CCCryptorStatus CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
++CCCryptorStatus CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
++CCCryptorStatus CCCryptorRelease(CCCryptorRef);
++CCCryptorStatus CCCryptorReset(CCCryptorRef, const unsigned char*);
++CCCryptorStatus CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
 +
-+// EncryptAESGCM performs AES-GCM encryption using Swift.
-+func EncryptAESGCM(key, plaintext, nonce, additionalData, ciphertext, tag []byte) int {
-+	err := C.encryptAESGCM(
-+		base(key), C.size_t(len(key)),
-+		base(plaintext), C.size_t(len(plaintext)),
-+		base(nonce), C.size_t(len(nonce)),
-+		base(additionalData), C.size_t(len(additionalData)),
-+		base(ciphertext), C.size_t(len(ciphertext)),
-+		base(tag),
-+	)
-+	return int(err)
-+}
-+
-+// DecryptAESGCM performs AES-GCM decryption using Swift.
-+func DecryptAESGCM(key, ciphertext, nonce, additionalData, tag, plaintext []byte) (int, int) {
-+	var decSize C.size_t
-+	err := C.decryptAESGCM(
-+		base(key), C.size_t(len(key)),
-+		base(ciphertext), C.size_t(len(ciphertext)),
-+		base(nonce), C.size_t(len(nonce)),
-+		base(additionalData), C.size_t(len(additionalData)),
-+		base(tag), C.size_t(len(tag)),
-+		base(plaintext), &decSize,
-+	)
-+	return int(decSize), int(err)
++CCCryptorStatus _mkcgo_CCCrypt(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, const unsigned char* _arg6, size_t _arg7, unsigned char* _arg8, size_t _arg9, size_t* _arg10) {
++	return CCCrypt(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
-new file mode 100644
-index 00000000000000..14b5e1b1c0d8ae
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hash.go
-@@ -0,0 +1,257 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build darwin
 +
-+package cryptokit
-+
-+// #include "cryptokit.h"
-+import "C"
-+import (
-+	"errors"
-+	"hash"
-+	"runtime"
-+	"unsafe"
-+)
++CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, CCCryptorRef* _arg6) {
++	return CCCryptorCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
 +
-+func MD5(p []byte) (sum [16]byte) {
-+	C.MD5((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
-+	return
++CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation _arg0, CCMode _arg1, CCAlgorithm _arg2, CCPadding _arg3, const unsigned char* _arg4, const unsigned char* _arg5, size_t _arg6, const unsigned char* _arg7, size_t _arg8, int _arg9, CCModeOptions _arg10, CCCryptorRef* _arg11) {
++	return CCCryptorCreateWithMode(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
-+func SHA1(p []byte) (sum [20]byte) {
-+	C.SHA1((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
-+	return
++CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef _arg0) {
++	return CCCryptorRelease(_arg0);
 +}
 +
-+func SHA256(p []byte) (sum [32]byte) {
-+	C.SHA256((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
-+	return
++CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef _arg0, const unsigned char* _arg1) {
++	return CCCryptorReset(_arg0, _arg1);
 +}
 +
-+func SHA384(p []byte) (sum [48]byte) {
-+	C.SHA384((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
-+	return
++CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef _arg0, const unsigned char* _arg1, size_t _arg2, unsigned char* _arg3, size_t _arg4, size_t* _arg5) {
++	return CCCryptorUpdate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+func SHA512(p []byte) (sum [64]byte) {
-+	C.SHA512((*C.uint8_t)(&*addrNeverEmpty(p)), C.size_t(len(p)), base(sum[:]))
-+	return
++CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm _arg0, const char* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, CCPseudoRandomAlgorithm _arg5, unsigned _arg6, uint8_t* _arg7, size_t _arg8) {
++	return CCKeyDerivationPBKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
 +}
 +
-+const (
-+	md5    = 1
-+	sha1   = 2
-+	sha256 = 3
-+	sha384 = 4
-+	sha512 = 5
-+)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
+new file mode 100644
+index 00000000000000..0a25e0621df627
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
+@@ -0,0 +1,50 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+var (
-+	MD5BlockSize    = int(C.hashBlockSize(md5))
-+	MD5Size         = int(C.hashSize(md5))
-+	SHA1BlockSize   = int(C.hashBlockSize(sha1))
-+	SHA1Size        = int(C.hashSize(sha1))
-+	SHA256BlockSize = int(C.hashBlockSize(sha256))
-+	SHA256Size      = int(C.hashSize(sha256))
-+	SHA384BlockSize = int(C.hashBlockSize(sha384))
-+	SHA384Size      = int(C.hashSize(sha384))
-+	SHA512BlockSize = int(C.hashBlockSize(sha512))
-+	SHA512Size      = int(C.hashSize(sha512))
-+)
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+var _ hash.Hash = (*evpHash)(nil)
-+var _ HashCloner = (*evpHash)(nil)
++package commoncrypto
 +
-+type evpHash struct {
-+	ptr           unsafe.Pointer
-+	hashAlgorithm C.int
-+	blockSize     int
-+	size          int
-+}
++const (
++	KCCEncrypt CCOperation = 0
++	KCCDecrypt CCOperation = 1
++)
 +
-+func newEVPHash(hashAlgorithm C.int, blockSize, size int) *evpHash {
-+	h := &evpHash{
-+		ptr:           C.hashNew(hashAlgorithm),
-+		hashAlgorithm: hashAlgorithm,
-+		blockSize:     blockSize,
-+		size:          size,
-+	}
++const (
++	KCCModeCBC CCMode = 2
++)
 +
-+	runtime.SetFinalizer(h, (*evpHash).finalize)
++const (
++	KCCOptionECBMode CCOptions = 2
++)
 +
-+	return h
-+}
++const (
++	KCCSuccess CCCryptorStatus = 0
++)
 +
-+func (h *evpHash) finalize() {
-+	if h.ptr != nil {
-+		C.hashFree(h.hashAlgorithm, h.ptr)
-+		h.ptr = nil
-+	}
-+}
++const (
++	KCCPBKDF2 CCPBKDFAlgorithm = 2
++)
 +
-+func (h *evpHash) Clone() (HashCloner, error) {
-+	if h.ptr == nil {
-+		panic("cryptokit: hash already finalized")
-+	}
++const (
++	KCCPRFHmacAlgSHA1   CCPseudoRandomAlgorithm = 1
++	KCCPRFHmacAlgSHA256 CCPseudoRandomAlgorithm = 3
++	KCCPRFHmacAlgSHA384 CCPseudoRandomAlgorithm = 4
++	KCCPRFHmacAlgSHA512 CCPseudoRandomAlgorithm = 5
++)
 +
-+	newHash := &evpHash{
-+		ptr:           C.hashCopy(h.hashAlgorithm, h.ptr),
-+		hashAlgorithm: h.hashAlgorithm,
-+		blockSize:     h.blockSize,
-+		size:          h.size,
-+	}
++const (
++	KCCBlockSizeAES128 = 16
++	KCCBlockSizeDES    = 8
++)
 +
-+	runtime.SetFinalizer(newHash, (*evpHash).finalize)
++const (
++	CcNoPadding CCPadding = 0
++)
 +
-+	runtime.KeepAlive(h)
++const (
++	KCCAlgorithmAES  CCAlgorithm = 0
++	KCCAlgorithmDES  CCAlgorithm = 1
++	KCCAlgorithm3DES CCAlgorithm = 2
++	KCCAlgorithmRC4  CCAlgorithm = 4
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
+new file mode 100644
+index 00000000000000..5fab22b463dd58
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
+@@ -0,0 +1,71 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	return newHash, nil
-+}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+func (h *evpHash) Write(p []byte) (int, error) {
-+	if len(p) == 0 {
-+		return 0, nil
-+	}
-+	C.hashWrite(h.hashAlgorithm, h.ptr, (*C.uint8_t)(&*addrNeverEmpty(p)), C.int(len(p)))
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
 +
-+	runtime.KeepAlive(h)
++#include <stdint.h>
++#include <stdlib.h>
 +
-+	return len(p), nil
-+}
++typedef void* CCCryptorRef;
++typedef uint32_t CCModeOptions;
 +
-+func (h *evpHash) WriteString(s string) (int, error) {
-+	if len(s) == 0 {
-+		return 0, nil
-+	}
-+	C.hashWrite(h.hashAlgorithm, h.ptr, (*C.uchar)(unsafe.Pointer(unsafe.StringData(s))), C.int(len(s)))
++typedef enum {
++	kCCEncrypt = 0,
++	kCCDecrypt = 1,
++} CCOperation;
 +
-+	runtime.KeepAlive(h)
++typedef enum {
++	kCCModeCBC = 2,
++} CCMode;
 +
-+	return len(s), nil
-+}
++typedef enum {
++	KCCOptionECBMode = 2,
++} CCOptions;
 +
-+func (h *evpHash) WriteByte(c byte) error {
-+	C.hashWrite(h.hashAlgorithm, h.ptr, base([]byte{c}), 1)
++typedef enum {
++	kCCSuccess = 0,
++} CCCryptorStatus;
 +
-+	runtime.KeepAlive(h)
++typedef enum {
++	kCCPBKDF2 = 2,
++} CCPBKDFAlgorithm;
 +
-+	return nil
-+}
++typedef enum {
++	kCCPRFHmacAlgSHA1 = 1,
++	kCCPRFHmacAlgSHA256 = 3,
++	kCCPRFHmacAlgSHA384 = 4,
++	kCCPRFHmacAlgSHA512 = 5,
++} CCPseudoRandomAlgorithm;
 +
-+func (h *evpHash) Sum(b []byte) []byte {
-+	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
-+	C.hashSum(h.hashAlgorithm, h.ptr, base(hashSlice))
-+	runtime.KeepAlive(h)
++enum {
++	kCCBlockSizeAES128 = 16,
++	kCCBlockSizeDES = 8,
++};
 +
-+	b = append(b, hashSlice...)
-+	return b
-+}
++typedef enum {
++	ccNoPadding = 0,
++} CCPadding;
 +
-+type errMarshallUnsupported struct{}
++typedef enum {
++	kCCAlgorithmAES = 0,
++	kCCAlgorithmDES = 1,
++	kCCAlgorithm3DES = 2,
++	kCCAlgorithmRC4 = 4,
++} CCAlgorithm;
 +
-+func (e errMarshallUnsupported) Error() string {
-+	return "cryptokit: hash state is not marshallable"
-+}
++typedef void* mkcgo_err_state;
++mkcgo_err_state mkcgo_err_retrieve();
++void mkcgo_err_free(mkcgo_err_state);
 +
-+func (e errMarshallUnsupported) Unwrap() error {
-+	return errors.ErrUnsupported
-+}
++CCCryptorStatus _mkcgo_CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
++CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
++CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef);
++CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef, const unsigned char*);
++CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
 +
-+func (h *evpHash) MarshalBinary() ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
+new file mode 100644
+index 00000000000000..27df632639b49f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
+@@ -0,0 +1,69 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+func (h *evpHash) UnmarshalBinary(data []byte) error {
-+	return errMarshallUnsupported{}
-+}
++//go:build !cgo
 +
-+func (h *evpHash) Reset() {
-+	C.hashReset(h.hashAlgorithm, h.ptr)
-+}
++#include "textflag.h"
 +
-+func (h *evpHash) BlockSize() int {
-+	return h.blockSize
-+}
 +
-+func (h *evpHash) Size() int {
-+	return h.size
-+}
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
 +
-+type MD5Hash struct {
-+	*evpHash
-+}
 +
-+func NewMD5() hash.Hash {
-+	return MD5Hash{
-+		evpHash: newEVPHash(
-+			C.int(md5),
-+			MD5BlockSize,
-+			MD5Size,
-+		),
-+	}
-+}
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_CCCrypt_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCrypt(SB)
++GLOBL   ·_mkcgo_CCCrypt_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCrypt_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCrypt_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreate_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCryptorCreate(SB)
++GLOBL   ·_mkcgo_CCCryptorCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCryptorCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreateWithMode_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCryptorCreateWithMode(SB)
++GLOBL   ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreateWithMode_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorRelease_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCryptorRelease(SB)
++GLOBL   ·_mkcgo_CCCryptorRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCryptorRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorReset_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCryptorReset(SB)
++GLOBL   ·_mkcgo_CCCryptorReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCryptorReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorReset_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorUpdate_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCCryptorUpdate(SB)
++GLOBL   ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorUpdate_trampoline<>(SB)
++
++TEXT _mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CCKeyDerivationPBKDF(SB)
++GLOBL   ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
+new file mode 100644
+index 00000000000000..7b509719317346
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
+@@ -0,0 +1,58 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+type SHA1Hash struct {
-+	*evpHash
++// Code generated by mkcgo. DO NOT EDIT.
++
++package commoncrypto
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#include "zcommoncrypto.h"
++*/
++import "C"
++import "unsafe"
++
++type CCAlgorithm = C.CCAlgorithm
++type CCCryptorRef = C.CCCryptorRef
++type CCCryptorStatus = C.CCCryptorStatus
++type CCMode = C.CCMode
++type CCModeOptions = C.CCModeOptions
++type CCOperation = C.CCOperation
++type CCOptions = C.CCOptions
++type CCPBKDFAlgorithm = C.CCPBKDFAlgorithm
++type CCPadding = C.CCPadding
++type CCPseudoRandomAlgorithm = C.CCPseudoRandomAlgorithm
++
++//go:nosplit
++func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
 +}
 +
-+// NewSHA1 initializes a new SHA1 hasher.
-+func NewSHA1() hash.Hash {
-+	return SHA1Hash{
-+		evpHash: newEVPHash(
-+			sha1,
-+			SHA1BlockSize,
-+			SHA1Size,
-+		),
-+	}
++func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	return C._mkcgo_CCCrypt(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
 +}
 +
-+type SHA256Hash struct {
-+	*evpHash
++func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorCreate(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), cryptorRef)
 +}
 +
-+// NewSHA256 initializes a new SHA256 hasher.
-+func NewSHA256() hash.Hash {
-+	return SHA256Hash{
-+		evpHash: newEVPHash(
-+			sha256,
-+			SHA256BlockSize,
-+			SHA256Size,
-+		),
-+	}
++func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorCreateWithMode(op, mode, alg, padding, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tweak))), C.size_t(len(tweak)), C.int(numRounds), options, cryptorRef)
 +}
 +
-+type SHA384Hash struct {
-+	*evpHash
++func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorRelease(cryptorRef)
 +}
 +
-+// NewSHA384 initializes a new SHA384 hasher.
-+func NewSHA384() hash.Hash {
-+	return SHA384Hash{
-+		evpHash: newEVPHash(
-+			sha384,
-+			SHA384BlockSize,
-+			SHA384Size,
-+		),
-+	}
++func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
++	return C._mkcgo_CCCryptorReset(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))))
 +}
 +
-+type SHA512Hash struct {
-+	*evpHash
++func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	return C._mkcgo_CCCryptorUpdate(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
 +}
 +
-+// NewSHA512 initializes a new SHA512 hasher.
-+func NewSHA512() hash.Hash {
-+	return SHA512Hash{
-+		evpHash: newEVPHash(
-+			sha512,
-+			SHA512BlockSize,
-+			SHA512Size,
-+		),
-+	}
++func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
++	return C._mkcgo_CCKeyDerivationPBKDF(algorithm, (*C.char)(unsafe.Pointer(unsafe.SliceData(password))), C.size_t(len(password)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), prf, C.uint(rounds), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(derivedKey))), C.size_t(len(derivedKey)))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
 new file mode 100644
-index 00000000000000..5416b7882c1891
+index 00000000000000..c4cb78b4888fa5
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone.go
-@@ -0,0 +1,17 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
+@@ -0,0 +1,11 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:build !go1.25 && darwin
-+
-+package cryptokit
++//go:build go1.24 && !cmd_go_bootstrap
 +
-+import (
-+	"hash"
-+)
++package commoncrypto
 +
-+// HashCloner is an interface that defines a Clone method.
-+type HashCloner interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() (HashCloner, error)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
++/*
++ */
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
 new file mode 100644
-index 00000000000000..d690254202bde6
+index 00000000000000..321e3f99c4057b
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hashclone_go125.go
-@@ -0,0 +1,12 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
+@@ -0,0 +1,96 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build go1.25 && darwin
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package cryptokit
++//go:build !cgo
++
++package commoncrypto
 +
 +import (
-+	"hash"
++	"runtime"
++	"unsafe"
 +)
 +
-+type HashCloner = hash.Cloner
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
-new file mode 100644
-index 00000000000000..da161adcd88ea6
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hkdf.go
-@@ -0,0 +1,77 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var _ = runtime.GOOS
 +
-+//go:build darwin
++//go:cgo_import_dynamic _mkcgo_CCCrypt CCCrypt "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreate CCCryptorCreate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreateWithMode CCCryptorCreateWithMode "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorRelease CCCryptorRelease "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorReset CCCryptorReset "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorUpdate CCCryptorUpdate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCKeyDerivationPBKDF CCKeyDerivationPBKDF "/System/Library/Frameworks/System.framework/Versions/B/System"
 +
-+package cryptokit
++type CCCryptorRef unsafe.Pointer
++type CCModeOptions = uint32
 +
-+// #include "cryptokit.h"
-+import "C"
-+import (
-+	"crypto"
-+	"errors"
-+)
++type CCOperation int32
 +
-+// ExtractHKDF performs the extract step of HKDF using the specified hash function.
-+func ExtractHKDF(hash crypto.Hash, secret, salt []byte) ([]byte, error) {
-+	h, err := cryptoHashToSwift(hash)
-+	if err != nil {
-+		return nil, err
-+	}
++type CCMode int32
 +
-+	// Allocate buffer for derived key
-+	prk := make([]byte, hash.Size())
++type CCOptions int32
 +
-+	// Call Swift function
-+	result := C.extractHKDF(
-+		h,
-+		base(secret), C.size_t(len(secret)),
-+		base(salt), C.size_t(len(salt)),
-+		base(prk), C.size_t(len(prk)),
-+	)
++type CCCryptorStatus int32
 +
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
-+	}
++type CCPBKDFAlgorithm int32
 +
-+	return prk, nil
++type CCPseudoRandomAlgorithm int32
++
++type CCPadding int32
++
++type CCAlgorithm int32
++
++var _mkcgo_CCCrypt_trampoline_addr uintptr
++
++func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCrypt_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
++	return CCCryptorStatus(r0)
 +}
 +
-+func ExpandHKDF(hash crypto.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	h, err := cryptoHashToSwift(hash)
-+	if err != nil {
-+		return nil, err
-+	}
++var _mkcgo_CCCryptorCreate_trampoline_addr uintptr
 +
-+	// Allocate buffer for derived key
-+	expandedKey := make([]byte, keyLength)
++func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorCreate_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(cryptorRef)))
++	return CCCryptorStatus(r0)
++}
 +
-+	// Call Swift function
-+	result := C.expandHKDF(
-+		h,
-+		base(pseudorandomKey), C.size_t(len(pseudorandomKey)),
-+		base(info), C.size_t(len(info)),
-+		base(expandedKey), C.size_t(len(expandedKey)),
-+	)
++var _mkcgo_CCCryptorCreateWithMode_trampoline_addr uintptr
 +
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
++func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds)<<32|uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
++	} else {
++		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds), uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
 +	}
++	return CCCryptorStatus(r0)
++}
 +
-+	return expandedKey, nil
++var _mkcgo_CCCryptorRelease_trampoline_addr uintptr
++
++func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorRelease_trampoline_addr, uintptr(cryptorRef))
++	return CCCryptorStatus(r0)
 +}
 +
-+func cryptoHashToSwift(hash crypto.Hash) (C.int32_t, error) {
-+	switch hash {
-+	case crypto.SHA1:
-+		return 1, nil
-+	case crypto.SHA256:
-+		return 2, nil
-+	case crypto.SHA384:
-+		return 3, nil
-+	case crypto.SHA512:
-+		return 4, nil
-+	default:
-+		return 0, errors.New("unsupported hash function")
-+	}
++var _mkcgo_CCCryptorReset_trampoline_addr uintptr
++
++func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorReset_trampoline_addr, uintptr(cryptorRef), uintptr(unsafe.Pointer(unsafe.SliceData(iv))))
++	return CCCryptorStatus(r0)
++}
++
++var _mkcgo_CCCryptorUpdate_trampoline_addr uintptr
++
++func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorUpdate_trampoline_addr, uintptr(cryptorRef), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
++	return CCCryptorStatus(r0)
++}
++
++var _mkcgo_CCKeyDerivationPBKDF_trampoline_addr uintptr
++
++func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCKeyDerivationPBKDF_trampoline_addr, uintptr(algorithm), uintptr(unsafe.Pointer(unsafe.SliceData(password))), uintptr(len(password)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(prf), uintptr(rounds), uintptr(unsafe.Pointer(unsafe.SliceData(derivedKey))), uintptr(len(derivedKey)))
++	return CCCryptorStatus(r0)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
+new file mode 100644
+index 0000000000000000000000000000000000000000..182ae5aecc2be4add1b53bebb1a91c193ab6feb7
+GIT binary patch
+literal 94232
+zcmeFa3wWJXmH&UrHC!81w1P;Gszs~>rCLQK6#}P{N))Q)W>cUg<<iE|N)b8+N;HS#
+z(Kus<D4-cdjXzQ2B^tp<3WY}T61>LCNKny~GGlZQBZB>ZzH6=b+>_Sd%=~}z%tIc^
+zcVE_Cd+oK?-h1u+zVANYd*a{zwr?smYtIz_<KI#IYpCIWb^PP+x%?Yc<}`m34|zt5
+z%J4TDad@Wm?*Jw8w|x2fl^fT4*yCq6E<3vrPeS)^^N{%MMX>&nRH}Dx0(+&}J;(pQ
+zeEEe}URji|eEF%1&R$eVNaUDPNJ<qqV^&eRg3Fg*ykh-|LShBKkZWNStRGDozxwCQ
+zN)^|Ua9F<l%BxndTEAfV`m5Vku3Nck`SQ~C)_l_`Z;k@354ip(;rHx>Nf9nze$kcd
+z*R5W2Nu-tY>koc6Mt<%0U4IFSJ(57a{6%ZmTv_Ol^7b}-%Lx|-eJ}i^zuq~stY0HJ
+z56D->ue7}zgI^-Y82rlnAkU0I=x_NIYcFnHab+v<rlz+nDNwvK_|-<z&)_%H-}2>a
+zFTC`k<*Tn)ammWnYgVl-Z|{x4FU&agNF~3dDyv5Ay`pW!MeCPuSaa3tH5Vh_sm1m8
+z1iyy;J#{MdH-`S+>`93#g5S#4<*U}MxMHPemiO=24};Hvjtl?Q`@>^4&RUbO@a6oI
+zUAm4BB6Jx4QYlrc^wz^?r52Mpb=<5}U4xI)X43VihU#A*{|5Q@0sj5HfAc9&$3N9S
+z|8g4(r>)(vhC#M^?HZ-=Zyx_7&wOk5RcqH>mMWnk%jlAJ1fNsZu3MQeU&Md;sVmme
+z6$KWri1MmuCc5KylTJEK<SyoSmJQ72b!#tLdF7QcM60xa`6+AHT(n``x|M4#y4v{E
+zmCAM2)mN@xc?D_ut5V*Z=h;=|c>RXem#<&FX8Eei*RDuLb`?HnUU=oob?=CdsG5K2
+z%8S;oe#gpFLXI;1N&f{Um&sGspB1!K>N|Dym2E55U({-xlKcujS6sMy4P!(3RqRIf
+zoJFfv(*-l}Icp_7uzJ1gzs#<dHPhhf_@DO1mFvwyXKpWTxopw83s<jSH@$urpLxdW
+zq<ixHT-M$^&2;jtySi=t+A==%$X3RuY3)TTE?=}^ee23K>sMct3_j=*zD0I?mKLlt
+z*Q{N$@~jPQZEM$=jG`;(Npq+xpi22uG$F2Eec|fMQE>B$i!M`7EKO$~o=}ks?wNfg
+zGo<3_&5zdJrRnJS;mqCX%#SU<Z`OuAb{sG$dD5B2sU0=P4;!Y^*~Y2#=B>42&|u{k
+zz2z)e)RR%)lwCTnDSJU(I(xyKrtF5=rpyU*)0y+<)->@yVrS2tlg^wvx6Z17OZ|C^
+z-gdz~t5&^i_K`P8D(CmsMQ>TObkW&orLTK*5Ct}6a;<;cxw9$L(E_A1_op+rrU@<1
+z{J1GI&|ql;wFW~q0t88CI_f<*k6_A!bp+>l5HUKYo-*26f|CkvYaEpb;7H(bpk`gA
+z_XqX`_6GI@b_I3@wmWug+_`gS1ltP1)(Fmi>+tMjI+}?A4Z!iki!xgYrwFIFb&Mgh
+zN|Q275a?ASawjR#HJNRgN@p7yJhFLsc6#&pWcrw`>C8Bd8>DefncsP4W=lGg8@85H
+zCetzE!RkdtJ1T-q<7g>|u>yzjU2&Lj4kHPNrfg37Zpuav<h*;L@2n@AvbVO-#-?ny
+zdOn@)R<|wAY-`F4)mehcKF@=dvS+RH7iWG4eLF-;GEX&SKD&@mQ)Ux(ylF6<+0fsV
+z+0d8HT+rK;xuB;hv$U%zv!t^r)7YNQbgRQ?yE+RUsiQ*ALk(8vfb1`Ax@@-415hus
+zkaZ+1mK7CJThiG9Yl{_X%NN?{h1Bg7O6Ln<zn-+PkaTxC+o9&9GperBm@beJq;o@}
+zHW`~TpXefI@#ZHPIG^YtIJ;vFt|IlDfY~8Q+>|w{XjQj0BI_;4c6f(%&oKdVb%Lzd
+zlNso>-aa&H6-lBQ8$;OvjVc!;+hNVj=B$m`frTdUkj!y06HT^5{nwP~?y`gj=;b;~
+z$n}u0B=du&%&qMfx}Q)dA!s!um=9_UIwr+2lbbTe4YfN*)7hMOq_b8_RKdttc>Lpc
+zXe!$|iq)w;2vrM&uEvg0iw#)Qv)z&rGgV`mcE-J$2?29uI`dFEb9GHR^J?^NBII%+
+zS&|uXT`)VM`aTLrFZ2_f-7#BpS@yGDlL=_#p)60&Y)fZ`S|Dd0PG<&MEi^Q20t}1*
+zUPE?hj*_z7Mw-nz-F;Q~b@W@=?!kOnRG%BNRPR*hnCWP?y1JJc_!N`r?kg0NWDE0>
+zH4sW<vDEB<k{B)NqMUk@azIH4Yc*hHMFgHSP@LpVvZf~$xXK2Gjg3uNJDY3hyLL+$
+z=qzG5;YnjoIu1Cg8{dFihgqJdx4DEH^X>HU5u+sp=;(vb@!!;pAikN7jn3X;*tcT2
+zm1E~EI)Bjxi{7?q`33hNTn{W+G;<3U-knO_aU|CFHJRX|!58p<V?6tSf}!?1<9UEq
+z+KzexN%NIh9Ht}2isUWM{{KxQlF!;xs+8@&MX<8<oH0|!oI8=u?#n_lnch5=ntjWb
+z$G6OqL$P81a471eG!a3Oxi7utZ*}QE|1#Z^p0y3PgoWr^p@Ah6X?ZE5>C7SKkPNTl
+zuf%__F`CsOMM`y9EpyXZTP|ZFb6#RQlFl4tl*kg2;M%Mz_D5WPq(VB$zh&Zeom)DW
+zFc(bBT7STf)QychU%JQo!*-mE{FCWHEKYwXr;plZ)$Dk2zFlAQEag#e<9IY_Qv^0|
+zMG0z7MSDzt=)pM}KS`2Z%D>mMj5khw!=|_9dK$c8wlyTXfy_-4X6B6(I9o993V#oN
+z|4-XfoBl8CpGEkK@<12T?1gxsc%c`}!vn3u1H}v7#AN*1xlNh%b8F;^5<7qH9J!(>
+z;ncbFybm^SU5G2Hkz1*M@lX8GG%G3V&m640DRU2wXf2_|neXC=wlX3XXMTdqVbelp
+zK$DM#ssPCt)HM(jtS30?sq+X<co1>I8*7|HaM)982@Wdw|H?bX0d2u-HAZH1RB=lu
+zX&zw9<+hGNVpi&yjxK_U_vc=dPoU<-`II${^U4U#b*lLl9%z^8$2jzOumM%|5{w=#
+zc)?jqwq-llSB=2jWLpW$JL?y}Ok<J5nm7dN6g-F#5oFyp&PE4YcjLFpG+67@sf#oB
+z;&x6Nu?afm!3u|UapqwNn@vm1F|l7Ub7{(4F<fw1H}&DP_TseSuwH<}x)g_XNjome
+zM!E?9(H+*D99Gz<-(rdxsx`3&Ou9@*gJQUw2GX&ui{@6&v$SentQE?J>)Wx+S+wL?
+z)LTfN=|X4G;4&3_+HB5Qc)i&UH5l?DN4MZ-wkj{1_?da{mIc!)&JL*JXq?M}GvxKw
+zdA;)rtq;#zK4+WJNXm^0<%UFUd~n&?NeY*(li=)*%iM8RXHv7e9miQziCWt%C;T*X
+zeNbz&63vooETr0ME#zCeOt<{kgoTantUEWEj)g|o-H>N7C(okJSxidqO!rhlih+LR
+zWQY2I#hGDR*%O7b=3FnyY+=rtXSv@bR8OePt<Adk><*s0a*1+HqO41l9ZHLHcEFq1
+zG3v666=cadLHK$doknhw;ZK{&*?xMd5rO;DO_}|gVnxUe7}H$0sG2fcTnu-qm#GQ9
+zv1uVVyJOs3>JH<Z9Y~2G9=+9R9u$Lg9x*yiMd^k<tJ<C7tS|hzf|H90Og!mTFnlHn
+zO3?rrDXTC`g;Zf#>~)M{VANn}#G%Wo80Z0#E*>?Bx{ZKo!|2>umsKg6H6{stQIhN^
+z>kCJwCdu~}4s0~G9qoWSvuZ1>)V~So98Z$%BuO=%R9lqP?@3(-W<Ac(H99cq=~IBG
+z*PEtoN0)G|^Q3u&W_L``GV_|pti>JU*3u4(Wpfs*@R~L5%xm7`tEFD^8(2%MF7ulE
+zomHPR9yS;n1QKx+X7L>?h*OgNKTK0<K;lgoDQo+8O{qB<yLJURYj&nX&EEdF<yr63
+z=WYvO`#Bja<UP<?2lNuKp0gwjN(p8BJ_$ef4|C=_>wwSC2X_%Sl^2~SE?UaL-4xx0
+z{xu2Xx=hLu0KEfs-qkoNcNPk*5=p1|iqWCjkxe^(ZAYyKD^^TD*-90awVE=GJzlV}
+zv)Xx>t+Q9KZeC&DZ&PN%YPSD1Wv}Q;n?$~rvi;uB&dNIqjwJ$GC0Rcn$}S;08O1iS
+z2cORti={B#V@<N5Y%StMQ|Yl_XB%pEjz$$Z*MT&n!<BSy!yxAXbp-FIGnIBPBpk#Y
+zMv}EPES*K)c4$;8te+#z62oPMlE#JEu~1vuYwM-9<^o-ZC9@}1uGP>|$TWsDPD!{t
+z)}*W*nk6E5(m-2LnT<xgp*={{QJcEb*$wJA)WAM^YS9I<rgoZZ_GgqO_O<A2ENqw^
+z55m@nU&fC}!oV=JaTNx~gyy$4_S>;4X?9AB1>!dqABx)2;8xdfLu(qB)EwJ<(X7{8
+z=;2Im#7oP3Z7Jhmmf$$4-sYn7*=(FGJ;YcX+ZBO29=eHYbn;;3$4#p44BNfTCQ=f^
+zHM5>lR&K*EI!nRH%&95!Q1nBGWoL(!<sB_Ujm#laa(1AQWE|(2Ksu+Yw~$(F7Mb}Y
+zrd?-goB9!BF!<!GM7G<=vmM@`CB5m)(!O+@FeWbFrd}(<!rK6!SoG5bXLnp`YjC%#
+z*$&`1Rg?CZ*IeNP($UUl9zzV6Lb5@e^hYg%HbByp`F#w$JO?{u^F`NqWpeG}oayc~
+z(3oGUxrM!CY-?b_DsEKS0Z}DN8&-*Ix99kAZDGD>u*_odOc<Iln6N-5g<<ZEbI~}z
+zBr!i<*a}BG`$TCIOuvP4Z3f*NMcf>ogY{Zk8M%R0(#-~Ryb>aJSe^~@W}_MsRg&rL
+z$yv^<5!&AZjb|F;WzM*{8e_{d#;wj+REeU*hbCA~w%Y`EUoj!@qye=hNow~pokdBL
+zo-|?*T0(hdky)EUqp&|@(Q#gnXxTM-5sPJW7R#-i)M=ib<jL%qV(Ou?v$=%?5;>H}
+zVCyQ5C*dkJt7x*&7gfIFx?RtA^*-PEQ1fy6cg%N16P6G07_*u*YSg~nS#MiR5h~)t
+zyy`q-<KE|)dC-^7GnSoo$G{9ivp}LTpBM%TNoH8G6+aJOW+BZp4HnWo<GoWl&sd49
+zJ%eFHx!Aj!XIkMH^GqAT*&W+iIv9g$s>_!=3Fw~48-U3-DjUcRY=p34L|LA-bIhoQ
+zM3po*MHs`koNV{F2(m@<dv?f^Y&uKINF2&|pP7H;F1aa$-Fbn%J-0IVZ&I9j;As{3
+zQ<JPeH7Pc8wK`T(Gjk23q}E~MP%v}Fle{W5t7u~8MV0TkuG;fwovpE+w`*GWWsqLA
+zmS=n~m>IG$J&m=qqK|5o2S);jg}&-{g_~&&*w&#oTIMlk6`WR?scf^gNEsY=Ny7>z
+z?X$|+ph*Q;Tc(-SB_Dfjw$T%oZr-Xj)t7s9turWD?v=baGfpve#*75&;R*sfsj4NX
+zc#&sG!b@E;lHUB6)a)Blc<&g!85L)TRKxbyn(u21hR`aJGmXQ}-fXyyB&`JLoF0nW
+zRBN{EB*~+^p^YkO=G;ywGQE4U1BE1G*<-cHJ?OQNhHa;XG;F&pgzJ~t&=Y)oI?i?*
+zdDgc99B=uG>klCF?t%M{xCedkiDBDMaCXNl_p<hTU)WI150@cn&in%R1UM{T&r!5T
+zd_CK-$Bs0;JTB>&IZVhn>oUV&WW0K0)6uYW5<89xJ;p?1j_{5{cZ31?IUFt41jBqX
+zWvmmytS_@RCg~<MhMAZ%YWFHytfz<OS+XtJa<+&i8uJ`~*C7+$y!q@Q5=UOHxLjeQ
+zh0+$nLQ2y_D&Bq+NJcZU*&P?!v6p9Mb7`Z<Y4;DkodpzeV}<n=*(`<5T=C{0P3XV?
+z@5r9_ljSUOHsmrL%hb5oT4aV&s)c9N*5ZL0V$sGVXPP8Ls!NEY(c0_Oie0X-aVqw5
+zEYFO1j!_lP01?%avc{91p55^#ExUOs<Dev@9Hf1Tl-{VJ9%(7xjNT%G$eAXIX7m*i
+zw@NU)I^)*uwdRVe3qgvLLW1EE2}X*TM$R-zNHCfw&e@L7+m;)W87A#?gH1Ynf)eKc
+zcDle_Kv2f<c!z9F^SZ=h1qF8e1Lv-i_CLkn8E@O7qm45D&&Sq=RqeJdWR~aJ>?mm%
+z=7Qoiu-}BWV-#BhyC6tf-YH_9?&JmcqsDx;ie?9jG~jO<Y}-OcnGD;nR#I{T-q8kU
+ztFGPTDGb$_2G>StP4z0B2%#`CE-aF<kUdjJ=DAgNq#rSD+oJkP6}|n7G_Bh6N;X)`
+z_IjeqL%Fu(+%kD_tnB%w$zHj?ul?`x2e86H<Yw)cT?6&NeYV_a`PUL{o<PY9R<X}w
+znV<GOD_LC94<m#zhEapv@)^8jk+Wb+{gfDF3VwF!QvXw*r^k%Q4z*cB)HY1ZEjd=O
+zlBHgAOVLu_Mzmz9S3ZWPbYJQ>5-Mw0A<35dF45W>D?Jv{Qr~VNE%jzn?2(F>dMlCb
+zHu4y(yIksf;TTJOA3@%z@%B%uCU=~XTiuYn?$eC<#j7mwkSLa?SbpR1CSKjLt!?2!
+z`mEVEoM=Z4rDX<GK@804eTg(grM`qxP)mb@tgOP9P@XHg#A%q>mxuyd^lHRAXM2E(
+zjfmyhqE~BFLq$7<p%x`^zEf2H93^pzV^I7u8f~aUc=F~6vbH)<`8?+#FK0$4#TF1h
+zC^FF(%jxtZ%$%JtrQ^X&=3B`dRh=Cti+RrcH!F0brF3p-e`r>x?O*ME)q~@GReONC
+z;{cmdQ<U7nlpnAD#EVn@h}ECHy8=rm$0={jgn{+H@3PuGy%X?an4PBFWGZ)0$KNg8
+zab8$sP*yo3@<*Wg6=Kq6Z*!A&Xbl@wZTU5<I9F?!#o5QHQ1KepM=5K%R=1??VH4ao
+zmnurkUWm*5c&CjKTL^K<NZ<YwR@BP(Up7r>Cl&1CO_=|?_fL#R<$SMa1c_1ki8n?y
+zN7l59jh}DyhU2Z-qGR2Xvmf?sX0LWksu@2{JhW6!Kc{Q4_mkBI3zg2qu8r_yGu<tD
+zVvQ|-OS9RF4Ks1)-zVU`0Q$guNFG`{K|cg>Oj`27sXZw0hq@+9Y=Ghw)!e53rp&*a
+z80;*Zz@JX|;+4)d_BLgHYXq7(XLn?!<?N<j%@(RTYumkA6Jk?4GjyjnDmkICN7YQO
+zPLVwBs5}sk)7-52E{wK%V{Rw<JT$gQ(Q}2oxgI|}`+zF%JFzJ%eShmEcWF%yeczY%
+zm$@R!c@(FSRo>!Co?r2DdQ)cQDC_8$+sY&-cKqAGGG)i)6Ui<qzr7qc-c4DR;sI>q
+zSUSUrFE1VP&N}Z1mAr3eq)*%P)Ar11@zeIq^b(KVl7qRY=Vxsvo}Qnz@|3(~`}F*r
+zF5mCj5^gTa)BXk?)YJaP)Bc7$>Bgu1XME~r+-UcC|CjsE`tZ|M3*Q};y+4LuF-~qg
+z;2R}6V$ow7+0~d|Kfz|oJ$Ou~i%1WMC%<$|dswzUnp|Czv0=&B3u8LA+UOgX27(2B
+zmrc|9MzC?j7}#EpI<i*BAax8oV?Kl`RFYHJc5xKVZ!!jxy&Jnh)x~Cv+@-MtE2=Xa
+z?|1(W(cR6~>$*t;JY_>C-^E1LYGSJx+L4^EDcbUF=u67juCwHot)j`+ie`)7+6t|(
+zLCjK*zo-?jZ8^tyYb*J_<iC3V_Fu}+Bre&nJ#BBeW>4E&!5@9v-kzS{{@2WJ%x>d6
+z#LjHGC7s(e#iJ2kkcgwS9H+XE-%(Q(A1jNGl*Nb3;)7-J{<3&qS-iJ6p51gyX48}%
+z+P`{gc1JgI6b_mB2$YZNY!&0I&Q_qiXhuk`Q#pIVi7!K0bXoj(zbmdmurIxqwEN0b
+zG_Cn(UU2jr9&y>C8?STcPd<6$B#S$c`L>*g?dNiBR(8oPx`-mB_W^FJ6w<e95>l&p
+zxsaZVka5(zq_0HIoR;tEqRMGVL{*q0Y<Cj|w0uX7l}8u0qKC|%+{b0+@z``S&k;X;
+z1llo=P`S*WE14G>-ID%Nnd|fQm#eofpOd_n9*>ENUh2#GCtt}6z^>;%a^NdH%Q&ae
+zvpwfCnNw9{_FTza>oO0P%3PC|tXyV2>`C<O4}R>P0X-1Qm&wLklKw?P==pUav(Bog
+zk$FVVT}<XNLgjk)T**9PbW4UyWggE<Rxa~sJ|{b*Ft(uzkXf7(+faFI!<oCDZ$!b;
+zGbUm(pT(G}cKgfT+pAc5ulQMO`U#b{#&gx0VWZ=XwBiw&8zj{wD{oC-K8LT^R5shK
+z3TTZuC9P3;TI0;UHDA{gU|s;!#K5S<$M5J7Rq|$+Mf^?e9q040S$#TpP~Y{?YA&eR
+z)=*~!w>8Xp2Z3!3dglOs4K+s!b0^&@(%eD!0pHNod5Z>Lt^a>bWTz&dq_aiWH%a!!
+zu}v8-MkuM6nd9$QajV2P6>lU|u42!XiaU*N$ylk1+exji;<kKF@@U`Q4M)Y|l&Dzc
+zX^Jy<6`w<6wdD#Gqc?x4AW?CPiuj|$yowvIqfEJqudk}&*N8NC&_%$mRlLmVVpiS?
+zFR8dDRNPE_x2?F|xM=QcAXKhm&y|XsjgAWkN~}0dYIPMa%;#i>6vm2G0V)=!M8ztP
+zik-Qu_;Ff+iYIA=tk`B{Q6(y#r-;AjmRIqw-c?1#?}J0775_w}xr0*eyQAVdtE;hV
+z$HiR?fZHkh4P82EPm8??nJtUCe!(tv7-!^|&{X<CtGh-+BfTvZ1L%CpH{}jmAT}C6
+zcPKlwx3x~gM*H(ewHs?E$G<nTZ$i1fAoDk#R02zR>4sYlvJG{-?_^g`mE6x@>?-zi
+zvRXcRwbsO24EFVNX6OW^<u*;?iD<ELX(~OT@nTN}`f|^x-1CvAQ(NF?&P6E;dsCu}
+zN~>=fl@{MJswqS+qnhxf;u=RQsfH`5`YNe<DyiBlsoE;3mQ_-v%c-*d(YfF5!;@rn
+zN!B`{=&%O&Z7lBxz6UMp#d`=DJEG@B3fUze$*aaNL;qSO8K&``p^dmAC(=HhO$yZJ
+z3-bcKvCSz-2Q#@CvG&Ee(Qp5ryr`V4CGY&rB$+gpR3ud~fowF0cd+a#t76IY;zm*+
+zl`rf!D4{1MxnwP3<EKV0*@A*(iHkRrWPN$&u{vh_73<`6Y<m~GSTeoRl1QevOgxNh
+zK^V!D<dSukOLnt7BG;M5mYkxQBpWS~Y*@T9{-su?_}Zdk$;R^1_^YIeWJ*Uey~g5_
+z^_NRFs~}n8uFWLbRFPy8F4?3(yjX7^02E6$QY6`EKAas;I+7{LB^xW3>=HB;I!m0g
+zbC^phG)JV{>{}O`WwZX-OU^%_+kAHo`WhDh<Prt{q;9j_29{cXgq$U>-Z*7)@|)9}
+z7pB(F-@zp@o~h_7cf5}3oYwCsIC0kO4-R*B+(mI-V>|Fh3-OZGoE?WBpQJz1KPxE4
+zcRaHFW0+#~CHRIJ#<S+X#MFG(5g!i5>;LA=7wfqXiIM{S`Ec^8bWTaGXZicZqlRXr
+zw*Qr7A#}ZO*r!~FysjHNUD53Sa=tHgE%(9}EpHT0T@kn0zT<HfTV8Zl#!h;RRBV|A
+z6+5keRU0b)D6Cz@3Kdjr>84@}NyR54{ok+Rwjve#F3~<kz@cci=GbRa#VYPZjzq;>
+z`7n+mVKk*ASFx2ZnwU(*J!mjgToWojrbNXBXFa!cIPLmv7wZh$AI_c9n>P)o)*ps_
+zT56)%C0(Z0mzd>Rj@0^!9Va4^6XHsQPTvJP*Qr7Uom#r-)I!qf4rHvR(>->qn`RBV
+zB6&}%u@B#*ACY;yu(Y>WgRRt>Xs|6G<`YN4h^r*i;HI8(3*B+P+^z-hn9l9W6uVqM
+zMz3sE<Wm(~uI(Gl<+>XvbGc?8z>ARAZPjY#pIH0-opuLD+51-inftP=;U)f<ecx5b
+z<i>n8C>3Pv%96~`RwC2C-KS?j@{9We`-JgX7t>-Z*6TTT_z}Tnk;;4B4KnY-_gn<E
+zpAR}s4+=tO6Z<y%6gx6CM@LXgl!Ep~WuJu4*%r0TL+gdC%tPy`OzNskYV)LGKd!Zs
+zN-jVd`(>3$3oCimS5nQZOscC)N>%cb!%`;1WM$GsWzvWz7224MD{IUevStQ$yV{0v
+zMpD5Me9-2Nj(&>k<0ybh%cStfcs-=}Fbjr$`yl(Sw9$@gj#J1kN$Y5_puWa`h`D@O
+zzHrfL1m|cZ+dUE6p=l*jxWXy_SyrK5dsRcj+4hLZ#ehi_nwDI?qAKhZvP(s*aHoar
+z5-=lW(y`3!fNEhbFgr}18Fq{%EcsZgm$1Lp`RPNnhWSlYe5kB~e4r-C3@kLT%ZrGO
+z5(|~Z9hu!uo^!hV8yCSusR_M_%5y<6<dG!ccZ#T))GlRduj|<@g3Py_VwtB&U^`ds
+zXdtxx`xrzvr#T?+U{~#NvtjS?I*3CYHz7V+(p4teZogGWJ#H7Mc#rD_8hR#re4LmU
+zF6s_W$4Jii_#_c}Tw{cS`5rISYn?XbeD%CIr8ecOsL9J$RE72U9MM_fS_>7vTGKLP
+zOa@d-MUU4aib+k6&x62w{Lb0d<H}5P`-RC9w|fnYC>CGTaY05>o-P`+db*uF=XCiV
+z4<<@YdfY^fdycZ!RPRqU6LwM-J?;uOJ?48{y2eN(a8ZwsADr*;WaCn`$884m9`7%R
+zlk|9t@$NRzMUWk>mY|CeJ2qM{>G8IF;iB%qbV<(lcsmh#Tr+HOj~D9oVd{KUMVAM|
+zsCtN17?t&SpXjV`uZ8UGdhf~XXDyRiOF89ZJe~9yJw6D5_xN{s!x^0`lg@2cK|fex
+zR4=m%d<*MWVkbQqJ?`W=r_1+vFi~nkZ=&Mr8GCE0_jr#b3`tp3>k4;eCu6+Liwp{M
+zKJH`u-}!-r7~{!?uxgL@(kyvUG_3&+Ax_fclYdpU-3Hd<Q<h*oUSstpJ)X)JF6nU*
+z<$JuA2tBU#xwyv*^;)ORalY#DIuAyV&m-pY6;)w9zEE^lxZXl`By6ONam(atHRY7|
+zczaQgry=kje~=S1dR&>PW!#!<r?vF>gkpS*Xn7?!V?>WTdCuwbJswPyn)JAd${~&9
+z;=5PCdtA+=b}5S<cZGLIkNGj4vaAjXT-4)F@)H};<H<(5YLAa2di3~cL7b$=+pV?T
+z2G--9mS8>JW5J}yyYhvLx`Qk5NY3|oFA;itOxh}%)eH4nr}a5s^?1JrqsIq{Rqyc;
+z(OKbP3)!dSNsn759|0<-yvK(T#pyDi7=yrj{15wCk1JE1tAd;$SZrXURp5_D@Sl_N
+zbW!xUljoc+-{ZkVsY#EUsO*@Hy*1T)e9#hxq%5lK^z0r%GRC_+ZOqe>F}^=iM~^25
+z7!R_?V58Ho>3^GjJ%%esihoF!^F6+A{aTHgUo-AcBiUWo$vd|L49gBqe)&<+?%Fa7
+zyKATQ$6c`#yaevP6I94{g2(6p!_sXhXd!lj2-jz;RmU<Yw>Q>Q-xuz^{oe~-DH^cT
+zTA#Qkp2+JsG2?NPn79ngj2qNicTUn4Ow72Mn0HW#8H*@y#tVsH#@fXcn{lCDv&1^*
+zD>I(wLCm;gQj(bCTTfy|O`5;#Vi%R*rdp~9bMcZ)5XP(9xEr5TH9jo)#zC*DO;P2}
+z=Gx$6QS8bY6kb)sudotBH3qsbqSiwEe1TuDo*9^`w05KByCfscTf3(kgQQxQ+pBfy
+z+}foE29I=#R1F3lX=CSJYe%z1w(3-)U>ptD$o4sQ0BfFWa*XuTVvBEVcXQ{YDCd{5
+zx~-2{CnUcsV5do&?LmRtx@G5WeWAKp#_fl7mRYcMr}YEBu=St7-ECc=f~{M+*}8=)
+zZT%c3>S|{o<+iRJcTCwW)DRj@Y<-y;$E7<0v-Lqsuqk`kf{Cq<5c9$%wl1Q)t@jg=
+zTP7tGP1%Kd&0Kq&uWY^7gR=Ej1<gkL2vyXS*m{?d*@t-16fem~{Kl)>xEr61)%fsf
+zv2l>Cw-G9`bw#l%XHabGVgz}+fo#3gLb7!`uE-SM;FHYkMxD($Y2Ma7)fj~MLoT;h
+z>(aTcOAXk1zrnzuLC3Jw9JW4Uk!rU7Qa#P~U0MxuxQ_G(N^HH_d0w-zD?iV()Wp7*
+zbQYcGSx(_R&j~q%4a+_gc5c}U6)fA*&9W_2Y1!{W((0C7<dblMHyCC;_Lsz7@+S(T
+zBx!#sFte^#+k6UNXu-s+8;DgH8*jOgoHy%vM7V!a@6+TrmxW5rrfZ$4Y<i9dWz*wU
+zzYZ?yNUW$PvFRF>$TTJ|`g$>*b{V5?V{HaKnQv&x5VQ(2GUy2iiVRv&4B8nK8?+cf
+zK4l<-PMHK4bjb(*i76W$54VgcZ_1u(MH5qYiM_(CDZ))zt;dw5N96IoFcl|GN=JhW
+zP&sY;BkiBIOn0_g@ksk+SWm_IYKHPW(!Nk^sz1`Uoey2MjP=8o4h0IIXzLrn@_%LD
+zTmQFyud3Hz{yV>ieVYH@_q{OhXX?!lhK^Q%%uth-yvjE<^}d28U>_j4O`~P;@;5Ep
+zOY^I}k6`P03D@Kmg`$e=i-R&=dhk<{gabuV)@0|EPChl5EP0%d|K!V?J#*4z>&>tU
+zZ=M?L_Yc;4kO@ySojf3?E1INir(KuN$$xRKB<5*nX8Vkt&GV?&+^Edf?RT5cCgtW&
+z8}$IVAlWjq$|S2Xo+URCyJU07s4iJ5pOcqNNl50*;>tcrCMIbln^%x5ITb6FtOdd{
+z$tJWZbe&ClFmzUMmCJRe4Y$jjmrO}W=FH-n3rQv>lI(r<(A;#EoZgg5)><i<ZC72g
+z(GtnD`>w9D{AQSmy}^_fm#p~P0DeK6_okRgvd8S9xk;9sGL%ZzRw-GZi=%~A+h^1l
+zIvbo;vfg}7UNR-2GiPRuTrx3{WakznOLoJj+K$n$XWQ1O2c(!CPYrXtx9l5(9xIGX
+zr0<nBZ|d~@fTbpvH2cHn!hXOq3;O}5^$&HzYq|-h?lmb?cnWIi<~3PJPeDI5?Zf-)
+zipNM}dzl$-l-%Cg?H&x3b`q=J*=_lpyh@dXN}ZWq9ONn$6I7~|eEXi}hFXX3i%4=q
+zUss~m;ZQ5@^6*eL&K8UTZ!hEFq1JwXtlVnV#cg@KHZCRlV`a-JxS>wi*qgYamr&3Z
+zs!&0pmhOiMqL4!0GOgoTs?feNg{Dn5n{k>w7z$lRthz!Q@;P~hDhY);Gkew06)Gl)
+zLcfT<vN=;|O(^ul5`|8LLMKq@SSWO%G2pFJe!U2Vj=4fDHL+9OLz!2o<rEa^ggoL8
+z3w;&rT%igT6l&?FPzy<+dm~MCPyV_R3$=UYT~U6ZA&K2W>pU0=oky&?LTmFmd4(zo
+zh0ZasM>noeF$smbcX`cQcH6sLRn5CRmhyO)dx=do?-GB~UzfarR#(3t9sjE#v+1#N
+z7b3gqvBJj|8x9T?HBM~54$WqlJQk~Ban2=?<Ev6}&XUOSRiQZN6_Mk!a&gXcBgbdO
+z4GXIE<{mqW1e1vAZNp6D=omqDnY#q_@xL1kK2^rxreIJ5zItTCan&U_Ag`JotBb1l
+zH#2TNd%FHDc{Agms`c%el%;RyiA8DO+KaFgyxZE~KR`9({W4GYuewzR@!!zDck*lC
+z)n9ln>EGdM{kxX3^lw@${xki1-J@NMEA|6j%r2RsTQtY)dOz^@eyLTyKiDXTsdO`7
+zK2&Ma!b&Rn>}3VzgqJ1NRwl_IE~ApGT$VIN^UIPZE0ZQFlg2BP#wwFWE0abllZGpk
+z1}l^LE0g*vlX}aO{L;{@b#(dW>5WX9IOMW~a9axwgO?+Dp>ng`26jZ%Y6*7o+Gas{
+zx^eZOHdY%+^jWTGlaTy47N<Xdfu=<TGx0f2LoMagr0B*```w?r5G?kh{$pGSVAZnf
+zve~o3-=loHh5S-|+te*1p-SCip0<;xW<sjQeyBF#T70{7@<X-BwT0f=_-U_r<3ue)
+z4zFELqdQ61KE_)U*_;Mceh*lx;1RN_D0o5-hS(?B^C7))Fvr-Ng6k}33ZArlDR>@<
+zRT^ouYNQlgtAg>%C7cGrb&B$)U{zG2V51HH!xZdQNx}8T#y+m{y=hJLy2acToPxj<
+ztN_jO#+2MEEgtlMR~s+z`<=+iqd>I~1$*sz1z%+^c$k8dt!$}+$0=4t!95a=>p)FL
+zDR{&ZOu?fTGzIrsz7#x0sEUG(Hc{}fQOB=mn1cIAF$Jrl5(OJAzY}6bWWipQ6g+Ne
+zxluLPEO?NFDs_vwE4ZJKDOdrT<&Ciyvb<c@?s7)KUTwT2?mr5dC|E5-4zE40;Ais|
+zNLaA@Ub8z&6+Bg4!D*Moz@~_emS75Qx1cGwSwU-LC!s2hG}=VLZAR@6>D+>skzxu~
+zMI{P0TK0HWL<;t*q~I<~^Sddn?p6}2)Gg+&;1)urU<FXHH)cSL5(SF~3ifJ?e=03G
+zC-&c!jGu$H7gjn^-Sz=i?oe=Yuu!UCTgdVUSot}4%3g-BUyJj{1oKP)Q*gZnO~EMz
+zt&s}}RcWNrCJL@I>bPyuEVzagQ?TkQQLxc+{$)j^V6RFFZm=|e``_xGLqe6h#oQHK
+zOUM+g01EcT*iSqs3KkC(?9~o9f&b`UV!>)5a(L}|3qIT453wmCIUjiobA?_k*9hBY
+z&*QYXP;?nm@B}q2@E!f6y=>xd*~bg)o9%u{KQXcF;1s`7qTQ!ILA6XpU%g`y)j6%7
+z!o_~{_i$%FI{U^Bh1icCzWvKcq8A1%>v#I%!9xGa3j^EiBHR$QPBQYCM)D=!?ODWM
+zNX&n?_mZ?+yYbSmPaidRvi$4QBSnfo379`Q<JYHSrWjx5{!laBUb)ni&6%q-<xa86
+zb{p7SF=z>9%EJ~kQ|_`FH5rc(nm|vf(n~~)HZkRXqqZ+o*p6$p>mkKVSrwI-veEJ@
+z>{djk>{ZE>M=i~NNXksPkAy09i@BR}FCjB!1!$Hxrug?3bK-$1d$j{j(BaaDJE0aL
+zhu5Ar<qSJftUyPWVFe1(w04mvR$vi-Gcj)kb5E;c1%Iw;1<w^}?x5ELyS9RjsyLjT
+z9SpCS$$ZB=yW_;-f!5gTLO1rNb4xjOw9kp!i~-+T=&Od!o4R~hS!#Y*wWyJWVP%<x
+zVdb=bA3+SOwJ`NzrBKPRvMd``7V=@GQ{_;of;6Z_VkHW-2#?pqHTkIf2d7q1=-;X;
+zbVQ`NgZ=>QTA`{WQRs(R5UL#+?7jUAq?MVPi%@(>nqMAj#D`}9#!e2-LQAkQ)nGvz
+zQ?-__F_k7%#jcGu8B_H}ZJ#2=n3_Y1jVV=BGNz1{J%Sa{nDVMLrkX7+-byj=m4qsF
+zi@A@fIzl$46rfq&m;o{Ja(w1#IYVCUfD?4M^f9K?Lget;^J8iOZVlgj6u!ga6>AYD
+zoo^9bWj$L>I{(M7uhRMZVe6IOLf<da+(C~4yY75dl63y9u#3@D!%V01=NFZXrfSEf
+zlg6O@xYSaU(ZqEi8asaeY&nYh2YF7&XGY2Lq(=MlM99X`=aS_~S-w0eWaFr@KL&U|
+zjTk36uSAQmFo`r#;s+L0QDSXXCB9pvxr06r>{^McBvIlr24wXS)QG5s5j0X|i_j@P
+ztV+gCBWTbPd{wfbuS%A0s}i9qRy=G3u?Oq7$fn_BNh0b?5`mK8V}vXoMsG`!g=|T(
+z(2_xS>-vaQskO(5^kPLXAzzP_6fFHM(PZq1ht?y50dHrA%bl!8menyTDEO{_(GpyG
+z8%Db*lCfhERwB~!-TvW|t91L}RlEKDBF!B%2<*DsRY`QapNy|ivE92$;3%uU?7Ox@
+zD9`EIBd?3vE3XoWYb&@-V8;6ac-~$sYy02%ynVy545M&Enz6K^krZ#3`CB*Jk6@yW
+z=Rb@}orf2dl;b^Z$zRhwQIb$uNjV48mi%;~B(;~7)KWif$+d-&@noS$+P0ZWE+~}5
+zA+m}4VUP`gX{q}2Sb4^Lk6QLT)>4z_T;<PWEweCpJ8jAH*jK?co^}x`dfKIQf7+#x
+zo_1Y7%|yA!ju+;;x5UpV>02sEZ9fSX(MyT@_h3o8t35EChXAyj1*7<Zsih|EE_q;T
+zIcl_jhwFrm`3I&iR(tI8afJ#kwsdQ;h1B9MhGey+p`^t{PfO#`TwD=sEtVHn_C)g+
+zB`vPDM9=XSmp#$6)O?GJpJ-Z6p~X&Ec%u27e2Wz-wAj+E#THVFKZ0z#Y;n=!%*qz~
+zBdMC#OgFKXJhIRxyW(ZGuXCRflWI3$Q+i=ijgN&jQ<lxAJb$X?^@ZAWX0N%i(rvA+
+z{N7iONSgehj-NZUGsfi1GY(SiKrAyfS6;L6^Iv7z=06i&_9M<(*HD<&w~@f%z>@ET
+z<NIJuB-$==1i=@+I(0NroA?1oKere+NUpS~g`kNya)4~N1X`TAyD8H>X+-uke#(Ol
+z(c<CR>CNMl>0`Ds9CeJkIP)v$b!^&{SvtY>v%LR^O>MwYS;7y0H1bQ4@(>#Py}X^_
+z+99j%t<&!x=eVG?<TsF=u;dKZlCrKaUhbzdKB%rY&^0<sd-CsG=~1a(k5nEnO9H{p
+zZ^TK?ZF38)upig^Cn_PIU0RZaTSb+#PtTI15!6wbtZ~MOCwas9aMpj42q%Xm^s5~G
+z-cQ!gcXRe6A??5S<E8x`mL#0EitQFaOWMA_P3G#L`~m*%Hnq*0y3ttLSG9?}JtQUJ
+zUdy(p7D-Y+LKio+H{ZO{-|VYVQGUJBo7$Ies><`LOjdtsQ<dbk<or2_|17g5Z9mfH
+zZ)+-zwsmWFo7yKy;w7ijULDQXi1#n5oc*v_($pSAEpBQj@g%P+AI|rxvguXjc(1BF
+zO||+<o2sOwse@K=QLmn06Sp<h-GbR2KiW+LuD9viU-Bz$>N0W?+3m!l_(v-_qCwQ+
+zrnV7J$T#N0`KBtHrYgsqs`50|>Mw1ol9HyHi&508JDT{AeN;uO4bB)X1CvJJkAwKl
+zndB7+`!=0#LR-n+el|Kwc;)=I=bZm4Fn%orE&*$XS5{|w8b~{5U*_!yKIn4F@gF8?
+zCe)-~I4}8T4PD)r&J}*P7CDxwi2bTiI2KdtSni_nN>b4^ie>y4RpZxkb9SPgNa*DD
+zoqCcqW*m0+%XDvkQg)t%aP1~ZHJ((aR*sjc#(p5V#boS|VwsyPmbH)nOW)dFHSPV@
+zFAZgRjc983exWGgSI26>HFNv2Kul`4Hv5(>k8hbpY-+>)ER9pV8B(X8BHsX!u7|rj
+zz2%9z^q+s0?n%$OPd|J$eAi9}OjG`s+_|(4A|2iyA}%}bD7{}z^-ZR;r_WKQ-j2#P
+zG`}#F+9O5XRwGh)jhm)IiA$(fzkbDo*`>fCPN3g&Hh)0Rt!*7fjGgJDPp?UTjgbC!
+z@-wRXmEGxo4YKU_Ae~>){coG5?wALo5G45($=OGqI?a7?h?0E^O?&H{boMlwdU~Bc
+z*VySYRNf!wx;RZb$TU8gSHnJ1^#%82mpo}Y&!#fp<f_^0ekDcgx4kxRsZDSG<IeO^
+z52R;}n2S`9=fC^?`r4WL?@;Un4XA@po6<)U)?{zQLRX@t%sz7Z`(OT(_Kd2vOXGRK
+z6uQES|L5_W*?&EYLxM5Quo-(Qg#$b3bK8VL+@Cfe&mlAPq)jhk=xb`3=enDYD~@fS
+z>1<nLuh1P?d*K#Gwv#&IN*n7!9N8|bc1SWX-<jj$KZ40RC26zW63iXhJ|i+mw%>yd
+zNIOC>45HYdRkHiDTB&Cw7@m<}N#+MlnOjGp!6_cE!e}gC)3_6j*-x2o8o_fO#&hNu
+z5*qvQocl1MUN3Lnqo~R5lFy6h+*RFko)A@bK)SH9S??(hlx=157xHzR7xzc!J?CGd
+zdJ5HuBs(NZua|F@EGh0Kiyy?xfBqZ7b!<#3OK0v$(%SQB*&&lWxvSUS!)eOiDgru9
+zokVxB0u2+wxu~VaCU-8F6zkHN=gn=(oIkgwDRcJR_^g&`8Xr!CA!ghLoV-9Uo-kCW
+z^JAskpJ)EF>>}?!?{0(Z)O`OyyV!4Pg;z8*-{7`<T6u#-O@l>Ht--2ew;C+M-D>c$
+z=0#hB6EAvq8*Hu}4{E5YxWUWvjVttUOFpf<!J?+YBB<72)v;R*7U6C+_%-HBTZ0o{
+z`scf8(rwg14{t1Ma5~?(LW7(0Y2^(TH4PR)wFaw>-D<E1cc;PTQFl^X)j=EMEp{X^
+z42nGJg%UIKi3VW1b|Ku;F=)Kv`;PbpXDf)e?e!#IZdUV;TN1J1S`R1pkN@aB&}XdU
+zr=*Q1zE_O~6&dzSK*gEu=NMt!e(%3rTlM?kE~ASVxN>!h6@D`-m?*VOkuFD})|6`X
+zIWM6ccL~ZU?R78nn58%bm*SXSEXHw}V!4$Q=Pf#47tF<vA^vaseNSA2226#c7auUz
+zO_@!%v4Bs}&#7sCu4q>WSNZk7WE;DMt&^WIvUu~slJ`&1TbudM;YxQPD(9!MGnK1X
+z$5+&+8Bd#n>FaB#S}wiIa?MrCE!$-|4U57Y%vEDn!hWI1udUFWWg=@ix9_?dtNe_T
+ze${~|gG;)~wU}+Z&2xIlozf;OuA_58`5e0BamgsI!Wa(6XcdPeyXm&P6Y+5$?`l}_
+zQ$#r`8+te+GI5P7&WHc908S2{TNfJXUP=r{6&$cpYVLv55jp<r+uXX~8j;(Ql%b*l
+z*Gpr&eLEeli+zE(eZD+_CAa0>fDl=IxEmr*+3;V|UncS-$w~DRS#fPd{r9aBk<AMD
+zI>|*AtE5b&$X=0){7$Xqh@33sA@aiA6M4c#9xM}C6J1ihM7D{~M3#{!A}dV4sVZp1
+zDk)PbvRC9HZ_{dw$jMS1BG21Bk;h!*;WCj&i>jB%io2FIo)eL6Y$xBt4v5wCB6~$H
+z^0Pu@ZQ%5lL$BNNoZS<7#6=z{6M49(dWo#Ki(FSEvchOtRY4<G(~ImCnaKWpdDc<W
+zJqD@xuK!n9P{pH=FVwO8=MK6ND0>v5qYnFphgu1y&#z{FzP$O-Huf)rnN3@nDyH~$
+zLA~!S@oVR6isBQc-!^R8)wT2GpM95p_L1E%nBBCs^do`|JTl~Io^IAHp6aukNK2jt
+zTc6v_uzDz)6d0Yhz@xMvyJTw&#e4zg#-fw;;u`LZ0zMG(1;(c>aAOp3Gu-fkXagT3
+zR<FUIg+2NF>5QP{S=e8y89+Z}F@TI%@Dgy*Zxzt_o42;n?RH*gJz4U+3y)wP8e}TB
+zL6?bNnjeroXNF!YtNG9W-heu~aD!@Y({P#L^p(ZCO5^sHSXojFl9eQJ|C@wOe*E1|
+zx3f7lAd{T`*$<|VnGUkvG`v6+%J_sXGh-7UOW}r#@u;1rUwZA&RFjK+GP!0e8ZY`5
+z^{ij4<%5R1r;KU~J6)qMx^jB^EZg8o#8}FvuX3Yt$+dcwZGvKB%GhL*R9S0Os?z9-
+zt9+kEi)kgX|7Fv(@(NBU_&F*4x@2ihHE>UAQdnM0PCu_$^!o!ZE>shvX4+~vA6bHb
+z(%4&8O{%CGg}oY<tfFd$HPE~@G1it&*P3Cf>8F~(vTC$QC#_M~tLZPU#)szxhws+#
+zd=Blcn4b@!EW`7W!>SF>tX-Rg;mQ<Ul<T%?OlluecD`)cMdO#zt5+dP-v<g`9;bW~
+z{phK)bN#P5+k;(Cu<Z)$3~YC_UAP5H3`cH#uQcpmH1~P1ft^@?z7L8v2Y&G5FQyGv
+zBhc<aJbgXpXuYB~TW7sC^E1r3wsTHbNJ(w(N8n=H<DLqFq_zo(Eib#Gwn=Z$6b&*%
+z^4bb!TvD4`v}!91ry_!+HXq46yQrwm9Su7bt<&i6+UDg=sEAqCekaW}SznDHscoSc
+z>FfC7+KR77afLT~eQM}352_Pes&P(!+f5B^twx}#JKDr0(>Ru4bCTIGlHZDa5hKF?
+z_DbUS<Kl<!?9LX5wPUJ<MJLMFDTMvdaPcOfWWN<ZLZ{tJym03y(f;cQc8Vb>@#DOW
+z_7$s}Lh_4yRzV2mJCiQ62>b1>?W<XwOI}Qy-SK&Egm+T-heM`m*DQ^|tF%UJOd2r<
+zAxavdZliHt%$ZmtR07qu8!YLx7C3F<i7G2;LDVYlv_KMh3%t0u;8V6H+0_cP#k}Zf
+zfg5$Vo4Fm^B2j~QWj6Fi3tE#Fh^nLoGIQu_4V;O!KqY8Fo57MEYk|{7P4@CZ(gH8;
+zdo#c4#arOTy#){3+G8#7wI|;PqpE~Y+6;y!43ZWw<69prBh?H^R3$AKcX}`8OsoYe
+zK?_<8*a>5W$x*r2G@z`c1yQT#*p;i^0x#|@IJ(e+WG8dGTT!3M;E!<l0?%Se3x=Zw
+zX;Q5Py#z{HFzEDNES>{tD5wN2Xf{|fXf1HssHylzz>-?UowAb1Tj0g51-`2}_F2=d
+zm=(L4*H>FLfBsBcHNOm$Ikov+O^=Cezrkg{zhzo3S|1lJWrduBN#o)zlj&t_{APwO
+zR%90oB>AJLokOt^0ny<=ds<AqKjM9Xy@90*Wbtf@#c(&2sm|u^1`keiHf9}DQQQ>m
+z%i6LiuKAas8(GQJuVkP4TdNTyQ-7P0Ra@3JD#vSU_uw?bb}F|**selx>nvZVdP%J!
+ztdd<=nN<ZrB5c2rRa+GYmE*z=dvF?IN0eJ3>}a9*SQJOI;{+>Y;p<jW*mqnL)d&({
+zCylIZQ8hD|QjQCok~yN9ifU|qwE3_?Sf2~cihM@5ZwNH2S8$2FkqJAm8bKngtsShy
+zm8$Wz!)<m(VbjVj7S`8f=3NcItdBfvf2;G6AJG;p32r1<r2$GdZBO&#xH=zg9L*$;
+zUzZN%y$FAg);D^748|V8qzuVefSWSE=hTOZ+nbpjz;b212^I^l@vzA*`8D}&Z-dDX
+z1D89i+;{+zTsK+##$!;~<#ecJo|!?e-s~iQt)!<Gf7rgMGvUf@2Z)6r+s|R%%;q$i
+z<qt!5Fb6R&yG3=&#%OMhH=|jQ+0c`3uA89UIG0Ejq>&>w*5aXg&cZAtYd>v8Epse8
+zX?H?XE7DB9>2s`Q_CtnACCiN2?mztTTElyYT5GnSXWo{zKJite^*;E!2fg(+*z=v;
+zn{U0cX@o{-B3O_{j@WqXCyX>4k8YnQY$s9Z^~9mD%tGsHRFWU|Evh71Z#i58Z3Ov_
+z_tb%6`bn>R)F5iD*?xg}YS#M1&xzKz8=>7vM&EaO>FE2ueCszlyM7>PeUL_u*m&#v
+zoP|g+*e(NG=!;q(G?rOt{gl0()}5kAQc1Mla{Q+Ple0X=pQjEK(|fJviqly=aFXRO
+zHy_DbpZG|s0Ez~eav`9BZZY@TGaGmzBN^zHZWnJPf(5Ax1{-gEtFve`@LyJCQ$nn$
+z^+D4tnnLR*y!Co{FR3J2Z#n*Rghj3QRC|Xqq4!$N0YfOSwZ{Fc`}rDuH@`}{u$q5$
+z4dpqN&`0gn{j1!{DgUvpcKJ2=_vQY_zaJ%o_@Dg#)_<LRW+g@bF0b1BUH7Mb14UK8
+zKkc^2@rkwgE;K*gek`5~Z78~O>`Jln(O8^pKMVK#n(2(S<aB#|HADSA9|2*gp8?7Y
+zwfOQe*=L15u6wlE&c|{s4A=Z7U_)nS(=GV#yLje3W_Gl@Zhx`QWB$#!O&I1fO?Yq`
+z|87#b6~(6t#eFgVPrHXcrxa}u%)6|UW-4m;<=%w%#do^e7gjCapj7v5(;l3r?OK)!
+zPmZ(U6b-1m_>pWqXUl|>WwNvdvt2ogzv3Xjy`sHYd5Oy6Y<uZcwdVpl;j-U#<|;_N
+z&zHlYto*bkyXltXA;H_zSw6KhmoL275SLROzK>yvD74Psv2>~2NgPujmp^1SN6(gP
+zeuUfFYtJ9JwQ>7Wt@-?RIG~4JGgn^zP=1ukiYr&#D_0*TIr1{CPm|}b$$iAz$F$^9
+zc}xj2S6=>jeWa{%#l3RbUvcG%<7L!(%jW=U`FT;fyE?mQdHI9#;j+pV_sZq%7FVt~
+zmHXH;Ct8*N(k8=OlDTcojD24I$a}D?a>c!Jjr-!tZ64qkS46;Xy8%@0YrTGyW;fUR
+z4^*2%-%oj_&{nZIfYuZ~mP^i3e8ZC6#9?Hz9joCaC>|M~no7N?IUVnFc6@WgzG;4x
+zoxhzAEIa2OegU2Q^hv2&{-0}_J7?W<(${TQ?1uf)^DWi#uG*eHX3Gux-E)shrt0kf
+zsZ>K?5?53g_(yUHOqX6l^j{EptgQaOH=c-)l-pfQ%FTp(Xb7BjNvZ^|w%F->2cg{m
+zXR%_rPg!?$+xoR<tX{u-#T6I7@`U3qviN1I*T3w_t5&aCpE_;D`W2Vgtz5Tm?K&&A
+zbj_6;+S=BxTfg$+y4Dp}w$`oMu;!xmtJkgxrc2kX+}O7ABC;>Px^C6l4Qnp0TeJG|
+zx~p1OU%s+#!<wtst!Qgoz2=g-6>I9wY*RV7zhlMa8&(zz^?woGGj;uI4}aNHQy;nM
+zJ*h7>eRkj5&lHn}efQ8O*+qXER{SwfmHsgd?C-S>75UAP-v}O++M^=BH}dbr{dr)S
+z?h-Ej8^wRuA6Iv#R?OP7BELQa`+ZII@^u{3>d(e=75VFTk>9Y3{N~7?PCqS?znHmc
+z&(y36`TL*k@=aHMIP!mr<sVi}e>{BE-*n~sBY%|otCer(rHYx#cSZg^^iQ?&T`!us
+zd~f7;;yG6<-~Q5>%XdZoUem}w`7$rhwaogf&~Ni`o-v(%S|Wcs{=>(6`RVxAy?kc=
+z^^rdv|E?2e=06$v)5)J&;N_>|-}0)N`430_bo@sne>(p4eB-Xa>GabT`P1?5jeI@I
+zsWv`R_Ug&>_FWtK)0J;K+2xzA{`Sb9uKf6-nafW`{->FL_^YtL-Zyyp7duqsk4FA<
+z@{LFSOZh3kYWit8+Zj(+zAf_S@nT7}@z=ZB%TL#TsY_?hZ`nou@GkP}E}NNud*n~o
+zzOKk$IF0^Cubf#w<B@-l_e@3q^lzBC{BYz?SHA12nalS^{^>ji<gcRs$s1=bpUQgv
+zt8_9^rF=t|=f^To!M`Q)f601Z%|2Q_<mIQekDF)aUl;jr()ymNT)#&@HZ%YFk9+=f
+z{ofGz`?|kU(Z1$S&s@GG@_*?iE6O)~X6EwEk^c$yjn&3yO79o&H=X>ok$({S;jg0p
+zy02LJwB_p~fAKW)L+zHC%hyGI)LdEr-7}Z3kNh`GV}H-`;;C8hd~<5n#@bo62ku*=
+z8)fE_{yhHG9Lr{ezt9iwg&kb`?mbR9$h*_&PK9prB~BN9W>vb&i}=akw7-Pk>6`a@
+zAAKZu;)DFFk9y^I+FwG~ym{aE?vva5eS5thYOjAQSiivQmmg|>3H{>DMk~IL@~<`M
+z<d524LRW?F^U%Y**E!$tPph^|zfx1X8+4aLH+9mk`F#+&@t~VY?_Y;*B<SS7mb7Pa
+zF0Y^8KsR}^*E<ux1K}|ibn<6Q_?_|Iy~I&=aRPK*r|z2H`Os|)I{CNL@w<V%y3=>f
+z?{?^Ff=>SKbo_n@-S``K&F@L*MuJZM?{xg;((d-Ncg?Q}y4IkRKQ<k|_0aXc#reg&
+zUDd8`fo?45X6m=C&<zLOO!Ynr-PE#O*ZVB`zW$tDxA(Qs%?Y}h>b)4c=JR%4?|Y%^
+z47!=x`(^0bf^MdIe*s<J1-q_yFZzBw=w_<-rO=H8-AwhKEnCtVGJiAm@3qh^47!=>
+zy$!m$ppze5Vpm1u{M*niyU^>MiQi+;H3Z#E{GP`ozfli4`J0K~snE3q-Aw#0hpuPU
+zuK9fsy7r(8zrE`C_&RhoYn|VVLoL<Tr{6$V8+0?Z<3Q$=sWr||{`_=$J^{Msjk|8g
+z`Oqy4I{Eh{{EFt&8=z~*Ilr0g<#y;c?grftq3hobx+kHV*bTb5td(`|+qHa6&@BtP
+zne@CKx`v>OeL>a!y+!=~dDnX0Dt<v1etuPck3u(b)2{hFi@qNXx|#UB7P^fe+BLt6
+zp=$}c*hf^A@4e7<-o9&oUxuzN=we?{mESMK?+eZ^_7_#@_S&EE7IfNYOlPMrg>Km$
+z&Tl3=)ieFkJ9l00wa|?Oo%SCk^)_wZTOP+;5^sa9`JP?Z`)%ktgKj4Kdkng^po@J;
+zRlPh9Cd<C*_0GiaR5BZaF7_!^`CSg()VFrc?}N~d2c7mUC3-2E@4pUR>vwm}?>Epj
+z2VLxAs>*lZfy`Gw+BLrupsNcy?Q5o!?|kUS9^5s*8=xBwx>Wi47VKpQw?o%6zH5Fz
+zgswg4V&7BI-Vba`r8cEfM|6PPUvSb{;LB&F=AR0(JRW*d;DO*vNPp@+PyY${Z>iM$
+zA&_SS^S=P@MgF;w-T+=s`U&7u;J@DM^!I?568|drIM@>Dr-AE;zXs$3()qvM>h#|P
+z+ejY*4<h|N;7^EO4-TbLCtU;H1+D<OFlzoQz-z%n10TEx-4oveD*fYNJNOas654%z
+zq+cBA%fVLCPl@ywMtU81G3k3n`fu-cJ`aH_Nxv5q|4&8w$G}yjzYu&K>9wHrIt$zz
+zy*{zU@jIaO`i+S9gPgw4{}A{D<=zGU2e=YEg!D7O{lQm(CxM5898J!DYM3!feUl(p
+zVb9+IJ_N}_;C1Bx0z8-e`$5rt7Q6uL1x0@|DEbe8qJJ;AocwD*(Om$Z0XBo8KLZr~
+zB2e_N1(%S2EGW8zK%S`_kpe~kS2{`be*i`QD99f5h@XR^8v>Vt{h;VS1B(7%K+)d<
+zzLoqeD7s5P>2nz<eZDEM4wOC*iTLlofzLzvUx0UlcY)IH?cf&T{|qvR&p#LZJ@|(q
+zr~f4=`YqrS;O9Wm_keE#&j&^SA76L+aZvR4fa<S)Q1l-Lo4~h$qW=>_lIK^T=<nr!
+z>enxVqQ3=v8`uJh{)s!B{&yfr^S=eE|Gx@~{x<L&a1AK>{lRO&M;Q#lFM;jg=fHE(
+z+doG7`bb|3Y8*60`murgME)#rIr$F{I=^k8_}vX^oP0FW{~_?4$UhsDJuHm$!y^4q
+zP~+&2Uv+*D1l|sc@25c7MK;o}i1b!a<E$~#=LYWlikEu=d@K3C1l8{0NWT-baR@$-
+z^nF3u&D4O~%^w1XLD|h0B7Pls4fH31^`zhRWshGCD*n`$JpNTs@e?Edr!RW^YEb3t
+zBYy7}T&~*!*MVy96`=J0hDbjqaIeVU+3$M(1*mr28Tikj%6|ZqKG#J0lE8V9e>5n)
+zr6T>o&pV$xK$RZ=rJudQ1;l^L?*Y_;4}j9s-Jr(Toq_KIrKfjAd;|FJ(6@mMxs%QV
+z4<&vkDE@B%#s6UN--+)Bite$`I^6^)x?h8m^HZScJ_d>|2a4Zypy;jzFNUrG6y1rS
+z=#B<O_Z(1k&j4kg-?`oCMnKW^gQB|)6x~Nb>3=bZsn0(Q)V#WH;A5Zh_-_J#7`Qd?
+z%YnBAelYNcz((-7@O?QbeI5-;pU(^Y{r_=&j)O}7F?bww-vTAyy`c2>iAeuYq<;{U
+zzSc*2YouQUN<XJW`l}-S<)HNOj7Z-n(r1Bc|Ia_|?Yuwm&cM$E-W-?>ye4od_)6qF
+z9#s2Y0ID5_2R_p0?fW^X^e=!K7dL_b25th^fNux)qWr0##?#+E<#fLRMfWZ6a_}4A
+zQ{V?c(VYQ`-|?X6o&#PA9soWL{_>Mf*8_^~A3)Jv46Xy0f$}$w1;y{-PdMHEpy<8;
+zwt=4j<$r7hMfX<lC#1g_WGOi53{duUJSaP=0X1I#?Ka0@aE$oJBAx}+zwZVwLI0OV
+z`dN|wMzEFimq+^Hk^XG(V$z@ZxbyurC_cXgSCW2rq<<#TKMAfPeF1nPbo+x^H)eq^
+z!{2-2V~V6sx)WRk-RD59zn=zwM0-98O73jrzW~(yF!e8v4}*6S9|2i<=C1;O488@F
+zKF$OWfbS!{PXBrE+2nr|+yQoiqFVxLTrL7%555|dUCak%7d7A^#J}-TFaJ4E<!=I2
+z{(Mm7n?aRNgR+;`g0h$AfGYo;k9heZP~|@f-bMM#K$Tw(s{C6)+0hxG?C3?H%Kze4
+zFaK>&<p)5Oe<!H&Ye1D>1<Jn81!Z3gK$ZW?Ep8vb1!X@EfkTx487MwOk-rJNmi(oG
+zCj>q-@ZOufUk(B1K=*GSPNmL6&*Px_@8{q+{2l<WBmdjra`Nv4MRzN>80-Q?p9MvK
+z9Vq&1!6oEh28wP8_(re+6#a>y=#K|Q|5EVH<R1=-ZV&J@=sx@*x3>>~vbP&S+1pT0
+zD)n0OJ3!gf2_QemKL1xYrBbJYo4~W+(*~-(%Rtq)0#tqHgKs7O3{Z5x|7Yj(3-Dd!
+zk4Ah5ypwn@cn6q^{L{ce;;#gy_v66*;qy%JdeV1v^Bxb_14_PY!4_~e_-yb3@KJCX
+zsPe~xhY~*$l-)iP+zYw)1pk5fBoA}W27d##gAam||LdUa;sc=g{{txg>p=0p0u=uS
+zQ2b8-W!Lk-r@%R&`0ov#3I64uod08>`r`pm{67hb|387^{~l2MuLs3{DJcGnLD~ID
+z;N#$YQ2Y-A-vAyAO8)&o*~f4H(fQvAihmy{{<nbQe-kMFmxAK|HgFyIW>Dke^`Q74
+z2c8ce4T}Hs!R7G(>j#|wU7+UG+rgiJp8_>*dO`8u9Qmh!*OLEamyeG(frk-)5vcX)
+zIpE%iQXBZ|_xt+vLs04Wfm(mR3LXRA3i6BO^MCk0PrnyDn)qixrT;4D=|2FEApSK_
+z>Hq#-Pk#`U9eg?Bp8(Zw?~M3mp!D1j@#8`1WuJ)uIqU1rJ)r!O{=i!UZw$OD@Z!L;
+z15XV+A#iTspKj!ggL)qT&CdhX{yPJ21m)*l6Y&ec<B6Xd@sk3d5%|%JubY>E(*Mgr
+zt&@M~^!R5%>9Y%zepZ3vw**wZrv)A!c+`75zXnwPtiT_?+v693*HF)~pz8aN4zKU?
+zpyHQ->Zdn?s&6i+`VIj1hTmR+KfS@@KiKT~cYw<OQebD`Y*6+6gvmktKMJaS=SBQE
+zp!)yMOirrrJD}?OGAMqZ4ZJ?^RE%8w4g|&ThwpNJU7+GkpzP+?3=YwK22}c$pz1v?
+z;yX6EJzWoq?hT;mo&k#PyF?Vfk^jlgjsiuuo&PEQ3!vz(i1;y}>~Hv;PS**Ft{D{F
+zfe|0M+U>FnlwEELyfpBwfu{x@ANc&h0|KWudijR~zaMy4;O&7Q3Ve6qm4PjRO9EdL
+z_~O841@0C2*i~NNZvuZ9xHYgFd=>4z64bc37*zjV5LgdtTpShgeZaZI|N0K^_j|$T
+z6Tc(kH-K}9UmfwYz@6}aH8=$x3H|}x8=MW@jtxA^0e=EYuLEEm`Tqn;o*O{Pvnj9{
+zlst<f{vz;2#198$hYzo(JoqzE@!P<|zz;?IN>Jw^=YUU8&&l9_fG-3OA^iYwfAG&&
+zx;#GuUrqj3LCMnxN}hiSYy&0Fiip1i<Qkp%wV>>1Vx7+e_k)t>r*BWCUI5+&D*q->
+z<My4P@;lquw}Wdy<(~#>oE-xyf5BSbX8{ifmH!_sz8W_-gHIB_4pjO%;8Wl%@K50H
+zuJH7`z{iPS0zQ*+OCtS+pvJ*>E>EQn1iu7|PZrcZ;4D!6(-1g6@UXyr10TCA>@Dzz
+zfm;K=9M}QA7XIggTfjGg@|WHK%3pfoQcwQ_sPsobrGGfmKM?6RM*3?a{rE_KNu>X5
+zwexuZ6rXQ_;&TqD{(J+d{yZh{8KC-e&xn7#)%~F^@J@<e3ElywLCO7cFby6IN?(s$
+zl1jah^4|m%|1kKk;Dr%?A*gj>7O4IlTj~7o1;xJ)6#uJ0@m~R+2A%|p-*dquDfg#~
+zJ$@hfbJDXBe<LV+dNC;ek6!5fe+r8K*Fo{mg5tjcJQaKsDE{-o=TdIJi2rOwD)m#+
+zKME@ULQwX2A}IcUTkiaKfa3pMQ2gHq{s6olybF`K2HcOLtH6}XgW~s0@Q2{o+dO_V
+zD0@B-tR?*~7dYQvfZ}@#_yE`i-UZ(bSOeen;9p2z42thj;P=7bp6~HbgHI7Z3>4pe
+zLCO2bdCvF$fZrqj5m0<@0{4aQ_23^#e=B$`cpNwiK6b9hzY1zR%>%{vQ1DK0>Kx}g
+z2<}6BZU@Ep6N<yP3#=u5B`Cfpf%_8QBjWci^YQpfP<)RD#dja@4)DIW;&(!S2PnQ@
+z0{4dRN5K6^zY-MRGr;E%uZ{Q*-s0o=dQjteZQ%KVivwR7cywTG;8RPz+#`WM3EUd^
+zg}{#lW&<|{t_*y05<eTi0XZANtC4>psQu3?K#kLvg2#e~NB&>V@^SkJNP7?cb>LS(
+zjoVK}{6pY(Vevswd^UpbBzQTv5o`f94o?SP3LXv0p3i-=ms<*|+$%wqdkOds@cE#|
+z*I(Y`<-P~1+@G7h+#f-e`vItO+rahUouJ0eKZC08a!}>of2Nna5mdR$K$Tk#GIh^C
+z3)Fac8K`o9dZW`%f}(!_6#cy*Q}Fz+fwJ=tf}%eU{4VjgfTDjDDEebTO_4`}kAqJv
+zar!ObcZq);6#cEB=sy6i13N&i6D^?lzZew#3qaBD35x#DO@5BF13U=2`#{mJ0cCgR
+z1*QWR1im0}cHom|IQ{m(9|ztO*dKUn;EjP-1zsF@cHpUjCj`z7d{*F(-aviG|87w0
+z!&RW{tS#_lP<B=y@k2rRy-zN7x<3VeEAU$I8u(oZ$}dQR8kf%n<zN1l#Y1+u9h5zM
+z5fr}<fvWc(11|}DE+~FGPj^4!VNm?O0*YS`DEoXjD1K*x;`d5W{EiFUEAT5UF5-6!
+zD8J)+Q2fpU#cu&9yFD5dzllbt|1Ky$<jbJwJ3!H20?J-b0LAw(@JTQQitYgx8_|6U
+zl%2MNqFV+232XvIcLXT9ou{~cej60s7r|$e-UEtmH7L3>K-uN<LDB6C9!UJ(Uhi~U
+zLD78@ls(=E$`0Qdcxm9dfo}+WP2fuc4-4Es@Zm-9rM~+?RC>fWK+RuY1Aj>sp9lYy
+z{F@{H8t^LU)_|g04ZfIhvmBHioDuo20Bb3CNZ{WZeExq3yo2;%a0~cZ5R;hyZczGI
+z2Yv@!1!`S*6L=``Mo{zKd{Ff~0~GzEC%b&#2ERsp19$>>9!QrR@kSx^i@{&O?_}`j
+z<R2UP2Y?%(``hcB?l0g`wCDGr?C|HH^6vrFo_`5^A9yG6w}Wa=GpP2Q1Y&CQpAAaB
+zJwUbRaR%jG)c+8u_WTIcd^`lIo{xc|zZR5y=Ywj`-ry_19j{HLFo`36393Cm1%C#=
+z?}0xh|IWz28N3p@_kp6zfQQqbcYzuQmqq?rpxSeM;PXMXXBMdTjGyT3`3{IF&;KNN
+zE%=Y1+VgHu?Rh(>_N)Z8PAmac&&xs49|%gmM_=RZ=>}g;{8CW*S^>(hJr~scdpLLn
+zEDi=G|9&7}_nox!)jlqFfXcrcl>8qIybipR_{HEI;H$tNfX9M+LH}$}a_<RB?i~wV
+z?gzm&q;CN=?%xl7jre(><evxr5WM$QoDYE?1||0gK*@b0D7nu7FQcB<fs*^x;9sfd
+zIPfV*4v+jlzS8C18u$fJa(@t%+?Rmz56=Vlgx_hP<bDMxxeo`W@7dtx;2#z^|GPlR
+zt<UZy_cHMN;GY-_F9W{?O71O+Bkvuc<h}-6O+9Ns$-NqUjCz)Xk3(_>sQedz()VK+
+zqwpb6a&HAC_f6pUz$~~2^zQ&A_eG%OJ_9_I_{rd<;8CFX{~lwI+;@VKyAvD*UkJ|U
+zzbA06B=;Xc$^8f@xjzHGoq9e3O70JV&mjH%pyttQz_*kCW>E6Z4Lk&t+>h0}+}pr?
+zpuZEG1^p*M$^B2D<h}-!+-t#g;G014KN6JOJ1`2#JqXJGT?)RG_)9>^eH19U4+ACl
+z&*_Y{)bm|Xa(@#%fb_e-gNT17@~;PLDROq;B2aSA1*Pvlqa69qJ3#)9_%SHC?*S$E
+zXF$pQQLqiX4ix`0LCJkMD7hyPR{nJdcr5Wn;Qinqi7X;L14@o}fK0jbn<9P`_#EPg
+zMtti_JpM&+g!E5=lH>iL<X8h90v-*j{#vjB{{L}IDs?jWLvSAHcYxmjKMsoSD<pmk
+z{46*GzfXeVdp#(AOF+@R1{A*|K=FIx#hj~<elw_ct^n@`PmlO3z;@y<15ZYO-4Gu|
+z{3=lGeOcgMpxQb0Lf6Nmfj<RbPd%Rjm469n{T2D?zy+Y_?w#xTH-n;of8feUKQZFR
+z1s)yg`+@53$B*{*{s>e(cZ0Hre~I{eK+&xSrI)h;4+o`}zrDcq@*s$c=Kl;7pJ7nt
+zJ`1Yc8$rpJ0`CPMLn+etBcS^6o1o~{fa<5Wg3|x}b*a==@NQ83bSJ2CH-VzR5ER{+
+zpyYWusD7FaQq}zaBfX#AAGjuPKDdqij_0$Efi0lqUINNK7X=;<O3%MN!t?J8>;t8z
+z_kgPRQc(4t0n)Ye7lPjep9RX!4giOcdoS=VaQt~L|7SqS-vf%zHK6#M14{m5z-z&$
+z5K?yb36QRze>Et1SAmlE+`u=0l6U7}p8uo3y8}ND-buOlfvWHApz3=wD7hCz`kYAr
+z%X2;beo*b{1Mdc}2gPS4cnA0_@E-8?Io@9%2i4wNK(%)xsQx+y{2Evfs{Ut!s{aod
+zhuS*=s=d8|?+R=J)nCU&{18z37<e}O4loN!AJ+u7f|BoaQ1!e7R6TouYUjfkozh1@
+zrQZxH{Zdfvd>g2Cz8Mssg`nE`Y*6hy1iTOY{j*%&AApkYYZ1Q*lzdA;hT8no!K0ZE
+zUIj7*9r0q2DdLE(XS&>*0$&sO;=pGG&H~lXe|m=FuR!(lU0@pgKj7XBrB$Hxa8_V#
+z;8Q4H>5l~775Gt5?Rqb$cCL;1Vc@Tb9}KGhzC_{e#BT)^KMy2p{!0VDH{1L5y@87Z
+zp9B5|y2*omoPQ5gxvzsi0sBGO$;UvmlgM8H%1-`xkmGwm*~RhT7`RWwA3o62hrx$Q
+zza`@T06s$enFnwV4-V|lI*z{kK&_7-2UXuK;4qkt{8sQZ@|Opm9Jpma=idXKPX7A?
+z*9IO6(xpe#fa1R=DE?2@q*7l8cYw<OI(Q2CuLn`x{Nn;2-Phwk1=Y{r3A_VTKYtFq
+z2>J}D{$3BNzw1HqIU?|9`*{5Gfwu%^K=p5H#NP<2-xq)r;IqIj;A~KG{|)At-2C5w
+z%6|}4`MW`t`ylu`@cp3VY5{)@Ub2_>*V&-@Hw~(PUjvG7EvWwg<(_UA-v^ccRgfVy
+z|29zlzBceRfj{2E`?(!_n0$RpCwq7uD0?_8;!n=<et!^D{`bLl@H^mz=)W_?IWh4U
+zg4(wuHZR5TUJ3c<^5|Lk1-8g3@De?W2ERgl3c6O}!mkpa1TQ8o{1S0=r1x&l7k-)e
+zIJk<qaDey-xSY7~i^K=PCB%iFBi;wTnYi%t#CyQE5*PLpuLn;iF1(%i9FX>$FZ?X=
+zZt&n)sU`0RAB6RLB7Pl+j7zQt4<-M~h+hW&nRH~f{0qRp5vNXzp9$^_{o;r(0#*J*
+zQ2bv3s{H(jOP?x#WW=8Xsyuyd^bCj8x5-DHso#QX$HG~ugXe+#(%`{$;44A3X8~9X
+zz8b6nPXvL~tH3(OBRuxeOB%v)7z>93djs18TLK#b>jG1O<5Xbf1A7D816u+c0_y@(
+zf#ZxjD<9Y!*dEvt*brD3m<k+cyjl6c-oW<2mcWL<y1-Q6I0kIx1A7D812ry{-w;?A
+zm<k+cJX-m{-oW<2mcWL<y1-Q6IOEgG2lfWG2et$@1l9$n0>>G*Rz9#dP~%+bErAVz
+zb%CkCafqyZU~gc1U`t>_U|nD;a2&fLxX*B4Z(w_1OJGA_T_9lPKF*}YxJxDXx;%n^
+zp?Go+%Yw*H?oBy3@{@Z`u8nwdFUfCMBvih4wQAs<aR!9q+T7~z2?mzpEfMdF_;AGE
+z67l4oipJoV+>7upOzJA1++!ft2cyf;hm5_>A}l@@am@?LACLIHjJtzt>Qe9gmea3d
+z9X@hayS+4}l$-gdcs=7we@DHL_@3>lscjy=f^nn#cKGOT!O@;S8Tr>?*UBG<PJcH;
+zr+9OZ$G;NsmKS;a>o3vs^14)VZ^Nk(PwqK5{aDXW?v40P#FKl1UO|IZKDn3Rz3^3B
+z^N;?{d0FHi;PE#y;VHk@qp5E%@OW~s#_yB-kdL(+`Rh^*^n?EHMwdtKS(h4*_Fni>
+zFW(aR8(;46<Q}A7QAXwKBLCtjKN{sZo3Q-kUZ{VH{ISSCEcgv$XZkyWiC6L`_Y`eA
+zKI%WtvQs0V@{@aj?hE?l-kx<qKl&=C|9G^2a*@aX8v07^ad~_2OYY6ld58EX_uw2J
+z{E~ZZE;=UiKkxi%BA(oPu^{5fJtRM$=k&?FB2R`q$vr7AdZp*rZE=3rhkZ1B+~eB+
+zOP($*i2Qv!_$T++)C7HUZ^T;o$)0r>p}$l1m;SML`cZ!u9p(9bk^gz-NwfEldH(Hl
+zJ%3^3PwngZ{jc@>A4GmS@{g?X{JN7p|B1+77Wt<|epl%K<QF>suE@_ue#?iw`~}H)
+zi~LW=c&i)s{ClH)ok{uN*B<eo1i#wg_nY815&7~*)!xy&oL>iaB7JR4$_Kx;h#$S5
+z(>L7Y^mC(q<B{JM{Mv)xFN0re<lh?gYtyE`?a`j$VT-1oAM|5MeJ^r(dLu6XUGnxv
+zdoGUpry{>U>Tmo1ihJ4^Nsg;FV3G?Uafy`3!A|ZDjAKKDy60m*A{k%r?DyW@?rpDk
+z3`FkhndzNv?|j{K&+g3rK#mdt!64!wk?<!u#X^xtl+PbnQIHG>CjpBXA%dbH#Uhvh
+zLh=s~AQ>Uvt9mt6UHvgVyUVfi`R?`ms(SV6)vH(4y(DjLp7Vc#@ZW?$f&6zVK7E<u
+z;VT4xn(X;cU+3*PA%FQI=*6G^Cj5&e?`zcF7YKd_>H8wVA0YfI1RoRr8w8hsins56
+zf<O2pynWY8T;FdI{wm?WL-@-e7k^$O{3C=n$)2w+aQyS+-<Jsg`hC=YnD_YeH-x`T
+z_-iD;2lE_%E|GkL@Oy;6P5ytI@Yf0dIl{m43!MK2!tW6NK5E}}^8d@^54Q>b0m5J2
+z<NS}qJZ0mx!Qtu;bNCq=pA8zny99q9<{i?{(0D#e@Qc64`Tyg`Ilgy^!{2xlhd=sp
+z4*wz1UnY9o&s=%S-I?K^bNsW=uPbl9JM$#LFA;p3;5~w`6a0h6IDL=cHweE&Z~^s!
+zyhDQDMff#>zYhEu@1CJ}b@@7n#dqhvMtJd^xW6M<eAn#@1dH#aeT!i6-LnAnqkQol
+zGmPs9i|@9*RnUK7hW*?Ee?h$XZsOwv?{M_YZI~a3XNd(o+aXwdC(0yw;=4n)2o~Q_
+z>Is<EPY=cm<%#cP{VK>rSbX>DF&KY@#doZ}P54*IzrG6Ni+J&!uM?6dzT5RY%m>7a
+z@0>j+@Eafqem+d_<v-@|JE?u*yHU@Pe({~fUnBh82RQvt6MXegIQ%JspLq|5Yh-T@
+zLG6I>;=52!5iGug_+Re^f4T3OnadPEXF(3amk4eUTq5}J3dcW8@b?M6pWyEi{qGX|
+z)KyNuNbu(f-y#_6vsXahQw0AU(eDua^MwC(f<I6AQ-c5Wtt=0p5kFTTj=&I&f4=pj
+zQTVw>qwr^bA`1We)hIj*8(vl3BiEwvV-WvU{9TC0D*OP9w+a^^k5u7n5LZ?BWysf5
+z_=WdJ;s4b1y$l<1mHsz0`M<5nUw>Pa{v!~NRQ@{;M&Xere+cV{O8=rJ595T2|CzT(
+z;YT4qQ}LdLe-->+#Xqje`?hA^pVjnZJ@ZX7*T>`kmu!3`d>_*%;eXTcOB()uW^YOV
+zRn1<{YUA;X8hixvR_)JUX!d<W8=uc=_IORx_qyiKuWIAHqWR0IW}jb%`L4F-HLZO&
+zwE0ue#{cn0qWo`$c&Ey{^pjEe!S_btKf6B)Z$M>7<?m_p?H@IJJgDjWn5J)C)A!iB
+zqVoSr)At9OzB$+*tL?EhefV2LRs6B0?<1PN_iFLwA2fZwrte78SJURphc$Z?wf21F
+z;b{B*MYDIP_5bzvN9q4ZlV8%>^A62lexT|5yw?9)TL0g!_5Xuf|39SZ`;s>Qzo+^0
+zcbPspKc8pgA>mK5{!92htp5_;W$lsh%dGzr_LzMo{I{C?cWU~7Uz7ivn*4XO{z`d&
+zq{;s=HoqjkrpbRplmC(?e_NA}_j6Q#{g5^uc-dUVU%M8C|M_YZ#&c|ye(ixM{KosD
+z@MkpmSG4%C&*Gcx@7pw(*Lx-YUw;VYOZa2Z7!`hr^+)3Iev^vlbwi2&otbERzs%&p
+zL;86M{#N_@DAO;na93Z0|6W_~kG1&S*5rRmqkmXi|NdITA8PWpH2pKqLxEY=zV==)
+zdV^ZauWx!I+duV|8-;S&TyUzVDb#`A?6~2e@8zI2%Yo-Lbi!uW!LP<wy1mhi)ArhR
+z{2N+ktl+2OUHl+?X$d|#zi*bEU9Z>o0<ROY$J^CyAY~t=cidL1TVL!BXB?7u(>qCN
+za#9Cv|JWU*&?j{<oj%q{BIV6&dg0!v=Pi!5+)lIQHEz0XZ@p9Lc0z9$&N$SWmF?Zi
+zvU6kGT5=xZkJh*0d;H8ifd_w6A9ukP$VF^^CkWk6=)0i@66<|0^ibJKzuQ*SS+yYS
+zyY(z>&f>stg?`65Xmwp6<ZZ8cO}}H+>s}CuM_#89eJ~h*>wlU3et`Tg24?C_Hvq}x
+zN%jZIRLe>)%OI+B`(A{Q#Pz*{7W`%da8c*j>j(Hd4`4K$`r%O!9ytxSf8xUvZax?e
+zS3>O9C+yOrhk}LiG&GIMpnvSKX}3LR!}NmRjj+A2BWC6P7D!YX3Z*reK3>BbgoiLQ
+z{5qQ(m2Sg}kru6Gd%L(=+1f7O1P6%|l-9PaN{nsRUb712+1T^>^-kc`VeW4ix0cE=
+zG_n=vONr0RW+C=miYo!9$?)Xp_Mjc@v{|r6?Y0;8S)|&xDr&fZpav7lZw|VHU~v?B
+zfn`-&QGTh5HQn+ovw&t?p<i8*#lc&bhXoDbpyjOkMESzVIY{T3Tr_PCVlfIiNV!}b
+znjFL^H<Q#ZR3n2@z#zWU?}puaw<YYWQt&7bs*S~Yolee=40j({mayWgRT&Le?LDC<
+zFTds&XB8uieja`_?pgU|H@LH=%Q2CFIq8z$^nwtkQj*n(416vR88khCEMcq@bxkwE
+zmSxOs!Gh#Ay~eUJ?Py1b>HM<fkeyFf^6(|gRIM5dd^?6|ocQ4({E8m;z^fReI}OLd
+zKX!HV$>q(~%HGp6EvMBwZu8&m<FvbtLCa$aS;lg><Oe-BtRF^W>co}HZdSK7p4f^s
+zrcwLFBSQv?<i>f*bx0yZ$Ss=Dwo1JVw&y}32C3t|Y1IARp$EUnXc)#t=^~Q5YZ^O!
+z$R$G$66k$%uJ4{ibJnxURT6+RNlol<F?5?}ZBV46#w<^&R}5>}nB}?3im{I-qZND+
+z((@xs{l`xv(01z*fJM04_d}q|kuk4#wjhOqO@eE~mSD`&_gbDCj6uq^=$S|b^JU9Q
+zGpc^rfl#yO)>^U`D}4_DE#+e~%IWpHHNfTF%5a$-??gHf?Y=O9w_)cLb>Tvp0$)7w
+zb9&Y7dX!pAnAA~^MGec^(ztnMz%rRwBBRraCD@usDZ?C3!X`7w#AhO{i0wI=!KAWW
+zCYRKFl(KV_FQ&-0GqWUaTy?Z4ONu5*`WVDkbzIX^h~%1{K_pjnNfd9D#O2Gkc!s98
+zD{K89uIj5`j5~W;)U;`lxZ8@vwk=m<iEce&=tPN1_|_Q`BePBv8_*a*0lXL{DCJ!`
+zT6*IGY}HbTVo9DZ1%e3M(q;2YUrFRoN6SW<1}HL9)JTJgU92`jGFs^k5V1*rE;aL=
+zY@$H6m(?&L%ESbYV~UPJ4vZlBbJ+wQFE~C{pEC{kWr}X6v9`IiVivG)Cbq1m(d!@W
+zbbTl#^^LXJ8(yaw9vUUTbI@HkjH3+$a>0fN$%)s1+yoxA+8c)L2j%rnSS;*2_Rc6M
+zKLNn}{;KU;H*MeUjjS#Bces);)vHe~A3WjU)QGpygaispObLxFLd5_oA@OzwZY!jA
+z7NH~9zW<}<&7swxqA-H~ioPF1U&p<lw!h?6X2I|D2IH<Riy@fp4nlaoVvJN1JKVmj
+ztJ7*j54}gK$h+^MHt5+s(#B@lJ<@d!k1Hlmv2#c)T)0H@!X+9^qD&%WL|>>uL9Ze<
+zb-xr{nrR~LXA;Rk%VK>tEeqoq_%q39o@5ir>e@tExISbO$v*JKBAb|X0+V;MRKsl;
+z)<h?nFbAn@1T$nFj<Gp&5DTN`AeE-gL5y<Iz&S`|54o9BS?u0CJAi^c=zQJnxphAr
+z!HNR;t?z^@nwQG_rPS?t9j819pu}&MT%~{yaP0icT2^Wm4(@9rHSl4$X{{UU<I?Hw
+zX-n5!!UcJMj#g)LmaSKi3~WKW`@Y*M;Ua8V6BF=-v0~Wd^LkP<QZa%0pHl4Ig@RM8
+zEzx@Wj%6*Ea9u9pW}dRxTc=p6a;BB6*f)UM4%xTd!4nVN$`P9m<3_cXDaW*%cbsrj
+z9TcsPr`Da_U8irvd&;do%kws~+zY%xqq_?^T(=FjX9=2F<~hQ6X2LE<8hO>&XNG|P
+z8IIkAge=ky{j>wkZEb4JLsrqaVAQU4;f(hxo>hUst1{3g7qyh#3)Dl>xuxaFYC83Z
+zX<StlX877wS<as<ho4+c#geUB&V3f$rf9*`oY@T#ad3(j<Y$?z8bjrjs`IgAtCmLO
+zp?8WV#91E-?5e#NRCm~RB_3F<gc2AhwyQUjdEhZrHa$3HAN4{wR)s@V_M`#Z8|8_5
+zP^-o3$!C@~qS=k?7xT!Z1ISbkZp1t+<76S}3{aDgewKE;sgd#}8Z)V!a&wZ(r9Y=!
+zbk0=LNoSU<Q)=){IkVI{pW*7sXO>g(Ykr}e^-U#41da3XqjAs5FT25=HC;}u7)EE7
+zT6bgRtV}X!I@Oz0vV^hbXO^0-X+~JDU{<G=g>!?O=lrtdkeyFf^6(|gw0l^J5*hPo
+zw8CPneih9u1cP3$+YbYbNw&|)WUeALvUoUu;CI{>oG@7xV@cFO(|Nd)<zf<HP7+&2
+zB~62vM!AV`0CExYP>1n0LT(y(#e{q})?XIR(O+~Pc$Uc%YZmB{b41s}(=SCw)`S?Y
+za`vDw>jYt=<<}fP*tYli4Js?V0f%?tXwf&F#S{2%@gz)kkOkZ@usd*(QeF!6JS&#M
+zaa}Ir10cl9P`QXvGTvVt*~dyrF|8eSpk$(xsAI{=0+O>^Oogz^kF#-WIWAU09Wg}_
+zGY>mUjdVgSLZ<WLHOnw&fLy$$G3dcAE^fYD-1C0N=ZaPHL~7G1{r&$bjVFh$dtCuf
+zX$4+gr9)(Mt~b7zAgb?kZGLrT%`n!fTD<@)i-Us$uMhQU#p;f=jyq305?EWcn|uiD
+zUa;#sr~THlY2dIy2?63S_~~fafx1U>qvo4l$LoWCz~)!9%{cN#)TpR)b0L8_=eR)t
+zH#6Xd<%;XK;Lf4rln(rsS8DkkuYAyQn?X>%>A@|`?En&OydYe+;d)@F2`3x2wPp{3
+zSv=f;la33KX%*rk;|C$d$Ogewx@oM4;{jIjSTzhEMu8V80C*aJqU$!`pGWXdaWiEP
+zN;mMR)kZX2-dKeLoX9A_!Of2RgQK+#H7M&=+F%sHVE(~)9OxPcj7)}$7)9`rHC;3J
+z4{IY;Q)Fj!c2n?f8!fZ|6ivVyV2rpGZeg$GAGE~ID*WH};lL%)F>{pE6Zy=7NIc@<
+zQi;<kTE~m}nU5k88$~J0#R|nV>tZF2cZC-#mU6I*6*}H&UaVMbD_Heng|g)KVnr6_
+zv#usZ=5q;O^Vq~msrWyhFIy{Vlh0g0>Ee!i!m?l#;fC3ImQ1-ZNG@VVE_L8C$KP8i
+z9(4QhUEUCiz1D`Y5viu*Op{u8$~((*9Tvpd?aImJ>Zq7_9sK+vCtX2-%73sAYc;%!
+zLsoFm40dhkK$TmyhE_#BwVvLjBDda)@sR*59`LG;ymiWQ*U@k&uAIgg)q5-X8RhOz
+zxzUoJUAxLMC8OL3<!6))j@)jUBp{YluyqRFZc;WI$qSlU#C^&5;w3D7VsnyA&o)SS
+z5i<uRUD=FMVnI}1{NM%B@nscl*eAKD-P~G=vcwJ-;v`v{PI;KHs!QfGS*^tB6xo91
+z$g)C2y8KCm*=j^(Azgkd#bm+Y(fiqg6DhI<%l=YHPq*vX@+p*RDB`8okyRPi?Y-So
+zu>qc2Zh38Z?`bzYZ4C}8QJ>LD?kq}!04J=gl4I3>I694sO7z&sqLOei+giny<f61G
+z=WrLOD>kvXnG#waJ=IMxk`$#JRny6<a=9LJc&jOnR-GXptwwF6X|mck`Lc7CVX;<6
+zb=@(fzwxt_<t!5Jyw;dT^&L6@s3h>S(i=M-Nx<S%O~Z||Vt5%RE>}$QB-}VhP36Q{
+zEII9JISAc;NUup$?R~q61tqdqyrbnBzE8)=p-v8a>oKvO85Lnq51R1Ct~L!}`tk9w
+z?Skpl_`9Zjvwj0^{`cLMIX4Io=J6fIC!nmr?yAiBfn`_L*KK>ThebiC4stQ6Z+33i
+zp2l}Gk39$qsYFli02UT5QIunVC_yn`TnS^4y4Pb5WUY(iscy)C$mW_oiPt{Z<Amgw
+zJ;yASl3@l5ml6PY5c?-=%*3Oj1C`w|fd5SGJA0`Z-Y_1&d+NCD#%vZx^u^$*Smo=p
+zQ?W(gyq$_wyrnc1lXRM?*uagF=)tknGmP=DU?p7u?4M$g8t@8UzdLej-J#cTx;^*K
+qz=Nd94?=vk7cR4y__7IqGX~x-K?l!8E6!RniJ`UNV5azD!T$oP5bUJ@
+
+literal 0
+HcmV?d00001
+
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
+new file mode 100644
+index 0000000000000000000000000000000000000000..efd5b0ad1b3b3403f4645795453e7ba477f0185a
+GIT binary patch
+literal 92360
+zcmeFa4|tX3ndkqWoPYtTjffU4#Yh|*EjW&)mT@>X5XMr=C`GE&^2!MTdV(oXjFwt{
+zHubPJwTuG}>#`lz214DF$j@b6#)&Sgw4s)^wj-8t*bdtXhIXQ5I&O#Q<aAMgpYL-&
+z@5y^kP9p7e=DL1+nTx~seg56g{oMES=YIaY&-<6Z`ujH~1VJL;PybERLlwUoJp{pp
+z{4z=RSpL7~&AUcv_#611;aPxw<INc?Th_XAL#uZH%a$$v!zGJ{+|g6tGxj8U6+BiQ
+z34)_zd8iE9EX4j_wru&Gcg8%HEt@xI@th%#h>yubUO~JVuE4RdWy@AHwl)rVl+ug%
+zniVDdcHrn88lMQ_c|;VJExYrx&8u2Ju&niS>sGE`xvI3hlMh(TKl2G@9Wwd1pPdLU
+zh={~+*|MfPTh}+Q`IPr7rFY<f1w7!x`=D3pp9PX-{119-*W5Xzkkaxl{D#Gz<rA&@
+zj+J-TgoM*;oR*%4(<|0*yQdfNk%L|&%2HZJ&&hAur`N8?G~Stk{(=R!{LxU%2RyxM
+z@6`>x(f*b#Tf2O9)3WAIH-2hm^O{v_OUwIJPtRB5;OXJ?qO4ptD(|P)H8!;_yKBv7
+zo7b#>zj^WebDmzkZvcn9{MI4AMHVp<g>zla|EfnOlXviRk@LTj|6RuKOayzWz)GZe
+zdnYD>#YBGXy@}vxeGr_D-$H)+o9cg$f(Q9+;rHwQ%^*PyKk+l8#p&YuwRf$dku<Me
+zBR_t1{KU_URqGo+z4Ehb*WVEo#UaSWi^}EcG^|~}vXDMTf7!go^@wta#QS}E<uh8m
+z-#f#2l5xa$oZii@VJ%$0wrS;^clst)ru@qq)~;!~YyJ9_Ynndi=+qSRb@S)$Y+d<j
+z{Pb5Qy%o=b%knYzuI853<~7S!wXAK7T4otKH!Z(&<@&q5BFcuZUfI;zeD}%*&qs;;
+zB>y2Hm+(`f&tY-P<TtPR&UKBgO&Lci3Li%2)61LJtQ?a6u<-ROZ>Chus9-cYH?Kqk
+z&8;T?l6tjdAq7_cW$I<a^*63;bv1PK@=}&N=B!`d+`4{b`F`Z4k2Xi@Dd@SRJcT$T
+z@w5JO>sr^A(76iUO6V+D+tk=H=dRYw$~CRcO;O_`UPL!mk8jq1bJLo&YgXQT*Sd9U
+z*E=2+Z%9t+15E&B(l@9>Yi(ZM+=74?Ha6WMO}zg3XS-fc23vXD_WI|)kvouF_R^c#
+z;PC68PjtQB5Nw^FY+KZqtm>`^+Fm@Ktmsy}jv%-Oz9!WLZHorZ3i6CYld1^Uv;6zc
+zs?Wdv`8i$C+3M)^ie5$6>$o2~yFTCj&iZ`ry!!kr<omuvkiTL~kgppT<c){9U2pbU
+zx?kS<Ke|rc1Rp-_o7wS)|B*E5dxL!AJwbl?LqWdjt3iInt{}g%JIJqE6XZX&KFH_D
+zBl7@AKA8tW^2*#D<e$yHXYko1zw8u{U-sP~zwAXIzwCt|zwBg?U-n&~ei!h}FL^$A
+z{^0qP_1WY^o+l1|;m1M#3or5e5x?j7eb<#kU9yvDRok+`s!QtgRj=3ouqqX79ryPe
+zA8MW(<g4knt1IgBLB)q&YMxu4AD~=8V%*Qt*9ZBFUD~!6)3=#S2<uMYMj37h@>O44
+zHki2)ETy@qgytfnSq06^EznE^TXU3OGA_`&-P2oMhTf_YdaGjeR(pELQuJ1>sYmXT
+zaXmVzM<?~@q#m8rqbH~5?)1I&`R4nA{N?c9d_M^Pmm`zQk;!yq@=9_-cU&f`A0YmN
+z_4%J6mpc*@es;$b$d)oZhVJm|ehmHXM1Q-`Unlz8jsCul{vJht{~7&tqrWcnmqUNz
+zk-FBMhPUR217w}(ZiL6oBSF3k-R973Ar5>uKkDPaf97$;IiEP^yEwUI@^I$KAm5Rk
+zME;YUU*?JW{L7;MB;|kFwSg^{1n8E0?|MeG&hO5AGsyq>#Nf}>KJI#^KHqu;vU#LF
+zpMKcltp=NMXI9teI~tOQyOZa^|9OMNceEO>4f6CITjqMYX=L7r%$3LLM@joQY40ch
+z`|9&2#mn{e`IajK<VRWI?~bd3{2uD;W7OHldXtCmxF*PVC(k91a|f%&K_~H{mz2JV
+z^h#Uxo_gAH+oEaw6t?<G^0=BjZXx^{@`lgl#9MhSx_`Pp-<hn0=W6Ix51vSl>HcZ*
+zEZ0}KvR@bEKQO_{-m3JZ6W{td_tYTYI4#JhUjk`I@?Sm`UZ&OOkE<*X6vxjjAG<X(
+zmiRv){)-mh$$zYPHhGCg`U1i)BHnYLwaabkb9f$aX&T3Sy`4i@CYoRR?)rS=MBEpU
+z|3#K>n&-yo8NM3fOY}20*5}idr||~lH3mQAltxaC$jOB-CmcC7-aZsA8K==lBXTaJ
+zc@+2KKCg#)rXDE0`qa#2)~BW~tEc}`KRTB_aZcASZ|!w`b^4o8nS-qZ^wlrZSF2x6
+zCW49cE87;Gz%5!eLCq1#J#!tuionrNSNJ@^^p8vYev9Q0KPtyxzWL_6=-UfpK_BBq
+z74>=G>>#f(rXzdt;GtmfFVsdlvdacl)@UpkU`%<1etkSLne)Xj|19{%<zGqi{BkmB
+z^^9<g$h>I$Z{-sk!>XtgRf&3+hw?m>u)6qi(v_dSI+CHuV;u1>r>{{zS@-(a4k?Xz
+z8f{!toa2<E?)1GstQr$c%=KQ}1AgW};LP|*x!z?xRpZS44rmQfmf)Z2AChj!&(W4&
+z0zc}!(@&rAw@rD+Wl<`_06B<`+JJa`89wGS?&Od~)rIx>OMDwfJ|7UR<K&}wIb<Bw
+z!J+aE$-Fe5f3x!a8|!Wl@^}nep&L6P_b#(brc;;RHwN2e96Ei6=_9U#;kL=yW}7@1
+z<QpFd^2_fI@=f<(n>^}mlY6mE?!y)#ugq6L*(Q&GvQ2h@<eRzwUtpuiK4FY9TV;~7
+zRh*qd|8BNQHF)me7v5kTtw`j*@G3}OEBi(DCw;q>(b)#{SI)*@tj;W=jh5OPx0Kih
+z^ns+?>THeM%GesBw;Vd6x60^^^JD+zvWHd|(_2lS$#}i>lEnC*HLeNrAHp6gvY*x$
+z$8TOA%m16jw#o9l>BsM>&#$_daf&`y{qG9;TW6a*;BAu!8QUK6w#mcAw#f`<o4ljQ
+zHo4=g_4(D0kY<+~YqxGryyIsrPX_s~(P!+zKGFEQ=Pm4$$FNVju}`|NPm1ghcx!%K
+zHUr~!H~c<<{efO{*ePn`&W>TMXnxwqVJyi!qd1d@V>XIx0gd^YC$S}JlZRzT?8IK7
+zjhij;T!}65H1VIQw=uy#=bEr{zN`LpB5BVvJLj9kd(MxU-(`&afz_G2UKB6bI4=eH
+zyCNIsMQohQh>x7o$g99R`e?q^^L`IJUMJqqh4+a=<wIA^SNk~9*)@t&O`LO$k5%No
+zygvV`Y=brE;);O!g1q3b`N|-_`i&spOdXHxn#OD3;cDZ-*)Vcn3vbtvcGp>3SI;H>
+zFN1vMS5}_Ygf$bExs7<xZ=6g0`GN8z?$3$)3peN4vMH#~_a`g6f07*Q#-O{d_j0%)
+z$e&;BZN2MF4l79Ch(4She<k#<fL_H}Tbo}d-=7BgB)VyWp5&CiD9ATX^|Yoz>l~w%
+zz6csq`JEHw(-Zmqh<HCXo|jLgo}c6GrCpv5evSBvX7l~_?AkZ}b@XrY&nz;Y8gHy0
+zvPa;p5gr{cSM!X#+_RUNONS0*do(T|N|$*UKg!tn(2!sHY245F^pErWggrak<^mg6
+zWnY!GZC;AT<ubO-xDwlDEP0O)jL-2rzdH2nc>gyjle2Ru)AQILnH#7-V}tyUc$RFP
+z-jQ|lG=3HIfn$(^Z0-t+_X6?Y6I;aQz9T)Co3Ed`=^5t8HeY`eJG?{VKz1tqy?&bS
+zYM$2iVy+=L93-k;8&W;!!d;VCNdLnefWA3L8!PSWbG5<YaiodQ&CGA%p!)m-^UIyI
+zOZCx`v*>nYKMt)6J<Z9(Xm%xw>2)QI)+A`{WB&HF3h8@NcaAc2PzF7VwtoAPpBU_*
+z-`q+6*+JQMy0Qh^c4coJ>`X2h)O<ntD{e0NF^Bs+=CTV1Wg~Uq-o<$NGJVF*EYI}8
+zkv^2JgT82IZQ}4w`o1b`XxY@e=mTYMcG8y`?M3jhXs`;qGU|8bzbkn&^U<5(P4h$1
+zusLEbxtREieSGW7bIFh6_i@T{3;f&y|F=TB>MM>1+&i5cekj{c%I5OTE`jzZp#6yg
+z&(ESqt+$-I>6>m&P_B*)vsW6<I-E-;Tz%My{)^W}v=(xaTj%(5bmi7Vkh#`GTs`Wv
+zbmGU=BiyP-U6i+ux}v(&)#RT`Y=>M!Vt9RWena&sSDQGTfKF7Wq$8J4(&y734CT}7
+zpUEd~Q*?I*hd%<1c)jhy?+W;24Ba{n+oCHQ9G*s;Wz^lGv`uBw;ulZ5i+Z4Ral1tA
+zYgk)xepWWwM_skXZ?qm`b$E)?ZD(>J^`UxjC-P96it3)}oiOUH)i)a}JCMuH<RX_g
+z8mBv02ib}4l%|XNxs&>sQ+@1B9PXlR?WA2sc0hbRLF0FhI(ydzHrC|&gTocbN^Lz5
+zW`o0%guTJxDsU$>tIoAPEb>#?E+MR|UvgdO))l%slTKHCYQyw*R+eH~U9}a|pKA1y
+z=<X)%9MX0tE1dq+*1M>8YM)*GR;MCbInp`ah?^jdqm7^A8^0ue>JO}*`*8RX|E0VR
+z(M-5-qm{5SXT1#IP5I>DLo^EIX)?F^mabY~N1G~K-BKT;cH!jGV1DtwCYMe6Hdt|3
+zHkaysr1xBHlCo60en;z0NuEu9z6``yyHlO$YA`vwaGuAB&!q81z57a6XNA*)l}mIL
+zE}ANj<Vd{(bG?$K&j+`Y6@G<$vN1ZHUjFzwxiop%H<;{QUidj3;TPA@aJ`KzWA(GD
+z$D${@p{v*Gf#$3^o<*yi{m?<5o9i|CI$qqf+L-z=#s}}#b36}?<53<1jLT=%pK9Di
+zhP0s(`%=ae^`+5#eJA`4xbaH5h{j;Bq|fYPJSytPX!E4os{Tatg0g)HGV5T>a(xMX
+zRaB>3xshdu+AsAc=f@|>YA559lLhmLo!AgXeF<aLPR6PnW7Qe;C5*4<pJjc?KGL{+
+z8_fPtpHiq}o#wZb`k_81UjH@Tx^%>G^^ovFJ#4am)bX1|ez;v7Y#8ddRJVunB~Goy
+zaenlj9q_eNeX6&`I(!)wu6mYBR;#a^)R7#aelbR??~80IdydyHtJ99h7;V)r(SG$z
+z>sIeL+NGCWzsX2rr1}Q6arFzubuPZQp}mX?U7gd|D_+a(X*^3Ec@{e$s+&e%^-}af
+zm#-Vgy1U>-deC@U81J(qjKfW%kENGt9Bv2>UkYDeD;<Yx%cR9G8i$p3H*!?E_&BV&
+zVo`g^4voKRXQl0B7jyMa_7eK*f_<(}q0FwnHO2ZFWOu&gkgc#WfiR0>{b7!M2&-$p
+zFYQbm*7#JmK2z6STEYwUIT`C$d#&E&@GJD0{iZwhccQ62Y^T#J{TN}czjtBM8Fdia
+z+W(N9TyDJ2b*eno^dslH@kx68_%uKEcUl|TDLS+dwM+3^81MVdJrH<#d3Q9%U{_2!
+zUww0}=d07o+ud7ncs}{K`3CJv{nrh4%)!NV?Uy*}&#lc|K%aBL;8<u$FL6JoCszi_
+z+u-eq&WP_A&+KhPW4qe>(0I#pla04dZ&^QP;-|89CzFRCYe*hm4ZmIV=}|waF+PXC
+zc#P!g(%0HJqcK(badPc9oqpgVFIVC?y%Xnh<<V5>Y@DuarE5nW_!}?2zoR^t5HFgi
+zIUA_c;>z~Ok<RHII!4#_snn0<YAan^cYSt4rQ^x?l)q#qzo>t-XN^T&q*I-Y>^7xw
+z>5>t><l$U@v7J)rr-|eEAY3#wzI64*>=K?`c&85!s(yBSe6&7JeNB$>a?t#7%n<)g
+zV+#Dcvh~Ko`iH`D&Y!Y5KVLTg?DQ6ecaCv=rz=;Jw@>hM^)IV1Xf%y+{ho`1pOYDW
+zk<3iSF+Lh%eAN2*&M%U&rFDEn;r*3Ed?YQ6^6SXL6PQE)j;BtOtJ<Q|d%xK{))z$O
+z^s?`@`Z1aI(xJBW8`8@JZ4Y&MT4SKacvx_|wnvy`QqJzmWj%k%u}+7sEbdwTiS5Vc
+zyxWD9DGy_0A-|t6PRd4gb*EwMnYWc%i|b@YI`QlB^UocOd2zR%hshoq%6Bx`&yVr?
+zG`z<5p46rW*c%FH3klg7<WahhbVl}NFZ1;#Zv$k#4bZFpu6j`Q<cw{AT5ki;ubLeo
+zdsV-4XK8-`{<iRQYdPi4F327jHpg{-Hpc1<gKP!a85cV`-iC9$(ykn@VAkrk>vNjC
+zJ<$-eCu)c6iK4MRSu(aKV`F=kJpDO`XkHzS?Y$TKv8vPetqrlU9htbXy}^&|gt@v_
+zTQasMX-|}EXD4HOzm3C@T|LwX`g%(EP#<V{N%y8h%HON>zCJ=vbk%N#jqQZFKHi0q
+zuHX27tMT29KTVeJ$1n8b5Auy{IoF>dW0kXXuiv$A;<|p2{EFhn_7kfrgU_^`=lkzi
+ze3h#s3$GFVXq_Ny`4#L2@9t_cIT!4PUag~$9)I!Io%MEu=18S>194p+Nt~#CcTl%?
+z($5sx4c<>>+Xrt>7mP<vpS{dI7?ULXVfri`voxk<V`Eya<tw|QpwA|63p5zb4(tc5
+z1Iljb>bJ7Gxf%UWhvpEqo)6ahBKyJdhrg3U(%U3iY!Y}in`9#O#nypr&c1N)C$deT
+zFF8c}3ECgmc?{8WZH@Fbgm?X^<D<vr!!v1ms)Ar*73T)9&t@Hno$>1GxAOXN;Kj&o
+z^~B08TT1!LHn6ti?G*K?P0&}}uZ`NC*)^&o(cDY+s7vqbxy6s{8l!bCy0gB;>n~~(
+zKCRNYaU*H*3*(k|JAQdqK4r(PCgY)q*Z!ftsg`tVD>@V7&cb1XU8DY<IvAZ%(>Z`>
+z4yCdFx49pGM&kr^#I0X5m)k{q88$Cuo}zPa+8h3J+K8QVvo#6TQ<Z%ec1E=3+QC|b
+z>Y3XgNV1M_341%SvuxU1ES_uKJhV1Jn~VBm)xDfsub%>6w%#c}w?^aE8?=A<Zt}Hx
+zl-43nxp3Kn^tZ_i7=wq_HnqngUOTlWK^r>Z;@-k~-z3f|+BvCRS+h0v5w5j#?Gd>3
+zqSzSsS4ry|wWi*Yq;F?keP_0sXXaOKtw!=#$o$aO5}h4Dz8(1O#Lv|gx1K^Cthq$>
+z+13(lJ*8Y-(|Me@oj}{$QbpgQb1<qyRTak9z{Pg{Qu*k-iq<oEW{fsl;*8I#Booxp
+zWY_Dx?p%xZ>%0Gne4b5SOntZ**<TF*7Z3I|5YG9L<L`8Pb8f#llBakWfQNtbXKfOk
+zk9hs_4P9?06YiYn+x7G9`uTSKe7paAyZ?N<|Fp5<?eRT2m+|)a?%%n1+y2yCsIbQJ
+zw*C39YkwA<jcQ09-o-qka5jpwL-sC^-V0Lwv~w?RuEN=)ot!<|<<A#&__GroS>8Kg
+z9-}#)&Ri7wIc)zN^94Ic#d#v;N!l|gnkzAXDw-=XZy>L&wvRj6=1P8Uq<M(Ve?Gyw
+zf#yGxn3D|6kD|3poi)mFHpu2bi;Lzz;;oB$RL-9t+Qr$S=$#v#yVZLwaelhlH+Thp
+zYS>rP{7UP0(HTn7+DUrNX`}O1(K<_fUKX8Wa_6wvZ&5m}aYSdC#7hVKiq_Cv$<8w=
+zZs}R3f73ZqR`Yl}NB6JYUzeLJy<Jz|uB&G}pMSfq7T%}qdb?lU_IAH&=cdc`tEbn-
+z&PTJ4*3mGTwQkPfWTy&W)VQs8V{?q{Io2Pw4w>T&We$5l=a_Sh{T+(Se#h}j+wX|h
+zcssBsbbgn0XZN18#xU6rcGlp0#^b7P?L~-2w4c_;7^|`K6~f}<Z}fifkWIiC%zl;|
+zL;d-oU4Bg6$(Y)~n&yWXqjg5|><ZS#8<x0t%!cvE8m-Q24&%|;4(Az<+Ml4TMLc42
+zyd{s=Km{JLfpku97j(t5&bR5zbHwAz3D4s@%E|Fu(td0>kM8_QwU;A%9_XZqN7lLD
+zl1J8c3q1ODTdi?B9<w?Jwy414QxT8n2A^phTdeEC{%e!%IhD$@3;!DS2)gK-b)H7L
+z@2b^aN42X@alY+Lht9l?UI(HxRuTW&Kec@lzwbq!+NV=lbPmStg^{P?L~`F0mFfI4
+zWnx{}?LC4@JFHCjyE4_<UZN{guP+nrq^L~&D*qXjsljL!%7ojMi98(tNu6!;WrC*j
+zBhPr5Zi>ouA!V9idYWJ6u7dPfyQ?5-ueQ&GJ~~GzFaEB)y|MB(>HMyASW@1s;+{cy
+z`%B7;+m*N1m$x%k-mLd)vN(|r&!fE3O^*3NF1d72`vhG{?d5USC_0CQ+vF&$9=wqK
+zGTG1SPcA3zxO0Q2zH=qWy8R#G9+L=upL*lwqPAZcY-P`M%X9Q8nS}PZc$fGrd(UP7
+z+5R2wm;GKMbhl~`BRYevKIm2L&#4c3&#$SItnsU}b!F=y{!S;Iws-34U_*u1$&}(c
+z*km$!%XZakv<h_)x079`@gQCbb+F0%HCUWTCy!HJ(+OioGBlm^TmA)|;C6JAw#Qpe
+zCm*@$x2zMFm-gV_HTdr$om}#3>ZHl<VS{CLg1^&A*7k<2uS<HJyr)<v4T^gP?WEIa
+z6?B5z$&Nf+AJAmy)~&Deezg`S(#b~(I+==2Za1CuTK)x{;C6KTt&HV#@}1xNE$hVP
+zWjd*W$BS!{e-*X8I@*@xr+wwzKe{vjJ+6#AvzOk}k3DgM_Xyr>2o7t0UN<gys{QJ=
+zMgAQ=*M8aS-tzTWyH$JrDKtL}&6oXM45W8$R__x<^X$`W?VX|cJRAFjeaJ-jarXKK
+zxbtOzeZu*=$HbrGh~Mo}&fY4T$7aty-1pDHQ^&s$<X_GP`Tj4lw+XMDGuS%tmDuy2
+z=-ub3J?@<~t;?{+;_hZ)ym$ArU@sNkZ%%TK-tBFlJNV{52KhIC#_u2a{Vl)0=Jz-J
+zzQ?bZ-?#bw1;78o@4xZu<o9R%zNU9ur}ji^Je}mHwhUi)G$w64IrRnhTffAfY_>js
+zigeORA8C)1b|721b>Oqe=}&S0hoL?HzO_EyorcHP@{Z`8^?9w&^nJFz=njw1(5Juh
+z&-G8uclnMhpD(<-eBu8%{14QQ**b6s`Tl3zkHzwB^6@_9^KByEPx*ZBD9-n0pKoTg
+ze375a7a1N$h6BCiyNrDQJML#=`QGZ|ebVQ9EBSuX=ew*pUoIbT<!v7=-@o<r{+fLL
+zhJ2gGZXLLpeE$;n4`ca$)W^HY=lfCey~*c$b8)`!^7-aQ%l98Wy`PcKKag+otgQnd
+zCf|PCe;3R5Lq1-E&-X**+u-y4aB;o}(3SU)&-Zwh)vH&iS9SR1u*>ysRu?vOjyY@&
+z`#I{P28c88&)f@uJ)KDe`*g>Wo(Fi=IhcWe<{T1ktsM@$>uVQL7oXDkDa9N3Z2ePp
+ziQt2}SE7o16!w2Or=mRdJjnB}`0;YZr1|A+rli?S@%q1yHmCZ~LA%rYf;rC741AC_
+zl+>AtYQpTCU*GR~`MlrD=Xa6M`@MWVSS%m$t1~(Og`e8Nz({i9EQZ!N?Ol1zrEV>f
+zlh#Hx|1HRg=SWU^@3ISbK~A^E<aBF^oCqt(iRVa8?Z1wk=%<{VSU=s#+)(GS2HvZ_
+zhBIKSw-)4dv6oY=m(#__sn*Nsz2)V!(#xp|+l=zuF}yx${<@U%Y7VRCPZrBb^IUAl
+zf}D6R$cgpXF5Cq<eK01c50=P@u!5X;j^uRRuOlbs4pyJ+%!JP647^MA$=*>c$myM4
+zPUm?!ac@RHcV@W$^j+oU^ltblH@>?1|1QeK88_uU@UHr&e)1>KQ{Vg*(M)t}eEsgV
+zZHul*aPJ4>Y-9&V<7hOlD!uGq)!#R>XK#(ae;Xf5ZLF&=oa;ICTe^Fu+_*dZ9p4Mx
+zog~Z8so+kdihTOY%BR#Hu-4($Ju(+n(7#0M9>wb&ZcRk>mwKF|-fAzy+L_uuKiYie
+z=?d<c;P*JcZhnteAj_)mrl~wX%<mz75Au6}-~IgV;deK`_59ZGTg~rwez)<vh2J86
+zH}ady?>c_h^1FuL)%-5wH?4wp^d83S_pru*-OqZ=PCxg{Oq`p)YwBE=Ms+7Ww!)2H
+z+OKFNtPeXT{o{nQV>CBtemRjJcM0#}znUP7JLP_wD87^J)j4_HO?HL5|0CEslRXi=
+zm#%k7(mzk+Tj5K4BhkAh>9KQNe%kkF`~`PUU@y6Re#tZWxIBK9;GT-n=lhw83U^nV
+z=6C5g60Yp3YpoS?^Np5=v-hGiS(&-#y7i&E##iM3X@i{^OJ6ZJpMEjH9S)><DUnYj
+zw?^bAI?G?2lW%%yj@_$uj`5tvuMt0mXMQ;+pMC@PFXj~PC|LfhIr+@X`2QULAJ54z
+z)4tG{dUt<8<4^G)KiA#SlKxR5|DTe<q|BA`o~q)mqhY#1$4)ojO}M;@bh9g_n@7EF
+z9{0NGF44{7qv+-dbVEHV(#?0RY)&^%#&q*^OgGP*fo`5l4C&^Z=!UxLbn_f?u{?@(
+zGi{>j<_C%V$6LH^u17atO>k!zx_JcMP|q8w?@l*gMK_O>=mx(={G4u{M%LfN{bWox
+z&!C$}@qYsUT_w8d#{UO%3c9%_(hcix!*oNNbh>${jBZxPbhF0m=5DW>^(DHwdlcQ=
+zgKlW|MY?$?rki_Xy16f=oBPi|HxI^i^8mV`Z*jVL5V=?$#k#3D&vf%}BLC;hyl$4G
+zo8^go<0^Es3f<5zHPSyh-7H5pt4ef(Un71_H}@gy2XNmT)6M<pW)1%L;J>;=H|z0#
+zct|&Y$@;BpH>^7j)6IikH@B71&DAm8T;p|fo!8B^CAzt86y3~4H}um*y16Z;o9kn`
+zxgn;T8_z&Dx5RX_2;DFiINjWWTr7`b-Ms8|b9*9x{>@%D_oACC65N}IZmvW(ccUA|
+z6Q`Ri(9M-4y1}mzKc|};ko6+m*T-~oBf7Z;|GD^IU80+7@xOgYH{6$Jx?%lvm~I~T
+zx|vo+H{2(rd9xb_xRc0@H)FkSDoS)Sb`;%=M>pLix|tT!%{ejMOpNK~f-}&~)R=BA
+zLN||k-AqL;mPd(hCRw|=ERpBFBX^%=`Vn-)ok)$l&<*z}r5{2!4}0DGf_sU6SzkQf
+z;Ma(s)6GO=eGz$`6VuHF=;jUG=Y#*R>Wjyl3gTZjq?<&f8`go3`*%^A8Se*@<GM54
+z0VJEx&8?U#b!U@@Z@46IcR1;tdYx;}vG!lZoJw|F=I62p_&tHF6P(|`pLG@IFE?kh
+z_hC3rY9?OhiMjd9<>%*LnI9wy^RLVg=D7J6cXqq^m%<`@S<jKZoW@>BzZ~R$$o#b2
+zJgjem&BJ8d=$%>DKR;@Au*S~iy8nqV)v?TrzJBdu&MJF`d!edXXQ}3XA$P~@F78_`
+zv1eLe;?6Q`ntj-FMeY7k(@pxjtj~z{H$ClcPn&zcifDH;S0zu;clWtHPCDe0c`mvO
+zPV+<Vpdw!8o9O;I?!Nl2w~3xCrnQ<oqGW^X3`+V5(#zJs&Wi5ZXe6D=p7!@hEq{`F
+z@-%XICUEs6{UmkoX<zrad#Z`Mr!?-TBU>kSAC-7X!;5G}_RR7hz~hVfbN5u^kBaMF
+z`p5N-pJ?9d^!KAgK8^ld-_5%BusZlvUk6!>)f~0Eslw{uBLVLbVP7ZZf6GuEe1!V<
+zRlQ@xyB6^}h<{NX#I3c1qB?kGtPWmTQU?hu)Ipw0>)_RAQU{q2xH@=StPVbi?4vq(
+zzpp2^_<HhCv2L4hDN_d@@O6-RMo}HS&DX(ueI2~p)4tu)zORJ#?Im?^xvzuwME3#u
+zyYYypdx~{0@$!3p9b8>ZYxVM29b8qW4wBB*!BxiN^3~LrHOOJT)xqd}FE=)=p$@Ju
+zse|}MclU~yG`uuIvrq@`gU9>ve*pgnOX}c5<?G<H>ZfFPv(7)P4&E5`gSL0n-H@<4
+zxQIH)JlyuYKRHwf7f}aq)cO+V+2VB&|DrmGTkA4Kb@1V#bp!5$d#a9gs6szTSfLK`
+zTv`ViSk9my)ZIqR@6L(U!MVsjs)N`1dNSVElk1Ch+dRHZ9lS2;2iaSW&*{$bb?|Cm
+z2e0t7Cwkh~l+d17QU@>ab?{1G2iaeD{UGr&SD@P~se@PhIykkM*6Islb?~Axb&zzf
+z4qoKz;8g0%G~{rZuY;`hME651pGF<LtfUU&*NC4RgW)9&FS@t5PzSGp$7}Jw4*$6&
+zb@2M~b&&5;lwEhxzQ*!%f~Q<w=hQz{Za?GDAO7b18R;Kk6TIy25`4M*U4p7JTCaI4
+z<XxtJ_4lOS&ZBtUZXh}GJ7xbCvMRThR&-`4TjlNo>}WVo>t?ZYL#)|zM%dO`bxufY
+z)5F)yqJ1W<S0()UA+7amJx%pd?V<zwPPSHb2cv8_y~p`h>qXIhHlm^X4ecH)-Ea7@
+z!K(9V-@K!$^DVNY-e8Q+HQd~zwV7|k`Cx4?;v-k9a~8Y@4KF&+qH`=&mslUAwf?u_
+zN9S6Urm%+#4ZRO6z7%!|&t0|tez*dE3mtziMf|Zo!MlZv-TS&uPDAVFcK*fl*I&$^
+z&fT2RK67sgkI*UbNSNcXvzSNSSD-y($#GA_Cv){8KCxkj<Y?z=OpbQ`Ba&kmeasp0
+z$v9msOS_lAWa;met4-KldtR2hpCRJ&zKBoetwnr#JI>Xa&KRHlC46Sjkk8%{KA|%t
+zPtRv(37^o8_*@e4$sFz*emz%r7itdIU0dPq407{0?O(7@AwSLI9!vUn;bmK6tH{2d
+z@8@#5J4rm~Zo$ii*xHfpqI&_NaQU?}ujBGn=Vx~<+)`xIbiLo573q=PulZmOH?(^)
+zG214JllS{<k^7%;%g(8xjOFHd!5Ew4S%0ASmHmAgS)Cj4^}N^4sub!^(;1#|>9ll(
+zwg{bqUI=sbJgYki7Z&;o-MJ9yC7S2FrZTJFV16@9Kgr~feq>7~Kgm4X?90dcqq_=p
+zj#B#zw+-osFsC2VJN@W<B)ZTX+v&%L7wHE-yAR<L#riqVof{d_5AI?5@o@_J@$N`J
+zJ(Te+_2cX}ub(D6JL1}Rr=43V=%?Wf&%0!YpLZ$fhcKs~rev{xpk1mT?N2)WVEYf#
+zPk&55S?%?NgWdFZuKo1-`>ohZv3;PWL;4}i>4)^zemMIU*N+b`(hq*tem+^OpMNaT
+z5AI?5@o@_J@$N`J3(rJ9?0FX2PlMf8<@A%a`ydMXsns1<XE2sES-L{|flfg`ggN~*
+zR2J)}*6x?kI1#m<8hF2Wr1L(1>h6G|`UTr^JWDQR?c)W%xqYm0wDi1BIh*Ir2HC!q
+zd=DzIweRA9y+VIZhrQS6S$8sH13jes0=PGzhwp9lsBf;~+{{k@tqYZ<@9ZG|8S;JQ
+z;-T{`rQyv!Jmb=j8<xJ&hqsRq{s|wR8zKB-KKzgmKko0EE7#6D{Cy`8?{i7pkz6*Y
+za(u|s8Tbw8Tot3kH@TcV3j6oJ20xlx<=|%ken#EjerIfd`<?YqeLZ{opxfVed*-&k
+zy?W7^?{D|<y^7aAKd+0rG2$H$Z`T{Un^1M-|K@r#e#vjQ-V~h^>^;w&RcL&M_0;>5
+z{+t5uTwo7no=dRK#5~KLYl+^?(7LJCPc`4tI=<HPbvA)>32(5E@hg76<o64HKj-%<
+zzn}7Znct83v2L4riQkL-e!%a$iNblnDxE9vXSFiV%yDs|amB5>Kb~N{d5*2SKkE0~
+z9`yS<PZaO#tbTBgThG3MwecG`OR)OkMBc4!ceC%p7?CD#tvO{LV*iM_TI1t$+@6K@
+z|J4^YlRonh`ykzO^2-U+-m%(q)04;vp50piu97_2S9~Su*U%rad>rksdK!<|-qG@1
+z(0&w}&{n?7;3r!DX?z0zC;dLl(}{eW_Kxpwc*^bT$7O>oi)3?OOg8s;*(~>b-e1D!
+z@)Fss_OiLx%LW}e*{t%ixvxYvq|dB^_j@T9Vd*tqHV+^hbn9eucS)YBW3pKvlg%1W
+zW4)Kn-O#=Vn$T{9c9CrE$NzyL+5CPa8||ydW%Fu@Y;K9k=0-1@YdoK~mGF5@iEOU(
+zvRUM1LtS>Vxz@|(mJ->JK65R+FQQz8rRRFt+>UHs_Ich=lIL|X*<2r!&0J68dM}$B
+zpnW4Wq1_1WBH7%A|LsGv`Gxl9RByDe9hc27OJs9JOg7WJY{q*&uPotne2Hu(df8m&
+zW%CO!n{&Kut|*ZW=`-iR`(>1iu=E99HdiB?pZh$gmgG4xCYy_5vbn(1xX8<9Dzv9T
+z6WWc?E|Sfa_+LFFo5v#AXkR%d8}(sDZR!oyb)WJ5%`g2L^pE`-bVUiDKelz_LVxqq
+z!1|kC*&1^C4KEwkOI@GvMtyOAL;4JBsExm3ZJIEBN5%CwW0B3Tylj3^vR3`m*jn|^
+zEgwhwRZrvRevSGU(EcSfq1_1WBH2_Ro3TT(SrN&GHG#xrTMKGN25w*XrD#u0=ROy+
+z9^m(Nf22J%t;xw>XJh@o?vL2dcu9L|%%_>d<f46D{G&OI+t<adHMGk$&x!VRAC2v)
+zJ!*Suvf~(+7G(%4>}T*C?Pt^x=FZ3^Kjz*)(02-R{vDn44=De4gZzciD1A5Q%i(YL
+zorCmu$?NGv{#;~P*5<A9`^(7H?h>@QtsCQ>iPgC$eVu#6*ST+&=>L(DI`^orb5C1c
+z&^o5;t9JQ1_e@EhBYkEUb>eC23t{PQU+13Fx!H4(A>-r|C3!v?t8<UX>Rh*{@wl&Z
+zPeA)g$pQM%E~<0i#Q(W^+4ox|r*E@HW4covy4iI1)tK(SO8ke*>+Y4?f6KaiSUe~4
+zyWq+7pRBzMYX=WT`+8b?{=}fZnc>biJfwX+t%vEnFZV1&?cgEW!Gqe@W3M&d4)8B(
+z2e|cZnxb}aL988IP|^+vE3^Zii`oHeqB-v9bLScFkIC|W%6DIRS$=2PZ&{Z2nJo3r
+z;9Ir>*6@q^-n(P%V2y7FxA=B&Pf4A;rKBC)?%Tn7-ww0}DO>M0-wy6BX$Pd&H^;O$
+ztnb#Pm-}{bug*nZVC`UaNuIaI+QF(=J6P^%tn%$(HMG}26WWc?E@}t&;D7H>JK()Q
+zYX@3aWlh!TZc$8ki-><?dEH&!_*>T9jpRi;=%c@M?SM6|VeR1hXgnxh-&%cx#)F}?
+ztwKAvfp&1c#sgb(EQ|;E7qtW2IqqR8Y6thn_P6i1{q4edKv<z2@Lbdm^e#E;pH7z7
+z#bkLM<-4}LEXOVXEz9y+ljR>H%eQO?%(aTz!IiOgaG7rh=lFJTbxEB(r=%TR;M>6!
+z(RjdGqT0bk-wv)UX$PdwOr)M(K^-Pc-@|h@$Tb=dF0ytott8J2V(nmRtQ}nBX-xI)
+zU>dY9gC?}K|6bG%uEzhGp?1)KoNPR>a}!Q?<72uTPyDgvb=TbVTh`rJ@}eD#y2n1&
+z@3D_9zsFv;;x}JIOg}v*AFUyd_MNdeSr0wE_MLo>u9|hk%B_9x<=sEt>xkA52i_ff
+z<{g;AJAbU*>ig?&{sHgi@$S%@yhrrr`}pzh%$v2+yS=L?ebA2YnB&*Zc!wiDKzLMF
+zb=Ip7Kh2$gh5lZ7@6h^VQ5xu$OY`?WO~$YF6{Ufna%t2zDWCRoY25ozW>>{|`=L*h
+zE0@N-J2gBF?`6Au4*4|S@b?qELV4@(vwJL-48FoUY6A`YcsFgp+nr8MACy1!AA7*P
+zC&u#t&*wsS;DfXu+>zajObh232Wm^+{~;{u=M*pM=e`D=a{Wqu!t6}P1Nto|!)UEs
+zeUoH4Fj5))9#fb4Q@^JaFQe|+$YpOEddG?9sEo3ax^NfD$Qrlub+TZcx-S0C9ASkr
+z@*I_M)ftpg_h^h(#>Kvj(K_&OJ=!=HAG?am=+?o)p)&IBd7+HF^VNmBP{w!1%J}Y*
+zG7?rOBhOJ8HJ-hd9(Cqnv@(vmMqT<2mfn3+yM1@;9jw)7zSgMyjn_ZFu<P{Nn^>o=
+z9C4j`*!xkv{+rF5hit@_bKh)!kZ(3W#5bGQ1o>6#)jzp+k$dc(IQ3E7pG_Tf?<7+P
+z<M(H$vCY2lOMbr^s^cry@a<S^uBHe1?(jpjJ<esy{(41cQn9<5vF$GZ;<CYJY~jl<
+z;cQy`yU6#KjB)qd7<V~mW1AmfUxIh2yR@g5d{55+^mKpCPV}O08SRG0uhTvrg-7*;
+znFlP-xB7Nh8a^B0Q)xsq4Zr$cb>kz9d(0_xC${>UD*E6r`ZF5wZ~W@)YUUBXt6MQ<
+z>uT)R=3N16jFLyNg&#-!;AQTZt@;jh`bp<+`K%({)8<a!BDDT5eVg~Y-7s?t<N0mK
+z@^<*d#?_toIwxuOSJXSc)A%c&G&Fa1vY*ZKf258yQ<nL@Um2D6m*M?Jcz*`ozv=QF
+z;(glKt@<W*`bFc%$!HP0zhv(8T%qUvdhd6GVP-D8Uk~p$!269O@Q%OZ9hwpEt3B_T
+zGvWQ4W4Erp7T$jZ?>~0=4)M<ShV{MW^v{hS$2<0C<`?EpUn%swU+w*_G0a>E?^nY+
+z_EF=tBk+#D;~kn2?|<NVZ$AUxbv}RfWtzKcE#JLwT;N^bPRLv#JHYO!cf4PLea>9g
+z<#|zz_o<%uX`c6s;C(8*WBWB;HUjVXJ37#ec%K08@w%P44;zfS7C)<7#a?LUf*}9<
+z#Jy{EeZGVG);O(dYvXv&!+7GecGx%(eXv%TImh#K4t>Hz?iHZ^R`M=g=H;{0He7iV
+z=zwu)%iO?tI)9A4XVLry{Y3?ISS!=Fg`;m)r^(OpUO`@CEzNSCn|O9--`AL5Iu<TI
+zU7D|w<`D}Yp?oi@eClII`cAXXRgU(~D`z^~dm>T!l<&)&`4eyEXZiEK`j*ReF9iN|
+zuYc{3?!i~SrQgdb{oX<qavC^WbCD|Uro4FYP%!uxO4pHHHu(DI=XMd_jR^y1(Fd}h
+zIUf1W{o<E@miWfyUy1J5uf$K^@)mE37bH~IE*|^`&hEs^##&UqY6AJeo9_Co`dIx_
+zhl2JGIzA~={B8{KEqbruuQKUQ4Qz~}I7PHYv$8%vE_ma`s&~wLNMm@P-%~f9>I>fx
+zDk~Sxs73cziqGf{5BEKRG4>r}@iR=GqokXrvhwb1)dc3))!2vC{w|P&Wb~nzhS6#W
+z4lD0E&JRj9l2a}wpEny!7q1|j0pwBzoh#l`|IkO~@a{<BiU;_9&{v{3{}yLIi{uaA
+zrMjJ;Fx?)9-#++t<r-sUkLy}x2_zHb8~2aXw>gmL6o2D^G=+ZdU(_yQdi=jBuX1Nq
+zhS_orRov@W-DBTX;;ycK|9wpAqrQ!ms|^lUI;=Q6MwqNPJQj?7AEn3L0bFX|Vaq?u
+zI#}V`*9|%!r*wQX%Z)uYUg{pKF`T0_x}eJ!bot7?u%`>2bY@7lUw3cfa6Ql6oeB31
+zK-qvgH>Yn_Uw%n_zPs1HeHph0yPGV$n)*^rU#|DM^quYZK}X-@)H$tJlfl-xiL-yE
+zcRc1oOY0j&G-}Jxz^^Qg<OnqS%Y2s;zfu}Ez{g{qf%{(3GWzvyY}F!OvSsMt7k%GT
+zc5Zi*#c{T7QuCrIX6s_->RU0L*txs0bH9$A`>30DagK^KI;SN$cl7h!Yiw4%3qhYb
+z?0Y8Clg`sgPYF=%SABH{`qEkKok`twVBgWK^LFpfvur;~_Z8|JMoQBK>U;CuoqVII
+zDLR*`^9ZtId>!evx}*5H&e(G{_MEhP$Mj7n_pL7CjTL{yIZN2&?;=AtDq~k?f^Vn#
+zIz_ovr|3Tqs~&uWv4-=i+zVy>QgpUc{j1|4>uEsCon?cT&VuUB!5T2S@971`(k|pN
+z-`jAbmcNPe_ebT&j^kdNLiw@b)OK9nwXx@9{MnbExUT%fbLA(FD?hZQC!KTtwaZUh
+z>H60#Kb^BHf96ce55JE!MdvDQFS1bn-dH(1W6#;xb28GuFF)~2|GxZ9{@%0Sr2M4)
+zP0GK}m%sf?%HLFh{-g5S`;CS2vo<)S|JZXf{v7GQ((Av{>%Y?L|6fpk`1(!CUrqVr
+zZC&4^a&?dPrgow>sP<Fk?Sd+O53<S5jxHc=uA#zzU(kO~p7^?3Q13Fhy6ov`O+30!
+z#Ptu}E-0N3{FVQ%c65iOeb-rigz+UlqHoH|M$>)mxn7g8?yAjo+V^0G?j)i=BHVZ~
+zxyv?>?sjzT)uk8DvG2yhzvNlqBWvelEl<9WMStkhBBzn!A*&Z7S;?l&HHpvi-)B41
+zc}8T@EAM}iJ(c{|e;2HrZBz8_QNvj5nhSe$choLy4zuf6_klO}ZVq*XwV174{q|0a
+z|F%KTkX=)<US(q>U78;QdZioAMaW*q?udV{K=pIjw?3U;>|38%OMkJ^8=~7Z3f+b>
+zbe&&}Zf$wG9m(>%j`YoMeUDUkmX-1sy>C@oX01KY-iPd~q~1e8R-(h2#4tLHZ{=h+
+z(s%KUpGlsMw+k9R(WCF(IeUeD_b&F#We;|-=PO%K_nyV=CcVoN=kYP#AMZ-uTCn}}
+z-Mdn|Pv-&RX}UQVKz_`*`2ITfk*y`_UAC!yE%80HUw!9-zJYgcj5lm4XLn60YfE)d
+zjyi86&GBo4x(`}@n)5hX^gsIc!!G(HM^o>_H<(T8_G9S-)qfPmj3#?O$))Al#{R|r
+zI~2D%{`3vOUF4&FP~lNN9pt0$Uq}6Np`WZZn*Ym<Yo93CH3got#rII>%JH1_JY#pN
+z-!9_0GsZK|*2ga@<~h5_y`!f-dsLnYcYSBA(cJ5K&iJvoz;m+r?&h*Q_eOFq!*hR(
+zXP!;YA1mgW{#@Tev^mx&aweZR&sooNyXW~E(Yt;05z6N+>qoM}zLSovKTOuOvgsn5
+z(%Xjg9U7l?j!Ac&y87Vy6L=?2H_kzGRJju#FT)~VhFobGde5*74ZaM_S%#INDOLua
+zo$Rw^%7CBai9B5ypgC$82#=TH63TFKnfFj6|E@dTyJ9^R{%*V+Ze+-uH8}h`$Wr?=
+z_TJ(`zBMy+7wruj&upJYHn+y_T&>lOXB)IuHHSSLyMMOaIQV9=f;eaK%}RS8g?kP1
+z(fFsk0t?UVDeGMn`<CTY=H>jDYw8Z!H`!y>J1RSq7rT1KSb0Zdw0F!q5d(G);}+_O
+zn-jS`TKrXKZbn}5_gCWS^u82v%BK56pDyF;N>Mua8Y$feeY*B?=_u1k=`Q!_qPkg}
+z-^l4k-J{dKVRTO-`-VSZZ_e$}vDX~klX%4!&P?~x`|F?oFy9HS7;$gz&Fq-Nr*4|W
+zxq<V$UT+w)Rb#^|UkaWYpswkjQQhBnoNpPAN9H$R@4U)Ba^ac%?!q|&<ZE{aYp*Wa
+zuhSjElkw+O%v;%C$WHCi`vmGA^nIsjoYTC&?@O#%emKY<|ETu6w8k){P;ZV`*u4J~
+zd*uV%H~Y$m>+`R2AK<Ide6^`!>#OYBzj9NM*L}5dT}5}I9@kx{%H#dT@4u^me1&}H
+zd%cg8PdEJQTiCC@PkSVK@4?+QTBw7ZwQ%+J_<Mam?<>y7y>CT6QN0{7A7s^COFp%d
+zmAzYAR32+H+m1*3wzb9i+~ms>)#DNKVeIT?taz37+r|2f?VAs^sXp2``EEN-os0H|
+z<NG2X@cBgbe#Cs}bG3H%D*Z<nYeo9LM^SnF9izu}x2W_(`;X@{YC9?2%jV35qwxnr
+z?c~+_&b*x*r(X3@uT<{WKmYNrQ#UQ{qHT=WZi?m#Nv(mNhb_r@+h|_UY3~3R+|(b<
+z8~i+>&`<jP?Ve%#+sqf9MK{)dXhYNowWDWC>YlAFnQh+H;Pb?G9T(frR-MxNW_8@Y
+z#xGj$(|a*p$qM&wrtIvZxk!Iv_*}&K*_=UpC0*2|=zV#;rx@39^xX&9>Rs8P_uPy4
+zYbvugieC|b4fam_F#c-G@aOzu{3T=jmGtNKU2`wL-l2O9iumg+vtEi{5r0{`17R3{
+zO=ad>&M(Ga!_d75`W{Y^{A!2hbGamZmgu&0{?(mzYm!^tx8(f%E3VJ3?77AD0GnI$
+zEa_2erWe!4myWUezP9@4j)t3iba%FWlbkv6FkU7V(eAdn)z)d$uU*WeH8(2erT9B|
+zUCbGVc!|DYK85eZOrdSPyD%PH;_X;{@5X)ahk1y2e1$Pfb2iy|T}gY#Tl0g`Z}8*@
+zlbxzH8PRa_A?APG{gJIm|4urE=^km>dit)o`Uc%=tvp4uFux&=*@tFN>ik<5vWmu)
+zg58ZSWk0%ayC=!Nz%%zfiRXqPo^!-izIBXEg*hDI#y59*5I&7?<DK>I+N9a)^b_J;
+z>7A{Lzwz(agveL<EBz&;FO-3J@iKhJmm%ZF#-0Amo7#)nz(Y2%<Ec;<&i1M-*;rXf
+zGpsCxD_!Ak65>SV>CW1EdUsP)rpZ>OC~y2lFS;AV>801~cG0U5UE&s%k2LY}VRSkj
+zwU?H!)2|WIXSn!TTiYAbmCfP0dSm4y&9L$j?#c%p@u9WKLirk^J*cRBoLiI5h~s42
+z>B~nv@!-mr^=qF=^@GFLK69jrm+uq4e7Vx{HAU;(zI+W8R;LR3vw2ci($-NOU!)mU
+zKEhr3dVTqbQz&1u!uHtuqw;YUO64PtD<A%%r#-tu`5KH5jU}#p#Fg9%^^-L5@{KyD
+zI?wSwG^fH1uRUGailI4Gr^dUIIaT|a*$ag^Rj=`XCUdHycW#s8u@}x~ZZxTQZL!y6
+zUa%QD&HbC$3`Ju|*4Cii7~JIZpzn_N#kq#c;p4pXi?0nD9gT5C^pi3A=*g{*mW&PE
+zy;c{BY!Lj4#?Vf?zhl@Kn$`Ul#r8|i`NhW2Cd=22U!^ukgX)eS<7<cbD=L4oOdifJ
+zR{nnL--ngo)dNqTdR4ak*)ld5ensVP8o>r@(ETeV<#&Fu^4D6vHh!1bU`gZK>A!!-
+z1}iE*?QU2e&M#K}PW2hwF;%Mntod908lqohLp7AK@$f4uf9(i1Ua|~t&M#Je`uiap
+zw8VyDY$)izbI8UkDu1?&o#y;v<!>@N!^+<fqhC8jKVJT>WU>CblQBCjYch@V(}nF;
+z)K*vnEZ9caaOLbY_r4!?w$AWXm9+1XzSU{#>*o#AslFk&3;T^cvHL!b-N(CYtc~lv
+zf6*=~8*`F4uie>OWS4BM#qR6G9{a*DyYF2^@%5dMLfKd^w>CUv_w8cdC_6}NNRb_~
+z3mayi>@&tK@#<_p=FhS{3VV61waeDA@pBPp25u%U_YV90LVd^4t=AGy>*7kQaZ2&E
+ze(lyViR02I$GAF_>$g3;$j`>Jp}jkOcQFcc<CTjaTeBsv_}X|q?|gM3-}!!=zQn(e
+zoa^;=7IkhC<COM<G~O1<%G|K1tl057i=r{j<?rKnkzRfZi;t%|KOq~@(Nx+7fA3mM
+z20EjmaoW~%J>3Q`huSfORa;*8IXU2`vjbYoE6BmcS6+(mY506Qe7<qMPCL8h<2@NK
+zk8ecspbv9-bo#yAes7l*bYCKmes2$wt{@YiMz)xf31RWPqczf8lee{?p>WMxr-AYM
+z5$zvHHc>h!_pFysQ%pYiIo|ObCLb3c`MCIAKC%2ApX49s^S^l+wU^3>an9w_Utx8I
+zv97qznC)6<AGO}*B3(g7K1~-iT;7Dm^S1Q{)kmKe8cs&N{ywvK{lPDR+?<S>%vN$T
+z>h&_}jL8T;({C9Wx%kR6R);!=@^^faSDeq)UPif68D;%`du^r3sLAZuLc3y}s;FHx
+zc{`qT1sVA?UC?lO6Bf_AV2k(rw9s%eO8Psi;xfXoAfryRajpLt>-(FSjFMx$e#^*+
+zumD--`eQPR<?r|;uQ;Eh+t6b*p2lqGv1UVeRu0+Fy;lCBeTmJ#o(&z@&e6MVZ=c(A
+zw)Ma4{6u!>JhIItG$#K4|Lkkoy{d+xyVE)vbZ=3xMdvc?zBK>L9@MCJrm+sK_a(X-
+zZZC|(JL7k%5&nK39*s+-;qUX|QJ-8IUhBi7{-`wk*IDcSI`@%jt-FIe#-cr;2Od1L
+zcBeg|KGxgc>Ta>3_3bQYVR|R`>}2gvXJI;-w?=Z-*;+T>iPpV)%{}})40}S@afSD{
+z{Q5S1-4=d!F0wN=kH`+qBjR?k#^z!36z3PS(;G&Zr_{#iCr6;qm_LlZ^NZ2%9bq2O
+z8Jh=Whvosr{FkBMB)=H_h7su34$;pgnQxZb_}St)hR(*yu70btI9m4|POIcR4tDks
+zt!TdB&(S!$+MlDr{?$Df?i`KI)4-$7&0HSakI)`ke7^7)>#1GL8FY45XQ+2EXIMs^
+zC`!Y+W>FgE3|+lTdXz@zox7PgETi3bGxzUGvd_pmy6lc!N%k4pOSCc7pQoW7=v#ey
+zXD>nhyM%MP@qMQb=+-&Afp_ivH%YrFqvi{{SO?yT4X?X3w0AaS6M9)BW#@Rim}iac
+zy3@qj(1p1~G#Ak~+lTIp=Ah0bm1(}WS$2+=H|=Lw-nFs3dA7X$S&~BDx)WOSAZ&i>
+zle25jw|UP4KL3o*KjH7HE?@RCXIUCz`Sa}Zr!LC|Eh>N3{KQ9L{kOB2mrr?K+Rua+
+zZ?oCl&Fi5l#tYAmm)<hG&<}_|#|z<?@Z3fHh|6W3=OuS0ywJxD(@QqS3(qDO%ePoA
+zF<u&q*Nvk)#V>)E5zmtRsapdYve|G`wjQmi7S59N+uSE^vt9AfnT;LMy5~;XK!<Mw
+z(Of#R<DzpVH8eQ=)w}<LpvI$syJp{vISY>?`4=MmmL5)(<p1lsBQ~ORXNpm}(XayE
+z-n{u!LB&6N<VCnQKUeVz|9?0LDvmqX-+0##o$LGF^)2Um*1P_~x&Etnbvak3cm0`j
+z{d@2FW9RykcYVRRKIdJZajrYe73aHQ{pZ%TuKj3p>$1l6pT1`1?>0I29nGy*-uc<)
+zRjtAGjjfF>H7nPzU%TEV`}mqW?^?HR?fTZ0D{3;0cV=o<-L<BvwR!CtPxRw!R&H3g
+zvWei9&(*A2d)Jy3HEWt%YCfB3ZdqA#*P73+Z(O&odCjM48rRg^v`*=ues^QbT`S{E
+z{RYp;V8(xc=uiIgcV5_i-aAvXKKb}-8$_i3tO_o}j{i+E2Uivp|9Ssl;RxX?eDql(
+zgzxa-M|fc*83e=V%h1waz59Q7_$*%D)Zb$GEth`tJ1u;I0mEGJ-}bi%-~AThdwuvw
+z@;T_ktI3(Mc3An2oNN4ylzza6&mKWOmvVu;{zgha%ZJY=|8nwayKwaM+kE(ev&yI6
+zM2D=uk@DZ}!}pB9|DN}bp8kLj-;eOh@jt*JH2wK{HcY+?uCVZt_)Gink?6NixAY^?
+zKk36qq91Unh5kmOU-!EfJ`(-SK71tl9X@;{`iFjRbo$e;w(ybY*Zc61=x1h*PXBoy
+zJ`(*tAASJ+@^6^_HgGsme<P*e?88S&f9bWOr=R7+M@s*~?9tPo@Zp!z4`H7V<G<>9
+zOFvToSMS3|D&Jxs9?<^E$*1R!M(6K&A3l$Mq+I){W}>0Lk?LRTTZA8di}2ZLM}9>5
+z9d8j{*=XrUlFwux-p4pmPX2?<qo<#++QKijkzttru4)-Q{X8E&Qu>S^;78(rqYpp8
+zI8jc&v+o@}|Ajuh9nQ;@|LA?Ar$6b#myXas?_g4-zme+4?#&iHQu%s(_}~cR$CQ6>
+z=|`g9=EFy#zs-lAV*D>x{&sI*jFf(d4?l|V`5UJH)<=xLk<z#O@Jnf2<@C2_=jiDV
+z`0yzs)Zb%Wqo;q(hu873yK?!@{EN}k&-dZ;NX*}`@^9`LJ$;7{uOC7Fd!Gq{>k`3?
+zG<Xd-52UMHP;Z#3203&(<JA8Mf{ow+SWUc5p!_r7J>XJs9R7p*&Hos<0sj|3&Wq1z
+z_5Mr2HvAWYHH!b=Eq)((FaAfs3-R9$_T%0LekTZ8wit$+!SCU2Hw@Q--y+^Dus#vA
+z%rp!uy*u#kLr(|63F75I#oKKdwt+N(85_a7DE9`#)KUv?Sz;Jo1uEWj@NVMO8Kx>N
+zyd^LUUwF#mJr6RoSa8TNwHs8v9fsjLQ1n{BJBgPuOwF_KmU_dm8dSUqU@P&e3{ywY
+zD^+5_3x=tKAWe9|0mIZbZ~^IBLFsoUDE&?WrQgYhsVeXt_zzIe#)5~yH%XTR--Ejy
+zya3FA%5Q~XYALAvmKdgHgY!vO4X(m}f?=u(TuAy#@bA%EU>KfyG6?>d_^*K(;-553
+z9R-#Ch+%3scn9td!_*E?^tOYdx6LqY2Ssla_-W#|8Kzo5rOz0qW`Uo;J<~9C6)1Ys
+zLD8!-45xsiHyQjS@h2Ik0#NBs|GC4|^Wg2c4;iKof}(c-6ute1;a*Vm_JC>P=L}QZ
+zK&9Vem`a09xR)BHmVlzS7!<vQhT%L=^y<Nt#Gh@Lssok&Qp42geWw3Cp!B~5l>Rpx
+zrqbY4=qv!g4PFJRK1>0>kGm3F0rs$|`+vaMpyJnoia!BVy%~JM;`f1=95c3oia!}t
+z{7O*q2mY(ouOp!7?+0%K*MW*ZxYy#J02TibsCu{$RQwLG1zZX${%ilm;vWMQ{{X1^
+zx(8JJ9pI<H7EtjkLAArcFg)_OxnD30cYtbd+d<XKZHB207T(fo7%l`AZvl80@#Y(*
+z>MXqFQp0fY|26uj48ud9(j5dpO}YbysU4vB+HM$TK*d`D-c7u;VQQ9zx6CvQPw%mG
+zgNETDQ0WeWpA>z=)DF<mHw-i2X3+=Ni@srM7N~eL4a3uqdHROoA#k(kgQ~{|3{yKS
+zyk)y#m;n`U1$d|E8>VJic*{(~@N~DQZx|i|9eq&s`ha0-hlRInHw-hNqYt)<zG12c
+zR6jMvFjWnng?oZw>O@x%TmfG_p!&rOsCKac97nwQhN%hQmx;GO7X-5jpAO1>>_3}(
+z0VwzBN6p;|%6*l0@B6yBH-Jh%0hC;;48vo)&3)7`%z-M;Zcz29!!Xrm;Vl~t!-d|x
+zz`HL6m97R<J(*&dI@M|PUo#AQynCN_ZvvIB4V3;j8m1Ooc*{b=aI$w#^6nG6EL|Tc
+zy&f}6?E_W5y@ufi?{4+(d7$#E2c@sshN+V~O<x0ssbiq@b<{Am4{RXac2NCDJ1D))
+z2c@^Gz;VQ%ZkVb8e?`10;P>b%CL4xTU@iUuC_YYi7$1X%sUA@2_JK;b*D&k=m2Nwz
+zblX6cdy8ReA*gf<K&6{+7|sHf?kZ5}rh}4mondO=YnJW=sC0dX;R~SB9Rii^ASk^a
+zFif?9%5Nj6bQ=uA45)NzQ0bO}cad(1VX6xJ7XAkwF?sJdOzi_D@4bepjo^Dl2b7#^
+zK*_lZl$<LKQ-l902>t;7lc4e&0HxOxhN%NSe4h{B3rcQ#3{&kse4`KF07^cshN*=<
+ze4Y=l2PKEuhN;Oue1Z?J0#)8h!_<KtzMO`seV{9+VQLFF558A`D(56n<sAGoE9WW0
+z)Ispe#LIzsa5K0OYy+!_zYtXW4nV~_@l}g=2)qaPeo%JtW>E2FgNj!Nie5Fi0jvaN
+zCm;Eb7Ox#tyjD>0mV#~ILa>H-HK6Dn*>3R;fQpv`?*(^&vZGr-#hVZI<3A7l4)vzq
+zFq{pl9?dcgYe3bL*ZzaG=aYuve(&z_?l$lQ@zUOZsrR1^sy@sDrH`40smT`JGRZJJ
+z^{~Zz4U}F_8m3+V)sH-H814Z@F9)iA>^4lbS$NAv!*DUEcnd+*vjv8!Ity>P)G$2#
+z?=9XSsQP-!Fm(`2;67lO+6TJ&Vwh?NKce!2-v^h1*TUx#!*DV9`?wbxhJ)LJ;3m;G
+zOuYumjynk+N8SU5;W1EhJOC>Ge#2B6oQnS}kC%eq#$5?M2k!mTAb1(v14@56!>|La
+zhRzPd)K#G93_cVDmx2S}KZ7Sg*Y6mHn?dy-ZQw$%6;wUXfU4*7z>9GYZuN9PM+bCt
+z48zT!qXRlR;60)PsvXP&9i1(n4(RBBj*elt8FX~Oh2jU?AUdGh$vn`}`4dkEbaX&R
+z$1vOsIy#`E1F9WmK((WJpy*VCs`sZKw01HGs-2uN3||99_oQL?0;u@ypz7-;!?51F
+zXM6YQKeq5e!?4G@_j&g`Q2O6P<-H7S1Dny`M#IzwQ1zx2JW2lR48s*5NoS<NPZNKs
+zVQN08^z#f;lfYYXR~x1#fTC9go`hbdVL12|qjw7YB=KJ}OdSK2{-|Lp2QJ0E+c4Du
+zirx-T^tKy@n?do{4yK8}$uPAJRQeXf)I#uMr0;vc+SM^o?dqsucm!0tdciP!?aRzF
+ziN6n2y-tH4!CejV9gi7X+Jm4G`kM_??V$ME1d6{l!>|<;f9t@N;>R$x1XTLPhN&u0
+z`JDbz5Wwn;Q=r@fpxWaRQ0?&$sPGQ(Ah-kkp5$Q|ZUNsZz6?{XAXQ|>QgAI;2a4`w
+za1A&CRC}!i2f+Xoz0>zQ4EsRU>!YCB=?h>r<va)?su}yh<=}1*70>7ZRn8rTsWwpc
+zekrK@7J|xeKB)ZWfy%GmFuW90ep5iT=SiU2a}}uk2LD|Ugx~<E{7!(<d!J$IAgKI0
+zK;^d$RDPR5<<|}>zfFc=22_4&Q0;yRsCK^qRDQF;CE#>W`PG4{x0f2GszBv;Vw2@}
+z6jXjMfXeTAQ28A)4EKP_Z#Ss^VF#%GVGF4I+Q8M|I#BtwfNFOc!_)#$`Ar7D1x^6_
+z!7A`O<Wp%F2B6bp)?s)8RQ%nb`jHO9a4C2K|GxWzpbp#*%1+q`%1&7Ujw64*l_N|o
+z0A-KWgC79vzz>0$FPi^S@ON>~1LePoLMr|S@NzH>%0Kr7^WOogKDByx29&<*y?Z7o
+zeN6D~0F=Cr-fQWf2W5Y302A=pYM5#P&yw5>Q}e*<Dc=-O<&*KE_^1CLhp9nO@lP41
+zUI118{h-R<W0=|jrtsegD*Xn-R4Z78d!1pb1$6lvrcTm$zD)iHz<T7r-!R+)%5GZV
+z{pWlC8c_1B0wu4$&s)9+K;^sNFx3Mp-+hLuy`b{lW0=}TBND%@pwg`~OtpYYmoZGO
+z0F^Fnm^$$}<F^MCzxxcsc2NAz^ZxbTe=;b&2cY;pN@G&KJ)rX4XPDXxD&IYZsT`<$
+zcN?ZQf7a5qfJ&D!OsxQwE^U}v3M$<a!_=|6jo-bX_}ya|wt?bzw)daq{i{LM$HBXd
+z-xomfyBAcxdkj-KQ2FjQOm%?DcZXpr(`xz729@tD!*Bwqd=K4e{s#@i9iZy_0#Nm#
+z#)nVw;jgW?bbCP2%Nd4kpxVV%pwd<Pa2cz_3y*xp(rp2iZnI&y0#y5%1S;LYItxEx
+z81{hTv(@{r^ZxU}8vF+tG?eanP;?I&hC4u|TjKo}d;jU6+T%Jp-#;YXLQw6k8g%m>
+zI<s-e@04NcD0mg&&x5KrTfi&8P2N2pycG9r@16jjjr(K^n-t*l;OpeG2Yff~&EO<(
+z1t>kH4O2@%>20xLY8H4U=_Z5X@8})I-vLnk?KezyfL9Z~4HSP%!0F%u@2&<f!(Hj!
+zN9erYfqNgQ^~!DFo8;39z6bYW@B(l;DE{gUQ#GLYn_`&KAn;+*9c?!L_JfMwW0=|p
+zD*j%>R68j7t^>#6-(r}m183r22}*x5+Q9Hg#`>52pvu+$DdYjJ02ME77|sOMuBU*C
+zH?Wd%0z3#R-T}jK8>sfQ5mdZ|E3iYr>7e4(8HT5utp4Xf&Zp1V1S-7EFkB3(o@;SA
+z0Uld!;YSU_J)r9IQt)DMmJgrl!zX|>_#bKvg2`YG6#d<X;U-Y^a{_n+@;#9@d$13b
+zJ$TG8JPOJlJYpEOf!`<oMhkD*U>LSqc*{D&a0;k+lP$bul3`eF;Vlyk!=7apZy%_9
+z_Zo(KK;@e=3>Sl<x6r~{78r)}Excu(Vc2uK)sr1y0{w3{Ol<?t!o9^X)dH%XECI*i
+zzt}LP&4H=pb1F1@vk!a@_d!tk?*nfEw}6u8X2WnD_<PWs=l$!we+~Ew@duV#{1b-Z
+zeo*6D2dH|o@spPCI`G@XUkWPUdQkaZ1uh0BfXcVZFg$r%5WJ7{2SEAnHw<@xe@FZk
+z-k<MxC_J16x_S&M-@zr8?@3Vk9tD-}eo*=D0T+Sopy+Qh3^U;GkbbuJpXL20gFhjD
+z->nw^m|?gNRJ+&?y7D4K$$1^<$_pyrnc&}o)4}gy$JH5zmxAY@ry9f5Bya-s20m{2
+zoG=XcgMFlL^ZpyX{{m3sO&>y3zDGdidjM3v+rj?@ZUL3=X2Y-@d<Xe%GE8j%$3SNR
+zD0$2`3~Rt2lm5ib=HF)+?giD3=Yh(17N~qL1(ok<g!?z(DNy;oW*D9XCy?)eVd@z8
+z2J!ZS%6E@pxCuOl|9tO1&-+gT)j#AuX8G;_m2W$!eAD1W!k2)`cd=o(5ImcF7Z|4M
+z!70R>1S;QZ!*F0>5S)kq9#H-{!*BywgZ~6j<<%m9@;!Nz<$DmEM)-bE`Suuw`@r$!
+zyVo$a8$6$Q8$i)-H4GPkwfI+i{|Vmz*p1eo9rz>a7x`@izXZK4hN;cqLejN^>Q^=y
+zhHW4pjcD0u7_I=7E^U~a1!`OzTwwi0AE^G~m|^M=_#^T=2#W3j!*CDSj{k1(esBk<
+z_P!CE1*So@gN~0{`W>LsZ#N7#fl9v-+yu6QYPX9)rJn^V{RTR3<=+Y_{W`;NDX8>|
+z!TZ1kpxWPbQ0c2drC;(9OTQRY`h|w!Y*6WEf*Zl<pxVy_Q0e>TTe@SQ(j7Gn4}$H)
+z-w)mc?gLf-w}DER0mbhMQ0dZ!;R3K7|9RjBa5kv=I|Wp_*FJ3NPJ&9u-EhM22&i<=
+zgKgkJQ1x#&sB{}ZCm&Gh))|INL8V&^-U}`OFC_kSQ0X>ZZ{tUsVQK?-7J6?rOw9*T
+z!Hj`FwEFQpsPX2IVd@~L_y-JA+d+*tZQwZkHyWmvg0i<~gGxWkFf|jb!hMxtYC0%-
+zb%v>Z^UNOI4$7`+1?yEl!|*ClcIhNg^{x_>z7I86e!R==^4o2g>HwAB4#U)TQ2A{$
+zOx1v2ro5G)?4!Q9mftbMa0jUT+CbIQb)fQ_395XPK$WlBFf{>GepQC4N>KR)hN;bS
+zEWdT2?5qW#$~WIItOAwa$$G2T$3W$`0~DWa;5%_I1(j}zVK^C7y3=$Ls?Uc&#oq(U
+z4r>P$f0JQ24^;d*Q1$rqbr%05D7)-=Q1K5LhTB2K-vp}uE&)Y<K6o+iI#BU1H4IOs
+zEPfwYL-;;W@pprhMF&*;Hp6fsDEhNO)z_o5sej@hWQbdkGfeFU)!%i1uhP%%FbubV
+zuMoc#RQz>@se16=;ht@nnguHTOz{2Wf0bc)DX98X1uA}}Vd}&mSbu-eV-NUkl>>YZ
+z+yZ_dYy%m(XDkI(t|f-yOz?l=e--#W_?>PTP6BK3p8(zup1jube;!o&Lx$mYQ03YP
+zehZuqQk7-|AVckf)4%U9H3+I)r@#U7dCf390sbBF4}pq*&@i<P%;Mf+nA!{~eLFaV
+z{5Khf8$i|jrJ&+3F-*+@rxJCt#|fb1GC0fRasrfGj)0gDGxmZi*B-;L9sHm8ZvrKk
+zHp4IjN-k+|6Ic%_{~A!~rx=DOKWOE80hC<YK$^~s#UMlZf`x{u1)$0`AN(o#%rgvU
+zfj=Ss6j1Re8>R-X34$-;K4F;Z1C{<5_+IiqY8XBbYTVfiD*hhB)Mij}Y4Ml_C6@)D
+z>dP!pa;XC`WoA@@Dpz0_9{YgF<tQk*95D>{gObZW@IG)GsQg<&rC(<l)`Ke7rJ&?;
+zWG3O@9#Hw_K+Q*X8-^XA#*ZC_;XLs3l&9V>H5*j<XMyJsZ>C{b2Ug=h0aW}d!&Kk<
+zt^5Z(?gLf+4p8Oa2>va&0US%ZR>M>pRDD<is@#hW!`Yz9JrmprP6Czh;MG>XL!iok
+z&@kKr_9;F{S2AM)sB%|<DtDz}7=SAG>EE;Qb~pGr_~|fA?EqEo?ciC&+h!QHgX%9^
+zK*i4(rs_fIy~g7tP~{FlmHXILW``dI$B^!bVd?;=a`%8L_ddgL2dHvy1MdM_LFKyy
+zlwRvVmHSe|@U`DHJAE5S*EORBRJk*t%DuucOoJ--Qp2zk{4D$ghN;smnyB1^U_iW6
+zhT#CHe*bw;@ediMIzW}X&0{O5a;HI+dp7tt;4H9`bTbW8HK58p8C1C^8HT54Sh-Ju
+z8wfuFD&HPZ<!%R6?oEc_Lhu;=r>3)B3_cHjA3OxA+y@QA1E9*i-!NPOegS^chN-2X
+z%Dn`fO1#B};e4<L|LLIO*BPb)g_BR;`wWkOD)#|U<=z2m9<m)wl5U$}str`RH-O)x
+z+^vS;Qc(I{47PzYLFGFcRJjMPuyUU;4EKVXrz{2;3T8|PRqi^u;r~*@um)7Qrx=C@
+zFAswM2YwD1ruKs>cMte3;_WjGbKr&eZw3{=-7u8~RqlF^GeMQR22{CE*V#OXi;RK_
+z(w#C)^?@q)QSf_|`-ow<A5^*bf%k&jK;^puRJrGa_3$;%FsueOPullh%0>7R@UOv1
+z-~#-gzs&gS0dK^AyLV^6-@%>sZf%mvJ-~lQz+<5JI%*gm0L9mK@M3Tw_$_cY_)+qi
+z0&-9EjKNE>fAK#7eiwWJRJ<c3eo1cdJJ5aJFgye*pM!?s4p8*lK&5K|MSlS(`gI^(
+z>x`ahCWn27;R;aYp6&f-dH>1aX8b3Ce}qV?4O5#hVI0MO9q9DuaS}*TW=sGjzrf>b
+zHKfPAA5{1@Q0dx0#cTDr0#v+7KAii`UHm?e2SKIV?%i8FZu0&sz~=~G2=Z^nOz&R<
+zs$QKYvC<#oKgBx)D&8KC8Bp??4@zE_g3?C~$iEr-Pw7s+$I@*9Ri1g^VXz*QK4u$+
+z(?LW&qY`xaOfkJ~2fu~?sdop#3*c*@^m@`T<h$dJ&I!Zt0I2l4L8aRQiqCbR_*?+e
+zb<a3<k?HlQVVLvo-QL~e-5Kwm1pbh8?H4lsgX=(*a|I~9Eb%xWbb9gOrzTsxK2UN!
+z0E(XuQ2cBJRnIcuUx5oj)!zl6$~oUKoCiu?^@ic4pvqYds+^Ue=)U$Yqk9BYIro5S
+z$2r4r1NhhYPX`&&XH<hKM<u9o3|?S30ID2&K!tDexX$BJQ018gD&NVV%JbU!R-P9?
+z`R@f?IlX^9_*bNx4E_K-Imzfe530Vb1OF1N1f_4im?k-#KF?t|2ucp848x<K<Zuv_
+z9C|?IyBk!#?V#ka1e6>W8-_LBJ;l3EOtkPm!>|MVA?Y@H{|(-MHYoWWJC}JqxCfMc
+zIy`OzC6^7L_*emoj|JdN{O5cBnclzJ`wvu`T>3!C<tQjR2SLeY4=B0hz!$-dpvtqs
+zFkAqN-|61J&ikKwr}5hZUaj=t@1bJ7cMGO=fFH!I_jJM37VrbO^<FQSnh&acvprUM
+zJbjM&zvl4-sQPov;|rkb&jIjea5tDBN{3;p6%<{*o9l3<$2yNwJf41sg`WT=hohjA
+zi+67Ue~$lVQ1znSFq{wmllb=jv%G&bsQPkpg5h3J^=7ljjK_NLHT>&9^-B{#rPCs6
+zKY03VtCxd@;cKAsKWP}g04n|-Q1sh9P6wqoy-x&&$Hv<^f&HNTdkn+P-rerqOTqsQ
+zo!Q=hmiM0k{u2MXaqORgN2-EAL&OV)spmo28Hd2{!QVl{@BsKc?)`@0Zcynu3{!2O
+z&h>2YnD%(+EaRgCTtxVGk8K_&gA9EOCK;xxLFGRIRQ^?lVI_D7w-#x@aA2&ZJ7JhQ
+z2;NA#G^l!__s@kj9w&jSZxcLfQlt7dI3@@_L%b89>fIqw_3ofyYC9-8n>{Y^ILqU7
+zk2T=8i8sN!2P^$}2A;zIDENKw2&i(sU>F_*FTsBgsCYS0bhd%dfg8bp1UG=<b1C=_
+z;DMyolYOA-*IrQl-X6nnH>i9%48u*J>eo_G^>m33U+lx{!CL&MgWm$H{=ed`20X5+
+zOwYX(jLJfFL3vzO2Q3wGEi*|bNf*W3=C5f<6FMd7`Zt**H|fyH%rG-)GvzO8U8-cY
+zyW&1|scgzqHLDe>Pr-m)H)5dyx>{M#q7lLpAiLr|eM)76c7NXQobS%P_uQGur0ufz
+zY3I#%zMu2|_nkXu7-w}!?*vkN8<qIUdLXqgKZjq+;m1*Uvj{&5B>5u}KRE`Zc6T#}
+z4|Dh@fTIZC2uz{eH%R;l!q9o(j{%Zj4b92-LD2A#`8MH5fbbvbhypkSn($%J^N`yD
+zn()V<kykpJzm)KwK+gd)pa~~I&j7Qa34a873OERw@Q0u$fFB1<_z>uEU^i&OAAsHk
+zG(i&{1WoB}15F5>^DhCWKodR)`YXV9X}(*&1pEz_?6))hY2Yc)IpAgBBaMRI3_J%k
+z;t=#Ffo}ob#dJIHZJ=A3Hh`pmHIVFA0ZAWaDd@|Aq>r{B=yw81|7}cTSnwT#9*Wa<
+z0!aC2)O;6Q0c-~PfvbR&9|O1)*aWNqwg3UX2B06~3~Zc7hbn|KFibefIL0`_*v(ka
+z=x6jX&L9Gz&q(7A(KPN5(s)By&**3LG0tGz5c-TX9tnNMZpL~>KckOv2IGa$XB=Z3
+zVeDqCXY@1r7-!C9ea11y5yo!DdPYB^k8uY5Uc}Eh#yG;*%~;RqXY?`7pg#+JMj97H
+z{u#R&>lyuwKE@gJZ=ugP#yG;*%~;RqXY?`7Kw0QBjxmlfb~Dy9`WbzUGiX=%^SnvM
+zF~$+bZpL~>KO;csRp|5jDZN5Ja?a6nD)ik;#+Fp*qv!5Cw?dz|=-@>a`i_f7FUH>&
+zAH?VQJNCT;pZ<M*X!%dk=dx4FD)gDlXD^5D^0DO=`cun~;dA_|eOFcJbJed@SLk~~
+z<Dm-uSZErb6O9KOEA#_R6HOKRp^mAJ3Vrtax$7(R?H}LqaY%NLcO%@KGAs1sH=Mko
+zLLZ55kHd0mELEZJyK(=G75dcBks(;yGQ9=do3`Hst((VhM))m9Zh@WKcH9Q;h&DZ<
+zA?!2Sk<S39Kc~%n4tRWrc5(-B^lokE-N2J~Yx9KTd$fIffIIKe?z{(hXs<T47r5{1
+z+WxNtXTGV;eiJw~t{oW%p8A$H@@?Skx3xLK>HD;q`+yVswS)VC+rO*r_%3kffHr#o
+zc<_F0@_yis2ei=#fU^&3a}NS1AJPsz1RVW=w(|$Ty+79Q({U)DL)ye4;IT)v=|_Mg
+zhqdj8f#Xx!zA5136WXCCfHObQW`9EbC$;TQ0-t(TJN7Ja>N)MmbHL*>+Q}K<?DN{(
+z^T5#;w4E;iM`pF{v%v8ewS6xFcfX{Ky#ze;vNrWHaAHn7I7j%3cJLM8zTay5e+!&E
+zp&dE_Jn*VE@hWg?UOO@mJovgc`8sgyc75;dXiEp~(kJc$&fle<B0RWTpWF@H{xyBa
+z*MNKX>Eru=r}pV1-vJ)^j((Kz&U^J;_X4Ny)n^DN?$Zz62Ylr|{W#&tL;Cz7;QmMS
+z1CIdjd{p1{DDdc``cs4l4(k(#fyWQ)Ckc;C=|`u4r>69g$AHHk)29h{Jg$#E4&3#$
+zzWZt5{L}g=!UI3oCw@-hztDI8g2I2HpCUYPOrJPL;m_#1pP}$)^izZfeyLCVlEQzb
+z@BS6=<gfI3!oAb__%zYe`aI#$U+Yi(8aVQ-zWrI?<O%)I3E<eP`rcP5{G`79B=Fct
+zeVTCZ@AUECQTS{6_Sb+1UehOD!+1f@ll8)nE&isD@1gTwfU$6LQU)!@{t<p|-`ocz
+zJ&1{nXzPBMiHjv|-RJVxEN|Vv@;^*(!X}HJB;qCeGn0b!(R!cgr9YDNGK_;nA7}mm
+z+qdrP_$ektir>1Q;})i^`#3(x^oP5py=OSRV@yw7B=xQP9hNbDDJ>ZATvHD|(m3~o
+zAZbi<(SG71jWbxZ&~p|3ll*a(r*#9-^Gv_F9yI2LOD4g<lez}9qkMaa#@yAx`EMi|
+zbKwrAuOS+9>lc{r!90IKg+EW%5g&8+-!cFBkAQ~EIMe_3M_7+)BUs4E`0oM`{b9sG
+z&)&;HpEKgCz@m*F+K&+bPL`i|pXAe`j-F|xmH5Yi^t^_+h#vX8q~G>dNpHAJ(jWaG
+zozMDx)_oX<uavZPf5hX=x9;QU_%q43?q7NU1x)(ZeGeDDU(%>H@l3Cfv~?fW&#(X^
+z`Q6NKuaR_PTn40Beix??Yb>PS@3Zc^`aSCIJ?9|4A4>TbIX%{WR)4@|o$S}qf)3BW
+z;y>wI_igQFeXD)I=PmfweOpg3e~#^cjqO?YU5#NONcOG!pVlzH8|6mNTISQDou1a9
+zlpniF(!XQcy1!^S=YRIYl7B1Y$i8(y&Pk?cxPP8t`=hl|{%*Es-52x{#sSiw+#~sS
+zFm2r@LVk1NTlc$sifQY<mfJWz*8Ma8!1U_xOMB;Xd$^PPV}SK9iAsJuw;$_%pgWiz
+zn~?kyut)8ADYw_V-$La-;%h{^q35N`B!7bWZ#h@;_unb`S6wdotC=6>{%}5*M<??)
+zGJhNMCss=RTbRFz`Foh($L0Sp^T(L~67!GTA@ygh{x&IT+K*HEkKZq8I=7|#?PC24
+zmP>jk)0J<Q^4)B2V4394Gye{@x1H@()Jgsh=6{UsjWB&H+grUu#{W&Wcbxf8u)Ryz
+zUX<+(GvCkhOF2J{EI;*tw6}-zGsp7Z;Q045{W!;8H!9^{W_uNE@2y;ZpJ00ras1<~
+zPyRhBzayWQ`XTI`h+gsqNng(K&vSo#lH1Dxq?4Z8n17V*eU$A_F};iFNv5A;`5C5P
+zXZ|s!>D+?q?+T`;&z0#ph;fOYrCk33=2v5!rSyIR{g9qb%&%kqDDzLz1{BY7wtorp
+z*RcJYKOp%VneS)*&CI_P;~YJAFu$Jp_c4DA{feF!nBT$tH*x&ea{IrU)7Q=X2=nJ@
+zqm1Xv%ug}@`^?|aCixE|9h6_|{;=Kkl3vF3*T^(|DU6=4@cfp79eVy<jJG4c1KeIy
+z^-{ls>-%rd0sW@2{QO$^QPAg&`8NGXsQU()PBHz5Yb4*ApTEfT2=nh@`EI74VS1S9
+zNtWNp^d`_WK3ezxJ%;oVZQa+`#r#*eK0eE|bsydurmg$swlF=6c1O?hdTGzP|E-E?
+z>%O~DtPe!|dq^5*eV0kvx^MDfru!t@_X6sj<o9y_`xmCI`?csjCgNN7H9f_&b^p}s
+zOk4LwPM$C2t^39P67i6}bzj&t>XT^e{;!`i|0s{2)0*TjiGqRWNw#O*clO^)B;UFp
+zF2MGz`{tfwdFy_tuX6hG_ibT(p!lu(DVK8jE_<hl&i4(LADxgiz2`;p)_sx})=OG)
+z;nQPz>prcQncj|arst-2qkSzI@%bl-g71pyOC|;BdztA*rhoGuDPO~MzhBZ<Fx|ua
+zZ!rD5U-H*8eHHU>X1a>`38wF5x|`|mvivTlgGl##mW=qm!1TK@UZP6!&poIoCw=8x
+z-SkCQy6G#Iy6LU3@6>+~<A#&|w!)uO^xubZ$SJ=C_3fnpN=eUNMZO*5s8jxGCH`%g
+zPn`UAtec$li;DfX|GArgMA4tcc;wVSd8wPGaox%PgA!lE+ui(3$W4zc{Cx_4PT}{W
+z{X64(Sc&g1l=AwHlAreqd-eJDaGj_ho4#G)Z&CP%75-fc|6=rSXZkKs;-6O9!+-pV
+zTYlZ2y6Ib$`dRVEZhpNI-x{TUuU6XEV~V~1QquRV68|QpzJIFppZk^ifA|V_`l3qu
+z?s%7*|M%~A({v8*EWdwN>iboty~mXD*s8>Lu~NQAl=vo<_%>YVj{ieSejifeyH|;C
+zP>Jt#CBE~O{C`V{Z$OFf6(zn$mH1v%`pcUX`3IEvYLxU0D*69UrM%Nhd4F25|0N|o
+zyOjLjpu`tc(({y(|F0<V(RseJJv^(#SFPl~M;R|ZCE~OD_j1ubZTd2if1BPT@^8~m
+zi}cuZyU4#y&nfmlrr7_gV*d(}Ut9k|QQtN_rr56+<!ST3sMvo|v45*#zg4mSq+(yk
+zeD5sZ^OW)Fvr2p1dzo84uF$_<?&d$Cw1-<i<mO+g&>Hpu&h&gwnSTZaZI{PQVt%*j
+z)e8S_U`+Gb{8o`)n@%Y7dv&+`mwoQ^JgU%Zg**cJ`IJI`8tXe}etxFrN2JfvhJR0y
+ze?+0v3jJfn-shC~eUW9EU`V+YzcP>->WRmC*P6L-Y@6BCR~ZTgS4O(F6_L)w1`^Ti
+zP}(d*IvC2BW}hlJkc`mn`VGlc&KDUp2YU&TvOqIksUM|_^Q#+iHGgL?6j^Vk(q_g?
+zWJPd$S35+-<^7RpJf7@bl^pg(*xovGYmp=u%3wIQB|20@zEBp6%X>1(qB5BSW_Cj^
+zWv<G#MH2&Yvu|B=&}>aKBokS4IO~gWW}4gAH#9}AZ8sVt%Vbb%JASvo7muvSWYa6E
+zf-96-^Zb^9RSN4-T4a|E#}b)rG?9%(vnJx~O`BPhlGB_{4muKK^dOdKZ>jV|Rt?4C
+z*;pddA5TUhD0A0i4#W~hZ?BojSV3l@j{`XI!Qcw#4=u3fQ2w_Rn#Aufl;1Q_ys5=i
+zTw(D-^_H?qyfU<+_^&}&h3l;~y9Jl1+J<D>bO~~iq|N>~eq931KeEM4XXtk)P>;Qv
+zHfOS%BYn~I)))e0xuYJVHYI++Vm${f%dE_|m0+M@D80oLJ-WR%jGl|1r)Xc<VRiV<
+zHdu5jR93G>&oujtq3kAfx>&F1b`8ls(<54CG=<x%S{mBgL+jA8yaLs$+l&T}T1|Mh
+zQ5mZ7gx9quGG;G^mG-K(#*l|iYE^aB1;azZN>8|Lt{R#_!RK)zJT&Oebg(j<8yqyV
+zX)y?P8V$~o2;(LCYHVOAIh0wI%bFR(=!(1b?YKnJ4buo#QZY93uZNV<kf|$2g$f`-
+zC1><5Xx}R2GDPcyT`Jl#gsoaALsZ(OswqR5?3NS_S9ZB7rIO}{j&w4c>`lh4@^wnc
+z2?S9GR@JF;cK;~R+;fIum12w0kQ;6ZZ?NJiS6^utr)$P4^fS??!aZGmI~%gG7Pk{5
+z0ntbsV*_R;i>_3t)L0B{t{gEWy?|JOx-J;kVrtkh0<~?J$)W>hUsGVQwe7B^Gq+_|
+z*_qiYTz!RYI!o0v@O1=&fvvIZCd`Y`ezPHvyRk14q5t8owHuq(#+z|{N<0#eZyA(7
+zuM`<f_6@~NvDPaw8#cx=sc5!$lY2~EaOMgRbhRrwo*5}G<II;F8A`C&u2(12i}h(1
+z%Z~wfTJ3mOhRrC}cvzKo1_QmZ)Fu<ZB{iJ&no>;^&TcT!k;XDLYhrEQ8LUl5x4M_Z
+zr)$@-05~nH1v6ZgjSie{f?OF5)X4REbHHc{)X23;bD)!ojA!swSov?JT}3{`CI+Lu
+zg5bqxs21zE)BV*hE55FDEQ`3xSkSj7+OQ169wr*bjwP>?HsfYAlP7t-#$ncKvb?3b
+zBN<(>Yy!j8hG<XRE{W!}38LKHl+;U@TkVF%8$jA2gt2*ZH}%R850KskVkFho-s_fD
+z7FN#I;Tc^FqfOD4D+saT@ho^$S!=2`7L>GyL%CR6SixQ(EhuZv0c9jZSQTrYvaFUT
+zX=jetl|^iaORlD5;W}%JS5xlAlv)R#*`MbAB0~1uUqZ;9`E4O@s%&0)>oU2LQ`1#y
+zoiN;@&XykS(%qs*=@tcdWv(%>Evl%vw<sQVL5q%IUR5YKf~!KF3iSw7q7|cq^7>3=
+z+pTdWwsb{=Jc~iq3I-9e^((D!x0QnW#o2Zug8@VoEE0`fVAgI|sUdr`QWIc}O=`Fu
+zv)u6(G${7G3db5{JO=Y)ipn7k8bQ=>I|*{UkbIAeFc`oL8cp=AUfb9ltR&x^wY3cf
+zQt8bd$r!v@>A>omYt6(!c2l4_mgrBm1_GPc1h8i8GqH#<`>=*VP<(JrARNntS`*o-
+z%Fal*BbNzX52CKKB^)!>g=67V&S=Bm+2#UWy=!Ar|Md~-8s0PpvCtwPR)IuT!LtC5
+zi8q~@Xgtg5tU^X8eg8+vtEEzd=OKsuT6y1syykPi*!*&<3RcDvsiAz<nyf0QNe*QZ
+z-W<p|i#Q_7x20vVu~7?sgQDWr{RYN{oV`J@iC*>w#dQWPuBvbsI|GZAXWe4(tXm8S
+zi}oVI9?@6!!132$ZT>#yo|?HMc9s;f2U;=KmzEX7I1T(I#kil87P7r?3)-Ujp`?(V
+z2RT`k78aSH#e1;2hqi0vJ6)&<%Mi5_Aquh_jeK#IA#4?D8KQR4mLW`bsesE6wR0$o
+zxu{AwRVU8Cu+OaPji#c#v1|@A3f8x=NVZvNrS|%zI+-#Pk<d^EM*+d=sKe0@+H(YF
+zG&y`45!%<deC5O0wMJ{8HSc0wzb&rDTul>lXD!dp!5T4NVKLB#bf;s{cr{JJhOyuR
+zd}TgjI0K~LX~5-KfuGRf6kZR<lqW52zkG*bG*#2QTumExUd3Lwja*uh#aechZw5Xf
+zF5ggsPDa#Hc9rR{w@{5HUSoy_Zj5BtIx9uV<2K{Q_3I<)fH$YI)NACrEf`8=%%Q&I
+zdaU7+gD88kKnsTC8X?~^vCFXwxh2pk3IZR2NO%AXGFLj(QxPg|W37@rQneD7$qn`-
+zam?&T;lgD&;I{|b!p<+p?gc)N;@Wn}bE&D)IT2%vBf=7G&2PK?7q%l$xE7^SI%>P`
+zi_vWnDOj{->4aG0;385`zRJQ;(@?p{sLN9+9kpGEa_C(|61=L*GU2Z9hD=w7*sgd7
+zR-=FmObUm)))m%4Fg&0pj`4G;ERJ7s_$osBu)T4FI1hA{@p|F2&1>DO8#`a3MHV`!
+zEUF<3u^g5BVxiDkp<<ufS+QeKMO04Fw2~^*ZkeL?)L*7uYMezy7dqP%nQ{)kMb0*r
+z%$I2Dh0it@rLVLL$C==w%vgiQndnpDp02)~4cS<W+wnNV_-s?juE(8KQVdCFf0I+J
+zKwZnTO(m|y)UfKo>{_%f>Kn3n&fJz=WoKrqaP<|o8BUQa%33k!a?N6lRo{jSR%V7$
+zsbo5vp)n~OlVbK-#g0*ohjsn2L^O_*D5D|JX!${l>&Qk{mXbBh*}_Jkp;!!7H!540
+zDxfT3In>d3>k<zJ=v5SMyPo`t;hfrws)MkSI-X=99=ngI@yO+uBaTuXVz@=BXDVwV
+znQUJ?))R?k+QXglMJpqFEe`0ixmB@XWYt#uTeTIJY8Ub|uA~ivc*)M?$}1vWC!D1?
+zk}FHNAA<DKR9V7gnO>pHg||3dipA2=3rS(RkhEuUvXaEb+fJ3)q&)Vft!3U>2|r?y
+zh(z&-^HNtPoKDE%y7Z=J)>8mw=>`KsDeU6B#aEVgT`Uok5j%^=<(n>&-~S)ic)^w#
+ze4{<!MN&a;&+;L1ur`%{fx+^=*AB{8Y*q&Xt?aE{36)ht{rzSd{%J?4M~qh5dD4-<
+z>Xz_;tb%YVvpyEtmX0?C15|BrAz=JPJIxIz;P)t;sJa0&VW!bOu=%yp7T9d&I8pA#
+zEsbP?wUKBhgEu(vB4%?m7RS4Zkw|raEN)iEV+k|VACC@XGNE-QUe;{SV4+R#DEEf(
+z8ew7pCmUg7b$BRKLx&qU={PGkjY_Xc??FhFYl9GUWHZog9S;bPM@t|OLoG-r1&A9!
+zR7InG_;WM<wBBIZ0M`wI;)BG-OCBvaz;V?Q4sJT^|5RJ;@Ie{Z6|0OY6j-c3Ul07c
+z2WqB76A4tIjjUE<mhHn>Q#2;m&gk@uLS{P<rxJkE1f_w(@Rq`LlxzDxl|)AiKEp8_
+zxD;%dWw_J}>IEyUg@<>zbd1wQV$DzLr+pMrFj2f@IlD$_nRRw8=68i>*DSBW&aTn?
+zPV?-VrL>|{&#qCixIMcjE9*+Vn&j%w)$~o1wbUsc?Vrw<jpkyVFSwGdTkpabm=*$6
+zcoVI)ludhMP}qs-dZ~k^Ir-I@s{Ul!yUQDfv)5P?SmW}hQ%|#FkxSkhxz-VbxOfY5
+zVRyCLjMoo-<|Y?<1qGh}Oef}Qd>x2OAwtCv?ir52%k3-;#f!YnxM3|jxz$|cj|4Dz
+z;M+p>+o@vhnj0RrUQP8VI^SC<U(w$EIo@a~UtM{XWs!>ZMyPy6JHf8ETNX0lSyYI5
+z3SY2tY&Hr{Xu&Glm*ij2#MEbPP72G54HCVuS%xIP+Ub@ghp7GHhjftUUsh47eW4~A
+z9%yTHt9T9<ydtGGo%Ufui)vZ+WTz)il_+i4u36!TC~kit!P3!Ko`vG}i%KkP7%jT9
+zwBdphr48HpWtW~>uKAKLBIz88q^mV&Gz|BKH>}@gZGdZ=;^rW}AGJQaEk4xW;BGUD
+z%Uz7pFc8W1IxTy=|2R7Jnkv|0U6V?I7r2cUnn})9Y>sodvly4BW65GFkaG8_Zh=Cw
+zO*xLL`Q+8{5<acrjREUuH8M;`tL`#VVloET$!X_ws>Nu@^{NfSZg27|rKyyNY`jKZ
+z#@TlG0HC3OzHq&X<B<Yf>Z-+f`BgE#wBxmFb@D>I{2H~WCiP-lGu#!*WTWXUf1RQ$
+z+!-DqhZ2{UH>05*`re%sho2mK>%6eKGOEI!9x>4yyGl1i_mlMz4p#;vJ@U(}a<hId
+z-tJFF<H6dYY=0en*YSF|6~wzLwXuv5ZfI={hgYS@DG2YNG{fHo@O}Zbz2^q{3g;FR
+zgF;cEjUC`(;<B7_g0Ngrg2;Qq1m)c8i2&QzCHd?(#4pkerdEm|*A`oZcs(E@xWE!v
+zgwtA;m&C$so%pO3pEW|lYHAjNmL<3$5rA!*psFo)RRrGOJVAdJEg$jSXM7Pl|2@`7
+zG(A{TO2hr_<VC64-^5*%n)^$<i&C||@w6x<yJ0O#4Na|pJhhW5Q5VkB4pCo~`6?pM
+zyG78Sq!dK0akcf~3x4TjF4B`6Hv1yURP@Fn6HBpJCQDx&#w#!m*;G17-J&d6>x8DH
+OFgg#KUr?ke;QL>D4v(z>
+
+literal 0
+HcmV?d00001
+
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
 new file mode 100644
-index 00000000000000..f06abe11e3854d
+index 00000000000000..b43df0b67d646b
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/hmac.go
-@@ -0,0 +1,146 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+@@ -0,0 +1,8 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++package cryptokit
++
++//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -package cryptokit --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -nocgo -package cryptokit --noerrors shims.h
++//go:generate go run ../../cmd/genswiftimports
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
+new file mode 100644
+index 00000000000000..e134697ed96de7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
+@@ -0,0 +1,10 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build cgo && darwin
 +
 +package cryptokit
 +
-+// #include "cryptokit.h"
++// #cgo CFLAGS: -Wno-deprecated-declarations
++// #cgo LDFLAGS: -framework Security -framework CoreFoundation -Wl,-undefined,dynamic_lookup
 +import "C"
-+import (
-+	"hash"
-+	"runtime"
-+	"slices"
-+	"unsafe"
-+)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
+new file mode 100644
+index 00000000000000..dcf0187377953d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
+@@ -0,0 +1,57 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+var _ hash.Hash = (*cryptoKitHMAC)(nil)
-+var _ HashCloner = (*cryptoKitHMAC)(nil)
++// This header file is used by the mkcgo tool to generate cgo and Go bindings
++// for the CommonCrypto C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zcryptokit.h" instead.
 +
-+type cryptoKitHMAC struct {
-+	ptr unsafe.Pointer
++// mkcgo:static_imports
 +
-+	kind int
-+	key  []byte
++#ifndef _GO_CRYPTOKIT_SHIMS_H // only include this header once
++#define _GO_CRYPTOKIT_SHIMS_H
 +
-+	blockSize int
-+	size      int
-+}
++#include <stddef.h>
++#include <stdint.h>
 +
-+func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
-+	h := fh()
-+	if h == nil {
-+		return nil
-+	}
++// AES GCM encryption and decryption
++int go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++int go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
-+	// copying the key here to ensure that it is not modified
-+	// while this algorithm is using it.
-+	key = slices.Clone(key)
-+	kind := hashToHMACEnum(h)
-+	if kind == 0 {
-+		// The hash function is not supported by the HMAC implementation.
-+		return nil
-+	}
++// Generates an Ed25519 keypair.
++// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
++void go_generateKeyEd25519(uint8_t *key) __attribute__((static, slice(key)));
++int go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((static, slice(key), slice(seed)));
++int go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((static, slice(key), slice(pub)));
++int go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
++int go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((static, slice(publicKey), slice(message, messageLength), slice(sig)));
 +
-+	hmac := &cryptoKitHMAC{
-+		ptr: C.initHMAC(
-+			C.int(kind),
-+			base(key), C.int(len(key)),
-+		),
-+		kind:      kind,
-+		key:       key,
-+		blockSize: h.BlockSize(),
-+		size:      h.Size(),
-+	}
++// HKDF key derivation
++int go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
++int go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++
++void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int keyLength) __attribute__((nocallback, static, slice(key, keyLength)));
++void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((nocallback, static));
++void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
++void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((static));
++
++void go_MD5(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA1(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++int go_supportsSHA3() __attribute__((nocallback, static));
++void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++
++void *go_hashNew(int32_t hashAlgorithm) __attribute__((nocallback, static));
++void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
++void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
++int go_hashSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
++int go_hashBlockSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
++void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
++void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
++
++#endif // _GO_CRYPTOKIT_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..abd4d7a9d85957
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+@@ -0,0 +1,20 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
-+		C.freeHMAC(
-+			C.int(h.kind),
-+			h.ptr,
-+		)
-+	})
++//go:build !cgo
 +
-+	return hmac
-+}
++package cryptokit
 +
-+func (h *cryptoKitHMAC) Write(p []byte) (n int, err error) {
-+	C.updateHMAC(C.int(h.kind),
-+		h.ptr,
-+		(*C.uint8_t)(&*addrNeverEmpty(p)), C.int(len(p)))
++import (
++	_ "unsafe"
++)
 +
-+	runtime.KeepAlive(h)
++//go:linkname syscall_syscallN syscall.syscalln
 +
-+	return len(p), nil
++//go:noescape
++func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
++
++//go:nosplit
++func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return syscall_syscallN(fn, args...)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
+new file mode 100644
+index 00000000000000..8149ca75749280
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
+@@ -0,0 +1,167 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (h *cryptoKitHMAC) Sum(b []byte) []byte {
-+	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
-+	C.finalizeHMAC(
-+		C.int(h.kind),
-+		h.ptr,
-+		base(hashSlice),
-+	)
-+	runtime.KeepAlive(h)
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+	b = append(b, hashSlice...)
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zcryptokit.h"
 +
-+	return b
++void go_MD5(const uint8_t*, size_t, const uint8_t*);
++void go_SHA1(const uint8_t*, size_t, const uint8_t*);
++void go_SHA256(const uint8_t*, size_t, const uint8_t*);
++void go_SHA384(const uint8_t*, size_t, const uint8_t*);
++void go_SHA3_256(const uint8_t*, size_t, const uint8_t*);
++void go_SHA3_384(const uint8_t*, size_t, const uint8_t*);
++void go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
++void go_SHA512(const uint8_t*, size_t, const uint8_t*);
++void* go_copyHMAC(int32_t, void*);
++int go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++void go_finalizeHMAC(int32_t, void*, uint8_t*);
++void go_freeHMAC(int32_t, void*);
++void go_generateKeyEd25519(uint8_t*);
++int go_hashBlockSize(int32_t);
++void* go_hashCopy(int32_t, void*);
++void go_hashFree(int32_t, void*);
++void* go_hashNew(int32_t);
++void go_hashReset(int32_t, void*);
++int go_hashSize(int32_t);
++void go_hashSum(int32_t, void*, uint8_t*);
++void go_hashWrite(int32_t, void*, const uint8_t*, int);
++void* go_initHMAC(int32_t, const uint8_t*, int);
++int go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++int go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++int go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int go_supportsSHA3(void);
++void go_updateHMAC(int32_t, void*, const uint8_t*, int);
++int go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++
++void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_MD5(_arg0, _arg1, _arg2);
 +}
 +
-+func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
-+	if h.ptr == nil {
-+		panic("cryptokit: hash already finalized")
-+	}
-+
-+	hmac := &cryptoKitHMAC{ptr: C.copyHMAC(C.int(h.kind), h.ptr), kind: h.kind, key: slices.Clone(h.key), blockSize: h.blockSize, size: h.size}
-+
-+	runtime.KeepAlive(h)
-+
-+	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
-+		C.freeHMAC(
-+			C.int(h.kind),
-+			h.ptr,
-+		)
-+	})
-+
-+	return hmac, nil
++void _mkcgo_go_SHA1(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA1(_arg0, _arg1, _arg2);
 +}
 +
-+func (h *cryptoKitHMAC) Reset() {
-+	C.freeHMAC(
-+		C.int(h.kind),
-+		h.ptr,
-+	)
-+
-+	h.ptr = C.initHMAC(
-+		C.int(h.kind),
-+		(*C.uint8_t)(&*addrNeverEmpty(h.key)), C.int(len(h.key)),
-+	)
-+
-+	runtime.KeepAlive(h)
++void _mkcgo_go_SHA256(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA256(_arg0, _arg1, _arg2);
 +}
 +
-+func (h *cryptoKitHMAC) Size() int {
-+	return h.size
++void _mkcgo_go_SHA384(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA384(_arg0, _arg1, _arg2);
 +}
 +
-+func (h *cryptoKitHMAC) BlockSize() int {
-+	return h.blockSize
++void _mkcgo_go_SHA3_256(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA3_256(_arg0, _arg1, _arg2);
 +}
 +
-+func hashToHMACEnum(h hash.Hash) int {
-+	switch h.(type) {
-+	case MD5Hash:
-+		return 1
-+	case SHA1Hash:
-+		return 2
-+	case SHA256Hash:
-+		return 3
-+	case SHA384Hash:
-+		return 4
-+	case SHA512Hash:
-+		return 5
-+	default:
-+		return 0
-+	}
++void _mkcgo_go_SHA3_384(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA3_384(_arg0, _arg1, _arg2);
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
-new file mode 100644
-index 00000000000000..c9611eef5e2697
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
-@@ -0,0 +1,336 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++void _mkcgo_go_SHA3_512(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA3_512(_arg0, _arg1, _arg2);
++}
 +
-+package xcrypto
++void _mkcgo_go_SHA512(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++	go_SHA512(_arg0, _arg1, _arg2);
++}
 +
-+// #include <CommonCrypto/CommonCrypto.h>
-+import "C"
-+import (
-+	"crypto/cipher"
-+	"errors"
-+	"slices"
++void* _mkcgo_go_copyHMAC(int32_t _arg0, void* _arg1) {
++	return go_copyHMAC(_arg0, _arg1);
++}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++int _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++}
 +
-+//go:generate go run github.com/microsoft/go-crypto-darwin/cmd/gentestvectors -out vectors_test.go
++int _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++}
 +
-+type cipherGCMTLS uint8
++int _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
 +
-+const (
-+	cipherGCMTLSNone cipherGCMTLS = iota
-+	cipherGCMTLS12
-+	cipherGCMTLS13
-+)
++int _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++	return go_extractHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
 +
-+const (
-+	// AES block size is the same for all key sizes
-+	aesBlockSize         = C.kCCBlockSizeAES128
-+	gcmTagSize           = 16
-+	gcmStandardNonceSize = 12
-+	// TLS 1.2 additional data is constructed as:
-+	//
-+	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
-+	gcmTls12AddSize = 13
-+	// TLS 1.3 additional data is constructed as:
-+	//
-+	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
-+	gcmTls13AddSize      = 5
-+	gcmTlsFixedNonceSize = 4
-+)
++void _mkcgo_go_finalizeHMAC(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
++	go_finalizeHMAC(_arg0, _arg1, _arg2);
++}
 +
-+type aesCipher struct {
-+	key  []byte
-+	kind C.CCAlgorithm
++void _mkcgo_go_freeHMAC(int32_t _arg0, void* _arg1) {
++	go_freeHMAC(_arg0, _arg1);
 +}
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	var alg C.CCAlgorithm
-+	switch len(key) {
-+	case 16, 24, 32:
-+		alg = C.kCCAlgorithmAES
-+	default:
-+		return nil, errors.New("crypto/aes: invalid key size")
-+	}
-+	c := &aesCipher{
-+		key:  slices.Clone(key),
-+		kind: alg,
-+	}
-+	return c, nil
++void _mkcgo_go_generateKeyEd25519(uint8_t* _arg0) {
++	go_generateKeyEd25519(_arg0);
 +}
 +
-+func (c *aesCipher) BlockSize() int { return aesBlockSize }
++int _mkcgo_go_hashBlockSize(int32_t _arg0) {
++	return go_hashBlockSize(_arg0);
++}
 +
-+func (c *aesCipher) Encrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/aes: input or output block is too small")
-+	}
++void* _mkcgo_go_hashCopy(int32_t _arg0, void* _arg1) {
++	return go_hashCopy(_arg0, _arg1);
++}
 +
-+	src, dst = src[:blockSize], dst[:blockSize]
++void _mkcgo_go_hashFree(int32_t _arg0, void* _arg1) {
++	go_hashFree(_arg0, _arg1);
++}
 +
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/aes: invalid buffer overlap")
-+	}
++void* _mkcgo_go_hashNew(int32_t _arg0) {
++	return go_hashNew(_arg0);
++}
 +
-+	status := C.CCCrypt(
-+		C.kCCEncrypt,          // Operation
-+		C.CCAlgorithm(c.kind), // Algorithm
-+		0,                     // Options
-+		pbase(c.key),          // Key
-+		C.size_t(len(c.key)),  // Key length
-+		nil,                   // IV
-+		pbase(src),            // Input
-+		C.size_t(blockSize),   // Input length
-+		pbase(dst),            // Output
-+		C.size_t(blockSize),   // Output length
-+		nil,                   // Output length
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/aes: encryption failed")
-+	}
++void _mkcgo_go_hashReset(int32_t _arg0, void* _arg1) {
++	go_hashReset(_arg0, _arg1);
 +}
 +
-+func (c *aesCipher) Decrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/aes: input or output block is too small")
-+	}
++int _mkcgo_go_hashSize(int32_t _arg0) {
++	return go_hashSize(_arg0);
++}
 +
-+	src, dst = src[:blockSize], dst[:blockSize]
++void _mkcgo_go_hashSum(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
++	go_hashSum(_arg0, _arg1, _arg2);
++}
 +
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/aes: invalid buffer overlap")
-+	}
++void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int _arg3) {
++	go_hashWrite(_arg0, _arg1, _arg2, _arg3);
++}
 +
-+	status := C.CCCrypt(
-+		C.kCCDecrypt,          // Operation
-+		C.CCAlgorithm(c.kind), // Algorithm
-+		0,                     // Options
-+		pbase(c.key),          // Key
-+		C.size_t(len(c.key)),  // Key length
-+		nil,                   // IV
-+		pbase(src),            // Input
-+		C.size_t(blockSize),   // Input length
-+		pbase(dst),            // Output
-+		C.size_t(blockSize),   // Output length
-+		nil,                   // Output length
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/aes: decryption failed")
-+	}
++void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, int _arg2) {
++	return go_initHMAC(_arg0, _arg1, _arg2);
 +}
 +
-+type aesGCM struct {
-+	key []byte
-+	tls cipherGCMTLS
-+	// minNextNonce is the minimum value that the next nonce can be, enforced by
-+	// all TLS modes.
-+	minNextNonce uint64
-+	// mask is the nonce mask used in TLS 1.3 mode.
-+	mask uint64
-+	// maskInitialized is true if mask has been initialized. This happens during
-+	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
-+	maskInitialized bool
++int _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
++	return go_newPrivateKeyEd25519FromSeed(_arg0, _arg1);
 +}
 +
-+type noGCM struct {
-+	cipher.Block
++int _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
++	return go_newPublicKeyEd25519(_arg0, _arg1);
 +}
 +
-+// NewGCM constructs a GCM block mode for AES using the cryptokit package
-+func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
-+	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
-+		return nil, errors.New("crypto/aes: GCM tag and nonce sizes can't be non-standard at the same time")
-+	}
-+	// Fall back to standard library for GCM with non-standard nonce or tag size.
-+	if nonceSize != gcmStandardNonceSize {
-+		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
-+	}
-+	if tagSize != gcmTagSize {
-+		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
-+	}
-+	return &aesGCM{key: c.key, tls: cipherGCMTLSNone}, nil
++int _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
++	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+func (g *aesGCM) NonceSize() int { return gcmStandardNonceSize }
++int _mkcgo_go_supportsSHA3(void) {
++	return go_supportsSHA3();
++}
 +
-+func (g *aesGCM) Overhead() int { return gcmTagSize }
++void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int _arg3) {
++	go_updateHMAC(_arg0, _arg1, _arg2, _arg3);
++}
 +
-+func (g *aesGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
-+	}
-+	if uint64(len(plaintext)) > ((1<<32)-2)*aesBlockSize || len(plaintext)+gcmTagSize < len(plaintext) {
-+		panic("cipher: message too large for GCM")
-+	}
-+	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
-+		panic("cipher: message too large for buffer")
-+	}
++int _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
++	return go_verifyEd25519(_arg0, _arg1, _arg2, _arg3);
++}
 +
-+	if g.tls != cipherGCMTLSNone {
-+		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
-+		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
-+		}
-+		counter := bigUint64(nonce[gcmTlsFixedNonceSize:])
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
+new file mode 100644
+index 00000000000000..5eb798569decda
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
+@@ -0,0 +1,49 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+		// TLS 1.3 Masking
-+		if g.tls == cipherGCMTLS13 {
-+			if !g.maskInitialized {
-+				g.mask = counter
-+				g.maskInitialized = true
-+			}
-+			// Apply mask to the counter
-+			counter ^= g.mask
-+		}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+		// Enforce monotonicity and max limit
-+		const maxUint64 = 1<<64 - 1
-+		if counter == maxUint64 {
-+			panic("cipher: nonce counter must be less than 2^64 - 1")
-+		}
-+		if counter < g.minNextNonce {
-+			panic("cipher: nonce counter must be strictly monotonically increasing")
-+		}
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
 +
-+		defer func() {
-+			g.minNextNonce = counter + 1
-+		}()
-+	}
++#include <stddef.h>
++#include <stdint.h>
 +
-+	// Make room in dst to append plaintext+overhead.
-+	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
 +
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, plaintext) {
-+		panic("cipher: invalid buffer overlap")
-+	}
++typedef void* mkcgo_err_state;
++mkcgo_err_state mkcgo_err_retrieve();
++void mkcgo_err_free(mkcgo_err_state);
 +
-+	tag := out[len(out)-gcmTagSize:]
-+	err := cryptokit.EncryptAESGCM(g.key, plaintext, nonce, additionalData, out[:len(out)-gcmTagSize], tag)
-+	if err != 0 {
-+		panic("cipher: encryption failed")
-+	}
-+	return ret
-+}
++void _mkcgo_go_MD5(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA1(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA256(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA384(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA3_256(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA3_384(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_SHA512(const uint8_t*, size_t, const uint8_t*);
++void* _mkcgo_go_copyHMAC(int32_t, void*);
++int _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
++void _mkcgo_go_freeHMAC(int32_t, void*);
++void _mkcgo_go_generateKeyEd25519(uint8_t*);
++int _mkcgo_go_hashBlockSize(int32_t);
++void* _mkcgo_go_hashCopy(int32_t, void*);
++void _mkcgo_go_hashFree(int32_t, void*);
++void* _mkcgo_go_hashNew(int32_t);
++void _mkcgo_go_hashReset(int32_t, void*);
++int _mkcgo_go_hashSize(int32_t);
++void _mkcgo_go_hashSum(int32_t, void*, uint8_t*);
++void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, int);
++void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, int);
++int _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++int _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++int _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int _mkcgo_go_supportsSHA3(void);
++void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, int);
++int _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
 +
-+func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
-+	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
-+		panic("crypto/cipher: message too large for GCM")
-+	}
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
-+	}
-+	if len(out) != len(plaintext)+gcmTagSize {
-+		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
-+	}
-+	if inexactOverlap(out, plaintext) {
-+		panic("crypto/cipher: invalid buffer overlap of output and input")
-+	}
-+	if anyOverlap(out, additionalData) {
-+		panic("crypto/cipher: invalid buffer overlap of output and additional data")
-+	}
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
+new file mode 100644
+index 00000000000000..1b6d6e18268a91
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
+@@ -0,0 +1,189 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	if g.tls != cipherGCMTLSNone {
-+		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
-+	}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+	tag := out[len(out)-gcmTagSize:]
-+	// Generate a random nonce
-+	RandReader.Read(nonce)
-+	err := cryptokit.EncryptAESGCM(g.key, plaintext, nonce, additionalData, out[:len(out)-gcmTagSize], tag)
-+	if err != 0 {
-+		panic("cipher: encryption failed")
-+	}
-+}
++//go:build !cgo
 +
-+var errOpen = errors.New("cipher: message authentication failed")
++#include "textflag.h"
 +
-+func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
-+	}
-+	if len(ciphertext) < gcmTagSize {
-+		return nil, errOpen
-+	}
-+	if uint64(len(ciphertext)) > ((1<<32)-2)*aesBlockSize+gcmTagSize {
-+		return nil, errOpen
-+	}
-+	// BoringCrypto does not do any TLS check when decrypting, neither do we.
 +
-+	// Ensure we don't process if ciphertext lacks both ciphertext and tag
-+	if len(ciphertext) < gcmTagSize {
-+		return nil, errors.New("decryption failed: ciphertext too short for tag")
-+	}
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
 +
-+	tag := ciphertext[len(ciphertext)-gcmTagSize:]
-+	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
 +
-+	// Make room in dst to append ciphertext without tag.
-+	ret, out := sliceForAppend(dst, len(ciphertext))
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_go_MD5_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_MD5(SB)
++GLOBL   ·_mkcgo_go_MD5_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_MD5_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_MD5_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA1_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA1(SB)
++GLOBL   ·_mkcgo_go_SHA1_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA1_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA1_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA256_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA256(SB)
++GLOBL   ·_mkcgo_go_SHA256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA384_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA384(SB)
++GLOBL   ·_mkcgo_go_SHA384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_256_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA3_256(SB)
++GLOBL   ·_mkcgo_go_SHA3_256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA3_256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_384_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA3_384(SB)
++GLOBL   ·_mkcgo_go_SHA3_384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA3_384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_512_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA3_512(SB)
++GLOBL   ·_mkcgo_go_SHA3_512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA3_512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_512_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA512_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_SHA512(SB)
++GLOBL   ·_mkcgo_go_SHA512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_SHA512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA512_trampoline<>(SB)
++
++TEXT _mkcgo_go_copyHMAC_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_copyHMAC(SB)
++GLOBL   ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_decryptAESGCM(SB)
++GLOBL   ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_encryptAESGCM(SB)
++GLOBL   ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_expandHKDF_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_expandHKDF(SB)
++GLOBL   ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_expandHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_expandHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_extractHKDF_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_extractHKDF(SB)
++GLOBL   ·_mkcgo_go_extractHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_extractHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_extractHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_finalizeHMAC_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_finalizeHMAC(SB)
++GLOBL   ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_finalizeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_freeHMAC_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_freeHMAC(SB)
++GLOBL   ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_generateKeyEd25519(SB)
++GLOBL   ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashBlockSize(SB)
++GLOBL   ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashCopy_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashCopy(SB)
++GLOBL   ·_mkcgo_go_hashCopy_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashCopy_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashCopy_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashFree_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashFree(SB)
++GLOBL   ·_mkcgo_go_hashFree_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashFree_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashFree_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashNew_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashNew(SB)
++GLOBL   ·_mkcgo_go_hashNew_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashNew_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashNew_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashReset_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashReset(SB)
++GLOBL   ·_mkcgo_go_hashReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashReset_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSize_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashSize(SB)
++GLOBL   ·_mkcgo_go_hashSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSum_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashSum(SB)
++GLOBL   ·_mkcgo_go_hashSum_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashSum_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSum_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashWrite_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_hashWrite(SB)
++GLOBL   ·_mkcgo_go_hashWrite_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_hashWrite_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashWrite_trampoline<>(SB)
++
++TEXT _mkcgo_go_initHMAC_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_initHMAC(SB)
++GLOBL   ·_mkcgo_go_initHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_initHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_initHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_newPrivateKeyEd25519FromSeed(SB)
++GLOBL   ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPublicKeyEd25519_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_newPublicKeyEd25519(SB)
++GLOBL   ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_signEd25519_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_signEd25519(SB)
++GLOBL   ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_supportsSHA3(SB)
++GLOBL   ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_supportsSHA3_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsSHA3_trampoline<>(SB)
++
++TEXT _mkcgo_go_updateHMAC_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_updateHMAC(SB)
++GLOBL   ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_verifyEd25519(SB)
++GLOBL   ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
+new file mode 100644
+index 00000000000000..7f96092c8433e0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
+@@ -0,0 +1,143 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, ciphertext) {
-+		panic("cipher: invalid buffer overlap")
-+	}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+	decSize, err := cryptokit.DecryptAESGCM(g.key, ciphertext, nonce, additionalData, tag, out)
-+	if err != 0 || int(decSize) != len(ciphertext) {
-+		// If the decrypted data size does not match, zero out `out` and return `errOpen`
-+		for i := range out {
-+			out[i] = 0
-+		}
-+		return nil, errOpen
-+	}
-+	return ret, nil
++package cryptokit
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#include "zcryptokit.h"
++*/
++import "C"
++import "unsafe"
++
++//go:nosplit
++func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
 +}
 +
-+// NewGCMTLS returns a GCM cipher specific to TLS
-+// and should not be used for non-TLS purposes.
-+func NewGCMTLS(block cipher.Block) (cipher.AEAD, error) {
-+	cipher, ok := block.(*aesCipher)
-+	if !ok {
-+		return nil, errors.New("crypto/aes: invalid block cipher")
-+	}
-+	return &aesGCM{key: cipher.key, tls: cipherGCMTLS12}, nil
++func MD5(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_MD5((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
-+// for non-TLS purposes.
-+func NewGCMTLS13(block cipher.Block) (cipher.AEAD, error) {
-+	cipher, ok := block.(*aesCipher)
-+	if !ok {
-+		return nil, errors.New("crypto/aes: invalid block cipher")
-+	}
-+	return &aesGCM{key: cipher.key, tls: cipherGCMTLS13}, nil
++func SHA1(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA1((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(C.kCCEncrypt, c.kind, c.key, iv)
++func SHA256(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(C.kCCDecrypt, c.kind, c.key, iv)
++func SHA384(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
-+func sliceForAppend(in []byte, n int) (head, tail []byte) {
-+	if total := len(in) + n; cap(in) >= total {
-+		head = in[:total]
-+	} else {
-+		head = make([]byte, total)
-+		copy(head, in)
-+	}
-+	tail = head[len(in):]
-+	return
++func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+func bigUint64(b []byte) uint64 {
-+	_ = b[7] // bounds check hint to compiler; see go.dev/issue/14808
-+	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
-+		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
-new file mode 100644
-index 00000000000000..865e22ab6a3dda
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
-@@ -0,0 +1,16 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+package xcrypto
++func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
 +
-+// This file does not have build constraints to
-+// facilitate using BigInt in Go crypto.
-+// Go crypto references BigInt unconditionally,
-+// even if it is not finally used.
++func SHA512(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
 +
-+// A BigInt is the big-endian bytes from a math/big BigInt,
-+// which are normalized to remove any leading 0 byte.
-+// Windows BCrypt accepts this specific data format.
-+// This definition allows us to avoid importing math/big.
-+// Conversion between BigInt and *big.Int is in xcrypto/bbig.
-+type BigInt []byte
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
-new file mode 100644
-index 00000000000000..02f265fe56b592
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cgo_go124.go
-@@ -0,0 +1,23 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	return C._mkcgo_go_copyHMAC(C.int32_t(hashAlgorithm), ptr)
++}
 +
-+//go:build go1.24 && darwin
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
++	return int32(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++}
 +
-+package xcrypto
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
++	return int32(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++}
 +
-+// The following noescape and nocallback directives are used to prevent the Go
-+// compiler from allocating function parameters on the heap. See
-+// https://github.com/golang/go/blob/0733682e5ff4cd294f5eccb31cbe87a543147bc6/src/cmd/cgo/doc.go#L439-L461
-+//
-+// If possible, write a C wrapper function to optimize a call rather than using
-+// this feature so the optimization will work for all supported Go versions.
-+//
-+// This is just a performance optimization. Only add functions that have been
-+// observed to benefit from these directives, not every function that is merely
-+// expected to meet the noescape/nocallback criteria.
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int32 {
++	return int32(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
++}
 +
-+/*
-+#cgo noescape SecRandomCopyBytes
-+#cgo nocallback SecRandomCopyBytes
-+*/
-+import "C"
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
-new file mode 100644
-index 00000000000000..9f3a8f92bd43fc
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
-@@ -0,0 +1,122 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int32 {
++	return int32(C._mkcgo_go_extractHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(secret))), C.size_t(len(secret)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk))))
++}
 +
-+//go:build darwin
++func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	C._mkcgo_go_finalizeHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
 +
-+package xcrypto
++func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_freeHMAC(C.int32_t(hashFunction), ptr)
++}
 +
-+// #include <CommonCrypto/CommonCrypto.h>
-+import "C"
++func GenerateKeyEd25519(key []uint8) {
++	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
++}
 +
-+import (
-+	"runtime"
-+	"unsafe"
-+)
++func HashBlockSize(hashAlgorithm int32) int32 {
++	return int32(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
++}
 +
-+type cbcCipher struct {
-+	blockSize int
-+	cryptor   C.CCCryptorRef
++func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	return C._mkcgo_go_hashCopy(C.int32_t(hashAlgorithm), ptr)
 +}
 +
-+func newCBC(operation C.CCOperation, kind C.CCAlgorithm, key, iv []byte) *cbcCipher {
-+	var blockSize int
-+	switch kind {
-+	case C.kCCAlgorithmAES:
-+		blockSize = aesBlockSize
-+	case C.kCCAlgorithmDES, C.kCCAlgorithm3DES:
-+		blockSize = desBlockSize
-+	default:
-+		panic("invalid algorithm")
-+	}
++func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_hashFree(C.int32_t(hashAlgorithm), ptr)
++}
 +
-+	// Create and initialize the cbcMode struct with CCCryptorCreate here
-+	x := &cbcCipher{blockSize: blockSize}
-+	status := C.CCCryptorCreateWithMode(
-+		operation,           // Specifies whether encryption or decryption is performed (kCCEncrypt or kCCDecrypt).
-+		C.kCCModeCBC,        // Mode of operation, here explicitly set to CBC (Cipher Block Chaining).
-+		C.CCAlgorithm(kind), // The encryption algorithm (e.g., kCCAlgorithmAES128, kCCAlgorithmDES).
-+		C.ccNoPadding,       // Padding option, set to no padding; padding can be handled at a higher level if necessary.
-+		pbase(iv),           // Initialization Vector (IV) for the cipher, required for CBC mode. Should be nil for ECB mode.
-+		pbase(key),          // Pointer to the encryption key.
-+		C.size_t(len(key)),  // Length of the encryption key in bytes.
-+		nil,                 // Tweak key, used only for XTS mode; here set to nil as it’s not required for CBC.
-+		0,                   // Length of the tweak key, set to 0 as tweak is nil.
-+		0,                   // Number of rounds, mainly for RC2 and Blowfish; not used here, so set to 0.
-+		0,                   // Mode options for CTR and F8 modes; not used for CBC, so set to 0.
-+		&x.cryptor,          // Pointer to the CCCryptorRef output, which will hold the state for encryption or decryption.
-+	)
++func HashNew(hashAlgorithm int32) unsafe.Pointer {
++	return C._mkcgo_go_hashNew(C.int32_t(hashAlgorithm))
++}
 +
-+	if status != C.kCCSuccess {
-+		panic("crypto/des: CCCryptorCreate failed")
-+	}
++func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_hashReset(C.int32_t(hashAlgorithm), ptr)
++}
 +
-+	runtime.SetFinalizer(x, (*cbcCipher).finalize)
-+	return x
++func HashSize(hashAlgorithm int32) int32 {
++	return int32(C._mkcgo_go_hashSize(C.int32_t(hashAlgorithm)))
++}
 +
++func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	C._mkcgo_go_hashSum(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
 +}
 +
-+func (x *cbcCipher) finalize() {
-+	if x.cryptor != nil {
-+		C.CCCryptorRelease(x.cryptor)
-+		x.cryptor = nil
-+	}
++func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
++	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int(len(data)))
 +}
 +
-+func (x *cbcCipher) BlockSize() int { return x.blockSize }
++func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
++	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.int(len(key)))
++}
 +
-+func (x *cbcCipher) CryptBlocks(dst, src []byte) {
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
-+	}
-+	if len(src)%x.blockSize != 0 {
-+		panic("crypto/cipher: input not full blocks")
-+	}
-+	if len(dst) < len(src) {
-+		panic("crypto/cipher: output smaller than input")
-+	}
-+	if len(src) == 0 {
-+		return
-+	}
-+	var outLength C.size_t
-+	status := C.CCCryptorUpdate(
-+		x.cryptor,          // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
-+		pbase(src),         // Pointer to the input data (source buffer) to be encrypted or decrypted.
-+		C.size_t(len(src)), // Length of the input data in bytes.
-+		pbase(dst),         // Pointer to the output buffer (destination buffer) where the result will be stored.
-+		C.size_t(len(dst)), // Size of the output buffer in bytes; must be large enough to hold the processed data.
-+		&outLength,         // Pointer to a variable that will contain the number of bytes written to the output buffer.
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/cipher: CCCryptorUpdate failed")
-+	}
-+	runtime.KeepAlive(x)
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int32 {
++	return int32(C._mkcgo_go_newPrivateKeyEd25519FromSeed((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed)))))
 +}
 +
-+func (x *cbcCipher) SetIV(iv []byte) {
-+	if len(iv) != x.blockSize {
-+		panic("crypto/cipher: incorrect IV length")
-+	}
-+	status := C.CCCryptorReset(
-+		x.cryptor, // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
-+		pbase(iv), // Pointer to the new IV to be set.
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/cipher: CCCryptorReset failed")
-+	}
-+	runtime.KeepAlive(x)
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int32 {
++	return int32(C._mkcgo_go_newPublicKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(pub)))))
 +}
 +
-+// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int32 {
++	return int32(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
++}
 +
-+func anyOverlap(x, y []byte) bool {
-+	return len(x) > 0 && len(y) > 0 &&
-+		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
-+		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++func SupportsSHA3() int32 {
++	return int32(C._mkcgo_go_supportsSHA3())
 +}
 +
-+func inexactOverlap(x, y []byte) bool {
-+	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
-+		return false
-+	}
-+	return anyOverlap(x, y)
++func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
++	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int(len(data)))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
++
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int32 {
++	return int32(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
 new file mode 100644
-index 00000000000000..ce490c1167c536
+index 00000000000000..8e7b8901b830b1
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
-@@ -0,0 +1,117 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
+@@ -0,0 +1,45 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package xcrypto
++//go:build go1.24 && !cmd_go_bootstrap
 +
-+// #include <CommonCrypto/CommonCrypto.h>
++package cryptokit
++
++/*
++#cgo noescape _mkcgo_go_MD5
++#cgo nocallback _mkcgo_go_MD5
++#cgo noescape _mkcgo_go_SHA1
++#cgo nocallback _mkcgo_go_SHA1
++#cgo noescape _mkcgo_go_SHA256
++#cgo nocallback _mkcgo_go_SHA256
++#cgo noescape _mkcgo_go_SHA384
++#cgo nocallback _mkcgo_go_SHA384
++#cgo noescape _mkcgo_go_SHA3_256
++#cgo nocallback _mkcgo_go_SHA3_256
++#cgo noescape _mkcgo_go_SHA3_384
++#cgo nocallback _mkcgo_go_SHA3_384
++#cgo noescape _mkcgo_go_SHA3_512
++#cgo nocallback _mkcgo_go_SHA3_512
++#cgo noescape _mkcgo_go_SHA512
++#cgo nocallback _mkcgo_go_SHA512
++#cgo noescape _mkcgo_go_finalizeHMAC
++#cgo nocallback _mkcgo_go_finalizeHMAC
++#cgo nocallback _mkcgo_go_freeHMAC
++#cgo nocallback _mkcgo_go_hashBlockSize
++#cgo nocallback _mkcgo_go_hashCopy
++#cgo nocallback _mkcgo_go_hashFree
++#cgo nocallback _mkcgo_go_hashNew
++#cgo nocallback _mkcgo_go_hashReset
++#cgo nocallback _mkcgo_go_hashSize
++#cgo noescape _mkcgo_go_hashSum
++#cgo nocallback _mkcgo_go_hashSum
++#cgo noescape _mkcgo_go_hashWrite
++#cgo nocallback _mkcgo_go_hashWrite
++#cgo nocallback _mkcgo_go_initHMAC
++#cgo nocallback _mkcgo_go_supportsSHA3
++#cgo noescape _mkcgo_go_updateHMAC
++#cgo nocallback _mkcgo_go_updateHMAC
++*/
 +import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
+new file mode 100644
+index 00000000000000..3f5109aff64cb8
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
+@@ -0,0 +1,218 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++package cryptokit
++
 +import (
-+	"crypto/cipher"
-+	"errors"
-+	"slices"
++	"runtime"
++	"unsafe"
 +)
 +
-+const desBlockSize = C.kCCBlockSizeDES
++var _ = runtime.GOOS
 +
-+type desCipher struct {
-+	key  []byte
-+	kind C.CCAlgorithm
++//go:linkname go_MD5 go_MD5
++//go:linkname go_SHA1 go_SHA1
++//go:linkname go_SHA256 go_SHA256
++//go:linkname go_SHA384 go_SHA384
++//go:linkname go_SHA3_256 go_SHA3_256
++//go:linkname go_SHA3_384 go_SHA3_384
++//go:linkname go_SHA3_512 go_SHA3_512
++//go:linkname go_SHA512 go_SHA512
++//go:linkname go_copyHMAC go_copyHMAC
++//go:linkname go_decryptAESGCM go_decryptAESGCM
++//go:linkname go_encryptAESGCM go_encryptAESGCM
++//go:linkname go_expandHKDF go_expandHKDF
++//go:linkname go_extractHKDF go_extractHKDF
++//go:linkname go_finalizeHMAC go_finalizeHMAC
++//go:linkname go_freeHMAC go_freeHMAC
++//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
++//go:linkname go_hashBlockSize go_hashBlockSize
++//go:linkname go_hashCopy go_hashCopy
++//go:linkname go_hashFree go_hashFree
++//go:linkname go_hashNew go_hashNew
++//go:linkname go_hashReset go_hashReset
++//go:linkname go_hashSize go_hashSize
++//go:linkname go_hashSum go_hashSum
++//go:linkname go_hashWrite go_hashWrite
++//go:linkname go_initHMAC go_initHMAC
++//go:linkname go_newPrivateKeyEd25519FromSeed go_newPrivateKeyEd25519FromSeed
++//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
++//go:linkname go_signEd25519 go_signEd25519
++//go:linkname go_supportsSHA3 go_supportsSHA3
++//go:linkname go_updateHMAC go_updateHMAC
++//go:linkname go_verifyEd25519 go_verifyEd25519
++
++var go_MD5 byte
++var go_SHA1 byte
++var go_SHA256 byte
++var go_SHA384 byte
++var go_SHA3_256 byte
++var go_SHA3_384 byte
++var go_SHA3_512 byte
++var go_SHA512 byte
++var go_copyHMAC byte
++var go_decryptAESGCM byte
++var go_encryptAESGCM byte
++var go_expandHKDF byte
++var go_extractHKDF byte
++var go_finalizeHMAC byte
++var go_freeHMAC byte
++var go_generateKeyEd25519 byte
++var go_hashBlockSize byte
++var go_hashCopy byte
++var go_hashFree byte
++var go_hashNew byte
++var go_hashReset byte
++var go_hashSize byte
++var go_hashSum byte
++var go_hashWrite byte
++var go_initHMAC byte
++var go_newPrivateKeyEd25519FromSeed byte
++var go_newPublicKeyEd25519 byte
++var go_signEd25519 byte
++var go_supportsSHA3 byte
++var go_updateHMAC byte
++var go_verifyEd25519 byte
++
++func MD5(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_MD5)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA1(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA1)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA256(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA384(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA512(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_copyHMAC)), uintptr(hashAlgorithm), uintptr(ptr))
++	return unsafe.Pointer(r0)
 +}
 +
-+// NewDESCipher creates a new DES cipher block using the specified key (8 bytes).
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 8 {
-+		return nil, errors.New("crypto/des: invalid key size for DES")
-+	}
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
++	return int32(r0)
++}
 +
-+	c := &desCipher{
-+		key:  slices.Clone(key),
-+		kind: C.kCCAlgorithmDES,
-+	}
-+	return c, nil
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
++	return int32(r0)
 +}
 +
-+// NewTripleDESCipher creates a new 3DES cipher block using the specified key (24 bytes).
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 24 {
-+		return nil, errors.New("crypto/des: invalid key size for 3DES")
-+	}
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_expandHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)), uintptr(unsafe.Pointer(unsafe.SliceData(info))), uintptr(len(info)), uintptr(unsafe.Pointer(unsafe.SliceData(okm))), uintptr(len(okm)))
++	return int32(r0)
++}
 +
-+	c := &desCipher{
-+		key:  slices.Clone(key),
-+		kind: C.kCCAlgorithm3DES,
-+	}
-+	return c, nil
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_extractHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(secret))), uintptr(len(secret)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)))
++	return int32(r0)
 +}
 +
-+func (c *desCipher) BlockSize() int { return desBlockSize }
++func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_finalizeHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
 +
-+func (c *desCipher) Encrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/des: input or output block is too small")
-+	}
++func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_freeHMAC)), uintptr(hashFunction), uintptr(ptr))
++}
 +
-+	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
-+		panic("crypto/des: invalid buffer overlap")
-+	}
++func GenerateKeyEd25519(key []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
++}
 +
-+	var outLength C.size_t
-+	status := C.CCCrypt(
-+		C.kCCEncrypt,
-+		C.CCAlgorithm(c.kind),
-+		C.kCCOptionECBMode,
-+		pbase(c.key),
-+		C.size_t(len(c.key)),
-+		nil,
-+		pbase(src[:blockSize]),
-+		C.size_t(blockSize),
-+		pbase(dst[:blockSize]),
-+		C.size_t(blockSize),
-+		&outLength,
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/des: encryption failed")
-+	}
++func HashBlockSize(hashAlgorithm int32) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashBlockSize)), uintptr(hashAlgorithm))
++	return int32(r0)
 +}
 +
-+func (c *desCipher) Decrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/des: input or output block is too small")
-+	}
++func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashCopy)), uintptr(hashAlgorithm), uintptr(ptr))
++	return unsafe.Pointer(r0)
++}
 +
-+	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
-+		panic("crypto/des: invalid buffer overlap")
-+	}
++func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashFree)), uintptr(hashAlgorithm), uintptr(ptr))
++}
 +
-+	var outLength C.size_t
-+	status := C.CCCrypt(
-+		C.kCCDecrypt,
-+		C.CCAlgorithm(c.kind),
-+		C.kCCOptionECBMode,
-+		pbase(c.key),
-+		C.size_t(len(c.key)),
-+		nil,
-+		pbase(src[:blockSize]),
-+		C.size_t(blockSize),
-+		pbase(dst[:blockSize]),
-+		C.size_t(blockSize),
-+		&outLength,
-+	)
-+	if status != C.kCCSuccess {
-+		panic("crypto/des: decryption failed")
-+	}
++func HashNew(hashAlgorithm int32) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashNew)), uintptr(hashAlgorithm))
++	return unsafe.Pointer(r0)
 +}
 +
-+// CBC mode encrypter
-+func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(C.kCCEncrypt, c.kind, c.key, iv)
++func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashReset)), uintptr(hashAlgorithm), uintptr(ptr))
 +}
 +
-+// CBC mode decrypter
-+func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(C.kCCDecrypt, c.kind, c.key, iv)
++func HashSize(hashAlgorithm int32) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashSize)), uintptr(hashAlgorithm))
++	return int32(r0)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
-new file mode 100644
-index 00000000000000..e57bde33af4c98
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
-@@ -0,0 +1,32 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashSum)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
 +
-+package xcrypto
++func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashWrite)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
++}
 +
-+func curveToKeySizeInBits(curve string) int {
-+	switch curve {
-+	case "P-256":
-+		return 256
-+	case "P-384":
-+		return 384
-+	case "P-521":
-+		return 521
-+	default:
-+		return 0
-+	}
++func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_initHMAC)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)))
++	return unsafe.Pointer(r0)
 +}
 +
-+func curveToKeySizeInBytes(curve string) int {
-+	switch curve {
-+	case "P-256":
-+		return (256 + 7) / 8
-+	case "P-384":
-+		return (384 + 7) / 8
-+	case "P-521":
-+		return (521 + 7) / 8
-+	default:
-+		return 0
-+	}
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPrivateKeyEd25519FromSeed)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(seed))))
++	return int32(r0)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
++
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPublicKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(pub))))
++	return int32(r0)
++}
++
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sigBuffer))))
++	return int32(r0)
++}
++
++func SupportsSHA3() int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsSHA3)))
++	return int32(r0)
++}
++
++func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_updateHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
++}
++
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sig))))
++	return int32(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
 new file mode 100644
-index 00000000000000..3bdd3937670285
+index 00000000000000..f392c1d6120a8a
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
-@@ -0,0 +1,135 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
+@@ -0,0 +1,146 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
++// Code generated by genswiftimports. DO NOT EDIT.
 +
-+//go:build darwin
++//go:build !cgo && darwin && amd64
 +
-+package xcrypto
++package cryptokit
 +
-+// #include <Security/Security.h>
-+import "C"
-+import (
-+	"errors"
-+	"runtime"
-+	"slices"
-+)
++//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
++//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
++//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
++//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
++//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic ___chkstk_darwin ___chkstk_darwin ""
++//go:cgo_import_dynamic memcpy memcpy ""
++//go:cgo_import_dynamic memset memset ""
++//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
++//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
++//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
++//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
++//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
++//go:cgo_import_dynamic swift_release swift_release ""
++//go:cgo_import_dynamic swift_retain swift_retain ""
++//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+new file mode 100644
+index 00000000000000..6ea1c63b6d02bd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+@@ -0,0 +1,145 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++// Code generated by genswiftimports. DO NOT EDIT.
 +
-+type PublicKeyECDH struct {
-+	_pkey C.SecKeyRef
-+	bytes []byte
-+}
++//go:build !cgo && darwin && arm64
 +
-+func (k *PublicKeyECDH) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
-+	}
-+}
++package cryptokit
 +
-+type PrivateKeyECDH struct {
-+	_pkey C.SecKeyRef
-+	pub   []byte
-+}
++//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
++//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
++//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
++//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
++//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic __chkstk_darwin __chkstk_darwin "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic memcpy memcpy ""
++//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
++//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
++//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
++//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
++//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
++//go:cgo_import_dynamic swift_release swift_release ""
++//go:cgo_import_dynamic swift_retain swift_retain ""
++//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+new file mode 100644
+index 00000000000000..74ee18d383784e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+@@ -0,0 +1,9 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (k *PrivateKeyECDH) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
-+	}
-+}
++// Package security provides a Go interface to the Security framework
++package security
 +
-+func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
-+	if len(bytes) < 1 {
-+		return nil, errors.New("NewPublicKeyECDH: missing key")
-+	}
-+	pubKeyRef, err := createSecKeyWithData(bytes, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPublic)
-+	if err != nil {
-+		return nil, err
-+	}
-+	pubKey := &PublicKeyECDH{pubKeyRef, slices.Clone(bytes)}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
-+	return pubKey, nil
-+}
++//go:generate go run ../../cmd/checkheader shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -package security --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+new file mode 100644
+index 00000000000000..1b9d829305a142
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+@@ -0,0 +1,111 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// Security framework C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zsecurity.h" instead.
 +
-+// bytes expects the public key to be in uncompressed ANSI X9.63 format
-+func NewPrivateKeyECDH(curve string, pub, priv []byte) (*PrivateKeyECDH, error) {
-+	key := append(slices.Clone(pub), priv...)
-+	privKeyRef, err := createSecKeyWithData(key, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPrivate)
-+	if err != nil {
-+		return nil, err
-+	}
-+	privKey := &PrivateKeyECDH{privKeyRef, pub}
-+	runtime.SetFinalizer(privKey, (*PrivateKeyECDH).finalize)
-+	return privKey, nil
-+}
++#ifndef _GO_SECURITY_SHIMS_H // only include this header once
++#define _GO_SECURITY_SHIMS_H
 +
-+func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
-+	defer runtime.KeepAlive(k)
-+	pubKeyRef := C.SecKeyCopyPublicKey(k._pkey)
-+	if pubKeyRef == 0 {
-+		return nil, errors.New("failed to extract public key")
-+	}
-+	pubKey := &PublicKeyECDH{pubKeyRef, k.pub}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
-+	return pubKey, nil
-+}
++#include <stdbool.h> // bool
++#include <stdint.h>  // uint64_t
++#include <stdlib.h>  // size_t
 +
-+func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
-+	defer runtime.KeepAlive(priv)
-+	defer runtime.KeepAlive(pub)
++// The following includes are used by the checkheader tool.
++// #include <Security/Security.h>
 +
-+	var algorithm C.CFStringRef = C.kSecKeyAlgorithmECDHKeyExchangeStandard
++typedef unsigned char Boolean;
++typedef void *SecRandomRef;
++typedef void *SecKeyRef;
++typedef void *CFDataRef;
++typedef void *CFTypeRef;
++typedef void *CFStringRef;
++typedef void *CFDictionaryRef;
++typedef void *CFMutableDictionaryRef;
++typedef void *CFNumberRef;
++typedef void *CFErrorRef;
++typedef void *CFAllocatorRef;
++typedef void *CFDictionaryKeyCallBacks;
++typedef void *CFDictionaryValueCallBacks;
++typedef int32_t CFIndex;
++typedef CFStringRef SecKeyAlgorithm;
++
++typedef enum {
++  kSecKeyOperationTypeSign = 0,
++  kSecKeyOperationTypeVerify = 1,
++  kSecKeyOperationTypeEncrypt = 2,
++  kSecKeyOperationTypeDecrypt = 3,
++  kSecKeyOperationTypeKeyExchange = 4
++} SecKeyOperationType;
++
++typedef enum {
++  kCFStringEncodingUTF8 = 0x08000100
++} CFStringEncoding;
++
++typedef enum {
++  kCFNumberIntType = 9
++} CFNumberType;
++
++extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
++extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyTypeECSECPrimeRandom __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmECDHKeyExchangeStandard __attribute__((framework(Security, A)));
++// PSS
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512 __attribute__((framework(Security, A)));
++// RAW
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw __attribute__((framework(Security, A)));
++// PKCS1v15
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw __attribute__((framework(Security, A)));
++// OAEP
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512 __attribute__((framework(Security, A)));
++// ECDSA
++extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962 __attribute__((framework(Security, A)));
++
++int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
++SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCopyKeyExchangeResult(SecKeyRef privateKey, SecKeyAlgorithm algorithm, SecKeyRef publicKey, CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((framework(Security, A)));
++Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((framework(Security, A)));
++Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
++size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
++
++CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((framework(CoreFoundation, A), slice(bytes, length)));
++CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
++void CFDictionarySetValue(CFMutableDictionaryRef theDict, const void *key, const void *value) __attribute__((framework(CoreFoundation, A)));
++CFStringRef CFErrorCopyDescription(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++const char *CFStringGetCStringPtr(CFStringRef str, CFStringEncoding encoding) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFStringGetLength(CFStringRef str) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFErrorGetCode(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++
++#endif // _GO_SECURITY_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..a432803a70b27b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+@@ -0,0 +1,20 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	supported := C.SecKeyIsAlgorithmSupported(priv._pkey, C.kSecKeyOperationTypeKeyExchange, algorithm)
-+	if supported == 0 {
-+		return nil, errors.New("ECDH algorithm not supported for the given private key")
-+	}
++//go:build !cgo
 +
-+	var cfErr C.CFErrorRef
-+	// Perform the key exchange
-+	sharedSecretRef := C.SecKeyCopyKeyExchangeResult(
-+		priv._pkey,
-+		algorithm,
-+		pub._pkey,
-+		C.CFDictionaryRef(0),
-+		&cfErr,
-+	)
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return nil, err
-+	}
-+	defer C.CFRelease(C.CFTypeRef(sharedSecretRef))
++package security
 +
-+	sharedSecret := cfDataToBytes(sharedSecretRef)
-+	return sharedSecret, nil
-+}
++import (
++	_ "unsafe"
++)
 +
-+func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, nil, errors.New("unsupported curve")
-+	}
-+	keySizeInBits := curveToKeySizeInBits(curve)
-+	// Generate the private key and get its DER representation
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	pub, priv, err := extractECDHComponents(privKeyDER, keySize)
-+	if err != nil {
-+		C.CFRelease(C.CFTypeRef(privKeyRef))
-+		return nil, nil, err
-+	}
-+	k := &PrivateKeyECDH{privKeyRef, pub}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
-+	return k, priv, nil
-+}
++//go:linkname syscall_syscallN syscall.syscalln
 +
-+func extractECDHComponents(der []byte, keySize int) (pub, priv []byte, err error) {
-+	// The private component is the last of the three equally-sized chunks
-+	// for the elliptic curve private key.
-+	if len(der) != 1+keySize*3 {
-+		return nil, nil, errors.New("invalid key length: insufficient data for private component")
-+	}
-+	pub = der[:1+keySize*2]
-+	priv = der[1+keySize*2:]
-+	return
++//go:noescape
++func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
++
++//go:nosplit
++func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return syscall_syscallN(fn, args...)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
 new file mode 100644
-index 00000000000000..fb0e207a89ff67
+index 00000000000000..868f4b8367066d
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
-@@ -0,0 +1,181 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
+@@ -0,0 +1,132 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package xcrypto
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zsecurity.h"
 +
-+// #include <Security/Security.h>
-+import "C"
-+import (
-+	"errors"
-+	"runtime"
-+)
++CFDataRef CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
++const uint8_t* CFDataGetBytePtr(CFDataRef);
++CFIndex CFDataGetLength(CFDataRef);
++CFDictionaryRef CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++void CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
++CFStringRef CFErrorCopyDescription(CFErrorRef);
++CFIndex CFErrorGetCode(CFErrorRef);
++CFNumberRef CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
++void CFRelease(CFTypeRef);
++const char* CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
++CFIndex CFStringGetLength(CFStringRef);
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
++CFDataRef SecKeyCopyKeyExchangeResult(SecKeyRef, SecKeyAlgorithm, SecKeyRef, CFDictionaryRef, CFErrorRef*);
++SecKeyRef SecKeyCopyPublicKey(SecKeyRef);
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
++CFDataRef SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
++size_t SecKeyGetBlockSize(SecKeyRef);
++Boolean SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
++Boolean SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
++int SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
 +
-+type PrivateKeyECDSA struct {
-+	_pkey C.SecKeyRef
++CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef _arg0, const uint8_t* _arg1, CFIndex _arg2) {
++	return CFDataCreate(_arg0, _arg1, _arg2);
 +}
 +
-+func (k *PrivateKeyECDSA) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
-+	}
++const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef _arg0) {
++	return CFDataGetBytePtr(_arg0);
 +}
 +
-+func (k *PrivateKeyECDSA) withKey(f func(C.SecKeyRef) C.int) C.int {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++CFIndex _mkcgo_CFDataGetLength(CFDataRef _arg0) {
++	return CFDataGetLength(_arg0);
 +}
 +
-+type PublicKeyECDSA struct {
-+	_pkey C.SecKeyRef
++CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef _arg0, const void** _arg1, const void** _arg2, CFIndex _arg3, const CFDictionaryKeyCallBacks* _arg4, const CFDictionaryValueCallBacks* _arg5) {
++	return CFDictionaryCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+func (k *PublicKeyECDSA) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
-+	}
++CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef _arg0, CFIndex _arg1, const CFDictionaryKeyCallBacks* _arg2, const CFDictionaryValueCallBacks* _arg3) {
++	return CFDictionaryCreateMutable(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+func (k *PublicKeyECDSA) withKey(f func(C.SecKeyRef) C.int) C.int {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef _arg0, const void* _arg1, const void* _arg2) {
++	CFDictionarySetValue(_arg0, _arg1, _arg2);
 +}
 +
-+func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, errors.New("unsupported curve")
-+	}
-+	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, nil, keySize)
-+	if err != nil {
-+		return nil, errors.New("failed to encode public key to uncompressed ANSI X9.63 format")
-+	}
++CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef _arg0) {
++	return CFErrorCopyDescription(_arg0);
++}
 +
-+	pubKeyRef, err := createSecKeyWithData(encodedKey, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPublic)
-+	if err != nil {
-+		return nil, err
-+	}
++CFIndex _mkcgo_CFErrorGetCode(CFErrorRef _arg0) {
++	return CFErrorGetCode(_arg0);
++}
 +
-+	pubKey := &PublicKeyECDSA{_pkey: pubKeyRef}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDSA).finalize)
-+	return pubKey, nil
++CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef _arg0, CFNumberType _arg1, const void* _arg2) {
++	return CFNumberCreate(_arg0, _arg1, _arg2);
 +}
 +
-+// NewPrivateKeyECDSA creates a new ECDSA private key using the provided curve name and parameters (x, y, d).
-+func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, errors.New("unsupported curve")
-+	}
-+	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, d, keySize)
-+	if err != nil {
-+		return nil, errors.New("crypto/ecdsa: failed to encode private key: " + err.Error())
-+	}
++void _mkcgo_CFRelease(CFTypeRef _arg0) {
++	CFRelease(_arg0);
++}
 +
-+	privKeyRef, err := createSecKeyWithData(encodedKey, C.kSecAttrKeyTypeECSECPrimeRandom, C.kSecAttrKeyClassPrivate)
-+	if err != nil {
-+		return nil, err
-+	}
++const char* _mkcgo_CFStringGetCStringPtr(CFStringRef _arg0, CFStringEncoding _arg1) {
++	return CFStringGetCStringPtr(_arg0, _arg1);
++}
 +
-+	// Wrap and finalize
-+	k := &PrivateKeyECDSA{_pkey: privKeyRef}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
-+	return k, nil
++CFIndex _mkcgo_CFStringGetLength(CFStringRef _arg0) {
++	return CFStringGetLength(_arg0);
 +}
 +
-+func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, nil, nil, errors.New("unsupported curve")
-+	}
++CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef _arg0, CFErrorRef* _arg1) {
++	return SecKeyCopyExternalRepresentation(_arg0, _arg1);
++}
 +
-+	keySizeInBits := curveToKeySizeInBits(curve)
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
-+	if err != nil {
-+		return nil, nil, nil, err
-+	}
-+	defer C.CFRelease(C.CFTypeRef(privKeyRef))
-+	return decodeFromUncompressedAnsiX963Key(privKeyDER, keySize)
++CFDataRef _mkcgo_SecKeyCopyKeyExchangeResult(SecKeyRef _arg0, SecKeyAlgorithm _arg1, SecKeyRef _arg2, CFDictionaryRef _arg3, CFErrorRef* _arg4) {
++	return SecKeyCopyKeyExchangeResult(_arg0, _arg1, _arg2, _arg3, _arg4);
 +}
 +
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, algorithmTypeECDSA, 0, hashed)
++SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef _arg0) {
++	return SecKeyCopyPublicKey(_arg0);
 +}
 +
-+func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
-+	return evpVerify(pub.withKey, algorithmTypeECDSA, 0, hashed, sig) == nil
++CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateDecryptedData(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+// encodeToUncompressedAnsiX963Key encodes the given elliptic curve point (x, y) and optional private key (d)
-+// into an uncompressed ANSI X9.63 format byte slice.
-+func encodeToUncompressedAnsiX963Key(x, y, d BigInt, keySize int) ([]byte, error) {
-+	// Build the uncompressed key point (0x04 || x || y { || d })
-+	size := 1 + keySize*2
-+	if d != nil {
-+		size += keySize
-+	}
-+	out := make([]byte, size)
-+	out[0] = 0x04
-+	err := encodeBigInt(out[1:], []sizedBigInt{
-+		{x, keySize}, {y, keySize},
-+		{d, keySize},
-+	})
-+	if err != nil {
-+		return nil, err
-+	}
-+	return out, nil
++CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateEncryptedData(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+// decodeFromUncompressedAnsiX963Key decodes the given uncompressed ANSI X9.63 format byte slice into
-+// the elliptic curve point (x, y) and optional private key (d).
-+func decodeFromUncompressedAnsiX963Key(key []byte, keySize int) (x, y, d BigInt, err error) {
-+	if len(key) < 1 || key[0] != 0x04 {
-+		return nil, nil, nil, errors.New("invalid uncompressed key format")
-+	}
-+	if len(key) < 1+keySize*2 {
-+		return nil, nil, nil, errors.New("invalid key length")
-+	}
-+	x = normalizeBigInt(key[1 : 1+keySize])
-+	y = normalizeBigInt(key[1+keySize : 1+keySize*2])
-+	if len(key) > 1+keySize*2 {
-+		d = normalizeBigInt(key[1+keySize*2:])
-+		return x, y, d, nil
-+	}
-+	return x, y, nil, nil
++SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef _arg0, CFErrorRef* _arg1) {
++	return SecKeyCreateRandomKey(_arg0, _arg1);
 +}
 +
-+func normalizeBigInt(b []byte) BigInt {
-+	// Remove leading zero bytes
-+	for len(b) > 0 && b[0] == 0 {
-+		b = b[1:]
-+	}
-+	return b
++CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateSignature(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+// sizedBigInt defines a big integer with
-+// a size that can be different from the
-+// one provided by len(b).
-+type sizedBigInt struct {
-+	b    BigInt
-+	size int
++SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef _arg0, CFDictionaryRef _arg1, CFErrorRef* _arg2) {
++	return SecKeyCreateWithData(_arg0, _arg1, _arg2);
 +}
 +
-+// encodeBigInt encodes ints into data.
-+// It stops iterating over ints when it finds one nil element.
-+func encodeBigInt(data []byte, ints []sizedBigInt) error {
-+	for _, v := range ints {
-+		if v.b == nil {
-+			return nil
-+		}
-+		normalized := normalizeBigInt(v.b)
-+		// b might be shorter than size if the original big number contained leading zeros.
-+		leadingZeros := int(v.size) - len(normalized)
-+		if leadingZeros < 0 {
-+			return errors.New("commoncrypto: invalid parameters")
-+		}
-+		copy(data[leadingZeros:], normalized)
-+		data = data[v.size:]
-+	}
-+	return nil
++size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef _arg0) {
++	return SecKeyGetBlockSize(_arg0);
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
++
++Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef _arg0, SecKeyOperationType _arg1, SecKeyAlgorithm _arg2) {
++	return SecKeyIsAlgorithmSupported(_arg0, _arg1, _arg2);
++}
++
++Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFDataRef _arg3, CFErrorRef* _arg4) {
++	return SecKeyVerifySignature(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++int _mkcgo_SecRandomCopyBytes(SecRandomRef _arg0, size_t _arg1, unsigned char* _arg2) {
++	return SecRandomCopyBytes(_arg0, _arg1, _arg2);
++}
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
 new file mode 100644
-index 00000000000000..f59e6f9af58cd4
+index 00000000000000..1e9549ee9136bc
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
-@@ -0,0 +1,100 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
+@@ -0,0 +1,22 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin && cgo
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package xcrypto
++package security
 +
-+import (
-+	"strconv"
++const (
++	KSecKeyOperationTypeSign        SecKeyOperationType = 0
++	KSecKeyOperationTypeVerify      SecKeyOperationType = 1
++	KSecKeyOperationTypeEncrypt     SecKeyOperationType = 2
++	KSecKeyOperationTypeDecrypt     SecKeyOperationType = 3
++	KSecKeyOperationTypeKeyExchange SecKeyOperationType = 4
++)
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++const (
++	KCFStringEncodingUTF8 CFStringEncoding = 0x08000100
 +)
 +
 +const (
-+	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
-+	publicKeySizeEd25519 = 32
-+	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
-+	privateKeySizeEd25519 = 64
-+	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
-+	signatureSizeEd25519 = 64
-+	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
-+	seedSizeEd25519 = 32
++	KCFNumberIntType CFNumberType = 9
 +)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
+new file mode 100644
+index 00000000000000..6f768f53e5acec
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
+@@ -0,0 +1,104 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// PublicKeyEd25519 represents an Ed25519 public key.
-+type PublicKeyEd25519 []byte
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+// PrivateKeyEd25519 represents an Ed25519 private key.
-+type PrivateKeyEd25519 []byte
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
 +
-+func (k PrivateKeyEd25519) Public() PublicKeyEd25519 {
-+	publicKey := make([]byte, publicKeySizeEd25519)
-+	copy(publicKey, k[seedSizeEd25519:])
-+	return PublicKeyEd25519(publicKey)
-+}
++#include <stdbool.h>
++#include <stdint.h>
++#include <stdlib.h>
 +
-+// GenerateKeyEd25519 generates a new Ed25519 private key.
-+func GenerateKeyEd25519() PrivateKeyEd25519 {
-+	pkeyPriv := make([]byte, privateKeySizeEd25519)
-+	cryptokit.GenerateKeyEd25519(pkeyPriv)
-+	return pkeyPriv
-+}
++typedef unsigned char Boolean;
++typedef void* SecRandomRef;
++typedef void* SecKeyRef;
++typedef void* CFDataRef;
++typedef void* CFTypeRef;
++typedef void* CFStringRef;
++typedef void* CFDictionaryRef;
++typedef void* CFMutableDictionaryRef;
++typedef void* CFNumberRef;
++typedef void* CFErrorRef;
++typedef void* CFAllocatorRef;
++typedef void* CFDictionaryKeyCallBacks;
++typedef void* CFDictionaryValueCallBacks;
++typedef int32_t CFIndex;
++typedef CFStringRef SecKeyAlgorithm;
++
++extern const CFAllocatorRef kCFAllocatorDefault;
++extern const SecRandomRef kSecRandomDefault;
++extern const CFStringRef kSecAttrKeyTypeECSECPrimeRandom;
++extern const CFStringRef kSecAttrKeyTypeRSA;
++extern const CFStringRef kSecAttrKeyClassPublic;
++extern const CFStringRef kSecAttrKeyClassPrivate;
++extern const CFStringRef kSecAttrKeyType;
++extern const CFStringRef kSecAttrKeySizeInBits;
++extern const CFStringRef kSecAttrKeyClass;
++extern const CFStringRef kSecKeyAlgorithmECDHKeyExchangeStandard;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512;
++extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962;
++
++typedef enum {
++	kSecKeyOperationTypeSign = 0,
++	kSecKeyOperationTypeVerify = 1,
++	kSecKeyOperationTypeEncrypt = 2,
++	kSecKeyOperationTypeDecrypt = 3,
++	kSecKeyOperationTypeKeyExchange = 4,
++} SecKeyOperationType;
++
++typedef enum {
++	kCFStringEncodingUTF8 = 0x08000100,
++} CFStringEncoding;
++
++typedef enum {
++	kCFNumberIntType = 9,
++} CFNumberType;
 +
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	if len(priv) != privateKeySizeEd25519 {
-+		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
-+	}
-+	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
-+}
++typedef void* mkcgo_err_state;
++mkcgo_err_state mkcgo_err_retrieve();
++void mkcgo_err_free(mkcgo_err_state);
 +
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	return k, nil
-+}
++CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
++const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef);
++CFIndex _mkcgo_CFDataGetLength(CFDataRef);
++CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
++CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef);
++CFIndex _mkcgo_CFErrorGetCode(CFErrorRef);
++CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
++void _mkcgo_CFRelease(CFTypeRef);
++const char* _mkcgo_CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
++CFIndex _mkcgo_CFStringGetLength(CFStringRef);
++CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
++CFDataRef _mkcgo_SecKeyCopyKeyExchangeResult(SecKeyRef, SecKeyAlgorithm, SecKeyRef, CFDictionaryRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef);
++CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
++CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
++size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef);
++Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
++Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
++int _mkcgo_SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
 +
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	if len(pub) != publicKeySizeEd25519 {
-+		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
-+	}
-+	pkey := make([]byte, publicKeySizeEd25519)
-+	err := cryptokit.NewPublicKeyEd25519(pkey, pub)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return pkey, nil
-+}
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
+new file mode 100644
+index 00000000000000..d4277c09fea06f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
+@@ -0,0 +1,154 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	return k, nil
-+}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
-+// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
-+// package.
-+// NewPrivateKeyEd25519FromSeed creates an Ed25519 private key from a seed.
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	if len(seed) != seedSizeEd25519 {
-+		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
-+	}
-+	pkey := make([]byte, privateKeySizeEd25519)
-+	err := cryptokit.NewPrivateKeyEd25519FromSeed(pkey, seed)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return pkey, nil
-+}
++//go:build !cgo
 +
-+// SignEd25519 signs the message with priv and returns a signature.
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	sig := make([]byte, signatureSizeEd25519)
-+	err := cryptokit.SignEd25519(sig, priv, message)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return sig, nil
-+}
++#include "textflag.h"
 +
-+// VerifyEd25519 reports whether sig is a valid signature of message by pub.
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	return cryptokit.VerifyEd25519(pub, message, sig)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
++
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++
++
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_CFDataCreate_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDataCreate(SB)
++GLOBL   ·_mkcgo_CFDataCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDataCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetBytePtr_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDataGetBytePtr(SB)
++GLOBL   ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetBytePtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetLength_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDataGetLength(SB)
++GLOBL   ·_mkcgo_CFDataGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDataGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreate_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDictionaryCreate(SB)
++GLOBL   ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreateMutable_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDictionaryCreateMutable(SB)
++GLOBL   ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreateMutable_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionarySetValue_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFDictionarySetValue(SB)
++GLOBL   ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionarySetValue_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorCopyDescription_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFErrorCopyDescription(SB)
++GLOBL   ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorCopyDescription_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorGetCode_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFErrorGetCode(SB)
++GLOBL   ·_mkcgo_CFErrorGetCode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFErrorGetCode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorGetCode_trampoline<>(SB)
++
++TEXT _mkcgo_CFNumberCreate_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFNumberCreate(SB)
++GLOBL   ·_mkcgo_CFNumberCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFNumberCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFNumberCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFRelease_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFRelease(SB)
++GLOBL   ·_mkcgo_CFRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetCStringPtr_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFStringGetCStringPtr(SB)
++GLOBL   ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetCStringPtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetLength_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_CFStringGetLength(SB)
++GLOBL   ·_mkcgo_CFStringGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_CFStringGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCopyExternalRepresentation(SB)
++GLOBL   ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyKeyExchangeResult_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCopyKeyExchangeResult(SB)
++GLOBL   ·_mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyKeyExchangeResult_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCopyPublicKey(SB)
++GLOBL   ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyPublicKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCreateDecryptedData(SB)
++GLOBL   ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCreateEncryptedData(SB)
++GLOBL   ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateRandomKey_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCreateRandomKey(SB)
++GLOBL   ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateRandomKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateSignature_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCreateSignature(SB)
++GLOBL   ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateSignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateWithData_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyCreateWithData(SB)
++GLOBL   ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateWithData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyGetBlockSize_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyGetBlockSize(SB)
++GLOBL   ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyGetBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyIsAlgorithmSupported(SB)
++GLOBL   ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyVerifySignature_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecKeyVerifySignature(SB)
++GLOBL   ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyVerifySignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecRandomCopyBytes_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_SecRandomCopyBytes(SB)
++GLOBL   ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecRandomCopyBytes_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 new file mode 100644
-index 00000000000000..6928418b4d26b9
+index 00000000000000..9b34ab52c0a9d6
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
-@@ -0,0 +1,345 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
+@@ -0,0 +1,166 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+package xcrypto
++package security
 +
-+// #include <Security/Security.h>
++/*
++#cgo CFLAGS: -Wno-attributes
++#include "zsecurity.h"
++*/
 +import "C"
-+import (
-+	"crypto"
-+	"errors"
++import "unsafe"
++
++var (
++	KCFAllocatorDefault                              = C.kCFAllocatorDefault
++	KSecRandomDefault                                = C.kSecRandomDefault
++	KSecAttrKeyTypeECSECPrimeRandom                  = C.kSecAttrKeyTypeECSECPrimeRandom
++	KSecAttrKeyTypeRSA                               = C.kSecAttrKeyTypeRSA
++	KSecAttrKeyClassPublic                           = C.kSecAttrKeyClassPublic
++	KSecAttrKeyClassPrivate                          = C.kSecAttrKeyClassPrivate
++	KSecAttrKeyType                                  = C.kSecAttrKeyType
++	KSecAttrKeySizeInBits                            = C.kSecAttrKeySizeInBits
++	KSecAttrKeyClass                                 = C.kSecAttrKeyClass
++	KSecKeyAlgorithmECDHKeyExchangeStandard          = C.kSecKeyAlgorithmECDHKeyExchangeStandard
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++	KSecKeyAlgorithmRSAEncryptionRaw                 = C.kSecKeyAlgorithmRSAEncryptionRaw
++	KSecKeyAlgorithmRSAEncryptionPKCS1               = C.kSecKeyAlgorithmRSAEncryptionPKCS1
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++	KSecKeyAlgorithmECDSASignatureDigestX962         = C.kSecKeyAlgorithmECDSASignatureDigestX962
++)
++
++type Boolean = C.Boolean
++type CFAllocatorRef = C.CFAllocatorRef
++type CFDataRef = C.CFDataRef
++type CFDictionaryKeyCallBacks = C.CFDictionaryKeyCallBacks
++type CFDictionaryRef = C.CFDictionaryRef
++type CFDictionaryValueCallBacks = C.CFDictionaryValueCallBacks
++type CFErrorRef = C.CFErrorRef
++type CFIndex = C.CFIndex
++type CFMutableDictionaryRef = C.CFMutableDictionaryRef
++type CFNumberRef = C.CFNumberRef
++type CFNumberType = C.CFNumberType
++type CFStringEncoding = C.CFStringEncoding
++type CFStringRef = C.CFStringRef
++type CFTypeRef = C.CFTypeRef
++type SecKeyAlgorithm = C.SecKeyAlgorithm
++type SecKeyOperationType = C.SecKeyOperationType
++type SecKeyRef = C.SecKeyRef
++type SecRandomRef = C.SecRandomRef
++
++//go:nosplit
++func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++}
++
++func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
++	return C._mkcgo_CFDataCreate(allocator, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(bytes))), CFIndex(len(bytes)))
++}
++
++func CFDataGetBytePtr(data CFDataRef) *uint8 {
++	return (*uint8)(unsafe.Pointer(C._mkcgo_CFDataGetBytePtr(data)))
++}
++
++func CFDataGetLength(data CFDataRef) CFIndex {
++	return C._mkcgo_CFDataGetLength(data)
++}
++
++func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
++	return C._mkcgo_CFDictionaryCreate(allocator, keys, values, numValues, keyCallBacks, valueCallBacks)
++}
++
++func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
++	return C._mkcgo_CFDictionaryCreateMutable(allocator, capacity, keyCallBacks, valueCallBacks)
++}
++
++func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
++	C._mkcgo_CFDictionarySetValue(theDict, key, value)
++}
++
++func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
++	return C._mkcgo_CFErrorCopyDescription(__error)
++}
++
++func CFErrorGetCode(__error CFErrorRef) CFIndex {
++	return C._mkcgo_CFErrorGetCode(__error)
++}
++
++func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
++	return C._mkcgo_CFNumberCreate(allocator, theType, valuePtr)
++}
++
++func CFRelease(cf CFTypeRef) {
++	C._mkcgo_CFRelease(cf)
++}
++
++func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_CFStringGetCStringPtr(str, encoding)))
++}
++
++func CFStringGetLength(str CFStringRef) CFIndex {
++	return C._mkcgo_CFStringGetLength(str)
++}
++
++func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCopyExternalRepresentation(key, __error)
++}
++
++func SecKeyCopyKeyExchangeResult(privateKey SecKeyRef, algorithm SecKeyAlgorithm, publicKey SecKeyRef, parameters CFDictionaryRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCopyKeyExchangeResult(privateKey, algorithm, publicKey, parameters, __error)
++}
++
++func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
++	return C._mkcgo_SecKeyCopyPublicKey(key)
++}
++
++func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateDecryptedData(key, algorithm, ciphertext, __error)
++}
++
++func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateEncryptedData(key, algorithm, plaintext, __error)
++}
++
++func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	return C._mkcgo_SecKeyCreateRandomKey(parameters, __error)
++}
++
++func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateSignature(key, algorithm, data, __error)
++}
++
++func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	return C._mkcgo_SecKeyCreateWithData(keyData, attributes, __error)
++}
++
++func SecKeyGetBlockSize(key SecKeyRef) int {
++	return int(C._mkcgo_SecKeyGetBlockSize(key))
++}
++
++func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
++	return C._mkcgo_SecKeyIsAlgorithmSupported(key, operation, algorithm)
++}
++
++func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
++	return C._mkcgo_SecKeyVerifySignature(key, algorithm, signedData, signature, __error)
++}
++
++func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
++	return int32(C._mkcgo_SecRandomCopyBytes(rnd, C.size_t(len(bytes)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(bytes)))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
+new file mode 100644
+index 00000000000000..52f1736a94347c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
+@@ -0,0 +1,14 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build go1.24 && !cmd_go_bootstrap
++
++package security
++
++/*
++#cgo noescape _mkcgo_SecRandomCopyBytes
++#cgo nocallback _mkcgo_SecRandomCopyBytes
++*/
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
+new file mode 100644
+index 00000000000000..3001e7040e80f1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
+@@ -0,0 +1,13 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build go1.24 && !cmd_go_bootstrap
++
++package security
++
++/*
++#cgo noescape _mkcgo_SecRandomCopyBytes
++#cgo nocallback _mkcgo_SecRandomCopyBytes
++*/
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
+new file mode 100644
+index 00000000000000..3e795ad6538ea3
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
+@@ -0,0 +1,480 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++package security
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++var _ = runtime.GOOS
++
++//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
++//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeECSECPrimeRandom kSecAttrKeyTypeECSECPrimeRandom "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard kSecKeyAlgorithmECDHKeyExchangeStandard "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++
++//go:cgo_import_dynamic _mkcgo_CFDataCreate CFDataCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetBytePtr CFDataGetBytePtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetLength CFDataGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreate CFDictionaryCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreateMutable CFDictionaryCreateMutable "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionarySetValue CFDictionarySetValue "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorCopyDescription CFErrorCopyDescription "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorGetCode CFErrorGetCode "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFNumberCreate CFNumberCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFRelease CFRelease "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyKeyExchangeResult SecKeyCopyKeyExchangeResult "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateRandomKey SecKeyCreateRandomKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateSignature SecKeyCreateSignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateWithData SecKeyCreateWithData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyGetBlockSize SecKeyGetBlockSize "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyIsAlgorithmSupported SecKeyIsAlgorithmSupported "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyVerifySignature SecKeyVerifySignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecRandomCopyBytes SecRandomCopyBytes "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
++type Boolean = byte
++type SecRandomRef unsafe.Pointer
++type SecKeyRef unsafe.Pointer
++type CFDataRef unsafe.Pointer
++type CFTypeRef unsafe.Pointer
++type CFStringRef unsafe.Pointer
++type CFDictionaryRef unsafe.Pointer
++type CFMutableDictionaryRef unsafe.Pointer
++type CFNumberRef unsafe.Pointer
++type CFErrorRef unsafe.Pointer
++type CFAllocatorRef unsafe.Pointer
++type CFDictionaryKeyCallBacks unsafe.Pointer
++type CFDictionaryValueCallBacks unsafe.Pointer
++type CFIndex = int32
++type SecKeyAlgorithm = CFStringRef
++
++type SecKeyOperationType int32
++
++type CFStringEncoding int32
++
++type CFNumberType int32
++
++var (
++	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
++	_mkcgo_kSecRandomDefault                                SecRandomRef
++	_mkcgo_kSecAttrKeyTypeECSECPrimeRandom                  CFStringRef
++	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
++	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
++	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
++	_mkcgo_kSecAttrKeyType                                  CFStringRef
++	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
++	_mkcgo_kSecAttrKeyClass                                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
++)
++
++//go:noinline
++func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom() *CFStringRef {
++	return &_mkcgo_kSecAttrKeyTypeECSECPrimeRandom
++}
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++}
++
++var (
++	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
++	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
++	KSecAttrKeyTypeECSECPrimeRandom                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom()
++	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
++	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
++	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
++	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
++	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
++	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
++	KSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
++	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
++	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
++	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
++)
++
++var _mkcgo_CFDataCreate_trampoline_addr uintptr
++
++func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_CFDataCreate_trampoline_addr, uintptr(allocator), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))), uintptr(len(bytes)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_CFDataGetBytePtr_trampoline_addr uintptr
++
++func CFDataGetBytePtr(data CFDataRef) *uint8 {
++	r0, _ := syscallN(0, _mkcgo_CFDataGetBytePtr_trampoline_addr, uintptr(data))
++	return (*uint8)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_CFDataGetLength_trampoline_addr uintptr
++
++func CFDataGetLength(data CFDataRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFDataGetLength_trampoline_addr, uintptr(data))
++	return CFIndex(r0)
++}
++
++var _mkcgo_CFDictionaryCreate_trampoline_addr uintptr
++
++func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreate_trampoline_addr, uintptr(allocator), uintptr(unsafe.Pointer(keys)), uintptr(unsafe.Pointer(values)), uintptr(numValues), uintptr(unsafe.Pointer(keyCallBacks)), uintptr(unsafe.Pointer(valueCallBacks)))
++	return CFDictionaryRef(r0)
++}
++
++var _mkcgo_CFDictionaryCreateMutable_trampoline_addr uintptr
++
++func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreateMutable_trampoline_addr, uintptr(allocator), uintptr(capacity), uintptr(unsafe.Pointer(keyCallBacks)), uintptr(unsafe.Pointer(valueCallBacks)))
++	return CFMutableDictionaryRef(r0)
++}
++
++var _mkcgo_CFDictionarySetValue_trampoline_addr uintptr
++
++func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
++	syscallN(0, _mkcgo_CFDictionarySetValue_trampoline_addr, uintptr(theDict), uintptr(key), uintptr(value))
++}
++
++var _mkcgo_CFErrorCopyDescription_trampoline_addr uintptr
++
++func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
++	r0, _ := syscallN(0, _mkcgo_CFErrorCopyDescription_trampoline_addr, uintptr(__error))
++	return CFStringRef(r0)
++}
++
++var _mkcgo_CFErrorGetCode_trampoline_addr uintptr
++
++func CFErrorGetCode(__error CFErrorRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFErrorGetCode_trampoline_addr, uintptr(__error))
++	return CFIndex(r0)
++}
++
++var _mkcgo_CFNumberCreate_trampoline_addr uintptr
++
++func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
++	r0, _ := syscallN(0, _mkcgo_CFNumberCreate_trampoline_addr, uintptr(allocator), uintptr(theType), uintptr(valuePtr))
++	return CFNumberRef(r0)
++}
++
++var _mkcgo_CFRelease_trampoline_addr uintptr
++
++func CFRelease(cf CFTypeRef) {
++	syscallN(0, _mkcgo_CFRelease_trampoline_addr, uintptr(cf))
++}
++
++var _mkcgo_CFStringGetCStringPtr_trampoline_addr uintptr
++
++func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
++	r0, _ := syscallN(0, _mkcgo_CFStringGetCStringPtr_trampoline_addr, uintptr(str), uintptr(encoding))
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_CFStringGetLength_trampoline_addr uintptr
++
++func CFStringGetLength(str CFStringRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFStringGetLength_trampoline_addr, uintptr(str))
++	return CFIndex(r0)
++}
++
++var _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr uintptr
++
++func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr, uintptr(key), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr uintptr
++
++func SecKeyCopyKeyExchangeResult(privateKey SecKeyRef, algorithm SecKeyAlgorithm, publicKey SecKeyRef, parameters CFDictionaryRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr, uintptr(privateKey), uintptr(algorithm), uintptr(publicKey), uintptr(parameters), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCopyPublicKey_trampoline_addr uintptr
++
++func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCopyPublicKey_trampoline_addr, uintptr(key))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyCreateDecryptedData_trampoline_addr uintptr
++
++func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateDecryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(ciphertext), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateEncryptedData_trampoline_addr uintptr
++
++func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateEncryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(plaintext), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateRandomKey_trampoline_addr uintptr
++
++func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateRandomKey_trampoline_addr, uintptr(parameters), uintptr(unsafe.Pointer(__error)))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyCreateSignature_trampoline_addr uintptr
++
++func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateSignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(data), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateWithData_trampoline_addr uintptr
++
++func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateWithData_trampoline_addr, uintptr(keyData), uintptr(attributes), uintptr(unsafe.Pointer(__error)))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyGetBlockSize_trampoline_addr uintptr
++
++func SecKeyGetBlockSize(key SecKeyRef) int {
++	r0, _ := syscallN(0, _mkcgo_SecKeyGetBlockSize_trampoline_addr, uintptr(key))
++	return int(r0)
++}
++
++var _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr uintptr
++
++func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
++	r0, _ := syscallN(0, _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr, uintptr(key), uintptr(operation), uintptr(algorithm))
++	return Boolean(r0)
++}
++
++var _mkcgo_SecKeyVerifySignature_trampoline_addr uintptr
++
++func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
++	r0, _ := syscallN(0, _mkcgo_SecKeyVerifySignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(signedData), uintptr(signature), uintptr(unsafe.Pointer(__error)))
++	return Boolean(r0)
++}
++
++var _mkcgo_SecRandomCopyBytes_trampoline_addr uintptr
++
++func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
++	r0, _ := syscallN(0, _mkcgo_SecRandomCopyBytes_trampoline_addr, uintptr(rnd), uintptr(len(bytes)), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))))
++	return int32(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+new file mode 100644
+index 00000000000000..cc4bc4f25fefa4
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+@@ -0,0 +1,144 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++//go:generate go run github.com/microsoft/go-crypto-darwin/cmd/gentestvectors -out vectors_test.go
++
++type cipherGCMTLS uint8
++
++const (
++	cipherGCMTLSNone cipherGCMTLS = iota
++	cipherGCMTLS12
++	cipherGCMTLS13
++)
++
++const (
++	// AES block size is the same for all key sizes
++	aesBlockSize         = commoncrypto.KCCBlockSizeAES128
++	gcmTagSize           = 16
++	gcmStandardNonceSize = 12
++	// TLS 1.2 additional data is constructed as:
++	//
++	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
++	gcmTls12AddSize = 13
++	// TLS 1.3 additional data is constructed as:
++	//
++	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
++	gcmTls13AddSize      = 5
++	gcmTlsFixedNonceSize = 4
++)
++
++type aesCipher struct {
++	key  []byte
++	kind commoncrypto.CCAlgorithm
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	var alg commoncrypto.CCAlgorithm
++	switch len(key) {
++	case 16, 24, 32:
++		alg = commoncrypto.KCCAlgorithmAES
++	default:
++		return nil, errors.New("crypto/aes: invalid key size")
++	}
++	c := &aesCipher{
++		key:  slices.Clone(key),
++		kind: alg,
++	}
++	return c, nil
++}
++
++func (c *aesCipher) BlockSize() int { return aesBlockSize }
++
++func (c *aesCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCEncrypt,          // Operation
++		commoncrypto.CCAlgorithm(c.kind), // Algorithm
++		0,                                // Options
++		c.key,                            // Key
++		nil,                              // IV
++		src,                              // Input
++		dst,                              // Output
++		nil,                              // Output length
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/aes: encryption failed")
++	}
++}
++
++func (c *aesCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCDecrypt,          // Operation
++		commoncrypto.CCAlgorithm(c.kind), // Algorithm
++		0,                                // Options
++		c.key,                            // Key
++		nil,                              // IV
++		src,                              // Input
++		dst,                              // Output
++		nil,                              // Output length
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/aes: decryption failed")
++	}
++}
++
++var errOpen = errors.New("cipher: message authentication failed")
++
++func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
++func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
++
++// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
++func sliceForAppend(in []byte, n int) (head, tail []byte) {
++	if total := len(in) + n; cap(in) >= total {
++		head = in[:total]
++	} else {
++		head = make([]byte, total)
++		copy(head, in)
++	}
++	tail = head[len(in):]
++	return
++}
++
++func bigUint64(b []byte) uint64 {
++	_ = b[7] // bounds check hint to compiler; see go.dev/issue/14808
++	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+new file mode 100644
+index 00000000000000..865e22ab6a3dda
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+@@ -0,0 +1,16 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package xcrypto
++
++// This file does not have build constraints to
++// facilitate using BigInt in Go crypto.
++// Go crypto references BigInt unconditionally,
++// even if it is not finally used.
++
++// A BigInt is the big-endian bytes from a math/big BigInt,
++// which are normalized to remove any leading 0 byte.
++// Windows BCrypt accepts this specific data format.
++// This definition allows us to avoid importing math/big.
++// Conversion between BigInt and *big.Int is in xcrypto/bbig.
++type BigInt []byte
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+new file mode 100644
+index 00000000000000..d4c550b90fafae
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+@@ -0,0 +1,114 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"runtime"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++type cbcCipher struct {
++	blockSize int
++	cryptor   commoncrypto.CCCryptorRef
++}
++
++func newCBC(operation commoncrypto.CCOperation, kind commoncrypto.CCAlgorithm, key, iv []byte) *cbcCipher {
++	var blockSize int
++	switch kind {
++	case commoncrypto.KCCAlgorithmAES:
++		blockSize = aesBlockSize
++	case commoncrypto.KCCAlgorithmDES, commoncrypto.KCCAlgorithm3DES:
++		blockSize = desBlockSize
++	default:
++		panic("invalid algorithm")
++	}
++
++	// Create and initialize the cbcMode struct with CCCryptorCreateWithMode here
++	x := &cbcCipher{blockSize: blockSize}
++	status := commoncrypto.CCCryptorCreateWithMode(
++		operation,                      // Specifies whether encryption or decryption is performed (kCCEncrypt or kCCDecrypt).
++		commoncrypto.KCCModeCBC,        // Mode of operation, here explicitly set to CBC (Cipher Block Chaining).
++		commoncrypto.CCAlgorithm(kind), // The encryption algorithm (e.g., kCCAlgorithmAES128, kCCAlgorithmDES).
++		commoncrypto.CcNoPadding,       // Padding option, set to no padding; padding can be handled at a higher level if necessary.
++		iv,                             // Initialization Vector (IV) for the cipher, required for CBC mode. Should be nil for ECB mode.
++		key,                            // PEncryption key.
++		nil,                            // Tweak key, used only for XTS mode; here set to nil as it’s not required for CBC.
++		0,                              // Number of rounds, mainly for RC2 and Blowfish; not used here, so set to 0.
++		0,                              // Mode options for CTR and F8 modes; not used for CBC, so set to 0.
++		&x.cryptor,                     // Pointer to the CCCryptorRef output, which will hold the state for encryption or decryption.
++	)
++
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: CCCryptorCreateWithMode failed")
++	}
++
++	runtime.SetFinalizer(x, (*cbcCipher).finalize)
++	return x
++
++}
++
++func (x *cbcCipher) finalize() {
++	if x.cryptor != nil {
++		commoncrypto.CCCryptorRelease(x.cryptor)
++		x.cryptor = nil
++	}
++}
++
++func (x *cbcCipher) BlockSize() int { return x.blockSize }
++
++func (x *cbcCipher) CryptBlocks(dst, src []byte) {
++	if inexactOverlap(dst, src) {
++		panic("crypto/cipher: invalid buffer overlap")
++	}
++	if len(src)%x.blockSize != 0 {
++		panic("crypto/cipher: input not full blocks")
++	}
++	if len(dst) < len(src) {
++		panic("crypto/cipher: output smaller than input")
++	}
++	if len(src) == 0 {
++		return
++	}
++	var outLength int
++	status := commoncrypto.CCCryptorUpdate(
++		x.cryptor,  // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
++		src,        // Input data (source buffer) to be encrypted or decrypted.
++		dst,        // Output buffer (destination buffer) where the result will be stored.
++		&outLength, // Pointer to a variable that will contain the number of bytes written to the output buffer.
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/cipher: CCCryptorUpdate failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++func (x *cbcCipher) SetIV(iv []byte) {
++	if len(iv) != x.blockSize {
++		panic("crypto/cipher: incorrect IV length")
++	}
++	status := commoncrypto.CCCryptorReset(x.cryptor, iv)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/cipher: CCCryptorReset failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
++
++func anyOverlap(x, y []byte) bool {
++	return len(x) > 0 && len(y) > 0 &&
++		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
++		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++}
++
++func inexactOverlap(x, y []byte) bool {
++	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
++		return false
++	}
++	return anyOverlap(x, y)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+new file mode 100644
+index 00000000000000..c27d6db4fe472a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+@@ -0,0 +1,111 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++const desBlockSize = commoncrypto.KCCBlockSizeDES
++
++type desCipher struct {
++	key  []byte
++	kind commoncrypto.CCAlgorithm
++}
++
++// NewDESCipher creates a new DES cipher block using the specified key (8 bytes).
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 8 {
++		return nil, errors.New("crypto/des: invalid key size for DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: commoncrypto.KCCAlgorithmDES,
++	}
++	return c, nil
++}
++
++// NewTripleDESCipher creates a new 3DES cipher block using the specified key (24 bytes).
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 24 {
++		return nil, errors.New("crypto/des: invalid key size for 3DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: commoncrypto.KCCAlgorithm3DES,
++	}
++	return c, nil
++}
++
++func (c *desCipher) BlockSize() int { return desBlockSize }
++
++func (c *desCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength int
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCEncrypt,
++		commoncrypto.CCAlgorithm(c.kind),
++		commoncrypto.KCCOptionECBMode,
++		c.key,
++		nil,
++		src[:blockSize],
++		dst[:blockSize],
++		&outLength,
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: encryption failed")
++	}
++}
++
++func (c *desCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength int
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCDecrypt,
++		commoncrypto.CCAlgorithm(c.kind),
++		commoncrypto.KCCOptionECBMode,
++		c.key,
++		nil,
++		src[:blockSize],
++		dst[:blockSize],
++		&outLength,
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: decryption failed")
++	}
++}
++
++// CBC mode encrypter
++func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
++// CBC mode decrypter
++func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+new file mode 100644
+index 00000000000000..e57bde33af4c98
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+@@ -0,0 +1,32 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++func curveToKeySizeInBits(curve string) int {
++	switch curve {
++	case "P-256":
++		return 256
++	case "P-384":
++		return 384
++	case "P-521":
++		return 521
++	default:
++		return 0
++	}
++}
++
++func curveToKeySizeInBytes(curve string) int {
++	switch curve {
++	case "P-256":
++		return (256 + 7) / 8
++	case "P-384":
++		return (384 + 7) / 8
++	case "P-521":
++		return (521 + 7) / 8
++	default:
++		return 0
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+new file mode 100644
+index 00000000000000..9daa170f75ad81
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+@@ -0,0 +1,135 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"runtime"
++	"slices"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++type PublicKeyECDH struct {
++	_pkey security.SecKeyRef
++	bytes []byte
++}
++
++func (k *PublicKeyECDH) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++type PrivateKeyECDH struct {
++	_pkey security.SecKeyRef
++	pub   []byte
++}
++
++func (k *PrivateKeyECDH) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
++	if len(bytes) < 1 {
++		return nil, errors.New("NewPublicKeyECDH: missing key")
++	}
++	pubKeyRef, err := createSecKeyWithData(bytes, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++	pubKey := &PublicKeyECDH{pubKeyRef, slices.Clone(bytes)}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
++	return pubKey, nil
++}
++
++func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
++
++// bytes expects the public key to be in uncompressed ANSI X9.63 format
++func NewPrivateKeyECDH(curve string, pub, priv []byte) (*PrivateKeyECDH, error) {
++	key := append(slices.Clone(pub), priv...)
++	privKeyRef, err := createSecKeyWithData(key, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++	privKey := &PrivateKeyECDH{privKeyRef, pub}
++	runtime.SetFinalizer(privKey, (*PrivateKeyECDH).finalize)
++	return privKey, nil
++}
++
++func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
++	defer runtime.KeepAlive(k)
++	pubKeyRef := security.SecKeyCopyPublicKey(k._pkey)
++	if pubKeyRef == nil {
++		return nil, errors.New("failed to extract public key")
++	}
++	pubKey := &PublicKeyECDH{pubKeyRef, k.pub}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
++	return pubKey, nil
++}
++
++func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
++	defer runtime.KeepAlive(priv)
++	defer runtime.KeepAlive(pub)
++
++	var algorithm = security.KSecKeyAlgorithmECDHKeyExchangeStandard
++	supported := security.SecKeyIsAlgorithmSupported(priv._pkey, security.KSecKeyOperationTypeKeyExchange, algorithm)
++	if supported == 0 {
++		return nil, errors.New("ECDH algorithm not supported for the given private key")
++	}
++
++	var cfErr security.CFErrorRef
++	// Perform the key exchange
++	sharedSecretRef := security.SecKeyCopyKeyExchangeResult(
++		priv._pkey,
++		algorithm,
++		pub._pkey,
++		security.CFDictionaryRef(unsafe.Pointer(uintptr(0))),
++		&cfErr,
++	)
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++	defer security.CFRelease(security.CFTypeRef(sharedSecretRef))
++
++	sharedSecret := cfDataToBytes(sharedSecretRef)
++	return sharedSecret, nil
++}
++
++func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, errors.New("unsupported curve")
++	}
++	keySizeInBits := curveToKeySizeInBits(curve)
++	// Generate the private key and get its DER representation
++	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++	if err != nil {
++		return nil, nil, err
++	}
++	pub, priv, err := extractECDHComponents(privKeyDER, keySize)
++	if err != nil {
++		security.CFRelease(security.CFTypeRef(privKeyRef))
++		return nil, nil, err
++	}
++	k := &PrivateKeyECDH{privKeyRef, pub}
++	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
++	return k, priv, nil
++}
++
++func extractECDHComponents(der []byte, keySize int) (pub, priv []byte, err error) {
++	// The private component is the last of the three equally-sized chunks
++	// for the elliptic curve private key.
++	if len(der) != 1+keySize*3 {
++		return nil, nil, errors.New("invalid key length: insufficient data for private component")
++	}
++	pub = der[:1+keySize*2]
++	priv = der[1+keySize*2:]
++	return
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+new file mode 100644
+index 00000000000000..1d92197e4d16e0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+@@ -0,0 +1,181 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"runtime"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++type PrivateKeyECDSA struct {
++	_pkey security.SecKeyRef
++}
++
++func (k *PrivateKeyECDSA) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++func (k *PrivateKeyECDSA) withKey(f func(security.SecKeyRef) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++type PublicKeyECDSA struct {
++	_pkey security.SecKeyRef
++}
++
++func (k *PublicKeyECDSA) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++func (k *PublicKeyECDSA) withKey(f func(security.SecKeyRef) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, nil, keySize)
++	if err != nil {
++		return nil, errors.New("failed to encode public key to uncompressed ANSI X9.63 format")
++	}
++
++	pubKeyRef, err := createSecKeyWithData(encodedKey, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++
++	pubKey := &PublicKeyECDSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(pubKey, (*PublicKeyECDSA).finalize)
++	return pubKey, nil
++}
++
++// NewPrivateKeyECDSA creates a new ECDSA private key using the provided curve name and parameters (x, y, d).
++func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, d, keySize)
++	if err != nil {
++		return nil, errors.New("crypto/ecdsa: failed to encode private key: " + err.Error())
++	}
++
++	privKeyRef, err := createSecKeyWithData(encodedKey, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++
++	// Wrap and finalize
++	k := &PrivateKeyECDSA{_pkey: privKeyRef}
++	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
++	return k, nil
++}
++
++func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, nil, errors.New("unsupported curve")
++	}
++
++	keySizeInBits := curveToKeySizeInBits(curve)
++	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	defer security.CFRelease(security.CFTypeRef(privKeyRef))
++	return decodeFromUncompressedAnsiX963Key(privKeyDER, keySize)
++}
++
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypeECDSA, 0, hashed)
++}
++
++func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
++	return evpVerify(pub.withKey, algorithmTypeECDSA, 0, hashed, sig) == nil
++}
++
++// encodeToUncompressedAnsiX963Key encodes the given elliptic curve point (x, y) and optional private key (d)
++// into an uncompressed ANSI X9.63 format byte slice.
++func encodeToUncompressedAnsiX963Key(x, y, d BigInt, keySize int) ([]byte, error) {
++	// Build the uncompressed key point (0x04 || x || y { || d })
++	size := 1 + keySize*2
++	if d != nil {
++		size += keySize
++	}
++	out := make([]byte, size)
++	out[0] = 0x04
++	err := encodeBigInt(out[1:], []sizedBigInt{
++		{x, keySize}, {y, keySize},
++		{d, keySize},
++	})
++	if err != nil {
++		return nil, err
++	}
++	return out, nil
++}
++
++// decodeFromUncompressedAnsiX963Key decodes the given uncompressed ANSI X9.63 format byte slice into
++// the elliptic curve point (x, y) and optional private key (d).
++func decodeFromUncompressedAnsiX963Key(key []byte, keySize int) (x, y, d BigInt, err error) {
++	if len(key) < 1 || key[0] != 0x04 {
++		return nil, nil, nil, errors.New("invalid uncompressed key format")
++	}
++	if len(key) < 1+keySize*2 {
++		return nil, nil, nil, errors.New("invalid key length")
++	}
++	x = normalizeBigInt(key[1 : 1+keySize])
++	y = normalizeBigInt(key[1+keySize : 1+keySize*2])
++	if len(key) > 1+keySize*2 {
++		d = normalizeBigInt(key[1+keySize*2:])
++		return x, y, d, nil
++	}
++	return x, y, nil, nil
++}
++
++func normalizeBigInt(b []byte) BigInt {
++	// Remove leading zero bytes
++	for len(b) > 0 && b[0] == 0 {
++		b = b[1:]
++	}
++	return b
++}
++
++// sizedBigInt defines a big integer with
++// a size that can be different from the
++// one provided by len(b).
++type sizedBigInt struct {
++	b    BigInt
++	size int
++}
++
++// encodeBigInt encodes ints into data.
++// It stops iterating over ints when it finds one nil element.
++func encodeBigInt(data []byte, ints []sizedBigInt) error {
++	for _, v := range ints {
++		if v.b == nil {
++			return nil
++		}
++		normalized := normalizeBigInt(v.b)
++		// b might be shorter than size if the original big number contained leading zeros.
++		leadingZeros := int(v.size) - len(normalized)
++		if leadingZeros < 0 {
++			return errors.New("commoncrypto: invalid parameters")
++		}
++		copy(data[leadingZeros:], normalized)
++		data = data[v.size:]
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+new file mode 100644
+index 00000000000000..316ecba6792d47
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+@@ -0,0 +1,124 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"strconv"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
++	publicKeySizeEd25519 = 32
++	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
++	privateKeySizeEd25519 = 64
++	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
++	signatureSizeEd25519 = 64
++	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
++	seedSizeEd25519 = 32
++)
++
++// PublicKeyEd25519 represents an Ed25519 public key.
++type PublicKeyEd25519 []byte
++
++// PrivateKeyEd25519 represents an Ed25519 private key.
++type PrivateKeyEd25519 []byte
++
++func (k PrivateKeyEd25519) Public() PublicKeyEd25519 {
++	publicKey := make([]byte, publicKeySizeEd25519)
++	copy(publicKey, k[seedSizeEd25519:])
++	return PublicKeyEd25519(publicKey)
++}
++
++// GenerateKeyEd25519 generates a new Ed25519 private key.
++func GenerateKeyEd25519() PrivateKeyEd25519 {
++	pkeyPriv := make([]byte, privateKeySizeEd25519)
++	cryptokit.GenerateKeyEd25519(pkeyPriv)
++	return pkeyPriv
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	if len(priv) != privateKeySizeEd25519 {
++		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
++	}
++	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
++}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	if len(pub) != publicKeySizeEd25519 {
++		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
++	}
++	pkey := make([]byte, publicKeySizeEd25519)
++	result := cryptokit.NewPublicKeyEd25519(pkey, pub)
++	if result != 0 {
++		return nil, errors.New("failed to create Ed25519 public key")
++	}
++	return pkey, nil
++}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
++// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
++// package.
++// NewPrivateKeyEd25519FromSeed creates an Ed25519 private key from a seed.
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	if len(seed) != seedSizeEd25519 {
++		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
++	}
++	pkey := make([]byte, privateKeySizeEd25519)
++	result := cryptokit.NewPrivateKeyEd25519FromSeed(pkey, seed)
++	if result != 0 {
++		return nil, errors.New("failed to generate Ed25519 key from seed")
++	}
++	return pkey, nil
++}
++
++// SignEd25519 signs the message with priv and returns a signature.
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	sig := make([]byte, signatureSizeEd25519)
++	result := cryptokit.SignEd25519(priv, message, sig)
++	if result < 0 {
++		switch result {
++		case -1:
++			return nil, errors.New("invalid inputs to SignEd25519")
++		case -2:
++			return nil, errors.New("failed to reconstruct private key")
++		case -3:
++			return nil, errors.New("failed to sign the message")
++		case -4:
++			return nil, errors.New("signature buffer too small")
++		default:
++			return nil, errors.New("unknown error in SignEd25519")
++		}
++	}
++	return sig, nil
++}
++
++// VerifyEd25519 reports whether sig is a valid signature of message by pub.
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	result := cryptokit.VerifyEd25519(pub, message, sig)
++	switch result {
++	case 1:
++		return nil // Valid signature
++	case 0:
++		return errors.New("ed25519: invalid signature")
++	case -1:
++		return errors.New("invalid inputs to VerifyEd25519")
++	case -2:
++		return errors.New("failed to reconstruct public key")
++	default:
++		return errors.New("unknown error in VerifyEd25519")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+new file mode 100644
+index 00000000000000..f67b35bdb6b987
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+@@ -0,0 +1,341 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
 +	"hash"
++	"slices"
 +	"strconv"
 +	"unsafe"
 +
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++type algorithmType int
++
++const (
++	algorithmTypePSS algorithmType = iota
++	algorithmTypeRAW
++	algorithmTypePKCS1v15Enc
++	algorithmTypePKCS1v15Sig
++	algorithmTypeOAEP
++	algorithmTypeECDSA
++)
++
++type withKeyFunc func(func(security.SecKeyRef) error) error
++
++// Encrypt encrypts a plaintext message using a given key and algorithm.
++func evpEncrypt(withKey withKeyFunc, algorithmType algorithmType, plaintext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	dataRef := bytesToCFData(plaintext)
++	defer cfRelease(unsafe.Pointer(dataRef))
++
++	var encryptedDataRef security.CFDataRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeEncrypt, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		encryptedDataRef = security.SecKeyCreateEncryptedData(key, algorithm, dataRef, nil)
++		if encryptedDataRef == nil {
++			return errors.New("encryption failed")
++		}
++		return nil
++	})
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(encryptedDataRef))
++
++	return cfDataToBytes(encryptedDataRef), nil
++}
++
++// Decrypt decrypts a ciphertext using a given key and algorithm.
++func evpDecrypt(withKey withKeyFunc, algorithmType algorithmType, ciphertext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	msg := bytesToCFData(ciphertext)
++
++	var decryptedDataRef security.CFDataRef
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeDecrypt, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		decryptedDataRef = security.SecKeyCreateDecryptedData(key, algorithm, msg, &cfErr)
++		if decryptedDataRef == nil {
++			return errors.New("decryption failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(decryptedDataRef))
++
++	return cfDataToBytes(decryptedDataRef), nil
++}
++
++func evpSign(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed []byte) ([]byte, error) {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	var signedDataRef security.CFDataRef
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeSign, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		signedDataRef = security.SecKeyCreateSignature(key, algorithm, bytesToCFData(hashed), &cfErr)
++		if signedDataRef == nil {
++			return errors.New("signing failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(signedDataRef))
++
++	return cfDataToBytes(signedDataRef), nil
++}
++
++func evpVerify(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed, signature []byte) error {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return err
++	}
++
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeVerify, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		if security.SecKeyVerifySignature(key, algorithm, bytesToCFData(hashed), bytesToCFData(signature), &cfErr) != 1 {
++			return errors.New("verification failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return err
++	}
++
++	return err
++}
++
++// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
++func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
++	switch h := hash.(type) {
++	case *evpHash:
++		return h.alg.ch, nil
++	case *DigestSHA3:
++		return h.alg.ch, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
++
++// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
++func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (security.CFStringRef, error) {
++	var algo security.CFStringRef
++	switch algorithmType {
++	case algorithmTypePSS:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA512
++		default:
++			return nil, errors.New("unsupported PSS hash: " + hash.String())
++		}
++	case algorithmTypeRAW:
++		algo = security.KSecKeyAlgorithmRSAEncryptionRaw
++	case algorithmTypePKCS1v15Enc:
++		return security.KSecKeyAlgorithmRSAEncryptionPKCS1, nil
++	case algorithmTypePKCS1v15Sig:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++		case 0:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++		default:
++			return nil, errors.New("unsupported PKCS1v15 hash: " + hash.String())
++		}
++	case algorithmTypeOAEP:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA512
++		default:
++			return nil, errors.New("unsupported OAEP hash: " + hash.String())
++		}
++	case algorithmTypeECDSA:
++		return security.KSecKeyAlgorithmECDSASignatureDigestX962, nil
++	default:
++		return nil, errors.New("unsupported algorithm type: " + strconv.Itoa(int(algorithmType)))
++	}
++	return algo, nil
++}
++
++// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
++// CFDataRef and must CFRelease the CFDataRef when done.
++func bytesToCFData(buf []byte) security.CFDataRef {
++	return security.CFDataCreate(security.KCFAllocatorDefault, buf)
++}
++
++// cfDataToBytes turns a CFDataRef into a byte slice.
++func cfDataToBytes(cfData security.CFDataRef) []byte {
++	// TODO: remove this allocation
++	return slices.Clone(unsafe.Slice(security.CFDataGetBytePtr(cfData), security.CFDataGetLength(cfData)))
++}
++
++// cfRelease releases a CoreFoundation object.
++func cfRelease(ref unsafe.Pointer) {
++	security.CFRelease(security.CFTypeRef(ref))
++}
++
++// createSecKeyWithData creates a SecKey from the provided encoded key and attributes dictionary.
++func createSecKeyWithData(encodedKey []byte, keyType, keyClass security.CFStringRef) (security.SecKeyRef, error) {
++	encodedKeyCF := security.CFDataCreate(security.KCFAllocatorDefault, encodedKey)
++	if encodedKeyCF == nil {
++		return nil, errors.New("xcrypto: failed to create CFData for private key")
++	}
++	defer security.CFRelease(security.CFTypeRef(encodedKeyCF))
++
++	attrKeys := []security.CFTypeRef{
++		security.CFTypeRef(security.KSecAttrKeyType),
++		security.CFTypeRef(security.KSecAttrKeyClass),
++	}
++
++	attrValues := []security.CFTypeRef{
++		security.CFTypeRef(keyType),
++		security.CFTypeRef(keyClass),
++	}
++
++	// Create attributes dictionary for the key
++	attrDict := security.CFDictionaryCreate(
++		security.KCFAllocatorDefault,
++		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
++		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
++		security.CFIndex(len(attrKeys)),
++		nil,
++		nil,
++	)
++	if attrDict == nil {
++		return nil, errors.New("xcrypto: failed to create attributes dictionary")
++	}
++	defer security.CFRelease(security.CFTypeRef(attrDict))
++
++	// Generate the SecKey
++	var errorRef security.CFErrorRef
++	key := security.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, err
++	}
++	return key, nil
++}
++
++// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
++func createSecKeyRandom(keyType security.CFStringRef, keySize int) ([]byte, security.SecKeyRef, error) {
++	keyAttrs := security.CFDictionaryCreateMutable(security.KCFAllocatorDefault, 0, nil, nil)
++	if keyAttrs == nil {
++		return nil, nil, errors.New("failed to create key attributes dictionary")
++	}
++	defer security.CFRelease(security.CFTypeRef(keyAttrs))
++
++	security.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(security.KSecAttrKeyType),
++		unsafe.Pointer(keyType),
++	)
++
++	cfNum := security.CFNumberCreate(security.KCFAllocatorDefault, security.KCFNumberIntType, unsafe.Pointer(&keySize))
++	defer security.CFRelease(security.CFTypeRef(cfNum))
++
++	security.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(security.KSecAttrKeySizeInBits),
++		unsafe.Pointer(cfNum),
++	)
++
++	// Generate the private key
++	var errorRef security.CFErrorRef
++	privKeyRef := security.SecKeyCreateRandomKey(security.CFDictionaryRef(keyAttrs), &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, nil, err
++	}
++
++	// Export the private key as DER
++	privData := security.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, nil, err
++	}
++	defer security.CFRelease(security.CFTypeRef(privData))
++
++	privKeyDER := cfDataToBytes(privData)
++	if privKeyDER == nil {
++		return nil, nil, errors.New("failed to convert CFData to bytes")
++	}
++	return privKeyDER, privKeyRef, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
+new file mode 100644
+index 00000000000000..82a961d974f129
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
+@@ -0,0 +1,218 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++
 +	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
-+type algorithmType int
++type aesGCM struct {
++	key []byte
++	tls cipherGCMTLS
++	// minNextNonce is the minimum value that the next nonce can be, enforced by
++	// all TLS modes.
++	minNextNonce uint64
++	// mask is the nonce mask used in TLS 1.3 mode.
++	mask uint64
++	// maskInitialized is true if mask has been initialized. This happens during
++	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
++	maskInitialized bool
++}
 +
-+const (
-+	algorithmTypePSS algorithmType = iota
-+	algorithmTypeRAW
-+	algorithmTypePKCS1v15Enc
-+	algorithmTypePKCS1v15Sig
-+	algorithmTypeOAEP
-+	algorithmTypeECDSA
-+)
++type noGCM struct {
++	cipher.Block
++}
++
++// NewGCM constructs a GCM block mode for AES using the cryptokit package
++func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
++	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
++		return nil, errors.New("crypto/aes: GCM tag and nonce sizes can't be non-standard at the same time")
++	}
++	// Fall back to standard library for GCM with non-standard nonce or tag size.
++	if nonceSize != gcmStandardNonceSize {
++		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
++	}
++	if tagSize != gcmTagSize {
++		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++	}
++	return &aesGCM{key: c.key, tls: cipherGCMTLSNone}, nil
++}
 +
-+type withKeyFunc func(func(C.SecKeyRef) C.int) C.int
++func (g *aesGCM) NonceSize() int { return gcmStandardNonceSize }
 +
-+// Encrypt encrypts a plaintext message using a given key and algorithm.
-+func evpEncrypt(withKey withKeyFunc, algorithmType algorithmType, plaintext []byte, hash hash.Hash) ([]byte, error) {
-+	var cryptoHash crypto.Hash
-+	if hash != nil {
-+		var err error
-+		cryptoHash, err = hashToCryptoHash(hash)
-+		if err != nil {
-+			return nil, err
-+		}
++func (g *aesGCM) Overhead() int { return gcmTagSize }
++
++func (g *aesGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
 +	}
-+	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
-+	if err != nil {
-+		return nil, err
++	if uint64(len(plaintext)) > ((1<<32)-2)*aesBlockSize || len(plaintext)+gcmTagSize < len(plaintext) {
++		panic("cipher: message too large for GCM")
++	}
++	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
++		panic("cipher: message too large for buffer")
 +	}
 +
-+	dataRef := bytesToCFData(plaintext)
-+	defer cfRelease(unsafe.Pointer(dataRef))
++	if g.tls != cipherGCMTLSNone {
++		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
++		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
++		}
++		counter := bigUint64(nonce[gcmTlsFixedNonceSize:])
++
++		// TLS 1.3 Masking
++		if g.tls == cipherGCMTLS13 {
++			if !g.maskInitialized {
++				g.mask = counter
++				g.maskInitialized = true
++			}
++			// Apply mask to the counter
++			counter ^= g.mask
++		}
 +
-+	var encryptedDataRef C.CFDataRef
-+	result := withKey(func(key C.SecKeyRef) C.int {
-+		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeEncrypt, algorithm) != 1 {
-+			return -1 // Algorithm not supported by the key
++		// Enforce monotonicity and max limit
++		const maxUint64 = 1<<64 - 1
++		if counter == maxUint64 {
++			panic("cipher: nonce counter must be less than 2^64 - 1")
 +		}
-+		encryptedDataRef = C.SecKeyCreateEncryptedData(key, algorithm, dataRef, nil)
-+		if encryptedDataRef == 0 {
-+			return -1 // Encryption failed
++		if counter < g.minNextNonce {
++			panic("cipher: nonce counter must be strictly monotonically increasing")
 +		}
-+		return 0
-+	})
-+	if result != 0 {
-+		return nil, errors.New("encryption failed")
++
++		defer func() {
++			g.minNextNonce = counter + 1
++		}()
 +	}
-+	defer cfRelease(unsafe.Pointer(encryptedDataRef))
 +
-+	return cfDataToBytes(encryptedDataRef), nil
++	// Make room in dst to append plaintext+overhead.
++	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, plaintext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	err := cryptokit.EncryptAESGCM(
++		g.key,
++		plaintext,
++		nonce,
++		additionalData,
++		out[:len(out)-gcmTagSize],
++		out[len(out)-gcmTagSize:],
++	)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++	return ret
++}
++
++func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if inexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
++	}
++
++	// Generate a random nonce
++	RandReader.Read(nonce)
++	err := cryptokit.EncryptAESGCM(
++		g.key,
++		plaintext,
++		nonce,
++		additionalData,
++		out[:len(out)-gcmTagSize],
++		out[len(out)-gcmTagSize:],
++	)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++}
++
++func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if len(ciphertext) < gcmTagSize {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > ((1<<32)-2)*aesBlockSize+gcmTagSize {
++		return nil, errOpen
++	}
++	// BoringCrypto does not do any TLS check when decrypting, neither do we.
++
++	// Ensure we don't process if ciphertext lacks both ciphertext and tag
++	if len(ciphertext) < gcmTagSize {
++		return nil, errors.New("decryption failed: ciphertext too short for tag")
++	}
++
++	tag := ciphertext[len(ciphertext)-gcmTagSize:]
++	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
++
++	// Make room in dst to append ciphertext without tag.
++	ret, out := sliceForAppend(dst, len(ciphertext))
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, ciphertext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	var decSize int
++	err := cryptokit.DecryptAESGCM(
++		g.key,
++		ciphertext,
++		nonce,
++		additionalData,
++		tag,
++		out,
++		&decSize,
++	)
++	if err != 0 || int(decSize) != len(ciphertext) {
++		// If the decrypted data size does not match, zero out `out` and return `errOpen`
++		for i := range out {
++			out[i] = 0
++		}
++		return nil, errOpen
++	}
++	return ret, nil
++}
++
++// NewGCMTLS returns a GCM cipher specific to TLS
++// and should not be used for non-TLS purposes.
++func NewGCMTLS(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS12}, nil
++}
++
++// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
++// for non-TLS purposes.
++func NewGCMTLS13(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS13}, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+new file mode 100644
+index 00000000000000..00496debabbd26
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+@@ -0,0 +1,325 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"sync"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	md5     = 1
++	sha1    = 2
++	sha256  = 3
++	sha384  = 4
++	sha512  = 5
++	sha3256 = 6
++	sha3384 = 7
++	sha3512 = 8
++)
++
++type hashAlgorithm struct {
++	id        int32
++	ch        crypto.Hash
++	size      int
++	blockSize int
++}
++
++var cacheHash sync.Map // map[crypto.Hash]*hashAlgorithm
++
++// supportsSHA3 returns true if SHA-3 is available on this macOS version.
++func supportsSHA3() bool {
++	return cryptokit.SupportsSHA3() == 1
 +}
 +
-+// Decrypt decrypts a ciphertext using a given key and algorithm.
-+func evpDecrypt(withKey withKeyFunc, algorithmType algorithmType, ciphertext []byte, hash hash.Hash) ([]byte, error) {
-+	var cryptoHash crypto.Hash
-+	if hash != nil {
-+		var err error
-+		cryptoHash, err = hashToCryptoHash(hash)
-+		if err != nil {
-+			return nil, err
++// loadHash converts a crypto.Hash to a hashAlgorithm.
++func loadHash(ch crypto.Hash, required bool) *hashAlgorithm {
++	if v, ok := cacheHash.Load(ch); ok {
++		if v == nil && required {
++			panic("cryptokit: " + ch.String() + " not available")
 +		}
-+	}
-+	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
-+	if err != nil {
-+		return nil, err
++		return v.(*hashAlgorithm)
 +	}
 +
-+	msg := bytesToCFData(ciphertext)
++	var hash hashAlgorithm
++	hash.ch = ch
++	supported := true
 +
-+	var decryptedDataRef C.CFDataRef
-+	var cfErr C.CFErrorRef
-+	result := withKey(func(key C.SecKeyRef) C.int {
-+		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeDecrypt, algorithm) != 1 {
-+			return -1 // Algorithm not supported by the key
++	switch ch {
++	case crypto.MD5:
++		hash.id = md5
++		hash.size = int(cryptokit.HashSize(md5))
++		hash.blockSize = int(cryptokit.HashBlockSize(md5))
++	case crypto.SHA1:
++		hash.id = sha1
++		hash.size = int(cryptokit.HashSize(sha1))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha1))
++	case crypto.SHA256:
++		hash.id = sha256
++		hash.size = int(cryptokit.HashSize(sha256))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha256))
++	case crypto.SHA384:
++		hash.id = sha384
++		hash.size = int(cryptokit.HashSize(sha384))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha384))
++	case crypto.SHA512:
++		hash.id = sha512
++		hash.size = int(cryptokit.HashSize(sha512))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha512))
++	case crypto.SHA3_256:
++		if !supportsSHA3() {
++			supported = false
++			break
++		}
++		hash.id = sha3256
++		hash.size = int(cryptokit.HashSize(sha3256))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3256))
++	case crypto.SHA3_384:
++		if !supportsSHA3() {
++			supported = false
++			break
 +		}
-+		decryptedDataRef = C.SecKeyCreateDecryptedData(key, algorithm, msg, &cfErr)
-+		if decryptedDataRef == 0 {
-+			return -1 // Decryption failed
++		hash.id = sha3384
++		hash.size = int(cryptokit.HashSize(sha3384))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3384))
++	case crypto.SHA3_512:
++		if !supportsSHA3() {
++			supported = false
++			break
 +		}
-+		return 0 // Success
-+	})
-+
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return nil, err
++		hash.id = sha3512
++		hash.size = int(cryptokit.HashSize(sha3512))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3512))
++	default:
++		supported = false
 +	}
 +
-+	if result != 0 || decryptedDataRef == 0 {
-+		return nil, errors.New("decryption failed")
++	if !supported {
++		if required {
++			panic("cryptokit: " + ch.String() + " not available")
++		}
++		cacheHash.Store(ch, (*hashAlgorithm)(nil))
++		return nil
 +	}
-+	defer cfRelease(unsafe.Pointer(decryptedDataRef))
 +
-+	return cfDataToBytes(decryptedDataRef), nil
++	cacheHash.Store(ch, &hash)
++	return &hash
 +}
 +
-+func evpSign(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed []byte) ([]byte, error) {
-+	algorithm, err := selectAlgorithm(hash, algorithmType)
-+	if err != nil {
-+		return nil, err
-+	}
++type evpHash struct {
++	ptr unsafe.Pointer
++	alg *hashAlgorithm
++}
 +
-+	var signedDataRef C.CFDataRef
-+	var cfErr C.CFErrorRef
-+	result := withKey(func(key C.SecKeyRef) C.int {
-+		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeSign, algorithm) != 1 {
-+			return -1 // Algorithm not supported by the key
-+		}
-+		signedDataRef = C.SecKeyCreateSignature(key, algorithm, bytesToCFData(hashed), &cfErr)
-+		if signedDataRef == 0 {
-+			return -1 // Signing failed
-+		}
-+		return 0 // Success
-+	})
++// SupportsHash returns true if a hash.Hash implementation is supported for h.
++func SupportsHash(h crypto.Hash) bool {
++	return loadHash(h, false) != nil
++}
 +
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return nil, err
-+	}
++func newEVPHash(ch crypto.Hash) *evpHash {
++	alg := loadHash(ch, true)
 +
-+	if result != 0 || signedDataRef == 0 {
-+		return nil, errors.New("signing failed")
++	h := &evpHash{
++		ptr: cryptokit.HashNew(alg.id),
++		alg: alg,
 +	}
-+	defer cfRelease(unsafe.Pointer(signedDataRef))
 +
-+	return cfDataToBytes(signedDataRef), nil
++	runtime.SetFinalizer(h, (*evpHash).finalize)
++
++	return h
 +}
 +
-+func evpVerify(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed, signature []byte) error {
-+	algorithm, err := selectAlgorithm(hash, algorithmType)
-+	if err != nil {
-+		return err
++func (h *evpHash) finalize() {
++	if h.ptr != nil {
++		cryptokit.HashFree(h.alg.id, h.ptr)
++		h.ptr = nil
 +	}
++}
 +
-+	var cfErr C.CFErrorRef
-+	result := withKey(func(key C.SecKeyRef) C.int {
-+		if C.SecKeyIsAlgorithmSupported(key, C.kSecKeyOperationTypeVerify, algorithm) != 1 {
-+			return -1 // Algorithm not supported by the key
-+		}
-+		if C.SecKeyVerifySignature(key, algorithm, bytesToCFData(hashed), bytesToCFData(signature), &cfErr) != 1 {
-+			return -1 // Verification failed
-+		}
-+		return 0 // Success
-+	})
-+
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return err
++func (h *evpHash) Clone() (HashCloner, error) {
++	if h.ptr == nil {
++		panic("cryptokit: hash already finalized")
 +	}
 +
-+	if result != 0 {
-+		return errors.New("verification failed")
++	newHash := &evpHash{
++		ptr: cryptokit.HashCopy(h.alg.id, h.ptr),
++		alg: h.alg,
 +	}
-+	return nil
++
++	runtime.SetFinalizer(newHash, (*evpHash).finalize)
++
++	runtime.KeepAlive(h)
++
++	return newHash, nil
 +}
 +
-+// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
-+func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
-+	switch hash.(type) {
-+	case cryptokit.SHA1Hash:
-+		return crypto.SHA1, nil
-+	case cryptokit.SHA256Hash:
-+		return crypto.SHA256, nil
-+	case cryptokit.SHA384Hash:
-+		return crypto.SHA384, nil
-+	case cryptokit.SHA512Hash:
-+		return crypto.SHA512, nil
-+	default:
-+		return 0, errors.New("unsupported hash function")
++func (h *evpHash) Write(p []byte) (int, error) {
++	if len(p) == 0 {
++		return 0, nil
 +	}
++	cryptokit.HashWrite(h.alg.id, h.ptr, p)
++
++	runtime.KeepAlive(h)
++
++	return len(p), nil
 +}
 +
-+// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
-+func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (C.CFStringRef, error) {
-+	var algo C.CFStringRef
-+	switch algorithmType {
-+	case algorithmTypePSS:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+		case crypto.SHA224:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224
-+		case crypto.SHA256:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256
-+		case crypto.SHA384:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384
-+		case crypto.SHA512:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512
-+		default:
-+			return 0, errors.New("unsupported PSS hash: " + hash.String())
-+		}
-+	case algorithmTypeRAW:
-+		algo = C.kSecKeyAlgorithmRSAEncryptionRaw
-+	case algorithmTypePKCS1v15Enc:
-+		return C.kSecKeyAlgorithmRSAEncryptionPKCS1, nil
-+	case algorithmTypePKCS1v15Sig:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
-+		case crypto.SHA224:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
-+		case crypto.SHA256:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
-+		case crypto.SHA384:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
-+		case crypto.SHA512:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
-+		case 0:
-+			algo = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
-+		default:
-+			return 0, errors.New("unsupported PKCS1v15 hash: " + hash.String())
-+		}
-+	case algorithmTypeOAEP:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1
-+		case crypto.SHA224:
-+			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224
-+		case crypto.SHA256:
-+			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256
-+		case crypto.SHA384:
-+			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384
-+		case crypto.SHA512:
-+			algo = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512
-+		default:
-+			return 0, errors.New("unsupported OAEP hash: " + hash.String())
-+		}
-+	case algorithmTypeECDSA:
-+		return C.kSecKeyAlgorithmECDSASignatureDigestX962, nil
-+	default:
-+		return 0, errors.New("unsupported algorithm type: " + strconv.Itoa(int(algorithmType)))
++func (h *evpHash) WriteString(s string) (int, error) {
++	if len(s) == 0 {
++		return 0, nil
 +	}
-+	return algo, nil
-+}
++	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(unsafe.StringData(s), len(s)))
 +
-+// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
-+// CFDataRef and must CFRelease the CFDataRef when done.
-+func bytesToCFData(buf []byte) C.CFDataRef {
-+	return C.CFDataCreate(C.kCFAllocatorDefault, base(buf), C.CFIndex(len(buf)))
-+}
++	runtime.KeepAlive(h)
 +
-+// cfDataToBytes turns a CFDataRef into a byte slice.
-+func cfDataToBytes(cfData C.CFDataRef) []byte {
-+	return C.GoBytes(unsafe.Pointer(C.CFDataGetBytePtr(cfData)), C.int(C.CFDataGetLength(cfData)))
++	return len(s), nil
 +}
 +
-+// cfRelease releases a CoreFoundation object.
-+func cfRelease(ref unsafe.Pointer) {
-+	C.CFRelease(C.CFTypeRef(ref))
-+}
++func (h *evpHash) WriteByte(c byte) error {
++	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(&c, 1))
 +
-+// createSecKeyWithData creates a SecKey from the provided encoded key and attributes dictionary.
-+func createSecKeyWithData(encodedKey []byte, keyType, keyClass C.CFStringRef) (C.SecKeyRef, error) {
-+	encodedKeyCF := C.CFDataCreate(C.kCFAllocatorDefault, base(encodedKey), C.CFIndex(len(encodedKey)))
-+	if encodedKeyCF == 0 {
-+		return 0, errors.New("xcrypto: failed to create CFData for private key")
-+	}
-+	defer C.CFRelease(C.CFTypeRef(encodedKeyCF))
++	runtime.KeepAlive(h)
 +
-+	attrKeys := []C.CFTypeRef{
-+		C.CFTypeRef(C.kSecAttrKeyType),
-+		C.CFTypeRef(C.kSecAttrKeyClass),
-+	}
++	return nil
++}
 +
-+	attrValues := []C.CFTypeRef{
-+		C.CFTypeRef(keyType),
-+		C.CFTypeRef(keyClass),
-+	}
++func (h *evpHash) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.alg.size, 64) // explicit cap to allow stack allocation
++	cryptokit.HashSum(h.alg.id, h.ptr, hashSlice)
++	runtime.KeepAlive(h)
++	b = append(b, hashSlice...)
++	return b
++}
 +
-+	// Create attributes dictionary for the key
-+	attrDict := C.CFDictionaryCreate(
-+		C.kCFAllocatorDefault,
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
-+		C.CFIndex(len(attrKeys)),
-+		nil,
-+		nil,
-+	)
-+	if attrDict == 0 {
-+		return 0, errors.New("xcrypto: failed to create attributes dictionary")
-+	}
-+	defer C.CFRelease(C.CFTypeRef(attrDict))
++type errMarshallUnsupported struct{}
 +
-+	// Generate the SecKey
-+	var errorRef C.CFErrorRef
-+	key := C.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return 0, err
-+	}
-+	return key, nil
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
 +}
 +
-+// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
-+func createSecKeyRandom(keyType C.CFStringRef, keySize int) ([]byte, C.SecKeyRef, error) {
-+	keyAttrs := C.CFDictionaryCreateMutable(C.kCFAllocatorDefault, 0, nil, nil)
-+	if keyAttrs == 0 {
-+		return nil, 0, errors.New("failed to create key attributes dictionary")
-+	}
-+	defer C.CFRelease(C.CFTypeRef(keyAttrs))
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
++}
 +
-+	C.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(C.kSecAttrKeyType),
-+		unsafe.Pointer(keyType),
-+	)
++func (h *evpHash) MarshalBinary() ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
 +
-+	C.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(C.kSecAttrKeySizeInBits),
-+		unsafe.Pointer(C.CFNumberCreate(C.kCFAllocatorDefault, C.kCFNumberIntType, unsafe.Pointer(&keySize))),
-+	)
++func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
 +
-+	// Generate the private key
-+	var errorRef C.CFErrorRef
-+	var privKeyRef C.SecKeyRef = C.SecKeyCreateRandomKey(C.CFDictionaryRef(keyAttrs), &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, 0, err
-+	}
++func (h *evpHash) UnmarshalBinary(data []byte) error {
++	return errMarshallUnsupported{}
++}
 +
-+	// Export the private key as DER
-+	privData := C.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, 0, err
-+	}
-+	defer C.CFRelease(C.CFTypeRef(privData))
++func (h *evpHash) Reset() {
++	cryptokit.HashReset(h.alg.id, h.ptr)
++}
 +
-+	privKeyDER := cfDataToBytes(privData)
-+	if privKeyDER == nil {
-+		return nil, 0, errors.New("failed to convert CFData to bytes")
-+	}
-+	return privKeyDER, privKeyRef, nil
++func (h *evpHash) BlockSize() int {
++	return h.alg.blockSize
++}
++
++func (h *evpHash) Size() int {
++	return h.alg.size
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-new file mode 100644
-index 00000000000000..b03a3ca13bdc7f
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,68 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin && cgo
++type DigestSHA3 struct {
++	*evpHash
++}
 +
-+package xcrypto
++var _ hash.Hash = (*evpHash)(nil)
++var _ HashCloner = (*evpHash)(nil)
++var _ hash.Hash = (*DigestSHA3)(nil)
++var _ HashCloner = (*DigestSHA3)(nil)
 +
-+import (
-+	"crypto"
-+	"hash"
++func MD5(p []byte) (sum [16]byte) {
++	cryptokit.MD5(p, sum[:])
++	return
++}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++func SHA1(p []byte) (sum [20]byte) {
++	cryptokit.SHA1(p, sum[:])
++	return
++}
 +
-+// SupportsHash returns true if a hash.Hash implementation is supported for h.
-+func SupportsHash(h crypto.Hash) bool {
-+	switch h {
-+	case crypto.MD5, crypto.SHA1, crypto.SHA256, crypto.SHA384, crypto.SHA512:
-+		return true
-+	default:
-+		return false
-+	}
++func SHA256(p []byte) (sum [32]byte) {
++	cryptokit.SHA256(p, sum[:])
++	return
 +}
 +
-+func MD5(p []byte) (sum [16]byte) {
-+	return cryptokit.MD5(p)
++func SHA384(p []byte) (sum [48]byte) {
++	cryptokit.SHA384(p, sum[:])
++	return
 +}
 +
-+func SHA1(p []byte) (sum [20]byte) {
-+	return cryptokit.SHA1(p)
++func SHA512(p []byte) (sum [64]byte) {
++	cryptokit.SHA512(p, sum[:])
++	return
 +}
 +
-+func SHA256(p []byte) (sum [32]byte) {
-+	return cryptokit.SHA256(p)
++func SumSHA3_256(p []byte) (sum [32]byte) {
++	cryptokit.SHA3_256(p, sum[:])
++	return
 +}
 +
-+func SHA384(p []byte) (sum [48]byte) {
-+	return cryptokit.SHA384(p)
++func SumSHA3_384(p []byte) (sum [48]byte) {
++	cryptokit.SHA3_384(p, sum[:])
++	return
 +}
 +
-+func SHA512(p []byte) (sum [64]byte) {
-+	return cryptokit.SHA512(p)
++func SumSHA3_512(p []byte) (sum [64]byte) {
++	cryptokit.SHA3_512(p, sum[:])
++	return
 +}
 +
 +// NewMD5 initializes a new MD5 hasher.
 +func NewMD5() hash.Hash {
-+	return cryptokit.NewMD5()
++	return newEVPHash(crypto.MD5)
++
 +}
 +
 +// NewSHA1 initializes a new SHA1 hasher.
 +func NewSHA1() hash.Hash {
-+	return cryptokit.NewSHA1()
++	return newEVPHash(crypto.SHA1)
 +}
 +
 +// NewSHA256 initializes a new SHA256 hasher.
 +func NewSHA256() hash.Hash {
-+	return cryptokit.NewSHA256()
++	return newEVPHash(crypto.SHA256)
 +}
 +
 +// NewSHA384 initializes a new SHA384 hasher.
 +func NewSHA384() hash.Hash {
-+	return cryptokit.NewSHA384()
++	return newEVPHash(crypto.SHA384)
 +}
 +
 +// NewSHA512 initializes a new SHA512 hasher.
 +func NewSHA512() hash.Hash {
-+	return cryptokit.NewSHA512()
++	return newEVPHash(crypto.SHA512)
++}
++
++// NewSHA3_256 creates a new SHA3-256 hash.
++func NewSHA3_256() *DigestSHA3 {
++	return &DigestSHA3{newEVPHash(crypto.SHA3_256)}
++}
++
++// NewSHA3_384 creates a new SHA3-384 hash.
++func NewSHA3_384() *DigestSHA3 {
++	return &DigestSHA3{newEVPHash(crypto.SHA3_384)}
++}
++
++// NewSHA3_512 creates a new SHA3-512 hash.
++func NewSHA3_512() *DigestSHA3 {
++	return &DigestSHA3{newEVPHash(crypto.SHA3_512)}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
+new file mode 100644
+index 00000000000000..1e3c96d429ff33
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
+@@ -0,0 +1,17 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !go1.25 && darwin
++
++package xcrypto
++
++import (
++	"hash"
++)
++
++// HashCloner is an interface that defines a Clone method.
++type HashCloner interface {
++	hash.Hash
++	// Clone returns a separate Hash instance with the same state as h.
++	Clone() (HashCloner, error)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
+new file mode 100644
+index 00000000000000..a4b0c717ef5e38
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
+@@ -0,0 +1,12 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build go1.25 && darwin
++
++package xcrypto
++
++import (
++	"hash"
++)
++
++type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
 new file mode 100644
-index 00000000000000..3cc2d5d31927e0
+index 00000000000000..e8fcbec33aaa66
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,98 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin && cgo
++//go:build darwin
 +
 +package xcrypto
 +
 +import (
++	"crypto"
 +	"errors"
 +	"hash"
 +
@@ -21237,11 +24015,19 @@ index 00000000000000..3cc2d5d31927e0
 +		salt = make([]byte, hash.Size())
 +	}
 +
-+	prk, err := cryptokit.ExtractHKDF(hash, secret, salt)
++	swiftHash, err := cryptoHashToSwift(hash)
 +	if err != nil {
 +		return nil, err
 +	}
 +
++	// Allocate buffer for derived key
++	prk := make([]byte, hash.Size())
++
++	result := cryptokit.ExtractHKDF(swiftHash, secret, salt, prk)
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
 +	return prk, nil
 +}
 +
@@ -21265,19 +24051,42 @@ index 00000000000000..3cc2d5d31927e0
 +		return nil, errors.New("requested key length exceeds maximum allowable size")
 +	}
 +
-+	expandedKey, err := cryptokit.ExpandHKDF(hash, pseudorandomKey, info, keyLength)
++	swiftHash, err := cryptoHashToSwift(hash)
 +	if err != nil {
 +		return nil, err
 +	}
 +
++	// Allocate buffer for derived key
++	expandedKey := make([]byte, keyLength)
++
++	result := cryptokit.ExpandHKDF(swiftHash, pseudorandomKey, info, expandedKey)
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
 +	return expandedKey, nil
 +}
++
++func cryptoHashToSwift(hash crypto.Hash) (int32, error) {
++	switch hash {
++	case crypto.SHA1:
++		return 1, nil
++	case crypto.SHA256:
++		return 2, nil
++	case crypto.SHA384:
++		return 3, nil
++	case crypto.SHA512:
++		return 4, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
 new file mode 100644
-index 00000000000000..ceb33c5cf99ca2
+index 00000000000000..347cb244734fe8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
-@@ -0,0 +1,21 @@
+@@ -0,0 +1,121 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21285,26 +24094,126 @@ index 00000000000000..ceb33c5cf99ca2
 +
 +package xcrypto
 +
-+import "C"
 +import (
 +	"hash"
++	"runtime"
++	"slices"
++	"unsafe"
 +
 +	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
++var _ hash.Hash = (*cryptoKitHMAC)(nil)
++var _ HashCloner = (*cryptoKitHMAC)(nil)
++
++type cryptoKitHMAC struct {
++	ptr unsafe.Pointer
++
++	kind int32
++	key  []byte
++
++	blockSize int
++	size      int
++}
++
 +// NewHMAC returns a new HMAC using xcrypto.
 +// The function h must return a hash implemented by
 +// CommonCrypto (for example, h could be xcrypto.NewSHA256).
 +// If h is not recognized, NewHMAC returns nil.
 +func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
-+	return cryptokit.NewHMAC(fh, key)
++	h := fh()
++	if h == nil {
++		return nil
++	}
++
++	// copying the key here to ensure that it is not modified
++	// while this algorithm is using it.
++	key = slices.Clone(key)
++	kind := hashToHMACEnum(h)
++	if kind == 0 {
++		// The hash function is not supported by the HMAC implementation.
++		return nil
++	}
++
++	hmac := &cryptoKitHMAC{
++		ptr:       cryptokit.InitHMAC(kind, key),
++		kind:      kind,
++		key:       key,
++		blockSize: h.BlockSize(),
++		size:      h.Size(),
++	}
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		cryptokit.FreeHMAC(h.kind, h.ptr)
++	})
++
++	return hmac
++}
++
++func (h *cryptoKitHMAC) Write(p []byte) (n int, err error) {
++	cryptokit.UpdateHMAC(h.kind, h.ptr, p)
++	runtime.KeepAlive(h)
++
++	return len(p), nil
++}
++
++func (h *cryptoKitHMAC) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
++	cryptokit.FinalizeHMAC(h.kind, h.ptr, hashSlice)
++	runtime.KeepAlive(h)
++
++	b = append(b, hashSlice...)
++
++	return b
++}
++
++func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
++	if h.ptr == nil {
++		panic("cryptokit: hash already finalized")
++	}
++
++	hmac := &cryptoKitHMAC{ptr: cryptokit.CopyHMAC(h.kind, h.ptr), kind: h.kind, key: slices.Clone(h.key), blockSize: h.blockSize, size: h.size}
++
++	runtime.KeepAlive(h)
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		cryptokit.FreeHMAC(h.kind, h.ptr)
++	})
++
++	return hmac, nil
++}
++
++func (h *cryptoKitHMAC) Reset() {
++	cryptokit.FreeHMAC(h.kind, h.ptr)
++
++	h.ptr = cryptokit.InitHMAC(h.kind, h.key)
++	runtime.KeepAlive(h)
++}
++
++func (h *cryptoKitHMAC) Size() int {
++	return h.size
++}
++
++func (h *cryptoKitHMAC) BlockSize() int {
++	return h.blockSize
++}
++
++func hashToHMACEnum(h hash.Hash) int32 {
++	switch h := h.(type) {
++	case *evpHash:
++		return h.alg.id
++	case *DigestSHA3:
++		return h.alg.id
++	default:
++		return 0
++	}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
-index 00000000000000..1f1b25d36981c3
+index 00000000000000..484934d63e552b
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
-@@ -0,0 +1,65 @@
+@@ -0,0 +1,68 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21312,14 +24221,12 @@ index 00000000000000..1f1b25d36981c3
 +
 +package xcrypto
 +
-+// #include <CommonCrypto/CommonCrypto.h>
-+import "C"
 +import (
++	"crypto"
 +	"errors"
 +	"hash"
-+	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
 +)
 +
 +func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
@@ -21339,16 +24246,16 @@ index 00000000000000..1f1b25d36981c3
 +	derivedKey := make([]byte, keyLen)
 +
 +	// Call CommonCrypto's PBKDF2 implementation
-+	status := C.CCKeyDerivationPBKDF(
-+		C.kCCPBKDF2,                              // PBKDF2 algorithm
-+		sbase(password), C.size_t(len(password)), // Password and its length
-+		base(salt), C.size_t(len(salt)), // Salt and its length
-+		ccDigest,     // Digest algorithm
-+		C.uint(iter), // Iteration count
-+		(*C.uchar)(unsafe.Pointer(&derivedKey[0])), C.size_t(keyLen), // Output buffer for derived key and its length
++	status := commoncrypto.CCKeyDerivationPBKDF(
++		commoncrypto.KCCPBKDF2, // PBKDF2 algorithm
++		password,               // Password
++		salt,                   // Salt
++		ccDigest,               // Digest algorithm
++		uint32(iter),           // Iteration count
++		derivedKey,             // Output buffer for derived key
 +	)
 +
-+	if status != C.kCCSuccess {
++	if status != commoncrypto.KCCSuccess {
 +		return nil, errors.New("PBKDF2 key derivation failed")
 +	}
 +
@@ -21356,26 +24263,31 @@ index 00000000000000..1f1b25d36981c3
 +}
 +
 +// Mapping Go hash functions to CommonCrypto hash constants
-+func hashToCCDigestPBKDF2(hash hash.Hash) (C.CCAlgorithm, error) {
-+	switch hash.(type) {
-+	case cryptokit.SHA1Hash:
-+		return C.kCCPRFHmacAlgSHA1, nil
-+	case cryptokit.SHA256Hash:
-+		return C.kCCPRFHmacAlgSHA256, nil
-+	case cryptokit.SHA384Hash:
-+		return C.kCCPRFHmacAlgSHA384, nil
-+	case cryptokit.SHA512Hash:
-+		return C.kCCPRFHmacAlgSHA512, nil
++func hashToCCDigestPBKDF2(hash hash.Hash) (commoncrypto.CCPseudoRandomAlgorithm, error) {
++	switch h := hash.(type) {
++	case *evpHash:
++		switch h.alg.ch {
++		case crypto.SHA1:
++			return commoncrypto.KCCPRFHmacAlgSHA1, nil
++		case crypto.SHA256:
++			return commoncrypto.KCCPRFHmacAlgSHA256, nil
++		case crypto.SHA384:
++			return commoncrypto.KCCPRFHmacAlgSHA384, nil
++		case crypto.SHA512:
++			return commoncrypto.KCCPRFHmacAlgSHA512, nil
++		default:
++			return 0, errors.New("unsupported hash function")
++		}
 +	default:
 +		return 0, errors.New("unsupported hash function")
 +	}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
 new file mode 100644
-index 00000000000000..e58c0b3b19a68b
+index 00000000000000..f8fc6ab81a3eb8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
-@@ -0,0 +1,26 @@
+@@ -0,0 +1,28 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21383,11 +24295,10 @@ index 00000000000000..e58c0b3b19a68b
 +
 +package xcrypto
 +
-+// #include <Security/SecRandom.h>
-+import "C"
 +import (
 +	"errors"
-+	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
 +)
 +
 +type randReader int
@@ -21395,7 +24306,10 @@ index 00000000000000..e58c0b3b19a68b
 +func (randReader) Read(b []byte) (int, error) {
 +	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
 +	// We check it even so.
-+	if len(b) > 0 && C.SecRandomCopyBytes(C.kSecRandomDefault, C.size_t(len(b)), unsafe.Pointer(&b[0])) != 0 {
++	if len(b) == 0 {
++		return 0, nil
++	}
++	if security.SecRandomCopyBytes(security.KSecRandomDefault, b) != 0 {
 +		return 0, errors.New("crypto/rand: unable to read from source")
 +	}
 +	return len(b), nil
@@ -21404,10 +24318,10 @@ index 00000000000000..e58c0b3b19a68b
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
 new file mode 100644
-index 00000000000000..e30a9e10ae3730
+index 00000000000000..01258b7f65a263
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
-@@ -0,0 +1,83 @@
+@@ -0,0 +1,81 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21415,35 +24329,33 @@ index 00000000000000..e30a9e10ae3730
 +
 +package xcrypto
 +
-+// #include <CommonCrypto/CommonCrypto.h>
-+import "C"
 +import (
 +	"errors"
 +	"runtime"
 +	"slices"
-+	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
 +)
 +
 +// RC4Cipher is an instance of RC4 using a particular key.
 +type RC4Cipher struct {
-+	ctx C.CCCryptorRef
++	ctx commoncrypto.CCCryptorRef
 +}
 +
 +// NewRC4Cipher creates and returns a new RC4 cipher with the given key.
 +func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
 +	// Clone the key to prevent modification.
 +	key = slices.Clone(key)
-+	var ctx C.CCCryptorRef
-+	status := C.CCCryptorCreate(
-+		C.kCCEncrypt,       // Operation (RC4 stream)
-+		C.kCCAlgorithmRC4,  // Algorithm
-+		0,                  // No padding or other options
-+		pbase(key),         // Key
-+		C.size_t(len(key)), // Key length
-+		nil,                // No IV needed for RC4
-+		&ctx,               // Output: CCCryptorRef
++	var ctx commoncrypto.CCCryptorRef
++	status := commoncrypto.CCCryptorCreate(
++		commoncrypto.KCCEncrypt,      // Operation (RC4 stream)
++		commoncrypto.KCCAlgorithmRC4, // Algorithm
++		0,                            // No padding or other options
++		key,                          // Key
++		nil,                          // No IV needed for RC4
++		&ctx,                         // Output: CCCryptorRef
 +	)
-+	if status != C.kCCSuccess {
++	if status != commoncrypto.KCCSuccess {
 +		return nil, errors.New("failed to create RC4 cipher")
 +	}
 +	c := &RC4Cipher{ctx: ctx}
@@ -21454,14 +24366,14 @@ index 00000000000000..e30a9e10ae3730
 +// finalize releases the RC4 cipher context when no longer needed.
 +func (c *RC4Cipher) finalize() {
 +	if c.ctx != nil {
-+		C.CCCryptorRelease(c.ctx)
++		commoncrypto.CCCryptorRelease(c.ctx)
 +	}
 +}
 +
 +// Reset zeros the key data and makes the cipher unusable.
 +func (c *RC4Cipher) Reset() {
 +	if c.ctx != nil {
-+		C.CCCryptorRelease(c.ctx)
++		commoncrypto.CCCryptorRelease(c.ctx)
 +		c.ctx = nil
 +	}
 +}
@@ -21476,14 +24388,14 @@ index 00000000000000..e30a9e10ae3730
 +	}
 +	// Ensures `dst` has sufficient space.
 +	_ = dst[len(src)-1]
-+	var outLen C.size_t
-+	status := C.CCCryptorUpdate(
++	var outLen int
++	status := commoncrypto.CCCryptorUpdate(
 +		c.ctx,
-+		unsafe.Pointer(&*addrNeverEmpty(src)), C.size_t(len(src)), // Input
-+		unsafe.Pointer(&*addrNeverEmpty(dst)), C.size_t(len(dst)), // Output
++		src, // Input
++		dst, // Output
 +		&outLen,
 +	)
-+	if status != C.kCCSuccess {
++	if status != commoncrypto.KCCSuccess {
 +		panic("crypto/cipher: CCCryptorUpdate failed")
 +	}
 +	if int(outLen) != len(src) {
@@ -21493,10 +24405,10 @@ index 00000000000000..e30a9e10ae3730
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
 new file mode 100644
-index 00000000000000..63df684569e671
+index 00000000000000..8e25affa681753
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
-@@ -0,0 +1,194 @@
+@@ -0,0 +1,208 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21504,41 +24416,42 @@ index 00000000000000..63df684569e671
 +
 +package xcrypto
 +
-+// #include <Security/Security.h>
-+import "C"
 +import (
 +	"crypto"
 +	"errors"
 +	"hash"
 +	"runtime"
 +	"strconv"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
 +)
 +
 +// GenerateKeyRSA generates an RSA key pair on macOS.
 +// asn1Data is encoded as PKCS#1 ASN1 DER.
 +func GenerateKeyRSA(bits int) (asn1Data []byte, err error) {
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(C.kSecAttrKeyTypeRSA, bits)
++	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeRSA, bits)
 +	if err != nil {
 +		return nil, err
 +	}
-+	C.CFRelease(C.CFTypeRef(privKeyRef))
++	security.CFRelease(security.CFTypeRef(privKeyRef))
 +	return privKeyDER, nil
 +}
 +
 +type PublicKeyRSA struct {
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.SecKeyRef
++	_pkey security.SecKeyRef
 +}
 +
 +func (k *PublicKeyRSA) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
 +	}
 +}
 +
 +// NewPublicKeyRSA creates a new RSA public key from ASN1 DER encoded data.
 +func NewPublicKeyRSA(asn1Data []byte) (*PublicKeyRSA, error) {
-+	pubKeyRef, err := createSecKeyWithData(asn1Data, C.kSecAttrKeyTypeRSA, C.kSecAttrKeyClassPublic)
++	pubKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPublic)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -21548,7 +24461,7 @@ index 00000000000000..63df684569e671
 +	return key, nil
 +}
 +
-+func (k *PublicKeyRSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++func (k *PublicKeyRSA) withKey(f func(security.SecKeyRef) error) error {
 +	// Because of the finalizer, any time key is passed to cgo, that call must
 +	// be followed by a call to runtime.KeepAlive, to make sure k is not
 +	// collected (and finalized) before the cgo call returns.
@@ -21558,18 +24471,18 @@ index 00000000000000..63df684569e671
 +
 +type PrivateKeyRSA struct {
 +	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey C.SecKeyRef
++	_pkey security.SecKeyRef
 +}
 +
 +func (k *PrivateKeyRSA) finalize() {
-+	if k._pkey != 0 {
-+		C.CFRelease(C.CFTypeRef(k._pkey))
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
 +	}
 +}
 +
 +// NewPrivateKeyRSA creates a new RSA private key from ASN1 DER encoded data.
 +func NewPrivateKeyRSA(asn1Data []byte) (*PrivateKeyRSA, error) {
-+	privKeyRef, err := createSecKeyWithData(asn1Data, C.kSecAttrKeyTypeRSA, C.kSecAttrKeyClassPrivate)
++	privKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPrivate)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -21580,17 +24493,17 @@ index 00000000000000..63df684569e671
 +}
 +
 +func (k *PrivateKeyRSA) PublicKey() *PublicKeyRSA {
-+	var pubKeyRef C.SecKeyRef
-+	k.withKey(func(key C.SecKeyRef) C.int {
-+		pubKeyRef = C.SecKeyCopyPublicKey(k._pkey)
-+		return 0
++	var pubKeyRef security.SecKeyRef
++	k.withKey(func(key security.SecKeyRef) error {
++		pubKeyRef = security.SecKeyCopyPublicKey(k._pkey)
++		return nil
 +	})
 +	pubKey := &PublicKeyRSA{_pkey: pubKeyRef}
 +	runtime.SetFinalizer(pubKey, (*PublicKeyRSA).finalize)
 +	return pubKey
 +}
 +
-+func (k *PrivateKeyRSA) withKey(f func(C.SecKeyRef) C.int) C.int {
++func (k *PrivateKeyRSA) withKey(f func(security.SecKeyRef) error) error {
 +	// Because of the finalizer, any time _pkey is passed to cgo, that call must
 +	// be followed by a call to runtime.KeepAlive, to make sure k is not
 +	// collected (and finalized) before the cgo call returns.
@@ -21631,13 +24544,13 @@ index 00000000000000..63df684569e671
 +}
 +
 +func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	if pub.withKey(func(key C.SecKeyRef) C.int {
-+		size := C.SecKeyGetBlockSize(key)
++	if pub.withKey(func(key security.SecKeyRef) error {
++		size := security.SecKeyGetBlockSize(key)
 +		if len(sig) < int(size) {
-+			return 0
++			return errors.New("crypto/rsa: signature too short")
 +		}
-+		return 1
-+	}) == 0 {
++		return nil
++	}) != nil {
 +		return errors.New("crypto/rsa: verification error")
 +	}
 +	return evpVerify(pub.withKey, algorithmTypePKCS1v15Sig, h, hashed, sig)
@@ -21675,76 +24588,34 @@ index 00000000000000..63df684569e671
 +	return "CFError(" + strconv.Itoa(e.code) + "): " + e.message
 +}
 +
-+func goCFErrorRef(ref C.CFErrorRef) error {
-+	if ref == 0 {
++func goCFErrorRef(ref security.CFErrorRef) error {
++	if ref == nil {
 +		return nil
 +	}
 +	var message string
-+	if desc := C.CFErrorCopyDescription(ref); desc != C.CFStringRef(0) {
-+		defer C.CFRelease(C.CFTypeRef(desc))
-+		if cstr := C.CFStringGetCStringPtr(desc, C.kCFStringEncodingUTF8); cstr != nil {
-+			message = C.GoString(cstr)
++	if desc := security.CFErrorCopyDescription(ref); desc != nil {
++		defer security.CFRelease(security.CFTypeRef(desc))
++		if cstr := security.CFStringGetCStringPtr(desc, security.KCFStringEncodingUTF8); cstr != nil {
++			message = string(cstrBytes(cstr))
 +		}
 +	}
 +	return &cfError{
-+		code:    int(C.CFErrorGetCode(ref)),
++		code:    int(security.CFErrorGetCode(ref)),
 +		message: message,
 +	}
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
-new file mode 100644
-index 00000000000000..d6b428e7ebb68b
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/xcrypto.go
-@@ -0,0 +1,49 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build darwin
-+
-+package xcrypto
-+
-+// #cgo CFLAGS: -Wno-deprecated-declarations
-+// #cgo LDFLAGS: -framework Security -framework CoreFoundation
-+import "C"
-+import "unsafe"
-+
-+var zero byte
-+
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func base(b []byte) *C.uchar {
-+	return (*C.uchar)(unsafe.Pointer(addr(b)))
-+}
 +
-+func sbase(b []byte) *C.char {
-+	return (*C.char)(unsafe.Pointer(addr(b)))
-+}
-+
-+func pbase(b []byte) unsafe.Pointer {
-+	return unsafe.Pointer(addr(b))
-+}
-+
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+// If b is empty, it returns a pointer to a zero byte
-+// so that it can always be dereferenced.
-+func addr(b []byte) *byte {
-+	if len(b) == 0 {
-+		return &zero
++// cstrBytes returns a byte slice containing the contents of the C string
++// pointed to by p. The slice does not include the terminating null byte.
++func cstrBytes(p *byte) []byte {
++	if p == nil {
++		return nil
 +	}
-+	return unsafe.SliceData(b)
-+}
-+
-+// addrNeverEmpty returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+// If b is empty, it returns a pointer to a zero byte
-+// so that it can always be dereferenced.
-+func addrNeverEmpty(b []byte) *byte {
-+	if len(b) == 0 {
-+		return &zero
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
 +	}
-+	return unsafe.SliceData(b)
++	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE b/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
 new file mode 100644
@@ -26238,20 +29109,22 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..837ca8869e5c65 100644
+index f1e33686ed0626..c473af0faf84a3 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,21 @@
+@@ -1,3 +1,23 @@
 +# github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
 +## explicit; go 1.23
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20250725141434-15e65307af05
++# github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-darwin/bbig
++github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
++github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/xcrypto
 +# github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +## explicit; go 1.22

From 1e41ac54fd1ebda655b13a58e025bc3c011e0310 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 24 Oct 2025 11:55:59 +0200
Subject: [PATCH 528/887] upgrade darwin (#1923)

---
 .../0001-Vendor-external-dependencies.patch   | 3670 +++++++++++------
 1 file changed, 2328 insertions(+), 1342 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 7f171e0efdb..6618859a221 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -131,23 +131,23 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/commoncrypto/zcommoncrypto.go    |   50 +
  .../internal/commoncrypto/zcommoncrypto.h     |   71 +
  .../internal/commoncrypto/zcommoncrypto.s     |   69 +
- .../commoncrypto/zcommoncrypto_cgo.go         |   58 +
+ .../commoncrypto/zcommoncrypto_cgo.go         |   60 +
  .../commoncrypto/zcommoncrypto_go124.go       |   11 +
- .../commoncrypto/zcommoncrypto_nocgo.go       |   96 +
- .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 94232 bytes
- .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 92360 bytes
+ .../commoncrypto/zcommoncrypto_nocgo.go       |   89 +
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 116760 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 115432 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
- .../internal/cryptokit/shims.h                |   57 +
+ .../internal/cryptokit/shims.h                |   68 +
  .../internal/cryptokit/syscall_nocgo.go       |   20 +
- .../internal/cryptokit/zcryptokit.c           |  167 ++
- .../internal/cryptokit/zcryptokit.h           |   49 +
- .../internal/cryptokit/zcryptokit.s           |  189 ++
- .../internal/cryptokit/zcryptokit_cgo.go      |  143 ++
- .../cryptokit/zcryptokit_cgo_go124.go         |   45 +
- .../internal/cryptokit/zcryptokit_nocgo.go    |  218 ++
- .../cryptokit/zcryptokit_swift_amd64.go       |  146 ++
- .../cryptokit/zcryptokit_swift_arm64.go       |  145 ++
+ .../internal/cryptokit/zcryptokit.c           |  212 ++
+ .../internal/cryptokit/zcryptokit.h           |   58 +
+ .../internal/cryptokit/zcryptokit.s           |  234 ++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  180 ++
+ .../cryptokit/zcryptokit_cgo_go124.go         |   62 +
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  281 ++
+ .../cryptokit/zcryptokit_swift_amd64.go       |  178 ++
+ .../cryptokit/zcryptokit_swift_arm64.go       |  177 ++
  .../internal/security/security.go             |    9 +
  .../internal/security/shims.h                 |  111 +
  .../internal/security/syscall_nocgo.go        |   20 +
@@ -155,10 +155,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/security/zsecurity.go            |   22 +
  .../internal/security/zsecurity.h             |  104 +
  .../internal/security/zsecurity.s             |  154 ++
- .../internal/security/zsecurity_cgo.go        |  166 ++
+ .../internal/security/zsecurity_cgo.go        |  390 +++
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
- .../internal/security/zsecurity_nocgo.go      |  480 ++++
+ .../internal/security/zsecurity_nocgo.go      |  479 ++++
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 ++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
@@ -174,6 +174,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../xcrypto/hashclone_go125.go                |   12 +
  .../go-crypto-darwin/xcrypto/hkdf.go          |   98 +
  .../go-crypto-darwin/xcrypto/hmac.go          |  121 +
+ .../go-crypto-darwin/xcrypto/mlkem.go         |  261 ++
  .../go-crypto-darwin/xcrypto/pbkdf2.go        |   68 +
  .../go-crypto-darwin/xcrypto/rand.go          |   28 +
  .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
@@ -206,7 +207,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 198 files changed, 26305 insertions(+), 7 deletions(-)
+ 199 files changed, 27075 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -366,6 +367,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
@@ -2055,7 +2057,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..b03eab71fde329 100644
+index c5e901b9ef22e8..4a3a7ab7c47ee7 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2065,18 +2067,18 @@ index c5e901b9ef22e8..b03eab71fde329 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
-+	github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..571e4ecde24ba8 100644
+index 4a52682161fc23..fe928365ecc8af 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3 h1:A406U4ZlIBfkU7taBsFNxLEZHov9jn3O0GVuIfbTSBk=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3/go.mod h1:v3d8e4DPboAOvaae2pm/QTTRlcdJJYmMegkHB8hEvjU=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1 h1:4wwHA6hOmqxHhar9TvjXjXHAUozBWvaBsUx4DrDms7c=
-+github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1/go.mod h1:LyP4oZ0QcysEJdqUTOk9ngNFArRFK94YRImkoJ8julQ=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946 h1:lsW0BjPRXBduOU1SNpSy9OKReDEEXFnqkjmYZBIxRdg=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
@@ -18201,10 +18203,10 @@ index 00000000000000..27df632639b49f
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
 new file mode 100644
-index 00000000000000..7b509719317346
+index 00000000000000..599a18a4424fd5
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,60 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -18214,6 +18216,8 @@ index 00000000000000..7b509719317346
 +
 +/*
 +#cgo CFLAGS: -Wno-attributes
++#cgo darwin LDFLAGS: -framework System
++
 +#include "zcommoncrypto.h"
 +*/
 +import "C"
@@ -18282,10 +18286,10 @@ index 00000000000000..c4cb78b4888fa5
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
 new file mode 100644
-index 00000000000000..321e3f99c4057b
+index 00000000000000..9de8feb80b0276
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
-@@ -0,0 +1,96 @@
+@@ -0,0 +1,89 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -18302,33 +18306,26 @@ index 00000000000000..321e3f99c4057b
 +
 +var _ = runtime.GOOS
 +
-+//go:cgo_import_dynamic _mkcgo_CCCrypt CCCrypt "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorCreate CCCryptorCreate "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorCreateWithMode CCCryptorCreateWithMode "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorRelease CCCryptorRelease "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorReset CCCryptorReset "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorUpdate CCCryptorUpdate "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCKeyDerivationPBKDF CCKeyDerivationPBKDF "/System/Library/Frameworks/System.framework/Versions/B/System"
-+
 +type CCCryptorRef unsafe.Pointer
 +type CCModeOptions = uint32
 +
 +type CCOperation int32
-+
 +type CCMode int32
-+
 +type CCOptions int32
-+
 +type CCCryptorStatus int32
-+
 +type CCPBKDFAlgorithm int32
-+
 +type CCPseudoRandomAlgorithm int32
-+
 +type CCPadding int32
-+
 +type CCAlgorithm int32
 +
++//go:cgo_import_dynamic _mkcgo_CCCrypt CCCrypt "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreate CCCryptorCreate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreateWithMode CCCryptorCreateWithMode "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorRelease CCCryptorRelease "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorReset CCCryptorReset "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorUpdate CCCryptorUpdate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCKeyDerivationPBKDF CCKeyDerivationPBKDF "/System/Library/Frameworks/System.framework/Versions/B/System"
++
 +var _mkcgo_CCCrypt_trampoline_addr uintptr
 +
 +func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
@@ -18384,1187 +18381,1395 @@ index 00000000000000..321e3f99c4057b
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..182ae5aecc2be4add1b53bebb1a91c193ab6feb7
+index 0000000000000000000000000000000000000000..bd23a4fe6b272d3226dfb87e2bf133fcd52ae2f3
 GIT binary patch
-literal 94232
-zcmeFa3wWJXmH&UrHC!81w1P;Gszs~>rCLQK6#}P{N))Q)W>cUg<<iE|N)b8+N;HS#
-z(Kus<D4-cdjXzQ2B^tp<3WY}T61>LCNKny~GGlZQBZB>ZzH6=b+>_Sd%=~}z%tIc^
-zcVE_Cd+oK?-h1u+zVANYd*a{zwr?smYtIz_<KI#IYpCIWb^PP+x%?Yc<}`m34|zt5
-z%J4TDad@Wm?*Jw8w|x2fl^fT4*yCq6E<3vrPeS)^^N{%MMX>&nRH}Dx0(+&}J;(pQ
-zeEEe}URji|eEF%1&R$eVNaUDPNJ<qqV^&eRg3Fg*ykh-|LShBKkZWNStRGDozxwCQ
-zN)^|Ua9F<l%BxndTEAfV`m5Vku3Nck`SQ~C)_l_`Z;k@354ip(;rHx>Nf9nze$kcd
-z*R5W2Nu-tY>koc6Mt<%0U4IFSJ(57a{6%ZmTv_Ol^7b}-%Lx|-eJ}i^zuq~stY0HJ
-z56D->ue7}zgI^-Y82rlnAkU0I=x_NIYcFnHab+v<rlz+nDNwvK_|-<z&)_%H-}2>a
-zFTC`k<*Tn)ammWnYgVl-Z|{x4FU&agNF~3dDyv5Ay`pW!MeCPuSaa3tH5Vh_sm1m8
-z1iyy;J#{MdH-`S+>`93#g5S#4<*U}MxMHPemiO=24};Hvjtl?Q`@>^4&RUbO@a6oI
-zUAm4BB6Jx4QYlrc^wz^?r52Mpb=<5}U4xI)X43VihU#A*{|5Q@0sj5HfAc9&$3N9S
-z|8g4(r>)(vhC#M^?HZ-=Zyx_7&wOk5RcqH>mMWnk%jlAJ1fNsZu3MQeU&Md;sVmme
-z6$KWri1MmuCc5KylTJEK<SyoSmJQ72b!#tLdF7QcM60xa`6+AHT(n``x|M4#y4v{E
-zmCAM2)mN@xc?D_ut5V*Z=h;=|c>RXem#<&FX8Eei*RDuLb`?HnUU=oob?=CdsG5K2
-z%8S;oe#gpFLXI;1N&f{Um&sGspB1!K>N|Dym2E55U({-xlKcujS6sMy4P!(3RqRIf
-zoJFfv(*-l}Icp_7uzJ1gzs#<dHPhhf_@DO1mFvwyXKpWTxopw83s<jSH@$urpLxdW
-zq<ixHT-M$^&2;jtySi=t+A==%$X3RuY3)TTE?=}^ee23K>sMct3_j=*zD0I?mKLlt
-z*Q{N$@~jPQZEM$=jG`;(Npq+xpi22uG$F2Eec|fMQE>B$i!M`7EKO$~o=}ks?wNfg
-zGo<3_&5zdJrRnJS;mqCX%#SU<Z`OuAb{sG$dD5B2sU0=P4;!Y^*~Y2#=B>42&|u{k
-zz2z)e)RR%)lwCTnDSJU(I(xyKrtF5=rpyU*)0y+<)->@yVrS2tlg^wvx6Z17OZ|C^
-z-gdz~t5&^i_K`P8D(CmsMQ>TObkW&orLTK*5Ct}6a;<;cxw9$L(E_A1_op+rrU@<1
-z{J1GI&|ql;wFW~q0t88CI_f<*k6_A!bp+>l5HUKYo-*26f|CkvYaEpb;7H(bpk`gA
-z_XqX`_6GI@b_I3@wmWug+_`gS1ltP1)(Fmi>+tMjI+}?A4Z!iki!xgYrwFIFb&Mgh
-zN|Q275a?ASawjR#HJNRgN@p7yJhFLsc6#&pWcrw`>C8Bd8>DefncsP4W=lGg8@85H
-zCetzE!RkdtJ1T-q<7g>|u>yzjU2&Lj4kHPNrfg37Zpuav<h*;L@2n@AvbVO-#-?ny
-zdOn@)R<|wAY-`F4)mehcKF@=dvS+RH7iWG4eLF-;GEX&SKD&@mQ)Ux(ylF6<+0fsV
-z+0d8HT+rK;xuB;hv$U%zv!t^r)7YNQbgRQ?yE+RUsiQ*ALk(8vfb1`Ax@@-415hus
-zkaZ+1mK7CJThiG9Yl{_X%NN?{h1Bg7O6Ln<zn-+PkaTxC+o9&9GperBm@beJq;o@}
-zHW`~TpXefI@#ZHPIG^YtIJ;vFt|IlDfY~8Q+>|w{XjQj0BI_;4c6f(%&oKdVb%Lzd
-zlNso>-aa&H6-lBQ8$;OvjVc!;+hNVj=B$m`frTdUkj!y06HT^5{nwP~?y`gj=;b;~
-z$n}u0B=du&%&qMfx}Q)dA!s!um=9_UIwr+2lbbTe4YfN*)7hMOq_b8_RKdttc>Lpc
-zXe!$|iq)w;2vrM&uEvg0iw#)Qv)z&rGgV`mcE-J$2?29uI`dFEb9GHR^J?^NBII%+
-zS&|uXT`)VM`aTLrFZ2_f-7#BpS@yGDlL=_#p)60&Y)fZ`S|Dd0PG<&MEi^Q20t}1*
-zUPE?hj*_z7Mw-nz-F;Q~b@W@=?!kOnRG%BNRPR*hnCWP?y1JJc_!N`r?kg0NWDE0>
-zH4sW<vDEB<k{B)NqMUk@azIH4Yc*hHMFgHSP@LpVvZf~$xXK2Gjg3uNJDY3hyLL+$
-z=qzG5;YnjoIu1Cg8{dFihgqJdx4DEH^X>HU5u+sp=;(vb@!!;pAikN7jn3X;*tcT2
-zm1E~EI)Bjxi{7?q`33hNTn{W+G;<3U-knO_aU|CFHJRX|!58p<V?6tSf}!?1<9UEq
-z+KzexN%NIh9Ht}2isUWM{{KxQlF!;xs+8@&MX<8<oH0|!oI8=u?#n_lnch5=ntjWb
-z$G6OqL$P81a471eG!a3Oxi7utZ*}QE|1#Z^p0y3PgoWr^p@Ah6X?ZE5>C7SKkPNTl
-zuf%__F`CsOMM`y9EpyXZTP|ZFb6#RQlFl4tl*kg2;M%Mz_D5WPq(VB$zh&Zeom)DW
-zFc(bBT7STf)QychU%JQo!*-mE{FCWHEKYwXr;plZ)$Dk2zFlAQEag#e<9IY_Qv^0|
-zMG0z7MSDzt=)pM}KS`2Z%D>mMj5khw!=|_9dK$c8wlyTXfy_-4X6B6(I9o993V#oN
-z|4-XfoBl8CpGEkK@<12T?1gxsc%c`}!vn3u1H}v7#AN*1xlNh%b8F;^5<7qH9J!(>
-z;ncbFybm^SU5G2Hkz1*M@lX8GG%G3V&m640DRU2wXf2_|neXC=wlX3XXMTdqVbelp
-zK$DM#ssPCt)HM(jtS30?sq+X<co1>I8*7|HaM)982@Wdw|H?bX0d2u-HAZH1RB=lu
-zX&zw9<+hGNVpi&yjxK_U_vc=dPoU<-`II${^U4U#b*lLl9%z^8$2jzOumM%|5{w=#
-zc)?jqwq-llSB=2jWLpW$JL?y}Ok<J5nm7dN6g-F#5oFyp&PE4YcjLFpG+67@sf#oB
-z;&x6Nu?afm!3u|UapqwNn@vm1F|l7Ub7{(4F<fw1H}&DP_TseSuwH<}x)g_XNjome
-zM!E?9(H+*D99Gz<-(rdxsx`3&Ou9@*gJQUw2GX&ui{@6&v$SentQE?J>)Wx+S+wL?
-z)LTfN=|X4G;4&3_+HB5Qc)i&UH5l?DN4MZ-wkj{1_?da{mIc!)&JL*JXq?M}GvxKw
-zdA;)rtq;#zK4+WJNXm^0<%UFUd~n&?NeY*(li=)*%iM8RXHv7e9miQziCWt%C;T*X
-zeNbz&63vooETr0ME#zCeOt<{kgoTantUEWEj)g|o-H>N7C(okJSxidqO!rhlih+LR
-zWQY2I#hGDR*%O7b=3FnyY+=rtXSv@bR8OePt<Adk><*s0a*1+HqO41l9ZHLHcEFq1
-zG3v666=cadLHK$doknhw;ZK{&*?xMd5rO;DO_}|gVnxUe7}H$0sG2fcTnu-qm#GQ9
-zv1uVVyJOs3>JH<Z9Y~2G9=+9R9u$Lg9x*yiMd^k<tJ<C7tS|hzf|H90Og!mTFnlHn
-zO3?rrDXTC`g;Zf#>~)M{VANn}#G%Wo80Z0#E*>?Bx{ZKo!|2>umsKg6H6{stQIhN^
-z>kCJwCdu~}4s0~G9qoWSvuZ1>)V~So98Z$%BuO=%R9lqP?@3(-W<Ac(H99cq=~IBG
-z*PEtoN0)G|^Q3u&W_L``GV_|pti>JU*3u4(Wpfs*@R~L5%xm7`tEFD^8(2%MF7ulE
-zomHPR9yS;n1QKx+X7L>?h*OgNKTK0<K;lgoDQo+8O{qB<yLJURYj&nX&EEdF<yr63
-z=WYvO`#Bja<UP<?2lNuKp0gwjN(p8BJ_$ef4|C=_>wwSC2X_%Sl^2~SE?UaL-4xx0
-z{xu2Xx=hLu0KEfs-qkoNcNPk*5=p1|iqWCjkxe^(ZAYyKD^^TD*-90awVE=GJzlV}
-zv)Xx>t+Q9KZeC&DZ&PN%YPSD1Wv}Q;n?$~rvi;uB&dNIqjwJ$GC0Rcn$}S;08O1iS
-z2cORti={B#V@<N5Y%StMQ|Yl_XB%pEjz$$Z*MT&n!<BSy!yxAXbp-FIGnIBPBpk#Y
-zMv}EPES*K)c4$;8te+#z62oPMlE#JEu~1vuYwM-9<^o-ZC9@}1uGP>|$TWsDPD!{t
-z)}*W*nk6E5(m-2LnT<xgp*={{QJcEb*$wJA)WAM^YS9I<rgoZZ_GgqO_O<A2ENqw^
-z55m@nU&fC}!oV=JaTNx~gyy$4_S>;4X?9AB1>!dqABx)2;8xdfLu(qB)EwJ<(X7{8
-z=;2Im#7oP3Z7Jhmmf$$4-sYn7*=(FGJ;YcX+ZBO29=eHYbn;;3$4#p44BNfTCQ=f^
-zHM5>lR&K*EI!nRH%&95!Q1nBGWoL(!<sB_Ujm#laa(1AQWE|(2Ksu+Yw~$(F7Mb}Y
-zrd?-goB9!BF!<!GM7G<=vmM@`CB5m)(!O+@FeWbFrd}(<!rK6!SoG5bXLnp`YjC%#
-z*$&`1Rg?CZ*IeNP($UUl9zzV6Lb5@e^hYg%HbByp`F#w$JO?{u^F`NqWpeG}oayc~
-z(3oGUxrM!CY-?b_DsEKS0Z}DN8&-*Ix99kAZDGD>u*_odOc<Iln6N-5g<<ZEbI~}z
-zBr!i<*a}BG`$TCIOuvP4Z3f*NMcf>ogY{Zk8M%R0(#-~Ryb>aJSe^~@W}_MsRg&rL
-z$yv^<5!&AZjb|F;WzM*{8e_{d#;wj+REeU*hbCA~w%Y`EUoj!@qye=hNow~pokdBL
-zo-|?*T0(hdky)EUqp&|@(Q#gnXxTM-5sPJW7R#-i)M=ib<jL%qV(Ou?v$=%?5;>H}
-zVCyQ5C*dkJt7x*&7gfIFx?RtA^*-PEQ1fy6cg%N16P6G07_*u*YSg~nS#MiR5h~)t
-zyy`q-<KE|)dC-^7GnSoo$G{9ivp}LTpBM%TNoH8G6+aJOW+BZp4HnWo<GoWl&sd49
-zJ%eFHx!Aj!XIkMH^GqAT*&W+iIv9g$s>_!=3Fw~48-U3-DjUcRY=p34L|LA-bIhoQ
-zM3po*MHs`koNV{F2(m@<dv?f^Y&uKINF2&|pP7H;F1aa$-Fbn%J-0IVZ&I9j;As{3
-zQ<JPeH7Pc8wK`T(Gjk23q}E~MP%v}Fle{W5t7u~8MV0TkuG;fwovpE+w`*GWWsqLA
-zmS=n~m>IG$J&m=qqK|5o2S);jg}&-{g_~&&*w&#oTIMlk6`WR?scf^gNEsY=Ny7>z
-z?X$|+ph*Q;Tc(-SB_Dfjw$T%oZr-Xj)t7s9turWD?v=baGfpve#*75&;R*sfsj4NX
-zc#&sG!b@E;lHUB6)a)Blc<&g!85L)TRKxbyn(u21hR`aJGmXQ}-fXyyB&`JLoF0nW
-zRBN{EB*~+^p^YkO=G;ywGQE4U1BE1G*<-cHJ?OQNhHa;XG;F&pgzJ~t&=Y)oI?i?*
-zdDgc99B=uG>klCF?t%M{xCedkiDBDMaCXNl_p<hTU)WI150@cn&in%R1UM{T&r!5T
-zd_CK-$Bs0;JTB>&IZVhn>oUV&WW0K0)6uYW5<89xJ;p?1j_{5{cZ31?IUFt41jBqX
-zWvmmytS_@RCg~<MhMAZ%YWFHytfz<OS+XtJa<+&i8uJ`~*C7+$y!q@Q5=UOHxLjeQ
-zh0+$nLQ2y_D&Bq+NJcZU*&P?!v6p9Mb7`Z<Y4;DkodpzeV}<n=*(`<5T=C{0P3XV?
-z@5r9_ljSUOHsmrL%hb5oT4aV&s)c9N*5ZL0V$sGVXPP8Ls!NEY(c0_Oie0X-aVqw5
-zEYFO1j!_lP01?%avc{91p55^#ExUOs<Dev@9Hf1Tl-{VJ9%(7xjNT%G$eAXIX7m*i
-zw@NU)I^)*uwdRVe3qgvLLW1EE2}X*TM$R-zNHCfw&e@L7+m;)W87A#?gH1Ynf)eKc
-zcDle_Kv2f<c!z9F^SZ=h1qF8e1Lv-i_CLkn8E@O7qm45D&&Sq=RqeJdWR~aJ>?mm%
-z=7Qoiu-}BWV-#BhyC6tf-YH_9?&JmcqsDx;ie?9jG~jO<Y}-OcnGD;nR#I{T-q8kU
-ztFGPTDGb$_2G>StP4z0B2%#`CE-aF<kUdjJ=DAgNq#rSD+oJkP6}|n7G_Bh6N;X)`
-z_IjeqL%Fu(+%kD_tnB%w$zHj?ul?`x2e86H<Yw)cT?6&NeYV_a`PUL{o<PY9R<X}w
-znV<GOD_LC94<m#zhEapv@)^8jk+Wb+{gfDF3VwF!QvXw*r^k%Q4z*cB)HY1ZEjd=O
-zlBHgAOVLu_Mzmz9S3ZWPbYJQ>5-Mw0A<35dF45W>D?Jv{Qr~VNE%jzn?2(F>dMlCb
-zHu4y(yIksf;TTJOA3@%z@%B%uCU=~XTiuYn?$eC<#j7mwkSLa?SbpR1CSKjLt!?2!
-z`mEVEoM=Z4rDX<GK@804eTg(grM`qxP)mb@tgOP9P@XHg#A%q>mxuyd^lHRAXM2E(
-zjfmyhqE~BFLq$7<p%x`^zEf2H93^pzV^I7u8f~aUc=F~6vbH)<`8?+#FK0$4#TF1h
-zC^FF(%jxtZ%$%JtrQ^X&=3B`dRh=Cti+RrcH!F0brF3p-e`r>x?O*ME)q~@GReONC
-z;{cmdQ<U7nlpnAD#EVn@h}ECHy8=rm$0={jgn{+H@3PuGy%X?an4PBFWGZ)0$KNg8
-zab8$sP*yo3@<*Wg6=Kq6Z*!A&Xbl@wZTU5<I9F?!#o5QHQ1KepM=5K%R=1??VH4ao
-zmnurkUWm*5c&CjKTL^K<NZ<YwR@BP(Up7r>Cl&1CO_=|?_fL#R<$SMa1c_1ki8n?y
-zN7l59jh}DyhU2Z-qGR2Xvmf?sX0LWksu@2{JhW6!Kc{Q4_mkBI3zg2qu8r_yGu<tD
-zVvQ|-OS9RF4Ks1)-zVU`0Q$guNFG`{K|cg>Oj`27sXZw0hq@+9Y=Ghw)!e53rp&*a
-z80;*Zz@JX|;+4)d_BLgHYXq7(XLn?!<?N<j%@(RTYumkA6Jk?4GjyjnDmkICN7YQO
-zPLVwBs5}sk)7-52E{wK%V{Rw<JT$gQ(Q}2oxgI|}`+zF%JFzJ%eShmEcWF%yeczY%
-zm$@R!c@(FSRo>!Co?r2DdQ)cQDC_8$+sY&-cKqAGGG)i)6Ui<qzr7qc-c4DR;sI>q
-zSUSUrFE1VP&N}Z1mAr3eq)*%P)Ar11@zeIq^b(KVl7qRY=Vxsvo}Qnz@|3(~`}F*r
-zF5mCj5^gTa)BXk?)YJaP)Bc7$>Bgu1XME~r+-UcC|CjsE`tZ|M3*Q};y+4LuF-~qg
-z;2R}6V$ow7+0~d|Kfz|oJ$Ou~i%1WMC%<$|dswzUnp|Czv0=&B3u8LA+UOgX27(2B
-zmrc|9MzC?j7}#EpI<i*BAax8oV?Kl`RFYHJc5xKVZ!!jxy&Jnh)x~Cv+@-MtE2=Xa
-z?|1(W(cR6~>$*t;JY_>C-^E1LYGSJx+L4^EDcbUF=u67juCwHot)j`+ie`)7+6t|(
-zLCjK*zo-?jZ8^tyYb*J_<iC3V_Fu}+Bre&nJ#BBeW>4E&!5@9v-kzS{{@2WJ%x>d6
-z#LjHGC7s(e#iJ2kkcgwS9H+XE-%(Q(A1jNGl*Nb3;)7-J{<3&qS-iJ6p51gyX48}%
-z+P`{gc1JgI6b_mB2$YZNY!&0I&Q_qiXhuk`Q#pIVi7!K0bXoj(zbmdmurIxqwEN0b
-zG_Cn(UU2jr9&y>C8?STcPd<6$B#S$c`L>*g?dNiBR(8oPx`-mB_W^FJ6w<e95>l&p
-zxsaZVka5(zq_0HIoR;tEqRMGVL{*q0Y<Cj|w0uX7l}8u0qKC|%+{b0+@z``S&k;X;
-z1llo=P`S*WE14G>-ID%Nnd|fQm#eofpOd_n9*>ENUh2#GCtt}6z^>;%a^NdH%Q&ae
-zvpwfCnNw9{_FTza>oO0P%3PC|tXyV2>`C<O4}R>P0X-1Qm&wLklKw?P==pUav(Bog
-zk$FVVT}<XNLgjk)T**9PbW4UyWggE<Rxa~sJ|{b*Ft(uzkXf7(+faFI!<oCDZ$!b;
-zGbUm(pT(G}cKgfT+pAc5ulQMO`U#b{#&gx0VWZ=XwBiw&8zj{wD{oC-K8LT^R5shK
-z3TTZuC9P3;TI0;UHDA{gU|s;!#K5S<$M5J7Rq|$+Mf^?e9q040S$#TpP~Y{?YA&eR
-z)=*~!w>8Xp2Z3!3dglOs4K+s!b0^&@(%eD!0pHNod5Z>Lt^a>bWTz&dq_aiWH%a!!
-zu}v8-MkuM6nd9$QajV2P6>lU|u42!XiaU*N$ylk1+exji;<kKF@@U`Q4M)Y|l&Dzc
-zX^Jy<6`w<6wdD#Gqc?x4AW?CPiuj|$yowvIqfEJqudk}&*N8NC&_%$mRlLmVVpiS?
-zFR8dDRNPE_x2?F|xM=QcAXKhm&y|XsjgAWkN~}0dYIPMa%;#i>6vm2G0V)=!M8ztP
-zik-Qu_;Ff+iYIA=tk`B{Q6(y#r-;AjmRIqw-c?1#?}J0775_w}xr0*eyQAVdtE;hV
-z$HiR?fZHkh4P82EPm8??nJtUCe!(tv7-!^|&{X<CtGh-+BfTvZ1L%CpH{}jmAT}C6
-zcPKlwx3x~gM*H(ewHs?E$G<nTZ$i1fAoDk#R02zR>4sYlvJG{-?_^g`mE6x@>?-zi
-zvRXcRwbsO24EFVNX6OW^<u*;?iD<ELX(~OT@nTN}`f|^x-1CvAQ(NF?&P6E;dsCu}
-zN~>=fl@{MJswqS+qnhxf;u=RQsfH`5`YNe<DyiBlsoE;3mQ_-v%c-*d(YfF5!;@rn
-zN!B`{=&%O&Z7lBxz6UMp#d`=DJEG@B3fUze$*aaNL;qSO8K&``p^dmAC(=HhO$yZJ
-z3-bcKvCSz-2Q#@CvG&Ee(Qp5ryr`V4CGY&rB$+gpR3ud~fowF0cd+a#t76IY;zm*+
-zl`rf!D4{1MxnwP3<EKV0*@A*(iHkRrWPN$&u{vh_73<`6Y<m~GSTeoRl1QevOgxNh
-zK^V!D<dSukOLnt7BG;M5mYkxQBpWS~Y*@T9{-su?_}Zdk$;R^1_^YIeWJ*Uey~g5_
-z^_NRFs~}n8uFWLbRFPy8F4?3(yjX7^02E6$QY6`EKAas;I+7{LB^xW3>=HB;I!m0g
-zbC^phG)JV{>{}O`WwZX-OU^%_+kAHo`WhDh<Prt{q;9j_29{cXgq$U>-Z*7)@|)9}
-z7pB(F-@zp@o~h_7cf5}3oYwCsIC0kO4-R*B+(mI-V>|Fh3-OZGoE?WBpQJz1KPxE4
-zcRaHFW0+#~CHRIJ#<S+X#MFG(5g!i5>;LA=7wfqXiIM{S`Ec^8bWTaGXZicZqlRXr
-zw*Qr7A#}ZO*r!~FysjHNUD53Sa=tHgE%(9}EpHT0T@kn0zT<HfTV8Zl#!h;RRBV|A
-z6+5keRU0b)D6Cz@3Kdjr>84@}NyR54{ok+Rwjve#F3~<kz@cci=GbRa#VYPZjzq;>
-z`7n+mVKk*ASFx2ZnwU(*J!mjgToWojrbNXBXFa!cIPLmv7wZh$AI_c9n>P)o)*ps_
-zT56)%C0(Z0mzd>Rj@0^!9Va4^6XHsQPTvJP*Qr7Uom#r-)I!qf4rHvR(>->qn`RBV
-zB6&}%u@B#*ACY;yu(Y>WgRRt>Xs|6G<`YN4h^r*i;HI8(3*B+P+^z-hn9l9W6uVqM
-zMz3sE<Wm(~uI(Gl<+>XvbGc?8z>ARAZPjY#pIH0-opuLD+51-inftP=;U)f<ecx5b
-z<i>n8C>3Pv%96~`RwC2C-KS?j@{9We`-JgX7t>-Z*6TTT_z}Tnk;;4B4KnY-_gn<E
-zpAR}s4+=tO6Z<y%6gx6CM@LXgl!Ep~WuJu4*%r0TL+gdC%tPy`OzNskYV)LGKd!Zs
-zN-jVd`(>3$3oCimS5nQZOscC)N>%cb!%`;1WM$GsWzvWz7224MD{IUevStQ$yV{0v
-zMpD5Me9-2Nj(&>k<0ybh%cStfcs-=}Fbjr$`yl(Sw9$@gj#J1kN$Y5_puWa`h`D@O
-zzHrfL1m|cZ+dUE6p=l*jxWXy_SyrK5dsRcj+4hLZ#ehi_nwDI?qAKhZvP(s*aHoar
-z5-=lW(y`3!fNEhbFgr}18Fq{%EcsZgm$1Lp`RPNnhWSlYe5kB~e4r-C3@kLT%ZrGO
-z5(|~Z9hu!uo^!hV8yCSusR_M_%5y<6<dG!ccZ#T))GlRduj|<@g3Py_VwtB&U^`ds
-zXdtxx`xrzvr#T?+U{~#NvtjS?I*3CYHz7V+(p4teZogGWJ#H7Mc#rD_8hR#re4LmU
-zF6s_W$4Jii_#_c}Tw{cS`5rISYn?XbeD%CIr8ecOsL9J$RE72U9MM_fS_>7vTGKLP
-zOa@d-MUU4aib+k6&x62w{Lb0d<H}5P`-RC9w|fnYC>CGTaY05>o-P`+db*uF=XCiV
-z4<<@YdfY^fdycZ!RPRqU6LwM-J?;uOJ?48{y2eN(a8ZwsADr*;WaCn`$884m9`7%R
-zlk|9t@$NRzMUWk>mY|CeJ2qM{>G8IF;iB%qbV<(lcsmh#Tr+HOj~D9oVd{KUMVAM|
-zsCtN17?t&SpXjV`uZ8UGdhf~XXDyRiOF89ZJe~9yJw6D5_xN{s!x^0`lg@2cK|fex
-zR4=m%d<*MWVkbQqJ?`W=r_1+vFi~nkZ=&Mr8GCE0_jr#b3`tp3>k4;eCu6+Liwp{M
-zKJH`u-}!-r7~{!?uxgL@(kyvUG_3&+Ax_fclYdpU-3Hd<Q<h*oUSstpJ)X)JF6nU*
-z<$JuA2tBU#xwyv*^;)ORalY#DIuAyV&m-pY6;)w9zEE^lxZXl`By6ONam(atHRY7|
-zczaQgry=kje~=S1dR&>PW!#!<r?vF>gkpS*Xn7?!V?>WTdCuwbJswPyn)JAd${~&9
-z;=5PCdtA+=b}5S<cZGLIkNGj4vaAjXT-4)F@)H};<H<(5YLAa2di3~cL7b$=+pV?T
-z2G--9mS8>JW5J}yyYhvLx`Qk5NY3|oFA;itOxh}%)eH4nr}a5s^?1JrqsIq{Rqyc;
-z(OKbP3)!dSNsn759|0<-yvK(T#pyDi7=yrj{15wCk1JE1tAd;$SZrXURp5_D@Sl_N
-zbW!xUljoc+-{ZkVsY#EUsO*@Hy*1T)e9#hxq%5lK^z0r%GRC_+ZOqe>F}^=iM~^25
-z7!R_?V58Ho>3^GjJ%%esihoF!^F6+A{aTHgUo-AcBiUWo$vd|L49gBqe)&<+?%Fa7
-zyKATQ$6c`#yaevP6I94{g2(6p!_sXhXd!lj2-jz;RmU<Yw>Q>Q-xuz^{oe~-DH^cT
-zTA#Qkp2+JsG2?NPn79ngj2qNicTUn4Ow72Mn0HW#8H*@y#tVsH#@fXcn{lCDv&1^*
-zD>I(wLCm;gQj(bCTTfy|O`5;#Vi%R*rdp~9bMcZ)5XP(9xEr5TH9jo)#zC*DO;P2}
-z=Gx$6QS8bY6kb)sudotBH3qsbqSiwEe1TuDo*9^`w05KByCfscTf3(kgQQxQ+pBfy
-z+}foE29I=#R1F3lX=CSJYe%z1w(3-)U>ptD$o4sQ0BfFWa*XuTVvBEVcXQ{YDCd{5
-zx~-2{CnUcsV5do&?LmRtx@G5WeWAKp#_fl7mRYcMr}YEBu=St7-ECc=f~{M+*}8=)
-zZT%c3>S|{o<+iRJcTCwW)DRj@Y<-y;$E7<0v-Lqsuqk`kf{Cq<5c9$%wl1Q)t@jg=
-zTP7tGP1%Kd&0Kq&uWY^7gR=Ej1<gkL2vyXS*m{?d*@t-16fem~{Kl)>xEr61)%fsf
-zv2l>Cw-G9`bw#l%XHabGVgz}+fo#3gLb7!`uE-SM;FHYkMxD($Y2Ma7)fj~MLoT;h
-z>(aTcOAXk1zrnzuLC3Jw9JW4Uk!rU7Qa#P~U0MxuxQ_G(N^HH_d0w-zD?iV()Wp7*
-zbQYcGSx(_R&j~q%4a+_gc5c}U6)fA*&9W_2Y1!{W((0C7<dblMHyCC;_Lsz7@+S(T
-zBx!#sFte^#+k6UNXu-s+8;DgH8*jOgoHy%vM7V!a@6+TrmxW5rrfZ$4Y<i9dWz*wU
-zzYZ?yNUW$PvFRF>$TTJ|`g$>*b{V5?V{HaKnQv&x5VQ(2GUy2iiVRv&4B8nK8?+cf
-zK4l<-PMHK4bjb(*i76W$54VgcZ_1u(MH5qYiM_(CDZ))zt;dw5N96IoFcl|GN=JhW
-zP&sY;BkiBIOn0_g@ksk+SWm_IYKHPW(!Nk^sz1`Uoey2MjP=8o4h0IIXzLrn@_%LD
-zTmQFyud3Hz{yV>ieVYH@_q{OhXX?!lhK^Q%%uth-yvjE<^}d28U>_j4O`~P;@;5Ep
-zOY^I}k6`P03D@Kmg`$e=i-R&=dhk<{gabuV)@0|EPChl5EP0%d|K!V?J#*4z>&>tU
-zZ=M?L_Yc;4kO@ySojf3?E1INir(KuN$$xRKB<5*nX8Vkt&GV?&+^Edf?RT5cCgtW&
-z8}$IVAlWjq$|S2Xo+URCyJU07s4iJ5pOcqNNl50*;>tcrCMIbln^%x5ITb6FtOdd{
-z$tJWZbe&ClFmzUMmCJRe4Y$jjmrO}W=FH-n3rQv>lI(r<(A;#EoZgg5)><i<ZC72g
-z(GtnD`>w9D{AQSmy}^_fm#p~P0DeK6_okRgvd8S9xk;9sGL%ZzRw-GZi=%~A+h^1l
-zIvbo;vfg}7UNR-2GiPRuTrx3{WakznOLoJj+K$n$XWQ1O2c(!CPYrXtx9l5(9xIGX
-zr0<nBZ|d~@fTbpvH2cHn!hXOq3;O}5^$&HzYq|-h?lmb?cnWIi<~3PJPeDI5?Zf-)
-zipNM}dzl$-l-%Cg?H&x3b`q=J*=_lpyh@dXN}ZWq9ONn$6I7~|eEXi}hFXX3i%4=q
-zUss~m;ZQ5@^6*eL&K8UTZ!hEFq1JwXtlVnV#cg@KHZCRlV`a-JxS>wi*qgYamr&3Z
-zs!&0pmhOiMqL4!0GOgoTs?feNg{Dn5n{k>w7z$lRthz!Q@;P~hDhY);Gkew06)Gl)
-zLcfT<vN=;|O(^ul5`|8LLMKq@SSWO%G2pFJe!U2Vj=4fDHL+9OLz!2o<rEa^ggoL8
-z3w;&rT%igT6l&?FPzy<+dm~MCPyV_R3$=UYT~U6ZA&K2W>pU0=oky&?LTmFmd4(zo
-zh0ZasM>noeF$smbcX`cQcH6sLRn5CRmhyO)dx=do?-GB~UzfarR#(3t9sjE#v+1#N
-z7b3gqvBJj|8x9T?HBM~54$WqlJQk~Ban2=?<Ev6}&XUOSRiQZN6_Mk!a&gXcBgbdO
-z4GXIE<{mqW1e1vAZNp6D=omqDnY#q_@xL1kK2^rxreIJ5zItTCan&U_Ag`JotBb1l
-zH#2TNd%FHDc{Agms`c%el%;RyiA8DO+KaFgyxZE~KR`9({W4GYuewzR@!!zDck*lC
-z)n9ln>EGdM{kxX3^lw@${xki1-J@NMEA|6j%r2RsTQtY)dOz^@eyLTyKiDXTsdO`7
-zK2&Ma!b&Rn>}3VzgqJ1NRwl_IE~ApGT$VIN^UIPZE0ZQFlg2BP#wwFWE0abllZGpk
-z1}l^LE0g*vlX}aO{L;{@b#(dW>5WX9IOMW~a9axwgO?+Dp>ng`26jZ%Y6*7o+Gas{
-zx^eZOHdY%+^jWTGlaTy47N<Xdfu=<TGx0f2LoMagr0B*```w?r5G?kh{$pGSVAZnf
-zve~o3-=loHh5S-|+te*1p-SCip0<;xW<sjQeyBF#T70{7@<X-BwT0f=_-U_r<3ue)
-z4zFELqdQ61KE_)U*_;Mceh*lx;1RN_D0o5-hS(?B^C7))Fvr-Ng6k}33ZArlDR>@<
-zRT^ouYNQlgtAg>%C7cGrb&B$)U{zG2V51HH!xZdQNx}8T#y+m{y=hJLy2acToPxj<
-ztN_jO#+2MEEgtlMR~s+z`<=+iqd>I~1$*sz1z%+^c$k8dt!$}+$0=4t!95a=>p)FL
-zDR{&ZOu?fTGzIrsz7#x0sEUG(Hc{}fQOB=mn1cIAF$Jrl5(OJAzY}6bWWipQ6g+Ne
-zxluLPEO?NFDs_vwE4ZJKDOdrT<&Ciyvb<c@?s7)KUTwT2?mr5dC|E5-4zE40;Ais|
-zNLaA@Ub8z&6+Bg4!D*Moz@~_emS75Qx1cGwSwU-LC!s2hG}=VLZAR@6>D+>skzxu~
-zMI{P0TK0HWL<;t*q~I<~^Sddn?p6}2)Gg+&;1)urU<FXHH)cSL5(SF~3ifJ?e=03G
-zC-&c!jGu$H7gjn^-Sz=i?oe=Yuu!UCTgdVUSot}4%3g-BUyJj{1oKP)Q*gZnO~EMz
-zt&s}}RcWNrCJL@I>bPyuEVzagQ?TkQQLxc+{$)j^V6RFFZm=|e``_xGLqe6h#oQHK
-zOUM+g01EcT*iSqs3KkC(?9~o9f&b`UV!>)5a(L}|3qIT453wmCIUjiobA?_k*9hBY
-z&*QYXP;?nm@B}q2@E!f6y=>xd*~bg)o9%u{KQXcF;1s`7qTQ!ILA6XpU%g`y)j6%7
-z!o_~{_i$%FI{U^Bh1icCzWvKcq8A1%>v#I%!9xGa3j^EiBHR$QPBQYCM)D=!?ODWM
-zNX&n?_mZ?+yYbSmPaidRvi$4QBSnfo379`Q<JYHSrWjx5{!laBUb)ni&6%q-<xa86
-zb{p7SF=z>9%EJ~kQ|_`FH5rc(nm|vf(n~~)HZkRXqqZ+o*p6$p>mkKVSrwI-veEJ@
-z>{djk>{ZE>M=i~NNXksPkAy09i@BR}FCjB!1!$Hxrug?3bK-$1d$j{j(BaaDJE0aL
-zhu5Ar<qSJftUyPWVFe1(w04mvR$vi-Gcj)kb5E;c1%Iw;1<w^}?x5ELyS9RjsyLjT
-z9SpCS$$ZB=yW_;-f!5gTLO1rNb4xjOw9kp!i~-+T=&Od!o4R~hS!#Y*wWyJWVP%<x
-zVdb=bA3+SOwJ`NzrBKPRvMd``7V=@GQ{_;of;6Z_VkHW-2#?pqHTkIf2d7q1=-;X;
-zbVQ`NgZ=>QTA`{WQRs(R5UL#+?7jUAq?MVPi%@(>nqMAj#D`}9#!e2-LQAkQ)nGvz
-zQ?-__F_k7%#jcGu8B_H}ZJ#2=n3_Y1jVV=BGNz1{J%Sa{nDVMLrkX7+-byj=m4qsF
-zi@A@fIzl$46rfq&m;o{Ja(w1#IYVCUfD?4M^f9K?Lget;^J8iOZVlgj6u!ga6>AYD
-zoo^9bWj$L>I{(M7uhRMZVe6IOLf<da+(C~4yY75dl63y9u#3@D!%V01=NFZXrfSEf
-zlg6O@xYSaU(ZqEi8asaeY&nYh2YF7&XGY2Lq(=MlM99X`=aS_~S-w0eWaFr@KL&U|
-zjTk36uSAQmFo`r#;s+L0QDSXXCB9pvxr06r>{^McBvIlr24wXS)QG5s5j0X|i_j@P
-ztV+gCBWTbPd{wfbuS%A0s}i9qRy=G3u?Oq7$fn_BNh0b?5`mK8V}vXoMsG`!g=|T(
-z(2_xS>-vaQskO(5^kPLXAzzP_6fFHM(PZq1ht?y50dHrA%bl!8menyTDEO{_(GpyG
-z8%Db*lCfhERwB~!-TvW|t91L}RlEKDBF!B%2<*DsRY`QapNy|ivE92$;3%uU?7Ox@
-zD9`EIBd?3vE3XoWYb&@-V8;6ac-~$sYy02%ynVy545M&Enz6K^krZ#3`CB*Jk6@yW
-z=Rb@}orf2dl;b^Z$zRhwQIb$uNjV48mi%;~B(;~7)KWif$+d-&@noS$+P0ZWE+~}5
-zA+m}4VUP`gX{q}2Sb4^Lk6QLT)>4z_T;<PWEweCpJ8jAH*jK?co^}x`dfKIQf7+#x
-zo_1Y7%|yA!ju+;;x5UpV>02sEZ9fSX(MyT@_h3o8t35EChXAyj1*7<Zsih|EE_q;T
-zIcl_jhwFrm`3I&iR(tI8afJ#kwsdQ;h1B9MhGey+p`^t{PfO#`TwD=sEtVHn_C)g+
-zB`vPDM9=XSmp#$6)O?GJpJ-Z6p~X&Ec%u27e2Wz-wAj+E#THVFKZ0z#Y;n=!%*qz~
-zBdMC#OgFKXJhIRxyW(ZGuXCRflWI3$Q+i=ijgN&jQ<lxAJb$X?^@ZAWX0N%i(rvA+
-z{N7iONSgehj-NZUGsfi1GY(SiKrAyfS6;L6^Iv7z=06i&_9M<(*HD<&w~@f%z>@ET
-z<NIJuB-$==1i=@+I(0NroA?1oKere+NUpS~g`kNya)4~N1X`TAyD8H>X+-uke#(Ol
-z(c<CR>CNMl>0`Ds9CeJkIP)v$b!^&{SvtY>v%LR^O>MwYS;7y0H1bQ4@(>#Py}X^_
-z+99j%t<&!x=eVG?<TsF=u;dKZlCrKaUhbzdKB%rY&^0<sd-CsG=~1a(k5nEnO9H{p
-zZ^TK?ZF38)upig^Cn_PIU0RZaTSb+#PtTI15!6wbtZ~MOCwas9aMpj42q%Xm^s5~G
-z-cQ!gcXRe6A??5S<E8x`mL#0EitQFaOWMA_P3G#L`~m*%Hnq*0y3ttLSG9?}JtQUJ
-zUdy(p7D-Y+LKio+H{ZO{-|VYVQGUJBo7$Ies><`LOjdtsQ<dbk<or2_|17g5Z9mfH
-zZ)+-zwsmWFo7yKy;w7ijULDQXi1#n5oc*v_($pSAEpBQj@g%P+AI|rxvguXjc(1BF
-zO||+<o2sOwse@K=QLmn06Sp<h-GbR2KiW+LuD9viU-Bz$>N0W?+3m!l_(v-_qCwQ+
-zrnV7J$T#N0`KBtHrYgsqs`50|>Mw1ol9HyHi&508JDT{AeN;uO4bB)X1CvJJkAwKl
-zndB7+`!=0#LR-n+el|Kwc;)=I=bZm4Fn%orE&*$XS5{|w8b~{5U*_!yKIn4F@gF8?
-zCe)-~I4}8T4PD)r&J}*P7CDxwi2bTiI2KdtSni_nN>b4^ie>y4RpZxkb9SPgNa*DD
-zoqCcqW*m0+%XDvkQg)t%aP1~ZHJ((aR*sjc#(p5V#boS|VwsyPmbH)nOW)dFHSPV@
-zFAZgRjc983exWGgSI26>HFNv2Kul`4Hv5(>k8hbpY-+>)ER9pV8B(X8BHsX!u7|rj
-zz2%9z^q+s0?n%$OPd|J$eAi9}OjG`s+_|(4A|2iyA}%}bD7{}z^-ZR;r_WKQ-j2#P
-zG`}#F+9O5XRwGh)jhm)IiA$(fzkbDo*`>fCPN3g&Hh)0Rt!*7fjGgJDPp?UTjgbC!
-z@-wRXmEGxo4YKU_Ae~>){coG5?wALo5G45($=OGqI?a7?h?0E^O?&H{boMlwdU~Bc
-z*VySYRNf!wx;RZb$TU8gSHnJ1^#%82mpo}Y&!#fp<f_^0ekDcgx4kxRsZDSG<IeO^
-z52R;}n2S`9=fC^?`r4WL?@;Un4XA@po6<)U)?{zQLRX@t%sz7Z`(OT(_Kd2vOXGRK
-z6uQES|L5_W*?&EYLxM5Quo-(Qg#$b3bK8VL+@Cfe&mlAPq)jhk=xb`3=enDYD~@fS
-z>1<nLuh1P?d*K#Gwv#&IN*n7!9N8|bc1SWX-<jj$KZ40RC26zW63iXhJ|i+mw%>yd
-zNIOC>45HYdRkHiDTB&Cw7@m<}N#+MlnOjGp!6_cE!e}gC)3_6j*-x2o8o_fO#&hNu
-z5*qvQocl1MUN3Lnqo~R5lFy6h+*RFko)A@bK)SH9S??(hlx=157xHzR7xzc!J?CGd
-zdJ5HuBs(NZua|F@EGh0Kiyy?xfBqZ7b!<#3OK0v$(%SQB*&&lWxvSUS!)eOiDgru9
-zokVxB0u2+wxu~VaCU-8F6zkHN=gn=(oIkgwDRcJR_^g&`8Xr!CA!ghLoV-9Uo-kCW
-z^JAskpJ)EF>>}?!?{0(Z)O`OyyV!4Pg;z8*-{7`<T6u#-O@l>Ht--2ew;C+M-D>c$
-z=0#hB6EAvq8*Hu}4{E5YxWUWvjVttUOFpf<!J?+YBB<72)v;R*7U6C+_%-HBTZ0o{
-z`scf8(rwg14{t1Ma5~?(LW7(0Y2^(TH4PR)wFaw>-D<E1cc;PTQFl^X)j=EMEp{X^
-z42nGJg%UIKi3VW1b|Ku;F=)Kv`;PbpXDf)e?e!#IZdUV;TN1J1S`R1pkN@aB&}XdU
-zr=*Q1zE_O~6&dzSK*gEu=NMt!e(%3rTlM?kE~ASVxN>!h6@D`-m?*VOkuFD})|6`X
-zIWM6ccL~ZU?R78nn58%bm*SXSEXHw}V!4$Q=Pf#47tF<vA^vaseNSA2226#c7auUz
-zO_@!%v4Bs}&#7sCu4q>WSNZk7WE;DMt&^WIvUu~slJ`&1TbudM;YxQPD(9!MGnK1X
-z$5+&+8Bd#n>FaB#S}wiIa?MrCE!$-|4U57Y%vEDn!hWI1udUFWWg=@ix9_?dtNe_T
-ze${~|gG;)~wU}+Z&2xIlozf;OuA_58`5e0BamgsI!Wa(6XcdPeyXm&P6Y+5$?`l}_
-zQ$#r`8+te+GI5P7&WHc908S2{TNfJXUP=r{6&$cpYVLv55jp<r+uXX~8j;(Ql%b*l
-z*Gpr&eLEeli+zE(eZD+_CAa0>fDl=IxEmr*+3;V|UncS-$w~DRS#fPd{r9aBk<AMD
-zI>|*AtE5b&$X=0){7$Xqh@33sA@aiA6M4c#9xM}C6J1ihM7D{~M3#{!A}dV4sVZp1
-zDk)PbvRC9HZ_{dw$jMS1BG21Bk;h!*;WCj&i>jB%io2FIo)eL6Y$xBt4v5wCB6~$H
-z^0Pu@ZQ%5lL$BNNoZS<7#6=z{6M49(dWo#Ki(FSEvchOtRY4<G(~ImCnaKWpdDc<W
-zJqD@xuK!n9P{pH=FVwO8=MK6ND0>v5qYnFphgu1y&#z{FzP$O-Huf)rnN3@nDyH~$
-zLA~!S@oVR6isBQc-!^R8)wT2GpM95p_L1E%nBBCs^do`|JTl~Io^IAHp6aukNK2jt
-zTc6v_uzDz)6d0Yhz@xMvyJTw&#e4zg#-fw;;u`LZ0zMG(1;(c>aAOp3Gu-fkXagT3
-zR<FUIg+2NF>5QP{S=e8y89+Z}F@TI%@Dgy*Zxzt_o42;n?RH*gJz4U+3y)wP8e}TB
-zL6?bNnjeroXNF!YtNG9W-heu~aD!@Y({P#L^p(ZCO5^sHSXojFl9eQJ|C@wOe*E1|
-zx3f7lAd{T`*$<|VnGUkvG`v6+%J_sXGh-7UOW}r#@u;1rUwZA&RFjK+GP!0e8ZY`5
-z^{ij4<%5R1r;KU~J6)qMx^jB^EZg8o#8}FvuX3Yt$+dcwZGvKB%GhL*R9S0Os?z9-
-zt9+kEi)kgX|7Fv(@(NBU_&F*4x@2ihHE>UAQdnM0PCu_$^!o!ZE>shvX4+~vA6bHb
-z(%4&8O{%CGg}oY<tfFd$HPE~@G1it&*P3Cf>8F~(vTC$QC#_M~tLZPU#)szxhws+#
-zd=Blcn4b@!EW`7W!>SF>tX-Rg;mQ<Ul<T%?OlluecD`)cMdO#zt5+dP-v<g`9;bW~
-z{phK)bN#P5+k;(Cu<Z)$3~YC_UAP5H3`cH#uQcpmH1~P1ft^@?z7L8v2Y&G5FQyGv
-zBhc<aJbgXpXuYB~TW7sC^E1r3wsTHbNJ(w(N8n=H<DLqFq_zo(Eib#Gwn=Z$6b&*%
-z^4bb!TvD4`v}!91ry_!+HXq46yQrwm9Su7bt<&i6+UDg=sEAqCekaW}SznDHscoSc
-z>FfC7+KR77afLT~eQM}352_Pes&P(!+f5B^twx}#JKDr0(>Ru4bCTIGlHZDa5hKF?
-z_DbUS<Kl<!?9LX5wPUJ<MJLMFDTMvdaPcOfWWN<ZLZ{tJym03y(f;cQc8Vb>@#DOW
-z_7$s}Lh_4yRzV2mJCiQ62>b1>?W<XwOI}Qy-SK&Egm+T-heM`m*DQ^|tF%UJOd2r<
-zAxavdZliHt%$ZmtR07qu8!YLx7C3F<i7G2;LDVYlv_KMh3%t0u;8V6H+0_cP#k}Zf
-zfg5$Vo4Fm^B2j~QWj6Fi3tE#Fh^nLoGIQu_4V;O!KqY8Fo57MEYk|{7P4@CZ(gH8;
-zdo#c4#arOTy#){3+G8#7wI|;PqpE~Y+6;y!43ZWw<69prBh?H^R3$AKcX}`8OsoYe
-zK?_<8*a>5W$x*r2G@z`c1yQT#*p;i^0x#|@IJ(e+WG8dGTT!3M;E!<l0?%Se3x=Zw
-zX;Q5Py#z{HFzEDNES>{tD5wN2Xf{|fXf1HssHylzz>-?UowAb1Tj0g51-`2}_F2=d
-zm=(L4*H>FLfBsBcHNOm$Ikov+O^=Cezrkg{zhzo3S|1lJWrduBN#o)zlj&t_{APwO
-zR%90oB>AJLokOt^0ny<=ds<AqKjM9Xy@90*Wbtf@#c(&2sm|u^1`keiHf9}DQQQ>m
-z%i6LiuKAas8(GQJuVkP4TdNTyQ-7P0Ra@3JD#vSU_uw?bb}F|**selx>nvZVdP%J!
-ztdd<=nN<ZrB5c2rRa+GYmE*z=dvF?IN0eJ3>}a9*SQJOI;{+>Y;p<jW*mqnL)d&({
-zCylIZQ8hD|QjQCok~yN9ifU|qwE3_?Sf2~cihM@5ZwNH2S8$2FkqJAm8bKngtsShy
-zm8$Wz!)<m(VbjVj7S`8f=3NcItdBfvf2;G6AJG;p32r1<r2$GdZBO&#xH=zg9L*$;
-zUzZN%y$FAg);D^748|V8qzuVefSWSE=hTOZ+nbpjz;b212^I^l@vzA*`8D}&Z-dDX
-z1D89i+;{+zTsK+##$!;~<#ecJo|!?e-s~iQt)!<Gf7rgMGvUf@2Z)6r+s|R%%;q$i
-z<qt!5Fb6R&yG3=&#%OMhH=|jQ+0c`3uA89UIG0Ejq>&>w*5aXg&cZAtYd>v8Epse8
-zX?H?XE7DB9>2s`Q_CtnACCiN2?mztTTElyYT5GnSXWo{zKJite^*;E!2fg(+*z=v;
-zn{U0cX@o{-B3O_{j@WqXCyX>4k8YnQY$s9Z^~9mD%tGsHRFWU|Evh71Z#i58Z3Ov_
-z_tb%6`bn>R)F5iD*?xg}YS#M1&xzKz8=>7vM&EaO>FE2ueCszlyM7>PeUL_u*m&#v
-zoP|g+*e(NG=!;q(G?rOt{gl0()}5kAQc1Mla{Q+Ple0X=pQjEK(|fJviqly=aFXRO
-zHy_DbpZG|s0Ez~eav`9BZZY@TGaGmzBN^zHZWnJPf(5Ax1{-gEtFve`@LyJCQ$nn$
-z^+D4tnnLR*y!Co{FR3J2Z#n*Rghj3QRC|Xqq4!$N0YfOSwZ{Fc`}rDuH@`}{u$q5$
-z4dpqN&`0gn{j1!{DgUvpcKJ2=_vQY_zaJ%o_@Dg#)_<LRW+g@bF0b1BUH7Mb14UK8
-zKkc^2@rkwgE;K*gek`5~Z78~O>`Jln(O8^pKMVK#n(2(S<aB#|HADSA9|2*gp8?7Y
-zwfOQe*=L15u6wlE&c|{s4A=Z7U_)nS(=GV#yLje3W_Gl@Zhx`QWB$#!O&I1fO?Yq`
-z|87#b6~(6t#eFgVPrHXcrxa}u%)6|UW-4m;<=%w%#do^e7gjCapj7v5(;l3r?OK)!
-zPmZ(U6b-1m_>pWqXUl|>WwNvdvt2ogzv3Xjy`sHYd5Oy6Y<uZcwdVpl;j-U#<|;_N
-z&zHlYto*bkyXltXA;H_zSw6KhmoL275SLROzK>yvD74Psv2>~2NgPujmp^1SN6(gP
-zeuUfFYtJ9JwQ>7Wt@-?RIG~4JGgn^zP=1ukiYr&#D_0*TIr1{CPm|}b$$iAz$F$^9
-zc}xj2S6=>jeWa{%#l3RbUvcG%<7L!(%jW=U`FT;fyE?mQdHI9#;j+pV_sZq%7FVt~
-zmHXH;Ct8*N(k8=OlDTcojD24I$a}D?a>c!Jjr-!tZ64qkS46;Xy8%@0YrTGyW;fUR
-z4^*2%-%oj_&{nZIfYuZ~mP^i3e8ZC6#9?Hz9joCaC>|M~no7N?IUVnFc6@WgzG;4x
-zoxhzAEIa2OegU2Q^hv2&{-0}_J7?W<(${TQ?1uf)^DWi#uG*eHX3Gux-E)shrt0kf
-zsZ>K?5?53g_(yUHOqX6l^j{EptgQaOH=c-)l-pfQ%FTp(Xb7BjNvZ^|w%F->2cg{m
-zXR%_rPg!?$+xoR<tX{u-#T6I7@`U3qviN1I*T3w_t5&aCpE_;D`W2Vgtz5Tm?K&&A
-zbj_6;+S=BxTfg$+y4Dp}w$`oMu;!xmtJkgxrc2kX+}O7ABC;>Px^C6l4Qnp0TeJG|
-zx~p1OU%s+#!<wtst!Qgoz2=g-6>I9wY*RV7zhlMa8&(zz^?woGGj;uI4}aNHQy;nM
-zJ*h7>eRkj5&lHn}efQ8O*+qXER{SwfmHsgd?C-S>75UAP-v}O++M^=BH}dbr{dr)S
-z?h-Ej8^wRuA6Iv#R?OP7BELQa`+ZII@^u{3>d(e=75VFTk>9Y3{N~7?PCqS?znHmc
-z&(y36`TL*k@=aHMIP!mr<sVi}e>{BE-*n~sBY%|otCer(rHYx#cSZg^^iQ?&T`!us
-zd~f7;;yG6<-~Q5>%XdZoUem}w`7$rhwaogf&~Ni`o-v(%S|Wcs{=>(6`RVxAy?kc=
-z^^rdv|E?2e=06$v)5)J&;N_>|-}0)N`430_bo@sne>(p4eB-Xa>GabT`P1?5jeI@I
-zsWv`R_Ug&>_FWtK)0J;K+2xzA{`Sb9uKf6-nafW`{->FL_^YtL-Zyyp7duqsk4FA<
-z@{LFSOZh3kYWit8+Zj(+zAf_S@nT7}@z=ZB%TL#TsY_?hZ`nou@GkP}E}NNud*n~o
-zzOKk$IF0^Cubf#w<B@-l_e@3q^lzBC{BYz?SHA12nalS^{^>ji<gcRs$s1=bpUQgv
-zt8_9^rF=t|=f^To!M`Q)f601Z%|2Q_<mIQekDF)aUl;jr()ymNT)#&@HZ%YFk9+=f
-z{ofGz`?|kU(Z1$S&s@GG@_*?iE6O)~X6EwEk^c$yjn&3yO79o&H=X>ok$({S;jg0p
-zy02LJwB_p~fAKW)L+zHC%hyGI)LdEr-7}Z3kNh`GV}H-`;;C8hd~<5n#@bo62ku*=
-z8)fE_{yhHG9Lr{ezt9iwg&kb`?mbR9$h*_&PK9prB~BN9W>vb&i}=akw7-Pk>6`a@
-zAAKZu;)DFFk9y^I+FwG~ym{aE?vva5eS5thYOjAQSiivQmmg|>3H{>DMk~IL@~<`M
-z<d524LRW?F^U%Y**E!$tPph^|zfx1X8+4aLH+9mk`F#+&@t~VY?_Y;*B<SS7mb7Pa
-zF0Y^8KsR}^*E<ux1K}|ibn<6Q_?_|Iy~I&=aRPK*r|z2H`Os|)I{CNL@w<V%y3=>f
-z?{?^Ff=>SKbo_n@-S``K&F@L*MuJZM?{xg;((d-Ncg?Q}y4IkRKQ<k|_0aXc#reg&
-zUDd8`fo?45X6m=C&<zLOO!Ynr-PE#O*ZVB`zW$tDxA(Qs%?Y}h>b)4c=JR%4?|Y%^
-z47!=x`(^0bf^MdIe*s<J1-q_yFZzBw=w_<-rO=H8-AwhKEnCtVGJiAm@3qh^47!=>
-zy$!m$ppze5Vpm1u{M*niyU^>MiQi+;H3Z#E{GP`ozfli4`J0K~snE3q-Aw#0hpuPU
-zuK9fsy7r(8zrE`C_&RhoYn|VVLoL<Tr{6$V8+0?Z<3Q$=sWr||{`_=$J^{Msjk|8g
-z`Oqy4I{Eh{{EFt&8=z~*Ilr0g<#y;c?grftq3hobx+kHV*bTb5td(`|+qHa6&@BtP
-zne@CKx`v>OeL>a!y+!=~dDnX0Dt<v1etuPck3u(b)2{hFi@qNXx|#UB7P^fe+BLt6
-zp=$}c*hf^A@4e7<-o9&oUxuzN=we?{mESMK?+eZ^_7_#@_S&EE7IfNYOlPMrg>Km$
-z&Tl3=)ieFkJ9l00wa|?Oo%SCk^)_wZTOP+;5^sa9`JP?Z`)%ktgKj4Kdkng^po@J;
-zRlPh9Cd<C*_0GiaR5BZaF7_!^`CSg()VFrc?}N~d2c7mUC3-2E@4pUR>vwm}?>Epj
-z2VLxAs>*lZfy`Gw+BLrupsNcy?Q5o!?|kUS9^5s*8=xBwx>Wi47VKpQw?o%6zH5Fz
-zgswg4V&7BI-Vba`r8cEfM|6PPUvSb{;LB&F=AR0(JRW*d;DO*vNPp@+PyY${Z>iM$
-zA&_SS^S=P@MgF;w-T+=s`U&7u;J@DM^!I?568|drIM@>Dr-AE;zXs$3()qvM>h#|P
-z+ejY*4<h|N;7^EO4-TbLCtU;H1+D<OFlzoQz-z%n10TEx-4oveD*fYNJNOas654%z
-zq+cBA%fVLCPl@ywMtU81G3k3n`fu-cJ`aH_Nxv5q|4&8w$G}yjzYu&K>9wHrIt$zz
-zy*{zU@jIaO`i+S9gPgw4{}A{D<=zGU2e=YEg!D7O{lQm(CxM5898J!DYM3!feUl(p
-zVb9+IJ_N}_;C1Bx0z8-e`$5rt7Q6uL1x0@|DEbe8qJJ;AocwD*(Om$Z0XBo8KLZr~
-zB2e_N1(%S2EGW8zK%S`_kpe~kS2{`be*i`QD99f5h@XR^8v>Vt{h;VS1B(7%K+)d<
-zzLoqeD7s5P>2nz<eZDEM4wOC*iTLlofzLzvUx0UlcY)IH?cf&T{|qvR&p#LZJ@|(q
-zr~f4=`YqrS;O9Wm_keE#&j&^SA76L+aZvR4fa<S)Q1l-Lo4~h$qW=>_lIK^T=<nr!
-z>enxVqQ3=v8`uJh{)s!B{&yfr^S=eE|Gx@~{x<L&a1AK>{lRO&M;Q#lFM;jg=fHE(
-z+doG7`bb|3Y8*60`murgME)#rIr$F{I=^k8_}vX^oP0FW{~_?4$UhsDJuHm$!y^4q
-zP~+&2Uv+*D1l|sc@25c7MK;o}i1b!a<E$~#=LYWlikEu=d@K3C1l8{0NWT-baR@$-
-z^nF3u&D4O~%^w1XLD|h0B7Pls4fH31^`zhRWshGCD*n`$JpNTs@e?Edr!RW^YEb3t
-zBYy7}T&~*!*MVy96`=J0hDbjqaIeVU+3$M(1*mr28Tikj%6|ZqKG#J0lE8V9e>5n)
-zr6T>o&pV$xK$RZ=rJudQ1;l^L?*Y_;4}j9s-Jr(Toq_KIrKfjAd;|FJ(6@mMxs%QV
-z4<&vkDE@B%#s6UN--+)Bite$`I^6^)x?h8m^HZScJ_d>|2a4Zypy;jzFNUrG6y1rS
-z=#B<O_Z(1k&j4kg-?`oCMnKW^gQB|)6x~Nb>3=bZsn0(Q)V#WH;A5Zh_-_J#7`Qd?
-z%YnBAelYNcz((-7@O?QbeI5-;pU(^Y{r_=&j)O}7F?bww-vTAyy`c2>iAeuYq<;{U
-zzSc*2YouQUN<XJW`l}-S<)HNOj7Z-n(r1Bc|Ia_|?Yuwm&cM$E-W-?>ye4od_)6qF
-z9#s2Y0ID5_2R_p0?fW^X^e=!K7dL_b25th^fNux)qWr0##?#+E<#fLRMfWZ6a_}4A
-zQ{V?c(VYQ`-|?X6o&#PA9soWL{_>Mf*8_^~A3)Jv46Xy0f$}$w1;y{-PdMHEpy<8;
-zwt=4j<$r7hMfX<lC#1g_WGOi53{duUJSaP=0X1I#?Ka0@aE$oJBAx}+zwZVwLI0OV
-z`dN|wMzEFimq+^Hk^XG(V$z@ZxbyurC_cXgSCW2rq<<#TKMAfPeF1nPbo+x^H)eq^
-z!{2-2V~V6sx)WRk-RD59zn=zwM0-98O73jrzW~(yF!e8v4}*6S9|2i<=C1;O488@F
-zKF$OWfbS!{PXBrE+2nr|+yQoiqFVxLTrL7%555|dUCak%7d7A^#J}-TFaJ4E<!=I2
-z{(Mm7n?aRNgR+;`g0h$AfGYo;k9heZP~|@f-bMM#K$Tw(s{C6)+0hxG?C3?H%Kze4
-zFaK>&<p)5Oe<!H&Ye1D>1<Jn81!Z3gK$ZW?Ep8vb1!X@EfkTx487MwOk-rJNmi(oG
-zCj>q-@ZOufUk(B1K=*GSPNmL6&*Px_@8{q+{2l<WBmdjra`Nv4MRzN>80-Q?p9MvK
-z9Vq&1!6oEh28wP8_(re+6#a>y=#K|Q|5EVH<R1=-ZV&J@=sx@*x3>>~vbP&S+1pT0
-zD)n0OJ3!gf2_QemKL1xYrBbJYo4~W+(*~-(%Rtq)0#tqHgKs7O3{Z5x|7Yj(3-Dd!
-zk4Ah5ypwn@cn6q^{L{ce;;#gy_v66*;qy%JdeV1v^Bxb_14_PY!4_~e_-yb3@KJCX
-zsPe~xhY~*$l-)iP+zYw)1pk5fBoA}W27d##gAam||LdUa;sc=g{{txg>p=0p0u=uS
-zQ2b8-W!Lk-r@%R&`0ov#3I64uod08>`r`pm{67hb|387^{~l2MuLs3{DJcGnLD~ID
-z;N#$YQ2Y-A-vAyAO8)&o*~f4H(fQvAihmy{{<nbQe-kMFmxAK|HgFyIW>Dke^`Q74
-z2c8ce4T}Hs!R7G(>j#|wU7+UG+rgiJp8_>*dO`8u9Qmh!*OLEamyeG(frk-)5vcX)
-zIpE%iQXBZ|_xt+vLs04Wfm(mR3LXRA3i6BO^MCk0PrnyDn)qixrT;4D=|2FEApSK_
-z>Hq#-Pk#`U9eg?Bp8(Zw?~M3mp!D1j@#8`1WuJ)uIqU1rJ)r!O{=i!UZw$OD@Z!L;
-z15XV+A#iTspKj!ggL)qT&CdhX{yPJ21m)*l6Y&ec<B6Xd@sk3d5%|%JubY>E(*Mgr
-zt&@M~^!R5%>9Y%zepZ3vw**wZrv)A!c+`75zXnwPtiT_?+v693*HF)~pz8aN4zKU?
-zpyHQ->Zdn?s&6i+`VIj1hTmR+KfS@@KiKT~cYw<OQebD`Y*6+6gvmktKMJaS=SBQE
-zp!)yMOirrrJD}?OGAMqZ4ZJ?^RE%8w4g|&ThwpNJU7+GkpzP+?3=YwK22}c$pz1v?
-z;yX6EJzWoq?hT;mo&k#PyF?Vfk^jlgjsiuuo&PEQ3!vz(i1;y}>~Hv;PS**Ft{D{F
-zfe|0M+U>FnlwEELyfpBwfu{x@ANc&h0|KWudijR~zaMy4;O&7Q3Ve6qm4PjRO9EdL
-z_~O841@0C2*i~NNZvuZ9xHYgFd=>4z64bc37*zjV5LgdtTpShgeZaZI|N0K^_j|$T
-z6Tc(kH-K}9UmfwYz@6}aH8=$x3H|}x8=MW@jtxA^0e=EYuLEEm`Tqn;o*O{Pvnj9{
-zlst<f{vz;2#198$hYzo(JoqzE@!P<|zz;?IN>Jw^=YUU8&&l9_fG-3OA^iYwfAG&&
-zx;#GuUrqj3LCMnxN}hiSYy&0Fiip1i<Qkp%wV>>1Vx7+e_k)t>r*BWCUI5+&D*q->
-z<My4P@;lquw}Wdy<(~#>oE-xyf5BSbX8{ifmH!_sz8W_-gHIB_4pjO%;8Wl%@K50H
-zuJH7`z{iPS0zQ*+OCtS+pvJ*>E>EQn1iu7|PZrcZ;4D!6(-1g6@UXyr10TCA>@Dzz
-zfm;K=9M}QA7XIggTfjGg@|WHK%3pfoQcwQ_sPsobrGGfmKM?6RM*3?a{rE_KNu>X5
-zwexuZ6rXQ_;&TqD{(J+d{yZh{8KC-e&xn7#)%~F^@J@<e3ElywLCO7cFby6IN?(s$
-zl1jah^4|m%|1kKk;Dr%?A*gj>7O4IlTj~7o1;xJ)6#uJ0@m~R+2A%|p-*dquDfg#~
-zJ$@hfbJDXBe<LV+dNC;ek6!5fe+r8K*Fo{mg5tjcJQaKsDE{-o=TdIJi2rOwD)m#+
-zKME@ULQwX2A}IcUTkiaKfa3pMQ2gHq{s6olybF`K2HcOLtH6}XgW~s0@Q2{o+dO_V
-zD0@B-tR?*~7dYQvfZ}@#_yE`i-UZ(bSOeen;9p2z42thj;P=7bp6~HbgHI7Z3>4pe
-zLCO2bdCvF$fZrqj5m0<@0{4aQ_23^#e=B$`cpNwiK6b9hzY1zR%>%{vQ1DK0>Kx}g
-z2<}6BZU@Ep6N<yP3#=u5B`Cfpf%_8QBjWci^YQpfP<)RD#dja@4)DIW;&(!S2PnQ@
-z0{4dRN5K6^zY-MRGr;E%uZ{Q*-s0o=dQjteZQ%KVivwR7cywTG;8RPz+#`WM3EUd^
-zg}{#lW&<|{t_*y05<eTi0XZANtC4>psQu3?K#kLvg2#e~NB&>V@^SkJNP7?cb>LS(
-zjoVK}{6pY(Vevswd^UpbBzQTv5o`f94o?SP3LXv0p3i-=ms<*|+$%wqdkOds@cE#|
-z*I(Y`<-P~1+@G7h+#f-e`vItO+rahUouJ0eKZC08a!}>of2Nna5mdR$K$Tk#GIh^C
-z3)Fac8K`o9dZW`%f}(!_6#cy*Q}Fz+fwJ=tf}%eU{4VjgfTDjDDEebTO_4`}kAqJv
-zar!ObcZq);6#cEB=sy6i13N&i6D^?lzZew#3qaBD35x#DO@5BF13U=2`#{mJ0cCgR
-z1*QWR1im0}cHom|IQ{m(9|ztO*dKUn;EjP-1zsF@cHpUjCj`z7d{*F(-aviG|87w0
-z!&RW{tS#_lP<B=y@k2rRy-zN7x<3VeEAU$I8u(oZ$}dQR8kf%n<zN1l#Y1+u9h5zM
-z5fr}<fvWc(11|}DE+~FGPj^4!VNm?O0*YS`DEoXjD1K*x;`d5W{EiFUEAT5UF5-6!
-zD8J)+Q2fpU#cu&9yFD5dzllbt|1Ky$<jbJwJ3!H20?J-b0LAw(@JTQQitYgx8_|6U
-zl%2MNqFV+232XvIcLXT9ou{~cej60s7r|$e-UEtmH7L3>K-uN<LDB6C9!UJ(Uhi~U
-zLD78@ls(=E$`0Qdcxm9dfo}+WP2fuc4-4Es@Zm-9rM~+?RC>fWK+RuY1Aj>sp9lYy
-z{F@{H8t^LU)_|g04ZfIhvmBHioDuo20Bb3CNZ{WZeExq3yo2;%a0~cZ5R;hyZczGI
-z2Yv@!1!`S*6L=``Mo{zKd{Ff~0~GzEC%b&#2ERsp19$>>9!QrR@kSx^i@{&O?_}`j
-z<R2UP2Y?%(``hcB?l0g`wCDGr?C|HH^6vrFo_`5^A9yG6w}Wa=GpP2Q1Y&CQpAAaB
-zJwUbRaR%jG)c+8u_WTIcd^`lIo{xc|zZR5y=Ywj`-ry_19j{HLFo`36393Cm1%C#=
-z?}0xh|IWz28N3p@_kp6zfQQqbcYzuQmqq?rpxSeM;PXMXXBMdTjGyT3`3{IF&;KNN
-zE%=Y1+VgHu?Rh(>_N)Z8PAmac&&xs49|%gmM_=RZ=>}g;{8CW*S^>(hJr~scdpLLn
-zEDi=G|9&7}_nox!)jlqFfXcrcl>8qIybipR_{HEI;H$tNfX9M+LH}$}a_<RB?i~wV
-z?gzm&q;CN=?%xl7jre(><evxr5WM$QoDYE?1||0gK*@b0D7nu7FQcB<fs*^x;9sfd
-zIPfV*4v+jlzS8C18u$fJa(@t%+?Rmz56=Vlgx_hP<bDMxxeo`W@7dtx;2#z^|GPlR
-zt<UZy_cHMN;GY-_F9W{?O71O+Bkvuc<h}-6O+9Ns$-NqUjCz)Xk3(_>sQedz()VK+
-zqwpb6a&HAC_f6pUz$~~2^zQ&A_eG%OJ_9_I_{rd<;8CFX{~lwI+;@VKyAvD*UkJ|U
-zzbA06B=;Xc$^8f@xjzHGoq9e3O70JV&mjH%pyttQz_*kCW>E6Z4Lk&t+>h0}+}pr?
-zpuZEG1^p*M$^B2D<h}-!+-t#g;G014KN6JOJ1`2#JqXJGT?)RG_)9>^eH19U4+ACl
-z&*_Y{)bm|Xa(@#%fb_e-gNT17@~;PLDROq;B2aSA1*Pvlqa69qJ3#)9_%SHC?*S$E
-zXF$pQQLqiX4ix`0LCJkMD7hyPR{nJdcr5Wn;Qinqi7X;L14@o}fK0jbn<9P`_#EPg
-zMtti_JpM&+g!E5=lH>iL<X8h90v-*j{#vjB{{L}IDs?jWLvSAHcYxmjKMsoSD<pmk
-z{46*GzfXeVdp#(AOF+@R1{A*|K=FIx#hj~<elw_ct^n@`PmlO3z;@y<15ZYO-4Gu|
-z{3=lGeOcgMpxQb0Lf6Nmfj<RbPd%Rjm469n{T2D?zy+Y_?w#xTH-n;of8feUKQZFR
-z1s)yg`+@53$B*{*{s>e(cZ0Hre~I{eK+&xSrI)h;4+o`}zrDcq@*s$c=Kl;7pJ7nt
-zJ`1Yc8$rpJ0`CPMLn+etBcS^6o1o~{fa<5Wg3|x}b*a==@NQ83bSJ2CH-VzR5ER{+
-zpyYWusD7FaQq}zaBfX#AAGjuPKDdqij_0$Efi0lqUINNK7X=;<O3%MN!t?J8>;t8z
-z_kgPRQc(4t0n)Ye7lPjep9RX!4giOcdoS=VaQt~L|7SqS-vf%zHK6#M14{m5z-z&$
-z5K?yb36QRze>Et1SAmlE+`u=0l6U7}p8uo3y8}ND-buOlfvWHApz3=wD7hCz`kYAr
-z%X2;beo*b{1Mdc}2gPS4cnA0_@E-8?Io@9%2i4wNK(%)xsQx+y{2Evfs{Ut!s{aod
-zhuS*=s=d8|?+R=J)nCU&{18z37<e}O4loN!AJ+u7f|BoaQ1!e7R6TouYUjfkozh1@
-zrQZxH{Zdfvd>g2Cz8Mssg`nE`Y*6hy1iTOY{j*%&AApkYYZ1Q*lzdA;hT8no!K0ZE
-zUIj7*9r0q2DdLE(XS&>*0$&sO;=pGG&H~lXe|m=FuR!(lU0@pgKj7XBrB$Hxa8_V#
-z;8Q4H>5l~775Gt5?Rqb$cCL;1Vc@Tb9}KGhzC_{e#BT)^KMy2p{!0VDH{1L5y@87Z
-zp9B5|y2*omoPQ5gxvzsi0sBGO$;UvmlgM8H%1-`xkmGwm*~RhT7`RWwA3o62hrx$Q
-zza`@T06s$enFnwV4-V|lI*z{kK&_7-2UXuK;4qkt{8sQZ@|Opm9Jpma=idXKPX7A?
-z*9IO6(xpe#fa1R=DE?2@q*7l8cYw<OI(Q2CuLn`x{Nn;2-Phwk1=Y{r3A_VTKYtFq
-z2>J}D{$3BNzw1HqIU?|9`*{5Gfwu%^K=p5H#NP<2-xq)r;IqIj;A~KG{|)At-2C5w
-z%6|}4`MW`t`ylu`@cp3VY5{)@Ub2_>*V&-@Hw~(PUjvG7EvWwg<(_UA-v^ccRgfVy
-z|29zlzBceRfj{2E`?(!_n0$RpCwq7uD0?_8;!n=<et!^D{`bLl@H^mz=)W_?IWh4U
-zg4(wuHZR5TUJ3c<^5|Lk1-8g3@De?W2ERgl3c6O}!mkpa1TQ8o{1S0=r1x&l7k-)e
-zIJk<qaDey-xSY7~i^K=PCB%iFBi;wTnYi%t#CyQE5*PLpuLn;iF1(%i9FX>$FZ?X=
-zZt&n)sU`0RAB6RLB7Pl+j7zQt4<-M~h+hW&nRH~f{0qRp5vNXzp9$^_{o;r(0#*J*
-zQ2bv3s{H(jOP?x#WW=8Xsyuyd^bCj8x5-DHso#QX$HG~ugXe+#(%`{$;44A3X8~9X
-zz8b6nPXvL~tH3(OBRuxeOB%v)7z>93djs18TLK#b>jG1O<5Xbf1A7D816u+c0_y@(
-zf#ZxjD<9Y!*dEvt*brD3m<k+cyjl6c-oW<2mcWL<y1-Q6I0kIx1A7D812ry{-w;?A
-zm<k+cJX-m{-oW<2mcWL<y1-Q6IOEgG2lfWG2et$@1l9$n0>>G*Rz9#dP~%+bErAVz
-zb%CkCafqyZU~gc1U`t>_U|nD;a2&fLxX*B4Z(w_1OJGA_T_9lPKF*}YxJxDXx;%n^
-zp?Go+%Yw*H?oBy3@{@Z`u8nwdFUfCMBvih4wQAs<aR!9q+T7~z2?mzpEfMdF_;AGE
-z67l4oipJoV+>7upOzJA1++!ft2cyf;hm5_>A}l@@am@?LACLIHjJtzt>Qe9gmea3d
-z9X@hayS+4}l$-gdcs=7we@DHL_@3>lscjy=f^nn#cKGOT!O@;S8Tr>?*UBG<PJcH;
-zr+9OZ$G;NsmKS;a>o3vs^14)VZ^Nk(PwqK5{aDXW?v40P#FKl1UO|IZKDn3Rz3^3B
-z^N;?{d0FHi;PE#y;VHk@qp5E%@OW~s#_yB-kdL(+`Rh^*^n?EHMwdtKS(h4*_Fni>
-zFW(aR8(;46<Q}A7QAXwKBLCtjKN{sZo3Q-kUZ{VH{ISSCEcgv$XZkyWiC6L`_Y`eA
-zKI%WtvQs0V@{@aj?hE?l-kx<qKl&=C|9G^2a*@aX8v07^ad~_2OYY6ld58EX_uw2J
-z{E~ZZE;=UiKkxi%BA(oPu^{5fJtRM$=k&?FB2R`q$vr7AdZp*rZE=3rhkZ1B+~eB+
-zOP($*i2Qv!_$T++)C7HUZ^T;o$)0r>p}$l1m;SML`cZ!u9p(9bk^gz-NwfEldH(Hl
-zJ%3^3PwngZ{jc@>A4GmS@{g?X{JN7p|B1+77Wt<|epl%K<QF>suE@_ue#?iw`~}H)
-zi~LW=c&i)s{ClH)ok{uN*B<eo1i#wg_nY815&7~*)!xy&oL>iaB7JR4$_Kx;h#$S5
-z(>L7Y^mC(q<B{JM{Mv)xFN0re<lh?gYtyE`?a`j$VT-1oAM|5MeJ^r(dLu6XUGnxv
-zdoGUpry{>U>Tmo1ihJ4^Nsg;FV3G?Uafy`3!A|ZDjAKKDy60m*A{k%r?DyW@?rpDk
-z3`FkhndzNv?|j{K&+g3rK#mdt!64!wk?<!u#X^xtl+PbnQIHG>CjpBXA%dbH#Uhvh
-zLh=s~AQ>Uvt9mt6UHvgVyUVfi`R?`ms(SV6)vH(4y(DjLp7Vc#@ZW?$f&6zVK7E<u
-z;VT4xn(X;cU+3*PA%FQI=*6G^Cj5&e?`zcF7YKd_>H8wVA0YfI1RoRr8w8hsins56
-zf<O2pynWY8T;FdI{wm?WL-@-e7k^$O{3C=n$)2w+aQyS+-<Jsg`hC=YnD_YeH-x`T
-z_-iD;2lE_%E|GkL@Oy;6P5ytI@Yf0dIl{m43!MK2!tW6NK5E}}^8d@^54Q>b0m5J2
-z<NS}qJZ0mx!Qtu;bNCq=pA8zny99q9<{i?{(0D#e@Qc64`Tyg`Ilgy^!{2xlhd=sp
-z4*wz1UnY9o&s=%S-I?K^bNsW=uPbl9JM$#LFA;p3;5~w`6a0h6IDL=cHweE&Z~^s!
-zyhDQDMff#>zYhEu@1CJ}b@@7n#dqhvMtJd^xW6M<eAn#@1dH#aeT!i6-LnAnqkQol
-zGmPs9i|@9*RnUK7hW*?Ee?h$XZsOwv?{M_YZI~a3XNd(o+aXwdC(0yw;=4n)2o~Q_
-z>Is<EPY=cm<%#cP{VK>rSbX>DF&KY@#doZ}P54*IzrG6Ni+J&!uM?6dzT5RY%m>7a
-z@0>j+@Eafqem+d_<v-@|JE?u*yHU@Pe({~fUnBh82RQvt6MXegIQ%JspLq|5Yh-T@
-zLG6I>;=52!5iGug_+Re^f4T3OnadPEXF(3amk4eUTq5}J3dcW8@b?M6pWyEi{qGX|
-z)KyNuNbu(f-y#_6vsXahQw0AU(eDua^MwC(f<I6AQ-c5Wtt=0p5kFTTj=&I&f4=pj
-zQTVw>qwr^bA`1We)hIj*8(vl3BiEwvV-WvU{9TC0D*OP9w+a^^k5u7n5LZ?BWysf5
-z_=WdJ;s4b1y$l<1mHsz0`M<5nUw>Pa{v!~NRQ@{;M&Xere+cV{O8=rJ595T2|CzT(
-z;YT4qQ}LdLe-->+#Xqje`?hA^pVjnZJ@ZX7*T>`kmu!3`d>_*%;eXTcOB()uW^YOV
-zRn1<{YUA;X8hixvR_)JUX!d<W8=uc=_IORx_qyiKuWIAHqWR0IW}jb%`L4F-HLZO&
-zwE0ue#{cn0qWo`$c&Ey{^pjEe!S_btKf6B)Z$M>7<?m_p?H@IJJgDjWn5J)C)A!iB
-zqVoSr)At9OzB$+*tL?EhefV2LRs6B0?<1PN_iFLwA2fZwrte78SJURphc$Z?wf21F
-z;b{B*MYDIP_5bzvN9q4ZlV8%>^A62lexT|5yw?9)TL0g!_5Xuf|39SZ`;s>Qzo+^0
-zcbPspKc8pgA>mK5{!92htp5_;W$lsh%dGzr_LzMo{I{C?cWU~7Uz7ivn*4XO{z`d&
-zq{;s=HoqjkrpbRplmC(?e_NA}_j6Q#{g5^uc-dUVU%M8C|M_YZ#&c|ye(ixM{KosD
-z@MkpmSG4%C&*Gcx@7pw(*Lx-YUw;VYOZa2Z7!`hr^+)3Iev^vlbwi2&otbERzs%&p
-zL;86M{#N_@DAO;na93Z0|6W_~kG1&S*5rRmqkmXi|NdITA8PWpH2pKqLxEY=zV==)
-zdV^ZauWx!I+duV|8-;S&TyUzVDb#`A?6~2e@8zI2%Yo-Lbi!uW!LP<wy1mhi)ArhR
-z{2N+ktl+2OUHl+?X$d|#zi*bEU9Z>o0<ROY$J^CyAY~t=cidL1TVL!BXB?7u(>qCN
-za#9Cv|JWU*&?j{<oj%q{BIV6&dg0!v=Pi!5+)lIQHEz0XZ@p9Lc0z9$&N$SWmF?Zi
-zvU6kGT5=xZkJh*0d;H8ifd_w6A9ukP$VF^^CkWk6=)0i@66<|0^ibJKzuQ*SS+yYS
-zyY(z>&f>stg?`65Xmwp6<ZZ8cO}}H+>s}CuM_#89eJ~h*>wlU3et`Tg24?C_Hvq}x
-zN%jZIRLe>)%OI+B`(A{Q#Pz*{7W`%da8c*j>j(Hd4`4K$`r%O!9ytxSf8xUvZax?e
-zS3>O9C+yOrhk}LiG&GIMpnvSKX}3LR!}NmRjj+A2BWC6P7D!YX3Z*reK3>BbgoiLQ
-z{5qQ(m2Sg}kru6Gd%L(=+1f7O1P6%|l-9PaN{nsRUb712+1T^>^-kc`VeW4ix0cE=
-zG_n=vONr0RW+C=miYo!9$?)Xp_Mjc@v{|r6?Y0;8S)|&xDr&fZpav7lZw|VHU~v?B
-zfn`-&QGTh5HQn+ovw&t?p<i8*#lc&bhXoDbpyjOkMESzVIY{T3Tr_PCVlfIiNV!}b
-znjFL^H<Q#ZR3n2@z#zWU?}puaw<YYWQt&7bs*S~Yolee=40j({mayWgRT&Le?LDC<
-zFTds&XB8uieja`_?pgU|H@LH=%Q2CFIq8z$^nwtkQj*n(416vR88khCEMcq@bxkwE
-zmSxOs!Gh#Ay~eUJ?Py1b>HM<fkeyFf^6(|gRIM5dd^?6|ocQ4({E8m;z^fReI}OLd
-zKX!HV$>q(~%HGp6EvMBwZu8&m<FvbtLCa$aS;lg><Oe-BtRF^W>co}HZdSK7p4f^s
-zrcwLFBSQv?<i>f*bx0yZ$Ss=Dwo1JVw&y}32C3t|Y1IARp$EUnXc)#t=^~Q5YZ^O!
-z$R$G$66k$%uJ4{ibJnxURT6+RNlol<F?5?}ZBV46#w<^&R}5>}nB}?3im{I-qZND+
-z((@xs{l`xv(01z*fJM04_d}q|kuk4#wjhOqO@eE~mSD`&_gbDCj6uq^=$S|b^JU9Q
-zGpc^rfl#yO)>^U`D}4_DE#+e~%IWpHHNfTF%5a$-??gHf?Y=O9w_)cLb>Tvp0$)7w
-zb9&Y7dX!pAnAA~^MGec^(ztnMz%rRwBBRraCD@usDZ?C3!X`7w#AhO{i0wI=!KAWW
-zCYRKFl(KV_FQ&-0GqWUaTy?Z4ONu5*`WVDkbzIX^h~%1{K_pjnNfd9D#O2Gkc!s98
-zD{K89uIj5`j5~W;)U;`lxZ8@vwk=m<iEce&=tPN1_|_Q`BePBv8_*a*0lXL{DCJ!`
-zT6*IGY}HbTVo9DZ1%e3M(q;2YUrFRoN6SW<1}HL9)JTJgU92`jGFs^k5V1*rE;aL=
-zY@$H6m(?&L%ESbYV~UPJ4vZlBbJ+wQFE~C{pEC{kWr}X6v9`IiVivG)Cbq1m(d!@W
-zbbTl#^^LXJ8(yaw9vUUTbI@HkjH3+$a>0fN$%)s1+yoxA+8c)L2j%rnSS;*2_Rc6M
-zKLNn}{;KU;H*MeUjjS#Bces);)vHe~A3WjU)QGpygaispObLxFLd5_oA@OzwZY!jA
-z7NH~9zW<}<&7swxqA-H~ioPF1U&p<lw!h?6X2I|D2IH<Riy@fp4nlaoVvJN1JKVmj
-ztJ7*j54}gK$h+^MHt5+s(#B@lJ<@d!k1Hlmv2#c)T)0H@!X+9^qD&%WL|>>uL9Ze<
-zb-xr{nrR~LXA;Rk%VK>tEeqoq_%q39o@5ir>e@tExISbO$v*JKBAb|X0+V;MRKsl;
-z)<h?nFbAn@1T$nFj<Gp&5DTN`AeE-gL5y<Iz&S`|54o9BS?u0CJAi^c=zQJnxphAr
-z!HNR;t?z^@nwQG_rPS?t9j819pu}&MT%~{yaP0icT2^Wm4(@9rHSl4$X{{UU<I?Hw
-zX-n5!!UcJMj#g)LmaSKi3~WKW`@Y*M;Ua8V6BF=-v0~Wd^LkP<QZa%0pHl4Ig@RM8
-zEzx@Wj%6*Ea9u9pW}dRxTc=p6a;BB6*f)UM4%xTd!4nVN$`P9m<3_cXDaW*%cbsrj
-z9TcsPr`Da_U8irvd&;do%kws~+zY%xqq_?^T(=FjX9=2F<~hQ6X2LE<8hO>&XNG|P
-z8IIkAge=ky{j>wkZEb4JLsrqaVAQU4;f(hxo>hUst1{3g7qyh#3)Dl>xuxaFYC83Z
-zX<StlX877wS<as<ho4+c#geUB&V3f$rf9*`oY@T#ad3(j<Y$?z8bjrjs`IgAtCmLO
-zp?8WV#91E-?5e#NRCm~RB_3F<gc2AhwyQUjdEhZrHa$3HAN4{wR)s@V_M`#Z8|8_5
-zP^-o3$!C@~qS=k?7xT!Z1ISbkZp1t+<76S}3{aDgewKE;sgd#}8Z)V!a&wZ(r9Y=!
-zbk0=LNoSU<Q)=){IkVI{pW*7sXO>g(Ykr}e^-U#41da3XqjAs5FT25=HC;}u7)EE7
-zT6bgRtV}X!I@Oz0vV^hbXO^0-X+~JDU{<G=g>!?O=lrtdkeyFf^6(|gw0l^J5*hPo
-zw8CPneih9u1cP3$+YbYbNw&|)WUeALvUoUu;CI{>oG@7xV@cFO(|Nd)<zf<HP7+&2
-zB~62vM!AV`0CExYP>1n0LT(y(#e{q})?XIR(O+~Pc$Uc%YZmB{b41s}(=SCw)`S?Y
-za`vDw>jYt=<<}fP*tYli4Js?V0f%?tXwf&F#S{2%@gz)kkOkZ@usd*(QeF!6JS&#M
-zaa}Ir10cl9P`QXvGTvVt*~dyrF|8eSpk$(xsAI{=0+O>^Oogz^kF#-WIWAU09Wg}_
-zGY>mUjdVgSLZ<WLHOnw&fLy$$G3dcAE^fYD-1C0N=ZaPHL~7G1{r&$bjVFh$dtCuf
-zX$4+gr9)(Mt~b7zAgb?kZGLrT%`n!fTD<@)i-Us$uMhQU#p;f=jyq305?EWcn|uiD
-zUa;#sr~THlY2dIy2?63S_~~fafx1U>qvo4l$LoWCz~)!9%{cN#)TpR)b0L8_=eR)t
-zH#6Xd<%;XK;Lf4rln(rsS8DkkuYAyQn?X>%>A@|`?En&OydYe+;d)@F2`3x2wPp{3
-zSv=f;la33KX%*rk;|C$d$Ogewx@oM4;{jIjSTzhEMu8V80C*aJqU$!`pGWXdaWiEP
-zN;mMR)kZX2-dKeLoX9A_!Of2RgQK+#H7M&=+F%sHVE(~)9OxPcj7)}$7)9`rHC;3J
-z4{IY;Q)Fj!c2n?f8!fZ|6ivVyV2rpGZeg$GAGE~ID*WH};lL%)F>{pE6Zy=7NIc@<
-zQi;<kTE~m}nU5k88$~J0#R|nV>tZF2cZC-#mU6I*6*}H&UaVMbD_Heng|g)KVnr6_
-zv#usZ=5q;O^Vq~msrWyhFIy{Vlh0g0>Ee!i!m?l#;fC3ImQ1-ZNG@VVE_L8C$KP8i
-z9(4QhUEUCiz1D`Y5viu*Op{u8$~((*9Tvpd?aImJ>Zq7_9sK+vCtX2-%73sAYc;%!
-zLsoFm40dhkK$TmyhE_#BwVvLjBDda)@sR*59`LG;ymiWQ*U@k&uAIgg)q5-X8RhOz
-zxzUoJUAxLMC8OL3<!6))j@)jUBp{YluyqRFZc;WI$qSlU#C^&5;w3D7VsnyA&o)SS
-z5i<uRUD=FMVnI}1{NM%B@nscl*eAKD-P~G=vcwJ-;v`v{PI;KHs!QfGS*^tB6xo91
-z$g)C2y8KCm*=j^(Azgkd#bm+Y(fiqg6DhI<%l=YHPq*vX@+p*RDB`8okyRPi?Y-So
-zu>qc2Zh38Z?`bzYZ4C}8QJ>LD?kq}!04J=gl4I3>I694sO7z&sqLOei+giny<f61G
-z=WrLOD>kvXnG#waJ=IMxk`$#JRny6<a=9LJc&jOnR-GXptwwF6X|mck`Lc7CVX;<6
-zb=@(fzwxt_<t!5Jyw;dT^&L6@s3h>S(i=M-Nx<S%O~Z||Vt5%RE>}$QB-}VhP36Q{
-zEII9JISAc;NUup$?R~q61tqdqyrbnBzE8)=p-v8a>oKvO85Lnq51R1Ct~L!}`tk9w
-z?Skpl_`9Zjvwj0^{`cLMIX4Io=J6fIC!nmr?yAiBfn`_L*KK>ThebiC4stQ6Z+33i
-zp2l}Gk39$qsYFli02UT5QIunVC_yn`TnS^4y4Pb5WUY(iscy)C$mW_oiPt{Z<Amgw
-zJ;yASl3@l5ml6PY5c?-=%*3Oj1C`w|fd5SGJA0`Z-Y_1&d+NCD#%vZx^u^$*Smo=p
-zQ?W(gyq$_wyrnc1lXRM?*uagF=)tknGmP=DU?p7u?4M$g8t@8UzdLej-J#cTx;^*K
-qz=Nd94?=vk7cR4y__7IqGX~x-K?l!8E6!RniJ`UNV5azD!T$oP5bUJ@
+literal 116760
+zcmeFa3w&HvwLd=P8J-CW5_w2~qUn`tilE^FI+X^ekU+E)f`Cn-Eh+R7+eCtrYf2f-
+z;W!wsM52P`Driv9_{fh4My60`RMen|Q4s<HCImGikAOh`-|t#$pE)ygW)iOYzxQ)L
+z&4=>ckG0ocd+oLNUVEQ?&iwqPKfStpEH-E782*QUhvQ$o1plkRKm5HB{|1>^;IFNm
+zrDCy0mLXakJY)Q~7ZdTfY+1|7wiXR*{LGq$Gc$1)`pI(|BEMY_Ojpc_eRnqmc8PUp
+zj{bkyvI{nD3?(dEwrJs*3o{8$j`B=WEZhv0I+M9<*^1>Y%fs<(ej_GVy%nr_H75KT
+z&YBZDBvUL1EnBwn($%Y4j$77pS@X&bD_1RBmfhZp7nJlCE77rC^<RDVoLE?9$8g!Q
+z3pciGSiSBdOUUInV*IYM{3`S&_2>R}asfl|Tfc5&rbF`dH?4%#MxO>h>TeqIv0rol
+z^7&=Ax5xN7Ii|rcw-3TRO@GVQu3yo#d}9;rr?&R2x(vnVjbE81y;PJN?Qi`B7hkw+
+z_1fhZtz5ls)%x7_e%<()8OQdVlP8_4N@`?#*ETP|uw_~6x=UBDTLJkNWu(KHF@CXq
+zHMJc4sK2U)Ik9F<a;lKnvSllqmaW>beC<lj%<bR7-Bg~w{WQP4RQYL4##xgK6OX~a
+za{SX$`yg}>{>5Ufl<EEF&WWXv+0im5*0V&%X*~(>M|<YKH2yt=f8WNx*ZMaf1uF25
+z_0L};W8swbt?MwzR<B>jH2kZ?Kgu&-+I{Kz4VT2SXpkjzt{ukb<n<d?2IWKimn~Yp
+z0bP+{@eV7`dWz94m?a%`>f{ddTOtFqe#80;S8m*BLo}lO%T8Xu?!wj$8&<Bn@G{|3
+zkuBGf%Qm*GT#GdRMU>a(X?CO>?`>VZre*cIWvkY#U+zYB1fMf5*tl}TN30_v^Dka`
+zVaw`|tUTG|$k8A5pHXs-JURWDM;lS!qSYIlm$zJ~=IiqF_^iEP^*W3V=115K>sf+U
+ztwtA!L<RUPS&1H4-J<%>v8#r9G`JA|Q%+ymA{JV_y=coN3pZS_x@ALQ{VqP^wAHSA
+zf_~0vZ$MK>o(-2Zx2(_MQw7;__|&eyaQT{rtu0L}*R`y^&<#G&Ildt~Ucv?IjCJeR
+ztz6RD+`N8+$Vj@3o;Zi90wT(v%n7k&^#!ZfK*9CPFT8|3u{7a5G0r0A-(7kbW=O^p
+zo1ZSblhe_Hw0Bp+dr<QG=CtlKxz`}&Nq9BWlO+q%g0X~OGo9GHwTuknQhwoCOTeNE
+z8CA9Z(#l%@{ECEsetE6mT2|{FJ2&B-H@Bn~|3mD|x#bCO(cB8D0$i%jUHGB%?_Ra)
+zZKa1@NvV|I*$dBFxOCx}OA?!&9)tpGy;Rey+qc(x$wolJ`$@vPA%W0h@4;GcATDVG
+zWdcJb1PGGwl2sb4L@=ho3IxkF2r-h=uLx}!f>R7`s~MpPz+uC*;h<r^VV_~IVUJ;#
+zVW(k-VzO=fcK8!yoovnon=Dv*cDi(4vK}!&9Izn0(A$b|3}F-*g~%+8lr(~XUN$0i
+z5))OEetbIN$Kx8=oGwjl9-B(c+nVsk(6~V~uGagbW_nu^UMejuM;R|UtikA_q#YrF
+zS2L2$VKl>GY$gul%3;`XsP$9Scdc(dkkan4zLTD;^>1iI8*BY;_I$$cX16W&w$*w=
+z6_OybS86a{c3(PwvG+&NcYvtQd!^R9wHl#XuN`*WKA7-Y`)j?{zJzyvZ>@KJPp!AK
+ztJbUQto3R-5?(hu3~gs;K}YN;)ALYV>Kvf`B}A9?61pGM4HA-$1dE1HA+{yq4@g_2
+zP;*eIO$)KxQ791<g8gbzbtdVqgr8({5+1AT6sE_~2ok9wQj3hW-c4P|S-kmW44j*K
+z5G+lugR6u3ML>Uu64&}dWv%L#M)=wSKdBwoT`mHoDhR&T;|=smZy#W_lEi67#*jb2
+zQKf?TNol5^k~aDS)gtf^&2cd%8b8VYtM$6OB;kJaa)l(MdXP}({j%1(p+iDHL8ucU
+z&~iv%J}41LPLZRRnij_Kvh5=YKSdr1Uuv-`FfytaJbyc<vh5?VI@Sk5)&fFRV{$}d
+z1JZQAn=-;o*;q_FV_MBP0dr--do<x)R+8|Jhu%emREi{Z-mvNdvm;dBhr-qi{RoyO
+zOF5VMw`xryppcugG~L^l@P-;ej(IrY4Kzt;C@lgE3<I<Vf2f>Eez%bNDW$tNf?u*<
+z%61P1Wuf}ikfds-Dn~C_FLiY{2<Q~!b@ye8QL^elvN%Fc7D@F7n1s=i2<23XlmkqH
+zuu=o8EJUD51K}iXk~G~_peh?k3mciTw%3=S?>Z!5pfkj9T$4tXbPS-RYJ3A~9b$Q!
+z-mDU~1?|-FVWY(aNcMrxf*)~4AYU)prtBpK`(`Y)a`fDV=Pf*c;fEG3JO6G7*8`SV
+zG*iblOvPfi9|r6DK231p;1T%0FfQFIW2pVgxDvpXHd%#$Yd#ahVRXc3NZxSv|8E+h
+zeA1q5rA#~t!E)AfjF}3|x#J0ccPu1RiOtio((AW8zhw>`iq<{Np{StJNCXP+-o%zy
+zD-tg}oajl+*#@@+3(=2F19jsGdMP6bZ$EKJ(yQ>7<v++6^>>AqW2{SRnVaxsxwMH)
+zd6DgK!rMnEA&W@@*Jf4NA5r-s6{Ms5TgKnrxuvrXbHVtWmc1rpSJiAkdZ(6yCf@`3
+zrxJs(IR3pSaric=X7VjTyS}ek%tO63W7ed03vAvBC9pYp?GgP!56V&aQ4)VC{=FB=
+zc+K<=WqPZxLW5gNr6GPRGTX<+%xlKsY=L=~`Fr5^KiZzM#6Pir7Q$bo2U?A0SHlB^
+z7kYjrJkSbwpzuQ5F&UpYx7KT!TS8Y9vGeAZ(-nmh7R{~HKG?jq8m=fuZodA>-}$2n
+ztfW|f%3<ZT-raCS%Me=Z{S1z16Gp^h@7HiSWLoeBIQej>5+E4{bqR<OtU_=^Q!5c1
+z*C50(Z>**q!L+89Avnn3|CDzM2ec7p%P~^aQH5JNh2{Zdx!jf<L`+J}OLigXyg&7t
+zbOIGGPN%E_&MQV}s*}yn^FX^qKf<9$gK?;;7eVXMj2G-nvMk%Fz9<55lVv3k@2sEv
+zyqb{1>Kp=g3OtBm68P#G`_{qI-SAs!8d&Stsf)dP;C4<4u?RY?!90g`vG)WB>qSeL
+zV{E@7=2GjeO=ld|_C7eRy>MFLu$~WxbtxRyx(>J~ZRjHSkLs|d=&*tf`^~19p)wI`
+zK&11MamL_o3Q)(gE{a=ODQQt&tQ7Li^-VS?i^hOOm4xV-Rx69R%9QbG{gkrMdi^9D
+z4DyhpoAEQ7nCCk`Gw^P)U`oaQ04uh}sVs1YwB8D>w=&au^StSEHVX}<Y-1=jL~7v!
+zm#qUy=CXAnSem><9cOkXYG${?aVC{hYqR8-pC+yk)LPF(v7{0Sv9>Y^>6XsxrvK_#
+z$msUfx$%<KLf0J+Sd<4WDwM?(<@UO#Gg1unGshq511$E^Xl0KT^2NEX^R{5ls+8Ox
+zAykD>j$7-i_pA<{x^hmrB9X5W`9leE_6M|y$q|)hG$Tt&3C!0^b_%&j27g*qj_s$G
+z8YZYeUF+>pYb!!(K$xbwNmc7@Q8Cn|ZeSC1W7CLWX>v?l>ZI`X2V!Ihk6!8&4+?{{
+z5;1fdi=rF)q-u4FeO>rd87CJeF#fVuf#EZSAQcTjMocR7Q6Z|3EbMiJVqipIXjq|3
+zsu<`2xGo+MiMoXV(}vKgvremG)E6d>K9oc|@^#_xN?g9SaG*`tCOZJ?%(AUu#r}1q
+z<(fp>aY-ebR2E9=*Q721u^wfp8XcI@^l5;mSBa)&N9VX!Xi{aS*~xLVOuXh%X>oE)
+zTAGxYpORRf*UWJzUh@%8WP8o0Vl9!n#B1(XR(;AiEig0)aN;nG#dk0xPFD8+GEK1o
+z&YKP?YvO03)D(@KyMmN7+e@<96VFSY^gjArZNY3mMPmhd59p)=dJ&MGlOz}v6LR={
+z75vmcOo{Kz13o<;oFOhM51l72T#AFcX>=F#&q)}r3wA(=ZmZD_<at-k2;EswaFuYK
+zrYlC0vm-X`@N1K08q8ZU^<*m+Dl0X4H9cCerZeh1OxD@8SU1;-_gm|YOU?4XT7PX<
+zLL}0)6x;9C4y?Q*z)>flRO0LLkY9&vH;QFqH$Jz9#bOxUBTbT_EG@!`Cev-f_Twen
+zN34pJ>VTTz;YuRaI*4<C3IuPj5S4aUBW%P;A@OAmOZd>Y92#W{tLI2_$gm+(Qn+At
+z%+!|9+Imr2eTFV6$=DM!S88a?WC}wxj!AHNq)EOUnmG|PX`ne&rcH=jJB)-K)!vox
+zTiJ0?1NPC=3(u!Db)dOoe?pmMUklHKg{86Mfv_dy=jjoN85j(0jD>-tMDbf|`sG*^
+zX>v*n3xwYkJ`|OuL9MP|hE@TWR2<u&sIN6=de}=1YiXLVEM+*DMQ{wM+UC&ttZ!#a
+zk76v2&P2eD2i<rS9X(k3aZ{|@!*<VWM~X9CG3#k&rCQU_Sqz-SoNB#Ctsjz-?GG_a
+zJDP@SnM0yve;|`294kd2o>Nsxh%FY2^qzrfS4diWKg1X`J}D{TcMG|n)CSe{CcLG6
+z2|HnQE?;}El)=Iq2OnGX69|?jFP1g9Th%NFa5z<?_Asxh!Uw3M?e%yJF(3-@jo9@^
+z83c`kq}Kb34ZMJZ9J1-6E4;i^2RVD)odO*5OF6e-FKOEvu)r!VRQ>>|oYK-P;dg6}
+z9@l2(i@0Ql#S>xBgh9swGBFJ1+Bg*r=a)zf<_lTj(9S+m$^_Fdp;WU#cN>Z8&2x}m
+zOE4of(1dic0UocI$VthQVO}p(L!@$<+Mbl;%o#@e8$qL)!ni>h*GDmyJYn3Vj7jAb
+zMLuYP<oMkpxcZ8YK$8a87MIkaWjaGiQ<^j^U|NFm#3Fr}LaneqWZ`jM4{5P$)FKk|
+zQxZ$9oZ@MooaE8$FvV1XO3vo05pZ%a5reHO9CzV}npxB>^r6ZpH_bfXRq1@ELrur&
+zYnbms6P6Bf8?&4=O4z>HthbG#2o}*{9y!m*xYv2667;$AjAZ-j7>Ge|7H}HViD4j<
+zB!)#>(ev;I32~l@ONjG~_D=RZBPD!!27?i$V$U?sG=ZbdGtCH=CMU3TU<|UUDxZ52
+z&^;a)fXFvO8%PbbfiQ1GNuIQGRH%kX<(eBq7=|x7e)kv&{LuXF4{4H2XRZvzK^g5c
+z@sHFc7lmMVo?$P~t;GGCB4<4ClnV5ziLXyh!e-7^+e#{C&Vl4=O$&#NnKSP4B5Gz)
+zXXc^GCpSesf9Ba5*7FWd>$(i0SEc2i?ghOe8Pf%<9V_|>S9##DVVbC`ewVqK(tyn4
+zR~%E(Dga_C+hi@$(z1jx=-MZhV}nK&__9o6R;PT}YhxQdF6rW}N>g>YXV)r&tmU4`
+zi@h-vV`mg4U=QaJ$VpWha>9!|mLzzob;F6xFUCr*jKO<{(Th>x>=4yp`zy`YwFQRI
+zM3KFkw6Yf)ZblMUf<%fBMP;fLTUHYHC~v5ZCB>XO5VB0|9)BQ{BrJQR7P<$$65_D!
+zln{q)mxSQ@d96LhN2g=ITgZLg2H<#0S6qDn8Mp`PKf*oe10Nf<{RoyO--&y6XutM_
+z4Ao$`3{i997pNzI!}1m!MQcRYv&o$%6X@kJN{5+4gtW6RF$|21<A>Xi1WP56<0#Xk
+zO*G;NPaZI72Bhb3XfY=k%qP>r+6g9osnVjG*ci;jIHOjtf;NgFSt-e~WYgI~%xO$>
+z^sa+v-n{tiCK8UkRB@@yMhi--1`8^U6DfJ?Q6Mtv5i3nzAje*s<);!tk>c(j^l}yu
+z;)WGgTO_kopm=eR#(7`>??|5aBTHGNWXO5R1~$&N7T!>dwcr`Gw0NKdF>9mCDUbw_
+zDjcyjntPoxvP)$)PGK)c^2CVCg(`Cf2vH@;7oO<p(&YQO>;_WWL5WE@i1s-twNXPo
+z)Kbul-VlN16i7ld`a;A_6bxRSaO>7uQ{n1NkZ_Vokj|1|IK<R)3M4^-k$^ZQJ3eh&
+zYKUg&+NlQXI(r-?#Q*J7fx7@kX~*M9+8XC|iiH&vF!>)iccrxd5PxO7Z3~Y!a`?Xq
+zww7kK+qNJxH&<pyN`qle2(N+tBCH&v$QsxM0@w0R665JkAh;ei2H7m?4}>(JHx0IJ
+zK}L=Y6PGc`oq#8s!C9*75P32~wb<Zl1Ffi@rJWEAL&oZmjG63W9T{-T??^pj+O~!D
+zWh;8(J7`+e^Ga;6Fx&HqDjv!;yK_r-aV+QgrpTVZzc2e&`2(=RLCBqP0jkijdu6%d
+z4J|Iw;t6D3u(Ev?midDBtY~qrABGWzF^mYz%4g7$A!k9B`e`!oGJbaUQvVyBr$>cI
+z4z;m{ux&6cwPahtvX*+zEup2p8PTkzp7}65rt4DQhEPt!GD))3cac_Ztn^5TOMQog
+zxYUbDVUHAE>ZOF=E#x*>XI$!g!O@obJ_K>2M%zEdn$&TI-0TK--KQSrXIEM5AyKwp
+zV23w$bxXFknFr}}O0PUYjvBJd46p(ln1y|b1c<VI38p|TaRpjgo-e^XRdklqP~4ZW
+z0$lV;$U7x_fV_=}<jJB}CR9VAox)HflW@Khs=u5`IK>eNUq(Y4Dr6?;t|a)fI-v4O
+z<v}l}sFNZKh#nM)=!@xe>Jes2PM8w*V8;8gyHVAdd=HtY#D9}QS4m3emX1f~bjto!
+z?yK%=_f_Qq>f~NBrN&Tl5>vii{jrNv`iNDZy{iJVC&y`R%(#H`zwWX+G`$m`#b9=v
+za@|y}o{ruvojlj9(I_L%i1ZO?utH49>@9B6B-gM())uT`;au@>rDFBV!fRL`N=ehX
+zy1Ba3BDicW!I&dPF2s2cZkI743n5%Gq)+@BD{B7zm-cb)q>P>2g!%8?KM@}J^F5yt
+zz~IEF^u!xRRZeS~VdJM8y|mq$4IS%do&8|XrmT5<!5QC9Jh)UAp3}M5>&a?dLfJF1
+zYQsEPue&iIPDqH)ee1PY8WVSLp8)p)&<El};-R$?^n<{TNwY4T%7X%Zs4KGA2FR|c
+zrrP^!y+4Z>*jXrnKAq6TE0L<{t@WN10?wSJNuOHw+j}`%ux4Mjdu1X-dk1FdPHmJs
+zp^-<`m|T^@J?_Xq5Vq4?UwjvgwklyRC;E73ERoQ2g}_`Fq)YdTxbK8bS@!*{f4h@w
+zvg!NYgkI*dC^{6UkrB7J-1943POtS=j$j=fRa=?Di5>p6VwsX-@^QCI3bvPH!n@XI
+zDLjC!8BKUN@x`S>+*!vRp{)C6Lb}7Aci1ydi+9*FrWbqc<__j|%+K6T?3kaq@?_nz
+z-7!BWa`$_(gk!~VXL&pP4O)%A!`}$KAGgEb*x^6Br_=v8{SChODXWF<j&kmg!LJxY
+zu07xzL3CK6^J=iG5x;&Mn<@3+vEXze(gTDizjTy)SZsZ`nUi6Jsl_&Sywt&Ct2W)Z
+z#1X6ysB)%hz9U#OEDU5XhdO+zV-R(ul`&p~3X0<y3c|9BL(yQ9G3fSg*bTBSY{rng
+z)OKK@I(@s}{YQwdZZ@y$x&~-UYbV}|v8vg`CNh*GIbBn@<!kM8Wn|Zxb!97amraZM
+z;agj#6>JcF)T0-*?An%cv|C&5{gQw7{_UU2PbALTukElmEV4W7E#r^wu(uua+y9yQ
+z4YS)A9%6g#*C$f#(|9z33lesemcps-^S76T;-fk7;hcCnCq9@H@6U<%<-~i#alid~
+zuYFn$?T?=>O?E?$%po&g0>w*pvWnrXPFA2h(F~KEr*d+^32%mC(Z%A2`(0eY<@(K|
+zh<5186q?rbH7{_~96aKZMc1x#2PdDnapL1zvUeYyhlvm3^Gbf*_52V;jQ0U<%okEU
+z2nxwnJXc7~g^+gCTi2H*XNt>rw5TBm!j4e8)lC@S@@<Wf^3a8>=qB@5@r5qRjK^bz
+zWG-jZ`4VWdGD2p}rOeerSJ$5{b5&4(u6iqi9Ct0<9utKw_4#)GZWn-6&(Gk%mon2h
+z3+P#%^NGx{2$?mPGMA~$gV{2d1d`>-%!fVBB=o_Ld}n|U#DX%u-ICNd5=_tUHko-=
+zT|nkxK6eqBM-j@k4b7#@<3d-L&X##BkStf`ks!w(Vi=D%SOH`vCubWh58F`Ys^_bq
+zVCtD4aih#jFs7ou{<7;tgr)bApR}eQq1@JJE?bipI^0MLkI2*@Qll-sFUY}LY%J?{
+zvjVh+oLp;I9<5R4+L|Bm2{0}Ia$>-!g^!=?A(gw?B@w-;J$W8pHmgdc_8IO6E$4!g
+zZSe{zxGi4(5d^lydFKH9;w6U>Qzs3PG_}u@fFJVHc?$=R=l{P?vPJHdbUYH^J4tfm
+zSf-4(Kq#u1A7*>aDsH0qqT)7$a#gIkRB@-!)s1GWxC5!tDsB#P+@pQD8x9qdlT$Iv
+zqbbT<ReTN_%Pp6w7<$u71y03{ETWGN0~N3Q7RuzR_=-pse~_f9eKrGTR&j&Wg;{wk
+zcu~bAreb~vaMo5_C0sc7#SzL?vF1|6^+Jaa4rEzz0;$m|t`2hiA%<batN<z|C#PbT
+zhl-WCs`z=d0xF&|70awlDyQN~M)aOrpyHjr8KL5<BUSvut)k)zl$cq?6;fAC*W`*W
+z41oJk^oRWDq&zLwCU{#G<MRvhQHL>%91$8r=US<|L`P7}2GHdwUz^%zDcNuU-Og;&
+z-qs2Z8}84a=5DM5Ir_etyc3GA7kIDYNhM$@R&{*kz>inpzLR`<D(m|U!Y*$=N2|q4
+zuhJU3#UO7#dqc-EE!92+PlSt&N|WyijfFiG(C2zaxt<R_ow5u+aW1l1$W4hHDz3gc
+zR9t*>sHP!u4%N6Og=-wir%LBj_2pCb<WqIzQ#I#PHRMwza;bcM>0H0=gD1)C5??wY
+zbXWs_Z8Y!$KM5`J;ynm4c1Vw78rmgZl4p%(hWfUO8>V*8P)1zHiIi7oU4gQoFfPyw
+z+Z2;{Fq5(oD{q_&{lw4dMWtvhf%8{PGHT3KL{(t|X%nzJSn?^Wuw>K0^$dOEUkmFO
+zl%S^=3aey|WTU4>D%o)v$()N<OtL<dcarspNP5NEUB{NY*kQ?drNtHCtrI7iUUiW>
+zE-G1Pu4G@JN2EG)j$ARxMnaOMRkC4$@Mnv{lJOR)lPq+-Wq|3>8Ix49{#?oCWF&L$
+zS~1C{Lz0cFWK$~HsK&+sVabL=l8ppme}L(bj7ch)ln?jjMfAv2XU-`*2XiS3m9wgC
+z@~(@_vcA6dlF}FGHs4i3SBw1JM-<ef-Yj1Oi?tj|XGyCUPF{+Bb7FIKtY!WrJ`$su
+zjJ|X7-Kb7!^&15z%qhJ#-I=@-#c_>o@2ez)OIGER2QP5xPxa3+im}P3CcX?)j9!AT
+zEHa)s|G5s;U5C9mXxIP6nGfr^4-&Zo{Xy7Wl}<59^-O<1JZjL4*u>wlESRo$hg9^=
+z=sE<tuIW@oWB-@ZeW7Z(7i^*BHuB^r;x@~BJgQ>Jv(ED5q&K8u$;_x&Y4xpIQ}LI;
+zT2;(YM#YjYDwYsc{2oaE+Ev^fQnBt5<y8bY6!p>^c}*&;;!eonRNNJW;V2>uO)*JT
+zEagL{EGq7S22I5!rs8>7D$Y3Tsio<J>bHZeJ#2q)?v&Wvo{qH~1pAa!r`ftLQR}~n
+z<w_3K`i{vHAd(Wol`x%t9PCu53}tjG>7r8!QKyrTF-oU9O>QW#2Ca4Xv}*d`oAg6u
+zJYHDZ8`fYGYIPcH4#IfF5n+hSB++1dPp*Ydo=3N9>5YZlE-&nIJqW#GvqGOLvCX+$
+zd!Q^_uE)NT=W><qg^Q4zwsJMoSFH8>o$?KiocmV)$oI0O;aUEeyx&!U$qn<>AXVVW
+zCriAct%wx9-N$D@^oz0k66_<|Yh9QYn_#_~BZnUrY_L>Z?~c>Fw*~KWA;|r_(Q$fU
+z5OgxJZ<ANCEt7M!1-V2qC^stmD11t`s5u^5FPDR?qcr^hTy|1dK2@_Oh5fjud@8yC
+zIqVzqldAK1RpnDv<|kF;C&lu4(P7CEVk$prJU?kzlQM1e?UOZP4ZfIxd|j<|3?nJy
+z2tFe7MzSBp`EnEhla@%KkMVktqQlG>>emOc?@9>m2<JG4<RfXxMhWt5e4G!4K0_Ef
+zTfsRRh~zsF6QF5AB=ZTU;I*twy>eB9!&&x-?!$nt3QkKZU#JQ>h3sMxDcmU``3RVh
+zV$zXJe}J`ME)Y9(&kU2JjwN2!>P1*@b>586ki$o2W&$rN6YzqX#0IK0aady`08^QL
+zBePq{Q%V=y@H8e&b@U=Co(qx_9!Uc9n<8u`YNxWe*VXJsf_I-%G-w(HmUGo)9HEI{
+zz##k-=YYV$j_h%<VeRn>5Sut^LU?J3pEB{g^{YDUaruCX_Bg*lgPyS-A45zFhq?o&
+zV@M8qd<qftIL8PI20fmsS2}H4`SN*jjBN_4C<){XRUtiIPC6-ECZWt*Yg}f8$pCA~
+z>+v#(B2uHrD?y+=en+YFI5W}X{C*5nuU_83Fk|*c9X^oZ%A<=0rJimjPbpo{<Hm%k
+zuE#}G`_7RsP1XKnGr^9^Lba-J(PPl#)HRHR0*88h44>b(9(Nm;$R3v&P<y;TBaZ9w
+zM&aEpzz;ztn<RlBLQJ+v(Dit8P&m{bFkK`EJ>G!`dYm(CxW_Z~>M&KltfEVUW>h_h
+z<r$UqcpvGcaIb{qcD?qbf2(9-)?!ZX7*Dt!Lyr%FKzsbB`$&&76P;Vnf_kuo)wDq>
+z&@HTf65I8l^|+F!lrHFTW5QHNFQUTL6ZX<n?eQK-7^1RJttwoV?Z$Ys78xY)d|b!)
+zpZ5-W9NQdmxFdVK7tNvvg{H;9!NhSrKJ|B2+btkHJ}n8-<0VqB>+x7nIIG7=6!dr*
+zBIxm+oF32AE1g!ZeA(j_8nhm-L`>xiRUtiIO*$!DB_TNy7E+9H$;7ACn3LP%9ibji
+zfIxfv5uBJ|lra-(8IvZ<X)StuoH4wND0x|5#;_h&@|4mAJ#I{x>Uvy6#oR%;@ZKvx
+zdz{Tg?Nk<eTos<A9)mF+ldL2K4)yrUdj>u3HrkOrJ_gaP$44^axE}A2)^-a>k9SIf
+z^mva1U5|GKg+twePv9Xr=<!}e(Bq@jR%lkw)GM9Vr+nGt{Tj3$A4Dv=$A?KLh0_v}
+zSIJ$EOD0|dWKM36ry+{cc{h!MKzsbJdq|Hnlby?gI6;uuK$}#ck4NA?yYiV?UCC2Q
+z7xcI>VXEtK5fwXTVJ}V99v_s1Au0>ic4~GH!Hw}QO&irTH^%pb)HbWT1B^$o$G}FX
+zpVR*~d3y}598&Z}vXt)eb?et8%=9zk`ZN-|>k4}3a)2S(#z{YZ6xv-&W@dM-wEDQq
+zc7hjyyY2)TlAYi@9$-ki>;xr*ogjqklhrEO0LqD)lIVTmt`mRGc%{&QoYv~ZHU3hd
+zV`s)=NW#P=AZ8qAYt=bPNYI&aJ!0BHS!PV4z>KRAff;ib6E@>ay<&+K%9mzbsX>@=
+za*C3O<6DKqyqY+F@!D}YOW;ejsKU%eOJaf$Ufsf7_{5_4V96H_ys9>hD!12{86Szl
+zu9QLMsv7(XDKS(c!0$zrNeDk*pr2Rw2B!0^U8wP1l8^@0uBpPnRjYDqwJM!jJJo=}
+zL!CmZxIi)??9^*b)=Ok7Pc<^e5r>UTl*<9Ec&_dk={I4Eujx>8$4OC2Kgz1MJ}RBy
+zepf(FlQzqP0=0F?4s5-e-Av=w!#c^#*t*i{fuGs>ufbhyouQ1aOS;&)gz|0u98A<v
+zXCS$@&K<W+*^Q{dH0*4>fsMmQcL-wZgOVUqc3OhY)`t<(!dbRXqQKVs5usZ~C4{Ez
+zOub^RJ<6B1-m5{{dJ}_UqkRbF)#PlwOUUF!JZp-U#7q3bt6R7WpSCDIzSil{)|){P
+zvUNsbRmvc2>tqD-4guPFr-W$ha$Mnszu@Eib)oiCN*dU@rV0ZSe@NxlYE?S5b*cfj
+z-Y+mPD3DA`&1UPv5{a_)qv5IB>|SCX+(4GCN1f-@3%lI&JV|x-UDp{p&y$?Yd7cvD
+z5Y{aF46swnW+-FXk}j4lp?u5!I3$g>?2u1_6TCq)>(LjTy#yx;BS_-@k|1VX#kT1b
+zUM)dq)^Wu0j14bFA~`VYN<{GeN#3UkHkX-7#iq-YDQ&u3gS6=}sh<ZI6-dmh#@TcU
+zOL#TzqOTUi(=K7uEv&_$r-FuN4MC|;40;>{A%kWV2CWRj22DmV-f00EbW9|GL1(@2
+z?@U?f@Ni3r0#nvhDe6pFCDsakQG}W@TMtvF9wCqRg{as$Dap7BkUwqfBkdQjE_Ak<
+z_elF~u%5j0)tgZs=c`wcP4pve+4-Q$8nAxI(!oIHGb6mSpZhQ8ed~Ye`>MPK^RIj#
+zb_f60_P#LgXY%F;h7MN%Z>W|_Uj9u@-dErRtOF#~K9Up9y=mEzogZ}{LDusuuI`FL
+zs3LjeAcq$p{A4A;fkKimvg1l8UNxA?dYljcNtZWy=ETWXn;{ckB^#`7UsP!j6CP(e
+zdO%7Snxtf>T@mC2Z=5p;^RzOPea80sO4KWEl(%)_F7er@+~Bm44}de0H6SZTvJ&Ab
+z?}eDtZIYEEBU-XpkP}G8BuJ*r?2~<zj7$=ctTH2+I~B{8tPzAcl8tjys5+a{ph=c-
+zm2-8*4Y$f1NX8^crp)X!7nF=lDB0EW&|GxpPH(a$Ys!~QwyP@HNS0*WeMjpo*bHN0
+zkBhSGBP-$WwrX#Z2_<_L^7tu{%$+i1OV*q(S)Yo-g_YZ9sLymZSWvRwASaNFNzj=x
+z6Gkc-nNYG1W+ZdF;YG4z)X%eRtKkDum>r%Prf_drHwHaY7%matSK8d(srvy*bsuTg
+zhtHY)fMjO&14^qe>X_Gb9hj=u#8BobsHBV6Bq2Tp{Td7}+E3aP9wRj!IcC^KxwW%9
+zG-xXAL@c_qn}eJ{rA&fKm6?1vNL5NEP$^gPiJip_l@8w>BJs)nyR+1qHnrj|4<5?e
+z*@7^@?PYj)P;0+FR&J8&>}z?rHcln#V`a(7xS>i|)9c*Oi%?J%%1}n3lCFmdq@Y62
+zD(HA-E3_|1p$U;qW}JErnnD{8i&khn$O#n6Bq&sw$yGyDD495geh2!p5maIdJt0e>
+z<EGGYD0I{mS}hE4>lD9U1ci>OLM7GNDZfJ*C{%JX3ROZp;x`L@7ucyn8OkVB(nX;X
+zqC$6tG_$c#`L4VwN)I$Bv07+_22G)rh(#;3EXWBI$|NYXTtFV(s6xra6sq3k7p|PO
+zceyIcyF3l$;a$!pn<(!R{-j=)1Ofh{zNZTREAF*Fo9jaO?ayXjwrJhgR8%uQv5AII
+z_pGgo;hc*sM^~kAPMziKB9;@*d57ibtQ^jHqvhzV*m_)4Z|*c15{x1ywxuzVL&p%5
+zA9JUmI{s(D;A=Syt}_NDz~hHo-ySW&UV&;RSBI+Cn;CapQK)~jZf1NYs&Ch$Ec!M<
+z7TJ9(7h%V7w>7RmKvnenGCTU0-AaS_7xeG%I%d_s>8SqwG|HlXo5<oH>EBIHcVS#%
+zKhTBQ#T&YwbIi>9f!F$`R_^|wjSf@xW<Y$X?4;^^D*Eg>1?hz6B+-A)NuooXlSEfJ
+zCuthZ&q<ofPa4lp8p}@_%}*N1Pa4ioO6MmH<|p;%C-vng_2wq&M?-z-=-kcI>6kR(
+zkkb;(ZOu3gS`Nw8%=Nnk<cO+C66EByS%UO*?bCzYShXQhXSvWO!TmTEjx%2bO(P3>
+z_Bu|y4CNC@;TK2ccYp4LV73?4ALD`mQY}_pZ1$w^&w0`*A^oVnZ0Z`25K%XoC*<U*
+z9wAmEKUC|uhQBWDeyG-cwoqGZKka2VPS`@op|$gAbSDxfMsaJxPjNs6d%$c34<jo=
+z!Q*@|gng1cAL5OJa$zqDu8^Q8cuMlA;7TM$G*W2UNGiCD1?`tha2g1%(<m<rW<^;F
+z7FzQ^M8R4W6<j53<mD>eHJ3!!P3EfL7zjkc44_%sn5^$glLvZ0tF;UK`b}i_D3C3L
+zg0=QQ!I#Pf4^gn&%4REg48<Z8+(Y5;IZ%<23LcgOQSgWaMZvw2PX&)66ro_DbqY=k
+zwf%aAD7X(PqF`2(rC_1O?}SJZTCi3{1&>KuYJ?3I3m!y5MBQYr3hqZp6wCmcrHzpb
+zSz6AQZ#hH3TCH6Y*B^y+3T6u-ht?h__zk!PViv5vS7|a^!PC(SPN*aTGDWmWf+)B{
+zf}-Gh2Bndm2t_nfXq|$ag<2odsRcJ6MHI}6vJ@<|*yBkNDp;$cg1aP5zfCE1Hz6US
+zZZcN|HzFhoW&jG-#te{=Q!sfz!CGzjr_$UxvHq^4{T#GhSm}i7CI+x_n}XfJLbifs
+zAqx($f;o6vE<?z##pz>$N)bR5TqQwKaEw7|WHmw&jTBm^;0mF(uOEp8mmozH%=)qv
+zEVMZPk|I>FRz(HJB~5StOWoy2h^U*)Rl#KliGmq`g0(U76VFb;<N*b1wF63^Kf32E
+zm@R}HT6<u@XUhE$nIhcz$XS>xc(I%#Y@0lf<Klv%4Uhs)P!j~*(ND=`6TM|`7uYw;
+z%h7sbBH6~tex-!FPkn+anT#Gkxe(PUt)9Z!e)KQkj{RuqRY``hA3b>Ddys?|1|;i`
+zeB(hvzsH4vZSo;p6Saae;xP^7bMNg*L@y);@9mxX5xRC`*>9gdE$(FQ+o$g#Df~%*
+z_>)E7J{=Xs=rZ@$l0tjsY*Q9zF5i?p$;$5*khx+|62z3#5)@PJk{US~4<i&|PD1NU
+zxnHQ|%@l0Mx!Uz0MNF9$Wtp<j;#b(E2u)e5qA8C^n*NZKm~tNyBI+h{HRWD}#FQC8
+zv$Qec-&;(P2TWP39Z-U#N^kB2TL?L{_P~@q>_lM&JhC(^U=U5~Ai1*wiRjJ5zzP<%
+zL|DNKkyda#NmKh=0GQbd+E}qUJCky(ECWq<%%#Z_!UL_QSB0+WO{A9M)KOk1Y8D1~
+z*Me^~Y;Nz;VI`@-uxex@Gs8+UGs8-0^?L+1tk#364l9PThLvQ=u#%7tE1oKwLK#GZ
+z8Yz}js6_C1ja=PJ-GAE<q0m<&6*^AR)IR%doQ*<RiBst3u^>bp8SFZ78l<I}ii;3F
+zBn_5_67s<_0AWW5r&<zZOvNQAW2#K@Ii?Z_McB2_x-nHH)bc8ljj3{^$e3b9Sz}6Q
+zu}6?198+2q$5g$f*{u}uUXc({H<|00sz6A_6a#3MHfDf~v>aaZl$;^0c0dV|D!q*<
+zwh(e??ZKEjj$7Ytq4%(G#hQe!^CbdTna@^T=Re;Z(fND8*7M)!pCoB&pZz~Po6ct?
+zuJdmIJM#-luq5#O`OR6QDeAa%N*LrGmrAM|P52xL$Bv#qOAe#@LY@-hH6yn?vC+Cb
+zAtdAIn{IhxmM%{W$vCR%w*lUdMvNgjP@+VzFp<<L@!RVolvoz2#IKSxwa?E1GfzpZ
+z#3``>12TF9)ntvJ;fO6lC;4Di5_TLxgOZ@Dk_2^Cl6+Z}5Q?zkv=G=HtY0GSX}2UH
+zs!I|AS;I#Nv3Ll*EJ+fQB}qbcgX-4xAr?_<j}Y;uP%lEd9x=&S>Mc<>cF2S4k-&hq
+zGpTaB^+>XkBZQ3a`Xari?5|;Tkiv}}iC`r{TF~vcuZ`&TgCo2BTO>{GGYXiw+gXWq
+zyPk}1VzJqMO5kv*KIgr*1t^cxwLM+!`JWQ7&sN}T0!6<MfamRHw6_17&)ZwyiaFKX
+zka}2JXe8MUGre^)aVREQd;Wt_$@B0~NjlyIOa1}fV<i#FDM{y`V9A>^C3W{2u9HiB
+z!IJAUCGE*VNZRINC6CLLbo-4bI8N+&RrK>%dd7GkHRpM(q`K!^xzA%IGc$K9ZPxSH
+zcY&!r?LsK@w2SHbw2L7=?Yg4CM7h)CQ9<`+`59S#i%Mb>CxM0al5_ta$!d4h1Jg<f
+zfOccS2tP2DRM+mT2d0w4M(caHN>~#-FntT#Bd?D$lxeY~ON%AM7I$GtMlB6lEe<^`
+zwMTRIi>lIMdSN+FG#|=panurBt}V`aqA96Ci^ESeB`4EjCCoh0JTPc6Lzxy!y0lnA
+zZ1EQ%+l(y^J<iN;u|ATjY$`OdW<8SPCOhvk+d~)0q&fhQDLpf(+RMV6DRbsiJbx;~
+z^@Xy8x652x>9&^TzwgUOB(-`_ho3u?Ge&pjX$PrtAm$CtrPnO{^jBH7>Cc4c{D?Ex
+zH7Jbh+puBUFzY>Gdq0>H3Ac+lg1{TTJarUNYw-h)dTuc$FfcA4XR)=okpnuvn*uHN
+z?yB{=rzBUN#!qW7ZY@riCN_^vCFX6#aO5%SV(&4~^Vqc3TRM)<&*J_gY^oKGN*#Xq
+zqXxeeNe`i>U(3rGt{k%RyLJ5i;}ky7n)MsVN|<#9D@nd8443;+8D6N?6IgymXK7Dx
+z=ZcR?c|DROxGV`UcKSsecW#@i79M(Budk?>eDcu}7j7a|YA6w~(ev5NWDREw>T%@h
+zAdC-pvnZS#BtgH-;qU$UdcK>ICkYAty&o;D-(hiK)`%Z8YQj*Gq=`LcGG_+`2l%sX
+zYBPDk`4N`#R;`n_2T3m6E7|hY!X@=X=x|eegXU%bW}h{c*=TBC&{UR3Bc%T9rZP!u
+zN$GQva8nPH`CFQbM$3j{woUD0BkYn>cCU^EHNyMXrVfUZdLU}Jshx;BHFO2xpjVlV
+zrZPu+mF3Y?sXx1^Oma<Sjaj{VtW4a}RClQTt63Uwl}z7y$uGO94bEtw2|2L{|7azS
+zXdr61sm+MHrnUv)psCD8Q<<YpWqCA0>d$T}lU!595exO|WG!A~A7Rm`!D*vqU`hz|
+zaS(oU#$ADschm7sXcMw0&V<e!uathWIi<e}48IlxDgo9Et*k=yG>}lvvQF!}@kW<o
+zj{Y!FJwmnoh4ZX;)}X6<6RFJ4)<TX37Li{SGRI<?9gA<#XeBZ08pb^RMOFK?+?1SX
+zI|-Fs-cxr;qrzdfZ>DSWUD-+sq1tsxC7P6@Rva&*8u@|bMv*Z|#bR!fm@hB?XW!ah
+zRq*@PN1L*=Mrdkwzfk1(RbaKiXXbXt0x`wiTIuy$p5HPDvFX-5u{2KOW=I8pio6v>
+zpz!WWY<a07@xpHtJ&8H@@`ta|ck&|@wZSjB<D+#T;^FOn<T81C_V?9T-&DeXUpX^*
+zJIasO9~F!36hqxoBc#w8+ow&5b*PrVMu7*jO9A^S0q-A)KfveKvJOLx?TI7bSCaTX
+zLj2o~pHbzn>=ynt$eiDURDPlFzqL=_UI|7fi2D`E(!&-N_+A`D@y|lj&Mr^*r=Y3t
+ztKjPz+f|1A@5iYwPN5FGnwJAL>_%0ef45)vvgq88c|XFZW;Z=XMJK%b6Pve`B{n~^
+zJ#qN`i8;gKB4y<HSKqHME7pGpz)qk6cJL|Fd}%_Otc|EvB}z)^VTHf{@(<cGRLxyl
+zjJ8Y@YyIEHuekrZ1cwBpoMAnADg_62O6Rt50sDU1Ko4Tx(91HtkfE-rIiBk*9alKE
+zeWJ5%HN8Z2WaYvw9NA9PVV|^-E`%f7CDqDjW-#B0<Dx%;iFJz7`rQ;v9oasi6-TyT
+zgK<bZjG!4r*q>#x`m-6|AnTq;h9F&(L!I}_TJMGt(7-7ki>PTdsA)`zM&+l>+lS#f
+zr{Ou{7ZPgv;W_ugh<dfWc#ot;b{BnKc+OqXp7S`V`~m7h%KF+<I8c_ANiXE{YhL(%
+zbl^EZ4ArAh2}%4RQfj?;XGxOmyJYr*c){zxCY-pJ7QWl1bvOaQP$YNX>Xmyqwf+qx
+zpvwqAcVPueBLwH73^mrObAd^*BH<k}x7IsvZb_|o=3INN7Sl95a}t`E_BCL4fu20U
+zke!YnE1ft*{Ab!l;6Kl{!4+)2zMviUo0`BYx53RpT5f|$jRun-s==&dRt+ZMtQ!1Q
+z@uH={&WoOHgT=MOgBny7Zg4};I4|ho#vm=X!K6lmNf6aw)-kIFlW<lI{&(@ErNPdZ
+z{@pB1x*2t#hud-*oCq41X>fgzmfK)bqroJIYB1}VRf9=5n+A(V-HF;F2d#}a+mYBX
+z2zk`i6w|vY4w&FB1mEcx6khgzhy8-H6oj{}^|&`Tqx|DWCpNfNfs^{j&u9<y32XZ)
+zY2gXqtAv9J8S+ek#WCBL3!#1eUVphZ^8Mg0p|cBIsS3vIKnzojF=1+sB2|t|tufZB
+zbDpCdQwee?<+_)6%v2l%r{XZZNDRkijHOnNpS$opeqhdioaq1B?|Z^Eh{IHH^r8bs
+zy2)$55exV<`Z-qM=Za=JxC++)tZnQTY@PIs5sNooSknFpt;WIYaM?Q$mebSNV&$sX
+z@p<)e#^a`-aDDN}a)}ws)kl_Vn6Vs(MP?4hr^cj&{6dj_wt{n(h|J|&-s`G~_!%Ys
+zsso-3)^+7-(XY8tb9#_F%}tnnj!p^bbMPaNbt7;UM&WRbL^vFN`;CDU@f98KY*_dy
+zA{~|19vp{>xWX0AhyJnvoE*GvooS?cDK;Ega6m?>xCc~+<>;?(<Esm*5xOm|3@RE>
+zz0`EbyVK^n$Qy_g^XUoH-59t5CNleQ79vl}@UQF75qS#9u6l~hI5(pD`&Le5u>!oE
+zq#~1*E0Zs>R-__-lxsOeb_=<QTs=FH$5rIP9FaNEx#}shOnf3TjogXMF#3&EfrhMH
+znS7D8A{BWXS7V6mmSPjRa&{t*s>taakw-$+Q)I?f%N);6WEtD;eb@oADlD>Aq$2Nc
+zB69=BTMoTy%jL5Zd00gr&Jj5ss-7Y<t|C{2L}nOTW>ugetHL5{MIy33Uq1YdLXSc6
+z-s^u17L@lW<o?sK{HON$Iw0p!2#-4C7aqze7+=3C{(O1!)6Lkw40`QbF;z_C-39i(
+zwnRTWUlNLsXTRIfKGSFCb6@+;e(l3=9rW9`X1_$xibsZcn#V8ehNpVJ9ck`au=Kfn
+z8J3T8U4fB;1)fF={JO0+6oUeo8$&1S;TrC+0y+?a0%HXWTxA8+3|o(|HsEE%=o<7{
+z*dcX=j3Db-*o#pHFj6Z9a5Ess0MPlHw>G2O<-AUMGV6I4Jc3H`2=s?-vVO$g8#<9z
+z^N;`D06Q8V%nS@EonttCIq|OSxZD!UNos^-SxNZ*n~c37PEZ(voJ0H+8{oO~Kl#D*
+zQPF{~O@kLmYELJ0ni)3nwiLFmfJd!7^`qDNOx1nZ$4k{qQM>3H>RJ7;mJS+xdrGLb
+zV5ckep-)av%#jTqMYN@?aFuPsCDo)=HWR|e<jG{>sw@*KRw?x1DzD~f5v@4;Zz#~p
+zwK$=`&q;awoOo8_O2FOK#4x>>6n|bZ^!o#E$y8&breHNVAE|?XQq!ALO)OLm!&(iN
+ztWY&+4m53zjkTqPT9ZaK{itRzry4HOt~Cs6HT~ggba=Kep4IR?5be#IpBJDk@Bfem
+z?&ybpN`!N>d^RbekH}S&O<Or8xev)XUzY69_{HeuRfz2SK<3NCDW5`JeCn)R|2b!S
+zVAo@8y9_%GI}~LXF2O9rp<CZe4eJ}teHx5oC)OYIL1=TJ2S0i-Z7_;}y9e^r^%zI%
+zd9}$ptF?)rA<ng&bE-nJYEwS~F19@G$s=&JjZ<uT*?F~1X@jQGATcDZEn~)6wW&q3
+zw#;w}5xClPB;(mdUTx}V$f;-rM~Bu{84Q{bGhcouO*L5+Mc`_ymSI+tv#^CekD>~%
+z*ZSDd1`V<k8>2Y8-*#g|o1zF<b+VaUyqZxDn-i~fIM|AO2Sx<{TPv~OkFy`X6QMxN
+z9a9-tbVB(&g&3f4;Y~o+e#=)T+`ZU^J3WckUq_Hr3`z+<PTMGNv8pM!U)+-lOeo!%
+zbcsdCZ+A_s#^RiHF|9QDEp3E$lKF>2qG|o`3>pEiQX0|b8d09xh$@jveuvIEnbHWB
+zfNDDg>N=$bO6xpPX1Nwvt>lgtP$F%C7S|ShP1Yp&Rt4H3UbMA9jk;UST#jv_?l^gQ
+zt-aQQCf5Q|WpxA19Q0)Z%0ybg5@<oQKwXctKxwTexqRSSpv84>rk{Gz7HDy8!4tCf
+zWPSL>S}?*&@JgG&(71qW0cL#Zg9fCEA(1Mp1!GFD#gvJ(fF;m^Mgi=EVTJCfTx%L&
+zmTQ64syXt>Rc(P5*A^U^X@T3x+@e<0Co<?G9K3-iG1r2$wIG31X+bXnSuGe;dM#$p
+zfjAUc0xhT)s2h|PD6Q2L{t+-&E4iaACDImXacP0>YEFA^p%pW4SM%PeRrBu)Wz~ED
+zkh5wAyP6&mS$=~n@_P~smtuu1he^Z5YoO_QGJd_G6^zWVKq6nRZOw3N3uJxh9j>#z
+zhS>{b-rQX+s*|}puE7FlW708s#YNG&tTkA1&c6t%k!4N&OxCHtDT=^N{mnuawXC%<
+zM{DcQU;$w}nVTnUSEjghmabF1NR1Gd$to<(Dv!Vk+b?8MtKuMYRM@lz3kW;R+&p1N
+zGQ~%&I5azkV4f^^yOk939@lsjffII0$Z{4{OdMWnnmH<LjOGZ{<W(c<qs)hS!s=Wo
+zR-`k!yhFfQJ&%j+jYQbWC;}&}tQ}a1^Hrm3huUmWVH3;^3#)4~=3NdzUq_y_ze)Mf
+zk7zcQ2(}>@(EuikwhR0?F3(46Mm+cUb?IQ>Md&?R-RS8t81@JvrAdYbxYqj%PJJ+O
+zYct&etZ%<vYYVUNkjc*dn!NrR5xzbE>A*nc_L*xBK-}jh!#5s{N<K~pwN#23q^iVD
+zg3n57YWT(W_D;vu)mJic4(3fi#mOu<44vdugo~Zjm)}hrLvu?croM~U+7mQaO;El#
+z=cF=H%OM+Sad=w|zG{5(2szVkM<bbD(DZU?nf#EUtAwTiE|TNV;^9w~%AZwh$;7$h
+zZAt5$uVSs&!QVZot(U<bbarphdS*ja9HCAyBefi|(bkU(sW~3qI#0+>BGh`Lk<3i%
+zOIQ*=>>H}YS}!^H473mg9j~baVfrbpd_=%%Etxo9JT+;(?y*ag*7^=1ly8!u?>n`0
+zJyqzn_64nPQ+E9T*Lowh9J0~Y_bCgKqSv|vWT6kW-e@E<)B0(-oz@*g5m$+|UUKxO
+z0^M02#-FARgz2?bamCSDJ>UePCYFhhB&~No5-R{jT&1iAaG*=fSw1dgxPdO|^5G39
+zn31xevC-ByDT`(S{bf~bN)QXR-e~GclWG09ww{;wTqV|e$-#TvLJ;)5rpg^kN3XSt
+z0|ueA))MuvCaY)dUtJL8Uwr}PaVpV5Hrb~V=3k{&PV0|tb<nQ~?#unJzaK?|_}_eg
+z>z^l|SV{Oi=rw*n?T1iQ^!L+lv>csS!{0*F)9q*Nxln89lVcmnN=IWjS$-Do-R~@9
+ztXZeqEm4O0%yD9<KLO+zYWU-0k>8Ws^mIKY3U1G2`m;?yYp2(KJ^b})8p_POfHcWK
+zK4{o)*k{-)81{L@zZsJWLtLhD4Hoe4rkI;od^%HH7xRDEJ=8fRv^@~-vVxk)tG$w`
+z>YVE0Td4Nx$l~!#adou{73Z>)d2;NVQ#8Qt!jEM0Ih$urmMF4W`SQT24Z*w?;hH-s
+zyvJ~m-;tk7FOgX|+g>^y^<01_T=Kil_!K1X^QGWW=D*tFw_oob5_~w}<5fFx`OJ$o
+zadE1H_hYa`WLl?pELAFX5=Ys`xeuAe(UavGKf*2TmFExmYU9LGuKD=wZ~z~66|X$^
+zq5KFc3s=s#R?a?jIrK86Pu=rZ_dVi?Q7*Zt+@^%$mFGTQAI_<qajl&87p|P~To1Ey
+z;#{j-U7Z<Pp8KFYol`mES~<PlaOLX#irb9kHilfPo!9Qza+}-M747rfN8W=ul{2oD
+zbKHk3mw5ocxIzN_wi^JI>sr6Ps?hYAcb0NZ)D-$Hl*d}%Nj8ydy=_?hb{s~!?N|v;
+zg6xs;qJrP+EQ@{*a4#7k*pp39mhkr{fpE?;7vS~&wzNL9el1)ozqdICedDO60SZWX
+zdQGIjLkzw^uoYADFiP09<NnflHNEZ<Os)4v)o`I5r{?C&iQJv*JW`{N3-QhQ4qk@?
+zc9tejhAqOiB!w~O`+73ZdHfjx8M|J4KiuuXpmsaQ=Cy>I**ssH=S%aH%C~O=;S~(~
+zecORbQGxzwGLKpLx}97euIaHdZqrpIl$gEb`B-ggt=$v~_OO)7m667|F1Oul3A(34
+zFUSci+3ilg7lP_sBn_OA!S|sX^qqYF9Fw%oU)AJj@1&+yPU#&x%$k^vhsu#Bzfc;Q
+z2qY1GIPB^pk%i^pI-;7%>u_6dhUaBwU(FB_GV1KB;|)Jc#$i{$%#c2kv9PrB1)TNu
+zFb|1cLNl+X1J~V~MTvMd#?xO0MYoM;3-tLg)-{>w#4u&#<HZa+6v8`~=xMxrX~v5S
+zk)ptXOo^Bz$eO5gR-pwpE^^SK%Oq4|CTZVr$8XzfGVBW9o(}r~T>T54NwG&m@-Zq;
+zhlbJVVzmB39_&;x-H%t_PP6bH+-@qcC5DTwnh0J`v4`+#zgT$ncR+9#mFA~|@1_O>
+zOOv0(@`v%q_LxRF{&Z63_zSHy?zCE$o6Jv~!5C%v(`gp3`IIIf&`~W~vLE}B!%9B8
+z>J4V<oS8z-zcIV%V1rP70i{Qw`e{@$Dd@D1qam-=uJ=jn#RggZZ)igJK}r_T2MA{G
+zHYsd_s+7lrSRIwGJ`D5ps+`x|NM++Ega~dLkY6D(PAZK*KsGLk@}gSpGF$2~6WEhl
+z_n1em%`V~TcRcLVdEwu;(jQ3p5%kq1&DN(GTeM*!J3b8ZudLh63Zd#JYoIqBA$kiD
+zZzV%Ny0f3s#!qKtk|sp30TW^Br+Qc>G>3@-&|}I=A6DWOO;E|C)|ufQdNbGkGGco$
+zi?e|Bi9DK&kYVCd$i1rQ_mypai*tae)#CLZk=XT#oQYwK^s^cEiPRY;JxpxFoY;VA
+zqQ2eJk7ysGZW8Qd1c@C)On|gT07q|TqR>~8^cV;40dZVGcV>hl6JEGRqQ3f*mTZ~i
+zhBX+6eUBihstOH8eBexq@m2QGC<58*jFC&|=bAYw*W%hwEq=dUS?Wz1Ohz)}%H%vQ
+zg*Z7+NvH-3`%=8#6HLxJWdt{UUc<@0&b^$R#Y96texy823jLLK6OdO@wH!s#fs36n
+zbe}SF;{APS-R4YA&85j#;I(6VVl{XffZ3sa2?c0m+jPU%q(SJKb6+!JdFpl#4BAv9
+zy46Cx9f(`Kod}jDM^G;Wrs7dO$x%J2ge8)gW6O?BS`dt{>$X8gCBo~vAR^n+<e!9}
+zy&`1KS><Ig$X){Ds0Sq<VCrx^LAaD&pFWn~v)FawP+d7FhG~<NbTvhgNje^6;86fm
+z@q}A4<r%3KftMyZ$zB4c?tuG{t{~)&f?Wdg#sr$&fS8rfdhIRv7D746?R9V6@|uKP
+zBS$6kXBf9765=XXCLz0pCI=f*04fz~_r={YFs%UTU<FJ>S!NBJN@4S4!aJob;o;R&
+zTYop>lX@X%AnTQowHYl!HfkKrO$*o;Ywbw?zF@s~uZN4!_`(`G339~+>^8Oet+z5!
+z<qW^|?hmzTJ&gj%CV))hdUXIVyOS4w>{YX4!r4};aV<FoP{#TV3GsFHfLgwTF?k6;
+z#ex=*H&|&+Qtv-dQv;Z}$vjjUstKQfhZYq5XfOI)&W4kEL_EZ!VG~}$n8nPE@WXjR
+z9#P%or_mrP0JE*C!+u;yzGfjS)kvm>)G+JDlqw>m#soy5iStCw_ISyyeX4uwiSABT
+z<H>h37W@K%v=lGc7xq12`M?IIn{Z`+0VlqR15s$g?69q+d*!?jjy)M{yk=aNr70)|
+z|5~R-S+zd%c%%bAoNp83RrH+SE2~F&IIVSQPU^-3J4h5$K1fEGFQv=vq*3dH)<L{X
+zo?h&w6ZVoL-mGv{;+s2L>v?xCZ$GkdY5ih<Y1v}Gu3Y(S-ddtZ>_zv(Q=C}5R6lfp
+z^}J8?t81rc7g6k1y1t+F8rO5I*>bX}jqgQN_A|Dw%M8lp#g_EUx+fCYi*i`YDIKh9
+zP{5`Gkxtk05lNS|d{l#RQ$gnaU2jZj$4G!Kh0dY-)=~7q2>Jlaw0?|63(jV#?nO~N
+z^7<z%)jDN`mTKp^$<<pv%#<mICyY2=3{9P~s21EuaU~DQ$EX-Ac27~;rXb($^l{t7
+z#XJ#gn{-yde9d*=mf|>qrO7ihE`TYJi=U2GE+}2lx@P#A8hin?CzGT8uf68WeM^ll
+z1~&cnO4kkz1F+~(1gnZ?8rrS*LsufQ_X4VKVgZleB5anBocv-MXkw$>QA(<TF*}FV
+zi`2pvt!zUnYh?$5rOEHBJgf^6FxxuARAk;o!ifeRjmD!i`3wp}P%-5b<kU5@x<7?6
+z;QSRo#X$)EEGnNwmSwQe8Y}!ftg)wKjXkBv8ru*^vPLBtC4YNO#$7A3i&{3JiUR$t
+zTXNPH(^A$BF|ns}H{Pa@Zv89|6lEQZlURQzVd6Hl6k5oyJMVd@Gndy;BQ@q0s8FS{
+zPm4)6hgTJ?aa>v=>z5OprWL^kVhdAq(!$GXr7*Ey0?^k!^%n?SBdSCN^0GlVDX6i4
+z;GfD{SvlOG%Q6&@m9-oJ<DyUd^=n<Qa*;{>vx#%G@y(P1uL%m+k3fifBCJX>tRg&~
+zLfT5jlp9Ou)cOY`*%DjNpj%>fJ>skT|Iqrn>FEv*8*k+x=5L)Ey(zp&h+qxo<`;1W
+z*oB-Pw|M6)U08@Y@lSyor%8I4W}0m80UNNuCuVtYh08xctQ7blD((;)QEMMo>He%$
+zTK9Qy3<eXMwo*8GCCbjX|C{Uc7}#L4l38lUd9_=TcAQt!EOfK(rYcTbw(;3<UJdo&
+znnu|D3-*Ncv&uwQJI<>`O*_u3WiYv;!b({zcbr%6IIqSOvaM!R#z=v$RjF^W<GlKx
+zunBhC&mHI0Iw{MU<&N{}9p}|z4m-}P;lJ%TuikN9z2m%k$9c85>%oO3_YV4w^J*Nj
+z?KrRAabAs;GQrc>9p}{%k0o}TS0{p}%Ky-LwS12}=Y6fY3H`vkJx|k<a$a;API&u>
+zAIrn`;Hq};y|DM!JE4+4YTZ4N658$eH=J`f9;xH}JaJO24F6Bn&Mn_?U}Dn*V^{8x
+zm@lc4cj-i8-j*x(xchF_604B^$6|3q7iaWE9Pe0i78FX)BKjvpp3SNMwZ@$YuH0<V
+zm758j9vqT>C*1pwEx9NgFO$^wS?>RAEF>G{J$b`r%`NLsTivp3`PvolJofDuO8k=5
+zEpOX+>FQN2u~U|}EMHTxa>Iu8_|Z%JEnT;<wYhoyhL)8pDw>vWY^qq*y6(c3)$7+u
+zF7sEmHLtu7*=sJVShc=&-HM8JtJhRq+O&Gj%8J%?mu^_z+`M|-MHS1}Rh-exa^U`v
+z<!f43TKWGj>>T^+9Z#P2=;m#^*L>%YsjF9A_5eA>ci)LW*%kWZYZv&#RgUaG3={b~
+zQ6VqC-tudJhsSox%kQ=Pdv=e-?r+#NFMk9-TFk!>;NS8&JLlzBnP7h@i7sEUzZ8$j
+zc#n|3YKHvy4EgnzUr0ZVmcJNJ#CML($&<hT4Ju!u@@dQe4aUboQTjW$c=>+IA3^<5
+z<vZR~ynL7C-;Mr>D&O_y;^liSzY}jCMV0S3x_J36%ipDd{8Mk!@@FaJ>9_vv#rZc{
+zej)zp1;zPS98;WsmE{-W-*s$p{!^A;$Ub6nc{Ua+#J}-f#rdZ#zYzZs%P+*g>fej=
+z@3Q<t{Ch2*pZbX!A2IoQUo2Lre3|7JD&PE`;{DTM`Gv}lEi7Js%JOf<{DZ$d`|CYb
+z%fCe-FMq`H3$<^|@{islT0f0vD&s=sn=QW*hrLnbuXnYUFEoB)7Z=ZOoFP9wLw?02
+z#rbzwexdetS$=f^{g2?srukQ>{Fvq6tv!?1KmD!6%cm{BQ2DM)i<j@U{P(?H=<@2H
+zx~h2jn6LTo;@h1O_80Hcd|L+c_%~Yq!&vX5?4$8>TE3ute4#l13d?^#*Y{Zd`aSaH
+z;{2<=qWOjTFK+p}tG|-hzIwi{h`&PR8!i7~Etyw7{*B`0>n;B#Tu+Rgzxeew{1vLd
+z%<}hve(;x9f5rck^n&H9EPru<`Jrq}@$waxZ#C!Fe^>GHRhEBh0sHINR=j+d<rnfF
+zM`kELX8G?e;2%`|xOn|>%fGjPe^vJL;^iwWf1<$nDSJ@MS1aV{x8CxX7syXr{vpVZ
+zvad1AFJxa+mVbEx`I>)UT)uwG|9S!W8u@lP{tC(0VflsR>$3bp{Wmry><ilel;s!d
+zzw{Hu%a2%oq5exht>p{#U+hnsU#S0@Ex(X{x-7qtetIpxQ2$jtTU@?I%P-V_WzT8(
+zLh|je*|9kv{XlF^TiKkly>~C^f)&q2I?GhPh;u;vnf&<f@4jW9*y-ebbUIeLMW8D)
+zx)Y6G6y2H-znWaS_if(gYRs|R4qS_W^~R6;M)`B~)^FbZQ@f>hy?U2VgIep~3asB*
+z#N5t(r2IMh#hZneeA(5VM#uf6{5iS^zK1{$iM^HYK1LqZu0^1$ng!h&(3Q`E?pn~r
+zjINm8e*n7iy;MH#KjqK0XK^af&*Pvg+gIs|@!K0bruR`g?nkruo%X3+$dPt&Ea>`Q
+zH#5KUK-Xh*+@BWWcO~-T2h7ax7SL519rvq+_&vb74xO3b%b*)SMCrJHEyQmw+TDA^
+z%=~IW*J*UzPZi?V0=o2E<#(2mMcLK$pqn<jV*R!ibYn(Wtlp<VSI*xB$6v8}_ebB?
+z8(pz_PXt}H(G{zA1?ZaR&0O!NK-Xt<#p?YY=(>!qSiKK{ZuqS;*Sib*{%EBuR`1cE
+z8#jK%>OB*56>pol-pfJPV06Xmy%BVAqvJkS{vyWteV}XO%PaUR#_w6sH5y$peurR^
+z?>S~>ev3fYVRXg#tpVNOu`~0#7IeKvXZ!BRb>|15t2{~hy~WfLHI5z!U6s)l)63qN
+zQ_78w`|(10J{EM%r_9`r^FY^Nbljh3@e9qTSAwqbT;*46T;2k@o>|a60J@P`(7g=0
+z623Btzhd>y#abDk1zj!Z+KjH4o?AfIXmqx(kL=&;$&VjV#9uLfTglJpY@Z&<?`hDL
+zteTnM{^<Lul}cBP--)2>xoBp7D?ry_baoC9Dc`3+*Z0wx`F#&`T}Ef;0+IY4BEOF-
+zKRX|Yq}ydrj5nj>IYA*iJsNavoyxD6y_^ZUDR1U_F9+SY(eeBstKQnpyVB#Bi^Lm2
+z*L=;)_1*`%KBFsUFVBLm%joP}AyO}gfJxhRT5mCai;&r9bau`V$!`tl%0D+VziU~U
+z(ed0t{vzi4AAqj&`kDDX4!UNevvY_@`S#u$^VL^o=65XU;zq}Fi9+(72fFE7XXbY$
+z=*EmLI3aQEHTJZFTR=DX&6)W<0J>hIvvZ5c_Pz|d;qT7OZ!Vnwexob4zo`Y?Z1}Z=
+z_;Ft>f3Cfub>Vu@jSkE#-&WA2jgI@|Lj0ZvUDNF|^V@%4_<u&neRCmxCxWhgi}JJm
+zbEKYEfUe5umK(dMb^24FYco3TJ>}2o<>btM=6j%PHaZTKEINzQULFEngVAw+Eq{(*
+zNYA^JqJOu|+>WC`H*9oYH+E6&I1_aB!^*E%J1z%Z!sv>%<3`X`8C@}Zxes&=Kc2aN
+zp9Njq=!)6PA$a&Z{<E3+Edt$$(G|0oHK6PH)y#Un7IghaSIl010J>?TE2ihiK{sV|
+z#q_-Qei&~?SIl0H1zpucGq>YB&?Stnn7v#Hx)Gx*)Q)R#j`LaUYLmdWIkA&g0{;{7
+z2B0@5Hh&2a=L;v*0@ndgu>1<(fw9>97jaIs5p+{P(mf3P4AQ?3+<^2r@M7Q-f0J{c
+z`L`RcH=GAdBL7gsJ%OJ<{I+M5zS*$G@YTO+`Y#Prz`vuuPT(6LcRTP>$Z-y^8|gb+
+z{@<ozvGquQ8h8Nc?gV}a^?Vojcr12O6A(v=^Q(Z+)%-UA9|6Ad7p%dc`wegza0E#D
+zZvqcT{?))$NdGX9^{oKn(Z~E{z)z!|_W}<^{2(Cn|NQ4z>;lmL0Lc0_1DSpT@D*V9
+zpJK6h0y}{F1D61)-&29qZ#D2UNFRGz^?C)6@*ZIL^GVg`-G<)<QlE`L(mnr_;?2M#
+z5x)WW5bzox+jSAJ4D|DW)azW}>(PWa0;$*MCRE;E0`~*mmx1i(jfU?4vYs~rslOPI
+z{B9aoe%(O!!_~mofo}(pd`<^m2%Hb3K6Yh3;t&2Y7F!AYDUkAg2S~kN2c%xt14(}}
+zko~Y9ka~UONlpKu;d&tTd(RWG*t>wA0n+Y1X?Q7+db$Ki`AZFlQ7PjeGpse-{s&Ee
+z8c6+(0V&^?fz-$4K(_x};0nag0G<zA0HnMxKBna#0g~=sAnokSK-$^ofaG^6knKGM
+z$o9<xviu=H+S!3X+SyBwsy==JWd2uyw6hi<_3^}5EcPDYcYtj7R}DW4WV_!9WILaO
+zFvQ1zY}apqlw%9<aKuwUw(lY!{+oXa{zthhfy;rr16e=69?SZZK&;{On}PcQ7XxX}
+zaUkvaZ9v-d9zgQ#`n}rqaX`wkr{SFthVjdQlz*+^2Z5A-ci<t&PybG_+wgS5BMpE5
+zTeZVcU>Q{QQy}g7W+3HWV)-WnX{RRwOF>r(T!?yh22vk`zfrw*09o%UAoWoPJQ;NJ
+zfbRuX07?JqsOs-w;9{h20kXdD0Y3-)7O)fb{3q~G#4on|cLQrczc&ynn*YmRYdIhI
+z3gS;Z7>gYP90BeN{0flz{XCHR?F3T4RY1<ezxb8PyVCG5Aoclr!<~WDXa56AcZ%VQ
+zzts8SPe7=8{-Z#)>oy?A_hrDpBfSN<51OzVNWInoyODk*kmLNBUuZwyZMYdo{jCO4
+zfAv7}d+vVa_XLpr@GuZ=^`Rp`^7$h06kt1${FeebU%VNZ03HgYd^-VYw|^W_z1|5V
+z{bzvehvh)(_3f6vui>3PSN$FUd<XLX@H5rZuMM{Wsi!-Dlz*9Fx#3TKs_EAoo?&<*
+zkov0vQod*IQ+?bAWc$AXd>{CJ2^a@%0#e?^K-TkiAnD!!q@6wU6ScDmAo*<rvb~=L
+zvVE5US$++Wc6Jevc6KU|c6Nm2KmTL3v#mht<2c~Efja?dAJ6|t@kt=t{RtrDsWChT
+z$ac*GQjYzAl;iiq+P>R>l>4(l%H0OU^Nsmu11aC}K-&4Qw&6Jd;x_?5f_M@*AO9@@
+zwj#a=xGR?MlMMF;HX;3$do}&nzylB;0&YgRZv&4;{DYPr2W~?8vB0B{{`-5B{%+vM
+zk$xNSO-OIF^izPJMEbu2Pel43wkrLPfJvke0gpraCxI^`egzOy@<|^9J`P+Cq(0vP
+zWIGQqeB^GmuPs2Pe+9_?`6BRgbj=l(zQWR%0o##&vZWto=@r1skiLthKY5q(c@+3j
+zq~8N1|F2p4mw_Kc`cc3oNG}6YuXBLAqG>N}QT!>8di|lr`+@Ti{~YiL;KzXn16Kl%
+z2c8Bz2KX-ECg1_UGr<3qbS$<O^-Tdiq)!5O!+3ra_<7_%1YD2&p8!dBD{up_7fAXq
+z07-uhko2DdwjlpwK+>HLYy{Q=Nq-uU^b3KcKM{BV^4|(<1nvV|35)?r|MxqU{;xpN
+zKMlMH`M(2_ZU}fWupdbJZve^vzksB_9=HbiK9F=50jbXhAoclv!wMkvxu3=V@<Saz
+z4*|!(=T6`}<lh2(67kOhF9CiKcp%dMI;8Xu14+LH$bR@Hkn}ykRlxIrr2pFwlzt3I
+z`n!SbuYMruKM!0E{1A}z&)uQ)j{!-450L%(9U$qi2W|v50!jbU?MnYgAnAV$WdGj=
+zB>j!Rb-;B%((ehR9X|bi#qR=X@81Nn|Nqm{TP%G&@N%TrTKZcJceDICK-$3*gUW9k
+z@N?jI7qA`aU$XT7Fg(Zd&jivQsxAE>OFsa38PcD*P5Iq#cngqxzXrSr`M#yEwe%+7
+zN0DA*>2nRY|35AF5|H-sFp%v}TlyWqk0JdiU?tLb2hwh)2h?u<YM2JnZoX~tO~7kG
+ze**BsNWb%Y8ovz4_$%Ml_-#POPq6rN-_iJGK$fqv_&wiNxo$Mv0AzdD0;&H~Eq$Kh
+zE|$N&U-kSDup9Ju7=9MW^49>V&vlkwXIN?ZM*^w0n594RE#-4NkmUz})X%QKQxSji
+zn`&?O1F5IGfE-_U7+wveo<45zR^S^DZw7K6J{Nd6_?!VG|5JhFzb}w<djLuI?5#>S
+z4kX<lfRyuVK+=5~NV*h|{5AnecRBDf(8YnII{`?#BY~tl5J<Y$0coE<y+!GUfu!pP
+zlI}(z>AnP{{ucuuM*JY)Ch*<e@Y!!@{Bgqv47VD7&+taWYYne7tN|VczQ+Km&m)1<
+z=OKoF`MT<J49N5cfz6=%F_7}z1El_Lvh>ec`n5pntHsirEd4?t^>ebNzsu5(0a72Y
+zv-I68eGZWA|J}{n&Yu|GVfYQhFBtlUA2VDEJPmR#0J42Y0NIX%4WH`M_WcgX^lt+>
+zF0KO}0Qz>|X2d@Xr2nu8$no^**OcyYAnAS#+yuHG0_jg&10>yPK=NAvB;A3)k0ZVp
+zkp9KPUsbvuAnE=CNV*lkPa@s`q`&c2Ao)FUlhXYJNV;zWlc2i^cpTzwK+>HJd>QE<
+z06qr0It@tsS^%USl>j+j|8%2b8u$w0U$(dpWdD8wNc~@I=}RpAbRhfd7)w9c(%%4N
+z|GxAU<@*O9`8*7yJ=|sK->~$r0%<?T0qa4xC-6z&9N=24uP=RB_b+z<&jQ^yfn0xY
+z2EK&$d<jUoeak-rcnIRt|E2f@kn7Sg@DboD;NO8~0Ut;CGk|-6?^C@>|1IDV$o~@X
+z^{A&4NV+=U;YeQyJR5jCa5Hc|kakf5JQVRCeo4!J6Ug${0a^Y$Aj{VSSv~>W1UwN)
+zdpQuu@<08emLCGL{8xc2e+iJ~mjPM+Y~aU%rvYh4Zw9jbLpNyo`+zJz0A%@(0$F|?
+zkmXkaX<r`%(!P!Z9*X#j*Q<Rz349sxM}d!_{BMEeGX#7X>Fq$;&r-u<4PS3~&lj{`
+z_5;oZ-Jd>>c>`690oi}Q1MZ6cy&s7G=HG|^wIKfvAn9%ZehAnFB)tzL{U#v(n}0d}
+zcLDM*0g|o`cp)$jB>f3M(k}qwzxhYwe-|PDU?Ays0$v5W&%-!rZ`S~6Z&v}iUmohg
+zGgag#frlXfSl|_iKXx7VO~7_w6ZkX(S>Gi<*0&tU`pyHcLH=n#(*5PL%I6^<Sj``?
+z_z-Xm@m}B~z?9{m0{lJV?*vlsZwKxPKCcHtrSm7D{Eq;8fRyiYU@LGnkoJ2%aDT|v
+z0A%^M0@?qE0cp3d2hwhL213O7Q<!{K10M%+ygmY?{67HFF0KK#0{;U@{u_YgzZOXT
+zaUl603)}>(1RjO_av=Hd3S0qv@iWT*Ss?r4ejxdO6-fS{0h0eGf#iP$ko=bd$$v4B
+zc7GC(c0V6T{s#e<0rv$`{yl)Sk0<|A`QHH~|2`o3Uk@bz>wx5cF_8Q}1mw8*0FdM2
+zy+HDRJMhE6BZ1`qCSVI#|NR=}e<zUR;uhe`z^?%x1K(aC`ER!TlYvnA{Fl3Qe7qm{
+zX2jnNY(;$s0(ZsKUS{}*PwV>h0FdeT0=fR)20RaV1Mnlj2d>uidw^#l{tY10A4_Ta
+zFM;)le;>&7KYvQo9|6)1zGv~9fb6%ATKp0q^&GeO0wDFWo5f%7b=|oexC!a~hBp{q
+zWq7IK3d1uE7a1OFIM?vGt75S_=;eMO^>P=G?Z3nDDj@y5k6HYDU<=}lEPj&V>kPl-
+z>AHClkorFc$aV6sof^LtNPTtzsh?Fq@~Z=~-ct+@Har|g!u%2-^XC{o_z8_)2!zSc
+ze=Csn{Vl2WeGAC=B|!Gm=|I*u7f6140e1zzT?~J7rN)1WLCgHxfz1D|VW(j!koEog
+z3g!PLAlrAY#Sa9s|6jo1WPLvclHd1$<aev#6^4sCl;7S!%KHEY9r<+u8LtJ>ZvOBe
+zO7{&Q(>DT1_jZd<wyQl|0i=AV0!jBeAnAT~xyG*o(#{SCl5XN-n*MDd>DF3&9+38z
+z{;1M*0?Dr)NV>f(K75(lWfzck*=~5T;n{|Z3>O%_$#5^j={7C@gyAm??=-x{@N<Tr
+zFx+U^Xjo_X?}l$N+~05)!)Gtm`W`oYz;LT!H?S7%-3a8kSOH}Joo`qL<hVH8;=2LQ
+zM*QzsEZFb&0N)S1-QrgQPec4Ni!TAb1@Ys76~M!QZv^fNd>3%C70)JtzXnpT1Hhvp
+z&u4&?=Sm>uX*a9~Ql5nte>3nL#195io+nyx{sjCjkntOVb->SAd?Rok;^zQ)&hZ`~
+z&o7Pw@?2ssAkQ0K*r@XS3V1r?xeZ8p`hb+@zYLp!lxMlc{|$&=*PCAk>_)lq4LT3}
+z1W0*)^I^PO4ZIV`{Of>cA^uSy^E;byz6D$dWd12Yj<b0{<{!5{7JDo3U?B7Vwob>*
+z7l3n-z6r?mbAX(8=Kv1{{&B6Q-wEWnxCnRxu+Gwt0&*PubPdi)f!_s^j}JT!@g+d^
+zPuy_6;X#JG8$Nr9*_+`5hFcB4XP5-OAN)TEd=mJ6ApNCNf%KPNx>(cy3S|0IK&F4*
+z(yy`ft1SKBEq#Hd|C^=%7ETEH-w!089|Otf93cDiR3Q8FWW(11*`GUG{3}iB4|M_Q
+zS8W770!#qO_ZZ;$z<q(#*HahaP6NvS2*~*7fjc37fyIvka$T4MWPgsXRQ~q>$-fUs
+z{+9yDe>w16;7LI8dn51zDEHh7jo%B5A?{oJbRg~NEkN>r`U2(u8zA}r07(8mko;SL
+z=K$XiB>(xqT9n(v;=f%Ui@l2UF9Df<0g(210+9S)U8ejef#m-)Ao*VnoCaP2d>sDD
+z$AEjl6juQ&SsqA!uLr&e9Q}~SzW_WM`FjHoLHdhOF8MwLd<1ws@OfYtkbFI03HY`E
+z4@bGhK=M5t_yX|B^E7@lkmKPXAo=bNB;Ti?T=M-o@LAv&f#iD~aCh*%0(cP0oed=4
+zw*#L8KKnt9-v;D(ssxhn0YLJdhEmCQ5coFa-vT7xn}EB4Zx^r{=_`TcdlK;Ni0@?a
+zdm3~+z7t5kM*_)rHz4`mdp4e<fc|zM`F<C;EBJm9xB%%Jf#iD{@I8o^S^Sr0>3F^Z
+z$nm`1@I1rChVL{y(y+|%m8DwlDZ^hIZZ-V2;TH{k!#2Z}h97Y8Gx59)a@GL5Ab&NG
+z`=56JIZlrTt_B`#`7bWfar+by?LFWRhW`)9ar-rke-8LJ@VypDK5f8j5MKkl8rTTr
+zID8-Q65x?Q+VclLpyieVS?--cmiss0r+{w)a(umr$&2NF4rI9(>b2Z6K$iO@kma@k
+zuL9ly<hc1Pkmc3@S?<$kXt}F^EO!Zz<(2{Ag3Vt7JQ{Rw1G3z6rz`ywko5NhNq-M;
+z6Y%>$+WECW(w__b8`94LlKx#l(!Uk>ao}M<+V4wsO1}k2`X2yEe*=*8*8o2WOai%1
+zGy=*0EkM#A0VMs-K+?ZZtLI3QK&~J60!hCPNV_}NFkyI{;Sq+VhA*F{^b>{;8s2T#
+zZ+L^@Rfd-ut}r~)aFOA$hI0+~H~iJ9@@<d#p8#@wxD-e`Yc_ljkakvO@dJSLdtY9x
+zbk7<7*zj`T|5x0Zz_(G{dt4zQge!5l%Fz&oaD#~?-{FWij;}b5jg{CGc*wH7c9h7H
+zk>uD4m!X9K0g`f*a1|F?N?%@q2Q9QfOE_B6a;Jp{<@3Otj|Tz5S>RFfe*c;OYIkQ>
+zvYdpV58><o&VT;%pL1ttMysn)9vvXf3+ljYARhqI{PO?mWIOy{klMrDAlbVPq;#)j
+z_An0s$=;S)IgfY?BzyOQWN$4<?eij#>@|U8uM{MEvzQZ@_oDNWy&FNAcU%CHy&y>T
+zN<eD2GeNTVPPNp38axK_Z$Q$&5G4H`@K~@IB)bQKG%xXhr1#uBsdo=Z?Q{qvy>5`^
+zDGNZ-n+B4-Emg98J_(ZE-5||d)`FxL0ZFd`q;`2QNP4?~G>>_IuGD)BB)!`}YLAzK
+z)DBlLmoiUf&S%bM9?d+Exf}B>4g1ST?+FmMlxcqiY5e*<I3E4sPLS^ZH*ok_;N{SZ
+zfut7!PlaBH!XY<sco9hB{#52Sm2&)l4W#jZJ@_{GYY?}(!izvEj|BKJ*bTmk`@+fK
+z49L~s6<{Gq>FfoP{-!z7zbC<0Aoqi4nuVu<xRp&?2$G-m;5hg>2c-GNF&w@-xC(mT
+zoFw(W1Q$W?Ly+3x%OHh63Q~T4#=HU?fqW+TD%cECeoh2&i!Iy_B>#2-DL<c|DD(3g
+zNcnjlybSyUNa@@HlK$Bs`FA?_3gn$ZbeY2UPQbhje!K!weqI8%pnRSIzd`r|9DW0Z
+zL+=VA^ezDxB0uMW)DM<%co6(P;`x~egOs0fAmwM|c$uH4K-|&`Zv)A{D?!T7MIhDB
+znIPpy2QLL1K}sh8lKvhb`L}7d%+EC-x^Cf8kjg6z(!BOmkjCGGzzg92WRU#d6+9Z(
+zw^Yb}`5s8&kAUR=)y(rj^1llt|I5HHz+=D((BBUvzsG~*_j~2i?^nSe;`+lN_50Nz
+zmHTNR`F|w%CHSW@oXY^O2g&argXH(6Ao<+@4k4YBK=Qi+oQdnRKpH0w;_#14rQeS+
+z{}Uv?uLjBQ9`JMUG;loZ)qv!85lDU?1X6iV0nZ0NDv|ad0?BXsStRoN6!4$mXT>;I
+z0{#^wzaIw4@B2aW`z-KWq!R<l?+EyPTn~YCUv1#<L+Co<e_AB@8c2RW29n>`f}et`
+zz@1=kIY@qYg5-AtNPf=&&jV+GWdFl}^!ovj{Jt3c3_J{+3x4I7et!g#-|vFt_d4(*
+zr1Mjd{JsvHjq9ty6Cj_(;VmHfeJFD(NPd6nlYT!A(){)Ta2)L227Zk2t3dMmERg(;
+zgDb(4L9#y`r1E}mmh}5~AkBXlgBq?M4N`f}0LkwILGt_M<M19lr1LaLe*Xn5!u5wh
+z8rRox_yr*Oy@;uS<oBT<mG?gj<^1_Q5T9u;faLe1Ao;xxB)@M4F9gpA$$k?^ejfx<
+zdB1b4oL^rERzlXm&EUt!ARhED0m+Z$;9_tA%QL{4koRTzv7@DYH~2oT{}LoWR)ge6
+z44eke1S$Oj@JF!!$x-Nk;NL+E6@~YMZ-BRgq<8O;9?ys1uff-0?>3O^UI3E4Mv(Mo
+zgJf?SNcO%u0_!2TegjDP41<)fT9%8z>mVNoE`q6R4o5qHJOEODk7G^%DW6{)Cd*?J
+z^Cj>iq_YmB@E%aq7l+p|OF+{5)1fl_29WeuGj+axJj=6~Gx_?iAl3Khh(!5)9;9?0
+z0Y|`}vAhx_y%b1#LFPdqmCHAW$Z~lVq;mcTNOsnP6z|s{#ajp>N+E3uybFGc%6k*#
+z{VquL_!s<-^kU!}U>iu~|Af~=N16*C0bhsy10cn_79{-+ko1~B@+SaNJxu}8H45*V
+zF6(JEGsY|gHzEAOgRu?=wu9t%BS`I2WBNfV=eLm<g+IW&9UOtY5~OsOf|PCpNbRE>
+z`~chsq;|GDNd8X%$^Q`;!=Hugz*oSvAlW$!Bs)I<$^WB3YG?mCNVc<IfF+RAAc6|J
+zLGt%h=6sO+-EyD|f1ddW^G=Zbz5=B5&IBpF7Lfcd;p_YJ^)C;Q*Pj3>KevPb16}}<
+z9UXiX+y{II{Ez)*eccLDes2URzk?v<w+f{E`anv5Z;;ae=zB818$inMF!Ma-0+8x!
+z7RysX>UY2055~b&AeF~i%q1ZCR|`@)M}w5kPGAMDzqPNtz5%4`H-L0~DM<M|1EhSm
+zfMll}q<roNQa-1G?|~ogBmMmwNdEnv<!eFmZ!w5lLt!oGLlKmLCxAzQv%xicOTW)y
+z&SoCL+=n?1q<a2rFUi+Is^^Em%fNpJcgAx}H%R3WWEL?0HC0}Jm-!I$W{~oA8A$nz
+zvwR@93+zq?ss8RMz<FoLH-RLd22y<<%Y0^vtk=t!^~~>qyCUA^$+Dk615&&P!LPx)
+zKx!wqfTEpncnL`D<l{XhSAy3-_JjWdC$jw39`gEna5toLBg^N4Qy}lXJLY-N|Lty=
+z7a-}|LApQQ3Q~GEf^UJVID836`_&=l9OlEjO8aZURR~|rj5GHIy|6zCB>Uq*vj6oY
+zkLNY;J&?j51Xm(_E=ct>i@9kRDZd0#JwL^~AEbJ|1000@B_P#z3Z(k>fn;YI^B)tX
+zd?)ip<|QE2?-G_5f>iG%;GVFz5BN6ZDIod%4UA8R{3b}@uYwf+5s>0t4eo*Kt3mRs
+z9h?NYXM(J+MIhC09Z2;%8+;Qi0IB|8886$#Mv$)G2V%%C{5eSV9%s&GzOa+5=OK{l
+znchi4?cpSl+QWe?e?3mt`>P;@Zv?Lcp8^Mv^u-=LpF=(jq~~_H?Kui^CBj$Z5s>&C
+zvW7KCI=6i~@ma{o8=adxo%lQ*jR(($O#BDrFJR{!$i$Z+ZwAwliT?%p9dHF?;){?+
+zz_TC|UxK^=OhG2T0Qq-d2V~+#$hU(%kcoeTycUc?CjK3=4_pM9_%!7GLFD&z;xmwc
+z0rrgZG~NWx2T?YjQV@CeOaNE1d_K58Wccnm5lphY44e*GXZhd2!y&h^+yoXvu4h>T
+zDgN;w*)IYqej&?L{uCc=OoV?Ar1%(agpBUv`ABS0;oK0eQ@+j~=b3yYcrNG#SAdki
+zG*|$h15N_Z0|C!j;0VSERMEus%wgsbvz=MV^fEon5sV`uK698k#B66)GQCU>a|Gj$
+zh|e5m4l&!Al}s<w!yLi*BjPiMnM2HWW+l_h^e{(IkRm>Fm^s93XI3)3Ob>Ge1uEh*
+zhnYjnc4j5h%k(fucH#KUVdfCComt8BGCj-@j7K7U<}h=J+0LwFdYK;P2s*fk&m3kB
+zF=^bQ@Jgna>0ypwyb|%5!^|OOJF}AMWqOz+7{5e(<}h=J+0LwFdYK;P2*x!LpE=B=
+zageUJGb@>1riVEKB@v%F%p792Gb@>1riVF#euO_Ku4fK2hnVfmN~V_yh<FPQ67vR+
+z@&4bdaI?ZZ!ehLz_Z7@DNjBcEdmrl?@54Qe^^Nz}Ue5Z%5lR7T6kZvhz6?O0Tc=66
+zo#m5RUeEFtwr9N0^n(Lf|2i3eKFh}YE)T@OME(_EP^Qo0jZ$9E@@H(nndK4;NThGP
+zukY=JY#%o@`V?Tmqj2MWeZOS;>o>`8+K&+N-<R?Qn6!{g55M$zi0yknm2v_DFNGWL
+zhr6Ebw{ti}os727jzOJ1vshljGL7RD-pBG87&j(Q@_MfSg0yij#lSj!+>kgFNAeB$
+zN3sv&1ASH%LLNWl`QkGv(>q)!d<b^vbMrAWd^3l?h<-`oBhaJI$Iv6Wd99T9#JERt
+z`{7dlqL}XIUXSs9(jk_O_j&%XM1~vhNByWw%EtS!FUJjt;v4VZJQxK)GTkrebI)uJ
+zN4oU6y+X>vLV_<<QeNLLFMNKSl#Tac)^q$}_IECddHOi7r*a>u{|L%<`gpHrg!BJk
+zxs2b=;k%Yfc{8`4EdePT@2fn6W#j#s8&8tq#{0rA<@m$gK7NQBE#=R6U*a7c-*|uH
+z>u`(w^K$xK?BBEO-(Kv$@xJw|IQ&HpPjULj`_A{^@~-@=%<s7@Zyu5IzzNbH<Ne?>
+zIDR|ofj)<DxbgmN?}<|1cwhFDEI$jo^!a?Q4BxCtc`?_o@&4o|ST^2Q{TH@h06X;Q
+zXM00)r2Ls*+B4qodOgd=`(__!*?9kNFUz!ePoE}kAIAHM(=2-*mf?To_F8$Xl;?2#
+zHOr(tiNlTeN6%x~cwcMhJZe8fV)2$@T+jW*cdU&6)KN10_Rpm}ac8Pu^uJrAydU?^
+zat?3e{&^S5g+3>8cpZl?=Ws8VPZx)u!r?b@_!=(%Uvc;v4u74)+pm}QA3sL=x0%D~
+zzE1vm*URup)iV5I4*!hp4Y7P2#u?HtV0#OZZz_*>ID94Bd-fq|Zv)#K<ZxQwB>g^?
+zSFpXxYo-1bY;T0aA7^_*Y;Q)5jK74#cVT^61gB3W>#tugL{FI0f06Ys=k$kJ{xhe4
+z7w6|`w)cf$pUbb0?XBSS*K#<m6Hs{!^LR<m;UquH@>|?q-r@fGG`E+#kS=}Zuz%~>
+z-WHaB$MPwh-d!x;%;C?n{Cf`HV1yqn%V&R<U))*xQ;Bv=pMP?=m&1J%Wq1Mi=O%6+
+zM{@YZ96o|^m_B=Q{7D>M!}f<!uJoD1;RPH%$l-nHXY~0Am&YWouLSG+SbrVsw{w5^
+zD~DHd_;~i`S&UosIfVUf=J3-vypsFFA2_`NPHzS4x3m5|M*bH`dk-JQ<;VJ8O_1f|
+z<NCV}_X|<q^QC^<cqtEY_$O01oaHluQl`W2^qI)=dY<3h%=&$3XY|=HPU^3@R>}d^
+zFJOIo{+_<euxITTGW^<;Ax|9k46?kD<sp{aS#D?flV+*EhUHyaq}<2yNi1K?@?ji*
+z3Cna|gzjfU=qL191^-AkelKDJha11|@D9ty?=jH%64Ez*-{57Ijo&Ny0O?b>@%sb+
+z$FlKz3yDS<?zt0*<MSAYuX$g}x3ayF7o>bA>XYmlzlRcI{gDwF-pu;O`>xj+>AfYx
+zS8=%UKI@y<9xjW|BD62EFD7ERGLPlTH6qw^J^O3CkNkd?jrXfhW&6hOp<K!754|Ge
+zCpp}BpZDY`GCkw{`WHcs(l_3h|2Bsk@4u&Fpzsmy5BH;ek!<`vfS2`+_x*o>_D<o(
+z?<34M!nwT{vRv>m4C8Yi=f`;8{Okf5-}rr&BiaAqgQWgtMtM9U<w_18I#|l9xO|5m
+zm-2sec}U6QS;z5>_sef-lIa=0r}ErkXwMUdJV$c>O&u;}FUwO{evoC2<;PgQh2;e-
+z-*$wIe-g_xj+C;G<!Ky#2g^5d_^B+v%l3Z6@&~NHoaG4XFJU>#;lnI%;_xe3?kpG2
+zaYk`?4&2Qy&st!YOLw=+GXr+{w7u+d0OgM+lKC9bV3$)$_(w|oH)`zqwUh1g8;U<&
+zwf6Aom3H}8Xm?hB*6nSVr)zfk_&x0MM#cVueeB_vU_7<jpMR)bep2!02_?PB``Y!Z
+zFdw$sODf@KE8+Jj;a8*oSmR%*q<4UlpF$-+?+Y1D^XCFlKc-CkC*wS({7WVLN+tYB
+zC46U$4_5!?DD|<YBF~#?*Z;XvzW#c9_@VpRWuKDXu+n}W-qWsMrnHw0O8I;(^v(RY
+z3VWvfrIP<*j3?Io{!z)#=}LdQ5T>m9&-v`~$x41+n_&;XW0qb1sn;%lqqL8((mz8=
+z`O*5n)t_aD*yWd%^!8Kyxp1mo{{|&J8t1L{f2ySSsFL0!r93*6^j=oddtOQJbtS!f
+zmGpkA^skLd|Jp<Gr&`JXqe^)nsrW<Bh1UEIDE^$M`1661URp_SrIP=hmGN}ElK-!i
+z^qyAIo1o;sP|5#~#dvJC_fzIjeoXnKI=g(h(qCQ>?cLOWMf7)5zO~98|HooHHpA(h
+zsWrWGl=13*F&>-xzY*nQ$|a)xnDT(vZf~RLA7*%!C_huK7UgHkCyDwo<%nYcL$BTb
+z4@7$~_0Li4|3tC>6UF{biv8o2{N1V8zfZBhL9tK!x7PA}K&j9Bl=@66^|@1{J^s#0
+zeSD(S=gUfczNFOWElT`XmHJ$*jF)9fdp~@4^2huXDEht1{No5kzC_f&8NXWzf9*KC
+z{TVau@<*b)&G?6l@-*eecn-GuH%^fY{PysWl76dF9#a*0K+NYVGYM|miR_v3l}Oww
+z&r<4dks`}|2Q&Uvux$1JZecHzoafI<_)#K#GyDWaUNyyTZ@I{iso$&EuT%8toPyOK
+zdUvZ;UZU7*RMPi^4o&(?lwTDM`1<-gqLI!9Jspg!(5t%wB_;lfP}_<u+Q~>yES&03
+z=y_=SOOm?Yr7HHsL-gyURq?*GC)BI=b`s&4uZDh-G)zA{T09RwZQAND3AN~b2|cOD
+zQsQz`TN6~pkDrFZ(P+GLZhX)aVtWhqfh;b&WiS|79`4Vg@0P{v`i@Mps&unQPc2IK
+z>2uSK;aE>p?^+n{)$3zb@mNY9OnE|_nVP1Ss_M{!CT(8mP<g4o3BUU)iYKXqoW~ZF
+z1;yfMkytVnj-?{uln#rX2|cA#Vl|0)uO&IHBbiEsJ9DKLn%f_VrXsOWcQhV`qV&B(
+z?}@~;&Q3j<G%o3}F8hW4%x}t8i{GKmzlouk`o>lP?&@yk56!G4Yqqi+N>%ZMZc}7)
+z3B5atU(iJp4K3FbN&0PF)JCXt$+Bc>S*R<V7>MACEIw36*p$T2^tSM&Lz5MmZs_+_
+z^(U6=qT4l<1<}3m8@x>w%|@?mZG=T@g!0A(4b_chrRBMlDuj~X7bwo96)3JlPt?1#
+z{?rn5vPh@sW>xVn-H~dMRvm0As;z2lDp`oO=2R%IYt*V7(Mp4LTA-xValO1gmee~j
+zj5HNB&MR>QQ?#P;V%O^>{($4UX|5PC{UV(EOt8O~$}bpb3r3S|QF~eX1Hp7}ubxVX
+z0kBo8vW`L+E74CQJ^k_i<lJ;hPimSP-%M9zL(?^XfQqz+e|b4q4C!e;QK&FNREk>X
+zsP>Hl&qK9b*rj65L)oa2JXED!s-`@Y$!<<nRGh6+0(5U^PQ+93&Un-)U#o_^c_3-u
+z+;UaV>~=Ytep=IvQmoag(u1|ZMMgUL##h?K)|xR2eOuyF;cjhwGaIt8X1C)f1<^?7
+zMSApP3SG&q)L0E|E*~|x?xN;W*RE-erG_=lSJsI8T)0Q?s`ibww(Zrl?Y7J++csP7
+z)#q;0TB?qLui5AK4Mb8)@C)<dZoSHvKC>$nqJP1*hEu8=qBV<_dZM9dba}7*Y5Gua
+zysJN|i+Ns-yX?G3vM-$KT%wH0qumgLJ#9@&9LL=$qhrmN92s&1vE5)>Nhju_DNIp%
+z$Tz1Ad$>6&6yeU?<gciXb%y(r{ZVl{#iXr2nrih2l1st~Oow%vsA(9;ZMPnolEqTy
+zep?aL!<ac@uG{MObw>J@=n0xUI-OEYxX&#7zUBlbzbPFv{#JikB0ON9WN)oq%Zz2K
+zth!EXw#t(G+-IvynNHb@t(+cg##(L`zqW%lv&mZ;NKq=>GkOK)Y^8dp?dn~lo64h&
+z`AX#jSdCAs_La(cZH=#0ZLL{~+K7!&xyp!L?TnqRY;#2C`QcnVM=qmh)XY<sDfEUr
+zO##!ownQWay*wW6>SK+V>*HxQ9K^G0CQd?+>fvNY<c9*jW<0ax_gH6fqb-t(;pVj{
+z+z~Z%QIpUiD9<Khj1KiB;vEQc8`#{QxuwmRK41<Uyi7n(nnCmg`v4v&;ajQmu_Dyh
+z*3?PbL7I&>ia*UUPZ<)et<P~w(lj-;oOX(7vSXI4>KgMq8iwujbyd^6hsqiL=n>3W
+z^{BeW#32tigjF$7&dX|knr7zsVI+&~V9qJHEHZ0t@f6%X16NDdF=eC)V-_WI!k9zJ
+zoGzM5POr=`v*G2MD$41<>R0X<>J-ZnJ9iK1u=l4t#@NQNJxZ3rR8`A1YN~ol$8-db
+zHe*vGnC@9-4XTpGxg1)qw?WmEqp3L*0_a~DI{0xz4L18p1y(DvC^?>OR4XV&v8s_f
+zzS)Xh<7W>xo%H*VkUvW@Id1-Hf@awoYd&f-6Qhz?-%&!00ai6>Iw{wElxXIXgc{Kp
+zD%I=eVuKn&F=!Z6ubVE&K~IJ|7RLP*mYI;T<mN9C7cq5ijz_SDoA7nl7A??YzEU~4
+z@2T_omiE;9@VsQs)NyTDy)PIEHm8#%i|b>l^48iA#J;pPzcv`r76c=y8pv&@RCg~9
+zQAc(-6Y#0d(9+&_<&D3hOE(^H^i0wCX-;euON}TMYbn(Fd=ZpHg)AtPATBIjR_81i
+zt-&mt(aS~kM3l>S;fmj<5B7y)U3CrfYWxA(;V>2f{l31$GNWMXO3_?;QcHZrkyv*e
+zEoIq!YAszl9?JAC6bmjzd*`EAk|k&=MS<3kwcVh(ER@C5h^CXOak;<cXhwcN9vo>e
+zz{SZTtjFTP)ahq398IyGMaT&G_bs_sMx}=J+BEu!k@w~3CYfF{*8K7)<PSt*ef^oN
+zRU1`M8t+fxdW|n_En@DPwY6hSjYhN`loXGKJ1{lmYzL(#M&%up);6@bBKMJc8!QI4
+zyG6gd#T|TWOUpZ(&)u0FeQV3@&5pda<@O|idxHHY`z_wua=Wq(ZCX~k`J`n&q*ruc
+zORdUSW<AyZ{K5lwYfdF|A}8jOxpl=%mG-)Fs`0p*TgjYqj%thMpE;GxJjlstZsp8$
+z+h5#4%T}~2Ia(3sp=vrI3NoJ<nc~bt*(lUJRL!EzLz(PS0q3D==1>-M)+oWga&fW*
+zYj)-6ec{eXDvcQk76BrmRE^R~&F7=yc%L2%mGmdEckeF_Tej07I}WyJ)s`jOkYg)g
+zFx8;d`|2~Bmn|!zYRbhlfom<}*_^*r%x^GxY=qy5NH|(dlQvBob(Nwbvj>3{S-GRr
+zW7}E44xDAXwFO%~4qxmmXw8~dT}<=1Vp{y<2kMho&}LC+td=e1o5UUnmv2do&L60y
+zY%9}2XQ67<{0tlHIWv@MuvUta#}(R{EiIvh&zVzM>ZNj??=R^~>iu2u7R>qMy(oJz
+zq4$@_Ic272VkyWh<XT^=C<y$|7Yg=Z0&nv}J#Rq8tu-j_QB=dZWV*K_j>B7CI)nm)
+zUUQ&zUo^5Tq+tCxdu-PQnw&A*S8H-cF{_uWM%7M>Y}HzFm7_s>&0YJ^?a0F_V~UbH
+zX>))PL+BVh7<0_rju?aO7(B>7%IHbccs$0W^NW%@X|oXJ_&x>~oKeN@#G+(dvsj98
+zj^3KfW`tBurxsG2U__!#z}m&-!Z<Et^C{Wi*B4Kul41cxT)`SoBHfq5&M(eci7S`_
+zTCZe|F)gr9mz4F{(T_1H@y#+2t=H{LQq~x<!1IZcnZ39j3sUS;o6L6NNl}$^hHS@}
+z6lJ5W=i!1m7s*4J>{3I{syf;+CgG>EslcB77?YBp9NohG7}J>IEA7H^{AWyNj6&a*
+z_*A%C8{f=^Y^>SsI5rCS7?YA+$5MYzHMq`e@m4jLx|YY7l(fcD!|J|M+n8-pH<HD(
+z?Y7J++csP7)#q+A*hg!r#uPrCt`TFndg$F>WE*^gk!*SaLyyKTL(QCInVyMpv%EVJ
+z3rBI307n((8GA|6v|Ak681sr`42Pz&=Bvt<g3;abR;G%|OIZ$yG%nlJ{XROK%5B_{
+zUoq@cyHexeTFy8Qw~&t6m(+CRl+Kbyu8uQUE2Ad^rJ-c1D;nttMUqXyR(YmdOD(`D
+zjZ}JW#2=bFfdA$Wq}&@)1wHAAQ~9<v>nz&kVpjm?GV)UHh9aG*&P$mr(>E&8!R3~<
+z^K5=}LQ|M_({@aFDo9-%fDWYM^5h#m6K7WCv0$DhA%8`W9@7)@u$lWtk=Q;HI~sY|
+z3;0xf&NZ<y8Qj4up{|3`j$QzDbwV^`alFaa+^qW|S!=n1zM_+IG}XM~`hER<SSWBd
+z^t@u1M`96~u(csuwpp|K{N3!<xfcBn-;{IrVh8T&x;n5!*SlRkDB@k%>dXm9e7}bl
+z)%g21e%rQko!H@)=K;EDf3%x+MXk-2Hxlc_My-2_e!1`Knxb=P+a5_G6Znb|pWpMB
+z^<~Zi8yml6z49D9_Uh|-qqG81=Jt1Y>j@=;T0Jdd(Ln}evWIU1mivc&>57&HZTAvH
+z9l)w86-}@&*%Aq@NJOjsKI+t1!^Aua_nY)!j8z<mBK+l+yMd7--?Gfv4Es$=rjzuS
+zg~G`sj!>g+Yr>HzzJe4A6?aFXdT}%o(@VOe;hto&WTB4lcQqyPU`<~=><r=?La`of
+z#Rs*zV1Kf7vD}{CE;hA*)1))6MYhEOza^W#8e>0OEV=SI3%N>4XDm>WMd5H4{={jE
+z%)yjJSUbk0XfFlh)Nrk{@oLRDZNUGij+@YswUfD)ol|NQSfo2`)B_*-Mfb_kuzW>m
+zS&kzhvQ=sGv!-NQ71{ctklFS{sRXcUi_$=0C@q|FZ2w0k(OirF2O~Hk;M%S8*e`R9
+z=MNYU5YC&aWxkaq)y(94tM|@bo#IE2?Q4`Cm$t9P%qr0KHOtRZ+t+AjWoi4GC0|jh
+z+t;XgNZr0B1Le8SlH2-oF`X%EpiXIN|8yWqtI5{+{1s%~`1Y(Z99hT9B77e~oX5*%
+zGdN)0ri#09#yve4N(G}WD~v~!vg)Ybi!aQ!q_8zdy~gr*Z_E~&?BDUgoj$XhkCi#g
+zrVzf(Fqm^cN=?GD)$*;S;l6!jOO9p*@>Kvu-SLETISXahpw0Kqx9wxv3rjw;m&!)~
+zarYA6EE|2J&~C=L1G()cM?2DtJ=bI_CMkHm0hdCEiXqrB7{dOdwKVLLpq3Td(gxmM
+zRCAHpjKy6OZ$B`<aVH+W(}RP?*X<k;t%sNMk7zDmS&lX5A6+@mJjRITN>2U}O^0nq
+zoJTX@m`#ZrG+r2CSuJtDllzNkVI}hwA>8wg)fIPrvBE=N8OlSGzg(nhx(y|kZCgAo
+zW*$#;P0MkbJKdlRO_p(E>kVS#%5sKOZd+x}y(;Z;v_2H<X`E+|;=1qbRCCXXQ_r!(
+z>{Q9MN@(sV*Q$=nk;}TpqH5$eY_?>va-7}%Xo|U$F_wa}+s~>ox?%L-*4&0&HF6s^
+z^UHfRYPn`gK8vPx=#|^8X{~CoGq}k8_TArIWp9GYUaGh&!9Xb0X|?Rw0>&X7rzzJC
+zV7rOBd@EI}r90>LO3m8SonQ9d+O*7mYR`?!_hK#Iz^ul(9P5`jv1Fj+(|+2>rARG3
+ze+Q@R7)xZ!aH*_OGhvqAD7AwE+m;gg7Ob14U^&9ZC$cPGd7(#Zt;aZW6&j=?SN0aI
+z6q44vP)>@rrW0wk=}xs9o1=p~(omgCMGiGuM#tLI`MZo&F7d_AmN=#05=sMWwy?~@
+zDqfS}v}+8>Zef{6$E-1F%r#>M2TGEua3aMoEEotb5BAW04VM?*bYKl`3%1&Vo#jx{
+zK`+9Q*07t66|syhbK)Y0=pwAd!I8mQ#{ox-rLww$!GJ&1A>TbEm)I8I3)YEn)L+)0
+z>Mo}j5iQ1Ipg7`M7D;Nss`~n1aBd%M$zgBKFk_}{_AJ}zfSPS^w2*8=Nk%#AE2Nq_
+zmeNb0mg~56WK}w)8KIah8GCI)F!n2ikl8j7l6C1vTrf9AWH@gJ(%s52q20mzSefJE
+zi!@hvcJ!9kX#RXBr~0#&jb$Z3EEYHy`nTJ+=WGRo#%Nok70t@Igf1?-tf7eO^vus|
+zDnib&e}OlYsVNw1BjUQ{ImUKfEgr*;G1`jAa&Q%YVkyzMR20IQf{Z|aX6>Hh1$%hg
+zUKO3Mi{oW`p>S_kX|5Rdm*kBps`)CpF-5b#g>FnyjaTc8DUvy^jVT&NIyZeZw;Zj5
+z8oj6~O9RaG1`(jPk4y};fn)-#hjlWofR2n9g80*D6J2;sRU)1ab;Jktu28%$d}hCn
+qXWK|JMX$ocadSVtK106i18>ZrAwMr&<M2^VWfTsYFkXO)&;J8^c5He8
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..efd5b0ad1b3b3403f4645795453e7ba477f0185a
+index 0000000000000000000000000000000000000000..e774b84e335e28f389b2cd95eedcd6dce709a649
 GIT binary patch
-literal 92360
-zcmeFa4|tX3ndkqWoPYtTjffU4#Yh|*EjW&)mT@>X5XMr=C`GE&^2!MTdV(oXjFwt{
-zHubPJwTuG}>#`lz214DF$j@b6#)&Sgw4s)^wj-8t*bdtXhIXQ5I&O#Q<aAMgpYL-&
-z@5y^kP9p7e=DL1+nTx~seg56g{oMES=YIaY&-<6Z`ujH~1VJL;PybERLlwUoJp{pp
-z{4z=RSpL7~&AUcv_#611;aPxw<INc?Th_XAL#uZH%a$$v!zGJ{+|g6tGxj8U6+BiQ
-z34)_zd8iE9EX4j_wru&Gcg8%HEt@xI@th%#h>yubUO~JVuE4RdWy@AHwl)rVl+ug%
-zniVDdcHrn88lMQ_c|;VJExYrx&8u2Ju&niS>sGE`xvI3hlMh(TKl2G@9Wwd1pPdLU
-zh={~+*|MfPTh}+Q`IPr7rFY<f1w7!x`=D3pp9PX-{119-*W5Xzkkaxl{D#Gz<rA&@
-zj+J-TgoM*;oR*%4(<|0*yQdfNk%L|&%2HZJ&&hAur`N8?G~Stk{(=R!{LxU%2RyxM
-z@6`>x(f*b#Tf2O9)3WAIH-2hm^O{v_OUwIJPtRB5;OXJ?qO4ptD(|P)H8!;_yKBv7
-zo7b#>zj^WebDmzkZvcn9{MI4AMHVp<g>zla|EfnOlXviRk@LTj|6RuKOayzWz)GZe
-zdnYD>#YBGXy@}vxeGr_D-$H)+o9cg$f(Q9+;rHwQ%^*PyKk+l8#p&YuwRf$dku<Me
-zBR_t1{KU_URqGo+z4Ehb*WVEo#UaSWi^}EcG^|~}vXDMTf7!go^@wta#QS}E<uh8m
-z-#f#2l5xa$oZii@VJ%$0wrS;^clst)ru@qq)~;!~YyJ9_Ynndi=+qSRb@S)$Y+d<j
-z{Pb5Qy%o=b%knYzuI853<~7S!wXAK7T4otKH!Z(&<@&q5BFcuZUfI;zeD}%*&qs;;
-zB>y2Hm+(`f&tY-P<TtPR&UKBgO&Lci3Li%2)61LJtQ?a6u<-ROZ>Chus9-cYH?Kqk
-z&8;T?l6tjdAq7_cW$I<a^*63;bv1PK@=}&N=B!`d+`4{b`F`Z4k2Xi@Dd@SRJcT$T
-z@w5JO>sr^A(76iUO6V+D+tk=H=dRYw$~CRcO;O_`UPL!mk8jq1bJLo&YgXQT*Sd9U
-z*E=2+Z%9t+15E&B(l@9>Yi(ZM+=74?Ha6WMO}zg3XS-fc23vXD_WI|)kvouF_R^c#
-z;PC68PjtQB5Nw^FY+KZqtm>`^+Fm@Ktmsy}jv%-Oz9!WLZHorZ3i6CYld1^Uv;6zc
-zs?Wdv`8i$C+3M)^ie5$6>$o2~yFTCj&iZ`ry!!kr<omuvkiTL~kgppT<c){9U2pbU
-zx?kS<Ke|rc1Rp-_o7wS)|B*E5dxL!AJwbl?LqWdjt3iInt{}g%JIJqE6XZX&KFH_D
-zBl7@AKA8tW^2*#D<e$yHXYko1zw8u{U-sP~zwAXIzwCt|zwBg?U-n&~ei!h}FL^$A
-z{^0qP_1WY^o+l1|;m1M#3or5e5x?j7eb<#kU9yvDRok+`s!QtgRj=3ouqqX79ryPe
-zA8MW(<g4knt1IgBLB)q&YMxu4AD~=8V%*Qt*9ZBFUD~!6)3=#S2<uMYMj37h@>O44
-zHki2)ETy@qgytfnSq06^EznE^TXU3OGA_`&-P2oMhTf_YdaGjeR(pELQuJ1>sYmXT
-zaXmVzM<?~@q#m8rqbH~5?)1I&`R4nA{N?c9d_M^Pmm`zQk;!yq@=9_-cU&f`A0YmN
-z_4%J6mpc*@es;$b$d)oZhVJm|ehmHXM1Q-`Unlz8jsCul{vJht{~7&tqrWcnmqUNz
-zk-FBMhPUR217w}(ZiL6oBSF3k-R973Ar5>uKkDPaf97$;IiEP^yEwUI@^I$KAm5Rk
-zME;YUU*?JW{L7;MB;|kFwSg^{1n8E0?|MeG&hO5AGsyq>#Nf}>KJI#^KHqu;vU#LF
-zpMKcltp=NMXI9teI~tOQyOZa^|9OMNceEO>4f6CITjqMYX=L7r%$3LLM@joQY40ch
-z`|9&2#mn{e`IajK<VRWI?~bd3{2uD;W7OHldXtCmxF*PVC(k91a|f%&K_~H{mz2JV
-z^h#Uxo_gAH+oEaw6t?<G^0=BjZXx^{@`lgl#9MhSx_`Pp-<hn0=W6Ix51vSl>HcZ*
-zEZ0}KvR@bEKQO_{-m3JZ6W{td_tYTYI4#JhUjk`I@?Sm`UZ&OOkE<*X6vxjjAG<X(
-zmiRv){)-mh$$zYPHhGCg`U1i)BHnYLwaabkb9f$aX&T3Sy`4i@CYoRR?)rS=MBEpU
-z|3#K>n&-yo8NM3fOY}20*5}idr||~lH3mQAltxaC$jOB-CmcC7-aZsA8K==lBXTaJ
-zc@+2KKCg#)rXDE0`qa#2)~BW~tEc}`KRTB_aZcASZ|!w`b^4o8nS-qZ^wlrZSF2x6
-zCW49cE87;Gz%5!eLCq1#J#!tuionrNSNJ@^^p8vYev9Q0KPtyxzWL_6=-UfpK_BBq
-z74>=G>>#f(rXzdt;GtmfFVsdlvdacl)@UpkU`%<1etkSLne)Xj|19{%<zGqi{BkmB
-z^^9<g$h>I$Z{-sk!>XtgRf&3+hw?m>u)6qi(v_dSI+CHuV;u1>r>{{zS@-(a4k?Xz
-z8f{!toa2<E?)1GstQr$c%=KQ}1AgW};LP|*x!z?xRpZS44rmQfmf)Z2AChj!&(W4&
-z0zc}!(@&rAw@rD+Wl<`_06B<`+JJa`89wGS?&Od~)rIx>OMDwfJ|7UR<K&}wIb<Bw
-z!J+aE$-Fe5f3x!a8|!Wl@^}nep&L6P_b#(brc;;RHwN2e96Ei6=_9U#;kL=yW}7@1
-z<QpFd^2_fI@=f<(n>^}mlY6mE?!y)#ugq6L*(Q&GvQ2h@<eRzwUtpuiK4FY9TV;~7
-zRh*qd|8BNQHF)me7v5kTtw`j*@G3}OEBi(DCw;q>(b)#{SI)*@tj;W=jh5OPx0Kih
-z^ns+?>THeM%GesBw;Vd6x60^^^JD+zvWHd|(_2lS$#}i>lEnC*HLeNrAHp6gvY*x$
-z$8TOA%m16jw#o9l>BsM>&#$_daf&`y{qG9;TW6a*;BAu!8QUK6w#mcAw#f`<o4ljQ
-zHo4=g_4(D0kY<+~YqxGryyIsrPX_s~(P!+zKGFEQ=Pm4$$FNVju}`|NPm1ghcx!%K
-zHUr~!H~c<<{efO{*ePn`&W>TMXnxwqVJyi!qd1d@V>XIx0gd^YC$S}JlZRzT?8IK7
-zjhij;T!}65H1VIQw=uy#=bEr{zN`LpB5BVvJLj9kd(MxU-(`&afz_G2UKB6bI4=eH
-zyCNIsMQohQh>x7o$g99R`e?q^^L`IJUMJqqh4+a=<wIA^SNk~9*)@t&O`LO$k5%No
-zygvV`Y=brE;);O!g1q3b`N|-_`i&spOdXHxn#OD3;cDZ-*)Vcn3vbtvcGp>3SI;H>
-zFN1vMS5}_Ygf$bExs7<xZ=6g0`GN8z?$3$)3peN4vMH#~_a`g6f07*Q#-O{d_j0%)
-z$e&;BZN2MF4l79Ch(4She<k#<fL_H}Tbo}d-=7BgB)VyWp5&CiD9ATX^|Yoz>l~w%
-zz6csq`JEHw(-Zmqh<HCXo|jLgo}c6GrCpv5evSBvX7l~_?AkZ}b@XrY&nz;Y8gHy0
-zvPa;p5gr{cSM!X#+_RUNONS0*do(T|N|$*UKg!tn(2!sHY245F^pErWggrak<^mg6
-zWnY!GZC;AT<ubO-xDwlDEP0O)jL-2rzdH2nc>gyjle2Ru)AQILnH#7-V}tyUc$RFP
-z-jQ|lG=3HIfn$(^Z0-t+_X6?Y6I;aQz9T)Co3Ed`=^5t8HeY`eJG?{VKz1tqy?&bS
-zYM$2iVy+=L93-k;8&W;!!d;VCNdLnefWA3L8!PSWbG5<YaiodQ&CGA%p!)m-^UIyI
-zOZCx`v*>nYKMt)6J<Z9(Xm%xw>2)QI)+A`{WB&HF3h8@NcaAc2PzF7VwtoAPpBU_*
-z-`q+6*+JQMy0Qh^c4coJ>`X2h)O<ntD{e0NF^Bs+=CTV1Wg~Uq-o<$NGJVF*EYI}8
-zkv^2JgT82IZQ}4w`o1b`XxY@e=mTYMcG8y`?M3jhXs`;qGU|8bzbkn&^U<5(P4h$1
-zusLEbxtREieSGW7bIFh6_i@T{3;f&y|F=TB>MM>1+&i5cekj{c%I5OTE`jzZp#6yg
-z&(ESqt+$-I>6>m&P_B*)vsW6<I-E-;Tz%My{)^W}v=(xaTj%(5bmi7Vkh#`GTs`Wv
-zbmGU=BiyP-U6i+ux}v(&)#RT`Y=>M!Vt9RWena&sSDQGTfKF7Wq$8J4(&y734CT}7
-zpUEd~Q*?I*hd%<1c)jhy?+W;24Ba{n+oCHQ9G*s;Wz^lGv`uBw;ulZ5i+Z4Ral1tA
-zYgk)xepWWwM_skXZ?qm`b$E)?ZD(>J^`UxjC-P96it3)}oiOUH)i)a}JCMuH<RX_g
-z8mBv02ib}4l%|XNxs&>sQ+@1B9PXlR?WA2sc0hbRLF0FhI(ydzHrC|&gTocbN^Lz5
-zW`o0%guTJxDsU$>tIoAPEb>#?E+MR|UvgdO))l%slTKHCYQyw*R+eH~U9}a|pKA1y
-z=<X)%9MX0tE1dq+*1M>8YM)*GR;MCbInp`ah?^jdqm7^A8^0ue>JO}*`*8RX|E0VR
-z(M-5-qm{5SXT1#IP5I>DLo^EIX)?F^mabY~N1G~K-BKT;cH!jGV1DtwCYMe6Hdt|3
-zHkaysr1xBHlCo60en;z0NuEu9z6``yyHlO$YA`vwaGuAB&!q81z57a6XNA*)l}mIL
-zE}ANj<Vd{(bG?$K&j+`Y6@G<$vN1ZHUjFzwxiop%H<;{QUidj3;TPA@aJ`KzWA(GD
-z$D${@p{v*Gf#$3^o<*yi{m?<5o9i|CI$qqf+L-z=#s}}#b36}?<53<1jLT=%pK9Di
-zhP0s(`%=ae^`+5#eJA`4xbaH5h{j;Bq|fYPJSytPX!E4os{Tatg0g)HGV5T>a(xMX
-zRaB>3xshdu+AsAc=f@|>YA559lLhmLo!AgXeF<aLPR6PnW7Qe;C5*4<pJjc?KGL{+
-z8_fPtpHiq}o#wZb`k_81UjH@Tx^%>G^^ovFJ#4am)bX1|ez;v7Y#8ddRJVunB~Goy
-zaenlj9q_eNeX6&`I(!)wu6mYBR;#a^)R7#aelbR??~80IdydyHtJ99h7;V)r(SG$z
-z>sIeL+NGCWzsX2rr1}Q6arFzubuPZQp}mX?U7gd|D_+a(X*^3Ec@{e$s+&e%^-}af
-zm#-Vgy1U>-deC@U81J(qjKfW%kENGt9Bv2>UkYDeD;<Yx%cR9G8i$p3H*!?E_&BV&
-zVo`g^4voKRXQl0B7jyMa_7eK*f_<(}q0FwnHO2ZFWOu&gkgc#WfiR0>{b7!M2&-$p
-zFYQbm*7#JmK2z6STEYwUIT`C$d#&E&@GJD0{iZwhccQ62Y^T#J{TN}czjtBM8Fdia
-z+W(N9TyDJ2b*eno^dslH@kx68_%uKEcUl|TDLS+dwM+3^81MVdJrH<#d3Q9%U{_2!
-zUww0}=d07o+ud7ncs}{K`3CJv{nrh4%)!NV?Uy*}&#lc|K%aBL;8<u$FL6JoCszi_
-z+u-eq&WP_A&+KhPW4qe>(0I#pla04dZ&^QP;-|89CzFRCYe*hm4ZmIV=}|waF+PXC
-zc#P!g(%0HJqcK(badPc9oqpgVFIVC?y%Xnh<<V5>Y@DuarE5nW_!}?2zoR^t5HFgi
-zIUA_c;>z~Ok<RHII!4#_snn0<YAan^cYSt4rQ^x?l)q#qzo>t-XN^T&q*I-Y>^7xw
-z>5>t><l$U@v7J)rr-|eEAY3#wzI64*>=K?`c&85!s(yBSe6&7JeNB$>a?t#7%n<)g
-zV+#Dcvh~Ko`iH`D&Y!Y5KVLTg?DQ6ecaCv=rz=;Jw@>hM^)IV1Xf%y+{ho`1pOYDW
-zk<3iSF+Lh%eAN2*&M%U&rFDEn;r*3Ed?YQ6^6SXL6PQE)j;BtOtJ<Q|d%xK{))z$O
-z^s?`@`Z1aI(xJBW8`8@JZ4Y&MT4SKacvx_|wnvy`QqJzmWj%k%u}+7sEbdwTiS5Vc
-zyxWD9DGy_0A-|t6PRd4gb*EwMnYWc%i|b@YI`QlB^UocOd2zR%hshoq%6Bx`&yVr?
-zG`z<5p46rW*c%FH3klg7<WahhbVl}NFZ1;#Zv$k#4bZFpu6j`Q<cw{AT5ki;ubLeo
-zdsV-4XK8-`{<iRQYdPi4F327jHpg{-Hpc1<gKP!a85cV`-iC9$(ykn@VAkrk>vNjC
-zJ<$-eCu)c6iK4MRSu(aKV`F=kJpDO`XkHzS?Y$TKv8vPetqrlU9htbXy}^&|gt@v_
-zTQasMX-|}EXD4HOzm3C@T|LwX`g%(EP#<V{N%y8h%HON>zCJ=vbk%N#jqQZFKHi0q
-zuHX27tMT29KTVeJ$1n8b5Auy{IoF>dW0kXXuiv$A;<|p2{EFhn_7kfrgU_^`=lkzi
-ze3h#s3$GFVXq_Ny`4#L2@9t_cIT!4PUag~$9)I!Io%MEu=18S>194p+Nt~#CcTl%?
-z($5sx4c<>>+Xrt>7mP<vpS{dI7?ULXVfri`voxk<V`Eya<tw|QpwA|63p5zb4(tc5
-z1Iljb>bJ7Gxf%UWhvpEqo)6ahBKyJdhrg3U(%U3iY!Y}in`9#O#nypr&c1N)C$deT
-zFF8c}3ECgmc?{8WZH@Fbgm?X^<D<vr!!v1ms)Ar*73T)9&t@Hno$>1GxAOXN;Kj&o
-z^~B08TT1!LHn6ti?G*K?P0&}}uZ`NC*)^&o(cDY+s7vqbxy6s{8l!bCy0gB;>n~~(
-zKCRNYaU*H*3*(k|JAQdqK4r(PCgY)q*Z!ftsg`tVD>@V7&cb1XU8DY<IvAZ%(>Z`>
-z4yCdFx49pGM&kr^#I0X5m)k{q88$Cuo}zPa+8h3J+K8QVvo#6TQ<Z%ec1E=3+QC|b
-z>Y3XgNV1M_341%SvuxU1ES_uKJhV1Jn~VBm)xDfsub%>6w%#c}w?^aE8?=A<Zt}Hx
-zl-43nxp3Kn^tZ_i7=wq_HnqngUOTlWK^r>Z;@-k~-z3f|+BvCRS+h0v5w5j#?Gd>3
-zqSzSsS4ry|wWi*Yq;F?keP_0sXXaOKtw!=#$o$aO5}h4Dz8(1O#Lv|gx1K^Cthq$>
-z+13(lJ*8Y-(|Me@oj}{$QbpgQb1<qyRTak9z{Pg{Qu*k-iq<oEW{fsl;*8I#Booxp
-zWY_Dx?p%xZ>%0Gne4b5SOntZ**<TF*7Z3I|5YG9L<L`8Pb8f#llBakWfQNtbXKfOk
-zk9hs_4P9?06YiYn+x7G9`uTSKe7paAyZ?N<|Fp5<?eRT2m+|)a?%%n1+y2yCsIbQJ
-zw*C39YkwA<jcQ09-o-qka5jpwL-sC^-V0Lwv~w?RuEN=)ot!<|<<A#&__GroS>8Kg
-z9-}#)&Ri7wIc)zN^94Ic#d#v;N!l|gnkzAXDw-=XZy>L&wvRj6=1P8Uq<M(Ve?Gyw
-zf#yGxn3D|6kD|3poi)mFHpu2bi;Lzz;;oB$RL-9t+Qr$S=$#v#yVZLwaelhlH+Thp
-zYS>rP{7UP0(HTn7+DUrNX`}O1(K<_fUKX8Wa_6wvZ&5m}aYSdC#7hVKiq_Cv$<8w=
-zZs}R3f73ZqR`Yl}NB6JYUzeLJy<Jz|uB&G}pMSfq7T%}qdb?lU_IAH&=cdc`tEbn-
-z&PTJ4*3mGTwQkPfWTy&W)VQs8V{?q{Io2Pw4w>T&We$5l=a_Sh{T+(Se#h}j+wX|h
-zcssBsbbgn0XZN18#xU6rcGlp0#^b7P?L~-2w4c_;7^|`K6~f}<Z}fifkWIiC%zl;|
-zL;d-oU4Bg6$(Y)~n&yWXqjg5|><ZS#8<x0t%!cvE8m-Q24&%|;4(Az<+Ml4TMLc42
-zyd{s=Km{JLfpku97j(t5&bR5zbHwAz3D4s@%E|Fu(td0>kM8_QwU;A%9_XZqN7lLD
-zl1J8c3q1ODTdi?B9<w?Jwy414QxT8n2A^phTdeEC{%e!%IhD$@3;!DS2)gK-b)H7L
-z@2b^aN42X@alY+Lht9l?UI(HxRuTW&Kec@lzwbq!+NV=lbPmStg^{P?L~`F0mFfI4
-zWnx{}?LC4@JFHCjyE4_<UZN{guP+nrq^L~&D*qXjsljL!%7ojMi98(tNu6!;WrC*j
-zBhPr5Zi>ouA!V9idYWJ6u7dPfyQ?5-ueQ&GJ~~GzFaEB)y|MB(>HMyASW@1s;+{cy
-z`%B7;+m*N1m$x%k-mLd)vN(|r&!fE3O^*3NF1d72`vhG{?d5USC_0CQ+vF&$9=wqK
-zGTG1SPcA3zxO0Q2zH=qWy8R#G9+L=upL*lwqPAZcY-P`M%X9Q8nS}PZc$fGrd(UP7
-z+5R2wm;GKMbhl~`BRYevKIm2L&#4c3&#$SItnsU}b!F=y{!S;Iws-34U_*u1$&}(c
-z*km$!%XZakv<h_)x079`@gQCbb+F0%HCUWTCy!HJ(+OioGBlm^TmA)|;C6JAw#Qpe
-zCm*@$x2zMFm-gV_HTdr$om}#3>ZHl<VS{CLg1^&A*7k<2uS<HJyr)<v4T^gP?WEIa
-z6?B5z$&Nf+AJAmy)~&Deezg`S(#b~(I+==2Za1CuTK)x{;C6KTt&HV#@}1xNE$hVP
-zWjd*W$BS!{e-*X8I@*@xr+wwzKe{vjJ+6#AvzOk}k3DgM_Xyr>2o7t0UN<gys{QJ=
-zMgAQ=*M8aS-tzTWyH$JrDKtL}&6oXM45W8$R__x<^X$`W?VX|cJRAFjeaJ-jarXKK
-zxbtOzeZu*=$HbrGh~Mo}&fY4T$7aty-1pDHQ^&s$<X_GP`Tj4lw+XMDGuS%tmDuy2
-z=-ub3J?@<~t;?{+;_hZ)ym$ArU@sNkZ%%TK-tBFlJNV{52KhIC#_u2a{Vl)0=Jz-J
-zzQ?bZ-?#bw1;78o@4xZu<o9R%zNU9ur}ji^Je}mHwhUi)G$w64IrRnhTffAfY_>js
-zigeORA8C)1b|721b>Oqe=}&S0hoL?HzO_EyorcHP@{Z`8^?9w&^nJFz=njw1(5Juh
-z&-G8uclnMhpD(<-eBu8%{14QQ**b6s`Tl3zkHzwB^6@_9^KByEPx*ZBD9-n0pKoTg
-ze375a7a1N$h6BCiyNrDQJML#=`QGZ|ebVQ9EBSuX=ew*pUoIbT<!v7=-@o<r{+fLL
-zhJ2gGZXLLpeE$;n4`ca$)W^HY=lfCey~*c$b8)`!^7-aQ%l98Wy`PcKKag+otgQnd
-zCf|PCe;3R5Lq1-E&-X**+u-y4aB;o}(3SU)&-Zwh)vH&iS9SR1u*>ysRu?vOjyY@&
-z`#I{P28c88&)f@uJ)KDe`*g>Wo(Fi=IhcWe<{T1ktsM@$>uVQL7oXDkDa9N3Z2ePp
-ziQt2}SE7o16!w2Or=mRdJjnB}`0;YZr1|A+rli?S@%q1yHmCZ~LA%rYf;rC741AC_
-zl+>AtYQpTCU*GR~`MlrD=Xa6M`@MWVSS%m$t1~(Og`e8Nz({i9EQZ!N?Ol1zrEV>f
-zlh#Hx|1HRg=SWU^@3ISbK~A^E<aBF^oCqt(iRVa8?Z1wk=%<{VSU=s#+)(GS2HvZ_
-zhBIKSw-)4dv6oY=m(#__sn*Nsz2)V!(#xp|+l=zuF}yx${<@U%Y7VRCPZrBb^IUAl
-zf}D6R$cgpXF5Cq<eK01c50=P@u!5X;j^uRRuOlbs4pyJ+%!JP647^MA$=*>c$myM4
-zPUm?!ac@RHcV@W$^j+oU^ltblH@>?1|1QeK88_uU@UHr&e)1>KQ{Vg*(M)t}eEsgV
-zZHul*aPJ4>Y-9&V<7hOlD!uGq)!#R>XK#(ae;Xf5ZLF&=oa;ICTe^Fu+_*dZ9p4Mx
-zog~Z8so+kdihTOY%BR#Hu-4($Ju(+n(7#0M9>wb&ZcRk>mwKF|-fAzy+L_uuKiYie
-z=?d<c;P*JcZhnteAj_)mrl~wX%<mz75Au6}-~IgV;deK`_59ZGTg~rwez)<vh2J86
-zH}ady?>c_h^1FuL)%-5wH?4wp^d83S_pru*-OqZ=PCxg{Oq`p)YwBE=Ms+7Ww!)2H
-z+OKFNtPeXT{o{nQV>CBtemRjJcM0#}znUP7JLP_wD87^J)j4_HO?HL5|0CEslRXi=
-zm#%k7(mzk+Tj5K4BhkAh>9KQNe%kkF`~`PUU@y6Re#tZWxIBK9;GT-n=lhw83U^nV
-z=6C5g60Yp3YpoS?^Np5=v-hGiS(&-#y7i&E##iM3X@i{^OJ6ZJpMEjH9S)><DUnYj
-zw?^bAI?G?2lW%%yj@_$uj`5tvuMt0mXMQ;+pMC@PFXj~PC|LfhIr+@X`2QULAJ54z
-z)4tG{dUt<8<4^G)KiA#SlKxR5|DTe<q|BA`o~q)mqhY#1$4)ojO}M;@bh9g_n@7EF
-z9{0NGF44{7qv+-dbVEHV(#?0RY)&^%#&q*^OgGP*fo`5l4C&^Z=!UxLbn_f?u{?@(
-zGi{>j<_C%V$6LH^u17atO>k!zx_JcMP|q8w?@l*gMK_O>=mx(={G4u{M%LfN{bWox
-z&!C$}@qYsUT_w8d#{UO%3c9%_(hcix!*oNNbh>${jBZxPbhF0m=5DW>^(DHwdlcQ=
-zgKlW|MY?$?rki_Xy16f=oBPi|HxI^i^8mV`Z*jVL5V=?$#k#3D&vf%}BLC;hyl$4G
-zo8^go<0^Es3f<5zHPSyh-7H5pt4ef(Un71_H}@gy2XNmT)6M<pW)1%L;J>;=H|z0#
-zct|&Y$@;BpH>^7j)6IikH@B71&DAm8T;p|fo!8B^CAzt86y3~4H}um*y16Z;o9kn`
-zxgn;T8_z&Dx5RX_2;DFiINjWWTr7`b-Ms8|b9*9x{>@%D_oACC65N}IZmvW(ccUA|
-z6Q`Ri(9M-4y1}mzKc|};ko6+m*T-~oBf7Z;|GD^IU80+7@xOgYH{6$Jx?%lvm~I~T
-zx|vo+H{2(rd9xb_xRc0@H)FkSDoS)Sb`;%=M>pLix|tT!%{ejMOpNK~f-}&~)R=BA
-zLN||k-AqL;mPd(hCRw|=ERpBFBX^%=`Vn-)ok)$l&<*z}r5{2!4}0DGf_sU6SzkQf
-z;Ma(s)6GO=eGz$`6VuHF=;jUG=Y#*R>Wjyl3gTZjq?<&f8`go3`*%^A8Se*@<GM54
-z0VJEx&8?U#b!U@@Z@46IcR1;tdYx;}vG!lZoJw|F=I62p_&tHF6P(|`pLG@IFE?kh
-z_hC3rY9?OhiMjd9<>%*LnI9wy^RLVg=D7J6cXqq^m%<`@S<jKZoW@>BzZ~R$$o#b2
-zJgjem&BJ8d=$%>DKR;@Au*S~iy8nqV)v?TrzJBdu&MJF`d!edXXQ}3XA$P~@F78_`
-zv1eLe;?6Q`ntj-FMeY7k(@pxjtj~z{H$ClcPn&zcifDH;S0zu;clWtHPCDe0c`mvO
-zPV+<Vpdw!8o9O;I?!Nl2w~3xCrnQ<oqGW^X3`+V5(#zJs&Wi5ZXe6D=p7!@hEq{`F
-z@-%XICUEs6{UmkoX<zrad#Z`Mr!?-TBU>kSAC-7X!;5G}_RR7hz~hVfbN5u^kBaMF
-z`p5N-pJ?9d^!KAgK8^ld-_5%BusZlvUk6!>)f~0Eslw{uBLVLbVP7ZZf6GuEe1!V<
-zRlQ@xyB6^}h<{NX#I3c1qB?kGtPWmTQU?hu)Ipw0>)_RAQU{q2xH@=StPVbi?4vq(
-zzpp2^_<HhCv2L4hDN_d@@O6-RMo}HS&DX(ueI2~p)4tu)zORJ#?Im?^xvzuwME3#u
-zyYYypdx~{0@$!3p9b8>ZYxVM29b8qW4wBB*!BxiN^3~LrHOOJT)xqd}FE=)=p$@Ju
-zse|}MclU~yG`uuIvrq@`gU9>ve*pgnOX}c5<?G<H>ZfFPv(7)P4&E5`gSL0n-H@<4
-zxQIH)JlyuYKRHwf7f}aq)cO+V+2VB&|DrmGTkA4Kb@1V#bp!5$d#a9gs6szTSfLK`
-zTv`ViSk9my)ZIqR@6L(U!MVsjs)N`1dNSVElk1Ch+dRHZ9lS2;2iaSW&*{$bb?|Cm
-z2e0t7Cwkh~l+d17QU@>ab?{1G2iaeD{UGr&SD@P~se@PhIykkM*6Islb?~Axb&zzf
-z4qoKz;8g0%G~{rZuY;`hME651pGF<LtfUU&*NC4RgW)9&FS@t5PzSGp$7}Jw4*$6&
-zb@2M~b&&5;lwEhxzQ*!%f~Q<w=hQz{Za?GDAO7b18R;Kk6TIy25`4M*U4p7JTCaI4
-z<XxtJ_4lOS&ZBtUZXh}GJ7xbCvMRThR&-`4TjlNo>}WVo>t?ZYL#)|zM%dO`bxufY
-z)5F)yqJ1W<S0()UA+7amJx%pd?V<zwPPSHb2cv8_y~p`h>qXIhHlm^X4ecH)-Ea7@
-z!K(9V-@K!$^DVNY-e8Q+HQd~zwV7|k`Cx4?;v-k9a~8Y@4KF&+qH`=&mslUAwf?u_
-zN9S6Urm%+#4ZRO6z7%!|&t0|tez*dE3mtziMf|Zo!MlZv-TS&uPDAVFcK*fl*I&$^
-z&fT2RK67sgkI*UbNSNcXvzSNSSD-y($#GA_Cv){8KCxkj<Y?z=OpbQ`Ba&kmeasp0
-z$v9msOS_lAWa;met4-KldtR2hpCRJ&zKBoetwnr#JI>Xa&KRHlC46Sjkk8%{KA|%t
-zPtRv(37^o8_*@e4$sFz*emz%r7itdIU0dPq407{0?O(7@AwSLI9!vUn;bmK6tH{2d
-z@8@#5J4rm~Zo$ii*xHfpqI&_NaQU?}ujBGn=Vx~<+)`xIbiLo573q=PulZmOH?(^)
-zG214JllS{<k^7%;%g(8xjOFHd!5Ew4S%0ASmHmAgS)Cj4^}N^4sub!^(;1#|>9ll(
-zwg{bqUI=sbJgYki7Z&;o-MJ9yC7S2FrZTJFV16@9Kgr~feq>7~Kgm4X?90dcqq_=p
-zj#B#zw+-osFsC2VJN@W<B)ZTX+v&%L7wHE-yAR<L#riqVof{d_5AI?5@o@_J@$N`J
-zJ(Te+_2cX}ub(D6JL1}Rr=43V=%?Wf&%0!YpLZ$fhcKs~rev{xpk1mT?N2)WVEYf#
-zPk&55S?%?NgWdFZuKo1-`>ohZv3;PWL;4}i>4)^zemMIU*N+b`(hq*tem+^OpMNaT
-z5AI?5@o@_J@$N`J3(rJ9?0FX2PlMf8<@A%a`ydMXsns1<XE2sES-L{|flfg`ggN~*
-zR2J)}*6x?kI1#m<8hF2Wr1L(1>h6G|`UTr^JWDQR?c)W%xqYm0wDi1BIh*Ir2HC!q
-zd=DzIweRA9y+VIZhrQS6S$8sH13jes0=PGzhwp9lsBf;~+{{k@tqYZ<@9ZG|8S;JQ
-z;-T{`rQyv!Jmb=j8<xJ&hqsRq{s|wR8zKB-KKzgmKko0EE7#6D{Cy`8?{i7pkz6*Y
-za(u|s8Tbw8Tot3kH@TcV3j6oJ20xlx<=|%ken#EjerIfd`<?YqeLZ{opxfVed*-&k
-zy?W7^?{D|<y^7aAKd+0rG2$H$Z`T{Un^1M-|K@r#e#vjQ-V~h^>^;w&RcL&M_0;>5
-z{+t5uTwo7no=dRK#5~KLYl+^?(7LJCPc`4tI=<HPbvA)>32(5E@hg76<o64HKj-%<
-zzn}7Znct83v2L4riQkL-e!%a$iNblnDxE9vXSFiV%yDs|amB5>Kb~N{d5*2SKkE0~
-z9`yS<PZaO#tbTBgThG3MwecG`OR)OkMBc4!ceC%p7?CD#tvO{LV*iM_TI1t$+@6K@
-z|J4^YlRonh`ykzO^2-U+-m%(q)04;vp50piu97_2S9~Su*U%rad>rksdK!<|-qG@1
-z(0&w}&{n?7;3r!DX?z0zC;dLl(}{eW_Kxpwc*^bT$7O>oi)3?OOg8s;*(~>b-e1D!
-z@)Fss_OiLx%LW}e*{t%ixvxYvq|dB^_j@T9Vd*tqHV+^hbn9eucS)YBW3pKvlg%1W
-zW4)Kn-O#=Vn$T{9c9CrE$NzyL+5CPa8||ydW%Fu@Y;K9k=0-1@YdoK~mGF5@iEOU(
-zvRUM1LtS>Vxz@|(mJ->JK65R+FQQz8rRRFt+>UHs_Ich=lIL|X*<2r!&0J68dM}$B
-zpnW4Wq1_1WBH7%A|LsGv`Gxl9RByDe9hc27OJs9JOg7WJY{q*&uPotne2Hu(df8m&
-zW%CO!n{&Kut|*ZW=`-iR`(>1iu=E99HdiB?pZh$gmgG4xCYy_5vbn(1xX8<9Dzv9T
-z6WWc?E|Sfa_+LFFo5v#AXkR%d8}(sDZR!oyb)WJ5%`g2L^pE`-bVUiDKelz_LVxqq
-z!1|kC*&1^C4KEwkOI@GvMtyOAL;4JBsExm3ZJIEBN5%CwW0B3Tylj3^vR3`m*jn|^
-zEgwhwRZrvRevSGU(EcSfq1_1WBH2_Ro3TT(SrN&GHG#xrTMKGN25w*XrD#u0=ROy+
-z9^m(Nf22J%t;xw>XJh@o?vL2dcu9L|%%_>d<f46D{G&OI+t<adHMGk$&x!VRAC2v)
-zJ!*Suvf~(+7G(%4>}T*C?Pt^x=FZ3^Kjz*)(02-R{vDn44=De4gZzciD1A5Q%i(YL
-zorCmu$?NGv{#;~P*5<A9`^(7H?h>@QtsCQ>iPgC$eVu#6*ST+&=>L(DI`^orb5C1c
-z&^o5;t9JQ1_e@EhBYkEUb>eC23t{PQU+13Fx!H4(A>-r|C3!v?t8<UX>Rh*{@wl&Z
-zPeA)g$pQM%E~<0i#Q(W^+4ox|r*E@HW4covy4iI1)tK(SO8ke*>+Y4?f6KaiSUe~4
-zyWq+7pRBzMYX=WT`+8b?{=}fZnc>biJfwX+t%vEnFZV1&?cgEW!Gqe@W3M&d4)8B(
-z2e|cZnxb}aL988IP|^+vE3^Zii`oHeqB-v9bLScFkIC|W%6DIRS$=2PZ&{Z2nJo3r
-z;9Ir>*6@q^-n(P%V2y7FxA=B&Pf4A;rKBC)?%Tn7-ww0}DO>M0-wy6BX$Pd&H^;O$
-ztnb#Pm-}{bug*nZVC`UaNuIaI+QF(=J6P^%tn%$(HMG}26WWc?E@}t&;D7H>JK()Q
-zYX@3aWlh!TZc$8ki-><?dEH&!_*>T9jpRi;=%c@M?SM6|VeR1hXgnxh-&%cx#)F}?
-ztwKAvfp&1c#sgb(EQ|;E7qtW2IqqR8Y6thn_P6i1{q4edKv<z2@Lbdm^e#E;pH7z7
-z#bkLM<-4}LEXOVXEz9y+ljR>H%eQO?%(aTz!IiOgaG7rh=lFJTbxEB(r=%TR;M>6!
-z(RjdGqT0bk-wv)UX$PdwOr)M(K^-Pc-@|h@$Tb=dF0ytott8J2V(nmRtQ}nBX-xI)
-zU>dY9gC?}K|6bG%uEzhGp?1)KoNPR>a}!Q?<72uTPyDgvb=TbVTh`rJ@}eD#y2n1&
-z@3D_9zsFv;;x}JIOg}v*AFUyd_MNdeSr0wE_MLo>u9|hk%B_9x<=sEt>xkA52i_ff
-z<{g;AJAbU*>ig?&{sHgi@$S%@yhrrr`}pzh%$v2+yS=L?ebA2YnB&*Zc!wiDKzLMF
-zb=Ip7Kh2$gh5lZ7@6h^VQ5xu$OY`?WO~$YF6{Ufna%t2zDWCRoY25ozW>>{|`=L*h
-zE0@N-J2gBF?`6Au4*4|S@b?qELV4@(vwJL-48FoUY6A`YcsFgp+nr8MACy1!AA7*P
-zC&u#t&*wsS;DfXu+>zajObh232Wm^+{~;{u=M*pM=e`D=a{Wqu!t6}P1Nto|!)UEs
-zeUoH4Fj5))9#fb4Q@^JaFQe|+$YpOEddG?9sEo3ax^NfD$Qrlub+TZcx-S0C9ASkr
-z@*I_M)ftpg_h^h(#>Kvj(K_&OJ=!=HAG?am=+?o)p)&IBd7+HF^VNmBP{w!1%J}Y*
-zG7?rOBhOJ8HJ-hd9(Cqnv@(vmMqT<2mfn3+yM1@;9jw)7zSgMyjn_ZFu<P{Nn^>o=
-z9C4j`*!xkv{+rF5hit@_bKh)!kZ(3W#5bGQ1o>6#)jzp+k$dc(IQ3E7pG_Tf?<7+P
-z<M(H$vCY2lOMbr^s^cry@a<S^uBHe1?(jpjJ<esy{(41cQn9<5vF$GZ;<CYJY~jl<
-z;cQy`yU6#KjB)qd7<V~mW1AmfUxIh2yR@g5d{55+^mKpCPV}O08SRG0uhTvrg-7*;
-znFlP-xB7Nh8a^B0Q)xsq4Zr$cb>kz9d(0_xC${>UD*E6r`ZF5wZ~W@)YUUBXt6MQ<
-z>uT)R=3N16jFLyNg&#-!;AQTZt@;jh`bp<+`K%({)8<a!BDDT5eVg~Y-7s?t<N0mK
-z@^<*d#?_toIwxuOSJXSc)A%c&G&Fa1vY*ZKf258yQ<nL@Um2D6m*M?Jcz*`ozv=QF
-z;(glKt@<W*`bFc%$!HP0zhv(8T%qUvdhd6GVP-D8Uk~p$!269O@Q%OZ9hwpEt3B_T
-zGvWQ4W4Erp7T$jZ?>~0=4)M<ShV{MW^v{hS$2<0C<`?EpUn%swU+w*_G0a>E?^nY+
-z_EF=tBk+#D;~kn2?|<NVZ$AUxbv}RfWtzKcE#JLwT;N^bPRLv#JHYO!cf4PLea>9g
-z<#|zz_o<%uX`c6s;C(8*WBWB;HUjVXJ37#ec%K08@w%P44;zfS7C)<7#a?LUf*}9<
-z#Jy{EeZGVG);O(dYvXv&!+7GecGx%(eXv%TImh#K4t>Hz?iHZ^R`M=g=H;{0He7iV
-z=zwu)%iO?tI)9A4XVLry{Y3?ISS!=Fg`;m)r^(OpUO`@CEzNSCn|O9--`AL5Iu<TI
-zU7D|w<`D}Yp?oi@eClII`cAXXRgU(~D`z^~dm>T!l<&)&`4eyEXZiEK`j*ReF9iN|
-zuYc{3?!i~SrQgdb{oX<qavC^WbCD|Uro4FYP%!uxO4pHHHu(DI=XMd_jR^y1(Fd}h
-zIUf1W{o<E@miWfyUy1J5uf$K^@)mE37bH~IE*|^`&hEs^##&UqY6AJeo9_Co`dIx_
-zhl2JGIzA~={B8{KEqbruuQKUQ4Qz~}I7PHYv$8%vE_ma`s&~wLNMm@P-%~f9>I>fx
-zDk~Sxs73cziqGf{5BEKRG4>r}@iR=GqokXrvhwb1)dc3))!2vC{w|P&Wb~nzhS6#W
-z4lD0E&JRj9l2a}wpEny!7q1|j0pwBzoh#l`|IkO~@a{<BiU;_9&{v{3{}yLIi{uaA
-zrMjJ;Fx?)9-#++t<r-sUkLy}x2_zHb8~2aXw>gmL6o2D^G=+ZdU(_yQdi=jBuX1Nq
-zhS_orRov@W-DBTX;;ycK|9wpAqrQ!ms|^lUI;=Q6MwqNPJQj?7AEn3L0bFX|Vaq?u
-zI#}V`*9|%!r*wQX%Z)uYUg{pKF`T0_x}eJ!bot7?u%`>2bY@7lUw3cfa6Ql6oeB31
-zK-qvgH>Yn_Uw%n_zPs1HeHph0yPGV$n)*^rU#|DM^quYZK}X-@)H$tJlfl-xiL-yE
-zcRc1oOY0j&G-}Jxz^^Qg<OnqS%Y2s;zfu}Ez{g{qf%{(3GWzvyY}F!OvSsMt7k%GT
-zc5Zi*#c{T7QuCrIX6s_->RU0L*txs0bH9$A`>30DagK^KI;SN$cl7h!Yiw4%3qhYb
-z?0Y8Clg`sgPYF=%SABH{`qEkKok`twVBgWK^LFpfvur;~_Z8|JMoQBK>U;CuoqVII
-zDLR*`^9ZtId>!evx}*5H&e(G{_MEhP$Mj7n_pL7CjTL{yIZN2&?;=AtDq~k?f^Vn#
-zIz_ovr|3Tqs~&uWv4-=i+zVy>QgpUc{j1|4>uEsCon?cT&VuUB!5T2S@971`(k|pN
-z-`jAbmcNPe_ebT&j^kdNLiw@b)OK9nwXx@9{MnbExUT%fbLA(FD?hZQC!KTtwaZUh
-z>H60#Kb^BHf96ce55JE!MdvDQFS1bn-dH(1W6#;xb28GuFF)~2|GxZ9{@%0Sr2M4)
-zP0GK}m%sf?%HLFh{-g5S`;CS2vo<)S|JZXf{v7GQ((Av{>%Y?L|6fpk`1(!CUrqVr
-zZC&4^a&?dPrgow>sP<Fk?Sd+O53<S5jxHc=uA#zzU(kO~p7^?3Q13Fhy6ov`O+30!
-z#Ptu}E-0N3{FVQ%c65iOeb-rigz+UlqHoH|M$>)mxn7g8?yAjo+V^0G?j)i=BHVZ~
-zxyv?>?sjzT)uk8DvG2yhzvNlqBWvelEl<9WMStkhBBzn!A*&Z7S;?l&HHpvi-)B41
-zc}8T@EAM}iJ(c{|e;2HrZBz8_QNvj5nhSe$choLy4zuf6_klO}ZVq*XwV174{q|0a
-z|F%KTkX=)<US(q>U78;QdZioAMaW*q?udV{K=pIjw?3U;>|38%OMkJ^8=~7Z3f+b>
-zbe&&}Zf$wG9m(>%j`YoMeUDUkmX-1sy>C@oX01KY-iPd~q~1e8R-(h2#4tLHZ{=h+
-z(s%KUpGlsMw+k9R(WCF(IeUeD_b&F#We;|-=PO%K_nyV=CcVoN=kYP#AMZ-uTCn}}
-z-Mdn|Pv-&RX}UQVKz_`*`2ITfk*y`_UAC!yE%80HUw!9-zJYgcj5lm4XLn60YfE)d
-zjyi86&GBo4x(`}@n)5hX^gsIc!!G(HM^o>_H<(T8_G9S-)qfPmj3#?O$))Al#{R|r
-zI~2D%{`3vOUF4&FP~lNN9pt0$Uq}6Np`WZZn*Ym<Yo93CH3got#rII>%JH1_JY#pN
-z-!9_0GsZK|*2ga@<~h5_y`!f-dsLnYcYSBA(cJ5K&iJvoz;m+r?&h*Q_eOFq!*hR(
-zXP!;YA1mgW{#@Tev^mx&aweZR&sooNyXW~E(Yt;05z6N+>qoM}zLSovKTOuOvgsn5
-z(%Xjg9U7l?j!Ac&y87Vy6L=?2H_kzGRJju#FT)~VhFobGde5*74ZaM_S%#INDOLua
-zo$Rw^%7CBai9B5ypgC$82#=TH63TFKnfFj6|E@dTyJ9^R{%*V+Ze+-uH8}h`$Wr?=
-z_TJ(`zBMy+7wruj&upJYHn+y_T&>lOXB)IuHHSSLyMMOaIQV9=f;eaK%}RS8g?kP1
-z(fFsk0t?UVDeGMn`<CTY=H>jDYw8Z!H`!y>J1RSq7rT1KSb0Zdw0F!q5d(G);}+_O
-zn-jS`TKrXKZbn}5_gCWS^u82v%BK56pDyF;N>Mua8Y$feeY*B?=_u1k=`Q!_qPkg}
-z-^l4k-J{dKVRTO-`-VSZZ_e$}vDX~klX%4!&P?~x`|F?oFy9HS7;$gz&Fq-Nr*4|W
-zxq<V$UT+w)Rb#^|UkaWYpswkjQQhBnoNpPAN9H$R@4U)Ba^ac%?!q|&<ZE{aYp*Wa
-zuhSjElkw+O%v;%C$WHCi`vmGA^nIsjoYTC&?@O#%emKY<|ETu6w8k){P;ZV`*u4J~
-zd*uV%H~Y$m>+`R2AK<Ide6^`!>#OYBzj9NM*L}5dT}5}I9@kx{%H#dT@4u^me1&}H
-zd%cg8PdEJQTiCC@PkSVK@4?+QTBw7ZwQ%+J_<Mam?<>y7y>CT6QN0{7A7s^COFp%d
-zmAzYAR32+H+m1*3wzb9i+~ms>)#DNKVeIT?taz37+r|2f?VAs^sXp2``EEN-os0H|
-z<NG2X@cBgbe#Cs}bG3H%D*Z<nYeo9LM^SnF9izu}x2W_(`;X@{YC9?2%jV35qwxnr
-z?c~+_&b*x*r(X3@uT<{WKmYNrQ#UQ{qHT=WZi?m#Nv(mNhb_r@+h|_UY3~3R+|(b<
-z8~i+>&`<jP?Ve%#+sqf9MK{)dXhYNowWDWC>YlAFnQh+H;Pb?G9T(frR-MxNW_8@Y
-z#xGj$(|a*p$qM&wrtIvZxk!Iv_*}&K*_=UpC0*2|=zV#;rx@39^xX&9>Rs8P_uPy4
-zYbvugieC|b4fam_F#c-G@aOzu{3T=jmGtNKU2`wL-l2O9iumg+vtEi{5r0{`17R3{
-zO=ad>&M(Ga!_d75`W{Y^{A!2hbGamZmgu&0{?(mzYm!^tx8(f%E3VJ3?77AD0GnI$
-zEa_2erWe!4myWUezP9@4j)t3iba%FWlbkv6FkU7V(eAdn)z)d$uU*WeH8(2erT9B|
-zUCbGVc!|DYK85eZOrdSPyD%PH;_X;{@5X)ahk1y2e1$Pfb2iy|T}gY#Tl0g`Z}8*@
-zlbxzH8PRa_A?APG{gJIm|4urE=^km>dit)o`Uc%=tvp4uFux&=*@tFN>ik<5vWmu)
-zg58ZSWk0%ayC=!Nz%%zfiRXqPo^!-izIBXEg*hDI#y59*5I&7?<DK>I+N9a)^b_J;
-z>7A{Lzwz(agveL<EBz&;FO-3J@iKhJmm%ZF#-0Amo7#)nz(Y2%<Ec;<&i1M-*;rXf
-zGpsCxD_!Ak65>SV>CW1EdUsP)rpZ>OC~y2lFS;AV>801~cG0U5UE&s%k2LY}VRSkj
-zwU?H!)2|WIXSn!TTiYAbmCfP0dSm4y&9L$j?#c%p@u9WKLirk^J*cRBoLiI5h~s42
-z>B~nv@!-mr^=qF=^@GFLK69jrm+uq4e7Vx{HAU;(zI+W8R;LR3vw2ci($-NOU!)mU
-zKEhr3dVTqbQz&1u!uHtuqw;YUO64PtD<A%%r#-tu`5KH5jU}#p#Fg9%^^-L5@{KyD
-zI?wSwG^fH1uRUGailI4Gr^dUIIaT|a*$ag^Rj=`XCUdHycW#s8u@}x~ZZxTQZL!y6
-zUa%QD&HbC$3`Ju|*4Cii7~JIZpzn_N#kq#c;p4pXi?0nD9gT5C^pi3A=*g{*mW&PE
-zy;c{BY!Lj4#?Vf?zhl@Kn$`Ul#r8|i`NhW2Cd=22U!^ukgX)eS<7<cbD=L4oOdifJ
-zR{nnL--ngo)dNqTdR4ak*)ld5ensVP8o>r@(ETeV<#&Fu^4D6vHh!1bU`gZK>A!!-
-z1}iE*?QU2e&M#K}PW2hwF;%Mntod908lqohLp7AK@$f4uf9(i1Ua|~t&M#Je`uiap
-zw8VyDY$)izbI8UkDu1?&o#y;v<!>@N!^+<fqhC8jKVJT>WU>CblQBCjYch@V(}nF;
-z)K*vnEZ9caaOLbY_r4!?w$AWXm9+1XzSU{#>*o#AslFk&3;T^cvHL!b-N(CYtc~lv
-zf6*=~8*`F4uie>OWS4BM#qR6G9{a*DyYF2^@%5dMLfKd^w>CUv_w8cdC_6}NNRb_~
-z3mayi>@&tK@#<_p=FhS{3VV61waeDA@pBPp25u%U_YV90LVd^4t=AGy>*7kQaZ2&E
-ze(lyViR02I$GAF_>$g3;$j`>Jp}jkOcQFcc<CTjaTeBsv_}X|q?|gM3-}!!=zQn(e
-zoa^;=7IkhC<COM<G~O1<%G|K1tl057i=r{j<?rKnkzRfZi;t%|KOq~@(Nx+7fA3mM
-z20EjmaoW~%J>3Q`huSfORa;*8IXU2`vjbYoE6BmcS6+(mY506Qe7<qMPCL8h<2@NK
-zk8ecspbv9-bo#yAes7l*bYCKmes2$wt{@YiMz)xf31RWPqczf8lee{?p>WMxr-AYM
-z5$zvHHc>h!_pFysQ%pYiIo|ObCLb3c`MCIAKC%2ApX49s^S^l+wU^3>an9w_Utx8I
-zv97qznC)6<AGO}*B3(g7K1~-iT;7Dm^S1Q{)kmKe8cs&N{ywvK{lPDR+?<S>%vN$T
-z>h&_}jL8T;({C9Wx%kR6R);!=@^^faSDeq)UPif68D;%`du^r3sLAZuLc3y}s;FHx
-zc{`qT1sVA?UC?lO6Bf_AV2k(rw9s%eO8Psi;xfXoAfryRajpLt>-(FSjFMx$e#^*+
-zumD--`eQPR<?r|;uQ;Eh+t6b*p2lqGv1UVeRu0+Fy;lCBeTmJ#o(&z@&e6MVZ=c(A
-zw)Ma4{6u!>JhIItG$#K4|Lkkoy{d+xyVE)vbZ=3xMdvc?zBK>L9@MCJrm+sK_a(X-
-zZZC|(JL7k%5&nK39*s+-;qUX|QJ-8IUhBi7{-`wk*IDcSI`@%jt-FIe#-cr;2Od1L
-zcBeg|KGxgc>Ta>3_3bQYVR|R`>}2gvXJI;-w?=Z-*;+T>iPpV)%{}})40}S@afSD{
-z{Q5S1-4=d!F0wN=kH`+qBjR?k#^z!36z3PS(;G&Zr_{#iCr6;qm_LlZ^NZ2%9bq2O
-z8Jh=Whvosr{FkBMB)=H_h7su34$;pgnQxZb_}St)hR(*yu70btI9m4|POIcR4tDks
-zt!TdB&(S!$+MlDr{?$Df?i`KI)4-$7&0HSakI)`ke7^7)>#1GL8FY45XQ+2EXIMs^
-zC`!Y+W>FgE3|+lTdXz@zox7PgETi3bGxzUGvd_pmy6lc!N%k4pOSCc7pQoW7=v#ey
-zXD>nhyM%MP@qMQb=+-&Afp_ivH%YrFqvi{{SO?yT4X?X3w0AaS6M9)BW#@Rim}iac
-zy3@qj(1p1~G#Ak~+lTIp=Ah0bm1(}WS$2+=H|=Lw-nFs3dA7X$S&~BDx)WOSAZ&i>
-zle25jw|UP4KL3o*KjH7HE?@RCXIUCz`Sa}Zr!LC|Eh>N3{KQ9L{kOB2mrr?K+Rua+
-zZ?oCl&Fi5l#tYAmm)<hG&<}_|#|z<?@Z3fHh|6W3=OuS0ywJxD(@QqS3(qDO%ePoA
-zF<u&q*Nvk)#V>)E5zmtRsapdYve|G`wjQmi7S59N+uSE^vt9AfnT;LMy5~;XK!<Mw
-z(Of#R<DzpVH8eQ=)w}<LpvI$syJp{vISY>?`4=MmmL5)(<p1lsBQ~ORXNpm}(XayE
-z-n{u!LB&6N<VCnQKUeVz|9?0LDvmqX-+0##o$LGF^)2Um*1P_~x&Etnbvak3cm0`j
-z{d@2FW9RykcYVRRKIdJZajrYe73aHQ{pZ%TuKj3p>$1l6pT1`1?>0I29nGy*-uc<)
-zRjtAGjjfF>H7nPzU%TEV`}mqW?^?HR?fTZ0D{3;0cV=o<-L<BvwR!CtPxRw!R&H3g
-zvWei9&(*A2d)Jy3HEWt%YCfB3ZdqA#*P73+Z(O&odCjM48rRg^v`*=ues^QbT`S{E
-z{RYp;V8(xc=uiIgcV5_i-aAvXKKb}-8$_i3tO_o}j{i+E2Uivp|9Ssl;RxX?eDql(
-zgzxa-M|fc*83e=V%h1waz59Q7_$*%D)Zb$GEth`tJ1u;I0mEGJ-}bi%-~AThdwuvw
-z@;T_ktI3(Mc3An2oNN4ylzza6&mKWOmvVu;{zgha%ZJY=|8nwayKwaM+kE(ev&yI6
-zM2D=uk@DZ}!}pB9|DN}bp8kLj-;eOh@jt*JH2wK{HcY+?uCVZt_)Gink?6NixAY^?
-zKk36qq91Unh5kmOU-!EfJ`(-SK71tl9X@;{`iFjRbo$e;w(ybY*Zc61=x1h*PXBoy
-zJ`(*tAASJ+@^6^_HgGsme<P*e?88S&f9bWOr=R7+M@s*~?9tPo@Zp!z4`H7V<G<>9
-zOFvToSMS3|D&Jxs9?<^E$*1R!M(6K&A3l$Mq+I){W}>0Lk?LRTTZA8di}2ZLM}9>5
-z9d8j{*=XrUlFwux-p4pmPX2?<qo<#++QKijkzttru4)-Q{X8E&Qu>S^;78(rqYpp8
-zI8jc&v+o@}|Ajuh9nQ;@|LA?Ar$6b#myXas?_g4-zme+4?#&iHQu%s(_}~cR$CQ6>
-z=|`g9=EFy#zs-lAV*D>x{&sI*jFf(d4?l|V`5UJH)<=xLk<z#O@Jnf2<@C2_=jiDV
-z`0yzs)Zb%Wqo;q(hu873yK?!@{EN}k&-dZ;NX*}`@^9`LJ$;7{uOC7Fd!Gq{>k`3?
-zG<Xd-52UMHP;Z#3203&(<JA8Mf{ow+SWUc5p!_r7J>XJs9R7p*&Hos<0sj|3&Wq1z
-z_5Mr2HvAWYHH!b=Eq)((FaAfs3-R9$_T%0LekTZ8wit$+!SCU2Hw@Q--y+^Dus#vA
-z%rp!uy*u#kLr(|63F75I#oKKdwt+N(85_a7DE9`#)KUv?Sz;Jo1uEWj@NVMO8Kx>N
-zyd^LUUwF#mJr6RoSa8TNwHs8v9fsjLQ1n{BJBgPuOwF_KmU_dm8dSUqU@P&e3{ywY
-zD^+5_3x=tKAWe9|0mIZbZ~^IBLFsoUDE&?WrQgYhsVeXt_zzIe#)5~yH%XTR--Ejy
-zya3FA%5Q~XYALAvmKdgHgY!vO4X(m}f?=u(TuAy#@bA%EU>KfyG6?>d_^*K(;-553
-z9R-#Ch+%3scn9td!_*E?^tOYdx6LqY2Ssla_-W#|8Kzo5rOz0qW`Uo;J<~9C6)1Ys
-zLD8!-45xsiHyQjS@h2Ik0#NBs|GC4|^Wg2c4;iKof}(c-6ute1;a*Vm_JC>P=L}QZ
-zK&9Vem`a09xR)BHmVlzS7!<vQhT%L=^y<Nt#Gh@Lssok&Qp42geWw3Cp!B~5l>Rpx
-zrqbY4=qv!g4PFJRK1>0>kGm3F0rs$|`+vaMpyJnoia!BVy%~JM;`f1=95c3oia!}t
-z{7O*q2mY(ouOp!7?+0%K*MW*ZxYy#J02TibsCu{$RQwLG1zZX${%ilm;vWMQ{{X1^
-zx(8JJ9pI<H7EtjkLAArcFg)_OxnD30cYtbd+d<XKZHB207T(fo7%l`AZvl80@#Y(*
-z>MXqFQp0fY|26uj48ud9(j5dpO}YbysU4vB+HM$TK*d`D-c7u;VQQ9zx6CvQPw%mG
-zgNETDQ0WeWpA>z=)DF<mHw-i2X3+=Ni@srM7N~eL4a3uqdHROoA#k(kgQ~{|3{yKS
-zyk)y#m;n`U1$d|E8>VJic*{(~@N~DQZx|i|9eq&s`ha0-hlRInHw-hNqYt)<zG12c
-zR6jMvFjWnng?oZw>O@x%TmfG_p!&rOsCKac97nwQhN%hQmx;GO7X-5jpAO1>>_3}(
-z0VwzBN6p;|%6*l0@B6yBH-Jh%0hC;;48vo)&3)7`%z-M;Zcz29!!Xrm;Vl~t!-d|x
-zz`HL6m97R<J(*&dI@M|PUo#AQynCN_ZvvIB4V3;j8m1Ooc*{b=aI$w#^6nG6EL|Tc
-zy&f}6?E_W5y@ufi?{4+(d7$#E2c@sshN+V~O<x0ssbiq@b<{Am4{RXac2NCDJ1D))
-z2c@^Gz;VQ%ZkVb8e?`10;P>b%CL4xTU@iUuC_YYi7$1X%sUA@2_JK;b*D&k=m2Nwz
-zblX6cdy8ReA*gf<K&6{+7|sHf?kZ5}rh}4mondO=YnJW=sC0dX;R~SB9Rii^ASk^a
-zFif?9%5Nj6bQ=uA45)NzQ0bO}cad(1VX6xJ7XAkwF?sJdOzi_D@4bepjo^Dl2b7#^
-zK*_lZl$<LKQ-l902>t;7lc4e&0HxOxhN%NSe4h{B3rcQ#3{&kse4`KF07^cshN*=<
-ze4Y=l2PKEuhN;Oue1Z?J0#)8h!_<KtzMO`seV{9+VQLFF558A`D(56n<sAGoE9WW0
-z)Ispe#LIzsa5K0OYy+!_zYtXW4nV~_@l}g=2)qaPeo%JtW>E2FgNj!Nie5Fi0jvaN
-zCm;Eb7Ox#tyjD>0mV#~ILa>H-HK6Dn*>3R;fQpv`?*(^&vZGr-#hVZI<3A7l4)vzq
-zFq{pl9?dcgYe3bL*ZzaG=aYuve(&z_?l$lQ@zUOZsrR1^sy@sDrH`40smT`JGRZJJ
-z^{~Zz4U}F_8m3+V)sH-H814Z@F9)iA>^4lbS$NAv!*DUEcnd+*vjv8!Ity>P)G$2#
-z?=9XSsQP-!Fm(`2;67lO+6TJ&Vwh?NKce!2-v^h1*TUx#!*DV9`?wbxhJ)LJ;3m;G
-zOuYumjynk+N8SU5;W1EhJOC>Ge#2B6oQnS}kC%eq#$5?M2k!mTAb1(v14@56!>|La
-zhRzPd)K#G93_cVDmx2S}KZ7Sg*Y6mHn?dy-ZQw$%6;wUXfU4*7z>9GYZuN9PM+bCt
-z48zT!qXRlR;60)PsvXP&9i1(n4(RBBj*elt8FX~Oh2jU?AUdGh$vn`}`4dkEbaX&R
-z$1vOsIy#`E1F9WmK((WJpy*VCs`sZKw01HGs-2uN3||99_oQL?0;u@ypz7-;!?51F
-zXM6YQKeq5e!?4G@_j&g`Q2O6P<-H7S1Dny`M#IzwQ1zx2JW2lR48s*5NoS<NPZNKs
-zVQN08^z#f;lfYYXR~x1#fTC9go`hbdVL12|qjw7YB=KJ}OdSK2{-|Lp2QJ0E+c4Du
-zirx-T^tKy@n?do{4yK8}$uPAJRQeXf)I#uMr0;vc+SM^o?dqsucm!0tdciP!?aRzF
-ziN6n2y-tH4!CejV9gi7X+Jm4G`kM_??V$ME1d6{l!>|<;f9t@N;>R$x1XTLPhN&u0
-z`JDbz5Wwn;Q=r@fpxWaRQ0?&$sPGQ(Ah-kkp5$Q|ZUNsZz6?{XAXQ|>QgAI;2a4`w
-za1A&CRC}!i2f+Xoz0>zQ4EsRU>!YCB=?h>r<va)?su}yh<=}1*70>7ZRn8rTsWwpc
-zekrK@7J|xeKB)ZWfy%GmFuW90ep5iT=SiU2a}}uk2LD|Ugx~<E{7!(<d!J$IAgKI0
-zK;^d$RDPR5<<|}>zfFc=22_4&Q0;yRsCK^qRDQF;CE#>W`PG4{x0f2GszBv;Vw2@}
-z6jXjMfXeTAQ28A)4EKP_Z#Ss^VF#%GVGF4I+Q8M|I#BtwfNFOc!_)#$`Ar7D1x^6_
-z!7A`O<Wp%F2B6bp)?s)8RQ%nb`jHO9a4C2K|GxWzpbp#*%1+q`%1&7Ujw64*l_N|o
-z0A-KWgC79vzz>0$FPi^S@ON>~1LePoLMr|S@NzH>%0Kr7^WOogKDByx29&<*y?Z7o
-zeN6D~0F=Cr-fQWf2W5Y302A=pYM5#P&yw5>Q}e*<Dc=-O<&*KE_^1CLhp9nO@lP41
-zUI118{h-R<W0=|jrtsegD*Xn-R4Z78d!1pb1$6lvrcTm$zD)iHz<T7r-!R+)%5GZV
-z{pWlC8c_1B0wu4$&s)9+K;^sNFx3Mp-+hLuy`b{lW0=}TBND%@pwg`~OtpYYmoZGO
-z0F^Fnm^$$}<F^MCzxxcsc2NAz^ZxbTe=;b&2cY;pN@G&KJ)rX4XPDXxD&IYZsT`<$
-zcN?ZQf7a5qfJ&D!OsxQwE^U}v3M$<a!_=|6jo-bX_}ya|wt?bzw)daq{i{LM$HBXd
-z-xomfyBAcxdkj-KQ2FjQOm%?DcZXpr(`xz729@tD!*Bwqd=K4e{s#@i9iZy_0#Nm#
-z#)nVw;jgW?bbCP2%Nd4kpxVV%pwd<Pa2cz_3y*xp(rp2iZnI&y0#y5%1S;LYItxEx
-z81{hTv(@{r^ZxU}8vF+tG?eanP;?I&hC4u|TjKo}d;jU6+T%Jp-#;YXLQw6k8g%m>
-zI<s-e@04NcD0mg&&x5KrTfi&8P2N2pycG9r@16jjjr(K^n-t*l;OpeG2Yff~&EO<(
-z1t>kH4O2@%>20xLY8H4U=_Z5X@8})I-vLnk?KezyfL9Z~4HSP%!0F%u@2&<f!(Hj!
-zN9erYfqNgQ^~!DFo8;39z6bYW@B(l;DE{gUQ#GLYn_`&KAn;+*9c?!L_JfMwW0=|p
-zD*j%>R68j7t^>#6-(r}m183r22}*x5+Q9Hg#`>52pvu+$DdYjJ02ME77|sOMuBU*C
-zH?Wd%0z3#R-T}jK8>sfQ5mdZ|E3iYr>7e4(8HT5utp4Xf&Zp1V1S-7EFkB3(o@;SA
-z0Uld!;YSU_J)r9IQt)DMmJgrl!zX|>_#bKvg2`YG6#d<X;U-Y^a{_n+@;#9@d$13b
-zJ$TG8JPOJlJYpEOf!`<oMhkD*U>LSqc*{D&a0;k+lP$bul3`eF;Vlyk!=7apZy%_9
-z_Zo(KK;@e=3>Sl<x6r~{78r)}Excu(Vc2uK)sr1y0{w3{Ol<?t!o9^X)dH%XECI*i
-zzt}LP&4H=pb1F1@vk!a@_d!tk?*nfEw}6u8X2WnD_<PWs=l$!we+~Ew@duV#{1b-Z
-zeo*6D2dH|o@spPCI`G@XUkWPUdQkaZ1uh0BfXcVZFg$r%5WJ7{2SEAnHw<@xe@FZk
-z-k<MxC_J16x_S&M-@zr8?@3Vk9tD-}eo*=D0T+Sopy+Qh3^U;GkbbuJpXL20gFhjD
-z->nw^m|?gNRJ+&?y7D4K$$1^<$_pyrnc&}o)4}gy$JH5zmxAY@ry9f5Bya-s20m{2
-zoG=XcgMFlL^ZpyX{{m3sO&>y3zDGdidjM3v+rj?@ZUL3=X2Y-@d<Xe%GE8j%$3SNR
-zD0$2`3~Rt2lm5ib=HF)+?giD3=Yh(17N~qL1(ok<g!?z(DNy;oW*D9XCy?)eVd@z8
-z2J!ZS%6E@pxCuOl|9tO1&-+gT)j#AuX8G;_m2W$!eAD1W!k2)`cd=o(5ImcF7Z|4M
-z!70R>1S;QZ!*F0>5S)kq9#H-{!*BywgZ~6j<<%m9@;!Nz<$DmEM)-bE`Suuw`@r$!
-zyVo$a8$6$Q8$i)-H4GPkwfI+i{|Vmz*p1eo9rz>a7x`@izXZK4hN;cqLejN^>Q^=y
-zhHW4pjcD0u7_I=7E^U~a1!`OzTwwi0AE^G~m|^M=_#^T=2#W3j!*CDSj{k1(esBk<
-z_P!CE1*So@gN~0{`W>LsZ#N7#fl9v-+yu6QYPX9)rJn^V{RTR3<=+Y_{W`;NDX8>|
-z!TZ1kpxWPbQ0c2drC;(9OTQRY`h|w!Y*6WEf*Zl<pxVy_Q0e>TTe@SQ(j7Gn4}$H)
-z-w)mc?gLf-w}DER0mbhMQ0dZ!;R3K7|9RjBa5kv=I|Wp_*FJ3NPJ&9u-EhM22&i<=
-zgKgkJQ1x#&sB{}ZCm&Gh))|INL8V&^-U}`OFC_kSQ0X>ZZ{tUsVQK?-7J6?rOw9*T
-z!Hj`FwEFQpsPX2IVd@~L_y-JA+d+*tZQwZkHyWmvg0i<~gGxWkFf|jb!hMxtYC0%-
-zb%v>Z^UNOI4$7`+1?yEl!|*ClcIhNg^{x_>z7I86e!R==^4o2g>HwAB4#U)TQ2A{$
-zOx1v2ro5G)?4!Q9mftbMa0jUT+CbIQb)fQ_395XPK$WlBFf{>GepQC4N>KR)hN;bS
-zEWdT2?5qW#$~WIItOAwa$$G2T$3W$`0~DWa;5%_I1(j}zVK^C7y3=$Ls?Uc&#oq(U
-z4r>P$f0JQ24^;d*Q1$rqbr%05D7)-=Q1K5LhTB2K-vp}uE&)Y<K6o+iI#BU1H4IOs
-zEPfwYL-;;W@pprhMF&*;Hp6fsDEhNO)z_o5sej@hWQbdkGfeFU)!%i1uhP%%FbubV
-zuMoc#RQz>@se16=;ht@nnguHTOz{2Wf0bc)DX98X1uA}}Vd}&mSbu-eV-NUkl>>YZ
-z+yZ_dYy%m(XDkI(t|f-yOz?l=e--#W_?>PTP6BK3p8(zup1jube;!o&Lx$mYQ03YP
-zehZuqQk7-|AVckf)4%U9H3+I)r@#U7dCf390sbBF4}pq*&@i<P%;Mf+nA!{~eLFaV
-z{5Khf8$i|jrJ&+3F-*+@rxJCt#|fb1GC0fRasrfGj)0gDGxmZi*B-;L9sHm8ZvrKk
-zHp4IjN-k+|6Ic%_{~A!~rx=DOKWOE80hC<YK$^~s#UMlZf`x{u1)$0`AN(o#%rgvU
-zfj=Ss6j1Re8>R-X34$-;K4F;Z1C{<5_+IiqY8XBbYTVfiD*hhB)Mij}Y4Ml_C6@)D
-z>dP!pa;XC`WoA@@Dpz0_9{YgF<tQk*95D>{gObZW@IG)GsQg<&rC(<l)`Ke7rJ&?;
-zWG3O@9#Hw_K+Q*X8-^XA#*ZC_;XLs3l&9V>H5*j<XMyJsZ>C{b2Ug=h0aW}d!&Kk<
-zt^5Z(?gLf+4p8Oa2>va&0US%ZR>M>pRDD<is@#hW!`Yz9JrmprP6Czh;MG>XL!iok
-z&@kKr_9;F{S2AM)sB%|<DtDz}7=SAG>EE;Qb~pGr_~|fA?EqEo?ciC&+h!QHgX%9^
-zK*i4(rs_fIy~g7tP~{FlmHXILW``dI$B^!bVd?;=a`%8L_ddgL2dHvy1MdM_LFKyy
-zlwRvVmHSe|@U`DHJAE5S*EORBRJk*t%DuucOoJ--Qp2zk{4D$ghN;smnyB1^U_iW6
-zhT#CHe*bw;@ediMIzW}X&0{O5a;HI+dp7tt;4H9`bTbW8HK58p8C1C^8HT54Sh-Ju
-z8wfuFD&HPZ<!%R6?oEc_Lhu;=r>3)B3_cHjA3OxA+y@QA1E9*i-!NPOegS^chN-2X
-z%Dn`fO1#B};e4<L|LLIO*BPb)g_BR;`wWkOD)#|U<=z2m9<m)wl5U$}str`RH-O)x
-z+^vS;Qc(I{47PzYLFGFcRJjMPuyUU;4EKVXrz{2;3T8|PRqi^u;r~*@um)7Qrx=C@
-zFAswM2YwD1ruKs>cMte3;_WjGbKr&eZw3{=-7u8~RqlF^GeMQR22{CE*V#OXi;RK_
-z(w#C)^?@q)QSf_|`-ow<A5^*bf%k&jK;^puRJrGa_3$;%FsueOPullh%0>7R@UOv1
-z-~#-gzs&gS0dK^AyLV^6-@%>sZf%mvJ-~lQz+<5JI%*gm0L9mK@M3Tw_$_cY_)+qi
-z0&-9EjKNE>fAK#7eiwWJRJ<c3eo1cdJJ5aJFgye*pM!?s4p8*lK&5K|MSlS(`gI^(
-z>x`ahCWn27;R;aYp6&f-dH>1aX8b3Ce}qV?4O5#hVI0MO9q9DuaS}*TW=sGjzrf>b
-zHKfPAA5{1@Q0dx0#cTDr0#v+7KAii`UHm?e2SKIV?%i8FZu0&sz~=~G2=Z^nOz&R<
-zs$QKYvC<#oKgBx)D&8KC8Bp??4@zE_g3?C~$iEr-Pw7s+$I@*9Ri1g^VXz*QK4u$+
-z(?LW&qY`xaOfkJ~2fu~?sdop#3*c*@^m@`T<h$dJ&I!Zt0I2l4L8aRQiqCbR_*?+e
-zb<a3<k?HlQVVLvo-QL~e-5Kwm1pbh8?H4lsgX=(*a|I~9Eb%xWbb9gOrzTsxK2UN!
-z0E(XuQ2cBJRnIcuUx5oj)!zl6$~oUKoCiu?^@ic4pvqYds+^Ue=)U$Yqk9BYIro5S
-z$2r4r1NhhYPX`&&XH<hKM<u9o3|?S30ID2&K!tDexX$BJQ018gD&NVV%JbU!R-P9?
-z`R@f?IlX^9_*bNx4E_K-Imzfe530Vb1OF1N1f_4im?k-#KF?t|2ucp848x<K<Zuv_
-z9C|?IyBk!#?V#ka1e6>W8-_LBJ;l3EOtkPm!>|MVA?Y@H{|(-MHYoWWJC}JqxCfMc
-zIy`OzC6^7L_*emoj|JdN{O5cBnclzJ`wvu`T>3!C<tQjR2SLeY4=B0hz!$-dpvtqs
-zFkAqN-|61J&ikKwr}5hZUaj=t@1bJ7cMGO=fFH!I_jJM37VrbO^<FQSnh&acvprUM
-zJbjM&zvl4-sQPov;|rkb&jIjea5tDBN{3;p6%<{*o9l3<$2yNwJf41sg`WT=hohjA
-zi+67Ue~$lVQ1znSFq{wmllb=jv%G&bsQPkpg5h3J^=7ljjK_NLHT>&9^-B{#rPCs6
-zKY03VtCxd@;cKAsKWP}g04n|-Q1sh9P6wqoy-x&&$Hv<^f&HNTdkn+P-rerqOTqsQ
-zo!Q=hmiM0k{u2MXaqORgN2-EAL&OV)spmo28Hd2{!QVl{@BsKc?)`@0Zcynu3{!2O
-z&h>2YnD%(+EaRgCTtxVGk8K_&gA9EOCK;xxLFGRIRQ^?lVI_D7w-#x@aA2&ZJ7JhQ
-z2;NA#G^l!__s@kj9w&jSZxcLfQlt7dI3@@_L%b89>fIqw_3ofyYC9-8n>{Y^ILqU7
-zk2T=8i8sN!2P^$}2A;zIDENKw2&i(sU>F_*FTsBgsCYS0bhd%dfg8bp1UG=<b1C=_
-z;DMyolYOA-*IrQl-X6nnH>i9%48u*J>eo_G^>m33U+lx{!CL&MgWm$H{=ed`20X5+
-zOwYX(jLJfFL3vzO2Q3wGEi*|bNf*W3=C5f<6FMd7`Zt**H|fyH%rG-)GvzO8U8-cY
-zyW&1|scgzqHLDe>Pr-m)H)5dyx>{M#q7lLpAiLr|eM)76c7NXQobS%P_uQGur0ufz
-zY3I#%zMu2|_nkXu7-w}!?*vkN8<qIUdLXqgKZjq+;m1*Uvj{&5B>5u}KRE`Zc6T#}
-z4|Dh@fTIZC2uz{eH%R;l!q9o(j{%Zj4b92-LD2A#`8MH5fbbvbhypkSn($%J^N`yD
-zn()V<kykpJzm)KwK+gd)pa~~I&j7Qa34a873OERw@Q0u$fFB1<_z>uEU^i&OAAsHk
-zG(i&{1WoB}15F5>^DhCWKodR)`YXV9X}(*&1pEz_?6))hY2Yc)IpAgBBaMRI3_J%k
-z;t=#Ffo}ob#dJIHZJ=A3Hh`pmHIVFA0ZAWaDd@|Aq>r{B=yw81|7}cTSnwT#9*Wa<
-z0!aC2)O;6Q0c-~PfvbR&9|O1)*aWNqwg3UX2B06~3~Zc7hbn|KFibefIL0`_*v(ka
-z=x6jX&L9Gz&q(7A(KPN5(s)By&**3LG0tGz5c-TX9tnNMZpL~>KckOv2IGa$XB=Z3
-zVeDqCXY@1r7-!C9ea11y5yo!DdPYB^k8uY5Uc}Eh#yG;*%~;RqXY?`7pg#+JMj97H
-z{u#R&>lyuwKE@gJZ=ugP#yG;*%~;RqXY?`7Kw0QBjxmlfb~Dy9`WbzUGiX=%^SnvM
-zF~$+bZpL~>KO;csRp|5jDZN5Ja?a6nD)ik;#+Fp*qv!5Cw?dz|=-@>a`i_f7FUH>&
-zAH?VQJNCT;pZ<M*X!%dk=dx4FD)gDlXD^5D^0DO=`cun~;dA_|eOFcJbJed@SLk~~
-z<Dm-uSZErb6O9KOEA#_R6HOKRp^mAJ3Vrtax$7(R?H}LqaY%NLcO%@KGAs1sH=Mko
-zLLZ55kHd0mELEZJyK(=G75dcBks(;yGQ9=do3`Hst((VhM))m9Zh@WKcH9Q;h&DZ<
-zA?!2Sk<S39Kc~%n4tRWrc5(-B^lokE-N2J~Yx9KTd$fIffIIKe?z{(hXs<T47r5{1
-z+WxNtXTGV;eiJw~t{oW%p8A$H@@?Skx3xLK>HD;q`+yVswS)VC+rO*r_%3kffHr#o
-zc<_F0@_yis2ei=#fU^&3a}NS1AJPsz1RVW=w(|$Ty+79Q({U)DL)ye4;IT)v=|_Mg
-zhqdj8f#Xx!zA5136WXCCfHObQW`9EbC$;TQ0-t(TJN7Ja>N)MmbHL*>+Q}K<?DN{(
-z^T5#;w4E;iM`pF{v%v8ewS6xFcfX{Ky#ze;vNrWHaAHn7I7j%3cJLM8zTay5e+!&E
-zp&dE_Jn*VE@hWg?UOO@mJovgc`8sgyc75;dXiEp~(kJc$&fle<B0RWTpWF@H{xyBa
-z*MNKX>Eru=r}pV1-vJ)^j((Kz&U^J;_X4Ny)n^DN?$Zz62Ylr|{W#&tL;Cz7;QmMS
-z1CIdjd{p1{DDdc``cs4l4(k(#fyWQ)Ckc;C=|`u4r>69g$AHHk)29h{Jg$#E4&3#$
-zzWZt5{L}g=!UI3oCw@-hztDI8g2I2HpCUYPOrJPL;m_#1pP}$)^izZfeyLCVlEQzb
-z@BS6=<gfI3!oAb__%zYe`aI#$U+Yi(8aVQ-zWrI?<O%)I3E<eP`rcP5{G`79B=Fct
-zeVTCZ@AUECQTS{6_Sb+1UehOD!+1f@ll8)nE&isD@1gTwfU$6LQU)!@{t<p|-`ocz
-zJ&1{nXzPBMiHjv|-RJVxEN|Vv@;^*(!X}HJB;qCeGn0b!(R!cgr9YDNGK_;nA7}mm
-z+qdrP_$ektir>1Q;})i^`#3(x^oP5py=OSRV@yw7B=xQP9hNbDDJ>ZATvHD|(m3~o
-zAZbi<(SG71jWbxZ&~p|3ll*a(r*#9-^Gv_F9yI2LOD4g<lez}9qkMaa#@yAx`EMi|
-zbKwrAuOS+9>lc{r!90IKg+EW%5g&8+-!cFBkAQ~EIMe_3M_7+)BUs4E`0oM`{b9sG
-z&)&;HpEKgCz@m*F+K&+bPL`i|pXAe`j-F|xmH5Yi^t^_+h#vX8q~G>dNpHAJ(jWaG
-zozMDx)_oX<uavZPf5hX=x9;QU_%q43?q7NU1x)(ZeGeDDU(%>H@l3Cfv~?fW&#(X^
-z`Q6NKuaR_PTn40Beix??Yb>PS@3Zc^`aSCIJ?9|4A4>TbIX%{WR)4@|o$S}qf)3BW
-z;y>wI_igQFeXD)I=PmfweOpg3e~#^cjqO?YU5#NONcOG!pVlzH8|6mNTISQDou1a9
-zlpniF(!XQcy1!^S=YRIYl7B1Y$i8(y&Pk?cxPP8t`=hl|{%*Es-52x{#sSiw+#~sS
-zFm2r@LVk1NTlc$sifQY<mfJWz*8Ma8!1U_xOMB;Xd$^PPV}SK9iAsJuw;$_%pgWiz
-zn~?kyut)8ADYw_V-$La-;%h{^q35N`B!7bWZ#h@;_unb`S6wdotC=6>{%}5*M<??)
-zGJhNMCss=RTbRFz`Foh($L0Sp^T(L~67!GTA@ygh{x&IT+K*HEkKZq8I=7|#?PC24
-zmP>jk)0J<Q^4)B2V4394Gye{@x1H@()Jgsh=6{UsjWB&H+grUu#{W&Wcbxf8u)Ryz
-zUX<+(GvCkhOF2J{EI;*tw6}-zGsp7Z;Q045{W!;8H!9^{W_uNE@2y;ZpJ00ras1<~
-zPyRhBzayWQ`XTI`h+gsqNng(K&vSo#lH1Dxq?4Z8n17V*eU$A_F};iFNv5A;`5C5P
-zXZ|s!>D+?q?+T`;&z0#ph;fOYrCk33=2v5!rSyIR{g9qb%&%kqDDzLz1{BY7wtorp
-z*RcJYKOp%VneS)*&CI_P;~YJAFu$Jp_c4DA{feF!nBT$tH*x&ea{IrU)7Q=X2=nJ@
-zqm1Xv%ug}@`^?|aCixE|9h6_|{;=Kkl3vF3*T^(|DU6=4@cfp79eVy<jJG4c1KeIy
-z^-{ls>-%rd0sW@2{QO$^QPAg&`8NGXsQU()PBHz5Yb4*ApTEfT2=nh@`EI74VS1S9
-zNtWNp^d`_WK3ezxJ%;oVZQa+`#r#*eK0eE|bsydurmg$swlF=6c1O?hdTGzP|E-E?
-z>%O~DtPe!|dq^5*eV0kvx^MDfru!t@_X6sj<o9y_`xmCI`?csjCgNN7H9f_&b^p}s
-zOk4LwPM$C2t^39P67i6}bzj&t>XT^e{;!`i|0s{2)0*TjiGqRWNw#O*clO^)B;UFp
-zF2MGz`{tfwdFy_tuX6hG_ibT(p!lu(DVK8jE_<hl&i4(LADxgiz2`;p)_sx})=OG)
-z;nQPz>prcQncj|arst-2qkSzI@%bl-g71pyOC|;BdztA*rhoGuDPO~MzhBZ<Fx|ua
-zZ!rD5U-H*8eHHU>X1a>`38wF5x|`|mvivTlgGl##mW=qm!1TK@UZP6!&poIoCw=8x
-z-SkCQy6G#Iy6LU3@6>+~<A#&|w!)uO^xubZ$SJ=C_3fnpN=eUNMZO*5s8jxGCH`%g
-zPn`UAtec$li;DfX|GArgMA4tcc;wVSd8wPGaox%PgA!lE+ui(3$W4zc{Cx_4PT}{W
-z{X64(Sc&g1l=AwHlAreqd-eJDaGj_ho4#G)Z&CP%75-fc|6=rSXZkKs;-6O9!+-pV
-zTYlZ2y6Ib$`dRVEZhpNI-x{TUuU6XEV~V~1QquRV68|QpzJIFppZk^ifA|V_`l3qu
-z?s%7*|M%~A({v8*EWdwN>iboty~mXD*s8>Lu~NQAl=vo<_%>YVj{ieSejifeyH|;C
-zP>Jt#CBE~O{C`V{Z$OFf6(zn$mH1v%`pcUX`3IEvYLxU0D*69UrM%Nhd4F25|0N|o
-zyOjLjpu`tc(({y(|F0<V(RseJJv^(#SFPl~M;R|ZCE~OD_j1ubZTd2if1BPT@^8~m
-zi}cuZyU4#y&nfmlrr7_gV*d(}Ut9k|QQtN_rr56+<!ST3sMvo|v45*#zg4mSq+(yk
-zeD5sZ^OW)Fvr2p1dzo84uF$_<?&d$Cw1-<i<mO+g&>Hpu&h&gwnSTZaZI{PQVt%*j
-z)e8S_U`+Gb{8o`)n@%Y7dv&+`mwoQ^JgU%Zg**cJ`IJI`8tXe}etxFrN2JfvhJR0y
-ze?+0v3jJfn-shC~eUW9EU`V+YzcP>->WRmC*P6L-Y@6BCR~ZTgS4O(F6_L)w1`^Ti
-zP}(d*IvC2BW}hlJkc`mn`VGlc&KDUp2YU&TvOqIksUM|_^Q#+iHGgL?6j^Vk(q_g?
-zWJPd$S35+-<^7RpJf7@bl^pg(*xovGYmp=u%3wIQB|20@zEBp6%X>1(qB5BSW_Cj^
-zWv<G#MH2&Yvu|B=&}>aKBokS4IO~gWW}4gAH#9}AZ8sVt%Vbb%JASvo7muvSWYa6E
-zf-96-^Zb^9RSN4-T4a|E#}b)rG?9%(vnJx~O`BPhlGB_{4muKK^dOdKZ>jV|Rt?4C
-z*;pddA5TUhD0A0i4#W~hZ?BojSV3l@j{`XI!Qcw#4=u3fQ2w_Rn#Aufl;1Q_ys5=i
-zTw(D-^_H?qyfU<+_^&}&h3l;~y9Jl1+J<D>bO~~iq|N>~eq931KeEM4XXtk)P>;Qv
-zHfOS%BYn~I)))e0xuYJVHYI++Vm${f%dE_|m0+M@D80oLJ-WR%jGl|1r)Xc<VRiV<
-zHdu5jR93G>&oujtq3kAfx>&F1b`8ls(<54CG=<x%S{mBgL+jA8yaLs$+l&T}T1|Mh
-zQ5mZ7gx9quGG;G^mG-K(#*l|iYE^aB1;azZN>8|Lt{R#_!RK)zJT&Oebg(j<8yqyV
-zX)y?P8V$~o2;(LCYHVOAIh0wI%bFR(=!(1b?YKnJ4buo#QZY93uZNV<kf|$2g$f`-
-zC1><5Xx}R2GDPcyT`Jl#gsoaALsZ(OswqR5?3NS_S9ZB7rIO}{j&w4c>`lh4@^wnc
-z2?S9GR@JF;cK;~R+;fIum12w0kQ;6ZZ?NJiS6^utr)$P4^fS??!aZGmI~%gG7Pk{5
-z0ntbsV*_R;i>_3t)L0B{t{gEWy?|JOx-J;kVrtkh0<~?J$)W>hUsGVQwe7B^Gq+_|
-z*_qiYTz!RYI!o0v@O1=&fvvIZCd`Y`ezPHvyRk14q5t8owHuq(#+z|{N<0#eZyA(7
-zuM`<f_6@~NvDPaw8#cx=sc5!$lY2~EaOMgRbhRrwo*5}G<II;F8A`C&u2(12i}h(1
-z%Z~wfTJ3mOhRrC}cvzKo1_QmZ)Fu<ZB{iJ&no>;^&TcT!k;XDLYhrEQ8LUl5x4M_Z
-zr)$@-05~nH1v6ZgjSie{f?OF5)X4REbHHc{)X23;bD)!ojA!swSov?JT}3{`CI+Lu
-zg5bqxs21zE)BV*hE55FDEQ`3xSkSj7+OQ169wr*bjwP>?HsfYAlP7t-#$ncKvb?3b
-zBN<(>Yy!j8hG<XRE{W!}38LKHl+;U@TkVF%8$jA2gt2*ZH}%R850KskVkFho-s_fD
-z7FN#I;Tc^FqfOD4D+saT@ho^$S!=2`7L>GyL%CR6SixQ(EhuZv0c9jZSQTrYvaFUT
-zX=jetl|^iaORlD5;W}%JS5xlAlv)R#*`MbAB0~1uUqZ;9`E4O@s%&0)>oU2LQ`1#y
-zoiN;@&XykS(%qs*=@tcdWv(%>Evl%vw<sQVL5q%IUR5YKf~!KF3iSw7q7|cq^7>3=
-z+pTdWwsb{=Jc~iq3I-9e^((D!x0QnW#o2Zug8@VoEE0`fVAgI|sUdr`QWIc}O=`Fu
-zv)u6(G${7G3db5{JO=Y)ipn7k8bQ=>I|*{UkbIAeFc`oL8cp=AUfb9ltR&x^wY3cf
-zQt8bd$r!v@>A>omYt6(!c2l4_mgrBm1_GPc1h8i8GqH#<`>=*VP<(JrARNntS`*o-
-z%Fal*BbNzX52CKKB^)!>g=67V&S=Bm+2#UWy=!Ar|Md~-8s0PpvCtwPR)IuT!LtC5
-zi8q~@Xgtg5tU^X8eg8+vtEEzd=OKsuT6y1syykPi*!*&<3RcDvsiAz<nyf0QNe*QZ
-z-W<p|i#Q_7x20vVu~7?sgQDWr{RYN{oV`J@iC*>w#dQWPuBvbsI|GZAXWe4(tXm8S
-zi}oVI9?@6!!132$ZT>#yo|?HMc9s;f2U;=KmzEX7I1T(I#kil87P7r?3)-Ujp`?(V
-z2RT`k78aSH#e1;2hqi0vJ6)&<%Mi5_Aquh_jeK#IA#4?D8KQR4mLW`bsesE6wR0$o
-zxu{AwRVU8Cu+OaPji#c#v1|@A3f8x=NVZvNrS|%zI+-#Pk<d^EM*+d=sKe0@+H(YF
-zG&y`45!%<deC5O0wMJ{8HSc0wzb&rDTul>lXD!dp!5T4NVKLB#bf;s{cr{JJhOyuR
-zd}TgjI0K~LX~5-KfuGRf6kZR<lqW52zkG*bG*#2QTumExUd3Lwja*uh#aechZw5Xf
-zF5ggsPDa#Hc9rR{w@{5HUSoy_Zj5BtIx9uV<2K{Q_3I<)fH$YI)NACrEf`8=%%Q&I
-zdaU7+gD88kKnsTC8X?~^vCFXwxh2pk3IZR2NO%AXGFLj(QxPg|W37@rQneD7$qn`-
-zam?&T;lgD&;I{|b!p<+p?gc)N;@Wn}bE&D)IT2%vBf=7G&2PK?7q%l$xE7^SI%>P`
-zi_vWnDOj{->4aG0;385`zRJQ;(@?p{sLN9+9kpGEa_C(|61=L*GU2Z9hD=w7*sgd7
-zR-=FmObUm)))m%4Fg&0pj`4G;ERJ7s_$osBu)T4FI1hA{@p|F2&1>DO8#`a3MHV`!
-zEUF<3u^g5BVxiDkp<<ufS+QeKMO04Fw2~^*ZkeL?)L*7uYMezy7dqP%nQ{)kMb0*r
-z%$I2Dh0it@rLVLL$C==w%vgiQndnpDp02)~4cS<W+wnNV_-s?juE(8KQVdCFf0I+J
-zKwZnTO(m|y)UfKo>{_%f>Kn3n&fJz=WoKrqaP<|o8BUQa%33k!a?N6lRo{jSR%V7$
-zsbo5vp)n~OlVbK-#g0*ohjsn2L^O_*D5D|JX!${l>&Qk{mXbBh*}_Jkp;!!7H!540
-zDxfT3In>d3>k<zJ=v5SMyPo`t;hfrws)MkSI-X=99=ngI@yO+uBaTuXVz@=BXDVwV
-znQUJ?))R?k+QXglMJpqFEe`0ixmB@XWYt#uTeTIJY8Ub|uA~ivc*)M?$}1vWC!D1?
-zk}FHNAA<DKR9V7gnO>pHg||3dipA2=3rS(RkhEuUvXaEb+fJ3)q&)Vft!3U>2|r?y
-zh(z&-^HNtPoKDE%y7Z=J)>8mw=>`KsDeU6B#aEVgT`Uok5j%^=<(n>&-~S)ic)^w#
-ze4{<!MN&a;&+;L1ur`%{fx+^=*AB{8Y*q&Xt?aE{36)ht{rzSd{%J?4M~qh5dD4-<
-z>Xz_;tb%YVvpyEtmX0?C15|BrAz=JPJIxIz;P)t;sJa0&VW!bOu=%yp7T9d&I8pA#
-zEsbP?wUKBhgEu(vB4%?m7RS4Zkw|raEN)iEV+k|VACC@XGNE-QUe;{SV4+R#DEEf(
-z8ew7pCmUg7b$BRKLx&qU={PGkjY_Xc??FhFYl9GUWHZog9S;bPM@t|OLoG-r1&A9!
-zR7InG_;WM<wBBIZ0M`wI;)BG-OCBvaz;V?Q4sJT^|5RJ;@Ie{Z6|0OY6j-c3Ul07c
-z2WqB76A4tIjjUE<mhHn>Q#2;m&gk@uLS{P<rxJkE1f_w(@Rq`LlxzDxl|)AiKEp8_
-zxD;%dWw_J}>IEyUg@<>zbd1wQV$DzLr+pMrFj2f@IlD$_nRRw8=68i>*DSBW&aTn?
-zPV?-VrL>|{&#qCixIMcjE9*+Vn&j%w)$~o1wbUsc?Vrw<jpkyVFSwGdTkpabm=*$6
-zcoVI)ludhMP}qs-dZ~k^Ir-I@s{Ul!yUQDfv)5P?SmW}hQ%|#FkxSkhxz-VbxOfY5
-zVRyCLjMoo-<|Y?<1qGh}Oef}Qd>x2OAwtCv?ir52%k3-;#f!YnxM3|jxz$|cj|4Dz
-z;M+p>+o@vhnj0RrUQP8VI^SC<U(w$EIo@a~UtM{XWs!>ZMyPy6JHf8ETNX0lSyYI5
-z3SY2tY&Hr{Xu&Glm*ij2#MEbPP72G54HCVuS%xIP+Ub@ghp7GHhjftUUsh47eW4~A
-z9%yTHt9T9<ydtGGo%Ufui)vZ+WTz)il_+i4u36!TC~kit!P3!Ko`vG}i%KkP7%jT9
-zwBdphr48HpWtW~>uKAKLBIz88q^mV&Gz|BKH>}@gZGdZ=;^rW}AGJQaEk4xW;BGUD
-z%Uz7pFc8W1IxTy=|2R7Jnkv|0U6V?I7r2cUnn})9Y>sodvly4BW65GFkaG8_Zh=Cw
-zO*xLL`Q+8{5<acrjREUuH8M;`tL`#VVloET$!X_ws>Nu@^{NfSZg27|rKyyNY`jKZ
-z#@TlG0HC3OzHq&X<B<Yf>Z-+f`BgE#wBxmFb@D>I{2H~WCiP-lGu#!*WTWXUf1RQ$
-z+!-DqhZ2{UH>05*`re%sho2mK>%6eKGOEI!9x>4yyGl1i_mlMz4p#;vJ@U(}a<hId
-z-tJFF<H6dYY=0en*YSF|6~wzLwXuv5ZfI={hgYS@DG2YNG{fHo@O}Zbz2^q{3g;FR
-zgF;cEjUC`(;<B7_g0Ngrg2;Qq1m)c8i2&QzCHd?(#4pkerdEm|*A`oZcs(E@xWE!v
-zgwtA;m&C$so%pO3pEW|lYHAjNmL<3$5rA!*psFo)RRrGOJVAdJEg$jSXM7Pl|2@`7
-zG(A{TO2hr_<VC64-^5*%n)^$<i&C||@w6x<yJ0O#4Na|pJhhW5Q5VkB4pCo~`6?pM
-zyG78Sq!dK0akcf~3x4TjF4B`6Hv1yURP@Fn6HBpJCQDx&#w#!m*;G17-J&d6>x8DH
-OFgg#KUr?ke;QL>D4v(z>
+literal 115432
+zcmeFa4VaYGndkjfSA&fqrbSR<2w&~%AbyN7#xRa$8k#Z0VU!?IVkoJmfK+1#2)4$k
+zYl!7KjA2}Gi0itn>86QO)$+QogHG$ZN^I9<vTjC<<N9WNGY!pT8#ReZFw^CWvcLbi
+z&r|hObyd^JIJvHOFZ!bRKhOER&wbzLocnw}fBWuF-ya_Yv4B7QH<RC@2L7AQkH3%d
+z>y5j|s{b{{T-0E_;_x?QNd+hHtlx*^$lvni9jk8cuxEQ;@<&UTl-|Rqr9ZbPrB}ye
+zW?U@zeWhI=Y&0MHfBEtiH{1|$SiXGz+$D2M4j~<rOHM(w7)Eu;bNTX>tsSk=_ww{Y
+zx)%9}d;ckL>GfY83#OE!6`z(bzu{|bt2;imyyNTZS8Z6edinD5^5)*Qpu2pG$pz#8
+zo<EKSQJTX9moHD>(6OOy?U%hnWqPS!n8)4T|0U9^4<m!(W%Q5q)~&svB#=t}z3tPR
+z<0GZsweoIU7;|!srlsfM>6Mpv)-NqaNXPx8S1E&Nnx22lzp`#+ruBvl=`UP(^`DeN
+z%=YOudZ!0SZ=}EF%h#<~lV0BTmDVq>YFoQ{U1fPM_UU;w4tj>C7iQ(MQF*_zzBS#k
+z{KmCkYg@Y#`sPRTU*OXVPBPbC&%a*yx89sWR`~Q*WtOkr(E62C=2<D<1)f`vns?CK
+z5OexB2Za>P)U%BDa&Q6vOOK4lALi+F=YAgls~|TMZzBpKA{1_DNi6tx1m3hZ7Nn?`
+zs<(^y>F;d+dj>qjFQkFTQU9Gw$m#q<&$;ccZd|tR#<f(swsmXe#%~rs(Q~fj!`Ier
+zxIQQggO>{zmdmHpvTnnwV*E(@%jdUlKs2Q!KI!8tpOM0SVwB;;<B;xXdRMuMx@g0?
+z^r{<f@Kv@-`Ion>TbsUd!-iFB(_eS#OfRSFs;}SBvFa<h>90zBE1r2*rDNWWZS5Ux
+zYnQKXU)LJe^eX9Gx#EUZ8*cJ~sOrCFRl1|?rd2JTjtc&X|0O0@&{HALVPUJ}H^1$M
+z^{pLgQ|HisSUO)>(YBVlBL6CSqkOKSRBedBQB)(Ht5zX_whrTeg<dUPM1gCif7unQ
+zI-G`%Twcm@{oD;J+B!DW=I`gO{NuJzJViNIl(!hB7CjrjzP@8!MLOq0TSYnx*QHzA
+z=ib<nS+%yKEge=q!iDKZ^!O@uU{|hPw|3Q4H?Cj5ZiAyy;Yxf`n`#WG62C<aWJlYI
+zwssi2s5O1PB=O#@&*tBY2U~gE_TH`E%k7CTfAwfK*!SM8vHW{2!PW)wjf?x^4Lx<i
+z#+UcU>v|NfGYBq%u8FgPjf)3Q2nsY?6C3c?v)ubnXfC{W>)br)Y<21NDZRS<d%QpV
+zq2@x*N16+{Q<@8h$oK46P?$X?D9joc&_jxbdHJJ#7Vp>B{FnUUE1|>3J(@jn->-<1
+zx;-eg-Vzj6+#3|q4+MpkJA%Tho}jRLZBY2~hM<rmkIda5`DE?^$t!bHP<S@`@u6qq
+z{IXL(e%X(K{IaKm{IVYf`DG`A{IaKk`kl%%zxX6@($FNz`fPjx&l85e@#CQIjaT{o
+zh~EqRzVFJhg|axFHf&rz)G(vD(C}XK4;vD})^R_*?cTO|L7_1Swlvl?7lOLayxKOe
+zxiCn%g4nn>Q<nvWX)f-@ms8goPw?wWT}v4*4+;(6Tt1Y!0<27PaYdSoEzJhf%v?>H
+zv0!VC@{7mC^se*it*DaT>WcJMN77s4(}R~vZ}r+{_%0qdBa>!i(u_=+kx4Uha&qoT
+z-QHYiyCW!^1^sPzfzW>zJUI)VoC8k|#mDzVd9vni!r#+ecoV){9~=MX^^d_@%J49<
+z!>#9G<kyA#b|AlQ<hK*~eHZyXg#7*z`Sl>bJo3vSKhcP;^`xM!?Y;nB$9h_!G4o(h
+z$RpbvvMq*z?zV?~80gPDqA-&PGs%U?#pC-jPXvX|_(bxb=-e`oH5U#j{U<2@Q?3qd
+znGqmc^1bmHr8TK1^ITAPd_wTJ>c@@GG#5H%!<z@23#t1o+#0Zr_sp8+LT5{SUr+oL
+z=s#tM@Gh;^i-Q7f$Ci0M-4r};h3Cp+%|pa}gt&K+{~gVRw?xZj&4u>!0{BN+q3`+&
+zg2FCz_F;7P;lB93>n{olJ@J#t<K&@+aikOb%&Ur@Ccfe}e7u>uym9eNe)3y$9(i0q
+z9#`Xk5qU%B3c{_r7}-D7T<DJ1LvthPH4Yt&kLmeI`~=rlxUydw6h1ZH%HE;)#1q~6
+zx%a6-p><|ZNWBVDkL12$DzwaOF6>uX?k*3XSuu8NW-Q@<K=_v}yyO2^(QN!u8mUw9
+zKb>$dfL1TJrB34cM2pjUqL<rAlx2dsrEY32v`*mtRPsOF@=fvF8a_i;D|9LS%oWXr
+z6y<5X9Da?#4L+sdQ!9LO{wwf@Pp#LL{KexG@@R$6#W)Y~{)o@(KAzD7#aEk}In&zI
+z)S1n+Uus9^(I(E#|N5Ff*H)*V3(FjA9i**3KwGVLIUWlpEU4eO_#p2}YkDyK74bcD
+zDZjeFrJt(vd4j1QSGawE<q$n8$KM`3dKzteu`lSSzi2?82R{@P)W>vYrw#25hW=W0
+zq%*sGDB2ec(x)7vT|W_?%>Cw{y%~J(tZ&76J`j(ap5c!XSx_3kP(G19tO1>9h&8)B
+zl;_@<>EeO7D?e>@$V21DIKrPrTcdVz)_dRCt2m-*q<&3d_EU~oM{fUN!<b+~u5Vf|
+z_|-i@fF&PH%=InrZ5U_oALf0KvIOrm-z(XWpG#YAG2GC3C!c<!Z=2#rc~Qy306r)k
+z)dA6X06G@X@8sY`!$+G7GkhI}Kc7-s`^iV)a_~6R!BY83{cmMHzq9iFj%BwCemsn=
+z(1V?jJI(BpbI_%;$6%X`L#7`#c|>I}+&1};*(Ub{h1R=+!it-MLi!eLlZU)*ayz!k
+z9oQn|m3aV^ZSo)}+hhkwzL~rJ88(XS6Z$B#RVF%H#n~ye?`Eqsf+r7s<9+(kx>(^G
+zZ-BJ5vR|Y>sq3ta&NiUEayABib!IVjw9?kNy23V~4J6)HXKP$r#nw=ID@aG_t+w>W
+z`M&=w*+Xl}(_2HENq@a{M(o5lTh|7K&tMOg*-snF!?$gS<o{f`ZL;Df+VNYO3#)IZ
+zpQ6oG`@53%*4ZX^d)wq5`nG$$ZE|0^ZE~)&O+H*^n_T}ub79Sc#M$Bc+O3;oAAYm_
+ziJ<Tu+KgS;C+dH99m76(82h9L`y`KjQf7ZZTiYYD8R)lrp!YHC59FG|PEj3qb_{(*
+z+fzOaeM#mSg_%egvr%LVsL#(lfi2M#-zPhw3wwn+Znne=6}H4vgny>l`UL-+OJnDJ
+zU+w7x;+|r5&U1u&!S|Wpr;q%B>CBBUixzC0SA)Whp^fu0HqM!ZhfgW^Riqtxv|a3J
+zzXcjE740WO`-D>YkX73SK8$2`k-{_*=47K|HF>XSF1#VzU@fwk9iT7p3;Np53kqxA
+z4+?GQcxczOUIYyn7!A&b(fh^Fb}4apoUnDxJi`AvC}iHX@~pwH4ZqB_gd_dddFam%
+zlqX?-M%Z7vG0&DegXY3OyuRlj<6~VPbmL{750?jpNsZptyUh5olK8F2!`boYk^XGb
+zt2<$9+X3?ZNl=I*n>6W(PpQ*`LhDqY)=bhm$<j)lP8w7BofH&O6Zrjza6dMhS4=?9
+zPxAKC4xbKgt+*-8w!7@v)o<Kq(Z0z&v)E{Ay`s5fk3d^1G&))?;2D0oXU{Vi4;jez
+zXkAf?m$?r&%Gi2u$u0F1@6Y)7kMR7MJv-axRO?q|UsbhjUJd)@Dz?qI3fpEZd7l^<
+zohS1AM(Nqn{yQj>vvVlZi`XBT%h8{)LE%R{i?>eh@Vad#zdG8$G4Me)cb$cMiEz+~
+zEn;KeTF=$S>xZv=hB2~@*N<X{cd8%APNluqPvc#U(>A`GYYFxRu|`*iqz8H4r^go2
+z{xAlhZO&20D%<*8Q?PFwaiU{0b6Yf|Hb2JrvWt4DHd=gEx}DiCkk&_inv;j6nU9yJ
+zmycUo6G>|~<G1hBN!}BCa+INyGU!=p>$f}p#i35x%`V!{PRiEh$`)+fk-cW9JHB*C
+z;|1lfu(|l>9q#s+%Pty{jnv8e4*JUjv>9Dlo@s+ac_>~dZBbWKY+n~`UjsI@Z0a4f
+zfwDKdX-h5b#n7>Mr~$h&Y<K0pBYqX*(W{_M<3pukW5is13E`Lc@Ya^+;$Oh+3zX$*
+z=(!sDuOaP*Z#f!x?{e?ZL)p40o69%5l(fG{+FvZv{48?Re9Pf0pL1h^YC1B^UTHaD
+zUoIYV`p|{^%jZTk7jn9r=Xe}hx%m)yt~n8>N8J`r^f*1@U3!$KytB|1=~6!JpDS#K
+zTuW@YJ~_9NKINKX`(mUM>Xc;U@`?L=27*#Peg2tzqBccOcd+ksq!HEIJZ`h0lRk9o
+zOl*sMHrO|lFw4>1vbgCgadC^r-GLq`Ueqp8{TfzRoST(R_EEmc=ndy%Ooyj9*>=Yl
+zp%0BiUGPJ7D%3rbJAUY`>6`VHo$#eAzSzYL`{_>RLAsEg;^fiKF7z=cee8?v%Tu?y
+zsF$G~5S>p@|D8i;Z#>odn%qFJuMS?Rt_Q+wuy3NUFWA=rc9CYo$<~I2ZYtXh{PF|h
+z>moO=knfH=S@o+9)81KG%G1g>)uBI)$R*a(L)^K<?TObp`Khkw(L2@8{DA3Hm{yK>
+zjyA%^h~v`6&C!ip95=NGrsv)tdPILEt)(<$&fn6CS(&q*2hgT`a?qhPiseb$yV{m~
+zlh@I7ozpF~F{&4iFD>R4ZEJGbxUYkC`($%T??bugn&OnD(X~68cZ&0D{PSfXyy~5F
+zBHv<scK$q%6P<CR3%&bRzPrxJ!OEp{<*zhV9`O;q19N@irO$_V$1B{5`D7#MbbJ2e
+z=J=BKyl*kyyS#97GQuq?qv3L^&11E*(qpA3yCL6adZ00Dj%TG+&3@>l&CT^0e;qCE
+zS#?b982y8P*K;%v_2Xe4gY?UzYfshh!b9p%&9;>OL~Us}UhjgwLDyeN7GWO@R<xOU
+z`lGUTj5<%et!hs+E~wg;z_U*JEZ3IMR)sp{$_+0&Re#Z&obR8+t1kK{#|y?0UDyz1
+zZ3%r<7kyQZzG_r$3H|G&6Ra)SO&phRi`gG)Q;Is)ZEjuYhuWB^{;R)r@d)Ge5dWec
+zrmY=y^k(57?@k9>O6`_(yOb|snk<ZSqwVa3t}eBy-WKchWt6}4EEjK7TRE{aUPHg=
+zqt*6>HkCa`^~-eH(HKcv`lYnr7_DygjiX+A-VGR!)JLjqP#sshP_A>)wGFLheAMZj
+z`d-mmZB64@bmUp=fKWFred(pr2VK6dAM43Oi{zmGwAkNgYxKkEk^9m!)DO1=`_6!_
+z?^O1~O;zIJ7WTu6yAwVtUbG+9Sh1|WWJ~?8>RDxd*}+)7o3(_2S;21Crch?5Z|O)o
+z1Men@57|2F6Y#Sz)*j|qhcI39ZE1IGpZce&`i!o-xcC?KIUZ?O`%G_gxE0&X0h68D
+zJEf^Mtjo!jb__q)-a9|Z3>_qGt$)Z)uGZh@x>cS=+L1}Ff07)(Fw^(_-ByRXln(Vn
+z^-}Z}`}+ZV9}GOd{Cn8PU{_3>q_(-q)75R|?dhxAw}5=yc!T<-_KWR0Ha|*OSAPkk
+z_T1{sskAw#4vi%($tCLM<mAdgd0V_a(H+tqp_#Rfuy0p=FZH)Pr>(zra?AQY6E~H$
+zCm!GTa7%pO8tBc_ribmM`uH5~qA}#Fi{E7ZjQUi`$MJQ*WcsPoJzojq<W88glt;SW
+z**N)Zy{ku^xEn3Ly`wxc2p5jioDI}%VP$*di09-^I+m`jQ>h)xHPySi?%M2@dPkGd
+zDR=QqZejaq&+3cv#FI{jcAMh3c=0g3_`cjgxt&sMrwQZez+Y*of64bn>=K@xf4BD!
+z8s6N0VmLpJzQ)IRK4|<nrbK^wOp$(9w!VnpK*=xX+$o!L^JVkTPHv%p_ZZi9x^ktx
+zeS(|QzpVU7BR$5odoB!aj%T=qJTo3g=xB-1(d5HBw~)sc*U=IB57d|Fh+7=x*O`ST
+zFo*mdP2I*<)kP=w0ke6mEeOl$dEaOHF`4?(sk-!Ark4pe-kbMnjUg@i!{WQEd-#bb
+z)$FcZ*3%as>tyK4;-1x>*m`WvzdOGw<)M!(=J${Eld@5r?zD^@eO+m?u#RWM6TL1!
+z|J+HR7k$_BFy51f@*Roy3nH{W1+CGwC)KGz)`kM=LQHlBc~q_=jmp04W4xaBHbB<f
+z0DWrj8i%AOqqYH>ybVCRYIcC^RsBw$qxAvk+rrPy<y70dAbVig7}vR3AFDkKvK3@!
+zOmpdY8_v;6y>hgIS<`LT=A^wn(GsyIno9OWS>GP7=-cCwzCBBxexE})t`7V5zG=R%
+z>h^7GOQdgyC$4XA@qIgfPS=_$`t~^WiE?#y)3*;;KOEZCr8dy(DgLE4(DIV(O@@@e
+z&-y#(MtVwD^=4S#j-PAeogeWAjQ(Tw@2>wzTfSfTsPBK^Z)nT8_6#1YoRw?+u6`5N
+zwS(kW7B;e;*iavQb>k_%{f>lJo7I_x)-e5Wo*--a73~K9o=+Q}i*`ew=23``yXfo5
+zdb>emq)NMiu-0x%Hdeno(d{nUnKHY<yQyruq0RA~{>aI*kFf`Rl6XH%o|S!;`m}7M
+zPiwM#WmklKgX{_?&lXFw6Z=8)fU+C%16EcyHlzLN)EJ`4)4_aSXg@gmaCdx&dz&PS
+zO#-cElT1KgY#zwQ?2Cr}QML)`ix1&?g4V~iA4BQ6x<>rz_~-w^(b4Pj;h8wS4M8x0
+zZLAZp&*toj?D5JESb2Rv@N)QWdSd0aGD|;wAK&Ed6t$^o(wFWxg>}#D8tF(l_L4m+
+zx~&d)`H+UIhjB~mWMpS;i}w%fgpaE{T)*MN7yB*$?&#%N`Bd$<s4wy>qjjLvHZ|d=
+zx}rTXZZ8}**hOmZ(ZO(!n)U&NV<`3YALM%csQL+X#LZtbmfJyn88$9toT7biS{r_x
+zI%50WY)(RYs<Q9E&IspRJDF>cp1JjbIP(ZISlfy0Wz*VX`B>|!(%b}fE^LpbdpS2>
+zKLxsMzEf^)j>gS5X#MhI<ZI(7%|#q`{;~yWZ{w%Z2bbnHwZ<V@yEP|49Xja3Ud?>p
+zMD{A$KB*m9vo&_(ueo%s5xDuHNFVoiacdhjr`{Q-ZD(G+E8EC3<105;BYrGmd}wot
+z&JG~oPTab1bGqW@Q^<okmr$Q=F2Uwgs_B~c<3#NQ>fV+H+7|7Dkq$M~8C`?ZZ2zV5
+z(S8-pXYx!RZMMXy_o~EW=x99uUZ307qV@WocgW}2_%!rk8oZwd{nLi}TkvQ9$o`MG
+zwK=z59P(2%3_`;@ey>f8{Soio+LAvSkGXxG$My5LejeA)<L&41_ValAX??}<{yp56
+zalC)`XD*K0pBf7l=U9&0pZ~J<XW8DUmiWFMj3bJBqu4uSXMuDsNcw5}UffuPy+>W_
+zJ=)>-7j^o*6P;PkoiL8k7*BgHitQY>e~$5j?W1Bp5#uDS8I+Bc7(bPbl^8dW*H&A{
+zoor(zKQ_`h#Ku2gWZppIpNWh~O5>w&?oxY=a_kMV@z0X7@sDWBGmgsn{X;w0I~1O|
+z(Y{-qYl+g+!@9vC=$X#Cn#Na}zYF(JDy=T!YfKyNuL|c`qT{k~ACudM#d?e4X^tb@
+z%OqMlp;u{@#!9xINntDZGW|}+NLh{JZ6DpgbbDQGtaMygkL&8F$MeT^wRoN~f4p7Y
+zcD!A+ebd$2)g$X7`=eP$>uj0KTsM1gvQvdGtKZhy*c^R(j`>H;L+02+nZq8?KIR;K
+zf2YE--m$;l);q#E-cIZZ?cZhI*`1SCA13?3_8Ls0KW^yJT7=RF*VFpxW7T&a!Y|tY
+zhUbGzHUWJw>shW3_4|i*_&&9ZKDCoM&Ck$BYmelI>X;jES?bQ14Wp4cTJ6^yMx(PG
+zPB9v_K0#T_XvF3?CXLuYMH;bzv`=pb>569UZ_}RVkj4WsPveKH@$qEhettNOZvRQ6
+z=Ob$#$fS%$=DCkaBlEgN8vVSj=C~b=S?vQ`T%_^Ikj9gPueOdYmvwRdHEnB7mHf=(
+zKAkm!JZ-b~(@6IDCarZeI(>@LZF@Sj=XGQq2=`cp^lSZ8YZT%7sc6zVoywwpFm5f3
+zJQXJ7`<-E#CRHgD^TKYe3RK)-Wy0N+smaz7U77lPnW!gaWg1ZVM^UC0ORHEW-d&l<
+z!_gnt-Zoz*(sXX*87<S5VVOQknZ}!(7F4;bAT`$RDhTVVturBy?i%IA-Icd5Qr@)o
+z?@ERh<;^PWD9SrfQC{9%dHZ~MyCdbzdbhNN31xT+<&|u5j1O}0WkXsg$j7yo$6ljw
+z9~SS%M`7d8M_DhE{jB!nEaHwkIe7AK&I6gZ|0CYV#DYISZ`@ea)(eBJteI|kfi@)*
+z(;63NiBGU|HiPi?fAN06uO*W1R;^)#d$838y`l9vwLu^M4P}xwdbPK%st)4rWYTSG
+zr%nf3>by**l<Q#Hcyi2o)n{oHb&z+*yKbXFv=ntP?cG`|Oem8_D6h$cz9XJAnG9I|
+zMVavK(v901Z#9{G?)(o}CN3|n!JjttuS1#4_zh)}_G{Q+Rhi)KWRkVDVQcH+UM3$e
+zmr0Alj-sA)TUte#@a}j=9<B{Y+rD*c>%3c&g$ZTyxuQ&_B9rS(CViHFQ6{{*bO)@A
+z)nxKFpZI`f;_@<?Oozs4)8l^^*1cKOE%8t5%DG>;J^#I~j6Adc-8+CiagcKaM_Yn@
+z8lTS^7d*M?f{ly)89rBkS?k{N-AKJvef<e(ewH*3_`4X0@9M116NTgKBkSzUP;{J)
+zeZo3qtY<%KeS_TjGRQjN0^MWc_i;q;cBy7>m5pPwAKKUdPr;M>zY!D;WP`%MpR%?I
+zt?V<{I{2-~^S{yA=c&E!%$nw9m}7Bwv(VqW`&qD;iszf-?4x&U+b0hl{Z&vn`X;}h
+z^ZN&W|C8U}^ZW1o`uP1fet*sHKl1x4e%<{3J-_ehZ0pqCaE_;&{8X2r>-yHX^(TkF
+z!FubTvL>5tE*vJFWYSOE{lp#2)^8pB8hrW--v4cB&A)%04|jv%{&k!Yy`j0F`I-K&
+zHJ9Dt@m1RNL;uwL<N}xPxa#>ryUQ2)_e1|+)0nM;*OTvG^8Ron-?R_+WuI@Fe824T
+zy}mr(t9-thk@AIqE?;=KA07_&k?(Ty{m;BV8_D+?AMQ&&-)qSCOFrM_<@s{?fGh8&
+zk@EcqpWgo@pT8&H^w_O~SCQ}E^8Uj}zJKh)UFq}vWAeSy=X+IozNh(ob0g*ZE1%w*
+z<nwd#ji0b}@U!GQ!2AD-<og*PuEpp38S-uM`F^%MUl{1hyVvKtzrpnC5PCHWw;Xo4
+z&SvGYp>vF3bJ)*e8#PFn!GGdj0PN{ZEZD6(mh?Qxv-ZIZ{uBF<c-P$F;A!7E9bJ4<
+z`==Cc@N3Oa&WZ(}*1Zx9<RicTk9{i2Q_n*@zsrxq6%!X!vzg*%Gez}(H+4?>&`G`1
+zdBGg}Xa+w`9g1tuL?eE-&#(XYJ%2vw`Sbhm=aZg4pDyQ*=+&N_|Hx1EV6YaS*o&b#
+zPCF~FvD7tXeA3*g#=k{A@f`9==PvWS7x{EegiqI0@Cm;npLh=WwCOkD6YZ4a6Z5BC
+zj19FPYw-8f*02YR`PL$zrg=U!c|J{pPfearzgL}4t300?u+1pX^~3c^<JV=BS7TT`
+zf2o{L8s}m=7Wu?;kx$IW=6Nsj>C+KDeY%2A_!arYbI7Mle-l12b})UiJrmlOGkBWx
+z$<8Pi`ScObr&BzixHn^fJ2PB+dRlcpeGEFP^{-C<PorGyaZ}!dr!_zMkN<}B)HZ)h
+zX~ufgzkdJXjf-c;xc7s8HnfAoel+Y?6<_wR^!I4?LtCTgZ=-#w^>xj~eLZ_Wpu1<P
+z^}EB*_<q#gNwVUkI_@;8E2Pe=e^TuMa~*EpBXfEk?MpcCQ9j?{=0v2w=y49c)mnzt
+zGu3^5)cMR)b=)z*?-71I{2r=<mkmAXsXX7u?_PfQ@VlGeUHoq0cN4!2{MPbY!|ytN
+z*YdlX-(r4O@SDf)QhpcnyNKTf{LbVzvyOW7ar*3!Gsl44&wNamANyq{%q!eDb)JhO
+z-ARqDbN!drD_ZgE$Bs$;IOgmajSbok#0ukPa2EfK7=GL-_mf!poosK+E$D8t+3x<2
+zVC#jfiRfIq&XS~l7Atf>m)1tYvn8pq^IU#f_h|hkcTZq1xqN=jGx@kY-i>ij#mM9R
+zOkJJ3t4-s()cY}4cIjG2-Mm7p<>BnTa8Fid-pOu$=*AQ43h&%(d&W|;=M_>f$GF3R
+zIIqSEDfre3|CG*(m**DJug<l5wN5gcQ@FL_CjZQ@=N3}$^Zv`Z#XAaCygRp$Ie`1m
+zaR2e#!g8$(jcIoG7qtEa_Y>#2J6cjdiWUAtJeZg{Z~l`F+;uceHptk?=KC?1SD9>f
+zL}c@jm(3$yHa!)xd1M6HJcex0qcYii-^%7>^F%~8Peo+&%qV2@LaZd4=a3D$>SXf*
+ze6c*rWixYv$>s;K!WY`TY%W7K55%}L4B0%0Y|!&o^xetk0c7)Fg=}zZ#m&j)DR})H
+z?@vTz^9-_i2=~Wu-%%l(9^8L0w<w#7LfJ6?HcU3uNhh0otH@?eL^f-^Y;N+h*-#;y
+zn?{h$Ey#v?UnZM-BeJ<YBAYuRvbk#%vbiTBo4b(>ZHtr5J@CcyD3?v$DJGlyVui<-
+zd)cf&HY;L<*44;nHL{^yYNdU0vRQ#_R#(Udw^rPoZ0>;9ck_OGL^gLJo3*&#g8P~Z
+z*=)f5zLISImib#(Z<u!+CYyV_Y_6>$n+qbcxyZ}rQZJi}D`a!&2(p=nY-p#;WOHpq
+zHkU<Yb9qEISBye7S4U*C7}?MlIN4kcUo4Mu*&Oh)xh__ibd{IQ?Z{?!jC=Et&3VY?
+zCS*f@;$$-$*_>A)8{ArPbF#S{UN7eTvWRT1KsFcQJ`eW`Dr9pp?$?!M!+m)s8|F`k
+z$>tF+o0(N)!+k;;H@kj-JBeI>GuF$du0l3rN07~l$fl=4HZvo#IVmEW2@%<xIttlL
+zjmYM7Wb=@h%~beec~r<|qSc!-V+HOza`#!L9z-_WiPX9S*>I0i>Rx1XpO?)qxtHkI
+z&E@?KZmqaE*-U`fr<2!75!sxIY~I&>KDfWzT;AW*5&q1QY+|8om<QhP&!V)^-w(#e
+z^<=mMNH(7vTQOGZ$;S6xJ|l2<IO$Bi_O<7j`)^=OB|9$jGuZ?D9)s60_HW?Myoz(z
+zJA1NsV>nK1BV6XOd4;p&=Eq-|AH<5|ugnkTy73oxcDwPH{6c$K&!N4X!d^)o2ns)B
+zd|GWB)<53HVX|#>X4bXO51AdTzH^1{f5J~XmU-Fh*AB+4vS+v#s*!n?M(!7Kcg*hK
+zzSRnQrsGxaEW@VRjXhUZ?;kSRq`uGmjM9G2r`_Yz=H9Qew0jt<lBd#l_qjbnJou7%
+zA-oGt<3sMCB3$M<Wd8zpUwz-(L{F5bwT3&QWP@uDO6oD<%htfo3h&xzC7#Nj^7lxs
+zcmh3n3O+m&I6X-{f$lx!b&tEJ(%e0zem@o3I+6RRL`w=<lxAqptoQ*mzKlC}PqqH2
+zT=!BxZg%v9<5nlXAH@nO<mcLM=DmmM-~(O<nTypJwI^L?I{09~IU?-qxZJNU>EMIt
+z-vc^h#951|4&q*>gS>0*piBqPi|F8a6*`DtQ3rXh)WHizql1hGoDN<a(ZPG*eW-(X
+zc|Ez>>&d<4vTeJ%iVoiGb&zpJnGRm-b?|ntgE#rKuk&f&QIYm_6*{=W>)<WneSrRM
+zJi_UoV%<x;;&!itYs%AFvm&B{tE=cB@th8>HX2u~L0{IwhYhBK;dw9DH?2hnH&o~#
+zZsFa%q9p|_t)yAh!8@SwF5K_N{hkUPytldzKC5<0b~p3<!*uY9upP9uqn?(S>EL2?
+zka4)Jd4H*-gNxC@D>T2vezvF%;$EhMylY;jOb72P%^PqZ+>^7Ihbp#%_!V`K=Sm%<
+zV;My|sJo3A-<=fE!FljL)WM6ro}B3Q<g#+vww+i-2QLlVLDrU|W4e>P4qo7OaJEl-
+zf=~ORinJ$G=-{bd2ha05$ojf#2ML#%jcm_D2QTnCIJG>jHK#^&@boG=NIa*5r+Xco
+zioVQ*4`+HEWUeQ?A7aH!bnwgy9mK5_H`fP4OA1<aZ*frvFM`I4alaJzc@;W%S#=$p
+ziu|V4Sl3u_Qt+h9>!ju<tF343{iEN0JtOraY=Q&+F2MuU?-G>GXujrH$XTX;@pDqg
+z^C+LU8;sXJQ}(;yRkgXavOPoD26q==XUi#?H;e2WV$PmD!Zz2ceL|X>9zJIlt}|)A
+zD(3eOX|7-MY0^j4i%#r2*;?TpjI!Z$j`LXaMd5umN<;S>+C5gf-|+K84U?$foKe;O
+z7THnn)5qspuIkm?%=e;nFt-=dk!#XE3(i49i}tf<A4|gwYoj#Re=K^muSIc+Yq+GL
+zGrXcpelvK^H~IVFiu5gV^t~F=$NU6m3zxX_x{gn!d2`$U;^`YGr%(HCMzzk|S3x7`
+z6luiI(b!#1qxRcq%~*Wg71GIAy^Kz5m=YgtUybq6_J4$Y%+tn<icb3Ja$efK1jb8$
+zr(9Fa?%MOb)cp)0op*$EGHxxS)7x=QXSySF4ph*Y9VMN86?BqLiJzX%?g~0dJEU`I
+zNGD^s@A>&$-Cd|LTu)P-yEDj*<FtOkI)&Ucj(a%n&%(>L##WJiy}*y<ba#?y(A|P(
+z39+?9+eP;Rg#L2d#JG;jSDl;PwQzNrO_Tqm+bhy5yI<qM9Pgyvn~B&qVVHtnXA9ro
+z;azslbjnz5j2DctF`l&tI<M^S%gAcqh}ZKz+pAL4pY$mAxO7{*VqGMiqFnHEdY;vt
+zgo}!8h3;Gk<r0o_-d35_ZZN(XCZBk`Bp=z5@h>sXHv977f$**Z?W5HC!nGy&;OFE+
+zd?z36k3<$4V>|hH|1$aDX7?d{v0Of<xP2of`S3nWK0ZuQKK?zFPcLOWrhJ_J=H-*N
+zy(6xEciX;|qI_CLx!)x_e7{RkKKMELq~qoCA?-@}XnoSj2it#`d<G)&$!e`9In+aY
+z=ju<Nzu$_r6k7*cR+0~XPCmr9`orG0sC>MCnS5}w`tzl7`TVLvKD-Z;j}KFnkADy4
+zvuHH(Va>Bxe_HImDkq<;-5*huPm}Jr8bx20ws^(*LpnwI;OFGiQeQ5gCc9rk{X|%Q
+zrbBxzyEyk3?hYu_FW9DM@ujMLyzsZTkJXP>?)Rx?^BirF?OV_HpkiD5rv<DP`h7aA
+zy@t=alNlT6UfmbKy#c*^Z=+Xja|8Qky8O2;RF?h^1%<DY@1bd>{VkRLZQeiQ;*T2^
+zzt#J1s^R}d@1LvT|9S7f*Zc4Hcg<C+=biq(laTg##O;hPA5u9!<I@@ZEz&tZk`CYG
+za{MT+-~R^mXl#{(o<ZmtaeezEk@fA5G(Y*>>~%wKecP>>+xqsJ#iL)}?&o_I@7+2-
+zk8aew<Kej8*xiKEmH(6V=ES8RtlpIE6YM+1?Nw-fhWXUH;(nh3XD+aZGB3oKXJVY?
+z_O*m(Gc<3i`BROzG>@<OeC<tOU&8yWW4z1n*Zh9T?`Qnp;P(@L2l)M%AM>`ESNXln
+z?+5(8A1m$$Y|y>}zgH{s%v={H>{r~p`y(;to9EiR`$K-s?H<3b^H}-1&YFAXy7}zO
+znH#^Hy##CSixu45b`R?=^bslY)|^x3Ue=EotF=Bd*R5G-{a<ZS8}T#uvJTQSx3B^~
+ztsSdAr=NgN(Cp^=cU0uby5ga@pF@Ap@^NWD;L~`}){a)}Ank`pleCrZa_9-?e_9{I
+z{RzL$@>Hy_QESI{wLIz8^`pFjmu0-UBf^_oJa1NbI`68Wb43Mj)_C6B?s<cZ9B)>8
+z-rP~a8{%hHL;LNN3%}G_&zrm94YGB-xv3)0H4)xyi122uPh*4U%}u0z3u%&eD`}VU
+z<}TdtF7f6MLf&XyJ<6LmDtL2sgf~}s-dyDAytabQiz;|?sprjN&l_~v@#bRBo2x5$
+zL;TFe(7u>*;g_1{d2=1SIpFiWyduv_BfPmR!kc+Mjmtc5E+_3PNRzZ%NxO_U*W!L%
+zi8sI0`keGe>)KJ?{JMfSvm?Bj>3MUar}MlDI!~<N%>>VzGd*v9>3MUK=gsU2-Vi@?
+z611O5x$sM!>Unbky!n~Wb81DN6C%7hJ;Iw)eHy2G-b^L!nWRbDt)yMXoAYqLpv0Sp
+zL*8gzIl>#YVP$pdedcwa@$Jp8{T%d<{Ty^%1)V>(dE;Vx^OL~Zn|EyvIrYBh4fCb0
+zO?bb#yuBfQhB?&McbS{UPv22-?af$t^RDO3FDvG%e-fFi{+Z?D(tg9I@iRY1{Y%pR
+zHEEJ|D`}VUrVieWE%9b$$Q$MaVv}tys0|*tb=_CPH8t(~T*7>SU)TMS*3>j7CwJ|Q
+z_3OGnVm;$kt*J4dW(<=H*L86Z$24wTmv_yfouzS3xUTz9WKHcMTT_!AN58Z<gI{qy
+zgXeHPV-|jHk6iro?)-tiQ<(E-bW%T{{NE1>A0>^-vpIj3{9w-<q`psHPsIu+!^^5R
+zZ-ZZ7hOc&)pp9)^ANNc|=brF7_n_Cg=PKm?V1>>-<aO>T(*@0Ay0&VE*STjZbdLC$
+z9q7bU=nH<S9<OsRXy5F~@Q{A;v5Gt&is;-U5uNMtX*}X}?lIDSLVO^7(k|1v=Wu_a
+zS@!)_@#()YM`N;+4qaukdmtja2MB*(b=e)d?gN(HeWE#5*a1zh{bcTCSUtEWT-Vdw
+z^B0Ho%?!7{;a;ulX+BK*eYs~LtOxf}5AM;r9&4@9dVqUbJ>Xs6rYWljr$*|*sTK7A
+zzhXV$xvU;ACz|7qKDVFot_UyhqI`E$=jGol|A2XUhw)Np29H?}n8Pn?dvA)=gSEaM
+zT<z<@EfqR>bwxe6&ewwtz8+`}Qnuc;z8>6EQ4ff(Z;okgSl_Knt?>2WcI}Hk)#|~T
+ziaf82)PvQLda%N$vD(*zHKe_kG)cRaw9D$jEx6xast244w0fX<RpwNk>=s94x0vu(
+zRF~aZtsk)Lt{^Y!K|k%Ks|U<+4XX#2h5bSK{MMSw)gP4Rwu<%Oa_Yfl>JMzrvDhEr
+zURDoy&v6e+Sv|Nbvc7$nt#23m1N@5hfakJ$ptI!6e>z@X8sX)ol<(r|yd1aU1Loz$
+z#>+p4m&dFJjJ3+@!FiE-aHg*ZC;57CL4{79R8bF3_4QzO*dH*LsCqEL*Msva>H+aH
+z6VTJy=rDfz9-gy7E>eGRy48c36?vW-sRvUd_26`$##CPqW|H=qq)FOZe=n;C7vO$T
+zsUEbzC+iPv--MIhi4obINcgeUW!IMefMqw9yr>5wuCb5xYwTmIud&Zs`P<JSrk<Kx
+z2<H$-`p(!<=0lIH`v~8oYh)g=erx~larTdM9pU`p;Kw4*oPjBx`D5-@-(Nrahn&sh
+z?9frp5gk37A7^KdHc9SwR!{Pv9$!D#&z*6GqcDhnsH@uR)sLIT&hH|>L%&y=e=Lhb
+zy4B+R)W^yAxxTVE&{Hjr+9u_*sahO&9?I;hC~ZIVadOq-xU*Bk<8Ut9<+Inv`JTU@
+z;1K1Vg`3@Dv2^GVXVeB;_;EIE(A%AkPoI`M`j0)}&WZ6n$n(jhJNRkp5AUJf3r~yt
+z83&sx&i~*SwsQ&>wsYShooek$bIj~aM+5S$#=~%~Ty2whIasTVevK)w_SCN_Ma!sr
+zHgef(OJ|&T4$CMTDbIVcjLdN>U&jmPsb@vc%;8roBhO(OSC68Mx<_NAGA{9D4CjG|
+z%hCF=Xx~*<MmG<ZER~V7=fyH|<}1&8v5X&!l<{K~WyG&oMxMhmsy{oH9JS|Rq%w{;
+zM_qXaOK0CyZ$B0}gSBS#bB$Wxc<<Il`6KJDWS+Xd<~;SV^HF{No6YQpY{iyy-)z2z
+zZ#Lh{H=EZ6h1DC>KDo2Vy>?HW+9>YNMhD%QWOOike|8Gn>>I!4_ijnYSFPpSvDjSc
+zd-(3~z0^JSWy=0Kq&=zFU2WKQXMJ<|P#d=JSu@z17X2>rT@`)YUDn5)#opMqyIGgu
+z40T>>dhw6<4w9bkujxWA`j*j7X#6hq;~{8NTbQ}q@;uhJyHe2E3Z06hG*i&4?^U-x
+zNWaIJLU&@Tt!bbQ{-)of5&g!m_O50g<h#0cW45lrer?+kFvlo<1Y7vA#SdEMjoGU2
+zK&PH??v~GL;yq>WsjG$7{-v(<Zr2%RuBJb~7G7Qlo!Gd#^IrQT?f!~pM|TQ$<&z@K
+zu5Q+|dH#3kNE>BY;M<iEX+Hq%S3vtS(Egmuw?zBQv0L>`?9|IfkK@r|Xn)n-Q}cwL
+z_RGB6<%XGg(0&=TUk>e8)Sw-AM>}bTw6F2BXGTN&b7Qxzxft4i1noa|`Iczsd&BzP
+za_VPBkE0#?GxJM(Pn{?9v|r%eE;7uV2kjR?JN8lQ#WiTh-O)~(A?<(YY2P#o+O<D_
+z&6ygzYA)ZMH!jkyZzp7C%MP$R>K*N~vCkRHx;#&h&_31EKGV~FI<!xPc5J`aGi%U}
+zyGw^OL)ynfdsMeGcVL5|Ytg;B4XlM`P7MlwK-e4CG#5J2x7L{rTU$@`G@M9y<_=pY
+zAP?pWGbeePPNGeiz`X+KZ#`$}G6zmj-EifNAp`oQE%O4SY0?-wXVLaP?L{5wFjuB;
+z3y0sVPLZFZy^g%bTAUR;r+IdJ-`AR3D&j9XU7QDq^Pu_HDBsH}pW4`3-)Yvq%8|~z
+zvZuqH6A8<wd=IeaPqdkv<<EKbEobRo2;67A_np1E2VePCelMr;dkYQlY4AfDi!^XI
+z<+P!_!O&kTUT1ds(0jMe%M;%934<rl2C|-cBK)2A%|ClH_Pw*d72dC3kDI>bE!q?=
+zh)LI`4gH+GJJGT+7gcB&Pkzv*yFME}-~8m>VAH1^os=nhH-_j|dWUdVnRKTHHbz;P
+zvb2?EeRE-4@czpUAD(}&`tW|grfxJf7r!A?l`rg33-7NKo#7oG?t21b>^sJyXBa<6
+zh&NMZ<?L+3c*fX`*oTe&E|8db^qE(OrPUJbQ{J=KKPcXaPq_$xj<%RA4#As2_|iZ+
+zvp?Q^@8{-nb|g0YZoVJ%tuV~*V((`e|Dn55whLk=+x^hn552BjW322^S*t98cmjW;
+z?$PvZ45W0*zwtnvVmtTGsuvMC{-2arwY@6CY`K;O?)7WzweKo%SJ#05J|_C8Z)4?}
+zf_?Q4>-LQi#_RTt1tZ@_>2-GiSK4>j^3O64R{ZvLi}uGU9^cGzeUJ5*x(90v`{*oP
+z(B%udeD%JlHxEtPGbG!ur!TgzndhGFnEM8xY(VXs(>JTnn$cY7>9cQNM(x3#wD~up
+zFO9V2I@hJ|Y@ba!`X;CLX}u8-w$6)v=uMsRm`7Tg-zZC?sY)8SRZSyaBaMM7-{r)u
+zGL6fj<KgbWeXnRa?RpQkY8frrD(T=Be&17eZcp06I9oTaanTgBb+L2xt(b1?+@09D
+z-^I>-$c?+$M@1a%(-NOM2l(zaHmlA;&}I(%o{8k7{dAI33{?G9TiuDgv=_T8uDcHG
+zJDRh+-P?77tw-s;LVd$Xaq^(PH{a9EH=5GnzEtf;kR9W7q|bCm;d9-Q=WOITZugGq
+zn@;XqU4$De`UrD^FzxRmLpCa7zB|UZQ@u`6Zs`>5=RWDd=jdzLugbkp)-Hv6JJr5A
+z8nQkO(sFy*NK1P`b?4x8Fud>SCHm4l{8->^xDm^rru+k8`LW};*QQv0Y&g{&mv>X-
+zIUarX<tMBwKjB>Y3FFF7+LDv@IseAxC$41uo0gx(*_A&tn({;M!|8BerL9F4%ik9%
+zXLsZ|8+ne0^7rK@oXOvpKke^5`)$fk+~21Bi+uSvji&tRI^-Xg-_AD{%g@|kN&b=N
+zc=S1xf4!G~y_bKzm;XPb{LuB=l)sVkN9(%2N9A;n`lfoKI;i^7;O&A2eGf8idq)=%
+zH`h|<zc1*&Cr^0YEvT~$PM3XpniCK26LIZ>w+kxA1Aphgs~z59Y2S5L8)0;bj_{kZ
+zve9&3d#=xTth;J+-S$1$(w#)KNBA2}#&_A~;oXj|zPk9LIr80D=odeWbYyLRtmVn~
+zv1kunT=-Ng9K3ot<dtmNTv~Ki|32Gj#~Gnbue|?R_Eh{|{w!EE+otU7QOj8DnveGC
+z?x-Eu9A?)s?*nb_Yz{iYT+G(|fSqaa-!|wi*)<jORn|w+r1?IePqJZOgzR<fj_CIa
+zq@TmS_37Lq-}=m2{Are6Dc$r4>9$l!*SST~ZK|GbXS_PCwZ8eS?~&@xvP$~G^H!B*
+z*4zX2y<}g-bq)nyDIMk{hNVOQR*iSHzKdt{O!Vn^yP)NZz53prvsYMm&$DJOdoa(M
+zuWUixdlt2ube1Jb<HMXE&&RJR+J5@(U8UWp{Q%K8J?sl0KgL{qe;xbC<`Q+5ZK|J3
+z{5bVj-?^Y|;LMHDhArjnt|?V*sZPo<%iBnE{oJ7LgO;1dJT5KTAAS2_2W^r|Q)l8^
+z%qDf~v9y6|KZ<=u+Ri7rxIA0mzr=rs;u=Svz9G1SeAEugKg_3-eDwY6uw5>;lTDW9
+z|Lgj-FBa{ZBF)+Id#H2OXwG_?u{+gnm(koEp_ylE;}@6HoL%hB=&8*fk!Ji|+u3Ak
+zKI&=C_`bMEbG-cS=BhOJg?z3;^FV}Vo{i6+FQ=LIT;D>pG1drtCZ8zHSx@sOPxJS}
+zvwgG?%IBE+5wElFq+{z3<8_m4y3nTdwjphY`e*H9(p{%cA6$C^?d0kDIno@F@AyZ{
+zu-KO&S6PO>QI?^_mw_?Murj10W#HNIK3k;>xH+20)0KfVM=S&W(K5`S4AZKd&ldml
+zH@LH6y><R>yd3ZFkTGkp@Bf0ATA#6Vi;MWyOzAG#%WoUqI*n{@_20QB(~W0aG*>m3
+zH5<Eswpu@UG+sxT6ZmGOok!tbgF@K<>8`-yGi%B^i(=ohoXWVIA7f43A$ycHW}Q*#
+zicfQTMqhb-Yq)mInTSEVhj9x!;>JX7jTU$5%vJC!dVVDuPv@lwQ#IZn`FI(xD`oMZ
+zt5&>E`*@qG#iLBM;+^H=g}PauU+s7!uF+}TFuW&`b;EyTZO*OHvDO^klQ{buqm#Yl
+z{@$&h<vXEuHP_~jX2<M1eC0&;4NS_v*D_|S`i4V)8az3OuIZjp-QTyLZyBEm&o9T`
+zd4qN2;xp^r#eD?u*X|D1T3xtar#plv<IYjcYgk{%PVLos0<{nNzEjxGY24rcr_5P?
+zHYn`>W36{-j$uksZ}!*Oxc@L~<%8Ted+4*xg*Uhl@D0*@BVD)k4c6@sT^ST~Uu{%Y
+z;hm`abr-7g_+<I{ceRg)$ajI4d#!wWpkLp@e&cMdk?7omyKA(lgY30%db|Jkd_HHF
+z=i|;>kx!_XHS>X2Jx%1(BwpFs+OqOko!PcOT(@m1&*w^Co=}f#=0o4vLtpU*^*7J_
+zjIEoO>Qp~<oP4+KN9V%z;pn=^r+hx4-q*~BHdk|JZ_s|^nJd!wJ<7`C?-<>$yG11*
+z>VGt!5$j3iS~hzwTpE8^swZ#UG5UJ4AHC{FuT<{$Zv8_3@RdvQ)Qy_;rfjSb*Bt06
+z*plqG4aWuDb_Tfkj{a!e;KvEYcG9nJ_YPa%X1wq$va$L@9YP;ekDjg2J)2uH+dSXm
+z^Tc)?7g^7iPHBF#F=}7q7S8wSTueS*=gwxz&Mq5^48(?yMVy<B8MIcCN0-9$@;av&
+zm2vpp2ifZRZ0VeP8GY$0bECMG(br;U;)l`KRE0k07NIX5p|7Gnx9^&J{`HmaH7KL6
+zyUKhiZe{dk?GA)t^rfqextv>szLwIx2>KpQ8ULC}<GEZMIxA#bIsWR&x;e?M?ptzx
+z{1ugFK6`Sx9$<58oFzGG&U6}Wd}SZ2?`x}#?rgcLS9fRIH^~_j52IybS=v1|w%R%q
+z{o27eT4SSfTFSqJmuJjSq9y!>`4qkrGljbKv0{HP!`rd?-i`a-591Kgc!)krV>a1&
+z`M90&*7%_E8$3DuWT$FQMrpY55aYj|fzVc@eJ7s$bdR)bJ$+YPZG-N$R-Q_;IKCl_
+z*@tFNYX4gvUWNTi(e6f;vLD^I-Q(n6q?!AkL~~1t<{V*_?=1SJ;usEpqnkTD@Slml
+z(a!vLQ`~HI+6mFF_|8_v-RSpoLgcIb6@Lcti)A2Ov<!da%aHMXW0&9arut$waLFci
+zG!@Ij-d>d@8z~EMhLr_>#Vg)TLYS~TJz1Mi?@5PcnrvkX^Tu82g?EEEx%8RcuJooW
+zUBZ@?k2ultVRSkfZK^C^x1S@V&2ZtfHn&%jm5t%@eUb7JXIT00cjY4;(V@A@V)<Ia
+zHK?$B>|2w}2;+F$?aN0v(csFL^>d$bwS&XwK6Av0mhX$ce7VZ<rNen{U%r+))2X8T
+zY@C#j+dQhHi#Wr|hrcUdpD!O_isg&f*&5qGSU&bbseFWS<-=X+Y0a)!z80fHeTgd{
+zVa2zieiA2Iz7fY%r#RY6V=CUEwKt!wD~+kT)!$W&sWy$yUMP;K`i%b3jH$}b+{RDD
+zUYNw#Xkz)?VxRH6Xft%%`)^}2l=UH5n}c?JaN6fV+Z}C-b1n75`+4UUog1`t)W?;j
+zACIJuoZS3qMc>fVXSz^kgWy)yhj!cj9mD$2tnRlcw_kG3Ez*akEnnAvRoWme(jDK&
+zH<josD}TI79?mUN{sC*>hn3&yflnX3s#^YR6&nn<vht^E*kCQXf2E@Q&Mi{@Cd=3Q
+z?+P0%Zge~O50q@Mvhq{!hUMYhBIWN^o53AZmGaM;yXjXc{W2S>rHYM*TUq&=YS?)3
+zDzrJbNcm~+OEzeQ4MpEjlz(^0#w#m-wu+tR+#=;qTROwa-x5i`sg!=S{P}pf{CeUM
+zJ1uKGjnb3Hb}OqZ%mEf{BW$>8cA7iyhn=lGd<_-#yVkclZGQcfVKUV>1b1M+ktcTF
+z7qI&{yT;tO&iyOxva&HIiPGAWy;^q3)+X$}ZtSsd472-AD+{mhgcQrhe7V)(lHIq1
+zaii=Y%^`($$PR3n-LlW<w?wP6{TM&X_9(99G1o3z$NJC3>>0R<u-rTB*9-L>M>k(f
+zIL(VIuKFp3*Zj4c$0Ur4A0Oj%C^ukhc%hs1XQj0}eRnbRbN!VIADOcyujt%(GiSc?
+z@OOdlr)T){$hkgmXQ6Ww>8G?Nr2e*8R>p>9WyOxyUKI6dE`J|BPkgz_FWR4K|AcHr
+zm!{&j_<PqPJkTBu_0u+=>(g!Vd}tbjU!&!Po8tp++B=}Rydoc5c;%(=J`JC5r_VP^
+z*AZv8e4#hv`SHDwAGBdEk8Zz~JK*iIqU<a9G2rb%;uU$~<H#0sJi#xTcQ{9yOM6?3
+zG~};w>r61JAL06ecoW8Re9wCRq$B*n&C!nAF#fpk@W+Ms{E6i6=p_Froqy$dw5gIu
+z^m8tsfjZL}`nqzRG269RKbpMFMZ6-9e4IRKxV-U;=56y0(nlYcG#rom{C#Fo{lP5;
+z-yDz9W-B=!^?4q3M|gyr$+rrRTzKUf(V^~A{*F%aiqg5p^C(xzqpV+VZ>l#QrOl2l
+z)+^?z%Ia0x+wsIJ^2o=@lZMM1zi8e?TYSLBB@M@;xWBV1$|Ky0JnA+Z*V>P<zP*X?
+zC_dK9w+fH&3*dEbAi|?a{*F%aiqbi<4Lw%<X~c#eYc_OueaVLIv+|d%OKkqlZ0OK-
+z4$rn7-?!;(>wn(<iEL><vW+FwC;tC`?`zeys+Q8-X`L;)w<y@6eHnINntx^uYQ#I!
+zn1|MRiG0g-#eTRedZ!xxpY;A=zf|dew)YR)<Vyc0?;o~DmHxlUT=#dmk4$sjo!l`N
+zt_j_J&*<u%)`a?*Z$H-EVrBE&S@y#8P44Yt?oWGRx*4~IeAeDtH{J>7z5DEa_<k7H
+zgs|g^=ePX)Hf`M&ezq^NJ2H;Qmc|iLyI6hmuyKlWi`eNcHO47Tk@Vv=(x=ZKmcDa~
+zq~BL#9MByZ2V_g*fO7h)q@R{sB>k2e={J?q&&3&UR@(U4@-c??#>%cf)?OUV`wma5
+zVm}Ucb}6lJyx{lIIJ?^Kqrv{wJr`~tjrP+(qxQ|56<Lqa8d`L`@G$eKdBzOdJF7j^
+zI~X%8M<>eSFt1q_hcQFGZ)vaMXuoq0<A&wb`yR&r`8ey0%%jWh*b!%)k+nqYQ~iD#
+z^g!S0)0w>(`Zt4py3uu~PSTy_>;}%-`EQcuDWk><JD3OV!iLw~8d^Im*@T`KaoIWE
+zF6LQ%yY4h`Hgs_;5spRl&GyoL(QMS2s4^|^HcQt?c~gIe<=qs?n`g`0?<FbbtvjJL
+z4#MU~pPXGg$;Lf*`}{LL|Cqn4x_a5G>}6?*<j=FqA6=FWT2}t7xrvVA{BL(TEnoJu
+zY#I$M-e$A0o0mg6LJQB1mcA;q&<=<`M+^Qlc+R6AQNGOgwB$xZ3vJvmxnv`>@N9gs
+ze9QR~p{1pK-Z;Edd<L}C+)MHoZVsqqv++*ZdNrq7+)FZGW1pzaHv8Vu^&R27XBTy#
+z)7OD;EFIc$Bkn6f?%_G91y#O(+Uf5Codur<PY4P+AKt(|RXtNrhn+{OW)BQIpAwJn
+z>!cmhH$lU_DOz)#M7r+WiR+WJSJS?C%y$k6tNA0-qfXi`&1>n7`QdG3d7D&i9z*xG
+z>pZ#IpTYPf&I(T+`nKOkyc-_MJ=_o62`yUZvbO4K&XNajhILSDRoYK1zdUWM?g{Fo
+zKki~5WGA$DQ3rM-=g4~gHthj4JK?IKX#3{mSDdG~#>uja_BWKJc&@v=#>4Ytg_W!n
+zR`St)z-OI|=dpf1H~;Hv`f_{X%h?CbJPdPER#w_R+THM37^d+yXZ}Vf)3N(>4#Ax-
+z8qhpRBYWdCS3#fXXxG^hcRm}`9U}bTtM(u0?t*uaiQUnpyPCAmf**3$+*T-medn^<
+z(@DSA(@A@&K3Ct|Js_EOtG&`QYmSsz&q_a(pT*G{pV~gcr!9=;(4-SREw-jCojTUt
+z{+iFzoR~|e$>&8m91r7`M<@M37kYqO(VhzFcIPFJkxz{EU+L0kye;PR2K~|AAANT?
+zLmhCsEL-8@%>{ikeLs7H!uc|rhckWaCysP8)Va=X>@MW|IC^4rVB*l<ooZ)ObCgH(
+zTk^MkqVO@T^)%myx@Tv{^yFLoyiJqYZY~bbZrs~vZM*8sj7I+r1E040))?jId?fp~
+zHLua=$`Z9F8n`EP9QTC6v#phT8Z>s2ovU~{i|_L7vw0{zi_e-<k{zslQ{g^`PV}k^
+z{c_>s*0zhj@ZJgOu<Hv3WY-xFy6F?O4rupz`~CpE>_R_fS7{zL<m>J}`W5jl>(e1#
+zn2yS9G)q6QG5nmT*4*4YON;R<50Bj3K-&5~*<Ho3-A0$zSw*MvQXSX12%W8vjO?sJ
+z<Io>a|9{tXsNL9)Y$|CvRkTnZ$J-`fh8C|MAs@P{m#tQsYTuNP)3qk+!>hG*A+I!F
+z>%!8`YTZ$~Q768o#ec8cxEJN+pF8OvOr{Y(;wW4#+I}?JcC%&NKJ6iP=P(Cib}lon
+z^KK?b*N!?};@#<z=!9lhmPXe$cG5R?(l)9M@1#vtpQXE@)CZ{zddH1RPvc!bwWpIn
+zep$OeK>FhJ&*i&_`6|%?_K7ZE&&hi_&#Ff=z@NDGGq&$c=q$CLww^SOdae1_VPiJu
+zX5*jP{tn=W2kcDbSk@)}0X<j!(^=GLJD~jy;aF@eZK4a;7r1bheZx-5|6R&2d087^
+zbtyc*=-TUSq@PHK{e<<`VLZ*n%N}>(TPpgArr)HWuyrA&vm=fSk%z0ZK7Hv{_-(2j
+zZGvo1?eEmO5&G@MK{~goIFHlk^kc7d(kFcC3~Q@*#}^Gf&Nwi%jWo}1`(u!c?;m>l
+zY@Jj6nrm;nN7vq}e{=0@*21e#79FZDlaP^UvHI6I^r@M?@96Vw7;!F?z7Y0Ppo@o}
+z?^j%Z7`B;8PwkfrgKem^zun~1OZ#?|xUTND_%@q1!}ZxswubHYGQ{iLxIyDq^%oCM
+z@O=)n6#KKZtvhS2y4at&XRqh@J3Vjldr4GYo?YI3rT*gKkCdmaHr(1a-yX$P4lDN|
+zCllW%GT*Cup+2dH^yU(#XTZKop|dWscZ?5~m-HduqB&}B*EHF4XrG2*RlXc)J32{E
+z<0o`stM<gqAnv&Ojf<mo3Yxag_-616*%s4d><9nmG(UgDxO+yRxgRGZmwva&<Wr}4
+znRtHYn!>qsKQ4;<HiA4gR#U$f+9KWbeU1;5MKrqdQx=s!yr(wQhux&Bvvm`p+w!+K
+z?zzv)c)+i5K#Sy6>K}buMjdry$T;b@ROv^vUZ2vXel%PoaD8dk))egwUgMDF3ZZYJ
+z>vPE4$(p=PFN~%Sgoe23TCrcLpu^>lo69$C>l9V{ytvkL(1|8nd(fFiXB!MCuIH<J
+z);QbOYyWP1wmfRl@elNG#s1v$(w#d>Yt6{_t1b5I(!*Wy$m1q?<>O;q|10`L&nrp~
+zIf<{G$Sl|7+mUWt!^*eR?Q2rJ?lEBFP@MK6pS5S{S&{dimXJ2nAD=hjtL6PTd8_?&
+zXEM-T@l84~O?5-}x%6p_T$g_@>+WMIyu;Y{=!f_*2d(cM?Du=72f6p+9qz^mIBOog
+zYvpKG^WkII%O7LB5EKT8{|<5Nj0W@I?0?nVY$tQ#UD;{OXHDhas;NVR%8&H>*{iL4
+z167v&<Z*yJ4yvEv{+2lPH0{r{zvJeR|A;-(_I--OADPOXFER2BI72Y8XC`Z0O&^9n
+z($RU7!zaue(pYd*<Ga2S_Gv8O?3A>(Qz)0SQ@Z{A5^)<N*xIXfY~#y1Tc|$zST;&$
+z+}kO#QLw9Jr<m;g{yUc!dXe_FNlU~wY4Yt(JYt&+1m(5~GW;BR(?B11tg)T?J!ju^
+zTN)a-ihj*m?!d;1-YF&;WoKyJ{FpXIX*}rTd_Xn^wn8`-bv6dP6kVYW)5-Wqca`B*
+zY|}%UM?DV3_E2A;bZ!1(u^WF@9e2{!Yj38)xp61<O4zn{#%VK2<8j8KX3H?{oKmu7
+z<R|-6ZG!cwzO5pj+6HIS;qU5kUu4Y5v+AwvN3}B=)6MnYz?O|vISzW9F`df`87sWn
+zF43!Tf!db=jTzJSEM3%CPd0NGeRR<->$9@R1}fS^O}G*N@yWigBz@O6yD*E2G6?zM
+zY&GhM(PHVmbGnb)Vr9|XlI)pph5IgwX?p)|v$33QH=zD-cz>Tym-cmq{r>D@_4|EB
+z&*R~|z<?jWk-y`0pKqhdGwkn6?XdWu`f74><!c(=Czrxk>5s`@X}JEl$?P@l6BmDV
+zK1|~R*AG|FQ%ds#prPB+DE5ODbWCz%(Bb`7iH70j(!6%9^j!Z=9;VB-C%0<<p7mk6
+z{l486&!4pM$MM@et3M6xc8lZu2(LV9(NVpBXO43~`&oSd-e=D)J=|UYj@xw7&1cPi
+zHk-=#?_L*le~T+$Q)sKX?|#`>JZ{gwmA*9j{m-OPjfTI9_VWWJ-TJ`#`FQD!rfgk)
+z-0Q`eJ^K6b%-%cn<HdfTKHl~H^evhP&(r_s=>NIjmocH+FUoysYD4L>umhCVe)|4F
+zY==B?)GrP8VIyE4^mA@(e|Q!RyWjw}fU^-ezg1=<aDFU${_q2}5#q<^^;NgSwp}`W
+zthxFI+WzD7`p4(>JF!2G&+Gg7rUBV^vj2|H>pR=0MK%=tXi}ebd|p3X!#qB(uW{$`
+zd41hWczj-;x!!IY`;BIP<M_Nj^9(J14AobfGdMo4&zQaG_`JRwpY|P}*B2j-&+8wb
+z*Ejpq=4Fr1>-)9Xbhz)UxX<hOy#DcdefO=3<MaBqe_dlV*OyXPG*|EDb?H~-c6?r6
+z>&oT(a<wnT@vHmzynaz%j?e4c+W)`6y#7(@XShe8@?7HHn5{$V-e~GAYsY+Z1=QIb
+z)#GtIkLDXS(+RA<X7_&(O!p`#96fq8@>+bX<z5W%0X-b9$p1He56KAQjTXar$HI^g
+zAu4<wG#|a{%R${gdE~=9N55Woi2px}?|%38_x|mN?(Kj0xBu$ip7n2k?cV;Af6KeK
+zZvXc0-P^bQ+n>9)KlN|laBpAtZ(nt9*Za3LDB8Yc7%gARhOe*hSog<m9m`uceC47G
+ze?RTsuW#!(?}o3nt?mdeYwc)lpT26thIJcUv@fi^;l}mr*KO!nwQ_o<^@hy!)i<t9
+zceJfr>l6LL+Eq8NUzNtY{p-_Lue)*W%IRy{+NXal)7HLf`i*P9wxM<X`nI)Sp5D54
+z`jzVykJN8!ZNG6<l&Ih0IUfAs-ka)su6um(i;J`SXa4<$_mxQV33X%36PswS9GNNq
+z^X|c-8vZMN@HsX7w|oCr_@D)Ad&AP#Mn3&DyZ?v#&!OV#Zwd5Pi@*6J=FeFZ{jr=?
+z{&)W|{C6J1|55K>i$BkM|3-4Ay%|=%S57v1YQ-P){+HC?&l&9Y(qFCkbG-io@~_69
+zjUOF3{x<Kw=Y;C<@0>Am{QJHCt{U|3`n{3k@A3Xm!@O$r51wW5y`Bx@@50$5r=Rlv
+zwbI{o&dBM%<^5~%Kj5RA`m2@xtlu~PTJ&%B{<YHY^!~Nd-}{M?(?90|^RJbDv-hu+
+ze&)iF(|^(X*Gj+N`|m-%{2L~}o7o(rzgqD(d;ePT&$xKx_;b8}t@tlpGIIQb-v12R
+zp~fooH(X}%YqfvP-oIA)mU#bw`d5uVy?-(?eJ^_d`LrX|>QCcxi(gCsI*#H0+A;hu
+zNsXL-=P~^2TP=Pq{!I4%{qz&n_&?M(a{TdY%>NAQ8HVZK`RyaepYQ!^#n1Q-z83wr
+zdH+516V>E<$?YTOzsUP<g7RwRf9;Nu<G<zom(^&Ww{vJ)f3@^u=VtS-RlZ*DKUAat
+znDT9lUn~8M-oIA*+r0l_`u}R>-{cL9TJg7g|JPtXf5YV8@u1OHEB+?$e+HGSn*4Tk
+zjU0cE_n%Tje_zj!9RF?aKkGx)^S|(~M~=V1`_HdY{>{B3$M5w1%{BPn|IEno4}1Sb
+z7Hk;*=RZ4g{H5Ms?RT~IZSwa<j(?8#Kcj~JFM46*_$$5t?i%_%`3Dxi*<e`tmU{o2
+zYxuw9{b!j!MJ)dt^8U5-bNt_0c-4<;{0Vd$9e>U4|Ka-I?EQDw@IUPRYtc95e_F&^
+z^quehYsv5J*G7(C|NoeOE&0v*@yPKn@&2{s_x3+p{APn;@;m=0=21(2IqzSKKQDRz
+zTKqZa{cFkZwV#em-{hZ}e=YgF=>2QaN1N*YVz(>~VmD8XHIAPaOvhz1zk>{m_2=UT
+z!NTz$Z+tNJAL_Q%2WQ|f(`b(csTu}v7j7kZ|0u$#D_MVxa2NhO2)dx;e8a>!;J0JJ
+zxwF8p$Ab1V43pErTX~;in5+jCFEC6TgfCNq;M`ttBk^~GivOr#ayz&K{|xvI{Er}q
+zuYub@?rJ)BrN>5(d*0%}fzt7~6TFxAOF)GmeABSk<4TVgdOY|>5O5CQ+<uU|oEE-r
+zn0N)e6S`h9Ozr~zHSamY<PuQv7J#?mKHo6e44zIpml!6-gVz(T9{fcRv<HUCy@!GT
+z63*QMo(--CA^F^8;8zIW47P)FK*hVzFgXQ0pKwP8gWv}IUk63kYlg`^;6wO74L%4R
+zy@rXM;5oS83@UtwVX_%qM>^v{(X;n|ng8>K$qaZR{;yGA{s{j)AVb%4w}F!17Etor
+zY?!<ml>8=wlG`roxypCG$NqyRuU9-i4@zE3L4|u|!0={}A=0_+AVofR87Mw1HB6ol
+zew=u39WXfzg4CUb2MrUigOcBChRLTvmAlt4xfz^F{1hlXJICW&`z`+$LCK>RR6a{V
+z$$KFvc`q<b&IeB;-)6(ag`m<s(odZNUjmiyi-yVj!D+a6fE&PeQ02-PCYOMcZ!;))
+zO#~Ic(J=Y?KbYKif^XuV0p-8aFnPXzKgYknNINX~oey3{_yAOWIn2krga<+K|20tj
+z&v=~Z@#)vieY3|4Jx&KDm&u^$pJ<qT>+g-9&x7J$C-_y;-v+J$Q=sTwW|*7;D&HeN
+zvhahT^nWiX{oeyB{ih9+J3;ZM1C;(R0hQh&!{i+BA^a}{rT^y}CZ>Sm=Uen^3O{I=
+z+zm?qH-h5l5dGp6U_U7Syyo#mP<+}1ir!@&7lGo#LQr%rFig$?MQ0-@{W?s4EPnKZ
+zu6*EH+;@Var_(Tb8z_3t06$Ck@gVmioZF8*p!)VYsQUJrVe)x!2mV_?<#Pt8diV6-
+zdAWI<<8km6E7$8DUj$XIm7vPi=&}EYKEB6g9>;^K2MypP_*-w7IP$X9w;{viE1=5t
+zl40^TQ1RA-sz2?9$qYD=bXFQBE(EV2+&Q55Im<Bl_CAwOFDN?i2gT1j!9|46fLDSk
+z@E62eW|*80N)Bg$SL4r#RYw;qj>6>NOQtUe!G8-K{f3DbLFr2;sB&yKOlH8vq;nxC
+zeR=zD&HpXK<Q7o%Edb}@Klp<nI0bwfl>B-@$#1t|vJ;g2E&(OCSN?~UZ>h%yP<nXe
+zMZ>p1$!jAhJ{<Y)hMnLAyl(@gk9UH<fDaoDlS@IhV-rEip%I)wdB+<j>Or-afnoCC
+z_pMz0hRNNa+O<uf^lXX8iQw7fcld9-euK(qBdB~jK*@W(VX_@OnS3*biDjVDJp;T7
+z9NKI79yUzw0o7h^2fqMr168gqhRNH&^T|I0N?w<MlGhx=WIZUkzxdxwURyx<Z#GOW
+z_3umk`{5T%eoMi5q&Eu`|EG8y4~qW*sB&-luZEX+Jovo5@AkON;{xyy;hRCxe~Dpo
+zA}D^o)o1+M3ohaPY4A_LO`zz#(=a(7RK90`Z-I@V^#ASWO#cT#rGL;c`64L(YzM`M
+z+d!pvvtcp?K7{`=Q2M{rFfkt#KPQ3;-)NY8{d=bWIq*&Vr-Oe2Hh|(&;PLPt<I|&{
+z=)Ke9&7k<u0gBG`hRGBtI_H4m#}rWIYXDvOo(+P}<NhKjdiEM7cY>;q3&9q`H-cH-
+z2cL0v^0|+KckrG9Zv^Lq<0xmdVWJV7iTmOI0=>i^1pk2dJ3+Z;z%95h125ox=xK9*
+z9lQtkm%y`e@9^%+!257t1oA!cbBF%3h3^Nq;r<FZ5BK}Qao{%a=hA1x<YrKO*<_ep
+z4~oxoK$ZJK!(_dG5B&Syr%Z2ipu+7mOl|}v-`l`%QSO@!6U)rMeW_vcd{E)e0XGwF
+zmSLja{M!S=<V#OlxEH}qgxhPF*a<4%PQ&DSQ0cXUe@3{BVPd}dw>KLm8$pE|58h3<
+z2E)WFy>8xR;Y)^z=fM;3-(#5A2Cg7p2PpYo2ui+FK*@KqVWI)N2=~Fi4uanY_ky#)
+z9C#VH3H%J00b|5lX_#0BD!-+MiA%ui$gdH+4fpYei3U*PpnC8W${!de4?htEe@Xba
+z!P^P{mSN&GQ1M?eOzZ@|$$O_^Vmqkx?gy3LHpAp5Q0d(XW(mL1FwqVwe#S5{2VBSd
+zg@%dqL8W&NsPtwTCZ~W(Z!-8*!cR0z1fb#{dE8;*MX-bSy@rYBL8Z3`RC-SvCLaZr
+z-Y)Pa!siSV+d#$NVwgyQU*~<9VPYw$^p=21Z;@egKB)AX!CMJ`iD6<EsQ70XCXVbj
+z`R@X6B%Ljw<iFW4kpk8JEChcFo)1bNrhvcVy&k*;?ENdo%(!0yD*P-^;m3p0o1w=n
+zd_Q<2?%P0xpA0H|J*e=5|H<_074TQQKMk%2*MkZ_^r(eD2rB$uP<pr<RQOKt4saQ$
+z@NfS|3;#N(@Owb%>n>2?w}bx*YzGy-9#lOH43n=sV(%{*CbxsCZ})@J%WZ~<o6Wzy
+z!!WrBRJetp+KmN<iCN~~euiOk=>N9#4;v=;f{OP%C_UX{nAmRq?e`ldGoZq)1l8W8
+z3=?zAzx_hP<dI#L{*YmEFX++-zpC^N6Wh(d{eHt_26X9zYNt|$i8<!qexYIV$iqH;
+z!{lDjr4LGv_ZTL&n}7TLhRF=*(g)SPr3@2u%)k9Y!{m`3pT1#oFX++-rPq556Wh(d
+z{eHt_26X9zcPo9v#B@;Y)D*)+BX|Pu;|&uB^Fi=w_}UAqUCe;07Yo60gj-;k7!P(6
+z?&%zQfd4t5-e0HE>3t!n_ahLY_YP3+=ll2F-?jIfLHUmdrFRX6$=7$<`)h{D9H{c_
+z1iu9xorZ~x=HGssVRDgwU+CY@02OaKxLM^kOdN(7<@dH>ve&=w_V0IsinkGz{BJW%
+zEHVG~MTW`A{(Yi<Ke)r<^@D##yw?pAyFummsA2ME|K8!>=Yz_x8N8c#ml!7A>N0r^
+z8YW%`C9l^E6T87L67PQSY;Y4Oxh()CxAQ^C?Ht3zbg&8cDc~=#6DAub8^H64AAq9c
+zNT<;;WSHm$6>m4Fc#j$;J3+;}A5^?;pvt|)FtG?!yoI3REig>Z0Tu6jQ1Q+I#phXu
+ziNWt!yn~?P^&2K%0u^sBsCdtVlItGB#70p0-3BV&&4$SgsCX$*@s@$oqosz42JlVX
+z_dIC)e%dgx8x+4EHB8(FUZ`|H@p(EZJ~x2kbG>0==s(b|;{Fz>{02eE^`K#5kN4m0
+z{T~Izw_S#bP2T@D?|(BW{&W~77J2{q-oF_XA1*OWO!ofcy?+C!^41$B_H6g%G)(LU
+zT{#UCTfl3fdnKrHP6SoXp?`1XJZzYF9z^xe&4DxV-wfW%`$kZ9@FGz4I{+2#-~$$J
+zFSv#Gr$O1pn?Z%U1XQ?Lpwepu@8P{3l%4#_zq4?gK!xi76>b@LAMcAm+0D~IrT5DH
+z7H$uya5-=r;kJYGcy9+4ZUHEJdOrAb^rqP`c?l>znq!!p4oXkn{<l`2-!e=-?caO-
+z`$kaX_>^~F=G`v=r4MsJ$>T!9#ANetpJ<poOkou6ZBTN3%P{d0sCMK<!{jbd;c}q#
+zW2a$aqxrYrW|&+8D%>JadbZFoG0Xhh&oE3L`L=}{0;R8q4HM6UG2ZtWCU%2PUknqQ
+zz~!W$0%cb$18;%OrH08R;MaLyWSAU62&<I7Vd8D@+wkix@C3pQ8YW){#m7CM!ar@8
+zNP%aQ&m50ufIsEE9()UY^e=4wU>7L)<qVUZU?b^lH%y!lDxD#e_7mVBIGy|sf{NE~
+znA{Ai{n!Yu20K9hotxo5>G^!{9Nvev`gA~-4(QS`Ol}5UI-pAjR6WRmst5Bymky4f
+zz<m&O>43iwJ%-86;Q9D(1YJ6y>PZGvJ(&->bpDM`2XyIxE*-<<X7GHa1G;oTRN>qV
+zsCqOXR632I^!^B$sGbagKZl;fhRL@<rTdm)@+DB=H-XaEI}MY~{{0gFe&o;1f5<S|
+z>)&_#_xYgYziV?4e3JAwg5N-Xw;3jG2BkM0-~{qnZ<t&O{w3j4V3zR93=<1L#h-7O
+zm<WD__eR6Scu?szfJ(34Fgf%sOYboFRl>h*n0Osj{MQT<IdB8-I}H<^pwin8D!uy+
+zlbb=&w+Xz7@OK&})`N=QZkSjE-beg?D&wyR|2n98^_pSw6;So+CBx*~RPH|~{BH1U
+zl^?u^_eO9VxP?aIYox!~FtG^~eRqPQZ=+$d0~CGh!COU-VPYw$_)82E4WRNl@~1(7
+z>2~g6Q164_Pr+Bfx4^yLzY~0e_wAtc<$lBD7VsmY%P`Ra<_Nb8{MX<tQ0Yzv?*zw#
+zp8)H@8PFeqO7F;B4wL<$^!hcBs(J29pz7)KASU3syTO~mo!~=YC#Z66H%x2<&%u2e
+zsQeaz%5MRv{N{touh}qp2B`d|fK<J6CxRCct^rhjLloi$a1eY5JP1ne{f3F>LFLy8
+zD!*-@^4kn5zfGX>yVEe40hM10q$-`e6jZ%m2r9ozz_s8xpz@mqewF;rFibRn%I_eV
+zDZkhFPx-wBD!&&&<+s-`xeHW&J3+M%+d;JtTfm*XZv;1j>p|t$4yxW|3=<1M<u@68
+z6C4k!9ccj7j?^0_MU3)2LS!&`5LEb`pxTj6!{jnh?Lz+@LGUU3p9b&X{WkDMa3wg7
+z{8NUBg`n)QX0Q#M1!lp_H_d$+nC5*xDEB)ljKbdxCczXa_Z*Ff+_!_$rw;#~0VVHd
+z|9&ATd5rh(YIMY}*KW7?FM_f^ZU)t_b{Hnw!4t$c!^C`W8ReS-s(c!BEBujv<uEY>
+zD*R!?#7m&c|1_xb_ZlX)gWtscHc;_zHcWJY4ZN>6Otgb8f5XIEw|V;s6#t(#Ol|>X
+zH!bw;3%vVuQ2cEG#jk!UmGa#KD&MCK6TP7F-EEk76jZ*u3=`XKv3MPz;;lDKw1bM5
+zF-)uk6)$C&IQVs=w-*$>yA6|@K+!wjyEl9H$)Mz}Ng>hu8jXVJ?FE(ZZo|Z*pz_^i
+zn8<<3cc)=uGmWC+wS$V6F-)uk6)$C&SOzNIQp3dSGy>ho_fb&v?lMen1V!&9-hGaD
+zZv>@}LpK_|FM-PUQBe8rGEC$^<-5}`(FrQw?S_d=hvj<-sC?%bCdY%ycQ1{V+@Cj0
+zZU?3B3qjF4-TP1R{%_N1Dc&wn@p6XAjiBnq`Jm#}dw+FugiF5iRg1R;RJ_fG$(5k$
+z&qPr12G^VaLBnJ(sQfy-`+D!b08~92T4(WI1eNYy!{l~Q@s@h`CEooUQ1x*=jpmog
+zZxN{a)(EOT4bjP~J{>kpyauks{Y6lEvjw~kywkrg0GIN9iGLptUda1f?IaGq2%ZV<
+z0_TI9!34MxlpIrriKU?Aw!|<o2mC{lm<)=(*RD7E_JE@AX~RS(xElX$py*o)roe^%
+zy%D^Y_j>>S${L&3+zo2JavP|5?ha7%i%USw8=eD-zFCHe>7eMFVwecPB=o)3X7oJ`
+zDtxbDVmGMpj~XU6f#UCaa2)RKhKX5V2KRbU@(T=;uVk!!c^Xu?Hhr0Sd~hYGa4Ey&
+zg<u-@DWJj)uA&_Up9d9gk705fsQPppsBnu`2EiQg98lqA877aUP5-&`H~0kpcY^ZY
+zXqa3AO3wpuHu(Aq^MB1SxeJs&F9R2VbG-kB-hVtOz1`c&x-XammHtk{<ei}Ob3B-W
+zzX$p6S71LVd+>F`<ZGbp!B-5E8$pG;&HUSMHcWPyfBSmF<P=chCYyizM8jmG`L~ZZ
+zO!h9faJxa}`>0`Z7pQ!5hRG$M(pzNy?F$W)3(UWLzG1TWI@6QwU<~=+Z<yHjzl%E`
+z_&BRF-_J}+i4sb23l^<9xCINeFq1!Rf*s5>f10*w6FO;|UHdwjCevhKnhcpqn_#^=
+za-&4Zl_1595;U+ub2Tf~jcjyty+H%SHLKNIG)Tk|Bj#R$1PB=2xZdCMKF>SvJMT;;
+z3Di0t$hXfq&-0u=?|ILA-gC~J0WXBy#dHNhYA4m;+YnyGbkU;9bx3CpjqW8d2F`$^
+zAf-PD;#S$x1yX%>GL;bMhreP8FO+aQcnQL%53~LhQyB*7xz-C(J30AbPB#Qnx`#nZ
+zw-BUs9UyLnEm<I?o5@sW{vPkiupa>_e3+^9fEOdYPQq&>JRelsF-YmoS97{EAf-D2
+zQo6$+r8@xP*4WYklK*z5(g6M)?6*sJzJ#v_FG6_i5bIAel|hj1i*8UY??EXqsFoL`
+zbaTNAptl)(1y#L?scZz-;5ylvu61A@^rjDRI#Wz#7+j6;sDz)C@N$rzH?b;C_bf>1
+zj)0VIH<*F=E|AjgWGWrt#YnfE>1qY9hh8~I^-;!D?BFVdPkA^z##By&bRQRk)UNVD
+zN_Qhj=`QR?J4O5)Na@Zpl^HM#=}t3Uli&xScN(O02bfAbXhV3JgcnQrI*|H@{+l`7
+z9+1-Q04d!X@Pml2246wCRZOK4ya?%*GhKyX3G~*1l<r!lGF^%FY=jSh6yDENT0!b}
+zvOp>?ePNK&ovGk-N5MUa9|m7Rx<gE55PUn*J<W9Wfj2>~6(s)=rcw@;BYdrdXG!?v
+zKJL#(_F`WK(mMry5vpBGS0{Ks>^eZ|SK66M6g&?3BvYva$*zX!$_MGWIA6~FMGU0=
+zVv^|^1JTiJ83oDj2vZpVdy$Vm@IkN#r2G9O*b3HwbRYEYVf!AC?7NvtJ4p5?!3V$y
+zSPT6sknHn8vTxnZ_7RZmLrmo`NcL6W=fHB1?!V0-*{=o3zIqqiSAk?-$yBz3WS<Lu
+z2HXr5KtBs4`&b#<O@d@M!Bj>;vKt1wz(J7O|0$5{8bGSAI*{yYm`XWFcE#YQ!R;Wm
+z-whzy&F*Bo8IbIznaWv^?8d>*f}<d{zdn%cT0u%L0+L;bsT>B$t_nN_mV@*>+zgUk
+zdnuV=U7P7@1uujgVY<pdJUX{bmvH+S2T6a7=^6z|e}w7k2I+Yd1>c77lT6oPkjC5F
+zL9)+hx^lrx$PT7!Gf4h6F<pbjJRa=^X<QQl={^ZD6$eP;(sdxUyHy}v@3A6I55HTW
+zrq{=G^@5aM57X5RQhKMDE<5;7DDNup2>ir$aC(zWr3a++qF^l;0x7**kjl3Xr1Gt0
+zy0Sn@FO%t71yXtzrmNG<>4iWVXO)9gzA~ng2~v79h1{+uK}xR&q<lufe8`7Eva4n)
+z>p`+x_z<_}F_82JKpKa2fTZ8fREj~;-vm-SUbu<%XFwX4jf12=##FjN(r*W;{Z@nI
+zzYL^t+9r_nH!_tu7wgABYPW+R>Gy#&ZfgfgKgv`pLGr&Hr1m<o9s9E=|KP2tzka5x
+z52XIC7hDVb9;VU-(s(2Sl75KkDg=8VZ)dvlL9)*U>tXL;DjPv+Pnlp3^j9%mQy=91
+zepEOFzC`5!XTUD-H82VW!NVYxtD33gf`3N11ElA|W~Q<ZbRawnd=Q+uk<%Xs)p}<t
+z-5{0gB={oqHiH<7Y_Wg=<a41wrHg)GjLJ0!u0i^<Ol1nB@zNMb`lC$ODe&`<yO^#{
+zknB4^AMD$iN-Ie1{xC@T)l64DcpdVwUYG?^z0Buxy-a~rFK5A9z|$a=Yk;YAfK)H-
+zAk|BhsWgC8FE!u;U?E89+d;D5z*J_oak<WbR4-8wL$EDXU_J6#$#j*2RIV~G3--lK
+zB_F&9;Tu5GU(a++Z^d^xAWtz}F_7#h!4JcJf~kyy^xQcOlKueG)d^C)1cfyq)k`@@
+z?Ij<idf5avfU7_%mxZZJ=5f7DfK)GMnaVIo^)d*44m<@?`Vo-qLrkR*q;hQpsb0?J
+zVm~4{08+aBAia<DF_m7Bo*z9-r5L;y<tb#kwu4mud~h4|a+%5|umIs%An9i^U9lW4
+z|A=r9r1JNIRQ{9T1+Z%cSHmvCbk%^=9;!hqcNJ6F4pO;uL3&=V11a74Y%bpzNaY`8
+zDqSFrlXF22^s~U%z)X<Jy^5*OCSEG{f>Wi^2i}AH^fFyNAeFltbU^PEQ|SPyzYKz;
+z-@tSgf^^;O!gU~(n<k5?+><Co2J9xl3t)Ga=^6p4+(Y0iDEA;!=>hTImQ(oC1x7$h
+zw;H7Dx(TFmZ)7U7H}E+96u2MpL6FMb08+W@m`V*u<vz?*R)PNm`LQrv3)geG=fP{B
+zH^)?_LF)I%LDC;%x_T)b=|qJQkjh;HQn|N-R@mi(t6-PQblE{F_j-`Zy^g6YY~gax
+zfuBbFS&-5l0;${`AeFnFsZ@eC#LsQUzE#AJgH-M@kjg#ER7OB5_b^kb1Mf$EYM8FW
+zMEI!&cS5g<sg!~A{Mt<M(BH&#SwJdx41b7c@#iIQ1e^hTKza}91~XuHis_1iRPI)g
+z${k@Uhe2G*Emh!W!Ca8iT@StpdHPx|_Y_k(4bpo`6<CS*%^;O~6G-LW$W-hgm3sqI
+z8NJ40xexgnVY-GvD)$gr2)#k3(ht&exDzD(4yLOHM3%M`3Ufg!w;iN%FKpuXApDpG
+z9ad64$8^O&D)$6P<vz<)hCwR#Ab1MIkKL;2wt`gdGLWu!F;iI!(tFb22e1zt@zvm;
+zz;)og2p_+i^EU+6A-r4U1`xOWmKu>QB2QmsvHTI?lOW}5f~kyvl&@|OmwHPjNcq_g
+zb|IY&;632{MvG-P!l%Gl@C-<LXaCk>Ss)pF8Ggr^${0xLj53uTko-qMvI~ObzZ@k0
+zo4_)J551r3VUVfRfmH785}q&N>%lJ}d>vSes#?o*bzX^iQ-p`W>%c<cI*{rm3#9t9
+z2xsl+Zy^tZ6n_dNyC_I{5n&xjdg~;9`hBb)6OMvp*DZ3FuwBCIKx#LYAk{;zgxf)C
+zR}1fD`$>@W#z4{=5H^5RUu7WG*G7=8haIGJEg;#=yoc?&Kq^l$_<OJrr0cPrscZ)6
+zx~~G&bT;sH?FL^&_}sfKmN&pzkgn?tQ<(<I&lFP`0m;4(B)cw<@)-gtpXK092%mfx
+zU)Kqy(l2tK$U%`CL|zB}0d^f%U>+I_fmF^qkgiL$unbhMi^R{ZXT2Dx_ER9`rx&FB
+zoCK+zHGuyKR)W-i%Rwq<8B-|+shovOWg|%CTnkb;SApbr_MPnaEJ)=X0O>yNXDY4W
+zpAfzoEGB!9%CQQha?D@OoCc{J10cn>3q!)gAeAQ{q;%JVRG!((xIAY-3O^01<&^M3
+zkjl9poC9apv7d2}+Diz09b5&z0n(SJs2&#nMx`<jQa#Kul?jmQVHBi#7y>EXK9JJw
+z0I43TL8^x;reYU)gUD0w;P@C*=>`7)yOR>$D&gBfs=vugag&1sAk|N=@Dxb((h5>O
+z>OjgzIY`&JOu};|e655}ujP7)fpgHC0LjlNNcA!RQoZzp^WaI4%G1hJ%0bHSW(nUU
+z;d7U8euuz9vIjqetoJcpJ>VY5be<LH>H>E`rt_~rR~bm<+b+x$F0A43S>Y5&?PpSW
+z2Bh{g0(OIapcQ_5nXU*(ej9|j!cD>r!i9@jZwjP(m;lv!5xEP*4^nRF1YbeB=wK>k
+z;JXpNUBdGvd@V@rWhRSx8hjCQr?5d-2wo2RO`rquS>R@nCQ;vp@P&)GUCuL=S&-77
+zVJc@p(jNd{1UrPALAq{q?gpq#zMc0841*Lt#8f&(?hyGf_)aR1gy&0m7Px`(`8JHt
+zk<Qsn%A}?I4AV6Z(l}!br2LICl@ah&$iqyf4<x%@rYj24zMfWLjd1Kj&POl!kBILU
+zMuqFa8{lUh)3p|)^s_)pKa;7f0)GdYCTT!rdNtckF<qnJeXy$muS3?Vgm&RNklI_8
+zkX~x2z0F@>p{+Jsra)?UV<5G=QKqXKB!8X4YGJ-`v(OH{1idVg=U2(|415>-PJpi=
+z{wzr4I>S^(!Rrw|0FqumNPbR%GvG<^3WT?Ul+VN9WspZQxSb4w)V@xGFT?KuQ|SXK
+zonEHW4pRF%3{pF-miQ`(F9fOGZU$cjGlf$&mb*Y|Z=Fn~5Ty2Hm+%b|K8wnGJHpR^
+zq(9D7dO>P;CnX$noN9YM41NjeRfC^Iz2m!nL|3Q9LQ^MOkSBFs4b91t4;f=$%NO8^
+z_#CDR^1*+EO#B7pOz^)!CO%I~7~tKIiNA%6zL55xZXixWo&`G~6Q>{}jP{dmApQn&
+z47>|6@de0Z;D3iq{59ku@HWWAUqbE&k3%NLAa{cwg-rYvWGYWBWa6`s*MlhU2I3^-
+zN5F{H^05cOL*V^j5qJ-HDTp?p${z=>g4_n~2E!uX3T}q%7g+&wARiLB0=yA2`fAnQ
+z4U+u_LGqsil0EKiRlW)&dkphb8IOI{{!)?AjadFm-2#O32B1gf`jpkOW)pZfXb0~E
+z)pCMsA>RdNf}J2>=>TIFtM}dN5n-<|Dy$I}3hhFRFqS3u!d_uiSR*VH+JzQj>>{xj
+z_6noI8eyT(F0=?^=vUFiR*wjKg;8ORuuy0hT7)rFq-rnh6-I?M!a|{4Xc5Lxp{l)*
+z`el--UnWw2Oe_@Ig%)A#La`V23ZudrVWH42v<PFX#a`Gej0$Ung+jZ~B8*)i_QGCa
+zR9GV{6xxLrVGRAET7F@#Fe<DO77Fb`i!g@%PPG?Oze#dbSR*VH+JzQj4E>*KFYFaY
+zg*C!Lp<QSZ#$c@43wwo8VU4g*Xct<9G2BP^=jst*uP`dC5f%#VLO`|a0<Xna&x!BG
+z)O3T$MBKY;3PmPjD82@-S*kt}L)<l)wt3rvEz>rhaV8_v*0ZX2Ri>@;g02fPZA0sZ
+z*Jau|F6+Du|GsP(fBP>VxEz1&19n*17wGTCg^iiE*i}<k!S?Fjt21q9ub#l){u>5v
+z$h1x8&g5p=`tthoGHnxillVJSJY1Y<8!Q<r$+V4Dj#XybrVdOW$h5V8xZ}gntm&^o
+zxPQ!_X`8)e?v_kjG}s=5=TL7b(>8G1>Dw}GV=dz?@OFIiIATBA{!v(+>_3U{kBxr}
+ze*U539}pY0PDZT=yTdwu2RQi&YwQ!?Y=?EO1MK{Qwd)Ju+!w6##Quk@0}p{+4_i+?
+z4373$$NIp5N35qG0b^gbPJJ01>$i^gg9~4=M!yP9ebqWmoP5+8dlVcxZ5=)hwtwB)
+z@pUjZXq_4ahrekZ`6k%$n6>jUaOzvu>2HA}-?ol^8|?fyYuCSlec!Y8e-9iSwGNGf
+z6Hiztp8%szS=*li`^T&UW8laStfM~wV?VS`{gC2+Vr~Bkc=kE##B<=-FRkOh1ZQK`
+zxfnS0E9>;Hz|LP=yM7Hur>yN$VE=Ed1HS=#Ua<DQ0FM6FI`&&|XxchFO`Nd~&wv9j
+zSx>(Nj=X9eeH9#h%{ufNI5uw`p9hEkU>*4b*n6j~?@qL(!3S(Z4}kLz*cOPxJ+_e^
+zu>C<>$Ae(sfUSQ3To|xL{}~+rXWJR#sju0(zXncz%@!jLJ!%_%6r6d~HcOlvwat%$
+zr=PG5J^`M3($@VXc;-plS>oVRwxOrM*{5uC#PKoPnK5u-%ohDVIPrbkB(dY)ZJqxP
+zc0X<Fc^aI5+O|L({Hbl|rxgA(ThGrZ{AacW;^2gBXoA9@vGqJd;m_C>h=V`34gH+L
+zpSATo3(h@jn<w^7+WIF+p0v#q&-}u6_7`CEIa~X4;K-}C(O1FV*KB>SQTUv#eGZ(M
+zvrQ8FUbpqXPT_CZ+TQ>N->?l4$Np>^|1;Rto^h%jck6t6#sabZ&Ww&b!Ly&vnD{i<
+zc~3^yJ>XDR#&8!ncW=i0y<qJAjH&y<nJ;F{ei7_>D5LiwF#2#t`@`UwM>5Vn0`@+d
+z(f24g{Vy3a|3cw|8D|H<$;UEckAVZ<$vFKTaOyi5)5NZkj8h}v_~RL89tVe>$QXVC
+z9Q{$o*pI-uGa2*LyG;BzWAevf|I--*Pow{(&)zC@Lg)as&o}VzHF!4EU=U27A5o`<
+zu<2`9zWhBbYv=CzBwjlw_eOMVq_3T8+b?oMF55Su-zNW2@qhm%ET0y6Bl1P@T_Ud)
+z|JpgI{dV@RoqKxqds)`bIXx@++g`)z-63+X$hTpBiSnnNoB1DCu&kYP`5*>r6u<t5
+zY`=RS%i1}At&(1~#1By?4}Hr|SwDb*BFWmhd-q`gNOGaXUn~0BxpmKof9)K)3q)T#
+zw{C~zPdi8Mb@8vA3-=y7``6Bq`<4eX>Uf@>PWaGYqx=BHqmHXzR-@@1QjMoY4EoTx
+zm-I75ZYO;_>-%TbXv@i)AsgC9Bgq(x%*yqmeMoCCw%LT2Ui$1N8DphuMgA7XZEG^^
+zarv1_$QX;=DDiiY44pEOJ=8uiRxFe9d}b}3;}XS-3j2QmAbC5|q|ch`A!kG_Q7Pa1
+z;G5!4iT?XHb9}4B=fIBQCr}3Z>_u86M?b}KgUD4^vi#9JTCcWSv~yE4MApt3UA>j#
+zwR2k|`7CSabg$jcvUV=$L%0CsZyme0Z2ch1+PUf1;bo5EdnEqhB9@DT9MC5A+Bu!H
+zzE1kxl3%QGpgeX9%|p@WkGQt)%dlG-US|12n9LykQHiJZU6QqPDeu6G4awR$n!n0s
+zSv%MBz=v4QrxzT2F5brS)C(-H#(hur+BuF+@u!_D`8?Dpf7&_lJ(54IeZE8Tubl(`
+z1BtJBnf?F%CiXvlDa-dr`kNnT*(&v~okRIYsekR<@;<Sz!61%4k4QXC($MFhT<pL1
+z29_&CzYz66pEkK3+Bwq`a{aV(o%e~qnDl?;;;$3=q|dy_+Bw&)Qokb)ar}Ek*3QA*
+zEwXkl@vM{cr=2tW6UmQuZt{Z2W&g_l+|pi8-OuuO#eThy<-6s2Y3Eu$C9-yo><h)z
+zexjBRssGn;uhRWe`~kMFL_JcxL;4Hf1ss3+6vuxK^-A$0V*eG~mt>zM^)VvxXC(f|
+z5<i4?N}u0Kd`#l$_Xo(n4)si*&2s;*m-Jn7|Bv6z@w>JAU*bP}A=}S>ljH9$;ry+Y
+z_*U_kDe|YpUyb<tvG@x~{PW_kUHt7SWq-7IMxRmfH!t~rTKtuDaQvlGz6Q~Mzm#vi
+z`0EpYvtoajq~9U>4@mlBkFmcgDNl{Wuf2iuvq|JD<@)7!vi{AIepKR*NcxAx-=8FX
+zyTnt+MfE=}{pE9OSzdJ)`)iQ&Lz3TXq(7zeT<P;&i7yj>cZmN&k)IVgU*z|TTrKkU
+zom`$uE&e)|dnLV`)tsMU)H{7{m-v2(zgyxD<36CzPbB`d#Q$327tn9fr%T#*m&8AG
+z0sB9B4aa|1;=3jO|494>TqpWmA?59o{Jt*wL!!T0((6S(OrO1ypD~I5h{Tu6{qTsy
+zPe}Y@5<icAh(3jqUbm$8C()l4eR@{Y^{d*;`o)r;UeP}w`Jek8$8SKoq_3Tu|IR9w
+zH_G+@-xx1YJWU?b=cctRhmbG&{6Donk6H$$y}u~>m3MLcXEUIGVQ+l=aMOOst9vb(
+zuX22w$ZJKuP-JcV@%fus-!AcAlX#khr_XOhUN7>v=+D2x@e#<ESnU?=cQ1-jK9aTH
+zsi>9s8M&VKh^+k%#6gj@-&MFn<W}k59zuD^pZ2>4UlUpTorl+P9n|!t|G!n@wR4EG
+z#ozo7IltMsUZk)64$Ebtubs>M%Sw)4|2XUKmw4^m<#&lc?Hp~p_^V@e%g@l?lm9;H
+zAD$9fJGcHl`#4@Z2i+yIcCP#9C4KF8SPCS4?c8abq_3SL9=L@4Y3KTX68WI?wR8GE
+zf%ZhQcJBU9CH{=`|C4B66u-)c2z)*&{^kQL??QW~c<px?o{{*%QjYHsSv!~ACgq9B
+z^YVX5`r7Zpd|k@7@ttgciRf$RvVULVwcl}BBlR2m4(s0~^}!O>G{jyz*S<sS+plDe
+zs;kkyS4AzSXIcKe$o(RJM&#mGIDS;*a*?n40NbAx{cAR{{G`ZzA`gk&EBaf-{(b1@
+zDE;Rp{+PsPN&IbM|6dY6Bl4`sFN^*r(Qgue?-Kb1jMs1p<DZtdC(7R_Pn7SyC{g}W
+zcB1^;I}+t@B0Z!3uk1;be{YJ9{7qu~(VdC%!)p@do3aw+-<tIc6XQ3V(!U<hQ)B)f
+zb|=c8HTgeKmKgsdll>I>Q=`BC*qA6+nEdbCkr;pPWr^~Wrua8Z@qaeOZ@oOx{+*X5
+z%9ok+drb9p+Ekv9njR`qJ{PFhN0*;A#b0ZRzf8@Ku3uq_uUVCtzwer^f0s#q>TeVE
+zKX6r|Jh&@S{<5h)?lz_OpQiRq>+{Cz_wC(@@*Y$DA5!)8@_k+Pr^_cz<^NYxe%+?_
+z@k`VFmT77)RnElx(0Z&fzqF6bC_5dA@|9O6${#nik15mr@w}=2zH3VFcc%0{VoL9G
+zrt~sR{lj}r<;_9AZp{B5OzD-HuK(Sp^nPPX?<1!4s!i$nP3c{V=an)2{GvqpfT=$2
+zF_nMphD7~RQ+~c`s_$A;egDzq|L3Oi-)1WRf+@YXoAT3PD*q=<>3z&p{%cI-zjH@o
+zd1&90v3_Pu?f+TKPgpH_`+r>RFLn9j7bnL59mZcqeV^L@==xU|C&ttM7Nh>3)%#u7
+zr$rxQ{AFtW>G9jt`q5?DCvDXKqdieRpk6Os|4Fs}ba~8le?M;WKV$OWthNW;p7vWA
+z)2Gc>M)?Z$`sn&ssMlYYX@9s;|2roC+3NMz^=~x!-(&KBEyiO;e>cI@DBozR?;o13
+z=O;|pv%_>fkDIRNR+Bw_AJ3THRi^8Cqv?9SLru>T|9soj-amd3`O`o5neP8t)A-{n
+zCOOM=zy4oSJne%w`tLK{pAl1f|5Lp`^!!ZV{my7l-;*)Q_o>%c*MHuW{x>ob^^d7?
+zVcg&+>Ud6<%S`duTZHuV_-~l5-_K0)`)!H(_aP-?exEeSdsKY{%I6~{`P#LK_CGe4
+zN6nvRjrl0Ged=<f$^P9Y`FkdRpD?9w@oo$|^Gv^9n(YX+90>+$_xRg9f!qBhb=i4&
+z&I0eD+ZWLe2kIMrk(OrvGPIp}VZXo5tXSXVrC&iUY6`VkyvO{<YKh31qm+L7)JH#X
+znp=#YP(A3(^X~VDn*CvaV?+(EI8*^u^+#5{zF@Gac1KgI#Vh{y`A;m8<x~aq1djV!
+z7ST^t#KrZK3Ms0b&3b>Nsx9Q-(YDvuSReG)?eiV;?`kY+YK-_>BNnd|rnF*zQHi&_
+z!d>j$$U(a*@cXisp!fQ4r1|<B=k=zmmh_vmS}p8HZINGb9B2$je2tNSFXBg<waxyB
+zpR!Zh+;q&4A@>oa;;T)UAMcKqKrj+$^d1d1`Jl+9JL0boG`eeR{o$|{<ZrB#0Li@5
+zdA;!mamBJF{+qWY>hI((ziFa+Lo2&*snt_mw~$uj*?HG5{;R!O<tAS>y#=Sav_(zL
+z{scv-l4k$WAbtfH&EI?6-yEjj2gY@*ZMZcYxz$_eYd#S`0M|RNqfeLAUmD&oK^wyb
+z@wVc06ty%T_p5hw#WoM_T>Ol1MM0%@!ynuWk4A(1z2$pK_HNsnpH8VjRdPDAbJJ;M
+z=a%6n_t&{wA`Q5I1GVZMT+~$OPf9h%UE-<8*;%x=B5xlWX|h6Y*<N>1lG#>InL9gg
+zYf^aruEwyx7Clr&&fem@q-ZkB$<Iw0p6AR?3fJA`!qTb6OPAwmIY#y8$v)%>h7Sc3
+z>(ZI+X*+hzA8A(m)`RXMV+V(B7+pZ1zNM)pyrV7R54+uFdp%vX7;eAYnN3w%DnA~b
+z&VqBg922SxFV&*Ec1izQg)c)jU-e7XybNXSiY!Bw{nBMxhBEn0tBMPka8a`9u~XUH
+z6ltn$3TpLh)Zph5l6LIKH|y!QU7Duf=5}kfxYJ$K*1FSErKPi6dsDl3vu?CXe=GJ>
+zxo_59F9tW(#r-%*L2abPfqH*9f?Fw7t%(}i+;Y^A^%QC;u64?^R&s^iZpXI0ctHB<
+z{dFadm0s<{%k<WL>6h%S`AU8HQu{R4YEs8n>2Nwu1R@Q1-1?6CiyUpY)p@=2zvs}N
+z>XJRdQk)7F^ag{+k6q8tzGF>wEkVCJgiQ00Ee?c3zDR9@sZU<&f#|6}RAI77dOF2*
+zjOF5<Ax)I{^&HBp#V|L5QA|DME!jt6yxuG1;K^L!EGTKL^@YMMLG^Kp(Oye1a?qI_
+zZtyi@r0u5>o*Nx`!lQ>%GI)wVZwowr9|oluMjv!KY6GDLe>06slQU&@k$Pm|bW}ED
+zTpjV_W#XW7TeI&(;`sf|`ZbJL-jvsr!<skcDfQUrO}WxDl~`^0^v<->dNbtf9C*{4
+zyrF^QM11v2U%<4j)E{rV{<@`IEu)P&w(`4Osl#33*vjMDQpZ7aYh9$OHEZ<BMVfU<
+zvh`who5ozmhdc0!dMmyD#$Qr(;h3*h733``ZyR1X{H-Cp0Ql>IZT6$|E^KcM1nnmp
+z0ztpMrSU|wFBHP~-R^6&SA^&_!56e2_XS&Y?}wTL5lG8;^W4?A7w-#r+4gzxY8|&}
+z_6PmGa9orZ3klO+dzSZ3X~@Q*K%@~5z$)L7pq|&#W<P{f9bl^0ezt4$pU^uPnW>;x
+zSr6`*#Ew2YPae6+uOHsfp^944_Ry$(uli5DZ!~qC##Wm2=yJQw);v5_hto-;X|t|2
+z4y5inaa?cK)StEdCa|=DKKfo#R~uj~BO9t$bwIr=uglZa3nwovi}?1W9jbGc8LyTM
+z)e}eR=9*0!TGGIB5hZ<KnMO$;R_aR0xzgkGhL>(g$*&3Ke5JQA55<zK)88RS67Q#F
+z^u>F9i6)D5x@NV-dRMca>BdZoUTS1#Hqf(Y7+si^44F%#mGW_Ec9qoBk`%IWf1&G;
+z*AjEIexDRzR$~#Rq<0{*7u2FU`;p#WZ^bF?7mwC6>2x3==OW3Z86=n!)azE88!|UD
+zwO3N-flM)42WxhzXOicKOlJDjh1pQ+D$U{gq=Y$!ET|hahwEA3PLJc0=H{IRh7prC
+zHRsGz12M#|Yzkl+x!G}aXHL1l(Xo|Z0_w{gj$7(?Iq+VkkLVG0>n?{U;Hhj2=N;J9
+z7|B1l(+e@w=H9*26L6P%0+CY4hpJ1C9`MqQoRpbthdDDe1^Cy>jkBQ6ue}KQ<5lCN
+zv9ne!rE0AhYhkCu5kO58a7Cd85pc_`Wy$s8-lNye()D7_iCQmzjjT8w7(x0P>&o^N
+zmpZd)kwu#<bUH%Kw`vtrwiV5#KGNXG4KyBYLQA=IH?@{JKVIJab*L5u1&{4UwS@D~
+zRC2NpdX4P{&1D}~&t5d0NNI}aTbgF%bm9e*78_DzG6(avc!5pMXV@2vNIr8=5X#?Q
+zD0|ze)-bQzhWkV-`*GYR@w;ZF<&|E@nH^{hwZw~7qFsWmO)U|Gmpa;vRV=sW&Ydew
+zje4~6l$7*_=P@;u>^!BW_R8let+&wPa#HuyZ^2{sIrr#H?eRQ6+S>TZ=185H^ZjT`
+zpPTdfXiJ}yY&;VZAF_YJM_c-=yoEN+7hQkT(qGaGj$rAnNSluR`^5Jb>9`N3RniA?
+z>R2+pt~yesHL<j6(yyjh(ubT&`l9h?S|z;<JQz){93O5wbC1yU7Oh?`RfWq?)ia@1
+z<Z>+H)wv91tx}hvs#onYl*unu@G?~O5^^;!YT^mytD9ReFPD$I&sQ6Wv|$8-Nq~Si
+zQfg|Y`ukCCQ^?=w&1(r`j?kIwGc3D9PTE`JE-_5)dXtt6S|fYhyBxdXi=6v!51LcX
+zr2*W*Z8Dm3ZdJ!O7(DJpzMBKSU@i^X-0mf3DGK6i6_~l@m7n^A6$q@<8J1=DV`(TU
+zFNrf~m2P)QE{)@IX@XN;sBgZV7L~j!^=zo$FxE<>e)Ae>pMtrT6Y8`zxl-LF@($~%
+zzs(!jW4tJ)GT!dKZU266vm?2rT<cqTobSvFh5apcP5UwCZ#ss$R|oXYJRVcV?@UYu
+z>6N_GaZs%Y{Bd|a^%%e><ior#fvVfR$CN!X)iM`uJ9eZA`^W64TrAqv+x3n%^`wzu
+zA_a5Ai(99hph;_ydbTF5iGF$I(wMc|)MD*4lqyYww(G0=OZ(wXEh{ofpS0e=s9op^
+za<F2{^cm4Q+ZE(s`6f#zP5to-lU|-l`lR(r<o<mHSx7cjS0}2%hbq;nnB?BuonkS9
+zmD?iw$i@?398zJt#d%^J!C0gUw}e7X&5^J=fue?Bj;FaT6u}BH_G76b7y=qY;@h3d
+z6NgKt`PrqnJDKeDI#640s=Z5#T5yFg$0R;_Nws~*<e%E)VmqTusyt>`Y`c?5S!?Ud
+z$bvo=S%xzCrG~ty>QdXC)O;p475Gcs?qn)Yn%g4vcBd8Do7#n8o6w5fXqEm}?5T3!
+zti4_gZmf&@Nm?k7?M|lRCQbFHRYTTgF5ak?;#%`|CsSH0xx(gkr$a0DMYj=G&s+DU
+zU$VF6EA{0|?b8#Yxm0Zk-_};D_TlDz_s*Pz&es!IOfOs0qrOX1(+634&eVQ0|7ZaF
+z0<h%(TN;YBwIp_(%7z=`vW&FuP*-+4iWW;jyWN(pOc!cd%G@PVznq}%bkHtVY2!)d
+zRl9v^S7sZ8rL{@Q7Shr0C38AFq%)+E?#5}|$>!ngt=@2?E*LoC4TLK^2YKtaJ5r9F
+z7?HLe0jGDz3H-O?L?m@XDxfzVb=!Z!ob@8w`Rb|w_FgPY`6v`=@Aa~j$uoVaqs?>N
+zFn7LKK5C(<x=y8?G~g*9b#<e3cBF}S$k97-d{!P4=8GicEU5Q4`kQ%ETIz)&b@@zP
+z(O8DRY=_xj@|@U;9G>Ty(3G9g`JMnxnF+Nat6P{7nwxQ5WYMc!K;IIIBsJA#**YC9
+zAxsn`H}qv$=LZ@CoUpMW8<trY&GTPpwJv4VpZ7(%)VVm1Yq}{ja9-!TQ|2H?R$)ux
+zJ0-Etk0#aRdpXX8W#uw;g`4*S9HsTqqqHh&Y__tHSf(!2rcTkx>%J*dOzzswMUp54
+zzKSIK_ng~8@jb)Z!tb_Yyk8z`^}A%Dv;ZbMT8<v|H=7FR-bIsGw2=XYte1y?;rWp`
+zbwyKy3C|Lkp1`asRgEVU-XHMZ-W)7(I_Rdx945w5c;2+NHi}BprU+-g;c1|i$Z>0Y
+zZ${!niqi=@w|RZxFt%Fb+LrnPL3~xo>&-oiZJxQoK%+nJXwX+54(ILj<7;3QVZ2z=
+zw;yXg_$E<fJ(l7<?lMnHc<TXPo<1i&-Py@5lgpZuFgf5f6w^_vt!JxKuCmX9XGv*~
+z1ukTc&sT?kVz)(nV@eg~ju8|*M$y<^yfeA+x+}5UK>nv|T!Dt{zFDqv@{k%87C73b
+zT?g45jN2zo!*b-HWhHF^;a26|y=Y1avm$T4D!AB=Ak_e7ZBZMj3{wlI5-0voHBq?}
+ze?0;05J-7jFJrwdrJXZddx1!Pm>R}gi=-MKoWJR{^OTvASC4b+lwOz4t;hH*(7AOh
+z?^5U1X?$ks+`6T_qE^qXQ}reF+`7!pPq&vm;eO7gJ!O07rZlvF+7RU~UF_y_7La%C
+zTeezvWb7|<@Vy0fKi*<KJty?XRPIsiac^t&Mm)j&w`;E`+e(7|WB6k2{s@-l=&mum
+z-fN?Uip1}N;7K1}&Bx4~VNnR*dT33%9%W9#u+;JwOC$C2Q9^PwD&W%ya*j4NCr@Xg
+z&i1%>J9a0mV<uJ>zq4=UR{-_trG5i#>4m~XH_0oIZ{6imTbi-v8a{|Y3Qky%TJTae
+zc#gDsvA$@mjl@CF{@dNR?2+X~b1CABv3P3Y00#Y=dFsn|TWhQKwY(%l<L2e%8|u?n
+zhHcHuH#hBPUZJ5rle2t7J;MoGoR@NtG@4Q$&^WWgFk6!PN$$*{iIw<QiSW$VW>-?{
+zt1~?G)uLr+%9oJLnyI=H!?G>j7UQocez!Z#ZtgZ5QJc^;8TySk?+^=DhCQUbY!%=4
+znwVbdKE#l;r+#m7qDjhi=VZ0iB}vvxT47FBNjFQVuPE;{XOw#`;}VNmBfVq2C95;X
+zi~C<nF?}-HRPf^d7u8tWG49}l=^dxkNbguLudLOW>os2Ui)b3VUS4i(a~HMNda6=C
+zzFUqKB{o6RTB`a~f&*`)*62BD2^gDnl3k^Ih$K8jQ+#{Xy_24t=PEVB?RE~+((lv6
+z(xmwQtl^uQCD@l^{IVye3{2%r+-;PiN)31Zc}_X0FX5Jv;$kgX2)*`}xH_n?w^BoY
+z0q=S(7`Cv<jx57hUg*`@U9WAq^0v~JtHc&<swDTZeLN_7GdGcYXIriLHr9Iw-qKK#
+zPKCP~cU;GKr^|O4i&EIDD_iO=g%q*Wu`U)De_6$G8p(dOE;&_P{MB($OX_oVOV5eC
+zaKzUfk%J9Rc#eDOX}w133nwBNqYrrwCPXLKL*5ZOFo(TiH5)TxabNntg}dk+%)}uh
+ztvi!8IHE7*%jNN8JH1Eva4Vi-E610pn|(p&wwB1zd^)h`044*~Ew0-FVYjDf*DjA|
+zM~If>ur{Z;(Nos%tc2bHS9VWQ3t6lyi7U%@xsy+tsyK2BofUQ5k4ML%O4XH!#b`-e
+zYf}Yny+Re@%O<L1ocd7%^o0?Qm*qfuS|tr=&+|G~e7ks+J7spx_mb99`T48t>R+^O
+z3^M`hWI^&o|2g~ioUvkpkz=6(wJ9ac)T$xL6X|MjikTEOoZkFpX2n8o^VQHaYZ*Az
+z%$$xkPojn!-f0rT%~eHyD8X&&->s^x)(dL_I$bq3PYu9CqblWU(K%l1JBSPP&qZ%x
+z^&CJP3RpyY@S1QYpx4)YY->7;#FP3~WU8M^w<5E|1MOC1svXm_A|t);Tag)h!&Lg{
+zAJeoNx-rx%WoVx9J4TH#x0|?yx#6f0)N*oEJL9$<wRvR6TLf(}(FFP@89C8Nq?Od+
+z5Ul2=Ht&(9R)3whDdfAY#g8}QKsZ7N?O~I;K{wRgL=TE(>1tb+(ki36(Au49o*bMr
+J9Q&(&{y+5!gnIx0
 
 literal 0
 HcmV?d00001
@@ -19601,10 +19806,10 @@ index 00000000000000..e134697ed96de7
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 new file mode 100644
-index 00000000000000..dcf0187377953d
+index 00000000000000..bc5289e34154ea
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
-@@ -0,0 +1,57 @@
+@@ -0,0 +1,68 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19661,6 +19866,17 @@ index 00000000000000..dcf0187377953d
 +void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
 +void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
 +
++// ML-KEM (Post-quantum key encapsulation mechanism)
++int go_supportsMLKEM() __attribute__((nocallback, static));
++int go_generateKeyMLKEM768(uint8_t *seed, int seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++int go_generateKeyMLKEM1024(uint8_t *seed, int seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++int go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, int seedLen, uint8_t *encapKey, int encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++int go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, int seedLen, uint8_t *encapKey, int encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++int go_encapsulateMLKEM768(const uint8_t *encapKey, int encapKeyLen, uint8_t *sharedKey, int sharedKeyLen, uint8_t *ciphertext, int ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++int go_encapsulateMLKEM1024(const uint8_t *encapKey, int encapKeyLen, uint8_t *sharedKey, int sharedKeyLen, uint8_t *ciphertext, int ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++int go_decapsulateMLKEM768(const uint8_t *seed, int seedLen, const uint8_t *ciphertext, int ciphertextLen, uint8_t *sharedKey, int sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++int go_decapsulateMLKEM1024(const uint8_t *seed, int seedLen, const uint8_t *ciphertext, int ciphertextLen, uint8_t *sharedKey, int sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++
 +#endif // _GO_CRYPTOKIT_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
 new file mode 100644
@@ -19690,10 +19906,10 @@ index 00000000000000..abd4d7a9d85957
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
 new file mode 100644
-index 00000000000000..8149ca75749280
+index 00000000000000..b40740a608e82c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-@@ -0,0 +1,167 @@
+@@ -0,0 +1,212 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19714,13 +19930,21 @@ index 00000000000000..8149ca75749280
 +void go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
 +void go_SHA512(const uint8_t*, size_t, const uint8_t*);
 +void* go_copyHMAC(int32_t, void*);
++int go_decapsulateMLKEM1024(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
++int go_decapsulateMLKEM768(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
 +int go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int, uint8_t*, int);
++int go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int, uint8_t*, int);
++int go_encapsulateMLKEM1024(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
++int go_encapsulateMLKEM768(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
 +int go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
 +int go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +int go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void go_freeHMAC(int32_t, void*);
 +void go_generateKeyEd25519(uint8_t*);
++int go_generateKeyMLKEM1024(uint8_t*, int);
++int go_generateKeyMLKEM768(uint8_t*, int);
 +int go_hashBlockSize(int32_t);
 +void* go_hashCopy(int32_t, void*);
 +void go_hashFree(int32_t, void*);
@@ -19733,6 +19957,7 @@ index 00000000000000..8149ca75749280
 +int go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
 +int go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
 +int go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int go_supportsMLKEM(void);
 +int go_supportsSHA3(void);
 +void go_updateHMAC(int32_t, void*, const uint8_t*, int);
 +int go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
@@ -19773,10 +19998,34 @@ index 00000000000000..8149ca75749280
 +	return go_copyHMAC(_arg0, _arg1);
 +}
 +
++int _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, int _arg1, const uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++	return go_decapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++int _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, int _arg1, const uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++	return go_decapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
 +int _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
 +	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
++int _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3) {
++	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
++}
++
++int _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3) {
++	return go_deriveEncapsulationKeyMLKEM768(_arg0, _arg1, _arg2, _arg3);
++}
++
++int _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++	return go_encapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++int _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++	return go_encapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
 +int _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
 +	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
@@ -19801,6 +20050,14 @@ index 00000000000000..8149ca75749280
 +	go_generateKeyEd25519(_arg0);
 +}
 +
++int _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, int _arg1) {
++	return go_generateKeyMLKEM1024(_arg0, _arg1);
++}
++
++int _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, int _arg1) {
++	return go_generateKeyMLKEM768(_arg0, _arg1);
++}
++
 +int _mkcgo_go_hashBlockSize(int32_t _arg0) {
 +	return go_hashBlockSize(_arg0);
 +}
@@ -19849,6 +20106,10 @@ index 00000000000000..8149ca75749280
 +	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
++int _mkcgo_go_supportsMLKEM(void) {
++	return go_supportsMLKEM();
++}
++
 +int _mkcgo_go_supportsSHA3(void) {
 +	return go_supportsSHA3();
 +}
@@ -19863,10 +20124,10 @@ index 00000000000000..8149ca75749280
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
 new file mode 100644
-index 00000000000000..5eb798569decda
+index 00000000000000..1c10846c2ff1aa
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,49 @@
+@@ -0,0 +1,58 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19892,13 +20153,21 @@ index 00000000000000..5eb798569decda
 +void _mkcgo_go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
 +void _mkcgo_go_SHA512(const uint8_t*, size_t, const uint8_t*);
 +void* _mkcgo_go_copyHMAC(int32_t, void*);
++int _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
++int _mkcgo_go_decapsulateMLKEM768(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
 +int _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int, uint8_t*, int);
++int _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int, uint8_t*, int);
++int _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
++int _mkcgo_go_encapsulateMLKEM768(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
 +int _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
 +int _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +int _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void _mkcgo_go_freeHMAC(int32_t, void*);
 +void _mkcgo_go_generateKeyEd25519(uint8_t*);
++int _mkcgo_go_generateKeyMLKEM1024(uint8_t*, int);
++int _mkcgo_go_generateKeyMLKEM768(uint8_t*, int);
 +int _mkcgo_go_hashBlockSize(int32_t);
 +void* _mkcgo_go_hashCopy(int32_t, void*);
 +void _mkcgo_go_hashFree(int32_t, void*);
@@ -19911,6 +20180,7 @@ index 00000000000000..5eb798569decda
 +int _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
 +int _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
 +int _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int _mkcgo_go_supportsMLKEM(void);
 +int _mkcgo_go_supportsSHA3(void);
 +void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, int);
 +int _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
@@ -19918,10 +20188,10 @@ index 00000000000000..5eb798569decda
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..1b6d6e18268a91
+index 00000000000000..09987cf0da505f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,189 @@
+@@ -0,0 +1,234 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20001,11 +20271,41 @@ index 00000000000000..1b6d6e18268a91
 +GLOBL   ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
 +
++TEXT _mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_decapsulateMLKEM1024(SB)
++GLOBL   ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_decapsulateMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_decapsulateMLKEM768(SB)
++GLOBL   ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM768_trampoline<>(SB)
++
 +TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_decryptAESGCM(SB)
 +GLOBL   ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
 +
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
++GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_deriveEncapsulationKeyMLKEM768(SB)
++GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_encapsulateMLKEM1024(SB)
++GLOBL   ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_encapsulateMLKEM768(SB)
++GLOBL   ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM768_trampoline<>(SB)
++
 +TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_encryptAESGCM(SB)
 +GLOBL   ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20036,6 +20336,16 @@ index 00000000000000..1b6d6e18268a91
 +GLOBL   ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_generateKeyMLKEM1024(SB)
++GLOBL   ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_generateKeyMLKEM768(SB)
++GLOBL   ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM768_trampoline<>(SB)
++
 +TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_hashBlockSize(SB)
 +GLOBL   ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20096,6 +20406,11 @@ index 00000000000000..1b6d6e18268a91
 +GLOBL   ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_supportsMLKEM(SB)
++GLOBL   ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLKEM_trampoline<>(SB)
++
 +TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_supportsSHA3(SB)
 +GLOBL   ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20113,10 +20428,10 @@ index 00000000000000..1b6d6e18268a91
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..7f96092c8433e0
+index 00000000000000..216f96f7a4d93d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,143 @@
+@@ -0,0 +1,180 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20126,6 +20441,7 @@ index 00000000000000..7f96092c8433e0
 +
 +/*
 +#cgo CFLAGS: -Wno-attributes
++
 +#include "zcryptokit.h"
 +*/
 +import "C"
@@ -20173,10 +20489,34 @@ index 00000000000000..7f96092c8433e0
 +	return C._mkcgo_go_copyHMAC(C.int32_t(hashAlgorithm), ptr)
 +}
 +
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++	return int32(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey))))
++}
++
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++	return int32(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey))))
++}
++
 +func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
 +	return int32(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
 +}
 +
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int32 {
++	return int32(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey))))
++}
++
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int32 {
++	return int32(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey))))
++}
++
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++	return int32(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext))))
++}
++
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++	return int32(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext))))
++}
++
 +func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
 +	return int32(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
 +}
@@ -20201,6 +20541,14 @@ index 00000000000000..7f96092c8433e0
 +	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
++func GenerateKeyMLKEM1024(seed []uint8) int32 {
++	return int32(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed))))
++}
++
++func GenerateKeyMLKEM768(seed []uint8) int32 {
++	return int32(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed))))
++}
++
 +func HashBlockSize(hashAlgorithm int32) int32 {
 +	return int32(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
 +}
@@ -20249,6 +20597,10 @@ index 00000000000000..7f96092c8433e0
 +	return int32(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
 +}
 +
++func SupportsMLKEM() int32 {
++	return int32(C._mkcgo_go_supportsMLKEM())
++}
++
 +func SupportsSHA3() int32 {
 +	return int32(C._mkcgo_go_supportsSHA3())
 +}
@@ -20262,10 +20614,10 @@ index 00000000000000..7f96092c8433e0
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
 new file mode 100644
-index 00000000000000..8e7b8901b830b1
+index 00000000000000..fd6545f8830f04
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
-@@ -0,0 +1,45 @@
+@@ -0,0 +1,62 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20292,9 +20644,25 @@ index 00000000000000..8e7b8901b830b1
 +#cgo nocallback _mkcgo_go_SHA3_512
 +#cgo noescape _mkcgo_go_SHA512
 +#cgo nocallback _mkcgo_go_SHA512
++#cgo noescape _mkcgo_go_decapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_decapsulateMLKEM1024
++#cgo noescape _mkcgo_go_decapsulateMLKEM768
++#cgo nocallback _mkcgo_go_decapsulateMLKEM768
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo noescape _mkcgo_go_encapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
++#cgo noescape _mkcgo_go_encapsulateMLKEM768
++#cgo nocallback _mkcgo_go_encapsulateMLKEM768
 +#cgo noescape _mkcgo_go_finalizeHMAC
 +#cgo nocallback _mkcgo_go_finalizeHMAC
 +#cgo nocallback _mkcgo_go_freeHMAC
++#cgo noescape _mkcgo_go_generateKeyMLKEM1024
++#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
++#cgo noescape _mkcgo_go_generateKeyMLKEM768
++#cgo nocallback _mkcgo_go_generateKeyMLKEM768
 +#cgo nocallback _mkcgo_go_hashBlockSize
 +#cgo nocallback _mkcgo_go_hashCopy
 +#cgo nocallback _mkcgo_go_hashFree
@@ -20306,6 +20674,7 @@ index 00000000000000..8e7b8901b830b1
 +#cgo noescape _mkcgo_go_hashWrite
 +#cgo nocallback _mkcgo_go_hashWrite
 +#cgo nocallback _mkcgo_go_initHMAC
++#cgo nocallback _mkcgo_go_supportsMLKEM
 +#cgo nocallback _mkcgo_go_supportsSHA3
 +#cgo noescape _mkcgo_go_updateHMAC
 +#cgo nocallback _mkcgo_go_updateHMAC
@@ -20313,10 +20682,10 @@ index 00000000000000..8e7b8901b830b1
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
 new file mode 100644
-index 00000000000000..3f5109aff64cb8
+index 00000000000000..c218dda01a5abd
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,218 @@
+@@ -0,0 +1,281 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20342,13 +20711,21 @@ index 00000000000000..3f5109aff64cb8
 +//go:linkname go_SHA3_512 go_SHA3_512
 +//go:linkname go_SHA512 go_SHA512
 +//go:linkname go_copyHMAC go_copyHMAC
++//go:linkname go_decapsulateMLKEM1024 go_decapsulateMLKEM1024
++//go:linkname go_decapsulateMLKEM768 go_decapsulateMLKEM768
 +//go:linkname go_decryptAESGCM go_decryptAESGCM
++//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
++//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
++//go:linkname go_encapsulateMLKEM1024 go_encapsulateMLKEM1024
++//go:linkname go_encapsulateMLKEM768 go_encapsulateMLKEM768
 +//go:linkname go_encryptAESGCM go_encryptAESGCM
 +//go:linkname go_expandHKDF go_expandHKDF
 +//go:linkname go_extractHKDF go_extractHKDF
 +//go:linkname go_finalizeHMAC go_finalizeHMAC
 +//go:linkname go_freeHMAC go_freeHMAC
 +//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
++//go:linkname go_generateKeyMLKEM1024 go_generateKeyMLKEM1024
++//go:linkname go_generateKeyMLKEM768 go_generateKeyMLKEM768
 +//go:linkname go_hashBlockSize go_hashBlockSize
 +//go:linkname go_hashCopy go_hashCopy
 +//go:linkname go_hashFree go_hashFree
@@ -20361,6 +20738,7 @@ index 00000000000000..3f5109aff64cb8
 +//go:linkname go_newPrivateKeyEd25519FromSeed go_newPrivateKeyEd25519FromSeed
 +//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
 +//go:linkname go_signEd25519 go_signEd25519
++//go:linkname go_supportsMLKEM go_supportsMLKEM
 +//go:linkname go_supportsSHA3 go_supportsSHA3
 +//go:linkname go_updateHMAC go_updateHMAC
 +//go:linkname go_verifyEd25519 go_verifyEd25519
@@ -20374,13 +20752,21 @@ index 00000000000000..3f5109aff64cb8
 +var go_SHA3_512 byte
 +var go_SHA512 byte
 +var go_copyHMAC byte
++var go_decapsulateMLKEM1024 byte
++var go_decapsulateMLKEM768 byte
 +var go_decryptAESGCM byte
++var go_deriveEncapsulationKeyMLKEM1024 byte
++var go_deriveEncapsulationKeyMLKEM768 byte
++var go_encapsulateMLKEM1024 byte
++var go_encapsulateMLKEM768 byte
 +var go_encryptAESGCM byte
 +var go_expandHKDF byte
 +var go_extractHKDF byte
 +var go_finalizeHMAC byte
 +var go_freeHMAC byte
 +var go_generateKeyEd25519 byte
++var go_generateKeyMLKEM1024 byte
++var go_generateKeyMLKEM768 byte
 +var go_hashBlockSize byte
 +var go_hashCopy byte
 +var go_hashFree byte
@@ -20393,6 +20779,7 @@ index 00000000000000..3f5109aff64cb8
 +var go_newPrivateKeyEd25519FromSeed byte
 +var go_newPublicKeyEd25519 byte
 +var go_signEd25519 byte
++var go_supportsMLKEM byte
 +var go_supportsSHA3 byte
 +var go_updateHMAC byte
 +var go_verifyEd25519 byte
@@ -20434,11 +20821,41 @@ index 00000000000000..3f5109aff64cb8
 +	return unsafe.Pointer(r0)
 +}
 +
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
++	return int32(r0)
++}
++
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
++	return int32(r0)
++}
++
 +func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
 +	return int32(r0)
 +}
 +
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
++	return int32(r0)
++}
++
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
++	return int32(r0)
++}
++
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
++	return int32(r0)
++}
++
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
++	return int32(r0)
++}
++
 +func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
 +	return int32(r0)
@@ -20466,6 +20883,16 @@ index 00000000000000..3f5109aff64cb8
 +	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
++func GenerateKeyMLKEM1024(seed []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int32(r0)
++}
++
++func GenerateKeyMLKEM768(seed []uint8) int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int32(r0)
++}
++
 +func HashBlockSize(hashAlgorithm int32) int32 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashBlockSize)), uintptr(hashAlgorithm))
 +	return int32(r0)
@@ -20522,6 +20949,11 @@ index 00000000000000..3f5109aff64cb8
 +	return int32(r0)
 +}
 +
++func SupportsMLKEM() int32 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLKEM)))
++	return int32(r0)
++}
++
 +func SupportsSHA3() int32 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsSHA3)))
 +	return int32(r0)
@@ -20537,10 +20969,10 @@ index 00000000000000..3f5109aff64cb8
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
 new file mode 100644
-index 00000000000000..f392c1d6120a8a
+index 00000000000000..9f69a4428ed1ef
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-@@ -0,0 +1,146 @@
+@@ -0,0 +1,178 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -20549,6 +20981,7 @@ index 00000000000000..f392c1d6120a8a
 +
 +package cryptokit
 +
++//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
 +//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
@@ -20600,6 +21033,9 @@ index 00000000000000..f392c1d6120a8a
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
@@ -20645,6 +21081,17 @@ index 00000000000000..f392c1d6120a8a
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
@@ -20663,16 +21110,33 @@ index 00000000000000..f392c1d6120a8a
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
 +//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
++//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic ___chkstk_darwin ___chkstk_darwin ""
 +//go:cgo_import_dynamic memcpy memcpy ""
 +//go:cgo_import_dynamic memset memset ""
@@ -20689,10 +21153,10 @@ index 00000000000000..f392c1d6120a8a
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
 new file mode 100644
-index 00000000000000..6ea1c63b6d02bd
+index 00000000000000..7d0a89fb7be3a0
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-@@ -0,0 +1,145 @@
+@@ -0,0 +1,177 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -20701,6 +21165,7 @@ index 00000000000000..6ea1c63b6d02bd
 +
 +package cryptokit
 +
++//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
 +//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
@@ -20752,6 +21217,9 @@ index 00000000000000..6ea1c63b6d02bd
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
 +//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
@@ -20797,6 +21265,17 @@ index 00000000000000..6ea1c63b6d02bd
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
@@ -20815,16 +21294,33 @@ index 00000000000000..6ea1c63b6d02bd
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
 +//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
 +//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
++//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic __chkstk_darwin __chkstk_darwin "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic memcpy memcpy ""
 +//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
@@ -21434,10 +21930,10 @@ index 00000000000000..d4277c09fea06f
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 new file mode 100644
-index 00000000000000..9b34ab52c0a9d6
+index 00000000000000..df606bd23d00e8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
-@@ -0,0 +1,166 @@
+@@ -0,0 +1,390 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21447,41 +21943,265 @@ index 00000000000000..9b34ab52c0a9d6
 +
 +/*
 +#cgo CFLAGS: -Wno-attributes
++#cgo darwin LDFLAGS: -framework CoreFoundation
++#cgo darwin LDFLAGS: -framework Security
++
 +#include "zsecurity.h"
 +*/
 +import "C"
 +import "unsafe"
 +
++//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeECSECPrimeRandom kSecAttrKeyTypeECSECPrimeRandom "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard kSecKeyAlgorithmECDHKeyExchangeStandard "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
++//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
++//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
++//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
++//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
++//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
++//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
++//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
++//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
++//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
++//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++
++var (
++	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
++	_mkcgo_kSecRandomDefault                                SecRandomRef
++	_mkcgo_kSecAttrKeyTypeECSECPrimeRandom                  CFStringRef
++	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
++	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
++	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
++	_mkcgo_kSecAttrKeyType                                  CFStringRef
++	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
++	_mkcgo_kSecAttrKeyClass                                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
++)
++
++//go:noinline
++func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom() *CFStringRef {
++	return &_mkcgo_kSecAttrKeyTypeECSECPrimeRandom
++}
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++}
++
 +var (
-+	KCFAllocatorDefault                              = C.kCFAllocatorDefault
-+	KSecRandomDefault                                = C.kSecRandomDefault
-+	KSecAttrKeyTypeECSECPrimeRandom                  = C.kSecAttrKeyTypeECSECPrimeRandom
-+	KSecAttrKeyTypeRSA                               = C.kSecAttrKeyTypeRSA
-+	KSecAttrKeyClassPublic                           = C.kSecAttrKeyClassPublic
-+	KSecAttrKeyClassPrivate                          = C.kSecAttrKeyClassPrivate
-+	KSecAttrKeyType                                  = C.kSecAttrKeyType
-+	KSecAttrKeySizeInBits                            = C.kSecAttrKeySizeInBits
-+	KSecAttrKeyClass                                 = C.kSecAttrKeyClass
-+	KSecKeyAlgorithmECDHKeyExchangeStandard          = C.kSecKeyAlgorithmECDHKeyExchangeStandard
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA224
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA256
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA384
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      = C.kSecKeyAlgorithmRSASignatureDigestPSSSHA512
-+	KSecKeyAlgorithmRSAEncryptionRaw                 = C.kSecKeyAlgorithmRSAEncryptionRaw
-+	KSecKeyAlgorithmRSAEncryptionPKCS1               = C.kSecKeyAlgorithmRSAEncryptionPKCS1
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    = C.kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA1
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA224
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA256
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA384
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          = C.kSecKeyAlgorithmRSAEncryptionOAEPSHA512
-+	KSecKeyAlgorithmECDSASignatureDigestX962         = C.kSecKeyAlgorithmECDSASignatureDigestX962
++	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
++	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
++	KSecAttrKeyTypeECSECPrimeRandom                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom()
++	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
++	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
++	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
++	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
++	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
++	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
++	KSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
++	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
++	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
++	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
 +)
 +
 +type Boolean = C.Boolean
@@ -21645,10 +22365,10 @@ index 00000000000000..3001e7040e80f1
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
 new file mode 100644
-index 00000000000000..3e795ad6538ea3
+index 00000000000000..40afcdb1096176
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
-@@ -0,0 +1,480 @@
+@@ -0,0 +1,479 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21665,111 +22385,85 @@ index 00000000000000..3e795ad6538ea3
 +
 +var _ = runtime.GOOS
 +
++type Boolean = byte
++type SecRandomRef unsafe.Pointer
++type SecKeyRef unsafe.Pointer
++type CFDataRef unsafe.Pointer
++type CFTypeRef unsafe.Pointer
++type CFStringRef unsafe.Pointer
++type CFDictionaryRef unsafe.Pointer
++type CFMutableDictionaryRef unsafe.Pointer
++type CFNumberRef unsafe.Pointer
++type CFErrorRef unsafe.Pointer
++type CFAllocatorRef unsafe.Pointer
++type CFDictionaryKeyCallBacks unsafe.Pointer
++type CFDictionaryValueCallBacks unsafe.Pointer
++type CFIndex = int32
++type SecKeyAlgorithm = CFStringRef
++
++type SecKeyOperationType int32
++type CFStringEncoding int32
++type CFNumberType int32
++
 +//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
 +//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeECSECPrimeRandom kSecAttrKeyTypeECSECPrimeRandom "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard kSecKeyAlgorithmECDHKeyExchangeStandard "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
-+
-+//go:cgo_import_dynamic _mkcgo_CFDataCreate CFDataCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDataGetBytePtr CFDataGetBytePtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDataGetLength CFDataGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionaryCreate CFDictionaryCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionaryCreateMutable CFDictionaryCreateMutable "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionarySetValue CFDictionarySetValue "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFErrorCopyDescription CFErrorCopyDescription "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFErrorGetCode CFErrorGetCode "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFNumberCreate CFNumberCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFRelease CFRelease "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyKeyExchangeResult SecKeyCopyKeyExchangeResult "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateRandomKey SecKeyCreateRandomKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateSignature SecKeyCreateSignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateWithData SecKeyCreateWithData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyGetBlockSize SecKeyGetBlockSize "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyIsAlgorithmSupported SecKeyIsAlgorithmSupported "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyVerifySignature SecKeyVerifySignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecRandomCopyBytes SecRandomCopyBytes "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+
-+type Boolean = byte
-+type SecRandomRef unsafe.Pointer
-+type SecKeyRef unsafe.Pointer
-+type CFDataRef unsafe.Pointer
-+type CFTypeRef unsafe.Pointer
-+type CFStringRef unsafe.Pointer
-+type CFDictionaryRef unsafe.Pointer
-+type CFMutableDictionaryRef unsafe.Pointer
-+type CFNumberRef unsafe.Pointer
-+type CFErrorRef unsafe.Pointer
-+type CFAllocatorRef unsafe.Pointer
-+type CFDictionaryKeyCallBacks unsafe.Pointer
-+type CFDictionaryValueCallBacks unsafe.Pointer
-+type CFIndex = int32
-+type SecKeyAlgorithm = CFStringRef
-+
-+type SecKeyOperationType int32
-+
-+type CFStringEncoding int32
 +
-+type CFNumberType int32
++//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
++//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
++//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
++//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
++//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
++//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
++//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
++//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
++//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
++//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
 +
 +var (
 +	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
@@ -21964,6 +22658,31 @@ index 00000000000000..3e795ad6538ea3
 +	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
 +)
 +
++//go:cgo_import_dynamic _mkcgo_CFDataCreate CFDataCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetBytePtr CFDataGetBytePtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetLength CFDataGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreate CFDictionaryCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreateMutable CFDictionaryCreateMutable "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionarySetValue CFDictionarySetValue "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorCopyDescription CFErrorCopyDescription "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorGetCode CFErrorGetCode "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFNumberCreate CFNumberCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFRelease CFRelease "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyKeyExchangeResult SecKeyCopyKeyExchangeResult "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateRandomKey SecKeyCreateRandomKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateSignature SecKeyCreateSignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateWithData SecKeyCreateWithData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyGetBlockSize SecKeyGetBlockSize "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyIsAlgorithmSupported SecKeyIsAlgorithmSupported "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyVerifySignature SecKeyVerifySignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecRandomCopyBytes SecRandomCopyBytes "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
 +var _mkcgo_CFDataCreate_trampoline_addr uintptr
 +
 +func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
@@ -24208,6 +24927,273 @@ index 00000000000000..347cb244734fe8
 +		return 0
 +	}
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
+new file mode 100644
+index 00000000000000..b5131703afdbcc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
+@@ -0,0 +1,261 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
++	sharedKeySizeMLKEM = 32
++
++	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
++	seedSizeMLKEM = 64
++
++	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
++	ciphertextSizeMLKEM768 = 1088
++
++	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
++	encapsulationKeySizeMLKEM768 = 1184
++
++	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
++	ciphertextSizeMLKEM1024 = 1568
++
++	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
++	encapsulationKeySizeMLKEM1024 = 1568
++)
++
++// SupportsMLKEM returns true if ML-KEM is supported on this platform.
++func SupportsMLKEM() bool {
++	return cryptokit.SupportsMLKEM() == 1
++}
++
++// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	var dk DecapsulationKeyMLKEM768
++	ret := cryptokit.GenerateKeyMLKEM768(dk[:])
++	if ret != 0 {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: key generation failed")
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM768
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) != ciphertextSizeMLKEM768 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ret := cryptokit.DecapsulateMLKEM768(
++		dk[:],
++		ciphertext,
++		sharedKey,
++	)
++
++	if ret != 0 {
++		return nil, errors.New("mlkem: decapsulation failed")
++	}
++	return sharedKey, nil
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	var ek EncapsulationKeyMLKEM768
++	ret := cryptokit.DeriveEncapsulationKeyMLKEM768(
++		dk[:],
++		ek[:],
++	)
++
++	if ret != 0 {
++		return EncapsulationKeyMLKEM768{}
++	}
++	return ek
++}
++
++// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM768.
++type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
++
++// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
++		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSizeMLKEM768)
++
++	ret := cryptokit.EncapsulateMLKEM768(
++		ek[:],
++		sharedKey,
++		ciphertext,
++	)
++
++	if ret != 0 {
++		return nil, nil
++	}
++	return sharedKey, ciphertext
++}
++
++// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	var dk DecapsulationKeyMLKEM1024
++	ret := cryptokit.GenerateKeyMLKEM1024(dk[:])
++	if ret != 0 {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: key generation failed")
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM1024
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) != ciphertextSizeMLKEM1024 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ret := cryptokit.DecapsulateMLKEM1024(
++		dk[:],
++		ciphertext,
++		sharedKey,
++	)
++
++	if ret != 0 {
++		return nil, errors.New("mlkem: decapsulation failed")
++	}
++	return sharedKey, nil
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	var ek EncapsulationKeyMLKEM1024
++	ret := cryptokit.DeriveEncapsulationKeyMLKEM1024(
++		dk[:],
++		ek[:],
++	)
++
++	if ret != 0 {
++		return EncapsulationKeyMLKEM1024{}
++	}
++	return ek
++}
++
++// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
++type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
++
++// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
++		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSizeMLKEM1024)
++
++	ret := cryptokit.EncapsulateMLKEM1024(
++		ek[:],
++		sharedKey,
++		ciphertext,
++	)
++
++	if ret != 0 {
++		return nil, nil
++	}
++	return sharedKey, ciphertext
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
 index 00000000000000..484934d63e552b
@@ -29109,7 +30095,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..c473af0faf84a3 100644
+index f1e33686ed0626..b6edaa1ef99e5b 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
@@ -29119,8 +30105,8 @@ index f1e33686ed0626..c473af0faf84a3 100644
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.2-0.20251023150736-6964f54231a1
-+## explicit; go 1.22
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946
++## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit

From 2b46ed45c568c744ebf8d8e1f3c3b04d82d91855 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 24 Oct 2025 17:57:45 +0200
Subject: [PATCH 529/887] Support cgoless darwin backend (#1924)

* support cgoless darwin backend

* support weak binding on darwin

* read some test skips

* reskip some tests

* reskip some tests
---
 .../stages/go-builder-matrix-stages.yml       |   1 +
 ...03-Implement-crypto-internal-backend.patch | 103 ++++++------------
 patches/0004-Use-crypto-backends.patch        |  91 +++++-----------
 .../0011-support-weak-binding-on-darwin.patch |  90 +++++++++++++++
 4 files changed, 150 insertions(+), 135 deletions(-)
 create mode 100644 patches/0011-support-weak-binding-on-darwin.patch

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 63301de3875..26afb0ef32a 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -79,6 +79,7 @@ stages:
           - { experiment: nosystemcrypto, os: darwin, arch: amd64, config: devscript }
           - { experiment: nosystemcrypto, os: darwin, arch: amd64, config: test }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test }
+          - { experiment: systemcrypto, os: darwin, arch: amd64, config: nocgo }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test, fips: true }
           # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: devscript }
           # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: test }
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 4368fed7b2e..7fb44accca1 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -14,7 +14,7 @@ desired goexperiments and build tags.
  .../compile/internal/ssa/stmtlines_test.go    |   3 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
- src/cmd/dist/test.go                          |  47 ++-
+ src/cmd/dist/test.go                          |  43 +-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
@@ -50,13 +50,12 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/nobackend.go      | 251 ++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/systemcrypto_nocgo_darwin.go       |  15 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 47 files changed, 2385 insertions(+), 23 deletions(-)
+ 46 files changed, 2367 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -83,7 +82,6 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
- create mode 100644 src/crypto/systemcrypto_nocgo_darwin.go
  create mode 100644 src/crypto/systemcrypto_nocgo_linux.go
 
 diff --git a/.gitignore b/.gitignore
@@ -272,7 +270,7 @@ index 2fcdb2d3915b9b..c04c50e69e4070 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1e74438f48db39..1e9844174dbb5c 100644
+index 1e74438f48db39..c4b80436db2e85 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -333,8 +331,8 @@ index 1e74438f48db39..1e9844174dbb5c 100644
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
 +		var tags, env []string
-+		if goos == "darwin" || (goos == "linux" && !strings.Contains(goexperiment, "ms_nocgo_opensslcrypto")) {
-+			// Linux and macOS don't support systemcrypto with CGO_ENABLED=0.
++		if goos == "linux" && !strings.Contains(goexperiment, "ms_nocgo_opensslcrypto") {
++			// Linux doesn't support systemcrypto with CGO_ENABLED=0.
 +			tags = append(tags, "ms_skipfipscheck")
 +			env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
 +		}
@@ -363,31 +361,7 @@ index 1e74438f48db39..1e9844174dbb5c 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -898,15 +916,22 @@ func (t *tester) registerTests() {
- 
- 	if t.extLink() && !t.compileOnly {
- 		if goos != "android" { // Android does not support non-PIE linking
-+			var tags, env []string
-+			if goos == "darwin" {
-+				// Darwincrypto doesn't support external linking.
-+				tags = append(tags, "ms_skipfipscheck")
-+				env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
-+			}
- 			t.registerTest("external linking, -buildmode=exe",
- 				&goTest{
- 					variant:   "exe_external",
- 					timeout:   60 * time.Second,
- 					buildmode: "exe",
- 					ldflags:   "-linkmode=external",
--					env:       []string{"CGO_ENABLED=1"},
-+					env:       append([]string{"CGO_ENABLED=1"}, env...),
- 					pkg:       "crypto/internal/fips140test",
- 					runTests:  "TestFIPSCheck",
-+					tags:      tags,
- 				})
- 		}
- 		if t.externalLinkPIE() && !disablePIE {
-@@ -985,7 +1010,9 @@ func (t *tester) registerTests() {
+@@ -985,7 +1003,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -398,6 +372,18 @@ index 1e74438f48db39..1e9844174dbb5c 100644
  		// Only start multiple test dir shards on builders,
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
+@@ -1186,6 +1206,11 @@ func (t *tester) internalLink() bool {
+ 	if goos == "windows" && goarch == "arm64" {
+ 		return false
+ 	}
++	if goos == "darwin" && t.cgoEnabled && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
++		// linkmode=internal isn't supported with system/darwin crypto.
++		// see https://github.com/microsoft/go-crypto-darwin/issues/33
++		return false
++	}
+ 	// Internally linking cgo is incomplete on some architectures.
+ 	// https://golang.org/issue/10373
+ 	// https://golang.org/issue/14449
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
 index e4ee9bd1e8d2ec..3bdb6b4d31fe46 100644
 --- a/src/cmd/go/go_test.go
@@ -512,7 +498,7 @@ index 75a8fab78ad31b..57f1d79e89f36e 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..c4129cd74ee73d
+index 00000000000000..7335b47c237fd9
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
 @@ -0,0 +1,197 @@
@@ -608,9 +594,9 @@ index 00000000000000..c4129cd74ee73d
 +		{"linux", "arm", "ms_nocgo_cngcrypto", false},         // cgoless OpenSSL not supported on linux/arm
 +		{"linux", "amd64", "ms_nocgo_opensslcrypto", true},
 +		{"linux", "arm64", "ms_nocgo_opensslcrypto", true},
-+		{"darwin", "amd64", "", false}, // cgoless system crypto not supported on darwin/amd64
-+		{"darwin", "arm64", "", false}, // cgoless system crypto not supported on darwin/arm64
-+		{"windows", "386", "", false},  // cgoless system crypto not supported on windows/386
++		{"darwin", "amd64", "", true}, // cgoless system crypto not supported on darwin/amd64
++		{"darwin", "arm64", "", true}, // cgoless system crypto not supported on darwin/arm64
++		{"windows", "386", "", false}, // cgoless system crypto not supported on windows/386
 +		{"windows", "amd64", "", true},
 +		{"windows", "arm64", "", true},
 +	}
@@ -857,7 +843,7 @@ index 00000000000000..c2c06d3bff8c74
 +}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
-index 00000000000000..ab3f30825dcfa1
+index 00000000000000..20251a290dc2e0
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big.go
 @@ -0,0 +1,17 @@
@@ -865,7 +851,7 @@ index 00000000000000..ab3f30825dcfa1
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.systemcrypto || (goexperiment.darwincrypto && !cgo)
++//go:build !goexperiment.systemcrypto
 +
 +package bbig
 +
@@ -898,7 +884,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
 new file mode 100644
-index 00000000000000..77f3ca5d262769
+index 00000000000000..4ff10194a06e86
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big_darwin.go
 @@ -0,0 +1,12 @@
@@ -906,7 +892,7 @@ index 00000000000000..77f3ca5d262769
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto && cgo
++//go:build goexperiment.darwincrypto
 +
 +package bbig
 +
@@ -1337,7 +1323,7 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..fea0f284de2439
+index 00000000000000..aeed096c193d9f
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
 @@ -0,0 +1,372 @@
@@ -1345,7 +1331,7 @@ index 00000000000000..fea0f284de2439
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto && darwin && cgo
++//go:build goexperiment.darwincrypto && darwin
 +
 +// Package darwin provides access to DarwinCrypto implementation functions.
 +// Check the variable Enabled to find out whether DarwinCrypto is available.
@@ -2227,7 +2213,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..a59c6cc736c6da
+index 00000000000000..fbd649dd105b8b
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,251 @@
@@ -2235,7 +2221,7 @@ index 00000000000000..a59c6cc736c6da
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.systemcrypto || (goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto)) || (goexperiment.darwincrypto && !cgo)
++//go:build !goexperiment.systemcrypto || (goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto))
 +
 +package backend
 +
@@ -2836,27 +2822,6 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
-diff --git a/src/crypto/systemcrypto_nocgo_darwin.go b/src/crypto/systemcrypto_nocgo_darwin.go
-new file mode 100644
-index 00000000000000..aed8fc5e152405
---- /dev/null
-+++ b/src/crypto/systemcrypto_nocgo_darwin.go
-@@ -0,0 +1,15 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.darwincrypto && !cgo
-+
-+package crypto
-+
-+func init() {
-+	`
-+	Using GOEXPERIMENT=systemcrypto on Darwin requires CGO_ENABLED=1.
-+	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
-+}
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
 index 00000000000000..b79491c6cb7c08
@@ -2879,7 +2844,7 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index db5e6ba6d64978..569a7084c46f11 100644
+index 373efd8319c675..1f245d570092a3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -355,7 +355,7 @@ var depsRules = `
@@ -2891,7 +2856,7 @@ index db5e6ba6d64978..569a7084c46f11 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -547,6 +547,11 @@ var depsRules = `
+@@ -549,6 +549,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2903,7 +2868,7 @@ index db5e6ba6d64978..569a7084c46f11 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -555,16 +560,27 @@ var depsRules = `
+@@ -557,16 +562,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2933,7 +2898,7 @@ index db5e6ba6d64978..569a7084c46f11 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -588,8 +604,14 @@ var depsRules = `
+@@ -590,8 +606,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index b0486a67d65..660c9e9caaf 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,13 +5,13 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |  10 +-
- src/cmd/go/go_boring_test.go                  |  11 +-
+ src/cmd/dist/test.go                          |   5 +-
+ src/cmd/go/go_boring_test.go                  |   6 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
- src/cmd/link/internal/ld/lib.go               |   2 +
+ src/cmd/link/internal/ld/lib.go               |   5 +
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
@@ -92,8 +92,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- src/runtime/pprof/vminfo_darwin_test.go       |   6 +
- 89 files changed, 1172 insertions(+), 119 deletions(-)
+ 88 files changed, 1159 insertions(+), 119 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -119,7 +118,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 6c31b623897048..6db889494bae8e 100644
+index 34c41a7099e1e6..86eec2c9eec8dd 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -131,19 +130,7 @@ index 6c31b623897048..6db889494bae8e 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1212,6 +1212,11 @@ func (t *tester) internalLink() bool {
- 	if goos == "windows" && goarch == "arm64" {
- 		return false
- 	}
-+	if goos == "darwin" && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
-+		// linkmode=internal isn't supported with system/darwin crypto.
-+		// see https://github.com/microsoft/go-crypto-darwin/issues/33
-+		return false
-+	}
- 	// Internally linking cgo is incomplete on some architectures.
- 	// https://golang.org/issue/10373
- 	// https://golang.org/issue/14449
-@@ -1375,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1365,12 +1365,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -158,10 +145,10 @@ index 6c31b623897048..6db889494bae8e 100644
  			if goos != "android" && p != "netbsd/arm" && !t.msan && !t.asan {
  				// TODO(#56629): Why does this fail on netbsd-arm?
 diff --git a/src/cmd/go/go_boring_test.go b/src/cmd/go/go_boring_test.go
-index ed0fbf3d53d75b..8111b143a1295b 100644
+index ed0fbf3d53d75b..a2f74c8095d449 100644
 --- a/src/cmd/go/go_boring_test.go
 +++ b/src/cmd/go/go_boring_test.go
-@@ -2,13 +2,20 @@
+@@ -2,11 +2,13 @@
  // Use of this source code is governed by a BSD-style
  // license that can be found in the LICENSE file.
  
@@ -172,18 +159,11 @@ index ed0fbf3d53d75b..8111b143a1295b 100644
  
 -import "testing"
 +import (
-+	"internal/goexperiment"
 +	"testing"
 +)
  
  func TestBoringInternalLink(t *testing.T) {
-+	if goexperiment.DarwinCrypto {
-+		// https://github.com/microsoft/go-crypto-darwin/issues/33
-+		t.Skip("skipping on Darwin")
-+	}
  	tg := testgo(t)
- 	defer tg.cleanup()
- 	tg.parallel()
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
 index 390a36723787f4..0576ea8add72af 100644
 --- a/src/cmd/go/script_test.go
@@ -256,13 +236,16 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 2c861129b52f9a..851e6ad02dc722 100644
+index 2c861129b52f9a..c889aef01e6cb6 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1176,6 +1176,8 @@ var hostobj []Hostobj
+@@ -1176,6 +1176,11 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
++	"vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit",
++	"vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto",
++	"vendor/github.com/microsoft/go-crypto-darwin/internal/security",
 +	"vendor/github.com/golang-fips/openssl/v2/internal/ossl",
 +	"vendor/github.com/golang-fips/openssl/v2",
  	"crypto/internal/boring",
@@ -317,7 +300,7 @@ index 097c37e343fdb8..a5d603896d3890 100644
  // Enabled reports whether BoringCrypto handles supported crypto operations.
  func Enabled() bool {
 diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
-index 33942467784ad3..0282ffa9fa23c8 100644
+index 9b7d30e2164422..b08132d1c7568a 100644
 --- a/src/crypto/cipher/ctr_aes_test.go
 +++ b/src/crypto/cipher/ctr_aes_test.go
 @@ -14,7 +14,7 @@ import (
@@ -2051,7 +2034,7 @@ index b6b94a79bbca51..32abaf174bfb5b 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 0d5b6e08f0e223..b4d4c819fe3deb 100644
+index b9e85bd8ff8f37..5014ae3965c252 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2075,7 +2058,7 @@ index 0d5b6e08f0e223..b4d4c819fe3deb 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -232,6 +237,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
+@@ -231,6 +236,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
  	if validateErr != nil && len(priv.Primes) >= 2 {
  		t.Errorf("Validate() failed: %s", validateErr)
  	}
@@ -2087,7 +2070,7 @@ index 0d5b6e08f0e223..b4d4c819fe3deb 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -940,6 +950,9 @@ func TestDecryptOAEP(t *testing.T) {
+@@ -939,6 +949,9 @@ func TestDecryptOAEP(t *testing.T) {
  }
  
  func Test2DecryptOAEP(t *testing.T) {
@@ -2586,7 +2569,7 @@ index 7018bb2336b8f3..d5e02272d7afe1 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 088c66fadb2a44..ca33ba92665d44 100644
+index a2cf176a86c0d8..b2edd0246016a1 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2940,7 +2923,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index 5595f99ea5e43a..e1a87fa839033a 100644
+index 60a4cea9146adf..0961c5b376bab9 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
 @@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
@@ -2953,7 +2936,7 @@ index 5595f99ea5e43a..e1a87fa839033a 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e1dd6331d96052..1cfca2f1634837 100644
+index 1f245d570092a3..b3d1383b925161 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -526,7 +526,7 @@ var depsRules = `
@@ -2965,7 +2948,7 @@ index e1dd6331d96052..1cfca2f1634837 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -551,6 +551,8 @@ var depsRules = `
+@@ -554,6 +554,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2974,7 +2957,7 @@ index e1dd6331d96052..1cfca2f1634837 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -593,6 +595,7 @@ var depsRules = `
+@@ -596,6 +598,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -3048,10 +3031,10 @@ index 00000000000000..11dc691600b110
 +
 +const boringEnabled = false
 diff --git a/src/net/lookup_test.go b/src/net/lookup_test.go
-index 514cbd098ae772..8ec689416dde1d 100644
+index 2a774100a8ec67..a0cabb42b19484 100644
 --- a/src/net/lookup_test.go
 +++ b/src/net/lookup_test.go
-@@ -1501,6 +1501,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
+@@ -1499,6 +1499,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
  }
  
  func TestLookupNoSuchHost(t *testing.T) {
@@ -3062,7 +3045,7 @@ index 514cbd098ae772..8ec689416dde1d 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 3bded3dea604fb..64fa1960ae9891 100644
+index 1decebdc222d23..c095fa280b2f83 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
@@ -3088,27 +3071,3 @@ index 3bded3dea604fb..64fa1960ae9891 100644
  	// Force network usage, to verify the epoll (or whatever) fd
  	// doesn't leak to the child,
  	ln, err := net.Listen("tcp", "127.0.0.1:0")
-diff --git a/src/runtime/pprof/vminfo_darwin_test.go b/src/runtime/pprof/vminfo_darwin_test.go
-index 6d375c5d53368a..39154b000ddc67 100644
---- a/src/runtime/pprof/vminfo_darwin_test.go
-+++ b/src/runtime/pprof/vminfo_darwin_test.go
-@@ -11,6 +11,7 @@ import (
- 	"bytes"
- 	"fmt"
- 	"internal/abi"
-+	"internal/goexperiment"
- 	"internal/testenv"
- 	"os"
- 	"os/exec"
-@@ -21,6 +22,11 @@ import (
- )
- 
- func TestVMInfo(t *testing.T) {
-+	if goexperiment.DarwinCrypto {
-+		// Fails on macOS when using system crypto.
-+		// https://github.com/microsoft/go/issues/1466
-+		t.Skip("skipping on Darwin")
-+	}
- 	var begin, end, offset uint64
- 	var filename string
- 	first := true
diff --git a/patches/0011-support-weak-binding-on-darwin.patch b/patches/0011-support-weak-binding-on-darwin.patch
new file mode 100644
index 00000000000..2a4ec7bee2e
--- /dev/null
+++ b/patches/0011-support-weak-binding-on-darwin.patch
@@ -0,0 +1,90 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 24 Oct 2025 13:03:01 +0200
+Subject: [PATCH] support weak binding on darwin
+
+Remove once https://go-review.googlesource.com/c/go/+/713760 is merged.
+---
+ src/cmd/link/internal/ld/macho.go          |  8 +++++++-
+ src/cmd/link/internal/loader/loader.go     | 13 +++++++++++++
+ src/cmd/link/internal/loadmacho/ldmacho.go |  3 +++
+ 3 files changed, 23 insertions(+), 1 deletion(-)
+
+diff --git a/src/cmd/link/internal/ld/macho.go b/src/cmd/link/internal/ld/macho.go
+index 8e059f299ffa73..1aa9042dc7a20f 100644
+--- a/src/cmd/link/internal/ld/macho.go
++++ b/src/cmd/link/internal/ld/macho.go
+@@ -180,6 +180,8 @@ const (
+ 	BIND_SPECIAL_DYLIB_FLAT_LOOKUP     = -2
+ 	BIND_SPECIAL_DYLIB_WEAK_LOOKUP     = -3
+ 
++	BIND_SYMBOL_FLAGS_WEAK_IMPORT = 0x1
++
+ 	BIND_OPCODE_MASK                                         = 0xF0
+ 	BIND_IMMEDIATE_MASK                                      = 0x0F
+ 	BIND_OPCODE_DONE                                         = 0x00
+@@ -1429,7 +1431,11 @@ func machoDyldInfo(ctxt *Link) {
+ 			bind.AddUint8(BIND_OPCODE_SET_DYLIB_SPECIAL_IMM | uint8(d)&0xf)
+ 		}
+ 
+-		bind.AddUint8(BIND_OPCODE_SET_SYMBOL_TRAILING_FLAGS_IMM)
++		flags := uint8(0)
++		if ldr.SymWeakBinding(r.targ) {
++			flags |= BIND_SYMBOL_FLAGS_WEAK_IMPORT
++		}
++		bind.AddUint8(BIND_OPCODE_SET_SYMBOL_TRAILING_FLAGS_IMM | flags)
+ 		// target symbol name as a C string, with _ prefix
+ 		bind.AddUint8('_')
+ 		bind.Addstring(ldr.SymExtname(r.targ))
+diff --git a/src/cmd/link/internal/loader/loader.go b/src/cmd/link/internal/loader/loader.go
+index cef17fae781798..90661cb6cc7be5 100644
+--- a/src/cmd/link/internal/loader/loader.go
++++ b/src/cmd/link/internal/loader/loader.go
+@@ -241,6 +241,7 @@ type Loader struct {
+ 	plt         map[Sym]int32       // stores dynimport for pe objects
+ 	got         map[Sym]int32       // stores got for pe objects
+ 	dynid       map[Sym]int32       // stores Dynid for symbol
++	weakBinding map[Sym]bool        // stores whether a symbol has a weak binding
+ 
+ 	relocVariant map[relocId]sym.RelocVariant // stores variant relocs
+ 
+@@ -326,6 +327,7 @@ func NewLoader(flags uint32, reporter *ErrorReporter) *Loader {
+ 		plt:                  make(map[Sym]int32),
+ 		got:                  make(map[Sym]int32),
+ 		dynid:                make(map[Sym]int32),
++		weakBinding:          make(map[Sym]bool),
+ 		attrCgoExportDynamic: make(map[Sym]struct{}),
+ 		attrCgoExportStatic:  make(map[Sym]struct{}),
+ 		deferReturnTramp:     make(map[Sym]bool),
+@@ -1450,6 +1452,17 @@ func (l *Loader) SetSymExtname(i Sym, value string) {
+ 	}
+ }
+ 
++func (l *Loader) SymWeakBinding(i Sym) bool {
++	return l.weakBinding[i]
++}
++func (l *Loader) SetSymWeakBinding(i Sym, v bool) {
++	// reject bad symbols
++	if i >= Sym(len(l.objSyms)) || i == 0 {
++		panic("bad symbol index in SetSymWeakBinding")
++	}
++	l.weakBinding[i] = v
++}
++
+ // SymElfType returns the previously recorded ELF type for a symbol
+ // (used only for symbols read from shared libraries by ldshlibsyms).
+ // It is not set for symbols defined by the packages being linked or
+diff --git a/src/cmd/link/internal/loadmacho/ldmacho.go b/src/cmd/link/internal/loadmacho/ldmacho.go
+index 5e8022ce69bb36..dcb0fd92c1f357 100644
+--- a/src/cmd/link/internal/loadmacho/ldmacho.go
++++ b/src/cmd/link/internal/loadmacho/ldmacho.go
+@@ -613,6 +613,9 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, f *bio.Reader,
+ 		}
+ 		if machsym.desc&(N_WEAK_REF|N_WEAK_DEF) != 0 {
+ 			l.SetAttrDuplicateOK(s, true)
++			if machsym.desc&N_WEAK_REF != 0 {
++				l.SetSymWeakBinding(s, true)
++			}
+ 		}
+ 		machsym.sym = s
+ 		if machsym.sectnum == 0 { // undefined

From 71f1dadee5327030dafad403bb72244086d6e6f6 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 24 Oct 2025 16:01:52 +0000
Subject: [PATCH 530/887] Update submodule to latest master (0d3dab9b):
 crypto/x509: simplify candidate chain filtering

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d09a8c8ef47..0d3dab9b1d3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d09a8c8ef473ba51244d6da9118b956bedb1b20d
+Subproject commit 0d3dab9b1d3b22ecac956c79a1b42a7d3f587c06

From a88c9c5ccc48fad0882f13b9ffc7d159226121fa Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 24 Oct 2025 18:07:18 +0100
Subject: [PATCH 531/887] resolve conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 14 ++++++-------
 patches/0004-Use-crypto-backends.patch        | 21 +++++++++++--------
 2 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 6618859a221..41808b0c153 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -401,7 +401,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 1fc256ae6f2ce7..4bd5187444ff47 100644
+index 42d510c34fe6b4..27b61b99bb2213 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -410,11 +410,11 @@ index 1fc256ae6f2ce7..4bd5187444ff47 100644
  	github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
- 	golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
+ 	golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.29.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index eb7af161552020..741109d5821e86 100644
+index 0a09e6e401a926..f5e10cb6329699 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -427,7 +427,7 @@ index eb7af161552020..741109d5821e86 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58 h1:uxPa6+/WsUfzikIAPMqpTho10y4qtYpINBurU+6NrHE=
+ golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938 h1:VJ182b/ajNehMFRltVfCh/FR0jAH+QX6hs9zqYod/mU=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -2007,7 +2007,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7ae23d5b6cecf0..02440bec5b533e 100644
+index e92804a90d3f59..c20eed57b641e3 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2025,8 +2025,8 @@ index 7ae23d5b6cecf0..02440bec5b533e 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.20.1-0.20250808194827-46ba08e3ae58
- ## explicit; go 1.23.0
+ # golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
+ ## explicit; go 1.24.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 660c9e9caaf..ed27adc8f30 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -42,7 +42,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
- src/crypto/internal/fips140test/acvp_test.go  |   6 +
+ src/crypto/internal/fips140test/acvp_test.go  |   8 +-
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
@@ -92,7 +92,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 88 files changed, 1159 insertions(+), 119 deletions(-)
+ 88 files changed, 1160 insertions(+), 120 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -118,7 +118,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 34c41a7099e1e6..86eec2c9eec8dd 100644
+index c4b80436db2e85..0e0ab5842c5a0b 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -130,7 +130,7 @@ index 34c41a7099e1e6..86eec2c9eec8dd 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1365,12 +1365,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1374,12 +1374,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -1380,19 +1380,22 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 47a42cce1bcc22..7e04972a68b570 100644
+index 3e1c0cb06a1cbd..f95c579b2ed5ba 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
-@@ -22,6 +22,8 @@ import (
+@@ -22,8 +22,10 @@ import (
  	"bufio"
  	"bytes"
  	"crypto/elliptic"
 +	boring "crypto/internal/backend"
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/cryptotest"
+-	"crypto/internal/entropy/v1.0.0"
++	entropy "crypto/internal/entropy/v1.0.0"
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/aes"
-@@ -2073,6 +2075,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
+ 	"crypto/internal/fips140/aes/gcm"
+@@ -2145,6 +2147,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
  func TestACVP(t *testing.T) {
  	testenv.SkipIfShortAndSlow(t)
  
@@ -1536,7 +1539,7 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index dff2e6cb355c5f..7d1348cadc3f61 100644
+index 01fd12e40e341e..38ffac92a36221 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
 @@ -11,6 +11,7 @@
@@ -2923,7 +2926,7 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index 60a4cea9146adf..0961c5b376bab9 100644
+index 17e7aaf897ab56..569346899ba445 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
 @@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {

From 800abaa3a92b3469edfc8b511232d312eda916d0 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 27 Oct 2025 09:42:31 +0000
Subject: [PATCH 532/887] fix patch

---
 patches/0004-Use-crypto-backends.patch | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index ed27adc8f30..9d1c34edf95 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -42,7 +42,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
- src/crypto/internal/fips140test/acvp_test.go  |   8 +-
+ src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
@@ -92,7 +92,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 88 files changed, 1160 insertions(+), 120 deletions(-)
+ 88 files changed, 1159 insertions(+), 119 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1380,21 +1380,18 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 3e1c0cb06a1cbd..f95c579b2ed5ba 100644
+index 3e1c0cb06a1cbd..4708cbd8518285 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
-@@ -22,8 +22,10 @@ import (
+@@ -22,6 +22,8 @@ import (
  	"bufio"
  	"bytes"
  	"crypto/elliptic"
 +	boring "crypto/internal/backend"
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/cryptotest"
--	"crypto/internal/entropy/v1.0.0"
-+	entropy "crypto/internal/entropy/v1.0.0"
+ 	"crypto/internal/entropy/v1.0.0"
  	"crypto/internal/fips140"
- 	"crypto/internal/fips140/aes"
- 	"crypto/internal/fips140/aes/gcm"
 @@ -2145,6 +2147,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
  func TestACVP(t *testing.T) {
  	testenv.SkipIfShortAndSlow(t)

From 5a601f642f1514cd5d81b0662a7523a06398dd17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Oct 2025 13:22:07 +0000
Subject: [PATCH 533/887] build(deps): bump github/codeql-action from 4.30.9 to
 4.31.0

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.30.9 to 4.31.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/16140ae1a102900babc80a33c44059580f687047...4e94bd11f71e507f7f87df81788dff88d1dacbfb)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4f55a9f0b35..839f491acf1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
+        uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
+        uses: github/codeql-action/autobuild@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
+        uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
         with:
           category: /language:go

From ad7d8de064b00ebc6c68646aa1073ce93158cf26 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 27 Oct 2025 16:03:21 +0000
Subject: [PATCH 534/887] Update submodule to latest master (5dcaf9a0):
 runtime: add GOEXPERIMENT=runtimefree

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 0d3dab9b1d3..5dcaf9a01b5 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 0d3dab9b1d3b22ecac956c79a1b42a7d3f587c06
+Subproject commit 5dcaf9a01b5e91074c7750823e94e08e1829cc36

From c6e6a497f6217101f9483764bbdcc59e06db0fd6 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Mon, 27 Oct 2025 10:18:09 -0700
Subject: [PATCH 535/887] Update to preview3

---
 eng/doc/Downloads.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index abfe7abd5c2..f267e73b0a1 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -47,11 +47,11 @@ The tool handles Go download and setup.
 To use it, insert these commands steps in your existing build or pipeline:
 
 ```
-go install github.com/microsoft/go-infra/dev-dl-experiment/dl/msgo1.26.0preview2@417d3fa14958d73e02dbcc4de2681cdd32777f37
-msgo1.26.0preview2 download
+go install github.com/microsoft/go-infra/dl/msgo1.26.0preview3@c4c8b9359d9985d719473528fc8a4d7b23b4abb3
+msgo1.26.0preview3 download
 ```
 
-Then, change `go` in your "go build" and "go test" comamnds (for example) to `msgo1.26.0preview2` to use the downloaded Go.
+Then, change `go` in your "go build" and "go test" comamnds (for example) to `msgo1.26.0preview3` to use the downloaded Go.
 
 ## Downloading a specific version
 

From fccb7bff681b1483ccd7eecbcafc70e95f33d44a Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 27 Oct 2025 18:00:14 +0000
Subject: [PATCH 536/887] resolve 3-way merge conflicts

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 083e9c75ec5..3613c6a4b48 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -50,7 +50,7 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index 0fa78afe2c08ef..2f65c7b6133474 100644
+index 053e04dfe599e9..7f8cce76a2b723 100644
 --- a/src/cmd/go/internal/modindex/build.go
 +++ b/src/cmd/go/internal/modindex/build.go
 @@ -700,9 +700,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
@@ -197,10 +197,10 @@ index 00000000000000..1756c5d027fee0
 +	}
 +}
 diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 76866c7487adf4..2ef2d71dc27951 100644
+index 68fb8dbbd7ab69..ceba8f5aeadc39 100644
 --- a/src/go/build/build.go
 +++ b/src/go/build/build.go
-@@ -1984,9 +1984,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
+@@ -1972,9 +1972,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
  		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
  	}
  
@@ -391,7 +391,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index f1a1d8632ef507..0d1e9dd6d1171c 100644
+index 31195f94c08c86..c35ce8d980538e 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -441,15 +441,15 @@ index f1a1d8632ef507..0d1e9dd6d1171c 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RandomizedHeapBase64:  true,
+@@ -86,6 +112,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RuntimeFree:           true,
  		SizeSpecializedMalloc: true,
  		GreenTeaGC:            true,
 +		SystemCrypto:          systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -126,6 +153,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -127,6 +154,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -464,7 +464,7 @@ index f1a1d8632ef507..0d1e9dd6d1171c 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -139,6 +174,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -140,6 +175,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -475,7 +475,7 @@ index f1a1d8632ef507..0d1e9dd6d1171c 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -152,6 +191,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -153,6 +192,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -626,7 +626,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 07aa1d0aeed15d..180e1db72bfdbc 100644
+index b3a3c8a4974975..342d663c20f439 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,28 @@ type Flags struct {

From 37afd8d7c4ca04e947d9885a025702daad46fdb7 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 29 Oct 2025 11:00:38 +0000
Subject: [PATCH 537/887] macos: enable systemcrypto by default (#1929)

* macos: enable systemcrypto by default

* add test that checks systemcrypto is used by default

* make TestSystemCrypto less dependant on the environment

* attempt to fix tests

* fix tests

* log less

* fix tests

* fix tests

---------

Co-authored-by: qmuntal <quimmuntal@gmail.com>
---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  4 +-
 ...03-Implement-crypto-internal-backend.patch | 84 +++++++++++++++----
 2 files changed, 70 insertions(+), 18 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 3613c6a4b48..7d48dae0890 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -391,7 +391,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 31195f94c08c86..c35ce8d980538e 100644
+index 31195f94c08c86..14ca07c56683f1 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -435,7 +435,7 @@ index 31195f94c08c86..c35ce8d980538e 100644
 +	case "linux":
 +		systemCryptoSupported = true
 +	case "darwin":
-+		// darwincrypto is still experimental.
++		systemCryptoSupported = true
 +	}
 +
  	// Older versions (anything before V16) of dsymutil don't handle
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 7fb44accca1..2c4c27aa640 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -19,7 +19,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 197 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 249 ++++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2367 insertions(+), 22 deletions(-)
+ 46 files changed, 2419 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -455,7 +455,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index 554963240049e4..2a2647fde9ce91 100644
+index 3b8bbdc91b8191..53a58e23f8b05c 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
@@ -469,10 +469,10 @@ index 554963240049e4..2a2647fde9ce91 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index 75a8fab78ad31b..57f1d79e89f36e 100644
+index e283c7354f5a34..ad56d64a29f684 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
-@@ -304,6 +304,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+@@ -305,6 +305,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
  	// Override GOOS and GOARCH for the build to build the tool using
  	// the same GOOS and GOARCH as this go command.
  	cfg.ForceHost()
@@ -483,7 +483,7 @@ index 75a8fab78ad31b..57f1d79e89f36e 100644
  
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
-@@ -311,8 +315,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+@@ -312,8 +316,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
  	loaderstate.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
@@ -498,10 +498,10 @@ index 75a8fab78ad31b..57f1d79e89f36e 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..7335b47c237fd9
+index 00000000000000..b6ba8158598a6c
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,197 @@
+@@ -0,0 +1,249 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -509,10 +509,12 @@ index 00000000000000..7335b47c237fd9
 +package main_test
 +
 +import (
++	"fmt"
 +	"internal/testenv"
 +	"os"
 +	"path/filepath"
 +	"runtime"
++	"slices"
 +	"strings"
 +	"testing"
 +)
@@ -594,8 +596,8 @@ index 00000000000000..7335b47c237fd9
 +		{"linux", "arm", "ms_nocgo_cngcrypto", false},         // cgoless OpenSSL not supported on linux/arm
 +		{"linux", "amd64", "ms_nocgo_opensslcrypto", true},
 +		{"linux", "arm64", "ms_nocgo_opensslcrypto", true},
-+		{"darwin", "amd64", "", true}, // cgoless system crypto not supported on darwin/amd64
-+		{"darwin", "arm64", "", true}, // cgoless system crypto not supported on darwin/arm64
++		{"darwin", "amd64", "", true},
++		{"darwin", "arm64", "", true},
 +		{"windows", "386", "", false}, // cgoless system crypto not supported on windows/386
 +		{"windows", "amd64", "", true},
 +		{"windows", "arm64", "", true},
@@ -608,7 +610,7 @@ index 00000000000000..7335b47c237fd9
 +			} else {
 +				tc.goexp += ",systemcrypto"
 +			}
-+			env := []string{"CGO_ENABLED=0", "GOOS=" + tc.goos, "GOARCH=" + tc.goarch, "GOEXPERIMENT=" + tc.goexp}
++			env := []string{"CGO_ENABLED=0", "GOOS=" + tc.goos, "GOARCH=" + tc.goarch, "GOEXPERIMENT=" + tc.goexp, "MS_GO_NOSYSTEMCRYPTO=0"}
 +			if out, ok := execGoTool(t, true, env, "build", "-o", outPath(t), cryptoFile); ok != tc.succeed {
 +				if tc.succeed {
 +					t.Fatalf("expected success, got failure: %s", out)
@@ -644,6 +646,48 @@ index 00000000000000..7335b47c237fd9
 +	// and presence of system-provided crypto, and it can't be tested here.
 +}
 +
++func TestSystemCryptoDefault(t *testing.T) {
++	t.Parallel()
++	cryptoFile := writeFile(t, fileWithCrypto)
++
++	// Add here all the OS/ARCH combinations that enable systemcrypto by default.
++	type testCase struct {
++		goos   string
++		goarch string
++	}
++	test := []testCase{
++		{"linux", "amd64"},
++		{"linux", "arm64"},
++		{"darwin", "amd64"},
++		{"darwin", "arm64"},
++		{"windows", "amd64"},
++		{"windows", "arm64"},
++	}
++	for _, tt := range test {
++		t.Run(fmt.Sprintf("%s_%s", tt.goos, tt.goarch), func(t *testing.T) {
++			t.Parallel()
++			out := outPath(t)
++			env := []string{"CGO_ENABLED=0", "GOOS=" + tt.goos, "GOARCH=" + tt.goarch, "MS_GO_NOSYSTEMCRYPTO=0"}
++			if tt.goos == "linux" {
++				// On linux, set ms_nocgo_opensslcrypto to allow cross-compilation without cgo.
++				env = append(env, "GOEXPERIMENT=ms_nocgo_opensslcrypto")
++			} else {
++				// Set a goexperiment in case the Go toolchain has been built with GOEXPERIMENT=nosystemcrypto.
++				// In that case, systemcrypto will not be enabled by default unless we pass an explicit GOEXPERIMENT.
++				env = append(env, "GOEXPERIMENT=regabi")
++
++			}
++			execGoTool(t, false, env, "build", "-o", out, cryptoFile)
++			// Check that the binary has the correct settings.
++			settings, _ := execGoTool(t, false, nil, "version", "-m", out)
++			if !strings.Contains(settings, "microsoft_systemcrypto=1") {
++				t.Errorf("expected microsoft_systemcrypto=1 in settings, got %v", settings)
++			}
++		})
++	}
++
++}
++
 +func TestSystemCryptoSetting(t *testing.T) {
 +	t.Parallel()
 +	file := writeFile(t, fileWithCrypto)
@@ -682,6 +726,14 @@ index 00000000000000..7335b47c237fd9
 +			t.Parallel()
 +			out := outPath(t)
 +
++			if !slices.ContainsFunc(tt.env, func(r string) bool {
++				return strings.HasPrefix(r, "MS_GO_NOSYSTEMCRYPTO=")
++			}) {
++				// Ensure MS_GO_NOSYSTEMCRYPTO is set to 0 if not specified
++				// to avoid interference from the environment.
++				tt.env = append(tt.env, "MS_GO_NOSYSTEMCRYPTO=0")
++			}
++
 +			// Build the binary with the specified GOEXPERIMENT.
 +			_, ok := execGoTool(t, true, tt.env, "build", "-o", out, file)
 +			if !ok {
@@ -690,10 +742,10 @@ index 00000000000000..7335b47c237fd9
 +
 +			// Check that the binary has the correct settings.
 +			settings, _ := execGoTool(t, false, nil, "version", "-m", out)
-+			hashSetting := strings.Contains(settings, "microsoft_systemcrypto=1")
-+			if tt.enabled && !hashSetting {
++			hasSetting := strings.Contains(settings, "microsoft_systemcrypto=1")
++			if tt.enabled && !hasSetting {
 +				t.Errorf("expected microsoft_systemcrypto=1 in settings, got %v", settings)
-+			} else if !tt.enabled && hashSetting {
++			} else if !tt.enabled && hasSetting {
 +				t.Errorf("expected microsoft_systemcrypto=1 not to be in settings, got %v", settings)
 +			}
 +		})
@@ -2916,7 +2968,7 @@ index 373efd8319c675..1f245d570092a3 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 0d1e9dd6d1171c..adf26041b0cf89 100644
+index 14ca07c56683f1..64c37df9e9fced 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -2935,7 +2987,7 @@ index 0d1e9dd6d1171c..adf26041b0cf89 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -194,6 +197,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -195,6 +198,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}

From 2c979bb0b5543d20cfe4c6369df4b2fbded96969 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 29 Oct 2025 16:02:24 +0000
Subject: [PATCH 538/887] Update submodule to latest master (041f564b):
 internal/runtime/gc/scan: avoid memory destination on VPCOMPRESSQ

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 5dcaf9a01b5..041f564b3e6 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 5dcaf9a01b5e91074c7750823e94e08e1829cc36
+Subproject commit 041f564b3e6fa3f4af13a01b94db14c1ee8a42e0

From d43d64320bf1a1d6a662a86a906bb017629173b7 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 29 Oct 2025 21:01:29 +0000
Subject: [PATCH 539/887] resolve conflicts

---
 ...03-Implement-crypto-internal-backend.patch | 38 ++++++++-----------
 1 file changed, 15 insertions(+), 23 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 2c4c27aa640..151c1d4cfa2 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -11,7 +11,7 @@ desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
  .../compile/internal/logopt/logopt_test.go    |   6 +-
- .../compile/internal/ssa/stmtlines_test.go    |   3 +-
+ .../compile/internal/ssa/stmtlines_test.go    |   2 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
  src/cmd/dist/test.go                          |  43 +-
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2419 insertions(+), 22 deletions(-)
+ 46 files changed, 2419 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -122,26 +122,18 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  		}
  
 diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
-index d0f09da86ffce2..10d3e5d8d41eb1 100644
+index 2bdd6c80b2d66c..8f7b7bc9726d1f 100644
 --- a/src/cmd/compile/internal/ssa/stmtlines_test.go
 +++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
-@@ -113,7 +113,6 @@ func TestStmtLines(t *testing.T) {
- 		must(err)
- 
- 		var le dwarf.LineEntry
--
- 		for {
- 			err := lrdr.Next(&le)
- 			if err == io.EOF {
-@@ -139,7 +138,7 @@ func TestStmtLines(t *testing.T) {
- 
+@@ -140,7 +140,7 @@ func TestStmtLines(t *testing.T) {
  	var m float64
- 	if runtime.GOARCH == "amd64" {
--		m = 0.011 // > 98.9% obtained on amd64, no backsliding
+ 	switch runtime.GOARCH {
+ 	case "amd64":
+-		m = 0.0111 // > 98.89% obtained on amd64, no backsliding
 +		m = 0.012 // > 98.8% obtained on amd64, no backsliding
- 	} else if runtime.GOARCH == "riscv64" {
+ 	case "riscv64":
  		m = 0.03 // XXX temporary update threshold to 97% for regabi
- 	} else {
+ 	default:
 diff --git a/src/cmd/compile/script_test.go b/src/cmd/compile/script_test.go
 index 0e32e0769ee2e2..eda2d576acc6c6 100644
 --- a/src/cmd/compile/script_test.go
@@ -169,10 +161,10 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 2fcdb2d3915b9b..c04c50e69e4070 100644
+index 2b382a1c025649..25b555dace9a6f 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1387,6 +1387,80 @@ func toolenv() []string {
+@@ -1382,6 +1382,80 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
@@ -253,7 +245,7 @@ index 2fcdb2d3915b9b..c04c50e69e4070 100644
  	return env
  }
  
-@@ -1629,12 +1703,12 @@ func cmdbootstrap() {
+@@ -1624,12 +1698,12 @@ func cmdbootstrap() {
  		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
  	}
@@ -270,7 +262,7 @@ index 2fcdb2d3915b9b..c04c50e69e4070 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1e74438f48db39..c4b80436db2e85 100644
+index 9c9e1b85f0cd76..cbf0d77c4d19f0 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -372,8 +364,8 @@ index 1e74438f48db39..c4b80436db2e85 100644
  		// Only start multiple test dir shards on builders,
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
-@@ -1186,6 +1206,11 @@ func (t *tester) internalLink() bool {
- 	if goos == "windows" && goarch == "arm64" {
+@@ -1183,6 +1203,11 @@ func (t *tester) internalLink() bool {
+ 	if goos == "ios" {
  		return false
  	}
 +	if goos == "darwin" && t.cgoEnabled && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {

From e63e6734fc06a5b56748019001c79c0d10959d68 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 30 Oct 2025 13:13:20 +0000
Subject: [PATCH 540/887] Add darwin_amd64 and darwin_arm64 to README (#1931)

---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index 901a8d519db..9670bb2aa1c 100644
--- a/README.md
+++ b/README.md
@@ -70,6 +70,8 @@ cross-compilation may be necessary.
 * `linux_armv6l`
 * `linux_arm64`
 * `windows_amd64`
+* `darwin_amd64`
+* `darwin_arm64`
 
 Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we
 recommend migrating existing Go projects to use the Microsoft build of Go. This

From f159aa184c0d63f2aed02e7eaad90459eacd74ed Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 30 Oct 2025 13:28:00 +0000
Subject: [PATCH 541/887] docs: mention systemcrypto by default on macOS and
 also CGO-less (#1932)

* docs: mention systemcrypto by default on macOS and also CGO-less

* Update README to reflect macOS terminology
---
 eng/doc/MigrationGuide.md | 14 ++++++--------
 eng/doc/fips/README.md    |  5 +++--
 2 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 82c12487cd9..ca958edc500 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -17,8 +17,7 @@ To comply with Microsoft internal policy for the use of Go, most projects need t
 1. [Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**](#ci-and-build-environment-migration-steps)
     - See [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md) if it's not clear which distribution of Go you're currently using.
 1. If you use a version of Go prior to 1.25, [enable `systemcrypto`](#enable-systemcrypto).
-    - Starting with 1.25, `systemcrypto` is enabled by default, and no action is required.
-    - If your build targets a preview platform (such as macOS), [additional configuration](fips/README.md#configuration-overview) may be required to enable `systemcrypto`.
+    - Starting with 1.25 (Linux and Windows) and 1.26 (macOS), `systemcrypto` is enabled by default, and no action is required.
 1. [**Test** your program.](#testing)
     - It's important to test on all target platforms. The changes to runtime behavior are platform-specific.
 1. Consider **whether your project must be FIPS compliant** and if so, [**review your project**](#review-project-for-fips-compliance).
@@ -40,7 +39,7 @@ However, we recognize that pinning increases maintenance burden when there are n
 
 The Microsoft build of Go includes [patches](/patches/) that:
 
-- **Integrate `crypto` packages with system-provided cryptographic engines** on Linux and Windows. A macOS implementation is in preview.
+- **Integrate `crypto` packages with system-provided cryptographic engines** on Linux, Windows and macOS.
 - **Enable FIPS compliance** in a way compatible with Microsoft internal crypto policy: using system-provided engines.
 - **Enhance FIPS mode runtime behavior** for scenarios we have encountered in Microsoft's and others' Go applications.
 - **Add [toolset telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/)**, enabled by default.
@@ -117,7 +116,7 @@ That page provides links that redirect to the latest version and also immutable
 ## Enable `systemcrypto`
 
 These instructions are for projects using versions of Go prior to 1.25.
-Starting with 1.25, `systemcrypto` is enabled by default.
+Starting with 1.25 (Linux and Windows) and 1.26 (macOS), `systemcrypto` is enabled by default.
 
 To comply with Microsoft internal cryptography policy, enable the `systemcrypto` feature in your build environment before building your project.
 This is done by setting the `GOEXPERIMENT` environment variable to `systemcrypto`.
@@ -144,6 +143,9 @@ Using a crypto backend requires CGO_ENABLED=1.
 For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 ```
 
+> [!NOTE]
+> A workaround is available using our CGO-less backend which uses the `ms_nocgo_opensslcrypto` experiment, but this is not supported in production yet. This will also only be available in Go 1.26.
+
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
 Sometimes a project's build scripts might explicitly disable cgo.
@@ -155,10 +157,6 @@ You may also need to set the `CGO_ENABLED` environment variable to `1` or [other
 
 If this isn't feasible, see [disabling systemcrypto](#disabling-systemcrypto).
 
-> [!NOTE]
-> The macOS `systemcrytpo` implementation also requires cgo.
-> macOS support is in preview, and the dependency on cgo may be removed before we fully support this build configuration.
-
 #### Missing C toolchain and dependencies
 
 A C toolchain is required to build programs that use `systemcrypto` on Linux.
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 17385a0f1cf..dd676c5ef15 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -68,7 +68,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 > 1.24 introduces `GODEBUG=fips140=on` as the preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
 
 > [!NOTE]
-> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
+> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025). Since Go 1.26, `systemcrypto` is also enabled by default on macOS.
 
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
@@ -453,6 +453,7 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.26 (Feb 2026)
 
+- The `systemcrypto` goexperiment is now enabled by default on macOS.
 - `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
 
 ### Go 1.25.2 (Oct 2025)
@@ -533,4 +534,4 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
 [microsoft-go-download]: https://github.com/microsoft/go#binary-distribution
 [microsoft-go-images]: https://github.com/microsoft/go-images
 [OpenSSL features]: https://github.com/openssl/openssl/blob/4114964865435edc475c9ba49a7fa2b78956ab76/INSTALL.md#enable-and-disable-features
-[Azure Linux]: https://github.com/microsoft/azurelinux
\ No newline at end of file
+[Azure Linux]: https://github.com/microsoft/azurelinux

From 4afe797037dbbc79b3ab257822972607077f4032 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 30 Oct 2025 10:40:30 -0700
Subject: [PATCH 542/887] Suggestions re: 1.26 macOS (#1933)

---
 eng/doc/MigrationGuide.md | 5 +----
 eng/doc/fips/README.md    | 1 +
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index ca958edc500..cecf7fc68fe 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -115,7 +115,7 @@ That page provides links that redirect to the latest version and also immutable
 
 ## Enable `systemcrypto`
 
-These instructions are for projects using versions of Go prior to 1.25.
+These instructions are for projects using versions of Go that don't enable `systemcrypto` by default.
 Starting with 1.25 (Linux and Windows) and 1.26 (macOS), `systemcrypto` is enabled by default.
 
 To comply with Microsoft internal cryptography policy, enable the `systemcrypto` feature in your build environment before building your project.
@@ -143,9 +143,6 @@ Using a crypto backend requires CGO_ENABLED=1.
 For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
 ```
 
-> [!NOTE]
-> A workaround is available using our CGO-less backend which uses the `ms_nocgo_opensslcrypto` experiment, but this is not supported in production yet. This will also only be available in Go 1.26.
-
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
 Sometimes a project's build scripts might explicitly disable cgo.
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index dd676c5ef15..b1d83c69eaa 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -454,6 +454,7 @@ This list of major changes is intended for quick reference and for access to his
 ### Go 1.26 (Feb 2026)
 
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
+- The macOS backend is no longer "preview" and is now fully supported.
 - `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
 
 ### Go 1.25.2 (Oct 2025)

From 69554d8609a6cca9fb93002d353d72fc60813f27 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 31 Oct 2025 13:41:27 +0000
Subject: [PATCH 543/887] build(deps): bump github/codeql-action from 4.31.0 to
 4.31.2 (#1934)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.0 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/4e94bd11f71e507f7f87df81788dff88d1dacbfb...0499de31b99561a6d14a36a5f662c2a54f91beee)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 839f491acf1..0351512fb6b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
+        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
+        uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
+        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           category: /language:go

From 0da74a98e1a17f057fdc9b7cf4c059ba02ccf5b2 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 31 Oct 2025 16:02:45 +0000
Subject: [PATCH 544/887] Update submodule to latest master (99b724f4): cmd/go:
 document purego convention

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 041f564b3e6..99b724f4542 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 041f564b3e6fa3f4af13a01b94db14c1ee8a42e0
+Subproject commit 99b724f4542f4d9fb4a2ceacbbd2a6d9367dc0f6

From 022139a4df61bd0a877c483b0cf374b19791abf4 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 3 Nov 2025 16:07:51 +0000
Subject: [PATCH 545/887] Update submodule to latest master (00ee1860):
 crypto/internal/constanttime: expose intrinsics to the FIPS 140-3 packages

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 99b724f4542..00ee1860ce8 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 99b724f4542f4d9fb4a2ceacbbd2a6d9367dc0f6
+Subproject commit 00ee1860ce877ec9e2e323d7e48dee083e0902bd

From 96aa3bc27db95310c3b60bd07694c02085d6a874 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 4 Nov 2025 17:28:20 +0000
Subject: [PATCH 546/887] implement support for mlkem (#1937)

* implement support for mlkem

* fixup

* revert test change

* add dummy implementations

* update MLKEM status in CrossPlatformCrypto doc

* add OpenSSL sup and refactor
---
 eng/doc/CrossPlatformCryptography.md          |   46 +-
 .../0001-Vendor-external-dependencies.patch   | 3246 ++++++++++-------
 ...03-Implement-crypto-internal-backend.patch |  278 +-
 patches/0004-Use-crypto-backends.patch        |  317 +-
 4 files changed, 2494 insertions(+), 1393 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 1dcc8ada025..995e2a13c9d 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -90,19 +90,19 @@ This section includes the following packages:
 - [crypto/des](https://pkg.go.dev/crypto/des)
 - [crypto/rc4](https://pkg.go.dev/crypto/rc4)
 
-| Cipher + Mode | Windows | Linux          | macOS |
-| ------------- | ------- | -------------- | ----- |
-| AES-ECB       | ✔️      | ✔️             | ✔️    |
-| AES-CBC       | ✔️      | ✔️             | ✔️    |
-| AES-CTR       | ❌      | ✔️             | ❌    |
-| AES-CFB       | ❌      | ❌             | ❌    |
-| AES-OFB       | ❌      | ❌             | ❌    |
-| AES-GCM<sup>2</sup>       | ✔️      | ✔️             | ✔️    |
-| DES-CBC       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| DES-ECB       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| 3DES-ECB      | ✔️      | ✔️             | ✔️    |
-| 3DES-CBC      | ✔️      | ✔️             | ✔️    |
-| RC4           | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| Cipher + Mode       | Windows | Linux          | macOS |
+| ------------------- | ------- | -------------- | ----- |
+| AES-ECB             | ✔️      | ✔️             | ✔️    |
+| AES-CBC             | ✔️      | ✔️             | ✔️    |
+| AES-CTR             | ❌      | ✔️             | ❌    |
+| AES-CFB             | ❌      | ❌             | ❌    |
+| AES-OFB             | ❌      | ❌             | ❌    |
+| AES-GCM<sup>2</sup> | ✔️      | ✔️             | ✔️    |
+| DES-CBC             | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| DES-ECB             | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| 3DES-ECB            | ✔️      | ✔️             | ✔️    |
+| 3DES-CBC            | ✔️      | ✔️             | ✔️    |
+| RC4                 | ✔️      | ⚠️<sup>1</sup> | ✔️    |
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
@@ -152,9 +152,9 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 | OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>5</sup> |
 | OAEP (SHA-2)<sup>1</sup>               | ✔️             | ✔️             | ✔️<sup>5</sup> |
 | OAEP (SHA-3)                           | ❌             | ❌             | ❌             |
-| PSS (MD5)                              | ✔️<sup>3</sup>             | ✔️             | ❌             |
-| PSS (SHA-1)                            | ✔️<sup>3</sup>             | ✔️             | ✔️<sup>4</sup>             |
-| PSS (SHA-2)<sup>1</sup>                | ✔️<sup>3</sup>             | ✔️             | ✔️<sup>4</sup>             |
+| PSS (MD5)                              | ✔️<sup>3</sup> | ✔️             | ❌             |
+| PSS (SHA-1)                            | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
+| PSS (SHA-2)<sup>1</sup>                | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
 | PSS (SHA-3)                            | ❌             | ❌             | ❌             |
 | PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
 | PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>2</sup> | ❌             |
@@ -250,10 +250,16 @@ This section includes the following packages:
 
 - [crypto/mlkem](https://pkg.go.dev/crypto/mlkem)
 
-| Parameters | Windows | Linux | macOS |
-| ---------- | ------- | ----- | ----- |
-| 768        | ❌      | ❌    | ❌    |
-| 1024       | ❌      | ❌    | ❌    |
+ML-KEM is available starting from the Microsoft build of Go 1.26.
+
+| Parameters | Windows | Linux           | macOS           |
+| ---------- | ------- | --------------- | --------------- |
+| 768        | ❌      | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> |
+| 1024       | ❌      | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> |
+
+<sup>1</sup>Requires OpenSSL 3.5.0 or later.
+
+<sup>2</sup>Requires macOS 26 (Tahoe) or later.
 
 ## TLS
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 41808b0c153..240a4eb99bf 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -41,23 +41,23 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 +
- .../github.com/golang-fips/openssl/v2/aes.go  |  145 ++
+ .../github.com/golang-fips/openssl/v2/aes.go  |  145 +
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  652 +++++
- .../golang-fips/openssl/v2/const.go           |   92 +
+ .../golang-fips/openssl/v2/const.go           |   96 +
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |   66 +
  .../github.com/golang-fips/openssl/v2/ecdh.go |  305 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
  .../golang-fips/openssl/v2/ed25519.go         |  228 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  589 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  462 ++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  598 +++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  457 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  443 ++++
- .../github.com/golang-fips/openssl/v2/hmac.go |  282 +++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
  .../github.com/golang-fips/openssl/v2/init.go |  156 ++
  .../golang-fips/openssl/v2/init_cgo_unix.go   |   31 +
  .../golang-fips/openssl/v2/init_nocgo_unix.go |   32 +
@@ -91,26 +91,28 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
- .../openssl/v2/internal/ossl/errors_cgo.go    |  119 +
- .../openssl/v2/internal/ossl/errors_nocgo.go  |   70 +
+ .../openssl/v2/internal/ossl/errors.go        |   36 +
+ .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
+ .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
  .../openssl/v2/internal/ossl/ossl_cgo.go      |   39 +
  .../openssl/v2/internal/ossl/ossl_nocgo.go    |   34 +
- .../openssl/v2/internal/ossl/shims.h          |  400 +++
- .../openssl/v2/internal/ossl/syscall_nocgo.go |   68 +
+ .../openssl/v2/internal/ossl/shims.h          |  424 +++
+ .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
  .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 1931 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   57 +
- .../openssl/v2/internal/ossl/zossl.h          |  336 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1279 ++++++++++
- .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2250 +++++++++++++++++
- .../golang-fips/openssl/v2/openssl.go         |  363 +++
+ .../openssl/v2/internal/ossl/zossl.c          | 2015 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   62 +
+ .../openssl/v2/internal/ossl/zossl.h          |  351 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1334 ++++++++++
+ .../v2/internal/ossl/zossl_cgo_go124.go       |   39 +
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2345 +++++++++++++++++
+ .../golang-fips/openssl/v2/mlkem.go           |  371 +++
+ .../golang-fips/openssl/v2/openssl.go         |  355 +++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
  .../golang-fips/openssl/v2/params.go          |  184 ++
@@ -159,7 +161,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
  .../internal/security/zsecurity_nocgo.go      |  479 ++++
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 ++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
  .../microsoft/go-crypto-darwin/xcrypto/des.go |  111 +
@@ -180,7 +182,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  208 ++
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  427 ++++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  427 +++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
@@ -207,7 +209,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 199 files changed, 27075 insertions(+), 7 deletions(-)
+ 201 files changed, 27619 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -284,6 +286,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
@@ -303,6 +306,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
@@ -2057,7 +2061,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..4a3a7ab7c47ee7 100644
+index c5e901b9ef22e8..3f3be8e50aff40 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2066,17 +2070,17 @@ index c5e901b9ef22e8..4a3a7ab7c47ee7 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..fe928365ecc8af 100644
+index 4a52682161fc23..a19b1e85cd832a 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3 h1:A406U4ZlIBfkU7taBsFNxLEZHov9jn3O0GVuIfbTSBk=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3/go.mod h1:v3d8e4DPboAOvaae2pm/QTTRlcdJJYmMegkHB8hEvjU=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831 h1:JuZk8IXPBBvaq7JCk6c/ZmxLrJTbfxL2ymcccd7IxYY=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946 h1:lsW0BjPRXBduOU1SNpSy9OKReDEEXFnqkjmYZBIxRdg=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
@@ -2085,10 +2089,10 @@ index 4a52682161fc23..fe928365ecc8af 100644
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 853605f5c29df2..373efd8319c675 100644
+index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -528,6 +528,27 @@ var depsRules = `
+@@ -531,6 +531,27 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -2116,7 +2120,7 @@ index 853605f5c29df2..373efd8319c675 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -539,13 +560,12 @@ var depsRules = `
+@@ -542,13 +563,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2134,7 +2138,7 @@ index 853605f5c29df2..373efd8319c675 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -566,6 +586,10 @@ var depsRules = `
+@@ -569,6 +589,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2145,7 +2149,7 @@ index 853605f5c29df2..373efd8319c675 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -900,7 +924,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -903,7 +927,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2154,7 +2158,7 @@ index 853605f5c29df2..373efd8319c675 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -910,7 +934,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -913,7 +937,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -3171,10 +3175,10 @@ index 00000000000000..8d8f12fecda346
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..0bd0e69694b65c
+index 00000000000000..510e2ad1f5cd5d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,92 @@
+@@ -0,0 +1,96 @@
 +package openssl
 +
 +import "unsafe"
@@ -3216,9 +3220,11 @@ index 00000000000000..0bd0e69694b65c
 +	_PropFIPSNo  cString = "-fips\x00"
 +
 +	// Key types
-+	_KeyTypeRSA     cString = "RSA\x00"
-+	_KeyTypeEC      cString = "EC\x00"
-+	_KeyTypeED25519 cString = "ED25519\x00"
++	_KeyTypeRSA       cString = "RSA\x00"
++	_KeyTypeEC        cString = "EC\x00"
++	_KeyTypeED25519   cString = "ED25519\x00"
++	_KeyTypeMLKEM768  cString = "ML-KEM-768\x00"
++	_KeyTypeMLKEM1024 cString = "ML-KEM-1024\x00"
 +
 +	// Digest Names
 +	_DigestNameSHA2_256 cString = "SHA2-256\x00"
@@ -3245,24 +3251,26 @@ index 00000000000000..0bd0e69694b65c
 +	_OSSL_KDF_PARAM_DATA   cString = "data\x00"
 +
 +	// PKEY parameters
-+	_OSSL_PKEY_PARAM_PUB_KEY          cString = "pub\x00"
-+	_OSSL_PKEY_PARAM_PRIV_KEY         cString = "priv\x00"
-+	_OSSL_PKEY_PARAM_GROUP_NAME       cString = "group\x00"
-+	_OSSL_PKEY_PARAM_EC_PUB_X         cString = "qx\x00"
-+	_OSSL_PKEY_PARAM_EC_PUB_Y         cString = "qy\x00"
-+	_OSSL_PKEY_PARAM_FFC_PBITS        cString = "pbits\x00"
-+	_OSSL_PKEY_PARAM_FFC_QBITS        cString = "qbits\x00"
-+	_OSSL_PKEY_PARAM_RSA_N            cString = "n\x00"
-+	_OSSL_PKEY_PARAM_RSA_E            cString = "e\x00"
-+	_OSSL_PKEY_PARAM_RSA_D            cString = "d\x00"
-+	_OSSL_PKEY_PARAM_FFC_P            cString = "p\x00"
-+	_OSSL_PKEY_PARAM_FFC_Q            cString = "q\x00"
-+	_OSSL_PKEY_PARAM_FFC_G            cString = "g\x00"
-+	_OSSL_PKEY_PARAM_RSA_FACTOR1      cString = "rsa-factor1\x00"
-+	_OSSL_PKEY_PARAM_RSA_FACTOR2      cString = "rsa-factor2\x00"
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT1    cString = "rsa-exponent1\x00"
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT2    cString = "rsa-exponent2\x00"
-+	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1 cString = "rsa-coefficient1\x00"
++	_OSSL_PKEY_PARAM_PUB_KEY            cString = "pub\x00"
++	_OSSL_PKEY_PARAM_PRIV_KEY           cString = "priv\x00"
++	_OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY cString = "encoded-pub-key\x00"
++	_OSSL_PKEY_PARAM_GROUP_NAME         cString = "group\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_X           cString = "qx\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_Y           cString = "qy\x00"
++	_OSSL_PKEY_PARAM_FFC_PBITS          cString = "pbits\x00"
++	_OSSL_PKEY_PARAM_FFC_QBITS          cString = "qbits\x00"
++	_OSSL_PKEY_PARAM_RSA_N              cString = "n\x00"
++	_OSSL_PKEY_PARAM_RSA_E              cString = "e\x00"
++	_OSSL_PKEY_PARAM_RSA_D              cString = "d\x00"
++	_OSSL_PKEY_PARAM_FFC_P              cString = "p\x00"
++	_OSSL_PKEY_PARAM_FFC_Q              cString = "q\x00"
++	_OSSL_PKEY_PARAM_FFC_G              cString = "g\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR1        cString = "rsa-factor1\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR2        cString = "rsa-factor2\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT1      cString = "rsa-exponent1\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT2      cString = "rsa-exponent2\x00"
++	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1   cString = "rsa-coefficient1\x00"
++	_OSSL_PKEY_PARAM_ML_KEM_SEED        cString = "seed\x00"
 +
 +	// MAC parameters
 +	_OSSL_MAC_PARAM_DIGEST cString = "digest\x00"
@@ -4549,10 +4557,10 @@ index 00000000000000..d160bbe220c927
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..1465ae67339f8d
+index 00000000000000..45aa39d010d83f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,589 @@
+@@ -0,0 +1,598 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -4639,7 +4647,12 @@ index 00000000000000..1465ae67339f8d
 +}
 +
 +// loadHash converts a crypto.Hash to a EVP_MD.
-+func loadHash(ch crypto.Hash) *hashAlgorithm {
++func loadHash(ch crypto.Hash, must bool) (h *hashAlgorithm) {
++	defer func() {
++		if h == nil && must {
++			panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
++		}
++	}()
 +	if v, ok := cacheMD.Load(ch); ok {
 +		return v.(*hashAlgorithm)
 +	}
@@ -4794,6 +4807,10 @@ index 00000000000000..1465ae67339f8d
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_EC(nil, nil, _KeyTypeEC.ptr(), ossl.OBJ_nid2sn(curveNID(curve)))
 +		case ossl.EVP_PKEY_ED25519:
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_ED25519(nil, nil, _KeyTypeED25519.ptr())
++		case ossl.EVP_PKEY_MLKEM_768:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM768.ptr())
++		case ossl.EVP_PKEY_MLKEM_1024:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM1024.ptr())
 +		default:
 +			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
 +		}
@@ -4887,7 +4904,7 @@ index 00000000000000..1465ae67339f8d
 +			}
 +		}
 +	case ossl.RSA_PKCS1_PSS_PADDING:
-+		alg := loadHash(ch)
++		alg := loadHash(ch, false)
 +		if alg == nil {
 +			return nil, errors.New("crypto/rsa: unsupported hash function")
 +		}
@@ -4907,7 +4924,7 @@ index 00000000000000..1465ae67339f8d
 +	case ossl.RSA_PKCS1_PADDING:
 +		if ch != 0 {
 +			// We support unhashed messages.
-+			alg := loadHash(ch)
++			alg := loadHash(ch, false)
 +			if alg == nil {
 +				return nil, errors.New("crypto/rsa: unsupported hash function")
 +			}
@@ -5016,7 +5033,7 @@ index 00000000000000..1465ae67339f8d
 +}
 +
 +func evpHashSign(withKey withKeyFunc, h crypto.Hash, msg []byte) ([]byte, error) {
-+	alg := loadHash(h)
++	alg := loadHash(h, false)
 +	if alg == nil {
 +		return nil, errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
@@ -5034,7 +5051,7 @@ index 00000000000000..1465ae67339f8d
 +		return nil, err
 +	}
 +	if len(msg) > 0 {
-+		if _, err := ossl.EVP_DigestUpdate(ctx, pbase(msg), len(msg)); err != nil {
++		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
 +			return nil, err
 +		}
 +	}
@@ -5051,7 +5068,7 @@ index 00000000000000..1465ae67339f8d
 +}
 +
 +func evpHashVerify(withKey withKeyFunc, h crypto.Hash, msg, sig []byte) error {
-+	alg := loadHash(h)
++	alg := loadHash(h, false)
 +	if alg == nil {
 +		return errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
 +	}
@@ -5067,7 +5084,7 @@ index 00000000000000..1465ae67339f8d
 +		return err
 +	}
 +	if len(msg) > 0 {
-+		if _, err := ossl.EVP_DigestUpdate(ctx, pbase(msg), len(msg)); err != nil {
++		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
 +			return err
 +		}
 +	}
@@ -5144,10 +5161,10 @@ index 00000000000000..1465ae67339f8d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..9c6b9fcd4fe922
+index 00000000000000..b5fb1bc7db6369
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,462 @@
+@@ -0,0 +1,457 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -5184,7 +5201,7 @@ index 00000000000000..9c6b9fcd4fe922
 +const maxHashSize = 64
 +
 +func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
-+	_, err := ossl.EVP_Digest(pbaseNeverEmpty(p), len(p), base(sum), nil, loadHash(ch).md, nil)
++	_, err := ossl.EVP_Digest(p, base(sum), nil, loadHash(ch, true).md, nil)
 +	return err == nil
 +}
 +
@@ -5259,7 +5276,7 @@ index 00000000000000..9c6b9fcd4fe922
 +	if v, ok := cacheHashSupported.Load(h); ok {
 +		return v.(bool)
 +	}
-+	alg := loadHash(h)
++	alg := loadHash(h, false)
 +	if alg == nil {
 +		cacheHashSupported.Store(h, false)
 +		return false
@@ -5387,17 +5404,12 @@ index 00000000000000..9c6b9fcd4fe922
 +}
 +
 +func newEvpHash(ch crypto.Hash) *evpHash {
-+	alg := loadHash(ch)
-+	if alg == nil {
-+		panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
-+	}
-+	h := &evpHash{alg: alg}
 +	// Don't call init() yet, it would be wasteful
 +	// if the caller only wants to know the hash type. This
 +	// is a common pattern in this package, as some functions
 +	// accept a `func() hash.Hash` parameter and call it just
 +	// to know the hash type.
-+	return h
++	return &evpHash{alg: loadHash(ch, true)}
 +}
 +
 +func (h *evpHash) finalize() {
@@ -5448,7 +5460,7 @@ index 00000000000000..9c6b9fcd4fe922
 +		return 0, nil
 +	}
 +	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, pbase(p), len(p)); err != nil {
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, p); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
@@ -5460,7 +5472,7 @@ index 00000000000000..9c6b9fcd4fe922
 +		return 0, nil
 +	}
 +	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Pointer(unsafe.StringData(s)), len(s)); err != nil {
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Slice(unsafe.StringData(s), len(s))); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
@@ -5469,7 +5481,7 @@ index 00000000000000..9c6b9fcd4fe922
 +
 +func (h *evpHash) WriteByte(c byte) error {
 +	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Pointer(&c), 1); err != nil {
++	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Slice(&c, 1)); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
@@ -5532,7 +5544,7 @@ index 00000000000000..9c6b9fcd4fe922
 +}
 +
 +func (d *evpHash) MarshalBinary() ([]byte, error) {
-+	if !d.alg.marshallable {
++	if d.alg == nil || !d.alg.marshallable {
 +		return nil, errMarshallUnsupported{}
 +	}
 +	buf := make([]byte, 0, d.alg.marshalledSize)
@@ -5541,7 +5553,7 @@ index 00000000000000..9c6b9fcd4fe922
 +
 +func (d *evpHash) AppendBinary(buf []byte) ([]byte, error) {
 +	defer runtime.KeepAlive(d)
-+	if !d.alg.marshallable {
++	if d.alg == nil || !d.alg.marshallable {
 +		return nil, errMarshallUnsupported{}
 +	}
 +	d.init()
@@ -5558,7 +5570,7 @@ index 00000000000000..9c6b9fcd4fe922
 +func (d *evpHash) UnmarshalBinary(b []byte) error {
 +	defer runtime.KeepAlive(d)
 +	d.init()
-+	if !d.alg.marshallable {
++	if d.alg == nil || !d.alg.marshallable {
 +		return errMarshallUnsupported{}
 +	}
 +	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != d.alg.magic {
@@ -8820,206 +8832,89 @@ index 00000000000000..e94cca9e27e30a
 +char *dlerror(void);
 +
 +#endif // _GO_DL_SHIMS_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
 new file mode 100644
-index 00000000000000..af5d8e618e8095
+index 00000000000000..faefd9c97109ff
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
-@@ -0,0 +1,119 @@
-+package ossl
-+
-+/*
-+#include <stdlib.h> // for calloc and free
-+#include <string.h> // for strdup
-+#include "zossl.h"
-+
-+// OpenSSL only allows a maximum of 16 errors to be stored in the error queue.
-+#define ERR_NUM_MAX  16
-+
-+// ossl_err_state is a custom structure to hold the error state
-+// of OpenSSL.
-+typedef struct ossl_err_state_st {
-+	unsigned long code[ERR_NUM_MAX];
-+	int line[ERR_NUM_MAX];
-+	char *file[ERR_NUM_MAX];
-+} ossl_err_state;
-+
-+// mkcgo_err_retrieve retrieves the error state from OpenSSL.
-+// It returns a pointer to a mkcgo_err_state structure
-+// that contains the error codes, lines, and file names.
-+// The caller is responsible for freeing the memory
-+// by calling mkcgo_err_free.
-+mkcgo_err_state mkcgo_err_retrieve() {
-+	ossl_err_state *errs = (ossl_err_state *)calloc(1, sizeof(ossl_err_state));
-+	if (errs == NULL) return NULL;
-+
-+	// Retrieve the errors from OpenSSL.
-+	for (int i = 0; i < ERR_NUM_MAX; i++) {
-+		const char *file;
-+		if (_mkcgo_available_OPENSSL_version_major() == 1) { // Only available in OpenSSL 3.
-+			// OpenSSL 3 error handling
-+			errs->code[i] = _mkcgo_ERR_get_error_all(&file, &errs->line[i], NULL, NULL, NULL);
-+		} else {
-+			// OpenSSL 1 error handling
-+			errs->code[i] = _mkcgo_ERR_get_error_line(&file, &errs->line[i]);
-+		}
-+		if (errs->code[i] == 0) {
-+			break;
-+		}
-+		if (file != NULL) {
-+			// Copy the file name as the pointer we just retrieved will be freed by OpenSSL
-+			// when the error queue is cleared.
-+			errs->file[i] = strdup(file);
-+		}
-+	}
-+	return errs;
-+}
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
+@@ -0,0 +1,36 @@
++//go:build cgo || goexperiment.ms_nocgo_opensslcrypto
 +
-+// mkcgo_err_free frees the memory allocated for the mkcgo_err_state structure.
-+void mkcgo_err_free(mkcgo_err_state errs) {
-+	if (errs == NULL) return;
++package ossl
 +
-+	ossl_err_state *oerrs = (ossl_err_state *)errs;
-+	for (int i = 0; i < ERR_NUM_MAX; i++) {
-+		if (oerrs->file[i] != NULL) {
-+			free((void *)oerrs->file[i]);
-+		}
-+	}
-+	free(errs);
-+}
-+*/
-+import "C"
 +import (
-+	"bytes"
 +	"errors"
-+	"strconv"
-+	"strings"
 +	"unsafe"
 +)
 +
-+// newMkcgoErr creates a new error from the given mkcgo_err_state
-+// and frees the state. If errst is nil, it returns nil.
-+func newMkcgoErr(msg string, errst C.mkcgo_err_state) error {
-+	if errst == nil {
++// newMkcgoErr constructs an error from the given message and OpenSSL error state.
++func newMkcgoErr(msg string, state uintptr) error {
++	if state == 0 {
++		// No error
 +		return nil
 +	}
-+	defer C.mkcgo_err_free(errst)
-+	oerrst := (*C.ossl_err_state)(unsafe.Pointer(errst))
-+	var b strings.Builder
-+	b.WriteString(msg)
-+	b.WriteString("\nopenssl error(s):")
-+	for i := range C.ERR_NUM_MAX {
-+		e := uint64(oerrst.code[i])
-+		if e == 0 {
-+			break
-+		}
-+		b.WriteByte('\n')
-+		var buf [256]byte
-+		ERR_error_string_n(e, unsafe.SliceData(buf[:]), len(buf))
-+		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
-+			b.Write(buf[:termIdx])
-+		} else {
-+			b.Write(buf[:])
-+		}
-+		if oerrst.file[i] == nil {
-+			// info not available
-+			continue
-+		}
-+		b.WriteString("\n\t")
-+		b.Write(cstrBytes(oerrst.file[i]))
-+		b.WriteByte(':')
-+		b.WriteString(strconv.Itoa(int(oerrst.line[i])))
++	bio := BIO_PTR(state)
++	defer BIO_free(bio)
++	// Retrieve pointer to data, which is owned by bio.
++	var data *byte
++	n := BIO_ctrl(bio, BIO_CTRL_INFO, 0, unsafe.Pointer(&data))
++	if n == 0 {
++		// If no errors in queue, return simple message
++		return errors.New(msg + " failed")
 +	}
-+	return errors.New(b.String())
++	const extra = "\nopenssl error(s):\n"
++	buf := make([]byte, len(msg)+len(extra)+int(n))
++	copy(buf, msg)
++	copy(buf[len(msg):], extra)
++	copy(buf[len(msg)+len(extra):], unsafe.Slice(data, n))
++	// Remove trailing line jump if present.
++	if buf[len(buf)-1] == '\n' {
++		buf = buf[:len(buf)-1]
++	}
++	// Avoid an allocation by constructing the string directly from the byte slice.
++	return errors.New(unsafe.String(unsafe.SliceData(buf), len(buf)))
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+new file mode 100644
+index 00000000000000..ef1d99652e3bae
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
+@@ -0,0 +1,14 @@
++package ossl
 +
-+// cstrBytes returns a byte slice containing the contents of the C string
-+// pointed to by p. The slice does not include the terminating null byte.
-+func cstrBytes(p *C.char) []byte {
-+	if p == nil {
-+		return nil
-+	}
-+	end := unsafe.Pointer(p)
-+	for *(*byte)(end) != 0 {
-+		end = unsafe.Add(end, 1)
-+	}
-+	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
++/*
++#include "zossl.h"
++
++// mkcgo_err_retrieve retrieves the error state from OpenSSL.
++uintptr_t mkcgo_err_retrieve() {
++	// BIO operations using BIO_s_mem should not fail.
++	_BIO_PTR bio = _mkcgo_BIO_new(_mkcgo_BIO_s_mem(), NULL);
++	_mkcgo_ERR_print_errors(bio);
++	return (uintptr_t)bio;
 +}
++*/
++import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
 new file mode 100644
-index 00000000000000..a80ffac40d1697
+index 00000000000000..04178991217173
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
-@@ -0,0 +1,70 @@
+@@ -0,0 +1,16 @@
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
 +package ossl
 +
-+import (
-+	"bytes"
-+	"errors"
-+	"strings"
-+	"unsafe"
-+)
-+
-+const ERR_NUM_MAX = 16
-+
-+// errState represents the OpenSSL error state for nocgo version
-+type errState struct {
-+	hasError bool
-+	codes    [ERR_NUM_MAX]uint64
-+}
-+
 +// retrieveErrorState retrieves errors from the OpenSSL error queue.
 +// It might run on the system stack, so it can't allocate Go memory
 +// nor grow the stack over the nosplit limit.
 +//
 +//go:nosplit
-+func retrieveErrorState(state *errState) {
-+	state.hasError = true
-+	libcArgs := libcCallInfo{
-+		fn: _mkcgo_ERR_get_error,
-+	}
-+	for i := range ERR_NUM_MAX {
-+		syscallNAsm(&libcArgs)
-+		if libcArgs.r1 == 0 {
-+			break
-+		}
-+		state.codes[i] = uint64(libcArgs.r1)
-+	}
-+}
-+
-+// newMkcgoErr creates a new error from the OpenSSL error queue for the nocgo version.
-+// The errst parameter is present for API compatibility with the CGO implementation,
-+// but is intentionally ignored in nocgo mode; errors are always retrieved directly from OpenSSL.
-+func newMkcgoErr(msg string, state *errState) error {
-+	if !state.hasError {
-+		return nil
-+	}
-+	if state.codes[0] == 0 {
-+		// If no errors in queue, return simple message
-+		return errors.New(msg + " failed")
-+	}
-+
-+	var b strings.Builder
-+	b.WriteString(msg)
-+	b.WriteString("\nopenssl error(s):")
-+
-+	for _, code := range state.codes {
-+		if code == 0 {
-+			break
-+		}
-+		b.WriteByte('\n')
-+		var buf [256]byte
-+		ERR_error_string_n(code, unsafe.SliceData(buf[:]), len(buf))
-+		if termIdx := bytes.IndexByte(buf[:], 0); termIdx != -1 {
-+			b.Write(buf[:termIdx])
-+		} else {
-+			b.Write(buf[:])
-+		}
-+	}
-+
-+	return errors.New(b.String())
++func retrieveErrorState() uintptr {
++	// BIO operations using BIO_s_mem should not fail.
++	smem := syscallNRaw(_mkcgo_BIO_s_mem)
++	bio := syscallNRaw(_mkcgo_BIO_new, smem)
++	syscallNRaw(_mkcgo_ERR_print_errors, bio)
++	return bio
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
 new file mode 100644
@@ -9088,7 +8983,7 @@ index 00000000000000..bb8ea6fafdc4d9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
 new file mode 100644
-index 00000000000000..5fb8d79a809845
+index 00000000000000..2152320d0053b3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
 @@ -0,0 +1,39 @@
@@ -9103,7 +8998,7 @@ index 00000000000000..5fb8d79a809845
 +// It is written in C because Sum() tend to be in the hot path,
 +// and doing one cgo call instead of two is a significant performance win.
 +static inline int
-+go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, mkcgo_err_state *_err_state)
++go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, uintptr_t *_err_state)
 +{
 +	if (_mkcgo_EVP_MD_CTX_copy(ctx2, ctx, _err_state) != 1)
 +		return -1;
@@ -9118,7 +9013,7 @@ index 00000000000000..5fb8d79a809845
 +)
 +
 +func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
-+	var errst C.mkcgo_err_state
++	var errst C.uintptr_t
 +	if code := C.go_hash_sum(ctx1, ctx2, (*C.uchar)(unsafe.SliceData(out)), mkcgoNoEscape(&errst)); code != 1 {
 +		msg := "go_hash_sum"
 +		switch code {
@@ -9127,13 +9022,13 @@ index 00000000000000..5fb8d79a809845
 +		case -2:
 +			msg = "EVP_DigestFinal_ex"
 +		}
-+		return newMkcgoErr(msg, errst)
++		return newMkcgoErr(msg, uintptr(errst))
 +	}
 +	return nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
 new file mode 100644
-index 00000000000000..463a873dfa8595
+index 00000000000000..8bfb94b945afb6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
 @@ -0,0 +1,34 @@
@@ -9153,10 +9048,10 @@ index 00000000000000..463a873dfa8595
 +	if err != nil {
 +		return err
 +	}
-+	var errState errState
++	var errState uintptr
 +	if code != 1 {
-+		retrieveErrorState(&errState)
-+		return newMkcgoErr("EVP_MD_CTX_copy_ex", &errState)
++		errState = retrieveErrorState()
++		return newMkcgoErr("EVP_MD_CTX_copy_ex", errState)
 +	}
 +
 +	// Finalize the hash using ctx2
@@ -9165,18 +9060,18 @@ index 00000000000000..463a873dfa8595
 +		return err
 +	}
 +	if code <= 0 {
-+		retrieveErrorState(&errState)
-+		return newMkcgoErr("EVP_DigestFinal_ex", &errState)
++		errState = retrieveErrorState()
++		return newMkcgoErr("EVP_DigestFinal_ex", errState)
 +	}
 +
 +	return nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..b516221e50e834
+index 00000000000000..a79c56b9b101c3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,400 @@
+@@ -0,0 +1,424 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -9188,6 +9083,7 @@ index 00000000000000..b516221e50e834
 +#include <stdint.h> // uint64_t
 +
 +// The following includes are used by the checkheader tool.
++// #include <openssl/bio.h>
 +// #include <openssl/crypto.h>
 +// #include <openssl/evp.h>
 +// #include <openssl/ec.h>
@@ -9225,6 +9121,8 @@ index 00000000000000..b516221e50e834
 +	_EVP_PKEY_HKDF        = 1036,
 +	_EVP_PKEY_ED25519     = 1087,
 +	_EVP_PKEY_DSA         = 116,
++    _EVP_PKEY_MLKEM_768  = 1455,
++    _EVP_PKEY_MLKEM_1024 = 1456,
 +	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
 +	_EVP_MAX_MD_SIZE    = 64,
 +
@@ -9250,6 +9148,9 @@ index 00000000000000..b516221e50e834
 +	_NID_secp384r1        = 715,
 +	_NID_secp521r1        = 716,
 +
++	_NID_ML_KEM_768 = 1455,
++	_NID_ML_KEM_1024 = 1456,
++
 +	_RSA_PKCS1_PADDING                 = 1,
 +	_RSA_NO_PADDING                    = 3,
 +	_RSA_PKCS1_OAEP_PADDING            = 4,
@@ -9269,6 +9170,8 @@ index 00000000000000..b516221e50e834
 +
 +	_OSSL_PARAM_INTEGER = 1,
 +	_OSSL_PARAM_OCTET_STRING = 5,
++
++	BIO_CTRL_INFO = 3,
 +};
 +
 +typedef void* _OPENSSL_INIT_SETTINGS_PTR;
@@ -9293,9 +9196,12 @@ index 00000000000000..b516221e50e834
 +typedef void* _OSSL_PARAM_BLD_PTR;
 +typedef void* _OSSL_PARAM_PTR;
 +typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _EVP_KEYMGMT_PTR;
 +typedef void* _DSA_PTR;
 +typedef void* _EVP_KDF_PTR;
 +typedef void* _EVP_KDF_CTX_PTR;
++typedef void* _BIO_METHOD_PTR;
++typedef void* _BIO_PTR;
 +typedef int point_conversion_form_t;
 +
 +// Tags used by mkcgo to determine which OpenSSL version each function is available in:
@@ -9309,12 +9215,15 @@ index 00000000000000..b516221e50e834
 +// directives, not every function that is merely expected to meet
 +// the noescape/nocallback criteria.
 +
++// BIO API
++const _BIO_METHOD_PTR BIO_s_mem(void) __attribute__((tag(""),tag("init_3"),noerror));
++_BIO_PTR BIO_new(const _BIO_METHOD_PTR type) __attribute__((tag(""),tag("init_3")));
++int BIO_free(_BIO_PTR a) __attribute__((tag(""),tag("init_3"),noerror));
++long BIO_ctrl(_BIO_PTR bp, int cmd, long larg, void *parg) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
++
 +// ERR API
-+unsigned long ERR_get_error(void) __attribute__((noerror));
-+void ERR_error_string_n(unsigned long e, char *buf, size_t len);
-+void ERR_clear_error(void) __attribute__((tag(""),tag("init_3")));
-+unsigned long ERR_get_error_line(const char **file, int *line) __attribute__((tag("legacy_1"),noerror));
-+unsigned long ERR_get_error_all(const char **file, int *line, const char **func, const char **data, int *flags) __attribute__((tag("3"),noerror));
++unsigned long ERR_peek_error(void) __attribute__((noerror));
++void ERR_print_errors(_BIO_PTR bp) __attribute__((tag(""),tag("init_3")));
 +
 +// OPENSSL API
 +const char *OpenSSL_version(int type) __attribute__((noerror));
@@ -9377,10 +9286,10 @@ index 00000000000000..b516221e50e834
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,nocheckptr("data")));
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
-+int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,nocheckptr("d")));
++int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
 +int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback));
 +int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
@@ -9448,6 +9357,7 @@ index 00000000000000..b516221e50e834
 +int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3")));
 +size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
 +int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
++int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3")));
 +int EVP_PKEY_up_ref(_EVP_PKEY_PTR key) __attribute__((tag("3")));
 +int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
 +int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
@@ -9476,6 +9386,7 @@ index 00000000000000..b516221e50e834
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
@@ -9576,13 +9487,21 @@ index 00000000000000..b516221e50e834
 +// OBJ API
 +const char *OBJ_nid2sn(int n) __attribute__((noerror));
 +
++// EVP KEM API for ML-KEM (OpenSSL 3.x)
++_EVP_KEYMGMT_PTR EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR keymgmt) __attribute__((tag("3")));
++int EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *wrappedkey, size_t *wrappedkeylen, unsigned char *genkey, size_t *genkeylen) __attribute__((tag("3")));
++int EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *genkey, size_t *genkeylen, const unsigned char *wrappedkey, size_t wrappedkeylen) __attribute__((tag("3")));
++
 +#endif // _GO_OSSL_SHIMS_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..a95e2cec86e552
+index 00000000000000..2fa7bd4c66b3fb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,84 @@
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
 +
 +package ossl
@@ -9651,6 +9570,22 @@ index 00000000000000..a95e2cec86e552
 +	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
 +	return libcArgs.r1, libcArgs.r2
 +}
++
++// syscallNRaw performs a syscall with the given function and arguments,
++// without any error checking nor switching to the system stack.
++//
++//go:nosplit
++func syscallNRaw(fn uintptr, args ...uintptr) uintptr {
++	libcArgs := libcCallInfo{
++		fn: fn,
++		n:  uintptr(len(args)),
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	syscallNAsm(&libcArgs)
++	return libcArgs.r1
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 new file mode 100644
 index 00000000000000..dffedf87367375
@@ -9837,10 +9772,10 @@ index 00000000000000..fb345aac77ea48
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..9cf871d0fd1b61
+index 00000000000000..4766a325a5883b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,1931 @@
+@@ -0,0 +1,2015 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -9856,6 +9791,10 @@ index 00000000000000..9cf871d0fd1b61
 +#include <dlfcn.h>
 +#endif
 +
++long (*_g_BIO_ctrl)(_BIO_PTR, int, long, void*);
++int (*_g_BIO_free)(_BIO_PTR);
++_BIO_PTR (*_g_BIO_new)(const _BIO_METHOD_PTR);
++const _BIO_METHOD_PTR (*_g_BIO_s_mem)(void);
 +_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
 +int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
 +int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
@@ -9892,11 +9831,8 @@ index 00000000000000..9cf871d0fd1b61
 +int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
 +size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
 +int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
-+void (*_g_ERR_clear_error)(void);
-+void (*_g_ERR_error_string_n)(unsigned long, char*, size_t);
-+unsigned long (*_g_ERR_get_error)(void);
-+unsigned long (*_g_ERR_get_error_all)(const char**, int*, const char**, const char**, int*);
-+unsigned long (*_g_ERR_get_error_line)(const char**, int*);
++unsigned long (*_g_ERR_peek_error)(void);
++void (*_g_ERR_print_errors)(_BIO_PTR);
 +int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
 +void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
 +_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
@@ -9910,14 +9846,14 @@ index 00000000000000..9cf871d0fd1b61
 +int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
 +int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
 +int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+int (*_g_EVP_Digest)(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_Digest)(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
 +int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
 +int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
 +int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
 +int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
 +int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
 +int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const void*, size_t);
++int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
 +int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
 +int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
 +int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
@@ -9931,6 +9867,8 @@ index 00000000000000..9cf871d0fd1b61
 +int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
 +_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
 +void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
++_EVP_KEYMGMT_PTR (*_g_EVP_KEYMGMT_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_KEYMGMT_free)(_EVP_KEYMGMT_PTR);
 +_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
 +void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
 +_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
@@ -9967,11 +9905,15 @@ index 00000000000000..9cf871d0fd1b61
 +int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
 +_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
 +int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
++int (*_g_EVP_PKEY_decapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_decapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
 +int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
 +int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
 +int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
 +int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
 +int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_encapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_encapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
 +int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
 +int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
 +void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
@@ -9983,6 +9925,7 @@ index 00000000000000..9cf871d0fd1b61
 +size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
 +int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
 +int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
++int (*_g_EVP_PKEY_get_octet_string_param)(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*);
 +int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
 +int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
 +int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
@@ -10089,6 +10032,10 @@ index 00000000000000..9cf871d0fd1b61
 +	}
 +
 +void __mkcgo_load_(void* handle) {
++	__mkcgo__dlsym(BIO_ctrl)
++	__mkcgo__dlsym(BIO_free)
++	__mkcgo__dlsym(BIO_new)
++	__mkcgo__dlsym(BIO_s_mem)
 +	__mkcgo__dlsym(BN_bin2bn)
 +	__mkcgo__dlsym(BN_bn2binpad)
 +	__mkcgo__dlsym(BN_bn2lebinpad)
@@ -10107,9 +10054,8 @@ index 00000000000000..9cf871d0fd1b61
 +	__mkcgo__dlsym(EC_POINT_new)
 +	__mkcgo__dlsym(EC_POINT_oct2point)
 +	__mkcgo__dlsym(EC_POINT_point2oct)
-+	__mkcgo__dlsym(ERR_clear_error)
-+	__mkcgo__dlsym(ERR_error_string_n)
-+	__mkcgo__dlsym(ERR_get_error)
++	__mkcgo__dlsym(ERR_peek_error)
++	__mkcgo__dlsym(ERR_print_errors)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
 +	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
@@ -10192,6 +10138,10 @@ index 00000000000000..9cf871d0fd1b61
 +}
 +
 +void __mkcgo_unload_() {
++	_g_BIO_ctrl = NULL;
++	_g_BIO_free = NULL;
++	_g_BIO_new = NULL;
++	_g_BIO_s_mem = NULL;
 +	_g_BN_bin2bn = NULL;
 +	_g_BN_bn2binpad = NULL;
 +	_g_BN_bn2lebinpad = NULL;
@@ -10210,9 +10160,8 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EC_POINT_new = NULL;
 +	_g_EC_POINT_oct2point = NULL;
 +	_g_EC_POINT_point2oct = NULL;
-+	_g_ERR_clear_error = NULL;
-+	_g_ERR_error_string_n = NULL;
-+	_g_ERR_get_error = NULL;
++	_g_ERR_peek_error = NULL;
++	_g_ERR_print_errors = NULL;
 +	_g_EVP_CIPHER_CTX_ctrl = NULL;
 +	_g_EVP_CIPHER_CTX_free = NULL;
 +	_g_EVP_CIPHER_CTX_new = NULL;
@@ -10326,7 +10275,6 @@ index 00000000000000..9cf871d0fd1b61
 +
 +void __mkcgo_load_3(void* handle) {
 +	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
-+	__mkcgo__dlsym(ERR_get_error_all)
 +	__mkcgo__dlsym(EVP_CIPHER_fetch)
 +	__mkcgo__dlsym(EVP_CIPHER_get0_name)
 +	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
@@ -10337,6 +10285,8 @@ index 00000000000000..9cf871d0fd1b61
 +	__mkcgo__dlsym(EVP_KDF_derive)
 +	__mkcgo__dlsym(EVP_KDF_fetch)
 +	__mkcgo__dlsym(EVP_KDF_free)
++	__mkcgo__dlsym(EVP_KEYMGMT_fetch)
++	__mkcgo__dlsym(EVP_KEYMGMT_free)
 +	__mkcgo__dlsym(EVP_MAC_CTX_dup)
 +	__mkcgo__dlsym(EVP_MAC_CTX_free)
 +	__mkcgo__dlsym(EVP_MAC_CTX_new)
@@ -10364,11 +10314,16 @@ index 00000000000000..9cf871d0fd1b61
 +	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
 +	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
 +	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
++	__mkcgo__dlsym(EVP_PKEY_decapsulate)
++	__mkcgo__dlsym(EVP_PKEY_decapsulate_init)
++	__mkcgo__dlsym(EVP_PKEY_encapsulate)
++	__mkcgo__dlsym(EVP_PKEY_encapsulate_init)
 +	__mkcgo__dlsym(EVP_PKEY_fromdata)
 +	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
 +	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
 +	__mkcgo__dlsym(EVP_PKEY_get_bits)
 +	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
++	__mkcgo__dlsym(EVP_PKEY_get_octet_string_param)
 +	__mkcgo__dlsym(EVP_PKEY_get_size)
 +	__mkcgo__dlsym(EVP_PKEY_private_check)
 +	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
@@ -10394,7 +10349,6 @@ index 00000000000000..9cf871d0fd1b61
 +
 +void __mkcgo_unload_3() {
 +	_g_EC_POINT_set_affine_coordinates = NULL;
-+	_g_ERR_get_error_all = NULL;
 +	_g_EVP_CIPHER_fetch = NULL;
 +	_g_EVP_CIPHER_get0_name = NULL;
 +	_g_EVP_CIPHER_get_block_size = NULL;
@@ -10405,6 +10359,8 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_KDF_derive = NULL;
 +	_g_EVP_KDF_fetch = NULL;
 +	_g_EVP_KDF_free = NULL;
++	_g_EVP_KEYMGMT_fetch = NULL;
++	_g_EVP_KEYMGMT_free = NULL;
 +	_g_EVP_MAC_CTX_dup = NULL;
 +	_g_EVP_MAC_CTX_free = NULL;
 +	_g_EVP_MAC_CTX_new = NULL;
@@ -10432,11 +10388,16 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
 +	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
 +	_g_EVP_PKEY_Q_keygen = NULL;
++	_g_EVP_PKEY_decapsulate = NULL;
++	_g_EVP_PKEY_decapsulate_init = NULL;
++	_g_EVP_PKEY_encapsulate = NULL;
++	_g_EVP_PKEY_encapsulate_init = NULL;
 +	_g_EVP_PKEY_fromdata = NULL;
 +	_g_EVP_PKEY_fromdata_init = NULL;
 +	_g_EVP_PKEY_get1_encoded_public_key = NULL;
 +	_g_EVP_PKEY_get_bits = NULL;
 +	_g_EVP_PKEY_get_bn_param = NULL;
++	_g_EVP_PKEY_get_octet_string_param = NULL;
 +	_g_EVP_PKEY_get_size = NULL;
 +	_g_EVP_PKEY_private_check = NULL;
 +	_g_EVP_PKEY_public_check_quick = NULL;
@@ -10471,7 +10432,11 @@ index 00000000000000..9cf871d0fd1b61
 +}
 +
 +void __mkcgo_load_init_3(void* handle) {
-+	__mkcgo__dlsym(ERR_clear_error)
++	__mkcgo__dlsym(BIO_ctrl)
++	__mkcgo__dlsym(BIO_free)
++	__mkcgo__dlsym(BIO_new)
++	__mkcgo__dlsym(BIO_s_mem)
++	__mkcgo__dlsym(ERR_print_errors)
 +	__mkcgo__dlsym(EVP_MD_fetch)
 +	__mkcgo__dlsym(EVP_MD_free)
 +	__mkcgo__dlsym(EVP_MD_get0_provider)
@@ -10479,7 +10444,11 @@ index 00000000000000..9cf871d0fd1b61
 +}
 +
 +void __mkcgo_unload_init_3() {
-+	_g_ERR_clear_error = NULL;
++	_g_BIO_ctrl = NULL;
++	_g_BIO_free = NULL;
++	_g_BIO_new = NULL;
++	_g_BIO_s_mem = NULL;
++	_g_ERR_print_errors = NULL;
 +	_g_EVP_MD_fetch = NULL;
 +	_g_EVP_MD_free = NULL;
 +	_g_EVP_MD_get0_provider = NULL;
@@ -10504,7 +10473,6 @@ index 00000000000000..9cf871d0fd1b61
 +	__mkcgo__dlsym(EC_KEY_set_public_key)
 +	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
 +	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
-+	__mkcgo__dlsym(ERR_get_error_line)
 +	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
 +	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
 +	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
@@ -10551,7 +10519,6 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EC_KEY_set_public_key = NULL;
 +	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
 +	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
-+	_g_ERR_get_error_line = NULL;
 +	_g_EVP_CIPHER_get_block_size = NULL;
 +	_g_EVP_MD_get_block_size = NULL;
 +	_g_EVP_MD_get_size = NULL;
@@ -10594,19 +10561,37 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_OpenSSL_version_num = NULL;
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++long _mkcgo_BIO_ctrl(_BIO_PTR _arg0, int _arg1, long _arg2, void* _arg3) {
++	return _g_BIO_ctrl(_arg0, _arg1, _arg2, _arg3);
++}
++
++int _mkcgo_BIO_free(_BIO_PTR _arg0) {
++	return _g_BIO_free(_arg0);
++}
++
++_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR _arg0, uintptr_t *_err_state) {
++	_BIO_PTR _ret = _g_BIO_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void) {
++	return _g_BIO_s_mem();
++}
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
 +	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
 +	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10624,13 +10609,13 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_BN_free(_arg0);
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *_err_state) {
++_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *_err_state) {
 +	_BIGNUM_PTR _ret = _g_BN_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10644,7 +10629,7 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_CRYPTO_free(_arg0, _arg1, _arg2);
 +}
 +
-+void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10654,7 +10639,7 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_DSA_free(_arg0);
 +}
 +
-+int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_DSA_generate_key(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10668,19 +10653,19 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *_err_state) {
++_DSA_PTR _mkcgo_DSA_new(uintptr_t *_err_state) {
 +	_DSA_PTR _ret = _g_DSA_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10690,13 +10675,13 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EC_GROUP_free(_arg0);
 +}
 +
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
 +	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EC_KEY_check_key(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10718,25 +10703,25 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_EC_KEY_get0_public_key(_arg0);
 +}
 +
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, mkcgo_err_state *_err_state) {
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
 +	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10746,63 +10731,51 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EC_POINT_free(_arg0);
 +}
 +
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
 +	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, mkcgo_err_state *_err_state) {
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, uintptr_t *_err_state) {
 +	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, mkcgo_err_state *_err_state) {
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
 +	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+void _mkcgo_ERR_clear_error(void) {
-+	_g_ERR_clear_error();
-+}
-+
-+void _mkcgo_ERR_error_string_n(unsigned long _arg0, char* _arg1, size_t _arg2) {
-+	_g_ERR_error_string_n(_arg0, _arg1, _arg2);
-+}
-+
-+unsigned long _mkcgo_ERR_get_error(void) {
-+	return _g_ERR_get_error();
-+}
-+
-+unsigned long _mkcgo_ERR_get_error_all(const char** _arg0, int* _arg1, const char** _arg2, const char** _arg3, int* _arg4) {
-+	return _g_ERR_get_error_all(_arg0, _arg1, _arg2, _arg3, _arg4);
++unsigned long _mkcgo_ERR_peek_error(void) {
++	return _g_ERR_peek_error();
 +}
 +
-+unsigned long _mkcgo_ERR_get_error_line(const char** _arg0, int* _arg1) {
-+	return _g_ERR_get_error_line(_arg0, _arg1);
++void _mkcgo_ERR_print_errors(_BIO_PTR _arg0) {
++	_g_ERR_print_errors(_arg0);
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10812,25 +10785,25 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_CIPHER_CTX_free(_arg0);
 +}
 +
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *_err_state) {
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *_err_state) {
 +	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10844,115 +10817,115 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_EVP_CIPHER_get_block_size(_arg0);
 +}
 +
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_Digest(const void* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_Digest(const unsigned char* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const void* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10962,31 +10935,31 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_KDF_CTX_free(_arg0);
 +}
 +
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, mkcgo_err_state *_err_state) {
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, uintptr_t *_err_state) {
 +	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -10996,7 +10969,17 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_KDF_free(_arg0);
 +}
 +
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_KEYMGMT_PTR _ret = _g_EVP_KEYMGMT_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR _arg0) {
++	_g_EVP_KEYMGMT_free(_arg0);
++}
++
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11006,49 +10989,49 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_MAC_CTX_free(_arg0);
 +}
 +
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, mkcgo_err_state *_err_state) {
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, uintptr_t *_err_state) {
 +	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MD_CTX_copy(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11058,37 +11041,37 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_MD_CTX_free(_arg0);
 +}
 +
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *_err_state) {
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *_err_state) {
 +	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11118,13 +11101,13 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_EVP_MD_get_type(_arg0);
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11134,115 +11117,145 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_PKEY_CTX_free(_arg0);
 +}
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
 +	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, mkcgo_err_state *_err_state) {
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
 +	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decapsulate_init(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_derive_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, unsigned char* _arg3, size_t* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encapsulate_init(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11252,169 +11265,175 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_EVP_PKEY_free(_arg0);
 +}
 +
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, mkcgo_err_state *_err_state) {
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, uintptr_t *_err_state) {
 +	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_get_bits(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, unsigned char* _arg2, size_t _arg3, size_t* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_octet_string_param(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_get_size(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_private_check(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_sign_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_up_ref(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_verify_init(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, mkcgo_err_state *_err_state) {
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11472,7 +11491,7 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_EVP_aes_256_gcm();
 +}
 +
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11566,13 +11585,13 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_FIPS_mode();
 +}
 +
-+int _mkcgo_FIPS_mode_set(int _arg0, mkcgo_err_state *_err_state) {
++int _mkcgo_FIPS_mode_set(int _arg0, uintptr_t *_err_state) {
 +	int _ret = _g_FIPS_mode_set(_arg0);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11582,25 +11601,25 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_HMAC_CTX_free(_arg0);
 +}
 +
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *_err_state) {
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *_err_state) {
 +	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, mkcgo_err_state *_err_state) {
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11614,7 +11633,7 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_OPENSSL_init();
 +}
 +
-+int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11648,37 +11667,37 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_OSSL_PARAM_BLD_free(_arg0);
 +}
 +
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *_err_state) {
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(uintptr_t *_err_state) {
 +	_OSSL_PARAM_BLD_PTR _ret = _g_OSSL_PARAM_BLD_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, mkcgo_err_state *_err_state) {
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, uintptr_t *_err_state) {
 +	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11688,7 +11707,7 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_OSSL_PARAM_free(_arg0);
 +}
 +
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, mkcgo_err_state *_err_state) {
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, uintptr_t *_err_state) {
 +	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11702,7 +11721,7 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_OSSL_PROVIDER_get0_name(_arg0);
 +}
 +
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, mkcgo_err_state *_err_state) {
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11720,13 +11739,13 @@ index 00000000000000..9cf871d0fd1b61
 +	return _g_OpenSSL_version_num();
 +}
 +
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, mkcgo_err_state *_err_state) {
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, uintptr_t *_err_state) {
 +	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, mkcgo_err_state *_err_state) {
++int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_RAND_bytes(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11748,25 +11767,25 @@ index 00000000000000..9cf871d0fd1b61
 +	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *_err_state) {
++_RSA_PTR _mkcgo_RSA_new(uintptr_t *_err_state) {
 +	_RSA_PTR _ret = _g_RSA_new();
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, mkcgo_err_state *_err_state) {
++int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
 +}
 +
-+int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, mkcgo_err_state *_err_state) {
++int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -11774,10 +11793,10 @@ index 00000000000000..9cf871d0fd1b61
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..619b7d730f72fa
+index 00000000000000..3d66be3bc085ca
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,57 @@
+@@ -0,0 +1,62 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -11797,6 +11816,8 @@ index 00000000000000..619b7d730f72fa
 +	EVP_PKEY_HKDF                       = 1036
 +	EVP_PKEY_ED25519                    = 1087
 +	EVP_PKEY_DSA                        = 116
++	EVP_PKEY_MLKEM_768                  = 1455
++	EVP_PKEY_MLKEM_1024                 = 1456
 +	EVP_PKEY_OP_DERIVE                  = (1 << 10)
 +	EVP_MAX_MD_SIZE                     = 64
 +	EVP_PKEY_PUBLIC_KEY                 = 0x86
@@ -11816,6 +11837,8 @@ index 00000000000000..619b7d730f72fa
 +	NID_secp224r1                       = 713
 +	NID_secp384r1                       = 715
 +	NID_secp521r1                       = 716
++	NID_ML_KEM_768                      = 1455
++	NID_ML_KEM_1024                     = 1456
 +	RSA_PKCS1_PADDING                   = 1
 +	RSA_NO_PADDING                      = 3
 +	RSA_PKCS1_OAEP_PADDING              = 4
@@ -11834,13 +11857,14 @@ index 00000000000000..619b7d730f72fa
 +	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
 +	OSSL_PARAM_INTEGER                  = 1
 +	OSSL_PARAM_OCTET_STRING             = 5
++	BIO_CTRL_INFO                       = 3
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..e4083838bf2ba3
+index 00000000000000..2f308a24abbe2e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,336 @@
+@@ -0,0 +1,351 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -11871,9 +11895,12 @@ index 00000000000000..e4083838bf2ba3
 +typedef void* _OSSL_PARAM_BLD_PTR;
 +typedef void* _OSSL_PARAM_PTR;
 +typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _EVP_KEYMGMT_PTR;
 +typedef void* _DSA_PTR;
 +typedef void* _EVP_KDF_PTR;
 +typedef void* _EVP_KDF_CTX_PTR;
++typedef void* _BIO_METHOD_PTR;
++typedef void* _BIO_PTR;
 +typedef int point_conversion_form_t;
 +
 +enum {
@@ -11891,6 +11918,8 @@ index 00000000000000..e4083838bf2ba3
 +	_EVP_PKEY_HKDF = 1036,
 +	_EVP_PKEY_ED25519 = 1087,
 +	_EVP_PKEY_DSA = 116,
++	_EVP_PKEY_MLKEM_768 = 1455,
++	_EVP_PKEY_MLKEM_1024 = 1456,
 +	_EVP_PKEY_OP_DERIVE = (1 << 10),
 +	_EVP_MAX_MD_SIZE = 64,
 +	_EVP_PKEY_PUBLIC_KEY = 0x86,
@@ -11910,6 +11939,8 @@ index 00000000000000..e4083838bf2ba3
 +	_NID_secp224r1 = 713,
 +	_NID_secp384r1 = 715,
 +	_NID_secp521r1 = 716,
++	_NID_ML_KEM_768 = 1455,
++	_NID_ML_KEM_1024 = 1456,
 +	_RSA_PKCS1_PADDING = 1,
 +	_RSA_NO_PADDING = 3,
 +	_RSA_PKCS1_OAEP_PADDING = 4,
@@ -11928,11 +11959,10 @@ index 00000000000000..e4083838bf2ba3
 +	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
 +	_OSSL_PARAM_INTEGER = 1,
 +	_OSSL_PARAM_OCTET_STRING = 5,
++	BIO_CTRL_INFO = 3,
 +};
 +
-+typedef void* mkcgo_err_state;
-+mkcgo_err_state mkcgo_err_retrieve();
-+void mkcgo_err_free(mkcgo_err_state);
++uintptr_t mkcgo_err_retrieve();
 +void __mkcgo_load_(void* handle);
 +void __mkcgo_unload_();
 +void __mkcgo_load_111(void* handle);
@@ -11953,155 +11983,164 @@ index 00000000000000..e4083838bf2ba3
 +int _mkcgo_available_OPENSSL_version_patch();
 +int _mkcgo_available_OpenSSL_version_num();
 +
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, mkcgo_err_state *);
++long _mkcgo_BIO_ctrl(_BIO_PTR, int, long, void*);
++int _mkcgo_BIO_free(_BIO_PTR);
++_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR, uintptr_t *);
++const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void);
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
 +void _mkcgo_BN_clear(_BIGNUM_PTR);
 +void _mkcgo_BN_clear_free(_BIGNUM_PTR);
 +void _mkcgo_BN_free(_BIGNUM_PTR);
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, mkcgo_err_state *);
-+_BIGNUM_PTR _mkcgo_BN_new(mkcgo_err_state *);
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
++_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *);
 +int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
 +void _mkcgo_CRYPTO_free(void*, const char*, int);
-+void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, mkcgo_err_state *);
++void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, uintptr_t *);
 +void _mkcgo_DSA_free(_DSA_PTR);
-+int _mkcgo_DSA_generate_key(_DSA_PTR, mkcgo_err_state *);
++int _mkcgo_DSA_generate_key(_DSA_PTR, uintptr_t *);
 +void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
 +void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_DSA_PTR _mkcgo_DSA_new(mkcgo_err_state *);
-+int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++_DSA_PTR _mkcgo_DSA_new(uintptr_t *);
++int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
 +void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, mkcgo_err_state *);
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, uintptr_t *);
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, uintptr_t *);
 +void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
 +const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
 +const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
 +const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, uintptr_t *);
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, uintptr_t *);
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
 +void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, mkcgo_err_state *);
-+void _mkcgo_ERR_clear_error(void);
-+void _mkcgo_ERR_error_string_n(unsigned long, char*, size_t);
-+unsigned long _mkcgo_ERR_get_error(void);
-+unsigned long _mkcgo_ERR_get_error_all(const char**, int*, const char**, const char**, int*);
-+unsigned long _mkcgo_ERR_get_error_line(const char**, int*);
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, mkcgo_err_state *);
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++unsigned long _mkcgo_ERR_peek_error(void);
++void _mkcgo_ERR_print_errors(_BIO_PTR);
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, uintptr_t *);
 +void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(mkcgo_err_state *);
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, mkcgo_err_state *);
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *);
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
 +int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_Digest(const void*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const void*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, mkcgo_err_state *);
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_Digest(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
 +void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, mkcgo_err_state *);
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, uintptr_t *);
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, uintptr_t *);
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, mkcgo_err_state *);
++_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, uintptr_t *);
 +void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, mkcgo_err_state *);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, uintptr_t *);
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, uintptr_t *);
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
 +void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, mkcgo_err_state *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(mkcgo_err_state *);
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, mkcgo_err_state *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, mkcgo_err_state *);
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, uintptr_t *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, uintptr_t *);
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *);
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, uintptr_t *);
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
 +const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
 +const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
 +int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
 +int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
 +int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, uintptr_t *);
 +void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, mkcgo_err_state *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, uintptr_t *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, uintptr_t *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, uintptr_t *);
++int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
 +void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, mkcgo_err_state *);
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, mkcgo_err_state *);
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, mkcgo_err_state *);
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, mkcgo_err_state *);
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, mkcgo_err_state *);
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, mkcgo_err_state *);
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, uintptr_t *);
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, uintptr_t *);
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, uintptr_t *);
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
@@ -12115,7 +12154,7 @@ index 00000000000000..e4083838bf2ba3
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, mkcgo_err_state *);
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, uintptr_t *);
 +int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
@@ -12138,51 +12177,51 @@ index 00000000000000..e4083838bf2ba3
 +const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
 +const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
 +int _mkcgo_FIPS_mode(void);
-+int _mkcgo_FIPS_mode_set(int, mkcgo_err_state *);
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, mkcgo_err_state *);
++int _mkcgo_FIPS_mode_set(int, uintptr_t *);
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, uintptr_t *);
 +void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(mkcgo_err_state *);
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, mkcgo_err_state *);
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, mkcgo_err_state *);
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, mkcgo_err_state *);
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *);
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
 +const char* _mkcgo_OBJ_nid2sn(int);
 +void _mkcgo_OPENSSL_init(void);
-+int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, mkcgo_err_state *);
++int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, uintptr_t *);
 +unsigned int _mkcgo_OPENSSL_version_major(void);
 +unsigned int _mkcgo_OPENSSL_version_minor(void);
 +unsigned int _mkcgo_OPENSSL_version_patch(void);
 +void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, mkcgo_err_state *);
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, mkcgo_err_state *);
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, mkcgo_err_state *);
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, uintptr_t *);
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, uintptr_t *);
 +void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, mkcgo_err_state *);
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, uintptr_t *);
 +int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
 +const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, mkcgo_err_state *);
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, uintptr_t *);
 +const char* _mkcgo_OpenSSL_version(int);
 +unsigned long _mkcgo_OpenSSL_version_num(void);
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, mkcgo_err_state *);
-+int _mkcgo_RAND_bytes(unsigned char*, int, mkcgo_err_state *);
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, uintptr_t *);
++int _mkcgo_RAND_bytes(unsigned char*, int, uintptr_t *);
 +void _mkcgo_RSA_free(_RSA_PTR);
 +void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
 +void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
 +void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_RSA_PTR _mkcgo_RSA_new(mkcgo_err_state *);
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
-+int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, mkcgo_err_state *);
++_RSA_PTR _mkcgo_RSA_new(uintptr_t *);
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
 +
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..15dd292a0bafff
+index 00000000000000..0d280df4222d5c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1279 @@
+@@ -0,0 +1,1334 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -12197,6 +12236,8 @@ index 00000000000000..15dd292a0bafff
 +import "unsafe"
 +
 +type BIGNUM_PTR = C._BIGNUM_PTR
++type BIO_METHOD_PTR = C._BIO_METHOD_PTR
++type BIO_PTR = C._BIO_PTR
 +type BN_CTX_PTR = C._BN_CTX_PTR
 +type DSA_PTR = C._DSA_PTR
 +type EC_GROUP_PTR = C._EC_GROUP_PTR
@@ -12207,6 +12248,7 @@ index 00000000000000..15dd292a0bafff
 +type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
 +type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
 +type EVP_KDF_PTR = C._EVP_KDF_PTR
++type EVP_KEYMGMT_PTR = C._EVP_KEYMGMT_PTR
 +type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
 +type EVP_MAC_PTR = C._EVP_MAC_PTR
 +type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
@@ -12280,27 +12322,45 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +//go:nosplit
-+func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
 +	x := uintptr(unsafe.Pointer(p))
-+	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++}
++
++func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
++	return int64(C._mkcgo_BIO_ctrl(bp, C.int(cmd), C.long(larg), parg))
++}
++
++func BIO_free(a BIO_PTR) int32 {
++	return int32(C._mkcgo_BIO_free(a))
++}
++
++func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BIO_new(__type, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BIO_new", uintptr(_err))
++}
++
++func BIO_s_mem() BIO_METHOD_PTR {
++	return C._mkcgo_BIO_s_mem()
 +}
 +
 +func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), arg2, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_bin2bn", _err)
++	return _ret, newMkcgoErr("BN_bin2bn", uintptr(_err))
 +}
 +
 +func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2binpad", _err)
++	return int32(_ret), newMkcgoErr("BN_bn2binpad", uintptr(_err))
 +}
 +
 +func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", _err)
++	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", uintptr(_err))
 +}
 +
 +func BN_clear(arg0 BIGNUM_PTR) {
@@ -12316,15 +12376,15 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(s)), C.int(len), ret, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_lebin2bn", _err)
++	return _ret, newMkcgoErr("BN_lebin2bn", uintptr(_err))
 +}
 +
 +func BN_new() (BIGNUM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_new", _err)
++	return _ret, newMkcgoErr("BN_new", uintptr(_err))
 +}
 +
 +func BN_num_bits(arg0 BIGNUM_PTR) int32 {
@@ -12336,9 +12396,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("CRYPTO_malloc", _err)
++	return _ret, newMkcgoErr("CRYPTO_malloc", uintptr(_err))
 +}
 +
 +func DSA_free(r DSA_PTR) {
@@ -12346,9 +12406,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func DSA_generate_key(a DSA_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_generate_key", _err)
++	return int32(_ret), newMkcgoErr("DSA_generate_key", uintptr(_err))
 +}
 +
 +func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
@@ -12360,21 +12420,21 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func DSA_new() (DSA_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("DSA_new", _err)
++	return _ret, newMkcgoErr("DSA_new", uintptr(_err))
 +}
 +
 +func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_key", _err)
++	return int32(_ret), newMkcgoErr("DSA_set0_key", uintptr(_err))
 +}
 +
 +func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_pqg", _err)
++	return int32(_ret), newMkcgoErr("DSA_set0_pqg", uintptr(_err))
 +}
 +
 +func EC_GROUP_free(group EC_GROUP_PTR) {
@@ -12382,15 +12442,15 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
++	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", uintptr(_err))
 +}
 +
 +func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_check_key", _err)
++	return int32(_ret), newMkcgoErr("EC_KEY_check_key", uintptr(_err))
 +}
 +
 +func EC_KEY_free(arg0 EC_KEY_PTR) {
@@ -12410,27 +12470,27 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", _err)
++	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", uintptr(_err))
 +}
 +
 +func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", _err)
++	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", uintptr(_err))
 +}
 +
 +func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", _err)
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", uintptr(_err))
 +}
 +
 +func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", uintptr(_err))
 +}
 +
 +func EC_POINT_free(arg0 EC_POINT_PTR) {
@@ -12438,65 +12498,53 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
++	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", uintptr(_err))
 +}
 +
 +func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_mul", _err)
++	return int32(_ret), newMkcgoErr("EC_POINT_mul", uintptr(_err))
 +}
 +
 +func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_POINT_new", _err)
++	return _ret, newMkcgoErr("EC_POINT_new", uintptr(_err))
 +}
 +
 +func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", _err)
++	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", uintptr(_err))
 +}
 +
 +func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EC_POINT_point2oct", _err)
++	return int(_ret), newMkcgoErr("EC_POINT_point2oct", uintptr(_err))
 +}
 +
 +func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
-+}
-+
-+func ERR_clear_error() {
-+	C._mkcgo_ERR_clear_error()
-+}
-+
-+func ERR_error_string_n(e uint64, buf *byte, len int) {
-+	C._mkcgo_ERR_error_string_n(C.ulong(e), (*C.char)(unsafe.Pointer(buf)), C.size_t(len))
-+}
-+
-+func ERR_get_error() uint64 {
-+	return uint64(C._mkcgo_ERR_get_error())
++	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", uintptr(_err))
 +}
 +
-+func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
-+	return uint64(C._mkcgo_ERR_get_error_all((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line)), (**C.char)(unsafe.Pointer(__func)), (**C.char)(unsafe.Pointer(data)), (*C.int)(unsafe.Pointer(flags))))
++func ERR_peek_error() uint64 {
++	return uint64(C._mkcgo_ERR_peek_error())
 +}
 +
-+func ERR_get_error_line(file **byte, line *int32) uint64 {
-+	return uint64(C._mkcgo_ERR_get_error_line((**C.char)(unsafe.Pointer(file)), (*C.int)(unsafe.Pointer(line))))
++func ERR_print_errors(bp BIO_PTR) {
++	C._mkcgo_ERR_print_errors(bp)
 +}
 +
 +func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", uintptr(_err))
 +}
 +
 +func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
@@ -12504,27 +12552,27 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", _err)
++	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", uintptr(_err))
 +}
 +
 +func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", uintptr(_err))
 +}
 +
 +func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", uintptr(_err))
 +}
 +
 +func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_fetch", _err)
++	return _ret, newMkcgoErr("EVP_CIPHER_fetch", uintptr(_err))
 +}
 +
 +func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
@@ -12536,117 +12584,117 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", uintptr(_err))
 +}
 +
 +func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", _err)
++	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", uintptr(_err))
 +}
 +
 +func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(outm)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", uintptr(_err))
 +}
 +
 +func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", uintptr(_err))
 +}
 +
 +func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", _err)
++	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", uintptr(_err))
 +}
 +
-+func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_Digest(unsafe.Pointer(&*(*byte)(data)), C.size_t(count), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_Digest", _err)
++func EVP_Digest(data []byte, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
 +}
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", uintptr(_err))
 +}
 +
 +func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestInit", uintptr(_err))
 +}
 +
 +func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", uintptr(_err))
 +}
 +
 +func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(sigret)), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSign", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestSign", uintptr(_err))
 +}
 +
 +func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", uintptr(_err))
 +}
 +
 +func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", uintptr(_err))
 +}
 +
-+func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
-+	var _err C.mkcgo_err_state
-+	_ret := C._mkcgo_EVP_DigestUpdate(ctx, unsafe.Pointer(&*(*byte)(d)), C.size_t(cnt), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", _err)
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(d))), C.size_t(len(d)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", uintptr(_err))
 +}
 +
 +func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(sigret)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerify", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestVerify", uintptr(_err))
 +}
 +
 +func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", uintptr(_err))
 +}
 +
 +func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", _err)
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", uintptr(_err))
 +}
 +
 +func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", uintptr(_err))
 +}
 +
 +func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", uintptr(_err))
 +}
 +
 +func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", _err)
++	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", uintptr(_err))
 +}
 +
 +func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
@@ -12654,43 +12702,53 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
++	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", uintptr(_err))
 +}
 +
 +func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_CTX_new", _err)
++	return _ret, newMkcgoErr("EVP_KDF_CTX_new", uintptr(_err))
 +}
 +
 +func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
++	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", uintptr(_err))
 +}
 +
 +func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_derive", _err)
++	return int32(_ret), newMkcgoErr("EVP_KDF_derive", uintptr(_err))
 +}
 +
 +func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_fetch", _err)
++	return _ret, newMkcgoErr("EVP_KDF_fetch", uintptr(_err))
 +}
 +
 +func EVP_KDF_free(kdf EVP_KDF_PTR) {
 +	C._mkcgo_EVP_KDF_free(kdf)
 +}
 +
++func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KEYMGMT_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KEYMGMT_fetch", uintptr(_err))
++}
++
++func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
++	C._mkcgo_EVP_KEYMGMT_free(keymgmt)
++}
++
 +func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", _err)
++	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", uintptr(_err))
 +}
 +
 +func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
@@ -12698,51 +12756,51 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_new", _err)
++	return _ret, newMkcgoErr("EVP_MAC_CTX_new", uintptr(_err))
 +}
 +
 +func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
++	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", uintptr(_err))
 +}
 +
 +func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_fetch", _err)
++	return _ret, newMkcgoErr("EVP_MAC_fetch", uintptr(_err))
 +}
 +
 +func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(outsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_final", _err)
++	return int32(_ret), newMkcgoErr("EVP_MAC_final", uintptr(_err))
 +}
 +
 +func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_MAC_init", uintptr(_err))
 +}
 +
 +func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(data)), C.size_t(datalen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_update", _err)
++	return int32(_ret), newMkcgoErr("EVP_MAC_update", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_copy(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", _err)
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
@@ -12750,39 +12808,39 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", _err)
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
++	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_new", _err)
++	return _ret, newMkcgoErr("EVP_MD_CTX_new", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", _err)
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", uintptr(_err))
 +}
 +
 +func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", _err)
++	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", uintptr(_err))
 +}
 +
 +func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_fetch", _err)
++	return _ret, newMkcgoErr("EVP_MD_fetch", uintptr(_err))
 +}
 +
 +func EVP_MD_free(md EVP_MD_PTR) {
@@ -12810,15 +12868,15 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
@@ -12826,117 +12884,147 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, label, C.int(len), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", uintptr(_err))
 +}
 +
 +func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", uintptr(_err))
 +}
 +
 +func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", uintptr(_err))
 +}
 +
 +func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLKEM(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", uintptr(_err))
 +}
 +
 +func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", uintptr(_err))
 +}
 +
 +func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", uintptr(_err))
++}
++
++func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decapsulate(ctx, (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), (*C.uchar)(unsafe.Pointer(wrappedkey)), C.size_t(wrappedkeylen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate", uintptr(_err))
++}
++
++func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decapsulate_init(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", uintptr(_err))
 +}
 +
 +func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", uintptr(_err))
 +}
 +
 +func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", uintptr(_err))
++}
++
++func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encapsulate(ctx, (*C.uchar)(unsafe.Pointer(wrappedkey)), (*C.size_t)(unsafe.Pointer(wrappedkeylen)), (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate", uintptr(_err))
++}
++
++func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encapsulate_init(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", uintptr(_err))
 +}
 +
 +func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
@@ -12944,171 +13032,177 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", uintptr(_err))
 +}
 +
 +func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
++	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", uintptr(_err))
++}
++
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf *byte, buf_len int, out_len *int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_octet_string_param(pkey, (*C.char)(unsafe.Pointer(key_name)), (*C.uchar)(unsafe.Pointer(buf)), C.size_t(buf_len), (*C.size_t)(unsafe.Pointer(out_len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_octet_string_param", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(priv)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", uintptr(_err))
 +}
 +
 +func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", uintptr(_err))
 +}
 +
 +func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_new", uintptr(_err))
 +}
 +
 +func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", uintptr(_err))
 +}
 +
 +func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", uintptr(_err))
 +}
 +
 +func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", uintptr(_err))
 +}
 +
 +func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", uintptr(_err))
 +}
 +
 +func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), C.size_t(publen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", uintptr(_err))
 +}
 +
 +func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", uintptr(_err))
 +}
 +
 +func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", uintptr(_err))
 +}
 +
 +func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", uintptr(_err))
 +}
 +
 +func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", uintptr(_err))
 +}
 +
 +func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", _err)
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", uintptr(_err))
 +}
 +
 +func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", _err)
++	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", uintptr(_err))
 +}
 +
 +func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
@@ -13164,9 +13258,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", _err)
++	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", uintptr(_err))
 +}
 +
 +func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
@@ -13258,15 +13352,15 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func FIPS_mode_set(r int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("FIPS_mode_set", _err)
++	return int32(_ret), newMkcgoErr("FIPS_mode_set", uintptr(_err))
 +}
 +
 +func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", _err)
++	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", uintptr(_err))
 +}
 +
 +func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
@@ -13274,27 +13368,27 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("HMAC_CTX_new", _err)
++	return _ret, newMkcgoErr("HMAC_CTX_new", uintptr(_err))
 +}
 +
 +func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Final", _err)
++	return int32(_ret), newMkcgoErr("HMAC_Final", uintptr(_err))
 +}
 +
 +func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_HMAC_Init_ex(arg0, arg1, C.int(arg2), arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Init_ex", _err)
++	return int32(_ret), newMkcgoErr("HMAC_Init_ex", uintptr(_err))
 +}
 +
 +func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.size_t(arg2), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Update", _err)
++	return int32(_ret), newMkcgoErr("HMAC_Update", uintptr(_err))
 +}
 +
 +func OBJ_nid2sn(n int32) *byte {
@@ -13306,9 +13400,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", _err)
++	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", uintptr(_err))
 +}
 +
 +func OPENSSL_version_major_Available() bool {
@@ -13340,39 +13434,39 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", _err)
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), buf, C.size_t(bsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(buf)), C.size_t(bsize), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", uintptr(_err))
 +}
 +
 +func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
@@ -13380,9 +13474,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", _err)
++	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", uintptr(_err))
 +}
 +
 +func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
@@ -13394,9 +13488,9 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", _err)
++	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", uintptr(_err))
 +}
 +
 +func OpenSSL_version(__type int32) *byte {
@@ -13412,15 +13506,15 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(pass)), C.int(passlen), (*C.uchar)(unsafe.Pointer(salt)), C.int(saltlen), C.int(iter), digest, C.int(keylen), (*C.uchar)(unsafe.Pointer(out)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
++	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", uintptr(_err))
 +}
 +
 +func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RAND_bytes", _err)
++	return int32(_ret), newMkcgoErr("RAND_bytes", uintptr(_err))
 +}
 +
 +func RSA_free(arg0 RSA_PTR) {
@@ -13440,34 +13534,34 @@ index 00000000000000..15dd292a0bafff
 +}
 +
 +func RSA_new() (RSA_PTR, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("RSA_new", _err)
++	return _ret, newMkcgoErr("RSA_new", uintptr(_err))
 +}
 +
 +func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", _err)
++	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", uintptr(_err))
 +}
 +
 +func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_factors", _err)
++	return int32(_ret), newMkcgoErr("RSA_set0_factors", uintptr(_err))
 +}
 +
 +func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	var _err C.mkcgo_err_state
++	var _err C.uintptr_t
 +	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_key", _err)
++	return int32(_ret), newMkcgoErr("RSA_set0_key", uintptr(_err))
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
 new file mode 100644
-index 00000000000000..ae64d2f7ee9990
+index 00000000000000..75e697917b6657
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-@@ -0,0 +1,37 @@
+@@ -0,0 +1,39 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build go1.24 && !cmd_go_bootstrap
@@ -13475,6 +13569,8 @@ index 00000000000000..ae64d2f7ee9990
 +package ossl
 +
 +/*
++#cgo noescape _mkcgo_BIO_ctrl
++#cgo nocallback _mkcgo_BIO_ctrl
 +#cgo noescape _mkcgo_EVP_CipherUpdate
 +#cgo nocallback _mkcgo_EVP_CipherUpdate
 +#cgo noescape _mkcgo_EVP_DecryptFinal_ex
@@ -13507,10 +13603,10 @@ index 00000000000000..ae64d2f7ee9990
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..24a6d76c3d6b31
+index 00000000000000..efa7451359e98f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2250 @@
+@@ -0,0 +1,2345 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -13546,33 +13642,65 @@ index 00000000000000..24a6d76c3d6b31
 +type OSSL_PARAM_BLD_PTR unsafe.Pointer
 +type OSSL_PARAM_PTR unsafe.Pointer
 +type EVP_SIGNATURE_PTR unsafe.Pointer
++type EVP_KEYMGMT_PTR unsafe.Pointer
 +type DSA_PTR unsafe.Pointer
 +type EVP_KDF_PTR unsafe.Pointer
 +type EVP_KDF_CTX_PTR unsafe.Pointer
++type BIO_METHOD_PTR unsafe.Pointer
++type BIO_PTR unsafe.Pointer
 +type Point_conversion_form_t = int32
 +
++var _mkcgo_BIO_ctrl uintptr
++
++func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
++	r0, _ := syscallN(0, _mkcgo_BIO_ctrl, uintptr(bp), uintptr(cmd), uintptr(larg), uintptr(parg))
++	return int64(r0)
++}
++
++var _mkcgo_BIO_free uintptr
++
++func BIO_free(a BIO_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_BIO_free, uintptr(a))
++	return int32(r0)
++}
++
++var _mkcgo_BIO_new uintptr
++
++func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_BIO_new, uintptr(__type), uintptr(unsafe.Pointer(&_err)))
++	return BIO_PTR(r0), newMkcgoErr("BIO_new", _err)
++}
++
++var _mkcgo_BIO_s_mem uintptr
++
++func BIO_s_mem() BIO_METHOD_PTR {
++	r0, _ := syscallN(0, _mkcgo_BIO_s_mem)
++	return BIO_METHOD_PTR(r0)
++}
++
 +var _mkcgo_BN_bin2bn uintptr
 +
 +func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", &_err)
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", _err)
 +}
 +
 +var _mkcgo_BN_bn2binpad uintptr
 +
 +func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("BN_bn2binpad", &_err)
++	return int32(r0), newMkcgoErr("BN_bn2binpad", _err)
 +}
 +
 +var _mkcgo_BN_bn2lebinpad uintptr
 +
 +func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("BN_bn2lebinpad", &_err)
++	return int32(r0), newMkcgoErr("BN_bn2lebinpad", _err)
 +}
 +
 +var _mkcgo_BN_clear uintptr
@@ -13596,17 +13724,17 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_BN_lebin2bn uintptr
 +
 +func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(unsafe.Pointer(s)), uintptr(len), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", &_err)
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", _err)
 +}
 +
 +var _mkcgo_BN_new uintptr
 +
 +func BN_new() (BIGNUM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_BN_new, uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_new", &_err)
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_new", _err)
 +}
 +
 +var _mkcgo_BN_num_bits uintptr
@@ -13625,9 +13753,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_CRYPTO_malloc uintptr
 +
 +func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(unsafe.Pointer(file)), uintptr(line), uintptr(unsafe.Pointer(&_err)))
-+	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", &_err)
++	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", _err)
 +}
 +
 +var _mkcgo_DSA_free uintptr
@@ -13639,9 +13767,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_DSA_generate_key uintptr
 +
 +func DSA_generate_key(a DSA_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_DSA_generate_key, uintptr(a), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_generate_key", &_err)
++	return int32(r0), newMkcgoErr("DSA_generate_key", _err)
 +}
 +
 +var _mkcgo_DSA_get0_key uintptr
@@ -13659,25 +13787,25 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_DSA_new uintptr
 +
 +func DSA_new() (DSA_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_DSA_new, uintptr(unsafe.Pointer(&_err)))
-+	return DSA_PTR(r0), newMkcgoErr("DSA_new", &_err)
++	return DSA_PTR(r0), newMkcgoErr("DSA_new", _err)
 +}
 +
 +var _mkcgo_DSA_set0_key uintptr
 +
 +func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_set0_key", &_err)
++	return int32(r0), newMkcgoErr("DSA_set0_key", _err)
 +}
 +
 +var _mkcgo_DSA_set0_pqg uintptr
 +
 +func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_set0_pqg", &_err)
++	return int32(r0), newMkcgoErr("DSA_set0_pqg", _err)
 +}
 +
 +var _mkcgo_EC_GROUP_free uintptr
@@ -13689,17 +13817,17 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EC_GROUP_new_by_curve_name uintptr
 +
 +func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid), uintptr(unsafe.Pointer(&_err)))
-+	return EC_GROUP_PTR(r0), newMkcgoErr("EC_GROUP_new_by_curve_name", &_err)
++	return EC_GROUP_PTR(r0), newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
 +}
 +
 +var _mkcgo_EC_KEY_check_key uintptr
 +
 +func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_KEY_check_key, uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_check_key", &_err)
++	return int32(r0), newMkcgoErr("EC_KEY_check_key", _err)
 +}
 +
 +var _mkcgo_EC_KEY_free uintptr
@@ -13732,33 +13860,33 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EC_KEY_new_by_curve_name uintptr
 +
 +func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EC_KEY_PTR(r0), newMkcgoErr("EC_KEY_new_by_curve_name", &_err)
++	return EC_KEY_PTR(r0), newMkcgoErr("EC_KEY_new_by_curve_name", _err)
 +}
 +
 +var _mkcgo_EC_KEY_set_private_key uintptr
 +
 +func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_private_key", &_err)
++	return int32(r0), newMkcgoErr("EC_KEY_set_private_key", _err)
 +}
 +
 +var _mkcgo_EC_KEY_set_public_key uintptr
 +
 +func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_public_key", &_err)
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key", _err)
 +}
 +
 +var _mkcgo_EC_KEY_set_public_key_affine_coordinates uintptr
 +
 +func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", &_err)
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
 +}
 +
 +var _mkcgo_EC_POINT_free uintptr
@@ -13770,90 +13898,70 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EC_POINT_get_affine_coordinates_GFp uintptr
 +
 +func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", &_err)
++	return int32(r0), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
 +}
 +
 +var _mkcgo_EC_POINT_mul uintptr
 +
 +func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_mul", &_err)
++	return int32(r0), newMkcgoErr("EC_POINT_mul", _err)
 +}
 +
 +var _mkcgo_EC_POINT_new uintptr
 +
 +func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EC_POINT_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EC_POINT_PTR(r0), newMkcgoErr("EC_POINT_new", &_err)
++	return EC_POINT_PTR(r0), newMkcgoErr("EC_POINT_new", _err)
 +}
 +
 +var _mkcgo_EC_POINT_oct2point uintptr
 +
 +func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_oct2point", &_err)
++	return int32(r0), newMkcgoErr("EC_POINT_oct2point", _err)
 +}
 +
 +var _mkcgo_EC_POINT_point2oct uintptr
 +
 +func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EC_POINT_point2oct", &_err)
++	return int(r0), newMkcgoErr("EC_POINT_point2oct", _err)
 +}
 +
 +var _mkcgo_EC_POINT_set_affine_coordinates uintptr
 +
 +func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_set_affine_coordinates", &_err)
-+}
-+
-+var _mkcgo_ERR_clear_error uintptr
-+
-+func ERR_clear_error() {
-+	syscallN(0, _mkcgo_ERR_clear_error)
-+}
-+
-+var _mkcgo_ERR_error_string_n uintptr
-+
-+func ERR_error_string_n(e uint64, buf *byte, len int) {
-+	syscallN(0, _mkcgo_ERR_error_string_n, uintptr(e), uintptr(unsafe.Pointer(buf)), uintptr(len))
-+}
-+
-+var _mkcgo_ERR_get_error uintptr
-+
-+func ERR_get_error() uint64 {
-+	r0, _ := syscallN(0, _mkcgo_ERR_get_error)
-+	return uint64(r0)
++	return int32(r0), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
 +}
 +
-+var _mkcgo_ERR_get_error_all uintptr
++var _mkcgo_ERR_peek_error uintptr
 +
-+func ERR_get_error_all(file **byte, line *int32, __func **byte, data **byte, flags *int32) uint64 {
-+	r0, _ := syscallN(0, _mkcgo_ERR_get_error_all, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)), uintptr(unsafe.Pointer(__func)), uintptr(unsafe.Pointer(data)), uintptr(unsafe.Pointer(flags)))
++func ERR_peek_error() uint64 {
++	r0, _ := syscallN(0, _mkcgo_ERR_peek_error)
 +	return uint64(r0)
 +}
 +
-+var _mkcgo_ERR_get_error_line uintptr
++var _mkcgo_ERR_print_errors uintptr
 +
-+func ERR_get_error_line(file **byte, line *int32) uint64 {
-+	r0, _ := syscallN(0, _mkcgo_ERR_get_error_line, uintptr(unsafe.Pointer(file)), uintptr(unsafe.Pointer(line)))
-+	return uint64(r0)
++func ERR_print_errors(bp BIO_PTR) {
++	syscallN(0, _mkcgo_ERR_print_errors, uintptr(bp))
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_ctrl uintptr
 +
 +func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_ctrl", &_err)
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_free uintptr
@@ -13865,33 +13973,33 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_CIPHER_CTX_new uintptr
 +
 +func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_CIPHER_CTX_PTR(r0), newMkcgoErr("EVP_CIPHER_CTX_new", &_err)
++	return EVP_CIPHER_CTX_PTR(r0), newMkcgoErr("EVP_CIPHER_CTX_new", _err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_set_key_length uintptr
 +
 +func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", &_err)
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_CTX_set_padding uintptr
 +
 +func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_padding", &_err)
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_fetch uintptr
 +
 +func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", &_err)
++	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_CIPHER_get0_name uintptr
@@ -13911,153 +14019,153 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_CipherInit_ex uintptr
 +
 +func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_CipherUpdate uintptr
 +
 +func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CipherUpdate", &_err)
++	return int32(r0), newMkcgoErr("EVP_CipherUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_DecryptFinal_ex uintptr
 +
 +func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(outm)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", _err)
 +}
 +
 +var _mkcgo_EVP_DecryptInit_ex uintptr
 +
 +func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_DecryptUpdate uintptr
 +
 +func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", &_err)
++	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_Digest uintptr
 +
-+func EVP_Digest(data unsafe.Pointer, count int, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err errState
-+	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(data), uintptr(count), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_Digest", &_err)
++func EVP_Digest(data []byte, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_Digest", _err)
 +}
 +
 +var _mkcgo_EVP_DigestFinal_ex uintptr
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", _err)
 +}
 +
 +var _mkcgo_EVP_DigestInit uintptr
 +
 +func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestInit", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestInit", _err)
 +}
 +
 +var _mkcgo_EVP_DigestInit_ex uintptr
 +
 +func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestInit_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_DigestSign uintptr
 +
 +func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSign", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestSign", _err)
 +}
 +
 +var _mkcgo_EVP_DigestSignFinal uintptr
 +
 +func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", _err)
 +}
 +
 +var _mkcgo_EVP_DigestSignInit uintptr
 +
 +func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSignInit", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
 +}
 +
 +var _mkcgo_EVP_DigestUpdate uintptr
 +
-+func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d unsafe.Pointer, cnt int) (int32, error) {
-+	var _err errState
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(d), uintptr(cnt), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestUpdate", &_err)
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_DigestVerify uintptr
 +
 +func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerify", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestVerify", _err)
 +}
 +
 +var _mkcgo_EVP_DigestVerifyFinal uintptr
 +
 +func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", _err)
 +}
 +
 +var _mkcgo_EVP_DigestVerifyInit uintptr
 +
 +func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", &_err)
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", _err)
 +}
 +
 +var _mkcgo_EVP_EncryptFinal_ex uintptr
 +
 +func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", _err)
 +}
 +
 +var _mkcgo_EVP_EncryptInit_ex uintptr
 +
 +func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_EncryptUpdate uintptr
 +
 +func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", &_err)
++	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_free uintptr
@@ -14069,41 +14177,41 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_KDF_CTX_get_kdf_size uintptr
 +
 +func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(4, _mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", &_err)
++	return int(r0), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_new uintptr
 +
 +func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_KDF_CTX_new, uintptr(kdf), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_KDF_CTX_PTR(r0), newMkcgoErr("EVP_KDF_CTX_new", &_err)
++	return EVP_KDF_CTX_PTR(r0), newMkcgoErr("EVP_KDF_CTX_new", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_CTX_set_params uintptr
 +
 +func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_KDF_CTX_set_params", &_err)
++	return int32(r0), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_derive uintptr
 +
 +func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_KDF_derive", &_err)
++	return int32(r0), newMkcgoErr("EVP_KDF_derive", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_fetch uintptr
 +
 +func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", &_err)
++	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_KDF_free uintptr
@@ -14112,12 +14220,26 @@ index 00000000000000..24a6d76c3d6b31
 +	syscallN(0, _mkcgo_EVP_KDF_free, uintptr(kdf))
 +}
 +
++var _mkcgo_EVP_KEYMGMT_fetch uintptr
++
++func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_KEYMGMT_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KEYMGMT_PTR(r0), newMkcgoErr("EVP_KEYMGMT_fetch", _err)
++}
++
++var _mkcgo_EVP_KEYMGMT_free uintptr
++
++func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
++	syscallN(0, _mkcgo_EVP_KEYMGMT_free, uintptr(keymgmt))
++}
++
 +var _mkcgo_EVP_MAC_CTX_dup uintptr
 +
 +func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_dup, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_dup", &_err)
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_dup", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_free uintptr
@@ -14129,65 +14251,65 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_MAC_CTX_new uintptr
 +
 +func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_new", &_err)
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_new", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_CTX_set_params uintptr
 +
 +func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_CTX_set_params", &_err)
++	return int32(r0), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_fetch uintptr
 +
 +func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", &_err)
++	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_final uintptr
 +
 +func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(outsize), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_final", &_err)
++	return int32(r0), newMkcgoErr("EVP_MAC_final", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_init uintptr
 +
 +func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_MAC_init", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_update uintptr
 +
 +func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(data)), uintptr(datalen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_update", &_err)
++	return int32(r0), newMkcgoErr("EVP_MAC_update", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_copy uintptr
 +
 +func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy", &_err)
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_copy_ex uintptr
 +
 +func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", &_err)
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_free uintptr
@@ -14199,49 +14321,49 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_MD_CTX_get_params uintptr
 +
 +func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_get_params", &_err)
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_get_params", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_gettable_params uintptr
 +
 +func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_gettable_params", &_err)
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_new uintptr
 +
 +func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MD_CTX_PTR(r0), newMkcgoErr("EVP_MD_CTX_new", &_err)
++	return EVP_MD_CTX_PTR(r0), newMkcgoErr("EVP_MD_CTX_new", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_set_params uintptr
 +
 +func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_set_params", &_err)
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_set_params", _err)
 +}
 +
 +var _mkcgo_EVP_MD_CTX_settable_params uintptr
 +
 +func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_settable_params", &_err)
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_settable_params", _err)
 +}
 +
 +var _mkcgo_EVP_MD_fetch uintptr
 +
 +func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", &_err)
++	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_MD_free uintptr
@@ -14288,17 +14410,17 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
 +
 +func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_ctrl uintptr
 +
 +func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_ctrl", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_free uintptr
@@ -14310,159 +14432,197 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_PKEY_CTX_new uintptr
 +
 +func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new", &_err)
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_new_from_pkey uintptr
 +
 +func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(unsafe.Pointer(propquery)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", &_err)
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_new_id uintptr
 +
 +func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_id", &_err)
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
 +
 +func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(label), uintptr(len), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
 +
 +func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
 +
 +func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set_hkdf_md uintptr
 +
 +func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set_hkdf_mode uintptr
 +
 +func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_Q_keygen uintptr
 +
 +func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	var r0 uintptr
 +	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
 +		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	} else {
 +		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	}
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_EC", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
 +}
 +
 +func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++}
++
++func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", _err)
 +}
 +
 +func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	var r0 uintptr
 +	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
 +		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
 +	} else {
 +		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
 +	}
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_assign uintptr
 +
 +func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_assign", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_assign", _err)
++}
++
++var _mkcgo_EVP_PKEY_decapsulate uintptr
++
++func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate, uintptr(ctx), uintptr(unsafe.Pointer(genkey)), uintptr(unsafe.Pointer(genkeylen)), uintptr(unsafe.Pointer(wrappedkey)), uintptr(wrappedkeylen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate", _err)
++}
++
++var _mkcgo_EVP_PKEY_decapsulate_init uintptr
++
++func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_decrypt uintptr
 +
 +func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_decrypt_init uintptr
 +
 +func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive uintptr
 +
 +func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive_init uintptr
 +
 +func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_derive_set_peer uintptr
 +
 +func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive_set_peer", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++}
++
++var _mkcgo_EVP_PKEY_encapsulate uintptr
++
++func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate, uintptr(ctx), uintptr(unsafe.Pointer(wrappedkey)), uintptr(unsafe.Pointer(wrappedkeylen)), uintptr(unsafe.Pointer(genkey)), uintptr(unsafe.Pointer(genkeylen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate", _err)
++}
++
++var _mkcgo_EVP_PKEY_encapsulate_init uintptr
++
++func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_encrypt uintptr
 +
 +func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_encrypt_init uintptr
 +
 +func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_free uintptr
@@ -14474,225 +14634,233 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_PKEY_fromdata uintptr
 +
 +func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(unsafe.Pointer(pkey)), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_fromdata_init uintptr
 +
 +func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get0_DSA uintptr
 +
 +func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return DSA_PTR(r0), newMkcgoErr("EVP_PKEY_get0_DSA", &_err)
++	return DSA_PTR(r0), newMkcgoErr("EVP_PKEY_get0_DSA", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get0_EC_KEY uintptr
 +
 +func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return EC_KEY_PTR(r0), newMkcgoErr("EVP_PKEY_get0_EC_KEY", &_err)
++	return EC_KEY_PTR(r0), newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get1_RSA uintptr
 +
 +func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return RSA_PTR(r0), newMkcgoErr("EVP_PKEY_get1_RSA", &_err)
++	return RSA_PTR(r0), newMkcgoErr("EVP_PKEY_get1_RSA", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get1_encoded_public_key uintptr
 +
 +func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(ppub)), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", &_err)
++	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_bits uintptr
 +
 +func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bits, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_bits", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bits", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_bn_param uintptr
 +
 +func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_bn_param", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++}
++
++var _mkcgo_EVP_PKEY_get_octet_string_param uintptr
++
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf *byte, buf_len int, out_len *int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_octet_string_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(buf)), uintptr(buf_len), uintptr(unsafe.Pointer(out_len)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_octet_string_param", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
 +
 +func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(priv)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
 +
 +func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_size uintptr
 +
 +func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_size, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_size", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_size", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_keygen uintptr
 +
 +func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_keygen", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_keygen_init uintptr
 +
 +func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_keygen_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new uintptr
 +
 +func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
 +
 +func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
 +
 +func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", &_err)
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_paramgen uintptr
 +
 +func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_paramgen_init uintptr
 +
 +func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_private_check uintptr
 +
 +func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_private_check, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_private_check", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_private_check", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_public_check_quick uintptr
 +
 +func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_public_check_quick", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_set1_EC_KEY uintptr
 +
 +func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_set1_EC_KEY", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
 +
 +func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(publen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_sign uintptr
 +
 +func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_sign", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_sign_init uintptr
 +
 +func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_sign_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign_init", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_up_ref uintptr
 +
 +func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_up_ref, uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_up_ref", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_up_ref", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_verify uintptr
 +
 +func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_verify", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_verify_init uintptr
 +
 +func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_verify_init", &_err)
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify_init", _err)
 +}
 +
 +var _mkcgo_EVP_SIGNATURE_fetch uintptr
 +
 +func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", &_err)
++	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_SIGNATURE_free uintptr
@@ -14788,9 +14956,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_EVP_default_properties_enable_fips uintptr
 +
 +func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_default_properties_enable_fips", &_err)
++	return int32(r0), newMkcgoErr("EVP_default_properties_enable_fips", _err)
 +}
 +
 +var _mkcgo_EVP_default_properties_is_fips_enabled uintptr
@@ -14950,17 +15118,17 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_FIPS_mode_set uintptr
 +
 +func FIPS_mode_set(r int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_FIPS_mode_set, uintptr(r), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("FIPS_mode_set", &_err)
++	return int32(r0), newMkcgoErr("FIPS_mode_set", _err)
 +}
 +
 +var _mkcgo_HMAC_CTX_copy uintptr
 +
 +func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_CTX_copy", &_err)
++	return int32(r0), newMkcgoErr("HMAC_CTX_copy", _err)
 +}
 +
 +var _mkcgo_HMAC_CTX_free uintptr
@@ -14972,33 +15140,33 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_HMAC_CTX_new uintptr
 +
 +func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_HMAC_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return HMAC_CTX_PTR(r0), newMkcgoErr("HMAC_CTX_new", &_err)
++	return HMAC_CTX_PTR(r0), newMkcgoErr("HMAC_CTX_new", _err)
 +}
 +
 +var _mkcgo_HMAC_Final uintptr
 +
 +func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Final", &_err)
++	return int32(r0), newMkcgoErr("HMAC_Final", _err)
 +}
 +
 +var _mkcgo_HMAC_Init_ex uintptr
 +
 +func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Init_ex", &_err)
++	return int32(r0), newMkcgoErr("HMAC_Init_ex", _err)
 +}
 +
 +var _mkcgo_HMAC_Update uintptr
 +
 +func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Update", &_err)
++	return int32(r0), newMkcgoErr("HMAC_Update", _err)
 +}
 +
 +var _mkcgo_OBJ_nid2sn uintptr
@@ -15017,9 +15185,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_OPENSSL_init_crypto uintptr
 +
 +func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OPENSSL_init_crypto", &_err)
++	return int32(r0), newMkcgoErr("OPENSSL_init_crypto", _err)
 +}
 +
 +func OPENSSL_version_major_Available() bool {
@@ -15064,49 +15232,49 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_OSSL_PARAM_BLD_new uintptr
 +
 +func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_new, uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_BLD_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_new", &_err)
++	return OSSL_PARAM_BLD_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_new", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
 +
 +func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", &_err)
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_int32 uintptr
 +
 +func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(num), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", &_err)
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
 +
 +func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(buf), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", &_err)
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
 +
 +func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(buf)), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", &_err)
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_to_param uintptr
 +
 +func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_to_param", &_err)
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_free uintptr
@@ -15118,9 +15286,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_OSSL_PARAM_locate_const uintptr
 +
 +func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", &_err)
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", _err)
 +}
 +
 +var _mkcgo_OSSL_PROVIDER_available uintptr
@@ -15140,9 +15308,9 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_OSSL_PROVIDER_try_load uintptr
 +
 +func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(unsafe.Pointer(name)), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", &_err)
++	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", _err)
 +}
 +
 +var _mkcgo_OpenSSL_version uintptr
@@ -15166,17 +15334,17 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
 +
 +func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(unsafe.Pointer(pass)), uintptr(passlen), uintptr(unsafe.Pointer(salt)), uintptr(saltlen), uintptr(iter), uintptr(digest), uintptr(keylen), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", &_err)
++	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
 +}
 +
 +var _mkcgo_RAND_bytes uintptr
 +
 +func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RAND_bytes", &_err)
++	return int32(r0), newMkcgoErr("RAND_bytes", _err)
 +}
 +
 +var _mkcgo_RSA_free uintptr
@@ -15206,33 +15374,33 @@ index 00000000000000..24a6d76c3d6b31
 +var _mkcgo_RSA_new uintptr
 +
 +func RSA_new() (RSA_PTR, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_RSA_new, uintptr(unsafe.Pointer(&_err)))
-+	return RSA_PTR(r0), newMkcgoErr("RSA_new", &_err)
++	return RSA_PTR(r0), newMkcgoErr("RSA_new", _err)
 +}
 +
 +var _mkcgo_RSA_set0_crt_params uintptr
 +
 +func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_crt_params", &_err)
++	return int32(r0), newMkcgoErr("RSA_set0_crt_params", _err)
 +}
 +
 +var _mkcgo_RSA_set0_factors uintptr
 +
 +func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_factors", &_err)
++	return int32(r0), newMkcgoErr("RSA_set0_factors", _err)
 +}
 +
 +var _mkcgo_RSA_set0_key uintptr
 +
 +func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	var _err errState
++	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_key", &_err)
++	return int32(r0), newMkcgoErr("RSA_set0_key", _err)
 +}
 +
 +//go:nosplit
@@ -15251,12 +15419,15 @@ index 00000000000000..24a6d76c3d6b31
 +		panic("invalid error check type")
 +	}
 +	if hasError {
-+		errPtr := (*errState)(unsafe.Pointer(*(*uintptr)(unsafe.Pointer(args + unsafe.Sizeof(uintptr(0))*n))))
-+		retrieveErrorState(errPtr)
++		**(**uintptr)(unsafe.Pointer(args + unsafe.Sizeof(uintptr(0))*n)) = retrieveErrorState()
 +	}
 +}
 +
 +func MkcgoLoad_(handle unsafe.Pointer) {
++	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
++	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
++	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
++	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
 +	_mkcgo_BN_bin2bn = dlsym(handle, "BN_bin2bn\x00", false)
 +	_mkcgo_BN_bn2binpad = dlsym(handle, "BN_bn2binpad\x00", false)
 +	_mkcgo_BN_bn2lebinpad = dlsym(handle, "BN_bn2lebinpad\x00", false)
@@ -15275,9 +15446,8 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EC_POINT_new = dlsym(handle, "EC_POINT_new\x00", false)
 +	_mkcgo_EC_POINT_oct2point = dlsym(handle, "EC_POINT_oct2point\x00", false)
 +	_mkcgo_EC_POINT_point2oct = dlsym(handle, "EC_POINT_point2oct\x00", false)
-+	_mkcgo_ERR_clear_error = dlsym(handle, "ERR_clear_error\x00", false)
-+	_mkcgo_ERR_error_string_n = dlsym(handle, "ERR_error_string_n\x00", false)
-+	_mkcgo_ERR_get_error = dlsym(handle, "ERR_get_error\x00", false)
++	_mkcgo_ERR_peek_error = dlsym(handle, "ERR_peek_error\x00", false)
++	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_ctrl = dlsym(handle, "EVP_CIPHER_CTX_ctrl\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_free = dlsym(handle, "EVP_CIPHER_CTX_free\x00", false)
 +	_mkcgo_EVP_CIPHER_CTX_new = dlsym(handle, "EVP_CIPHER_CTX_new\x00", false)
@@ -15360,6 +15530,10 @@ index 00000000000000..24a6d76c3d6b31
 +}
 +
 +func MkcgoUnload_() {
++	_mkcgo_BIO_ctrl = 0
++	_mkcgo_BIO_free = 0
++	_mkcgo_BIO_new = 0
++	_mkcgo_BIO_s_mem = 0
 +	_mkcgo_BN_bin2bn = 0
 +	_mkcgo_BN_bn2binpad = 0
 +	_mkcgo_BN_bn2lebinpad = 0
@@ -15378,9 +15552,8 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EC_POINT_new = 0
 +	_mkcgo_EC_POINT_oct2point = 0
 +	_mkcgo_EC_POINT_point2oct = 0
-+	_mkcgo_ERR_clear_error = 0
-+	_mkcgo_ERR_error_string_n = 0
-+	_mkcgo_ERR_get_error = 0
++	_mkcgo_ERR_peek_error = 0
++	_mkcgo_ERR_print_errors = 0
 +	_mkcgo_EVP_CIPHER_CTX_ctrl = 0
 +	_mkcgo_EVP_CIPHER_CTX_free = 0
 +	_mkcgo_EVP_CIPHER_CTX_new = 0
@@ -15494,7 +15667,6 @@ index 00000000000000..24a6d76c3d6b31
 +
 +func MkcgoLoad_3(handle unsafe.Pointer) {
 +	_mkcgo_EC_POINT_set_affine_coordinates = dlsym(handle, "EC_POINT_set_affine_coordinates\x00", false)
-+	_mkcgo_ERR_get_error_all = dlsym(handle, "ERR_get_error_all\x00", false)
 +	_mkcgo_EVP_CIPHER_fetch = dlsym(handle, "EVP_CIPHER_fetch\x00", false)
 +	_mkcgo_EVP_CIPHER_get0_name = dlsym(handle, "EVP_CIPHER_get0_name\x00", false)
 +	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_get_block_size\x00", false)
@@ -15505,6 +15677,8 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EVP_KDF_derive = dlsym(handle, "EVP_KDF_derive\x00", false)
 +	_mkcgo_EVP_KDF_fetch = dlsym(handle, "EVP_KDF_fetch\x00", false)
 +	_mkcgo_EVP_KDF_free = dlsym(handle, "EVP_KDF_free\x00", false)
++	_mkcgo_EVP_KEYMGMT_fetch = dlsym(handle, "EVP_KEYMGMT_fetch\x00", false)
++	_mkcgo_EVP_KEYMGMT_free = dlsym(handle, "EVP_KEYMGMT_free\x00", false)
 +	_mkcgo_EVP_MAC_CTX_dup = dlsym(handle, "EVP_MAC_CTX_dup\x00", false)
 +	_mkcgo_EVP_MAC_CTX_free = dlsym(handle, "EVP_MAC_CTX_free\x00", false)
 +	_mkcgo_EVP_MAC_CTX_new = dlsym(handle, "EVP_MAC_CTX_new\x00", false)
@@ -15532,11 +15706,16 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_md\x00", false)
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_mode\x00", false)
 +	_mkcgo_EVP_PKEY_Q_keygen = dlsym(handle, "EVP_PKEY_Q_keygen\x00", false)
++	_mkcgo_EVP_PKEY_decapsulate = dlsym(handle, "EVP_PKEY_decapsulate\x00", false)
++	_mkcgo_EVP_PKEY_decapsulate_init = dlsym(handle, "EVP_PKEY_decapsulate_init\x00", false)
++	_mkcgo_EVP_PKEY_encapsulate = dlsym(handle, "EVP_PKEY_encapsulate\x00", false)
++	_mkcgo_EVP_PKEY_encapsulate_init = dlsym(handle, "EVP_PKEY_encapsulate_init\x00", false)
 +	_mkcgo_EVP_PKEY_fromdata = dlsym(handle, "EVP_PKEY_fromdata\x00", false)
 +	_mkcgo_EVP_PKEY_fromdata_init = dlsym(handle, "EVP_PKEY_fromdata_init\x00", false)
 +	_mkcgo_EVP_PKEY_get1_encoded_public_key = dlsym(handle, "EVP_PKEY_get1_encoded_public_key\x00", false)
 +	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_get_bits\x00", false)
 +	_mkcgo_EVP_PKEY_get_bn_param = dlsym(handle, "EVP_PKEY_get_bn_param\x00", false)
++	_mkcgo_EVP_PKEY_get_octet_string_param = dlsym(handle, "EVP_PKEY_get_octet_string_param\x00", false)
 +	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_get_size\x00", false)
 +	_mkcgo_EVP_PKEY_private_check = dlsym(handle, "EVP_PKEY_private_check\x00", false)
 +	_mkcgo_EVP_PKEY_public_check_quick = dlsym(handle, "EVP_PKEY_public_check_quick\x00", false)
@@ -15562,7 +15741,6 @@ index 00000000000000..24a6d76c3d6b31
 +
 +func MkcgoUnload_3() {
 +	_mkcgo_EC_POINT_set_affine_coordinates = 0
-+	_mkcgo_ERR_get_error_all = 0
 +	_mkcgo_EVP_CIPHER_fetch = 0
 +	_mkcgo_EVP_CIPHER_get0_name = 0
 +	_mkcgo_EVP_CIPHER_get_block_size = 0
@@ -15573,6 +15751,8 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EVP_KDF_derive = 0
 +	_mkcgo_EVP_KDF_fetch = 0
 +	_mkcgo_EVP_KDF_free = 0
++	_mkcgo_EVP_KEYMGMT_fetch = 0
++	_mkcgo_EVP_KEYMGMT_free = 0
 +	_mkcgo_EVP_MAC_CTX_dup = 0
 +	_mkcgo_EVP_MAC_CTX_free = 0
 +	_mkcgo_EVP_MAC_CTX_new = 0
@@ -15600,11 +15780,16 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = 0
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = 0
 +	_mkcgo_EVP_PKEY_Q_keygen = 0
++	_mkcgo_EVP_PKEY_decapsulate = 0
++	_mkcgo_EVP_PKEY_decapsulate_init = 0
++	_mkcgo_EVP_PKEY_encapsulate = 0
++	_mkcgo_EVP_PKEY_encapsulate_init = 0
 +	_mkcgo_EVP_PKEY_fromdata = 0
 +	_mkcgo_EVP_PKEY_fromdata_init = 0
 +	_mkcgo_EVP_PKEY_get1_encoded_public_key = 0
 +	_mkcgo_EVP_PKEY_get_bits = 0
 +	_mkcgo_EVP_PKEY_get_bn_param = 0
++	_mkcgo_EVP_PKEY_get_octet_string_param = 0
 +	_mkcgo_EVP_PKEY_get_size = 0
 +	_mkcgo_EVP_PKEY_private_check = 0
 +	_mkcgo_EVP_PKEY_public_check_quick = 0
@@ -15628,145 +15813,528 @@ index 00000000000000..24a6d76c3d6b31
 +	_mkcgo_OSSL_PROVIDER_try_load = 0
 +}
 +
-+func MkcgoLoad_init_1(handle unsafe.Pointer) {
-+	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
-+	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++}
++
++func MkcgoUnload_init_1() {
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++}
++
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
++	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
++	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
++	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
++	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
++	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
++	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
++	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
++	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++}
++
++func MkcgoUnload_init_3() {
++	_mkcgo_BIO_ctrl = 0
++	_mkcgo_BIO_free = 0
++	_mkcgo_BIO_new = 0
++	_mkcgo_BIO_s_mem = 0
++	_mkcgo_ERR_print_errors = 0
++	_mkcgo_EVP_MD_fetch = 0
++	_mkcgo_EVP_MD_free = 0
++	_mkcgo_EVP_MD_get0_provider = 0
++	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++}
++
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	_mkcgo_DSA_free = dlsym(handle, "DSA_free\x00", false)
++	_mkcgo_DSA_generate_key = dlsym(handle, "DSA_generate_key\x00", false)
++	_mkcgo_DSA_get0_key = dlsym(handle, "DSA_get0_key\x00", false)
++	_mkcgo_DSA_get0_pqg = dlsym(handle, "DSA_get0_pqg\x00", false)
++	_mkcgo_DSA_new = dlsym(handle, "DSA_new\x00", false)
++	_mkcgo_DSA_set0_key = dlsym(handle, "DSA_set0_key\x00", false)
++	_mkcgo_DSA_set0_pqg = dlsym(handle, "DSA_set0_pqg\x00", false)
++	_mkcgo_EC_KEY_check_key = dlsym(handle, "EC_KEY_check_key\x00", false)
++	_mkcgo_EC_KEY_free = dlsym(handle, "EC_KEY_free\x00", false)
++	_mkcgo_EC_KEY_get0_group = dlsym(handle, "EC_KEY_get0_group\x00", false)
++	_mkcgo_EC_KEY_get0_private_key = dlsym(handle, "EC_KEY_get0_private_key\x00", false)
++	_mkcgo_EC_KEY_get0_public_key = dlsym(handle, "EC_KEY_get0_public_key\x00", false)
++	_mkcgo_EC_KEY_new_by_curve_name = dlsym(handle, "EC_KEY_new_by_curve_name\x00", false)
++	_mkcgo_EC_KEY_set_private_key = dlsym(handle, "EC_KEY_set_private_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key = dlsym(handle, "EC_KEY_set_public_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = dlsym(handle, "EC_KEY_set_public_key_affine_coordinates\x00", false)
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = dlsym(handle, "EC_POINT_get_affine_coordinates_GFp\x00", false)
++	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_block_size\x00", false)
++	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_block_size\x00", false)
++	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_size\x00", false)
++	_mkcgo_EVP_PKEY_assign = dlsym(handle, "EVP_PKEY_assign\x00", false)
++	_mkcgo_EVP_PKEY_get0_DSA = dlsym(handle, "EVP_PKEY_get0_DSA\x00", false)
++	_mkcgo_EVP_PKEY_get0_EC_KEY = dlsym(handle, "EVP_PKEY_get0_EC_KEY\x00", false)
++	_mkcgo_EVP_PKEY_get1_RSA = dlsym(handle, "EVP_PKEY_get1_RSA\x00", false)
++	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_bits\x00", false)
++	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_size\x00", false)
++	_mkcgo_EVP_PKEY_set1_EC_KEY = dlsym(handle, "EVP_PKEY_set1_EC_KEY\x00", false)
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++	_mkcgo_HMAC_CTX_copy = dlsym(handle, "HMAC_CTX_copy\x00", false)
++	_mkcgo_HMAC_CTX_free = dlsym(handle, "HMAC_CTX_free\x00", false)
++	_mkcgo_HMAC_CTX_new = dlsym(handle, "HMAC_CTX_new\x00", false)
++	_mkcgo_HMAC_Final = dlsym(handle, "HMAC_Final\x00", false)
++	_mkcgo_HMAC_Init_ex = dlsym(handle, "HMAC_Init_ex\x00", false)
++	_mkcgo_HMAC_Update = dlsym(handle, "HMAC_Update\x00", false)
++	_mkcgo_RSA_free = dlsym(handle, "RSA_free\x00", false)
++	_mkcgo_RSA_get0_crt_params = dlsym(handle, "RSA_get0_crt_params\x00", false)
++	_mkcgo_RSA_get0_factors = dlsym(handle, "RSA_get0_factors\x00", false)
++	_mkcgo_RSA_get0_key = dlsym(handle, "RSA_get0_key\x00", false)
++	_mkcgo_RSA_new = dlsym(handle, "RSA_new\x00", false)
++	_mkcgo_RSA_set0_crt_params = dlsym(handle, "RSA_set0_crt_params\x00", false)
++	_mkcgo_RSA_set0_factors = dlsym(handle, "RSA_set0_factors\x00", false)
++	_mkcgo_RSA_set0_key = dlsym(handle, "RSA_set0_key\x00", false)
++}
++
++func MkcgoUnload_legacy_1() {
++	_mkcgo_DSA_free = 0
++	_mkcgo_DSA_generate_key = 0
++	_mkcgo_DSA_get0_key = 0
++	_mkcgo_DSA_get0_pqg = 0
++	_mkcgo_DSA_new = 0
++	_mkcgo_DSA_set0_key = 0
++	_mkcgo_DSA_set0_pqg = 0
++	_mkcgo_EC_KEY_check_key = 0
++	_mkcgo_EC_KEY_free = 0
++	_mkcgo_EC_KEY_get0_group = 0
++	_mkcgo_EC_KEY_get0_private_key = 0
++	_mkcgo_EC_KEY_get0_public_key = 0
++	_mkcgo_EC_KEY_new_by_curve_name = 0
++	_mkcgo_EC_KEY_set_private_key = 0
++	_mkcgo_EC_KEY_set_public_key = 0
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = 0
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = 0
++	_mkcgo_EVP_CIPHER_get_block_size = 0
++	_mkcgo_EVP_MD_get_block_size = 0
++	_mkcgo_EVP_MD_get_size = 0
++	_mkcgo_EVP_PKEY_assign = 0
++	_mkcgo_EVP_PKEY_get0_DSA = 0
++	_mkcgo_EVP_PKEY_get0_EC_KEY = 0
++	_mkcgo_EVP_PKEY_get1_RSA = 0
++	_mkcgo_EVP_PKEY_get_bits = 0
++	_mkcgo_EVP_PKEY_get_size = 0
++	_mkcgo_EVP_PKEY_set1_EC_KEY = 0
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++	_mkcgo_HMAC_CTX_copy = 0
++	_mkcgo_HMAC_CTX_free = 0
++	_mkcgo_HMAC_CTX_new = 0
++	_mkcgo_HMAC_Final = 0
++	_mkcgo_HMAC_Init_ex = 0
++	_mkcgo_HMAC_Update = 0
++	_mkcgo_RSA_free = 0
++	_mkcgo_RSA_get0_crt_params = 0
++	_mkcgo_RSA_get0_factors = 0
++	_mkcgo_RSA_get0_key = 0
++	_mkcgo_RSA_new = 0
++	_mkcgo_RSA_set0_crt_params = 0
++	_mkcgo_RSA_set0_factors = 0
++	_mkcgo_RSA_set0_key = 0
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	_mkcgo_OPENSSL_version_major = dlsym(handle, "OPENSSL_version_major\x00", true)
++	_mkcgo_OPENSSL_version_minor = dlsym(handle, "OPENSSL_version_minor\x00", true)
++	_mkcgo_OPENSSL_version_patch = dlsym(handle, "OPENSSL_version_patch\x00", true)
++	_mkcgo_OpenSSL_version_num = dlsym(handle, "OpenSSL_version_num\x00", true)
++}
++
++func MkcgoUnload_version() {
++	_mkcgo_OPENSSL_version_major = 0
++	_mkcgo_OPENSSL_version_minor = 0
++	_mkcgo_OPENSSL_version_patch = 0
++	_mkcgo_OpenSSL_version_num = 0
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
+new file mode 100644
+index 00000000000000..cea3f9881f920e
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
+@@ -0,0 +1,371 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package openssl
++
++import (
++	"errors"
++	"sync"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++const (
++	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
++	sharedKeySizeMLKEM = 32
++
++	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
++	seedSizeMLKEM = 64
++
++	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
++	ciphertextSizeMLKEM768 = 1088
++
++	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
++	encapsulationKeySizeMLKEM768 = 1184
++
++	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
++	ciphertextSizeMLKEM1024 = 1568
++
++	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
++	encapsulationKeySizeMLKEM1024 = 1568
++)
++
++// SupportsMLKEM768 returns true if ML-KEM-768 is supported on this platform.
++func SupportsMLKEM768() bool {
++	if vMajor >= 3 && vMinor >= 5 {
++		return supportsMLKEM768()
++	}
++	return false
++}
++
++// SupportsMLKEM1024 returns true if ML-KEM-1024 is supported on this platform.
++func SupportsMLKEM1024() bool {
++	if vMajor >= 3 && vMinor >= 5 {
++		return supportsMLKEM1024()
++	}
++	return false
++}
++
++var supportsMLKEM768 = sync.OnceValue(func() bool {
++	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM768.ptr(), nil)
++	if sig != nil {
++		ossl.EVP_KEYMGMT_free(sig)
++		return true
++	}
++	return false
++})
++
++var supportsMLKEM1024 = sync.OnceValue(func() bool {
++	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM1024.ptr(), nil)
++	if sig != nil {
++		ossl.EVP_KEYMGMT_free(sig)
++		return true
++	}
++	return false
++})
++
++// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	var dk DecapsulationKeyMLKEM768
++	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_768, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM768{}, err
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM768
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return performDecapsulation(ossl.NID_ML_KEM_768, dk[:], ciphertext)
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_768, dk[:], encapsulationKeySizeMLKEM768)
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], ekBytes)
++	return ek
++}
++
++// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM768.
++type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
++
++// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
++		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	return performEncapsulation(ossl.NID_ML_KEM_768, ciphertextSizeMLKEM768, ek[:])
++}
++
++func performEncapsulation(id int32, ciphertextSize int, ek []byte) (sharedKey, ciphertext []byte) {
++	pkey, err := createMLKEMPublicKey(id, ek)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	// Create encapsulation context
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++
++	// Initialize encapsulation
++	if _, err := ossl.EVP_PKEY_encapsulate_init(ctx, nil); err != nil {
++		panic(err)
++	}
++
++	// Perform encapsulation - allocate buffers based on the key size
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSize)
++
++	sharedKeyLen := len(sharedKey)
++	ciphertextLen := len(ciphertext)
++
++	if _, err := ossl.EVP_PKEY_encapsulate(ctx, base(ciphertext), &ciphertextLen, base(sharedKey), &sharedKeyLen); err != nil {
++		panic(err)
++	}
++
++	return sharedKey[:sharedKeyLen], ciphertext[:ciphertextLen]
++}
++
++func performDecapsulation(id int32, seed, ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) == 0 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	pkey, err := createMLKEMPrivateKey(id, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	// Create decapsulation context
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++
++	// Initialize decapsulation
++	if _, err := ossl.EVP_PKEY_decapsulate_init(ctx, nil); err != nil {
++		return nil, err
++	}
++
++	// Perform decapsulation
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	sharedKeyLen := len(sharedKey)
++	if _, err := ossl.EVP_PKEY_decapsulate(ctx, base(sharedKey), &sharedKeyLen, base(ciphertext), len(ciphertext)); err != nil {
++		return nil, err
++	}
++
++	return sharedKey[:sharedKeyLen], nil
 +}
 +
-+func MkcgoUnload_init_1() {
-+	_mkcgo_FIPS_mode = 0
-+	_mkcgo_FIPS_mode_set = 0
++// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	var dk DecapsulationKeyMLKEM1024
++	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_1024, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM1024{}, err
++	}
++	return dk, nil
 +}
 +
-+func MkcgoLoad_init_3(handle unsafe.Pointer) {
-+	_mkcgo_ERR_clear_error = dlsym(handle, "ERR_clear_error\x00", false)
-+	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
-+	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
-+	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
-+	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM1024
++	copy(dk[:], seed)
++	return dk, nil
 +}
 +
-+func MkcgoUnload_init_3() {
-+	_mkcgo_ERR_clear_error = 0
-+	_mkcgo_EVP_MD_fetch = 0
-+	_mkcgo_EVP_MD_free = 0
-+	_mkcgo_EVP_MD_get0_provider = 0
-+	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	return dk[:]
 +}
 +
-+func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
-+	_mkcgo_DSA_free = dlsym(handle, "DSA_free\x00", false)
-+	_mkcgo_DSA_generate_key = dlsym(handle, "DSA_generate_key\x00", false)
-+	_mkcgo_DSA_get0_key = dlsym(handle, "DSA_get0_key\x00", false)
-+	_mkcgo_DSA_get0_pqg = dlsym(handle, "DSA_get0_pqg\x00", false)
-+	_mkcgo_DSA_new = dlsym(handle, "DSA_new\x00", false)
-+	_mkcgo_DSA_set0_key = dlsym(handle, "DSA_set0_key\x00", false)
-+	_mkcgo_DSA_set0_pqg = dlsym(handle, "DSA_set0_pqg\x00", false)
-+	_mkcgo_EC_KEY_check_key = dlsym(handle, "EC_KEY_check_key\x00", false)
-+	_mkcgo_EC_KEY_free = dlsym(handle, "EC_KEY_free\x00", false)
-+	_mkcgo_EC_KEY_get0_group = dlsym(handle, "EC_KEY_get0_group\x00", false)
-+	_mkcgo_EC_KEY_get0_private_key = dlsym(handle, "EC_KEY_get0_private_key\x00", false)
-+	_mkcgo_EC_KEY_get0_public_key = dlsym(handle, "EC_KEY_get0_public_key\x00", false)
-+	_mkcgo_EC_KEY_new_by_curve_name = dlsym(handle, "EC_KEY_new_by_curve_name\x00", false)
-+	_mkcgo_EC_KEY_set_private_key = dlsym(handle, "EC_KEY_set_private_key\x00", false)
-+	_mkcgo_EC_KEY_set_public_key = dlsym(handle, "EC_KEY_set_public_key\x00", false)
-+	_mkcgo_EC_KEY_set_public_key_affine_coordinates = dlsym(handle, "EC_KEY_set_public_key_affine_coordinates\x00", false)
-+	_mkcgo_EC_POINT_get_affine_coordinates_GFp = dlsym(handle, "EC_POINT_get_affine_coordinates_GFp\x00", false)
-+	_mkcgo_ERR_get_error_line = dlsym(handle, "ERR_get_error_line\x00", false)
-+	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_block_size\x00", false)
-+	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_block_size\x00", false)
-+	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_size\x00", false)
-+	_mkcgo_EVP_PKEY_assign = dlsym(handle, "EVP_PKEY_assign\x00", false)
-+	_mkcgo_EVP_PKEY_get0_DSA = dlsym(handle, "EVP_PKEY_get0_DSA\x00", false)
-+	_mkcgo_EVP_PKEY_get0_EC_KEY = dlsym(handle, "EVP_PKEY_get0_EC_KEY\x00", false)
-+	_mkcgo_EVP_PKEY_get1_RSA = dlsym(handle, "EVP_PKEY_get1_RSA\x00", false)
-+	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_bits\x00", false)
-+	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_size\x00", false)
-+	_mkcgo_EVP_PKEY_set1_EC_KEY = dlsym(handle, "EVP_PKEY_set1_EC_KEY\x00", false)
-+	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
-+	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
-+	_mkcgo_HMAC_CTX_copy = dlsym(handle, "HMAC_CTX_copy\x00", false)
-+	_mkcgo_HMAC_CTX_free = dlsym(handle, "HMAC_CTX_free\x00", false)
-+	_mkcgo_HMAC_CTX_new = dlsym(handle, "HMAC_CTX_new\x00", false)
-+	_mkcgo_HMAC_Final = dlsym(handle, "HMAC_Final\x00", false)
-+	_mkcgo_HMAC_Init_ex = dlsym(handle, "HMAC_Init_ex\x00", false)
-+	_mkcgo_HMAC_Update = dlsym(handle, "HMAC_Update\x00", false)
-+	_mkcgo_RSA_free = dlsym(handle, "RSA_free\x00", false)
-+	_mkcgo_RSA_get0_crt_params = dlsym(handle, "RSA_get0_crt_params\x00", false)
-+	_mkcgo_RSA_get0_factors = dlsym(handle, "RSA_get0_factors\x00", false)
-+	_mkcgo_RSA_get0_key = dlsym(handle, "RSA_get0_key\x00", false)
-+	_mkcgo_RSA_new = dlsym(handle, "RSA_new\x00", false)
-+	_mkcgo_RSA_set0_crt_params = dlsym(handle, "RSA_set0_crt_params\x00", false)
-+	_mkcgo_RSA_set0_factors = dlsym(handle, "RSA_set0_factors\x00", false)
-+	_mkcgo_RSA_set0_key = dlsym(handle, "RSA_set0_key\x00", false)
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return performDecapsulation(ossl.NID_ML_KEM_1024, dk[:], ciphertext)
 +}
 +
-+func MkcgoUnload_legacy_1() {
-+	_mkcgo_DSA_free = 0
-+	_mkcgo_DSA_generate_key = 0
-+	_mkcgo_DSA_get0_key = 0
-+	_mkcgo_DSA_get0_pqg = 0
-+	_mkcgo_DSA_new = 0
-+	_mkcgo_DSA_set0_key = 0
-+	_mkcgo_DSA_set0_pqg = 0
-+	_mkcgo_EC_KEY_check_key = 0
-+	_mkcgo_EC_KEY_free = 0
-+	_mkcgo_EC_KEY_get0_group = 0
-+	_mkcgo_EC_KEY_get0_private_key = 0
-+	_mkcgo_EC_KEY_get0_public_key = 0
-+	_mkcgo_EC_KEY_new_by_curve_name = 0
-+	_mkcgo_EC_KEY_set_private_key = 0
-+	_mkcgo_EC_KEY_set_public_key = 0
-+	_mkcgo_EC_KEY_set_public_key_affine_coordinates = 0
-+	_mkcgo_EC_POINT_get_affine_coordinates_GFp = 0
-+	_mkcgo_ERR_get_error_line = 0
-+	_mkcgo_EVP_CIPHER_get_block_size = 0
-+	_mkcgo_EVP_MD_get_block_size = 0
-+	_mkcgo_EVP_MD_get_size = 0
-+	_mkcgo_EVP_PKEY_assign = 0
-+	_mkcgo_EVP_PKEY_get0_DSA = 0
-+	_mkcgo_EVP_PKEY_get0_EC_KEY = 0
-+	_mkcgo_EVP_PKEY_get1_RSA = 0
-+	_mkcgo_EVP_PKEY_get_bits = 0
-+	_mkcgo_EVP_PKEY_get_size = 0
-+	_mkcgo_EVP_PKEY_set1_EC_KEY = 0
-+	_mkcgo_FIPS_mode = 0
-+	_mkcgo_FIPS_mode_set = 0
-+	_mkcgo_HMAC_CTX_copy = 0
-+	_mkcgo_HMAC_CTX_free = 0
-+	_mkcgo_HMAC_CTX_new = 0
-+	_mkcgo_HMAC_Final = 0
-+	_mkcgo_HMAC_Init_ex = 0
-+	_mkcgo_HMAC_Update = 0
-+	_mkcgo_RSA_free = 0
-+	_mkcgo_RSA_get0_crt_params = 0
-+	_mkcgo_RSA_get0_factors = 0
-+	_mkcgo_RSA_get0_key = 0
-+	_mkcgo_RSA_new = 0
-+	_mkcgo_RSA_set0_crt_params = 0
-+	_mkcgo_RSA_set0_factors = 0
-+	_mkcgo_RSA_set0_key = 0
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_1024, dk[:], encapsulationKeySizeMLKEM1024)
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], ekBytes)
++	return ek
 +}
 +
-+func MkcgoLoad_version(handle unsafe.Pointer) {
-+	_mkcgo_OPENSSL_version_major = dlsym(handle, "OPENSSL_version_major\x00", true)
-+	_mkcgo_OPENSSL_version_minor = dlsym(handle, "OPENSSL_version_minor\x00", true)
-+	_mkcgo_OPENSSL_version_patch = dlsym(handle, "OPENSSL_version_patch\x00", true)
-+	_mkcgo_OpenSSL_version_num = dlsym(handle, "OpenSSL_version_num\x00", true)
++// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
++type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
++
++// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
++		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], encapsulationKey)
++	return ek, nil
 +}
 +
-+func MkcgoUnload_version() {
-+	_mkcgo_OPENSSL_version_major = 0
-+	_mkcgo_OPENSSL_version_minor = 0
-+	_mkcgo_OPENSSL_version_patch = 0
-+	_mkcgo_OpenSSL_version_num = 0
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	return performEncapsulation(ossl.NID_ML_KEM_1024, ciphertextSizeMLKEM1024, ek[:])
++}
++
++// Helper functions
++
++// generateMLKEMSeed generates a new ML-KEM seed by creating a key and extracting its seed parameter.
++func generateMLKEMSeed(keyType int32, seed []byte) error {
++	pkey, err := generateEVPPKey(keyType, 0, "")
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_KEM_SEED.ptr(), base(seed), seedSizeMLKEM, nil)
++	return err
++}
++
++// createMLKEMPrivateKey creates an ML-KEM private key from a seed
++func createMLKEMPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
++	if len(seed) != seedSizeMLKEM {
++		return nil, errors.New("mlkem: invalid seed size")
++	}
++
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
++	}
++	defer bld.finalize()
++
++	bld.addOctetString(_OSSL_PKEY_PARAM_ML_KEM_SEED, seed)
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
++}
++
++// createMLKEMPublicKey creates an ML-KEM public key from encoded bytes.
++func createMLKEMPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
++	bld, err := newParamBuilder()
++	if err != nil {
++		return nil, err
++	}
++	defer bld.finalize()
++
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
++}
++
++// extractEncapsulationKeyBytes extracts the encapsulation key bytes from a decapsulation key.
++func extractEncapsulationKeyBytes(id int32, seed []byte, expectedSize int) []byte {
++	pkey, err := createMLKEMPrivateKey(id, seed)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	// Extract public key bytes
++	var pubBytes *byte
++	pubLen, err := ossl.EVP_PKEY_get1_encoded_public_key(pkey, &pubBytes)
++	if err != nil {
++		panic(err)
++	}
++	defer cryptoFree(unsafe.Pointer(pubBytes))
++
++	if pubLen != expectedSize {
++		panic(errors.New("mlkem: invalid encapsulation key size"))
++	}
++
++	// Copy the bytes before pubBytes is freed
++	result := make([]byte, pubLen)
++	copy(result, unsafe.Slice(pubBytes, pubLen))
++	return result
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..b03b43d33e6f4f
+index 00000000000000..a39b424f708047
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,363 @@
+@@ -0,0 +1,355 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -15961,7 +16529,6 @@ index 00000000000000..b03b43d33e6f4f
 +			// Try to load the built-in provider associated with the given mode.
 +			if p, _ := ossl.OSSL_PROVIDER_try_load(nil, provName.ptr(), 1); p == nil {
 +				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
-+				ossl.ERR_clear_error()
 +				return errors.New("openssl: FIPS mode not supported by any provider")
 +			}
 +		}
@@ -15977,7 +16544,6 @@ index 00000000000000..b03b43d33e6f4f
 +func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
 +	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
 +	if md == nil {
-+		ossl.ERR_clear_error()
 +		return nil
 +	}
 +	defer ossl.EVP_MD_free(md)
@@ -16001,12 +16567,6 @@ index 00000000000000..b03b43d33e6f4f
 +	return unsafe.SliceData(b)
 +}
 +
-+// pbaseNeverEmpty returns the address of the underlying array in b.
-+// If b has zero length, it returns a pointer to a zero byte.
-+func pbaseNeverEmpty(b []byte) unsafe.Pointer {
-+	return unsafe.Pointer(baseNeverEmpty(b))
-+}
-+
 +// pbase returns the address of the underlying array in b,
 +// being careful not to panic when b has zero length.
 +func pbase(b []byte) unsafe.Pointer {
@@ -17503,7 +18063,7 @@ index 00000000000000..59e3eb5acc07f8
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..f28cebc2b944cf
+index 00000000000000..75c564020da8cc
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 @@ -0,0 +1,158 @@
@@ -17544,7 +18104,7 @@ index 00000000000000..f28cebc2b944cf
 +		// that the caller wants to use TLS 1.0/1.1 PRF.
 +		// OpenSSL detects this case by checking if the hash
 +		// function is MD5SHA1.
-+		md = loadHash(crypto.MD5SHA1).md
++		md = loadHash(crypto.MD5SHA1, false).md
 +	} else {
 +		h, err := hashFuncHash(fh)
 +		if err != nil {
@@ -30095,12 +30655,12 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..b6edaa1ef99e5b 100644
+index f1e33686ed0626..ffa33da0b9cfc2 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251022081620-9829563a3fa3
-+## explicit; go 1.23
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831
++## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 151c1d4cfa2..3202f4d58e9 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -19,7 +19,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 249 ++++++++++++
+ src/cmd/go/systemcrypto_test.go               | 249 +++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -30,12 +30,12 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 345 ++++++++++++++++
- src/crypto/internal/backend/common.go         |  46 +++
- src/crypto/internal/backend/darwin_darwin.go  | 372 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 423 ++++++++++++++++++
+ src/crypto/internal/backend/common.go         |  46 ++
+ src/crypto/internal/backend/darwin_darwin.go  | 410 +++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
- .../internal/backend/fips140/fips140.go       |  70 ++++
+ .../internal/backend/fips140/fips140.go       |  70 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
@@ -44,18 +44,18 @@ desired goexperiments and build tags.
  .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
- .../internal/opensslsetup/opensslsetup.go     |  68 ++++
- .../opensslsetup/opensslsetup_test.go         |  92 +++++
+ .../internal/opensslsetup/opensslsetup.go     |  68 +++
+ .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 251 ++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 332 ++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 329 ++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 370 +++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2419 insertions(+), 21 deletions(-)
+ 46 files changed, 2651 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -767,7 +767,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index c5aa91ba4732e7..9e838fa785af46 100644
+index 30e66c428dc470..ed061d7fbf4684 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -964,10 +964,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..c5bffa7b6c3949
+index 00000000000000..a3d008a30d1f9d
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,345 @@
+@@ -0,0 +1,423 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1313,6 +1313,84 @@ index 00000000000000..c5bffa7b6c3949
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
 +	return cng.VerifyDSA(pub, hashed, r, s)
 +}
++
++func SupportsMLKEM768() bool {
++	return false
++}
++
++func SupportsMLKEM1024() bool {
++	return false
++}
++
++type DecapsulationKeyMLKEM768 struct{}
++type EncapsulationKeyMLKEM768 struct{}
++
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	panic("cngcrypto: not available")
++}
++
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	panic("cngcrypto: not available")
++}
++
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	panic("cngcrypto: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cngcrypto: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cngcrypto: not available")
++}
++
++type DecapsulationKeyMLKEM1024 struct{}
++type EncapsulationKeyMLKEM1024 struct{}
++
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	panic("cngcrypto: not available")
++}
++
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	panic("cngcrypto: not available")
++}
++
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cngcrypto: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	panic("cngcrypto: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cngcrypto: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cngcrypto: not available")
++}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
 index 00000000000000..a9682181ffa154
@@ -1367,10 +1445,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..aeed096c193d9f
+index 00000000000000..2c3cf0641bda06
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,372 @@
+@@ -0,0 +1,410 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1743,6 +1821,44 @@ index 00000000000000..aeed096c193d9f
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsMLKEM768() bool {
++	return xcrypto.SupportsMLKEM()
++}
++
++func SupportsMLKEM1024() bool {
++	return xcrypto.SupportsMLKEM()
++}
++
++type DecapsulationKeyMLKEM768 = xcrypto.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = xcrypto.EncapsulationKeyMLKEM768
++
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	return xcrypto.GenerateKeyMLKEM768()
++}
++
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	return xcrypto.NewDecapsulationKeyMLKEM768(seed)
++}
++
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	return xcrypto.NewEncapsulationKeyMLKEM768(encapsulationKey)
++}
++
++type DecapsulationKeyMLKEM1024 = xcrypto.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = xcrypto.EncapsulationKeyMLKEM1024
++
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	return xcrypto.GenerateKeyMLKEM1024()
++}
++
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	return xcrypto.NewDecapsulationKeyMLKEM1024(seed)
++}
++
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	return xcrypto.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
 index 00000000000000..e4a1ddeeb7dc09
@@ -2257,10 +2373,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..fbd649dd105b8b
+index 00000000000000..8907222b9265fe
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,251 @@
+@@ -0,0 +1,329 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2512,12 +2628,90 @@ index 00000000000000..fbd649dd105b8b
 +func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsMLKEM768() bool {
++	panic("cryptobackend: not available")
++}
++
++func SupportsMLKEM1024() bool {
++	panic("cryptobackend: not available")
++}
++
++type DecapsulationKeyMLKEM768 struct{}
++type EncapsulationKeyMLKEM768 struct{}
++
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cryptobackend: not available")
++}
++
++type DecapsulationKeyMLKEM1024 struct{}
++type EncapsulationKeyMLKEM1024 struct{}
++
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	panic("cryptobackend: not available")
++}
++
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cryptobackend: not available")
++}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..882b1e5340a570
+index 00000000000000..a2154fe10d06af
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,332 @@
+@@ -0,0 +1,370 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2850,6 +3044,44 @@ index 00000000000000..882b1e5340a570
 +
 +	return openssl.VerifyDSA(pub, hashed, sig)
 +}
++
++func SupportsMLKEM768() bool {
++	return openssl.SupportsMLKEM768()
++}
++
++func SupportsMLKEM1024() bool {
++	return openssl.SupportsMLKEM1024()
++}
++
++type DecapsulationKeyMLKEM768 = openssl.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = openssl.EncapsulationKeyMLKEM768
++
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	return openssl.GenerateKeyMLKEM768()
++}
++
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	return openssl.NewDecapsulationKeyMLKEM768(seed)
++}
++
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	return openssl.NewEncapsulationKeyMLKEM768(encapsulationKey)
++}
++
++type DecapsulationKeyMLKEM1024 = openssl.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = openssl.EncapsulationKeyMLKEM1024
++
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	return openssl.GenerateKeyMLKEM1024()
++}
++
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	return openssl.NewDecapsulationKeyMLKEM1024(seed)
++}
++
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	return openssl.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++}
 diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
 new file mode 100644
 index 00000000000000..5e4b436554d44d
@@ -2888,7 +3120,7 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 373efd8319c675..1f245d570092a3 100644
+index 6a8dbe7e3712a3..f3980616aabac1 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -355,7 +355,7 @@ var depsRules = `
@@ -2900,7 +3132,7 @@ index 373efd8319c675..1f245d570092a3 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -549,6 +549,11 @@ var depsRules = `
+@@ -552,6 +552,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -2912,7 +3144,7 @@ index 373efd8319c675..1f245d570092a3 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -557,16 +562,27 @@ var depsRules = `
+@@ -560,16 +565,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2942,7 +3174,7 @@ index 373efd8319c675..1f245d570092a3 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -590,8 +606,14 @@ var depsRules = `
+@@ -593,8 +609,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 9d1c34edf95..a013e5f5024 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -47,6 +47,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
+ src/crypto/mlkem/mlkem.go                     | 113 ++++++++--
+ src/crypto/mlkem/mlkem_test.go                |   8 +
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
@@ -92,7 +94,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 88 files changed, 1159 insertions(+), 119 deletions(-)
+ 90 files changed, 1266 insertions(+), 133 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -118,7 +120,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index c4b80436db2e85..0e0ab5842c5a0b 100644
+index cbf0d77c4d19f0..3fe232b4b07bfb 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -130,7 +132,7 @@ index c4b80436db2e85..0e0ab5842c5a0b 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1374,12 +1374,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1371,12 +1371,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -1535,6 +1537,307 @@ index 403ff2881f4b68..5417556a86700e 100644
  }
  
  func maybeCloner(h hash.Hash) any {
+diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
+index 69c0bc571f95a9..f56ce4401c9a9d 100644
+--- a/src/crypto/mlkem/mlkem.go
++++ b/src/crypto/mlkem/mlkem.go
+@@ -11,7 +11,10 @@
+ // [NIST FIPS 203]: https://doi.org/10.6028/NIST.FIPS.203
+ package mlkem
+ 
+-import "crypto/internal/fips140/mlkem"
++import (
++	boring "crypto/internal/backend"
++	"crypto/internal/fips140/mlkem"
++)
+ 
+ const (
+ 	// SharedKeySize is the size of a shared key produced by ML-KEM.
+@@ -33,38 +36,58 @@ const (
+ 	EncapsulationKeySize1024 = 1568
+ )
+ 
+-// DecapsulationKey768 is the secret key used to decapsulate a shared key
++// A DecapsulationKey768 is the secret key used to decapsulate a shared key
+ // from a ciphertext. It includes various precomputed values.
+ type DecapsulationKey768 struct {
+-	key *mlkem.DecapsulationKey768
++	key       *mlkem.DecapsulationKey768
++	boringKey boring.DecapsulationKeyMLKEM768
+ }
+ 
+ // GenerateKey768 generates a new decapsulation key, drawing random bytes from
+ // the default crypto/rand source. The decapsulation key must be kept secret.
+ func GenerateKey768() (*DecapsulationKey768, error) {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		key, err := boring.GenerateKeyMLKEM768()
++		if err != nil {
++			return nil, err
++		}
++		return &DecapsulationKey768{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.GenerateKey768()
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &DecapsulationKey768{key}, nil
++	return &DecapsulationKey768{key: key}, nil
+ }
+ 
+ // NewDecapsulationKey768 expands a decapsulation key from a 64-byte seed in the
+ // "d || z" form. The seed must be uniformly random.
+ func NewDecapsulationKey768(seed []byte) (*DecapsulationKey768, error) {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		key, err := boring.NewDecapsulationKeyMLKEM768(seed)
++		if err != nil {
++			return nil, err
++		}
++		return &DecapsulationKey768{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.NewDecapsulationKey768(seed)
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &DecapsulationKey768{key}, nil
++	return &DecapsulationKey768{key: key}, nil
+ }
+ 
+ // Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
+ //
+ // The decapsulation key must be kept secret.
+ func (dk *DecapsulationKey768) Bytes() []byte {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		return dk.boringKey.Bytes()
++	}
+ 	return dk.key.Bytes()
+ }
+ 
+@@ -73,34 +96,52 @@ func (dk *DecapsulationKey768) Bytes() []byte {
+ //
+ // The shared key must be kept secret.
+ func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		return dk.boringKey.Decapsulate(ciphertext)
++	}
+ 	return dk.key.Decapsulate(ciphertext)
+ }
+ 
+ // EncapsulationKey returns the public encapsulation key necessary to produce
+ // ciphertexts.
+ func (dk *DecapsulationKey768) EncapsulationKey() *EncapsulationKey768 {
+-	return &EncapsulationKey768{dk.key.EncapsulationKey()}
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		return &EncapsulationKey768{boringKey: dk.boringKey.EncapsulationKey()}
++	}
++	return &EncapsulationKey768{key: dk.key.EncapsulationKey()}
+ }
+ 
+ // An EncapsulationKey768 is the public key used to produce ciphertexts to be
+ // decapsulated by the corresponding DecapsulationKey768.
+ type EncapsulationKey768 struct {
+-	key *mlkem.EncapsulationKey768
++	key       *mlkem.EncapsulationKey768
++	boringKey boring.EncapsulationKeyMLKEM768
+ }
+ 
+ // NewEncapsulationKey768 parses an encapsulation key from its encoded form. If
+ // the encapsulation key is not valid, NewEncapsulationKey768 returns an error.
+ func NewEncapsulationKey768(encapsulationKey []byte) (*EncapsulationKey768, error) {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		key, err := boring.NewEncapsulationKeyMLKEM768(encapsulationKey)
++		if err != nil {
++			return nil, err
++		}
++		return &EncapsulationKey768{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.NewEncapsulationKey768(encapsulationKey)
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &EncapsulationKey768{key}, nil
++	return &EncapsulationKey768{key: key}, nil
+ }
+ 
+ // Bytes returns the encapsulation key as a byte slice.
+ func (ek *EncapsulationKey768) Bytes() []byte {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		return ek.boringKey.Bytes()
++	}
+ 	return ek.key.Bytes()
+ }
+ 
+@@ -109,41 +150,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+ //
+ // The shared key must be kept secret.
+ func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
++	if boring.Enabled && boring.SupportsMLKEM768() {
++		return ek.boringKey.Encapsulate()
++	}
+ 	return ek.key.Encapsulate()
+ }
+ 
+ // DecapsulationKey1024 is the secret key used to decapsulate a shared key
+ // from a ciphertext. It includes various precomputed values.
+ type DecapsulationKey1024 struct {
+-	key *mlkem.DecapsulationKey1024
++	key       *mlkem.DecapsulationKey1024
++	boringKey boring.DecapsulationKeyMLKEM1024
+ }
+ 
+ // GenerateKey1024 generates a new decapsulation key, drawing random bytes from
+ // the default crypto/rand source. The decapsulation key must be kept secret.
+ func GenerateKey1024() (*DecapsulationKey1024, error) {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		key, err := boring.GenerateKeyMLKEM1024()
++		if err != nil {
++			return nil, err
++		}
++		return &DecapsulationKey1024{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.GenerateKey1024()
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &DecapsulationKey1024{key}, nil
++	return &DecapsulationKey1024{key: key}, nil
+ }
+ 
+ // NewDecapsulationKey1024 expands a decapsulation key from a 64-byte seed in the
+ // "d || z" form. The seed must be uniformly random.
+ func NewDecapsulationKey1024(seed []byte) (*DecapsulationKey1024, error) {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		key, err := boring.NewDecapsulationKeyMLKEM1024(seed)
++		if err != nil {
++			return nil, err
++		}
++		return &DecapsulationKey1024{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.NewDecapsulationKey1024(seed)
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &DecapsulationKey1024{key}, nil
++	return &DecapsulationKey1024{key: key}, nil
+ }
+ 
+ // Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
+ //
+ // The decapsulation key must be kept secret.
+ func (dk *DecapsulationKey1024) Bytes() []byte {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		return dk.boringKey.Bytes()
++	}
+ 	return dk.key.Bytes()
+ }
+ 
+@@ -152,34 +216,52 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+ //
+ // The shared key must be kept secret.
+ func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		return dk.boringKey.Decapsulate(ciphertext)
++	}
+ 	return dk.key.Decapsulate(ciphertext)
+ }
+ 
+ // EncapsulationKey returns the public encapsulation key necessary to produce
+ // ciphertexts.
+ func (dk *DecapsulationKey1024) EncapsulationKey() *EncapsulationKey1024 {
+-	return &EncapsulationKey1024{dk.key.EncapsulationKey()}
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		return &EncapsulationKey1024{boringKey: dk.boringKey.EncapsulationKey()}
++	}
++	return &EncapsulationKey1024{key: dk.key.EncapsulationKey()}
+ }
+ 
+ // An EncapsulationKey1024 is the public key used to produce ciphertexts to be
+ // decapsulated by the corresponding DecapsulationKey1024.
+ type EncapsulationKey1024 struct {
+-	key *mlkem.EncapsulationKey1024
++	key       *mlkem.EncapsulationKey1024
++	boringKey boring.EncapsulationKeyMLKEM1024
+ }
+ 
+ // NewEncapsulationKey1024 parses an encapsulation key from its encoded form. If
+ // the encapsulation key is not valid, NewEncapsulationKey1024 returns an error.
+ func NewEncapsulationKey1024(encapsulationKey []byte) (*EncapsulationKey1024, error) {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		key, err := boring.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++		if err != nil {
++			return nil, err
++		}
++		return &EncapsulationKey1024{boringKey: key}, nil
++	}
++
+ 	key, err := mlkem.NewEncapsulationKey1024(encapsulationKey)
+ 	if err != nil {
+ 		return nil, err
+ 	}
+ 
+-	return &EncapsulationKey1024{key}, nil
++	return &EncapsulationKey1024{key: key}, nil
+ }
+ 
+ // Bytes returns the encapsulation key as a byte slice.
+ func (ek *EncapsulationKey1024) Bytes() []byte {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		return ek.boringKey.Bytes()
++	}
+ 	return ek.key.Bytes()
+ }
+ 
+@@ -188,5 +270,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+ //
+ // The shared key must be kept secret.
+ func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	if boring.Enabled && boring.SupportsMLKEM1024() {
++		return ek.boringKey.Encapsulate()
++	}
+ 	return ek.key.Encapsulate()
+ }
+diff --git a/src/crypto/mlkem/mlkem_test.go b/src/crypto/mlkem/mlkem_test.go
+index 207d6d48c3cb0b..410387661e9545 100644
+--- a/src/crypto/mlkem/mlkem_test.go
++++ b/src/crypto/mlkem/mlkem_test.go
+@@ -6,6 +6,7 @@ package mlkem
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/mlkem"
+ 	"crypto/internal/fips140/sha3"
+ 	"crypto/rand"
+@@ -162,6 +163,10 @@ var millionFlag = flag.Bool("million", false, "run the million vector test")
+ // TestAccumulated accumulates 10k (or 100, or 1M) random vectors and checks the
+ // hash of the result, to avoid checking in 150MB of test vectors.
+ func TestAccumulated(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("skipping TestAccumulated with backend enabled (EncapsulateInternal not available)")
++	}
++
+ 	n := 10000
+ 	expected := "8a518cc63da366322a8e7a818c7a0d63483cb3528d34a4cf42f35d5ad73f22fc"
+ 	if testing.Short() {
+@@ -229,6 +234,9 @@ func BenchmarkKeyGen(b *testing.B) {
+ }
+ 
+ func BenchmarkEncaps(b *testing.B) {
++	if boring.Enabled {
++		b.Skip("skipping BenchmarkEncaps with backend enabled (EncapsulateInternal not available)")
++	}
+ 	seed := make([]byte, SeedSize)
+ 	rand.Read(seed)
+ 	var m [32]byte
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
 index 01fd12e40e341e..38ffac92a36221 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
@@ -2936,10 +3239,10 @@ index 17e7aaf897ab56..569346899ba445 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 1f245d570092a3..b3d1383b925161 100644
+index f3980616aabac1..66786f37264a83 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -526,7 +526,7 @@ var depsRules = `
+@@ -529,7 +529,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -2948,7 +3251,7 @@ index 1f245d570092a3..b3d1383b925161 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -554,6 +554,8 @@ var depsRules = `
+@@ -557,6 +557,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -2957,7 +3260,7 @@ index 1f245d570092a3..b3d1383b925161 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -596,6 +598,7 @@ var depsRules = `
+@@ -599,6 +601,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From d437002ee39d72e2ee64dc1c6eb368350ab4d713 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 5 Nov 2025 09:39:50 +0100
Subject: [PATCH 547/887] upgrade telemetry/config module (#1940)

---
 .../0001-Vendor-external-dependencies.patch   | 25 +++++++++++--------
 1 file changed, 14 insertions(+), 11 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 240a4eb99bf..95726771cc0 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -15,7 +15,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-infra/telemetry/README.md    |    7 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   70 +
+ .../go-infra/telemetry/config/config.json     |   73 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
  .../telemetry/internal/appinsights/client.go  |  169 ++
@@ -209,7 +209,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 201 files changed, 27619 insertions(+), 7 deletions(-)
+ 201 files changed, 27622 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -405,7 +405,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 42d510c34fe6b4..27b61b99bb2213 100644
+index 42d510c34fe6b4..7fd4153f448200 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -413,12 +413,12 @@ index 42d510c34fe6b4..27b61b99bb2213 100644
  require (
  	github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
  	golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.29.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 0a09e6e401a926..f5e10cb6329699 100644
+index 0a09e6e401a926..1e2286021ae3a2 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -427,8 +427,8 @@ index 0a09e6e401a926..f5e10cb6329699 100644
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57 h1:+EIywWbZ+Onkl/aUE0vf5nSFy5NV0OPcd/4dJQKLaMg=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457 h1:VcZzhgedVcPpE+O7y5uAwavh0RxtuugUZgSXRoRpvQI=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938 h1:VJ182b/ajNehMFRltVfCh/FR0jAH+QX6hs9zqYod/mU=
@@ -541,10 +541,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..b4d1b3712f0f10
+index 00000000000000..52a9687f323fb8
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,70 @@
+@@ -0,0 +1,73 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -610,6 +610,9 @@ index 00000000000000..b4d1b3712f0f10
 +				},
 +				{
 +					"Name": "go/platform/target/goarch:{386,amd64,amd64p32,arm,arm64,arm64be,armbe,loong64,mips,mips64,mips64le,mips64p32,mips64p32le,mipsle,ppc,ppc64,ppc64le,riscv,riscv64,s390,s390x,sparc,sparc64,wasm}"
++				},
++				{
++					"Name": "go/cgo:{enabled,disabled}"
 +				}
 +			]
 +		}
@@ -2011,7 +2014,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index e92804a90d3f59..c20eed57b641e3 100644
+index e92804a90d3f59..16ee1b9770d2e4 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2026,7 +2029,7 @@ index e92804a90d3f59..c20eed57b641e3 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20250917073240-06691d690b57
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938

From 708aad860abbc1468be53df8e297eeeafa93e331 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 5 Nov 2025 13:22:56 +0000
Subject: [PATCH 548/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#1941)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.7-0.20250217095817-3d02b2f77127 to 0.0.7.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/commits/v0.0.7)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  5 ++++-
 eng/_util/go.sum | 18 ++++++++++++++----
 2 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index db726b541e6..d13165859b6 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,14 +8,17 @@ go 1.24.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
-	github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127
+	github.com/microsoft/go-infra v0.0.7
 	github.com/microsoft/go-infra/goinstallscript v1.0.0
 	golang.org/x/net v0.46.0
 	golang.org/x/sys v0.37.0
 )
 
 require (
+	github.com/google/go-github/v65 v65.0.0 // indirect
+	github.com/google/go-querystring v1.1.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
+	golang.org/x/oauth2 v0.32.0 // indirect
 	golang.org/x/text v0.30.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index d53ccd4f10d..339fe51a7b4 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -2,20 +2,30 @@ github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
 github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
 github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
+github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-github/v65 v65.0.0 h1:pQ7BmO3DZivvFk92geC0jB0q2m3gyn8vnYPgV7GSLhQ=
+github.com/google/go-github/v65 v65.0.0/go.mod h1:DvrqWo5hvsdhJvHd4WyVF9ttANN3BniqjP8uTFMNb60=
+github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
+github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127 h1:nb0pU3pHQUqiP0Msa0Ie9gcEt0rYArLZgBi9gHGQhv4=
-github.com/microsoft/go-infra v0.0.7-0.20250217095817-3d02b2f77127/go.mod h1:TYHdrIvfN+aAbpD0KYTK7zUMHu/HjOr3FSjpLtuLA2k=
+github.com/microsoft/go-infra v0.0.7 h1:wl67HhAGlGn6mnFGNFch4F49AC4CN1FQxYiduI4DQbE=
+github.com/microsoft/go-infra v0.0.7/go.mod h1:IOooBUtSykqU41l41GzZx7/VLmzm1zVQ5IQ/1YpyH+k=
 github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
 github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
+golang.org/x/oauth2 v0.32.0 h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY=
+golang.org/x/oauth2 v0.32.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
 golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
 golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
-golang.org/x/tools v0.37.0 h1:DVSRzp7FwePZW356yEAChSdNcQo6Nsp+fex1SUW09lE=
-golang.org/x/tools v0.37.0/go.mod h1:MBN5QPQtLMHVdvsbtarmTNukZDdgwdwlO5qGacAzF0w=
+golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
+golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

From 6d28693e46297df55335071174c7f9f9eea1ab06 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 5 Nov 2025 16:11:30 +0000
Subject: [PATCH 549/887] Update submodule to latest master (9f3a108e): os:
 ignore O_TRUNC errors on named pipes and terminal devices on Windows

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 00ee1860ce8..9f3a108ee0d 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 00ee1860ce877ec9e2e323d7e48dee083e0902bd
+Subproject commit 9f3a108ee0d2f08b4994c4201e54e5a53acbc216

From e30d73b3cfd45f9214de0ac311d85ba5f8711d85 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 6 Nov 2025 09:15:53 +0000
Subject: [PATCH 550/887] implement support for sha3 (#1939)

* implement support for sha3

* fix implementation

* add note about Windows version
---
 eng/doc/CrossPlatformCryptography.md          |  46 +-
 .../0001-Vendor-external-dependencies.patch   | 852 +++++++-----------
 ...03-Implement-crypto-internal-backend.patch | 150 ++-
 patches/0004-Use-crypto-backends.patch        | 225 ++++-
 4 files changed, 688 insertions(+), 585 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 995e2a13c9d..a663db9e7e2 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -55,31 +55,37 @@ This section includes the following packages:
 - [crypto/sha3](https://pkg.go.dev/golang.org/x/crypto/sha3)
 - [crypto/hmac](https://pkg.go.dev/crypto/hmac)
 
-| Algorithm        | Windows | Linux             | macOS |
-| ---------------- | ------- | ----------------- | ----- |
-| MD5              | ✔️      | ✔️                | ✔️    |
-| SHA-1            | ✔️      | ✔️                | ✔️    |
-| SHA-2-224        | ❌      | ✔️                | ✔️    |
-| SHA-2-256        | ✔️      | ✔️                | ✔️    |
-| SHA-2-384        | ✔️      | ✔️                | ✔️    |
-| SHA-2-512        | ✔️      | ✔️                | ✔️    |
-| SHA-2-512_224    | ❌      | ✔️<sup>1, 2</sup> | ❌    |
-| SHA-2-512_256    | ❌      | ✔️<sup>1, 2</sup> | ❌    |
-| SHA-3-224        | ❌      | ❌                | ❌    |
-| SHA-3-256        | ❌      | ❌                | ❌    |
-| SHA-3-384        | ❌      | ❌                | ❌    |
-| SHA-3-512        | ❌      | ❌                | ❌    |
-| SHAKE-128        | ❌      | ❌                | ❌    |
-| SHAKE-256        | ❌      | ❌                | ❌    |
-| CSHAKE-128       | ❌      | ❌                | ❌    |
-| CSHAKE-256       | ❌      | ❌                | ❌    |
-| HMAC<sup>3</sup> | ✔️      | ✔️                | ✔️    |
+| Algorithm              | Windows         | Linux             | macOS           |
+| ---------------------- | --------------- | ----------------- | --------------- |
+| MD5                    | ✔️              | ✔️                | ✔️              |
+| SHA-1                  | ✔️              | ✔️                | ✔️              |
+| SHA-2-224              | ❌              | ✔️                | ✔️              |
+| SHA-2-256              | ✔️              | ✔️                | ✔️              |
+| SHA-2-384              | ✔️              | ✔️                | ✔️              |
+| SHA-2-512              | ✔️              | ✔️                | ✔️              |
+| SHA-2-512_224          | ❌              | ✔️<sup>1, 2</sup> | ❌              |
+| SHA-2-512_256          | ❌              | ✔️<sup>1, 2</sup> | ❌              |
+| SHA-3-224 <sup>3</sup> | ❌              | ✔️ <sup>2</sup>   | ❌              |
+| SHA-3-256 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
+| SHA-3-384 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
+| SHA-3-512 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
+| SHAKE-128              | ❌              | ❌                | ❌              |
+| SHAKE-256              | ❌              | ❌                | ❌              |
+| CSHAKE-128             | ❌              | ❌                | ❌              |
+| CSHAKE-256             | ❌              | ❌                | ❌              |
+| HMAC<sup>6</sup>       | ✔️              | ✔️                | ✔️              |
 
 <sup>1</sup>Available starting in the Microsoft build of Go 1.24.
 
 <sup>2</sup>Requires OpenSSL 1.1.1 or later.
 
-<sup>3</sup>Supports only hash algorithms that are supported as standalone hash functions.
+<sup>3</sup>Available starting in the Microsoft build of Go 1.26.
+
+<sup>4</sup>Available in Windows 11, version 24H2 or later.
+
+<sup>5</sup>Available starting in macOS 26 (Tahoe).
+
+<sup>6</sup>Supports only hash algorithms that are supported as standalone hash functions.
 
 ## Symmetric encryption
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 95726771cc0..3ee0ae6ba1e 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -53,7 +53,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
  .../golang-fips/openssl/v2/ed25519.go         |  228 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  598 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  457 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  443 ++++
@@ -95,9 +95,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/ossl_cgo.go      |   39 +
- .../openssl/v2/internal/ossl/ossl_nocgo.go    |   34 +
- .../openssl/v2/internal/ossl/shims.h          |  424 +++
+ .../openssl/v2/internal/ossl/shims.h          |  423 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
@@ -105,12 +103,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 2015 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2006 ++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         |   62 +
- .../openssl/v2/internal/ossl/zossl.h          |  351 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1334 ++++++++++
- .../v2/internal/ossl/zossl_cgo_go124.go       |   39 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2345 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.h          |  350 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1328 ++++++++++
+ .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2335 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
  .../golang-fips/openssl/v2/openssl.go         |  355 +++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
@@ -169,13 +167,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/ecdh.go          |  135 +
  .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
  .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
- .../microsoft/go-crypto-darwin/xcrypto/evp.go |  341 +++
+ .../microsoft/go-crypto-darwin/xcrypto/evp.go |  339 +++
  .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
- .../go-crypto-darwin/xcrypto/hash.go          |  325 +++
+ .../go-crypto-darwin/xcrypto/hash.go          |  320 +++
  .../go-crypto-darwin/xcrypto/hashclone.go     |   17 +
  .../xcrypto/hashclone_go125.go                |   12 +
  .../go-crypto-darwin/xcrypto/hkdf.go          |   98 +
- .../go-crypto-darwin/xcrypto/hmac.go          |  121 +
+ .../go-crypto-darwin/xcrypto/hmac.go          |  119 +
  .../go-crypto-darwin/xcrypto/mlkem.go         |  261 ++
  .../go-crypto-darwin/xcrypto/pbkdf2.go        |   68 +
  .../go-crypto-darwin/xcrypto/rand.go          |   28 +
@@ -186,22 +184,22 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
- .../microsoft/go-crypto-winnative/cng/cng.go  |  131 +
+ .../microsoft/go-crypto-winnative/cng/cng.go  |  140 +
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  325 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  327 +++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
- .../microsoft/go-crypto-winnative/cng/hmac.go |   68 +
+ .../microsoft/go-crypto-winnative/cng/hmac.go |   70 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
- .../microsoft/go-crypto-winnative/cng/sha3.go |  310 +++
+ .../microsoft/go-crypto-winnative/cng/sha3.go |  203 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
  .../internal/bcrypt/bcrypt_windows.go         |  368 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
@@ -209,7 +207,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 201 files changed, 27622 insertions(+), 7 deletions(-)
+ 199 files changed, 27462 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -290,8 +288,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
@@ -2064,7 +2060,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..3f3be8e50aff40 100644
+index c5e901b9ef22e8..4f68035a87dab7 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2073,21 +2069,21 @@ index c5e901b9ef22e8..3f3be8e50aff40 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..a19b1e85cd832a 100644
+index 4a52682161fc23..85f3b5ff59025e 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831 h1:JuZk8IXPBBvaq7JCk6c/ZmxLrJTbfxL2ymcccd7IxYY=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946 h1:lsW0BjPRXBduOU1SNpSy9OKReDEEXFnqkjmYZBIxRdg=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173 h1:Dro+lH95siHfrTlCNZOR2ySBdxHJbmi8awkgi3FGmzY=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc h1:YIo5pgGXuGJ0xwd8/IQRZIOLofrlnPLjSyMloeTRLlk=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63 h1:7Z5bSr2MzWPoASu3XODe/kAgr1Yhx5wA+giZWIFL9a8=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4 h1:w1En0lvCsQ+H17nOf/TaBxTRhxMkN4AjUT5glfUs58k=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
@@ -4560,7 +4556,7 @@ index 00000000000000..d160bbe220c927
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..45aa39d010d83f
+index 00000000000000..db9646c846cc9c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 @@ -0,0 +1,598 @@
@@ -4608,7 +4604,7 @@ index 00000000000000..45aa39d010d83f
 +
 +// hashToMD converts a hash.Hash implementation from this package to a GOossl.EVP_MD_PTR.
 +func hashToMD(h hash.Hash) ossl.EVP_MD_PTR {
-+	if h, ok := h.(*evpHash); ok {
++	if h, ok := h.(*Hash); ok {
 +		return h.alg.md
 +	}
 +	return nil
@@ -5164,10 +5160,10 @@ index 00000000000000..45aa39d010d83f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..b5fb1bc7db6369
+index 00000000000000..203cc9a8020212
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,457 @@
+@@ -0,0 +1,502 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -5204,7 +5200,7 @@ index 00000000000000..b5fb1bc7db6369
 +const maxHashSize = 64
 +
 +func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
-+	_, err := ossl.EVP_Digest(p, base(sum), nil, loadHash(ch, true).md, nil)
++	_, err := ossl.EVP_Digest(p, sum, nil, loadHash(ch, true).md, nil)
 +	return err == nil
 +}
 +
@@ -5297,28 +5293,28 @@ index 00000000000000..b5fb1bc7db6369
 +	return supported
 +}
 +
-+func SHA3_224(p []byte) (sum [28]byte) {
++func SumSHA3_224(p []byte) (sum [28]byte) {
 +	if !hashOneShot(crypto.SHA3_224, p, sum[:]) {
 +		panic("openssl: SHA3_224 failed")
 +	}
 +	return
 +}
 +
-+func SHA3_256(p []byte) (sum [32]byte) {
++func SumSHA3_256(p []byte) (sum [32]byte) {
 +	if !hashOneShot(crypto.SHA3_256, p, sum[:]) {
 +		panic("openssl: SHA3_256 failed")
 +	}
 +	return
 +}
 +
-+func SHA3_384(p []byte) (sum [48]byte) {
++func SumSHA3_384(p []byte) (sum [48]byte) {
 +	if !hashOneShot(crypto.SHA3_384, p, sum[:]) {
 +		panic("openssl: SHA3_384 failed")
 +	}
 +	return
 +}
 +
-+func SHA3_512(p []byte) (sum [64]byte) {
++func SumSHA3_512(p []byte) (sum [64]byte) {
 +	if !hashOneShot(crypto.SHA3_512, p, sum[:]) {
 +		panic("openssl: SHA3_512 failed")
 +	}
@@ -5329,93 +5325,105 @@ index 00000000000000..b5fb1bc7db6369
 +// The returned hash doesn't implement encoding.BinaryMarshaler and
 +// encoding.BinaryUnmarshaler.
 +func NewMD4() hash.Hash {
-+	return newEvpHash(crypto.MD4)
++	return newHash(crypto.MD4)
 +}
 +
 +// NewMD5 returns a new MD5 hash.
 +func NewMD5() hash.Hash {
-+	return newEvpHash(crypto.MD5)
++	return newHash(crypto.MD5)
 +}
 +
 +// NewSHA1 returns a new SHA1 hash.
 +func NewSHA1() hash.Hash {
-+	return newEvpHash(crypto.SHA1)
++	return newHash(crypto.SHA1)
 +}
 +
 +// NewSHA224 returns a new SHA224 hash.
 +func NewSHA224() hash.Hash {
-+	return newEvpHash(crypto.SHA224)
++	return newHash(crypto.SHA224)
 +}
 +
 +// NewSHA256 returns a new SHA256 hash.
 +func NewSHA256() hash.Hash {
-+	return newEvpHash(crypto.SHA256)
++	return newHash(crypto.SHA256)
 +}
 +
 +// NewSHA384 returns a new SHA384 hash.
 +func NewSHA384() hash.Hash {
-+	return newEvpHash(crypto.SHA384)
++	return newHash(crypto.SHA384)
 +}
 +
 +// NewSHA512 returns a new SHA512 hash.
 +func NewSHA512() hash.Hash {
-+	return newEvpHash(crypto.SHA512)
++	return newHash(crypto.SHA512)
 +}
 +
 +// NewSHA512_224 returns a new SHA512_224 hash.
 +func NewSHA512_224() hash.Hash {
-+	return newEvpHash(crypto.SHA512_224)
++	return newHash(crypto.SHA512_224)
 +}
 +
 +// NewSHA512_256 returns a new SHA512_256 hash.
 +func NewSHA512_256() hash.Hash {
-+	return newEvpHash(crypto.SHA512_256)
++	return newHash(crypto.SHA512_256)
 +}
 +
 +// NewSHA3_224 returns a new SHA3-224 hash.
-+func NewSHA3_224() hash.Hash {
-+	return newEvpHash(crypto.SHA3_224)
++func NewSHA3_224() *Hash {
++	return newHash(crypto.SHA3_224)
 +}
 +
-+// NewSHA3_256 returns a new SHA3-256 hash.
-+func NewSHA3_256() hash.Hash {
-+	return newEvpHash(crypto.SHA3_256)
++// NewSHA3_256 creates a new SHA3-256 hash.
++func NewSHA3_256() *Hash {
++	return newHash(crypto.SHA3_256)
 +}
 +
-+// NewSHA3_384 returns a new SHA3-384 hash.
-+func NewSHA3_384() hash.Hash {
-+	return newEvpHash(crypto.SHA3_384)
++// NewSHA3_384 creates a new SHA3-384 hash.
++func NewSHA3_384() *Hash {
++	return newHash(crypto.SHA3_384)
 +}
 +
-+// NewSHA3_512 returns a new SHA3-512 hash.
-+func NewSHA3_512() hash.Hash {
-+	return newEvpHash(crypto.SHA3_512)
++// NewSHA3_512 creates a new SHA3-512 hash.
++func NewSHA3_512() *Hash {
++	return newHash(crypto.SHA3_512)
 +}
 +
-+var _ hash.Hash = (*evpHash)(nil)
-+var _ HashCloner = (*evpHash)(nil)
++var _ hash.Hash = (*Hash)(nil)
++var _ HashCloner = (*Hash)(nil)
 +
-+// evpHash implements generic hash methods.
-+type evpHash struct {
++// hashBufSize is the size of the buffer used for hashing.
++// 256 bytes is a reasonable compromise for general purpose use,
++// and the resulting evpHash size is still similar to the
++// upstream sha512 hash object.
++const hashBufSize = 256
++
++// Hash implements generic hash methods.
++type Hash struct {
 +	alg *hashAlgorithm
 +	ctx ossl.EVP_MD_CTX_PTR
-+	// ctx2 is used in evpHash.sum to avoid changing
++	// ctx2 is used in Hash.Sum to avoid changing
 +	// the state of ctx. Having it here allows reusing the
 +	// same allocated object multiple times.
 +	ctx2 ossl.EVP_MD_CTX_PTR
-+	out  [maxHashSize]byte
++
++	// buf is a buffer for data not yet written to ctx.
++	// It is used to reduce calls into OpenSSL for small writes.
++	// The buffer size is a trade-off between memory usage and
++	// number of calls into OpenSSL.
++	buf  [hashBufSize]byte
++	nbuf int
 +}
 +
-+func newEvpHash(ch crypto.Hash) *evpHash {
++func newHash(ch crypto.Hash) *Hash {
 +	// Don't call init() yet, it would be wasteful
 +	// if the caller only wants to know the hash type. This
 +	// is a common pattern in this package, as some functions
 +	// accept a `func() hash.Hash` parameter and call it just
 +	// to know the hash type.
-+	return &evpHash{alg: loadHash(ch, true)}
++	return &Hash{alg: loadHash(ch, true)}
 +}
 +
-+func (h *evpHash) finalize() {
++func (h *Hash) finalize() {
 +	if h.ctx != nil {
 +		ossl.EVP_MD_CTX_free(h.ctx)
 +	}
@@ -5424,7 +5432,7 @@ index 00000000000000..b5fb1bc7db6369
 +	}
 +}
 +
-+func (h *evpHash) init() {
++func (h *Hash) init() {
 +	if h.ctx != nil {
 +		return
 +	}
@@ -5442,79 +5450,112 @@ index 00000000000000..b5fb1bc7db6369
 +		ossl.EVP_MD_CTX_free(h.ctx)
 +		panic(err)
 +	}
-+	runtime.SetFinalizer(h, (*evpHash).finalize)
++	runtime.SetFinalizer(h, (*Hash).finalize)
 +}
 +
-+func (h *evpHash) Reset() {
-+	if h.ctx == nil {
-+		// The hash is not initialized yet, no need to reset.
-+		return
++func (h *Hash) write(p []byte) int {
++	if len(p) == 0 {
++		return 0
 +	}
-+	// There is no need to reset h.ctx2 because it is always reset after
-+	// use in evpHash.sum.
-+	if _, err := ossl.EVP_DigestInit_ex(h.ctx, nil, nil); err != nil {
-+		panic(err)
++	if h.nbuf > 0 && h.nbuf+len(p) > len(h.buf) {
++		// We have buffered data and adding p would exceed the buffer,
++		// flush the buffer first.
++		h.flush()
++	}
++	if len(p) > len(h.buf) {
++		// p is larger than the buffer, write it directly.
++		h.init()
++		if _, err := ossl.EVP_DigestUpdate(h.ctx, p); err != nil {
++			panic(err)
++		}
++	} else {
++		// Otherwise, buffer it.
++		h.nbuf += copy(h.buf[h.nbuf:], p)
 +	}
 +	runtime.KeepAlive(h)
++	return len(p)
 +}
 +
-+func (h *evpHash) Write(p []byte) (int, error) {
-+	if len(p) == 0 {
-+		return 0, nil
-+	}
++func (h *Hash) flush() {
 +	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, p); err != nil {
-+		panic(err)
++	if h.nbuf > 0 {
++		if _, err := ossl.EVP_DigestUpdate(h.ctx, h.buf[:h.nbuf]); err != nil {
++			panic(err)
++		}
++		h.nbuf = 0
 +	}
-+	runtime.KeepAlive(h)
-+	return len(p), nil
 +}
 +
-+func (h *evpHash) WriteString(s string) (int, error) {
-+	if len(s) == 0 {
-+		return 0, nil
++func (h *Hash) Reset() {
++	h.nbuf = 0
++	if h.ctx == nil {
++		// The hash is not initialized yet, no need to reset ctx.
++		return
 +	}
-+	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Slice(unsafe.StringData(s), len(s))); err != nil {
++	// There is no need to reset h.ctx2 because it is always reset in evpHash.Sum.
++	if _, err := ossl.EVP_DigestInit_ex(h.ctx, nil, nil); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
-+	return len(s), nil
 +}
 +
-+func (h *evpHash) WriteByte(c byte) error {
-+	h.init()
-+	if _, err := ossl.EVP_DigestUpdate(h.ctx, unsafe.Slice(&c, 1)); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(h)
++func (h *Hash) Write(p []byte) (int, error) {
++	return h.write(p), nil
++}
++
++func (h *Hash) WriteString(s string) (int, error) {
++	return h.write(unsafe.Slice(unsafe.StringData(s), len(s))), nil
++}
++
++func (h *Hash) WriteByte(c byte) error {
++	h.write(unsafe.Slice(&c, 1))
 +	return nil
 +}
 +
-+func (h *evpHash) Size() int {
++func (h *Hash) Size() int {
 +	return h.alg.size
 +}
 +
-+func (h *evpHash) BlockSize() int {
++func (h *Hash) BlockSize() int {
 +	return h.alg.blockSize
 +}
 +
-+func (h *evpHash) Sum(in []byte) []byte {
-+	h.init()
-+	tmp := h.out[:h.Size()] // Create slice view
-+	clear(tmp)
-+	if err := ossl.HashSum(h.ctx, h.ctx2, tmp); err != nil {
++func (h *Hash) Sum(in []byte) []byte {
++	out := append(in, make([]byte, h.Size(), maxHashSize)...)
++	if h.ctx == nil {
++		// Fast path: if ctx hasn't been initialized, all data is in the buffer
++		// and we can use the one-shot EVP_Digest function.
++		if _, err := ossl.EVP_Digest(h.buf[:h.nbuf], out[len(in):], nil, h.alg.md, nil); err != nil {
++			panic(err)
++		}
++		return out
++	}
++	// Slow path: copy h.ctx into h.ctx2 and call EVP_DigestFinal_ex using h.ctx2.
++	// This is necessary because Go hash.Hash mandates that Sum has no effect
++	// on the underlying stream. In particular it is OK to Sum, then Write more,
++	// then Sum again, and the second Sum acts as if the first didn't happen.
++	if _, err := ossl.EVP_MD_CTX_copy_ex(h.ctx2, h.ctx); err != nil {
++		panic(err)
++	}
++	if h.nbuf > 0 {
++		// If we have buffered data, update ctx2 with it
++		if _, err := ossl.EVP_DigestUpdate(h.ctx2, h.buf[:h.nbuf]); err != nil {
++			panic(err)
++		}
++	}
++	if _, err := ossl.EVP_DigestFinal_ex(h.ctx2, out[len(in):], nil); err != nil {
 +		panic(err)
 +	}
 +	runtime.KeepAlive(h)
-+	return append(in, tmp...)
++	return out
 +}
 +
-+// Clone returns a new evpHash object that is a deep clone of itself.
++// Clone returns a new Hash object that is a deep clone of itself.
 +// The duplicate object contains all state and data contained in the
 +// original object at the point of duplication.
-+func (h *evpHash) Clone() (HashCloner, error) {
-+	h2 := &evpHash{alg: h.alg}
++func (h *Hash) Clone() (HashCloner, error) {
++	h2 := &Hash{alg: h.alg, nbuf: h.nbuf}
++	copy(h2.buf[:h.nbuf], h.buf[:h.nbuf])
 +	if h.ctx != nil {
 +		var err error
 +		h2.ctx, err = ossl.EVP_MD_CTX_new()
@@ -5530,7 +5571,7 @@ index 00000000000000..b5fb1bc7db6369
 +			ossl.EVP_MD_CTX_free(h2.ctx)
 +			panic(err)
 +		}
-+		runtime.SetFinalizer(h2, (*evpHash).finalize)
++		runtime.SetFinalizer(h2, (*Hash).finalize)
 +	}
 +	runtime.KeepAlive(h)
 +	return h2, nil
@@ -5546,7 +5587,7 @@ index 00000000000000..b5fb1bc7db6369
 +	return errors.ErrUnsupported
 +}
 +
-+func (d *evpHash) MarshalBinary() ([]byte, error) {
++func (d *Hash) MarshalBinary() ([]byte, error) {
 +	if d.alg == nil || !d.alg.marshallable {
 +		return nil, errMarshallUnsupported{}
 +	}
@@ -5554,12 +5595,12 @@ index 00000000000000..b5fb1bc7db6369
 +	return d.AppendBinary(buf)
 +}
 +
-+func (d *evpHash) AppendBinary(buf []byte) ([]byte, error) {
++func (d *Hash) AppendBinary(buf []byte) ([]byte, error) {
 +	defer runtime.KeepAlive(d)
 +	if d.alg == nil || !d.alg.marshallable {
 +		return nil, errMarshallUnsupported{}
 +	}
-+	d.init()
++	d.flush()
 +	switch d.alg.provider {
 +	case providerOSSLDefault, providerOSSLFIPS:
 +		return osslHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
@@ -5570,9 +5611,9 @@ index 00000000000000..b5fb1bc7db6369
 +	}
 +}
 +
-+func (d *evpHash) UnmarshalBinary(b []byte) error {
++func (d *Hash) UnmarshalBinary(b []byte) error {
 +	defer runtime.KeepAlive(d)
-+	d.init()
++	d.flush()
 +	if d.alg == nil || !d.alg.marshallable {
 +		return errMarshallUnsupported{}
 +	}
@@ -8984,97 +9025,12 @@ index 00000000000000..bb8ea6fafdc4d9
 +	}
 +	return string(unsafe.Slice(p, uintptr(end)-uintptr(unsafe.Pointer(p))))
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
-new file mode 100644
-index 00000000000000..2152320d0053b3
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_cgo.go
-@@ -0,0 +1,39 @@
-+package ossl
-+
-+/*
-+#include "zossl.h"
-+// go_hash_sum copies ctx into ctx2 and calls EVP_DigestFinal_ex using ctx2.
-+// This is necessary because Go hash.Hash mandates that Sum has no effect
-+// on the underlying stream. In particular it is OK to Sum, then Write more,
-+// then Sum again, and the second Sum acts as if the first didn't happen.
-+// It is written in C because Sum() tend to be in the hot path,
-+// and doing one cgo call instead of two is a significant performance win.
-+static inline int
-+go_hash_sum(const _EVP_MD_CTX_PTR ctx, _EVP_MD_CTX_PTR ctx2, unsigned char *out, uintptr_t *_err_state)
-+{
-+	if (_mkcgo_EVP_MD_CTX_copy(ctx2, ctx, _err_state) != 1)
-+		return -1;
-+	if (_mkcgo_EVP_DigestFinal_ex(ctx2, out, NULL, _err_state) <= 0)
-+		return -2;
-+	return 1;
-+}
-+*/
-+import "C"
-+import (
-+	"unsafe"
-+)
-+
-+func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
-+	var errst C.uintptr_t
-+	if code := C.go_hash_sum(ctx1, ctx2, (*C.uchar)(unsafe.SliceData(out)), mkcgoNoEscape(&errst)); code != 1 {
-+		msg := "go_hash_sum"
-+		switch code {
-+		case -1:
-+			msg = "EVP_MD_CTX_copy"
-+		case -2:
-+			msg = "EVP_DigestFinal_ex"
-+		}
-+		return newMkcgoErr(msg, uintptr(errst))
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
-new file mode 100644
-index 00000000000000..8bfb94b945afb6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl_nocgo.go
-@@ -0,0 +1,34 @@
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
-+
-+package ossl
-+
-+import "unsafe"
-+
-+// HashSum copies ctx1 into ctx2 and calls EVP_DigestFinal_ex using ctx2.
-+// This is necessary because Go hash.Hash mandates that Sum has no effect
-+// on the underlying stream. In particular it is OK to Sum, then Write more,
-+// then Sum again, and the second Sum acts as if the first didn't happen.
-+func HashSum(ctx1, ctx2 EVP_MD_CTX_PTR, out []byte) error {
-+	// Copy ctx1 to ctx2 using EVP_MD_CTX_copy_ex
-+	code, err := EVP_MD_CTX_copy_ex(ctx2, ctx1)
-+	if err != nil {
-+		return err
-+	}
-+	var errState uintptr
-+	if code != 1 {
-+		errState = retrieveErrorState()
-+		return newMkcgoErr("EVP_MD_CTX_copy_ex", errState)
-+	}
-+
-+	// Finalize the hash using ctx2
-+	code, err = EVP_DigestFinal_ex(ctx2, (*byte)(unsafe.SliceData(out)), nil)
-+	if err != nil {
-+		return err
-+	}
-+	if code <= 0 {
-+		errState = retrieveErrorState()
-+		return newMkcgoErr("EVP_DigestFinal_ex", errState)
-+	}
-+
-+	return nil
-+}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..a79c56b9b101c3
+index 00000000000000..925b256a6eefd7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,424 @@
+@@ -0,0 +1,423 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -9283,17 +9239,16 @@ index 00000000000000..a79c56b9b101c3
 +
 +_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
 +void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
-+int EVP_MD_CTX_copy(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in) __attribute__((noescape,nocallback));
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
 +const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count")));
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
 +int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
-+int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback));
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice(md)));
 +int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
 +int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
@@ -9775,10 +9730,10 @@ index 00000000000000..fb345aac77ea48
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..4766a325a5883b
+index 00000000000000..b24f0a2d3767e0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2015 @@
+@@ -0,0 +1,2006 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -9880,7 +9835,6 @@ index 00000000000000..4766a325a5883b
 +int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
 +int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
 +int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_MD_CTX_copy)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
 +int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
 +void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
 +int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
@@ -10081,7 +10035,6 @@ index 00000000000000..4766a325a5883b
 +	__mkcgo__dlsym(EVP_EncryptFinal_ex)
 +	__mkcgo__dlsym(EVP_EncryptInit_ex)
 +	__mkcgo__dlsym(EVP_EncryptUpdate)
-+	__mkcgo__dlsym(EVP_MD_CTX_copy)
 +	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
 +	__mkcgo__dlsym(EVP_MD_CTX_free)
 +	__mkcgo__dlsym(EVP_MD_CTX_new)
@@ -10187,7 +10140,6 @@ index 00000000000000..4766a325a5883b
 +	_g_EVP_EncryptFinal_ex = NULL;
 +	_g_EVP_EncryptInit_ex = NULL;
 +	_g_EVP_EncryptUpdate = NULL;
-+	_g_EVP_MD_CTX_copy = NULL;
 +	_g_EVP_MD_CTX_copy_ex = NULL;
 +	_g_EVP_MD_CTX_free = NULL;
 +	_g_EVP_MD_CTX_new = NULL;
@@ -11028,12 +10980,6 @@ index 00000000000000..4766a325a5883b
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MD_CTX_copy(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
 +int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -11864,10 +11810,10 @@ index 00000000000000..3d66be3bc085ca
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..2f308a24abbe2e
+index 00000000000000..2a6c904ff736cf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,351 @@
+@@ -0,0 +1,350 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -12072,7 +12018,6 @@ index 00000000000000..2f308a24abbe2e
 +int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, uintptr_t *);
 +int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
 +int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_MD_CTX_copy(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
 +int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
 +void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
 +int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, uintptr_t *);
@@ -12221,10 +12166,10 @@ index 00000000000000..2f308a24abbe2e
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..0d280df4222d5c
+index 00000000000000..dd9985c9bc13b4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1334 @@
+@@ -0,0 +1,1328 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -12616,15 +12561,15 @@ index 00000000000000..0d280df4222d5c
 +	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", uintptr(_err))
 +}
 +
-+func EVP_Digest(data []byte, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
 +}
 +
-+func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(md)), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", uintptr(_err))
 +}
 +
@@ -12794,12 +12739,6 @@ index 00000000000000..0d280df4222d5c
 +	return int32(_ret), newMkcgoErr("EVP_MAC_update", uintptr(_err))
 +}
 +
-+func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_copy(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy", uintptr(_err))
-+}
-+
 +func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
@@ -13561,10 +13500,10 @@ index 00000000000000..0d280df4222d5c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
 new file mode 100644
-index 00000000000000..75e697917b6657
+index 00000000000000..bfe062869cee6a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-@@ -0,0 +1,39 @@
+@@ -0,0 +1,37 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build go1.24 && !cmd_go_bootstrap
@@ -13592,8 +13531,6 @@ index 00000000000000..75e697917b6657
 +#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
 +#cgo noescape _mkcgo_EVP_EncryptUpdate
 +#cgo nocallback _mkcgo_EVP_EncryptUpdate
-+#cgo noescape _mkcgo_EVP_MD_CTX_copy
-+#cgo nocallback _mkcgo_EVP_MD_CTX_copy
 +#cgo noescape _mkcgo_EVP_PKEY_derive
 +#cgo nocallback _mkcgo_EVP_PKEY_derive
 +#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
@@ -13606,10 +13543,10 @@ index 00000000000000..75e697917b6657
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..efa7451359e98f
+index 00000000000000..324a7f4228b4c9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2345 @@
+@@ -0,0 +1,2335 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -14061,17 +13998,17 @@ index 00000000000000..efa7451359e98f
 +
 +var _mkcgo_EVP_Digest uintptr
 +
-+func EVP_Digest(data []byte, md *byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_Digest", _err)
 +}
 +
 +var _mkcgo_EVP_DigestFinal_ex uintptr
 +
-+func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md *byte, s *uint32) (int32, error) {
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(md)), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", _err)
 +}
 +
@@ -14299,14 +14236,6 @@ index 00000000000000..efa7451359e98f
 +	return int32(r0), newMkcgoErr("EVP_MAC_update", _err)
 +}
 +
-+var _mkcgo_EVP_MD_CTX_copy uintptr
-+
-+func EVP_MD_CTX_copy(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy", _err)
-+}
-+
 +var _mkcgo_EVP_MD_CTX_copy_ex uintptr
 +
 +func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
@@ -15473,7 +15402,6 @@ index 00000000000000..efa7451359e98f
 +	_mkcgo_EVP_EncryptFinal_ex = dlsym(handle, "EVP_EncryptFinal_ex\x00", false)
 +	_mkcgo_EVP_EncryptInit_ex = dlsym(handle, "EVP_EncryptInit_ex\x00", false)
 +	_mkcgo_EVP_EncryptUpdate = dlsym(handle, "EVP_EncryptUpdate\x00", false)
-+	_mkcgo_EVP_MD_CTX_copy = dlsym(handle, "EVP_MD_CTX_copy\x00", false)
 +	_mkcgo_EVP_MD_CTX_copy_ex = dlsym(handle, "EVP_MD_CTX_copy_ex\x00", false)
 +	_mkcgo_EVP_MD_CTX_free = dlsym(handle, "EVP_MD_CTX_free\x00", false)
 +	_mkcgo_EVP_MD_CTX_new = dlsym(handle, "EVP_MD_CTX_new\x00", false)
@@ -15579,7 +15507,6 @@ index 00000000000000..efa7451359e98f
 +	_mkcgo_EVP_EncryptFinal_ex = 0
 +	_mkcgo_EVP_EncryptInit_ex = 0
 +	_mkcgo_EVP_EncryptUpdate = 0
-+	_mkcgo_EVP_MD_CTX_copy = 0
 +	_mkcgo_EVP_MD_CTX_copy_ex = 0
 +	_mkcgo_EVP_MD_CTX_free = 0
 +	_mkcgo_EVP_MD_CTX_new = 0
@@ -24318,10 +24245,10 @@ index 00000000000000..316ecba6792d47
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 new file mode 100644
-index 00000000000000..f67b35bdb6b987
+index 00000000000000..39a70bfcd259d8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
-@@ -0,0 +1,341 @@
+@@ -0,0 +1,339 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -24490,9 +24417,7 @@ index 00000000000000..f67b35bdb6b987
 +// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
 +func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
 +	switch h := hash.(type) {
-+	case *evpHash:
-+		return h.alg.ch, nil
-+	case *DigestSHA3:
++	case *Hash:
 +		return h.alg.ch, nil
 +	default:
 +		return 0, errors.New("unsupported hash function")
@@ -24889,10 +24814,10 @@ index 00000000000000..82a961d974f129
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
 new file mode 100644
-index 00000000000000..00496debabbd26
+index 00000000000000..e03ae435ac563f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,325 @@
+@@ -0,0 +1,320 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25010,7 +24935,8 @@ index 00000000000000..00496debabbd26
 +	return &hash
 +}
 +
-+type evpHash struct {
++// Hash implements generic hash methods.
++type Hash struct {
 +	ptr unsafe.Pointer
 +	alg *hashAlgorithm
 +}
@@ -25020,44 +24946,44 @@ index 00000000000000..00496debabbd26
 +	return loadHash(h, false) != nil
 +}
 +
-+func newEVPHash(ch crypto.Hash) *evpHash {
++func newHash(ch crypto.Hash) *Hash {
 +	alg := loadHash(ch, true)
 +
-+	h := &evpHash{
++	h := &Hash{
 +		ptr: cryptokit.HashNew(alg.id),
 +		alg: alg,
 +	}
 +
-+	runtime.SetFinalizer(h, (*evpHash).finalize)
++	runtime.SetFinalizer(h, (*Hash).finalize)
 +
 +	return h
 +}
 +
-+func (h *evpHash) finalize() {
++func (h *Hash) finalize() {
 +	if h.ptr != nil {
 +		cryptokit.HashFree(h.alg.id, h.ptr)
 +		h.ptr = nil
 +	}
 +}
 +
-+func (h *evpHash) Clone() (HashCloner, error) {
++func (h *Hash) Clone() (HashCloner, error) {
 +	if h.ptr == nil {
 +		panic("cryptokit: hash already finalized")
 +	}
 +
-+	newHash := &evpHash{
++	newHash := &Hash{
 +		ptr: cryptokit.HashCopy(h.alg.id, h.ptr),
 +		alg: h.alg,
 +	}
 +
-+	runtime.SetFinalizer(newHash, (*evpHash).finalize)
++	runtime.SetFinalizer(newHash, (*Hash).finalize)
 +
 +	runtime.KeepAlive(h)
 +
 +	return newHash, nil
 +}
 +
-+func (h *evpHash) Write(p []byte) (int, error) {
++func (h *Hash) Write(p []byte) (int, error) {
 +	if len(p) == 0 {
 +		return 0, nil
 +	}
@@ -25068,7 +24994,7 @@ index 00000000000000..00496debabbd26
 +	return len(p), nil
 +}
 +
-+func (h *evpHash) WriteString(s string) (int, error) {
++func (h *Hash) WriteString(s string) (int, error) {
 +	if len(s) == 0 {
 +		return 0, nil
 +	}
@@ -25079,7 +25005,7 @@ index 00000000000000..00496debabbd26
 +	return len(s), nil
 +}
 +
-+func (h *evpHash) WriteByte(c byte) error {
++func (h *Hash) WriteByte(c byte) error {
 +	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(&c, 1))
 +
 +	runtime.KeepAlive(h)
@@ -25087,7 +25013,7 @@ index 00000000000000..00496debabbd26
 +	return nil
 +}
 +
-+func (h *evpHash) Sum(b []byte) []byte {
++func (h *Hash) Sum(b []byte) []byte {
 +	hashSlice := make([]byte, h.alg.size, 64) // explicit cap to allow stack allocation
 +	cryptokit.HashSum(h.alg.id, h.ptr, hashSlice)
 +	runtime.KeepAlive(h)
@@ -25105,38 +25031,32 @@ index 00000000000000..00496debabbd26
 +	return errors.ErrUnsupported
 +}
 +
-+func (h *evpHash) MarshalBinary() ([]byte, error) {
++func (h *Hash) MarshalBinary() ([]byte, error) {
 +	return nil, errMarshallUnsupported{}
 +}
 +
-+func (h *evpHash) AppendBinary(b []byte) ([]byte, error) {
++func (h *Hash) AppendBinary(b []byte) ([]byte, error) {
 +	return nil, errMarshallUnsupported{}
 +}
 +
-+func (h *evpHash) UnmarshalBinary(data []byte) error {
++func (h *Hash) UnmarshalBinary(data []byte) error {
 +	return errMarshallUnsupported{}
 +}
 +
-+func (h *evpHash) Reset() {
++func (h *Hash) Reset() {
 +	cryptokit.HashReset(h.alg.id, h.ptr)
 +}
 +
-+func (h *evpHash) BlockSize() int {
++func (h *Hash) BlockSize() int {
 +	return h.alg.blockSize
 +}
 +
-+func (h *evpHash) Size() int {
++func (h *Hash) Size() int {
 +	return h.alg.size
 +}
 +
-+type DigestSHA3 struct {
-+	*evpHash
-+}
-+
-+var _ hash.Hash = (*evpHash)(nil)
-+var _ HashCloner = (*evpHash)(nil)
-+var _ hash.Hash = (*DigestSHA3)(nil)
-+var _ HashCloner = (*DigestSHA3)(nil)
++var _ hash.Hash = (*Hash)(nil)
++var _ HashCloner = (*Hash)(nil)
 +
 +func MD5(p []byte) (sum [16]byte) {
 +	cryptokit.MD5(p, sum[:])
@@ -25180,43 +25100,43 @@ index 00000000000000..00496debabbd26
 +
 +// NewMD5 initializes a new MD5 hasher.
 +func NewMD5() hash.Hash {
-+	return newEVPHash(crypto.MD5)
++	return newHash(crypto.MD5)
 +
 +}
 +
 +// NewSHA1 initializes a new SHA1 hasher.
 +func NewSHA1() hash.Hash {
-+	return newEVPHash(crypto.SHA1)
++	return newHash(crypto.SHA1)
 +}
 +
 +// NewSHA256 initializes a new SHA256 hasher.
 +func NewSHA256() hash.Hash {
-+	return newEVPHash(crypto.SHA256)
++	return newHash(crypto.SHA256)
 +}
 +
 +// NewSHA384 initializes a new SHA384 hasher.
 +func NewSHA384() hash.Hash {
-+	return newEVPHash(crypto.SHA384)
++	return newHash(crypto.SHA384)
 +}
 +
 +// NewSHA512 initializes a new SHA512 hasher.
 +func NewSHA512() hash.Hash {
-+	return newEVPHash(crypto.SHA512)
++	return newHash(crypto.SHA512)
 +}
 +
 +// NewSHA3_256 creates a new SHA3-256 hash.
-+func NewSHA3_256() *DigestSHA3 {
-+	return &DigestSHA3{newEVPHash(crypto.SHA3_256)}
++func NewSHA3_256() *Hash {
++	return newHash(crypto.SHA3_256)
 +}
 +
 +// NewSHA3_384 creates a new SHA3-384 hash.
-+func NewSHA3_384() *DigestSHA3 {
-+	return &DigestSHA3{newEVPHash(crypto.SHA3_384)}
++func NewSHA3_384() *Hash {
++	return newHash(crypto.SHA3_384)
 +}
 +
 +// NewSHA3_512 creates a new SHA3-512 hash.
-+func NewSHA3_512() *DigestSHA3 {
-+	return &DigestSHA3{newEVPHash(crypto.SHA3_512)}
++func NewSHA3_512() *Hash {
++	return newHash(crypto.SHA3_512)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
 new file mode 100644
@@ -25365,10 +25285,10 @@ index 00000000000000..e8fcbec33aaa66
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
 new file mode 100644
-index 00000000000000..347cb244734fe8
+index 00000000000000..80a951f8ea1a2a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
-@@ -0,0 +1,121 @@
+@@ -0,0 +1,119 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25482,9 +25402,7 @@ index 00000000000000..347cb244734fe8
 +
 +func hashToHMACEnum(h hash.Hash) int32 {
 +	switch h := h.(type) {
-+	case *evpHash:
-+		return h.alg.id
-+	case *DigestSHA3:
++	case *Hash:
 +		return h.alg.id
 +	default:
 +		return 0
@@ -25759,7 +25677,7 @@ index 00000000000000..b5131703afdbcc
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
-index 00000000000000..484934d63e552b
+index 00000000000000..75416a508374ca
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 @@ -0,0 +1,68 @@
@@ -25814,7 +25732,7 @@ index 00000000000000..484934d63e552b
 +// Mapping Go hash functions to CommonCrypto hash constants
 +func hashToCCDigestPBKDF2(hash hash.Hash) (commoncrypto.CCPseudoRandomAlgorithm, error) {
 +	switch h := hash.(type) {
-+	case *evpHash:
++	case *Hash:
 +		switch h.alg.ch {
 +		case crypto.SHA1:
 +			return commoncrypto.KCCPRFHmacAlgSHA1, nil
@@ -26759,10 +26677,10 @@ index 00000000000000..c1365f8d399d21
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
 new file mode 100644
-index 00000000000000..d1916f94a0a76d
+index 00000000000000..a9e247e82b8a63
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
-@@ -0,0 +1,131 @@
+@@ -0,0 +1,140 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26811,25 +26729,34 @@ index 00000000000000..d1916f94a0a76d
 +		mode  string
 +	}{id, flags, mode}
 +
++	type entryResult[T any] struct {
++		value T
++		err   error
++	}
++
++	// Try to load the algorithm from the cache.
 +	if v, ok := algCache.Load(entryKey); ok {
-+		return v.(T), nil
++		ret := v.(entryResult[T])
++		return ret.value, ret.err
 +	}
++
++	// Not found in cache, create a new one.
++	var ret entryResult[T]
 +	var h bcrypt.ALG_HANDLE
-+	err := bcrypt.OpenAlgorithmProvider(&h, utf16PtrFromString(id), nil, flags)
-+	if err != nil {
-+		return *new(T), err
-+	}
-+	v, err := fn(h)
-+	if err != nil {
-+		bcrypt.CloseAlgorithmProvider(h, 0)
-+		return *new(T), err
++	if ret.err = bcrypt.OpenAlgorithmProvider(&h, utf16PtrFromString(id), nil, flags); ret.err == nil {
++		ret.value, ret.err = fn(h)
++		if ret.err != nil {
++			bcrypt.CloseAlgorithmProvider(h, 0)
++		}
 +	}
-+	if existing, loaded := algCache.LoadOrStore(entryKey, v); loaded {
-+		// We can safely use a provider that has already been cached in another concurrent goroutine.
++
++	// Store the result in the cache.
++	if existing, loaded := algCache.LoadOrStore(entryKey, ret); loaded {
++		// Another goroutine stored it first concurrently, so use that one instead.
 +		bcrypt.CloseAlgorithmProvider(h, 0)
-+		v = existing.(T)
++		ret = existing.(entryResult[T])
 +	}
-+	return v, nil
++	return ret.value, ret.err
 +}
 +
 +func utf16PtrFromString(s string) *uint16 {
@@ -27915,10 +27842,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..d22f6231cbf33a
+index 00000000000000..124f7418740ef4
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,325 @@
+@@ -0,0 +1,327 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -28011,32 +27938,32 @@ index 00000000000000..d22f6231cbf33a
 +
 +// NewMD4 returns a new MD4 hash.
 +func NewMD4() hash.Hash {
-+	return newHashX(bcrypt.MD4_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.MD4_ALGORITHM)
 +}
 +
 +// NewMD5 returns a new MD5 hash.
 +func NewMD5() hash.Hash {
-+	return newHashX(bcrypt.MD5_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.MD5_ALGORITHM)
 +}
 +
 +// NewSHA1 returns a new SHA1 hash.
 +func NewSHA1() hash.Hash {
-+	return newHashX(bcrypt.SHA1_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.SHA1_ALGORITHM)
 +}
 +
 +// NewSHA256 returns a new SHA256 hash.
 +func NewSHA256() hash.Hash {
-+	return newHashX(bcrypt.SHA256_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.SHA256_ALGORITHM)
 +}
 +
 +// NewSHA384 returns a new SHA384 hash.
 +func NewSHA384() hash.Hash {
-+	return newHashX(bcrypt.SHA384_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.SHA384_ALGORITHM)
 +}
 +
 +// NewSHA512 returns a new SHA512 hash.
 +func NewSHA512() hash.Hash {
-+	return newHashX(bcrypt.SHA512_ALGORITHM, bcrypt.ALG_NONE_FLAG, nil)
++	return newHash(bcrypt.SHA512_ALGORITHM)
 +}
 +
 +type hashAlgorithm struct {
@@ -28046,6 +27973,14 @@ index 00000000000000..d22f6231cbf33a
 +	blockSize uint32
 +}
 +
++func mustLoadHash(id string, flags bcrypt.AlgorithmProviderFlags) *hashAlgorithm {
++	h, err := loadHash(id, flags)
++	if err != nil {
++		panic(err)
++	}
++	return h
++}
++
 +func loadHash(id string, flags bcrypt.AlgorithmProviderFlags) (*hashAlgorithm, error) {
 +	return loadOrStoreAlg(id, flags, "", func(h bcrypt.ALG_HANDLE) (*hashAlgorithm, error) {
 +		size, err := getUint32(bcrypt.HANDLE(h), bcrypt.HASH_LENGTH)
@@ -28063,44 +27998,38 @@ index 00000000000000..d22f6231cbf33a
 +// hashToID converts a hash.Hash implementation from this package
 +// to a CNG hash ID
 +func hashToID(h hash.Hash) string {
-+	hx, ok := h.(*hashX)
++	hx, ok := h.(*Hash)
 +	if !ok {
 +		return ""
 +	}
 +	return hx.alg.id
 +}
 +
-+var _ hash.Hash = (*hashX)(nil)
-+var _ HashCloner = (*hashX)(nil)
++var _ hash.Hash = (*Hash)(nil)
++var _ HashCloner = (*Hash)(nil)
 +
-+// hashX implements [hash.Hash].
-+type hashX struct {
++// Hash implements [hash.Hash].
++type Hash struct {
 +	alg *hashAlgorithm
 +	ctx bcrypt.HASH_HANDLE
 +
 +	key []byte
 +}
 +
-+// newHashX returns a new hash.Hash using the specified algorithm.
-+func newHashX(id string, flag bcrypt.AlgorithmProviderFlags, key []byte) *hashX {
-+	alg, err := loadHash(id, flag)
-+	if err != nil {
-+		panic(err)
-+	}
-+	h := &hashX{alg: alg, key: bytes.Clone(key)}
++func newHash(id string) *Hash {
 +	// Don't call bcrypt.CreateHash yet, it would be wasteful
 +	// if the caller only wants to know the hash type. This
 +	// is a common pattern in this package, as some functions
 +	// accept a `func() hash.Hash` parameter and call it just
 +	// to know the hash type.
-+	return h
++	return &Hash{alg: mustLoadHash(id, bcrypt.ALG_NONE_FLAG)}
 +}
 +
-+func (h *hashX) finalize() {
++func (h *Hash) finalize() {
 +	bcrypt.DestroyHash(h.ctx)
 +}
 +
-+func (h *hashX) init() {
++func (h *Hash) init() {
 +	defer runtime.KeepAlive(h)
 +	if h.ctx != 0 {
 +		return
@@ -28109,56 +28038,56 @@ index 00000000000000..d22f6231cbf33a
 +	if err != nil {
 +		panic(err)
 +	}
-+	runtime.SetFinalizer(h, (*hashX).finalize)
++	runtime.SetFinalizer(h, (*Hash).finalize)
 +}
 +
-+func (h *hashX) Clone() (HashCloner, error) {
++func (h *Hash) Clone() (HashCloner, error) {
 +	defer runtime.KeepAlive(h)
-+	h2 := &hashX{alg: h.alg, key: bytes.Clone(h.key)}
++	h2 := &Hash{alg: h.alg, key: bytes.Clone(h.key)}
 +	if h.ctx != 0 {
 +		hashClone(h.ctx, &h2.ctx)
-+		runtime.SetFinalizer(h2, (*hashX).finalize)
++		runtime.SetFinalizer(h2, (*Hash).finalize)
 +	}
 +	return h2, nil
 +}
 +
-+func (h *hashX) Reset() {
++func (h *Hash) Reset() {
 +	defer runtime.KeepAlive(h)
 +	if h.ctx != 0 {
 +		hashReset(h.ctx, h.Size())
 +	}
 +}
 +
-+func (h *hashX) Write(p []byte) (n int, err error) {
++func (h *Hash) Write(p []byte) (n int, err error) {
 +	defer runtime.KeepAlive(h)
 +	h.init()
 +	hashData(h.ctx, p)
 +	return len(p), nil
 +}
 +
-+func (h *hashX) WriteString(s string) (int, error) {
++func (h *Hash) WriteString(s string) (int, error) {
 +	defer runtime.KeepAlive(h)
 +	return h.Write(unsafe.Slice(unsafe.StringData(s), len(s)))
 +}
 +
-+func (h *hashX) WriteByte(c byte) error {
++func (h *Hash) WriteByte(c byte) error {
 +	defer runtime.KeepAlive(h)
 +	h.init()
 +	hashByte(h.ctx, c)
 +	return nil
 +}
 +
-+func (h *hashX) Sum(in []byte) []byte {
++func (h *Hash) Sum(in []byte) []byte {
 +	defer runtime.KeepAlive(h)
 +	h.init()
 +	return hashSum(h.ctx, h.Size(), in)
 +}
 +
-+func (h *hashX) Size() int {
++func (h *Hash) Size() int {
 +	return int(h.alg.size)
 +}
 +
-+func (h *hashX) BlockSize() int {
++func (h *Hash) BlockSize() int {
 +	return int(h.alg.blockSize)
 +}
 +
@@ -28172,15 +28101,15 @@ index 00000000000000..d22f6231cbf33a
 +	return errors.ErrUnsupported
 +}
 +
-+func (hx *hashX) MarshalBinary() ([]byte, error) {
++func (hx *Hash) MarshalBinary() ([]byte, error) {
 +	return nil, errMarshallUnsupported{}
 +}
 +
-+func (hx *hashX) AppendBinary(b []byte) ([]byte, error) {
++func (hx *Hash) AppendBinary(b []byte) ([]byte, error) {
 +	return nil, errMarshallUnsupported{}
 +}
 +
-+func (hx *hashX) UnmarshalBinary(data []byte) error {
++func (hx *Hash) UnmarshalBinary(data []byte) error {
 +	return errMarshallUnsupported{}
 +}
 +
@@ -28423,10 +28352,10 @@ index 00000000000000..2647c6bc06cd57
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
 new file mode 100644
-index 00000000000000..939076cb971001
+index 00000000000000..18067ce5abf434
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,70 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -28436,6 +28365,7 @@ index 00000000000000..939076cb971001
 +package cng
 +
 +import (
++	"bytes"
 +	"hash"
 +
 +	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
@@ -28459,13 +28389,14 @@ index 00000000000000..939076cb971001
 +		// allow keys longer than math.MaxUint32 bytes.
 +		ch.Write(key)
 +		key = ch.Sum(nil)
++	} else {
++		key = bytes.Clone(key)
 +	}
-+
-+	return hmacWrapper{hashX: newHashX(id, bcrypt.ALG_HANDLE_HMAC_FLAG, key)}
++	return hmacWrapper{hashX: &Hash{alg: mustLoadHash(id, bcrypt.ALG_HANDLE_HMAC_FLAG), key: key}}
 +}
 +
 +type hmacWrapper struct {
-+	hashX *hashX
++	hashX *Hash
 +}
 +
 +func (h hmacWrapper) Write(p []byte) (n int, err error) {
@@ -28493,7 +28424,7 @@ index 00000000000000..939076cb971001
 +	if err != nil {
 +		return nil, err
 +	}
-+	return hmacWrapper{hashX: clone.(*hashX)}, nil
++	return hmacWrapper{hashX: clone.(*Hash)}, nil
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
 new file mode 100644
@@ -29306,10 +29237,10 @@ index 00000000000000..0269f9cf86539e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
 new file mode 100644
-index 00000000000000..36a7c6125fe7a1
+index 00000000000000..c26c4bcf0d1afe
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/sha3.go
-@@ -0,0 +1,310 @@
+@@ -0,0 +1,203 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29319,9 +29250,7 @@ index 00000000000000..36a7c6125fe7a1
 +package cng
 +
 +import (
-+	"hash"
 +	"runtime"
-+	"unsafe"
 +
 +	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
 +)
@@ -29386,121 +29315,19 @@ index 00000000000000..36a7c6125fe7a1
 +	return err == nil
 +}
 +
-+var _ hash.Hash = (*DigestSHA3)(nil)
-+var _ HashCloner = (*DigestSHA3)(nil)
-+
-+// DigestSHA3 is the [sha3.SHA3] implementation using the CNG API.
-+type DigestSHA3 struct {
-+	alg *hashAlgorithm
-+	ctx bcrypt.HASH_HANDLE
-+}
-+
-+// newDigestSHA3 returns a new hash.Hash using the specified algorithm.
-+func newDigestSHA3(id string) *DigestSHA3 {
-+	alg, err := loadHash(id, bcrypt.ALG_NONE_FLAG)
-+	if err != nil {
-+		panic(err)
-+	}
-+	h := &DigestSHA3{alg: alg}
-+	// Don't call bcrypt.CreateHash yet, it would be wasteful
-+	// if the caller only wants to know the hash type. This
-+	// is a common pattern in this package, as some functions
-+	// accept a `func() hash.Hash` parameter and call it just
-+	// to know the hash type.
-+	return h
-+}
-+
-+func (h *DigestSHA3) finalize() {
-+	bcrypt.DestroyHash(h.ctx)
-+}
-+
-+func (h *DigestSHA3) init() {
-+	defer runtime.KeepAlive(h)
-+	if h.ctx != 0 {
-+		return
-+	}
-+	err := bcrypt.CreateHash(h.alg.handle, &h.ctx, nil, nil, bcrypt.HASH_REUSABLE_FLAG)
-+	if err != nil {
-+		panic(err)
-+	}
-+	runtime.SetFinalizer(h, (*DigestSHA3).finalize)
-+}
-+
-+func (h *DigestSHA3) Clone() (HashCloner, error) {
-+	defer runtime.KeepAlive(h)
-+	h2 := &DigestSHA3{alg: h.alg}
-+	if h.ctx != 0 {
-+		hashClone(h.ctx, &h2.ctx)
-+		runtime.SetFinalizer(h2, (*DigestSHA3).finalize)
-+	}
-+	return h2, nil
-+}
-+
-+func (h *DigestSHA3) Reset() {
-+	defer runtime.KeepAlive(h)
-+	if h.ctx != 0 {
-+		hashReset(h.ctx, h.Size())
-+	}
-+}
-+
-+func (h *DigestSHA3) Write(p []byte) (n int, err error) {
-+	defer runtime.KeepAlive(h)
-+	h.init()
-+	hashData(h.ctx, p)
-+	return len(p), nil
-+}
-+
-+func (h *DigestSHA3) WriteString(s string) (int, error) {
-+	defer runtime.KeepAlive(h)
-+	return h.Write(unsafe.Slice(unsafe.StringData(s), len(s)))
-+}
-+
-+func (h *DigestSHA3) WriteByte(c byte) error {
-+	defer runtime.KeepAlive(h)
-+	h.init()
-+	hashByte(h.ctx, c)
-+	return nil
-+}
-+
-+func (h *DigestSHA3) Sum(in []byte) []byte {
-+	defer runtime.KeepAlive(h)
-+	h.init()
-+	return hashSum(h.ctx, h.Size(), in)
-+}
-+
-+func (h *DigestSHA3) Size() int {
-+	return int(h.alg.size)
-+}
-+
-+func (h *DigestSHA3) BlockSize() int {
-+	return int(h.alg.blockSize)
-+}
-+
-+func (ds *DigestSHA3) MarshalBinary() ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
-+
-+func (ds *DigestSHA3) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
-+
-+func (ds *DigestSHA3) UnmarshalBinary(data []byte) error {
-+	return errMarshallUnsupported{}
-+}
-+
-+// NewSHA3_256 returns a new SHA256 hash.
-+func NewSHA3_256() *DigestSHA3 {
-+	return newDigestSHA3(bcrypt.SHA3_256_ALGORITHM)
++// NewSHA3_256 returns a new SHA3-256 hash.
++func NewSHA3_256() *Hash {
++	return newHash(bcrypt.SHA3_256_ALGORITHM)
 +}
 +
-+// NewSHA3_384 returns a new SHA384 hash.
-+func NewSHA3_384() *DigestSHA3 {
-+	return newDigestSHA3(bcrypt.SHA3_384_ALGORITHM)
++// NewSHA3_384 returns a new SHA3-384 hash.
++func NewSHA3_384() *Hash {
++	return newHash(bcrypt.SHA3_384_ALGORITHM)
 +}
 +
-+// NewSHA3_512 returns a new SHA512 hash.
-+func NewSHA3_512() *DigestSHA3 {
-+	return newDigestSHA3(bcrypt.SHA3_512_ALGORITHM)
++// NewSHA3_512 returns a new SHA3-512 hash.
++func NewSHA3_512() *Hash {
++	return newHash(bcrypt.SHA3_512_ALGORITHM)
 +}
 +
 +// SHAKE is an instance of a SHAKE extendable output function.
@@ -29510,12 +29337,9 @@ index 00000000000000..36a7c6125fe7a1
 +}
 +
 +func newShake(id string, N, S []byte) *SHAKE {
-+	alg, err := loadHash(id, bcrypt.ALG_NONE_FLAG)
-+	if err != nil {
-+		panic(err)
-+	}
++	alg := mustLoadHash(id, bcrypt.ALG_NONE_FLAG)
 +	h := &SHAKE{blockSize: alg.blockSize}
-+	err = bcrypt.CreateHash(alg.handle, &h.ctx, nil, nil, bcrypt.HASH_REUSABLE_FLAG)
++	err := bcrypt.CreateHash(alg.handle, &h.ctx, nil, nil, bcrypt.HASH_REUSABLE_FLAG)
 +	if err != nil {
 +		panic(err)
 +	}
@@ -30142,7 +29966,7 @@ index 00000000000000..ec2eb01aa3cd8a
 +//sys	formatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) = FormatMessageW
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
 new file mode 100644
-index 00000000000000..5d049f025b0301
+index 00000000000000..5c9d3a978baa27
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
 @@ -0,0 +1,412 @@
@@ -30220,7 +30044,7 @@ index 00000000000000..5d049f025b0301
 +)
 +
 +func CloseAlgorithmProvider(hAlgorithm ALG_HANDLE, dwFlags uint32) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall(procBCryptCloseAlgorithmProvider.Addr(), 2, uintptr(hAlgorithm), uintptr(dwFlags), 0)
++	r0, _, _ := syscall.SyscallN(procBCryptCloseAlgorithmProvider.Addr(), uintptr(hAlgorithm), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30236,7 +30060,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbSecret) > 0 {
 +		_p1 = &pbSecret[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptCreateHash.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSecret)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptCreateHash.Addr(), uintptr(hAlgorithm), uintptr(unsafe.Pointer(phHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSecret)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30256,7 +30080,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p2 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall12(procBCryptDecrypt.Addr(), 10, uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDecrypt.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30268,7 +30092,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbDerivedKey) > 0 {
 +		_p0 = &pbDerivedKey[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptDeriveKey.Addr(), 7, uintptr(hSharedSecret), uintptr(unsafe.Pointer(pwszKDF)), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDeriveKey.Addr(), uintptr(hSharedSecret), uintptr(unsafe.Pointer(pwszKDF)), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30276,7 +30100,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func DestroyHash(hHash HASH_HANDLE) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall(procBCryptDestroyHash.Addr(), 1, uintptr(hHash), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDestroyHash.Addr(), uintptr(hHash))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30284,7 +30108,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func DestroyKey(hKey KEY_HANDLE) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall(procBCryptDestroyKey.Addr(), 1, uintptr(hKey), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDestroyKey.Addr(), uintptr(hKey))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30292,7 +30116,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func DestroySecret(hSecret SECRET_HANDLE) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall(procBCryptDestroySecret.Addr(), 1, uintptr(hSecret), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDestroySecret.Addr(), uintptr(hSecret))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30304,7 +30128,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbHashObject) > 0 {
 +		_p0 = &pbHashObject[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptDuplicateHash.Addr(), 5, uintptr(hHash), uintptr(unsafe.Pointer(phNewHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(dwFlags), 0)
++	r0, _, _ := syscall.SyscallN(procBCryptDuplicateHash.Addr(), uintptr(hHash), uintptr(unsafe.Pointer(phNewHash)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHashObject)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30320,7 +30144,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p1 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall12(procBCryptEncrypt.Addr(), 10, uintptr(hKey), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptEncrypt.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30332,7 +30156,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptExportKey.Addr(), 7, uintptr(hKey), uintptr(hExportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptExportKey.Addr(), uintptr(hKey), uintptr(hExportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30340,7 +30164,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func FinalizeKeyPair(hKey KEY_HANDLE, dwFlags uint32) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall(procBCryptFinalizeKeyPair.Addr(), 2, uintptr(hKey), uintptr(dwFlags), 0)
++	r0, _, _ := syscall.SyscallN(procBCryptFinalizeKeyPair.Addr(), uintptr(hKey), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30352,7 +30176,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptFinishHash.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptFinishHash.Addr(), uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30364,7 +30188,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbBuffer) > 0 {
 +		_p0 = &pbBuffer[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptGenRandom.Addr(), 4, uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbBuffer)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptGenRandom.Addr(), uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbBuffer)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30372,7 +30196,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func GenerateKeyPair(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, dwLength uint32, dwFlags uint32) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall6(procBCryptGenerateKeyPair.Addr(), 4, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(dwLength), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptGenerateKeyPair.Addr(), uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(dwLength), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30384,7 +30208,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbKeyObject) > 0 {
 +		_p0 = &pbKeyObject[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptGenerateSymmetricKey.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbKeyObject)), uintptr(unsafe.Pointer(pbSecret)), uintptr(cbSecret), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptGenerateSymmetricKey.Addr(), uintptr(hAlgorithm), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbKeyObject)), uintptr(unsafe.Pointer(pbSecret)), uintptr(cbSecret), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30396,7 +30220,7 @@ index 00000000000000..5d049f025b0301
 +	if *enabled {
 +		_p0 = 1
 +	}
-+	r0, _, _ := syscall.Syscall(procBCryptGetFipsAlgorithmMode.Addr(), 1, uintptr(unsafe.Pointer(&_p0)), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptGetFipsAlgorithmMode.Addr(), uintptr(unsafe.Pointer(&_p0)))
 +	*enabled = _p0 != 0
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
@@ -30409,7 +30233,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p0 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptGetProperty.Addr(), 6, uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
++	r0, _, _ := syscall.SyscallN(procBCryptGetProperty.Addr(), uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30429,7 +30253,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p2 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptHash.Addr(), 7, uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbSecret)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptHash.Addr(), uintptr(hAlgorithm), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbSecret)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30437,7 +30261,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func HashDataRaw(hHash HASH_HANDLE, pbInput *byte, cbInput uint32, dwFlags uint32) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall6(procBCryptHashData.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptHashData.Addr(), uintptr(hHash), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30449,7 +30273,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptHashData.Addr(), 4, uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptHashData.Addr(), uintptr(hHash), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30461,7 +30285,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptImportKeyPair.Addr(), 7, uintptr(hAlgorithm), uintptr(hImportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptImportKeyPair.Addr(), uintptr(hAlgorithm), uintptr(hImportKey), uintptr(unsafe.Pointer(pszBlobType)), uintptr(unsafe.Pointer(phKey)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30473,7 +30297,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbDerivedKey) > 0 {
 +		_p0 = &pbDerivedKey[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptKeyDerivation.Addr(), 6, uintptr(hKey), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
++	r0, _, _ := syscall.SyscallN(procBCryptKeyDerivation.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(pParameterList)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbDerivedKey)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30481,7 +30305,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func OpenAlgorithmProvider(phAlgorithm *ALG_HANDLE, pszAlgId *uint16, pszImplementation *uint16, dwFlags AlgorithmProviderFlags) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall6(procBCryptOpenAlgorithmProvider.Addr(), 4, uintptr(unsafe.Pointer(phAlgorithm)), uintptr(unsafe.Pointer(pszAlgId)), uintptr(unsafe.Pointer(pszImplementation)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptOpenAlgorithmProvider.Addr(), uintptr(unsafe.Pointer(phAlgorithm)), uintptr(unsafe.Pointer(pszAlgId)), uintptr(unsafe.Pointer(pszImplementation)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30489,7 +30313,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (ntstatus error) {
-+	r0, _, _ := syscall.Syscall6(procBCryptSecretAgreement.Addr(), 4, uintptr(hPrivKey), uintptr(hPubKey), uintptr(unsafe.Pointer(phAgreedSecret)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptSecretAgreement.Addr(), uintptr(hPrivKey), uintptr(hPubKey), uintptr(unsafe.Pointer(phAgreedSecret)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30501,7 +30325,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbInput) > 0 {
 +		_p0 = &pbInput[0]
 +	}
-+	r0, _, _ := syscall.Syscall6(procBCryptSetProperty.Addr(), 5, uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags), 0)
++	r0, _, _ := syscall.SyscallN(procBCryptSetProperty.Addr(), uintptr(hObject), uintptr(unsafe.Pointer(pszProperty)), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30517,7 +30341,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbOutput) > 0 {
 +		_p1 = &pbOutput[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptSignHash.Addr(), 8, uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags), 0)
++	r0, _, _ := syscall.SyscallN(procBCryptSignHash.Addr(), uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30533,7 +30357,7 @@ index 00000000000000..5d049f025b0301
 +	if len(pbSignature) > 0 {
 +		_p1 = &pbSignature[0]
 +	}
-+	r0, _, _ := syscall.Syscall9(procBCryptVerifySignature.Addr(), 7, uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHash)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSignature)), uintptr(dwFlags), 0, 0)
++	r0, _, _ := syscall.SyscallN(procBCryptVerifySignature.Addr(), uintptr(hKey), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbHash)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSignature)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -30545,7 +30369,7 @@ index 00000000000000..5d049f025b0301
 +	if len(buf) > 0 {
 +		_p0 = &buf[0]
 +	}
-+	r0, _, e1 := syscall.Syscall9(procFormatMessageW.Addr(), 7, uintptr(flags), uintptr(msgsrc), uintptr(msgid), uintptr(langid), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(args)), 0, 0)
++	r0, _, e1 := syscall.SyscallN(procFormatMessageW.Addr(), uintptr(flags), uintptr(msgsrc), uintptr(msgid), uintptr(langid), uintptr(unsafe.Pointer(_p0)), uintptr(len(buf)), uintptr(unsafe.Pointer(args)))
 +	n = uint32(r0)
 +	if n == 0 {
 +		err = errnoErr(e1)
@@ -30554,7 +30378,7 @@ index 00000000000000..5d049f025b0301
 +}
 +
 +func rtlNtStatusToDosErrorNoTeb(ntstatus NTStatus) (ret syscall.Errno) {
-+	r0, _, _ := syscall.Syscall(procRtlNtStatusToDosErrorNoTeb.Addr(), 1, uintptr(ntstatus), 0, 0)
++	r0, _, _ := syscall.SyscallN(procRtlNtStatusToDosErrorNoTeb.Addr(), uintptr(ntstatus))
 +	ret = syscall.Errno(r0)
 +	return
 +}
@@ -30658,24 +30482,24 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..ffa33da0b9cfc2 100644
+index f1e33686ed0626..3bc9dd533f9ab0 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251104102311-e8549d9da831
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251024091442-d6b6d440c946
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20250725141601-8349e082e173
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4
 +## explicit; go 1.22
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 3202f4d58e9..a514007516b 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -19,7 +19,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 249 +++++++++++
+ src/cmd/go/systemcrypto_test.go               | 249 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -30,9 +30,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 423 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 433 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 410 +++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 420 +++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -47,15 +47,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 329 ++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 370 +++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 349 ++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2651 insertions(+), 21 deletions(-)
+ 46 files changed, 2701 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -964,10 +964,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..a3d008a30d1f9d
+index 00000000000000..62acef2f8e14d8
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,423 @@
+@@ -0,0 +1,433 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1019,6 +1019,8 @@ index 00000000000000..a3d008a30d1f9d
 +func SupportsRSAOAEPLabel(label []byte) bool     { return true }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
 +
++type Hash = cng.Hash
++
 +func NewMD5() hash.Hash        { return cng.NewMD5() }
 +func NewSHA1() hash.Hash       { return cng.NewSHA1() }
 +func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
@@ -1027,15 +1029,23 @@ index 00000000000000..a3d008a30d1f9d
 +func NewSHA512() hash.Hash     { return cng.NewSHA512() }
 +func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
 +func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { return cng.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return cng.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { panic("cngcrypto: not available") }
-+func SHA256(p []byte) (sum [32]byte)     { return cng.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return cng.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return cng.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cngcrypto: not available") }
++func NewSHA3_224() *Hash       { panic("cngcrypto: not available") }
++func NewSHA3_256() *Hash       { return cng.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return cng.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return cng.NewSHA3_512() }
++
++func MD5(p []byte) (sum [16]byte)         { return cng.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return cng.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { panic("cngcrypto: not available") }
++func SHA256(p []byte) (sum [32]byte)      { return cng.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return cng.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return cng.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cngcrypto: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cngcrypto: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { return cng.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return cng.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return cng.SumSHA3_512(p) }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
 +	return cng.NewHMAC(h, key)
@@ -1445,10 +1455,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..2c3cf0641bda06
+index 00000000000000..e6abf96b2e7711
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,410 @@
+@@ -0,0 +1,420 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1514,21 +1524,31 @@ index 00000000000000..2c3cf0641bda06
 +	return false
 +}
 +
++type Hash = xcrypto.Hash
++
 +func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
 +func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
 +func NewSHA224() hash.Hash { panic("cryptobackend: not available") }
 +func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
 +func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
 +func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
-+
-+func MD5(p []byte) (sum [16]byte)        { return xcrypto.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return xcrypto.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte)     { return xcrypto.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return xcrypto.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return xcrypto.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++func NewSHA3_224() *Hash   { panic("cryptobackend: not available") }
++func NewSHA3_256() *Hash   { return xcrypto.NewSHA3_256() }
++func NewSHA3_384() *Hash   { return xcrypto.NewSHA3_384() }
++func NewSHA3_512() *Hash   { return xcrypto.NewSHA3_512() }
++
++func MD5(p []byte) (sum [16]byte)         { return xcrypto.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return xcrypto.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)      { return xcrypto.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return xcrypto.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return xcrypto.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { return xcrypto.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return xcrypto.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return xcrypto.SumSHA3_512(p) }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
 +	return xcrypto.NewHMAC(h, key)
@@ -2373,10 +2393,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..8907222b9265fe
+index 00000000000000..c729dab02ad1bd
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,329 @@
+@@ -0,0 +1,349 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2414,6 +2434,8 @@ index 00000000000000..8907222b9265fe
 +func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
 +
++type Hash struct{}
++
 +func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
 +func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
 +func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
@@ -2422,15 +2444,33 @@ index 00000000000000..8907222b9265fe
 +func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
 +func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
 +func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)        { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)       { panic("cryptobackend: not available") }
-+func SHA224(p []byte) (sum [28]byte)     { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte)     { panic("cryptobackend: not available") }
-+func SHA384(p []byte) (sum [48]byte)     { panic("cryptobackend: not available") }
-+func SHA512(p []byte) (sum [64]byte)     { panic("cryptobackend: not available") }
-+func SHA512_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_256() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_384() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_512() *Hash       { panic("cryptobackend: not available") }
++
++func (d *Hash) Write(p []byte) (n int, err error)     { panic("cryptobackend: not available") }
++func (d *Hash) Sum(b []byte) []byte                   { panic("cryptobackend: not available") }
++func (d *Hash) Reset()                                { panic("cryptobackend: not available") }
++func (d *Hash) Size() int                             { panic("cryptobackend: not available") }
++func (d *Hash) BlockSize() int                        { panic("cryptobackend: not available") }
++func (d *Hash) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (d *Hash) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (d *Hash) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++func (d *Hash) Clone() (hash.Cloner, error)           { panic("cryptobackend: not available") }
++
++func MD5(p []byte) (sum [16]byte)         { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)        { panic("cryptobackend: not available") }
++func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)      { panic("cryptobackend: not available") }
++func SHA384(p []byte) (sum [48]byte)      { panic("cryptobackend: not available") }
++func SHA512(p []byte) (sum [64]byte)      { panic("cryptobackend: not available") }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++func SumSHA3_384(p []byte) (sum [48]byte) { panic("cryptobackend: not available") }
++func SumSHA3_512(p []byte) (sum [64]byte) { panic("cryptobackend: not available") }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
 +
@@ -2708,10 +2748,10 @@ index 00000000000000..8907222b9265fe
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..a2154fe10d06af
+index 00000000000000..3e99c5961b8891
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,370 @@
+@@ -0,0 +1,380 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2765,6 +2805,8 @@ index 00000000000000..a2154fe10d06af
 +func SupportsRSAOAEPLabel(label []byte) bool     { return true }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
 +
++type Hash = openssl.Hash
++
 +func NewMD5() hash.Hash        { return openssl.NewMD5() }
 +func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
 +func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
@@ -2773,15 +2815,23 @@ index 00000000000000..a2154fe10d06af
 +func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
 +func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
 +func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
-+
-+func MD5(p []byte) (sum [16]byte)        { return openssl.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)       { return openssl.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)     { return openssl.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)     { return openssl.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)     { return openssl.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)     { return openssl.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte) { return openssl.SHA512_224(p) }
-+func SHA512_256(p []byte) (sum [32]byte) { return openssl.SHA512_256(p) }
++func NewSHA3_224() *Hash       { return openssl.NewSHA3_224() }
++func NewSHA3_256() *Hash       { return openssl.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return openssl.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return openssl.NewSHA3_512() }
++
++func MD5(p []byte) (sum [16]byte)         { return openssl.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return openssl.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { return openssl.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)      { return openssl.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return openssl.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return openssl.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { return openssl.SHA512_224(p) }
++func SHA512_256(p []byte) (sum [32]byte)  { return openssl.SHA512_256(p) }
++func SumSHA3_224(p []byte) (sum [28]byte) { return openssl.SumSHA3_224(p) }
++func SumSHA3_256(p []byte) (sum [32]byte) { return openssl.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return openssl.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return openssl.SumSHA3_512(p) }
 +
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
 +
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index a013e5f5024..ede012524f6 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -69,6 +69,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  44 ++--
+ src/crypto/sha3/sha3.go                       |  67 +++++-
+ src/crypto/sha3/sha3_test.go                  |  11 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
@@ -94,7 +96,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 90 files changed, 1266 insertions(+), 133 deletions(-)
+ 92 files changed, 1337 insertions(+), 140 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2606,6 +2608,227 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
 +		t.Fatalf("allocs = %v; want <= %v", allocs, maxAllocs)
  	}
  }
+diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
+index 2a1b3ca7008f5e..225cd524895a6c 100644
+--- a/src/crypto/sha3/sha3.go
++++ b/src/crypto/sha3/sha3.go
+@@ -8,6 +8,7 @@ package sha3
+ 
+ import (
+ 	"crypto"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/sha3"
+ 	"hash"
+ 	_ "unsafe"
+@@ -22,6 +23,9 @@ func init() {
+ 
+ // Sum224 returns the SHA3-224 hash of data.
+ func Sum224(data []byte) [28]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_224) {
++		return boring.SumSHA3_224(data)
++	}
+ 	var out [28]byte
+ 	h := sha3.New224()
+ 	h.Write(data)
+@@ -31,6 +35,9 @@ func Sum224(data []byte) [28]byte {
+ 
+ // Sum256 returns the SHA3-256 hash of data.
+ func Sum256(data []byte) [32]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_256) {
++		return boring.SumSHA3_256(data)
++	}
+ 	var out [32]byte
+ 	h := sha3.New256()
+ 	h.Write(data)
+@@ -40,6 +47,9 @@ func Sum256(data []byte) [32]byte {
+ 
+ // Sum384 returns the SHA3-384 hash of data.
+ func Sum384(data []byte) [48]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_384) {
++		return boring.SumSHA3_384(data)
++	}
+ 	var out [48]byte
+ 	h := sha3.New384()
+ 	h.Write(data)
+@@ -49,6 +59,9 @@ func Sum384(data []byte) [48]byte {
+ 
+ // Sum512 returns the SHA3-512 hash of data.
+ func Sum512(data []byte) [64]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_512) {
++		return boring.SumSHA3_512(data)
++	}
+ 	var out [64]byte
+ 	h := sha3.New512()
+ 	h.Write(data)
+@@ -98,7 +111,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
+ 
+ // SHA3 is an instance of a SHA-3 hash. It implements [hash.Hash].
+ type SHA3 struct {
+-	s sha3.Digest
++	s         sha3.Digest
++	boringS   *boring.Hash
++	supported bool
+ }
+ 
+ //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
+@@ -108,66 +123,106 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
+ 
+ // New224 creates a new SHA3-224 hash.
+ func New224() *SHA3 {
+-	return &SHA3{*sha3.New224()}
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_224) {
++		return &SHA3{boringS: boring.NewSHA3_224(), supported: true}
++	}
++	return &SHA3{s: *sha3.New224()}
+ }
+ 
+ // New256 creates a new SHA3-256 hash.
+ func New256() *SHA3 {
+-	return &SHA3{*sha3.New256()}
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_256) {
++		return &SHA3{boringS: boring.NewSHA3_256(), supported: true}
++	}
++	return &SHA3{s: *sha3.New256()}
+ }
+ 
+ // New384 creates a new SHA3-384 hash.
+ func New384() *SHA3 {
+-	return &SHA3{*sha3.New384()}
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_384) {
++		return &SHA3{boringS: boring.NewSHA3_384(), supported: true}
++	}
++	return &SHA3{s: *sha3.New384()}
+ }
+ 
+ // New512 creates a new SHA3-512 hash.
+ func New512() *SHA3 {
+-	return &SHA3{*sha3.New512()}
++	if boring.Enabled && boring.SupportsHash(crypto.SHA3_512) {
++		return &SHA3{boringS: boring.NewSHA3_512(), supported: true}
++	}
++	return &SHA3{s: *sha3.New512()}
+ }
+ 
+ // Write absorbs more data into the hash's state.
+ func (s *SHA3) Write(p []byte) (n int, err error) {
++	if boring.Enabled && s.supported {
++		return s.boringS.Write(p)
++	}
+ 	return s.s.Write(p)
+ }
+ 
+ // Sum appends the current hash to b and returns the resulting slice.
+ func (s *SHA3) Sum(b []byte) []byte {
++	if boring.Enabled && s.supported {
++		return s.boringS.Sum(b)
++	}
+ 	return s.s.Sum(b)
+ }
+ 
+ // Reset resets the hash to its initial state.
+ func (s *SHA3) Reset() {
+-	s.s.Reset()
++	if boring.Enabled && s.supported {
++		s.boringS.Reset()
++	} else {
++		s.s.Reset()
++	}
+ }
+ 
+ // Size returns the number of bytes Sum will produce.
+ func (s *SHA3) Size() int {
++	if boring.Enabled && s.supported {
++		return s.boringS.Size()
++	}
+ 	return s.s.Size()
+ }
+ 
+ // BlockSize returns the hash's rate.
+ func (s *SHA3) BlockSize() int {
++	if boring.Enabled && s.supported {
++		return s.boringS.BlockSize()
++	}
+ 	return s.s.BlockSize()
+ }
+ 
+ // MarshalBinary implements [encoding.BinaryMarshaler].
+ func (s *SHA3) MarshalBinary() ([]byte, error) {
++	if boring.Enabled && s.supported {
++		return s.boringS.MarshalBinary()
++	}
+ 	return s.s.MarshalBinary()
+ }
+ 
+ // AppendBinary implements [encoding.BinaryAppender].
+ func (s *SHA3) AppendBinary(p []byte) ([]byte, error) {
++	if boring.Enabled && s.supported {
++		return s.boringS.AppendBinary(p)
++	}
+ 	return s.s.AppendBinary(p)
+ }
+ 
+ // UnmarshalBinary implements [encoding.BinaryUnmarshaler].
+ func (s *SHA3) UnmarshalBinary(data []byte) error {
++	if boring.Enabled && s.supported {
++		return s.boringS.UnmarshalBinary(data)
++	}
+ 	return s.s.UnmarshalBinary(data)
+ }
+ 
+ // Clone implements [hash.Cloner].
+ func (d *SHA3) Clone() (hash.Cloner, error) {
++	if boring.Enabled && d.supported {
++		return d.boringS.Clone()
++	}
+ 	r := *d
+ 	return &r, nil
+ }
+diff --git a/src/crypto/sha3/sha3_test.go b/src/crypto/sha3/sha3_test.go
+index 15ee877236e195..ea30f8ae6f69b1 100644
+--- a/src/crypto/sha3/sha3_test.go
++++ b/src/crypto/sha3/sha3_test.go
+@@ -6,9 +6,11 @@ package sha3_test
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	. "crypto/sha3"
+ 	"encoding/hex"
++	"errors"
+ 	"hash"
+ 	"io"
+ 	"math/rand"
+@@ -223,6 +225,10 @@ var sinkSHA3 byte
+ 
+ func TestAllocations(t *testing.T) {
+ 	cryptotest.SkipTestAllocations(t)
++	expectedAllocations := 0.0
++	if boring.Enabled {
++		expectedAllocations = 2
++	}
+ 	t.Run("New", func(t *testing.T) {
+ 		if allocs := testing.AllocsPerRun(10, func() {
+ 			h := New256()
+@@ -231,7 +237,7 @@ func TestAllocations(t *testing.T) {
+ 			out := make([]byte, 0, 32)
+ 			out = h.Sum(out)
+ 			sinkSHA3 ^= out[0]
+-		}); allocs > 0 {
++		}); allocs > expectedAllocations {
+ 			t.Errorf("expected zero allocations, got %0.1f", allocs)
+ 		}
+ 	})
+@@ -411,6 +417,9 @@ func testMarshalUnmarshal(t *testing.T, h *SHA3) {
+ 	h.Write(buf[:n])
+ 	b, err := h.MarshalBinary()
+ 	if err != nil {
++		if errors.Is(err, errors.ErrUnsupported) {
++			t.Skip("MarshalBinary not supported")
++		}
+ 		t.Errorf("MarshalBinary: %v", err)
+ 	}
+ 	h.Write(bytes.Repeat([]byte{0}, 200))
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
 index 1435eac1f5b5dc..17e8501154762a 100644
 --- a/src/crypto/sha512/sha512.go

From 6a89acc65db34e62f28750f78b18463cc6d835ea Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 6 Nov 2025 10:11:43 +0000
Subject: [PATCH 551/887] Update submodule to latest master (8111104a):
 cmd/internal/obj/loong64: add {,X}VSHUF.{B/H/W/V} instructions support

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9f3a108ee0d..8111104a212 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9f3a108ee0d2f08b4994c4201e54e5a53acbc216
+Subproject commit 8111104a2120e14ef068b9cfbda91965473ab345

From 44e81c79896ba2db183ec8452cd19ae10b945862 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 6 Nov 2025 10:24:32 +0000
Subject: [PATCH 552/887] remove weak binding patch now CL has landed

---
 .../0011-support-weak-binding-on-darwin.patch | 90 -------------------
 1 file changed, 90 deletions(-)
 delete mode 100644 patches/0011-support-weak-binding-on-darwin.patch

diff --git a/patches/0011-support-weak-binding-on-darwin.patch b/patches/0011-support-weak-binding-on-darwin.patch
deleted file mode 100644
index 2a4ec7bee2e..00000000000
--- a/patches/0011-support-weak-binding-on-darwin.patch
+++ /dev/null
@@ -1,90 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 24 Oct 2025 13:03:01 +0200
-Subject: [PATCH] support weak binding on darwin
-
-Remove once https://go-review.googlesource.com/c/go/+/713760 is merged.
----
- src/cmd/link/internal/ld/macho.go          |  8 +++++++-
- src/cmd/link/internal/loader/loader.go     | 13 +++++++++++++
- src/cmd/link/internal/loadmacho/ldmacho.go |  3 +++
- 3 files changed, 23 insertions(+), 1 deletion(-)
-
-diff --git a/src/cmd/link/internal/ld/macho.go b/src/cmd/link/internal/ld/macho.go
-index 8e059f299ffa73..1aa9042dc7a20f 100644
---- a/src/cmd/link/internal/ld/macho.go
-+++ b/src/cmd/link/internal/ld/macho.go
-@@ -180,6 +180,8 @@ const (
- 	BIND_SPECIAL_DYLIB_FLAT_LOOKUP     = -2
- 	BIND_SPECIAL_DYLIB_WEAK_LOOKUP     = -3
- 
-+	BIND_SYMBOL_FLAGS_WEAK_IMPORT = 0x1
-+
- 	BIND_OPCODE_MASK                                         = 0xF0
- 	BIND_IMMEDIATE_MASK                                      = 0x0F
- 	BIND_OPCODE_DONE                                         = 0x00
-@@ -1429,7 +1431,11 @@ func machoDyldInfo(ctxt *Link) {
- 			bind.AddUint8(BIND_OPCODE_SET_DYLIB_SPECIAL_IMM | uint8(d)&0xf)
- 		}
- 
--		bind.AddUint8(BIND_OPCODE_SET_SYMBOL_TRAILING_FLAGS_IMM)
-+		flags := uint8(0)
-+		if ldr.SymWeakBinding(r.targ) {
-+			flags |= BIND_SYMBOL_FLAGS_WEAK_IMPORT
-+		}
-+		bind.AddUint8(BIND_OPCODE_SET_SYMBOL_TRAILING_FLAGS_IMM | flags)
- 		// target symbol name as a C string, with _ prefix
- 		bind.AddUint8('_')
- 		bind.Addstring(ldr.SymExtname(r.targ))
-diff --git a/src/cmd/link/internal/loader/loader.go b/src/cmd/link/internal/loader/loader.go
-index cef17fae781798..90661cb6cc7be5 100644
---- a/src/cmd/link/internal/loader/loader.go
-+++ b/src/cmd/link/internal/loader/loader.go
-@@ -241,6 +241,7 @@ type Loader struct {
- 	plt         map[Sym]int32       // stores dynimport for pe objects
- 	got         map[Sym]int32       // stores got for pe objects
- 	dynid       map[Sym]int32       // stores Dynid for symbol
-+	weakBinding map[Sym]bool        // stores whether a symbol has a weak binding
- 
- 	relocVariant map[relocId]sym.RelocVariant // stores variant relocs
- 
-@@ -326,6 +327,7 @@ func NewLoader(flags uint32, reporter *ErrorReporter) *Loader {
- 		plt:                  make(map[Sym]int32),
- 		got:                  make(map[Sym]int32),
- 		dynid:                make(map[Sym]int32),
-+		weakBinding:          make(map[Sym]bool),
- 		attrCgoExportDynamic: make(map[Sym]struct{}),
- 		attrCgoExportStatic:  make(map[Sym]struct{}),
- 		deferReturnTramp:     make(map[Sym]bool),
-@@ -1450,6 +1452,17 @@ func (l *Loader) SetSymExtname(i Sym, value string) {
- 	}
- }
- 
-+func (l *Loader) SymWeakBinding(i Sym) bool {
-+	return l.weakBinding[i]
-+}
-+func (l *Loader) SetSymWeakBinding(i Sym, v bool) {
-+	// reject bad symbols
-+	if i >= Sym(len(l.objSyms)) || i == 0 {
-+		panic("bad symbol index in SetSymWeakBinding")
-+	}
-+	l.weakBinding[i] = v
-+}
-+
- // SymElfType returns the previously recorded ELF type for a symbol
- // (used only for symbols read from shared libraries by ldshlibsyms).
- // It is not set for symbols defined by the packages being linked or
-diff --git a/src/cmd/link/internal/loadmacho/ldmacho.go b/src/cmd/link/internal/loadmacho/ldmacho.go
-index 5e8022ce69bb36..dcb0fd92c1f357 100644
---- a/src/cmd/link/internal/loadmacho/ldmacho.go
-+++ b/src/cmd/link/internal/loadmacho/ldmacho.go
-@@ -613,6 +613,9 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, f *bio.Reader,
- 		}
- 		if machsym.desc&(N_WEAK_REF|N_WEAK_DEF) != 0 {
- 			l.SetAttrDuplicateOK(s, true)
-+			if machsym.desc&N_WEAK_REF != 0 {
-+				l.SetSymWeakBinding(s, true)
-+			}
- 		}
- 		machsym.sym = s
- 		if machsym.sectnum == 0 { // undefined

From e161b070f52f6d3674fc9f39c241b9b6d14b3ec1 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 7 Nov 2025 16:09:49 +0000
Subject: [PATCH 553/887] Update submodule to latest master (ad3ccd92):
 cmd/link: move pclntab out of relro section

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 8111104a212..ad3ccd92e4c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 8111104a2120e14ef068b9cfbda91965473ab345
+Subproject commit ad3ccd92e4c2ddfc1499a5e038eb0aa0012c0dda

From 3a5868bc516f7dae5334c7f914bce8771e0717ce Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 10 Nov 2025 16:09:56 +0000
Subject: [PATCH 554/887] Update submodule to latest master (5f4b5f1a):
 runtime/msan: use different msan routine for copying

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index ad3ccd92e4c..5f4b5f1a196 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit ad3ccd92e4c2ddfc1499a5e038eb0aa0012c0dda
+Subproject commit 5f4b5f1a196774e45bc50de0729973119eb7bf07

From e31621ba9b7b6ba866d379f6030d89314962e55b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 12 Nov 2025 15:46:19 +0000
Subject: [PATCH 555/887] build(deps): bump golang.org/x/net from 0.46.0 to
 0.47.0 in /eng/_util (#1955)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/net/compare/v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index d13165859b6..3fb73132930 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,8 +10,8 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7
 	github.com/microsoft/go-infra/goinstallscript v1.0.0
-	golang.org/x/net v0.46.0
-	golang.org/x/sys v0.37.0
+	golang.org/x/net v0.47.0
+	golang.org/x/sys v0.38.0
 )
 
 require (
@@ -20,5 +20,5 @@ require (
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
 	golang.org/x/oauth2 v0.32.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 339fe51a7b4..e6bbe9771b3 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -18,14 +18,14 @@ github.com/microsoft/go-infra v0.0.7 h1:wl67HhAGlGn6mnFGNFch4F49AC4CN1FQxYiduI4D
 github.com/microsoft/go-infra v0.0.7/go.mod h1:IOooBUtSykqU41l41GzZx7/VLmzm1zVQ5IQ/1YpyH+k=
 github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
 github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
-golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
-golang.org/x/net v0.46.0/go.mod h1:Q9BGdFy1y4nkUwiLvT5qtyhAnEHgnQ/zd8PfU6nc210=
+golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
+golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/oauth2 v0.32.0 h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY=
 golang.org/x/oauth2 v0.32.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sys v0.37.0 h1:fdNQudmxPjkdUTPnLn5mdQv7Zwvbvpaxqs831goi9kQ=
-golang.org/x/sys v0.37.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.30.0 h1:yznKA/E9zq54KzlzBEAWn1NXSQ8DIp/NYMy88xJjl4k=
-golang.org/x/text v0.30.0/go.mod h1:yDdHFIX9t+tORqspjENWgzaCVXgk0yYnYuSZ8UzzBVM=
+golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
+golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
+golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
 golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

From 495ee2a5bff0d11735397926369ea988a084f3bf Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 12 Nov 2025 16:09:55 +0000
Subject: [PATCH 556/887] Update submodule to latest master (8873e8be):
 runtime,runtime/pprof: clean up goroutine leak profile writing

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 5f4b5f1a196..8873e8bea29 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 5f4b5f1a196774e45bc50de0729973119eb7bf07
+Subproject commit 8873e8bea29ac6de5fecee88b8b81239bd2eb179

From c93da8a0b3b2eb895e8132d21bf61268a7cef418 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 15:29:50 +0000
Subject: [PATCH 557/887] build(deps): bump github/codeql-action from 4.31.2 to
 4.31.3 (#1957)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.2 to 4.31.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0499de31b99561a6d14a36a5f662c2a54f91beee...014f16e7ab1402f30e7c3329d33797e7948572db)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0351512fb6b..f0fb5ebc127 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
         with:
           category: /language:go

From e1a767b6e943b671e0b8f3c0643cd08d85d8b68c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 15:48:48 +0000
Subject: [PATCH 558/887] build(deps): bump
 github.com/microsoft/go-infra/goinstallscript from 1.0.0 to 1.1.0 in
 /eng/_util (#1954)

* build(deps): bump github.com/microsoft/go-infra/goinstallscript

Bumps [github.com/microsoft/go-infra/goinstallscript](https://github.com/microsoft/go-infra) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/goinstallscript/v1.0.0...goinstallscript/v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra/goinstallscript
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* update go-install.ps1

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 eng/_util/go-install.ps1 | 9 +++++++++
 eng/_util/go.mod         | 2 +-
 eng/_util/go.sum         | 4 ++--
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go-install.ps1 b/eng/_util/go-install.ps1
index ddebb164aa1..8a586993189 100644
--- a/eng/_util/go-install.ps1
+++ b/eng/_util/go-install.ps1
@@ -53,6 +53,9 @@
 .PARAMETER AzurePipelinePath
     If set, it will print an Azure DevOps logging command that causes the Azure DevOps to update the
     PATH environment variable of subsequent build steps to include the binaries folder.
+.PARAMETER GitHubActionsPath
+    If set, it will append the binaries folder to the GITHUB_PATH environment file, causing GitHub Actions
+    to update the PATH environment variable of subsequent build steps to include the binaries folder.
 .PARAMETER ProxyAddress
     If set, it will use the proxy when making web requests
 .PARAMETER ProxyUseDefaultCredentials
@@ -89,6 +92,7 @@ param(
     [switch]$DryRun,
     [switch]$NoPath,
     [switch]$AzurePipelinePath,
+    [switch]$GitHubActionsPath,
     [string]$ProxyAddress,
     [switch]$ProxyUseDefaultCredentials,
     [string[]]$ProxyBypassList=@(),
@@ -686,6 +690,11 @@ function Prepend-ToolsetPathEnv([string]$InstallRoot, [string]$SpecificVersion)
         Say "Running an Azure Pipelines logging command to prepend `"$BinPath`" to the PATH."
         Say "##vso[task.prependpath]$BinPath"
     }
+
+    if ($GitHubActionsPath) {
+        Say "Appending `"$BinPath`" to the GITHUB_PATH file."
+        $BinPath | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
+    }
 }
 
 function PrintDryRunOutput($Invocation) {
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 3fb73132930..4597f222695 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.24.0
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.7
-	github.com/microsoft/go-infra/goinstallscript v1.0.0
+	github.com/microsoft/go-infra/goinstallscript v1.1.0
 	golang.org/x/net v0.47.0
 	golang.org/x/sys v0.38.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index e6bbe9771b3..74aa7ea2533 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -16,8 +16,8 @@ github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHS
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.7 h1:wl67HhAGlGn6mnFGNFch4F49AC4CN1FQxYiduI4DQbE=
 github.com/microsoft/go-infra v0.0.7/go.mod h1:IOooBUtSykqU41l41GzZx7/VLmzm1zVQ5IQ/1YpyH+k=
-github.com/microsoft/go-infra/goinstallscript v1.0.0 h1:LFakXWLma5+OlsGRvEMxoI6OpF8KMZACzNMKZ5NEmkk=
-github.com/microsoft/go-infra/goinstallscript v1.0.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
+github.com/microsoft/go-infra/goinstallscript v1.1.0 h1:63Zo4Iw1Ft0swdVl+LKCZPPKv1QZiIRY3ZgyhJyMr5A=
+github.com/microsoft/go-infra/goinstallscript v1.1.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/oauth2 v0.32.0 h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY=

From 62be901debcb74507438d88228898db669e9d2e6 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 14 Nov 2025 16:08:49 +0000
Subject: [PATCH 559/887] Update submodule to latest master (d50a571d): test:
 fix tests to work with sizespecializedmalloc turned off

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 8873e8bea29..d50a571ddfb 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 8873e8bea29ac6de5fecee88b8b81239bd2eb179
+Subproject commit d50a571ddfb7661d65c8488b0bbfeacc793f964b

From bd6079f4537ba7717adbba16421d8d897aee2ad3 Mon Sep 17 00:00:00 2001
From: Matt Mitchell <mmitche@microsoft.com>
Date: Fri, 14 Nov 2025 09:52:37 -0800
Subject: [PATCH 560/887] Add .azuredevops/dependabot.yml (#1958)

---
 .azuredevops/dependabot.yml | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .azuredevops/dependabot.yml

diff --git a/.azuredevops/dependabot.yml b/.azuredevops/dependabot.yml
new file mode 100644
index 00000000000..f18e60565a4
--- /dev/null
+++ b/.azuredevops/dependabot.yml
@@ -0,0 +1,5 @@
+version: 2
+
+# Disabling dependabot on Azure DevOps as this is a mirrored repo. Updates should go through github.
+enable-campaigned-updates: false
+enable-security-updates: false

From 6364a062a895e65a5c6dfdf0a5747d85a69bee9e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 17 Nov 2025 16:10:08 +0000
Subject: [PATCH 561/887] Update submodule to latest master (c58d075e):
 crypto/rsa: deprecate PKCS#1 v1.5 encryption

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d50a571ddfb..c58d075e9a4 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d50a571ddfb7661d65c8488b0bbfeacc793f964b
+Subproject commit c58d075e9a457fce92bdf60e2d1870c8c4df7dc5

From ce0449dbd6adfeda9b1cf062c2ae829f539f9116 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 17 Nov 2025 16:21:38 +0000
Subject: [PATCH 562/887] resolve conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 16 ++++----
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 14 +++----
 ...03-Implement-crypto-internal-backend.patch | 39 +++++++++++--------
 3 files changed, 38 insertions(+), 31 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 3ee0ae6ba1e..628f4571e4c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -401,7 +401,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 42d510c34fe6b4..7fd4153f448200 100644
+index 090b2c943f3f4c..f959fe9960b60f 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -412,9 +412,9 @@ index 42d510c34fe6b4..7fd4153f448200 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
  	golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
- 	golang.org/x/mod v0.29.0
+ 	golang.org/x/mod v0.30.1-0.20251114215501-3f03020ad526
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 0a09e6e401a926..1e2286021ae3a2 100644
+index e4955f224b405c..c99821e84b2bcd 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -2010,7 +2010,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index e92804a90d3f59..16ee1b9770d2e4 100644
+index 80b23723bc780d..6c8c537761bc38 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2060,11 +2060,11 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index c5e901b9ef22e8..4f68035a87dab7 100644
+index e6cb3d5b43dbd3..e46499deb4c59d 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.37.0 // indirect
+ 	golang.org/x/sys v0.38.0 // indirect
  	golang.org/x/text v0.30.0 // indirect
  )
 +
@@ -2074,7 +2074,7 @@ index c5e901b9ef22e8..4f68035a87dab7 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4a52682161fc23..85f3b5ff59025e 100644
+index fe184a864718af..9542320ab4d9c9 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -30482,7 +30482,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index f1e33686ed0626..3bc9dd533f9ab0 100644
+index bf7a797966088f..043f598acb39df 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 7d48dae0890..2795d209579 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -391,7 +391,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 31195f94c08c86..14ca07c56683f1 100644
+index f1a1d8632ef507..31ec5a1a4ec140 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -441,15 +441,15 @@ index 31195f94c08c86..14ca07c56683f1 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -86,6 +112,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RuntimeFree:           true,
+@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RandomizedHeapBase64:  true,
  		SizeSpecializedMalloc: true,
  		GreenTeaGC:            true,
 +		SystemCrypto:          systemCryptoSupported,
  	}
  
  	// Start with the statically enabled set of experiments.
-@@ -127,6 +154,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -126,6 +153,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -464,7 +464,7 @@ index 31195f94c08c86..14ca07c56683f1 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -140,6 +175,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -139,6 +174,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -475,7 +475,7 @@ index 31195f94c08c86..14ca07c56683f1 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -153,6 +192,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -152,6 +191,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -626,7 +626,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index b3a3c8a4974975..342d663c20f439 100644
+index 957c41c0f5c61e..f326560c595178 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,28 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index a514007516b..b6299db868b 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -23,7 +23,7 @@ desired goexperiments and build tags.
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
- src/cmd/link/internal/ld/main.go              |  14 +-
+ src/cmd/link/internal/ld/main.go              |  20 +-
  src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_test.go   |  30 ++
  src/crypto/internal/backend/bbig/big.go       |  17 +
@@ -55,7 +55,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2701 insertions(+), 21 deletions(-)
+ 46 files changed, 2704 insertions(+), 24 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -85,10 +85,10 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/systemcrypto_nocgo_linux.go
 
 diff --git a/.gitignore b/.gitignore
-index c6512e64a4ef39..b3b01db73b009d 100644
+index 344b31f7ac1c1d..b4583113d5aa15 100644
 --- a/.gitignore
 +++ b/.gitignore
-@@ -46,6 +46,8 @@ _testmain.go
+@@ -47,6 +47,8 @@ _testmain.go
  /test/run.out
  /test/times.out
  
@@ -262,7 +262,7 @@ index 2b382a1c025649..25b555dace9a6f 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 9c9e1b85f0cd76..cbf0d77c4d19f0 100644
+index 15cfcccec38329..713cb4f2a42668 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -377,7 +377,7 @@ index 9c9e1b85f0cd76..cbf0d77c4d19f0 100644
  	// https://golang.org/issue/10373
  	// https://golang.org/issue/14449
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
-index e4ee9bd1e8d2ec..3bdb6b4d31fe46 100644
+index 1722f1a2c34428..ba7740bf8cd31e 100644
 --- a/src/cmd/go/go_test.go
 +++ b/src/cmd/go/go_test.go
 @@ -13,6 +13,7 @@ import (
@@ -402,7 +402,7 @@ index e4ee9bd1e8d2ec..3bdb6b4d31fe46 100644
  
  		if testGOROOT := os.Getenv("TESTGO_GOROOT"); testGOROOT != "" {
  			// Disallow installs to the GOROOT from which testgo was built.
-@@ -1860,6 +1868,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+@@ -1862,6 +1870,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
  }
  
  func TestGoEnv(t *testing.T) {
@@ -461,7 +461,7 @@ index 3b8bbdc91b8191..53a58e23f8b05c 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index e283c7354f5a34..ad56d64a29f684 100644
+index 92e8a803105f8d..95d47b625c28a7 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
 @@ -305,6 +305,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
@@ -785,7 +785,7 @@ index 30e66c428dc470..ed061d7fbf4684 100644
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index d913953944bc43..3349e53cd07809 100644
+index a4b3a0422f2f41..ce290ab4617cfd 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -44,6 +44,7 @@ import (
@@ -796,11 +796,13 @@ index d913953944bc43..3349e53cd07809 100644
  	"strconv"
  	"strings"
  )
-@@ -188,7 +189,18 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -188,11 +189,22 @@ func Main(arch *sys.Arch, theArch Arch) {
  
  	buildVersion := buildcfg.Version
  	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
--		buildVersion += " X:" + goexperiment
+-		sep := " "
+-		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
+-			sep = "-"
 +		// buildVersion is intended to contain non-default experiment flags.
 +		// The Microsoft build of Go default behavior is to set the
 +		// nosystemcrypto experiments, so we don't include it in the buildVersion string.
@@ -811,13 +813,18 @@ index d913953944bc43..3349e53cd07809 100644
 +			return s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
 +		}), ",")
 +		if goexperiment != "" {
-+			buildVersion += " X:" + goexperiment
-+		}
++			sep := " "
++			if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
++				sep = "-"
++			}
++			buildVersion += sep + "X:" + goexperiment
+ 		}
+-		buildVersion += sep + "X:" + goexperiment
  	}
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 31822d21f39d31..71d23e76f91e1b 100644
+index 6ab1246c814dfb..db61e625c6aadf 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -9,6 +9,7 @@ import (
@@ -3242,7 +3249,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 14ca07c56683f1..64c37df9e9fced 100644
+index 31ec5a1a4ec140..b28387a100c554 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -3261,7 +3268,7 @@ index 14ca07c56683f1..64c37df9e9fced 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -195,6 +198,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -194,6 +197,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}

From c3ba072a0d60296e0d17c83edaee318ceb1063d1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 18 Nov 2025 18:06:35 +0000
Subject: [PATCH 563/887] build(deps): bump actions/checkout from 5.0.0 to
 5.0.1 (#1961)

Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...93cb6efe18208431cddfb8368fd83d5badbf9bfd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f0fb5ebc127..94777b2ebf5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index b72b58671de..4d64e0af72e 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index d5a44aedb8a..bdad414b413 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 8057a7f82ea..0ae63ebd0e0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From 74e78a1cf50042a30c4defe7081e5a8a47497e80 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Nov 2025 10:52:22 +0000
Subject: [PATCH 564/887] build(deps): bump github/codeql-action from 4.31.3 to
 4.31.4 (#1962)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.3 to 4.31.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/014f16e7ab1402f30e7c3329d33797e7948572db...e12f0178983d466f2f6028f5cc7a6d786fd97f4b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 94777b2ebf5..ff1e54cc82d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+        uses: github/codeql-action/init@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+        uses: github/codeql-action/autobuild@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+        uses: github/codeql-action/analyze@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
         with:
           category: /language:go

From 378658dba7dcfac1554c9f4a3490df2a76f6b52e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 19 Nov 2025 16:07:56 +0000
Subject: [PATCH 565/887] Update submodule to latest master (8c41a482):
 runtime: add dlog.hexdump

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index c58d075e9a4..8c41a482f9b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit c58d075e9a457fce92bdf60e2d1870c8c4df7dc5
+Subproject commit 8c41a482f9b7a101404cd0b417ac45abd441e598

From 4634f9e2ea22d738ba7a63e68cf2f30b91a17f04 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 20 Nov 2025 09:50:07 +0000
Subject: [PATCH 566/887] resolve 3-way merge conflicts

---
 patches/0004-Use-crypto-backends.patch | 46 +++++++++++++-------------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index ede012524f6..8397b1732b6 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -122,7 +122,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index cbf0d77c4d19f0..3fe232b4b07bfb 100644
+index 713cb4f2a42668..5d1e1218de4c6a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -1540,7 +1540,7 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index 69c0bc571f95a9..f56ce4401c9a9d 100644
+index cb44bede20b72c..745121515b42cf 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
 @@ -11,7 +11,10 @@
@@ -1674,9 +1674,9 @@ index 69c0bc571f95a9..f56ce4401c9a9d 100644
  	return ek.key.Bytes()
  }
  
-@@ -109,41 +150,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
- //
- // The shared key must be kept secret.
+@@ -112,41 +153,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+ // For testing, derandomized encapsulation is provided by the
+ // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
 +	if boring.Enabled && boring.SupportsMLKEM768() {
 +		return ek.boringKey.Encapsulate()
@@ -1742,7 +1742,7 @@ index 69c0bc571f95a9..f56ce4401c9a9d 100644
  	return dk.key.Bytes()
  }
  
-@@ -152,34 +216,52 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+@@ -155,34 +219,52 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -1798,9 +1798,9 @@ index 69c0bc571f95a9..f56ce4401c9a9d 100644
  	return ek.key.Bytes()
  }
  
-@@ -188,5 +270,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
- //
- // The shared key must be kept secret.
+@@ -194,5 +276,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+ // For testing, derandomized encapsulation is provided by the
+ // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {
 +	if boring.Enabled && boring.SupportsMLKEM1024() {
 +		return ek.boringKey.Encapsulate()
@@ -1808,18 +1808,18 @@ index 69c0bc571f95a9..f56ce4401c9a9d 100644
  	return ek.key.Encapsulate()
  }
 diff --git a/src/crypto/mlkem/mlkem_test.go b/src/crypto/mlkem/mlkem_test.go
-index 207d6d48c3cb0b..410387661e9545 100644
+index 922147ab15dec2..614d51762eddab 100644
 --- a/src/crypto/mlkem/mlkem_test.go
 +++ b/src/crypto/mlkem/mlkem_test.go
-@@ -6,6 +6,7 @@ package mlkem
+@@ -6,6 +6,7 @@ package mlkem_test
  
  import (
  	"bytes"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
  	"crypto/internal/fips140/sha3"
- 	"crypto/rand"
-@@ -162,6 +163,10 @@ var millionFlag = flag.Bool("million", false, "run the million vector test")
+ 	. "crypto/mlkem"
+@@ -164,6 +165,10 @@ var millionFlag = flag.Bool("million", false, "run the million vector test")
  // TestAccumulated accumulates 10k (or 100, or 1M) random vectors and checks the
  // hash of the result, to avoid checking in 150MB of test vectors.
  func TestAccumulated(t *testing.T) {
@@ -1830,7 +1830,7 @@ index 207d6d48c3cb0b..410387661e9545 100644
  	n := 10000
  	expected := "8a518cc63da366322a8e7a818c7a0d63483cb3528d34a4cf42f35d5ad73f22fc"
  	if testing.Short() {
-@@ -229,6 +234,9 @@ func BenchmarkKeyGen(b *testing.B) {
+@@ -234,6 +239,9 @@ func BenchmarkKeyGen(b *testing.B) {
  }
  
  func BenchmarkEncaps(b *testing.B) {
@@ -1839,7 +1839,7 @@ index 207d6d48c3cb0b..410387661e9545 100644
 +	}
  	seed := make([]byte, SeedSize)
  	rand.Read(seed)
- 	var m [32]byte
+ 	dk, err := NewDecapsulationKey768(seed)
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
 index 01fd12e40e341e..38ffac92a36221 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
@@ -2219,7 +2219,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index f1e4ef48a4fd1c..a179a4388e3ee5 100644
+index 76853a94453541..ed51bf17013a9b 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -2231,7 +2231,7 @@ index f1e4ef48a4fd1c..a179a4388e3ee5 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
  	"crypto/internal/randutil"
-@@ -104,7 +104,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+@@ -116,7 +116,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
@@ -2240,7 +2240,7 @@ index f1e4ef48a4fd1c..a179a4388e3ee5 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -203,7 +203,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+@@ -222,7 +222,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
  		return 0, nil, 0, err
  	}
  
@@ -3007,7 +3007,7 @@ index 00176795eba6b7..c6352af84f1f1d 100644
  package tls
  
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index d3fa61dc97d398..711ce750a71a93 100644
+index 291a19f44cdaee..7033b05626a5a2 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -7,7 +7,7 @@ package tls
@@ -3462,10 +3462,10 @@ index 17e7aaf897ab56..569346899ba445 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f3980616aabac1..66786f37264a83 100644
+index 55b937aa415483..ea109b13cc7b54 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -529,7 +529,7 @@ var depsRules = `
+@@ -530,7 +530,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -3474,7 +3474,7 @@ index f3980616aabac1..66786f37264a83 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -557,6 +557,8 @@ var depsRules = `
+@@ -558,6 +558,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -3483,7 +3483,7 @@ index f3980616aabac1..66786f37264a83 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -599,6 +601,7 @@ var depsRules = `
+@@ -600,6 +602,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 142b9b9102e2718bb7d189a2f272d246a22b21d3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Nov 2025 10:46:42 +0000
Subject: [PATCH 567/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#1965)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.7 to 0.0.8.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.7...v0.0.8)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  4 ++--
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 4597f222695..a71f22ac5a4 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.24.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
-	github.com/microsoft/go-infra v0.0.7
+	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.1.0
 	golang.org/x/net v0.47.0
 	golang.org/x/sys v0.38.0
@@ -19,6 +19,6 @@ require (
 	github.com/google/go-querystring v1.1.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
-	golang.org/x/oauth2 v0.32.0 // indirect
+	golang.org/x/oauth2 v0.33.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 74aa7ea2533..f76e095e7ad 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -14,18 +14,18 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.7 h1:wl67HhAGlGn6mnFGNFch4F49AC4CN1FQxYiduI4DQbE=
-github.com/microsoft/go-infra v0.0.7/go.mod h1:IOooBUtSykqU41l41GzZx7/VLmzm1zVQ5IQ/1YpyH+k=
+github.com/microsoft/go-infra v0.0.8 h1:p7vlLlOk7JqyoifCDz5ON4YgE+NPvmuPd1b2a9IRdWo=
+github.com/microsoft/go-infra v0.0.8/go.mod h1:bq40MsG2wiwmaEF1NhMNUcmABwpVKLuexYhRuxsDR5o=
 github.com/microsoft/go-infra/goinstallscript v1.1.0 h1:63Zo4Iw1Ft0swdVl+LKCZPPKv1QZiIRY3ZgyhJyMr5A=
 github.com/microsoft/go-infra/goinstallscript v1.1.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
-golang.org/x/oauth2 v0.32.0 h1:jsCblLleRMDrxMN29H3z/k1KliIvpLgCkE6R8FXXNgY=
-golang.org/x/oauth2 v0.32.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
+golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
 golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
 golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
-golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ=
-golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
+golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
+golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

From 1f3222011b2e80331c4246019c3051cc83fafab4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Nov 2025 10:51:54 +0000
Subject: [PATCH 568/887] build(deps): bump actions/setup-go from 6.0.0 to
 6.1.0 (#1966)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/44694675825211faa026b3c33043df3e48a5fa00...4dc6199c7b1a012772edbd06daecab0f50c9053c)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/patch-build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index bdad414b413..23adedab5de 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           submodules: true
 
-      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
+      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
         with:
           go-version: '1.25'
 

From 6d960c2e1991163872973155afe0f608f843480d Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Thu, 20 Nov 2025 12:21:10 +0000
Subject: [PATCH 569/887] windows: implement support for mlkem (#1964)

* windows: implement support for mlkem

* pull in Quim fixes
---
 eng/doc/CrossPlatformCryptography.md          |  14 +-
 .../0001-Vendor-external-dependencies.patch   | 515 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |  80 +--
 3 files changed, 522 insertions(+), 87 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index a663db9e7e2..008f478321b 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -258,14 +258,16 @@ This section includes the following packages:
 
 ML-KEM is available starting from the Microsoft build of Go 1.26.
 
-| Parameters | Windows | Linux           | macOS           |
-| ---------- | ------- | --------------- | --------------- |
-| 768        | ❌      | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> |
-| 1024       | ❌      | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> |
+| Parameters | Windows         | Linux           | macOS           |
+| ---------- | --------------- | --------------- | --------------- |
+| 768        | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
+| 1024       | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
 
-<sup>1</sup>Requires OpenSSL 3.5.0 or later.
+<sup>1</sup>Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.
 
-<sup>2</sup>Requires macOS 26 (Tahoe) or later.
+<sup>2</sup>Requires OpenSSL 3.5.0 or later.
+
+<sup>3</sup>Requires macOS 26 (Tahoe) or later.
 
 ## TLS
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 628f4571e4c..2af1f7b7a5c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -195,19 +195,20 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   70 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
+ .../go-crypto-winnative/cng/mlkem.go          |  405 +++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
  .../microsoft/go-crypto-winnative/cng/sha3.go |  203 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
- .../internal/bcrypt/bcrypt_windows.go         |  368 +++
+ .../internal/bcrypt/bcrypt_windows.go         |  394 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
- .../internal/bcrypt/zsyscall_windows.go       |  412 +++
+ .../internal/bcrypt/zsyscall_windows.go       |  446 ++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 199 files changed, 27462 insertions(+), 7 deletions(-)
+ 200 files changed, 27927 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -388,6 +389,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rand.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rc4.go
@@ -2060,7 +2062,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index e6cb3d5b43dbd3..e46499deb4c59d 100644
+index e6cb3d5b43dbd3..76c7f59f356b5c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2071,10 +2073,10 @@ index e6cb3d5b43dbd3..e46499deb4c59d 100644
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb
 +)
 diff --git a/src/go.sum b/src/go.sum
-index fe184a864718af..9542320ab4d9c9 100644
+index fe184a864718af..656a2e6529fc92 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2082,8 +2084,8 @@ index fe184a864718af..9542320ab4d9c9 100644
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63 h1:7Z5bSr2MzWPoASu3XODe/kAgr1Yhx5wA+giZWIFL9a8=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4 h1:w1En0lvCsQ+H17nOf/TaBxTRhxMkN4AjUT5glfUs58k=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4/go.mod h1:JkxQeL8dGcyCuKjn1Etz4NmQrOMImMy4BA9hptEfVFA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb h1:XUJ4meHNXQV+5otrnLH5KLyWDlbobNH5arjRkT/tngE=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
@@ -28652,6 +28654,417 @@ index 00000000000000..bc150a7bd39272
 +	}
 +	return nil
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go
+new file mode 100644
+index 00000000000000..f220e1d9d29794
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go
+@@ -0,0 +1,405 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
++)
++
++const (
++	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
++	sharedKeySizeMLKEM = 32
++
++	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
++	seedSizeMLKEM = 64
++
++	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
++	ciphertextSizeMLKEM768 = 1088
++
++	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key (raw key material).
++	encapsulationKeySizeMLKEM768 = 1184
++
++	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
++	ciphertextSizeMLKEM1024 = 1568
++
++	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key (raw key material).
++	encapsulationKeySizeMLKEM1024 = 1568
++)
++
++const (
++	sizeOfPrivateSeedMLKEM1024 = 4 + 4 + 4 + 10 + seedSizeMLKEM                 // dwMagic (4) + cbParameterSet (4) + cbKey (4) + ParameterSet (10 "1024\0") + Key (64)
++	sizeOfPublicKeyMLKEM1024   = 4 + 4 + 4 + 10 + encapsulationKeySizeMLKEM1024 // dwMagic (4) + cbParameterSet (4) + cbKey (4) + ParameterSet (10 "1024\0") + Key (1568)
++)
++
++// putUint32LE puts a uint32 in little-endian byte order.
++func putUint32LE(b []byte, v uint32) {
++	b[0] = byte(v)
++	b[1] = byte(v >> 8)
++	b[2] = byte(v >> 16)
++	b[3] = byte(v >> 24)
++}
++
++// getUint32LE reads a uint32 in little-endian byte order.
++func getUint32LE(b []byte) uint32 {
++	return uint32(b[0]) | uint32(b[1])<<8 | uint32(b[2])<<16 | uint32(b[3])<<24
++}
++
++// putUint16LE puts a uint16 in little-endian byte order.
++func putUint16LE(b []byte, v uint16) {
++	b[0] = byte(v)
++	b[1] = byte(v >> 8)
++}
++
++type mlkemAlgorithm struct {
++	handle bcrypt.ALG_HANDLE
++}
++
++func loadMLKEM() (mlkemAlgorithm, error) {
++	return loadOrStoreAlg(bcrypt.MLKEM_ALGORITHM, 0, "", func(h bcrypt.ALG_HANDLE) (mlkemAlgorithm, error) {
++		return mlkemAlgorithm{handle: h}, nil
++	})
++}
++
++// SupportsMLKEM returns true if ML-KEM is supported on this platform.
++// ML-KEM is supported on Windows 11 24H2/25H2 and Windows Server 2025 and later.
++func SupportsMLKEM() bool {
++	_, err := loadMLKEM()
++	return err == nil
++}
++
++// generateMLKEMKey generates a new ML-KEM key pair with the specified parameter set
++// and writes the raw key bytes (not the blob) into dst.
++func generateMLKEMKey(paramSet string, dst []byte) error {
++	alg, err := loadMLKEM()
++	if err != nil {
++		return err
++	}
++
++	var hKey bcrypt.KEY_HANDLE
++	err = bcrypt.GenerateKeyPair(alg.handle, &hKey, 0, 0)
++	if err != nil {
++		return err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	// Set the parameter set
++	if err := setString(bcrypt.HANDLE(hKey), bcrypt.PARAMETER_SET_NAME, paramSet); err != nil {
++		return err
++	}
++
++	err = bcrypt.FinalizeKeyPair(hKey, 0)
++	if err != nil {
++		return err
++	}
++
++	// Export the private key blob
++	blob := make([]byte, sizeOfPrivateSeedMLKEM1024) // use the larger size to be safe and avoid an allocation
++	var size uint32
++	err = bcrypt.ExportKey(hKey, 0, utf16PtrFromString(bcrypt.MLKEM_PRIVATE_SEED_BLOB), blob, &size, 0)
++	if err != nil {
++		return err
++	}
++
++	// Extract raw key bytes into destination
++	return extractMLKEMKeyBytes(dst, blob[:size])
++}
++
++// newMLKEMKeyBlob creates a key blob from raw key bytes.
++func newMLKEMKeyBlob(dst []byte, paramSet string, keyBytes []byte, magic bcrypt.KeyBlobMagicNumber) error {
++	paramSetUTF16 := utf16FromString(paramSet)
++	paramSetByteLen := len(paramSetUTF16) * 2
++
++	if len(dst) < 12+paramSetByteLen+len(keyBytes) {
++		return errors.New("mlkem: destination blob too small")
++	}
++	putUint32LE(dst[0:4], uint32(magic))
++	putUint32LE(dst[4:8], uint32(paramSetByteLen)) // cbParameterSet
++	putUint32LE(dst[8:12], uint32(len(keyBytes)))  // cbKey
++	for i, v := range paramSetUTF16 {
++		putUint16LE(dst[12+i*2:], v)
++	}
++	copy(dst[12+paramSetByteLen:], keyBytes)
++
++	return nil
++}
++
++// extractMLKEMKeyBytes extracts the raw key bytes from a blob into the provided destination slice.
++func extractMLKEMKeyBytes(dst, blob []byte) error {
++	if len(blob) < 12 {
++		return errors.New("mlkem: blob too small")
++	}
++	cbParameterSet := getUint32LE(blob[4:8])
++	cbKey := getUint32LE(blob[8:12])
++	headerSize := 12 + int(cbParameterSet)
++	if len(blob) < headerSize+int(cbKey) {
++		return errors.New("mlkem: invalid blob size")
++	}
++	if len(dst) != int(cbKey) {
++		return errors.New("mlkem: destination size mismatch")
++	}
++	copy(dst, blob[headerSize:headerSize+int(cbKey)])
++	return nil
++}
++
++// mlkemDecapsulate is a shared helper for decapsulating with ML-KEM keys.
++func mlkemDecapsulate(paramSet string, seed []byte, ciphertext []byte, expectedCiphertextSize int) ([]byte, error) {
++	if len(ciphertext) != expectedCiphertextSize {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	alg, err := loadMLKEM()
++	if err != nil {
++		return nil, err
++	}
++
++	// Construct blob from seed
++	blob := make([]byte, sizeOfPrivateSeedMLKEM1024) // use the larger size to be safe and avoid an allocation
++	err = newMLKEMKeyBlob(blob, paramSet, seed, bcrypt.MLKEM_PRIVATE_SEED_MAGIC)
++	if err != nil {
++		return nil, err
++	}
++
++	var hKey bcrypt.KEY_HANDLE
++	err = bcrypt.ImportKeyPair(alg.handle, 0, utf16PtrFromString(bcrypt.MLKEM_PRIVATE_SEED_BLOB), &hKey, blob, 0)
++	if err != nil {
++		return nil, err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	sharedKey := make([]byte, sharedKeySizeMLKEM)
++	var cbResult uint32
++
++	err = bcrypt.Decapsulate(hKey, ciphertext, sharedKey, &cbResult, 0)
++	if err != nil {
++		return nil, err
++	}
++	return sharedKey[:cbResult], nil
++}
++
++// mlkemEncapsulationKey is a shared helper for extracting the encapsulation key from a decapsulation key.
++func mlkemEncapsulationKey(paramSet string, seed []byte, dst []byte) {
++	alg, err := loadMLKEM()
++	if err != nil {
++		panic(err)
++	}
++
++	// Construct blob from seed
++	blob := make([]byte, sizeOfPrivateSeedMLKEM1024) // use the larger size to be safe and avoid an allocation
++	err = newMLKEMKeyBlob(blob, paramSet, seed, bcrypt.MLKEM_PRIVATE_SEED_MAGIC)
++	if err != nil {
++		panic(err)
++	}
++
++	var hKey bcrypt.KEY_HANDLE
++	err = bcrypt.ImportKeyPair(alg.handle, 0, utf16PtrFromString(bcrypt.MLKEM_PRIVATE_SEED_BLOB), &hKey, blob, 0)
++	if err != nil {
++		panic(err)
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	// Export the public key blob
++	pubBlob := make([]byte, sizeOfPublicKeyMLKEM1024) // use the larger size to be safe and avoid an allocation
++	var size uint32
++	err = bcrypt.ExportKey(hKey, 0, utf16PtrFromString(bcrypt.MLKEM_PUBLIC_BLOB), pubBlob, &size, 0)
++	if err != nil {
++		panic(err)
++	}
++	// Extract raw public key bytes from blob
++	if err := extractMLKEMKeyBytes(dst, pubBlob[:size]); err != nil {
++		panic(err)
++	}
++}
++
++// mlkemEncapsulate is a shared helper for encapsulating with ML-KEM keys.
++func mlkemEncapsulate(paramSet string, keyBytes []byte, expectedCiphertextSize int) ([]byte, []byte) {
++	alg, err := loadMLKEM()
++	if err != nil {
++		panic(err)
++	}
++
++	// Construct blob from raw key bytes
++	blob := make([]byte, sizeOfPublicKeyMLKEM1024) // use the larger size to be safe and avoid an allocation
++	err = newMLKEMKeyBlob(blob, paramSet, keyBytes, bcrypt.MLKEM_PUBLIC_MAGIC)
++	if err != nil {
++		panic(err)
++	}
++
++	var hKey bcrypt.KEY_HANDLE
++	err = bcrypt.ImportKeyPair(alg.handle, 0, utf16PtrFromString(bcrypt.MLKEM_PUBLIC_BLOB), &hKey, blob, 0)
++	if err != nil {
++		panic(err)
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	sharedKey := make([]byte, sharedKeySizeMLKEM)
++	var cbResult uint32
++	ciphertext := make([]byte, expectedCiphertextSize)
++	var cbCiphertextResult uint32
++
++	err = bcrypt.Encapsulate(hKey, sharedKey, &cbResult, ciphertext, &cbCiphertextResult, 0)
++	if err != nil {
++		panic(err)
++	}
++
++	return sharedKey[:cbResult], ciphertext[:cbCiphertextResult]
++}
++
++// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	var dk DecapsulationKeyMLKEM768
++	if err := generateMLKEMKey(bcrypt.MLKEM_PARAMETER_SET_768, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM768{}, err
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM768 constructs a decapsulation key from its serialized form.
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid decapsulation key size")
++	}
++
++	var dk DecapsulationKeyMLKEM768
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key in its serialized form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return mlkemDecapsulate(bcrypt.MLKEM_PARAMETER_SET_768, dk[:], ciphertext, ciphertextSizeMLKEM768)
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	var ek EncapsulationKeyMLKEM768
++	mlkemEncapsulationKey(bcrypt.MLKEM_PARAMETER_SET_768, dk[:], ek[:])
++	return ek
++}
++
++// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM768.
++type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
++
++// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
++		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	return mlkemEncapsulate(bcrypt.MLKEM_PARAMETER_SET_768, ek[:], ciphertextSizeMLKEM768)
++}
++
++// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	var dk DecapsulationKeyMLKEM1024
++	if err := generateMLKEMKey(bcrypt.MLKEM_PARAMETER_SET_1024, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM1024{}, err
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM1024 constructs a decapsulation key from its serialized form.
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid decapsulation key size")
++	}
++
++	var dk DecapsulationKeyMLKEM1024
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key in its serialized form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return mlkemDecapsulate(bcrypt.MLKEM_PARAMETER_SET_1024, dk[:], ciphertext, ciphertextSizeMLKEM1024)
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	var ek EncapsulationKeyMLKEM1024
++	mlkemEncapsulationKey(bcrypt.MLKEM_PARAMETER_SET_1024, dk[:], ek[:])
++	return ek
++}
++
++// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
++type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
++
++// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
++		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	return mlkemEncapsulate(bcrypt.MLKEM_PARAMETER_SET_1024, ek[:], ciphertextSizeMLKEM1024)
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go
 new file mode 100644
 index 00000000000000..5466b180e60e5a
@@ -29541,10 +29954,10 @@ index 00000000000000..56131a6bc93d3f
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..2a57d5e6e93b4f
+index 00000000000000..69269495c96d0d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
-@@ -0,0 +1,368 @@
+@@ -0,0 +1,394 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29585,6 +29998,7 @@ index 00000000000000..2a57d5e6e93b4f
 +	TLS1_1_KDF_ALGORITHM = "TLS1_1_KDF"
 +	TLS1_2_KDF_ALGORITHM = "TLS1_2_KDF"
 +	DSA_ALGORITHM        = "DSA"
++	MLKEM_ALGORITHM      = "ML-KEM"
 +)
 +
 +const (
@@ -29612,12 +30026,14 @@ index 00000000000000..2a57d5e6e93b4f
 +)
 +
 +const (
-+	RSAPUBLIC_KEY_BLOB  = "RSAPUBLICBLOB"
-+	RSAFULLPRIVATE_BLOB = "RSAFULLPRIVATEBLOB"
-+	ECCPUBLIC_BLOB      = "ECCPUBLICBLOB"
-+	ECCPRIVATE_BLOB     = "ECCPRIVATEBLOB"
-+	DSA_PUBLIC_BLOB     = "DSAPUBLICBLOB"
-+	DSA_PRIVATE_BLOB    = "DSAPRIVATEBLOB"
++	RSAPUBLIC_KEY_BLOB      = "RSAPUBLICBLOB"
++	RSAFULLPRIVATE_BLOB     = "RSAFULLPRIVATEBLOB"
++	ECCPUBLIC_BLOB          = "ECCPUBLICBLOB"
++	ECCPRIVATE_BLOB         = "ECCPRIVATEBLOB"
++	DSA_PUBLIC_BLOB         = "DSAPUBLICBLOB"
++	DSA_PRIVATE_BLOB        = "DSAPRIVATEBLOB"
++	MLKEM_PUBLIC_BLOB       = "MLKEMPUBLICBLOB"
++	MLKEM_PRIVATE_SEED_BLOB = "MLKEMPRIVATESEEDBLOB"
 +)
 +
 +const (
@@ -29677,6 +30093,13 @@ index 00000000000000..2a57d5e6e93b4f
 +	DSA_PARAMETERS = "DSAParameters"
 +)
 +
++const (
++	// ML-KEM related properties and constants
++	PARAMETER_SET_NAME       = "ParameterSetName"
++	MLKEM_PARAMETER_SET_768  = "768"
++	MLKEM_PARAMETER_SET_1024 = "1024"
++)
++
 +type HASHALGORITHM_ENUM uint32
 +
 +const (
@@ -29748,6 +30171,10 @@ index 00000000000000..2a57d5e6e93b4f
 +	DSA_PARAMETERS_MAGIC_V2 KeyBlobMagicNumber = 0x324d5044
 +	DSA_PUBLIC_MAGIC_V2     KeyBlobMagicNumber = 0x32425044
 +	DSA_PRIVATE_MAGIC_V2    KeyBlobMagicNumber = 0x32565044
++
++	MLKEM_PUBLIC_MAGIC       KeyBlobMagicNumber = 0x504B4C4D
++	MLKEM_PRIVATE_MAGIC      KeyBlobMagicNumber = 0x524B4C4D
++	MLKEM_PRIVATE_SEED_MAGIC KeyBlobMagicNumber = 0x534B4C4D
 +)
 +
 +type (
@@ -29854,6 +30281,11 @@ index 00000000000000..2a57d5e6e93b4f
 +	Count           [4]uint8
 +}
 +
++// https://learn.microsoft.com/en-us/windows/win32/seccng/cng-mlkem
++type MLKEM_KEY_BLOB struct {
++	Magic KeyBlobMagicNumber
++}
++
 +func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var pInput *byte
 +	if len(plaintext) > 0 {
@@ -29904,6 +30336,13 @@ index 00000000000000..2a57d5e6e93b4f
 +//sys   KeyDerivation(hKey KEY_HANDLE, pParameterList *BufferDesc, pbDerivedKey []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptKeyDerivation
 +//sys   DestroySecret(hSecret SECRET_HANDLE) (ntstatus error) = bcrypt.BCryptDestroySecret
 +
++// ML-KEM uses standard BCrypt functions
++// BCryptGenerateKeyPair, BCryptSetProperty, BCryptFinalizeKeyPair, BCryptExportKey, BCryptImportKeyPair
++// BCryptEncapsulate, BCryptDecapsulate
++
++//sys   Encapsulate(hKey KEY_HANDLE, pbSecret []byte, pcbResult *uint32, pbCiphertext []byte, pcbCiphertext *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptEncapsulate
++//sys   Decapsulate(hKey KEY_HANDLE, pbCiphertext []byte, pbSecret []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptDecapsulate
++
 +func GenerateSymmetricKey(hAlgorithm ALG_HANDLE, phKey *KEY_HANDLE, pbKeyObject []byte, pbSecret []byte, dwFlags uint32) error {
 +	cbLen := uint32(len(pbSecret))
 +	if cbLen == 0 {
@@ -29966,10 +30405,10 @@ index 00000000000000..ec2eb01aa3cd8a
 +//sys	formatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) = FormatMessageW
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
 new file mode 100644
-index 00000000000000..5c9d3a978baa27
+index 00000000000000..af29330ca347e2
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
-@@ -0,0 +1,412 @@
+@@ -0,0 +1,446 @@
 +// Code generated by 'go generate'; DO NOT EDIT.
 +
 +package bcrypt
@@ -30015,12 +30454,14 @@ index 00000000000000..5c9d3a978baa27
 +
 +	procBCryptCloseAlgorithmProvider = modbcrypt.NewProc("BCryptCloseAlgorithmProvider")
 +	procBCryptCreateHash             = modbcrypt.NewProc("BCryptCreateHash")
++	procBCryptDecapsulate            = modbcrypt.NewProc("BCryptDecapsulate")
 +	procBCryptDecrypt                = modbcrypt.NewProc("BCryptDecrypt")
 +	procBCryptDeriveKey              = modbcrypt.NewProc("BCryptDeriveKey")
 +	procBCryptDestroyHash            = modbcrypt.NewProc("BCryptDestroyHash")
 +	procBCryptDestroyKey             = modbcrypt.NewProc("BCryptDestroyKey")
 +	procBCryptDestroySecret          = modbcrypt.NewProc("BCryptDestroySecret")
 +	procBCryptDuplicateHash          = modbcrypt.NewProc("BCryptDuplicateHash")
++	procBCryptEncapsulate            = modbcrypt.NewProc("BCryptEncapsulate")
 +	procBCryptEncrypt                = modbcrypt.NewProc("BCryptEncrypt")
 +	procBCryptExportKey              = modbcrypt.NewProc("BCryptExportKey")
 +	procBCryptFinalizeKeyPair        = modbcrypt.NewProc("BCryptFinalizeKeyPair")
@@ -30067,6 +30508,22 @@ index 00000000000000..5c9d3a978baa27
 +	return
 +}
 +
++func Decapsulate(hKey KEY_HANDLE, pbCiphertext []byte, pbSecret []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) {
++	var _p0 *byte
++	if len(pbCiphertext) > 0 {
++		_p0 = &pbCiphertext[0]
++	}
++	var _p1 *byte
++	if len(pbSecret) > 0 {
++		_p1 = &pbSecret[0]
++	}
++	r0, _, _ := syscall.SyscallN(procBCryptDecapsulate.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbCiphertext)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbSecret)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
++	if r0 != 0 {
++		ntstatus = NTStatus(r0)
++	}
++	return
++}
++
 +func Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbInput) > 0 {
@@ -30135,6 +30592,22 @@ index 00000000000000..5c9d3a978baa27
 +	return
 +}
 +
++func Encapsulate(hKey KEY_HANDLE, pbSecret []byte, pcbResult *uint32, pbCiphertext []byte, pcbCiphertext *uint32, dwFlags uint32) (ntstatus error) {
++	var _p0 *byte
++	if len(pbSecret) > 0 {
++		_p0 = &pbSecret[0]
++	}
++	var _p1 *byte
++	if len(pbCiphertext) > 0 {
++		_p1 = &pbCiphertext[0]
++	}
++	r0, _, _ := syscall.SyscallN(procBCryptEncapsulate.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbSecret)), uintptr(unsafe.Pointer(pcbResult)), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbCiphertext)), uintptr(unsafe.Pointer(pcbCiphertext)), uintptr(dwFlags))
++	if r0 != 0 {
++		ntstatus = NTStatus(r0)
++	}
++	return
++}
++
 +func _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
 +	if len(pbIV) > 0 {
@@ -30482,7 +30955,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index bf7a797966088f..043f598acb39df 100644
+index bf7a797966088f..d8c9b5a065054e 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
@@ -30499,8 +30972,8 @@ index bf7a797966088f..043f598acb39df 100644
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251106082534-b696521f99d4
-+## explicit; go 1.22
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb
++## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index b6299db868b..9682db81397 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -19,7 +19,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 249 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 249 +++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -30,9 +30,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 433 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 393 ++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 420 +++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 420 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -47,15 +47,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 349 ++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 349 +++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 380 ++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2704 insertions(+), 24 deletions(-)
+ 46 files changed, 2664 insertions(+), 24 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -971,10 +971,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..62acef2f8e14d8
+index 00000000000000..fdcc48ddb28c12
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,433 @@
+@@ -0,0 +1,393 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1332,81 +1332,41 @@ index 00000000000000..62acef2f8e14d8
 +}
 +
 +func SupportsMLKEM768() bool {
-+	return false
++	return cng.SupportsMLKEM()
 +}
 +
 +func SupportsMLKEM1024() bool {
-+	return false
++	return cng.SupportsMLKEM()
 +}
 +
-+type DecapsulationKeyMLKEM768 struct{}
-+type EncapsulationKeyMLKEM768 struct{}
++type DecapsulationKeyMLKEM768 = cng.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = cng.EncapsulationKeyMLKEM768
 +
 +func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	panic("cngcrypto: not available")
++	return cng.GenerateKeyMLKEM768()
 +}
 +
 +func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	panic("cngcrypto: not available")
++	return cng.NewDecapsulationKeyMLKEM768(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
-+	panic("cngcrypto: not available")
++	return cng.NewEncapsulationKeyMLKEM768(encapsulationKey)
 +}
 +
-+type DecapsulationKeyMLKEM1024 struct{}
-+type EncapsulationKeyMLKEM1024 struct{}
++type DecapsulationKeyMLKEM1024 = cng.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = cng.EncapsulationKeyMLKEM1024
 +
 +func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	panic("cngcrypto: not available")
++	return cng.GenerateKeyMLKEM1024()
 +}
 +
 +func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	panic("cngcrypto: not available")
++	return cng.NewDecapsulationKeyMLKEM1024(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
-+	panic("cngcrypto: not available")
-+}
-+
-+func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
-+	panic("cngcrypto: not available")
++	return cng.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644

From 5ec1a5cab255f43d2fc48637949034d5d2885a90 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 20 Nov 2025 11:39:21 -0800
Subject: [PATCH 570/887] Add pipelineymlgen; fix 1ES officialness of
 validation pipelines (#1938)

* Add pipelineymlgen; fix 1ES officialness of validation pipelines

* Update go-infra for pipelineymlgen CRLF fix
---
 eng/_util/cmd/pipelineymlgen/gen.go           |  11 ++
 .../cmd/pipelineymlgen/pipelineymlgen.go      |  62 +++++++++++
 .../cmd/pipelineymlgen/pipelineymlgen_test.go |  18 ++++
 eng/_util/cmd/selftest/selftest.go            |   9 +-
 eng/_util/go.mod                              |  13 +++
 eng/_util/go.sum                              |  41 +++++++
 eng/pipeline/README.md                        |  20 ++--
 ...nternal-validation-pipeline-unofficial.yml |  62 +++++++++--
 .../rolling-internal-validation-pipeline.yml  |  56 ++++++++--
 .../rolling-internal-validation.gen.yml       | 102 ++++++++++++++++++
 eng/pipeline/rolling-internal-validation.yml  |  48 ---------
 11 files changed, 368 insertions(+), 74 deletions(-)
 create mode 100644 eng/_util/cmd/pipelineymlgen/gen.go
 create mode 100644 eng/_util/cmd/pipelineymlgen/pipelineymlgen.go
 create mode 100644 eng/_util/cmd/pipelineymlgen/pipelineymlgen_test.go
 create mode 100644 eng/pipeline/rolling-internal-validation.gen.yml
 delete mode 100644 eng/pipeline/rolling-internal-validation.yml

diff --git a/eng/_util/cmd/pipelineymlgen/gen.go b/eng/_util/cmd/pipelineymlgen/gen.go
new file mode 100644
index 00000000000..78e52ff0066
--- /dev/null
+++ b/eng/_util/cmd/pipelineymlgen/gen.go
@@ -0,0 +1,11 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+// Generate the Azure Pipelines YAML from .gen.yml files for this repo. Normally
+// this would be done from eng/ or eng/pipeline, but in this repo we don't have
+// a Go module containing that directory.
+
+//go:generate go run github.com/microsoft/go-infra/cmd/pipelineymlgen -r ../../../../eng/pipeline
diff --git a/eng/_util/cmd/pipelineymlgen/pipelineymlgen.go b/eng/_util/cmd/pipelineymlgen/pipelineymlgen.go
new file mode 100644
index 00000000000..8bbaf01ffc9
--- /dev/null
+++ b/eng/_util/cmd/pipelineymlgen/pipelineymlgen.go
@@ -0,0 +1,62 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"flag"
+	"fmt"
+	"log"
+	"os"
+	"os/exec"
+	"path/filepath"
+)
+
+var description = `
+This command regenerates pipeline yml files in eng/pipeline using the
+pipelineymlgen tool.
+`
+
+// This command exists only because it's awkward to use the "eng/_util" module
+// from the root of the repository with go commands alone.
+
+func main() {
+	help := flag.Bool("h", false, "Print this help message.")
+
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description)
+	}
+
+	flag.Parse()
+	if *help {
+		flag.Usage()
+		return
+	}
+
+	if err := run(); err != nil {
+		log.Fatalln(err)
+	}
+}
+
+func run() error {
+	cmd := exec.Command("go", "generate", ".")
+	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
+	cmd.Dir = "eng/_util/cmd/pipelineymlgen"
+
+	fmt.Printf("Running %q in %q...\n", cmd, cmd.Dir)
+	if err := cmd.Run(); err != nil {
+		return fmt.Errorf("running %q in %q: %v", cmd, cmd.Dir, err)
+	}
+
+	wd, err := os.Getwd()
+	if err != nil {
+		return fmt.Errorf("getting working directory: %v", err)
+	}
+
+	fmt.Printf("Done. See %s\n", filepath.Join(wd, "eng", "pipeline"))
+	return nil
+}
diff --git a/eng/_util/cmd/pipelineymlgen/pipelineymlgen_test.go b/eng/_util/cmd/pipelineymlgen/pipelineymlgen_test.go
new file mode 100644
index 00000000000..92686da5632
--- /dev/null
+++ b/eng/_util/cmd/pipelineymlgen/pipelineymlgen_test.go
@@ -0,0 +1,18 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"os/exec"
+	"testing"
+)
+
+func TestGoInfraPipelineGenReproducible(t *testing.T) {
+	cmd := exec.Command("go", "run", "github.com/microsoft/go-infra/cmd/pipelineymlgen", "-exit-code", "-r", "../../../../eng/pipeline")
+	out, err := cmd.CombinedOutput()
+	if err != nil {
+		t.Fatalf("pipelineymlgen reproduciblility check failed: %v\nOutput:\n%s\nRun 'pwsh eng/run.ps1 pipelineymlgen' if differences are expected.", err, out)
+	}
+}
diff --git a/eng/_util/cmd/selftest/selftest.go b/eng/_util/cmd/selftest/selftest.go
index 05ff5cb4f51..3fa3bd8fec5 100644
--- a/eng/_util/cmd/selftest/selftest.go
+++ b/eng/_util/cmd/selftest/selftest.go
@@ -17,6 +17,8 @@ const description = `
 This command runs the _util self-tests using the stage 0 Go toolchain.
 `
 
+var count = flag.Int("count", -1, "Pass '[...] -count={count}' to test runner. Use '1' to force re-run. Does nothing if negative.")
+
 func main() {
 	help := flag.Bool("h", false, "Print this help message.")
 
@@ -44,9 +46,14 @@ func run() error {
 		return fmt.Errorf("STAGE_0_GOROOT not set")
 	}
 
+	args := []string{"test", "./..."}
+	if *count >= 0 {
+		args = append(args, fmt.Sprintf("-count=%d", *count))
+	}
+
 	return executil.Run(executil.Dir(
 		filepath.Join("eng", "_util"),
 		filepath.Join(stage0Goroot, "bin", "go"),
-		"test", "./...",
+		args...,
 	))
 }
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index a71f22ac5a4..1281c40bd4f 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -15,10 +15,23 @@ require (
 )
 
 require (
+	dario.cat/mergo v1.0.1 // indirect
+	github.com/Masterminds/goutils v1.1.1 // indirect
+	github.com/Masterminds/semver/v3 v3.3.0 // indirect
+	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/google/go-github/v65 v65.0.0 // indirect
 	github.com/google/go-querystring v1.1.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
+	github.com/huandu/xstrings v1.5.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
+	github.com/mitchellh/copystructure v1.2.0 // indirect
+	github.com/mitchellh/reflectwalk v1.0.2 // indirect
+	github.com/shopspring/decimal v1.4.0 // indirect
+	github.com/spf13/cast v1.7.0 // indirect
+	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
+	golang.org/x/crypto v0.44.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 )
+
+tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index f76e095e7ad..65952685b8e 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -1,3 +1,15 @@
+dario.cat/mergo v1.0.1 h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s=
+dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
+github.com/Masterminds/goutils v1.1.1 h1:5nUrii3FMTL5diU80unEVvNevw1nH4+ZV4DSLVJLSYI=
+github.com/Masterminds/goutils v1.1.1/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=
+github.com/Masterminds/semver/v3 v3.3.0 h1:B8LGeaivUe71a5qox1ICM/JLl0NqZSW5CHyL+hmvYS0=
+github.com/Masterminds/semver/v3 v3.3.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
+github.com/Masterminds/sprig/v3 v3.3.0 h1:mQh0Yrg1XPo6vjYXgtf5OtijNAKJRNcTdOOGZe3tPhs=
+github.com/Masterminds/sprig/v3 v3.3.0/go.mod h1:Zy1iXRYNqNLUolqCpL4uhk6SHUMAOSCzdgBfDb35Lz0=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
+github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
 github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
@@ -12,12 +24,36 @@ github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/huandu/xstrings v1.5.0 h1:2ag3IFq9ZDANvthTwTiqSSZLjDc+BedvHPAp5tJy2TI=
+github.com/huandu/xstrings v1.5.0/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.8 h1:p7vlLlOk7JqyoifCDz5ON4YgE+NPvmuPd1b2a9IRdWo=
 github.com/microsoft/go-infra v0.0.8/go.mod h1:bq40MsG2wiwmaEF1NhMNUcmABwpVKLuexYhRuxsDR5o=
 github.com/microsoft/go-infra/goinstallscript v1.1.0 h1:63Zo4Iw1Ft0swdVl+LKCZPPKv1QZiIRY3ZgyhJyMr5A=
 github.com/microsoft/go-infra/goinstallscript v1.1.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
+github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
+github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
+github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
+github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8=
+github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs=
+github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k=
+github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
+github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w=
+github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
+github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
+go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
+golang.org/x/crypto v0.44.0 h1:A97SsFvM3AIwEEmTBiaxPPTYpDC47w720rdiiUvgoAU=
+golang.org/x/crypto v0.44.0/go.mod h1:013i+Nw79BMiQiMsOPcVCB5ZIJbYkerPrGnOa00tvmc=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
@@ -29,3 +65,8 @@ golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
 golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
 golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
+gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/eng/pipeline/README.md b/eng/pipeline/README.md
index 59d7aeb50c6..1aa57f44166 100644
--- a/eng/pipeline/README.md
+++ b/eng/pipeline/README.md
@@ -7,17 +7,25 @@ This directory contains Azure DevOps (AzDO) YAML pipelines for CI.
 
 Each pipeline yml file contains links to its pipeline or pipelines.
 
-The pipeline filenames are (mostly) based on the trigger scenario, not what they
-do. This means we can change their content later without worrying about
-filenames going out of date. (If we change a pipeline file's name, we also need
-to update the web-UI-based AzDO pipeline to point at the new file. Each web UI
-pipeline can only point at one YAML file, so this breaks old branches that
-haven't renamed the file. It would be nice to avoid this.)
+Some pipelines are generated from `*.gen.yml` files by [pipelineymlgen](https://github.com/microsoft/go-infra/blob/main/cmd/pipelineymlgen/README.md).
+They contain a "DO NOT EDIT" warning at the top of the file and the automated tests ensure reproducibility.
+Use `pwsh eng/run.ps1 pipelineymlgen` to regenerate them locally.
 
 For more information about the style of these pipeline and template YAML files
 and the quirks involved with the way they're implemented, visit
 [pipeline-yml-style.md in microsoft/go-infra](https://github.com/microsoft/go-infra/blob/main/docs/pipeline-yml-style.md).
 
+### Naming convention
+
+Pipeline filenames aren't very flexible, for a few reasons:
+
+* Some AzDO pipeline configuration is costly to set up and invalidated by pipeline renames, in particular signing authorization.
+  * The pipeline's name in AzDO is not necessarily tied to the filename, but for clarity they are generally aligned.
+* If we change a pipeline file's name, we also need to update the web-UI-based AzDO pipeline to point at the new file. Each web UI pipeline can only point at one YAML file, so this breaks old branches that haven't renamed the file. We can do a synchronized backport, but that can be disruptive.
+
+For this reason, it generally makes sense to create a pipeline filename that focuses on the trigger scenario, not what the pipeline does or how.
+This means we have more flexibility later to change it without worrying about the filename becoming misleading or stale.
+
 ## Templates
 
 The subdirectories hold AzDO pipeline YAML templates, based on type of template.
diff --git a/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml b/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
index af64c9f400c..d9e63ea609d 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline-unofficial.yml
@@ -1,34 +1,78 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: rolling-internal-validation.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
 # This pipeline runs rolling validation, like CodeQL.
 
+# official: https://dev.azure.com/dnceng/internal/_build?definitionId=1354
 # unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
 
+parameters:
+  - name: enableCodeQL
+    displayName: '[Debug input] Enable CodeQL, even on a dev branch.'
+    type: boolean
+    default: true
+  - name: disableTSA
+    displayName: '[Debug input] Disable TSA reporting. Use to try modifications in dev branches.'
+    type: boolean
+    default: true
 trigger: none
 pr: none
-
 variables:
   - template: variables/pipeline.yml
   - template: variables/codeql.yml
   - template: variables/pool-providers.yml
-
   # The default cadence is ok for official branches. The cadence is per-branch.
   # For a dev build, the cadence would prevent dev iteration.
   # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
   - name: Codeql.Cadence
     value: 0
-
 resources:
   pipelines:
     - pipeline: build
+      # The rolling pipeline and this validation pipeline share the same source repository. AzDO
+      # sees this and makes this pipeline's "checkout" steps download the same source code that was
+      # built by the microsoft-go pipeline:
+      # https://docs.microsoft.com/en-us/azure/devops/pipelines/process/resources?view=azure-devops&tabs=schema#define-a-pipelines-resource
+      #
+      # This means we can have SDL scan the currently-checked-out source code as the way to scan the
+      # source code of the internal rolling build.
       source: microsoft-go
-
+  repositories:
+    - repository: 1ESPipelineTemplates
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
 extends:
-  template: rolling-internal-validation.yml
+  template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
-    ctx:
-      ${{ each variable in variables }}:
-        ${{ if startsWith(variable.key, 'Go') }}:
-          ${{ variable.key }}: ${{ variable.value }}
+    pool:
+      name: $(DncEngInternalBuildPool)
+      image: 1es-windows-2022
+      os: windows
+    sdl:
+      codeql:
+        enabledOnNonDefaultBranches: ${{ parameters.enableCodeQL }}
+        language: go,cpp,powershell,javascript
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+      tsa:
+        enabled: ${{ not(parameters.disableTSA) }}
+        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
+    stages:
+      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
+        parameters:
+          ctx:
+            ${{ each variable in variables }}:
+              ${{ if startsWith(variable.key, 'Go') }}:
+                ${{ variable.key }}: ${{ variable.value }}
+          jobsTemplate: builders-to-stages.yml
+          shorthandBuilders:
+            # CodeQL doesn't submit the scan to both the outer repo
+            # (microsoft-go) and inner repo (microsoft-go-mirror).
+            # Use two jobs to submit two scans.
+            - {os: linux, arch: amd64, config: codeql_outer}
+            - {os: linux, arch: amd64, config: codeql_inner}
diff --git a/eng/pipeline/rolling-internal-validation-pipeline.yml b/eng/pipeline/rolling-internal-validation-pipeline.yml
index de9422f14a0..cc16fe8cc08 100644
--- a/eng/pipeline/rolling-internal-validation-pipeline.yml
+++ b/eng/pipeline/rolling-internal-validation-pipeline.yml
@@ -1,3 +1,6 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: rolling-internal-validation.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
@@ -5,15 +8,23 @@
 # This pipeline runs rolling validation, like CodeQL.
 
 # official: https://dev.azure.com/dnceng/internal/_build?definitionId=1354
+# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
 
+parameters:
+  - name: enableCodeQL
+    displayName: '[Debug input] Enable CodeQL, even on a dev branch.'
+    type: boolean
+    default: false
+  - name: disableTSA
+    displayName: '[Debug input] Disable TSA reporting. Use to try modifications in dev branches.'
+    type: boolean
+    default: false
 trigger: none
 pr: none
-
 variables:
   - template: variables/pipeline.yml
   - template: variables/codeql.yml
   - template: variables/pool-providers.yml
-
 resources:
   pipelines:
     - pipeline: build
@@ -25,18 +36,43 @@ resources:
       # This means we can have SDL scan the currently-checked-out source code as the way to scan the
       # source code of the internal rolling build.
       source: microsoft-go
-      # Trigger can't be conditioned, so this resource can't be declared inside
-      # the template. "A template expression is not allowed in this context".
       trigger:
         branches:
           include:
             - microsoft/main
             - microsoft/release-branch.*
-
+  repositories:
+    - repository: 1ESPipelineTemplates
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
 extends:
-  template: rolling-internal-validation.yml
+  template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
-    ctx:
-      ${{ each variable in variables }}:
-        ${{ if startsWith(variable.key, 'Go') }}:
-          ${{ variable.key }}: ${{ variable.value }}
+    pool:
+      name: $(DncEngInternalBuildPool)
+      image: 1es-windows-2022
+      os: windows
+    sdl:
+      codeql:
+        enabledOnNonDefaultBranches: ${{ parameters.enableCodeQL }}
+        language: go,cpp,powershell,javascript
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+      tsa:
+        enabled: ${{ not(parameters.disableTSA) }}
+        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
+    stages:
+      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
+        parameters:
+          ctx:
+            ${{ each variable in variables }}:
+              ${{ if startsWith(variable.key, 'Go') }}:
+                ${{ variable.key }}: ${{ variable.value }}
+          jobsTemplate: builders-to-stages.yml
+          shorthandBuilders:
+            # CodeQL doesn't submit the scan to both the outer repo
+            # (microsoft-go) and inner repo (microsoft-go-mirror).
+            # Use two jobs to submit two scans.
+            - {os: linux, arch: amd64, config: codeql_outer}
+            - {os: linux, arch: amd64, config: codeql_inner}
diff --git a/eng/pipeline/rolling-internal-validation.gen.yml b/eng/pipeline/rolling-internal-validation.gen.yml
new file mode 100644
index 00000000000..2e5dd1bdb70
--- /dev/null
+++ b/eng/pipeline/rolling-internal-validation.gen.yml
@@ -0,0 +1,102 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# This pipeline runs rolling validation, like CodeQL.
+
+# official: https://dev.azure.com/dnceng/internal/_build?definitionId=1354
+# unofficial: https://dev.azure.com/dnceng/internal/_build?definitionId=1486
+
+pipelineymlgen:
+  output:
+    - file: rolling-internal-validation-pipeline-unofficial.yml
+      data:
+        official: false
+    - file: rolling-internal-validation-pipeline.yml
+      data:
+        official: true
+---
+
+parameters:
+  - name: enableCodeQL
+    displayName: '[Debug input] Enable CodeQL, even on a dev branch.'
+    type: boolean
+    default: ${ yml (not .official) }
+
+  - name: disableTSA
+    displayName: '[Debug input] Disable TSA reporting. Use to try modifications in dev branches.'
+    type: boolean
+    default: ${ yml (not .official) }
+
+trigger: none
+pr: none
+
+variables:
+  - template: variables/pipeline.yml
+  - template: variables/codeql.yml
+  - template: variables/pool-providers.yml
+
+  - ${ inlineif (not .official) }:
+    # The default cadence is ok for official branches. The cadence is per-branch.
+    # For a dev build, the cadence would prevent dev iteration.
+    # https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/codeql/codeql-general-faq#how-do-i-check-if-my-project-is-onboarded
+    - name: Codeql.Cadence
+      value: 0
+
+resources:
+  pipelines:
+    - pipeline: build
+      # The rolling pipeline and this validation pipeline share the same source repository. AzDO
+      # sees this and makes this pipeline's "checkout" steps download the same source code that was
+      # built by the microsoft-go pipeline:
+      # https://docs.microsoft.com/en-us/azure/devops/pipelines/process/resources?view=azure-devops&tabs=schema#define-a-pipelines-resource
+      #
+      # This means we can have SDL scan the currently-checked-out source code as the way to scan the
+      # source code of the internal rolling build.
+      source: microsoft-go
+      ${ inlineif .official }:
+        trigger:
+          branches:
+            include:
+              - microsoft/main
+              - microsoft/release-branch.*
+  repositories:
+    - repository: 1ESPipelineTemplates
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
+
+extends:
+  ${ inlineif .official }:
+    template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
+  ${ inlineelse }:
+    template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    pool:
+      name: $(DncEngInternalBuildPool)
+      image: 1es-windows-2022
+      os: windows
+    sdl:
+      codeql:
+        enabledOnNonDefaultBranches: ${{ parameters.enableCodeQL }}
+        language: go,cpp,powershell,javascript
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+      tsa:
+        enabled: ${{ not(parameters.disableTSA) }}
+        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
+
+    stages:
+      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
+        parameters:
+          ctx:
+            ${{ each variable in variables }}:
+              ${{ if startsWith(variable.key, 'Go') }}:
+                ${{ variable.key }}: ${{ variable.value }}
+          jobsTemplate: builders-to-stages.yml
+          shorthandBuilders:
+            # CodeQL doesn't submit the scan to both the outer repo
+            # (microsoft-go) and inner repo (microsoft-go-mirror).
+            # Use two jobs to submit two scans.
+            - { os: linux, arch: amd64, config: codeql_outer }
+            - { os: linux, arch: amd64, config: codeql_inner }
diff --git a/eng/pipeline/rolling-internal-validation.yml b/eng/pipeline/rolling-internal-validation.yml
deleted file mode 100644
index e33cd272cab..00000000000
--- a/eng/pipeline/rolling-internal-validation.yml
+++ /dev/null
@@ -1,48 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
-
-# This pipeline runs rolling validation, like CodeQL.
-
-parameters:
-  - name: ctx
-    type: object
-
-resources:
-  repositories:
-    - repository: 1ESPipelineTemplates
-      type: git
-      name: 1ESPipelineTemplates/1ESPipelineTemplates
-      ref: refs/tags/release
-
-extends:
-  ${{ if variables['Go1ESOfficial'] }}:
-    template: v1/1ES.Official.PipelineTemplate.yml@1ESPipelineTemplates
-  ${{ else }}:
-    template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
-  parameters:
-    pool:
-      name: $(DncEngInternalBuildPool)
-      image: 1es-windows-2022
-      os: windows
-    sdl:
-      codeql:
-        enabledOnNonDefaultBranches: ${{ not(variables['Go1ESOfficial']) }}
-        language: go,cpp,powershell,javascript
-      suppression:
-        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
-      tsa:
-        enabled: ${{ variables['Go1ESOfficial'] }}
-        configFile: $(Build.SourcesDirectory)/.config/tsa/tsaoptions.json
-
-    stages:
-      - template: /eng/pipeline/stages/shorthand-builders-to-builders.yml@self
-        parameters:
-          ctx: ${{ parameters.ctx }}
-          jobsTemplate: builders-to-stages.yml
-          shorthandBuilders:
-            # CodeQL doesn't submit the scan to both the outer repo
-            # (microsoft-go) and inner repo (microsoft-go-mirror).
-            # Use two jobs to submit two scans.
-            - { os: linux, arch: amd64, config: codeql_outer }
-            - { os: linux, arch: amd64, config: codeql_inner }

From efd99e70663ea7f788f3d6cc3140271efb585db2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 20 Nov 2025 19:40:11 +0000
Subject: [PATCH 571/887] build(deps): bump golang.org/x/crypto in /eng/_util

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1281c40bd4f..c45eb2c1f80 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -29,7 +29,7 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
-	golang.org/x/crypto v0.44.0 // indirect
+	golang.org/x/crypto v0.45.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 65952685b8e..105a1cd91ba 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -52,8 +52,8 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.44.0 h1:A97SsFvM3AIwEEmTBiaxPPTYpDC47w720rdiiUvgoAU=
-golang.org/x/crypto v0.44.0/go.mod h1:013i+Nw79BMiQiMsOPcVCB5ZIJbYkerPrGnOa00tvmc=
+golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
 golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
 golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=

From a5c1d0d3ab43ab42c6c7fdae6167af5e2a02f67d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 10:11:08 +0000
Subject: [PATCH 572/887] build(deps): bump actions/checkout from 5.0.1 to
 6.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/93cb6efe18208431cddfb8368fd83d5badbf9bfd...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index ff1e54cc82d..83c4b8d16b5 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 4d64e0af72e..6b792bd1d46 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 23adedab5de..27b2b85dd34 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 0ae63ebd0e0..a8567e10ac0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From 6eefad877620087bbdbdf3c20b7a067ab6a14d8c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 21 Nov 2025 16:09:52 +0000
Subject: [PATCH 573/887] Update submodule to latest master (4b0e3cc1):
 cmd/link: support loading R_LARCH_PCREL20_S2 and R_LARCH_CALL36 relocs

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 8c41a482f9b..4b0e3cc1d63 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 8c41a482f9b7a101404cd0b417ac45abd441e598
+Subproject commit 4b0e3cc1d63a00ee184ea1f6b17e79808e3d9fdc

From fdf97afa7abe240ff9d7312a607df65e0d1db6ad Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Fri, 21 Nov 2025 13:37:33 -0800
Subject: [PATCH 574/887] Fix FIPS docs reference to MS_GO_NOSYSTEMCRYPTO

---
 eng/doc/fips/README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index b1d83c69eaa..2f378179d6b 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -77,7 +77,7 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 | `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
-| `MS_GO_DISABLE_SYSTEMCRYPTO=1` (since Go 1.25.2) or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
+| `MS_GO_NOSYSTEMCRYPTO=1` (since Go 1.25.2) or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
 
 A [Docker base image](#dockerfile-base-image) is available that includes suitable build-time config in the environment.
 
@@ -455,11 +455,11 @@ This list of major changes is intended for quick reference and for access to his
 
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
 - The macOS backend is no longer "preview" and is now fully supported.
-- `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+- `systemcrypto` can be disabled at build time using `MS_GO_NOSYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
 
 ### Go 1.25.2 (Oct 2025)
 
-- `systemcrypto` can be disabled at build time using `MS_GO_DISABLE_SYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+- `systemcrypto` can be disabled at build time using `MS_GO_NOSYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
 
 ### Go 1.25 (Aug 2025)
 

From 8c7a1f413d4d8ba977c1bcf0640fcb9a685575e2 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 24 Nov 2025 09:28:56 +0000
Subject: [PATCH 575/887] resolve 3-way merge conflicts

---
 patches/0004-Use-crypto-backends.patch | 36 +++++++++++++-------------
 1 file changed, 18 insertions(+), 18 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 8397b1732b6..705f3958d93 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -47,7 +47,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
- src/crypto/mlkem/mlkem.go                     | 113 ++++++++--
+ src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
  src/crypto/mlkem/mlkem_test.go                |   8 +
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
@@ -96,7 +96,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 92 files changed, 1337 insertions(+), 140 deletions(-)
+ 92 files changed, 1334 insertions(+), 139 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -771,7 +771,7 @@ index 00000000000000..cd02ff5a00c3dc
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
-index 231f1ea04c1010..cfa113e2345816 100644
+index 82daacf4736a69..0458d9535c1e1a 100644
 --- a/src/crypto/ecdh/ecdh.go
 +++ b/src/crypto/ecdh/ecdh.go
 @@ -8,7 +8,7 @@ package ecdh
@@ -1540,22 +1540,18 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index cb44bede20b72c..745121515b42cf 100644
+index 176b79673b0851..1c0008e948c215 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
-@@ -11,7 +11,10 @@
- // [NIST FIPS 203]: https://doi.org/10.6028/NIST.FIPS.203
- package mlkem
+@@ -13,6 +13,7 @@ package mlkem
  
--import "crypto/internal/fips140/mlkem"
-+import (
+ import (
+ 	"crypto"
 +	boring "crypto/internal/backend"
-+	"crypto/internal/fips140/mlkem"
-+)
+ 	"crypto/internal/fips140/mlkem"
+ )
  
- const (
- 	// SharedKeySize is the size of a shared key produced by ML-KEM.
-@@ -33,38 +36,58 @@ const (
+@@ -36,38 +37,58 @@ const (
  	EncapsulationKeySize1024 = 1568
  )
  
@@ -1618,7 +1614,7 @@ index cb44bede20b72c..745121515b42cf 100644
  	return dk.key.Bytes()
  }
  
-@@ -73,34 +96,52 @@ func (dk *DecapsulationKey768) Bytes() []byte {
+@@ -76,13 +97,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -1638,6 +1634,8 @@ index cb44bede20b72c..745121515b42cf 100644
 +	return &EncapsulationKey768{key: dk.key.EncapsulationKey()}
  }
  
+ // Encapsulator returns the encapsulation key, like
+@@ -98,22 +125,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
  // An EncapsulationKey768 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey768.
  type EncapsulationKey768 struct {
@@ -1674,7 +1672,7 @@ index cb44bede20b72c..745121515b42cf 100644
  	return ek.key.Bytes()
  }
  
-@@ -112,41 +153,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+@@ -125,41 +164,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
@@ -1742,7 +1740,7 @@ index cb44bede20b72c..745121515b42cf 100644
  	return dk.key.Bytes()
  }
  
-@@ -155,34 +219,52 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+@@ -168,13 +230,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -1762,6 +1760,8 @@ index cb44bede20b72c..745121515b42cf 100644
 +	return &EncapsulationKey1024{key: dk.key.EncapsulationKey()}
  }
  
+ // Encapsulator returns the encapsulation key, like
+@@ -190,22 +258,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
  // An EncapsulationKey1024 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey1024.
  type EncapsulationKey1024 struct {
@@ -1798,7 +1798,7 @@ index cb44bede20b72c..745121515b42cf 100644
  	return ek.key.Bytes()
  }
  
-@@ -194,5 +276,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+@@ -217,5 +297,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {

From 9b1b1d5c48058f36d4525d655bb597677058cb55 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Nov 2025 12:27:02 +0000
Subject: [PATCH 576/887] build(deps): bump github/codeql-action from 4.31.4 to
 4.31.5 (#1973)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.4 to 4.31.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e12f0178983d466f2f6028f5cc7a6d786fd97f4b...fdbfb4d2750291e159f0156def62b853c2798ca2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 83c4b8d16b5..1f5d48487b2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/init@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/autobuild@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/analyze@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
         with:
           category: /language:go

From 9cac1dc3456ad3a2a8ceb2e8b39239dbdb012508 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 24 Nov 2025 16:08:39 +0000
Subject: [PATCH 577/887] Update submodule to latest master (8dd5b13a):
 cmd/compile: relax stmtline_test on amd64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4b0e3cc1d63..8dd5b13abcb 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4b0e3cc1d63a00ee184ea1f6b17e79808e3d9fdc
+Subproject commit 8dd5b13abcb64993959ea02c3f664654af6367a9

From b50d8759b35e29d9606a2ef547d5dba9f19b210b Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 25 Nov 2025 14:21:04 +0000
Subject: [PATCH 578/887] resolve 3-way merge conflicts

---
 ...03-Implement-crypto-internal-backend.patch | 26 ++-------
 patches/0004-Use-crypto-backends.patch        | 56 +++++++++++--------
 2 files changed, 39 insertions(+), 43 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 9682db81397..82dd02b0a99 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -11,7 +11,6 @@ desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
  .../compile/internal/logopt/logopt_test.go    |   6 +-
- .../compile/internal/ssa/stmtlines_test.go    |   2 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
  src/cmd/dist/test.go                          |  43 +-
@@ -55,7 +54,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2664 insertions(+), 24 deletions(-)
+ 45 files changed, 2663 insertions(+), 23 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -121,19 +120,6 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  			goos0 = "linux"
  		}
  
-diff --git a/src/cmd/compile/internal/ssa/stmtlines_test.go b/src/cmd/compile/internal/ssa/stmtlines_test.go
-index 2bdd6c80b2d66c..8f7b7bc9726d1f 100644
---- a/src/cmd/compile/internal/ssa/stmtlines_test.go
-+++ b/src/cmd/compile/internal/ssa/stmtlines_test.go
-@@ -140,7 +140,7 @@ func TestStmtLines(t *testing.T) {
- 	var m float64
- 	switch runtime.GOARCH {
- 	case "amd64":
--		m = 0.0111 // > 98.89% obtained on amd64, no backsliding
-+		m = 0.012 // > 98.8% obtained on amd64, no backsliding
- 	case "riscv64":
- 		m = 0.03 // XXX temporary update threshold to 97% for regabi
- 	default:
 diff --git a/src/cmd/compile/script_test.go b/src/cmd/compile/script_test.go
 index 0e32e0769ee2e2..eda2d576acc6c6 100644
 --- a/src/cmd/compile/script_test.go
@@ -3137,10 +3123,10 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6a8dbe7e3712a3..f3980616aabac1 100644
+index 00f53f3a181855..235d15859473cd 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -355,7 +355,7 @@ var depsRules = `
+@@ -356,7 +356,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3149,7 +3135,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -552,6 +552,11 @@ var depsRules = `
+@@ -554,6 +554,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3161,7 +3147,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -560,16 +565,27 @@ var depsRules = `
+@@ -562,16 +567,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -3191,7 +3177,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -593,8 +609,14 @@ var depsRules = `
+@@ -595,8 +611,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 705f3958d93..0bfe9e8e39f 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -69,7 +69,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  44 ++--
- src/crypto/sha3/sha3.go                       |  67 +++++-
+ src/crypto/sha3/sha3.go                       |  66 +++++-
  src/crypto/sha3/sha3_test.go                  |  11 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
@@ -96,7 +96,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 92 files changed, 1334 insertions(+), 139 deletions(-)
+ 92 files changed, 1334 insertions(+), 138 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1384,7 +1384,7 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 3e1c0cb06a1cbd..4708cbd8518285 100644
+index 5affb8ce2b6022..91ac24e9c82de0 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1406,12 +1406,12 @@ index 3e1c0cb06a1cbd..4708cbd8518285 100644
 +
  	const (
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
- 		bsslVersion   = "v0.0.0-20250207174145-0bb19f6126cb"
+ 		bsslVersion   = "v0.0.0-20251111011041-baaf868e6e8f"
 diff --git a/src/crypto/internal/fips140test/cast_test.go b/src/crypto/internal/fips140test/cast_test.go
-index 5bbc964b617b2b..4b95749788027c 100644
+index 1978356ea5d8e3..be2b3ef3a2ce57 100644
 --- a/src/crypto/internal/fips140test/cast_test.go
 +++ b/src/crypto/internal/fips140test/cast_test.go
-@@ -148,6 +148,7 @@ func TestConditionals(t *testing.T) {
+@@ -160,6 +160,7 @@ func TestConditionals(t *testing.T) {
  }
  
  func TestCASTPasses(t *testing.T) {
@@ -1419,7 +1419,7 @@ index 5bbc964b617b2b..4b95749788027c 100644
  	moduleStatus(t)
  	testenv.MustHaveExec(t)
  	cryptotest.MustSupportFIPS140(t)
-@@ -172,6 +173,7 @@ func TestCASTPasses(t *testing.T) {
+@@ -184,6 +185,7 @@ func TestCASTPasses(t *testing.T) {
  }
  
  func TestCASTFailures(t *testing.T) {
@@ -2609,7 +2609,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index 2a1b3ca7008f5e..225cd524895a6c 100644
+index 48c67e9fe11005..80fafcd87b82d9 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -2660,9 +2660,9 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  	var out [64]byte
  	h := sha3.New512()
  	h.Write(data)
-@@ -98,7 +111,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
- 
+@@ -99,7 +112,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
  // SHA3 is an instance of a SHA-3 hash. It implements [hash.Hash].
+ // The zero value is a usable SHA3-256 hash.
  type SHA3 struct {
 -	s sha3.Digest
 +	s         sha3.Digest
@@ -2671,7 +2671,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  }
  
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
-@@ -108,66 +123,106 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
+@@ -109,22 +124,34 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
  
  // New224 creates a new SHA3-224 hash.
  func New224() *SHA3 {
@@ -2709,8 +2709,11 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
 +	return &SHA3{s: *sha3.New512()}
  }
  
+ func (s *SHA3) init() {
+@@ -136,12 +163,18 @@ func (s *SHA3) init() {
  // Write absorbs more data into the hash's state.
  func (s *SHA3) Write(p []byte) (n int, err error) {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.Write(p)
 +	}
@@ -2719,15 +2722,17 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // Sum appends the current hash to b and returns the resulting slice.
  func (s *SHA3) Sum(b []byte) []byte {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.Sum(b)
 +	}
  	return s.s.Sum(b)
  }
  
- // Reset resets the hash to its initial state.
+@@ -149,40 +182,63 @@ func (s *SHA3) Sum(b []byte) []byte {
  func (s *SHA3) Reset() {
--	s.s.Reset()
+ 	s.init()
+ 	s.s.Reset()
 +	if boring.Enabled && s.supported {
 +		s.boringS.Reset()
 +	} else {
@@ -2737,6 +2742,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // Size returns the number of bytes Sum will produce.
  func (s *SHA3) Size() int {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.Size()
 +	}
@@ -2745,6 +2751,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // BlockSize returns the hash's rate.
  func (s *SHA3) BlockSize() int {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.BlockSize()
 +	}
@@ -2753,6 +2760,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // MarshalBinary implements [encoding.BinaryMarshaler].
  func (s *SHA3) MarshalBinary() ([]byte, error) {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.MarshalBinary()
 +	}
@@ -2761,6 +2769,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // AppendBinary implements [encoding.BinaryAppender].
  func (s *SHA3) AppendBinary(p []byte) ([]byte, error) {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.AppendBinary(p)
 +	}
@@ -2769,6 +2778,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  
  // UnmarshalBinary implements [encoding.BinaryUnmarshaler].
  func (s *SHA3) UnmarshalBinary(data []byte) error {
+ 	s.init()
 +	if boring.Enabled && s.supported {
 +		return s.boringS.UnmarshalBinary(data)
 +	}
@@ -2784,7 +2794,7 @@ index 2a1b3ca7008f5e..225cd524895a6c 100644
  	return &r, nil
  }
 diff --git a/src/crypto/sha3/sha3_test.go b/src/crypto/sha3/sha3_test.go
-index 15ee877236e195..ea30f8ae6f69b1 100644
+index 3973e0afd1b935..ca66d008ef649f 100644
 --- a/src/crypto/sha3/sha3_test.go
 +++ b/src/crypto/sha3/sha3_test.go
 @@ -6,9 +6,11 @@ package sha3_test
@@ -2799,7 +2809,7 @@ index 15ee877236e195..ea30f8ae6f69b1 100644
  	"hash"
  	"io"
  	"math/rand"
-@@ -223,6 +225,10 @@ var sinkSHA3 byte
+@@ -225,6 +227,10 @@ var sinkSHA3 byte
  
  func TestAllocations(t *testing.T) {
  	cryptotest.SkipTestAllocations(t)
@@ -2810,7 +2820,7 @@ index 15ee877236e195..ea30f8ae6f69b1 100644
  	t.Run("New", func(t *testing.T) {
  		if allocs := testing.AllocsPerRun(10, func() {
  			h := New256()
-@@ -231,7 +237,7 @@ func TestAllocations(t *testing.T) {
+@@ -233,7 +239,7 @@ func TestAllocations(t *testing.T) {
  			out := make([]byte, 0, 32)
  			out = h.Sum(out)
  			sinkSHA3 ^= out[0]
@@ -2819,7 +2829,7 @@ index 15ee877236e195..ea30f8ae6f69b1 100644
  			t.Errorf("expected zero allocations, got %0.1f", allocs)
  		}
  	})
-@@ -411,6 +417,9 @@ func testMarshalUnmarshal(t *testing.T, h *SHA3) {
+@@ -413,6 +419,9 @@ func testMarshalUnmarshal(t *testing.T, h *SHA3) {
  	h.Write(buf[:n])
  	b, err := h.MarshalBinary()
  	if err != nil {
@@ -3046,7 +3056,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 90c5bdacd82318..c4ca03ddfb4de0 100644
+index 47cf88323d802e..4fb5ca9104f34d 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -3062,7 +3072,7 @@ index 90c5bdacd82318..c4ca03ddfb4de0 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -542,7 +542,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -537,7 +537,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -3462,10 +3472,10 @@ index 17e7aaf897ab56..569346899ba445 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 55b937aa415483..ea109b13cc7b54 100644
+index 235d15859473cd..f84d593f6c4d46 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -530,7 +530,7 @@ var depsRules = `
+@@ -531,7 +531,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -3474,7 +3484,7 @@ index 55b937aa415483..ea109b13cc7b54 100644
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -558,6 +558,8 @@ var depsRules = `
+@@ -559,6 +559,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -3483,7 +3493,7 @@ index 55b937aa415483..ea109b13cc7b54 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -600,6 +602,7 @@ var depsRules = `
+@@ -601,6 +603,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 9328c987271bedae909f7bf97f1177f1fbe16fa1 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 25 Nov 2025 18:21:53 +0100
Subject: [PATCH 579/887] Upgrade crypto backends (#1974)

* upgrade crypto backends

* upgrade darwin
---
 .../0001-Vendor-external-dependencies.patch   | 5028 ++++++++++-------
 ...03-Implement-crypto-internal-backend.patch |   53 +-
 2 files changed, 3024 insertions(+), 2057 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 2af1f7b7a5c..198c02edec5 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -45,14 +45,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  652 +++++
- .../golang-fips/openssl/v2/const.go           |   96 +
+ .../golang-fips/openssl/v2/const.go           |   97 +
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
- .../github.com/golang-fips/openssl/v2/ec.go   |   66 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  305 +++
+ .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  343 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
- .../golang-fips/openssl/v2/ed25519.go         |  228 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  598 +++++
+ .../golang-fips/openssl/v2/ed25519.go         |  210 ++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  600 +++++
  .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
@@ -95,7 +95,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/shims.h          |  423 +++
+ .../openssl/v2/internal/ossl/shims.h          |  425 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
@@ -103,12 +103,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 2006 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   62 +
- .../openssl/v2/internal/ossl/zossl.h          |  350 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1328 ++++++++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2012 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   63 +
+ .../openssl/v2/internal/ossl/zossl.h          |  352 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1334 ++++++++++
  .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2335 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2341 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
  .../golang-fips/openssl/v2/openssl.go         |  355 +++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
@@ -134,38 +134,38 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../commoncrypto/zcommoncrypto_cgo.go         |   60 +
  .../commoncrypto/zcommoncrypto_go124.go       |   11 +
  .../commoncrypto/zcommoncrypto_nocgo.go       |   89 +
- .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 116760 bytes
- .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 115432 bytes
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 167576 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 161632 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
- .../internal/cryptokit/shims.h                |   68 +
+ .../internal/cryptokit/shims.h                |   80 +
  .../internal/cryptokit/syscall_nocgo.go       |   20 +
- .../internal/cryptokit/zcryptokit.c           |  212 ++
- .../internal/cryptokit/zcryptokit.h           |   58 +
- .../internal/cryptokit/zcryptokit.s           |  234 ++
- .../internal/cryptokit/zcryptokit_cgo.go      |  180 ++
- .../cryptokit/zcryptokit_cgo_go124.go         |   62 +
- .../internal/cryptokit/zcryptokit_nocgo.go    |  281 ++
- .../cryptokit/zcryptokit_swift_amd64.go       |  178 ++
- .../cryptokit/zcryptokit_swift_arm64.go       |  177 ++
+ .../internal/cryptokit/zcryptokit.c           |  252 ++
+ .../internal/cryptokit/zcryptokit.h           |   66 +
+ .../internal/cryptokit/zcryptokit.s           |  274 ++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  212 ++
+ .../cryptokit/zcryptokit_cgo_go124.go         |   78 +
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  337 +++
+ .../cryptokit/zcryptokit_swift_amd64.go       |  275 ++
+ .../cryptokit/zcryptokit_swift_arm64.go       |  274 ++
  .../internal/security/security.go             |    9 +
- .../internal/security/shims.h                 |  111 +
+ .../internal/security/shims.h                 |  107 +
  .../internal/security/syscall_nocgo.go        |   20 +
- .../internal/security/zsecurity.c             |  132 +
- .../internal/security/zsecurity.go            |   22 +
- .../internal/security/zsecurity.h             |  104 +
- .../internal/security/zsecurity.s             |  154 ++
- .../internal/security/zsecurity_cgo.go        |  390 +++
+ .../internal/security/zsecurity.c             |  127 +
+ .../internal/security/zsecurity.go            |   21 +
+ .../internal/security/zsecurity.h             |  100 +
+ .../internal/security/zsecurity.s             |  149 ++
+ .../internal/security/zsecurity_cgo.go        |  368 +++
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
- .../internal/security/zsecurity_nocgo.go      |  479 ++++
+ .../internal/security/zsecurity_nocgo.go      |  453 ++++
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
  .../microsoft/go-crypto-darwin/xcrypto/des.go |  111 +
- .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   32 +
- .../go-crypto-darwin/xcrypto/ecdh.go          |  135 +
- .../go-crypto-darwin/xcrypto/ecdsa.go         |  181 ++
+ .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   39 +
+ .../go-crypto-darwin/xcrypto/ecdh.go          |  146 +
+ .../go-crypto-darwin/xcrypto/ecdsa.go         |  154 ++
  .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
  .../microsoft/go-crypto-darwin/xcrypto/evp.go |  339 +++
  .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
@@ -208,7 +208,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 200 files changed, 27927 insertions(+), 7 deletions(-)
+ 200 files changed, 28365 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -403,7 +403,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 090b2c943f3f4c..f959fe9960b60f 100644
+index 2f13ca0dc9690c..1a537966567fc6 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -416,7 +416,7 @@ index 090b2c943f3f4c..f959fe9960b60f 100644
  	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
  	golang.org/x/mod v0.30.1-0.20251114215501-3f03020ad526
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index e4955f224b405c..c99821e84b2bcd 100644
+index d75d9339fbf230..3435dc59d0fed6 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
@@ -2012,7 +2012,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 80b23723bc780d..6c8c537761bc38 100644
+index 1c7bf37a3b4818..cad8690c96f757 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2062,7 +2062,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index e6cb3d5b43dbd3..76c7f59f356b5c 100644
+index e6cb3d5b43dbd3..74e965e12bc51c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2071,29 +2071,29 @@ index e6cb3d5b43dbd3..76c7f59f356b5c 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859
 +)
 diff --git a/src/go.sum b/src/go.sum
-index fe184a864718af..656a2e6529fc92 100644
+index fe184a864718af..66edcf6139c842 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc h1:YIo5pgGXuGJ0xwd8/IQRZIOLofrlnPLjSyMloeTRLlk=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63 h1:7Z5bSr2MzWPoASu3XODe/kAgr1Yhx5wA+giZWIFL9a8=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb h1:XUJ4meHNXQV+5otrnLH5KLyWDlbobNH5arjRkT/tngE=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207 h1:TsTK3Sg1Yf16FxSWpS1CLG09+nAz3EMCyzd5yENO/Ac=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25 h1:R/RbMmI+Vs521m63ALMrClhcgU8NxuZSBdsV87LtdO8=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859 h1:CYCuHvY592PLaJFC2eaxyf9dS0dU2CTFJJyFSXLdpOI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
+index 5f95535ed949d3..30ed09b5f755ac 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -531,6 +531,27 @@ var depsRules = `
+@@ -532,6 +532,27 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -2121,7 +2121,7 @@ index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -542,13 +563,12 @@ var depsRules = `
+@@ -543,13 +564,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2139,7 +2139,7 @@ index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -569,6 +589,10 @@ var depsRules = `
+@@ -570,6 +590,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2150,7 +2150,7 @@ index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -903,7 +927,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -907,7 +931,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2159,7 +2159,7 @@ index 48a9f3e75bb7b5..6a8dbe7e3712a3 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -913,7 +937,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -917,7 +941,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -3176,10 +3176,10 @@ index 00000000000000..8d8f12fecda346
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..510e2ad1f5cd5d
+index 00000000000000..8b6393fe20b0d9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,96 @@
+@@ -0,0 +1,97 @@
 +package openssl
 +
 +import "unsafe"
@@ -3224,6 +3224,7 @@ index 00000000000000..510e2ad1f5cd5d
 +	_KeyTypeRSA       cString = "RSA\x00"
 +	_KeyTypeEC        cString = "EC\x00"
 +	_KeyTypeED25519   cString = "ED25519\x00"
++	_KeyTypeX25519    cString = "X25519\x00"
 +	_KeyTypeMLKEM768  cString = "ML-KEM-768\x00"
 +	_KeyTypeMLKEM1024 cString = "ML-KEM-1024\x00"
 +
@@ -3710,15 +3711,63 @@ index 00000000000000..695dfbda74b807
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..86009c7f35be5f
+index 00000000000000..ef1a181f6fcf29
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,136 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
-+import "github.com/golang-fips/openssl/v2/internal/ossl"
++import (
++	"errors"
++	"strconv"
++	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-224", "P-256", "P-384", "P-521":
++		return true
++	case "X25519":
++		return supportsX25519()
++	default:
++		return false
++	}
++}
++
++var supportsX25519 = sync.OnceValue(func() bool {
++	if !versionAtOrAbove(1, 1, 1) {
++		// X25519 support was added in OpenSSL 1.1.0, but the APIs we use
++		// to implement it were only added in 1.1.1.
++		return false
++	}
++	ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_X25519, nil)
++	if ctx != nil {
++		ossl.EVP_PKEY_CTX_free(ctx)
++		return true
++	}
++	return false
++})
++
++func curveID(curve string) int32 {
++	switch curve {
++	case "P-224":
++		return ossl.EVP_PKEY_EC
++	case "P-256":
++		return ossl.EVP_PKEY_EC
++	case "P-384":
++		return ossl.EVP_PKEY_EC
++	case "P-521":
++		return ossl.EVP_PKEY_EC
++	case "X25519":
++		return ossl.EVP_PKEY_X25519
++	default:
++		panic("openssl: unknown curve " + curve)
++	}
++}
 +
 +func curveNID(curve string) int32 {
 +	switch curve {
@@ -3780,12 +3829,34 @@ index 00000000000000..86009c7f35be5f
 +	defer ossl.EC_POINT_free(pt)
 +	return encodeEcPoint(group, pt)
 +}
++
++func extractPKEYRawPublic(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
++	keylen := len(pub)
++	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, base(pub), &keylen); err != nil {
++		return err
++	}
++	if keylen != len(pub) {
++		return errors.New("bad public key length: " + strconv.Itoa(keylen))
++	}
++	return nil
++}
++
++func extractPKEYRawPrivate(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
++	keylen := len(pub)
++	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(pub), &keylen); err != nil {
++		return err
++	}
++	if keylen != len(pub) {
++		return errors.New("bad private key length: " + strconv.Itoa(keylen))
++	}
++	return nil
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..13c8e1e1181f9d
+index 00000000000000..c95b32351ee737
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,305 @@
+@@ -0,0 +1,343 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -3799,6 +3870,9 @@ index 00000000000000..13c8e1e1181f9d
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
++const publicKeySizeX25519 = 32
++const privateKeySizeX25519 = 32
++
 +type PublicKeyECDH struct {
 +	_pkey ossl.EVP_PKEY_PTR
 +	bytes []byte
@@ -3818,9 +3892,14 @@ index 00000000000000..13c8e1e1181f9d
 +}
 +
 +func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
-+	if len(bytes) != 1+2*curveSize(curve) {
++	expectedLen := publicKeySizeX25519
++	if curve != "X25519" {
++		expectedLen = 1 + 2*curveSize(curve)
++	}
++	if len(bytes) != expectedLen {
 +		return nil, errors.New("NewPublicKeyECDH: wrong key length")
 +	}
++
 +	pkey, err := newECDHPkey(curve, bytes, false)
 +	if err != nil {
 +		return nil, err
@@ -3833,7 +3912,11 @@ index 00000000000000..13c8e1e1181f9d
 +func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
 +
 +func NewPrivateKeyECDH(curve string, bytes []byte) (*PrivateKeyECDH, error) {
-+	if len(bytes) != curveSize(curve) {
++	expectedLen := privateKeySizeX25519
++	if curve != "X25519" {
++		expectedLen = curveSize(curve)
++	}
++	if len(bytes) != expectedLen {
 +		return nil, errors.New("NewPrivateKeyECDH: wrong key length")
 +	}
 +	pkey, err := newECDHPkey(curve, bytes, true)
@@ -3853,40 +3936,50 @@ index 00000000000000..13c8e1e1181f9d
 +	}()
 +
 +	var bytes []byte
-+	switch vMajor {
-+	case 1:
-+		var err error
-+		pkey, err = ossl.EVP_PKEY_new()
-+		if err != nil {
-+			return nil, err
-+		}
-+		key := getECKey(k._pkey)
-+		if _, err := ossl.EVP_PKEY_set1_EC_KEY(pkey, key); err != nil {
-+			return nil, err
-+		}
-+		pt := ossl.EC_KEY_get0_public_key(key)
-+		if pt == nil {
-+			return nil, fail("missing ECDH public key")
-+		}
-+		group := ossl.EC_KEY_get0_group(key)
-+		if bytes, err = encodeEcPoint(group, pt); err != nil {
-+			return nil, err
-+		}
-+	case 3:
++	if k.curve == "X25519" {
 +		pkey = k._pkey
 +		if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
 +			return nil, err
 +		}
-+
-+		var cbytes *byte
-+		n, err := ossl.EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
-+		if err != nil {
++		bytes = make([]byte, publicKeySizeX25519)
++		if err := extractPKEYRawPublic(pkey, bytes); err != nil {
 +			return nil, err
 +		}
-+		bytes = goBytes(unsafe.Pointer(cbytes), n)
-+		cryptoFree(unsafe.Pointer(cbytes))
-+	default:
-+		panic(errUnsupportedVersion())
++	} else {
++		switch vMajor {
++		case 1:
++			var err error
++			pkey, err = ossl.EVP_PKEY_new()
++			if err != nil {
++				return nil, err
++			}
++			key := getECKey(k._pkey)
++			if _, err := ossl.EVP_PKEY_set1_EC_KEY(pkey, key); err != nil {
++				return nil, err
++			}
++			pt := ossl.EC_KEY_get0_public_key(key)
++			if pt == nil {
++				return nil, fail("missing ECDH public key")
++			}
++			group := ossl.EC_KEY_get0_group(key)
++			if bytes, err = encodeEcPoint(group, pt); err != nil {
++				return nil, err
++			}
++		case 3:
++			pkey = k._pkey
++			if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
++				return nil, err
++			}
++			var cbytes *byte
++			n, err := ossl.EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
++			if err != nil {
++				return nil, err
++			}
++			bytes = goBytes(unsafe.Pointer(cbytes), n)
++			cryptoFree(unsafe.Pointer(cbytes))
++		default:
++			panic(errUnsupportedVersion())
++		}
 +	}
 +	pub := &PublicKeyECDH{pkey, bytes}
 +	pkey = nil
@@ -3895,6 +3988,13 @@ index 00000000000000..13c8e1e1181f9d
 +}
 +
 +func newECDHPkey(curve string, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
++	if curve == "X25519" {
++		if isPrivate {
++			return ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_X25519, nil, base(bytes), len(bytes))
++		} else {
++			return ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_X25519, nil, base(bytes), len(bytes))
++		}
++	}
 +	nid := curveNID(curve)
 +	switch vMajor {
 +	case 1:
@@ -4048,7 +4148,7 @@ index 00000000000000..13c8e1e1181f9d
 +}
 +
 +func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	pkey, err := generateEVPPKey(ossl.EVP_PKEY_EC, 0, curve)
++	pkey, err := generateEVPPKey(curveID(curve), 0, curve)
 +	if err != nil {
 +		return nil, nil, err
 +	}
@@ -4058,34 +4158,43 @@ index 00000000000000..13c8e1e1181f9d
 +			ossl.EVP_PKEY_free(pkey)
 +		}
 +	}()
-+	var priv ossl.BIGNUM_PTR
-+	switch vMajor {
-+	case 1:
-+		key := getECKey(pkey)
-+		priv = ossl.EC_KEY_get0_private_key(key)
-+		if priv == nil {
-+			return nil, nil, fail("missing ECDH private key")
++	var bytes []byte
++	if curve == "X25519" {
++		bytes = make([]byte, privateKeySizeX25519)
++		keylen := len(bytes)
++		if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(bytes), &keylen); err != nil {
++			return nil, nil, err
 +		}
-+	case 3:
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
++	} else {
++		var priv ossl.BIGNUM_PTR
++		switch vMajor {
++		case 1:
++			key := getECKey(pkey)
++			priv = ossl.EC_KEY_get0_private_key(key)
++			if priv == nil {
++				return nil, nil, fail("missing ECDH private key")
++			}
++		case 3:
++			if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
++				return nil, nil, err
++			}
++			defer ossl.BN_clear_free(priv)
++		default:
++			panic(errUnsupportedVersion())
++		}
++		// We should not leak bit length of the secret scalar in the key.
++		// For this reason, we use BN_bn2binpad instead of BN_bn2bin with fixed length.
++		// The fixed length is the order of the large prime subgroup of the curve,
++		// returned by EVP_PKEY_get_bits, which is generally the upper bound for
++		// generating a private ECDH key.
++		bits, err := ossl.EVP_PKEY_get_bits(pkey)
++		if err != nil {
++			return nil, nil, err
++		}
++		bytes = make([]byte, (bits+7)/8)
++		if err := bnToBinPad(priv, bytes); err != nil {
 +			return nil, nil, err
 +		}
-+		defer ossl.BN_clear_free(priv)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	// We should not leak bit length of the secret scalar in the key.
-+	// For this reason, we use BN_bn2binpad instead of BN_bn2bin with fixed length.
-+	// The fixed length is the order of the large prime subgroup of the curve,
-+	// returned by EVP_PKEY_get_bits, which is generally the upper bound for
-+	// generating a private ECDH key.
-+	bits, err := ossl.EVP_PKEY_get_bits(pkey)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	bytes := make([]byte, (bits+7)/8)
-+	if err := bnToBinPad(priv, bytes); err != nil {
-+		return nil, nil, err
 +	}
 +	k = &PrivateKeyECDH{pkey, curve}
 +	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
@@ -4324,10 +4433,10 @@ index 00000000000000..3cfe69f0445ee4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..d160bbe220c927
+index 00000000000000..bafc97944fce00
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,228 @@
+@@ -0,0 +1,210 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -4392,7 +4501,7 @@ index 00000000000000..d160bbe220c927
 +func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
 +	defer runtime.KeepAlive(k)
 +	pub := make([]byte, publicKeySizeEd25519)
-+	if err := extractPKEYPubEd25519(k._pkey, pub); err != nil {
++	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
 +		return nil, err
 +	}
 +	return pub, nil
@@ -4417,7 +4526,7 @@ index 00000000000000..d160bbe220c927
 +
 +func (k *PrivateKeyEd25519) Public() (*PublicKeyEd25519, error) {
 +	pub := make([]byte, publicKeySizeEd25519)
-+	if err := extractPKEYPubEd25519(k._pkey, pub); err != nil {
++	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
 +		return nil, err
 +	}
 +	pubk, err := NewPublicKeyEd25519(pub)
@@ -4484,29 +4593,11 @@ index 00000000000000..d160bbe220c927
 +	return priv, nil
 +}
 +
-+func extractPKEYPubEd25519(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
-+	keylen := publicKeySizeEd25519
-+	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, base(pub), &keylen); err != nil {
-+		return err
-+	}
-+	if keylen != publicKeySizeEd25519 {
-+		return errors.New("ed25519: bad public key length: " + strconv.Itoa(keylen))
-+	}
-+	return nil
-+}
-+
 +func extractPKEYPrivEd25519(pkey ossl.EVP_PKEY_PTR, priv []byte) error {
-+	if err := extractPKEYPubEd25519(pkey, priv[seedSizeEd25519:]); err != nil {
++	if err := extractPKEYRawPublic(pkey, priv[seedSizeEd25519:]); err != nil {
 +		return err
 +	}
-+	keylen := seedSizeEd25519
-+	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(priv), &keylen); err != nil {
-+		return err
-+	}
-+	if keylen != seedSizeEd25519 {
-+		return errors.New("ed25519: bad private key length: " + strconv.Itoa(keylen))
-+	}
-+	return nil
++	return extractPKEYRawPrivate(pkey, priv[:seedSizeEd25519])
 +}
 +
 +// SignEd25519 signs the message with priv and returns a signature.
@@ -4558,10 +4649,10 @@ index 00000000000000..d160bbe220c927
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..db9646c846cc9c
+index 00000000000000..1e048be6c15362
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,598 @@
+@@ -0,0 +1,600 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -4791,7 +4882,7 @@ index 00000000000000..db9646c846cc9c
 +				return nil, err
 +			}
 +		}
-+		if curve != "" {
++		if id == ossl.EVP_PKEY_EC && curve != "" {
 +			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil); err != nil {
 +				return nil, err
 +			}
@@ -4808,6 +4899,8 @@ index 00000000000000..db9646c846cc9c
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_EC(nil, nil, _KeyTypeEC.ptr(), ossl.OBJ_nid2sn(curveNID(curve)))
 +		case ossl.EVP_PKEY_ED25519:
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_ED25519(nil, nil, _KeyTypeED25519.ptr())
++		case ossl.EVP_PKEY_X25519:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_X25519(nil, nil, _KeyTypeX25519.ptr())
 +		case ossl.EVP_PKEY_MLKEM_768:
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM768.ptr())
 +		case ossl.EVP_PKEY_MLKEM_1024:
@@ -9029,10 +9122,10 @@ index 00000000000000..bb8ea6fafdc4d9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..925b256a6eefd7
+index 00000000000000..07639e7c6d2fe9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,423 @@
+@@ -0,0 +1,425 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -9079,6 +9172,7 @@ index 00000000000000..925b256a6eefd7
 +	_EVP_PKEY_RSA         = 6,
 +	_EVP_PKEY_EC          = 408,
 +	_EVP_PKEY_TLS1_PRF    = 1021,
++	_EVP_PKEY_X25519      = 1034,
 +	_EVP_PKEY_HKDF        = 1036,
 +	_EVP_PKEY_ED25519     = 1087,
 +	_EVP_PKEY_DSA         = 116,
@@ -9318,7 +9412,7 @@ index 00000000000000..925b256a6eefd7
 +size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
 +int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
 +int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3")));
-+int EVP_PKEY_up_ref(_EVP_PKEY_PTR key) __attribute__((tag("3")));
++int EVP_PKEY_up_ref(_EVP_PKEY_PTR key);
 +int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
 +int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
 +int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len) __attribute__((tag("111"),noescape,nocallback));
@@ -9346,6 +9440,7 @@ index 00000000000000..925b256a6eefd7
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
 +
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
@@ -9732,10 +9827,10 @@ index 00000000000000..fb345aac77ea48
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..b24f0a2d3767e0
+index 00000000000000..45df4fbfd4a808
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2006 @@
+@@ -0,0 +1,2012 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -10059,6 +10154,7 @@ index 00000000000000..b24f0a2d3767e0
 +	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
 +	__mkcgo__dlsym(EVP_PKEY_sign)
 +	__mkcgo__dlsym(EVP_PKEY_sign_init)
++	__mkcgo__dlsym(EVP_PKEY_up_ref)
 +	__mkcgo__dlsym(EVP_PKEY_verify)
 +	__mkcgo__dlsym(EVP_PKEY_verify_init)
 +	__mkcgo__dlsym(EVP_aes_128_cbc)
@@ -10164,6 +10260,7 @@ index 00000000000000..b24f0a2d3767e0
 +	_g_EVP_PKEY_paramgen_init = NULL;
 +	_g_EVP_PKEY_sign = NULL;
 +	_g_EVP_PKEY_sign_init = NULL;
++	_g_EVP_PKEY_up_ref = NULL;
 +	_g_EVP_PKEY_verify = NULL;
 +	_g_EVP_PKEY_verify_init = NULL;
 +	_g_EVP_aes_128_cbc = NULL;
@@ -10285,7 +10382,6 @@ index 00000000000000..b24f0a2d3767e0
 +	__mkcgo__dlsym(EVP_PKEY_private_check)
 +	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
 +	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_up_ref)
 +	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
 +	__mkcgo__dlsym(EVP_SIGNATURE_free)
 +	__mkcgo__dlsym(EVP_default_properties_enable_fips)
@@ -10359,7 +10455,6 @@ index 00000000000000..b24f0a2d3767e0
 +	_g_EVP_PKEY_private_check = NULL;
 +	_g_EVP_PKEY_public_check_quick = NULL;
 +	_g_EVP_PKEY_set1_encoded_public_key = NULL;
-+	_g_EVP_PKEY_up_ref = NULL;
 +	_g_EVP_SIGNATURE_fetch = NULL;
 +	_g_EVP_SIGNATURE_free = NULL;
 +	_g_EVP_default_properties_enable_fips = NULL;
@@ -11140,6 +11235,12 @@ index 00000000000000..b24f0a2d3767e0
 +	return _ret;
 +}
 +
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -11744,10 +11845,10 @@ index 00000000000000..b24f0a2d3767e0
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..3d66be3bc085ca
+index 00000000000000..5f6ed2fab35022
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,62 @@
+@@ -0,0 +1,63 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -11764,6 +11865,7 @@ index 00000000000000..3d66be3bc085ca
 +	EVP_PKEY_RSA                        = 6
 +	EVP_PKEY_EC                         = 408
 +	EVP_PKEY_TLS1_PRF                   = 1021
++	EVP_PKEY_X25519                     = 1034
 +	EVP_PKEY_HKDF                       = 1036
 +	EVP_PKEY_ED25519                    = 1087
 +	EVP_PKEY_DSA                        = 116
@@ -11812,10 +11914,10 @@ index 00000000000000..3d66be3bc085ca
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..2a6c904ff736cf
+index 00000000000000..3880f653c1e788
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,350 @@
+@@ -0,0 +1,352 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -11866,6 +11968,7 @@ index 00000000000000..2a6c904ff736cf
 +	_EVP_PKEY_RSA = 6,
 +	_EVP_PKEY_EC = 408,
 +	_EVP_PKEY_TLS1_PRF = 1021,
++	_EVP_PKEY_X25519 = 1034,
 +	_EVP_PKEY_HKDF = 1036,
 +	_EVP_PKEY_ED25519 = 1087,
 +	_EVP_PKEY_DSA = 116,
@@ -12049,6 +12152,7 @@ index 00000000000000..2a6c904ff736cf
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, uintptr_t *);
 +int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
@@ -12168,10 +12272,10 @@ index 00000000000000..2a6c904ff736cf
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..dd9985c9bc13b4
+index 00000000000000..ba469a24bdf87a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1328 @@
+@@ -0,0 +1,1334 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -12899,6 +13003,12 @@ index 00000000000000..dd9985c9bc13b4
 +	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", uintptr(_err))
 +}
 +
++func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_X25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_X25519", uintptr(_err))
++}
++
 +func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
@@ -13545,10 +13655,10 @@ index 00000000000000..bfe062869cee6a
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..324a7f4228b4c9
+index 00000000000000..39f67a2fcb14d6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2335 @@
+@@ -0,0 +1,2341 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -14463,6 +14573,12 @@ index 00000000000000..324a7f4228b4c9
 +	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
 +}
 +
++func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_X25519", _err)
++}
++
 +var _mkcgo_EVP_PKEY_assign uintptr
 +
 +func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
@@ -15426,6 +15542,7 @@ index 00000000000000..324a7f4228b4c9
 +	_mkcgo_EVP_PKEY_paramgen_init = dlsym(handle, "EVP_PKEY_paramgen_init\x00", false)
 +	_mkcgo_EVP_PKEY_sign = dlsym(handle, "EVP_PKEY_sign\x00", false)
 +	_mkcgo_EVP_PKEY_sign_init = dlsym(handle, "EVP_PKEY_sign_init\x00", false)
++	_mkcgo_EVP_PKEY_up_ref = dlsym(handle, "EVP_PKEY_up_ref\x00", false)
 +	_mkcgo_EVP_PKEY_verify = dlsym(handle, "EVP_PKEY_verify\x00", false)
 +	_mkcgo_EVP_PKEY_verify_init = dlsym(handle, "EVP_PKEY_verify_init\x00", false)
 +	_mkcgo_EVP_aes_128_cbc = dlsym(handle, "EVP_aes_128_cbc\x00", false)
@@ -15531,6 +15648,7 @@ index 00000000000000..324a7f4228b4c9
 +	_mkcgo_EVP_PKEY_paramgen_init = 0
 +	_mkcgo_EVP_PKEY_sign = 0
 +	_mkcgo_EVP_PKEY_sign_init = 0
++	_mkcgo_EVP_PKEY_up_ref = 0
 +	_mkcgo_EVP_PKEY_verify = 0
 +	_mkcgo_EVP_PKEY_verify_init = 0
 +	_mkcgo_EVP_aes_128_cbc = 0
@@ -15652,7 +15770,6 @@ index 00000000000000..324a7f4228b4c9
 +	_mkcgo_EVP_PKEY_private_check = dlsym(handle, "EVP_PKEY_private_check\x00", false)
 +	_mkcgo_EVP_PKEY_public_check_quick = dlsym(handle, "EVP_PKEY_public_check_quick\x00", false)
 +	_mkcgo_EVP_PKEY_set1_encoded_public_key = dlsym(handle, "EVP_PKEY_set1_encoded_public_key\x00", false)
-+	_mkcgo_EVP_PKEY_up_ref = dlsym(handle, "EVP_PKEY_up_ref\x00", false)
 +	_mkcgo_EVP_SIGNATURE_fetch = dlsym(handle, "EVP_SIGNATURE_fetch\x00", false)
 +	_mkcgo_EVP_SIGNATURE_free = dlsym(handle, "EVP_SIGNATURE_free\x00", false)
 +	_mkcgo_EVP_default_properties_enable_fips = dlsym(handle, "EVP_default_properties_enable_fips\x00", false)
@@ -15726,7 +15843,6 @@ index 00000000000000..324a7f4228b4c9
 +	_mkcgo_EVP_PKEY_private_check = 0
 +	_mkcgo_EVP_PKEY_public_check_quick = 0
 +	_mkcgo_EVP_PKEY_set1_encoded_public_key = 0
-+	_mkcgo_EVP_PKEY_up_ref = 0
 +	_mkcgo_EVP_SIGNATURE_fetch = 0
 +	_mkcgo_EVP_SIGNATURE_free = 0
 +	_mkcgo_EVP_default_properties_enable_fips = 0
@@ -18873,1395 +18989,1949 @@ index 00000000000000..9de8feb80b0276
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..bd23a4fe6b272d3226dfb87e2bf133fcd52ae2f3
+index 0000000000000000000000000000000000000000..a61334ba448e88c23e42d705b7ad58056ef41ab7
 GIT binary patch
-literal 116760
-zcmeFa3w&HvwLd=P8J-CW5_w2~qUn`tilE^FI+X^ekU+E)f`Cn-Eh+R7+eCtrYf2f-
-z;W!wsM52P`Driv9_{fh4My60`RMen|Q4s<HCImGikAOh`-|t#$pE)ygW)iOYzxQ)L
-z&4=>ckG0ocd+oLNUVEQ?&iwqPKfStpEH-E782*QUhvQ$o1plkRKm5HB{|1>^;IFNm
-zrDCy0mLXakJY)Q~7ZdTfY+1|7wiXR*{LGq$Gc$1)`pI(|BEMY_Ojpc_eRnqmc8PUp
-zj{bkyvI{nD3?(dEwrJs*3o{8$j`B=WEZhv0I+M9<*^1>Y%fs<(ej_GVy%nr_H75KT
-z&YBZDBvUL1EnBwn($%Y4j$77pS@X&bD_1RBmfhZp7nJlCE77rC^<RDVoLE?9$8g!Q
-z3pciGSiSBdOUUInV*IYM{3`S&_2>R}asfl|Tfc5&rbF`dH?4%#MxO>h>TeqIv0rol
-z^7&=Ax5xN7Ii|rcw-3TRO@GVQu3yo#d}9;rr?&R2x(vnVjbE81y;PJN?Qi`B7hkw+
-z_1fhZtz5ls)%x7_e%<()8OQdVlP8_4N@`?#*ETP|uw_~6x=UBDTLJkNWu(KHF@CXq
-zHMJc4sK2U)Ik9F<a;lKnvSllqmaW>beC<lj%<bR7-Bg~w{WQP4RQYL4##xgK6OX~a
-za{SX$`yg}>{>5Ufl<EEF&WWXv+0im5*0V&%X*~(>M|<YKH2yt=f8WNx*ZMaf1uF25
-z_0L};W8swbt?MwzR<B>jH2kZ?Kgu&-+I{Kz4VT2SXpkjzt{ukb<n<d?2IWKimn~Yp
-z0bP+{@eV7`dWz94m?a%`>f{ddTOtFqe#80;S8m*BLo}lO%T8Xu?!wj$8&<Bn@G{|3
-zkuBGf%Qm*GT#GdRMU>a(X?CO>?`>VZre*cIWvkY#U+zYB1fMf5*tl}TN30_v^Dka`
-zVaw`|tUTG|$k8A5pHXs-JURWDM;lS!qSYIlm$zJ~=IiqF_^iEP^*W3V=115K>sf+U
-ztwtA!L<RUPS&1H4-J<%>v8#r9G`JA|Q%+ymA{JV_y=coN3pZS_x@ALQ{VqP^wAHSA
-zf_~0vZ$MK>o(-2Zx2(_MQw7;__|&eyaQT{rtu0L}*R`y^&<#G&Ildt~Ucv?IjCJeR
-ztz6RD+`N8+$Vj@3o;Zi90wT(v%n7k&^#!ZfK*9CPFT8|3u{7a5G0r0A-(7kbW=O^p
-zo1ZSblhe_Hw0Bp+dr<QG=CtlKxz`}&Nq9BWlO+q%g0X~OGo9GHwTuknQhwoCOTeNE
-z8CA9Z(#l%@{ECEsetE6mT2|{FJ2&B-H@Bn~|3mD|x#bCO(cB8D0$i%jUHGB%?_Ra)
-zZKa1@NvV|I*$dBFxOCx}OA?!&9)tpGy;Rey+qc(x$wolJ`$@vPA%W0h@4;GcATDVG
-zWdcJb1PGGwl2sb4L@=ho3IxkF2r-h=uLx}!f>R7`s~MpPz+uC*;h<r^VV_~IVUJ;#
-zVW(k-VzO=fcK8!yoovnon=Dv*cDi(4vK}!&9Izn0(A$b|3}F-*g~%+8lr(~XUN$0i
-z5))OEetbIN$Kx8=oGwjl9-B(c+nVsk(6~V~uGagbW_nu^UMejuM;R|UtikA_q#YrF
-zS2L2$VKl>GY$gul%3;`XsP$9Scdc(dkkan4zLTD;^>1iI8*BY;_I$$cX16W&w$*w=
-z6_OybS86a{c3(PwvG+&NcYvtQd!^R9wHl#XuN`*WKA7-Y`)j?{zJzyvZ>@KJPp!AK
-ztJbUQto3R-5?(hu3~gs;K}YN;)ALYV>Kvf`B}A9?61pGM4HA-$1dE1HA+{yq4@g_2
-zP;*eIO$)KxQ791<g8gbzbtdVqgr8({5+1AT6sE_~2ok9wQj3hW-c4P|S-kmW44j*K
-z5G+lugR6u3ML>Uu64&}dWv%L#M)=wSKdBwoT`mHoDhR&T;|=smZy#W_lEi67#*jb2
-zQKf?TNol5^k~aDS)gtf^&2cd%8b8VYtM$6OB;kJaa)l(MdXP}({j%1(p+iDHL8ucU
-z&~iv%J}41LPLZRRnij_Kvh5=YKSdr1Uuv-`FfytaJbyc<vh5?VI@Sk5)&fFRV{$}d
-z1JZQAn=-;o*;q_FV_MBP0dr--do<x)R+8|Jhu%emREi{Z-mvNdvm;dBhr-qi{RoyO
-zOF5VMw`xryppcugG~L^l@P-;ej(IrY4Kzt;C@lgE3<I<Vf2f>Eez%bNDW$tNf?u*<
-z%61P1Wuf}ikfds-Dn~C_FLiY{2<Q~!b@ye8QL^elvN%Fc7D@F7n1s=i2<23XlmkqH
-zuu=o8EJUD51K}iXk~G~_peh?k3mciTw%3=S?>Z!5pfkj9T$4tXbPS-RYJ3A~9b$Q!
-z-mDU~1?|-FVWY(aNcMrxf*)~4AYU)prtBpK`(`Y)a`fDV=Pf*c;fEG3JO6G7*8`SV
-zG*iblOvPfi9|r6DK231p;1T%0FfQFIW2pVgxDvpXHd%#$Yd#ahVRXc3NZxSv|8E+h
-zeA1q5rA#~t!E)AfjF}3|x#J0ccPu1RiOtio((AW8zhw>`iq<{Np{StJNCXP+-o%zy
-zD-tg}oajl+*#@@+3(=2F19jsGdMP6bZ$EKJ(yQ>7<v++6^>>AqW2{SRnVaxsxwMH)
-zd6DgK!rMnEA&W@@*Jf4NA5r-s6{Ms5TgKnrxuvrXbHVtWmc1rpSJiAkdZ(6yCf@`3
-zrxJs(IR3pSaric=X7VjTyS}ek%tO63W7ed03vAvBC9pYp?GgP!56V&aQ4)VC{=FB=
-zc+K<=WqPZxLW5gNr6GPRGTX<+%xlKsY=L=~`Fr5^KiZzM#6Pir7Q$bo2U?A0SHlB^
-z7kYjrJkSbwpzuQ5F&UpYx7KT!TS8Y9vGeAZ(-nmh7R{~HKG?jq8m=fuZodA>-}$2n
-ztfW|f%3<ZT-raCS%Me=Z{S1z16Gp^h@7HiSWLoeBIQej>5+E4{bqR<OtU_=^Q!5c1
-z*C50(Z>**q!L+89Avnn3|CDzM2ec7p%P~^aQH5JNh2{Zdx!jf<L`+J}OLigXyg&7t
-zbOIGGPN%E_&MQV}s*}yn^FX^qKf<9$gK?;;7eVXMj2G-nvMk%Fz9<55lVv3k@2sEv
-zyqb{1>Kp=g3OtBm68P#G`_{qI-SAs!8d&Stsf)dP;C4<4u?RY?!90g`vG)WB>qSeL
-zV{E@7=2GjeO=ld|_C7eRy>MFLu$~WxbtxRyx(>J~ZRjHSkLs|d=&*tf`^~19p)wI`
-zK&11MamL_o3Q)(gE{a=ODQQt&tQ7Li^-VS?i^hOOm4xV-Rx69R%9QbG{gkrMdi^9D
-z4DyhpoAEQ7nCCk`Gw^P)U`oaQ04uh}sVs1YwB8D>w=&au^StSEHVX}<Y-1=jL~7v!
-zm#qUy=CXAnSem><9cOkXYG${?aVC{hYqR8-pC+yk)LPF(v7{0Sv9>Y^>6XsxrvK_#
-z$msUfx$%<KLf0J+Sd<4WDwM?(<@UO#Gg1unGshq511$E^Xl0KT^2NEX^R{5ls+8Ox
-zAykD>j$7-i_pA<{x^hmrB9X5W`9leE_6M|y$q|)hG$Tt&3C!0^b_%&j27g*qj_s$G
-z8YZYeUF+>pYb!!(K$xbwNmc7@Q8Cn|ZeSC1W7CLWX>v?l>ZI`X2V!Ihk6!8&4+?{{
-z5;1fdi=rF)q-u4FeO>rd87CJeF#fVuf#EZSAQcTjMocR7Q6Z|3EbMiJVqipIXjq|3
-zsu<`2xGo+MiMoXV(}vKgvremG)E6d>K9oc|@^#_xN?g9SaG*`tCOZJ?%(AUu#r}1q
-z<(fp>aY-ebR2E9=*Q721u^wfp8XcI@^l5;mSBa)&N9VX!Xi{aS*~xLVOuXh%X>oE)
-zTAGxYpORRf*UWJzUh@%8WP8o0Vl9!n#B1(XR(;AiEig0)aN;nG#dk0xPFD8+GEK1o
-z&YKP?YvO03)D(@KyMmN7+e@<96VFSY^gjArZNY3mMPmhd59p)=dJ&MGlOz}v6LR={
-z75vmcOo{Kz13o<;oFOhM51l72T#AFcX>=F#&q)}r3wA(=ZmZD_<at-k2;EswaFuYK
-zrYlC0vm-X`@N1K08q8ZU^<*m+Dl0X4H9cCerZeh1OxD@8SU1;-_gm|YOU?4XT7PX<
-zLL}0)6x;9C4y?Q*z)>flRO0LLkY9&vH;QFqH$Jz9#bOxUBTbT_EG@!`Cev-f_Twen
-zN34pJ>VTTz;YuRaI*4<C3IuPj5S4aUBW%P;A@OAmOZd>Y92#W{tLI2_$gm+(Qn+At
-z%+!|9+Imr2eTFV6$=DM!S88a?WC}wxj!AHNq)EOUnmG|PX`ne&rcH=jJB)-K)!vox
-zTiJ0?1NPC=3(u!Db)dOoe?pmMUklHKg{86Mfv_dy=jjoN85j(0jD>-tMDbf|`sG*^
-zX>v*n3xwYkJ`|OuL9MP|hE@TWR2<u&sIN6=de}=1YiXLVEM+*DMQ{wM+UC&ttZ!#a
-zk76v2&P2eD2i<rS9X(k3aZ{|@!*<VWM~X9CG3#k&rCQU_Sqz-SoNB#Ctsjz-?GG_a
-zJDP@SnM0yve;|`294kd2o>Nsxh%FY2^qzrfS4diWKg1X`J}D{TcMG|n)CSe{CcLG6
-z2|HnQE?;}El)=Iq2OnGX69|?jFP1g9Th%NFa5z<?_Asxh!Uw3M?e%yJF(3-@jo9@^
-z83c`kq}Kb34ZMJZ9J1-6E4;i^2RVD)odO*5OF6e-FKOEvu)r!VRQ>>|oYK-P;dg6}
-z9@l2(i@0Ql#S>xBgh9swGBFJ1+Bg*r=a)zf<_lTj(9S+m$^_Fdp;WU#cN>Z8&2x}m
-zOE4of(1dic0UocI$VthQVO}p(L!@$<+Mbl;%o#@e8$qL)!ni>h*GDmyJYn3Vj7jAb
-zMLuYP<oMkpxcZ8YK$8a87MIkaWjaGiQ<^j^U|NFm#3Fr}LaneqWZ`jM4{5P$)FKk|
-zQxZ$9oZ@MooaE8$FvV1XO3vo05pZ%a5reHO9CzV}npxB>^r6ZpH_bfXRq1@ELrur&
-zYnbms6P6Bf8?&4=O4z>HthbG#2o}*{9y!m*xYv2667;$AjAZ-j7>Ge|7H}HViD4j<
-zB!)#>(ev;I32~l@ONjG~_D=RZBPD!!27?i$V$U?sG=ZbdGtCH=CMU3TU<|UUDxZ52
-z&^;a)fXFvO8%PbbfiQ1GNuIQGRH%kX<(eBq7=|x7e)kv&{LuXF4{4H2XRZvzK^g5c
-z@sHFc7lmMVo?$P~t;GGCB4<4ClnV5ziLXyh!e-7^+e#{C&Vl4=O$&#NnKSP4B5Gz)
-zXXc^GCpSesf9Ba5*7FWd>$(i0SEc2i?ghOe8Pf%<9V_|>S9##DVVbC`ewVqK(tyn4
-zR~%E(Dga_C+hi@$(z1jx=-MZhV}nK&__9o6R;PT}YhxQdF6rW}N>g>YXV)r&tmU4`
-zi@h-vV`mg4U=QaJ$VpWha>9!|mLzzob;F6xFUCr*jKO<{(Th>x>=4yp`zy`YwFQRI
-zM3KFkw6Yf)ZblMUf<%fBMP;fLTUHYHC~v5ZCB>XO5VB0|9)BQ{BrJQR7P<$$65_D!
-zln{q)mxSQ@d96LhN2g=ITgZLg2H<#0S6qDn8Mp`PKf*oe10Nf<{RoyO--&y6XutM_
-z4Ao$`3{i997pNzI!}1m!MQcRYv&o$%6X@kJN{5+4gtW6RF$|21<A>Xi1WP56<0#Xk
-zO*G;NPaZI72Bhb3XfY=k%qP>r+6g9osnVjG*ci;jIHOjtf;NgFSt-e~WYgI~%xO$>
-z^sa+v-n{tiCK8UkRB@@yMhi--1`8^U6DfJ?Q6Mtv5i3nzAje*s<);!tk>c(j^l}yu
-z;)WGgTO_kopm=eR#(7`>??|5aBTHGNWXO5R1~$&N7T!>dwcr`Gw0NKdF>9mCDUbw_
-zDjcyjntPoxvP)$)PGK)c^2CVCg(`Cf2vH@;7oO<p(&YQO>;_WWL5WE@i1s-twNXPo
-z)Kbul-VlN16i7ld`a;A_6bxRSaO>7uQ{n1NkZ_Vokj|1|IK<R)3M4^-k$^ZQJ3eh&
-zYKUg&+NlQXI(r-?#Q*J7fx7@kX~*M9+8XC|iiH&vF!>)iccrxd5PxO7Z3~Y!a`?Xq
-zww7kK+qNJxH&<pyN`qle2(N+tBCH&v$QsxM0@w0R665JkAh;ei2H7m?4}>(JHx0IJ
-zK}L=Y6PGc`oq#8s!C9*75P32~wb<Zl1Ffi@rJWEAL&oZmjG63W9T{-T??^pj+O~!D
-zWh;8(J7`+e^Ga;6Fx&HqDjv!;yK_r-aV+QgrpTVZzc2e&`2(=RLCBqP0jkijdu6%d
-z4J|Iw;t6D3u(Ev?midDBtY~qrABGWzF^mYz%4g7$A!k9B`e`!oGJbaUQvVyBr$>cI
-z4z;m{ux&6cwPahtvX*+zEup2p8PTkzp7}65rt4DQhEPt!GD))3cac_Ztn^5TOMQog
-zxYUbDVUHAE>ZOF=E#x*>XI$!g!O@obJ_K>2M%zEdn$&TI-0TK--KQSrXIEM5AyKwp
-zV23w$bxXFknFr}}O0PUYjvBJd46p(ln1y|b1c<VI38p|TaRpjgo-e^XRdklqP~4ZW
-z0$lV;$U7x_fV_=}<jJB}CR9VAox)HflW@Khs=u5`IK>eNUq(Y4Dr6?;t|a)fI-v4O
-z<v}l}sFNZKh#nM)=!@xe>Jes2PM8w*V8;8gyHVAdd=HtY#D9}QS4m3emX1f~bjto!
-z?yK%=_f_Qq>f~NBrN&Tl5>vii{jrNv`iNDZy{iJVC&y`R%(#H`zwWX+G`$m`#b9=v
-za@|y}o{ruvojlj9(I_L%i1ZO?utH49>@9B6B-gM())uT`;au@>rDFBV!fRL`N=ehX
-zy1Ba3BDicW!I&dPF2s2cZkI743n5%Gq)+@BD{B7zm-cb)q>P>2g!%8?KM@}J^F5yt
-zz~IEF^u!xRRZeS~VdJM8y|mq$4IS%do&8|XrmT5<!5QC9Jh)UAp3}M5>&a?dLfJF1
-zYQsEPue&iIPDqH)ee1PY8WVSLp8)p)&<El};-R$?^n<{TNwY4T%7X%Zs4KGA2FR|c
-zrrP^!y+4Z>*jXrnKAq6TE0L<{t@WN10?wSJNuOHw+j}`%ux4Mjdu1X-dk1FdPHmJs
-zp^-<`m|T^@J?_Xq5Vq4?UwjvgwklyRC;E73ERoQ2g}_`Fq)YdTxbK8bS@!*{f4h@w
-zvg!NYgkI*dC^{6UkrB7J-1943POtS=j$j=fRa=?Di5>p6VwsX-@^QCI3bvPH!n@XI
-zDLjC!8BKUN@x`S>+*!vRp{)C6Lb}7Aci1ydi+9*FrWbqc<__j|%+K6T?3kaq@?_nz
-z-7!BWa`$_(gk!~VXL&pP4O)%A!`}$KAGgEb*x^6Br_=v8{SChODXWF<j&kmg!LJxY
-zu07xzL3CK6^J=iG5x;&Mn<@3+vEXze(gTDizjTy)SZsZ`nUi6Jsl_&Sywt&Ct2W)Z
-z#1X6ysB)%hz9U#OEDU5XhdO+zV-R(ul`&p~3X0<y3c|9BL(yQ9G3fSg*bTBSY{rng
-z)OKK@I(@s}{YQwdZZ@y$x&~-UYbV}|v8vg`CNh*GIbBn@<!kM8Wn|Zxb!97amraZM
-z;agj#6>JcF)T0-*?An%cv|C&5{gQw7{_UU2PbALTukElmEV4W7E#r^wu(uua+y9yQ
-z4YS)A9%6g#*C$f#(|9z33lesemcps-^S76T;-fk7;hcCnCq9@H@6U<%<-~i#alid~
-zuYFn$?T?=>O?E?$%po&g0>w*pvWnrXPFA2h(F~KEr*d+^32%mC(Z%A2`(0eY<@(K|
-zh<5186q?rbH7{_~96aKZMc1x#2PdDnapL1zvUeYyhlvm3^Gbf*_52V;jQ0U<%okEU
-z2nxwnJXc7~g^+gCTi2H*XNt>rw5TBm!j4e8)lC@S@@<Wf^3a8>=qB@5@r5qRjK^bz
-zWG-jZ`4VWdGD2p}rOeerSJ$5{b5&4(u6iqi9Ct0<9utKw_4#)GZWn-6&(Gk%mon2h
-z3+P#%^NGx{2$?mPGMA~$gV{2d1d`>-%!fVBB=o_Ld}n|U#DX%u-ICNd5=_tUHko-=
-zT|nkxK6eqBM-j@k4b7#@<3d-L&X##BkStf`ks!w(Vi=D%SOH`vCubWh58F`Ys^_bq
-zVCtD4aih#jFs7ou{<7;tgr)bApR}eQq1@JJE?bipI^0MLkI2*@Qll-sFUY}LY%J?{
-zvjVh+oLp;I9<5R4+L|Bm2{0}Ia$>-!g^!=?A(gw?B@w-;J$W8pHmgdc_8IO6E$4!g
-zZSe{zxGi4(5d^lydFKH9;w6U>Qzs3PG_}u@fFJVHc?$=R=l{P?vPJHdbUYH^J4tfm
-zSf-4(Kq#u1A7*>aDsH0qqT)7$a#gIkRB@-!)s1GWxC5!tDsB#P+@pQD8x9qdlT$Iv
-zqbbT<ReTN_%Pp6w7<$u71y03{ETWGN0~N3Q7RuzR_=-pse~_f9eKrGTR&j&Wg;{wk
-zcu~bAreb~vaMo5_C0sc7#SzL?vF1|6^+Jaa4rEzz0;$m|t`2hiA%<batN<z|C#PbT
-zhl-WCs`z=d0xF&|70awlDyQN~M)aOrpyHjr8KL5<BUSvut)k)zl$cq?6;fAC*W`*W
-z41oJk^oRWDq&zLwCU{#G<MRvhQHL>%91$8r=US<|L`P7}2GHdwUz^%zDcNuU-Og;&
-z-qs2Z8}84a=5DM5Ir_etyc3GA7kIDYNhM$@R&{*kz>inpzLR`<D(m|U!Y*$=N2|q4
-zuhJU3#UO7#dqc-EE!92+PlSt&N|WyijfFiG(C2zaxt<R_ow5u+aW1l1$W4hHDz3gc
-zR9t*>sHP!u4%N6Og=-wir%LBj_2pCb<WqIzQ#I#PHRMwza;bcM>0H0=gD1)C5??wY
-zbXWs_Z8Y!$KM5`J;ynm4c1Vw78rmgZl4p%(hWfUO8>V*8P)1zHiIi7oU4gQoFfPyw
-z+Z2;{Fq5(oD{q_&{lw4dMWtvhf%8{PGHT3KL{(t|X%nzJSn?^Wuw>K0^$dOEUkmFO
-zl%S^=3aey|WTU4>D%o)v$()N<OtL<dcarspNP5NEUB{NY*kQ?drNtHCtrI7iUUiW>
-zE-G1Pu4G@JN2EG)j$ARxMnaOMRkC4$@Mnv{lJOR)lPq+-Wq|3>8Ix49{#?oCWF&L$
-zS~1C{Lz0cFWK$~HsK&+sVabL=l8ppme}L(bj7ch)ln?jjMfAv2XU-`*2XiS3m9wgC
-z@~(@_vcA6dlF}FGHs4i3SBw1JM-<ef-Yj1Oi?tj|XGyCUPF{+Bb7FIKtY!WrJ`$su
-zjJ|X7-Kb7!^&15z%qhJ#-I=@-#c_>o@2ez)OIGER2QP5xPxa3+im}P3CcX?)j9!AT
-zEHa)s|G5s;U5C9mXxIP6nGfr^4-&Zo{Xy7Wl}<59^-O<1JZjL4*u>wlESRo$hg9^=
-z=sE<tuIW@oWB-@ZeW7Z(7i^*BHuB^r;x@~BJgQ>Jv(ED5q&K8u$;_x&Y4xpIQ}LI;
-zT2;(YM#YjYDwYsc{2oaE+Ev^fQnBt5<y8bY6!p>^c}*&;;!eonRNNJW;V2>uO)*JT
-zEagL{EGq7S22I5!rs8>7D$Y3Tsio<J>bHZeJ#2q)?v&Wvo{qH~1pAa!r`ftLQR}~n
-z<w_3K`i{vHAd(Wol`x%t9PCu53}tjG>7r8!QKyrTF-oU9O>QW#2Ca4Xv}*d`oAg6u
-zJYHDZ8`fYGYIPcH4#IfF5n+hSB++1dPp*Ydo=3N9>5YZlE-&nIJqW#GvqGOLvCX+$
-zd!Q^_uE)NT=W><qg^Q4zwsJMoSFH8>o$?KiocmV)$oI0O;aUEeyx&!U$qn<>AXVVW
-zCriAct%wx9-N$D@^oz0k66_<|Yh9QYn_#_~BZnUrY_L>Z?~c>Fw*~KWA;|r_(Q$fU
-z5OgxJZ<ANCEt7M!1-V2qC^stmD11t`s5u^5FPDR?qcr^hTy|1dK2@_Oh5fjud@8yC
-zIqVzqldAK1RpnDv<|kF;C&lu4(P7CEVk$prJU?kzlQM1e?UOZP4ZfIxd|j<|3?nJy
-z2tFe7MzSBp`EnEhla@%KkMVktqQlG>>emOc?@9>m2<JG4<RfXxMhWt5e4G!4K0_Ef
-zTfsRRh~zsF6QF5AB=ZTU;I*twy>eB9!&&x-?!$nt3QkKZU#JQ>h3sMxDcmU``3RVh
-zV$zXJe}J`ME)Y9(&kU2JjwN2!>P1*@b>586ki$o2W&$rN6YzqX#0IK0aady`08^QL
-zBePq{Q%V=y@H8e&b@U=Co(qx_9!Uc9n<8u`YNxWe*VXJsf_I-%G-w(HmUGo)9HEI{
-zz##k-=YYV$j_h%<VeRn>5Sut^LU?J3pEB{g^{YDUaruCX_Bg*lgPyS-A45zFhq?o&
-zV@M8qd<qftIL8PI20fmsS2}H4`SN*jjBN_4C<){XRUtiIPC6-ECZWt*Yg}f8$pCA~
-z>+v#(B2uHrD?y+=en+YFI5W}X{C*5nuU_83Fk|*c9X^oZ%A<=0rJimjPbpo{<Hm%k
-zuE#}G`_7RsP1XKnGr^9^Lba-J(PPl#)HRHR0*88h44>b(9(Nm;$R3v&P<y;TBaZ9w
-zM&aEpzz;ztn<RlBLQJ+v(Dit8P&m{bFkK`EJ>G!`dYm(CxW_Z~>M&KltfEVUW>h_h
-z<r$UqcpvGcaIb{qcD?qbf2(9-)?!ZX7*Dt!Lyr%FKzsbB`$&&76P;Vnf_kuo)wDq>
-z&@HTf65I8l^|+F!lrHFTW5QHNFQUTL6ZX<n?eQK-7^1RJttwoV?Z$Ys78xY)d|b!)
-zpZ5-W9NQdmxFdVK7tNvvg{H;9!NhSrKJ|B2+btkHJ}n8-<0VqB>+x7nIIG7=6!dr*
-zBIxm+oF32AE1g!ZeA(j_8nhm-L`>xiRUtiIO*$!DB_TNy7E+9H$;7ACn3LP%9ibji
-zfIxfv5uBJ|lra-(8IvZ<X)StuoH4wND0x|5#;_h&@|4mAJ#I{x>Uvy6#oR%;@ZKvx
-zdz{Tg?Nk<eTos<A9)mF+ldL2K4)yrUdj>u3HrkOrJ_gaP$44^axE}A2)^-a>k9SIf
-z^mva1U5|GKg+twePv9Xr=<!}e(Bq@jR%lkw)GM9Vr+nGt{Tj3$A4Dv=$A?KLh0_v}
-zSIJ$EOD0|dWKM36ry+{cc{h!MKzsbJdq|Hnlby?gI6;uuK$}#ck4NA?yYiV?UCC2Q
-z7xcI>VXEtK5fwXTVJ}V99v_s1Au0>ic4~GH!Hw}QO&irTH^%pb)HbWT1B^$o$G}FX
-zpVR*~d3y}598&Z}vXt)eb?et8%=9zk`ZN-|>k4}3a)2S(#z{YZ6xv-&W@dM-wEDQq
-zc7hjyyY2)TlAYi@9$-ki>;xr*ogjqklhrEO0LqD)lIVTmt`mRGc%{&QoYv~ZHU3hd
-zV`s)=NW#P=AZ8qAYt=bPNYI&aJ!0BHS!PV4z>KRAff;ib6E@>ay<&+K%9mzbsX>@=
-za*C3O<6DKqyqY+F@!D}YOW;ejsKU%eOJaf$Ufsf7_{5_4V96H_ys9>hD!12{86Szl
-zu9QLMsv7(XDKS(c!0$zrNeDk*pr2Rw2B!0^U8wP1l8^@0uBpPnRjYDqwJM!jJJo=}
-zL!CmZxIi)??9^*b)=Ok7Pc<^e5r>UTl*<9Ec&_dk={I4Eujx>8$4OC2Kgz1MJ}RBy
-zepf(FlQzqP0=0F?4s5-e-Av=w!#c^#*t*i{fuGs>ufbhyouQ1aOS;&)gz|0u98A<v
-zXCS$@&K<W+*^Q{dH0*4>fsMmQcL-wZgOVUqc3OhY)`t<(!dbRXqQKVs5usZ~C4{Ez
-zOub^RJ<6B1-m5{{dJ}_UqkRbF)#PlwOUUF!JZp-U#7q3bt6R7WpSCDIzSil{)|){P
-zvUNsbRmvc2>tqD-4guPFr-W$ha$Mnszu@Eib)oiCN*dU@rV0ZSe@NxlYE?S5b*cfj
-z-Y+mPD3DA`&1UPv5{a_)qv5IB>|SCX+(4GCN1f-@3%lI&JV|x-UDp{p&y$?Yd7cvD
-z5Y{aF46swnW+-FXk}j4lp?u5!I3$g>?2u1_6TCq)>(LjTy#yx;BS_-@k|1VX#kT1b
-zUM)dq)^Wu0j14bFA~`VYN<{GeN#3UkHkX-7#iq-YDQ&u3gS6=}sh<ZI6-dmh#@TcU
-zOL#TzqOTUi(=K7uEv&_$r-FuN4MC|;40;>{A%kWV2CWRj22DmV-f00EbW9|GL1(@2
-z?@U?f@Ni3r0#nvhDe6pFCDsakQG}W@TMtvF9wCqRg{as$Dap7BkUwqfBkdQjE_Ak<
-z_elF~u%5j0)tgZs=c`wcP4pve+4-Q$8nAxI(!oIHGb6mSpZhQ8ed~Ye`>MPK^RIj#
-zb_f60_P#LgXY%F;h7MN%Z>W|_Uj9u@-dErRtOF#~K9Up9y=mEzogZ}{LDusuuI`FL
-zs3LjeAcq$p{A4A;fkKimvg1l8UNxA?dYljcNtZWy=ETWXn;{ckB^#`7UsP!j6CP(e
-zdO%7Snxtf>T@mC2Z=5p;^RzOPea80sO4KWEl(%)_F7er@+~Bm44}de0H6SZTvJ&Ab
-z?}eDtZIYEEBU-XpkP}G8BuJ*r?2~<zj7$=ctTH2+I~B{8tPzAcl8tjys5+a{ph=c-
-zm2-8*4Y$f1NX8^crp)X!7nF=lDB0EW&|GxpPH(a$Ys!~QwyP@HNS0*WeMjpo*bHN0
-zkBhSGBP-$WwrX#Z2_<_L^7tu{%$+i1OV*q(S)Yo-g_YZ9sLymZSWvRwASaNFNzj=x
-z6Gkc-nNYG1W+ZdF;YG4z)X%eRtKkDum>r%Prf_drHwHaY7%matSK8d(srvy*bsuTg
-zhtHY)fMjO&14^qe>X_Gb9hj=u#8BobsHBV6Bq2Tp{Td7}+E3aP9wRj!IcC^KxwW%9
-zG-xXAL@c_qn}eJ{rA&fKm6?1vNL5NEP$^gPiJip_l@8w>BJs)nyR+1qHnrj|4<5?e
-z*@7^@?PYj)P;0+FR&J8&>}z?rHcln#V`a(7xS>i|)9c*Oi%?J%%1}n3lCFmdq@Y62
-zD(HA-E3_|1p$U;qW}JErnnD{8i&khn$O#n6Bq&sw$yGyDD495geh2!p5maIdJt0e>
-z<EGGYD0I{mS}hE4>lD9U1ci>OLM7GNDZfJ*C{%JX3ROZp;x`L@7ucyn8OkVB(nX;X
-zqC$6tG_$c#`L4VwN)I$Bv07+_22G)rh(#;3EXWBI$|NYXTtFV(s6xra6sq3k7p|PO
-zceyIcyF3l$;a$!pn<(!R{-j=)1Ofh{zNZTREAF*Fo9jaO?ayXjwrJhgR8%uQv5AII
-z_pGgo;hc*sM^~kAPMziKB9;@*d57ibtQ^jHqvhzV*m_)4Z|*c15{x1ywxuzVL&p%5
-zA9JUmI{s(D;A=Syt}_NDz~hHo-ySW&UV&;RSBI+Cn;CapQK)~jZf1NYs&Ch$Ec!M<
-z7TJ9(7h%V7w>7RmKvnenGCTU0-AaS_7xeG%I%d_s>8SqwG|HlXo5<oH>EBIHcVS#%
-zKhTBQ#T&YwbIi>9f!F$`R_^|wjSf@xW<Y$X?4;^^D*Eg>1?hz6B+-A)NuooXlSEfJ
-zCuthZ&q<ofPa4lp8p}@_%}*N1Pa4ioO6MmH<|p;%C-vng_2wq&M?-z-=-kcI>6kR(
-zkkb;(ZOu3gS`Nw8%=Nnk<cO+C66EByS%UO*?bCzYShXQhXSvWO!TmTEjx%2bO(P3>
-z_Bu|y4CNC@;TK2ccYp4LV73?4ALD`mQY}_pZ1$w^&w0`*A^oVnZ0Z`25K%XoC*<U*
-z9wAmEKUC|uhQBWDeyG-cwoqGZKka2VPS`@op|$gAbSDxfMsaJxPjNs6d%$c34<jo=
-z!Q*@|gng1cAL5OJa$zqDu8^Q8cuMlA;7TM$G*W2UNGiCD1?`tha2g1%(<m<rW<^;F
-z7FzQ^M8R4W6<j53<mD>eHJ3!!P3EfL7zjkc44_%sn5^$glLvZ0tF;UK`b}i_D3C3L
-zg0=QQ!I#Pf4^gn&%4REg48<Z8+(Y5;IZ%<23LcgOQSgWaMZvw2PX&)66ro_DbqY=k
-zwf%aAD7X(PqF`2(rC_1O?}SJZTCi3{1&>KuYJ?3I3m!y5MBQYr3hqZp6wCmcrHzpb
-zSz6AQZ#hH3TCH6Y*B^y+3T6u-ht?h__zk!PViv5vS7|a^!PC(SPN*aTGDWmWf+)B{
-zf}-Gh2Bndm2t_nfXq|$ag<2odsRcJ6MHI}6vJ@<|*yBkNDp;$cg1aP5zfCE1Hz6US
-zZZcN|HzFhoW&jG-#te{=Q!sfz!CGzjr_$UxvHq^4{T#GhSm}i7CI+x_n}XfJLbifs
-zAqx($f;o6vE<?z##pz>$N)bR5TqQwKaEw7|WHmw&jTBm^;0mF(uOEp8mmozH%=)qv
-zEVMZPk|I>FRz(HJB~5StOWoy2h^U*)Rl#KliGmq`g0(U76VFb;<N*b1wF63^Kf32E
-zm@R}HT6<u@XUhE$nIhcz$XS>xc(I%#Y@0lf<Klv%4Uhs)P!j~*(ND=`6TM|`7uYw;
-z%h7sbBH6~tex-!FPkn+anT#Gkxe(PUt)9Z!e)KQkj{RuqRY``hA3b>Ddys?|1|;i`
-zeB(hvzsH4vZSo;p6Saae;xP^7bMNg*L@y);@9mxX5xRC`*>9gdE$(FQ+o$g#Df~%*
-z_>)E7J{=Xs=rZ@$l0tjsY*Q9zF5i?p$;$5*khx+|62z3#5)@PJk{US~4<i&|PD1NU
-zxnHQ|%@l0Mx!Uz0MNF9$Wtp<j;#b(E2u)e5qA8C^n*NZKm~tNyBI+h{HRWD}#FQC8
-zv$Qec-&;(P2TWP39Z-U#N^kB2TL?L{_P~@q>_lM&JhC(^U=U5~Ai1*wiRjJ5zzP<%
-zL|DNKkyda#NmKh=0GQbd+E}qUJCky(ECWq<%%#Z_!UL_QSB0+WO{A9M)KOk1Y8D1~
-z*Me^~Y;Nz;VI`@-uxex@Gs8+UGs8-0^?L+1tk#364l9PThLvQ=u#%7tE1oKwLK#GZ
-z8Yz}js6_C1ja=PJ-GAE<q0m<&6*^AR)IR%doQ*<RiBst3u^>bp8SFZ78l<I}ii;3F
-zBn_5_67s<_0AWW5r&<zZOvNQAW2#K@Ii?Z_McB2_x-nHH)bc8ljj3{^$e3b9Sz}6Q
-zu}6?198+2q$5g$f*{u}uUXc({H<|00sz6A_6a#3MHfDf~v>aaZl$;^0c0dV|D!q*<
-zwh(e??ZKEjj$7Ytq4%(G#hQe!^CbdTna@^T=Re;Z(fND8*7M)!pCoB&pZz~Po6ct?
-zuJdmIJM#-luq5#O`OR6QDeAa%N*LrGmrAM|P52xL$Bv#qOAe#@LY@-hH6yn?vC+Cb
-zAtdAIn{IhxmM%{W$vCR%w*lUdMvNgjP@+VzFp<<L@!RVolvoz2#IKSxwa?E1GfzpZ
-z#3``>12TF9)ntvJ;fO6lC;4Di5_TLxgOZ@Dk_2^Cl6+Z}5Q?zkv=G=HtY0GSX}2UH
-zs!I|AS;I#Nv3Ll*EJ+fQB}qbcgX-4xAr?_<j}Y;uP%lEd9x=&S>Mc<>cF2S4k-&hq
-zGpTaB^+>XkBZQ3a`Xari?5|;Tkiv}}iC`r{TF~vcuZ`&TgCo2BTO>{GGYXiw+gXWq
-zyPk}1VzJqMO5kv*KIgr*1t^cxwLM+!`JWQ7&sN}T0!6<MfamRHw6_17&)ZwyiaFKX
-zka}2JXe8MUGre^)aVREQd;Wt_$@B0~NjlyIOa1}fV<i#FDM{y`V9A>^C3W{2u9HiB
-z!IJAUCGE*VNZRINC6CLLbo-4bI8N+&RrK>%dd7GkHRpM(q`K!^xzA%IGc$K9ZPxSH
-zcY&!r?LsK@w2SHbw2L7=?Yg4CM7h)CQ9<`+`59S#i%Mb>CxM0al5_ta$!d4h1Jg<f
-zfOccS2tP2DRM+mT2d0w4M(caHN>~#-FntT#Bd?D$lxeY~ON%AM7I$GtMlB6lEe<^`
-zwMTRIi>lIMdSN+FG#|=panurBt}V`aqA96Ci^ESeB`4EjCCoh0JTPc6Lzxy!y0lnA
-zZ1EQ%+l(y^J<iN;u|ATjY$`OdW<8SPCOhvk+d~)0q&fhQDLpf(+RMV6DRbsiJbx;~
-z^@Xy8x652x>9&^TzwgUOB(-`_ho3u?Ge&pjX$PrtAm$CtrPnO{^jBH7>Cc4c{D?Ex
-zH7Jbh+puBUFzY>Gdq0>H3Ac+lg1{TTJarUNYw-h)dTuc$FfcA4XR)=okpnuvn*uHN
-z?yB{=rzBUN#!qW7ZY@riCN_^vCFX6#aO5%SV(&4~^Vqc3TRM)<&*J_gY^oKGN*#Xq
-zqXxeeNe`i>U(3rGt{k%RyLJ5i;}ky7n)MsVN|<#9D@nd8443;+8D6N?6IgymXK7Dx
-z=ZcR?c|DROxGV`UcKSsecW#@i79M(Budk?>eDcu}7j7a|YA6w~(ev5NWDREw>T%@h
-zAdC-pvnZS#BtgH-;qU$UdcK>ICkYAty&o;D-(hiK)`%Z8YQj*Gq=`LcGG_+`2l%sX
-zYBPDk`4N`#R;`n_2T3m6E7|hY!X@=X=x|eegXU%bW}h{c*=TBC&{UR3Bc%T9rZP!u
-zN$GQva8nPH`CFQbM$3j{woUD0BkYn>cCU^EHNyMXrVfUZdLU}Jshx;BHFO2xpjVlV
-zrZPu+mF3Y?sXx1^Oma<Sjaj{VtW4a}RClQTt63Uwl}z7y$uGO94bEtw2|2L{|7azS
-zXdr61sm+MHrnUv)psCD8Q<<YpWqCA0>d$T}lU!595exO|WG!A~A7Rm`!D*vqU`hz|
-zaS(oU#$ADschm7sXcMw0&V<e!uathWIi<e}48IlxDgo9Et*k=yG>}lvvQF!}@kW<o
-zj{Y!FJwmnoh4ZX;)}X6<6RFJ4)<TX37Li{SGRI<?9gA<#XeBZ08pb^RMOFK?+?1SX
-zI|-Fs-cxr;qrzdfZ>DSWUD-+sq1tsxC7P6@Rva&*8u@|bMv*Z|#bR!fm@hB?XW!ah
-zRq*@PN1L*=Mrdkwzfk1(RbaKiXXbXt0x`wiTIuy$p5HPDvFX-5u{2KOW=I8pio6v>
-zpz!WWY<a07@xpHtJ&8H@@`ta|ck&|@wZSjB<D+#T;^FOn<T81C_V?9T-&DeXUpX^*
-zJIasO9~F!36hqxoBc#w8+ow&5b*PrVMu7*jO9A^S0q-A)KfveKvJOLx?TI7bSCaTX
-zLj2o~pHbzn>=ynt$eiDURDPlFzqL=_UI|7fi2D`E(!&-N_+A`D@y|lj&Mr^*r=Y3t
-ztKjPz+f|1A@5iYwPN5FGnwJAL>_%0ef45)vvgq88c|XFZW;Z=XMJK%b6Pve`B{n~^
-zJ#qN`i8;gKB4y<HSKqHME7pGpz)qk6cJL|Fd}%_Otc|EvB}z)^VTHf{@(<cGRLxyl
-zjJ8Y@YyIEHuekrZ1cwBpoMAnADg_62O6Rt50sDU1Ko4Tx(91HtkfE-rIiBk*9alKE
-zeWJ5%HN8Z2WaYvw9NA9PVV|^-E`%f7CDqDjW-#B0<Dx%;iFJz7`rQ;v9oasi6-TyT
-zgK<bZjG!4r*q>#x`m-6|AnTq;h9F&(L!I}_TJMGt(7-7ki>PTdsA)`zM&+l>+lS#f
-zr{Ou{7ZPgv;W_ugh<dfWc#ot;b{BnKc+OqXp7S`V`~m7h%KF+<I8c_ANiXE{YhL(%
-zbl^EZ4ArAh2}%4RQfj?;XGxOmyJYr*c){zxCY-pJ7QWl1bvOaQP$YNX>Xmyqwf+qx
-zpvwqAcVPueBLwH73^mrObAd^*BH<k}x7IsvZb_|o=3INN7Sl95a}t`E_BCL4fu20U
-zke!YnE1ft*{Ab!l;6Kl{!4+)2zMviUo0`BYx53RpT5f|$jRun-s==&dRt+ZMtQ!1Q
-z@uH={&WoOHgT=MOgBny7Zg4};I4|ho#vm=X!K6lmNf6aw)-kIFlW<lI{&(@ErNPdZ
-z{@pB1x*2t#hud-*oCq41X>fgzmfK)bqroJIYB1}VRf9=5n+A(V-HF;F2d#}a+mYBX
-z2zk`i6w|vY4w&FB1mEcx6khgzhy8-H6oj{}^|&`Tqx|DWCpNfNfs^{j&u9<y32XZ)
-zY2gXqtAv9J8S+ek#WCBL3!#1eUVphZ^8Mg0p|cBIsS3vIKnzojF=1+sB2|t|tufZB
-zbDpCdQwee?<+_)6%v2l%r{XZZNDRkijHOnNpS$opeqhdioaq1B?|Z^Eh{IHH^r8bs
-zy2)$55exV<`Z-qM=Za=JxC++)tZnQTY@PIs5sNooSknFpt;WIYaM?Q$mebSNV&$sX
-z@p<)e#^a`-aDDN}a)}ws)kl_Vn6Vs(MP?4hr^cj&{6dj_wt{n(h|J|&-s`G~_!%Ys
-zsso-3)^+7-(XY8tb9#_F%}tnnj!p^bbMPaNbt7;UM&WRbL^vFN`;CDU@f98KY*_dy
-zA{~|19vp{>xWX0AhyJnvoE*GvooS?cDK;Ega6m?>xCc~+<>;?(<Esm*5xOm|3@RE>
-zz0`EbyVK^n$Qy_g^XUoH-59t5CNleQ79vl}@UQF75qS#9u6l~hI5(pD`&Le5u>!oE
-zq#~1*E0Zs>R-__-lxsOeb_=<QTs=FH$5rIP9FaNEx#}shOnf3TjogXMF#3&EfrhMH
-znS7D8A{BWXS7V6mmSPjRa&{t*s>taakw-$+Q)I?f%N);6WEtD;eb@oADlD>Aq$2Nc
-zB69=BTMoTy%jL5Zd00gr&Jj5ss-7Y<t|C{2L}nOTW>ugetHL5{MIy33Uq1YdLXSc6
-z-s^u17L@lW<o?sK{HON$Iw0p!2#-4C7aqze7+=3C{(O1!)6Lkw40`QbF;z_C-39i(
-zwnRTWUlNLsXTRIfKGSFCb6@+;e(l3=9rW9`X1_$xibsZcn#V8ehNpVJ9ck`au=Kfn
-z8J3T8U4fB;1)fF={JO0+6oUeo8$&1S;TrC+0y+?a0%HXWTxA8+3|o(|HsEE%=o<7{
-z*dcX=j3Db-*o#pHFj6Z9a5Ess0MPlHw>G2O<-AUMGV6I4Jc3H`2=s?-vVO$g8#<9z
-z^N;`D06Q8V%nS@EonttCIq|OSxZD!UNos^-SxNZ*n~c37PEZ(voJ0H+8{oO~Kl#D*
-zQPF{~O@kLmYELJ0ni)3nwiLFmfJd!7^`qDNOx1nZ$4k{qQM>3H>RJ7;mJS+xdrGLb
-zV5ckep-)av%#jTqMYN@?aFuPsCDo)=HWR|e<jG{>sw@*KRw?x1DzD~f5v@4;Zz#~p
-zwK$=`&q;awoOo8_O2FOK#4x>>6n|bZ^!o#E$y8&breHNVAE|?XQq!ALO)OLm!&(iN
-ztWY&+4m53zjkTqPT9ZaK{itRzry4HOt~Cs6HT~ggba=Kep4IR?5be#IpBJDk@Bfem
-z?&ybpN`!N>d^RbekH}S&O<Or8xev)XUzY69_{HeuRfz2SK<3NCDW5`JeCn)R|2b!S
-zVAo@8y9_%GI}~LXF2O9rp<CZe4eJ}teHx5oC)OYIL1=TJ2S0i-Z7_;}y9e^r^%zI%
-zd9}$ptF?)rA<ng&bE-nJYEwS~F19@G$s=&JjZ<uT*?F~1X@jQGATcDZEn~)6wW&q3
-zw#;w}5xClPB;(mdUTx}V$f;-rM~Bu{84Q{bGhcouO*L5+Mc`_ymSI+tv#^CekD>~%
-z*ZSDd1`V<k8>2Y8-*#g|o1zF<b+VaUyqZxDn-i~fIM|AO2Sx<{TPv~OkFy`X6QMxN
-z9a9-tbVB(&g&3f4;Y~o+e#=)T+`ZU^J3WckUq_Hr3`z+<PTMGNv8pM!U)+-lOeo!%
-zbcsdCZ+A_s#^RiHF|9QDEp3E$lKF>2qG|o`3>pEiQX0|b8d09xh$@jveuvIEnbHWB
-zfNDDg>N=$bO6xpPX1Nwvt>lgtP$F%C7S|ShP1Yp&Rt4H3UbMA9jk;UST#jv_?l^gQ
-zt-aQQCf5Q|WpxA19Q0)Z%0ybg5@<oQKwXctKxwTexqRSSpv84>rk{Gz7HDy8!4tCf
-zWPSL>S}?*&@JgG&(71qW0cL#Zg9fCEA(1Mp1!GFD#gvJ(fF;m^Mgi=EVTJCfTx%L&
-zmTQ64syXt>Rc(P5*A^U^X@T3x+@e<0Co<?G9K3-iG1r2$wIG31X+bXnSuGe;dM#$p
-zfjAUc0xhT)s2h|PD6Q2L{t+-&E4iaACDImXacP0>YEFA^p%pW4SM%PeRrBu)Wz~ED
-zkh5wAyP6&mS$=~n@_P~smtuu1he^Z5YoO_QGJd_G6^zWVKq6nRZOw3N3uJxh9j>#z
-zhS>{b-rQX+s*|}puE7FlW708s#YNG&tTkA1&c6t%k!4N&OxCHtDT=^N{mnuawXC%<
-zM{DcQU;$w}nVTnUSEjghmabF1NR1Gd$to<(Dv!Vk+b?8MtKuMYRM@lz3kW;R+&p1N
-zGQ~%&I5azkV4f^^yOk939@lsjffII0$Z{4{OdMWnnmH<LjOGZ{<W(c<qs)hS!s=Wo
-zR-`k!yhFfQJ&%j+jYQbWC;}&}tQ}a1^Hrm3huUmWVH3;^3#)4~=3NdzUq_y_ze)Mf
-zk7zcQ2(}>@(EuikwhR0?F3(46Mm+cUb?IQ>Md&?R-RS8t81@JvrAdYbxYqj%PJJ+O
-zYct&etZ%<vYYVUNkjc*dn!NrR5xzbE>A*nc_L*xBK-}jh!#5s{N<K~pwN#23q^iVD
-zg3n57YWT(W_D;vu)mJic4(3fi#mOu<44vdugo~Zjm)}hrLvu?croM~U+7mQaO;El#
-z=cF=H%OM+Sad=w|zG{5(2szVkM<bbD(DZU?nf#EUtAwTiE|TNV;^9w~%AZwh$;7$h
-zZAt5$uVSs&!QVZot(U<bbarphdS*ja9HCAyBefi|(bkU(sW~3qI#0+>BGh`Lk<3i%
-zOIQ*=>>H}YS}!^H473mg9j~baVfrbpd_=%%Etxo9JT+;(?y*ag*7^=1ly8!u?>n`0
-zJyqzn_64nPQ+E9T*Lowh9J0~Y_bCgKqSv|vWT6kW-e@E<)B0(-oz@*g5m$+|UUKxO
-z0^M02#-FARgz2?bamCSDJ>UePCYFhhB&~No5-R{jT&1iAaG*=fSw1dgxPdO|^5G39
-zn31xevC-ByDT`(S{bf~bN)QXR-e~GclWG09ww{;wTqV|e$-#TvLJ;)5rpg^kN3XSt
-z0|ueA))MuvCaY)dUtJL8Uwr}PaVpV5Hrb~V=3k{&PV0|tb<nQ~?#unJzaK?|_}_eg
-z>z^l|SV{Oi=rw*n?T1iQ^!L+lv>csS!{0*F)9q*Nxln89lVcmnN=IWjS$-Do-R~@9
-ztXZeqEm4O0%yD9<KLO+zYWU-0k>8Ws^mIKY3U1G2`m;?yYp2(KJ^b})8p_POfHcWK
-zK4{o)*k{-)81{L@zZsJWLtLhD4Hoe4rkI;od^%HH7xRDEJ=8fRv^@~-vVxk)tG$w`
-z>YVE0Td4Nx$l~!#adou{73Z>)d2;NVQ#8Qt!jEM0Ih$urmMF4W`SQT24Z*w?;hH-s
-zyvJ~m-;tk7FOgX|+g>^y^<01_T=Kil_!K1X^QGWW=D*tFw_oob5_~w}<5fFx`OJ$o
-zadE1H_hYa`WLl?pELAFX5=Ys`xeuAe(UavGKf*2TmFExmYU9LGuKD=wZ~z~66|X$^
-zq5KFc3s=s#R?a?jIrK86Pu=rZ_dVi?Q7*Zt+@^%$mFGTQAI_<qajl&87p|P~To1Ey
-z;#{j-U7Z<Pp8KFYol`mES~<PlaOLX#irb9kHilfPo!9Qza+}-M747rfN8W=ul{2oD
-zbKHk3mw5ocxIzN_wi^JI>sr6Ps?hYAcb0NZ)D-$Hl*d}%Nj8ydy=_?hb{s~!?N|v;
-zg6xs;qJrP+EQ@{*a4#7k*pp39mhkr{fpE?;7vS~&wzNL9el1)ozqdICedDO60SZWX
-zdQGIjLkzw^uoYADFiP09<NnflHNEZ<Os)4v)o`I5r{?C&iQJv*JW`{N3-QhQ4qk@?
-zc9tejhAqOiB!w~O`+73ZdHfjx8M|J4KiuuXpmsaQ=Cy>I**ssH=S%aH%C~O=;S~(~
-zecORbQGxzwGLKpLx}97euIaHdZqrpIl$gEb`B-ggt=$v~_OO)7m667|F1Oul3A(34
-zFUSci+3ilg7lP_sBn_OA!S|sX^qqYF9Fw%oU)AJj@1&+yPU#&x%$k^vhsu#Bzfc;Q
-z2qY1GIPB^pk%i^pI-;7%>u_6dhUaBwU(FB_GV1KB;|)Jc#$i{$%#c2kv9PrB1)TNu
-zFb|1cLNl+X1J~V~MTvMd#?xO0MYoM;3-tLg)-{>w#4u&#<HZa+6v8`~=xMxrX~v5S
-zk)ptXOo^Bz$eO5gR-pwpE^^SK%Oq4|CTZVr$8XzfGVBW9o(}r~T>T54NwG&m@-Zq;
-zhlbJVVzmB39_&;x-H%t_PP6bH+-@qcC5DTwnh0J`v4`+#zgT$ncR+9#mFA~|@1_O>
-zOOv0(@`v%q_LxRF{&Z63_zSHy?zCE$o6Jv~!5C%v(`gp3`IIIf&`~W~vLE}B!%9B8
-z>J4V<oS8z-zcIV%V1rP70i{Qw`e{@$Dd@D1qam-=uJ=jn#RggZZ)igJK}r_T2MA{G
-zHYsd_s+7lrSRIwGJ`D5ps+`x|NM++Ega~dLkY6D(PAZK*KsGLk@}gSpGF$2~6WEhl
-z_n1em%`V~TcRcLVdEwu;(jQ3p5%kq1&DN(GTeM*!J3b8ZudLh63Zd#JYoIqBA$kiD
-zZzV%Ny0f3s#!qKtk|sp30TW^Br+Qc>G>3@-&|}I=A6DWOO;E|C)|ufQdNbGkGGco$
-zi?e|Bi9DK&kYVCd$i1rQ_mypai*tae)#CLZk=XT#oQYwK^s^cEiPRY;JxpxFoY;VA
-zqQ2eJk7ysGZW8Qd1c@C)On|gT07q|TqR>~8^cV;40dZVGcV>hl6JEGRqQ3f*mTZ~i
-zhBX+6eUBihstOH8eBexq@m2QGC<58*jFC&|=bAYw*W%hwEq=dUS?Wz1Ohz)}%H%vQ
-zg*Z7+NvH-3`%=8#6HLxJWdt{UUc<@0&b^$R#Y96texy823jLLK6OdO@wH!s#fs36n
-zbe}SF;{APS-R4YA&85j#;I(6VVl{XffZ3sa2?c0m+jPU%q(SJKb6+!JdFpl#4BAv9
-zy46Cx9f(`Kod}jDM^G;Wrs7dO$x%J2ge8)gW6O?BS`dt{>$X8gCBo~vAR^n+<e!9}
-zy&`1KS><Ig$X){Ds0Sq<VCrx^LAaD&pFWn~v)FawP+d7FhG~<NbTvhgNje^6;86fm
-z@q}A4<r%3KftMyZ$zB4c?tuG{t{~)&f?Wdg#sr$&fS8rfdhIRv7D746?R9V6@|uKP
-zBS$6kXBf9765=XXCLz0pCI=f*04fz~_r={YFs%UTU<FJ>S!NBJN@4S4!aJob;o;R&
-zTYop>lX@X%AnTQowHYl!HfkKrO$*o;Ywbw?zF@s~uZN4!_`(`G339~+>^8Oet+z5!
-z<qW^|?hmzTJ&gj%CV))hdUXIVyOS4w>{YX4!r4};aV<FoP{#TV3GsFHfLgwTF?k6;
-z#ex=*H&|&+Qtv-dQv;Z}$vjjUstKQfhZYq5XfOI)&W4kEL_EZ!VG~}$n8nPE@WXjR
-z9#P%or_mrP0JE*C!+u;yzGfjS)kvm>)G+JDlqw>m#soy5iStCw_ISyyeX4uwiSABT
-z<H>h37W@K%v=lGc7xq12`M?IIn{Z`+0VlqR15s$g?69q+d*!?jjy)M{yk=aNr70)|
-z|5~R-S+zd%c%%bAoNp83RrH+SE2~F&IIVSQPU^-3J4h5$K1fEGFQv=vq*3dH)<L{X
-zo?h&w6ZVoL-mGv{;+s2L>v?xCZ$GkdY5ih<Y1v}Gu3Y(S-ddtZ>_zv(Q=C}5R6lfp
-z^}J8?t81rc7g6k1y1t+F8rO5I*>bX}jqgQN_A|Dw%M8lp#g_EUx+fCYi*i`YDIKh9
-zP{5`Gkxtk05lNS|d{l#RQ$gnaU2jZj$4G!Kh0dY-)=~7q2>Jlaw0?|63(jV#?nO~N
-z^7<z%)jDN`mTKp^$<<pv%#<mICyY2=3{9P~s21EuaU~DQ$EX-Ac27~;rXb($^l{t7
-z#XJ#gn{-yde9d*=mf|>qrO7ihE`TYJi=U2GE+}2lx@P#A8hin?CzGT8uf68WeM^ll
-z1~&cnO4kkz1F+~(1gnZ?8rrS*LsufQ_X4VKVgZleB5anBocv-MXkw$>QA(<TF*}FV
-zi`2pvt!zUnYh?$5rOEHBJgf^6FxxuARAk;o!ifeRjmD!i`3wp}P%-5b<kU5@x<7?6
-z;QSRo#X$)EEGnNwmSwQe8Y}!ftg)wKjXkBv8ru*^vPLBtC4YNO#$7A3i&{3JiUR$t
-zTXNPH(^A$BF|ns}H{Pa@Zv89|6lEQZlURQzVd6Hl6k5oyJMVd@Gndy;BQ@q0s8FS{
-zPm4)6hgTJ?aa>v=>z5OprWL^kVhdAq(!$GXr7*Ey0?^k!^%n?SBdSCN^0GlVDX6i4
-z;GfD{SvlOG%Q6&@m9-oJ<DyUd^=n<Qa*;{>vx#%G@y(P1uL%m+k3fifBCJX>tRg&~
-zLfT5jlp9Ou)cOY`*%DjNpj%>fJ>skT|Iqrn>FEv*8*k+x=5L)Ey(zp&h+qxo<`;1W
-z*oB-Pw|M6)U08@Y@lSyor%8I4W}0m80UNNuCuVtYh08xctQ7blD((;)QEMMo>He%$
-zTK9Qy3<eXMwo*8GCCbjX|C{Uc7}#L4l38lUd9_=TcAQt!EOfK(rYcTbw(;3<UJdo&
-znnu|D3-*Ncv&uwQJI<>`O*_u3WiYv;!b({zcbr%6IIqSOvaM!R#z=v$RjF^W<GlKx
-zunBhC&mHI0Iw{MU<&N{}9p}|z4m-}P;lJ%TuikN9z2m%k$9c85>%oO3_YV4w^J*Nj
-z?KrRAabAs;GQrc>9p}{%k0o}TS0{p}%Ky-LwS12}=Y6fY3H`vkJx|k<a$a;API&u>
-zAIrn`;Hq};y|DM!JE4+4YTZ4N658$eH=J`f9;xH}JaJO24F6Bn&Mn_?U}Dn*V^{8x
-zm@lc4cj-i8-j*x(xchF_604B^$6|3q7iaWE9Pe0i78FX)BKjvpp3SNMwZ@$YuH0<V
-zm758j9vqT>C*1pwEx9NgFO$^wS?>RAEF>G{J$b`r%`NLsTivp3`PvolJofDuO8k=5
-zEpOX+>FQN2u~U|}EMHTxa>Iu8_|Z%JEnT;<wYhoyhL)8pDw>vWY^qq*y6(c3)$7+u
-zF7sEmHLtu7*=sJVShc=&-HM8JtJhRq+O&Gj%8J%?mu^_z+`M|-MHS1}Rh-exa^U`v
-z<!f43TKWGj>>T^+9Z#P2=;m#^*L>%YsjF9A_5eA>ci)LW*%kWZYZv&#RgUaG3={b~
-zQ6VqC-tudJhsSox%kQ=Pdv=e-?r+#NFMk9-TFk!>;NS8&JLlzBnP7h@i7sEUzZ8$j
-zc#n|3YKHvy4EgnzUr0ZVmcJNJ#CML($&<hT4Ju!u@@dQe4aUboQTjW$c=>+IA3^<5
-z<vZR~ynL7C-;Mr>D&O_y;^liSzY}jCMV0S3x_J36%ipDd{8Mk!@@FaJ>9_vv#rZc{
-zej)zp1;zPS98;WsmE{-W-*s$p{!^A;$Ub6nc{Ua+#J}-f#rdZ#zYzZs%P+*g>fej=
-z@3Q<t{Ch2*pZbX!A2IoQUo2Lre3|7JD&PE`;{DTM`Gv}lEi7Js%JOf<{DZ$d`|CYb
-z%fCe-FMq`H3$<^|@{islT0f0vD&s=sn=QW*hrLnbuXnYUFEoB)7Z=ZOoFP9wLw?02
-z#rbzwexdetS$=f^{g2?srukQ>{Fvq6tv!?1KmD!6%cm{BQ2DM)i<j@U{P(?H=<@2H
-zx~h2jn6LTo;@h1O_80Hcd|L+c_%~Yq!&vX5?4$8>TE3ute4#l13d?^#*Y{Zd`aSaH
-z;{2<=qWOjTFK+p}tG|-hzIwi{h`&PR8!i7~Etyw7{*B`0>n;B#Tu+Rgzxeew{1vLd
-z%<}hve(;x9f5rck^n&H9EPru<`Jrq}@$waxZ#C!Fe^>GHRhEBh0sHINR=j+d<rnfF
-zM`kELX8G?e;2%`|xOn|>%fGjPe^vJL;^iwWf1<$nDSJ@MS1aV{x8CxX7syXr{vpVZ
-zvad1AFJxa+mVbEx`I>)UT)uwG|9S!W8u@lP{tC(0VflsR>$3bp{Wmry><ilel;s!d
-zzw{Hu%a2%oq5exht>p{#U+hnsU#S0@Ex(X{x-7qtetIpxQ2$jtTU@?I%P-V_WzT8(
-zLh|je*|9kv{XlF^TiKkly>~C^f)&q2I?GhPh;u;vnf&<f@4jW9*y-ebbUIeLMW8D)
-zx)Y6G6y2H-znWaS_if(gYRs|R4qS_W^~R6;M)`B~)^FbZQ@f>hy?U2VgIep~3asB*
-z#N5t(r2IMh#hZneeA(5VM#uf6{5iS^zK1{$iM^HYK1LqZu0^1$ng!h&(3Q`E?pn~r
-zjINm8e*n7iy;MH#KjqK0XK^af&*Pvg+gIs|@!K0bruR`g?nkruo%X3+$dPt&Ea>`Q
-zH#5KUK-Xh*+@BWWcO~-T2h7ax7SL519rvq+_&vb74xO3b%b*)SMCrJHEyQmw+TDA^
-z%=~IW*J*UzPZi?V0=o2E<#(2mMcLK$pqn<jV*R!ibYn(Wtlp<VSI*xB$6v8}_ebB?
-z8(pz_PXt}H(G{zA1?ZaR&0O!NK-Xt<#p?YY=(>!qSiKK{ZuqS;*Sib*{%EBuR`1cE
-z8#jK%>OB*56>pol-pfJPV06Xmy%BVAqvJkS{vyWteV}XO%PaUR#_w6sH5y$peurR^
-z?>S~>ev3fYVRXg#tpVNOu`~0#7IeKvXZ!BRb>|15t2{~hy~WfLHI5z!U6s)l)63qN
-zQ_78w`|(10J{EM%r_9`r^FY^Nbljh3@e9qTSAwqbT;*46T;2k@o>|a60J@P`(7g=0
-z623Btzhd>y#abDk1zj!Z+KjH4o?AfIXmqx(kL=&;$&VjV#9uLfTglJpY@Z&<?`hDL
-zteTnM{^<Lul}cBP--)2>xoBp7D?ry_baoC9Dc`3+*Z0wx`F#&`T}Ef;0+IY4BEOF-
-zKRX|Yq}ydrj5nj>IYA*iJsNavoyxD6y_^ZUDR1U_F9+SY(eeBstKQnpyVB#Bi^Lm2
-z*L=;)_1*`%KBFsUFVBLm%joP}AyO}gfJxhRT5mCai;&r9bau`V$!`tl%0D+VziU~U
-z(ed0t{vzi4AAqj&`kDDX4!UNevvY_@`S#u$^VL^o=65XU;zq}Fi9+(72fFE7XXbY$
-z=*EmLI3aQEHTJZFTR=DX&6)W<0J>hIvvZ5c_Pz|d;qT7OZ!Vnwexob4zo`Y?Z1}Z=
-z_;Ft>f3Cfub>Vu@jSkE#-&WA2jgI@|Lj0ZvUDNF|^V@%4_<u&neRCmxCxWhgi}JJm
-zbEKYEfUe5umK(dMb^24FYco3TJ>}2o<>btM=6j%PHaZTKEINzQULFEngVAw+Eq{(*
-zNYA^JqJOu|+>WC`H*9oYH+E6&I1_aB!^*E%J1z%Z!sv>%<3`X`8C@}Zxes&=Kc2aN
-zp9Njq=!)6PA$a&Z{<E3+Edt$$(G|0oHK6PH)y#Un7IghaSIl010J>?TE2ihiK{sV|
-z#q_-Qei&~?SIl0H1zpucGq>YB&?Stnn7v#Hx)Gx*)Q)R#j`LaUYLmdWIkA&g0{;{7
-z2B0@5Hh&2a=L;v*0@ndgu>1<(fw9>97jaIs5p+{P(mf3P4AQ?3+<^2r@M7Q-f0J{c
-z`L`RcH=GAdBL7gsJ%OJ<{I+M5zS*$G@YTO+`Y#Prz`vuuPT(6LcRTP>$Z-y^8|gb+
-z{@<ozvGquQ8h8Nc?gV}a^?Vojcr12O6A(v=^Q(Z+)%-UA9|6Ad7p%dc`wegza0E#D
-zZvqcT{?))$NdGX9^{oKn(Z~E{z)z!|_W}<^{2(Cn|NQ4z>;lmL0Lc0_1DSpT@D*V9
-zpJK6h0y}{F1D61)-&29qZ#D2UNFRGz^?C)6@*ZIL^GVg`-G<)<QlE`L(mnr_;?2M#
-z5x)WW5bzox+jSAJ4D|DW)azW}>(PWa0;$*MCRE;E0`~*mmx1i(jfU?4vYs~rslOPI
-z{B9aoe%(O!!_~mofo}(pd`<^m2%Hb3K6Yh3;t&2Y7F!AYDUkAg2S~kN2c%xt14(}}
-zko~Y9ka~UONlpKu;d&tTd(RWG*t>wA0n+Y1X?Q7+db$Ki`AZFlQ7PjeGpse-{s&Ee
-z8c6+(0V&^?fz-$4K(_x};0nag0G<zA0HnMxKBna#0g~=sAnokSK-$^ofaG^6knKGM
-z$o9<xviu=H+S!3X+SyBwsy==JWd2uyw6hi<_3^}5EcPDYcYtj7R}DW4WV_!9WILaO
-zFvQ1zY}apqlw%9<aKuwUw(lY!{+oXa{zthhfy;rr16e=69?SZZK&;{On}PcQ7XxX}
-zaUkvaZ9v-d9zgQ#`n}rqaX`wkr{SFthVjdQlz*+^2Z5A-ci<t&PybG_+wgS5BMpE5
-zTeZVcU>Q{QQy}g7W+3HWV)-WnX{RRwOF>r(T!?yh22vk`zfrw*09o%UAoWoPJQ;NJ
-zfbRuX07?JqsOs-w;9{h20kXdD0Y3-)7O)fb{3q~G#4on|cLQrczc&ynn*YmRYdIhI
-z3gS;Z7>gYP90BeN{0flz{XCHR?F3T4RY1<ezxb8PyVCG5Aoclr!<~WDXa56AcZ%VQ
-zzts8SPe7=8{-Z#)>oy?A_hrDpBfSN<51OzVNWInoyODk*kmLNBUuZwyZMYdo{jCO4
-zfAv7}d+vVa_XLpr@GuZ=^`Rp`^7$h06kt1${FeebU%VNZ03HgYd^-VYw|^W_z1|5V
-z{bzvehvh)(_3f6vui>3PSN$FUd<XLX@H5rZuMM{Wsi!-Dlz*9Fx#3TKs_EAoo?&<*
-zkov0vQod*IQ+?bAWc$AXd>{CJ2^a@%0#e?^K-TkiAnD!!q@6wU6ScDmAo*<rvb~=L
-zvVE5US$++Wc6Jevc6KU|c6Nm2KmTL3v#mht<2c~Efja?dAJ6|t@kt=t{RtrDsWChT
-z$ac*GQjYzAl;iiq+P>R>l>4(l%H0OU^Nsmu11aC}K-&4Qw&6Jd;x_?5f_M@*AO9@@
-zwj#a=xGR?MlMMF;HX;3$do}&nzylB;0&YgRZv&4;{DYPr2W~?8vB0B{{`-5B{%+vM
-zk$xNSO-OIF^izPJMEbu2Pel43wkrLPfJvke0gpraCxI^`egzOy@<|^9J`P+Cq(0vP
-zWIGQqeB^GmuPs2Pe+9_?`6BRgbj=l(zQWR%0o##&vZWto=@r1skiLthKY5q(c@+3j
-zq~8N1|F2p4mw_Kc`cc3oNG}6YuXBLAqG>N}QT!>8di|lr`+@Ti{~YiL;KzXn16Kl%
-z2c8Bz2KX-ECg1_UGr<3qbS$<O^-Tdiq)!5O!+3ra_<7_%1YD2&p8!dBD{up_7fAXq
-z07-uhko2DdwjlpwK+>HLYy{Q=Nq-uU^b3KcKM{BV^4|(<1nvV|35)?r|MxqU{;xpN
-zKMlMH`M(2_ZU}fWupdbJZve^vzksB_9=HbiK9F=50jbXhAoclv!wMkvxu3=V@<Saz
-z4*|!(=T6`}<lh2(67kOhF9CiKcp%dMI;8Xu14+LH$bR@Hkn}ykRlxIrr2pFwlzt3I
-z`n!SbuYMruKM!0E{1A}z&)uQ)j{!-450L%(9U$qi2W|v50!jbU?MnYgAnAV$WdGj=
-zB>j!Rb-;B%((ehR9X|bi#qR=X@81Nn|Nqm{TP%G&@N%TrTKZcJceDICK-$3*gUW9k
-z@N?jI7qA`aU$XT7Fg(Zd&jivQsxAE>OFsa38PcD*P5Iq#cngqxzXrSr`M#yEwe%+7
-zN0DA*>2nRY|35AF5|H-sFp%v}TlyWqk0JdiU?tLb2hwh)2h?u<YM2JnZoX~tO~7kG
-ze**BsNWb%Y8ovz4_$%Ml_-#POPq6rN-_iJGK$fqv_&wiNxo$Mv0AzdD0;&H~Eq$Kh
-zE|$N&U-kSDup9Ju7=9MW^49>V&vlkwXIN?ZM*^w0n594RE#-4NkmUz})X%QKQxSji
-zn`&?O1F5IGfE-_U7+wveo<45zR^S^DZw7K6J{Nd6_?!VG|5JhFzb}w<djLuI?5#>S
-z4kX<lfRyuVK+=5~NV*h|{5AnecRBDf(8YnII{`?#BY~tl5J<Y$0coE<y+!GUfu!pP
-zlI}(z>AnP{{ucuuM*JY)Ch*<e@Y!!@{Bgqv47VD7&+taWYYne7tN|VczQ+Km&m)1<
-z=OKoF`MT<J49N5cfz6=%F_7}z1El_Lvh>ec`n5pntHsirEd4?t^>ebNzsu5(0a72Y
-zv-I68eGZWA|J}{n&Yu|GVfYQhFBtlUA2VDEJPmR#0J42Y0NIX%4WH`M_WcgX^lt+>
-zF0KO}0Qz>|X2d@Xr2nu8$no^**OcyYAnAS#+yuHG0_jg&10>yPK=NAvB;A3)k0ZVp
-zkp9KPUsbvuAnE=CNV*lkPa@s`q`&c2Ao)FUlhXYJNV;zWlc2i^cpTzwK+>HJd>QE<
-z06qr0It@tsS^%USl>j+j|8%2b8u$w0U$(dpWdD8wNc~@I=}RpAbRhfd7)w9c(%%4N
-z|GxAU<@*O9`8*7yJ=|sK->~$r0%<?T0qa4xC-6z&9N=24uP=RB_b+z<&jQ^yfn0xY
-z2EK&$d<jUoeak-rcnIRt|E2f@kn7Sg@DboD;NO8~0Ut;CGk|-6?^C@>|1IDV$o~@X
-z^{A&4NV+=U;YeQyJR5jCa5Hc|kakf5JQVRCeo4!J6Ug${0a^Y$Aj{VSSv~>W1UwN)
-zdpQuu@<08emLCGL{8xc2e+iJ~mjPM+Y~aU%rvYh4Zw9jbLpNyo`+zJz0A%@(0$F|?
-zkmXkaX<r`%(!P!Z9*X#j*Q<Rz349sxM}d!_{BMEeGX#7X>Fq$;&r-u<4PS3~&lj{`
-z_5;oZ-Jd>>c>`690oi}Q1MZ6cy&s7G=HG|^wIKfvAn9%ZehAnFB)tzL{U#v(n}0d}
-zcLDM*0g|o`cp)$jB>f3M(k}qwzxhYwe-|PDU?Ays0$v5W&%-!rZ`S~6Z&v}iUmohg
-zGgag#frlXfSl|_iKXx7VO~7_w6ZkX(S>Gi<*0&tU`pyHcLH=n#(*5PL%I6^<Sj``?
-z_z-Xm@m}B~z?9{m0{lJV?*vlsZwKxPKCcHtrSm7D{Eq;8fRyiYU@LGnkoJ2%aDT|v
-z0A%^M0@?qE0cp3d2hwhL213O7Q<!{K10M%+ygmY?{67HFF0KK#0{;U@{u_YgzZOXT
-zaUl603)}>(1RjO_av=Hd3S0qv@iWT*Ss?r4ejxdO6-fS{0h0eGf#iP$ko=bd$$v4B
-zc7GC(c0V6T{s#e<0rv$`{yl)Sk0<|A`QHH~|2`o3Uk@bz>wx5cF_8Q}1mw8*0FdM2
-zy+HDRJMhE6BZ1`qCSVI#|NR=}e<zUR;uhe`z^?%x1K(aC`ER!TlYvnA{Fl3Qe7qm{
-zX2jnNY(;$s0(ZsKUS{}*PwV>h0FdeT0=fR)20RaV1Mnlj2d>uidw^#l{tY10A4_Ta
-zFM;)le;>&7KYvQo9|6)1zGv~9fb6%ATKp0q^&GeO0wDFWo5f%7b=|oexC!a~hBp{q
-zWq7IK3d1uE7a1OFIM?vGt75S_=;eMO^>P=G?Z3nDDj@y5k6HYDU<=}lEPj&V>kPl-
-z>AHClkorFc$aV6sof^LtNPTtzsh?Fq@~Z=~-ct+@Har|g!u%2-^XC{o_z8_)2!zSc
-ze=Csn{Vl2WeGAC=B|!Gm=|I*u7f6140e1zzT?~J7rN)1WLCgHxfz1D|VW(j!koEog
-z3g!PLAlrAY#Sa9s|6jo1WPLvclHd1$<aev#6^4sCl;7S!%KHEY9r<+u8LtJ>ZvOBe
-zO7{&Q(>DT1_jZd<wyQl|0i=AV0!jBeAnAT~xyG*o(#{SCl5XN-n*MDd>DF3&9+38z
-z{;1M*0?Dr)NV>f(K75(lWfzck*=~5T;n{|Z3>O%_$#5^j={7C@gyAm??=-x{@N<Tr
-zFx+U^Xjo_X?}l$N+~05)!)Gtm`W`oYz;LT!H?S7%-3a8kSOH}Joo`qL<hVH8;=2LQ
-zM*QzsEZFb&0N)S1-QrgQPec4Ni!TAb1@Ys76~M!QZv^fNd>3%C70)JtzXnpT1Hhvp
-z&u4&?=Sm>uX*a9~Ql5nte>3nL#195io+nyx{sjCjkntOVb->SAd?Rok;^zQ)&hZ`~
-z&o7Pw@?2ssAkQ0K*r@XS3V1r?xeZ8p`hb+@zYLp!lxMlc{|$&=*PCAk>_)lq4LT3}
-z1W0*)^I^PO4ZIV`{Of>cA^uSy^E;byz6D$dWd12Yj<b0{<{!5{7JDo3U?B7Vwob>*
-z7l3n-z6r?mbAX(8=Kv1{{&B6Q-wEWnxCnRxu+Gwt0&*PubPdi)f!_s^j}JT!@g+d^
-zPuy_6;X#JG8$Nr9*_+`5hFcB4XP5-OAN)TEd=mJ6ApNCNf%KPNx>(cy3S|0IK&F4*
-z(yy`ft1SKBEq#Hd|C^=%7ETEH-w!089|Otf93cDiR3Q8FWW(11*`GUG{3}iB4|M_Q
-zS8W770!#qO_ZZ;$z<q(#*HahaP6NvS2*~*7fjc37fyIvka$T4MWPgsXRQ~q>$-fUs
-z{+9yDe>w16;7LI8dn51zDEHh7jo%B5A?{oJbRg~NEkN>r`U2(u8zA}r07(8mko;SL
-z=K$XiB>(xqT9n(v;=f%Ui@l2UF9Df<0g(210+9S)U8ejef#m-)Ao*VnoCaP2d>sDD
-z$AEjl6juQ&SsqA!uLr&e9Q}~SzW_WM`FjHoLHdhOF8MwLd<1ws@OfYtkbFI03HY`E
-z4@bGhK=M5t_yX|B^E7@lkmKPXAo=bNB;Ti?T=M-o@LAv&f#iD~aCh*%0(cP0oed=4
-zw*#L8KKnt9-v;D(ssxhn0YLJdhEmCQ5coFa-vT7xn}EB4Zx^r{=_`TcdlK;Ni0@?a
-zdm3~+z7t5kM*_)rHz4`mdp4e<fc|zM`F<C;EBJm9xB%%Jf#iD{@I8o^S^Sr0>3F^Z
-z$nm`1@I1rChVL{y(y+|%m8DwlDZ^hIZZ-V2;TH{k!#2Z}h97Y8Gx59)a@GL5Ab&NG
-z`=56JIZlrTt_B`#`7bWfar+by?LFWRhW`)9ar-rke-8LJ@VypDK5f8j5MKkl8rTTr
-zID8-Q65x?Q+VclLpyieVS?--cmiss0r+{w)a(umr$&2NF4rI9(>b2Z6K$iO@kma@k
-zuL9ly<hc1Pkmc3@S?<$kXt}F^EO!Zz<(2{Ag3Vt7JQ{Rw1G3z6rz`ywko5NhNq-M;
-z6Y%>$+WECW(w__b8`94LlKx#l(!Uk>ao}M<+V4wsO1}k2`X2yEe*=*8*8o2WOai%1
-zGy=*0EkM#A0VMs-K+?ZZtLI3QK&~J60!hCPNV_}NFkyI{;Sq+VhA*F{^b>{;8s2T#
-zZ+L^@Rfd-ut}r~)aFOA$hI0+~H~iJ9@@<d#p8#@wxD-e`Yc_ljkakvO@dJSLdtY9x
-zbk7<7*zj`T|5x0Zz_(G{dt4zQge!5l%Fz&oaD#~?-{FWij;}b5jg{CGc*wH7c9h7H
-zk>uD4m!X9K0g`f*a1|F?N?%@q2Q9QfOE_B6a;Jp{<@3Otj|Tz5S>RFfe*c;OYIkQ>
-zvYdpV58><o&VT;%pL1ttMysn)9vvXf3+ljYARhqI{PO?mWIOy{klMrDAlbVPq;#)j
-z_An0s$=;S)IgfY?BzyOQWN$4<?eij#>@|U8uM{MEvzQZ@_oDNWy&FNAcU%CHy&y>T
-zN<eD2GeNTVPPNp38axK_Z$Q$&5G4H`@K~@IB)bQKG%xXhr1#uBsdo=Z?Q{qvy>5`^
-zDGNZ-n+B4-Emg98J_(ZE-5||d)`FxL0ZFd`q;`2QNP4?~G>>_IuGD)BB)!`}YLAzK
-z)DBlLmoiUf&S%bM9?d+Exf}B>4g1ST?+FmMlxcqiY5e*<I3E4sPLS^ZH*ok_;N{SZ
-zfut7!PlaBH!XY<sco9hB{#52Sm2&)l4W#jZJ@_{GYY?}(!izvEj|BKJ*bTmk`@+fK
-z49L~s6<{Gq>FfoP{-!z7zbC<0Aoqi4nuVu<xRp&?2$G-m;5hg>2c-GNF&w@-xC(mT
-zoFw(W1Q$W?Ly+3x%OHh63Q~T4#=HU?fqW+TD%cECeoh2&i!Iy_B>#2-DL<c|DD(3g
-zNcnjlybSyUNa@@HlK$Bs`FA?_3gn$ZbeY2UPQbhje!K!weqI8%pnRSIzd`r|9DW0Z
-zL+=VA^ezDxB0uMW)DM<%co6(P;`x~egOs0fAmwM|c$uH4K-|&`Zv)A{D?!T7MIhDB
-znIPpy2QLL1K}sh8lKvhb`L}7d%+EC-x^Cf8kjg6z(!BOmkjCGGzzg92WRU#d6+9Z(
-zw^Yb}`5s8&kAUR=)y(rj^1llt|I5HHz+=D((BBUvzsG~*_j~2i?^nSe;`+lN_50Nz
-zmHTNR`F|w%CHSW@oXY^O2g&argXH(6Ao<+@4k4YBK=Qi+oQdnRKpH0w;_#14rQeS+
-z{}Uv?uLjBQ9`JMUG;loZ)qv!85lDU?1X6iV0nZ0NDv|ad0?BXsStRoN6!4$mXT>;I
-z0{#^wzaIw4@B2aW`z-KWq!R<l?+EyPTn~YCUv1#<L+Co<e_AB@8c2RW29n>`f}et`
-zz@1=kIY@qYg5-AtNPf=&&jV+GWdFl}^!ovj{Jt3c3_J{+3x4I7et!g#-|vFt_d4(*
-zr1Mjd{JsvHjq9ty6Cj_(;VmHfeJFD(NPd6nlYT!A(){)Ta2)L227Zk2t3dMmERg(;
-zgDb(4L9#y`r1E}mmh}5~AkBXlgBq?M4N`f}0LkwILGt_M<M19lr1LaLe*Xn5!u5wh
-z8rRox_yr*Oy@;uS<oBT<mG?gj<^1_Q5T9u;faLe1Ao;xxB)@M4F9gpA$$k?^ejfx<
-zdB1b4oL^rERzlXm&EUt!ARhED0m+Z$;9_tA%QL{4koRTzv7@DYH~2oT{}LoWR)ge6
-z44eke1S$Oj@JF!!$x-Nk;NL+E6@~YMZ-BRgq<8O;9?ys1uff-0?>3O^UI3E4Mv(Mo
-zgJf?SNcO%u0_!2TegjDP41<)fT9%8z>mVNoE`q6R4o5qHJOEODk7G^%DW6{)Cd*?J
-z^Cj>iq_YmB@E%aq7l+p|OF+{5)1fl_29WeuGj+axJj=6~Gx_?iAl3Khh(!5)9;9?0
-z0Y|`}vAhx_y%b1#LFPdqmCHAW$Z~lVq;mcTNOsnP6z|s{#ajp>N+E3uybFGc%6k*#
-z{VquL_!s<-^kU!}U>iu~|Af~=N16*C0bhsy10cn_79{-+ko1~B@+SaNJxu}8H45*V
-zF6(JEGsY|gHzEAOgRu?=wu9t%BS`I2WBNfV=eLm<g+IW&9UOtY5~OsOf|PCpNbRE>
-z`~chsq;|GDNd8X%$^Q`;!=Hugz*oSvAlW$!Bs)I<$^WB3YG?mCNVc<IfF+RAAc6|J
-zLGt%h=6sO+-EyD|f1ddW^G=Zbz5=B5&IBpF7Lfcd;p_YJ^)C;Q*Pj3>KevPb16}}<
-z9UXiX+y{II{Ez)*eccLDes2URzk?v<w+f{E`anv5Z;;ae=zB818$inMF!Ma-0+8x!
-z7RysX>UY2055~b&AeF~i%q1ZCR|`@)M}w5kPGAMDzqPNtz5%4`H-L0~DM<M|1EhSm
-zfMll}q<roNQa-1G?|~ogBmMmwNdEnv<!eFmZ!w5lLt!oGLlKmLCxAzQv%xicOTW)y
-z&SoCL+=n?1q<a2rFUi+Is^^Em%fNpJcgAx}H%R3WWEL?0HC0}Jm-!I$W{~oA8A$nz
-zvwR@93+zq?ss8RMz<FoLH-RLd22y<<%Y0^vtk=t!^~~>qyCUA^$+Dk615&&P!LPx)
-zKx!wqfTEpncnL`D<l{XhSAy3-_JjWdC$jw39`gEna5toLBg^N4Qy}lXJLY-N|Lty=
-z7a-}|LApQQ3Q~GEf^UJVID836`_&=l9OlEjO8aZURR~|rj5GHIy|6zCB>Uq*vj6oY
-zkLNY;J&?j51Xm(_E=ct>i@9kRDZd0#JwL^~AEbJ|1000@B_P#z3Z(k>fn;YI^B)tX
-zd?)ip<|QE2?-G_5f>iG%;GVFz5BN6ZDIod%4UA8R{3b}@uYwf+5s>0t4eo*Kt3mRs
-z9h?NYXM(J+MIhC09Z2;%8+;Qi0IB|8886$#Mv$)G2V%%C{5eSV9%s&GzOa+5=OK{l
-znchi4?cpSl+QWe?e?3mt`>P;@Zv?Lcp8^Mv^u-=LpF=(jq~~_H?Kui^CBj$Z5s>&C
-zvW7KCI=6i~@ma{o8=adxo%lQ*jR(($O#BDrFJR{!$i$Z+ZwAwliT?%p9dHF?;){?+
-zz_TC|UxK^=OhG2T0Qq-d2V~+#$hU(%kcoeTycUc?CjK3=4_pM9_%!7GLFD&z;xmwc
-z0rrgZG~NWx2T?YjQV@CeOaNE1d_K58Wccnm5lphY44e*GXZhd2!y&h^+yoXvu4h>T
-zDgN;w*)IYqej&?L{uCc=OoV?Ar1%(agpBUv`ABS0;oK0eQ@+j~=b3yYcrNG#SAdki
-zG*|$h15N_Z0|C!j;0VSERMEus%wgsbvz=MV^fEon5sV`uK698k#B66)GQCU>a|Gj$
-zh|e5m4l&!Al}s<w!yLi*BjPiMnM2HWW+l_h^e{(IkRm>Fm^s93XI3)3Ob>Ge1uEh*
-zhnYjnc4j5h%k(fucH#KUVdfCComt8BGCj-@j7K7U<}h=J+0LwFdYK;P2s*fk&m3kB
-zF=^bQ@Jgna>0ypwyb|%5!^|OOJF}AMWqOz+7{5e(<}h=J+0LwFdYK;P2*x!LpE=B=
-zageUJGb@>1riVEKB@v%F%p792Gb@>1riVF#euO_Ku4fK2hnVfmN~V_yh<FPQ67vR+
-z@&4bdaI?ZZ!ehLz_Z7@DNjBcEdmrl?@54Qe^^Nz}Ue5Z%5lR7T6kZvhz6?O0Tc=66
-zo#m5RUeEFtwr9N0^n(Lf|2i3eKFh}YE)T@OME(_EP^Qo0jZ$9E@@H(nndK4;NThGP
-zukY=JY#%o@`V?Tmqj2MWeZOS;>o>`8+K&+N-<R?Qn6!{g55M$zi0yknm2v_DFNGWL
-zhr6Ebw{ti}os727jzOJ1vshljGL7RD-pBG87&j(Q@_MfSg0yij#lSj!+>kgFNAeB$
-zN3sv&1ASH%LLNWl`QkGv(>q)!d<b^vbMrAWd^3l?h<-`oBhaJI$Iv6Wd99T9#JERt
-z`{7dlqL}XIUXSs9(jk_O_j&%XM1~vhNByWw%EtS!FUJjt;v4VZJQxK)GTkrebI)uJ
-zN4oU6y+X>vLV_<<QeNLLFMNKSl#Tac)^q$}_IECddHOi7r*a>u{|L%<`gpHrg!BJk
-zxs2b=;k%Yfc{8`4EdePT@2fn6W#j#s8&8tq#{0rA<@m$gK7NQBE#=R6U*a7c-*|uH
-z>u`(w^K$xK?BBEO-(Kv$@xJw|IQ&HpPjULj`_A{^@~-@=%<s7@Zyu5IzzNbH<Ne?>
-zIDR|ofj)<DxbgmN?}<|1cwhFDEI$jo^!a?Q4BxCtc`?_o@&4o|ST^2Q{TH@h06X;Q
-zXM00)r2Ls*+B4qodOgd=`(__!*?9kNFUz!ePoE}kAIAHM(=2-*mf?To_F8$Xl;?2#
-zHOr(tiNlTeN6%x~cwcMhJZe8fV)2$@T+jW*cdU&6)KN10_Rpm}ac8Pu^uJrAydU?^
-zat?3e{&^S5g+3>8cpZl?=Ws8VPZx)u!r?b@_!=(%Uvc;v4u74)+pm}QA3sL=x0%D~
-zzE1vm*URup)iV5I4*!hp4Y7P2#u?HtV0#OZZz_*>ID94Bd-fq|Zv)#K<ZxQwB>g^?
-zSFpXxYo-1bY;T0aA7^_*Y;Q)5jK74#cVT^61gB3W>#tugL{FI0f06Ys=k$kJ{xhe4
-z7w6|`w)cf$pUbb0?XBSS*K#<m6Hs{!^LR<m;UquH@>|?q-r@fGG`E+#kS=}Zuz%~>
-z-WHaB$MPwh-d!x;%;C?n{Cf`HV1yqn%V&R<U))*xQ;Bv=pMP?=m&1J%Wq1Mi=O%6+
-zM{@YZ96o|^m_B=Q{7D>M!}f<!uJoD1;RPH%$l-nHXY~0Am&YWouLSG+SbrVsw{w5^
-zD~DHd_;~i`S&UosIfVUf=J3-vypsFFA2_`NPHzS4x3m5|M*bH`dk-JQ<;VJ8O_1f|
-z<NCV}_X|<q^QC^<cqtEY_$O01oaHluQl`W2^qI)=dY<3h%=&$3XY|=HPU^3@R>}d^
-zFJOIo{+_<euxITTGW^<;Ax|9k46?kD<sp{aS#D?flV+*EhUHyaq}<2yNi1K?@?ji*
-z3Cna|gzjfU=qL191^-AkelKDJha11|@D9ty?=jH%64Ez*-{57Ijo&Ny0O?b>@%sb+
-z$FlKz3yDS<?zt0*<MSAYuX$g}x3ayF7o>bA>XYmlzlRcI{gDwF-pu;O`>xj+>AfYx
-zS8=%UKI@y<9xjW|BD62EFD7ERGLPlTH6qw^J^O3CkNkd?jrXfhW&6hOp<K!754|Ge
-zCpp}BpZDY`GCkw{`WHcs(l_3h|2Bsk@4u&Fpzsmy5BH;ek!<`vfS2`+_x*o>_D<o(
-z?<34M!nwT{vRv>m4C8Yi=f`;8{Okf5-}rr&BiaAqgQWgtMtM9U<w_18I#|l9xO|5m
-zm-2sec}U6QS;z5>_sef-lIa=0r}ErkXwMUdJV$c>O&u;}FUwO{evoC2<;PgQh2;e-
-z-*$wIe-g_xj+C;G<!Ky#2g^5d_^B+v%l3Z6@&~NHoaG4XFJU>#;lnI%;_xe3?kpG2
-zaYk`?4&2Qy&st!YOLw=+GXr+{w7u+d0OgM+lKC9bV3$)$_(w|oH)`zqwUh1g8;U<&
-zwf6Aom3H}8Xm?hB*6nSVr)zfk_&x0MM#cVueeB_vU_7<jpMR)bep2!02_?PB``Y!Z
-zFdw$sODf@KE8+Jj;a8*oSmR%*q<4UlpF$-+?+Y1D^XCFlKc-CkC*wS({7WVLN+tYB
-zC46U$4_5!?DD|<YBF~#?*Z;XvzW#c9_@VpRWuKDXu+n}W-qWsMrnHw0O8I;(^v(RY
-z3VWvfrIP<*j3?Io{!z)#=}LdQ5T>m9&-v`~$x41+n_&;XW0qb1sn;%lqqL8((mz8=
-z`O*5n)t_aD*yWd%^!8Kyxp1mo{{|&J8t1L{f2ySSsFL0!r93*6^j=oddtOQJbtS!f
-zmGpkA^skLd|Jp<Gr&`JXqe^)nsrW<Bh1UEIDE^$M`1661URp_SrIP=hmGN}ElK-!i
-z^qyAIo1o;sP|5#~#dvJC_fzIjeoXnKI=g(h(qCQ>?cLOWMf7)5zO~98|HooHHpA(h
-zsWrWGl=13*F&>-xzY*nQ$|a)xnDT(vZf~RLA7*%!C_huK7UgHkCyDwo<%nYcL$BTb
-z4@7$~_0Li4|3tC>6UF{biv8o2{N1V8zfZBhL9tK!x7PA}K&j9Bl=@66^|@1{J^s#0
-zeSD(S=gUfczNFOWElT`XmHJ$*jF)9fdp~@4^2huXDEht1{No5kzC_f&8NXWzf9*KC
-z{TVau@<*b)&G?6l@-*eecn-GuH%^fY{PysWl76dF9#a*0K+NYVGYM|miR_v3l}Oww
-z&r<4dks`}|2Q&Uvux$1JZecHzoafI<_)#K#GyDWaUNyyTZ@I{iso$&EuT%8toPyOK
-zdUvZ;UZU7*RMPi^4o&(?lwTDM`1<-gqLI!9Jspg!(5t%wB_;lfP}_<u+Q~>yES&03
-z=y_=SOOm?Yr7HHsL-gyURq?*GC)BI=b`s&4uZDh-G)zA{T09RwZQAND3AN~b2|cOD
-zQsQz`TN6~pkDrFZ(P+GLZhX)aVtWhqfh;b&WiS|79`4Vg@0P{v`i@Mps&unQPc2IK
-z>2uSK;aE>p?^+n{)$3zb@mNY9OnE|_nVP1Ss_M{!CT(8mP<g4o3BUU)iYKXqoW~ZF
-z1;yfMkytVnj-?{uln#rX2|cA#Vl|0)uO&IHBbiEsJ9DKLn%f_VrXsOWcQhV`qV&B(
-z?}@~;&Q3j<G%o3}F8hW4%x}t8i{GKmzlouk`o>lP?&@yk56!G4Yqqi+N>%ZMZc}7)
-z3B5atU(iJp4K3FbN&0PF)JCXt$+Bc>S*R<V7>MACEIw36*p$T2^tSM&Lz5MmZs_+_
-z^(U6=qT4l<1<}3m8@x>w%|@?mZG=T@g!0A(4b_chrRBMlDuj~X7bwo96)3JlPt?1#
-z{?rn5vPh@sW>xVn-H~dMRvm0As;z2lDp`oO=2R%IYt*V7(Mp4LTA-xValO1gmee~j
-zj5HNB&MR>QQ?#P;V%O^>{($4UX|5PC{UV(EOt8O~$}bpb3r3S|QF~eX1Hp7}ubxVX
-z0kBo8vW`L+E74CQJ^k_i<lJ;hPimSP-%M9zL(?^XfQqz+e|b4q4C!e;QK&FNREk>X
-zsP>Hl&qK9b*rj65L)oa2JXED!s-`@Y$!<<nRGh6+0(5U^PQ+93&Un-)U#o_^c_3-u
-z+;UaV>~=Ytep=IvQmoag(u1|ZMMgUL##h?K)|xR2eOuyF;cjhwGaIt8X1C)f1<^?7
-zMSApP3SG&q)L0E|E*~|x?xN;W*RE-erG_=lSJsI8T)0Q?s`ibww(Zrl?Y7J++csP7
-z)#q;0TB?qLui5AK4Mb8)@C)<dZoSHvKC>$nqJP1*hEu8=qBV<_dZM9dba}7*Y5Gua
-zysJN|i+Ns-yX?G3vM-$KT%wH0qumgLJ#9@&9LL=$qhrmN92s&1vE5)>Nhju_DNIp%
-z$Tz1Ad$>6&6yeU?<gciXb%y(r{ZVl{#iXr2nrih2l1st~Oow%vsA(9;ZMPnolEqTy
-zep?aL!<ac@uG{MObw>J@=n0xUI-OEYxX&#7zUBlbzbPFv{#JikB0ON9WN)oq%Zz2K
-zth!EXw#t(G+-IvynNHb@t(+cg##(L`zqW%lv&mZ;NKq=>GkOK)Y^8dp?dn~lo64h&
-z`AX#jSdCAs_La(cZH=#0ZLL{~+K7!&xyp!L?TnqRY;#2C`QcnVM=qmh)XY<sDfEUr
-zO##!ownQWay*wW6>SK+V>*HxQ9K^G0CQd?+>fvNY<c9*jW<0ax_gH6fqb-t(;pVj{
-z+z~Z%QIpUiD9<Khj1KiB;vEQc8`#{QxuwmRK41<Uyi7n(nnCmg`v4v&;ajQmu_Dyh
-z*3?PbL7I&>ia*UUPZ<)et<P~w(lj-;oOX(7vSXI4>KgMq8iwujbyd^6hsqiL=n>3W
-z^{BeW#32tigjF$7&dX|knr7zsVI+&~V9qJHEHZ0t@f6%X16NDdF=eC)V-_WI!k9zJ
-zoGzM5POr=`v*G2MD$41<>R0X<>J-ZnJ9iK1u=l4t#@NQNJxZ3rR8`A1YN~ol$8-db
-zHe*vGnC@9-4XTpGxg1)qw?WmEqp3L*0_a~DI{0xz4L18p1y(DvC^?>OR4XV&v8s_f
-zzS)Xh<7W>xo%H*VkUvW@Id1-Hf@awoYd&f-6Qhz?-%&!00ai6>Iw{wElxXIXgc{Kp
-zD%I=eVuKn&F=!Z6ubVE&K~IJ|7RLP*mYI;T<mN9C7cq5ijz_SDoA7nl7A??YzEU~4
-z@2T_omiE;9@VsQs)NyTDy)PIEHm8#%i|b>l^48iA#J;pPzcv`r76c=y8pv&@RCg~9
-zQAc(-6Y#0d(9+&_<&D3hOE(^H^i0wCX-;euON}TMYbn(Fd=ZpHg)AtPATBIjR_81i
-zt-&mt(aS~kM3l>S;fmj<5B7y)U3CrfYWxA(;V>2f{l31$GNWMXO3_?;QcHZrkyv*e
-zEoIq!YAszl9?JAC6bmjzd*`EAk|k&=MS<3kwcVh(ER@C5h^CXOak;<cXhwcN9vo>e
-zz{SZTtjFTP)ahq398IyGMaT&G_bs_sMx}=J+BEu!k@w~3CYfF{*8K7)<PSt*ef^oN
-zRU1`M8t+fxdW|n_En@DPwY6hSjYhN`loXGKJ1{lmYzL(#M&%up);6@bBKMJc8!QI4
-zyG6gd#T|TWOUpZ(&)u0FeQV3@&5pda<@O|idxHHY`z_wua=Wq(ZCX~k`J`n&q*ruc
-zORdUSW<AyZ{K5lwYfdF|A}8jOxpl=%mG-)Fs`0p*TgjYqj%thMpE;GxJjlstZsp8$
-z+h5#4%T}~2Ia(3sp=vrI3NoJ<nc~bt*(lUJRL!EzLz(PS0q3D==1>-M)+oWga&fW*
-zYj)-6ec{eXDvcQk76BrmRE^R~&F7=yc%L2%mGmdEckeF_Tej07I}WyJ)s`jOkYg)g
-zFx8;d`|2~Bmn|!zYRbhlfom<}*_^*r%x^GxY=qy5NH|(dlQvBob(Nwbvj>3{S-GRr
-zW7}E44xDAXwFO%~4qxmmXw8~dT}<=1Vp{y<2kMho&}LC+td=e1o5UUnmv2do&L60y
-zY%9}2XQ67<{0tlHIWv@MuvUta#}(R{EiIvh&zVzM>ZNj??=R^~>iu2u7R>qMy(oJz
-zq4$@_Ic272VkyWh<XT^=C<y$|7Yg=Z0&nv}J#Rq8tu-j_QB=dZWV*K_j>B7CI)nm)
-zUUQ&zUo^5Tq+tCxdu-PQnw&A*S8H-cF{_uWM%7M>Y}HzFm7_s>&0YJ^?a0F_V~UbH
-zX>))PL+BVh7<0_rju?aO7(B>7%IHbccs$0W^NW%@X|oXJ_&x>~oKeN@#G+(dvsj98
-zj^3KfW`tBurxsG2U__!#z}m&-!Z<Et^C{Wi*B4Kul41cxT)`SoBHfq5&M(eci7S`_
-zTCZe|F)gr9mz4F{(T_1H@y#+2t=H{LQq~x<!1IZcnZ39j3sUS;o6L6NNl}$^hHS@}
-z6lJ5W=i!1m7s*4J>{3I{syf;+CgG>EslcB77?YBp9NohG7}J>IEA7H^{AWyNj6&a*
-z_*A%C8{f=^Y^>SsI5rCS7?YA+$5MYzHMq`e@m4jLx|YY7l(fcD!|J|M+n8-pH<HD(
-z?Y7J++csP7)#q+A*hg!r#uPrCt`TFndg$F>WE*^gk!*SaLyyKTL(QCInVyMpv%EVJ
-z3rBI307n((8GA|6v|Ak681sr`42Pz&=Bvt<g3;abR;G%|OIZ$yG%nlJ{XROK%5B_{
-zUoq@cyHexeTFy8Qw~&t6m(+CRl+Kbyu8uQUE2Ad^rJ-c1D;nttMUqXyR(YmdOD(`D
-zjZ}JW#2=bFfdA$Wq}&@)1wHAAQ~9<v>nz&kVpjm?GV)UHh9aG*&P$mr(>E&8!R3~<
-z^K5=}LQ|M_({@aFDo9-%fDWYM^5h#m6K7WCv0$DhA%8`W9@7)@u$lWtk=Q;HI~sY|
-z3;0xf&NZ<y8Qj4up{|3`j$QzDbwV^`alFaa+^qW|S!=n1zM_+IG}XM~`hER<SSWBd
-z^t@u1M`96~u(csuwpp|K{N3!<xfcBn-;{IrVh8T&x;n5!*SlRkDB@k%>dXm9e7}bl
-z)%g21e%rQko!H@)=K;EDf3%x+MXk-2Hxlc_My-2_e!1`Knxb=P+a5_G6Znb|pWpMB
-z^<~Zi8yml6z49D9_Uh|-qqG81=Jt1Y>j@=;T0Jdd(Ln}evWIU1mivc&>57&HZTAvH
-z9l)w86-}@&*%Aq@NJOjsKI+t1!^Aua_nY)!j8z<mBK+l+yMd7--?Gfv4Es$=rjzuS
-zg~G`sj!>g+Yr>HzzJe4A6?aFXdT}%o(@VOe;hto&WTB4lcQqyPU`<~=><r=?La`of
-z#Rs*zV1Kf7vD}{CE;hA*)1))6MYhEOza^W#8e>0OEV=SI3%N>4XDm>WMd5H4{={jE
-z%)yjJSUbk0XfFlh)Nrk{@oLRDZNUGij+@YswUfD)ol|NQSfo2`)B_*-Mfb_kuzW>m
-zS&kzhvQ=sGv!-NQ71{ctklFS{sRXcUi_$=0C@q|FZ2w0k(OirF2O~Hk;M%S8*e`R9
-z=MNYU5YC&aWxkaq)y(94tM|@bo#IE2?Q4`Cm$t9P%qr0KHOtRZ+t+AjWoi4GC0|jh
-z+t;XgNZr0B1Le8SlH2-oF`X%EpiXIN|8yWqtI5{+{1s%~`1Y(Z99hT9B77e~oX5*%
-zGdN)0ri#09#yve4N(G}WD~v~!vg)Ybi!aQ!q_8zdy~gr*Z_E~&?BDUgoj$XhkCi#g
-zrVzf(Fqm^cN=?GD)$*;S;l6!jOO9p*@>Kvu-SLETISXahpw0Kqx9wxv3rjw;m&!)~
-zarYA6EE|2J&~C=L1G()cM?2DtJ=bI_CMkHm0hdCEiXqrB7{dOdwKVLLpq3Td(gxmM
-zRCAHpjKy6OZ$B`<aVH+W(}RP?*X<k;t%sNMk7zDmS&lX5A6+@mJjRITN>2U}O^0nq
-zoJTX@m`#ZrG+r2CSuJtDllzNkVI}hwA>8wg)fIPrvBE=N8OlSGzg(nhx(y|kZCgAo
-zW*$#;P0MkbJKdlRO_p(E>kVS#%5sKOZd+x}y(;Z;v_2H<X`E+|;=1qbRCCXXQ_r!(
-z>{Q9MN@(sV*Q$=nk;}TpqH5$eY_?>va-7}%Xo|U$F_wa}+s~>ox?%L-*4&0&HF6s^
-z^UHfRYPn`gK8vPx=#|^8X{~CoGq}k8_TArIWp9GYUaGh&!9Xb0X|?Rw0>&X7rzzJC
-zV7rOBd@EI}r90>LO3m8SonQ9d+O*7mYR`?!_hK#Iz^ul(9P5`jv1Fj+(|+2>rARG3
-ze+Q@R7)xZ!aH*_OGhvqAD7AwE+m;gg7Ob14U^&9ZC$cPGd7(#Zt;aZW6&j=?SN0aI
-z6q44vP)>@rrW0wk=}xs9o1=p~(omgCMGiGuM#tLI`MZo&F7d_AmN=#05=sMWwy?~@
-zDqfS}v}+8>Zef{6$E-1F%r#>M2TGEua3aMoEEotb5BAW04VM?*bYKl`3%1&Vo#jx{
-zK`+9Q*07t66|syhbK)Y0=pwAd!I8mQ#{ox-rLww$!GJ&1A>TbEm)I8I3)YEn)L+)0
-z>Mo}j5iQ1Ipg7`M7D;Nss`~n1aBd%M$zgBKFk_}{_AJ}zfSPS^w2*8=Nk%#AE2Nq_
-zmeNb0mg~56WK}w)8KIah8GCI)F!n2ikl8j7l6C1vTrf9AWH@gJ(%s52q20mzSefJE
-zi!@hvcJ!9kX#RXBr~0#&jb$Z3EEYHy`nTJ+=WGRo#%Nok70t@Igf1?-tf7eO^vus|
-zDnib&e}OlYsVNw1BjUQ{ImUKfEgr*;G1`jAa&Q%YVkyzMR20IQf{Z|aX6>Hh1$%hg
-zUKO3Mi{oW`p>S_kX|5Rdm*kBps`)CpF-5b#g>FnyjaTc8DUvy^jVT&NIyZeZw;Zj5
-z8oj6~O9RaG1`(jPk4y};fn)-#hjlWofR2n9g80*D6J2;sRU)1ab;Jktu28%$d}hCn
-qXWK|JMX$ocadSVtK106i18>ZrAwMr&<M2^VWfTsYFkXO)&;J8^c5He8
+literal 167576
+zcmeFa4S1zlT_>1oK_fkFg04>dTB7!hX%#0u!b})MZea&*X-ebLg+XX5&{UHax;u7P
+zB&-ujTij>!^6snIXU&>t1<me&Mt6G5s@Dx@;1-lrgi*ujU|d-Zx=3PLiO6D5wD$LL
+z&ilUiy*EiU{V_iCRP~cS=brOF|F82u=lsv-`#XR87ys}DJw2yBuLu9b-`C);){FlQ
+z;t&769DnP~JmTNbPqI``&m_y>Uw`-woIU)znThy!{`|!Yvlkur?>k2)?ks-C*f+ke
+z!1pvHPXElQo=abd$kTe}BMigy=U@HML#2fC=kGXu=jkFL@-a{(^_0ahl_K-}`PaPa
+z;;YKP+wlztzUD*0#fMG_-@^W>p06s3<+1bUA9};R_gsAL`HOFyzVP6Md(NM4mv`;;
+zM)dDPiT;^W(*M+>r+UgfM}+6k-~G_V2k*WAwIQL3Z}L9l`-PC-0zT?5{<|qgLI`{h
+z-2YHfAsza=-}puX{PYi5-l4xZrFyNPLw!{7waZ%%_#z*xz!y|mMWx?Cf9LOe;5AdP
+zdT0vx$HrcEwgCN(fUiF!{Q~eE_wW4q2VVUHcb~uazE{2W!oBz3^FUSJ?+f^X8TY)a
+z6JI1HGL-ke=~vx-@%+sFZ@BmV*MPq}%JioKzMe03>Soa2B=ooFq^OF3@50pidmen%
+zeHWZrt>39&c&lF)@GZDL{7da@D#jW9OZ?G}td(03`wIN^^pGgicmC>B&sXBd;+Ndi
+z)BD42r{e^`zpo8{A4m9wK=8%KtCmGN{yiHhgZN|7XTM%;;l&Tk+>b_f?*sQU4Sz%U
+zBR|iU+;4c`!PoV)!5~X;QI3G;+aGxFLSDXv|NI@VdJt7np!k+ho^+0byZt)hsME-I
+z8Q)9QFvlN!;O+|#JrtT~7x~YB`vdpiJ@ep$7w*6Njlwh7&eu!d_|U}*_aTk{x|Fwg
+z&hE;`i)QY9{l$ClKY!2bA9z)4*<J8__p2Ye@Zb-His+jE0~hYTc<&Eg`1Zg@MSs+P
+zq2vlbmHO;}?LzO4dmoy9)y2DQzA?W8&wa1H_kOeu=6A6h(s?PQx))U-j*h_d(hI18
+zdoNo56}y@khrmbSfAM!+xF`!fUS7!Zy3-H7`reBV9<ARq-~FBU#_GxIxgu{4a}+-h
+zzH$2E0~I{O;H`pZ?18&q_4?B@7pE@VfAQYCW8(u{#9OlCmvX@R?)x9O|H4aWrl%ix
+zP&^W@&=dPmE1*mHZ)b;i@!nV8`+6vN{8e|qjx}+vo_uVVMecfE-?Pv|@^}5xqy6t;
+zcXWFzd2c=Wu<}<=&D^wq^E&ydC!>e^y|=d%_SDnS!}_Hw{X|ex`O`0ZDNqa}V|Xk*
+zH#C;sHCRvY8W>Aw`p1&z+*(gwd28<&{)b<8-a1fE?znYOB!Ff36{o-duJ_$@&o}oy
+z>&@iK_`dh_%TAv=edkN-4?nsN1&$@z)IVIiHkLFd5!90p)|0o@5j&H7cr0nwl-BH5
+zu+hr^jMS6Hu%knW_Bc9-=zybOqjC86g6&82fYGa?TVw&@W(Zp$To2(|2v<Y662j#W
+zE{1R+g!2v?v)8U&3(@H!Iu)XQ-`ncDtuc;Y2x<s!Z=FuAAl`#`{c2+yEVDFHT8JW8
+zp%B>%m}pI=wZnQ^tNF*JR$u+n&O!aQEA?at!mUHNvE<{<OfJ`xtR=}&CTVOs+Px@Y
+zw+N7oZnb0BE->tzgkjehHY0|yG^4)9(oh4Lt0&Z*YH}=n+azQhOP5&l^>m5Vb|$$x
+zmTU|vLA(z++R1yW%0H8Q9Psl1I-C6cSn|jSVq?i1?09ayp3JO`B{Qq_<gS&m<gVqh
+z<lN#|a&}=X8J({uORO-+&dP$0SW!XG8#U2v(*Ekw<+x%W0`!Dpsz{)iC>5eC^|UEj
+zRA@RcH0wgFb`+}Tg<!u<8Yz<ATTdGlr=F19f{;F!Mo`Z-2rVARl6Nd3=gg(gqT#$_
+z8PUGR{cyEGUks)j<ajI<RFG;(LZp@;ZMedg2E;%%$RIVHq`9Kn{?b5|AW<`FLur$(
+z%8aB9iJ4}SF>Q{B;SHMO8FVyhgY`F-EG;VGL#X9JC1lG;IGg<LSn{@c#XgAG0%Cw=
+zlR$satDtc}j7fGV#I^owTlF*}j(RF8fdpE{$nBqg7rU}+Td+FP10bmY&}wXK=~q*t
+zr%U7!W=dhv?d+J$E(7$H_2i@V<c+=c<ayA$SjaMhoJ}^Z3-pdq{VEEFT3AE0uhGZ8
+zEPce3#Gt@~vYeh=ttT6k07pMuPnuJTZM4Kda}$9nq#FZFN|ywhW`=uz7krI1m0eoT
+z%R=?phEiRr#+Wq5MQdq7fxDPwX|*Uu&PH<1YKTQ%l$th~gw|3o<qV6<CX>LdD8R}}
+z08VO_lPr=%j|8l;W=m+)WnCNZMcvISp}9~(xa*{CgYF<OsEw~_>yYI+ecBw(=5o4y
+zgw_%mXsiOy?Z3$$fq0X~tkLTi?3=%`3)`<a{mRpKo&NsQ=kIzSm|F%)44T<<cQ2gk
+zdDpXGeea|Ro?ic2{9lOsZY~UU&4`B(aHMSvBND}DVmXeA*e>x~&VI@?LjELAyHfW4
+z42)IAbF`U3^trqB^b0VM9Mmrz_Vm5=@~1DKqC+wBjNniVQfUMNMDqUn<$oBg|IHuO
+zm+Pml!Y#o-^nsv(v%7VADO>gAnQ};4_uyZf|DZOSJ{?-_AuUn4wVrCY3>}$q5$$F@
+zxkZrRC2#`Q=AN=YV*bGuxFi3UcfW1n^1@m41-qv%-n`%QmeFh9bkoJJ*nc7TKd7(6
+z;`r}{^{=@qGW%bj%k@rYF%NV{cY;WBA#&*olt6Jh<dOcM2V)dIa+03I--|Gej~>2T
+z-P`yu1fJ=WAn6P;=XPc0qq}gnfP69dd%*W!RG$9&6Ief|;V;qy9f8;*@Ic{(-Zcad
+zbPygWywEvx#@~ADSaR{!Ub>?A^~zfZ=!!xKcicMUI=FOY1g<DsZm0f<Kl-C}jHDQU
+z24Ll5$@}1l_9J#C`E59&Q)m%qlHZ5Rp>82*vh!h6WdP35sCxm7=rE#NP8~vY*HN$&
+zys^;%L|abnM|7Rh|5Dy59MDOaE!)Vkjw;;J1Biz}!{yb+I)16tZH+}lqxWa8$sMS?
+zICoh`IIn1-*#gDy@IV)(A7NN_v<6kJAR214@Pbn%YuL_Ky8*~e)<_`lY>oJm(UQX&
+z9RgMgJcvyKq;`$dP{FEh_^mVzjCHKkGs$nj?K}{$7(H~f!(ly>d<=l&(h~ZZFkg|m
+zj3xKA3Ws%W6;A64oK`rjcfnyj2Z#0SJY1AnR1y3~JFFQUR-j?Mg)U~JUu-qSUDBxW
+z7u-z+)Un1zxs^jo>*mF(P#Rp{#)MH!<|u|0qh~r|6gBfy__S$e6sDUtC@{cFj&9*+
+zPBAZyerE37V!#yPv`NB2IP(H$$aDuycc_p)c;56mrv*bUXBo>j2rWEt+2)ZHT($*7
+z`x>va<IKtgWmY>JXF^4_PAez)X>xs_)^R4vl6n;*wSL7srAwCRzeW^l-Km|Mq%k76
+zrCN?+AV)E16bIxxSvoAZXs$6Q-B?9%CTT&+<xnV<bA2|sj6Q2fxxb0nFk%(AHnsO`
+z2hXltRIWHm%~85hC+4(i5gS|PWxL=dGeGe58Vdp!XYi+`a!fy6YLkKe>9OPs$HIt^
+zHH9==BGg!N*=*RQo}dVx*i0hY*VvIu-4Nci*+Ycz=tWZ=6dLIeexcG>6xFaQ(sqhd
+z5Byo-<iZ4YKWh?bJ_m?W(Fl;yBZ4Uif`qa#*AYZ>OTosbgGG^OE+dFlyd{p71b}Ws
+zaCX*dRs5L>NrW#Y(T-9N97%7?w}j1Ep>50~uro_pfr|ATK?j^f+lfiNPU<futvP8?
+zfvm>}t<mOz(+?3ieOQ{-j4omwbka~Ec4HTk$!p%0#El(E+R(2w)2|M%ne9$q^Dlj0
+zyVv|37)wM;Uh|q!tr~Gl!Nxj*$PVKeeAf$h+Oq$VX^H|wZ@Q$cz2BBnGa5T*1)0Q7
+z8Wel))5=rrqt0y$!S*v6E5MflrwUj>L^Y=*7!(sK_<k1n>>p<Gow>m0^}!Q<OXa2Y
+z#M9@naCeC6g8tbF!*w~JBY@Bq$n~z#ExNOS;3yF*%_ByGy(1>=@M|0Wj&_WgUfJp?
+zl@+CAblC+*7rL#7X`H<e<K}(xe#eqsQP%&)()$+c;>cqurr$I37<so4Zbt@1B=z!8
+zdKTHS6{}+pcpfRU#W<=*BB?1$BCKdKJq*}st@qkiAdy)I)C?C_>e<XX)&T|)eb=B=
+zx-^1#0B#5*)fiS!p>Hi3wKMB=q*FvVQIr%G^o|9!x~Z*z+IRuiP%`Gk%oT;nB2x$<
+z9FySkNTgJYW|0LaHK$8uW(7PmA3#`9bBpzKh7|`jU><#V`Yu}2Jj9j#39`+;PTvU&
+zYhlI%W_yV*@e)ZeFc{hn3nScSD8F@dP0OlC(<&`25Pnm6QB*^Nt!_<C>j;-rj%{8v
+zHRYm)lWfzaX}%iDurQ104pJ?1X?->gYfB$RTiiYgfE5q8-EMI7VClylkamLUUNVQ2
+zXt*-#LuO?&E$FNVm}E|4$wxyyG?blgFv}H9Lk*c5QgYfXl7w+c3~`-mSTRa0i%dQV
+z(;igX+#1+e4|p<_NS6ejHZ0KDm3ne+wH{U&qsuq9qB0nGYrqo*{W_w3jUUh$yks?N
+z0S>Eb)E@dZE4)b^T^q+XL{kb$18}U5elS`C$XN1;(C~5$T4eK}D_lu7Pt3{Ef&#Yr
+zbL?9%mkiSypui|DsI*C_sI(SKq)X26a&6IH)Rb9fPs~7s^@svIF%IMw&a7em5{Y?#
+zp%D&pt`brm%$j1^w1TBs0*?pJLA6$AM%J7{x@>^UD}m*P^3=@71+_t_m}z-3<(%4t
+z{F8ujrVvjU@pw1H$`j%#BPLW-6!Aa=<)lku+`eK2a8i@9#H4wbStunPIB8Qs&=Qm<
+zi%ivphQi)t;d0(GVKHlT5&cRt{mL#Ja5YaWc{Dq8F~fk;+S~{tkq;)Ku`QN=$9NaY
+zEE)&;67l_qPwwxA-QT&Xxt%_S{;t$vxrv81%TA-0@?Fn(J1Ir5h?{xWen#!y{mc;H
+ztNo0!Q#%GS2=)R|W9}H5MUo7Qw&L~h3B}mY)D&Ys<JxKOXH+899t>KP**>YCnF7Yp
+z&rBoQ*Vx0*fi_4{&0pLJSlZ1EK>Tgd2D0WX06SWg@+9ZBpf(5<#qB{HhOeA-X@>x5
+zseey5oTTn7mLWSR<2sXnWS3kD!R)+1uYD`Ie+R^j4Nnp9u1V@$ld_pp>M)YZ%-N74
+z)s`?6X3pO+uM1@sjb>gVzW;Ey{b#PNVLYE_x9(vOwJOOI&jphWwdo_Q9V7Y{M|p&s
+zA#5@9sJ|H8ObKwcK^c{Ko2&w>RWg;U8jF~L<t}QN(I}sYV}eE%q#CBttCK&>wK0v}
+zRl2-YiR$5=Rci!o!#$JFBs(a^$~YE)HQWK9m8yQ^lm~eXN$^t7Zq_e-rl;@CJ@DRP
+z^fD@}9fAy|zY^bL3k+e3EGMHaqn8a&BZ(tHJ>#aRx?0(?LE={4#w<(9oaYe>nXaC+
+zStJSNvZ&BKSW%44c0n;V+eO9T`Xw{V0gt=mbV=Z;rvX^r@`&pV$lN`!{|NVB6?j6k
+zT|>05@vm^s4)VJ$)Kv54vO&$sFR&+o#qx_-iuMnWXZttp*HOzm<PJTDm<(%OG7Pkg
+z=WWh?9Z(uX%TYm(p`(!_y#J;9!GOFD2Z`Cipg%bj>d2Vt(%hn&C=7aHtWn#mm{d(~
+z3@KSdHk~c}iW+l{&pIT*o0rcXSi+K*6_*tgEhudSD5x}cq{Qu|KxB;LS6}1RTJ~~Q
+zn$-o7arO^*tp${@VT83r>ZNkU%R$=Zf&siE?e`<gC^9v<q%lF^!qg(!=phyCQA^@x
+zFMb6XW6lvtU}-P{2cbFF=_k6Zm^hWa9OcP~2Lx5D0fJQ}rNW7t?rVGxhuxgZuuu}X
+zT!(y-OAEEJOfBVNtdsyk&JjrvW3>c4MaJOO3EPsXW@U1Lk#bVtpw-5~W(jG?IU)%h
+zY~{e2W_*?{+n^anIc>19vUgEJ{_lbrUPKTe!}558w#I&)Y+(dNu>T`icO|!v3%?Ox
+zz09SJ3jY5Vw$>uqtCx{k%~kJ6ZqUpbl*hm|F{@=1je&~*h>|Z57`r<;<6dgavspB4
+zmNej#23Id5qr$`98<`YWz#G%REOPVWr)a9jHLh8}O7$!qnP40|j+A&TvX86C99w5a
+zdWq@kWzuU`^xiK)v~K&Am|&r|=Z-2i<)-7hWjr`m+20iJo%8$tC(9pz6|RGCjQzB0
+z1j7j4ui=KnKZj^}0&NGZ!aNJZ{E_FZXmPO~HW7z0Y$>=dpTQ+d&Vq*eLn25DKf8UX
+z{{#2a+XB*}HpURj2Gg=7hY_r8sAu0&8tSL<vu&tnJ`9iP9_nWis|Z#kX{cW$tWK;f
+zE5@OIUNH{!GAYcF%0s<Mq)P%1jrGK#egzoAP``>OPSjZb15&c%48B<n@wm@8%r6{e
+z37bUienD8g2}idywJkQ%PxZa|`C4jdFViG}&@hkoCF%fb_a&GDwbUHY$~t@r=2_8g
+zPQ&rOL@2;Pua~$p%>g<lBFfXC*Dt7z(oA7vl1W(KDbXKb5>{~(ln<jphCwioydegu
+zMh6fdG7fq<$2ut*K)g^S*3Z!C^b%&K6{dRFm`OemPgE^5UP$Db{5KVPi&7RY&wupP
+zg66L}ulhydys9=(_it90+Jln&=<>tSpKx%>TddxDw*uQc$3qLVt3dVdS=PMM7ZA7@
+z%#K}d?8@!w_-yI^D}pr!$S!L{-U7`>hy(TBa+CHshOLuYK8BTZ<>893{j%~Hwu({`
+zougZ%-4f%PTmms$j1I&lAHJqGqJa=D8PfNDA0uk#`Ios}&ZGjma1!QoJAWb^rT(7h
+zYm&K7)w8)nv|D)ZcAV3>PbElcJ@0Vl=Ji3OvLD?4@6xlMQY}Akvz+{VCZn<TD0w(S
+z-^yfk5>9?mOunUlwFNVUodP3N8IQ-@qy3L6f7;Jj0P;B5OFTXB9xQBq8(K>?K1B^z
+zwmR^82SoFg=p&}80PA|h*at4yDzRL>$R%rxR`frLv1{DFY7RJ(A&>2owS`tm6N)w<
+zbJ8-g+p6ZQ!({u&F>R!4@tVu9m#-gJoGV4+1i)dXP9`P_ER)A!(R8)5_;gWx_PF9?
+zLd_PH-HC-QIjnsx9*3o|jNH!RD@AcOyCW4zCe{d0ocgjyq3UQAST>KtqKRr?BCHz8
+z6mcYF7v)mhV5+kL=vJ}S-vdhs;`KUObNQ;H;a+)k+Z$e3-96XBlEOO9L$A4j7#$#v
+z<m{?OuD<LZEH$JJ8a~hTHO^_O6qcF1M93M`ZB8bKoL><Illzg3=`aabHsX|qzH?h8
+znkE`1k31%PsBY57#uINQ;Lr*11l1I30{$%^3F#Y*V<eEeAy3+nwy~umgiG#Vec;)n
+zn>+oT5+6R<133sB@p=f*HhD}Ek3NzRlcZuKQ2}1v0D5)Qy&$l68+tx?4CpIbfPk8{
+z>%aHKUd}ia4~6!E>qp(Zll@-3?-yZXnqKuSwpLH|HFoVBsb{~2%4}?d<B<2;&I?t-
+z3{}aGB00@ipP`HGYYe!SXuFc5?^h42wI#c**4Cy}%Gz?wvq7AVk!aZjf}oe8Wudmp
+zt&DNh)&c|7)}msX2E+Ski9%TO&?<0SZCN%Q+(K;;IM%~D3;MuKOcIZ9*Go{A%1c*i
+zV-=*^YU_ug^q?xLp9URNH4o6ERK>gw!(NpjRFz}dniAq+uGx~RrXp^rDvtvp;}B_r
+zfmAiAn9sN;ODjT{O-lD#hw7%PWkO;513}b_lXU1mCW*&XM~-5WrD{%#2_431Q`I<3
+zD5%OqabJVi7$L$qN*tvs=5?rQL4r_Kj%ABVIESgl*|>_Rbpc@og^@@Bs2GQmh8Rdm
+z!;1O%cCs`tR9<fErk+{mry0Sb;7)3mlf)NR0ZLGo#21xP4VY#1>_4Zy!SCPN*$M3T
+zS77M=^^*IzTYhuj&G~(<wNrGi-b}wk`{yV9mNX@QEUd@ZP+9PJR;{EJ1-eE6kB3b&
+z+4vQvov<ojS(HD@(?R+Q`E6gcpA~^Fi}p2Ga`1BysAIjVaYs0AD{Z!?Ub04ghi=~c
+zTnDPmqjvZYOSLB+RJ@1WxVUtGl+#2~{e&$!90itv0?VMIM~uj{)7;R6j)-NmW@6;H
+z;)JcKRDR67q=~wV(t)#e9;Jy10CqAlSrnggw7U#sVwwQSXnusI(8PR!W#Kq1+R6<~
+z$nw}pp#Z#|RRpQ+5SMoF!(LCz=qTQ%quu!n3;&~A$s9Z$9*sD+j-F%<UeBrts^Yha
+zBRRVgyq;hBe0n`JetA8=jlK-ck<`JMU^yE6gp<i(Ir)c`+%&ZAh+xTP7C?a>efCWn
+zr&d$86r&vLig7iirI@C|Xo++Hf^IUEOP5qAZfe*A^oi5B7Z5j5w27?3Soz-u+OW8?
+zgJ@sl6vRXix+MXMIzZB5&ThKFI676;r8-qrC3e=uWgK~S2$g8h!(A)u55=S{tO61E
+z#F59Ggyk1itZ_*-ZR5FI9qoLsijBq^g1rHFtLj@*9~jLi)@7i-w!7u}DQfelolJhq
+z?$#pk2AAqBP#4UADRsG93q{_v^MWlfL+;i~gtTl6s*E&K#~N-K#er!QW8Asr+%K!y
+zjyUvSXq!dQW=A-qrW_4dU~AeHFf0#1zH)~#FfSUz6bc7pm`1d(@j<YPnirZ>%LE2Z
+zADIAV#lZ&SsMWfN(Z3#7OgFwz{gY$~XU)ZgR*%|@!Rqk^v{YvvbG(wJ$?`GDoahud
+z=uCl*aarv0kldg!9ma68TwN+UEF1JS9-~TYlCA8}cBqujuJx3>qYf^DO2-lHYrK!+
+zYx;=L_%5VD(?^DYIm*d6R5~DHROz5%*$8kzr8NbePH<>nL8Su5VLt#zyiU@cy_jT9
+zw7m#ABcOAnN-0c-N@<(6-LT}+*Lcojv(kRac5WV>EzVdSwc|Sk;z5(ci1szEzypUS
+zRoa`3QIm%yi5Z6`cNwUsI#4VdP_Q)UUmZSjyCwyUOQryhYI9PvoMcYId2~5yM{1J7
+zR5iK(gWz+X{J3QYN=Nrv`?Zt$H7zI3QoY@JJxn?=mWrS!AEo8QaO*N&sNEqHrlw?@
+zlgfTXq9&MFj$<f01j%wz6otjW3T+HMf=DOsr5|KcJYlaR<e<_+aA3pAWW>felBQ!5
+zLzz;xOLQghOc5yS7s5}AfR3h1tet{VwoOVnsVRclfdVnMcV{<L<3`0Z{6fX!{(<R?
+zi9p39h+RhYh22mM8`XM5)heN4B2Y1@g6iGSDy9RN5cqut-LXhVu_yPmTg^y#zTuAW
+z-h$8H>|l7riqRTq((M;%O$KwHqq&U4WaHPFC43rZPnrQBf0J%G!d3{oE_TK#0K(+}
+zr<1x@M;F4+d50%Fr%<}EhA0;rLNWHnjCxgd1&YJmA<QH=_=OeIS&Da6lL|q5HUUuf
+z1PCS_j5|=Lc~uvR1M~sPhx*pI%+4m9+_&HEnmfYdCamkUSgjOC!eaZ;x~**JxG9Lt
+zwzS+>VA+xB2+OXc-Q8pIVjC^F@6?WXIV`ZKc^=0Ldj?Db;vx5vUiz71y$m>dG%th3
+zve~KKp#qEA%yGPo7)z@YORd0CceIASXA)7vmex#hG)QPZii^o;ALIIQHk@-l8g9aH
+zVM+C9xGBShNk|DUp7Wj-!01Y+5cABjLKhr8TA_=^5?4;tzJnjm$rW;OX=@EZ8XCPO
+zA9%b0FEMNyIp-!@j&{<)DKuoAN&W=zJBaa>jbv`2uA3F*M>f#maNiK!kH=p%TgxU}
+z+a(3;C8(9sch27MMVy4OE7Bxv8_pDaL&AkEIZncU+R2opoZL`y9NCtUOXnFuROgBc
+z`1lQWvT5nq##X>aF{v1@^-U=j{M@Ap^a&A#3Ssp!FEpJOnsp&{9X@##3S};2N*Hm-
+zMVRs@OLWMpPLa+et1xD8i$ELvqGd$;8Xw06H+T{vhy8q{K}<pga!X<fN3D?r<=Gna
+z)C#B$b|W_s1>{jNlnUe~5bbMx806rFiEB&@r9us?pi1D#XRRn$SHUkqU2<}P5&&g(
+z-DfZAo~fc^et$ia9~E(o1RQ;h*Pt-Q{$8?+O=uSOMm9I0`77BtkRFSdN$md7G-*n2
+zZ9V52c8{OF_gm<|QC5X;KpAC&o;KDb%aW02#u{(_M3PL6@RS6YY6^5K)c)V1)90PO
+zfWYZiS<_8Q&B^K0mWK5cQBOK)sz_>37jhv7n1|hY1bZ`h>9M;oPd#&R^e8Hfs?6c<
+zKBJh9Qz5xyS_b+L0P51NU+!df3+3r}KO_&+@&C791)1XMcyE#S0q2EYff<^P-z22v
+zULh)dh5UuncsMigclebo9ViF~(Y5~|@HCTugd+e3>mmBK*L?Ch{4MT=gecu0+V*Z}
+zNtCeFL`;~Gk&Ae6Hk_4hpCf5CMqF?~2c<&$+(ERj@iR6FF$8DX<OmhSToT7=W`M?^
+z$<3=_wY@f!uOBfllG`lEZHe5EfgD=3xW*MVsZeuq2ua{raJ?wlQo#?p;1o&#l-XUo
+zgXt3SwSc3q@m2qX_3pz<$;Ju`qX(1>%~k%w^E&=D70Vyr9jH($OhHevJ23LhSo7{6
+zkYs9vrzG9F1M8&OZ`BMSaI?3{nnO+>&eL5#P1a9Dy=wt!At9+jU37E@_u%nYTCl*|
+zgn8<j>)st);i{_IPQD=X7~4lL^_47bsd~eiyGr|Dp7g}w61s@PC8B+ekKtWg=%~GY
+z5GrW4(moE<uysuxJ=-R!R+cPux-62LFUT#3-0y)L+K0H#=erY-0Y*>YSa7;1IIDus
+zL_dXs0hHNY+s9f-)~SF4N4wR@`TZx{2xZ~aE09TZlE2Vsq(I#$v*d8W?8$W-E>#Fi
+ze<&OD6x)Z9XU3Yhk3f>C5uTECYah}u4%$=EIN^Z6?ZYbb?fX<SeWxE<niJXwb<xp2
+zUhJjVF2X$Z%yn-cZ^vK}+6Q9VaDI&KW7`Jn<=1c(v(i487wxVNJ%#o$j%Z)w8+*I7
+z4?=}{thA4o$@O^T_vw=gIp#%jBL%sd$bALK!OX=qPIcM{#@#*$919K=1&3AedtESq
+zGP`U0I4HG`!GNQ$v5LZ6eo`CQ=x1TP^WYXSz+Z_kWhFWRFCLB`KU63cCPSyOeHeLW
+zta<wgB$*oFDM`2XVVyMBteSNMZU<IbbJOWtdHSKHIiY<}7ai^6pL-#<i!e_;bKTp=
+zo9(?*I4%X2)VFJ~4~ite-`36HELKvf^R5s)m^pi7E{vx!ARe+o2BnqMjl;hsZ;b;6
+zSVARRxc5@9r8ts?qGdvmQnpLvYnq~BZ-4(SFppVFKCPg!%mC+sKufETyNE=4niNQL
+z3PDK92**BFtYu;pSAFnn?+&(KELqwHHx+E`D99#6B-;X<EM^-Ko1nQ6PsdPYLEvUF
+z454MJe)u9h9~0MV7frQps;x+MGpA~{KF4`fMugyo=qlXQP$9Rs^zg{4fmQ_6SXZ#I
+zh9HW`IO?!Jc5SG`QnpKUtHZtbS;Hj*1~WS{lExyCsv4I|lsfG?BOFQ*3L=Qtq(NTy
+zPP-b1O=L(xc<m?K5|L~kaH_@yL>|M4s)C@(Vil?%WXFjHVXFP6YPUCQnd)?;I-64+
+zDKn{ed>#uoL<pKhSK;Obc{P@uJnG9@o+K;W)R;mf)@K(j6Aq;aRiW^Q;@q1L;dvk|
+zO(-#2u)O0W!n@}ah&&d#SP)cMtU~pIsnS70Kd_@9JW-U*nrbalt>;u9mlu^0A-EyB
+z3O77H?#5El^0>7;OjfAn5k!vBGT}ghP!$R@lF+*-X&B}<ww0LGEbkzRP|HJzJQgjp
+zAgHofh3Yk8#yJns34?BMOR`~8?T=Ika;j$Qa~z8^A_PsMt8nv!phzwAzsh|o?Dq_h
+zB^S1M>c;1(4)8(&{${XPt7k!Wt234G0_9lBQt<Xix9dr7J;5WZc%vI{B39qmyn+9C
+z{oqpZar<q!?LGo09?RW>=#sGb&2?2&aKD13VFkJan{0d&e|Wd8&gcm@43NLYjVOeh
+z3_r(BHxyrBaqpE)qYZKA%K?Wr{G#)YU=2(m;G{8ZpzWeN%G))&CN1GFsFTvBlgII6
+zHo%rus<<;ijK;E3U|DsvbJrp6k*pcZZYMA61(w!HST>DirxVLofo1z7Eb>fBr{D^S
+z4hk%XCt>NK0TkP4vJmWR&}^_@LnFd|4NWQyW+PMbe$5EWdS9sKXs70UI@S9%<HVMn
+z+th>Ue1z)U8jfY){mIc4yg9iHHWsZC)$RmQ;?xE@cJ9u6y_TE86a2ni$L*Lea<Z&F
+zyf)6{|If#xWZtFZk7z}R_Mfkq{!5?qAa5dGI*pEQlIl@1rj0oW;#OPO<M+WR95xWg
+zIy4xomYTx=Dp~xhvtM|aWWC_UVZ2SFm{&33SP6v=Ax0De#Zxwb3rXH6#OqitI&ZQI
+z2x1xQ4zF_SkX`7S$FfHV8ew`_EV35fP6$sjhDU7l@L~k7kr)nQ6>RuX@#8p~G-p#K
+zss(4$qOa*YI3s8z)vuhOG(X-G_Cxdc9w$m{jGMD^Qm4-Rg03I6i*$NS$IV5TK|HLp
+zq9N*t0^P1ey8MfIklOo2EbOG2j3}Pd4@R^TxoS6}&6o_s$w3fjI-Hha1xq9T#jX%b
+zj-^AG;rj&9hzMsR8dM1ykx?{;kbth=>m#~-97Po<4ypqnBzZADU1AbvbrjaeDPx(U
+zst%-ySXBg#FzrSpIJ~G&l;JfPJOxzH+;C2_oOB{*EpxV6qFQja)y5e?BWL}}iAE&2
+zWU1erZ8HyBM<vdj(<~=-a<(Bo!!k+*H-)mfu0XrRHliJ;Z#jJ%L7Nfr#j#*SaqaD2
+zxF=czsDx-YqUD$j!^uGqXFBTdfIg&O7R4`)uJ~2D=TR}DLx9_e<lCz!G72q<!iYFB
+z0~7bqqe?vuXmU~zlEV9&OPVLd7nF*PD@;_2sv0LkFK45@*GhQXjYx1flPsrLw|Y=j
+zn+46_Aj|)~Zq5cJjSh&$G6iSDZJZG_!n7Na;IJED&PIe%N4X-nbDDI}V^XKi$}hb}
+zC{-eM_F0$SHMbG5qR|trIDHjC*@*UsiaQ+h$lD*-|NQ-@wcqtnI#-YwiFZ3X-d8y3
+zK1Vg*=f7~e3tk}(OJL+aoOzt@;lsau;_!w0Cev7A%=<&XNtXN-^x5O8V;@^jJ_9S&
+zQZk%nB%oDrdW0BC(iS}5*^1sTuFS5D-rhpykc#u(@>xuAIKMf!Sx;Z0=N!;-Xf0=w
+zzjqaL2IL#>@J@ar9uN2!_*;ArKQ8!gjwAup4`haWZP^RH>1n5W-aUY9->zQzNZ!fu
+zHZI>nT1N_+R9!qjvK#Z!IWP|K2oOvyT)X!kbJ$!;!ZUzh3L>aWZ+Dg6;|YjTk*;Si
+z_~p+7M;HVn!-0)*?^}*bxmJ4AN6uQH9Cq0Jd}CI;HBzPgZJ^Af8$nZn@J=C~R??%W
+zR0z99D`8x}+K!Lrs)CLTrFHp${qh-fi~7*S&ehrgstPlpTL05gQ&(%ftgrgjo@X)0
+zUNC#psh+XymhVCEZfrI8ysM~Ad?bOZe7<suMSE}&_=`_q+8X6OM*U#)TqD<Xe0gHA
+zYk8S#u+?b8xouBa_DKXeQs2Ca)K^I$p^rF4*t}<E$pGUgWpR{M$j-uBA6?&TnICcO
+zmXi~(c#+wpxQ6NdjAc^14cB6P?$LKj^#&ojION@))1{X9$qqNfdNQ-fn+j-X^I%~?
+z-06*n(Up3JM?kWf`LXob;0vw&&&QIz_{ak@gD7~aFCAS41_^=v&>;!UH~zvS3VIcH
+z0c=DCS;F#To0t*FnDvgzB0%+sfZ<Cg>Tsf7{Qucl^5Xt_@*@MV5He@J@kZ9nFmyyx
+zsJ3|p_S2Iq#+A*5<9wy1enD{k=}PzYnJ2XWgxQZ{y~kaeZZV;k<b|fQ>t4)3aCXZ*
+z;|^AU4pA)#XX3;dcb?L-t+8|zMXo~eTVtWkVmW9V3qa$Q@1dMNH-08P2VI>zIFp_o
+z2pYZ8dm680#_!3AO!}r?XXc-b^ZU|z)`1reAJh5d6|b1ECefd(LgK}KzZmCN>ynMP
+zs*<?=5+2a-v(p$8c380pw?o*rQiAkWNbh<+`ReFO$Zk8HjA9ERecs^-=aapp!VV70
+zCN%_M*+eeRRaqnPAd?LX0XsVcTL^+WgQLcyh;}-(tg<f0<CtZY76D3^5=Bwdcl*UY
+zS9}tdZDZN#<YmW2VPD~!Cdcq{U@ZByz=D^<0!xo-@)#_=1Sl3nN_y#cQSvfy5|%+@
+z+3b{PsK7FO5|$BTX?0?$6<F#gVHr1;aFRH><T`X(V3|4z%e1kCjwu{~!rf&gqgz~1
+zkS!ueLu*kB@<P!n%X*<`&C!}gYU?!Dk>!P=7GhW^T21Cw(5Wn=TUbPYgAbGNf$eNo
+zovQ{VW3jyvu^&MXD@HHS;Ttchq&`i<rJ-AWCTB&A=mKk0FJ*}xGoE6WIr$<X?zD<%
+z@d>^(Q=fpL%wY7*VHj+D@Sx~<<SR_PO9Zs`@pXt5!w-!!(A5VuFyb4)ugt~QO2g|q
+zl|v3Yu`tdY(XS6@DmZ=UYkZ^^!(jS|bcka=NQ?4`)%XHnHVGtlc3HLP|E45D{3uqq
+z#T(x23b*34<Ro;UJY7(p73G#Gk4NtO_Wgv=(odaK%ui<ci5qj4TwZ5C*LD=>FOUE=
+zkp^_9lCWI-io(#;u<{}7zS>tjoiD&pEW#Tw@IY^z=7uHrm`|=zq^2NVsmJ(C<q(zA
+z*-Sh&qkfTY)0Xq*^pcVzYFUyEKuKCkszVkiaU8+kFJoEqSYe++<}jrMOSI)OhtJf)
+zDNQ~<O7|Ge+I^Y6wuojbH>!HJjSiO-1ig%aiD1?>MEe?lB^~*To2jy+dP^D)E7vyb
+zL2%1C9Eum;dh;6xI6Ug=>sO$gdXe%_L3vn||FbFg0@Nfq@7m}WTAKBMV&QyG+XQ00
+zb%a@y28>4~;WXn{6lT#32|Hf45$fU~Pf;ww8!+(D#jMFSC>^S#ma}c9ZSre8bGoW2
+zylCNXo__9T{SmrX@U#oA(Voh}K84J6H|u``4&9UI_e(E7w%+<cHB^2vD9ohl`H|+~
+zl3DivJeYMaqJ53e=M}kBU-W{im>p}j-K;lRP)ifrh{3GA<d*l=Eu=!b%tUn)8l7Xl
+zQile`)xAKOi+_EMKgSH7;{-rUX06R-ttxn7u=7y>^w#{=dPi>!vR>@czIl`)*t5`v
+z5A?+8JGj+Knu<mEQj#Z)m2TQ{hR;*!2?N__o8YDU4yqq;CWXj{yl#8O7(u0J&%e&{
+z{-EjJ(<yydVV`>Dii2w<4)^Z?d#jRoV<oTNcz;HYNKm(5u*}b-m2rG+xc@uB4x}pt
+zl;F>krP(-%l_sn4Y~?yD7`M3;=(AL@p1GilUX&B%a#G|=CGs;(WxjYWtt1<GSa98}
+zvaVX7wuVT=xhO4^Ma~F^QiQ@lq-AEz>hLR`OPg|+IjJCw|KUZSE}uV&A8T0^_+xVf
+z==7PJl}>Jc)oirOTC=PR0GF(bh#Vs;;UFuaDzd6ty}=8GdKe6YqCVyZ@L3Y!ftPti
+z9{1<~S&0zb5M70v54f7zW$m@BQ)GknI*rINvJwv1301-VdSS1eH*|-Q9U6QBfn=RT
+z#IioFp2O!Daiz19n?FKQm+!H5tlxaYdw8|j0&^*>SVGdd1+1*xg8UxLRk7k6-$9Pw
+z*Wx$uD(mV0$nXt<=|Oy26`xbRtA8x{Dtu1$PJT}Hj$8XJv%W4H<cZ%(9pY%|PbTLR
+z7Cq~MIoE{DMV}E&Hr}i%A033*um=RK0YqmV<uZ;sjmNosgLRq}Rzc-<`D0$bxz6k5
+zoLgeihVBFc_M8a9g3cB?i?HZ3Od+qTBO-I}*D5U6e#QaweqSrcuN{EBUjt~cvDCYp
+znoPUj@W~ol@Nt))mu2FkJF#hszObygC>KmtPr|ZhEcxP1fn~kG(mDytrm<{w^0HN6
+z***!&j<Mv6Hw7=d1(t)8upAmotCN==nW40+KJGZ}_7fJ%?wwc$3M_+;)(liyREg)7
+zhKwaH-jr&3q`*=;2}|8rRz(Kir5(rbu{Z_S%o-~}Q%dw#&3)n}4XrUeu*XjvFPaoB
+zW7*M8-s2~B{}k}61WN8&N#^pe)M8->i$Pi#WsiW?fIeVK!4WsU*My{e<NMFNLNp;3
+zyza>rqTg~dCBdkrVod%OFB}<qgTlv3nG|IH$yQbT(zt^1ickcfHuwSqJdkW~j}&2h
+zuKYzlzibdTfw4+s@M&XbF95lR5D0skspo@U3^s2t_7VW&u4cY0byX7`k5D)wMZnZd
+z<CG76VLCD_4t*vJhbQQe;7q;Q?!hmS<ojrG^W~9YqRG5In#IS%S)#HrgKuaF+s2^i
+z`X%k8ImBPM4r98z2!hU*43`NYJ}eV1WBYZo@HvQl*0mK2b1?yE<6;7$eT_Hw%7vG9
+z@E{J-AT6N+xvHxoe)NrI17O=M`o3P8%Qjjidi@2x0nz(EKo4^*nsK18p?XZ4sz*=s
+zJ-r(O4D7lW<%(5{_>Ej<qLu~}WP}mA@M!ruk}Hpv10p_J&M2682blx+gTfJ)AdJ}e
+zbn&VoP6FErsvBxVL8FGi>8nm(boz3h9;%bo6a}Sr;bKzPF{vbbOqwv%WC^P7r12st
+z+>>tb-VLgiH*)q~q?IXJeZDev{gyo|BlH#@){gZ{51WatHp|wHhRmBpncqFc7w=G_
+z!?G7_*}9D2k9S~^XcN4`vN;Ch7rpNw`I6x>0i=5T2-*@gyu~GOe=aAtY$mEORIm-S
+z!LoM{?Q0xB9YNbz4xsK)<%A04DwaJg0>%5L+z`flSJHg6Y{Eo(YX!Y^(fg-3e+kR(
+zhyDYFie+yBmo0mT%)k{uxsqj@R#-ZSXKM%}biuNRz(TuauK*%gwxYCbG6(Lr#l1hF
+zjPIT4S4JRoUdsq<!GZ3svNh3nIwgSudlcwVDyO%ET=f_Qoi(8+#Ing427?0x(Xyws
+zI3>$QOxH87-?9%>v3j-}V(++`cVkVqS@t|hXFfHUc^Na)r>HtCy9dgH5l>qcz53Oh
+z73ZC+`Z(GuINujZ8=FB}0&l<L?1LxhLnD7s!2;ldWiKMy*LWp-{|?J0RH%-MWv^J|
+z)riuTy(T82WfMlFL2t64Hzj(PyfR0&V}(yyglPrY0s>q1GGego36v{YwrMq)i9Vaq
+z@FoZ&biuNh!9u%bj{_oDwxV2SSyW-a{E}`MW5!(6Z5@G4G!R@7uv~7ZQv_&k-RUg^
+zPM;<M?BpSc63!a*i7;s~2HvSyuz8?BPgv~z7|gl7DkJ@phGWu%S(-!;lj=?yFOqzS
+zHeaSH5yRuhJ`#u3Y_{pHFx0Wi;M6Ml%r5M{BL7zBFjH`U#{$$8Y>Xg?>@bdIu@<cf
+z9d9YSp%VF8R++T~N*IzX!4GQG_zU~Xz^FBk!4jD#vTjHKG7&xMMiSyc8-DHG%vO#2
+zYwiX;z;AfC4{xnxy@1nVNk1Ysr9sySg^5~uBH1NHFhzP5c3%mlLyMaN*k~DUM{tcp
+z-ksvgQ4fAU8ElaN*dqE0Tfb2ZAK=b|iMNc>Y~A3y<c`a02Z&gUX8*|=V=__%yQEiP
+z_sd+{v*Zk0o(dX^;!{^?rNteTdor}RZMKNM!q%H)Req2#_Fq~>Mn^hjEpDQew77-H
+zQ_`)GBD6?)6?V74(ox@g(f3FX*zbjp9Qh0E=r%Yh!;+CTd&G*APg=F~x$(BojJJJ@
+z7^4g)f?6KTxJ(qzT#Pu{ImOmFHcy>-9E1x@SZmnDNvj=9ueWjTBCMo@FDv4`-5h^i
+zF+Nx}?qX<Y=QiUvfzKqr0Ub>+Ck=&0*8mXKG1|_R>y)7fQt=WTT_0bs<1E}*@|V&M
+z{7eJ*owx9yS2nsbmi(Cj=r8m&QjIP=IucG;>hq)h;&N^tf-OWVmbTI*IWoBOB#3;o
+z)v2Wql;h&4<k7eE(5i>^OJA5z_3105jU&z2^W6|$seB67dxxLQ`<W7{^F99?_I$&h
+z^*xAg_W{1)@$FySu;(lF8~wA!j~o5-N%!Y(^v^f^jSB~!vEJ}E;AB@0<lpe0;S+P6
+zc3M8`4gb0Gyu?%NZ{WQSUJ1c$P*bWSp5U<EmhT>7R-<=UFiAVN<CzAYO~8+3%-psR
+zZiiz4oXj~t^@If%r^0-2))SW+Rz`~XN@dr06ceRU?|^GA2O6nptb;}?5Y|n_KqRXJ
+zt7dU18uu#Z@U=(J-7p&@t$I3x+;d?DR-%d5m6)A;9J4l08*Ba7@_l@#%q(CLH<0EL
+z+$ojd5nP$IZwq*L8mk!6D;`M@)v!UFPwt$ma)E!-PccDEK_~UJ4tLAanPo$S@1ps>
+z(LeI@HR8B!zIMaj(AaL++mm!Y?1sJF=--~o^N3Y@L+`eOQ`yPfTd`i)_Q`Mj-o+=t
+zdok9k5Pol0es5NOw<^EaE5Fw&zgH{2SIWQBxwqnOst?^9_BEEk2M1{Lf@7UY)1%k{
+z24jwZ@8Lc3kjv{F&cz2o&SCK5C1xBO!+EiK@=^SpH(;q-%U2AXgSC7Oe|GpVu!UsY
+zqfX%tB>xeE{NmpCVGln&`_}yY#M?WWq&HDd$RtPcDwEFTS4%YL;!USEK1-kGt+HAN
+zw#X{uSS_}j&?Kgi<3~WSlSqKT^Uw0w2Y8M<<6U?j5IA`rLafTObIJ3F;BYa#tXr+0
+zn|_t&LBL0z8IQ~Eco(L~3G44(G7da{5<AM|nNKJ1Kv@@_y=_mPdw{FTvvbLFKk4!|
+zb{o&VIsGcnho!wq#=$cQV8xo4qMlhEHfQ9vjc*G)BRGoZP2!VnY$I0X*}3GIrw_n$
+ztDR>aP3W%Ytvn|UpV?j_0q{&rk!O|%&qi*Z-vR|w&oB}3{8F^3_k4wo`n`BELq+v{
+zjxIIea|5ga?&nseaW184k#2GpFMgC-WVW7jR;_{6JSW{?95p}!kcOC|G%OEkjNH=v
+zI!qk%*)4VqXti75Y?)AacjY1udHV;ht0Haxl~{-!u4lJwzK2tb9b9j`S{qbBykPMq
+zK!gV@aO@BGYQ5p<iVcEhw|ssJkC5=`iqq@Q<Nx&yj60HWzX(q@@)3*hN&&izuLmxw
+z7(K^hSMe0tm%+>;R#mZcsp18}o!xF%@jOzy8_aZ`6R&M9kpNUoOi{%w4^fQVDt<YS
+zLSpMJs2F<FC%JMJPqGO1z!2mrzVPlYDt=a16@MQ=vs?Zhf|FHDBI=c|fE%i~H>jB3
+zyuNNL9u^i_aSgGmik(Xpj|=YXZo7)>NbRoTkvu1U{Mu*Ku=7>qg!5|Q6Gm3?ry&JY
+zd=OMj&W1=kTCslMvL@1U72mYcMaAFPRmFev>r!zIB~Df`iBQG+uffwHFL)G1-~Hua
+zPw(qk?4<kKFSm<!<?WY$i}HB;<s8v;fBS{=^G7)wn+KI*za*J~7XAV6Y9Kg=QT;_6
+z*$1!T&6z9xmG?2kRmXgeR*UCoCC!qB(pNo`jpr~en>&Cf!okKub$UWOWlyDxXH@lk
+z=;`zq_~cx)qtL9o0>#m{0>#0%0(A(MD^R;mDpTC*glcs{t#(2!cS6l~LQQu<u{~D!
+zs#l@H$5c~SLaHiBRSBiV8VnZOxgYpHK#N$88vrJBPpU%SNghi|pTET&Yy!k)s$-h?
+zRU`evi7dWig+|qnJXd#Ge#?^!Gk8}?<aF9jFnhnF!?U!O-1$3>GiuDpaT|-cut%@J
+z-6hW7<5!upL!2v#1$y$r@j7zGBy%=NG+s3_XU{D-L!;9ea~x-@Ir1<%CgA~>(9i3A
+z%Q9!XCC(1=I9v;zgvpp>&K9bi{S-Z-OgdxRq9b=4XSCR;f);V%J9i4?U*Oj|ew8`f
+z&bh&>jCmX%wl-%>GG}W<Q`Xt3g0twZ9mm-r%16$2#nRG&g2uLg?I0*~wwZI|5A?Zk
+zyltFq<(#Q}nX}i@BeTw;Q}%L<1USYsKvGwAOTt5gFHB^<QGMyXz0gpLlH-&by;HpL
+z&EV1ofAw7aYC22I4ww>uocz*A&&6l&_r*;9{8#(m1|Y-wtn2en;U%_(#(Pj4cU}L<
+zTNHy^II#bfx5xB9Upo~bcJ}{#?|+9Wb{~S@d`x?0{}=Vljt>%P+JHm;{zZSgtY@CK
+ziv`y5c)a$i3n{h$`|Cw}=9S&Ozr(N)bo~XvKIu9{4dHE}Fa|HwGtUdH<rS(izOI5b
+z+)Ep?;L9pjUasOg*)CM9%tFP6^&@sc#Xpm)n6W~|N|%Ziql#Y$?jO5~r@>Lw*d)1&
+zSAoj!wv<)8kgL@Xy+l)HIyAM2z$zXmwvs7J#mmrOP;qZi@ojA?E}Zr3T&r&V&J#7K
+zKUi0<Uz%(6T>J{yr&6P4&n`->-yq9X4%PZC`_BhU281gSbowTsv)M9M=v3*_sbbXW
+zK6vb=)0_4mJYo#GFP>}RlWBaVc@*0V=T^!ZoC4LT^65P8*MPw;lcd49<*NGjUrD!X
+z=9iChyOQ#Adk=MUxxNr(;d1@SFLk(FeK+s-)E~aW(Ts10wZ8|(PVtF(uTp}y`C~fY
+zH;B%SJvwB^!Va5mvT+6fKl*fE*Jr`J>$8Y%aSGNarmt%8BSa@cDsFMsXr5Q~TxG~)
+zXA+|99vB6jI`*r2<u_!qj}B1|QH<)8Cp#aw3LH=?9@>hNXz{N2Y-71IX|XeDx)aw_
+zClp<Pila5rnKaUgYq%3?s55D>GpVN&7af)g69=71yPZj!PAYuWG`vwEYe;1V3Ev8x
+z!R+!};Ryb*`VD=j95+~`e0=AT$l%~%k82rGYdawHyF6Gus3V6@i2GFvO&|PaVay_G
+zS|7|N^1`Ln2&|(a`AqULJd}w3ehNR}bW%zb>>o=$ff)$y801BDm6y#~bHsRwI+9?w
+zWd2Gdv<kV%BEC(mm>%B{C^{WwhBvX=KFo@XDBBSwZe^?>?o*vV|4fcye&8gD4>9iu
+zv)*Hdu2=_XcU!SMz}J}+-p5X}5dq|zfWyjcd(C;lNz)2+UtDL3L+`smWx-z`cQ*Bi
+z^+-cZIE@TzjZ&B8_WlzLBF)$b<PLV%8kY^b#s>jhsqrnHgZAYp)%dm&FkuYuz~nW)
+zlOMn@RR>nbket`}0e+yy*+$AWUeHyg9g2i5DfdXUSmV7pe<c#C@d3iAaKB=j&Bq#7
+zX4)hb^#1C3JglO|`@xFg61^7W8vnIE)i^Uzxh?Ud`7P>rlfRM;wqX3~jpd6PH@M!7
+zF1-sDkg#-6aX6IU@#Q}~TMl$o7HZrI50CDI8mF!?f)7bnta7-<clZ@)*La+`bggmq
+zfUfbif*p4nXvf06q(C)3r3BTuFIL3rn9d8Assp>}NX~0~9zRgy>|x6_UeI+j6$#b&
+zqNAZ3S;jA`t3*OIzDhV1UQtX-WU<DTiC&92)f%tI8bcdj2Y_q*xA39`bk0mv?l=p2
+zVF`6SAp)MlCVHkV*5EoTAYNS#9}vsictFC^5nil@&uIH<m0K{y1a&G4WUcUUk2=)&
+zw6grY9<J%T#{UxEhYd9zCxl&Vd<9~KUcFYZ6KniHmoCC5fZ3}bDnT{gE4s19d-B4i
+z>PU5CIIr=3z@WxCK9_5}psPw7FkW^egKZ>+x{*+gj}T6UhZWP3aIA4<;tf6KRBL>`
+zRO593xW@k&D`wQWYh3qs!ppe$8lrA^gzxU^gS)W?Lya3;x0Oq6JRo7|2rpK#NJGAG
+z=?Q^roMM7Hm4zC&!o$t$P~$x=LWWDd`e*UQ(@^7aqTRK|cZwS4-H^aetnqnO@R9<x
+z@dYKQ#+Mb1HO`wjF5Fh*1j=iC1wT;Z+m#wG=&I6Ijh8jP=4fc+>-g0{LN&fgI2CRw
+zR=gUEaa@_<x^lI~TcsM`Mp4)JU+EPEznYX^CEZm0$E&2P{<Rj%ql!X}Pm=?@Dj`Pl
+zHty86dyHZgGiJd{RM$Ag1Uf1UHNN2NWd?B^UvwH7F4g!mz;&qcxPbA;Tz(DDLtNFn
+z4W3u~35U#cd{6zRge(iQ{vrD8m-O_NXV=OOm~i=?(igL9Wfrq*!+N_b%miNx?4AiS
+zrkUVvT)<GeW`c@gCJ5tS^~gK{$i30t?(@Q@@BL-rmBLcEXc0OtULmWPvF>f9OTNCv
+zj;ls#xta}ERnch1<M`EKV|Yga$+;Pi;0Mf@vzT(nRnV0s4jL~>3^@uj4j0?7F|G@Z
+z9h7Lzyyi5(5?*`>qPQeF2;o{1c5bj|JxJ)l6R(2us2XnoUK{TZc*5s6n?_I^Rf|^y
+zH+n^yC)WBE!x8_^cO!Fa7c}lA2{gBMrwTzNYraj^+}YZPS<;tLVeK{ja-9TgZ?H=6
+zq&QbK3gf83M)n4@04vWmE+hRx+2Tj%ZSGhp%9gnP5|%l1n=d}d;zM<pv{7JN_hmmn
+zs*+?QDwi+TDYLM3!+OCl*!u57-?nwe3R_pYY+bQVTYot^>TYWwRa@tbJJ|YUr>##Q
+z39g0$b=m7mkgc~AjkeBPf?X_!K)J22;RoF^Dxoy>D(K2wmyMUUzTzlteTq@p=qh3z
+zl%lOK3QQOAg0Z+H-lY((C1Dqy*=~672#+w()~69G**bs1s*Ip)>qG?bc?Gof1;uFV
+zTCPZ%bs&ni8+vv@r<p->TX(7uM0oRUvgXdVPBp;R*Az6@6*O9+?6Ew2g|(Zle-k|Q
+z(7X3yX2K=?W}B^dThAL8?&^A;Qe$6!cA>PMr<`Iv&wx0D6D<3?fzFoASYg>pmt`x~
+zY1wZAr`;{P<da|pZ#|gx_GfbCM^9u6Nib^#GV5W=<}Q3h(P-8+{BljSc_IYL&3Xtw
+z#*+JZo+e*TD2U3Y`;C+~J>V#9dWUSt76*~oK_=RCFH0n&@u07ZVYf?&mV{bJ4st=;
+zcojjNGu{P2$)NcY25kgogC-&v@1X)3bdNZILF0Td-Y1Wy8BAGlX=b3@l%1-g5#Ah|
+zAf93bQkycRhbdE!;Ky|lK3W<~xn>4ByKQf2fB8=zwYJ*vIg<}|TVMV8w`qO#M-d#c
+zrLCC{s%!$|hlUPDiWfk62c`Pg_bhIb<on-G>Unz}gLyLV!`{Gu{P$dC;idI)oX_OR
+z4>TQ)0LjJ}{$KArsmb#Sy)Y3skZf+N^1FJ{a=tyk+j#_y=WSTy5rq;V-8iV=;>J%~
+z5*#QbrQ%&*JefIY+s=po<l#+wPV8(ghB`d?{5&b<??Rz#M2ANYlOB-aN}ZJEU4wZ}
+zxWIwMGbEv(HZsjKu8j|YuH2~P%HDhBvr)PEY9lv*3(h8xRpG2xIK^3Tx&vne$mq^l
+zPo9%=#w2iNWI8}-&WHs5<=#-iSzHxs=WG&y70xsfvd#`TC(3npm`@C=I^%@fJm;J-
+z37i?3_Cd@Uk&v?=gJYOx(pg-+Y3FRJle10Xl+Lys4LalOySvWv$uK(hnv|t;f8fl>
+zG^;jen!<y#Pl2DnSzKjk=Zs!=MQ5u8XPiD4I$J-Ivz0t2=Zs0<%*eu%#<Vjcq0YXq
+z;4IFD@6e3VPe|ZB)G#+#u4g#6>`Cyl3d1GheWgot3!V=sH4RTs_|qQ6+*g^!e88}t
+zQv|Q+CxO&n6Jy0LsM6&%DaKvUpM&9b_mdtjw~^8Lib`k6x6N?g(NNh7_|?6#r}La#
+zrA&fKjjTaLu52O+6R^F{lN%~i`~t8<H}u=u)Y=Ma#aSL~%7(QCA@FCdpw=~SD^H1B
+zP%Dm&Q;FVIR!-rD8gO(ax}mQ{K`WH8LZM3cVgezk(3c(Qc(yBawW83vcvI^ccQhz;
+z0>8Q|w3g@O3S|-$YGgWUXoV6<ROl~3U!eu{28BMqO`*F%p}SBhzDuRkCL=<CQ>Xl-
+z)up*@D^#h`PI2nDP^fYWg&GiB{J}#1HPBh1j1>x1x)iDy70QR@ug5~SDheGS$F|Tx
+zM}tC#@T<E*`}3S!p-h58jZ9lNRw$7Kh1$FPwg36Lz01!-N73=IyzfML?B3r>G~EtN
+z!k_eU$v30U>@P})vOjU@(ONS1sj3T+&V8!5Y%%ji7Cjl=-FujZaQ0JSR4nJbHsp9z
+zD(9RHIS>I&v7GZQA;-OPIp@nmj(f$K=XR^joAyhLkwtu(0=)rr3`V!{n~b{sUk8Gp
+zt04HvfS?y4xc(R2Ik-7j&HlY5@;;gIhyT-2_1ktbW4K%0K7g{Q+d5IS*DcSF<7uHw
+zS86!hT73^k?A)kd)EPR6HUoJQ>i6${{JQG*u5R`F<0y;zog#|IQ@;;Cx(M``4=kd0
+z3E$T{c|P!1Z)#QN2eWjT+9w0@q1uy1I-!O;ljww3aM6FRB+((RB+*r_BppHtm865t
+zq}|S>ozA4~&ZMo*q|MHxR%g<BXVO|{(rRbYN;S#v;QG^W)ydO$q0@wONlU==NCfi9
+zQ+z+yN1xNB5dm?RVTv&?QB5n#8I^83cw#k+ME7!~Ndi6(Ap}^?{0t^vlll>^<J9_5
+zzK#^0f6>R^-vh?NTr_?FOedVVjeyCX3jYpQIu*+(v}sQu)`d2a`-b~CVmfBS2nJmX
+z(<CC7!$YCU*_c$IhlWAZ+=snMN{BR5=Wg@@685(H=<~FFsjFSVn}8}Dh+M(D-bGiS
+zHNXL(*V6W&qEhgI_K!Go9YSIkAqC6jH7dBD1#x!6<*DF9l$U}@s7=9w4gQA|Y*JM4
+zu+Zpol@;9Eoi>qM!94(wf*HxZnkErN1rrA*V<zi!CD<EgV%!R(gix@l=L&v<4tPkx
+zaVp!c;2jj}qTppRmxk{N(t<aYAO&wJDh01d1}b<Pu`UW0Y*cVd&>P$0R2IC76e*bW
+z+7v8U%r{kp7Hm>f@Q%{5ElE$>>qzKAo5-!;HN>P~Mj)1j(RY@jf{6nPHren=Du09}
+zDwq<24^z(-{AD-=5-ixhS6`!D!H3-yTsJ2QWWlpakb>tGm4e3^)!NGfVqJt3Y*g^H
+zpu^XprQivqNWmo3reMKhj;A72ut`zDi%Rp}u4qpop$lyyw}K}TlY$w6f-Ovwh@ygt
+z0}3|TrU87QI4YPDf)7*A72L$g9TXfF7TOi8fvmF+KGb1|B?VIOkkCuP!-`75J&byB
+z3$ZRj3N|WuP|)F}Mk%-#DN-;AwJBJzSpQNHD%hl`;F{8W`d_pMkkExTkz2w2h)KbW
+zK*1KKNkmb>!~q4HY|{XKMK~&WL=a&$JXi3YIv=7gBCe0T41EPo3oNpQUDbXZ2N#Gi
+z0WPqET4&%1=z$KK=sgwm664Cy`;uNUQFg$D&1_}oJE+R!Wb}Far$NrJ+Q5(V(N6$7
+z=A(UYX)p$N^DFm$1)T7}fU-W$8xM;8KR7Vpj|T@<2T2RtG~_Sd+tZIkZ?5O}_P(P*
+z*KVi%_Guz_vU>aUg#^uRSwJ9v^4Qy_+fs~&xxeZ?YOdUF%5vs9O?iQ+!lT?W<#i><
+zlv|3*lov&j9pWZpUCc?a(UjK&t(z&Bj&rnIMv6?C^x8~Wu<4S>YP2&cn(~&=WOOjy
+zj8>7*g*K7flvfawDKi4GER0^jkETo<FlCc1KLwtTc9anIXzIBsCzy%C3b<q$tbkF7
+zHc#+q1^VHSj^tKw$E7Y-@Dp9F;CTeiZuwCJCtJZR2?u9qU(3pBXr3|mHJ)E?Xrn7;
+zdUU0p;TytkU(-T>yB56FaA|JQ%}S|xvznxkY)8IDq|BmO8P@L+gk_!wfYi;3v9@NV
+zEHx{|+^nVwg)$0(CdpP*sD5C3jacKQ?!SJxi$Z^@t3r1Pn%#2yk6w>LNhB)tf5m{%
+zZOP#2d*2C7aww6DP+la>J;+|-!5)Cn(ZLx}g4$F~QMIXl<+DxI5$j^tf{krzSkStP
+z6x!4PQq-nMsI5&27IOp@;qYKmY*XV(3$H+t_7D=f&?a)XsX@flrWk=(7N$u=u}u*N
+z+LXyQ4G>;%4=y?-1RtiJx2fl%&TtpHxQB(;9tapKUq5^RG_U+mzo|>*|7_RF-zR8x
+z%X8+hr}7VV0LXpn+t74^U(kyof$Puzysb5LTP{5ig6eXqQe$hvb0BOxUVl~&fBHh6
+z0ddVJw4+aOL)pU<VrobKAr4Q>^6<o%+R^A*Xy9wGw;d$sO4JVwOazTB=>PnYE=qi)
+zs}g^fpxG^-KyY%GL?W>TO&qx@KHAoTHoHs_7KjI<lF+dQtt-K!lA<1!l&?_<u`X8J
+z5<r-Pt?9>HD-KEc=^+V`w&o*13?71K^I23(Ly}^6ZbYutDt>jLx-1}`6k0*d;}Mer
+zN}m#qZHG8G9w}&A&W8C8ZD&(ijV%T`Y`uW4XYVsGhRSOg^Mr_PM?WwUAuX@=cm3Ng
+z)y`K~I$y*1MS^Cx93nWm+DRl-yI02lHx|3Trv%<D@|C9qZbx~nu011Ce-~^iEI{CE
+zh<bs8O3?E7J>~Nh(rS7A^x;SQX>I>??zhi;BaAb+A#{&REh(HZ^QoJ?uZEJt{tq>Y
+z_3%<jI^IW?{8M#>+KNN0Qj*TWktKh=C<*G7k{s%fEcrlD5~FaX<n(bRpIelS^No)I
+z1112{QuqB>dd9eqTG@|PYTW0l?#C*#=(`QuwjcYifi&!PA%^ZdT&7mKce@C|-L4-!
+zqNBWN|DWa6+vaDq)h&qh?7aXeLj6Yf?~mK$?zUlSzq-0%s?;cV+lHxfD75e48gMk<
+zF#Y;mV#W%Il`e@Dqr{77lHHuEHi=8SrD1C>d@oxP(+jKYXnv$k;%-Cq02t%z6YV>i
+zO3fuM?`SHgkl295j^;njC1$LUSm}~jF-nYcXeUct+Rp5h*jrNdHyqWmwrxrMb+=CS
+zBR`~0wTVDodeNzd%fjp_EAOrNJ^RuAdh)be!$`+BS^A!Jhxa4-JzAV;YQg@-yikYF
+zKWV`<u6Zu)a%CXVf>^R~D|_vf_!?S}yz0+=9PzaejBlGz9LKp<2;1%nhx@_oNH|>t
+zA%4#lB*f}is+B_wt~*+sh)-Jd0|4LWB$w$D89I}^cPv>t5Ri7`4;`%qiCca3OFIYk
+z+peHFlIt_cp8%fAren#uT|7UF^N+Bp88|9u@!^lr))*foOGd+2Mm4J?G_qH4=XJH7
+z;hP+(zr9tuQ4dDR8rIy&nrNq1Sa>2RSsE4=KBIGPIX`p7tx_J3RN0N8SQecg<KWq)
+zvJn;ba=ovpSU$h;6ysBb%5?QCCT&6;MQ06X48LPuE03rC$|al}BtgH-!ROULpXKYB
+zb`t6-)->Z#?sr&>$rJ%Kg{GvWy=SO1X9eYlxUN^!X^T25S#-xT^1F<r7++Dgb}eGk
+z8dxohx`N*^Z#9qSqB0wzGRLB_JcJPac2SvROqusd%A!6?{kKGg&=~Rh8rLi8DuwWF
+zQN6uZw{nW`{w?ZyDQOw3mPK8_?<neG9?wN(HbiBPMP+%2D*ElBGAW8mify&}9Ch3h
+z)owvw<3C@g0S~MD_94G^Q759&KoeTA$TUVqapu8lS=4F#j(M|rJQtPO5S2L=mE|FX
+z=(mf?q$sLfj8d)ckKrQw7K?UkoT0Te4+P-tpz+>%JOZJ+>9`X*h3vgMp|gl9^J~vp
+zvsc<EFVlMMH=K^d<pN{YIPJUf<}}Ti;|~*!BQ}ONo`dPs-5o(!@5gQA!&r~tV}eEW
+zRiWTmFcZrM!zR)bs)oPXzOsm}gp3Bt@w)m5;9}CYFf19-i8s?Nek?mgCam3<)a#^*
+zTCuzgGXAi=c+}^a(Kk(sx-S2>pW62Kt33YE3oYKu_@?%DcD-MukMCs<Vzj_Bb6<b~
+z;()WYzPDcf^yO3dbvW}342_3488Ud+`|9ZofB=!aw|@C=2kU?Hf7h4mr{2#GU$x$I
+z4eX31mxIW7v<^UAynQCI?7yr1eKpcMsHZO(U?xvTrM2;Y*3)xS4`_=bxG=@J!-x@N
+z`SmO8|DHqeOaq*&Cm)kOxNog-7;Idtf89%Z>+ht3@b6mvd7FHTk%UI->2z;E7+;z1
+zIPYS7rT5?F4&OBdM3r*6ztIK0p1usCeeXa$eKACR$sqT_ubGF=_v5UK7gGnx=x1{^
+zd_Glu*Zb15pOwzjp5!-^57Zz26Dqo%e5iiua)15OC$H7N=0o*Un{ttY{{w!W?DO^g
+z$JO7L!cL%TR`81td1*o-TZj=WQ7Om0|MEEP8LECl+sBiD?|A?9rEp-k*~2E<m4X9%
+z;J$5FL3lr{xr|@Q#%I;N$bsEvwBotqc~Z86lN?v%uLigkhIV9i;1-VT0uYBMZB&JD
+zWEVwN&&;5|ljD+V6BXkWxlNbIm>t<w!OD?cbF_wGaTC#C5M_Us$@XX0PXcHi3vf31
+z-Ld3tTY!O6ywime)n!UM2HM6~^<dkZ@SIz4jq!zq(KUF^tLS@HTwdNIp^?2vpBJ9<
+zVt3DZmr!Ywx=`8FHRb1n@f49qOMcAZ+(Pa-{}EJ=Ldr`wIEI-n?ksUU!&3qp*1`wz
+z^6S5WxyEcHR!`m+)8_LuOgqF=c&j%f^jP{f0?=hdfa(H`7NIgdKRjmV0-efWJ^89z
+z$C6jx+B=rqd26^<i*6djX@9|HcnvrnpeIfsWTjslAKd#Y`OmbA+<(4afd?hGo{KK~
+zO;f-X1kDAW&eN&_6B+^&pqs#?aa{rvFx1QO0)L~tXbBv>=<5}@<XV;mp2&qOYIrhF
+zs|rkL2uy%(0+Ysd30ydp@xA9GYWUyCmzKcMm;S@+H0f#A@GOF|!1Y|XLg4W{ttv2~
+zAus{D2}~N-B`^W6r-tQGFMwLtMjP5&n305LQ1Ylp$Y%168iGB}Lhx$Cx^RX29nCHM
+zQbBmzrW0>&w!P^P{Nu^UHn0w(to`Fpx&~H-Y{L|U6TVk3I^rQ@XitE}(c2FQFuZ=>
+z9OSRA_k$M&7mlT8hRZKi1|&?aDAIfsRC`F(eO`pzF$Wb$EgQ&V9uZGoIKUk%L1#4v
+zS^jzG@UgAxd1m=*760HH<iDCY<{4>uetx;0U_8(of!)>UITqjRcvAf>aaCI1f@@HN
+zsbBzcgHbglb8p80eu#SRIpT9g*FFBXO=BUvkFoFy11@=4MWs`l`E|JV83@Y_salUK
+zH%y2QdLt*6t930`Ke60+*K(Yxa}sj2d~6m)my~+Cn}#nNQB?L>LXq$TOWX(?4WDx;
+zsY+jU_$d8`sut7Hw`=$A>@so>ISC8T(FKddiWMJuJPY3hS7C7XvWvr!&b>W%BL1D*
+zI|VE6BGOTrS;n59*rg{!=OeR6ads8gtqURTrI>!of=#tjxd&87$cbNavJU08#4;e%
+zv|dK%b$2?rF1mrZ_iTCsXWyQ?0fA-K;dQWlsOEomt-|sFk|TMt%-@`d`ukRqWmy4k
+zC#lYwL>0?)vTQ<T`M>8_4wmCU9#|f^K9+aQ@_L13c65<ESysm<mTBaXWyX2V!7LM1
+zEYr!d37O@q9F4(p9Et<WL)XXhwpngfSl%j;C(Hb8EwepGmesc7eb^>Z9nG={ndSc`
+zu*?Y@7adn@%LCWP@}^ndtgzfFktfUiZI%a1EHe%*lN4Zx>S&ftNGyAQ`SkZ6wGGm7
+zum4Sut>fm^hwj4gpWX5c2r644T<XyNaz7d4^{eCemoGg!jrq%ZGIs@CMfHO_)oa|l
+z?ROjIPI`8}dhNUY+DAIGp3YrqzeF&DEyK}u^oW~nU41%-w73_nI@imv+**wVwvH_D
+zD2yUKdnGi*ya4*f(#Tz=@N1!f8$w=S=g0zY2?cD1GhZ8Iz-7el6ucMqt*<=F2-^0-
+z{+DhBu=NTVz|SM77yv5&(v@jcyVmPulO=!P^f`D0L-Gj1Gu+`z^SY9rY<w%N=J9`T
+zfE8W5pqkCKDu%OK`MucwTc^Y-Nt58LEeU7*)%G^nL7@q<4@ol$ketPs$o0Ru9oY7^
+zbdXv!Tr44U;tri=hDm%F3TIvekJ>o>=(YD$<HJ5lHm;)Kpl_*W{jgSO{!R4=7%#I8
+z!Iw73_D*SnM;60Sb~MRZ(aNSwa+*QenDBi7Bt?>p^DawRTQ8IRF}4<ICEEYQ5mMf_
+z2&Vx<JYKSCr_@`b#JDK&^NPiL<$GUWkO{5kNHVJ+1OH@nr9!5sM22yb!H`uV(_%xj
+zG@-4XJ4%`s$gF|PdW8%J>8LlxO=hi3#?A9>6W7%|f2CXVyd7nE{)Z@VM!%=LRSi?E
+zQ#@~xo0W&Juubxz>wE6`<`d2X@hC+5d7$9S!)ZSNEiT>}>l3rK2XxB;?P3TQLOAbG
+z2S*fbGaUN5E7UOE<wPq+c6T+KG>c`A*ON>gOk2+@sRY2;195sh#>A?Fn#NgElb<2y
+zT6>3GsM(Kzi=FKpM{QR&0x!FRnjA(`lOdT}Va6ravF|R6CbgnDl>nk_ZprAoI;h#v
+zkR}IZJ~}}-glHGpnCv5d!`%QPwGn}hRtC1x^C(vMIKeFFgrl{vPuYd^q;OKuDa1Me
+zGzFX%%;<K4$w@M^nNLOV3_R8|-NDB1$Au5yi75bc#?%k$3#b;ZLNv)-c@oez-wH@L
+zdr=8+wW#{kBuuLq<Pv_IWz;QJ^BljpCjx;f&rFO#pX=JY7yf<Q!L+`{FIos!Qt%Hq
+zq-j4q10mp5N{HDg1S_{qh+%Q1@6bgjQ$nx=gqT-wc0m#tHhQAWiV_5>#109_ktJ|(
+zOYn0VlS&8VatUnI{*(xgc9^3YgJfnUNH7&8U}I>Lpx5v&7QRQqYG4USFs<P1vLrBU
+zprpeGQG!5~*in`oSppZg1RvAb)AsO7sDmvP3lFnws3qrhfF56UFhQI&q)kNHBw)9I
+zbQd!c)d5RDf=LCK38QdaDklyUVOEqNP<2jt9HtktxVR<wx<UdEYkiG>Z!20ALT};V
+z2A<J}I%ow6>PVFYD~Pm7ux@x43;RH<1D1dU;|k8MO9I0NO68A$MXJP(vgF8h;Np_N
+zvzpg^&ru_0$E@a$yN#NEH?C3h_YhP@&3sm~ESB{RE`5JXTCV!H12Ad0coSe01LZh^
+zWaBmbal!zJ{4EY+C!E>>*ebygu7t3Cfb8hIN2EIS-8Dy#SQ}HtbQG7OL;o9!v;RfZ
+zMpha}qFt%~?FJCL{%IoO;!y{+S(D(9J@4od%q}puqxfP`T$SZfk;c=7Stf_0=-mJ!
+zvugtDHY%<&$Es;LdIYnZ%<W)yt0=x5ibL!jM7uD{WHY<l4InamAh61yD#zuJIcBzp
+z<_OhvkkR<4{;-2t_l2?|_vrEf*sFJ733DU)QbXMUBD2HfBN=U<3yWEg9k$tHnXNOo
+z%&f;`3|nk~sau{<P8km^YdWArbQaMr0x;R@obw&I<ep!>9o@>eU(c=QUWCuldZOoL
+zFw7CeW#9}0Fu#s5-j9ykV#WnnJXtTs!oVvW>g?jz<d-ai_y+=Wrf<!M4UqWUq(6%2
+z6ORE(kJCXdLo$PGSay={fH<{$v3+g<LrELG-o2M&c9mxA%<{$1eRf5`!AzHEV-UC3
+zVzBSSXuX_^YZKIqbCIh68ggiulDIsr2Gce^Z6OzOM;K)$x#$CuOyAIpL}&_hWGwn%
+zyXa2U)=`8X7Q8l<A=`kN+Ixk(ElH1<R{VnWZv6TL8>Clb&ntT+mwsL3b>JWp3ZNl}
+zXe|A%K)oo82UT5gTiLPJqeG$0Li%39;={fOB9S1ya_|ha0P>1=YO@S~K!~tbnri+6
+zruOcVrzYv+5^a!vUhsO84AL*Sbg28)T>4q1mnL7SPHKQq$RQd_ziJd~3iQc6)WWi|
+zbLj)jB4G;Y4|O_isRyYQ>6L?%34+h1cWSc?Z>n;|bE>_2=j9_w`sgE(03d3_h=z`U
+z4PC$NwI?$;kP#cY()I90WGsNPU_fK(r;K7+fxoPZNeO<HEI+`E6Q+=U*V6OwUL+Fg
+zUOBkOEr48lr|Jx4gf~?=U|`Brd+lG{T)%Gr>RLDd>Ze{J|LP)w?*3JF;m{x3nulhK
+z@0(WkKmY4LZ$$%p!p=)#lzHOt$x2H8F7~G%)B9=fhG5;_PkVdFamQMI3(c$Bp9=dz
+zGo>fT9wI8Y#&WVg3-|q_M;U9|>h?2n&#7a3<CAyDP(O&EVyNZE$9SHzLmv-6I<EDx
+zY!b~ip9IV-By(?tzkbMyJ$V+;A{fBeL%0^g)ex>IEc-n2Z+6sS$Yt7f^a%g%fVmyT
+z4~ybYkb5ZY)JxL?d6)DUJE;#b)y}C0-=mz<k*>vSMe(|$N65}$sn|JAgHzOGb>Sn~
+z+-D1)d^9i90oh58;-6q4ztd6FE;_TYwteof+r9u-xKdt7!Bdbt&zIpmU+2}9bndNj
+zli&yIDX!Yd<qKYH@CmW1gZnWUA`0nzZ^5--Cvlr~T-{`rqo?6IU9ujv|A1E;_s((5
+z$G5`~aI@=p;?+(0Ef6ac=Wi2d9mX7bnX1#c{~F&T-rMGo3*w<mIG%WQdwsJ)oWD(+
+z_E#p(-&GHDXzvw)xLutSB(H9iw<^T>+r;VZmWkW@mD`Nrwg<UXJCEH_^3b>4e{7vs
+zx4hRY#QEFA+3w54)eqo{D+Iu|-4KAd$NFd0j_N);)>6K?TNnC^FH{%0fS}Ta#<i3%
+zwU}E3>Cno0u@V%vjM4RW?O!iF+TZ==<IQRyn3Emu_wxIb2;rO+$De9l@rC<$JJ2_l
+zYUC>=J|=R+CI&AMTtU~oi4x)1@mk+)qbu<c%vkbqYxt-cr*kWP;$^Ic%|iQN+uMbB
+zbAF!3;SetLHNG9T2-lJj0XgsMsh>;u83DE3WNr;pt@WIGSjXnEgrBE)sl`hro}qA)
+zMMQCkEPUU#Iiv)CG?~k+yl$t%!=uZgOq_HL3lhDT_Q%Gu`@%_~d=5*lVi^fnolT;8
+z=6yg;s5IN%e-Rj!JjQb(f_FkUs5^fFCTy>Uhs?vB)a=5+=~vRPM6ZcS`^EsM=?kT$
+zjzEd1!_7#KKq0P$>n>#Wf0EZRj^8f}_B9PA!J~U$w>Ny2jLq%{Gef$T0)4Q(6@7td
+zeQoP~Fu!>mcb}FLi!Xzs+O{l#_lGgAsi%`+s^#NiMv@(p3*5OxP2=umFy7Sqh*zO#
+zp6r^!`0PIGsPVZbK3Jq*vC&|Xo<^giH5cK7z-2FlBkqxFQX@cC;*USIJA`3V=dA1L
+zX)f#xGd-=1yo+X$eE3>WK^S5<*oGbW4?rKXe%mhwUVjG!XHjW>ZhY^UKop;4$MA>t
+zM|pxq+5X(Av;CFEnz&l+;imY+8E%tm_;WXlYd(FA-*c;$mT<|`jMu!vw}M(RsY*}b
+zZA`p;u3Rv+nnNaJYE9Kirrhmg;V792$NMC`Y>?#tz@37Adjr7)W2bNxsxpobqtcAm
+zn_-EM$|Xya<QXq$iuKS9=qp44letO7N=zcZXyWQ;EVU-RVW&23^Vr(LAw0k15uVN~
+zpMmoS5`Gh=wkWZ^n{nBKiFZ5<lItf8?{hwZv}3POBELThy}5<>6r#7TJhMNr@P`FY
+z5}^wkAQ93uTV|P3A0`E0<<PjiS?Q&6b!rO*?$XWN_+`YoyceG@;IuW_g@?U2pklA9
+zf2*;9c()zbf5dUD6RnBC9M>pD;wm_y(~H9^!WQZ>4zu{V%Ac_lT;LBR&ND;@NNYsE
+z)?0KGzLMm{BisXGyMpe55sD{VxJII{{-{aY@!u4rmbkYNwfUABBOW+YF<xcg?gpT_
+z&JMAZKG)1nc?`#X#_;`iqx4A{bVeL;yx+a6LhPIm6dT3Beh$}r^3K^^Mt;&KbmHdQ
+zE$67tc`zp;6D@uG$T$NR{z`jbkVjHojx4$1K9@R2pJ{XA`F$V`eI~o+zQ*6fYe)A)
+zGPn%D?9#l1qr)U+GtX0whQ4nazdF=SZOTisMm*I5-Ff^DbQciqYixlo7^dPuepZ2?
+zgc3=r5)V7UcL8I(t~(1J4TS5u0c~I7FN7~#APM`dx(o*1d(rug1Ckq<Zm!Q4mcF;P
+zp2PPnp1$|h9y!QH&?Y<S5&W#nbF1YU*a~1O_J@_JJyI7zhpe2&3IlZAIra^YAjFP>
+ziwbmO0veyduTZ}2+FSk>!T`a;b#G631BV<Vx0U(ZXt%wJaX{%;ESy5q=86hHrGkzx
+z?xLdf`tAB4OvEVLn$3{V{8>GDaeqC*)zdKkUV3kDz2pqET?x6b&?0!F#vyJ?L3pt?
+z+~@d@`FJ0%hl^>v<bX;7Uo{2gaepj(go);}eCs{km^GbA1v)q2k!sq6)qwD^S7-MK
+za~P?1UGe~d5&I1Z`MO@9);k#cuj5lJkZ8*ArX;$LgVF?$#m>A$3}nhH;H3d2Jnx~;
+zr9($vBHrNAaA00>^kTt{NXvNw??P_>$5BO80D4=iBYa#)uUTlM+A1hyn_QPhm#XFI
+zY)63@+IuAx8@HF@*k|4Q5C@()Bbh|+X59Xt5NWCSk#(UriGk8!ZNxqSOuUJM+(Aa+
+zT3qS7xpE&Ib28ZY=&pV911JW6Glx>vSjs#u>FnawQciWbSo&u6mT^6M9OdD(o^7#H
+z4>;h$qnPm^8F5}p*Xg9~Pzf{ZxJ=$UleFsLk|S<bM3Q)O=gK(G?sd#ZPM;e;lb-88
+zlb#(go=aDHy~KX(eE5JJOOmZY2N=&+rQh%@c{qp?PNn;P)?*ycF=lIJ)55Rdr{*(Z
+zT+dJQg(1Bd_ryWCD2K6}+`+om6@>0U+<7eDQo2?{w;ino6%_Y(lO4nE5CByQokRCC
+z+o*#r)B%QRKStw%*E3YFpeVMyo`9j+T^7eYSv%esH5Yh|QcWTb)eE4wSnfJCs2(|w
+z;z(ZNk3VIwm_2oyHs$%AWZ_mn_LN0m{ytm)_X_B*Iqrv{xQ1w7<Ichb2nyuj=hn&r
+zWf58rGR2)hCZP{nE^_SuhHJi@w~Tr)2;J`r3#1#H2r%f8g+PjH8m`t4VfrGLlfMD^
+zDN*2Cgwu*?<rhkxqEK-uC7a-{uny~k)Itj>XHhChIge;x<DKS*w7>zgLuJ%GvIXy=
+z9$5p9$$+D;@kta0qiZbne66|`qx+wu&xrm?nz0cAKa1)~WDSEyjj_U)V2u4PjIl31
+zW{jQ4IeEP~*(UzD^&8xsa8N6Bs8S&AlL0VRUZ{&hl?{uSy?Mv4VIY8NLs8>kjllj+
+z!ruP{Nuh;K+MYE%K8n;>9H2@>HBakNHJ3*fQ{0s#ZH&{jx}X8uLK>X3@~}E&bqre2
+z5e51JK~&qYlV+o3Kx0gbs$z*Q6!-tfj**qk4Z7?{0gbE!1s3o2`?W55@5lipdD?rq
+zg=a;AvXvY@0wMQAsCo-j;c4}<$8(gnyvvSxu*kJh{Zk}`A$FY6IK+B9;?@1fHNHOl
+z=scTEa$z0)x4XvV05=H{9Yx>#8LR;=B4;@c-j$&X12H@P13+Un$%|>BKIWEz1}MV9
+z6%PNP<HbmU2T^f`H~`J8Vw7HM8>KzZgJZB>fA|WS)0L>OzWq6l&pSYa&Pu)1jrHm{
+zB;8oArdfEh9y<<pTWIj?A#SW!Lp?ZFQFi}=YP_}}zX~^YVh22+4)Vr&H7w}HdbMmp
+ztMs0muW)F~uO--#xUpW1ZH{FsrsM}j@9IDbyRlw<W4-#udNnup^+3*z_39hz)pFWy
+ztXE?~ligUaj)(d=S_VJ##(Fi^&~L0)-*yEHe>c{vIiJM_%Z>GFDk2>HyRlyF+1QSP
+z8|&3r1meO^Tm-67EnaKCv0febqsy!NH`c4``L6Plv0lA}{ba1tat{oB7ELqRxC8&M
+ztiEF>cw1|9?WbRPa0vT#T8_Iqx<ZKH8iixK+$7yq)7N&dR~n8w0(A($&f;FcQE~5P
+z9aWr*gq_6)DVYy54LRCvvl(rW8<C;7^pHvq*rBv;D9Lz%YvNd3lgKTdEi+o3lA2;U
+z95urh4p#26AM%+fkx0GM$pyW;e6-2Qx``|lX~wDnuiNT2!f|Dv5Wc;|g1?Fyz$TP?
+zTb;nc&LpcRNEV-LHh{k<5nlie&rkXQSv-5IbEPVbdGRL5h8@-|MEe@wp?zefqx-T>
+z;u&%3z`Ic5)=UYLwy)NK04Q4s_Wu9o&I3NGGW*|yqKJS7D}rcLR8%69(8ZF_JCV>-
+zGzrNN0wIYhkf5$nK}AJzZMdi#3yK}<T31wbb=6(0KkQk{u64zZ{r`OLdnPk;rz8lv
+z|M{R#&U?;#-t*Rb=ic|uUB(?wS2y=84Hda{(<-9Q<EBpoP0Ld&u~j&wAsqjzNc^k4
+z_+R$!5U*4^@%NMy+gZ&Gzt+dENo4WkkjHU0IsP;kzjp&HE`HllykzC_Nc@dn`~@z4
+zr4#>lE`B#*y#2bZZ2z=K{B)=n|4p0L{u>p+k}0cce|E$8+JAMp{m+iXzs!sOW34{!
+zciw6E54>tTEMJKO$5bx7yVUo|c!~EL;~(e64tcLQY~8Z-sQQt~8=YZa+uoJjLScD1
+z&UL>k6?NIvZBGdQUX9(C_4bBY!ES%rl2aO^<#139iu-Sms*b*(md4hC05r*{<8<K7
+znF9VWKTDN}iIVVB>A~Bs_TjN|9kT{tr}2)fQNVMR%O7D^O2kA-K36*?a;2e%tAW6C
+zmCYYvS4zZ{l6<b#dYb5!3A<&Uo%f3fo~s~o*i}z2L--X>mCkZD_^_V;#qFo^vPC`r
+zYR`A*ZPd+oA?>FOdr_-RI=*=`%8qa0=Q-RPzL_P>M?BBUTjbYyp|`Zbi8gG)(CX{`
+zNWZ(=^+6>22KQ%@L)ONG+1)bWmF_JoNjDrt9T&WoIrm|;O!J-`9q|Tw37)TP_h*t&
+zbf`*v#LHE_$PsS{kL{hiSOw_~F^dm!D}WYT?ofEPT0TE_%a2QbI2|p=F*UGjE$^&j
+zwc5tpt9zgK7uy2dM%*P|(BrGTwCKko!UN08=k}H}1Qj?HE%0CuY{sr%k;k&^cx8vc
+zrzl~^#jD&A+_jE9F6li0=9VyTvYhMva=Vr9Em__Yw#*CBJsL6Exlt8a9r(Y3iZ<x!
+z4Aer}*Ay7F<Lz{iw;t}eY|W}RJ1%~amZd^x%j+*|&^0JPr@P<jteK_oZX8~w+2MX5
+zlRIYV`1XQ4cd0iJ_%RkQLht7z*j|CpDfW|Wkt1B4O!!GO5Yt8HUgBjw*LynzVR=h!
+zi$~}J+*tF@=Fc4$cX!oJQ-d_W&qBUj^SUy;pQ#8puUy16??>JdPPJ<Obrd_pXl?wO
+zYt+AmBXn*g{^?%)tGpI=?_Ei7gi8>=T*SqHa3p>jB>D*5+W4DX{4E@zvm^13^5XB~
+z;$N@aF`Lhlw!d8X<NtUbnWG{N_f^v2{_)`qndI8NQff5|mU#ik-|}4Lr9a&0!96X&
+zslP(jj2Xxu7F+a&FYj-@=S*k(Bv88-2Q(kky`tSt$q%c@!R+Ybic1s1+x#C+k19-m
+zvtg<Ej3G+relIAY_gy^i(G5$@HE$>+0K7VF7b(W~W!j6%ZBF}eS|V4|oh$7-_gv{F
+zfYsmqUWx5o=g0k>r7HMg$3(6)nutpK$30h3o7mkxZyvw%HiyT!(rFUAygMY=Kb`3P
+z3q3};S1#BYs0&p`<fjt8d7=6DuaC|hWnZ!vKV92y)Kc#)4Zl1;{g}ty`#?t>5lCa9
+zTsp2tm#W=Io%W%mMeRprc&VOl!H1&`dUR3y#~){M1_J5c{{w++V_25>9j#-@F-Vpk
+zWAr}|zVgMpsd6~vaK6?uoUbK@+bvAlZ^h9rkXI7RdM}k<xbgVEm7-!(yhE$%D{Cso
+zme%AK&MWTUw|9{z&n>Mvw0c45teU`x!kWUe^iWk*MU~70!%9m+)ivp5h4mG+HR<z8
+ztLGKg6wN*?J&?Z75$WislvmeQR#sHigo@K=7go<spH*94R8v|}uFQO<l!xjnLq({|
+z>eFXc)Rq^gmzS2MFPL3g7D}%zUr<$8Sy@_Ml3rMzKCx2yD1ClmS#8K=|JDEBI&k4`
+z1D`tUs=N1I`&`?sS1)|zV7ba}x0POL9rfwp{^pn$`(fI7pTiyE^tq-V4)+Oc6{l}B
+z{S)m1f#;`h6Q^Idy)&2u3fpWQrw>|SpKX^ofBG&izqft_0`d7<&}X-x&ozCr_9-y^
+zXb#$22inAyzj`+pU$XpbO#dqLr)#42>y|qIYSXWy{6zU1_DY?9ndu*=e-h<ic0lU<
+zjix_)o5cAWdZo_4%=G6wv$*z4&q$p=X!@HOABoz($@^jv2%y#{&i{rM^nv~^W3v2d
+zrcc(t>85`cgGBASA;<Z*Zj6gBZHUu9u}9+kO~*O?REN0y*}T_4pJe*R7W9GRQ|B)*
+zeX{r)Oy7rjo~VD;lsNy%+IL+G`lc52%Vs<O?<bjG>*hJVxruK-TfoyXOB8>D={q_%
+zaru{-K3V&$HvJ+N+C<|c*x(%7Fpu+JVEWs3Vtow6ub*ibx%^4Tr|H`!TR$#w`IC*G
+zCetVLzrpm${O5X4yCol=t4*KG{~FUL^Pj#Vb^HycPv(D_>67{2aAj)$xmTrb{{qt|
+z^S`Dswg2?1Q~M8^UOz>hX#6g_Hg*0+(<jRxxIT6MG}9-`U%4uE{sz<E=oW~$@gKay
+z<v-9NPG4a9Wc^!d`d;l5x6g(LQpXo~(CK^bnq>a2bNXcSXITsS4K3(%pHJ<7bqo5m
+z7gE<R-Sh*Kw12^Csq<Hw{&Ckcas8A1M(X^zrcahX{jJpbgQg$3vu77qe#7Uf^Di^~
+z0M2jt#N}W2jmzK7Ax^)+^lxpOczkTIZ>CAdhn-R;^S|2kN4HD7{ui`&Atm#_#`MYN
+z$2!xuBYr+{^=sPEB_+$h!SruAv$*{0I;YOxWcrm{gG;!6?V37&qv<=*K8fOAy=UtD
+zYfL{n$@<W!m+kOLR{zzex0Z9pUJm!a)q2+qpJe&hn0`!>@t1aJ>ip@ZKim};SAIbY
+z`72F7B+2=~nqcbk*O~swB<Ej^{Zi*&ZTb(B%%8@?UH*Yd>epoY!X*0KBV7JH(I*;T
+zm8MVDKMkfoIZ1qhVX5QGHob2C@^QxQZ}0ybOrI>iwBasGviQ<XpRE5XN2bo-VESbJ
+zmpd+X{sPk{>%ZJQmp@tmEi-+gYZGT2)jomAE-6|2q?<lj`vgs&tp8RYn>xM?rcc&?
+zjr!?KKFQ)+WBO$Atuy`ONyb;>Oy@sY{?(>`p7k%$_Y1px5ooh;QlL#;TAQ?v?Y3Kn
+z%N`bU-Kks;=41YOFV+reXKppLlRF$ZyJ6TCnBC#3tUd|s%193T8}1oJ*^NA-?fI<n
+zx*TvZ|23LFT{rSRVSl-2v^#IxrQ4j}_5!S3`D<b05*MegBYB^&{pd41TlxKj|JIwG
+zt|xh)uw4SbTKbp&(fRFU=85X1DcaBqyE5!%x5DmX>~hU6Rl7fg-9WR`^{1Hnj9%K@
+zKJQ^yaB<81*byJ2%ud&%V*HIgudO_4T=Z30m$&S126i7TcXqly<$c2K9p!Hkx@9X`
+z_IC?*b!MmQRmuFlgkA2nE&KZsyMbn>>sQJA^`PDxbQi0Ic`y#U^=5azxl1%&YOu?`
+zv1NZ(VAs>^bbTu(zNr3Pi{0uwoWHPHqH;gMZh0&0cA@VZT48rMcC*bc)i^E2F4ydI
+z9W16EQRCn|>^45+>S5=*3D=RkvD;vFx-OQ?-y7I1f5rK;^WTL2+S2#yT4C1<yY2q3
+zWq*^g%Wj3;$=KDIU8?$Chh3%F={j0WeWS*~v)G;eua?KbSMt{iyFFRtr?<jx7<Nr&
+zr|WDn@kRA-8Fm~0?cysjvqa<cV(ha2<LuJ?c0(iU+Cz%Z>^l1GOzr{Si}IJMojbCo
+z3^aeb9_M`$tXF-pTei`~XV>Ktj;k5iEjK$|pNsJ~?u>1;qAI>c*rj*ymY0;r*;}yN
+z&g^u(D8^q@JHLcob|>dA)wur=yE?NAPs>F8(St>$!0b|$I}W?$+P}spRk=0Ttuwn+
+z<z9i^eP)-c+_l(k=-hI-pJ3N>Cuf(c++Fytmu7aU$~_#rQM<HUZZUQZW|ykm^RSz3
+zcB#s}8@tBcS}yku?ADuIs&d=1rmQhLU8jo~S5fOrFYGpY8-Y@v4^GCe$?Q`3I~lt!
+z-CFLC>#z%$T`GUiVmGjR%l^K?F5T?xx?;llyC;pdYJcbNKx>vn^J5rxtIaM|JC~tc
+zZg#rf=zYTLOH?~wjNOJqTdv1L*sV7^U4M-67quR|hh5W9=P%W~?8qY8Mcdu^q_XRa
+zU2ZGvW?*-AE9@3wx26?#w_vx??5I*~eNEJQ`Vw|cW@pze6ZY?q@;A=aH<iC0ocuSL
+zon41a=x-c$XHRI^Uk!GZW|zv}71(vr?n6GQ;#-Sd!0hZgXTtbC!LDaf%l>xRf%VVq
+z?7C+{e}`k&bGGxB>bP2rUAo!nI;i&vkNc=`dLDKgE1kbo<L_?lDz(jvPpWd?z;3qL
+z>H26)xlza8wmUN4>Ycw-<@Um^=R#+fsy`-Umu7Z$-85nQos8YaQ(N|T9d=D-XV*~^
+z`g<0;<)^jm?<?#Y%ud%;W7;KZ9omy~pzRj7>~9!$8x}b`yUv<0zB26ApWCv(i?Lf{
+zcDnAGEWU@ZtGl#ifA3*eV0O({*uvw_+-u$F*qP(UWi9*bi(R_e*>%~3^__v;s4H6b
+zw+OqS*`>OEa!V`yy%gn7*ZsUtxV};I?MLjUU)6GaJvevGHalGhOy+MKb{|~RvcDSa
+z)|s8I3nue-1$N7CbpGu6V8V7@i`{CoD>QeBj?<rDx6$l$J<j`t+a>CI#V*_{+F*96
+z=K0~+tv5SeKaBAg)y~D(1y{FRkMpn_Wp+22yF~T48@qL8m#Q9bVE2^SrK(3;E&{GL
+zyHw+)7k2CKY`K3YW4FfaQjM3Bv77yumi=9aU9Q=s8ZXac*X6G*xARxn1<fwic-fP4
+zsyeev)y~7Pt2Db*?OcZ4bhAq}UM|LN_1c!}@ep=TnO&;!@*Z}%PdI<6>d|pG#-G`x
+zsz+b!f@Y`d(#gjC4D8lF({leV!fuV(={j{Hf1l536W~^S_xB;+jgEK%-i>@8+<mJ+
+z#$E7>Hi08<fnUKDrk@V?4Fobe86PWk@&dRs`Q{prgS#N_VR9$q_p@F4f1&(LG9F-j
+zx1>$r%r=3H*C4klk9ZO83~z_~VLuBh-+r(XyRJ}nJ44xhHp|&v4`o*bxuuYCER<ay
+zlwEHqf1iZf1UjN031#0Fc17M;?Cd{>vi}>D{drLKec(jo9pL@&jiNSzZlpg3C0_}-
+z)sS(9$tS=Qk%yVQH#`e@CHE61U|$ZsdKuRjI(eyaI8^%%G9CogzN-tI-6CTSJQu$M
+zq3W9n6@MqF_@Bvl_NT#G?CPNGPK2@>4`tT@DxODAXcOSijQgPM?trpe3S~DI%B~IE
+z8@sQMcXt1UvReyfw+O1;a-iC6PpEeKXhxgBKBTXMl5d7oE#pFy%isd!NhW8&rN~dv
+zxVhM`hTY*3_#^2JP~)~7-b4Cm_yg(d7z7(&EmXW?jK3V?<olu8_g3SdpxSq&=>x`>
+zr#t)ejYY=pa4`P6K-Prro#58Ys}HBSdR+viKLdVEd?!QBwYyJ*{~~=TRC{fl>e^`y
+zRGintPUx4ycVQ`f2Npot9|<$C+Y5fkpKYMp@vA9q0uRH_;2o6n0#rZT1f~B2d>{L9
+zQ2nyAr9Z>{yCabIha<5|gI(dfd9Hn5gKFQWpxU<*s$F-2ig)EC$9$;v%rg#!YR?Tv
+zJN=o)L9jRZGGKfB>;rek|F^mHFY^8TPwjR$+=F`D2-U8Oq3Tft$&!%;)z4cSAD`&T
+zxe==UmO)e*{h<8q55K0Iy<ivora}36YeJjAzv07B{x5-qo-qr40FQ@?ZwOSo9|+a1
+zzl?YGFGBUh)lltPVd)c$zl<X@=~Lh+^6dxJPP-f1LABElV_p1zHcmHoFupOy=`S#z
+z4Ap*>Q1N9!wMR$T34T1fP2fN9ZP)}Kg{t2YsD7(}vYQGu&a$A!*+EeL+CkO#l~JyK
+z_e15s1!|n#05#6efohMLrtc3m&f3C`uy$mdz-078pz7V<cmPzrpB&-hS!}F=?a5aP
+z701y~add~O-?zhE+^;~zeII-eUIrCkJ$xT|S2!9u0C$J44s+vq9sB~ne}x*)mqYnY
+zha2D%LtQ+7GEOwMhl>BFA&wtG#eW%8d*&MVH@=nQ((f|PgBpjkA&2Yk$3u<lK~QnO
+zo9*;3LXFdBA*UVP{|wiX?;@!77zNd?X;9^UbChe3H{p|{-w&UFtD)@Ahiboa_$+@O
+z4OQMSsD3;Oa_-Z8U#Nck{z#|)2Yd?qE1=3Nvh;3H<GGgq4aL3yayppN2WmY&7^;1{
+zK(+6h!(F@1go^iT8bQ1rsy(kYUIf*i*`|NxFlV;}YP~oGYFwNMRj-jy^SeDHOGaCz
+zQ;+WkxpsXSs-Aa2&GXaY4=~TTGgKVk4Rr0-1m$lrl)qZ2ekg~0?de_s<>yfNH0%WB
+z|NQ}Oy|@=XL;9^y@%<61-4{T$>qIE~{h<2c^Zu?~AAw50$~Y0ybQvrAwFwL(y&9^W
+zN{rK>+G#9Q{Gau8TxC4Y*vt5KAE$p7s{PhL#dkVXd(41Z2L{8x!`|?5*cmFWSF>FH
+zN1*JkhZ<+6Lyfa~xHJByLDlyFsQR^s%Ku}g8)x4_jkDLF+T%_r{h3hXY%<h1dm`8-
+zkVpC-q3V66aXwVNcY~_;%e@^RgR0m4P;p!h6~{cN`i+E&`v9o8w}XF!|2fo^|1?zj
+zAvm0T{oq!Vvnw2o{BA~@z|ZJkg537o^*Q4e@Ke&4np^^>AdiPD$(I9fNB*dnOJ4`C
+zC4DViMfyBT&x2Q!K2juo!y(T86?h}*e}|8dUTx{ez#B*(5AP#=cgWPr*a>!~{vDv&
+z;q!xCdp-`;&MS=-P~+=pllwre1Bb%p^v_O~{?$P){WEwu=`TY0xyRC1!%IlN*wW`)
+z`ibyT(x+JZ087t;myv!?&o+Tl{4_$f>xEG5dXDjU_$lcVOwNY4ARh!*!X4pN@aqHH
+z1RjE~!+YT0U?=)*B`n7OQn-Zj8lb-4oCG<99C0H2EBZ2cF8br3?2drv!yuIXAyD@F
+zK-upJm!a<fW%ua;Z2~95CMf&Yq3oZBvVRu-0sVtec2~mF;4&!tbKwZ=PlK{Q8J>ZD
+zE|lGPcqYt-vL6gbV4n$P-wU3Nz8jR?xBI*H`~a#w|7Bba)t*<Id@9uZDT6zZJ`t*Y
+z4~Jdg0q`vJAN6Pxn1*~Blzlmr{n2nGJQB*jCp;bfC;K`3Gob7%q3rXZ`YRjC{$O|t
+z`v30h>=#4XS3%iNf$G;GQ1-px1?V^I<Lu9YvR?pYe=Jo0kA$-C3(rCSbGozt6V$jp
+z**FwxydMeG|NB~cTTB0CZ#NI#fXerv@lvRK7ebALT1%g1>64)5NpDNv!T8}`F5i1l
+z<KZbNzc*R>N~n2sx}_Hy4>$b)sBzKF(tqmi{B4AqXD>tfyW4ny>Cb^0ALW*wYw2U5
+zHxKu0qertcE`vYQZf8S{o70TBP~#@Y<j#;ct7JUWtxe#2(kDX6?M+_V)yX5F^v~?!
+z<i${Odz07DNs^~P#ogDq6;%8Fw7YBn*P!(G8!v{^UjQ$sUS*a()_8#F_kn89pLcWl
+z-!$F_mH#fNc3WoY6~-~99}d+%m+Z>-VC?5ZjkiLmcA5m$PGgOGLABG4CT|0$A_t(>
+z;g5Hbz<D@S`L99wzY5Ckawxk+P<C}tcGXaE4uG=Dg0kxlW!D+Xt|L@^*P)c%Gf;MS
+z@juz!0A+U#RJ$DyWj7u2?}%*vC%e8-cD<pF1F!DnjvqHct*e(A7a41e#m33TVaC43
+z9>!gaFLRK}q@2f~+Vd``_PoV-DpY$`nmh}BhkPtld{dy>ub-tKWa&Mi+N-UlZ%lLc
+zUqZFdi%@?4X6cVXwZ}D<eyOEj2vz^NQ1w2}IMz7Wc!;r^v4ipb9oqy7i1SgX`rQdt
+zznhH<q3So+<Q%AZbRe8UdMCINxedG>`6U)P&6o3`>}sIwj)gj(m;hHH?*nD`dM9W1
+zD3sj|Q0EsbMC5WPyPi<~c7U?`s-rvK_y9hF{2-KFEtK7HP<A;`=O6vxeaPEE+5M-3
+zI}dpW(gjDn4mG|Wg_vY4hnml)7<1tfq-UAj4XS^4gKGcpw|DmMLZ!b2)nAWU`puSp
+zJyidmW9ikFUJf-LCRzGmOYaXaBmIf?Z2}?u{t2@5WLyZpB&2iT7jP`B!tO|@<L@AN
+z80o#C;_hbpJGXP|!`a4KNLOS`hcs=*H|^Z_iGM@2$J>zGM%@=ett&^tLt$^2hkX|)
+zyEnH*ApLn*4WEV@7Y{>?i{)@X<OxvukA%v9AXNTOwsHBJpz^PW8ZXbnRj6)&%6~jm
+z{_#-x`$Ogbp{>jR8C3rNK#il<MO61f<u8NEKLaZNaH#y-L&g8|)-L}yQ0KEBL5;5`
+zpz<$)8XxoF;qXML@iPa?&v?^!f*L>XZ{@hwc&%{?RKHx^rcEG--6`-q+PM;{|K`Hs
+zm=r>tKh1zTj*o@1%YX}EI+T4kDErP(_8p;)-#-ML-J9@K<aJQ?&p_Ef3T6KgJOlmB
+zP<DTWU9dY?B+h-{m)LiO8gJuyj*0!l8M{J_i?u%o0y`jA!QEgdxClQ1sPcaJDd3g&
+zIs7a3pFkb&Ux%_g70OQ;d<YhpJRWL%2BF4hchkS}V<5oP$aoT}-5-Hz__-E7LjIHB
+zA7M`@za8O)@Vg%ZUjKgzCzJmJsQeE?_5bZq<MvvpaeEPb5V-*^hBfeESOFFPIH+;4
+z50w8MpvKo$Q2u}V-uYh#<$o=_7TyOnu2;bakuQM_a0!(EMNs`w2<5*&l>hyp{O=Cs
+ze<!H;-~Wz8{=Et{?w=FUKMdvnCU_FO3d;ZG@DKQ(59NO>l>dQH{(C|BKM>0Q_Zvy%
+z-+!Uz#XC^*;sq%GkHDqyE-3%EL5<gQq5MyTnm30-&6@#G^Ck%8e`nLb_-(+OH|Igk
+zkAHm=2=pQUy->%e8{jq^pBjzT@Ke%@O`ZyM+#Ctth8a-bkBh%{=~LjVqz{HlulmZR
+z7r_@v9}SiMhc8`v1=KhgW^zBMe%s#UAHHzyybh||N1@u~Qj^buI_~5_9iOv}8OE;0
+zcE+zhcXsa?Uox&W-fh&+x6Pzo3ZZwN2h}cPja{MIrGv?zZU_W^LVgL#?m6Q%#@<lJ
+z&2K+*?f)3maq={ikAP~=bg1_E=D*J0n^68<G2U#v<5Q<!4yC`)ILr9uC$78);r*0*
+z22^=Rnf$}YuAkn5D(`Nn_*X#ryVzK2Ec(dl$3W?a8oL<({Glta1ggB=Q00C6fs=25
+z>i@H#$~zvaykSuOjxg?IeCglL-xW~)ilO|aoBYQ6ZroHuwd-IgyRD(@9(m8nCqa#;
+zouKSqd)K9317&xD$z7r5^BwOvyLu>pIZ$>#{maSsLyf;&D1Tiny{XCBT>+JEI@GvK
+zhZ>iijNiZQ<o_67GCpd&&A7sNwz1YY(>T$1xbYz4ZpN*R8{Tr|y=nZr@h`^fj29ah
+z8EcHi#>vM0VIlR~8fspA^``5;PmOD!=EWT*UkYDCJ{PLrr@)tx$C$he{0DM-liz(K
+z5V#5XX?QKX9bN%1fe*lw;9al;s$GY}!-!`;sCagP+c2Iw8Jk{r@jMTeelL6jyPKin
+zsfDi~&oQ|#T!(y+$y>u)kUxBl;}-lUyb9g}AA&33J@723ctWs<ct%3SGZ3oWOk)75
+zeLjEHr9S}QLT-c_H+4|!z;RIVm9FQWKk`H<{ee*H>-JFkF8>z@yny`kD^C9k)I7T%
+zO8>;mfxvCZH$&w=18TiJ1l|BUTl$ADxp{ISY$SaFl>J1gdGYOwoL9g%q0;Yxng_?j
+zzrdlE-VJKpzx#q~k9Ed}jW-!DGcGdL7>kXQjl+z)!V=2;=y~>};QwFnOO9)=L7gw1
+zW9g?^`a(-T*wXj0^sbiv_jS(CqfmYxfbuiP(hDv9SWEx#pRPY&gX+&0jn_c+=S3#>
+zf%_6?I@Ed9*02*?{|{H*W3V3mRZ#7?5WbH77?Tf%Ly*6C&e|DjJX{FXpR=EJ{-;3s
+z9|+~Y9aOt~{!AdS0Kd;c`M(jqO!{Jzr^0OHZYIC=cQ>B?0_FeYr=9;&DF5T2{C9)$
+zzYVO#@4udM{vU?_B>i%e=fES8dz<{l-`se72Fm~WPdfi6LHR!c%Ku)lAKVG<Oh0sh
+zJ92*W%@cvZ&7?mARiA6&0OZ*w9|AR=uUPB+E`jn}2IaRG%!27qe)o_bzir`lq`&&O
+z^Lq#Ei#*@tK~Tqyn;vt1FN5;C5X$dius1vu%I|?n$L~(?O49%HsPp>>%tT&f@<^!p
+zbl)21cO{hHv!VQsf_K2fq5SrP9r2qEA0++jN1Wg1;GM{SG<gcte0=h+&hK4NelLac
+zI~6_($3XcV3OnHUP<S`#TSK+)>kkJ4k0Ccg$wg4}c_*m#?U#ofKQX>)eA0NAvC+8H
+zxX@T)oNUZ79%}4n+|Ky*gRZ=Hj9)(x2pmUTFT*>D|0$^NKaWGr--qCT;mxLB0<{h=
+zgxfH0tBoVzr=$-s`5<^Gat|m!+rhgi=SLc0HQWF-5C0E-4)1~*&mZ0A^1Tn0?@6e9
+z55U{tZBXm=5~zInQ2EZ{<U!?~4wbJ6D&I7C3mgkyM1KHOz8~*(`Sym&*A*(?5BIoy
+zpTU*ndlzax{1qzSVkr9tDEmUFa;Cs*;b^FF-UG`1<GY>xzoG2^24(*syc*svVs{Rd
+z{n1eV$3fX=K-upDZ-l!-jmr%r%Kk4<_IE<rUj+G=aTfo(0iFak-ljs?|4b)q+<k0Z
+zZ+yadr}59m^NjVzS;jnLwlTxl)!5GX)g7+9_lz$Y*Bb9OUS|x!*~GmY)HrJgHO{md
+zLi{I#N8@Y_l)Mt^y!Skl7aNZ?c7$|!#uvA{^Mdt|p_XwY)OqN+P~)&3Y8(xL@^=uF
+z|9y?$GWaCl2<7hrxE{M&D1RfM{PlzypSwZ%d;3=B?@6fqj~FjDj)3yl3%)?UouK@^
+z%b=CNC!ogdT~Pk&pzKe8w~;;!%6?ZU`)_Y{<8>{R-Az#ECCi}f3Zd+VLXFcjD7$ZN
+z3V7!!Z$R1I3T1Zz)cBkMWj6%syrn0U-FFO1*}V=mE^mXfyG%qr1<GzRlwE(Q@z@n=
+z9Byy?ewC9yGQMW~yYT_zO~yYNYvHl@KMvNheocT{zedBM%!i|(j{k?4z5}F7yZ_AO
+zkllCiP3%5{8V9dK=^uyt;`eIf`EUpHCqk|Nxv&d70@h=<8&o~Ff*GWLbG<t*{0nCA
+z?`6nP%y<~8oNJ)$Plk$b2GsS2ZQu!{f4njfm`@yULB;th%puNyLY;3sX!;e9A=CYQ
+zD7z)_|FAn1Y8=ireI8VOGL3sd)u#<qeVVRw^?431!0vje`2Gl0pEIG3b0<pXUkEb9
+zGsZ)elLckp5h}h<SPWI4OW^UOp9E`&vm7eUQg{^p@}bUe#+v>R$dK&57nI!|@OkWZ
+zgqjCGT;ufbLe=L{<84s&xe%&8l~Db2Jgmj8KU94CLe*zCsQR>#%)hT$jG00iZ$g#x
+z7?k}LQ1P7%RiFLg4AQ@EbpAhwU*hK@sP*?|NE39w3M&4~;jN@!0CgNW$@G)pzWC{3
+z><ktESATZ#{|)N=?LoLb{;r3L`y!~gPm;{P3P=}b91Z1vZ>TswzRJaaAJqBX6nG4F
+z2Sc^XK2ULYg^K(2D+2+VqWeFf;(i)lPx>QJ>%`5bKOHLW$;KS0xO+gg`?puP^TUr}
+zd;Glu75C#%ao;SNe}9H_X~t<#{wG4k-3_YUKUm?;9~Z;v$j3s(eKb_uW1!;h0BO4J
+zKmW<a{T=)>>7PNZTdzau?}Unbk?};RxF<u!eIV5NXE(SV_S-_m{pIB@?$@E>{wHJz
+zWZWU5KNTwOvG9J<yTDB3dzJ?R(~!@Biu*LExEDgjJs7eSbw3oUy$^y9lfE~61p5xA
+zf9En6_ua;;q2gWy756lF2OJCA;jceb-1|YbcL&M*`{h!1{_rm-|F=WMeG*jMqu`y$
+z?_c8m)?vm2P;uV@757b0anFS;QQc2~iu)LNFX<EEeb^5+{Z3Hr{ocin&qKw1H&onb
+z!AIdqa9jM%f{Hs2D(=CO`PUn2N$m{f|Lu!h+&4qTT?ci3y(^r8{NW#6d9N5BH?B5b
+zX*|q$pm7&t8{>a3bbhWiE;F8DoMW73{A!uA|CjL}#s`h7jK>?t7zY@87&{wpyTJKd
+zVLaPdYn*B93bl`G2jdUt2fTe;r$V)VneiCo2;)x1UzR$%PmHe`pEUM?m(jjE!G8FA
+z@4P_ZM7RcCLi*iM{dFzO;NR(RKbQ+IM?Va9M!&PAzjrRrIFbGURKC^l5bTeFino_>
+z597ARFVAuMW8i7z9|#rC_OJr}dr2U0D(SC5`F$EHo>frs%!g;7p92-oAWPpKDxRjZ
+zUA|Y~A=rnY;+bST%Gk@ehw;?20)e^YKLIM9Ae;v~!cx+;*+=nwb|#7Z`v+7!SHOAb
+zmqEpoZ|Om(c(#Sg_v2z055L~;&DUd%hZuic<kJ5PC*pS$)V%oej6k3qKQBPZx57Ed
+z=b2mrGm%G_yboN2teZHpfBkgs?;t+_C0_#deZI!ziSSRzhnn0TUW)v|Y0my}sN+sv
+z1IGjMcY|fj^BthpjrK4|{eC&s#qlwe{ux*f{|aSyKkS3u?NH^fF#Soe61#FJyHeO+
+z?Fd!wSkvza_oe(F|KNC<vD~<yG0k|%DbDV6;{an1<Bcaf{iVhUQ1fqyu{YE{%6m_8
+zcGnuKjQPg4#+Mg5yT^<r#*t9#WM8Otb9a+Ju6OBc;l-pk!au@Op~m0QQ1kNuxQz6!
+z(3^iy<LSdXH~y}HYL^R)eT~}~zgXb(ml+p8#ZwFw&q$MZF@8Fq`*Wl}4Nr!vpyF8w
+zH9sf9g`^LKisx{scy@yOp?{{<m3N=<c;lhQZpJk=&aM$Eo~2OnRGNH*aW^=d^e?Id
+zfm!f**pG6qg_@sru$c5RsCYt9@eGEF=Zh*guO2s^0yVz|!296_8o7l0|Adlnf|^fD
+zOfH6+Z$nMq3!Z}f6N6Uv>!HT;UrhcZ)O<V9<Z<vK<U>r}7HV9-Ph%?o8mRepHIro)
+z@`;caTV+g!+aMnVKSRF*ychW%Dt$2XWfjzXxfZIvS4f8EntmGWjr|0u@o@-b%Sgrn
+zur2wwf-3(7Cac=15z78DsC8=zl;3Kob#y%3k@R$^{@NC<fG^Jt1ipn&L)qT}55j&W
+zl)f6uf3C@Wpz?QxKf?}?dhXiR_~IOXKaKP?@ILb04LeiMi=f)&EEs^b@Kfx{pz=?L
+zzaR&p%IykezXO#0kEPE33n=@ypzNQ4-w^l1@N2jVD&Hm0D+j8a0;qgrVH@=6Q03Il
+z_I|6Z`)sKGD1vH-8E_Xk*7W<sp0s-xD7&4Z>^j2T;14BEe*{#29c<j)*cNJjyv!i^
+z7(NZX_J;dozYMCKPl3um2g-ghRR8pbvfmvZg#Me5vws)Lt`RPWb?^dM2G55D@Ip8R
+z{+WCmi=F@XjV~A<f%3BqD!xTf<(0wx$u|}%zJXBj?GI)DO_7W5BPjb9pyIm&?gy`e
+zvO5l*4*S4*cp$8U-QY<u4PJ@;T{E5kM&nZBLMT6Dq2fCVs=NcC;@cMP2fr+I`J15Z
+z?|^E*l~DFeq2eopvOfmOZZ}v4|69O)F8B_d315LB_zYZu{RB7>?f^Ca{+937pX;II
+z(_lIF1tt%MT5r0V{PhX$`2G@<{q67~^yiyg3Uxd`@p!H?pg#<DLC%C<692(a=l`$G
+zaOuxOrT-l&eW9hFXz6n-y{n~nw)E{SebsTUy)H3!HMTQecdXN2XdGhfZM^#!r@z{G
+zr122r8`GWsY2yUrVB`8}PXB~)A=Gia+;|++aeP<PZ)H4ds>@en>}>pbic7y2%Fj*4
+z%b@(|%gMg9>!*_)?>Am=9BbUu*xq<sp0i&8HD3MzwGQSQ)8Ig4J=CFb_T41?PHdq2
+zv+!)vFM?;nv!IT14N!Jdp~hhkcrN-brtfU}{~Yb~mqW#UrtuKtkGU@WL*x0zlc3@}
+z0V>X*aRY-_aW+Af|0>*yIB$Vfq*udASOOJi0hC>Ts5slgTJ#$yIQ{2P`oBTx>!ISD
+zW$a*lW4ud$+E{Kp4l2$gq2f$4t{dm#Tm$9*e%OXM&x13t%Y(<lkx+4FL)q;H6~}vH
+z1K#t!>!I||L+NjT(w_kJy}P$@&KMWpG~<t>o&22f0b{;#98}!Bq2g|1d~}qH`wpn`
+zZi0Nep91&9ZW!ze2SUY_31!y~Dz2AD2E6BupN7&u2BlvPr7wbtJKcEe2)7=c0Pjb?
+zJKP8TH^ZI$JnV+N+T^p11;&BKj&Klm9}jc+o`i+SD@|^I$06sNd>CASyobqO4dr|n
+z`9-KWZi7pamzq2qo`u|INFb1n{&5yJjgvZKhVdPgnzyeQABUQ^r<q)9oN4J(q5Rx?
+zl;b(ZeB(H%e){T2_Tj+~;1c*S)O@=es-16zYUd?zKm27w`Q6pH6_lTwj^I2RUInXR
+zHPn14f$~!T<)=TCpHB~WejYR44&`SWJO+-1$HR1(4|jp`(+SGYyMvvdMyP&oI?VaI
+z$9N5tzcFwRcqHr&cZPezc2NETQ2t&S<ovCG@^=ViN@sjO(DmB`P~)f3<ddMr&#@-=
+zgBlmzO#Wto8y7D__4{h5adD~1C&Ckvb4@-3YFu<S`IG)`T<i*2(lX}tbM-scI1;LU
+zU-xzW_aRjOy$O|mEj$Na1<!*Q!K?5y0jmE78+$_8uj}LbZ!J{+-3OIk2Wwz8oDXNi
+zE6Beel%F)?Pg%}>B~<@i4%L54Eqy#Z0eKWGfJeYTk-s+6`I%{)2vzR4LDz2|L-pI+
+zQ0ae$d%-`!bl4B7pV~sT^V;67pKgMZ7en<^vB^h4_0#?)>&t=W@7sr3KST9Xqsb>h
+z_0zE?_k-%EZYF<|;reNR$k5KXp%?2O^Kvnqh@1lt!TyUw7-ys}foiw;a4sBY@;;DI
+zGIlk2?ZHmI6ZRzk4N&9s0!UFA<xulzKdAAV26w{$mk05E2EGJY@-rTQJE6Z8%I@Bt
+ze9wZnLXH3Hq5Pf><!?Nc-C<Dvx<mQ<{=h(B4EhyN?OF&`uaPGAfe({@D4au=U2*{X
+zQjr%x)%Q?iTc~<&+~2jwC&pKy*0Y<T^d(UFCYyegu^*J(6Fr=M1(f{-#*n2CHo3QP
+zKTB^9bzJ&}%BsFE^FNjI7}WT>+T^pK>}nwYc#h4n8&tdeOeVF<+feQN8kC<k{7?CA
+zg~~SpDn2RqC;h8^Tzh{6)sIg@*_A`}(=@2|e<q#pU+^)getHn9pDu&4p9y6*5h|W6
+zsCagSEXf(G_jdhsfwA0}0S_eK;=TBOk6i&Iw2bjk<1@#Y3DwU3?(Xyt8dpKJ(^*jE
+z&Ved-EY$cI2oFNP3)DF402O~*sQ8=qbn)K|75{Q5KPN%?IR+kypM#*r*-zcvI9mxv
+zAlF01I}0k_V~t~=;{Bzo)4yzd%y>Ig+~-4;cOq1Ilc3`6XX#xm{kuI}`ZG}VSq1ln
+zr$hM(LG|-4a6foU7uR3cLe=*QsQT7H_193S`UauO-x;d>&v$qAeG1->U8C_-<2b1P
+z>TPmosCjqKZh^og?9YX2kCTkEq2e0}RnEas<!l92&-ZtA=}$qWuYgLQ169uxpz1jZ
+z%FjTkdhP~Q&(81w_}MNl-WQ?byWix?pyHbXhv0W4Jc{*T02~hwgk#~don73g7!NZZ
+zXw+|rsa|cM`uXdf9N&TJ=SN^ycoW=)>ld@2?DLFi#-BR7^pA{>82=1auk)blSz&Tl
+zI1+gWsQ$YvEfAQ1d?l2898`byGX8T%*RSUpM;mvCqsg~n2aNgmPpEtk!NW;k4K+@#
+zf!;VVeLtvi@<k`dv!KRBCOm@lZB2f^qf1`{$B=%7$$x+ok$3LE`8N6P*`EHQy;ni+
+zx*Ak@SHNB2xu%~D^?XXc@hIb??VbPSa1Zns7%Pms!e02_4$A-5Q2u}1j_XbEV<`PY
+za98w0p!%t|@soB=eif>ppEEuH)z7!Vi?Lq<)!#Kx{T+nz)7|*mwobm?c!hBZRR7L4
+zc>+|w_k-i%E>PDIc7%%iXPh61-}j*OZ$ssO3@YEna2&h<Dy{-J3b~}M>#xaB{W}V(
+ze-DH5n+DbYZ*A?y#S2jBe}NhNyAG<~D~yL3U)jp_a|2XA&oKE&sPRCXc;n;8Hm={_
+zh8iy~z=z>;@FLp(>;T_mkoSk$r$g9*0myu()z+mM;?IOI8{UL0{)EhTVm&84L)?l-
+zwSsUtve*u}C%hb4+zy#@GChwsLu`vo+v+*I8R9m`Y49>+aa-h##IX!n+#2}<_y=V1
+z7s_7`&p;Lf=$``AWro-WISA(<i$7rB1ybJ`;*ZEH;YV!(<FACY#du;1+z&5+!{Ava
+zp9ZHR*TXfi+T^+L8sw14$HN<ur<ptvu0|ehat>7f!BGDDK;@^8Jz4Fq{2YcondRKe
+z&vN6*OrJn6^fXUkEL6R=+bXa_Pq;lyhucEcZyT5f+r#Z(2M7Y~U=t42#A}R=#s*`7
+zG257K3>cem?BzE$8XJrS#%yD{F<@+B{qyo08;uRd0%Nu@-54-7Q4=q}vC-IIEHGvp
+z(~SXR6YHdx-`HquFcuiIjp@dKv59rm%WrHnHW&+x*~WBZz}Uq4>*Y5#8XJrS#%yD{
+zF<@+B{q^!28;uRd0%Nu@-54-7F_66c#ztd<vA~#ZOg9FMO$;b6zp>HSU@S0Z8`F&e
+zV-xGLm*3cEY%mrWvyJJ-fU$}7*voHhG&UFujM>I?W5C$N0_Wv7HX0j@TDPUoHl`Z`
+z#wONlFTb(T*kCL$W*gIu0b>*Ex0m18XlyVR7_*J(#(=Sjb=}KvY&7aPp!5P`wlUop
+zFg9W2<u^7O8;k|UY-74HU~FO?;m>W?7#ocZ#sXuuG2IBfeE&GWJ8lNT@7KK{)5+oY
+z>FRqm$JIdi{kf-RI9Z$V^m(zy?8}`zzK4^;@0+bZ$jJ>_(D|%6*vYxeo!r6n;rExm
+zXL9&`qm#^jO{24apr^|pT<7GYvz#1$zof1gDBke<BoDIq!|#vGu=vC8i|l6p!tW<s
+zaG=Xy&>kmzuCn?xa<ZV$0kuvaexKR`E3e7)_wVoYI!Nd<e7?nF@*jgv&NlfFvk$)?
+z>>l&4hfwv=^%B)5{C=>Z)?eZGbv<wX8@V{5&z{zQ;rDeZmFJTKX_q-Y;d*ixlhuvV
+zr<;5=>)H<6r3c28JNrR<=sH}3w|Nj#?Wy$SV0%g2`_4w*x*<?G*V)e{UG~|tJ#}D&
+z>8G21yy+WQ|MV&5OQiD84(DfGQT`1jPXFBzPG4twtvk{;%yas~Eq|`*hnl{L^-Z6C
+ztn;#O;-pERT9XTCM}1Bm%lE4`=^Wc#{5OntauX+o`rI|b$psCb7}$QClf&=3{Ca|u
+z!|xZr=vbAP9tgjWxpSV=hu^RG!Vo8O`1L-2IoiqL_rKqg>*Pk$k2}H1;rD~yWckw%
+zb@7e2{NeYLuO4as80Y#-!c6gm-~av}`g-rJk*&Qx8{_QL@T<?^mOuPH>opUdKK%ao
+zPUD^2z)7t>2aIxZ`2B@DS$l=wr#N-0>G|HT&-s=={60F}Ur_sp-=8<r@~01X{=XoP
+z;!o%Ms6I<9{-DLrcVJH+H2r<1A87ist$yM6!>zOS48M<kZ_|h0Kex>KH~c>HjZ<8F
+zYj$(xr&)i8-}iXB$>H}0{$Tx`evz|ZY5BwNhrT{M9&G))ZnE<qe*bc=*@xekyr0Dz
+zen0T5lbpRCKG$cW`3qj{<niXO@meQ;XL9)c#5WFi`NQuEonUhK{iP?F9DbkdJ|>6X
+z4|}r36Mo<A^(Kek|M|YnpYZ!skFj{e@BjXCm@7a0zFpmaQvZkFPdwM;HTt5$=lVj8
+z*M>lW_2-+cPnyrcUY<JeK#tQdGyS8iE8cuR)#?9b`m;^{f$5i-emlm!{5P0>NAsU;
+z`f-Ol{lGF8Pu@1pf0`X1o<GXzpR)YxS$9-^wzdC8)2}!EFQ#9;(#5xTw#)y4=?`e{
+z@~5wI`qNFHZsjjA{RSPq`J8^F%ij>zw{!VdbMZ$X?Ke>Ux|seS*-lO~`DOFhX#Uz;
+zymh8evv>>4Uxy->e>>B6wf5EK1AX?f_FearCk95Fze>~Rn!hyjS8V<^TKylh`Ybd1
+zr>#D@T)fifI;+oY)6cT<gC@_j^0RF{Ut;B-ZTe+azAlF8^RSiQGn~J>Yro(xo;tAD
+zj(-Iv_q6gyS-hP)I{VeMqdupbKG*yWG5@1XUSV>!$?uqbfyqCbe!9tNjB{^1_jCSx
+z9pdCQB~C6h{RY$5nSPz=?=-!BL`<Kxrf)L+UUqz4W%b#ATjzh>pPc=C)2}xDDW-3{
+z(&_(U`uj}(vgs=uo&G$VKg&&jk<FjrB~JfW(>I#_3DfK1g+8wq63^BRf#ud7pPT&}
+zv)^d;8?JHoqb;6wrq8u_3T(bzZTcqDuL{@q2A5wyE}`-ot-RfBJZ>=iz1q3<X?(!h
+zXInh0%zmWBvuutVUt4n=R{u4WJNqj+o=OhC&pp@1Pl4%A-rDJ#EPwa#`InXd!a}EC
+z_OtW1(Bxd3zfW_)LH;Wl=lXm~7?RV?{(7@-wDFv;^4c{9M%npZ2QIAay=`Nlr^zEs
+z4x0Q@ozth8Tw-#z$tRh8y2*E%JkaFJ&AyAtBayZKr`hrH7vhuLWaHy-)308x+Hk?h
+z<c1Ya?rn1V)lQyh^0I54Jk$K?VFP_COwPT^$$zME<t^hPt3CrwpKj;hyPLo8`;iZ&
+zzZKs))){@?p?;FX?-yRXz{%nFMX$%L^c!+y&3g=JZ^_H7zf}#%!3O@|vv)YYaW0-;
+z%wPEZ(R*6?oF;mo%L>h(t#@ac9DZN>^;W;|`@f$wxoJn|f6Ne<Ki$q3Pq6X|j(7eS
+zo1D9glee|_!tZ1LPuTuY=kL%i&R+xTjy_wNoc)HA&jhM(_<i<idzk&_PXBMySFUpM
+z-*GGZv=^Mbi}@>f&B=qearzApIC*qfe}|LzF}cy!`*W@SYwY-4Y~`=E^Sdj;?QQ3)
+zb=E#<wtg-Tx2K(-+->#^d%5zqxBdygul#6hFQ?^MM#~?5AAE1~zsA15onUhKeaF@2
+zf7t=fL&iYHNZW?MeYW1LGkLYib4?yM&-KTZCQml`XOrJB`>hUh{{CU|DJHKmxqgt-
+zA8GkFn*Jlxk1+i%rq@0W#kZ}=Pnf*X?4L6Gpy@{qcJ}+4tbJQ9a#!EuIUkFbZ)IFY
+z%k58$m9Jtwjn@C)@L0LO&;DxqIokdX;)#}TuZWeu^y#nOGghDHlb`bWFZ9U=6vyU&
+zu5+w>MQN;j=6<nqQ+}-cI^#Gx{&K!(M$7M)#LB&V^?PvNSpC>teR8K*`37J7?;aDY
+z|C)6!y8IR0W92K4i<K|kAyytUD^^~^Jd5`C3hQaKd_D6tS{~!`KYB*2{s&)w1=3^n
+zkNWKQ@x>qV*?;e|AL+AS>9eo#jpyC=i7o%Hd&J6VKL0a(?SHkeecs+%`LhGz&wJkZ
+zi^#*$WA*L5_K4^g`SgeS^po1g#`mzN4>W%&d~##ISbN>vitevd=EcfS_}b$XUwPa4
+z#^Vzlr=tCx;TwMsc<s>~9(O2ZpWU4BS8x4@$RDT2>X-TA?dltES=F)SZ|xg@i-*PP
+zukzLB@ttG!dVV0fJ`elm|HOh={lUA(%Fp=b|Mc0h`cYM}@|V8(e~EAYU+Zh{T|=??
+z=lRyx?WV`-|KXbt2kjKAA6^zK_w)7t8&hNTpZL~`dwuK0=f3%{hi`l=^tJD&zV`i#
+zuYIe0?Yoa}y<Y2U-%EY%+r#I7y{~=0^0n{DzV^M>*S^KR_Wj=1zJKtw@2$S}4f)zP
+zds=M!4&E_V?&dpwbo0%p3SayF+t<F`d&K(NyD(OMz}LPDeC-?b9S`60weJ*P`*!mk
+z4~P54%e%hz{l(Y5Ykci{fNwm#=xg6yee2gHzV^M&*S_cY+PA^izQcX(+uwIS)TwW5
+z`^_90EB`$!R_@s~R{qd;{15o%zurOLCJ^~t<}2?4UwK3N#M)~=S9JdUDr4oNedT@Z
+zEAKO3c@O!@JKtB{Hs0|q67TW8^3L#;xAiu$@$~T>kJqNh>IeGb`EE$8{xe^DYu{RQ
+z{b&2yyNfTLXMOeW>N{R$`09U`ul~J#^*`5F-U?rN-F)>weMW4&d;98tf;XSCn;Upf
+z?|d&JPnxUz5xJ*#Jd4QhRLANkdGjfvKPo>~|Ef1XBKoJi`4y2Xy!jE4+j;F5k(<2s
+ziO3&%?H7@+_4+F!|LC1>MdW9^_KV2>_U3a$p5u*&h}?ZxZ2aAP<)7h=hlu?)-uR5j
+z1HAr;$dCE_AMNvB;`9Hi&;L<A|D`_vSNQt#R9}BS<Ll4bonz~_Lrtt)@9WPCeEqp!
+zTCDy4-uYRiz8CxYvzM<w-}cQ<J#QO5zgGC<Q+)H`jbmf&&-c#v0?nU~eCx$0gJbQl
+z_sMtp&d=ZX>Cf=VZBB^wSLvJImkf#3kN4@H@x^zO?|kT(+}Qlv_~g;P`nUJ`r@8up
+zdY}Kb-gt}X-}2Sxq^(t6cC$f$pZtJ#yo%^M`}FL&ipf9NH=YW7^8Q=J+FwM;(f$9J
+z=dU@Oz$-re1TTL?|EDgo`B!-HMf8O}`+I!$_xS8j@s&T#XaAi~KG!EN_4%vvl^@9O
+zQJvXuXjOe>O~u&Kn*73f#r^wc1uJW3mX#Kb4b|tBE({GX&g$1Mb5Q=Yg-NWdOH0ZN
+zYig@Pt+3AQR~-r!`wdGf@@E%T&mLM)Ss%!s7n)Zjk{Bu~t}dJ!sw$m@Or*gP6}9EX
+zg*BxW<$Z@0))Y?7?3X_&R9O|O4wct<$rGnd#I$-r=`1Q!R#s6oq@vDqCI1sb3zAeJ
+zQHAqL=NHx{u}@Ux<o0ouHd7a7NvLLWePw7!{rJN2lCn_ogu;2D(d9!c%4<S(HGzDq
+z%!rATh7QjkH!){eeh-&4dLljMHCJ^AS{qKHEu2K-&CZ)$SVeP(imH?t_ElP5T~k<I
+zQ(9OPq8RByieN-l#k{B(a%NW7R23E}p9?fTg#013rDZjx<@vM9Dhe@lb~8gIrR6zA
+zMWO2Ia8jteI5wfSJXBX1Dyj(;53j1Ks7lhzNxG#niFuM<No<~|Q?N{0*T~RIVKlU&
+zDimXA?y5qw%BU^lHh+Gosv4>{@{4BAt*)7yUtCzVpp+EXd~`=)M4DMuT3iyEICBo!
+zC&g$&YPfJxc(UX%7u7n0n&)(8aA<AS{E#<?Ck~Llw7g{Epxp2jpE}-`Vc__2V~39)
+z(0^bmqd}fgW-zO7Dyyu%qnLJ~;+)!=+04+=B5#fkttbw~mD(p~c;3W5BZrQk*lz-3
+zGTxx?sPQ>N<FfV78<msQuYX+nz|rN^p(56#iG9Wo>lde1wmt*<CQR>_nH85Fao3le
+znV#MzTwd)wHF#duw7jzFX=T2~&&sQxH!oCE<*lYubB0DQVJy5%^3sypirVTS^);dD
+zoE(4tNV#4$azZ(oS!&V|wdLMuN|nP!+L|nCjC{3XPEm{g!wudF(}A8}HFGPB!#&ap
+zQ|DLR)CyzyO=%k4BkrJ*Gc<2rxMAtmXoJiw9d>f7Drzc<D$2q}(H7>SC?_~%U@Po~
+z<~4hXOxYCEramVp+yf(XhSt}O%$ppJqP6*bW9rws33u4$<X6Z1+We7fxPhMBPo@mK
+z0Y0p>Bvf6)G)&ZLX2y7JjTxaQFiS8JqRL9B9lNRh7u)|iIl%$rInoxEa3~G_8ef{A
+zuJJbCSENHX&sXBkZOLb579Gtx7Va1(;jjcv;+aKtb1Ji_ZcbumrR5Hq$r3)4^V1s6
+z?n;iGJjXjpi8^DATkdm%nZX66HM6IbR~OC-4Gq?xSe&1)|MI4doj!bQ*$8};<(HMs
+zpLeJ`GniLVTw50MPL)%fgA6OJt}Lu6n(aFhwR9SgS2As)FHhVtx!ERuBsZ(7v-%GU
+z%_^)dtI6ZAS6(uj^Vq7&iZbueKh?^J&u@ynY5j`AZRl@6x3tFUBa2=iPFf~r4jNuw
+zR9IPE>x$!Km^h|pW>rU>2j_5%i#aOKFNtlcNVNy$g$g+%=R3sI%wSPz<?K+EPRiq>
+z_q#}Z(v=y^t>Q~XO^9z+Q!@ut6)uSV^3t;3zPSwV$XVQ$aL7d1vJU%YWo}7_iJLO&
+z{B=t-<mS7JX~xZW7t@HF>n`CL{jX}a#Hang%2iCiW@a%Za!RT~p?Q2ym>3*j6J=O%
+zbLPpG_o`mr@?O>1TiR>N=I!sk{cT?BHh-7Q>^pquu)G|7we&6n(PhOUzL`c}mubz?
+z7Bhvml+&1rv}K$|rc><tJ5ZOlHnrMOGinQXbH@k&Sc>ZIfpvrW_u14K`{pJZ_nYrE
+z(YW7SuL%#{eQF9zS{{KZ&mcn0=M|yimR-fnzQ{z0KK=*$yQ^Cxf;q#3R_hVLss1yG
+zR7d<)yNI1xzbcB@dGsq>B$+kgI`G|PXt)`M$2UW=Y0}E<G5z769#IFIusgmsG<OQC
+zWa3WQ5`Gd*tX~sPqN&t6KXw^w2-nKz>biXMmE?#pudt|D;A%Ci{V2OPFruQ$ySmt%
+zX<Aij4KCdGm6TVuN0*Q1awZq^3-h>i-<+o^R2C|%ZWd!Nf5xcn`lqFZFWk27+ICcg
+z(@JZ~`Tjh)a3((z8or7?f-@0ap^dpf>wOi=udJ$=iLSMGBb?9j(1OURzui#L<@P*|
+z7_nbIvijM#`S@$5`IXZq7RfqKmm0@=e@4Fl_`cLcuTgQ|JacmVx!pB2?;2p-B|yJz
+z_yUB!NX1@^^jk*0#=FaxEoX>aGHlT{d;zKzVR&A3ZK7pcd2O9#q;htpHA%$LJ>kB>
+z>hhv%s=Sm}7oAOfey)Q=UtCOPrb~<d9*MgarYm7dj98oON=gc&$OV#!QGCP^U1Y$f
+zy2|OUYbLE2*UbDer}pN*a^%nLzjEX*93`}hv<gmjc`2b)q*;<!wJ^_T#;yu6$FIca
+z6XOeGv!pt4h__9Ch7fO?{8Yeio8*}9H%oSK_uKiFxHxr7m$>{Hd`%SfH9Ouirh!sg
+z#xzd~%Shv-Fp6rL6jljOdi`~XoBDAEv6oN%>d1OGh+As5GWd<+E~3X7sF27Uic`C5
+z^^xflXQ2Ga)sY}GgBWHe2{Xm1eu4s{E*?(xt9@fA?i*&jeauK|g?-F;YSBJ26vFpW
+zed|KxNbe6Vd|daZN7~fgOHJsITE(?Z_y`^6P(vV}PE431QF<f<cdYe$j9DL3oR|Ca
+zx!&8P4C=m3%Fx28xj&?oRf&8%_Ge36lT`MJDw4`RQ9b<jaeIj}vx*9<YbIB?d6=J7
+zQ&AUxc935;uO?VHBp4hKoV2iPL|xvr>BDDD$=C5L-r=CAZ{p#d3Yq=9M81^dR+Q>~
+zLvYr}KI1~=!T#>Tf61s|a8AkSAU9khSMf=kJ35$GnwMK&-ERuFDF#j*nU7dmpEG7;
+zUTMy_ywaKx$SH!!3i^Z5j)?zNG?{~nL*bhrq2{K^)K#f)vyAXsCAt+x27{%v#30vD
+zv>*v{=8lSQmz=SYwrROt{E>L=^1lcrv%h~I)Bv`H%nywomN}rZ`EE?OeM-l;VdE~%
+z%o!UD&YLqX7#>EmkjrO{qiw4DF<$y)P0f!UJdBwMu8qbseriU<5A;-HDKp59sKWB%
+zQDcXV$js7qweTj7%wT2J+;D`W`ZKOeYGw!fmX^<|U`Wp$qhZYj*V6f+V)~DyvUy{E
+zqZl)}`=vc$34-jyejBzf#m8A)SXN_k_Msw*?>7o>fLe|HIQ2~EaR1C_J~vPAP3;pq
+zB4%clmRHs`S8aH>3;I{o){s6TSRXwMYz-MXa#Ksw(e-yK%8tyxV`<dvcPh<0L-=jV
+zihOzXpY}yx5X}k}Rm`homPD?zb8RVSWZumDnxa`nvvRy6TePp(Q^L*j6??k4dA@YB
+zImNloudC=5b(rX+B<i|n>mtmX)|dUO#hHC)aY;@)@g~li#V*>c!s@!bQk|TXjj&FO
+zJ001KC8tl46P*A54p>=<Bi)R;C-M0I;lVm{i`PAg$IRdN#J1j@iv$x_@Ap2jO&!he
+zd19M7k}OWNVo$Mu!xP)oq5OY1SCR~-%~&U#$H<{Fa`D2q-7fapXZT7+N~6d%1@E#(
+zYFqD$g|2a=Gz(wwNNE(=zMRrbzH})hrBS2~?z%{7W3Ljr$CKH2rf&D?P#4*;n79dB
+zVHyd-Ysl8*Xl~9{7>66R6{eA<ZG~~Tfm>l3siAA;q*?MR2YOE(aYJ(;>qKEuX-z#}
+zK)9VznqM>GST%9pyz1eZl@+D+b#>lm&zih>li2e)V0f9g_vz?*gq$IhYPb;M*+&L{
+z<kDW>ipo%Ve!tpk_E%>1EsT1)0y%2Sscl9d9<`4#KW_VDUCr2>(ZSKpyVZ3G##eG*
+zeczipz`p!t_V>OH@m+H~^{gr_EbFW9csV&O-h&y`yzi2o4sNS!Nz87_*!}ftm$+DB
+z?>Xk?<P7htuYG-WC)xJm9=%YzX!AGKb5#3Qv+vW|w_mv)NAb6EPIQ~r#W!lsaJ&4P
+zS8`&0&DiKp@zrr*&WV#I<yQscYwB9Pzq>4u*{`xXR9jpziAw|(^JshT`+sIX_Z75x
+zCUdtb(#Ru&Q@w`Zf5H5`60S+a#NmJZM9rNu))$_#hJ&lFpEt9D2Lsdf>=F*sBV#k>
+zs%7&Hs;FBQ+;LByJK?R6lsOXL7fG2V(!JI-e(QR#S|g)sm101rM;^pz*^hg6X_K;~
+zE;_Oxc}wmlM6k&@QwI`WoHrqY)@NzCXdNIovFO%iNnLcL5#8}%6GDj3$|0e&I;+pn
+z+UgoMgm`=Ac`l5{1ZzsUY*0Nd*E?!V%bRR}M$che;Byk}@NoI+YbJQvOC6?pi1$D;
+z`+%xzD=RCiYO1|!$6gATxAkl=&*t%Do|nS;Z*)rYgKy(vPak}@YFmEr&6hvYOx^%b
+z^b}jt9Ij7Vlco8DDA9vtKK~lF-u{>b&&c^q-D!x<7F+4Jm8Ox?n^yYOSWjviKML%@
+zH?KA=J^1DsC2-+?@GY60d+^QIa4BY8;s@V0DZg(_MLjUKNp8aH*XHC`$Nbv-k!rYs
+zp4?B|9e;c9%~##Hd-f^K2;FX~N1G)W3GTr+udIYxJ^1E}WK;Uzzolo>eQDOY#@l>f
+zkq+HFUx_=nC7=H7OW{Y=e9h~bQR{I3r80}^<|s1`67vhoN;%gKMeS!~Kd5(XC<&E^
+zs!(xusy(7!TC;ihdGltCyT^vDHbR;=r{thgsasm%uTu5(BXo3$yZD;fC+3KiSDMT&
+zD{Q9)KWr8`d5tu>cd!{atF)X-E)20Fd06;iLgzYB9ybeHl_`7-i5TYuhbAi_yw0@R
+zSYxnN#_l+xgISDuW>61-+u(?+uXn7}l=0_@45-9;;=-bw$msItai_{rWu#gY>PEWk
+zJad>|T~l0EIy1ktdSV{G7^0t8$f+5}R^poaA*Gr5Ll*FF$by>018I=HL3+QO5p(M>
+ziS<D5<}5peTV*^8L;Z9?tBmDYzk*VqH$UnYX0kYnu=HFfvW~k9Fi7V5qFBu?4EGeJ
+zu1z%G9Ob@cl7cb^Ma}HQ8w<Sc7T(S8R`|;b`u)XUMcpKanVC_)6cfI`Kd{d3Mfa`K
+zR*=kkwmD?#_V|E#?s;i#3PBvy{Ien99U+mXkJ=i--TmCif5}>^e^kv_%<^)QMnlP&
+z^}2UotiOt5Z;3~Bi`!M8odwCt>=#?+sBn?N@CJwB1HyOZONU4AZwOI*S!is`UV+$>
+zy*)6A*WTavc16M%e($>!34`#~4)3vtm>C|uBOqzl4bm?c)x@n1t;(AjtgX~>_}Aqg
+zSXy4{3XWboVupK?;g*%vd`NHJKBL2S+^8GTJnH6n+m4d%nn_krW^+N&=MK%~grA?<
+z%wqnB_fZm#r~l19pv0m4-rIc=Mv>Jw*_mSVP>5gX=DLNhIK=L);?Ve*B`#)^YrEfA
+zZ@X5)!hg?Oj|l_#UGF$1jG&KgE*swb1SIEHy7+HD6O|dWt#6cffN}dVXK`ekJ4;8l
+z=oQWOM~zC}=zTKXcD95i#-A!|i6W^4k1yMkS&4QAMx8W_w*6l^aTroNYgVYrSHYao
+zy4bFfMI}pYd5bz9i@n6ITNp9tW@KH!-6C~HUS;*9()@*0Wy3RrTCus;!uJx+-|Fki
+z%_RO?(ZJ~Q0r%s5nZdcudt+ly`dm5HnFI0*tE+X*v7&rLVQCq^oRy#7cUEaxsBc+m
+zd8ps4vci(;>V6YKT$h|!%@;}i++LBpTFEZRyqr;awblKnxLtQ!#Ai-cyvz8y_KCSd
+z8C}ibi10Q&@79p*b9Hxfw8xc`y*`D7#r(-`S9Vakjlq+-$3;@vJgIqVcx3$GjXn)j
+zA5UZ;=NxUl?Efvr%sw<2KVKLgS$5E3`h-u(5)7<hA4XQ(7F;)~a>gVrDdy7buWt%h
+z?O>T&fV)ey294nx;i_@$e`<-`k^Dcel#P!G7m`8VNqQdhEWB_J3~x;CTdY&`sHWJo
+z6Z6Qn+f?PZVjn`nxHGfD7X;$ZwW3a!lhnHT%l5C{l9(_kyOgkHo$B((mi5?tDSXSi
+zwQD0=)@k$Q^)2gGvC^tr)~R>VY0J9I8kp)S<(T!PubwH;_eSP>)c5_|`kWETCV%E2
+zd2c?Ek3TF0`*51)J&%#hXWoLyVba^GSzni5lUFurVK{{F9tv;sgl0|Ta-DC#Zq$uw
+zb~98@)iq5mOy2L8<oB6XQI$6{XL#JhR{3@8a<D68+9u&IgG*tNpFaAH%81$D`x}+P
+zWxz;1Vt$q+a<N2>l%R>|5-#kwwvD#1@0hmPqP`<L6k^<Fa;Dn6ACOyAQJXLL5sSK%
+z`#$``Cu&Q>Z&pU)Z5lDf#rAOgog1%%#{|d3>=)8RNd3ca!TyDnY+5SjXYT6js)POA
+z?d~C&nNjz;!&55$H1AhDMW&Eiv9a4Xg>{6V+TUGS@y;8)ALVO#D^aYQ_&rLS@3N(b
+zo0G0%Y%@z4|H7O(V{HSHzZT8gwK!kpx3(icR_I+uW(QmNmkQ%DM*j|D>oZ1f#6&$}
+z-1_Xk`&*lsF>+6$^%)}p$2@M_dIy9Y{d93l8RMs8OF8n!RuAuA&9~Ijy86t_yxN(0
+zp%ZKQ(iA#+VP2{Gj#-8Uztxr8B5po<XVUzddem)-#Hak3eRM~o`L|{GauB|@p4i^I
+zwW8meX@#ZzDou-)Sy_pHv&Nq>_4<|B$E{!E_<ftI!ZPmA<oOQ&kwZlEQ8|;gwjZPn
+z<>aJz?!11i&tKH>V9Pj+S^QHxg%ixQ$7bE{#_RShKP}r=v!5eee>Y%91*gXRL=uO6
+zU;K%mNRE0qXN#4i)2`p6J}o?Kv>El`zIxP?m2T@*^V6Wd#kHjaL0-xDVX;{fj?8$o
+z!~-tgE^Z@byh*B?wvmmKBmIH8o4?Upef$=w9Y>a9??!%d|1BA&E+%|uKDqy-7A-sG
+zFf=u_<AfHe9Y^YGdxre&+T8L<EaMM6^*KZ9it;8W{`OTnYiR5c<Tw}oL-^jQ6%KeH
+zGTJi-n%G~&=ZrAkRl*4na}Jx}2T5~A>cn-^OY?nk{OyW~`R@4J6_flc(iUvAm?KT1
+z-QZiWEMEsjA1dR2VfojOf|&04tqO_hoZqI9n6622(A?rZ^m~=n!pXoEtyc>t1Y5AI
+zl-(Bj6_zbnV&c=csG<`5l<ekBFaHSnt;$N&YrjodkrS`j1wFwp1&4oml;1%e&htdk
+zzlF*zMBjlc<}D<Nj*(HPa=&xQzU4UX5^93qhE6nUTCAb_P2%Qb%Wqgt%%c38l@oVT
+z?M{&roVB#rG?7u)!Xbo#wmBo~H}D>5g{Vgs?Fqc7pKj7E%AAt$BX;?9dc-dF)XvvP
+zIrApCOI*L^Y%*tLeNo)`Z1hQ}f8mPyj+-cN<P_UI+cG@feZ<6_uje$|M4v9((?3HK
+z<o9;#dXK9l(CXVsGF|fxJKmBL?>GFtCXufB_F2-L`r;DF*~0afer4`T%TRlaHj^!D
+zQEw9Qo?Fft!gICkuCwmRThOn%rm(8UUJ<e&Z+>1$w0c^MdRpGp7<GKh_M55Qvd$Y1
+zJFw58xu|$!_VQJR*c4G-63!65Eftk5=?$rvRXX*rmiWF|`4__0|KdxWqu7;hGaTvu
+zQHn|NE9$r9yd^sNM@`sGi_N=T(1*P>4C}g)agSE(_kO%q&dbXj#M>18ufxg9s}5%N
+ziFsYl5FU(<<jTs-pXpw)=(gI})yK>MwKcN_>OFc>*c9YVg#o42Ie9}zkIu^*QmL)(
+z?0FBni43~Pks)ThvAT?nTj7$OLNpsEeN&=)Ss_11M%9xVP0vNkWv}oac25XzO7(>1
+zy|JDYy#>Qdi0poKdfR5N%MNkZt2gIY2q)(xcKQ46e{TLQkR;*!-dmwtis$#-H`!7w
+zzv~vtm|z&+(R=aqJb*V?WA=o3DbZ$bZ-keeV9$h?&i=6QW<^g<v0suGdHPET@7(m#
+zqwY_{q(|M@j!6%nS$LV<iG=qjTZh6)ee(Gd-Yn?Pq|1Q!5?kJAJ2dtc#3^#bzH@ey
+zvPRy_x=Gn$U+TI^S;OyQ+oVj9^>dT5v7#ojXAGto9okLn^;FaV^t!uQ;U6E(3jY9U
+zRzyE+*E|aJ$X8hK{tS<aV&2GDRZ*Wmv!X6koL^B{$n8mPhLl#<=#8=b3`Zt|!Nw2o
+WUeJ4RTV)%5crc|gjl&Sm4E#U0v=a#c
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..e774b84e335e28f389b2cd95eedcd6dce709a649
+index 0000000000000000000000000000000000000000..f338de748b189c6685c8fd0bccef0871848fc056
 GIT binary patch
-literal 115432
-zcmeFa4VaYGndkjfSA&fqrbSR<2w&~%AbyN7#xRa$8k#Z0VU!?IVkoJmfK+1#2)4$k
-zYl!7KjA2}Gi0itn>86QO)$+QogHG$ZN^I9<vTjC<<N9WNGY!pT8#ReZFw^CWvcLbi
-z&r|hObyd^JIJvHOFZ!bRKhOER&wbzLocnw}fBWuF-ya_Yv4B7QH<RC@2L7AQkH3%d
-z>y5j|s{b{{T-0E_;_x?QNd+hHtlx*^$lvni9jk8cuxEQ;@<&UTl-|Rqr9ZbPrB}ye
-zW?U@zeWhI=Y&0MHfBEtiH{1|$SiXGz+$D2M4j~<rOHM(w7)Eu;bNTX>tsSk=_ww{Y
-zx)%9}d;ckL>GfY83#OE!6`z(bzu{|bt2;imyyNTZS8Z6edinD5^5)*Qpu2pG$pz#8
-zo<EKSQJTX9moHD>(6OOy?U%hnWqPS!n8)4T|0U9^4<m!(W%Q5q)~&svB#=t}z3tPR
-z<0GZsweoIU7;|!srlsfM>6Mpv)-NqaNXPx8S1E&Nnx22lzp`#+ruBvl=`UP(^`DeN
-z%=YOudZ!0SZ=}EF%h#<~lV0BTmDVq>YFoQ{U1fPM_UU;w4tj>C7iQ(MQF*_zzBS#k
-z{KmCkYg@Y#`sPRTU*OXVPBPbC&%a*yx89sWR`~Q*WtOkr(E62C=2<D<1)f`vns?CK
-z5OexB2Za>P)U%BDa&Q6vOOK4lALi+F=YAgls~|TMZzBpKA{1_DNi6tx1m3hZ7Nn?`
-zs<(^y>F;d+dj>qjFQkFTQU9Gw$m#q<&$;ccZd|tR#<f(swsmXe#%~rs(Q~fj!`Ier
-zxIQQggO>{zmdmHpvTnnwV*E(@%jdUlKs2Q!KI!8tpOM0SVwB;;<B;xXdRMuMx@g0?
-z^r{<f@Kv@-`Ion>TbsUd!-iFB(_eS#OfRSFs;}SBvFa<h>90zBE1r2*rDNWWZS5Ux
-zYnQKXU)LJe^eX9Gx#EUZ8*cJ~sOrCFRl1|?rd2JTjtc&X|0O0@&{HALVPUJ}H^1$M
-z^{pLgQ|HisSUO)>(YBVlBL6CSqkOKSRBedBQB)(Ht5zX_whrTeg<dUPM1gCif7unQ
-zI-G`%Twcm@{oD;J+B!DW=I`gO{NuJzJViNIl(!hB7CjrjzP@8!MLOq0TSYnx*QHzA
-z=ib<nS+%yKEge=q!iDKZ^!O@uU{|hPw|3Q4H?Cj5ZiAyy;Yxf`n`#WG62C<aWJlYI
-zwssi2s5O1PB=O#@&*tBY2U~gE_TH`E%k7CTfAwfK*!SM8vHW{2!PW)wjf?x^4Lx<i
-z#+UcU>v|NfGYBq%u8FgPjf)3Q2nsY?6C3c?v)ubnXfC{W>)br)Y<21NDZRS<d%QpV
-zq2@x*N16+{Q<@8h$oK46P?$X?D9joc&_jxbdHJJ#7Vp>B{FnUUE1|>3J(@jn->-<1
-zx;-eg-Vzj6+#3|q4+MpkJA%Tho}jRLZBY2~hM<rmkIda5`DE?^$t!bHP<S@`@u6qq
-z{IXL(e%X(K{IaKm{IVYf`DG`A{IaKk`kl%%zxX6@($FNz`fPjx&l85e@#CQIjaT{o
-zh~EqRzVFJhg|axFHf&rz)G(vD(C}XK4;vD})^R_*?cTO|L7_1Swlvl?7lOLayxKOe
-zxiCn%g4nn>Q<nvWX)f-@ms8goPw?wWT}v4*4+;(6Tt1Y!0<27PaYdSoEzJhf%v?>H
-zv0!VC@{7mC^se*it*DaT>WcJMN77s4(}R~vZ}r+{_%0qdBa>!i(u_=+kx4Uha&qoT
-z-QHYiyCW!^1^sPzfzW>zJUI)VoC8k|#mDzVd9vni!r#+ecoV){9~=MX^^d_@%J49<
-z!>#9G<kyA#b|AlQ<hK*~eHZyXg#7*z`Sl>bJo3vSKhcP;^`xM!?Y;nB$9h_!G4o(h
-z$RpbvvMq*z?zV?~80gPDqA-&PGs%U?#pC-jPXvX|_(bxb=-e`oH5U#j{U<2@Q?3qd
-znGqmc^1bmHr8TK1^ITAPd_wTJ>c@@GG#5H%!<z@23#t1o+#0Zr_sp8+LT5{SUr+oL
-z=s#tM@Gh;^i-Q7f$Ci0M-4r};h3Cp+%|pa}gt&K+{~gVRw?xZj&4u>!0{BN+q3`+&
-zg2FCz_F;7P;lB93>n{olJ@J#t<K&@+aikOb%&Ur@Ccfe}e7u>uym9eNe)3y$9(i0q
-z9#`Xk5qU%B3c{_r7}-D7T<DJ1LvthPH4Yt&kLmeI`~=rlxUydw6h1ZH%HE;)#1q~6
-zx%a6-p><|ZNWBVDkL12$DzwaOF6>uX?k*3XSuu8NW-Q@<K=_v}yyO2^(QN!u8mUw9
-zKb>$dfL1TJrB34cM2pjUqL<rAlx2dsrEY32v`*mtRPsOF@=fvF8a_i;D|9LS%oWXr
-z6y<5X9Da?#4L+sdQ!9LO{wwf@Pp#LL{KexG@@R$6#W)Y~{)o@(KAzD7#aEk}In&zI
-z)S1n+Uus9^(I(E#|N5Ff*H)*V3(FjA9i**3KwGVLIUWlpEU4eO_#p2}YkDyK74bcD
-zDZjeFrJt(vd4j1QSGawE<q$n8$KM`3dKzteu`lSSzi2?82R{@P)W>vYrw#25hW=W0
-zq%*sGDB2ec(x)7vT|W_?%>Cw{y%~J(tZ&76J`j(ap5c!XSx_3kP(G19tO1>9h&8)B
-zl;_@<>EeO7D?e>@$V21DIKrPrTcdVz)_dRCt2m-*q<&3d_EU~oM{fUN!<b+~u5Vf|
-z_|-i@fF&PH%=InrZ5U_oALf0KvIOrm-z(XWpG#YAG2GC3C!c<!Z=2#rc~Qy306r)k
-z)dA6X06G@X@8sY`!$+G7GkhI}Kc7-s`^iV)a_~6R!BY83{cmMHzq9iFj%BwCemsn=
-z(1V?jJI(BpbI_%;$6%X`L#7`#c|>I}+&1};*(Ub{h1R=+!it-MLi!eLlZU)*ayz!k
-z9oQn|m3aV^ZSo)}+hhkwzL~rJ88(XS6Z$B#RVF%H#n~ye?`Eqsf+r7s<9+(kx>(^G
-zZ-BJ5vR|Y>sq3ta&NiUEayABib!IVjw9?kNy23V~4J6)HXKP$r#nw=ID@aG_t+w>W
-z`M&=w*+Xl}(_2HENq@a{M(o5lTh|7K&tMOg*-snF!?$gS<o{f`ZL;Df+VNYO3#)IZ
-zpQ6oG`@53%*4ZX^d)wq5`nG$$ZE|0^ZE~)&O+H*^n_T}ub79Sc#M$Bc+O3;oAAYm_
-ziJ<Tu+KgS;C+dH99m76(82h9L`y`KjQf7ZZTiYYD8R)lrp!YHC59FG|PEj3qb_{(*
-z+fzOaeM#mSg_%egvr%LVsL#(lfi2M#-zPhw3wwn+Znne=6}H4vgny>l`UL-+OJnDJ
-zU+w7x;+|r5&U1u&!S|Wpr;q%B>CBBUixzC0SA)Whp^fu0HqM!ZhfgW^Riqtxv|a3J
-zzXcjE740WO`-D>YkX73SK8$2`k-{_*=47K|HF>XSF1#VzU@fwk9iT7p3;Np53kqxA
-z4+?GQcxczOUIYyn7!A&b(fh^Fb}4apoUnDxJi`AvC}iHX@~pwH4ZqB_gd_dddFam%
-zlqX?-M%Z7vG0&DegXY3OyuRlj<6~VPbmL{750?jpNsZptyUh5olK8F2!`boYk^XGb
-zt2<$9+X3?ZNl=I*n>6W(PpQ*`LhDqY)=bhm$<j)lP8w7BofH&O6Zrjza6dMhS4=?9
-zPxAKC4xbKgt+*-8w!7@v)o<Kq(Z0z&v)E{Ay`s5fk3d^1G&))?;2D0oXU{Vi4;jez
-zXkAf?m$?r&%Gi2u$u0F1@6Y)7kMR7MJv-axRO?q|UsbhjUJd)@Dz?qI3fpEZd7l^<
-zohS1AM(Nqn{yQj>vvVlZi`XBT%h8{)LE%R{i?>eh@Vad#zdG8$G4Me)cb$cMiEz+~
-zEn;KeTF=$S>xZv=hB2~@*N<X{cd8%APNluqPvc#U(>A`GYYFxRu|`*iqz8H4r^go2
-z{xAlhZO&20D%<*8Q?PFwaiU{0b6Yf|Hb2JrvWt4DHd=gEx}DiCkk&_inv;j6nU9yJ
-zmycUo6G>|~<G1hBN!}BCa+INyGU!=p>$f}p#i35x%`V!{PRiEh$`)+fk-cW9JHB*C
-z;|1lfu(|l>9q#s+%Pty{jnv8e4*JUjv>9Dlo@s+ac_>~dZBbWKY+n~`UjsI@Z0a4f
-zfwDKdX-h5b#n7>Mr~$h&Y<K0pBYqX*(W{_M<3pukW5is13E`Lc@Ya^+;$Oh+3zX$*
-z=(!sDuOaP*Z#f!x?{e?ZL)p40o69%5l(fG{+FvZv{48?Re9Pf0pL1h^YC1B^UTHaD
-zUoIYV`p|{^%jZTk7jn9r=Xe}hx%m)yt~n8>N8J`r^f*1@U3!$KytB|1=~6!JpDS#K
-zTuW@YJ~_9NKINKX`(mUM>Xc;U@`?L=27*#Peg2tzqBccOcd+ksq!HEIJZ`h0lRk9o
-zOl*sMHrO|lFw4>1vbgCgadC^r-GLq`Ueqp8{TfzRoST(R_EEmc=ndy%Ooyj9*>=Yl
-zp%0BiUGPJ7D%3rbJAUY`>6`VHo$#eAzSzYL`{_>RLAsEg;^fiKF7z=cee8?v%Tu?y
-zsF$G~5S>p@|D8i;Z#>odn%qFJuMS?Rt_Q+wuy3NUFWA=rc9CYo$<~I2ZYtXh{PF|h
-z>moO=knfH=S@o+9)81KG%G1g>)uBI)$R*a(L)^K<?TObp`Khkw(L2@8{DA3Hm{yK>
-zjyA%^h~v`6&C!ip95=NGrsv)tdPILEt)(<$&fn6CS(&q*2hgT`a?qhPiseb$yV{m~
-zlh@I7ozpF~F{&4iFD>R4ZEJGbxUYkC`($%T??bugn&OnD(X~68cZ&0D{PSfXyy~5F
-zBHv<scK$q%6P<CR3%&bRzPrxJ!OEp{<*zhV9`O;q19N@irO$_V$1B{5`D7#MbbJ2e
-z=J=BKyl*kyyS#97GQuq?qv3L^&11E*(qpA3yCL6adZ00Dj%TG+&3@>l&CT^0e;qCE
-zS#?b982y8P*K;%v_2Xe4gY?UzYfshh!b9p%&9;>OL~Us}UhjgwLDyeN7GWO@R<xOU
-z`lGUTj5<%et!hs+E~wg;z_U*JEZ3IMR)sp{$_+0&Re#Z&obR8+t1kK{#|y?0UDyz1
-zZ3%r<7kyQZzG_r$3H|G&6Ra)SO&phRi`gG)Q;Is)ZEjuYhuWB^{;R)r@d)Ge5dWec
-zrmY=y^k(57?@k9>O6`_(yOb|snk<ZSqwVa3t}eBy-WKchWt6}4EEjK7TRE{aUPHg=
-zqt*6>HkCa`^~-eH(HKcv`lYnr7_DygjiX+A-VGR!)JLjqP#sshP_A>)wGFLheAMZj
-z`d-mmZB64@bmUp=fKWFred(pr2VK6dAM43Oi{zmGwAkNgYxKkEk^9m!)DO1=`_6!_
-z?^O1~O;zIJ7WTu6yAwVtUbG+9Sh1|WWJ~?8>RDxd*}+)7o3(_2S;21Crch?5Z|O)o
-z1Men@57|2F6Y#Sz)*j|qhcI39ZE1IGpZce&`i!o-xcC?KIUZ?O`%G_gxE0&X0h68D
-zJEf^Mtjo!jb__q)-a9|Z3>_qGt$)Z)uGZh@x>cS=+L1}Ff07)(Fw^(_-ByRXln(Vn
-z^-}Z}`}+ZV9}GOd{Cn8PU{_3>q_(-q)75R|?dhxAw}5=yc!T<-_KWR0Ha|*OSAPkk
-z_T1{sskAw#4vi%($tCLM<mAdgd0V_a(H+tqp_#Rfuy0p=FZH)Pr>(zra?AQY6E~H$
-zCm!GTa7%pO8tBc_ribmM`uH5~qA}#Fi{E7ZjQUi`$MJQ*WcsPoJzojq<W88glt;SW
-z**N)Zy{ku^xEn3Ly`wxc2p5jioDI}%VP$*di09-^I+m`jQ>h)xHPySi?%M2@dPkGd
-zDR=QqZejaq&+3cv#FI{jcAMh3c=0g3_`cjgxt&sMrwQZez+Y*of64bn>=K@xf4BD!
-z8s6N0VmLpJzQ)IRK4|<nrbK^wOp$(9w!VnpK*=xX+$o!L^JVkTPHv%p_ZZi9x^ktx
-zeS(|QzpVU7BR$5odoB!aj%T=qJTo3g=xB-1(d5HBw~)sc*U=IB57d|Fh+7=x*O`ST
-zFo*mdP2I*<)kP=w0ke6mEeOl$dEaOHF`4?(sk-!Ark4pe-kbMnjUg@i!{WQEd-#bb
-z)$FcZ*3%as>tyK4;-1x>*m`WvzdOGw<)M!(=J${Eld@5r?zD^@eO+m?u#RWM6TL1!
-z|J+HR7k$_BFy51f@*Roy3nH{W1+CGwC)KGz)`kM=LQHlBc~q_=jmp04W4xaBHbB<f
-z0DWrj8i%AOqqYH>ybVCRYIcC^RsBw$qxAvk+rrPy<y70dAbVig7}vR3AFDkKvK3@!
-zOmpdY8_v;6y>hgIS<`LT=A^wn(GsyIno9OWS>GP7=-cCwzCBBxexE})t`7V5zG=R%
-z>h^7GOQdgyC$4XA@qIgfPS=_$`t~^WiE?#y)3*;;KOEZCr8dy(DgLE4(DIV(O@@@e
-z&-y#(MtVwD^=4S#j-PAeogeWAjQ(Tw@2>wzTfSfTsPBK^Z)nT8_6#1YoRw?+u6`5N
-zwS(kW7B;e;*iavQb>k_%{f>lJo7I_x)-e5Wo*--a73~K9o=+Q}i*`ew=23``yXfo5
-zdb>emq)NMiu-0x%Hdeno(d{nUnKHY<yQyruq0RA~{>aI*kFf`Rl6XH%o|S!;`m}7M
-zPiwM#WmklKgX{_?&lXFw6Z=8)fU+C%16EcyHlzLN)EJ`4)4_aSXg@gmaCdx&dz&PS
-zO#-cElT1KgY#zwQ?2Cr}QML)`ix1&?g4V~iA4BQ6x<>rz_~-w^(b4Pj;h8wS4M8x0
-zZLAZp&*toj?D5JESb2Rv@N)QWdSd0aGD|;wAK&Ed6t$^o(wFWxg>}#D8tF(l_L4m+
-zx~&d)`H+UIhjB~mWMpS;i}w%fgpaE{T)*MN7yB*$?&#%N`Bd$<s4wy>qjjLvHZ|d=
-zx}rTXZZ8}**hOmZ(ZO(!n)U&NV<`3YALM%csQL+X#LZtbmfJyn88$9toT7biS{r_x
-zI%50WY)(RYs<Q9E&IspRJDF>cp1JjbIP(ZISlfy0Wz*VX`B>|!(%b}fE^LpbdpS2>
-zKLxsMzEf^)j>gS5X#MhI<ZI(7%|#q`{;~yWZ{w%Z2bbnHwZ<V@yEP|49Xja3Ud?>p
-zMD{A$KB*m9vo&_(ueo%s5xDuHNFVoiacdhjr`{Q-ZD(G+E8EC3<105;BYrGmd}wot
-z&JG~oPTab1bGqW@Q^<okmr$Q=F2Uwgs_B~c<3#NQ>fV+H+7|7Dkq$M~8C`?ZZ2zV5
-z(S8-pXYx!RZMMXy_o~EW=x99uUZ307qV@WocgW}2_%!rk8oZwd{nLi}TkvQ9$o`MG
-zwK=z59P(2%3_`;@ey>f8{Soio+LAvSkGXxG$My5LejeA)<L&41_ValAX??}<{yp56
-zalC)`XD*K0pBf7l=U9&0pZ~J<XW8DUmiWFMj3bJBqu4uSXMuDsNcw5}UffuPy+>W_
-zJ=)>-7j^o*6P;PkoiL8k7*BgHitQY>e~$5j?W1Bp5#uDS8I+Bc7(bPbl^8dW*H&A{
-zoor(zKQ_`h#Ku2gWZppIpNWh~O5>w&?oxY=a_kMV@z0X7@sDWBGmgsn{X;w0I~1O|
-z(Y{-qYl+g+!@9vC=$X#Cn#Na}zYF(JDy=T!YfKyNuL|c`qT{k~ACudM#d?e4X^tb@
-z%OqMlp;u{@#!9xINntDZGW|}+NLh{JZ6DpgbbDQGtaMygkL&8F$MeT^wRoN~f4p7Y
-zcD!A+ebd$2)g$X7`=eP$>uj0KTsM1gvQvdGtKZhy*c^R(j`>H;L+02+nZq8?KIR;K
-zf2YE--m$;l);q#E-cIZZ?cZhI*`1SCA13?3_8Ls0KW^yJT7=RF*VFpxW7T&a!Y|tY
-zhUbGzHUWJw>shW3_4|i*_&&9ZKDCoM&Ck$BYmelI>X;jES?bQ14Wp4cTJ6^yMx(PG
-zPB9v_K0#T_XvF3?CXLuYMH;bzv`=pb>569UZ_}RVkj4WsPveKH@$qEhettNOZvRQ6
-z=Ob$#$fS%$=DCkaBlEgN8vVSj=C~b=S?vQ`T%_^Ikj9gPueOdYmvwRdHEnB7mHf=(
-zKAkm!JZ-b~(@6IDCarZeI(>@LZF@Sj=XGQq2=`cp^lSZ8YZT%7sc6zVoywwpFm5f3
-zJQXJ7`<-E#CRHgD^TKYe3RK)-Wy0N+smaz7U77lPnW!gaWg1ZVM^UC0ORHEW-d&l<
-z!_gnt-Zoz*(sXX*87<S5VVOQknZ}!(7F4;bAT`$RDhTVVturBy?i%IA-Icd5Qr@)o
-z?@ERh<;^PWD9SrfQC{9%dHZ~MyCdbzdbhNN31xT+<&|u5j1O}0WkXsg$j7yo$6ljw
-z9~SS%M`7d8M_DhE{jB!nEaHwkIe7AK&I6gZ|0CYV#DYISZ`@ea)(eBJteI|kfi@)*
-z(;63NiBGU|HiPi?fAN06uO*W1R;^)#d$838y`l9vwLu^M4P}xwdbPK%st)4rWYTSG
-zr%nf3>by**l<Q#Hcyi2o)n{oHb&z+*yKbXFv=ntP?cG`|Oem8_D6h$cz9XJAnG9I|
-zMVavK(v901Z#9{G?)(o}CN3|n!JjttuS1#4_zh)}_G{Q+Rhi)KWRkVDVQcH+UM3$e
-zmr0Alj-sA)TUte#@a}j=9<B{Y+rD*c>%3c&g$ZTyxuQ&_B9rS(CViHFQ6{{*bO)@A
-z)nxKFpZI`f;_@<?Oozs4)8l^^*1cKOE%8t5%DG>;J^#I~j6Adc-8+CiagcKaM_Yn@
-z8lTS^7d*M?f{ly)89rBkS?k{N-AKJvef<e(ewH*3_`4X0@9M116NTgKBkSzUP;{J)
-zeZo3qtY<%KeS_TjGRQjN0^MWc_i;q;cBy7>m5pPwAKKUdPr;M>zY!D;WP`%MpR%?I
-zt?V<{I{2-~^S{yA=c&E!%$nw9m}7Bwv(VqW`&qD;iszf-?4x&U+b0hl{Z&vn`X;}h
-z^ZN&W|C8U}^ZW1o`uP1fet*sHKl1x4e%<{3J-_ehZ0pqCaE_;&{8X2r>-yHX^(TkF
-z!FubTvL>5tE*vJFWYSOE{lp#2)^8pB8hrW--v4cB&A)%04|jv%{&k!Yy`j0F`I-K&
-zHJ9Dt@m1RNL;uwL<N}xPxa#>ryUQ2)_e1|+)0nM;*OTvG^8Ron-?R_+WuI@Fe824T
-zy}mr(t9-thk@AIqE?;=KA07_&k?(Ty{m;BV8_D+?AMQ&&-)qSCOFrM_<@s{?fGh8&
-zk@EcqpWgo@pT8&H^w_O~SCQ}E^8Uj}zJKh)UFq}vWAeSy=X+IozNh(ob0g*ZE1%w*
-z<nwd#ji0b}@U!GQ!2AD-<og*PuEpp38S-uM`F^%MUl{1hyVvKtzrpnC5PCHWw;Xo4
-z&SvGYp>vF3bJ)*e8#PFn!GGdj0PN{ZEZD6(mh?Qxv-ZIZ{uBF<c-P$F;A!7E9bJ4<
-z`==Cc@N3Oa&WZ(}*1Zx9<RicTk9{i2Q_n*@zsrxq6%!X!vzg*%Gez}(H+4?>&`G`1
-zdBGg}Xa+w`9g1tuL?eE-&#(XYJ%2vw`Sbhm=aZg4pDyQ*=+&N_|Hx1EV6YaS*o&b#
-zPCF~FvD7tXeA3*g#=k{A@f`9==PvWS7x{EegiqI0@Cm;npLh=WwCOkD6YZ4a6Z5BC
-zj19FPYw-8f*02YR`PL$zrg=U!c|J{pPfearzgL}4t300?u+1pX^~3c^<JV=BS7TT`
-zf2o{L8s}m=7Wu?;kx$IW=6Nsj>C+KDeY%2A_!arYbI7Mle-l12b})UiJrmlOGkBWx
-z$<8Pi`ScObr&BzixHn^fJ2PB+dRlcpeGEFP^{-C<PorGyaZ}!dr!_zMkN<}B)HZ)h
-zX~ufgzkdJXjf-c;xc7s8HnfAoel+Y?6<_wR^!I4?LtCTgZ=-#w^>xj~eLZ_Wpu1<P
-z^}EB*_<q#gNwVUkI_@;8E2Pe=e^TuMa~*EpBXfEk?MpcCQ9j?{=0v2w=y49c)mnzt
-zGu3^5)cMR)b=)z*?-71I{2r=<mkmAXsXX7u?_PfQ@VlGeUHoq0cN4!2{MPbY!|ytN
-z*YdlX-(r4O@SDf)QhpcnyNKTf{LbVzvyOW7ar*3!Gsl44&wNamANyq{%q!eDb)JhO
-z-ARqDbN!drD_ZgE$Bs$;IOgmajSbok#0ukPa2EfK7=GL-_mf!poosK+E$D8t+3x<2
-zVC#jfiRfIq&XS~l7Atf>m)1tYvn8pq^IU#f_h|hkcTZq1xqN=jGx@kY-i>ij#mM9R
-zOkJJ3t4-s()cY}4cIjG2-Mm7p<>BnTa8Fid-pOu$=*AQ43h&%(d&W|;=M_>f$GF3R
-zIIqSEDfre3|CG*(m**DJug<l5wN5gcQ@FL_CjZQ@=N3}$^Zv`Z#XAaCygRp$Ie`1m
-zaR2e#!g8$(jcIoG7qtEa_Y>#2J6cjdiWUAtJeZg{Z~l`F+;uceHptk?=KC?1SD9>f
-zL}c@jm(3$yHa!)xd1M6HJcex0qcYii-^%7>^F%~8Peo+&%qV2@LaZd4=a3D$>SXf*
-ze6c*rWixYv$>s;K!WY`TY%W7K55%}L4B0%0Y|!&o^xetk0c7)Fg=}zZ#m&j)DR})H
-z?@vTz^9-_i2=~Wu-%%l(9^8L0w<w#7LfJ6?HcU3uNhh0otH@?eL^f-^Y;N+h*-#;y
-zn?{h$Ey#v?UnZM-BeJ<YBAYuRvbk#%vbiTBo4b(>ZHtr5J@CcyD3?v$DJGlyVui<-
-zd)cf&HY;L<*44;nHL{^yYNdU0vRQ#_R#(Udw^rPoZ0>;9ck_OGL^gLJo3*&#g8P~Z
-z*=)f5zLISImib#(Z<u!+CYyV_Y_6>$n+qbcxyZ}rQZJi}D`a!&2(p=nY-p#;WOHpq
-zHkU<Yb9qEISBye7S4U*C7}?MlIN4kcUo4Mu*&Oh)xh__ibd{IQ?Z{?!jC=Et&3VY?
-zCS*f@;$$-$*_>A)8{ArPbF#S{UN7eTvWRT1KsFcQJ`eW`Dr9pp?$?!M!+m)s8|F`k
-z$>tF+o0(N)!+k;;H@kj-JBeI>GuF$du0l3rN07~l$fl=4HZvo#IVmEW2@%<xIttlL
-zjmYM7Wb=@h%~beec~r<|qSc!-V+HOza`#!L9z-_WiPX9S*>I0i>Rx1XpO?)qxtHkI
-z&E@?KZmqaE*-U`fr<2!75!sxIY~I&>KDfWzT;AW*5&q1QY+|8om<QhP&!V)^-w(#e
-z^<=mMNH(7vTQOGZ$;S6xJ|l2<IO$Bi_O<7j`)^=OB|9$jGuZ?D9)s60_HW?Myoz(z
-zJA1NsV>nK1BV6XOd4;p&=Eq-|AH<5|ugnkTy73oxcDwPH{6c$K&!N4X!d^)o2ns)B
-zd|GWB)<53HVX|#>X4bXO51AdTzH^1{f5J~XmU-Fh*AB+4vS+v#s*!n?M(!7Kcg*hK
-zzSRnQrsGxaEW@VRjXhUZ?;kSRq`uGmjM9G2r`_Yz=H9Qew0jt<lBd#l_qjbnJou7%
-zA-oGt<3sMCB3$M<Wd8zpUwz-(L{F5bwT3&QWP@uDO6oD<%htfo3h&xzC7#Nj^7lxs
-zcmh3n3O+m&I6X-{f$lx!b&tEJ(%e0zem@o3I+6RRL`w=<lxAqptoQ*mzKlC}PqqH2
-zT=!BxZg%v9<5nlXAH@nO<mcLM=DmmM-~(O<nTypJwI^L?I{09~IU?-qxZJNU>EMIt
-z-vc^h#951|4&q*>gS>0*piBqPi|F8a6*`DtQ3rXh)WHizql1hGoDN<a(ZPG*eW-(X
-zc|Ez>>&d<4vTeJ%iVoiGb&zpJnGRm-b?|ntgE#rKuk&f&QIYm_6*{=W>)<WneSrRM
-zJi_UoV%<x;;&!itYs%AFvm&B{tE=cB@th8>HX2u~L0{IwhYhBK;dw9DH?2hnH&o~#
-zZsFa%q9p|_t)yAh!8@SwF5K_N{hkUPytldzKC5<0b~p3<!*uY9upP9uqn?(S>EL2?
-zka4)Jd4H*-gNxC@D>T2vezvF%;$EhMylY;jOb72P%^PqZ+>^7Ihbp#%_!V`K=Sm%<
-zV;My|sJo3A-<=fE!FljL)WM6ro}B3Q<g#+vww+i-2QLlVLDrU|W4e>P4qo7OaJEl-
-zf=~ORinJ$G=-{bd2ha05$ojf#2ML#%jcm_D2QTnCIJG>jHK#^&@boG=NIa*5r+Xco
-zioVQ*4`+HEWUeQ?A7aH!bnwgy9mK5_H`fP4OA1<aZ*frvFM`I4alaJzc@;W%S#=$p
-ziu|V4Sl3u_Qt+h9>!ju<tF343{iEN0JtOraY=Q&+F2MuU?-G>GXujrH$XTX;@pDqg
-z^C+LU8;sXJQ}(;yRkgXavOPoD26q==XUi#?H;e2WV$PmD!Zz2ceL|X>9zJIlt}|)A
-zD(3eOX|7-MY0^j4i%#r2*;?TpjI!Z$j`LXaMd5umN<;S>+C5gf-|+K84U?$foKe;O
-z7THnn)5qspuIkm?%=e;nFt-=dk!#XE3(i49i}tf<A4|gwYoj#Re=K^muSIc+Yq+GL
-zGrXcpelvK^H~IVFiu5gV^t~F=$NU6m3zxX_x{gn!d2`$U;^`YGr%(HCMzzk|S3x7`
-z6luiI(b!#1qxRcq%~*Wg71GIAy^Kz5m=YgtUybq6_J4$Y%+tn<icb3Ja$efK1jb8$
-zr(9Fa?%MOb)cp)0op*$EGHxxS)7x=QXSySF4ph*Y9VMN86?BqLiJzX%?g~0dJEU`I
-zNGD^s@A>&$-Cd|LTu)P-yEDj*<FtOkI)&Ucj(a%n&%(>L##WJiy}*y<ba#?y(A|P(
-z39+?9+eP;Rg#L2d#JG;jSDl;PwQzNrO_Tqm+bhy5yI<qM9Pgyvn~B&qVVHtnXA9ro
-z;azslbjnz5j2DctF`l&tI<M^S%gAcqh}ZKz+pAL4pY$mAxO7{*VqGMiqFnHEdY;vt
-zgo}!8h3;Gk<r0o_-d35_ZZN(XCZBk`Bp=z5@h>sXHv977f$**Z?W5HC!nGy&;OFE+
-zd?z36k3<$4V>|hH|1$aDX7?d{v0Of<xP2of`S3nWK0ZuQKK?zFPcLOWrhJ_J=H-*N
-zy(6xEciX;|qI_CLx!)x_e7{RkKKMELq~qoCA?-@}XnoSj2it#`d<G)&$!e`9In+aY
-z=ju<Nzu$_r6k7*cR+0~XPCmr9`orG0sC>MCnS5}w`tzl7`TVLvKD-Z;j}KFnkADy4
-zvuHH(Va>Bxe_HImDkq<;-5*huPm}Jr8bx20ws^(*LpnwI;OFGiQeQ5gCc9rk{X|%Q
-zrbBxzyEyk3?hYu_FW9DM@ujMLyzsZTkJXP>?)Rx?^BirF?OV_HpkiD5rv<DP`h7aA
-zy@t=alNlT6UfmbKy#c*^Z=+Xja|8Qky8O2;RF?h^1%<DY@1bd>{VkRLZQeiQ;*T2^
-zzt#J1s^R}d@1LvT|9S7f*Zc4Hcg<C+=biq(laTg##O;hPA5u9!<I@@ZEz&tZk`CYG
-za{MT+-~R^mXl#{(o<ZmtaeezEk@fA5G(Y*>>~%wKecP>>+xqsJ#iL)}?&o_I@7+2-
-zk8aew<Kej8*xiKEmH(6V=ES8RtlpIE6YM+1?Nw-fhWXUH;(nh3XD+aZGB3oKXJVY?
-z_O*m(Gc<3i`BROzG>@<OeC<tOU&8yWW4z1n*Zh9T?`Qnp;P(@L2l)M%AM>`ESNXln
-z?+5(8A1m$$Y|y>}zgH{s%v={H>{r~p`y(;to9EiR`$K-s?H<3b^H}-1&YFAXy7}zO
-znH#^Hy##CSixu45b`R?=^bslY)|^x3Ue=EotF=Bd*R5G-{a<ZS8}T#uvJTQSx3B^~
-ztsSdAr=NgN(Cp^=cU0uby5ga@pF@Ap@^NWD;L~`}){a)}Ank`pleCrZa_9-?e_9{I
-z{RzL$@>Hy_QESI{wLIz8^`pFjmu0-UBf^_oJa1NbI`68Wb43Mj)_C6B?s<cZ9B)>8
-z-rP~a8{%hHL;LNN3%}G_&zrm94YGB-xv3)0H4)xyi122uPh*4U%}u0z3u%&eD`}VU
-z<}TdtF7f6MLf&XyJ<6LmDtL2sgf~}s-dyDAytabQiz;|?sprjN&l_~v@#bRBo2x5$
-zL;TFe(7u>*;g_1{d2=1SIpFiWyduv_BfPmR!kc+Mjmtc5E+_3PNRzZ%NxO_U*W!L%
-zi8sI0`keGe>)KJ?{JMfSvm?Bj>3MUar}MlDI!~<N%>>VzGd*v9>3MUK=gsU2-Vi@?
-z611O5x$sM!>Unbky!n~Wb81DN6C%7hJ;Iw)eHy2G-b^L!nWRbDt)yMXoAYqLpv0Sp
-zL*8gzIl>#YVP$pdedcwa@$Jp8{T%d<{Ty^%1)V>(dE;Vx^OL~Zn|EyvIrYBh4fCb0
-zO?bb#yuBfQhB?&McbS{UPv22-?af$t^RDO3FDvG%e-fFi{+Z?D(tg9I@iRY1{Y%pR
-zHEEJ|D`}VUrVieWE%9b$$Q$MaVv}tys0|*tb=_CPH8t(~T*7>SU)TMS*3>j7CwJ|Q
-z_3OGnVm;$kt*J4dW(<=H*L86Z$24wTmv_yfouzS3xUTz9WKHcMTT_!AN58Z<gI{qy
-zgXeHPV-|jHk6iro?)-tiQ<(E-bW%T{{NE1>A0>^-vpIj3{9w-<q`psHPsIu+!^^5R
-zZ-ZZ7hOc&)pp9)^ANNc|=brF7_n_Cg=PKm?V1>>-<aO>T(*@0Ay0&VE*STjZbdLC$
-z9q7bU=nH<S9<OsRXy5F~@Q{A;v5Gt&is;-U5uNMtX*}X}?lIDSLVO^7(k|1v=Wu_a
-zS@!)_@#()YM`N;+4qaukdmtja2MB*(b=e)d?gN(HeWE#5*a1zh{bcTCSUtEWT-Vdw
-z^B0Ho%?!7{;a;ulX+BK*eYs~LtOxf}5AM;r9&4@9dVqUbJ>Xs6rYWljr$*|*sTK7A
-zzhXV$xvU;ACz|7qKDVFot_UyhqI`E$=jGol|A2XUhw)Np29H?}n8Pn?dvA)=gSEaM
-zT<z<@EfqR>bwxe6&ewwtz8+`}Qnuc;z8>6EQ4ff(Z;okgSl_Knt?>2WcI}Hk)#|~T
-ziaf82)PvQLda%N$vD(*zHKe_kG)cRaw9D$jEx6xast244w0fX<RpwNk>=s94x0vu(
-zRF~aZtsk)Lt{^Y!K|k%Ks|U<+4XX#2h5bSK{MMSw)gP4Rwu<%Oa_Yfl>JMzrvDhEr
-zURDoy&v6e+Sv|Nbvc7$nt#23m1N@5hfakJ$ptI!6e>z@X8sX)ol<(r|yd1aU1Loz$
-z#>+p4m&dFJjJ3+@!FiE-aHg*ZC;57CL4{79R8bF3_4QzO*dH*LsCqEL*Msva>H+aH
-z6VTJy=rDfz9-gy7E>eGRy48c36?vW-sRvUd_26`$##CPqW|H=qq)FOZe=n;C7vO$T
-zsUEbzC+iPv--MIhi4obINcgeUW!IMefMqw9yr>5wuCb5xYwTmIud&Zs`P<JSrk<Kx
-z2<H$-`p(!<=0lIH`v~8oYh)g=erx~larTdM9pU`p;Kw4*oPjBx`D5-@-(Nrahn&sh
-z?9frp5gk37A7^KdHc9SwR!{Pv9$!D#&z*6GqcDhnsH@uR)sLIT&hH|>L%&y=e=Lhb
-zy4B+R)W^yAxxTVE&{Hjr+9u_*sahO&9?I;hC~ZIVadOq-xU*Bk<8Ut9<+Inv`JTU@
-z;1K1Vg`3@Dv2^GVXVeB;_;EIE(A%AkPoI`M`j0)}&WZ6n$n(jhJNRkp5AUJf3r~yt
-z83&sx&i~*SwsQ&>wsYShooek$bIj~aM+5S$#=~%~Ty2whIasTVevK)w_SCN_Ma!sr
-zHgef(OJ|&T4$CMTDbIVcjLdN>U&jmPsb@vc%;8roBhO(OSC68Mx<_NAGA{9D4CjG|
-z%hCF=Xx~*<MmG<ZER~V7=fyH|<}1&8v5X&!l<{K~WyG&oMxMhmsy{oH9JS|Rq%w{;
-zM_qXaOK0CyZ$B0}gSBS#bB$Wxc<<Il`6KJDWS+Xd<~;SV^HF{No6YQpY{iyy-)z2z
-zZ#Lh{H=EZ6h1DC>KDo2Vy>?HW+9>YNMhD%QWOOike|8Gn>>I!4_ijnYSFPpSvDjSc
-zd-(3~z0^JSWy=0Kq&=zFU2WKQXMJ<|P#d=JSu@z17X2>rT@`)YUDn5)#opMqyIGgu
-z40T>>dhw6<4w9bkujxWA`j*j7X#6hq;~{8NTbQ}q@;uhJyHe2E3Z06hG*i&4?^U-x
-zNWaIJLU&@Tt!bbQ{-)of5&g!m_O50g<h#0cW45lrer?+kFvlo<1Y7vA#SdEMjoGU2
-zK&PH??v~GL;yq>WsjG$7{-v(<Zr2%RuBJb~7G7Qlo!Gd#^IrQT?f!~pM|TQ$<&z@K
-zu5Q+|dH#3kNE>BY;M<iEX+Hq%S3vtS(Egmuw?zBQv0L>`?9|IfkK@r|Xn)n-Q}cwL
-z_RGB6<%XGg(0&=TUk>e8)Sw-AM>}bTw6F2BXGTN&b7Qxzxft4i1noa|`Iczsd&BzP
-za_VPBkE0#?GxJM(Pn{?9v|r%eE;7uV2kjR?JN8lQ#WiTh-O)~(A?<(YY2P#o+O<D_
-z&6ygzYA)ZMH!jkyZzp7C%MP$R>K*N~vCkRHx;#&h&_31EKGV~FI<!xPc5J`aGi%U}
-zyGw^OL)ynfdsMeGcVL5|Ytg;B4XlM`P7MlwK-e4CG#5J2x7L{rTU$@`G@M9y<_=pY
-zAP?pWGbeePPNGeiz`X+KZ#`$}G6zmj-EifNAp`oQE%O4SY0?-wXVLaP?L{5wFjuB;
-z3y0sVPLZFZy^g%bTAUR;r+IdJ-`AR3D&j9XU7QDq^Pu_HDBsH}pW4`3-)Yvq%8|~z
-zvZuqH6A8<wd=IeaPqdkv<<EKbEobRo2;67A_np1E2VePCelMr;dkYQlY4AfDi!^XI
-z<+P!_!O&kTUT1ds(0jMe%M;%934<rl2C|-cBK)2A%|ClH_Pw*d72dC3kDI>bE!q?=
-zh)LI`4gH+GJJGT+7gcB&Pkzv*yFME}-~8m>VAH1^os=nhH-_j|dWUdVnRKTHHbz;P
-zvb2?EeRE-4@czpUAD(}&`tW|grfxJf7r!A?l`rg33-7NKo#7oG?t21b>^sJyXBa<6
-zh&NMZ<?L+3c*fX`*oTe&E|8db^qE(OrPUJbQ{J=KKPcXaPq_$xj<%RA4#As2_|iZ+
-zvp?Q^@8{-nb|g0YZoVJ%tuV~*V((`e|Dn55whLk=+x^hn552BjW322^S*t98cmjW;
-z?$PvZ45W0*zwtnvVmtTGsuvMC{-2arwY@6CY`K;O?)7WzweKo%SJ#05J|_C8Z)4?}
-zf_?Q4>-LQi#_RTt1tZ@_>2-GiSK4>j^3O64R{ZvLi}uGU9^cGzeUJ5*x(90v`{*oP
-z(B%udeD%JlHxEtPGbG!ur!TgzndhGFnEM8xY(VXs(>JTnn$cY7>9cQNM(x3#wD~up
-zFO9V2I@hJ|Y@ba!`X;CLX}u8-w$6)v=uMsRm`7Tg-zZC?sY)8SRZSyaBaMM7-{r)u
-zGL6fj<KgbWeXnRa?RpQkY8frrD(T=Be&17eZcp06I9oTaanTgBb+L2xt(b1?+@09D
-z-^I>-$c?+$M@1a%(-NOM2l(zaHmlA;&}I(%o{8k7{dAI33{?G9TiuDgv=_T8uDcHG
-zJDRh+-P?77tw-s;LVd$Xaq^(PH{a9EH=5GnzEtf;kR9W7q|bCm;d9-Q=WOITZugGq
-zn@;XqU4$De`UrD^FzxRmLpCa7zB|UZQ@u`6Zs`>5=RWDd=jdzLugbkp)-Hv6JJr5A
-z8nQkO(sFy*NK1P`b?4x8Fud>SCHm4l{8->^xDm^rru+k8`LW};*QQv0Y&g{&mv>X-
-zIUarX<tMBwKjB>Y3FFF7+LDv@IseAxC$41uo0gx(*_A&tn({;M!|8BerL9F4%ik9%
-zXLsZ|8+ne0^7rK@oXOvpKke^5`)$fk+~21Bi+uSvji&tRI^-Xg-_AD{%g@|kN&b=N
-zc=S1xf4!G~y_bKzm;XPb{LuB=l)sVkN9(%2N9A;n`lfoKI;i^7;O&A2eGf8idq)=%
-zH`h|<zc1*&Cr^0YEvT~$PM3XpniCK26LIZ>w+kxA1Aphgs~z59Y2S5L8)0;bj_{kZ
-zve9&3d#=xTth;J+-S$1$(w#)KNBA2}#&_A~;oXj|zPk9LIr80D=odeWbYyLRtmVn~
-zv1kunT=-Ng9K3ot<dtmNTv~Ki|32Gj#~Gnbue|?R_Eh{|{w!EE+otU7QOj8DnveGC
-z?x-Eu9A?)s?*nb_Yz{iYT+G(|fSqaa-!|wi*)<jORn|w+r1?IePqJZOgzR<fj_CIa
-zq@TmS_37Lq-}=m2{Are6Dc$r4>9$l!*SST~ZK|GbXS_PCwZ8eS?~&@xvP$~G^H!B*
-z*4zX2y<}g-bq)nyDIMk{hNVOQR*iSHzKdt{O!Vn^yP)NZz53prvsYMm&$DJOdoa(M
-zuWUixdlt2ube1Jb<HMXE&&RJR+J5@(U8UWp{Q%K8J?sl0KgL{qe;xbC<`Q+5ZK|J3
-z{5bVj-?^Y|;LMHDhArjnt|?V*sZPo<%iBnE{oJ7LgO;1dJT5KTAAS2_2W^r|Q)l8^
-z%qDf~v9y6|KZ<=u+Ri7rxIA0mzr=rs;u=Svz9G1SeAEugKg_3-eDwY6uw5>;lTDW9
-z|Lgj-FBa{ZBF)+Id#H2OXwG_?u{+gnm(koEp_ylE;}@6HoL%hB=&8*fk!Ji|+u3Ak
-zKI&=C_`bMEbG-cS=BhOJg?z3;^FV}Vo{i6+FQ=LIT;D>pG1drtCZ8zHSx@sOPxJS}
-zvwgG?%IBE+5wElFq+{z3<8_m4y3nTdwjphY`e*H9(p{%cA6$C^?d0kDIno@F@AyZ{
-zu-KO&S6PO>QI?^_mw_?Murj10W#HNIK3k;>xH+20)0KfVM=S&W(K5`S4AZKd&ldml
-zH@LH6y><R>yd3ZFkTGkp@Bf0ATA#6Vi;MWyOzAG#%WoUqI*n{@_20QB(~W0aG*>m3
-zH5<Eswpu@UG+sxT6ZmGOok!tbgF@K<>8`-yGi%B^i(=ohoXWVIA7f43A$ycHW}Q*#
-zicfQTMqhb-Yq)mInTSEVhj9x!;>JX7jTU$5%vJC!dVVDuPv@lwQ#IZn`FI(xD`oMZ
-zt5&>E`*@qG#iLBM;+^H=g}PauU+s7!uF+}TFuW&`b;EyTZO*OHvDO^klQ{buqm#Yl
-z{@$&h<vXEuHP_~jX2<M1eC0&;4NS_v*D_|S`i4V)8az3OuIZjp-QTyLZyBEm&o9T`
-zd4qN2;xp^r#eD?u*X|D1T3xtar#plv<IYjcYgk{%PVLos0<{nNzEjxGY24rcr_5P?
-zHYn`>W36{-j$uksZ}!*Oxc@L~<%8Ted+4*xg*Uhl@D0*@BVD)k4c6@sT^ST~Uu{%Y
-z;hm`abr-7g_+<I{ceRg)$ajI4d#!wWpkLp@e&cMdk?7omyKA(lgY30%db|Jkd_HHF
-z=i|;>kx!_XHS>X2Jx%1(BwpFs+OqOko!PcOT(@m1&*w^Co=}f#=0o4vLtpU*^*7J_
-zjIEoO>Qp~<oP4+KN9V%z;pn=^r+hx4-q*~BHdk|JZ_s|^nJd!wJ<7`C?-<>$yG11*
-z>VGt!5$j3iS~hzwTpE8^swZ#UG5UJ4AHC{FuT<{$Zv8_3@RdvQ)Qy_;rfjSb*Bt06
-z*plqG4aWuDb_Tfkj{a!e;KvEYcG9nJ_YPa%X1wq$va$L@9YP;ekDjg2J)2uH+dSXm
-z^Tc)?7g^7iPHBF#F=}7q7S8wSTueS*=gwxz&Mq5^48(?yMVy<B8MIcCN0-9$@;av&
-zm2vpp2ifZRZ0VeP8GY$0bECMG(br;U;)l`KRE0k07NIX5p|7Gnx9^&J{`HmaH7KL6
-zyUKhiZe{dk?GA)t^rfqextv>szLwIx2>KpQ8ULC}<GEZMIxA#bIsWR&x;e?M?ptzx
-z{1ugFK6`Sx9$<58oFzGG&U6}Wd}SZ2?`x}#?rgcLS9fRIH^~_j52IybS=v1|w%R%q
-z{o27eT4SSfTFSqJmuJjSq9y!>`4qkrGljbKv0{HP!`rd?-i`a-591Kgc!)krV>a1&
-z`M90&*7%_E8$3DuWT$FQMrpY55aYj|fzVc@eJ7s$bdR)bJ$+YPZG-N$R-Q_;IKCl_
-z*@tFNYX4gvUWNTi(e6f;vLD^I-Q(n6q?!AkL~~1t<{V*_?=1SJ;usEpqnkTD@Slml
-z(a!vLQ`~HI+6mFF_|8_v-RSpoLgcIb6@Lcti)A2Ov<!da%aHMXW0&9arut$waLFci
-zG!@Ij-d>d@8z~EMhLr_>#Vg)TLYS~TJz1Mi?@5PcnrvkX^Tu82g?EEEx%8RcuJooW
-zUBZ@?k2ultVRSkfZK^C^x1S@V&2ZtfHn&%jm5t%@eUb7JXIT00cjY4;(V@A@V)<Ia
-zHK?$B>|2w}2;+F$?aN0v(csFL^>d$bwS&XwK6Av0mhX$ce7VZ<rNen{U%r+))2X8T
-zY@C#j+dQhHi#Wr|hrcUdpD!O_isg&f*&5qGSU&bbseFWS<-=X+Y0a)!z80fHeTgd{
-zVa2zieiA2Iz7fY%r#RY6V=CUEwKt!wD~+kT)!$W&sWy$yUMP;K`i%b3jH$}b+{RDD
-zUYNw#Xkz)?VxRH6Xft%%`)^}2l=UH5n}c?JaN6fV+Z}C-b1n75`+4UUog1`t)W?;j
-zACIJuoZS3qMc>fVXSz^kgWy)yhj!cj9mD$2tnRlcw_kG3Ez*akEnnAvRoWme(jDK&
-zH<josD}TI79?mUN{sC*>hn3&yflnX3s#^YR6&nn<vht^E*kCQXf2E@Q&Mi{@Cd=3Q
-z?+P0%Zge~O50q@Mvhq{!hUMYhBIWN^o53AZmGaM;yXjXc{W2S>rHYM*TUq&=YS?)3
-zDzrJbNcm~+OEzeQ4MpEjlz(^0#w#m-wu+tR+#=;qTROwa-x5i`sg!=S{P}pf{CeUM
-zJ1uKGjnb3Hb}OqZ%mEf{BW$>8cA7iyhn=lGd<_-#yVkclZGQcfVKUV>1b1M+ktcTF
-z7qI&{yT;tO&iyOxva&HIiPGAWy;^q3)+X$}ZtSsd472-AD+{mhgcQrhe7V)(lHIq1
-zaii=Y%^`($$PR3n-LlW<w?wP6{TM&X_9(99G1o3z$NJC3>>0R<u-rTB*9-L>M>k(f
-zIL(VIuKFp3*Zj4c$0Ur4A0Oj%C^ukhc%hs1XQj0}eRnbRbN!VIADOcyujt%(GiSc?
-z@OOdlr)T){$hkgmXQ6Ww>8G?Nr2e*8R>p>9WyOxyUKI6dE`J|BPkgz_FWR4K|AcHr
-zm!{&j_<PqPJkTBu_0u+=>(g!Vd}tbjU!&!Po8tp++B=}Rydoc5c;%(=J`JC5r_VP^
-z*AZv8e4#hv`SHDwAGBdEk8Zz~JK*iIqU<a9G2rb%;uU$~<H#0sJi#xTcQ{9yOM6?3
-zG~};w>r61JAL06ecoW8Re9wCRq$B*n&C!nAF#fpk@W+Ms{E6i6=p_Froqy$dw5gIu
-z^m8tsfjZL}`nqzRG269RKbpMFMZ6-9e4IRKxV-U;=56y0(nlYcG#rom{C#Fo{lP5;
-z-yDz9W-B=!^?4q3M|gyr$+rrRTzKUf(V^~A{*F%aiqg5p^C(xzqpV+VZ>l#QrOl2l
-z)+^?z%Ia0x+wsIJ^2o=@lZMM1zi8e?TYSLBB@M@;xWBV1$|Ky0JnA+Z*V>P<zP*X?
-zC_dK9w+fH&3*dEbAi|?a{*F%aiqbi<4Lw%<X~c#eYc_OueaVLIv+|d%OKkqlZ0OK-
-z4$rn7-?!;(>wn(<iEL><vW+FwC;tC`?`zeys+Q8-X`L;)w<y@6eHnINntx^uYQ#I!
-zn1|MRiG0g-#eTRedZ!xxpY;A=zf|dew)YR)<Vyc0?;o~DmHxlUT=#dmk4$sjo!l`N
-zt_j_J&*<u%)`a?*Z$H-EVrBE&S@y#8P44Yt?oWGRx*4~IeAeDtH{J>7z5DEa_<k7H
-zgs|g^=ePX)Hf`M&ezq^NJ2H;Qmc|iLyI6hmuyKlWi`eNcHO47Tk@Vv=(x=ZKmcDa~
-zq~BL#9MByZ2V_g*fO7h)q@R{sB>k2e={J?q&&3&UR@(U4@-c??#>%cf)?OUV`wma5
-zVm}Ucb}6lJyx{lIIJ?^Kqrv{wJr`~tjrP+(qxQ|56<Lqa8d`L`@G$eKdBzOdJF7j^
-zI~X%8M<>eSFt1q_hcQFGZ)vaMXuoq0<A&wb`yR&r`8ey0%%jWh*b!%)k+nqYQ~iD#
-z^g!S0)0w>(`Zt4py3uu~PSTy_>;}%-`EQcuDWk><JD3OV!iLw~8d^Im*@T`KaoIWE
-zF6LQ%yY4h`Hgs_;5spRl&GyoL(QMS2s4^|^HcQt?c~gIe<=qs?n`g`0?<FbbtvjJL
-z4#MU~pPXGg$;Lf*`}{LL|Cqn4x_a5G>}6?*<j=FqA6=FWT2}t7xrvVA{BL(TEnoJu
-zY#I$M-e$A0o0mg6LJQB1mcA;q&<=<`M+^Qlc+R6AQNGOgwB$xZ3vJvmxnv`>@N9gs
-ze9QR~p{1pK-Z;Edd<L}C+)MHoZVsqqv++*ZdNrq7+)FZGW1pzaHv8Vu^&R27XBTy#
-z)7OD;EFIc$Bkn6f?%_G91y#O(+Uf5Codur<PY4P+AKt(|RXtNrhn+{OW)BQIpAwJn
-z>!cmhH$lU_DOz)#M7r+WiR+WJSJS?C%y$k6tNA0-qfXi`&1>n7`QdG3d7D&i9z*xG
-z>pZ#IpTYPf&I(T+`nKOkyc-_MJ=_o62`yUZvbO4K&XNajhILSDRoYK1zdUWM?g{Fo
-zKki~5WGA$DQ3rM-=g4~gHthj4JK?IKX#3{mSDdG~#>uja_BWKJc&@v=#>4Ytg_W!n
-zR`St)z-OI|=dpf1H~;Hv`f_{X%h?CbJPdPER#w_R+THM37^d+yXZ}Vf)3N(>4#Ax-
-z8qhpRBYWdCS3#fXXxG^hcRm}`9U}bTtM(u0?t*uaiQUnpyPCAmf**3$+*T-medn^<
-z(@DSA(@A@&K3Ct|Js_EOtG&`QYmSsz&q_a(pT*G{pV~gcr!9=;(4-SREw-jCojTUt
-z{+iFzoR~|e$>&8m91r7`M<@M37kYqO(VhzFcIPFJkxz{EU+L0kye;PR2K~|AAANT?
-zLmhCsEL-8@%>{ikeLs7H!uc|rhckWaCysP8)Va=X>@MW|IC^4rVB*l<ooZ)ObCgH(
-zTk^MkqVO@T^)%myx@Tv{^yFLoyiJqYZY~bbZrs~vZM*8sj7I+r1E040))?jId?fp~
-zHLua=$`Z9F8n`EP9QTC6v#phT8Z>s2ovU~{i|_L7vw0{zi_e-<k{zslQ{g^`PV}k^
-z{c_>s*0zhj@ZJgOu<Hv3WY-xFy6F?O4rupz`~CpE>_R_fS7{zL<m>J}`W5jl>(e1#
-zn2yS9G)q6QG5nmT*4*4YON;R<50Bj3K-&5~*<Ho3-A0$zSw*MvQXSX12%W8vjO?sJ
-z<Io>a|9{tXsNL9)Y$|CvRkTnZ$J-`fh8C|MAs@P{m#tQsYTuNP)3qk+!>hG*A+I!F
-z>%!8`YTZ$~Q768o#ec8cxEJN+pF8OvOr{Y(;wW4#+I}?JcC%&NKJ6iP=P(Cib}lon
-z^KK?b*N!?};@#<z=!9lhmPXe$cG5R?(l)9M@1#vtpQXE@)CZ{zddH1RPvc!bwWpIn
-zep$OeK>FhJ&*i&_`6|%?_K7ZE&&hi_&#Ff=z@NDGGq&$c=q$CLww^SOdae1_VPiJu
-zX5*jP{tn=W2kcDbSk@)}0X<j!(^=GLJD~jy;aF@eZK4a;7r1bheZx-5|6R&2d087^
-zbtyc*=-TUSq@PHK{e<<`VLZ*n%N}>(TPpgArr)HWuyrA&vm=fSk%z0ZK7Hv{_-(2j
-zZGvo1?eEmO5&G@MK{~goIFHlk^kc7d(kFcC3~Q@*#}^Gf&Nwi%jWo}1`(u!c?;m>l
-zY@Jj6nrm;nN7vq}e{=0@*21e#79FZDlaP^UvHI6I^r@M?@96Vw7;!F?z7Y0Ppo@o}
-z?^j%Z7`B;8PwkfrgKem^zun~1OZ#?|xUTND_%@q1!}ZxswubHYGQ{iLxIyDq^%oCM
-z@O=)n6#KKZtvhS2y4at&XRqh@J3Vjldr4GYo?YI3rT*gKkCdmaHr(1a-yX$P4lDN|
-zCllW%GT*Cup+2dH^yU(#XTZKop|dWscZ?5~m-HduqB&}B*EHF4XrG2*RlXc)J32{E
-z<0o`stM<gqAnv&Ojf<mo3Yxag_-616*%s4d><9nmG(UgDxO+yRxgRGZmwva&<Wr}4
-znRtHYn!>qsKQ4;<HiA4gR#U$f+9KWbeU1;5MKrqdQx=s!yr(wQhux&Bvvm`p+w!+K
-z?zzv)c)+i5K#Sy6>K}buMjdry$T;b@ROv^vUZ2vXel%PoaD8dk))egwUgMDF3ZZYJ
-z>vPE4$(p=PFN~%Sgoe23TCrcLpu^>lo69$C>l9V{ytvkL(1|8nd(fFiXB!MCuIH<J
-z);QbOYyWP1wmfRl@elNG#s1v$(w#d>Yt6{_t1b5I(!*Wy$m1q?<>O;q|10`L&nrp~
-zIf<{G$Sl|7+mUWt!^*eR?Q2rJ?lEBFP@MK6pS5S{S&{dimXJ2nAD=hjtL6PTd8_?&
-zXEM-T@l84~O?5-}x%6p_T$g_@>+WMIyu;Y{=!f_*2d(cM?Du=72f6p+9qz^mIBOog
-zYvpKG^WkII%O7LB5EKT8{|<5Nj0W@I?0?nVY$tQ#UD;{OXHDhas;NVR%8&H>*{iL4
-z167v&<Z*yJ4yvEv{+2lPH0{r{zvJeR|A;-(_I--OADPOXFER2BI72Y8XC`Z0O&^9n
-z($RU7!zaue(pYd*<Ga2S_Gv8O?3A>(Qz)0SQ@Z{A5^)<N*xIXfY~#y1Tc|$zST;&$
-z+}kO#QLw9Jr<m;g{yUc!dXe_FNlU~wY4Yt(JYt&+1m(5~GW;BR(?B11tg)T?J!ju^
-zTN)a-ihj*m?!d;1-YF&;WoKyJ{FpXIX*}rTd_Xn^wn8`-bv6dP6kVYW)5-Wqca`B*
-zY|}%UM?DV3_E2A;bZ!1(u^WF@9e2{!Yj38)xp61<O4zn{#%VK2<8j8KX3H?{oKmu7
-z<R|-6ZG!cwzO5pj+6HIS;qU5kUu4Y5v+AwvN3}B=)6MnYz?O|vISzW9F`df`87sWn
-zF43!Tf!db=jTzJSEM3%CPd0NGeRR<->$9@R1}fS^O}G*N@yWigBz@O6yD*E2G6?zM
-zY&GhM(PHVmbGnb)Vr9|XlI)pph5IgwX?p)|v$33QH=zD-cz>Tym-cmq{r>D@_4|EB
-z&*R~|z<?jWk-y`0pKqhdGwkn6?XdWu`f74><!c(=Czrxk>5s`@X}JEl$?P@l6BmDV
-zK1|~R*AG|FQ%ds#prPB+DE5ODbWCz%(Bb`7iH70j(!6%9^j!Z=9;VB-C%0<<p7mk6
-z{l486&!4pM$MM@et3M6xc8lZu2(LV9(NVpBXO43~`&oSd-e=D)J=|UYj@xw7&1cPi
-zHk-=#?_L*le~T+$Q)sKX?|#`>JZ{gwmA*9j{m-OPjfTI9_VWWJ-TJ`#`FQD!rfgk)
-z-0Q`eJ^K6b%-%cn<HdfTKHl~H^evhP&(r_s=>NIjmocH+FUoysYD4L>umhCVe)|4F
-zY==B?)GrP8VIyE4^mA@(e|Q!RyWjw}fU^-ezg1=<aDFU${_q2}5#q<^^;NgSwp}`W
-zthxFI+WzD7`p4(>JF!2G&+Gg7rUBV^vj2|H>pR=0MK%=tXi}ebd|p3X!#qB(uW{$`
-zd41hWczj-;x!!IY`;BIP<M_Nj^9(J14AobfGdMo4&zQaG_`JRwpY|P}*B2j-&+8wb
-z*Ejpq=4Fr1>-)9Xbhz)UxX<hOy#DcdefO=3<MaBqe_dlV*OyXPG*|EDb?H~-c6?r6
-z>&oT(a<wnT@vHmzynaz%j?e4c+W)`6y#7(@XShe8@?7HHn5{$V-e~GAYsY+Z1=QIb
-z)#GtIkLDXS(+RA<X7_&(O!p`#96fq8@>+bX<z5W%0X-b9$p1He56KAQjTXar$HI^g
-zAu4<wG#|a{%R${gdE~=9N55Woi2px}?|%38_x|mN?(Kj0xBu$ip7n2k?cV;Af6KeK
-zZvXc0-P^bQ+n>9)KlN|laBpAtZ(nt9*Za3LDB8Yc7%gARhOe*hSog<m9m`uceC47G
-ze?RTsuW#!(?}o3nt?mdeYwc)lpT26thIJcUv@fi^;l}mr*KO!nwQ_o<^@hy!)i<t9
-zceJfr>l6LL+Eq8NUzNtY{p-_Lue)*W%IRy{+NXal)7HLf`i*P9wxM<X`nI)Sp5D54
-z`jzVykJN8!ZNG6<l&Ih0IUfAs-ka)su6um(i;J`SXa4<$_mxQV33X%36PswS9GNNq
-z^X|c-8vZMN@HsX7w|oCr_@D)Ad&AP#Mn3&DyZ?v#&!OV#Zwd5Pi@*6J=FeFZ{jr=?
-z{&)W|{C6J1|55K>i$BkM|3-4Ay%|=%S57v1YQ-P){+HC?&l&9Y(qFCkbG-io@~_69
-zjUOF3{x<Kw=Y;C<@0>Am{QJHCt{U|3`n{3k@A3Xm!@O$r51wW5y`Bx@@50$5r=Rlv
-zwbI{o&dBM%<^5~%Kj5RA`m2@xtlu~PTJ&%B{<YHY^!~Nd-}{M?(?90|^RJbDv-hu+
-ze&)iF(|^(X*Gj+N`|m-%{2L~}o7o(rzgqD(d;ePT&$xKx_;b8}t@tlpGIIQb-v12R
-zp~fooH(X}%YqfvP-oIA)mU#bw`d5uVy?-(?eJ^_d`LrX|>QCcxi(gCsI*#H0+A;hu
-zNsXL-=P~^2TP=Pq{!I4%{qz&n_&?M(a{TdY%>NAQ8HVZK`RyaepYQ!^#n1Q-z83wr
-zdH+516V>E<$?YTOzsUP<g7RwRf9;Nu<G<zom(^&Ww{vJ)f3@^u=VtS-RlZ*DKUAat
-znDT9lUn~8M-oIA*+r0l_`u}R>-{cL9TJg7g|JPtXf5YV8@u1OHEB+?$e+HGSn*4Tk
-zjU0cE_n%Tje_zj!9RF?aKkGx)^S|(~M~=V1`_HdY{>{B3$M5w1%{BPn|IEno4}1Sb
-z7Hk;*=RZ4g{H5Ms?RT~IZSwa<j(?8#Kcj~JFM46*_$$5t?i%_%`3Dxi*<e`tmU{o2
-zYxuw9{b!j!MJ)dt^8U5-bNt_0c-4<;{0Vd$9e>U4|Ka-I?EQDw@IUPRYtc95e_F&^
-z^quehYsv5J*G7(C|NoeOE&0v*@yPKn@&2{s_x3+p{APn;@;m=0=21(2IqzSKKQDRz
-zTKqZa{cFkZwV#em-{hZ}e=YgF=>2QaN1N*YVz(>~VmD8XHIAPaOvhz1zk>{m_2=UT
-z!NTz$Z+tNJAL_Q%2WQ|f(`b(csTu}v7j7kZ|0u$#D_MVxa2NhO2)dx;e8a>!;J0JJ
-zxwF8p$Ab1V43pErTX~;in5+jCFEC6TgfCNq;M`ttBk^~GivOr#ayz&K{|xvI{Er}q
-zuYub@?rJ)BrN>5(d*0%}fzt7~6TFxAOF)GmeABSk<4TVgdOY|>5O5CQ+<uU|oEE-r
-zn0N)e6S`h9Ozr~zHSamY<PuQv7J#?mKHo6e44zIpml!6-gVz(T9{fcRv<HUCy@!GT
-z63*QMo(--CA^F^8;8zIW47P)FK*hVzFgXQ0pKwP8gWv}IUk63kYlg`^;6wO74L%4R
-zy@rXM;5oS83@UtwVX_%qM>^v{(X;n|ng8>K$qaZR{;yGA{s{j)AVb%4w}F!17Etor
-zY?!<ml>8=wlG`roxypCG$NqyRuU9-i4@zE3L4|u|!0={}A=0_+AVofR87Mw1HB6ol
-zew=u39WXfzg4CUb2MrUigOcBChRLTvmAlt4xfz^F{1hlXJICW&`z`+$LCK>RR6a{V
-z$$KFvc`q<b&IeB;-)6(ag`m<s(odZNUjmiyi-yVj!D+a6fE&PeQ02-PCYOMcZ!;))
-zO#~Ic(J=Y?KbYKif^XuV0p-8aFnPXzKgYknNINX~oey3{_yAOWIn2krga<+K|20tj
-z&v=~Z@#)vieY3|4Jx&KDm&u^$pJ<qT>+g-9&x7J$C-_y;-v+J$Q=sTwW|*7;D&HeN
-zvhahT^nWiX{oeyB{ih9+J3;ZM1C;(R0hQh&!{i+BA^a}{rT^y}CZ>Sm=Uen^3O{I=
-z+zm?qH-h5l5dGp6U_U7Syyo#mP<+}1ir!@&7lGo#LQr%rFig$?MQ0-@{W?s4EPnKZ
-zu6*EH+;@Var_(Tb8z_3t06$Ck@gVmioZF8*p!)VYsQUJrVe)x!2mV_?<#Pt8diV6-
-zdAWI<<8km6E7$8DUj$XIm7vPi=&}EYKEB6g9>;^K2MypP_*-w7IP$X9w;{viE1=5t
-zl40^TQ1RA-sz2?9$qYD=bXFQBE(EV2+&Q55Im<Bl_CAwOFDN?i2gT1j!9|46fLDSk
-z@E62eW|*80N)Bg$SL4r#RYw;qj>6>NOQtUe!G8-K{f3DbLFr2;sB&yKOlH8vq;nxC
-zeR=zD&HpXK<Q7o%Edb}@Klp<nI0bwfl>B-@$#1t|vJ;g2E&(OCSN?~UZ>h%yP<nXe
-zMZ>p1$!jAhJ{<Y)hMnLAyl(@gk9UH<fDaoDlS@IhV-rEip%I)wdB+<j>Or-afnoCC
-z_pMz0hRNNa+O<uf^lXX8iQw7fcld9-euK(qBdB~jK*@W(VX_@OnS3*biDjVDJp;T7
-z9NKI79yUzw0o7h^2fqMr168gqhRNH&^T|I0N?w<MlGhx=WIZUkzxdxwURyx<Z#GOW
-z_3umk`{5T%eoMi5q&Eu`|EG8y4~qW*sB&-luZEX+Jovo5@AkON;{xyy;hRCxe~Dpo
-zA}D^o)o1+M3ohaPY4A_LO`zz#(=a(7RK90`Z-I@V^#ASWO#cT#rGL;c`64L(YzM`M
-z+d!pvvtcp?K7{`=Q2M{rFfkt#KPQ3;-)NY8{d=bWIq*&Vr-Oe2Hh|(&;PLPt<I|&{
-z=)Ke9&7k<u0gBG`hRGBtI_H4m#}rWIYXDvOo(+P}<NhKjdiEM7cY>;q3&9q`H-cH-
-z2cL0v^0|+KckrG9Zv^Lq<0xmdVWJV7iTmOI0=>i^1pk2dJ3+Z;z%95h125ox=xK9*
-z9lQtkm%y`e@9^%+!257t1oA!cbBF%3h3^Nq;r<FZ5BK}Qao{%a=hA1x<YrKO*<_ep
-z4~oxoK$ZJK!(_dG5B&Syr%Z2ipu+7mOl|}v-`l`%QSO@!6U)rMeW_vcd{E)e0XGwF
-zmSLja{M!S=<V#OlxEH}qgxhPF*a<4%PQ&DSQ0cXUe@3{BVPd}dw>KLm8$pE|58h3<
-z2E)WFy>8xR;Y)^z=fM;3-(#5A2Cg7p2PpYo2ui+FK*@KqVWI)N2=~Fi4uanY_ky#)
-z9C#VH3H%J00b|5lX_#0BD!-+MiA%ui$gdH+4fpYei3U*PpnC8W${!de4?htEe@Xba
-z!P^P{mSN&GQ1M?eOzZ@|$$O_^Vmqkx?gy3LHpAp5Q0d(XW(mL1FwqVwe#S5{2VBSd
-zg@%dqL8W&NsPtwTCZ~W(Z!-8*!cR0z1fb#{dE8;*MX-bSy@rYBL8Z3`RC-SvCLaZr
-z-Y)Pa!siSV+d#$NVwgyQU*~<9VPYw$^p=21Z;@egKB)AX!CMJ`iD6<EsQ70XCXVbj
-z`R@X6B%Ljw<iFW4kpk8JEChcFo)1bNrhvcVy&k*;?ENdo%(!0yD*P-^;m3p0o1w=n
-zd_Q<2?%P0xpA0H|J*e=5|H<_074TQQKMk%2*MkZ_^r(eD2rB$uP<pr<RQOKt4saQ$
-z@NfS|3;#N(@Owb%>n>2?w}bx*YzGy-9#lOH43n=sV(%{*CbxsCZ})@J%WZ~<o6Wzy
-z!!WrBRJetp+KmN<iCN~~euiOk=>N9#4;v=;f{OP%C_UX{nAmRq?e`ldGoZq)1l8W8
-z3=?zAzx_hP<dI#L{*YmEFX++-zpC^N6Wh(d{eHt_26X9zYNt|$i8<!qexYIV$iqH;
-z!{lDjr4LGv_ZTL&n}7TLhRF=*(g)SPr3@2u%)k9Y!{m`3pT1#oFX++-rPq556Wh(d
-z{eHt_26X9zcPo9v#B@;Y)D*)+BX|Pu;|&uB^Fi=w_}UAqUCe;07Yo60gj-;k7!P(6
-z?&%zQfd4t5-e0HE>3t!n_ahLY_YP3+=ll2F-?jIfLHUmdrFRX6$=7$<`)h{D9H{c_
-z1iu9xorZ~x=HGssVRDgwU+CY@02OaKxLM^kOdN(7<@dH>ve&=w_V0IsinkGz{BJW%
-zEHVG~MTW`A{(Yi<Ke)r<^@D##yw?pAyFummsA2ME|K8!>=Yz_x8N8c#ml!7A>N0r^
-z8YW%`C9l^E6T87L67PQSY;Y4Oxh()CxAQ^C?Ht3zbg&8cDc~=#6DAub8^H64AAq9c
-zNT<;;WSHm$6>m4Fc#j$;J3+;}A5^?;pvt|)FtG?!yoI3REig>Z0Tu6jQ1Q+I#phXu
-ziNWt!yn~?P^&2K%0u^sBsCdtVlItGB#70p0-3BV&&4$SgsCX$*@s@$oqosz42JlVX
-z_dIC)e%dgx8x+4EHB8(FUZ`|H@p(EZJ~x2kbG>0==s(b|;{Fz>{02eE^`K#5kN4m0
-z{T~Izw_S#bP2T@D?|(BW{&W~77J2{q-oF_XA1*OWO!ofcy?+C!^41$B_H6g%G)(LU
-zT{#UCTfl3fdnKrHP6SoXp?`1XJZzYF9z^xe&4DxV-wfW%`$kZ9@FGz4I{+2#-~$$J
-zFSv#Gr$O1pn?Z%U1XQ?Lpwepu@8P{3l%4#_zq4?gK!xi76>b@LAMcAm+0D~IrT5DH
-z7H$uya5-=r;kJYGcy9+4ZUHEJdOrAb^rqP`c?l>znq!!p4oXkn{<l`2-!e=-?caO-
-z`$kaX_>^~F=G`v=r4MsJ$>T!9#ANetpJ<poOkou6ZBTN3%P{d0sCMK<!{jbd;c}q#
-zW2a$aqxrYrW|&+8D%>JadbZFoG0Xhh&oE3L`L=}{0;R8q4HM6UG2ZtWCU%2PUknqQ
-zz~!W$0%cb$18;%OrH08R;MaLyWSAU62&<I7Vd8D@+wkix@C3pQ8YW){#m7CM!ar@8
-zNP%aQ&m50ufIsEE9()UY^e=4wU>7L)<qVUZU?b^lH%y!lDxD#e_7mVBIGy|sf{NE~
-znA{Ai{n!Yu20K9hotxo5>G^!{9Nvev`gA~-4(QS`Ol}5UI-pAjR6WRmst5Bymky4f
-zz<m&O>43iwJ%-86;Q9D(1YJ6y>PZGvJ(&->bpDM`2XyIxE*-<<X7GHa1G;oTRN>qV
-zsCqOXR632I^!^B$sGbagKZl;fhRL@<rTdm)@+DB=H-XaEI}MY~{{0gFe&o;1f5<S|
-z>)&_#_xYgYziV?4e3JAwg5N-Xw;3jG2BkM0-~{qnZ<t&O{w3j4V3zR93=<1L#h-7O
-zm<WD__eR6Scu?szfJ(34Fgf%sOYboFRl>h*n0Osj{MQT<IdB8-I}H<^pwin8D!uy+
-zlbb=&w+Xz7@OK&})`N=QZkSjE-beg?D&wyR|2n98^_pSw6;So+CBx*~RPH|~{BH1U
-zl^?u^_eO9VxP?aIYox!~FtG^~eRqPQZ=+$d0~CGh!COU-VPYw$_)82E4WRNl@~1(7
-z>2~g6Q164_Pr+Bfx4^yLzY~0e_wAtc<$lBD7VsmY%P`Ra<_Nb8{MX<tQ0Yzv?*zw#
-zp8)H@8PFeqO7F;B4wL<$^!hcBs(J29pz7)KASU3syTO~mo!~=YC#Z66H%x2<&%u2e
-zsQeaz%5MRv{N{touh}qp2B`d|fK<J6CxRCct^rhjLloi$a1eY5JP1ne{f3F>LFLy8
-zD!*-@^4kn5zfGX>yVEe40hM10q$-`e6jZ%m2r9ozz_s8xpz@mqewF;rFibRn%I_eV
-zDZkhFPx-wBD!&&&<+s-`xeHW&J3+M%+d;JtTfm*XZv;1j>p|t$4yxW|3=<1M<u@68
-z6C4k!9ccj7j?^0_MU3)2LS!&`5LEb`pxTj6!{jnh?Lz+@LGUU3p9b&X{WkDMa3wg7
-z{8NUBg`n)QX0Q#M1!lp_H_d$+nC5*xDEB)ljKbdxCczXa_Z*Ff+_!_$rw;#~0VVHd
-z|9&ATd5rh(YIMY}*KW7?FM_f^ZU)t_b{Hnw!4t$c!^C`W8ReS-s(c!BEBujv<uEY>
-zD*R!?#7m&c|1_xb_ZlX)gWtscHc;_zHcWJY4ZN>6Otgb8f5XIEw|V;s6#t(#Ol|>X
-zH!bw;3%vVuQ2cEG#jk!UmGa#KD&MCK6TP7F-EEk76jZ*u3=`XKv3MPz;;lDKw1bM5
-zF-)uk6)$C&IQVs=w-*$>yA6|@K+!wjyEl9H$)Mz}Ng>hu8jXVJ?FE(ZZo|Z*pz_^i
-zn8<<3cc)=uGmWC+wS$V6F-)uk6)$C&SOzNIQp3dSGy>ho_fb&v?lMen1V!&9-hGaD
-zZv>@}LpK_|FM-PUQBe8rGEC$^<-5}`(FrQw?S_d=hvj<-sC?%bCdY%ycQ1{V+@Cj0
-zZU?3B3qjF4-TP1R{%_N1Dc&wn@p6XAjiBnq`Jm#}dw+FugiF5iRg1R;RJ_fG$(5k$
-z&qPr12G^VaLBnJ(sQfy-`+D!b08~92T4(WI1eNYy!{l~Q@s@h`CEooUQ1x*=jpmog
-zZxN{a)(EOT4bjP~J{>kpyauks{Y6lEvjw~kywkrg0GIN9iGLptUda1f?IaGq2%ZV<
-z0_TI9!34MxlpIrriKU?Aw!|<o2mC{lm<)=(*RD7E_JE@AX~RS(xElX$py*o)roe^%
-zy%D^Y_j>>S${L&3+zo2JavP|5?ha7%i%USw8=eD-zFCHe>7eMFVwecPB=o)3X7oJ`
-zDtxbDVmGMpj~XU6f#UCaa2)RKhKX5V2KRbU@(T=;uVk!!c^Xu?Hhr0Sd~hYGa4Ey&
-zg<u-@DWJj)uA&_Up9d9gk705fsQPppsBnu`2EiQg98lqA877aUP5-&`H~0kpcY^ZY
-zXqa3AO3wpuHu(Aq^MB1SxeJs&F9R2VbG-kB-hVtOz1`c&x-XammHtk{<ei}Ob3B-W
-zzX$p6S71LVd+>F`<ZGbp!B-5E8$pG;&HUSMHcWPyfBSmF<P=chCYyizM8jmG`L~ZZ
-zO!h9faJxa}`>0`Z7pQ!5hRG$M(pzNy?F$W)3(UWLzG1TWI@6QwU<~=+Z<yHjzl%E`
-z_&BRF-_J}+i4sb23l^<9xCINeFq1!Rf*s5>f10*w6FO;|UHdwjCevhKnhcpqn_#^=
-za-&4Zl_1595;U+ub2Tf~jcjyty+H%SHLKNIG)Tk|Bj#R$1PB=2xZdCMKF>SvJMT;;
-z3Di0t$hXfq&-0u=?|ILA-gC~J0WXBy#dHNhYA4m;+YnyGbkU;9bx3CpjqW8d2F`$^
-zAf-PD;#S$x1yX%>GL;bMhreP8FO+aQcnQL%53~LhQyB*7xz-C(J30AbPB#Qnx`#nZ
-zw-BUs9UyLnEm<I?o5@sW{vPkiupa>_e3+^9fEOdYPQq&>JRelsF-YmoS97{EAf-D2
-zQo6$+r8@xP*4WYklK*z5(g6M)?6*sJzJ#v_FG6_i5bIAel|hj1i*8UY??EXqsFoL`
-zbaTNAptl)(1y#L?scZz-;5ylvu61A@^rjDRI#Wz#7+j6;sDz)C@N$rzH?b;C_bf>1
-zj)0VIH<*F=E|AjgWGWrt#YnfE>1qY9hh8~I^-;!D?BFVdPkA^z##By&bRQRk)UNVD
-zN_Qhj=`QR?J4O5)Na@Zpl^HM#=}t3Uli&xScN(O02bfAbXhV3JgcnQrI*|H@{+l`7
-z9+1-Q04d!X@Pml2246wCRZOK4ya?%*GhKyX3G~*1l<r!lGF^%FY=jSh6yDENT0!b}
-zvOp>?ePNK&ovGk-N5MUa9|m7Rx<gE55PUn*J<W9Wfj2>~6(s)=rcw@;BYdrdXG!?v
-zKJL#(_F`WK(mMry5vpBGS0{Ks>^eZ|SK66M6g&?3BvYva$*zX!$_MGWIA6~FMGU0=
-zVv^|^1JTiJ83oDj2vZpVdy$Vm@IkN#r2G9O*b3HwbRYEYVf!AC?7NvtJ4p5?!3V$y
-zSPT6sknHn8vTxnZ_7RZmLrmo`NcL6W=fHB1?!V0-*{=o3zIqqiSAk?-$yBz3WS<Lu
-z2HXr5KtBs4`&b#<O@d@M!Bj>;vKt1wz(J7O|0$5{8bGSAI*{yYm`XWFcE#YQ!R;Wm
-z-whzy&F*Bo8IbIznaWv^?8d>*f}<d{zdn%cT0u%L0+L;bsT>B$t_nN_mV@*>+zgUk
-zdnuV=U7P7@1uujgVY<pdJUX{bmvH+S2T6a7=^6z|e}w7k2I+Yd1>c77lT6oPkjC5F
-zL9)+hx^lrx$PT7!Gf4h6F<pbjJRa=^X<QQl={^ZD6$eP;(sdxUyHy}v@3A6I55HTW
-zrq{=G^@5aM57X5RQhKMDE<5;7DDNup2>ir$aC(zWr3a++qF^l;0x7**kjl3Xr1Gt0
-zy0Sn@FO%t71yXtzrmNG<>4iWVXO)9gzA~ng2~v79h1{+uK}xR&q<lufe8`7Eva4n)
-z>p`+x_z<_}F_82JKpKa2fTZ8fREj~;-vm-SUbu<%XFwX4jf12=##FjN(r*W;{Z@nI
-zzYL^t+9r_nH!_tu7wgABYPW+R>Gy#&ZfgfgKgv`pLGr&Hr1m<o9s9E=|KP2tzka5x
-z52XIC7hDVb9;VU-(s(2Sl75KkDg=8VZ)dvlL9)*U>tXL;DjPv+Pnlp3^j9%mQy=91
-zepEOFzC`5!XTUD-H82VW!NVYxtD33gf`3N11ElA|W~Q<ZbRawnd=Q+uk<%Xs)p}<t
-z-5{0gB={oqHiH<7Y_Wg=<a41wrHg)GjLJ0!u0i^<Ol1nB@zNMb`lC$ODe&`<yO^#{
-zknB4^AMD$iN-Ie1{xC@T)l64DcpdVwUYG?^z0Buxy-a~rFK5A9z|$a=Yk;YAfK)H-
-zAk|BhsWgC8FE!u;U?E89+d;D5z*J_oak<WbR4-8wL$EDXU_J6#$#j*2RIV~G3--lK
-zB_F&9;Tu5GU(a++Z^d^xAWtz}F_7#h!4JcJf~kyy^xQcOlKueG)d^C)1cfyq)k`@@
-z?Ij<idf5avfU7_%mxZZJ=5f7DfK)GMnaVIo^)d*44m<@?`Vo-qLrkR*q;hQpsb0?J
-zVm~4{08+aBAia<DF_m7Bo*z9-r5L;y<tb#kwu4mud~h4|a+%5|umIs%An9i^U9lW4
-z|A=r9r1JNIRQ{9T1+Z%cSHmvCbk%^=9;!hqcNJ6F4pO;uL3&=V11a74Y%bpzNaY`8
-zDqSFrlXF22^s~U%z)X<Jy^5*OCSEG{f>Wi^2i}AH^fFyNAeFltbU^PEQ|SPyzYKz;
-z-@tSgf^^;O!gU~(n<k5?+><Co2J9xl3t)Ga=^6p4+(Y0iDEA;!=>hTImQ(oC1x7$h
-zw;H7Dx(TFmZ)7U7H}E+96u2MpL6FMb08+W@m`V*u<vz?*R)PNm`LQrv3)geG=fP{B
-zH^)?_LF)I%LDC;%x_T)b=|qJQkjh;HQn|N-R@mi(t6-PQblE{F_j-`Zy^g6YY~gax
-zfuBbFS&-5l0;${`AeFnFsZ@eC#LsQUzE#AJgH-M@kjg#ER7OB5_b^kb1Mf$EYM8FW
-zMEI!&cS5g<sg!~A{Mt<M(BH&#SwJdx41b7c@#iIQ1e^hTKza}91~XuHis_1iRPI)g
-z${k@Uhe2G*Emh!W!Ca8iT@StpdHPx|_Y_k(4bpo`6<CS*%^;O~6G-LW$W-hgm3sqI
-z8NJ40xexgnVY-GvD)$gr2)#k3(ht&exDzD(4yLOHM3%M`3Ufg!w;iN%FKpuXApDpG
-z9ad64$8^O&D)$6P<vz<)hCwR#Ab1MIkKL;2wt`gdGLWu!F;iI!(tFb22e1zt@zvm;
-zz;)og2p_+i^EU+6A-r4U1`xOWmKu>QB2QmsvHTI?lOW}5f~kyvl&@|OmwHPjNcq_g
-zb|IY&;632{MvG-P!l%Gl@C-<LXaCk>Ss)pF8Ggr^${0xLj53uTko-qMvI~ObzZ@k0
-zo4_)J551r3VUVfRfmH785}q&N>%lJ}d>vSes#?o*bzX^iQ-p`W>%c<cI*{rm3#9t9
-z2xsl+Zy^tZ6n_dNyC_I{5n&xjdg~;9`hBb)6OMvp*DZ3FuwBCIKx#LYAk{;zgxf)C
-zR}1fD`$>@W#z4{=5H^5RUu7WG*G7=8haIGJEg;#=yoc?&Kq^l$_<OJrr0cPrscZ)6
-zx~~G&bT;sH?FL^&_}sfKmN&pzkgn?tQ<(<I&lFP`0m;4(B)cw<@)-gtpXK092%mfx
-zU)Kqy(l2tK$U%`CL|zB}0d^f%U>+I_fmF^qkgiL$unbhMi^R{ZXT2Dx_ER9`rx&FB
-zoCK+zHGuyKR)W-i%Rwq<8B-|+shovOWg|%CTnkb;SApbr_MPnaEJ)=X0O>yNXDY4W
-zpAfzoEGB!9%CQQha?D@OoCc{J10cn>3q!)gAeAQ{q;%JVRG!((xIAY-3O^01<&^M3
-zkjl9poC9apv7d2}+Diz09b5&z0n(SJs2&#nMx`<jQa#Kul?jmQVHBi#7y>EXK9JJw
-z0I43TL8^x;reYU)gUD0w;P@C*=>`7)yOR>$D&gBfs=vugag&1sAk|N=@Dxb((h5>O
-z>OjgzIY`&JOu};|e655}ujP7)fpgHC0LjlNNcA!RQoZzp^WaI4%G1hJ%0bHSW(nUU
-z;d7U8euuz9vIjqetoJcpJ>VY5be<LH>H>E`rt_~rR~bm<+b+x$F0A43S>Y5&?PpSW
-z2Bh{g0(OIapcQ_5nXU*(ej9|j!cD>r!i9@jZwjP(m;lv!5xEP*4^nRF1YbeB=wK>k
-z;JXpNUBdGvd@V@rWhRSx8hjCQr?5d-2wo2RO`rquS>R@nCQ;vp@P&)GUCuL=S&-77
-zVJc@p(jNd{1UrPALAq{q?gpq#zMc0841*Lt#8f&(?hyGf_)aR1gy&0m7Px`(`8JHt
-zk<Qsn%A}?I4AV6Z(l}!br2LICl@ah&$iqyf4<x%@rYj24zMfWLjd1Kj&POl!kBILU
-zMuqFa8{lUh)3p|)^s_)pKa;7f0)GdYCTT!rdNtckF<qnJeXy$muS3?Vgm&RNklI_8
-zkX~x2z0F@>p{+Jsra)?UV<5G=QKqXKB!8X4YGJ-`v(OH{1idVg=U2(|415>-PJpi=
-z{wzr4I>S^(!Rrw|0FqumNPbR%GvG<^3WT?Ul+VN9WspZQxSb4w)V@xGFT?KuQ|SXK
-zonEHW4pRF%3{pF-miQ`(F9fOGZU$cjGlf$&mb*Y|Z=Fn~5Ty2Hm+%b|K8wnGJHpR^
-zq(9D7dO>P;CnX$noN9YM41NjeRfC^Iz2m!nL|3Q9LQ^MOkSBFs4b91t4;f=$%NO8^
-z_#CDR^1*+EO#B7pOz^)!CO%I~7~tKIiNA%6zL55xZXixWo&`G~6Q>{}jP{dmApQn&
-z47>|6@de0Z;D3iq{59ku@HWWAUqbE&k3%NLAa{cwg-rYvWGYWBWa6`s*MlhU2I3^-
-zN5F{H^05cOL*V^j5qJ-HDTp?p${z=>g4_n~2E!uX3T}q%7g+&wARiLB0=yA2`fAnQ
-z4U+u_LGqsil0EKiRlW)&dkphb8IOI{{!)?AjadFm-2#O32B1gf`jpkOW)pZfXb0~E
-z)pCMsA>RdNf}J2>=>TIFtM}dN5n-<|Dy$I}3hhFRFqS3u!d_uiSR*VH+JzQj>>{xj
-z_6noI8eyT(F0=?^=vUFiR*wjKg;8ORuuy0hT7)rFq-rnh6-I?M!a|{4Xc5Lxp{l)*
-z`el--UnWw2Oe_@Ig%)A#La`V23ZudrVWH42v<PFX#a`Gej0$Ung+jZ~B8*)i_QGCa
-zR9GV{6xxLrVGRAET7F@#Fe<DO77Fb`i!g@%PPG?Oze#dbSR*VH+JzQj4E>*KFYFaY
-zg*C!Lp<QSZ#$c@43wwo8VU4g*Xct<9G2BP^=jst*uP`dC5f%#VLO`|a0<Xna&x!BG
-z)O3T$MBKY;3PmPjD82@-S*kt}L)<l)wt3rvEz>rhaV8_v*0ZX2Ri>@;g02fPZA0sZ
-z*Jau|F6+Du|GsP(fBP>VxEz1&19n*17wGTCg^iiE*i}<k!S?Fjt21q9ub#l){u>5v
-z$h1x8&g5p=`tthoGHnxillVJSJY1Y<8!Q<r$+V4Dj#XybrVdOW$h5V8xZ}gntm&^o
-zxPQ!_X`8)e?v_kjG}s=5=TL7b(>8G1>Dw}GV=dz?@OFIiIATBA{!v(+>_3U{kBxr}
-ze*U539}pY0PDZT=yTdwu2RQi&YwQ!?Y=?EO1MK{Qwd)Ju+!w6##Quk@0}p{+4_i+?
-z4373$$NIp5N35qG0b^gbPJJ01>$i^gg9~4=M!yP9ebqWmoP5+8dlVcxZ5=)hwtwB)
-z@pUjZXq_4ahrekZ`6k%$n6>jUaOzvu>2HA}-?ol^8|?fyYuCSlec!Y8e-9iSwGNGf
-z6Hiztp8%szS=*li`^T&UW8laStfM~wV?VS`{gC2+Vr~Bkc=kE##B<=-FRkOh1ZQK`
-zxfnS0E9>;Hz|LP=yM7Hur>yN$VE=Ed1HS=#Ua<DQ0FM6FI`&&|XxchFO`Nd~&wv9j
-zSx>(Nj=X9eeH9#h%{ufNI5uw`p9hEkU>*4b*n6j~?@qL(!3S(Z4}kLz*cOPxJ+_e^
-zu>C<>$Ae(sfUSQ3To|xL{}~+rXWJR#sju0(zXncz%@!jLJ!%_%6r6d~HcOlvwat%$
-zr=PG5J^`M3($@VXc;-plS>oVRwxOrM*{5uC#PKoPnK5u-%ohDVIPrbkB(dY)ZJqxP
-zc0X<Fc^aI5+O|L({Hbl|rxgA(ThGrZ{AacW;^2gBXoA9@vGqJd;m_C>h=V`34gH+L
-zpSATo3(h@jn<w^7+WIF+p0v#q&-}u6_7`CEIa~X4;K-}C(O1FV*KB>SQTUv#eGZ(M
-zvrQ8FUbpqXPT_CZ+TQ>N->?l4$Np>^|1;Rto^h%jck6t6#sabZ&Ww&b!Ly&vnD{i<
-zc~3^yJ>XDR#&8!ncW=i0y<qJAjH&y<nJ;F{ei7_>D5LiwF#2#t`@`UwM>5Vn0`@+d
-z(f24g{Vy3a|3cw|8D|H<$;UEckAVZ<$vFKTaOyi5)5NZkj8h}v_~RL89tVe>$QXVC
-z9Q{$o*pI-uGa2*LyG;BzWAevf|I--*Pow{(&)zC@Lg)as&o}VzHF!4EU=U27A5o`<
-zu<2`9zWhBbYv=CzBwjlw_eOMVq_3T8+b?oMF55Su-zNW2@qhm%ET0y6Bl1P@T_Ud)
-z|JpgI{dV@RoqKxqds)`bIXx@++g`)z-63+X$hTpBiSnnNoB1DCu&kYP`5*>r6u<t5
-zY`=RS%i1}At&(1~#1By?4}Hr|SwDb*BFWmhd-q`gNOGaXUn~0BxpmKof9)K)3q)T#
-zw{C~zPdi8Mb@8vA3-=y7``6Bq`<4eX>Uf@>PWaGYqx=BHqmHXzR-@@1QjMoY4EoTx
-zm-I75ZYO;_>-%TbXv@i)AsgC9Bgq(x%*yqmeMoCCw%LT2Ui$1N8DphuMgA7XZEG^^
-zarv1_$QX;=DDiiY44pEOJ=8uiRxFe9d}b}3;}XS-3j2QmAbC5|q|ch`A!kG_Q7Pa1
-z;G5!4iT?XHb9}4B=fIBQCr}3Z>_u86M?b}KgUD4^vi#9JTCcWSv~yE4MApt3UA>j#
-zwR2k|`7CSabg$jcvUV=$L%0CsZyme0Z2ch1+PUf1;bo5EdnEqhB9@DT9MC5A+Bu!H
-zzE1kxl3%QGpgeX9%|p@WkGQt)%dlG-US|12n9LykQHiJZU6QqPDeu6G4awR$n!n0s
-zSv%MBz=v4QrxzT2F5brS)C(-H#(hur+BuF+@u!_D`8?Dpf7&_lJ(54IeZE8Tubl(`
-z1BtJBnf?F%CiXvlDa-dr`kNnT*(&v~okRIYsekR<@;<Sz!61%4k4QXC($MFhT<pL1
-z29_&CzYz66pEkK3+Bwq`a{aV(o%e~qnDl?;;;$3=q|dy_+Bw&)Qokb)ar}Ek*3QA*
-zEwXkl@vM{cr=2tW6UmQuZt{Z2W&g_l+|pi8-OuuO#eThy<-6s2Y3Eu$C9-yo><h)z
-zexjBRssGn;uhRWe`~kMFL_JcxL;4Hf1ss3+6vuxK^-A$0V*eG~mt>zM^)VvxXC(f|
-z5<i4?N}u0Kd`#l$_Xo(n4)si*&2s;*m-Jn7|Bv6z@w>JAU*bP}A=}S>ljH9$;ry+Y
-z_*U_kDe|YpUyb<tvG@x~{PW_kUHt7SWq-7IMxRmfH!t~rTKtuDaQvlGz6Q~Mzm#vi
-z`0EpYvtoajq~9U>4@mlBkFmcgDNl{Wuf2iuvq|JD<@)7!vi{AIepKR*NcxAx-=8FX
-zyTnt+MfE=}{pE9OSzdJ)`)iQ&Lz3TXq(7zeT<P;&i7yj>cZmN&k)IVgU*z|TTrKkU
-zom`$uE&e)|dnLV`)tsMU)H{7{m-v2(zgyxD<36CzPbB`d#Q$327tn9fr%T#*m&8AG
-z0sB9B4aa|1;=3jO|494>TqpWmA?59o{Jt*wL!!T0((6S(OrO1ypD~I5h{Tu6{qTsy
-zPe}Y@5<icAh(3jqUbm$8C()l4eR@{Y^{d*;`o)r;UeP}w`Jek8$8SKoq_3Tu|IR9w
-zH_G+@-xx1YJWU?b=cctRhmbG&{6Donk6H$$y}u~>m3MLcXEUIGVQ+l=aMOOst9vb(
-zuX22w$ZJKuP-JcV@%fus-!AcAlX#khr_XOhUN7>v=+D2x@e#<ESnU?=cQ1-jK9aTH
-zsi>9s8M&VKh^+k%#6gj@-&MFn<W}k59zuD^pZ2>4UlUpTorl+P9n|!t|G!n@wR4EG
-z#ozo7IltMsUZk)64$Ebtubs>M%Sw)4|2XUKmw4^m<#&lc?Hp~p_^V@e%g@l?lm9;H
-zAD$9fJGcHl`#4@Z2i+yIcCP#9C4KF8SPCS4?c8abq_3SL9=L@4Y3KTX68WI?wR8GE
-zf%ZhQcJBU9CH{=`|C4B66u-)c2z)*&{^kQL??QW~c<px?o{{*%QjYHsSv!~ACgq9B
-z^YVX5`r7Zpd|k@7@ttgciRf$RvVULVwcl}BBlR2m4(s0~^}!O>G{jyz*S<sS+plDe
-zs;kkyS4AzSXIcKe$o(RJM&#mGIDS;*a*?n40NbAx{cAR{{G`ZzA`gk&EBaf-{(b1@
-zDE;Rp{+PsPN&IbM|6dY6Bl4`sFN^*r(Qgue?-Kb1jMs1p<DZtdC(7R_Pn7SyC{g}W
-zcB1^;I}+t@B0Z!3uk1;be{YJ9{7qu~(VdC%!)p@do3aw+-<tIc6XQ3V(!U<hQ)B)f
-zb|=c8HTgeKmKgsdll>I>Q=`BC*qA6+nEdbCkr;pPWr^~Wrua8Z@qaeOZ@oOx{+*X5
-z%9ok+drb9p+Ekv9njR`qJ{PFhN0*;A#b0ZRzf8@Ku3uq_uUVCtzwer^f0s#q>TeVE
-zKX6r|Jh&@S{<5h)?lz_OpQiRq>+{Cz_wC(@@*Y$DA5!)8@_k+Pr^_cz<^NYxe%+?_
-z@k`VFmT77)RnElx(0Z&fzqF6bC_5dA@|9O6${#nik15mr@w}=2zH3VFcc%0{VoL9G
-zrt~sR{lj}r<;_9AZp{B5OzD-HuK(Sp^nPPX?<1!4s!i$nP3c{V=an)2{GvqpfT=$2
-zF_nMphD7~RQ+~c`s_$A;egDzq|L3Oi-)1WRf+@YXoAT3PD*q=<>3z&p{%cI-zjH@o
-zd1&90v3_Pu?f+TKPgpH_`+r>RFLn9j7bnL59mZcqeV^L@==xU|C&ttM7Nh>3)%#u7
-zr$rxQ{AFtW>G9jt`q5?DCvDXKqdieRpk6Os|4Fs}ba~8le?M;WKV$OWthNW;p7vWA
-z)2Gc>M)?Z$`sn&ssMlYYX@9s;|2roC+3NMz^=~x!-(&KBEyiO;e>cI@DBozR?;o13
-z=O;|pv%_>fkDIRNR+Bw_AJ3THRi^8Cqv?9SLru>T|9soj-amd3`O`o5neP8t)A-{n
-zCOOM=zy4oSJne%w`tLK{pAl1f|5Lp`^!!ZV{my7l-;*)Q_o>%c*MHuW{x>ob^^d7?
-zVcg&+>Ud6<%S`duTZHuV_-~l5-_K0)`)!H(_aP-?exEeSdsKY{%I6~{`P#LK_CGe4
-zN6nvRjrl0Ged=<f$^P9Y`FkdRpD?9w@oo$|^Gv^9n(YX+90>+$_xRg9f!qBhb=i4&
-z&I0eD+ZWLe2kIMrk(OrvGPIp}VZXo5tXSXVrC&iUY6`VkyvO{<YKh31qm+L7)JH#X
-znp=#YP(A3(^X~VDn*CvaV?+(EI8*^u^+#5{zF@Gac1KgI#Vh{y`A;m8<x~aq1djV!
-z7ST^t#KrZK3Ms0b&3b>Nsx9Q-(YDvuSReG)?eiV;?`kY+YK-_>BNnd|rnF*zQHi&_
-z!d>j$$U(a*@cXisp!fQ4r1|<B=k=zmmh_vmS}p8HZINGb9B2$je2tNSFXBg<waxyB
-zpR!Zh+;q&4A@>oa;;T)UAMcKqKrj+$^d1d1`Jl+9JL0boG`eeR{o$|{<ZrB#0Li@5
-zdA;!mamBJF{+qWY>hI((ziFa+Lo2&*snt_mw~$uj*?HG5{;R!O<tAS>y#=Sav_(zL
-z{scv-l4k$WAbtfH&EI?6-yEjj2gY@*ZMZcYxz$_eYd#S`0M|RNqfeLAUmD&oK^wyb
-z@wVc06ty%T_p5hw#WoM_T>Ol1MM0%@!ynuWk4A(1z2$pK_HNsnpH8VjRdPDAbJJ;M
-z=a%6n_t&{wA`Q5I1GVZMT+~$OPf9h%UE-<8*;%x=B5xlWX|h6Y*<N>1lG#>InL9gg
-zYf^aruEwyx7Clr&&fem@q-ZkB$<Iw0p6AR?3fJA`!qTb6OPAwmIY#y8$v)%>h7Sc3
-z>(ZI+X*+hzA8A(m)`RXMV+V(B7+pZ1zNM)pyrV7R54+uFdp%vX7;eAYnN3w%DnA~b
-z&VqBg922SxFV&*Ec1izQg)c)jU-e7XybNXSiY!Bw{nBMxhBEn0tBMPka8a`9u~XUH
-z6ltn$3TpLh)Zph5l6LIKH|y!QU7Duf=5}kfxYJ$K*1FSErKPi6dsDl3vu?CXe=GJ>
-zxo_59F9tW(#r-%*L2abPfqH*9f?Fw7t%(}i+;Y^A^%QC;u64?^R&s^iZpXI0ctHB<
-z{dFadm0s<{%k<WL>6h%S`AU8HQu{R4YEs8n>2Nwu1R@Q1-1?6CiyUpY)p@=2zvs}N
-z>XJRdQk)7F^ag{+k6q8tzGF>wEkVCJgiQ00Ee?c3zDR9@sZU<&f#|6}RAI77dOF2*
-zjOF5<Ax)I{^&HBp#V|L5QA|DME!jt6yxuG1;K^L!EGTKL^@YMMLG^Kp(Oye1a?qI_
-zZtyi@r0u5>o*Nx`!lQ>%GI)wVZwowr9|oluMjv!KY6GDLe>06slQU&@k$Pm|bW}ED
-zTpjV_W#XW7TeI&(;`sf|`ZbJL-jvsr!<skcDfQUrO}WxDl~`^0^v<->dNbtf9C*{4
-zyrF^QM11v2U%<4j)E{rV{<@`IEu)P&w(`4Osl#33*vjMDQpZ7aYh9$OHEZ<BMVfU<
-zvh`who5ozmhdc0!dMmyD#$Qr(;h3*h733``ZyR1X{H-Cp0Ql>IZT6$|E^KcM1nnmp
-z0ztpMrSU|wFBHP~-R^6&SA^&_!56e2_XS&Y?}wTL5lG8;^W4?A7w-#r+4gzxY8|&}
-z_6PmGa9orZ3klO+dzSZ3X~@Q*K%@~5z$)L7pq|&#W<P{f9bl^0ezt4$pU^uPnW>;x
-zSr6`*#Ew2YPae6+uOHsfp^944_Ry$(uli5DZ!~qC##Wm2=yJQw);v5_hto-;X|t|2
-z4y5inaa?cK)StEdCa|=DKKfo#R~uj~BO9t$bwIr=uglZa3nwovi}?1W9jbGc8LyTM
-z)e}eR=9*0!TGGIB5hZ<KnMO$;R_aR0xzgkGhL>(g$*&3Ke5JQA55<zK)88RS67Q#F
-z^u>F9i6)D5x@NV-dRMca>BdZoUTS1#Hqf(Y7+si^44F%#mGW_Ec9qoBk`%IWf1&G;
-z*AjEIexDRzR$~#Rq<0{*7u2FU`;p#WZ^bF?7mwC6>2x3==OW3Z86=n!)azE88!|UD
-zwO3N-flM)42WxhzXOicKOlJDjh1pQ+D$U{gq=Y$!ET|hahwEA3PLJc0=H{IRh7prC
-zHRsGz12M#|Yzkl+x!G}aXHL1l(Xo|Z0_w{gj$7(?Iq+VkkLVG0>n?{U;Hhj2=N;J9
-z7|B1l(+e@w=H9*26L6P%0+CY4hpJ1C9`MqQoRpbthdDDe1^Cy>jkBQ6ue}KQ<5lCN
-zv9ne!rE0AhYhkCu5kO58a7Cd85pc_`Wy$s8-lNye()D7_iCQmzjjT8w7(x0P>&o^N
-zmpZd)kwu#<bUH%Kw`vtrwiV5#KGNXG4KyBYLQA=IH?@{JKVIJab*L5u1&{4UwS@D~
-zRC2NpdX4P{&1D}~&t5d0NNI}aTbgF%bm9e*78_DzG6(avc!5pMXV@2vNIr8=5X#?Q
-zD0|ze)-bQzhWkV-`*GYR@w;ZF<&|E@nH^{hwZw~7qFsWmO)U|Gmpa;vRV=sW&Ydew
-zje4~6l$7*_=P@;u>^!BW_R8let+&wPa#HuyZ^2{sIrr#H?eRQ6+S>TZ=185H^ZjT`
-zpPTdfXiJ}yY&;VZAF_YJM_c-=yoEN+7hQkT(qGaGj$rAnNSluR`^5Jb>9`N3RniA?
-z>R2+pt~yesHL<j6(yyjh(ubT&`l9h?S|z;<JQz){93O5wbC1yU7Oh?`RfWq?)ia@1
-z<Z>+H)wv91tx}hvs#onYl*unu@G?~O5^^;!YT^mytD9ReFPD$I&sQ6Wv|$8-Nq~Si
-zQfg|Y`ukCCQ^?=w&1(r`j?kIwGc3D9PTE`JE-_5)dXtt6S|fYhyBxdXi=6v!51LcX
-zr2*W*Z8Dm3ZdJ!O7(DJpzMBKSU@i^X-0mf3DGK6i6_~l@m7n^A6$q@<8J1=DV`(TU
-zFNrf~m2P)QE{)@IX@XN;sBgZV7L~j!^=zo$FxE<>e)Ae>pMtrT6Y8`zxl-LF@($~%
-zzs(!jW4tJ)GT!dKZU266vm?2rT<cqTobSvFh5apcP5UwCZ#ss$R|oXYJRVcV?@UYu
-z>6N_GaZs%Y{Bd|a^%%e><ior#fvVfR$CN!X)iM`uJ9eZA`^W64TrAqv+x3n%^`wzu
-zA_a5Ai(99hph;_ydbTF5iGF$I(wMc|)MD*4lqyYww(G0=OZ(wXEh{ofpS0e=s9op^
-za<F2{^cm4Q+ZE(s`6f#zP5to-lU|-l`lR(r<o<mHSx7cjS0}2%hbq;nnB?BuonkS9
-zmD?iw$i@?398zJt#d%^J!C0gUw}e7X&5^J=fue?Bj;FaT6u}BH_G76b7y=qY;@h3d
-z6NgKt`PrqnJDKeDI#640s=Z5#T5yFg$0R;_Nws~*<e%E)VmqTusyt>`Y`c?5S!?Ud
-z$bvo=S%xzCrG~ty>QdXC)O;p475Gcs?qn)Yn%g4vcBd8Do7#n8o6w5fXqEm}?5T3!
-zti4_gZmf&@Nm?k7?M|lRCQbFHRYTTgF5ak?;#%`|CsSH0xx(gkr$a0DMYj=G&s+DU
-zU$VF6EA{0|?b8#Yxm0Zk-_};D_TlDz_s*Pz&es!IOfOs0qrOX1(+634&eVQ0|7ZaF
-z0<h%(TN;YBwIp_(%7z=`vW&FuP*-+4iWW;jyWN(pOc!cd%G@PVznq}%bkHtVY2!)d
-zRl9v^S7sZ8rL{@Q7Shr0C38AFq%)+E?#5}|$>!ngt=@2?E*LoC4TLK^2YKtaJ5r9F
-z7?HLe0jGDz3H-O?L?m@XDxfzVb=!Z!ob@8w`Rb|w_FgPY`6v`=@Aa~j$uoVaqs?>N
-zFn7LKK5C(<x=y8?G~g*9b#<e3cBF}S$k97-d{!P4=8GicEU5Q4`kQ%ETIz)&b@@zP
-z(O8DRY=_xj@|@U;9G>Ty(3G9g`JMnxnF+Nat6P{7nwxQ5WYMc!K;IIIBsJA#**YC9
-zAxsn`H}qv$=LZ@CoUpMW8<trY&GTPpwJv4VpZ7(%)VVm1Yq}{ja9-!TQ|2H?R$)ux
-zJ0-Etk0#aRdpXX8W#uw;g`4*S9HsTqqqHh&Y__tHSf(!2rcTkx>%J*dOzzswMUp54
-zzKSIK_ng~8@jb)Z!tb_Yyk8z`^}A%Dv;ZbMT8<v|H=7FR-bIsGw2=XYte1y?;rWp`
-zbwyKy3C|Lkp1`asRgEVU-XHMZ-W)7(I_Rdx945w5c;2+NHi}BprU+-g;c1|i$Z>0Y
-zZ${!niqi=@w|RZxFt%Fb+LrnPL3~xo>&-oiZJxQoK%+nJXwX+54(ILj<7;3QVZ2z=
-zw;yXg_$E<fJ(l7<?lMnHc<TXPo<1i&-Py@5lgpZuFgf5f6w^_vt!JxKuCmX9XGv*~
-z1ukTc&sT?kVz)(nV@eg~ju8|*M$y<^yfeA+x+}5UK>nv|T!Dt{zFDqv@{k%87C73b
-zT?g45jN2zo!*b-HWhHF^;a26|y=Y1avm$T4D!AB=Ak_e7ZBZMj3{wlI5-0voHBq?}
-ze?0;05J-7jFJrwdrJXZddx1!Pm>R}gi=-MKoWJR{^OTvASC4b+lwOz4t;hH*(7AOh
-z?^5U1X?$ks+`6T_qE^qXQ}reF+`7!pPq&vm;eO7gJ!O07rZlvF+7RU~UF_y_7La%C
-zTeezvWb7|<@Vy0fKi*<KJty?XRPIsiac^t&Mm)j&w`;E`+e(7|WB6k2{s@-l=&mum
-z-fN?Uip1}N;7K1}&Bx4~VNnR*dT33%9%W9#u+;JwOC$C2Q9^PwD&W%ya*j4NCr@Xg
-z&i1%>J9a0mV<uJ>zq4=UR{-_trG5i#>4m~XH_0oIZ{6imTbi-v8a{|Y3Qky%TJTae
-zc#gDsvA$@mjl@CF{@dNR?2+X~b1CABv3P3Y00#Y=dFsn|TWhQKwY(%l<L2e%8|u?n
-zhHcHuH#hBPUZJ5rle2t7J;MoGoR@NtG@4Q$&^WWgFk6!PN$$*{iIw<QiSW$VW>-?{
-zt1~?G)uLr+%9oJLnyI=H!?G>j7UQocez!Z#ZtgZ5QJc^;8TySk?+^=DhCQUbY!%=4
-znwVbdKE#l;r+#m7qDjhi=VZ0iB}vvxT47FBNjFQVuPE;{XOw#`;}VNmBfVq2C95;X
-zi~C<nF?}-HRPf^d7u8tWG49}l=^dxkNbguLudLOW>os2Ui)b3VUS4i(a~HMNda6=C
-zzFUqKB{o6RTB`a~f&*`)*62BD2^gDnl3k^Ih$K8jQ+#{Xy_24t=PEVB?RE~+((lv6
-z(xmwQtl^uQCD@l^{IVye3{2%r+-;PiN)31Zc}_X0FX5Jv;$kgX2)*`}xH_n?w^BoY
-z0q=S(7`Cv<jx57hUg*`@U9WAq^0v~JtHc&<swDTZeLN_7GdGcYXIriLHr9Iw-qKK#
-zPKCP~cU;GKr^|O4i&EIDD_iO=g%q*Wu`U)De_6$G8p(dOE;&_P{MB($OX_oVOV5eC
-zaKzUfk%J9Rc#eDOX}w133nwBNqYrrwCPXLKL*5ZOFo(TiH5)TxabNntg}dk+%)}uh
-ztvi!8IHE7*%jNN8JH1Eva4Vi-E610pn|(p&wwB1zd^)h`044*~Ew0-FVYjDf*DjA|
-zM~If>ur{Z;(Nos%tc2bHS9VWQ3t6lyi7U%@xsy+tsyK2BofUQ5k4ML%O4XH!#b`-e
-zYf}Yny+Re@%O<L1ocd7%^o0?Qm*qfuS|tr=&+|G~e7ks+J7spx_mb99`T48t>R+^O
-z3^M`hWI^&o|2g~ioUvkpkz=6(wJ9ac)T$xL6X|MjikTEOoZkFpX2n8o^VQHaYZ*Az
-z%$$xkPojn!-f0rT%~eHyD8X&&->s^x)(dL_I$bq3PYu9CqblWU(K%l1JBSPP&qZ%x
-z^&CJP3RpyY@S1QYpx4)YY->7;#FP3~WU8M^w<5E|1MOC1svXm_A|t);Tag)h!&Lg{
-zAJeoNx-rx%WoVx9J4TH#x0|?yx#6f0)N*oEJL9$<wRvR6TLf(}(FFP@89C8Nq?Od+
-z5Ul2=Ht&(9R)3whDdfAY#g8}QKsZ7N?O~I;K{wRgL=TE(>1tb+(ki36(Au49o*bMr
-J9Q&(&{y+5!gnIx0
+literal 161632
+zcmeFa50q5bedqbA3tA1bQ40Z*kPV_cgAtyP432S3c5u_>V3}kPMmDx_0##iCSGR0%
+z5a5YCgJf!!D0r4p6NTB;?Beb&n^YA!N)96tV9uhLKFc_oS!J3`m>kVn1!zappowNi
+zk(4fth4%Bke_p-!`Zcs{*?Z2c`kdGG-hKD}?(g5dzu&$0cklbtH~;$D`+^`7@TY$r
+zT<hETcQ+S*cXFM~n%mTWU)W}f247Pd{<_@rP2B6cS&95@*|KZvKip;S?ek}U`3s+I
+zKKr|$U*Ck+LgF88&jf=4GA(%2=h5$$Ej<rC6iL{!<&&#FySka+@wlUz6hz6ewKQLD
+z+44YPS0VZwhv)Hn)D;}~LdL*5`EN482b#sgyDeKD`g-rST_4@D>o>o)b?4S?TeigM
+z{lm{#K)>%w+`TDd`2WBD+e{F}*#q3NrTEaUoxR(?>=Kgj@*6C?x_kfcfH%z-=2yIo
+z{sC{t_J^7RN%F7#ehcpxU7<(6Wa<6F|D7>%jl$CXM0jy}?{)Az9w&k4SeXQ6o*n<T
+ze09eIrNToc;Q#8cZu|$$tZN;-c9(P-c-Q;evSmk4UvW$CR|{X>+Pi(*jwHRC96YDS
+z!E+Pg`KnAcqW7y`D-?Ha*}eViz1trEzfVT%FFAO@Y@7NQj(?BCzsGHoXN7~ewX|j1
+z&cau>+LuZBmbO~@{=&Wv{^F}v9_{Bd!A#O<A|?0A{4D3c^vITaKX>y@`ZE5DkUZtq
+zw_3eWzCZknOt2J;*8lfR(Eg8XyIpTe1i>%xtLv}0?gZei*JrgW7618J9`EK-(VzW_
+zX&Y;H?A}hJ>)o+kX<SRV#FU>keE9l~oeu`FJiIdbJY5b>ZpY58VfhIBEuSpxL^Mqh
+zA93YX&-L>Cy(#7sk3HT|c=wxzx_;-5;?{>Aa!odc{w=v3+l#w*?%cY)_?rgK-Eq9`
+z|ILSXZT%`~`b#Nq$+NFh@#x;&`;}e2+qZ1{%8r6>=_zpT>v?GF&OJ^Lsqg!?7I*dT
+z*_v~BB={%(H<_HkCn3)Xc~k29WbZ>?E9@#-b@uNk!1-!V?{?aX-lyn|>bW1PdJ%!a
+zXc9R0Z$$#VyDa|`di90%5Ih<DHS4zSG8%e)dZFdP)jNB7ckP^<zn{MES9-m8LOCbs
+z4f9Nf&(7cc+O8c5I6n_=2{^yHqgeRL>fO6aTet7(E&9esJ`Xpd$M?&C-M4+m_O18t
+z{@T}e>@+wkUz1PjQ!N8h%IDNU?&|I7{R#|TUno8(Nxb!qXKQa|gMMzGc<USAtNw9z
+z%Z0bg!N^<R$kg7-1^xGCAKh><+g5K09zB04+ah!J#6S?N0IxYqf=4%u-4ryiYjfIo
+zuY09mys4}4);CtyfYWc_4GUgN?Jb^<-Q3lv-_q5n-qzK)LcJf(1dXNBgT|5>LBrzE
+zU3+`jmV4v#|7Y#B`@qAMeY-q!<ZmdG-y1Xv4+o8&LqVhXWYBnEC}?c02aRppgT|M4
+z28}9pln(GqJ*9*EQdenD(0I1|!SQFaT;&h&%T>OMU#{|ee!0qb^2=4egI})l?fmMR
+z$30heF28ff=R)hV+1cFB9)IM;pz+8Bt{1q@aXn|~kV!E-ZF_Xfc-x|`M%!Cmf7bT*
+zgZ>$R{f`dyb_Wgm{Kwl{x*9>tCoc4McQwYKE6B`vIlm@oEHq^wJ)hrXdBVGTeiJmT
+z4H|9V+%jHT$8Qqmh6KzF7G@hTOB;ci3HqzhFCK^RHamDdDe$%>;BAY*>vQnnrQmJb
+z-UZ*q<1S><g-p7TNf$EdLQY1`_59whM(@6$aS!<S?&lZ$?|~=xz>~iVPp)L&SC8_f
+z?*RD^b~RpxFArwk_ws|s;Vm>ALw2Oqk0HN7<Tr%;D#-6U$nU$z?<n&7J>*wMel_G*
+zMSj8&U90E8t@m&MuQT-mIF^nCjT*A8BHJ(zc=sN4dBDH)l=93a&s>wIn$3=sP6UmC
+z>>TQ!W70~;yBe1T{{-}(Hf`YXMFFy<-rZ*eYi_-CHfTIEJ9tLzWA~Y^#;&FC=15l~
+zf7s^h<F}XRQeRhNAeSAfXKw@l+s4UnU=>yd4f>A9yB*v-JTJg=)zNp9vQJTVKlShH
+zYW!#6vZkx?m1P0^gI4f+aCy-9eRTF1I(uw5JM!R)pi$4>N*%Y3x6J@f<`WlGzDRkM
+zZTnysZTZm+9b9_Xw~RWLQ^!W$ub^)5>>=OQmB{{dSEG`h2F~rkYajnXc6$A#>`kVx
+zFto1<8XtY1rG1ymQ%-p6GS3TwMxi5U<S+0`J5qYj0&wZ*YFrX62jcllJ+1wvR`Nej
+z{_{4!;eV@ew)_%|{5;;zC*L`KZM%FTKa2aBwoGBBliMt4nQhbZd%7Bh**wpq{`t1v
+zJog2E4_*cE68zG-u0|eu3Txrlbkg8c9zGS|lX>66d-zn?+<Y${=aEMNK8IzF^8A#m
+z>oE7|fy%2-EiJZvYJPDS{g?XDZu-R4wKqOLZ2Ic_Sx<A&KSp1DnZ8>6ayAppzIWQA
+z8-BpEVBH<u{qM#1(kiZ&z`)P9xH|dGznDmS7wHf_qT^5Be*1R%_Rtnw#9p+a&to?S
+z4cVB1^1|`&2jhRFHZoA&GA>%ZEf~Y5T%li|2~Spk^S56PzIV^JvfN+JX04v_9w)LP
+z82?T6L~K|aI?<NtGIglV?`NzoUd|f&>8m{tEk9<E{~r1p^^;59`u6u#MmSy1t|`wY
+z=veZ@y?@p=J(yh`UU-t<-}vJo_^irShqs(;n_-{d&+{0x1h01;l5D8Yz*bs@G<4p`
+z=c2{$36+oXBFV!5J_wH5fN;DF9`|B*s_>%i&aTEH*M{NGM+NH=^(bEz9(x^Z(%0m9
+zvYwwBeLrQ{{XYCShObb^PpIB*{gS_nE`4}9zR3(^`hF{qs0=3hCO2E(<Y3S!90(dc
+zdxA#sVSJOL&NtbMZ?X?xgt|&k@+;ru2*2`8hWMr4(*7UAN0EPmjk3PV9OJ7PKZX9?
+z`YP@G-a7usHSB0hrt!#Ce(7uFzes=bn=OsTH=w^VJ_feBw1GC7^ffjnd;|JG%Jmyx
+zV^fN+A$UE&5xi{{-VA5^?~y;$7l+qJpNYNhUzC~oa$$SW_yqn?%zxS$&)>T<Qvcbw
+zZ_=}ee*EFC#<soKDf(RXzYoyg8sFrA^Gyz7+YUM3<Z#?K`B~$eyg%lfJosc+qwff1
+zhK#N4|EHPvzx<UGLF3!>8NZKzBK!OMH}Fr6;h)s;PipulG5-VHdY_WdfZeWx?{WMO
+z<XXi~Q5!dY47Q^8w9A7nDV<TCIpncEihKdt{L%@0iO%eZ{D?vP723G<CC(*$iPPji
+z(`9XfyRR1UbDmRwI-9b$SwH72`OZ0;`5ZR#d8;$K&kGlPoC`r?xA$?*<KrwQKYYr=
+zuMl_S(Yw;&{xCSM67IKx`|Kut$f|d_%OjbsP@Z=3+-mXIM%_JKjjQqvwj+zB0r~>J
+zz^`{%(CE7sG<wl-@7EMofWvZ&gYjYXyb|12QFiF2{=RPVzY#P_Z(4f#c-PCj(kAi&
+zztD~TJg+**`wDqqHDjK~|4Go*7|l+r|5dit*r45O93R#Ojk)d4*IQ%x@Brlt$iw*Y
+z%YeTWcr7>e_g<#nmx4wX*%W~%KIP{Jjlu#4s{>fGEUf%|U@YL86*Tg*xn3aOix%ge
+z+35K!=PwO8IHVOw6U^TI_TIE_(wES`DZRA8;#64I)$~WetpJV&m*w2UFLUpBX38N0
+z`5uLyX1UT~(x9<$sF{{O&GQ*o{weN{+k4~N%(He?{#B}PbHUr?6yIh>!nbLq?wNtb
+zb0+s!oA(Cyp8`$B&w-|Yi~mtti~h6*jTg8VZ;jmHb#Dh(3w_{p_#mIV#pe5W<O5H9
+z5j*ys>^^P0{@Q(K7$e*9`rG*71F{3<1@!m2G~U%X?a}kqTrd)3+D#jh9@KcgJF}kt
+zhcN(sbCouh?CYzY!N?5CM8{?}ZT-0V{0!sELE5GIXz^Ka2g;uV)}0RK9TQ;IvT=B|
+ztc5iPSWh#4`*w@uJ*QrUh5=~My<qElI{U@(0s75B`p*Gq8#J^9PYjhmKVHdxVO-+{
+z)vvtO>}SmH)9$xgUOz4$X@KV;?B!+pjKMPZ^ub;pDmOr1G}xIL8Km!P!-tknJwzWU
+zf3regYGH2xj}7B(_?5ojRr*l&e#WEsgPX>Of?>yq)$C`<|5=yc_T|;==Sce;v}^>Q
+zjo|-zV7GnC;K1{sc?KV78-zAfZ}|(r{vxoy7~=daa@2gwYxkWsV}djtnc%PFZW^g(
+zGe#c<k$-${L~|kY%{<35$jZ!zz;n%s7(J@ka>B>x5zo@28uTtfSENg|qPtJ{4%J*{
+zqCT0lrao0WGb0(`c%71rOg&jw&uGxBXV~3SPt>QVSAvmG10$-pHPV)XCpNUd1K*-n
+z4n{i2vjyFal`W=}B`sQZ2t81_s9&P?HKDDTG)tTOqgtoM*U!gT9sYokZ6&)NeP|ya
+zgdb{CUiYlrd57LweY3W50KN=nH<+^CP7g2-GKlO{riOkFqK{SS<8WrAM%x;sU3xzt
+zI-el>T}5Yi&$G6sIvR|$z$>-&K)>Z+WR8A^gON6V2Z7mktL?*lnrK_ZyV|Juy57ty
+z)GApctBY#G^mmq)IILP{3;NTJTr%}KWmi+So^3JmQ(Ld0cWR%tQL9rPR+VxFH}YmE
+zV_=hJ@Fp!wn)(B)=k7iD2>&FmO_&+;-onaQn#+y{;HG-2;2{_xJw^MhzNOabbhOxF
+zbW44V+J)gu&Zb5Cnrb=g+F;9wd@kv|mwUA{3oY%Y-_g8NmV3)TM+5oQ?xYj7oaM85
+z&;1PHnYDPKci*a2T8tblU4pCkf+>2$NA!;0>acj}>fzb&inOqvas*Dr@t-uqm!ji+
+z&hp;WMVgTjX;B$Xl-uMyRzE8}7CiY4wPC9V8nafp7pye@VSqljI&ArCa5494W9rAS
+z5AIp_(K=+ueH~-i<*D_jvb*q*HZ*Bpiak+Z>c{JY;5TOMm1N;<Fu#dDvxYs2^<%Vo
+z%Jr*1(YPSBFM($R*euhR&{uh#GIYbs0kvQBrt0jIcr}Q9GQ40MF^CTl>r1dzgV?Gn
+zwrWa!3HEjFO|~z2nlh%|ob^A{r-V9Iv1x<ohx(YP{>$E)a^x|3$oo(ai?$y%_?F=x
+z&qfDx&3;R|-K>{9oi>k2qwgF5uR-;x&KDbSH0r(dteS0CUpZ$WJBfZ_qt*9$pUU1x
+z^~>tC!7&0``X$&`r>a}SGiaBNccYd^vXSZ=)W+2>#C0yZwxP9*JB`lC_6pauHH~M{
+zk!SG(ylz_f(o4bT*VJq5SiJ@=l7sANXz$CD*x};!ZRyX*4(EcAp8>CLC+%=&N?Fpp
+z9ah=zz(<vf+F^|qW9_Bfw7+U+$@VhDSiQnp!swFVY15}bv(dL=q@RIzbH#^pi?s>7
+zvw3WPSY;i;>YD3IE1415r&N7L*G*a8hx(k2^sB>GZ>pq)edef@o%%b$R3A2I<Vrur
+zJJa8rcaj-82yCr?$WKnQ_tlE%X{R5VYwVNc__+>e`zy8$4GIqJL+w)dhW38cK92>C
+zU+&r482pMkbJaI@I=m{D-uiIM$i38K#v8OR^<Qf<Zhn-!ru~vf{kd&3^XPNtjT06z
+zM{<d#895mmpf~6IiHgTNf-`Fy-nOf~H|;I=MQd-3+{(^ok|tW~+3d)%Ty~@nd~5XS
+zzMqthuaYhtJzq`vPHSgmQzak6*HJ6ekIr{|C6AFidG1ji#c9UJsg<Xhb~He`#l`h^
+z(6fkqew=1}po+~a-=j)7BX{6fxOSaN{aCegnrZ8%&(2LVI9WWEE}kjP_mB2owx~uq
+z>7@7DRK}FcdU)B9>S)|g3HxdC7(93{7_u+5;fP<ty?I}8?}N6NFU|Dx<LGO4y5ob!
+zkJFp@7pI5#8`_2=??#*NswN%UOq!$3-5a_2_m%0U?=*B3oqs}_(Z90Z0i!tG^m`@`
+zX@+N{d7fDwNASo+@aS~;O`7MiEo<=b??<OK@yOaTs&AkSPW)Dpzrm?u`Kq>P<UVSB
+z9@`gqIvwwat$y4=dl^t$`Vrxkf=3V49IWZU!XAdtrtR@gJW2Drs%3{?w$;ec&|>b@
+zpV;--s(Uu?Qs}`(hV}gwc2Yj7(VblD)Z0p@&1-l@IpJ&SbN2(-yy&y;C-5E^s`q-l
+zzc+&GX>g6MJ*iENu{IRY7BccPs3W<KG$sFXnDKhi`2c0-0}QLbYaf@MOxXwMbUpz6
+zs`Ufpuj;z>7qvbBevfmRxtz4v1^ELL#<(WU+E~Rf$XAe`vCzPAKAgdoc4ctow`_IW
+z^f^W6Pvj#0L}$~Vh}rgR!nS84w!KW9F3!P^tG#U>Ug&I9#r3VZh;4@_#<u62ZRefQ
+zwa$cX&(fZtYp{ZCAGLPa`_;`p(CI1fn|+|IOR~2zg#KY`?@Su-1Xt~5f^FxW>Eq2i
+z%8gq5Z)D$%{VCddKX<3IKk(Q4a;86n$D%X2)^FN3c}+h^eX+ce^~APm!EZczo9n+L
+z`PF9)l)=@*_wxj0TVLomxaV5Y@;USyhBc2udD4Ynz3lu3jggXm19@$~E!o)iJ%DZx
+z($B>F2A3w<o(4C=ckGdo=P+XrY?63CL7qvQC7V``*tAYtulx#c8{}6QdFCw40sIHe
+z1IllxjapjG*o^*XKx2qbhX?b0-hVLok#6{qbv{WMp9Ea3Pcj>QvGYK7%)Wm7ujHEm
+zUwrWE30falJci(zwnq88d0+b-gU3lz5BHQg*%kz|+lU*$Kl{Z$j>LG?MlHS04xIPT
+zR!=P5mS*Xvv+<qIPf?#*1io~?)3-hA*GNbF*h~JX@V0Hh$p;vw9cC@8TalgZTiko!
+zCR|z7VeE#>AKESVZ1Ck?^`zP@+Kb-Ba2;*-O`W_`TTx7miG{-lTcQ3Q9rQ73iUaUt
+zDB1dVb3H!IPRQ0=ygfMe_FciLi(CVNUE`M?%kB^hKj+HrU8ms72K?;@2VFdZe~(jb
+z-rt*i-)hUV7s0$QCEnlL7K{Bmq`Jgk(F;x{?k^4B*jmN#%#rH-##Ws4V}Hrl*fe-5
+zn<jfPP3=-PwruqvT-#vo-^KHtOpWJbd}L$#6w9Y^Fmu@DiSc~T(mst1%xVnG#e9om
+z`y|H!YZL9d2L4yAXmK!e+&Oo@i1n^We4l*p2{zKCSzDzwlWNxb<ezZ1R&7&0hHqO2
+z{;+L#ZAthQ^$T%3sQycR1#tQ`uJV19wTBCgPKR|A9bC=R=O(G6Go=ob7Nx=VZxd;-
+zeVnDi-A|yQC4~m1MQN~Q4GpXVsa-Z{h}4mrq>j#%I!s!W20KQdNQ1SVmIik}frb=c
+zh`uOJgDva*k~j^KI&zcL(V0?*NsH28{RU5iZA0{>rVa6H+K~Fzh|fj4yPG~=W6N+3
+zr}M|~xmb%ED1YGOAaf~0%%xPA5BZK;htN9QK>1dD==qEZgO`{7obwsLf&TsElACRx
+z<$ar4nK?OhcyNZx2mZzmxb*L}*>u_Q*xDe^W_$&m#+HoQ@ztnX=c^7+GkuEI@|x>-
+z*4HzAe%8+Sn|tJ;Iu&D3BOP9i*BG}grQKZt-mzk4q(Is+#%;Z%)#)>8^ckT&8@4!T
+z?W#&SJKr7|Q<7$Iq<rW%fUijd&oB*{2oKpx$!ZbzVIA<bR<V5$@oIDAKN%ZWc6QUf
+z>)>6Ix2roW55;Ts{Z|z?_>b5Ai+ld@%zshOO*iurZEyYd%Zoal3`mn+FR^yuSgmNs
+z>SJI3_WUIs!N*L!6(=X&-6K4a;iUzxJhG<zNmu^CZ+h95n>=^2oGtzv8Mt>bnO5xB
+zJ(Ou#JZ)zUcP=vZF}l`ov@*3my_Km=w=#8p&}dYqEmo$(UZ!)9>6|9NolMo9Bp=N)
+z7`c)^oNFe{$}l3=ic2d;(uUm_0~(EPjoLM$G}#_UuCkNjpJXLF-sE4CzKQ&^?_&I8
+zJS+Pe@-N%!_;)+}^J8=C!&&}i&3vcjpG~*?vvWALVr!&LWG(-4t*%YXgMafT=O1Ma
+z|HvQmk2J$S(wc3+rDY>&!&a8HvX^7aq-~=o!oSi4{x#{F$Uplo#=lB}e`U|VJK>+^
+z*#qJZZ2R-~S~s=)v+0(9Zk}y4%D-t&|2+Q`!*16;%^b!A{d4>qj_?n7R{tWrs<^ar
+zByHIF>18L!(d?xBqe0HmT%+lOU7w;D*2(%Cjk}WhZU5kW?_4}yL9xlY)He{LI$L{2
+zCc97bDJR4>l;3A#F<;4?DiEvHLwr?{c%TP}-D<;+ENxGXv&4r?*$cw_xnHx(?^L;H
+zoTYq4Gk4;AMy;(7V>zGr%Gq4=GG;80pQ&H#yX0rCHhWRzSCk$GpM+1*yEhTrxVOv1
+zR?25A?6a|uF<AS7Ay@}eU>!`rI%r|3UoIU=iPIErhaJ2pQ{Wv*z&jGbZ72n|qYhR*
+z1=dpuSj2{T-&HY>*5`}tR}pR}9K6#h@XjRQ5pyPZhHqz6a69K<J(mLO`2?)zBe<RS
+ze6ukd@<)wKFF1I_<V}z%F?!MUsNNSNxLt1I*7FiEd{>E2eT6u=S52OJ{*~3I6qjgZ
+zd@ThwagH(AEvuV+Y|S`6egOaBE_^fg%ixn$@Wa02`l=Fq&CklPpM`iWe6yL0t-UT$
+zZ*_+C%SzzYJ8N}Adh<=^dzHY^r+x1xTW0r8VjVYwJNfhAFFnoo1dYNr#gS@l+{`aN
+z(M!x=VVmOKsQYqTfA4|}dnz*F-VOSdaG#6ju}Xc!mAbX5U6d(Zwy<}(-_i>%7L@0{
+z4K5ax*umb7#DdZedufN>uIAxy0a|*9#Vc-fIC5Wb_oZv#P923eyP9PjzM@C`Ds7^U
+zNdH&b4lShpfV3#D7Tsm}B0k+q-xl?;de<RK{HsfgT%L8rWLn#FO#8fyU$w~kRfgBZ
+z6N>+ZJ8b?ak9(0-z8gNTfzR|;gV+oQ>%m1y*{p%SZcBF`zr8${&J!nGWX}=)YYpF+
+zzS_hIPmseZ<lyEKcTuKv*2%&BmWcI~ZBtxm-wG#(6V$Piy+-)|iere$0UhdDfgDyk
+zIdETa_oe5+lR6Y{9F_s!0{BMd@LTX)^ozgpi>5^Hap)awfnNMO{KiS?T^=-Eck#@-
+zC{r48^t#{Dla5}V!x-el(7R0ZvVRNP5aKSq6TM5JcbTJ?dmm?8szWbz6pmh>-d}O_
+zmfi`yhoCnHz07}TO?Xmz7b9Q4Pm408eU4uDTYA{h%X8lXC*M8L+aY@ALT}U8Gwn?D
+zE`Z(+M=$pUcV9XHz0^_Ie|>syfnLen>#T2U+B1WGn(>ZL(>_#xFMmTZw`ucy>U;7%
+z(AUQ`Kd}AOe1{{ydF;38yIdM=>5$s@e`c;PKb!aST$y?B6@S3w<zBx&?<Mkjyv?4g
+zS+-1R7In@J8m~m(FDGrLdq2~@e<}KYF=?&teXD){BJaK5G$o%XJJ0$=o3p11^-QDZ
+zaE5)FnZ^T0GL5Z6nZ~xG^pT?TRrU_)_l;B^3I8U=N20%R`(;nsIX0~=c|S?9$oNR|
+zljvKL^K1DxRZsi)Bdb~(k92b_;OgMIhX2&U?;HHS$@L1?t6Z14p5uDn`BrBmzSUX!
+zX4y#jLoLvg^sTUmF<VJLANm~lXvsO6yx?IQ4Lt0~1bEn$7`%BAc<9gsA4c%7bp~EX
+z3cSS$c#9+OmU{dmeuv;KbMTg@z*~`kw;}>>rN=J;Z<T}BodR!70^XVkytN)b8wX?j
+zBH_2r!P}4mZ({=9#t6Jk9=`;<%?@6Vg%^$6?cElK*SBr8*++B_aYDU)nZ_qr8?52~
+z#L8?>l-V9Bv(uHqUy7C4lPI$%Qs!Y_5B^kSPPlh(yiD)j2(9}(t#<qv@@~JQ^*{>m
+z4kq9ojKDkOWntqSdk(Lrt*@r7ucoc9rmf@O)J^_+esk_r>A0)sL`prU6ZM>q)N{t;
+zO)P%-cKplR@h|7$U(Un7oICzqZ0k|lzWT)yx{yC7KNFjXpIQHm^<zq^f3EX0!L#?=
+zYUAgup5xwwvrqe`TWj3?CVu7xYzO)C&>{F&<aa=$_S1|pKUbif_SN*hkzrqt?ITQ{
+z%h;<IT%MQcOJ5|<E980A=IQ0Ve5=wKV0YZo-}@52>D6@KboW)k!9RV4z1{!7uCeaE
+z>Tr7zJMn_G34Q#^=Pw-s=Gj^OeJ|jXzBmcY=N-)R*y3MxFrNpe@S%KZpQU&AIhXG_
+z_E!74&ykP!rG2xse*ZXEKYO^(NBy|n>nzOtdElK18ifn!!r7pae-1jIw>&7JACl3r
+zY0lR?3oU0XEj|1ec{cm9(IxR-@3i+y_oW`-f<s|5Fcj~gJuU|<?uGr4v=geIe8-z<
+z;#UDa8JJEE2Ig64I?W!b7JPvSE<cgF-at;&H5QpqExl^fMoBA0bTsozmOs)@Y-ZfQ
+zKY<;>zyIDwm*+&pzdsIq=1to+I{*F%dV3r{2>*WdFFKy5>GqIh?sWTTz_|psF{f{1
+zSb8_-PUY*!^QnL~#{Lz2d3+J$6R*D2!VKHZQRF#f`P|2EFVCe-$YZFzzi(bkqj!Ew
+z>R4>|lTPQ3pznX*>E@G8-=6|z-NEG7oJX)0m_5Lp1<cu#z&zw&9!B5)CkOKoFoh50
+zOAkAJKj88mMBjbg2gt|!Qb+sb`o7BPduum(34dmG<8z|#*U)$T3!`62ecul)`z$Rz
+z{1$nR={sriTSI*ZhnT*1Tigq)nz~)uKpHd^)-}__uW;W#a**#I)%Q=KZ>q=RV)Xsp
+zuFL5=`<>@Vhor|EM@>m*RzlOzt^Iu~knhS#<omFb+g{|h+{yRh>*&l<VD<oW88DYm
+z0&}N>xrg!D&pVhqfhl|_U)t$(rqAWuj=ugqm#>d}yf1a!I;qaQ?(obnMrV4^nWgB=
+zHgpExw197#sx#Y=Q;*Xbev3TEbcQsIJ3^fShnUWESlkN>n)*>%P8u{7mNnCEq%)@(
+z_xSP6PpmGdGvB5z=}hUJ=*;}pjREGK{n;aFW6|B4oZL1ex5Z9wo35iXGo>@L`}@|R
+zGaDw+nGFu+M*5k*<6v$8Cis~7yFRBgYhAu|=&P@LE%|s~>X<#L&g}k>g_&Q2&UB+Q
+zYtflC=nUhULiZ#(vj&~%b~?jvk>{AskQUB&^nfQg#B`>`;$FDc97C68lLk$i<MQ_R
+zMmob;QSmYMPogfTGg?bfpXY6b>`>V6y=v`jY;5n+%-G)Do3Z`r^s&A6b>~+Frk&+i
+zaep}z-m5)e6A#J0|5uH#@ipXgXnsw5%=JEh8GK%H?Q{j{D>*|)d5^=_Gw1+*OYeE?
+z+j8u?^KT~gTbA4M|54@feT@Hhfb!2#ep$1;U{2W=T4rIMbL0Q~VrW?Ea9`SG=2;CL
+z+(+qsS~xhqmyQ6V!<C8hzk~F}j$Z7P?3L_R?_uy=(8PCAeOh448+un!el6v@DSwdi
+z^PA=0ku98WVS0K)8upStFNKDAHoxL<)o-f*R6p9g2OMTMahQ~b*|vOL<>`x!J?WtQ
+zcFNCcmVZZm^DGPVcb&{a8a9(YGlhnkHvex62imdPv)Xm<MsR3t;xH)<t+xDcs{A$d
+zV<zS4D|**azNK0I9rYD07Ulzv20!=ob~Z!oTekMrusJVB^C|V$i3NK$yO6n_g~T&1
+z#1~ySelf>;&ZW6@i-{9UnP2W|yiV*G>wm;a2b>?5s{z}dANO7zv9rI%I2UL#UZu?i
+z{%}X)9KGx;I~RC{_0bntA3YZ|iqEk=`aEaVoaY?93)h|dV~%g?XXQPcWldD`duy4q
+zTgTPGwU}!@*8=s;kDkxJYTJOB_fQ|d2Oa(9J6j*s*r~M7ugyi)4Fzw%gLi=6<ecEa
+z#M&Hv6?pU;c!yHfAqDTSgZE?#ydw#CM<VcsJbsZmH^DpV;MG&$J(Ym>R0Q5}k6!}b
+z2?y_V3cNE3cxNK;&U*apoLkR1d=hMx&Mw({o-<G`U>mWQMowo~m%Qxic`2oytBHE9
+zM(TOR<9!$NM)R3Bn$Nru@e`~;euuf_?`H2{-pIzHXzZPTLt|RbXkbpFZ;2htmcXs|
+zjV?209{i9?15clJ$**IAvrk*((t5$&kBt|-&z9Zw3VjduKN<rPu5Y<_yUv13U(nE*
+zM0xbMfF7$%Pak~R-le(5y4I|EdjdO72S1&6)Qhfb-q+aW9(cIT)}`@+?ss*!^(#i8
+zFw5pqyh&bV_q8#9W7pye8*Ljgz6S4lum?TsXt(p2+uPvYtpnbMIP7ShyUyO!pMMkl
+zui5-s^9<{1X_IgJL>_q;1Rs0RvkCaEz~AiPZ{i&`D+<%xLw^DKb+0u*t^et)8}A=!
+zO*9V=3zs8l$hEXHX#APR5Xi%iJ41OKxA0=}7_w<vi&I^@c-DEDg|*TT)|csLl-{!j
+zd901dV^u^R-N=K!Nb}ML_f_E4ZQ;pZ)cvlrGy3x@k;kfpJX&Tp<*_`l<!KLwU-&sa
+zOX1fV__fTvTgtm-aoEv1cXd<GQtDY|>(RM^p*;4@h|2>Xre_84R{(#dgTDg!D^uV@
+zzs@97U0S0wKK9`V@9U(&!{}P0nd3qpJDfcHm@bsZAqy`ik9{_6mwUI1=X^&%yO2EW
+z-c2Kq4&<>oB9HkIc`VR8mfg2#crzco7C4&R{nNSZh~F=vJf25puY_+Ovx1mBhS<;E
+z(;74?>}fB~bnjY$Ju?nFTIbV@OBL^}^H7wovy;NQ%64z2Zy!VK!Pl9Q753Q|=Q;SZ
+zfj=(=KJ*u$Uof?Xs`;G4o`^gSkOmK<YoT5qoFi`b-l?syKVy!@L0K-p_SvTK4DZaC
+zXlHy(^urzYj7ar$_*K`9tI|FKe})kCJl>Z137nVsQ>bG?ELgU6q}FNomsjW`6uVpJ
+zd3A<(T4b$0dmzg_eTU*R6sxRQg)Dwag_!0F=ebqf{&2-KSD0HJVBbNF^eXSQzs&EG
+ztD5=P+2gMPQ?jmd&Vp>#qqkTav+(ZhpFif#Q&xXh`-q9RK6#0Hm4AS>l0n)6_h#<C
+zjl6o-LEdW4?29;Q;O1<+_tT@=x1_z#w%@b&#HI3HF@Pp7`dMYo#oH0>-_t%Pzb4@K
+zTZDU$4Lrdx`@dA5!R0Y<@OWxpw_q6f-21x3$7-jIjSYF=;hB0BGi&#iY44@ZrZX^n
+zo?N_6tzDS+!-DDR<KEX-rES-WHfG)I$1Uq!lNZf=E?$?sVOq|{o=XNF%B(**ip+k1
+zZoEx8I?=ymMsTXy_2`Br_M9}sgX!?%yR4~{GL{!($mb>GbJ?ABOWA&ni*%-h;<YV*
+zY~AvijGh&3oPWq4o)uTw#$M>>vQ|%`<!it(@$*^s!F4*lWo=F8euOZ}l7XdL{gvN;
+z8_K-cGV*lA?!l^QzZv_?YUpyceAoCd(3g0b2|o{0I2fF%-=BpddX%Q;yN!Oey{vVN
+zT1C(8<B#3!<G`gKqMv?;GEExn`9nI-r;4AaciOYY9;C;gXwg|DnGtig$f$)km~9!k
+z%(+3MTz(Im_FZ}z*0P&`vnixSec&_n%LCajp})`zPMS~CnGMpP!7}Nc_Fm`mXn&z%
+zp^cn~gRfDh1H5$}k@k9hC%b<9VwN@IY>T09279X7!L=P+b#Ax%6~(z<CC}<_2LDa_
+zFFu)BIR5ExE)-0oGlKom7CSen`b^w-S-45A_Pm@eZV%8v4%*0{7PF$fDx)^Bko@8J
+zyZlq=x54YJZ%pHy_>9iPHU9q?V|<+ldyzBYFEXZo{Wgsmb>7@Uvj<~{F~81l8{}Cu
+zY0P?=@%<?0pZ<WePcLz9qS9aI{L{C-@yXiTIXBiH4n|%BuHR301=)9ShQnp*>wLep
+zq2>%^;IQw`&JRR*VD{flv-y(ytkt&t{yeo+#TloKmnYbeoEtB%YdNJj#UA|h;%s7P
+z<`FxCZ@&%Sp8ovMJ2=1fq}`9E*kbKR)4sGw%nWwGo;7ddi_IAMfaX-#mxj&KIW3QD
+zVEnw1tD9?${71&o_^g)Kj2|@bbr7FH<LE>DCda*p6XP@dLu6~my-)gaU}PLEct;$(
+zp%i#W6Y!2k;MM(jF9Gi<2k&?ayb}p{CnE4pd;B8fUg3Af!8@A*?_2`jxd^=HJbnpy
+z&pUYMQ{Y`lz`GEE_kzbS61yV&UUcv-r@(tD0q>;<ysI9+1iV)qyjN4;y^(<TMg-oQ
+z9zT0doceU5FV`Hrmdr$bX-&j|FfI)Bg|VxRb+Yh!n6oT0K7D|(>DKwgn=p@BU=G#P
+zv#$G8i7}7SOU6AD^m2Kk9>zUkJu7@%%boP`cb-(7>kzg?`&Pa~8~QG7=qPqkZJ-3d
+z^Ning7N&f#nIEyXwFGXx%uSoM_T@Is%&~%>%3=HKd2sLD6HqT}?a-h&{n+`s&|tnn
+zv5#>MevHoil8<fHO`Wf|8=rnxA3nYO{XMon>f^VU=MrPMeD}=$KE|QFj6=Ph_CA^L
+z*u7o#6I-$~X#Dxlx%H~;z@)6+7Z^h*7P)wh{!}>cWuB%dV7y|_LodBay}Z}_Z%>b{
+z-@x0(n%Xi8Zx?w4OW&C&Y!1MQv8d@wIRC0$^aL+IINkARGw?Rq{5|{@c{XcR$k)Pv
+zR?>9eD|vHo<V{}ZLp@>Ua;Q^rux)PbMDx-f&oE8%_Rv{aikw_N(I=WsUGPzS)xG4b
+z?_2zg*2<~V<M<P)Yd<`vt{GY@M+fA?Pg&+yyBHHUzmbqC^L0+<8(4e%87K2~$egmG
+z)yVt>c>jDv=4&D{e-8S2U*LVu8e7K5d@W}PcRHDq$MA4fz+4A1$Bq=RBT8$#BO&u{
+z;H|Rxd-yH#9FsX|e(uD`ocBiNq=zy;3k>Si8NgnaiZ}OohG~~cgU-T>&3reK`S0QH
+zseX^6=Ih?|x}41aDRoKarFSCp)5yGd{kZzwE1b+%294jn!^wOFGN)`P^E$jg5|R0`
+zh|HgaX5Q<Z?Ve>3nJ;IZ`*tUD@)(&f4ro&Wdf1%fXuCTh^QFLB>}1Ywk>{AqNh^>h
+zct+;j8<~?H%AC0jo%vlj*p#JW=RKaG%#V`>omvm`X*ZJjQpr4mW9cVR*M8g1P3-wT
+zaNO(o7wLD}<nPfJw1Q7;E`~JP_8ff|B+ZY{F92RgVCB()e&Ev?*>JC4?1+JD)~8+F
+zrJdk2-<65rP?}Hr0=Hg!4Y+=tZyR=IUJ&xM^iKNIc^2jctsVOMH;^_vrT*DA@4r#r
+z=c)e%p3hVFTCQ1<`Y-eDDsp~t3UZ!hVV;QAzml|>DfQ2^d5<aY5$dS(JVf2gxmqLj
+zALrdv^{myxJPge1&55<SG2Pfg`+Y3QPTvzzTj8FupOq)E43AIgTOyG$OmhD1f0VlP
+z?F;;?e&0_-zY#WZ%r)1pQMP7J74|ab>S4^ajWJgrW3KItxprn6U*40k-_v+FLt6{a
+z0%434J^wQHZLjN(yO?{kXJPq$of>ax&qCrG8g7q*8FRhJH#CTCe59lO<Bz<=SnMj-
+zzF8lC<T$@4xGul%<0ju>Yhz7cc^IGNGWw~p*-QK;$7cBZ?U8wgUfK@j?AYuT@4H9F
+zQiAuYgZD-Xyf+i@-i*Mz=EoKZcp3u;zt$8VeP+T(r{4+jV{B~qQAEa4!f&>NH!lSq
+zW9S&Y_>>_$#@2Rhk$~6X;4Mypw=@9{KQe^Jn8V^18A}Pj<qqD86nKoQWBB27hVU3;
+zSo{+3@TCp^)}+8&n}D}A0*~>4#V;~86Mh>Uyp1XFHYMO~ioo0K@pEId9>xsY7@PGm
+zHrvkFZ0Bm)5%3?z-`;EXG1T*|xl_ISGxl3;2lz!l?}>h|<zT$NzJrnd4~LrjAFek>
+z`#m#<Y0qm=Om+TAjn(YlfU7IrSPfizpImLmYKwdtc>A=%$KBY3e0gwJA8f{N(ARrL
+zeih?4^6T4c`UZ;T!NWYz-h0mFfd~55iO%oP9DbMwzVtrt^1z?cdF5$-tE3k``EQo_
+z{jJz<GbR{px47-b=4mfu?>Y9&o#i`hXZS8#%dGyd3<Zq`&t@8Z=eW+kzrXKDz&Bko
+z%wgDmLiS8^qj~IEse4wxpCjFMT)tm?PIT8%?AvqjpdR4+Bgdx#*7xx1Pgq!e*hLeM
+zeTa9mh27Lw&ybdh#g*(nAzB%8p2m0d@v<lIMS-t%|NI4O(|Y;Up4+|_;2Z|;A@DwG
+z>nd$tZP&~WcZK6x@zcP4l5vfLy9->DUcg@{twSffSKDzce#8TZn*MDbc#4_s;eGLt
+ztsnb1yN&g%5`F7H<eW0icWHeL-|W2Z<%bn0m#2Jb4YE84ANJEf`myIm-U<E&bj+t6
+zAWeMQ-%K-p>r=LF@j$!~?s;$({^lO}7Lc>KN5<iPi2cxaAZRSsm=S%scPjcZbW8tN
+zwxb_!pc`*;_1x0m*9V_pfzPix{pfT0u^srAZ)xhs!;|R8HR#$IGzu-mrS3sLUdlAI
+zuSNLw?SwCTfU^p^A4blX*`x9z`f)j-AA6mC>|;FXV`KMTM?Z#u(*xcY!21QKAIqG6
+z^rYy=Hs(59Z0;^_5pG6579jiC5&hU4(GTD$PEYX=nv+nOP(QH415y3h6wwdvjebxr
+zPx;b3^kWlz*cj1|#k>>zj;1b{xf^gREN`ae;h)xXRrfpAkBwG8j-ad3kJ421gZTKb
+ztU^DCk?$i$zK>Y;zLoHKaZ97L)W#YsF2M93tAIarYg0egPNE+xT-@?X7q=XVb?@tj
+zFKd7^3%b{$ACY|`u{o=CPCqs<$K=jD-o5TR`q9nakmcY#6TI0YBK~Rry;*Z#o}wQs
+z=$9PaUErepMn7I*oO;=fk7<(+EQ{y|@XWqz-ur#mp?=`A#q?uoL_fGU`awCxu9$uO
+zOX0)fh<?1mJHdaotJ#0FqBG)COGH25pO52y$NI6@>c>3wW%N6~51vZjLqB*(ea}sl
+zoe(oXx*4Y)nA$iskB@8gyTj`F5(nFiQ=bB_I(VMunjidV?O;A-7a%u{<@UqFL$pcy
+z;@&6W`Mf62f2_WEo~`3gR0r)<?N)o-!?EoJ<OGimo#@dG`}Wxu-ZO$ne~_nNQ2)@o
+z4V-61aHgIgxqp~t>-gVQ2W>EqF6o<H;duC+;ylyBdra`qQR%AA;pklf&aDxge;l1{
+zwRP;Ejw!9Ll@)iRJ!`izpP&2|k-pWeJ?D41?-6Oeta&Dn_LE9pL#$W(?*t972CTDD
+z<$uecOOCJP3r79<8sEb3{=B}$XZ`OFn)PqRcnlKjp*RoKLq68=`K}0KMRTSrxam8@
+zdZ+JaX#L#AB5+19YZ1|JXlN}$`6~L32J7&ex7V5Um+<F&KRU!(hVnekdwu^&-?cK|
+zIEkz$|9RHV>*+gC16i$W>w8e`+}pE1RDOuH>q^;v|HhnMO`6vC2T9X=#ir=&*+Jq%
+zyze8t{Wn0;=B~8n{8OD1$^PVH%iq(_=J%rB(@)#?PkGMnJ^i$CFz@xBW}o|e{pa`0
+z_Xj7;<-TX%-?Q(GK_<jwz1M%f*MGj}e-c+2n7tlveZ%&ju`}{>*^wc}5wSDx8IPEA
+z@3qcl_TtUAV-*u`xqvZ)UCYs#j{4pw=W;WaP#WjiGcJ<<Z^kk3UU9f)oW!_8<0O6O
+zDtc~_&KQY}l^8dKV<pBLcJ0HCjWiCi<DV~@7<A3I4@AaC{(C$6K5muo+1l~XXJg|Z
+z;Z|cDRb||xZ{7~^z1!&8gZ7F<@u@RrVa~t*Zq9g;|Ekzn|J`rF8l=4Dll(V<{kK7)
+z<1+v4U9H_}Jf?DHY{d9W_rhfWTm-8*R??X3i{|~a#Fa+Bzxz`iBmETDjnl?T@9FA$
+zx;o|Y(tEo4XKjB!=%4Y||LD+r{px%DDt2PhJqSPCai-??<Gszd-v)AboMb+K1A8j;
+zdtP?Cik+`w+qI8J-yf}(=kv>j&97qn2b7m@bX{`ixXJz-+lD`(Z_YD^zu}_WduHb~
+z^?l5_*yFak&hirszqd{MU}QV5@Gfe9y*@X60&FnnEZTbPH-m?qO&w&uaR8gDeKPv4
+z_syK=R?U6kWZR4s9GRolH^wL6Xncp;EROgpqBVviKF1Al#0Ls-#0S#1rH6nkob^rS
+z0sIe-<7L)u4UX?m!I8OY?UR~-BWYFUV=W&QQ^0pm9^GR6E6YdiJG>De?YHbKAML!Y
+z=C}=xWqrGNLx|%kkK?VuZxmW>+<}*MwP^Rm=~sJ?lDKOB+})(t=$rK&7~x#&)OSYO
+zp&^cUEvLNNLwSANYZVL2^H}>5&3>nHb040*`yg7Xz%+ZJI&B`$_kZGPnwvrs<3{c6
+zvU?d*XyU!0snhPYGc*l5nrJ6cS=2_SNK?+j3Tfim&_o>u|E#{p>}Ud}Nuy5X@ig7%
+zX}S}d+_?kyy8WOnv`zC(F?f=14OVDvE|g)#(aUeD3`sZi4oB!M>U$!RVS?VW@=ig9
+zqX~L>HuMfVdMgon%Py^G^LTo1gI?)dHLJa{zs6oVbSv9p>L2sp4(8eNQNQiucS5)P
+zXZ0udP<F<x!KvOJemN87mwBF^2|kYAJkHh6n&#t0eu=?-{2af2U*?jV9^LQ*>KcQ$
+z|B2tr?)!J@Z?%S@J%FlHeb80vGwu6>?@%UXi?7{Vn4*KcH!`W%Z&Mi^%(Xa~H1`af
+z{e?x#lN+|HVGAqNL7oloD$RX`p$-Dm=wQy~@iKV|daX>b9ob*EG8wh?hce;Wz|Gq4
+z5~j)IO7UHmiK)xV<bU=uS@aHNQndKm?>eW*g!e`!W&6!D+t=y4Cu%1jjQ0yU<()!1
+zsaRN{On5fDqYlIWVz${Y<Xl>(&EsYA=};yMkjZ8%lVMwbC=;Fy+)+zonoN4PzRNN(
+zby=C*4UXEs?%UoH+Lrid_NM=hXly^pyC<sLv!6M2KlPGrQ`=AdDcX5*PxSy}a6iue
+z;f}Lro;f<srX8^tHB-Mt4E7j%QpaxM9CO)R_wCVWtnm%UvE`dbF8*zB>e3^`Bb0;2
+z=x?zuP9H<eS^wC#BKQBy?0G%;Y?ghm=#QO~VXYc_|17pM_N|y~bMNNce-kv`ewpjP
+zaQ!9Mf8hF$T>pk^nCoA2{Snt6aQ#cJ3fI5j`Zjwv@aYDrPjfsvpFnLHydEsLz2mPv
+zLJazEadtzwtMMA;B$JDjy+qlu^0fZ3ufwO`;rXBIo%IJV?r`}YvcH#huuu0P8&7lb
+z>s_%J!QY@yzw)<TVH{g(z2I)@1^-LnKh`<Df9yf({XL$KMd~fOd|!6;7OD5kuHFaZ
+z_1^F5Eg5=eq|*!kOug{%5<DCmrrs^o`>%L@Hd62BUA`~5dOuISUvl+siP!s4SMOuj
+ztM@M*y#GKw|B-r&t^H&7Q}3Vh{AZDRf5qjy&(-@Y)O(++_x^ajx4U|)*Q@t$9K4sQ
+z=f6;I_NM-^Pf_nE&;Kb>?<ZWooU8W})SGklekxus3^elnzN`0=``*hH^lAxdI&Zj&
+zuk2%GtN72pj~XM-*xv>X#TJw@!PAPx)cqLuw{k!Bw_Tj|qBAjOygYXMx96jar?huQ
+z`NqD^H%c?X$Cyh{{N@I|`|re$s7~FFbN?n61DH9fK2z5EOi}%Rnl>kW@cW(gU9Pc@
+z(T1{$nb5v}r~g0a`129RpPz$2A94KoSe!q?SH9UFaH$=PO~xnYMm5J-(>Mx0LuW2T
+z`J}l~%`1j{;@<PA${3`^bI7O9NBH#l1fO^p@`-!Tr^nt2pBUE}J~8$iWNfH!2#<Y8
+zeT_el#PMmN<5Q>O(?a;v>G<@abUtl$d}`y&4DFSis81Td{u=aZ46FMu#rdRhF1};P
+zC+<T&F&|swIpovFB7FK-f=|2)`NX~F)2esEC&ms|pKQ#8;&R4rmp<8f_E4X0aeTVX
+z@rm;eMmgs|^W7J3Pv_HJ;E`rujsD*bUBo-9?y=juPW{zC1D;@gOE5Ea&42f8e{{pr
+zOwiD|CEgGAc2s__&M8rO`M=WNx63#8Pj$}v`xzT=r2S36!1s>FW=?hfFU{^wSS!xm
+zY4-i}5D!`)<}kl(+9~x1_-AI`qr}<dipjF`9`X4OGbbYbMUNGqrL_#(&J?rHMVl|3
+zCf4)>*Hc_|uA?pRvaMbu-nDd?>k!vLt^-{AxgO@)!?lxZJ69jqX0A<K8@V=ct>fa1
+z-_k0sm0T;hmUAf{m-C`IF9@5>SwUs|e&%Ba-Po@*ySuS_LANO*-O0Dw7)z~J6nLkz
+zHS)w^%a766K=If!77?dM+_uIIis6pV#q?fX-MEMO#ih(IN+*7SHIZ+(1pOC@FUu1<
+zz6-pxHlk;p%b({=bm@fFJqpB?Yg}yVA?{pjL8cDk&u=s?DYdkiJu4dD<*#K7?Si{Y
+zvF5f8GhXvCZl!K>_VyFIiTi#1A6nhYbH;Z5e1@~oC_}t>9=;XepWyVIC${^-YP%10
+zmc?1$FVMFO^uF{4ag5h^ezh5M+w&%Ijh9J(h4dF!H?}Z7Y@3e$LU-XM(m4lS{&$|Z
+z^#3Evx&F&Oc}nw86J&#ojclH?@#`_!u<s$14f`LAY}iv__{RQ<m~5W9j%?Vgu?szl
+z$%g$Lp=?e>WOF(q8}^FaP&Vi6{vRWov&aTrHL^JeUu+$5+1N9#pV<9;rt!J2IN9h-
+z>nAhBej}SB$Ob+4XIl5LKc{#kAsf>4{S70V)A0H%&nF_XIfHDDl75`@p@eMeq(8qp
+zl+6k+8|L38$c8p)WOFD*HhmG<Y<IHR<7BflA)7tdk<G)%hISv5&7p{F_C{p0FCv@$
+zQ;^NUh-?lZ8~PR_n}hJh))ALY%WY;}b@$;+<C!f^Ha*CuC&M|C$YvX|p<gP{KM77x
+z53<>okPT@C(u{2O!RrG&?~TZ2KeE|Q`opC6C1kUc^utZr{3-Ldrrj{_I6*cCooqIx
+z$Yyy&HY=QLRyo<MOvq-{b!5|xZ0M(Bve^`o&6<d8)<$HrZVIy57?I5eWP>d*ve^h<
+zY#njgTz0bAoN3Ix-^pe#vRRtp+zMo~4B6~KHrNv*o2AHRSwc3X>C9>)o3-$I1J7$B
+zvRQ|0R*>FJ`tpQqR+7HCDVvg)4fCfHWb>4hO-G7s-n8RpV+XEr)`jd%tCLMjLN=|}
+zk<CnGQ%}gIBO;qw5!uX+$Y$OYWV0Y5oB7D*sFTeC_+slw$YzdhH;Xfk-D{j|jv$*?
+z1Nt9i^G3ja17vg9$>vq|ioDSkw>P8}NHemT4X@`@*Q|(a<{=yQf|#>R-t3Con-=mf
+zZptR(Wy3u1CHGCEUhMr?c1FE)6(3Ii4sjP6JJrkCk+qBP?_Oc=A>$dvwO5(@Z(~d)
+zKhAs`@+vYq4zDxBZ;(FSrR$l!<4@x_@{L4d@{e~n?opZ>f0drkgyXN$^PGvx_{*I)
+zxk2x|zpQ)jFX!=B@|QWcmGNoXIPBv4>^MxmO_g|l(?1`zez0t3&kOLJce0z>PigdP
+zh%u}DnHLlLl!w@Nn($|KT?iWTX`aTPi?#csRyO(Pn4b~svkrFM!G1mgoBb+d)G7G)
+z;4k$)MLC@zea`Q%*7%S!F0`-ZEV4hx`5MnTpXfv!Rv-Ic<ZmekC4Zdq@-^_Y<ZB3q
+z_63S|ow=&#o)hTFY4~s^FnW?df$p7lx_27gJCo2o(sX``(LHd<gNtB#f2N1MD&|a;
+z3#7AuCF<+sU+gmY_;IU|-wT;W9{HKRn|bdEI{2j1L5*7(ht`WNRtJx0|118r8PjfT
+z>fjOd?@7k?%nihJko1@i@~pXom<}$B=-{%14)QM4LGF_}xO^%)$aui$;HJRv&*<Pm
+zc<*&^ztfYAPEQWSWvesyC+Hx1r;H9V&WP#YCMzSI4P|t2kAuD0!QPjEy*Z(SJx&K7
+z_IvW}evw}CmG&Uphta{kP6zwqu=;u;I=C%G2PtQCaGTS?KJ;iieAsDqQ2S`KpT+3s
+zc64xOLI+7JkY;ocT=L*j0A{Fz`@nHO=?6$Zn9#vP={oqV`YHL{%=1ss!F9eLv};H8
+zT*m6)2K9ql>(+e1mzp}b0Ucb24l?f&(?QZ>I>@u;WnwybxH)f7I&9|+!hVo<p$>AN
+z)Iki(6#7B!y=QzkE24wl@ZRg-N~b3?ot~_T%eHrBiVm*w{UB?!(J|dDr-RF#4lZ@D
+zXFJ#{60m0{ba0;2!DUVdSznjTd&yT?ifosmgUg)`E{MbGn-|f+`6)U`IirK~oenNQ
+zUpnB!VyA=5^$aqXVsx+r9bBByLDCAO865<dJh<r0>`(_+fa6NiSCQVG(7`q7I=BG&
+zEu3Usqi0rd%G5Qh>r~qLu%+Mp(bqHbFW?hgc6%@{r|-d(&S<{oM!)ZUgCjntHpV>F
+zWZ%d5AB9(Gb7`@dp>o@Zz5zIpyG`?Ek+>oGm0D-iT&v=QG&enQ&djefX}&7s;)gWX
+zZ_m(haYXocvU8eOYh#=sA5Qx?Z!{;Nxwvq>w5;_-#o&B~`LWN8x6P$}<2Nb3MSj#Z
+zY<x9$|4Gfwd@qWJu~in2YNz5XzyVwo&!RY%CO%VG!_6h)Re+&0nT3~PUKVj*>kQ1<
+zz)k$t8~iSK{FtBMyEUJcPj2}n+wJhHMDQDp<EOZrDXlXPCvXH#h$HU|j+Ho$)w1ff
+zc>cb}ld*aXPkfjV&rTa>V)<y}KRh36*(t`2V5i0ZP`*WbzP070Vp7D*OpKR`<MDXz
+z^LR3Djp6D1IQ7TXN(9f*1fJz7;yIka6F5zNIy@^0Jb~@;{DQ}mG2Hjud~OYW(HO4Y
+z*)no3JTT)ptzWQCp)`%-j%8a$`go`BuvhU_<X_+G#&SC2Svb_lt8=C0YkS{C=gj%{
+zN_&iP-R&-I26?rg_@2nvuJ#cVD{@kPzs7@Ao`HR`6dB|BJPo(b=AU2ZS$@vl(3m#H
+z3#QvKp4D^hS9W?{R@{hdhr>2jCDfnd6k}W}6JuOLx$w^DPuZT+?c1Wx)%J4n<DCC0
+zn$>SGzL_AOY_=&M`I7jNb!2PgGwS5S8orIE+|-m0?~HsXZ{&lo5|fX6ACnJhMn3G-
+zj>+dX6F1V756=_i<MM>^anD{pC!z6%@-hCKlTXpcj+pjcv2iP*d~#EacPUSdcM0Xg
+zJ0qWBHr~F0os^H(CyjjY{U^w0G$J439IEACAFtEj8TkxnUHj3vK<|F7DIeY$`B2`r
+zA7bCsCTJ_B{kZor`H*JY&zIuz`J04%c%C31mnW2ud-n2KKNb04hr{-ho7QYU<!LcH
+zR_mNLH9JwX<--0KIH7!aXXKNc7MD+_>a}*lx1YPgeKNne`a9E_@jl#(FRA|Vqd&TT
+zEIXQv_et}4I5$2#oBra$fVDywr^DK-zt=hR_&|sBEjqqQcXEJBeRCUeGlPMTmnBZ-
+z=AiK#)O%%NGrlGHzSq4knesCxlrOmVk4^Iai|&1OlJ}o+@4xTfU&>hg(%SieJKIP$
+zQMh+gb|AZDT=$=FaK?TFI6ohOqi=(XAL07_JHSU{t19@6fzNf<w{MB8Z{N~&>bvF5
+z<7R!^teM;O?V0<hzP^2tb0(wT6nIZ>+Sq^Gj4%HGlit+7_3r9TY`@#^Z6;QsaEAHR
+z{aN~+<~XZ#j<ZQM&NA~<ny*r<g62~-f2#48=J7S3uh<0Q60Wh1@g~<BT(5Gy!gZDF
+zC9ca{FLE(&Te`q?p6hw8=X7SGjR$N~T!D+#DxFzv@_4&q<~*OuFo(R_&buFVYi<YK
+zy3X<Vx{g23aV>M>YndDGJDh2lx$QdZE?P6EZp}HB4zYfu_4KD!n>7o+m!$U~^&et=
+zq|Ui)ywlpT+H>&)d;(`P*FTh~lXb-_SvQA%#MWbAKj~l`v1>;?L%==?Okk_tEt+fh
+z>-xt@KjGF{PG=gAYVCM`?vz>AkMagy#(1+Y!kdR3Z+aY_`xAKfSUf}C^f}(_b-Y1F
+zhBw<BZ}ug4L;2D+aNi4EyvuKQyg2}Gkgeg(o<yB}5#H>K@MgP%vD5Kp53nBwCa?>@
+zj`3zc=?9v;`MBqe*43lDxtie3#t3iLIo_;rcy3DIxgx=vRgO0s9B<HN!<&_kHyabY
+zp}fxX*LjRRywmpxjNWX9H<w+VYZG;@ituJlgg4y|#u~?)wZL8nOkfv)9plX=(l<AG
+z^QzY8q&HgEj`HS>1aFo`c+=r{Gt=R@EP?0D1aD?L-Yj;!dDZb|mgCLR1aByB&fi-M
+zUA)WBbG%s&Z(ebAE=bflJHng!5#G#mFy=enEC6-~FoCUaF2s1VjP&JA-W>D1(YkVk
+zH|oP;ZR#5Hx@TN}^M;#)e$mZAw<Pd<(asx(ZR(}K_BU_ZIpq8`#~bELO`mYBE8gEw
+zzQi1A;Z5eId6&N$SiNb5H*Y%LyqcJ+ekn3n{fe!}z`p8WyyE7lUj_CXzyx*y*fHL;
+zz?;@4ZyxZxVNM`(hxOa|wxwOyz2Mi>6!-aA<^$Zi?h9H|)0~{r&G+K$y6y|CXI#*l
+z8sllkFjc><OS&J^m~~yAtL62vu?uIhHrI8J+BG%#ak5W(7p`Y;@7FVy$aXO=r*Dm!
+zSfS^GM%C@n(OH99SG^M$$-O!E^uN1%4)pzo{OL^NR(P4}^R~J5W%w!^8q>Km5uH2X
+zbnb}Lxw8rRA4%xkQKxgKtuAOD)AUtCPUp@fbdK^mYrb$Aec_$X-Zg#IImON13J<Z9
+z#}joPjp*D{5uK|$7*9E!I}Yp<;sfx39n-n9q@U}Of8Q@Y{cGlEtn6&OfRWvk5!pRS
+z{=@0A`|U&Tvg{5E=S*V=oJ{}8+{=V^aL}*oY3})p<MpgtTRx<9J<W$H-j{P0e0;+p
+z+QC7s>*+f_k#<0OtR3)N<t&Kk97}0lq#evlv;*FS?ST7OJ77+<${Brzm-{2U+z);G
+z(s|kYJMS_t_gP+Q&)^N)0e)qy9qfs;gYB*zY;^75;e<|ZOtgc|t{v=j?Lc#o^7S^k
+zcCaVW4k%yRgr4q1hk2LpaqVEQ;-cr-cF>oob91B}Y>Tvm9tUHaYX^P6-VRJ)>-@}E
+zJ9wD%z0G#OzCha!G_T5>s*&A>i0n3ye_gul{^W^wS$6BFi*|64{?fDq=C~%bgEihB
+z#OJsA*2*3<=eELju$FePM)ttYIfnLt^jJIKxyrdDv39UOvcA3Fu5X9-fOla#;6Bz4
+zGzZEz77Z^~MR>Ui`c|g%vi7_0GA~zJUj8re@`mkzu~w`dEQ_>*#jYL9a_wMwLMLY>
+z+QB^64wia*z+9r*!EDzKmL=K&<x8{C)1~Mz@AC6qJ6IumFyFR=jzpdFBJE&7q#ew6
+zFc!FW&;jhlzy!9|-(&4yIq55!?H~uAtUa)C6GnD3BeI)G{?>Ha&G_f<vg}%^i*|6`
+zHTG7w#@?E~#{PY9TEe~t=D18uA8Q$@-(dB79W)pAc8+l*>*o2>s~dg}@wNNxp276F
+zplKsN+;I!%EwpnM)3pAJA7bwx`#Svm;n-b~d-lL^7L(oc$K36+w8yu9iM@I39eSI6
+zL~nnXi@h^%cS`PdY%Y1wjvrj@=FZr|(HP^s*Hy*eYhQ?Pe-rs#`A~EIF;)h+X=VP}
+zl_{BeX2k0OpR_XSn^ezZX=TiQD7$75#ZBL8SD9*B8MAk4Vj1>jn=;>bWxnUmC%6K=
+zOGvZlSbSmp3VYPXa$M|98*_fA;S>9{#&YOC{(#vh#{C%gw*q(UW3(TheLN#P4gKD+
+z&cyy7-uZq``Fub3ZQ!K!D_t4uXBr%kZyFE%T)Fxt@nvi>8r>RGEwZK*rBUZ>=sUKa
+zM%{ZF<s;R24ryeLTlE@VFfY3#x@V4eA&uO78n;b>M#TbLkH*hB8r$4Hu8DHAb}VYU
+zVl<k0uwQS|$lmjiM)rKwcn)d2D?;O42^x79(#XB1QTFUca#YO2^=Q2A9CdOJmiE4>
+z-QE@1gLP!;bB$Wxc<USMYd_p^AK$*6Ht9Jq6ZS_9-)z5&L_A~xU#<sVuXr$M=$jc^
+zw+DRBMg5c6i+u9gvd)K7AEiCXIz!ui3kg44-=7sP^7v+tyutNmQ^&V%?*b0-R|oYi
+z4%!}ZnexA`D25fks~6wy9?sV8#TUM35wU5}Z^P_Q*tq@H#@$0~Z0`ZqCD=n<13%X8
+zPL2Uj`?v<du>y|Y0mtux<5Aj)`ohuyTc`OZG;Ks@*}=ER7X|TnpFDULz*A)elW#Vh
+zDm{tqKZ4zZR(&T_eN7vE@HhSUERSHDp0s5YyISJ8uVuRZUd2$r9HaPQZH~dEdwPFq
+zTfqFHNw@WEqugoxoZqNl+yCi%nktjuY=27|vFDrM<!122$2H$&fHr%6MVHM>x+w$9
+z!3yiyl>gt*kzQ!I*Yzvc#r-n4uM5m~Zxs7Xd1EgHr_|BfU)lif=Pf>lM;pNXf_=_+
+z>(}AF#-**bzol+)Ujy!I!F}B%xRY*h2d2lp&*5I03hrlH?e{BQfbTDwdYibn+|*xM
+z1@5m{d<^cZ!2MPGoL{D2hx>Auw!;3FmVx_naK}FizlV|J`^qkhJ1{-&zvOU#Yznw5
+zKEH3V#;%&nH~Wo4+^f0lNNK7302^0pa9@gl&REv)Ykmax1rGNPhx>eRUjXj-euc%8
+z@SSu62bdoB_kp|l79KinWWNtRhvsOkZkxW{FfV9)oV>gHx*7xMTcM+^zcAC`Fq8bu
+z9TsLI59SI>vm8#d=o4mht^jRp8guTY%Qy8?hoLuv46sX&cL%oKxzp`Fi{5MW7cIbH
+zuB_CGe!ju|o5+*;4DKz|)oRQ1a9`wJK1Y7LP0L5#3r|x9+C-!7_5Fqv`p%0!^|ASR
+z>9Lja52NQtSYNM;`S-TEz7bB$z%wdO9icq6|5dozG+X~v_r7wj1MAc+wYSRb#}s_{
+zG<LJbB5j;axp4gZ!T2AkzJc<Vaed#M{Kh7X-9#VAdge^{+x^YoemV2Kd%oqrIXI29
+zQTH8n<qI;>wT0vVh1i`aZOlbA+TKTfs+WGd?K54cz8^gHG1Yewnxbc8=!{<R^$O|I
+zSDmSWj}glggDsfTx*9WrYv<eE|H(tL;TPSSy2XjT!qY8GQy=i7^~GR;r$58P@MyZu
+z0kQj*C!8HjY@0tHP4q>}b%<8>&bGaeF?M@bqpjVY1(FeuK5=0JtQ_Bk2gVZO2gMul
+zsT$#r#uNHh{1tE?gD-8sS^B}QL!VyF-jU4G13_lSw|t(TN_=U8_M~j@%~;u90$<73
+z&?Ol_dzAO0B@j=LcQidJlb?9Ih|uysQeA1|%n80+u8nj3+E3~nfedkT)lr?P#V`7p
+z)o*7oGR^$9j7-;Wwq>N1-|(!N@&_1)rucXGNzXD5rthT4Hdb>sF3)`1(%2qrFLe&q
+zbmD$2Tz*Zx{F-|8y#8bjoD?%8->(jyUEJ3znUPO}hkQWA&6)c}U5)y1VDBUTV7+MH
+zx6_Zd)0YP=pSVyX?Zd#Skza9ISF=HXcjo4owa23yxSHRH`jqv~6d0tX!pKenW7Ogn
+z!-KRWjJ4o#tP+?Qvn}|lb$rzrF69(Bq%E~PqCc4Va=mEt7+*K5anT2?uZyhot(Xda
+z?sxEWzl)!H)Qr1=Cv-la;<Uu)fzixJ4WCteA?PzF_`8ym;<Y5F48Ll>>Z=EkmtwI8
+zwT^@Q2a*30=l2fYWY?n<XFX81WorCty{BHujvOocxKynHHP=<D!&Y}xN3{~UFGudP
+zE#{0X<;@B&^0n%hJU8jL=*}WTHlnds$&CCAzecB^TRKJmIU+syG`7ah@z{RJ$9AfJ
+zH8_+V3}Bg9HehuanD!h)f8Nu-!?xAn$Gy&nyDt4j=pXg;<Hxc0()*P1;S|$q>h6r(
+zXQTIye)1an$!F*%kD(vfl9S?`-!c7^m8{<>{f|5POH-jAe2*1<T%}!$4Cx<^&{>Jx
+zmm~LCFMmfr`K<gM{Y7`~*^fd$Wq%a<*E{+jn+pBK7Ub{gxBDAI`iYfn%0F_Sjoy3t
+zPjm90=Hx%k$^XZoAH04P`swH9MB93`>~xRzcDHFSw*9m@zo3mVL9J+GM}L*FvKe!w
+zv$@R39Q{`8d5=2F)9A8;r#W$do`~rmoWGnL5B&K})}Iy}Qy#dY%i|?HYGqr${1lzn
+zULCeP)>*aH$~4Ng(|7qZiRh1buk#M|PVG*<xj);{v{zH!zE_>L4|9E|$D?fHV{M(B
+zvr2zx^1&yAUrIiBb>8zzK5exqJlA7$<&$>TUb}B~?Tyb5n=|UBI?nJuz3Tq4#u?fF
+zZ@!ro+k2F2#jm;Z<RHGr5c0Bq9rHfmX7=WwBh1D0>+DrMyKftuZ2C2c`6_E8>C&7H
+z7?y18K7%&=j_CIaq@Oc*hyI8DhD}><zFUB={<7T{!yXk2uL-w!9k{s^xF#(Ex6_tS
+z!X3z_<Eq$>D4w#%*ztbhs58qZz#*<cvHMAyHTMvMlhr;H2ZuR{32?A)sc?uxiNPTr
+zC4@tKiiP8R$J`fB>RWNL;ri}TjWu)mgEiKC??EOy_blo+X)j9@_A&OW)UuxseLsEo
+zZcD=NQ#?SlOr5v@>N7r;{3AP;sJ(0pPJ$<MiF~UMf6KIA_S{(9@TH93^?_7hY5+Qx
+zI3H=Xn;X=5&`Q(T+`yv$(YGIl=#vag?TOD>pVX|!(g&*l2yI5u?oTphxwp3ev+g?-
+z_L~y=hTstOsDBOnCh8fWo<ZvI{j%PheyG#J{C|vH`(o(VggBSu=TKMEa4tKX@jKOT
+z$8fGhaOU3NT;34JnP=_MQ=ffZoOvI``41h=C1;C6oU`#WT2pZz_Iyskc{GAE_m<C}
+ziQ`OvK14lsjOA=V8lR~rigVfF{FuY}dwy>peT3?{p?+jr%veZ!)hF<}Q$C&dDV=Xf
+z-yz>nvAR0z)aZ`sPr#izjhzGLb@|TwC=DAN4b>zK!&9Uo=V)NeGJ%F-ga+;n@5?DP
+zkY;eAPD2AQuS)~(qckjnhJ`8nv&H|~LuRko$rg7uUX^Ef$e1-4`8)7Z>oa!W;(ER{
+zlc{Trq5k9QA53kXMn1RfceT^%#<P^yJc&PlHf@amcD98)H`U%6&h%?P3g;R$y#3Qz
+zf#E%C%G!(aY*u?xI6szHac}?LW{p{UR0eq`I<b`x7W~>Vdm_f{IgF2^BW6rw)@VtW
+z&fE{bqWf2(<+NXlJgMb=*_A6fU5S+|PhRe0uH0j3<)CS@`tEV%s%hom$7JQMyGEyV
+zLw`;p>xO^D+MHRVW3Abrlla{6smWe)f9o5csv*xw*XG_XPak>hzB$AV%&onZo8B+m
+zaOJmxQ)B3w&KcGDeV4M?`b>Df7Jug|>&W3f>)l}-0sIZW=T!FdIXXX>bvo?m+n;BB
+zp}gRv_7kXo(AmG<&dKgw{4M4zKNU1C{fgGRG{^9PP;V}^*m3`Btd);(-t3i6bv3SX
+z{@+z#UM;rtUuE6?%6&mY=ha4ee$m7La5kXMLRB3fiLbe-f4oAy_d5AaR!<%L>*bb_
+zs~^@HiS|91vqnQ5B-X;{?WGU7dOjSl$LzPF9<P^^)&sBVoz&AQUfI31F?wv9dE$~^
+zx9yDAbDyKf>+z)ZU_0yBimSBW8uK%D-MrbRF4D%S_lZmBoL?V~u8Vxs)#LSk(t7A~
+zHFtKE{-efRk-qN{qvsY^kIojAd}#mCdam0}l55$-To@R?)NCgQPE5U>TtcrdqF18(
+zt#5pe@y};#w2evIO>C@?)g0(;_>#oi`f)+U?g0*;(VxgTA?zpJ`u52Q>)VVMo<%mc
+z{b;RQbD>-b-LrE`ZohKQ)rs#qBRYSHPHBF#Ju;rCk>=<7v@fQXZ83W@<sZk!BBPm!
+zV-b^P{d}#J)X*i-wvhfo`xK)xj_q?VH}|>6@GGXwjgl6_FK73}Pr$D;1wWG(!7m%Z
+zFVUY@N1Nj%&E=Z0U6Oy5l=)K9V)&Kq83+^bE2fOOOj-oLT=QH6`TsHgbvE&<W|4CO
+zx8(S%UN&=*{pMS8Zu}LMXN~b!Ob_sdH9nFYHD_vMn2qD0?`x}%9?0E)QfFt|Z;~@6
+zo`B1o80@+oTlIIKUqg(eH8zUl68{cfjWI(L7yk|O5AdCs574&m3hlun=f~=MH~Q9{
+z&YBjESFl+cv&qk^W$hksjSrIF;HmOXeyZkV1Vc7Y<G=c-_Z8{iDW`WjM_Rs~-m7m=
+zU8++s!|@Gytbb_zNyWd_;FY&4q2G-x<v*HlyJx9C#F_J+gmbQmbCtZRcL}yB9K-S6
+z;?0>Jyzk(>#hv-@&aCy-=_iD{${Symbc?^66QW+#ukwp1AJRa+C=Gw&Xec?`IOt;D
+z)LyI)-1LbJP9ZJC_KKErgciz7poRA;7oJT*9#2obZ0FPKMNboJK%&XlO}gOuvq6kp
+zhOOT&cy|jfd1LfZCQ2Vpr;*WPN%|^oj*vdX<S*Mf$EK|87_K%Pp^q{X=;OVi4>-c3
+zMxKzqoL__T^bxlv`p9E=TXFP}PdFI*%FQ(cLmzo#^id{C-xnQy)g*mIKhN#x%e7dY
+z3gu_VNwsWq9@DRV#B`DOhQ47(A8<qZvMqLvZPe38ER^W;b(1cBY0WOAFK6+PEiv?w
+zH%1?2qV!#NOm&;Vy*Z}h8C*}+$}P<?RYmqLF{b)gQ}Y+XG1aiee=1|D*q+<$O#Fqp
+zjE&~R=N5-8&qJS~VxN;^tEu=5F&k30bI_VE^K-s!^xe_ExSE?b(axK+=6qhY)54LB
+zi^0!E;3KD08#-)tA!d6>i`meMJ-=gu4K3?@i@5(%HE9tWTD0}1`XD*!j`NW^oA|}(
+z&!*I2(jxSa+Wvh4{YDQQeDo@n{&I>BMp}&i;v_y;PUo*A=r?H*`a5mC)_x~^u&l+~
+z$bYoygT?5l-A$;&q($hjsLx25b1vI-t6xp{F&{6N;^UDPqrY<!A1|ANn@Nk%Pk-O^
+zLF4{Q726QXztZ&aV)U0&{4|pmp}%P1Opt#r0>85fKT3Zs8<$@_8}ZZ1mZwpCYWQxk
+zw!$1>=o{g~rTJ-QzaMQ}F?`APJ=wQ9%{)CmU6Lk!LvRTHjXLrBK8N4O-ZkdNweMfB
+zW3(|QiQ-x>Z<Jrs--+K>!5@2Mg5P(0EWf@J64J(exoyKuzi)_fqim1nkh~u<gb(wy
+z{4?y9a5cUk<7fFE;aVPZ?ecZ3{oKI3^!?=J++nv~sP8zM`C9U6UR-5mr<7mw*Jd7*
+zJf?hhy3wKPs9nSJX~tfY=GX4@-9`V-*ejDiGG|L&(Yf(1_I%ag@4e1WFLL{lrLzV$
+zI%n4|t$!2J%GfYQD}KDjFS2Q-{)+R5D6cfVi`rAgPgFY{OqI>KbJrp~P>hD`w4Kj&
+zaC43iozr>OZtEh=;7ZyAKA8NfOZgoPSMPwUH;UH}jo<RQlO@NG?|FXEhnYGmZY_7z
+z`DLN(6Z{x;^iwY6i7O*t%<zPF(YpN{X|?ElEnw(<t?bTFi}Hpv(IejYa)$3^$Dd+^
+zKcrb%rtrt)hd(C2<4>f1gC})G@%)#LM~@|Wgq<_>jJ8;v!Pdz~YwC>kUBmX#>3lBA
+zg*<X)YQQjc^DbJqoo@i&iYp5Y!=qt$o>`Pfq=h^xT3^ZVXxQ<n65$bPR=z1bGWk_!
+zM29NP`VF4c6~(j9@u-^QQQ57xcTTfBDq24_<Pq~!v36B-emvzu9=S61JS*vkJ(J4!
+zE7gkgRYzS}U>F`{-I-NU9+4LE$d$AGN2}{^B0S2rI{BvXh<5?9u8u}{6sh0vh`ORY
+zy1ozHDtj97p<AsFU76POp@%I`V(SvmzB3=%`_6uE+k0`F#<%|Q;wQ?@xMDk&kWKsv
+z#f1M9>q=d#$~DhU8_4mkXgB|A&r1s)SB%CD&rD+;TKgqxxy_*+9*mx;#`}-B_ueig
+z-+$P>_kD8meW!cx`=jLhcQV)gUCtxZT=xKHjQKU8rDvzs?zAR!k@@x;oh=rd-!2mi
+zGknL%LHtC;!c-WydOj<*){J-jy!Wtuo){0KeO!_KTW)@vzV2}@8y8uLj3dg;aYWQF
+zmTjIePBCc_KRq|eIHfZJKRXG0Z2koJCM^Pgc#?5IB{B{uH^%{S{8Qi;l@@`Yn*@Gm
+z6Mi*o=YpfKlXJmSjm6Qt?}YIJV~D6vZ_kBAPA0C$j~84Vjq$5p91Z@j&bcsgG>WHT
+ztf07=dm`%*T0@J%KE`}%jWL6dp&nw)umzonm0?~pR)#S{ZTJf(RYvj7b;b=_XzO*>
+zA8J|F8JR~n>x|50Yc0{*R2NT!9_U+r+OwBI{}!>2CA#i30Nf?UZ(y&T`zC1(8Z}-R
+zVjg%9A6{o`Xzi>yW^la7%Fl6rG550V`UXmTEaAr@`eu9cyl4V-=7^?yozF6Oy}D^X
+z6YB1a)XlxE+r^TE;~3_DjlA&r(WegZ^JmZ=aP^m5{TX*wbvo@Su`Ibr{oI@S(PjCd
+zG5X6kO?ZU!zm+&HUv{`WHWgf)&t}JNP7cKgF5DYjhEs5%9}s>97v3-8zJ`88`SMAJ
+zOLZ!^(8o=XOF4oI_m(fV-Z)<(xa8vV#$HB?z-7`{lHW0NKuw>GXJ|XAIn^+hWYms*
+zqCVSm|JT%PhoAQxqzw$XHsF0;@5fy?t^~RJ{Z9AtJxBQ@X=gevfzM+%1r6;FZzE1s
+z_q5YF$vsbL{=kI&DcS7E0R51@3F>20G=Dl5xMtspu}O;6wBI}CJBQ@e{E^k80s1b@
+zYw6s>iG5_ePfDA|&^hwjPp<xFEIXI@zB|T$*ToS(4G)#><ADdjMeAI)uiD67^5A9P
+z2DMhDcw)V)(Z}kXpaJahVD>g-VZY`1G;)rt=RctsK<g*mKOXJhjQqlRiq9Ka4$}X6
+zS&HX6%S-z(Z<JTEQeMeN@qlUZ!-@wSz@AuI>HFw+{k?uYjQ`4>zp2Tzbwv9R%>JTL
+z&6Bhf8>hJnY@)$kdq>RvY<_iy2p4=+{DID}d>xtCGn#Z(lj1D6khA8ty!`c@%ZkI(
+z%z<Tz8O*jLpLY5(WLi;wrF+&K(QDlczL%dZqcuMDedI6NJeot3PSkUDO<6j1!*311
+zJI#q1IGwI8=rBCY+BycX2ZQJVX`w&m@izM<Z%|JLyDnY&g!9FW-k?8<{TXDwu|yj%
+zx}3#V_+VE<-%P(mY>=NXv-5CP-!4){y6JUppn~6poS#8YY#W#}{^#>tEIssSeoOCd
+zoG5%OYHr2ZP;+m5qk1jp=50Ey?`FzyZ^pgDwr^LPS=4Uhg*3lq=FT+d2mS1iBz{}-
+z8tsObs6WxhIiWK+ClsFbCu17aPsz_!Iqk(a^$y#4DBX+Cnp2V=thg!77wLWgy&6Qn
+zO#ZCx+l8M$cS1UBY{97fI?IC!Hc{(<_B?NA575g&^izJ7=3zZwpB~1ph;P(q;84!P
+z(f8FX&e9Kj3^(VgH8(TQlC%7(!6P#_P_(vBepi^cV)4>CtKh3HwQ=o>(B2Bk$nI5W
+zAOAS*|EG<I`i)D-CW*^D;Q~E|C!LOloYN1_he|qalfhK~X7?bjH#7@&T3_dRrFea#
+zm-Mq*ca%QJ*4Z^sr`x25@^beB*as`q$h)GwpA5GbrrK}jW{fC?*zCg`&DedJS?zbT
+zay0#@(IuXZE(uR?HngD6^r-{b#sT_9_2C2bsj^u*8%j1vebDP>TzWgty40V}<(I2$
+z&kvBk82vN#!b^h(zr(`IwR7q=I$5?pkiPp|D`rL(gJ-k<wChPTXxEy5oiJuIX?9Gt
+z)SUr*Y}D?FY-L^IFVS<gKkY@0_5+GB@ME!7`b3j&I57E=w&6R_|6S;pylfv}+mheE
+zX!`4N#7-2wov`-Wm(yIl_UxGaxrCkQd?$9ot_umyP!<^?57TBHeCd||HdU2ALB6Nr
+zJGE|vew%TS_HC-nGuWJq_$ve0gpdA=?W>>8t{;D<to0P@8=1XIqqZNAk7VrHuwCa2
+z``gOY`disI)6bS|e%WN<q4qKt83`BL{@TYs+Tm=+u<OGp^9$%sjl3V_*OcR(vn$3P
+z`aV<e)PI>g_=bZ0yPXbR(e<O0HElQN`fU0PLtCd^!#1%D*%mWy(709h;@E6wbHF9E
+zXGOd2thMUUo|${6=e#$1o^!DzqL+J9_i)o*9J?hBTYb3g+ibs}cqZ+06HQl;soIo*
+z!F;dUg=|tCc&o`%AGP15&|Vk$JC+Z&F6l!pr#Wip*L2!@@1Od-)~4G1VpZU2{Ddy_
+zD<)<UWoJx#bVIaFfm8pYZwCKOzQx@c;=#YU(9It)?p_pV?#IZ;z^_=DeDroF6UWbL
+zr=LrA<D#tVBdAkjHQ6oii&U_Eh7ZspJ{bC;MfCe~YP~)@4P5QLn*-jqep|-e4?7u;
+zx-|}Pk-VDr(e-7tQ8R|j0za2xN6Sv1icLG}*9eR)E!#Cky9cj*TyursH^<l<>Nc{b
+zZmSm-r*{R1tkt#9t|ag<^^<1mE!uU8RGXL8dJcVfr(Ju{o<`#vjH;~TtGU-W+qG-=
+zZ24^Km<*4<#J+|0-0{-vJ1T0;$l2ALy*Kbkmpp2uNnW+=bYp*opYZwjf`^>M*8yZ!
+z?R5P}#jau1axEjBDp#4#Z~J(b{-Rd4_tLYF_YN12o7EpzH~G`*eulc$f0{iR=&txC
+z9ayNgq4QjZHAc2)tYB041{~+`-OR-tw7!XP$;C{MaqflxK3w#ymAA{951&pfe}?fw
+z&={rs>y)v3G}xy>{Hx|>2iTV}SYF6{)&kD0S};CV4*JJ{f00;iof{}xE>Xv2&foZf
+z>;&hxWND{GcQ(%JW)At6iIL8j80pt;S-_bu8R`w#Lolb_!5UZR`+Yq1>e_2Jb&u=(
+zktvPuhHo0tSitxxMdznLm+@07?tF=?9V6JaSLxWJ=XGZBRD6_ytn*Xkqu^J|PqDId
+z@pq;!^rEP``OQUqlTO#~WFx-GXb|^Jkm0A%n>Kut8;$K`_l$p2u`o1lm5-%4%OQNM
+z=$T@|QGSNj&2Q*qG{=Lk%)8`c;4ApCsPQr2rSS4T%mCvfomEC!*r$7(r#ueD_mHg+
+zTswcU!Hhps$DQ=`ip^9$Gw#G+@qPP1mOc|0&oCCXz6|5e4>Wxly|cEm9b0Jq7?Wo1
+zosAy#b|y0B9QO9LX`@%WZ(z$uN{)k`VN7S>B4hPS>br!m#s%tMMm1(E+I#7u#(MIZ
+z2eHwiUp8!Mkq;F5L!G2i{+T<RtpvWY%_fiW2aF6nKTIq$?Zo0@;k-WImCadNG`A#w
+z=374QB82JQSFDd^#?qs*hZF6+e03k!<?a5`8`=F~i_bHDUSQOX->Bc%mSNXNQ>VB0
+z&3;&XP<yqu($LpA(Iz+Zr`Tia_kFQ^4P(Eu)_>FfFpUe09ZulWg!wMuP_ZyVJD9*@
+zt{H<)v|CLaCeo#O?aAO7`%WE(chD;OQtf-$<*B&1-JIi3(elUe+uX~ZdcWP4G4IH)
+zIwr#--M%x&IjVRTXWxhIy@5x%vG1ha4O|~<Zhb0e-<>Y#{1!uBr}x#&cfagdJZta&
+zU-r&EF4DT({{ze_7AYDQ7U}3xVzD;tvMUyM4lcWk$+{@0oZ=fGunRg16U-`WsAFPM
+zQDIS0l8wqKR8CRRiHcugi$#SUD(p~E(vgm2RGbbK73J^qxvy(>m>Y&&A5Q1|vGaN@
+z@4dd)!}s~&zUQ8q=QLh6>+{cuv0fRzuzH_=GCH<iuzfx$`Wa20b@311>xIwkVZV=j
+zX73N!$B*v&*yHWJAA1Y$gFlG<zaRTQzTX$ug!c2I_O-(-_WWPr9Kcw=z}`QPv%`b%
+z;l4C~1ZM=C4`%VXv0p?!i-vQ-f8Z=&pAqo+t(Y?cK0mhl^M^0!86oM!eSOaD$lA^^
+ze5`x*$yobO+}A&GUq6iV$BFy;dcVm&-|_r+;=cZg`}%TzT>lK@IRBlvuWw(YoVc&g
+zYqt~k^;7kGF`e(Dp17~C_dj>)H5Be0@Y;p%1E09Bk8AeLC+_Rp*QZBL+}CG2oVc%l
+z;=aCp?`<>hv7WfEfAqcB$Qk3reSQ2UAMU4}xUYYA<lfJT`}*>^T|Rqd@1>Y4yq9g?
+z*TufdH2c~XXN?p0^`qbG%jZ(;_IlvNef^{3<-~n`dGG&!>%KleYqnFqOYMHV*Npcn
+zhVAba#QWi^pVzmaOVl$0f4@-P|Ciq+lJ}eW`5bxAmhU@1_+*^VV;x!N^H_G8{r>OW
+zd@h>LKXToOyeEA${v8^V@oVD5-?>hFJ8f0`&FjbSPm<>y`CdPtC5ZW~SJL|54`DyY
+zjpraDW##uI@cnVS%sbb9e^*RQJfoS4_w6Is@_a8Ces?FK4IaSz(YN6}c|2b+%+E*g
+z`FMMM#b*-i=REPO0<URb^h$kJ4f#HZ&n)o0<bqd78ozrXjI!8%C=1^w=KIHduKQdt
+z^7)7QO|I?o-eiLPTpOQ7mG`yv`8@b>-Lm80|1ZM-`HY7B%rrk2QIq)nhwvUczY8q#
+z{&{4tqz|7#k36G&=2`OoH^0w|-|@xo_d5E1s^-JkN7o0`m!GHM^St-t{aAj_7vI-J
+zJ#VOve82AI=TL4u(-Gdxa=#qqPLE&iCnfJQ&(v}!@tG<<4}yCNcuvuNHnB#ZPuRJB
+zxr18nA}#kXo=>?kc6mR8&y7BW=RWxPlelf3B+o(rAyuC_xI^!$B1UB2w(pG`XFV>}
+zdepxV^>{$*aR=&wXPNnZm2vBVeq#S0O3`{G>9|A;yB<$UtmEwu%sD(;zIJTm{kjiE
+z#@flS!5Frm30$3S&yyq4-|ODD#$2$=w3Ce7i;^@xuPt*?Wd1*ERi01V&&kD>i_f;O
+zk0Q^s+x~aRy$e3W!ghIbJ-;WT&yUc?_In`K@A38glGNsi#J2tLf4dAdlJ>3j{5Gr2
+zldJsj|J8n9hTm~Lk9Nn&`26$fSocoHx`(xxZS;W5!wvT*v=!T&`xC#n)BgTWtfTf`
+zh0nsUF7~>NHHT{<+r{3icIy8fYyPpGbGP@ZB=(nMuVQ?R$)oX)#M!Gbe%CxlZ>O!=
+ztL|85ud>U(D*nzm@i(s%-%g9hzb`3T_WSRUXV&aCI&$T({W)dqwa@1JjqJS(&ws7E
+zccI*T|AL=o;NJCSkM3Q_tLS9igHVRZGf@eV??6Pq+P^D;F~)s~pYaMOMZRBA<{6(W
+zV?Xfu!uul6#3b>1ys%f<I*@zL1Bv)7vV1-<?s{`X#zW-UHQ7hyyN`~pF^DZ|kIYwl
+zp0Hnb%J`q;8uNh8K~4KE(pa}5te;QgGXq(-y!oCBZh6r?57p>1{C|7*uM0M7n;?y4
+z$NIp%?%~M%pTFsouP8dtW&aKz_aLTU06Xsc=bowi{;KwQko|Z>+vov#<}R}DYwR2D
+zi|j{t#I|$4ZI5=d{iD}+_Wlo@?EmPC&BwEkO1qpHdCt5>_M&hS&k~OHTl0(L?`+${
+zY)6h6=RWjY%74eR*-zzj17AEt_n{|sKSd0CEF5`u_1L5JsDB~qktAa+j5av-ek%3Y
+zeyY}^M)w@VkiAP{9Ube(=nwljIgAIM*<!}Z1F_@(#p}$8lh#SI_t>2>zt-JjpNy1O
+z=ire@K5IYMVUL}ia^1~mJXg#7Kjy#(BXic?M<dthHT2Pa)BZokd1U`q+3Ej7?u(9g
+z;JqSy4}4%%+3<ha(<RN$*XfrOedg}y{(U6Y&)&bCew)?i$yNE`|Eu%k{>^9K?dRVy
+zb|cS`JHNYTJVC|>e_IH3?Q-E+^vIgYx}Soy3-CNO_lvB*eR7<?zsbIHes0_YW4?U$
+zUzf|HB>w!&GtaCNkN!7a`cZ@brT;8B%KL2PNU<Y+$IFP{u^4H$2x*^)GCxy#z?JwX
+zC4TJnnZt>{!e1;wiNCO=pQ?mG4BcZYJ!(r|SLsW(^f{Ftw511By2qA2tkU~z=`NLS
+zv!%l-z1@~>P^kuF+1@H-d3QD+4g{MnZwOXaHy_-Q`}!JNzM&y_VarVo`-86C)xm1N
+zr>?oVshQ@k!iEENEkTdJ`f$^spyyyi%faekP5m1%yw9~f&|lryawrgJY7W-bdg`lN
+z>OK1pHP!?hni}bh*VT=6t%154sQrgM`<o6m)_NKn{GOZY8~k;iLyb2zR|f(OjR!o{
+zjh=l0`XToltNn-S#Qiz{O>&h^kL<pE{=Yx{_y0-{H+Mer35N2WoQOqn^@~3!j2FJ1
+zA@-%|t`bRJqpwx-yg2$^)lcEa6Y(7B8h?Ihj4z-4cdb4T3jkkbDDQgyou`Q&-)q1Z
+zE~jE&J;%`Z9Ya5;`grX#rutOmjCE;E{iaTr^2GC>SABk*_Q}L2i};G?pQrjF<iB3~
+zgwER7zgzXAxENi}zx~{e{d-hD5U2bD=Wpyks(O2zc-Hn`Mb^gt0o7;V2Tay$|IV%A
+zA9s8lL*I7{{h;dO_0O2<T^PsfweJ|dq>Qh4{?n?jKVyA=-xcDo^Ki}h>pO-%dEdtV
+z{$uDTRUfbXbE<b?o@1!5Dc{_+l7GDZSv-b*<rw<Oa*4l)oY!mr%(sc&FIZE)F4gCX
+z9wB013#zy4pSpJZx+=v!Ui+k}9={2`ZuzRTU^>j#l&?ee(=UnRfAhxq2US0U$+KSj
+z^tOqAtzb?5u3I*apQieF@$+#J&sV(oVb#ZLzaiDfi$8Pw#_@gc6n(t-WvY)CzpZ`a
+z__L~y7k^3h@#1IPwQ>BA>f^=lR{bdYcfIv78($E{S3G~8>f`xOcW&&zp!#_J?H}0K
+zzen|%SU+)3)h*W1zau^J|9Iz*CDq5PU-HK^*2(L)k3TH>c>W>P7h-W+Z~lyZPW)>H
+zYs#PX`Hl6R$IvexLtln37UnBn{==$|SHB6>&tm;vul)x`Bz`>qQPpSSe1g}S`p<oB
+zWB+B<$Mes4WMhA?>PJsozke4eH}=P;*zH#bO1@tGJ0IWJKdkzSIOn4h{BR~;@%pFy
+z3DL)EU%%>?F@Dz@f0Iv%f4um)^Bc!6QvDLn-|N*s|92bvm#BUkiw|CF`akQxHuld~
+zeI_cm-uhLww6T9s^%-%-Z`aDk{(Y*?!i}Z%@}ECNDi*JQR#aaYr~bYdZ|q;DdS9IO
+z?>>EF|9;h%NHy2A|MD^XQ_hh1T))>FUlT9gIR9DIXT}--?z1-bPgng=obf&35r1Et
+z`lXyJ`qnu5cGYKz9#xEe4X8d||BkAj^JBgC8OqwYd`qeyl5E%XPd{#c@fELpld6wb
+zzB$#$>%YF&N&I;J!>W(he>2{V{TEdqumAe;Hg2Ce)yM0<ii<aHpLW&9t6z`m<Mm&s
+zZ{zY!s6Jl*g$gz<U%%?(m2X7#p*Z6!zewW8^Dj|-Tb%iWHQjzC+<cWQq4n&9)Rc2v
+z9;Bq>-yCk2@s(>^;7>`)t5WYx_(Wp2+m#71AOA+h<QW~GE?05XhHkX0#lN28u;WoN
+za2$4Q>!M@WrIaMNzKPN#3oSSJnnc$Y7nqpn@~`Z(X_i4Z<Rzh*0qHj_v<5)be@jrA
+zuS^EdL%fwMgbUzi$m1%HC<in>3^Gop(xn{Uo8bCLf@{kVh^53oC^Q4$X2|_Q69Tux
+zKM!P_#bP}D2)_l8e)B>z2hwj=Xof-h1wi^`gV)0^3#4DB(0D-lWeCmk<>J>5X23oT
+zr2jO2F!r^Or$G8o3e5ya|8b$|1DS6JNdH{08gdGVhaUXNLNj$)f(uK`mLZVogF@2^
+z-hlKnO)t^(bntehFJWBMeo<(K!H*)n5UfHznIOx%utzwgY*QA2?7w_vHpu>)+Aa2j
+z%6jk~#H|Hc-zuT009oI1q49#O@BA+D4}*8YuNS0WkI;03^y?CudXRn|kma4jL7@qL
+zvmpIugk~C~-;~e{g7m8g?S2Jc55Fvsewjk!0qK_^G|M~1ZxCd^w1VuH5|Hg#EHvq0
+z4)iORO8T<UOn`4kdcUUkX}TZ03+Y9gUa09Q;3tqiSdiel4*B$euLk{K3fj9K<b13Z
+zniB9^&}V=zhJKLiD_8`wp6SZ5OGFNW?8ka#Immuoe3R&Vm40Qqa^4bs4~U_?r5nUr
+zRoo@CI>48rT<t<r1+slAgeDoJ-%5UhYZKC!g=Pudj5v!zYZUx1*bP%gKMV;?8<>Ig
+zLXh>!1YZR?75r~->5U1l--8Pv{pN*c61)WVgW#W`?*dt_PN4~ck3k;*kDwfWp;ZoY
+zykvv4&k~xYHzc_JfH<Qd%hLu@-zqd2AeNjho!BS;3I0LwJg^94{}qDlKcCQKgY3U?
+z?%U8;f%dq@(*$HU$o}e3wu0=h6xDa^5W8%!0QMg6EaaaGvK>-{W)4piRv|qMvLAZE
+zb5Y+Oq16Sl|2l;x0J2_wq49y$@Jj<Z&SrCkVUXnvf$R@I$b3>j=Hmj{-z(c}nq|;~
+ze3yjQJjl3%;2*(ukoks$rWm{q=~>`1=mA-;453K|*}qF$rN72O`i}`s7x-uRm4ocB
+z4ArNreh!nC_On700@;6a-UQcM5O)Y<`}Zq*K(>D;$a-fe$FZ1D4k&%f`3og|3S_@b
+zfGq#G(1by@XDi6|D+B)o7J-Xk8p!gc3eDsei8lz+z8Cy&unqh@7z7zVAT;G5+b0WT
+zJ0ydQ=N6iUY#IOaAjkil(3%7}{=*>cdxfSR`~%|Tf^5%$*Cn|2!>$`-J9R2UAloS)
+zWV@s)-5}e6n;6Tv@>-i_0c1JHK(<Fe$oh4IcKyI5$mJl*QzkTCkmZ@aAi?!k_>Y3;
+zusk5=8{Z7)eCrgNR*>_p5M(~nSu*beAj|1fE}SoNFUWdzDMKLZm9F}+*N9!W(x*&S
+zj=oyv!3cOZ+ILuJ4T79+147dQvR>^%;{`8Ay)r@0ACJ&vfUiQFbfGn$nc$j&-7LuV
+zoDrHnkp1HaS+8P{?U@Ju2+RN<2h%|Mr3%e51op!;I0OAK$Z`z{O)tpxvIoSis^V^;
+z6#_Y4%0Swe2u%h!jX3k?NqPD}>cc`)2=0Y`=-dR?)$s2HGr$1I{_}(Ezj~o51KEFz
+z9_hCZko8MZj+`U?HK+`O?5|vqc7taN%fJH2MIgsx9*Cm)bA=`a<T^HvMq@vWfv-e;
+zM}^if$o?A=njVn#>K2-Muo`~(Ajes<avYt)a`b~p+R_a&pIngnWP$AOOri0BuRy*T
+zLMs(y-04>)xPA-{fXugFXoBE%NG}0@3KoH^SE0~&LH2J3$o^V<h4?QB%`i9vzYvJ5
+zwiK$~r}`9?lU43V<FWrzz-th1CSBTpQaK8;{f9u-yHL6Ka*=zK^~zM`%FCo*mOz$&
+zQE0|Nwr3b*`?Y~T0R!L<!F-VIkta0EXG%WPAnnJ%AAx<~<6tky_&q`s0@*$#AltzU
+zGG4aOq=6j&sUXLHiqKk4)BOje{g}{nfzyan0kS=(UYg*lgZ~J~b!AA|53-$VLAFz#
+zG8^Rh%%UFU%oLh5kmX!BL)v2!Wc@}!yMExmLk@u~Pn*z`gDj5=#9M(|#!gRgoq>FN
+z!M%`c!BZipfq#SDaw_zw=aSGG1M8694}J;uz2Mg&=V^Kd_(i0rg2PB3I8E%kK-?PN
+z(hhzO=~<ed3Vs#oZt&k|f2!DbgI`8^2RM%OVz3x20<i@63x&o9vR(3pCKF^kFT6zR
+zJufuFDi5jL2JVGjg{GHldM?QR^@0zf-q}JcRrLN8p_xk&yIJsI*v$y7VUX=TBsA?H
+z<AuOa!>&zem5bhACN!BK?L1&V>@tMb@{1+jlF*ESv>OE<gx!eH>Hx7K7PkwnRuFFi
+z6$gb@5%>=HWr6J9`4>t5PJ-;;386Itj-Xw7!7qYs;AhxQ-~^ZtJ_=@l%r9MNrGm^a
+zMQAOalHj@#`Hg}1AbnJ5jexwbFbrOUej5^+e(-y+?*l&p`>@dJ1nJ))w93IS<T9aE
+z0y17P$aqCUlMgap9(X_ObA^@%q<@CcT1ZZCy&v+t(3%4oZx&>{8KId38E*pYg8jJA
+z8UpD*D6~T0hak5JtyYlnf*|7sgr*i`yeja+u&)qWMIikPg;pAfx8#abg;om4c*!8+
+zxrJu=WQn%~ejN6TLTd)3|FqB=1lj*pAm?`>$o}^Utu&D9j|;>WxMl7n84r_S7UW?N
+zZvk%cg9jilZW8+$koKb>$ISpp`);rs_C+A=C){E`4AQ<A<oN0UX&(Ub7Uq^rkoE&f
+zV&4POz76C!tOsdd2HpqzRFL+4iDKUc(mn`23RZ!%F9CaD?*VB)oS^enXgXAGSGfe_
+zd@BYyE{lX#w&?v?LgNN$=K{HItYCJ4)(pt?U|MJfRPI-~4WwTy$Z;AJS|y_Q7Yj`W
+zNV{~9>rI-_T6hNUMI-*a&<v_PpmG~%#|JrXgF>rB^!{R@$pG#6AlIohp|$XLjW0BV
+zDi5gK2HNpKj^m)vDiOWESZFdpJ3h$uElp@G{7vHv&7jHyDz|}le30WhD6~pM?=Kdb
+z4A71ba$QUlT2m|b`%uM`LTe1<IyEY^dcY#Is~_aN$N)JnTp;Jg%3p0-qu{q;7XV)b
+zyV<{p+yzp0sXX{+k+VSB&n=5w4^qxndGt?G?-8NtQn^#*3Xt_F2RWX~gjTNT{a&GQ
+ztL##F`j6r_1#+BB3ax&S<D^e${3_S0oCh+$T#)_m6<W!n_q&B=;tvvMTxfbg`gMcs
+z*Dj$|FM5Bi&}6HerSkHU_$`4C!f#P%g+cBsy+W%CJOy&6(5eUDj{J(jTreMGzpebY
+z^xGWBew!6qQ{aB|=Onlp>*a*djDVNGe+Xpx2SJu&Kxp|v`qhK<s}-6ukbcD={fa==
+zyHIGkLHfBs`mOxlrda^#HwV&h7Gyim2(4a_emx-lx`n14q+c6IzgCd_8WdW&ApN``
+z{j!B71EgOXNWWB&<0wUFjo^J^o|A$g+dCk%>Or=5t<ds<I~fOLJ5Mc2JCA^8z;0M*
+z4S=UW9|oCUFUa=n5n4gj*Q>r3WV=-ft$fvcRi6#AeX@j>TlLF$f1L4`K(@o8(3$|5
+z|ETImK-PCyXazyLo<gf0wCgFf3c+T?O$S-e@!v{42SC=dUud<0--cZUScmrWfnS20
+z3-TQ72Du&#{YLD1K-#r|UxZx%<hj@f(r$4<>}EjPje%c)-7v^=atBDee31EOfwW5n
+zzY5t6^4vW2Yq9G9X%_@(R{`=IT>_3n_JEAH@-!+1c^Nzx<7P={7D0}q1)-S&IZpaO
+zt{-8c38?H>ITzduyEIKt)%3+*Nq;SX4<XBWp)~<A-nh{8gO8z{ec;2e3k$7w(fdO}
+zQw7ql0_6B87h1WZ_j`pV8Kj*X<T!H)t(kercUou$LD~&~55lfrXtjbIFF~PI51s<K
+zR%qpeH^DCr<hddhOhSE9geDo}eG9kH3_Rs>wKKlZ>H~R>3xjV)d-n=W7sz%Dg0v3^
+ztu&D9-NJtgr$L@?hCyEU)q<CURUrGXLTJjsvk<35XwCgn{0BfE;`M?x@aqBT*DW+Y
+zkn2Y-cqf<za-3&?9Ouh(F8lt$0BFYn?Kq$vM`(PY9S5}IfSd;zAm_pIlNtxK<A8P?
+z(2gTCKG2Q>+HpY6lMImaWcfcd4rs>#?Kq$vM`(PY9S5}IfSgAeAm`EYFC@+w$Z<ai
+za-Ix;oG1N4(+4tcSZLZo+UJ8D*Lgy-G%NC=&<v_Ppt4`(dX<--kp8a%FGaa>!Fy2z
+zuh7Z{Ic~DRtC4@E(4>RkgMAu!KkQS5*2>Ste_3dagPqWi39V6(@kT(#8y1=Ykn#G#
+zF4*@8tuB!MokFVuyc=@4&?*BNuLNYgVxjSYjF%6781{KWD-)!@M`*dh^Woq9GnrRi
+zAm>%5&~$*DSM5U6H-mPEeLcwekp{jB^4L#Zu2+MF;71VOC$#cGmM;%v`ErFO3uO5+
+zL7p=`LMsKNf3naT`HAE+2u`qlRPF^iA3H$K$2QfMfw)z+r3B=7DHfVSFrDQRT3O(~
+zAzmuj2hRLh@|gf1fIJHNz+tc!@rFRg8x)#u@Dk`dLC({5kn^+^{4V5r@S|Wk$n~xa
+z{5bM25n8$6cBH3*%+C!nzm;jpZy98MOF}aZGQUZX^LZTPd>#Rr-vIbQuoq;0Js|tN
+zTWGa{%&!b&enlYj^MR~iKFIv?geC)IerX`*eG15V?*f_M;=j9G?*nH+<~IX!+)fLv
+z5s>-yfXuHGWPa@+^9zB@uT5yGK;~BteibYMxjqzv%r6)GB$x>@KM#06^2-ofE|B?6
+z{7BY?QIPA%2*`D0SZIboyB~$72jn_Z4ssnS6Pi?z`$G5QF4r!^4S+nSctKvTq=P)C
+zqzNq-$n((Bl*{!y=x0FQ=gR<@o(ld7>B~Qq^gNL1+2E5%Pt){@A4qx$$nlh=at6r$
+zUi!Z1=Rx+zsLDei+pAOM5XkdKHkg2NW(h41^=vnxwLIx^1yR3Ako6k^X+J2m20+^P
+z3$1pL^$&n&Al)ytO2C)E-wV<|TWDp0r$f#ZS{~5OUucCf3BQf}gCN^KAT)&_&rO`9
+zOkcrb0h%e0?K=XpeY-*C8w8neKxp|v=36hcYC+~(CA5k#i0GFE(l1kJc|iJQ2(5IG
+zerZCh2a6EP>jzn`dZEb&S>9y~R;Dir%>>AP9|Bq4PLTQfLFQX8v}!@-TP3tAK;~O6
+zw0z$YKMzR1455_{(l1SDrGoTJ5n5d+EX!MqKP*?3(By(F@8Y<mF9^*T$niJ;vb^me
+z%UcUF-zuS10W#lmp;ZQ+0=YzJWqeEWUHqoT7n)I!`L=0#tEQKL9PfO%2}Rp7^{Dtw
+z3QZqKzbZ|y(DYo8^I~pH{Dwi+b4X}9K>8JGx=+*7LC&A?BjVQ!(yvEo{2=|ZG(A((
+zSH2<hYyf0ALm>Uygr)?fUy7zDYx?XXG9NR+7WlbA&bP5qz3u@ypZbMXC-^kV7oyDa
+zgL9DcR9^YI%k^`}iy-x*;8!4r!7tDc9004p?|?q=2$&ACAJc?Z3dnv-7Fr8mgMji)
+zfGl4p$oU=wS-ybKDgzggUPKvoDd2xXcBwq}|6HzF$ipD@9pDJ$dhm<%19=}Z3!DIx
+z!AHT_5h>q{(3%2SzDc1q1Rg^9Izg5%0J1)Qp;ZskzE)`EgDih0$ntxH)(ke8-y(e&
+zw8x9kbbwr60wBws{}q>O9&$QJyELJh|FX>MNsxBE!!Fl<z^)afT~KI>K+Y#GNIUnJ
+zT&}M{p8Z#`n-Q8pkmJ7s{1TX_`drl~gB<5WUv#+!!7h;bbP7!s$nl&Ceh*w268*f;
+zjDp-B+Q4st6{;^+eICgDV)P3x*I~4856J7RZjk4}E}`iJc^>Q#np}`}UeWurg(ge%
+z{!F2n{JhvrfQ&aTG-Dv+jS7t)WW0LO`)h@!O7#8;p-Bd5=N7%+B{VCalX%NQ;|DoT
+zN<fa2Vxd(8a-0+jEf2_Xk^-KA^kktmG$`l7evs$QZtzuLD`=M!d@tIo5M+P&geDXG
+zHSCr@E9px@GX-9S^j=Nx(ewbwaaRU%oOnMY`DTL5Hx*>QOaCJI&VlbnzM~-X9TA!^
+z_)FLYH9er|C145C(=|O!(-#JG9D~ev;9<!(3^LzNkog8c*0&103;E`Q%r{SHGQcOG
+zUwlZ?7ldX4yaMUnn%<@9^&sa(F=*HKL9H)n*B4~I^Zht~fwSOdoa1JMW*U4s`e{mN
+zje}o>T`$OT^$1M>+=KL7P4{X#Z&Gl+b$?p&?Esl?5M;i^;H6+8$b5Z5lMlWO`Q{0&
+zY;Xv6yg9;rS3YIaOo4?+?-AMGt?9KO=kfACOTG&r^PL8n?;v;y*bg$_KA{PNXCmKT
+zq16Tc3+!q^=36B+d0+w3SNbG<S!l*Vt`8MpF8Z$oWWM<z^GyRE0aHNcn=CYLFb(<g
+zA_=sX9>94VcH<!P9TS>f@Eb_4()0>V&jz{fjNUK#4uQ-!3^LzV@cUo@WWIi(sRv(*
+zd~1bPIXDKpY>@e82@Nj-et`6``y_o-Xu800qzA(;*Fn^`2pmJaLZRgYd0m<ha{b8@
+znq2VjD2G>Q(n0#A39W@s%6c*Y{tfZFL9Q2FLaPmY6Vh8j#tjNh75FI1Q4W5C?GJLk
+zd%*;hBMsy{D7#nuOF;S;3r!wKe=j%+W`R6cCWG`}_=NapgUmk*q<^N+q=NKM2EPXK
+z&9x_CH`^=zV<7WS0qLI%(%&sKi}#5CJcuo9%Ph$GGYT^QZjgRmApJUprWItq0T5f$
+zmU@umzX+sX21vhjkbY@G!#APnw~UKsY$00~L5|-^kbZq2{lXyqdWEI~q+ba9D%c8g
+z{FQ_B%LeI}1=255Xi`DDeL!sKTX?a~@iY4|@yjF8&$&V?8$1Pame5-1ak*}WUoXi0
+zCIr&HO=z`(v=0icVvyq}7v%Wy3awO-=k3LhivNPpng>sZ-JH;x1sQKfXw`$?M*hVh
+z&ox;f=Sil}%zZ@8rQ;yS-7v`hZUdQL1<3N23#~Gc`IQK*VvzY239YFQ>v<cTN4##3
+z`E?0R3CMGBF35432{OO=Zpm*PWPW2pYZPRDBSLE!WPU?J%LlT4nIO+ue3P5`t$fI)
+z83CDJ805I_0-0Y4NWWb0Ye-K8>6aoj6CV`6L6GCQ4WxY)$a7deNc%jYS-xBBXF!hQ
+zL6G)gkms@xNc%RSDF#`tJdooz1*H8-mz>jPK-y0WO+QHcZjj@)9;AIa$a7mBNc&u&
+zaf7s9{D6$tPSDTtgYQB6RS2zekn3F;Sc>(nL}&^@o=37k+Gh%_rT1e$fV?QQ7C`#X
+zgTI0QoX|{z98V)4?T3X{515N`v?~4J*{~}Ix$YN&JWu3;?}c3|$a<v+&HVeY*+4%B
+za$lGgnsM+F*pGr-N5dfV4}o^O3r#V|dU-+K-<j>iXLn#f1a_dDgF<TnWWD;qE0Is1
+z(DZ;jFSUWRZxvca;MXA+3N0T<|9tQ%_~!{tHpp?G3erABXf2?!Y?le;D9Cmh0NE}*
+zAlsz_d^hZBLDs8EX!1d}OCHE}$rYLmknNHNa(`GtXEOgOkp7cG69!qYc989o3pT+%
+z8GIMY=@wcX46N4*3b7CQEDOy7$n)GJNc#z))eHVV$UQ=<8>D|1_zU=V3QY*){Hz6O
+zUnR7BAlt>GOas|2E|BfAfKFh$%z$^nZWv^}hJ>aIWV>{NY?lt934m;udXW2G5y<?r
+zK>BA2%@TsLUeh4kr2}k)eHF-jD?nbilnYH6$o->4XqM3!|BCu739Utt^<M!0AIdW?
+zG&7*RZ-TTR5nA0K>mO9sgRFlU$ohLho`bW&RQP2Htu&DJP61i(WT9ESQ|dhrehG2M
+zLFPLEvVLtK>)$Fgg&@z#^X)Fz4X_^tS?>{$^&S?QA&~VR6q<5y2<0ggS|uRsT@3y!
+z%2OmX`5@Oz4@mnAp|x~})O$)f4zk`uAnV-)@*Lg?o(8`Tp%nyKZ$HR-*9%Pv$o?(@
+zzX)c5%r^yOy=UGj^_~`*K9J}1BJg_HdqCDZ17y9^g(eMTy;Fr|_;wdBIg5vc)*#4w
+z4}hOVdHRK>7v#Dh0%_kSw8}vCcdjxEWWCcs)_XC8dVmYysqmW@T2mnFJpr=b<3ckC
+zvflmR7r+jX`T9ZDJ0E0!=LwA)<aI*-Z7x>>>_Z^y-3GGWtwIw7S?_?*q=R2UdD4Vd
+zD#&`LfRCX($wISotL$I1Anj*_))2^gcPl$U);kEY-X$QfLyEzdz^_PX<$|ntHpqHs
+z2~8?^3F0M#JnzllBKb~$tamTSdiMxTEy(MXWUwCgvu#rE8Ibj!7MdxL^_~=(R&W^Q
+z2@0(M$a?$1Z=yW)LQ?^bBfbx$eZJ6216l8-cL?V})_V$My$8YXg9Bg+{Q8AfH^_Q-
+zf~<Fk&;&r%yB_>9SOhZPY>@R{!C{p3UKW}$kk?7|-~rf|fGkg;GEbSU^e7h&i`}ep
+zN;$3^QT8gkl<mq^rC*t+%vO4oY06~fe5>R;qnuQZDTkHq%2uUcS*0vf=7Q&;zp|Ac
+za5LoTn<SqJ<*0H<*{keQwkunee&yngcs>H{I|J@PyN-ZZa<=q=|BUo7$o}gUnof}Y
+z7XY_|Mc{+5D+JGlolj^ys&|3ODDT1{i8C)WQ=kR^Hjw=pP}VBTmBq@*Am0B)J|iH@
+z*$ZOH+0qVv0O=u+<!logKge>HfZM?=@I$c61X)gx(C|$p>StS|oD(49j0?>W$Z}SI
+zxs0bQROTtOm4nSL*E^6;FUWGXfwzIR;9;a!fs9`vG{qpx=>=JiWbhW)xj~kb4;z7I
+z_U)n{1=*ehAmj84O*hDL=7F3?Y05<$9w|>KLtr)R@<DrD6`BPcrf#Jj$n<fc=>=~_
+zdYh)VYI-qPfb?ul&(ic296q{{J_9n&w9pKIT}bcL^bSq00J)FlYkHohr+^P3ec_<Q
+znHQQ7@KZ?d)$|@s_k%nKwE7W`^#ifA7Uv1AT#)OY7xbasvW3P2vL0@b_PhuItw|gv
+zu+<b#2(59D{$t=y_>T(B5XkcPfVA%xTD2gy+~O*sRRPk!9NZ26GNCB~S?+9*_E|zJ
+z1>|_+p@tmBCQlA1JCz}2o-$jRqU7Pg_Qz&v`zt#^t}E@zR*>sTuIjUtsY<tU1e*`z
+z^eKCkCCWUI`$9IzeIi}u6)fINp9lNEN$`Gf1l)soy&%_}HZY9zR*>UAC^P|(<J~Vb
+zB_QWZ2FUWHD#!PWJgDqbRwxTWmLm^j`7%{bRxZ`KT<=Hv4A=>dgL@FaALM$|0lo+6
+z?I6n+5}G!U<!cq13eaA6K$b5<IaMq2h;mR_uPgyszCw`Y^QxSt<d;6QB7MHb<+>4^
+z0$IKxkn2o07({v($ntdxO$W&GwF^x>$ntqXt`8~7sq18Y=m9x@yM?9%ya{$*P0!YJ
+z7s&ZDi$#U@GeR>6a^2|C^iEB$0^f&ppQh()dMe0yv{)r^7KCOL<hl{o^j=L5fDa(O
+zMAM5k-2-wyxio#H(vD{)L9QFgAhysg({FRR&cS#e1YZof4SWXrT5ue)3(UuSTroDS
+zWsviC3EYf!TojrG@O;SgLNf`{Z$fBwfdz=y0dgEvf%r(>mJ0Aiuqzi@xggumD>QD9
+z{WDx4{sSP_{SJ`%w+l@hXfZB$4&r8m96xE`!{EYOU9OYiHw)5lMrbC$H^Ofeq+Kt_
+z{MuBm02!wU<b6Ren1J$T3#}~h6v&xEYw0a6*9z=s!S5i>6zGB9FvxZu0P$U}Tf*Sq
+zVAlgC!@pZ-g}~FGuK-z|B9MOhApN``{W8Im;pY)rDIon;{>kM!3GKHmGz;J+$n!!o
+z12Wz?$asUGT@LUhmP2TDfTu%W4ze5r<u2C_==+6MAINbK2HBpyLem3gLhcrtHjsX;
+zLaPXT1LQ)X<pUWfA7q?7p~+=BWUtVqgY-)iTK;Qw94X6`MIhIUZ1AsOI(QNKfgj#u
+zzb;)Pe)AyhCP0phF_8I>3e6z+M%ed&^y>s^Uj_DqMc^kvA9ydA2i^x}gP()_%+-?5
+zq;gC-3^GnH$ntf7EMEZJ4%UL4ALStJ@<Em_7i9UoLgN8hzGQGaxKbweli&y8Hw?ZT
+z90WVSe(=3uFZfy57lXN=PnoOC0-0|L$nq_hO8I6%<}(H6g5x0V20)gt4`lhmLemAZ
+ze61k;{2=XpU>lePwtyb68B7Ncfhpj>z`pk?S%0fQt_KxDlMZtIUA|J%mxN{<ycOyF
+zn%<}BtsvLga!oJO^em9)vt&(oYx;DFtf#{u^BoeJ4v^=t>3z8Wit-JDS&#=nUU&8j
+zO&`eX&aluFgS0CWy}wXse4_W~3(fo$VmAje-mK8ffQ&aSH0>bcg+%Xf6Pi}h`-4K0
+z39_Hkm6Ll#9#eKH+m%(yGG&U=rJN`h|50VHvP)T{%vUBWS1uR78Ib3!DdjlGbJl?B
+z!^(1Hu`*qmqFi{h#F<l0gN)Mwvc7G~T4lL1Rk?hb*exjglszEFXFJICzFt`f7D4ub
+z9N+mulM8ObdgK*aDPRxm=8EwAD>w`C+%Y3G(;)q)g!n!onHOE)J+SWtY2P6<?I7(#
+zLQ@NJ9(h65GgCQ(Ll5OK<*+iKtOZ%G5|H)ERi=WhR|?2{l7)tcC^zc0vfHLL4Zah0
+zgJ1|809np{q3HwZ9~PQ+kmalZ?}U9hNc%FODFJC;EX4O3iT%nhsmG$SU)iN>SLQ3d
+zAnTO@vR-`1lbk7(dQF4OXG&-$z$DabTxj)ye%QBx*MqGf%NZ1!07!qo(3F6zR~Fa=
+z`%IAb9-+wqX`e1MD?7!04CJ{otV{vfU;K~|Iee)wtn5}6D}5mAnGLdjsmcW$rr3Y;
+zAoHCQni((=^_&)3Ltr-SI>Fb19U#lyE;J#K{%t~21+t!b;Ok+Z3)0>zG}$2SvxFuE
+zr2V{4>N%#Y1*?&s1#%tD6q?yfT=w@qje<-c5t=UWb;vKE>3&VmS2<7RWR=}2PrXUv
+zObSgOcp2ifYkEl2%fPp@KAP^;bT@bd(&un^WO-(VW(d3s>D`*%rRlZc?MN@wbf2cD
+zfuBJ7Qoh7l6q+&cqe!2?W{9n8%K*rJ?^ODg#UR(mLS-Jvb<Lx4x-v!6-5}!(;7~+%
+zD}%~<kmDu`{4nSNKL)x%t~WePv0qm%wrQ3@_Un?+OoQy#K9KR-m8~G-=7G0?Uhobu
+z4di@J1sOL*Xp%w3bqmdWp2Qsj?Q$zSK*lWs8$cg;5X=NQ-#j4WW(Z9>$hc`jvy4L&
+z%R35kzGZ`qpQ7X;i}6QyxLg;2!{8RM7vwna0U5trXu3eg?-ZH<$oLf?<F7#A_#Ov2
+zZpMVB1I&Tmuj%!go)2<-XJ~r5rZ1q79G8<I<4g!m805GNX?mNcmw+6Xxti|PbT@cA
+z(&x76I2M{AkmIsP)4Mgj9^|+j-iputpdL#((q6O536Sko4|4oefE+(1nw}1R9C8}i
+z3nqhuh%@AsIALWc$T(Rb$4dry2bikq)33+pwjfV|?*hlc&mc|^M3uHwDT_hInZHoR
+z#|+5vF$prg2W$kp!2s9+4#2;6i^S<r20_}VfgA_PAjiQ<wxo}P7eXEby<io{e$EEj
+zKUqRE`8w(60g&naLK6Vl&qbPEsOc#n`+5GgVm~J|10egkUDHFFUIenAGd10#>GKyz
+zKaYaUcSLB~LH2W%rdMcsCdhuS&BFV@sK?OxQlE10jYv-ex$aE7M%rl@yajeWD%XQp
+z;<r?(>{5CD)h<^a{AWPUlWCzD1+g@5=>ajsx0HaKFZtlP$R`6l8(hwG@z%nYIq*E_
+zCqddxZN_yTWsvi6LTJW8<})V5_bN&J5J*2i$oRz|<7a`m^xrakp0v}D(A0vgcfO|Q
+zX?i;N80^!)Hte6NLaXy!yswP(0Lby^Q>K9hkW)ampG&#uK{+9hfYf(`^b3Ks3o2_t
+z+NG&}{v5HNRgQu5>ruH&*{<oeAkPCOAlo@t(>)-^_sZGgKLgTk9HiZVvL0l66@hH8
+zOz>^cdqC#PFW;iy!mGru3uJu?DI?tnvOn^LCL6p2dN=jpK!)^d56J#mdL`n5iy-@T
+zL1^Yd#+ehEQIP(9ApN>PmNNjdoW)=X^fRxJew`MYewF)F_N!d4avFFM;&q&b`_AwW
+zfUIXN$bKnT7J+uZsD3G3>}El>>nO<bgeik<Ajerfcro-PAjfYp$a)qDO(Dp7`h+GE
+zWIa<s*3%6#?&8ZO?i9#+4uJOhA~dZa$8R=RPJfW~aD%MJ^2>ztAnP#zQs1r&C@VnL
+zCl6%4>6DrOnNpugkm-Y<T~AH-fvjgbxD{MTlQ<I~$4da*2D(A^Hy=7>JFL9ardbBr
+z4ogBa4Q@yI#z3~iFvxuSK<3*4vK`7nwnLfFcvQ|%dF~9+&k9W#WPi75daI`AgKWQ<
+z)A2br#2o;0!LYI$WV^J2EJrP6uoz@N7ioH~rl)H9e5$m|EXa151{r4zWV;N2Y?pp;
+z2iOL(KCMDi46?l0nx3WUOQ%VBhru%B-w$4i^@+bL1zNpeC1m~%6=-#V1~PxQ3bcwq
+z)-PX~tXw%&(ifF;Aji*)auVeD83iu@`@jUm4GXOx$hh^&TxFIrL%H%2v6}<g4*VS%
+zyIoZ70<T4SC&+QpAv8tc+mN2G>3N!-3Ua(GqzDH=j+;(pz0wE%6VkIlu1hH({p>gA
+zk-qX`8JEjKvj{T(1)-S)X+Homeupv}WWQwz&CHABbA}@z(}#toQ{@hoE5NrPPQIq+
+zX?hA+$#R~8&$T1JsbuV{Xy-|xH39Pe=s3vojS0;t_-e=_LemG*FD%6OD#_=9Ta{JH
+z@sp(-VK57Edz2w%I`}5UNfTPBAoEWFnSZj-xIqtO-h>9t{7K?BC$z@EO!!rS94BQ;
+zk1`G9cuP_8<}=6J@+Q1L0sA?S<8B<}xEm8%Js{(CD$A95%50?v<Ty)FdD*S|8EB9`
+z4e~zP6v%o_3e6aJG2#z^wCe{M2VY5UkKZ=10&*+Ja#n!lkVlhboD6}*kOx7odjmq#
+z2Qr_q(6oabUlkz7X}RjlRPO^hZnHs-zhvcHqR3q!$6Ke+_&|;?yw_l-<1^l*Sw!RQ
+zMfxO2`w5{5gB*8lnvVC<Y<twrJ_n&ru75^V%7j*@3*VQ3@_0c$my6-#x(qVT+Wa2W
+z4DwWb1!X-r0-1aXWSkNCsCou@24pYz5M=V@kkJSH{)!AT9WureKZ=n-ra?v;KkAV|
+zo(VY>d=N7EGRVs)$NiAWmqMNgyC9RNL7oOb44H&a$~gFO$mHpeS)Vq@<clGvgQ#}~
+znF1OAcl{;7bqng?`Wc8=u5W`M0MRzL+@<pEAnJU}VQ>;`QTYb&^N{OQ#+vN<GURJj
+z-Up6CMqAqc1t9(32r~XQkp5d#el<w{b5zE*Z~J2#vhA^qxbmS#^SIs$vR>(lu2ZwX
+zSAZVyWgzQ!CYTDI1tx>91OeB}!C3@EjFU!{+#e~2lvPTf(xY@Kxewa@%CIt|tWx@v
+z9;Hh;i+#%WSB8}#WtGyW^eA1*S=7Y#SL(iXQb^@0rBCTmx|FlnXKa6ESQ%1QDSb+h
+z(xsfmeq;M9!^)7dO6gO2lrH5g_7~e<8CHgrRZ5@IqjV`}v9H+v%CIt|tWx@v9;Hh;
+zi-BbOE5pi=vP$VwdXz5ZEC!VAujIZ&nfnsS{fP7_JxZ5y7W<0rujGDZ`zx!IKBY(L
+zQqE#OvHg`{Wk^}2^eH_`mvVNK`YXfAkg`hYQ+kvx<t+9EJAY+Z8B$g$eM*ngrJTij
+zZ~H5`Z`k!$Rw=npFx{hcDQB_%+y2V1GNi0h`jj4}OF0W?+g}-0hLlxGpVFgrDQB^c
+z;J+u0D#OZ<vP$VwdX#|eHw<F!JDbeJ*3zXic`oF7l}TKxp6XMX#3kaX87h+)(x)aT
+zE+?)eCMQlLO(rEL_PWFF<iyTRU7L~<hto#Vk`p`5>^u|yKXU|s`(HNjGW_)nc;Mw(
+z;or=a%;dz`SI@l~zOM<tCOL8HHPiUp|N4Q~CnwJ5F61UB_HFOqo}4(neFlGr3r7l*
+z6Nh#U?@CUbxoY;R<iwHE(bD9^a9Lkja$@M}_N$W<=dPZ|-?3}PuR)w^2d>56@`3W?
+z#O?z<2awl+Is6^0AF5AIT&WK=pyUmc_}g=R@Ab&>`UU(QyJ7r><iy3pONWyaM{gdx
+zIXSWG9o_GM?>px3cd%`!4SC(teoJ!V<SkS9+kR`utti{ABlx>;>mvS++%|d}N*+q+
+z4<(?y_azM92e#jz&~ZOFb$`M%+4n#~{{!IC0}0FIOkcumA2|4xgrTp1D_>6tje--S
+z36o^+BMIS0z=cN=7RixsB#eFo>^zdtbp)I_k}yjSj3o??f!&WL^gIgo{4}BWr{Mfg
+z6BfwfnS_xUu;XV5oj(Jof0i&q_WwL#;OF4-&l6V2@h1`{o&bku6Gmp4{)dE>KY%@d
+zP3ZkA(?f|PA@u$9oryDdg3IqoTzL=J*Ol1c1rFVvID9ua`QgN=4}-HGNu2u#xbpGD
+z&^=&hZ(>(3I22AC4ujM8CC=PO{r!od2f*RJ#F0L*^HYgkpJMu_6GQ!A*Tae34}*Q5
+zN$md&IC>;;><HLDhN^=z-%OnSCOG!3#PM%|%im61`8GKFoy58CfZdNJ_B;lzJeC;x
+z9ymCeI5Y|Nd_S@G`(W4OiQSKb3y&u*lEXhr9QhI0{gcF=pMZ-$Nn9dFewsM?Q?TcW
+z#NH>sr6&@X$<f)wu~~3>K5=Fqoc~qg!mq&2Unh3`8XQ_k99{rtev>%+8*phcad{E!
+zUP|m)qW({b!+!!h+LJolF{@VElR|fbeeX)@e;3$uS5og?;AltESO+-t?xf*&gEQ|*
+zntcyA`QD_d_kzovNh_V;!uygI-$&k^w0Ji-`@y8S4}wb{O<MjaINy`B&;zb~A}Mq)
+zxOi{U5;--HG(AB5Xwt$cIPgf);3L#OlC(q)e<Nw+8{qW!lV-jT4*no%=m%ivhe_=}
+z1jm1vG(mPvC3R1M3sXspWccx<zQ@7-r;`Sr2IrnmnkUD9oiy=luzew^V*#9BNLnEK
+zev{Py8!+_Sr1sx}gTGB0B0GPV)b%@X<abG<<iuZ+CjSBs{55Itui*S&lNQK{m88iP
+zrvEKz@NZ22ThanK@%N<3zcc-rq`_yH{!G#WIT3PChOmzH-|il`9h|=1Jwx`t(>?G`
+zu>B5q#~t9%9qwUr>7(xDkAhP@?&%(;f6P7nF|hOF?yir6(;s)wkVE&lhwlOB?{P1X
+zD}C<JKZ9cry2l>`2Oe?{J_HUAxJL%Sjv;sF5I8#I9wQgN=wAFH*#9N>z?Z=8uey7_
+z3Wgtb_dN<ue$zemO>pR2?%{8N?ca5Gd>5RWa!*fzy+3w`f6VlsxI2CVcFnlEXTaGf
+z-E&WZJ#+5fIdJTk?(tuOp{LyKPk{?hyBD7ZmzUftOJM&W-2;CFJOAYF`V%<w7x(O6
+zz_IpC<Ly}a`|jM-e<!$n=cW~M;$532-vut-y=m!gaPotjralM`erVIshro{RO`YA?
+z-}!pv9oST`!9`x*!2eH$uIegDyz+d}`>qg+*KQTLPvyT~D01ZYkrP#p{2uauGCtyU
+zX}oEbA5{5!Dt|`hZtUB%52<|3A&DRPePP~TXL&Q<CgoYVK;&Lr{P4B&bs|T8FZcbb
+zpSfN12VN`swsw&pS2^P@k^68#!TcvR|I2U=p**OvrST%aS30Hb5&3=6{?|+V$nTL3
+zXnRC{e{^t*=p(;3dT*A<k>9uci?(;<_bAVOwdf<i-}j)lN96bT{-XIse!nmOHDVw6
+zJ-zW8MUMPF-kCWfM}AN5GaA1yPx?Dg?IXVzcb8Y}=T!eqjUV~Fx3Zf=A1V<4Pip+g
+z@4and|DsQQ`$f;ctL4+EM;m)fM33s&`XaUGbtdggROaVMPIaR{t`z&lR><g|$awt^
+z$~gO`mWrOA(>V2HJY%5p*C^v`{$`bV|LoLc&rx|V^{3z-gzEpu`r+VJukyE8Uij44
+zN&FGqUq2@y<l^sU^7SzOQO-x6d_CoZoD^~ew0_@2Z0h~xw%YY=)t9TjU-jJ@?<w5G
+zqJMqFA93lQtp07PZ&m$URX@sx!|Us+FH!xys-H$1@zsUvG{(!F5qVPOvU5dFEav?O
+zk1O)~sjq#r$dTV0-LXgH$nR^vPwgYW=i0hY^xbGDzFziL=I3!uYWcfMMc=n#t6f*`
+z6gf>q*Bh=9IS=i^*XyqoxmQHjzhNC<`69o6yG8vYzvnrr_B~pkZAD@q$dUk@)+`V2
+zL-TbG#^O0i9+ywstNC)VkNm#;*R{TLs25*5OGH1W{(K&d<r&3IGrk_w{35^4`QhE7
+zkNjTfkFOCqk2gT@IvwjO{Ug7(xaBgDBfk&%OZAWZUghuM!}9Y!IbV-puCV-(`E;Jv
+zkN4I2T2y_W*6+nyzsT<&mR3rBqvwnL{o3D=-&cI8)^7~!9$)X!^3R_x@`tqik>4}j
+zv`^wiejoGJGLa*{r=F$$k>5YRK=nhnNxbu~7W=Yyiu^;BBfkg!DeeEr?_XEwcnXEZ
+z{s$^|-z74iD`oro-Xn6G##`tVIa}K|@_V@7-zD~u-{<|i%HBuBzE9=I?;k&-<ry6j
+z{RP^dk>9ti*Y+%$7yXQm@5t}l->C5-zbE~9?f=N{Z~s>1$nV`=a2@+Q<f_vC%+vW>
+zsQqVMD*7(fXS|r>CFEMVLGrIveTV9Is=h<@?^S(B_1CLDL-qfbFY)tqJ^suliC_Da
+z#4q!Seq8;xVIDL8(RYjf9jc#J{aaM;*Z#O)_4BH~UG?c75dTdD65pfw&#6B2bJbrW
+z`cOoFvgF^FEc5ew+J5P(zf$9+s_cD{*r#c{PL0>9`Wuo(pQrKOUnBV?tNs%jk00vi
+zt4-sr{6xw(q45H$e^}#9oGkWFX}o2v|1P!fQu|D`Z#zZo&sY0;)&ENK_o_Uu`7daF
+zQhZY04%Po!<E3gmU#;k~RKNHtsc&dT%Abt)quHOsDnG34S)}Fl>v-hv+VZtY%U7cD
+z9#y$W<+C+EpUQQruTuFo)t9UMp=`;&Q`e)<zE0%1YbC!q)%U3Wuc}{E{dSzkSpGiM
+z?@{{|)!%19pA>TSYkfl4H)$WZUE=>)^@FPCzDj*+yXdccllTv--mBwp@Li%mP5paR
+z|JzOC?`;!(f$GDm_h|gdTSZ@??cJm85mft8wJ%lsGM#S|s-IN-!>Z?(`|_2k<(*Z1
+zl9qSi{i44^^9yT!A6NTDwLh%($zicSqU%Gy+TXABo7gAg^<CQj3vUy95B5{G-$;+h
+z52uJcruz5d{6+orPes2?<)NR6T(9S`0P4jTK1*WT*Q<S{+Pl^Mt4YwG96owJ{QP0a
+zCxu;Edfxku%3hV<p>pJWd8*1j)t`s+Dg8Yv|C7pjD*MzvU1fg0nEO!`?D!f+`6%<@
+zCBFV$_2Jt@PJ+L^f4x)W@2Ea>m&kuqIr}{#pQ-VtwSUi3c~-|~0<I_Q{FlW336z6!
+z<oBRIrST%a@BKOSC-uu%C-{1|+V|mMF}_OGKJt6#c+bhUAA6&%c5QZx%s2V@x(EO4
+z{Qb7*`liN<{9g9^HD2WR&p)a8V;QhtufTYufB6$4zewfI$3?zC>({j+@?|RL|4!t`
+zE*1ZZERlb4lgN|%L_SsXA3ROuf6?+qeoy>H)kl6G{@v-~KXAU-8<pq2Ci1%gmN(-O
+zkw1Hu$cvLA|EKEPKOpjgw%_m<L~e@29})Q@m`{x74~smn`lTL``CJe6^SYj&s`byE
+z7yVP3|CFBJUfnA8nJ*XpU$uP(b$xuL`up%EBVU%<hY*La_i6uhpDy~pYkP?n&lIVD
+z)_+OL=QV!h_q~6ia^&~ASF}Ic&lUT@Jj^dQ_8VPKN-q|9Q03pMzF4o<J*qEL`F53O
+z)c(#li2wIg=7)V4e^g~YS4{a$>i-VaKdt(2t3FNjk7>M<R4!8cWwpOt^<LF~SM}$q
+z{PaHieFLd1{tn~3B`qmQUaW(w<<7Uq%74asxmy30-LdkQ9rl?SvHD!}-)jG@fmr!Q
+zhd%RFvHBl5;$7~L=Uy3W{~#vv>in|Kh?UQ|K2|;@Gghvtij{X@+^&xI?bKMgzCKp|
+zY*VcKrp>YPr_OZ9FNu|3TNf+ue@m>)&)2Um&)H|k%ASf?`M*w$l^@$5EAKofR?fkC
+zx;p*^7sbkty){;zaO8KZqyO&k#M&2{Sh>$(Kku-=#bN&)hke$$vGM-ou>Y7tU+{`p
+z`wuzF|Ab@wWIEdCI=g&6SLAiT9*<G^TOP)b%AF4V$#!|7`p-G^|KezWK2N&3KYnl9
+zyN<p#?}*jk;pi`Z+0$zOqVr;9KJT+yU*i~$9>;h+$ua&cPpto2ZTo2b&a&f0<wi&S
+zUyAj0b^f1l)aQ#WvHEv8#$WQTSpA<J^*K8&R)4o+{`)dx^*^YJmG5-S|JR%ztN*EE
+z{(rYQR)3>o{_{D~)%E?mqrH0^^MBE?zP`6S*8fV!{BL)xcjGt*t<G=QZhzO&SLL;_
+z`aP$`$`>Dqm4lA?5OlQf-yH25aJ26ms$=6l=4jtGNBiz+h_ye<F&;kcXy0uwi?!e9
+zSpS}JwC}}^{(8#MzPC8q_s5R*^&X7PZ{E?qM;z_@5l8#p>uBG59qs!aNBcJ5KFR9-
+z3_IHQen<PBnI3EZ14sLQ!O^}49PK;pXx|$h?HhKq?|#Sr@=izl?)<0N@;vBh-wR(F
+ztLOK(tgbIVkFZ)k-_c*cbhK}hV}6c1+V^h9d8jKlHvTVn#>#uQ#mWym_7lJ3d~=7R
+zyr*r7^?$|oSow^?Sou*$ep?;qoliOPn{wp0+mT<hBfm==`JL{le}^N#Sx0^+ImXA^
+z9QpmLV?W+=ZfyO&>d3Fn(caCD`akYy?_WFiqkA0nKi^TFPdMs7=*Vw}qdcE?)c;gR
+z{m*vP|3*iCn;iAO-xFK^FWd9UcXU1eq&+{P^5gb=kIHx0^CK$P1sN|YKW@*bsQit}
+zSbc74tbDnBK8V`?-ku*(`8s#3eU05dQ9VBgygL8a*!>mN-)8q$RKCJ)zo^_`_g7T@
+zjU#^85&vFC{FChdiTZaq;(x^vf0y0=QG0$4dUg4qcEqo6#Q%mP{(>X^pB(*}_?FoC
+zSJ?Y;H2+CQf8OorPkvr$b@|Syij{A5^k=`LKVR;NwZF^JpVz&O`si!EC00J$E>BeN
+za-2Ua-x_QGE64TXLC5)}DL>Z!0*AcAF~92_`jZ@TyQBR7?U>)`j`=<5&|l#w-xkMy
+zJyQ}}UVh)j>h_wj`#0J?o%Vc-$}9GGiOPF+#rjt}>hteOvHB0%vhQesGwt?`$_E|#
+z`%$>n<K=6P@${ra-jf(>{~_eGx_&=$$N}5_XmMN@pA~EWM@RYZaM+hQ>{IRW7>&mV
+zv{&c<N5}c4$Kn54hdl4d{~<^IuFA}oob5ZC4+nxxmp23}tD6t*$ldA<9J<cmP;+_R
+z;nIei>vq*{-M&5N;>v4pj$_@@aG<d|c&NGVIIMHFx75|uIt>prRn}Lx)bDHx9ClS6
+ztUFjkBC)Qfwx#--y5@%ckWo_a?xsVHwbj9frpDaD>R|OXIom6*stYvNwbV5R?c{ye
+z?t^K|O%3}|8Na`&=F+BCI~3zzQFl|EDy&!G(uNzW55=)xugdZ5*Hl_frI-imf@OyT
+zb(bFATitlTUsroY^})K!8h17|2J2dbu1c-U?tNG7+*Mh;ub{9pQ<5&*haPkJD=%yb
+zHea|c=R!v>zP`rp)f*au7uxw8ZH24QT8JynTVGmV-HZ;Yt7&FpB)5jfmSA;bu%S9w
+zhk{U7$1?72ZaTQClm*uz>*|_~3R!vSp$31jp|Ntmzo{CAQswLF4m30t)YR0qv_z8X
+z8f!H{Ym}37;cj%X-&5Dz+|(Q~JJeX$8mOxY*46Hk<l`Q{X!F3c>&^Ae*Xztcq#L$w
+zzwqkDmP3I+Q!|R_;h^*EKh#*m5xYTGMu+tVMmw9D>tYPGF`Mi5`_UrEq4LJM<`&7R
+zvZnrqmf#JQwbjixH6Uwgcl2X*RJyLYq4q%CzU!`s_f;_(yU8O-k$G5(Y0d_`_~<~(
+z@$Nj-d}E!xJnXxO`i8~>`z|httRC0wbvWehExvr$-ivnRZDe$@ZIt8Pn!AzJ*4!dA
+zZe4A`p<q2Ge?yHu{dYFi)~(5PTfwf<ecSfz+`Di46&TEG4RVY27VKQ(wxhJDVC(iB
+zYtr*BYiy~j!E(26+up+MYt(exmY2J3`u3cyYtp0Pa^aa{>vcUWJ#>%_Ub^+#Qh&>}
+zen;bPEj@hjU|q1;UZ}4r*tvRj#F~!vqv61zrb8{49uC&E6cjl9qxss^D5xvQ*~%u}
+zt;2OA4=L&KxUexQ*@^`<$BZ9o@Z&Jev*WUvkHa|9BgbJXaoJ7BVa&K2ny&5<*{=$A
+zmL7~WEV^~ILC#k0XeG@}!KRuff5d3Dg@&jp@LrmC9CkZPk4A}3*$t-6;evul59}$}
+zdAM~?X<4Kc$LsGHQ_nR_q{E(%KRf2R`bVoF13iA692(dIys+UwT}u$taJ^PjGmO{c
+zF+<VUF<WOOtjcR$?d8w5|6=>Upul_4UTo3T2e8|EpGz!GP-(p9A1m6S&o9>coqMd9
+zIa|@uSjQqAgGpGpPLtSXtGan3vsK+3$4ql8x%fIP;X85k4dM`U;4Nj>+vk{7hv7BL
+zeTg^6ds9QO9*2?Y{dGINhu>aXS;>E;*Ir(}>vI2Y#PC=8{Wl(z!(rvYrrJaPI{Os9
+z!4agep(Riqtf_bGM8`S?lpeTtpTlR(o_y41?MObVYT3G@ux@|#A%CzG+g{^=%Wy<)
+z4mA1gt^XR$W39g`O0V5s6KO+d1Ip4GtB)>v+i+;vmviy1#+vFt%OS}Qr)ZSpnw+gI
+zs}9fw*yCb$<r@#gHdVCR7njym<FJp*lWTIkH4TCKI-D3=gKJCg46**9E5}>XjO&$P
+z9WL6g$+@Vx`li_HqGQL+Ey3`Pp5k7JfS3p`Y{2bXb6&`R>o?`9^Xm)Ikk3C{Ofx?J
+za50Vee8a7KqJK`!w*ImIIfaVp*PN}G5(NjE>*@~TI$@vpBAqCO-sdw<Uihf&<rh9G
+zJNt!>x?%I~kgLDv*SbfqC3A9j?JO)U;H9N~hY4L)Ti5*Tm$sNG^g;!VnMf~8(CBoE
+zU4Qd<*X-F=d)1730iwzN;2cY<x;wA+;vL(bZ5eY*)*JWFKk9np{`p2-ck|vBtUhq;
+z&2_^QMBUMIMP2Q&L&eO#=tNn)|9f}H{mk9of?Zy%^=|Jq&XdGOJN|Kph@Dx_sT8sE
+z=sARlGixGsz_rWHNHgqO+YIrh$#J^J^oMhLtlDfM;c(e-v{SH3uHPvyM4a^|)^jP(
+zdQ<86;^=LxOK}_i2Hx^NdJ8%#9IUQ6D&R&qR{J7-+hKQ8vwe3la%*+_MYy#Zx%ulq
+z?AedAe66Rk!SA`LzQJGTIn;Plb9Eqq%K}ezqi0`$H$-vw_{M7gp=id}Ha7$z9mkFL
+z%NqCMmMGq9s4m4j3rBsL>-=@qEl0)JTc|NAy@#r4&+f+hsuEt?5NyOXcv<yz{%AFJ
+z<21AWCCqwnh=^Zf-A&O;1bt73_w!4!v&3GcY~8L`{cG>7RtB!!S3~Pk-jdvF|2KM_
+z<hb}*y_T)HLM<q8dds~x`(ELiTZK;B$c+kKaK+xVbXrC)_vJR{u^pnf7LREgxlwf-
+z#jvCD9>%e48TI%qqm|P;vT;hhx+mmPm$xCMsY*Az3n?~h{c*o!^-ailX1oRI?2$G1
+z%y`EvjuF-{z2mZhQS?Si)M#yqqq^vT-RN$p-2aSQG2B~omU-i7&O1y_Z|5B*xxuuq
+zRkT$Ql((VQwTd=N9IIo@^Xp<)g_wPA{d33O>R6YJ4j5}~<DVqf+QvUJIBnyc4V-52
+z4gpR(#}c<jeXLtyP6tO5t-2gvYZ=o(8(PLR&jyy!#@WDVRnu%>weI2AS%)=Ke~m%x
+zZC0l`y53!kx88JRa2l<-*}lernMCK%8nxWhk4~R82K0}wjutY<3&Wf^#oXYMV4VzC
+z-DJGRsdkK^HCLi*?PEsLaoER<r(@bjheG82R>!&!-RYf0i|p&p^k|#Pd#>vSM6K4e
+zO=O2&6Ocoo5}mlN$9n0}BFJ9rj2N>%Zg75g`bqCSD+hMpvvN4b5#Cv(4XYBpigvoK
+zUz3gO*Q>}z_UqNdX}{)irkt%c)h)rYCYgtoTZ2ulYflH2tp|hN>Px-e-QKHi_U~>j
+zy|#SU{;MmwpREme@v1BK$P*1Y+wDYLyp%LG@O=sI{yp1@>l(c~<PCxYMPBdq2QKsC
+zjhX1(ex%)SnYXl|wB&Hh_N(!BM&31hDj^0A7rc2-X+uGAX+v-~<P8e5)$1$_pPcyL
+zDoxJCwRMp<N$QR^O%Cr~MVe)|-72eFVUO3_fR?ye8VW6lgzIl8TH7uKmq**?*zMvh
+ziQO*$8%4?4f#=v_9<;g$kB{6~cUfW1MS-L5+C<u?;mtB^<QC5LmwUYjuP^pShS7e=
+zjr)tyHZ9vRUbbz$rgHV*!I-&1+GsDvPjL6zfxgjL%JJg*y1KEp=<>qdIa~SgQsiNf
+z9B-ichDZsEc3@l|2-bUZ8yfdFVMyQbW)5rIm~FVRt`_}=B>%xT{|}Wh2k(;cp|f=g
+zxed?d;1Q>_<!q_;2eq8rP!X2zf2epDvDNV0&S6aGNdMf3`FwPGKifXh9WiHXLu263
+z(W>o=bit0MLqVkP_8wk640H|Iv*+37#@+QFl$Gwx|G?Z(vwu)-_6gyCCa>tltMk~m
+z`o`&2Z%xy|0A@+_emw3U73?X!t}<A&zh-}dy|b;36?-Inez9VYi_b3>-<00qtn=I|
+z`ho^r?@+Sp{^;?Qu=LtoJRn<}le-_c<oLwizWw|0nC{l<me$e+9!~tbwbRxdN1n%$
+zvn|d6=l|Y@wRQcHK99P`iTHnTv(9<J>mDa!&Oi2GdsxmQ-u0{Zk3QILT$+F6!FJ=4
+zY{fw<_K5vIc(C2LDE|lNN}R#;Jk|+`7~LwPH!mEI<;C9njNHlC&?tIO!M?4rv8{c_
+zg7-K!G>hEu*w85YnDd5ajKy0a8yZFHAooQ!HnuCl_jq!0ujAW--0GrFHm=`<$6*>R
+zgx!$G<8ib(kHa|9sK;R%ZQA27jx_Lbm_}<T%^cUIG>~V1@Ck2P=3$+vu4xD!#svu8
+z&S<C%?tTlKxb$GluAD$q!{OFe`=QWa>A|b;Z0JS1{Pr_aS008?aOqV++z7Glqk}(s
+zYcIDcP}f+w{ZI?uaLviBUiB#q$g3Vr)rZ!1t$N<Ea?N9st-;F+F7sY?^r?2<f^p=W
+z%j>;sF4Bv?oE`S%5Uw@%qMpqS)&5*w;}sMf^F5f0k3OG?CnDsL*aI<7UB*6#&vsc;
+zme}_kO9~2h<?^yGm+uzqGrL#b%%^QDpKat-?c0LqL$!UkH}YdE&Q>m1-KMQ;8?|7U
+z-hM4T@b=2!<*PfzQOBDL-hS0pmCfF@HI-K1A-4r`wg+134%IeYg<Awo|G&5^U2Ypk
+z!uu%R7f6wkd~MbKpglekXA;jaWA8te9ZN1w<YP^FEavIw>jrTHJS<96l|vF6-8h;+
+z1O0X50e#Q=|8!SuLDicKZ<Friv*e090{<k_{2pf#Rz2J>73%Kn!l@n=m6a>2hubH_
+zChnkffo8tn(Yk4!S}F&X;j(~NJzhHK3TZ46_KP$Y(ZgF0jZ0l|v(AiGH7N9s4%let
+zBVwF-6=@c&CnTP7d(@zJ$>xg4$+<@jx)*5|O$%gC(cOwPi`Jbe)`K2Z@QY$eD9X|J
+z__bUD5W?7c#E&7Ga9QBkpuE21RpUDUR(~|#;d+A40tgRLu3CQK;)VF{n*Z}T;Ah~4
+z>e$JW&yGcqD#A|@o{ShiMDX!1uz$^8RDj%P+k9|bwe10NPI=u;tl*(&w`d75CS8gs
+zgD4bm=I|%AWqeE^md+s+W(Zk}9r<=7)#gn{zNG6>QeO+|06A_=TYwxB1z5NNaxpp)
+zAm?;k!&?^)kn2_6(J3RatQQ+Of2~uV2Ijrxbu)yb$N6|3|2ja<X|Ct9ZzMz2Yp1$N
+z7SIF{Ajh(TPbomosY##lcOgCfdC^-ZI&XbmdO+9X6&~C+o-TYzhO{}|%VcP^9KR+q
+zW0(yxEE2$U7O=Hv2A&bPQC=JFXOFWNJc4yfSW^B?k;}Mr^+fpCKubW#nwxltMdg`X
+zT5>B@Rj0JNc!#g)*jlmjB1SiobTr{hGHtx-PUpquU|s;c3dk&w%fHB=L%}*!M!bcc
+z3duD@6KBbBOoE(eIunx)b|Mz*2rXt7d74nLc&!{>dwH#-SH>-)6)IfDs}|&F?Q+Wq
+zQ`wNwG$*XiL~+C>PRr%pqPU$F<<}fZODGdVw)_mZ@Ul88(&^C~{v5q6!-{lBJ4jB=
+zVYv<?)CcUG1q!$m@f?Jd;-C{Tai&BpRsNUZ!i?49J1CiTh}t^_I3#k~D3(BBh-gbX
+zn^4YC_$?!X(nI6T4g(7qZo$s)4*W)m%g;YW?Zq%njbt^_zkjf*ebJK@K|#_AFo%@f
+z<NFUHu9`q0_<E@F$w)+q?s@|n0`LB%{u}G5J)>oq%<?Q+8%Rzo^4;Ijr#ssvZVZb+
+z6%eu@CUe)8c`ijJ65w#MFTL``iHUERLHuHNVPOSq$&7&s&%N7qR|M;@Z7)Tz5<GWs
+zXoK~Jn}~qu&>d3pq@_1IbSj%Bug|m&zpwN`@mL7K=G<YadqmwvBekR}_zW%Ep4Ocz
+zt^1Q<M^V&FOi-!>nYM$HBjc>r6!Q=IQG)vP&)|T<RoOP&Cs>QoBxWfpRq!XeA7Y}r
+zn*qIbH~ZC^;w&vExZefCwSvO8>3R%SV5=U-U=7AKxa>qlO2W3H!~Z&+RBFNc&Ut|m
+zc+5FgwjXm^*~}TO#z&pUJAIrAI9pJnZz>ES5{*EZa~+u#LIxT}!^ax`MTW!C>wG?Y
+zaT=I?q{DX7EHv`Ip56?5%syf#7lvh<q39dDMKl=sbNPEQ{rR#uNfVl};cLOZ1om6C
+zdaOzOUD1JQ4~YDMY4Ss1V{M~P$SKqP=}lSEnd8&r=}oafhOOyzGDmFRWKlfMcIS(m
+z`?B2qGQ+v#*Ag2^%J}zPoK^w_nP=zuYq|G_K-~?(GaLCV{kDz)z}4rGW;2sh3DaZO
+zP>pjH-W<ZX!q^+%+}z<K(5^sG3SjUz__*-X;(;C`y7<gjUegSuG5!ig&VH*$*-ht|
+zj?rPrpeQw~UbOJ~NRup}SjiZg<w0<TR%M@}lB}cI_jiS8cCw%zfOiSKfzEI=oLX%E
+zrJlGv!@qd};A3ziIb<U}$9pCx?gI%-p4^d%ZgfRI!(78|o8))EAq4B4j^u%WZ)+Lm
+za-`L2v;A&JVz5&6QNplH>G)$<j_N3UShn@q$goV+@%pfAsjleNVVUxw)37W@2Tf7R
+z)_gLdm;%~2;(a&v`<GRA8hiQEL*lLsd4E|-#xV0Z9wWvxf78n(Lp7__beS)H|0$~=
+zF%%4*ptnXJ*Ex7y!!ZpsLwQAKnlv$So|EZ#{`8XHW+z^-)pP}vLw!O<FbP)%j>2?`
+zqz%ci@Vy(7fnz}34l8|$J}jY53Um>M1PA+F`)FX^R^JTDTO$-Kwka%Cg$IO-$^c&=
+z*~O|6_u;CK0cqHnj4({Y5@(OF@44Xt{*-*O@Iv$=G$)8l_K+U}d4`b=uUeJKo^W>`
+zrK#cTmamj==Dj0|jH=WD*zLT+w8CHQiIWw!8##GjJCw*~<71T8XW16q9G%AiGi$8>
+z&+N~O8i3@sLcz6QuOi*IPHM=<$Uv~kjD}u8Ghbu(g4z*dgcx@(?)bNQ7Suk8?ge#)
+zt#IS+3{Yh=y11>N|2npn$S=y1y%M|BVpXMS{(76w{{M<i)9kmOc_H?g3s4}9dz`|1
+zAK8*dLU+SW5jOeLF?lpp4jOC@<k@<do?R=Hlcob@oxP@&ax@C(ws8wK&tK_S%wM08
+z!{+5?0S`^?EdP3mFjwUieO)K6oMl-<+<A53@H5tfVHjGIe?t^blGb6fA~8L=XOV(-
+zLT^7-xILk;=gF0oN(sxpQ~z*8vJsp!m>e>@w$YxJV52qK1HZZvSt+1bDjL+8T-z3c
+z{QlQp>>@$U^vS{s=hJyWN}r_3X{&*gXKqD>^Vfv>xD?Hd^>oaR{5bzM!e%kjGau(4
+zrD$i2W$3Dzagd^!v2JgT8FKqo^?ZcVUwEqQc=bL17T$fm&W~*s#5!jt%xBXI3=j}$
+za>hbqXU>O3=(7sG0G16KNL-qok>T23nzM1-oEU5GxH&QLEz*FUX00?KH28qBoB=YI
+zN<S0x`?bIto=pj{24^!utf6UGGzTA{ZOLje1_o_ci$O4;tj1x}Sy%>?7&hMwQGt}R
+z>%CsChHOe!Xw)_%OB-JHgdWH!EHjiMU+M|siOig-a3MMimvvi7XpJ;Xxh+d}rep62
+zHIPF(q&2NA6uFDl+Ok18)}*{KIi681Or(I-(%Lmz>spo&DB3!jwE^zB7mSd_Is(r~
+z-9#?R>|Tc0O;;3RXPb6TCuI*`#1YqftjX-G`tI4YrV;8+T*e+ZR92hVBDUqkXRk?w
+zy`Cu=(_F5je~ts?8Li9VDuJi8JBdA04m;eY<MWmKn$R=lK8u#5jf*bXa^AAL5GO6i
+zbr@|5$eMBE2*)jFM~JHhx~?9c{B5^f-n=a9t3=-Nzw&$Y@wN5%I=`|W`#rmROK4fa
+z4Z#k;IVe#+F|d5kGk_u<?_~k$mNJS(9a7dT-JG?=*;%<0VfTzL9wU3ETZ0k#j~ZTz
+zceHOfZlTrRcwzh1jok%fU~8b(t1~aOn)3Z{FXwrBi0c~NYjg6vOwzG+t<DhwqjjlK
+zI=vNlI0~puefpU0zb@wobl=_|00r@@uwRr}e*E!co*z9E)E$_2$wn)kUKuQX!|Zb5
+z&2TXjLJ`-Ay#2c|#ifQwM~0?HiT-zqr#SYK7<T?5L8<&jVPpB53BlkWH2PIMuVMCd
+z?BJbOuakxFTNY-yUHr4k1rn*wwxQ5%_1PwFvaK##g-}|Rfqt7<Jc<YS*JAnbe8?(m
+zA;b6=lUN`m_~!s}f`11}OhOi!?E(MVfSttUpROE<;^f~AUxoF%;pA4oQ#<xq>>ihu
+z7Ki+THGrS)@(%zO@wbV5Jf32suD;O6=v2XX?c(CyW4=>Y-IUx=!oK*nS5bY*Yp-JV
+z{jj}?%6r{<71DETuVR>WL-f$o2CX5)EsvC;o~#DyfvY#_fvY(DfHY^!49&1SR*#X=
+z2nrFCU+5zhN-^ZMmfYdK$CsySdi%7R-A$jKZ{XB~3#BNRbRR8}cNnzKFHdyKZYNq9
+za@a_W?t-?bT&G0T4F8F{ppy^s)8xa>zyG@<zl|mzL}cC0;-&(ua_6BaALu&2|Ln*c
+G$NvTvc-Te&
 
 literal 0
 HcmV?d00001
@@ -20298,10 +20968,10 @@ index 00000000000000..e134697ed96de7
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 new file mode 100644
-index 00000000000000..bc5289e34154ea
+index 00000000000000..3e3b2c3df5e365
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,80 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20318,24 +20988,24 @@ index 00000000000000..bc5289e34154ea
 +#include <stdint.h>
 +
 +// AES GCM encryption and decryption
-+int go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+int go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++int64_t go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++int64_t go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
 +// Generates an Ed25519 keypair.
 +// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
 +void go_generateKeyEd25519(uint8_t *key) __attribute__((static, slice(key)));
-+int go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((static, slice(key), slice(seed)));
-+int go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((static, slice(key), slice(pub)));
-+int go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
-+int go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((static, slice(publicKey), slice(message, messageLength), slice(sig)));
++int64_t go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((static, slice(key), slice(seed)));
++int64_t go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((static, slice(key), slice(pub)));
++int64_t go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
++int64_t go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((static, slice(publicKey), slice(message, messageLength), slice(sig)));
 +
 +// HKDF key derivation
-+int go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
-+int go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++int64_t go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
++int64_t go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
 +
-+void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int keyLength) __attribute__((nocallback, static, slice(key, keyLength)));
++void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int64_t keyLength) __attribute__((nocallback, static, slice(key, keyLength)));
 +void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((nocallback, static));
-+void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
 +void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((static));
 +
@@ -20344,30 +21014,42 @@ index 00000000000000..bc5289e34154ea
 +void go_SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+int go_supportsSHA3() __attribute__((nocallback, static));
++int64_t go_supportsSHA3() __attribute__((nocallback, static));
 +void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +
 +void *go_hashNew(int32_t hashAlgorithm) __attribute__((nocallback, static));
-+void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
 +void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
-+int go_hashSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
-+int go_hashBlockSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
++int64_t go_hashSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
++int64_t go_hashBlockSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
 +void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
 +void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
 +
 +// ML-KEM (Post-quantum key encapsulation mechanism)
-+int go_supportsMLKEM() __attribute__((nocallback, static));
-+int go_generateKeyMLKEM768(uint8_t *seed, int seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+int go_generateKeyMLKEM1024(uint8_t *seed, int seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+int go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, int seedLen, uint8_t *encapKey, int encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+int go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, int seedLen, uint8_t *encapKey, int encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+int go_encapsulateMLKEM768(const uint8_t *encapKey, int encapKeyLen, uint8_t *sharedKey, int sharedKeyLen, uint8_t *ciphertext, int ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+int go_encapsulateMLKEM1024(const uint8_t *encapKey, int encapKeyLen, uint8_t *sharedKey, int sharedKeyLen, uint8_t *ciphertext, int ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+int go_decapsulateMLKEM768(const uint8_t *seed, int seedLen, const uint8_t *ciphertext, int ciphertextLen, uint8_t *sharedKey, int sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
-+int go_decapsulateMLKEM1024(const uint8_t *seed, int seedLen, const uint8_t *ciphertext, int ciphertextLen, uint8_t *sharedKey, int sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++int64_t go_supportsMLKEM() __attribute__((nocallback, static));
++int64_t go_generateKeyMLKEM768(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++int64_t go_generateKeyMLKEM1024(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, int64_t seedLen, uint8_t *encapKey, int64_t encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++int64_t go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, int64_t seedLen, uint8_t *encapKey, int64_t encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++int64_t go_encapsulateMLKEM768(const uint8_t *encapKey, int64_t encapKeyLen, uint8_t *sharedKey, int64_t sharedKeyLen, uint8_t *ciphertext, int64_t ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++int64_t go_encapsulateMLKEM1024(const uint8_t *encapKey, int64_t encapKeyLen, uint8_t *sharedKey, int64_t sharedKeyLen, uint8_t *ciphertext, int64_t ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++int64_t go_decapsulateMLKEM768(const uint8_t *seed, int64_t seedLen, const uint8_t *ciphertext, int64_t ciphertextLen, uint8_t *sharedKey, int64_t sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++int64_t go_decapsulateMLKEM1024(const uint8_t *seed, int64_t seedLen, const uint8_t *ciphertext, int64_t ciphertextLen, uint8_t *sharedKey, int64_t sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++
++// ECDH
++int64_t go_generateKeyECDH(int32_t curveID, uint8_t *privateKey, int64_t privateKeyLen, uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++int64_t go_publicKeyFromPrivateECDH(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen, uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++int64_t go_ecdhSharedSecret(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen, const uint8_t *publicKey, int64_t publicKeyLen, uint8_t *sharedSecret, int64_t sharedSecretLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen), slice(sharedSecret, sharedSecretLen)));
++int64_t go_validatePrivateKeyECDH(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen)));
++int64_t go_validatePublicKeyECDH(int32_t curveID, const uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++
++// ECDSA
++int64_t go_generateKeyECDSA(int32_t curveID, uint8_t *x, int64_t xLen, uint8_t *y, int64_t yLen, uint8_t *d, int64_t dLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(d, dLen)));
++int64_t go_ecdsaSign(int32_t curveID, const uint8_t *d, int64_t dLen, const uint8_t *message, int64_t messageLen, uint8_t *signature, int64_t *signatureLen) __attribute__((noescape, nocallback, static, slice(d, dLen), slice(message, messageLen), slice(signature)));
++int64_t go_ecdsaVerify(int32_t curveID, const uint8_t *x, int64_t xLen, const uint8_t *y, int64_t yLen, const uint8_t *message, int64_t messageLen, const uint8_t *signature, int64_t signatureLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(message, messageLen), slice(signature, signatureLen)));
 +
 +#endif // _GO_CRYPTOKIT_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
@@ -20398,10 +21080,10 @@ index 00000000000000..abd4d7a9d85957
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
 new file mode 100644
-index 00000000000000..b40740a608e82c
+index 00000000000000..e6dcc68ca43e3b
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-@@ -0,0 +1,212 @@
+@@ -0,0 +1,252 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20422,37 +21104,45 @@ index 00000000000000..b40740a608e82c
 +void go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
 +void go_SHA512(const uint8_t*, size_t, const uint8_t*);
 +void* go_copyHMAC(int32_t, void*);
-+int go_decapsulateMLKEM1024(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
-+int go_decapsulateMLKEM768(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
-+int go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int, uint8_t*, int);
-+int go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int, uint8_t*, int);
-+int go_encapsulateMLKEM1024(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
-+int go_encapsulateMLKEM768(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
-+int go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+int go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int64_t go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int64_t go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_ecdsaSign(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t*);
++int64_t go_ecdsaVerify(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t);
++int64_t go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int64_t go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int64_t go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void go_freeHMAC(int32_t, void*);
++int64_t go_generateKeyECDH(int32_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_generateKeyECDSA(int32_t, uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +void go_generateKeyEd25519(uint8_t*);
-+int go_generateKeyMLKEM1024(uint8_t*, int);
-+int go_generateKeyMLKEM768(uint8_t*, int);
-+int go_hashBlockSize(int32_t);
++int64_t go_generateKeyMLKEM1024(uint8_t*, int64_t);
++int64_t go_generateKeyMLKEM768(uint8_t*, int64_t);
++int64_t go_hashBlockSize(int32_t);
 +void* go_hashCopy(int32_t, void*);
 +void go_hashFree(int32_t, void*);
 +void* go_hashNew(int32_t);
 +void go_hashReset(int32_t, void*);
-+int go_hashSize(int32_t);
++int64_t go_hashSize(int32_t);
 +void go_hashSum(int32_t, void*, uint8_t*);
-+void go_hashWrite(int32_t, void*, const uint8_t*, int);
-+void* go_initHMAC(int32_t, const uint8_t*, int);
-+int go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+int go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+int go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+int go_supportsMLKEM(void);
-+int go_supportsSHA3(void);
-+void go_updateHMAC(int32_t, void*, const uint8_t*, int);
-+int go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++void go_hashWrite(int32_t, void*, const uint8_t*, int64_t);
++void* go_initHMAC(int32_t, const uint8_t*, int64_t);
++int64_t go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++int64_t go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++int64_t go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int64_t go_supportsMLKEM(void);
++int64_t go_supportsSHA3(void);
++void go_updateHMAC(int32_t, void*, const uint8_t*, int64_t);
++int64_t go_validatePrivateKeyECDH(int32_t, const uint8_t*, int64_t);
++int64_t go_validatePublicKeyECDH(int32_t, const uint8_t*, int64_t);
++int64_t go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
 +
 +void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
 +	go_MD5(_arg0, _arg1, _arg2);
@@ -20490,43 +21180,55 @@ index 00000000000000..b40740a608e82c
 +	return go_copyHMAC(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, int _arg1, const uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++int64_t _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, int64_t _arg1, const uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
 +	return go_decapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, int _arg1, const uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++int64_t _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, int64_t _arg1, const uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
 +	return go_decapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++int64_t _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
 +	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
-+int _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3) {
++int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3) {
 +	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3) {
++int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3) {
 +	return go_deriveEncapsulationKeyMLKEM768(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++int64_t _mkcgo_go_ecdhSharedSecret(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t _arg6) {
++	return go_ecdhSharedSecret(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++int64_t _mkcgo_go_ecdsaSign(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t* _arg6) {
++	return go_ecdsaSign(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++int64_t _mkcgo_go_ecdsaVerify(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, const uint8_t* _arg5, int64_t _arg6, const uint8_t* _arg7, int64_t _arg8) {
++	return go_ecdsaVerify(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
++}
++
++int64_t _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
 +	return go_encapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, int _arg1, uint8_t* _arg2, int _arg3, uint8_t* _arg4, int _arg5) {
++int64_t _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
 +	return go_encapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++int64_t _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
 +	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
 +
-+int _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++int64_t _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
 +	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
-+int _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++int64_t _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
 +	return go_extractHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
@@ -20538,19 +21240,27 @@ index 00000000000000..b40740a608e82c
 +	go_freeHMAC(_arg0, _arg1);
 +}
 +
++int64_t _mkcgo_go_generateKeyECDH(int32_t _arg0, uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4) {
++	return go_generateKeyECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++int64_t _mkcgo_go_generateKeyECDSA(int32_t _arg0, uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t _arg6) {
++	return go_generateKeyECDSA(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
 +void _mkcgo_go_generateKeyEd25519(uint8_t* _arg0) {
 +	go_generateKeyEd25519(_arg0);
 +}
 +
-+int _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, int _arg1) {
++int64_t _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, int64_t _arg1) {
 +	return go_generateKeyMLKEM1024(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, int _arg1) {
++int64_t _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, int64_t _arg1) {
 +	return go_generateKeyMLKEM768(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_hashBlockSize(int32_t _arg0) {
++int64_t _mkcgo_go_hashBlockSize(int32_t _arg0) {
 +	return go_hashBlockSize(_arg0);
 +}
 +
@@ -20570,7 +21280,7 @@ index 00000000000000..b40740a608e82c
 +	go_hashReset(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_hashSize(int32_t _arg0) {
++int64_t _mkcgo_go_hashSize(int32_t _arg0) {
 +	return go_hashSize(_arg0);
 +}
 +
@@ -20578,48 +21288,60 @@ index 00000000000000..b40740a608e82c
 +	go_hashSum(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int _arg3) {
++void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int64_t _arg3) {
 +	go_hashWrite(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, int _arg2) {
++void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
 +	return go_initHMAC(_arg0, _arg1, _arg2);
 +}
 +
-+int _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
++int64_t _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
 +	return go_newPrivateKeyEd25519FromSeed(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
++int64_t _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
 +	return go_newPublicKeyEd25519(_arg0, _arg1);
 +}
 +
-+int _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
++int64_t _mkcgo_go_publicKeyFromPrivateECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4) {
++	return go_publicKeyFromPrivateECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++int64_t _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
 +	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int _mkcgo_go_supportsMLKEM(void) {
++int64_t _mkcgo_go_supportsMLKEM(void) {
 +	return go_supportsMLKEM();
 +}
 +
-+int _mkcgo_go_supportsSHA3(void) {
++int64_t _mkcgo_go_supportsSHA3(void) {
 +	return go_supportsSHA3();
 +}
 +
-+void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int _arg3) {
++void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int64_t _arg3) {
 +	go_updateHMAC(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
++int64_t _mkcgo_go_validatePrivateKeyECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
++	return go_validatePrivateKeyECDH(_arg0, _arg1, _arg2);
++}
++
++int64_t _mkcgo_go_validatePublicKeyECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
++	return go_validatePublicKeyECDH(_arg0, _arg1, _arg2);
++}
++
++int64_t _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
 +	return go_verifyEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
 new file mode 100644
-index 00000000000000..1c10846c2ff1aa
+index 00000000000000..c8915fe82be854
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,66 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20645,45 +21367,53 @@ index 00000000000000..1c10846c2ff1aa
 +void _mkcgo_go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
 +void _mkcgo_go_SHA512(const uint8_t*, size_t, const uint8_t*);
 +void* _mkcgo_go_copyHMAC(int32_t, void*);
-+int _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_decapsulateMLKEM768(const uint8_t*, int, const uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_encapsulateMLKEM768(const uint8_t*, int, uint8_t*, int, uint8_t*, int);
-+int _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+int _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int64_t _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_ecdsaSign(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t*);
++int64_t _mkcgo_go_ecdsaVerify(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t);
++int64_t _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int64_t _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++int64_t _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void _mkcgo_go_freeHMAC(int32_t, void*);
++int64_t _mkcgo_go_generateKeyECDH(int32_t, uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_generateKeyECDSA(int32_t, uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +void _mkcgo_go_generateKeyEd25519(uint8_t*);
-+int _mkcgo_go_generateKeyMLKEM1024(uint8_t*, int);
-+int _mkcgo_go_generateKeyMLKEM768(uint8_t*, int);
-+int _mkcgo_go_hashBlockSize(int32_t);
++int64_t _mkcgo_go_generateKeyMLKEM1024(uint8_t*, int64_t);
++int64_t _mkcgo_go_generateKeyMLKEM768(uint8_t*, int64_t);
++int64_t _mkcgo_go_hashBlockSize(int32_t);
 +void* _mkcgo_go_hashCopy(int32_t, void*);
 +void _mkcgo_go_hashFree(int32_t, void*);
 +void* _mkcgo_go_hashNew(int32_t);
 +void _mkcgo_go_hashReset(int32_t, void*);
-+int _mkcgo_go_hashSize(int32_t);
++int64_t _mkcgo_go_hashSize(int32_t);
 +void _mkcgo_go_hashSum(int32_t, void*, uint8_t*);
-+void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, int);
-+void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, int);
-+int _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+int _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+int _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+int _mkcgo_go_supportsMLKEM(void);
-+int _mkcgo_go_supportsSHA3(void);
-+void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, int);
-+int _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, int64_t);
++void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, int64_t);
++int64_t _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++int64_t _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++int64_t _mkcgo_go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, int64_t, uint8_t*, int64_t);
++int64_t _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++int64_t _mkcgo_go_supportsMLKEM(void);
++int64_t _mkcgo_go_supportsSHA3(void);
++void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, int64_t);
++int64_t _mkcgo_go_validatePrivateKeyECDH(int32_t, const uint8_t*, int64_t);
++int64_t _mkcgo_go_validatePublicKeyECDH(int32_t, const uint8_t*, int64_t);
++int64_t _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
 +
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..09987cf0da505f
+index 00000000000000..f70d3e374df468
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,234 @@
+@@ -0,0 +1,274 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20788,6 +21518,21 @@ index 00000000000000..09987cf0da505f
 +GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
 +
++TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_ecdhSharedSecret(SB)
++GLOBL   ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdhSharedSecret_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaSign_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_ecdsaSign(SB)
++GLOBL   ·_mkcgo_go_ecdsaSign_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_ecdsaSign_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaSign_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaVerify_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_ecdsaVerify(SB)
++GLOBL   ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaVerify_trampoline<>(SB)
++
 +TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_encapsulateMLKEM1024(SB)
 +GLOBL   ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20823,6 +21568,16 @@ index 00000000000000..09987cf0da505f
 +GLOBL   ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
 +
++TEXT _mkcgo_go_generateKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_generateKeyECDH(SB)
++GLOBL   ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyECDSA_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_generateKeyECDSA(SB)
++GLOBL   ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDSA_trampoline<>(SB)
++
 +TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_generateKeyEd25519(SB)
 +GLOBL   ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20893,6 +21648,11 @@ index 00000000000000..09987cf0da505f
 +GLOBL   ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_publicKeyFromPrivateECDH(SB)
++GLOBL   ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB)
++
 +TEXT _mkcgo_go_signEd25519_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_signEd25519(SB)
 +GLOBL   ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20913,6 +21673,16 @@ index 00000000000000..09987cf0da505f
 +GLOBL   ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
 +
++TEXT _mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_validatePrivateKeyECDH(SB)
++GLOBL   ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_validatePublicKeyECDH(SB)
++GLOBL   ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
++
 +TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_verifyEd25519(SB)
 +GLOBL   ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -20920,10 +21690,10 @@ index 00000000000000..09987cf0da505f
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..216f96f7a4d93d
+index 00000000000000..dab6985e7ff1ff
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,180 @@
+@@ -0,0 +1,212 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -20981,44 +21751,56 @@ index 00000000000000..216f96f7a4d93d
 +	return C._mkcgo_go_copyHMAC(C.int32_t(hashAlgorithm), ptr)
 +}
 +
-+func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
-+	return int32(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey))))
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	return int64(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey))))
++}
++
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	return int64(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey))))
 +}
 +
-+func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
-+	return int32(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey))))
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	return int64(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
 +}
 +
-+func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
-+	return int32(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey))))
 +}
 +
-+func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int32 {
-+	return int32(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey))))
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey))))
 +}
 +
-+func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int32 {
-+	return int32(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey))))
++func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
++	return int64(C._mkcgo_go_ecdhSharedSecret(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedSecret))), C.int64_t(len(sharedSecret))))
 +}
 +
-+func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
-+	return int32(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext))))
++func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_ecdsaSign(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.int64_t(len(d)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.int64_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.int64_t)(unsafe.Pointer(signatureLen))))
 +}
 +
-+func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
-+	return int32(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int(len(ciphertext))))
++func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_ecdsaVerify(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.int64_t(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.int64_t(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.int64_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.int64_t(len(signature))))
 +}
 +
-+func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
-+	return int32(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	return int64(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext))))
 +}
 +
-+func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int32 {
-+	return int32(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	return int64(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext))))
 +}
 +
-+func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int32 {
-+	return int32(C._mkcgo_go_extractHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(secret))), C.size_t(len(secret)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk))))
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	return int64(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++}
++
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
++	return int64(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
++}
++
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
++	return int64(C._mkcgo_go_extractHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(secret))), C.size_t(len(secret)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk))))
 +}
 +
 +func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
@@ -21029,20 +21811,28 @@ index 00000000000000..216f96f7a4d93d
 +	C._mkcgo_go_freeHMAC(C.int32_t(hashFunction), ptr)
 +}
 +
++func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
++}
++
++func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyECDSA(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.int64_t(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.int64_t(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.int64_t(len(d))))
++}
++
 +func GenerateKeyEd25519(key []uint8) {
 +	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
-+func GenerateKeyMLKEM1024(seed []uint8) int32 {
-+	return int32(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed))))
++func GenerateKeyMLKEM1024(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed))))
 +}
 +
-+func GenerateKeyMLKEM768(seed []uint8) int32 {
-+	return int32(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int(len(seed))))
++func GenerateKeyMLKEM768(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed))))
 +}
 +
-+func HashBlockSize(hashAlgorithm int32) int32 {
-+	return int32(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
++func HashBlockSize(hashAlgorithm int32) int64 {
++	return int64(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
 +}
 +
 +func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
@@ -21061,8 +21851,8 @@ index 00000000000000..216f96f7a4d93d
 +	C._mkcgo_go_hashReset(C.int32_t(hashAlgorithm), ptr)
 +}
 +
-+func HashSize(hashAlgorithm int32) int32 {
-+	return int32(C._mkcgo_go_hashSize(C.int32_t(hashAlgorithm)))
++func HashSize(hashAlgorithm int32) int64 {
++	return int64(C._mkcgo_go_hashSize(C.int32_t(hashAlgorithm)))
 +}
 +
 +func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
@@ -21070,46 +21860,58 @@ index 00000000000000..216f96f7a4d93d
 +}
 +
 +func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int(len(data)))
++	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int64_t(len(data)))
 +}
 +
 +func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
-+	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.int(len(key)))
++	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.int64_t(len(key)))
++}
++
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
++	return int64(C._mkcgo_go_newPrivateKeyEd25519FromSeed((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed)))))
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int32 {
-+	return int32(C._mkcgo_go_newPrivateKeyEd25519FromSeed((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed)))))
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
++	return int64(C._mkcgo_go_newPublicKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(pub)))))
 +}
 +
-+func NewPublicKeyEd25519(key []uint8, pub []uint8) int32 {
-+	return int32(C._mkcgo_go_newPublicKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(pub)))))
++func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_publicKeyFromPrivateECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
 +}
 +
-+func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int32 {
-+	return int32(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
++	return int64(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
 +}
 +
-+func SupportsMLKEM() int32 {
-+	return int32(C._mkcgo_go_supportsMLKEM())
++func SupportsMLKEM() int64 {
++	return int64(C._mkcgo_go_supportsMLKEM())
 +}
 +
-+func SupportsSHA3() int32 {
-+	return int32(C._mkcgo_go_supportsSHA3())
++func SupportsSHA3() int64 {
++	return int64(C._mkcgo_go_supportsSHA3())
 +}
 +
 +func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int(len(data)))
++	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int64_t(len(data)))
++}
++
++func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePrivateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey))))
++}
++
++func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
 +}
 +
-+func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int32 {
-+	return int32(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
++	return int64(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
 new file mode 100644
-index 00000000000000..fd6545f8830f04
+index 00000000000000..ca1fa1d6f9347e
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
-@@ -0,0 +1,62 @@
+@@ -0,0 +1,78 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21144,6 +21946,12 @@ index 00000000000000..fd6545f8830f04
 +#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
 +#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
 +#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo noescape _mkcgo_go_ecdhSharedSecret
++#cgo nocallback _mkcgo_go_ecdhSharedSecret
++#cgo noescape _mkcgo_go_ecdsaSign
++#cgo nocallback _mkcgo_go_ecdsaSign
++#cgo noescape _mkcgo_go_ecdsaVerify
++#cgo nocallback _mkcgo_go_ecdsaVerify
 +#cgo noescape _mkcgo_go_encapsulateMLKEM1024
 +#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
 +#cgo noescape _mkcgo_go_encapsulateMLKEM768
@@ -21151,6 +21959,10 @@ index 00000000000000..fd6545f8830f04
 +#cgo noescape _mkcgo_go_finalizeHMAC
 +#cgo nocallback _mkcgo_go_finalizeHMAC
 +#cgo nocallback _mkcgo_go_freeHMAC
++#cgo noescape _mkcgo_go_generateKeyECDH
++#cgo nocallback _mkcgo_go_generateKeyECDH
++#cgo noescape _mkcgo_go_generateKeyECDSA
++#cgo nocallback _mkcgo_go_generateKeyECDSA
 +#cgo noescape _mkcgo_go_generateKeyMLKEM1024
 +#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
 +#cgo noescape _mkcgo_go_generateKeyMLKEM768
@@ -21166,18 +21978,24 @@ index 00000000000000..fd6545f8830f04
 +#cgo noescape _mkcgo_go_hashWrite
 +#cgo nocallback _mkcgo_go_hashWrite
 +#cgo nocallback _mkcgo_go_initHMAC
++#cgo noescape _mkcgo_go_publicKeyFromPrivateECDH
++#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
 +#cgo nocallback _mkcgo_go_supportsMLKEM
 +#cgo nocallback _mkcgo_go_supportsSHA3
 +#cgo noescape _mkcgo_go_updateHMAC
 +#cgo nocallback _mkcgo_go_updateHMAC
++#cgo noescape _mkcgo_go_validatePrivateKeyECDH
++#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
++#cgo noescape _mkcgo_go_validatePublicKeyECDH
++#cgo nocallback _mkcgo_go_validatePublicKeyECDH
 +*/
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
 new file mode 100644
-index 00000000000000..c218dda01a5abd
+index 00000000000000..a02dbe35686dc7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,281 @@
+@@ -0,0 +1,337 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21208,6 +22026,9 @@ index 00000000000000..c218dda01a5abd
 +//go:linkname go_decryptAESGCM go_decryptAESGCM
 +//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
 +//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
++//go:linkname go_ecdhSharedSecret go_ecdhSharedSecret
++//go:linkname go_ecdsaSign go_ecdsaSign
++//go:linkname go_ecdsaVerify go_ecdsaVerify
 +//go:linkname go_encapsulateMLKEM1024 go_encapsulateMLKEM1024
 +//go:linkname go_encapsulateMLKEM768 go_encapsulateMLKEM768
 +//go:linkname go_encryptAESGCM go_encryptAESGCM
@@ -21215,6 +22036,8 @@ index 00000000000000..c218dda01a5abd
 +//go:linkname go_extractHKDF go_extractHKDF
 +//go:linkname go_finalizeHMAC go_finalizeHMAC
 +//go:linkname go_freeHMAC go_freeHMAC
++//go:linkname go_generateKeyECDH go_generateKeyECDH
++//go:linkname go_generateKeyECDSA go_generateKeyECDSA
 +//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
 +//go:linkname go_generateKeyMLKEM1024 go_generateKeyMLKEM1024
 +//go:linkname go_generateKeyMLKEM768 go_generateKeyMLKEM768
@@ -21229,10 +22052,13 @@ index 00000000000000..c218dda01a5abd
 +//go:linkname go_initHMAC go_initHMAC
 +//go:linkname go_newPrivateKeyEd25519FromSeed go_newPrivateKeyEd25519FromSeed
 +//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
++//go:linkname go_publicKeyFromPrivateECDH go_publicKeyFromPrivateECDH
 +//go:linkname go_signEd25519 go_signEd25519
 +//go:linkname go_supportsMLKEM go_supportsMLKEM
 +//go:linkname go_supportsSHA3 go_supportsSHA3
 +//go:linkname go_updateHMAC go_updateHMAC
++//go:linkname go_validatePrivateKeyECDH go_validatePrivateKeyECDH
++//go:linkname go_validatePublicKeyECDH go_validatePublicKeyECDH
 +//go:linkname go_verifyEd25519 go_verifyEd25519
 +
 +var go_MD5 byte
@@ -21249,6 +22075,9 @@ index 00000000000000..c218dda01a5abd
 +var go_decryptAESGCM byte
 +var go_deriveEncapsulationKeyMLKEM1024 byte
 +var go_deriveEncapsulationKeyMLKEM768 byte
++var go_ecdhSharedSecret byte
++var go_ecdsaSign byte
++var go_ecdsaVerify byte
 +var go_encapsulateMLKEM1024 byte
 +var go_encapsulateMLKEM768 byte
 +var go_encryptAESGCM byte
@@ -21256,6 +22085,8 @@ index 00000000000000..c218dda01a5abd
 +var go_extractHKDF byte
 +var go_finalizeHMAC byte
 +var go_freeHMAC byte
++var go_generateKeyECDH byte
++var go_generateKeyECDSA byte
 +var go_generateKeyEd25519 byte
 +var go_generateKeyMLKEM1024 byte
 +var go_generateKeyMLKEM768 byte
@@ -21270,10 +22101,13 @@ index 00000000000000..c218dda01a5abd
 +var go_initHMAC byte
 +var go_newPrivateKeyEd25519FromSeed byte
 +var go_newPublicKeyEd25519 byte
++var go_publicKeyFromPrivateECDH byte
 +var go_signEd25519 byte
 +var go_supportsMLKEM byte
 +var go_supportsSHA3 byte
 +var go_updateHMAC byte
++var go_validatePrivateKeyECDH byte
++var go_validatePublicKeyECDH byte
 +var go_verifyEd25519 byte
 +
 +func MD5(inputPointer []uint8, outputPointer []uint8) {
@@ -21313,54 +22147,69 @@ index 00000000000000..c218dda01a5abd
 +	return unsafe.Pointer(r0)
 +}
 +
-+func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int32 {
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int32 {
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int32 {
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int32 {
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
-+	return int32(r0)
++	return int64(r0)
++}
++
++func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdhSharedSecret)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedSecret))), uintptr(len(sharedSecret)))
++	return int64(r0)
++}
++
++func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaSign)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
 +}
 +
-+func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaVerify)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
++
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int32 {
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int32 {
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int32 {
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_expandHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)), uintptr(unsafe.Pointer(unsafe.SliceData(info))), uintptr(len(info)), uintptr(unsafe.Pointer(unsafe.SliceData(okm))), uintptr(len(okm)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int32 {
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_extractHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(secret))), uintptr(len(secret)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
 +func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
@@ -21371,23 +22220,33 @@ index 00000000000000..c218dda01a5abd
 +	syscallN(0, uintptr(unsafe.Pointer(&go_freeHMAC)), uintptr(hashFunction), uintptr(ptr))
 +}
 +
++func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDSA)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)))
++	return int64(r0)
++}
++
 +func GenerateKeyEd25519(key []uint8) {
 +	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
-+func GenerateKeyMLKEM1024(seed []uint8) int32 {
++func GenerateKeyMLKEM1024(seed []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func GenerateKeyMLKEM768(seed []uint8) int32 {
++func GenerateKeyMLKEM768(seed []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func HashBlockSize(hashAlgorithm int32) int32 {
++func HashBlockSize(hashAlgorithm int32) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashBlockSize)), uintptr(hashAlgorithm))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
 +func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
@@ -21408,9 +22267,9 @@ index 00000000000000..c218dda01a5abd
 +	syscallN(0, uintptr(unsafe.Pointer(&go_hashReset)), uintptr(hashAlgorithm), uintptr(ptr))
 +}
 +
-+func HashSize(hashAlgorithm int32) int32 {
++func HashSize(hashAlgorithm int32) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashSize)), uintptr(hashAlgorithm))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
 +func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
@@ -21426,45 +22285,60 @@ index 00000000000000..c218dda01a5abd
 +	return unsafe.Pointer(r0)
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int32 {
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPrivateKeyEd25519FromSeed)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(seed))))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func NewPublicKeyEd25519(key []uint8, pub []uint8) int32 {
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPublicKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(pub))))
-+	return int32(r0)
++	return int64(r0)
++}
++
++func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_publicKeyFromPrivateECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
 +}
 +
-+func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int32 {
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sigBuffer))))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func SupportsMLKEM() int32 {
++func SupportsMLKEM() int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLKEM)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
-+func SupportsSHA3() int32 {
++func SupportsSHA3() int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsSHA3)))
-+	return int32(r0)
++	return int64(r0)
 +}
 +
 +func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
 +	syscallN(0, uintptr(unsafe.Pointer(&go_updateHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
 +}
 +
-+func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int32 {
++func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePrivateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)))
++	return int64(r0)
++}
++
++func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sig))))
-+	return int32(r0)
++	return int64(r0)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
 new file mode 100644
-index 00000000000000..9f69a4428ed1ef
+index 00000000000000..c8ec9a8ddffc52
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-@@ -0,0 +1,178 @@
+@@ -0,0 +1,275 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -21475,15 +22349,29 @@ index 00000000000000..9f69a4428ed1ef
 +
 +//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
 +//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
 +//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
@@ -21498,11 +22386,16 @@ index 00000000000000..9f69a4428ed1ef
 +//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
@@ -21534,6 +22427,73 @@ index 00000000000000..9f69a4428ed1ef
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
@@ -21613,20 +22573,29 @@ index 00000000000000..9f69a4428ed1ef
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
++//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
 +//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
 +//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
 +//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
 +//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
 +//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
 +//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
 +//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic ___chkstk_darwin ___chkstk_darwin ""
@@ -21634,6 +22603,8 @@ index 00000000000000..9f69a4428ed1ef
 +//go:cgo_import_dynamic memset memset ""
 +//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
 +//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
++//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
 +//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
 +//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
 +//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
@@ -21645,10 +22616,10 @@ index 00000000000000..9f69a4428ed1ef
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
 new file mode 100644
-index 00000000000000..7d0a89fb7be3a0
+index 00000000000000..ecb3cd3a9e3946
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-@@ -0,0 +1,177 @@
+@@ -0,0 +1,274 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -21659,15 +22630,29 @@ index 00000000000000..7d0a89fb7be3a0
 +
 +//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
 +//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
 +//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
 +//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
@@ -21682,11 +22667,16 @@ index 00000000000000..7d0a89fb7be3a0
 +//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
 +//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
@@ -21718,6 +22708,73 @@ index 00000000000000..7d0a89fb7be3a0
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
 +//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
@@ -21797,26 +22854,37 @@ index 00000000000000..7d0a89fb7be3a0
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
++//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
 +//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
 +//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
 +//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
 +//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
 +//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
 +//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
 +//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic __chkstk_darwin __chkstk_darwin "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic memcpy memcpy ""
 +//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
 +//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
++//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
 +//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
 +//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
 +//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
@@ -21843,10 +22911,10 @@ index 00000000000000..74ee18d383784e
 +//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
 new file mode 100644
-index 00000000000000..1b9d829305a142
+index 00000000000000..e1ba0ec484288f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
-@@ -0,0 +1,111 @@
+@@ -0,0 +1,107 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21885,7 +22953,6 @@ index 00000000000000..1b9d829305a142
 +  kSecKeyOperationTypeVerify = 1,
 +  kSecKeyOperationTypeEncrypt = 2,
 +  kSecKeyOperationTypeDecrypt = 3,
-+  kSecKeyOperationTypeKeyExchange = 4
 +} SecKeyOperationType;
 +
 +typedef enum {
@@ -21898,14 +22965,12 @@ index 00000000000000..1b9d829305a142
 +
 +extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
 +extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyTypeECSECPrimeRandom __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmECDHKeyExchangeStandard __attribute__((framework(Security, A)));
 +// PSS
 +extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
 +extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
@@ -21936,7 +23001,6 @@ index 00000000000000..1b9d829305a142
 +SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((framework(Security, A)));
 +SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
 +CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCopyKeyExchangeResult(SecKeyRef privateKey, SecKeyAlgorithm algorithm, SecKeyRef publicKey, CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
 +CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((framework(Security, A)));
 +CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((framework(Security, A)));
 +CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((framework(Security, A)));
@@ -21986,10 +23050,10 @@ index 00000000000000..a432803a70b27b
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
 new file mode 100644
-index 00000000000000..868f4b8367066d
+index 00000000000000..a74278d02fd6ef
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
-@@ -0,0 +1,132 @@
+@@ -0,0 +1,127 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22014,7 +23078,6 @@ index 00000000000000..868f4b8367066d
 +const char* CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
 +CFIndex CFStringGetLength(CFStringRef);
 +CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
-+CFDataRef SecKeyCopyKeyExchangeResult(SecKeyRef, SecKeyAlgorithm, SecKeyRef, CFDictionaryRef, CFErrorRef*);
 +SecKeyRef SecKeyCopyPublicKey(SecKeyRef);
 +CFDataRef SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
 +CFDataRef SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
@@ -22078,10 +23141,6 @@ index 00000000000000..868f4b8367066d
 +	return SecKeyCopyExternalRepresentation(_arg0, _arg1);
 +}
 +
-+CFDataRef _mkcgo_SecKeyCopyKeyExchangeResult(SecKeyRef _arg0, SecKeyAlgorithm _arg1, SecKeyRef _arg2, CFDictionaryRef _arg3, CFErrorRef* _arg4) {
-+	return SecKeyCopyKeyExchangeResult(_arg0, _arg1, _arg2, _arg3, _arg4);
-+}
-+
 +SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef _arg0) {
 +	return SecKeyCopyPublicKey(_arg0);
 +}
@@ -22124,10 +23183,10 @@ index 00000000000000..868f4b8367066d
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
 new file mode 100644
-index 00000000000000..1e9549ee9136bc
+index 00000000000000..edafb365383aca
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
-@@ -0,0 +1,22 @@
+@@ -0,0 +1,21 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22136,11 +23195,10 @@ index 00000000000000..1e9549ee9136bc
 +package security
 +
 +const (
-+	KSecKeyOperationTypeSign        SecKeyOperationType = 0
-+	KSecKeyOperationTypeVerify      SecKeyOperationType = 1
-+	KSecKeyOperationTypeEncrypt     SecKeyOperationType = 2
-+	KSecKeyOperationTypeDecrypt     SecKeyOperationType = 3
-+	KSecKeyOperationTypeKeyExchange SecKeyOperationType = 4
++	KSecKeyOperationTypeSign    SecKeyOperationType = 0
++	KSecKeyOperationTypeVerify  SecKeyOperationType = 1
++	KSecKeyOperationTypeEncrypt SecKeyOperationType = 2
++	KSecKeyOperationTypeDecrypt SecKeyOperationType = 3
 +)
 +
 +const (
@@ -22152,10 +23210,10 @@ index 00000000000000..1e9549ee9136bc
 +)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
 new file mode 100644
-index 00000000000000..6f768f53e5acec
+index 00000000000000..aa728f26dce676
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
-@@ -0,0 +1,104 @@
+@@ -0,0 +1,100 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22186,14 +23244,12 @@ index 00000000000000..6f768f53e5acec
 +
 +extern const CFAllocatorRef kCFAllocatorDefault;
 +extern const SecRandomRef kSecRandomDefault;
-+extern const CFStringRef kSecAttrKeyTypeECSECPrimeRandom;
 +extern const CFStringRef kSecAttrKeyTypeRSA;
 +extern const CFStringRef kSecAttrKeyClassPublic;
 +extern const CFStringRef kSecAttrKeyClassPrivate;
 +extern const CFStringRef kSecAttrKeyType;
 +extern const CFStringRef kSecAttrKeySizeInBits;
 +extern const CFStringRef kSecAttrKeyClass;
-+extern const CFStringRef kSecKeyAlgorithmECDHKeyExchangeStandard;
 +extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1;
 +extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224;
 +extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256;
@@ -22219,7 +23275,6 @@ index 00000000000000..6f768f53e5acec
 +	kSecKeyOperationTypeVerify = 1,
 +	kSecKeyOperationTypeEncrypt = 2,
 +	kSecKeyOperationTypeDecrypt = 3,
-+	kSecKeyOperationTypeKeyExchange = 4,
 +} SecKeyOperationType;
 +
 +typedef enum {
@@ -22247,7 +23302,6 @@ index 00000000000000..6f768f53e5acec
 +const char* _mkcgo_CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
 +CFIndex _mkcgo_CFStringGetLength(CFStringRef);
 +CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
-+CFDataRef _mkcgo_SecKeyCopyKeyExchangeResult(SecKeyRef, SecKeyAlgorithm, SecKeyRef, CFDictionaryRef, CFErrorRef*);
 +SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef);
 +CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
 +CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
@@ -22262,10 +23316,10 @@ index 00000000000000..6f768f53e5acec
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
 new file mode 100644
-index 00000000000000..d4277c09fea06f
+index 00000000000000..34df853d28c0cf
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
-@@ -0,0 +1,154 @@
+@@ -0,0 +1,149 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22365,11 +23419,6 @@ index 00000000000000..d4277c09fea06f
 +GLOBL   ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
 +
-+TEXT _mkcgo_SecKeyCopyKeyExchangeResult_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCopyKeyExchangeResult(SB)
-+GLOBL   ·_mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyKeyExchangeResult_trampoline<>(SB)
-+
 +TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_SecKeyCopyPublicKey(SB)
 +GLOBL   ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -22422,10 +23471,10 @@ index 00000000000000..d4277c09fea06f
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 new file mode 100644
-index 00000000000000..df606bd23d00e8
+index 00000000000000..44a61506bca9be
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
-@@ -0,0 +1,390 @@
+@@ -0,0 +1,368 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22445,14 +23494,12 @@ index 00000000000000..df606bd23d00e8
 +
 +//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
 +//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeECSECPrimeRandom kSecAttrKeyTypeECSECPrimeRandom "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard kSecKeyAlgorithmECDHKeyExchangeStandard "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
@@ -22475,14 +23522,12 @@ index 00000000000000..df606bd23d00e8
 +
 +//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
 +//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
-+//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
 +//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
 +//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
 +//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
 +//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
 +//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
 +//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
@@ -22506,14 +23551,12 @@ index 00000000000000..df606bd23d00e8
 +var (
 +	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
 +	_mkcgo_kSecRandomDefault                                SecRandomRef
-+	_mkcgo_kSecAttrKeyTypeECSECPrimeRandom                  CFStringRef
 +	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
 +	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
 +	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
 +	_mkcgo_kSecAttrKeyType                                  CFStringRef
 +	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
 +	_mkcgo_kSecAttrKeyClass                                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
@@ -22542,11 +23585,6 @@ index 00000000000000..df606bd23d00e8
 +func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
 +
 +//go:noinline
-+func _mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom() *CFStringRef {
-+	return &_mkcgo_kSecAttrKeyTypeECSECPrimeRandom
-+}
-+
-+//go:noinline
 +func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
 +
 +//go:noinline
@@ -22565,11 +23603,6 @@ index 00000000000000..df606bd23d00e8
 +func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
 +
 +//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
-+}
-+
-+//go:noinline
 +func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
 +	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
 +}
@@ -22667,14 +23700,12 @@ index 00000000000000..df606bd23d00e8
 +var (
 +	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
 +	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
-+	KSecAttrKeyTypeECSECPrimeRandom                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom()
 +	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
 +	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
 +	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
 +	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
 +	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
 +	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
-+	KSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
@@ -22773,10 +23804,6 @@ index 00000000000000..df606bd23d00e8
 +	return C._mkcgo_SecKeyCopyExternalRepresentation(key, __error)
 +}
 +
-+func SecKeyCopyKeyExchangeResult(privateKey SecKeyRef, algorithm SecKeyAlgorithm, publicKey SecKeyRef, parameters CFDictionaryRef, __error *CFErrorRef) CFDataRef {
-+	return C._mkcgo_SecKeyCopyKeyExchangeResult(privateKey, algorithm, publicKey, parameters, __error)
-+}
-+
 +func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
 +	return C._mkcgo_SecKeyCopyPublicKey(key)
 +}
@@ -22857,10 +23884,10 @@ index 00000000000000..3001e7040e80f1
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
 new file mode 100644
-index 00000000000000..40afcdb1096176
+index 00000000000000..b10738f5d6ec26
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
-@@ -0,0 +1,479 @@
+@@ -0,0 +1,453 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22899,14 +23926,12 @@ index 00000000000000..40afcdb1096176
 +
 +//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
 +//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeECSECPrimeRandom kSecAttrKeyTypeECSECPrimeRandom "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard kSecKeyAlgorithmECDHKeyExchangeStandard "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
@@ -22929,14 +23954,12 @@ index 00000000000000..40afcdb1096176
 +
 +//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
 +//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
-+//go:linkname _mkcgo_kSecAttrKeyTypeECSECPrimeRandom _mkcgo_kSecAttrKeyTypeECSECPrimeRandom
 +//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
 +//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
 +//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
 +//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
 +//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
 +//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard _mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
 +//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
@@ -22960,14 +23983,12 @@ index 00000000000000..40afcdb1096176
 +var (
 +	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
 +	_mkcgo_kSecRandomDefault                                SecRandomRef
-+	_mkcgo_kSecAttrKeyTypeECSECPrimeRandom                  CFStringRef
 +	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
 +	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
 +	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
 +	_mkcgo_kSecAttrKeyType                                  CFStringRef
 +	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
 +	_mkcgo_kSecAttrKeyClass                                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
 +	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
@@ -22996,11 +24017,6 @@ index 00000000000000..40afcdb1096176
 +func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
 +
 +//go:noinline
-+func _mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom() *CFStringRef {
-+	return &_mkcgo_kSecAttrKeyTypeECSECPrimeRandom
-+}
-+
-+//go:noinline
 +func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
 +
 +//go:noinline
@@ -23019,11 +24035,6 @@ index 00000000000000..40afcdb1096176
 +func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
 +
 +//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmECDHKeyExchangeStandard
-+}
-+
-+//go:noinline
 +func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
 +	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
 +}
@@ -23121,14 +24132,12 @@ index 00000000000000..40afcdb1096176
 +var (
 +	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
 +	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
-+	KSecAttrKeyTypeECSECPrimeRandom                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeECSECPrimeRandom()
 +	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
 +	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
 +	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
 +	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
 +	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
 +	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
-+	KSecKeyAlgorithmECDHKeyExchangeStandard          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDHKeyExchangeStandard()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
 +	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
@@ -23163,7 +24172,6 @@ index 00000000000000..40afcdb1096176
 +//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
 +//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
 +//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyKeyExchangeResult SecKeyCopyKeyExchangeResult "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
 +//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
@@ -23264,13 +24272,6 @@ index 00000000000000..40afcdb1096176
 +	return CFDataRef(r0)
 +}
 +
-+var _mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr uintptr
-+
-+func SecKeyCopyKeyExchangeResult(privateKey SecKeyRef, algorithm SecKeyAlgorithm, publicKey SecKeyRef, parameters CFDictionaryRef, __error *CFErrorRef) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCopyKeyExchangeResult_trampoline_addr, uintptr(privateKey), uintptr(algorithm), uintptr(publicKey), uintptr(parameters), uintptr(unsafe.Pointer(__error)))
-+	return CFDataRef(r0)
-+}
-+
 +var _mkcgo_SecKeyCopyPublicKey_trampoline_addr uintptr
 +
 +func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
@@ -23751,10 +24752,10 @@ index 00000000000000..c27d6db4fe472a
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
 new file mode 100644
-index 00000000000000..e57bde33af4c98
+index 00000000000000..b14fc4ddb1c235
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
-@@ -0,0 +1,32 @@
+@@ -0,0 +1,39 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23762,16 +24763,21 @@ index 00000000000000..e57bde33af4c98
 +
 +package xcrypto
 +
-+func curveToKeySizeInBits(curve string) int {
++import "errors"
++
++// curveToID maps a curve name to its corresponding CryptoKit curve ID.
++func curveToID(curve string) (int32, error) {
 +	switch curve {
 +	case "P-256":
-+		return 256
++		return 1, nil
 +	case "P-384":
-+		return 384
++		return 2, nil
 +	case "P-521":
-+		return 521
++		return 3, nil
++	case "X25519":
++		return 0, nil
 +	default:
-+		return 0
++		return -1, errors.New("unsupported curve")
 +	}
 +}
 +
@@ -23783,16 +24789,18 @@ index 00000000000000..e57bde33af4c98
 +		return (384 + 7) / 8
 +	case "P-521":
 +		return (521 + 7) / 8
++	case "X25519":
++		return 32
 +	default:
 +		return 0
 +	}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
 new file mode 100644
-index 00000000000000..9daa170f75ad81
+index 00000000000000..d59db1be807ac5
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
-@@ -0,0 +1,135 @@
+@@ -0,0 +1,146 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23802,98 +24810,106 @@ index 00000000000000..9daa170f75ad81
 +
 +import (
 +	"errors"
-+	"runtime"
 +	"slices"
-+	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/security"
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
 +type PublicKeyECDH struct {
-+	_pkey security.SecKeyRef
 +	bytes []byte
 +}
 +
-+func (k *PublicKeyECDH) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
-+	}
-+}
-+
 +type PrivateKeyECDH struct {
-+	_pkey security.SecKeyRef
 +	pub   []byte
-+}
-+
-+func (k *PrivateKeyECDH) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
-+	}
++	priv  []byte // For X25519: the actual private key bytes
++	curve string // Track the curve type
 +}
 +
 +func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
 +	if len(bytes) < 1 {
 +		return nil, errors.New("NewPublicKeyECDH: missing key")
 +	}
-+	pubKeyRef, err := createSecKeyWithData(bytes, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPublic)
++
++	curveID, err := curveToID(curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	pubKey := &PublicKeyECDH{pubKeyRef, slices.Clone(bytes)}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
-+	return pubKey, nil
++
++	// Validate the public key
++	ret := cryptokit.ValidatePublicKeyECDH(curveID, bytes)
++	if ret != 0 {
++		return nil, errors.New("invalid public key")
++	}
++
++	// For all curves (including EC curves), we just store the bytes
++	// X25519 uses raw 32-byte format
++	// EC curves use uncompressed X9.63 format (0x04 || x || y)
++	return &PublicKeyECDH{bytes: slices.Clone(bytes)}, nil
 +}
 +
 +func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
 +
 +// bytes expects the public key to be in uncompressed ANSI X9.63 format
-+func NewPrivateKeyECDH(curve string, pub, priv []byte) (*PrivateKeyECDH, error) {
-+	key := append(slices.Clone(pub), priv...)
-+	privKeyRef, err := createSecKeyWithData(key, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPrivate)
++func NewPrivateKeyECDH(curve string, priv []byte) (*PrivateKeyECDH, error) {
++	curveID, err := curveToID(curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	privKey := &PrivateKeyECDH{privKeyRef, pub}
-+	runtime.SetFinalizer(privKey, (*PrivateKeyECDH).finalize)
++
++	// Validate the private key
++	ret := cryptokit.ValidatePrivateKeyECDH(curveID, priv)
++	if ret != 0 {
++		return nil, errors.New("invalid private key")
++	}
++
++	// Derive the public key
++	keySize := curveToKeySizeInBytes(curve)
++	var pubKeySize int
++	if curve == "X25519" {
++		pubKeySize = 32
++	} else {
++		pubKeySize = 1 + keySize*2
++	}
++
++	publicKey := make([]byte, pubKeySize)
++	ret = cryptokit.PublicKeyFromPrivateECDH(curveID, priv, publicKey)
++	if ret != 0 {
++		return nil, errors.New("failed to derive public key")
++	}
++
++	privKey := &PrivateKeyECDH{
++		pub:   publicKey,
++		priv:  slices.Clone(priv),
++		curve: curve,
++	}
 +	return privKey, nil
 +}
 +
 +func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
-+	defer runtime.KeepAlive(k)
-+	pubKeyRef := security.SecKeyCopyPublicKey(k._pkey)
-+	if pubKeyRef == nil {
-+		return nil, errors.New("failed to extract public key")
-+	}
-+	pubKey := &PublicKeyECDH{pubKeyRef, k.pub}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDH).finalize)
-+	return pubKey, nil
++	// For all curves, just return the stored public key bytes
++	return &PublicKeyECDH{
++		bytes: slices.Clone(k.pub),
++	}, nil
 +}
 +
 +func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
-+	defer runtime.KeepAlive(priv)
-+	defer runtime.KeepAlive(pub)
-+
-+	var algorithm = security.KSecKeyAlgorithmECDHKeyExchangeStandard
-+	supported := security.SecKeyIsAlgorithmSupported(priv._pkey, security.KSecKeyOperationTypeKeyExchange, algorithm)
-+	if supported == 0 {
-+		return nil, errors.New("ECDH algorithm not supported for the given private key")
++	if priv == nil || pub == nil {
++		return nil, errors.New("invalid keys")
 +	}
 +
-+	var cfErr security.CFErrorRef
-+	// Perform the key exchange
-+	sharedSecretRef := security.SecKeyCopyKeyExchangeResult(
-+		priv._pkey,
-+		algorithm,
-+		pub._pkey,
-+		security.CFDictionaryRef(unsafe.Pointer(uintptr(0))),
-+		&cfErr,
-+	)
-+	if err := goCFErrorRef(cfErr); err != nil {
++	curveID, err := curveToID(priv.curve)
++	if err != nil {
 +		return nil, err
 +	}
-+	defer security.CFRelease(security.CFTypeRef(sharedSecretRef))
 +
-+	sharedSecret := cfDataToBytes(sharedSecretRef)
++	keySize := curveToKeySizeInBytes(priv.curve)
++	sharedSecret := make([]byte, keySize)
++
++	ret := cryptokit.EcdhSharedSecret(curveID, priv.priv, pub.bytes, sharedSecret)
++	if ret != 0 {
++		return nil, errors.New("ECDH: key exchange failed")
++	}
++
 +	return sharedSecret, nil
 +}
 +
@@ -23902,38 +24918,41 @@ index 00000000000000..9daa170f75ad81
 +	if keySize == 0 {
 +		return nil, nil, errors.New("unsupported curve")
 +	}
-+	keySizeInBits := curveToKeySizeInBits(curve)
-+	// Generate the private key and get its DER representation
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++
++	curveID, err := curveToID(curve)
 +	if err != nil {
 +		return nil, nil, err
 +	}
-+	pub, priv, err := extractECDHComponents(privKeyDER, keySize)
-+	if err != nil {
-+		security.CFRelease(security.CFTypeRef(privKeyRef))
-+		return nil, nil, err
++
++	var pubKeySize int
++	if curve == "X25519" {
++		pubKeySize = 32
++	} else {
++		pubKeySize = 1 + keySize*2
 +	}
-+	k := &PrivateKeyECDH{privKeyRef, pub}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
-+	return k, priv, nil
-+}
 +
-+func extractECDHComponents(der []byte, keySize int) (pub, priv []byte, err error) {
-+	// The private component is the last of the three equally-sized chunks
-+	// for the elliptic curve private key.
-+	if len(der) != 1+keySize*3 {
-+		return nil, nil, errors.New("invalid key length: insufficient data for private component")
++	privateKey := make([]byte, keySize)
++	publicKey := make([]byte, pubKeySize)
++
++	ret := cryptokit.GenerateKeyECDH(curveID, privateKey, publicKey)
++	if ret != 0 {
++		return nil, nil, errors.New("EC key generation failed")
 +	}
-+	pub = der[:1+keySize*2]
-+	priv = der[1+keySize*2:]
-+	return
++
++	// Store the public key in X9.63 format and the private key
++	k := &PrivateKeyECDH{
++		pub:   slices.Clone(publicKey),
++		priv:  slices.Clone(privateKey),
++		curve: curve,
++	}
++	return k, slices.Clone(privateKey), nil
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
 new file mode 100644
-index 00000000000000..1d92197e4d16e0
+index 00000000000000..82d68bfabe9c62
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
-@@ -0,0 +1,181 @@
+@@ -0,0 +1,154 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23943,39 +24962,21 @@ index 00000000000000..1d92197e4d16e0
 +
 +import (
 +	"errors"
-+	"runtime"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/security"
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
 +)
 +
 +type PrivateKeyECDSA struct {
-+	_pkey security.SecKeyRef
-+}
-+
-+func (k *PrivateKeyECDSA) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
-+	}
-+}
-+
-+func (k *PrivateKeyECDSA) withKey(f func(security.SecKeyRef) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++	x     BigInt // public key x coordinate
++	y     BigInt // public key y coordinate
++	d     BigInt // private key
++	curve string // curve name
 +}
 +
 +type PublicKeyECDSA struct {
-+	_pkey security.SecKeyRef
-+}
-+
-+func (k *PublicKeyECDSA) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
-+	}
-+}
-+
-+func (k *PublicKeyECDSA) withKey(f func(security.SecKeyRef) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++	x     BigInt // public key x coordinate
++	y     BigInt // public key y coordinate
++	curve string // curve name
 +}
 +
 +func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
@@ -23983,18 +24984,15 @@ index 00000000000000..1d92197e4d16e0
 +	if keySize == 0 {
 +		return nil, errors.New("unsupported curve")
 +	}
-+	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, nil, keySize)
-+	if err != nil {
-+		return nil, errors.New("failed to encode public key to uncompressed ANSI X9.63 format")
++	// Validate that x and y are of appropriate length
++	if len(x) > keySize || len(y) > keySize {
++		return nil, errors.New("public key coordinates are too large")
 +	}
-+
-+	pubKeyRef, err := createSecKeyWithData(encodedKey, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPublic)
-+	if err != nil {
-+		return nil, err
++	pubKey := &PublicKeyECDSA{
++		x:     x,
++		y:     y,
++		curve: curve,
 +	}
-+
-+	pubKey := &PublicKeyECDSA{_pkey: pubKeyRef}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyECDSA).finalize)
 +	return pubKey, nil
 +}
 +
@@ -24004,20 +25002,17 @@ index 00000000000000..1d92197e4d16e0
 +	if keySize == 0 {
 +		return nil, errors.New("unsupported curve")
 +	}
-+	encodedKey, err := encodeToUncompressedAnsiX963Key(x, y, d, keySize)
-+	if err != nil {
-+		return nil, errors.New("crypto/ecdsa: failed to encode private key: " + err.Error())
++	// Validate that x, y, and d are of appropriate length
++	if len(x) > keySize || len(y) > keySize || len(d) > keySize {
++		return nil, errors.New("key parameters are too large")
 +	}
-+
-+	privKeyRef, err := createSecKeyWithData(encodedKey, security.KSecAttrKeyTypeECSECPrimeRandom, security.KSecAttrKeyClassPrivate)
-+	if err != nil {
-+		return nil, err
++	privKey := &PrivateKeyECDSA{
++		x:     x,
++		y:     y,
++		d:     d,
++		curve: curve,
 +	}
-+
-+	// Wrap and finalize
-+	k := &PrivateKeyECDSA{_pkey: privKeyRef}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
-+	return k, nil
++	return privKey, nil
 +}
 +
 +func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
@@ -24026,59 +25021,83 @@ index 00000000000000..1d92197e4d16e0
 +		return nil, nil, nil, errors.New("unsupported curve")
 +	}
 +
-+	keySizeInBits := curveToKeySizeInBits(curve)
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeECSECPrimeRandom, keySizeInBits)
++	curveID, err := curveToID(curve)
 +	if err != nil {
 +		return nil, nil, nil, err
 +	}
-+	defer security.CFRelease(security.CFTypeRef(privKeyRef))
-+	return decodeFromUncompressedAnsiX963Key(privKeyDER, keySize)
-+}
 +
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, algorithmTypeECDSA, 0, hashed)
-+}
++	// Generate key using CryptoKit
++	xBytes := make([]byte, keySize)
++	yBytes := make([]byte, keySize)
++	dBytes := make([]byte, keySize)
 +
-+func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
-+	return evpVerify(pub.withKey, algorithmTypeECDSA, 0, hashed, sig) == nil
++	ret := cryptokit.GenerateKeyECDSA(curveID, xBytes, yBytes, dBytes)
++	if ret != 0 {
++		return nil, nil, nil, errors.New("ECDSA key generation failed")
++	}
++
++	return normalizeBigInt(xBytes), normalizeBigInt(yBytes), normalizeBigInt(dBytes), nil
 +}
 +
-+// encodeToUncompressedAnsiX963Key encodes the given elliptic curve point (x, y) and optional private key (d)
-+// into an uncompressed ANSI X9.63 format byte slice.
-+func encodeToUncompressedAnsiX963Key(x, y, d BigInt, keySize int) ([]byte, error) {
-+	// Build the uncompressed key point (0x04 || x || y { || d })
-+	size := 1 + keySize*2
-+	if d != nil {
-+		size += keySize
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
++	if priv == nil || len(hashed) == 0 {
++		return nil, errors.New("invalid parameters")
 +	}
-+	out := make([]byte, size)
-+	out[0] = 0x04
-+	err := encodeBigInt(out[1:], []sizedBigInt{
-+		{x, keySize}, {y, keySize},
-+		{d, keySize},
-+	})
++
++	curveID, err := curveToID(priv.curve)
 +	if err != nil {
 +		return nil, err
 +	}
-+	return out, nil
++
++	keySize := curveToKeySizeInBytes(priv.curve)
++
++	// Normalize private key to proper size
++	dBytes := make([]byte, keySize)
++	copy(dBytes[len(dBytes)-len(priv.d):], priv.d)
++
++	// Allocate signature buffer (max size for DER-encoded signature)
++	maxSigLen := 256
++	signature := make([]byte, maxSigLen)
++	sigLen := int64(0)
++
++	ret := cryptokit.EcdsaSign(curveID, dBytes, hashed, signature, &sigLen)
++	if ret != 0 {
++		return nil, errors.New("ECDSA signing failed")
++	}
++
++	if sigLen <= 0 || sigLen > int64(len(signature)) {
++		return nil, errors.New("invalid signature length")
++	}
++
++	return signature[:sigLen], nil
 +}
 +
-+// decodeFromUncompressedAnsiX963Key decodes the given uncompressed ANSI X9.63 format byte slice into
-+// the elliptic curve point (x, y) and optional private key (d).
-+func decodeFromUncompressedAnsiX963Key(key []byte, keySize int) (x, y, d BigInt, err error) {
-+	if len(key) < 1 || key[0] != 0x04 {
-+		return nil, nil, nil, errors.New("invalid uncompressed key format")
++func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
++	if pub == nil || len(hashed) == 0 || len(sig) == 0 {
++		return false
 +	}
-+	if len(key) < 1+keySize*2 {
-+		return nil, nil, nil, errors.New("invalid key length")
++
++	curveID, err := curveToID(pub.curve)
++	if err != nil {
++		return false
 +	}
-+	x = normalizeBigInt(key[1 : 1+keySize])
-+	y = normalizeBigInt(key[1+keySize : 1+keySize*2])
-+	if len(key) > 1+keySize*2 {
-+		d = normalizeBigInt(key[1+keySize*2:])
-+		return x, y, d, nil
++
++	keySize := curveToKeySizeInBytes(pub.curve)
++
++	// Normalize public key coordinates to proper size
++	xBytes := make([]byte, keySize)
++	yBytes := make([]byte, keySize)
++
++	// Safety check: ensure BigInts are not longer than keySize
++	if len(pub.x) > keySize || len(pub.y) > keySize {
++		return false
 +	}
-+	return x, y, nil, nil
++
++	copy(xBytes[len(xBytes)-len(pub.x):], pub.x)
++	copy(yBytes[len(yBytes)-len(pub.y):], pub.y)
++
++	ret := cryptokit.EcdsaVerify(curveID, xBytes, yBytes, hashed, sig)
++	return ret == 1
 +}
 +
 +func normalizeBigInt(b []byte) BigInt {
@@ -24088,33 +25107,6 @@ index 00000000000000..1d92197e4d16e0
 +	}
 +	return b
 +}
-+
-+// sizedBigInt defines a big integer with
-+// a size that can be different from the
-+// one provided by len(b).
-+type sizedBigInt struct {
-+	b    BigInt
-+	size int
-+}
-+
-+// encodeBigInt encodes ints into data.
-+// It stops iterating over ints when it finds one nil element.
-+func encodeBigInt(data []byte, ints []sizedBigInt) error {
-+	for _, v := range ints {
-+		if v.b == nil {
-+			return nil
-+		}
-+		normalized := normalizeBigInt(v.b)
-+		// b might be shorter than size if the original big number contained leading zeros.
-+		leadingZeros := int(v.size) - len(normalized)
-+		if leadingZeros < 0 {
-+			return errors.New("commoncrypto: invalid parameters")
-+		}
-+		copy(data[leadingZeros:], normalized)
-+		data = data[v.size:]
-+	}
-+	return nil
-+}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
 new file mode 100644
 index 00000000000000..316ecba6792d47
@@ -30955,24 +31947,24 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index bf7a797966088f..d8c9b5a065054e 100644
+index bf7a797966088f..7f126bacec3e31 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251105131405-55875790d6fc
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251105130527-ff5ef844ed63
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251120113838-5f60d7cdabeb
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 9682db81397..e2940b031ed 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -30,12 +30,12 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 393 ++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 393 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 420 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 395 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
- .../internal/backend/fips140/fips140.go       |  70 +++
+ .../internal/backend/fips140/fips140.go       |  70 ++++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
@@ -47,15 +47,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 349 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 380 ++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 349 ++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  32 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2664 insertions(+), 24 deletions(-)
+ 46 files changed, 2639 insertions(+), 24 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -1422,10 +1422,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..e6abf96b2e7711
+index 00000000000000..36002e9e4dbbd8
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,420 @@
+@@ -0,0 +1,395 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1442,8 +1442,6 @@ index 00000000000000..e6abf96b2e7711
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
-+	"crypto/internal/fips140/nistec"
-+	"errors"
 +	"hash"
 +	_ "unsafe"
 +
@@ -1659,30 +1657,7 @@ index 00000000000000..e6abf96b2e7711
 +}
 +
 +func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
-+	var key []byte
-+	switch curve {
-+	case "P-256":
-+		p, err := nistec.NewP256Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	case "P-384":
-+		p, err := nistec.NewP384Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	case "P-521":
-+		p, err := nistec.NewP521Point().ScalarBaseMult(bytes)
-+		if err != nil {
-+			return nil, err
-+		}
-+		key = p.Bytes()
-+	default:
-+		return nil, errors.New("NewPrivateKeyECDH: unsupported curve: " + curve)
-+	}
-+	return xcrypto.NewPrivateKeyECDH(curve, key, bytes)
++	return xcrypto.NewPrivateKeyECDH(curve, bytes)
 +}
 +
 +func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
@@ -3137,10 +3112,10 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6a8dbe7e3712a3..f3980616aabac1 100644
+index 30ed09b5f755ac..55b937aa415483 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -355,7 +355,7 @@ var depsRules = `
+@@ -356,7 +356,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3149,7 +3124,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -552,6 +552,11 @@ var depsRules = `
+@@ -553,6 +553,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3161,7 +3136,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -560,16 +565,27 @@ var depsRules = `
+@@ -561,16 +566,27 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -3191,7 +3166,7 @@ index 6a8dbe7e3712a3..f3980616aabac1 100644
  	< crypto/boring
  	< crypto/aes,
  	  crypto/des,
-@@ -593,8 +609,14 @@ var depsRules = `
+@@ -594,8 +610,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  

From 320f72851b13519f658cad3a42611976cce17816 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Mon, 1 Dec 2025 10:50:05 +0100
Subject: [PATCH 580/887] fix sha3

---
 patches/0004-Use-crypto-backends.patch | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 0bfe9e8e39f..5556c4f9099 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -69,7 +69,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  44 ++--
- src/crypto/sha3/sha3.go                       |  66 +++++-
+ src/crypto/sha3/sha3.go                       |  68 +++++-
  src/crypto/sha3/sha3_test.go                  |  11 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
@@ -96,7 +96,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 92 files changed, 1334 insertions(+), 138 deletions(-)
+ 92 files changed, 1335 insertions(+), 139 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2609,7 +2609,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index 48c67e9fe11005..80fafcd87b82d9 100644
+index 48c67e9fe11005..937b42af2b61a1 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -2671,7 +2671,7 @@ index 48c67e9fe11005..80fafcd87b82d9 100644
  }
  
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
-@@ -109,22 +124,34 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
+@@ -109,26 +124,38 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
  
  // New224 creates a new SHA3-224 hash.
  func New224() *SHA3 {
@@ -2710,6 +2710,11 @@ index 48c67e9fe11005..80fafcd87b82d9 100644
  }
  
  func (s *SHA3) init() {
+-	if s.s.Size() == 0 {
++	if s.s.Size() == 0 && s.boringS == nil {
+ 		*s = *New256()
+ 	}
+ }
 @@ -136,12 +163,18 @@ func (s *SHA3) init() {
  // Write absorbs more data into the hash's state.
  func (s *SHA3) Write(p []byte) (n int, err error) {

From 67b31cfccfa1d3341265d7e475bf56ea0be61b45 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 1 Dec 2025 11:18:09 +0000
Subject: [PATCH 581/887] build(deps): bump github/codeql-action from 4.31.5 to
 4.31.6

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.5 to 4.31.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fdbfb4d2750291e159f0156def62b853c2798ca2...fe4161a26a8629af62121b670040955b330f9af2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1f5d48487b2..49ba16fd60b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
+        uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
+        uses: github/codeql-action/autobuild@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
+        uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         with:
           category: /language:go

From a478dcd6936e754612f62514c41895712d08455a Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 2 Dec 2025 10:11:20 +0100
Subject: [PATCH 582/887] upgrade dependencies

---
 .../0001-Vendor-external-dependencies.patch   | 94 ++++++++++++-------
 1 file changed, 58 insertions(+), 36 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 198c02edec5..594a35c9811 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -56,7 +56,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
- .../github.com/golang-fips/openssl/v2/hkdf.go |  443 ++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  455 ++++
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
  .../github.com/golang-fips/openssl/v2/init.go |  156 ++
  .../golang-fips/openssl/v2/init_cgo_unix.go   |   31 +
@@ -172,7 +172,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/hash.go          |  320 +++
  .../go-crypto-darwin/xcrypto/hashclone.go     |   17 +
  .../xcrypto/hashclone_go125.go                |   12 +
- .../go-crypto-darwin/xcrypto/hkdf.go          |   98 +
+ .../go-crypto-darwin/xcrypto/hkdf.go          |  103 +
  .../go-crypto-darwin/xcrypto/hmac.go          |  119 +
  .../go-crypto-darwin/xcrypto/mlkem.go         |  261 ++
  .../go-crypto-darwin/xcrypto/pbkdf2.go        |   68 +
@@ -192,7 +192,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/hash.go |  327 +++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
- .../microsoft/go-crypto-winnative/cng/hkdf.go |  128 +
+ .../microsoft/go-crypto-winnative/cng/hkdf.go |  133 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   70 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
  .../go-crypto-winnative/cng/mlkem.go          |  405 +++
@@ -208,7 +208,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   20 +
- 200 files changed, 28365 insertions(+), 7 deletions(-)
+ 200 files changed, 28387 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2062,7 +2062,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index e6cb3d5b43dbd3..74e965e12bc51c 100644
+index e6cb3d5b43dbd3..2e0ae71f40ce7d 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2071,29 +2071,29 @@ index e6cb3d5b43dbd3..74e965e12bc51c 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index fe184a864718af..66edcf6139c842 100644
+index fe184a864718af..2009043843940c 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207 h1:TsTK3Sg1Yf16FxSWpS1CLG09+nAz3EMCyzd5yENO/Ac=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25 h1:R/RbMmI+Vs521m63ALMrClhcgU8NxuZSBdsV87LtdO8=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859 h1:CYCuHvY592PLaJFC2eaxyf9dS0dU2CTFJJyFSXLdpOI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7 h1:uRbVHzfzuY0m6zgFv0032WsSmYbM9dcZFtoXV5f1NRk=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc h1:bz/6zng2sakr1ETJsKnGoHooH6sBKbQNxk9aeH5tRt0=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
  golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
  golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 5f95535ed949d3..30ed09b5f755ac 100644
+index 8d5e11ec4e472b..00f53f3a181855 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -532,6 +532,27 @@ var depsRules = `
+@@ -533,6 +533,27 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< FIPS < crypto/fips140;
  
@@ -2121,7 +2121,7 @@ index 5f95535ed949d3..30ed09b5f755ac 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -543,13 +564,12 @@ var depsRules = `
+@@ -544,13 +565,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2139,7 +2139,7 @@ index 5f95535ed949d3..30ed09b5f755ac 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/aes,
-@@ -570,6 +590,10 @@ var depsRules = `
+@@ -571,6 +591,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2150,7 +2150,7 @@ index 5f95535ed949d3..30ed09b5f755ac 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -907,7 +931,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -908,7 +932,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2159,7 +2159,7 @@ index 5f95535ed949d3..30ed09b5f755ac 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -917,7 +941,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -918,7 +942,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -2235,13 +2235,13 @@ index 00000000000000..97e85154015761
 \ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/README.md b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 new file mode 100644
-index 00000000000000..f63cf39e70c064
+index 00000000000000..0a6d0d0ef2c0c6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 @@ -0,0 +1,66 @@
 +# Go OpenSSL bindings for FIPS compliance
 +
-+[![Go Reference](https://pkg.go.dev/badge/github.com/golang-fips/openssl.svg)](https://pkg.go.dev/github.com/golang-fips/openssl)
++[![Go Reference](https://pkg.go.dev/badge/github.com/golang-fips/openssl/v2.svg)](https://pkg.go.dev/github.com/golang-fips/openssl/v2)
 +
 +The `openssl` package implements Go crypto primitives using OpenSSL shared libraries and cgo. When configured correctly, OpenSSL can be executed in FIPS mode, making the `openssl` package FIPS compliant.
 +
@@ -5798,10 +5798,10 @@ index 00000000000000..f1f2364c7246d4
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..3aeff4f917fdde
+index 00000000000000..5574cef3032db4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,443 @@
+@@ -0,0 +1,455 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -6012,6 +6012,12 @@ index 00000000000000..3aeff4f917fdde
 +			return nil, err
 +		}
 +		defer ossl.EVP_PKEY_CTX_free(ctx)
++		if len(out) == 0 {
++			// Nothing to do, so exit early.
++			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
++			// We can only exit after calling newHKDFCtx1 because we still need it to validate the parameters.
++			return out, nil
++		}
 +		keylen := keyLength
 +		if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
 +			return nil, err
@@ -6022,6 +6028,12 @@ index 00000000000000..3aeff4f917fdde
 +			return nil, err
 +		}
 +		defer ossl.EVP_KDF_CTX_free(ctx)
++		if len(out) == 0 {
++			// Nothing to do, so exit early.
++			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
++			// We can only exit after calling newHKDFCtx3 because we still need it to validate the parameters.
++			return out, nil
++		}
 +		if _, err := ossl.EVP_KDF_derive(ctx, base(out), keyLength, nil); err != nil {
 +			return nil, err
 +		}
@@ -26175,10 +26187,10 @@ index 00000000000000..a4b0c717ef5e38
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
 new file mode 100644
-index 00000000000000..e8fcbec33aaa66
+index 00000000000000..f6183de583d9ac
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
-@@ -0,0 +1,98 @@
+@@ -0,0 +1,103 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26254,6 +26266,11 @@ index 00000000000000..e8fcbec33aaa66
 +
 +	// Allocate buffer for derived key
 +	expandedKey := make([]byte, keyLength)
++	if len(expandedKey) == 0 {
++		// Nothing to do, and CryptoKit may error on zero-length output.
++		// We do need to validate the inputs for consistency, though.
++		return expandedKey, nil
++	}
 +
 +	result := cryptokit.ExpandHKDF(swiftHash, pseudorandomKey, info, expandedKey)
 +	if result != 0 {
@@ -29212,10 +29229,10 @@ index 00000000000000..f86a9e9bfd47a9
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
-index 00000000000000..2647c6bc06cd57
+index 00000000000000..aa48b084d708da
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
-@@ -0,0 +1,128 @@
+@@ -0,0 +1,133 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29244,7 +29261,7 @@ index 00000000000000..2647c6bc06cd57
 +	})
 +}
 +
-+func newHKDF(h func() hash.Hash, secret, salt []byte, info []byte) (bcrypt.KEY_HANDLE, error) {
++func newHKDF(h func() hash.Hash, secret, salt []byte) (bcrypt.KEY_HANDLE, error) {
 +	ch := h()
 +	hashID := hashToID(ch)
 +	if hashID == "" {
@@ -29281,7 +29298,7 @@ index 00000000000000..2647c6bc06cd57
 +		// Replicate x/crypto/hkdf behavior.
 +		salt = make([]byte, h().Size())
 +	}
-+	kh, err := newHKDF(h, secret, salt, nil)
++	kh, err := newHKDF(h, secret, salt)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -29311,12 +29328,17 @@ index 00000000000000..2647c6bc06cd57
 +
 +// ExpandHKDF derives a key from the given hash, key, and optional context info.
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	kh, err := newHKDF(h, pseudorandomKey, nil, info)
++	kh, err := newHKDF(h, pseudorandomKey, nil)
 +	if err != nil {
 +		return nil, err
 +	}
 +	defer bcrypt.DestroyKey(kh)
 +	out := make([]byte, keyLength)
++	if len(out) == 0 {
++		// Nothing to do, and CNG doesn't like zero-length output buffers.
++		// Call newHKDF, though, to validate parameters.
++		return out, nil
++	}
 +	var params *bcrypt.BufferDesc
 +	if len(info) > 0 {
 +		params = &bcrypt.BufferDesc{
@@ -31947,24 +31969,24 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index bf7a797966088f..7f126bacec3e31 100644
+index bf7a797966088f..ab59dd4cf3dc4a 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251121170104-ee24449e9207
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251125163641-ab43fa145f25
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251123214300-4a3429a42859
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From a62eff0ee66e18b95b47bc563f2faf7407e97f6e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 3 Dec 2025 13:03:23 +0000
Subject: [PATCH 583/887] build(deps): bump actions/checkout from 6.0.0 to
 6.0.1 (#1982)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 49ba16fd60b..0e221a57a53 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 6b792bd1d46..3f3373fcb89 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 27b2b85dd34..ebea30500ca 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a8567e10ac0..caeffab17c9 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From ee01fd6ada13ee06e700af56f367ba3bef3038ef Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 3 Dec 2025 16:38:37 +0100
Subject: [PATCH 584/887] Implement upgrader tool (#1978)

* implement upgrader tool

* fix name

* codereview comments
---
 eng/_util/cmd/upgrader/main.go | 165 +++++++++++++++++++++++++++++++++
 1 file changed, 165 insertions(+)
 create mode 100644 eng/_util/cmd/upgrader/main.go

diff --git a/eng/_util/cmd/upgrader/main.go b/eng/_util/cmd/upgrader/main.go
new file mode 100644
index 00000000000..45add05a94e
--- /dev/null
+++ b/eng/_util/cmd/upgrader/main.go
@@ -0,0 +1,165 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"flag"
+	"fmt"
+	"log"
+	"maps"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"runtime"
+	"slices"
+	"strings"
+	"sync"
+	"unicode"
+)
+
+type depsInfo struct {
+	url string // Repository URL
+	ref string // Reference (branch, tag, or commit)
+	mod string // Module name
+	wd  string // Relative working directory from repo root
+}
+
+var infos = map[string]depsInfo{
+	"openssl": {
+		url: "https://github.com/golang-fips/openssl",
+		mod: "github.com/golang-fips/openssl/v2",
+		wd:  "./go/src",
+		ref: "v2",
+	},
+	"windows": {
+		url: "https://github.com/microsoft/go-crypto-winnative",
+		mod: "github.com/microsoft/go-crypto-winnative",
+		wd:  "./go/src",
+		ref: "main",
+	},
+	"darwin": {
+		url: "https://github.com/microsoft/go-crypto-darwin",
+		mod: "github.com/microsoft/go-crypto-darwin",
+		wd:  "./go/src",
+		ref: "main",
+	},
+	"telemetry": {
+		url: "https://github.com/microsoft/go-infra",
+		mod: "github.com/microsoft/go-infra/telemetry",
+		wd:  "./go/src/cmd",
+		ref: "main",
+	},
+	"telemetryconfig": {
+		url: "https://github.com/microsoft/go-infra",
+		mod: "github.com/microsoft/go-infra/telemetry/config",
+		wd:  "./go/src/cmd",
+		ref: "main",
+	},
+}
+
+func description() string {
+	deps := slices.Collect(maps.Keys(infos))
+	slices.Sort(deps)
+	return `
+This command upgrades the dependencies listed as arguments to their latest available commit.
+Known dependencies are:
+` + strings.Join(deps, " ") + `
+
+For example, to upgrade all crypto backends, run:
+	go run eng/_util/cmd/upgrader/main.go openssl windows darwin
+
+Always run this tool using "go run", do not install it, else it may not pick up the latest configurations.
+`
+}
+
+func main() {
+	help := flag.Bool("h", false, "Print this help message.")
+
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage of upgrader:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description())
+	}
+
+	flag.Parse()
+	if *help {
+		flag.Usage()
+		return
+	}
+
+	deps := flag.Args()
+	if len(deps) == 0 {
+		log.Println("No dependencies specified")
+		os.Exit(1)
+	}
+
+	// Validate input dependencies
+	for _, dep := range deps {
+		if _, ok := infos[dep]; !ok {
+			log.Printf("Unknown dependency: %s\n", dep)
+			os.Exit(1)
+		}
+	}
+
+	for _, dep := range deps {
+		info := infos[dep]
+		if err := upgradeDependency(&info); err != nil {
+			log.Printf("Failed to upgrade %s: %v\n", info.mod, err)
+			os.Exit(1)
+		}
+	}
+}
+
+func upgradeDependency(info *depsInfo) error {
+	// Placeholder for actual upgrade logic
+	log.Printf("Upgrading dependency: %s\n", info.mod)
+
+	// Fetch latest commit from default branch
+	out, err := exec.Command("git", "ls-remote", info.url, info.ref).CombinedOutput()
+	if err != nil {
+		return fmt.Errorf("failed to fetch latest commit: %v, output: %s", err, out)
+	}
+	fields := strings.FieldsFunc(string(out), unicode.IsSpace)
+	if len(fields) == 0 {
+		return fmt.Errorf("failed to parse latest commit from output: %s", out)
+	}
+	sha := fields[0]
+	log.Printf("Latest commit for %s: %s\n", info.mod, sha)
+
+	// Update the dependency to the latest commit
+	if err := runGoCmd(info.wd, "get", fmt.Sprintf("%s@%s", info.mod, sha)); err != nil {
+		return fmt.Errorf("failed to update dependency: %v", err)
+	}
+
+	// Tidy-up go.mod
+	if err := runGoCmd(info.wd, "mod", "tidy"); err != nil {
+		return fmt.Errorf("failed to tidy go.mod: %v", err)
+	}
+
+	// Vendor dependencies
+	if err := runGoCmd(info.wd, "mod", "vendor"); err != nil {
+		return fmt.Errorf("failed to vendor dependencies: %v", err)
+	}
+	return nil
+}
+
+var goBinary = sync.OnceValue(func() string {
+	path := filepath.Join(runtime.GOROOT(), "bin", "go")
+	if runtime.GOOS == "windows" {
+		path += ".exe"
+	}
+	log.Printf("Using %s\n", path)
+	return path
+})
+
+func runGoCmd(wd string, args ...string) error {
+	cmd := exec.Command(goBinary(), args...)
+	cmd.Dir = wd
+	out, err := cmd.CombinedOutput()
+	if err != nil {
+		return fmt.Errorf("%q failed: %v: %s", cmd, err, out)
+	}
+	return nil
+}

From 3e1387fa64a46ea1c1203519779c025341527669 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Tue, 2 Dec 2025 10:07:55 +0000
Subject: [PATCH 585/887] Update submodule to latest master (f22d37d5):
 runtime/internal/testprog: log initial SchedMetrics GOMAXPROCS

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 8dd5b13abcb..f22d37d5748 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 8dd5b13abcb64993959ea02c3f664654af6367a9
+Subproject commit f22d37d574836ed4f1b42e283dda55dbd4d80aca

From e690651aebc53d74be2d6aa4c294c1ea60c86e01 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 2 Dec 2025 13:44:51 +0000
Subject: [PATCH 586/887] fixup merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   |  56 ++---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  12 +-
 ...03-Implement-crypto-internal-backend.patch |  58 ++---
 patches/0004-Use-crypto-backends.patch        | 231 +++++++-----------
 ...nt-ms_tls_config_schannel-experiment.patch |  18 +-
 5 files changed, 168 insertions(+), 207 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 594a35c9811..f3e9ef36bcd 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -403,24 +403,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 2f13ca0dc9690c..1a537966567fc6 100644
+index 9a1a38bccca6b5..baec579dcd88ae 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
  
  require (
- 	github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5
+ 	github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
- 	golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
- 	golang.org/x/build v0.0.0-20250806225920-b7c66c047964
- 	golang.org/x/mod v0.30.1-0.20251114215501-3f03020ad526
+ 	golang.org/x/arch v0.23.0
+ 	golang.org/x/build v0.0.0-20251128064159-b9bfd88b30e8
+ 	golang.org/x/mod v0.30.1-0.20251115032019-269c237cf350
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d75d9339fbf230..3435dc59d0fed6 100644
+index 52d55d81732f7f..8355016445f49b 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5 h1:xhMrHhTJ6zxu3gA4en
- github.com/google/pprof v0.0.0-20250630185457-6e76a2b096b5/go.mod h1:5hDyRhoBCxViHszMt12TnOpEI4VVi+U8Gm9iphldiMA=
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLx
+ github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
@@ -429,7 +429,7 @@ index d75d9339fbf230..3435dc59d0fed6 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938 h1:VJ182b/ajNehMFRltVfCh/FR0jAH+QX6hs9zqYod/mU=
+ golang.org/x/arch v0.23.0 h1:lKF64A2jF6Zd8L0knGltUnegD62JMFBiCPBmQpToHhg=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -2012,7 +2012,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 1c7bf37a3b4818..cad8690c96f757 100644
+index 8641f2dca3dde8..1e548335058dbc 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2030,7 +2030,7 @@ index 1c7bf37a3b4818..cad8690c96f757 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.22.1-0.20251016010524-fea4a9ec4938
+ # golang.org/x/arch v0.23.0
  ## explicit; go 1.24.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
@@ -2062,12 +2062,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index e6cb3d5b43dbd3..2e0ae71f40ce7d 100644
+index f79455c970ecb2..b29cc73fb1712f 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.38.0 // indirect
- 	golang.org/x/text v0.30.0 // indirect
+ 	golang.org/x/sys v0.38.1-0.20251125153526-08e54827f670 // indirect
+ 	golang.org/x/text v0.31.1-0.20251128220601-087616b6cde9 // indirect
  )
 +
 +require (
@@ -2076,7 +2076,7 @@ index e6cb3d5b43dbd3..2e0ae71f40ce7d 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index fe184a864718af..2009043843940c 100644
+index e2cf9591bc56dc..490c2acb626694 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2086,16 +2086,16 @@ index fe184a864718af..2009043843940c 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
- golang.org/x/crypto v0.43.0 h1:dduJYIi3A3KOfdGOHX8AVZ/jGiyPa3IbBozJ5kNuE04=
- golang.org/x/crypto v0.43.0/go.mod h1:BFbav4mRNlXJL4wNeejLpWxB7wMbc79PdRGhWKncxR0=
- golang.org/x/net v0.46.0 h1:giFlY12I07fugqwPuWJi68oOnpfqFnJIJzaIIm2JVV4=
+ golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
+ golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+ golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 8d5e11ec4e472b..00f53f3a181855 100644
+index d58bd294cd103c..bbd53b99006c3f 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -533,6 +533,27 @@ var depsRules = `
+@@ -540,6 +540,27 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
- 	< FIPS < crypto/fips140;
+ 	< crypto/fips140 < FIPS;
  
 +	FIPS, hash < crypto/internal/fips140only;
 +	crypto/internal/fips140/subtle,	hash < crypto;
@@ -2121,7 +2121,7 @@ index 8d5e11ec4e472b..00f53f3a181855 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -544,13 +565,12 @@ var depsRules = `
+@@ -551,13 +572,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2138,8 +2138,8 @@ index 8d5e11ec4e472b..00f53f3a181855 100644
 -	< crypto/cipher
  	< crypto/internal/boring
  	< crypto/boring
- 	< crypto/aes,
-@@ -571,6 +591,10 @@ var depsRules = `
+ 	< crypto/internal/rand
+@@ -579,6 +599,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2150,7 +2150,7 @@ index 8d5e11ec4e472b..00f53f3a181855 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -908,7 +932,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -925,7 +949,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2159,7 +2159,7 @@ index 8d5e11ec4e472b..00f53f3a181855 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -918,7 +942,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -935,7 +959,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -31969,7 +31969,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index bf7a797966088f..ab59dd4cf3dc4a 100644
+index 7932adddfaa1c5..7d9a3c31225510 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,23 @@
@@ -31993,6 +31993,6 @@ index bf7a797966088f..ab59dd4cf3dc4a 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.43.0
+ # golang.org/x/crypto v0.45.0
  ## explicit; go 1.24.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 2795d209579..52e27cb4748 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -391,7 +391,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index f1a1d8632ef507..31ec5a1a4ec140 100644
+index df41f79338841f..0c25f3cce97202 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -422,7 +422,7 @@ index f1a1d8632ef507..31ec5a1a4ec140 100644
  	flags, err := ParseGOEXPERIMENT(GOOS, GOARCH, envOr("GOEXPERIMENT", defaultGOEXPERIMENT))
  	if err != nil {
  		Error = err
-@@ -67,6 +81,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -69,6 +83,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		regabiSupported = true
  	}
  
@@ -441,14 +441,14 @@ index f1a1d8632ef507..31ec5a1a4ec140 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -87,6 +113,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		RandomizedHeapBase64:  true,
  		SizeSpecializedMalloc: true,
  		GreenTeaGC:            true,
 +		SystemCrypto:          systemCryptoSupported,
  	}
- 
- 	// Start with the statically enabled set of experiments.
+ 	flags := &ExperimentFlags{
+ 		Flags:    baseline,
 @@ -126,6 +153,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
@@ -626,7 +626,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 957c41c0f5c61e..f326560c595178 100644
+index 2cfb71578b421b..be2104e8f5a437 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -59,6 +59,28 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 3b3fb960c63..e8fecb55e4f 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -50,11 +50,11 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
- src/go/build/deps_test.go                     |  32 +-
+ src/go/build/deps_test.go                     |  31 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 46 files changed, 2639 insertions(+), 24 deletions(-)
+ 45 files changed, 2638 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -147,7 +147,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 2b382a1c025649..25b555dace9a6f 100644
+index e4250e12de8975..917f682fd4bfaf 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1382,6 +1382,80 @@ func toolenv() []string {
@@ -248,7 +248,7 @@ index 2b382a1c025649..25b555dace9a6f 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 15cfcccec38329..713cb4f2a42668 100644
+index f8d19ac34c562f..1314403a56cad0 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -278,7 +278,7 @@ index 15cfcccec38329..713cb4f2a42668 100644
  		}
  	}
  
-@@ -746,15 +748,23 @@ func (t *tester) registerTests() {
+@@ -746,9 +748,15 @@ func (t *tester) registerTests() {
  
  	// Test GOEXPERIMENT=jsonv2.
  	if !strings.Contains(goexperiment, "jsonv2") {
@@ -295,6 +295,8 @@ index 15cfcccec38329..713cb4f2a42668 100644
  			pkg:     "encoding/json/...",
  		})
  	}
+@@ -763,7 +771,9 @@ func (t *tester) registerTests() {
+ 	}
  
  	// Test ios/amd64 for the iOS simulator.
 -	if goos == "darwin" && goarch == "amd64" && t.cgoEnabled {
@@ -304,7 +306,7 @@ index 15cfcccec38329..713cb4f2a42668 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -864,14 +874,21 @@ func (t *tester) registerTests() {
+@@ -873,14 +883,21 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -327,7 +329,7 @@ index 15cfcccec38329..713cb4f2a42668 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -879,9 +896,10 @@ func (t *tester) registerTests() {
+@@ -888,9 +905,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -339,7 +341,7 @@ index 15cfcccec38329..713cb4f2a42668 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -985,7 +1003,9 @@ func (t *tester) registerTests() {
+@@ -996,7 +1014,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -350,7 +352,7 @@ index 15cfcccec38329..713cb4f2a42668 100644
  		// Only start multiple test dir shards on builders,
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
-@@ -1183,6 +1203,11 @@ func (t *tester) internalLink() bool {
+@@ -1194,6 +1214,11 @@ func (t *tester) internalLink() bool {
  	if goos == "ios" {
  		return false
  	}
@@ -433,10 +435,10 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index 3b8bbdc91b8191..53a58e23f8b05c 100644
+index e2a77d7d7df85b..aaa3106e5a0e6e 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
-@@ -2412,6 +2412,9 @@ func (p *Package) setBuildInfo(ctx context.Context, autoVCS bool) {
+@@ -2413,6 +2413,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
  			buildmode = "archive"
  		}
  	}
@@ -753,7 +755,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 30e66c428dc470..ed061d7fbf4684 100644
+index c7060898778c88..47de9e25baa759 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -810,18 +812,18 @@ index a4b3a0422f2f41..ce290ab4617cfd 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 6ab1246c814dfb..db61e625c6aadf 100644
+index 0c4cde0399fbd5..196bc4ada5db93 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
-@@ -9,6 +9,7 @@ import (
- 	"bytes"
- 	"debug/macho"
+@@ -12,6 +12,7 @@ import (
+ 	"debug/pe"
  	"errors"
+ 	"internal/abi"
 +	"internal/goexperiment"
  	"internal/platform"
  	"internal/testenv"
- 	"os"
-@@ -280,6 +281,9 @@ func TestBuildForTvOS(t *testing.T) {
+ 	"internal/xcoff"
+@@ -367,6 +368,9 @@ func TestBuildForTvOS(t *testing.T) {
  	if runtime.GOOS != "darwin" {
  		t.Skip("skipping on non-darwin platform")
  	}
@@ -831,7 +833,7 @@ index 6ab1246c814dfb..db61e625c6aadf 100644
  	if testing.Short() && testenv.Builder() == "" {
  		t.Skip("skipping in -short mode with $GO_BUILDER_NAME empty")
  	}
-@@ -512,6 +516,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
+@@ -599,6 +603,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
  		t.Skip("skipping on non-{linux,darwin}/amd64 platform")
  	}
  
@@ -3098,10 +3100,10 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 30ed09b5f755ac..55b937aa415483 100644
+index bbd53b99006c3f..2a0589ead089a5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -356,7 +356,7 @@ var depsRules = `
+@@ -363,7 +363,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3110,7 +3112,7 @@ index 30ed09b5f755ac..55b937aa415483 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -553,6 +553,11 @@ var depsRules = `
+@@ -561,6 +561,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3122,7 +3124,7 @@ index 30ed09b5f755ac..55b937aa415483 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -561,16 +566,27 @@ var depsRules = `
+@@ -569,6 +574,17 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -3140,19 +3142,19 @@ index 30ed09b5f755ac..55b937aa415483 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
- 	crypto/internal/boring/bcache,
+@@ -576,9 +592,10 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
--	crypto/cipher
+ 	crypto/cipher
 +	crypto/cipher,
 +	crypto/internal/backend
  	< crypto/sha3
  	< crypto/internal/fips140hash
 -	< crypto/internal/boring
  	< crypto/boring
+ 	< crypto/internal/rand
  	< crypto/aes,
- 	  crypto/des,
-@@ -594,8 +610,14 @@ var depsRules = `
+@@ -603,8 +620,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3170,7 +3172,7 @@ index 30ed09b5f755ac..55b937aa415483 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 31ec5a1a4ec140..b28387a100c554 100644
+index 0c25f3cce97202..4bcb62b7c63fe6 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5556c4f9099..9cd960013a0 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -81,12 +81,10 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  12 +-
- src/crypto/tls/handshake_client_tls13.go      |   2 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |   5 +-
+ src/crypto/tls/handshake_server_tls13.go      |   3 -
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
- src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |   5 +-
@@ -96,7 +94,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 92 files changed, 1335 insertions(+), 139 deletions(-)
+ 90 files changed, 1332 insertions(+), 136 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -122,7 +120,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 713cb4f2a42668..5d1e1218de4c6a 100644
+index 1314403a56cad0..72665644edf02a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -134,7 +132,7 @@ index 713cb4f2a42668..5d1e1218de4c6a 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1371,12 +1371,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1382,12 +1382,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -240,10 +238,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 2c861129b52f9a..c889aef01e6cb6 100644
+index 22ee13dff87eca..850ecccd42bd8f 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1176,6 +1176,11 @@ var hostobj []Hostobj
+@@ -1174,6 +1174,11 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -304,7 +302,7 @@ index 097c37e343fdb8..a5d603896d3890 100644
  // Enabled reports whether BoringCrypto handles supported crypto operations.
  func Enabled() bool {
 diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
-index 9b7d30e2164422..b08132d1c7568a 100644
+index 1d8ae78674ebe2..1ce8f093834d55 100644
 --- a/src/crypto/cipher/ctr_aes_test.go
 +++ b/src/crypto/cipher/ctr_aes_test.go
 @@ -14,7 +14,7 @@ import (
@@ -315,9 +313,9 @@ index 9b7d30e2164422..b08132d1c7568a 100644
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	fipsaes "crypto/internal/fips140/aes"
- 	"encoding/hex"
+ 	"encoding/binary"
 diff --git a/src/crypto/cipher/gcm.go b/src/crypto/cipher/gcm.go
-index 73493f6cd2311b..8dfba7cdff5405 100644
+index 88892e155551b3..675dbed240e8af 100644
 --- a/src/crypto/cipher/gcm.go
 +++ b/src/crypto/cipher/gcm.go
 @@ -93,6 +93,15 @@ func newGCM(cipher Block, nonceSize, tagSize int) (AEAD, error) {
@@ -429,7 +427,7 @@ index 73493f6cd2311b..8dfba7cdff5405 100644
  // theoretically support. It's a copy of the generic implementation from
  // crypto/internal/fips140/aes/gcm/gcm_generic.go, refer to that file for more details.
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index e574822c9aa6f8..15b141ba4c45cf 100644
+index fe6bf5506e5a10..c36407ab5b5b4d 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
 @@ -8,7 +8,6 @@ import (
@@ -465,7 +463,7 @@ index e574822c9aa6f8..15b141ba4c45cf 100644
  			}
  			a, _ := cipher.NewGCMWithRandomNonce(block)
 diff --git a/src/crypto/des/cipher.go b/src/crypto/des/cipher.go
-index 21303b384cf757..0d3c4f810cfd8f 100644
+index 81ba766b2527d2..a0fc16647c5b5f 100644
 --- a/src/crypto/des/cipher.go
 +++ b/src/crypto/des/cipher.go
 @@ -6,6 +6,7 @@ package des
@@ -616,7 +614,7 @@ index 00000000000000..7ea0c8c423e9ee
 +	}
 +}
 diff --git a/src/crypto/dsa/dsa.go b/src/crypto/dsa/dsa.go
-index 000becc82dfb79..6430bb3ea5e437 100644
+index 6724f861b7f2f0..4bda65558882a2 100644
 --- a/src/crypto/dsa/dsa.go
 +++ b/src/crypto/dsa/dsa.go
 @@ -18,8 +18,13 @@ import (
@@ -626,7 +624,7 @@ index 000becc82dfb79..6430bb3ea5e437 100644
 +	boring "crypto/internal/backend"
 +	"crypto/internal/backend/bbig"
  	"crypto/internal/fips140only"
- 	"crypto/internal/randutil"
+ 	"crypto/internal/rand"
 +
 +	"golang.org/x/crypto/cryptobyte"
 +	"golang.org/x/crypto/cryptobyte/asn1"
@@ -669,7 +667,7 @@ index 000becc82dfb79..6430bb3ea5e437 100644
  	x := new(big.Int)
  	xBytes := make([]byte, priv.Q.BitLen()/8)
  
-@@ -225,6 +252,18 @@ func Sign(rand io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err err
+@@ -229,6 +256,18 @@ func Sign(random io.Reader, priv *PrivateKey, hash []byte) (r, s *big.Int, err e
  		err = ErrInvalidPublicKey
  		return
  	}
@@ -688,7 +686,7 @@ index 000becc82dfb79..6430bb3ea5e437 100644
  	n >>= 3
  
  	var attempts int
-@@ -288,6 +327,14 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+@@ -292,6 +331,14 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
  		panic("crypto/dsa: use of DSA is not allowed in FIPS 140-only mode")
  	}
  
@@ -703,7 +701,7 @@ index 000becc82dfb79..6430bb3ea5e437 100644
  	// FIPS 186-3, section 4.7
  
  	if pub.P.Sign() == 0 {
-@@ -324,3 +371,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
+@@ -328,3 +375,44 @@ func Verify(pub *PublicKey, hash []byte, r, s *big.Int) bool {
  
  	return v.Cmp(r) == 0
  }
@@ -771,7 +769,7 @@ index 00000000000000..cd02ff5a00c3dc
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/ecdh/ecdh.go b/src/crypto/ecdh/ecdh.go
-index 82daacf4736a69..0458d9535c1e1a 100644
+index 3f85a2833697a9..a5717e22db8d78 100644
 --- a/src/crypto/ecdh/ecdh.go
 +++ b/src/crypto/ecdh/ecdh.go
 @@ -8,7 +8,7 @@ package ecdh
@@ -806,7 +804,7 @@ index 8a3eb87061ad8c..a09a9fc8148039 100644
  		for _, input := range invalidPrivateKeys[curve] {
  			k, err := curve.NewPrivateKey(hexDecode(t, input))
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index acef8298943c2b..ca6171cf775117 100644
+index de7348d9232349..011270049df613 100644
 --- a/src/crypto/ecdh/nist.go
 +++ b/src/crypto/ecdh/nist.go
 @@ -6,7 +6,7 @@ package ecdh
@@ -817,7 +815,7 @@ index acef8298943c2b..ca6171cf775117 100644
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/ecdh"
  	"crypto/internal/fips140only"
- 	"errors"
+ 	"crypto/internal/rand"
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
 index 00000000000000..168efdb820c85b
@@ -865,7 +863,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index 54fbecb5764aab..b5598e6f610d1d 100644
+index aee15b92838543..10101c88ac0ea4 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -879,21 +877,21 @@ index 54fbecb5764aab..b5598e6f610d1d 100644
  	"crypto/internal/fips140/ecdsa"
  	"crypto/internal/fips140/nistec"
  	"crypto/internal/fips140cache"
-@@ -333,7 +333,7 @@ func (priv *PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOp
- func GenerateKey(c elliptic.Curve, rand io.Reader) (*PrivateKey, error) {
- 	randutil.MaybeReadByte(rand)
- 
--	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsCurve(c.Params().Name) {
+@@ -334,7 +334,7 @@ func (priv *PrivateKey) Sign(random io.Reader, digest []byte, opts crypto.Signer
+ // ignored unless GODEBUG=cryptocustomrand=1 is set. This setting will be removed
+ // in a future Go release. Instead, use [testing/cryptotest.SetGlobalRandom].
+ func GenerateKey(c elliptic.Curve, r io.Reader) (*PrivateKey, error) {
+-	if boring.Enabled && r == boring.RandReader {
++	if boring.Enabled && r == boring.RandReader && boring.SupportsCurve(c.Params().Name) {
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
  			return nil, err
-@@ -382,7 +382,7 @@ var errNoAsm = errors.New("no assembly implementation available")
- func SignASN1(rand io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
- 	randutil.MaybeReadByte(rand)
- 
--	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsCurve(priv.Curve.Params().Name) {
+@@ -380,7 +380,7 @@ func generateFIPS[P ecdsa.Point[P]](curve elliptic.Curve, c *ecdsa.Curve[P], ran
+ // is set. This setting will be removed in a future Go release. Instead, use
+ // [testing/cryptotest.SetGlobalRandom].
+ func SignASN1(r io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
+-	if boring.Enabled && r == boring.RandReader {
++	if boring.Enabled && r == boring.RandReader && boring.SupportsCurve(priv.Curve.Params().Name) {
  		b, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1002,7 +1000,7 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index 0e268139587075..4ac5e90bb73e57 100644
+index f09dabe23e875d..281468eca9b1fa 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
 @@ -17,6 +17,7 @@ package ed25519
@@ -1010,22 +1008,22 @@ index 0e268139587075..4ac5e90bb73e57 100644
  import (
  	"crypto"
 +	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/drbg"
  	"crypto/internal/fips140/ed25519"
  	"crypto/internal/fips140cache"
- 	"crypto/internal/fips140only"
-@@ -25,6 +26,7 @@ import (
- 	"errors"
+@@ -28,6 +29,7 @@ import (
+ 	"internal/godebug"
  	"io"
  	"strconv"
 +	"sync"
  )
  
  const (
-@@ -144,6 +146,19 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
- 	if rand == nil {
- 		rand = cryptorand.Reader
+@@ -160,6 +162,19 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+ 			random = rand.Reader
+ 		}
  	}
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsEd25519() {
++	if boring.Enabled && random == boring.RandReader && boring.SupportsEd25519() {
 +		priv, err := boring.GenerateKeyEd25519()
 +		if err != nil {
 +			return nil, nil, err
@@ -1040,8 +1038,8 @@ index 0e268139587075..4ac5e90bb73e57 100644
 +	}
  
  	seed := make([]byte, SeedSize)
- 	if _, err := io.ReadFull(rand, seed); err != nil {
-@@ -160,6 +175,17 @@ func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+ 	if _, err := io.ReadFull(random, seed); err != nil {
+@@ -176,6 +191,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1059,7 +1057,7 @@ index 0e268139587075..4ac5e90bb73e57 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -178,6 +204,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -194,6 +220,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1077,7 +1075,7 @@ index 0e268139587075..4ac5e90bb73e57 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -207,6 +244,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -223,6 +260,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1110,7 +1108,7 @@ index 0e268139587075..4ac5e90bb73e57 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -235,6 +298,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -251,6 +314,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
@@ -1196,7 +1194,7 @@ index 00000000000000..77b69a3be88183
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
-index 830b6f80af5f22..1fad281448b201 100644
+index f44f3b399b2f05..041081f54744b1 100644
 --- a/src/crypto/fips140/fips140.go
 +++ b/src/crypto/fips140/fips140.go
 @@ -5,6 +5,7 @@
@@ -1207,15 +1205,17 @@ index 830b6f80af5f22..1fad281448b201 100644
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/check"
  )
-@@ -21,5 +22,5 @@ func Enabled() bool {
+@@ -21,7 +22,7 @@ func Enabled() bool {
  	if fips140.Enabled && !check.Verified {
  		panic("crypto/fips140: FIPS 140-3 mode enabled, but integrity check didn't pass")
  	}
 -	return fips140.Enabled
 +	return fips140.Enabled || bfips140.Enabled()
  }
+ 
+ // Version returns the FIPS 140-3 Go Cryptographic Module version (such as
 diff --git a/src/crypto/hkdf/hkdf.go b/src/crypto/hkdf/hkdf.go
-index 6b02522866d57f..37e67ec184af5d 100644
+index 88439922a5032e..5a3ae17e80efbc 100644
 --- a/src/crypto/hkdf/hkdf.go
 +++ b/src/crypto/hkdf/hkdf.go
 @@ -11,6 +11,7 @@
@@ -1274,7 +1274,7 @@ index 57d90f88e93e75..4069ab057a2525 100644
  	"crypto/md5"
  	"crypto/sha1"
 diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index 554c8c9b78940b..c68a394280cc2c 100644
+index e7976e25193dfe..9578e1e985c02d 100644
 --- a/src/crypto/hmac/hmac.go
 +++ b/src/crypto/hmac/hmac.go
 @@ -22,7 +22,7 @@ timing side-channels:
@@ -1384,7 +1384,7 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 5affb8ce2b6022..91ac24e9c82de0 100644
+index 05dde352191ff4..12acf0c76996ba 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1396,7 +1396,7 @@ index 5affb8ce2b6022..91ac24e9c82de0 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/entropy/v1.0.0"
  	"crypto/internal/fips140"
-@@ -2145,6 +2147,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
+@@ -2105,6 +2107,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
  func TestACVP(t *testing.T) {
  	testenv.SkipIfShortAndSlow(t)
  
@@ -1441,7 +1441,7 @@ index 52fc9d34886003..9afaf522df475c 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index 9274f89d3e2c15..605c37c15f1012 100644
+index f1287887ff5e25..b48cc885eb48f6 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1540,7 +1540,7 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index 176b79673b0851..1c0008e948c215 100644
+index b652e3bae9dd71..ff6cf6ff0aad0d 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
 @@ -13,6 +13,7 @@ package mlkem
@@ -1565,7 +1565,7 @@ index 176b79673b0851..1c0008e948c215 100644
  }
  
  // GenerateKey768 generates a new decapsulation key, drawing random bytes from
- // the default crypto/rand source. The decapsulation key must be kept secret.
+ // a secure source. The decapsulation key must be kept secret.
  func GenerateKey768() (*DecapsulationKey768, error) {
 +	if boring.Enabled && boring.SupportsMLKEM768() {
 +		key, err := boring.GenerateKeyMLKEM768()
@@ -1691,7 +1691,7 @@ index 176b79673b0851..1c0008e948c215 100644
  }
  
  // GenerateKey1024 generates a new decapsulation key, drawing random bytes from
- // the default crypto/rand source. The decapsulation key must be kept secret.
+ // a secure source. The decapsulation key must be kept secret.
  func GenerateKey1024() (*DecapsulationKey1024, error) {
 +	if boring.Enabled && boring.SupportsMLKEM1024() {
 +		key, err := boring.GenerateKeyMLKEM1024()
@@ -1841,7 +1841,7 @@ index 922147ab15dec2..614d51762eddab 100644
  	rand.Read(seed)
  	dk, err := NewDecapsulationKey768(seed)
 diff --git a/src/crypto/pbkdf2/pbkdf2.go b/src/crypto/pbkdf2/pbkdf2.go
-index 01fd12e40e341e..38ffac92a36221 100644
+index 0bc14be888d9d6..4172402e1bb620 100644
 --- a/src/crypto/pbkdf2/pbkdf2.go
 +++ b/src/crypto/pbkdf2/pbkdf2.go
 @@ -11,6 +11,7 @@
@@ -1907,7 +1907,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 1ca16caa9563e6..3ef22b5ff8222b 100644
+index 004e6b6fedc7fc..be03999fab9693 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -1916,9 +1916,9 @@ index 1ca16caa9563e6..3ef22b5ff8222b 100644
  import (
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips140"
  	"crypto/internal/fips140/drbg"
- 	"crypto/internal/sysrand"
+ 	"crypto/internal/rand"
+ 	"io"
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
 index 22ccb8a35334c9..832910da482f44 100644
 --- a/src/crypto/rand/rand_test.go
@@ -1952,7 +1952,7 @@ index 22ccb8a35334c9..832910da482f44 100644
  }
  
 diff --git a/src/crypto/rc4/rc4.go b/src/crypto/rc4/rc4.go
-index eebc1c04cbfedb..a402b7760f917d 100644
+index c4d2b0d382e7fc..ba8dc141117e59 100644
 --- a/src/crypto/rc4/rc4.go
 +++ b/src/crypto/rc4/rc4.go
 @@ -10,6 +10,7 @@
@@ -2134,7 +2134,7 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 8373c125ae3096..990ea980faf33f 100644
+index 75aa3d3d725757..071a7c95114bec 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2164,16 +2164,16 @@ index 8373c125ae3096..990ea980faf33f 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -197,7 +197,7 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
- 
+@@ -216,7 +216,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
  	defer hash.Reset()
+ 	defer mgfHash.Reset()
  
 -	if boring.Enabled && random == boring.RandReader {
 +	if boring.Enabled && random == boring.RandReader && boring.SupportsRSAOAEPLabel(label) {
- 		hash.Reset()
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
-@@ -250,7 +250,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+ 			return nil, ErrMessageTooLong
+@@ -268,7 +268,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
@@ -2182,7 +2182,7 @@ index 8373c125ae3096..990ea980faf33f 100644
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -312,7 +312,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -330,7 +330,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
@@ -2191,7 +2191,7 @@ index 8373c125ae3096..990ea980faf33f 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -355,7 +355,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -373,7 +373,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
@@ -2219,7 +2219,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 76853a94453541..ed51bf17013a9b 100644
+index 0f216e0193252c..2b3cdca698fb1d 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -2230,8 +2230,8 @@ index 76853a94453541..ed51bf17013a9b 100644
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
- 	"crypto/internal/randutil"
-@@ -116,7 +116,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+ 	"crypto/internal/rand"
+@@ -115,7 +115,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
@@ -2240,7 +2240,7 @@ index 76853a94453541..ed51bf17013a9b 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -222,7 +222,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+@@ -221,7 +221,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
  		return 0, nil, 0, err
  	}
  
@@ -2324,7 +2324,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index b6b94a79bbca51..32abaf174bfb5b 100644
+index 62f2de30b0b871..0002a53556ad32 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2339,7 +2339,7 @@ index b6b94a79bbca51..32abaf174bfb5b 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index b9e85bd8ff8f37..5014ae3965c252 100644
+index 5ae4c1dd203874..fc51cb619aa83f 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2386,7 +2386,7 @@ index b9e85bd8ff8f37..5014ae3965c252 100644
  
  	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index 3acc5b11fb789e..36187a8d5bc4ac 100644
+index 46e47df1d32cf2..0fb56a3831c8a2 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -2405,12 +2405,12 @@ index 3acc5b11fb789e..36187a8d5bc4ac 100644
 -	if boring.Enabled {
 -		return boring.SHA1(data)
 -	}
- 	if fips140only.Enabled {
+ 	if fips140only.Enforced() {
  		panic("crypto/sha1: use of SHA-1 is not allowed in FIPS 140-only mode")
  	}
 +	if boring.Enabled {
 +		return boring.SHA1(data)
-+	}	
++	}
  	var d digest
  	d.Reset()
  	d.Write(data)
@@ -3009,7 +3009,7 @@ index e88f05cc505cfb..2067bd9ebc3e50 100644
  package tls
  
 diff --git a/src/crypto/tls/defaults_fips140.go b/src/crypto/tls/defaults_fips140.go
-index 00176795eba6b7..c6352af84f1f1d 100644
+index 19132607938a26..ee38190871b7fd 100644
 --- a/src/crypto/tls/defaults_fips140.go
 +++ b/src/crypto/tls/defaults_fips140.go
 @@ -2,7 +2,7 @@
@@ -3022,7 +3022,7 @@ index 00176795eba6b7..c6352af84f1f1d 100644
  package tls
  
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 291a19f44cdaee..7033b05626a5a2 100644
+index 96273c0fe0ea2f..3bfe7fe20966a6 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -7,7 +7,7 @@ package tls
@@ -3061,15 +3061,14 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 47cf88323d802e..4fb5ca9104f34d 100644
+index c2b1b7037a46cf..4f89d96ec5de28 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -11,11 +11,11 @@ import (
+@@ -11,10 +11,10 @@ import (
  	"crypto/ecdsa"
  	"crypto/ed25519"
- 	"crypto/internal/fips140/mlkem"
+ 	"crypto/hpke"
 -	"crypto/internal/fips140/tls13"
- 	"crypto/internal/hpke"
  	"crypto/rsa"
  	"crypto/subtle"
  	"crypto/tls/internal/fips140tls"
@@ -3077,7 +3076,7 @@ index 47cf88323d802e..4fb5ca9104f34d 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -537,7 +537,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -514,7 +514,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -3094,23 +3093,8 @@ index 47cf88323d802e..4fb5ca9104f34d 100644
  	c := hs.c
  
  	// If we did not load a session (hs.session == nil), but we did set a
-diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 7018bb2336b8f3..d5e02272d7afe1 100644
---- a/src/crypto/tls/handshake_client_tls13.go
-+++ b/src/crypto/tls/handshake_client_tls13.go
-@@ -11,9 +11,9 @@ import (
- 	"crypto/hkdf"
- 	"crypto/hmac"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
- 	"crypto/rsa"
- 	"crypto/subtle"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"hash"
- 	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index a2cf176a86c0d8..b2edd0246016a1 100644
+index efdaeae6f7e39a..491c6d5a0e5d56 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -3131,22 +3115,10 @@ index a2cf176a86c0d8..b2edd0246016a1 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index c5b0552cae6134..24777e1797d1c6 100644
+index 3bed1359a3c851..1eef5231639752 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -11,10 +11,10 @@ import (
- 	"crypto/hkdf"
- 	"crypto/hmac"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
- 	"crypto/internal/hpke"
- 	"crypto/rsa"
- 	"crypto/tls/internal/fips140tls"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"fmt"
- 	"hash"
-@@ -485,9 +485,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+@@ -445,9 +445,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
  	marshaler, ok := in.(binaryMarshaler)
@@ -3381,21 +3353,8 @@ index 00000000000000..579aaedabb188a
 +	h.Write(context)
 +	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
 +}
-diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 1426a276bf2de0..13a67c1b792806 100644
---- a/src/crypto/tls/key_schedule.go
-+++ b/src/crypto/tls/key_schedule.go
-@@ -8,7 +8,7 @@ import (
- 	"crypto/ecdh"
- 	"crypto/hmac"
- 	"crypto/internal/fips140/mlkem"
--	"crypto/internal/fips140/tls13"
-+	"crypto/tls/internal/tls13"
- 	"errors"
- 	"hash"
- 	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index e7369542a73270..ff52175e4ac636 100644
+index 19f80ac2c91c20..1502dd121c0361 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -3464,10 +3423,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index 17e7aaf897ab56..569346899ba445 100644
+index 6dadba3a566f5e..a84b8cdeb42471 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
-@@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
+@@ -3080,7 +3080,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
  	t.Helper()
  	var params dsa.Parameters
  	if err := dsa.GenerateParameters(&params, rand.Reader, dsa.L1024N160); err != nil {
@@ -3477,19 +3436,19 @@ index 17e7aaf897ab56..569346899ba445 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 235d15859473cd..f84d593f6c4d46 100644
+index 2a0589ead089a5..19f4ea8a8c3546 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -531,7 +531,7 @@ var depsRules = `
+@@ -538,7 +538,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
--	< FIPS < crypto/fips140;
+-	< crypto/fips140 < FIPS;
 +	< FIPS;
  
  	FIPS, hash < crypto/internal/fips140only;
  	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -559,6 +559,8 @@ var depsRules = `
+@@ -566,6 +566,8 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -3498,7 +3457,7 @@ index 235d15859473cd..f84d593f6c4d46 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -601,6 +603,7 @@ var depsRules = `
+@@ -610,6 +612,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index ea7399397e5..13ed9d75933 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -24,7 +24,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 711ce750a71a93..05312aaf9bcb9d 100644
+index 3bfe7fe20966a6..dbb6b56c48cc20 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -14,6 +14,7 @@ import (
@@ -35,7 +35,7 @@ index 711ce750a71a93..05312aaf9bcb9d 100644
  	"internal/obscuretestdata"
  	"internal/testenv"
  	"math/big"
-@@ -187,6 +188,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
+@@ -191,6 +192,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
  		}
  		serverConfig.BuildNameToCertificate()
  		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
@@ -467,7 +467,7 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index bfcc62ccfb8ba0..1a2f7e2fc96f5e 100644
+index 39ebb9d2f1edd3..9bb2d0801111c2 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -21,6 +21,7 @@ import (
@@ -553,13 +553,13 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 643700e55830e4..c7df9d70ab4a27 100644
+index be2104e8f5a437..bbe0c40b404a66 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -136,4 +136,12 @@ type Flags struct {
+@@ -150,4 +150,12 @@ type Flags struct {
  
- 	// GoroutineLeakProfile enables the collection of goroutine leak profiles.
- 	GoroutineLeakProfile bool
+ 	// RuntimeSecret enables the runtime/secret package.
+ 	RuntimeSecret bool
 +
 +	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
 +	// suites according to the Windows Schannel settings.
@@ -640,7 +640,7 @@ index 09be2eb0807932..b74b311279e81f 100644
 +	}
 +}
 diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index 70c4d76dff0d0f..93e38cd3b9e761 100644
+index d087fd46f6b27b..c7b04451fed945 100644
 --- a/src/internal/syscall/windows/zsyscall_windows.go
 +++ b/src/internal/syscall/windows/zsyscall_windows.go
 @@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
@@ -660,7 +660,7 @@ index 70c4d76dff0d0f..93e38cd3b9e761 100644
  	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
  	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
  	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -243,6 +246,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+@@ -244,6 +247,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
  	return
  }
  

From 2dfc8dac1e59f9612e072114487e857e3fe6ecff Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 2 Dec 2025 13:51:46 +0000
Subject: [PATCH 587/887] fix md5

---
 patches/0004-Use-crypto-backends.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 9cd960013a0..7c73a2c198a 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -1441,7 +1441,7 @@ index 52fc9d34886003..9afaf522df475c 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index f1287887ff5e25..b48cc885eb48f6 100644
+index f1287887ff5e25..b2e26308349566 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1467,7 +1467,7 @@ index f1287887ff5e25..b48cc885eb48f6 100644
  // Sum returns the MD5 checksum of the data.
  func Sum(data []byte) [Size]byte {
 +	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
-+		if fips140only.Enabled {
++		if fips140only.Enforced() {
 +			panic("crypto/md5: use of MD5 is not allowed in FIPS 140-only mode")
 +		}
 +		return boring.MD5(data)

From 22146081ddf1c2dbe47335131769add9e378b928 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 2 Dec 2025 14:08:41 +0000
Subject: [PATCH 588/887] fixup tls

---
 patches/0004-Use-crypto-backends.patch | 48 ++++++++++++++++++++++++--
 1 file changed, 45 insertions(+), 3 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 7c73a2c198a..694b7f2bc3b 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -81,10 +81,12 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  12 +-
+ src/crypto/tls/handshake_client_tls13.go      |   2 +-
  src/crypto/tls/handshake_server.go            |  10 +-
- src/crypto/tls/handshake_server_tls13.go      |   3 -
+ src/crypto/tls/handshake_server_tls13.go      |   5 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
+ src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |   5 +-
@@ -94,7 +96,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 90 files changed, 1332 insertions(+), 136 deletions(-)
+ 92 files changed, 1335 insertions(+), 139 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -3093,6 +3095,21 @@ index c2b1b7037a46cf..4f89d96ec5de28 100644
  	c := hs.c
  
  	// If we did not load a session (hs.session == nil), but we did set a
+diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
+index e696bd3a13dcb1..c9e94783260860 100644
+--- a/src/crypto/tls/handshake_client_tls13.go
++++ b/src/crypto/tls/handshake_client_tls13.go
+@@ -10,9 +10,9 @@ import (
+ 	"crypto"
+ 	"crypto/hkdf"
+ 	"crypto/hmac"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/rsa"
+ 	"crypto/subtle"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
 index efdaeae6f7e39a..491c6d5a0e5d56 100644
 --- a/src/crypto/tls/handshake_server.go
@@ -3115,9 +3132,20 @@ index efdaeae6f7e39a..491c6d5a0e5d56 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 3bed1359a3c851..1eef5231639752 100644
+index 3bed1359a3c851..dffdc345845748 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
+@@ -11,9 +11,9 @@ import (
+ 	"crypto/hkdf"
+ 	"crypto/hmac"
+ 	"crypto/hpke"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/rsa"
+ 	"crypto/tls/internal/fips140tls"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"fmt"
+ 	"hash"
 @@ -445,9 +445,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
@@ -3353,6 +3381,20 @@ index 00000000000000..579aaedabb188a
 +	h.Write(context)
 +	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
 +}
+diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
+index bfa22449c87178..08cda456579f64 100644
+--- a/src/crypto/tls/key_schedule.go
++++ b/src/crypto/tls/key_schedule.go
+@@ -8,8 +8,8 @@ import (
+ 	"crypto"
+ 	"crypto/ecdh"
+ 	"crypto/hmac"
+-	"crypto/internal/fips140/tls13"
+ 	"crypto/mlkem"
++	"crypto/tls/internal/tls13"
+ 	"errors"
+ 	"hash"
+ 	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
 index 19f80ac2c91c20..1502dd121c0361 100644
 --- a/src/crypto/tls/prf.go

From 3cb7897421341e7b9d1ab07bd2a0e60ae95d5e68 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 2 Dec 2025 14:30:37 +0000
Subject: [PATCH 589/887] fix nil rand reader for boring

---
 patches/0004-Use-crypto-backends.patch | 114 ++++++++++++++++++++++++-
 1 file changed, 113 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 694b7f2bc3b..1e8299c73d1 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -45,6 +45,9 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
+ src/crypto/internal/rand/rand.go              |  23 ---
+ src/crypto/internal/rand/rand_boring.go       |  19 ++
+ src/crypto/internal/rand/rand_notboring.go    |  35 ++++
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
  src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
@@ -96,12 +99,14 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 92 files changed, 1335 insertions(+), 139 deletions(-)
+ 95 files changed, 1389 insertions(+), 162 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
+ create mode 100644 src/crypto/internal/rand/rand_boring.go
+ create mode 100644 src/crypto/internal/rand/rand_notboring.go
  create mode 100644 src/crypto/rsa/darwin.go
  create mode 100644 src/crypto/tls/internal/tls13/doc.go
  create mode 100644 src/crypto/tls/internal/tls13/tls13.go
@@ -1442,6 +1447,113 @@ index 52fc9d34886003..9afaf522df475c 100644
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
+diff --git a/src/crypto/internal/rand/rand.go b/src/crypto/internal/rand/rand.go
+index 3a780952e705e5..834d468704d68f 100644
+--- a/src/crypto/internal/rand/rand.go
++++ b/src/crypto/internal/rand/rand.go
+@@ -5,7 +5,6 @@
+ package rand
+ 
+ import (
+-	"crypto/internal/boring"
+ 	"crypto/internal/fips140/drbg"
+ 	"crypto/internal/randutil"
+ 	"internal/godebug"
+@@ -13,28 +12,6 @@ import (
+ 	_ "unsafe"
+ )
+ 
+-type reader struct {
+-	drbg.DefaultReader
+-}
+-
+-func (r reader) Read(b []byte) (n int, err error) {
+-	if boring.Enabled {
+-		if _, err := boring.RandReader.Read(b); err != nil {
+-			panic("crypto/rand: boring RandReader failed: " + err.Error())
+-		}
+-		return len(b), nil
+-	}
+-	drbg.Read(b)
+-	return len(b), nil
+-}
+-
+-// Reader is an io.Reader that calls [drbg.Read].
+-//
+-// It should be used internally instead of [crypto/rand.Reader], because the
+-// latter can be set by applications outside of tests. These applications then
+-// risk breaking between Go releases, if the way the Reader is used changes.
+-var Reader io.Reader = reader{}
+-
+ // SetTestingReader overrides all calls to [drbg.Read]. The Read method of
+ // r must never return an error or return short.
+ //
+diff --git a/src/crypto/internal/rand/rand_boring.go b/src/crypto/internal/rand/rand_boring.go
+new file mode 100644
+index 00000000000000..e7ebcdfe102a43
+--- /dev/null
++++ b/src/crypto/internal/rand/rand_boring.go
+@@ -0,0 +1,19 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package rand
++
++import (
++	boring "crypto/internal/backend"
++	"io"
++)
++
++// Reader is an io.Reader that calls [drbg.Read].
++//
++// It should be used internally instead of [crypto/rand.Reader], because the
++// latter can be set by applications outside of tests. These applications then
++// risk breaking between Go releases, if the way the Reader is used changes.
++var Reader io.Reader = boring.RandReader
+diff --git a/src/crypto/internal/rand/rand_notboring.go b/src/crypto/internal/rand/rand_notboring.go
+new file mode 100644
+index 00000000000000..c24a29571d7bfc
+--- /dev/null
++++ b/src/crypto/internal/rand/rand_notboring.go
+@@ -0,0 +1,35 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package rand
++
++import (
++	"crypto/internal/boring"
++	"crypto/internal/fips140/drbg"
++	"io"
++)
++
++type reader struct {
++	drbg.DefaultReader
++}
++
++func (r reader) Read(b []byte) (n int, err error) {
++	if boring.Enabled {
++		if _, err := boring.RandReader.Read(b); err != nil {
++			panic("crypto/rand: boring RandReader failed: " + err.Error())
++		}
++		return len(b), nil
++	}
++	drbg.Read(b)
++	return len(b), nil
++}
++
++// Reader is an io.Reader that calls [drbg.Read].
++//
++// It should be used internally instead of [crypto/rand.Reader], because the
++// latter can be set by applications outside of tests. These applications then
++// risk breaking between Go releases, if the way the Reader is used changes.
++var Reader io.Reader = reader{}
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index f1287887ff5e25..b2e26308349566 100644
 --- a/src/crypto/md5/md5.go

From 996226861ab608aa6fed46a791f83bdf56a451ed Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 2 Dec 2025 16:54:34 +0000
Subject: [PATCH 590/887] split opensslsetup into separate package

---
 .../0001-Vendor-external-dependencies.patch   | 1292 ++++++++++-------
 ...03-Implement-crypto-internal-backend.patch |   63 +-
 2 files changed, 754 insertions(+), 601 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index f3e9ef36bcd..3eac5e986a6 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -35,7 +35,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
- src/go/build/deps_test.go                     |   38 +-
+ src/go/build/deps_test.go                     |   39 +-
  src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
@@ -45,7 +45,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  652 +++++
- .../golang-fips/openssl/v2/const.go           |   97 +
+ .../golang-fips/openssl/v2/const.go           |   86 +
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
@@ -58,10 +58,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  455 ++++
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
- .../github.com/golang-fips/openssl/v2/init.go |  156 ++
- .../golang-fips/openssl/v2/init_cgo_unix.go   |   31 +
- .../golang-fips/openssl/v2/init_nocgo_unix.go |   32 +
- .../golang-fips/openssl/v2/init_windows.go    |   36 +
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   34 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   29 +
@@ -110,9 +106,17 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
  .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2341 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
- .../golang-fips/openssl/v2/openssl.go         |  355 +++
+ .../golang-fips/openssl/v2/openssl.go         |  246 ++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
+ .../golang-fips/openssl/v2/osslsetup/fips.go  |  165 ++
+ .../golang-fips/openssl/v2/osslsetup/init.go  |  157 ++
+ .../openssl/v2/osslsetup/init_cgo_unix.go     |   31 +
+ .../openssl/v2/osslsetup/init_nocgo_unix.go   |   32 +
+ .../openssl/v2/osslsetup/init_windows.go      |   36 +
+ .../openssl/v2/osslsetup/osslsetup.go         |   66 +
+ .../openssl/v2/osslsetup/osslsetup_cgo.go     |   11 +
+ .../openssl/v2/osslsetup/osslsetup_nocgo.go   |   21 +
  .../golang-fips/openssl/v2/params.go          |  184 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
  .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
@@ -207,8 +211,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/bcrypt/zsyscall_windows.go       |  446 ++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
- src/vendor/modules.txt                        |   20 +
- 200 files changed, 28387 insertions(+), 7 deletions(-)
+ src/vendor/modules.txt                        |   21 +
+ 204 files changed, 28533 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -252,10 +256,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
@@ -307,6 +307,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
@@ -2062,7 +2070,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f79455c970ecb2..b29cc73fb1712f 100644
+index f79455c970ecb2..0b09b5cdef45d0 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2071,17 +2079,17 @@ index f79455c970ecb2..b29cc73fb1712f 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index e2cf9591bc56dc..490c2acb626694 100644
+index e2cf9591bc56dc..4d6f4c38e7146f 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7 h1:uRbVHzfzuY0m6zgFv0032WsSmYbM9dcZFtoXV5f1NRk=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb h1:qyynodbsPfFXz8Fsg9lUmQ9Evvpzmy5DK91RCBv3v2I=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc h1:bz/6zng2sakr1ETJsKnGoHooH6sBKbQNxk9aeH5tRt0=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
@@ -2090,10 +2098,10 @@ index e2cf9591bc56dc..490c2acb626694 100644
  golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d58bd294cd103c..bbd53b99006c3f 100644
+index d58bd294cd103c..63571c59f5b9f0 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -540,6 +540,27 @@ var depsRules = `
+@@ -540,6 +540,28 @@ var depsRules = `
  	< crypto/internal/fips140/rsa
  	< crypto/fips140 < FIPS;
  
@@ -2108,6 +2116,7 @@ index d58bd294cd103c..bbd53b99006c3f 100644
 +	crypto/cipher
 +	< github.com/golang-fips/openssl/v2/internal/fakecgo
 +	< github.com/golang-fips/openssl/v2/internal/ossl
++	< github.com/golang-fips/openssl/v2/osslsetup
 +	< github.com/golang-fips/openssl/v2
 +	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +	< github.com/microsoft/go-crypto-darwin/internal/security
@@ -2121,7 +2130,7 @@ index d58bd294cd103c..bbd53b99006c3f 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -551,13 +572,12 @@ var depsRules = `
+@@ -551,13 +573,12 @@ var depsRules = `
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
@@ -2139,7 +2148,7 @@ index d58bd294cd103c..bbd53b99006c3f 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -579,6 +599,10 @@ var depsRules = `
+@@ -579,6 +600,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2150,7 +2159,7 @@ index d58bd294cd103c..bbd53b99006c3f 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -925,7 +949,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -925,7 +950,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2159,7 +2168,7 @@ index d58bd294cd103c..bbd53b99006c3f 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -935,7 +959,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -935,7 +960,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -3176,10 +3185,10 @@ index 00000000000000..8d8f12fecda346
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..8b6393fe20b0d9
+index 00000000000000..25aa51c935b1e6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,97 @@
+@@ -0,0 +1,86 @@
 +package openssl
 +
 +import "unsafe"
@@ -3212,14 +3221,6 @@ index 00000000000000..8b6393fe20b0d9
 +}
 +
 +const ( //checkheader:ignore
-+	// Provider names
-+	_ProviderNameFips    cString = "fips\x00"
-+	_ProviderNameDefault cString = "default\x00"
-+
-+	// Property strings
-+	_PropFIPSYes cString = "fips=yes\x00"
-+	_PropFIPSNo  cString = "-fips\x00"
-+
 +	// Key types
 +	_KeyTypeRSA       cString = "RSA\x00"
 +	_KeyTypeEC        cString = "EC\x00"
@@ -3228,9 +3229,6 @@ index 00000000000000..8b6393fe20b0d9
 +	_KeyTypeMLKEM768  cString = "ML-KEM-768\x00"
 +	_KeyTypeMLKEM1024 cString = "ML-KEM-1024\x00"
 +
-+	// Digest Names
-+	_DigestNameSHA2_256 cString = "SHA2-256\x00"
-+
 +	// KDF names
 +	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
 +	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
@@ -6545,390 +6543,111 @@ index 00000000000000..72ac5f1b11cbc3
 +		panic(errUnsupportedVersion())
 +	}
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init.go b/src/vendor/github.com/golang-fips/openssl/v2/init.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
 new file mode 100644
-index 00000000000000..729d51d38c0265
+index 00000000000000..c646c454a788fd
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/init.go
-@@ -0,0 +1,156 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
+@@ -0,0 +1,34 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+package openssl
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These save the frame pointer, so in general, functions that use
++// these should have zero frame size to suppress the automatic frame
++// pointer, though it's harmless to not do this.
 +
-+import (
-+	"errors"
-+	"unsafe"
++#define REGS_HOST_TO_ABI0_STACK (6*8)
 +
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
++// SysV MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++// Both SysV and Go require DF to be cleared, so that's already clear.
++// The SysV and Go frame pointer conventions are compatible.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
++	MOVQ	BP, (5*8)(SP)	\
++	LEAQ	(5*8)(SP), BP	\
++	MOVQ	BX, (0*8)(SP)	\
++	MOVQ	R12, (1*8)(SP)	\
++	MOVQ	R13, (2*8)(SP)	\
++	MOVQ	R14, (3*8)(SP)	\
++	MOVQ	R15, (4*8)(SP)
 +
-+// osslHandle is the handle to the OpenSSL shared library loaded in the [Init] function.
-+var osslHandle unsafe.Pointer
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*8)(SP), BX	\
++	MOVQ	(1*8)(SP), R12	\
++	MOVQ	(2*8)(SP), R13	\
++	MOVQ	(3*8)(SP), R14	\
++	MOVQ	(4*8)(SP), R15	\
++	MOVQ	(5*8)(SP), BP	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+new file mode 100644
+index 00000000000000..5d5061ec1dbf8c
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+@@ -0,0 +1,39 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// opensslInit loads and initializes OpenSSL.
++// Macros for transitioning from the host ABI to Go ABI0.
 +//
-+// See [Init] for details about file.
-+func opensslInit(file string) error {
-+	// Load the OpenSSL shared library using dlopen.
-+	handle, close, err := openLibrary(file)
-+	if err != nil {
-+		return err
-+	}
-+
-+	ossl.MkcgoLoad_(handle)
-+	if vMajor == 1 {
-+		ossl.MkcgoLoad_legacy_1(handle)
-+		if vPatch == 1 {
-+			ossl.MkcgoLoad_111(handle)
-+		}
-+	} else {
-+		ossl.MkcgoLoad_111(handle)
-+		ossl.MkcgoLoad_3(handle)
-+	}
-+
-+	// Initialize OpenSSL.
-+	ossl.OPENSSL_init()
-+	if _, err = ossl.OPENSSL_init_crypto(
-+		ossl.OPENSSL_INIT_ADD_ALL_CIPHERS|
-+			ossl.OPENSSL_INIT_ADD_ALL_DIGESTS|
-+			ossl.OPENSSL_INIT_LOAD_CONFIG|
-+			ossl.OPENSSL_INIT_LOAD_CRYPTO_STRINGS,
-+		nil); err != nil {
-+		close()
-+		return err
-+	}
-+	osslHandle = handle
-+	return nil
-+}
-+
-+// initForCheckVersion loads and initialize only the
-+// functions required in [CheckVersion].
-+// It returns a close function that must be called to release the resources.
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
 +//
-+// This function modifies the vMajor, vMinor, and vPatch global variables as
-+// well as other internal global variables that facilitate OpenSSL calls.
++// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
 +//
-+// If the function succeeds, calling the close function restores the previous
-+// state of the global variables. If it fails, the global variables are restored
-+// before returning.
-+func initForCheckVersion(file string) (func(), error) {
-+	prevMajor, prevMinor, prevPatch := vMajor, vMinor, vPatch
-+	restoreVersion := func() {
-+		vMajor, vMinor, vPatch = prevMajor, prevMinor, prevPatch
-+	}
-+	handle, close, err := openLibrary(file)
-+	if err != nil {
-+		restoreVersion()
-+		return nil, err
-+	}
-+	initFuncs := func() (loadX func(unsafe.Pointer), unloadX func()) {
-+		switch vMajor {
-+		case 1:
-+			loadX = ossl.MkcgoLoad_init_1
-+			unloadX = ossl.MkcgoUnload_init_1
-+		case 3:
-+			loadX = ossl.MkcgoLoad_init_3
-+			unloadX = ossl.MkcgoUnload_init_3
-+		default:
-+			// We shouldn't get here: openLibrary should have already returned an error.
-+			panic(errUnsupportedVersion())
-+		}
-+		return
-+	}
-+	loadX, unloadX := initFuncs()
-+	loadX(handle)
-+	return func() {
-+		restoreVersion()
-+		close()
-+		unloadX()
-+		if osslHandle != nil {
-+			// If osslHandle is not nil, it means that the library was already loaded
-+			// and initialized. In this case, we need to reload the functions from
-+			// the original handle.
-+			loadX, _ = initFuncs()
-+			loadX(osslHandle)
-+		}
-+	}, nil
-+}
-+
-+// openLibrary loads and initialize the version of OpenSSL.
-+// It returns the handle to the OpenSSL shared library
-+// and a function that can be called to release the resources.
-+func openLibrary(file string) (handle unsafe.Pointer, close func(), err error) {
-+	vMajor, vMinor, vPatch = 0, 0, 0
-+	handle, err = dlopen(file)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	// Retrieve the loaded OpenSSL version and check if it is supported.
-+	// Notice that major and minor could not match with the version parameter
-+	// in case the name of the shared library file differs from the OpenSSL
-+	// version it contains.
-+	ossl.MkcgoLoad_version(handle)
-+	close = func() {
-+		dlclose(handle)
-+		if osslHandle == nil {
-+			ossl.MkcgoUnload_version()
-+		} else {
-+			ossl.MkcgoLoad_version(osslHandle)
-+		}
-+	}
-+	defer func() {
-+		if err != nil {
-+			close()
-+		}
-+	}()
++// R29 is not saved because Go will save and restore it.
 +
-+	if ossl.OPENSSL_version_major_Available() &&
-+		ossl.OPENSSL_version_minor_Available() &&
-+		ossl.OPENSSL_version_patch_Available() {
-+		// Likely OpenSSL 3 or later.
-+		vMajor = uint(ossl.OPENSSL_version_major())
-+		vMinor = uint(ossl.OPENSSL_version_minor())
-+		vPatch = uint(ossl.OPENSSL_version_patch())
-+	} else if ossl.OpenSSL_version_num_Available() {
-+		// Likely OpenSSL 1.
-+		ver := ossl.OpenSSL_version_num()
-+		vMajor = uint(ver >> 28)
-+		vMinor = uint(ver >> 20 & 0xFF)
-+		vPatch = uint(ver >> 12 & 0xFF)
-+	} else {
-+		return handle, nil, errors.New("openssl: version not available")
-+	}
-+	var supported bool
-+	if vMajor == 1 {
-+		supported = vMinor == 1
-+	} else if vMajor == 3 {
-+		// OpenSSL guarantees API and ABI compatibility within the same major version since OpenSSL 3.
-+		supported = true
-+	}
-+	if !supported {
-+		return handle, nil, errUnsupportedVersion()
-+	}
-+	return handle, close, nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
++#define SAVE_R19_TO_R28(offset) \
++	STP	(R19, R20), ((offset)+0*8)(RSP) \
++	STP	(R21, R22), ((offset)+2*8)(RSP) \
++	STP	(R23, R24), ((offset)+4*8)(RSP) \
++	STP	(R25, R26), ((offset)+6*8)(RSP) \
++	STP	(R27, g), ((offset)+8*8)(RSP)
++#define RESTORE_R19_TO_R28(offset) \
++	LDP	((offset)+0*8)(RSP), (R19, R20) \
++	LDP	((offset)+2*8)(RSP), (R21, R22) \
++	LDP	((offset)+4*8)(RSP), (R23, R24) \
++	LDP	((offset)+6*8)(RSP), (R25, R26) \
++	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
++#define SAVE_F8_TO_F15(offset) \
++	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
++	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
++	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
++	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
++#define RESTORE_F8_TO_F15(offset) \
++	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
++	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
++	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
++	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
 new file mode 100644
-index 00000000000000..dbf5ac448fdf80
+index 00000000000000..fe133dacac6959
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/init_cgo_unix.go
-@@ -0,0 +1,31 @@
-+//go:build unix && !cmd_go_bootstrap
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
+@@ -0,0 +1,29 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+package openssl
++#include "textflag.h"
++#include "abi_amd64.h"
 +
-+// #cgo LDFLAGS: -ldl
-+// #include <stdlib.h>
-+// #include <dlfcn.h>
-+import "C"
-+import (
-+	"errors"
-+	"unsafe"
-+)
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	cv := C.CString(file)
-+	defer C.free(unsafe.Pointer(cv))
-+	handle = C.dlopen(cv, C.RTLD_LAZY|C.RTLD_LOCAL)
-+	if handle == nil {
-+		errstr := C.GoString(C.dlerror())
-+		return nil, errors.New("openssl: can't load " + file + ": " + errstr)
-+	}
-+	return handle, nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	if C.dlclose(handle) != 0 {
-+		errstr := C.GoString(C.dlerror())
-+		return errors.New("openssl: can't close libcrypto: " + errstr)
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
-new file mode 100644
-index 00000000000000..9fed365a2c6e3f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/init_nocgo_unix.go
-@@ -0,0 +1,32 @@
-+//go:build unix && !cmd_go_bootstrap && !cgo && goexperiment.ms_nocgo_opensslcrypto
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"runtime"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	const RTLD_LAZY = 1
-+	var RTLD_LOCAL = 0
-+	if runtime.GOOS == "darwin" {
-+		RTLD_LOCAL = 4 // darwin uses 4 as RTLD_LOCAL
-+	}
-+	handle = ossl.Dlopen(unsafe.StringData(file+"\x00"), int32(RTLD_LAZY|RTLD_LOCAL))
-+	if handle == nil {
-+		return nil, errors.New(goString(ossl.Dlerror()))
-+	}
-+	return handle, nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	if ossl.Dlclose(handle) != 0 {
-+		errstr := goString(ossl.Dlerror())
-+		return errors.New("openssl: can't close libcrypto: " + errstr)
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/init_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
-new file mode 100644
-index 00000000000000..3778e21227abb9
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/init_windows.go
-@@ -0,0 +1,36 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
-+
-+type dlopenError struct {
-+	file string
-+	err  error
-+}
-+
-+func (e *dlopenError) Error() string {
-+	return "openssl: can't load " + e.file + ": " + e.err.Error()
-+}
-+
-+func (e *dlopenError) Unwrap() error {
-+	return e.err
-+}
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	// As Windows generally does not ship with a system OpenSSL library, let
-+	// alone a FIPS 140 certified one, use the default library search order so
-+	// that we preferentially load the DLL bundled with the application.
-+	h, err := syscall.LoadLibrary(file)
-+	if err != nil {
-+		return nil, &dlopenError{file: file, err: err}
-+	}
-+	return unsafe.Pointer(h), nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	return syscall.FreeLibrary(syscall.Handle(handle))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
-new file mode 100644
-index 00000000000000..c646c454a788fd
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
-@@ -0,0 +1,34 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These save the frame pointer, so in general, functions that use
-+// these should have zero frame size to suppress the automatic frame
-+// pointer, though it's harmless to not do this.
-+
-+#define REGS_HOST_TO_ABI0_STACK (6*8)
-+
-+// SysV MXCSR matches the Go ABI, so we don't have to set that,
-+// and Go doesn't modify it, so we don't have to save it.
-+// Both SysV and Go require DF to be cleared, so that's already clear.
-+// The SysV and Go frame pointer conventions are compatible.
-+#define PUSH_REGS_HOST_TO_ABI0()	\
-+	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
-+	MOVQ	BP, (5*8)(SP)	\
-+	LEAQ	(5*8)(SP), BP	\
-+	MOVQ	BX, (0*8)(SP)	\
-+	MOVQ	R12, (1*8)(SP)	\
-+	MOVQ	R13, (2*8)(SP)	\
-+	MOVQ	R14, (3*8)(SP)	\
-+	MOVQ	R15, (4*8)(SP)
-+
-+#define POP_REGS_HOST_TO_ABI0()	\
-+	MOVQ	(0*8)(SP), BX	\
-+	MOVQ	(1*8)(SP), R12	\
-+	MOVQ	(2*8)(SP), R13	\
-+	MOVQ	(3*8)(SP), R14	\
-+	MOVQ	(4*8)(SP), R15	\
-+	MOVQ	(5*8)(SP), BP	\
-+	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
-new file mode 100644
-index 00000000000000..5d5061ec1dbf8c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
-@@ -0,0 +1,39 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These macros save and restore the callee-saved registers
-+// from the stack, but they don't adjust stack pointer, so
-+// the user should prepare stack space in advance.
-+// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
-+//
-+// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
-+//
-+// R29 is not saved because Go will save and restore it.
-+
-+#define SAVE_R19_TO_R28(offset) \
-+	STP	(R19, R20), ((offset)+0*8)(RSP) \
-+	STP	(R21, R22), ((offset)+2*8)(RSP) \
-+	STP	(R23, R24), ((offset)+4*8)(RSP) \
-+	STP	(R25, R26), ((offset)+6*8)(RSP) \
-+	STP	(R27, g), ((offset)+8*8)(RSP)
-+#define RESTORE_R19_TO_R28(offset) \
-+	LDP	((offset)+0*8)(RSP), (R19, R20) \
-+	LDP	((offset)+2*8)(RSP), (R21, R22) \
-+	LDP	((offset)+4*8)(RSP), (R23, R24) \
-+	LDP	((offset)+6*8)(RSP), (R25, R26) \
-+	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
-+#define SAVE_F8_TO_F15(offset) \
-+	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
-+	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
-+	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
-+	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
-+#define RESTORE_F8_TO_F15(offset) \
-+	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
-+	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
-+	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
-+	FLDPD	((offset)+6*8)(RSP), (F14, F15)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
-new file mode 100644
-index 00000000000000..fe133dacac6959
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
-@@ -0,0 +1,29 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_amd64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+// This signature is known to SWIG, so we can't change it.
-+TEXT crosscall2(SB), NOSPLIT, $0-0
-+	PUSH_REGS_HOST_TO_ABI0()
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++// This signature is known to SWIG, so we can't change it.
++TEXT crosscall2(SB), NOSPLIT, $0-0
++	PUSH_REGS_HOST_TO_ABI0()
 +
 +	// Make room for arguments to cgocallback.
 +	ADJSP $0x18
@@ -16391,10 +16110,10 @@ index 00000000000000..cea3f9881f920e
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..a39b424f708047
+index 00000000000000..ae5dd424ff9627
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,355 @@
+@@ -0,0 +1,246 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -16404,38 +16123,28 @@ index 00000000000000..a39b424f708047
 +	"errors"
 +	"math/bits"
 +	"strconv"
-+	"sync"
 +	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
++	"github.com/golang-fips/openssl/v2/osslsetup"
 +)
 +
 +var (
 +	// vMajor and vMinor hold the major/minor OpenSSL version.
 +	// It is only populated if Init has been called.
-+	vMajor, vMinor, vPatch uint
-+)
-+
-+var (
-+	initOnce sync.Once
-+	initErr  error
++	vMajor, vMinor, vPatch int
 +)
 +
-+var isBigEndian bool
-+
 +// CheckVersion checks if the OpenSSL version can be loaded
 +// and if the FIPS mode is enabled.
 +// This function can be called before Init.
 +// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
 +func CheckVersion(version string) (exists, fips bool) {
-+	close, err := initForCheckVersion(version)
-+	if err != nil {
-+		return false, false
-+	}
-+	defer close()
-+	return true, FIPS()
++	return osslsetup.CheckVersion(version)
 +}
 +
++var isBigEndian bool
++
 +// Init loads and initializes OpenSSL from the shared library at path.
 +// It must be called before any other OpenSSL call, except CheckVersion.
 +//
@@ -16446,24 +16155,25 @@ index 00000000000000..a39b424f708047
 +// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
 +// library libcrypto.so.1.1.1k-fips.
 +func Init(file string) error {
-+	initOnce.Do(func() {
-+		buf := [2]byte{}
-+		*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
-+
-+		switch buf {
-+		case [2]byte{0xCD, 0xAB}:
-+			isBigEndian = false
-+		case [2]byte{0xAB, 0xCD}:
-+			isBigEndian = true
-+		default:
-+			panic("Could not determine native endianness.")
-+		}
-+		initErr = opensslInit(file)
-+	})
-+	return initErr
++	buf := [2]byte{}
++	*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
++
++	switch buf {
++	case [2]byte{0xCD, 0xAB}:
++		isBigEndian = false
++	case [2]byte{0xAB, 0xCD}:
++		isBigEndian = true
++	default:
++		panic("Could not determine native endianness.")
++	}
++	if err := osslsetup.Init(file); err != nil {
++		return err
++	}
++	vMajor, vMinor, vPatch = osslsetup.Version()
++	return nil
 +}
 +
-+func utoa(n uint) string {
++func utoa(n int) string {
 +	return strconv.FormatUint(uint64(n), 10)
 +}
 +
@@ -16472,9 +16182,9 @@ index 00000000000000..a39b424f708047
 +}
 +
 +// checkMajorVersion panics if the current major version is not expected.
-+func checkMajorVersion(expected uint) {
++func checkMajorVersion(expected int) {
 +	if vMajor != expected {
-+		panic("openssl: incorrect major version (" + strconv.Itoa(int(vMajor)) + "), expected " + strconv.Itoa(int(expected)))
++		panic("openssl: incorrect major version (" + strconv.Itoa(vMajor) + "), expected " + strconv.Itoa(expected))
 +	}
 +}
 +
@@ -16483,137 +16193,37 @@ index 00000000000000..a39b424f708047
 +func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
 +
 +// VersionText returns the version text of the OpenSSL currently loaded.
++//
++//go:fix inline
 +func VersionText() string {
-+	return goString(ossl.OpenSSL_version(0))
++	return osslsetup.VersionText()
 +}
 +
 +// FIPS returns true if OpenSSL is running in FIPS mode and there is
 +// a provider available that supports FIPS. It returns false otherwise.
 +// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++//
++//go:fix inline
 +func FIPS() bool {
-+	switch vMajor {
-+	case 1:
-+		return ossl.FIPS_mode() == 1
-+	case 3:
-+		// Check if the default properties contain `fips=1`.
-+		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
-+			// Note that it is still possible that the provider used by default is FIPS-compliant,
-+			// but that wouldn't be a system or user requirement.
-+			return false
-+		}
-+		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
-+		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
-+		//
-+		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
-+		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
-+		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
-+		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
-+		return proveSHA256("")
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
++	return osslsetup.FIPS()
 +}
 +
 +// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
-+// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
-+// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
-+// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
-+// which is FIPS-capable.
++// See [osslsetup.FIPSCapable] for details.
 +//
-+// Considerations:
-+//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
-+//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
-+//     the default properties contain `fips=yes`.
-+//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
-+//   - When using OpenSSL 1, Will always return the same value as [FIPS].
-+//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
-+//     some heuristics that should be treated as an implementation detail that may change in the future.
++//go:fix inline
 +func FIPSCapable() bool {
-+	if FIPS() {
-+		return true
-+	}
-+	if vMajor == 3 {
-+		// Load the provider with and without the `fips=yes` query.
-+		// If the providers are the same, then the default provider is FIPS-capable.
-+		provFIPS := sha256Provider(_ProviderNameFips)
-+		if provFIPS == nil {
-+			return false
-+		}
-+		provDefault := sha256Provider("")
-+		return provFIPS == provDefault
-+	}
-+	return false
-+}
-+
-+// isProviderAvailable checks if the provider with the given name is available.
-+// This function is used in export_test.go, but must be defined here as test files can't access C functions.
-+func isProviderAvailable(name string) bool {
-+	if vMajor == 1 {
-+		return false
-+	}
-+	return ossl.OSSL_PROVIDER_available(nil, unsafe.StringData(name+"\x00")) == 1
++	return osslsetup.FIPSCapable()
 +}
 +
 +// SetFIPS enables or disables FIPS mode.
 +//
 +// For OpenSSL 3, if there is no provider available that supports FIPS mode,
 +// SetFIPS will try to load a built-in provider that supports FIPS mode.
++//
++//go:fix inline
 +func SetFIPS(enable bool) error {
-+	if FIPS() == enable {
-+		// Already in the desired state.
-+		return nil
-+	}
-+	var mode int32
-+	if enable {
-+		mode = int32(1)
-+	} else {
-+		mode = int32(0)
-+	}
-+	switch vMajor {
-+	case 1:
-+		if _, err := ossl.FIPS_mode_set(mode); err != nil {
-+			return err
-+		}
-+		return nil
-+	case 3:
-+		var shaProps, provName cString
-+		if enable {
-+			shaProps = _PropFIPSYes
-+			provName = _ProviderNameFips
-+		} else {
-+			shaProps = _PropFIPSNo
-+			provName = _ProviderNameDefault
-+		}
-+		if !proveSHA256(shaProps) {
-+			// There is no provider available that supports the desired FIPS mode.
-+			// Try to load the built-in provider associated with the given mode.
-+			if p, _ := ossl.OSSL_PROVIDER_try_load(nil, provName.ptr(), 1); p == nil {
-+				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
-+				return errors.New("openssl: FIPS mode not supported by any provider")
-+			}
-+		}
-+		_, err := ossl.EVP_default_properties_enable_fips(nil, mode)
-+		return err
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// sha256Provider returns the provider for the SHA-256 algorithm
-+// using the given properties.
-+func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
-+	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
-+	if md == nil {
-+		return nil
-+	}
-+	defer ossl.EVP_MD_free(md)
-+	return ossl.EVP_MD_get0_provider(md)
-+}
-+
-+// proveSHA256 checks if the SHA-256 algorithm is available
-+// using the given properties.
-+func proveSHA256(props cString) bool {
-+	return sha256Provider(props) != nil
++	return osslsetup.SetFIPS(enable)
 +}
 +
 +var zero byte
@@ -16741,7 +16351,7 @@ index 00000000000000..a39b424f708047
 +// versionAtOrAbove returns true when
 +// (vMajor, vMinor, vPatch) >= (major, minor, patch),
 +// compared lexicographically.
-+func versionAtOrAbove(major, minor, patch uint) bool {
++func versionAtOrAbove(major, minor, patch int) bool {
 +	return vMajor > major || (vMajor == major && vMinor > minor) || (vMajor == major && vMinor == minor && vPatch >= patch)
 +}
 +
@@ -16810,6 +16420,573 @@ index 00000000000000..c464f41a5076fb
 +	copy(result, unsafe.Slice((*byte)(ptr), length))
 +	return result
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
+new file mode 100644
+index 00000000000000..be03becaaeeeb7
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
+@@ -0,0 +1,165 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package osslsetup
++
++import (
++	"errors"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// cString is a null-terminated string,
++// akin to C's char*.
++type cString string
++
++// ptr returns a pointer to the string data.
++// It panics if the string is not null-terminated.
++//
++// The memory pointed to by the returned pointer should
++// not be modified and it must only be passed to
++// "const char*" parameters. Any attempt to modify it
++// will result in a runtime panic, as Go strings are
++// allocated in read-only memory.
++func (s cString) ptr() *byte {
++	if len(s) == 0 {
++		return nil
++	}
++	if s[len(s)-1] != 0 {
++		panic("must be null-terminated")
++	}
++	return unsafe.StringData(string(s))
++}
++
++const (
++	// Provider names
++	_ProviderNameFips    cString = "fips\x00"
++	_ProviderNameDefault cString = "default\x00"
++
++	// Property strings
++	_PropFIPSYes cString = "fips=yes\x00"
++	_PropFIPSNo  cString = "-fips\x00"
++
++	// Digest Names
++	_DigestNameSHA2_256 cString = "SHA2-256\x00"
++)
++
++// FIPS returns true if OpenSSL is running in FIPS mode and there is
++// a provider available that supports FIPS. It returns false otherwise.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++func FIPS() bool {
++	switch vMajor {
++	case 1:
++		return ossl.FIPS_mode() == 1
++	case 3:
++		// Check if the default properties contain `fips=1`.
++		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
++			// Note that it is still possible that the provider used by default is FIPS-compliant,
++			// but that wouldn't be a system or user requirement.
++			return false
++		}
++		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
++		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
++		//
++		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
++		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
++		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
++		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
++		return proveSHA256("")
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
++// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
++// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
++// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
++// which is FIPS-capable.
++//
++// Considerations:
++//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
++//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
++//     the default properties contain `fips=yes`.
++//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
++//   - When using OpenSSL 1, will always return the same value as [FIPS].
++//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
++//     some heuristics that should be treated as an implementation detail that may change in the future.
++func FIPSCapable() bool {
++	if FIPS() {
++		return true
++	}
++	if vMajor == 3 {
++		// Load the provider with and without the `fips=yes` query.
++		// If the providers are the same, then the default provider is FIPS-capable.
++		provFIPS := sha256Provider(_ProviderNameFips)
++		if provFIPS == nil {
++			return false
++		}
++		provDefault := sha256Provider("")
++		return provFIPS == provDefault
++	}
++	return false
++}
++
++// SetFIPS enables or disables FIPS mode.
++//
++// For OpenSSL 3, if there is no provider available that supports FIPS mode,
++// SetFIPS will try to load a built-in provider that supports FIPS mode.
++func SetFIPS(enable bool) error {
++	if FIPS() == enable {
++		// Already in the desired state.
++		return nil
++	}
++	var mode int32
++	if enable {
++		mode = int32(1)
++	} else {
++		mode = int32(0)
++	}
++	switch vMajor {
++	case 1:
++		if _, err := ossl.FIPS_mode_set(mode); err != nil {
++			return err
++		}
++		return nil
++	case 3:
++		var shaProps, provName cString
++		if enable {
++			shaProps = _PropFIPSYes
++			provName = _ProviderNameFips
++		} else {
++			shaProps = _PropFIPSNo
++			provName = _ProviderNameDefault
++		}
++		if !proveSHA256(shaProps) {
++			// There is no provider available that supports the desired FIPS mode.
++			// Try to load the built-in provider associated with the given mode.
++			if p, _ := ossl.OSSL_PROVIDER_try_load(nil, provName.ptr(), 1); p == nil {
++				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
++				return errors.New("openssl: FIPS mode not supported by any provider")
++			}
++		}
++		_, err := ossl.EVP_default_properties_enable_fips(nil, mode)
++		return err
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// sha256Provider returns the provider for the SHA-256 algorithm
++// using the given properties.
++func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
++	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
++	if md == nil {
++		return nil
++	}
++	defer ossl.EVP_MD_free(md)
++	return ossl.EVP_MD_get0_provider(md)
++}
++
++// proveSHA256 checks if the SHA-256 algorithm is available
++// using the given properties.
++func proveSHA256(props cString) bool {
++	return sha256Provider(props) != nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
+new file mode 100644
+index 00000000000000..c09a86b4b5a6fd
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
+@@ -0,0 +1,157 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package osslsetup
++
++import (
++	"errors"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// osslHandle is the handle to the OpenSSL shared library loaded in the [Init] function.
++var osslHandle unsafe.Pointer
++
++// opensslInit loads and initializes OpenSSL.
++//
++// See [Init] for details about file.
++func opensslInit(file string) error {
++	// Load the OpenSSL shared library using dlopen.
++	handle, close, err := openLibrary(file)
++	if err != nil {
++		return err
++	}
++
++	ossl.MkcgoLoad_(handle)
++	if vMajor == 1 {
++		ossl.MkcgoLoad_legacy_1(handle)
++		if vPatch == 1 {
++			ossl.MkcgoLoad_111(handle)
++		}
++	} else {
++		ossl.MkcgoLoad_111(handle)
++		ossl.MkcgoLoad_3(handle)
++	}
++
++	// Initialize OpenSSL.
++	ossl.OPENSSL_init()
++	if _, err = ossl.OPENSSL_init_crypto(
++		ossl.OPENSSL_INIT_ADD_ALL_CIPHERS|
++			ossl.OPENSSL_INIT_ADD_ALL_DIGESTS|
++			ossl.OPENSSL_INIT_LOAD_CONFIG|
++			ossl.OPENSSL_INIT_LOAD_CRYPTO_STRINGS,
++		nil); err != nil {
++		close()
++		return err
++	}
++	osslHandle = handle
++	return nil
++}
++
++// initForCheckVersion loads and initialize only the
++// functions required in [CheckVersion].
++// It returns a close function that must be called to release the resources.
++//
++// This function modifies the vMajor, vMinor, and vPatch global variables as
++// well as other internal global variables that facilitate OpenSSL calls.
++//
++// If the function succeeds, calling the close function restores the previous
++// state of the global variables. If it fails, the global variables are restored
++// before returning.
++func initForCheckVersion(file string) (func(), error) {
++	prevMajor, prevMinor, prevPatch := vMajor, vMinor, vPatch
++	restoreVersion := func() {
++		vMajor, vMinor, vPatch = prevMajor, prevMinor, prevPatch
++	}
++	handle, close, err := openLibrary(file)
++	if err != nil {
++		restoreVersion()
++		return nil, err
++	}
++	initFuncs := func() (loadX func(unsafe.Pointer), unloadX func()) {
++		switch vMajor {
++		case 1:
++			loadX = ossl.MkcgoLoad_init_1
++			unloadX = ossl.MkcgoUnload_init_1
++		case 3:
++			loadX = ossl.MkcgoLoad_init_3
++			unloadX = ossl.MkcgoUnload_init_3
++		default:
++			// We shouldn't get here: openLibrary should have already returned an error.
++			panic(errUnsupportedVersion())
++		}
++		return
++	}
++	loadX, unloadX := initFuncs()
++	loadX(handle)
++	return func() {
++		restoreVersion()
++		close()
++		unloadX()
++		if osslHandle != nil {
++			// If osslHandle is not nil, it means that the library was already loaded
++			// and initialized. In this case, we need to reload the functions from
++			// the original handle.
++			loadX, _ = initFuncs()
++			loadX(osslHandle)
++		}
++	}, nil
++}
++
++// openLibrary loads and initialize the version of OpenSSL.
++// It returns the handle to the OpenSSL shared library
++// and a function that can be called to release the resources.
++func openLibrary(file string) (handle unsafe.Pointer, close func(), err error) {
++	vMajor, vMinor, vPatch = 0, 0, 0
++	handle, err = dlopen(file)
++	if err != nil {
++		return nil, nil, err
++	}
++	// Retrieve the loaded OpenSSL version and check if it is supported.
++	// Notice that major and minor could not match with the version parameter
++	// in case the name of the shared library file differs from the OpenSSL
++	// version it contains.
++	ossl.MkcgoLoad_version(handle)
++	close = func() {
++		dlclose(handle)
++		if osslHandle == nil {
++			ossl.MkcgoUnload_version()
++		} else {
++			ossl.MkcgoLoad_version(osslHandle)
++		}
++	}
++	defer func() {
++		if err != nil {
++			close()
++		}
++	}()
++
++	if ossl.OPENSSL_version_major_Available() &&
++		ossl.OPENSSL_version_minor_Available() &&
++		ossl.OPENSSL_version_patch_Available() {
++		// Likely OpenSSL 3 or later.
++		vMajor = int(ossl.OPENSSL_version_major())
++		vMinor = int(ossl.OPENSSL_version_minor())
++		vPatch = int(ossl.OPENSSL_version_patch())
++	} else if ossl.OpenSSL_version_num_Available() {
++		// Likely OpenSSL 1.
++		ver := ossl.OpenSSL_version_num()
++		vMajor = int(ver >> 28)
++		vMinor = int(ver >> 20 & 0xFF)
++		vPatch = int(ver >> 12 & 0xFF)
++	} else {
++		return handle, nil, errors.New("openssl: version not available")
++	}
++	var supported bool
++	switch vMajor {
++	case 1:
++		supported = vMinor == 1
++	case 3:
++		// OpenSSL guarantees API and ABI compatibility within the same major version since OpenSSL 3.
++		supported = true
++	}
++	if !supported {
++		return handle, nil, errUnsupportedVersion()
++	}
++	return handle, close, nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
+new file mode 100644
+index 00000000000000..0e61cc128ef981
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
+@@ -0,0 +1,31 @@
++//go:build unix && !cmd_go_bootstrap
++
++package osslsetup
++
++// #cgo LDFLAGS: -ldl
++// #include <stdlib.h>
++// #include <dlfcn.h>
++import "C"
++import (
++	"errors"
++	"unsafe"
++)
++
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	cv := C.CString(file)
++	defer C.free(unsafe.Pointer(cv))
++	handle = C.dlopen(cv, C.RTLD_LAZY|C.RTLD_LOCAL)
++	if handle == nil {
++		errstr := C.GoString(C.dlerror())
++		return nil, errors.New("openssl: can't load " + file + ": " + errstr)
++	}
++	return handle, nil
++}
++
++func dlclose(handle unsafe.Pointer) error {
++	if C.dlclose(handle) != 0 {
++		errstr := C.GoString(C.dlerror())
++		return errors.New("openssl: can't close libcrypto: " + errstr)
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
+new file mode 100644
+index 00000000000000..26962b73dcd3a8
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
+@@ -0,0 +1,32 @@
++//go:build unix && !cmd_go_bootstrap && !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package osslsetup
++
++import (
++	"errors"
++	"runtime"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	const RTLD_LAZY = 1
++	var RTLD_LOCAL = 0
++	if runtime.GOOS == "darwin" {
++		RTLD_LOCAL = 4 // darwin uses 4 as RTLD_LOCAL
++	}
++	handle = ossl.Dlopen(unsafe.StringData(file+"\x00"), int32(RTLD_LAZY|RTLD_LOCAL))
++	if handle == nil {
++		return nil, errors.New("openssl: can't load " + file + ": " + goString(ossl.Dlerror()))
++	}
++	return handle, nil
++}
++
++func dlclose(handle unsafe.Pointer) error {
++	if ossl.Dlclose(handle) != 0 {
++		errstr := goString(ossl.Dlerror())
++		return errors.New("openssl: can't close libcrypto: " + errstr)
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
+new file mode 100644
+index 00000000000000..c4981aef84b42f
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
+@@ -0,0 +1,36 @@
++//go:build !cmd_go_bootstrap
++
++package osslsetup
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++type dlopenError struct {
++	file string
++	err  error
++}
++
++func (e *dlopenError) Error() string {
++	return "openssl: can't load " + e.file + ": " + e.err.Error()
++}
++
++func (e *dlopenError) Unwrap() error {
++	return e.err
++}
++
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	// As Windows generally does not ship with a system OpenSSL library, let
++	// alone a FIPS 140 certified one, use the default library search order so
++	// that we preferentially load the DLL bundled with the application.
++	h, err := syscall.LoadLibrary(file)
++	if err != nil {
++		return nil, &dlopenError{file: file, err: err}
++	}
++	return unsafe.Pointer(h), nil
++}
++
++func dlclose(handle unsafe.Pointer) error {
++	return syscall.FreeLibrary(syscall.Handle(handle))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
+new file mode 100644
+index 00000000000000..702210b7c5f5e7
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
+@@ -0,0 +1,66 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package osslsetup
++
++import (
++	"errors"
++	"strconv"
++	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++var (
++	vMajor, vMinor, vPatch int
++)
++
++func Version() (major, minor, patch int) {
++	return vMajor, vMinor, vPatch
++}
++
++func utoa(n int) string {
++	return strconv.FormatUint(uint64(n), 10)
++}
++
++func errUnsupportedVersion() error {
++	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
++}
++
++var (
++	initOnce sync.Once
++	initErr  error
++)
++
++// Init loads and initializes OpenSSL from the shared library at path.
++// It must be called before any other OpenSSL call, except CheckVersion.
++//
++// Only the first call to Init is effective.
++// Subsequent calls will return the same error result as the one from the first call.
++//
++// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
++// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
++// library libcrypto.so.1.1.1k-fips.
++func Init(file string) error {
++	initOnce.Do(func() {
++		initErr = opensslInit(file)
++	})
++	return initErr
++}
++
++// VersionText returns the version text of the OpenSSL currently loaded.
++func VersionText() string {
++	return goString(ossl.OpenSSL_version(0))
++}
++
++// CheckVersion checks if the OpenSSL version can be loaded
++// and if the FIPS mode is enabled.
++// This function can be called before Init.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++func CheckVersion(version string) (exists, fips bool) {
++	close, err := initForCheckVersion(version)
++	if err != nil {
++		return false, false
++	}
++	defer close()
++	return true, FIPS()
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
+new file mode 100644
+index 00000000000000..810ccaa4fc3330
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
+@@ -0,0 +1,11 @@
++//go:build !cmd_go_bootstrap
++
++package osslsetup
++
++import "C"
++import "unsafe"
++
++// goString converts a C string pointer to a Go string for cgo mode
++func goString(ptr *byte) string {
++	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
++}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
+new file mode 100644
+index 00000000000000..089f15899b1a01
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
+@@ -0,0 +1,21 @@
++//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++
++package osslsetup
++
++import "unsafe"
++
++// goString converts a C string pointer to a Go string for nocgo mode
++func goString(ptr *byte) string {
++	if ptr == nil {
++		return ""
++	}
++	var result []byte
++	for i := 0; ; i++ {
++		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
++		if b == 0 {
++			break
++		}
++		result = append(result, b)
++	}
++	return string(result)
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
 new file mode 100644
 index 00000000000000..a9310fd6ec4721
@@ -31969,16 +32146,17 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7932adddfaa1c5..7d9a3c31225510 100644
+index 7932adddfaa1c5..93d7709587c705 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,23 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251202083346-9b5f537f54f7
+@@ -1,3 +1,24 @@
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
++github.com/golang-fips/openssl/v2/osslsetup
 +# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index e8fecb55e4f..2127332fe3b 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -38,8 +38,7 @@ desired goexperiments and build tags.
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
- .../internal/backend/fips140/openssl_cgo.go   |  59 +++
- .../internal/backend/fips140/openssl_nocgo.go |  17 +
+ .../internal/backend/fips140/openssl.go       |  59 +++
  .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
@@ -54,7 +53,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 45 files changed, 2638 insertions(+), 22 deletions(-)
+ 44 files changed, 2621 insertions(+), 22 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -70,8 +69,7 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl_cgo.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl_nocgo.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl.go
  create mode 100644 src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_off.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_on.go
@@ -1996,11 +1994,11 @@ index 00000000000000..289d6594eac54b
 +func systemFIPSMode() bool {
 +	return false
 +}
-diff --git a/src/crypto/internal/backend/fips140/openssl_cgo.go b/src/crypto/internal/backend/fips140/openssl_cgo.go
+diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
 new file mode 100644
-index 00000000000000..9bf15a24d3a4f4
+index 00000000000000..8da484e3ffb9b7
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl_cgo.go
++++ b/src/crypto/internal/backend/fips140/openssl.go
 @@ -0,0 +1,59 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
@@ -2014,7 +2012,7 @@ index 00000000000000..9bf15a24d3a4f4
 +	_ "crypto/internal/backend/internal/opensslsetup"
 +	"syscall"
 +
-+	"github.com/golang-fips/openssl/v2"
++	"github.com/golang-fips/openssl/v2/osslsetup"
 +)
 +
 +const backendEnabled = true
@@ -2026,7 +2024,7 @@ index 00000000000000..9bf15a24d3a4f4
 +	if kernelFIPSMode() {
 +		return true
 +	}
-+	return openssl.FIPS()
++	return osslsetup.FIPS()
 +}
 +
 +// kernelFIPSMode reports whether the kernel is in FIPS mode.
@@ -2061,29 +2059,6 @@ index 00000000000000..9bf15a24d3a4f4
 +	// fips_enabled can be either '0' or '1'.
 +	return tmp[0] == '1'
 +}
-diff --git a/src/crypto/internal/backend/fips140/openssl_nocgo.go b/src/crypto/internal/backend/fips140/openssl_nocgo.go
-new file mode 100644
-index 00000000000000..ae8274aa38579f
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl_nocgo.go
-@@ -0,0 +1,17 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto)
-+
-+// The opensslcrypto experiment can be used even when cgo
-+// is disabled. The OpenSSL backend can't be imported
-+// without cgo, so we use a stub systemFIPSMode implementation.
-+
-+package fips140
-+
-+const backendEnabled = true
-+
-+func systemFIPSMode() bool {
-+	return false
-+}
 diff --git a/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
 new file mode 100644
 index 00000000000000..dad6bcea9451e2
@@ -2137,7 +2112,7 @@ index 00000000000000..d3d39fd77f98db
 +const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
-index 00000000000000..eda4bde128ae46
+index 00000000000000..14b217a6e2eb21
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 @@ -0,0 +1,68 @@
@@ -2155,11 +2130,11 @@ index 00000000000000..eda4bde128ae46
 +import (
 +	"syscall"
 +
-+	"github.com/golang-fips/openssl/v2"
++	"github.com/golang-fips/openssl/v2/osslsetup"
 +)
 +
 +// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
-+// FreeBSD library version numbering does not directly align to the version of OpenSSL.
++// FreeBSD library version numbering does not directly align to the version of osslsetup.
 +// Its preferred search order is 11 -> 111.
 +var knownVersions = [...]string{"3", "1.1", "11", "111"}
 +
@@ -2167,7 +2142,7 @@ index 00000000000000..eda4bde128ae46
 +
 +func init() {
 +	lib := library()
-+	if err := openssl.Init(lib); err != nil {
++	if err := osslsetup.Init(lib); err != nil {
 +		panic("opensslcrypto: can't initialize OpenSSL " + lib + ": " + err.Error())
 +	}
 +}
@@ -2186,9 +2161,9 @@ index 00000000000000..eda4bde128ae46
 +	return lcryptoPrefix[:len(lcryptoPrefix)-1] // no version found, try without version suffix
 +}
 +
-+// checkVersion is a variable that holds the openssl.CheckVersion function.
++// checkVersion is a variable that holds the osslsetup.CheckVersion function.
 +// It is initialized in the init function to allow overriding in tests.
-+var checkVersion = openssl.CheckVersion
++var checkVersion = osslsetup.CheckVersion
 +
 +// searchKnownLibrary returns the name of the highest available FIPS-enabled version of OpenSSL
 +// using the known library suffixes.
@@ -3100,7 +3075,7 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index bbd53b99006c3f..2a0589ead089a5 100644
+index 63571c59f5b9f0..4d637814cffbda 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -363,7 +363,7 @@ var depsRules = `
@@ -3112,7 +3087,7 @@ index bbd53b99006c3f..2a0589ead089a5 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -561,6 +561,11 @@ var depsRules = `
+@@ -562,6 +562,11 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3124,7 +3099,7 @@ index bbd53b99006c3f..2a0589ead089a5 100644
  	crypto !< FIPS;
  
  	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -569,6 +574,17 @@ var depsRules = `
+@@ -570,6 +575,17 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -3142,7 +3117,7 @@ index bbd53b99006c3f..2a0589ead089a5 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -576,9 +592,10 @@ var depsRules = `
+@@ -577,9 +593,10 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/cipher
@@ -3154,7 +3129,7 @@ index bbd53b99006c3f..2a0589ead089a5 100644
  	< crypto/boring
  	< crypto/internal/rand
  	< crypto/aes,
-@@ -603,8 +620,14 @@ var depsRules = `
+@@ -604,8 +621,14 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  

From 119b8faba39893fb5faf14d662b3b90fef99a2e0 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 3 Dec 2025 10:25:13 +0100
Subject: [PATCH 591/887] fix TestDependencies

---
 .../0001-Vendor-external-dependencies.patch   | 82 +++++++++++--------
 ...03-Implement-crypto-internal-backend.patch | 52 ++++--------
 patches/0004-Use-crypto-backends.patch        | 52 +++++++-----
 3 files changed, 94 insertions(+), 92 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 3eac5e986a6..e924f6b7257 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -35,7 +35,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
- src/go/build/deps_test.go                     |   39 +-
+ src/go/build/deps_test.go                     |   53 +-
  src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
@@ -212,7 +212,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   21 +
- 204 files changed, 28533 insertions(+), 7 deletions(-)
+ 204 files changed, 28547 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2098,49 +2098,59 @@ index e2cf9591bc56dc..4d6f4c38e7146f 100644
  golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d58bd294cd103c..63571c59f5b9f0 100644
+index d58bd294cd103c..6be3675bde3e07 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -540,6 +540,28 @@ var depsRules = `
- 	< crypto/internal/fips140/rsa
- 	< crypto/fips140 < FIPS;
+@@ -548,16 +548,51 @@ var depsRules = `
+ 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
+ 	sync/atomic < crypto/internal/boring/bcache;
  
-+	FIPS, hash < crypto/internal/fips140only;
-+	crypto/internal/fips140/subtle,	hash < crypto;
-+	crypto/internal/fips140/subtle < crypto/subtle;
-+	crypto/subtle, crypto/internal/fips140only < crypto/cipher;
-+
-+	crypto,
-+	crypto/subtle,
-+	hash,
-+	crypto/cipher
+-	FIPS, internal/godebug, embed,
+-	crypto/internal/boring/sig,
+-	crypto/internal/boring/syso,
+-	crypto/internal/boring/bcache
++	syscall, strconv
 +	< github.com/golang-fips/openssl/v2/internal/fakecgo
 +	< github.com/golang-fips/openssl/v2/internal/ossl
-+	< github.com/golang-fips/openssl/v2/osslsetup
-+	< github.com/golang-fips/openssl/v2
-+	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto
-+	< github.com/microsoft/go-crypto-darwin/internal/security
-+	< github.com/microsoft/go-crypto-darwin/internal/cryptokit
-+	< github.com/microsoft/go-crypto-darwin/xcrypto
++	< github.com/golang-fips/openssl/v2/osslsetup;
++
++	syscall
++	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto,
++	  github.com/microsoft/go-crypto-darwin/internal/security,
++	  github.com/microsoft/go-crypto-darwin/internal/cryptokit;
++
++	syscall, strconv
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
-+	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
++	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
++
++	FIPS, internal/godebug, embed
+ 	< crypto/internal/fips140only
+ 	< crypto
+ 	< crypto/subtle
++	< crypto/cipher;
++
++	crypto, crypto/subtle, hash, crypto/cipher,
++	github.com/golang-fips/openssl/v2/osslsetup
++	< github.com/golang-fips/openssl/v2;
++
++	crypto, crypto/subtle, hash, crypto/cipher,
++	github.com/microsoft/go-crypto-darwin/internal/commoncrypto,
++	github.com/microsoft/go-crypto-darwin/internal/security,
++	github.com/microsoft/go-crypto-darwin/internal/cryptokit
++	< github.com/microsoft/go-crypto-darwin/xcrypto;
++
++	crypto, crypto/subtle, hash, crypto/cipher,
++	github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +	< github.com/microsoft/go-crypto-winnative/cng;
 +
- 	crypto !< FIPS;
- 
- 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -551,13 +573,12 @@ var depsRules = `
- 	FIPS, internal/godebug, embed,
- 	crypto/internal/boring/sig,
- 	crypto/internal/boring/syso,
--	crypto/internal/boring/bcache
--	< crypto/internal/fips140only
--	< crypto
--	< crypto/subtle
++	FIPS, internal/godebug, embed,
++	crypto/internal/boring/sig,
++	crypto/internal/boring/syso,
 +	crypto/internal/boring/bcache,
 +	crypto/internal/fips140only,
 +	crypto,
++	crypto/subtle,
 +	crypto/cipher
  	< crypto/sha3
  	< crypto/internal/fips140hash
@@ -2148,7 +2158,7 @@ index d58bd294cd103c..63571c59f5b9f0 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -579,6 +600,10 @@ var depsRules = `
+@@ -579,6 +614,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2159,7 +2169,7 @@ index d58bd294cd103c..63571c59f5b9f0 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -925,7 +950,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -925,7 +964,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2168,7 +2178,7 @@ index d58bd294cd103c..63571c59f5b9f0 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -935,7 +960,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -935,7 +974,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 2127332fe3b..643171d218a 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -49,11 +49,11 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
- src/go/build/deps_test.go                     |  31 +-
+ src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2621 insertions(+), 22 deletions(-)
+ 44 files changed, 2615 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -3075,7 +3075,7 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 63571c59f5b9f0..4d637814cffbda 100644
+index 6be3675bde3e07..b581b443d6429b 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -363,7 +363,7 @@ var depsRules = `
@@ -3087,49 +3087,32 @@ index 63571c59f5b9f0..4d637814cffbda 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -562,6 +562,11 @@ var depsRules = `
- 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt
- 	< github.com/microsoft/go-crypto-winnative/cng;
+@@ -563,6 +563,10 @@ var depsRules = `
+ 	< github.com/microsoft/go-crypto-winnative/internal/sysdll
+ 	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
-+	syscall,
-+	github.com/golang-fips/openssl/v2
++	github.com/golang-fips/openssl/v2/osslsetup
 +	< crypto/internal/backend/internal/opensslsetup
 +	< crypto/internal/backend/fips140;
 +
- 	crypto !< FIPS;
- 
- 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -570,6 +575,17 @@ var depsRules = `
- 	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
- 	sync/atomic < crypto/internal/boring/bcache;
+ 	FIPS, internal/godebug, embed
+ 	< crypto/internal/fips140only
+ 	< crypto
+@@ -583,6 +587,13 @@ var depsRules = `
+ 	github.com/microsoft/go-crypto-winnative/internal/bcrypt
+ 	< github.com/microsoft/go-crypto-winnative/cng;
  
-+	crypto,	crypto/cipher,
-+	crypto/internal/boring/sig, crypto/internal/boring/syso
-+	< crypto/internal/boring;
-+
-+	crypto/internal/boring/sig,
-+	crypto/internal/backend/fips140,
 +	github.com/golang-fips/openssl/v2,
++	github.com/microsoft/go-crypto-winnative/cng,
 +	github.com/microsoft/go-crypto-darwin/xcrypto,
-+	github.com/microsoft/go-crypto-winnative/cng
++	crypto/internal/backend/fips140,
++	crypto/internal/boring/sig
 +	< crypto/internal/backend;
 +
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -577,9 +593,10 @@ var depsRules = `
- 	crypto/internal/fips140only,
- 	crypto,
- 	crypto/cipher
-+	crypto/cipher,
-+	crypto/internal/backend
- 	< crypto/sha3
- 	< crypto/internal/fips140hash
--	< crypto/internal/boring
- 	< crypto/boring
- 	< crypto/internal/rand
- 	< crypto/aes,
-@@ -604,8 +621,14 @@ var depsRules = `
+@@ -618,8 +629,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3139,6 +3122,7 @@ index 63571c59f5b9f0..4d637814cffbda 100644
 +	< crypto/internal/boring/bbig;
 +
 +	CRYPTO, FMT, math/big, internal/saferio,
++	crypto/internal/boring/bbig,
 +	github.com/golang-fips/openssl/v2/bbig,
 +	github.com/microsoft/go-crypto-darwin/bbig,
 +	github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 1e8299c73d1..48c23febd28 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -47,7 +47,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
  src/crypto/internal/rand/rand.go              |  23 ---
  src/crypto/internal/rand/rand_boring.go       |  19 ++
- src/crypto/internal/rand/rand_notboring.go    |  35 ++++
+ src/crypto/internal/rand/rand_notboring.go    |  28 +++
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
  src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
@@ -92,14 +92,14 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
  src/crypto/x509/verify_test.go                |   2 +-
- src/go/build/deps_test.go                     |   5 +-
+ src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
  src/hash/example_test.go                      |   2 +
  src/hash/marshal_test.go                      |   4 +
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1389 insertions(+), 162 deletions(-)
+ 95 files changed, 1388 insertions(+), 164 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1515,10 +1515,10 @@ index 00000000000000..e7ebcdfe102a43
 +var Reader io.Reader = boring.RandReader
 diff --git a/src/crypto/internal/rand/rand_notboring.go b/src/crypto/internal/rand/rand_notboring.go
 new file mode 100644
-index 00000000000000..c24a29571d7bfc
+index 00000000000000..8130a9eac934d6
 --- /dev/null
 +++ b/src/crypto/internal/rand/rand_notboring.go
-@@ -0,0 +1,35 @@
+@@ -0,0 +1,28 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1528,7 +1528,6 @@ index 00000000000000..c24a29571d7bfc
 +package rand
 +
 +import (
-+	"crypto/internal/boring"
 +	"crypto/internal/fips140/drbg"
 +	"io"
 +)
@@ -1538,12 +1537,6 @@ index 00000000000000..c24a29571d7bfc
 +}
 +
 +func (r reader) Read(b []byte) (n int, err error) {
-+	if boring.Enabled {
-+		if _, err := boring.RandReader.Read(b); err != nil {
-+			panic("crypto/rand: boring RandReader failed: " + err.Error())
-+		}
-+		return len(b), nil
-+	}
 +	drbg.Read(b)
 +	return len(b), nil
 +}
@@ -3590,7 +3583,7 @@ index 6dadba3a566f5e..a84b8cdeb42471 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 2a0589ead089a5..19f4ea8a8c3546 100644
+index b581b443d6429b..e989e2394ce3ed 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -538,7 +538,7 @@ var depsRules = `
@@ -3600,18 +3593,33 @@ index 2a0589ead089a5..19f4ea8a8c3546 100644
 -	< crypto/fips140 < FIPS;
 +	< FIPS;
  
- 	FIPS, hash < crypto/internal/fips140only;
- 	crypto/internal/fips140/subtle,	hash < crypto;
-@@ -566,6 +566,8 @@ var depsRules = `
+ 	crypto !< FIPS;
+ 
+@@ -567,7 +567,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
-+	FIPS, crypto/internal/backend/fips140 < crypto/fips140;
-+
- 	crypto !< FIPS;
- 
- 	# CRYPTO is core crypto algorithms - no cgo, fmt, net.
-@@ -610,6 +612,7 @@ var depsRules = `
+-	FIPS, internal/godebug, embed
++	internal/godebug, crypto/internal/fips140, crypto/internal/fips140/check,
++	crypto/internal/backend/fips140
++	< crypto/fips140;
++
++	FIPS, internal/godebug, embed,
++	crypto/fips140
+ 	< crypto/internal/fips140only
+ 	< crypto
+ 	< crypto/subtle
+@@ -601,7 +606,8 @@ var depsRules = `
+ 	crypto/internal/fips140only,
+ 	crypto,
+ 	crypto/subtle,
+-	crypto/cipher
++	crypto/cipher,
++	crypto/internal/backend
+ 	< crypto/sha3
+ 	< crypto/internal/fips140hash
+ 	< crypto/internal/boring
+@@ -619,6 +625,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 2e3aef2a8f0474061b90e47ac816719268186f29 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 12:11:21 +0000
Subject: [PATCH 592/887] fix openssl versioning

---
 .../0001-Vendor-external-dependencies.patch   | 608 ++++++++++++++----
 1 file changed, 484 insertions(+), 124 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index e924f6b7257..02291006c2b 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -45,7 +45,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  652 +++++
- .../golang-fips/openssl/v2/const.go           |   86 +
+ .../golang-fips/openssl/v2/const.go           |   90 +
+ .../golang-fips/openssl/v2/cshake.go          |  219 ++
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
@@ -91,7 +92,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/shims.h          |  425 +++
+ .../openssl/v2/internal/ossl/shims.h          |  430 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
@@ -99,22 +100,22 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 2012 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   63 +
- .../openssl/v2/internal/ossl/zossl.h          |  352 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1334 ++++++++++
- .../v2/internal/ossl/zossl_cgo_go124.go       |   37 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2341 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2045 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   64 +
+ .../openssl/v2/internal/ossl/zossl.h          |  358 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1360 ++++++++++
+ .../v2/internal/ossl/zossl_cgo_go124.go       |   41 +
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2377 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
- .../golang-fips/openssl/v2/openssl.go         |  246 ++
+ .../golang-fips/openssl/v2/openssl.go         |  253 ++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
  .../golang-fips/openssl/v2/osslsetup/fips.go  |  165 ++
- .../golang-fips/openssl/v2/osslsetup/init.go  |  157 ++
+ .../golang-fips/openssl/v2/osslsetup/init.go  |  160 ++
  .../openssl/v2/osslsetup/init_cgo_unix.go     |   31 +
  .../openssl/v2/osslsetup/init_nocgo_unix.go   |   32 +
  .../openssl/v2/osslsetup/init_windows.go      |   36 +
- .../openssl/v2/osslsetup/osslsetup.go         |   66 +
+ .../openssl/v2/osslsetup/osslsetup.go         |   74 +
  .../openssl/v2/osslsetup/osslsetup_cgo.go     |   11 +
  .../openssl/v2/osslsetup/osslsetup_nocgo.go   |   21 +
  .../golang-fips/openssl/v2/params.go          |  184 ++
@@ -212,7 +213,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   21 +
- 204 files changed, 28547 insertions(+), 7 deletions(-)
+ 205 files changed, 28899 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -244,6 +245,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/const.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cshake.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/des.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/dsa.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ec.go
@@ -2070,7 +2072,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f79455c970ecb2..0b09b5cdef45d0 100644
+index f79455c970ecb2..9cc1ba35b713b5 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2079,17 +2081,17 @@ index f79455c970ecb2..0b09b5cdef45d0 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index e2cf9591bc56dc..4d6f4c38e7146f 100644
+index e2cf9591bc56dc..de83c1a8cb54b2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb h1:qyynodbsPfFXz8Fsg9lUmQ9Evvpzmy5DK91RCBv3v2I=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf h1:CeJxZa0X5K7keIgQF79icWif8oiJZJmAwnuNXCYYeh4=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc h1:bz/6zng2sakr1ETJsKnGoHooH6sBKbQNxk9aeH5tRt0=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
@@ -2537,7 +2539,7 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..8d8f12fecda346
+index 00000000000000..62c4725df7906f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 @@ -0,0 +1,652 @@
@@ -2622,7 +2624,7 @@ index 00000000000000..8d8f12fecda346
 +		return v.(ossl.EVP_CIPHER_PTR)
 +	}
 +	defer func() {
-+		if cipher != nil && vMajor == 3 {
++		if cipher != nil && major() == 3 {
 +			// On OpenSSL 3, directly operating on a EVP_CIPHER object
 +			// not created by EVP_CIPHER has negative performance
 +			// implications, as cipher operations will have
@@ -3195,10 +3197,10 @@ index 00000000000000..8d8f12fecda346
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..25aa51c935b1e6
+index 00000000000000..84b85024940f7e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,86 @@
+@@ -0,0 +1,90 @@
 +package openssl
 +
 +import "unsafe"
@@ -3239,6 +3241,10 @@ index 00000000000000..25aa51c935b1e6
 +	_KeyTypeMLKEM768  cString = "ML-KEM-768\x00"
 +	_KeyTypeMLKEM1024 cString = "ML-KEM-1024\x00"
 +
++	// Digest names
++	_DigestNameSHAKE128 cString = "SHAKE-128\x00"
++	_DigestNameSHAKE256 cString = "SHAKE-256\x00"
++
 +	// KDF names
 +	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
 +	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
@@ -3285,6 +3291,231 @@ index 00000000000000..25aa51c935b1e6
 +	// MAC parameters
 +	_OSSL_MAC_PARAM_DIGEST cString = "digest\x00"
 +)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
+new file mode 100644
+index 00000000000000..d744345e0a1c64
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
+@@ -0,0 +1,219 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package openssl
++
++import (
++	"runtime"
++	"strconv"
++	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++// shakeOneShot applies the SHAKE extendable output function to data and
++// writes the output to out.
++func shakeOneShot(secuirtyBits int, data []byte, out []byte) {
++	// Can't use EVP_Digest because it doesn't support output lengths
++	// larger than the block size, while crypto/sha3 supports any length.
++	alg := loadShake(secuirtyBits)
++	if alg == nil {
++		panic("openssl: unsupported SHAKE" + strconv.Itoa(secuirtyBits) + " function")
++	}
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestUpdate(ctx, data); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestFinalXOF(ctx, out, len(out)); err != nil {
++		panic(err)
++	}
++}
++
++// SumSHAKE128 applies the SHAKE128 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE128(data []byte, length int) []byte {
++	out := make([]byte, length)
++	shakeOneShot(128, data, out)
++	return out
++}
++
++// SumSHAKE256 applies the SHAKE256 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE256(data []byte, length int) []byte {
++	out := make([]byte, length)
++	shakeOneShot(256, data, out)
++	return out
++}
++
++// SupportsSHAKE returns true if the SHAKE extendable output functions
++// with the given securityBits are supported.
++func SupportsSHAKE(securityBits int) bool {
++	if major() == 1 || (major() == 3 && minor() < 3) {
++		// SHAKE MD's are supported since OpenSSL 1.1.1,
++		// but EVP_DigestSqueeze is only supported since 3.3,
++		// and we need it to implement [sha3.SHAKE].
++		return false
++	}
++	return loadShake(securityBits) != nil
++}
++
++// SupportsCSHAKE returns true if the CSHAKE extendable output functions
++// with the given securityBits are supported.
++func SupportsCSHAKE(securityBits int) bool {
++	// OpenSSL tracker issue https://github.com/openssl/openssl/issues/28358
++	return false
++}
++
++// SHAKE is an instance of a SHAKE extendable output function.
++type SHAKE struct {
++	alg        *shakeAlgorithm
++	ctx        ossl.EVP_MD_CTX_PTR
++	lastXofLen int
++}
++
++// NewSHAKE128 creates a new SHAKE128 XOF.
++func NewSHAKE128() *SHAKE {
++	return newSHAKE(128)
++}
++
++// NewSHAKE256 creates a new SHAKE256 XOF.
++func NewSHAKE256() *SHAKE {
++	return newSHAKE(256)
++}
++
++// NewCSHAKE128 creates a new cSHAKE128 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE128.
++func NewCSHAKE128(N, S []byte) *SHAKE {
++	if len(N) == 0 && len(S) == 0 {
++		return NewSHAKE128()
++	}
++	return nil
++}
++
++// NewCSHAKE256 creates a new cSHAKE256 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE256.
++func NewCSHAKE256(N, S []byte) *SHAKE {
++	if len(N) == 0 && len(S) == 0 {
++		return NewSHAKE256()
++	}
++	return nil
++}
++
++func newSHAKE(securityBits int) *SHAKE {
++	alg := loadShake(securityBits)
++	if alg == nil {
++		panic("openssl: unsupported SHAKE" + strconv.Itoa(securityBits) + " function")
++	}
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
++		ossl.EVP_MD_CTX_free(ctx)
++		panic(err)
++	}
++	s := &SHAKE{alg: alg, ctx: ctx}
++	runtime.SetFinalizer(s, (*SHAKE).finalize)
++	return s
++}
++
++func (s *SHAKE) finalize() {
++	ossl.EVP_MD_CTX_free(s.ctx)
++}
++
++// Write absorbs more data into the XOF's state.
++//
++// It panics if any output has already been read.
++func (s *SHAKE) Write(p []byte) (n int, err error) {
++	defer runtime.KeepAlive(s)
++	if len(p) == 0 {
++		return 0, nil
++	}
++	if _, err := ossl.EVP_DigestUpdate(s.ctx, p); err != nil {
++		panic(err)
++	}
++	return len(p), nil
++}
++
++// Read squeezes more output from the XOF.
++//
++// Any call to Write after a call to Read will panic.
++func (s *SHAKE) Read(p []byte) (n int, err error) {
++	defer runtime.KeepAlive(s)
++	if len(p) == 0 {
++		return 0, nil
++	}
++	if len(p) != s.lastXofLen {
++		if _, err := ossl.EVP_MD_CTX_ctrl(s.ctx, ossl.EVP_MD_CTRL_XOF_LEN, int32(len(p)), nil); err != nil {
++			panic(err)
++		}
++		s.lastXofLen = len(p)
++	}
++	if _, err := ossl.EVP_DigestSqueeze(s.ctx, p); err != nil {
++		panic(err)
++	}
++	return len(p), nil
++}
++
++// Reset resets the XOF to its initial state.
++func (s *SHAKE) Reset() {
++	defer runtime.KeepAlive(s)
++	if _, err := ossl.EVP_DigestInit_ex(s.ctx, nil, nil); err != nil {
++		panic(err)
++	}
++	s.lastXofLen = 0
++}
++
++// BlockSize returns the rate of the XOF.
++func (s *SHAKE) BlockSize() int {
++	return s.alg.blockSize
++}
++
++type shakeAlgorithm struct {
++	md        ossl.EVP_MD_PTR
++	blockSize int
++}
++
++var cacheSHAKE sync.Map
++
++// loadShake converts a crypto.Hash to a EVP_MD.
++func loadShake(securityBits int) (alg *shakeAlgorithm) {
++	if v, ok := cacheSHAKE.Load(securityBits); ok {
++		return v.(*shakeAlgorithm)
++	}
++	defer func() {
++		cacheSHAKE.Store(securityBits, alg)
++	}()
++
++	var name cString
++	switch securityBits {
++	case 128:
++		name = _DigestNameSHAKE128
++	case 256:
++		name = _DigestNameSHAKE256
++	default:
++		return nil
++	}
++
++	md, err := ossl.EVP_MD_fetch(nil, name.ptr(), nil)
++	if err != nil || md == nil {
++		return nil
++	}
++
++	alg = new(shakeAlgorithm)
++	alg.md = md
++	alg.blockSize = int(ossl.EVP_MD_get_block_size(md))
++	return alg
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
 index 00000000000000..177c5bdb1afa2a
@@ -3405,7 +3636,7 @@ index 00000000000000..177c5bdb1afa2a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..695dfbda74b807
+index 00000000000000..ded266b3784191
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 @@ -0,0 +1,308 @@
@@ -3499,7 +3730,7 @@ index 00000000000000..695dfbda74b807
 +
 +	// Extract the domain parameters from the generated key.
 +	var p, q, g ossl.BIGNUM_PTR
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
@@ -3565,7 +3796,7 @@ index 00000000000000..695dfbda74b807
 +	}
 +	defer ossl.EVP_PKEY_free(pkey)
 +	var bx, by ossl.BIGNUM_PTR
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_key(dsa, &by, &bx)
@@ -3597,7 +3828,7 @@ index 00000000000000..695dfbda74b807
 +}
 +
 +func newDSA(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return newDSA1(params, x, y)
 +	case 3:
@@ -3861,7 +4092,7 @@ index 00000000000000..ef1a181f6fcf29
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..c95b32351ee737
+index 00000000000000..bf5935bd478bbd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 @@ -0,0 +1,343 @@
@@ -3954,7 +4185,7 @@ index 00000000000000..c95b32351ee737
 +			return nil, err
 +		}
 +	} else {
-+		switch vMajor {
++		switch major() {
 +		case 1:
 +			var err error
 +			pkey, err = ossl.EVP_PKEY_new()
@@ -4004,7 +4235,7 @@ index 00000000000000..c95b32351ee737
 +		}
 +	}
 +	nid := curveNID(curve)
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return newECDHPkey1(nid, bytes, isPrivate)
 +	case 3:
@@ -4175,7 +4406,7 @@ index 00000000000000..c95b32351ee737
 +		}
 +	} else {
 +		var priv ossl.BIGNUM_PTR
-+		switch vMajor {
++		switch major() {
 +		case 1:
 +			key := getECKey(pkey)
 +			priv = ossl.EC_KEY_get0_private_key(key)
@@ -4210,7 +4441,7 @@ index 00000000000000..c95b32351ee737
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..3cfe69f0445ee4
+index 00000000000000..4fab819561c656
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 @@ -0,0 +1,225 @@
@@ -4289,7 +4520,7 @@ index 00000000000000..3cfe69f0445ee4
 +		ossl.BN_free(bx)
 +		ossl.BN_free(by)
 +	}()
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		// Retrieve the internal EC_KEY, which holds the X, Y, and D coordinates.
 +		key := getECKey(pkey)
@@ -4365,7 +4596,7 @@ index 00000000000000..3cfe69f0445ee4
 +		}
 +		defer ossl.BN_clear_free(bd)
 +	}
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return newECDSAKey1(nid, bx, by, bd)
 +	case 3:
@@ -4441,7 +4672,7 @@ index 00000000000000..3cfe69f0445ee4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..bafc97944fce00
+index 00000000000000..6413f3e42b4adb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 @@ -0,0 +1,210 @@
@@ -4473,7 +4704,7 @@ index 00000000000000..bafc97944fce00
 +// which will probably be in 3.2.0 (https://github.com/openssl/openssl/issues/20418).
 +
 +var supportsEd25519 = sync.OnceValue(func() bool {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		if versionAtOrAbove(1, 1, 1) {
 +			ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
@@ -4657,7 +4888,7 @@ index 00000000000000..bafc97944fce00
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..1e048be6c15362
+index 00000000000000..1f70c904dc237f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 @@ -0,0 +1,600 @@
@@ -4825,7 +5056,7 @@ index 00000000000000..1e048be6c15362
 +	hash.ch = ch
 +	hash.size = int(ossl.EVP_MD_get_size(hash.md))
 +	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
-+	if vMajor == 3 {
++	if major() == 3 {
 +		// On OpenSSL 3, directly operating on a EVP_MD object
 +		// not created by EVP_MD_fetch has negative performance
 +		// implications, as digest operations will have
@@ -4843,7 +5074,7 @@ index 00000000000000..1e048be6c15362
 +		}
 +	}
 +
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		hash.provider = providerOSSLDefault
 +	case 3:
@@ -4875,7 +5106,7 @@ index 00000000000000..1e048be6c15362
 +		return nil, fail("incorrect generateEVPPKey parameters")
 +	}
 +	var pkey ossl.EVP_PKEY_PTR
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
 +		if err != nil {
@@ -4995,7 +5226,7 @@ index 00000000000000..1e048be6c15362
 +			clabel = (*byte)(cryptoMalloc(len(label)))
 +			copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
 +			var err error
-+			if vMajor == 3 {
++			if major() == 3 {
 +				_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), int32(len(label)))
 +			} else {
 +				_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
@@ -5230,7 +5461,7 @@ index 00000000000000..1e048be6c15362
 +	}
 +	var pkey ossl.EVP_PKEY_PTR
 +	if _, err := ossl.EVP_PKEY_fromdata(ctx, &pkey, selection, params); err != nil {
-+		if vMajor == 3 && vMinor <= 2 {
++		if major() == 3 && minor() <= 2 {
 +			// OpenSSL 3.0.1 and 3.0.2 have a bug where EVP_PKEY_fromdata
 +			// does not free the internally allocated EVP_PKEY on error.
 +			// See https://github.com/openssl/openssl/issues/17407.
@@ -5806,7 +6037,7 @@ index 00000000000000..f1f2364c7246d4
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..5574cef3032db4
+index 00000000000000..1b5744dd5b1806
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 @@ -0,0 +1,455 @@
@@ -5827,7 +6058,7 @@ index 00000000000000..5574cef3032db4
 +
 +// SupprtHKDF reports whether the current OpenSSL version supports HKDF.
 +func SupportsHKDF() bool {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return versionAtOrAbove(1, 1, 1)
 +	case 3:
@@ -5840,7 +6071,7 @@ index 00000000000000..5574cef3032db4
 +
 +// SupprtsTLS13KDF reports whether the current OpenSSL version supports TLS13-KDF.
 +func SupportsTLS13KDF() bool {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return false
 +	case 3:
@@ -5965,7 +6196,7 @@ index 00000000000000..5574cef3032db4
 +		}
 +	}
 +
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
 +		if err != nil {
@@ -6013,7 +6244,7 @@ index 00000000000000..5574cef3032db4
 +	}
 +
 +	out := make([]byte, keyLength)
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
@@ -6088,7 +6319,7 @@ index 00000000000000..5574cef3032db4
 +
 +	size := int(ossl.EVP_MD_get_size(md))
 +
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
@@ -6267,7 +6498,7 @@ index 00000000000000..5574cef3032db4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..72ac5f1b11cbc3
+index 00000000000000..6c7940ffec1684
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 @@ -0,0 +1,282 @@
@@ -6310,7 +6541,7 @@ index 00000000000000..72ac5f1b11cbc3
 +		blockSize: h.BlockSize(),
 +	}
 +
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx := newHMAC1(key, md)
 +		if ctx.ctx == nil {
@@ -6426,7 +6657,7 @@ index 00000000000000..72ac5f1b11cbc3
 +		panic(err)
 +	}
 +	var hkey []byte
-+	if vMinor == 0 && vPatch <= 2 {
++	if minor() == 0 && patch() <= 2 {
 +		// EVP_MAC_init only resets the ctx internal state if a key is passed
 +		// when using OpenSSL 3.0.0, 3.0.1, and 3.0.2. Save a copy of the key
 +		// in the context so Reset can use it later. New OpenSSL versions
@@ -6439,7 +6670,7 @@ index 00000000000000..72ac5f1b11cbc3
 +}
 +
 +func (h *opensslHMAC) Reset() {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, 0, nil, nil); err != nil {
 +			panic(err)
@@ -6466,7 +6697,7 @@ index 00000000000000..72ac5f1b11cbc3
 +
 +func (h *opensslHMAC) Write(p []byte) (int, error) {
 +	if len(p) > 0 {
-+		switch vMajor {
++		switch major() {
 +		case 1:
 +			ossl.HMAC_Update(h.ctx1.ctx, base(p), len(p))
 +		case 3:
@@ -6492,7 +6723,7 @@ index 00000000000000..72ac5f1b11cbc3
 +	// that Sum has no effect on the underlying stream.
 +	// In particular it is OK to Sum, then Write more, then Sum again,
 +	// and the second Sum acts as if the first didn't happen.
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx2, err := ossl.HMAC_CTX_new()
 +		if err != nil {
@@ -6517,7 +6748,7 @@ index 00000000000000..72ac5f1b11cbc3
 +}
 +
 +func (h *opensslHMAC) Clone() (HashCloner, error) {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		ctx2, err := ossl.HMAC_CTX_new()
 +		if err != nil {
@@ -8863,10 +9094,10 @@ index 00000000000000..bb8ea6fafdc4d9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..07639e7c6d2fe9
+index 00000000000000..ee818c67e47b23
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,425 @@
+@@ -0,0 +1,430 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -8925,6 +9156,8 @@ index 00000000000000..07639e7c6d2fe9
 +	_EVP_PKEY_PUBLIC_KEY = 0x86,
 +	_EVP_PKEY_KEYPAIR    = 0x87,
 +
++	_EVP_MD_CTRL_XOF_LEN = 0x3,
++
 +	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
 +
 +	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
@@ -9076,6 +9309,7 @@ index 00000000000000..07639e7c6d2fe9
 +
 +_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
 +void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
++int EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR ctx, int cmd, int p1, void *p2) __attribute__((tag("111")));
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
 +const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
@@ -9086,6 +9320,8 @@ index 00000000000000..07639e7c6d2fe9
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
 +int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
 +int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice(md)));
++int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t len) __attribute__((tag("33"),noescape,nocallback,slice(md)));
++int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t len) __attribute__((tag("33"),noescape,nocallback,slice("out","len")));
 +int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
 +int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
@@ -9568,10 +9804,10 @@ index 00000000000000..fb345aac77ea48
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..45df4fbfd4a808
+index 00000000000000..413f4c0f0185b9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2012 @@
+@@ -0,0 +1,2045 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -9643,12 +9879,14 @@ index 00000000000000..45df4fbfd4a808
 +int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
 +int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
 +int (*_g_EVP_Digest)(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestFinalXOF)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
 +int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
 +int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
 +int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
 +int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
 +int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
 +int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_DigestSqueeze)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
 +int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
 +int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
 +int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
@@ -9674,6 +9912,7 @@ index 00000000000000..45df4fbfd4a808
 +int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
 +int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
 +int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_ctrl)(_EVP_MD_CTX_PTR, int, int, void*);
 +void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
 +int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
 +const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
@@ -10041,6 +10280,7 @@ index 00000000000000..45df4fbfd4a808
 +void __mkcgo_load_111(void* handle) {
 +	__mkcgo__dlsym(EVP_DigestSign)
 +	__mkcgo__dlsym(EVP_DigestVerify)
++	__mkcgo__dlsym(EVP_MD_CTX_ctrl)
 +	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
 +	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
 +	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
@@ -10056,6 +10296,7 @@ index 00000000000000..45df4fbfd4a808
 +void __mkcgo_unload_111() {
 +	_g_EVP_DigestSign = NULL;
 +	_g_EVP_DigestVerify = NULL;
++	_g_EVP_MD_CTX_ctrl = NULL;
 +	_g_EVP_PKEY_get_raw_private_key = NULL;
 +	_g_EVP_PKEY_get_raw_public_key = NULL;
 +	_g_EVP_PKEY_new_raw_private_key = NULL;
@@ -10214,6 +10455,16 @@ index 00000000000000..45df4fbfd4a808
 +	_g_OSSL_PROVIDER_try_load = NULL;
 +}
 +
++void __mkcgo_load_33(void* handle) {
++	__mkcgo__dlsym(EVP_DigestFinalXOF)
++	__mkcgo__dlsym(EVP_DigestSqueeze)
++}
++
++void __mkcgo_unload_33() {
++	_g_EVP_DigestFinalXOF = NULL;
++	_g_EVP_DigestSqueeze = NULL;
++}
++
 +void __mkcgo_load_init_1(void* handle) {
 +	__mkcgo__dlsym(FIPS_mode)
 +	__mkcgo__dlsym(FIPS_mode_set)
@@ -10646,6 +10897,12 @@ index 00000000000000..45df4fbfd4a808
 +	return _ret;
 +}
 +
++int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestFinalXOF(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -10682,6 +10939,12 @@ index 00000000000000..45df4fbfd4a808
 +	return _ret;
 +}
 +
++int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestSqueeze(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -10824,6 +11087,12 @@ index 00000000000000..45df4fbfd4a808
 +	return _ret;
 +}
 +
++int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MD_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
 +	_g_EVP_MD_CTX_free(_arg0);
 +}
@@ -11586,10 +11855,10 @@ index 00000000000000..45df4fbfd4a808
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..5f6ed2fab35022
+index 00000000000000..cc1bf289fa1507
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,63 @@
+@@ -0,0 +1,64 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -11616,6 +11885,7 @@ index 00000000000000..5f6ed2fab35022
 +	EVP_MAX_MD_SIZE                     = 64
 +	EVP_PKEY_PUBLIC_KEY                 = 0x86
 +	EVP_PKEY_KEYPAIR                    = 0x87
++	EVP_MD_CTRL_XOF_LEN                 = 0x3
 +	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
 +	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
 +	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
@@ -11655,10 +11925,10 @@ index 00000000000000..5f6ed2fab35022
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..3880f653c1e788
+index 00000000000000..f3d568a4bf7a3c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,352 @@
+@@ -0,0 +1,358 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -11719,6 +11989,7 @@ index 00000000000000..3880f653c1e788
 +	_EVP_MAX_MD_SIZE = 64,
 +	_EVP_PKEY_PUBLIC_KEY = 0x86,
 +	_EVP_PKEY_KEYPAIR = 0x87,
++	_EVP_MD_CTRL_XOF_LEN = 0x3,
 +	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
 +	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
 +	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
@@ -11764,6 +12035,8 @@ index 00000000000000..3880f653c1e788
 +void __mkcgo_unload_111();
 +void __mkcgo_load_3(void* handle);
 +void __mkcgo_unload_3();
++void __mkcgo_load_33(void* handle);
++void __mkcgo_unload_33();
 +void __mkcgo_load_init_1(void* handle);
 +void __mkcgo_unload_init_1();
 +void __mkcgo_load_init_3(void* handle);
@@ -11834,12 +12107,14 @@ index 00000000000000..3880f653c1e788
 +int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
 +int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
 +int _mkcgo_EVP_Digest(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
 +int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
 +int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
 +int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
 +int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
@@ -11865,6 +12140,7 @@ index 00000000000000..3880f653c1e788
 +int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
 +int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR, int, int, void*, uintptr_t *);
 +void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
 +int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, uintptr_t *);
 +const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, uintptr_t *);
@@ -12013,10 +12289,10 @@ index 00000000000000..3880f653c1e788
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..ba469a24bdf87a
+index 00000000000000..620a5e7f46366e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1334 @@
+@@ -0,0 +1,1360 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -12084,6 +12360,14 @@ index 00000000000000..ba469a24bdf87a
 +	C.__mkcgo_unload_3()
 +}
 +
++func MkcgoLoad_33(handle unsafe.Pointer) {
++	C.__mkcgo_load_33(handle)
++}
++
++func MkcgoUnload_33() {
++	C.__mkcgo_unload_33()
++}
++
 +func MkcgoLoad_init_1(handle unsafe.Pointer) {
 +	C.__mkcgo_load_init_1(handle)
 +}
@@ -12414,6 +12698,12 @@ index 00000000000000..ba469a24bdf87a
 +	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
 +}
 +
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte, len int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestFinalXOF(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), C.size_t(len), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestFinalXOF", uintptr(_err))
++}
++
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
@@ -12450,6 +12740,12 @@ index 00000000000000..ba469a24bdf87a
 +	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", uintptr(_err))
 +}
 +
++func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestSqueeze(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), C.size_t(len(out)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSqueeze", uintptr(_err))
++}
++
 +func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(d))), C.size_t(len(d)), mkcgoNoEscape(&_err))
@@ -12592,6 +12888,12 @@ index 00000000000000..ba469a24bdf87a
 +	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", uintptr(_err))
 +}
 +
++func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_ctrl(ctx, C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_ctrl", uintptr(_err))
++}
++
 +func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
 +	C._mkcgo_EVP_MD_CTX_free(ctx)
 +}
@@ -13353,10 +13655,10 @@ index 00000000000000..ba469a24bdf87a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
 new file mode 100644
-index 00000000000000..bfe062869cee6a
+index 00000000000000..7ced663df8a562
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-@@ -0,0 +1,37 @@
+@@ -0,0 +1,41 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build go1.24 && !cmd_go_bootstrap
@@ -13374,10 +13676,14 @@ index 00000000000000..bfe062869cee6a
 +#cgo nocallback _mkcgo_EVP_DecryptUpdate
 +#cgo noescape _mkcgo_EVP_Digest
 +#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestFinalXOF
++#cgo nocallback _mkcgo_EVP_DigestFinalXOF
 +#cgo noescape _mkcgo_EVP_DigestFinal_ex
 +#cgo nocallback _mkcgo_EVP_DigestFinal_ex
 +#cgo noescape _mkcgo_EVP_DigestSign
 +#cgo nocallback _mkcgo_EVP_DigestSign
++#cgo noescape _mkcgo_EVP_DigestSqueeze
++#cgo nocallback _mkcgo_EVP_DigestSqueeze
 +#cgo noescape _mkcgo_EVP_DigestUpdate
 +#cgo nocallback _mkcgo_EVP_DigestUpdate
 +#cgo noescape _mkcgo_EVP_EncryptFinal_ex
@@ -13396,10 +13702,10 @@ index 00000000000000..bfe062869cee6a
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..39f67a2fcb14d6
+index 00000000000000..9d93cfcc34abc7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2341 @@
+@@ -0,0 +1,2377 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -13857,6 +14163,14 @@ index 00000000000000..39f67a2fcb14d6
 +	return int32(r0), newMkcgoErr("EVP_Digest", _err)
 +}
 +
++var _mkcgo_EVP_DigestFinalXOF uintptr
++
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte, len int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinalXOF, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(len), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestFinalXOF", _err)
++}
++
 +var _mkcgo_EVP_DigestFinal_ex uintptr
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
@@ -13905,6 +14219,14 @@ index 00000000000000..39f67a2fcb14d6
 +	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
 +}
 +
++var _mkcgo_EVP_DigestSqueeze uintptr
++
++func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSqueeze, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSqueeze", _err)
++}
++
 +var _mkcgo_EVP_DigestUpdate uintptr
 +
 +func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
@@ -14097,6 +14419,14 @@ index 00000000000000..39f67a2fcb14d6
 +	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
 +}
 +
++var _mkcgo_EVP_MD_CTX_ctrl uintptr
++
++func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_ctrl, uintptr(ctx), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_ctrl", _err)
++}
++
 +var _mkcgo_EVP_MD_CTX_free uintptr
 +
 +func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
@@ -15429,6 +15759,7 @@ index 00000000000000..39f67a2fcb14d6
 +func MkcgoLoad_111(handle unsafe.Pointer) {
 +	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
 +	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
++	_mkcgo_EVP_MD_CTX_ctrl = dlsym(handle, "EVP_MD_CTX_ctrl\x00", false)
 +	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
 +	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
 +	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
@@ -15444,6 +15775,7 @@ index 00000000000000..39f67a2fcb14d6
 +func MkcgoUnload_111() {
 +	_mkcgo_EVP_DigestSign = 0
 +	_mkcgo_EVP_DigestVerify = 0
++	_mkcgo_EVP_MD_CTX_ctrl = 0
 +	_mkcgo_EVP_PKEY_get_raw_private_key = 0
 +	_mkcgo_EVP_PKEY_get_raw_public_key = 0
 +	_mkcgo_EVP_PKEY_new_raw_private_key = 0
@@ -15602,6 +15934,16 @@ index 00000000000000..39f67a2fcb14d6
 +	_mkcgo_OSSL_PROVIDER_try_load = 0
 +}
 +
++func MkcgoLoad_33(handle unsafe.Pointer) {
++	_mkcgo_EVP_DigestFinalXOF = dlsym(handle, "EVP_DigestFinalXOF\x00", false)
++	_mkcgo_EVP_DigestSqueeze = dlsym(handle, "EVP_DigestSqueeze\x00", false)
++}
++
++func MkcgoUnload_33() {
++	_mkcgo_EVP_DigestFinalXOF = 0
++	_mkcgo_EVP_DigestSqueeze = 0
++}
++
 +func MkcgoLoad_init_1(handle unsafe.Pointer) {
 +	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
 +	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
@@ -15743,7 +16085,7 @@ index 00000000000000..39f67a2fcb14d6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 new file mode 100644
-index 00000000000000..cea3f9881f920e
+index 00000000000000..f1248bb3ccd7a6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 @@ -0,0 +1,371 @@
@@ -15781,7 +16123,7 @@ index 00000000000000..cea3f9881f920e
 +
 +// SupportsMLKEM768 returns true if ML-KEM-768 is supported on this platform.
 +func SupportsMLKEM768() bool {
-+	if vMajor >= 3 && vMinor >= 5 {
++	if major() >= 3 && minor() >= 5 {
 +		return supportsMLKEM768()
 +	}
 +	return false
@@ -15789,7 +16131,7 @@ index 00000000000000..cea3f9881f920e
 +
 +// SupportsMLKEM1024 returns true if ML-KEM-1024 is supported on this platform.
 +func SupportsMLKEM1024() bool {
-+	if vMajor >= 3 && vMinor >= 5 {
++	if major() >= 3 && minor() >= 5 {
 +		return supportsMLKEM1024()
 +	}
 +	return false
@@ -16120,10 +16462,10 @@ index 00000000000000..cea3f9881f920e
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..ae5dd424ff9627
+index 00000000000000..34bffbf4f723a7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,246 @@
+@@ -0,0 +1,253 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -16133,18 +16475,13 @@ index 00000000000000..ae5dd424ff9627
 +	"errors"
 +	"math/bits"
 +	"strconv"
++	"sync"
 +	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +	"github.com/golang-fips/openssl/v2/osslsetup"
 +)
 +
-+var (
-+	// vMajor and vMinor hold the major/minor OpenSSL version.
-+	// It is only populated if Init has been called.
-+	vMajor, vMinor, vPatch int
-+)
-+
 +// CheckVersion checks if the OpenSSL version can be loaded
 +// and if the FIPS mode is enabled.
 +// This function can be called before Init.
@@ -16153,7 +16490,31 @@ index 00000000000000..ae5dd424ff9627
 +	return osslsetup.CheckVersion(version)
 +}
 +
-+var isBigEndian bool
++var isBigEndian = sync.OnceValue(func() bool {
++	buf := [2]byte{}
++	*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
++
++	switch buf {
++	case [2]byte{0xCD, 0xAB}:
++		return false
++	case [2]byte{0xAB, 0xCD}:
++		return true
++	default:
++		panic("Could not determine native endianness.")
++	}
++})
++
++func major() int {
++	return osslsetup.VersionMajor()
++}
++
++func minor() int {
++	return osslsetup.VersionMinor()
++}
++
++func patch() int {
++	return osslsetup.VersionPatch()
++}
 +
 +// Init loads and initializes OpenSSL from the shared library at path.
 +// It must be called before any other OpenSSL call, except CheckVersion.
@@ -16165,21 +16526,9 @@ index 00000000000000..ae5dd424ff9627
 +// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
 +// library libcrypto.so.1.1.1k-fips.
 +func Init(file string) error {
-+	buf := [2]byte{}
-+	*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
-+
-+	switch buf {
-+	case [2]byte{0xCD, 0xAB}:
-+		isBigEndian = false
-+	case [2]byte{0xAB, 0xCD}:
-+		isBigEndian = true
-+	default:
-+		panic("Could not determine native endianness.")
-+	}
 +	if err := osslsetup.Init(file); err != nil {
 +		return err
 +	}
-+	vMajor, vMinor, vPatch = osslsetup.Version()
 +	return nil
 +}
 +
@@ -16188,13 +16537,13 @@ index 00000000000000..ae5dd424ff9627
 +}
 +
 +func errUnsupportedVersion() error {
-+	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
++	return errors.New("openssl: OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()))
 +}
 +
 +// checkMajorVersion panics if the current major version is not expected.
 +func checkMajorVersion(expected int) {
-+	if vMajor != expected {
-+		panic("openssl: incorrect major version (" + strconv.Itoa(vMajor) + "), expected " + strconv.Itoa(expected))
++	if major() != expected {
++		panic("openssl: incorrect major version (" + strconv.Itoa(major()) + "), expected " + strconv.Itoa(expected))
 +	}
 +}
 +
@@ -16318,7 +16667,7 @@ index 00000000000000..ae5dd424ff9627
 +	if len(x) == 0 {
 +		return nil, nil
 +	}
-+	if isBigEndian {
++	if isBigEndian() {
 +		z := make(BigInt, len(x))
 +		copy(z, x)
 +		z.byteSwap()
@@ -16344,7 +16693,7 @@ index 00000000000000..ae5dd424ff9627
 +	if _, err := ossl.BN_bn2lebinpad(bn, wbase(x), int32(len(x)*wordBytes)); err != nil {
 +		panic(err)
 +	}
-+	if isBigEndian {
++	if isBigEndian() {
 +		x.byteSwap()
 +	}
 +	return x
@@ -16359,10 +16708,10 @@ index 00000000000000..ae5dd424ff9627
 +}
 +
 +// versionAtOrAbove returns true when
-+// (vMajor, vMinor, vPatch) >= (major, minor, patch),
++// (major(), minor(), patch()) >= (vmajor, vminor, vpatch),
 +// compared lexicographically.
-+func versionAtOrAbove(major, minor, patch int) bool {
-+	return vMajor > major || (vMajor == major && vMinor > minor) || (vMajor == major && vMinor == minor && vPatch >= patch)
++func versionAtOrAbove(vmajor, vminor, vpatch int) bool {
++	return major() > vmajor || (major() == vmajor && minor() > vminor) || (major() == vmajor && minor() == vminor && patch() >= vpatch)
 +}
 +
 +func bigEndianUint64(b []byte) uint64 {
@@ -16603,10 +16952,10 @@ index 00000000000000..be03becaaeeeb7
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
 new file mode 100644
-index 00000000000000..c09a86b4b5a6fd
+index 00000000000000..faa9c37742133e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
-@@ -0,0 +1,157 @@
+@@ -0,0 +1,160 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package osslsetup
@@ -16640,6 +16989,9 @@ index 00000000000000..c09a86b4b5a6fd
 +	} else {
 +		ossl.MkcgoLoad_111(handle)
 +		ossl.MkcgoLoad_3(handle)
++		if vMajor >= 3 && vMinor >= 3 {
++			ossl.MkcgoLoad_33(handle)
++		}
 +	}
 +
 +	// Initialize OpenSSL.
@@ -16883,10 +17235,10 @@ index 00000000000000..c4981aef84b42f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
 new file mode 100644
-index 00000000000000..702210b7c5f5e7
+index 00000000000000..53b53586a05812
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,74 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package osslsetup
@@ -16903,8 +17255,16 @@ index 00000000000000..702210b7c5f5e7
 +	vMajor, vMinor, vPatch int
 +)
 +
-+func Version() (major, minor, patch int) {
-+	return vMajor, vMinor, vPatch
++func VersionMajor() int {
++	return vMajor
++}
++
++func VersionMinor() int {
++	return vMinor
++}
++
++func VersionPatch() int {
++	return vPatch
 +}
 +
 +func utoa(n int) string {
@@ -17189,7 +17549,7 @@ index 00000000000000..a9310fd6ec4721
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..939b88d31c80c0
+index 00000000000000..ab4bb9b2348dab
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 @@ -0,0 +1,54 @@
@@ -17207,7 +17567,7 @@ index 00000000000000..939b88d31c80c0
 +
 +// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
 +func SupportsPBKDF2() bool {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return true
 +	case 3:
@@ -17249,7 +17609,7 @@ index 00000000000000..939b88d31c80c0
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 new file mode 100644
-index 00000000000000..767fbda4053df8
+index 00000000000000..afbb7f4d0d6f5e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 @@ -0,0 +1,239 @@
@@ -17418,7 +17778,7 @@ index 00000000000000..767fbda4053df8
 +}
 +
 +func getOSSLDigetsContext(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
 +		type mdCtx struct {
@@ -17494,7 +17854,7 @@ index 00000000000000..767fbda4053df8
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 new file mode 100644
-index 00000000000000..004d1f32799708
+index 00000000000000..125404e395d198
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 @@ -0,0 +1,338 @@
@@ -17561,7 +17921,7 @@ index 00000000000000..004d1f32799708
 +
 +func newUINT64(v uint64) _UINT64 {
 +	var u _UINT64
-+	if isBigEndian {
++	if isBigEndian() {
 +		u[0], u[1] = uint32(v>>32), uint32(v)
 +	} else {
 +		u[0], u[1] = uint32(v), uint32(v>>32)
@@ -17570,7 +17930,7 @@ index 00000000000000..004d1f32799708
 +}
 +
 +func (u *_UINT64) uint64() uint64 {
-+	if isBigEndian {
++	if isBigEndian() {
 +		return uint64(u[0])<<32 | (uint64(u[1]))
 +	}
 +	return uint64(u[0]) | (uint64(u[1]) << 32)
@@ -17939,7 +18299,7 @@ index 00000000000000..e933228919296d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..59e3eb5acc07f8
+index 00000000000000..2c8c8e85523146
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 @@ -0,0 +1,365 @@
@@ -17967,7 +18327,7 @@ index 00000000000000..59e3eb5acc07f8
 +		return bad(err)
 +	}
 +	defer ossl.EVP_PKEY_free(pkey)
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		key, err := ossl.EVP_PKEY_get1_RSA(pkey)
 +		if err != nil {
@@ -18023,7 +18383,7 @@ index 00000000000000..59e3eb5acc07f8
 +
 +func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
 +	var pkey ossl.EVP_PKEY_PTR
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		key, err := ossl.RSA_new()
 +		if err != nil {
@@ -18081,7 +18441,7 @@ index 00000000000000..59e3eb5acc07f8
 +
 +func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
 +	var pkey ossl.EVP_PKEY_PTR
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		key, err := ossl.RSA_new()
 +		if err != nil {
@@ -18207,7 +18567,7 @@ index 00000000000000..59e3eb5acc07f8
 +	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
 +	if saltLen == 0 {
 +		if sign {
-+			if vMajor == 1 {
++			if major() == 1 {
 +				// OpenSSL 1.x uses -2 to mean maximal size when signing where Go crypto uses 0.
 +				return ossl.RSA_PSS_SALTLEN_MAX_SIGN, nil
 +			}
@@ -18286,7 +18646,7 @@ index 00000000000000..59e3eb5acc07f8
 +		//
 +		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
 +		// value is missing. See https://github.com/openssl/openssl/pull/22334
-+		if vMinor >= 2 || allPrecomputedExists {
++		if minor() >= 2 || allPrecomputedExists {
 +			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
 +			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
 +		}
@@ -18310,7 +18670,7 @@ index 00000000000000..59e3eb5acc07f8
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..75c564020da8cc
+index 00000000000000..5a0aa905f03e43
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 @@ -0,0 +1,158 @@
@@ -18329,9 +18689,9 @@ index 00000000000000..75c564020da8cc
 +)
 +
 +func SupportsTLS1PRF() bool {
-+	switch vMajor {
++	switch major() {
 +	case 1:
-+		return vMinor >= 1
++		return minor() >= 1
 +	case 3:
 +		_, err := fetchTLS1PRF3()
 +		return err == nil
@@ -18363,7 +18723,7 @@ index 00000000000000..75c564020da8cc
 +		return errors.New("unsupported hash function")
 +	}
 +
-+	switch vMajor {
++	switch major() {
 +	case 1:
 +		return tls1PRF1(result, secret, label, seed, md)
 +	case 3:
@@ -32156,11 +32516,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7932adddfaa1c5..93d7709587c705 100644
+index 7932adddfaa1c5..f0dd3eafd8e753 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,24 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251202164922-9e4b3c1f23bb
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig

From 4279ec59553bb1112b8a5c660cc18d403e70cfd4 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 12:19:22 +0000
Subject: [PATCH 593/887] fix rand

---
 patches/0004-Use-crypto-backends.patch | 286 ++++++++++++++-----------
 1 file changed, 160 insertions(+), 126 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 48c23febd28..980b6370d70 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -24,13 +24,13 @@ Subject: [PATCH] Use crypto backends
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
  src/crypto/ecdh/ecdh_test.go                  |   4 +
- src/crypto/ecdh/nist.go                       |   2 +-
+ src/crypto/ecdh/nist.go                       |   4 +-
  src/crypto/ecdsa/badlinkname.go               |  19 ++
  src/crypto/ecdsa/boring.go                    |   6 +-
  src/crypto/ecdsa/ecdsa.go                     |  10 +-
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
- src/crypto/ed25519/ed25519.go                 |  70 +++++++
+ src/crypto/ed25519/ed25519.go                 |  73 ++++++-
  src/crypto/ed25519/ed25519_test.go            |  13 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/fips140.go                 |   3 +-
@@ -45,9 +45,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
- src/crypto/internal/rand/rand.go              |  23 ---
- src/crypto/internal/rand/rand_boring.go       |  19 ++
- src/crypto/internal/rand/rand_notboring.go    |  28 +++
+ src/crypto/internal/rand/rand.go              |  12 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
  src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
@@ -55,18 +53,18 @@ Subject: [PATCH] Use crypto backends
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
- src/crypto/rand/rand.go                       |   2 +-
+ src/crypto/rand/rand.go                       |  21 +-
  src/crypto/rand/rand_test.go                  |   9 +-
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/darwin.go                      |  71 +++++++
- src/crypto/rsa/fips.go                        |  14 +-
+ src/crypto/rsa/fips.go                        |  25 +--
  src/crypto/rsa/notboring.go                   |   4 +-
- src/crypto/rsa/pkcs1v15.go                    |   6 +-
+ src/crypto/rsa/pkcs1v15.go                    |   8 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  13 +-
- src/crypto/rsa/rsa.go                         |   4 +-
+ src/crypto/rsa/rsa.go                         |   6 +-
  src/crypto/rsa/rsa_test.go                    |  15 +-
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
@@ -99,14 +97,12 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1388 insertions(+), 164 deletions(-)
+ 93 files changed, 1368 insertions(+), 165 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
- create mode 100644 src/crypto/internal/rand/rand_boring.go
- create mode 100644 src/crypto/internal/rand/rand_notboring.go
  create mode 100644 src/crypto/rsa/darwin.go
  create mode 100644 src/crypto/tls/internal/tls13/doc.go
  create mode 100644 src/crypto/tls/internal/tls13/tls13.go
@@ -811,7 +807,7 @@ index 8a3eb87061ad8c..a09a9fc8148039 100644
  		for _, input := range invalidPrivateKeys[curve] {
  			k, err := curve.NewPrivateKey(hexDecode(t, input))
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index de7348d9232349..011270049df613 100644
+index de7348d9232349..3521c3bbd03959 100644
 --- a/src/crypto/ecdh/nist.go
 +++ b/src/crypto/ecdh/nist.go
 @@ -6,7 +6,7 @@ package ecdh
@@ -823,6 +819,15 @@ index de7348d9232349..011270049df613 100644
  	"crypto/internal/fips140/ecdh"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
+@@ -27,7 +27,7 @@ func (c *nistCurve) String() string {
+ }
+ 
+ func (c *nistCurve) GenerateKey(r io.Reader) (*PrivateKey, error) {
+-	if boring.Enabled && r == boring.RandReader {
++	if boring.Enabled && rand.IsDefaultReader(r) {
+ 		key, bytes, err := boring.GenerateKeyECDH(c.name)
+ 		if err != nil {
+ 			return nil, err
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
 index 00000000000000..168efdb820c85b
@@ -870,7 +875,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index aee15b92838543..10101c88ac0ea4 100644
+index aee15b92838543..1eb2604505e229 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -889,7 +894,7 @@ index aee15b92838543..10101c88ac0ea4 100644
  // in a future Go release. Instead, use [testing/cryptotest.SetGlobalRandom].
  func GenerateKey(c elliptic.Curve, r io.Reader) (*PrivateKey, error) {
 -	if boring.Enabled && r == boring.RandReader {
-+	if boring.Enabled && r == boring.RandReader && boring.SupportsCurve(c.Params().Name) {
++	if boring.Enabled && rand.IsDefaultReader(r) && boring.SupportsCurve(c.Params().Name) {
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
  			return nil, err
@@ -898,7 +903,7 @@ index aee15b92838543..10101c88ac0ea4 100644
  // [testing/cryptotest.SetGlobalRandom].
  func SignASN1(r io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
 -	if boring.Enabled && r == boring.RandReader {
-+	if boring.Enabled && r == boring.RandReader && boring.SupportsCurve(priv.Curve.Params().Name) {
++	if boring.Enabled && rand.IsDefaultReader(r) && boring.SupportsCurve(priv.Curve.Params().Name) {
  		b, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -1007,18 +1012,19 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index f09dabe23e875d..281468eca9b1fa 100644
+index f09dabe23e875d..00752fce1bae07 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
-@@ -17,6 +17,7 @@ package ed25519
+@@ -17,7 +17,7 @@ package ed25519
  
  import (
  	"crypto"
+-	"crypto/internal/fips140/drbg"
 +	boring "crypto/internal/backend"
- 	"crypto/internal/fips140/drbg"
  	"crypto/internal/fips140/ed25519"
  	"crypto/internal/fips140cache"
-@@ -28,6 +29,7 @@ import (
+ 	"crypto/internal/fips140only"
+@@ -28,6 +28,7 @@ import (
  	"internal/godebug"
  	"io"
  	"strconv"
@@ -1026,11 +1032,19 @@ index f09dabe23e875d..281468eca9b1fa 100644
  )
  
  const (
-@@ -160,6 +162,19 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+@@ -153,13 +154,26 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+ 	if random == nil {
+ 		if cryptocustomrand.Value() == "1" {
+ 			random = cryptorand.Reader
+-			if _, ok := random.(drbg.DefaultReader); !ok {
++			if !rand.IsDefaultReader(random) {
+ 				cryptocustomrand.IncNonDefault()
+ 			}
+ 		} else {
  			random = rand.Reader
  		}
  	}
-+	if boring.Enabled && random == boring.RandReader && boring.SupportsEd25519() {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsEd25519() {
 +		priv, err := boring.GenerateKeyEd25519()
 +		if err != nil {
 +			return nil, nil, err
@@ -1046,7 +1060,7 @@ index f09dabe23e875d..281468eca9b1fa 100644
  
  	seed := make([]byte, SeedSize)
  	if _, err := io.ReadFull(random, seed); err != nil {
-@@ -176,6 +191,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+@@ -176,6 +190,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1064,7 +1078,7 @@ index f09dabe23e875d..281468eca9b1fa 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -194,6 +220,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -194,6 +219,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1082,7 +1096,7 @@ index f09dabe23e875d..281468eca9b1fa 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -223,6 +260,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -223,6 +259,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1115,7 +1129,7 @@ index f09dabe23e875d..281468eca9b1fa 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -251,6 +314,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -251,6 +313,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
@@ -1448,105 +1462,39 @@ index 52fc9d34886003..9afaf522df475c 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/internal/rand/rand.go b/src/crypto/internal/rand/rand.go
-index 3a780952e705e5..834d468704d68f 100644
+index 3a780952e705e5..b3113a3ee2e1fa 100644
 --- a/src/crypto/internal/rand/rand.go
 +++ b/src/crypto/internal/rand/rand.go
-@@ -5,7 +5,6 @@
+@@ -5,7 +5,7 @@
  package rand
  
  import (
 -	"crypto/internal/boring"
++	boring "crypto/internal/backend"
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/randutil"
  	"internal/godebug"
-@@ -13,28 +12,6 @@ import (
- 	_ "unsafe"
- )
- 
--type reader struct {
--	drbg.DefaultReader
--}
--
--func (r reader) Read(b []byte) (n int, err error) {
--	if boring.Enabled {
--		if _, err := boring.RandReader.Read(b); err != nil {
--			panic("crypto/rand: boring RandReader failed: " + err.Error())
--		}
--		return len(b), nil
--	}
--	drbg.Read(b)
--	return len(b), nil
--}
--
--// Reader is an io.Reader that calls [drbg.Read].
--//
--// It should be used internally instead of [crypto/rand.Reader], because the
--// latter can be set by applications outside of tests. These applications then
--// risk breaking between Go releases, if the way the Reader is used changes.
--var Reader io.Reader = reader{}
--
- // SetTestingReader overrides all calls to [drbg.Read]. The Read method of
- // r must never return an error or return short.
- //
-diff --git a/src/crypto/internal/rand/rand_boring.go b/src/crypto/internal/rand/rand_boring.go
-new file mode 100644
-index 00000000000000..e7ebcdfe102a43
---- /dev/null
-+++ b/src/crypto/internal/rand/rand_boring.go
-@@ -0,0 +1,19 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package rand
-+
-+import (
-+	boring "crypto/internal/backend"
-+	"io"
-+)
+@@ -55,7 +55,7 @@ var cryptocustomrand = godebug.New("cryptocustomrand")
+ // If returning a non-default Reader, it calls [randutil.MaybeReadByte] on it.
+ func CustomReader(r io.Reader) io.Reader {
+ 	if cryptocustomrand.Value() == "1" {
+-		if _, ok := r.(drbg.DefaultReader); !ok {
++		if !IsDefaultReader(r) {
+ 			randutil.MaybeReadByte(r)
+ 			cryptocustomrand.IncNonDefault()
+ 		}
+@@ -63,3 +63,11 @@ func CustomReader(r io.Reader) io.Reader {
+ 	}
+ 	return Reader
+ }
 +
-+// Reader is an io.Reader that calls [drbg.Read].
++// IsDefaultReader reports whether r is the default [crypto/rand.Reader].
 +//
-+// It should be used internally instead of [crypto/rand.Reader], because the
-+// latter can be set by applications outside of tests. These applications then
-+// risk breaking between Go releases, if the way the Reader is used changes.
-+var Reader io.Reader = boring.RandReader
-diff --git a/src/crypto/internal/rand/rand_notboring.go b/src/crypto/internal/rand/rand_notboring.go
-new file mode 100644
-index 00000000000000..8130a9eac934d6
---- /dev/null
-+++ b/src/crypto/internal/rand/rand_notboring.go
-@@ -0,0 +1,28 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package rand
-+
-+import (
-+	"crypto/internal/fips140/drbg"
-+	"io"
-+)
-+
-+type reader struct {
-+	drbg.DefaultReader
-+}
-+
-+func (r reader) Read(b []byte) (n int, err error) {
-+	drbg.Read(b)
-+	return len(b), nil
++// If true, the Read method of r can be assumed to call [drbg.Read].
++func IsDefaultReader(r io.Reader) bool {
++	_, ok := r.(drbg.DefaultReader)
++	return ok
 +}
-+
-+// Reader is an io.Reader that calls [drbg.Read].
-+//
-+// It should be used internally instead of [crypto/rand.Reader], because the
-+// latter can be set by applications outside of tests. These applications then
-+// risk breaking between Go releases, if the way the Reader is used changes.
-+var Reader io.Reader = reader{}
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index f1287887ff5e25..b2e26308349566 100644
 --- a/src/crypto/md5/md5.go
@@ -2014,7 +1962,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 004e6b6fedc7fc..be03999fab9693 100644
+index 004e6b6fedc7fc..e2279dbb2881b9 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -2026,6 +1974,39 @@ index 004e6b6fedc7fc..be03999fab9693 100644
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/rand"
  	"io"
+@@ -31,15 +31,7 @@ import (
+ //
+ // In FIPS 140-3 mode, the output passes through an SP 800-90A Rev. 1
+ // Deterministric Random Bit Generator (DRBG).
+-var Reader io.Reader
+-
+-func init() {
+-	if boring.Enabled {
+-		Reader = boring.RandReader
+-		return
+-	}
+-	Reader = rand.Reader
+-}
++var Reader io.Reader = rand.Reader
+ 
+ // fatal is [runtime.fatal], pushed via linkname.
+ //
+@@ -57,9 +49,12 @@ func Read(b []byte) (n int, err error) {
+ 	// through a potentially overridden Reader, so we special-case the default
+ 	// case which we can keep non-escaping, and in the general case we read into
+ 	// a heap buffer and copy from it.
+-	if _, ok := Reader.(drbg.DefaultReader); ok {
+-		boring.Unreachable()
+-		drbg.Read(b)
++	if rand.IsDefaultReader(Reader) {
++		if boring.Enabled {
++			_, err = boring.RandReader.Read(b)
++		} else {
++			drbg.Read(b)
++		}
+ 	} else {
+ 		bb := make([]byte, len(b))
+ 		_, err = io.ReadFull(Reader, bb)
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
 index 22ccb8a35334c9..832910da482f44 100644
 --- a/src/crypto/rand/rand_test.go
@@ -2241,10 +2222,10 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 75aa3d3d725757..071a7c95114bec 100644
+index 75aa3d3d725757..d043bcf0976338 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
-@@ -6,7 +6,7 @@ package rsa
+@@ -6,10 +6,11 @@ package rsa
  
  import (
  	"crypto"
@@ -2253,16 +2234,51 @@ index 75aa3d3d725757..071a7c95114bec 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
-@@ -70,7 +70,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
++	"crypto/internal/rand"
+ 	"errors"
+ 	"hash"
+ 	"io"
+@@ -59,9 +60,9 @@ func (opts *PSSOptions) saltLength() int {
+ // used. If opts.Hash is set, it overrides hash.
+ //
+ // The signature is randomized depending on the message, key, and salt size,
+-// using bytes from rand. Most applications should use [crypto/rand.Reader] as
+-// rand.
+-func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error) {
++// using bytes from random. Most applications should use [crypto/rand.Reader] as
++// random.
++func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error) {
+ 	if err := checkPublicKeySize(&priv.PublicKey); err != nil {
+ 		return nil, err
+ 	}
+@@ -70,7 +71,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
  		hash = opts.Hash
  	}
  
 -	if boring.Enabled && rand == boring.RandReader {
-+	if boring.Enabled && rand == boring.RandReader && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -133,7 +133,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+@@ -87,7 +88,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ 	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
+ 		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 	}
+-	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(rand) {
++	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
+ 		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+ 	}
+ 
+@@ -116,7 +117,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+ 		}
+ 	}
+ 
+-	return fipsError2(rsa.SignPSS(rand, k, h, digest, saltLength))
++	return fipsError2(rsa.SignPSS(random, k, h, digest, saltLength))
+ }
+ 
+ // VerifyPSS verifies a PSS signature.
+@@ -133,7 +134,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
  		return err
  	}
  
@@ -2271,16 +2287,16 @@ index 75aa3d3d725757..071a7c95114bec 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -216,7 +216,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
+@@ -216,7 +217,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
  	defer hash.Reset()
  	defer mgfHash.Reset()
  
 -	if boring.Enabled && random == boring.RandReader {
-+	if boring.Enabled && random == boring.RandReader && boring.SupportsRSAOAEPLabel(label) {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAOAEPLabel(label) {
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
  			return nil, ErrMessageTooLong
-@@ -268,7 +268,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+@@ -268,7 +269,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
@@ -2289,7 +2305,7 @@ index 75aa3d3d725757..071a7c95114bec 100644
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -330,7 +330,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -330,7 +331,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
@@ -2298,7 +2314,7 @@ index 75aa3d3d725757..071a7c95114bec 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -373,7 +373,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -373,7 +374,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
@@ -2326,7 +2342,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 0f216e0193252c..2b3cdca698fb1d 100644
+index 0f216e0193252c..f1122ce61087bd 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -2338,6 +2354,15 @@ index 0f216e0193252c..2b3cdca698fb1d 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
+@@ -61,7 +61,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
+ 		return nil, ErrMessageTooLong
+ 	}
+ 
+-	if boring.Enabled && random == boring.RandReader {
++	if boring.Enabled && rand.IsDefaultReader(random) {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return nil, err
 @@ -115,7 +115,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
@@ -2431,7 +2456,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 62f2de30b0b871..0002a53556ad32 100644
+index 62f2de30b0b871..6d49180a9e6756 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2445,6 +2470,15 @@ index 62f2de30b0b871..0002a53556ad32 100644
  	"crypto/internal/fips140/bigmod"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
+@@ -314,7 +314,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled && random == boring.RandReader &&
++	if boring.Enabled && rand.IsDefaultReader(random) &&
+ 		(bits == 2048 || bits == 3072 || bits == 4096) {
+ 		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
+ 		if err != nil {
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 5ae4c1dd203874..fc51cb619aa83f 100644
 --- a/src/crypto/rsa/rsa_test.go

From 140c9942212389ad5d803ab5ef37d18d880d85ba Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 12:32:04 +0000
Subject: [PATCH 594/887] fix lint

---
 eng/_util/cmd/upgrader/main.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/_util/cmd/upgrader/main.go b/eng/_util/cmd/upgrader/main.go
index 45add05a94e..999e45d46c4 100644
--- a/eng/_util/cmd/upgrader/main.go
+++ b/eng/_util/cmd/upgrader/main.go
@@ -146,6 +146,7 @@ func upgradeDependency(info *depsInfo) error {
 }
 
 var goBinary = sync.OnceValue(func() string {
+	//lint:ignore SA1019 we want to know the binary that built us
 	path := filepath.Join(runtime.GOROOT(), "bin", "go")
 	if runtime.GOOS == "windows" {
 		path += ".exe"

From 67af7587f459f9c12b70eb6210dfcc522ea2c569 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 4 Dec 2025 14:27:26 +0100
Subject: [PATCH 595/887] fix test

---
 patches/0004-Use-crypto-backends.patch | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 980b6370d70..4a99aa44cd5 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -89,6 +89,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
+ src/crypto/tls/tls_test.go                    |   2 +-
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
@@ -97,7 +98,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 93 files changed, 1368 insertions(+), 165 deletions(-)
+ 94 files changed, 1369 insertions(+), 166 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -3603,6 +3604,19 @@ index 19f80ac2c91c20..1502dd121c0361 100644
  		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
  	}
  }
+diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
+index 39ebb9d2f1edd3..3ab935ab1607f1 100644
+--- a/src/crypto/tls/tls_test.go
++++ b/src/crypto/tls/tls_test.go
+@@ -11,7 +11,7 @@ import (
+ 	"crypto/ecdh"
+ 	"crypto/ecdsa"
+ 	"crypto/elliptic"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	"crypto/tls/internal/fips140tls"
+ 	"crypto/x509"
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
 index 6dadba3a566f5e..a84b8cdeb42471 100644
 --- a/src/crypto/x509/verify_test.go

From e904dc76010ee19a058d52d782d4957173c5d89c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 4 Dec 2025 14:58:18 +0100
Subject: [PATCH 596/887] fix lint

---
 eng/_util/cmd/upgrader/main.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/_util/cmd/upgrader/main.go b/eng/_util/cmd/upgrader/main.go
index 999e45d46c4..ca7830a8860 100644
--- a/eng/_util/cmd/upgrader/main.go
+++ b/eng/_util/cmd/upgrader/main.go
@@ -147,6 +147,7 @@ func upgradeDependency(info *depsInfo) error {
 
 var goBinary = sync.OnceValue(func() string {
 	//lint:ignore SA1019 we want to know the binary that built us
+	//nolint:staticcheck // deprecated okay
 	path := filepath.Join(runtime.GOROOT(), "bin", "go")
 	if runtime.GOOS == "windows" {
 		path += ".exe"

From 95c178141f7c247d880a085c276072c10f4b469b Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 4 Dec 2025 15:15:07 +0100
Subject: [PATCH 597/887] fix rsa test

---
 patches/0004-Use-crypto-backends.patch | 71 +++++++++++++++++---------
 1 file changed, 47 insertions(+), 24 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4a99aa44cd5..729232b9241 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -59,13 +59,13 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/darwin.go                      |  71 +++++++
- src/crypto/rsa/fips.go                        |  25 +--
+ src/crypto/rsa/fips.go                        |  33 +--
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |   8 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  13 +-
- src/crypto/rsa/rsa.go                         |   6 +-
- src/crypto/rsa/rsa_test.go                    |  15 +-
+ src/crypto/rsa/rsa.go                         |  15 +-
+ src/crypto/rsa/rsa_test.go                    |  12 +-
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
@@ -98,7 +98,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 94 files changed, 1369 insertions(+), 166 deletions(-)
+ 94 files changed, 1376 insertions(+), 173 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2223,7 +2223,7 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 75aa3d3d725757..d043bcf0976338 100644
+index 75aa3d3d725757..504bd25d2c7df1 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,10 +6,11 @@ package rsa
@@ -2288,25 +2288,41 @@ index 75aa3d3d725757..d043bcf0976338 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -216,7 +217,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
+@@ -202,10 +203,12 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
+ //
+ // See [EncryptOAEP] for additional details.
+ func EncryptOAEPWithOptions(random io.Reader, pub *PublicKey, msg []byte, opts *OAEPOptions) ([]byte, error) {
+-	if opts.MGFHash == 0 {
+-		return encryptOAEP(opts.Hash.New(), opts.Hash.New(), random, pub, msg, opts.Label)
++	hash := opts.Hash.New()
++	mgfhash := hash
++	if opts.MGFHash != 0 && opts.Hash != opts.MGFHash {
++		mgfhash = opts.MGFHash.New()
+ 	}
+-	return encryptOAEP(opts.Hash.New(), opts.MGFHash.New(), random, pub, msg, opts.Label)
++	return encryptOAEP(hash, mgfhash, random, pub, msg, opts.Label)
+ }
+ 
+ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, label []byte) ([]byte, error) {
+@@ -216,7 +219,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
  	defer hash.Reset()
  	defer mgfHash.Reset()
  
 -	if boring.Enabled && random == boring.RandReader {
-+	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAOAEPLabel(label) {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
  			return nil, ErrMessageTooLong
-@@ -268,7 +269,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+@@ -268,7 +271,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -330,7 +331,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -330,7 +333,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
@@ -2315,7 +2331,7 @@ index 75aa3d3d725757..d043bcf0976338 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -373,7 +374,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -373,7 +376,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
@@ -2457,7 +2473,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 62f2de30b0b871..6d49180a9e6756 100644
+index 62f2de30b0b871..5cbedca4d3888d 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2471,7 +2487,24 @@ index 62f2de30b0b871..6d49180a9e6756 100644
  	"crypto/internal/fips140/bigmod"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
-@@ -314,7 +314,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+@@ -176,11 +176,12 @@ func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.D
+ 
+ 	switch opts := opts.(type) {
+ 	case *OAEPOptions:
+-		if opts.MGFHash == 0 {
+-			return decryptOAEP(opts.Hash.New(), opts.Hash.New(), priv, ciphertext, opts.Label)
+-		} else {
+-			return decryptOAEP(opts.Hash.New(), opts.MGFHash.New(), priv, ciphertext, opts.Label)
++		hash := opts.Hash.New()
++		mgfhash := hash
++		if opts.MGFHash != 0 && opts.Hash != opts.MGFHash {
++			mgfhash = opts.MGFHash.New()
+ 		}
++		return decryptOAEP(hash, mgfhash, priv, ciphertext, opts.Label)
+ 
+ 	case *PKCS1v15DecryptOptions:
+ 		if l := opts.SessionKeyLen; l > 0 {
+@@ -314,7 +315,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
  		return nil, err
  	}
  
@@ -2481,7 +2514,7 @@ index 62f2de30b0b871..6d49180a9e6756 100644
  		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
  		if err != nil {
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 5ae4c1dd203874..fc51cb619aa83f 100644
+index 5ae4c1dd203874..678e94ade86af6 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2517,16 +2550,6 @@ index 5ae4c1dd203874..fc51cb619aa83f 100644
  
  	msg := []byte("test")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -939,6 +949,9 @@ func TestDecryptOAEP(t *testing.T) {
- }
- 
- func Test2DecryptOAEP(t *testing.T) {
-+	if boring.Enabled {
-+		t.Skip("Some crypto backends don't supports OAEPOptions.MGFHash.")
-+	}
- 	random := rand.Reader
- 
- 	msg := []byte{0xed, 0x36, 0x90, 0x8d, 0xbe, 0xfc, 0x35, 0x40, 0x70, 0x4f, 0xf5, 0x9d, 0x6e, 0xc2, 0xeb, 0xf5, 0x27, 0xae, 0x65, 0xb0, 0x59, 0x29, 0x45, 0x25, 0x8c, 0xc1, 0x91, 0x22}
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
 index 46e47df1d32cf2..0fb56a3831c8a2 100644
 --- a/src/crypto/sha1/sha1.go

From 426b7d011609ec4a140af47a18c13a73e188c93e Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 15:11:44 +0000
Subject: [PATCH 598/887] fix internal linking

---
 patches/0004-Use-crypto-backends.patch | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 729232b9241..4d4114a814c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -11,7 +11,7 @@ Subject: [PATCH] Use crypto backends
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
- src/cmd/link/internal/ld/lib.go               |   5 +
+ src/cmd/link/internal/ld/lib.go               |   6 +
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
@@ -242,10 +242,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 22ee13dff87eca..850ecccd42bd8f 100644
+index 22ee13dff87eca..4d3f90f6c30080 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1174,6 +1174,11 @@ var hostobj []Hostobj
+@@ -1174,6 +1174,12 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -253,6 +253,7 @@ index 22ee13dff87eca..850ecccd42bd8f 100644
 +	"vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto",
 +	"vendor/github.com/microsoft/go-crypto-darwin/internal/security",
 +	"vendor/github.com/golang-fips/openssl/v2/internal/ossl",
++	"vendor/github.com/golang-fips/openssl/v2/osslsetup",
 +	"vendor/github.com/golang-fips/openssl/v2",
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",

From f3a86277433f1c7d9e04e7131e8d01ff207f5f00 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 16:39:33 +0000
Subject: [PATCH 599/887] skip unsupported test

---
 patches/0004-Use-crypto-backends.patch | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4d4114a814c..fa91bc46965 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -33,6 +33,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ed25519/ed25519.go                 |  73 ++++++-
  src/crypto/ed25519/ed25519_test.go            |  13 +-
  src/crypto/ed25519/notboring.go               |  16 ++
+ src/crypto/fips140/enforcement_test.go        |   4 +
  src/crypto/fips140/fips140.go                 |   3 +-
  src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
@@ -98,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 94 files changed, 1376 insertions(+), 173 deletions(-)
+ 95 files changed, 1381 insertions(+), 173 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1216,6 +1217,28 @@ index 00000000000000..77b69a3be88183
 +func boringPrivateKey(PrivateKey) (boring.PrivateKeyEd25519, error) {
 +	panic("boringcrypto: not available")
 +}
+diff --git a/src/crypto/fips140/enforcement_test.go b/src/crypto/fips140/enforcement_test.go
+index 708c7f7a15ee9e..f77c536b58daec 100644
+--- a/src/crypto/fips140/enforcement_test.go
++++ b/src/crypto/fips140/enforcement_test.go
+@@ -5,6 +5,7 @@
+ package fips140_test
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"internal/testenv"
+ 	"path/filepath"
+@@ -13,6 +14,9 @@ import (
+ )
+ 
+ func TestWithoutEnforcement(t *testing.T) {
++	if boring.Enabled {
++		t.Skip("GODEBUG=fips140=only not supported")
++	}
+ 	testenv.MustHaveExec(t)
+ 	testenv.MustHaveGoBuild(t)
+ 	cryptotest.MustSupportFIPS140(t)
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
 index f44f3b399b2f05..041081f54744b1 100644
 --- a/src/crypto/fips140/fips140.go

From 2aeb247ea2fc36d774d2368099bc0c19dbb793da Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 4 Dec 2025 17:15:26 +0000
Subject: [PATCH 600/887] fix tests

---
 patches/0004-Use-crypto-backends.patch | 25 +++++++++++++++++++++----
 1 file changed, 21 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index fa91bc46965..3b2a87940fe 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |   5 +-
+ src/cmd/dist/test.go                          |  13 +-
  src/cmd/go/go_boring_test.go                  |   6 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -99,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1381 insertions(+), 173 deletions(-)
+ 95 files changed, 1388 insertions(+), 174 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -125,7 +125,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1314403a56cad0..72665644edf02a 100644
+index 1314403a56cad0..17387733a3e1a0 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -137,7 +137,24 @@ index 1314403a56cad0..72665644edf02a 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1382,12 +1382,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -763,9 +763,15 @@ func (t *tester) registerTests() {
+ 
+ 	// Test GOEXPERIMENT=runtimesecret.
+ 	if !strings.Contains(goexperiment, "runtimesecret") {
++		// Don't override existing GOEXPERIMENTs.
++		goexperiment := goexperiment
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "runtimesecret"
+ 		t.registerTest("GOEXPERIMENT=runtimesecret go test runtime/secret/...", &goTest{
+ 			variant: "runtimesecret",
+-			env:     []string{"GOEXPERIMENT=runtimesecret"},
++			env:     []string{"GOEXPERIMENT=" + goexperiment},
+ 			pkg:     "runtime/secret/...",
+ 		})
+ 	}
+@@ -1382,12 +1388,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking

From fa44637ac0f52d329c5a705856635e629de8a954 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Thu, 4 Dec 2025 15:40:00 -0800
Subject: [PATCH 601/887] FIPS README.md: simplify support status of
 GODEBUG=fips140=only

---
 eng/doc/fips/README.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 2f378179d6b..ae54603c83a 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -223,7 +223,8 @@ The [Go Runtime FIPS mode](#go-runtime-fips-mode) section describes this in more
 
 Go 1.24 also introduces `GODEBUG=fips140=only`.
 It acts as `GODEBUG=fips140=on`, but also makes a best effort to panic if a non-FIPS 140-3 compliant algorithm is used.
-This setting is partially supported in Go 1.24.
+The `only` setting is not yet supported in the Microsoft build of Go.
+(See [microsoft/go#1656 Support `GODEBUG=fips140=only`](https://github.com/microsoft/go/issues/1656).)
 
 ### Linux FIPS mode (OpenSSL)
 

From 30f119e117dc9f38aafa4881318fef6bcce3d154 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 5 Dec 2025 13:14:28 +0100
Subject: [PATCH 602/887] Reenable internal linking test on darwin with cgo
 (#1947)

* reenable internal linking test on darwin with cgo

* rerun

---------

Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 ...003-Implement-crypto-internal-backend.patch | 18 +++---------------
 stub                                           |  0
 2 files changed, 3 insertions(+), 15 deletions(-)
 create mode 100644 stub

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 643171d218a..754d39dad4e 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,7 +13,7 @@ desired goexperiments and build tags.
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
- src/cmd/dist/test.go                          |  43 +-
+ src/cmd/dist/test.go                          |  38 +-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
@@ -53,7 +53,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2615 insertions(+), 21 deletions(-)
+ 44 files changed, 2610 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -246,7 +246,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index f8d19ac34c562f..1314403a56cad0 100644
+index 9c9e1b85f0cd76..54274e7fad8de3 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -350,18 +350,6 @@ index f8d19ac34c562f..1314403a56cad0 100644
  		// Only start multiple test dir shards on builders,
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
-@@ -1194,6 +1214,11 @@ func (t *tester) internalLink() bool {
- 	if goos == "ios" {
- 		return false
- 	}
-+	if goos == "darwin" && t.cgoEnabled && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
-+		// linkmode=internal isn't supported with system/darwin crypto.
-+		// see https://github.com/microsoft/go-crypto-darwin/issues/33
-+		return false
-+	}
- 	// Internally linking cgo is incomplete on some architectures.
- 	// https://golang.org/issue/10373
- 	// https://golang.org/issue/14449
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
 index 1722f1a2c34428..ba7740bf8cd31e 100644
 --- a/src/cmd/go/go_test.go
diff --git a/stub b/stub
new file mode 100644
index 00000000000..e69de29bb2d

From 6862bda01f624a1d2774fb843469c5dd6b96ae28 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 5 Dec 2025 12:53:39 +0000
Subject: [PATCH 603/887] implement CSHAKE (#1984)

* implement CSHAKE

* fixup marshaller

* fix allocations test

* update crypto doc
---
 eng/doc/CrossPlatformCryptography.md          |  10 +-
 .../0001-Vendor-external-dependencies.patch   |  76 +++++--
 ...03-Implement-crypto-internal-backend.patch | 120 ++++++++---
 patches/0004-Use-crypto-backends.patch        | 193 +++++++++++++++++-
 4 files changed, 347 insertions(+), 52 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 008f478321b..11409940cb6 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -69,10 +69,10 @@ This section includes the following packages:
 | SHA-3-256 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
 | SHA-3-384 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
 | SHA-3-512 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
-| SHAKE-128              | ❌              | ❌                | ❌              |
-| SHAKE-256              | ❌              | ❌                | ❌              |
-| CSHAKE-128             | ❌              | ❌                | ❌              |
-| CSHAKE-256             | ❌              | ❌                | ❌              |
+| SHAKE-128              | ✔️              | ✔️ <sup>7</sup>   | ❌              |
+| SHAKE-256              | ✔️              | ✔️ <sup>7</sup>   | ❌              |
+| CSHAKE-128             | ✔️              | ❌                | ❌              |
+| CSHAKE-256             | ✔️              | ❌                | ❌              |
 | HMAC<sup>6</sup>       | ✔️              | ✔️                | ✔️              |
 
 <sup>1</sup>Available starting in the Microsoft build of Go 1.24.
@@ -87,6 +87,8 @@ This section includes the following packages:
 
 <sup>6</sup>Supports only hash algorithms that are supported as standalone hash functions.
 
+<sup>7</sup>Requires OpenSSL 3.3 or later.
+
 ## Symmetric encryption
 
 This section includes the following packages:
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 02291006c2b..0923093b1e9 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -46,7 +46,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../golang-fips/openssl/v2/cipher.go          |  652 +++++
  .../golang-fips/openssl/v2/const.go           |   90 +
- .../golang-fips/openssl/v2/cshake.go          |  219 ++
+ .../golang-fips/openssl/v2/cshake.go          |  231 ++
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
@@ -124,7 +124,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/providersymcrypt.go            |  338 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  365 +++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  401 +++
  .../golang-fips/openssl/v2/tls1prf.go         |  158 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
@@ -213,7 +213,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   21 +
- 205 files changed, 28899 insertions(+), 7 deletions(-)
+ 205 files changed, 28947 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2072,7 +2072,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f79455c970ecb2..9cc1ba35b713b5 100644
+index f79455c970ecb2..28266d4c27fdd0 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2081,17 +2081,17 @@ index f79455c970ecb2..9cc1ba35b713b5 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index e2cf9591bc56dc..de83c1a8cb54b2 100644
+index e2cf9591bc56dc..8fdadf30f50da2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf h1:CeJxZa0X5K7keIgQF79icWif8oiJZJmAwnuNXCYYeh4=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83 h1:u3WAHp425YzcHygZORNJa9dkyA959Gtti8bUgGYYuiA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc h1:bz/6zng2sakr1ETJsKnGoHooH6sBKbQNxk9aeH5tRt0=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
@@ -3293,10 +3293,10 @@ index 00000000000000..84b85024940f7e
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
 new file mode 100644
-index 00000000000000..d744345e0a1c64
+index 00000000000000..a7e923a86979fa
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
-@@ -0,0 +1,219 @@
+@@ -0,0 +1,231 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -3480,6 +3480,18 @@ index 00000000000000..d744345e0a1c64
 +	return s.alg.blockSize
 +}
 +
++func (s *SHAKE) MarshalBinary() ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
++
++func (s *SHAKE) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
++
++func (s *SHAKE) UnmarshalBinary(data []byte) error {
++	return errMarshallUnsupported{}
++}
++
 +type shakeAlgorithm struct {
 +	md        ossl.EVP_MD_PTR
 +	blockSize int
@@ -18299,10 +18311,10 @@ index 00000000000000..e933228919296d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..2c8c8e85523146
+index 00000000000000..f1cddf8b5103db
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,365 @@
+@@ -0,0 +1,401 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -18313,6 +18325,7 @@ index 00000000000000..2c8c8e85523146
 +	"errors"
 +	"hash"
 +	"runtime"
++	"sync"
 +	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
@@ -18668,6 +18681,41 @@ index 00000000000000..2c8c8e85523146
 +	}
 +	return newEvpFromParams(ossl.EVP_PKEY_RSA, int32(selection), params)
 +}
++
++// SupportsRSAPKCS1Encryption returns true if the RSA PKCS1 v1.5 padding is supported for encryption and decryption.
++var SupportsRSAPKCS1Encryption = sync.OnceValue(func() bool {
++	// Generate a temporary key to check for support.
++	// 2048 bits is a safe default that should be supported by all providers.
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_RSA, 2048, "")
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++
++	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
++		return false
++	}
++
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++		return false
++	}
++
++	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
++	// So we need to try to encrypt something to be sure.
++	in := []byte("test")
++	var outLen int
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++		return false
++	}
++
++	return true
++})
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
 index 00000000000000..5a0aa905f03e43
@@ -32516,11 +32564,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7932adddfaa1c5..f0dd3eafd8e753 100644
+index 7932adddfaa1c5..ca009c3e43044e 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,24 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251204120705-9f5b540d3bcf
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 754d39dad4e..8fe657a99f6 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -29,12 +29,12 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 393 +++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 410 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 395 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 416 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
- .../internal/backend/fips140/fips140.go       |  70 ++++
+ .../internal/backend/fips140/fips140.go       |  70 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
@@ -45,15 +45,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 349 ++++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 380 +++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 366 +++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 397 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2610 insertions(+), 21 deletions(-)
+ 44 files changed, 2682 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -945,10 +945,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..fdcc48ddb28c12
+index 00000000000000..26912810eeeaa6
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,393 @@
+@@ -0,0 +1,410 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -996,11 +996,20 @@ index 00000000000000..fdcc48ddb28c12
 +	return cng.SupportsHash(h)
 +}
 +
++func SupportsSHAKE(securityBits int) bool {
++	return cng.SupportsSHAKE(securityBits)
++}
++
++func SupportsCSHAKE(securityBits int) bool {
++	return cng.SupportsSHAKE(securityBits)
++}
++
 +func SupportsCurve(curve string) bool            { return true }
 +func SupportsRSAOAEPLabel(label []byte) bool     { return true }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
 +
 +type Hash = cng.Hash
++type SHAKE = cng.SHAKE
 +
 +func NewMD5() hash.Hash        { return cng.NewMD5() }
 +func NewSHA1() hash.Hash       { return cng.NewSHA1() }
@@ -1015,6 +1024,11 @@ index 00000000000000..fdcc48ddb28c12
 +func NewSHA3_384() *Hash       { return cng.NewSHA3_384() }
 +func NewSHA3_512() *Hash       { return cng.NewSHA3_512() }
 +
++func NewSHAKE128() *SHAKE             { return cng.NewSHAKE128() }
++func NewSHAKE256() *SHAKE             { return cng.NewSHAKE256() }
++func NewCSHAKE128(N, S []byte) *SHAKE { return cng.NewCSHAKE128(N, S) }
++func NewCSHAKE256(N, S []byte) *SHAKE { return cng.NewCSHAKE256(N, S) }
++
 +func MD5(p []byte) (sum [16]byte)         { return cng.MD5(p) }
 +func SHA1(p []byte) (sum [20]byte)        { return cng.SHA1(p) }
 +func SHA224(p []byte) (sum [28]byte)      { panic("cngcrypto: not available") }
@@ -1028,6 +1042,9 @@ index 00000000000000..fdcc48ddb28c12
 +func SumSHA3_384(p []byte) (sum [48]byte) { return cng.SumSHA3_384(p) }
 +func SumSHA3_512(p []byte) (sum [64]byte) { return cng.SumSHA3_512(p) }
 +
++func SumSHAKE128(data []byte, length int) (sum []byte) { return cng.SumSHAKE128(data, length) }
++func SumSHAKE256(data []byte, length int) (sum []byte) { return cng.SumSHAKE256(data, length) }
++
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
 +	return cng.NewHMAC(h, key)
 +}
@@ -1396,10 +1413,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..36002e9e4dbbd8
+index 00000000000000..4d6de2242f0a95
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,395 @@
+@@ -0,0 +1,416 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1417,6 +1434,7 @@ index 00000000000000..36002e9e4dbbd8
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"hash"
++	"io"
 +	_ "unsafe"
 +
 +	"github.com/microsoft/go-crypto-darwin/xcrypto"
@@ -1441,6 +1459,9 @@ index 00000000000000..36002e9e4dbbd8
 +	return xcrypto.SupportsHash(h)
 +}
 +
++func SupportsSHAKE(securityBits int) bool  { return false }
++func SupportsCSHAKE(securityBits int) bool { return false }
++
 +func SupportsCurve(curve string) bool {
 +	switch curve {
 +	case "P-256", "P-384", "P-521":
@@ -1465,6 +1486,15 @@ index 00000000000000..36002e9e4dbbd8
 +
 +type Hash = xcrypto.Hash
 +
++type SHAKE struct {
++	io.Reader
++	hash.Hash
++}
++
++func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++
 +func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
 +func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
 +func NewSHA224() hash.Hash { panic("cryptobackend: not available") }
@@ -1476,6 +1506,11 @@ index 00000000000000..36002e9e4dbbd8
 +func NewSHA3_384() *Hash   { return xcrypto.NewSHA3_384() }
 +func NewSHA3_512() *Hash   { return xcrypto.NewSHA3_512() }
 +
++func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
++func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
++func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++
 +func MD5(p []byte) (sum [16]byte)         { return xcrypto.MD5(p) }
 +func SHA1(p []byte) (sum [20]byte)        { return xcrypto.SHA1(p) }
 +func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
@@ -1489,6 +1524,9 @@ index 00000000000000..36002e9e4dbbd8
 +func SumSHA3_384(p []byte) (sum [48]byte) { return xcrypto.SumSHA3_384(p) }
 +func SumSHA3_512(p []byte) (sum [64]byte) { return xcrypto.SumSHA3_512(p) }
 +
++func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
 +	return xcrypto.NewHMAC(h, key)
 +}
@@ -2286,10 +2324,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..c729dab02ad1bd
+index 00000000000000..0b1d97211ef7c3
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,349 @@
+@@ -0,0 +1,366 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2303,6 +2341,7 @@ index 00000000000000..c729dab02ad1bd
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
 +	"hash"
++	"io"
 +)
 +
 +func init() {
@@ -2323,11 +2362,29 @@ index 00000000000000..c729dab02ad1bd
 +
 +func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
 +
++func SupportsSHAKE(securityBits int) bool  { panic("cryptobackend: not available") }
++func SupportsCSHAKE(securityBits int) bool { panic("cryptobackend: not available") }
++
 +func SupportsCurve(curve string) bool            { panic("cryptobackend: not available") }
 +func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
 +
-+type Hash struct{}
++type Hash struct {
++	hash.Cloner
++}
++
++func (d *Hash) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (d *Hash) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (d *Hash) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++
++type SHAKE struct {
++	io.Reader
++	hash.Hash
++}
++
++func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
 +
 +func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
 +func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
@@ -2342,15 +2399,10 @@ index 00000000000000..c729dab02ad1bd
 +func NewSHA3_384() *Hash       { panic("cryptobackend: not available") }
 +func NewSHA3_512() *Hash       { panic("cryptobackend: not available") }
 +
-+func (d *Hash) Write(p []byte) (n int, err error)     { panic("cryptobackend: not available") }
-+func (d *Hash) Sum(b []byte) []byte                   { panic("cryptobackend: not available") }
-+func (d *Hash) Reset()                                { panic("cryptobackend: not available") }
-+func (d *Hash) Size() int                             { panic("cryptobackend: not available") }
-+func (d *Hash) BlockSize() int                        { panic("cryptobackend: not available") }
-+func (d *Hash) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
-+func (d *Hash) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
-+func (d *Hash) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
-+func (d *Hash) Clone() (hash.Cloner, error)           { panic("cryptobackend: not available") }
++func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
++func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
++func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
 +
 +func MD5(p []byte) (sum [16]byte)         { panic("cryptobackend: not available") }
 +func SHA1(p []byte) (sum [20]byte)        { panic("cryptobackend: not available") }
@@ -2365,6 +2417,9 @@ index 00000000000000..c729dab02ad1bd
 +func SumSHA3_384(p []byte) (sum [48]byte) { panic("cryptobackend: not available") }
 +func SumSHA3_512(p []byte) (sum [64]byte) { panic("cryptobackend: not available") }
 +
++func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
 +
 +func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
@@ -2641,10 +2696,10 @@ index 00000000000000..c729dab02ad1bd
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..3e99c5961b8891
+index 00000000000000..d39ddbefd3db01
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,380 @@
+@@ -0,0 +1,397 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2694,11 +2749,20 @@ index 00000000000000..3e99c5961b8891
 +	return openssl.SupportsHash(h)
 +}
 +
++func SupportsSHAKE(securityBits int) bool {
++	return openssl.SupportsSHAKE(securityBits)
++}
++
++func SupportsCSHAKE(securityBits int) bool {
++	return openssl.SupportsCSHAKE(securityBits)
++}
++
 +func SupportsCurve(curve string) bool            { return true }
 +func SupportsRSAOAEPLabel(label []byte) bool     { return true }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
 +
 +type Hash = openssl.Hash
++type SHAKE = openssl.SHAKE
 +
 +func NewMD5() hash.Hash        { return openssl.NewMD5() }
 +func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
@@ -2713,6 +2777,11 @@ index 00000000000000..3e99c5961b8891
 +func NewSHA3_384() *Hash       { return openssl.NewSHA3_384() }
 +func NewSHA3_512() *Hash       { return openssl.NewSHA3_512() }
 +
++func NewSHAKE128() *SHAKE             { return openssl.NewSHAKE128() }
++func NewSHAKE256() *SHAKE             { return openssl.NewSHAKE256() }
++func NewCSHAKE128(N, S []byte) *SHAKE { return openssl.NewCSHAKE128(N, S) }
++func NewCSHAKE256(N, S []byte) *SHAKE { return openssl.NewCSHAKE256(N, S) }
++
 +func MD5(p []byte) (sum [16]byte)         { return openssl.MD5(p) }
 +func SHA1(p []byte) (sum [20]byte)        { return openssl.SHA1(p) }
 +func SHA224(p []byte) (sum [28]byte)      { return openssl.SHA224(p) }
@@ -2726,6 +2795,9 @@ index 00000000000000..3e99c5961b8891
 +func SumSHA3_384(p []byte) (sum [48]byte) { return openssl.SumSHA3_384(p) }
 +func SumSHA3_512(p []byte) (sum [64]byte) { return openssl.SumSHA3_512(p) }
 +
++func SumSHAKE128(data []byte, length int) (sum []byte) { return openssl.SumSHAKE128(data, length) }
++func SumSHAKE256(data []byte, length int) (sum []byte) { return openssl.SumSHAKE256(data, length) }
++
 +func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
 +
 +func NewAESCipher(key []byte) (cipher.Block, error)   { return openssl.NewAESCipher(key) }
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 3b2a87940fe..f40db38740b 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -71,8 +71,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  44 ++--
- src/crypto/sha3/sha3.go                       |  68 +++++-
- src/crypto/sha3/sha3_test.go                  |  11 +-
+ src/crypto/sha3/sha3.go                       | 124 +++++++++--
+ src/crypto/sha3/sha3_test.go                  |  18 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
@@ -99,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1388 insertions(+), 174 deletions(-)
+ 95 files changed, 1441 insertions(+), 184 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2815,7 +2815,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index 48c67e9fe11005..937b42af2b61a1 100644
+index 48c67e9fe11005..3fe46309e0fda8 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -2866,7 +2866,27 @@ index 48c67e9fe11005..937b42af2b61a1 100644
  	var out [64]byte
  	h := sha3.New512()
  	h.Write(data)
-@@ -99,7 +112,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
+@@ -59,6 +72,9 @@ func Sum512(data []byte) [64]byte {
+ // SumSHAKE128 applies the SHAKE128 extendable output function to data and
+ // returns an output of the given length in bytes.
+ func SumSHAKE128(data []byte, length int) []byte {
++	if boring.Enabled && boring.SupportsSHAKE(128) {
++		return boring.SumSHAKE128(data, length)
++	}
+ 	// Outline the allocation for up to 256 bits of output to the caller's stack.
+ 	out := make([]byte, 32)
+ 	return sumSHAKE128(out, data, length)
+@@ -79,6 +95,9 @@ func sumSHAKE128(out, data []byte, length int) []byte {
+ // SumSHAKE256 applies the SHAKE256 extendable output function to data and
+ // returns an output of the given length in bytes.
+ func SumSHAKE256(data []byte, length int) []byte {
++	if boring.Enabled && boring.SupportsSHAKE(256) {
++		return boring.SumSHAKE256(data, length)
++	}
+ 	// Outline the allocation for up to 512 bits of output to the caller's stack.
+ 	out := make([]byte, 64)
+ 	return sumSHAKE256(out, data, length)
+@@ -99,7 +118,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
  // SHA3 is an instance of a SHA-3 hash. It implements [hash.Hash].
  // The zero value is a usable SHA3-256 hash.
  type SHA3 struct {
@@ -2877,7 +2897,7 @@ index 48c67e9fe11005..937b42af2b61a1 100644
  }
  
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
-@@ -109,26 +124,38 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
+@@ -109,26 +130,38 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
  
  // New224 creates a new SHA3-224 hash.
  func New224() *SHA3 {
@@ -2921,7 +2941,7 @@ index 48c67e9fe11005..937b42af2b61a1 100644
  		*s = *New256()
  	}
  }
-@@ -136,12 +163,18 @@ func (s *SHA3) init() {
+@@ -136,53 +169,81 @@ func (s *SHA3) init() {
  // Write absorbs more data into the hash's state.
  func (s *SHA3) Write(p []byte) (n int, err error) {
  	s.init()
@@ -2940,10 +2960,10 @@ index 48c67e9fe11005..937b42af2b61a1 100644
  	return s.s.Sum(b)
  }
  
-@@ -149,40 +182,63 @@ func (s *SHA3) Sum(b []byte) []byte {
+ // Reset resets the hash to its initial state.
  func (s *SHA3) Reset() {
  	s.init()
- 	s.s.Reset()
+-	s.s.Reset()
 +	if boring.Enabled && s.supported {
 +		s.boringS.Reset()
 +	} else {
@@ -3004,8 +3024,133 @@ index 48c67e9fe11005..937b42af2b61a1 100644
  	r := *d
  	return &r, nil
  }
+@@ -190,23 +251,30 @@ func (d *SHA3) Clone() (hash.Cloner, error) {
+ // SHAKE is an instance of a SHAKE extendable output function.
+ // The zero value is a usable SHAKE256 hash.
+ type SHAKE struct {
+-	s sha3.SHAKE
++	s       sha3.SHAKE
++	boringS *boring.SHAKE
+ }
+ 
+ func (s *SHAKE) init() {
+-	if s.s.Size() == 0 {
++	if s.s.Size() == 0 && s.boringS == nil {
+ 		*s = *NewSHAKE256()
+ 	}
+ }
+ 
+ // NewSHAKE128 creates a new SHAKE128 XOF.
+ func NewSHAKE128() *SHAKE {
+-	return &SHAKE{*sha3.NewShake128()}
++	if boring.Enabled && boring.SupportsSHAKE(128) {
++		return &SHAKE{boringS: boring.NewSHAKE128()}
++	}
++	return &SHAKE{s: *sha3.NewShake128()}
+ }
+ 
+ // NewSHAKE256 creates a new SHAKE256 XOF.
+ func NewSHAKE256() *SHAKE {
+-	return &SHAKE{*sha3.NewShake256()}
++	if boring.Enabled && boring.SupportsSHAKE(256) {
++		return &SHAKE{boringS: boring.NewSHAKE256()}
++	}
++	return &SHAKE{s: *sha3.NewShake256()}
+ }
+ 
+ // NewCSHAKE128 creates a new cSHAKE128 XOF.
+@@ -215,7 +283,10 @@ func NewSHAKE256() *SHAKE {
+ // cSHAKE is desired. S is a customization byte string used for domain
+ // separation. When N and S are both empty, this is equivalent to NewSHAKE128.
+ func NewCSHAKE128(N, S []byte) *SHAKE {
+-	return &SHAKE{*sha3.NewCShake128(N, S)}
++	if boring.Enabled && boring.SupportsCSHAKE(128) {
++		return &SHAKE{boringS: boring.NewCSHAKE128(N, S)}
++	}
++	return &SHAKE{s: *sha3.NewCShake128(N, S)}
+ }
+ 
+ // NewCSHAKE256 creates a new cSHAKE256 XOF.
+@@ -224,7 +295,10 @@ func NewCSHAKE128(N, S []byte) *SHAKE {
+ // cSHAKE is desired. S is a customization byte string used for domain
+ // separation. When N and S are both empty, this is equivalent to NewSHAKE256.
+ func NewCSHAKE256(N, S []byte) *SHAKE {
+-	return &SHAKE{*sha3.NewCShake256(N, S)}
++	if boring.Enabled && boring.SupportsCSHAKE(256) {
++		return &SHAKE{boringS: boring.NewCSHAKE256(N, S)}
++	}
++	return &SHAKE{s: *sha3.NewCShake256(N, S)}
+ }
+ 
+ // Write absorbs more data into the XOF's state.
+@@ -232,6 +306,9 @@ func NewCSHAKE256(N, S []byte) *SHAKE {
+ // It panics if any output has already been read.
+ func (s *SHAKE) Write(p []byte) (n int, err error) {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.Write(p)
++	}
+ 	return s.s.Write(p)
+ }
+ 
+@@ -240,35 +317,54 @@ func (s *SHAKE) Write(p []byte) (n int, err error) {
+ // Any call to Write after a call to Read will panic.
+ func (s *SHAKE) Read(p []byte) (n int, err error) {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.Read(p)
++	}
+ 	return s.s.Read(p)
+ }
+ 
+ // Reset resets the XOF to its initial state.
+ func (s *SHAKE) Reset() {
+ 	s.init()
+-	s.s.Reset()
++	if boring.Enabled && s.boringS != nil {
++		s.boringS.Reset()
++	} else {
++		s.s.Reset()
++	}
+ }
+ 
+ // BlockSize returns the rate of the XOF.
+ func (s *SHAKE) BlockSize() int {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.BlockSize()
++	}
+ 	return s.s.BlockSize()
+ }
+ 
+ // MarshalBinary implements [encoding.BinaryMarshaler].
+ func (s *SHAKE) MarshalBinary() ([]byte, error) {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.MarshalBinary()
++	}
+ 	return s.s.MarshalBinary()
+ }
+ 
+ // AppendBinary implements [encoding.BinaryAppender].
+ func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.AppendBinary(p)
++	}
+ 	return s.s.AppendBinary(p)
+ }
+ 
+ // UnmarshalBinary implements [encoding.BinaryUnmarshaler].
+ func (s *SHAKE) UnmarshalBinary(data []byte) error {
+ 	s.init()
++	if boring.Enabled && s.boringS != nil {
++		return s.boringS.UnmarshalBinary(data)
++	}
+ 	return s.s.UnmarshalBinary(data)
+ }
 diff --git a/src/crypto/sha3/sha3_test.go b/src/crypto/sha3/sha3_test.go
-index 3973e0afd1b935..ca66d008ef649f 100644
+index 3973e0afd1b935..4a92e2652a50c4 100644
 --- a/src/crypto/sha3/sha3_test.go
 +++ b/src/crypto/sha3/sha3_test.go
 @@ -6,9 +6,11 @@ package sha3_test
@@ -3036,6 +3181,24 @@ index 3973e0afd1b935..ca66d008ef649f 100644
  			out = h.Sum(out)
  			sinkSHA3 ^= out[0]
 -		}); allocs > 0 {
++		}); allocs > expectedAllocations {
+ 			t.Errorf("expected zero allocations, got %0.1f", allocs)
+ 		}
+ 	})
+@@ -245,7 +251,7 @@ func TestAllocations(t *testing.T) {
+ 			out := make([]byte, 32)
+ 			h.Read(out)
+ 			sinkSHA3 ^= out[0]
+-		}); allocs > 0 {
++		}); allocs > expectedAllocations {
+ 			t.Errorf("expected zero allocations, got %0.1f", allocs)
+ 		}
+ 	})
+@@ -263,7 +269,7 @@ func TestAllocations(t *testing.T) {
+ 			b := []byte("ABC")
+ 			out := SumSHAKE128(b, 10)
+ 			sinkSHA3 ^= out[0]
+-		}); allocs > 0 {
 +		}); allocs > expectedAllocations {
  			t.Errorf("expected zero allocations, got %0.1f", allocs)
  		}
@@ -3046,6 +3209,16 @@ index 3973e0afd1b935..ca66d008ef649f 100644
  	if err != nil {
 +		if errors.Is(err, errors.ErrUnsupported) {
 +			t.Skip("MarshalBinary not supported")
++		}
+ 		t.Errorf("MarshalBinary: %v", err)
+ 	}
+ 	h.Write(bytes.Repeat([]byte{0}, 200))
+@@ -438,6 +447,9 @@ func testMarshalUnmarshalSHAKE(t *testing.T, h *SHAKE) {
+ 	h.Write(buf[:n])
+ 	b, err := h.MarshalBinary()
+ 	if err != nil {
++		if errors.Is(err, errors.ErrUnsupported) {
++			t.Skip("MarshalBinary not supported")
 +		}
  		t.Errorf("MarshalBinary: %v", err)
  	}

From a70bb8b9db344207279a03d14c096e0e457f2559 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 5 Dec 2025 16:07:25 +0000
Subject: [PATCH 604/887] Update submodule to latest master (f84f8d86):
 cmd/compile: fix mis-infer bounds in slice len/cap calculations

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f22d37d5748..f84f8d86beb 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f22d37d574836ed4f1b42e283dda55dbd4d80aca
+Subproject commit f84f8d86beb08631217e77d725a4b6528ed91dc2

From 66f1c125777928eafe68ed3bf636b4134973635f Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 5 Dec 2025 17:17:19 +0100
Subject: [PATCH 605/887] Support X25519 (#1986)

* support X25519

* fix openssl
---
 eng/doc/CrossPlatformCryptography.md          |  37 ++--
 ...03-Implement-crypto-internal-backend.patch |  19 +-
 patches/0004-Use-crypto-backends.patch        | 178 +++++++++++++++++-
 3 files changed, 202 insertions(+), 32 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 11409940cb6..d364cc32ab5 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -207,13 +207,18 @@ This section includes the following packages:
 
 Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
 
-| Elliptic Curve         | Windows | Linux | macOS |
-| ---------------------- | ------- | ----- | ----- |
-| NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
-| NIST P-256 (secp256r1) | ✔️      | ✔️    | ✔️    |
-| NIST P-384 (secp384r1) | ✔️      | ✔️    | ✔️    |
-| NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
-| X25519 (curve25519)    | ❌      | ❌    | ❌    |
+X25519 is available starting from the Microsoft build of Go 1.26.
+
+| Elliptic Curve                  | Windows | Linux           | macOS |
+| ------------------------------- | ------- | --------------- | ----- |
+| NIST P-224 (secp224r1)          | ✔️      | ✔️             | ❌    |
+| NIST P-256 (secp256r1)          | ✔️      | ✔️             | ✔️    |
+| NIST P-384 (secp384r1)          | ✔️      | ✔️             | ✔️    |
+| NIST P-521 (secp521r1)          | ✔️      | ✔️             | ✔️    |
+| X25519 (curve25519)<sup>1</sup> | ✔️      | ✔️<sup>2</sup> | ✔️    |
+
+<sup>1</sup>Available starting in the Microsoft build of Go 1.26.
+<sup>2</sup>Requires OpenSSL 1.1.1 or later.
 
 ### Ed25519
 
@@ -266,9 +271,7 @@ ML-KEM is available starting from the Microsoft build of Go 1.26.
 | 1024       | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
 
 <sup>1</sup>Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.
-
 <sup>2</sup>Requires OpenSSL 3.5.0 or later.
-
 <sup>3</sup>Requires macOS 26 (Tahoe) or later.
 
 ## TLS
@@ -337,13 +340,15 @@ On Windows, it is possible to restrict and reorder the cipher suites following t
 
 Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).
 
-| Name           | Windows | Linux | macOS |
-| -------------- | ------- | ----- | ----- |
-| CurveP256      | ✔️      | ✔️    | ✔️    |
-| CurveP384      | ✔️      | ✔️    | ✔️    |
-| CurveP521      | ✔️      | ✔️    | ✔️    |
-| X25519         | ❌      | ❌    | ❌    |
-| X25519MLKEM768 | ❌      | ❌    | ❌    |
+| Name                       | Windows | Linux | macOS |
+| -------------------------- | ------- | ------| ----- |
+| CurveP256                  | ✔️      | ✔️   | ✔️    |
+| CurveP384                  | ✔️      | ✔️   | ✔️    |
+| CurveP521                  | ✔️      | ✔️   | ✔️    |
+| X25519<sup>1</sup>         | ✔️      | ✔️   | ✔️    |
+| X25519MLKEM768<sup>1</sup> | ✔️      | ✔️   | ✔️    |
+
+<sup>1</sup>See the [X25519](#ecdh) and [ML-KEM](#ml-kem) sections for requirements.
 
 ### Signature Schemes
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 8fe657a99f6..845ef68ed72 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -46,14 +46,14 @@ desired goexperiments and build tags.
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 366 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 397 +++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 400 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2682 insertions(+), 21 deletions(-)
+ 44 files changed, 2685 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -246,7 +246,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 9c9e1b85f0cd76..54274e7fad8de3 100644
+index f8d19ac34c562f..2a27d97990fa57 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -1413,7 +1413,7 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..4d6de2242f0a95
+index 00000000000000..3e5c4c91571abc
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
 @@ -0,0 +1,416 @@
@@ -1464,7 +1464,7 @@ index 00000000000000..4d6de2242f0a95
 +
 +func SupportsCurve(curve string) bool {
 +	switch curve {
-+	case "P-256", "P-384", "P-521":
++	case "P-256", "P-384", "P-521", "X25519":
 +		return true
 +	}
 +	return false
@@ -2696,10 +2696,10 @@ index 00000000000000..0b1d97211ef7c3
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..d39ddbefd3db01
+index 00000000000000..bd8f774a9c24ba
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,397 @@
+@@ -0,0 +1,400 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2757,7 +2757,10 @@ index 00000000000000..d39ddbefd3db01
 +	return openssl.SupportsCSHAKE(securityBits)
 +}
 +
-+func SupportsCurve(curve string) bool            { return true }
++func SupportsCurve(curve string) bool {
++	return openssl.SupportsCurve(curve)
++}
++
 +func SupportsRSAOAEPLabel(label []byte) bool     { return true }
 +func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
 +
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index f40db38740b..3bd3c8d3298 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -23,8 +23,9 @@ Subject: [PATCH] Use crypto backends
  src/crypto/dsa/dsa.go                         |  88 ++++++++
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
- src/crypto/ecdh/ecdh_test.go                  |   4 +
- src/crypto/ecdh/nist.go                       |   4 +-
+ src/crypto/ecdh/ecdh_test.go                  |  17 +-
+ src/crypto/ecdh/nist.go                       |  32 +--
+ src/crypto/ecdh/x25519.go                     |  49 +++++
  src/crypto/ecdsa/badlinkname.go               |  19 ++
  src/crypto/ecdsa/boring.go                    |   6 +-
  src/crypto/ecdsa/ecdsa.go                     |  10 +-
@@ -99,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1441 insertions(+), 184 deletions(-)
+ 96 files changed, 1516 insertions(+), 199 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -125,7 +126,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1314403a56cad0..17387733a3e1a0 100644
+index 2a27d97990fa57..4a1d3b91d701bb 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -154,7 +155,7 @@ index 1314403a56cad0..17387733a3e1a0 100644
  			pkg:     "runtime/secret/...",
  		})
  	}
-@@ -1382,12 +1388,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1377,12 +1383,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -805,7 +806,7 @@ index 3f85a2833697a9..a5717e22db8d78 100644
  	"crypto/subtle"
  	"errors"
 diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
-index 8a3eb87061ad8c..a09a9fc8148039 100644
+index 8a3eb87061ad8c..2215e4f42eeea1 100644
 --- a/src/crypto/ecdh/ecdh_test.go
 +++ b/src/crypto/ecdh/ecdh_test.go
 @@ -9,6 +9,7 @@ import (
@@ -816,7 +817,26 @@ index 8a3eb87061ad8c..a09a9fc8148039 100644
  	"crypto/rand"
  	"crypto/sha256"
  	"encoding/hex"
-@@ -280,6 +281,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
+@@ -208,13 +209,17 @@ func TestX25519Failure(t *testing.T) {
+ }
+ 
+ func testX25519Failure(t *testing.T, private, public []byte) {
++	if boring.Enabled && !boring.SupportsCurve("X25519") {
++		t.Skip("backend does not support X25519")
++	}
+ 	priv, err := ecdh.X25519().NewPrivateKey(private)
+ 	if err != nil {
+ 		t.Fatal(err)
+ 	}
+ 	pub, err := ecdh.X25519().NewPublicKey(public)
+ 	if err != nil {
+-		t.Fatal(err)
++		// Some backends may reject the public key at import time, that's fine.
++		return
+ 	}
+ 	secret, err := priv.ECDH(pub)
+ 	if err == nil {
+@@ -280,6 +285,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
  }
  
  func TestNewPrivateKey(t *testing.T) {
@@ -826,8 +846,22 @@ index 8a3eb87061ad8c..a09a9fc8148039 100644
  	testAllCurves(t, func(t *testing.T, curve ecdh.Curve) {
  		for _, input := range invalidPrivateKeys[curve] {
  			k, err := curve.NewPrivateKey(hexDecode(t, input))
+@@ -365,7 +373,12 @@ func testAllCurves(t *testing.T, f func(t *testing.T, curve ecdh.Curve)) {
+ 	t.Run("P256", func(t *testing.T) { f(t, ecdh.P256()) })
+ 	t.Run("P384", func(t *testing.T) { f(t, ecdh.P384()) })
+ 	t.Run("P521", func(t *testing.T) { f(t, ecdh.P521()) })
+-	t.Run("X25519", func(t *testing.T) { f(t, ecdh.X25519()) })
++	t.Run("X25519", func(t *testing.T) {
++		if boring.Enabled && !boring.SupportsCurve("X25519") {
++			t.Skip("backend does not support X25519")
++		}
++		f(t, ecdh.X25519())
++	})
+ }
+ 
+ func BenchmarkECDH(b *testing.B) {
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index de7348d9232349..3521c3bbd03959 100644
+index de7348d9232349..fb46bf4822fb6a 100644
 --- a/src/crypto/ecdh/nist.go
 +++ b/src/crypto/ecdh/nist.go
 @@ -6,7 +6,7 @@ package ecdh
@@ -848,6 +882,134 @@ index de7348d9232349..3521c3bbd03959 100644
  		key, bytes, err := boring.GenerateKeyECDH(c.name)
  		if err != nil {
  			return nil, err
+@@ -123,24 +123,26 @@ func (c *nistCurve) NewPublicKey(key []byte) (*PublicKey, error) {
+ 	if len(key) == 0 || key[0] != 4 {
+ 		return nil, errors.New("crypto/ecdh: invalid public key")
+ 	}
+-	k := &PublicKey{
+-		curve:     c,
+-		publicKey: bytes.Clone(key),
+-	}
+ 	if boring.Enabled {
+-		bk, err := boring.NewPublicKeyECDH(c.name, k.publicKey)
++		bk, err := boring.NewPublicKeyECDH(c.name, key)
+ 		if err != nil {
+ 			return nil, errors.New("crypto/ecdh: invalid public key")
+ 		}
+-		k.boring = bk
+-	} else {
+-		fk, err := c.newPublicKey(key)
+-		if err != nil {
+-			return nil, err
+-		}
+-		k.fips = fk
++		return &PublicKey{
++			curve:     c,
++			publicKey: bk.Bytes(),
++			boring:    bk,
++		}, nil
+ 	}
+-	return k, nil
++	fk, err := c.newPublicKey(key)
++	if err != nil {
++		return nil, err
++	}
++	return &PublicKey{
++		curve:     c,
++		publicKey: bytes.Clone(key),
++		fips:      fk,
++	}, nil
+ }
+ 
+ func (c *nistCurve) ecdh(local *PrivateKey, remote *PublicKey) ([]byte, error) {
+diff --git a/src/crypto/ecdh/x25519.go b/src/crypto/ecdh/x25519.go
+index 21a921aa12d44d..be8b1441c62844 100644
+--- a/src/crypto/ecdh/x25519.go
++++ b/src/crypto/ecdh/x25519.go
+@@ -6,6 +6,7 @@ package ecdh
+ 
+ import (
+ 	"bytes"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/fips140/edwards25519/field"
+ 	"crypto/internal/fips140only"
+ 	"crypto/internal/rand"
+@@ -38,6 +39,23 @@ func (c *x25519Curve) GenerateKey(r io.Reader) (*PrivateKey, error) {
+ 	if fips140only.Enforced() {
+ 		return nil, errors.New("crypto/ecdh: use of X25519 is not allowed in FIPS 140-only mode")
+ 	}
++	if boring.Enabled && boring.SupportsCurve("X25519") && rand.IsDefaultReader(r) {
++		key, bytes, err := boring.GenerateKeyECDH(c.String())
++		if err != nil {
++			return nil, err
++		}
++		pub, err := key.PublicKey()
++		if err != nil {
++			return nil, err
++		}
++		k := &PrivateKey{
++			curve:      c,
++			privateKey: bytes,
++			publicKey:  &PublicKey{curve: c, publicKey: pub.Bytes(), boring: pub},
++			boring:     key,
++		}
++		return k, nil
++	}
+ 	r = rand.CustomReader(r)
+ 	key := make([]byte, x25519PrivateKeySize)
+ 	if _, err := io.ReadFull(r, key); err != nil {
+@@ -53,6 +71,23 @@ func (c *x25519Curve) NewPrivateKey(key []byte) (*PrivateKey, error) {
+ 	if len(key) != x25519PrivateKeySize {
+ 		return nil, errors.New("crypto/ecdh: invalid private key size")
+ 	}
++	if boring.Enabled && boring.SupportsCurve("X25519") {
++		bk, err := boring.NewPrivateKeyECDH(c.String(), key)
++		if err != nil {
++			return nil, errors.New("crypto/ecdh: invalid private key")
++		}
++		pub, err := bk.PublicKey()
++		if err != nil {
++			return nil, errors.New("crypto/ecdh: invalid private key")
++		}
++		k := &PrivateKey{
++			curve:      c,
++			privateKey: bytes.Clone(key),
++			publicKey:  &PublicKey{curve: c, publicKey: pub.Bytes(), boring: pub},
++			boring:     bk,
++		}
++		return k, nil
++	}
+ 	publicKey := make([]byte, x25519PublicKeySize)
+ 	x25519Basepoint := [32]byte{9}
+ 	x25519ScalarMult(publicKey, key, x25519Basepoint[:])
+@@ -73,6 +108,17 @@ func (c *x25519Curve) NewPublicKey(key []byte) (*PublicKey, error) {
+ 	if len(key) != x25519PublicKeySize {
+ 		return nil, errors.New("crypto/ecdh: invalid public key")
+ 	}
++	if boring.Enabled && boring.SupportsCurve("X25519") {
++		bk, err := boring.NewPublicKeyECDH(c.String(), key)
++		if err != nil {
++			return nil, errors.New("crypto/ecdh: invalid public key")
++		}
++		return &PublicKey{
++			curve:     c,
++			publicKey: bk.Bytes(),
++			boring:    bk,
++		}, nil
++	}
+ 	return &PublicKey{
+ 		curve:     c,
+ 		publicKey: bytes.Clone(key),
+@@ -80,6 +126,9 @@ func (c *x25519Curve) NewPublicKey(key []byte) (*PublicKey, error) {
+ }
+ 
+ func (c *x25519Curve) ecdh(local *PrivateKey, remote *PublicKey) ([]byte, error) {
++	if boring.Enabled && boring.SupportsCurve("X25519") {
++		return boring.ECDH(local.boring, remote.boring)
++	}
+ 	out := make([]byte, x25519SharedSecretSize)
+ 	x25519ScalarMult(out, local.privateKey, remote.publicKey)
+ 	if isZero(out) {
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
 index 00000000000000..168efdb820c85b

From 49f7122fb7a3527fcd2df35d5163ffeff238738a Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 5 Dec 2025 13:13:35 -0800
Subject: [PATCH 606/887] CrossPlatformCryptography.md: put footnote
 explanations on new lines (#1987)

---
 eng/doc/CrossPlatformCryptography.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index d364cc32ab5..6c640c14fe5 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -218,6 +218,7 @@ X25519 is available starting from the Microsoft build of Go 1.26.
 | X25519 (curve25519)<sup>1</sup> | ✔️      | ✔️<sup>2</sup> | ✔️    |
 
 <sup>1</sup>Available starting in the Microsoft build of Go 1.26.
+
 <sup>2</sup>Requires OpenSSL 1.1.1 or later.
 
 ### Ed25519
@@ -271,7 +272,9 @@ ML-KEM is available starting from the Microsoft build of Go 1.26.
 | 1024       | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
 
 <sup>1</sup>Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.
+
 <sup>2</sup>Requires OpenSSL 3.5.0 or later.
+
 <sup>3</sup>Requires macOS 26 (Tahoe) or later.
 
 ## TLS

From 945cbb58cfc4c5d9d0be5f44766b5212c28b22e2 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 8 Dec 2025 08:59:37 +0000
Subject: [PATCH 607/887] rebase patches

---
 patches/0004-Use-crypto-backends.patch | 208 ++++++-------------------
 1 file changed, 46 insertions(+), 162 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index f40db38740b..7b31cad945c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -24,13 +24,13 @@ Subject: [PATCH] Use crypto backends
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
  src/crypto/ecdh/ecdh_test.go                  |   4 +
- src/crypto/ecdh/nist.go                       |   4 +-
+ src/crypto/ecdh/nist.go                       |   2 +-
  src/crypto/ecdsa/badlinkname.go               |  19 ++
  src/crypto/ecdsa/boring.go                    |   6 +-
  src/crypto/ecdsa/ecdsa.go                     |  10 +-
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
- src/crypto/ed25519/ed25519.go                 |  73 ++++++-
+ src/crypto/ed25519/ed25519.go                 |  70 +++++++
  src/crypto/ed25519/ed25519_test.go            |  13 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/enforcement_test.go        |   4 +
@@ -46,7 +46,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
- src/crypto/internal/rand/rand.go              |  12 +-
+ src/crypto/internal/rand/rand.go              |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
  src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
@@ -54,18 +54,18 @@ Subject: [PATCH] Use crypto backends
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
- src/crypto/rand/rand.go                       |  21 +-
+ src/crypto/rand/rand.go                       |   4 +-
  src/crypto/rand/rand_test.go                  |   9 +-
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  12 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/darwin.go                      |  71 +++++++
- src/crypto/rsa/fips.go                        |  33 +--
+ src/crypto/rsa/fips.go                        |  22 +-
  src/crypto/rsa/notboring.go                   |   4 +-
- src/crypto/rsa/pkcs1v15.go                    |   8 +-
+ src/crypto/rsa/pkcs1v15.go                    |   6 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  13 +-
- src/crypto/rsa/rsa.go                         |  15 +-
+ src/crypto/rsa/rsa.go                         |  13 +-
  src/crypto/rsa/rsa_test.go                    |  12 +-
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
@@ -99,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1441 insertions(+), 184 deletions(-)
+ 95 files changed, 1416 insertions(+), 162 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -125,7 +125,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 1314403a56cad0..17387733a3e1a0 100644
+index 2a27d97990fa57..4a1d3b91d701bb 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -154,7 +154,7 @@ index 1314403a56cad0..17387733a3e1a0 100644
  			pkg:     "runtime/secret/...",
  		})
  	}
-@@ -1382,12 +1388,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1377,12 +1383,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -827,7 +827,7 @@ index 8a3eb87061ad8c..a09a9fc8148039 100644
  		for _, input := range invalidPrivateKeys[curve] {
  			k, err := curve.NewPrivateKey(hexDecode(t, input))
 diff --git a/src/crypto/ecdh/nist.go b/src/crypto/ecdh/nist.go
-index de7348d9232349..3521c3bbd03959 100644
+index 13865ea7012989..3521c3bbd03959 100644
 --- a/src/crypto/ecdh/nist.go
 +++ b/src/crypto/ecdh/nist.go
 @@ -6,7 +6,7 @@ package ecdh
@@ -839,15 +839,6 @@ index de7348d9232349..3521c3bbd03959 100644
  	"crypto/internal/fips140/ecdh"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
-@@ -27,7 +27,7 @@ func (c *nistCurve) String() string {
- }
- 
- func (c *nistCurve) GenerateKey(r io.Reader) (*PrivateKey, error) {
--	if boring.Enabled && r == boring.RandReader {
-+	if boring.Enabled && rand.IsDefaultReader(r) {
- 		key, bytes, err := boring.GenerateKeyECDH(c.name)
- 		if err != nil {
- 			return nil, err
 diff --git a/src/crypto/ecdsa/badlinkname.go b/src/crypto/ecdsa/badlinkname.go
 new file mode 100644
 index 00000000000000..168efdb820c85b
@@ -895,7 +886,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index aee15b92838543..1eb2604505e229 100644
+index b336f32eb69ef5..1eb2604505e229 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -913,7 +904,7 @@ index aee15b92838543..1eb2604505e229 100644
  // ignored unless GODEBUG=cryptocustomrand=1 is set. This setting will be removed
  // in a future Go release. Instead, use [testing/cryptotest.SetGlobalRandom].
  func GenerateKey(c elliptic.Curve, r io.Reader) (*PrivateKey, error) {
--	if boring.Enabled && r == boring.RandReader {
+-	if boring.Enabled && rand.IsDefaultReader(r) {
 +	if boring.Enabled && rand.IsDefaultReader(r) && boring.SupportsCurve(c.Params().Name) {
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
@@ -922,7 +913,7 @@ index aee15b92838543..1eb2604505e229 100644
  // is set. This setting will be removed in a future Go release. Instead, use
  // [testing/cryptotest.SetGlobalRandom].
  func SignASN1(r io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
--	if boring.Enabled && r == boring.RandReader {
+-	if boring.Enabled && rand.IsDefaultReader(r) {
 +	if boring.Enabled && rand.IsDefaultReader(r) && boring.SupportsCurve(priv.Curve.Params().Name) {
  		b, err := boringPrivateKey(priv)
  		if err != nil {
@@ -1032,19 +1023,18 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index f09dabe23e875d..00752fce1bae07 100644
+index a0263638ef19fe..00752fce1bae07 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
-@@ -17,7 +17,7 @@ package ed25519
+@@ -17,6 +17,7 @@ package ed25519
  
  import (
  	"crypto"
--	"crypto/internal/fips140/drbg"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/ed25519"
  	"crypto/internal/fips140cache"
  	"crypto/internal/fips140only"
-@@ -28,6 +28,7 @@ import (
+@@ -27,6 +28,7 @@ import (
  	"internal/godebug"
  	"io"
  	"strconv"
@@ -1052,15 +1042,7 @@ index f09dabe23e875d..00752fce1bae07 100644
  )
  
  const (
-@@ -153,13 +154,26 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
- 	if random == nil {
- 		if cryptocustomrand.Value() == "1" {
- 			random = cryptorand.Reader
--			if _, ok := random.(drbg.DefaultReader); !ok {
-+			if !rand.IsDefaultReader(random) {
- 				cryptocustomrand.IncNonDefault()
- 			}
- 		} else {
+@@ -159,6 +161,19 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
  			random = rand.Reader
  		}
  	}
@@ -1080,7 +1062,7 @@ index f09dabe23e875d..00752fce1bae07 100644
  
  	seed := make([]byte, SeedSize)
  	if _, err := io.ReadFull(random, seed); err != nil {
-@@ -176,6 +190,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+@@ -175,6 +190,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1098,7 +1080,7 @@ index f09dabe23e875d..00752fce1bae07 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -194,6 +219,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -193,6 +219,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1116,7 +1098,7 @@ index f09dabe23e875d..00752fce1bae07 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -223,6 +259,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -222,6 +259,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1149,7 +1131,7 @@ index f09dabe23e875d..00752fce1bae07 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -251,6 +313,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -250,6 +313,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
@@ -1504,7 +1486,7 @@ index 52fc9d34886003..9afaf522df475c 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/internal/rand/rand.go b/src/crypto/internal/rand/rand.go
-index 3a780952e705e5..b3113a3ee2e1fa 100644
+index 29648b9f386ed7..b3113a3ee2e1fa 100644
 --- a/src/crypto/internal/rand/rand.go
 +++ b/src/crypto/internal/rand/rand.go
 @@ -5,7 +5,7 @@
@@ -1516,27 +1498,6 @@ index 3a780952e705e5..b3113a3ee2e1fa 100644
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/randutil"
  	"internal/godebug"
-@@ -55,7 +55,7 @@ var cryptocustomrand = godebug.New("cryptocustomrand")
- // If returning a non-default Reader, it calls [randutil.MaybeReadByte] on it.
- func CustomReader(r io.Reader) io.Reader {
- 	if cryptocustomrand.Value() == "1" {
--		if _, ok := r.(drbg.DefaultReader); !ok {
-+		if !IsDefaultReader(r) {
- 			randutil.MaybeReadByte(r)
- 			cryptocustomrand.IncNonDefault()
- 		}
-@@ -63,3 +63,11 @@ func CustomReader(r io.Reader) io.Reader {
- 	}
- 	return Reader
- }
-+
-+// IsDefaultReader reports whether r is the default [crypto/rand.Reader].
-+//
-+// If true, the Read method of r can be assumed to call [drbg.Read].
-+func IsDefaultReader(r io.Reader) bool {
-+	_, ok := r.(drbg.DefaultReader)
-+	return ok
-+}
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
 index f1287887ff5e25..b2e26308349566 100644
 --- a/src/crypto/md5/md5.go
@@ -2004,7 +1965,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 004e6b6fedc7fc..e2279dbb2881b9 100644
+index 018fe013cef600..e2279dbb2881b9 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -2016,39 +1977,15 @@ index 004e6b6fedc7fc..e2279dbb2881b9 100644
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/rand"
  	"io"
-@@ -31,15 +31,7 @@ import (
- //
- // In FIPS 140-3 mode, the output passes through an SP 800-90A Rev. 1
- // Deterministric Random Bit Generator (DRBG).
--var Reader io.Reader
--
--func init() {
--	if boring.Enabled {
--		Reader = boring.RandReader
--		return
--	}
--	Reader = rand.Reader
--}
-+var Reader io.Reader = rand.Reader
- 
- // fatal is [runtime.fatal], pushed via linkname.
- //
-@@ -57,9 +49,12 @@ func Read(b []byte) (n int, err error) {
- 	// through a potentially overridden Reader, so we special-case the default
- 	// case which we can keep non-escaping, and in the general case we read into
+@@ -51,7 +51,7 @@ func Read(b []byte) (n int, err error) {
  	// a heap buffer and copy from it.
--	if _, ok := Reader.(drbg.DefaultReader); ok {
--		boring.Unreachable()
--		drbg.Read(b)
-+	if rand.IsDefaultReader(Reader) {
-+		if boring.Enabled {
+ 	if rand.IsDefaultReader(Reader) {
+ 		if boring.Enabled {
+-			_, err = io.ReadFull(boring.RandReader, b)
 +			_, err = boring.RandReader.Read(b)
-+		} else {
-+			drbg.Read(b)
-+		}
- 	} else {
- 		bb := make([]byte, len(b))
- 		_, err = io.ReadFull(Reader, bb)
+ 		} else {
+ 			drbg.Read(b)
+ 		}
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
 index 22ccb8a35334c9..832910da482f44 100644
 --- a/src/crypto/rand/rand_test.go
@@ -2264,10 +2201,10 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index 75aa3d3d725757..504bd25d2c7df1 100644
+index fb2395886b053b..504bd25d2c7df1 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
-@@ -6,10 +6,11 @@ package rsa
+@@ -6,7 +6,7 @@ package rsa
  
  import (
  	"crypto"
@@ -2276,51 +2213,16 @@ index 75aa3d3d725757..504bd25d2c7df1 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
-+	"crypto/internal/rand"
- 	"errors"
- 	"hash"
- 	"io"
-@@ -59,9 +60,9 @@ func (opts *PSSOptions) saltLength() int {
- // used. If opts.Hash is set, it overrides hash.
- //
- // The signature is randomized depending on the message, key, and salt size,
--// using bytes from rand. Most applications should use [crypto/rand.Reader] as
--// rand.
--func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error) {
-+// using bytes from random. Most applications should use [crypto/rand.Reader] as
-+// random.
-+func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error) {
- 	if err := checkPublicKeySize(&priv.PublicKey); err != nil {
- 		return nil, err
- 	}
-@@ -70,7 +71,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
+@@ -71,7 +71,7 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
  		hash = opts.Hash
  	}
  
--	if boring.Enabled && rand == boring.RandReader {
+-	if boring.Enabled && rand.IsDefaultReader(random) {
 +	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -87,7 +88,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
- 		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
- 	}
--	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(rand) {
-+	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
- 		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
- 	}
- 
-@@ -116,7 +117,7 @@ func SignPSS(rand io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte,
- 		}
- 	}
- 
--	return fipsError2(rsa.SignPSS(rand, k, h, digest, saltLength))
-+	return fipsError2(rsa.SignPSS(random, k, h, digest, saltLength))
- }
- 
- // VerifyPSS verifies a PSS signature.
-@@ -133,7 +134,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+@@ -134,7 +134,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
  		return err
  	}
  
@@ -2329,7 +2231,7 @@ index 75aa3d3d725757..504bd25d2c7df1 100644
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -202,10 +203,12 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
+@@ -203,10 +203,12 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
  //
  // See [EncryptOAEP] for additional details.
  func EncryptOAEPWithOptions(random io.Reader, pub *PublicKey, msg []byte, opts *OAEPOptions) ([]byte, error) {
@@ -2345,16 +2247,16 @@ index 75aa3d3d725757..504bd25d2c7df1 100644
  }
  
  func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, label []byte) ([]byte, error) {
-@@ -216,7 +219,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
+@@ -217,7 +219,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
  	defer hash.Reset()
  	defer mgfHash.Reset()
  
--	if boring.Enabled && random == boring.RandReader {
+-	if boring.Enabled && rand.IsDefaultReader(random) {
 +	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
  			return nil, ErrMessageTooLong
-@@ -268,7 +271,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+@@ -269,7 +271,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
@@ -2363,7 +2265,7 @@ index 75aa3d3d725757..504bd25d2c7df1 100644
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -330,7 +333,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -331,7 +333,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
@@ -2372,7 +2274,7 @@ index 75aa3d3d725757..504bd25d2c7df1 100644
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -373,7 +376,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -374,7 +376,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
@@ -2400,7 +2302,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 0f216e0193252c..f1122ce61087bd 100644
+index 5269d7b971bda7..f1122ce61087bd 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -2412,15 +2314,6 @@ index 0f216e0193252c..f1122ce61087bd 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
-@@ -61,7 +61,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
- 		return nil, ErrMessageTooLong
- 	}
- 
--	if boring.Enabled && random == boring.RandReader {
-+	if boring.Enabled && rand.IsDefaultReader(random) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return nil, err
 @@ -115,7 +115,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
@@ -2514,7 +2407,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 62f2de30b0b871..5cbedca4d3888d 100644
+index b94b129867727b..5cbedca4d3888d 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2545,15 +2438,6 @@ index 62f2de30b0b871..5cbedca4d3888d 100644
  
  	case *PKCS1v15DecryptOptions:
  		if l := opts.SessionKeyLen; l > 0 {
-@@ -314,7 +315,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
- 		return nil, err
- 	}
- 
--	if boring.Enabled && random == boring.RandReader &&
-+	if boring.Enabled && rand.IsDefaultReader(random) &&
- 		(bits == 2048 || bits == 3072 || bits == 4096) {
- 		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
- 		if err != nil {
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 5ae4c1dd203874..678e94ade86af6 100644
 --- a/src/crypto/rsa/rsa_test.go
@@ -3855,10 +3739,10 @@ index 39ebb9d2f1edd3..3ab935ab1607f1 100644
  	"crypto/tls/internal/fips140tls"
  	"crypto/x509"
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index 6dadba3a566f5e..a84b8cdeb42471 100644
+index f9bd313737e21b..04548c961e74a8 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
-@@ -3080,7 +3080,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
+@@ -3127,7 +3127,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
  	t.Helper()
  	var params dsa.Parameters
  	if err := dsa.GenerateParameters(&params, rand.Reader, dsa.L1024N160); err != nil {

From d052bcd7ce6947e1e37d7197b931ff10f4e242f2 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Mon, 8 Dec 2025 01:18:17 -0800
Subject: [PATCH 608/887] README.md: more specifically about this project
 (#1988)

---
 README.md | 59 +++++++++++++++++++++++++++----------------------------
 1 file changed, 29 insertions(+), 30 deletions(-)

diff --git a/README.md b/README.md
index 9670bb2aa1c..80895435dd7 100644
--- a/README.md
+++ b/README.md
@@ -1,19 +1,11 @@
-# The Go Programming Language
+# The Microsoft build of Go
 
-Go is an open source programming language that makes it easy to build simple,
-reliable, and efficient software.
+Go is an open source programming language that makes it easy to build simple, reliable, and efficient software.
+The Microsoft build of Go, maintained in the [microsoft/go repository](https://github.com/microsoft/go), contains the infrastructure Microsoft uses to build a modified version of the Go toolset.
 
-This repository, [microsoft/go](https://github.com/microsoft/go), contains the
-infrastructure Microsoft uses to build Go. The submodule named `go` contains the
-Go source code. By default, the submodule's remote URL is the official GitHub
-mirror of Go, [golang/go](https://github.com/golang/go).  The canonical Git
-repository for Go source code is located at https://go.googlesource.com/go.
+Unless otherwise noted, the Go source files are distributed under the BSD-style license found in the LICENSE file.
 
-This project is not involved in producing the [official binary distributions
-of Go](https://go.dev/dl/).
-
-Unless otherwise noted, the Go source files are distributed under the
-BSD-style license found in the LICENSE file.
+This project is not involved in producing the [official binary distributions of Go](https://go.dev/dl/).
 
 ## Why does this fork exist?
 
@@ -23,14 +15,16 @@ This repository produces a modified version of Go that:
 * Can be used to build FIPS 140 compliant applications.
   * See [eng/doc/fips](eng/doc/fips) for more information about this feature and the history of FIPS 140 compliance in Go.
 
+For a complete summary of the changes we make, see [the "What's different?" section of the Migration Guide](eng/doc/MigrationGuide.md#whats-different).
+
 We submit changes to the upstream Go project rather than patching it, when
 possible. Our goals are to avoid breaking compatibility and to minimize the
 number of changes we maintain in this fork.
 
-We call this repository a fork even though it isn't a traditional Git fork. Its
-branches do not share Git ancestry with the Go repository. However, the
-repository serves the same purpose as a Git fork: maintaining a modified version
-of the Go source code over time.
+We call this project a fork even though it isn't a traditional Git fork: the Git branches don't share ancestry with the upstream Git repository.
+However, the repository serves the same purpose as a Git fork: to maintain a modified version of the Go source code over time.
+The submodule named `go` contains the Go source code, and the `patches` directory contains our changes.
+The submodule is updated regularly to the latest commit available in both the upstream repository, <https://go.googlesource.com/go>, and the GitHub mirror, <https://github.com/golang/go>.
 
 ## Support
 
@@ -43,14 +37,15 @@ so each Go major version is supported for about one year.
 
 When upstream Go releases a new minor version (1.X.Y), we release a
 corresponding microsoft/go version that may also include fork-specific changes.
-This normally happens once a month. At any time, we may release a new revision
-(1.X.Y-Z) to fix an issue without waiting for the next upstream minor release.
+This normally happens once a month.
+
+At any time, we may release a new revision (1.X.Y-Z) to fix an issue without waiting for the next upstream minor release.
 Revision releases are uncommon.
 
 Each microsoft/go release is announced at the
 [Microsoft for Go Developers](https://devblogs.microsoft.com/go/) blog.
 Check out the upstream [golang-announce mailing list](https://groups.google.com/g/golang-announce)
-for a summary of the changes in each Go version.
+for a summary of the changes in each upstream Go version.
 
 See [SUPPORT.md](SUPPORT.md) for more information about reporting bugs, requesting features, and asking questions.
 
@@ -62,9 +57,7 @@ There are a few additional support resources internal to Microsoft:
 
 ## Download and install
 
-We build the forked Go toolset with this list of OS/Arch combinations. To use a
-prebuilt copy of Go while targeting a platform that is not on this list,
-cross-compilation may be necessary.
+We build the forked Go toolset with the following list of OS/Arch combinations:
 
 * `linux_amd64`
 * `linux_armv6l`
@@ -73,6 +66,12 @@ cross-compilation may be necessary.
 * `darwin_amd64`
 * `darwin_arm64`
 
+> [!NOTE]
+> Cross-compilation to Windows is supported.
+> For other OS targets, cgo makes cross-compilation difficult, but it may still be possible.
+>
+> For example, to build a program for `windows_arm64`, you can cross-compile on a `windows_amd64` or `linux_amd64` host.
+
 Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we
 recommend migrating existing Go projects to use the Microsoft build of Go. This
 guide also helps resolve commonly encountered issues.
@@ -130,16 +129,16 @@ include a source tarball file ending in `.src.tar.gz`. After downloading and
 extracting the tar.gz file, build it using the
 [upstream instructions](https://go.dev/doc/install/source).
 
+> [!NOTE]
+> The `zip` file that GitHub offers for download on the [microsoft/go releases page](https://github.com/microsoft/go/releases) is incomplete: it doesn't include the `go` submodule.
+> Make sure to download the `.src.tar.gz` file instead, or [clone the repository using Git and set up the patched submodule](#clone-and-build).
+
 #### Clone and build
 
-The first step is to clone this repository using Git and check out the desired
-tag or commit. The `zip` file that GitHub offers for download is incomplete: it
-doesn't include the `go` submodule.
+First, clone this repository using Git and check out the desired tag or commit.
 
-If you want to contribute to the Microsoft for Go developers project, read the [Developer
-Guide](eng/doc/DeveloperGuide.md). It lists the steps we recommend to set up a
-Microsoft build of Go development environment, execute your first build, run
-the standard library test suite, and contribute a PR.
+If you want to contribute to the Microsoft build of Go project, read the [Developer Guide](eng/doc/DeveloperGuide.md).
+It lists the steps we recommend to set up a Microsoft build of Go development environment, execute your first build, run the standard library test suite, and contribute a PR.
 
 If you just want to build on your own machine, you may find it more
 convenient to use the tools provided by the `eng/run.ps1` script. We use this

From 3482844a7e85a96d017eb29edf8772b55c8e1570 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Dec 2025 10:52:08 +0000
Subject: [PATCH 609/887] build(deps): bump github/codeql-action from 4.31.6 to
 4.31.7 (#1989)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.6 to 4.31.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fe4161a26a8629af62121b670040955b330f9af2...cf1bb45a277cb3c205638b2cd5c984db1c46a412)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 0e221a57a53..3bb3a904d7c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+        uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+        uses: github/codeql-action/autobuild@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+        uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
         with:
           category: /language:go

From 330120bf10299b10056b5d7d959712dfee8f0f08 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 9 Dec 2025 09:05:17 +0000
Subject: [PATCH 610/887] rand use io.ReadFull

---
 patches/0004-Use-crypto-backends.patch | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4993a94cb50..76185244794 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -55,7 +55,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
  src/crypto/purego_test.go                     |   2 +-
- src/crypto/rand/rand.go                       |   4 +-
+ src/crypto/rand/rand.go                       |   2 +-
  src/crypto/rand/rand_test.go                  |   9 +-
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  12 +-
@@ -100,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1491 insertions(+), 177 deletions(-)
+ 96 files changed, 1490 insertions(+), 176 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2127,7 +2127,7 @@ index 62be347e0c6822..d284b5cf7814a6 100644
  		}
  
 diff --git a/src/crypto/rand/rand.go b/src/crypto/rand/rand.go
-index 018fe013cef600..e2279dbb2881b9 100644
+index 018fe013cef600..ec710c6f935e3b 100644
 --- a/src/crypto/rand/rand.go
 +++ b/src/crypto/rand/rand.go
 @@ -7,7 +7,7 @@
@@ -2139,15 +2139,6 @@ index 018fe013cef600..e2279dbb2881b9 100644
  	"crypto/internal/fips140/drbg"
  	"crypto/internal/rand"
  	"io"
-@@ -51,7 +51,7 @@ func Read(b []byte) (n int, err error) {
- 	// a heap buffer and copy from it.
- 	if rand.IsDefaultReader(Reader) {
- 		if boring.Enabled {
--			_, err = io.ReadFull(boring.RandReader, b)
-+			_, err = boring.RandReader.Read(b)
- 		} else {
- 			drbg.Read(b)
- 		}
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
 index 22ccb8a35334c9..832910da482f44 100644
 --- a/src/crypto/rand/rand_test.go

From 73f94a22504a55cb838dfbe0781b7cdd2d8e463e Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Tue, 9 Dec 2025 10:48:39 +0100
Subject: [PATCH 611/887] add Go 1.26 algorithms to cross-platform cryptography
 doc (#1991)

---
 eng/doc/CrossPlatformCryptography.md | 113 +++++++++++++++++++++------
 1 file changed, 91 insertions(+), 22 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 6c640c14fe5..1492ecfaea2 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -244,21 +244,27 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 | L2048N256  | ✔️      | ✔️    | ❌    |
 | L3072N256  | ✔️      | ✔️    | ❌    |
 
-## KDF
+## Key derivation functions (KDFs)
 
 This section includes the following packages:
 
 - [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
 - [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
 
-| Functions | Windows         | Linux           | macOS           |
-| --------- | --------------- | --------------- | --------------- |
+| Functions | Windows         | Linux            | macOS           |
+| --------- | --------------- | ---------------- | --------------- |
 | PBKDF2    | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
 | HKDF      | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
-## ML-KEM
+## Key Encapsulation Mechanisms (KEMs)
+
+This section includes the following subsections:
+
+- [ML-KEM](#ml-kem)
+
+### ML-KEM
 
 This section includes the following packages:
 
@@ -266,8 +272,8 @@ This section includes the following packages:
 
 ML-KEM is available starting from the Microsoft build of Go 1.26.
 
-| Parameters | Windows         | Linux           | macOS           |
-| ---------- | --------------- | --------------- | --------------- |
+| Parameters | Windows         | Linux            | macOS           |
+| ---------- | --------------- | ---------------- | --------------- |
 | 768        | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
 | 1024       | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
 
@@ -277,20 +283,79 @@ ML-KEM is available starting from the Microsoft build of Go 1.26.
 
 <sup>3</sup>Requires macOS 26 (Tahoe) or later.
 
-## TLS
+## Higher-level protocols
+
+High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,
+such as TLS or Hybrid Public Key Encryption (HPKE).
+
+These protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.
+
+This section includes the following subsections:
+
+- [HPKE](#hybrid-public-key-encryption-hpke)
+- [TLS](#tls)
+
+### Hybrid Public Key Encryption (HPKE)
+
+This section includes the following subsections:
+
+- [AEAD Functions](#hpke-authenticated-encryption-with-associated-data-aead-functions)
+- [KDFs](#hpke-key-derivation-functions-kdfs)
+- [KEMs](#hpke-key-encapsulation-mechanisms-kems)
+
+This section includes the following packages:
+
+- [crypto/hpke](https://pkg.go.dev/crypto/hpke)
+
+#### HPKE Authenticated Encryption with Associated Data (AEAD) Functions
+
+| Functions        | Windows | Linux | macOS |
+| ---------------- | ------- | ----- | ------|
+| AES-128-GCM      | ✔️     | ✔️    | ✔️   |
+| AES-256-GCM      | ✔️     | ✔️    | ✔️   |
+| ChaCha20Poly1305 | ❌     | ❌    | ❌   |
+| Export-only      | N/A    | N/A    | N/A  |
+
+#### HPKE Key Derivation Functions (KDFs)
+
+| Functions   | Windows | Linux | macOS |
+| ------------| ------- | ----- | ------|
+| HKDF-SHA256 | ✔️     | ✔️    | ✔️   |
+| HKDF-SHA384 | ✔️     | ✔️    | ✔️   |
+| HKDF-SHA512 | ✔️     | ✔️    | ✔️   |
+
+#### HPKE Key Encapsulation Mechanisms (KEMs)
+
+| Functions                              | Windows | Linux | macOS |
+| ---------------------------------------| ------- | ----- | ------|
+| DHKEM(P-256, HKDF-SHA256)              | ✔️     | ✔️    | ✔️   |
+| DHKEM(P-384, HKDF-SHA384)              | ✔️     | ✔️    | ✔️   |
+| DHKEM(P-521, HKDF-SHA512)              | ✔️     | ✔️    | ✔️   |
+| DHKEM(X25519, HKDF-SHA256)<sup>1</sup> | ✔️     | ✔️    | ✔️   |
+| ML-KEM-768<sup>2</sup>                 | ✔️     | ✔️    | ✔️   |
+| ML-KEM-1024<sup>2</sup>                | ✔️     | ✔️    | ✔️   |
+| MLKEM768-P256<sup>2</sup>              | ✔️     | ✔️    | ✔️   |
+| MLKEM1024-P384<sup>2</sup>             | ✔️     | ✔️    | ✔️   |
+| MLKEM768-X25519<sup>1,2</sup>          | ✔️     | ✔️    | ✔️   |
+
+<sup>1</sup>See the [X25519](#ecdh) section for requirements.
+
+<sup>2</sup>See the [ML-KEM](#ml-kem) section for requirements.
+
+### TLS
 
 This section includes the following subsections:
 
 - [TLS Versions](#tls-versions)
-- [Cipher Suites](#cipher-suites)
-- [Curves and Groups](#curves-and-groups)
-- [Signature Algorithms](#signature-algorithms)
+- [TLS Cipher Suites](#tls-cipher-suites)
+- [TLS Curves and Groups](#tls-curves-and-groups)
+- [TLS Signature Schemes](#tls-signature-schemes)
 
 This section includes the following packages:
 
 - [crypto/tls](https://pkg.go.dev/crypto/tls)
 
-### TLS Versions
+#### TLS Versions
 
 The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.
 
@@ -302,7 +367,7 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 | TLS 1.2 | ✔️      | ✔️    | ✔️    |
 | TLS 1.3 | ✔️      | ✔️    | ✔️    |
 
-### Cipher Suites
+#### TLS Cipher Suites
 
 | Name                                          | Windows | Linux          | macOS |
 | --------------------------------------------- | ------- | -------------- | ----- |
@@ -339,21 +404,25 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 
 On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.
 
-### Curves and Groups
+#### TLS Curves and Groups
 
 Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).
 
-| Name                       | Windows | Linux | macOS |
-| -------------------------- | ------- | ------| ----- |
-| CurveP256                  | ✔️      | ✔️   | ✔️    |
-| CurveP384                  | ✔️      | ✔️   | ✔️    |
-| CurveP521                  | ✔️      | ✔️   | ✔️    |
-| X25519<sup>1</sup>         | ✔️      | ✔️   | ✔️    |
-| X25519MLKEM768<sup>1</sup> | ✔️      | ✔️   | ✔️    |
+| Name                           | Windows | Linux | macOS |
+| ------------------------------ | ------- | ------| ----- |
+| CurveP256                      | ✔️      | ✔️   | ✔️    |
+| CurveP384                      | ✔️      | ✔️   | ✔️    |
+| CurveP521                      | ✔️      | ✔️   | ✔️    |
+| X25519<sup>1</sup>             | ✔️      | ✔️   | ✔️    |
+| X25519MLKEM768<sup>1,2</sup>   | ✔️      | ✔️   | ✔️    |
+| SecP256r1MLKEM768<sup>2</sup>  | ✔️      | ✔️   | ✔️    |
+| SecP384r1MLKEM1024<sup>2</sup> | ✔️      | ✔️   | ✔️    |
+
+<sup>1</sup>See the [X25519](#ecdh) section for requirements.
 
-<sup>1</sup>See the [X25519](#ecdh) and [ML-KEM](#ml-kem) sections for requirements.
+<sup>2</sup>See the [ML-KEM](#ml-kem) section for requirements.
 
-### Signature Schemes
+#### TLS Signature Schemes
 
 Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#SignatureScheme).
 

From 0154d6ce81ab31ff80eae0302733f1b002d6f928 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Dec 2025 11:00:55 +0000
Subject: [PATCH 612/887] build(deps): bump golang.org/x/net from 0.47.0 to
 0.48.0 in /eng/_util (#1993)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/net/compare/v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  8 ++++----
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index c45eb2c1f80..d553598e3f1 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,8 +10,8 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.1.0
-	golang.org/x/net v0.47.0
-	golang.org/x/sys v0.38.0
+	golang.org/x/net v0.48.0
+	golang.org/x/sys v0.39.0
 )
 
 require (
@@ -29,9 +29,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.46.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/text v0.31.0 // indirect
+	golang.org/x/text v0.32.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 105a1cd91ba..b58fd435ba2 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -52,16 +52,16 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
-golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
-golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
-golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
+golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
+golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
-golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
-golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
+golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
+golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
+golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
 golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=

From 9a3f51cedcce7467a9168415c3680d4b42dec960 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 10 Dec 2025 16:07:25 +0000
Subject: [PATCH 613/887] Update submodule to latest master (36bca316): cmd:
 fix some issues in the comments

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f84f8d86beb..36bca3166e1 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f84f8d86beb08631217e77d725a4b6528ed91dc2
+Subproject commit 36bca3166e18db52687a4d91ead3f98ffe6d00b8

From 4f74b485bfc7f6ed4028455d1bf80b1da4522504 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 11 Dec 2025 10:55:44 +0000
Subject: [PATCH 614/887] auto generate crypto platform doc and programatically
 store status (#1996)

* auto generate crypto platform doc and programatically store status

* quim feedback

* fix formatting

* default to supported to reduce JSON size

* improve schema

* further tighten schema

* fix header
---
 .gitignore                             |    1 +
 eng/_util/cmd/gencryptodoc/crypto.json | 1018 ++++++++++++++++++++++++
 eng/_util/cmd/gencryptodoc/header.md   |   45 ++
 eng/_util/cmd/gencryptodoc/main.go     |  353 ++++++++
 eng/_util/cmd/gencryptodoc/schema.json |   79 ++
 eng/doc/CrossPlatformCryptography.md   |  184 ++---
 6 files changed, 1588 insertions(+), 92 deletions(-)
 create mode 100644 .gitignore
 create mode 100644 eng/_util/cmd/gencryptodoc/crypto.json
 create mode 100644 eng/_util/cmd/gencryptodoc/header.md
 create mode 100644 eng/_util/cmd/gencryptodoc/main.go
 create mode 100644 eng/_util/cmd/gencryptodoc/schema.json

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000000..505c905fa0a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+microsoft-go.sln
diff --git a/eng/_util/cmd/gencryptodoc/crypto.json b/eng/_util/cmd/gencryptodoc/crypto.json
new file mode 100644
index 00000000000..0894de81b52
--- /dev/null
+++ b/eng/_util/cmd/gencryptodoc/crypto.json
@@ -0,0 +1,1018 @@
+{
+  "$schema": "./schema.json",
+  "sections": [
+    {
+      "title": "Hash and Message Authentication Algorithms",
+      "packages": [
+        "crypto/md5",
+        "crypto/sha1",
+        "crypto/sha256",
+        "crypto/sha512",
+        "crypto/sha3",
+        "crypto/hmac"
+      ],
+      "items": [
+        {
+          "name": "MD5"
+        },
+        {
+          "name": "SHA-1"
+        },
+        {
+          "name": "SHA-2-224",
+          "platforms": {
+            "windows": { "supported": "false" }
+          }
+        },
+        {
+          "name": "SHA-2-256"
+        },
+        {
+          "name": "SHA-2-384"
+        },
+        {
+          "name": "SHA-2-512"
+        },
+        {
+          "name": "SHA-2-512_224",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "linux": { "minGoVersion": "1.24", "minOpenSSLVersion": "1.1.1" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "SHA-2-512_256",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "linux": { "minGoVersion": "1.24", "minOpenSSLVersion": "1.1.1" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "SHA-3-224",
+          "minGoVersion": "1.26",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "linux": { "minOpenSSLVersion": "1.1.1" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "SHA-3-256",
+          "minGoVersion": "1.26",
+          "platforms": {
+            "windows": {
+              "notes": ["Available in Windows 11, version 24H2 or later."]
+            },
+            "linux": { "minOpenSSLVersion": "1.1.1" },
+            "macos": { "minMacOSVersion": "26" }
+          }
+        },
+        {
+          "name": "SHA-3-384",
+          "minGoVersion": "1.26",
+          "platforms": {
+            "windows": {
+              "notes": ["Available in Windows 11, version 24H2 or later."]
+            },
+            "linux": { "minOpenSSLVersion": "1.1.1" },
+            "macos": { "minMacOSVersion": "26" }
+          }
+        },
+        {
+          "name": "SHA-3-512",
+          "minGoVersion": "1.26",
+          "platforms": {
+            "windows": {
+              "notes": ["Available in Windows 11, version 24H2 or later."]
+            },
+            "linux": { "minOpenSSLVersion": "1.1.1" },
+            "macos": { "minMacOSVersion": "26" }
+          }
+        },
+        {
+          "name": "SHAKE-128",
+          "platforms": {
+            "linux": { "minOpenSSLVersion": "3.3" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "SHAKE-256",
+          "platforms": {
+            "linux": { "minOpenSSLVersion": "3.3" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "CSHAKE-128",
+          "platforms": {
+            "linux": { "supported": "false" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "CSHAKE-256",
+          "platforms": {
+            "linux": { "supported": "false" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "HMAC",
+          "notes": [
+            "Supports only hash algorithms that are supported as standalone hash functions."
+          ]
+        }
+      ]
+    },
+    {
+      "title": "Symmetric encryption",
+      "columnHeader": "Cipher + Mode",
+      "packages": ["crypto/aes", "crypto/cipher", "crypto/des", "crypto/rc4"],
+      "description": "",
+      "footer": "- Key Sizes\n\n  AES-GCM works with 128, 192, and 256-bit keys.\n\n- Nonce Sizes\n\n  AES-GCM works with 12-byte nonces.\n\n- Tag Sizes\n\n  AES-GCM works with 16-byte tags.",
+      "subsections": [],
+      "items": [
+        {
+          "name": "AES-ECB"
+        },
+        {
+          "name": "AES-CBC"
+        },
+        {
+          "name": "AES-CTR",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "AES-CFB",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "linux": { "supported": "false" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "AES-OFB",
+          "platforms": {
+            "windows": { "supported": "false" },
+            "linux": { "supported": "false" },
+            "macos": { "supported": "false" }
+          }
+        },
+        {
+          "name": "AES-GCM",
+          "notes": ["AES-GCM supports specific keys, nonces, and tags:"]
+        },
+        {
+          "name": "DES-CBC",
+          "platforms": {
+            "linux": {
+              "supported": "warn",
+              "notes": [
+                "When using OpenSSL 3, requires the legacy provider to be enabled."
+              ]
+            }
+          }
+        },
+        {
+          "name": "DES-ECB",
+          "platforms": {
+            "linux": {
+              "supported": "warn",
+              "notes": [
+                "When using OpenSSL 3, requires the legacy provider to be enabled."
+              ]
+            }
+          }
+        },
+        {
+          "name": "3DES-ECB"
+        },
+        {
+          "name": "3DES-CBC"
+        },
+        {
+          "name": "RC4",
+          "platforms": {
+            "linux": {
+              "supported": "warn",
+              "notes": [
+                "When using OpenSSL 3, requires the legacy provider to be enabled."
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "title": "Asymmetric encryption",
+      "packages": ["RSA", "ECDSA", "ECDH", "Ed25519", "DSA"],
+      "description": "",
+      "subsections": [
+        {
+          "title": "RSA",
+          "columnHeader": "Padding Mode",
+          "packages": ["crypto/rsa"],
+          "description": "[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.\n\nMulti-prime RSA keys are not supported.\n\nThe RSA key size is subject to the limitations of the underlying cryptographic library.\nFor example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.\nPlease refer to the documentation of the underlying cryptographic library for the specific limitations.\n\nOperations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+          "subsections": [],
+          "items": [
+            {
+              "name": "OAEP (MD5)",
+              "platforms": {
+                "macos": {
+                  "notes": [
+                    "macOS doesn't support passing a custom label to OAEP functions."
+                  ]
+                }
+              }
+            },
+            {
+              "name": "OAEP (SHA-1)",
+              "platforms": {
+                "macos": {
+                  "notes": [
+                    "macOS doesn't support passing a custom label to OAEP functions."
+                  ]
+                }
+              }
+            },
+            {
+              "name": "OAEP (SHA-2)",
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ],
+              "platforms": {
+                "macos": {
+                  "notes": [
+                    "macOS doesn't support passing a custom label to OAEP functions."
+                  ]
+                }
+              }
+            },
+            {
+              "name": "OAEP (SHA-3)",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PSS (MD5)",
+              "platforms": {
+                "windows": {
+                  "notes": [
+                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
+                  ]
+                },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PSS (SHA-1)",
+              "platforms": {
+                "windows": {
+                  "notes": [
+                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
+                  ]
+                },
+                "macos": {
+                  "notes": [
+                    "On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants)."
+                  ]
+                }
+              }
+            },
+            {
+              "name": "PSS (SHA-2)",
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ],
+              "platforms": {
+                "windows": {
+                  "notes": [
+                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
+                  ]
+                },
+                "macos": {
+                  "notes": [
+                    "On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants)."
+                  ]
+                }
+              }
+            },
+            {
+              "name": "PSS (SHA-3)",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PKCS1v15 Signature (Unhashed)"
+            },
+            {
+              "name": "PKCS1v15 Signature (RIPMED160)",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": {
+                  "minGoVersion": "1.24"
+                },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PKCS1v15 Signature (MD4)",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": {
+                  "minGoVersion": "1.24"
+                },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PKCS1v15 Signature (MD5)",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PKCS1v15 Signature (MD5-SHA1)",
+              "platforms": {
+                "windows": {
+                  "minGoVersion": "1.24"
+                },
+                "linux": {
+                  "minGoVersion": "1.24"
+                },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "PKCS1v15 Signature (SHA-1)"
+            },
+            {
+              "name": "PKCS1v15 Signature (SHA-2)",
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            },
+            {
+              "name": "PKCS1v15 Signature (SHA-3)",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            }
+          ]
+        },
+        {
+          "title": "ECDSA",
+          "columnHeader": "Elliptic Curve",
+          "packages": ["crypto/ecdsa", "crypto/elliptic"],
+          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+          "subsections": [],
+          "items": [
+            {
+              "name": "NIST P-224 (secp224r1)",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "NIST P-256 (secp256r1)"
+            },
+            {
+              "name": "NIST P-384 (secp384r1)"
+            },
+            {
+              "name": "NIST P-521 (secp521r1)"
+            }
+          ]
+        },
+        {
+          "title": "ECDH",
+          "columnHeader": "Elliptic Curve",
+          "packages": ["crypto/ecdh"],
+          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+          "subsections": [],
+          "items": [
+            {
+              "name": "NIST P-224 (secp224r1)",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "NIST P-256 (secp256r1)"
+            },
+            {
+              "name": "NIST P-384 (secp384r1)"
+            },
+            {
+              "name": "NIST P-521 (secp521r1)"
+            },
+            {
+              "name": "X25519 (curve25519)",
+              "minGoVersion": "1.26",
+              "platforms": {
+                "linux": {
+                  "minOpenSSLVersion": "1.1.1"
+                }
+              }
+            }
+          ]
+        },
+        {
+          "title": "Ed25519",
+          "columnHeader": "Schemes",
+          "packages": ["crypto/ed25519"],
+          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+          "subsections": [],
+          "items": [
+            {
+              "name": "Ed25519",
+              "platforms": {
+                "windows": { "supported": "false" }
+              }
+            },
+            {
+              "name": "Ed25519ctx",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "Ed25519ph",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "linux": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            }
+          ]
+        },
+        {
+          "title": "DSA",
+          "columnHeader": "Parameters",
+          "packages": [],
+          "description": "",
+          "subsections": [],
+          "items": [
+            {
+              "name": "L1024N160",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "L2048N224",
+              "platforms": {
+                "windows": { "supported": "false" },
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "L2048N256",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            },
+            {
+              "name": "L3072N256",
+              "platforms": {
+                "macos": { "supported": "false" }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "title": "Key derivation functions (KDFs)",
+      "columnHeader": "Functions",
+      "packages": ["crypto/hkdf", "crypto/pbkdf2"],
+      "description": "",
+      "subsections": [],
+      "items": [
+        {
+          "name": "PBKDF2",
+          "platforms": {
+            "windows": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            },
+            "linux": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            },
+            "macos": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            }
+          }
+        },
+        {
+          "name": "HKDF",
+          "platforms": {
+            "windows": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            },
+            "linux": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            },
+            "macos": {
+              "notes": [
+                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "title": "Key Encapsulation Mechanisms (KEMs)",
+      "packages": ["ML-KEM"],
+      "description": "",
+      "subsections": [
+        {
+          "title": "ML-KEM",
+          "columnHeader": "Parameters",
+          "packages": ["crypto/mlkem"],
+          "minGoVersion": "1.26",
+          "subsections": [],
+          "items": [
+            {
+              "name": "768",
+              "platforms": {
+                "windows": {
+                  "notes": [
+                    "Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later."
+                  ]
+                },
+                "linux": {
+                  "minOpenSSLVersion": "3.5.0"
+                },
+                "macos": {
+                  "minMacOSVersion": "26"
+                }
+              }
+            },
+            {
+              "name": "1024",
+              "platforms": {
+                "windows": {
+                  "notes": [
+                    "Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later."
+                  ]
+                },
+                "linux": {
+                  "minOpenSSLVersion": "3.5.0"
+                },
+                "macos": {
+                  "minMacOSVersion": "26"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "title": "Higher-level protocols",
+      "packages": ["HPKE", "TLS"],
+      "description": "High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,\nsuch as TLS or Hybrid Public Key Encryption (HPKE).\n\nThese protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.\n\nThis section includes the following subsections:",
+      "subsections": [
+        {
+          "title": "Hybrid Public Key Encryption (HPKE)",
+          "packages": ["AEAD Functions", "KDFs", "KEMs", "crypto/hpke"],
+          "description": "",
+          "subsections": [
+            {
+              "title": "HPKE Authenticated Encryption with Associated Data (AEAD) Functions",
+              "columnHeader": "Functions",
+              "shortTitle": "AEAD Functions",
+              "packages": [],
+              "description": "",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "AES-128-GCM"
+                },
+                {
+                  "name": "AES-256-GCM"
+                },
+                {
+                  "name": "ChaCha20Poly1305",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "Export-only",
+                  "platforms": {
+                    "windows": { "supported": "N/A" },
+                    "linux": { "supported": "N/A" },
+                    "macos": { "supported": "N/A" }
+                  }
+                }
+              ]
+            },
+            {
+              "title": "HPKE Key Derivation Functions (KDFs)",
+              "columnHeader": "Functions",
+              "shortTitle": "KDFs",
+              "packages": [],
+              "description": "",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "HKDF-SHA256"
+                },
+                {
+                  "name": "HKDF-SHA384"
+                },
+                {
+                  "name": "HKDF-SHA512"
+                }
+              ]
+            },
+            {
+              "title": "HPKE Key Encapsulation Mechanisms (KEMs)",
+              "columnHeader": "Functions",
+              "shortTitle": "KEMs",
+              "packages": [],
+              "description": "",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "DHKEM(P-256, HKDF-SHA256)"
+                },
+                {
+                  "name": "DHKEM(P-384, HKDF-SHA384)"
+                },
+                {
+                  "name": "DHKEM(P-521, HKDF-SHA512)"
+                },
+                {
+                  "name": "DHKEM(X25519, HKDF-SHA256)",
+                  "notes": ["See the [X25519](#ecdh) section for requirements."]
+                },
+                {
+                  "name": "ML-KEM-768",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "ML-KEM-1024",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "MLKEM768-P256",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "MLKEM1024-P384",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "MLKEM768-X25519",
+                  "notes": [
+                    "See the [X25519](#ecdh) section for requirements.",
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                }
+              ]
+            }
+          ]
+        },
+        {
+          "title": "TLS",
+          "packages": [
+            "TLS Versions",
+            "TLS Cipher Suites",
+            "TLS Curves and Groups",
+            "TLS Signature Schemes",
+            "crypto/tls"
+          ],
+          "description": "",
+          "subsections": [
+            {
+              "title": "TLS Versions",
+              "columnHeader": "Version",
+              "packages": [],
+              "description": "The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "SSL 3.0",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS 1.0",
+                  "platforms": {
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS 1.1",
+                  "platforms": {
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS 1.2"
+                },
+                {
+                  "name": "TLS 1.3"
+                }
+              ]
+            },
+            {
+              "title": "TLS Cipher Suites",
+              "columnHeader": "Name",
+              "packages": [],
+              "footer": "On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "TLS_RSA_WITH_RC4_128_SHA",
+                  "platforms": {
+                    "linux": {
+                      "supported": "warn",
+                      "notes": [
+                        "When using OpenSSL 3, requires the legacy provider to be enabled."
+                      ]
+                    }
+                  }
+                },
+                {
+                  "name": "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+                  "platforms": {
+                    "linux": {
+                      "supported": "warn",
+                      "notes": [
+                        "When using OpenSSL 3, requires the legacy provider to be enabled."
+                      ]
+                    }
+                  }
+                },
+                {
+                  "name": "TLS_RSA_WITH_AES_128_CBC_SHA"
+                },
+                {
+                  "name": "TLS_RSA_WITH_AES_256_CBC_SHA"
+                },
+                {
+                  "name": "TLS_RSA_WITH_AES_128_CBC_SHA256"
+                },
+                {
+                  "name": "TLS_RSA_WITH_AES_128_GCM_SHA256"
+                },
+                {
+                  "name": "TLS_RSA_WITH_AES_256_GCM_SHA384"
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+                  "platforms": {
+                    "linux": {
+                      "supported": "warn",
+                      "notes": [
+                        "When using OpenSSL 3, requires the legacy provider to be enabled."
+                      ]
+                    }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+                  "platforms": {
+                    "linux": {
+                      "supported": "warn",
+                      "notes": [
+                        "When using OpenSSL 3, requires the legacy provider to be enabled."
+                      ]
+                    }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+                  "platforms": {
+                    "linux": {
+                      "supported": "warn",
+                      "notes": [
+                        "When using OpenSSL 3, requires the legacy provider to be enabled."
+                      ]
+                    }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS_AES_128_GCM_SHA256"
+                },
+                {
+                  "name": "TLS_AES_256_GCM_SHA384"
+                },
+                {
+                  "name": "TLS_CHACHA20_POLY1305_SHA256",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                },
+                {
+                  "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
+                  "platforms": {
+                    "windows": { "supported": "false" },
+                    "linux": { "supported": "false" },
+                    "macos": { "supported": "false" }
+                  }
+                }
+              ]
+            },
+            {
+              "title": "TLS Curves and Groups",
+              "columnHeader": "Name",
+              "packages": [],
+              "description": "Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "CurveP256"
+                },
+                {
+                  "name": "CurveP384"
+                },
+                {
+                  "name": "CurveP521"
+                },
+                {
+                  "name": "X25519",
+                  "notes": ["See the [X25519](#ecdh) section for requirements."]
+                },
+                {
+                  "name": "X25519MLKEM768",
+                  "notes": [
+                    "See the [X25519](#ecdh) section for requirements.",
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "SecP256r1MLKEM768",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                },
+                {
+                  "name": "SecP384r1MLKEM1024",
+                  "notes": [
+                    "See the [ML-KEM](#ml-kem) section for requirements."
+                  ]
+                }
+              ]
+            },
+            {
+              "title": "TLS Signature Schemes",
+              "columnHeader": "Name",
+              "packages": [],
+              "description": "Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#SignatureScheme).",
+              "subsections": [],
+              "items": [
+                {
+                  "name": "PKCS1WithSHA1"
+                },
+                {
+                  "name": "PKCS1WithSHA256"
+                },
+                {
+                  "name": "PKCS1WithSHA384"
+                },
+                {
+                  "name": "PKCS1WithSHA512"
+                },
+                {
+                  "name": "PSSWithSHA256"
+                },
+                {
+                  "name": "PSSWithSHA384"
+                },
+                {
+                  "name": "PSSWithSHA512"
+                },
+                {
+                  "name": "ECDSAWithSHA1"
+                },
+                {
+                  "name": "ECDSAWithP256AndSHA256"
+                },
+                {
+                  "name": "ECDSAWithP384AndSHA384"
+                },
+                {
+                  "name": "ECDSAWithP521AndSHA512"
+                },
+                {
+                  "name": "Ed25519",
+                  "platforms": {
+                    "windows": { "supported": "false" }
+                  }
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/eng/_util/cmd/gencryptodoc/header.md b/eng/_util/cmd/gencryptodoc/header.md
new file mode 100644
index 00000000000..c2ef73d0739
--- /dev/null
+++ b/eng/_util/cmd/gencryptodoc/header.md
@@ -0,0 +1,45 @@
+# Cross-Platform Cryptography in the Microsoft build of Go
+
+Cryptographic operations in the Microsoft build of Go are delegated to the operating system (OS) libraries in some conditions.
+The high level conditions and the benefits of delegating cryptographic operations are described in the [Microsoft build of Go FIPS README](./fips/README.md).
+At a fine-grained level, Go apps will fall back to the native Go implementation of an algorithm if the OS libraries don't support it.
+This article identifies the features that are supported on each platform.
+
+This article assumes you have a working familiarity with cryptography in Go.
+
+## Platform support
+
+The Microsoft build of Go supports the following platforms:
+
+### Windows
+
+On Windows, the Microsoft build of Go uses the [CNG library (Cryptography API: Next Generation)](https://learn.microsoft.com/en-us/windows/win32/seccng/cng-portal) for cryptographic operations.
+CNG is available since Windows Vista and Windows Server 2008 and it doesn't require any additional installation nor configuration.
+
+### Linux
+
+On Linux, the Microsoft build of Go uses the [OpenSSL crypto library](https://docs.openssl.org/3.0/man7/crypto/) for cryptographic operations.
+OpenSSL is normally available on Linux distributions, but it may not be installed by default.
+If it is not installed, you can install it using the package manager of your distribution.
+
+OpenSSL 3 implements all the cryptographic algorithms using [Providers](https://docs.openssl.org/3.0/man7/crypto/#providers).
+The Microsoft build of Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
+SCOSSL is expected to be used with the default built-in provider enabled as a fallback (which is the case when using [Azure Linux 3](https://github.com/microsoft/AzureLinux)).
+
+### macOS
+
+On macOS, the Microsoft build of Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
+CommonCrypto and CryptoKit are shipped with macOS and don't require any additional installation nor configuration.
+Currently macOS 13 and above is supported.
+
+## Table legend
+
+The following legend describes the symbols used in the tables to indicate the level of support for each cryptographic algorithm:
+
+| Symbol | Meaning                                                                                                                      |
+| ------ | ---------------------------------------------------------------------------------------------------------------------------- |
+| ✔️     | Supported, possibly with minor limitations that don't require special configuration when using the latest Go and OS versions |
+| ⚠️     | Supported with limitations that require special configuration action                                                         |
+| ❌     | Not supported                                                                                                                |
+
+When an algorithm is not supported or the limitations are exceeded, the Microsoft build of Go will fall back to the Go implementation.
diff --git a/eng/_util/cmd/gencryptodoc/main.go b/eng/_util/cmd/gencryptodoc/main.go
new file mode 100644
index 00000000000..cd4403e09a6
--- /dev/null
+++ b/eng/_util/cmd/gencryptodoc/main.go
@@ -0,0 +1,353 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:generate go run . -o ../../../doc/CrossPlatformCryptography.md crypto.json
+//go:generate go run github.com/wasilibs/go-prettier/cmd/prettier@latest --write ../../../doc/CrossPlatformCryptography.md
+
+package main
+
+import (
+	_ "embed"
+	"encoding/json"
+	"flag"
+	"fmt"
+	"os"
+	"sort"
+	"strings"
+)
+
+//go:embed header.md
+var header string
+
+type PlatformStatus struct {
+	Supported         string   `json:"supported"`
+	MinGoVersion      string   `json:"minGoVersion,omitempty"`
+	Notes             []string `json:"notes,omitempty"`
+	MinMacOSVersion   string   `json:"minMacOSVersion,omitempty"`
+	MinOpenSSLVersion string   `json:"minOpenSSLVersion,omitempty"`
+}
+
+type Item struct {
+	Name         string                    `json:"name"`
+	MinGoVersion string                    `json:"minGoVersion,omitempty"`
+	Notes        []string                  `json:"notes,omitempty"`
+	Platforms    map[string]PlatformStatus `json:"platforms"`
+}
+
+type Section struct {
+	Title             string    `json:"title"`
+	ShortTitle        string    `json:"shortTitle,omitempty"`
+	ColumnHeader      string    `json:"columnHeader,omitempty"`
+	Packages          []string  `json:"packages,omitempty"`
+	Description       string    `json:"description,omitempty"`
+	MinGoVersion      string    `json:"minGoVersion,omitempty"`
+	MinMacOSVersion   string    `json:"minMacOSVersion,omitempty"`
+	MinOpenSSLVersion string    `json:"minOpenSSLVersion,omitempty"`
+	Items             []Item    `json:"items,omitempty"`
+	Subsections       []Section `json:"subsections,omitempty"`
+	Footnotes         []string  `json:"footnotes,omitempty"`
+	Footer            string    `json:"footer,omitempty"`
+}
+
+type Document struct {
+	Sections []Section `json:"sections"`
+}
+
+func main() {
+	output := flag.String("o", "", "output file path")
+	flag.Parse()
+
+	args := flag.Args()
+	if len(args) != 1 {
+		fmt.Fprintf(os.Stderr, "Usage: %s [options] <path-to-json>\n", os.Args[0])
+		os.Exit(1)
+	}
+
+	if *output != "" {
+		f, err := os.Create(*output)
+		if err != nil {
+			panic(err)
+		}
+		defer f.Close()
+		os.Stdout = f
+	}
+
+	data, err := os.ReadFile(args[0])
+	if err != nil {
+		panic(err)
+	}
+
+	var doc Document
+	if err := json.Unmarshal(data, &doc); err != nil {
+		panic(err)
+	}
+
+	if err := validate(doc); err != nil {
+		fmt.Fprintf(os.Stderr, "Validation error: %v\n", err)
+		os.Exit(1)
+	}
+
+	fmt.Println("<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->")
+	fmt.Println()
+	fmt.Println(header)
+
+	for _, section := range doc.Sections {
+		printSection(section, 2)
+	}
+}
+
+func printSection(section Section, level int) {
+	fmt.Printf("\n%s %s\n\n", strings.Repeat("#", level), section.Title)
+
+	// Filter packages
+	var validPackages []string
+	for _, pkg := range section.Packages {
+		if strings.Contains(pkg, "/") || strings.Contains(pkg, ".") {
+			validPackages = append(validPackages, pkg)
+		}
+	}
+
+	if len(validPackages) > 0 {
+		fmt.Println("This section includes the following packages:")
+		fmt.Println()
+		for _, pkg := range validPackages {
+			if strings.HasPrefix(pkg, "crypto/") {
+				fmt.Printf("- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
+			} else if strings.HasPrefix(pkg, "golang.org/") {
+				fmt.Printf("- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
+			} else {
+				// Fallback
+				fmt.Printf("- %s\n", pkg)
+			}
+		}
+		fmt.Println()
+	}
+
+	// Prepend version requirements to description if present
+	var versionSentences []string
+	if section.MinGoVersion != "" {
+		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting from the Microsoft build of Go %s.", section.Title, section.MinGoVersion))
+	}
+	if section.MinOpenSSLVersion != "" {
+		versionSentences = append(versionSentences, fmt.Sprintf("%s requires OpenSSL %s or later.", section.Title, section.MinOpenSSLVersion))
+	}
+	if section.MinMacOSVersion != "" {
+		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting in macOS %s (Tahoe) or later.", section.Title, section.MinMacOSVersion))
+	}
+	if len(versionSentences) > 0 {
+		fmt.Println(strings.Join(versionSentences, " "))
+		fmt.Println()
+	}
+	if section.Description != "" {
+		fmt.Println(section.Description)
+		fmt.Println()
+	}
+
+	// Subsections list
+	if len(section.Subsections) > 0 {
+		if section.Description == "" {
+			fmt.Println("This section includes the following subsections:")
+			fmt.Println()
+		}
+		for _, sub := range section.Subsections {
+			// Generate anchor link
+			anchor := strings.ToLower(sub.Title)
+			anchor = strings.ReplaceAll(anchor, " ", "-")
+			anchor = strings.ReplaceAll(anchor, "(", "")
+			anchor = strings.ReplaceAll(anchor, ")", "")
+
+			title := sub.Title
+			if sub.ShortTitle != "" {
+				title = sub.ShortTitle
+			}
+			fmt.Printf("- [%s](#%s)\n", title, anchor)
+
+		}
+		fmt.Println()
+	}
+
+	if len(section.Items) > 0 {
+		printTable(section)
+	}
+
+	if section.Footer != "" {
+		fmt.Println(section.Footer)
+		fmt.Println()
+	}
+
+	for _, sub := range section.Subsections {
+		printSection(sub, level+1)
+	}
+}
+
+func printTable(section Section) {
+	colHeader := section.ColumnHeader
+	if colHeader == "" {
+		colHeader = "Algorithm" // Default
+	}
+
+	fmt.Printf("| %s | Windows | Linux | macOS |\n", colHeader)
+
+	// Separator line
+	// I need to match the length of dashes if I want exact diff, but markdown doesn't strictly require it.
+	// The original file had varying lengths.
+	// I'll just use standard lengths.
+	fmt.Println("| --- | --- | --- | --- |")
+
+	// Collect footnotes
+	footnotes := make(map[string]int)
+	nextFootnote := 1
+
+	// Pre-populate from section.Footnotes
+	for _, note := range section.Footnotes {
+		if _, exists := footnotes[note]; !exists {
+			footnotes[note] = nextFootnote
+			nextFootnote++
+		}
+	}
+
+	// Helper to get footnote indices
+	getFootnotes := func(notes []string) string {
+		if len(notes) == 0 {
+			return ""
+		}
+		var indices []int
+		for _, note := range notes {
+			idx, exists := footnotes[note]
+			if !exists {
+				idx = nextFootnote
+				footnotes[note] = idx
+				nextFootnote++
+			}
+			indices = append(indices, idx)
+		}
+		sort.Ints(indices)
+		strs := make([]string, len(indices))
+		for i, idx := range indices {
+			strs[i] = fmt.Sprintf("%d", idx)
+		}
+		return fmt.Sprintf("<sup>%s</sup>", strings.Join(strs, ","))
+	}
+
+	for _, item := range section.Items {
+		name := item.Name
+
+		itemNotes := item.Notes
+		if item.MinGoVersion != "" {
+			note := fmt.Sprintf("Available starting in the Microsoft build of Go %s.", item.MinGoVersion)
+			itemNotes = append([]string{note}, itemNotes...)
+		}
+
+		nameNotes := getFootnotes(itemNotes)
+
+		row := []string{name + nameNotes}
+
+		for _, platform := range []string{"windows", "linux", "macos"} {
+			status := item.Platforms[platform]
+			symbol := ""
+			switch status.Supported {
+			case "N/A":
+				symbol = "N/A"
+			case "true":
+				symbol = "✔️"
+			case "warn":
+				symbol = "⚠️"
+			default:
+				symbol = "❌"
+			}
+
+			statusNotes := status.Notes
+			// Prepend version notes in preferred order: minGoVersion, minOpenSSLVersion, minMacOSVersion
+			var versionNotes []string
+			if status.MinGoVersion != "" {
+				versionNotes = append(versionNotes, fmt.Sprintf("Available starting in the Microsoft build of Go %s.", status.MinGoVersion))
+			}
+			if status.MinOpenSSLVersion != "" {
+				versionNotes = append(versionNotes, fmt.Sprintf("Requires OpenSSL %s or later.", status.MinOpenSSLVersion))
+			}
+			if status.MinMacOSVersion != "" {
+				versionNotes = append(versionNotes, fmt.Sprintf("Requires macOS %s or later.", status.MinMacOSVersion))
+			}
+			// Remove duplicates from notes
+			filtered := []string{}
+			for _, n := range statusNotes {
+				duplicate := false
+				for _, vn := range versionNotes {
+					if n == vn {
+						duplicate = true
+						break
+					}
+				}
+				if !duplicate {
+					filtered = append(filtered, n)
+				}
+			}
+			statusNotes = append(versionNotes, filtered...)
+
+			notes := getFootnotes(statusNotes)
+			row = append(row, symbol+notes)
+		}
+
+		fmt.Printf("| %s | %s | %s | %s |\n", row[0], row[1], row[2], row[3])
+	}
+	fmt.Println()
+
+	// Print footnotes
+	// Sort by index
+	sortedNotes := make([]string, len(footnotes))
+	for note, idx := range footnotes {
+		sortedNotes[idx-1] = note
+	}
+
+	for i, note := range sortedNotes {
+		fmt.Printf("<sup>%d</sup>%s\n\n", i+1, note)
+	}
+}
+
+func validate(doc Document) error {
+	for _, section := range doc.Sections {
+		if err := validateSection(section); err != nil {
+			return err
+		}
+	}
+	return nil
+}
+
+func validateSection(section Section) error {
+	if section.Title == "" {
+		return fmt.Errorf("section missing title")
+	}
+
+	for i := range section.Items {
+		item := &section.Items[i]
+		if item.Name == "" {
+			return fmt.Errorf("item missing name in section %q", section.Title)
+		}
+		if item.Platforms == nil {
+			item.Platforms = make(map[string]PlatformStatus)
+		}
+		for _, p := range []string{"windows", "linux", "macos"} {
+			status, ok := item.Platforms[p]
+			if !ok {
+				status = PlatformStatus{}
+			}
+			if status.Supported == "" {
+				status.Supported = "true"
+			}
+			item.Platforms[p] = status
+			switch status.Supported {
+			case "true", "false", "warn", "N/A":
+				// ok
+			default:
+				return fmt.Errorf("invalid supported status %q for item %q on platform %q", status.Supported, item.Name, p)
+			}
+		}
+	}
+	for _, sub := range section.Subsections {
+		if err := validateSection(sub); err != nil {
+			return err
+		}
+	}
+	return nil
+}
diff --git a/eng/_util/cmd/gencryptodoc/schema.json b/eng/_util/cmd/gencryptodoc/schema.json
new file mode 100644
index 00000000000..ef8f7269c9b
--- /dev/null
+++ b/eng/_util/cmd/gencryptodoc/schema.json
@@ -0,0 +1,79 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "sections": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/section" }
+    }
+  },
+  "definitions": {
+    "section": {
+      "type": "object",
+      "properties": {
+        "title": { "type": "string" },
+        "shortTitle": { "type": "string" },
+        "columnHeader": { "type": "string" },
+        "packages": { "type": "array", "items": { "type": "string" } },
+        "description": { "type": "string" },
+        "items": { "type": "array", "items": { "$ref": "#/definitions/item" } },
+        "minGoVersion": {
+          "type": "string",
+          "description": "The minimum supported Go version e.g 1.24."
+        },
+        "subsections": {
+          "type": "array",
+          "items": { "$ref": "#/definitions/section" }
+        },
+        "footnotes": { "type": "array", "items": { "type": "string" } },
+        "footer": { "type": "string" }
+      },
+      "required": ["title"],
+      "additionalProperties": false
+    },
+    "item": {
+      "type": "object",
+      "properties": {
+        "name": { "type": "string" },
+        "minGoVersion": {
+          "type": "string",
+          "description": "The minimum supported Go version e.g 1.24."
+        },
+        "notes": { "type": "array", "items": { "type": "string" } },
+        "platforms": {
+          "type": "object",
+          "properties": {
+            "windows": { "$ref": "#/definitions/platformStatus" },
+            "linux": { "$ref": "#/definitions/platformStatus" },
+            "macos": { "$ref": "#/definitions/platformStatus" }
+          }
+        }
+      },
+      "required": ["name"],
+      "additionalProperties": false
+    },
+    "platformStatus": {
+      "type": "object",
+      "properties": {
+        "supported": {
+          "type": "string",
+          "enum": ["false", "warn", "N/A"]
+        },
+        "minGoVersion": {
+          "type": "string",
+          "description": "The minimum supported Go version e.g 1.24."
+        },
+        "minOpenSSLVersion": {
+          "type": "string",
+          "description": "The minimum supported OpenSSL version e.g 1.1.1."
+        },
+        "minMacOSVersion": {
+          "type": "string",
+          "description": "The minimum supported macOS version e.g 26."
+        },
+        "notes": { "type": "array", "items": { "type": "string" } }
+      },
+      "additionalProperties": false
+    }
+  }
+}
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 1492ecfaea2..99cd629e88e 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -1,3 +1,5 @@
+<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->
+
 # Cross-Platform Cryptography in the Microsoft build of Go
 
 Cryptographic operations in the Microsoft build of Go are delegated to the operating system (OS) libraries in some conditions.
@@ -26,9 +28,9 @@ OpenSSL 3 implements all the cryptographic algorithms using [Providers](https://
 The Microsoft build of Go officially supports the built-in providers and [SCOSSL (SymCrypt provider for OpenSSL)](https://github.com/microsoft/SymCrypt-OpenSSL) v1.6.1 or later.
 SCOSSL is expected to be used with the default built-in provider enabled as a fallback (which is the case when using [Azure Linux 3](https://github.com/microsoft/AzureLinux)).
 
-## macOS
+### macOS
 
-On macOS, th Microsoft build Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
+On macOS, the Microsoft build of Go uses [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) for cryptographic operations.
 CommonCrypto and CryptoKit are shipped with macOS and don't require any additional installation nor configuration.
 Currently macOS 13 and above is supported.
 
@@ -52,28 +54,28 @@ This section includes the following packages:
 - [crypto/sha1](https://pkg.go.dev/crypto/sha1)
 - [crypto/sha256](https://pkg.go.dev/crypto/sha256)
 - [crypto/sha512](https://pkg.go.dev/crypto/sha512)
-- [crypto/sha3](https://pkg.go.dev/golang.org/x/crypto/sha3)
+- [crypto/sha3](https://pkg.go.dev/crypto/sha3)
 - [crypto/hmac](https://pkg.go.dev/crypto/hmac)
 
-| Algorithm              | Windows         | Linux             | macOS           |
-| ---------------------- | --------------- | ----------------- | --------------- |
-| MD5                    | ✔️              | ✔️                | ✔️              |
-| SHA-1                  | ✔️              | ✔️                | ✔️              |
-| SHA-2-224              | ❌              | ✔️                | ✔️              |
-| SHA-2-256              | ✔️              | ✔️                | ✔️              |
-| SHA-2-384              | ✔️              | ✔️                | ✔️              |
-| SHA-2-512              | ✔️              | ✔️                | ✔️              |
-| SHA-2-512_224          | ❌              | ✔️<sup>1, 2</sup> | ❌              |
-| SHA-2-512_256          | ❌              | ✔️<sup>1, 2</sup> | ❌              |
-| SHA-3-224 <sup>3</sup> | ❌              | ✔️ <sup>2</sup>   | ❌              |
-| SHA-3-256 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
-| SHA-3-384 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
-| SHA-3-512 <sup>3</sup> | ✔️ <sup>4</sup> | ✔️ <sup>2</sup>   | ✔️ <sup>5</sup> |
-| SHAKE-128              | ✔️              | ✔️ <sup>7</sup>   | ❌              |
-| SHAKE-256              | ✔️              | ✔️ <sup>7</sup>   | ❌              |
-| CSHAKE-128             | ✔️              | ❌                | ❌              |
-| CSHAKE-256             | ✔️              | ❌                | ❌              |
-| HMAC<sup>6</sup>       | ✔️              | ✔️                | ✔️              |
+| Algorithm             | Windows        | Linux            | macOS          |
+| --------------------- | -------------- | ---------------- | -------------- |
+| MD5                   | ✔️             | ✔️               | ✔️             |
+| SHA-1                 | ✔️             | ✔️               | ✔️             |
+| SHA-2-224             | ❌             | ✔️               | ✔️             |
+| SHA-2-256             | ✔️             | ✔️               | ✔️             |
+| SHA-2-384             | ✔️             | ✔️               | ✔️             |
+| SHA-2-512             | ✔️             | ✔️               | ✔️             |
+| SHA-2-512_224         | ❌             | ✔️<sup>1,2</sup> | ❌             |
+| SHA-2-512_256         | ❌             | ✔️<sup>1,2</sup> | ❌             |
+| SHA-3-224<sup>3</sup> | ❌             | ✔️<sup>2</sup>   | ❌             |
+| SHA-3-256<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
+| SHA-3-384<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
+| SHA-3-512<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
+| SHAKE-128             | ✔️             | ✔️<sup>6</sup>   | ❌             |
+| SHAKE-256             | ✔️             | ✔️<sup>6</sup>   | ❌             |
+| CSHAKE-128            | ✔️             | ❌               | ❌             |
+| CSHAKE-256            | ✔️             | ❌               | ❌             |
+| HMAC<sup>7</sup>      | ✔️             | ✔️               | ✔️             |
 
 <sup>1</sup>Available starting in the Microsoft build of Go 1.24.
 
@@ -83,11 +85,11 @@ This section includes the following packages:
 
 <sup>4</sup>Available in Windows 11, version 24H2 or later.
 
-<sup>5</sup>Available starting in macOS 26 (Tahoe).
+<sup>5</sup>Requires macOS 26 or later.
 
-<sup>6</sup>Supports only hash algorithms that are supported as standalone hash functions.
+<sup>6</sup>Requires OpenSSL 3.3 or later.
 
-<sup>7</sup>Requires OpenSSL 3.3 or later.
+<sup>7</sup>Supports only hash algorithms that are supported as standalone hash functions.
 
 ## Symmetric encryption
 
@@ -105,16 +107,16 @@ This section includes the following packages:
 | AES-CTR             | ❌      | ✔️             | ❌    |
 | AES-CFB             | ❌      | ❌             | ❌    |
 | AES-OFB             | ❌      | ❌             | ❌    |
-| AES-GCM<sup>2</sup> | ✔️      | ✔️             | ✔️    |
-| DES-CBC             | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| DES-ECB             | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| AES-GCM<sup>1</sup> | ✔️      | ✔️             | ✔️    |
+| DES-CBC             | ✔️      | ⚠️<sup>2</sup> | ✔️    |
+| DES-ECB             | ✔️      | ⚠️<sup>2</sup> | ✔️    |
 | 3DES-ECB            | ✔️      | ✔️             | ✔️    |
 | 3DES-CBC            | ✔️      | ✔️             | ✔️    |
-| RC4                 | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| RC4                 | ✔️      | ⚠️<sup>2</sup> | ✔️    |
 
-<sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
+<sup>1</sup>AES-GCM supports specific keys, nonces, and tags:
 
-<sup>2</sup>AES-GCM supports specific keys, nonces, and tags:
+<sup>2</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
 - Key Sizes
 
@@ -156,32 +158,32 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 | Padding Mode                           | Windows        | Linux          | macOS          |
 | -------------------------------------- | -------------- | -------------- | -------------- |
-| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>5</sup> |
-| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>5</sup> |
-| OAEP (SHA-2)<sup>1</sup>               | ✔️             | ✔️             | ✔️<sup>5</sup> |
+| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>1</sup> |
+| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>1</sup> |
+| OAEP (SHA-2)<sup>2</sup>               | ✔️             | ✔️             | ✔️<sup>1</sup> |
 | OAEP (SHA-3)                           | ❌             | ❌             | ❌             |
 | PSS (MD5)                              | ✔️<sup>3</sup> | ✔️             | ❌             |
 | PSS (SHA-1)                            | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
-| PSS (SHA-2)<sup>1</sup>                | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
+| PSS (SHA-2)<sup>2</sup>                | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
 | PSS (SHA-3)                            | ❌             | ❌             | ❌             |
 | PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>2</sup> | ❌             |
-| PKCS1v15 Signature (MD4)               | ❌             | ✔️<sup>2</sup> | ❌             |
+| PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>5</sup> | ❌             |
+| PKCS1v15 Signature (MD4)               | ❌             | ✔️<sup>5</sup> | ❌             |
 | PKCS1v15 Signature (MD5)               | ✔️             | ✔️             | ❌             |
-| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>2</sup> | ✔️<sup>2</sup> | ❌             |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>5</sup> | ✔️<sup>5</sup> | ❌             |
 | PKCS1v15 Signature (SHA-1)             | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (SHA-2)<sup>1</sup> | ✔️             | ✔️             | ✔️             |
+| PKCS1v15 Signature (SHA-2)<sup>2</sup> | ✔️             | ✔️             | ✔️             |
 | PKCS1v15 Signature (SHA-3)             | ❌             | ❌             | ❌             |
 
-<sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
+<sup>1</sup>macOS doesn't support passing a custom label to OAEP functions.
 
-<sup>2</sup>Available starting in the Microsoft build of Go 1.24.
+<sup>2</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
 <sup>3</sup>On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
 
 <sup>4</sup>On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
 
-<sup>5</sup>macOS doesn't support passing a custom label to OAEP functions.
+<sup>5</sup>Available starting in the Microsoft build of Go 1.24.
 
 ### ECDSA
 
@@ -203,14 +205,12 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 This section includes the following packages:
 
-- [crypto/ecdh](https://pkg.go.dev/crypto/ecdsa)
+- [crypto/ecdh](https://pkg.go.dev/crypto/ecdh)
 
 Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
 
-X25519 is available starting from the Microsoft build of Go 1.26.
-
-| Elliptic Curve                  | Windows | Linux           | macOS |
-| ------------------------------- | ------- | --------------- | ----- |
+| Elliptic Curve                  | Windows | Linux          | macOS |
+| ------------------------------- | ------- | -------------- | ----- |
 | NIST P-224 (secp224r1)          | ✔️      | ✔️             | ❌    |
 | NIST P-256 (secp256r1)          | ✔️      | ✔️             | ✔️    |
 | NIST P-384 (secp384r1)          | ✔️      | ✔️             | ✔️    |
@@ -251,10 +251,10 @@ This section includes the following packages:
 - [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
 - [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
 
-| Functions | Windows         | Linux            | macOS           |
-| --------- | --------------- | ---------------- | --------------- |
-| PBKDF2    | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
-| HKDF      | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> | ✔️ <sup>1</sup> |
+| Functions | Windows        | Linux          | macOS          |
+| --------- | -------------- | -------------- | -------------- |
+| PBKDF2    | ✔️<sup>1</sup> | ✔️<sup>1</sup> | ✔️<sup>1</sup> |
+| HKDF      | ✔️<sup>1</sup> | ✔️<sup>1</sup> | ✔️<sup>1</sup> |
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
@@ -272,16 +272,16 @@ This section includes the following packages:
 
 ML-KEM is available starting from the Microsoft build of Go 1.26.
 
-| Parameters | Windows         | Linux            | macOS           |
-| ---------- | --------------- | ---------------- | --------------- |
-| 768        | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
-| 1024       | ✔️ <sup>1</sup> | ✔️ <sup>2</sup> | ✔️ <sup>3</sup> |
+| Parameters | Windows        | Linux          | macOS          |
+| ---------- | -------------- | -------------- | -------------- |
+| 768        | ✔️<sup>1</sup> | ✔️<sup>2</sup> | ✔️<sup>3</sup> |
+| 1024       | ✔️<sup>1</sup> | ✔️<sup>2</sup> | ✔️<sup>3</sup> |
 
 <sup>1</sup>Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.
 
 <sup>2</sup>Requires OpenSSL 3.5.0 or later.
 
-<sup>3</sup>Requires macOS 26 (Tahoe) or later.
+<sup>3</sup>Requires macOS 26 or later.
 
 ## Higher-level protocols
 
@@ -292,51 +292,51 @@ These protocols are implemented using native Go code, but they rely on the under
 
 This section includes the following subsections:
 
-- [HPKE](#hybrid-public-key-encryption-hpke)
+- [Hybrid Public Key Encryption (HPKE)](#hybrid-public-key-encryption-hpke)
 - [TLS](#tls)
 
 ### Hybrid Public Key Encryption (HPKE)
 
+This section includes the following packages:
+
+- [crypto/hpke](https://pkg.go.dev/crypto/hpke)
+
 This section includes the following subsections:
 
 - [AEAD Functions](#hpke-authenticated-encryption-with-associated-data-aead-functions)
 - [KDFs](#hpke-key-derivation-functions-kdfs)
 - [KEMs](#hpke-key-encapsulation-mechanisms-kems)
 
-This section includes the following packages:
-
-- [crypto/hpke](https://pkg.go.dev/crypto/hpke)
-
 #### HPKE Authenticated Encryption with Associated Data (AEAD) Functions
 
 | Functions        | Windows | Linux | macOS |
-| ---------------- | ------- | ----- | ------|
-| AES-128-GCM      | ✔️     | ✔️    | ✔️   |
-| AES-256-GCM      | ✔️     | ✔️    | ✔️   |
-| ChaCha20Poly1305 | ❌     | ❌    | ❌   |
-| Export-only      | N/A    | N/A    | N/A  |
+| ---------------- | ------- | ----- | ----- |
+| AES-128-GCM      | ✔️      | ✔️    | ✔️    |
+| AES-256-GCM      | ✔️      | ✔️    | ✔️    |
+| ChaCha20Poly1305 | ❌      | ❌    | ❌    |
+| Export-only      | N/A     | N/A   | N/A   |
 
 #### HPKE Key Derivation Functions (KDFs)
 
 | Functions   | Windows | Linux | macOS |
-| ------------| ------- | ----- | ------|
-| HKDF-SHA256 | ✔️     | ✔️    | ✔️   |
-| HKDF-SHA384 | ✔️     | ✔️    | ✔️   |
-| HKDF-SHA512 | ✔️     | ✔️    | ✔️   |
+| ----------- | ------- | ----- | ----- |
+| HKDF-SHA256 | ✔️      | ✔️    | ✔️    |
+| HKDF-SHA384 | ✔️      | ✔️    | ✔️    |
+| HKDF-SHA512 | ✔️      | ✔️    | ✔️    |
 
 #### HPKE Key Encapsulation Mechanisms (KEMs)
 
 | Functions                              | Windows | Linux | macOS |
-| ---------------------------------------| ------- | ----- | ------|
-| DHKEM(P-256, HKDF-SHA256)              | ✔️     | ✔️    | ✔️   |
-| DHKEM(P-384, HKDF-SHA384)              | ✔️     | ✔️    | ✔️   |
-| DHKEM(P-521, HKDF-SHA512)              | ✔️     | ✔️    | ✔️   |
-| DHKEM(X25519, HKDF-SHA256)<sup>1</sup> | ✔️     | ✔️    | ✔️   |
-| ML-KEM-768<sup>2</sup>                 | ✔️     | ✔️    | ✔️   |
-| ML-KEM-1024<sup>2</sup>                | ✔️     | ✔️    | ✔️   |
-| MLKEM768-P256<sup>2</sup>              | ✔️     | ✔️    | ✔️   |
-| MLKEM1024-P384<sup>2</sup>             | ✔️     | ✔️    | ✔️   |
-| MLKEM768-X25519<sup>1,2</sup>          | ✔️     | ✔️    | ✔️   |
+| -------------------------------------- | ------- | ----- | ----- |
+| DHKEM(P-256, HKDF-SHA256)              | ✔️      | ✔️    | ✔️    |
+| DHKEM(P-384, HKDF-SHA384)              | ✔️      | ✔️    | ✔️    |
+| DHKEM(P-521, HKDF-SHA512)              | ✔️      | ✔️    | ✔️    |
+| DHKEM(X25519, HKDF-SHA256)<sup>1</sup> | ✔️      | ✔️    | ✔️    |
+| ML-KEM-768<sup>2</sup>                 | ✔️      | ✔️    | ✔️    |
+| ML-KEM-1024<sup>2</sup>                | ✔️      | ✔️    | ✔️    |
+| MLKEM768-P256<sup>2</sup>              | ✔️      | ✔️    | ✔️    |
+| MLKEM1024-P384<sup>2</sup>             | ✔️      | ✔️    | ✔️    |
+| MLKEM768-X25519<sup>1,2</sup>          | ✔️      | ✔️    | ✔️    |
 
 <sup>1</sup>See the [X25519](#ecdh) section for requirements.
 
@@ -344,6 +344,10 @@ This section includes the following packages:
 
 ### TLS
 
+This section includes the following packages:
+
+- [crypto/tls](https://pkg.go.dev/crypto/tls)
+
 This section includes the following subsections:
 
 - [TLS Versions](#tls-versions)
@@ -351,10 +355,6 @@ This section includes the following subsections:
 - [TLS Curves and Groups](#tls-curves-and-groups)
 - [TLS Signature Schemes](#tls-signature-schemes)
 
-This section includes the following packages:
-
-- [crypto/tls](https://pkg.go.dev/crypto/tls)
-
 #### TLS Versions
 
 The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.
@@ -409,14 +409,14 @@ On Windows, it is possible to restrict and reorder the cipher suites following t
 Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).
 
 | Name                           | Windows | Linux | macOS |
-| ------------------------------ | ------- | ------| ----- |
-| CurveP256                      | ✔️      | ✔️   | ✔️    |
-| CurveP384                      | ✔️      | ✔️   | ✔️    |
-| CurveP521                      | ✔️      | ✔️   | ✔️    |
-| X25519<sup>1</sup>             | ✔️      | ✔️   | ✔️    |
-| X25519MLKEM768<sup>1,2</sup>   | ✔️      | ✔️   | ✔️    |
-| SecP256r1MLKEM768<sup>2</sup>  | ✔️      | ✔️   | ✔️    |
-| SecP384r1MLKEM1024<sup>2</sup> | ✔️      | ✔️   | ✔️    |
+| ------------------------------ | ------- | ----- | ----- |
+| CurveP256                      | ✔️      | ✔️    | ✔️    |
+| CurveP384                      | ✔️      | ✔️    | ✔️    |
+| CurveP521                      | ✔️      | ✔️    | ✔️    |
+| X25519<sup>1</sup>             | ✔️      | ✔️    | ✔️    |
+| X25519MLKEM768<sup>1,2</sup>   | ✔️      | ✔️    | ✔️    |
+| SecP256r1MLKEM768<sup>2</sup>  | ✔️      | ✔️    | ✔️    |
+| SecP384r1MLKEM1024<sup>2</sup> | ✔️      | ✔️    | ✔️    |
 
 <sup>1</sup>See the [X25519](#ecdh) section for requirements.
 

From e5cac2cd7825d363adeac7c86d9681e0750e01c1 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 11 Dec 2025 13:47:51 +0100
Subject: [PATCH 615/887] Set ms-go-build as default GOCACHE (#1998)

* set ms-go-build as default GOCACHE

* fix test

* fix test
---
 ...1-Set-ms-go-build-as-default-GOCACHE.patch | 58 +++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 patches/0011-Set-ms-go-build-as-default-GOCACHE.patch

diff --git a/patches/0011-Set-ms-go-build-as-default-GOCACHE.patch b/patches/0011-Set-ms-go-build-as-default-GOCACHE.patch
new file mode 100644
index 00000000000..1d3307bae3d
--- /dev/null
+++ b/patches/0011-Set-ms-go-build-as-default-GOCACHE.patch
@@ -0,0 +1,58 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Thu, 11 Dec 2025 09:06:17 +0100
+Subject: [PATCH] Set ms-go-build as default GOCACHE
+
+Use a Microsoft-specific directory for Go build cache to avoid conflicts
+with other Go toolchains.
+---
+ src/cmd/go/internal/cache/default.go       | 2 +-
+ src/cmd/go/testdata/script/cache_unix.txt  | 4 ++--
+ src/cmd/go/testdata/script/env_changed.txt | 2 +-
+ 3 files changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/cmd/go/internal/cache/default.go b/src/cmd/go/internal/cache/default.go
+index cc4e0517b4a12d..442d7a5dd634df 100644
+--- a/src/cmd/go/internal/cache/default.go
++++ b/src/cmd/go/internal/cache/default.go
+@@ -84,7 +84,7 @@ func DefaultDir() (string, bool, error) {
+ 			defaultDir = "off"
+ 			defaultDirErr = fmt.Errorf("GOCACHE is not defined and %v", err)
+ 		} else {
+-			defaultDir = filepath.Join(dir, "go-build")
++			defaultDir = filepath.Join(dir, "ms-go-build")
+ 		}
+ 
+ 		newDir := cfg.Getenv("GOCACHE")
+diff --git a/src/cmd/go/testdata/script/cache_unix.txt b/src/cmd/go/testdata/script/cache_unix.txt
+index e11804d39abebd..a1a088884a174c 100644
+--- a/src/cmd/go/testdata/script/cache_unix.txt
++++ b/src/cmd/go/testdata/script/cache_unix.txt
+@@ -23,12 +23,12 @@ stdout $WORK'/gocache$'
+ # Without GOCACHE, we should prefer XDG_CACHE_HOME over HOME.
+ env GOCACHE=
+ go env GOCACHE
+-stdout $WORK'/xdg/go-build$$'
++stdout $WORK'/xdg/ms-go-build$$'
+ 
+ # With only HOME set, we should use $HOME/.cache.
+ env XDG_CACHE_HOME=
+ go env GOCACHE
+-stdout $WORK'/home/.cache/go-build$'
++stdout $WORK'/home/.cache/ms-go-build$'
+ 
+ # With no guidance from the environment, we must disable the cache, but that
+ # should not cause commands that do not write to the cache to fail.
+diff --git a/src/cmd/go/testdata/script/env_changed.txt b/src/cmd/go/testdata/script/env_changed.txt
+index da9560062704e6..fda4a1354dad82 100644
+--- a/src/cmd/go/testdata/script/env_changed.txt
++++ b/src/cmd/go/testdata/script/env_changed.txt
+@@ -74,7 +74,7 @@ go env -changed
+ ! stdout 'GOTOOLCHAIN=''?local''?'
+ 
+ [GOOS:windows] env LocalAppData=C:\
+-[GOOS:windows] env GOCACHE=C:\go-build
++[GOOS:windows] env GOCACHE=C:\ms-go-build
+ [GOOS:windows] go env -changed
+ [GOOS:windows] ! stdout 'GOCACHE'
+ 

From ca88f4428dab3007ff658f3309ff08df0612ec47 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 12 Dec 2025 13:25:20 +0000
Subject: [PATCH 616/887] Update submodule to latest master (927c89bb):
 cmd/compile: update ABI document for riscv64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 36bca3166e1..927c89bbc5c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 36bca3166e18db52687a4d91ead3f98ffe6d00b8
+Subproject commit 927c89bbc5cc7366e86ecbb0f77267435b1d6d2c

From 1505b780e620e93a681b1ac2804e0940fb9b2cda Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 12 Dec 2025 13:31:58 +0000
Subject: [PATCH 617/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 24 ++++-----
 patches/0004-Use-crypto-backends.patch        | 52 +++++++++----------
 2 files changed, 38 insertions(+), 38 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 0923093b1e9..a9cd3bc0b7b 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -413,7 +413,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 9a1a38bccca6b5..baec579dcd88ae 100644
+index c7d3cc6136b549..dcabaf112309f9 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
@@ -426,7 +426,7 @@ index 9a1a38bccca6b5..baec579dcd88ae 100644
  	golang.org/x/build v0.0.0-20251128064159-b9bfd88b30e8
  	golang.org/x/mod v0.30.1-0.20251115032019-269c237cf350
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 52d55d81732f7f..8355016445f49b 100644
+index b02c469a41d244..7f16513fcb58c7 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLx
@@ -2022,7 +2022,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 8641f2dca3dde8..1e548335058dbc 100644
+index 7c122cd9d171bf..96472efdde403d 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2072,12 +2072,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f79455c970ecb2..28266d4c27fdd0 100644
+index efc07451b53448..726a58d381c07c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.38.1-0.20251125153526-08e54827f670 // indirect
- 	golang.org/x/text v0.31.1-0.20251128220601-087616b6cde9 // indirect
+ 	golang.org/x/sys v0.39.0 // indirect
+ 	golang.org/x/text v0.32.0 // indirect
  )
 +
 +require (
@@ -2086,7 +2086,7 @@ index f79455c970ecb2..28266d4c27fdd0 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index e2cf9591bc56dc..8fdadf30f50da2 100644
+index b6b841b44d8e38..dfc8d0b2794286 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2096,11 +2096,11 @@ index e2cf9591bc56dc..8fdadf30f50da2 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
- golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
- golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
+ golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
+ golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index d58bd294cd103c..6be3675bde3e07 100644
+index f4b7e9dae5f3ae..ec7221ba7150dd 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -548,16 +548,51 @@ var depsRules = `
@@ -32564,7 +32564,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 7932adddfaa1c5..ca009c3e43044e 100644
+index b6f6376eac041a..ed909c054ed7dc 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,24 @@
@@ -32589,6 +32589,6 @@ index 7932adddfaa1c5..ca009c3e43044e 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.45.0
+ # golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00
  ## explicit; go 1.24.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 76185244794..049417ea91f 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -126,7 +126,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 2a27d97990fa57..4a1d3b91d701bb 100644
+index 2cbf77a59e63dd..855c1155c7f05a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -451,7 +451,7 @@ index 88892e155551b3..675dbed240e8af 100644
  // theoretically support. It's a copy of the generic implementation from
  // crypto/internal/fips140/aes/gcm/gcm_generic.go, refer to that file for more details.
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index fe6bf5506e5a10..c36407ab5b5b4d 100644
+index 8daa0ded22e176..eeb5cf0f904b55 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
 @@ -8,7 +8,6 @@ import (
@@ -462,7 +462,7 @@ index fe6bf5506e5a10..c36407ab5b5b4d 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	fipsaes "crypto/internal/fips140/aes"
-@@ -727,9 +726,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
+@@ -728,9 +727,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
  
  			// Test NewGCMWithRandomNonce.
  			t.Run("GCMWithRandomNonce", func(t *testing.T) {
@@ -477,7 +477,7 @@ index fe6bf5506e5a10..c36407ab5b5b4d 100644
  				cryptotest.TestAEAD(t, func() (cipher.AEAD, error) { return cipher.NewGCMWithRandomNonce(block) })
  			})
  		})
-@@ -752,7 +755,7 @@ func TestGCMExtraMethods(t *testing.T) {
+@@ -753,7 +756,7 @@ func TestGCMExtraMethods(t *testing.T) {
  		})
  		t.Run("NewGCMWithRandomNonce", func(t *testing.T) {
  			block := newCipher(make([]byte, 16))
@@ -806,7 +806,7 @@ index 3f85a2833697a9..a5717e22db8d78 100644
  	"crypto/subtle"
  	"errors"
 diff --git a/src/crypto/ecdh/ecdh_test.go b/src/crypto/ecdh/ecdh_test.go
-index 8a3eb87061ad8c..2215e4f42eeea1 100644
+index cfa919ade97ad0..40e316387173dc 100644
 --- a/src/crypto/ecdh/ecdh_test.go
 +++ b/src/crypto/ecdh/ecdh_test.go
 @@ -9,6 +9,7 @@ import (
@@ -817,7 +817,7 @@ index 8a3eb87061ad8c..2215e4f42eeea1 100644
  	"crypto/rand"
  	"crypto/sha256"
  	"encoding/hex"
-@@ -208,13 +209,17 @@ func TestX25519Failure(t *testing.T) {
+@@ -207,13 +208,17 @@ func TestX25519Failure(t *testing.T) {
  }
  
  func testX25519Failure(t *testing.T, private, public []byte) {
@@ -836,7 +836,7 @@ index 8a3eb87061ad8c..2215e4f42eeea1 100644
  	}
  	secret, err := priv.ECDH(pub)
  	if err == nil {
-@@ -280,6 +285,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
+@@ -279,6 +284,9 @@ var invalidPrivateKeys = map[ecdh.Curve][]string{
  }
  
  func TestNewPrivateKey(t *testing.T) {
@@ -846,7 +846,7 @@ index 8a3eb87061ad8c..2215e4f42eeea1 100644
  	testAllCurves(t, func(t *testing.T, curve ecdh.Curve) {
  		for _, input := range invalidPrivateKeys[curve] {
  			k, err := curve.NewPrivateKey(hexDecode(t, input))
-@@ -365,7 +373,12 @@ func testAllCurves(t *testing.T, f func(t *testing.T, curve ecdh.Curve)) {
+@@ -364,7 +372,12 @@ func testAllCurves(t *testing.T, f func(t *testing.T, curve ecdh.Curve)) {
  	t.Run("P256", func(t *testing.T) { f(t, ecdh.P256()) })
  	t.Run("P384", func(t *testing.T) { f(t, ecdh.P384()) })
  	t.Run("P521", func(t *testing.T) { f(t, ecdh.P521()) })
@@ -1379,27 +1379,27 @@ index 00000000000000..77b69a3be88183
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/enforcement_test.go b/src/crypto/fips140/enforcement_test.go
-index 708c7f7a15ee9e..f77c536b58daec 100644
+index c2f66d544bfbd0..a1eb9bcecbf621 100644
 --- a/src/crypto/fips140/enforcement_test.go
 +++ b/src/crypto/fips140/enforcement_test.go
-@@ -5,6 +5,7 @@
- package fips140_test
- 
+@@ -7,6 +7,7 @@ package fips140_test
  import (
+ 	"crypto/des"
+ 	"crypto/fips140"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"internal/testenv"
- 	"path/filepath"
-@@ -13,6 +14,9 @@ import (
- )
+ 	"testing"
+@@ -26,6 +27,9 @@ func isAllowed() bool {
+ }
  
  func TestWithoutEnforcement(t *testing.T) {
 +	if boring.Enabled {
 +		t.Skip("GODEBUG=fips140=only not supported")
 +	}
- 	testenv.MustHaveExec(t)
- 	testenv.MustHaveGoBuild(t)
  	cryptotest.MustSupportFIPS140(t)
+ 	if !fips140.Enforced() {
+ 		cmd := testenv.Command(t, testenv.Executable(t), "-test.run=^TestWithoutEnforcement$", "-test.v")
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
 index f44f3b399b2f05..041081f54744b1 100644
 --- a/src/crypto/fips140/fips140.go
@@ -1591,7 +1591,7 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"internal/goarch"
  	"internal/goos"
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 05dde352191ff4..12acf0c76996ba 100644
+index e94bab74fd5774..31a3cee82c5391 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1601,7 +1601,7 @@ index 05dde352191ff4..12acf0c76996ba 100644
 +	boring "crypto/internal/backend"
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/cryptotest"
- 	"crypto/internal/entropy/v1.0.0"
+ 	entropy "crypto/internal/entropy/v1.0.0"
  	"crypto/internal/fips140"
 @@ -2105,6 +2107,10 @@ func cmdKtsIfcResponderAft(h func() hash.Hash) command {
  func TestACVP(t *testing.T) {
@@ -1615,7 +1615,7 @@ index 05dde352191ff4..12acf0c76996ba 100644
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20251111011041-baaf868e6e8f"
 diff --git a/src/crypto/internal/fips140test/cast_test.go b/src/crypto/internal/fips140test/cast_test.go
-index 1978356ea5d8e3..be2b3ef3a2ce57 100644
+index 5a80006622c4c2..571f076afa2cbd 100644
 --- a/src/crypto/internal/fips140test/cast_test.go
 +++ b/src/crypto/internal/fips140test/cast_test.go
 @@ -160,6 +160,7 @@ func TestConditionals(t *testing.T) {
@@ -1624,16 +1624,16 @@ index 1978356ea5d8e3..be2b3ef3a2ce57 100644
  func TestCASTPasses(t *testing.T) {
 +	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
  	moduleStatus(t)
- 	testenv.MustHaveExec(t)
  	cryptotest.MustSupportFIPS140(t)
-@@ -184,6 +185,7 @@ func TestCASTPasses(t *testing.T) {
+ 
+@@ -183,6 +184,7 @@ func TestCASTPasses(t *testing.T) {
  }
  
  func TestCASTFailures(t *testing.T) {
 +	t.Skip("Skipping because Microsoft build of Go doesn't support CAST.")
  	moduleStatus(t)
- 	testenv.MustHaveExec(t)
  	cryptotest.MustSupportFIPS140(t)
+ 
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
 index 52fc9d34886003..9afaf522df475c 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
@@ -2114,7 +2114,7 @@ index eb0ed14e243c6b..cd7223c89eeae5 100644
  	// 32-bit platforms), since the max value for keyLength is 1<<31-1 and
  	// 1<<31-1 * hLen will always be less than 1<<32-1 * hLen.
 diff --git a/src/crypto/purego_test.go b/src/crypto/purego_test.go
-index 62be347e0c6822..d284b5cf7814a6 100644
+index ebc9110cecee82..aa4aec046795cf 100644
 --- a/src/crypto/purego_test.go
 +++ b/src/crypto/purego_test.go
 @@ -41,7 +41,7 @@ func TestPureGoTag(t *testing.T) {
@@ -2140,7 +2140,7 @@ index 018fe013cef600..ec710c6f935e3b 100644
  	"crypto/internal/rand"
  	"io"
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
-index 22ccb8a35334c9..832910da482f44 100644
+index 3bb3d5f1acda25..cd4b55de7c48cb 100644
 --- a/src/crypto/rand/rand_test.go
 +++ b/src/crypto/rand/rand_test.go
 @@ -7,6 +7,7 @@ package rand
@@ -3905,7 +3905,7 @@ index f9bd313737e21b..04548c961e74a8 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b581b443d6429b..e989e2394ce3ed 100644
+index aa7f419a5d74cc..c500e8bf2a0cf5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -538,7 +538,7 @@ var depsRules = `

From b0ea6e6495533e91ff73ac861b6ce42084ba4965 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 12 Dec 2025 13:38:31 +0000
Subject: [PATCH 618/887] build(deps): bump github/codeql-action from 4.31.7 to
 4.31.8 (#1999)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.7 to 4.31.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...1b168cd39490f61582a9beae412bb7057a6b2c4e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 3bb3a904d7c..f7a67be1e9f 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           category: /language:go

From 5e26e8845db78ae7f921a476f7ed9032609cd3ed Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 15 Dec 2025 11:34:41 +0100
Subject: [PATCH 619/887] Add ms_tlsx25519 godebug to opt-out from X25519
 (#2002)

* add ms_tlsx25519 godebug to opt-out from X25519

* simplify defaultCurvePreferences

* fix test

* fix docs
---
 ...TLS-settings-with-Microsoft-policies.patch | 98 +++++++++++++++++++
 1 file changed, 98 insertions(+)
 create mode 100644 patches/0012-align-TLS-settings-with-Microsoft-policies.patch

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
new file mode 100644
index 00000000000..d4c48141d23
--- /dev/null
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -0,0 +1,98 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 12 Dec 2025 16:46:44 +0100
+Subject: [PATCH] align TLS settings with Microsoft policies
+
+---
+ doc/godebug.md                 |  4 ++++
+ src/crypto/tls/defaults.go     | 10 +++++++++-
+ src/crypto/tls/tls_test.go     | 24 ++++++++++++++++++++++++
+ src/internal/godebugs/table.go |  1 +
+ 4 files changed, 38 insertions(+), 1 deletion(-)
+
+diff --git a/doc/godebug.md b/doc/godebug.md
+index 28a2dc506ef8ff..8be51c6a136df6 100644
+--- a/doc/godebug.md
++++ b/doc/godebug.md
+@@ -183,6 +183,10 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
+ to `cryptocustomrand=0`, ignoring the random parameters. Using `cryptocustomrand=1`
+ reverts to the pre-Go 1.26 behavior.
+ 
++Microsoft build of Go 1.26 added a new `ms_tlsx25519` setting that controls whether
++`crypto/tls` enables the X25519 and X25519MLKEM768 TLS groups by default. Setting
++`ms_tlsx25519=0` disables these groups. The default value is `ms_tlsx25519=1`.
++
+ ### Go 1.25
+ 
+ Go 1.25 added a new `decoratemappings` setting that controls whether the Go
+diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
+index 8de8d7e0934b07..0ba8d3ebf0d6e4 100644
+--- a/src/crypto/tls/defaults.go
++++ b/src/crypto/tls/defaults.go
+@@ -15,10 +15,18 @@ import (
+ 
+ var tlsmlkem = godebug.New("tlsmlkem")
+ var tlssecpmlkem = godebug.New("tlssecpmlkem")
++var ms_tlsx25519 = godebug.New("ms_tlsx25519")
+ 
+ // defaultCurvePreferences is the default set of supported key exchanges, as
+ // well as the preference order.
+-func defaultCurvePreferences() []CurveID {
++func defaultCurvePreferences() (groups []CurveID) {
++	defer func() {
++		if ms_tlsx25519.Value() == "0" {
++			groups = slices.DeleteFunc(groups, func(c CurveID) bool {
++				return c == X25519 || c == X25519MLKEM768
++			})
++		}
++	}()
+ 	switch {
+ 	// tlsmlkem=0 restores the pre-Go 1.24 default.
+ 	case tlsmlkem.Value() == "0":
+diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
+index 5f4a2b9de4fd1f..98726c6e9509d5 100644
+--- a/src/crypto/tls/tls_test.go
++++ b/src/crypto/tls/tls_test.go
+@@ -2113,6 +2113,30 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			expectClient:   []CurveID{X25519MLKEM768, X25519, CurveP256, CurveP384, CurveP521},
+ 			expectSelected: X25519MLKEM768,
+ 		},
++		{
++			name: "GODEBUG ms_tlsx25519=0",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0")
++			},
++			expectClient:   []CurveID{SecP256r1MLKEM768, SecP384r1MLKEM1024, CurveP256, CurveP384, CurveP521},
++			expectSelected: SecP256r1MLKEM768,
++		},
++		{
++			name: "GODEBUG ms_tlsx25519=0 and tlsmlkem=0",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlsmlkem=0")
++			},
++			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
++			expectSelected: CurveP256,
++		},
++		{
++			name: "GODEBUG ms_tlsx25519=0 and tlssecpmlkem=0",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlssecpmlkem=0")
++			},
++			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
++			expectSelected: CurveP256,
++		},
+ 	}
+ 
+ 	baseConfig := testConfig.Clone()
+diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
+index 8f6d8bbdda656c..089d7172d5985b 100644
+--- a/src/internal/godebugs/table.go
++++ b/src/internal/godebugs/table.go
+@@ -49,6 +49,7 @@ var All = []Info{
+ 	{Name: "httpservecontentkeepheaders", Package: "net/http", Changed: 23, Old: "1"},
+ 	{Name: "installgoroot", Package: "go/build"},
+ 	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque
++	{Name: "ms_tlsx25519", Package: "crypto/tls", Opaque: true},
+ 	//{Name: "multipartfiles", Package: "mime/multipart"},
+ 	{Name: "multipartmaxheaders", Package: "mime/multipart"},
+ 	{Name: "multipartmaxparts", Package: "mime/multipart"},

From 4f4534d2c6bb91187cac238d6f1074ab4140b142 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 12:16:14 +0000
Subject: [PATCH 620/887] build(deps): bump
 github.com/microsoft/go-infra/goinstallscript (#2004)

Bumps [github.com/microsoft/go-infra/goinstallscript](https://github.com/microsoft/go-infra) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/goinstallscript/v1.1.0...goinstallscript/v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra/goinstallscript
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index d553598e3f1..633ebdc115c 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -9,7 +9,7 @@ go 1.24.0
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.8
-	github.com/microsoft/go-infra/goinstallscript v1.1.0
+	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.48.0
 	golang.org/x/sys v0.39.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index b58fd435ba2..28f016f3bfd 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -34,8 +34,8 @@ github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHS
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
 github.com/microsoft/go-infra v0.0.8 h1:p7vlLlOk7JqyoifCDz5ON4YgE+NPvmuPd1b2a9IRdWo=
 github.com/microsoft/go-infra v0.0.8/go.mod h1:bq40MsG2wiwmaEF1NhMNUcmABwpVKLuexYhRuxsDR5o=
-github.com/microsoft/go-infra/goinstallscript v1.1.0 h1:63Zo4Iw1Ft0swdVl+LKCZPPKv1QZiIRY3ZgyhJyMr5A=
-github.com/microsoft/go-infra/goinstallscript v1.1.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
+github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
+github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
 github.com/mitchellh/copystructure v1.2.0/go.mod h1:qLl+cE2AmVv+CoeAwDPye/v+N2HKCj9FbZEVFJRxO9s=
 github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=

From 668e84d214449217a40d85448b37d49e9cdfab4c Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 15 Dec 2025 15:56:58 +0000
Subject: [PATCH 621/887] darwin: update backend to contain fakecgo
 implementation (#2005)

* darwin: update backend to contain fakecgo implementation

* fix deps test

* add stub syscallN for unsupported arches
---
 .../0001-Vendor-external-dependencies.patch   | 2156 +++++++++++++++--
 1 file changed, 1989 insertions(+), 167 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index a9cd3bc0b7b..eacad424fd4 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -35,7 +35,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
  src/go.sum                                    |    6 +
- src/go/build/deps_test.go                     |   53 +-
+ src/go/build/deps_test.go                     |   55 +-
  src/go/build/vendor_test.go                   |    4 +
  .../golang-fips/openssl/v2/.gitignore         |    2 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
@@ -131,7 +131,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
  .../internal/commoncrypto/commoncrypto.go     |    9 +
  .../internal/commoncrypto/shims.h             |   72 +
- .../internal/commoncrypto/syscall_nocgo.go    |   20 +
+ .../internal/commoncrypto/syscall_nocgo.go    |   15 +
  .../internal/commoncrypto/zcommoncrypto.c     |   47 +
  .../internal/commoncrypto/zcommoncrypto.go    |   50 +
  .../internal/commoncrypto/zcommoncrypto.h     |   71 +
@@ -144,7 +144,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
  .../internal/cryptokit/shims.h                |   80 +
- .../internal/cryptokit/syscall_nocgo.go       |   20 +
+ .../internal/cryptokit/syscall_nocgo.go       |   15 +
  .../internal/cryptokit/zcryptokit.c           |  252 ++
  .../internal/cryptokit/zcryptokit.h           |   66 +
  .../internal/cryptokit/zcryptokit.s           |  274 ++
@@ -153,9 +153,29 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/zcryptokit_nocgo.go    |  337 +++
  .../cryptokit/zcryptokit_swift_amd64.go       |  275 ++
  .../cryptokit/zcryptokit_swift_arm64.go       |  274 ++
+ .../internal/fakecgo/abi_amd64.h              |   34 +
+ .../internal/fakecgo/abi_arm64.h              |   39 +
+ .../internal/fakecgo/asm_amd64.s              |   29 +
+ .../internal/fakecgo/asm_arm64.s              |   36 +
+ .../internal/fakecgo/callbacks.go             |   93 +
+ .../go-crypto-darwin/internal/fakecgo/doc.go  |   32 +
+ .../internal/fakecgo/fakecgo.go               |   27 +
+ .../internal/fakecgo/go_darwin.go             |   88 +
+ .../internal/fakecgo/go_libinit.go            |   72 +
+ .../internal/fakecgo/go_setenv.go             |   18 +
+ .../internal/fakecgo/go_util.go               |   37 +
+ .../internal/fakecgo/iscgo.go                 |   19 +
+ .../internal/fakecgo/libcgo.go                |   37 +
+ .../internal/fakecgo/libcgo_darwin.go         |   26 +
+ .../internal/fakecgo/setenv.go                |   19 +
+ .../internal/fakecgo/symbols.go               |  225 ++
+ .../internal/fakecgo/symbols_darwin.go        |   30 +
+ .../internal/fakecgo/trampolines_amd64.s      |  112 +
+ .../internal/fakecgo/trampolines_arm64.s      |   82 +
+ .../internal/fakecgo/trampolines_stubs.s      |   94 +
  .../internal/security/security.go             |    9 +
  .../internal/security/shims.h                 |  107 +
- .../internal/security/syscall_nocgo.go        |   20 +
+ .../internal/security/syscall_nocgo.go        |   15 +
  .../internal/security/zsecurity.c             |  127 +
  .../internal/security/zsecurity.go            |   21 +
  .../internal/security/zsecurity.h             |  100 +
@@ -164,6 +184,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
  .../internal/security/zsecurity_nocgo.go      |  453 ++++
+ .../internal/xsyscall/asm_amd64.s             |  108 +
+ .../internal/xsyscall/asm_arm64.s             |   87 +
+ .../go-crypto-darwin/internal/xsyscall/dl.h   |   15 +
+ .../internal/xsyscall/syscall_nocgo.go        |   88 +
+ .../internal/xsyscall/syscall_nocgo_darwin.go |   25 +
+ .../internal/xsyscall/syscall_nocgo_others.go |   14 +
+ .../internal/xsyscall/xsyscall.go             |    6 +
+ .../go-crypto-darwin/internal/xsyscall/zdl.s  |   54 +
+ .../internal/xsyscall/zdl_nocgo.go            |   48 +
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
@@ -212,8 +241,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/bcrypt/zsyscall_windows.go       |  446 ++++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
- src/vendor/modules.txt                        |   21 +
- 205 files changed, 28947 insertions(+), 7 deletions(-)
+ src/vendor/modules.txt                        |   23 +
+ 234 files changed, 30530 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -352,6 +381,26 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
@@ -363,6 +412,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
@@ -2072,7 +2130,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..726a58d381c07c 100644
+index efc07451b53448..4e945511073ecc 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2082,28 +2140,42 @@ index efc07451b53448..726a58d381c07c 100644
 +
 +require (
 +	github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..dfc8d0b2794286 100644
+index b6b841b44d8e38..e42e19781dd7f2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83 h1:u3WAHp425YzcHygZORNJa9dkyA959Gtti8bUgGYYuiA=
 +github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc h1:bz/6zng2sakr1ETJsKnGoHooH6sBKbQNxk9aeH5tRt0=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff h1:oerudO/EXeLnT69uP9hbjqwCBZ5RuIwF02vkCOY1nBs=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f4b7e9dae5f3ae..ec7221ba7150dd 100644
+index f4b7e9dae5f3ae..3f2b2399ec4127 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -548,16 +548,51 @@ var depsRules = `
+@@ -154,6 +154,13 @@ var depsRules = `
+ 	< internal/syscall/execenv
+ 	< SYSCALL;
+ 
++	syscall, unsafe
++	< github.com/microsoft/go-crypto-darwin/internal/fakecgo
++	< github.com/microsoft/go-crypto-darwin/internal/xsyscall
++	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto,
++	  github.com/microsoft/go-crypto-darwin/internal/cryptokit,
++	  github.com/microsoft/go-crypto-darwin/internal/security;
++
+ 	# TIME is SYSCALL plus the core packages about time, including context.
+ 	SYSCALL
+ 	< time/tzdata
+@@ -548,16 +555,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2116,11 +2188,6 @@ index f4b7e9dae5f3ae..ec7221ba7150dd 100644
 +	< github.com/golang-fips/openssl/v2/internal/ossl
 +	< github.com/golang-fips/openssl/v2/osslsetup;
 +
-+	syscall
-+	< github.com/microsoft/go-crypto-darwin/internal/commoncrypto,
-+	  github.com/microsoft/go-crypto-darwin/internal/security,
-+	  github.com/microsoft/go-crypto-darwin/internal/cryptokit;
-+
 +	syscall, strconv
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
 +	< github.com/microsoft/go-crypto-winnative/internal/sysdll
@@ -2160,7 +2227,7 @@ index f4b7e9dae5f3ae..ec7221ba7150dd 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -579,6 +614,10 @@ var depsRules = `
+@@ -579,6 +616,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2171,7 +2238,7 @@ index f4b7e9dae5f3ae..ec7221ba7150dd 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -925,7 +964,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -925,7 +966,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2180,7 +2247,7 @@ index f4b7e9dae5f3ae..ec7221ba7150dd 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -935,7 +974,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -935,7 +976,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -19131,10 +19198,10 @@ index 00000000000000..b186cf8723ed20
 +#endif // _GO_COMMONCRYPTO_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..196dbd4dbb4238
+index 00000000000000..fd322bcd1b885c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
-@@ -0,0 +1,20 @@
+@@ -0,0 +1,15 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -19143,17 +19210,12 @@ index 00000000000000..196dbd4dbb4238
 +package commoncrypto
 +
 +import (
-+	_ "unsafe"
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
 +)
 +
-+//go:linkname syscall_syscallN syscall.syscalln
-+
-+//go:noescape
-+func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
-+
 +//go:nosplit
-+func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return syscall_syscallN(fn, args...)
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
 new file mode 100644
@@ -21661,10 +21723,10 @@ index 00000000000000..3e3b2c3df5e365
 +#endif // _GO_CRYPTOKIT_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..abd4d7a9d85957
+index 00000000000000..c83bb8660303f6
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
-@@ -0,0 +1,20 @@
+@@ -0,0 +1,15 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21673,17 +21735,12 @@ index 00000000000000..abd4d7a9d85957
 +package cryptokit
 +
 +import (
-+	_ "unsafe"
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
 +)
 +
-+//go:linkname syscall_syscallN syscall.syscalln
-+
-+//go:noescape
-+func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
-+
 +//go:nosplit
-+func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return syscall_syscallN(fn, args...)
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
 new file mode 100644
@@ -23501,159 +23558,1423 @@ index 00000000000000..ecb3cd3a9e3946
 +//go:cgo_import_dynamic swift_release swift_release ""
 +//go:cgo_import_dynamic swift_retain swift_retain ""
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
 new file mode 100644
-index 00000000000000..74ee18d383784e
+index 00000000000000..c646c454a788fd
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
-@@ -0,0 +1,9 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
+@@ -0,0 +1,34 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// Package security provides a Go interface to the Security framework
-+package security
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These save the frame pointer, so in general, functions that use
++// these should have zero frame size to suppress the automatic frame
++// pointer, though it's harmless to not do this.
 +
-+//go:generate go run ../../cmd/checkheader shims.h
-+//go:generate go run ../../cmd/mkcgo -out zsecurity.go -package security --noerrors shims.h
-+//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
++#define REGS_HOST_TO_ABI0_STACK (6*8)
++
++// SysV MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++// Both SysV and Go require DF to be cleared, so that's already clear.
++// The SysV and Go frame pointer conventions are compatible.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
++	MOVQ	BP, (5*8)(SP)	\
++	LEAQ	(5*8)(SP), BP	\
++	MOVQ	BX, (0*8)(SP)	\
++	MOVQ	R12, (1*8)(SP)	\
++	MOVQ	R13, (2*8)(SP)	\
++	MOVQ	R14, (3*8)(SP)	\
++	MOVQ	R15, (4*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*8)(SP), BX	\
++	MOVQ	(1*8)(SP), R12	\
++	MOVQ	(2*8)(SP), R13	\
++	MOVQ	(3*8)(SP), R14	\
++	MOVQ	(4*8)(SP), R15	\
++	MOVQ	(5*8)(SP), BP	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
 new file mode 100644
-index 00000000000000..e1ba0ec484288f
+index 00000000000000..5d5061ec1dbf8c
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
-@@ -0,0 +1,107 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
+@@ -0,0 +1,39 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// Security framework C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zsecurity.h" instead.
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
++//
++// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
++//
++// R29 is not saved because Go will save and restore it.
 +
-+#ifndef _GO_SECURITY_SHIMS_H // only include this header once
-+#define _GO_SECURITY_SHIMS_H
++#define SAVE_R19_TO_R28(offset) \
++	STP	(R19, R20), ((offset)+0*8)(RSP) \
++	STP	(R21, R22), ((offset)+2*8)(RSP) \
++	STP	(R23, R24), ((offset)+4*8)(RSP) \
++	STP	(R25, R26), ((offset)+6*8)(RSP) \
++	STP	(R27, g), ((offset)+8*8)(RSP)
++#define RESTORE_R19_TO_R28(offset) \
++	LDP	((offset)+0*8)(RSP), (R19, R20) \
++	LDP	((offset)+2*8)(RSP), (R21, R22) \
++	LDP	((offset)+4*8)(RSP), (R23, R24) \
++	LDP	((offset)+6*8)(RSP), (R25, R26) \
++	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
++#define SAVE_F8_TO_F15(offset) \
++	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
++	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
++	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
++	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
++#define RESTORE_F8_TO_F15(offset) \
++	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
++	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
++	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
++	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
+new file mode 100644
+index 00000000000000..fe133dacac6959
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
+@@ -0,0 +1,29 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+#include <stdbool.h> // bool
-+#include <stdint.h>  // uint64_t
-+#include <stdlib.h>  // size_t
++#include "textflag.h"
++#include "abi_amd64.h"
 +
-+// The following includes are used by the checkheader tool.
-+// #include <Security/Security.h>
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++// This signature is known to SWIG, so we can't change it.
++TEXT crosscall2(SB), NOSPLIT, $0-0
++	PUSH_REGS_HOST_TO_ABI0()
 +
-+typedef unsigned char Boolean;
-+typedef void *SecRandomRef;
-+typedef void *SecKeyRef;
-+typedef void *CFDataRef;
-+typedef void *CFTypeRef;
-+typedef void *CFStringRef;
-+typedef void *CFDictionaryRef;
-+typedef void *CFMutableDictionaryRef;
-+typedef void *CFNumberRef;
-+typedef void *CFErrorRef;
-+typedef void *CFAllocatorRef;
-+typedef void *CFDictionaryKeyCallBacks;
-+typedef void *CFDictionaryValueCallBacks;
-+typedef int32_t CFIndex;
-+typedef CFStringRef SecKeyAlgorithm;
++	// Make room for arguments to cgocallback.
++	ADJSP $0x18
 +
-+typedef enum {
-+  kSecKeyOperationTypeSign = 0,
-+  kSecKeyOperationTypeVerify = 1,
-+  kSecKeyOperationTypeEncrypt = 2,
-+  kSecKeyOperationTypeDecrypt = 3,
-+} SecKeyOperationType;
++	MOVQ DI, 0x0(SP) // fn
++	MOVQ SI, 0x8(SP) // arg
 +
-+typedef enum {
-+  kCFStringEncodingUTF8 = 0x08000100
-+} CFStringEncoding;
++	// Skip n in DX.
++	MOVQ CX, 0x10(SP) // ctxt
 +
-+typedef enum {
-+  kCFNumberIntType = 9
-+} CFNumberType;
++	CALL runtime·cgocallback(SB)
 +
-+extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
-+extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
-+// PSS
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512 __attribute__((framework(Security, A)));
-+// RAW
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw __attribute__((framework(Security, A)));
-+// PKCS1v15
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw __attribute__((framework(Security, A)));
-+// OAEP
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512 __attribute__((framework(Security, A)));
-+// ECDSA
-+extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962 __attribute__((framework(Security, A)));
++	ADJSP $-0x18
++	POP_REGS_HOST_TO_ABI0()
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
+new file mode 100644
+index 00000000000000..50e5261d922c56
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
+@@ -0,0 +1,36 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
-+SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
-+SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((framework(Security, A)));
-+SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((framework(Security, A)));
-+Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((framework(Security, A)));
-+Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
-+size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
++#include "textflag.h"
++#include "abi_arm64.h"
 +
-+CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((framework(CoreFoundation, A), slice(bytes, length)));
-+CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
-+CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
-+CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((framework(CoreFoundation, A)));
-+CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
-+const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
-+void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
-+void CFDictionarySetValue(CFMutableDictionaryRef theDict, const void *key, const void *value) __attribute__((framework(CoreFoundation, A)));
-+CFStringRef CFErrorCopyDescription(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
-+const char *CFStringGetCStringPtr(CFStringRef str, CFStringEncoding encoding) __attribute__((framework(CoreFoundation, A)));
-+CFIndex CFStringGetLength(CFStringRef str) __attribute__((framework(CoreFoundation, A)));
-+CFIndex CFErrorGetCode(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * We still need to save all callee save register as before, and then
++ *  push 3 args for fn (R0, R1, R3), skipping R2.
++ * Also note that at procedure entry in gc world, 8(RSP) will be the
++ *  first arg.
++ */
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
 +
-+#endif // _GO_SECURITY_SHIMS_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	// Initialize Go ABI environment
++	BL runtime·load_g(SB)
++	BL runtime·cgocallback(SB)
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
 new file mode 100644
-index 00000000000000..a432803a70b27b
+index 00000000000000..e48722128a09d7
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
-@@ -0,0 +1,20 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
+@@ -0,0 +1,93 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+//go:build !cgo
++//go:build !cgo && darwin
 +
-+package security
++package fakecgo
 +
 +import (
 +	_ "unsafe"
 +)
 +
-+//go:linkname syscall_syscallN syscall.syscalln
++// TODO: decide if we need _runtime_cgo_panic_internal
 +
-+//go:noescape
-+func syscall_syscallN(fn uintptr, args ...uintptr) (r1, r2 uintptr)
++//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
++//go:linkname _cgo_init _cgo_init
++var x_cgo_init_trampoline byte
++var _cgo_init = &x_cgo_init_trampoline
++
++// Creates a new system thread without updating any Go state.
++//
++// This method is invoked during shared library loading to create a new OS
++// thread to perform the runtime initialization. This method is similar to
++// _cgo_sys_thread_start except that it doesn't update any Go state.
++
++//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
++//go:linkname _cgo_thread_start _cgo_thread_start
++var x_cgo_thread_start_trampoline byte
++var _cgo_thread_start = &x_cgo_thread_start_trampoline
++
++// Notifies that the runtime has been initialized.
++//
++// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
++// to ensure that the runtime has been initialized before the CGO call is
++// executed. This is necessary for shared libraries where we kickoff runtime
++// initialization in a separate thread and return without waiting for this
++// thread to complete the init.
++
++//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
++//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
++var x_cgo_notify_runtime_init_done_trampoline byte
++var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
++
++// Indicates whether a dummy thread key has been created or not.
++//
++// When calling go exported function from C, we register a destructor
++// callback, for a dummy thread key, by using pthread_key_create.
++
++//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
++var x_cgo_pthread_key_created uintptr
++var _cgo_pthread_key_created = &x_cgo_pthread_key_created
++
++// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
++// It's for the runtime package to call at init time.
++func set_crosscall2() {
++	// nothing needs to be done here for fakecgo
++	// because it's possible to just call cgocallback directly
++}
++
++//go:linkname _set_crosscall2 runtime.set_crosscall2
++var _set_crosscall2 = set_crosscall2
++
++// Store the g into the thread-specific value.
++// So that pthread_key_destructor will dropm when the thread is exiting.
++
++//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
++//go:linkname _cgo_bindm _cgo_bindm
++var x_cgo_bindm_trampoline byte
++var _cgo_bindm = &x_cgo_bindm_trampoline
++
++// TODO: decide if we need x_cgo_set_context_function
++// TODO: decide if we need _cgo_yield
++
++var (
++	// In Go 1.20 the race detector was rewritten to pure Go
++	// on darwin. This means that when CGO_ENABLED=0 is set
++	// fakecgo is built with race detector code. This is not
++	// good since this code is pretending to be C. The go:norace
++	// pragma is not enough, since it only applies to the native
++	// ABIInternal function. The ABIO wrapper (which is necessary,
++	// since all references to text symbols from assembly will use it)
++	// does not inherit the go:norace pragma, so it will still be
++	// instrumented by the race detector.
++	//
++	// To circumvent this issue, using closure calls in the
++	// assembly, which forces the compiler to use the ABIInternal
++	// native implementation (which has go:norace) instead.
++	threadentry_call        = threadentry
++	x_cgo_init_call         = x_cgo_init
++	x_cgo_setenv_call       = x_cgo_setenv
++	x_cgo_unsetenv_call     = x_cgo_unsetenv
++	x_cgo_thread_start_call = x_cgo_thread_start
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
+new file mode 100644
+index 00000000000000..8ebc46efc78533
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
+@@ -0,0 +1,32 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++// Package fakecgo implements the Cgo runtime (runtime/cgo) entirely in Go.
++// This allows code that calls into C to function properly when CGO_ENABLED=0.
++//
++// # Goals
++//
++// fakecgo attempts to replicate the same naming structure as in the runtime.
++// For example, functions that have the prefix "gcc_*" are named "go_*".
++// This makes it easier to port other GOOSs and GOARCHs as well as to keep
++// it in sync with runtime/cgo.
++//
++// # Support
++//
++// Currently, fakecgo only supports macOS on amd64 & arm64. It also cannot
++// be used with -buildmode=c-archive because that requires special initialization
++// that fakecgo does not implement at the moment.
++//
++// # Usage
++//
++// Using fakecgo is easy just import _ "github.com/ebitengine/purego" and then
++// set the environment variable CGO_ENABLED=0.
++// The recommended usage for fakecgo is to prefer using runtime/cgo if possible
++// but if cross-compiling or fast build times are important fakecgo is available.
++// Purego will pick which ever Cgo runtime is available and prefer the one that
++// comes with Go (runtime/cgo).
++package fakecgo
++
++//go:generate go run gen.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+new file mode 100644
+index 00000000000000..6adf531c221742
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+@@ -0,0 +1,27 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import "unsafe"
++
++// setg_trampoline calls setg with the G provided
++func setg_trampoline(setg uintptr, G uintptr)
++
++// call5 takes fn the C function and 5 arguments and calls the function with those arguments
++func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
++
++// argset matches runtime/cgocall.go:argset.
++type argset struct {
++	args   *uintptr
++	retval uintptr
++}
++
++//go:nosplit
++//go:norace
++func (a *argset) arg(i int) unsafe.Pointer {
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
+new file mode 100644
+index 00000000000000..6bc959b64ce3eb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
+@@ -0,0 +1,88 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++//go:norace
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	size = pthread_get_stacksize_np(pthread_self())
++	pthread_attr_init(&attr)
++	pthread_attr_setstacksize(&attr, size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
 +
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++//go:norace
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	// TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_thread_exception_port();
++	//#endif
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
 +//go:nosplit
-+func syscallN(_ uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return syscall_syscallN(fn, args...)
++//go:norace
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++
++	setg_func = setg
++	size = pthread_get_stacksize_np(pthread_self())
++	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
++
++	//TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_mach_exception_handler();
++	//	darwin_arm_init_thread_exception_port();
++	//	init_working_dir();
++	//#endif
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+new file mode 100644
+index 00000000000000..f6fa2328af41bc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+@@ -0,0 +1,72 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++var (
++	pthread_g pthread_key_t
++
++	runtime_init_cond = PTHREAD_COND_INITIALIZER
++	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
++	runtime_init_done int
++)
++
++//go:nosplit
++//go:norace
++func x_cgo_notify_runtime_init_done() {
++	pthread_mutex_lock(&runtime_init_mu)
++	runtime_init_done = 1
++	pthread_cond_broadcast(&runtime_init_cond)
++	pthread_mutex_unlock(&runtime_init_mu)
++}
++
++// Store the g into a thread-specific value associated with the pthread key pthread_g.
++// And pthread_key_destructor will dropm when the thread is exiting.
++//
++//go:norace
++func x_cgo_bindm(g unsafe.Pointer) {
++	// We assume this will always succeed, otherwise, there might be extra M leaking,
++	// when a C thread exits after a cgo call.
++	// We only invoke this function once per thread in runtime.needAndBindM,
++	// and the next calls just reuse the bound m.
++	pthread_setspecific(pthread_g, g)
++}
++
++// _cgo_try_pthread_create retries pthread_create if it fails with
++// EAGAIN.
++//
++//go:nosplit
++//go:norace
++func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
++	var ts syscall.Timespec
++	// tries needs to be the same type as syscall.Timespec.Nsec
++	// but the fields are int32 on 32bit and int64 on 64bit.
++	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
++	tries := ts.Nsec
++	var err int
++
++	for tries = 0; tries < 20; tries++ {
++		// inlined this call because it ran out of stack when inlining was disabled
++		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
++		if err == 0 {
++			// inlined this call because it ran out of stack when inlining was disabled
++			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
++			return 0
++		}
++		if err != int(syscall.EAGAIN) {
++			return err
++		}
++		ts.Sec = 0
++		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
++		// inlined this call because it ran out of stack when inlining was disabled
++		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
++	}
++	return int(syscall.EAGAIN)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
+new file mode 100644
+index 00000000000000..a79441edffbcb9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
+@@ -0,0 +1,18 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++//go:nosplit
++//go:norace
++func x_cgo_setenv(arg *[2]*byte) {
++	setenv(arg[0], arg[1], 1)
++}
++
++//go:nosplit
++//go:norace
++func x_cgo_unsetenv(arg *[1]*byte) {
++	unsetenv(arg[0])
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
+new file mode 100644
+index 00000000000000..b36bd00d361712
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
+@@ -0,0 +1,37 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import "unsafe"
++
++// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
++
++// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
++// This get's called instead of the go code for creating new threads
++// -> pthread_* stuff is used, so threads are setup correctly for C
++// If this is missing, TLS is only setup correctly on thread 1!
++// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
++//
++//go:nosplit
++//go:norace
++func x_cgo_thread_start(arg *ThreadStart) {
++	var ts *ThreadStart
++	// Make our own copy that can persist after we return.
++	//	_cgo_tsan_acquire();
++	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
++	//	_cgo_tsan_release();
++	if ts == nil {
++		println("fakecgo: out of memory in thread_start")
++		abort()
++	}
++	// *ts = *arg would cause a writebarrier so copy using slices
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/8)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/8)
++	for i := range s2 {
++		s1[i] = s2[i]
++	}
++	_cgo_sys_thread_start(ts) // OS-dependent half
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
+new file mode 100644
+index 00000000000000..76f7ef6dc58c7c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
+@@ -0,0 +1,19 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++// The runtime package contains an uninitialized definition
++// for runtime·iscgo. Override it to tell the runtime we're here.
++// There are various function pointers that should be set too,
++// but those depend on dynamic linker magic to get initialized
++// correctly, and sometimes they break. This variable is a
++// backup: it depends only on old C style static linking rules.
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname _iscgo runtime.iscgo
++var _iscgo bool = true
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
+new file mode 100644
+index 00000000000000..26524ced1c3f0b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
+@@ -0,0 +1,37 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++type (
++	size_t uintptr
++	// Sources:
++	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	sigset_t       [128]byte
++	pthread_attr_t [64]byte
++	pthread_t      int
++	pthread_key_t  uint64
++)
++
++// for pthread_sigmask:
++
++type sighow int32
++
++const (
++	SIG_BLOCK   sighow = 0
++	SIG_UNBLOCK sighow = 1
++	SIG_SETMASK sighow = 2
++)
++
++type G struct {
++	stacklo uintptr
++	stackhi uintptr
++}
++
++type ThreadStart struct {
++	g   *G
++	tls *uintptr
++	fn  uintptr
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
+new file mode 100644
+index 00000000000000..ecdcb2e7852560
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
+@@ -0,0 +1,26 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_mutex_t struct {
++		sig    int64
++		opaque [56]byte
++	}
++	pthread_cond_t struct {
++		sig    int64
++		opaque [40]byte
++	}
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
++)
++
++type stack_t struct {
++	/* not implemented */
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
+new file mode 100644
+index 00000000000000..e761fecfb89280
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
+@@ -0,0 +1,19 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
++//go:linkname _cgo_setenv runtime._cgo_setenv
++var x_cgo_setenv_trampoline byte
++var _cgo_setenv = &x_cgo_setenv_trampoline
++
++//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
++//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
++var x_cgo_unsetenv_trampoline byte
++var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
+new file mode 100644
+index 00000000000000..a18645048960cb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
+@@ -0,0 +1,225 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++//go:nosplit
++//go:norace
++func malloc(size uintptr) unsafe.Pointer {
++	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
++}
++
++//go:nosplit
++//go:norace
++func free(ptr unsafe.Pointer) {
++	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func setenv(name *byte, value *byte, overwrite int32) int32 {
++	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func unsetenv(name *byte) int32 {
++	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func sigfillset(set *sigset_t) int32 {
++	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
++	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func abort() {
++	call5(abortABI0, 0, 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func sigaltstack(ss *stack_t, old_ss *stack_t) int32 {
++	return int32(call5(sigaltstackABI0, uintptr(unsafe.Pointer(ss)), uintptr(unsafe.Pointer(old_ss)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_init(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
++	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_detach(thread pthread_t) int32 {
++	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
++	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
++	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
++	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
++}
++
++//go:linkname _malloc _malloc
++var _malloc uint8
++var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
++
++//go:linkname _free _free
++var _free uint8
++var freeABI0 = uintptr(unsafe.Pointer(&_free))
++
++//go:linkname _setenv _setenv
++var _setenv uint8
++var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
++
++//go:linkname _unsetenv _unsetenv
++var _unsetenv uint8
++var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
++
++//go:linkname _sigfillset _sigfillset
++var _sigfillset uint8
++var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
++
++//go:linkname _nanosleep _nanosleep
++var _nanosleep uint8
++var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
++
++//go:linkname _abort _abort
++var _abort uint8
++var abortABI0 = uintptr(unsafe.Pointer(&_abort))
++
++//go:linkname _sigaltstack _sigaltstack
++var _sigaltstack uint8
++var sigaltstackABI0 = uintptr(unsafe.Pointer(&_sigaltstack))
++
++//go:linkname _pthread_attr_init _pthread_attr_init
++var _pthread_attr_init uint8
++var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
++
++//go:linkname _pthread_create _pthread_create
++var _pthread_create uint8
++var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
++
++//go:linkname _pthread_detach _pthread_detach
++var _pthread_detach uint8
++var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
++
++//go:linkname _pthread_sigmask _pthread_sigmask
++var _pthread_sigmask uint8
++var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
++
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
++
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
++
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
++
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
++
++//go:linkname _pthread_mutex_lock _pthread_mutex_lock
++var _pthread_mutex_lock uint8
++var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
++
++//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
++var _pthread_mutex_unlock uint8
++var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
++
++//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
++var _pthread_cond_broadcast uint8
++var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
++
++//go:linkname _pthread_setspecific _pthread_setspecific
++var _pthread_setspecific uint8
++var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
+new file mode 100644
+index 00000000000000..8c4489f0369c25
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
+@@ -0,0 +1,30 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+new file mode 100644
+index 00000000000000..60e70c0a6c6e84
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,112 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
++
++Since we're called from go and call into C we can cheat a bit with the calling conventions:
++ - in go all the registers are caller saved
++ - in C we have a couple of callee saved registers
++
++=> we can use BX, R12, R13, R14, R15 instead of the stack
++
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++*/
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_amd64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), BX
++	XORL AX, AX
++	CALL BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	PXOR	X15, X15
++
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++
++	POP_REGS_HOST_TO_ABI0()
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), BX
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL BX
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..24ddb71f946a94
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,82 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_arm64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R1
++	CALL R1
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	MOVD ·threadentry_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	MOVD $0, R0                     // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R6
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R6
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
+new file mode 100644
+index 00000000000000..061b40ef8af8a6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
+@@ -0,0 +1,94 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions on darwin arm64
++
++TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_malloc(SB)
++	RET
++
++TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_free(SB)
++	RET
++
++TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setenv(SB)
++	RET
++
++TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_unsetenv(SB)
++	RET
++
++TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigfillset(SB)
++	RET
++
++TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_nanosleep(SB)
++	RET
++
++TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_abort(SB)
++	RET
++
++TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigaltstack(SB)
++	RET
++
++TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_init(SB)
++	RET
++
++TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_create(SB)
++	RET
++
++TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_detach(SB)
++	RET
++
++TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_sigmask(SB)
++	RET
++
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
++	RET
++
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
++	RET
++
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++	RET
++
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
++	RET
++
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
++	RET
++
++TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_lock(SB)
++	RET
++
++TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_unlock(SB)
++	RET
++
++TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_cond_broadcast(SB)
++	RET
++
++TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_setspecific(SB)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+new file mode 100644
+index 00000000000000..74ee18d383784e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+@@ -0,0 +1,9 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Package security provides a Go interface to the Security framework
++package security
++
++//go:generate go run ../../cmd/checkheader shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -package security --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+new file mode 100644
+index 00000000000000..e1ba0ec484288f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+@@ -0,0 +1,107 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// Security framework C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zsecurity.h" instead.
++
++#ifndef _GO_SECURITY_SHIMS_H // only include this header once
++#define _GO_SECURITY_SHIMS_H
++
++#include <stdbool.h> // bool
++#include <stdint.h>  // uint64_t
++#include <stdlib.h>  // size_t
++
++// The following includes are used by the checkheader tool.
++// #include <Security/Security.h>
++
++typedef unsigned char Boolean;
++typedef void *SecRandomRef;
++typedef void *SecKeyRef;
++typedef void *CFDataRef;
++typedef void *CFTypeRef;
++typedef void *CFStringRef;
++typedef void *CFDictionaryRef;
++typedef void *CFMutableDictionaryRef;
++typedef void *CFNumberRef;
++typedef void *CFErrorRef;
++typedef void *CFAllocatorRef;
++typedef void *CFDictionaryKeyCallBacks;
++typedef void *CFDictionaryValueCallBacks;
++typedef int32_t CFIndex;
++typedef CFStringRef SecKeyAlgorithm;
++
++typedef enum {
++  kSecKeyOperationTypeSign = 0,
++  kSecKeyOperationTypeVerify = 1,
++  kSecKeyOperationTypeEncrypt = 2,
++  kSecKeyOperationTypeDecrypt = 3,
++} SecKeyOperationType;
++
++typedef enum {
++  kCFStringEncodingUTF8 = 0x08000100
++} CFStringEncoding;
++
++typedef enum {
++  kCFNumberIntType = 9
++} CFNumberType;
++
++extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
++extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
++// PSS
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512 __attribute__((framework(Security, A)));
++// RAW
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw __attribute__((framework(Security, A)));
++// PKCS1v15
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw __attribute__((framework(Security, A)));
++// OAEP
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512 __attribute__((framework(Security, A)));
++// ECDSA
++extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962 __attribute__((framework(Security, A)));
++
++int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
++SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((framework(Security, A)));
++CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((framework(Security, A)));
++Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((framework(Security, A)));
++Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
++size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
++
++CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((framework(CoreFoundation, A), slice(bytes, length)));
++CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
++void CFDictionarySetValue(CFMutableDictionaryRef theDict, const void *key, const void *value) __attribute__((framework(CoreFoundation, A)));
++CFStringRef CFErrorCopyDescription(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++const char *CFStringGetCStringPtr(CFStringRef str, CFStringEncoding encoding) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFStringGetLength(CFStringRef str) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFErrorGetCode(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++
++#endif // _GO_SECURITY_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..3a03e583346c1c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package security
++
++import (
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
++)
++
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
 new file mode 100644
@@ -24948,6 +26269,505 @@ index 00000000000000..b10738f5d6ec26
 +	r0, _ := syscallN(0, _mkcgo_SecRandomCopyBytes_trampoline_addr, uintptr(rnd), uintptr(len(bytes)), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))))
 +	return int32(r0)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+new file mode 100644
+index 00000000000000..59560c7d590f7a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+@@ -0,0 +1,108 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++#ifdef GOOS_windows
++	MOVQ	CX, 0(SP)
++#else
++	MOVQ	DI, 0(SP)
++#endif
++	CALL	·syscallNSystemStack(SB)
++	RET
++
++#ifdef GOOS_windows
++#define RegArgsN 4
++#else
++#define RegArgsN 6
++#endif
++
++TEXT ·syscallNAsm(SB),NOSPLIT,$16-8
++	// Load pointer from stack (ABI0 calling convention)
++	// Store argument and original SP in a callee-saved register
++	MOVQ	libcArgs+0(FP), R13
++	MOVQ	SP, R14
++	
++	// Align stack to 16 bytes
++	ANDQ	$~15, SP
++
++	MOVQ	libcCallInfo_fn(R13), R11
++	MOVQ	libcCallInfo_n(R13), CX
++	MOVQ	libcCallInfo_args(R13), R10
++
++	// Fast version, do not store args on the stack.
++	CMPL	CX, $0;	JE	_0args
++	CMPL	CX, $1;	JE	_1args
++	CMPL	CX, $2;	JE	_2args
++	CMPL	CX, $3;	JE	_3args
++	CMPL	CX, $4;	JE	_4args
++#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
++	CMPL	CX, $5;	JE	_5args
++	CMPL	CX, $6;	JE	_6args
++#endif
++
++	// Reserve stack space for remaining args
++	MOVQ	CX, R12
++	SUBQ	$RegArgsN, R12
++	ADDQ	$1, R12 // make even number of words for stack alignment
++	ANDQ	$~1, R12
++	SHLQ	$3, R12
++	SUBQ	R12, SP
++
++	// Copy args to the stack.
++	// CX: count of stack arguments (n-RegArgsN)
++	// SI: &args[RegArgsN]
++	// DI: copy of RSP
++	SUBQ	$RegArgsN, CX
++	MOVQ	R10, SI
++	ADDQ	$(8*RegArgsN), SI
++	MOVQ	SP, DI
++	CLD
++	REP; MOVSQ
++
++#ifndef GOOS_windows
++_6args:
++	MOVQ	(5*8)(R10), R9
++_5args:
++	MOVQ	(4*8)(R10), R8
++#endif
++_4args:
++	MOVQ	(3*8)(R10), CX
++_3args:
++	MOVQ	(2*8)(R10), DX
++_2args:
++	MOVQ	(1*8)(R10), SI
++_1args:
++	MOVQ	(0*8)(R10), DI
++_0args:
++
++	XORL	AX, AX	    // vararg: say "no float args"
++
++#ifdef GOOS_windows
++	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
++	// and 32 bytes of shadow space on the stack.
++	ADJSP	$32
++	MOVQ	CX, R9
++	MOVQ	DX, R8
++	MOVQ	SI, DX
++	MOVQ	DI, CX
++#endif
++
++	CALL	R11
++
++#ifdef GOOS_windows
++	ADJSP	$-32
++#endif
++
++	MOVQ	R14, SP		// free stack space
++
++	// Return result.
++	MOVQ	AX, libcCallInfo_r1(R13)
++	MOVQ	DX, libcCallInfo_r2(R13)
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
+new file mode 100644
+index 00000000000000..025276dffb2aa5
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
+@@ -0,0 +1,87 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++	MOVD	R0, 8(RSP)
++	CALL	·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB),NOSPLIT,$0-16
++	// Save original stack pointer
++	MOVD	RSP, R20
++
++	// Load pointer from stack (ABI0 calling convention)
++	MOVD	libcArgs+0(FP), R3
++
++	MOVD	libcCallInfo_args(R3), R12
++	MOVD	libcCallInfo_fn(R3), R13
++	// Do we have more than 8 arguments?
++	MOVD	libcCallInfo_n(R3), R0
++	CMP	$0,	R0; BEQ	_0args
++	CMP	$1,	R0; BEQ	_1args
++	CMP	$2,	R0; BEQ	_2args
++	CMP	$3,	R0; BEQ	_3args
++	CMP	$4,	R0; BEQ	_4args
++	CMP	$5,	R0; BEQ	_5args
++	CMP	$6,	R0; BEQ	_6args
++	CMP	$7,	R0; BEQ	_7args
++	CMP	$8,	R0; BEQ	_8args
++
++	// Reserve stack space for remaining args
++	SUB	$8, R0, R2
++	ADD	$1, R2, R3 // make even number of words for stack alignment
++	AND	$~1, R3
++	LSL	$3, R3
++	SUB	R3, RSP
++
++	// R4: size of stack arguments (n-8)*8
++	// R5: &args[8]
++	// R6: loop counter, from 0 to (n-8)*8
++	// R7: scratch
++	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
++	SUB	$8, R0, R4
++	LSL	$3, R4
++	ADD	$(8*8), R12, R5
++	MOVD	$0, R6
++	MOVD	RSP, R8
++stackargs:
++	MOVD	(R6)(R5), R7
++	MOVD	R7, (R6)(R8)
++	ADD	$8, R6
++	CMP	R6, R4
++	BNE	stackargs
++
++_8args:
++	MOVD	(7*8)(R12), R7
++_7args:
++	MOVD	(6*8)(R12), R6
++_6args:
++	MOVD	(5*8)(R12), R5
++_5args:
++	MOVD	(4*8)(R12), R4
++_4args:
++	MOVD	(3*8)(R12), R3
++_3args:
++	MOVD	(2*8)(R12), R2
++_2args:
++	MOVD	(1*8)(R12), R1
++_1args:
++	MOVD	(0*8)(R12), R0
++_0args:
++
++	BL	(R13)
++
++	// Restore original stack pointer
++	MOVD	R20, RSP
++
++	MOVD	libcArgs+0(FP), R3
++	MOVD	R0, libcCallInfo_r1(R3)	// save r1
++	MOVD	R1, libcCallInfo_r2(R3)	// save r2
++
++    RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
+new file mode 100644
+index 00000000000000..9a24f0b6c13b1b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// C APIs. Run "go generate ." to regenerate the bindings.
++
++#ifndef _GO_DL_SHIMS_H // only include this header once
++#define _GO_DL_SHIMS_H
++
++void *dlopen(const char *path, int flags);
++int dlclose(void *handle);
++void *dlsym(void *handle, const char *symbol);
++char *dlerror(void);
++
++#endif // _GO_DL_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..20f2ae5d853877
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
+@@ -0,0 +1,88 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && (amd64 || arm64)
++
++package xsyscall
++
++import (
++	"unsafe"
++)
++
++//go:linkname runtime_cgocall runtime.cgocall
++
++//go:noescape
++func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
++
++//go:linkname noescape
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
++}
++
++type libcCallInfo struct {
++	fn      uintptr
++	n       uintptr // number of parameters
++	args    uintptr // parameters
++	r1, r2  uintptr // return values
++	errType uintptr
++}
++
++//go:noescape
++func syscallNAsm(libcArgs *libcCallInfo)
++
++// syscallNSystemStack performs a syscall on the system stack.
++// It can't allocate Go memory nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func syscallNSystemStack(libcArgs *libcCallInfo) {
++	syscallNAsm(libcArgs)
++}
++
++var syscallNSystemStack_trampoline byte
++var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
++
++// SyscallN performs a syscall with the given function and arguments.
++//
++// All its parameters and return values must be uintptr in order
++// for the Go compiler to automatically set the //go:uintptrkeepalive
++// directive (which we can't set manually here).
++// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
++//
++//go:nosplit
++func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	libcArgs := libcCallInfo{
++		fn:      fn,
++		n:       uintptr(len(args)),
++		errType: errType,
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
++	return libcArgs.r1, libcArgs.r2
++}
++
++// Shim syscallN calls SyscallN.
++//
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return SyscallN(errType, fn, args...)
++}
++
++// syscallNRaw performs a syscall with the given function and arguments,
++// without any error checking nor switching to the system stack.
++//
++//go:nosplit
++func syscallNRaw(fn uintptr, args ...uintptr) uintptr {
++	libcArgs := libcCallInfo{
++		fn: fn,
++		n:  uintptr(len(args)),
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	syscallNAsm(&libcArgs)
++	return libcArgs.r1
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
+new file mode 100644
+index 00000000000000..c7e683e6790a27
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
+@@ -0,0 +1,25 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package xsyscall
++
++import (
++	"unsafe"
++
++	_ "github.com/microsoft/go-crypto-darwin/internal/fakecgo"
++)
++
++//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
++
++func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
++	r0 := Dlsym(handle, unsafe.StringData(symbol))
++	if r0 == nil {
++		if !optional {
++			panic("cannot get required symbol " + symbol)
++		}
++		return 0
++	}
++	return uintptr(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
+new file mode 100644
+index 00000000000000..28dba16a23340e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
+@@ -0,0 +1,14 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && !(amd64 || arm64)
++
++package xsyscall
++
++// Implement a mock version of SyscallN for unsupported architectures.
++// This will simply panic to indicate that the syscall is not supported.
++
++//go:nosplit
++func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	panic("SyscallN is not supported on this architecture")
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
+new file mode 100644
+index 00000000000000..458053d55e4541
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
+@@ -0,0 +1,6 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package xsyscall
++
++//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package xsyscall -tags "darwin" dl.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
+new file mode 100644
+index 00000000000000..9ab8a302416064
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
+@@ -0,0 +1,54 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo && (darwin)
++
++#include "textflag.h"
++
++
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++
++
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_dlclose_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlclose(SB)
++GLOBL   ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
++
++TEXT _mkcgo_dlerror_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlerror(SB)
++GLOBL   ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
++
++TEXT _mkcgo_dlopen_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlopen(SB)
++GLOBL   ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
++
++TEXT _mkcgo_dlsym_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_dlsym(SB)
++GLOBL   ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
+new file mode 100644
+index 00000000000000..a30d07b27ed848
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
+@@ -0,0 +1,48 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo && darwin
++
++package xsyscall
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++var _ = runtime.GOOS
++
++//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
++//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
++//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
++//go:cgo_import_dynamic _mkcgo_dlsym dlsym ""
++
++var _mkcgo_dlclose_trampoline_addr uintptr
++
++func Dlclose(handle unsafe.Pointer) int32 {
++	r0, _ := syscallN(0, _mkcgo_dlclose_trampoline_addr, uintptr(handle))
++	return int32(r0)
++}
++
++var _mkcgo_dlerror_trampoline_addr uintptr
++
++func Dlerror() *byte {
++	r0, _ := syscallN(0, _mkcgo_dlerror_trampoline_addr)
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_dlopen_trampoline_addr uintptr
++
++func Dlopen(path *byte, flags int32) unsafe.Pointer {
++	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
++	return unsafe.Pointer(r0)
++}
++
++var _mkcgo_dlsym_trampoline_addr uintptr
++
++func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
++	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
++	return unsafe.Pointer(r0)
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
 new file mode 100644
 index 00000000000000..cc4bc4f25fefa4
@@ -32564,10 +34384,10 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..ed909c054ed7dc 100644
+index b6f6376eac041a..94f52f58126855 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
-@@ -1,3 +1,24 @@
+@@ -1,3 +1,26 @@
 +# github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
@@ -32575,12 +34395,14 @@ index b6f6376eac041a..ed909c054ed7dc 100644
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251202082849-356ad09993bc
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
++github.com/microsoft/go-crypto-darwin/internal/fakecgo
 +github.com/microsoft/go-crypto-darwin/internal/security
++github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
 +# github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
 +## explicit; go 1.24

From 593d7fca7de5d28c15a4a37b0d147edf6ba1bde6 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 16:07:21 +0000
Subject: [PATCH 622/887] Update submodule to latest master (388eb10f): cmd/go:
 show comparable in go doc interface output

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 927c89bbc5c..388eb10f50f 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 927c89bbc5cc7366e86ecbb0f77267435b1d6d2c
+Subproject commit 388eb10f50f2b693fb68897dd0ddf627b512a885

From b41cc4687a7eb6a9b66daddc88cb8457c0ed0574 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Mon, 15 Dec 2025 10:17:01 -0800
Subject: [PATCH 623/887] FIPS readme updates, clarify GOFIPS (#2003)

---
 eng/doc/fips/README.md | 164 ++++++++++++++++++++++++++---------------
 1 file changed, 105 insertions(+), 59 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index ae54603c83a..4ebcae9ab2d 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -1,8 +1,14 @@
-This directory contains documentation about FIPS and the FIPS implementation in the Microsoft fork of Go.
+This directory contains documentation about FIPS, details about the FIPS implementation in the Microsoft build of Go, and using system-provided cryptography via the Go standard library.
 
-* README.md (this file): a general overview and first steps.
+* README.md (this file): an overview of the design and how to use it.
 * [**FIPS 140 User Guide** (UserGuide.md)](UserGuide.md): notes on FIPS compliance of specific crypto APIs.
 
+See also:
+
+* [The Migration Guide](../MigrationGuide.md).  Includes direct guidance on how to migrate an existing Go app to use the Microsoft build of Go and decide whether this is necessary.
+* [Cross-Platform Cryptography in the Microsoft build of Go](../CrossPlatformCryptography.md). A digestible overview of the information in the *FIPS 140 User Guide*.
+* [The Microsoft build of Go README](../../../README.md). Background information about the Microsoft build of Go and how to acquire it.
+
 # Crypto FIPS 140 support
 
 ## Background
@@ -14,17 +20,14 @@ FIPS 140 is a U.S. government computer security standard used to approve cryptog
 The upstream plan to support building FIPS compliant Go apps is described in [FIPS 140-3 Compliance](https://go.dev/doc/security/fips140) and [crypto: obtain a FIPS 140-3 validation (golang/go#69536)](https://github.com/golang/go/issues/69536).
 Go 1.24 delivered some major steps in this plan: the crypto module itself (written in Go and Go assembly), the concept of FIPS mode in the Go runtime, and new toolset settings.
 
+This approach is unique and offers some advantages, and we encourage Go developers who require FIPS 140 compliance to evaluate this official feature and use it.
+However, we determined that this approach doesn't align with Microsoft internal cryptography strategy and policies.
+
 Prior to Go 1.24, Google maintained the [goexperiment](https://pkg.go.dev/internal/goexperiment) `boringcrypto`, that uses cgo and BoringSSL to implement various crypto primitives.
 As BoringSSL is FIPS 140 certified, an application built using this flag is more likely to be FIPS 140 compliant, yet Google does not provide any liability about the suitability of this code in relation to the FIPS 140 standard.
 
-In addition to that, the `boringcrypto` flag also provides a mechanism to restrict all TLS configuration to FIPS-compliant settings.
-The effect is triggered by importing the fipsonly package anywhere in a program, as in:
-
-```go
-  import _ "crypto/tls/fipsonly"
-```
-
-In Go 1.24, the TLS FIPS-compliant mode is controlled by the Go runtime's FIPS mode.
+In addition to that, the `boringcrypto` experiment also provides a mechanism to restrict all TLS configuration to FIPS-compliant settings.
+The effect is triggered by importing the `crypto/tls/fipsonly` package anywhere in a program, and as of Go 1.24, this mode is controlled by the Go runtime's FIPS mode.
 
 ## Microsoft build of Go FIPS compliance
 
@@ -32,7 +35,7 @@ The Microsoft build of Go modifies the Go runtime to call into a platform-provid
 Depending on the platform, this is done using cgo or syscalls.
 This allows Go programs to use a platform-provided FIPS 140 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module in Go 1.21+ and the [go-crypto-openssl] module in earlier versions. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
 
 > [!IMPORTANT]
 > An application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_.
@@ -49,11 +52,11 @@ These are described in the following sections in detail.
   - [`GOEXPERIMENT=<backend>crypto` environment variable](#usage-build)
   - [`goexperiment.<backend>crypto` build tag](#usage-build)
   - [`requirefips` build tag](#build-option-to-require-fips-mode)
-  - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode) (go1.24+)
+  - [`GOFIPS140=latest` environment variable](#build-option-to-require-fips-mode)
   - [`import _ "crypto/tls/fipsonly"` source change](#tls-with-fips-compliant-settings)
 - Runtime configuration:
   - [`GOFIPS` environment variable](#usage-runtime)
-  - [`GODEBUG=fips140` setting](#usage-runtime) (go1.24+)
+  - [`GODEBUG=fips140` setting](#usage-runtime)
   - (OpenSSL backend) [`GO_OPENSSL_VERSION_OVERRIDE` environment variable](#runtime-openssl-version-override)
   - (OpenSSL backend) [`/proc/sys/crypto/fips_enabled` file containing `1`](#linux-fips-mode-openssl)
   - (CNG backend) [Windows registry `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy` dword value `Enabled` set to `1`](#windows-fips-mode-cng)
@@ -72,8 +75,9 @@ There are typically two goals that lead to this document. Creating a FIPS compli
 
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
-| Default | Default | Not compliant | Crypto usage is not FIPS compliant. |
-| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
+| Default, Go 1.24 | Default | Not compliant | Crypto usage is not FIPS compliant. |
+| Default, Go 1.25 or later | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. |
 | `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
@@ -85,37 +89,43 @@ Some configurations are invalid and intentionally result in a build error or run
 
 | Build-time config | Runtime config | Behavior |
 | --- | --- | --- |
-| `-tags=requirefips` | | The build fails. A crypto backend must be specified to enable FIPS features. |
+| `-tags=requirefips`, Go 1.24 | | The build fails. A crypto backend must be specified to enable FIPS features. |
 | `GOEXPERIMENT=cngcrypto,opensslcrypto` | | The build fails. Only one crypto backend can be enabled at a time. |
-| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. <br/> Prior to Go 1.21 the build would succeed but use standard Go crypto, making the app non-compliant. |
+| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. |
 
 ## Usage: Build
 
 The `GOEXPERIMENT` environment variable is used at build time to select a cryptographic library backend. This modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API. The `GOEXPERIMENT` values that pick a crypto backend are:
 
 - `systemcrypto` automatically selects the suggested crypto backend for the target platform
-   - Prior to Go 1.21, this experiment is not available and the backend must be selected manually
    - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. To disable it, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
 - `opensslcrypto` selects OpenSSL, for Linux
 - `cngcrypto` selects CNG, for Windows
-- Since 1.24, `darwincrypto` selects CommonCrypto & CryptoKit for macOS
-- If no option is selected, Go standard library cryptography is used.
+- `darwincrypto` selects CommonCrypto & CryptoKit for macOS
+- If no option is selected (and `systemcrypto` has been disabled if using Go 1.25 or later), Go standard library cryptography is used.
 
 The options are exclusive and must not be enabled at the same time as one another.
 
-`systemcrypto` matches the internal Microsoft crypto policy for Go. If no compliant backend exists matching the target platform, the build fails.
+The selection made by `systemcrypto` matches the internal Microsoft crypto policy for Go. If no compliant backend exists matching the target platform, the build fails.
 
 | Target platform | `systemcrypto` selection | Library |
 | --- | --- | --- |
 | Linux | `opensslcrypto` | OpenSSL |
 | Windows (amd64 and arm64) | `cngcrypto` | CNG |
-| macOS (since 1.24) | `darwincrypto` | CommonCrypto & CryptoKit |
-| macOS (prior to 1.24) | N/A, build error | N/A |
+| macOS | `darwincrypto` | CommonCrypto & CryptoKit |
 
 The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`.
 
 The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
 
+A cross-build to Windows amd64 or arm64 will typically work, because `cngcrypto` uses syscalls to call CNG rather than cgo.
+A cross-build to Linux or macOS, however, is more complicated (perhaps infeasible), because their backends use cgo.
+
+The Linux backends' use of cgo also introduces the glibc compatibility problem.
+Building a cgo program on a distro that uses a new glibc version and running that program on a distro with an older glibc version may fail due to missing glibc symbols.
+This is often mitigated by building on a distro with the oldest expected glibc version.
+We have also successfully used a rootfs to build on an older glibc version (and cross-compile arm64 binaries on an amd64 machine), with rough notes available in [microsoft/go#1866](https://github.com/microsoft/go/issues/1866).
+
 > [!NOTE]
 > "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
 
@@ -131,9 +141,13 @@ The next sections describe how to select a crypto backend in some common scenari
 
 ### Dockerfile base image
 
-If you use a Dockerfile, you can swap its base image to the special Microsoft build of Go images marked with `-fips-`.
-These images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images.
+If you use [the Microsoft build of Go images produced by microsoft/go-images][microsoft-go-images], the `systemcrypto` backend is enabled by default as of Go 1.25.
+
+If you use a Dockerfile and a version of the Microsoft build of Go prior to 1.25, you can swap your Dockerfile's base image to one of our images that include the `-fips-` segment.
+These images are no longer produced as of Go 1.25.
+The `-fips-` images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images.
 They are provided for convenience.
+
 See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
 
 ### Dockerfile env instruction
@@ -207,12 +221,42 @@ A program built with `systemcrypto` always uses the system-provided cryptography
 
 The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140=on` and `GOFIPS=1` settings on each supported platform.
 
-> [!NOTE]
-> Since Go 1.24, setting `GOFIPS=1` is equivalent to setting `GODEBUG=fips140=on`.
-> The latter is the recommended way to enable FIPS mode.
-> If `GODEBUG=fips140=[...]` is set to `on` or `only`, `GOFIPS` has no effect.
->
-> Support for the `GOFIPS` environment variable will be removed in Go 1.25.
+The Microsoft build of Go detects your FIPS mode preference by evaluating this list.
+The first match wins.
+
+- If environment variable setting `GODEBUG=fips140=on` is found: Enabled ✅
+  - More specifically, if [`GODEBUG`](https://go.dev/doc/godebug) contains `fips140=on`.
+  - This is the recommended way to set your FIPS preference.
+- If the environment variable `GOFIPS` is set to:
+  - `1`: Enabled ✅
+  - `0`: Disabled ❌ (Go 1.24 and prior)
+  - Any other value: No preference detected. ❔
+- If the environment variable `GOLANG_FIPS` is set to:
+  - `1`: Enabled ✅
+  - `0`: Disabled ❌ (Go 1.24 and prior)
+  - Any other value: No preference detected. ❔
+- If a platform-specific preference is detected: Enabled ✅
+  - See the following sections for per-platform details.
+  - The platform-specific detection never results in a Disabled preference.
+- Otherwise: no preference detected. ❔
+
+After that, the following validation is performed:
+
+- If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled, then:
+  - If the detected preference is Disabled ❌, the program panics due to the conflict.
+  - Otherwise, the preference is set to Enabled ✅.
+
+Finally, based on the preference, the Microsoft build of Go does the following:
+
+- Enabled ✅
+  - If the platform's crypto library is not in FIPS mode, the program panics during initialization.
+    - This may help detect and refuse to run with incorrectly configured environments.
+  - The program enables [Go Runtime FIPS mode](#go-runtime-fips-mode).
+- Disabled ❌
+  - Prior to Go 1.25: if the platform's crypto library is in FIPS mode, the program panics during initialization.
+  - Since Go 1.25: no effect.
+- No preference detected ❔
+  - No effect.
 
 > [!NOTE]
 > The options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
@@ -228,18 +272,10 @@ The `only` setting is not yet supported in the Microsoft build of Go.
 
 ### Linux FIPS mode (OpenSSL)
 
-To set FIPS mode preference on Linux, use one of the following options. The first match in this list wins:
+The Linux Kernel FIPS mode is read to determine the platform-specific FIPS preference on Linux.
+The Go runtime reads the content of `/proc/sys/crypto/fips_enabled`, and if it's `1`, then the platform preference is to enable FIPS.
 
-- Explicitly enable it by setting the environment variable `GODEBUG=fips140=on`.
-- Explicitly enable it by setting the environment variable `GOFIPS=1`.
-- Implicitly enable it by booting the Linux Kernel in FIPS mode.
-  - The Linux Kernel's FIPS mode sets the content of `/proc/sys/crypto/fips_enabled` to `1`. The Go runtime reads this file.
-
-If the Go runtime detects a preference to enable FIPS and OpenSSL is not using a FIPS-compliant engine or provider, the program will panic during program initialization. This may be useful to detect and refuse to run with incorrectly configured OpenSSL installations.
-
-If the Go runtime detects a preference to disable FIPS and OpenSSL is using a FIPS-compliant engine or provider, the program will panic during program initialization.
-
-Otherwise, FIPS preference has no effect.
+If OpenSSL is not using a FIPS-compliant engine or provider, this is considered not being in FIPS mode.
 
 For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
 
@@ -254,25 +290,35 @@ For more information about the standard OpenSSL FIPS behavior, see https://www.o
 > This is no longer possible in 1.24, but some mechanisms are provided by OpenSSL and distros to help run this type of test.
 >
 > For OpenSSL 3, see [`OPENSSL_CONF`](https://docs.openssl.org/3.0/man5/config/) to change to a FIPS crypto provider.
-> For Azure Linux, see [`OPENSSL_FORCE_FIPS_MODE=1`](https://github.com/microsoft/azurelinux/blob/bfd36df1487511735dbd5fade66b0b613c89b46a/SPECS/openssl/0009-Add-Kernel-FIPS-mode-flag-support.patch#L34).
+>
+> For Azure Linux, see:
+>
+> - [`OPENSSL_FORCE_FIPS_MODE=1`](https://github.com/microsoft/azurelinux/blob/bfd36df1487511735dbd5fade66b0b613c89b46a/SPECS/openssl/0009-Add-Kernel-FIPS-mode-flag-support.patch#L34).
+> - [(Microsoft-internal documentation) "How do I enable FIPS on my Azure Linux Azure Marketplace VM Image?"](https://eng.ms/docs/products/azure-linux/overview/security/fips#1-how-do-i-enable-fips-on-my-azure-linux-azure-marketplace-vm-image)
 
 ### Windows FIPS mode (CNG)
 
-To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy).
+The platform-specific FIPS preference on Windows is determined by the result of calling [BCryptGetFipsAlgorithmMode](https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgetfipsalgorithmmode).
 
-If the Go runtime detects `GOFIPS=1` or `GODEBUG=fips140=on` and FIPS policy is not enabled, the program will panic during program initialization. This may be useful to detect and refuse to run on incorrectly configured Windows systems. Otherwise, `GODEBUG=fips140` has no effect.
+To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.microsoft.com/en-us/windows/security/threat-protection/fips-140-validation#step-3-enable-the-fips-security-policy).
 
 For testing purposes, Windows FIPS policy can be enabled via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
 
 ### macOS FIPS mode (CommonCrypto/CryptoKit)
 
-macOS cryptographic primitives are FIPS compliant by default, so there is no need for system-wide nor process-wide configuration.
-Refer to the [About Apple security certifications](https://support.apple.com/guide/certifications/about-apple-security-certifications-apc30d0ed034/1/web/1.0) page for more information.
+A platform-specific FIPS preference is never detected on macOS.
+There is no standard system-provided mechanism to indicate FIPS mode on macOS.
+
+To instruct Go to run in [Go Runtime FIPS mode](#go-runtime-fips-mode) on macOS, manually setting an enabled preference is necessary.
+
+macOS cryptographic primitives are FIPS compliant by default.
+This means setting the enabled FIPS preference will never cause a panic on macOS.
+However, for compatibility reasons (see [the Go Runtime FIPS mode](#go-runtime-fips-mode)), the Microsoft build of Go doesn't enable FIPS settings by default on macOS.
 
-This means that setting `GOFIPS=1` or `GODEBUG=fips140=on` will never cause a panic on macOS.
-They are still necessary to instruct Go to run in FIPS mode, as there is no system-provided parameter to do so.
+See the [About Apple security certifications](https://support.apple.com/guide/certifications/about-apple-security-certifications-apc30d0ed034/1/web/1.0) page for more information.
 
-Prior to 1.24, CommonCrypto/CryptoKit is not used by the Microsoft build of Go.
+> [!NOTE]
+> Prior to 1.24, there was no macOS backend for the Microsoft build of Go.
 
 ### Go Runtime FIPS mode
 
@@ -283,11 +329,8 @@ It can be checked by calling [crypto/fips140.Enabled](https://pkg.go.dev/crypto/
 This mode has many effects described in [FIPS 140-3 Compliance](https://go.dev/doc/security/fips140).
 One notable effect is that the Go runtime TLS stack will only use FIPS-compliant settings.
 
-> [!NOTE]
-> Prior to Go 1.24, the Microsoft build of Go automatically applies FIPS compliance changes to the Go runtime (including TLS behavior) when FIPS mode is detected, but it doesn't use a documented mechanism.
-
-The mechanisms in the Mirosoft Build of Go for Linux and Windows automatically enable Go runtime FIPS mode when necessary, based on the system-wide FIPS mode.
-For example, if a Linux system is in FIPS mode, the fork enables OpenSSL FIPS mode and the Go runtime FIPS mode.
+The [FIPS mode preference system](#usage-runtime) automatically enables Go runtime FIPS mode when necessary.
+For example, if a Linux system is in system-wide FIPS mode, the Microsoft build of Go enables OpenSSL FIPS mode and the Go runtime FIPS mode.
 If a Windows system is in FIPS mode, CNG is already in FIPS mode, and the fork enables the Go runtime FIPS mode.
 
 > [!WARNING]
@@ -298,7 +341,7 @@ If a Windows system is in FIPS mode, CNG is already in FIPS mode, and the fork e
 > For compatibility reasons, the Microsoft build of Go defaults to not enabling FIPS settings.
 > For example, FIPS settings may prevent an application from connecting to a server that doesn't support FIPS-compliant TLS.
 >
-> To make the TLS stack use FIPS-compliant settings on macOS, `GODEBUG=fips140=on` (or an equivalent) must be set explicitly.
+> To make the TLS stack use FIPS-compliant settings on macOS, `GODEBUG=fips140=on` (or an equivalent preference assignment) must be set explicitly.
 
 ## Usage: Extra configuration options
 
@@ -309,7 +352,7 @@ FIPS mode preference is normally determined at runtime, but the `GOFIPS140=lates
 - The `requirefips` build tag is available since Go 1.21. See [the "GOFLAGS" example in the build section](#modify-the-build-command).
 - The `GOFIPS140=latest` environment variable is available since Go 1.24.
 
-Most programs aren't expected to use these options. Determining FIPS mode at runtime is normal for FIPS compliant applications. This allows the same binary to be deployed to run in both FIPS compliant contexts and non-FIPS contexts, and allows it to be bundled with other binaries that can also run in both contexts. However, it is useful in some cases:
+Most programs aren't expected to use these options. Determining FIPS mode at runtime is normal for FIPS compliant applications. This allows the same binary to be deployed to run in both FIPS compliant contexts and non-FIPS contexts, and allows it to be bundled with other binaries that can also run in both contexts. However, the build option is useful in some cases:
 
 - Dependence on environment variables like `GODEBUG` and `GOFIPS` in any way may be undesirable.
 - The program's documentation can state it will always run in FIPS mode without any nuance about environment variables.
@@ -332,7 +375,10 @@ We recommend fixing the build environment to allow the crypto backend to be used
 
 These are other fixes that may be used on a case-by-case basis:
 
-- Remove `GOEXPERIMENT` entirely. This intentionally doesn't comply with the internal Microsoft crypto policy or FIPS, so for builds within Microsoft, this should only be done under a documented exception.
+- Intentionally disable the backend and intentional become incompliant with the internal Microsoft crypto policy or FIPS. For builds within Microsoft, this should only be done under a documented exception. To do so:
+  - With Go 1.25.2 or later, set `MS_GO_NOSYSTEMCRYPTO=1`.
+  - With Go 1.25 or later, set `GOEXPERIMENT=nosystemcrypto`.
+  - With Go 1.24, either set `GOEXPERIMENT=nosystemcrypto` or remove the `GOEXPERIMENT` setting entirely.
 - Refactor the code to not use a `crypto` package. For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
 
 > [!IMPORTANT]
@@ -488,7 +534,7 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
 - Support `GODEBUG=fips140=on` as an alias for `GOFIPS=1`.
 - `GOFIPS=1` no longer tries to enable FIPS mode on Linux. It will now panic if FIPS mode is not enabled.
 - `GOFIPS=0` no longer tries to disable FIPS mode on Linux. It will now panic if FIPS mode is enabled.
-- Support for the `GOFIPS` environment variable will be removed in Go 1.25.
+- Support for the `GOFIPS` environment variable may be removed in a future major release.
 
 ### Go [1.22.9-2](https://github.com/microsoft/go/releases/tag/v1.22.9-2) and [1.23.3-2](https://github.com/microsoft/go/releases/tag/v1.23.3-2) (Dec 2024)
 

From 19f3b0431d3e5b0fa10b91ed0fd3dcab873fdbcf Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 16 Dec 2025 10:56:38 +0100
Subject: [PATCH 624/887] fix test

---
 patches/0004-Use-crypto-backends.patch | 36 +++++++++++++++++++-------
 1 file changed, 26 insertions(+), 10 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 049417ea91f..5b27c4cee0e 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |  13 +-
+ src/cmd/dist/test.go                          |  21 +-
  src/cmd/go/go_boring_test.go                  |   6 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -100,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1490 insertions(+), 176 deletions(-)
+ 96 files changed, 1497 insertions(+), 177 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -126,7 +126,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 2cbf77a59e63dd..855c1155c7f05a 100644
+index 287424afb0d734..f2068ce397ace4 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -138,7 +138,7 @@ index 2cbf77a59e63dd..855c1155c7f05a 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -763,9 +763,15 @@ func (t *tester) registerTests() {
+@@ -763,18 +763,30 @@ func (t *tester) registerTests() {
  
  	// Test GOEXPERIMENT=runtimesecret.
  	if !strings.Contains(goexperiment, "runtimesecret") {
@@ -155,7 +155,23 @@ index 2cbf77a59e63dd..855c1155c7f05a 100644
  			pkg:     "runtime/secret/...",
  		})
  	}
-@@ -1377,12 +1383,11 @@ func (t *tester) registerCgoTests(heading string) {
+ 
+ 	// Test GOEXPERIMENT=simd on amd64.
+ 	if goarch == "amd64" && !strings.Contains(goexperiment, "simd") {
++		// Don't override existing GOEXPERIMENTs.
++		goexperiment := goexperiment
++		if goexperiment != "" {
++			goexperiment += ","
++		}
++		goexperiment += "simd"
+ 		t.registerTest("GOEXPERIMENT=simd go test simd/archsimd/...", &goTest{
+ 			variant: "simd",
+-			env:     []string{"GOEXPERIMENT=simd"},
++			env:     []string{"GOEXPERIMENT=" + goexperiment},
+ 			pkg:     "simd/archsimd/...",
+ 		})
+ 	}
+@@ -1386,12 +1398,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -3905,10 +3921,10 @@ index f9bd313737e21b..04548c961e74a8 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index aa7f419a5d74cc..c500e8bf2a0cf5 100644
+index f52b6b1ac71711..f6f962f38b5d00 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -538,7 +538,7 @@ var depsRules = `
+@@ -545,7 +545,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -3917,7 +3933,7 @@ index aa7f419a5d74cc..c500e8bf2a0cf5 100644
  
  	crypto !< FIPS;
  
-@@ -567,7 +567,12 @@ var depsRules = `
+@@ -569,7 +569,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -3931,7 +3947,7 @@ index aa7f419a5d74cc..c500e8bf2a0cf5 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -601,7 +606,8 @@ var depsRules = `
+@@ -603,7 +608,8 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/subtle,
@@ -3941,7 +3957,7 @@ index aa7f419a5d74cc..c500e8bf2a0cf5 100644
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/internal/boring
-@@ -619,6 +625,7 @@ var depsRules = `
+@@ -621,6 +627,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From 354c1e89243cd8980d75c0b06f1e83b4291ddda6 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Tue, 16 Dec 2025 09:19:59 -0800
Subject: [PATCH 625/887] Docs: clarify interaction of backend env vars; add
 more links (#2007)

---
 eng/doc/MigrationGuide.md | 2 ++
 eng/doc/fips/README.md    | 6 ++++++
 2 files changed, 8 insertions(+)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index cecf7fc68fe..ce66925bb21 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -360,6 +360,8 @@ If the change requires further planning and if it's acceptable for your project
 
 After that, build commands won't encounter errors related to `systemcrypto`, and the resulting program won't attempt to use system-provided cryptography at runtime.
 
+For more information about these options, see [the "Build option to use Go crypto" section of the FIPS README](fips/README.md#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
+
 Alternatively, if you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
 This will disable `systemcrypto` by default and give you time to plan the migration.
 You can choose to upgrade at your own pace, as long as you complete the migration before 1.24 reaches EOL (End of Life).
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 4ebcae9ab2d..5bc9f517b89 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -137,6 +137,8 @@ Setting the `goexperiment.<option>` build tag can be used as an alternative to s
 If a crypto backend is selected but isn't supported, the build fails.
 For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
 
+For more information about disabling the crypto backend, see [build option to use Go crypto](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
+
 The next sections describe how to select a crypto backend in some common scenarios.
 
 ### Dockerfile base image
@@ -381,6 +383,10 @@ These are other fixes that may be used on a case-by-case basis:
   - With Go 1.24, either set `GOEXPERIMENT=nosystemcrypto` or remove the `GOEXPERIMENT` setting entirely.
 - Refactor the code to not use a `crypto` package. For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
 
+> [!NOTE]
+> `MS_GO_NOSYSTEMCRYPTO=1` has precedence over `GOEXPERIMENT` values.
+> For example, setting `MS_GO_NOSYSTEMCRYPTO=1` and `GOEXPERIMENT=systemcrypto` builds a program that uses Go standard library cryptography.
+
 > [!IMPORTANT]
 > Individual crypto calls may fall back to standard Go crypto at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information.
 

From 203a388e40c0ef410df01061537e78a51444cc07 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Dec 2025 11:09:06 +0000
Subject: [PATCH 626/887] build(deps): bump github/codeql-action from 4.31.8 to
 4.31.9 (#2009)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.8 to 4.31.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1b168cd39490f61582a9beae412bb7057a6b2c4e...5d4e8d1aca955e8d8589aabd499c5cae939e33c7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f7a67be1e9f..94269c9bd8e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
+        uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
+        uses: github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
+        uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           category: /language:go

From 2914f98b4abe8200fa3762012ea3cebf60199b88 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 17 Dec 2025 07:18:27 -0800
Subject: [PATCH 627/887] Make updatecryptodocs work like other doc gen tools
 (#2008)

---
 eng/_util/cmd/gencryptodoc/crypto.json        | 1018 -----------------
 eng/_util/cmd/gencryptodoc/schema.json        |   79 --
 eng/_util/cmd/updatecryptodocs/docs.go        |  896 +++++++++++++++
 .../header.md                                 |    0
 .../updatecryptodocs.go}                      |  170 ++-
 eng/doc/CrossPlatformCryptography.md          |   78 +-
 6 files changed, 1006 insertions(+), 1235 deletions(-)
 delete mode 100644 eng/_util/cmd/gencryptodoc/crypto.json
 delete mode 100644 eng/_util/cmd/gencryptodoc/schema.json
 create mode 100644 eng/_util/cmd/updatecryptodocs/docs.go
 rename eng/_util/cmd/{gencryptodoc => updatecryptodocs}/header.md (100%)
 rename eng/_util/cmd/{gencryptodoc/main.go => updatecryptodocs/updatecryptodocs.go} (63%)

diff --git a/eng/_util/cmd/gencryptodoc/crypto.json b/eng/_util/cmd/gencryptodoc/crypto.json
deleted file mode 100644
index 0894de81b52..00000000000
--- a/eng/_util/cmd/gencryptodoc/crypto.json
+++ /dev/null
@@ -1,1018 +0,0 @@
-{
-  "$schema": "./schema.json",
-  "sections": [
-    {
-      "title": "Hash and Message Authentication Algorithms",
-      "packages": [
-        "crypto/md5",
-        "crypto/sha1",
-        "crypto/sha256",
-        "crypto/sha512",
-        "crypto/sha3",
-        "crypto/hmac"
-      ],
-      "items": [
-        {
-          "name": "MD5"
-        },
-        {
-          "name": "SHA-1"
-        },
-        {
-          "name": "SHA-2-224",
-          "platforms": {
-            "windows": { "supported": "false" }
-          }
-        },
-        {
-          "name": "SHA-2-256"
-        },
-        {
-          "name": "SHA-2-384"
-        },
-        {
-          "name": "SHA-2-512"
-        },
-        {
-          "name": "SHA-2-512_224",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "linux": { "minGoVersion": "1.24", "minOpenSSLVersion": "1.1.1" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "SHA-2-512_256",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "linux": { "minGoVersion": "1.24", "minOpenSSLVersion": "1.1.1" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "SHA-3-224",
-          "minGoVersion": "1.26",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "linux": { "minOpenSSLVersion": "1.1.1" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "SHA-3-256",
-          "minGoVersion": "1.26",
-          "platforms": {
-            "windows": {
-              "notes": ["Available in Windows 11, version 24H2 or later."]
-            },
-            "linux": { "minOpenSSLVersion": "1.1.1" },
-            "macos": { "minMacOSVersion": "26" }
-          }
-        },
-        {
-          "name": "SHA-3-384",
-          "minGoVersion": "1.26",
-          "platforms": {
-            "windows": {
-              "notes": ["Available in Windows 11, version 24H2 or later."]
-            },
-            "linux": { "minOpenSSLVersion": "1.1.1" },
-            "macos": { "minMacOSVersion": "26" }
-          }
-        },
-        {
-          "name": "SHA-3-512",
-          "minGoVersion": "1.26",
-          "platforms": {
-            "windows": {
-              "notes": ["Available in Windows 11, version 24H2 or later."]
-            },
-            "linux": { "minOpenSSLVersion": "1.1.1" },
-            "macos": { "minMacOSVersion": "26" }
-          }
-        },
-        {
-          "name": "SHAKE-128",
-          "platforms": {
-            "linux": { "minOpenSSLVersion": "3.3" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "SHAKE-256",
-          "platforms": {
-            "linux": { "minOpenSSLVersion": "3.3" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "CSHAKE-128",
-          "platforms": {
-            "linux": { "supported": "false" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "CSHAKE-256",
-          "platforms": {
-            "linux": { "supported": "false" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "HMAC",
-          "notes": [
-            "Supports only hash algorithms that are supported as standalone hash functions."
-          ]
-        }
-      ]
-    },
-    {
-      "title": "Symmetric encryption",
-      "columnHeader": "Cipher + Mode",
-      "packages": ["crypto/aes", "crypto/cipher", "crypto/des", "crypto/rc4"],
-      "description": "",
-      "footer": "- Key Sizes\n\n  AES-GCM works with 128, 192, and 256-bit keys.\n\n- Nonce Sizes\n\n  AES-GCM works with 12-byte nonces.\n\n- Tag Sizes\n\n  AES-GCM works with 16-byte tags.",
-      "subsections": [],
-      "items": [
-        {
-          "name": "AES-ECB"
-        },
-        {
-          "name": "AES-CBC"
-        },
-        {
-          "name": "AES-CTR",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "AES-CFB",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "linux": { "supported": "false" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "AES-OFB",
-          "platforms": {
-            "windows": { "supported": "false" },
-            "linux": { "supported": "false" },
-            "macos": { "supported": "false" }
-          }
-        },
-        {
-          "name": "AES-GCM",
-          "notes": ["AES-GCM supports specific keys, nonces, and tags:"]
-        },
-        {
-          "name": "DES-CBC",
-          "platforms": {
-            "linux": {
-              "supported": "warn",
-              "notes": [
-                "When using OpenSSL 3, requires the legacy provider to be enabled."
-              ]
-            }
-          }
-        },
-        {
-          "name": "DES-ECB",
-          "platforms": {
-            "linux": {
-              "supported": "warn",
-              "notes": [
-                "When using OpenSSL 3, requires the legacy provider to be enabled."
-              ]
-            }
-          }
-        },
-        {
-          "name": "3DES-ECB"
-        },
-        {
-          "name": "3DES-CBC"
-        },
-        {
-          "name": "RC4",
-          "platforms": {
-            "linux": {
-              "supported": "warn",
-              "notes": [
-                "When using OpenSSL 3, requires the legacy provider to be enabled."
-              ]
-            }
-          }
-        }
-      ]
-    },
-    {
-      "title": "Asymmetric encryption",
-      "packages": ["RSA", "ECDSA", "ECDH", "Ed25519", "DSA"],
-      "description": "",
-      "subsections": [
-        {
-          "title": "RSA",
-          "columnHeader": "Padding Mode",
-          "packages": ["crypto/rsa"],
-          "description": "[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.\n\nMulti-prime RSA keys are not supported.\n\nThe RSA key size is subject to the limitations of the underlying cryptographic library.\nFor example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.\nPlease refer to the documentation of the underlying cryptographic library for the specific limitations.\n\nOperations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
-          "subsections": [],
-          "items": [
-            {
-              "name": "OAEP (MD5)",
-              "platforms": {
-                "macos": {
-                  "notes": [
-                    "macOS doesn't support passing a custom label to OAEP functions."
-                  ]
-                }
-              }
-            },
-            {
-              "name": "OAEP (SHA-1)",
-              "platforms": {
-                "macos": {
-                  "notes": [
-                    "macOS doesn't support passing a custom label to OAEP functions."
-                  ]
-                }
-              }
-            },
-            {
-              "name": "OAEP (SHA-2)",
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ],
-              "platforms": {
-                "macos": {
-                  "notes": [
-                    "macOS doesn't support passing a custom label to OAEP functions."
-                  ]
-                }
-              }
-            },
-            {
-              "name": "OAEP (SHA-3)",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PSS (MD5)",
-              "platforms": {
-                "windows": {
-                  "notes": [
-                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
-                  ]
-                },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PSS (SHA-1)",
-              "platforms": {
-                "windows": {
-                  "notes": [
-                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
-                  ]
-                },
-                "macos": {
-                  "notes": [
-                    "On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants)."
-                  ]
-                }
-              }
-            },
-            {
-              "name": "PSS (SHA-2)",
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ],
-              "platforms": {
-                "windows": {
-                  "notes": [
-                    "On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported."
-                  ]
-                },
-                "macos": {
-                  "notes": [
-                    "On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants)."
-                  ]
-                }
-              }
-            },
-            {
-              "name": "PSS (SHA-3)",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PKCS1v15 Signature (Unhashed)"
-            },
-            {
-              "name": "PKCS1v15 Signature (RIPMED160)",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": {
-                  "minGoVersion": "1.24"
-                },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PKCS1v15 Signature (MD4)",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": {
-                  "minGoVersion": "1.24"
-                },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PKCS1v15 Signature (MD5)",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PKCS1v15 Signature (MD5-SHA1)",
-              "platforms": {
-                "windows": {
-                  "minGoVersion": "1.24"
-                },
-                "linux": {
-                  "minGoVersion": "1.24"
-                },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "PKCS1v15 Signature (SHA-1)"
-            },
-            {
-              "name": "PKCS1v15 Signature (SHA-2)",
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            },
-            {
-              "name": "PKCS1v15 Signature (SHA-3)",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            }
-          ]
-        },
-        {
-          "title": "ECDSA",
-          "columnHeader": "Elliptic Curve",
-          "packages": ["crypto/ecdsa", "crypto/elliptic"],
-          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
-          "subsections": [],
-          "items": [
-            {
-              "name": "NIST P-224 (secp224r1)",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "NIST P-256 (secp256r1)"
-            },
-            {
-              "name": "NIST P-384 (secp384r1)"
-            },
-            {
-              "name": "NIST P-521 (secp521r1)"
-            }
-          ]
-        },
-        {
-          "title": "ECDH",
-          "columnHeader": "Elliptic Curve",
-          "packages": ["crypto/ecdh"],
-          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
-          "subsections": [],
-          "items": [
-            {
-              "name": "NIST P-224 (secp224r1)",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "NIST P-256 (secp256r1)"
-            },
-            {
-              "name": "NIST P-384 (secp384r1)"
-            },
-            {
-              "name": "NIST P-521 (secp521r1)"
-            },
-            {
-              "name": "X25519 (curve25519)",
-              "minGoVersion": "1.26",
-              "platforms": {
-                "linux": {
-                  "minOpenSSLVersion": "1.1.1"
-                }
-              }
-            }
-          ]
-        },
-        {
-          "title": "Ed25519",
-          "columnHeader": "Schemes",
-          "packages": ["crypto/ed25519"],
-          "description": "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
-          "subsections": [],
-          "items": [
-            {
-              "name": "Ed25519",
-              "platforms": {
-                "windows": { "supported": "false" }
-              }
-            },
-            {
-              "name": "Ed25519ctx",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "Ed25519ph",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "linux": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            }
-          ]
-        },
-        {
-          "title": "DSA",
-          "columnHeader": "Parameters",
-          "packages": [],
-          "description": "",
-          "subsections": [],
-          "items": [
-            {
-              "name": "L1024N160",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "L2048N224",
-              "platforms": {
-                "windows": { "supported": "false" },
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "L2048N256",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            },
-            {
-              "name": "L3072N256",
-              "platforms": {
-                "macos": { "supported": "false" }
-              }
-            }
-          ]
-        }
-      ]
-    },
-    {
-      "title": "Key derivation functions (KDFs)",
-      "columnHeader": "Functions",
-      "packages": ["crypto/hkdf", "crypto/pbkdf2"],
-      "description": "",
-      "subsections": [],
-      "items": [
-        {
-          "name": "PBKDF2",
-          "platforms": {
-            "windows": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            },
-            "linux": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            },
-            "macos": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            }
-          }
-        },
-        {
-          "name": "HKDF",
-          "platforms": {
-            "windows": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            },
-            "linux": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            },
-            "macos": {
-              "notes": [
-                "Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms)."
-              ]
-            }
-          }
-        }
-      ]
-    },
-    {
-      "title": "Key Encapsulation Mechanisms (KEMs)",
-      "packages": ["ML-KEM"],
-      "description": "",
-      "subsections": [
-        {
-          "title": "ML-KEM",
-          "columnHeader": "Parameters",
-          "packages": ["crypto/mlkem"],
-          "minGoVersion": "1.26",
-          "subsections": [],
-          "items": [
-            {
-              "name": "768",
-              "platforms": {
-                "windows": {
-                  "notes": [
-                    "Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later."
-                  ]
-                },
-                "linux": {
-                  "minOpenSSLVersion": "3.5.0"
-                },
-                "macos": {
-                  "minMacOSVersion": "26"
-                }
-              }
-            },
-            {
-              "name": "1024",
-              "platforms": {
-                "windows": {
-                  "notes": [
-                    "Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later."
-                  ]
-                },
-                "linux": {
-                  "minOpenSSLVersion": "3.5.0"
-                },
-                "macos": {
-                  "minMacOSVersion": "26"
-                }
-              }
-            }
-          ]
-        }
-      ]
-    },
-    {
-      "title": "Higher-level protocols",
-      "packages": ["HPKE", "TLS"],
-      "description": "High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,\nsuch as TLS or Hybrid Public Key Encryption (HPKE).\n\nThese protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.\n\nThis section includes the following subsections:",
-      "subsections": [
-        {
-          "title": "Hybrid Public Key Encryption (HPKE)",
-          "packages": ["AEAD Functions", "KDFs", "KEMs", "crypto/hpke"],
-          "description": "",
-          "subsections": [
-            {
-              "title": "HPKE Authenticated Encryption with Associated Data (AEAD) Functions",
-              "columnHeader": "Functions",
-              "shortTitle": "AEAD Functions",
-              "packages": [],
-              "description": "",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "AES-128-GCM"
-                },
-                {
-                  "name": "AES-256-GCM"
-                },
-                {
-                  "name": "ChaCha20Poly1305",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "Export-only",
-                  "platforms": {
-                    "windows": { "supported": "N/A" },
-                    "linux": { "supported": "N/A" },
-                    "macos": { "supported": "N/A" }
-                  }
-                }
-              ]
-            },
-            {
-              "title": "HPKE Key Derivation Functions (KDFs)",
-              "columnHeader": "Functions",
-              "shortTitle": "KDFs",
-              "packages": [],
-              "description": "",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "HKDF-SHA256"
-                },
-                {
-                  "name": "HKDF-SHA384"
-                },
-                {
-                  "name": "HKDF-SHA512"
-                }
-              ]
-            },
-            {
-              "title": "HPKE Key Encapsulation Mechanisms (KEMs)",
-              "columnHeader": "Functions",
-              "shortTitle": "KEMs",
-              "packages": [],
-              "description": "",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "DHKEM(P-256, HKDF-SHA256)"
-                },
-                {
-                  "name": "DHKEM(P-384, HKDF-SHA384)"
-                },
-                {
-                  "name": "DHKEM(P-521, HKDF-SHA512)"
-                },
-                {
-                  "name": "DHKEM(X25519, HKDF-SHA256)",
-                  "notes": ["See the [X25519](#ecdh) section for requirements."]
-                },
-                {
-                  "name": "ML-KEM-768",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "ML-KEM-1024",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "MLKEM768-P256",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "MLKEM1024-P384",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "MLKEM768-X25519",
-                  "notes": [
-                    "See the [X25519](#ecdh) section for requirements.",
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                }
-              ]
-            }
-          ]
-        },
-        {
-          "title": "TLS",
-          "packages": [
-            "TLS Versions",
-            "TLS Cipher Suites",
-            "TLS Curves and Groups",
-            "TLS Signature Schemes",
-            "crypto/tls"
-          ],
-          "description": "",
-          "subsections": [
-            {
-              "title": "TLS Versions",
-              "columnHeader": "Version",
-              "packages": [],
-              "description": "The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "SSL 3.0",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS 1.0",
-                  "platforms": {
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS 1.1",
-                  "platforms": {
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS 1.2"
-                },
-                {
-                  "name": "TLS 1.3"
-                }
-              ]
-            },
-            {
-              "title": "TLS Cipher Suites",
-              "columnHeader": "Name",
-              "packages": [],
-              "footer": "On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "TLS_RSA_WITH_RC4_128_SHA",
-                  "platforms": {
-                    "linux": {
-                      "supported": "warn",
-                      "notes": [
-                        "When using OpenSSL 3, requires the legacy provider to be enabled."
-                      ]
-                    }
-                  }
-                },
-                {
-                  "name": "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
-                  "platforms": {
-                    "linux": {
-                      "supported": "warn",
-                      "notes": [
-                        "When using OpenSSL 3, requires the legacy provider to be enabled."
-                      ]
-                    }
-                  }
-                },
-                {
-                  "name": "TLS_RSA_WITH_AES_128_CBC_SHA"
-                },
-                {
-                  "name": "TLS_RSA_WITH_AES_256_CBC_SHA"
-                },
-                {
-                  "name": "TLS_RSA_WITH_AES_128_CBC_SHA256"
-                },
-                {
-                  "name": "TLS_RSA_WITH_AES_128_GCM_SHA256"
-                },
-                {
-                  "name": "TLS_RSA_WITH_AES_256_GCM_SHA384"
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
-                  "platforms": {
-                    "linux": {
-                      "supported": "warn",
-                      "notes": [
-                        "When using OpenSSL 3, requires the legacy provider to be enabled."
-                      ]
-                    }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
-                  "platforms": {
-                    "linux": {
-                      "supported": "warn",
-                      "notes": [
-                        "When using OpenSSL 3, requires the legacy provider to be enabled."
-                      ]
-                    }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
-                  "platforms": {
-                    "linux": {
-                      "supported": "warn",
-                      "notes": [
-                        "When using OpenSSL 3, requires the legacy provider to be enabled."
-                      ]
-                    }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS_AES_128_GCM_SHA256"
-                },
-                {
-                  "name": "TLS_AES_256_GCM_SHA384"
-                },
-                {
-                  "name": "TLS_CHACHA20_POLY1305_SHA256",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                },
-                {
-                  "name": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
-                  "platforms": {
-                    "windows": { "supported": "false" },
-                    "linux": { "supported": "false" },
-                    "macos": { "supported": "false" }
-                  }
-                }
-              ]
-            },
-            {
-              "title": "TLS Curves and Groups",
-              "columnHeader": "Name",
-              "packages": [],
-              "description": "Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "CurveP256"
-                },
-                {
-                  "name": "CurveP384"
-                },
-                {
-                  "name": "CurveP521"
-                },
-                {
-                  "name": "X25519",
-                  "notes": ["See the [X25519](#ecdh) section for requirements."]
-                },
-                {
-                  "name": "X25519MLKEM768",
-                  "notes": [
-                    "See the [X25519](#ecdh) section for requirements.",
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "SecP256r1MLKEM768",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                },
-                {
-                  "name": "SecP384r1MLKEM1024",
-                  "notes": [
-                    "See the [ML-KEM](#ml-kem) section for requirements."
-                  ]
-                }
-              ]
-            },
-            {
-              "title": "TLS Signature Schemes",
-              "columnHeader": "Name",
-              "packages": [],
-              "description": "Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#SignatureScheme).",
-              "subsections": [],
-              "items": [
-                {
-                  "name": "PKCS1WithSHA1"
-                },
-                {
-                  "name": "PKCS1WithSHA256"
-                },
-                {
-                  "name": "PKCS1WithSHA384"
-                },
-                {
-                  "name": "PKCS1WithSHA512"
-                },
-                {
-                  "name": "PSSWithSHA256"
-                },
-                {
-                  "name": "PSSWithSHA384"
-                },
-                {
-                  "name": "PSSWithSHA512"
-                },
-                {
-                  "name": "ECDSAWithSHA1"
-                },
-                {
-                  "name": "ECDSAWithP256AndSHA256"
-                },
-                {
-                  "name": "ECDSAWithP384AndSHA384"
-                },
-                {
-                  "name": "ECDSAWithP521AndSHA512"
-                },
-                {
-                  "name": "Ed25519",
-                  "platforms": {
-                    "windows": { "supported": "false" }
-                  }
-                }
-              ]
-            }
-          ]
-        }
-      ]
-    }
-  ]
-}
diff --git a/eng/_util/cmd/gencryptodoc/schema.json b/eng/_util/cmd/gencryptodoc/schema.json
deleted file mode 100644
index ef8f7269c9b..00000000000
--- a/eng/_util/cmd/gencryptodoc/schema.json
+++ /dev/null
@@ -1,79 +0,0 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "type": "object",
-  "properties": {
-    "sections": {
-      "type": "array",
-      "items": { "$ref": "#/definitions/section" }
-    }
-  },
-  "definitions": {
-    "section": {
-      "type": "object",
-      "properties": {
-        "title": { "type": "string" },
-        "shortTitle": { "type": "string" },
-        "columnHeader": { "type": "string" },
-        "packages": { "type": "array", "items": { "type": "string" } },
-        "description": { "type": "string" },
-        "items": { "type": "array", "items": { "$ref": "#/definitions/item" } },
-        "minGoVersion": {
-          "type": "string",
-          "description": "The minimum supported Go version e.g 1.24."
-        },
-        "subsections": {
-          "type": "array",
-          "items": { "$ref": "#/definitions/section" }
-        },
-        "footnotes": { "type": "array", "items": { "type": "string" } },
-        "footer": { "type": "string" }
-      },
-      "required": ["title"],
-      "additionalProperties": false
-    },
-    "item": {
-      "type": "object",
-      "properties": {
-        "name": { "type": "string" },
-        "minGoVersion": {
-          "type": "string",
-          "description": "The minimum supported Go version e.g 1.24."
-        },
-        "notes": { "type": "array", "items": { "type": "string" } },
-        "platforms": {
-          "type": "object",
-          "properties": {
-            "windows": { "$ref": "#/definitions/platformStatus" },
-            "linux": { "$ref": "#/definitions/platformStatus" },
-            "macos": { "$ref": "#/definitions/platformStatus" }
-          }
-        }
-      },
-      "required": ["name"],
-      "additionalProperties": false
-    },
-    "platformStatus": {
-      "type": "object",
-      "properties": {
-        "supported": {
-          "type": "string",
-          "enum": ["false", "warn", "N/A"]
-        },
-        "minGoVersion": {
-          "type": "string",
-          "description": "The minimum supported Go version e.g 1.24."
-        },
-        "minOpenSSLVersion": {
-          "type": "string",
-          "description": "The minimum supported OpenSSL version e.g 1.1.1."
-        },
-        "minMacOSVersion": {
-          "type": "string",
-          "description": "The minimum supported macOS version e.g 26."
-        },
-        "notes": { "type": "array", "items": { "type": "string" } }
-      },
-      "additionalProperties": false
-    }
-  }
-}
diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
new file mode 100644
index 00000000000..e356b00b9ac
--- /dev/null
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -0,0 +1,896 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import _ "embed"
+
+//go:embed header.md
+var header string
+
+type PlatformStatus struct {
+	Supported         string
+	MinGoVersion      string
+	Notes             []string
+	MinMacOSVersion   string
+	MinOpenSSLVersion string
+}
+
+type Item struct {
+	Name         string
+	MinGoVersion string
+	Notes        []string
+	Platforms    map[string]PlatformStatus
+}
+
+type Section struct {
+	Title             string
+	ShortTitle        string
+	ColumnHeader      string
+	Packages          []string
+	Description       string
+	MinGoVersion      string
+	MinMacOSVersion   string
+	MinOpenSSLVersion string
+	Items             []Item
+	Subsections       []Section
+	Footnotes         []string
+	Footer            string
+}
+
+type Document struct {
+	Sections []Section
+}
+
+var doc = Document{
+	Sections: []Section{
+		{
+			Title: "Hash and Message Authentication Algorithms",
+			Packages: []string{
+				"crypto/md5",
+				"crypto/sha1",
+				"crypto/sha256",
+				"crypto/sha512",
+				"crypto/sha3",
+				"crypto/hmac",
+			},
+			Items: []Item{
+				{Name: "MD5"},
+				{Name: "SHA-1"},
+				{
+					Name: "SHA-2-224",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+					},
+				},
+				{Name: "SHA-2-256"},
+				{Name: "SHA-2-384"},
+				{Name: "SHA-2-512"},
+				{
+					Name: "SHA-2-512_224",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"linux":   {MinGoVersion: "1.24", MinOpenSSLVersion: "1.1.1"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name: "SHA-2-512_256",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"linux":   {MinGoVersion: "1.24", MinOpenSSLVersion: "1.1.1"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name:         "SHA-3-224",
+					MinGoVersion: "1.26",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"linux":   {MinOpenSSLVersion: "1.1.1"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name:         "SHA-3-256",
+					MinGoVersion: "1.26",
+					Platforms: map[string]PlatformStatus{
+						"windows": {
+							Notes: []string{"Available in Windows 11, version 24H2 or later."},
+						},
+						"linux": {MinOpenSSLVersion: "1.1.1"},
+						"macos": {MinMacOSVersion: "26"},
+					},
+				},
+				{
+					Name:         "SHA-3-384",
+					MinGoVersion: "1.26",
+					Platforms: map[string]PlatformStatus{
+						"windows": {
+							Notes: []string{"Available in Windows 11, version 24H2 or later."},
+						},
+						"linux": {MinOpenSSLVersion: "1.1.1"},
+						"macos": {MinMacOSVersion: "26"},
+					},
+				},
+				{
+					Name:         "SHA-3-512",
+					MinGoVersion: "1.26",
+					Platforms: map[string]PlatformStatus{
+						"windows": {
+							Notes: []string{"Available in Windows 11, version 24H2 or later."},
+						},
+						"linux": {MinOpenSSLVersion: "1.1.1"},
+						"macos": {MinMacOSVersion: "26"},
+					},
+				},
+				{
+					Name: "SHAKE-128",
+					Platforms: map[string]PlatformStatus{
+						"linux": {MinOpenSSLVersion: "3.3"},
+						"macos": {Supported: "false"},
+					},
+				},
+				{
+					Name: "SHAKE-256",
+					Platforms: map[string]PlatformStatus{
+						"linux": {MinOpenSSLVersion: "3.3"},
+						"macos": {Supported: "false"},
+					},
+				},
+				{
+					Name: "CSHAKE-128",
+					Platforms: map[string]PlatformStatus{
+						"linux": {Supported: "false"},
+						"macos": {Supported: "false"},
+					},
+				},
+				{
+					Name: "CSHAKE-256",
+					Platforms: map[string]PlatformStatus{
+						"linux": {Supported: "false"},
+						"macos": {Supported: "false"},
+					},
+				},
+				{
+					Name: "HMAC",
+					Notes: []string{
+						"Supports only hash algorithms that are supported as standalone hash functions.",
+					},
+				},
+			},
+		},
+		{
+			Title:        "Symmetric encryption",
+			ColumnHeader: "Cipher + Mode",
+			Packages:     []string{"crypto/aes", "crypto/cipher", "crypto/des", "crypto/rc4"},
+			Footer:       "- Key Sizes\n\n  AES-GCM works with 128, 192, and 256-bit keys.\n\n- Nonce Sizes\n\n  AES-GCM works with 12-byte nonces.\n\n- Tag Sizes\n\n  AES-GCM works with 16-byte tags.",
+			Items: []Item{
+				{Name: "AES-ECB"},
+				{Name: "AES-CBC"},
+				{
+					Name: "AES-CTR",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name: "AES-CFB",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"linux":   {Supported: "false"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name: "AES-OFB",
+					Platforms: map[string]PlatformStatus{
+						"windows": {Supported: "false"},
+						"linux":   {Supported: "false"},
+						"macos":   {Supported: "false"},
+					},
+				},
+				{
+					Name:  "AES-GCM",
+					Notes: []string{"AES-GCM supports specific keys, nonces, and tags:"},
+				},
+				{
+					Name: "DES-CBC",
+					Platforms: map[string]PlatformStatus{
+						"linux": {
+							Supported: "warn",
+							Notes: []string{
+								"When using OpenSSL 3, requires the legacy provider to be enabled.",
+							},
+						},
+					},
+				},
+				{
+					Name: "DES-ECB",
+					Platforms: map[string]PlatformStatus{
+						"linux": {
+							Supported: "warn",
+							Notes: []string{
+								"When using OpenSSL 3, requires the legacy provider to be enabled.",
+							},
+						},
+					},
+				},
+				{Name: "3DES-ECB"},
+				{Name: "3DES-CBC"},
+				{
+					Name: "RC4",
+					Platforms: map[string]PlatformStatus{
+						"linux": {
+							Supported: "warn",
+							Notes: []string{
+								"When using OpenSSL 3, requires the legacy provider to be enabled.",
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			Title:       "Asymmetric encryption",
+			Packages:    []string{"RSA", "ECDSA", "ECDH", "Ed25519", "DSA"},
+			Description: "",
+			Subsections: []Section{
+				{
+					Title:        "RSA",
+					ColumnHeader: "Padding Mode",
+					Packages:     []string{"crypto/rsa"},
+					Description:  "[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.\n\nMulti-prime RSA keys are not supported.\n\nThe RSA key size is subject to the limitations of the underlying cryptographic library.\nFor example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.\nPlease refer to the documentation of the underlying cryptographic library for the specific limitations.\n\nOperations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					Items: []Item{
+						{
+							Name: "OAEP (MD5)",
+							Platforms: map[string]PlatformStatus{
+								"macos": {
+									Notes: []string{
+										"macOS doesn't support passing a custom label to OAEP functions.",
+									},
+								},
+							},
+						},
+						{
+							Name: "OAEP (SHA-1)",
+							Platforms: map[string]PlatformStatus{
+								"macos": {
+									Notes: []string{
+										"macOS doesn't support passing a custom label to OAEP functions.",
+									},
+								},
+							},
+						},
+						{
+							Name: "OAEP (SHA-2)",
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+							Platforms: map[string]PlatformStatus{
+								"macos": {
+									Notes: []string{
+										"macOS doesn't support passing a custom label to OAEP functions.",
+									},
+								},
+							},
+						},
+						{
+							Name: "OAEP (SHA-3)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{
+							Name: "PSS (MD5)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {
+									Notes: []string{
+										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+									},
+								},
+								"macos": {Supported: "false"},
+							},
+						},
+						{
+							Name: "PSS (SHA-1)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {
+									Notes: []string{
+										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+									},
+								},
+								"macos": {
+									Notes: []string{
+										"On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
+									},
+								},
+							},
+						},
+						{
+							Name: "PSS (SHA-2)",
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+							Platforms: map[string]PlatformStatus{
+								"windows": {
+									Notes: []string{
+										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+									},
+								},
+								"macos": {
+									Notes: []string{
+										"On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
+									},
+								},
+							},
+						},
+						{
+							Name: "PSS (SHA-3)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{Name: "PKCS1v15 Signature (Unhashed)"},
+						{
+							Name: "PKCS1v15 Signature (RIPMED160)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {MinGoVersion: "1.24"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{
+							Name: "PKCS1v15 Signature (MD4)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {MinGoVersion: "1.24"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{
+							Name: "PKCS1v15 Signature (MD5)",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+						{
+							Name: "PKCS1v15 Signature (MD5-SHA1)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {MinGoVersion: "1.24"},
+								"linux":   {MinGoVersion: "1.24"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{Name: "PKCS1v15 Signature (SHA-1)"},
+						{
+							Name: "PKCS1v15 Signature (SHA-2)",
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+						{
+							Name: "PKCS1v15 Signature (SHA-3)",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+					},
+				},
+				{
+					Title:        "ECDSA",
+					ColumnHeader: "Elliptic Curve",
+					Packages:     []string{"crypto/ecdsa", "crypto/elliptic"},
+					Description:  "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					Items: []Item{
+						{
+							Name: "NIST P-224 (secp224r1)",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+						{Name: "NIST P-256 (secp256r1)"},
+						{Name: "NIST P-384 (secp384r1)"},
+						{Name: "NIST P-521 (secp521r1)"},
+					},
+				},
+				{
+					Title:        "ECDH",
+					ColumnHeader: "Elliptic Curve",
+					Packages:     []string{"crypto/ecdh"},
+					Description:  "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					Items: []Item{
+						{
+							Name: "NIST P-224 (secp224r1)",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+						{Name: "NIST P-256 (secp256r1)"},
+						{Name: "NIST P-384 (secp384r1)"},
+						{Name: "NIST P-521 (secp521r1)"},
+						{
+							Name:         "X25519 (curve25519)",
+							MinGoVersion: "1.26",
+							Platforms: map[string]PlatformStatus{
+								"linux": {MinOpenSSLVersion: "1.1.1"},
+							},
+						},
+					},
+				},
+				{
+					Title:        "Ed25519",
+					ColumnHeader: "Schemes",
+					Packages:     []string{"crypto/ed25519"},
+					Description:  "Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					Items: []Item{
+						{
+							Name: "Ed25519",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+							},
+						},
+						{
+							Name: "Ed25519ctx",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{
+							Name: "Ed25519ph",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"linux":   {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+					},
+				},
+				{
+					Title:        "DSA",
+					ColumnHeader: "Parameters",
+					Items: []Item{
+						{
+							Name: "L1024N160",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+						{
+							Name: "L2048N224",
+							Platforms: map[string]PlatformStatus{
+								"windows": {Supported: "false"},
+								"macos":   {Supported: "false"},
+							},
+						},
+						{
+							Name: "L2048N256",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+						{
+							Name: "L3072N256",
+							Platforms: map[string]PlatformStatus{
+								"macos": {Supported: "false"},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			Title:        "Key derivation functions (KDFs)",
+			ColumnHeader: "Functions",
+			Packages:     []string{"crypto/hkdf", "crypto/pbkdf2"},
+			Items: []Item{
+				{
+					Name: "PBKDF2",
+					Platforms: map[string]PlatformStatus{
+						"windows": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+						"linux": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+						"macos": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+					},
+				},
+				{
+					Name: "HKDF",
+					Platforms: map[string]PlatformStatus{
+						"windows": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+						"linux": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+						"macos": {
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			Title:    "Key Encapsulation Mechanisms (KEMs)",
+			Packages: []string{"ML-KEM"},
+			Subsections: []Section{
+				{
+					Title:        "ML-KEM",
+					ColumnHeader: "Parameters",
+					Packages:     []string{"crypto/mlkem"},
+					MinGoVersion: "1.26",
+					Items: []Item{
+						{
+							Name: "768",
+							Platforms: map[string]PlatformStatus{
+								"windows": {
+									Notes: []string{
+										"Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.",
+									},
+								},
+								"linux": {MinOpenSSLVersion: "3.5.0"},
+								"macos": {MinMacOSVersion: "26"},
+							},
+						},
+						{
+							Name: "1024",
+							Platforms: map[string]PlatformStatus{
+								"windows": {
+									Notes: []string{
+										"Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.",
+									},
+								},
+								"linux": {MinOpenSSLVersion: "3.5.0"},
+								"macos": {MinMacOSVersion: "26"},
+							},
+						},
+					},
+				},
+			},
+		},
+		{
+			Title:       "Higher-level protocols",
+			Packages:    []string{"HPKE", "TLS"},
+			Description: "High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,\nsuch as TLS or Hybrid Public Key Encryption (HPKE).\n\nThese protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.\n\nThis section includes the following subsections:",
+			Subsections: []Section{
+				{
+					Title:    "Hybrid Public Key Encryption (HPKE)",
+					Packages: []string{"AEAD Functions", "KDFs", "KEMs", "crypto/hpke"},
+					Subsections: []Section{
+						{
+							Title:        "HPKE Authenticated Encryption with Associated Data (AEAD) Functions",
+							ColumnHeader: "Functions",
+							ShortTitle:   "AEAD Functions",
+							Items: []Item{
+								{Name: "AES-128-GCM"},
+								{Name: "AES-256-GCM"},
+								{
+									Name: "ChaCha20Poly1305",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "Export-only",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "N/A"},
+										"linux":   {Supported: "N/A"},
+										"macos":   {Supported: "N/A"},
+									},
+								},
+							},
+						},
+						{
+							Title:        "HPKE Key Derivation Functions (KDFs)",
+							ColumnHeader: "Functions",
+							ShortTitle:   "KDFs",
+							Items: []Item{
+								{Name: "HKDF-SHA256"},
+								{Name: "HKDF-SHA384"},
+								{Name: "HKDF-SHA512"},
+							},
+						},
+						{
+							Title:        "HPKE Key Encapsulation Mechanisms (KEMs)",
+							ColumnHeader: "Functions",
+							ShortTitle:   "KEMs",
+							Items: []Item{
+								{Name: "DHKEM(P-256, HKDF-SHA256)"},
+								{Name: "DHKEM(P-384, HKDF-SHA384)"},
+								{Name: "DHKEM(P-521, HKDF-SHA512)"},
+								{
+									Name:  "DHKEM(X25519, HKDF-SHA256)",
+									Notes: []string{"See the [X25519](#ecdh) section for requirements."},
+								},
+								{
+									Name: "ML-KEM-768",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "ML-KEM-1024",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "MLKEM768-P256",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "MLKEM1024-P384",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "MLKEM768-X25519",
+									Notes: []string{
+										"See the [X25519](#ecdh) section for requirements.",
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+							},
+						},
+					},
+				},
+				{
+					Title: "TLS",
+					Packages: []string{
+						"TLS Versions",
+						"TLS Cipher Suites",
+						"TLS Curves and Groups",
+						"TLS Signature Schemes",
+						"crypto/tls",
+					},
+					Subsections: []Section{
+						{
+							Title:        "TLS Versions",
+							ColumnHeader: "Version",
+							Description:  "The TLS stack is implemented using native Go code but the crypto primitives are provided by the system cryptographic libraries.",
+							Items: []Item{
+								{
+									Name: "SSL 3.0",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS 1.0",
+									Platforms: map[string]PlatformStatus{
+										"macos": {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS 1.1",
+									Platforms: map[string]PlatformStatus{
+										"macos": {Supported: "false"},
+									},
+								},
+								{Name: "TLS 1.2"},
+								{Name: "TLS 1.3"},
+							},
+						},
+						{
+							Title:        "TLS Cipher Suites",
+							ColumnHeader: "Name",
+							Footer:       "On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.",
+							Items: []Item{
+								{
+									Name: "TLS_RSA_WITH_RC4_128_SHA",
+									Platforms: map[string]PlatformStatus{
+										"linux": {
+											Supported: "warn",
+											Notes: []string{
+												"When using OpenSSL 3, requires the legacy provider to be enabled.",
+											},
+										},
+									},
+								},
+								{
+									Name: "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
+									Platforms: map[string]PlatformStatus{
+										"linux": {
+											Supported: "warn",
+											Notes: []string{
+												"When using OpenSSL 3, requires the legacy provider to be enabled.",
+											},
+										},
+									},
+								},
+								{Name: "TLS_RSA_WITH_AES_128_CBC_SHA"},
+								{Name: "TLS_RSA_WITH_AES_256_CBC_SHA"},
+								{Name: "TLS_RSA_WITH_AES_128_CBC_SHA256"},
+								{Name: "TLS_RSA_WITH_AES_128_GCM_SHA256"},
+								{Name: "TLS_RSA_WITH_AES_256_GCM_SHA384"},
+								{
+									Name: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
+									Platforms: map[string]PlatformStatus{
+										"linux": {
+											Supported: "warn",
+											Notes: []string{
+												"When using OpenSSL 3, requires the legacy provider to be enabled.",
+											},
+										},
+									},
+								},
+								{Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"},
+								{Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"},
+								{
+									Name: "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
+									Platforms: map[string]PlatformStatus{
+										"linux": {
+											Supported: "warn",
+											Notes: []string{
+												"When using OpenSSL 3, requires the legacy provider to be enabled.",
+											},
+										},
+									},
+								},
+								{
+									Name: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
+									Platforms: map[string]PlatformStatus{
+										"linux": {
+											Supported: "warn",
+											Notes: []string{
+												"When using OpenSSL 3, requires the legacy provider to be enabled.",
+											},
+										},
+									},
+								},
+								{Name: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"},
+								{Name: "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"},
+								{Name: "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"},
+								{Name: "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"},
+								{Name: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
+								{Name: "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"},
+								{Name: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"},
+								{Name: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"},
+								{
+									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{Name: "TLS_AES_128_GCM_SHA256"},
+								{Name: "TLS_AES_256_GCM_SHA384"},
+								{
+									Name: "TLS_CHACHA20_POLY1305_SHA256",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+								{
+									Name: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+										"linux":   {Supported: "false"},
+										"macos":   {Supported: "false"},
+									},
+								},
+							},
+						},
+						{
+							Title:        "TLS Curves and Groups",
+							ColumnHeader: "Name",
+							Description:  "Below are the supported [`tls.CurveIDs`](https://pkg.go.dev/crypto/tls#CurveID).",
+							Items: []Item{
+								{Name: "CurveP256"},
+								{Name: "CurveP384"},
+								{Name: "CurveP521"},
+								{
+									Name:  "X25519",
+									Notes: []string{"See the [X25519](#ecdh) section for requirements."},
+								},
+								{
+									Name: "X25519MLKEM768",
+									Notes: []string{
+										"See the [X25519](#ecdh) section for requirements.",
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "SecP256r1MLKEM768",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+								{
+									Name: "SecP384r1MLKEM1024",
+									Notes: []string{
+										"See the [ML-KEM](#ml-kem) section for requirements.",
+									},
+								},
+							},
+						},
+						{
+							Title:        "TLS Signature Schemes",
+							ColumnHeader: "Name",
+							Description:  "Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#SignatureScheme).",
+							Items: []Item{
+								{Name: "PKCS1WithSHA1"},
+								{Name: "PKCS1WithSHA256"},
+								{Name: "PKCS1WithSHA384"},
+								{Name: "PKCS1WithSHA512"},
+								{Name: "PSSWithSHA256"},
+								{Name: "PSSWithSHA384"},
+								{Name: "PSSWithSHA512"},
+								{Name: "ECDSAWithSHA1"},
+								{Name: "ECDSAWithP256AndSHA256"},
+								{Name: "ECDSAWithP384AndSHA384"},
+								{Name: "ECDSAWithP521AndSHA512"},
+								{
+									Name: "Ed25519",
+									Platforms: map[string]PlatformStatus{
+										"windows": {Supported: "false"},
+									},
+								},
+							},
+						},
+					},
+				},
+			},
+		},
+	},
+}
diff --git a/eng/_util/cmd/gencryptodoc/header.md b/eng/_util/cmd/updatecryptodocs/header.md
similarity index 100%
rename from eng/_util/cmd/gencryptodoc/header.md
rename to eng/_util/cmd/updatecryptodocs/header.md
diff --git a/eng/_util/cmd/gencryptodoc/main.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
similarity index 63%
rename from eng/_util/cmd/gencryptodoc/main.go
rename to eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
index cd4403e09a6..1832a73de36 100644
--- a/eng/_util/cmd/gencryptodoc/main.go
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
@@ -2,103 +2,56 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:generate go run . -o ../../../doc/CrossPlatformCryptography.md crypto.json
-//go:generate go run github.com/wasilibs/go-prettier/cmd/prettier@latest --write ../../../doc/CrossPlatformCryptography.md
-
 package main
 
 import (
-	_ "embed"
-	"encoding/json"
 	"flag"
 	"fmt"
+	"io"
 	"os"
+	"path/filepath"
 	"sort"
 	"strings"
+	"text/tabwriter"
 )
 
-//go:embed header.md
-var header string
-
-type PlatformStatus struct {
-	Supported         string   `json:"supported"`
-	MinGoVersion      string   `json:"minGoVersion,omitempty"`
-	Notes             []string `json:"notes,omitempty"`
-	MinMacOSVersion   string   `json:"minMacOSVersion,omitempty"`
-	MinOpenSSLVersion string   `json:"minOpenSSLVersion,omitempty"`
-}
-
-type Item struct {
-	Name         string                    `json:"name"`
-	MinGoVersion string                    `json:"minGoVersion,omitempty"`
-	Notes        []string                  `json:"notes,omitempty"`
-	Platforms    map[string]PlatformStatus `json:"platforms"`
-}
-
-type Section struct {
-	Title             string    `json:"title"`
-	ShortTitle        string    `json:"shortTitle,omitempty"`
-	ColumnHeader      string    `json:"columnHeader,omitempty"`
-	Packages          []string  `json:"packages,omitempty"`
-	Description       string    `json:"description,omitempty"`
-	MinGoVersion      string    `json:"minGoVersion,omitempty"`
-	MinMacOSVersion   string    `json:"minMacOSVersion,omitempty"`
-	MinOpenSSLVersion string    `json:"minOpenSSLVersion,omitempty"`
-	Items             []Item    `json:"items,omitempty"`
-	Subsections       []Section `json:"subsections,omitempty"`
-	Footnotes         []string  `json:"footnotes,omitempty"`
-	Footer            string    `json:"footer,omitempty"`
-}
+var docPath = filepath.Join("eng", "doc", "CrossPlatformCryptography.md")
 
-type Document struct {
-	Sections []Section `json:"sections"`
-}
+var useStdout = flag.Bool("stdout", false, "Write to stdout instead of file")
 
 func main() {
-	output := flag.String("o", "", "output file path")
 	flag.Parse()
 
-	args := flag.Args()
-	if len(args) != 1 {
-		fmt.Fprintf(os.Stderr, "Usage: %s [options] <path-to-json>\n", os.Args[0])
+	if err := write(); err != nil {
+		fmt.Fprintf(os.Stderr, "Error: %v\n", err)
 		os.Exit(1)
 	}
+}
 
-	if *output != "" {
-		f, err := os.Create(*output)
-		if err != nil {
-			panic(err)
-		}
-		defer f.Close()
-		os.Stdout = f
+func write() error {
+	if err := validate(doc); err != nil {
+		return fmt.Errorf("validation failed: %v", err)
 	}
 
-	data, err := os.ReadFile(args[0])
-	if err != nil {
-		panic(err)
-	}
+	var s strings.Builder
 
-	var doc Document
-	if err := json.Unmarshal(data, &doc); err != nil {
-		panic(err)
-	}
+	fmt.Fprintln(&s, "<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->")
+	fmt.Fprintln(&s)
+	fmt.Fprintf(&s, "%s", header)
 
-	if err := validate(doc); err != nil {
-		fmt.Fprintf(os.Stderr, "Validation error: %v\n", err)
-		os.Exit(1)
+	for _, section := range doc.Sections {
+		printSection(&s, section, 2)
 	}
 
-	fmt.Println("<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->")
-	fmt.Println()
-	fmt.Println(header)
-
-	for _, section := range doc.Sections {
-		printSection(section, 2)
+	if *useStdout {
+		fmt.Print(s.String())
+		return nil
 	}
+	return os.WriteFile(docPath, []byte(s.String()), 0o644)
 }
 
-func printSection(section Section, level int) {
-	fmt.Printf("\n%s %s\n\n", strings.Repeat("#", level), section.Title)
+func printSection(w io.Writer, section Section, level int) {
+	fmt.Fprintf(w, "\n%s %s\n\n", strings.Repeat("#", level), section.Title)
 
 	// Filter packages
 	var validPackages []string
@@ -109,19 +62,19 @@ func printSection(section Section, level int) {
 	}
 
 	if len(validPackages) > 0 {
-		fmt.Println("This section includes the following packages:")
-		fmt.Println()
+		fmt.Fprintln(w, "This section includes the following packages:")
+		fmt.Fprintln(w)
 		for _, pkg := range validPackages {
 			if strings.HasPrefix(pkg, "crypto/") {
-				fmt.Printf("- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
+				fmt.Fprintf(w, "- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
 			} else if strings.HasPrefix(pkg, "golang.org/") {
-				fmt.Printf("- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
+				fmt.Fprintf(w, "- [%s](https://pkg.go.dev/%s)\n", pkg, pkg)
 			} else {
 				// Fallback
-				fmt.Printf("- %s\n", pkg)
+				fmt.Fprintf(w, "- %s\n", pkg)
 			}
 		}
-		fmt.Println()
+		fmt.Fprintln(w)
 	}
 
 	// Prepend version requirements to description if present
@@ -136,19 +89,19 @@ func printSection(section Section, level int) {
 		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting in macOS %s (Tahoe) or later.", section.Title, section.MinMacOSVersion))
 	}
 	if len(versionSentences) > 0 {
-		fmt.Println(strings.Join(versionSentences, " "))
-		fmt.Println()
+		fmt.Fprintln(w, strings.Join(versionSentences, " "))
+		fmt.Fprintln(w)
 	}
 	if section.Description != "" {
-		fmt.Println(section.Description)
-		fmt.Println()
+		fmt.Fprintln(w, section.Description)
+		fmt.Fprintln(w)
 	}
 
 	// Subsections list
 	if len(section.Subsections) > 0 {
 		if section.Description == "" {
-			fmt.Println("This section includes the following subsections:")
-			fmt.Println()
+			fmt.Fprintln(w, "This section includes the following subsections:")
+			fmt.Fprintln(w)
 		}
 		for _, sub := range section.Subsections {
 			// Generate anchor link
@@ -161,39 +114,38 @@ func printSection(section Section, level int) {
 			if sub.ShortTitle != "" {
 				title = sub.ShortTitle
 			}
-			fmt.Printf("- [%s](#%s)\n", title, anchor)
+			fmt.Fprintf(w, "- [%s](#%s)\n", title, anchor)
 
 		}
-		fmt.Println()
 	}
 
 	if len(section.Items) > 0 {
-		printTable(section)
+		printTable(w, section)
 	}
 
 	if section.Footer != "" {
-		fmt.Println(section.Footer)
-		fmt.Println()
+		fmt.Fprintf(w, "\n%s\n", section.Footer)
 	}
 
 	for _, sub := range section.Subsections {
-		printSection(sub, level+1)
+		printSection(w, sub, level+1)
 	}
 }
 
-func printTable(section Section) {
+func printTable(w io.Writer, section Section) {
 	colHeader := section.ColumnHeader
 	if colHeader == "" {
 		colHeader = "Algorithm" // Default
 	}
 
-	fmt.Printf("| %s | Windows | Linux | macOS |\n", colHeader)
+	var wipTable strings.Builder
+	tw := tabwriter.NewWriter(&wipTable, 0, 0, 1, ' ', 0)
+	fmt.Fprintf(tw, "|\t%s\t|\tWindows\t|\tLinux\t|\tmacOS\t|\n", colHeader)
 
-	// Separator line
-	// I need to match the length of dashes if I want exact diff, but markdown doesn't strictly require it.
-	// The original file had varying lengths.
-	// I'll just use standard lengths.
-	fmt.Println("| --- | --- | --- | --- |")
+	// We skip the "| --- | --- | etc." row for now. We need to know the actual
+	// column lengths to put in the proper number of dashes (for raw source
+	// readability). So, we need to figure it out first and inject it later.
+	// fmt.Fprintf(tw, "|\t---\t|\t---\t|\t---\t|\t---\t|\n")
 
 	// Collect footnotes
 	footnotes := make(map[string]int)
@@ -254,7 +206,7 @@ func printTable(section Section) {
 			case "warn":
 				symbol = "⚠️"
 			default:
-				symbol = "❌"
+				symbol = "❌️"
 			}
 
 			statusNotes := status.Notes
@@ -289,9 +241,29 @@ func printTable(section Section) {
 			row = append(row, symbol+notes)
 		}
 
-		fmt.Printf("| %s | %s | %s | %s |\n", row[0], row[1], row[2], row[3])
+		fmt.Fprintf(tw, "|\t%s\t|\t%s\t|\t%s\t|\t%s\t|\n", row[0], row[1], row[2], row[3])
+	}
+
+	err := tw.Flush()
+	if err != nil {
+		panic(err)
+	}
+
+	ts := wipTable.String()
+	// Now, inject the separator line with proper dash lengths.
+	rows := strings.Split(ts, "\n")
+	firstRow := rows[0]
+	fmt.Fprintf(w, "%s\n", firstRow)
+	cells := strings.Split(firstRow, "|")
+	// Ignore the first and last: empty strings.
+	// We expect "| <label> | <label> | ... |"
+	fmt.Fprintf(w, "|")
+	for i := 1; i < len(cells)-1; i++ {
+		fmt.Fprintf(w, " %s |", strings.Repeat("-", len(cells[i])-2))
+	}
+	for _, remainingRow := range rows[1:] {
+		fmt.Fprintf(w, "\n%s", remainingRow)
 	}
-	fmt.Println()
 
 	// Print footnotes
 	// Sort by index
@@ -301,7 +273,7 @@ func printTable(section Section) {
 	}
 
 	for i, note := range sortedNotes {
-		fmt.Printf("<sup>%d</sup>%s\n\n", i+1, note)
+		fmt.Fprintf(w, "\n<sup>%d</sup>%s\n", i+1, note)
 	}
 }
 
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 99cd629e88e..d0c2bf52d15 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -61,20 +61,20 @@ This section includes the following packages:
 | --------------------- | -------------- | ---------------- | -------------- |
 | MD5                   | ✔️             | ✔️               | ✔️             |
 | SHA-1                 | ✔️             | ✔️               | ✔️             |
-| SHA-2-224             | ❌             | ✔️               | ✔️             |
+| SHA-2-224             | ❌️             | ✔️               | ✔️             |
 | SHA-2-256             | ✔️             | ✔️               | ✔️             |
 | SHA-2-384             | ✔️             | ✔️               | ✔️             |
 | SHA-2-512             | ✔️             | ✔️               | ✔️             |
-| SHA-2-512_224         | ❌             | ✔️<sup>1,2</sup> | ❌             |
-| SHA-2-512_256         | ❌             | ✔️<sup>1,2</sup> | ❌             |
-| SHA-3-224<sup>3</sup> | ❌             | ✔️<sup>2</sup>   | ❌             |
+| SHA-2-512_224         | ❌️             | ✔️<sup>1,2</sup> | ❌️             |
+| SHA-2-512_256         | ❌️             | ✔️<sup>1,2</sup> | ❌️             |
+| SHA-3-224<sup>3</sup> | ❌️             | ✔️<sup>2</sup>   | ❌️             |
 | SHA-3-256<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
 | SHA-3-384<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
 | SHA-3-512<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
-| SHAKE-128             | ✔️             | ✔️<sup>6</sup>   | ❌             |
-| SHAKE-256             | ✔️             | ✔️<sup>6</sup>   | ❌             |
-| CSHAKE-128            | ✔️             | ❌               | ❌             |
-| CSHAKE-256            | ✔️             | ❌               | ❌             |
+| SHAKE-128             | ✔️             | ✔️<sup>6</sup>   | ❌️             |
+| SHAKE-256             | ✔️             | ✔️<sup>6</sup>   | ❌️             |
+| CSHAKE-128            | ✔️             | ❌️               | ❌️             |
+| CSHAKE-256            | ✔️             | ❌️               | ❌️             |
 | HMAC<sup>7</sup>      | ✔️             | ✔️               | ✔️             |
 
 <sup>1</sup>Available starting in the Microsoft build of Go 1.24.
@@ -104,9 +104,9 @@ This section includes the following packages:
 | ------------------- | ------- | -------------- | ----- |
 | AES-ECB             | ✔️      | ✔️             | ✔️    |
 | AES-CBC             | ✔️      | ✔️             | ✔️    |
-| AES-CTR             | ❌      | ✔️             | ❌    |
-| AES-CFB             | ❌      | ❌             | ❌    |
-| AES-OFB             | ❌      | ❌             | ❌    |
+| AES-CTR             | ❌️      | ✔️             | ❌️    |
+| AES-CFB             | ❌️      | ❌️             | ❌️    |
+| AES-OFB             | ❌️      | ❌️             | ❌️    |
 | AES-GCM<sup>1</sup> | ✔️      | ✔️             | ✔️    |
 | DES-CBC             | ✔️      | ⚠️<sup>2</sup> | ✔️    |
 | DES-ECB             | ✔️      | ⚠️<sup>2</sup> | ✔️    |
@@ -161,19 +161,19 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 | OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>1</sup> |
 | OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>1</sup> |
 | OAEP (SHA-2)<sup>2</sup>               | ✔️             | ✔️             | ✔️<sup>1</sup> |
-| OAEP (SHA-3)                           | ❌             | ❌             | ❌             |
-| PSS (MD5)                              | ✔️<sup>3</sup> | ✔️             | ❌             |
+| OAEP (SHA-3)                           | ❌️             | ❌️             | ❌️             |
+| PSS (MD5)                              | ✔️<sup>3</sup> | ✔️             | ❌️             |
 | PSS (SHA-1)                            | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
 | PSS (SHA-2)<sup>2</sup>                | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
-| PSS (SHA-3)                            | ❌             | ❌             | ❌             |
+| PSS (SHA-3)                            | ❌️             | ❌️             | ❌️             |
 | PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (RIPMED160)         | ❌             | ✔️<sup>5</sup> | ❌             |
-| PKCS1v15 Signature (MD4)               | ❌             | ✔️<sup>5</sup> | ❌             |
-| PKCS1v15 Signature (MD5)               | ✔️             | ✔️             | ❌             |
-| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>5</sup> | ✔️<sup>5</sup> | ❌             |
+| PKCS1v15 Signature (RIPMED160)         | ❌️             | ✔️<sup>5</sup> | ❌️             |
+| PKCS1v15 Signature (MD4)               | ❌️             | ✔️<sup>5</sup> | ❌️             |
+| PKCS1v15 Signature (MD5)               | ✔️             | ✔️             | ❌️             |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>5</sup> | ✔️<sup>5</sup> | ❌️             |
 | PKCS1v15 Signature (SHA-1)             | ✔️             | ✔️             | ✔️             |
 | PKCS1v15 Signature (SHA-2)<sup>2</sup> | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (SHA-3)             | ❌             | ❌             | ❌             |
+| PKCS1v15 Signature (SHA-3)             | ❌️             | ❌️             | ❌️             |
 
 <sup>1</sup>macOS doesn't support passing a custom label to OAEP functions.
 
@@ -196,7 +196,7 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 | Elliptic Curve         | Windows | Linux | macOS |
 | ---------------------- | ------- | ----- | ----- |
-| NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌    |
+| NIST P-224 (secp224r1) | ✔️      | ✔️    | ❌️    |
 | NIST P-256 (secp256r1) | ✔️      | ✔️    | ✔️    |
 | NIST P-384 (secp384r1) | ✔️      | ✔️    | ✔️    |
 | NIST P-521 (secp521r1) | ✔️      | ✔️    | ✔️    |
@@ -211,7 +211,7 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 | Elliptic Curve                  | Windows | Linux          | macOS |
 | ------------------------------- | ------- | -------------- | ----- |
-| NIST P-224 (secp224r1)          | ✔️      | ✔️             | ❌    |
+| NIST P-224 (secp224r1)          | ✔️      | ✔️             | ❌️    |
 | NIST P-256 (secp256r1)          | ✔️      | ✔️             | ✔️    |
 | NIST P-384 (secp384r1)          | ✔️      | ✔️             | ✔️    |
 | NIST P-521 (secp521r1)          | ✔️      | ✔️             | ✔️    |
@@ -231,18 +231,18 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 | Schemes    | Windows | Linux | macOS |
 | ---------- | ------- | ----- | ----- |
-| Ed25519    | ❌      | ✔️    | ✔️    |
-| Ed25519ctx | ❌      | ❌    | ❌    |
-| Ed25519ph  | ❌      | ❌    | ❌    |
+| Ed25519    | ❌️      | ✔️    | ✔️    |
+| Ed25519ctx | ❌️      | ❌️    | ❌️    |
+| Ed25519ph  | ❌️      | ❌️    | ❌️    |
 
 ### DSA
 
 | Parameters | Windows | Linux | macOS |
 | ---------- | ------- | ----- | ----- |
-| L1024N160  | ✔️      | ✔️    | ❌    |
-| L2048N224  | ❌      | ✔️    | ❌    |
-| L2048N256  | ✔️      | ✔️    | ❌    |
-| L3072N256  | ✔️      | ✔️    | ❌    |
+| L1024N160  | ✔️      | ✔️    | ❌️    |
+| L2048N224  | ❌️      | ✔️    | ❌️    |
+| L2048N256  | ✔️      | ✔️    | ❌️    |
+| L3072N256  | ✔️      | ✔️    | ❌️    |
 
 ## Key derivation functions (KDFs)
 
@@ -313,7 +313,7 @@ This section includes the following subsections:
 | ---------------- | ------- | ----- | ----- |
 | AES-128-GCM      | ✔️      | ✔️    | ✔️    |
 | AES-256-GCM      | ✔️      | ✔️    | ✔️    |
-| ChaCha20Poly1305 | ❌      | ❌    | ❌    |
+| ChaCha20Poly1305 | ❌️      | ❌️    | ❌️    |
 | Export-only      | N/A     | N/A   | N/A   |
 
 #### HPKE Key Derivation Functions (KDFs)
@@ -361,9 +361,9 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 
 | Version | Windows | Linux | macOS |
 | ------- | ------- | ----- | ----- |
-| SSL 3.0 | ❌      | ❌    | ❌    |
-| TLS 1.0 | ✔️      | ✔️    | ❌    |
-| TLS 1.1 | ✔️      | ✔️    | ❌    |
+| SSL 3.0 | ❌️      | ❌️    | ❌️    |
+| TLS 1.0 | ✔️      | ✔️    | ❌️    |
+| TLS 1.1 | ✔️      | ✔️    | ❌️    |
 | TLS 1.2 | ✔️      | ✔️    | ✔️    |
 | TLS 1.3 | ✔️      | ✔️    | ✔️    |
 
@@ -391,14 +391,14 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       | ✔️      | ✔️             | ✔️    |
 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         | ✔️      | ✔️             | ✔️    |
 | TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   | ❌      | ❌             | ❌    |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | ❌      | ❌             | ❌    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   | ❌️      | ❌️             | ❌️    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | ❌️      | ❌️             | ❌️    |
 | TLS_AES_128_GCM_SHA256                        | ✔️      | ✔️             | ✔️    |
 | TLS_AES_256_GCM_SHA384                        | ✔️      | ✔️             | ✔️    |
-| TLS_CHACHA20_POLY1305_SHA256                  | ❌      | ❌             | ❌    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌      | ❌             | ❌    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌      | ❌             | ❌    |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305        | ❌      | ❌             | ❌    |
+| TLS_CHACHA20_POLY1305_SHA256                  | ❌️      | ❌️             | ❌️    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌️      | ❌️             | ❌️    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌️      | ❌️             | ❌️    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305        | ❌️      | ❌️             | ❌️    |
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
@@ -439,4 +439,4 @@ Below are the supported [`tls.SignatureSchemes`](https://pkg.go.dev/crypto/tls#S
 | ECDSAWithP256AndSHA256 | ✔️      | ✔️    | ✔️    |
 | ECDSAWithP384AndSHA384 | ✔️      | ✔️    | ✔️    |
 | ECDSAWithP521AndSHA512 | ✔️      | ✔️    | ✔️    |
-| Ed25519                | ❌      | ✔️    | ✔️    |
+| Ed25519                | ❌️      | ✔️    | ✔️    |

From 3e85872b902928458970c4776c3a72157097d820 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 17 Dec 2025 16:21:37 +0100
Subject: [PATCH 628/887] Make the TLS group settings compliant by default with
 MS TLS policies (#2010)

* make the TLS group settings compliant by default with MS crypto policies

* fix test
---
 ...TLS-settings-with-Microsoft-policies.patch | 366 +++++++++++++++++-
 1 file changed, 351 insertions(+), 15 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index d4c48141d23..275e30178b8 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -4,36 +4,73 @@ Date: Fri, 12 Dec 2025 16:46:44 +0100
 Subject: [PATCH] align TLS settings with Microsoft policies
 
 ---
- doc/godebug.md                 |  4 ++++
- src/crypto/tls/defaults.go     | 10 +++++++++-
- src/crypto/tls/tls_test.go     | 24 ++++++++++++++++++++++++
- src/internal/godebugs/table.go |  1 +
- 4 files changed, 38 insertions(+), 1 deletion(-)
+ doc/godebug.md                   |   9 ++
+ src/crypto/tls/defaults.go       |  63 ++++++++++-
+ src/crypto/tls/handshake_test.go |   3 +
+ src/crypto/tls/tls_test.go       | 183 +++++++++++++++++++++++++++++++
+ src/internal/godebugs/table.go   |   2 +
+ 5 files changed, 259 insertions(+), 1 deletion(-)
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index 28a2dc506ef8ff..8be51c6a136df6 100644
+index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -183,6 +183,10 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
+@@ -183,6 +183,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
  to `cryptocustomrand=0`, ignoring the random parameters. Using `cryptocustomrand=1`
  reverts to the pre-Go 1.26 behavior.
  
 +Microsoft build of Go 1.26 added a new `ms_tlsx25519` setting that controls whether
 +`crypto/tls` enables the X25519 and X25519MLKEM768 TLS groups by default. Setting
 +`ms_tlsx25519=0` disables these groups. The default value is `ms_tlsx25519=1`.
++
++Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
++`crypto/tls` settings. The possible values are:
++- "default": use the recommended Microsoft TLS settings. This is the default.
++- "off": use the default upstream Go TLS settings.
 +
  ### Go 1.25
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 8de8d7e0934b07..0ba8d3ebf0d6e4 100644
+index 8de8d7e0934b07..35c2235a499c12 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
-@@ -15,10 +15,18 @@ import (
+@@ -5,6 +5,7 @@
+ package tls
+ 
+ import (
++	boring "crypto/internal/backend"
+ 	"internal/godebug"
+ 	"slices"
+ 	_ "unsafe" // for linkname
+@@ -15,10 +16,70 @@ import (
  
  var tlsmlkem = godebug.New("tlsmlkem")
  var tlssecpmlkem = godebug.New("tlssecpmlkem")
 +var ms_tlsx25519 = godebug.New("ms_tlsx25519")
++var ms_tlsprofile = godebug.New("ms_tlsprofile")
++
++// Support* functions are cached, so calling them multiple times is cheap.
++var supportedGroups = map[CurveID]bool{
++	CurveP256:          true,
++	CurveP384:          true,
++	CurveP521:          true,
++	X25519:             !boring.Enabled || boring.SupportsCurve("X25519"),
++	X25519MLKEM768:     !boring.Enabled || boring.SupportsCurve("X25519") && boring.SupportsMLKEM768(),
++	SecP256r1MLKEM768:  !boring.Enabled || boring.SupportsMLKEM768(),
++	SecP384r1MLKEM1024: !boring.Enabled || boring.SupportsMLKEM1024(),
++}
++
++func init() {
++	switch ms_tlsprofile.Value() {
++	case "default", "":
++		// OK, Microsoft recommended behavior
++	case "off":
++		// OK, upstream behavior
++	default:
++		panic("unknown GODEBUG setting ms_tlsprofile=" + ms_tlsprofile.Value())
++	}
++}
  
  // defaultCurvePreferences is the default set of supported key exchanges, as
  // well as the preference order.
@@ -46,14 +83,267 @@ index 8de8d7e0934b07..0ba8d3ebf0d6e4 100644
 +			})
 +		}
 +	}()
++	if ms_tlsprofile.Value() == "off" {
++		return upstreamCurvePreferences()
++	}
++	// For now we only have two profiles: default Microsoft and upstream (off).
++	defer func() {
++		groups = slices.DeleteFunc(groups, func(c CurveID) bool {
++			supported, found := supportedGroups[c]
++			if !found {
++				panic("unknown curve ID in defaultCurvePreferences: " + c.String())
++			}
++			return !supported
++		})
++	}()
++	switch {
++	case tlsmlkem.Value() == "0":
++		// tlsmlkem=0 restores the pre-Go 1.24 default.
++		return []CurveID{CurveP384, CurveP256, CurveP521, X25519}
++	case tlssecpmlkem.Value() == "0":
++		// tlssecpmlkem=0 restores the pre-Go 1.26 default.
++		return []CurveID{X25519MLKEM768, CurveP384, CurveP256, CurveP521, X25519}
++	default:
++		return []CurveID{
++			X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
++			CurveP384, CurveP256, CurveP521, X25519,
++		}
++	}
++}
++
++func upstreamCurvePreferences() []CurveID {
  	switch {
  	// tlsmlkem=0 restores the pre-Go 1.24 default.
  	case tlsmlkem.Value() == "0":
+diff --git a/src/crypto/tls/handshake_test.go b/src/crypto/tls/handshake_test.go
+index 6e15459a9a1809..4f47dbd2030d2a 100644
+--- a/src/crypto/tls/handshake_test.go
++++ b/src/crypto/tls/handshake_test.go
+@@ -452,6 +452,9 @@ func runMain(m *testing.M) int {
+ 	// to use cryptotest.SetGlobalRandom instead.
+ 	os.Setenv("GODEBUG", "cryptocustomrand=1,"+os.Getenv("GODEBUG"))
+ 
++	// Disable Microsoft TLS profile to have consistent test results.
++	os.Setenv("GODEBUG", "ms_tlsprofile=off,"+os.Getenv("GODEBUG"))
++
+ 	testConfig = &Config{
+ 		Time:               func() time.Time { return time.Unix(0, 0) },
+ 		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 5f4a2b9de4fd1f..98726c6e9509d5 100644
+index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
-@@ -2113,6 +2113,30 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -24,11 +24,13 @@ import (
+ 	"internal/goexperiment"
+ 	"internal/testenv"
+ 	"io"
++	"maps"
+ 	"math"
+ 	"math/big"
+ 	"net"
+ 	"os"
+ 	"reflect"
++	"runtime"
+ 	"slices"
+ 	"strings"
+ 	"testing"
+@@ -1983,10 +1985,50 @@ func testVerifyCertificates(t *testing.T, version uint16) {
+ 	}
+ }
+ 
++func TestGroupSupport(t *testing.T) {
++	supported := slices.Collect(maps.Keys(supportedGroups))
++	slices.Sort(supported)
++	for _, group := range supported {
++		t.Run(group.String(), func(t *testing.T) {
++			if !boring.Enabled {
++				// In non-systemcrypto builds, all groups must be supported.
++				if !supportedGroups[group] {
++					t.Errorf("expected group %v to be supported", group)
++				}
++				return
++			}
++			if !supportedGroups[group] {
++				switch group {
++				case CurveP256, CurveP384, CurveP521:
++					// These curves are always supported.
++					t.Errorf("must be supported")
++				case X25519:
++					// X25519 is always supported on Windows and macOS.
++					if runtime.GOOS != "linux" {
++						t.Skipf("must be supported")
++					}
++				}
++			}
++		})
++	}
++}
++
+ func TestHandshakeMLKEM(t *testing.T) {
+ 	if boring.Enabled && fips140tls.Required() {
+ 		t.Skip("ML-KEM not supported in BoringCrypto FIPS mode")
+ 	}
++
++	// Enable the default Microsoft TLS profile for the duration of the test.
++	savedGODEBUG := os.Getenv("GODEBUG")
++	os.Setenv("GODEBUG", strings.ReplaceAll(savedGODEBUG, "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
++	t.Cleanup(func() {
++		os.Setenv("GODEBUG", savedGODEBUG)
++	})
++
++	defaultMicrosoftWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
++		CurveP384, CurveP256, CurveP521, X25519}
++	defaultMicrosoftWithoutPQ := []CurveID{CurveP384, CurveP256, CurveP521, X25519}
++
+ 	defaultWithPQ := []CurveID{X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024,
+ 		X25519, CurveP256, CurveP384, CurveP521}
+ 	defaultWithoutPQ := []CurveID{X25519, CurveP256, CurveP384, CurveP521}
+@@ -2001,8 +2043,16 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 	}{
+ 		{
+ 			name:           "Default",
++			expectClient:   defaultMicrosoftWithPQ,
++			expectSelected: X25519MLKEM768,
++		},
++		{
++			name:           "Default GODEBUG ms_tlsprofile=off",
+ 			expectClient:   defaultWithPQ,
+ 			expectSelected: X25519MLKEM768,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "ClientCurvePreferences",
+@@ -2017,17 +2067,41 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			serverConfig: func(config *Config) {
+ 				config.CurvePreferences = []CurveID{X25519}
+ 			},
++			expectClient:   defaultMicrosoftWithPQ,
++			expectSelected: X25519,
++			expectHRR:      boring.Enabled && !boring.SupportsMLKEM768(),
++		},
++		{
++			name: "ServerCurvePreferencesX25519 GODEBUG ms_tlsprofile=off",
++			serverConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{X25519}
++			},
+ 			expectClient:   defaultWithPQ,
+ 			expectSelected: X25519,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "ServerCurvePreferencesHRR",
+ 			serverConfig: func(config *Config) {
+ 				config.CurvePreferences = []CurveID{CurveP256}
+ 			},
++			expectClient:   defaultMicrosoftWithPQ,
++			expectSelected: CurveP256,
++			expectHRR:      true,
++		},
++		{
++			name: "ServerCurvePreferencesHRR GODEBUG ms_tlsprofile=off",
++			serverConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{CurveP256}
++			},
+ 			expectClient:   defaultWithPQ,
+ 			expectSelected: CurveP256,
+ 			expectHRR:      true,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "SecP256r1MLKEM768-Only",
+@@ -2042,9 +2116,21 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			serverConfig: func(config *Config) {
+ 				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
+ 			},
++			expectClient:   defaultMicrosoftWithPQ,
++			expectSelected: SecP256r1MLKEM768,
++			expectHRR:      true,
++		},
++		{
++			name: "SecP256r1MLKEM768-HRR GODEBUG ms_tlsprofile=off",
++			serverConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
++			},
+ 			expectClient:   defaultWithPQ,
+ 			expectSelected: SecP256r1MLKEM768,
+ 			expectHRR:      true,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "SecP384r1MLKEM1024",
+@@ -2086,22 +2172,52 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			clientConfig: func(config *Config) {
+ 				config.MaxVersion = VersionTLS12
+ 			},
++			expectClient:   defaultMicrosoftWithoutPQ,
++			expectSelected: CurveP384,
++		},
++		{
++			name: "ClientTLSv12 GODEBUG ms_tlsprofile=off",
++			clientConfig: func(config *Config) {
++				config.MaxVersion = VersionTLS12
++			},
+ 			expectClient:   defaultWithoutPQ,
+ 			expectSelected: X25519,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "ServerTLSv12",
+ 			serverConfig: func(config *Config) {
+ 				config.MaxVersion = VersionTLS12
+ 			},
++			expectClient:   defaultMicrosoftWithPQ,
++			expectSelected: CurveP384,
++		},
++		{
++			name: "ServerTLSv12  GODEBUG ms_tlsprofile=off",
++			serverConfig: func(config *Config) {
++				config.MaxVersion = VersionTLS12
++			},
+ 			expectClient:   defaultWithPQ,
+ 			expectSelected: X25519,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "GODEBUG tlsmlkem=0",
+ 			preparation: func(t *testing.T) {
+ 				t.Setenv("GODEBUG", "tlsmlkem=0")
+ 			},
++			expectClient:   defaultMicrosoftWithoutPQ,
++			expectSelected: CurveP384,
++		},
++		{
++			name: "GODEBUG tlsmlkem=0,ms_tlsprofile=off",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "tlsmlkem=0,ms_tlsprofile=off")
++			},
+ 			expectClient:   defaultWithoutPQ,
+ 			expectSelected: X25519,
+ 		},
+@@ -2110,9 +2226,65 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			preparation: func(t *testing.T) {
+ 				t.Setenv("GODEBUG", "tlssecpmlkem=0")
+ 			},
++			expectClient:   []CurveID{X25519MLKEM768, CurveP384, CurveP256, CurveP521, X25519},
++			expectSelected: X25519MLKEM768,
++		},
++		{
++			name: "GODEBUG tlssecpmlkem=0,ms_tlsprofile=off",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "tlssecpmlkem=0,ms_tlsprofile=off")
++			},
  			expectClient:   []CurveID{X25519MLKEM768, X25519, CurveP256, CurveP384, CurveP521},
  			expectSelected: X25519MLKEM768,
  		},
@@ -62,36 +352,82 @@ index 5f4a2b9de4fd1f..98726c6e9509d5 100644
 +			preparation: func(t *testing.T) {
 +				t.Setenv("GODEBUG", "ms_tlsx25519=0")
 +			},
++			expectClient:   []CurveID{SecP384r1MLKEM1024, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521},
++			expectSelected: SecP384r1MLKEM1024,
++		},
++		{
++			name: "GODEBUG ms_tlsx25519=0,ms_tlsprofile=off",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0,ms_tlsprofile=off")
++			},
 +			expectClient:   []CurveID{SecP256r1MLKEM768, SecP384r1MLKEM1024, CurveP256, CurveP384, CurveP521},
 +			expectSelected: SecP256r1MLKEM768,
 +		},
 +		{
-+			name: "GODEBUG ms_tlsx25519=0 and tlsmlkem=0",
++			name: "GODEBUG ms_tlsx25519=0,tlsmlkem=0",
 +			preparation: func(t *testing.T) {
 +				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlsmlkem=0")
 +			},
++			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
++			expectSelected: CurveP384,
++		},
++		{
++			name: "GODEBUG ms_tlsx25519=0,tlsmlkem=0,ms_tlsprofile=off",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlsmlkem=0,ms_tlsprofile=off")
++			},
 +			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
 +			expectSelected: CurveP256,
 +		},
 +		{
-+			name: "GODEBUG ms_tlsx25519=0 and tlssecpmlkem=0",
++			name: "GODEBUG ms_tlsx25519=0,tlssecpmlkem=0",
 +			preparation: func(t *testing.T) {
 +				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlssecpmlkem=0")
 +			},
++			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
++			expectSelected: CurveP384,
++		},
++		{
++			name: "GODEBUG ms_tlsx25519=0,tlssecpmlkem=0,ms_tlsprofile=off",
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlssecpmlkem=0,ms_tlsprofile=off")
++			},
 +			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
 +			expectSelected: CurveP256,
 +		},
  	}
  
  	baseConfig := testConfig.Clone()
+@@ -2131,9 +2303,20 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			if test.serverConfig != nil {
+ 				test.serverConfig(serverConfig)
+ 			}
++			x25519Enabled := !strings.Contains(os.Getenv("GODEBUG"), "ms_tlsx25519=0")
++			mstlsprofile := !strings.Contains(os.Getenv("GODEBUG"), "ms_tlsprofile=off")
++			if mstlsprofile && !supportedGroups[test.expectSelected] {
++				t.Skipf("%v not supported", test.expectSelected)
++			}
+ 			serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
+ 				expectClient := slices.Clone(test.expectClient)
+ 				expectClient = slices.DeleteFunc(expectClient, func(c CurveID) bool {
++					if mstlsprofile && !supportedGroups[c] {
++						return true
++					}
++					if !x25519Enabled && (c == X25519MLKEM768 || c == X25519) {
++						return true
++					}
+ 					return fips140tls.Required() && c == X25519
+ 				})
+ 				if !slices.Equal(hello.SupportedCurves, expectClient) {
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
-index 8f6d8bbdda656c..089d7172d5985b 100644
+index 8f6d8bbdda656c..7a5ea67c7dca33 100644
 --- a/src/internal/godebugs/table.go
 +++ b/src/internal/godebugs/table.go
-@@ -49,6 +49,7 @@ var All = []Info{
+@@ -49,6 +49,8 @@ var All = []Info{
  	{Name: "httpservecontentkeepheaders", Package: "net/http", Changed: 23, Old: "1"},
  	{Name: "installgoroot", Package: "go/build"},
  	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque
++	{Name: "ms_tlsprofile", Package: "crypto/tls", Opaque: true},
 +	{Name: "ms_tlsx25519", Package: "crypto/tls", Opaque: true},
  	//{Name: "multipartfiles", Package: "mime/multipart"},
  	{Name: "multipartmaxheaders", Package: "mime/multipart"},

From 49fb697aaa7813f4f9e54354886fdcc98b45e9c9 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 18 Dec 2025 16:12:19 +0100
Subject: [PATCH 629/887] Update submodule to latest `master` in
 `microsoft/main` (#2011)

* Update submodule to latest master (05e41225): simd/archsimd: reword documentation of As methods

* resolve conflicts

* skip TestFIPS140Only for systemcrypto

---------

Co-authored-by: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 go                                            |  2 +-
 ...03-Implement-crypto-internal-backend.patch | 47 ++++--------
 patches/0004-Use-crypto-backends.patch        | 76 +++++++++----------
 3 files changed, 50 insertions(+), 75 deletions(-)

diff --git a/go b/go
index 388eb10f50f..05e41225f6e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 388eb10f50f2b693fb68897dd0ddf627b512a885
+Subproject commit 05e41225f6e7e707c196b57b16ade185a7c6aa06
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 845ef68ed72..df01c6609aa 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,7 +13,7 @@ desired goexperiments and build tags.
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
- src/cmd/dist/test.go                          |  38 +-
+ src/cmd/dist/test.go                          |  30 +-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
@@ -53,7 +53,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2685 insertions(+), 21 deletions(-)
+ 44 files changed, 2678 insertions(+), 20 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -246,7 +246,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index f8d19ac34c562f..2a27d97990fa57 100644
+index 48c3aa5efdb008..3ac500b85e6988 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -276,24 +276,7 @@ index f8d19ac34c562f..2a27d97990fa57 100644
  		}
  	}
  
-@@ -746,9 +748,15 @@ func (t *tester) registerTests() {
- 
- 	// Test GOEXPERIMENT=jsonv2.
- 	if !strings.Contains(goexperiment, "jsonv2") {
-+		// Don't override existing GOEXPERIMENTs.
-+		goexperiment := goexperiment
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "jsonv2"
- 		t.registerTest("GOEXPERIMENT=jsonv2 go test encoding/json/...", &goTest{
- 			variant: "jsonv2",
--			env:     []string{"GOEXPERIMENT=jsonv2"},
-+			env:     []string{"GOEXPERIMENT=" + goexperiment},
- 			pkg:     "encoding/json/...",
- 		})
- 	}
-@@ -763,7 +771,9 @@ func (t *tester) registerTests() {
+@@ -772,7 +774,9 @@ func (t *tester) registerTests() {
  	}
  
  	// Test ios/amd64 for the iOS simulator.
@@ -304,7 +287,7 @@ index f8d19ac34c562f..2a27d97990fa57 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -873,14 +883,21 @@ func (t *tester) registerTests() {
+@@ -882,14 +886,21 @@ func (t *tester) registerTests() {
  
  	// Test internal linking of PIE binaries where it is supported.
  	if t.internalLinkPIE() && !disablePIE {
@@ -327,7 +310,7 @@ index f8d19ac34c562f..2a27d97990fa57 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -888,9 +905,10 @@ func (t *tester) registerTests() {
+@@ -897,9 +908,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -339,7 +322,7 @@ index f8d19ac34c562f..2a27d97990fa57 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -996,7 +1014,9 @@ func (t *tester) registerTests() {
+@@ -1005,7 +1017,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -351,7 +334,7 @@ index f8d19ac34c562f..2a27d97990fa57 100644
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
-index 1722f1a2c34428..ba7740bf8cd31e 100644
+index 260c91e800b622..467d8d6547b70a 100644
 --- a/src/cmd/go/go_test.go
 +++ b/src/cmd/go/go_test.go
 @@ -13,6 +13,7 @@ import (
@@ -376,7 +359,7 @@ index 1722f1a2c34428..ba7740bf8cd31e 100644
  
  		if testGOROOT := os.Getenv("TESTGO_GOROOT"); testGOROOT != "" {
  			// Disallow installs to the GOROOT from which testgo was built.
-@@ -1862,6 +1870,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+@@ -1778,6 +1786,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
  }
  
  func TestGoEnv(t *testing.T) {
@@ -798,7 +781,7 @@ index a4b3a0422f2f41..ce290ab4617cfd 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 0c4cde0399fbd5..196bc4ada5db93 100644
+index bc7504e5b1c39a..734890ae6373c6 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -3138,10 +3121,10 @@ index 00000000000000..b79491c6cb7c08
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 6be3675bde3e07..b581b443d6429b 100644
+index 3f2b2399ec4127..f52b6b1ac71711 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -363,7 +363,7 @@ var depsRules = `
+@@ -370,7 +370,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3150,7 +3133,7 @@ index 6be3675bde3e07..b581b443d6429b 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -563,6 +563,10 @@ var depsRules = `
+@@ -565,6 +565,10 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
@@ -3161,7 +3144,7 @@ index 6be3675bde3e07..b581b443d6429b 100644
  	FIPS, internal/godebug, embed
  	< crypto/internal/fips140only
  	< crypto
-@@ -583,6 +587,13 @@ var depsRules = `
+@@ -585,6 +589,13 @@ var depsRules = `
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3175,7 +3158,7 @@ index 6be3675bde3e07..b581b443d6429b 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -618,8 +629,15 @@ var depsRules = `
+@@ -620,8 +631,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5b27c4cee0e..8da2ae0c8b8 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -5,7 +5,7 @@ Subject: [PATCH] Use crypto backends
 
 ---
  src/cmd/api/boring_test.go                    |   2 +-
- src/cmd/dist/test.go                          |  21 +-
+ src/cmd/dist/test.go                          |   5 +-
  src/cmd/go/go_boring_test.go                  |   6 +-
  src/cmd/go/script_test.go                     |   2 +
  src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
@@ -44,6 +44,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
+ .../internal/fips140only/fips140only_test.go  |   6 +
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
@@ -100,7 +101,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1497 insertions(+), 177 deletions(-)
+ 97 files changed, 1489 insertions(+), 175 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -126,7 +127,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 287424afb0d734..f2068ce397ace4 100644
+index 3ac500b85e6988..027780a74a7fd3 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -138,40 +139,7 @@ index 287424afb0d734..f2068ce397ace4 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -763,18 +763,30 @@ func (t *tester) registerTests() {
- 
- 	// Test GOEXPERIMENT=runtimesecret.
- 	if !strings.Contains(goexperiment, "runtimesecret") {
-+		// Don't override existing GOEXPERIMENTs.
-+		goexperiment := goexperiment
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "runtimesecret"
- 		t.registerTest("GOEXPERIMENT=runtimesecret go test runtime/secret/...", &goTest{
- 			variant: "runtimesecret",
--			env:     []string{"GOEXPERIMENT=runtimesecret"},
-+			env:     []string{"GOEXPERIMENT=" + goexperiment},
- 			pkg:     "runtime/secret/...",
- 		})
- 	}
- 
- 	// Test GOEXPERIMENT=simd on amd64.
- 	if goarch == "amd64" && !strings.Contains(goexperiment, "simd") {
-+		// Don't override existing GOEXPERIMENTs.
-+		goexperiment := goexperiment
-+		if goexperiment != "" {
-+			goexperiment += ","
-+		}
-+		goexperiment += "simd"
- 		t.registerTest("GOEXPERIMENT=simd go test simd/archsimd/...", &goTest{
- 			variant: "simd",
--			env:     []string{"GOEXPERIMENT=simd"},
-+			env:     []string{"GOEXPERIMENT=" + goexperiment},
- 			pkg:     "simd/archsimd/...",
- 		})
- 	}
-@@ -1386,12 +1398,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1380,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -277,10 +245,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 22ee13dff87eca..4d3f90f6c30080 100644
+index bcad5add4abe19..793932e52f8f0a 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1174,6 +1174,12 @@ var hostobj []Hostobj
+@@ -1176,6 +1176,12 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -1606,6 +1574,30 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"crypto/internal/impl"
  	"internal/goarch"
  	"internal/goos"
+diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
+index 96df536d56f345..5ed6026962a17c 100644
+--- a/src/crypto/internal/fips140only/fips140only_test.go
++++ b/src/crypto/internal/fips140only/fips140only_test.go
+@@ -17,6 +17,7 @@ import (
+ 	"crypto/hkdf"
+ 	"crypto/hmac"
+ 	"crypto/hpke"
++	boring "crypto/internal/backend"
+ 	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140"
+ 	"crypto/internal/fips140only"
+@@ -47,6 +48,11 @@ import (
+ 
+ func TestFIPS140Only(t *testing.T) {
+ 	cryptotest.MustSupportFIPS140(t)
++	// TODO: Remove this skip when SystemCrypto supports fips140=only mode.
++	// https://github.com/microsoft/go/issues/1656
++	if boring.Enabled {
++		t.Skip("SystemCrypto does not support fips140=only mode")
++	}
+ 	if !fips140only.Enforced() {
+ 		cmd := testenv.Command(t, testenv.Executable(t), "-test.run=^TestFIPS140Only$", "-test.v")
+ 		cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=only")
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
 index e94bab74fd5774..31a3cee82c5391 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
@@ -3526,7 +3518,7 @@ index c2b1b7037a46cf..4f89d96ec5de28 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index e696bd3a13dcb1..c9e94783260860 100644
+index 77a24b4a78d8fc..84724fac5f951e 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -10,9 +10,9 @@ import (
@@ -3562,7 +3554,7 @@ index efdaeae6f7e39a..491c6d5a0e5d56 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 3bed1359a3c851..dffdc345845748 100644
+index b066924e291686..c81d0e56598634 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -3576,7 +3568,7 @@ index 3bed1359a3c851..dffdc345845748 100644
  	"errors"
  	"fmt"
  	"hash"
-@@ -445,9 +445,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+@@ -447,9 +447,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
  	marshaler, ok := in.(binaryMarshaler)

From 7a18970107af48c08ae2d4340a46178bd6142e06 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 18 Dec 2025 16:36:23 +0000
Subject: [PATCH 630/887] implement ChaCha20Poly1305 (#2013)

---
 eng/_util/cmd/updatecryptodocs/docs.go        |   56 +-
 .../cmd/updatecryptodocs/updatecryptodocs.go  |   11 +-
 eng/doc/CrossPlatformCryptography.md          |   77 +-
 .../0001-Vendor-external-dependencies.patch   | 5425 +++++++++--------
 ...03-Implement-crypto-internal-backend.patch |   66 +-
 patches/0004-Use-crypto-backends.patch        |   54 +-
 6 files changed, 3173 insertions(+), 2516 deletions(-)

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index e356b00b9ac..70601df3a9b 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -591,12 +591,8 @@ var doc = Document{
 								{Name: "AES-128-GCM"},
 								{Name: "AES-256-GCM"},
 								{
-									Name: "ChaCha20Poly1305",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "ChaCha20Poly1305",
+									MinGoVersion: "1.26",
 								},
 								{
 									Name: "Export-only",
@@ -780,54 +776,26 @@ var doc = Document{
 								{Name: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"},
 								{Name: "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"},
 								{
-									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",
+									MinGoVersion: "1.26",
 								},
 								{
-									Name: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
+									MinGoVersion: "1.26",
 								},
 								{Name: "TLS_AES_128_GCM_SHA256"},
 								{Name: "TLS_AES_256_GCM_SHA384"},
 								{
-									Name: "TLS_CHACHA20_POLY1305_SHA256",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "TLS_CHACHA20_POLY1305_SHA256",
+									MinGoVersion: "1.26",
 								},
 								{
-									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
-								},
-								{
-									Name: "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305",
+									MinGoVersion: "1.26",
 								},
 								{
-									Name: "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
-									},
+									Name:         "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
+									MinGoVersion: "1.26",
 								},
 							},
 						},
diff --git a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
index 1832a73de36..45b22b18144 100644
--- a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
@@ -35,7 +35,7 @@ func write() error {
 
 	var s strings.Builder
 
-	fmt.Fprintln(&s, "<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->")
+	fmt.Fprintln(&s, "<!-- This file is generated by eng/_util/cmd/updatecryptodocs. DO NOT EDIT. -->")
 	fmt.Fprintln(&s)
 	fmt.Fprintf(&s, "%s", header)
 
@@ -86,7 +86,7 @@ func printSection(w io.Writer, section Section, level int) {
 		versionSentences = append(versionSentences, fmt.Sprintf("%s requires OpenSSL %s or later.", section.Title, section.MinOpenSSLVersion))
 	}
 	if section.MinMacOSVersion != "" {
-		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting in macOS %s (Tahoe) or later.", section.Title, section.MinMacOSVersion))
+		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting in macOS %s or later.", section.Title, section.MinMacOSVersion))
 	}
 	if len(versionSentences) > 0 {
 		fmt.Fprintln(w, strings.Join(versionSentences, " "))
@@ -291,11 +291,18 @@ func validateSection(section Section) error {
 		return fmt.Errorf("section missing title")
 	}
 
+	seenNames := make(map[string]bool)
+
 	for i := range section.Items {
 		item := &section.Items[i]
 		if item.Name == "" {
 			return fmt.Errorf("item missing name in section %q", section.Title)
 		}
+		if seenNames[item.Name] {
+			return fmt.Errorf("duplicate item name %q in section %q", item.Name, section.Title)
+		}
+		seenNames[item.Name] = true
+
 		if item.Platforms == nil {
 			item.Platforms = make(map[string]PlatformStatus)
 		}
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index d0c2bf52d15..3df63e9edd2 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -1,4 +1,4 @@
-<!-- This file is generated by eng/_util/cmd/gencryptodoc. DO NOT EDIT. -->
+<!-- This file is generated by eng/_util/cmd/updatecryptodocs. DO NOT EDIT. -->
 
 # Cross-Platform Cryptography in the Microsoft build of Go
 
@@ -309,12 +309,14 @@ This section includes the following subsections:
 
 #### HPKE Authenticated Encryption with Associated Data (AEAD) Functions
 
-| Functions        | Windows | Linux | macOS |
-| ---------------- | ------- | ----- | ----- |
-| AES-128-GCM      | ✔️      | ✔️    | ✔️    |
-| AES-256-GCM      | ✔️      | ✔️    | ✔️    |
-| ChaCha20Poly1305 | ❌️      | ❌️    | ❌️    |
-| Export-only      | N/A     | N/A   | N/A   |
+| Functions                    | Windows | Linux | macOS |
+| ---------------------------- | ------- | ----- | ----- |
+| AES-128-GCM                  | ✔️      | ✔️    | ✔️    |
+| AES-256-GCM                  | ✔️      | ✔️    | ✔️    |
+| ChaCha20Poly1305<sup>1</sup> | ✔️      | ✔️    | ✔️    |
+| Export-only                  | N/A     | N/A   | N/A   |
+
+<sup>1</sup>Available starting in the Microsoft build of Go 1.26.
 
 #### HPKE Key Derivation Functions (KDFs)
 
@@ -369,39 +371,40 @@ The TLS stack is implemented using native Go code but the crypto primitives are
 
 #### TLS Cipher Suites
 
-| Name                                          | Windows | Linux          | macOS |
-| --------------------------------------------- | ------- | -------------- | ----- |
-| TLS_RSA_WITH_RC4_128_SHA                      | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| TLS_RSA_WITH_3DES_EDE_CBC_SHA                 | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| TLS_RSA_WITH_AES_128_CBC_SHA                  | ✔️      | ✔️             | ✔️    |
-| TLS_RSA_WITH_AES_256_CBC_SHA                  | ✔️      | ✔️             | ✔️    |
-| TLS_RSA_WITH_AES_128_CBC_SHA256               | ✔️      | ✔️             | ✔️    |
-| TLS_RSA_WITH_AES_128_GCM_SHA256               | ✔️      | ✔️             | ✔️    |
-| TLS_RSA_WITH_AES_256_GCM_SHA384               | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA              | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA          | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_RC4_128_SHA                | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA           | ✔️      | ⚠️<sup>1</sup> | ✔️    |
-| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA            | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA            | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256       | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256         | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       | ✔️      | ✔️             | ✔️    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   | ❌️      | ❌️             | ❌️    |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | ❌️      | ❌️             | ❌️    |
-| TLS_AES_128_GCM_SHA256                        | ✔️      | ✔️             | ✔️    |
-| TLS_AES_256_GCM_SHA384                        | ✔️      | ✔️             | ✔️    |
-| TLS_CHACHA20_POLY1305_SHA256                  | ❌️      | ❌️             | ❌️    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌️      | ❌️             | ❌️    |
-| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305          | ❌️      | ❌️             | ❌️    |
-| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305        | ❌️      | ❌️             | ❌️    |
+| Name                                                      | Windows | Linux          | macOS |
+| --------------------------------------------------------- | ------- | -------------- | ----- |
+| TLS_RSA_WITH_RC4_128_SHA                                  | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_RSA_WITH_3DES_EDE_CBC_SHA                             | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_RSA_WITH_AES_128_CBC_SHA                              | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_256_CBC_SHA                              | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_128_CBC_SHA256                           | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_128_GCM_SHA256                           | ✔️      | ✔️             | ✔️    |
+| TLS_RSA_WITH_AES_256_GCM_SHA384                           | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_RC4_128_SHA                          | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA                      | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA                      | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_RC4_128_SHA                            | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA                       | ✔️      | ⚠️<sup>1</sup> | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                        | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                        | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256                   | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256                     | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256                     | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256                   | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384                     | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384                   | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256<sup>2</sup>   | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256<sup>2</sup> | ✔️      | ✔️             | ✔️    |
+| TLS_AES_128_GCM_SHA256                                    | ✔️      | ✔️             | ✔️    |
+| TLS_AES_256_GCM_SHA384                                    | ✔️      | ✔️             | ✔️    |
+| TLS_CHACHA20_POLY1305_SHA256<sup>2</sup>                  | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305<sup>2</sup>          | ✔️      | ✔️             | ✔️    |
+| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305<sup>2</sup>        | ✔️      | ✔️             | ✔️    |
 
 <sup>1</sup>When using OpenSSL 3, requires the legacy provider to be enabled.
 
+<sup>2</sup>Available starting in the Microsoft build of Go 1.26.
+
 On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.
 
 #### TLS Curves and Groups
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index eacad424fd4..a5831ef27ef 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -44,14 +44,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/aes.go  |  145 +
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../golang-fips/openssl/v2/cipher.go          |  652 +++++
- .../golang-fips/openssl/v2/const.go           |   90 +
+ .../openssl/v2/chacha20poly1305.go            |  149 +
+ .../golang-fips/openssl/v2/cipher.go          |  659 +++++
+ .../golang-fips/openssl/v2/const.go           |   91 +
  .../golang-fips/openssl/v2/cshake.go          |  231 ++
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
  .../github.com/golang-fips/openssl/v2/ecdh.go |  343 +++
- .../golang-fips/openssl/v2/ecdsa.go           |  225 ++
+ .../golang-fips/openssl/v2/ecdsa.go           |  222 ++
  .../golang-fips/openssl/v2/ed25519.go         |  210 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  600 +++++
  .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
@@ -92,7 +93,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/shims.h          |  430 +++
+ .../openssl/v2/internal/ossl/shims.h          |  434 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
@@ -100,12 +101,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   51 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 2045 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   64 +
- .../openssl/v2/internal/ossl/zossl.h          |  358 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1360 ++++++++++
+ .../openssl/v2/internal/ossl/zossl.c          | 2056 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   67 +
+ .../openssl/v2/internal/ossl/zossl.h          |  363 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1368 ++++++++++
  .../v2/internal/ossl/zossl_cgo_go124.go       |   41 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2377 +++++++++++++++++
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2390 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
  .../golang-fips/openssl/v2/openssl.go         |  253 ++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
@@ -139,47 +140,47 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../commoncrypto/zcommoncrypto_cgo.go         |   60 +
  .../commoncrypto/zcommoncrypto_go124.go       |   11 +
  .../commoncrypto/zcommoncrypto_nocgo.go       |   89 +
- .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 167576 bytes
- .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 161632 bytes
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 174600 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 167416 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
- .../internal/cryptokit/shims.h                |   80 +
+ .../internal/cryptokit/shims.h                |   84 +
  .../internal/cryptokit/syscall_nocgo.go       |   15 +
- .../internal/cryptokit/zcryptokit.c           |  252 ++
- .../internal/cryptokit/zcryptokit.h           |   66 +
- .../internal/cryptokit/zcryptokit.s           |  274 ++
- .../internal/cryptokit/zcryptokit_cgo.go      |  212 ++
+ .../internal/cryptokit/zcryptokit.c           |  262 ++
+ .../internal/cryptokit/zcryptokit.h           |   68 +
+ .../internal/cryptokit/zcryptokit.s           |  284 ++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  220 ++
  .../cryptokit/zcryptokit_cgo_go124.go         |   78 +
- .../internal/cryptokit/zcryptokit_nocgo.go    |  337 +++
- .../cryptokit/zcryptokit_swift_amd64.go       |  275 ++
- .../cryptokit/zcryptokit_swift_arm64.go       |  274 ++
- .../internal/fakecgo/abi_amd64.h              |   34 +
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  351 +++
+ .../cryptokit/zcryptokit_swift_amd64.go       |  283 ++
+ .../cryptokit/zcryptokit_swift_arm64.go       |  282 ++
+ .../internal/fakecgo/abi_amd64.h              |   99 +
  .../internal/fakecgo/abi_arm64.h              |   39 +
- .../internal/fakecgo/asm_amd64.s              |   29 +
+ .../internal/fakecgo/asm_amd64.s              |   39 +
  .../internal/fakecgo/asm_arm64.s              |   36 +
  .../internal/fakecgo/callbacks.go             |   93 +
- .../go-crypto-darwin/internal/fakecgo/doc.go  |   32 +
- .../internal/fakecgo/fakecgo.go               |   27 +
+ .../internal/fakecgo/fakecgo.go               |   14 +
+ .../internal/fakecgo/generate.go              |    6 +
  .../internal/fakecgo/go_darwin.go             |   88 +
  .../internal/fakecgo/go_libinit.go            |   72 +
  .../internal/fakecgo/go_setenv.go             |   18 +
  .../internal/fakecgo/go_util.go               |   37 +
  .../internal/fakecgo/iscgo.go                 |   19 +
- .../internal/fakecgo/libcgo.go                |   37 +
+ .../internal/fakecgo/libcgo.go                |   39 +
  .../internal/fakecgo/libcgo_darwin.go         |   26 +
  .../internal/fakecgo/setenv.go                |   19 +
- .../internal/fakecgo/symbols.go               |  225 ++
- .../internal/fakecgo/symbols_darwin.go        |   30 +
- .../internal/fakecgo/trampolines_amd64.s      |  112 +
- .../internal/fakecgo/trampolines_arm64.s      |   82 +
- .../internal/fakecgo/trampolines_stubs.s      |   94 +
+ .../internal/fakecgo/trampolines_amd64.s      |  114 +
+ .../internal/fakecgo/trampolines_arm64.s      |   87 +
+ .../internal/fakecgo/zsymbols.go              |  225 ++
+ .../internal/fakecgo/zsymbols_darwin.go       |   30 +
+ .../internal/fakecgo/ztrampolines_stubs.s     |   73 +
  .../internal/security/security.go             |    9 +
  .../internal/security/shims.h                 |  107 +
  .../internal/security/syscall_nocgo.go        |   15 +
  .../internal/security/zsecurity.c             |  127 +
  .../internal/security/zsecurity.go            |   21 +
  .../internal/security/zsecurity.h             |  100 +
- .../internal/security/zsecurity.s             |  149 ++
+ .../internal/security/zsecurity.s             |  149 +
  .../internal/security/zsecurity_cgo.go        |  368 +++
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
@@ -195,6 +196,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/xsyscall/zdl_nocgo.go            |   48 +
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
+ .../xcrypto/chacha20poly1305.go               |   88 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
  .../microsoft/go-crypto-darwin/xcrypto/des.go |  111 +
  .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   39 +
@@ -217,6 +219,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/aes.go  |  427 +++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
+ .../cng/chacha20poly1305.go                   |  119 +
  .../go-crypto-winnative/cng/cipher.go         |   52 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  140 +
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
@@ -236,13 +239,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
  .../microsoft/go-crypto-winnative/cng/sha3.go |  203 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
- .../internal/bcrypt/bcrypt_windows.go         |  394 +++
+ .../internal/bcrypt/bcrypt_windows.go         |  414 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
- .../internal/bcrypt/zsyscall_windows.go       |  446 ++++
+ .../internal/bcrypt/zsyscall_windows.go       |  438 +++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 234 files changed, 30530 insertions(+), 7 deletions(-)
+ 237 files changed, 31035 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -272,6 +275,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/aes.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/const.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cshake.go
@@ -386,8 +390,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
@@ -396,11 +400,11 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
@@ -423,6 +427,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
@@ -445,6 +450,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/bbig/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/chacha20poly1305.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/cng.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/des.go
@@ -2130,7 +2136,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..4e945511073ecc 100644
+index efc07451b53448..6ef9b5fbcb1146 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2139,21 +2145,21 @@ index efc07451b53448..4e945511073ecc 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..e42e19781dd7f2 100644
+index b6b841b44d8e38..ed947ea7d43b5f 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83 h1:u3WAHp425YzcHygZORNJa9dkyA959Gtti8bUgGYYuiA=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff h1:oerudO/EXeLnT69uP9hbjqwCBZ5RuIwF02vkCOY1nBs=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79 h1:u3ZftMj7JpCAl4Ku8LUngqfn7pNuQG9mAsNMlSjBvDI=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262 h1:fNRFo5bregvphPwnGSPrC0IyGZf6agmeFByo6c88s7E=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182 h1:yeHGQpq1zuXcbMG18BPOTENjfYEgqB7ZEUYC/0eM2Lw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8 h1:lG7y5IdfKZcZI1PWkWTN1W0vpOfFmFHQCjDzx4atIWA=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
@@ -2604,12 +2610,167 @@ index 00000000000000..6461f241f863fc
 +// This definition allows us to avoid importing math/big.
 +// Conversion between BigInt and *big.Int is in openssl/bbig.
 +type BigInt []uint
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
+new file mode 100644
+index 00000000000000..1c6af181cd3496
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
+@@ -0,0 +1,149 @@
++//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++
++package openssl
++
++import (
++	"crypto/cipher"
++	"errors"
++	"runtime"
++	"sync"
++	"unsafe"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++const (
++	chacha20Poly1305KeySize   = 32
++	chacha20Poly1305NonceSize = 12
++	chacha20Poly1305Overhead  = 16
++)
++
++var supportsChaCha20Poly1305 = sync.OnceValue(func() bool {
++	return loadCipher(cipherChaCha20Poly1305, cipherModeNone) != nil
++})
++
++func SupportsChaCha20Poly1305() bool {
++	return supportsChaCha20Poly1305()
++}
++
++type chacha20poly1305 struct {
++	key [chacha20Poly1305KeySize]byte
++}
++
++// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if len(key) != chacha20Poly1305KeySize {
++		return nil, errors.New("chacha20poly1305: bad key length")
++	}
++	ret := new(chacha20poly1305)
++	copy(ret.key[:], key)
++	return ret, nil
++}
++
++func (c *chacha20poly1305) NonceSize() int {
++	return chacha20Poly1305NonceSize
++}
++
++func (c *chacha20poly1305) Overhead() int {
++	return chacha20Poly1305Overhead
++}
++
++func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Seal")
++	}
++	if uint64(len(plaintext)) > (1<<38)-64 {
++		panic("chacha20poly1305: plaintext too large")
++	}
++	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
++	if inexactOverlap(out, plaintext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpEncrypt, c.key[:], nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	if len(additionalData) > 0 {
++		var discard int32
++		if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, base(additionalData), int32(len(additionalData))); err != nil {
++			panic(err)
++		}
++	}
++	var outl int32
++	if len(plaintext) > 0 {
++		if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, base(plaintext), int32(len(plaintext))); err != nil {
++			panic(err)
++		}
++	}
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &outl); err != nil {
++		panic(err)
++	}
++	tag := out[len(out)-chacha20Poly1305Overhead:]
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_GET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(c)
++	return ret
++}
++
++func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Open")
++	}
++	if len(ciphertext) < 16 {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > (1<<38)-48 {
++		panic("chacha20poly1305: ciphertext too large")
++	}
++	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
++	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
++	ret, out := sliceForAppend(dst, len(ciphertext))
++	if inexactOverlap(out, ciphertext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpDecrypt, c.key[:], nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		return nil, err
++	}
++	if len(additionalData) > 0 {
++		var discard int32
++		if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, base(additionalData), int32(len(additionalData))); err != nil {
++			return nil, err
++		}
++	}
++	var outl int32
++	if len(ciphertext) > 0 {
++		if _, err := ossl.EVP_DecryptUpdate(ctx, base(out), &outl, base(ciphertext), int32(len(ciphertext))); err != nil {
++			return nil, err
++		}
++	}
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, base(out[outl:]), &outl); err != nil {
++		return nil, errOpen
++	}
++	runtime.KeepAlive(c)
++	return ret[:len(dst)+len(ciphertext)], nil
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..62c4725df7906f
+index 00000000000000..bb2f0cbbc71232
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,652 @@
+@@ -0,0 +1,659 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -2634,6 +2795,7 @@ index 00000000000000..62c4725df7906f
 +	cipherDES
 +	cipherDES3
 +	cipherRC4
++	cipherChaCha20Poly1305
 +)
 +
 +func (c cipherKind) String() string {
@@ -2650,6 +2812,8 @@ index 00000000000000..62c4725df7906f
 +		return "DES3"
 +	case cipherRC4:
 +		return "RC4"
++	case cipherChaCha20Poly1305:
++		return "ChaCha20-Poly1305"
 +	default:
 +		panic("unknown cipher kind: " + strconv.Itoa(int(c)))
 +	}
@@ -2750,6 +2914,10 @@ index 00000000000000..62c4725df7906f
 +		}
 +	case cipherRC4:
 +		cipher = ossl.EVP_rc4()
++	case cipherChaCha20Poly1305:
++		if ossl.EVP_chacha20_poly1305_Available() {
++			cipher = ossl.EVP_chacha20_poly1305()
++		}
 +	}
 +	return cipher
 +}
@@ -3264,10 +3432,10 @@ index 00000000000000..62c4725df7906f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..84b85024940f7e
+index 00000000000000..e4f8f5b5d0c4a7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,90 @@
+@@ -0,0 +1,91 @@
 +package openssl
 +
 +import "unsafe"
@@ -3301,12 +3469,13 @@ index 00000000000000..84b85024940f7e
 +
 +const ( //checkheader:ignore
 +	// Key types
-+	_KeyTypeRSA       cString = "RSA\x00"
-+	_KeyTypeEC        cString = "EC\x00"
-+	_KeyTypeED25519   cString = "ED25519\x00"
-+	_KeyTypeX25519    cString = "X25519\x00"
-+	_KeyTypeMLKEM768  cString = "ML-KEM-768\x00"
-+	_KeyTypeMLKEM1024 cString = "ML-KEM-1024\x00"
++	_KeyTypeRSA              cString = "RSA\x00"
++	_KeyTypeEC               cString = "EC\x00"
++	_KeyTypeED25519          cString = "ED25519\x00"
++	_KeyTypeX25519           cString = "X25519\x00"
++	_KeyTypeMLKEM768         cString = "ML-KEM-768\x00"
++	_KeyTypeMLKEM1024        cString = "ML-KEM-1024\x00"
++	_KeyTypeChacha20Poly1305 cString = "CHACHA20-POLY1305\x00"
 +
 +	// Digest names
 +	_DigestNameSHAKE128 cString = "SHAKE-128\x00"
@@ -4520,17 +4689,16 @@ index 00000000000000..bf5935bd478bbd
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..4fab819561c656
+index 00000000000000..d364cc0cde0dfc
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,225 @@
+@@ -0,0 +1,222 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
 +
 +import (
 +	"crypto"
-+	"errors"
 +	"runtime"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
@@ -4564,8 +4732,6 @@ index 00000000000000..4fab819561c656
 +	return f(k._pkey)
 +}
 +
-+var errUnknownCurve = errors.New("openssl: unknown elliptic curve")
-+
 +func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
 +	pkey, err := newECDSAKey(curve, x, y, nil)
 +	if err != nil {
@@ -9173,10 +9339,10 @@ index 00000000000000..bb8ea6fafdc4d9
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..ee818c67e47b23
+index 00000000000000..3ce5eb8435c9fd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,430 @@
+@@ -0,0 +1,434 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -9219,6 +9385,9 @@ index 00000000000000..ee818c67e47b23
 +
 +	_EVP_CTRL_GCM_GET_TAG = 0x10,
 +	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
++	_EVP_CTRL_AEAD_GET_TAG = 0x10,
++	_EVP_CTRL_AEAD_SET_TAG = 0x11,
 +	_EVP_PKEY_CTRL_MD     = 1,
 +	_EVP_PKEY_RSA         = 6,
 +	_EVP_PKEY_EC          = 408,
@@ -9437,6 +9606,7 @@ index 00000000000000..ee818c67e47b23
 +const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
 +const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
 +const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_chacha20_poly1305(void) __attribute__((optional,noerror));
 +int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
 +
 +_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
@@ -9883,10 +10053,10 @@ index 00000000000000..fb345aac77ea48
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..413f4c0f0185b9
+index 00000000000000..832ecd8558ffef
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2045 @@
+@@ -0,0 +1,2056 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -10072,6 +10242,7 @@ index 00000000000000..413f4c0f0185b9
 +const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
 +const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
 +const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_chacha20_poly1305)(void);
 +int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
 +int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
 +const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
@@ -10228,6 +10399,7 @@ index 00000000000000..413f4c0f0185b9
 +	__mkcgo__dlsym(EVP_aes_256_ctr)
 +	__mkcgo__dlsym(EVP_aes_256_ecb)
 +	__mkcgo__dlsym(EVP_aes_256_gcm)
++	__mkcgo__dlsym_nocheck(EVP_chacha20_poly1305, EVP_chacha20_poly1305)
 +	__mkcgo__dlsym(EVP_des_cbc)
 +	__mkcgo__dlsym(EVP_des_ecb)
 +	__mkcgo__dlsym(EVP_des_ede3_cbc)
@@ -10334,6 +10506,7 @@ index 00000000000000..413f4c0f0185b9
 +	_g_EVP_aes_256_ctr = NULL;
 +	_g_EVP_aes_256_ecb = NULL;
 +	_g_EVP_aes_256_gcm = NULL;
++	_g_EVP_chacha20_poly1305 = NULL;
 +	_g_EVP_des_cbc = NULL;
 +	_g_EVP_des_ecb = NULL;
 +	_g_EVP_des_ede3_cbc = NULL;
@@ -11632,6 +11805,14 @@ index 00000000000000..413f4c0f0185b9
 +	return _g_EVP_aes_256_gcm();
 +}
 +
++int _mkcgo_available_EVP_chacha20_poly1305() {
++	return _g_EVP_chacha20_poly1305 != NULL;
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void) {
++	return _g_EVP_chacha20_poly1305();
++}
++
 +int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -11934,10 +12115,10 @@ index 00000000000000..413f4c0f0185b9
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..cc1bf289fa1507
+index 00000000000000..39b0a728fdd700
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,67 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -11950,6 +12131,9 @@ index 00000000000000..cc1bf289fa1507
 +	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
 +	EVP_CTRL_GCM_GET_TAG                = 0x10
 +	EVP_CTRL_GCM_SET_TAG                = 0x11
++	EVP_CTRL_AEAD_SET_IVLEN             = 0x9
++	EVP_CTRL_AEAD_GET_TAG               = 0x10
++	EVP_CTRL_AEAD_SET_TAG               = 0x11
 +	EVP_PKEY_CTRL_MD                    = 1
 +	EVP_PKEY_RSA                        = 6
 +	EVP_PKEY_EC                         = 408
@@ -12004,10 +12188,10 @@ index 00000000000000..cc1bf289fa1507
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..f3d568a4bf7a3c
+index 00000000000000..e7513f3e402401
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,358 @@
+@@ -0,0 +1,363 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -12054,6 +12238,9 @@ index 00000000000000..f3d568a4bf7a3c
 +	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
 +	_EVP_CTRL_GCM_GET_TAG = 0x10,
 +	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
++	_EVP_CTRL_AEAD_GET_TAG = 0x10,
++	_EVP_CTRL_AEAD_SET_TAG = 0x11,
 +	_EVP_PKEY_CTRL_MD = 1,
 +	_EVP_PKEY_RSA = 6,
 +	_EVP_PKEY_EC = 408,
@@ -12125,6 +12312,7 @@ index 00000000000000..f3d568a4bf7a3c
 +void __mkcgo_load_version(void* handle);
 +void __mkcgo_unload_version();
 +
++int _mkcgo_available_EVP_chacha20_poly1305();
 +int _mkcgo_available_OPENSSL_version_major();
 +int _mkcgo_available_OPENSSL_version_minor();
 +int _mkcgo_available_OPENSSL_version_patch();
@@ -12304,6 +12492,7 @@ index 00000000000000..f3d568a4bf7a3c
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void);
 +int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, uintptr_t *);
 +int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
 +const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
@@ -12368,10 +12557,10 @@ index 00000000000000..f3d568a4bf7a3c
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..620a5e7f46366e
+index 00000000000000..059562f35df7b3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1360 @@
+@@ -0,0 +1,1368 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -13433,6 +13622,14 @@ index 00000000000000..620a5e7f46366e
 +	return C._mkcgo_EVP_aes_256_gcm()
 +}
 +
++func EVP_chacha20_poly1305_Available() bool {
++	return C._mkcgo_available_EVP_chacha20_poly1305() != 0
++}
++
++func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_chacha20_poly1305()
++}
++
 +func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
@@ -13781,10 +13978,10 @@ index 00000000000000..7ced663df8a562
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..9d93cfcc34abc7
+index 00000000000000..a8ff682b06c5c4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2377 @@
+@@ -0,0 +1,2390 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
@@ -15153,6 +15350,17 @@ index 00000000000000..9d93cfcc34abc7
 +	return EVP_CIPHER_PTR(r0)
 +}
 +
++func EVP_chacha20_poly1305_Available() bool {
++	return _mkcgo_EVP_chacha20_poly1305 != 0
++}
++
++var _mkcgo_EVP_chacha20_poly1305 uintptr
++
++func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_chacha20_poly1305)
++	return EVP_CIPHER_PTR(r0)
++}
++
 +var _mkcgo_EVP_default_properties_enable_fips uintptr
 +
 +func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
@@ -15707,6 +15915,7 @@ index 00000000000000..9d93cfcc34abc7
 +	_mkcgo_EVP_aes_256_ctr = dlsym(handle, "EVP_aes_256_ctr\x00", false)
 +	_mkcgo_EVP_aes_256_ecb = dlsym(handle, "EVP_aes_256_ecb\x00", false)
 +	_mkcgo_EVP_aes_256_gcm = dlsym(handle, "EVP_aes_256_gcm\x00", false)
++	_mkcgo_EVP_chacha20_poly1305 = dlsym(handle, "EVP_chacha20_poly1305\x00", true)
 +	_mkcgo_EVP_des_cbc = dlsym(handle, "EVP_des_cbc\x00", false)
 +	_mkcgo_EVP_des_ecb = dlsym(handle, "EVP_des_ecb\x00", false)
 +	_mkcgo_EVP_des_ede3_cbc = dlsym(handle, "EVP_des_ede3_cbc\x00", false)
@@ -15813,6 +16022,7 @@ index 00000000000000..9d93cfcc34abc7
 +	_mkcgo_EVP_aes_256_ctr = 0
 +	_mkcgo_EVP_aes_256_ecb = 0
 +	_mkcgo_EVP_aes_256_gcm = 0
++	_mkcgo_EVP_chacha20_poly1305 = 0
 +	_mkcgo_EVP_des_cbc = 0
 +	_mkcgo_EVP_des_ecb = 0
 +	_mkcgo_EVP_des_ede3_cbc = 0
@@ -19658,1949 +19868,2019 @@ index 00000000000000..9de8feb80b0276
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..a61334ba448e88c23e42d705b7ad58056ef41ab7
+index 0000000000000000000000000000000000000000..58008e32187f486c82dc7d8da38c5bce1e13c0ea
 GIT binary patch
-literal 167576
-zcmeFa4S1zlT_>1oK_fkFg04>dTB7!hX%#0u!b})MZea&*X-ebLg+XX5&{UHax;u7P
-zB&-ujTij>!^6snIXU&>t1<me&Mt6G5s@Dx@;1-lrgi*ujU|d-Zx=3PLiO6D5wD$LL
-z&ilUiy*EiU{V_iCRP~cS=brOF|F82u=lsv-`#XR87ys}DJw2yBuLu9b-`C);){FlQ
-z;t&769DnP~JmTNbPqI``&m_y>Uw`-woIU)znThy!{`|!Yvlkur?>k2)?ks-C*f+ke
-z!1pvHPXElQo=abd$kTe}BMigy=U@HML#2fC=kGXu=jkFL@-a{(^_0ahl_K-}`PaPa
-z;;YKP+wlztzUD*0#fMG_-@^W>p06s3<+1bUA9};R_gsAL`HOFyzVP6Md(NM4mv`;;
-zM)dDPiT;^W(*M+>r+UgfM}+6k-~G_V2k*WAwIQL3Z}L9l`-PC-0zT?5{<|qgLI`{h
-z-2YHfAsza=-}puX{PYi5-l4xZrFyNPLw!{7waZ%%_#z*xz!y|mMWx?Cf9LOe;5AdP
-zdT0vx$HrcEwgCN(fUiF!{Q~eE_wW4q2VVUHcb~uazE{2W!oBz3^FUSJ?+f^X8TY)a
-z6JI1HGL-ke=~vx-@%+sFZ@BmV*MPq}%JioKzMe03>Soa2B=ooFq^OF3@50pidmen%
-zeHWZrt>39&c&lF)@GZDL{7da@D#jW9OZ?G}td(03`wIN^^pGgicmC>B&sXBd;+Ndi
-z)BD42r{e^`zpo8{A4m9wK=8%KtCmGN{yiHhgZN|7XTM%;;l&Tk+>b_f?*sQU4Sz%U
-zBR|iU+;4c`!PoV)!5~X;QI3G;+aGxFLSDXv|NI@VdJt7np!k+ho^+0byZt)hsME-I
-z8Q)9QFvlN!;O+|#JrtT~7x~YB`vdpiJ@ep$7w*6Njlwh7&eu!d_|U}*_aTk{x|Fwg
-z&hE;`i)QY9{l$ClKY!2bA9z)4*<J8__p2Ye@Zb-His+jE0~hYTc<&Eg`1Zg@MSs+P
-zq2vlbmHO;}?LzO4dmoy9)y2DQzA?W8&wa1H_kOeu=6A6h(s?PQx))U-j*h_d(hI18
-zdoNo56}y@khrmbSfAM!+xF`!fUS7!Zy3-H7`reBV9<ARq-~FBU#_GxIxgu{4a}+-h
-zzH$2E0~I{O;H`pZ?18&q_4?B@7pE@VfAQYCW8(u{#9OlCmvX@R?)x9O|H4aWrl%ix
-zP&^W@&=dPmE1*mHZ)b;i@!nV8`+6vN{8e|qjx}+vo_uVVMecfE-?Pv|@^}5xqy6t;
-zcXWFzd2c=Wu<}<=&D^wq^E&ydC!>e^y|=d%_SDnS!}_Hw{X|ex`O`0ZDNqa}V|Xk*
-zH#C;sHCRvY8W>Aw`p1&z+*(gwd28<&{)b<8-a1fE?znYOB!Ff36{o-duJ_$@&o}oy
-z>&@iK_`dh_%TAv=edkN-4?nsN1&$@z)IVIiHkLFd5!90p)|0o@5j&H7cr0nwl-BH5
-zu+hr^jMS6Hu%knW_Bc9-=zybOqjC86g6&82fYGa?TVw&@W(Zp$To2(|2v<Y662j#W
-zE{1R+g!2v?v)8U&3(@H!Iu)XQ-`ncDtuc;Y2x<s!Z=FuAAl`#`{c2+yEVDFHT8JW8
-zp%B>%m}pI=wZnQ^tNF*JR$u+n&O!aQEA?at!mUHNvE<{<OfJ`xtR=}&CTVOs+Px@Y
-zw+N7oZnb0BE->tzgkjehHY0|yG^4)9(oh4Lt0&Z*YH}=n+azQhOP5&l^>m5Vb|$$x
-zmTU|vLA(z++R1yW%0H8Q9Psl1I-C6cSn|jSVq?i1?09ayp3JO`B{Qq_<gS&m<gVqh
-z<lN#|a&}=X8J({uORO-+&dP$0SW!XG8#U2v(*Ekw<+x%W0`!Dpsz{)iC>5eC^|UEj
-zRA@RcH0wgFb`+}Tg<!u<8Yz<ATTdGlr=F19f{;F!Mo`Z-2rVARl6Nd3=gg(gqT#$_
-z8PUGR{cyEGUks)j<ajI<RFG;(LZp@;ZMedg2E;%%$RIVHq`9Kn{?b5|AW<`FLur$(
-z%8aB9iJ4}SF>Q{B;SHMO8FVyhgY`F-EG;VGL#X9JC1lG;IGg<LSn{@c#XgAG0%Cw=
-zlR$satDtc}j7fGV#I^owTlF*}j(RF8fdpE{$nBqg7rU}+Td+FP10bmY&}wXK=~q*t
-zr%U7!W=dhv?d+J$E(7$H_2i@V<c+=c<ayA$SjaMhoJ}^Z3-pdq{VEEFT3AE0uhGZ8
-zEPce3#Gt@~vYeh=ttT6k07pMuPnuJTZM4Kda}$9nq#FZFN|ywhW`=uz7krI1m0eoT
-z%R=?phEiRr#+Wq5MQdq7fxDPwX|*Uu&PH<1YKTQ%l$th~gw|3o<qV6<CX>LdD8R}}
-z08VO_lPr=%j|8l;W=m+)WnCNZMcvISp}9~(xa*{CgYF<OsEw~_>yYI+ecBw(=5o4y
-zgw_%mXsiOy?Z3$$fq0X~tkLTi?3=%`3)`<a{mRpKo&NsQ=kIzSm|F%)44T<<cQ2gk
-zdDpXGeea|Ro?ic2{9lOsZY~UU&4`B(aHMSvBND}DVmXeA*e>x~&VI@?LjELAyHfW4
-z42)IAbF`U3^trqB^b0VM9Mmrz_Vm5=@~1DKqC+wBjNniVQfUMNMDqUn<$oBg|IHuO
-zm+Pml!Y#o-^nsv(v%7VADO>gAnQ};4_uyZf|DZOSJ{?-_AuUn4wVrCY3>}$q5$$F@
-zxkZrRC2#`Q=AN=YV*bGuxFi3UcfW1n^1@m41-qv%-n`%QmeFh9bkoJJ*nc7TKd7(6
-z;`r}{^{=@qGW%bj%k@rYF%NV{cY;WBA#&*olt6Jh<dOcM2V)dIa+03I--|Gej~>2T
-z-P`yu1fJ=WAn6P;=XPc0qq}gnfP69dd%*W!RG$9&6Ief|;V;qy9f8;*@Ic{(-Zcad
-zbPygWywEvx#@~ADSaR{!Ub>?A^~zfZ=!!xKcicMUI=FOY1g<DsZm0f<Kl-C}jHDQU
-z24Ll5$@}1l_9J#C`E59&Q)m%qlHZ5Rp>82*vh!h6WdP35sCxm7=rE#NP8~vY*HN$&
-zys^;%L|abnM|7Rh|5Dy59MDOaE!)Vkjw;;J1Biz}!{yb+I)16tZH+}lqxWa8$sMS?
-zICoh`IIn1-*#gDy@IV)(A7NN_v<6kJAR214@Pbn%YuL_Ky8*~e)<_`lY>oJm(UQX&
-z9RgMgJcvyKq;`$dP{FEh_^mVzjCHKkGs$nj?K}{$7(H~f!(ly>d<=l&(h~ZZFkg|m
-zj3xKA3Ws%W6;A64oK`rjcfnyj2Z#0SJY1AnR1y3~JFFQUR-j?Mg)U~JUu-qSUDBxW
-z7u-z+)Un1zxs^jo>*mF(P#Rp{#)MH!<|u|0qh~r|6gBfy__S$e6sDUtC@{cFj&9*+
-zPBAZyerE37V!#yPv`NB2IP(H$$aDuycc_p)c;56mrv*bUXBo>j2rWEt+2)ZHT($*7
-z`x>va<IKtgWmY>JXF^4_PAez)X>xs_)^R4vl6n;*wSL7srAwCRzeW^l-Km|Mq%k76
-zrCN?+AV)E16bIxxSvoAZXs$6Q-B?9%CTT&+<xnV<bA2|sj6Q2fxxb0nFk%(AHnsO`
-z2hXltRIWHm%~85hC+4(i5gS|PWxL=dGeGe58Vdp!XYi+`a!fy6YLkKe>9OPs$HIt^
-zHH9==BGg!N*=*RQo}dVx*i0hY*VvIu-4Nci*+Ycz=tWZ=6dLIeexcG>6xFaQ(sqhd
-z5Byo-<iZ4YKWh?bJ_m?W(Fl;yBZ4Uif`qa#*AYZ>OTosbgGG^OE+dFlyd{p71b}Ws
-zaCX*dRs5L>NrW#Y(T-9N97%7?w}j1Ep>50~uro_pfr|ATK?j^f+lfiNPU<futvP8?
-zfvm>}t<mOz(+?3ieOQ{-j4omwbka~Ec4HTk$!p%0#El(E+R(2w)2|M%ne9$q^Dlj0
-zyVv|37)wM;Uh|q!tr~Gl!Nxj*$PVKeeAf$h+Oq$VX^H|wZ@Q$cz2BBnGa5T*1)0Q7
-z8Wel))5=rrqt0y$!S*v6E5MflrwUj>L^Y=*7!(sK_<k1n>>p<Gow>m0^}!Q<OXa2Y
-z#M9@naCeC6g8tbF!*w~JBY@Bq$n~z#ExNOS;3yF*%_ByGy(1>=@M|0Wj&_WgUfJp?
-zl@+CAblC+*7rL#7X`H<e<K}(xe#eqsQP%&)()$+c;>cqurr$I37<so4Zbt@1B=z!8
-zdKTHS6{}+pcpfRU#W<=*BB?1$BCKdKJq*}st@qkiAdy)I)C?C_>e<XX)&T|)eb=B=
-zx-^1#0B#5*)fiS!p>Hi3wKMB=q*FvVQIr%G^o|9!x~Z*z+IRuiP%`Gk%oT;nB2x$<
-z9FySkNTgJYW|0LaHK$8uW(7PmA3#`9bBpzKh7|`jU><#V`Yu}2Jj9j#39`+;PTvU&
-zYhlI%W_yV*@e)ZeFc{hn3nScSD8F@dP0OlC(<&`25Pnm6QB*^Nt!_<C>j;-rj%{8v
-zHRYm)lWfzaX}%iDurQ104pJ?1X?->gYfB$RTiiYgfE5q8-EMI7VClylkamLUUNVQ2
-zXt*-#LuO?&E$FNVm}E|4$wxyyG?blgFv}H9Lk*c5QgYfXl7w+c3~`-mSTRa0i%dQV
-z(;igX+#1+e4|p<_NS6ejHZ0KDm3ne+wH{U&qsuq9qB0nGYrqo*{W_w3jUUh$yks?N
-z0S>Eb)E@dZE4)b^T^q+XL{kb$18}U5elS`C$XN1;(C~5$T4eK}D_lu7Pt3{Ef&#Yr
-zbL?9%mkiSypui|DsI*C_sI(SKq)X26a&6IH)Rb9fPs~7s^@svIF%IMw&a7em5{Y?#
-zp%D&pt`brm%$j1^w1TBs0*?pJLA6$AM%J7{x@>^UD}m*P^3=@71+_t_m}z-3<(%4t
-z{F8ujrVvjU@pw1H$`j%#BPLW-6!Aa=<)lku+`eK2a8i@9#H4wbStunPIB8Qs&=Qm<
-zi%ivphQi)t;d0(GVKHlT5&cRt{mL#Ja5YaWc{Dq8F~fk;+S~{tkq;)Ku`QN=$9NaY
-zEE)&;67l_qPwwxA-QT&Xxt%_S{;t$vxrv81%TA-0@?Fn(J1Ir5h?{xWen#!y{mc;H
-ztNo0!Q#%GS2=)R|W9}H5MUo7Qw&L~h3B}mY)D&Ys<JxKOXH+899t>KP**>YCnF7Yp
-z&rBoQ*Vx0*fi_4{&0pLJSlZ1EK>Tgd2D0WX06SWg@+9ZBpf(5<#qB{HhOeA-X@>x5
-zseey5oTTn7mLWSR<2sXnWS3kD!R)+1uYD`Ie+R^j4Nnp9u1V@$ld_pp>M)YZ%-N74
-z)s`?6X3pO+uM1@sjb>gVzW;Ey{b#PNVLYE_x9(vOwJOOI&jphWwdo_Q9V7Y{M|p&s
-zA#5@9sJ|H8ObKwcK^c{Ko2&w>RWg;U8jF~L<t}QN(I}sYV}eE%q#CBttCK&>wK0v}
-zRl2-YiR$5=Rci!o!#$JFBs(a^$~YE)HQWK9m8yQ^lm~eXN$^t7Zq_e-rl;@CJ@DRP
-z^fD@}9fAy|zY^bL3k+e3EGMHaqn8a&BZ(tHJ>#aRx?0(?LE={4#w<(9oaYe>nXaC+
-zStJSNvZ&BKSW%44c0n;V+eO9T`Xw{V0gt=mbV=Z;rvX^r@`&pV$lN`!{|NVB6?j6k
-zT|>05@vm^s4)VJ$)Kv54vO&$sFR&+o#qx_-iuMnWXZttp*HOzm<PJTDm<(%OG7Pkg
-z=WWh?9Z(uX%TYm(p`(!_y#J;9!GOFD2Z`Cipg%bj>d2Vt(%hn&C=7aHtWn#mm{d(~
-z3@KSdHk~c}iW+l{&pIT*o0rcXSi+K*6_*tgEhudSD5x}cq{Qu|KxB;LS6}1RTJ~~Q
-zn$-o7arO^*tp${@VT83r>ZNkU%R$=Zf&siE?e`<gC^9v<q%lF^!qg(!=phyCQA^@x
-zFMb6XW6lvtU}-P{2cbFF=_k6Zm^hWa9OcP~2Lx5D0fJQ}rNW7t?rVGxhuxgZuuu}X
-zT!(y-OAEEJOfBVNtdsyk&JjrvW3>c4MaJOO3EPsXW@U1Lk#bVtpw-5~W(jG?IU)%h
-zY~{e2W_*?{+n^anIc>19vUgEJ{_lbrUPKTe!}558w#I&)Y+(dNu>T`icO|!v3%?Ox
-zz09SJ3jY5Vw$>uqtCx{k%~kJ6ZqUpbl*hm|F{@=1je&~*h>|Z57`r<;<6dgavspB4
-zmNej#23Id5qr$`98<`YWz#G%REOPVWr)a9jHLh8}O7$!qnP40|j+A&TvX86C99w5a
-zdWq@kWzuU`^xiK)v~K&Am|&r|=Z-2i<)-7hWjr`m+20iJo%8$tC(9pz6|RGCjQzB0
-z1j7j4ui=KnKZj^}0&NGZ!aNJZ{E_FZXmPO~HW7z0Y$>=dpTQ+d&Vq*eLn25DKf8UX
-z{{#2a+XB*}HpURj2Gg=7hY_r8sAu0&8tSL<vu&tnJ`9iP9_nWis|Z#kX{cW$tWK;f
-zE5@OIUNH{!GAYcF%0s<Mq)P%1jrGK#egzoAP``>OPSjZb15&c%48B<n@wm@8%r6{e
-z37bUienD8g2}idywJkQ%PxZa|`C4jdFViG}&@hkoCF%fb_a&GDwbUHY$~t@r=2_8g
-zPQ&rOL@2;Pua~$p%>g<lBFfXC*Dt7z(oA7vl1W(KDbXKb5>{~(ln<jphCwioydegu
-zMh6fdG7fq<$2ut*K)g^S*3Z!C^b%&K6{dRFm`OemPgE^5UP$Db{5KVPi&7RY&wupP
-zg66L}ulhydys9=(_it90+Jln&=<>tSpKx%>TddxDw*uQc$3qLVt3dVdS=PMM7ZA7@
-z%#K}d?8@!w_-yI^D}pr!$S!L{-U7`>hy(TBa+CHshOLuYK8BTZ<>893{j%~Hwu({`
-zougZ%-4f%PTmms$j1I&lAHJqGqJa=D8PfNDA0uk#`Ios}&ZGjma1!QoJAWb^rT(7h
-zYm&K7)w8)nv|D)ZcAV3>PbElcJ@0Vl=Ji3OvLD?4@6xlMQY}Akvz+{VCZn<TD0w(S
-z-^yfk5>9?mOunUlwFNVUodP3N8IQ-@qy3L6f7;Jj0P;B5OFTXB9xQBq8(K>?K1B^z
-zwmR^82SoFg=p&}80PA|h*at4yDzRL>$R%rxR`frLv1{DFY7RJ(A&>2owS`tm6N)w<
-zbJ8-g+p6ZQ!({u&F>R!4@tVu9m#-gJoGV4+1i)dXP9`P_ER)A!(R8)5_;gWx_PF9?
-zLd_PH-HC-QIjnsx9*3o|jNH!RD@AcOyCW4zCe{d0ocgjyq3UQAST>KtqKRr?BCHz8
-z6mcYF7v)mhV5+kL=vJ}S-vdhs;`KUObNQ;H;a+)k+Z$e3-96XBlEOO9L$A4j7#$#v
-z<m{?OuD<LZEH$JJ8a~hTHO^_O6qcF1M93M`ZB8bKoL><Illzg3=`aabHsX|qzH?h8
-znkE`1k31%PsBY57#uINQ;Lr*11l1I30{$%^3F#Y*V<eEeAy3+nwy~umgiG#Vec;)n
-zn>+oT5+6R<133sB@p=f*HhD}Ek3NzRlcZuKQ2}1v0D5)Qy&$l68+tx?4CpIbfPk8{
-z>%aHKUd}ia4~6!E>qp(Zll@-3?-yZXnqKuSwpLH|HFoVBsb{~2%4}?d<B<2;&I?t-
-z3{}aGB00@ipP`HGYYe!SXuFc5?^h42wI#c**4Cy}%Gz?wvq7AVk!aZjf}oe8Wudmp
-zt&DNh)&c|7)}msX2E+Ski9%TO&?<0SZCN%Q+(K;;IM%~D3;MuKOcIZ9*Go{A%1c*i
-zV-=*^YU_ug^q?xLp9URNH4o6ERK>gw!(NpjRFz}dniAq+uGx~RrXp^rDvtvp;}B_r
-zfmAiAn9sN;ODjT{O-lD#hw7%PWkO;513}b_lXU1mCW*&XM~-5WrD{%#2_431Q`I<3
-zD5%OqabJVi7$L$qN*tvs=5?rQL4r_Kj%ABVIESgl*|>_Rbpc@og^@@Bs2GQmh8Rdm
-z!;1O%cCs`tR9<fErk+{mry0Sb;7)3mlf)NR0ZLGo#21xP4VY#1>_4Zy!SCPN*$M3T
-zS77M=^^*IzTYhuj&G~(<wNrGi-b}wk`{yV9mNX@QEUd@ZP+9PJR;{EJ1-eE6kB3b&
-z+4vQvov<ojS(HD@(?R+Q`E6gcpA~^Fi}p2Ga`1BysAIjVaYs0AD{Z!?Ub04ghi=~c
-zTnDPmqjvZYOSLB+RJ@1WxVUtGl+#2~{e&$!90itv0?VMIM~uj{)7;R6j)-NmW@6;H
-z;)JcKRDR67q=~wV(t)#e9;Jy10CqAlSrnggw7U#sVwwQSXnusI(8PR!W#Kq1+R6<~
-z$nw}pp#Z#|RRpQ+5SMoF!(LCz=qTQ%quu!n3;&~A$s9Z$9*sD+j-F%<UeBrts^Yha
-zBRRVgyq;hBe0n`JetA8=jlK-ck<`JMU^yE6gp<i(Ir)c`+%&ZAh+xTP7C?a>efCWn
-zr&d$86r&vLig7iirI@C|Xo++Hf^IUEOP5qAZfe*A^oi5B7Z5j5w27?3Soz-u+OW8?
-zgJ@sl6vRXix+MXMIzZB5&ThKFI676;r8-qrC3e=uWgK~S2$g8h!(A)u55=S{tO61E
-z#F59Ggyk1itZ_*-ZR5FI9qoLsijBq^g1rHFtLj@*9~jLi)@7i-w!7u}DQfelolJhq
-z?$#pk2AAqBP#4UADRsG93q{_v^MWlfL+;i~gtTl6s*E&K#~N-K#er!QW8Asr+%K!y
-zjyUvSXq!dQW=A-qrW_4dU~AeHFf0#1zH)~#FfSUz6bc7pm`1d(@j<YPnirZ>%LE2Z
-zADIAV#lZ&SsMWfN(Z3#7OgFwz{gY$~XU)ZgR*%|@!Rqk^v{YvvbG(wJ$?`GDoahud
-z=uCl*aarv0kldg!9ma68TwN+UEF1JS9-~TYlCA8}cBqujuJx3>qYf^DO2-lHYrK!+
-zYx;=L_%5VD(?^DYIm*d6R5~DHROz5%*$8kzr8NbePH<>nL8Su5VLt#zyiU@cy_jT9
-zw7m#ABcOAnN-0c-N@<(6-LT}+*Lcojv(kRac5WV>EzVdSwc|Sk;z5(ci1szEzypUS
-zRoa`3QIm%yi5Z6`cNwUsI#4VdP_Q)UUmZSjyCwyUOQryhYI9PvoMcYId2~5yM{1J7
-zR5iK(gWz+X{J3QYN=Nrv`?Zt$H7zI3QoY@JJxn?=mWrS!AEo8QaO*N&sNEqHrlw?@
-zlgfTXq9&MFj$<f01j%wz6otjW3T+HMf=DOsr5|KcJYlaR<e<_+aA3pAWW>felBQ!5
-zLzz;xOLQghOc5yS7s5}AfR3h1tet{VwoOVnsVRclfdVnMcV{<L<3`0Z{6fX!{(<R?
-zi9p39h+RhYh22mM8`XM5)heN4B2Y1@g6iGSDy9RN5cqut-LXhVu_yPmTg^y#zTuAW
-z-h$8H>|l7riqRTq((M;%O$KwHqq&U4WaHPFC43rZPnrQBf0J%G!d3{oE_TK#0K(+}
-zr<1x@M;F4+d50%Fr%<}EhA0;rLNWHnjCxgd1&YJmA<QH=_=OeIS&Da6lL|q5HUUuf
-z1PCS_j5|=Lc~uvR1M~sPhx*pI%+4m9+_&HEnmfYdCamkUSgjOC!eaZ;x~**JxG9Lt
-zwzS+>VA+xB2+OXc-Q8pIVjC^F@6?WXIV`ZKc^=0Ldj?Db;vx5vUiz71y$m>dG%th3
-zve~KKp#qEA%yGPo7)z@YORd0CceIASXA)7vmex#hG)QPZii^o;ALIIQHk@-l8g9aH
-zVM+C9xGBShNk|DUp7Wj-!01Y+5cABjLKhr8TA_=^5?4;tzJnjm$rW;OX=@EZ8XCPO
-zA9%b0FEMNyIp-!@j&{<)DKuoAN&W=zJBaa>jbv`2uA3F*M>f#maNiK!kH=p%TgxU}
-z+a(3;C8(9sch27MMVy4OE7Bxv8_pDaL&AkEIZncU+R2opoZL`y9NCtUOXnFuROgBc
-z`1lQWvT5nq##X>aF{v1@^-U=j{M@Ap^a&A#3Ssp!FEpJOnsp&{9X@##3S};2N*Hm-
-zMVRs@OLWMpPLa+et1xD8i$ELvqGd$;8Xw06H+T{vhy8q{K}<pga!X<fN3D?r<=Gna
-z)C#B$b|W_s1>{jNlnUe~5bbMx806rFiEB&@r9us?pi1D#XRRn$SHUkqU2<}P5&&g(
-z-DfZAo~fc^et$ia9~E(o1RQ;h*Pt-Q{$8?+O=uSOMm9I0`77BtkRFSdN$md7G-*n2
-zZ9V52c8{OF_gm<|QC5X;KpAC&o;KDb%aW02#u{(_M3PL6@RS6YY6^5K)c)V1)90PO
-zfWYZiS<_8Q&B^K0mWK5cQBOK)sz_>37jhv7n1|hY1bZ`h>9M;oPd#&R^e8Hfs?6c<
-zKBJh9Qz5xyS_b+L0P51NU+!df3+3r}KO_&+@&C791)1XMcyE#S0q2EYff<^P-z22v
-zULh)dh5UuncsMigclebo9ViF~(Y5~|@HCTugd+e3>mmBK*L?Ch{4MT=gecu0+V*Z}
-zNtCeFL`;~Gk&Ae6Hk_4hpCf5CMqF?~2c<&$+(ERj@iR6FF$8DX<OmhSToT7=W`M?^
-z$<3=_wY@f!uOBfllG`lEZHe5EfgD=3xW*MVsZeuq2ua{raJ?wlQo#?p;1o&#l-XUo
-zgXt3SwSc3q@m2qX_3pz<$;Ju`qX(1>%~k%w^E&=D70Vyr9jH($OhHevJ23LhSo7{6
-zkYs9vrzG9F1M8&OZ`BMSaI?3{nnO+>&eL5#P1a9Dy=wt!At9+jU37E@_u%nYTCl*|
-zgn8<j>)st);i{_IPQD=X7~4lL^_47bsd~eiyGr|Dp7g}w61s@PC8B+ekKtWg=%~GY
-z5GrW4(moE<uysuxJ=-R!R+cPux-62LFUT#3-0y)L+K0H#=erY-0Y*>YSa7;1IIDus
-zL_dXs0hHNY+s9f-)~SF4N4wR@`TZx{2xZ~aE09TZlE2Vsq(I#$v*d8W?8$W-E>#Fi
-ze<&OD6x)Z9XU3Yhk3f>C5uTECYah}u4%$=EIN^Z6?ZYbb?fX<SeWxE<niJXwb<xp2
-zUhJjVF2X$Z%yn-cZ^vK}+6Q9VaDI&KW7`Jn<=1c(v(i487wxVNJ%#o$j%Z)w8+*I7
-z4?=}{thA4o$@O^T_vw=gIp#%jBL%sd$bALK!OX=qPIcM{#@#*$919K=1&3AedtESq
-zGP`U0I4HG`!GNQ$v5LZ6eo`CQ=x1TP^WYXSz+Z_kWhFWRFCLB`KU63cCPSyOeHeLW
-zta<wgB$*oFDM`2XVVyMBteSNMZU<IbbJOWtdHSKHIiY<}7ai^6pL-#<i!e_;bKTp=
-zo9(?*I4%X2)VFJ~4~ite-`36HELKvf^R5s)m^pi7E{vx!ARe+o2BnqMjl;hsZ;b;6
-zSVARRxc5@9r8ts?qGdvmQnpLvYnq~BZ-4(SFppVFKCPg!%mC+sKufETyNE=4niNQL
-z3PDK92**BFtYu;pSAFnn?+&(KELqwHHx+E`D99#6B-;X<EM^-Ko1nQ6PsdPYLEvUF
-z454MJe)u9h9~0MV7frQps;x+MGpA~{KF4`fMugyo=qlXQP$9Rs^zg{4fmQ_6SXZ#I
-zh9HW`IO?!Jc5SG`QnpKUtHZtbS;Hj*1~WS{lExyCsv4I|lsfG?BOFQ*3L=Qtq(NTy
-zPP-b1O=L(xc<m?K5|L~kaH_@yL>|M4s)C@(Vil?%WXFjHVXFP6YPUCQnd)?;I-64+
-zDKn{ed>#uoL<pKhSK;Obc{P@uJnG9@o+K;W)R;mf)@K(j6Aq;aRiW^Q;@q1L;dvk|
-zO(-#2u)O0W!n@}ah&&d#SP)cMtU~pIsnS70Kd_@9JW-U*nrbalt>;u9mlu^0A-EyB
-z3O77H?#5El^0>7;OjfAn5k!vBGT}ghP!$R@lF+*-X&B}<ww0LGEbkzRP|HJzJQgjp
-zAgHofh3Yk8#yJns34?BMOR`~8?T=Ika;j$Qa~z8^A_PsMt8nv!phzwAzsh|o?Dq_h
-zB^S1M>c;1(4)8(&{${XPt7k!Wt234G0_9lBQt<Xix9dr7J;5WZc%vI{B39qmyn+9C
-z{oqpZar<q!?LGo09?RW>=#sGb&2?2&aKD13VFkJan{0d&e|Wd8&gcm@43NLYjVOeh
-z3_r(BHxyrBaqpE)qYZKA%K?Wr{G#)YU=2(m;G{8ZpzWeN%G))&CN1GFsFTvBlgII6
-zHo%rus<<;ijK;E3U|DsvbJrp6k*pcZZYMA61(w!HST>DirxVLofo1z7Eb>fBr{D^S
-z4hk%XCt>NK0TkP4vJmWR&}^_@LnFd|4NWQyW+PMbe$5EWdS9sKXs70UI@S9%<HVMn
-z+th>Ue1z)U8jfY){mIc4yg9iHHWsZC)$RmQ;?xE@cJ9u6y_TE86a2ni$L*Lea<Z&F
-zyf)6{|If#xWZtFZk7z}R_Mfkq{!5?qAa5dGI*pEQlIl@1rj0oW;#OPO<M+WR95xWg
-zIy4xomYTx=Dp~xhvtM|aWWC_UVZ2SFm{&33SP6v=Ax0De#Zxwb3rXH6#OqitI&ZQI
-z2x1xQ4zF_SkX`7S$FfHV8ew`_EV35fP6$sjhDU7l@L~k7kr)nQ6>RuX@#8p~G-p#K
-zss(4$qOa*YI3s8z)vuhOG(X-G_Cxdc9w$m{jGMD^Qm4-Rg03I6i*$NS$IV5TK|HLp
-zq9N*t0^P1ey8MfIklOo2EbOG2j3}Pd4@R^TxoS6}&6o_s$w3fjI-Hha1xq9T#jX%b
-zj-^AG;rj&9hzMsR8dM1ykx?{;kbth=>m#~-97Po<4ypqnBzZADU1AbvbrjaeDPx(U
-zst%-ySXBg#FzrSpIJ~G&l;JfPJOxzH+;C2_oOB{*EpxV6qFQja)y5e?BWL}}iAE&2
-zWU1erZ8HyBM<vdj(<~=-a<(Bo!!k+*H-)mfu0XrRHliJ;Z#jJ%L7Nfr#j#*SaqaD2
-zxF=czsDx-YqUD$j!^uGqXFBTdfIg&O7R4`)uJ~2D=TR}DLx9_e<lCz!G72q<!iYFB
-z0~7bqqe?vuXmU~zlEV9&OPVLd7nF*PD@;_2sv0LkFK45@*GhQXjYx1flPsrLw|Y=j
-zn+46_Aj|)~Zq5cJjSh&$G6iSDZJZG_!n7Na;IJED&PIe%N4X-nbDDI}V^XKi$}hb}
-zC{-eM_F0$SHMbG5qR|trIDHjC*@*UsiaQ+h$lD*-|NQ-@wcqtnI#-YwiFZ3X-d8y3
-zK1Vg*=f7~e3tk}(OJL+aoOzt@;lsau;_!w0Cev7A%=<&XNtXN-^x5O8V;@^jJ_9S&
-zQZk%nB%oDrdW0BC(iS}5*^1sTuFS5D-rhpykc#u(@>xuAIKMf!Sx;Z0=N!;-Xf0=w
-zzjqaL2IL#>@J@ar9uN2!_*;ArKQ8!gjwAup4`haWZP^RH>1n5W-aUY9->zQzNZ!fu
-zHZI>nT1N_+R9!qjvK#Z!IWP|K2oOvyT)X!kbJ$!;!ZUzh3L>aWZ+Dg6;|YjTk*;Si
-z_~p+7M;HVn!-0)*?^}*bxmJ4AN6uQH9Cq0Jd}CI;HBzPgZJ^Af8$nZn@J=C~R??%W
-zR0z99D`8x}+K!Lrs)CLTrFHp${qh-fi~7*S&ehrgstPlpTL05gQ&(%ftgrgjo@X)0
-zUNC#psh+XymhVCEZfrI8ysM~Ad?bOZe7<suMSE}&_=`_q+8X6OM*U#)TqD<Xe0gHA
-zYk8S#u+?b8xouBa_DKXeQs2Ca)K^I$p^rF4*t}<E$pGUgWpR{M$j-uBA6?&TnICcO
-zmXi~(c#+wpxQ6NdjAc^14cB6P?$LKj^#&ojION@))1{X9$qqNfdNQ-fn+j-X^I%~?
-z-06*n(Up3JM?kWf`LXob;0vw&&&QIz_{ak@gD7~aFCAS41_^=v&>;!UH~zvS3VIcH
-z0c=DCS;F#To0t*FnDvgzB0%+sfZ<Cg>Tsf7{Qucl^5Xt_@*@MV5He@J@kZ9nFmyyx
-zsJ3|p_S2Iq#+A*5<9wy1enD{k=}PzYnJ2XWgxQZ{y~kaeZZV;k<b|fQ>t4)3aCXZ*
-z;|^AU4pA)#XX3;dcb?L-t+8|zMXo~eTVtWkVmW9V3qa$Q@1dMNH-08P2VI>zIFp_o
-z2pYZ8dm680#_!3AO!}r?XXc-b^ZU|z)`1reAJh5d6|b1ECefd(LgK}KzZmCN>ynMP
-zs*<?=5+2a-v(p$8c380pw?o*rQiAkWNbh<+`ReFO$Zk8HjA9ERecs^-=aapp!VV70
-zCN%_M*+eeRRaqnPAd?LX0XsVcTL^+WgQLcyh;}-(tg<f0<CtZY76D3^5=Bwdcl*UY
-zS9}tdZDZN#<YmW2VPD~!Cdcq{U@ZByz=D^<0!xo-@)#_=1Sl3nN_y#cQSvfy5|%+@
-z+3b{PsK7FO5|$BTX?0?$6<F#gVHr1;aFRH><T`X(V3|4z%e1kCjwu{~!rf&gqgz~1
-zkS!ueLu*kB@<P!n%X*<`&C!}gYU?!Dk>!P=7GhW^T21Cw(5Wn=TUbPYgAbGNf$eNo
-zovQ{VW3jyvu^&MXD@HHS;Ttchq&`i<rJ-AWCTB&A=mKk0FJ*}xGoE6WIr$<X?zD<%
-z@d>^(Q=fpL%wY7*VHj+D@Sx~<<SR_PO9Zs`@pXt5!w-!!(A5VuFyb4)ugt~QO2g|q
-zl|v3Yu`tdY(XS6@DmZ=UYkZ^^!(jS|bcka=NQ?4`)%XHnHVGtlc3HLP|E45D{3uqq
-z#T(x23b*34<Ro;UJY7(p73G#Gk4NtO_Wgv=(odaK%ui<ci5qj4TwZ5C*LD=>FOUE=
-zkp^_9lCWI-io(#;u<{}7zS>tjoiD&pEW#Tw@IY^z=7uHrm`|=zq^2NVsmJ(C<q(zA
-z*-Sh&qkfTY)0Xq*^pcVzYFUyEKuKCkszVkiaU8+kFJoEqSYe++<}jrMOSI)OhtJf)
-zDNQ~<O7|Ge+I^Y6wuojbH>!HJjSiO-1ig%aiD1?>MEe?lB^~*To2jy+dP^D)E7vyb
-zL2%1C9Eum;dh;6xI6Ug=>sO$gdXe%_L3vn||FbFg0@Nfq@7m}WTAKBMV&QyG+XQ00
-zb%a@y28>4~;WXn{6lT#32|Hf45$fU~Pf;ww8!+(D#jMFSC>^S#ma}c9ZSre8bGoW2
-zylCNXo__9T{SmrX@U#oA(Voh}K84J6H|u``4&9UI_e(E7w%+<cHB^2vD9ohl`H|+~
-zl3DivJeYMaqJ53e=M}kBU-W{im>p}j-K;lRP)ifrh{3GA<d*l=Eu=!b%tUn)8l7Xl
-zQile`)xAKOi+_EMKgSH7;{-rUX06R-ttxn7u=7y>^w#{=dPi>!vR>@czIl`)*t5`v
-z5A?+8JGj+Knu<mEQj#Z)m2TQ{hR;*!2?N__o8YDU4yqq;CWXj{yl#8O7(u0J&%e&{
-z{-EjJ(<yydVV`>Dii2w<4)^Z?d#jRoV<oTNcz;HYNKm(5u*}b-m2rG+xc@uB4x}pt
-zl;F>krP(-%l_sn4Y~?yD7`M3;=(AL@p1GilUX&B%a#G|=CGs;(WxjYWtt1<GSa98}
-zvaVX7wuVT=xhO4^Ma~F^QiQ@lq-AEz>hLR`OPg|+IjJCw|KUZSE}uV&A8T0^_+xVf
-z==7PJl}>Jc)oirOTC=PR0GF(bh#Vs;;UFuaDzd6ty}=8GdKe6YqCVyZ@L3Y!ftPti
-z9{1<~S&0zb5M70v54f7zW$m@BQ)GknI*rINvJwv1301-VdSS1eH*|-Q9U6QBfn=RT
-z#IioFp2O!Daiz19n?FKQm+!H5tlxaYdw8|j0&^*>SVGdd1+1*xg8UxLRk7k6-$9Pw
-z*Wx$uD(mV0$nXt<=|Oy26`xbRtA8x{Dtu1$PJT}Hj$8XJv%W4H<cZ%(9pY%|PbTLR
-z7Cq~MIoE{DMV}E&Hr}i%A033*um=RK0YqmV<uZ;sjmNosgLRq}Rzc-<`D0$bxz6k5
-zoLgeihVBFc_M8a9g3cB?i?HZ3Od+qTBO-I}*D5U6e#QaweqSrcuN{EBUjt~cvDCYp
-znoPUj@W~ol@Nt))mu2FkJF#hszObygC>KmtPr|ZhEcxP1fn~kG(mDytrm<{w^0HN6
-z***!&j<Mv6Hw7=d1(t)8upAmotCN==nW40+KJGZ}_7fJ%?wwc$3M_+;)(liyREg)7
-zhKwaH-jr&3q`*=;2}|8rRz(Kir5(rbu{Z_S%o-~}Q%dw#&3)n}4XrUeu*XjvFPaoB
-zW7*M8-s2~B{}k}61WN8&N#^pe)M8->i$Pi#WsiW?fIeVK!4WsU*My{e<NMFNLNp;3
-zyza>rqTg~dCBdkrVod%OFB}<qgTlv3nG|IH$yQbT(zt^1ickcfHuwSqJdkW~j}&2h
-zuKYzlzibdTfw4+s@M&XbF95lR5D0skspo@U3^s2t_7VW&u4cY0byX7`k5D)wMZnZd
-z<CG76VLCD_4t*vJhbQQe;7q;Q?!hmS<ojrG^W~9YqRG5In#IS%S)#HrgKuaF+s2^i
-z`X%k8ImBPM4r98z2!hU*43`NYJ}eV1WBYZo@HvQl*0mK2b1?yE<6;7$eT_Hw%7vG9
-z@E{J-AT6N+xvHxoe)NrI17O=M`o3P8%Qjjidi@2x0nz(EKo4^*nsK18p?XZ4sz*=s
-zJ-r(O4D7lW<%(5{_>Ej<qLu~}WP}mA@M!ruk}Hpv10p_J&M2682blx+gTfJ)AdJ}e
-zbn&VoP6FErsvBxVL8FGi>8nm(boz3h9;%bo6a}Sr;bKzPF{vbbOqwv%WC^P7r12st
-z+>>tb-VLgiH*)q~q?IXJeZDev{gyo|BlH#@){gZ{51WatHp|wHhRmBpncqFc7w=G_
-z!?G7_*}9D2k9S~^XcN4`vN;Ch7rpNw`I6x>0i=5T2-*@gyu~GOe=aAtY$mEORIm-S
-z!LoM{?Q0xB9YNbz4xsK)<%A04DwaJg0>%5L+z`flSJHg6Y{Eo(YX!Y^(fg-3e+kR(
-zhyDYFie+yBmo0mT%)k{uxsqj@R#-ZSXKM%}biuNRz(TuauK*%gwxYCbG6(Lr#l1hF
-zjPIT4S4JRoUdsq<!GZ3svNh3nIwgSudlcwVDyO%ET=f_Qoi(8+#Ing427?0x(Xyws
-zI3>$QOxH87-?9%>v3j-}V(++`cVkVqS@t|hXFfHUc^Na)r>HtCy9dgH5l>qcz53Oh
-z73ZC+`Z(GuINujZ8=FB}0&l<L?1LxhLnD7s!2;ldWiKMy*LWp-{|?J0RH%-MWv^J|
-z)riuTy(T82WfMlFL2t64Hzj(PyfR0&V}(yyglPrY0s>q1GGego36v{YwrMq)i9Vaq
-z@FoZ&biuNh!9u%bj{_oDwxV2SSyW-a{E}`MW5!(6Z5@G4G!R@7uv~7ZQv_&k-RUg^
-zPM;<M?BpSc63!a*i7;s~2HvSyuz8?BPgv~z7|gl7DkJ@phGWu%S(-!;lj=?yFOqzS
-zHeaSH5yRuhJ`#u3Y_{pHFx0Wi;M6Ml%r5M{BL7zBFjH`U#{$$8Y>Xg?>@bdIu@<cf
-z9d9YSp%VF8R++T~N*IzX!4GQG_zU~Xz^FBk!4jD#vTjHKG7&xMMiSyc8-DHG%vO#2
-zYwiX;z;AfC4{xnxy@1nVNk1Ysr9sySg^5~uBH1NHFhzP5c3%mlLyMaN*k~DUM{tcp
-z-ksvgQ4fAU8ElaN*dqE0Tfb2ZAK=b|iMNc>Y~A3y<c`a02Z&gUX8*|=V=__%yQEiP
-z_sd+{v*Zk0o(dX^;!{^?rNteTdor}RZMKNM!q%H)Req2#_Fq~>Mn^hjEpDQew77-H
-zQ_`)GBD6?)6?V74(ox@g(f3FX*zbjp9Qh0E=r%Yh!;+CTd&G*APg=F~x$(BojJJJ@
-z7^4g)f?6KTxJ(qzT#Pu{ImOmFHcy>-9E1x@SZmnDNvj=9ueWjTBCMo@FDv4`-5h^i
-zF+Nx}?qX<Y=QiUvfzKqr0Ub>+Ck=&0*8mXKG1|_R>y)7fQt=WTT_0bs<1E}*@|V&M
-z{7eJ*owx9yS2nsbmi(Cj=r8m&QjIP=IucG;>hq)h;&N^tf-OWVmbTI*IWoBOB#3;o
-z)v2Wql;h&4<k7eE(5i>^OJA5z_3105jU&z2^W6|$seB67dxxLQ`<W7{^F99?_I$&h
-z^*xAg_W{1)@$FySu;(lF8~wA!j~o5-N%!Y(^v^f^jSB~!vEJ}E;AB@0<lpe0;S+P6
-zc3M8`4gb0Gyu?%NZ{WQSUJ1c$P*bWSp5U<EmhT>7R-<=UFiAVN<CzAYO~8+3%-psR
-zZiiz4oXj~t^@If%r^0-2))SW+Rz`~XN@dr06ceRU?|^GA2O6nptb;}?5Y|n_KqRXJ
-zt7dU18uu#Z@U=(J-7p&@t$I3x+;d?DR-%d5m6)A;9J4l08*Ba7@_l@#%q(CLH<0EL
-z+$ojd5nP$IZwq*L8mk!6D;`M@)v!UFPwt$ma)E!-PccDEK_~UJ4tLAanPo$S@1ps>
-z(LeI@HR8B!zIMaj(AaL++mm!Y?1sJF=--~o^N3Y@L+`eOQ`yPfTd`i)_Q`Mj-o+=t
-zdok9k5Pol0es5NOw<^EaE5Fw&zgH{2SIWQBxwqnOst?^9_BEEk2M1{Lf@7UY)1%k{
-z24jwZ@8Lc3kjv{F&cz2o&SCK5C1xBO!+EiK@=^SpH(;q-%U2AXgSC7Oe|GpVu!UsY
-zqfX%tB>xeE{NmpCVGln&`_}yY#M?WWq&HDd$RtPcDwEFTS4%YL;!USEK1-kGt+HAN
-zw#X{uSS_}j&?Kgi<3~WSlSqKT^Uw0w2Y8M<<6U?j5IA`rLafTObIJ3F;BYa#tXr+0
-zn|_t&LBL0z8IQ~Eco(L~3G44(G7da{5<AM|nNKJ1Kv@@_y=_mPdw{FTvvbLFKk4!|
-zb{o&VIsGcnho!wq#=$cQV8xo4qMlhEHfQ9vjc*G)BRGoZP2!VnY$I0X*}3GIrw_n$
-ztDR>aP3W%Ytvn|UpV?j_0q{&rk!O|%&qi*Z-vR|w&oB}3{8F^3_k4wo`n`BELq+v{
-zjxIIea|5ga?&nseaW184k#2GpFMgC-WVW7jR;_{6JSW{?95p}!kcOC|G%OEkjNH=v
-zI!qk%*)4VqXti75Y?)AacjY1udHV;ht0Haxl~{-!u4lJwzK2tb9b9j`S{qbBykPMq
-zK!gV@aO@BGYQ5p<iVcEhw|ssJkC5=`iqq@Q<Nx&yj60HWzX(q@@)3*hN&&izuLmxw
-z7(K^hSMe0tm%+>;R#mZcsp18}o!xF%@jOzy8_aZ`6R&M9kpNUoOi{%w4^fQVDt<YS
-zLSpMJs2F<FC%JMJPqGO1z!2mrzVPlYDt=a16@MQ=vs?Zhf|FHDBI=c|fE%i~H>jB3
-zyuNNL9u^i_aSgGmik(Xpj|=YXZo7)>NbRoTkvu1U{Mu*Ku=7>qg!5|Q6Gm3?ry&JY
-zd=OMj&W1=kTCslMvL@1U72mYcMaAFPRmFev>r!zIB~Df`iBQG+uffwHFL)G1-~Hua
-zPw(qk?4<kKFSm<!<?WY$i}HB;<s8v;fBS{=^G7)wn+KI*za*J~7XAV6Y9Kg=QT;_6
-z*$1!T&6z9xmG?2kRmXgeR*UCoCC!qB(pNo`jpr~en>&Cf!okKub$UWOWlyDxXH@lk
-z=;`zq_~cx)qtL9o0>#m{0>#0%0(A(MD^R;mDpTC*glcs{t#(2!cS6l~LQQu<u{~D!
-zs#l@H$5c~SLaHiBRSBiV8VnZOxgYpHK#N$88vrJBPpU%SNghi|pTET&Yy!k)s$-h?
-zRU`evi7dWig+|qnJXd#Ge#?^!Gk8}?<aF9jFnhnF!?U!O-1$3>GiuDpaT|-cut%@J
-z-6hW7<5!upL!2v#1$y$r@j7zGBy%=NG+s3_XU{D-L!;9ea~x-@Ir1<%CgA~>(9i3A
-z%Q9!XCC(1=I9v;zgvpp>&K9bi{S-Z-OgdxRq9b=4XSCR;f);V%J9i4?U*Oj|ew8`f
-z&bh&>jCmX%wl-%>GG}W<Q`Xt3g0twZ9mm-r%16$2#nRG&g2uLg?I0*~wwZI|5A?Zk
-zyltFq<(#Q}nX}i@BeTw;Q}%L<1USYsKvGwAOTt5gFHB^<QGMyXz0gpLlH-&by;HpL
-z&EV1ofAw7aYC22I4ww>uocz*A&&6l&_r*;9{8#(m1|Y-wtn2en;U%_(#(Pj4cU}L<
-zTNHy^II#bfx5xB9Upo~bcJ}{#?|+9Wb{~S@d`x?0{}=Vljt>%P+JHm;{zZSgtY@CK
-ziv`y5c)a$i3n{h$`|Cw}=9S&Ozr(N)bo~XvKIu9{4dHE}Fa|HwGtUdH<rS(izOI5b
-z+)Ep?;L9pjUasOg*)CM9%tFP6^&@sc#Xpm)n6W~|N|%Ziql#Y$?jO5~r@>Lw*d)1&
-zSAoj!wv<)8kgL@Xy+l)HIyAM2z$zXmwvs7J#mmrOP;qZi@ojA?E}Zr3T&r&V&J#7K
-zKUi0<Uz%(6T>J{yr&6P4&n`->-yq9X4%PZC`_BhU281gSbowTsv)M9M=v3*_sbbXW
-zK6vb=)0_4mJYo#GFP>}RlWBaVc@*0V=T^!ZoC4LT^65P8*MPw;lcd49<*NGjUrD!X
-z=9iChyOQ#Adk=MUxxNr(;d1@SFLk(FeK+s-)E~aW(Ts10wZ8|(PVtF(uTp}y`C~fY
-zH;B%SJvwB^!Va5mvT+6fKl*fE*Jr`J>$8Y%aSGNarmt%8BSa@cDsFMsXr5Q~TxG~)
-zXA+|99vB6jI`*r2<u_!qj}B1|QH<)8Cp#aw3LH=?9@>hNXz{N2Y-71IX|XeDx)aw_
-zClp<Pila5rnKaUgYq%3?s55D>GpVN&7af)g69=71yPZj!PAYuWG`vwEYe;1V3Ev8x
-z!R+!};Ryb*`VD=j95+~`e0=AT$l%~%k82rGYdawHyF6Gus3V6@i2GFvO&|PaVay_G
-zS|7|N^1`Ln2&|(a`AqULJd}w3ehNR}bW%zb>>o=$ff)$y801BDm6y#~bHsRwI+9?w
-zWd2Gdv<kV%BEC(mm>%B{C^{WwhBvX=KFo@XDBBSwZe^?>?o*vV|4fcye&8gD4>9iu
-zv)*Hdu2=_XcU!SMz}J}+-p5X}5dq|zfWyjcd(C;lNz)2+UtDL3L+`smWx-z`cQ*Bi
-z^+-cZIE@TzjZ&B8_WlzLBF)$b<PLV%8kY^b#s>jhsqrnHgZAYp)%dm&FkuYuz~nW)
-zlOMn@RR>nbket`}0e+yy*+$AWUeHyg9g2i5DfdXUSmV7pe<c#C@d3iAaKB=j&Bq#7
-zX4)hb^#1C3JglO|`@xFg61^7W8vnIE)i^Uzxh?Ud`7P>rlfRM;wqX3~jpd6PH@M!7
-zF1-sDkg#-6aX6IU@#Q}~TMl$o7HZrI50CDI8mF!?f)7bnta7-<clZ@)*La+`bggmq
-zfUfbif*p4nXvf06q(C)3r3BTuFIL3rn9d8Assp>}NX~0~9zRgy>|x6_UeI+j6$#b&
-zqNAZ3S;jA`t3*OIzDhV1UQtX-WU<DTiC&92)f%tI8bcdj2Y_q*xA39`bk0mv?l=p2
-zVF`6SAp)MlCVHkV*5EoTAYNS#9}vsictFC^5nil@&uIH<m0K{y1a&G4WUcUUk2=)&
-zw6grY9<J%T#{UxEhYd9zCxl&Vd<9~KUcFYZ6KniHmoCC5fZ3}bDnT{gE4s19d-B4i
-z>PU5CIIr=3z@WxCK9_5}psPw7FkW^egKZ>+x{*+gj}T6UhZWP3aIA4<;tf6KRBL>`
-zRO593xW@k&D`wQWYh3qs!ppe$8lrA^gzxU^gS)W?Lya3;x0Oq6JRo7|2rpK#NJGAG
-z=?Q^roMM7Hm4zC&!o$t$P~$x=LWWDd`e*UQ(@^7aqTRK|cZwS4-H^aetnqnO@R9<x
-z@dYKQ#+Mb1HO`wjF5Fh*1j=iC1wT;Z+m#wG=&I6Ijh8jP=4fc+>-g0{LN&fgI2CRw
-zR=gUEaa@_<x^lI~TcsM`Mp4)JU+EPEznYX^CEZm0$E&2P{<Rj%ql!X}Pm=?@Dj`Pl
-zHty86dyHZgGiJd{RM$Ag1Uf1UHNN2NWd?B^UvwH7F4g!mz;&qcxPbA;Tz(DDLtNFn
-z4W3u~35U#cd{6zRge(iQ{vrD8m-O_NXV=OOm~i=?(igL9Wfrq*!+N_b%miNx?4AiS
-zrkUVvT)<GeW`c@gCJ5tS^~gK{$i30t?(@Q@@BL-rmBLcEXc0OtULmWPvF>f9OTNCv
-zj;ls#xta}ERnch1<M`EKV|Yga$+;Pi;0Mf@vzT(nRnV0s4jL~>3^@uj4j0?7F|G@Z
-z9h7Lzyyi5(5?*`>qPQeF2;o{1c5bj|JxJ)l6R(2us2XnoUK{TZc*5s6n?_I^Rf|^y
-zH+n^yC)WBE!x8_^cO!Fa7c}lA2{gBMrwTzNYraj^+}YZPS<;tLVeK{ja-9TgZ?H=6
-zq&QbK3gf83M)n4@04vWmE+hRx+2Tj%ZSGhp%9gnP5|%l1n=d}d;zM<pv{7JN_hmmn
-zs*+?QDwi+TDYLM3!+OCl*!u57-?nwe3R_pYY+bQVTYot^>TYWwRa@tbJJ|YUr>##Q
-z39g0$b=m7mkgc~AjkeBPf?X_!K)J22;RoF^Dxoy>D(K2wmyMUUzTzlteTq@p=qh3z
-zl%lOK3QQOAg0Z+H-lY((C1Dqy*=~672#+w()~69G**bs1s*Ip)>qG?bc?Gof1;uFV
-zTCPZ%bs&ni8+vv@r<p->TX(7uM0oRUvgXdVPBp;R*Az6@6*O9+?6Ew2g|(Zle-k|Q
-z(7X3yX2K=?W}B^dThAL8?&^A;Qe$6!cA>PMr<`Iv&wx0D6D<3?fzFoASYg>pmt`x~
-zY1wZAr`;{P<da|pZ#|gx_GfbCM^9u6Nib^#GV5W=<}Q3h(P-8+{BljSc_IYL&3Xtw
-z#*+JZo+e*TD2U3Y`;C+~J>V#9dWUSt76*~oK_=RCFH0n&@u07ZVYf?&mV{bJ4st=;
-zcojjNGu{P2$)NcY25kgogC-&v@1X)3bdNZILF0Td-Y1Wy8BAGlX=b3@l%1-g5#Ah|
-zAf93bQkycRhbdE!;Ky|lK3W<~xn>4ByKQf2fB8=zwYJ*vIg<}|TVMV8w`qO#M-d#c
-zrLCC{s%!$|hlUPDiWfk62c`Pg_bhIb<on-G>Unz}gLyLV!`{Gu{P$dC;idI)oX_OR
-z4>TQ)0LjJ}{$KArsmb#Sy)Y3skZf+N^1FJ{a=tyk+j#_y=WSTy5rq;V-8iV=;>J%~
-z5*#QbrQ%&*JefIY+s=po<l#+wPV8(ghB`d?{5&b<??Rz#M2ANYlOB-aN}ZJEU4wZ}
-zxWIwMGbEv(HZsjKu8j|YuH2~P%HDhBvr)PEY9lv*3(h8xRpG2xIK^3Tx&vne$mq^l
-zPo9%=#w2iNWI8}-&WHs5<=#-iSzHxs=WG&y70xsfvd#`TC(3npm`@C=I^%@fJm;J-
-z37i?3_Cd@Uk&v?=gJYOx(pg-+Y3FRJle10Xl+Lys4LalOySvWv$uK(hnv|t;f8fl>
-zG^;jen!<y#Pl2DnSzKjk=Zs!=MQ5u8XPiD4I$J-Ivz0t2=Zs0<%*eu%#<Vjcq0YXq
-z;4IFD@6e3VPe|ZB)G#+#u4g#6>`Cyl3d1GheWgot3!V=sH4RTs_|qQ6+*g^!e88}t
-zQv|Q+CxO&n6Jy0LsM6&%DaKvUpM&9b_mdtjw~^8Lib`k6x6N?g(NNh7_|?6#r}La#
-zrA&fKjjTaLu52O+6R^F{lN%~i`~t8<H}u=u)Y=Ma#aSL~%7(QCA@FCdpw=~SD^H1B
-zP%Dm&Q;FVIR!-rD8gO(ax}mQ{K`WH8LZM3cVgezk(3c(Qc(yBawW83vcvI^ccQhz;
-z0>8Q|w3g@O3S|-$YGgWUXoV6<ROl~3U!eu{28BMqO`*F%p}SBhzDuRkCL=<CQ>Xl-
-z)up*@D^#h`PI2nDP^fYWg&GiB{J}#1HPBh1j1>x1x)iDy70QR@ug5~SDheGS$F|Tx
-zM}tC#@T<E*`}3S!p-h58jZ9lNRw$7Kh1$FPwg36Lz01!-N73=IyzfML?B3r>G~EtN
-z!k_eU$v30U>@P})vOjU@(ONS1sj3T+&V8!5Y%%ji7Cjl=-FujZaQ0JSR4nJbHsp9z
-zD(9RHIS>I&v7GZQA;-OPIp@nmj(f$K=XR^joAyhLkwtu(0=)rr3`V!{n~b{sUk8Gp
-zt04HvfS?y4xc(R2Ik-7j&HlY5@;;gIhyT-2_1ktbW4K%0K7g{Q+d5IS*DcSF<7uHw
-zS86!hT73^k?A)kd)EPR6HUoJQ>i6${{JQG*u5R`F<0y;zog#|IQ@;;Cx(M``4=kd0
-z3E$T{c|P!1Z)#QN2eWjT+9w0@q1uy1I-!O;ljww3aM6FRB+((RB+*r_BppHtm865t
-zq}|S>ozA4~&ZMo*q|MHxR%g<BXVO|{(rRbYN;S#v;QG^W)ydO$q0@wONlU==NCfi9
-zQ+z+yN1xNB5dm?RVTv&?QB5n#8I^83cw#k+ME7!~Ndi6(Ap}^?{0t^vlll>^<J9_5
-zzK#^0f6>R^-vh?NTr_?FOedVVjeyCX3jYpQIu*+(v}sQu)`d2a`-b~CVmfBS2nJmX
-z(<CC7!$YCU*_c$IhlWAZ+=snMN{BR5=Wg@@685(H=<~FFsjFSVn}8}Dh+M(D-bGiS
-zHNXL(*V6W&qEhgI_K!Go9YSIkAqC6jH7dBD1#x!6<*DF9l$U}@s7=9w4gQA|Y*JM4
-zu+Zpol@;9Eoi>qM!94(wf*HxZnkErN1rrA*V<zi!CD<EgV%!R(gix@l=L&v<4tPkx
-zaVp!c;2jj}qTppRmxk{N(t<aYAO&wJDh01d1}b<Pu`UW0Y*cVd&>P$0R2IC76e*bW
-z+7v8U%r{kp7Hm>f@Q%{5ElE$>>qzKAo5-!;HN>P~Mj)1j(RY@jf{6nPHren=Du09}
-zDwq<24^z(-{AD-=5-ixhS6`!D!H3-yTsJ2QWWlpakb>tGm4e3^)!NGfVqJt3Y*g^H
-zpu^XprQivqNWmo3reMKhj;A72ut`zDi%Rp}u4qpop$lyyw}K}TlY$w6f-Ovwh@ygt
-z0}3|TrU87QI4YPDf)7*A72L$g9TXfF7TOi8fvmF+KGb1|B?VIOkkCuP!-`75J&byB
-z3$ZRj3N|WuP|)F}Mk%-#DN-;AwJBJzSpQNHD%hl`;F{8W`d_pMkkExTkz2w2h)KbW
-zK*1KKNkmb>!~q4HY|{XKMK~&WL=a&$JXi3YIv=7gBCe0T41EPo3oNpQUDbXZ2N#Gi
-z0WPqET4&%1=z$KK=sgwm664Cy`;uNUQFg$D&1_}oJE+R!Wb}Far$NrJ+Q5(V(N6$7
-z=A(UYX)p$N^DFm$1)T7}fU-W$8xM;8KR7Vpj|T@<2T2RtG~_Sd+tZIkZ?5O}_P(P*
-z*KVi%_Guz_vU>aUg#^uRSwJ9v^4Qy_+fs~&xxeZ?YOdUF%5vs9O?iQ+!lT?W<#i><
-zlv|3*lov&j9pWZpUCc?a(UjK&t(z&Bj&rnIMv6?C^x8~Wu<4S>YP2&cn(~&=WOOjy
-zj8>7*g*K7flvfawDKi4GER0^jkETo<FlCc1KLwtTc9anIXzIBsCzy%C3b<q$tbkF7
-zHc#+q1^VHSj^tKw$E7Y-@Dp9F;CTeiZuwCJCtJZR2?u9qU(3pBXr3|mHJ)E?Xrn7;
-zdUU0p;TytkU(-T>yB56FaA|JQ%}S|xvznxkY)8IDq|BmO8P@L+gk_!wfYi;3v9@NV
-zEHx{|+^nVwg)$0(CdpP*sD5C3jacKQ?!SJxi$Z^@t3r1Pn%#2yk6w>LNhB)tf5m{%
-zZOP#2d*2C7aww6DP+la>J;+|-!5)Cn(ZLx}g4$F~QMIXl<+DxI5$j^tf{krzSkStP
-z6x!4PQq-nMsI5&27IOp@;qYKmY*XV(3$H+t_7D=f&?a)XsX@flrWk=(7N$u=u}u*N
-z+LXyQ4G>;%4=y?-1RtiJx2fl%&TtpHxQB(;9tapKUq5^RG_U+mzo|>*|7_RF-zR8x
-z%X8+hr}7VV0LXpn+t74^U(kyof$Puzysb5LTP{5ig6eXqQe$hvb0BOxUVl~&fBHh6
-z0ddVJw4+aOL)pU<VrobKAr4Q>^6<o%+R^A*Xy9wGw;d$sO4JVwOazTB=>PnYE=qi)
-zs}g^fpxG^-KyY%GL?W>TO&qx@KHAoTHoHs_7KjI<lF+dQtt-K!lA<1!l&?_<u`X8J
-z5<r-Pt?9>HD-KEc=^+V`w&o*13?71K^I23(Ly}^6ZbYutDt>jLx-1}`6k0*d;}Mer
-zN}m#qZHG8G9w}&A&W8C8ZD&(ijV%T`Y`uW4XYVsGhRSOg^Mr_PM?WwUAuX@=cm3Ng
-z)y`K~I$y*1MS^Cx93nWm+DRl-yI02lHx|3Trv%<D@|C9qZbx~nu011Ce-~^iEI{CE
-zh<bs8O3?E7J>~Nh(rS7A^x;SQX>I>??zhi;BaAb+A#{&REh(HZ^QoJ?uZEJt{tq>Y
-z_3%<jI^IW?{8M#>+KNN0Qj*TWktKh=C<*G7k{s%fEcrlD5~FaX<n(bRpIelS^No)I
-z1112{QuqB>dd9eqTG@|PYTW0l?#C*#=(`QuwjcYifi&!PA%^ZdT&7mKce@C|-L4-!
-zqNBWN|DWa6+vaDq)h&qh?7aXeLj6Yf?~mK$?zUlSzq-0%s?;cV+lHxfD75e48gMk<
-zF#Y;mV#W%Il`e@Dqr{77lHHuEHi=8SrD1C>d@oxP(+jKYXnv$k;%-Cq02t%z6YV>i
-zO3fuM?`SHgkl295j^;njC1$LUSm}~jF-nYcXeUct+Rp5h*jrNdHyqWmwrxrMb+=CS
-zBR`~0wTVDodeNzd%fjp_EAOrNJ^RuAdh)be!$`+BS^A!Jhxa4-JzAV;YQg@-yikYF
-zKWV`<u6Zu)a%CXVf>^R~D|_vf_!?S}yz0+=9PzaejBlGz9LKp<2;1%nhx@_oNH|>t
-zA%4#lB*f}is+B_wt~*+sh)-Jd0|4LWB$w$D89I}^cPv>t5Ri7`4;`%qiCca3OFIYk
-z+peHFlIt_cp8%fAren#uT|7UF^N+Bp88|9u@!^lr))*foOGd+2Mm4J?G_qH4=XJH7
-z;hP+(zr9tuQ4dDR8rIy&nrNq1Sa>2RSsE4=KBIGPIX`p7tx_J3RN0N8SQecg<KWq)
-zvJn;ba=ovpSU$h;6ysBb%5?QCCT&6;MQ06X48LPuE03rC$|al}BtgH-!ROULpXKYB
-zb`t6-)->Z#?sr&>$rJ%Kg{GvWy=SO1X9eYlxUN^!X^T25S#-xT^1F<r7++Dgb}eGk
-z8dxohx`N*^Z#9qSqB0wzGRLB_JcJPac2SvROqusd%A!6?{kKGg&=~Rh8rLi8DuwWF
-zQN6uZw{nW`{w?ZyDQOw3mPK8_?<neG9?wN(HbiBPMP+%2D*ElBGAW8mify&}9Ch3h
-z)owvw<3C@g0S~MD_94G^Q759&KoeTA$TUVqapu8lS=4F#j(M|rJQtPO5S2L=mE|FX
-z=(mf?q$sLfj8d)ckKrQw7K?UkoT0Te4+P-tpz+>%JOZJ+>9`X*h3vgMp|gl9^J~vp
-zvsc<EFVlMMH=K^d<pN{YIPJUf<}}Ti;|~*!BQ}ONo`dPs-5o(!@5gQA!&r~tV}eEW
-zRiWTmFcZrM!zR)bs)oPXzOsm}gp3Bt@w)m5;9}CYFf19-i8s?Nek?mgCam3<)a#^*
-zTCuzgGXAi=c+}^a(Kk(sx-S2>pW62Kt33YE3oYKu_@?%DcD-MukMCs<Vzj_Bb6<b~
-z;()WYzPDcf^yO3dbvW}342_3488Ud+`|9ZofB=!aw|@C=2kU?Hf7h4mr{2#GU$x$I
-z4eX31mxIW7v<^UAynQCI?7yr1eKpcMsHZO(U?xvTrM2;Y*3)xS4`_=bxG=@J!-x@N
-z`SmO8|DHqeOaq*&Cm)kOxNog-7;Idtf89%Z>+ht3@b6mvd7FHTk%UI->2z;E7+;z1
-zIPYS7rT5?F4&OBdM3r*6ztIK0p1usCeeXa$eKACR$sqT_ubGF=_v5UK7gGnx=x1{^
-zd_Glu*Zb15pOwzjp5!-^57Zz26Dqo%e5iiua)15OC$H7N=0o*Un{ttY{{w!W?DO^g
-z$JO7L!cL%TR`81td1*o-TZj=WQ7Om0|MEEP8LECl+sBiD?|A?9rEp-k*~2E<m4X9%
-z;J$5FL3lr{xr|@Q#%I;N$bsEvwBotqc~Z86lN?v%uLigkhIV9i;1-VT0uYBMZB&JD
-zWEVwN&&;5|ljD+V6BXkWxlNbIm>t<w!OD?cbF_wGaTC#C5M_Us$@XX0PXcHi3vf31
-z-Ld3tTY!O6ywime)n!UM2HM6~^<dkZ@SIz4jq!zq(KUF^tLS@HTwdNIp^?2vpBJ9<
-zVt3DZmr!Ywx=`8FHRb1n@f49qOMcAZ+(Pa-{}EJ=Ldr`wIEI-n?ksUU!&3qp*1`wz
-z^6S5WxyEcHR!`m+)8_LuOgqF=c&j%f^jP{f0?=hdfa(H`7NIgdKRjmV0-efWJ^89z
-z$C6jx+B=rqd26^<i*6djX@9|HcnvrnpeIfsWTjslAKd#Y`OmbA+<(4afd?hGo{KK~
-zO;f-X1kDAW&eN&_6B+^&pqs#?aa{rvFx1QO0)L~tXbBv>=<5}@<XV;mp2&qOYIrhF
-zs|rkL2uy%(0+Ysd30ydp@xA9GYWUyCmzKcMm;S@+H0f#A@GOF|!1Y|XLg4W{ttv2~
-zAus{D2}~N-B`^W6r-tQGFMwLtMjP5&n305LQ1Ylp$Y%168iGB}Lhx$Cx^RX29nCHM
-zQbBmzrW0>&w!P^P{Nu^UHn0w(to`Fpx&~H-Y{L|U6TVk3I^rQ@XitE}(c2FQFuZ=>
-z9OSRA_k$M&7mlT8hRZKi1|&?aDAIfsRC`F(eO`pzF$Wb$EgQ&V9uZGoIKUk%L1#4v
-zS^jzG@UgAxd1m=*760HH<iDCY<{4>uetx;0U_8(of!)>UITqjRcvAf>aaCI1f@@HN
-zsbBzcgHbglb8p80eu#SRIpT9g*FFBXO=BUvkFoFy11@=4MWs`l`E|JV83@Y_salUK
-zH%y2QdLt*6t930`Ke60+*K(Yxa}sj2d~6m)my~+Cn}#nNQB?L>LXq$TOWX(?4WDx;
-zsY+jU_$d8`sut7Hw`=$A>@so>ISC8T(FKddiWMJuJPY3hS7C7XvWvr!&b>W%BL1D*
-zI|VE6BGOTrS;n59*rg{!=OeR6ads8gtqURTrI>!of=#tjxd&87$cbNavJU08#4;e%
-zv|dK%b$2?rF1mrZ_iTCsXWyQ?0fA-K;dQWlsOEomt-|sFk|TMt%-@`d`ukRqWmy4k
-zC#lYwL>0?)vTQ<T`M>8_4wmCU9#|f^K9+aQ@_L13c65<ESysm<mTBaXWyX2V!7LM1
-zEYr!d37O@q9F4(p9Et<WL)XXhwpngfSl%j;C(Hb8EwepGmesc7eb^>Z9nG={ndSc`
-zu*?Y@7adn@%LCWP@}^ndtgzfFktfUiZI%a1EHe%*lN4Zx>S&ftNGyAQ`SkZ6wGGm7
-zum4Sut>fm^hwj4gpWX5c2r644T<XyNaz7d4^{eCemoGg!jrq%ZGIs@CMfHO_)oa|l
-z?ROjIPI`8}dhNUY+DAIGp3YrqzeF&DEyK}u^oW~nU41%-w73_nI@imv+**wVwvH_D
-zD2yUKdnGi*ya4*f(#Tz=@N1!f8$w=S=g0zY2?cD1GhZ8Iz-7el6ucMqt*<=F2-^0-
-z{+DhBu=NTVz|SM77yv5&(v@jcyVmPulO=!P^f`D0L-Gj1Gu+`z^SY9rY<w%N=J9`T
-zfE8W5pqkCKDu%OK`MucwTc^Y-Nt58LEeU7*)%G^nL7@q<4@ol$ketPs$o0Ru9oY7^
-zbdXv!Tr44U;tri=hDm%F3TIvekJ>o>=(YD$<HJ5lHm;)Kpl_*W{jgSO{!R4=7%#I8
-z!Iw73_D*SnM;60Sb~MRZ(aNSwa+*QenDBi7Bt?>p^DawRTQ8IRF}4<ICEEYQ5mMf_
-z2&Vx<JYKSCr_@`b#JDK&^NPiL<$GUWkO{5kNHVJ+1OH@nr9!5sM22yb!H`uV(_%xj
-zG@-4XJ4%`s$gF|PdW8%J>8LlxO=hi3#?A9>6W7%|f2CXVyd7nE{)Z@VM!%=LRSi?E
-zQ#@~xo0W&Juubxz>wE6`<`d2X@hC+5d7$9S!)ZSNEiT>}>l3rK2XxB;?P3TQLOAbG
-z2S*fbGaUN5E7UOE<wPq+c6T+KG>c`A*ON>gOk2+@sRY2;195sh#>A?Fn#NgElb<2y
-zT6>3GsM(Kzi=FKpM{QR&0x!FRnjA(`lOdT}Va6ravF|R6CbgnDl>nk_ZprAoI;h#v
-zkR}IZJ~}}-glHGpnCv5d!`%QPwGn}hRtC1x^C(vMIKeFFgrl{vPuYd^q;OKuDa1Me
-zGzFX%%;<K4$w@M^nNLOV3_R8|-NDB1$Au5yi75bc#?%k$3#b;ZLNv)-c@oez-wH@L
-zdr=8+wW#{kBuuLq<Pv_IWz;QJ^BljpCjx;f&rFO#pX=JY7yf<Q!L+`{FIos!Qt%Hq
-zq-j4q10mp5N{HDg1S_{qh+%Q1@6bgjQ$nx=gqT-wc0m#tHhQAWiV_5>#109_ktJ|(
-zOYn0VlS&8VatUnI{*(xgc9^3YgJfnUNH7&8U}I>Lpx5v&7QRQqYG4USFs<P1vLrBU
-zprpeGQG!5~*in`oSppZg1RvAb)AsO7sDmvP3lFnws3qrhfF56UFhQI&q)kNHBw)9I
-zbQd!c)d5RDf=LCK38QdaDklyUVOEqNP<2jt9HtktxVR<wx<UdEYkiG>Z!20ALT};V
-z2A<J}I%ow6>PVFYD~Pm7ux@x43;RH<1D1dU;|k8MO9I0NO68A$MXJP(vgF8h;Np_N
-zvzpg^&ru_0$E@a$yN#NEH?C3h_YhP@&3sm~ESB{RE`5JXTCV!H12Ad0coSe01LZh^
-zWaBmbal!zJ{4EY+C!E>>*ebygu7t3Cfb8hIN2EIS-8Dy#SQ}HtbQG7OL;o9!v;RfZ
-zMpha}qFt%~?FJCL{%IoO;!y{+S(D(9J@4od%q}puqxfP`T$SZfk;c=7Stf_0=-mJ!
-zvugtDHY%<&$Es;LdIYnZ%<W)yt0=x5ibL!jM7uD{WHY<l4InamAh61yD#zuJIcBzp
-z<_OhvkkR<4{;-2t_l2?|_vrEf*sFJ733DU)QbXMUBD2HfBN=U<3yWEg9k$tHnXNOo
-z%&f;`3|nk~sau{<P8km^YdWArbQaMr0x;R@obw&I<ep!>9o@>eU(c=QUWCuldZOoL
-zFw7CeW#9}0Fu#s5-j9ykV#WnnJXtTs!oVvW>g?jz<d-ai_y+=Wrf<!M4UqWUq(6%2
-z6ORE(kJCXdLo$PGSay={fH<{$v3+g<LrELG-o2M&c9mxA%<{$1eRf5`!AzHEV-UC3
-zVzBSSXuX_^YZKIqbCIh68ggiulDIsr2Gce^Z6OzOM;K)$x#$CuOyAIpL}&_hWGwn%
-zyXa2U)=`8X7Q8l<A=`kN+Ixk(ElH1<R{VnWZv6TL8>Clb&ntT+mwsL3b>JWp3ZNl}
-zXe|A%K)oo82UT5gTiLPJqeG$0Li%39;={fOB9S1ya_|ha0P>1=YO@S~K!~tbnri+6
-zruOcVrzYv+5^a!vUhsO84AL*Sbg28)T>4q1mnL7SPHKQq$RQd_ziJd~3iQc6)WWi|
-zbLj)jB4G;Y4|O_isRyYQ>6L?%34+h1cWSc?Z>n;|bE>_2=j9_w`sgE(03d3_h=z`U
-z4PC$NwI?$;kP#cY()I90WGsNPU_fK(r;K7+fxoPZNeO<HEI+`E6Q+=U*V6OwUL+Fg
-zUOBkOEr48lr|Jx4gf~?=U|`Brd+lG{T)%Gr>RLDd>Ze{J|LP)w?*3JF;m{x3nulhK
-z@0(WkKmY4LZ$$%p!p=)#lzHOt$x2H8F7~G%)B9=fhG5;_PkVdFamQMI3(c$Bp9=dz
-zGo>fT9wI8Y#&WVg3-|q_M;U9|>h?2n&#7a3<CAyDP(O&EVyNZE$9SHzLmv-6I<EDx
-zY!b~ip9IV-By(?tzkbMyJ$V+;A{fBeL%0^g)ex>IEc-n2Z+6sS$Yt7f^a%g%fVmyT
-z4~ybYkb5ZY)JxL?d6)DUJE;#b)y}C0-=mz<k*>vSMe(|$N65}$sn|JAgHzOGb>Sn~
-z+-D1)d^9i90oh58;-6q4ztd6FE;_TYwteof+r9u-xKdt7!Bdbt&zIpmU+2}9bndNj
-zli&yIDX!Yd<qKYH@CmW1gZnWUA`0nzZ^5--Cvlr~T-{`rqo?6IU9ujv|A1E;_s((5
-z$G5`~aI@=p;?+(0Ef6ac=Wi2d9mX7bnX1#c{~F&T-rMGo3*w<mIG%WQdwsJ)oWD(+
-z_E#p(-&GHDXzvw)xLutSB(H9iw<^T>+r;VZmWkW@mD`Nrwg<UXJCEH_^3b>4e{7vs
-zx4hRY#QEFA+3w54)eqo{D+Iu|-4KAd$NFd0j_N);)>6K?TNnC^FH{%0fS}Ta#<i3%
-zwU}E3>Cno0u@V%vjM4RW?O!iF+TZ==<IQRyn3Emu_wxIb2;rO+$De9l@rC<$JJ2_l
-zYUC>=J|=R+CI&AMTtU~oi4x)1@mk+)qbu<c%vkbqYxt-cr*kWP;$^Ic%|iQN+uMbB
-zbAF!3;SetLHNG9T2-lJj0XgsMsh>;u83DE3WNr;pt@WIGSjXnEgrBE)sl`hro}qA)
-zMMQCkEPUU#Iiv)CG?~k+yl$t%!=uZgOq_HL3lhDT_Q%Gu`@%_~d=5*lVi^fnolT;8
-z=6yg;s5IN%e-Rj!JjQb(f_FkUs5^fFCTy>Uhs?vB)a=5+=~vRPM6ZcS`^EsM=?kT$
-zjzEd1!_7#KKq0P$>n>#Wf0EZRj^8f}_B9PA!J~U$w>Ny2jLq%{Gef$T0)4Q(6@7td
-zeQoP~Fu!>mcb}FLi!Xzs+O{l#_lGgAsi%`+s^#NiMv@(p3*5OxP2=umFy7Sqh*zO#
-zp6r^!`0PIGsPVZbK3Jq*vC&|Xo<^giH5cK7z-2FlBkqxFQX@cC;*USIJA`3V=dA1L
-zX)f#xGd-=1yo+X$eE3>WK^S5<*oGbW4?rKXe%mhwUVjG!XHjW>ZhY^UKop;4$MA>t
-zM|pxq+5X(Av;CFEnz&l+;imY+8E%tm_;WXlYd(FA-*c;$mT<|`jMu!vw}M(RsY*}b
-zZA`p;u3Rv+nnNaJYE9Kirrhmg;V792$NMC`Y>?#tz@37Adjr7)W2bNxsxpobqtcAm
-zn_-EM$|Xya<QXq$iuKS9=qp44letO7N=zcZXyWQ;EVU-RVW&23^Vr(LAw0k15uVN~
-zpMmoS5`Gh=wkWZ^n{nBKiFZ5<lItf8?{hwZv}3POBELThy}5<>6r#7TJhMNr@P`FY
-z5}^wkAQ93uTV|P3A0`E0<<PjiS?Q&6b!rO*?$XWN_+`YoyceG@;IuW_g@?U2pklA9
-zf2*;9c()zbf5dUD6RnBC9M>pD;wm_y(~H9^!WQZ>4zu{V%Ac_lT;LBR&ND;@NNYsE
-z)?0KGzLMm{BisXGyMpe55sD{VxJII{{-{aY@!u4rmbkYNwfUABBOW+YF<xcg?gpT_
-z&JMAZKG)1nc?`#X#_;`iqx4A{bVeL;yx+a6LhPIm6dT3Beh$}r^3K^^Mt;&KbmHdQ
-zE$67tc`zp;6D@uG$T$NR{z`jbkVjHojx4$1K9@R2pJ{XA`F$V`eI~o+zQ*6fYe)A)
-zGPn%D?9#l1qr)U+GtX0whQ4nazdF=SZOTisMm*I5-Ff^DbQciqYixlo7^dPuepZ2?
-zgc3=r5)V7UcL8I(t~(1J4TS5u0c~I7FN7~#APM`dx(o*1d(rug1Ckq<Zm!Q4mcF;P
-zp2PPnp1$|h9y!QH&?Y<S5&W#nbF1YU*a~1O_J@_JJyI7zhpe2&3IlZAIra^YAjFP>
-ziwbmO0veyduTZ}2+FSk>!T`a;b#G631BV<Vx0U(ZXt%wJaX{%;ESy5q=86hHrGkzx
-z?xLdf`tAB4OvEVLn$3{V{8>GDaeqC*)zdKkUV3kDz2pqET?x6b&?0!F#vyJ?L3pt?
-z+~@d@`FJ0%hl^>v<bX;7Uo{2gaepj(go);}eCs{km^GbA1v)q2k!sq6)qwD^S7-MK
-za~P?1UGe~d5&I1Z`MO@9);k#cuj5lJkZ8*ArX;$LgVF?$#m>A$3}nhH;H3d2Jnx~;
-zr9($vBHrNAaA00>^kTt{NXvNw??P_>$5BO80D4=iBYa#)uUTlM+A1hyn_QPhm#XFI
-zY)63@+IuAx8@HF@*k|4Q5C@()Bbh|+X59Xt5NWCSk#(UriGk8!ZNxqSOuUJM+(Aa+
-zT3qS7xpE&Ib28ZY=&pV911JW6Glx>vSjs#u>FnawQciWbSo&u6mT^6M9OdD(o^7#H
-z4>;h$qnPm^8F5}p*Xg9~Pzf{ZxJ=$UleFsLk|S<bM3Q)O=gK(G?sd#ZPM;e;lb-88
-zlb#(go=aDHy~KX(eE5JJOOmZY2N=&+rQh%@c{qp?PNn;P)?*ycF=lIJ)55Rdr{*(Z
-zT+dJQg(1Bd_ryWCD2K6}+`+om6@>0U+<7eDQo2?{w;ino6%_Y(lO4nE5CByQokRCC
-z+o*#r)B%QRKStw%*E3YFpeVMyo`9j+T^7eYSv%esH5Yh|QcWTb)eE4wSnfJCs2(|w
-z;z(ZNk3VIwm_2oyHs$%AWZ_mn_LN0m{ytm)_X_B*Iqrv{xQ1w7<Ichb2nyuj=hn&r
-zWf58rGR2)hCZP{nE^_SuhHJi@w~Tr)2;J`r3#1#H2r%f8g+PjH8m`t4VfrGLlfMD^
-zDN*2Cgwu*?<rhkxqEK-uC7a-{uny~k)Itj>XHhChIge;x<DKS*w7>zgLuJ%GvIXy=
-z9$5p9$$+D;@kta0qiZbne66|`qx+wu&xrm?nz0cAKa1)~WDSEyjj_U)V2u4PjIl31
-zW{jQ4IeEP~*(UzD^&8xsa8N6Bs8S&AlL0VRUZ{&hl?{uSy?Mv4VIY8NLs8>kjllj+
-z!ruP{Nuh;K+MYE%K8n;>9H2@>HBakNHJ3*fQ{0s#ZH&{jx}X8uLK>X3@~}E&bqre2
-z5e51JK~&qYlV+o3Kx0gbs$z*Q6!-tfj**qk4Z7?{0gbE!1s3o2`?W55@5lipdD?rq
-zg=a;AvXvY@0wMQAsCo-j;c4}<$8(gnyvvSxu*kJh{Zk}`A$FY6IK+B9;?@1fHNHOl
-z=scTEa$z0)x4XvV05=H{9Yx>#8LR;=B4;@c-j$&X12H@P13+Un$%|>BKIWEz1}MV9
-z6%PNP<HbmU2T^f`H~`J8Vw7HM8>KzZgJZB>fA|WS)0L>OzWq6l&pSYa&Pu)1jrHm{
-zB;8oArdfEh9y<<pTWIj?A#SW!Lp?ZFQFi}=YP_}}zX~^YVh22+4)Vr&H7w}HdbMmp
-ztMs0muW)F~uO--#xUpW1ZH{FsrsM}j@9IDbyRlw<W4-#udNnup^+3*z_39hz)pFWy
-ztXE?~ligUaj)(d=S_VJ##(Fi^&~L0)-*yEHe>c{vIiJM_%Z>GFDk2>HyRlyF+1QSP
-z8|&3r1meO^Tm-67EnaKCv0febqsy!NH`c4``L6Plv0lA}{ba1tat{oB7ELqRxC8&M
-ztiEF>cw1|9?WbRPa0vT#T8_Iqx<ZKH8iixK+$7yq)7N&dR~n8w0(A($&f;FcQE~5P
-z9aWr*gq_6)DVYy54LRCvvl(rW8<C;7^pHvq*rBv;D9Lz%YvNd3lgKTdEi+o3lA2;U
-z95urh4p#26AM%+fkx0GM$pyW;e6-2Qx``|lX~wDnuiNT2!f|Dv5Wc;|g1?Fyz$TP?
-zTb;nc&LpcRNEV-LHh{k<5nlie&rkXQSv-5IbEPVbdGRL5h8@-|MEe@wp?zefqx-T>
-z;u&%3z`Ic5)=UYLwy)NK04Q4s_Wu9o&I3NGGW*|yqKJS7D}rcLR8%69(8ZF_JCV>-
-zGzrNN0wIYhkf5$nK}AJzZMdi#3yK}<T31wbb=6(0KkQk{u64zZ{r`OLdnPk;rz8lv
-z|M{R#&U?;#-t*Rb=ic|uUB(?wS2y=84Hda{(<-9Q<EBpoP0Ld&u~j&wAsqjzNc^k4
-z_+R$!5U*4^@%NMy+gZ&Gzt+dENo4WkkjHU0IsP;kzjp&HE`HllykzC_Nc@dn`~@z4
-zr4#>lE`B#*y#2bZZ2z=K{B)=n|4p0L{u>p+k}0cce|E$8+JAMp{m+iXzs!sOW34{!
-zciw6E54>tTEMJKO$5bx7yVUo|c!~EL;~(e64tcLQY~8Z-sQQt~8=YZa+uoJjLScD1
-z&UL>k6?NIvZBGdQUX9(C_4bBY!ES%rl2aO^<#139iu-Sms*b*(md4hC05r*{<8<K7
-znF9VWKTDN}iIVVB>A~Bs_TjN|9kT{tr}2)fQNVMR%O7D^O2kA-K36*?a;2e%tAW6C
-zmCYYvS4zZ{l6<b#dYb5!3A<&Uo%f3fo~s~o*i}z2L--X>mCkZD_^_V;#qFo^vPC`r
-zYR`A*ZPd+oA?>FOdr_-RI=*=`%8qa0=Q-RPzL_P>M?BBUTjbYyp|`Zbi8gG)(CX{`
-zNWZ(=^+6>22KQ%@L)ONG+1)bWmF_JoNjDrt9T&WoIrm|;O!J-`9q|Tw37)TP_h*t&
-zbf`*v#LHE_$PsS{kL{hiSOw_~F^dm!D}WYT?ofEPT0TE_%a2QbI2|p=F*UGjE$^&j
-zwc5tpt9zgK7uy2dM%*P|(BrGTwCKko!UN08=k}H}1Qj?HE%0CuY{sr%k;k&^cx8vc
-zrzl~^#jD&A+_jE9F6li0=9VyTvYhMva=Vr9Em__Yw#*CBJsL6Exlt8a9r(Y3iZ<x!
-z4Aer}*Ay7F<Lz{iw;t}eY|W}RJ1%~amZd^x%j+*|&^0JPr@P<jteK_oZX8~w+2MX5
-zlRIYV`1XQ4cd0iJ_%RkQLht7z*j|CpDfW|Wkt1B4O!!GO5Yt8HUgBjw*LynzVR=h!
-zi$~}J+*tF@=Fc4$cX!oJQ-d_W&qBUj^SUy;pQ#8puUy16??>JdPPJ<Obrd_pXl?wO
-zYt+AmBXn*g{^?%)tGpI=?_Ei7gi8>=T*SqHa3p>jB>D*5+W4DX{4E@zvm^13^5XB~
-z;$N@aF`Lhlw!d8X<NtUbnWG{N_f^v2{_)`qndI8NQff5|mU#ik-|}4Lr9a&0!96X&
-zslP(jj2Xxu7F+a&FYj-@=S*k(Bv88-2Q(kky`tSt$q%c@!R+Ybic1s1+x#C+k19-m
-zvtg<Ej3G+relIAY_gy^i(G5$@HE$>+0K7VF7b(W~W!j6%ZBF}eS|V4|oh$7-_gv{F
-zfYsmqUWx5o=g0k>r7HMg$3(6)nutpK$30h3o7mkxZyvw%HiyT!(rFUAygMY=Kb`3P
-z3q3};S1#BYs0&p`<fjt8d7=6DuaC|hWnZ!vKV92y)Kc#)4Zl1;{g}ty`#?t>5lCa9
-zTsp2tm#W=Io%W%mMeRprc&VOl!H1&`dUR3y#~){M1_J5c{{w++V_25>9j#-@F-Vpk
-zWAr}|zVgMpsd6~vaK6?uoUbK@+bvAlZ^h9rkXI7RdM}k<xbgVEm7-!(yhE$%D{Cso
-zme%AK&MWTUw|9{z&n>Mvw0c45teU`x!kWUe^iWk*MU~70!%9m+)ivp5h4mG+HR<z8
-ztLGKg6wN*?J&?Z75$WislvmeQR#sHigo@K=7go<spH*94R8v|}uFQO<l!xjnLq({|
-z>eFXc)Rq^gmzS2MFPL3g7D}%zUr<$8Sy@_Ml3rMzKCx2yD1ClmS#8K=|JDEBI&k4`
-z1D`tUs=N1I`&`?sS1)|zV7ba}x0POL9rfwp{^pn$`(fI7pTiyE^tq-V4)+Oc6{l}B
-z{S)m1f#;`h6Q^Idy)&2u3fpWQrw>|SpKX^ofBG&izqft_0`d7<&}X-x&ozCr_9-y^
-zXb#$22inAyzj`+pU$XpbO#dqLr)#42>y|qIYSXWy{6zU1_DY?9ndu*=e-h<ic0lU<
-zjix_)o5cAWdZo_4%=G6wv$*z4&q$p=X!@HOABoz($@^jv2%y#{&i{rM^nv~^W3v2d
-zrcc(t>85`cgGBASA;<Z*Zj6gBZHUu9u}9+kO~*O?REN0y*}T_4pJe*R7W9GRQ|B)*
-zeX{r)Oy7rjo~VD;lsNy%+IL+G`lc52%Vs<O?<bjG>*hJVxruK-TfoyXOB8>D={q_%
-zaru{-K3V&$HvJ+N+C<|c*x(%7Fpu+JVEWs3Vtow6ub*ibx%^4Tr|H`!TR$#w`IC*G
-zCetVLzrpm${O5X4yCol=t4*KG{~FUL^Pj#Vb^HycPv(D_>67{2aAj)$xmTrb{{qt|
-z^S`Dswg2?1Q~M8^UOz>hX#6g_Hg*0+(<jRxxIT6MG}9-`U%4uE{sz<E=oW~$@gKay
-z<v-9NPG4a9Wc^!d`d;l5x6g(LQpXo~(CK^bnq>a2bNXcSXITsS4K3(%pHJ<7bqo5m
-z7gE<R-Sh*Kw12^Csq<Hw{&Ckcas8A1M(X^zrcahX{jJpbgQg$3vu77qe#7Uf^Di^~
-z0M2jt#N}W2jmzK7Ax^)+^lxpOczkTIZ>CAdhn-R;^S|2kN4HD7{ui`&Atm#_#`MYN
-z$2!xuBYr+{^=sPEB_+$h!SruAv$*{0I;YOxWcrm{gG;!6?V37&qv<=*K8fOAy=UtD
-zYfL{n$@<W!m+kOLR{zzex0Z9pUJm!a)q2+qpJe&hn0`!>@t1aJ>ip@ZKim};SAIbY
-z`72F7B+2=~nqcbk*O~swB<Ej^{Zi*&ZTb(B%%8@?UH*Yd>epoY!X*0KBV7JH(I*;T
-zm8MVDKMkfoIZ1qhVX5QGHob2C@^QxQZ}0ybOrI>iwBasGviQ<XpRE5XN2bo-VESbJ
-zmpd+X{sPk{>%ZJQmp@tmEi-+gYZGT2)jomAE-6|2q?<lj`vgs&tp8RYn>xM?rcc&?
-zjr!?KKFQ)+WBO$Atuy`ONyb;>Oy@sY{?(>`p7k%$_Y1px5ooh;QlL#;TAQ?v?Y3Kn
-z%N`bU-Kks;=41YOFV+reXKppLlRF$ZyJ6TCnBC#3tUd|s%193T8}1oJ*^NA-?fI<n
-zx*TvZ|23LFT{rSRVSl-2v^#IxrQ4j}_5!S3`D<b05*MegBYB^&{pd41TlxKj|JIwG
-zt|xh)uw4SbTKbp&(fRFU=85X1DcaBqyE5!%x5DmX>~hU6Rl7fg-9WR`^{1Hnj9%K@
-zKJQ^yaB<81*byJ2%ud&%V*HIgudO_4T=Z30m$&S126i7TcXqly<$c2K9p!Hkx@9X`
-z_IC?*b!MmQRmuFlgkA2nE&KZsyMbn>>sQJA^`PDxbQi0Ic`y#U^=5azxl1%&YOu?`
-zv1NZ(VAs>^bbTu(zNr3Pi{0uwoWHPHqH;gMZh0&0cA@VZT48rMcC*bc)i^E2F4ydI
-z9W16EQRCn|>^45+>S5=*3D=RkvD;vFx-OQ?-y7I1f5rK;^WTL2+S2#yT4C1<yY2q3
-zWq*^g%Wj3;$=KDIU8?$Chh3%F={j0WeWS*~v)G;eua?KbSMt{iyFFRtr?<jx7<Nr&
-zr|WDn@kRA-8Fm~0?cysjvqa<cV(ha2<LuJ?c0(iU+Cz%Z>^l1GOzr{Si}IJMojbCo
-z3^aeb9_M`$tXF-pTei`~XV>Ktj;k5iEjK$|pNsJ~?u>1;qAI>c*rj*ymY0;r*;}yN
-z&g^u(D8^q@JHLcob|>dA)wur=yE?NAPs>F8(St>$!0b|$I}W?$+P}spRk=0Ttuwn+
-z<z9i^eP)-c+_l(k=-hI-pJ3N>Cuf(c++Fytmu7aU$~_#rQM<HUZZUQZW|ykm^RSz3
-zcB#s}8@tBcS}yku?ADuIs&d=1rmQhLU8jo~S5fOrFYGpY8-Y@v4^GCe$?Q`3I~lt!
-z-CFLC>#z%$T`GUiVmGjR%l^K?F5T?xx?;llyC;pdYJcbNKx>vn^J5rxtIaM|JC~tc
-zZg#rf=zYTLOH?~wjNOJqTdv1L*sV7^U4M-67quR|hh5W9=P%W~?8qY8Mcdu^q_XRa
-zU2ZGvW?*-AE9@3wx26?#w_vx??5I*~eNEJQ`Vw|cW@pze6ZY?q@;A=aH<iC0ocuSL
-zon41a=x-c$XHRI^Uk!GZW|zv}71(vr?n6GQ;#-Sd!0hZgXTtbC!LDaf%l>xRf%VVq
-z?7C+{e}`k&bGGxB>bP2rUAo!nI;i&vkNc=`dLDKgE1kbo<L_?lDz(jvPpWd?z;3qL
-z>H26)xlza8wmUN4>Ycw-<@Um^=R#+fsy`-Umu7Z$-85nQos8YaQ(N|T9d=D-XV*~^
-z`g<0;<)^jm?<?#Y%ud%;W7;KZ9omy~pzRj7>~9!$8x}b`yUv<0zB26ApWCv(i?Lf{
-zcDnAGEWU@ZtGl#ifA3*eV0O({*uvw_+-u$F*qP(UWi9*bi(R_e*>%~3^__v;s4H6b
-zw+OqS*`>OEa!V`yy%gn7*ZsUtxV};I?MLjUU)6GaJvevGHalGhOy+MKb{|~RvcDSa
-z)|s8I3nue-1$N7CbpGu6V8V7@i`{CoD>QeBj?<rDx6$l$J<j`t+a>CI#V*_{+F*96
-z=K0~+tv5SeKaBAg)y~D(1y{FRkMpn_Wp+22yF~T48@qL8m#Q9bVE2^SrK(3;E&{GL
-zyHw+)7k2CKY`K3YW4FfaQjM3Bv77yumi=9aU9Q=s8ZXac*X6G*xARxn1<fwic-fP4
-zsyeev)y~7Pt2Db*?OcZ4bhAq}UM|LN_1c!}@ep=TnO&;!@*Z}%PdI<6>d|pG#-G`x
-zsz+b!f@Y`d(#gjC4D8lF({leV!fuV(={j{Hf1l536W~^S_xB;+jgEK%-i>@8+<mJ+
-z#$E7>Hi08<fnUKDrk@V?4Fobe86PWk@&dRs`Q{prgS#N_VR9$q_p@F4f1&(LG9F-j
-zx1>$r%r=3H*C4klk9ZO83~z_~VLuBh-+r(XyRJ}nJ44xhHp|&v4`o*bxuuYCER<ay
-zlwEHqf1iZf1UjN031#0Fc17M;?Cd{>vi}>D{drLKec(jo9pL@&jiNSzZlpg3C0_}-
-z)sS(9$tS=Qk%yVQH#`e@CHE61U|$ZsdKuRjI(eyaI8^%%G9CogzN-tI-6CTSJQu$M
-zq3W9n6@MqF_@Bvl_NT#G?CPNGPK2@>4`tT@DxODAXcOSijQgPM?trpe3S~DI%B~IE
-z8@sQMcXt1UvReyfw+O1;a-iC6PpEeKXhxgBKBTXMl5d7oE#pFy%isd!NhW8&rN~dv
-zxVhM`hTY*3_#^2JP~)~7-b4Cm_yg(d7z7(&EmXW?jK3V?<olu8_g3SdpxSq&=>x`>
-zr#t)ejYY=pa4`P6K-Prro#58Ys}HBSdR+viKLdVEd?!QBwYyJ*{~~=TRC{fl>e^`y
-zRGintPUx4ycVQ`f2Npot9|<$C+Y5fkpKYMp@vA9q0uRH_;2o6n0#rZT1f~B2d>{L9
-zQ2nyAr9Z>{yCabIha<5|gI(dfd9Hn5gKFQWpxU<*s$F-2ig)EC$9$;v%rg#!YR?Tv
-zJN=o)L9jRZGGKfB>;rek|F^mHFY^8TPwjR$+=F`D2-U8Oq3Tft$&!%;)z4cSAD`&T
-zxe==UmO)e*{h<8q55K0Iy<ivora}36YeJjAzv07B{x5-qo-qr40FQ@?ZwOSo9|+a1
-zzl?YGFGBUh)lltPVd)c$zl<X@=~Lh+^6dxJPP-f1LABElV_p1zHcmHoFupOy=`S#z
-z4Ap*>Q1N9!wMR$T34T1fP2fN9ZP)}Kg{t2YsD7(}vYQGu&a$A!*+EeL+CkO#l~JyK
-z_e15s1!|n#05#6efohMLrtc3m&f3C`uy$mdz-078pz7V<cmPzrpB&-hS!}F=?a5aP
-z701y~add~O-?zhE+^;~zeII-eUIrCkJ$xT|S2!9u0C$J44s+vq9sB~ne}x*)mqYnY
-zha2D%LtQ+7GEOwMhl>BFA&wtG#eW%8d*&MVH@=nQ((f|PgBpjkA&2Yk$3u<lK~QnO
-zo9*;3LXFdBA*UVP{|wiX?;@!77zNd?X;9^UbChe3H{p|{-w&UFtD)@Ahiboa_$+@O
-z4OQMSsD3;Oa_-Z8U#Nck{z#|)2Yd?qE1=3Nvh;3H<GGgq4aL3yayppN2WmY&7^;1{
-zK(+6h!(F@1go^iT8bQ1rsy(kYUIf*i*`|NxFlV;}YP~oGYFwNMRj-jy^SeDHOGaCz
-zQ;+WkxpsXSs-Aa2&GXaY4=~TTGgKVk4Rr0-1m$lrl)qZ2ekg~0?de_s<>yfNH0%WB
-z|NQ}Oy|@=XL;9^y@%<61-4{T$>qIE~{h<2c^Zu?~AAw50$~Y0ybQvrAwFwL(y&9^W
-zN{rK>+G#9Q{Gau8TxC4Y*vt5KAE$p7s{PhL#dkVXd(41Z2L{8x!`|?5*cmFWSF>FH
-zN1*JkhZ<+6Lyfa~xHJByLDlyFsQR^s%Ku}g8)x4_jkDLF+T%_r{h3hXY%<h1dm`8-
-zkVpC-q3V66aXwVNcY~_;%e@^RgR0m4P;p!h6~{cN`i+E&`v9o8w}XF!|2fo^|1?zj
-zAvm0T{oq!Vvnw2o{BA~@z|ZJkg537o^*Q4e@Ke&4np^^>AdiPD$(I9fNB*dnOJ4`C
-zC4DViMfyBT&x2Q!K2juo!y(T86?h}*e}|8dUTx{ez#B*(5AP#=cgWPr*a>!~{vDv&
-z;q!xCdp-`;&MS=-P~+=pllwre1Bb%p^v_O~{?$P){WEwu=`TY0xyRC1!%IlN*wW`)
-z`ibyT(x+JZ087t;myv!?&o+Tl{4_$f>xEG5dXDjU_$lcVOwNY4ARh!*!X4pN@aqHH
-z1RjE~!+YT0U?=)*B`n7OQn-Zj8lb-4oCG<99C0H2EBZ2cF8br3?2drv!yuIXAyD@F
-zK-upJm!a<fW%ua;Z2~95CMf&Yq3oZBvVRu-0sVtec2~mF;4&!tbKwZ=PlK{Q8J>ZD
-zE|lGPcqYt-vL6gbV4n$P-wU3Nz8jR?xBI*H`~a#w|7Bba)t*<Id@9uZDT6zZJ`t*Y
-z4~Jdg0q`vJAN6Pxn1*~Blzlmr{n2nGJQB*jCp;bfC;K`3Gob7%q3rXZ`YRjC{$O|t
-z`v30h>=#4XS3%iNf$G;GQ1-px1?V^I<Lu9YvR?pYe=Jo0kA$-C3(rCSbGozt6V$jp
-z**FwxydMeG|NB~cTTB0CZ#NI#fXerv@lvRK7ebALT1%g1>64)5NpDNv!T8}`F5i1l
-z<KZbNzc*R>N~n2sx}_Hy4>$b)sBzKF(tqmi{B4AqXD>tfyW4ny>Cb^0ALW*wYw2U5
-zHxKu0qertcE`vYQZf8S{o70TBP~#@Y<j#;ct7JUWtxe#2(kDX6?M+_V)yX5F^v~?!
-z<i${Odz07DNs^~P#ogDq6;%8Fw7YBn*P!(G8!v{^UjQ$sUS*a()_8#F_kn89pLcWl
-z-!$F_mH#fNc3WoY6~-~99}d+%m+Z>-VC?5ZjkiLmcA5m$PGgOGLABG4CT|0$A_t(>
-z;g5Hbz<D@S`L99wzY5Ckawxk+P<C}tcGXaE4uG=Dg0kxlW!D+Xt|L@^*P)c%Gf;MS
-z@juz!0A+U#RJ$DyWj7u2?}%*vC%e8-cD<pF1F!DnjvqHct*e(A7a41e#m33TVaC43
-z9>!gaFLRK}q@2f~+Vd``_PoV-DpY$`nmh}BhkPtld{dy>ub-tKWa&Mi+N-UlZ%lLc
-zUqZFdi%@?4X6cVXwZ}D<eyOEj2vz^NQ1w2}IMz7Wc!;r^v4ipb9oqy7i1SgX`rQdt
-zznhH<q3So+<Q%AZbRe8UdMCINxedG>`6U)P&6o3`>}sIwj)gj(m;hHH?*nD`dM9W1
-zD3sj|Q0EsbMC5WPyPi<~c7U?`s-rvK_y9hF{2-KFEtK7HP<A;`=O6vxeaPEE+5M-3
-zI}dpW(gjDn4mG|Wg_vY4hnml)7<1tfq-UAj4XS^4gKGcpw|DmMLZ!b2)nAWU`puSp
-zJyidmW9ikFUJf-LCRzGmOYaXaBmIf?Z2}?u{t2@5WLyZpB&2iT7jP`B!tO|@<L@AN
-z80o#C;_hbpJGXP|!`a4KNLOS`hcs=*H|^Z_iGM@2$J>zGM%@=ett&^tLt$^2hkX|)
-zyEnH*ApLn*4WEV@7Y{>?i{)@X<OxvukA%v9AXNTOwsHBJpz^PW8ZXbnRj6)&%6~jm
-z{_#-x`$Ogbp{>jR8C3rNK#il<MO61f<u8NEKLaZNaH#y-L&g8|)-L}yQ0KEBL5;5`
-zpz<$)8XxoF;qXML@iPa?&v?^!f*L>XZ{@hwc&%{?RKHx^rcEG--6`-q+PM;{|K`Hs
-zm=r>tKh1zTj*o@1%YX}EI+T4kDErP(_8p;)-#-ML-J9@K<aJQ?&p_Ef3T6KgJOlmB
-zP<DTWU9dY?B+h-{m)LiO8gJuyj*0!l8M{J_i?u%o0y`jA!QEgdxClQ1sPcaJDd3g&
-zIs7a3pFkb&Ux%_g70OQ;d<YhpJRWL%2BF4hchkS}V<5oP$aoT}-5-Hz__-E7LjIHB
-zA7M`@za8O)@Vg%ZUjKgzCzJmJsQeE?_5bZq<MvvpaeEPb5V-*^hBfeESOFFPIH+;4
-z50w8MpvKo$Q2u}V-uYh#<$o=_7TyOnu2;bakuQM_a0!(EMNs`w2<5*&l>hyp{O=Cs
-ze<!H;-~Wz8{=Et{?w=FUKMdvnCU_FO3d;ZG@DKQ(59NO>l>dQH{(C|BKM>0Q_Zvy%
-z-+!Uz#XC^*;sq%GkHDqyE-3%EL5<gQq5MyTnm30-&6@#G^Ck%8e`nLb_-(+OH|Igk
-zkAHm=2=pQUy->%e8{jq^pBjzT@Ke%@O`ZyM+#Ctth8a-bkBh%{=~LjVqz{HlulmZR
-z7r_@v9}SiMhc8`v1=KhgW^zBMe%s#UAHHzyybh||N1@u~Qj^buI_~5_9iOv}8OE;0
-zcE+zhcXsa?Uox&W-fh&+x6Pzo3ZZwN2h}cPja{MIrGv?zZU_W^LVgL#?m6Q%#@<lJ
-z&2K+*?f)3maq={ikAP~=bg1_E=D*J0n^68<G2U#v<5Q<!4yC`)ILr9uC$78);r*0*
-z22^=Rnf$}YuAkn5D(`Nn_*X#ryVzK2Ec(dl$3W?a8oL<({Glta1ggB=Q00C6fs=25
-z>i@H#$~zvaykSuOjxg?IeCglL-xW~)ilO|aoBYQ6ZroHuwd-IgyRD(@9(m8nCqa#;
-zouKSqd)K9317&xD$z7r5^BwOvyLu>pIZ$>#{maSsLyf;&D1Tiny{XCBT>+JEI@GvK
-zhZ>iijNiZQ<o_67GCpd&&A7sNwz1YY(>T$1xbYz4ZpN*R8{Tr|y=nZr@h`^fj29ah
-z8EcHi#>vM0VIlR~8fspA^``5;PmOD!=EWT*UkYDCJ{PLrr@)tx$C$he{0DM-liz(K
-z5V#5XX?QKX9bN%1fe*lw;9al;s$GY}!-!`;sCagP+c2Iw8Jk{r@jMTeelL6jyPKin
-zsfDi~&oQ|#T!(y+$y>u)kUxBl;}-lUyb9g}AA&33J@723ctWs<ct%3SGZ3oWOk)75
-zeLjEHr9S}QLT-c_H+4|!z;RIVm9FQWKk`H<{ee*H>-JFkF8>z@yny`kD^C9k)I7T%
-zO8>;mfxvCZH$&w=18TiJ1l|BUTl$ADxp{ISY$SaFl>J1gdGYOwoL9g%q0;Yxng_?j
-zzrdlE-VJKpzx#q~k9Ed}jW-!DGcGdL7>kXQjl+z)!V=2;=y~>};QwFnOO9)=L7gw1
-zW9g?^`a(-T*wXj0^sbiv_jS(CqfmYxfbuiP(hDv9SWEx#pRPY&gX+&0jn_c+=S3#>
-zf%_6?I@Ed9*02*?{|{H*W3V3mRZ#7?5WbH77?Tf%Ly*6C&e|DjJX{FXpR=EJ{-;3s
-z9|+~Y9aOt~{!AdS0Kd;c`M(jqO!{Jzr^0OHZYIC=cQ>B?0_FeYr=9;&DF5T2{C9)$
-zzYVO#@4udM{vU?_B>i%e=fES8dz<{l-`se72Fm~WPdfi6LHR!c%Ku)lAKVG<Oh0sh
-zJ92*W%@cvZ&7?mARiA6&0OZ*w9|AR=uUPB+E`jn}2IaRG%!27qe)o_bzir`lq`&&O
-z^Lq#Ei#*@tK~Tqyn;vt1FN5;C5X$dius1vu%I|?n$L~(?O49%HsPp>>%tT&f@<^!p
-zbl)21cO{hHv!VQsf_K2fq5SrP9r2qEA0++jN1Wg1;GM{SG<gcte0=h+&hK4NelLac
-zI~6_($3XcV3OnHUP<S`#TSK+)>kkJ4k0Ccg$wg4}c_*m#?U#ofKQX>)eA0NAvC+8H
-zxX@T)oNUZ79%}4n+|Ky*gRZ=Hj9)(x2pmUTFT*>D|0$^NKaWGr--qCT;mxLB0<{h=
-zgxfH0tBoVzr=$-s`5<^Gat|m!+rhgi=SLc0HQWF-5C0E-4)1~*&mZ0A^1Tn0?@6e9
-z55U{tZBXm=5~zInQ2EZ{<U!?~4wbJ6D&I7C3mgkyM1KHOz8~*(`Sym&*A*(?5BIoy
-zpTU*ndlzax{1qzSVkr9tDEmUFa;Cs*;b^FF-UG`1<GY>xzoG2^24(*syc*svVs{Rd
-z{n1eV$3fX=K-upDZ-l!-jmr%r%Kk4<_IE<rUj+G=aTfo(0iFak-ljs?|4b)q+<k0Z
-zZ+yadr}59m^NjVzS;jnLwlTxl)!5GX)g7+9_lz$Y*Bb9OUS|x!*~GmY)HrJgHO{md
-zLi{I#N8@Y_l)Mt^y!Skl7aNZ?c7$|!#uvA{^Mdt|p_XwY)OqN+P~)&3Y8(xL@^=uF
-z|9y?$GWaCl2<7hrxE{M&D1RfM{PlzypSwZ%d;3=B?@6fqj~FjDj)3yl3%)?UouK@^
-z%b=CNC!ogdT~Pk&pzKe8w~;;!%6?ZU`)_Y{<8>{R-Az#ECCi}f3Zd+VLXFcjD7$ZN
-z3V7!!Z$R1I3T1Zz)cBkMWj6%syrn0U-FFO1*}V=mE^mXfyG%qr1<GzRlwE(Q@z@n=
-z9Byy?ewC9yGQMW~yYT_zO~yYNYvHl@KMvNheocT{zedBM%!i|(j{k?4z5}F7yZ_AO
-zkllCiP3%5{8V9dK=^uyt;`eIf`EUpHCqk|Nxv&d70@h=<8&o~Ff*GWLbG<t*{0nCA
-z?`6nP%y<~8oNJ)$Plk$b2GsS2ZQu!{f4njfm`@yULB;th%puNyLY;3sX!;e9A=CYQ
-zD7z)_|FAn1Y8=ireI8VOGL3sd)u#<qeVVRw^?431!0vje`2Gl0pEIG3b0<pXUkEb9
-zGsZ)elLckp5h}h<SPWI4OW^UOp9E`&vm7eUQg{^p@}bUe#+v>R$dK&57nI!|@OkWZ
-zgqjCGT;ufbLe=L{<84s&xe%&8l~Db2Jgmj8KU94CLe*zCsQR>#%)hT$jG00iZ$g#x
-z7?k}LQ1P7%RiFLg4AQ@EbpAhwU*hK@sP*?|NE39w3M&4~;jN@!0CgNW$@G)pzWC{3
-z><ktESATZ#{|)N=?LoLb{;r3L`y!~gPm;{P3P=}b91Z1vZ>TswzRJaaAJqBX6nG4F
-z2Sc^XK2ULYg^K(2D+2+VqWeFf;(i)lPx>QJ>%`5bKOHLW$;KS0xO+gg`?puP^TUr}
-zd;Glu75C#%ao;SNe}9H_X~t<#{wG4k-3_YUKUm?;9~Z;v$j3s(eKb_uW1!;h0BO4J
-zKmW<a{T=)>>7PNZTdzau?}Unbk?};RxF<u!eIV5NXE(SV_S-_m{pIB@?$@E>{wHJz
-zWZWU5KNTwOvG9J<yTDB3dzJ?R(~!@Biu*LExEDgjJs7eSbw3oUy$^y9lfE~61p5xA
-zf9En6_ua;;q2gWy756lF2OJCA;jceb-1|YbcL&M*`{h!1{_rm-|F=WMeG*jMqu`y$
-z?_c8m)?vm2P;uV@757b0anFS;QQc2~iu)LNFX<EEeb^5+{Z3Hr{ocin&qKw1H&onb
-z!AIdqa9jM%f{Hs2D(=CO`PUn2N$m{f|Lu!h+&4qTT?ci3y(^r8{NW#6d9N5BH?B5b
-zX*|q$pm7&t8{>a3bbhWiE;F8DoMW73{A!uA|CjL}#s`h7jK>?t7zY@87&{wpyTJKd
-zVLaPdYn*B93bl`G2jdUt2fTe;r$V)VneiCo2;)x1UzR$%PmHe`pEUM?m(jjE!G8FA
-z@4P_ZM7RcCLi*iM{dFzO;NR(RKbQ+IM?Va9M!&PAzjrRrIFbGURKC^l5bTeFino_>
-z597ARFVAuMW8i7z9|#rC_OJr}dr2U0D(SC5`F$EHo>frs%!g;7p92-oAWPpKDxRjZ
-zUA|Y~A=rnY;+bST%Gk@ehw;?20)e^YKLIM9Ae;v~!cx+;*+=nwb|#7Z`v+7!SHOAb
-zmqEpoZ|Om(c(#Sg_v2z055L~;&DUd%hZuic<kJ5PC*pS$)V%oej6k3qKQBPZx57Ed
-z=b2mrGm%G_yboN2teZHpfBkgs?;t+_C0_#deZI!ziSSRzhnn0TUW)v|Y0my}sN+sv
-z1IGjMcY|fj^BthpjrK4|{eC&s#qlwe{ux*f{|aSyKkS3u?NH^fF#Soe61#FJyHeO+
-z?Fd!wSkvza_oe(F|KNC<vD~<yG0k|%DbDV6;{an1<Bcaf{iVhUQ1fqyu{YE{%6m_8
-zcGnuKjQPg4#+Mg5yT^<r#*t9#WM8Otb9a+Ju6OBc;l-pk!au@Op~m0QQ1kNuxQz6!
-z(3^iy<LSdXH~y}HYL^R)eT~}~zgXb(ml+p8#ZwFw&q$MZF@8Fq`*Wl}4Nr!vpyF8w
-zH9sf9g`^LKisx{scy@yOp?{{<m3N=<c;lhQZpJk=&aM$Eo~2OnRGNH*aW^=d^e?Id
-zfm!f**pG6qg_@sru$c5RsCYt9@eGEF=Zh*guO2s^0yVz|!296_8o7l0|Adlnf|^fD
-zOfH6+Z$nMq3!Z}f6N6Uv>!HT;UrhcZ)O<V9<Z<vK<U>r}7HV9-Ph%?o8mRepHIro)
-z@`;caTV+g!+aMnVKSRF*ychW%Dt$2XWfjzXxfZIvS4f8EntmGWjr|0u@o@-b%Sgrn
-zur2wwf-3(7Cac=15z78DsC8=zl;3Kob#y%3k@R$^{@NC<fG^Jt1ipn&L)qT}55j&W
-zl)f6uf3C@Wpz?QxKf?}?dhXiR_~IOXKaKP?@ILb04LeiMi=f)&EEs^b@Kfx{pz=?L
-zzaR&p%IykezXO#0kEPE33n=@ypzNQ4-w^l1@N2jVD&Hm0D+j8a0;qgrVH@=6Q03Il
-z_I|6Z`)sKGD1vH-8E_Xk*7W<sp0s-xD7&4Z>^j2T;14BEe*{#29c<j)*cNJjyv!i^
-z7(NZX_J;dozYMCKPl3um2g-ghRR8pbvfmvZg#Me5vws)Lt`RPWb?^dM2G55D@Ip8R
-z{+WCmi=F@XjV~A<f%3BqD!xTf<(0wx$u|}%zJXBj?GI)DO_7W5BPjb9pyIm&?gy`e
-zvO5l*4*S4*cp$8U-QY<u4PJ@;T{E5kM&nZBLMT6Dq2fCVs=NcC;@cMP2fr+I`J15Z
-z?|^E*l~DFeq2eopvOfmOZZ}v4|69O)F8B_d315LB_zYZu{RB7>?f^Ca{+937pX;II
-z(_lIF1tt%MT5r0V{PhX$`2G@<{q67~^yiyg3Uxd`@p!H?pg#<DLC%C<692(a=l`$G
-zaOuxOrT-l&eW9hFXz6n-y{n~nw)E{SebsTUy)H3!HMTQecdXN2XdGhfZM^#!r@z{G
-zr122r8`GWsY2yUrVB`8}PXB~)A=Gia+;|++aeP<PZ)H4ds>@en>}>pbic7y2%Fj*4
-z%b@(|%gMg9>!*_)?>Am=9BbUu*xq<sp0i&8HD3MzwGQSQ)8Ig4J=CFb_T41?PHdq2
-zv+!)vFM?;nv!IT14N!Jdp~hhkcrN-brtfU}{~Yb~mqW#UrtuKtkGU@WL*x0zlc3@}
-z0V>X*aRY-_aW+Af|0>*yIB$Vfq*udASOOJi0hC>Ts5slgTJ#$yIQ{2P`oBTx>!ISD
-zW$a*lW4ud$+E{Kp4l2$gq2f$4t{dm#Tm$9*e%OXM&x13t%Y(<lkx+4FL)q;H6~}vH
-z1K#t!>!I||L+NjT(w_kJy}P$@&KMWpG~<t>o&22f0b{;#98}!Bq2g|1d~}qH`wpn`
-zZi0Nep91&9ZW!ze2SUY_31!y~Dz2AD2E6BupN7&u2BlvPr7wbtJKcEe2)7=c0Pjb?
-zJKP8TH^ZI$JnV+N+T^p11;&BKj&Klm9}jc+o`i+SD@|^I$06sNd>CASyobqO4dr|n
-z`9-KWZi7pamzq2qo`u|INFb1n{&5yJjgvZKhVdPgnzyeQABUQ^r<q)9oN4J(q5Rx?
-zl;b(ZeB(H%e){T2_Tj+~;1c*S)O@=es-16zYUd?zKm27w`Q6pH6_lTwj^I2RUInXR
-zHPn14f$~!T<)=TCpHB~WejYR44&`SWJO+-1$HR1(4|jp`(+SGYyMvvdMyP&oI?VaI
-z$9N5tzcFwRcqHr&cZPezc2NETQ2t&S<ovCG@^=ViN@sjO(DmB`P~)f3<ddMr&#@-=
-zgBlmzO#Wto8y7D__4{h5adD~1C&Ckvb4@-3YFu<S`IG)`T<i*2(lX}tbM-scI1;LU
-zU-xzW_aRjOy$O|mEj$Na1<!*Q!K?5y0jmE78+$_8uj}LbZ!J{+-3OIk2Wwz8oDXNi
-zE6Beel%F)?Pg%}>B~<@i4%L54Eqy#Z0eKWGfJeYTk-s+6`I%{)2vzR4LDz2|L-pI+
-zQ0ae$d%-`!bl4B7pV~sT^V;67pKgMZ7en<^vB^h4_0#?)>&t=W@7sr3KST9Xqsb>h
-z_0zE?_k-%EZYF<|;reNR$k5KXp%?2O^Kvnqh@1lt!TyUw7-ys}foiw;a4sBY@;;DI
-zGIlk2?ZHmI6ZRzk4N&9s0!UFA<xulzKdAAV26w{$mk05E2EGJY@-rTQJE6Z8%I@Bt
-ze9wZnLXH3Hq5Pf><!?Nc-C<Dvx<mQ<{=h(B4EhyN?OF&`uaPGAfe({@D4au=U2*{X
-zQjr%x)%Q?iTc~<&+~2jwC&pKy*0Y<T^d(UFCYyegu^*J(6Fr=M1(f{-#*n2CHo3QP
-zKTB^9bzJ&}%BsFE^FNjI7}WT>+T^pK>}nwYc#h4n8&tdeOeVF<+feQN8kC<k{7?CA
-zg~~SpDn2RqC;h8^Tzh{6)sIg@*_A`}(=@2|e<q#pU+^)getHn9pDu&4p9y6*5h|W6
-zsCagSEXf(G_jdhsfwA0}0S_eK;=TBOk6i&Iw2bjk<1@#Y3DwU3?(Xyt8dpKJ(^*jE
-z&Ved-EY$cI2oFNP3)DF402O~*sQ8=qbn)K|75{Q5KPN%?IR+kypM#*r*-zcvI9mxv
-zAlF01I}0k_V~t~=;{Bzo)4yzd%y>Ig+~-4;cOq1Ilc3`6XX#xm{kuI}`ZG}VSq1ln
-zr$hM(LG|-4a6foU7uR3cLe=*QsQT7H_193S`UauO-x;d>&v$qAeG1->U8C_-<2b1P
-z>TPmosCjqKZh^og?9YX2kCTkEq2e0}RnEas<!l92&-ZtA=}$qWuYgLQ169uxpz1jZ
-z%FjTkdhP~Q&(81w_}MNl-WQ?byWix?pyHbXhv0W4Jc{*T02~hwgk#~don73g7!NZZ
-zXw+|rsa|cM`uXdf9N&TJ=SN^ycoW=)>ld@2?DLFi#-BR7^pA{>82=1auk)blSz&Tl
-zI1+gWsQ$YvEfAQ1d?l2898`byGX8T%*RSUpM;mvCqsg~n2aNgmPpEtk!NW;k4K+@#
-zf!;VVeLtvi@<k`dv!KRBCOm@lZB2f^qf1`{$B=%7$$x+ok$3LE`8N6P*`EHQy;ni+
-zx*Ak@SHNB2xu%~D^?XXc@hIb??VbPSa1Zns7%Pms!e02_4$A-5Q2u}1j_XbEV<`PY
-za98w0p!%t|@soB=eif>ppEEuH)z7!Vi?Lq<)!#Kx{T+nz)7|*mwobm?c!hBZRR7L4
-zc>+|w_k-i%E>PDIc7%%iXPh61-}j*OZ$ssO3@YEna2&h<Dy{-J3b~}M>#xaB{W}V(
-ze-DH5n+DbYZ*A?y#S2jBe}NhNyAG<~D~yL3U)jp_a|2XA&oKE&sPRCXc;n;8Hm={_
-zh8iy~z=z>;@FLp(>;T_mkoSk$r$g9*0myu()z+mM;?IOI8{UL0{)EhTVm&84L)?l-
-zwSsUtve*u}C%hb4+zy#@GChwsLu`vo+v+*I8R9m`Y49>+aa-h##IX!n+#2}<_y=V1
-z7s_7`&p;Lf=$``AWro-WISA(<i$7rB1ybJ`;*ZEH;YV!(<FACY#du;1+z&5+!{Ava
-zp9ZHR*TXfi+T^+L8sw14$HN<ur<ptvu0|ehat>7f!BGDDK;@^8Jz4Fq{2YcondRKe
-z&vN6*OrJn6^fXUkEL6R=+bXa_Pq;lyhucEcZyT5f+r#Z(2M7Y~U=t42#A}R=#s*`7
-zG257K3>cem?BzE$8XJrS#%yD{F<@+B{qyo08;uRd0%Nu@-54-7Q4=q}vC-IIEHGvp
-z(~SXR6YHdx-`HquFcuiIjp@dKv59rm%WrHnHW&+x*~WBZz}Uq4>*Y5#8XJrS#%yD{
-zF<@+B{q^!28;uRd0%Nu@-54-7F_66c#ztd<vA~#ZOg9FMO$;b6zp>HSU@S0Z8`F&e
-zV-xGLm*3cEY%mrWvyJJ-fU$}7*voHhG&UFujM>I?W5C$N0_Wv7HX0j@TDPUoHl`Z`
-z#wONlFTb(T*kCL$W*gIu0b>*Ex0m18XlyVR7_*J(#(=Sjb=}KvY&7aPp!5P`wlUop
-zFg9W2<u^7O8;k|UY-74HU~FO?;m>W?7#ocZ#sXuuG2IBfeE&GWJ8lNT@7KK{)5+oY
-z>FRqm$JIdi{kf-RI9Z$V^m(zy?8}`zzK4^;@0+bZ$jJ>_(D|%6*vYxeo!r6n;rExm
-zXL9&`qm#^jO{24apr^|pT<7GYvz#1$zof1gDBke<BoDIq!|#vGu=vC8i|l6p!tW<s
-zaG=Xy&>kmzuCn?xa<ZV$0kuvaexKR`E3e7)_wVoYI!Nd<e7?nF@*jgv&NlfFvk$)?
-z>>l&4hfwv=^%B)5{C=>Z)?eZGbv<wX8@V{5&z{zQ;rDeZmFJTKX_q-Y;d*ixlhuvV
-zr<;5=>)H<6r3c28JNrR<=sH}3w|Nj#?Wy$SV0%g2`_4w*x*<?G*V)e{UG~|tJ#}D&
-z>8G21yy+WQ|MV&5OQiD84(DfGQT`1jPXFBzPG4twtvk{;%yas~Eq|`*hnl{L^-Z6C
-ztn;#O;-pERT9XTCM}1Bm%lE4`=^Wc#{5OntauX+o`rI|b$psCb7}$QClf&=3{Ca|u
-z!|xZr=vbAP9tgjWxpSV=hu^RG!Vo8O`1L-2IoiqL_rKqg>*Pk$k2}H1;rD~yWckw%
-zb@7e2{NeYLuO4as80Y#-!c6gm-~av}`g-rJk*&Qx8{_QL@T<?^mOuPH>opUdKK%ao
-zPUD^2z)7t>2aIxZ`2B@DS$l=wr#N-0>G|HT&-s=={60F}Ur_sp-=8<r@~01X{=XoP
-z;!o%Ms6I<9{-DLrcVJH+H2r<1A87ist$yM6!>zOS48M<kZ_|h0Kex>KH~c>HjZ<8F
-zYj$(xr&)i8-}iXB$>H}0{$Tx`evz|ZY5BwNhrT{M9&G))ZnE<qe*bc=*@xekyr0Dz
-zen0T5lbpRCKG$cW`3qj{<niXO@meQ;XL9)c#5WFi`NQuEonUhK{iP?F9DbkdJ|>6X
-z4|}r36Mo<A^(Kek|M|YnpYZ!skFj{e@BjXCm@7a0zFpmaQvZkFPdwM;HTt5$=lVj8
-z*M>lW_2-+cPnyrcUY<JeK#tQdGyS8iE8cuR)#?9b`m;^{f$5i-emlm!{5P0>NAsU;
-z`f-Ol{lGF8Pu@1pf0`X1o<GXzpR)YxS$9-^wzdC8)2}!EFQ#9;(#5xTw#)y4=?`e{
-z@~5wI`qNFHZsjjA{RSPq`J8^F%ij>zw{!VdbMZ$X?Ke>Ux|seS*-lO~`DOFhX#Uz;
-zymh8evv>>4Uxy->e>>B6wf5EK1AX?f_FearCk95Fze>~Rn!hyjS8V<^TKylh`Ybd1
-zr>#D@T)fifI;+oY)6cT<gC@_j^0RF{Ut;B-ZTe+azAlF8^RSiQGn~J>Yro(xo;tAD
-zj(-Iv_q6gyS-hP)I{VeMqdupbKG*yWG5@1XUSV>!$?uqbfyqCbe!9tNjB{^1_jCSx
-z9pdCQB~C6h{RY$5nSPz=?=-!BL`<Kxrf)L+UUqz4W%b#ATjzh>pPc=C)2}xDDW-3{
-z(&_(U`uj}(vgs=uo&G$VKg&&jk<FjrB~JfW(>I#_3DfK1g+8wq63^BRf#ud7pPT&}
-zv)^d;8?JHoqb;6wrq8u_3T(bzZTcqDuL{@q2A5wyE}`-ot-RfBJZ>=iz1q3<X?(!h
-zXInh0%zmWBvuutVUt4n=R{u4WJNqj+o=OhC&pp@1Pl4%A-rDJ#EPwa#`InXd!a}EC
-z_OtW1(Bxd3zfW_)LH;Wl=lXm~7?RV?{(7@-wDFv;^4c{9M%npZ2QIAay=`Nlr^zEs
-z4x0Q@ozth8Tw-#z$tRh8y2*E%JkaFJ&AyAtBayZKr`hrH7vhuLWaHy-)308x+Hk?h
-z<c1Ya?rn1V)lQyh^0I54Jk$K?VFP_COwPT^$$zME<t^hPt3CrwpKj;hyPLo8`;iZ&
-zzZKs))){@?p?;FX?-yRXz{%nFMX$%L^c!+y&3g=JZ^_H7zf}#%!3O@|vv)YYaW0-;
-z%wPEZ(R*6?oF;mo%L>h(t#@ac9DZN>^;W;|`@f$wxoJn|f6Ne<Ki$q3Pq6X|j(7eS
-zo1D9glee|_!tZ1LPuTuY=kL%i&R+xTjy_wNoc)HA&jhM(_<i<idzk&_PXBMySFUpM
-z-*GGZv=^Mbi}@>f&B=qearzApIC*qfe}|LzF}cy!`*W@SYwY-4Y~`=E^Sdj;?QQ3)
-zb=E#<wtg-Tx2K(-+->#^d%5zqxBdygul#6hFQ?^MM#~?5AAE1~zsA15onUhKeaF@2
-zf7t=fL&iYHNZW?MeYW1LGkLYib4?yM&-KTZCQml`XOrJB`>hUh{{CU|DJHKmxqgt-
-zA8GkFn*Jlxk1+i%rq@0W#kZ}=Pnf*X?4L6Gpy@{qcJ}+4tbJQ9a#!EuIUkFbZ)IFY
-z%k58$m9Jtwjn@C)@L0LO&;DxqIokdX;)#}TuZWeu^y#nOGghDHlb`bWFZ9U=6vyU&
-zu5+w>MQN;j=6<nqQ+}-cI^#Gx{&K!(M$7M)#LB&V^?PvNSpC>teR8K*`37J7?;aDY
-z|C)6!y8IR0W92K4i<K|kAyytUD^^~^Jd5`C3hQaKd_D6tS{~!`KYB*2{s&)w1=3^n
-zkNWKQ@x>qV*?;e|AL+AS>9eo#jpyC=i7o%Hd&J6VKL0a(?SHkeecs+%`LhGz&wJkZ
-zi^#*$WA*L5_K4^g`SgeS^po1g#`mzN4>W%&d~##ISbN>vitevd=EcfS_}b$XUwPa4
-z#^Vzlr=tCx;TwMsc<s>~9(O2ZpWU4BS8x4@$RDT2>X-TA?dltES=F)SZ|xg@i-*PP
-zukzLB@ttG!dVV0fJ`elm|HOh={lUA(%Fp=b|Mc0h`cYM}@|V8(e~EAYU+Zh{T|=??
-z=lRyx?WV`-|KXbt2kjKAA6^zK_w)7t8&hNTpZL~`dwuK0=f3%{hi`l=^tJD&zV`i#
-zuYIe0?Yoa}y<Y2U-%EY%+r#I7y{~=0^0n{DzV^M>*S^KR_Wj=1zJKtw@2$S}4f)zP
-zds=M!4&E_V?&dpwbo0%p3SayF+t<F`d&K(NyD(OMz}LPDeC-?b9S`60weJ*P`*!mk
-z4~P54%e%hz{l(Y5Ykci{fNwm#=xg6yee2gHzV^M&*S_cY+PA^izQcX(+uwIS)TwW5
-z`^_90EB`$!R_@s~R{qd;{15o%zurOLCJ^~t<}2?4UwK3N#M)~=S9JdUDr4oNedT@Z
-zEAKO3c@O!@JKtB{Hs0|q67TW8^3L#;xAiu$@$~T>kJqNh>IeGb`EE$8{xe^DYu{RQ
-z{b&2yyNfTLXMOeW>N{R$`09U`ul~J#^*`5F-U?rN-F)>weMW4&d;98tf;XSCn;Upf
-z?|d&JPnxUz5xJ*#Jd4QhRLANkdGjfvKPo>~|Ef1XBKoJi`4y2Xy!jE4+j;F5k(<2s
-ziO3&%?H7@+_4+F!|LC1>MdW9^_KV2>_U3a$p5u*&h}?ZxZ2aAP<)7h=hlu?)-uR5j
-z1HAr;$dCE_AMNvB;`9Hi&;L<A|D`_vSNQt#R9}BS<Ll4bonz~_Lrtt)@9WPCeEqp!
-zTCDy4-uYRiz8CxYvzM<w-}cQ<J#QO5zgGC<Q+)H`jbmf&&-c#v0?nU~eCx$0gJbQl
-z_sMtp&d=ZX>Cf=VZBB^wSLvJImkf#3kN4@H@x^zO?|kT(+}Qlv_~g;P`nUJ`r@8up
-zdY}Kb-gt}X-}2Sxq^(t6cC$f$pZtJ#yo%^M`}FL&ipf9NH=YW7^8Q=J+FwM;(f$9J
-z=dU@Oz$-re1TTL?|EDgo`B!-HMf8O}`+I!$_xS8j@s&T#XaAi~KG!EN_4%vvl^@9O
-zQJvXuXjOe>O~u&Kn*73f#r^wc1uJW3mX#Kb4b|tBE({GX&g$1Mb5Q=Yg-NWdOH0ZN
-zYig@Pt+3AQR~-r!`wdGf@@E%T&mLM)Ss%!s7n)Zjk{Bu~t}dJ!sw$m@Or*gP6}9EX
-zg*BxW<$Z@0))Y?7?3X_&R9O|O4wct<$rGnd#I$-r=`1Q!R#s6oq@vDqCI1sb3zAeJ
-zQHAqL=NHx{u}@Ux<o0ouHd7a7NvLLWePw7!{rJN2lCn_ogu;2D(d9!c%4<S(HGzDq
-z%!rATh7QjkH!){eeh-&4dLljMHCJ^AS{qKHEu2K-&CZ)$SVeP(imH?t_ElP5T~k<I
-zQ(9OPq8RByieN-l#k{B(a%NW7R23E}p9?fTg#013rDZjx<@vM9Dhe@lb~8gIrR6zA
-zMWO2Ia8jteI5wfSJXBX1Dyj(;53j1Ks7lhzNxG#niFuM<No<~|Q?N{0*T~RIVKlU&
-zDimXA?y5qw%BU^lHh+Gosv4>{@{4BAt*)7yUtCzVpp+EXd~`=)M4DMuT3iyEICBo!
-zC&g$&YPfJxc(UX%7u7n0n&)(8aA<AS{E#<?Ck~Llw7g{Epxp2jpE}-`Vc__2V~39)
-z(0^bmqd}fgW-zO7Dyyu%qnLJ~;+)!=+04+=B5#fkttbw~mD(p~c;3W5BZrQk*lz-3
-zGTxx?sPQ>N<FfV78<msQuYX+nz|rN^p(56#iG9Wo>lde1wmt*<CQR>_nH85Fao3le
-znV#MzTwd)wHF#duw7jzFX=T2~&&sQxH!oCE<*lYubB0DQVJy5%^3sypirVTS^);dD
-zoE(4tNV#4$azZ(oS!&V|wdLMuN|nP!+L|nCjC{3XPEm{g!wudF(}A8}HFGPB!#&ap
-zQ|DLR)CyzyO=%k4BkrJ*Gc<2rxMAtmXoJiw9d>f7Drzc<D$2q}(H7>SC?_~%U@Po~
-z<~4hXOxYCEramVp+yf(XhSt}O%$ppJqP6*bW9rws33u4$<X6Z1+We7fxPhMBPo@mK
-z0Y0p>Bvf6)G)&ZLX2y7JjTxaQFiS8JqRL9B9lNRh7u)|iIl%$rInoxEa3~G_8ef{A
-zuJJbCSENHX&sXBkZOLb579Gtx7Va1(;jjcv;+aKtb1Ji_ZcbumrR5Hq$r3)4^V1s6
-z?n;iGJjXjpi8^DATkdm%nZX66HM6IbR~OC-4Gq?xSe&1)|MI4doj!bQ*$8};<(HMs
-zpLeJ`GniLVTw50MPL)%fgA6OJt}Lu6n(aFhwR9SgS2As)FHhVtx!ERuBsZ(7v-%GU
-z%_^)dtI6ZAS6(uj^Vq7&iZbueKh?^J&u@ynY5j`AZRl@6x3tFUBa2=iPFf~r4jNuw
-zR9IPE>x$!Km^h|pW>rU>2j_5%i#aOKFNtlcNVNy$g$g+%=R3sI%wSPz<?K+EPRiq>
-z_q#}Z(v=y^t>Q~XO^9z+Q!@ut6)uSV^3t;3zPSwV$XVQ$aL7d1vJU%YWo}7_iJLO&
-z{B=t-<mS7JX~xZW7t@HF>n`CL{jX}a#Hang%2iCiW@a%Za!RT~p?Q2ym>3*j6J=O%
-zbLPpG_o`mr@?O>1TiR>N=I!sk{cT?BHh-7Q>^pquu)G|7we&6n(PhOUzL`c}mubz?
-z7Bhvml+&1rv}K$|rc><tJ5ZOlHnrMOGinQXbH@k&Sc>ZIfpvrW_u14K`{pJZ_nYrE
-z(YW7SuL%#{eQF9zS{{KZ&mcn0=M|yimR-fnzQ{z0KK=*$yQ^Cxf;q#3R_hVLss1yG
-zR7d<)yNI1xzbcB@dGsq>B$+kgI`G|PXt)`M$2UW=Y0}E<G5z769#IFIusgmsG<OQC
-zWa3WQ5`Gd*tX~sPqN&t6KXw^w2-nKz>biXMmE?#pudt|D;A%Ci{V2OPFruQ$ySmt%
-zX<Aij4KCdGm6TVuN0*Q1awZq^3-h>i-<+o^R2C|%ZWd!Nf5xcn`lqFZFWk27+ICcg
-z(@JZ~`Tjh)a3((z8or7?f-@0ap^dpf>wOi=udJ$=iLSMGBb?9j(1OURzui#L<@P*|
-z7_nbIvijM#`S@$5`IXZq7RfqKmm0@=e@4Fl_`cLcuTgQ|JacmVx!pB2?;2p-B|yJz
-z_yUB!NX1@^^jk*0#=FaxEoX>aGHlT{d;zKzVR&A3ZK7pcd2O9#q;htpHA%$LJ>kB>
-z>hhv%s=Sm}7oAOfey)Q=UtCOPrb~<d9*MgarYm7dj98oON=gc&$OV#!QGCP^U1Y$f
-zy2|OUYbLE2*UbDer}pN*a^%nLzjEX*93`}hv<gmjc`2b)q*;<!wJ^_T#;yu6$FIca
-z6XOeGv!pt4h__9Ch7fO?{8Yeio8*}9H%oSK_uKiFxHxr7m$>{Hd`%SfH9Ouirh!sg
-z#xzd~%Shv-Fp6rL6jljOdi`~XoBDAEv6oN%>d1OGh+As5GWd<+E~3X7sF27Uic`C5
-z^^xflXQ2Ga)sY}GgBWHe2{Xm1eu4s{E*?(xt9@fA?i*&jeauK|g?-F;YSBJ26vFpW
-zed|KxNbe6Vd|daZN7~fgOHJsITE(?Z_y`^6P(vV}PE431QF<f<cdYe$j9DL3oR|Ca
-zx!&8P4C=m3%Fx28xj&?oRf&8%_Ge36lT`MJDw4`RQ9b<jaeIj}vx*9<YbIB?d6=J7
-zQ&AUxc935;uO?VHBp4hKoV2iPL|xvr>BDDD$=C5L-r=CAZ{p#d3Yq=9M81^dR+Q>~
-zLvYr}KI1~=!T#>Tf61s|a8AkSAU9khSMf=kJ35$GnwMK&-ERuFDF#j*nU7dmpEG7;
-zUTMy_ywaKx$SH!!3i^Z5j)?zNG?{~nL*bhrq2{K^)K#f)vyAXsCAt+x27{%v#30vD
-zv>*v{=8lSQmz=SYwrROt{E>L=^1lcrv%h~I)Bv`H%nywomN}rZ`EE?OeM-l;VdE~%
-z%o!UD&YLqX7#>EmkjrO{qiw4DF<$y)P0f!UJdBwMu8qbseriU<5A;-HDKp59sKWB%
-zQDcXV$js7qweTj7%wT2J+;D`W`ZKOeYGw!fmX^<|U`Wp$qhZYj*V6f+V)~DyvUy{E
-zqZl)}`=vc$34-jyejBzf#m8A)SXN_k_Msw*?>7o>fLe|HIQ2~EaR1C_J~vPAP3;pq
-zB4%clmRHs`S8aH>3;I{o){s6TSRXwMYz-MXa#Ksw(e-yK%8tyxV`<dvcPh<0L-=jV
-zihOzXpY}yx5X}k}Rm`homPD?zb8RVSWZumDnxa`nvvRy6TePp(Q^L*j6??k4dA@YB
-zImNloudC=5b(rX+B<i|n>mtmX)|dUO#hHC)aY;@)@g~li#V*>c!s@!bQk|TXjj&FO
-zJ001KC8tl46P*A54p>=<Bi)R;C-M0I;lVm{i`PAg$IRdN#J1j@iv$x_@Ap2jO&!he
-zd19M7k}OWNVo$Mu!xP)oq5OY1SCR~-%~&U#$H<{Fa`D2q-7fapXZT7+N~6d%1@E#(
-zYFqD$g|2a=Gz(wwNNE(=zMRrbzH})hrBS2~?z%{7W3Ljr$CKH2rf&D?P#4*;n79dB
-zVHyd-Ysl8*Xl~9{7>66R6{eA<ZG~~Tfm>l3siAA;q*?MR2YOE(aYJ(;>qKEuX-z#}
-zK)9VznqM>GST%9pyz1eZl@+D+b#>lm&zih>li2e)V0f9g_vz?*gq$IhYPb;M*+&L{
-z<kDW>ipo%Ve!tpk_E%>1EsT1)0y%2Sscl9d9<`4#KW_VDUCr2>(ZSKpyVZ3G##eG*
-zeczipz`p!t_V>OH@m+H~^{gr_EbFW9csV&O-h&y`yzi2o4sNS!Nz87_*!}ftm$+DB
-z?>Xk?<P7htuYG-WC)xJm9=%YzX!AGKb5#3Qv+vW|w_mv)NAb6EPIQ~r#W!lsaJ&4P
-zS8`&0&DiKp@zrr*&WV#I<yQscYwB9Pzq>4u*{`xXR9jpziAw|(^JshT`+sIX_Z75x
-zCUdtb(#Ru&Q@w`Zf5H5`60S+a#NmJZM9rNu))$_#hJ&lFpEt9D2Lsdf>=F*sBV#k>
-zs%7&Hs;FBQ+;LByJK?R6lsOXL7fG2V(!JI-e(QR#S|g)sm101rM;^pz*^hg6X_K;~
-zE;_Oxc}wmlM6k&@QwI`WoHrqY)@NzCXdNIovFO%iNnLcL5#8}%6GDj3$|0e&I;+pn
-z+UgoMgm`=Ac`l5{1ZzsUY*0Nd*E?!V%bRR}M$che;Byk}@NoI+YbJQvOC6?pi1$D;
-z`+%xzD=RCiYO1|!$6gATxAkl=&*t%Do|nS;Z*)rYgKy(vPak}@YFmEr&6hvYOx^%b
-z^b}jt9Ij7Vlco8DDA9vtKK~lF-u{>b&&c^q-D!x<7F+4Jm8Ox?n^yYOSWjviKML%@
-zH?KA=J^1DsC2-+?@GY60d+^QIa4BY8;s@V0DZg(_MLjUKNp8aH*XHC`$Nbv-k!rYs
-zp4?B|9e;c9%~##Hd-f^K2;FX~N1G)W3GTr+udIYxJ^1E}WK;Uzzolo>eQDOY#@l>f
-zkq+HFUx_=nC7=H7OW{Y=e9h~bQR{I3r80}^<|s1`67vhoN;%gKMeS!~Kd5(XC<&E^
-zs!(xusy(7!TC;ihdGltCyT^vDHbR;=r{thgsasm%uTu5(BXo3$yZD;fC+3KiSDMT&
-zD{Q9)KWr8`d5tu>cd!{atF)X-E)20Fd06;iLgzYB9ybeHl_`7-i5TYuhbAi_yw0@R
-zSYxnN#_l+xgISDuW>61-+u(?+uXn7}l=0_@45-9;;=-bw$msItai_{rWu#gY>PEWk
-zJad>|T~l0EIy1ktdSV{G7^0t8$f+5}R^poaA*Gr5Ll*FF$by>018I=HL3+QO5p(M>
-ziS<D5<}5peTV*^8L;Z9?tBmDYzk*VqH$UnYX0kYnu=HFfvW~k9Fi7V5qFBu?4EGeJ
-zu1z%G9Ob@cl7cb^Ma}HQ8w<Sc7T(S8R`|;b`u)XUMcpKanVC_)6cfI`Kd{d3Mfa`K
-zR*=kkwmD?#_V|E#?s;i#3PBvy{Ien99U+mXkJ=i--TmCif5}>^e^kv_%<^)QMnlP&
-z^}2UotiOt5Z;3~Bi`!M8odwCt>=#?+sBn?N@CJwB1HyOZONU4AZwOI*S!is`UV+$>
-zy*)6A*WTavc16M%e($>!34`#~4)3vtm>C|uBOqzl4bm?c)x@n1t;(AjtgX~>_}Aqg
-zSXy4{3XWboVupK?;g*%vd`NHJKBL2S+^8GTJnH6n+m4d%nn_krW^+N&=MK%~grA?<
-z%wqnB_fZm#r~l19pv0m4-rIc=Mv>Jw*_mSVP>5gX=DLNhIK=L);?Ve*B`#)^YrEfA
-zZ@X5)!hg?Oj|l_#UGF$1jG&KgE*swb1SIEHy7+HD6O|dWt#6cffN}dVXK`ekJ4;8l
-z=oQWOM~zC}=zTKXcD95i#-A!|i6W^4k1yMkS&4QAMx8W_w*6l^aTroNYgVYrSHYao
-zy4bFfMI}pYd5bz9i@n6ITNp9tW@KH!-6C~HUS;*9()@*0Wy3RrTCus;!uJx+-|Fki
-z%_RO?(ZJ~Q0r%s5nZdcudt+ly`dm5HnFI0*tE+X*v7&rLVQCq^oRy#7cUEaxsBc+m
-zd8ps4vci(;>V6YKT$h|!%@;}i++LBpTFEZRyqr;awblKnxLtQ!#Ai-cyvz8y_KCSd
-z8C}ibi10Q&@79p*b9Hxfw8xc`y*`D7#r(-`S9Vakjlq+-$3;@vJgIqVcx3$GjXn)j
-zA5UZ;=NxUl?Efvr%sw<2KVKLgS$5E3`h-u(5)7<hA4XQ(7F;)~a>gVrDdy7buWt%h
-z?O>T&fV)ey294nx;i_@$e`<-`k^Dcel#P!G7m`8VNqQdhEWB_J3~x;CTdY&`sHWJo
-z6Z6Qn+f?PZVjn`nxHGfD7X;$ZwW3a!lhnHT%l5C{l9(_kyOgkHo$B((mi5?tDSXSi
-zwQD0=)@k$Q^)2gGvC^tr)~R>VY0J9I8kp)S<(T!PubwH;_eSP>)c5_|`kWETCV%E2
-zd2c?Ek3TF0`*51)J&%#hXWoLyVba^GSzni5lUFurVK{{F9tv;sgl0|Ta-DC#Zq$uw
-zb~98@)iq5mOy2L8<oB6XQI$6{XL#JhR{3@8a<D68+9u&IgG*tNpFaAH%81$D`x}+P
-zWxz;1Vt$q+a<N2>l%R>|5-#kwwvD#1@0hmPqP`<L6k^<Fa;Dn6ACOyAQJXLL5sSK%
-z`#$``Cu&Q>Z&pU)Z5lDf#rAOgog1%%#{|d3>=)8RNd3ca!TyDnY+5SjXYT6js)POA
-z?d~C&nNjz;!&55$H1AhDMW&Eiv9a4Xg>{6V+TUGS@y;8)ALVO#D^aYQ_&rLS@3N(b
-zo0G0%Y%@z4|H7O(V{HSHzZT8gwK!kpx3(icR_I+uW(QmNmkQ%DM*j|D>oZ1f#6&$}
-z-1_Xk`&*lsF>+6$^%)}p$2@M_dIy9Y{d93l8RMs8OF8n!RuAuA&9~Ijy86t_yxN(0
-zp%ZKQ(iA#+VP2{Gj#-8Uztxr8B5po<XVUzddem)-#Hak3eRM~o`L|{GauB|@p4i^I
-zwW8meX@#ZzDou-)Sy_pHv&Nq>_4<|B$E{!E_<ftI!ZPmA<oOQ&kwZlEQ8|;gwjZPn
-z<>aJz?!11i&tKH>V9Pj+S^QHxg%ixQ$7bE{#_RShKP}r=v!5eee>Y%91*gXRL=uO6
-zU;K%mNRE0qXN#4i)2`p6J}o?Kv>El`zIxP?m2T@*^V6Wd#kHjaL0-xDVX;{fj?8$o
-z!~-tgE^Z@byh*B?wvmmKBmIH8o4?Upef$=w9Y>a9??!%d|1BA&E+%|uKDqy-7A-sG
-zFf=u_<AfHe9Y^YGdxre&+T8L<EaMM6^*KZ9it;8W{`OTnYiR5c<Tw}oL-^jQ6%KeH
-zGTJi-n%G~&=ZrAkRl*4na}Jx}2T5~A>cn-^OY?nk{OyW~`R@4J6_flc(iUvAm?KT1
-z-QZiWEMEsjA1dR2VfojOf|&04tqO_hoZqI9n6622(A?rZ^m~=n!pXoEtyc>t1Y5AI
-zl-(Bj6_zbnV&c=csG<`5l<ekBFaHSnt;$N&YrjodkrS`j1wFwp1&4oml;1%e&htdk
-zzlF*zMBjlc<}D<Nj*(HPa=&xQzU4UX5^93qhE6nUTCAb_P2%Qb%Wqgt%%c38l@oVT
-z?M{&roVB#rG?7u)!Xbo#wmBo~H}D>5g{Vgs?Fqc7pKj7E%AAt$BX;?9dc-dF)XvvP
-zIrApCOI*L^Y%*tLeNo)`Z1hQ}f8mPyj+-cN<P_UI+cG@feZ<6_uje$|M4v9((?3HK
-z<o9;#dXK9l(CXVsGF|fxJKmBL?>GFtCXufB_F2-L`r;DF*~0afer4`T%TRlaHj^!D
-zQEw9Qo?Fft!gICkuCwmRThOn%rm(8UUJ<e&Z+>1$w0c^MdRpGp7<GKh_M55Qvd$Y1
-zJFw58xu|$!_VQJR*c4G-63!65Eftk5=?$rvRXX*rmiWF|`4__0|KdxWqu7;hGaTvu
-zQHn|NE9$r9yd^sNM@`sGi_N=T(1*P>4C}g)agSE(_kO%q&dbXj#M>18ufxg9s}5%N
-ziFsYl5FU(<<jTs-pXpw)=(gI})yK>MwKcN_>OFc>*c9YVg#o42Ie9}zkIu^*QmL)(
-z?0FBni43~Pks)ThvAT?nTj7$OLNpsEeN&=)Ss_11M%9xVP0vNkWv}oac25XzO7(>1
-zy|JDYy#>Qdi0poKdfR5N%MNkZt2gIY2q)(xcKQ46e{TLQkR;*!-dmwtis$#-H`!7w
-zzv~vtm|z&+(R=aqJb*V?WA=o3DbZ$bZ-keeV9$h?&i=6QW<^g<v0suGdHPET@7(m#
-zqwY_{q(|M@j!6%nS$LV<iG=qjTZh6)ee(Gd-Yn?Pq|1Q!5?kJAJ2dtc#3^#bzH@ey
-zvPRy_x=Gn$U+TI^S;OyQ+oVj9^>dT5v7#ojXAGto9okLn^;FaV^t!uQ;U6E(3jY9U
-zRzyE+*E|aJ$X8hK{tS<aV&2GDRZ*Wmv!X6koL^B{$n8mPhLl#<=#8=b3`Zt|!Nw2o
-WUeJ4RTV)%5crc|gjl&Sm4E#U0v=a#c
+literal 174600
+zcmeFa4R~%@T_2h=f<&idg12f!Em5a6qf$eKHWbnK-~`^&=4dP&jKFxp#~Cuh%*5eD
+zLfc62@V43PZkub(W1e2nJokde>!s$ZuTMY&?}3pM!H-y5j906{iX;X#dbu<zdhYLI
+zt-bfV-<{+P45Lq<IrC)Jde{1||JVAjwf^gK|LR}-(O*BQukYMv_2GZ``*Qp>`tiSE
+z{Ndjh<8PChC;U79ahB@qn`RmO+Y7&evyXqbGZFtTU%q-}{;K2t{lf977Z$%`?C1V<
+zf$s@OZ2Z)@zP-;u<OzL?5r*OA%P)WJYfA~2FW-Ish3AWe$j4BT)K?b6REo^YmtXm^
+zt1m16?#9;%d@Y57!>x0|*En}u-`^{W<+00`U;DcI?!EfV%U54Nd*z`k_g=o-EpPLC
+zjp%1WiS>VTPWm6c?KbH=M-(ELFTdioS0B3Xfmh|fyYcnC!TA2qkU#xz&p~CyzuSta
+zV!-#{1FtPAq^iG-fNw068-(E0-!b@Oy;lGA;_K#bKj4deG=VRuvWiN-gZ?hx|KKZU
+zUiR7<)c3^1i!K(Re;Du$hNOQME2aSHie0|^;LE@36_@Y3|7EYba^C~@K3J9aF9N<`
+z#(gjD#TQ8lFXg>|_GPcQdU@`F*WLHPE5YC0WrF>SmTvL$ojMcrH~Lw(_5GleqACKu
+zD>IkxeduNPUvXyDUY35q_@=(d`TPIT_2FM?XEQO*@E_riw(nARAodje_4Sb`(|4Y9
+zTi;jX$1MK0`UbbtNdn;CSA@SmMmPurPcaf^-SWSu0dg3BEc&$9s4YD2!MO*}$nJaa
+z0jA+^1b^h`X_EVO4?gtjzAhMK2`<VJ@O<-w4_(R2m+)V{`(+QIDhd=|AIg)?X>d=!
+zML6m-@?FOF0yWIZhaP;zmDj#DG|?LQFMsoc54>XTp@*(K@QT+9&u}+iFL?cHuU@$y
+zY5Z4H-r_mCmXGJo-S?WS_dRg=-q$?%ve>d~@O<mbUwh@D?+F!AoBv%`UUBul@452L
+zfscy*sQ*IA6@Du9*#lcc@9z6vJNvS$udw;X{2n~_zx=)j&^DM~V>hJp0!Vcqsz4l_
+zfae8QPy_c}wf-x1H8lx=Ps0DaZ@F?+7J9n8kmc3qAA0$HS06fAzZbsspWhd&C$Hy<
+zygAHC{5<sf*{cs$@Qi}D3Z97vU-7cnoS(ZobLD}n_q`%EKEOr1B|Clr2dr;>;K2v3
+zykKs2_Q8k5BjE}?u@AKZYRZ2zJH)H^z5Kq{K*5tQd&R3+6PKFFNA_9dp7#wr6+I+>
+zH?Mtc@ICB~p595`+e|*B{PlBlw;kTTNq(Bi`0-)?(>n_Ln(6p)^V-9MM9@(A^DlY<
+zP>dpDbRxYpGLhah+)VEonn>pcCz5B}*-Tz~Xa5BLhhHzebEuizedn-90L$o0&VT1U
+z@4NTje>m{eH<2sj`}XrMI)CZ>3t!ND<Ht6kz=<TA`RkiECz94Qf@bo;X7bi1Vi%GR
+zO(gAx(%ORxw)z=>k!I2wb#w&LK1YWU9dZ<Gw2uEuu!D#mF?wTshb$o64q+#Rn<3l?
+z;d%(yLbw{j<q$4~aM59F{^re_Av#+`XF_z~+dBhywI=ZkK?A|lJLi*!5${91d84%p
+zmRTAp9YhhVQHbn0OtdD`#&I)kH2mXQXP|j)@2Gj#!_8z5!fishiR7csOs+SRtRu-$
+zCTVRuT3?i~I|N9^ce*j`78v%<!mw`)+Y!S=no-{qX{dqB)f4JYH93*Kbs92Gq${lX
+zX1c;^yO7+NNVbNRAl^qD?d3gH<zGlX3iw3;T}=LJB6-IcViU;%?08|bnapiWBy;P{
+z<es&O<et@u<kIp)a&c)Q8DDHBE37cc&dP$0SW!XGTMf}{)Bc*$<)mW22IwipRFOb2
+zRVqYTnrU0IsL*U)Xx@cb?I_gD3&DP!G*%?Nx0$vmPBS67B_Vw#ji8xr5n4P>ByV3v
+z&V_5AM8kReDxw3e2jD7#z8Flm$niufs36sfgh(wx+H!@h42gkkm_cefNqbGT{RM$4
+zL84~VhSD}$l^ID}5;M&tW7-}Q!&@}R3+QOl7VB>!Sy@)Xuc4NQm5{9>;bQXZ6Ukc_
+z75gA!ONarMO#=Nvzk=2gF(%ou5H|*I?ljYkIGU-b1QKW&V^9CYyV#Z8+=11R9so%N
+zfL3E`N59$<JzXJ>FjESPZfDPA_8FkBY$hLWCa>>rCeMQ2#X^=5<YKaIU7&Y_>eo>?
+z)WQa$1FZq}W$8OiNel`+D9h=|jb^en4RG|s&7?h}*j7gjw6_tMLb^4?q;y4~X=b?h
+z*WhbysO-vSUKXm)wv_5hHO8bhDOxL23f#pcE9*ruayFK8)<7)sqSUm_B(#=hDQ8q%
+zwwVNGMFCb;0&r5hoMe$CdL&?#wL3ziF6-uGKk9B#3GJm4!hI+08gvhVL2Z0(TZb&q
+z>9gi=K9|$&Bea&lKx-X%p8kvM5r{Ww%^SUb!M^z`yR!R|^DjMr&-w2>fBByGfw@(n
+z#GsiybLn;G`rh?aSl>Hog6B8C0{<7{f!hm1-7w-21RQBwqliTDnOKgaB6dssma`u-
+zjgUXd)2)<)KLBHu@f>Yt7=7-3Gkp>UlB4Fe<Gz8nT>r%Nb95-?J~ucN!&Dl90Fk`E
+zdHt`4oB!i?nybxoH{h0FAo@Viz{UM0y_B71@?<$AoqO@G%YRTCO`ixY_mP&U+}TVu
+zT!xO!xQKSUncN{r@DezIYjbbeA2I*n3fz(Z>-*ohbbaX}`hxv)S8qS;d-M3suf6T+
+zQx3lg{2w(pVR8KTP0cUAAu@+wmCN-`XE6_S$M=Fr3n6mtVJLy(^vEOqK@Y|#eB>m(
+zgumxv7#}}=x4O5<Q3yOYAVJbOWG?K>%*XfPYytUl@b`f4Z&aSa=A&3Y=ix8X1093d
+zWAH%Xh2Ap)4|EtFD7?@GbjIIs=R|V#&VIV0`1R5|hv<qz33uN);ySqY@EBZCw%lI*
+z6Mytan;1zk{tUs&CzAKU5gkPALh>tcL}$<<E+oGJmqXn`(q`wwrpf@Ep;7k(7|~Hg
+zcbqzc=)R+1CwODyLx^^qI*8~dqkmK0DICygm@V7Lsg5e#(j$n6K*QyY)+T<b)LpG*
+zM5Fg-ugM*#yf}ARCpfQYq1h6}@9{vFr5|Bfb+iFhtsxp}wD5vcC2QEu*6RS|CTk>+
+zceX)%$#}_OjSc}T1s=pU0aClhX{caTH~dzb2F5y8>V@PN;C3DfSd1P!+T*ZZNIn9<
+zNofgvOqj38TqctHJB7o#unwnn4NfZ@)_dTvUV_7VaS<-cJgNx(qaD_a4lB^G-a;3%
+zH7K^);x1`5_zUi)0_s@fqTI?6rPX<{DwGD-w>4!H(>aP!#ps!i8AZc96+Ug68HMSl
+zEeZ_qlA~MrnKR5wqo0|3w-_)*IBk<~5YD{788Y2r(;X?K51u!D&RM~b%X!AKEkX+q
+zT((6d1($6J(Sg>h?KrbCL7CMK$C*%3t+UDrewth#sCANwvZQ{+NNrFtPwA2s`mYg%
+zT6b#aCTWccZl#f<7|Kx$8^sa%PF9W!F4`N+Nw?M!Tu3^Qay1l6<y>D(uA|QyQSL7y
+zHi}rqtxfGc+rhId7nLiHQgf7UHHkTGTg29mdD$&^$qW#Dz1EVz#Too*sT|W!m)d4v
+ze|jSMoQW_ZWNjhMRtPnbTsIqbsi!D{CpOcF4z%{<Qn!RRZTAr&JbKZT2ZcsDf?udK
+z7DY9zi?p5M)B}H3IJq!^{ZE<%n$HoUR5Su)^od{!f*_$R%yk6O-chi%?O<6X+N%g+
+z74L|n6#<~z5S*QLS`~k$LK5LiNwlNX14q&y^DSX}UT9m32<*&KR-j`2M$jQA(RN}|
+zzmo<_NgGaDRv_y!LTj{r<n&_%P9K$~HKU7Ihn+N1h~3(UWb&GKC2?y{lD70K&Gf6s
+zYi7HX*ZePD)9p3?GmIsoC9iqIsMd|RqhM<jL1c$<48EHMJ6+j-%QQs+qBmVq*1@kx
+zsTqx(vw}=wCoPJ7@CoIq_EG1yg<$&`jTPXlfKvsmA)=a75)6t76?{JmeDV(;U(fp#
+z*7NKeam0lOG>ITC;te7WA8H@k4c-v@HvqAJL$HRRdCO~gJE+)hPimJ{&GkR5Q#jh=
+zUT7JRqx`<iqFBrO8(xXS9EhuNbDMB#HsI92x#4QuB{(-1;oOWbHIqw=VB5}3YZjV}
+z&AUOZMPG!XO)^0a%#>nse$ac<6^ezXU1&xCEHs-J(g=bz5LQ-s?GCPzlL{|JOIM3|
+zNp@J#ZOOI>Epiw!mXXu74EK|t(lQ+V81OpEAYX=CS5-&%h#*l&_tj@F!_ktumf=>F
+zP+EptLxPv#mK5VM+%jTVhNDq)8l)gNHCmK|C3Y>tkqWw-5h<y(42N-#^w<+A2&<WK
+z{f)(7oRTu}8XMN@iA4UwUNdR-H<Nz2Z+%otmK`Clvi`OK98^CV#wKYbD;;7@-oA}s
+zpmo6`d0<cwsTaocRh}6DMzt~ygPUcLZ0(Shq`iy409v=3QYP2!rVZ9H*me$<uiFVU
+zRmYCijv68X?X51~rCVJLc6*{HEar{o?2aK8c~B}AYn9n*lyfLeSmsMtngmF*$r6B*
+z<Qqn8mQ(tONhL;O(vonsmrJ<zowTb!J)1p`F*7l&;1RFmZ2+AH#ChUP!r&Q}^Rh)I
+z_IM<#ASI8a^NMbd<kejs$&NYQHsWCfTE`nfB#OzzavX-V59H;f7=O$(LjI!XQBsQ5
+z@dln6_Xmf$`1NS5KRuS~HB(-%>4%!VUekw|*K1}Wxz}qfcUv`>XqFe&YmNaD)@wSB
+zj=*Sk9feNZv7}nBp=kk@>ox0){!Ojde9DV7YtRh*kwvMhyj!SdVGqM**=Rt>We90&
+zE$ugk%@uBtXn&;#Kr1cNAmRD(8Z}i~+QEh&m4~jM>cmRRCILdf><Kt}AXXGsT3D%A
+zX<>DErDadRa)tIC?Qw;?($bKO`;g*DaN3B(O3QZPkSuI`O51~d;;Ajx!WMM0qCQLO
+z0fUm9>j6WG^*S8s)~HdqP^&38Z_o+FaE@ZcD0&=}G&2g*O~YbO{W8mxh($kwK1S?;
+zL>Lo&0E8s-f^8hr9p=cJtdx8YZ!pR~aurk18A5k2v&<qXI7ah`4z!l-7`b6-XACoT
+zLPcigRZU^^)u05*O(seweTtD<zhZUEEVL`w4($r{KB{14OaWcNLB&)vhBzYM-ODVp
+zRy!_UW?2e_(v?NTyv#C;*oB14EF*}Wu*@Rz9%Q3(on(&Etp+i}zh!{MV)L?FXv8{*
+zqp*A_G#cp|OUDM^W?+A5BI&=C^_5BTZkK6Fl(oMImuUvS23miu)fQ7pSB?k)*G@r3
+zu~BKn0N+lfu|~&VNn9WC#CB^<+_l#gWXlR#s|a!ql_<S{^d4rafhVpfph}JqAmbRp
+zK<nSwjZ;?IW)=u;D%kRDStkIHxC9c>o;qT4MF44L@Z1Y?s*ptZQj!;BjwM;XAS2Pb
+z*Knv1)F9Opu?#wCsFc*_r2bOUnv)h4XaUWhkM-?c1@F;2T^#}lmBbsQQd2GV2HIMC
+zk>|su2AI?~gS4ezX{KL2o(~(RJfHW!xZCsj4_%(ms!=T)@w$R7E-*y78LzCxl(YYq
+zX^H|wk4WmVvf^3{n}XJ2BsRuDfQPjh8#*=wC@)U8NbJ@k0=a@qhy;~nOaus%(D{^6
+z{REU=+5gM5m&pTH_Q%fnEgGfsUFR?1Ak{Id40WK%<c;woE=9ma5vV+d@g2H%fXHXC
+zXvQ8|TK(+l?ErA%hiK2Z>XSx&rSU_QlJQj+#9Y3nlt$zGG1b5Shz{mNvM+}8zlrqz
+z<)%3D^dHlzxkW(jAlwxM7!;Az$92++$c~LzBS66Ojxt+}qiIMaEv-r-3{y-G8z^a`
+z|K?60ky!`S3}?H|Y;F^M$uOet8kR~|#t;v{ErF!kQ)s5pw+``iGwX9b=ZJ8sC@Cy(
+zbP8%sQ(FVI$pWsWWSmi8t|&|wnL-HRm;}d2BBeUS6j^Xmd$v?&UchsU0fZH`u-r`N
+zSaDDT=0nHl@1Zp<LR{IOAiM1A{0m`W9qd4Z*?!_nd}JjU7z}NXg%R#Dw83p?g$!vr
+zH8*hAIQFs1Zl?waTiu5Gvy-fD6S;ZO)Rc=FPO@#6<_ehxQWzqldq}m+UH&VRy;E3>
+zwkH6v;?a2b>k!e;rCV_%bl84R7LXDRS7v?8tZc3Wo%I2e%xNO|aHt2bcBEe4P({;F
+zL*|y0oVJT3VH^=dTz?o<j1tQtlRtxL4=Zh918i&tJef+QD*{hj7U<#{mfhByVW}x@
+z!7Z$*4949C@C5IziReJ<yEFu^Sj}3j!6_$d4;`Ep-lmRjPU2W-TM9`7aIB9(Fxmjf
+zMDi!0;pG@~=*eTQa3$FyF()fa3fSf^v2W=Iisgs`J%gaq?m?d=;HoL`f>Y67kbF0L
+zVg@46yexbA4#t7p!kINpd61a*7us<EqIE*5gV|6ltTnF86L>N>4yv^#^RxC0(q#iY
+z?h@)Jc-(!EZBkHMgo>FRCSe7J!8uG_bUfCXLOf-}lXZxdC$pL{VnPMPThl`9P1AH`
+zR=>1&7Xh5qrYteZTJ6&Jk<n}`2wH;jWRa=5&`{WiUU|G~m9W^wcM<(cGyTf09PxCO
+zPFB(E(8Y`bN(1W{B9RX!qOmQPf5&(YWfqNteTn$t8_(|VM%~}Jskxm#g8r`5VX^hY
+zVvLBLM!ym?j~#UMgz<J-ieM2p^V)t!?cV*&2;i&zjI!fMN=sue5H%*AFi**oWLT3T
+z%YJ4`G4?YJ#n{idcDnl+l}L3a7A?wbpViOI0AuK9W)U4|9bo7{zd%vVUp$$)vY#7(
+z_}ifkWbJtX_OvMF$?$gtwMD2XZXe>P3FV|Kdjv>J{d>CQBz0%84B0^$*I8>2zwDMv
+zA(+A8cL3EnV)@`l#2gm1Q=ei@eTubg=9D^&q%w0hq)4?R427BVcg(Ay%%aiEOT-V~
+zSa%<QXPq#fFS1)tGASdmGBA}B-7U506RaI0`VL2VgxewPF!ZRu9NbI^a6@}K%DhWf
+z5%$ioUp5BenSm%Z%xIKP#4*_-E2;T&Wnof|`S!lj)p{hVhkI775p<2_Oumrpq1Z8s
+zoeIDj?g7wx7AqaASot82AqigU#qH*`KkplOQy;u{7`^qV(FF5kiSMxmhA<<oj(3b+
+zHav?Yjs(q&ht$>8%9afhk5+HZOISAB#hibvlPR@bBnjmzQ+2F(O))mxCB@immlcES
+zm&~mOBJPgU6@jOo2H?1nN8D$sc5?S%QDxvBtOHMIwi}2JwEi*fJwkrhg_>&KT(;a?
+z;1}2vz~RNKI2!059?uSMJ8Yts_sAW34lx<d9?3A!GM=@)@RdMm5FHN+dMxh&9)7`L
+zFd(0cg2e1#(4Vm4d0<O{T&ln=s)@qDxfl$-z}B>CdTYe6L_lW?zoN#R<GUwG@aE;S
+z2bORI$%^aVDjWlfu*lIMZXeBpHYf3Gp!IUCk9i?4&6<M9yaeGD%n~+?u$D-@R1hUN
+zNc)((>X3X`yD^GvQgXDW7=)=sveic_xHDiG`|&Ht7;{cYf>8}e;2<>TI)g-)6%(hj
+zm!mxO$wPuF&SatHm6Qr6YI>mcZ5(!UE;qbb61d#NugIl^3cHL^46dz2fK?YgAqirv
+zmw;!;7`!@_SuxeDOfE1|P6`}!Oee6oT|ydiPDla=J2`Ns8J}6tWQI`;HX(4fF9vm%
+zlr<c#HMEzJ93aDS#TIRi{W{t5nSsOa#R4t4{j~5K@r~<P(x~G9doaTe$=<k*%xbQB
+zM=2@WV^AIgH^i)twP*}n&NULwdEvBe&bX7JVwPAmEo;CxKW<z{Mumri*E1=eNNml5
+zipVXBpRP5L6C2k&V5NGNj!ZBP>mMueSY)48kvX;+F~rr4>!jCRkq18o(dy2RV}ga=
+zo+sRKNP0FdTgHogmGkD}y?1^;_?hwtV1=9D8)HAaR|KO7-ml??!#{^;jWu0|WWqcP
+z!+g!Ul2@Z>aj_n@5r;ACD7Yn`!6i%1f`)q4{)t2VZ@Qn}C6z>5_ZUMc8%)cV97eFN
+zp?(GcrJ;TnKf8u{=A%V3-Ag|6h*bnDk~GvW6IMh0s$v}K7Zu}BFO$L?sXWxHM7kpI
+z&{)qL>eqlV4E5`X;)avuKO!YN&fuHX5U*cN!u-N%gm7rL+b;-<H{mLsrnbe!hI0dN
+zdbXAty34dl0CbKKXpN!PmuMol+m~Pp)Y5Q3E9>zkm}f<IISr@#5}^PGy?)}(GzaLJ
+zh$v5k-k_kiN;8Ex17}X8KSU_3;wUIz4ulNDU><oR4AMvHq-X%~LXl`)pwsCk%q+M=
+zJ}8@fAfB*UYJHP=W?2<_vr?9>FMjyklIE|vKm2*&{;&?TAKtDmwGSl^(dCD$Sm7d@
+zkG%UXgeC6o99g-=C`SYHENju}O9)&HX2&i!cICQh3Jo12@$e<V8Utj_8j+V-@)6=l
+zy|)W<4BI5Nd<-k+atzaN%;Q+7Jcg~Kltky~7HN0HxF(k@ieI{*n0)A_+K2|iL~Z2Y
+zH!!01-bZ@$&SQwBQh$#<!{KD%<IQa080{9`yB+6r;o}KXI?p<uyM1#Qshsj0{)_bD
+z$5qSE+Ab$Qo5^UbeM%mU(04K!orII08<X#7-sqr4VZ*=(RmST|_v$=ql|SugECG3(
+z>?NKac(WD``7X4XY<-*>u55MS_a2DmE72!RRROjcz&1j-&d_Ho*ebDHz04(Rj8^nN
+zim_|bzZwok9k6|dc`r>U+JMYS%fut()ob0Ojy4Qb9e>7Zi#Lkm&C`l=rD&1>xIEU&
+z#8iQ0`ZO$>uJ#t6EsD>dR-8<z*`l(0v9KivO)Q^=MLWj5#n+1BY<4F)2V`P{0L3jl
+zdlagUPJw0nG%Olv0uy1?NT!H`EBh#y+6GhI)j+q3GXZ_DgdkqOqbF1}dsZ;F>kTig
+z?q2F(NdYHi$2Uw+j1CFv;<`qzf$Ux^HKZ*XKJQqzE@`S1b`rcq$QjgKP9}$(Ul9e9
+z`LqnC!z5hUh*KK+&Rvygo2W1E<HRk*Q#a{r{E0Uca0v)_f@%si0sjt=#Cl^Ky}Hy5
+zdD51&9nUHIgaPg*Nl1-u?)3LceE6mn<Y4a`@p=f*wS|}@9(_e5CP~FeB6_cG0KGcu
+zeh@gg3q2n^2J{sjK%g>o3*+GPy_|6@9t!OR*N?h+C;PqTz)!-)bZ~KCxwC$5ptW!3
+zNIm;aRHn|6g}h&JUZ|2?>XTLSeMn9-)@SHq2U<g}CEBj!82H)aYHi7`tF^^RCeKG>
+z>&3OTqhMuHqGeMEf?kT2h1yz;bWr__qqde9sJ50B(=-^~N5^;@La0^XuG+F}x=4rG
+zB5<sSO&0V8sF)-keb6f=S*o@hcxxS`yK3uSLFqwNR6n&BRJ90DA*oRn^Lh+>U4l?m
+zj_E8K1e~?1=1Z!YiMXMvJPw46L!>DNQq{C#esdsMS+lC9ttu`f)v0P#deI{UQ3+1c
+zBMdP~Jo;QyOtMt%Suvr@QC+H<gb4*zc_<!eeU7ba5+zPj74v#jwUn#Mv20lhmoT-s
+z7*`RsE+DK>(paPbRE$GOBMhXZQN?_nKGBgXpwV(;oqFc2o<#&va3{6PN#YBu03|3(
+z;)i2WZLyWrbNGzz27h>GZzpg#Sb?GY*H7-_Zu#v4x99KcY@DNW^(HzH+CM+*x1=fg
+zV_`kMfy#o%vu-7=DbTYH@OaoXldYd&+8L|zl|}iJJRPL3k>Bn``*{(lS+r-PhYvLD
+zKppE1jXT0|S8207^^!H}J9P8*df0oPI9O|_$?I5xvv?n4E-u}lv=BhpL6s^T4oM;=
+zh6*ghj-D_g(@uMtkj<KjvD1o^i3R~m4oAU6(?vN=w{@O$)?uoaiRq&FjHC53kcn9W
+zz_I8RWwF4rbQ%_I<%Z(2JoM*lC;+c#9YJb4#3L&BVXvoSbQEvf(R%*E!vFYAvH*{V
+zM<Xt6q6@%L-0^i2RF&-#M{;p3cs)P$+4Op7{PKE!1$`NsBdLQi!E!YCK_`>La`L}Y
+za@)`v;;>{h51>Gg)A(%~r&d!uXi|<%rExWdLm3yiVf$!_bO3^GGL=hLR48t0*aP$p
+z;J6nMH&L{Stio9N-v!#RxUz@nK<gaD4E__uTaGLuDUYL5WgMNV>QbGms?w*i!R(rt
+zjq{~_0K02t{h^q&g;gLzp;8e9S>if+IcdjbT)C=P<C1E+#&fwk+WA};{niG8gCTgU
+z>RVG^;LRu2WuX7p?w0GPsLdaCGWjjLTg$*3T&g!iUDOi^%H3Kj@@AbEY=Ieax1KMg
+zWm}N+X{L@fy!sLcrg4mMmsWGXtYJG^Brf!E2)gVDXVjGAJ0|fOdf8X*F^17-Nic>P
+z6b{BPi|9b>gJ2akKdUOxGJ)+Tea94%Vx=*TT5U3rF-$6^7kFR{(`2c}zYfM=_4q*`
+zUscNSN|vr$J?2EW@}cz^(6KRC?DCM@qA)$iaJyVxDmpA14747hN*j``?9le8bh4z<
+zCb$SHokVn?^*)ZT={tnRH`by`M}Rqs&Nx&$Bx0Ph3@et6Q6)*Zw;wkCN=|UMN(GF=
+zekc?1I!SLR#Uyj0?M2WT1Dz99N@03bO53#Uh9#GQ)-xWNl@3Za-od<xGgc?<_>O>h
+z(Bvqh1FeVQfkTrj?ML3CCXY)JGY(DeGmvo}DV7Z>SQ+-O9v`_|lLE%0UjUA3b5gsU
+zWKP2S0CLn$)Fg$eYVz>A!RI3Ramx;rPVTi18)x-vhg?par+VvpJ+6WI7LhN)l$R6z
+zP(=Q~*`CzY>L=TrR1P8%HNnJk9HZ1RNS2eLC@cn6Xk+LR*7*w?7zhp?Vp4qZKv(*a
+z(<gu}o^X!XeA>BdH?EZJ614=LECOZyLiky8unPhbYp<Y`F%ck40<T93#Mr?L>rhP^
+z)i&USY6p?Pw9ma`XzoSzId!N;jcPNZ>XcA15nM5;!qvN>RZIskA@F;dx|5-sVo$i!
+zjD+Vj?+))@`uxovhDWRzu@dO^i?oL1+~;VoA~D(ed1m?M*)F4J%m9$TO}89jCxo?&
+zopB0)a5cc`r0$LJrSNmn;Tg|cVhfLrIKXnDAw=05GwM~<H7E{Kh%l4j;1^a*=OvR)
+zRteg(34pRE;KHkeNeAjQZ|GuZfIdR`P~RGt+1Z4b6zsRV=1%aq3F|s7O&-XRu+XT&
+z6ht<3+7v`)TlW5QEPDl(eMjrvWAb8iFS+kImg548n&)Y}uxG#|ARclr>1B{P){8sR
+zQ}i-yEZe=>9VxJ=&78)|n6Y$vu`~)SO-CE(d!`XJY-w>EM}vgs!+0nT?PF3uE{1c?
+zC&Nt{E-a~@3^!xAFbOHa#dF@X0vKQG6=IP&R_KzWCs*#WvBZ@VweR4Eb8>~;a5FLu
+zjb4)v+~UWT{Oy9y&PjA|3JqBolHUXT9<kxo(_~?(shbt$M^Dk=a8(N3kH=q~4YF*q
+z`+ZWtUV>UFedp|TpT|iUyCO}(cHvC1HzZuxlH(-ohn-AG%E>Jy$B}InxpbZpM0KvI
+zfREo`C!3azZEOW>6w`|7wxMF4MB^O?^a&A#3Ssp!FEpDMns*^}9X@##3WaMrri2lP
+zT;L@JU<G+PWL2j~XOdMIPWv*@2ES+((Sg=Sv5yK*LgcWYk2Hu$s6cK-Ea90XBtdz$
+z20eWXs>5~UhN6HxDuz;l+!Ue%tq*}5+%R#CiJ?@effZB<9QkY%1)D1Pzo0HTxj+ek
+zGP~)s7fsJp(J{ZjnaPieIK~2wfz~Tg82&=Pl(aR%!nmlQU+q!;!g~(VWAQ|V-9MTp
+zP3bM2XWYc@@e>bz867yvst^t+qioRA)`nzRG4jk<<ISH)lBp4%k^oaff!;>2|F`V)
+zMW-(zaJp62c9YU6ET_*}8rDxlEz`r(zC}`tx{wPwL~!iRBRH7DmpAH#dF+{kqeoF;
+zRAml-{d0@yI2DpRre&c21fZIB{T)tbw@{vr4?^-V9sm776=aI1<NZb62b>pr1!ibE
+zew&b%dxfa<HS!lu<KfJ}U*Z?8g(?UK(KYoFc$&#S!Vv(2^%1=<X0Z`N5BVJa4tGOB
+zlx`7icQ>>mO4w>5Cd|mlMLakg&dPSrk+d2kF1VnBQlWkBAv)0d5u1b<!toW8BUBJ`
+zMI5J@0b0W*x2UGn_4;$Ze#E>;Zo442BXZvla%k1!8dub$Le0e?B!OeW&7xpO1wZJ5
+zGbjO2X4iHHvnApi0mne=OaBh*-G`Twtu+=#59sb-oxkwhv43&Rz>;e=cv5$uLa8tX
+zJ;m<8$TMTjyMsWIsS%!%)O82eNqf+$8A9M@Z<XmPFRFbsPj~&aSw9i=z6GR(grpXA
+z(bFB=i;uR@f(70s%wx}7eRuFMS5?(^@&%bk*gpEH$7E$k)f>*-RoVyhq$duS&_x_B
+z5gllK1m78gj=I|ip@L>B?c+!dTh9ifXWJ&#%94dnmql`m1-T`W`!67e_93qG`R){C
+zfYB2;7Mv{#&a2>)(NCdZ0A+S<``9SSIumf<Xtz2!zsHRmp)8zw1ro0a@fRA66sQ|z
+zmi*NAp+dNUkFr5ev3(eMW~_Pp2qc*r;VDU7`;dll(4LCM2?qpjA6A)PLrgW(clxoV
+zIir107d`Fcd0vXG5$3UHuD*S|4TD8!ABbtg`4P5{T^sDMhhiVztF#a1MZ0T4PoaHG
+zB0A9en*N&hL8wrVmG;pwxjvKg>5~dM=0$R21-XXEJq6@o=HeQsI&B1#ZXX1W1xJd4
+zqbm6AE*L<WUE4m6O6_Af;23DFqcE4B)CRT&Ss3qbx<w4}SK>=qiB7<ahtu6j6-tH4
+z&}nQRMxGgK-aZ0Jrbc*5QrAALllF#Hvx&g%z$$BRJAEflKejYyv=8c{r+xebFXYw;
+z^Vl<2-#*@C@14S-{wQix-@e5@Dw6yFSDnLItfW%swGdiKJuw%?(;5;F*)W6h!OY{o
+zAaAWB1~}bAws7yIU`uf%am_z6U&?lgd`(kS?Cl@E8Rju>$!8U`RvF+t5NK%?avzb1
+zb6OzfIYdS{_OW6u6Qg*n2)_>QX8XmGrEPFq!PcIFY)VA39l*(Ab`h}&nhWuC3RM;a
+zZWhB3TBhoUNW*i!ajkaQRGX&SiBz|9s%Gm`oJVCu2yTe3!c7Ae^7M`#f?YSznt)oH
+z3br;7L@^mh9S+8>4aQi?c8R(=Jb0fqTryxVvnL~IEd!~lakWIL*RC_dp%kGYf_P0@
+z<n`dZt8vssMihkCm$Mxa$rb^pYFt9(5sauR2&ybrq545~oM;fHI%ukPd$W$I&PJ;9
+zIn}W;laJK@&4>^*iLS!UbMk5|J9*TXwLDE$xT!INNUYBqEfWr<2vwo*TjJcC58=6H
+zEKMjeTe7^9B*MGrQ;0kgEwdn~vRH-c6;q{ygnnR8L3lDcn>W=)q}t4>ep+5sMugyo
+z=qlXs__!NOMaz@c@+euMmd6k|MazT(1wvIQ%t=D;qNHJ%3y<Jr4a+-BBGmE-B9BDN
+zEC{MBR-t;6m~qa-TK1qD+>&h6R0ku~p`7Zj!9TUJI3q&PB)SSW-wle?GXJaGr^0^E
+z=tOd5ho^3Qp6UoM6yR?T2TAlS$bNOE621sBk+Kwana6ke+G&E1-r$>Q_(nzbdnb?M
+zKV3h#RLqwdPug$8ZTB%a@mTI2Mwf)eZ?3DNf(I3>j4IHhe#zF?@`rcZnv9-t!vOg^
+z+=xQB&G1v)bVKna7WZD+EZPuvz8r99!!J7T2sXeJ0!|vk2HHNlqr6?SYl20EuWEQ-
+z!sGZU8$GKkRoodMMq^oH%vjbPJ$ZLy!&vrvdD$$mbk4%EZ7h4eSau35yJumMXHq%^
+zS4ebJU^zYuOCJrO*hcfSkEzTC`!zHo?AOqw(qJ|+CGXdav8*-MaI{x*KAr0Qnn_|y
+zE^UV=vvK%n1IIG(WcK(Pp37bZ8_QOSYIlk#acTn{J9lTkO3O{*lZd`u$L*NUbF!>G
+zeEp5d|DTUX$-GO+zpWJ^+JC-c`j33lgS?4&>4-JDNvcQ5m^S7hh+A!8kKYHQd|MK$
+zMVqk<{4{C~1E^&2SGN4Z!!+v!Ux32fG>Ul@6OI+(eL^-`hd{AB54e!zjY7PR<)Vu!
+zqbrfIjCF^vr0I}d=$a?8cMvqf^p{x+ZzqILWQ0d-^dXE0-XJkQ=NOaD<ZRlU&6KDX
+zoXv{9rtjd4pb_t&a)Q$Qcu&|5&A-1fRcK>t(wvo(dO7nKjr@^;NT<(q++1`**TXt1
+z8lsLV(Ctd3%fDCzse_-y!cLmWh~hc@U_^V7t8OD=dlyX@P7Z=N(^1)@3c^F4IwSxi
+zDjmYC7||HOZA8N=NFy=|J!FZl-|Hi~eH=v<XxCGYUW`vyM$E(>g-!H?L@ZNO)sZw2
+ztBRlzrrU@Fhc6rwWq1w7@0mt$=d}9)5R=a2tYgl$OH>QacDgttXv90HoM=RX!=vx!
+zY?pc1Ix4Z@oOU^>m$NPDx$Du>@YZsBQ<$||Y$MuJf?s6zrgfJQ@x`%VL~-ry>)aD<
+zM6SAxXf-CoaB>jDnGPd5qEqNEz2Fx|SNxhs5cM%!)<<>>a2t_)d-X&{p+!*`5l3cV
+z;vRZL;b}mdlY)>GzK61+c|v?aso1ze2Ut|qBoTT!8|}SO!rN^`g2S0)dAYjPgQ}vl
+z8`*G<ob;G<CTGKvru@=xiL=oz&IlUub{mo4up3~`xbFte=#58k=d{a7y_}W5yb}wm
+z60x%{o6)YhjffSEo@mYK>j=t5bU0Gn;aEi8;n3k{A3mY`u7}dOg2YI?+tKsB!ddq@
+zs`)<uh0|T|3UOEhBlq##r}=$C__vQ9zHr}U7E6qIf9N;Kl0St$`&@PGW1GpJ!%DT3
+z3}+b$Xce3uA%>E)1<!YOqW6m{vm4`2?;uml-TI>9MNDxxzqz#COrNjk9N4W3*<ZPe
+zIRo;IcX%g17>@^h1pF<(=S!i*cXK2Opnf0|BOVYmv*&!n6VCO$dkERSUA^+#c_+tr
+z68MDKCQ{I(n&SB#`!OG#1LF{n0KwG4wR`U|hs~uVJOlUzAcDH|c30^=o`5J7X>jzu
+z&jLpn1S7+NjdJf>j!U^#`h~>$$XN@N!w#FDZ_J9fMyiy*1(bPoBWNlR-Ydk@N_rHP
+z3Srl1B}kp!$47HjK}Uwtx_rQX{Q|m0efV?lMq>z7g&9y|@LNz*HyZt{ujY-ur!vT%
+zvvk|JzKQIPmmzpJwwn9iRa7TFTFF&DUpd91J$MTI#V0UrjhgjD{b2OmAlGz!d1A4)
+zyv#M&YP8|pwx=xnG=dyyw_mwV0(j{>Qy*XS%q$r=^pmnU$|__R;jNEv9(2r)xOU6Q
+z30S<yY*Jjq^nS)FDc*%^F+TU`JEeMq5M3Pdo}SaCmiP%(H^gQ#x6GRgm<=p~g(Y#P
+zHy*~<ni(De$>tU((x-thwDv!oNDks756ldr;HkcJd>t4h1olJKdQ-mf7amd2tGG*G
+zBUX<kEI+o18Ig=x@2D&TRF4Q4zI37vC+fxjA50|A8*C=uI|K_MbLJb5lh2JpM<j)6
+zTU1~_J$cx;vW0M*ue8)J2(CXpT)#f^sP>;Q`$??#xJ%P5CiIfL&~$Ori#Z4`?zm^%
+z!wS$bss-U(oEYQIQ+ly8k&dIt4JdwRBD7g72kl}3XtMHs+VhttFQk{Ct4l{0(u+eu
+zqYw9=$7`A4d#}g@ne+|)&P?OWKmH!9o^{}b!$)*JdCe;(tV#6es*rfG-!I1b)w*Qs
+zEvh7a8H0T(#sYIud5Zz*T`MK{-C@NetUaH6V|*=ScO6d#_)<t;ba=-3WG|_(gTt~(
+z13_3enG&zEM&dyx8x{g~b_jM51a$^?h|4N=I`sOWz1mZjRXX%4O0OV@qNeZL%<<yD
+zj-$Pc1M%qTuCeU(^0HT8**^=*k+J000t;S_3oLz9$!TYK`w37ih?Mj)=%TQ7FRq=2
+zW!PA@dnFnvu#7r-vR=lFrPGV0QDAAFg=NxM!b#%jlIzfEfo0|_EVITEI;L;{D%CR>
+z=oXidi-n?P1Zik3YC&EoS~qfPZo|=DnSI^S3q>7b!wb&I!Wuf2Rdfr>=x^|$SU#}b
+z`z<xw8xi{v^sr*|938&#k_x^Lz<e$Z-RUzqYhpxKd82w4l@wkFh-X*jn)iNIEzQ&?
+zU?`K-g?skpqkH)Z6YmnCzZW7OV#V-7;|z55fm4k528f@&*dsH3nmdfm&HRuY^HdmT
+zj_B8iGZmaZ477f`AH!h!jt*dW><4L4KCv2K0L-QVU}u+Ai~es$lEjachg-bi&8~1O
+zPD@Ua@@zqQUX(kgJQ=z3+xJsKOFwm5v6?TBUEgFs$J)tH&i)Y+z&>d}cPi;`aztTh
+zYFPOY_MWehIkoF{Un$An$R-gaaX8r`*Pzr;5U<o@e5P{9fz#PcJT;?!k#5tLSv$R?
+z<eXItv5G)RT1sl-7mqw6IQVHSOP(t1W5^t)lwb*((IMl=;ghv+N|Voz(mg`6c3-w4
+zrz*Y=ecIU_FcHkUf#^W%Po*Qhz5rE?AuX!6q;a&OLGWm^9!89FIDq0xMS%7j2l>J*
+zp<zXY5dh>JK|D|%MRcI`Uro6mphm)Z*VdrW(yWIR3+H>fCJ>vQ6U>@4U_2@bry0MZ
+zFw160*zvNBP!|VzieeGofPn{2GAm|Hu0iQoCAFMwGo^BnZuvEyIbGEhUbMiB6;PkL
+zS^qZOD|p%k*Jw{=VIM>0>dpF}f<yP@`Tf%CkF2*oQVremE$BXg2jl8TbfERwydszC
+z3+qr7vt!M!5p&*KZ?mA5CUy~nS$oMXH|vg|<A>Y{4YSTy>R{Gf-3yet_&3n{L(Jeg
+zP5`uI)?B;ts)AOoY90khu5b47=vKA22CrW1(!P0=BG|Lgh7Tsk>3jUjjEY5g0~(VS
+zO)B<mIm73|^@M@#lUe}>7QA%dLG=U9l<l`=u?3C8*M?uurH|K3G)@O@w5qB-|0coV
+z1t2(hBBiet_OWNKIJj2g@bKQ;ZX{>a?XqQFEoAl!mid{qGLEkZ_kX9@QPe^}3I0f@
+zKcU%mF0Df|3MU)z2(XMwp9zn=a6uQnC@0G0q^Nk6$j>yD`Qo{>bqNyc&?maEwgHS9
+zSvL@gID19T2nW^(1^-Hn;w=pPis#a1+%<Z{595D$(WmBf)bV32>niog9059g=4P#z
+zo1Zls-Lf_)Ii{)rm#oW(oFXgXAS<CNvZ`9W!3%|Y7zi6p*{F!<4wsC75ye04(E+l~
+zn;W95aPt9GXr*5JE$a-xCF?9Ar^re;$V#XR_SXn|<-DOg3~ht}e2PSPxMvy>%X(y<
+zKDD01=NNINvzMFSK@t|=tLI;O)^EQ0J-k|Mfw>e`EFtOK0#;V;Kz<+Qs#q3@t0D3G
+zTKr~SWj+0G8NOjKJv@<K8k$J&8JtMI^v;Rog?IKhle_O6w9HsI<${jho8o%@3vk3`
+zgrlWDZk$h8!WW1=6Tp|IP;JT9n^bw@!)Pn+>Ggrrd8cA2$(_chxqO3lnl)BI<#zca
+zUcR}->*ZY7!J^Hm1NNN7g3b;)i?HaU)_X%85t)0xR$;mJGYOdY`&v1E(XQXG0W{bc
+zKHEw4Xfo}7LrXyFJ5F2bP!CqR6kcFiqw$B6HIDX9`{NSOh8jw7DZIe4Szzg$g=O1V
+zc49YCVA(0K?4E^X&sg%sn*z&zf#v8dEXT&u>E)$QW+?5dk2_7fgQ}D9eDS8>WvIY1
+z?C8nb9Wj=;cvGtBu>wouEG$i9S(ilkdhH~B<8!xDDyPXdR)S`fn9V9t!)6*<<H{1#
+zlJ_<J4fbFes{*W9VhrC^PyRdL*H!YKwPay+BDrT7YeP#|7{X$Z7Dm}4pfzCUYDU2c
+zH@-K7q<rK154=KT0le<X6{25uG9|&NrD9C}87~|eTBlB8)lLgiM|9A&G*$5{lM2c!
+zLJ{1$@oq03NH(}fim*Lb{vw}WHVB)*Sfw%etg*8ffZQVpggwpF^Fc2LTQnG#eF4T@
+z&3swvh9){5p>RZsfcP-3f;L6KbYxT-3!egBk&}Qk^-3&GM)7^LxcTyqQI^lVKAOeH
+z!&#!TF%!Nb4+qc$H62abBm9NyFs8eYAn0txaG3z&!!qGAwqGX;pM%KP$aZ33%zegy
+zHZCS0I?#Gkzg&1}2M^*PjcW=B0=cTIB7R!i5hb_HqVMZ9jBKkDGeK{#pf@CXKLL7}
+zYtf7Yg)P-%+EzV!qVMV52w-5>{U}$gT5L6u3O|jRsHGtV8DWGjJX*eq<jSMvfQXNl
+zGYTfe9Jn7gMx)v?V&Bunq9aZM+X)JE#{{e|_BwstrI($)ioofiI$2FoP-+*fQ`a%6
+zBzsJnGSqYls_7(}WPl3yq+7gq12ywT&cSoFGDWM;SEg>=vghezC*I-<-+9L286=8e
+zmu2flL*`AQ%r8LVi+2F+vFs%w-O^<Qf4l>WMBCsMmd!C3zvz7jnN|#!2_V(uN6?n2
+z;VmwK`*S(DWiwHQp@LnY4VJx!=s@cT>ImA#ESI`Rl@ltEt627^2o&#|+Om(O`DodM
+ziS#xKdYhv6ML2&6%N~UO1BHrZ?*NxAdymXuo`!NI%QmgBbP&(h5Ju>NWsiV`Zp&T+
+zM6hf{Y1w2Bmc1+P<Cknn6}>ot;NGtyu%!mN`^wft-|3VD3hYy$N2#3N5pvaI6m;H%
+z9u><bV;DP*5JbzK(c+XW8!=taymiYyQpM`oZiv0-YTl1E*=5;_B%S%xVCH4aOrN6a
+zvFtu54@Nv|RrKpudtRLPuIl4xtKfWJBn_WyZi^a@cZs8L$Jqx@(1%9;pn@e74wk))
+z=s@eG@cnx%n^2)TDwe%wk=G+iTlR*kELt{UR2uZA3wkr6cg-tv+b9t$ywq>Oq?V9l
+z%U(qcmOX`XCCfIgHZ##@6B>mGBXq&CSHVKJWlsVkShk{EW?5EYzx;w%tc{AfsM{t2
+zn`j`orfjW;IGrLubDK`@AaMFD5nv||L6mUbppS-0i!ty{#e&Tv1$x5b;QL|D-BlUs
+zmoyxcrp(ebf|%5F(qxh3L$vuaRf!lLKlYJ0KYLItWtCy5WBtadRq~l#*?&p?t<F)V
+z;Qo#UXeihkLlD_v9L-`QS`#|nQg%xv^0llo*#t@$ku1RvYBl%^`^&(nHILyEnMbp3
+zNB}YsJ?cgh;y@dI9o)`Vjr(iv20g%UdAJX6tz`Xx(_+aWA~vOA*9e7)T6r|tB}Fhr
+zdKGqG3Z+Af+X4t<ZoJ}n%)3(^sIw2bp9!`|0BjL`g{@yGh7WM(!NgleX|`$beR9Vo
+zrz1qH#g3%-OpP%aDS}<ntFZfpuI+iz5B+;<S$yg$t+cp@a-Rt;?wT#4udww7S(P6o
+zjQy8Zk<pRPSc}^zB`xkC@|bjMqzEmNUWMHquyoS*Ui3ZEBldgYBS-!MJGu={%CKZ)
+z&7QC#<&#z&eQvz#Gvi&~BE~4giJ+HoxJ(qL*kg{?FAs#neLN1r1tuQm!AYw<Os{uw
+z?jo$DU~E&~%CrIkHx=W9Ws@$3hIVN?eiQgY@(a+B3Z<dY_yz#NI!4#Ia-A~tK&okc
+zaCCiqy@|7M6UiS-JMc3N;CJ4_gI?MA+C=gP0-(Pz&`LGB@aRZ5VX4oL4vNc#MF_SO
+ztytPhSLDcG=U5Q=W~)<6A1KGgQ9`8pmL6L5sD9}S^Qk_4g|tbe8GC+ok5?)mgZ19g
+z&*c3~iPZa^|Ks-jxIJrqzV1H2SATl@7mwTX!~O>3th%Mg`{&2|=acWxKi)q-?r&T<
+z@{ILye*;eTjqzQ0fedvZ|8f7B+IZZ5rb(P|Ug9zKH*lDNS3)ow)RgLkCpc`k<-3QN
+z)#%+7Owumxd8UD96YvA4<i~dq?uKIkoXj~tOjvMnD$EDxJ#lGZWu%y|l<qHaPkww6
+zf8GJtTn;o+(bxoyu&0f!&Vq<0gqp>nXxyt<z}Fr<cf)Luw3_K0axaA$ScxWHS7LVZ
+zQOw#rZEOtQ%=ht~GKWpy_Xe4H1b0Rycm&rzl5PvEN1>%xJdz-)VS_lI+&NX{0=(&`
+zm>{O0lX_Z*yJhLzsv*L6(R|<NZ~6Heaojaud)(g8*dDjH&(Qg>$L;O${_U|mk65)g
+z^lp1Nm7OfS1?z=fpZvz}eS8AEA7iZw;rDLk_jcuXr}BHV@_VE5d%f~|t^7M(cnj{P
+z`q0hsKx+kjaDX;1IM$i8J&GM+Fy;vO9^Nw#xxCKdTzn9OC!TnT8OO$OUaXmX7(W*c
+zSnAd|bZbS|Ik>*0;m-@E7}!EG?op?32a;dHAisR@V(j6k7vGYfpLkm@lk_H<37O<5
+zUS-m`{A!5?UA*bk#b@c$yj514z!q6$oJWupw23L?_z@87Br+%P{G&Yf0iNT|cn!}(
+z0w>QSh*f!ZE_ogk94>~Jb(@VM)%2@859c|!M#QpV*&Xk~6geu7`ZIFt`OmPUOrH64
+z0uPkc@a%1S^4tepRi2$oo(D;nx3Rl;?$7C0c|I=fO)?IiNdPO>#1!?+^5EIX&GR<~
+zo)MhH^EUCxHg*xK^6Xsl%+m+pxzo+_9#ZS|yp!joK3$NmkN|ilrpPnPgJ&Z*&u@l;
+zsb`poczyxe)O(&{qkb<gx2UMT&rwqYJ~zM`;C^mZ8s}1)4(TQrx4Wg;%sH#pz<QpO
+zZZVD;AOT22Oi>z^hcrfRX?`9i&Uq|52DI88aJEV)yt{H0hrInG(enU@FU3OaXfwNG
+z_dT3ipfBjZ(HK@iykPNCAi@I{e43((7c9cl6~9c-?2a$&;1Lo&U2%T%S^U4gfpK@d
+zHisu0`G`e$r2t*VR{<AQjGp6>t9XX&%V6datE$+!RPmDFF79@#coC`f1~Z%I#A}-?
+zBmfl?Q&cg_Llh&oiob(LA+hxqRLnkfnov>2`hh(#q~$7}dv}eBd1R+o#otBH?2eyC
+zaJGs`M7{FE;D##h4=Uz2uW#9kM}>t}+(4|VV&_uDlY+ar->u>%QtMSbmgmHeU;B(2
+zcD{<7a9%BZ!pJKA1f+n9kAjNH*$8Pz73&8sYa%UI@#k;VsQ7BFil0Q#?2btUXRDY*
+zsN%y{;^~m*eDdc}=8M6e-q*3%N&VX||5CIoZ@>IIl*ijISBR$m?HA6^KgQYEBB&Jm
+zCCMDL@Yi@(1HmPX>d)oKK712z&OAI=c^^Yu^~~pJwRnzJ(yUl0ebqDBdIr<7g(G+(
+z9BeF9uP3xu_Ec&-qpIgaPiL^eC+DIY#nv>2kO~w>-wG55-wM<*Sgt_rJE=@@rx&Wz
+z3$@-0wb~1{*b6n=3&r+W;j3AN3LjI&J!0hGYyzt!RV9=bYcN>s=6>M6g%+_KHzas}
+zKi+qeCz8_VZ?V8afY?lROcTEvNGv&##aFD*s0NYe>Q2jVd2(R}?<$F$PTL9Q;8%5c
+zme!Ixf2VOqjTyO5$%2=8q72<7&fnu#nX_Y@D~SdA^1|^tvOa%q&ZddRt48MRnFVKP
+zbQ)t$<7_=g9!5ueCz>eZt1f!qvdr0jiL;|T4%b2_VKOF}v!yC${~JA`OgdxRq9b=2
+zXSCR;f{s{P**0ez{<Vpq%-L?v4c^+%<M^<(Ib)JJQ~9#a&J~<RckMLJjzKtbwr^gJ
+z6ts5zYY#!0v+bN4T<Of?@zQO^By*<nWzJqjkIXuYPT6;0BtTOcBB>j?CE=mL7bY^_
+zsJ`~ze%M$Ch|$r}BS(eGqrSGqUwv1<jLs6X1E$0uC%-n<clBw912L07|MB5B0?4pF
+z>-y|-c!_PP^&S+*UDv<!X2swZ4jq2U(_{J{Zk!7cdxw8`@V~<p>xbYsozkA!|3y8s
+z<AX$+HsFxIf6?DA>zSwRVu6i39<ROXLW=clf4ykWys~@nmlzg;uAda_ldeP55Z)FF
+zWAIWl^SsbnUZWc0>nd2oy|y(EzN}*9<tlEH?Lx)MEL3b*KVlbD{3E%F87ow*bg5V|
+zs`#70{UcZLEI5i9;|K&5&nWPsGd`n;Uu6|9<!XiJoX6t}j2V-x;z^<@nX**83JnGo
+z_Xic<)urOXS<fzYn%3_kaBBL4b@k@8g-+kqr@%gy8Z~=yS!(@iS*~)Z)~`Q&HY(46
+za3z9H-vD$rTgD2VDqT8Nj5<98k99h|?eL)!#-RJ-xfVW|##frh`3TQiS%Wj68dW}<
+z$Nf$**kzJ5xUgDP-{DK?cC~)`B)2QsD?PWz*-y`NdtZ#QaJl~Mr+Qqjf!p!n={G*i
+z(Ts10b-xG3PVv!suTp|{`C~fYH;m2=rnd>%v9Pm&AlZ5t|3CS3U+uGC-t}2Vw@4!v
+z)3qNU#x2eU&GUwys|;}LOhT011EYXb$9|*59zA5Tj}FnD5Y;J9c0O<wIG|QMG!Cd0
+zPiVC_X}LFPwink-FVu8z(o}EKSTC;8UZ|1Yq~YGAzFu5(SSm6e^(O82CT%;Z@Kw|B
+zMun^)l^N)*&^gR5FBOj9@2cO>cgk^tMasu_9*GRAgxKR+MbynKAoRODSUqSWhfj$6
+zRSHcX;D<3Wt`BBYdEwG(1lG}zd?EP=9!f-iKZ74|Iw>Uz4o)P0f*A<z801BDA(+is
+zb409CI@-_@q`D>ZS0bTR$YsL$HnC!Qd_$n<bd(w1#OnGmD=wn!0^D%P+t(2Hsm>pN
+zGRH7KaFWD_nD>OaJ*L1<F(-O*IjC%FlR4pi>@+i6z6m(0OqGuCOHQ)55>;o4L+`sq
+zWnnpCQbG7$^Dh}<%4uX+Ym~YyckrKK5NXCfAa}59Yg{($8XpF5V8<pD-p@#VIZ8FY
+ztAo*)Fot(v@*3aE58#)o1FK_5&TIS#KTzXrBjp+|=&I6=MM9U9`y^Uebk6#7{z@cN
+z<3of~;X%bTn|DoOsv{(AQbF&pp2x!~YJ3o^7_NAJX`uCU1FCUmq9Js|kLI`NTetZu
+z*<uUEul`sb2C^wS@%d=O<ux9VFg4b=SdAanDZczCF@cWCLXBJD;nAH?<J2`q@Da(1
+zRSwtq9={^(8jll~+8S36=o;s}ol1>Q3-^iw)%c7ORO7x_5vyZ1FI=h)?4~0*ukl6v
+zK#jA9E!TKK*UeNUx-R{@jjz^`P>rv%hzhSMrX{ji<H|&@#hhx5H)D<A=G7(u+{S+y
+zFIqt7%tYl*vY;21P{&gu;3;gPXWC*7h8j0`_<&em;{gdvM|iOcS5N45waP7+VuCuA
+z1+rFnxJMmoeAY$CaH);|F}@EQYCKK|YioQBVufD40SuKIKhoWc@Cjh{>c>h@jrWUg
+ztnt3Qa952JD6jEB{6LL!d@k2`L06SFWW4M~h8+#P`UrlRzY+=6_!!|-cvLYh2@4dx
+zx-#*G9&@TSzF4a9CIDRHzl#+!>fANHCy~PgjO~5?!fiw4>4Uqm21AV-T(_0+Sa8e?
+zNLV^1iB&ApkS|<%Lf{&wn4nH&p~kK7aPvCUc%O@q;Zlu%5??$GH6AD0wKcv6)<cc+
+zZb)D!_Uen0c13~O_>vM-<Ex6s8s|+M7cNzYzcH5A_!?kP<Ga*WX&f);s?yetmo>i8
+zMPjp#glc@7a4OtUtavpRHLlEXUAbE09k3#<(Z+XC)HVL6dPTvnCgoR2w?iF^fVW5B
+zKgaT@qEO?r1i(W=g3D{%sa^LN#VTgZf|sbSaf%6aR2FJ{$=Rz6l2GHzP9wvm8vk5y
+z9cnx-VEitZU&HedH}r0U=hc3~A@dyHQ@<G@%fhUGgg*N<Z5?`ct?Ym)y!ctnu9aEL
+zt_|z$t}qjP6|j3I$e3n=cX0tj>6!^DhM6FYe_f-MuBsl4_t(!0pLp=cg;xqo;i5$_
+zV_qSvn6d6{r7OO^#g3~%X}OvWS5?ty#*_F}W5xu^&3FtyV8)!ql+C!HD@z<UUXmDb
+z6dhN%*oKX9U1;o~L~G_T`XQF^;!6<4CDB0$*NU)ngFWj*LJyvJ6_iKScmwd}<Y2&~
+zpRg+<D2}SdD}r17BFz(PgNosZfA71IxwQ)#_mTvfTf0+*Ad)rTCTs3&?V~K|%c$V0
+zp<k|(VC^kd37!<^szzZP4cN%RkQQL&xyEIr-z;1F_@d1nD@EA~*I&Xihi>!52U&cm
+z?wU3VZ0o-4=SNkNY)s|y#X4mcwr*H2_yt@44d~mp&RAjVN|&uG)@$qEfsVRv4Ww%8
+zoN)(RpYFBwDI{S!p+H^srV?c99Yv$9^Oj(Z<q#;h^$q->TSg_6y6l3k%yrdxY3pl_
+z($;4fm5r_=)<Y@U`m(@u5ib~vOX6J$;aU-P;hC?)gGYFTfwn%2SjpD;6INveWm_jA
+zfG;YbtuHA?Ti0?$(ryA#wB69N3mSLo1)AHsQ-vVHn{SgfceZt^0k*!OpuMS})e$=P
+z?BOe{b+-Ps@YF-^-jA6Hm-O3RwqCcMH!0jW&d{}<r_|V&UtB7!=P9RH&odwn;RMV6
+zR-m(GGger((q-9-^;-5Dz-hf@mwXa1xf#rQ_s?_XM^9u2Nib^#GV4*w<}Q3p(P-8U
+z{Blinc_IYL&3XhsCX)Mko+e*TD2U3Y2aS|AJ>)2DdXH?#7Kf48LnhjEKT9Oz@u07Z
+zVYf?&R)ktej&eb}cojjNGu{V4$)NcY25kgogC-&v@38_Jbe}kYLF0Td-Y1Wy8BAGl
+zX=b3@l%1-g5#Ah|Af93bQkycRhbdE!;Ky|lK3W<~xnTx+yKQf2-}S>Mt*!Qa&gAc6
+z%F?sG`p&m%ef0+roUo;>xh|?~3gd@{4n~R>KzRqH`Zw@YZj$8t-=ER*_B;mjnY<7C
+zIR4YW=PC;?t&ih;CQp8#>2L%{wkGiZX75Q&o>%CHiMWAe3p<tH)svQs-T8Ir5j386
+zVU0%=N`!Rdpn{7VKV3<1ppcY`cYX0>?x<@!AO4evH|;sGv$YuN@Z|IRDa29Ao-f$Z
+z12SBxlhV9vIM2y%oHGgiw2^6^adUD6bmc}R4<Ec&J{y&ruQqZ6xZrFGSryLug;T3O
+z!Rba<Oy7418TFj?<vBTLOaf;{rUQiLj7Z>L9*h*6#Z|Fx&ZYra;cVYiSq>6Mjt0(-
+z^NC?qXPj`G=bSSpfioi$B6CJ0<m~(57^azY7FTb&Ih*O_Ow(1@=8n+E;gPfNdY$Ey
+zVRY;bDNE=6z?qS0R&CBSg$HLJ2S0(cxXRGY8NKd`&eqKib;jv)VP~5sa<-P|<eV`H
+zoEceo(wKHeB-Gi93(n$f_-@S@{e%SGLk)9-)n<ls%bo<UsxVw4-dDP|u;lrGQq%DC
+zgg@<3%zc$v%m)nXIYscAeh5hIH8ED~f+}5JlVaQj{V^C`y`S{PavK?6tf+LJe7mw2
+z9Svr<gkSZQJ)7s`DrFK>YGf@Ua%B@qn1CI8mfTR8;*-D<-Oz9BQfnuu6=!*{DI3-n
+zgutJ*f?7Actvn-gL9IA8P9=I<SviFpYQXWe=!U)u1+7rV3WX}&iwT6FLSJ;E<Jqmy
+z^@>89;!Qoyq@zKhQ}|V{&_<q<E0jr4sFCTYp%qFbQK3HteT5d(9~AoRE`{y~h3-S4
+z_%4-Bn~VtoPMz|TR@WAGtx%;#JH@HrLZQkj6ly?h@dpe2CqQR~GFB*5=~Ad-R45;o
+zzZDDJsVH=a9NR*N9SsT{!LNFS4(2(zLYV}G8kx3ktWY8e3bl9n!T)f}-sJ>3iXQLs
+zB`A;G`)3eM-GNE?lRhr_Ce)ezMF~;%C$4?0kt}??>O!OoA1^Lj%zd6kPsaBT-bh2Z
+z`0+3*mUCVeay%-Pb1sG)h=8V8&iVR~<6gO(^Ti>@z2e+6>uU41!xCd;5uc_&ZvY*G
+zQQlf6qi+AVfZ)d}2!1Fa=tl^yzpkEx+jG?%-d7^;lNpEq>q+(7bu#1ib#?m&lttZ6
+z5k+_1^87fS7P|Iu17};S@8O7@$Lkk$h7O|3Kt2QYd;9V&)$fni)$fn|d)4nef={b{
+z-}td*pvQb*8NEyRzTVmMfk%2%t2#fJr^D1e8ITXvoix@9MW4M=kWP3diT-mXi4Jik
+ziLP=b=@?3=Bpvl8?e`|_^(O81ChhblZTBX1dXqMLlQw#j)_arIs!4ta*Pn)~PM*F6
+zohF=1T0(GJi}5YKpX;N~>B^XZxXUoZn3t$#6{QcZ+YX+-%p=jgTxpVk&qD|SmNWkx
+zQ=Do22-k5MgDBrb3eUgj<L~bQV__~DKLDl^&fG@8WKV^El`EZ!Wfa=9rx2^5P2|4e
+zK8cu)*)W1Z*TS@k$mQ@*sB*TZ73iU1&@}g9r-~9H&D44RU<nBay94xjy1vxat>A4y
+z)hKx1=Oz?r4RA>4wX{8~s1$sp{Ugo~N03+}q+q$cMg<SDAkJ>MJQaM5@=`Dfbtzb|
+z!T*qgO^OO06`E{Q0crOmRzsV}t>8WYNWqNcUQL^bqJoJ7lQEO^xf1LRGcj%jQbH)$
+z)N=*DP6s@s;5e1-R`4E*)hKwC%%v*|q~L8ONWnXbO2KQAfkN&gRwJZfqk=nv-r5zX
+zvfy>3NWmo3rC`BgzNsR#V3VSP_mr0HNP5!VL_!U1BDaD!5R-x#fmjws-&u+ZCJrdr
+zWXoS>$`wor!H22m3jRWz0tpsu-)o@Nt>EK&1vkx!0x5W22~zN)qEhfAqgvruLaate
+z!A1qo3OalpS_+;*iWE#jT?!T~=6EVX1)CHVysWfrKUeS!5^87@xfMK(m=w$i6l`JI
+zL=+WF98j>ywhiC|#nFN(A^0%$T)}O4W<kMmVWC^W8p!emth^6C)?tVh1yb;c&`ZIi
+zib}zKj7q^{h}8%w*r?!PL5G(brQm*~NWmo3rC`Bg{YyotV3VSP8%p!(e=lDlp@ue*
+zTfu{fNx_Uj!4{@XL{Y&*%Gom6@c6!88jcF4gy6%}a|ORp=R?#*#PyLEp|8Mcfn^%N
+z4eiHqa6!>2aDg4vCIe4Ek9621Jh15l?AP?Zq*qLo9WZ&7PLokzcTgrLqt7}#4|0ap
+z27a86{t2*SK05H`7GrQXzvSR&zzGiwDC?uV@u1j$!-0Vt`gm|)b(lP2n}+<wdwcqk
+z=*{)~-rkE_bnW)KZ=e2Wxs%n~r{7A@?2c6g@+VKdeYz{fc$oXs{*&g)-KH#OuGf^8
+zh$=kFEmPi9f=s!is7!fT6xkteBUWQhf{muUA!yx9!E~IX-6~RK%B0t2%7RT-L{_7n
+zNzs&dgeIed>1MQ!gc{mJZc|=EOs32T#Ii7Y0Y92DaiFg-+4581d1p)sVUMPsn{tAg
+zD6D`>mca@bg=mWek5-@`{^&?<1uwi-V+H@M)(S2VG`r&m5S(oV^CTRcokJ}vtD$+u
+zJkWY}xuK1(nd$MhW`=JFyM4_H0q$DxR>QT0Wj8CO=FMuFLb4sXSt+w<R)+O^1Yw!y
+zK_GRrVyvrKDND^tF*mE3LZOU8plPxd6{;WDUL)3csr$3OuSTK2U#rmLH%g)BQQ~Zc
+zl1NnOf5d=Lw`B0dgMSW9!aUT0;dQ7Q2dAHSum>P?JHR-m1huJ#qH0rv%4eHuB35J9
+zf{krzRM5JL6x!4fQq-nMsH;s07IOp@;qYKmY*Uj;3$H+t_6QPcXcM{H)G%UdQ;a|?
+z3)3c|*rtdBZOUZZ1_&>>2N#_Zf)7*A+tf2rXSfSp+{40a4+M;ruOB`Dnpgg3FV<B4
+zpVU_VU%o+=e>X~;UHQj40OUUPt!O&IFX+dR!1d>U(AApimP?O>pt@YD)YzKv90=Qv
+z*PoTcpT3Z1KwL8l?dVUqq3q!aF}0)r1YR^eG0VdfV`@j^8=--3z~1(doGVd3Ffb7`
+zwxH|ZTcgBJ)GG0337Xw;6T#U^B$3#HrcPWHAMa{G+chm{iFhz72_0L|rV>0VDe6&4
+z`5KiFtFhva0Kyz>Lq8TeaY({X4@ro0H6H<D@DMzk&$40~k`%*pBXX_Q@vDaFs(^S>
+zXbmxsM@$MReM&U89pd14q@Zm%Tjo2ooo!{cb{O!{7u)Ec!x$>BVJs3NwjKSzNQAV!
+z+CT8GYpR`>WqY4$cn?9dJNg%HrP@g(@a2{9{~M)m@hO2PiG1ZLf%7Pj)zhaCP50_4
+z)=h`?0>_eO5O_`C-tu`0X|=q5`o@n9(%Sy#+;5-z8W?AALndKqrIr*<nEBMr!Iz<F
+zhy5S4O0I{OO49K@vE+YOSE#Kx#407}9GqD4$BUAnUMb0;{=||G7A0XEm6Efkm3(GV
+zGR`+X0t}b{NK5tmvGj~_AGNX{tJJv9Ro#zOX3=*WwrfB3p8#pt?LrLQceqTgbnkW%
+zg1cSccS1*b+u`5OtGCO~=&D-~={tB1P=xx8?%(fr$z8W$YQMU=VXD+9ch`ogawxR#
+z;Tmu}-!T2ETw=xwiIpyi6{Ez<Xp(i#RhPu2-O{i%7p^u)VtQef9nIhFlDKY&9s*;0
+zeWH6uQ>nSc<sD7s6cQV-*wOr=Tw=xwiIpyi6{EyBhjzBarR~gKiM=H?^}3Tf)~+q7
+zZ>Z~3KlVN9RDS_MrBe-;h1pY9`cuDWKR(z@o^WRv>G&qgz*Fz`ek8v~i!)6f*x!T~
+z>hSp|EttkN&y{_y3?y0*OSbN0ubmQ~zMF^vOju9&+6S_?p*W6noe*~26At%-*^zL%
+z2txdxD@X|GM5>iT46b`xoQO|a3<3b(=OmZu3K_bPymum5ITDa|<BuI}1c^HX&1-u{
+z&AT2(bL2AWh2-}D&t+45e{&zt&*J<eY-$dU%0+zmW4trL2g#E0@Rd=`Y6*?(HQae!
+zZ)SL)HTAc*N;m4kC|SdrJ6RL$)Cvnv1SKn@!op{CF0JNguDDgo<B=-6H4@9B(_<Vw
+zyHqx&!d|ZT6&1_pM@wRShESQVp2ehXsH5nt;f&#T%<JUw)L*%TlY=DampS;n8tAip
+zGt*8&GsT)_+)MB~EXHJtfSN&5QqsZasxxN=<%hU#Rn%FFIxkst$1?J}ili7{Q?_<3
+zV$ud!EsMH_-!X4JkLRK?8=^ADqOv@M5dCgZnPg0v_esj4K2`m<M1{~8@djGAD(X6g
+z2#1`yYjr252=CvbZkCc(!D?C5CH#(}F6Z%FRAxg|=2%pghp3|8Eh>|usHE6ctItr!
+zEm7?j47C31EgJBsx^Exy>lSq?8Vxj|6^l$`WE5u+td>Qc#qXFmpT~1inGI2yV^LWi
+zLWq91s7#8Y%Ec(v>fr<~vhT2HUE>U`rF|p-ZwF2GH{%fq-KoZXu^D6^ybwBzxH7-?
+zoVEL<jq)<B*M4#9#yL%6);R6E@#ZwmnBxx<O(HgdH=dhach;b*_v1G5ajZx1F~uVK
+zs!(t&n2F_sQ4{GC$<`Qub$w+KT?rWtl;d@E!o{RrVOTMuGjFC_{8)B`Ojx@ysozNz
+zwPJZ0Wc*=!@u<%;qi>oPbzT1NKDF)dS9$!S7h1fR@wGu&rU*^l+862Ld)dPnE%40T
+zlQ2LWake(_mg}Fmeh$Bm=ROxh<1uGA_q?x}&H)Gz$$OjE|6;iLKmMQQYV+Lt`QfY1
+zd-z_(L~=cdj7RGL#Kqeu6U*Vdy5CnLy`yIO{2^xYbX3}y{QG@<xAlRxD1r-9TsV#x
+zL6%>?!v60i1Wz`=rDpOG>4W>$8i&Eg&E{7=zrXoTDhU5>HlMZ4w-`xiteMXC2ZWM}
+zZ@E>^yBJ^T{kMhVcZ~p1rCjcB)WA2>7eTadA8Mx0gQ(9R=3e+s^U(W#oOSU$>L3~a
+zWUhwKrmF9GUwZMA(s|mK{9^Kf<{N*Hif$&q*1UFouzBszZZ^OC*P7?H<st?D2mE}d
+z&({y0R)1drJAtlQ!OuJ9r3r~_A;zpkrJVNu%cp72Q1zqQK0X8ZPWNA500(xLJ#3;~
+zDLAl4?%Vbig!j|htN4{{eNx?v9N1k(E1qlk%*I)cEArRbUJ$M^v?HsvWH_=*KpdX5
+zQ5C|GT^89b@__zMj!UXdRE$&PHeDfOc4XHDBu93`(FTUaZA61Xl>J#I+n?P$3!rl<
+zz{TX(Cz7}B00vI+UJWIx%aryEw2QCm!M3;IId|Y1;|mGn8}OXh(f6#myu3$3BYT-X
+zFFfbvde3>EP-&aGP}$Tq<>!O(6p=?ue$3(0Qtmnb4pfgq%1gI6hM6wzEO9(b!@FeR
+zgG>4K-@sgJJ`!st?~7@Rc^al2;wik<n-O{<eJcUzG9o~AfkuZ=nVuh>uycV<Ww@Dq
+z>75hFOYiKTNM3knxK@j98pG*e!De_3I3A!UP9S8Z-<%vi_)_`Lw2Rz-zEy$kLFl>Y
+zvfnfVTtU!W;MqK_DlnlTFahcWCXHJXn1G>PP8axV<V8#1=tbYEz$MqREbvq=Tv5Z*
+zd0JIqLPKBz)Co))w<K`kRL1w7PpIL4DqmUxM_>B4ZqcM?!3=tZc?4yFo4Ig>z>|4e
+zRbWCxU;@+$Od7W&Fad9+hUHN&fm&^&4ec$=NJ29xdDLTMGkJRh!2xF>c(q|uxWfI8
+z_Ktq3AiQnUi8nXv{Nw4!Hn5JOto`FZa}BHu*_J5?Cw#AdsC)z&+7n=L^!7sn46om}
+zhxx1ae(<v3!m;$saQUUmfP|?PMVgO-Y9Fb(&x??I=AZ(pWdnK4W8%pR2e@M;=&ZpY
+z%RdhtKDJfs-&OpBua^I6;<xNQ7vJmnjQU&Rs<gfZ*PsDY!2se0qiRYP-iCqu81>wD
+z!sm)^dHnC1#$LzN$!m-lym2wkDk`1Y%&)_B&p=piMAdp)xluy&&>K6mT%)#J^UQLS
+zwdFWd=OpB0`PeLqE-CeNHw|AlqNwb%go58@(*42l@HvN)s`OQd57Td`YB3#un|ALm
+zt|IrCld$j{U9d>3Sn-j^i||cw6$W=NYaEVr;cdAS@qf6zQ?T+bA{~{vRqXkRU3xNf
+zJ~H_laB^_nx)9P{is`2;*j6i*dq8!B99`H1M(a>+ODqFIZR=%xQFo_<>!KTo2T!9X
+zaPe)q8xUA#9o_=V$7=o;H!3V2AvuyK%lyrWsK0L&S(X*xc9QC>O;oW=FUuxmmj5Nk
+za<Ci+^1$-gt+BjsmNzRbv!jdT$+9{=u}mY6EHe%*lN4ZxDwgSG*@VpU4UWcOIS$2v
+z<&j%sdDkp=DlG4m$dhIMwwBqRBg<;r@jh&us7_|tgv|2a4J>m4$3@3A+w#z@vAk`T
+zw<|1nO618hf1Bmu63dK3%OnLDqB@yn6B5hbU;ei5JZT%G=U)FdWb3(k_2GLk{AYK(
+z3qfTogi9UTUmhf5ync21{_?et&0_wtnJhevuA=(Eo$592{qDOB3uiq$U%mF-eeENi
+z+e{Z8?!H7Yhb_bLP0XOSySn;x0cmkBSaq(KVY#&$3+$X&;A1d~^y0&zDdq*xH<nh`
+z%M^Yt6mUbx3+$a(;LV|c&2a83f(*EfSWm%wVG}Ps$q2gk!hW~T0QO!Y19&HbiUFYV
+zuRT1AYS((5Y_jAJoWBH*U_>54c!oQCX<m!2$<{Z}YCiq%4X~n%7gV!_PQ`H6E5Db!
+zf9sT3C21O*btU19zuMjwJ18_k_91CT0g{Ut6S@Akum{`Tl@3yihKnVHPTZl>%rJ=$
+zL*d*j;ZYl>AHDXTYJAuy$tG1a9P};KtRL12&A+W40pn%1CHT??*}*wY@W^5q%1$OZ
+zFIw4*NzO7T8xy_{fTT#0ao%MKYwKl_-_O<}twj5uIzh_&m*F&Eh{sDd-IV%Elo%H!
+zeqOP7ul(Sv3NoS9oJa=iBXnKH*D7TCN@N%}84Ot^G95NFOB34KrIV!TfXoKSY*xr{
+zkdAs|++;S&WZXR8F?CDL^RMcf=XsRn`5&U_KL5kMS<faly+v+T-uN)vBp<rI_uhYa
+z#(5wfh3GyH6nuF&?MKiL7v+rg(OKIAy48Rd_YH-9DTIp-H49g?%W&xHu2I9j(Y)?x
+z15?P2ybj79uP2#0n6_C5z}W+FdOXIGd=E8^v!*6LL(aAK4y}+bYW5@GVrP4&QQIfm
+z^s;-X9Wlq$WJsn~m~j_1TQsQ^&8Y+sWphhL-_=9Sj)qo6huJzzZ6t3rC1j}<zI?=Q
+zv<@Ir8&fkIuMBLZ=TWTiNz*$<%}qJVN}R649KY>GL1*d!GzFX`mSlW4!Q>>F+s>yV
+zcm^KpnSn_7eq8wQotOeJXH0{jz69lS6{1b%%9DVu`BwM{9cM2p0j`!+pPGbe6@y&D
+zkF$)r#cErLU)&Rcz?5eu#-Pu29oz^1zUyGxK<g(hgexidhg;ILAD)2_@G2$5d=!F}
+z+a<)PxYBp%qLV2hSOP*UD!8~L2@D%OQD#L60##y%1mwsPxVR<wF^x&319G_pHtH3d
+zxt49A?gnusb8A6@nJ59Fx+I{P1Ab6}kw^lTfCRG&F0M)f!v;z^d=MpYanH?CZRlD8
+z7q<i-(b&`V@JpzJ9TJHTvuvp)=MtdDR~<|NMuxPFNS6fc79fF(g>SvkkXQl|Oe?@l
+z7*-gU%83I-m=z@mRGkwZhv^3v7q<joSxDevZJ_mk*^1VM&|5gTfoJrg4mv@CCQ>EA
+z8X{d1Y#QFh!afisU<pVtso>(KBrt5CRQ?E9q)O~4OO9LzE-nc?tNB;ocG8I1Gppe<
+zLOrvZ+fg2)=I>ATjGFnZW>qZf8(jMSmb6^;Z--#gaPg*SdWqU^vh_;-IAefB{tkz+
+zGfr&*Y@J{T*FxAmK=$<AV^W>^?uMf$tc|H+dWuWY9%!aQarVE6+Q_=PekQx?pQ!_g
+zUH`1W>V~y>=9t=|qbD%C#M~Zcmy6=6ERR!bNUdR($>At^9YADuLtu5I;wE#<Y{$_P
+znB8V>53@T(@!e1yn%zURhFK<?+5I|z$n258Dub#Vmt*Fb**=;hRMSI7<D>e+9%kJa
+z%8J~h>ka{X^&Tu?ZX{o7qz)i5tFZ$kaj$ATcGzZ5Wwy!OGP53&(eJVWrfzwXf5v#|
+zN6ZG4h|VKgBLI`7?GrwZ%dg&!@8sLBmo{@R!slo`(epAG<_O|4aE1YxU&ojnM8|D0
+z;{q(6tQTWp;1v#acJXWS{u&YP?*j}7%(uQZA2vYZbCdokqE9>qC_PRGwT#FNvQgPd
+zz60Xa^2PRrB@89jS)kW{@Ew?4r5QW3d@=NpT@em;it!cN7{u+@FZ(Wd*fJN_Ca4$Z
+zB3A)4<PeP{E>Ek$w2e<&$c5YyMwv-2`j8~kH}oPAngXyWC%uKupHcJQMYaFnCGxf;
+zJz`q%3(~vsuWVX+HTJx+*K+BZ4OOv)M#chY$RQd_zc0|>c&xae&`hEveSlGBA$>nf
+z;={frB0+lP;2CHE<Q4DKb{YQ2#CH?~s{IG|$WxQ_afvoazbHVxNrt*#a_LE`FqvD=
+zrJpyt4Fpm802*?L#?r4F1wm13%L+8mm!uCc$}FTm*6FmBJ`{;Wg7nJ4$pj)R9{G1_
+zy9{rta>Y?utAGbn2bbj|N&4s`kpLhXVoxuMu%YW$w0s=Mhz(uodUzu;7C^_GLo}9t
+z#wcbL_{*yH`byFVm`TDE((hY(9^Q*Yg7nJ4J#GQyb?;Q2p^WgRDhCX*O_?eCS6|Y+
+zW&f&K=U@HA^W|T?2|;C5BKTL?m1BQwYZ00)zHeID|NNi-ycG@XQ9Cb*QRdOZCo3uW
+zyEtm|h~7_oHw3GHKkaQH#~o|=Ei|uge?069&6S=Udo5A9HI|e0S-1zrPcqi7)$JG8
+z8R~5)i;2K*-Q8oTTt0&zsK>{6p0h_EZ~WM#*2l7Gb$?+JFt?N}yaoRHF)Q}$SwM$i
+z0N)JZMhMqKxTdh|^T@y1Q->j!Y2VQk{JSIO_7p!ZihD5swB18#r&*dF$h#b-W_qZP
+zFxAef2j7#ZkJT1$6vdm4o*+AirDEqe4Ng&;)rF5_bDu4I^3lA^24rVBiob`2{KX!5
+zwTsRytZiR9uG<&j3RlVtDR>H!=lL?6=j*-Nk}kX@ZW4TVGsRUqxqQKk4L%`Ob#Olh
+zLqs8+?=6@sJBhoj<LV}}96b%!>5BEJ{Rh0-cyNhhKE54}fSX;X6R&Q{?|@jDIDeZs
+z>oDff%T%4l{nz*&@xd;KTo4ak!s*1T+w0pE;{0vmw7)WO{;qnMBL^=D#O>;wA$fJ9
+zyi+00-zH9Pw@lpLuiRz~w|&T^+Ij4bl83(Sfm7?ey5+rDA<o|>&URlWu6_VtTp<9y
+z?S=rvJ=T9+<D~AhXD#J*bzSItzDZr^DuVj4K29wbmO(nSvVN=tg)L)ry|w-8wT}(f
+z-+a7X4Fq$t<HLS_e-a^_vv_bmp5K=ArSU7=zuSYpu~Z{pDe*Cp6E-n;f#6|u&D$su
+zjva3d+%>)y55Y_%AGL;0nsGX}(kF6TVIJBC+ukn3oAZl24u^1Qp!LnLMYxuP2*`O~
+zPyJlN&j_gPCJP&Iw>NX@VI7;t5`LWGr4}!hc!t7F77@i2jPQNi_J|Vv(PS>O^17W4
+z509^gGI7#1DoFHR+8>+9?hhx0@;NNIie)5RtnxUUMD;BCfSgciwtM(oFe-VB=S&3e
+zgl<rG{sK(cUJVbKhdZg+m80`7rC*6&6O;C>AyCs7N=qGq5>bcSksg6UTnpDVWDb9b
+z*D+4tFAMfH3nsy%dtbM=#0$G8m>DcgOMyPv-if|Iw7#zOKA7Jkj=RrFiMSe*_{*TE
+zwjE30{b7u2>gi;dYWcXBkz~i}9mYGTY23XG#+zCn@hTL}lU-97pWSDjG(I=P2a60U
+zHXck8H%5gba1lNTT=oMv;-0uBHHN|^{`gb7Ll`!_-ISi^!p^8@G{)XVvq(O4GpHa8
+zF&u2e4*Un84_UwM7Xz=q1A?=tG(R`Kw@)F8&$46qL;IsVL8EMc?$p`-N@Go2t@dzJ
+zeBunZNj3bro5eMsf!2R<tCp5<$<&NDyu!DZ_tcf1LhIk?CfwM-)Orq?kf{w-Cz*1$
+zkA<UTE*$TZ^s+&c|4nxa`t1#bVDF(*xB*oe$A>UF8m~9Q5+9XIR;I}_UeFZlp&QUw
+zhyo^alZus?M1Il4)z4UJO?tylZQSOuwS_}?e#av`omV~s=MN<OB1~;rVtY5^x&;&O
+zco-ztPa59md=zQNUZF((a2$Gb3-KvL+)9RiJhMNt@W%yD5}^hSkO*m-t+Gt150e70
+za%f!Mti&r?fKsQnRNyY%%#B}0T*!NI76^5st;rf54qgYoZ>fK4uz`5D9oK)vajX-q
+ziNPE<C`RHcIHS{x!z;oL>M{<q__@xXu@hY44<s%!L<dM~L@<e<=qP+8$;&vn2gG&-
+z-322QPq=W6L|^^sC|fhAZAZ}_OO3eH81cZFit#G@E@IYY2|#n5Jz^<+u9=<k1djbo
+zBo{j_;gdAzjMO`-bKX}WcFw9}T<bySjO#sl=j<*cKj{-X@mpEhABJ+gsV);Oef-Ec
+z0~h{Edti`9QeBQLx#2#OI!B*rbK?1ZAP#*dyXJw`U%_if_e3(d48ZKtyo95}G^I4p
+zGmeJ7Zx+95wJ9%2x*7LW3v?IpJJ4N1bfC2Zx?q@!2l;sgf)Yw3sY*QT1m6XW@w)Cj
+zcr*~M>jty~tv?dJaDgQ3v+6P!c<+aCOahV{m~O7m7M6jxbe_TYES`AqWga=mM$jfZ
+z=`s9l%5!Vv8Q2P7D)xt!sXbB`ftRM7)*1tJ-8uFxk08X3g3AhYV*(nV!mm)i>)KoX
+z7Qzt0!*y>@c>{+WBX^bgD`>a<ig7?0R4klA)53-dK&66?FYfLE=`cVyhhZW{S!xwH
+z8zMA+&`h2;*i3NsG>pI3-rL_SIRjl+LhdiL2;Qi1h}%&RUaSpE`oENq_wjnTn8r&E
+zs3h>!P*5KCC$e`i(R`L~y{B9ArZcTT&qRBqnl)iHAbjlA*?qzsMyh?6JVIc^enUdO
+zt{15F4#wfD`4kHznlZd7iSDOCX$r_<XI>%(GUXNU(tr}4_t59kp(8I5Z*gfjFt0dz
+zvEW9e<vfAckURYMs3Ix=y{**|J}#u!EHqN>6cn;;u1lj!)$(+<r$7w-|LmQ2d{ssI
+z|8E2YMFkaCENE0vEYX|LQ8b}f352HNCLy_jKuBVW5NxrFh@xUgjU7eZxHc>(c6V)9
+zc6G%Pdspn}y83&6&OA5w-g8TWqTk;i-k0*uGxN+d&y+JWXU?2^Kbo$J4L@EA&wZ}$
+z-60OX=1kcv^u9ME^9BA`?Ilmz7T$LfW74U`WcCG?^d=6m>cVQUM>}=&y${Yk8GU@%
+zhi+}Yj*8*`+Vx&#ja{TTZRxNM*W1LriXMHQj{VYH(z9qCw_1a`*<cAzGG~Wi{?<$B
+z-sz-QtPyHg@-q4AQ43d(w3i%tvm%@&-?{T>uFmeo-H+r<&K<RAa_3Qt#&vaePJXn5
+z+hWg7cz<p8E9*3{EL_}39Wb9S_v+WamfQ}a*r{~)e%1!g=gisO&ZaAT1EP07WAl3R
+zX+E3MBlDi;fxRflTrThET`N7<aNv38=JGXOxHp%-;{MFGDu}$lyRgaWHc5ddrOv7Q
+z+E-|UHM9ZKwEHp|m#{TcbpuIx<h2o|YBywQ&hvUZ-!baE;M*v@OCmf~pFxgGqK8gz
+zQcZdvrI|d+KZ#z4<?d-wg4?F%cstXl+a^usBb#rV+^E2Kt$E+3;%xrxbn2wY62K}@
+zlb^d<HK8n_)~!q~wD}97FOI~x^{>6=tNWH=ZZfdpx4~=LRZjvYJ-J|6X-~s7>+{^c
+zcrGvep6q8S!9sl(VWsz%xARLS&r+enTPcgDNwR%dcaYjMODX4*%1T+!pPf#<$N8hY
+z@IcYl7*<8Lx)>RD4I2e!qtmHhkr+q4u6&@k>l&HeKW6?6uU8f=)<uYYCH1}%*_#HF
+z&9R=nh0L*sGRF>2F~?48_N2^t@`~)+Yck<uWp+@@22`&Cd7li$aN}89toPE|CT54`
+zf!~`3Ox1g!=*@%KQg*+S@X_5`OxmI&CU1Aw^xJY&jfE$us7$^4w1C&l(X)!n@k6g9
+zF^;QiB`|~Ao>5z*MNg|eU3H|pg7){|{Q^O_+JY`<ez<2)V+smal~N?g@sqRSW>#Hp
+z)MaN9cr$C)h!yv=-+fz`R`0~1DW5(%%oSb@NzSg4?MEQI<%wsiL&TJQwR-f5Cs}Q|
+zr|jGZd)dY0`VK)h#pdeI@D%IjBfYx+o95ROKdskgvoN%h@!JiJ3)k@`A%6~IZ2o~g
+zz$L_79G<*=Qx_Al2L5$uvzz2L)2uy?yBIT=u#GDY|1j_}Q}BhToFO))+U3mBjWM&d
+zyU$}`uyW*ykIFgkl_=Za{+07{6J{8!yiw}U{p#?P^yhxHx`n%04-Xs~wz%LmLj1X3
+zP4#fBB6|5}RpYiqymb|C?1Ts4uHFFo=YBOk=+FIXuP=DJ^zPogK~tOC+hsm>3yDAX
+zt9i_Eu_`8N9TZ+&t@A4E&;9B@_pAThuhxTo?+bGN+^_y~zuH^0{kdPw4b9>|_p8Hi
+z32L^qb?Be_)!IY<bHAGJPychjI^DaU<pIl|`_;O!x1)c5?pM3Ju_h0H?pL!3q>Z2O
+zCQ!Dj#qG8KxnCWA9v!{A|L1=7$mXZYzsG*{8lES!ORHyKj9KcM3s(*0U*GOKPl8|Z
+z_UK|yzv|!+&+EMHxF?1+NW+#!c5GJ<Nk8;1eeZFv+i6I4K6O2c@yXo=j+fj$%}SPB
+zn}qSny=loEX6mUzCVl*>2a%TCtA|BiJ@ACm)s0G$>kRPx!M=$knJWb-Mx8BlX1x<+
+zvt)v!W<0`S=Wg-Q?o5=I#Ul5lQyY3mx}!}l*n1P%GqGr~nugq8@rDgMuIx?-XRcPl
+zyJ!J6z1(Q)oxtJAq?*S{7XHd+r{I23BK!@Y_VttQ09p7UvUjf3OU!-olVod8Sl94p
+zr&C9J&yl@whOcRIuKA3(>cBmP^1O9Ud6vA#S1U1q$<^SaB|PDDWpnS+P>@?TtRQMU
+z9{SW%wY;?wTZH54!~QRi_}}RH|1a+e@pTHv|DMi&*JHfjcx|Qsx`@nw4Dve82K%qR
+zi~rsOusHwiMDfDwE{^!$;Q3$R{8u>scX0j(JVc#sZL$74NBpNjJ^ydou=-yw4;D^t
+zr2aV#<E#J1aQ&YV@qdZu|0f!K+-ui#oDaQXtdgz76_2V+cu%QUN_nC89pj(m#ddiw
+zJ9OQ!^bpq2w4auD33j*RUCA}%mY2mM_pMS<+otY#f}IU>=X)6g=i`rM?9QhxJgy;H
+z4m(vZzn^%BfBjA^jx7Za=pxft1H5adfIrO6Vg;h2APQIM!8@+@(cv;3GX|ii{*I}U
+zz%!N0A7N7pL`6Y9Q=Jl-QrE*&f8d$Q=8v!`1!77;K2wi+G0`IvdP_V#@8F?lDu^65
+z)zeE5{)wkbr#TCJRL4JY=c&A8@$V1m*QlGHLfTgu?nkLMXnymqD4XBH?{m0c_~t5U
+zp7A^_Z;)T(x!%$NC+e^XMJuoOCH?Mc*N2hh>)fB&PRaj(Y<<GyZW!=#_lA|EGhWoZ
+z;ML5cRjQfhGdY^^`g;MMt!(#a5?3@;C7$uTNi#Cz4d%7IMW-qw{X)#Cd%F?98^0I1
+z30A}Bmu~oR!K>2IW*$=oyNd8u9gV6R@2u`h?=MZuu5W%ti!b-WqF;-!inh~f?({p~
+zc!W_3THwK6*o+;&BCloHd}UMMljP9p)a7mlceP`$OL{MWxgpGRXp#5L?Uuhc0(nE&
+z63<2VYQ!jKMnz<F;9ofvt<cjcs5W)3DKN6r-)JCjJnXb&_42e%r@lzda!s8ftG}!!
+zu3iqhxO-fjRkI?z2ZtBw>Tq9>$rH15Y<o^FTI_WMzKq55(EIubj#prFvVA36WQLnB
+z6}}P;#5B>O3%taOykCdFEpMo8afU9yj8*R}{_J#WH&^V=s*vX2vyd%Uy)KVC<wUr8
+zWg@P6KlWxgm8$vMQEY|LTL0H$w&fW*7cKLD8h_F~yc%}DyOLmrOW?mu#QDEZ#D6Lz
+zdWLST|4q*S7G~(|i2ox!|9d(AUs37=2fz~eFB5+MKbcG7C{M#}m9)Emau8i6dF(DJ
+zV|5iQ@f?nS<hk4nU)A8jy)D42X>wUtOn?3`-=YtEd4Ds<Pow`Nh;~05&^)JmS-W>_
+zKB^)GS4UTuU1uSD%zssSRA%~{153>-hNw7qEI*<3E}r%1ilyYbZpb76yfSr&WaGP;
+z_Plb3(>|J-$ka4vO6Sf!Q+fzs<#*p#Vkg)6a(}0(0)DhbB2(&3c%}2>o~fuq?CzX5
+zuitrx!(&WonZzmYjtS0Ba~>`3`!l+abU#>TD^TaEX5=SFF5HsKhLr$^$C_U~ZvOu3
+z3Ay2$>{I_y+kWI?PxqJSrycf)`#sQ+g94pNym)N)u2tKQJn<t*r))Md!wdD|=6y7B
+z?}tv=?2$*5OCa6*HxS4+hGmIAP&*bJgK&75F_Hft2;cbp-cUJQgmAjnGMug@hU+a%
+z>2JcU7s#8Lm~~z(-+1Hk|5l3fQGO4ps;jK27*kr4UpTk8Z|?(&Jb6xO&HmN%N=s@2
+z!wYK)%hE$tRTWiI4-74x8LF;HFDtC8sI5t#TUtH0u%>9%!1O@+ZiCW^pIlyDTUl9A
+zRTC;spH)~rE4`$)yr`zMqFjmjOfC=2uM8CtT~?P~Qc+u8oL*j9mOgJ*X;~<}wtQYy
+zVP$1$`ONgf^7QeQN=NQT7naqAT=HN2Z=1liz0y9&c=E&xbNBmkP0<5a-YZkt?Kk0j
+z3!*<AoxmIz`{6S5J_k9(#phc5Ft}S_leqW>i+`+rAn^ROc5(4*Hg^gWL19{(xcHzs
+z_C<%p>C?No^vUwCwD?s?@~_`Hb^c8j|9F!88+*9)-gp)W#QDFvh4?is#5Y-dvi4bL
+z@uOHov<ale<)7Wt`IjtxuEqa{>v+cm?H9~Qoj%***N}gr^qqsL)2CbfBeYMV^y&Rm
+zrw>~E8SN6M?|g9T^ywCVwo{9%zs45QueSIV^p8aKU&-jF57GL>*{^RQen|`Q4HloQ
+zeH$(QX%rIGZ+)I~Y$t~}{~9d*u^kepubk@=PDzq}O$+fs8z7UVU(!PSI*U){f9DG4
+zSTDwzMD3GX=i-yKPeBXul`X`lFL3tXOLBb`oZ#YTI>gog8jDXSK9T>O>s`Vv9OBZa
+zTYR$m$+q}Y80ZuAkJaZo!*-d+*<WYzw{FAu9Ecyk8?JTfllD)GZ<}oVxWT1Q);}sO
+zKAHV`i%(|1Nna1cCz<_h?b7l|W<S^Bli6?7cS-X}X20_-E<Tz4bc;`Bzh2+A%_o`t
+zCW}vIf1SlAv!AQ4g->C>(c+WYUv2UFYV1V)H~mg$KUw;q#V1R@M6XZrNtV9B;*+Hh
+zc<Z6$={sBejc$O5>;J1CcKPq+5EsAB;*<FoaJMso{WeQnKlM*L!^zSwvG|_bCAogz
+za_N)xkMy@w$Je(I-_$~U_B*NVH&}eK@-<p~|0MOl?vvE@6Zq7{KjK;@u6@>gmO6ct
+z#V1SO_(kgUt1W)Sww_*G{+(^eOjiDMi|@z!hEH7jf(|Yy+4x>>@o%u+Pc**QZ|%}2
+z?H}8wwx4bB6WS*p|JUu9+J5d%E<RcL3oO39yI*n2URAh%DtAkrzTV>BaB6Ys3-(Bz
+zzS82aYm@l;OxKU^@JZ%>(BikGe)z=YpS^$T^tl#4D#`c|9FRJFw#8e{@%ig#VEH8T
+zKiA?%C+U9;hony5Xz|JJAJ?^zK9KF~58fnk|IHnoI{yNTf4ptt^uZCS(`Q@!M@g=q
+z;Gr(P-G(^9t5Nq)rNtLIF)qHz;&q#uXnqWgcS(}9PiKoiHi>^rCcE^>{99x3wv37M
+zuYQUPO6FgK#V7Nx(c+V}U*ND7%4hM(+OO%z)aln*e6sdyDt76U)lYiJ#TO=Nza<u*
+ztbQ6TK3V;&w)kZ2mtB_Hzj}*L)_%dcE`2ipaxFfYe+3r*NRs{)ta0{}rO&qb=NbPJ
+z%|Et16G&SyF_1RDb6V#u+ILuj$?nv*e4aL!{b@dCpWo@)s`F`^4B6662TpG&dfBFT
+zkZY%edSy}ehWYhIoZR+o#`ygRU&{aWW>5Q8-Y1-I?#b=X+H`Tdv)i77w#)xfSU=DC
+zInh(*pRoR@lRaJ8)ly`o>1jX9`-Jrp*xi|Wm|ySgrt)_vdJU$heXf@5s!8h4XxZOo
+z=&dw8?SHjo_i6N}o$KswY3j}OV6xiv8}zbUp|>+*e$Q6u4MnfB>80u?`j&_FdUV7`
+z`(@rIT>qmMH@D|f;?mD|da3N)k6s7U)BahEy)kFCl|_~JUG!F8)Uv%T&|hwP+D}Vn
+zuQz(Rm$qzgI(q$0Py1`h?45#M=c`+`cQbnHuX1|YZ%bzHCG;9^XxZLR=v{1jw*MBn
+zZp^&uue<7YdCT_3qW7WM(|(-yNzlGE=v6j4dttRi{d5_6(^{eTD0<ng(EAj<o~D<o
+zUv;5wJDZ;N?PAIi)vpdhZ{>Zi9Jc;XSbxRnHJYCG@sim)3%zOoa`x<gAfdfG&|A_9
+zz1PrtvK4x5HJJaq<$U);ufOS~D(@upf~Kc^znJnyUFVu}M>e(G53ZHHR_HyAUe{LW
+zeS=<u>1kgu#=ofc-I;54<$KP*nWmPgpAOZv{l3#n_v;ObjB91+bv3;${CXyLhfAaE
+zrK;!q(OYl+Y5&msgs-=#a=eRP?)T2W3{y)~jxD$tr<tDi6JzX+J-MAmRQcB%y{65)
+zVLau!U^;qFnx6KzV(dlvcZvo9JyPeBs^8y?UVqaIUzUl=@e+FJrk5(;pU|7ORm=Hy
+z=iYCL>7~kdEPC@zFIB!Z=r!uN51&-!U54I=rk5(;N6}kjda3gL6ul1Hww!MluGwtU
+zOO@|I==C(cRQVR8SFl~n`JRQ|#io}k-#gH&H$Cku#`LSG@#Qu2R&MX|O=YhwkqxGo
+z%HDqHy|P2g_9mgX+VoP{I~Kk5JGE@@TJ)Ms&-OtR&I_8WW_5S=_Ofb8bbWk-UZv^r
+zr~8D*4HI>p@5~@I&GfWC>V3j`QT03&y~d1|%Tb2j#ipnI(inSD<H1t&8U{OisjiRv
+z(R-y8dhepwc}UClwqVgbvK4y0(W`HT-gNX<nqI1UJ_Wr7)3bfngzbB??2T!;o?ntZ
+z(|g2!eOR@teSbo4<hYjYb>E8l*Yr}^8;jm6hqi352EEm$XZx}V%exG{4+~qi_b7U6
+zOwaad6WaS!_DY<+RP$<=PF!!Mr+r)R6Ylp>{q!L8R#rHBsrqR#dcmVw&i5?zdYYd0
+zb7S(2nt$&=uW^3M`M!qUho+aR|Fvc9u*URkpEqIs?T6mV<6XX~>`g+i!Srn3H=(^_
+z(VJG^vb}53%Qijj1IN@$)Hw7sdQYC*vb}H6YcxIE7f$Hk&Ra8Ho!PRzq3G3{p7x28
+z`B#Qs{|j2Sw-mi}(+i}ye(y(beJkv}i(ZrI**<c@@@~PJuft_6`_~)2b(cE5RQo;C
+zTWRl<D0|wcjH$n<>+NRrx?bM0e=ngIFg@*CCbRbwddshB*<N>^9W60E?PDghHx|8V
+z%bh*j&rDd)HRx5EUZI&wG*2%>Z>8yJFV6df$DyeEibv6FG`&>U<)`RfY<jx)im?|}
+z&t2FQTz6~B<v0kv4u5lcH<`Ia<tRpPiRq;($64r|VS1^`aR+*prkAR}yoTPzx3%29
+zZCQ)dn_jB^vLAXq?`qlJB=kC)UaJ0bEPAip-*P=)i{3iZOVwYVMz8-WXD?Mfe}i7o
+z^itLH&VS*0Grd&(Whi=;kF;ElGW5<cy;S{WDSDkBZMhuxqu0UoQkCOf^wwFv+DA{;
+z@3+{V{_;<kZz_Ae(W^H-?W-rUcjB>Wfd>MCZnbdRO#*`^!<EP*;hviWGKRo3!ViLN
+z;Jz0B;W24}-2;J)%Z(F_?M2f4cY)(4a1Z1gO}^ZCriC9b89Q&+Io@Tgh8Ls-GG@cB
+zX@NmSa7TCu+ynjZ<~#k{;R)#71f_Qkl->zYdVQhne?2cPP>SBiP<rn`={*RgcP!))
+zb;ip_JN>1Q7osxGfYLt^N`ESp{?1VPkJP3GCLmt{SHUvK8zLDKP0oO`k+(JZb2ioM
+zkzaz+{~Npzxev@m{<+%9Wt?T~X8czb@zm!(jQ2p*Z?<I8cQHPHR9fIt>^=$Q|3gsz
+zUk>H}5m5SD!&A`f0Hv1(rT2QJ)4L2xZvrewZzPmn4wPOuD0^!woZh)`fAmg;(mNhX
+zZxWPV7q~6)&tpvWb~98xEPz463rs!`Vmf0tlYip*(rL(VL+P)A%aA9-iOAWo8{7eQ
+zq&_;sH2Uk$JombX@c+Qg2`_-Zkggq6xn7;)c#d(Dh~6OMK2Y`hGL0zxCB~3(7vtA-
+zF2&yhM`M3EWNhnpIot+6>Y)7I!{WDv>_rUP0<y;M_U5d#z&g^s2vuKaK-E(&l-<6t
+z3vxI375rglTHs5#4od%7n1SA{a6NyX3zgp~@F92typw!pK()g_i{A=<gZ^tJF28G_
+z(j5WE5`HJo9Y-NIz#U;VRQ=9|Y4|@4s(u4d^?EhWN#$=J;}=E9=)Yrp5vo4xC8PHj
+z<3DDk1r9)71v_KsHmGu)4)c*mLDlO}$kueX0Z{e29hARc7p4UYh<_NWozFMsLFF?5
+zs{YcU>^+9E?A-~~4!6Rt*lmFPmr>3?-@<WF_Ip5*W_(BD@8M@q{=Fb$#NQ27ujfGN
+z7eTc{CR98A@>duBhVdMz`hAb*&ZE)49jcygFkS>zPm3fIe}M7B=}x}PSZ3VSxCK=G
+z1)%(U_y|`Y%b?1C4EzpOz%SqgD1Uc=%IBBEo!<LU{p?|=es&Ms5qlRwmA3?{e50V!
+z9|YCU`a$)x9ii&utHWIU<52x<DO7#5gHwoqVVW!V<Hoz7$~{Fg@!J_UfhyMzQ=K1g
+zLHThDRC}KeRlX7^zemEa;a*VwZ3dP9byLy;W003XrpJs@sQz34)943>LiOjpq3kwJ
+zcKv!Xlt23z-<;&+OGNY*8y7(Nzn8@~<vG1OjpfE6#{W%p{ct^G`tSA`RKNZQl;71B
+zUj)@pr$d%S-41{+Ql35Fj<m}w6I{JEK>2wZ>_Yrp_%ApLz67(O^ml=(zn^o{0&Ds6
+zEvWonf@;U-;H~8Icc^we)8hXMUq*jFxGns8yi2zNsz0}b!_Z%MDEY%jpz8NtsQO(F
+zRlm9L7xcdx=lng@c!-F8FXJ9i^|=P)Dp!ed2dMF4OV}AZX;9^Qd5pWhFM+zgmqKnQ
+zx-EpN*AP@Whd^ED+d#GRJ1C3SK;^R#s{Se=mvF{*kpD8;@sHZ!=TX?h?m8$t55QO8
+z<xuu(p~j2h@Krbn%D>&A>b*Twy}mip>E9034ktp@>v#*_-}vSTSHFGWaMHDbs;BRV
+zJAMFFPirL;e}b{U@snXL{C;DFaXM7}<wE(l4OBgR%3%SO|0(z%_#k`%UIkUYQmA~!
+zL+SN}>Sx<P^|Q^O?0ql<0lmAR%6AD=`m><=+38UIY&KMV47T{cK=reC2fO;13?~!6
+zJ5;&<V%!v}+}Gzge?rEIP~{p0<wquzAOFjC<$D>*@4KM<z8L-+&V%yrFsS^$JtQqK
+z0{JnxHThfz2O(F(Es={Mk1w}7(zqY|iFDme{{G;!Kr!;`@J7--4<A5YVBrPu2Er%7
+zy9xi_AgBKhypHgfVI$%77G45xA^dRoEa7b|{G)@?0xJlA9X>($4Un##aW(9U%a=jb
+z!--J+D-WuieT=^x==#@NP~ne2wa)`^8SQhmg`Z;KC&0@IFS77q7M=|+A-ubVZ))Lb
+z@KVCx8|dsm0cHPTcp2ft;2h*2RK4y7Rj)f5KO5lc^$n=-HSj*laSyx$UI}l3r^2V;
+z9QY`l3OOH=(Fc}bzZ+akex0H2Z#qJT^g(IxVd8)4pB6ZW_)nnpo`L7V)lmBPLFwNH
+zrGGPAO8jL|ddI<fSP7*+2TH#XN`E>$iTE*4dKvIkm=2}C6O{heQ2JZI(~19YKd1LP
+zJQH~hl>Spt`VT?r-w)3seg%}?=}`4KAFAGtGG@b{sGm%eJHg#a|5IP)7sB6!s^6#K
+zuJA6ni1-Dt1bJ&H{h#|d{kNdn;aMpCmGCs;kA>3T7D_(=w?lrXw`;F8Q2O`66Nx__
+zN`E^j{Y{|s-|OYt^#v&X`{DV-*F)*=2&La1O8?_5*Zwa<=|2k3CjM+F{e7VN`4+|(
+zGhKgt7OMUK4i&%D!q0)a4$3TijB!tk-wmoCw6pLJg3jLCP}j+WQ1-4c)>(WFJc;;e
+z7Cz9z`#@bs+gSLQ2e|Z4LtQsdK=q3i7QWcR&w#qlLKZ&MxU0qQ2-QD+-rw14g0i<3
+zde<RjPcUOIsD9HGs^4sFY|3!`=6R^_tKfa;9|1Q*|IPiJd<m4?&E%K&b@CBV`rDa&
+z$v#fbh0=d-Z|B#e#`B>3TMSkIvn_m-vAf0Z3RTZP^>pdi8t;Nie;ZVNo^9cCjUz37
+z2vohLTlg<~IXkaHrT-UH{q%r^$eTj-w=ef}_4GDWeXKR!3Uz&5Y4QayguDdq$n|;*
+z)O=I{Wq&r5{r#cz_J-2y0;SghO0Nx+pHK8~dJjYC-2$a|6_nmGsPY!T5K%`!=?#I>
+z>j$Nm1yygKb$5CnLg}r6(t8w2??I^gFNNC@H4tiC-OJd;*w*;X9xnb}<4eXzjdvKY
+zHHKg>@|g(L?}k9t=Rw9!Q1uxw`McfI0v*u%7|Or*pz7~23%|$0?|`bWr51jMg`W&n
+zKSdTk)xsx2)kl_v?`h$?L6!f%ySZ|GVq9x{%6Ok~h4C_DEu4X$6QIgB7^-{+8aIb3
+z-+$9x`14TL$=$G+@XMjr59dOyABv%_mtCOr+Cu4l%wVVW#2fH#<lCV1=0NF9fYR#+
+zuS4D!HX{GLi_=>PrFR9C-YM`F<oWPf<S|h8+Ck}k(#`2T54HYy3_gM0#ZY?l;27j8
+z*p+@Y2daNffa*s*p~l56jZHhdb;!d|;VYop_j;)MKhwgiExa76y(U`tffn8us(p8~
+z@HQ6y^G>cmybWdlDJc7o!^_a03}+(m1F4#f-QXsy_jiP8a4pUsjo!0R^Y1_4D9ZC7
+z<Q61jg~bns8XvkE+d<7sAMW7Rou@(FPaF-28dL#!{MBu9sC3U!S^L8W;SBVaL+Q<h
+zx-JXhJa`yXzZeG}AgU+SI{J<6UHWIC(%%i0{#dB=l~CztLG_pE@NS~|L8brfFE0J-
+zQ0X6sO1}sy{RvR%=Rx(OIZ*v*I8^$dD6IVd6e|6{pweHeN+A4fsPw17Ti^ny{xumY
+z{SHw5V^gU9lLjf;pdY(9JFi2<Uk=rdwZ=)tUdH!OQoCfrEcCX7OQ>fhR{Q;To3y|r
+z?0yL!CjL{Xd3-ID-YR%JY=qKZ0i}Nxl>Rb!67h?m^yb2oVF8r>5m5RQp!CN=&D#e;
+z>Fo~pLhs(KU4Od`s=wU?)!$z4%>E$p*TLOMKMC@Cxfz?l9`N!`X@N7avji%?MNs*j
+z2$kQlQ1ks9D7{Wlc7EC_EwCD{gOXo|RB^^?*ahBV@g)#fGNwSa-+0Jl>2AH?Bc$sH
+zFN7<%bas}(3y>E=wf}Lji1hQJ(vN{^|3jeqZ7-;Py9ay_xiee{+d^HJzii?Be+{Z%
+z+y-U;3Ml*MLD^pnWxoK*{v@b=Jrb&4_lL6I1D*nRfU@5Osy)8!=<GiZW&d_4`!_(@
+zzZ%MZEtLIIsD6JWY$RwLl>LE_SFtnphqAvnJPG@oLixXTb7%iaDEs$A*}ogg{+Uqr
+zkB7IwD)=lxGob8`hv&i}Q1%ao>aRON*?)60cU?RU$B^y`sOx4ml>KWgz6k2N*%^*S
+z@2C!Gfj-E?q2{N4Q1esJ*arTD-Z$-C`1?@v@5}IW!dF4vAAhr{3x5xONcdAw;hR|a
+z*X_~*Zxj9>sPL_z?EKQ!^@Eq7<j0`e?NXB$LDh4C$rGUJWlxj0hfg5C)5guuYmBRm
+zHyJN7o?@&q78@rShZ?to#nj7}o7g%Js$SL_Z-T0q%S=8FZh`;BCLd|cGCr8*=FQWg
+z>VG2CJh`>W&jeh3HbT|UX;Aj&LgiaxJkXf)3rA9k?+F#ZoAJA!oqRIXJUs>~zipxN
+zd+vWuUIf)n<xu$zg|fFVl)di8AAWN3*Z+0#uR_JYXk2bQ0NzJF-~Z_BKM0lIF(&te
+zZ<F8lQ2BlKgR}P%l)Yz+R~w7hJA3=VRoMOJduOi^N-l#MKiWX$`_y+X{Cuc<$D7;{
+zsy|)*t<#$gl|Bnf@AGe*d=peZ%Ym}DnT0?9wbNS+m2MPN|7-fn=`Du}uY|I<pUEG7
+z8SwgLBh-5Na^soCdB$Sn1mnTReT`j>?TlZobN1deK5e|mc)js_W4&>%@o?h^V{c=3
+zV;5sv<2PTp{N6R*35zK2`B3A<DNyZqoG};by2vqkPxuk?PEhUs-sge9JIJp>$=AZy
+zkuNd18s39^82mdt1g?NR;6GqT_%QtbGw0X8;6eCvJCr}yLiuyKu@cIkLX(HXPmm9U
+z%D)|a5BbMWo%|?#6ZsyK&xiLR*TFkrKD-4EgHOSI;iGVSsCNGLlRzMZKQBZ1^CXl%
+z4;hz0`E#Plqv2=BL8yMz0cu?R<YVX04<7{rA0WR86@NF>b$cn4|I0rN1l~eE8!Em8
+z>N*<*6+ig{!jTUYiQg9Ly1DQDK;SNT6;yZ~)OE5O{2Od<;cvd@u8Y&*Glb8D(jNwO
+z9enm~An-VR5h{EI)OcJCRUZY$amInhy^LLqZH?c&WBtwelJPoNiv0yp>+_?a)=RUY
+z)=N8D_|_J_xrN{Rw$r~2dh07F{lhJMf`yN^@E_lD`d>one+;Ex2i2alVLRHh$e0Dy
+zo_m=5NK?RDS2aSdtImg7SIvU*dm=oJa_kRPUz@{^3IFI#C*KPvAfIINFsS~p8&rF)
+zf8E)C56b?NQ1&l^vVS5x2D?YXRd4`&m+<XOe*d+AUK!3<0To{k)t^Q{+23NVv;V`Z
+z&i-pq_E$jJzW~;e?kK4A<KP>F?``sr{|N-fAwLKee-c!GJOax8F0VNI9ijaH{AFkV
+zRyY*-YN++fWv~<Lo73REN)KhP7aWef{@+f%52`=!2X`la2PnHg{ma?CALbx8LfO3$
+zZiU^Y@OHvWq3q_sA;_DW{EwI1^)L|1?p{!KH;1Z^f4&$991I_TvU@k&61!K!n+cx>
+zWp_NxM($$r%P+X=X(W{0K2UbMLfL)gdCnfgr=jdV2DiX&Bm5`fr$X615<Y~yyUFjZ
+zao6J%D7!<T?CuF=_x<NMLknMpvil<Jh}{R^BZQw1Wp@sI9yw_8*U!4^`D&=^`5fc1
+z#!}-H;}B!e*v+`P@%v}&`Zhjqe89NEc(L(RV^vswn%@Y<&k(!||EEFS|K!0muG6vb
+zf0XY)i{An2y4@V=x@}|p_fzh=eF7@{9yo|{-vMRkVt6<CoCWWI^-$O0Oc=o45UBpV
+z;GZsCEmXQGQ0Yd)zr%x}uCE=S(tYs{mu`Eg{I-Eg_w|!5-3PFdbZeomo4cUWoduQO
+z-=1*kZh}g;2r9o5;Ek{v>Uua7D&2Na`E-WT|MGFC{~o*n{r^ZN{thVpW1#ephSHy^
+zc=X1=>);_!>!cl_^xt~S>Awc0zY0qKHh2rX4r-pLhteMbWq&Y~{vJ^J+rt&GBh>uy
+z{-aL+Y^Z*BjB%E6vT?BS0OQWa&5YkY;?lokTw`2iyvcZx@f2f?vDi4tIMmqN`0c}i
+zz-;`!9;%;R1l!S{mKgJ)=7(I9`#`O;cQ$!D<HrxVbjzUDpC`f3NH+`Wx*PztzT63_
+zA8rQKA6{7P?A-&E@86B58wWty+ZAdZ(GJSqzaMn=Rzmg9>!IvbK>0TX%HDWmcjLbw
+zaQ5zpT6bIxWv?2_zsXSjb_kTc4p8}jj?yZ^UlNh8;~(jt4%J^LLFo;IT9>3l{>%9C
+zey8^$R6lKi(mM@mol*v+Hwen!u2B8+Q<S9l0{=XNyb?-pA(Y-6sD61c<iCu)_($uQ
+zEur+@z1QhI4%HuTg6fBt8qYK?FwQm}ZX9hKXxzux4o=7ZC-(#b$1;As0X2U82To+%
+zdJby-zt7??gSVr1Hk95%_$hiPK=p$;7M}-q$8M%^7pU<+4Ql*vTIuHRXW((@T@O{x
+z^WZ_mp9VEA90fD@F9bF2jf2W33rc?rDE~g?qGc;B;{sSf_%Uz+ewIV|SqgKpmk+hx
+z7-RAK!rRc>1xjxR_&$1_p!(r|8Ppa34pey_GTsVRo^zqfQwg;mIT9X&USBBxc84m@
+zU!cm9234MK?{wqw>rnYT45hye%D-cw%F_ep6W$Td$B&<>1o`;`JQRChK&@}qLdD+)
+z{|0Y`(z_8hp?4+Jb+E|dtD(v>!FVuKd3J*;k1AW``HaS{L+^1Y|NahDp6j8?b1qbQ
+zPKBB$=0fE&5lVkQDF3#AD$kuvLVqRvOep&&Lal2TK#ji#!sYnCKa~G_!~4l+SE%c<
+zqs6~Xqsad|j8{SVe+rcUQ=!&xW8mi4>kH-g9#DRFg!20roYp+`7L@(JLHT(Ml>Z~4
+z)_3nwsYf8+3+4B1&|AMl`8@|-Pd<Nz^7}A&C;5zr8Yd34_-&y4e)m?#=b`+*1Iq8y
+zq1K1Tz|F8%0_Arel-~zJ`F#M?e7QB0{WouMey@P?dp^|qaXWZ8^2awjzu$uL`&B5v
+zFN4>T&)HCZFNC*}&k0cD)*Oo;4CQwhV;Yp-?=nfs@4Ml_a0Tpuy$hlIJ{ijIIWU9&
+z^5Jzb2g-gYsQO-elk<By)cSN7JPf@Zq3U~UD8Dy{^7|<o4HvpS0Oj{R@M-e-8+;c1
+z%PhVM%I~4ZOenv*K>7UvolWc8wXi+*9*6S#b|}9ugYx?vNL6MW1!eybD8D;G)%Pnj
+zhStBea2oPxD8F-{{2mD9_kZam6rtPaP=0>|A0wYPp~m&6EdFXJziW(zP<{`E@_T!@
+z26lv-V(&XDRerw%<@ZynWd3^)s_L(TvR?t^_kmD;cYs=7Uq>gHid+YkZ;3I_m~G53
+z{_`5Acen9c<GIG;jlGQN#x0FMUhUF<U_8Zml<}{|F~<JJ&#rRmUNt^pyu)~v@nGY=
+z#;(S8#;+Qjots43;R@p-sB>JMEdHk}o!&>re;cnho?|@LSZbVNeB=to1?u-|*pGUx
+zfweFfUQ75;sP^gw)n41cJz&%2jDy6#1hsE|4ODmyY>$7Vq0(i;eF=YVne+30<Bi4(
+zjVBvFx{P;=u=^yGKbOL4cr-kl@Yzsy4}<cjKUBV(!t;p#@lxl{KcK=dh4QBoDqRVb
+zKi^*B{CV5>obi6+jmA!J0d_yX*!i;>9!2_Pa6aKnpzNLi<<DQC^4$*}OME(1{d{qe
+z3ttW8&xKIw&Vur12dIAk@r91}8P75v04JdL$_4JaI2j&?{tS}`!8+ufP5yqV8>jva
+zSCQ^Ecs}t<Or8VJK^|>#52*3Dt;uhm&%A^D095)*;C0CJP0oXwciuUd?~fpU1+3&c
+zzXEF9xC9<T`ObkFFORYKBVZMJheGL%f`idJ1S<c1ExseHLGR}!PVWaeO!Wwr?^>w%
+zE8*_sf0l7;<Im@~@Y{_I#vaCPj8B~H^zJYYFz#u5V=?jg`GWC5sOxXIWb*B0+{F0B
+zSuT93F=U)*{C<&(e;I0=d=zTjyusvSjFaFsga_eOuoLV@es7)WuFt#Rm4x2}z3UIE
+zKh;6?zbq*Kb~Qe_(8(7VPcrUhY!BtnH)lA1UWSsdH68~SBOeAA!TwPGY!0j8o2Lf?
+z3kiP_%Acp9{J9#+pCh3B8EO3NG$%h`Tw%;L2BGrr230>gBq#ZqQys5|^N>%1wXhJ%
+zpI-1N*a21({?jSWpKqc3c?!y(lc27*JmZ#d0^v`b?D~5>Jev4?lLtce;~h-?<|KE$
+zy$E%E+zQVkezD23p!)L&lXr)@-qK8d?ZiOfYUKN%(q9PGuWL=tg}UA{>-i1{;?v-+
+z^t*RY@a{7+?twoOe+9gk_+fA#u800m*Htg5^6m$Bfje3J2ge7z^Wbm5-AQ*J+y*;$
+z!M3D756Yhza1R)S2f)3c#;qNo?6!gX68`#efxur#-w4${7s8uh2yTl0VNm)xaBuYc
+zSbQ5O`%T9>{YRkE-vqTUa2aez(=Rm^!T%DU3-2f0P?(P19#HkNJ?sSA!Jp9k=@^&(
+zL%0>;tD*e52}=J8DE+gb^iP7yuN+GM2+6F6#=*9*KUBIN(8~uZ-MR%X-CD>Gw`DX!
+z<<ky!r#{!$x%T)PsvbUt9FZBc7ApQu*b^>?YPV~k^p?SHaFNA7GvBq>y~Z1iOQEih
+z5d0Ay2EF=*J*cO2sCwQKs=a@l=k%X~YM%$8^lyM_pVOf9tD)=$;SI0@yaN7oG_PXA
+zb+7@x2d_c@3@H1x#u>)(P<GOx{Obah-%qv9zqL^LJqeZmPAL7;p!{0^r9T78zZ@w2
+z{h{<eVG=kOJ_65xcf-@+3V0@LfLEbE1j>HU*v+^(l%2H<V)E}fsQm7Rs=o`N@;ezS
+zeI=BB4wQd=p!B;z`S%l(oAf_|(z_lW1CNJQunHapOJEH=0$z#!8w^?+f3AS5;8dvb
+zr?1IdL(TW=DqZ|jP~*)_CZ7s5zZaW)2-Ntpi^)G!xcNK{4#ECE%jwU=KLoY@zZa&#
+z*%n@C;fGuJ<`$l2;XlrG`Zqz@xeCh8r54^Fs=j&{Zz^;0MaJI7-Hb2Haq$lthZ-}D
+z&(3!7_ZiEKhZ)}}b@5LbXBj6OHy3HIpBYTWPoU=U>m=jndB*LHZH-sWbn#~!hl`{e
+zXxt0R&XN+RcbsvQv9ED$$i?4myu^60abKwZvK7=g*i`J;07oD%f$C=qVH<{q>F^@L
+z_kb6`?V;w~&QN;q7rB0T2fUQ{<xufgLB-Fr_`RXZ{}<zZGn{;uvCg=Qu_Kh9pBFm+
+zRvYV~{H%nsUkW$D&x7EJgtvhw!0!v3AM2p>9*297|5A7g@n=~4i55TA;x~i4qxW6D
+z<7LJ&<6*|1|LWpDf%5ZNsQPR$7C`x#3zh#Un1-J_!#RY%b0p7A;mc6<wFXM>dMH0@
+zU^(%#EWXg<`&s<w)7`q_LF11{IDbAco@G4JINJEd;ZE;0D8C<s^7~xl1Sr3Ap!^vK
+z`E=V7?o0SfhcW)ZC!zd)2uklFD8EB+f8r0b_=y(Z)8fCL=KO9n4uTU%_xV&e-rN9#
+zq(9B%Lbwldw#i+M>!vvUCymSCNc4^|c?zsV?qhOiI2-wk$u8YL;c3V>ntTeZM=mn?
+zV7Lsqo5|}Z1-$pd&&}gL0)O+M`bh`ls)<gn61h%GjCoMk?bar@Gk!&(75+Yyo#DnE
+zjbG%t@YkT)=@hsW&W9Jnaqv<&6sjEtLAApUQ0=g0yi0$b@jNIy1L5&-e|QpX19d%o
+zf2dtAP<9@NvU41ie-n*|K-u|V9P3567M8(AsQ!8_ls}h4*{O!I6NFj^SB`b|h8eS<
+z?7cdM^$C0y?gy`d>PHtr*;@i-uLR28zEJk=8}0hfnQ#^1qoMjw(BzI#{paIRF8(p7
+zezC&j)1dlA$mDFOezB*?X;A&5X{1YkA5_1%%H(6=g~->9;OErH|9`_>`93zj3{}2U
+zq1vwws{Q6#crSPf^8WBLxCgu%J8ukgcAhe>gtAir)qazp+Ha(VcYr4&w}Gd^^+Q=V
+zVdr+J_G>UMhO*NKs{QtcYQJt4{`!zWU@r12umU~<uONLpC_7&bc6<}c&goF?b_`Uz
+zRap1|FavoXcmRAX$F<W^sCJqJ)lLIV-VUmrzR7m+&q1}*ohC1VYNra5M?<w!(BzI#
+z?ey^>*3MAvw8G@mpxWuqgV`@2|9()<jkbeaav9GL3Iqlce-hO7yMsvhrmzCOc94^A
+zg9jjAXYwSI2g81(?+4XScZC`J_w#|SzupejUmM_V*gqNW0*fJ+RK{q?QS*#mP<q1$
+z@>8a85LEx~3uSj3xCi>L4{&<_gtB)Fl)W<{msG~Sa25Qrzbn_vQ1T=2A@~3+XI$?A
+zse+95Q00A~pW{-fa-Ja>yT=+!p~kHPE&ltyPXAqz@K=nFLFrAl_<f=5?P~nCk4yIy
+zRQQ9&+b#SOsCnr$sPcv^d?Hl8%QSg=D805&dhhghTme-tXG7IX1ynuHhAL++RJuV>
+z>E7t&{8$2e6MhO*eJ_A&$HSoXe$I03^Z`^m9RYj6iBRn{1}fcNQ2JkGI=wfc{COD4
+zpDQ6<HX|FVU3NA89CY$3*cZFoiNvp?lH~X6BI%zuJ_J?IM_c?DV}Gc6+8!$3ANP0p
+zu7&C!Ps0AhUklaGE`#!aDU|<}Q2rkXRnDGJb~-}&{}GiU|L=kFe=!`0ULVMin6Vj@
+zzu)cW{QcPYDwMzHNG3jHoM=1*%I{sE@=Jrt@9lk^-;Y6sFNX?WXyHddm8U<<gxf&b
+z`F0=I&ey^$<b$Bvs~1#x_k${L2dMJCxVJ0sYN&j!fy(DZsPayODsRx($@p4N*Io}o
+z#a{(gAH(1z<ei|(+tIjwFX!LOQ2E>omCt!_EPAyTKFz}SweTPJbmjaUs+?~_mGeoc
+z{(L=DIj@3!;0aLv6hZZ;Q6}#N<==Zfcs@w{%a9?M_t<#u3h##F;E7Ov?`+)6_;`00
+ze!H>3xL8zu8Ox#Cdkowg_J!?m`70`0cHcBEGcGh9Z7ee88iP>f>;_eCHJaoV7)ys&
+zLbd0%a4+Ql?dIf%A*vbY8~Z}_>#x%t8;!@q-3gxx>B1R(q0;RE#}K|fRKM8_DxWuZ
+zb@9uf>>XzOau-+cm%*`wSDHNDxDVWe@JDuL9>jhQl)O2_^^EU#a=gQMl}P<vU_1$W
+z*FBtz{sgG{JqW6P*YD`kzh}JKc#iQ{W2tcpRDJd_c_*lP-30ClU);gne?JRV?p2U3
+znQ;?T{6$dd7eJ-UgFRptlz&ZK>F3CwZ|~}9EmVCz2UVXBLD{_ss=h-|?Qocd9}LwV
+z`$E<8cYkqw$XEc?&o_sv$M?5$@{>^Yzry4z;6vzL0?X*%)4FgSAurk1)z@*xfyTXz
+zU5sfW_5AHNj&DP?!-G)ue-l*wmna^)dB)Dh|84EUKQ=ySyb`M3&Vs7P3X^w)Q;@fU
+zs-N3CbIuO=awz!-sQS`(Y>Llya`mF`1XVqaGHws2A+OsCCFw!w-w)LejZp1yHI&`?
+z7T*WT&R1JHo(@&dnNan*smbqc;lfwL!w6qy^6~Jm$lG>gydmA4o6}#Y_vIq>bq!R0
+z%izv%k;Tt~dl8>+JjD3WX3qY_uqW~77%Pn1!Tqq`0m^<GDEs=(?(N|xQ1SP}?!*s<
+zYNrE?pSE}Me?;P+G2RQ+&bPvg(O(GF-ZfC|9fY#e&G_o3PX3#5nQ<Xh`_3}?P^fnA
+z1E<3-Q2Sh+p#1(B<9lKEU8wjsl^J{(D&10e1Uv`IuL3v~d1hPJUX!5OcO+E%4urDX
+z8LIu?Xyf|D3sB*A!wmkr7OLGVj027T-o&+YJybhSH~C<w{;;FTKc%^Le-o;|ya09G
+zJp(VI{?7;m0tX`ZfI5$c+kpYd^NGKcqKfT!)rNZjeILnmu`O~oJO^3a47opChAeJ{
+z%sqwPKb<aiLgwB?@10H;J0dej=>6mA;ugqV;bq9;mdF9P6j|IHc^!V8ge-1~+yqZY
+z7TY7QfoCC$9gtZ@Yh68E+yprY%aFx1<gSqNPZ!%D-vWO~3yixCz6S9<@FYYhkOwKN
+zCohCEkxzur!DCFWhPNTlH8})VBIlbt6+VbO!Q@d;>4!ksrwzRHeN3k9z4Y`sFP`bl
+zOV2Rw$qYk*14+ka73dDBroiD)<=cLfz*ars4lo^V2UX54ururmxy%Ce5k?iB=fDES
+zMQm)EZA>@n%X}2xM26yOV}r5YSYXUHrW*ssCNlQY8yk%E#sXuuG2Iw2HZg8`>5UD>
+zdSihx+n8<)7@H`mm)_W5tTz@IvyJJ-fU#*yOK)s2)*B0q*~WBZz}U2fr8hPh>x~7*
+zY-74HU~FRC_WU<C80(D%#%yD{F<@+B-1gEN8;teF0%Nu@-54-7(b2s0#s*`(vA~#Z
+zOg9FMO>{Ufy|KYqZ!9oo8`F&eV-w@Km)_W5tTz@IvyJJ-fU${j+)Hn4FxDFjjM>I?
+zW5C$N!04qnHW=%T8t)aKZA>=?j7^O5UV3ALvEEo<%r>SQ1I8xCeJ{PS!B}rBFlHOm
+zjR9j5^MRM%*kIKBq3{A@wlUopFgBs&r8hPh>x~7*Y-74HU~FQX;m=K18yk%E#sXuu
+zG2IBfbRX{J%`1WM?`1!f<>c`1V_$H9lf%D<eaZe#4*&l3^g7c&K^7UqdpJ4#`_bp`
+z<K)gaxcFE1b#l{<PVQmx;ol?v+2ru=2bY<C`1gKa+S{dH{gz8Vr<aq{-*)mLK_}On
+zJjDEOGI@mgAO8K<K4vfcd!y&}bm_yt54zII6Fih!=JPizZ}|5S&$aw2E&jzlUHb6v
+z8$P?h{9%!+&&`=m4*$O4Fw<`;cJT+Be)#wMb}{|*kc&Uk+AF)v$%ivhvMvaOe^0Nk
+zwO_r(ON;05fu<XsKGosLADVom$?HsB$GEmthxEY5JY>=*xTDr<_1@uH$uIN2<lttK
+zI72WPxlMhb0}oa8xtDOouc4mwxx(T<Jl4hQw_6ln&-ka${n;+P9?I&Yb*L9_=_gox
+zXNw<i@tv)|Ew%V2vwxn&H!;5Ha}(pd>{WJl_CGdxT|XCp2b&k2($WJ>+?VRpHqXhG
+z+&Ag-@;E1Fvsl#UmoXO4O_)9%M>#qCd*d?>b#nOkZM86w{dD??K7Icxe~@WseeRgz
+z;={kEy3a5tGd+8s!zVjANW18Bqxsk1NrAu@g)Tn)d%&Am`ta|Yj<)gzwP54ZVYJg<
+zeXx_+Yxn$F)5FQzGOq2~COxpm>T`sZzkz)9S!(4C|9*YfiO$|SOCK8V<nZr*9&h<&
+zk8t%hd!&okAs~HzILyh}8J-w;-_ozP{=SLTclh@*@3r*d-|yVT{BN}U@1(EG|JCNd
+zE=$$-YKwo@;-9qmrm>cPjq|5^hLh8+e&$(x`1dA1wDxTr;rzYK{Lf|F&}UYzOCSDy
+z*H=yM%*}*8SFm7Je`vhc69XeHef<qi9%b?2-)|o=&HTB=#q0T^(uaQ^{qaI4hkp<J
+zSnE&W-{1bq<nZsEuQU7M-!ETg_8RVX_S39>!@m!FJ>^t>;omEM(d6*&N7tDg{ypej
+zt^UHlZ#~N7>;bO)gTnQ>laqh4{+(U#@*iXN!oRP5y0w4!_sAbHIsE&-PleRp^?`NP
+zo?7qedJo$5Jj&wNTl{_&zj~0%Z=0bmeNP)-I&+<Q<Hflyet^ZNTYNu@Pq+92i|=aj
+zf3^5EOI-SE=|}Q!jm2Nx&e?C^W>lZO2fO$Ji{C3ee%|5I=URNF#UE<%+16h3EWY02
+zYc0O<9+&=Ai(hH+uULHjHZK2Hvt9mOH4yN5rM>enTQ{71wk>h-jh24TAx>Uya(BjY
+zufEM*VUCOMZ1(ayxcGHEJksYyv)5qhtIXcTCRduh0&Z^gxytNyFnd>;y#}+l-%OX^
+z5=+0M>Gw4KuBP8)<telL^^j4Y2Q2?5E&ctL{~9aLTV^la^xrglOU&M>mj7x?U%ZPe
+z?`oTGv=6EJS!eP(>yNKke>~0lV<YXN&uH`SL$kNJ*>5tr$mCZ{zRC30oBXK7uQPcc
+z##OIBk8t*f@8{&)Iwv1v@%0vep2Zhf{L>b{#Nywu_)3dE`Vj23sSjjZel?pq`vo^U
+z`_EeZNQ>8R5qkaQZ!Uh%Y?nUQ;=8wZ@p_3>pLgy030nNycKxir-o^jL?Dw~Lx4%>$
+zSaPF_Ki29yXze%3^rxBr2=k}juD7c!ewM{wY4Pjsa`t|(`1uz9y~P*U^>&Tr*WdE1
+z$advB!}RA``GQY7dly^zvQ7U&D_^?xk8Z42RbQR!o&LA1CnT?a*vXG=;pBBEIC;6|
+zZ{jO0eHZJ0OH4ijJ;kS6e{5rN)7I{KSiOU#r=RP?UWcdOXxHNbrXMu@Mar*zL*PSO
+zFD^X}dDDi#lO{iB@*0zmG`Z2_b;mmWCX?G9@8s1cA87I`Chu<PSDL(r^qQX<uJzmv
+zoPmFmD{pY}V-}x%lat>wx$`YfUTJcp^|x0{PG^%&pHIkN_LkUqyWZp`>%Z-}4iulh
+zm#e>rEI$1E+6`te{CnxA9qjbiFwW?68~-bP{mzm&J7wv^zdt_C(uaRfo-?#g-_~Q_
+zQ2$>3^<MJ86F~B6o1d14{XNq8cZS&u|Gs>U`NJ~B`&`Dqp1m$k9vCv&*1!9hT)<|a
+zJ_lI&v-fxMc#|u67^2VB%#X6yNIv>}!2OEkb>*HI*vkBA>fz*b%-`_uw^v&Hx<j13
+z9`sM8?`-yd=<4J(pSkp>0WZHVoZO!N@9DR3={2lN)?sgbzB9Su9Vd4*`|Cb&@|o?N
+ze!X3<+2MG*{<@kRwDnDwI;Wp&>zgAi|LmU5UXO77Gp_2h#_FeGgp+r(^w|TQzk^J_
+zbI`@lu=Z-O`gqmq%f$u)*_OUw510OQvmgFF^}9?C|313TcdI_q`#THk2Xg(jtq<hd
+zcr@AMX(snP(8Z55`FxB2)a1uZ{>J1frhlx-hacq9mz(@AlM76K-t^xvId_oLKhxwZ
+zEdCCYueS8po7~OxFE%;d;@6nmVDS%|{2=40t0`Chn_0g_%ejTI@_Dtf^0r&X$_I>$
+zl^^u!U%Yc{{ARRgbbkG7V&yTu_=~&6#*g;N5Bls+^U0sjj7{IWU#z_6fLM7<Rjhpf
+z?y>TXZDZx*eD!g{cCqoBSI5eyZxbsQ&yAJ!+&#K}PA-a-U)VlY?zwfWe9N3z`A%Q{
+z|Joxqe(+yn<#t=e$`!L><<pLgm5=w?KW~@V`0V^xIk!`+yv^)b`R-j~<xPC`eGu1e
+zbp3qx*I4;eUw&Wt`pfs}vHHaYv2s_R|I>GijlbNdf3Qz~nNNTF!r1g%`ufwIJI2P}
+z?(@I9ul_Ig)z81Z@?;0XpS529kH`ml{zPQ`h)-G|A|K<6@8OF--dF#3`0BI7C*RvQ
+zwmcX5+H2TRvGH&E>f>o&eh>Suuls%1*Tuf;^|tg_``>%|k@EKP>_z0aedS;28xI<N
+z<HddRV(nk=>wm8gkB$G#SDxcoXQTxppMU$V|ChVR#((9z{&!>kk4}H8@A^+Ki;aK&
+z=vaA6pZ&9Z*Z+~e>;H9M|NG82zOOhU*8XF@>){>Wc(-L`tp0w!_CMk9*!b&x<Hhm5
+z@!~_@_3)yveh0JeimtErth=J+!;53(QeXY9_0{iLzWUwO*B=h{)$en@`n}axze7u7
+z^FPGbUhSvH#_JqXwEz9Ljg@PC^*h~Hzwh|!_gi26zT>OkZPH`y@9n$(ZuQk~KVSVm
+z?5p3~eD#~@>mTcV^*h&BzZJgv-Ddk(|9<h+?+Rc2>V325`YZC)Z#Q3mTI{Re*M0SS
+zmal$C_^yYcon!MG>6@Pq^40IDzV+B%ePYw!J1kayw^yvZ>rSz9m2Z8uqi_Ci!+Jlu
+zK5p~n_kl0J>Ahq1ulMD5voF6nzWfII^4qL$ti3M2@pHK^zn^^hz3<EKa$kNEefj;n
+zAU41Ic8isD9yz)`Ciu#~na`h5K7YQfj!mEC^JgcYKfQhBKh>AtGrs)x^sR5Z_{x8$
+zFTdHo{CfDx{}*5RCwtdZb|C!G`$*C2g&iwm<+r`-BceZNer)_G?|O>Fzda*1{(SHH
+zh{P}P)&~)}Bt2HYSKC<mN3VV&`Z-?ziO8$G>mwq6?X9;W@+7bRBC-xqMVI#!uRlcM
+zYkl_n`0`)i^@oW5**^OdeD+`S*}u_e|3shtH9q@K`s|<Vvwyy?J$FAcwtVON+Vg-e
+zvGEuA+OyKvo>@h)`mg)i^D|$2E=rHppXO`NlL{3d`F!ph|GRtsMB;0F*TV_E^;jF<
+z`mwq;*8b3gW96R*#mYDN*5`wK`fGjq*ZTZF(|3J;HZ<1$OkeyYpMT?g^Yv{LW78k$
+zlRx#^H&Q=0d)He;-o$5rXZB&D>$|V7d^faFe0H;e89sTlEn?#b`Qo3&cy#(lef{Yp
+zpFClcSpD<KIoiL^J$udW=uBQr`~ok1B>vnTV&k9i{ENgd_UYg3(|^mSuVVwz{v7Jl
+zU+0rg^2zu3>|No@Kak(OI<wD^s=CUWiZP`%`Gs?f`}WQXR@TlaD=iums>>@~5E@pT
+z)u&J9fc&Wol4w_#&MYsisjUjNLOZihbtqKqSDaaqKdZ2M){qLGd*sgz%`FlM43!tj
+zwIQ<#`7gJk%!L+*5`~6}imMB!gsMtQ(4thq;T5&z#f3Gc73IB$7S<F_$?TIqF;rO<
+zst%Rcc){bRvYnb=J+HKcf|r$56b-JJ?`11r4h_vqQrtw9lUI6lVQmuqMAegAKdypI
+z)www{R5PirGBmhuTw(dlvQY7%g>yrr%7;{x*M#QR1oEvg!^ck?GAw`W_?)5n-CfYA
+z@wBd2wbdbL^*xcga1xa_D{od|6-`6sDllxTw7j~eu)L<UuqH${iVMku;Z+rLqkPDj
+zQC(A2Sfq5$(Rdf~2iKOC)s&X!my}f$qUiKygl3kO=M)u%s;k36q4MI`fZFoV{K`;K
+zO{jQSRaHe*l4?%UER{*rle9`=^+b(=X40}ox?T#UAr)1j7)3Kz6)GvCwDjBjqeE5I
+zP_2<)G;2<E&7Az=!m4?tgt+RXISM1vjH=S&nW6DBW|MqkOiV}>7Y@>erHdtx>sGZh
+zp!xdG3=XNSIy&TC@8kO^zO;Pi_yM`$;b6)*UxNPQ#*P^_u3z8&sgwqIN}0i|-l?>*
+zdXMC?3l-<o*39AxEiLk{(IFMZp}1Uwy)+{9)_^d+&!P0nc$Ho`!}7-W8Zl&CGKJnF
+z$K?!(v)ngtWKLF}zH#CGN0nEHiWuU?_Zl~}Ph7N;_3Ga{VR)a+thn%qx!$DA^y2NB
+z%&VQNHp$DHnpajmwanK(S$TDH=Z0#kyuo=&&XDL)j&YoEpmb(!MQ!!qx|&dRPL4l)
+zBww!>IiZ})EY<q(+H$YMrApyEZA}tYM!sq>r>I5y;R<hsYJbnJs<{=);TCCys<W$R
+zYK5}wrc{k?5jXGT49S}tu2`BiS|Kw_GgEF=MNLIfMOj!WTEk2f<pc-!Z-w5Fyk;wr
+zt2)J%RhN?!Zh;XwL+a*_$eR@QqP6LLed^bm2{+hpNw0?awdo_pa2-9lolGfs9eil%
+z%usa=mtmq>Gd22aYt(Q(fm(u|5S3TL*fAU0ezEPJlN0PWj>))iCbMnu*Vxhp>MHNI
+z+ln;kZ?l!Saa*#PnMFf0j)fbBi*RUyD)H2!nmLtPR5K@0v)pnA%wPx~!V<QI1>nrX
+zC(ZWOF;R=!xZyrGm>HZ`S~F{Md39k)Xh^W`sN(#5{hv2=%(P)+%7$a3EWfPm=(+p5
+z#lzf+;@Yy1xAIQ0Oc`2QU0GODG|M*=wX{;mn>ls7FHM4JJAqc*%-yUL-`|^~s<ZkI
+z4V4tumeu4jIhM~H#e%r1vZBmeLrgJG;?rA1-qb!t;hOeWvm1b8<0C_3FIGR}GY1SS
+zFDk68u65b5s>Y8gnOW6Q3+fzZ!kD@H=$Ww<8eKU9@<N3y?ztVAk{K*2t(+CA()vE$
+zf4`AP-Ti74iI;$x!Q3itacV-`6HdwOS5-JK_ExH8*Lvr2B}LYh8^a*i+{QK7Co6Mf
+z8cbZ3QLE{VQIWshTue3oc5^Y6_*=~-yubKW)t2}s<X4%BY1hmwE{U9(RiV&a?pnqN
+z``LvuH27PtlZ|gxt-SHAs<Ah=)s)rS*WHW$w%TpJv(4;1Y{<~O9Np-88(1`1aftim
+z=v|`L3~e!&(8e+vb0KXUqmj!gcKq$HO}Py%cGMNM5v;lS!QYpnn!Eq}0eyRIsE@sK
+z6ZQMwZZ%QA|E*S&tN?n|6wYk94<?-XTbVS~8ipNMTiJw)TlOO6(v4hY(Tj&*U$;>=
+zJeV^qXjL{mIK{t`Nwr*PwTalv@>h8gdlCK$6G<+)a2dGA8WOICVe!?F>>6uj@|gDU
+zUt3W#RoEQ2H_eU05SzGBHin%<SLLtqC((7-Iy<)AHkfVyIeHw?yeS?L<`xz;3v9eI
+zRgAPpBEu`Hyp7W4L{qCuYcS#Nt5R;#k18L>&MeO*3iEgh(VV6#R2C|%ZWd#Aa$}-w
+zE7!upd(f@hrjPP)YH3Y5_xY0wXOu<CKAdHYHk)Jin!Q`b{K~3|8N{{r!HTn49-0@q
+zZ?NY`dUBA*bQ62~lhwy|9pblt^DC#0FOqhiwnWEye@5=We79B6V^rK7a!!svwcGpi
+z_A2AHD*d|QjS}6;#crDVH6z;%Zkx5`1d*-H7IniLWvy_-v#LFmmUU&db()dF*^Y1$
+zkE2_{-9&2})Kyhp%3V;W6Q7>_n&?f?WNO+1^|wgeo}G5=k|;4Y*^W;NrN~B3L@D0m
+zNL-}DrrM2l`>#n0#@?Ra=hW8xJ6!(M{v9s2!Ie-eQY#qMHdsQfNVO!<YT-Jc5j!fx
+z%wLJu6XObFlcZWW#Oo$sA;jw@Ukdnjlg#;kwPcgKU(Ywh#YMNY73WXjtD>lT^mxsf
+z3QDONQ#~m(BbAdvDXMBxXeC_q`pXb^>BlL=Zu9!1Bjeow9{t(K;8%*<?2l7WCXs6>
+zF4{d)h+IB#3QC_mI^twz5XH<SZl>6-OpsyJ_T?0Rw671v-JZtl$MmFD=*RS@7WJcV
+zp2ClWeIrApw<J-BEC&4Eho^pjc%<6hV_{#8ktde^gyBitA0BxY>5mCd(Ejj<3vN30
+z$HxqzDVFa3bgqFnD1lmdgA%l`diT4OvM7<eZ-27HB}t{9s358I6P3fSA9u<sGpneu
+zx@J;^yHxYDYAWW(FCg;g&#eg-4h{x~2PZBl8$Lg8>a<}clk+v@#Ty(Db+aBmmyy}W
+z3*^2fx1v-JMS>+GdW{X02m89G6EjB!gR^Ij3i9kI@}PmRIirGkrFpq^)qN)OET#XH
+z5&4LfbvdI)<dx=(%`2@Lj-0}otf1c+o&Wg1@+NZtXU4+&7|m6asa>ydwG8)aCAt<y
+z1cRm2!~j=O)F1(~=ZuW6mz*(?x@oyy{GNFA@_*q<W?%oQuYR0xIXX0IXlB34=BGX3
+z`Y9dlx{cetnLQ>LoI87LFx-twkjqQPQa9Co=r6sprsPL=9{S9ou8zjhe`<!ucl1<!
+zDKp6Vufp=;kz<Aq&&<-{yzqII%wT2JoUn%@`_ivx*31g_E-f#qpi9pgt!~YRZt2mX
+zV%m?Ovbm#wCm%C;K&KOM37qW3(IF0M#rs)ZSXN_x_M#y2?{{*qpK6VxMRi=z;r2P2
+z>$&;z-q1F&88I`fw7jymxoE?}P0+WZwubQG!Mf;fU}MOL5gVGDX4gL`E1Q}Bz}zU=
+zAC#N7Lim01irnA&SBBAhrdh$Fin*0sC6Rr6wx4oF<ju&hDJm%{$?;~kXj`$X#@}Wu
+zc18KyZ0TWkinY$KE9gcwm}pTFwKdv05A&w>=Cp2cX73Vq?R2Pcd`SsshO-K*=jWAb
+zaZ)zi8ZB-)@*9SnUP%@>|Nl)`S&2RU4P{Sa@&CigI&-6!J&DE4KXzeT=hh;@#Krrg
+z7q+Rr`6Cy$sXfVJp%uHt{v8*#sa^U1@LEaInSR4K;Ved`%E;!0@8n?Y_NcAfrleGg
+z>?wHL8mV=)ua(a<o!X==t5PdPc0W>PDO)U>TCml8V&CnHq_h~Ryv*J+^h8ioUF7g(
+z;wo%~s;?qjlcKpgTcI4T)K;iQs<su%;R<erYNUj&nv*8UtL*Q+W5qMi{)`iaMWr=$
+z+<@@Jqcp!}_~EMJyt&oGGAk=e>*mk*&aKwu&7H{c)qcauyt7pk>JV}UPpn}h#M6&-
+z{>au|?~2M$d48YTY7T*B_AZQimjpTL^sJq$9~N~^GC%H&=KPv5IirH3nh)M<3&xjo
+z^uFT;<~^jvyho(YySMH&r}VQM&&<Bwtr+*Y<EZ1R(!#Rdy1&fHY4H)!faZg#9K>)Z
+zhG)hcHjRBvL2VLO53!F#b8~Wr_0}zCZ$0R?Bh3>Q=rD5rhFXql+iH%*THE$1*K0ri
+z7S4%o&-w8UnlsF{e)DD?m0vR^x<mNNxFF}Ki4*gyg7GDdY4Mglif-jZ9t~-|M-{n=
+zJ#zh^uiGTa>{D4Csx7XV$c9P9TzZ4I8<N?_-H<nrYdoHdH2a9)6t8LcCzzi%lO39v
+zn(@C^qz;fX##doV8m_MDy16qdc!4xs@2z1lJ#wYS?BO;)(TjS<!x4q#sS`dsN|_?@
+zgQS#6q8r#6C#8O*gC^0g^QvJ)R4t^qB-0~r<oI)qx8q)7+n^+=vyKes-ps!N9&B*R
+z)Q*Iwwhi#0^+{UJTFZ+K%(`_+QfD2hL^qpmfD7?SnNUlsvw97wt*+t3jrUpvF9`BV
+zX-z4cF4a?Wy*YPk-X!}o`kJ@tF(<(h8kerF=1?zrsl!wc@fHZ?pjCBkWo1QGO|`f4
+z?uGDhKreRlk|wWcdLi~wcQ~Z^4al*vi!a}^@Rr|z^reqflh?r$z0R04g=>@6B=Ht;
+z-l?JlZ$SF&tJ}6x)h*(*)=u=MVgkFZRE;bSTWME)J*jGZFR(WtJqKHQ1JYAUV8Z_f
+zWHLSX2BfbpQe1V3-+<hp^u9h7_2%FPnF)_yza_mI=GUf=6vK7&<aXkYRM;DkzT(Cm
+zib$!3>vn1(S}j3OaBo0*c_ob18<0LvHl+RiXQnpXmaaNidB5FOq(Oh1t;CJnl1=~l
+zu<$#JzUuYVD0R5~QmI8XbCepB#L<OirQ9uqq7IC5;MSWPW`@c`RYb9x)gfFjtXVz$
+z-2}}s?g=HjI%#UwTqKi9r5*@|Z$#_(Iqif`(tE|sSb3$%^s>Tw8t}tvk;QJL(!I&1
+ze@SUMg<KHg$oJ6jTcyr)qBQO*Y*nK091>B^2@Xk?LwKBNwX*tPtCS<#C^71pL46y5
+zb&k05dUK^N8Go8chf16#&MoqZ^e%rIw^WYGBh{ENe}qfUYo+<sHN|D6GxAHT$LI0w
+zGWt4>oSLzm)vl=<T$-6bcpm=^o>!B&BMs0!u=g!1F%MpoX!rLXZF2;>RmvqO>N_l2
+zr7X+(cAdJsqoW=GC-b8SP0w^9?YK>p0aDkEWi@A5+>5f>*=c^X%v0Ya8D$QLy0Q}=
+z%kU1Xct;0XVJ|D_w->($y+H;uGo!v$D117i|9pFr-+R6e(qz_gNF-B-3;NA<FV5>o
+z4dQ_2ub2s+r-@X3)WI6gM&w5RPgYZXqe{kLmY0*%8*<L9)5(Wo{Z$-$pdhMQ+?foW
+z%Se`IpV&M{hO-QYkB1EF7e3QaIxPBhNQmsqLStf1TEyn;oghj)_WrRCdlLHaM?d39
+z=!7?Rc<+_OT;b8@DUvqb0Da3<P2A|vs<fHG+DgsCzb<wE((+Q5arD>`)7_JFx2&w@
+zDZTmdk*4jqUN^kC*Uk10Z6!T(lq{pn=8U4(4$b+5Ur_sv+58_qg-Y0;{%=lEC3fYH
+zJ}i~ci>%(sR*KDCA%38n;|99o5NF?tL*rtGxR_q9!;)jX!)^&P|05sVCUoEreO{Z;
+zgI;ztZ&>pyrmU^>_`<$YEHma%<VbIVai>{JnAzr(Xl9EZ(d=~D$mEsYE7KhYOqgT*
+zQek6cNg;T-++KZ4bgnXL(J;zR&uQT>xVEGuROKsR&M0lpt7lQjnKrydt;b@w<n<6H
+zW^G2&c|2=VW8_s<Pb|$}P*pZ8GpG@pr$yYCuzstXUv4UK2YNF5N3RFmmqKO+=QN)z
+zj$QP*e5y11<rh|0YtONwe0X7L8DF86pWnNrv@F!Sth7ATr=+ZKW_5L+LqqIKj<4oM
+zQeVwj<aR4LLz<T}GOxC}?__soaiiGG$%;1_S60rA+7>0>G&juqrn%^%21kSsI(iSd
+zY{BQANx8*duvcMWF@Kh65oSlLC-J0?pt<FQ_2RAWL`R8pBTGTG^LRRQ&ID^||Mzre
+z_KMj?jd5^zjDvQR**U0V%(x*3`I7_9F%A+`HdoO&I3oTEi(ad?!a-V<@8b-2f16pk
+z#>4Bz1ie4li|!v+HLmODj80M&6u~x-H$r>4wh7KvGx6Ar%Am!3m!g^__J7qz?g;+P
+zE9HD^!VxdCSIjQ=uWvBdIKeWt6CToLG}*@Ra6t1HLx$(T{^1kyy^D3X6V+fFc8?P|
+z|DCFaT5%vIam{9h_g3PUtx<O#N!q1(-{M!FjZNs3?aFLiquNQ@xE7nADr{V{w#~G0
+zjW$22*tllpE48|Dje7fc8`or3|5R_($BZYv^>T}D!5NXFwoY>Ea)u`zo(9Nz^F2}g
+z3?J;pirE_qliAFh7g=$5XNK$M=hx(wO<WLmA$*v}JH?}`CbIMCJ2)P7CV-<Y)l;-R
+zoEQG0p8Q@V6;*jNa)!md7??kwBQLhusPj7hJlIu?e8<=Clt;`#^WP~C9YAkBKN0i&
+zJCS`SRZ@Z~qDgp0(%L%O$hKqZW~17U91e*wo5`ZT`Cuwf`=ZXh@P#Y$Qyv2Hcb}-!
+zB)?l8iBHJHWEb1Q@ejeg1|A(89dmF^7eeZ<NeuQatmO1uF<%{7H@`aA*PR>~oS7MQ
+zY#@9|#jTis&FhSEsTFS+_%311@KgG_O)78s?S0W@%je2s&BPyA`|T!MdJ#YAIL3L$
+zl>RTsnLWnNe)&t$e0GmjHD7Tb`2tXHN1mgU;cx$pOBns#rmasHd8QThI(+Ms`yLf;
+zV8Y1boz^FeI2`k8eCrM1a`c<<EhUV<99v3}H>P@6-)e67OXt^RX6Dt-$O|1+%dK5#
+z!h*a~ce`GO246~-TqEv!^j6aRh(Xj7pJX>BdN|blJxJWXgdbBR*7u%L>3fk{p=sZs
+z)S_lqR^snh@+V9^er5J@<JVZei>a!xjE7x$zUe<QMMTfanbdXo<=~v06yK3hH^yf#
+zYChOF24e>Q6t9B?GwuCt_j3(;(#_X3_tw?V4A<9n*pb00F<<A!wD0pj@vHGsZ;5TR
+ze6;NPBg)glTW`OiJRDJodd1hBVrzaa**CbhG!f*@95*yJNy45Pua>yO#p@+F!y2y?
+zcW^acCDlXn$U)T+{?fRI?a@c8{2HkZN5*XL;6!r!Eh(nXCVUbix&5RXEgNR8nv&XZ
+zLXFghBjvR-TK;-%uK6UI@v~E1&XD;<d6N>~qSclRiS4IMhS9%3;jO<g!0WrwmYI!W
+ze~N--W4x(^S4qr5H^JBQ=8VwlcEfY?-Ch2E*~Hvn{(jjczmM98l@>D{HQ#MUPj&HM
+z1-_9Q==aJbrg?s^Okx`6_sJxtX;RFr8?iUExLVk#d9|=&*r<86uxi+dd8KT&$ae;9
+z#2gd1T2xjEzF7I!U&D!7?f1$nQLFtvc|}%du>*R7@68T>l`dcGJB;_eqQBgiN4CC+
+zE9U2a63vlO>%BiXXa9WJif>9!)N5KSq5FpJ=D8(qKR3ZQvj56_Vg}{kEuXkWwOb-3
+zShciRHIZJ|!W2SB`z<}|cd(w|{=?P7uW>a}rBQFp+6$mj-&&@JqB%3eZ+Pa<*BhR(
+z>qK9T=gd9SZK}mBO{3j!InPk|9nRL|IcIE=JY!~t$n_BYH8nXS>WbnP<k73>6zhOQ
+zX(RUt?q#T9@#Z5c?uH|$StokEZ?B6DNs!(<-tE2Llpyy1^>%$f3By3xKgo&&d>lL&
+z;)_XDd|MzOAt6H86#Vb~dhPYcwib)Ycv^eCu57oi>wR~h`n-zCtXmTNTJ3)M!>mhY
+zorF<M_2uO>FYGD}cX~f*YNFN!FpeI(5TywyCJ18(9Mjw$c^X#r;#eEnpp*QT8(%yR
+z#B=!;h}&0oxK!|J-5a7~0F1GxYBvV>^RNbr=5xae?0oaoqHed~HIq&f)c7=P&g8!3
+zW_A=#)&J;7dC3wFMdq-&7B}8zS!Qot%a^NrBd5p!U@VyR`LUJBK&98B+a;xV099*~
+zB1_8ZRty3PtqF1gIITNTE;WCv#%7s4Rx$djKgNor^A#vEdK5<6s*uy!Ov=eY#YP}V
+zg1d1>=U#1ry<v8FYRz!5HIQu_rD4@fsL1|@zaDM${tPKL_c-W*3XEc=f(27k$p@NH
+zg@a3LxrxhA`zEbj`D?snob>ah=<c##z`RYp6B$n5*!fH2=@V#sX)L{BZiB(VzJ2hf
+z3Lqh44e)tX<2Ta?5UTD#hETnSZl!VpU<;Pu<{233OZA=?CaCw^_dz|cEJ#@|B<K(T
+zDXyZ#M7A)#PfP>EkPW(Q%Z04D&=VRVp>>w3qkYa&3mK!cRGGywOUccjS!$S3yV}DB
+z6V{>N*L0^m1Ekw+1x@>~f~J93fghb|tw6;Ha)A!{)vyAW>v8{6F8Am4s@xwIaKggn
+kv#n}HM~%!g0>)roBVa>OB-?*#%h9IE#<(~zVR2)AzlqNxXaE2J
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..f338de748b189c6685c8fd0bccef0871848fc056
+index 0000000000000000000000000000000000000000..1e5916c3743b76da5951c2294529e1d5176db35d
 GIT binary patch
-literal 161632
-zcmeFa50q5bedqbA3tA1bQ40Z*kPV_cgAtyP432S3c5u_>V3}kPMmDx_0##iCSGR0%
-z5a5YCgJf!!D0r4p6NTB;?Beb&n^YA!N)96tV9uhLKFc_oS!J3`m>kVn1!zappowNi
-zk(4fth4%Bke_p-!`Zcs{*?Z2c`kdGG-hKD}?(g5dzu&$0cklbtH~;$D`+^`7@TY$r
-zT<hETcQ+S*cXFM~n%mTWU)W}f247Pd{<_@rP2B6cS&95@*|KZvKip;S?ek}U`3s+I
-zKKr|$U*Ck+LgF88&jf=4GA(%2=h5$$Ej<rC6iL{!<&&#FySka+@wlUz6hz6ewKQLD
-z+44YPS0VZwhv)Hn)D;}~LdL*5`EN482b#sgyDeKD`g-rST_4@D>o>o)b?4S?TeigM
-z{lm{#K)>%w+`TDd`2WBD+e{F}*#q3NrTEaUoxR(?>=Kgj@*6C?x_kfcfH%z-=2yIo
-z{sC{t_J^7RN%F7#ehcpxU7<(6Wa<6F|D7>%jl$CXM0jy}?{)Az9w&k4SeXQ6o*n<T
-ze09eIrNToc;Q#8cZu|$$tZN;-c9(P-c-Q;evSmk4UvW$CR|{X>+Pi(*jwHRC96YDS
-z!E+Pg`KnAcqW7y`D-?Ha*}eViz1trEzfVT%FFAO@Y@7NQj(?BCzsGHoXN7~ewX|j1
-z&cau>+LuZBmbO~@{=&Wv{^F}v9_{Bd!A#O<A|?0A{4D3c^vITaKX>y@`ZE5DkUZtq
-zw_3eWzCZknOt2J;*8lfR(Eg8XyIpTe1i>%xtLv}0?gZei*JrgW7618J9`EK-(VzW_
-zX&Y;H?A}hJ>)o+kX<SRV#FU>keE9l~oeu`FJiIdbJY5b>ZpY58VfhIBEuSpxL^Mqh
-zA93YX&-L>Cy(#7sk3HT|c=wxzx_;-5;?{>Aa!odc{w=v3+l#w*?%cY)_?rgK-Eq9`
-z|ILSXZT%`~`b#Nq$+NFh@#x;&`;}e2+qZ1{%8r6>=_zpT>v?GF&OJ^Lsqg!?7I*dT
-z*_v~BB={%(H<_HkCn3)Xc~k29WbZ>?E9@#-b@uNk!1-!V?{?aX-lyn|>bW1PdJ%!a
-zXc9R0Z$$#VyDa|`di90%5Ih<DHS4zSG8%e)dZFdP)jNB7ckP^<zn{MES9-m8LOCbs
-z4f9Nf&(7cc+O8c5I6n_=2{^yHqgeRL>fO6aTet7(E&9esJ`Xpd$M?&C-M4+m_O18t
-z{@T}e>@+wkUz1PjQ!N8h%IDNU?&|I7{R#|TUno8(Nxb!qXKQa|gMMzGc<USAtNw9z
-z%Z0bg!N^<R$kg7-1^xGCAKh><+g5K09zB04+ah!J#6S?N0IxYqf=4%u-4ryiYjfIo
-zuY09mys4}4);CtyfYWc_4GUgN?Jb^<-Q3lv-_q5n-qzK)LcJf(1dXNBgT|5>LBrzE
-zU3+`jmV4v#|7Y#B`@qAMeY-q!<ZmdG-y1Xv4+o8&LqVhXWYBnEC}?c02aRppgT|M4
-z28}9pln(GqJ*9*EQdenD(0I1|!SQFaT;&h&%T>OMU#{|ee!0qb^2=4egI})l?fmMR
-z$30heF28ff=R)hV+1cFB9)IM;pz+8Bt{1q@aXn|~kV!E-ZF_Xfc-x|`M%!Cmf7bT*
-zgZ>$R{f`dyb_Wgm{Kwl{x*9>tCoc4McQwYKE6B`vIlm@oEHq^wJ)hrXdBVGTeiJmT
-z4H|9V+%jHT$8Qqmh6KzF7G@hTOB;ci3HqzhFCK^RHamDdDe$%>;BAY*>vQnnrQmJb
-z-UZ*q<1S><g-p7TNf$EdLQY1`_59whM(@6$aS!<S?&lZ$?|~=xz>~iVPp)L&SC8_f
-z?*RD^b~RpxFArwk_ws|s;Vm>ALw2Oqk0HN7<Tr%;D#-6U$nU$z?<n&7J>*wMel_G*
-zMSj8&U90E8t@m&MuQT-mIF^nCjT*A8BHJ(zc=sN4dBDH)l=93a&s>wIn$3=sP6UmC
-z>>TQ!W70~;yBe1T{{-}(Hf`YXMFFy<-rZ*eYi_-CHfTIEJ9tLzWA~Y^#;&FC=15l~
-zf7s^h<F}XRQeRhNAeSAfXKw@l+s4UnU=>yd4f>A9yB*v-JTJg=)zNp9vQJTVKlShH
-zYW!#6vZkx?m1P0^gI4f+aCy-9eRTF1I(uw5JM!R)pi$4>N*%Y3x6J@f<`WlGzDRkM
-zZTnysZTZm+9b9_Xw~RWLQ^!W$ub^)5>>=OQmB{{dSEG`h2F~rkYajnXc6$A#>`kVx
-zFto1<8XtY1rG1ymQ%-p6GS3TwMxi5U<S+0`J5qYj0&wZ*YFrX62jcllJ+1wvR`Nej
-z{_{4!;eV@ew)_%|{5;;zC*L`KZM%FTKa2aBwoGBBliMt4nQhbZd%7Bh**wpq{`t1v
-zJog2E4_*cE68zG-u0|eu3Txrlbkg8c9zGS|lX>66d-zn?+<Y${=aEMNK8IzF^8A#m
-z>oE7|fy%2-EiJZvYJPDS{g?XDZu-R4wKqOLZ2Ic_Sx<A&KSp1DnZ8>6ayAppzIWQA
-z8-BpEVBH<u{qM#1(kiZ&z`)P9xH|dGznDmS7wHf_qT^5Be*1R%_Rtnw#9p+a&to?S
-z4cVB1^1|`&2jhRFHZoA&GA>%ZEf~Y5T%li|2~Spk^S56PzIV^JvfN+JX04v_9w)LP
-z82?T6L~K|aI?<NtGIglV?`NzoUd|f&>8m{tEk9<E{~r1p^^;59`u6u#MmSy1t|`wY
-z=veZ@y?@p=J(yh`UU-t<-}vJo_^irShqs(;n_-{d&+{0x1h01;l5D8Yz*bs@G<4p`
-z=c2{$36+oXBFV!5J_wH5fN;DF9`|B*s_>%i&aTEH*M{NGM+NH=^(bEz9(x^Z(%0m9
-zvYwwBeLrQ{{XYCShObb^PpIB*{gS_nE`4}9zR3(^`hF{qs0=3hCO2E(<Y3S!90(dc
-zdxA#sVSJOL&NtbMZ?X?xgt|&k@+;ru2*2`8hWMr4(*7UAN0EPmjk3PV9OJ7PKZX9?
-z`YP@G-a7usHSB0hrt!#Ce(7uFzes=bn=OsTH=w^VJ_feBw1GC7^ffjnd;|JG%Jmyx
-zV^fN+A$UE&5xi{{-VA5^?~y;$7l+qJpNYNhUzC~oa$$SW_yqn?%zxS$&)>T<Qvcbw
-zZ_=}ee*EFC#<soKDf(RXzYoyg8sFrA^Gyz7+YUM3<Z#?K`B~$eyg%lfJosc+qwff1
-zhK#N4|EHPvzx<UGLF3!>8NZKzBK!OMH}Fr6;h)s;PipulG5-VHdY_WdfZeWx?{WMO
-z<XXi~Q5!dY47Q^8w9A7nDV<TCIpncEihKdt{L%@0iO%eZ{D?vP723G<CC(*$iPPji
-z(`9XfyRR1UbDmRwI-9b$SwH72`OZ0;`5ZR#d8;$K&kGlPoC`r?xA$?*<KrwQKYYr=
-zuMl_S(Yw;&{xCSM67IKx`|Kut$f|d_%OjbsP@Z=3+-mXIM%_JKjjQqvwj+zB0r~>J
-zz^`{%(CE7sG<wl-@7EMofWvZ&gYjYXyb|12QFiF2{=RPVzY#P_Z(4f#c-PCj(kAi&
-zztD~TJg+**`wDqqHDjK~|4Go*7|l+r|5dit*r45O93R#Ojk)d4*IQ%x@Brlt$iw*Y
-z%YeTWcr7>e_g<#nmx4wX*%W~%KIP{Jjlu#4s{>fGEUf%|U@YL86*Tg*xn3aOix%ge
-z+35K!=PwO8IHVOw6U^TI_TIE_(wES`DZRA8;#64I)$~WetpJV&m*w2UFLUpBX38N0
-z`5uLyX1UT~(x9<$sF{{O&GQ*o{weN{+k4~N%(He?{#B}PbHUr?6yIh>!nbLq?wNtb
-zb0+s!oA(Cyp8`$B&w-|Yi~mtti~h6*jTg8VZ;jmHb#Dh(3w_{p_#mIV#pe5W<O5H9
-z5j*ys>^^P0{@Q(K7$e*9`rG*71F{3<1@!m2G~U%X?a}kqTrd)3+D#jh9@KcgJF}kt
-zhcN(sbCouh?CYzY!N?5CM8{?}ZT-0V{0!sELE5GIXz^Ka2g;uV)}0RK9TQ;IvT=B|
-ztc5iPSWh#4`*w@uJ*QrUh5=~My<qElI{U@(0s75B`p*Gq8#J^9PYjhmKVHdxVO-+{
-z)vvtO>}SmH)9$xgUOz4$X@KV;?B!+pjKMPZ^ub;pDmOr1G}xIL8Km!P!-tknJwzWU
-zf3regYGH2xj}7B(_?5ojRr*l&e#WEsgPX>Of?>yq)$C`<|5=yc_T|;==Sce;v}^>Q
-zjo|-zV7GnC;K1{sc?KV78-zAfZ}|(r{vxoy7~=daa@2gwYxkWsV}djtnc%PFZW^g(
-zGe#c<k$-${L~|kY%{<35$jZ!zz;n%s7(J@ka>B>x5zo@28uTtfSENg|qPtJ{4%J*{
-zqCT0lrao0WGb0(`c%71rOg&jw&uGxBXV~3SPt>QVSAvmG10$-pHPV)XCpNUd1K*-n
-z4n{i2vjyFal`W=}B`sQZ2t81_s9&P?HKDDTG)tTOqgtoM*U!gT9sYokZ6&)NeP|ya
-zgdb{CUiYlrd57LweY3W50KN=nH<+^CP7g2-GKlO{riOkFqK{SS<8WrAM%x;sU3xzt
-zI-el>T}5Yi&$G6sIvR|$z$>-&K)>Z+WR8A^gON6V2Z7mktL?*lnrK_ZyV|Juy57ty
-z)GApctBY#G^mmq)IILP{3;NTJTr%}KWmi+So^3JmQ(Ld0cWR%tQL9rPR+VxFH}YmE
-zV_=hJ@Fp!wn)(B)=k7iD2>&FmO_&+;-onaQn#+y{;HG-2;2{_xJw^MhzNOabbhOxF
-zbW44V+J)gu&Zb5Cnrb=g+F;9wd@kv|mwUA{3oY%Y-_g8NmV3)TM+5oQ?xYj7oaM85
-z&;1PHnYDPKci*a2T8tblU4pCkf+>2$NA!;0>acj}>fzb&inOqvas*Dr@t-uqm!ji+
-z&hp;WMVgTjX;B$Xl-uMyRzE8}7CiY4wPC9V8nafp7pye@VSqljI&ArCa5494W9rAS
-z5AIp_(K=+ueH~-i<*D_jvb*q*HZ*Bpiak+Z>c{JY;5TOMm1N;<Fu#dDvxYs2^<%Vo
-z%Jr*1(YPSBFM($R*euhR&{uh#GIYbs0kvQBrt0jIcr}Q9GQ40MF^CTl>r1dzgV?Gn
-zwrWa!3HEjFO|~z2nlh%|ob^A{r-V9Iv1x<ohx(YP{>$E)a^x|3$oo(ai?$y%_?F=x
-z&qfDx&3;R|-K>{9oi>k2qwgF5uR-;x&KDbSH0r(dteS0CUpZ$WJBfZ_qt*9$pUU1x
-z^~>tC!7&0``X$&`r>a}SGiaBNccYd^vXSZ=)W+2>#C0yZwxP9*JB`lC_6pauHH~M{
-zk!SG(ylz_f(o4bT*VJq5SiJ@=l7sANXz$CD*x};!ZRyX*4(EcAp8>CLC+%=&N?Fpp
-z9ah=zz(<vf+F^|qW9_Bfw7+U+$@VhDSiQnp!swFVY15}bv(dL=q@RIzbH#^pi?s>7
-zvw3WPSY;i;>YD3IE1415r&N7L*G*a8hx(k2^sB>GZ>pq)edef@o%%b$R3A2I<Vrur
-zJJa8rcaj-82yCr?$WKnQ_tlE%X{R5VYwVNc__+>e`zy8$4GIqJL+w)dhW38cK92>C
-zU+&r482pMkbJaI@I=m{D-uiIM$i38K#v8OR^<Qf<Zhn-!ru~vf{kd&3^XPNtjT06z
-zM{<d#895mmpf~6IiHgTNf-`Fy-nOf~H|;I=MQd-3+{(^ok|tW~+3d)%Ty~@nd~5XS
-zzMqthuaYhtJzq`vPHSgmQzak6*HJ6ekIr{|C6AFidG1ji#c9UJsg<Xhb~He`#l`h^
-z(6fkqew=1}po+~a-=j)7BX{6fxOSaN{aCegnrZ8%&(2LVI9WWEE}kjP_mB2owx~uq
-z>7@7DRK}FcdU)B9>S)|g3HxdC7(93{7_u+5;fP<ty?I}8?}N6NFU|Dx<LGO4y5ob!
-zkJFp@7pI5#8`_2=??#*NswN%UOq!$3-5a_2_m%0U?=*B3oqs}_(Z90Z0i!tG^m`@`
-zX@+N{d7fDwNASo+@aS~;O`7MiEo<=b??<OK@yOaTs&AkSPW)Dpzrm?u`Kq>P<UVSB
-z9@`gqIvwwat$y4=dl^t$`Vrxkf=3V49IWZU!XAdtrtR@gJW2Drs%3{?w$;ec&|>b@
-zpV;--s(Uu?Qs}`(hV}gwc2Yj7(VblD)Z0p@&1-l@IpJ&SbN2(-yy&y;C-5E^s`q-l
-zzc+&GX>g6MJ*iENu{IRY7BccPs3W<KG$sFXnDKhi`2c0-0}QLbYaf@MOxXwMbUpz6
-zs`Ufpuj;z>7qvbBevfmRxtz4v1^ELL#<(WU+E~Rf$XAe`vCzPAKAgdoc4ctow`_IW
-z^f^W6Pvj#0L}$~Vh}rgR!nS84w!KW9F3!P^tG#U>Ug&I9#r3VZh;4@_#<u62ZRefQ
-zwa$cX&(fZtYp{ZCAGLPa`_;`p(CI1fn|+|IOR~2zg#KY`?@Su-1Xt~5f^FxW>Eq2i
-z%8gq5Z)D$%{VCddKX<3IKk(Q4a;86n$D%X2)^FN3c}+h^eX+ce^~APm!EZczo9n+L
-z`PF9)l)=@*_wxj0TVLomxaV5Y@;USyhBc2udD4Ynz3lu3jggXm19@$~E!o)iJ%DZx
-z($B>F2A3w<o(4C=ckGdo=P+XrY?63CL7qvQC7V``*tAYtulx#c8{}6QdFCw40sIHe
-z1IllxjapjG*o^*XKx2qbhX?b0-hVLok#6{qbv{WMp9Ea3Pcj>QvGYK7%)Wm7ujHEm
-zUwrWE30falJci(zwnq88d0+b-gU3lz5BHQg*%kz|+lU*$Kl{Z$j>LG?MlHS04xIPT
-zR!=P5mS*Xvv+<qIPf?#*1io~?)3-hA*GNbF*h~JX@V0Hh$p;vw9cC@8TalgZTiko!
-zCR|z7VeE#>AKESVZ1Ck?^`zP@+Kb-Ba2;*-O`W_`TTx7miG{-lTcQ3Q9rQ73iUaUt
-zDB1dVb3H!IPRQ0=ygfMe_FciLi(CVNUE`M?%kB^hKj+HrU8ms72K?;@2VFdZe~(jb
-z-rt*i-)hUV7s0$QCEnlL7K{Bmq`Jgk(F;x{?k^4B*jmN#%#rH-##Ws4V}Hrl*fe-5
-zn<jfPP3=-PwruqvT-#vo-^KHtOpWJbd}L$#6w9Y^Fmu@DiSc~T(mst1%xVnG#e9om
-z`y|H!YZL9d2L4yAXmK!e+&Oo@i1n^We4l*p2{zKCSzDzwlWNxb<ezZ1R&7&0hHqO2
-z{;+L#ZAthQ^$T%3sQycR1#tQ`uJV19wTBCgPKR|A9bC=R=O(G6Go=ob7Nx=VZxd;-
-zeVnDi-A|yQC4~m1MQN~Q4GpXVsa-Z{h}4mrq>j#%I!s!W20KQdNQ1SVmIik}frb=c
-zh`uOJgDva*k~j^KI&zcL(V0?*NsH28{RU5iZA0{>rVa6H+K~Fzh|fj4yPG~=W6N+3
-zr}M|~xmb%ED1YGOAaf~0%%xPA5BZK;htN9QK>1dD==qEZgO`{7obwsLf&TsElACRx
-z<$ar4nK?OhcyNZx2mZzmxb*L}*>u_Q*xDe^W_$&m#+HoQ@ztnX=c^7+GkuEI@|x>-
-z*4HzAe%8+Sn|tJ;Iu&D3BOP9i*BG}grQKZt-mzk4q(Is+#%;Z%)#)>8^ckT&8@4!T
-z?W#&SJKr7|Q<7$Iq<rW%fUijd&oB*{2oKpx$!ZbzVIA<bR<V5$@oIDAKN%ZWc6QUf
-z>)>6Ix2roW55;Ts{Z|z?_>b5Ai+ld@%zshOO*iurZEyYd%Zoal3`mn+FR^yuSgmNs
-z>SJI3_WUIs!N*L!6(=X&-6K4a;iUzxJhG<zNmu^CZ+h95n>=^2oGtzv8Mt>bnO5xB
-zJ(Ou#JZ)zUcP=vZF}l`ov@*3my_Km=w=#8p&}dYqEmo$(UZ!)9>6|9NolMo9Bp=N)
-z7`c)^oNFe{$}l3=ic2d;(uUm_0~(EPjoLM$G}#_UuCkNjpJXLF-sE4CzKQ&^?_&I8
-zJS+Pe@-N%!_;)+}^J8=C!&&}i&3vcjpG~*?vvWALVr!&LWG(-4t*%YXgMafT=O1Ma
-z|HvQmk2J$S(wc3+rDY>&!&a8HvX^7aq-~=o!oSi4{x#{F$Uplo#=lB}e`U|VJK>+^
-z*#qJZZ2R-~S~s=)v+0(9Zk}y4%D-t&|2+Q`!*16;%^b!A{d4>qj_?n7R{tWrs<^ar
-zByHIF>18L!(d?xBqe0HmT%+lOU7w;D*2(%Cjk}WhZU5kW?_4}yL9xlY)He{LI$L{2
-zCc97bDJR4>l;3A#F<;4?DiEvHLwr?{c%TP}-D<;+ENxGXv&4r?*$cw_xnHx(?^L;H
-zoTYq4Gk4;AMy;(7V>zGr%Gq4=GG;80pQ&H#yX0rCHhWRzSCk$GpM+1*yEhTrxVOv1
-zR?25A?6a|uF<AS7Ay@}eU>!`rI%r|3UoIU=iPIErhaJ2pQ{Wv*z&jGbZ72n|qYhR*
-z1=dpuSj2{T-&HY>*5`}tR}pR}9K6#h@XjRQ5pyPZhHqz6a69K<J(mLO`2?)zBe<RS
-ze6ukd@<)wKFF1I_<V}z%F?!MUsNNSNxLt1I*7FiEd{>E2eT6u=S52OJ{*~3I6qjgZ
-zd@ThwagH(AEvuV+Y|S`6egOaBE_^fg%ixn$@Wa02`l=Fq&CklPpM`iWe6yL0t-UT$
-zZ*_+C%SzzYJ8N}Adh<=^dzHY^r+x1xTW0r8VjVYwJNfhAFFnoo1dYNr#gS@l+{`aN
-z(M!x=VVmOKsQYqTfA4|}dnz*F-VOSdaG#6ju}Xc!mAbX5U6d(Zwy<}(-_i>%7L@0{
-z4K5ax*umb7#DdZedufN>uIAxy0a|*9#Vc-fIC5Wb_oZv#P923eyP9PjzM@C`Ds7^U
-zNdH&b4lShpfV3#D7Tsm}B0k+q-xl?;de<RK{HsfgT%L8rWLn#FO#8fyU$w~kRfgBZ
-z6N>+ZJ8b?ak9(0-z8gNTfzR|;gV+oQ>%m1y*{p%SZcBF`zr8${&J!nGWX}=)YYpF+
-zzS_hIPmseZ<lyEKcTuKv*2%&BmWcI~ZBtxm-wG#(6V$Piy+-)|iere$0UhdDfgDyk
-zIdETa_oe5+lR6Y{9F_s!0{BMd@LTX)^ozgpi>5^Hap)awfnNMO{KiS?T^=-Eck#@-
-zC{r48^t#{Dla5}V!x-el(7R0ZvVRNP5aKSq6TM5JcbTJ?dmm?8szWbz6pmh>-d}O_
-zmfi`yhoCnHz07}TO?Xmz7b9Q4Pm408eU4uDTYA{h%X8lXC*M8L+aY@ALT}U8Gwn?D
-zE`Z(+M=$pUcV9XHz0^_Ie|>syfnLen>#T2U+B1WGn(>ZL(>_#xFMmTZw`ucy>U;7%
-z(AUQ`Kd}AOe1{{ydF;38yIdM=>5$s@e`c;PKb!aST$y?B6@S3w<zBx&?<Mkjyv?4g
-zS+-1R7In@J8m~m(FDGrLdq2~@e<}KYF=?&teXD){BJaK5G$o%XJJ0$=o3p11^-QDZ
-zaE5)FnZ^T0GL5Z6nZ~xG^pT?TRrU_)_l;B^3I8U=N20%R`(;nsIX0~=c|S?9$oNR|
-zljvKL^K1DxRZsi)Bdb~(k92b_;OgMIhX2&U?;HHS$@L1?t6Z14p5uDn`BrBmzSUX!
-zX4y#jLoLvg^sTUmF<VJLANm~lXvsO6yx?IQ4Lt0~1bEn$7`%BAc<9gsA4c%7bp~EX
-z3cSS$c#9+OmU{dmeuv;KbMTg@z*~`kw;}>>rN=J;Z<T}BodR!70^XVkytN)b8wX?j
-zBH_2r!P}4mZ({=9#t6Jk9=`;<%?@6Vg%^$6?cElK*SBr8*++B_aYDU)nZ_qr8?52~
-z#L8?>l-V9Bv(uHqUy7C4lPI$%Qs!Y_5B^kSPPlh(yiD)j2(9}(t#<qv@@~JQ^*{>m
-z4kq9ojKDkOWntqSdk(Lrt*@r7ucoc9rmf@O)J^_+esk_r>A0)sL`prU6ZM>q)N{t;
-zO)P%-cKplR@h|7$U(Un7oICzqZ0k|lzWT)yx{yC7KNFjXpIQHm^<zq^f3EX0!L#?=
-zYUAgup5xwwvrqe`TWj3?CVu7xYzO)C&>{F&<aa=$_S1|pKUbif_SN*hkzrqt?ITQ{
-z%h;<IT%MQcOJ5|<E980A=IQ0Ve5=wKV0YZo-}@52>D6@KboW)k!9RV4z1{!7uCeaE
-z>Tr7zJMn_G34Q#^=Pw-s=Gj^OeJ|jXzBmcY=N-)R*y3MxFrNpe@S%KZpQU&AIhXG_
-z_E!74&ykP!rG2xse*ZXEKYO^(NBy|n>nzOtdElK18ifn!!r7pae-1jIw>&7JACl3r
-zY0lR?3oU0XEj|1ec{cm9(IxR-@3i+y_oW`-f<s|5Fcj~gJuU|<?uGr4v=geIe8-z<
-z;#UDa8JJEE2Ig64I?W!b7JPvSE<cgF-at;&H5QpqExl^fMoBA0bTsozmOs)@Y-ZfQ
-zKY<;>zyIDwm*+&pzdsIq=1to+I{*F%dV3r{2>*WdFFKy5>GqIh?sWTTz_|psF{f{1
-zSb8_-PUY*!^QnL~#{Lz2d3+J$6R*D2!VKHZQRF#f`P|2EFVCe-$YZFzzi(bkqj!Ew
-z>R4>|lTPQ3pznX*>E@G8-=6|z-NEG7oJX)0m_5Lp1<cu#z&zw&9!B5)CkOKoFoh50
-zOAkAJKj88mMBjbg2gt|!Qb+sb`o7BPduum(34dmG<8z|#*U)$T3!`62ecul)`z$Rz
-z{1$nR={sriTSI*ZhnT*1Tigq)nz~)uKpHd^)-}__uW;W#a**#I)%Q=KZ>q=RV)Xsp
-zuFL5=`<>@Vhor|EM@>m*RzlOzt^Iu~knhS#<omFb+g{|h+{yRh>*&l<VD<oW88DYm
-z0&}N>xrg!D&pVhqfhl|_U)t$(rqAWuj=ugqm#>d}yf1a!I;qaQ?(obnMrV4^nWgB=
-zHgpExw197#sx#Y=Q;*Xbev3TEbcQsIJ3^fShnUWESlkN>n)*>%P8u{7mNnCEq%)@(
-z_xSP6PpmGdGvB5z=}hUJ=*;}pjREGK{n;aFW6|B4oZL1ex5Z9wo35iXGo>@L`}@|R
-zGaDw+nGFu+M*5k*<6v$8Cis~7yFRBgYhAu|=&P@LE%|s~>X<#L&g}k>g_&Q2&UB+Q
-zYtflC=nUhULiZ#(vj&~%b~?jvk>{AskQUB&^nfQg#B`>`;$FDc97C68lLk$i<MQ_R
-zMmob;QSmYMPogfTGg?bfpXY6b>`>V6y=v`jY;5n+%-G)Do3Z`r^s&A6b>~+Frk&+i
-zaep}z-m5)e6A#J0|5uH#@ipXgXnsw5%=JEh8GK%H?Q{j{D>*|)d5^=_Gw1+*OYeE?
-z+j8u?^KT~gTbA4M|54@feT@Hhfb!2#ep$1;U{2W=T4rIMbL0Q~VrW?Ea9`SG=2;CL
-z+(+qsS~xhqmyQ6V!<C8hzk~F}j$Z7P?3L_R?_uy=(8PCAeOh448+un!el6v@DSwdi
-z^PA=0ku98WVS0K)8upStFNKDAHoxL<)o-f*R6p9g2OMTMahQ~b*|vOL<>`x!J?WtQ
-zcFNCcmVZZm^DGPVcb&{a8a9(YGlhnkHvex62imdPv)Xm<MsR3t;xH)<t+xDcs{A$d
-zV<zS4D|**azNK0I9rYD07Ulzv20!=ob~Z!oTekMrusJVB^C|V$i3NK$yO6n_g~T&1
-z#1~ySelf>;&ZW6@i-{9UnP2W|yiV*G>wm;a2b>?5s{z}dANO7zv9rI%I2UL#UZu?i
-z{%}X)9KGx;I~RC{_0bntA3YZ|iqEk=`aEaVoaY?93)h|dV~%g?XXQPcWldD`duy4q
-zTgTPGwU}!@*8=s;kDkxJYTJOB_fQ|d2Oa(9J6j*s*r~M7ugyi)4Fzw%gLi=6<ecEa
-z#M&Hv6?pU;c!yHfAqDTSgZE?#ydw#CM<VcsJbsZmH^DpV;MG&$J(Ym>R0Q5}k6!}b
-z2?y_V3cNE3cxNK;&U*apoLkR1d=hMx&Mw({o-<G`U>mWQMowo~m%Qxic`2oytBHE9
-zM(TOR<9!$NM)R3Bn$Nru@e`~;euuf_?`H2{-pIzHXzZPTLt|RbXkbpFZ;2htmcXs|
-zjV?209{i9?15clJ$**IAvrk*((t5$&kBt|-&z9Zw3VjduKN<rPu5Y<_yUv13U(nE*
-zM0xbMfF7$%Pak~R-le(5y4I|EdjdO72S1&6)Qhfb-q+aW9(cIT)}`@+?ss*!^(#i8
-zFw5pqyh&bV_q8#9W7pye8*Ljgz6S4lum?TsXt(p2+uPvYtpnbMIP7ShyUyO!pMMkl
-zui5-s^9<{1X_IgJL>_q;1Rs0RvkCaEz~AiPZ{i&`D+<%xLw^DKb+0u*t^et)8}A=!
-zO*9V=3zs8l$hEXHX#APR5Xi%iJ41OKxA0=}7_w<vi&I^@c-DEDg|*TT)|csLl-{!j
-zd901dV^u^R-N=K!Nb}ML_f_E4ZQ;pZ)cvlrGy3x@k;kfpJX&Tp<*_`l<!KLwU-&sa
-zOX1fV__fTvTgtm-aoEv1cXd<GQtDY|>(RM^p*;4@h|2>Xre_84R{(#dgTDg!D^uV@
-zzs@97U0S0wKK9`V@9U(&!{}P0nd3qpJDfcHm@bsZAqy`ik9{_6mwUI1=X^&%yO2EW
-z-c2Kq4&<>oB9HkIc`VR8mfg2#crzco7C4&R{nNSZh~F=vJf25puY_+Ovx1mBhS<;E
-z(;74?>}fB~bnjY$Ju?nFTIbV@OBL^}^H7wovy;NQ%64z2Zy!VK!Pl9Q753Q|=Q;SZ
-zfj=(=KJ*u$Uof?Xs`;G4o`^gSkOmK<YoT5qoFi`b-l?syKVy!@L0K-p_SvTK4DZaC
-zXlHy(^urzYj7ar$_*K`9tI|FKe})kCJl>Z137nVsQ>bG?ELgU6q}FNomsjW`6uVpJ
-zd3A<(T4b$0dmzg_eTU*R6sxRQg)Dwag_!0F=ebqf{&2-KSD0HJVBbNF^eXSQzs&EG
-ztD5=P+2gMPQ?jmd&Vp>#qqkTav+(ZhpFif#Q&xXh`-q9RK6#0Hm4AS>l0n)6_h#<C
-zjl6o-LEdW4?29;Q;O1<+_tT@=x1_z#w%@b&#HI3HF@Pp7`dMYo#oH0>-_t%Pzb4@K
-zTZDU$4Lrdx`@dA5!R0Y<@OWxpw_q6f-21x3$7-jIjSYF=;hB0BGi&#iY44@ZrZX^n
-zo?N_6tzDS+!-DDR<KEX-rES-WHfG)I$1Uq!lNZf=E?$?sVOq|{o=XNF%B(**ip+k1
-zZoEx8I?=ymMsTXy_2`Br_M9}sgX!?%yR4~{GL{!($mb>GbJ?ABOWA&ni*%-h;<YV*
-zY~AvijGh&3oPWq4o)uTw#$M>>vQ|%`<!it(@$*^s!F4*lWo=F8euOZ}l7XdL{gvN;
-z8_K-cGV*lA?!l^QzZv_?YUpyceAoCd(3g0b2|o{0I2fF%-=BpddX%Q;yN!Oey{vVN
-zT1C(8<B#3!<G`gKqMv?;GEExn`9nI-r;4AaciOYY9;C;gXwg|DnGtig$f$)km~9!k
-z%(+3MTz(Im_FZ}z*0P&`vnixSec&_n%LCajp})`zPMS~CnGMpP!7}Nc_Fm`mXn&z%
-zp^cn~gRfDh1H5$}k@k9hC%b<9VwN@IY>T09279X7!L=P+b#Ax%6~(z<CC}<_2LDa_
-zFFu)BIR5ExE)-0oGlKom7CSen`b^w-S-45A_Pm@eZV%8v4%*0{7PF$fDx)^Bko@8J
-zyZlq=x54YJZ%pHy_>9iPHU9q?V|<+ldyzBYFEXZo{Wgsmb>7@Uvj<~{F~81l8{}Cu
-zY0P?=@%<?0pZ<WePcLz9qS9aI{L{C-@yXiTIXBiH4n|%BuHR301=)9ShQnp*>wLep
-zq2>%^;IQw`&JRR*VD{flv-y(ytkt&t{yeo+#TloKmnYbeoEtB%YdNJj#UA|h;%s7P
-z<`FxCZ@&%Sp8ovMJ2=1fq}`9E*kbKR)4sGw%nWwGo;7ddi_IAMfaX-#mxj&KIW3QD
-zVEnw1tD9?${71&o_^g)Kj2|@bbr7FH<LE>DCda*p6XP@dLu6~my-)gaU}PLEct;$(
-zp%i#W6Y!2k;MM(jF9Gi<2k&?ayb}p{CnE4pd;B8fUg3Af!8@A*?_2`jxd^=HJbnpy
-z&pUYMQ{Y`lz`GEE_kzbS61yV&UUcv-r@(tD0q>;<ysI9+1iV)qyjN4;y^(<TMg-oQ
-z9zT0doceU5FV`Hrmdr$bX-&j|FfI)Bg|VxRb+Yh!n6oT0K7D|(>DKwgn=p@BU=G#P
-zv#$G8i7}7SOU6AD^m2Kk9>zUkJu7@%%boP`cb-(7>kzg?`&Pa~8~QG7=qPqkZJ-3d
-z^Ning7N&f#nIEyXwFGXx%uSoM_T@Is%&~%>%3=HKd2sLD6HqT}?a-h&{n+`s&|tnn
-zv5#>MevHoil8<fHO`Wf|8=rnxA3nYO{XMon>f^VU=MrPMeD}=$KE|QFj6=Ph_CA^L
-z*u7o#6I-$~X#Dxlx%H~;z@)6+7Z^h*7P)wh{!}>cWuB%dV7y|_LodBay}Z}_Z%>b{
-z-@x0(n%Xi8Zx?w4OW&C&Y!1MQv8d@wIRC0$^aL+IINkARGw?Rq{5|{@c{XcR$k)Pv
-zR?>9eD|vHo<V{}ZLp@>Ua;Q^rux)PbMDx-f&oE8%_Rv{aikw_N(I=WsUGPzS)xG4b
-z?_2zg*2<~V<M<P)Yd<`vt{GY@M+fA?Pg&+yyBHHUzmbqC^L0+<8(4e%87K2~$egmG
-z)yVt>c>jDv=4&D{e-8S2U*LVu8e7K5d@W}PcRHDq$MA4fz+4A1$Bq=RBT8$#BO&u{
-z;H|Rxd-yH#9FsX|e(uD`ocBiNq=zy;3k>Si8NgnaiZ}OohG~~cgU-T>&3reK`S0QH
-zseX^6=Ih?|x}41aDRoKarFSCp)5yGd{kZzwE1b+%294jn!^wOFGN)`P^E$jg5|R0`
-zh|HgaX5Q<Z?Ve>3nJ;IZ`*tUD@)(&f4ro&Wdf1%fXuCTh^QFLB>}1Ywk>{AqNh^>h
-zct+;j8<~?H%AC0jo%vlj*p#JW=RKaG%#V`>omvm`X*ZJjQpr4mW9cVR*M8g1P3-wT
-zaNO(o7wLD}<nPfJw1Q7;E`~JP_8ff|B+ZY{F92RgVCB()e&Ev?*>JC4?1+JD)~8+F
-zrJdk2-<65rP?}Hr0=Hg!4Y+=tZyR=IUJ&xM^iKNIc^2jctsVOMH;^_vrT*DA@4r#r
-z=c)e%p3hVFTCQ1<`Y-eDDsp~t3UZ!hVV;QAzml|>DfQ2^d5<aY5$dS(JVf2gxmqLj
-zALrdv^{myxJPge1&55<SG2Pfg`+Y3QPTvzzTj8FupOq)E43AIgTOyG$OmhD1f0VlP
-z?F;;?e&0_-zY#WZ%r)1pQMP7J74|ab>S4^ajWJgrW3KItxprn6U*40k-_v+FLt6{a
-z0%434J^wQHZLjN(yO?{kXJPq$of>ax&qCrG8g7q*8FRhJH#CTCe59lO<Bz<=SnMj-
-zzF8lC<T$@4xGul%<0ju>Yhz7cc^IGNGWw~p*-QK;$7cBZ?U8wgUfK@j?AYuT@4H9F
-zQiAuYgZD-Xyf+i@-i*Mz=EoKZcp3u;zt$8VeP+T(r{4+jV{B~qQAEa4!f&>NH!lSq
-zW9S&Y_>>_$#@2Rhk$~6X;4Mypw=@9{KQe^Jn8V^18A}Pj<qqD86nKoQWBB27hVU3;
-zSo{+3@TCp^)}+8&n}D}A0*~>4#V;~86Mh>Uyp1XFHYMO~ioo0K@pEId9>xsY7@PGm
-zHrvkFZ0Bm)5%3?z-`;EXG1T*|xl_ISGxl3;2lz!l?}>h|<zT$NzJrnd4~LrjAFek>
-z`#m#<Y0qm=Om+TAjn(YlfU7IrSPfizpImLmYKwdtc>A=%$KBY3e0gwJA8f{N(ARrL
-zeih?4^6T4c`UZ;T!NWYz-h0mFfd~55iO%oP9DbMwzVtrt^1z?cdF5$-tE3k``EQo_
-z{jJz<GbR{px47-b=4mfu?>Y9&o#i`hXZS8#%dGyd3<Zq`&t@8Z=eW+kzrXKDz&Bko
-z%wgDmLiS8^qj~IEse4wxpCjFMT)tm?PIT8%?AvqjpdR4+Bgdx#*7xx1Pgq!e*hLeM
-zeTa9mh27Lw&ybdh#g*(nAzB%8p2m0d@v<lIMS-t%|NI4O(|Y;Up4+|_;2Z|;A@DwG
-z>nd$tZP&~WcZK6x@zcP4l5vfLy9->DUcg@{twSffSKDzce#8TZn*MDbc#4_s;eGLt
-ztsnb1yN&g%5`F7H<eW0icWHeL-|W2Z<%bn0m#2Jb4YE84ANJEf`myIm-U<E&bj+t6
-zAWeMQ-%K-p>r=LF@j$!~?s;$({^lO}7Lc>KN5<iPi2cxaAZRSsm=S%scPjcZbW8tN
-zwxb_!pc`*;_1x0m*9V_pfzPix{pfT0u^srAZ)xhs!;|R8HR#$IGzu-mrS3sLUdlAI
-zuSNLw?SwCTfU^p^A4blX*`x9z`f)j-AA6mC>|;FXV`KMTM?Z#u(*xcY!21QKAIqG6
-z^rYy=Hs(59Z0;^_5pG6579jiC5&hU4(GTD$PEYX=nv+nOP(QH415y3h6wwdvjebxr
-zPx;b3^kWlz*cj1|#k>>zj;1b{xf^gREN`ae;h)xXRrfpAkBwG8j-ad3kJ421gZTKb
-ztU^DCk?$i$zK>Y;zLoHKaZ97L)W#YsF2M93tAIarYg0egPNE+xT-@?X7q=XVb?@tj
-zFKd7^3%b{$ACY|`u{o=CPCqs<$K=jD-o5TR`q9nakmcY#6TI0YBK~Rry;*Z#o}wQs
-z=$9PaUErepMn7I*oO;=fk7<(+EQ{y|@XWqz-ur#mp?=`A#q?uoL_fGU`awCxu9$uO
-zOX0)fh<?1mJHdaotJ#0FqBG)COGH25pO52y$NI6@>c>3wW%N6~51vZjLqB*(ea}sl
-zoe(oXx*4Y)nA$iskB@8gyTj`F5(nFiQ=bB_I(VMunjidV?O;A-7a%u{<@UqFL$pcy
-z;@&6W`Mf62f2_WEo~`3gR0r)<?N)o-!?EoJ<OGimo#@dG`}Wxu-ZO$ne~_nNQ2)@o
-z4V-61aHgIgxqp~t>-gVQ2W>EqF6o<H;duC+;ylyBdra`qQR%AA;pklf&aDxge;l1{
-zwRP;Ejw!9Ll@)iRJ!`izpP&2|k-pWeJ?D41?-6Oeta&Dn_LE9pL#$W(?*t972CTDD
-z<$uecOOCJP3r79<8sEb3{=B}$XZ`OFn)PqRcnlKjp*RoKLq68=`K}0KMRTSrxam8@
-zdZ+JaX#L#AB5+19YZ1|JXlN}$`6~L32J7&ex7V5Um+<F&KRU!(hVnekdwu^&-?cK|
-zIEkz$|9RHV>*+gC16i$W>w8e`+}pE1RDOuH>q^;v|HhnMO`6vC2T9X=#ir=&*+Jq%
-zyze8t{Wn0;=B~8n{8OD1$^PVH%iq(_=J%rB(@)#?PkGMnJ^i$CFz@xBW}o|e{pa`0
-z_Xj7;<-TX%-?Q(GK_<jwz1M%f*MGj}e-c+2n7tlveZ%&ju`}{>*^wc}5wSDx8IPEA
-z@3qcl_TtUAV-*u`xqvZ)UCYs#j{4pw=W;WaP#WjiGcJ<<Z^kk3UU9f)oW!_8<0O6O
-zDtc~_&KQY}l^8dKV<pBLcJ0HCjWiCi<DV~@7<A3I4@AaC{(C$6K5muo+1l~XXJg|Z
-z;Z|cDRb||xZ{7~^z1!&8gZ7F<@u@RrVa~t*Zq9g;|Ekzn|J`rF8l=4Dll(V<{kK7)
-z<1+v4U9H_}Jf?DHY{d9W_rhfWTm-8*R??X3i{|~a#Fa+Bzxz`iBmETDjnl?T@9FA$
-zx;o|Y(tEo4XKjB!=%4Y||LD+r{px%DDt2PhJqSPCai-??<Gszd-v)AboMb+K1A8j;
-zdtP?Cik+`w+qI8J-yf}(=kv>j&97qn2b7m@bX{`ixXJz-+lD`(Z_YD^zu}_WduHb~
-z^?l5_*yFak&hirszqd{MU}QV5@Gfe9y*@X60&FnnEZTbPH-m?qO&w&uaR8gDeKPv4
-z_syK=R?U6kWZR4s9GRolH^wL6Xncp;EROgpqBVviKF1Al#0Ls-#0S#1rH6nkob^rS
-z0sIe-<7L)u4UX?m!I8OY?UR~-BWYFUV=W&QQ^0pm9^GR6E6YdiJG>De?YHbKAML!Y
-z=C}=xWqrGNLx|%kkK?VuZxmW>+<}*MwP^Rm=~sJ?lDKOB+})(t=$rK&7~x#&)OSYO
-zp&^cUEvLNNLwSANYZVL2^H}>5&3>nHb040*`yg7Xz%+ZJI&B`$_kZGPnwvrs<3{c6
-zvU?d*XyU!0snhPYGc*l5nrJ6cS=2_SNK?+j3Tfim&_o>u|E#{p>}Ud}Nuy5X@ig7%
-zX}S}d+_?kyy8WOnv`zC(F?f=14OVDvE|g)#(aUeD3`sZi4oB!M>U$!RVS?VW@=ig9
-zqX~L>HuMfVdMgon%Py^G^LTo1gI?)dHLJa{zs6oVbSv9p>L2sp4(8eNQNQiucS5)P
-zXZ0udP<F<x!KvOJemN87mwBF^2|kYAJkHh6n&#t0eu=?-{2af2U*?jV9^LQ*>KcQ$
-z|B2tr?)!J@Z?%S@J%FlHeb80vGwu6>?@%UXi?7{Vn4*KcH!`W%Z&Mi^%(Xa~H1`af
-z{e?x#lN+|HVGAqNL7oloD$RX`p$-Dm=wQy~@iKV|daX>b9ob*EG8wh?hce;Wz|Gq4
-z5~j)IO7UHmiK)xV<bU=uS@aHNQndKm?>eW*g!e`!W&6!D+t=y4Cu%1jjQ0yU<()!1
-zsaRN{On5fDqYlIWVz${Y<Xl>(&EsYA=};yMkjZ8%lVMwbC=;Fy+)+zonoN4PzRNN(
-zby=C*4UXEs?%UoH+Lrid_NM=hXly^pyC<sLv!6M2KlPGrQ`=AdDcX5*PxSy}a6iue
-z;f}Lro;f<srX8^tHB-Mt4E7j%QpaxM9CO)R_wCVWtnm%UvE`dbF8*zB>e3^`Bb0;2
-z=x?zuP9H<eS^wC#BKQBy?0G%;Y?ghm=#QO~VXYc_|17pM_N|y~bMNNce-kv`ewpjP
-zaQ!9Mf8hF$T>pk^nCoA2{Snt6aQ#cJ3fI5j`Zjwv@aYDrPjfsvpFnLHydEsLz2mPv
-zLJazEadtzwtMMA;B$JDjy+qlu^0fZ3ufwO`;rXBIo%IJV?r`}YvcH#huuu0P8&7lb
-z>s_%J!QY@yzw)<TVH{g(z2I)@1^-LnKh`<Df9yf({XL$KMd~fOd|!6;7OD5kuHFaZ
-z_1^F5Eg5=eq|*!kOug{%5<DCmrrs^o`>%L@Hd62BUA`~5dOuISUvl+siP!s4SMOuj
-ztM@M*y#GKw|B-r&t^H&7Q}3Vh{AZDRf5qjy&(-@Y)O(++_x^ajx4U|)*Q@t$9K4sQ
-z=f6;I_NM-^Pf_nE&;Kb>?<ZWooU8W})SGklekxus3^elnzN`0=``*hH^lAxdI&Zj&
-zuk2%GtN72pj~XM-*xv>X#TJw@!PAPx)cqLuw{k!Bw_Tj|qBAjOygYXMx96jar?huQ
-z`NqD^H%c?X$Cyh{{N@I|`|re$s7~FFbN?n61DH9fK2z5EOi}%Rnl>kW@cW(gU9Pc@
-z(T1{$nb5v}r~g0a`129RpPz$2A94KoSe!q?SH9UFaH$=PO~xnYMm5J-(>Mx0LuW2T
-z`J}l~%`1j{;@<PA${3`^bI7O9NBH#l1fO^p@`-!Tr^nt2pBUE}J~8$iWNfH!2#<Y8
-zeT_el#PMmN<5Q>O(?a;v>G<@abUtl$d}`y&4DFSis81Td{u=aZ46FMu#rdRhF1};P
-zC+<T&F&|swIpovFB7FK-f=|2)`NX~F)2esEC&ms|pKQ#8;&R4rmp<8f_E4X0aeTVX
-z@rm;eMmgs|^W7J3Pv_HJ;E`rujsD*bUBo-9?y=juPW{zC1D;@gOE5Ea&42f8e{{pr
-zOwiD|CEgGAc2s__&M8rO`M=WNx63#8Pj$}v`xzT=r2S36!1s>FW=?hfFU{^wSS!xm
-zY4-i}5D!`)<}kl(+9~x1_-AI`qr}<dipjF`9`X4OGbbYbMUNGqrL_#(&J?rHMVl|3
-zCf4)>*Hc_|uA?pRvaMbu-nDd?>k!vLt^-{AxgO@)!?lxZJ69jqX0A<K8@V=ct>fa1
-z-_k0sm0T;hmUAf{m-C`IF9@5>SwUs|e&%Ba-Po@*ySuS_LANO*-O0Dw7)z~J6nLkz
-zHS)w^%a766K=If!77?dM+_uIIis6pV#q?fX-MEMO#ih(IN+*7SHIZ+(1pOC@FUu1<
-zz6-pxHlk;p%b({=bm@fFJqpB?Yg}yVA?{pjL8cDk&u=s?DYdkiJu4dD<*#K7?Si{Y
-zvF5f8GhXvCZl!K>_VyFIiTi#1A6nhYbH;Z5e1@~oC_}t>9=;XepWyVIC${^-YP%10
-zmc?1$FVMFO^uF{4ag5h^ezh5M+w&%Ijh9J(h4dF!H?}Z7Y@3e$LU-XM(m4lS{&$|Z
-z^#3Evx&F&Oc}nw86J&#ojclH?@#`_!u<s$14f`LAY}iv__{RQ<m~5W9j%?Vgu?szl
-z$%g$Lp=?e>WOF(q8}^FaP&Vi6{vRWov&aTrHL^JeUu+$5+1N9#pV<9;rt!J2IN9h-
-z>nAhBej}SB$Ob+4XIl5LKc{#kAsf>4{S70V)A0H%&nF_XIfHDDl75`@p@eMeq(8qp
-zl+6k+8|L38$c8p)WOFD*HhmG<Y<IHR<7BflA)7tdk<G)%hISv5&7p{F_C{p0FCv@$
-zQ;^NUh-?lZ8~PR_n}hJh))ALY%WY;}b@$;+<C!f^Ha*CuC&M|C$YvX|p<gP{KM77x
-z53<>okPT@C(u{2O!RrG&?~TZ2KeE|Q`opC6C1kUc^utZr{3-Ldrrj{_I6*cCooqIx
-z$Yyy&HY=QLRyo<MOvq-{b!5|xZ0M(Bve^`o&6<d8)<$HrZVIy57?I5eWP>d*ve^h<
-zY#njgTz0bAoN3Ix-^pe#vRRtp+zMo~4B6~KHrNv*o2AHRSwc3X>C9>)o3-$I1J7$B
-zvRQ|0R*>FJ`tpQqR+7HCDVvg)4fCfHWb>4hO-G7s-n8RpV+XEr)`jd%tCLMjLN=|}
-zk<CnGQ%}gIBO;qw5!uX+$Y$OYWV0Y5oB7D*sFTeC_+slw$YzdhH;Xfk-D{j|jv$*?
-z1Nt9i^G3ja17vg9$>vq|ioDSkw>P8}NHemT4X@`@*Q|(a<{=yQf|#>R-t3Con-=mf
-zZptR(Wy3u1CHGCEUhMr?c1FE)6(3Ii4sjP6JJrkCk+qBP?_Oc=A>$dvwO5(@Z(~d)
-zKhAs`@+vYq4zDxBZ;(FSrR$l!<4@x_@{L4d@{e~n?opZ>f0drkgyXN$^PGvx_{*I)
-zxk2x|zpQ)jFX!=B@|QWcmGNoXIPBv4>^MxmO_g|l(?1`zez0t3&kOLJce0z>PigdP
-zh%u}DnHLlLl!w@Nn($|KT?iWTX`aTPi?#csRyO(Pn4b~svkrFM!G1mgoBb+d)G7G)
-z;4k$)MLC@zea`Q%*7%S!F0`-ZEV4hx`5MnTpXfv!Rv-Ic<ZmekC4Zdq@-^_Y<ZB3q
-z_63S|ow=&#o)hTFY4~s^FnW?df$p7lx_27gJCo2o(sX``(LHd<gNtB#f2N1MD&|a;
-z3#7AuCF<+sU+gmY_;IU|-wT;W9{HKRn|bdEI{2j1L5*7(ht`WNRtJx0|118r8PjfT
-z>fjOd?@7k?%nihJko1@i@~pXom<}$B=-{%14)QM4LGF_}xO^%)$aui$;HJRv&*<Pm
-zc<*&^ztfYAPEQWSWvesyC+Hx1r;H9V&WP#YCMzSI4P|t2kAuD0!QPjEy*Z(SJx&K7
-z_IvW}evw}CmG&Uphta{kP6zwqu=;u;I=C%G2PtQCaGTS?KJ;iieAsDqQ2S`KpT+3s
-zc64xOLI+7JkY;ocT=L*j0A{Fz`@nHO=?6$Zn9#vP={oqV`YHL{%=1ss!F9eLv};H8
-zT*m6)2K9ql>(+e1mzp}b0Ucb24l?f&(?QZ>I>@u;WnwybxH)f7I&9|+!hVo<p$>AN
-z)Iki(6#7B!y=QzkE24wl@ZRg-N~b3?ot~_T%eHrBiVm*w{UB?!(J|dDr-RF#4lZ@D
-zXFJ#{60m0{ba0;2!DUVdSznjTd&yT?ifosmgUg)`E{MbGn-|f+`6)U`IirK~oenNQ
-zUpnB!VyA=5^$aqXVsx+r9bBByLDCAO865<dJh<r0>`(_+fa6NiSCQVG(7`q7I=BG&
-zEu3Usqi0rd%G5Qh>r~qLu%+Mp(bqHbFW?hgc6%@{r|-d(&S<{oM!)ZUgCjntHpV>F
-zWZ%d5AB9(Gb7`@dp>o@Zz5zIpyG`?Ek+>oGm0D-iT&v=QG&enQ&djefX}&7s;)gWX
-zZ_m(haYXocvU8eOYh#=sA5Qx?Z!{;Nxwvq>w5;_-#o&B~`LWN8x6P$}<2Nb3MSj#Z
-zY<x9$|4Gfwd@qWJu~in2YNz5XzyVwo&!RY%CO%VG!_6h)Re+&0nT3~PUKVj*>kQ1<
-zz)k$t8~iSK{FtBMyEUJcPj2}n+wJhHMDQDp<EOZrDXlXPCvXH#h$HU|j+Ho$)w1ff
-zc>cb}ld*aXPkfjV&rTa>V)<y}KRh36*(t`2V5i0ZP`*WbzP070Vp7D*OpKR`<MDXz
-z^LR3Djp6D1IQ7TXN(9f*1fJz7;yIka6F5zNIy@^0Jb~@;{DQ}mG2Hjud~OYW(HO4Y
-z*)no3JTT)ptzWQCp)`%-j%8a$`go`BuvhU_<X_+G#&SC2Svb_lt8=C0YkS{C=gj%{
-zN_&iP-R&-I26?rg_@2nvuJ#cVD{@kPzs7@Ao`HR`6dB|BJPo(b=AU2ZS$@vl(3m#H
-z3#QvKp4D^hS9W?{R@{hdhr>2jCDfnd6k}W}6JuOLx$w^DPuZT+?c1Wx)%J4n<DCC0
-zn$>SGzL_AOY_=&M`I7jNb!2PgGwS5S8orIE+|-m0?~HsXZ{&lo5|fX6ACnJhMn3G-
-zj>+dX6F1V756=_i<MM>^anD{pC!z6%@-hCKlTXpcj+pjcv2iP*d~#EacPUSdcM0Xg
-zJ0qWBHr~F0os^H(CyjjY{U^w0G$J439IEACAFtEj8TkxnUHj3vK<|F7DIeY$`B2`r
-zA7bCsCTJ_B{kZor`H*JY&zIuz`J04%c%C31mnW2ud-n2KKNb04hr{-ho7QYU<!LcH
-zR_mNLH9JwX<--0KIH7!aXXKNc7MD+_>a}*lx1YPgeKNne`a9E_@jl#(FRA|Vqd&TT
-zEIXQv_et}4I5$2#oBra$fVDywr^DK-zt=hR_&|sBEjqqQcXEJBeRCUeGlPMTmnBZ-
-z=AiK#)O%%NGrlGHzSq4knesCxlrOmVk4^Iai|&1OlJ}o+@4xTfU&>hg(%SieJKIP$
-zQMh+gb|AZDT=$=FaK?TFI6ohOqi=(XAL07_JHSU{t19@6fzNf<w{MB8Z{N~&>bvF5
-z<7R!^teM;O?V0<hzP^2tb0(wT6nIZ>+Sq^Gj4%HGlit+7_3r9TY`@#^Z6;QsaEAHR
-z{aN~+<~XZ#j<ZQM&NA~<ny*r<g62~-f2#48=J7S3uh<0Q60Wh1@g~<BT(5Gy!gZDF
-zC9ca{FLE(&Te`q?p6hw8=X7SGjR$N~T!D+#DxFzv@_4&q<~*OuFo(R_&buFVYi<YK
-zy3X<Vx{g23aV>M>YndDGJDh2lx$QdZE?P6EZp}HB4zYfu_4KD!n>7o+m!$U~^&et=
-zq|Ui)ywlpT+H>&)d;(`P*FTh~lXb-_SvQA%#MWbAKj~l`v1>;?L%==?Okk_tEt+fh
-z>-xt@KjGF{PG=gAYVCM`?vz>AkMagy#(1+Y!kdR3Z+aY_`xAKfSUf}C^f}(_b-Y1F
-zhBw<BZ}ug4L;2D+aNi4EyvuKQyg2}Gkgeg(o<yB}5#H>K@MgP%vD5Kp53nBwCa?>@
-zj`3zc=?9v;`MBqe*43lDxtie3#t3iLIo_;rcy3DIxgx=vRgO0s9B<HN!<&_kHyabY
-zp}fxX*LjRRywmpxjNWX9H<w+VYZG;@ituJlgg4y|#u~?)wZL8nOkfv)9plX=(l<AG
-z^QzY8q&HgEj`HS>1aFo`c+=r{Gt=R@EP?0D1aD?L-Yj;!dDZb|mgCLR1aByB&fi-M
-zUA)WBbG%s&Z(ebAE=bflJHng!5#G#mFy=enEC6-~FoCUaF2s1VjP&JA-W>D1(YkVk
-zH|oP;ZR#5Hx@TN}^M;#)e$mZAw<Pd<(asx(ZR(}K_BU_ZIpq8`#~bELO`mYBE8gEw
-zzQi1A;Z5eId6&N$SiNb5H*Y%LyqcJ+ekn3n{fe!}z`p8WyyE7lUj_CXzyx*y*fHL;
-zz?;@4ZyxZxVNM`(hxOa|wxwOyz2Mi>6!-aA<^$Zi?h9H|)0~{r&G+K$y6y|CXI#*l
-z8sllkFjc><OS&J^m~~yAtL62vu?uIhHrI8J+BG%#ak5W(7p`Y;@7FVy$aXO=r*Dm!
-zSfS^GM%C@n(OH99SG^M$$-O!E^uN1%4)pzo{OL^NR(P4}^R~J5W%w!^8q>Km5uH2X
-zbnb}Lxw8rRA4%xkQKxgKtuAOD)AUtCPUp@fbdK^mYrb$Aec_$X-Zg#IImON13J<Z9
-z#}joPjp*D{5uK|$7*9E!I}Yp<;sfx39n-n9q@U}Of8Q@Y{cGlEtn6&OfRWvk5!pRS
-z{=@0A`|U&Tvg{5E=S*V=oJ{}8+{=V^aL}*oY3})p<MpgtTRx<9J<W$H-j{P0e0;+p
-z+QC7s>*+f_k#<0OtR3)N<t&Kk97}0lq#evlv;*FS?ST7OJ77+<${Brzm-{2U+z);G
-z(s|kYJMS_t_gP+Q&)^N)0e)qy9qfs;gYB*zY;^75;e<|ZOtgc|t{v=j?Lc#o^7S^k
-zcCaVW4k%yRgr4q1hk2LpaqVEQ;-cr-cF>oob91B}Y>Tvm9tUHaYX^P6-VRJ)>-@}E
-zJ9wD%z0G#OzCha!G_T5>s*&A>i0n3ye_gul{^W^wS$6BFi*|64{?fDq=C~%bgEihB
-z#OJsA*2*3<=eELju$FePM)ttYIfnLt^jJIKxyrdDv39UOvcA3Fu5X9-fOla#;6Bz4
-zGzZEz77Z^~MR>Ui`c|g%vi7_0GA~zJUj8re@`mkzu~w`dEQ_>*#jYL9a_wMwLMLY>
-z+QB^64wia*z+9r*!EDzKmL=K&<x8{C)1~Mz@AC6qJ6IumFyFR=jzpdFBJE&7q#ew6
-zFc!FW&;jhlzy!9|-(&4yIq55!?H~uAtUa)C6GnD3BeI)G{?>Ha&G_f<vg}%^i*|6`
-zHTG7w#@?E~#{PY9TEe~t=D18uA8Q$@-(dB79W)pAc8+l*>*o2>s~dg}@wNNxp276F
-zplKsN+;I!%EwpnM)3pAJA7bwx`#Svm;n-b~d-lL^7L(oc$K36+w8yu9iM@I39eSI6
-zL~nnXi@h^%cS`PdY%Y1wjvrj@=FZr|(HP^s*Hy*eYhQ?Pe-rs#`A~EIF;)h+X=VP}
-zl_{BeX2k0OpR_XSn^ezZX=TiQD7$75#ZBL8SD9*B8MAk4Vj1>jn=;>bWxnUmC%6K=
-zOGvZlSbSmp3VYPXa$M|98*_fA;S>9{#&YOC{(#vh#{C%gw*q(UW3(TheLN#P4gKD+
-z&cyy7-uZq``Fub3ZQ!K!D_t4uXBr%kZyFE%T)Fxt@nvi>8r>RGEwZK*rBUZ>=sUKa
-zM%{ZF<s;R24ryeLTlE@VFfY3#x@V4eA&uO78n;b>M#TbLkH*hB8r$4Hu8DHAb}VYU
-zVl<k0uwQS|$lmjiM)rKwcn)d2D?;O42^x79(#XB1QTFUca#YO2^=Q2A9CdOJmiE4>
-z-QE@1gLP!;bB$Wxc<USMYd_p^AK$*6Ht9Jq6ZS_9-)z5&L_A~xU#<sVuXr$M=$jc^
-zw+DRBMg5c6i+u9gvd)K7AEiCXIz!ui3kg44-=7sP^7v+tyutNmQ^&V%?*b0-R|oYi
-z4%!}ZnexA`D25fks~6wy9?sV8#TUM35wU5}Z^P_Q*tq@H#@$0~Z0`ZqCD=n<13%X8
-zPL2Uj`?v<du>y|Y0mtux<5Aj)`ohuyTc`OZG;Ks@*}=ER7X|TnpFDULz*A)elW#Vh
-zDm{tqKZ4zZR(&T_eN7vE@HhSUERSHDp0s5YyISJ8uVuRZUd2$r9HaPQZH~dEdwPFq
-zTfqFHNw@WEqugoxoZqNl+yCi%nktjuY=27|vFDrM<!122$2H$&fHr%6MVHM>x+w$9
-z!3yiyl>gt*kzQ!I*Yzvc#r-n4uM5m~Zxs7Xd1EgHr_|BfU)lif=Pf>lM;pNXf_=_+
-z>(}AF#-**bzol+)Ujy!I!F}B%xRY*h2d2lp&*5I03hrlH?e{BQfbTDwdYibn+|*xM
-z1@5m{d<^cZ!2MPGoL{D2hx>Auw!;3FmVx_naK}FizlV|J`^qkhJ1{-&zvOU#Yznw5
-zKEH3V#;%&nH~Wo4+^f0lNNK7302^0pa9@gl&REv)Ykmax1rGNPhx>eRUjXj-euc%8
-z@SSu62bdoB_kp|l79KinWWNtRhvsOkZkxW{FfV9)oV>gHx*7xMTcM+^zcAC`Fq8bu
-z9TsLI59SI>vm8#d=o4mht^jRp8guTY%Qy8?hoLuv46sX&cL%oKxzp`Fi{5MW7cIbH
-zuB_CGe!ju|o5+*;4DKz|)oRQ1a9`wJK1Y7LP0L5#3r|x9+C-!7_5Fqv`p%0!^|ASR
-z>9Lja52NQtSYNM;`S-TEz7bB$z%wdO9icq6|5dozG+X~v_r7wj1MAc+wYSRb#}s_{
-zG<LJbB5j;axp4gZ!T2AkzJc<Vaed#M{Kh7X-9#VAdge^{+x^YoemV2Kd%oqrIXI29
-zQTH8n<qI;>wT0vVh1i`aZOlbA+TKTfs+WGd?K54cz8^gHG1Yewnxbc8=!{<R^$O|I
-zSDmSWj}glggDsfTx*9WrYv<eE|H(tL;TPSSy2XjT!qY8GQy=i7^~GR;r$58P@MyZu
-z0kQj*C!8HjY@0tHP4q>}b%<8>&bGaeF?M@bqpjVY1(FeuK5=0JtQ_Bk2gVZO2gMul
-zsT$#r#uNHh{1tE?gD-8sS^B}QL!VyF-jU4G13_lSw|t(TN_=U8_M~j@%~;u90$<73
-z&?Ol_dzAO0B@j=LcQidJlb?9Ih|uysQeA1|%n80+u8nj3+E3~nfedkT)lr?P#V`7p
-z)o*7oGR^$9j7-;Wwq>N1-|(!N@&_1)rucXGNzXD5rthT4Hdb>sF3)`1(%2qrFLe&q
-zbmD$2Tz*Zx{F-|8y#8bjoD?%8->(jyUEJ3znUPO}hkQWA&6)c}U5)y1VDBUTV7+MH
-zx6_Zd)0YP=pSVyX?Zd#Skza9ISF=HXcjo4owa23yxSHRH`jqv~6d0tX!pKenW7Ogn
-z!-KRWjJ4o#tP+?Qvn}|lb$rzrF69(Bq%E~PqCc4Va=mEt7+*K5anT2?uZyhot(Xda
-z?sxEWzl)!H)Qr1=Cv-la;<Uu)fzixJ4WCteA?PzF_`8ym;<Y5F48Ll>>Z=EkmtwI8
-zwT^@Q2a*30=l2fYWY?n<XFX81WorCty{BHujvOocxKynHHP=<D!&Y}xN3{~UFGudP
-zE#{0X<;@B&^0n%hJU8jL=*}WTHlnds$&CCAzecB^TRKJmIU+syG`7ah@z{RJ$9AfJ
-zH8_+V3}Bg9HehuanD!h)f8Nu-!?xAn$Gy&nyDt4j=pXg;<Hxc0()*P1;S|$q>h6r(
-zXQTIye)1an$!F*%kD(vfl9S?`-!c7^m8{<>{f|5POH-jAe2*1<T%}!$4Cx<^&{>Jx
-zmm~LCFMmfr`K<gM{Y7`~*^fd$Wq%a<*E{+jn+pBK7Ub{gxBDAI`iYfn%0F_Sjoy3t
-zPjm90=Hx%k$^XZoAH04P`swH9MB93`>~xRzcDHFSw*9m@zo3mVL9J+GM}L*FvKe!w
-zv$@R39Q{`8d5=2F)9A8;r#W$do`~rmoWGnL5B&K})}Iy}Qy#dY%i|?HYGqr${1lzn
-zULCeP)>*aH$~4Ng(|7qZiRh1buk#M|PVG*<xj);{v{zH!zE_>L4|9E|$D?fHV{M(B
-zvr2zx^1&yAUrIiBb>8zzK5exqJlA7$<&$>TUb}B~?Tyb5n=|UBI?nJuz3Tq4#u?fF
-zZ@!ro+k2F2#jm;Z<RHGr5c0Bq9rHfmX7=WwBh1D0>+DrMyKftuZ2C2c`6_E8>C&7H
-z7?y18K7%&=j_CIaq@Oc*hyI8DhD}><zFUB={<7T{!yXk2uL-w!9k{s^xF#(Ex6_tS
-z!X3z_<Eq$>D4w#%*ztbhs58qZz#*<cvHMAyHTMvMlhr;H2ZuR{32?A)sc?uxiNPTr
-zC4@tKiiP8R$J`fB>RWNL;ri}TjWu)mgEiKC??EOy_blo+X)j9@_A&OW)UuxseLsEo
-zZcD=NQ#?SlOr5v@>N7r;{3AP;sJ(0pPJ$<MiF~UMf6KIA_S{(9@TH93^?_7hY5+Qx
-zI3H=Xn;X=5&`Q(T+`yv$(YGIl=#vag?TOD>pVX|!(g&*l2yI5u?oTphxwp3ev+g?-
-z_L~y=hTstOsDBOnCh8fWo<ZvI{j%PheyG#J{C|vH`(o(VggBSu=TKMEa4tKX@jKOT
-z$8fGhaOU3NT;34JnP=_MQ=ffZoOvI``41h=C1;C6oU`#WT2pZz_Iyskc{GAE_m<C}
-ziQ`OvK14lsjOA=V8lR~rigVfF{FuY}dwy>peT3?{p?+jr%veZ!)hF<}Q$C&dDV=Xf
-z-yz>nvAR0z)aZ`sPr#izjhzGLb@|TwC=DAN4b>zK!&9Uo=V)NeGJ%F-ga+;n@5?DP
-zkY;eAPD2AQuS)~(qckjnhJ`8nv&H|~LuRko$rg7uUX^Ef$e1-4`8)7Z>oa!W;(ER{
-zlc{Trq5k9QA53kXMn1RfceT^%#<P^yJc&PlHf@amcD98)H`U%6&h%?P3g;R$y#3Qz
-zf#E%C%G!(aY*u?xI6szHac}?LW{p{UR0eq`I<b`x7W~>Vdm_f{IgF2^BW6rw)@VtW
-z&fE{bqWf2(<+NXlJgMb=*_A6fU5S+|PhRe0uH0j3<)CS@`tEV%s%hom$7JQMyGEyV
-zLw`;p>xO^D+MHRVW3Abrlla{6smWe)f9o5csv*xw*XG_XPak>hzB$AV%&onZo8B+m
-zaOJmxQ)B3w&KcGDeV4M?`b>Df7Jug|>&W3f>)l}-0sIZW=T!FdIXXX>bvo?m+n;BB
-zp}gRv_7kXo(AmG<&dKgw{4M4zKNU1C{fgGRG{^9PP;V}^*m3`Btd);(-t3i6bv3SX
-z{@+z#UM;rtUuE6?%6&mY=ha4ee$m7La5kXMLRB3fiLbe-f4oAy_d5AaR!<%L>*bb_
-zs~^@HiS|91vqnQ5B-X;{?WGU7dOjSl$LzPF9<P^^)&sBVoz&AQUfI31F?wv9dE$~^
-zx9yDAbDyKf>+z)ZU_0yBimSBW8uK%D-MrbRF4D%S_lZmBoL?V~u8Vxs)#LSk(t7A~
-zHFtKE{-efRk-qN{qvsY^kIojAd}#mCdam0}l55$-To@R?)NCgQPE5U>TtcrdqF18(
-zt#5pe@y};#w2evIO>C@?)g0(;_>#oi`f)+U?g0*;(VxgTA?zpJ`u52Q>)VVMo<%mc
-z{b;RQbD>-b-LrE`ZohKQ)rs#qBRYSHPHBF#Ju;rCk>=<7v@fQXZ83W@<sZk!BBPm!
-zV-b^P{d}#J)X*i-wvhfo`xK)xj_q?VH}|>6@GGXwjgl6_FK73}Pr$D;1wWG(!7m%Z
-zFVUY@N1Nj%&E=Z0U6Oy5l=)K9V)&Kq83+^bE2fOOOj-oLT=QH6`TsHgbvE&<W|4CO
-zx8(S%UN&=*{pMS8Zu}LMXN~b!Ob_sdH9nFYHD_vMn2qD0?`x}%9?0E)QfFt|Z;~@6
-zo`B1o80@+oTlIIKUqg(eH8zUl68{cfjWI(L7yk|O5AdCs574&m3hlun=f~=MH~Q9{
-z&YBjESFl+cv&qk^W$hksjSrIF;HmOXeyZkV1Vc7Y<G=c-_Z8{iDW`WjM_Rs~-m7m=
-zU8++s!|@Gytbb_zNyWd_;FY&4q2G-x<v*HlyJx9C#F_J+gmbQmbCtZRcL}yB9K-S6
-z;?0>Jyzk(>#hv-@&aCy-=_iD{${Symbc?^66QW+#ukwp1AJRa+C=Gw&Xec?`IOt;D
-z)LyI)-1LbJP9ZJC_KKErgciz7poRA;7oJT*9#2obZ0FPKMNboJK%&XlO}gOuvq6kp
-zhOOT&cy|jfd1LfZCQ2Vpr;*WPN%|^oj*vdX<S*Mf$EK|87_K%Pp^q{X=;OVi4>-c3
-zMxKzqoL__T^bxlv`p9E=TXFP}PdFI*%FQ(cLmzo#^id{C-xnQy)g*mIKhN#x%e7dY
-z3gu_VNwsWq9@DRV#B`DOhQ47(A8<qZvMqLvZPe38ER^W;b(1cBY0WOAFK6+PEiv?w
-zH%1?2qV!#NOm&;Vy*Z}h8C*}+$}P<?RYmqLF{b)gQ}Y+XG1aiee=1|D*q+<$O#Fqp
-zjE&~R=N5-8&qJS~VxN;^tEu=5F&k30bI_VE^K-s!^xe_ExSE?b(axK+=6qhY)54LB
-zi^0!E;3KD08#-)tA!d6>i`meMJ-=gu4K3?@i@5(%HE9tWTD0}1`XD*!j`NW^oA|}(
-z&!*I2(jxSa+Wvh4{YDQQeDo@n{&I>BMp}&i;v_y;PUo*A=r?H*`a5mC)_x~^u&l+~
-z$bYoygT?5l-A$;&q($hjsLx25b1vI-t6xp{F&{6N;^UDPqrY<!A1|ANn@Nk%Pk-O^
-zLF4{Q726QXztZ&aV)U0&{4|pmp}%P1Opt#r0>85fKT3Zs8<$@_8}ZZ1mZwpCYWQxk
-zw!$1>=o{g~rTJ-QzaMQ}F?`APJ=wQ9%{)CmU6Lk!LvRTHjXLrBK8N4O-ZkdNweMfB
-zW3(|QiQ-x>Z<Jrs--+K>!5@2Mg5P(0EWf@J64J(exoyKuzi)_fqim1nkh~u<gb(wy
-z{4?y9a5cUk<7fFE;aVPZ?ecZ3{oKI3^!?=J++nv~sP8zM`C9U6UR-5mr<7mw*Jd7*
-zJf?hhy3wKPs9nSJX~tfY=GX4@-9`V-*ejDiGG|L&(Yf(1_I%ag@4e1WFLL{lrLzV$
-zI%n4|t$!2J%GfYQD}KDjFS2Q-{)+R5D6cfVi`rAgPgFY{OqI>KbJrp~P>hD`w4Kj&
-zaC43iozr>OZtEh=;7ZyAKA8NfOZgoPSMPwUH;UH}jo<RQlO@NG?|FXEhnYGmZY_7z
-z`DLN(6Z{x;^iwY6i7O*t%<zPF(YpN{X|?ElEnw(<t?bTFi}Hpv(IejYa)$3^$Dd+^
-zKcrb%rtrt)hd(C2<4>f1gC})G@%)#LM~@|Wgq<_>jJ8;v!Pdz~YwC>kUBmX#>3lBA
-zg*<X)YQQjc^DbJqoo@i&iYp5Y!=qt$o>`Pfq=h^xT3^ZVXxQ<n65$bPR=z1bGWk_!
-zM29NP`VF4c6~(j9@u-^QQQ57xcTTfBDq24_<Pq~!v36B-emvzu9=S61JS*vkJ(J4!
-zE7gkgRYzS}U>F`{-I-NU9+4LE$d$AGN2}{^B0S2rI{BvXh<5?9u8u}{6sh0vh`ORY
-zy1ozHDtj97p<AsFU76POp@%I`V(SvmzB3=%`_6uE+k0`F#<%|Q;wQ?@xMDk&kWKsv
-z#f1M9>q=d#$~DhU8_4mkXgB|A&r1s)SB%CD&rD+;TKgqxxy_*+9*mx;#`}-B_ueig
-z-+$P>_kD8meW!cx`=jLhcQV)gUCtxZT=xKHjQKU8rDvzs?zAR!k@@x;oh=rd-!2mi
-zGknL%LHtC;!c-WydOj<*){J-jy!Wtuo){0KeO!_KTW)@vzV2}@8y8uLj3dg;aYWQF
-zmTjIePBCc_KRq|eIHfZJKRXG0Z2koJCM^Pgc#?5IB{B{uH^%{S{8Qi;l@@`Yn*@Gm
-z6Mi*o=YpfKlXJmSjm6Qt?}YIJV~D6vZ_kBAPA0C$j~84Vjq$5p91Z@j&bcsgG>WHT
-ztf07=dm`%*T0@J%KE`}%jWL6dp&nw)umzonm0?~pR)#S{ZTJf(RYvj7b;b=_XzO*>
-zA8J|F8JR~n>x|50Yc0{*R2NT!9_U+r+OwBI{}!>2CA#i30Nf?UZ(y&T`zC1(8Z}-R
-zVjg%9A6{o`Xzi>yW^la7%Fl6rG550V`UXmTEaAr@`eu9cyl4V-=7^?yozF6Oy}D^X
-z6YB1a)XlxE+r^TE;~3_DjlA&r(WegZ^JmZ=aP^m5{TX*wbvo@Su`Ibr{oI@S(PjCd
-zG5X6kO?ZU!zm+&HUv{`WHWgf)&t}JNP7cKgF5DYjhEs5%9}s>97v3-8zJ`88`SMAJ
-zOLZ!^(8o=XOF4oI_m(fV-Z)<(xa8vV#$HB?z-7`{lHW0NKuw>GXJ|XAIn^+hWYms*
-zqCVSm|JT%PhoAQxqzw$XHsF0;@5fy?t^~RJ{Z9AtJxBQ@X=gevfzM+%1r6;FZzE1s
-z_q5YF$vsbL{=kI&DcS7E0R51@3F>20G=Dl5xMtspu}O;6wBI}CJBQ@e{E^k80s1b@
-zYw6s>iG5_ePfDA|&^hwjPp<xFEIXI@zB|T$*ToS(4G)#><ADdjMeAI)uiD67^5A9P
-z2DMhDcw)V)(Z}kXpaJahVD>g-VZY`1G;)rt=RctsK<g*mKOXJhjQqlRiq9Ka4$}X6
-zS&HX6%S-z(Z<JTEQeMeN@qlUZ!-@wSz@AuI>HFw+{k?uYjQ`4>zp2Tzbwv9R%>JTL
-z&6Bhf8>hJnY@)$kdq>RvY<_iy2p4=+{DID}d>xtCGn#Z(lj1D6khA8ty!`c@%ZkI(
-z%z<Tz8O*jLpLY5(WLi;wrF+&K(QDlczL%dZqcuMDedI6NJeot3PSkUDO<6j1!*311
-zJI#q1IGwI8=rBCY+BycX2ZQJVX`w&m@izM<Z%|JLyDnY&g!9FW-k?8<{TXDwu|yj%
-zx}3#V_+VE<-%P(mY>=NXv-5CP-!4){y6JUppn~6poS#8YY#W#}{^#>tEIssSeoOCd
-zoG5%OYHr2ZP;+m5qk1jp=50Ey?`FzyZ^pgDwr^LPS=4Uhg*3lq=FT+d2mS1iBz{}-
-z8tsObs6WxhIiWK+ClsFbCu17aPsz_!Iqk(a^$y#4DBX+Cnp2V=thg!77wLWgy&6Qn
-zO#ZCx+l8M$cS1UBY{97fI?IC!Hc{(<_B?NA575g&^izJ7=3zZwpB~1ph;P(q;84!P
-z(f8FX&e9Kj3^(VgH8(TQlC%7(!6P#_P_(vBepi^cV)4>CtKh3HwQ=o>(B2Bk$nI5W
-zAOAS*|EG<I`i)D-CW*^D;Q~E|C!LOloYN1_he|qalfhK~X7?bjH#7@&T3_dRrFea#
-zm-Mq*ca%QJ*4Z^sr`x25@^beB*as`q$h)GwpA5GbrrK}jW{fC?*zCg`&DedJS?zbT
-zay0#@(IuXZE(uR?HngD6^r-{b#sT_9_2C2bsj^u*8%j1vebDP>TzWgty40V}<(I2$
-z&kvBk82vN#!b^h(zr(`IwR7q=I$5?pkiPp|D`rL(gJ-k<wChPTXxEy5oiJuIX?9Gt
-z)SUr*Y}D?FY-L^IFVS<gKkY@0_5+GB@ME!7`b3j&I57E=w&6R_|6S;pylfv}+mheE
-zX!`4N#7-2wov`-Wm(yIl_UxGaxrCkQd?$9ot_umyP!<^?57TBHeCd||HdU2ALB6Nr
-zJGE|vew%TS_HC-nGuWJq_$ve0gpdA=?W>>8t{;D<to0P@8=1XIqqZNAk7VrHuwCa2
-z``gOY`disI)6bS|e%WN<q4qKt83`BL{@TYs+Tm=+u<OGp^9$%sjl3V_*OcR(vn$3P
-z`aV<e)PI>g_=bZ0yPXbR(e<O0HElQN`fU0PLtCd^!#1%D*%mWy(709h;@E6wbHF9E
-zXGOd2thMUUo|${6=e#$1o^!DzqL+J9_i)o*9J?hBTYb3g+ibs}cqZ+06HQl;soIo*
-z!F;dUg=|tCc&o`%AGP15&|Vk$JC+Z&F6l!pr#Wip*L2!@@1Od-)~4G1VpZU2{Ddy_
-zD<)<UWoJx#bVIaFfm8pYZwCKOzQx@c;=#YU(9It)?p_pV?#IZ;z^_=DeDroF6UWbL
-zr=LrA<D#tVBdAkjHQ6oii&U_Eh7ZspJ{bC;MfCe~YP~)@4P5QLn*-jqep|-e4?7u;
-zx-|}Pk-VDr(e-7tQ8R|j0za2xN6Sv1icLG}*9eR)E!#Cky9cj*TyursH^<l<>Nc{b
-zZmSm-r*{R1tkt#9t|ag<^^<1mE!uU8RGXL8dJcVfr(Ju{o<`#vjH;~TtGU-W+qG-=
-zZ24^Km<*4<#J+|0-0{-vJ1T0;$l2ALy*Kbkmpp2uNnW+=bYp*opYZwjf`^>M*8yZ!
-z?R5P}#jau1axEjBDp#4#Z~J(b{-Rd4_tLYF_YN12o7EpzH~G`*eulc$f0{iR=&txC
-z9ayNgq4QjZHAc2)tYB041{~+`-OR-tw7!XP$;C{MaqflxK3w#ymAA{951&pfe}?fw
-z&={rs>y)v3G}xy>{Hx|>2iTV}SYF6{)&kD0S};CV4*JJ{f00;iof{}xE>Xv2&foZf
-z>;&hxWND{GcQ(%JW)At6iIL8j80pt;S-_bu8R`w#Lolb_!5UZR`+Yq1>e_2Jb&u=(
-zktvPuhHo0tSitxxMdznLm+@07?tF=?9V6JaSLxWJ=XGZBRD6_ytn*Xkqu^J|PqDId
-z@pq;!^rEP``OQUqlTO#~WFx-GXb|^Jkm0A%n>Kut8;$K`_l$p2u`o1lm5-%4%OQNM
-z=$T@|QGSNj&2Q*qG{=Lk%)8`c;4ApCsPQr2rSS4T%mCvfomEC!*r$7(r#ueD_mHg+
-zTswcU!Hhps$DQ=`ip^9$Gw#G+@qPP1mOc|0&oCCXz6|5e4>Wxly|cEm9b0Jq7?Wo1
-zosAy#b|y0B9QO9LX`@%WZ(z$uN{)k`VN7S>B4hPS>br!m#s%tMMm1(E+I#7u#(MIZ
-z2eHwiUp8!Mkq;F5L!G2i{+T<RtpvWY%_fiW2aF6nKTIq$?Zo0@;k-WImCadNG`A#w
-z=374QB82JQSFDd^#?qs*hZF6+e03k!<?a5`8`=F~i_bHDUSQOX->Bc%mSNXNQ>VB0
-z&3;&XP<yqu($LpA(Iz+Zr`Tia_kFQ^4P(Eu)_>FfFpUe09ZulWg!wMuP_ZyVJD9*@
-zt{H<)v|CLaCeo#O?aAO7`%WE(chD;OQtf-$<*B&1-JIi3(elUe+uX~ZdcWP4G4IH)
-zIwr#--M%x&IjVRTXWxhIy@5x%vG1ha4O|~<Zhb0e-<>Y#{1!uBr}x#&cfagdJZta&
-zU-r&EF4DT({{ze_7AYDQ7U}3xVzD;tvMUyM4lcWk$+{@0oZ=fGunRg16U-`WsAFPM
-zQDIS0l8wqKR8CRRiHcugi$#SUD(p~E(vgm2RGbbK73J^qxvy(>m>Y&&A5Q1|vGaN@
-z@4dd)!}s~&zUQ8q=QLh6>+{cuv0fRzuzH_=GCH<iuzfx$`Wa20b@311>xIwkVZV=j
-zX73N!$B*v&*yHWJAA1Y$gFlG<zaRTQzTX$ug!c2I_O-(-_WWPr9Kcw=z}`QPv%`b%
-z;l4C~1ZM=C4`%VXv0p?!i-vQ-f8Z=&pAqo+t(Y?cK0mhl^M^0!86oM!eSOaD$lA^^
-ze5`x*$yobO+}A&GUq6iV$BFy;dcVm&-|_r+;=cZg`}%TzT>lK@IRBlvuWw(YoVc&g
-zYqt~k^;7kGF`e(Dp17~C_dj>)H5Be0@Y;p%1E09Bk8AeLC+_Rp*QZBL+}CG2oVc%l
-z;=aCp?`<>hv7WfEfAqcB$Qk3reSQ2UAMU4}xUYYA<lfJT`}*>^T|Rqd@1>Y4yq9g?
-z*TufdH2c~XXN?p0^`qbG%jZ(;_IlvNef^{3<-~n`dGG&!>%KleYqnFqOYMHV*Npcn
-zhVAba#QWi^pVzmaOVl$0f4@-P|Ciq+lJ}eW`5bxAmhU@1_+*^VV;x!N^H_G8{r>OW
-zd@h>LKXToOyeEA${v8^V@oVD5-?>hFJ8f0`&FjbSPm<>y`CdPtC5ZW~SJL|54`DyY
-zjpraDW##uI@cnVS%sbb9e^*RQJfoS4_w6Is@_a8Ces?FK4IaSz(YN6}c|2b+%+E*g
-z`FMMM#b*-i=REPO0<URb^h$kJ4f#HZ&n)o0<bqd78ozrXjI!8%C=1^w=KIHduKQdt
-z^7)7QO|I?o-eiLPTpOQ7mG`yv`8@b>-Lm80|1ZM-`HY7B%rrk2QIq)nhwvUczY8q#
-z{&{4tqz|7#k36G&=2`OoH^0w|-|@xo_d5E1s^-JkN7o0`m!GHM^St-t{aAj_7vI-J
-zJ#VOve82AI=TL4u(-Gdxa=#qqPLE&iCnfJQ&(v}!@tG<<4}yCNcuvuNHnB#ZPuRJB
-zxr18nA}#kXo=>?kc6mR8&y7BW=RWxPlelf3B+o(rAyuC_xI^!$B1UB2w(pG`XFV>}
-zdepxV^>{$*aR=&wXPNnZm2vBVeq#S0O3`{G>9|A;yB<$UtmEwu%sD(;zIJTm{kjiE
-z#@flS!5Frm30$3S&yyq4-|ODD#$2$=w3Ce7i;^@xuPt*?Wd1*ERi01V&&kD>i_f;O
-zk0Q^s+x~aRy$e3W!ghIbJ-;WT&yUc?_In`K@A38glGNsi#J2tLf4dAdlJ>3j{5Gr2
-zldJsj|J8n9hTm~Lk9Nn&`26$fSocoHx`(xxZS;W5!wvT*v=!T&`xC#n)BgTWtfTf`
-zh0nsUF7~>NHHT{<+r{3icIy8fYyPpGbGP@ZB=(nMuVQ?R$)oX)#M!Gbe%CxlZ>O!=
-ztL|85ud>U(D*nzm@i(s%-%g9hzb`3T_WSRUXV&aCI&$T({W)dqwa@1JjqJS(&ws7E
-zccI*T|AL=o;NJCSkM3Q_tLS9igHVRZGf@eV??6Pq+P^D;F~)s~pYaMOMZRBA<{6(W
-zV?Xfu!uul6#3b>1ys%f<I*@zL1Bv)7vV1-<?s{`X#zW-UHQ7hyyN`~pF^DZ|kIYwl
-zp0Hnb%J`q;8uNh8K~4KE(pa}5te;QgGXq(-y!oCBZh6r?57p>1{C|7*uM0M7n;?y4
-z$NIp%?%~M%pTFsouP8dtW&aKz_aLTU06Xsc=bowi{;KwQko|Z>+vov#<}R}DYwR2D
-zi|j{t#I|$4ZI5=d{iD}+_Wlo@?EmPC&BwEkO1qpHdCt5>_M&hS&k~OHTl0(L?`+${
-zY)6h6=RWjY%74eR*-zzj17AEt_n{|sKSd0CEF5`u_1L5JsDB~qktAa+j5av-ek%3Y
-zeyY}^M)w@VkiAP{9Ube(=nwljIgAIM*<!}Z1F_@(#p}$8lh#SI_t>2>zt-JjpNy1O
-z=ire@K5IYMVUL}ia^1~mJXg#7Kjy#(BXic?M<dthHT2Pa)BZokd1U`q+3Ej7?u(9g
-z;JqSy4}4%%+3<ha(<RN$*XfrOedg}y{(U6Y&)&bCew)?i$yNE`|Eu%k{>^9K?dRVy
-zb|cS`JHNYTJVC|>e_IH3?Q-E+^vIgYx}Soy3-CNO_lvB*eR7<?zsbIHes0_YW4?U$
-zUzf|HB>w!&GtaCNkN!7a`cZ@brT;8B%KL2PNU<Y+$IFP{u^4H$2x*^)GCxy#z?JwX
-zC4TJnnZt>{!e1;wiNCO=pQ?mG4BcZYJ!(r|SLsW(^f{Ftw511By2qA2tkU~z=`NLS
-zv!%l-z1@~>P^kuF+1@H-d3QD+4g{MnZwOXaHy_-Q`}!JNzM&y_VarVo`-86C)xm1N
-zr>?oVshQ@k!iEENEkTdJ`f$^spyyyi%faekP5m1%yw9~f&|lryawrgJY7W-bdg`lN
-z>OK1pHP!?hni}bh*VT=6t%154sQrgM`<o6m)_NKn{GOZY8~k;iLyb2zR|f(OjR!o{
-zjh=l0`XToltNn-S#Qiz{O>&h^kL<pE{=Yx{_y0-{H+Mer35N2WoQOqn^@~3!j2FJ1
-zA@-%|t`bRJqpwx-yg2$^)lcEa6Y(7B8h?Ihj4z-4cdb4T3jkkbDDQgyou`Q&-)q1Z
-zE~jE&J;%`Z9Ya5;`grX#rutOmjCE;E{iaTr^2GC>SABk*_Q}L2i};G?pQrjF<iB3~
-zgwER7zgzXAxENi}zx~{e{d-hD5U2bD=Wpyks(O2zc-Hn`Mb^gt0o7;V2Tay$|IV%A
-zA9s8lL*I7{{h;dO_0O2<T^PsfweJ|dq>Qh4{?n?jKVyA=-xcDo^Ki}h>pO-%dEdtV
-z{$uDTRUfbXbE<b?o@1!5Dc{_+l7GDZSv-b*<rw<Oa*4l)oY!mr%(sc&FIZE)F4gCX
-z9wB013#zy4pSpJZx+=v!Ui+k}9={2`ZuzRTU^>j#l&?ee(=UnRfAhxq2US0U$+KSj
-z^tOqAtzb?5u3I*apQieF@$+#J&sV(oVb#ZLzaiDfi$8Pw#_@gc6n(t-WvY)CzpZ`a
-z__L~y7k^3h@#1IPwQ>BA>f^=lR{bdYcfIv78($E{S3G~8>f`xOcW&&zp!#_J?H}0K
-zzen|%SU+)3)h*W1zau^J|9Iz*CDq5PU-HK^*2(L)k3TH>c>W>P7h-W+Z~lyZPW)>H
-zYs#PX`Hl6R$IvexLtln37UnBn{==$|SHB6>&tm;vul)x`Bz`>qQPpSSe1g}S`p<oB
-zWB+B<$Mes4WMhA?>PJsozke4eH}=P;*zH#bO1@tGJ0IWJKdkzSIOn4h{BR~;@%pFy
-z3DL)EU%%>?F@Dz@f0Iv%f4um)^Bc!6QvDLn-|N*s|92bvm#BUkiw|CF`akQxHuld~
-zeI_cm-uhLww6T9s^%-%-Z`aDk{(Y*?!i}Z%@}ECNDi*JQR#aaYr~bYdZ|q;DdS9IO
-z?>>EF|9;h%NHy2A|MD^XQ_hh1T))>FUlT9gIR9DIXT}--?z1-bPgng=obf&35r1Et
-z`lXyJ`qnu5cGYKz9#xEe4X8d||BkAj^JBgC8OqwYd`qeyl5E%XPd{#c@fELpld6wb
-zzB$#$>%YF&N&I;J!>W(he>2{V{TEdqumAe;Hg2Ce)yM0<ii<aHpLW&9t6z`m<Mm&s
-zZ{zY!s6Jl*g$gz<U%%?(m2X7#p*Z6!zewW8^Dj|-Tb%iWHQjzC+<cWQq4n&9)Rc2v
-z9;Bq>-yCk2@s(>^;7>`)t5WYx_(Wp2+m#71AOA+h<QW~GE?05XhHkX0#lN28u;WoN
-za2$4Q>!M@WrIaMNzKPN#3oSSJnnc$Y7nqpn@~`Z(X_i4Z<Rzh*0qHj_v<5)be@jrA
-zuS^EdL%fwMgbUzi$m1%HC<in>3^Gop(xn{Uo8bCLf@{kVh^53oC^Q4$X2|_Q69Tux
-zKM!P_#bP}D2)_l8e)B>z2hwj=Xof-h1wi^`gV)0^3#4DB(0D-lWeCmk<>J>5X23oT
-zr2jO2F!r^Or$G8o3e5ya|8b$|1DS6JNdH{08gdGVhaUXNLNj$)f(uK`mLZVogF@2^
-z-hlKnO)t^(bntehFJWBMeo<(K!H*)n5UfHznIOx%utzwgY*QA2?7w_vHpu>)+Aa2j
-z%6jk~#H|Hc-zuT009oI1q49#O@BA+D4}*8YuNS0WkI;03^y?CudXRn|kma4jL7@qL
-zvmpIugk~C~-;~e{g7m8g?S2Jc55Fvsewjk!0qK_^G|M~1ZxCd^w1VuH5|Hg#EHvq0
-z4)iORO8T<UOn`4kdcUUkX}TZ03+Y9gUa09Q;3tqiSdiel4*B$euLk{K3fj9K<b13Z
-zniB9^&}V=zhJKLiD_8`wp6SZ5OGFNW?8ka#Immuoe3R&Vm40Qqa^4bs4~U_?r5nUr
-zRoo@CI>48rT<t<r1+slAgeDoJ-%5UhYZKC!g=Pudj5v!zYZUx1*bP%gKMV;?8<>Ig
-zLXh>!1YZR?75r~->5U1l--8Pv{pN*c61)WVgW#W`?*dt_PN4~ck3k;*kDwfWp;ZoY
-zykvv4&k~xYHzc_JfH<Qd%hLu@-zqd2AeNjho!BS;3I0LwJg^94{}qDlKcCQKgY3U?
-z?%U8;f%dq@(*$HU$o}e3wu0=h6xDa^5W8%!0QMg6EaaaGvK>-{W)4piRv|qMvLAZE
-zb5Y+Oq16Sl|2l;x0J2_wq49y$@Jj<Z&SrCkVUXnvf$R@I$b3>j=Hmj{-z(c}nq|;~
-ze3yjQJjl3%;2*(ukoks$rWm{q=~>`1=mA-;453K|*}qF$rN72O`i}`s7x-uRm4ocB
-z4ArNreh!nC_On700@;6a-UQcM5O)Y<`}Zq*K(>D;$a-fe$FZ1D4k&%f`3og|3S_@b
-zfGq#G(1by@XDi6|D+B)o7J-Xk8p!gc3eDsei8lz+z8Cy&unqh@7z7zVAT;G5+b0WT
-zJ0ydQ=N6iUY#IOaAjkil(3%7}{=*>cdxfSR`~%|Tf^5%$*Cn|2!>$`-J9R2UAloS)
-zWV@s)-5}e6n;6Tv@>-i_0c1JHK(<Fe$oh4IcKyI5$mJl*QzkTCkmZ@aAi?!k_>Y3;
-zusk5=8{Z7)eCrgNR*>_p5M(~nSu*beAj|1fE}SoNFUWdzDMKLZm9F}+*N9!W(x*&S
-zj=oyv!3cOZ+ILuJ4T79+147dQvR>^%;{`8Ay)r@0ACJ&vfUiQFbfGn$nc$j&-7LuV
-zoDrHnkp1HaS+8P{?U@Ju2+RN<2h%|Mr3%e51op!;I0OAK$Z`z{O)tpxvIoSis^V^;
-z6#_Y4%0Swe2u%h!jX3k?NqPD}>cc`)2=0Y`=-dR?)$s2HGr$1I{_}(Ezj~o51KEFz
-z9_hCZko8MZj+`U?HK+`O?5|vqc7taN%fJH2MIgsx9*Cm)bA=`a<T^HvMq@vWfv-e;
-zM}^if$o?A=njVn#>K2-Muo`~(Ajes<avYt)a`b~p+R_a&pIngnWP$AOOri0BuRy*T
-zLMs(y-04>)xPA-{fXugFXoBE%NG}0@3KoH^SE0~&LH2J3$o^V<h4?QB%`i9vzYvJ5
-zwiK$~r}`9?lU43V<FWrzz-th1CSBTpQaK8;{f9u-yHL6Ka*=zK^~zM`%FCo*mOz$&
-zQE0|Nwr3b*`?Y~T0R!L<!F-VIkta0EXG%WPAnnJ%AAx<~<6tky_&q`s0@*$#AltzU
-zGG4aOq=6j&sUXLHiqKk4)BOje{g}{nfzyan0kS=(UYg*lgZ~J~b!AA|53-$VLAFz#
-zG8^Rh%%UFU%oLh5kmX!BL)v2!Wc@}!yMExmLk@u~Pn*z`gDj5=#9M(|#!gRgoq>FN
-z!M%`c!BZipfq#SDaw_zw=aSGG1M8694}J;uz2Mg&=V^Kd_(i0rg2PB3I8E%kK-?PN
-z(hhzO=~<ed3Vs#oZt&k|f2!DbgI`8^2RM%OVz3x20<i@63x&o9vR(3pCKF^kFT6zR
-zJufuFDi5jL2JVGjg{GHldM?QR^@0zf-q}JcRrLN8p_xk&yIJsI*v$y7VUX=TBsA?H
-z<AuOa!>&zem5bhACN!BK?L1&V>@tMb@{1+jlF*ESv>OE<gx!eH>Hx7K7PkwnRuFFi
-z6$gb@5%>=HWr6J9`4>t5PJ-;;386Itj-Xw7!7qYs;AhxQ-~^ZtJ_=@l%r9MNrGm^a
-zMQAOalHj@#`Hg}1AbnJ5jexwbFbrOUej5^+e(-y+?*l&p`>@dJ1nJ))w93IS<T9aE
-z0y17P$aqCUlMgap9(X_ObA^@%q<@CcT1ZZCy&v+t(3%4oZx&>{8KId38E*pYg8jJA
-z8UpD*D6~T0hak5JtyYlnf*|7sgr*i`yeja+u&)qWMIikPg;pAfx8#abg;om4c*!8+
-zxrJu=WQn%~ejN6TLTd)3|FqB=1lj*pAm?`>$o}^Utu&D9j|;>WxMl7n84r_S7UW?N
-zZvk%cg9jilZW8+$koKb>$ISpp`);rs_C+A=C){E`4AQ<A<oN0UX&(Ub7Uq^rkoE&f
-zV&4POz76C!tOsdd2HpqzRFL+4iDKUc(mn`23RZ!%F9CaD?*VB)oS^enXgXAGSGfe_
-zd@BYyE{lX#w&?v?LgNN$=K{HItYCJ4)(pt?U|MJfRPI-~4WwTy$Z;AJS|y_Q7Yj`W
-zNV{~9>rI-_T6hNUMI-*a&<v_PpmG~%#|JrXgF>rB^!{R@$pG#6AlIohp|$XLjW0BV
-zDi5gK2HNpKj^m)vDiOWESZFdpJ3h$uElp@G{7vHv&7jHyDz|}le30WhD6~pM?=Kdb
-z4A71ba$QUlT2m|b`%uM`LTe1<IyEY^dcY#Is~_aN$N)JnTp;Jg%3p0-qu{q;7XV)b
-zyV<{p+yzp0sXX{+k+VSB&n=5w4^qxndGt?G?-8NtQn^#*3Xt_F2RWX~gjTNT{a&GQ
-ztL##F`j6r_1#+BB3ax&S<D^e${3_S0oCh+$T#)_m6<W!n_q&B=;tvvMTxfbg`gMcs
-z*Dj$|FM5Bi&}6HerSkHU_$`4C!f#P%g+cBsy+W%CJOy&6(5eUDj{J(jTreMGzpebY
-z^xGWBew!6qQ{aB|=Onlp>*a*djDVNGe+Xpx2SJu&Kxp|v`qhK<s}-6ukbcD={fa==
-zyHIGkLHfBs`mOxlrda^#HwV&h7Gyim2(4a_emx-lx`n14q+c6IzgCd_8WdW&ApN``
-z{j!B71EgOXNWWB&<0wUFjo^J^o|A$g+dCk%>Or=5t<ds<I~fOLJ5Mc2JCA^8z;0M*
-z4S=UW9|oCUFUa=n5n4gj*Q>r3WV=-ft$fvcRi6#AeX@j>TlLF$f1L4`K(@o8(3$|5
-z|ETImK-PCyXazyLo<gf0wCgFf3c+T?O$S-e@!v{42SC=dUud<0--cZUScmrWfnS20
-z3-TQ72Du&#{YLD1K-#r|UxZx%<hj@f(r$4<>}EjPje%c)-7v^=atBDee31EOfwW5n
-zzY5t6^4vW2Yq9G9X%_@(R{`=IT>_3n_JEAH@-!+1c^Nzx<7P={7D0}q1)-S&IZpaO
-zt{-8c38?H>ITzduyEIKt)%3+*Nq;SX4<XBWp)~<A-nh{8gO8z{ec;2e3k$7w(fdO}
-zQw7ql0_6B87h1WZ_j`pV8Kj*X<T!H)t(kercUou$LD~&~55lfrXtjbIFF~PI51s<K
-zR%qpeH^DCr<hddhOhSE9geDo}eG9kH3_Rs>wKKlZ>H~R>3xjV)d-n=W7sz%Dg0v3^
-ztu&D9-NJtgr$L@?hCyEU)q<CURUrGXLTJjsvk<35XwCgn{0BfE;`M?x@aqBT*DW+Y
-zkn2Y-cqf<za-3&?9Ouh(F8lt$0BFYn?Kq$vM`(PY9S5}IfSd;zAm_pIlNtxK<A8P?
-z(2gTCKG2Q>+HpY6lMImaWcfcd4rs>#?Kq$vM`(PY9S5}IfSgAeAm`EYFC@+w$Z<ai
-za-Ix;oG1N4(+4tcSZLZo+UJ8D*Lgy-G%NC=&<v_Ppt4`(dX<--kp8a%FGaa>!Fy2z
-zuh7Z{Ic~DRtC4@E(4>RkgMAu!KkQS5*2>Ste_3dagPqWi39V6(@kT(#8y1=Ykn#G#
-zF4*@8tuB!MokFVuyc=@4&?*BNuLNYgVxjSYjF%6781{KWD-)!@M`*dh^Woq9GnrRi
-zAm>%5&~$*DSM5U6H-mPEeLcwekp{jB^4L#Zu2+MF;71VOC$#cGmM;%v`ErFO3uO5+
-zL7p=`LMsKNf3naT`HAE+2u`qlRPF^iA3H$K$2QfMfw)z+r3B=7DHfVSFrDQRT3O(~
-zAzmuj2hRLh@|gf1fIJHNz+tc!@rFRg8x)#u@Dk`dLC({5kn^+^{4V5r@S|Wk$n~xa
-z{5bM25n8$6cBH3*%+C!nzm;jpZy98MOF}aZGQUZX^LZTPd>#Rr-vIbQuoq;0Js|tN
-zTWGa{%&!b&enlYj^MR~iKFIv?geC)IerX`*eG15V?*f_M;=j9G?*nH+<~IX!+)fLv
-z5s>-yfXuHGWPa@+^9zB@uT5yGK;~BteibYMxjqzv%r6)GB$x>@KM#06^2-ofE|B?6
-z{7BY?QIPA%2*`D0SZIboyB~$72jn_Z4ssnS6Pi?z`$G5QF4r!^4S+nSctKvTq=P)C
-zqzNq-$n((Bl*{!y=x0FQ=gR<@o(ld7>B~Qq^gNL1+2E5%Pt){@A4qx$$nlh=at6r$
-zUi!Z1=Rx+zsLDei+pAOM5XkdKHkg2NW(h41^=vnxwLIx^1yR3Ako6k^X+J2m20+^P
-z3$1pL^$&n&Al)ytO2C)E-wV<|TWDp0r$f#ZS{~5OUucCf3BQf}gCN^KAT)&_&rO`9
-zOkcrb0h%e0?K=XpeY-*C8w8neKxp|v=36hcYC+~(CA5k#i0GFE(l1kJc|iJQ2(5IG
-zerZCh2a6EP>jzn`dZEb&S>9y~R;Dir%>>AP9|Bq4PLTQfLFQX8v}!@-TP3tAK;~O6
-zw0z$YKMzR1455_{(l1SDrGoTJ5n5d+EX!MqKP*?3(By(F@8Y<mF9^*T$niJ;vb^me
-z%UcUF-zuS10W#lmp;ZQ+0=YzJWqeEWUHqoT7n)I!`L=0#tEQKL9PfO%2}Rp7^{Dtw
-z3QZqKzbZ|y(DYo8^I~pH{Dwi+b4X}9K>8JGx=+*7LC&A?BjVQ!(yvEo{2=|ZG(A((
-zSH2<hYyf0ALm>Uygr)?fUy7zDYx?XXG9NR+7WlbA&bP5qz3u@ypZbMXC-^kV7oyDa
-zgL9DcR9^YI%k^`}iy-x*;8!4r!7tDc9004p?|?q=2$&ACAJc?Z3dnv-7Fr8mgMji)
-zfGl4p$oU=wS-ybKDgzggUPKvoDd2xXcBwq}|6HzF$ipD@9pDJ$dhm<%19=}Z3!DIx
-z!AHT_5h>q{(3%2SzDc1q1Rg^9Izg5%0J1)Qp;ZskzE)`EgDih0$ntxH)(ke8-y(e&
-zw8x9kbbwr60wBws{}q>O9&$QJyELJh|FX>MNsxBE!!Fl<z^)afT~KI>K+Y#GNIUnJ
-zT&}M{p8Z#`n-Q8pkmJ7s{1TX_`drl~gB<5WUv#+!!7h;bbP7!s$nl&Ceh*w268*f;
-zjDp-B+Q4st6{;^+eICgDV)P3x*I~4856J7RZjk4}E}`iJc^>Q#np}`}UeWurg(ge%
-z{!F2n{JhvrfQ&aTG-Dv+jS7t)WW0LO`)h@!O7#8;p-Bd5=N7%+B{VCalX%NQ;|DoT
-zN<fa2Vxd(8a-0+jEf2_Xk^-KA^kktmG$`l7evs$QZtzuLD`=M!d@tIo5M+P&geDXG
-zHSCr@E9px@GX-9S^j=Nx(ewbwaaRU%oOnMY`DTL5Hx*>QOaCJI&VlbnzM~-X9TA!^
-z_)FLYH9er|C145C(=|O!(-#JG9D~ev;9<!(3^LzNkog8c*0&103;E`Q%r{SHGQcOG
-zUwlZ?7ldX4yaMUnn%<@9^&sa(F=*HKL9H)n*B4~I^Zht~fwSOdoa1JMW*U4s`e{mN
-zje}o>T`$OT^$1M>+=KL7P4{X#Z&Gl+b$?p&?Esl?5M;i^;H6+8$b5Z5lMlWO`Q{0&
-zY;Xv6yg9;rS3YIaOo4?+?-AMGt?9KO=kfACOTG&r^PL8n?;v;y*bg$_KA{PNXCmKT
-zq16Tc3+!q^=36B+d0+w3SNbG<S!l*Vt`8MpF8Z$oWWM<z^GyRE0aHNcn=CYLFb(<g
-zA_=sX9>94VcH<!P9TS>f@Eb_4()0>V&jz{fjNUK#4uQ-!3^LzV@cUo@WWIi(sRv(*
-zd~1bPIXDKpY>@e82@Nj-et`6``y_o-Xu800qzA(;*Fn^`2pmJaLZRgYd0m<ha{b8@
-znq2VjD2G>Q(n0#A39W@s%6c*Y{tfZFL9Q2FLaPmY6Vh8j#tjNh75FI1Q4W5C?GJLk
-zd%*;hBMsy{D7#nuOF;S;3r!wKe=j%+W`R6cCWG`}_=NapgUmk*q<^N+q=NKM2EPXK
-z&9x_CH`^=zV<7WS0qLI%(%&sKi}#5CJcuo9%Ph$GGYT^QZjgRmApJUprWItq0T5f$
-zmU@umzX+sX21vhjkbY@G!#APnw~UKsY$00~L5|-^kbZq2{lXyqdWEI~q+ba9D%c8g
-z{FQ_B%LeI}1=255Xi`DDeL!sKTX?a~@iY4|@yjF8&$&V?8$1Pame5-1ak*}WUoXi0
-zCIr&HO=z`(v=0icVvyq}7v%Wy3awO-=k3LhivNPpng>sZ-JH;x1sQKfXw`$?M*hVh
-z&ox;f=Sil}%zZ@8rQ;yS-7v`hZUdQL1<3N23#~Gc`IQK*VvzY239YFQ>v<cTN4##3
-z`E?0R3CMGBF35432{OO=Zpm*PWPW2pYZPRDBSLE!WPU?J%LlT4nIO+ue3P5`t$fI)
-z83CDJ805I_0-0Y4NWWb0Ye-K8>6aoj6CV`6L6GCQ4WxY)$a7deNc%jYS-xBBXF!hQ
-zL6G)gkms@xNc%RSDF#`tJdooz1*H8-mz>jPK-y0WO+QHcZjj@)9;AIa$a7mBNc&u&
-zaf7s9{D6$tPSDTtgYQB6RS2zekn3F;Sc>(nL}&^@o=37k+Gh%_rT1e$fV?QQ7C`#X
-zgTI0QoX|{z98V)4?T3X{515N`v?~4J*{~}Ix$YN&JWu3;?}c3|$a<v+&HVeY*+4%B
-za$lGgnsM+F*pGr-N5dfV4}o^O3r#V|dU-+K-<j>iXLn#f1a_dDgF<TnWWD;qE0Is1
-z(DZ;jFSUWRZxvca;MXA+3N0T<|9tQ%_~!{tHpp?G3erABXf2?!Y?le;D9Cmh0NE}*
-zAlsz_d^hZBLDs8EX!1d}OCHE}$rYLmknNHNa(`GtXEOgOkp7cG69!qYc989o3pT+%
-z8GIMY=@wcX46N4*3b7CQEDOy7$n)GJNc#z))eHVV$UQ=<8>D|1_zU=V3QY*){Hz6O
-zUnR7BAlt>GOas|2E|BfAfKFh$%z$^nZWv^}hJ>aIWV>{NY?lt934m;udXW2G5y<?r
-zK>BA2%@TsLUeh4kr2}k)eHF-jD?nbilnYH6$o->4XqM3!|BCu739Utt^<M!0AIdW?
-zG&7*RZ-TTR5nA0K>mO9sgRFlU$ohLho`bW&RQP2Htu&DJP61i(WT9ESQ|dhrehG2M
-zLFPLEvVLtK>)$Fgg&@z#^X)Fz4X_^tS?>{$^&S?QA&~VR6q<5y2<0ggS|uRsT@3y!
-z%2OmX`5@Oz4@mnAp|x~})O$)f4zk`uAnV-)@*Lg?o(8`Tp%nyKZ$HR-*9%Pv$o?(@
-zzX)c5%r^yOy=UGj^_~`*K9J}1BJg_HdqCDZ17y9^g(eMTy;Fr|_;wdBIg5vc)*#4w
-z4}hOVdHRK>7v#Dh0%_kSw8}vCcdjxEWWCcs)_XC8dVmYysqmW@T2mnFJpr=b<3ckC
-zvflmR7r+jX`T9ZDJ0E0!=LwA)<aI*-Z7x>>>_Z^y-3GGWtwIw7S?_?*q=R2UdD4Vd
-zD#&`LfRCX($wISotL$I1Anj*_))2^gcPl$U);kEY-X$QfLyEzdz^_PX<$|ntHpqHs
-z2~8?^3F0M#JnzllBKb~$tamTSdiMxTEy(MXWUwCgvu#rE8Ibj!7MdxL^_~=(R&W^Q
-z2@0(M$a?$1Z=yW)LQ?^bBfbx$eZJ6216l8-cL?V})_V$My$8YXg9Bg+{Q8AfH^_Q-
-zf~<Fk&;&r%yB_>9SOhZPY>@R{!C{p3UKW}$kk?7|-~rf|fGkg;GEbSU^e7h&i`}ep
-zN;$3^QT8gkl<mq^rC*t+%vO4oY06~fe5>R;qnuQZDTkHq%2uUcS*0vf=7Q&;zp|Ac
-za5LoTn<SqJ<*0H<*{keQwkunee&yngcs>H{I|J@PyN-ZZa<=q=|BUo7$o}gUnof}Y
-z7XY_|Mc{+5D+JGlolj^ys&|3ODDT1{i8C)WQ=kR^Hjw=pP}VBTmBq@*Am0B)J|iH@
-z*$ZOH+0qVv0O=u+<!logKge>HfZM?=@I$c61X)gx(C|$p>StS|oD(49j0?>W$Z}SI
-zxs0bQROTtOm4nSL*E^6;FUWGXfwzIR;9;a!fs9`vG{qpx=>=JiWbhW)xj~kb4;z7I
-z_U)n{1=*ehAmj84O*hDL=7F3?Y05<$9w|>KLtr)R@<DrD6`BPcrf#Jj$n<fc=>=~_
-zdYh)VYI-qPfb?ul&(ic296q{{J_9n&w9pKIT}bcL^bSq00J)FlYkHohr+^P3ec_<Q
-znHQQ7@KZ?d)$|@s_k%nKwE7W`^#ifA7Uv1AT#)OY7xbasvW3P2vL0@b_PhuItw|gv
-zu+<b#2(59D{$t=y_>T(B5XkcPfVA%xTD2gy+~O*sRRPk!9NZ26GNCB~S?+9*_E|zJ
-z1>|_+p@tmBCQlA1JCz}2o-$jRqU7Pg_Qz&v`zt#^t}E@zR*>sTuIjUtsY<tU1e*`z
-z^eKCkCCWUI`$9IzeIi}u6)fINp9lNEN$`Gf1l)soy&%_}HZY9zR*>UAC^P|(<J~Vb
-zB_QWZ2FUWHD#!PWJgDqbRwxTWmLm^j`7%{bRxZ`KT<=Hv4A=>dgL@FaALM$|0lo+6
-z?I6n+5}G!U<!cq13eaA6K$b5<IaMq2h;mR_uPgyszCw`Y^QxSt<d;6QB7MHb<+>4^
-z0$IKxkn2o07({v($ntdxO$W&GwF^x>$ntqXt`8~7sq18Y=m9x@yM?9%ya{$*P0!YJ
-z7s&ZDi$#U@GeR>6a^2|C^iEB$0^f&ppQh()dMe0yv{)r^7KCOL<hl{o^j=L5fDa(O
-zMAM5k-2-wyxio#H(vD{)L9QFgAhysg({FRR&cS#e1YZof4SWXrT5ue)3(UuSTroDS
-zWsviC3EYf!TojrG@O;SgLNf`{Z$fBwfdz=y0dgEvf%r(>mJ0Aiuqzi@xggumD>QD9
-z{WDx4{sSP_{SJ`%w+l@hXfZB$4&r8m96xE`!{EYOU9OYiHw)5lMrbC$H^Ofeq+Kt_
-z{MuBm02!wU<b6Ren1J$T3#}~h6v&xEYw0a6*9z=s!S5i>6zGB9FvxZu0P$U}Tf*Sq
-zVAlgC!@pZ-g}~FGuK-z|B9MOhApN``{W8Im;pY)rDIon;{>kM!3GKHmGz;J+$n!!o
-z12Wz?$asUGT@LUhmP2TDfTu%W4ze5r<u2C_==+6MAINbK2HBpyLem3gLhcrtHjsX;
-zLaPXT1LQ)X<pUWfA7q?7p~+=BWUtVqgY-)iTK;Qw94X6`MIhIUZ1AsOI(QNKfgj#u
-zzb;)Pe)AyhCP0phF_8I>3e6z+M%ed&^y>s^Uj_DqMc^kvA9ydA2i^x}gP()_%+-?5
-zq;gC-3^GnH$ntf7EMEZJ4%UL4ALStJ@<Em_7i9UoLgN8hzGQGaxKbweli&y8Hw?ZT
-z90WVSe(=3uFZfy57lXN=PnoOC0-0|L$nq_hO8I6%<}(H6g5x0V20)gt4`lhmLemAZ
-ze61k;{2=XpU>lePwtyb68B7Ncfhpj>z`pk?S%0fQt_KxDlMZtIUA|J%mxN{<ycOyF
-zn%<}BtsvLga!oJO^em9)vt&(oYx;DFtf#{u^BoeJ4v^=t>3z8Wit-JDS&#=nUU&8j
-zO&`eX&aluFgS0CWy}wXse4_W~3(fo$VmAje-mK8ffQ&aSH0>bcg+%Xf6Pi}h`-4K0
-z39_Hkm6Ll#9#eKH+m%(yGG&U=rJN`h|50VHvP)T{%vUBWS1uR78Ib3!DdjlGbJl?B
-z!^(1Hu`*qmqFi{h#F<l0gN)Mwvc7G~T4lL1Rk?hb*exjglszEFXFJICzFt`f7D4ub
-z9N+mulM8ObdgK*aDPRxm=8EwAD>w`C+%Y3G(;)q)g!n!onHOE)J+SWtY2P6<?I7(#
-zLQ@NJ9(h65GgCQ(Ll5OK<*+iKtOZ%G5|H)ERi=WhR|?2{l7)tcC^zc0vfHLL4Zah0
-zgJ1|809np{q3HwZ9~PQ+kmalZ?}U9hNc%FODFJC;EX4O3iT%nhsmG$SU)iN>SLQ3d
-zAnTO@vR-`1lbk7(dQF4OXG&-$z$DabTxj)ye%QBx*MqGf%NZ1!07!qo(3F6zR~Fa=
-z`%IAb9-+wqX`e1MD?7!04CJ{otV{vfU;K~|Iee)wtn5}6D}5mAnGLdjsmcW$rr3Y;
-zAoHCQni((=^_&)3Ltr-SI>Fb19U#lyE;J#K{%t~21+t!b;Ok+Z3)0>zG}$2SvxFuE
-zr2V{4>N%#Y1*?&s1#%tD6q?yfT=w@qje<-c5t=UWb;vKE>3&VmS2<7RWR=}2PrXUv
-zObSgOcp2ifYkEl2%fPp@KAP^;bT@bd(&un^WO-(VW(d3s>D`*%rRlZc?MN@wbf2cD
-zfuBJ7Qoh7l6q+&cqe!2?W{9n8%K*rJ?^ODg#UR(mLS-Jvb<Lx4x-v!6-5}!(;7~+%
-zD}%~<kmDu`{4nSNKL)x%t~WePv0qm%wrQ3@_Un?+OoQy#K9KR-m8~G-=7G0?Uhobu
-z4di@J1sOL*Xp%w3bqmdWp2Qsj?Q$zSK*lWs8$cg;5X=NQ-#j4WW(Z9>$hc`jvy4L&
-z%R35kzGZ`qpQ7X;i}6QyxLg;2!{8RM7vwna0U5trXu3eg?-ZH<$oLf?<F7#A_#Ov2
-zZpMVB1I&Tmuj%!go)2<-XJ~r5rZ1q79G8<I<4g!m805GNX?mNcmw+6Xxti|PbT@cA
-z(&x76I2M{AkmIsP)4Mgj9^|+j-iputpdL#((q6O536Sko4|4oefE+(1nw}1R9C8}i
-z3nqhuh%@AsIALWc$T(Rb$4dry2bikq)33+pwjfV|?*hlc&mc|^M3uHwDT_hInZHoR
-z#|+5vF$prg2W$kp!2s9+4#2;6i^S<r20_}VfgA_PAjiQ<wxo}P7eXEby<io{e$EEj
-zKUqRE`8w(60g&naLK6Vl&qbPEsOc#n`+5GgVm~J|10egkUDHFFUIenAGd10#>GKyz
-zKaYaUcSLB~LH2W%rdMcsCdhuS&BFV@sK?OxQlE10jYv-ex$aE7M%rl@yajeWD%XQp
-z;<r?(>{5CD)h<^a{AWPUlWCzD1+g@5=>ajsx0HaKFZtlP$R`6l8(hwG@z%nYIq*E_
-zCqddxZN_yTWsvi6LTJW8<})V5_bN&J5J*2i$oRz|<7a`m^xrakp0v}D(A0vgcfO|Q
-zX?i;N80^!)Hte6NLaXy!yswP(0Lby^Q>K9hkW)ampG&#uK{+9hfYf(`^b3Ks3o2_t
-z+NG&}{v5HNRgQu5>ruH&*{<oeAkPCOAlo@t(>)-^_sZGgKLgTk9HiZVvL0l66@hH8
-zOz>^cdqC#PFW;iy!mGru3uJu?DI?tnvOn^LCL6p2dN=jpK!)^d56J#mdL`n5iy-@T
-zL1^Yd#+ehEQIP(9ApN>PmNNjdoW)=X^fRxJew`MYewF)F_N!d4avFFM;&q&b`_AwW
-zfUIXN$bKnT7J+uZsD3G3>}El>>nO<bgeik<Ajerfcro-PAjfYp$a)qDO(Dp7`h+GE
-zWIa<s*3%6#?&8ZO?i9#+4uJOhA~dZa$8R=RPJfW~aD%MJ^2>ztAnP#zQs1r&C@VnL
-zCl6%4>6DrOnNpugkm-Y<T~AH-fvjgbxD{MTlQ<I~$4da*2D(A^Hy=7>JFL9ardbBr
-z4ogBa4Q@yI#z3~iFvxuSK<3*4vK`7nwnLfFcvQ|%dF~9+&k9W#WPi75daI`AgKWQ<
-z)A2br#2o;0!LYI$WV^J2EJrP6uoz@N7ioH~rl)H9e5$m|EXa151{r4zWV;N2Y?pp;
-z2iOL(KCMDi46?l0nx3WUOQ%VBhru%B-w$4i^@+bL1zNpeC1m~%6=-#V1~PxQ3bcwq
-z)-PX~tXw%&(ifF;Aji*)auVeD83iu@`@jUm4GXOx$hh^&TxFIrL%H%2v6}<g4*VS%
-zyIoZ70<T4SC&+QpAv8tc+mN2G>3N!-3Ua(GqzDH=j+;(pz0wE%6VkIlu1hH({p>gA
-zk-qX`8JEjKvj{T(1)-S)X+Homeupv}WWQwz&CHABbA}@z(}#toQ{@hoE5NrPPQIq+
-zX?hA+$#R~8&$T1JsbuV{Xy-|xH39Pe=s3vojS0;t_-e=_LemG*FD%6OD#_=9Ta{JH
-z@sp(-VK57Edz2w%I`}5UNfTPBAoEWFnSZj-xIqtO-h>9t{7K?BC$z@EO!!rS94BQ;
-zk1`G9cuP_8<}=6J@+Q1L0sA?S<8B<}xEm8%Js{(CD$A95%50?v<Ty)FdD*S|8EB9`
-z4e~zP6v%o_3e6aJG2#z^wCe{M2VY5UkKZ=10&*+Ja#n!lkVlhboD6}*kOx7odjmq#
-z2Qr_q(6oabUlkz7X}RjlRPO^hZnHs-zhvcHqR3q!$6Ke+_&|;?yw_l-<1^l*Sw!RQ
-zMfxO2`w5{5gB*8lnvVC<Y<twrJ_n&ru75^V%7j*@3*VQ3@_0c$my6-#x(qVT+Wa2W
-z4DwWb1!X-r0-1aXWSkNCsCou@24pYz5M=V@kkJSH{)!AT9WureKZ=n-ra?v;KkAV|
-zo(VY>d=N7EGRVs)$NiAWmqMNgyC9RNL7oOb44H&a$~gFO$mHpeS)Vq@<clGvgQ#}~
-znF1OAcl{;7bqng?`Wc8=u5W`M0MRzL+@<pEAnJU}VQ>;`QTYb&^N{OQ#+vN<GURJj
-z-Up6CMqAqc1t9(32r~XQkp5d#el<w{b5zE*Z~J2#vhA^qxbmS#^SIs$vR>(lu2ZwX
-zSAZVyWgzQ!CYTDI1tx>91OeB}!C3@EjFU!{+#e~2lvPTf(xY@Kxewa@%CIt|tWx@v
-z9;Hh;i+#%WSB8}#WtGyW^eA1*S=7Y#SL(iXQb^@0rBCTmx|FlnXKa6ESQ%1QDSb+h
-z(xsfmeq;M9!^)7dO6gO2lrH5g_7~e<8CHgrRZ5@IqjV`}v9H+v%CIt|tWx@v9;Hh;
-zi-BbOE5pi=vP$VwdXz5ZEC!VAujIZ&nfnsS{fP7_JxZ5y7W<0rujGDZ`zx!IKBY(L
-zQqE#OvHg`{Wk^}2^eH_`mvVNK`YXfAkg`hYQ+kvx<t+9EJAY+Z8B$g$eM*ngrJTij
-zZ~H5`Z`k!$Rw=npFx{hcDQB_%+y2V1GNi0h`jj4}OF0W?+g}-0hLlxGpVFgrDQB^c
-z;J+u0D#OZ<vP$VwdX#|eHw<F!JDbeJ*3zXic`oF7l}TKxp6XMX#3kaX87h+)(x)aT
-zE+?)eCMQlLO(rEL_PWFF<iyTRU7L~<hto#Vk`p`5>^u|yKXU|s`(HNjGW_)nc;Mw(
-z;or=a%;dz`SI@l~zOM<tCOL8HHPiUp|N4Q~CnwJ5F61UB_HFOqo}4(neFlGr3r7l*
-z6Nh#U?@CUbxoY;R<iwHE(bD9^a9Lkja$@M}_N$W<=dPZ|-?3}PuR)w^2d>56@`3W?
-z#O?z<2awl+Is6^0AF5AIT&WK=pyUmc_}g=R@Ab&>`UU(QyJ7r><iy3pONWyaM{gdx
-zIXSWG9o_GM?>px3cd%`!4SC(teoJ!V<SkS9+kR`utti{ABlx>;>mvS++%|d}N*+q+
-z4<(?y_azM92e#jz&~ZOFb$`M%+4n#~{{!IC0}0FIOkcumA2|4xgrTp1D_>6tje--S
-z36o^+BMIS0z=cN=7RixsB#eFo>^zdtbp)I_k}yjSj3o??f!&WL^gIgo{4}BWr{Mfg
-z6BfwfnS_xUu;XV5oj(Jof0i&q_WwL#;OF4-&l6V2@h1`{o&bku6Gmp4{)dE>KY%@d
-zP3ZkA(?f|PA@u$9oryDdg3IqoTzL=J*Ol1c1rFVvID9ua`QgN=4}-HGNu2u#xbpGD
-z&^=&hZ(>(3I22AC4ujM8CC=PO{r!od2f*RJ#F0L*^HYgkpJMu_6GQ!A*Tae34}*Q5
-zN$md&IC>;;><HLDhN^=z-%OnSCOG!3#PM%|%im61`8GKFoy58CfZdNJ_B;lzJeC;x
-z9ymCeI5Y|Nd_S@G`(W4OiQSKb3y&u*lEXhr9QhI0{gcF=pMZ-$Nn9dFewsM?Q?TcW
-z#NH>sr6&@X$<f)wu~~3>K5=Fqoc~qg!mq&2Unh3`8XQ_k99{rtev>%+8*phcad{E!
-zUP|m)qW({b!+!!h+LJolF{@VElR|fbeeX)@e;3$uS5og?;AltESO+-t?xf*&gEQ|*
-zntcyA`QD_d_kzovNh_V;!uygI-$&k^w0Ji-`@y8S4}wb{O<MjaINy`B&;zb~A}Mq)
-zxOi{U5;--HG(AB5Xwt$cIPgf);3L#OlC(q)e<Nw+8{qW!lV-jT4*no%=m%ivhe_=}
-z1jm1vG(mPvC3R1M3sXspWccx<zQ@7-r;`Sr2IrnmnkUD9oiy=luzew^V*#9BNLnEK
-zev{Py8!+_Sr1sx}gTGB0B0GPV)b%@X<abG<<iuZ+CjSBs{55Itui*S&lNQK{m88iP
-zrvEKz@NZ22ThanK@%N<3zcc-rq`_yH{!G#WIT3PChOmzH-|il`9h|=1Jwx`t(>?G`
-zu>B5q#~t9%9qwUr>7(xDkAhP@?&%(;f6P7nF|hOF?yir6(;s)wkVE&lhwlOB?{P1X
-zD}C<JKZ9cry2l>`2Oe?{J_HUAxJL%Sjv;sF5I8#I9wQgN=wAFH*#9N>z?Z=8uey7_
-z3Wgtb_dN<ue$zemO>pR2?%{8N?ca5Gd>5RWa!*fzy+3w`f6VlsxI2CVcFnlEXTaGf
-z-E&WZJ#+5fIdJTk?(tuOp{LyKPk{?hyBD7ZmzUftOJM&W-2;CFJOAYF`V%<w7x(O6
-zz_IpC<Ly}a`|jM-e<!$n=cW~M;$532-vut-y=m!gaPotjralM`erVIshro{RO`YA?
-z-}!pv9oST`!9`x*!2eH$uIegDyz+d}`>qg+*KQTLPvyT~D01ZYkrP#p{2uauGCtyU
-zX}oEbA5{5!Dt|`hZtUB%52<|3A&DRPePP~TXL&Q<CgoYVK;&Lr{P4B&bs|T8FZcbb
-zpSfN12VN`swsw&pS2^P@k^68#!TcvR|I2U=p**OvrST%aS30Hb5&3=6{?|+V$nTL3
-zXnRC{e{^t*=p(;3dT*A<k>9uci?(;<_bAVOwdf<i-}j)lN96bT{-XIse!nmOHDVw6
-zJ-zW8MUMPF-kCWfM}AN5GaA1yPx?Dg?IXVzcb8Y}=T!eqjUV~Fx3Zf=A1V<4Pip+g
-z@4and|DsQQ`$f;ctL4+EM;m)fM33s&`XaUGbtdggROaVMPIaR{t`z&lR><g|$awt^
-z$~gO`mWrOA(>V2HJY%5p*C^v`{$`bV|LoLc&rx|V^{3z-gzEpu`r+VJukyE8Uij44
-zN&FGqUq2@y<l^sU^7SzOQO-x6d_CoZoD^~ew0_@2Z0h~xw%YY=)t9TjU-jJ@?<w5G
-zqJMqFA93lQtp07PZ&m$URX@sx!|Us+FH!xys-H$1@zsUvG{(!F5qVPOvU5dFEav?O
-zk1O)~sjq#r$dTV0-LXgH$nR^vPwgYW=i0hY^xbGDzFziL=I3!uYWcfMMc=n#t6f*`
-z6gf>q*Bh=9IS=i^*XyqoxmQHjzhNC<`69o6yG8vYzvnrr_B~pkZAD@q$dUk@)+`V2
-zL-TbG#^O0i9+ywstNC)VkNm#;*R{TLs25*5OGH1W{(K&d<r&3IGrk_w{35^4`QhE7
-zkNjTfkFOCqk2gT@IvwjO{Ug7(xaBgDBfk&%OZAWZUghuM!}9Y!IbV-puCV-(`E;Jv
-zkN4I2T2y_W*6+nyzsT<&mR3rBqvwnL{o3D=-&cI8)^7~!9$)X!^3R_x@`tqik>4}j
-zv`^wiejoGJGLa*{r=F$$k>5YRK=nhnNxbu~7W=Yyiu^;BBfkg!DeeEr?_XEwcnXEZ
-z{s$^|-z74iD`oro-Xn6G##`tVIa}K|@_V@7-zD~u-{<|i%HBuBzE9=I?;k&-<ry6j
-z{RP^dk>9ti*Y+%$7yXQm@5t}l->C5-zbE~9?f=N{Z~s>1$nV`=a2@+Q<f_vC%+vW>
-zsQqVMD*7(fXS|r>CFEMVLGrIveTV9Is=h<@?^S(B_1CLDL-qfbFY)tqJ^suliC_Da
-z#4q!Seq8;xVIDL8(RYjf9jc#J{aaM;*Z#O)_4BH~UG?c75dTdD65pfw&#6B2bJbrW
-z`cOoFvgF^FEc5ew+J5P(zf$9+s_cD{*r#c{PL0>9`Wuo(pQrKOUnBV?tNs%jk00vi
-zt4-sr{6xw(q45H$e^}#9oGkWFX}o2v|1P!fQu|D`Z#zZo&sY0;)&ENK_o_Uu`7daF
-zQhZY04%Po!<E3gmU#;k~RKNHtsc&dT%Abt)quHOsDnG34S)}Fl>v-hv+VZtY%U7cD
-z9#y$W<+C+EpUQQruTuFo)t9UMp=`;&Q`e)<zE0%1YbC!q)%U3Wuc}{E{dSzkSpGiM
-z?@{{|)!%19pA>TSYkfl4H)$WZUE=>)^@FPCzDj*+yXdccllTv--mBwp@Li%mP5paR
-z|JzOC?`;!(f$GDm_h|gdTSZ@??cJm85mft8wJ%lsGM#S|s-IN-!>Z?(`|_2k<(*Z1
-zl9qSi{i44^^9yT!A6NTDwLh%($zicSqU%Gy+TXABo7gAg^<CQj3vUy95B5{G-$;+h
-z52uJcruz5d{6+orPes2?<)NR6T(9S`0P4jTK1*WT*Q<S{+Pl^Mt4YwG96owJ{QP0a
-zCxu;Edfxku%3hV<p>pJWd8*1j)t`s+Dg8Yv|C7pjD*MzvU1fg0nEO!`?D!f+`6%<@
-zCBFV$_2Jt@PJ+L^f4x)W@2Ea>m&kuqIr}{#pQ-VtwSUi3c~-|~0<I_Q{FlW336z6!
-z<oBRIrST%a@BKOSC-uu%C-{1|+V|mMF}_OGKJt6#c+bhUAA6&%c5QZx%s2V@x(EO4
-z{Qb7*`liN<{9g9^HD2WR&p)a8V;QhtufTYufB6$4zewfI$3?zC>({j+@?|RL|4!t`
-zE*1ZZERlb4lgN|%L_SsXA3ROuf6?+qeoy>H)kl6G{@v-~KXAU-8<pq2Ci1%gmN(-O
-zkw1Hu$cvLA|EKEPKOpjgw%_m<L~e@29})Q@m`{x74~smn`lTL``CJe6^SYj&s`byE
-z7yVP3|CFBJUfnA8nJ*XpU$uP(b$xuL`up%EBVU%<hY*La_i6uhpDy~pYkP?n&lIVD
-z)_+OL=QV!h_q~6ia^&~ASF}Ic&lUT@Jj^dQ_8VPKN-q|9Q03pMzF4o<J*qEL`F53O
-z)c(#li2wIg=7)V4e^g~YS4{a$>i-VaKdt(2t3FNjk7>M<R4!8cWwpOt^<LF~SM}$q
-z{PaHieFLd1{tn~3B`qmQUaW(w<<7Uq%74asxmy30-LdkQ9rl?SvHD!}-)jG@fmr!Q
-zhd%RFvHBl5;$7~L=Uy3W{~#vv>in|Kh?UQ|K2|;@Gghvtij{X@+^&xI?bKMgzCKp|
-zY*VcKrp>YPr_OZ9FNu|3TNf+ue@m>)&)2Um&)H|k%ASf?`M*w$l^@$5EAKofR?fkC
-zx;p*^7sbkty){;zaO8KZqyO&k#M&2{Sh>$(Kku-=#bN&)hke$$vGM-ou>Y7tU+{`p
-z`wuzF|Ab@wWIEdCI=g&6SLAiT9*<G^TOP)b%AF4V$#!|7`p-G^|KezWK2N&3KYnl9
-zyN<p#?}*jk;pi`Z+0$zOqVr;9KJT+yU*i~$9>;h+$ua&cPpto2ZTo2b&a&f0<wi&S
-zUyAj0b^f1l)aQ#WvHEv8#$WQTSpA<J^*K8&R)4o+{`)dx^*^YJmG5-S|JR%ztN*EE
-z{(rYQR)3>o{_{D~)%E?mqrH0^^MBE?zP`6S*8fV!{BL)xcjGt*t<G=QZhzO&SLL;_
-z`aP$`$`>Dqm4lA?5OlQf-yH25aJ26ms$=6l=4jtGNBiz+h_ye<F&;kcXy0uwi?!e9
-zSpS}JwC}}^{(8#MzPC8q_s5R*^&X7PZ{E?qM;z_@5l8#p>uBG59qs!aNBcJ5KFR9-
-z3_IHQen<PBnI3EZ14sLQ!O^}49PK;pXx|$h?HhKq?|#Sr@=izl?)<0N@;vBh-wR(F
-ztLOK(tgbIVkFZ)k-_c*cbhK}hV}6c1+V^h9d8jKlHvTVn#>#uQ#mWym_7lJ3d~=7R
-zyr*r7^?$|oSow^?Sou*$ep?;qoliOPn{wp0+mT<hBfm==`JL{le}^N#Sx0^+ImXA^
-z9QpmLV?W+=ZfyO&>d3Fn(caCD`akYy?_WFiqkA0nKi^TFPdMs7=*Vw}qdcE?)c;gR
-z{m*vP|3*iCn;iAO-xFK^FWd9UcXU1eq&+{P^5gb=kIHx0^CK$P1sN|YKW@*bsQit}
-zSbc74tbDnBK8V`?-ku*(`8s#3eU05dQ9VBgygL8a*!>mN-)8q$RKCJ)zo^_`_g7T@
-zjU#^85&vFC{FChdiTZaq;(x^vf0y0=QG0$4dUg4qcEqo6#Q%mP{(>X^pB(*}_?FoC
-zSJ?Y;H2+CQf8OorPkvr$b@|Syij{A5^k=`LKVR;NwZF^JpVz&O`si!EC00J$E>BeN
-za-2Ua-x_QGE64TXLC5)}DL>Z!0*AcAF~92_`jZ@TyQBR7?U>)`j`=<5&|l#w-xkMy
-zJyQ}}UVh)j>h_wj`#0J?o%Vc-$}9GGiOPF+#rjt}>hteOvHB0%vhQesGwt?`$_E|#
-z`%$>n<K=6P@${ra-jf(>{~_eGx_&=$$N}5_XmMN@pA~EWM@RYZaM+hQ>{IRW7>&mV
-zv{&c<N5}c4$Kn54hdl4d{~<^IuFA}oob5ZC4+nxxmp23}tD6t*$ldA<9J<cmP;+_R
-z;nIei>vq*{-M&5N;>v4pj$_@@aG<d|c&NGVIIMHFx75|uIt>prRn}Lx)bDHx9ClS6
-ztUFjkBC)Qfwx#--y5@%ckWo_a?xsVHwbj9frpDaD>R|OXIom6*stYvNwbV5R?c{ye
-z?t^K|O%3}|8Na`&=F+BCI~3zzQFl|EDy&!G(uNzW55=)xugdZ5*Hl_frI-imf@OyT
-zb(bFATitlTUsroY^})K!8h17|2J2dbu1c-U?tNG7+*Mh;ub{9pQ<5&*haPkJD=%yb
-zHea|c=R!v>zP`rp)f*au7uxw8ZH24QT8JynTVGmV-HZ;Yt7&FpB)5jfmSA;bu%S9w
-zhk{U7$1?72ZaTQClm*uz>*|_~3R!vSp$31jp|Ntmzo{CAQswLF4m30t)YR0qv_z8X
-z8f!H{Ym}37;cj%X-&5Dz+|(Q~JJeX$8mOxY*46Hk<l`Q{X!F3c>&^Ae*Xztcq#L$w
-zzwqkDmP3I+Q!|R_;h^*EKh#*m5xYTGMu+tVMmw9D>tYPGF`Mi5`_UrEq4LJM<`&7R
-zvZnrqmf#JQwbjixH6Uwgcl2X*RJyLYq4q%CzU!`s_f;_(yU8O-k$G5(Y0d_`_~<~(
-z@$Nj-d}E!xJnXxO`i8~>`z|httRC0wbvWehExvr$-ivnRZDe$@ZIt8Pn!AzJ*4!dA
-zZe4A`p<q2Ge?yHu{dYFi)~(5PTfwf<ecSfz+`Di46&TEG4RVY27VKQ(wxhJDVC(iB
-zYtr*BYiy~j!E(26+up+MYt(exmY2J3`u3cyYtp0Pa^aa{>vcUWJ#>%_Ub^+#Qh&>}
-zen;bPEj@hjU|q1;UZ}4r*tvRj#F~!vqv61zrb8{49uC&E6cjl9qxss^D5xvQ*~%u}
-zt;2OA4=L&KxUexQ*@^`<$BZ9o@Z&Jev*WUvkHa|9BgbJXaoJ7BVa&K2ny&5<*{=$A
-zmL7~WEV^~ILC#k0XeG@}!KRuff5d3Dg@&jp@LrmC9CkZPk4A}3*$t-6;evul59}$}
-zdAM~?X<4Kc$LsGHQ_nR_q{E(%KRf2R`bVoF13iA692(dIys+UwT}u$taJ^PjGmO{c
-zF+<VUF<WOOtjcR$?d8w5|6=>Upul_4UTo3T2e8|EpGz!GP-(p9A1m6S&o9>coqMd9
-zIa|@uSjQqAgGpGpPLtSXtGan3vsK+3$4ql8x%fIP;X85k4dM`U;4Nj>+vk{7hv7BL
-zeTg^6ds9QO9*2?Y{dGINhu>aXS;>E;*Ir(}>vI2Y#PC=8{Wl(z!(rvYrrJaPI{Os9
-z!4agep(Riqtf_bGM8`S?lpeTtpTlR(o_y41?MObVYT3G@ux@|#A%CzG+g{^=%Wy<)
-z4mA1gt^XR$W39g`O0V5s6KO+d1Ip4GtB)>v+i+;vmviy1#+vFt%OS}Qr)ZSpnw+gI
-zs}9fw*yCb$<r@#gHdVCR7njym<FJp*lWTIkH4TCKI-D3=gKJCg46**9E5}>XjO&$P
-z9WL6g$+@Vx`li_HqGQL+Ey3`Pp5k7JfS3p`Y{2bXb6&`R>o?`9^Xm)Ikk3C{Ofx?J
-za50Vee8a7KqJK`!w*ImIIfaVp*PN}G5(NjE>*@~TI$@vpBAqCO-sdw<Uihf&<rh9G
-zJNt!>x?%I~kgLDv*SbfqC3A9j?JO)U;H9N~hY4L)Ti5*Tm$sNG^g;!VnMf~8(CBoE
-zU4Qd<*X-F=d)1730iwzN;2cY<x;wA+;vL(bZ5eY*)*JWFKk9np{`p2-ck|vBtUhq;
-z&2_^QMBUMIMP2Q&L&eO#=tNn)|9f}H{mk9of?Zy%^=|Jq&XdGOJN|Kph@Dx_sT8sE
-z=sARlGixGsz_rWHNHgqO+YIrh$#J^J^oMhLtlDfM;c(e-v{SH3uHPvyM4a^|)^jP(
-zdQ<86;^=LxOK}_i2Hx^NdJ8%#9IUQ6D&R&qR{J7-+hKQ8vwe3la%*+_MYy#Zx%ulq
-z?AedAe66Rk!SA`LzQJGTIn;Plb9Eqq%K}ezqi0`$H$-vw_{M7gp=id}Ha7$z9mkFL
-z%NqCMmMGq9s4m4j3rBsL>-=@qEl0)JTc|NAy@#r4&+f+hsuEt?5NyOXcv<yz{%AFJ
-z<21AWCCqwnh=^Zf-A&O;1bt73_w!4!v&3GcY~8L`{cG>7RtB!!S3~Pk-jdvF|2KM_
-z<hb}*y_T)HLM<q8dds~x`(ELiTZK;B$c+kKaK+xVbXrC)_vJR{u^pnf7LREgxlwf-
-z#jvCD9>%e48TI%qqm|P;vT;hhx+mmPm$xCMsY*Az3n?~h{c*o!^-ailX1oRI?2$G1
-z%y`EvjuF-{z2mZhQS?Si)M#yqqq^vT-RN$p-2aSQG2B~omU-i7&O1y_Z|5B*xxuuq
-zRkT$Ql((VQwTd=N9IIo@^Xp<)g_wPA{d33O>R6YJ4j5}~<DVqf+QvUJIBnyc4V-52
-z4gpR(#}c<jeXLtyP6tO5t-2gvYZ=o(8(PLR&jyy!#@WDVRnu%>weI2AS%)=Ke~m%x
-zZC0l`y53!kx88JRa2l<-*}lernMCK%8nxWhk4~R82K0}wjutY<3&Wf^#oXYMV4VzC
-z-DJGRsdkK^HCLi*?PEsLaoER<r(@bjheG82R>!&!-RYf0i|p&p^k|#Pd#>vSM6K4e
-zO=O2&6Ocoo5}mlN$9n0}BFJ9rj2N>%Zg75g`bqCSD+hMpvvN4b5#Cv(4XYBpigvoK
-zUz3gO*Q>}z_UqNdX}{)irkt%c)h)rYCYgtoTZ2ulYflH2tp|hN>Px-e-QKHi_U~>j
-zy|#SU{;MmwpREme@v1BK$P*1Y+wDYLyp%LG@O=sI{yp1@>l(c~<PCxYMPBdq2QKsC
-zjhX1(ex%)SnYXl|wB&Hh_N(!BM&31hDj^0A7rc2-X+uGAX+v-~<P8e5)$1$_pPcyL
-zDoxJCwRMp<N$QR^O%Cr~MVe)|-72eFVUO3_fR?ye8VW6lgzIl8TH7uKmq**?*zMvh
-ziQO*$8%4?4f#=v_9<;g$kB{6~cUfW1MS-L5+C<u?;mtB^<QC5LmwUYjuP^pShS7e=
-zjr)tyHZ9vRUbbz$rgHV*!I-&1+GsDvPjL6zfxgjL%JJg*y1KEp=<>qdIa~SgQsiNf
-z9B-ichDZsEc3@l|2-bUZ8yfdFVMyQbW)5rIm~FVRt`_}=B>%xT{|}Wh2k(;cp|f=g
-zxed?d;1Q>_<!q_;2eq8rP!X2zf2epDvDNV0&S6aGNdMf3`FwPGKifXh9WiHXLu263
-z(W>o=bit0MLqVkP_8wk640H|Iv*+37#@+QFl$Gwx|G?Z(vwu)-_6gyCCa>tltMk~m
-z`o`&2Z%xy|0A@+_emw3U73?X!t}<A&zh-}dy|b;36?-Inez9VYi_b3>-<00qtn=I|
-z`ho^r?@+Sp{^;?Qu=LtoJRn<}le-_c<oLwizWw|0nC{l<me$e+9!~tbwbRxdN1n%$
-zvn|d6=l|Y@wRQcHK99P`iTHnTv(9<J>mDa!&Oi2GdsxmQ-u0{Zk3QILT$+F6!FJ=4
-zY{fw<_K5vIc(C2LDE|lNN}R#;Jk|+`7~LwPH!mEI<;C9njNHlC&?tIO!M?4rv8{c_
-zg7-K!G>hEu*w85YnDd5ajKy0a8yZFHAooQ!HnuCl_jq!0ujAW--0GrFHm=`<$6*>R
-zgx!$G<8ib(kHa|9sK;R%ZQA27jx_Lbm_}<T%^cUIG>~V1@Ck2P=3$+vu4xD!#svu8
-z&S<C%?tTlKxb$GluAD$q!{OFe`=QWa>A|b;Z0JS1{Pr_aS008?aOqV++z7Glqk}(s
-zYcIDcP}f+w{ZI?uaLviBUiB#q$g3Vr)rZ!1t$N<Ea?N9st-;F+F7sY?^r?2<f^p=W
-z%j>;sF4Bv?oE`S%5Uw@%qMpqS)&5*w;}sMf^F5f0k3OG?CnDsL*aI<7UB*6#&vsc;
-zme}_kO9~2h<?^yGm+uzqGrL#b%%^QDpKat-?c0LqL$!UkH}YdE&Q>m1-KMQ;8?|7U
-z-hM4T@b=2!<*PfzQOBDL-hS0pmCfF@HI-K1A-4r`wg+134%IeYg<Awo|G&5^U2Ypk
-z!uu%R7f6wkd~MbKpglekXA;jaWA8te9ZN1w<YP^FEavIw>jrTHJS<96l|vF6-8h;+
-z1O0X50e#Q=|8!SuLDicKZ<Friv*e090{<k_{2pf#Rz2J>73%Kn!l@n=m6a>2hubH_
-zChnkffo8tn(Yk4!S}F&X;j(~NJzhHK3TZ46_KP$Y(ZgF0jZ0l|v(AiGH7N9s4%let
-zBVwF-6=@c&CnTP7d(@zJ$>xg4$+<@jx)*5|O$%gC(cOwPi`Jbe)`K2Z@QY$eD9X|J
-z__bUD5W?7c#E&7Ga9QBkpuE21RpUDUR(~|#;d+A40tgRLu3CQK;)VF{n*Z}T;Ah~4
-z>e$JW&yGcqD#A|@o{ShiMDX!1uz$^8RDj%P+k9|bwe10NPI=u;tl*(&w`d75CS8gs
-zgD4bm=I|%AWqeE^md+s+W(Zk}9r<=7)#gn{zNG6>QeO+|06A_=TYwxB1z5NNaxpp)
-zAm?;k!&?^)kn2_6(J3RatQQ+Of2~uV2Ijrxbu)yb$N6|3|2ja<X|Ct9ZzMz2Yp1$N
-z7SIF{Ajh(TPbomosY##lcOgCfdC^-ZI&XbmdO+9X6&~C+o-TYzhO{}|%VcP^9KR+q
-zW0(yxEE2$U7O=Hv2A&bPQC=JFXOFWNJc4yfSW^B?k;}Mr^+fpCKubW#nwxltMdg`X
-zT5>B@Rj0JNc!#g)*jlmjB1SiobTr{hGHtx-PUpquU|s;c3dk&w%fHB=L%}*!M!bcc
-z3duD@6KBbBOoE(eIunx)b|Mz*2rXt7d74nLc&!{>dwH#-SH>-)6)IfDs}|&F?Q+Wq
-zQ`wNwG$*XiL~+C>PRr%pqPU$F<<}fZODGdVw)_mZ@Ul88(&^C~{v5q6!-{lBJ4jB=
-zVYv<?)CcUG1q!$m@f?Jd;-C{Tai&BpRsNUZ!i?49J1CiTh}t^_I3#k~D3(BBh-gbX
-zn^4YC_$?!X(nI6T4g(7qZo$s)4*W)m%g;YW?Zq%njbt^_zkjf*ebJK@K|#_AFo%@f
-z<NFUHu9`q0_<E@F$w)+q?s@|n0`LB%{u}G5J)>oq%<?Q+8%Rzo^4;Ijr#ssvZVZb+
-z6%eu@CUe)8c`ijJ65w#MFTL``iHUERLHuHNVPOSq$&7&s&%N7qR|M;@Z7)Tz5<GWs
-zXoK~Jn}~qu&>d3pq@_1IbSj%Bug|m&zpwN`@mL7K=G<YadqmwvBekR}_zW%Ep4Ocz
-zt^1Q<M^V&FOi-!>nYM$HBjc>r6!Q=IQG)vP&)|T<RoOP&Cs>QoBxWfpRq!XeA7Y}r
-zn*qIbH~ZC^;w&vExZefCwSvO8>3R%SV5=U-U=7AKxa>qlO2W3H!~Z&+RBFNc&Ut|m
-zc+5FgwjXm^*~}TO#z&pUJAIrAI9pJnZz>ES5{*EZa~+u#LIxT}!^ax`MTW!C>wG?Y
-zaT=I?q{DX7EHv`Ip56?5%syf#7lvh<q39dDMKl=sbNPEQ{rR#uNfVl};cLOZ1om6C
-zdaOzOUD1JQ4~YDMY4Ss1V{M~P$SKqP=}lSEnd8&r=}oafhOOyzGDmFRWKlfMcIS(m
-z`?B2qGQ+v#*Ag2^%J}zPoK^w_nP=zuYq|G_K-~?(GaLCV{kDz)z}4rGW;2sh3DaZO
-zP>pjH-W<ZX!q^+%+}z<K(5^sG3SjUz__*-X;(;C`y7<gjUegSuG5!ig&VH*$*-ht|
-zj?rPrpeQw~UbOJ~NRup}SjiZg<w0<TR%M@}lB}cI_jiS8cCw%zfOiSKfzEI=oLX%E
-zrJlGv!@qd};A3ziIb<U}$9pCx?gI%-p4^d%ZgfRI!(78|o8))EAq4B4j^u%WZ)+Lm
-za-`L2v;A&JVz5&6QNplH>G)$<j_N3UShn@q$goV+@%pfAsjleNVVUxw)37W@2Tf7R
-z)_gLdm;%~2;(a&v`<GRA8hiQEL*lLsd4E|-#xV0Z9wWvxf78n(Lp7__beS)H|0$~=
-zF%%4*ptnXJ*Ex7y!!ZpsLwQAKnlv$So|EZ#{`8XHW+z^-)pP}vLw!O<FbP)%j>2?`
-zqz%ci@Vy(7fnz}34l8|$J}jY53Um>M1PA+F`)FX^R^JTDTO$-Kwka%Cg$IO-$^c&=
-z*~O|6_u;CK0cqHnj4({Y5@(OF@44Xt{*-*O@Iv$=G$)8l_K+U}d4`b=uUeJKo^W>`
-zrK#cTmamj==Dj0|jH=WD*zLT+w8CHQiIWw!8##GjJCw*~<71T8XW16q9G%AiGi$8>
-z&+N~O8i3@sLcz6QuOi*IPHM=<$Uv~kjD}u8Ghbu(g4z*dgcx@(?)bNQ7Suk8?ge#)
-zt#IS+3{Yh=y11>N|2npn$S=y1y%M|BVpXMS{(76w{{M<i)9kmOc_H?g3s4}9dz`|1
-zAK8*dLU+SW5jOeLF?lpp4jOC@<k@<do?R=Hlcob@oxP@&ax@C(ws8wK&tK_S%wM08
-z!{+5?0S`^?EdP3mFjwUieO)K6oMl-<+<A53@H5tfVHjGIe?t^blGb6fA~8L=XOV(-
-zLT^7-xILk;=gF0oN(sxpQ~z*8vJsp!m>e>@w$YxJV52qK1HZZvSt+1bDjL+8T-z3c
-z{QlQp>>@$U^vS{s=hJyWN}r_3X{&*gXKqD>^Vfv>xD?Hd^>oaR{5bzM!e%kjGau(4
-zrD$i2W$3Dzagd^!v2JgT8FKqo^?ZcVUwEqQc=bL17T$fm&W~*s#5!jt%xBXI3=j}$
-za>hbqXU>O3=(7sG0G16KNL-qok>T23nzM1-oEU5GxH&QLEz*FUX00?KH28qBoB=YI
-zN<S0x`?bIto=pj{24^!utf6UGGzTA{ZOLje1_o_ci$O4;tj1x}Sy%>?7&hMwQGt}R
-z>%CsChHOe!Xw)_%OB-JHgdWH!EHjiMU+M|siOig-a3MMimvvi7XpJ;Xxh+d}rep62
-zHIPF(q&2NA6uFDl+Ok18)}*{KIi681Or(I-(%Lmz>spo&DB3!jwE^zB7mSd_Is(r~
-z-9#?R>|Tc0O;;3RXPb6TCuI*`#1YqftjX-G`tI4YrV;8+T*e+ZR92hVBDUqkXRk?w
-zy`Cu=(_F5je~ts?8Li9VDuJi8JBdA04m;eY<MWmKn$R=lK8u#5jf*bXa^AAL5GO6i
-zbr@|5$eMBE2*)jFM~JHhx~?9c{B5^f-n=a9t3=-Nzw&$Y@wN5%I=`|W`#rmROK4fa
-z4Z#k;IVe#+F|d5kGk_u<?_~k$mNJS(9a7dT-JG?=*;%<0VfTzL9wU3ETZ0k#j~ZTz
-zceHOfZlTrRcwzh1jok%fU~8b(t1~aOn)3Z{FXwrBi0c~NYjg6vOwzG+t<DhwqjjlK
-zI=vNlI0~puefpU0zb@wobl=_|00r@@uwRr}e*E!co*z9E)E$_2$wn)kUKuQX!|Zb5
-z&2TXjLJ`-Ay#2c|#ifQwM~0?HiT-zqr#SYK7<T?5L8<&jVPpB53BlkWH2PIMuVMCd
-z?BJbOuakxFTNY-yUHr4k1rn*wwxQ5%_1PwFvaK##g-}|Rfqt7<Jc<YS*JAnbe8?(m
-zA;b6=lUN`m_~!s}f`11}OhOi!?E(MVfSttUpROE<;^f~AUxoF%;pA4oQ#<xq>>ihu
-z7Ki+THGrS)@(%zO@wbV5Jf32suD;O6=v2XX?c(CyW4=>Y-IUx=!oK*nS5bY*Yp-JV
-z{jj}?%6r{<71DETuVR>WL-f$o2CX5)EsvC;o~#DyfvY#_fvY(DfHY^!49&1SR*#X=
-z2nrFCU+5zhN-^ZMmfYdK$CsySdi%7R-A$jKZ{XB~3#BNRbRR8}cNnzKFHdyKZYNq9
-za@a_W?t-?bT&G0T4F8F{ppy^s)8xa>zyG@<zl|mzL}cC0;-&(ua_6BaALu&2|Ln*c
-G$NvTvc-Te&
+literal 167416
+zcmeFa50uo`b?5o3E@(B#MhF3tu#H4_1|vKn89c@@*}+Yh2g@Xb<d%(Xl7Xr&fva0K
+zI0*0r&mftaB{H66)I`H($qep4HmNG*Fnbu80CN__^jXHy>>+8gVfJWt6rdAL3nfZM
+zu@y>dq5XW{pI^P-udAVD%i42h)#v=We!utUzWeUI@7;Uf-#>i)FR#BRiZT&@`q$3$
+zU>pDL<>Bvco|9Sg+VtNOkD9E}SCogpuek49c-M2Q0{PptX~*V&vctaH@6Y_h&wr-z
+z?ce_BR~ztJ2)y*QOmrIvM$@9leH#64+SK#tqd~x?O`ll(nbnN|kH=k&peU?{Eu|5;
+zY16}n9fj~a3D4v8gv;2uIb+~`{{PNI3me(uw@sTK{c7))9Us}W<JZ5kdHd!qn>Hou
+z`}vI)&@(Q__qSvW{qO%T8AJ0JkbBv*srcxQ?Y&#S7=I_>&E90;)m;4JU(7(V#-C^z
+z{sC{>)<+u*Nz?E59lT#~nSQ=x>pS~}jNxktOYalmCGorF;CVbsz;mQbgEHTaew)6$
+z?cq}4(Gu`~`Ip!Kqejx#9lY5ts1JBI`rEW=TTfqcQ}34xU)<cgb<4JNeP`xvekaD!
+z?uqbxQKlHx_sd@?6nAXex%I2PTOS6$PlV;)<={O&$A&)P=yyN#d&&lRQaE^<OPjWA
+zFMN5kjZDkSZ*8~u{a-dZYNK69p2x3bqM7{C&Pp!I{4D3cWZ&j`FK-J>_%i;hBEK+}
+ziGHg!iiCvH{n1OA=wp23-`f)X*5kI_K1jI!{=R$ug5P@qc((<rs44&bEGh5hQP!XR
+zl4%=jw(Z<XqwC$aRbf0!c!bZ-8ajM++xADIL>i(@I$tjbC%0|;<~V-<f72%l+hI)u
+z#D`sem2;zXe{YKEL}QP42=5`&P#@gBt+@HoM_rR`QvXf4ZCi^ww{PFPwfO4>&b>*z
+z9{Tl1cWnMLVft&5-&W5?H^rlCXYZGG^lsg><xATNzNI&T^FYs|o44<BjA$C)x4F2Z
+zch}~e!y`pM(Z50D6h0|_PDtCNyifE#`jx_tq7`Q!KLO5{dwRFhRutbvZdA@g)T$R2
+z7>p)?^U!8E(7VIZKP6Y6e~=1K27k@E%{z>Q-nhQh<&o9fdwO?lpPas*df=COJ$qt4
+zr|KK0nGB!pzy6gS+fs0T9^6uJetBE5@TJu|ca%17-O*e0jgNF5ZXm}GNr64Eb=%g>
+z5AFQQSGH|8I4WI(PU=%F0h;8`se|0n+td3c2>f87_=q_1#@C*$zLAakd41}QuYIrb
+z``Jww-z-O?Z+tCNeIpn3-=BTF`%<>8))GB_;c~V`>g=h3C|UttbC*PqcaPr^)zNEn
+z+lbe@!Y|#@S%2eetE<52H}FOTuci71-%sD#S+CvJS+CsDS$~OgKa`2;OQ%QmB{QPB
+z#i6VE=7`Pr+UNea>JJ_O5104N^32h{Ay0l!R4?p~>OBXedhu{ne|RXWZ>~l4EnB1d
+z7q>_C3T2e`^Gi9U1N>4}X;)N#w)}x>&t`eb@8_4N{62np$_x1ADc{X6Px&r>dCGV4
+zt7ks%JlT2t&bu~`x;~qo!~2|TkG&ApAG^r&JkL3v=S)4Gq%MZ0ZI5rd*0!j#-u6c4
+zAGiI3sDH*^{?miKT~VDr|H;`co%N{Y;}?6oI_u-qE6U7xIlm^V-(&JVej&fX(uBBL
+zegkz_8`ayszUf+N9lvRq-6@#e7G@hTOY4D|iTW$lUo?*4ZFKN@n!wwVg104r*XQ6t
+zOTpW+wG+CF#+~q_6P|R!lTLWj37-s~YxzB$_1?Wv{XX#T-N!HZ-v>?ZgC>6$n!J>K
+zPc5WL-+s~`=&ZjCT^`B2=jBI^LtE<bG`u6M_B8w(gnvWuZy5f48~%L<{vCyXzXShj
+z@UII0D)3J@B5Sogxb+^2pmnBJ0LRjis9uG)6?hw`0q@?UE)DpXjw#JN(#$hyD%tF4
+z=|of?$j+twxhAZ1yt95q@J~?x)20nPxhR6Sl)LkcV9l$Q&PMg`&WXOO_ObI!XMM*~
+zXmg~qo<C&M_3_)wcd4(lK9I|f*0Ohi{~gyzZ(tQxMs@m*C%YWnJTxyrbCuC|l)T5t
+zyN~kscGmwwxUA`{e`#3+{irMWJ+eHi|1L87G&1}2NOts*6;ZvGy`3^{zt%PbIGK-M
+zRQ@9QmACB!owVi0yW4pb*SCx^mQ%)h;#W{Mc=nKP^GbMsy0bo<od(Xcfj9fwpJk`l
+zUd-NN`U+F`RZ;yT@3D2?q5R|%-g?aU!l+(okLvl0{L+pT-m?%~+B@r)RhRwA^rfEG
+z{!%OH&y)UwO>gMmDx5971S3D6_ywdp$FFUdPvvLvKGWtY%yfL4MP26Du>7vhdSMRV
+z^C^FUEjQ15!M}r70lWmiw63$Br#^+X&}%wj&?yg{3ed^K_Ye=A3L6{oqH!L66rgjQ
+z=P2LDTv>;BM-G%<eQIg3?NjrMJL$jFk9N@~uCBiJxe?P>=g;~&NB!gU)mP}N)h}l=
+z(VY9IJ>LCid<)jS(Y^nt=w4dI(-Il@`4(3uzxfwZVQ*tSgpca+hi|@lCw+UY3ofBA
+z+K}h*Tcf&k%s}~`Yu}Hq{hr#$KzY+O)z#~QadgT{^y@RB$?C6v<K^gk_kA<V`;~0g
+z${Fz(k#)iNZz?CyVQt7nTc*>Lp)$Xpv9fq2YwAy5?P+M~F@yB?(buS-T=K@ZzOOvO
+z=|*}@X)aTbB|qBp$8FQ2IhB!nPV)O}zaK@PQQpePrju<m?Du>59;YtR4?7QvH<V{!
+zD=b48GH>{E$>R5v@`toY(=dV#f}=Jd9It@K{pg(vv}n7#v%bi+Vd(P_!MaR2N>_o#
+zUIrWWYtTGh&O27WcbIp-3q793R;XboRPMBP$=^kmJ~SQMWClEaujNO`gNe4ut=2X<
+z5Y-F&qk7M-s9xNSZF1DvCVQ|=_F{`rR_QRmvQ3WgE8Ap<U&<}*`w46m*(c~IYpcvP
+zwu-S+=-;iaGMnGquRV4hJ=&6~KX#R0`dZm9lAruWTSsFX&|euF16^I}rj4d;jrA$p
+zfIg6X{l?bV(8SgdydK~P-WCgQhSUA`$sX!U!t0~YL|^wW%FKMZur;cG9D68XKW$H@
+z@7*4he>Q2G^z5P^-`!c?vIjjypR4}&VftHRo9uVC$pLiRL1&vBO4=qrYiyJECTx>O
+z4tLi3j*w@_=-U2&k$LaSUpf)hzeS(%yVxhvzrTAE`{ZftlN$C(75gM%e}G%>G1(00
+z?Hc$V$Nqq?73>tXabw4zD|%16H0YAj8Ks#^8f&A-7Ld*_oxqmp$d1a67{p$ojaysd
+zT*{U>P5LvPRwuakN)bEfIrXP=$a{yibIy|PoYR@lp(D>*nb~<kxM1U4jOshRjdKAT
+zXEEuaQyzN7xWkX$l@9ma;J8Y--wy6`8uf!$y~|x1@oa_C%qGq47LP5I-P2jWD%)Ty
+zyjU6`FVGA8dY47@zUxuF7a8|<O<@H%EVnoq8%EzN!EF_Jhi>Wb>mvPYQN8rKtxq3u
+zy~LF^kPi5TF68ID$|UV8q<z)+JWu}fsIxwnomTtvY^%{hJJ&cmtc~jPW;<JNjitlG
+z<S)PvW5+K8{!-wz+|u8Bg>qkv>REVG1fJ-WUl7#`3mvR>V9m0y@(X~mkY`p@&(Gm`
+zo^&r*oO|XV=d+x>H00nARv=6;d-vIQ)4mB`LjR`lQn$sau&%RVkAPbN91SkZd52!+
+z-O<eCg9oxb3O$W{r9*^K$HKuzSpGEMXI%bcydSsk#<rPn^{VWvrnb#Rua}$HHZxMT
+zO)F*3j4YlrdB56tH@Lq8buxAib^1TBKT2znpVp}UJny2d;XAbMZRcsB51bAiWOKLJ
+zbbpkxjea6OdBpk2d!u?`PgL(Ygf2SbbkQ;V<n8F9T}~GraJuNA(?z>~OdTZsLto}~
+zkkvi-$n+i0;uk!21zm%jdz~Xc`LXkcN7!FC@Rir6`ug>qM%Nf$c>{gD_mwwVe#iQ&
+z2O0<ZCZRw2QZV~0OryWHCiT~r?dXkN@Mt&f^$>0Bh|?dE<vmV+?1iWMoc`FK)E`ZK
+z+XJMhjl{m~31}hT7Ju6Kw&;*S^v4kX?J)lBxAAYkgMWJz|MqwAZ)^CsRrE&%{UO;l
+zIsx2z53A3h9|T9)6jgYV@PChzrsmRse_FRx##%;8r`6}<+d5q$9b$Yd+Hubr(_S0C
+z?ODO1-#-`Ce|U%M@6OWSt$;Q|$oyes9Q^wDm98vpwfd-rKB|WLXiZ8VLG!{cm$ydV
+z<K*2>`SfANx7~nmyVCi#;P=QXd|Uao$lBAx__kg6w&;{9I>qY%<u8(7?J(`z_O1l}
+zD&o2*7aV&?vw01CKZ9R8CjDu3Pw3a?*GBciI#>VhsQ%gax;~n`YWuzGc$P)=(o!pz
+z>QD1ad9IL;c3}FXcHS39$$q>YJQuru{D7r_^7;O_v=`rZCV4K9_o9Vk_%qY@l{Sx&
+z3G($WaQvqH(!!|T`y4pgcK4KYh;)f?k)AMc=1~9nHY~rJa_95C0Gt+DxLyZY{D}uw
+z^B&;nb*sWlTd4C^()BcSf_P!{#J)yYzD64OY+xPc9eL5a(G$y^o>)GKo;c_0K2cAU
+z-kZ`B;!ihEYh=r6b!GB9KtE;5_hBo+1G#uR>S1&P^=Re;zZ3r3+v4MlI3MR=R4*Ke
+z>OH%odT|eWrG}4l485`!y|T~gl_O5C3^~1WlwbKc`+rRRBHe-wJlQy`e4A%!^U^iX
+z(q12XjXw1io>zHZ;Gx|aKc~m?-RKEq()c6N6Mg6l{G5bevNfqE`jBJVmGw)uH}Ok$
+zCDZrPhsA!;xujm{*-e|;gI&3oerBKOf?lBwY(9p}9dLT(Ano^%(<_IQdZnpfazyql
+zd5#8t$!X`8pj(VzaueP1G`gkf*eSU69(R2SIBE=Z!q_S8xA%-oL%*ys&v5Ki{kUx4
+z(rL9d`c-s*#!zFwgubZ-J2)QWJVW}ku6?@qN)Er|JUWWLeh@uk+U7aZJ?Hwb^Ym92
+zERT0y6fWqe=h08zFS&?*T26ZCl!so*Z~993(Ywasz6TuF3imna*uXD=SG}uT8u6@4
+zY4BZ;JA+3bWp8nQ$#!_L!uciOC!fcUk9wUXzaqcN;$Zv@eXjwxwd8GS>+f3^89%1f
+znlX6x5+~h~2exd=Ef*;7EI!2RQN4715}%|yVvI7X7dALrY{W<NzDc*G#b&{QC#99(
+zxdQm>fxm%gA$i+*Xh(%tY3uEj^&(|mZIq>Y=NA*d)WKgC)&Ion!o|Q?$}<NT^Lbt%
+z-4)9lGrl^<>A9np24<X<Fv0BIuY8?qKQ)DWe<j~e_(GQ+TnpfAaDa}Yr+IfY)Vs#h
+z^XG`$($F=f!-SnC>`)^te}?a~F8^`fPuO>(e-=3XvtSba^ZX6;&zzM0nMv8RB8%rN
+z-d}6H8{FT4IvHI=os6Hd5x&oKehPFIeM`%DS}k6sRvUi-{{;Mut*$w}$=;jIC;s4p
+zGtA-H`NTJwCm7H;Re2$OwI0pKX&&kE3zb|n8fB~w7T>FU-<x^Rv@hB675a7c(V;D0
+z>4-*WkSClwvSANiQ{S6m{%epnsxc(dS8xZ)p9R+4*DTDtCcvzsLqd4ftc5ifSkGX8
+zf2&1y#@t$kIt)+;y$iOUXR=?oHh^6|h<!dl-3CqFqNj$+pTm~_{58#IsC=cZWIt_w
+zpK-sH@`Kl8gAMRKgzbI>TYj+2JG#&Ni^?}Zzckp986Bi=YGaIFWBx<*hZ+wbc70+c
+z+YKJw*V;0jbw4hoyhGWCm@j(>+|>69hMmKzWIsdt&$#q<tf`XyEMcFeF6+T(J@|hP
+zeA~WhaNv8;e1i{l8>DWgPUX)7`wPJSLX7jX@KN)@KX~A*nX_mnBNN6`bGM9EvKb=}
+zgVO8Ju`ze6x!MJ09`?KN%FNe7bIsWrIU2V4gpZLUz9mOh>bnG45#Ost_nwxgTxOy?
+znXraDRXQ@G8Q^%C5|2zdSy#?j)F@}fy{Bx8+Hf@bDPSbzjIgEPi9YIYXY8|Djz-%_
+zvkBP^?UGutNnXOjyhF%=@+I0zu1Q-lVYY7af2$o9Uq4@LW%&Jux5L>7k%!sW2BC-A
+zl$SlrcjAy+D{oe34nUVd<j~5C9Y-9%j~#?}3acWYgUDk=@;H*g9=MyhyJLGGv<0Nc
+zE6D85`PR>>j76g@&`NDR(r-B$ovYuGXta&rL14DsP9M$~iw{%X77<q+6I~xPzF`%A
+zQ8IB!ZJ4ySE=gF`juzx+Hhjs{YUEu_-deWB@K0@BzPQ?Fb<E0?hgBh;!Hu*T@)+2J
+z8N3P05~lvZ%DIaNAK{<IwE;6@;w`L<t#jGY0Nhkg1v~^Ju20c^t8b}xI2kRr7}-)E
+zqjq8FlCxo9UsEY(T^no})tIp4-t)cEk)<xPO~0dg@htC_ey$FrSG$u;RCAWjCZ6{h
+z!ZT~}Lhim<9d0pvu=NsL#S5nDBRV2?{8mOpOIHrxhE{~d<&*<B!;b!h8M+i5?Q@p)
+zrYyn?j|dBSG?8zU(^&ni<XG@zFH}dY9AMWn@29@#LHekPbGHNZxs?%1UxSNzR~u75
+zhJJA0dJoHx{`O^zqnD@FpGxmSL)y@!eJT1xeW~|H2f=UL=qvGp_HJ}Azo|Y`c5<R0
+zqs^1AU;T;ZEt>Wv(9GEIIq9G~Vwp1ahL!_rzsOC+=_k=@5dCCm!PwLwHbkN?L01i;
+zt19TKDfK1j*Lk<tzT_G5m~wO0{!pJ1%h<3D8$>?T$At1PeQWZO#>gS@u^bj{KWgwT
+zLqEQa4CWgBmSnq8E@?V!8WTp}IRIXR>QmiV@qnwN;w5L5>}>Uwa|g1M$QL?VeV@0f
+z?0YC*R;CS(0c^>aU|*f8Y>mvIT{_y0SsF=4s&7ymSHF;yxp3{3)>_?dWUhiN2-jw7
+zuAW6k<llSQwD2XDg3qrh*XXfY6<oxJ>TsZk%aiEg;*E9b&qxpFqS2oLuWzOGa7UB8
+zgn2!zyx)e7$`|TkjVC7BOSz$c)y~rGWr(rhVa9^TmPF5(K7~3Pc`F9}478gkI+R<i
+zP9V;vvHf9%abzoNt}h+Vj7mQ>m1kt#<Rw0q=WNigj##;=5El2DW0rU7?*vnQ*r4Gn
+z{TOkkzc+E>88QfLt<RF3Or6Y_a;Wbs!>Z40`jL4?KS@V_w%zIeVcUiV1&8*bb}4*g
+zeLrTu$0J8C_w98I<;<O@zPZEUHEio!8)+H6pK|2St9_~eTAOj}H%M#RFKN`D+cq<w
+zK4<<lmTk`!U&1iMCsPONn{)QWu*W;VnYCA5x2wH3^eyj2t8We8%1&nzrn=U$+0mzS
+z+0j1m)i{dpC#B;xMj{+NT}}QDt7oKB#UDf0G0W4BEO2xsjo~|K?o%1XX~xE>mZurr
+ztT7vli|g;G&mz)!Kh4-c!#1t4yU1tw4jc>DuA@^wR_T~#+PdkpbJGk?7EgtXW(xED
+zqkWeys*+DK>FqY<G5N9{UUsxHmb6piews7}58?$w`lUJ&*d@H1_+b|xwY_|KreD8<
+zyk@66I>>*V-oU>&J;vYEZ6t^rYs6JdICV2&u5Rw#@Xf~$Pd9z1saMh2CxjXKD=Q8d
+z#p$NsGieAjG$YK@%+ff(BNyP&;nJHhPh*?c;Nj!PrZw=$+B_<6pbSp@R^Y$EY1q<L
+zZPD<3%-TG*FYxtrv>&nZaTo1nKyB&Agjb3lKUj6JrUQ%i8h@L%N1SNV%<ig`9e&wX
+z!$VUS^RE8H&Z$-0w~1>~A9Q3~-k+l<WuqF|$+b?st#sJ5hGygwzNS3)KHz=%AZ`Nf
+zfuVA5MEm;#Tu*~*xHe90YMixe5p5wOI|F{C*SSr}z8t|{FFG5b>}-G$^>?$cNlvD0
+z19UhWfPU550kT*1-2Mw1;|ISddCXW&v$fT-2PTXMnJ}wkHE%3iL3YMH29C4g46d{*
+zgDbyfE8C{eDLQ*17uXXW4SOP?+p{U%o(*(+nKGH@)jDkNS9{$)a*xwh!>(`51-c!Y
+z7~P(8x}7*9YaJ=wo~1oeufbt-`<T_k-dAh%flf||Z}fq-EF*i=)$}DJR^OR0;0dnU
+z%>>;}oay6D9CRDA_}@&w8~szX<$m^Vr+;#i6AQ!O&|zVv=W9*-CaviQDKC*WSnt?2
+zE&8>`?{NKhkY0V(K$&tpd_PW5w&lfkgZr))EuCY#VMOC7<R@HwsFj`FfPB&qCG7^%
+z+J0NSvF&>R*&d{yN!Sf8Om%w(+zj2(M~0sx_#Wsa(S8Cy(>hB!tsLmI4qLA53a=Yv
+zR~UZgEX)Dy2aN;DZm5pgy88K*0r?Oe4iCory!~MCBizs->ui!THVL>|o1`&!Vtw`p
+zul>1f6X1&ue!Y{{?`mFM@Jw4H|GmUlf79S`(v-tHc}})P(VRBcHDjOs!tV!rP^x3L
+zzD^HZ@ZVNWY`txrC0kC%cQ`vm`lkqde!V=%o>>GAk`eEF$sQHnwhcJ`0K>Gytc7(u
+zyt93ai}!89<y9F*Z@Bca-g4gtU*1(tQ@urdQCtGou}0t2L7du3JN}#5tHXHK3ibEM
+zpx;BIb;{m{lCFO{*9$k(6Vf%8?u<^o`M&7XC7yxEu0fU@OYgiNn!R*q=PBsYjlKQI
+zpj$8P<1wmD{Qc?pR-2!#$R@s&iod@tu{Y_U$`XB5UvM(}lA7V0n5$qNRplY0D^7af
+zU;H&X4Vp@)NncD;yOfSCTRDj5HX38rC!6j!!auTmj<nZEez4Y0O`PX`miB3MU{*e`
+z)>GNNN8;mv)rodq1N*C5v^bbC?wosHl%6w@U7plavd7hyX@mWmGpS^)P5yDGYt=So
+zWB9gZ;E&jL*OrDqtbQQ{--I=Eq3@%tK3r&IIxeH=;A)&cH%S>CP0BD~VI6G$Hn9%2
+zkF#}f?-T0K(xeUw3+rI>nmRBKq;}b;Lr_L;k}^7)lwrccI#?flVjZmRv~_Ur6Y9{!
+z7NRdo*1_iWc1f}hK^eJ8%IIiPh6xMnVC@E92iu0|OHCW%*R&z^t%1!&yStY@UwyHB
+ze^bwnpTOqIVsn+>e=@zU&h(|o^#DG<#uL#mFE9N$XET5U{rkx!x7t3-+cwoQV{){S
+z!5J<c_!~Xo!oSyM!==X)bAx;v|B8AVT{33<t1&mvR~eaR`V`IOHRkcGt!MGH<Nf9x
+zeyB{Xfv#rVm_B~nQfT!O@SZMaMhnD0jo;QwSdBiTT4ugbHolt^5e}NWs*ul)w+B8Y
+zVFpL?$94nwnlSK;!{CYVkgoK4GcE(VR)=jL#D1E&vY(8OD?7dE;@XKz({^>crJ-o8
+zzW=KBHT|=-zkT07oB7+d+;lT8(e}nSUS8DUctDusdWqEoPgjf9S0DfCw-zjEk3MS3
+z^?V}kKGKSZmlwMH@S6N5UH(VD?s;2o(A@EIj_7ZA;NlWI9k#xE%+s=HI-5D%dGOTl
+zA+&a*<*BvlEl+K@<*BoS#zLO9Se}k}p3a4*b0_dr?MeL6ID_FU>Ep3x!YmI1z7D&v
+zau7D+d<^P%FR(PXwMaDc@)Pj(IDD0!6#c|2>G1~r8ugn<KO2{zAO5WLYfQgvtE1nY
+z(9iqk)`qk6%bM{{OFtWK>1W4qs>RlzO=K<oa;>gS%!hvS8+96S?b6eayoP?HkLgF4
+zp&wz5HsHdtLD-1pWwq@2*fJ^odII{DCeW`@zlrp-aS8ejr|4Jq^t&7SX`CH9H*4FU
+zf7iUJrJoJA^mF5EV<G*fIr;PS(;izp_Zjvn4f%8Q8wuzKJS%?zt%hA#IS3nZc6!<I
+zaV$G2{b-PLE2%z3d+a9bZ{&BS)7$>R+1|P2dIjyB)T6$EJ#=%l{$;ZFW;W%7wGHL>
+z*u7$}WKL;aRS#>bima)6m~~cd*pa2JP1i_bLpIr~&iJ{Xv&(N+zHlFyY(+D6;%r9E
+zt*{4d0sFt^@XXh`vd1svXWI2;vR(2sSDU@^(zm7E;FGc`diSK(IPNiPwEAT;7WUdT
+zk&>kt);?ee*8V224y0fmu&~rGmkuV^OUCdHIe3Sgz&nzHcO<}Vs0nUI9jsatSjSSZ
+zjs>_Kcer6wB<gy?!8_dq-kB7<GXZXAo8WfN!FsL<tn(>Y=L6g>c)Hm&8!_E3I(W}F
+zfycVMa6YQ{g#b6!>v_Aa=S9}6US*x?E3A)u)ugHAUs-)h`=$(!uQ!3sKCA@nmeq|l
+zv8-#fw)6Y3AKr&;#(sX*h74neecSa_CFC(bE5mwE)@xy#&0K8tb%}B-Gpt=!0<Yd#
+ztLu`RuRGhT1dcxJd$-s;JGZmmaU-~sJ`eulUA`w`Z6NDO%bFWE<BL!A_K;?a*1%Er
+zmA3xgg&FpIXX3r(^egciRgGh5?eI=FH?@O2r7ITp4)<GPeW3c(Jl}oYZcXS#@LM0%
+z`)G%~v_r2~^U$|IU3$8q^?HXR?*;c>x(@D?QFy(xk;mby`iNeo4U`e|f7*AUus<U#
+zq}8JLS-OZ$_tUq9HdgOCc!_;=d67%Ajy0H8H$APjvBs`iWbG<L>$TvcKHx5!KBRFk
+zyvlb$=QUcl%e){u!@+uFQJObvs9%?@cOSoI&Fcl$3l}*P0sFOzZA@Q1VZPAtVHJFE
+zV~IP+Q#$MT;C{94*zkexcx~<p%2*lf7jgED;R7<%vjRS>bbR35uQx3{2cDFn{g5&5
+zz_$SYAs>DNnydbzuk4~J)%Q5{9c!V!*mu~Clh${6V_owO@|1>Leci9txtjX&9q*Am
+zM17a3zIG2zjJxDc^<7GRm$~}#9`8G;QD4d^9KCUUf63Li^j7M7koxARFXJDY6P~ob
+zi{Y<7M}j=1y{^9QS9`QfefjQN=-SyX>f5gR&V!Z>TQBDCLh9S@>dSk<y_-EMlu_7s
+z<NDr4eZ_Mxv%alqPe1*H@ppXKG`{`2><#TjYBtWNz9-*9{rY$oM7Ez=;Be$OkN!4&
+zmkXmU9aQ`N3&#5LbBLes^2~>>*aIdl@A~y=FO$~eZO(+4W%HC~QRbYe{z@3XoUoZL
+zex{9oF^peKSgVU~wec?y@9m~3*+kj-)+XARJyob>*lU;J9GOi0;Uk&)=Ale|%TfAB
+z)$>)(Hqh^DO>HFXn<h3A{f#@%=cFBD)7+A`le88Y8%cH&eM@?LE&sa8VL!>Lmil8|
+zJPUc+d9GtWweb5IzpwMW!t*N66`tpK&O6)cY+zfRrEivwls(i!ebTlS`Y@p@>F3ek
+z{l*@`MoW*;<OL7iXyBnoCcs0lB;d^t;2}d+_XakM;Gydby!IyW7N_7X4&W{I_yu-{
+z;4O3TmN$X7A_Z?n0B@zoF9mOvgV)sr-kKD=H37V}9zVMd#@I!|Z=HkJ-2~qH6uk8T
+zybT_|6ugZNUXO(ruG{V1l7!c{WwqH)bRX-4diyf<k25z|#r{d;*_z6;HORBw<-uM`
+z<k^+Vvn$B6+n0kq6`o18Cz+>rPf*vrzOL4PjA^&e)pdUp+8s#2I}pG-=y_q+Irbb{
+zO<P}0TVG9EUrk%bzNwk?wfx51snT&*&WR@FoKBT<Iw<Fi$D6hI<vX!2@5H{Gk9|2G
+z`*Pm3@1R?c()QIamXL+~IoX+vr(kE+K5gxolFFaw>`d_NJ-6D}IjiTocyRV%Uw3nj
+zJ734nyol}~eV%#<{!6m|sH67#k25}3AfNXA_r8|l+yUE1m^4?=SI@gNFVdI3K$=%b
+z^QukLOT28W(ivd4-^P9%Y}2dFZPT4s1qb`|70#aeM|O^N=T(Q>3+RdGtxo9US2lm?
+zATZC)>hF6VoAiZAV4im{FQAKm*}*&yOyNWR(q3ENo#$M-=Q#Vxmwk?O#FzHY()|6C
+zJpCE`PxNGLPw!l3VdgIY?@YuVS7hOARL?(0J<nSjl#mbc=;>+B);vpH&e*#2@LS~D
+zoEwEKiT2^%o>C8R!J)7b7|zx!?YFoW_61=lR6gmBH^M}(0(3Gk9Ut^A+0nk~YzwwP
+zfXh#%tk>WZWsL{psijwK7)OZCEd?@~`9(_~$tOB9Y2Tkf4`JVbZ@o)%BCzj|1D|oz
+zw)M`wKZ4vI#}2~2U;PV?=FMb#NIZA4eKcZk+#QVR+dX={8*``fHTZcfqK&Z^09zhg
+z#Ms2EZ?`bxc5@Vd4msK6SNj=D8{o&#?Eb#_E$nG-Y3hsZJnUrd2=e|9oNOL;@_r1M
+z*s$VPAHU|jw6(zO0p=`V&Y1+}K?m~?^8P<Km<NF=e8^wg?c{yGOLqWy_hs)V9r301
+z*^|rrDktx)UC1T$nc0QSiM(G&-mx!?e5K`mA9dO5<egvbYfs2KVX|9IUdcN+B;>uz
+z;$B$QknK`8VbrOxt`TPTWJ5Q>5kF-68<<YsKZ(4l9FL2U_qV$&C-0ocG*>btIhG$a
+zC7D@CorZ4j?^^+XS5Cs;-Hva2;M;P?-`zKmnWez&0p>DbE}sPEb_a78{@KqvnA?FV
+ze8^wg?qsIVrQ3?U{ymqjk95SB+Hap!W`5}K%r8b}dXSl=$jlaG2HUiNZQ4|3w!o(z
+zCo}vO`A*0TVe&g-nE{7{%(PqF3kw_aQCdzIbt)`tgxySLPUH7@|K_JwmXn!pQI=$;
+z^j2hM!Rq<|W6%C<#Ad$e&JB)l8{ykx$F~hPkeQj1nK|s|MP|Auk(q7>b3Ogc-*GUz
+zfeAilOt#O-%vzUj9rEhSUQ0USOYL(em6@F%v@r8)keM!IW-T(a2ARRHDRfODGi#8U
+zE+;em7Wq!d3}Nwjhx!?CNXSf!#l3L7;X{|^5JsIe#^v?z&18nNY?D6rPopd+Gnz}#
+zS&Uv+B>KHqt)5Nz_Abo$_U_&I_NSZs_BtCQzbdkQ>MGu^Wa4+V2Xx{=>G!{ue~qmn
+zn?vJkIs;4b8bg%*XWGsR!dG$*iqam3u4j+|?3UgO=(pwQcR!W|jHY(Wa-07@D?hf6
+zvETNS|2gt6YvdQqDceHJEX;Gx|IaU`4oe;GOFPXttEmU?VSS$w4vy}nBfw~Pd4|CK
+zsH<-~;fq~;(Noe_(p$ZUz;|H--$~_Zq0MjVyNdj4$=^l(1LR-O$p4mf;Q|ZO*Eg=i
+z9>V80sl$AmUh8nxZ>s-PKdQ4LdgnB7n6wUaZ2p?^(-#|k(oX)Z<e$~Z|CajZSr+EM
+zay*Ocu#xbYP3kbyrvHX;pdG6{t6lf52Zz=M4wKfQ)#m?o<-d-6%p^a3MejQDw>0v<
+zrM{xY!hG1(!H+$?na!~FEn9tK#GL1;@s!#RZ(&R)dk<qh_pqMv9&FKju3gFz&$*eG
+zZ!_z}nv5@Z)_=&_G3NhRCmnIVb*>6*d%pF%WhBn+80Xy5$!OJVEbvF$Qs;bUXW6m9
+zGt7@Z&;01Qs9t=I`O)*7GjoA+W-i`v?2j?Nsh{N?pBJ;1F}rm<?L3Ql7Vs=o-^~2z
+ztF{f8aS!$JyO7bZzqR>MGlsX<&&>s6Zi2VZ!Q0PodQ9*@YHp6c3OwwX;K3&Ikb-x}
+z!8_ap-jNi%BLTc2k6$q6CU{33yjl}@$5QZ)1@Ml0{8I2vIC!U<z&n$IcP4;$*5hZ#
+z+<MMolc1|~wxZ53*>VwGfvz)rI>Wr=6<5xSP0G2ND(7lY&MO}8_c3m?fN`S*j2p3j
+zf;q@<GnV|F>|Kl-*|jM0y>*6%_Kj#vqHl@yWlP}J`&y^*nFl}U!obsqUH0>s;OxT|
+zxv*Yv_rCF>_t?BUUZL+n|A%Wp;`uEXx8p3h^hKOu7BM!I;cPBzTlDlnr>&hDYpiL`
+zs<$VyemeN+{G(oEUE{t+FZV#hEw(KA3wqzt)z+^y0)<&Njn<pwm3MC&<2QCLuCU&=
+z5i>?YTo3x7XC3W!K4W{`E^Zz0x|6WOGIwy6P5yQ8zi!iO&ND8H^KeXB_+1cu^hM7G
+z;I{&Qql3SJICNGB)4WrEo$ID|%>kNoD^I{1KmPL~VbHK}B?yDBrR`DukL5$a5AS!z
+z{5WpmCHOI9!!#GCvUc#T^ZW~IB_GT$GmoI~o;C1eZNQIJ0YAFn2Yr#or48<@z^lu`
+z(^)}!-*I+Ee|{zWSe4>O%ghEpmPa-}?ZMCsJEvzU^jZVGmbtj4#4St04$IupMLA0;
+zXPGTW=bFd-*gGT14{Vs86~JEs{FM&=3gEA70-yTpj3bq0&f<Yi;aNPT8gzq(;asB`
+z<ANXC96!8I7xUwwg_q#RUK_T<#qHo*=NakDy#dC6wRh9-qaA)M4*0Pk;KxFZW7&O+
+zhBgbpYoV)?dw(XE9rgPql*ZG@?3M8CV^);l#}ND3ds?IVFnijIGhJLOuxBP=hh;v4
+zU#j)qIuAwR@tJ+J2eWUKu>5nt;CqNY_&U>mn0@xe`40XZ;^sGjPyGwjUobU?s_~q{
+zuAnXKCkz^fbD^Fe+;e31-l?syKVz=^pe&D{`)rdxL!9x6wkLg}A8oT|*sHI@uDap6
+zD(xfiX9!WwlWiI8n{8wN!rOSB`#Vs^gtcJV*3oK*-CsUTAEC9oHNID8SaS)l)n^Z6
+zd8hBt`V5^Jq_Zuv*d@cPKN{vdw_&$GTxW$2GqyUwzJn^^72>tO%<q${nDN*-*M0y@
+z@w&n}3({GS-)42pJ@;n+<Oz4*i~76jhs}EHlb0!1>4S4Y&Deb#X%*K_+Dgvsi#TcE
+z=Ina!XU4Q|Nqe7dzh~cBmrA_W0GhPOXN5TzuSc|hPy3wwoPghN5$`=V@C3u`|5AAd
+zmnXo%<Eee!f??qE?#mJ#D;;)iY)k_W&y=e*vvyyZ_Fn4jYy-om$tBCw+=YoB5lmMe
+z@4mbWZM#~uYu3$v+_K^tv}mMr>vc&Rhvn?rbMfGVnFmjf!LvU@Hr^y0ndo0KBRci{
+zPd(nf#Gd19XfPdGe1|!eQpVC^9R9orf3CQ@ILO;Czes0FXuY<jk1bm^laaHcUFRRu
+zhi|R#ZeuU>b6G1VVg4#`B$LV;%Pn(jI`<=nQ5Fwuz127R{kJjCi!Gzi4BI_eRqZ!p
+zpIH@Iu9V+*?eEi<c%G>Y4^uc8oGIU*g`)Z>OyBn!`D%Mv^BC1(eb2u3#I1fExa33i
+zr{5t@qYn1`A$zv2otxC2HTEDq`BaPg*vzOoTV%|_8_c$hUg6xJF&@8%P5UlA53AV?
+z)L}zh7xjVPrC%P%{tEI-eZfiNX*#n(@-tW_yu-fhTpsN&)LLl6r!s5l$<q$rI*&+u
+zy}q4&kaLTeGtRb{`psZZ)ogH`4X(OZNd1b|xnCvC>aR!tP3!nRk-6vEr@nrVU>cbb
+z?2okAu|bt5x(FZDLFYSY{qrWb2WTKi-ALbT&5F`0kJ`jNq>ugY@;lIPgV!5ho5np>
+z8Qs}o?Ei7}g6^xh#GO@_@aZ|9m~|XFZ|)wm2V)4IU+1?C@~t|_XT5@dKgRtGf5zPm
+zmpRv6;XmYlhBv<UiRzm<=j)F|qdx$y-%s}vyl>|WhbxrV@m{M#%^fYkVc(q{9|&k*
+z_TNpj>C*eG)wccqJhfG=Gj8TDPtYMb=P$2oIi+=qJ=p2RIjo(T&)OMm`z_e^^ydfP
+z!u=8_?S3?^E!KWC?Mn;R%rIwe@4~X{i;a)GUt=md@7tck`dByq^Lm~xo;9)`@uRU>
+zEv@k%H12f(n?Zi`L4MPI@1c}`cBr%A_a63sVBkj!-Vq0Hs0qBIDR@T%cs1|urQjWN
+z@QycucOnJvL;&x!$1m`Eh2I$m?`#uz=Th*_1@NBp_@&^TcknJWfp;+l?_vP&d5>SP
+zc18HT;NV?p0`J8XycYv_S3Q0yc&|8kuQq}AS_<B40le2ee)gO=_31`lt~+=wnThh!
+znpy{fUr4^>+9~{a$zKm+mPP#2hw)7}FJQe1<ERD3P)#}Ox=xkwd5m1*_e_w><*9P;
+zd*X6d_;oFJ)5qU^QtMoY7%R}em2cCAzC#;2ie3~BCFq^Uf74l*vcYD4*y`32xb-qN
+zZRXmS+b}c63VzCm?yu#+y?0kcxy-dw2d&dj-2Xux%pG}q@pG_abmo_AY%_1_Y`vY>
+z^gH^n>1FTlvi(sXzrB2y@Zs`ZGyD7SLwoT<y`J_qnef=TRpqm`WIN}*{+yey+6qka
+zD!zaZp|!}x>-49>c@N_>JrVw+y|1bCI^`0t@!y^vTfTv}g*mll7Tylh2$t@_D{PFw
+z318IoC7gdXTlI-veq_3%(MI5Hu<3jFE%I&Vs^G7ML0t*cd$0J-yWux!oelMr8Oxze
+zt%GgzV*`vccs%1UjoVYt!czF;(y4x`vndNYimrMWpLPG<&uFfkGChtzm9q9hbIO{b
+zxpHJcHvE)%ezg;yxN(PDQ=YGLJnv@i@n;;**THl0s;-9T&qMq30ngV2Jb#Y*6JH>{
+zXN}Ecc)pf9PC6XVNn>cZDq^eyo})(!=n;jr-Id~b7w}fu^ga9*`A+bhFh6!;cuu_G
+zIpHzS&jN!obw`QkW$8i#&p7M~VbrtmLL=SHc>X)sdn(`KsPVeDy)4J`e?eK|dFie2
+z{4_i--gsU8&J~X5E2H|qy36r=1w1Ej%<~$wKN9eKS-|td)S37K@jc4|o-b#f`%cGm
+z(iomEj%ZU6a@ZK-XuCJX^QFLB?0C*^k?#c03DcR=f@gTnyWu(EG0z#x(A^X|XFcZc
+zPy^36>^Nc6Q}bay>}EV)DxL>8mVO##?X&INtUccgj(Z&af_|q>_8xtK_PQm;VhE#c
+z&&{t-j>W|H2`&U)dt~|1j(lL#8Q$=&U-XE9Yv!k2*`@8^v%uvEa40Pxe4(4Ky$)PI
+z&$k6VGe3%HT6!z}>3j?GqUH{L`Q3!gX;S_ioAy5{?Rm<7p6?5ky_RQIQ2rI-uEOUR
+zroiV}7Uqet{FQ{wY*PMAoAzm?Jwh2ZzK1A#IZta){&C`_Drc=0<{@C-XiTil`E=v=
+z*!z3MJKcAvw!%BUpXDcO8J?WdU59}WlOBKj@1-o=&4+!}@B4}H4&#YF*E~B%*_u67
+z*n`j2gU_`EpQ{g_Yb!q2_DubYyE68^zug&p&+z=}@chff-NQHbyBLSIXJPq$o$h`m
+z#sd>~{JA{}#^-v0yDwPV_*nbwk3IGxzSvcsy|X^{*l~VO@LYM%$4t6IR>zvY@(?!5
+z735RC*^B(9eKYL+*}*tNFKvf>*4BQ-+wOrcC3vqoc&{~q_j(H6>jAv$-nU4>lMf*L
+zTASGDGgCG?{Z5P@zOmg$5%^NVZ;pdEzX?2i=tO<7DPwr})^;C73SPT|x3~$sr73vW
+zkuf}c4vSylO9{W_4&I6;@bIe>_+fL#@bED#ekpj^(uRI(n!sC|g10t+hd*HP3w$%-
+z*X`h~Zvt;a3f_hQ-bRm~^UZqj8Mfe?_2HXs#W&l&nsx;I-PqfE%sz%%zBPBMcVEWd
+zCB2_t<nzApKFI^g^7;-0`yUQA_CMUnNBbQ!hH1}h(3<M}VfkuyZ@|@+&Q}B1-ovYn
+zueQjCfwvDUe9ZYKq|1Z5`e5U~QNQ?}6w;e}Qt;C>4j!kW?!D(^d*S0j1Kq`_^E)(#
+zAE$vXz2{vT=u^6&G~7qxbapRv@^>ox{jKP4;}Z<dwz%y?=V>ov?>Y9&o#igAGu*A!
+zGOPbfLs9*avzdC|Ii9oc?e9Ahapz=)F$~*JNS|qJG><+jb<OJcW28Hd%l1o-iS9Ux
+zetQlY)FNzu_;@U0eh<6;goPEa$394$bYU0e)iSKn&Lq~A>^z~m;&YzHcJ%9IPhg7z
+zU-SO?i&m%g@~b_!eJ#K_1l~j7ebkm!+PK=zVIJy?{aVq}z&(s#<KXT97ljwF7fS1p
+z$*$GbkHwC7_+Z1n%>z$srhAAl9<=47ALq0&pH-r79SF`T(|DKW$FR*V=v{VLfqZ%L
+zm)5|`1Mp!V{iF9i*AplB-N={^+fSJ2w677CSZ77uMGN7c2Up>5-r;WnKAU%VtbGc4
+z*L|qko4;5-Bl2?pRODmmw*D_|MLu3bHeToHxvjsi4?4dBonLkG(dXo2EAX$}){u|g
+zlgP()>a{(p7g|`Cx(oSuF;myR7U9^p9lGoS&MNA?8$MrQkID<k$CZ?P>~Zq37k|>P
+zjoott`4|FD4|rb$@8_L-EOYYF(?mYDFxKJL=I#I&;b!DxA-tax$j8P&K7glndRh;m
+zF$v{~<pVuD5X#4fKt6ak@<F~l`AhSWj}6daeIOr;i4*+xhAfz|8*nQuZ-klqf}o$u
+zRvURs^0D5^#}Q;z@==<Ke6T+LORJC%*2wp<M!t`=?0qYt^Wqln!?SCRwJyN)AFF^r
+zbbCWS)=nZHE8M!}m2TZ~u-3h=3%aZU&MfM^7WoMFi6q9X);am;W{k<5dAxJo4dkPX
+zy&=oNdnS0ZM@00~{(CdOzr2Zjte{_VaCd-<(i{1B1wZwQ^N(qh4=)Sk19)cNHSvDm
+zbu1s)Yzg^T8psFlMn1@=wJT;{|5E6%IFOImh!gx*I~)B+D>5TGwFL43{ro!aw=5rv
+zt$fT^Uq-*<`{1ecJ@kVI)%V;&-U(|42seJ}{;Bz?d2C!G-|be;mpItQPdx@+HSj#m
+zvmpBM+Q9<yE`)FL<@Q0tgS1Kd;@-p1e13!GKT%&i-<I(QDq|No)9-1Id+gg@e2Z;&
+zj)nJK!J|LO(=Vuh=-mR&vjUtcN97s%z11>i*)smM%AgJAktK7#;>;hD&ND5%Cj<`}
+zm8|L<4&6%@`phcl$ClYvTgEoZn9}@OS?g}JXYF>z^V4?`;ma{s{Va3Uy7TtCnk!?>
+z-=E2&{iLGn5cAdko}dBdfOW5&>~Gm~Y5z+1b%*wRmAf#!J+HgMt^NH0GyknM9)qm)
+z&^iy5LptX1xmN^V(VXcDZiC>aINhJ2`E$D#fir@ciwN(~&|HMl4eK5a=HWGNuQTZ{
+zW6$}1bcneOrFn*U-T$O}t;`)K!F=+cWbL?~?tvP}YF=CSLCxmfp8cWxL(E+dm+k#G
+z=Im<1G`~McnBuiIMQ6_rvOdJyKEm7I0n%&^T650t=$J_Mr@yxRUHNR>7xk`u+CF;9
+zV|MS#r(Fm0ZvSb{{Cv0n{GPdgaKc#byZZfI{f-YZVLjHn{pY*==ezbN>nbC&*W-<^
+z+5R(eMt&|kI)opQIP)HV#N5@2Ph$7tEwH|dS#P-zpTW-M=uAi5_sO~3_!0`^JbU~i
+z+5g6mf%X;FP#Hf7ze9eK?zsxjEz%hy3111nA@-H<H|*Sp^^N3*SpVk>W(~T=+Xn*w
+z$ltf4`*ADWXKVeR&m{aG;a0_us^ItN&f6jGyA9_av{xj=r-skMn1BDhobe?4RcmAY
+z{ojH$NPdkc`8$FA-5{Y~=I`Fs+^zgE<ukq!{+Hf`%K*3tR>N14&-Dcp|19fD!~1vN
+zQ6K3YoHuUfE4?eL@5<_w{iSzh^^e>BLDWCvFaPPmcl*_M`&IPBq<av4wCzmQ@5g(S
+zyWa+Kcb#NBzneW3`n@2%t$WTY=yvVn(fy;9@&bN&(D@Z~|A5kRN7rR{j+^wq(QVih
+zx^tc}{BG^>Q<xps)cu(A(8p~xo#iJOes7!h!AN($L|mwUy*xK;0(3CvEZTDHoxwv+
+zrw%gSIDk&oJ{jHXeJkg=RdSy{**2pIj*QXjj`0aN8r$IxizBv*>YBh2o8zW9VgtoE
+zVgu=J=^@|>XWhv>fc@cdyu!S#!STIKaAd4n`=ln|NLYpOSW8E(Dd66d$2S@K%F<E$
+z4sS+BdzYQ1qaC-^7`MT(to>l!F^;D^j<-j@R%o^B4m__bMY|_XzuJ40##Q_0?j^iR
+z->iFJgmbk+_jApr4oSSLIi=Me${XWe9k#GMjkPb)>~|_R_Tg#Ylj>3drr8tKVbgfJ
+z|8rlbc}?ns->AJ^b}wU-IuUQ`)M5A9nL3TQI?+x-UR1}XSf`wY71xPxQzyzW_-Az=
+zv#S#@O&Db=jjz)KzD{>jCwK0^{cb;K3vJWfDF#jQt<eh2&BZ(%cJ<}ADGv!Z^&JW7
+zThx6b;$f=3Wu=`0564pV<=fPE#MO5=sBhVY6>S<{-#e(U<gJp`UfEw|FCDU#Z87DK
+z`@4hrwsh3*>}z*ZZ`sf4Pwpe{jN7AA-*|*y&V>1gd{56rA46`Q<mqQl^T{H=tigTq
+z9KU{F=8{_;@BTB&8i%(3mESAw{yX)zn#0f@K$WRJ=qlxz_Wgmk$dj_g*X}KBB7?*m
+zo($W&sf-NfS{zRrdxp*a!lI?gP21Iog%!&n--dR>jeUi&3<A^0V9uuTJUK>vEl<!L
+z*?(+#GG@z<dBV4Wo3-~6Hsi^RFTc$^F=bhv{Ewa|i{2tnitgS;ew(%v!VOQ#_Rcfg
+z*XiC9wUZAd`-Pm+PNAI)TUaqq_%^ho3`757w$U%-Tv&%q<9YI_m?sP2$wteQ5nF!D
+z6TS`HF<ZxGJo(1fx0xrVEX$L7!BP9yecM|S?oIz2)p7Po;-0GT&VJ^m`>F5WHnsiK
+zpQN3q_f!wygL^;wN88Stapus^rX8^tHB-CH8tifQq>kUhIp)&2?(WfWt?^C$*z&ET
+zm;N?7b@?&YBb1~1*l#eGPangYv;OgK2JipU?0G%;Y?ghm$d4V9VXhi||17#QaaT;X
+zv3K*$zlrK^zRdGiJb%jbpLqT=&wu0@;rS0dzsK`$dHx;GFwbxEe2cvs*mQ%Gr!gL#
+zPoTC8UXK*q-tiwi#v1hB;OvHSXZ;7{6HhLY_cD3M%hUSDzY3jxlkfjoan>HZw9Tb^
+z)c#)H#y;Ig?RuI^U+qk+5&Sj!^q2m&GhWBmv|MmE<%0iZ@E`A(-aq~b<^B%ePY2}|
+zUAiy2a*LGvMOW@4$#NfZ<(5o+XEd)b^fTo`!^_Zce1vj0QSQIz``Mt}&$)EJ;>!IT
+z<^GB*cT=+5kGOK5xKX)(>frq+%K6WfTWswge~5DbkncYZ%Kasm?g3ZsFH!CTuH1)`
+z<=*Mat=y>Gzj5$hrkuZ`-0Us=<DaD5F~0w6Q0~WFx|}Qb<CL3o<$f|*E(A3E{k|*r
+zvb*o)CFE)eVLETPg01Y=%2u$SeIGSWn(@Dl>RMY+%0$m-EvDYbdB2_a@xSfltQVb$
+zG2`X&JHNF6Sv<wM2Xm&$_*c23G!uQ4u>`H(>{i_W!}<}GsrPHVzs`dLGq<VDl(jZf
+zDF4sU<|Ge(zmx9e8viJ5D62IS+V}6||K}WiKJ4i8bI|9*jy@kv(nt8pHv6|cY6s(!
+z(TTB9jd51xM`35^%!QCn8XMKPVoWFAJ)J7}AXUC&I(;sn)8|rjA}*#A@19OiycIg(
+z*BLtD`wik7>JH)Y52~->-eSgEV>;dA=+xopbPsguaCG`$b2@EybZX<w4DFSiC{OZV
+zf0g>mht>P9B<UnS7uzwW6Ynvd7>}*;9n<Nf0i8aYq7!j3op|?jTJ=`wgzsSG$*!5u
+zx}5PlB~NyoJ*Lxbj!t(tI&t2?80Q>ly!+Cf&FS<$@MxxAjr`w9y;$$8vd8c2JoV@Q
+z5_p33O~K66H2%H+tB-dt%|vybTjK3tuSaDE>zoqhm;EdGeY1RP|5V4Uzn`(|jkLcB
+z7}(y)wV6{L|7)gqC(IS+?l${=dRPxyV9jBE*|byY53tY7xJQYz$+afSj(a4>JIt7f
+z<QF;C`Yg?5*mkBh`#iMy(rMP3p5QsgQ{y?>0xjEWMb^8P4)Gl1Il!}@XCKdQo?SfK
+zdA9QO@oePTz_XsGn`a#lXZ)5{@vP)o!Lyu4>v1_Rn)8Ct*_;(r#_nf4X3+V5r8!;o
+zoeR569?4F=)vmGBd_{pcovo2)9k%Qk`372#J!28;^jNnozd>ub!?Bp&tE=nxF}}Ez
+z@kPnR-)BzbTP;!lCDxbaSv$T1yfinWZ`~)D=S+0Tgyua8tSgsaY|3HXx#ogQ8LU6Q
+znO{<BX)$|N<lp75XH4A%cZb%R+cJ#5=GVBDy3E<zPwiyg?+^cpm90EyZ09dzI17zD
+ztQXHiw*vGNoSqA;?Y_9$?n9kran}6>y1PK}rPo-;c%AQ88*6TRUT0n76~bR3{Dsx^
+zP56gx(~)25U3igj&ViTxoo8M8zsYj0|FTb<(m2!v-oRtSo9FEM^#pI&_Ym`j{SSsW
+z?5QwxV}C`0H^*+k8}@4KK#mf;VLwOAn-c+VP6xbUugFb#bI$JnF}yhoZ;(~Pn{&{`
+zmXYL*J>&YRo#!+4&wk1AMrT?d&an0y-W-89$hkk$x`+Ka#Um-+5T^S#3~x?D>$7~H
+z2zYY_-W(<TIN?Jn-qZ*`zdGj43eOwH-zM;eHfeZsunBMa0^V$OyxHY=vpvO|T{qy(
+zZg@kxPw?hoz?(e*Z}tYf**68=90+)`AKuWn7~UL!F1Cy$Z(8m!<ElFkW$NGE<apBq
+zZ+bGEBMEP|z#ICd0{xTV^z^`+Eh*j*Rv^sqW-qkf&-b2yH~ZktR>F4^-k0LdcES%e
+zc=Lyh-<o#AxZ?!g9B{nZ(1bV31KzA~yjkUVvogh-RX5;G7rddLPVi<!z?(GzZ`KC9
+zSvLjVtPgn84R6o|hBxb>i!CF`n=6ht8#DEJ4>{iKfj3JtoLd2Jmcg4{@CJQic(WAV
+zEKBi*Fr8U#c(WE-ck{g_;LSRCvx4w0!k4Fbvy$+Q4c?SIZx}zFz?)-^H|<S$^Sbq$
+zjUKqpSr^hbt&TS>Dc-c+fHyPYO)bTn_JB9D0^ZCCcr$+ryjd9VW&yl8>Ugsdy4W&O
+zyqRm;&Eiab=NiYGBk<<ci2euOycV(F0NxyOykS2_@wLvRz9FnYnBmPFXuW{4W(B;N
+z4{z8DV$L#oy)&tAT1daR!JCZd4dcL<-JM3g==<^Pj9Td`Hk|Ao)?LVVs+F^&YZpcR
+zeXp?h5PwGN+AECxx8YOCjx%>dUWG@;p>>A!8-!1H;reFp_%j%e+>ywd{Nr8q`xNH<
+zuhRKU?0=Qcb0#kSmpgB=TXEiA*1NZt^Vlo-E1cVkf7;9syYwFGhsn07u%6%a&qu8t
+zEZy1jJTxaxdQ<x;jeHH^v&x=%A+=9=h<&FiduGSQs4ko48SJ@4yFY4qlYfr!8Noj5
+zVAmY%^C{TuR~e^F!M_iCsrMN9piAkT-(M~NkTWi{ujMSfKganR&pDguL=sjX`(I>l
+zX$?yLIQeC3U}wqJ5De`LRNZyvs=j+pASb7x!<op)N&W<~ciPDwduWPhQnE*w&QCG2
+z2QGPV5lnB-^qdFB3xr=J{Q0Ep<zMJD_;|n7@bCFdJrDm(-_5x91Q|T+WKe!9erT=O
+zVrB4%_P=6Z8=rQ4Lk5o^e~0ny85>B*AmIra<XdA02^m}#$l$V+3=$X1An$1zTs{>U
+z#2+v+xFIt1GctGp+Itz?=j3F)laqr<-s;T#2{O3f$sm44LIyWj9_ef-BZIpf?2Qig
+z-W2SODH-f>GPv9C$+!DOdP!H>1#fpFgL|9|_9bEU^#n4wrHKrZ&&c2wCxd;+%U0;H
+z-O8Z$(P%%5k<YEj;P#XZ5>_D0$RN1n!KDDqSO)ik<37Uo6Mi5ig9n?-;IrzdWOp;p
+zKS2i9`F_yO9o2FfD}&wY2Q}BN@q%Az$Y3`zxDFX)+$AA{gePQ>Z;i_&Wbja9+@N&G
+zjvK`NAaSt_@}8DK6w4I)LG8WAznc}vU>CIaGPu&o$xJ6FYm&U}o!LYNSNVRBIoi;t
+zo8@G1xs$=A4)z=edqoQNoRkdCcQUxl$sqIV;(0IWN=xDGGGuVMlfi{aSbg&Y8C=jr
+z2FYh+aDkJ-g~&@gbXe?Ukg=XY#!`$7wj+a!Q!+?cfiNS3;F1RyotYiW;0kbDN%$(l
+zyHYZ^rnw9*gn#!;GOy7yD>`M$n$>x#+4-<f?EUfQGxE=46I^k7Ft0S<gDIKOc+Jgz
+z-@St)Ii@zwIMrnLWBm6*t7c<qi8Vvzwo%;yIFP$T<7UCSA=#ChXVh4$)(L5Bdg7Rw
+zpJ&o|RmQC!(pbMeL&L2j!oHK9)3{n2eu8W`?c==Jn1sgS;`!3D<`=aF=hKXjefnD4
+zJlZ#Qlh(J$j=GMHujC#&sj->wg?JcUW$~zVXq^Q(fQ#0%XdO!fpDE1Y=2GibfT1&)
+zg_qX6EaJV|5t*}r8~8nF@Vn^oV|;>pYd#~J+|sErZf@7VIQ+(v_-WnEl;)X7QaA!9
+z#*sLK<8TtkO4+VI5gmWm<B6}Hz!Mur{fqiJo$KA8qh0^u=~&H9aoq@dTJ(?kTeRm}
+zTUu&OifEZh&{FGoG`B50_j)|>TN8LXJI>%a9N;;Y!m~U@JV#P^0;fSwhv#q#PhfjI
+zKkxCxhx?uz&#fXa^5JS7Eu;5C1LMbO{(^Z5g~^Y5I@>bZN1X0quVAalzP{i2aysK#
+zI8;fibERc#d)r0l%=vhQJ%L|$rwf}wTJ0ykFYxWEA2w@6PRj0=KUm=#*e6SYkLT0W
+z-8`HB{vqG8bMB>%&3wFQy7lp_oNK?blb^EIjW{_Uv1?Ug`6*6ujmz-FH7+q<h%@q2
+zw&!&Fwy1NpJzu<^^Vh1g`VIV>3H-@s8~l+ii5*#kw}wAsjz7%d+x3(i8vG&7@Q3_{
+zKiDb>{<!!Ae+V=DVXt<AKX;gQBMtuWJ%K+iP0Szn?fG+(I^L8&#(s1BDcZFork@<P
+z>sDg^<fgdZr95%HOUxhQ41bE*Wcvnonm?MKH2lH#pTM87fIqBrsFeTlwHp1M;m=6c
+zwIBHfiu=_De~2^uA-`=utbJ3Ppskqp<Kh$iA<VX)UrF-kZ&Li>djfx4nwUTC+w<qa
+zsqhCq9Jim`v_|_WPfO^rYR9yx>4~Dv7x%xwiTOjE;ZJT_l0O|P*Y>}@{oD)gli9_U
+z-<;N1@58(3($qfw#*c3wOOK}4`!ut8I5$2%oBq;05p#uZoep!a{$1zLV*?%3U3A<@
+zcXEJ7eRCV@W(Fg_UY2z-w?_3}quiJ7X{>Ka$M?GUlF2_~LjHn_e`1pOFSz*1B=Mhi
+z@!xmxmopZ>X6<~yooytYDBQcqJCNOUP46FfaK?WOI6oi2(cPe;M?8Q37Vwd8RRN!I
+z@VVjq_HDuZ_HCV~zEj?K&CG9`IdeO|z4TvBeSZ5A=S+ro3cM>fZR|g8tS|omliWP_
+z)Y~gJiT!RPcbK&bg)@w&?#t5mH2kd6InE}PpJm3WG+w2(3K~z<_^JFYjpJ)PUuzRs
+zmvEhVjMsTy<9U_m6`rd+FY;XBd4Y#<+tNjz3q0p}p3|9$c0FL5))lz5TBS3qO&YIP
+z%$Vn~3}eWv?YR3<H|KW1&FdUb&g=N|9M>{7zLv4^zC)S18QZQg?}Ck<r)-Tml@2n0
+zr1|t?tIeE+-%HYafbtJAKT_jdHsUmQtoB?y0iD3vjP(zt%4A;grK}r6KVr)<un#*J
+zN9^2D&k(SW0u$IOcN6&d@t?wR!cVw)meZN~<C;6(mpf(V^+Vb~%LHxq2DI7jXw&2H
+z+?T?$$Kn~&rq9u4kE0DdGPK#^XtOs(8}gU7fcqZmMO=QXqs@M318)s&cBRVf3uv=F
+zpv_hXW4oixE@1BlCa?>@PS9o_;rko3`Ix7T=G8;mTusqteL$Oajy5YCo*Pnlu1L{l
+zm7`6!qYbibXtUDMW_^k_<kxxrI*+l3INe8J<YptZx#G%Pn<{fvK$|rIZMqzcHI6oG
+zfxQlxz%BqgL7NSPZ*0)!Rn5;yZZxkQ(&n`kZI%YKX?L`l>F`{Z!gFSdHgg<p7CYL!
+z>S!~|(Pn9iHsm+w?=7ZY#O3EZ+AN1QuedT7rplZX&}KnEoB0mL0!N#Lz-|X7uyyA`
+zf;P(tU*4e2)1Ee(R}N^SJ}l9ut~0KC#`QO^xiRP$+!%CA3eOkpxN+R3UW{yi^ST{F
+z&R=)5VZ7Az3D-N5{SEm`jG-1@XKb3d{ME?HO)Io{-O=XN)L8Y4!C3Vxwj2Zds)O;0
+z8>4;|*slQ-*acuGXww31S{t-^*wcnFfy`ajZsTrCJFk1u&#7tM=VurXaPzv)YfepL
+zatb&1#o2k?=b6vAs5v$KX?&Q9pVuYa`!r@=m+wmX!G!O^S*(qD-J^C+O?I60lj7p}
+z4Bq{G#uDi+#^rR^m{}`yKB`yT9vz)EsCm`9fsx*u^Qpsc@16tQ-;h6@soxGQo7%i>
+zZhjfMN{1$7?o1$aC!EY3aWZ!{#s4EInLFxa?zEK!jboa=YRJjlnUu_tUuVr1P9rbG
+z>Fiz8SDn+k+1sHZdh&Rx%%g$K9SdZx=3pFiGIt!<CqxI}13MveX9+*oDf_-(bovjB
+z(OBNu^#X=>hXdXnCjFu2ysQ59+swN|!Z}kP0w>ddGWIf|9USoUdK!EF!nIn~%`G3)
+zyq?CxwBDC<7X12#gS3MKn%C1kK0!MmJkbvLu5cDaIL1<%AGCw{sdhkI+zxn8v;)RO
+zE1c11Xt^(-<v!}Sw>d4p@vq-zTJE*9)Skhcwgc?SL_63Ow1cg#9jtflV0TI;*QeUS
+zM%NCuyLO;4NZEQDTszp6Y6s*mZ9q=9Bg4eydt5u%qjk~qZ9C{omANr!2U~)6(Boii
+zaqXZF*js@KY@MH(Xa~Cq-_vLZ><hH*K;x>6sT$sO2fXVh{krD7d+Fc2&AeMjS+s*o
+z^p~a`Fvc~Z9jx*CAUVF(w^sU~F}4-AgSE7SHPQ!m%rVvngeTeo-xba!NwkA~!Tk0<
+zJHH+41LER#z<Z({XbhA)77Z;|1+-j6{Z=-o<sTe*n`yby((-?TmN#t&_*#i}uq<c?
+zi(NaI<=VmWluXV_wS)Pt9W3?wfU!iigE_7pEK9Wm@|Wfyr%RDx;_?ezJ6Iuou)wy1
+z_EeekgLbemXa@@%jD@Zpv;%uFFoCW4_e48bPWXyOJIFyNs}JnD3B$XY0q<s#zO^~;
+z?i+ZUdDlu=w1XSYvA4Q8_SWWe?Bn3HgnbQ+ahWxJ%w;sagVpbK&{)`;Is8cG&GV;M
+z*Zmmc4<4|42AhusO&k5uw%a&wVK!$mP3yn(LH7Q!ufvZYj=wK>XAcZ#G1)zTjNLv<
+zdwla3*_+4Sp*Pt_^yY_n*gNxPhxl%NbMb?A{K#rIcE%o#`Z)1kR<-_K`$B~K>+tWT
+z4>rah6M2B!EYDxMJS9`kjAS|B(=3nrCYAF<vpi-$l$|pOanoJx%2R2U$LyV&n1_AY
+zCeQa>p6|Ky30|VUO9->)SbYB4OYBh_&+)J~ZQR+NhED9)8qXpB*aO;6ruT8)Z`b=r
+zX+M1X^^DLowtL4rQu}|1^ZlIC`F`$Oz-iX6bY`rbX>fqQ&1mSy%GEcCF5{Ec(akYc
+zgE^(Jjyh*U_t^S6>fP5-Hd2-ExQ>i*t6W11#$}g;d*+CX>&UyW<CZDZQELHiRL9S_
+zI<~oeTod_d^;oF85_L4=VE?#LNA{k_b!5+1mG8KY?+fbqzEmBFi|fd{ucP$Y&G@J_
+z4>zjg4aca{d$6?kP3`u5!5*yNnfh3x<~QE>+Jn^}ZF_*bZ>LRq4$Or8Q6sn7dy!ZV
+zS-_U-!PYAti0ZmCWAoOC`&`sNnZ3v-pDpWrIQ3E5ldLne-Cao7+5Y_OJhs_mukpOz
+zknzo1JAuRcs{^`=gSN-IOxa&AX$>oOS1-2ReVnb`i!FTLBG#sbcf;&U>9~DX$KA);
+z*xvojOR$H!3VzJpog4?A_Hhk@<1jdW8yvp_jz?)H>I+NzZJFjyXxfO*vV(3<E{c-t
+zee&R008ix+OzvzrRXU9BKZ4$)uDT~weN7vE@Ynr)mPgP{hix9MT`lq5*D~GSS1}YZ
+z#wdDNonvt6n%-a95;4AL!fiQQ$amU)=hy4k_J6uhQ+e_m?Qdy4`g{Yl+z6i7xaM94
+z>SoWc=(K4GH+g_LILv%D`TrMWq?fwf@A{P+;(i6(*G1;u8?AjNztNY1Q)+MRFLi_a
+z1&fcNQ8&0>wBPwI{W{#&xUjYMx6}phYruUixUZW8cft+s!1TEHIowNA!ToHjy}#ml
+z=>CE!w}E@hE&Zic;Qorm$KbvS++Vfd`DOZbxG#5ME9`G+8MrS8ckHA1K8!ToS9V(5
+zf$4GoMTh$nQ@~y8^ZORdchy+F*>4=<Udd%gOG{-3*mboA_odk9__Bsx3j*91I^5eG
+z?hC+uA-H4v6&6oIcft)EV0zr&1McQ7JY?GNelK!Pox`=dZMwT*epLS$X?ON@)(4Qc
+zLVH_(VWz`jCg~YFEX;u)j1`t<Ih<zEC(Pko0ovF!_R^KE+|o}OroI_?fL?mCE3)Oz
+zn{M}6^j@dGXaNpmWu;c+^EKXIho6*ZaBrckR-31X_ag7IIr3X=SU!jso+b}<QyulL
+z`x~0n?}F;5J~ltU`Pxd^hvE4V*4FD}{JpKFJHlBr@LlDnjF_L=|0>*Um@R**dtW)%
+zfqCkd>KkSDV+uZW8oyP(NE>HU-gE8y(Y4=Gc?0E5*L1%*>5WbpzlA=K`OKNnx9jWQ
+zcscXE`@ZS#9Gphjn7c<^>7tBe?Vf9Y#oC>)Zj43M+ulQYDwlq{?bDs7z8^jDQI&Uz
+zI)!Ir=!{;`^(De3uR2o$8zYe>0b4Mqb=GG@*Dtia_Y()D!!Nlxb&C^wg{NDXraa(>
+z<t1Q&r$58P&}h2O0kQj*C!8J3+BSban(7zkYgb*_JKOdieC*ks^|smWERc+7^zn-m
+zVCA?M9vDklKPcLWPL+T@@+Wjx{7c|I4qe)Sv-AU<2S2r%y(5{W`=iW^Z~8Rv$okS$
+z-P63iKVx}&8GOZGQ!nv=x`(t^T_Vv0euv>9Pk!p{BB;xMPh~apGbh+`xi-%An|)H}
+z2xM3{R~gfpTKpo9S^aiIqtnc9%jk6dW?M#E`Hjz-DZd{-w26I(o%Af@V7ezoy0Mb8
+z>+;OqmPYqjeW`P>rnBzH!sXYL%daU{-w&Rwf|J$^$@Z&(XD9Eq;mqi#z(Y2m*3Fss
+zMV<B9NMzpwd$3lt@w4eiXVaHQEg!#FCG11Msghpnw612O{;tfeFKdrS7jQMc5!#fs
+zjwUb&YYHPf35+p|TLKTl(lFM7$J4`+S!1>dTeXI*n!u&p1P)<KEsf|8X1-i2+BC-2
+z&B`x&zqNJYmF|ie#?JjVcJ6nubB`LoD|$-j^J$%y=sYl%8LeWoYA*zR<^+3JeA0R?
+z@hQWv+OPWR0r;i0*n^tKf&YW>e~Ghu2XC?SQCep`P_}uh{A#|ZHk=)Oy6D%XY7VF|
+zuTmMYvZFF8!@+wwc+a+&Gp>|2E4)b8s$bIFqTixBiwxeVj@9AJ=+E$LWQuxArszLM
+zB?q5E*Vr*0+b{XGo$6l=4rK=eSY|C7u-Xkwdyb($@9B@wZB^)Tzq8?PSpOpRAM^Fc
+zj$`kow<%@AX-%ssyCZndhVQQaq&4*?ovA-*O#Oi^K53ovTdqHO#p}0P|0iAjOH-*o
+z_&#0q>niPBWL*D|pq|6QdpUT|dj7lmlg{$r)xYS@J^OL$Pu?G={tvqPKQWd17hB-J
+zufN^j7}uY*k`4X`@7eI(^M9J-|1`({X^#ItLH)t&$EiR4+}yCOSISQIXm9tL_F~&l
+zo3jhr@Cm9#yLR-K$t#^PPcoa!jLy~Xus!cldl`%@J9rus_veY2{=wPHX@B5PZn5^X
+z;F$ctRlPi3!lPQY<;zaddF_=EOJki?TN$24zS;C${!AkJBjR=5q2ko;WSjf59Zh>R
+z`E9()w0)TCJ3Ss{yFS*I$vLa^hbA3#GWaz~2dyr6TFIuZ6ou!5=v>*PUDY2vu)6B+
+zd!MSG;ca@A{S)~a+5d0u%u4J%%C%zG+<j7KM-9O*Yu7RE18!z-4l=@6Oux=v)wjFb
+z;AF$DNsU)o9Z8qwbijysWA_=fVRwZ06-Yj35QqH7_J$36(A-;qt^Tsz7sDPE3$FpU
+zcmue(CU8wy0Jp>DPs1I^Hpf+KJ3>6AkJ01(!ck|IO@PC?0<GOo*I8o^2{>8pLve5z
+zlb8Sp{niu?>rfJKSdS9JVSS2)<7~&=7f$M~IO%ZRdsJo4T=rm<Ip6!>iOxL>?I!JI
+z31L6YewAwWbFuBGd+#=->^`jr2=mlf7eIN&#*%$x#}c)dZQ)7qWGs=p`mnc5`(@9K
+z#SL4^*j?{$YD*1Jk0s7VTJ6RLbsn_B<eM8<^gp`$VTeA-z|@}joV7{Kd@OyS`j1#=
+z6z%>blb3g^`#<CEp|E#K=nlal%2EFs_f3>DKskey<NIaBn|`Rn!u&5ruYDo5Yhs+s
+z$#bYH&2TO|oUuFAZzpgb4shn(;9Txb;>@@9=&8@XA<o2yIRCE>=aSRKG0xfKxw%bo
+z9`ST;g7a8_Gw+tppHAXTe?CMx*2i)>pc$PhC&anzaDKw!{5`+7k3K@>+*CfYEyfqp
+zUiAsI?vPFAZAxbw(s#%<)LLDgb!ueC^e5m>nMTh6^M-UMKCDBxt3xGShmk4PA?NCV
+z&oZG7#h?zn8`_tf)PXRA6J?q@0P}`*AU>?aBI<BYll|GEfAvwbSL|eqI~%XUH#Ed&
+zjYj_twAB2J-M9E4cg<vK@-ftZ%se%<c^cW=(%+R1D;v*}U*jbH{Mlwc{+rnr(%e#g
+zV<gkB{V1GkQ1|*zX9dRZ%qeRx%ClMRN#Xoh){1-m_a<}9+M_Z^oa%|Le5By#j@c72
+zZqH$S5*aZ*k(r|<Tr%?z^a}T{g!!~ziZo60{X>_p<YXn0uRM9akGgzMG|NYwCM)kg
+zm#@++AM}_k-wo&JG;iq7No3ye&zYMub9Br#`*RYn{`;x%UVMM!YoDyb&q?Rz-Yica
+z{lNosSvN4R`bKVgzjVV(zY(1pN7i)CsLt=ZoXyr|Li4rQJ6D-Uj^CN@j@J=D-}pYK
+zvLDaU`N7Q7p-12R9P<n1g(tP2K>dTx{`GoJdhgP2FlPD5sDAmEG~cB$hWE#EbGgO(
+z{Xbx?e4O)UU;1Qc{VM1GT?OXVVoU#3=Ivj4Agb%U+K}d#%o+gB2Gm)oD&xb+IXCr>
+zFH!FOj(?MtQv?56xn=a~hcri`eGlfW(O3pqYhmQ}@&{cxA4-;E_FGYom&-}ZfmXE+
+z%IOfT?B3c$eQcX~>aw4=?MRmMfUA#}<4Mawch=AqS82ah#%Jujd818TqK#ATQ<srB
+zKR+DKi+seD<K=$Ra_Dn4c6OEiqsmy3?)OO4=QdZ4&K4DaX#Zh3H*6>Axop;47#P3U
+zXeYI2r`}F3BUhJ@E7kjruYDH(=QCB>#-!~g;VWb{26_j!B<pRxUodR<0LS0RPv9rS
+z{iK`UJ~?528-L+hcw^g-=DIZ&%9D~kJGSKZE9YF9*se3e@k?Y%<D0Vsf1*m5AMew?
+zm}<7g?9G&YobW})G826f6K3sv&6QM<CDrX7`UmY(40$YH+50)wa$}!+0>5IDu~EVj
+z_~q=L_zC!RG{Mh=1^8tH{8IgSWvt;ZX)M?Hc4_(zHyJM_EP-Fyo`Em{zhV=g%Y+5^
+z<r?QA$o@~zucLuqB@3TZxTXECTG@<A_M5xpoc|T_vx@(fkOORC`A6cT#!L+lvq>Cu
+zzqb15f!sqUb#}JBlN_IT0xokCuxr-0>TgHBhVY~18zpf`-h)@gXK3K!?=XKq_r$!P
+zw)MVPA1rcqtnRzfU3WTbS~$Lh&XUh2JFl9xd%Wczr0?LV5GOlTV={svohSdVHs)<b
+z`gigvPUlF=)>FLt29>2U1vB<<NMr3oYfozZTNPS)y%O8q@KW}px!XNU`7zF%_avNi
+z4V){aRk=&hO|cJ0yv3U{J&127-r~;qcSqLR>hu%BUHOfzO1Q<}jR{e%%2)nH<d5q>
+zy08v^;ObCvx^d90c~g6_HgLlxHaNv~VQsJKQV!}uo(Xj!Uisp)Nl4@CQ!Cr?^jgu^
+zi8&zE$(K#I;Q6yb3|~g9-7a|d3NC3A^&?MMKa5VpqbJh!8+K!a^cg07*^W6jcx8RK
+z>PS#O@=T~7@uq&j5gt|2#P!ShIVfL0)~%_2q%pJ|cJ(8ja4_{NH|7jX{YaarA9=$1
+zeZkeQlCEFTk8`{F<yx#v#r(5=QZ?Hc$Mka_30WlG)NjPq54dstvMqLwZOqq?wNR>`
+zFPm`DOLKN{{c;u$=@L^v(kALhp0Iv5^r`MJxHo(%zQOfmwcOJ1sfMNRQa;uHJ~ewG
+z_NhiJ{!{U(5_@j5GqD%u;Tz3OjxCN@n#VT7u>DT^R#UMV5;~-8$DlP{=Er>7=)1$d
+zxRRSTQO}#O#&}+(!@`k{OTf<t@ZnQa9XeuVA)$K+OX$#Hdw$0R9a`4;7D@Z1V!{F)
+zTD0XhwLx-{9cLqTH1JE*Kii}X6Bg8e%=YgS>Tl%0!AGu|*1z1u1|uv{|KcPzSWf4!
+zr0Q?Ng8FyZa;^SO*<e|Vx8eU-!v;&#pLRE)3=<aAf7se`6Y5{K;a0vH@Dny(u8ECD
+zSfc(Nlh}CKCb*ffp#Jpt4I4CRzf{l-G5?1fHeRCs<tBET2@C39v~VWWKNrC7XuuEa
+zU(F`@S3?h@yRDs8w&VCAK2>bDL|b7DFt&}b;hNcLX1^b8Tx<B!?R&DjI?XseHeI?-
+zx<haX`;9WO`#y`^$KEx@#<lNXuoHE|Ckb(_mDiiPbzt`mV~;&H!S1^=kzV(N#C2o5
+z+_vF{-8Y2aDBYtmByWcdVZ%Hl`wYD$T#fCA|18@hp37sbUAB(ZpWTd0KSWy29d`4D
+zy2sIs*OE@-;>s&MrSuxVHshG2G5NF8jSN-B>>QpCGy0k^KX<2l7k!-3S0;ThW=mP&
+z*mx&<zN*moey67wx&6qJSpyrHvvZf$zKQFKZ<wencD(!-=`>URu(OBAuQ0`h`c&&D
+zDjg1{^5)#RYXJ?kMnihqj^{eKIY)<%>BP;pWf5j@C2Rs6OnQ~2^bUqAcfge!;`JkA
+zw|w?w$<gC`o*wjJri@`XmpkU{vY7WNdW^aHlP{);%OhLN(1f_KY(GX?DLPvV7>bwQ
+z+Rkq%AAbHowDI{2-OG+X#ehD9Szb1wk4X=GOnOJ3pnQWT<%f9wJ4d4@(lkQPnR3Qj
+ztjwV6WTQ1?#@eoN`{-~s7x`iuxja>1n6ilr%eLbU;5+Q{0>jW~#GPjr$`4@~$~QDB
+zT3gA`XvEQIIG_<>mcLDCWYVk5K!%1J<r_RHE5x(U(WsK9QQ6J6cTBT1Dq1@>rV-;*
+ziFQ?Vc0BoF8o507JS)kEJ(J4!E0tkqtB$$6z%Vq*x-+Xn8W9%L$mO&BN2}{^0vcso
+z9e<n9h`0z^SH=Pw1?3wWQC3K!8{5#W(x-t9-D+*<;b{#Udc@KsF)#54Z_S4GwzJ>c
+z_U^h(V_W}Z>nF;Mb;Z_~kWTz5tqFez%W67Tm1~@xHjv}4XgB_9&r6G*)EbSOo|(ot
+zwDwC>a~oqlJQ$v-M*N3eyw^+V_z$^w-zTTzJ6yc)kJ9mPWvu%<oJXdy?g7pi^K(LL
+z|Krr!o#uotG2VW&v&9nQ+hx|mjNEl{5Ia$8VTSQrJ)O0-*7!Sq+<U}+Ph1b9eO$r*
+zEjPYRU-u-BT^BhV_z~rX9}(Kc(#;e66cZNM>A6Y#l#T#?b`tpL{0Z<)SO9-y5<g%#
+z@B_*XKOl*J6Zl1i1@Lo|!0%|luVnEzQ$BopEO@GGaWw8b5mstF4tBO|bi1y{`wMOz
+zjj^lUIvVU>opWK<(P%vlIBMO@eZhQ$=Fmca;c3QGtN09l4fPN{!zN@Rk%w{3L>_#G
+z>d5C$Dv#DX*YF!Q(bj9sKUA~KGct}YyJLv4Y|SNFo$A)pAP2guPkZ(<$loINv4rzZ
+z1HfHk><0GQxjRX#)KUJz5aYmu*zh`ALvv>ho6ylBD?7*8#k@<m>kbrSL&v^^_eFGP
+zd*i%l7V6AZo$hxw%ixX5ru|GPyCW!@cU!hwOA?pO_^;s?Hb3%Y?Am$O@7eFlFS+tF
+z?yTzOb#JnkB^Q*>yD1-8mJOPyf7yl!k9hodIEl*_9WGBy1s7+tS>Mg^p%~!8yTN6o
+z2`=;l!q4DB{370~$VW(*PdHpEQ^AEkZUSG*0WQ2-y4Z4)bO~_DCC82ZIl+s-Wzw}I
+zziGyR8a5l>)a|6kRO7WIW7hWxZMLiDr=~mnxaS~kV8FEjZ}WOP?uP41;Je@NbbpgO
+z;|JVXpi7|h_$^Ug`@`E<r>b|_>D=_5r)KuRg#9Vm?C1dfknRNaYg06SIuE#J--*#l
+zTB~XAJLaB4(rWz3%FzIQm&Ubp?%~8fGTA3J8^_Q&^4d?X{%1TpkM(_bUHeyV9q}{J
+zP~m<(@Bp}Ip3C-C>)A^lz3khd=Bl)wSaDVQSe+9zfIc3~-T^P{U7pXt=U_hnDXjst
+zcEUr~!v4+hFCM4(oZ;ml{jcYxXs)xov=8%UX~iq06@RoIu-W=ytp^-nOv=`kzK?#_
+zzw6h-_-pq3O^v6mquPgH_7{z5oMbj@<1|)*PBge{?}*u-&9BZ7;eoDNf1ooge+W<P
+z8BIE?N$V_l;IqcIJpXmi<*>sOy~q3@YX-Bk;m>UPGI%<y{z~u6IU?737ktk@n@4ke
+z>ibAvv}rVkCYh+^?3}V>>ZW%MKs$|z88{uTEb3usn6+gLpbrL-1Hxi^%HwVJOWvfM
+z4D-K|rH?yX%*YM$qqRSSj5n5O14fo*D}11{-VWa{vo^?&m)UVRD{q&`BiZyaH!zId
+z1)sl*oY*!n_u8M#cWddXkH)tYZ`X-J$D-!boDMbb#x|-|b8g(G!`f~p5AVkB9kG48
+z+RUQacD+!=!8Uh|QGfPFvVL3R8naDZLVKc(b3$iuPAD|%Pp@f^?<6}{`Lq|`lsjU_
+zq4X{~YfMRYu+~labq)i_)gba^(r0boF8utt6Ov)03&v#ESsDzZ6EzQL&+~Tr0J$7Q
+zK4n*F9M;qInGy7g=vH=c$mijx&K76M2R4Qq^VFQ18E45^dR3v385<~C-6y*%PCIPz
+z(mbp1R9R}{+83d{72=WIt1$c8$7uiWG#=_VF2kENF7t&8^)a;VaCOKz`S5fYZeF*^
+zV5)z!dk`Nqbr$SqeVwP3*6SO&q@UHiqhv$p7uz{dC)<R_{BrLD=m*QwAg*ZNC&TUe
+zsrH+>8KYW5Z1!P}W$eDptoFNEKAL{i$P(X1mV_rbo4U+4ed7SSae%&2efR)<s&tml
+zhLR3aAM``xm)^;@9`&d5_~j|v^8+L=M*d8>(9+<+?}+en?VPfWOqQ(;q<f#M#mwkp
+z@ND#-c0Oqa?ONln6MQxkW__xq?hN3k$LyZSR^}!C6ggM>(_YlDAJ7^D?~Aq4Cz^C4
+zkx7@<4d15z-=Y5Em+b>=Tk`uCO@Cbu^hD9?39GMtK8?j|&yGo-OX-P@x1uNPypZ4w
+z{lDzpeO%plegFRhoG4XPRBBPNJvFH4NTn^QsC+DGsKpgqY?-3w(-H$Mu{6PiD0QgR
+z;6#UtE45Tnj}{$maiY?Rii!p&Dmt8OLq$c)CMqgZs_1ZjAJ5P0bpo6~+Bt8x-|vrd
+zYjfv)efhaKSDY-?koAa;S+8GvEA`z}gPap|@2U59>UAUbcl0<&pW9TKd${JzbH9@0
+zny|aj&ebDXHLLgVI52f@6n$3dUONxy9x1x6ov_zAbzO_jw|6|S^R2FL(Ruc`<<~V?
+z{m}7pCTpa=*zuRUy8Fp~?Kt7*Fv^s&ckU$bZj8#2=GT?zdYC$Asy>~+qCDIis_t8N
+zdVL4{JWAQ<*xl>rY|a_c*ml}$*wK3#vNEH`4SL+F>&4xV@oNr!Ie9%hV6Qvtwd#}C
+zv*>r<=cGsbe6PQkMC0Z6sO=N$*NeL!wYhGc!|mK==LNl=NuP7mn0~^V>X?e^;Q3x1
+z7rG|hMSXk7bJxB0y%hSai|%)99;_|xhdcM`IcmSJ*=fJ0?oU&BHNHXWj@qC;J$_;@
+zyi@OqIhV3$#5=Cqcudi!cb<E5?7wtxk;vfv;5VP+&mZx)``nnG`-#>ls{amKlig?e
+zn)rMU?o2(G?vIPI{2W1>daS1FR_b2l4z7LCJTMmZF&aN((fCt;r#7`8MyOYxz00HD
+z*1naAem~)Be6PR8L0=Nov3`B@a~a2I^cXUW`uA>e9X;;*>A?DRH1!%mbS*t@uPNGR
+z@N!r6Tp|6-i>^7e9j!HONArEc`t)b%LzeBelh>8BenjmP7qxr9UZ>ddnwO>5bJ!C*
+z?X?GerZKuVxL0L;UZdajINOhF58FIj8{75c2VCDyUeA3lqt6{3&}&A1UEOQHNA(e}
+z^|+Hbt=FAdJEH5a`ltTPs6N(7^O|JM26y^-<PLic>(0HI-`uHkckIC2)hx~zcOJLj
+zwa-q@z4s;6H`_nnHu<+|`ySfX`7`=V276cYraf?ujt%`imlJx7Y=2{gYYN{1$KT<5
+zIREn;w7wJLhyI@FMgHzZ>igj~{;ici9@q2XJ9saD29FnFzq^<6_ff_^qrvAic>k-O
+zn@#e$j1L??hv&1-=I>UWy}Ecj_RdA>pXa^W`n!P|%MWSeNBsSb1zjij`z=`<rw9CR
+z<J=cLhkPmTk<N(TBfavdv-z7Z8MGVYGX!~eJ(<_Ic0MBYe(F7Ut~~UTRsH>u2lV*v
+z#6!QS#{$uP$^pMmVO-ID${qgqC9>=>g1z>tJ=XCr`kTeNM&I8(N;1puQ*@8QeYNgW
+zZ0-F0cTrpHivwyK_ing1+3Dw<tPS@j_r^Bgo3Ms2VBchO4ZOd{cDn9G_cwP~9eUiV
+z{_8o*4|0#S@o$Q$kGjv$>*n`+kFoxE(98Up?lHJmNIe#f?lG84^(%D`ljQM{{#F@r
+zC(r4rK0n~cq1=1uTA_OF`HQQf$Ddn1?&Msr_hu?z^thAzmDIUCnZ-GiI_}}IsNKu(
+zxU*pWUPftlt<2?mX7@2sT=ctNqwh^!XEr?MJdwJ-u3w|~_;+CI9x45C&^<h+i|S>K
+zbzaiBOa0a30-ay()nmp3_Ph3?9_#6z`2$>|Pu`cEu(9YK=;Zy-PU0wkPrhF(sXw|l
+zM|q<AfoKg<^AWw5nd8LzV)fkj1TVYS#-itzbU*XAsrOx+tkcu)uzRfN-tJyq4^O?`
+z>s~$ezOK}D{~7mp-9KUdxhM6!z`g$XjrOB!%LzY6(`M>=zkVLpJm`3}Yh^UPou^)t
+z*Yj_2J*NHCxmfoa(e*3K?%(wJFg-4auES~lS+DcY(1$y$j+58Hw0@i!JqA7Xy0zYi
+zQ^%#}wYRG;y1vs!G<S?u<J<E3e%$li;qTks>+^HK<|mr(=yzRDQ}^vwCQ2i}+Ssli
+zTVLOKj`Lo<pT)25C+zpAKH{V6J8=o>O}*FL?y3Cx?t4Lhza<*q&eXkH^u1s9SUk&q
+z|C9F1PJjP1b!^p#Pi(x--@CrI{%qIzto6@m>Ry-s`MX|xW{>NA>N9)yaUDN--RBw~
+zUHiGV=y~uvx&9Aw{paud@|ZAszi9N>VV-OLPq+_IT|ea7zsSAAos`jaY4HU22;3jc
+z^SQAfrap_teZh~o7l`f=`25zUdjvi|w(;|af7W}1tOuXh*Rh>Cw`&jI-*ffZockYq
+zUjM=8^^@FxJovo6Ki?GH-|7DE!RPfKd|uz~AGf{-O1uAi@Ok~{G0KC_>+7-GgU{>d
+z`rpM&e;xI~=k@*h&%OQ_isugW*hQ}cKlr>pkJ)!V_`H7f`1Hhs&+BU*9(-Q^!RPg(
+z=iYYeIo1cC*FX7MZ0a84!RPh)PClMbd+>Svccz~EdGL9Cd;hxLdlg+vIac&scJ#b1
+z*Hy(uk8Qcvc<_1s^}p+@_oYPhb;pCx>z~{&4?eGNul@gj^}N15Yqr<^mf8n-t(n&<
+zMx(zg$m`)7->)CNFVXK2^!<hQ`oDcAk-grm&*%7Oyl&?2p4_|5=dn&~@p-H$E_(g<
+zoqAui-v6lcM(Q=`ll33>I#vIHZR+2<Mg39ShWdAIUH@Q~z28x<_3OO^8$U<3-QS0Z
+z-p9@RAX0tR-$~Hx<58dYp8EH@Hr2^{G;?{~KJ{2$uLV=?omtGm9lRd>240ir{S~A7
+ze1zT~ADv(MOhWWNPu{Db$FvW7qQ6&-cJJgf3wkYi&l4<8e|sTGU!rpKMXwX<^<%xS
+z`&>+Y{-J3{Y`48OnGwCOP47ju*R}oqd6d(6E2@XzAI9%`k4E&KX?-r@K;}2^;x%;r
+zEwI$<=c#L@%IH1lsrP7~`FMN%TYt|>f8$Gk-|OV-sosw2K6!p%y!t$i-p~6%UXRt^
+z`O@o}jPr*5slTtg^H1nE@99YHRKL%n-}&43`(A7N%rm{;S$a>E-Vefa3cOD-dT-(Z
+ze}BT>t^3{T{jTzU|M36PZ}zU9&(Qlu@8W$Q`uxeZbDm}IgT61<-*a%>pHrod)O9<0
+zZsY-u;}Rc7)1PA;clbDtGY;O%tiM;e?KoH`t^ctcA4it&OX`Tmaj(_&K-Ys~j`x<I
+zy0>|~?(b52?V;ph4@d6_+!!AnCns#Zw|w53V<GC(UYU9>%Hs5XZ95h%tlx_^wE5HM
+zeR7-orT4aIjZ*JvkIEmn=PvXf7R}4OTa~+a{rw}#6P3GTbGd)rs$7=mIbn52<@i17
+z!vTx?@>b<`dY*eXl;ih}<vvBZ2lRfl;}7NY&yVK3_h`<0oQpL_ci3@w+UpZ@r8(F2
+zNq@I9`um-nN26;MpM}v_qVqE69Gwd_FM5xZ&WF+OY3Ka=d!KuBt;*7RrCqC3KYQ|I
+z{U^4$R<VCic^`cgx8YiKe2Z&U)c+0j@7<>Uom<o&#jV%>fvokufAF}yXDyne6E7N#
+zKBvt5{BQogQFQI%{a;&NyXd!GztCqHbnW`fgkQU8tLmYC4WbXJ_e5o+{stoJ8hx(_
+zdra3Qea1_l4~zC@mK|q$UzyfH?=Sp7>OC=}Mc1e(jcb;!Id^38S!DZs;<o3T6Sf~x
+z?_IO&sQvAuljoSIUF!6@tuL(mUfciEI>+4M$Dqf3jW~_1iu31B`OHAk>;CdRPk-IR
+z-gDOhe-Hm3-tx0OJAF=wQ{Op1=vsGo>iA!L&HJBF_2gLeJ$$+bDgNo?({=ycGyS^1
+zVSet^I-c-3y2IXcm%8qI-8Xz7bv-)1d7cNO{ERUwzyA0xy8e@9*MHVx=L5Np+Ps{Z
+zdY}0LyA~z0bT5&1{`U4#?WfP}O`1pTne^+>pVI&1|C{TneQw~M$M|*VUca7FM|93V
+z@xL3#Wj>CkKgT$-Y_BDmgZsap+BkMU(#LVYuQ}9V*DkB;<X*p@^@!dl$9~W~+orv8
+z$L9V2@GXvshinlSU1Rs!HFC>q?7gY}S{{9tDZ0+=J@s=P(cU3m<I;OPH-_~)$H3pE
+zj@jrsntF_WKxO>88U0TA)b-oL>E*wr>tfnG=((b(Z+C3y8^1?!$1N^uH@#fe`g`t9
+zUcXOlE*D+D)64DjJoj#BkKZ@8r|Y-g`yRdjoxPiSA9?!Uu9?iR{h{v`Vyrze-iw|(
+zXKL(c5chQ6Pp#`k(I4JFsqf#^+NFPPJV9ptR7C&AVhLCL?vH=`<A&hLUsLfZPbU2T
+z<d>DSe*bU7sbQqbJy28S?$6Y`rBwb*`uxYMua9N^*5ylIqwtUMrpzDmFQ=r;Z$}|E
+za}@eo6#9~fJ{yHT>7kECp*ubFfhhDI58V=l-sYh<MWHu%=rvL3RUSGRg${V=<)}Vh
+zZK~gUkKEMKdie5#t=H~9a^pp%&pZ%?Z#dX`-qF__yskC&{Qa%_n-h&kjvPLs?6Jy&
+z*Eb$*O*HSn>F}}E#El1!-nhT@K+|*B?&k&x(*Nqv(PJ$whmW*2HYA$%A8krpckIxC
+z)`N!+sW3l(b*QnerSSmC%{L{kJACX=L*mfE=EQ574mLL?jvac<k^L<#2M=AJ*ncQ-
+zWsAzu`m6UhA8WMYfAYUsv7i0Z^xGPSik|Y=hkb16S3jvJP*oKV&EzDx@kd`U%nyIA
+zVe^m2$7(G4l=KGAUbanozo*aeWs1D7^px`Y5Se}|qJK|KFXM!upIZ96Rr&5mS^9SE
+zPk8$9Hto-Gq0vu8^zW(d7w|!3{p4=besMIPu^4}6K|ega+x$~@Kk1eClV0QL+pSN7
+zr{~f#=gCv%xAko6&vxazJiUCI`I*>x`tq}$UPb#`txw{qr!QaX>Ek>&-l}}zd8aR5
+z=IKM*^uN0F^yTY4y<gc9r>@`H{glt$ZS@!Mg(_Rke=$$u>1W&haX;ym_mf`Z>D#Su
+zgQv$hj<%ZLhAQjdcIDeVz3DMqm!E%`mG|?&Df_ST<)=>{yr1-(eWx$q;_2J<zthuW
+zoM#@r#qrVU9p7$!dhRE^|9;Y28m<4!%*<BvKfxcl)K9ZPuFXFsH(1!WAysVt>Gt$!
+z{JE#@-{i*hEyh3M>3m1|mi>$Iz(_wu#wq<P^7Pq9Y*YTtR&cxZ$@BCv4xX*%r~EBe
+z-lzGL_LH8zUHv1TzFqxue|!4+E4okL|5{JquKxD7pT7QiPv5TpE1tex{RR4j9Y5R6
+zPlu;(SAVakZ&&}=EvK(P(QE13)nDrA<E-yi=f|mcoxc3Mr*Buj?e^1`@AmZV$`?i_
+zejZ?0HK**aGEXn${K<2?r=;)ukQLnS{-f8^x2u29(_>u!wwj-ukDPvd2~V%&<hIrE
+z)9^Vfzuo?ryr1;q&!4`0&;6vY+)sMl`02;j?CJBIzqgwI>aU!>e7&a^+MU@c>(}|U
+z)0gk_^zF)zef{+1r#*d~`_Qe{w}&s%)X#SNW5Cn9==oOTFaFW#%U5{%z8zcdkL90O
+z`R(?{>d#JJf6kJnuWoby*0OT?`e!_SyYVl2`U>~oTaAD2zfa%4Wlx`F^7%Ps{U`r$
+z`toz0UdX|<)%wLUtm5tZpXccX+w9+xGfrQ=($k9`zIFRuk2`(&eowEoY^RKW{;boN
+zU-9&cZRWr9?9-R8^7I;;=2P15yPxtyp04xvR_C|o#Od4b@btoM_W!_BPG5f1(?_=1
+z-_5(Me8o278}jtFZPE+Rv+{m_#Sl0DRD1e%`>Wp5b$o0!Kec)lo}Y^7-&6O0ucwb}
+zlU{Yv>HF8>>D%?M)6=(GzsfSJf4lN^p1$4swFjp!-{a}qtzYG(r=OorPv36+);xW?
+z^(%b->HAma>D#Se@e5Dizh+P0Zv7HhSo!VxSLNy3&Hp}6@7QL4&DEZMe9NBRzRmH&
+zIX(Kxc<oiOjJC5ga&yj!C5XxA{{^0|(@$xXgMVsro|OB(jQ3{t#$$y9%lUuYvi#A<
+z7mHP|=TR}`YvBLB2ar#<@+}V_pXR#ie)0|N%ZPoI-VB<-0PfC=?MmXKGh@yDX4r?1
+zCERO<?Wl5XW>Afce^;J6_i_sl;`!9q?{?z_gqu9P&#m_O3RFE4FEf*F9eyYywyPG4
+zGGfg&W>}5SAY5gJ3FN7cU9&H>@;&$t%5|g4b(vu&s$7Q|)}hMfqS~LT%ZS}Xxk*&H
+z2{Rl=l^Zj|K2*6X+)4hCmst5Wd^X`$RQVP&Y(|xDGQ&z#`65*LnHOio4iFx~oy_;3
+z8MfkcNU!zy8jsJ%*Al<-SC)U-3`ent_+F3i@%TFYF!2lQ_gB!)1Zuq9ZmnD3E?#Zx
+zH|I{F)~^*+uEx#AyQnvg8gI-D*RHbhuA1RAYP?;j@)g)ixpGvwGBYei%~OdPW~0iD
+zzsSmU;_E5bfhyN-hHa>Ft!7w*DwmDXy4GaGo=3S!RJjQ=97mNKGs8Yqxf;~E<fGPQ
+z`AVDTB{Lkw3ex*MzR%;Ev4i+3kFWIj9DEn?i=3~tz6)kJghRyFAm@QyW%v}#!6!1`
+z*{I_&ZidU8Pr2paHHJ?hy#^nJi`6#HQMbX(Lmh|N?&{^Xjy<S(DR*<+(Z96#F1HLh
+zw04yu=c?)wGbq9*)2~7^jG@N0_JYW85LK=pc~enypBeTloqBrApdNWvXjdIRgLSAi
+z!vdvKexb_xGl7MKhcT1<y_kXBsB&Fq*n&KzxT^-UNiRY5tJn<l@SCLP;+N@1jv1_8
+zX6rtM%0Fp_y%?vSdWC7fz|-?ReT?fPr@mdq$Ww*8^6<&H$aPoiw}4u|c{7|stzQ#r
+z-D0S9=;Q`imZH|H$jwI`cSCzEy~v%qBqO$m{Nu<i<gQ`VJPes(Cmtrg0<{k1crN2D
+zGlLS;`W2gDE^6F4W;nkmBi2H>5!62Ga4S&#Okg4DIjDAqI2hDU61Cp_X4r=b+U+%i
+zE>yiWxPy8NQSBzoaOvWV*sDmN#D|hTjvCjP84jY>w-<GsHlfNlm|+QO-B&r-wO(VA
+z^iebH^l*oV6R7p;<UWk2Vt3V|=D*4<L(P9NYTRSxW|N!i&Og`UyWCbxP;WD;|4n9C
+zftt^J)cmbHCnNR{!i)Gv!Xv2u4x3>Ms@)n?{&Lj*FF@`8JXHO;X1L15NAoj@nukGD
+zeFJ9LjoSZRsQuq*1}&)htU%>2H^Xey{+}r$p7yJ;iF~D~c`9}jsCk-umi2eo9YD=P
+z64lRsGweq7vjH_9RjBcmVl+O?B7XHE>(7cAPNVwMh9Twa@f`IBb-b0Jj<;en%tsw>
+z3%jkIHq>#Ki<;N@QnTAFM~$n*O`yg#dZFcOa7*3!3w*q8J-&=_>_c9<s;)DG8r1Pt
+zZH7gtc`h`=>GQ4J1nT%1H^VV}67`IlK^NXj{T-<JY&XM7)cWM0#<f&p^Er$ELHrml
+z;0UVRuo?ED)}al5MtU8pU$tgfj@mC}I8HxG%^-o=FDuWq{L5xIhCimBE`_nu(<?lE
+z;XFIuYVjqMFUJDRMXg^BYW=d!aAlXRUk_^CicsSlDmM3_)~m*?K&{uzUs!sLyTYJ#
+zzFb7@$63@o%$VU29wxpCwSEowM8;ch26d?Qt2M(i)I61%VK%l<Ztm%}&j#HlRDY{5
+z+TW;lW{RwxNz{5znBh1+fp*8tU>H?z8!loss@*Cx%)?g^zx=d}*iUg0=}Pm08BU|t
+zcMP>&J*e{CW>|+>_k_Z@@Kj5mH^U(h4|=!?b-o;WN=B@X`r1+R-{RJz=D!v-?ga)d
+zd)zWN+a0D+rT3%Or5Dxz9y4r0ogXTYBD)IkCzy*r!nr3~e`n3G4^>|qDt`n12Ug+&
+zmZRz~Gs6UGewNR*d6-7c&y*RCp!WYTYX1+JK_5ofA5{JZGc3U$)6N=$p^Lj(@p{Vd
+zL(NmITZNjZII6$1=a^GS)UHWXKPSv^1l7-O)O@s{#<vfn@!@|GPN4czV1}z_TYr-H
+zQpz{rxs)%*D+$N(NrXq9lo89pKIEm;>RvNwz*g$5!q1Su9KS($w!q@Y@KeMO<ClrA
+z_V^O~B=LnfPW<E(E&ninp7;U$zVdr~DSnptBK&vam!81=6fPoLym`S4=TY-AXND7~
+zdG3~syUPsgJY4JH0^CQwwZ~h&RWqDHt?xAc1LK}DgJDZ=9x}sDRK5=UDEZpWpw7~p
+zYt66_l`nyJldr%GR`adh6*HVb<r~K#@{O56pQShVnqdPfUp?|tO7%W7D8dZFg=UbC
+zyaZI8X9kOBWyD@bxk=RecA?g{1+~7-X0Q*x#=Ml{1Qy_DHBXPrh<z95a0bUv?Twnj
+zFsi*FGw4B{gWA=A?<c<A4ECX(SE$2A)~(hItMFgQUx^<ee}x$oqskYV!RnbAu>ry>
+zX0VK^ZwXc3q8ZMi>YK$6lYhnx#!=<R%%B_pj&PS5bfW6(K-Jf7hApW2nz5JsO=eJw
+zDqmv;3A~MPff?kZ>dQmbmurS`RDChzCBN#myvSe?Rer$?Mv#~Es)x;B2vy%8s=fg;
+z>_gSpi|-?Uj~TS1%D0(84Ql=MsSd6G!eedy=gnXQb^b}>Q&{It)P86|F4?>4@V%tx
+z;HwGuJjU|3qw?3I_DwY^e<}8nfAP_lzZq439V&l0YJU}>^5-Hi;qIEqwfxnn{AH;8
+z1*m<Pjmp3BD4q`@eHhiBN>u(5RQ^1i!5BUhmmirCOOig0%3p^%Pt=-Wk%tRCy!;3|
+z-j-1Na?uQ?P~|4gZ~%2&CQ;{&eluvd^yW4*toCq~hYL{U@=^OV&kUAxto|i497E+B
+zMV)U(%%I!So4d@g#>3SfF2JaM>{b0{u>5eZ-wekvsvmWp8Zm=zOK<Kn!x|4)d$<6j
+z`ceBh&kU9y=JlK57)JG@&Tk`T&~53>U1nJ0;c5>TU{pV9U+0;@@)=&g8IEC8KkB?V
+zVg{|K^Hhr&G@#B?^=43pf62V&ppJ{NY&$NJ_!#o_n?XJD(&(;Sd_4I&9%|tdR5<w%
+z3)i5+lRGTji3(?Xcq(q;der{eXNDynF81(RmW^i>wVzhZU<Org+6)Igob+%TY93lq
+z`=rGTsw};^(hPGvobBP+Oe;5oTK{P?7(}%<V1~^eZt`#$s=ZRwx|Wzhwxu`6&2TEi
+z>X|gdK2*70)Oz)pK?Q2P%FUnzwO++$kc~$vw?r--=X0oa>qni>I#KJ^VFs;ujN`lo
+zpTYUE*$nrg?w@K={is3pquLB|Q01~w<>F?z^2b<IZV6Rx5jE}wGZ;XXOQOp4n_)Lz
+zO#V((xenAkx0^vZs$3bWT&Wor;>F}IK$Xi!t!thc%>0j)n?{wJGQ%-cxe-*kVbnev
+zGJ}1%llJmZ^POu3*{J!Bo5A!SVzEnA4{DxUQS-bHHP3ZsP>uP-SD@M}N6lxM8RU6-
+zwx`EY^A<CMxiu?4jVeEdnx9EC81VEyPwz#|Lys9WdwRX6??a8Z&J6M}8mAd#V>C`P
+zSm1T{R@xm!jk5_g&T7;+tIQxDbskvzJ^7ixdHf9F8T<y}0o3tci^^Aq%2$B8FV02X
+z7tjCB^7WwdwWIPipzf3FaGY=vs=m2Z%QuP2H;kVr-vH{qxfPYK2vwgx>8E^azl}xr
+z(aZSngvU|&`ce1OeOSc4={3V1)IRDq!&cNjsg#@tD$Fp~!#N(F`AsakpB_Qw8#cop
+z)OvQK)}zY|nk~J#$qcJd`6^NCT44r-mfoB&!x$>x+I_Y^R?T1rqw}H}4x;i6p!QkP
+z4B9Qdxy=k~Q2DCyBU)!O$Vcs$JTu6~Xup`j+)7MuHQY6Vx~~|<$1v_8GaN)cZ!uto
+z)!3!_&7cx>A6J1dWxmVJumttEBoCE8*9=B}9gEI)-EJE`g?x2bh;e)w#!&0G_N&Nn
+z1s_j6%VyAtr5Z0*U^yP4Tp32^9W$K&FFSwC;9JNyiQ4C5sD0jtyHyWH^<Y#FM)jEC
+z{Ib`BQ9bx6)q^??`Y@^oqk1r^2cvq-aQ>HG4@ULiCshyXIO)Tv9*pY2s2+^!F~j*^
+zcs&@^gF24JP{&aps-6bazOO+YC)KFqq{<8{QT0}sVIeC2+|O+v&YEGbhkHC+<Kb!#
+z=Xf~V!+lG({xPhiA2UCT#XiXTO`E|KYTry^1MN?k;VAwK`A1Oqk;7)tk1F4122I#Q
+zxWNqSQT6RZ)mLYR)u{Tau$TOmW>A7EUu*_zKaIt1CA?||E2#RGQS~jE;XJCoIlP_x
+zvt}@XDnD)p19%bTOHs#F3F^2iHp3#+aaCxBl|PBa{(}73sC_-M7>gAXZopDp_;D=u
+zZt9;mgE>_HW>Ni{F~dnz|0eK#>W>)=p~?@M!9G+wH8_n`9xg{6k40FB1)je0pRw4v
+zgqKnKWyuT|Fkk&LgGu}r^$p`7wxil<#=pmU)V{96qtsW6s;|ZjOHtSRV$^Y3h&oR5
+z@t+B2<9l%RKkR(Bf*R+t8O)&e{V=M%0aSbasP_6$?e&^r8>+n))bZSeI-d8T+N;KQ
+zVL5&i%TViHY6khJ_Er|Gy+u@e^QiXbQ0>i{;TWpD5!7)%ggWk%sP=mBo!EhDuN}2-
+z+st4es=YGQ_=-{O6{6ZppxP@i!x*Z))qCyyu#7rCETGz(!8>pQ)!sOMnD)lZAc<<P
+z8FgN$N1aFZq0S?9W>|~SI+|e_D*x(_>^!n!hQp}qLMdKGy}79Sl<6PZeaa|4hW1Cy
+zAc?vk>&5?}Ts!J{zOi|WAI4SU`%v+-Kd|^I{1x#dsQ9(-Tl_L=KTUdg47J|99_~V|
+zN4<w@QS(*o;RNdbW9oZ$U7a+8aXdrwW(IxuYR1=s8ec7DkX~a3)u{YcW>AQ_Ps>G(
+zKgSG~=VGw};-^vNr_5jyA5D0|48}2P-wZ17>$IPTx}V53!-enKeNz$@-*1MksQKN8
+zny*q+yLqT~bIl+J)o!*K#8K_W%wX}`R&EkiZo&-4QRT+WU=&qu#0<(%{mnu3E87g`
+zX05+{sQ6wpY(}knEvmo8sQ%`l+RZkDII7*48La)gwYzEt^Z#b$#!=<Q%wQB%Zo~|R
+zQT-h<gA!DK<EVbc%y8ykt-n2}_--?7K<&qBRDTOm{f(pAjhVsPjJ3OJ1}ms`m(5^|
+zldIb8!Ki*StVi7s7kGTW$1ig+(0)&%%C(}(wU}Wgs+=wwieLL?WH^I5E;>==>MXvw
+z*3*kn<rcVjsNB36j^a4wno#A+J-y7+b5P|bIr*sEgc<guj<af1xrC<|c>3};tlSW)
+z+@KkDppM503LT@|0P1*a!02%gK8E?LGJ|6L9r+Weby%2+#ePkA78UNtpA+u!a6Nv7
+za0Px*<?u5Y!*ApK*SOx|C~6%?%wPz$Zi8mfjaSgWW>o)*QT@w9^)J^9R=ygG{WtY3
+zqWUw0_YqEdxB-7jxX!~x_%*`WIH7W1;c*g9;&*WnXRrg+zjiZd#WM)Em_aSRhW-_!
+z`j?B!pJN8ucn0CP8O%*u|0huWA2)+``~&UPq1LI^42w|bmt54i=Kd)b`z_&7RK5{2
+z>_Q#aEvS6uUy8;4i*P<FU!EB*PT27@jmkH0f_+224phE&Gps@F|Ftj1V*iA*sPq{#
+z97OH&TKqhgczUs?$58uu_zSVv_plpPzRL{jQTw(4{|(p1Eq&DtXHomJ9{-y8EkoT8
+zmZI(lOU$qsbw5~ShBKeHeAB3WQ)W1c$~R$#EvWjMExozP3>z%Hx!w$OQ2DYgy*X}%
+zdeETy);<>*4x;i6pxRBEVZWs}_nBc1YM(5B*7nJg87!jq$$}Y-qxSg_YM%_6K`oXt
+zA62OP%~I6;W<Ey!#CMRsFlO^PZ-x{2d-C;pe6Pp1;(p@GJ-*E2b5Z+l<ukTVrax`%
+zPN3QyMz!0EYPS>LM!WT>b>3%&6}Uorp2z2U{PL$_v1^GRMdcqc!)}cBF=~HSk6ODG
+zsCJ7{?dGD|jp5(Y?%XG>o>?;-!(Wiz<MG`d-;5#gr5<16@!6>B%+f#lc<=G?Vl-Y<
+zyIoj|9jN=Zb~9|lvskBAGibuElCK;!zA`h+#TOGlGh*@6W|%}BZ>3nuc#2T%=AqhM
+z`a~@DB3wYVJ8y<__&C~~HG?TULB1ra-F`D{#jA-g^Y~JakE4#`zK>hG-KcikQ0>;>
+z6<CF8x6%wN@J!k*H-i!!BVQcVZp;j4KgQdjiSI|n_nBc6>in=aZ0#<i+MPqSJA%_V
+zglc!t3<ofec9Uk%i{Bw%6RQ3OGc3n%5+C#UwU0*W;S}n;Q;(YGT2#9gsCM&l9&=Ic
+z=9pnNK9+XlX0ZAXJYFN;6sp}xGfd(SiEr@udXFzbozL<<5{n(C-Nm6;j8l5`f*H)C
+z9+%Fc&MUKKID?NMJZ*-fsB$A_(2Y8uRHM!prT7@qOU$4EUr4+8sCx6vP)~|+N!qn~
+zH|KX;Mjh|d$Y=9+ji8RdmAkC`GOGNN8P1~0Pa~I-U6ZKeb`Vv*8&!VlPAfl&DnDU{
+z!}t}-4I-C{T}jmO*MTbEfGR&UXype{<p<2L2fsqOF60!os{?iX)T7FmqQ+f<DpzcV
+z`KWTa$SG!5HfsMb@}N-V#!%%(QRPO=Fo`PHhny;Q^`Q1|3#wcts$2!CT)7z*p~@wY
+zOUABz)c#xju$7xam77GBn=r#+RJlRql)fv8+CLqr_GUk1*N+)9n8Gty_enG8$9Bq<
+zqxMGvGe|EmgM3u}JTq7tu>CWG+CS4~FpRq2?m?CBHiIsFG~rG&=s?xiZU))Nt>Uhw
+zJM6w@5_OzRm|-XCezpm<@9I$NU4UwD?St0dsu`@H+FLe*B~*KhX3&aiuMTy8RElb^
+z#0-}|VC~JI_UQzwy)IOHO_)J_4Q5b}YHyzz)S=p|HG}!2wKswPMSV$Bd;Mm(4>i6D
+z)V?l3wYU6!D>oyFA4ZiMGQ(z6xf;}dE<lY-Z-UT$*xdUp|EwAIq4Kw*_Hhj=e+BBk
+zEP<-Ozzmn(Yx!qU`*#SHzaMp<){e^GW`<R$`b$y!HXD_HwcqaBW>NWP%y0mezX!En
+zi}8^9k8fxG*4`5ttfJ0$EBFe|v&&|<fVv-<MCG3_gI@d+;T|*SMwRcvHOhCIVH;{c
+z?L+0SGlMeJ`99yxL7n$k-)-mp1=Rh-48DVW!x*iL8Fpbc>7A(SLWdbP;l<>y$A7{K
+zRQm~x=G_dJZntqwqn_XCz$4_Z#cryuF@tK<xT>(8b}G%V40XR$fXbh528(@M?+GuM
+z!91$`9R7y#vt~Gj+V{h#{6l8YjhdHcw;nYw)u`)X8ERgN@NMLaqsFB-bznGm8<mkh
+zi<*}iGaN(B%Lq<jFRJ}kRQVP&tU!&cP+^>TS1k4_@(<!$sd~T+lBjX@<2AI?XNKLV
+z`?(fW{$?{M$1e~rGlNo8`4U{Fe6blOP{(H+m0wR<VlaQJ&C9quf|{2kYF@fg^U{ug
+zOMmN7<Ek~o64bmDqvoZ^40BQQl8s-)#a?TF5><Y}40}=IYEu}Cu!a13Qd8}&-C~b3
+zR?Tn)b^Ta2!#?~pUFbD~9@O}|af<$QnPEFd*G*LZeP&RKrL>plW~0Wx@^?1=Y1Do2
+z6y{QH(hNpW;~qkdd(aGfP~+~x&tMa(-D=eM3MBo{H^YT@+I?~t-bns>)VTMd9$(d&
+zVJ&LhHD<Wl6VpS2>J>9sMvZ$3zeIl)&2SENz8pv8A2Wkq)VN#SCe*lVQR`lUFT!Gc
+z6y=J{AP+U}9Mrh8&2X8MiN?K%pTbF0yF;jPw@dopW`>oh`}9Rle$C_`M~!<7HSSR}
+z96^nH*bM9NAL&A^8PuT0U5%fkKUHQ}jymrrQ27hYV1<KQ<DPLRQR5y#jk^c0z;1jb
+z<+{wE6*cZ=)VQ0>um&~mD*PlCq1w$sjeCxhn8rP8h6AX_2~~Il`4gyd7of(SZ-#lO
+zap#)hC<ou?=)#B@45P+9gmd&~&<y+W`_$Kg%HM7VwWx8Ix<#mQ=b^^E%t=L$LzeIn
+zlv^}|8J%p1pF)j$(hP@D;~vD%V;8F3X4JULCH*fm!#IAE_`$ctVy`5B2Ws5ysByQM
+zVJm9fEoPXHV{{?U402K9&cT1BKiOuu)@9e>c~t&6GZ;aQyVvbPjk^^!?i!rOYRsWr
+zl^K+x#$AjWcaa(9qQ;$#pT)&DTf0-JaraC5-)DvmsK-g!c#!<de`EbwaA(~qciioE
+zJKR>c$=&CcyCrU+oA2hhvv0C?r`&OO#2s|I+;+FcZE)+{LO0*dabxaEr?oeO=d)f@
+z?l@jRxXsg>-FmmyEq6=YLO0*daeIz)d^5l8_yXp4A2QXuDshDP3e@_Qn_)3({c>?P
+zF20fTBKa0juUE~R;W#QiiD%K@Zd5&8X4r}W=>@3$mFvdc)tfDT$!)<T?d(JKvmBYK
+zU4{5Q;uEO)3(PPF)z9S)>&GO1kbD!UevX@A64lQRR6m<h^)#7bEvlbuZ?OI>y9@5D
+zJLT5kTWO~p)z1QCs&>V(i})C-{<YUfhD&%c>C>ow3}QF=22lM>nqh~h*Q5GbjjE^0
+z3`<e{oPC`gM<Z^J+w3Or0Qu(H?Kqn?!)|;V?KXRSlgF3iTZk|4_<WCF`fEE6Poa+2
+zNi*!nJILSe@ogSojqfME*yD>le(kk(9h<}GJa2|W_$l&tdwiG2@56hDFZcK|kIz9p
+zUzUGUEcSejuPqj1D^<^$!3^rWH;q>^Z&PMCj=G)<pz<fppanTZs+-NA301xUucCat
+z8P;O-d>JZ#sTstPQ%7~o4Ax#_<yY~qD8FKci>Q82q4H0f!4T@WNV;`ywOi~a+}T%K
+z{wa6JO}ce%wOfojuN1oZsPoFqF{@|N9d-xYeQu>&<}SBdxmnb8VG4Df81-<!+l8MX
+zz6C#q`!G75QRkfk{3!AHsQsU3hPkNyo@0i~N9}kS!&1r(yG?G5Tj{PHv3v`t{>`HL
+zH{szyw-?__d^^4en^66$LY;4l@OI)0QT<DpVF9Xt`DVEGD(l}Qs()i{tGmywakJg!
+z7VF;vs(;fS9&wZSX5zc>P1uU+UoGl9Q!0rsLG`cL42w|xD>TDw+)e)J!*;$Ha$8a7
+zhcbmZu1n2u`4Ib4{XxY~nPC!j{B(GHyT{j{&Ko5jU+nREkl#=I{Eb%6oEZ+Ij-wur
+z@Amk5)On-A<I6oh7e7w?a<kR5WQOCY<0<L!{T|<fI&Tc#5Q}lD*wu#TvEOU(;e-qD
+zk%Z$oML5Y#RyoIGzZvwQj{jcNJocDjH=akh%M4pk<(kc)1ou#15o#ak=IzP!W9?up
+z_Av6Tn!yZeUZ>4)0JT1KsPfgQ^L`OV>u81r7^q%+D)mk^+5Q>9PZRFO$5E~WRj%C(
+zoAJ4nt4HN4N3~br;kE0no<-F2g438mf2Yh~63-w!VFtbUaJ7Tqpq^HICgD2NJXhm6
+zSb=)}xeT)@Uup&kJe&Bn>#RSEsB&|ta?_}C6ZlZdjhn#`s$4&w$^7-1VK?gYkzHok
+zj;gN-RbLH8{lJH)A7)U53DQ>^tsm8R5$RQCP>I?H6{z_vH^Vag3&N#lSb!>*Zw8AE
+zvDkA6FPOnRs-8JiJ+o#wgS!Y%o8c&`+=v<EV6>0i6%JN~7g6VnDSR09j^eY3Pombf
+z7nQFIm9H7KFB(wo*PCGtYG0J0$`zyX>!k2WTzm!Z&&7HC2+ra#PT@V|Z%4J$;x@Q-
+zsCvp#{VPKCFBjEL993?0zvY`l^=}5%ziBfZNA+(IRjwaZZwr0^>#z@N@HVW%cVjtz
+zg8WPM*3P^;<4&UL8AA2157oa8R6DJx{xzZURipY>iRxd48J3{>myar!gUUaDEzkep
+zB)$>H@n#&wP8`CIk-r?7>RmC^`C#pu$Z!;O{_V4HbFarYq3+wNJigN7^HJy7)zIo$
+zF~dpJ{n?<$4|seV>U>(~@wFabgt`xF+sAzi{i;Dd?yN>V?yNGyO4Q@d3Nu`Kx#e3#
+z<y$brc~rhRGwedu*J<g^9cI{W>CJ6sScuA(u=M5vGt9U2<~%c;c$ux!sN3Q;xFv3(
+z8*^7)YUPI9q}%M)yX9_)yI5!C=G;NI-)%?TXSKRbsQavHPp@!SUt;wvxufoo+l{KH
+z(``f5Q{?FdZrojcvDG*1_PO0|rCWyDpM|LVqHK48#eNCldDQ-%Gs79&!TD&~42JOU
+z$=8V=!Vc7ZN4puep~|<KVIA&fAC=%;<S$0$FEYbIRQ`k+#&I|Kr)zCI6K=cP;MTdh
+zZX7kP<*RL6Gwv{ITtldK2F);uamLke25tCG^3~uwuo~6RDl@D^m9H?vLR3H3uHyZq
+z<X=VQUopdFRQ@HCziVXq`>~XAJ#Lj-;ugAdFS2~osBw*<)+_0@qsG;SYNyo<n=y-V
+zHJL#r{x$gu@FvVh^)t^5b5Z4U%y7BJ`Z<ZOC;tR0|F{{Bq4JNKVLxgf8gM81E8L+g
+zt^Y~4&aH4u-K8rm-#luZQ>bwcyWOa9cA?tsG{bhxWSnhgP>atcUok!#i%|V8G{Xd{
+ze1RG2&135K><eSj-+P)t<)1dgDOCPRGaN$Y??R2U!HuKN-;>pL-kmVR4y+(wy~pqK
+z_!4{$@wpzK<MDHsTlrZt9Q5#jhg&_|;^9iHqn<*KPk8*wU&f-pD>Z}B{iPWW;A_d>
+z>G2&NUyJV|zSQGOJU)&+#4o(S>X|pg5ga1E*W-IUz5zc>d~+4g|1%%esC{1S=D16j
+z*?DcjokgA3#yvdh4te|ls-9}M)Xj6VQTt}{`LWmlj^iK>;9ZzRt!uv-_Mz6b*9_ZG
+z>spCwr_jwu)jNABuQ%c}{vD2>j`v|yy+dX=h^lwM47*VE)}rbyb&F8-E>^~3Z8(qZ
+zIDtCe#!>Z-nc*m^-VrnGL)BZ4+J{qnt^Of5iK@RI%dig1u^gX=WvKc~&9DSjf3X?n
+zqUv9}#Om+I1B9Ct<~rVBhDE6To#XM@9zVCo_V*Yn|EL*uV+Z+LJigiED^U9~;qe6?
+zzg%Jaat5P)Y=#4<ec9>p9Ufnc+LvV>U+VGMsC`*?aV*xzIC`IF^VQ)tqvk6cwSU$E
+z+ds>w_))wQNAPYO#1ZPLMXhUvTa3y-S#JAf47Fc|QSohf3%25|*n}Uad>*PEJ&2S`
+z&$awrsQuB7+8-?*Uxu$ET#9eNA{?e%`E#s%k(-BVcjVc&4+c^DpdS_AgaJ0-#TY}a
+z^HiD5_oNxNpw_wC<EuPA7j+(6e3s>3FvB6#I(K<|r^i>L*16E*6CS^Kk*)ItYMsZ;
+zunV=$^&Y>^;|o#itOr}lzs6?8a00c?apY3AtCq>scvdfr=}*q>8bRGpHKXRa4sXUX
+z4`(A=Z&%F2$qOvpg_lvj9d(?vnPEM$rFNB}j+f>0=?D4du!MHTa2NJrJ->G1(@AeZ
+z<!deBc^rjN$78b@Hlf;SF!{SmR(}FjE(cZr(lf38NxX(%>rnGiYld;uxaZEZ_*pX?
+z#cz^-1UtBX4x2$S))1eInxFYy<_KzDhEVgDbbC<e?R}nJiYk}z^gK6?$~RJM>0PM$
+zI@|`2FY|DTTj=p|)cwHnU)Vg%pxPNn?c;tAx1;hkq1L0?%|^}F;xmZE3DkOwqv}bb
+z%5|g4m7w~!@N_<BNBlf$J?6}C3bpP77`201*D}=l@TF<7z1V|V*KRZHLe<l0hV`iO
+zm8fzhsD9?6`nmKpo_FTgcGSAInPHWOD?Oa!;cO3&JeB9esjmpDD4&ZOXB@SDt4}c(
+zF<KW?dav7on%8<%e=1P@DM0PBY^)-ExzP6S5^9`_X1IVF=e!wCpvF0j8s`A2-X2uF
+zt*CKUE1hvxnPEO^|4!}X^Q$V4>gNDz9DQyVY8=&`Ug+k!YfrZE%%a*IMYY?58c&PI
+z*LZw^$IqW@;~d33^rIU!FU_d^l8cw%K*H8LiJFIgGwegnL$4XOq2{3hH4k;D{#2s+
+zQ-qp_)pKkfR?KkR!($%q^l*oVD^TlQ;PLq$KX<mxUprn$z167st8hzE<H<+$BaZ6F
+z(vxgn7E$ptsQ6)z??SDA2Wnp0Q1vvR=A{}nFI9Lc7NFKO-wc-utiMyJ_(?PDMXh%o
+zzL+Mf@M_Lam1a<m`w8oNs4ytOYYFRnt1u`)jc@sh=7Kxy4!C`8H)<bsx^1X^)P!YN
+zjTzKmWd;SP`g7g6Cs=seop49pA-5MbFI}j4YV~jhmJlvS?UOPyoO?XaLlHlXik~vW
+zLDc@~bgNMNsL<7ixfPzxXB;?=7n6SgRjv<TPJAzFpZ1tx7pk33Gi*ZTuSC_Ca3{{P
+z^%^(BR@_H=t;g4Re4&RE9$tA|EOsIJa_|!B?K;!K4XF97a|_*k)Vk!lan!o3<#E45
+z{zcUKOrh3i(hT~sl=L2VpIhTrx@B%LM*H8xanw4kK9=WkaR&AL(=<lwV20!PY}y$@
+z<x8UK=|+`r!`;|`>TfBYPq_avHlIDHb?8Q|LzfwLpxS9S!+P9J`7+dcmU?=Lrx&2s
+zHygE13y(I(-Db)0)ntYRsC8J&wfI#toI<VRpvMn*d>4L``aALU%yWksj690-9r0CI
+zisf#$yY@(nUv?Kz>pAC6qt<gAwT=U*bxfK;E2`cmx700i3*5CwSiS|+yz6_Lv<?#<
+z?!oH_ccbRD%M7dVM&ipozRcruQS-f&V-BO{wcBlSE3k?9BGmlnpvvjZFk08OhugZY
+zn&C34{UtM;M&%zu)!*e7OV&%@kAdOb!)#r~Q1PQ?*zMsi5AVZ+)Kl*9Wgee{ht$tA
+zm|WVM$!5O!b=nN3P_IW!qWU*shT~XFc+3n3Q00<l(190GuFb7?Cm(A4NaC|d?{hoc
+ze0(1D<e5P(s{I^P``Km~$EOk2i#`}GKE%o`n85^INV$5{KB;vRZXRmC<+ysWNBeDc
+z2hRtPe*v}cCQ<ut!VLOQ^>w>-Zkb!`CQ$n<$HS{}+kZ>gO#CeByfK3s*R&Z<V07L<
+z<r_rR!&d-A`?no$Al!!P=RUli@OYN(lM&SZ8b+NrhD`p>leLpH!%o!x+K1Ywb)H`9
+z=@qDbTa4O&+3rH7g?l9Xt=kMMQ2Q(4@w_KK+Mmlzp3WQ7sQgoAm_+Tnc8}*VY?Pn8
+z(fOnf?_}O<&7eER=N#xy3F>|DY^T`egjMd#yaivL$)9j)!EwSek8lNkfUtZ#;WGRO
+z!t!jwCHPUo@*Kj<nf`82fqWw21P&3F1%&hQBm63#L^y^YCM=&oc$t3n5|)o6Jdd{%
+zmS+*3#`h7H)RDt66YC%>A49kVIgb{|M-$FR=Al47mN0F{&d7|t?nAi5pJaS5&f;x&
+z0N>%^x8Q3C-;6)NzxMD^`~u+{J=}<sgs=7ROYolwzsSQcK$YK%s{gsD^6Z@`ybD$S
+zX&ycYRi4|7D4okm>~g|qU@0<9u~(wT_q5E|Ba86qn82r?##xBDScF>VXCTC$in`uW
+z$3rUIgd20`X;A69zR9H9;nuqqZo-YZ^E4clcayHJYl^RTE8K(|bLY9fMdjV3+u_!`
+z6>h?fx$}%PD)0LB?jao>u6HZkgd20`AK~TQq}$=vyA^K2jk)t&pQ85Nq}$=vyA^K2
+zjk)t&m!k4+((Q2T-3mA1#@u<XM^Sk<>2|pFZiSn0W9~c~Eh_IO-43_jt#A`=%$;Y$
+zMde*x&lJ}6OzJu&E8K(|bLY7pMde*x=c4j%y<6cX+?YGhbto$DCfyFV-mP#GZp@wM
+zdJ~m*lWvDw?^d`8H|EZBJ&DS@Nw>qTcPre48*}HmPDJHhU2hcbaO>R)H{r(Id9E8#
+zc{k~Hxb<#@n{Z?9JcXn3Zqn^=>)i@B;l|u~&NKY_ka0KZcDVI!g`038DmRK3a%qu;
+zymhF@!}46hO&*qK6Rz;E<RRlDd3YL?mu%@rW@oNuu4QItPGwDJWoP!slkx1#?j1cl
+zvNK2X#`3Z=yUy%Bli$xA<KMx@4LvS9bKu;;b18N18viandFjd7naT48&dbi6K5vG9
+z$DcXz%<Rm`XHPvlJG1XO{m<dw=k-4?JG0~B&Wp1%$1Wb{-<6A3`FFBvs*3ur=)NL5
+zbK;6g{$0IdjelpuxiC9(=9<}SvNP9i=xEN)oNJ!v-|-tKZltY41BbFRI}djq&dyvo
+zyvV<kEmJN0`>Lr|WoM3bWQ=xX(Av!zoj2q3%^5SY|BV^RH{#M8GnVD(@r<$K*wvZQ
+z-H8jG8H=*#mW<w8aQ>Ez1v%WCG17}2w`O$Siqp4d%*f=sG6vp-%kRoqkps774Bm#b
+zw`I)9?!JtkKAh{zn3of`XH4FXGoQ|w{WK1ICS&k3xbm5dRXH)1F*%04pUvp|EUtYv
+zqvLZp{jH3dZ(;wpGm_uNrEg~}%dzidjDH8aznjtXU7Y)F#=IPw%NU-+wYiLr@8Q(<
+zGN$Fo_cKPnkE1IYV=LHoUq<(RID22loE-d3#?WtY^*0%7a`LwsQ@_Q&)r|gCTwKjq
+zlC!_dnERdL-;vq>4tC9GZ{}Dp&fcCmcRQ}WFLUjE*f)^bKY$Z=W=`ITGk0aq-i6Em
+zkh$^?*fE^hIgI@ynaL3xx+in^9-R49=Ip0%_0ySapH})<W^xQ?KbtxCSseO&=J4kg
+z|Aoxt7jSqYb7TT1zMMJvWt^YOT$sbj?=f^-`$1;MJTA;<F3P@pGyCtwj)lz51swU$
+z%+deE{vT&1e~i;V$(;EKj{Y=r?58;Vi_DQ<VD~RGdwz+tzs#JIBfriZ{WbQiWcIG$
+z+)C!W99_*ETgBerW%m6J=YN;EAXjhBTDzI!tLu1H_i-HR%o^^*nKxz4z6sa<CadGk
+z*!$M3zPIAY+p<RAru3ey*&ZBxZ`ROzvHyKp$@k&J`?DtBkE6+~u_VraAZy_RIP<}*
+z*$?8{9a$X%xIB=xBKtm^)&F7a{`;(+zn6Ds_1ujeLs^|e*!!`pzK>zo$FsUWj{Tp^
+zN`4Z1MzeZHapg-{t6x(3ce1*_gHzwhnwCA^&FcLw&VDy*POknmYwf2v{j;o@pJ8$-
+zYhVc%m$H`R@XxbGevaM0$m;n8j{hQSLQWo!PaWsX)7csC>cqv)_>vrWQ+)7E*!4H@
+z?!Uo_zll%E<eTFIZ^r32$7keFSA4h&=epwaa_N@%@+~;k8=vmQu3O{Xw<`YD__CaO
+zSA6<iioY%1eVgKMi!aNmzW8*X;%|?4->&%E<I8gL-SMe+<LbNPYjW~E@u~OVK!1F&
+zA7}dGv$FSN@xG7Y%E#iXa^~al*^lGUC*s4Oz|~L0*W}Dde0Bu8?umEbgZ-b2CqIV^
+zUyLt)5vNYXr%&MQm*R6@!ojb{hrW*UUym=y?thN={4-8Y$ET)oWF|g3gX7<iPkbMj
+ze-K~!0nW_FXXkNXAwIZ(D?g8~{v5}C6(9eV;(r|<{51~W7azF~JN^*w`~!~uAwDJ-
+z{wKcpKbY*;G0?#^p}TWOPbc=heMkS>aq=BIrrv==Jv)YV%~-o-M@KI%ym!aqdvW4@
+zJ0{<Ueed7V|9)J0|BhwZbN7zkyK(vM9V>ErXvfSD4t`|E&_}pa;5pb1E>2u1Q$N4p
+z_eYYFd#y#@P-N+;?@O=bqNx0pFSio;B^FM7A9}$vEu8xP^TQp4sjtH8+wb9*diW(C
+zzQ)7jT>q87#KS+h$?8jepZHIoV&T;Hk3a4&ES&nj?XcLwsqe=ge1?Tn-)DWZ=TCkA
+z^e;U;c8iVYJv`u1`yJl?G45v+u21#X>q~t<@h^NnQr}1XMW2u2&s%-}<nxjGzTvN)
+zXZ=ZizwqeOEu8v3+dL1qtXTQyKGo7w-`9D;Yb~7m{>{AeEu8wk&KEz;!m01id=U>A
+zwO*<3!+hoi7EXPC=A_r3`aa1oc>SsGhx~xopZY$@d9Oe9{f^)B`cvQ6_$jYH_5F_j
+z_y*czO<RuIe$u}i!+lC;j;Hm60Y6Mvl-}m~Ll1X&_-5tj9<}Zo%YW1B2(vyX_p8F(
+zLy!A<y-;E9$yYsmnZn%T|K7uw^LXcx*@=_ke`_bqV~B^<Tm5fPm>al!57%@MemL(z
+zJ!0vf;CcLWGCE@Vo?QL>JO3+OPMi9<crW3sj#z$Z`Ol;-rROwS`njII>f`?{Z7aRk
+z>$`Z5mCsF;Ctm4;4OV`p!qO9-ei!X3z5bP!ewLSC_WFPB>9fp{es=J9QTb;UEqtkm
+zS9V$WS%1anTQd@|0-n#;&zrBd@Wi7m{IV-7occcHH&$CX_5H(de}RRIIF9x6AD+MB
+zM;6xm-Bf=m`%pihx<>s;#9A7oVC-2uk)ia;Gi?4oa;b&$EIIZ)?_U}7rk~<kOYgT}
+z?8qxDocccOH+lKg_xpa`^Otd4>gR9&((>o(i4lHYPqXTeUYF9(<?PjSvJ$a*pU<zp
+z(DJucS^8OCzH^_2-*c6vH+cEQD=nP*{@aYpEu8wk-k(#C#+&;7;P#hUcy_1Ncd*97
+zsqbHXlb26@Uu@v>o%;S-o*Rq$uh-4=^K*_x^*?pIUE%3^olQRlKE7EW-vJ+A>ibZC
+z<MUZxYWaWf>z(?()f;?#4HsMb+1~#y9wh1KXWsvggso@j>!13*+;i(}e0guS{9k*i
+zg-70E;VIt_wcQr}s^?#MyM<rv`Fr1K;TL#+%la++#}`|DiH}(LnAca@YvH3_-~78Q
+ze2&-GeY=G_eSK2jkNtEHr@pWI#U4(5fBM>G)?VuS&_9@(zpq$*dSAWPyPqc+^)v4C
+zxwsMqV{h>Oj@)43Z+Lyp;}(9H=O6r#g`e-?)c0Rsah=w?Bl;r(%JG>T?T3z7>zS5+
+zs?pN3{rvG}Pha4=rk`6YExpXsZ{Xag^1W@AuJ^5}{t{3BJ5Mk2^m{$M$kRXN>0__4
+z@=s%*sQkRA|6zyKANTPOU1I4ip8iIT^XUBM>+>y7@9^|HJw3<Q>-V1C<LT3$KKdSO
+zKlJnOq^Do_FsncDGf&@R?HBp==E7`CujEN;{k+TPcRba;*Ej0nH+X#`KehT6yuO6j
+z_i3+hmM6LO^Wy8Ry<snZpVv3&;jejp{Xe$)3VnR}Uf=J%zGkoQqh4Rq%fHv#FZ29I
+zJ%54kzhC-zay@;IuivbfKg-vz+vi8`4~*8|^FPPuci87AyUEh0z5I_k4`}@oKe7J*
+z(XXF%9zN>rFZ%iChrS>6J=psBx~H#teQ)#eEqnMsJ-q1QT^`Q%{$1w%(H{@d&quh<
+zsXxVjzWPeBg*zLf<k<gsdYPx6>ERwvzmn^Q%2#^&eoycB^xygZuJQi-^Fu6uuAi@7
+zR6#haBUb0>PkX4P5BFI6cY1ogr@z6|Yi_ah>%IO8PY=BQ=`KsZ-P5Z){jjIE{H>+`
+zvC-PE@cEeX{7s(!gPwooR?A;lVfouU{r8@p?6dTCPw(>dtGvI}e!M;PIxAo0?fuI0
+z_j&$F&p$Y1^*u2)f1dxpcG&zh`~FD!{CD4A`P;bOYCZOS$ijMFT;T>!&+D*o+oGk9
+zy}`n@etcf*`>};_>F2qbmY(hT7d`)g@7Evedil`g$@|OazMk+ylCfF8zkIca=RF+v
+zaO(c_Htt82f7#RT_Vj5F|H#9O9{!5wpY-sn2<!Tx57+8vPltt*Z;67jdQY$Dws5zH
+z=Y9WO?cs!9|K8x?DL=oykMXMhHb0-<?col;zP|M)Z$HD1rzTHNeSiEjy}s)6Ed7j&
+zE&pn^_2*-t`se(5^cXK+S!Vh5Id-Kt`~3p19Yx`WDl30w+`>s;-!FT8`cek{T<P_-
+z2Ug!%-k$+pjMdL?pXc>Oq3Ca;NA-6<$|647Xz8mzv+zeeT>K*of857k;`gWj;^Ddf
+zw)Cf5YUS5TE&NI!Ps=_F-{#?(0t;W{{cYjRCi?lKr}v$0;f}{!ebruHt%p0mX663|
+zG+$$1xA2GA&kFZ^&%(Sm8HEe`Eu8Q3SvPLs>r(Z9#lruw!}3QjSQ7OEPw)MZr62Wh
+zmtQ|_yUFs;`1Sky-hS)Zmj54oJQF)De6`O{4f{er173cf7g_c5Po6*V)F>GH4_~iR
+zpN}{Dd|4`g)5^<F{=s4%=Ji+UMwg#wdw8za!f*2W3ptPI=dYj3@fhdvlb>&9pJU-B
+z58v(SsmGs>^YEIdS9v(@$LF^_-0kV#E4TVy@8P<@!Yv-I_4HqO_*<U-ZV#X9=@TA)
+zil_ghhm#&2^za>?f8N78nLmy1Up#yX=S!Ojjh@fma=qOc{?`7@;WJ;oIeduo>&E;a
+z=eXP$z9cRG6Q8s>y_^1Q%>S9z&EapPr9biP&FNoHtM8Ju@OKL~=YLhx=I|$<wK;s}
+zvp0voab$D&V)pIE{>FD~4(okM8`HnTd2M6(ZAUkUfApBm;UC|)IlS{Jo5K&`zG7p2
+zyYe@Ok3V{IxTJY=xGZgc>k2ogzxQ#Q!~Qz8Z4UnZRoeWWan0uZ8EN&OdCuna6W4AI
+z-_3b;<9Kd;<>v5n5}U&z=lhNMKVP;v+>%!R;rh+#$I|xCYtP-B{^PX#?@7!5gS7mK
+z{hP~wAuazoPu`sV?zH?pY3XH8+?@ZSwEp~k+WbE;ZGK)F^{*n9`ne`L9@fL3OG`hV
+zmi|9!>4RzM-%gwVXQhqzCuzrDkam1MKJEC@-_OWMbrxTdc6>c8?f81qBRA(iD{a3%
+zG41#&jmERyz*SNH_4#;vbiA&I8>97D4?mal|Hl4Zn6}@Z*S0zR>1q3~{<6*KRcYgy
+z&D)&*(nFiWFH1ZAk2P#gZ%;e^=hKe=JJOE-S{`?A9FN|YzcKvdwD}xOoA3IAoAclF
+z>doQv_H7PVr5*pzd+g@)o|etwkER_DnJ?d*o{^gt=Du%Z|8Gca4xg8H{{2$g{Ju49
+ze!rJCzY}Tmdr{i?`cY};>kp>Q?-$bM_Zeqx?%x?{=f5wf&F>e}=J%~>^V^y>zqh2#
+z?`qoo{vd6BuS=WXnzZ@7E^U5qO`G4&wD~>%@aFM-I&FS0ZQPum^Z3nSy-#}Mdj56V
+z{4S@>@2}G4_r|pOeOcQ4o|krgd3aiV|Cu(w$+Y=hOq<{OwDZ@a(#~IBO`G5Mr_Jxz
+z(&qQ`Y4bb(@Xhma*Y3^X;Q5=w*OzV%e=zNOa$nl@`MqiVy=KSe@}(DT4!<(3y&t5t
+z_w=;;t!EzFT>ckn?cJKzUUyo1x23iB7ir^vLt1+W)7nd<?GL@`xp9BJbpPh?^U{uw
+ze@$y|=F-jiyVJ%$l{Vk4Y4d$g+W23c)}K$NjXyhW{55I)xifA2x23gLmNxz`rL{L$
+zzj-{jpSw9c934*;vDD8cq0-mG?~RW4^>C24IsF&W^>ICYDmtFl!;J^h@<+$VdirCd
+z`|tJePZFE+zdgP=tT(i7?B7H*f9vHdqV-x2zdBm4_3*z(^S2&89<A4U_@UAItcO?A
+z>K{$3{|{;PKRVi<>*Z(C>c2Lv{^IEVVLiV-@49h(S4Zo=o_={+{SS%Oe?9#dY3uo+
+zwDo*kbiG*5|JJnid;*WJH@5%lwDr6vZ9U7P`;qnfTGH0@k<orzPya;PdhU3I+FSp5
+zRoea5-=~Ftn|3^8Uc0&cHPQXvdVRl%=4(Ct<>zhAe{))RSK9GCo|b-1TKH*c{eQ%>
+zHrL;hc0T!O+VTJIY5kji+2-=4S8oo_U$r@W_?pe(XGZI@KHfK_)&Ksq`_)gSjVCKw
+zpY`&e%ToOnCnFl7=MUDyx2L6lgT>sK|FX3G)SMPRnz=duEwr?8KV(MrooqhVALU;U
+zmpox}{wJsP|D$R7FHg%~o|ga4wDx|UcK`B@wDRYsh4a$t`?s|AW7ifQJ%9J!BR93Q
+z9=`lw>$Urj+;~yx1tl%VUeSE;z~zlMU48Jijh8lDuzUCU&%X90uiYm1(Sz3?+TVKY
+zNaF*@eg5vFjg1ZI8LvNlZPWgvO?wZw+!VX^#>N{DNFo~#9Z=WyHtpxXn!~J?VjCK_
+zifug5aCHBR8;=~kj$DkY<oSn>9ctL$dhqa}(#rj<`(J$i?rX1VY&p_+wDC}D6n*7O
+zt|aTx*Brc#fj2iFK5)t5wx|L1<%-7FY%|=gCg<vduik%boBUf%&-VFGnIO+<-MqfB
+zwf3f##!GH`;r>I{H#at1vH!-#7aZDq_)u$OTWjoEAI$TwylU^I*H&M-r}ElDi+aJ8
+ztZuCN+VhUK9y#yA^Uq6L@n=R8diaKet>;DUoScQLm@VqnQXFV#y1Hrq5f+c>S7fTS
+zgNKf`?myIeaDQtf9Z_1N`uO}Khi}}_%RR54>HP;z*U4)yId-tQ_28jvuWLTMpNux-
+zS2SLK@X($E2O5taO+_^xYVZgj(fQ|}_k5PPInj9J$l)WYY{w2YwzV`KXl-n`)S@5o
+zUT4l*{&%anb@r_mvn90*7wkUouMQnO*3xqL2whBQ(<QDucIbe1>}i&AeOsR<)84~J
+z8aHM1$vo0{T{AO63)jB7@yJnY>DmKLHymxf;o64%M_zM~rfuF?$NlS}R~$LmaDC&I
+zuXrV;uiBInO?fKHHp<ccS940x1U~!ZMmxV`@3AAVZj4SPS3XPW2M=9;<+E#2XPOtk
+zFs(q@3#%``^o7s5sO)r^o*iX6zvP0_)8)FLw2H}XY}j+GwTXlO;DPAy-+Q>B@sw6e
+zF4W1UROgy2cVEGFJ~hjQdoI2D$_p>s`@-!qlvcfP&)!pNzUb<zJs0f0=#==f7aTg;
+zc!0C#l^4FSa`!38Dt2L6>6Y=k&%fZ5`1R^aDS3XB&Z=m4U486Et;y9FyyWWUqc3Sr
+zTb~QAzUjsr8(WV==lvJ&*}L%s$|ZtR%)#rA9X@vSlABr^kM7x%UVgpZXc&7M_nd!$
+zX8rlTqfb}Ddip?$Xfm$VEbcjQzxAgk`~hSwi|W-hKY+}s6?p(ztzIqD1IVm;Pn&h)
+zir6J>&)%zVOie7yx-rA~7wDo_bL4RA;RA=8Q<*mA@G1`MDY>NV0p#0z^~qY+kLuGL
+zSvT$3lUjkx_Uyf>?Xs(DQ@wbg<<s`mpIS|7!TvAhwJ?8b`SoGgM&G`k^OYgm;FSlj
+zZ#>${VYt<-c{cXz1Ib3$x5&1|PT0`amZ_KjZ`W`0`tR9O@~jtf72kh77vz#Zr7j(y
+zHhKT|y4Dx;|5n%5i+g`{o__%g&3P=fFdT%HTTDrmZNoC3F58A>-X@#3R`cvva0=hc
+z-Ek}TIoH3e_Lb4C&W8KtQ%?6aCFhsC=3r|R_bdCaYusCM)2sepb62|DHj;z)QM@lO
+zMe4G(Rr`asCE0N@cFaVc+CMDWq7=r|F(PG4dHMzVV4u7sTA8h#8H+@t(dY{ed}vOC
+z0RQoy?*1Cw#Y5l`2XXwip!Q?1SWUNaNOqk9E9E*$)|2$*hqe=ySqlFA>0T>i*|sfI
+z#?GD5nBzTrm9%=-;cT*vQy(_R<@^?G?ag`>6B}a8Br(gg7yeWCg=<<@GhKky_hM;m
+zgY|Ro_6N(C$vWB6>cAWaImT`)kt}f!c0y(Eew(Wbm6g-?!wH-l;G{ElotJ3+BLw4f
+zmzwhHOoZ+ZW??r0UFTr~r>8W8<L1~s-%Q@sQ(C!bod=jn!lrD3A<VgE8FpK4lML;u
+zl&t9{6nQ*5MUBU^Q<QitJL~!4Ahp>KAqTNi`qgd0l<?-8FkHZ?<=#1G6Xn`DW}Y<9
+z6??gPuGra4b1hVFkDf)3({6UMbvuKrYv03zF7b^)mrcV>{iRKrLQOGMCQ>s@#dK2F
+z-wX8j)or#kqZ;5w_Xm9}N!@+1>-XAqW$ZlI#{KbJZR7q}t~nM!JDtqSw^!@VU$JPB
+z4Fk?yX4!<(aw(LlD`uH&JUBh-njJdcz+oyII%D0EDKZx-vrwnyK~kub@BkJ$Q;xR*
+z&RADm4FgjRd2_5{aiu@>xh3sXoE;o*vQB{|*4`;i@UhLxL*%i|!)kn(yX_Jp3a=RH
+z$h_&|$71r5{Q#dnY!x>w+A>^ih@+HyiM!|ECFXwYcz-s7)5P>_8O3MsKcYB1+b-WX
+zll2-7CTEl7+5H-QyWj|ao5WjD@zW+s;a7zi!tL@4cy}ReGVviul9kznaX3k`pQ<-l
+zdBxnp>{-1Sfh6HmlrF(n@NM!Oi)IYL6tW+pY_T0$ZW+Fd^92iKVQ9jKZAm>QwYtnZ
+zVY-Qf_0#<eQv2vS{X+f}CpGQ(C9h@1N!s)D($q&te42(!Q>Wz)6+H5(&Q+aKxFx7N
+zw!DCFftJ#8hgt<O2v_vAl+z;DYLudJ%yXP0vD_2%u#N6gsw%(GTS{rn^5EBzouzqX
+z=qlBF#PIE*XD^2c)-dK7Dj*ULA3<bFEZ&I$TjaH+e%joIfe%oZxtN>o3DZmKo-pbN
+zvr-AI08@0AS*e6ta;Qq?`LntzDEpk<?)WlMixe3cCT+eYVbbQC3_5L&ZJ?9o838(-
+zw!|5)%UpJP0Zm2HS>B{n6jVs5sHcEZD5ro(QcVGs)i~DMU`&03Ky?S}uf=-ThY%rK
+z8FV5eC}0p^C1MU4uW9T-Odo>)%jdrqLb?tRx;bJNxHT;mN^Z`v{#qMD#xd5US4L6=
+zdSyJ7(#wY|9y-=m1~FQ42!t`9OV77{{kc#(4IgVYipZv3kZ<Dpa}l%D-|!7ue=bCz
+z+p+#$Swag;e7zj);93Q+hiermvGR413Y#KM>3T7HON!`i4Jo3xwL_;jfL?CvWs;=d
+zR&=Tct#q|B4Txa3NS(>0;|!h0U-59~Km9eBeGhQUGa2@!Lp{fDxLxuP&NmOM2!kii
+zY}Ec7E}b5YV$5$G=jZ&^ff$nrNWin#TgQ+5hkerh4l$RD@hE_w>%I4B<VW6TKT3!2
+zyFi$hqYHyLk>4ea+XvVh_jhEfanU=*)iNYnk+m>#oCq}0r-}j%!h@f$H>O^^JE5C$
+zz37q<z5EVQ+@20AI|n4pTX=izp0Bg05Z6!ii4Gg;<@tH%IE$a39X^a^@OwG?47y3W
+zFkafNaUc&K7&CuT9esiElMc;+UNn|m2ae#A<@Dz6dg!(gOv7<4uCv~}atUvGFs|q6
+z52q6?XDb-eub*&OgX1@P3#ZV3@F-q<`XCuy2;?Ee&LU(RAVvV_GUZGramwUuLqkx$
+z4-)U3L6G(^p?Uwj!F<l9cilc=JEGf)mg{ZSv;pse-fEk|^P#hshXGqdMx(m5;qH2(
+zs@Tqa!rGu^C#sED2p?0IIN$1)q3m02IWMcl8fJ;`_k)Yc8~M*c`Z9Z&d1Pmkd8t<8
+zalBNE@;F`?^e(V<4r^$m3~fe<<U*|`q5sqYIPlc%%)o1h;KTdb3_!`PNwV`JG*03n
+z>omh0Ibz9a=NLHuybY^mm-L9X=WzT7Zq{z&ZO`H8p4PD4Q(MHbH}BMjZLu_`G;E6{
+zX@Q}on%Ey`*cOZO51cDGgXxHMf^rmFrEp$o2t(C9%IvmrA(8MY5VuA#E&8<r*rtnF
+zGPA0fNO(UAt3+O4G?nnmkp0vzQpiy#&+R;8<Pf(y0n)UqumY*3$SNf=bygteO07UD
+zR9k_VE4TuwXdzW|ZV`WdLDIY+u6Y6L#N;JP_izA#h({Ep!~da*{Y5fx*Q;p1+Yx+g
+z>MtGv=6XJe2?p!y9)5V2k104p2)!8m!nM~~t;1!|-6jx|bvqL&=LCLBC|icVA4qu0
+zz`%0u(mU_gxy=Cj=z`H|mi>-3>%J<jdsJL^2hW=0b9V4_d*mnv=iD!#<4rV)J9xhI
+zywVU+KLfA=V1puy=L#rQO=rM9G4!B@L?1kF(7_{T2ZPxR`uz15f|i52oTa`^06xq5
+zw!6giAiak@xj%Pihk66%`t|332kD(WAhb6A^8S8&3^tD0Ql-bsC6asDCec-OiB=DG
+ziRd`!Q74JpT_@pox_ShM$!Y<kfp|mQE<KQE>l%dTM7NKeG3grkmlODN@X#ol(esaR
+z0C;zr!mub;SF&F`uONr@47wX&>hm)(QxzX>7SWSpJOD$;FKvw-6_&6Ek_wB+9n3nX
+zkX{VX9O^w$!${IX!IV4`nLB!|CLfyYR;x&H)nYj(JAVxcYL_e)gl}y%B&c4bylONr
+zYF1sXNO9FdiF7xuA%a;HHq<C-wXe2G3Wyt$J^_h@ka?O$;B-lz9>|{i<bPv-%5$D=
+zkDdiWL(A>cKS}Y3{^yDO$K(Ky0g%P=Y!l*nrwPq8w;Yl=A(fLnVR_~JNtP-3Sv9`2
+zSa^A+q*h+2i41UC+GB1B+9y?t5F?JDiY%Fu8h;$N6-lWPhqksYqtU{*BB?MAEAqv$
+zo=a+u0+uOB1T4#xBt#Y#dZuI^9nF-~bWt$t?3t3a%4=gv$}p_OhOb}8l*f)aw7h5r
+z9q9Rd3`hmbl+>DQfFcUXKy-#$kjX3~fo4jQx~y+8Q&N+pPXFtesrtNd)=}jh&r5XZ
+zalGuETgFqzhw<D-O}&H+TFv{fh)n8ci3~Og0L?~lS_mb;C;)TG-Y^fB;RarTHH%<f
+z@+>3gcNk=EXoM1I5oyY}(U-8PtT7<S52E}15O){Db?vs59m|jM=vtf(7ko}8j9sC0
+zve{hBB0vWNCK;gN*F5`_vbL3>v#?SjzJ~~6&$-I0fv+=_iE#{8A{K5Gh1_-U)&Mp*
+zjP{bf5~qw_Mhqx>8AB|nM~p7L3^kRdI*QhW-G~;4^wS_or*ZTgM9IAm7u?{j9bWnw
+z@Yw18GIE2<cliJ1duks@eLMq`Yh0ATYYz1V32g(+x)SjW2=T6qO2o(+FZkK}Z&Cm_
+zPmUL$B&==Jh7+Za<an@50K-BPYSFWkg_a@en^Te7mu9vdmO;QO1UgWGU(3<?nLg-R
+z3|&{c*odPeE_N)E-`OFM#@z!*#6@ty`GO|cBcuj?_OrW(IG#qRUINwtHsV42lc%Yk
+z)G}Did@olTsM*~k@?na9O;tdF)GZW~fw+vkI=gC}H@r%R!$St=9McdDWOPUf)yLtT
+zg0xU;CI}+?+I!kyk5z_K$9SwlkhO#4jwmx+##7{WT^}#nN{!W_Qd!s8u5lketn@{+
+zjA+I3+Mx{hoZ;4LWm|d%KEiF=7<I#J)cqu&tz67eUPW$Jk!(9;_3%WtBdht1Q7G$p
+z`aLKryC|myOIf98b@D95Y$%uu-78(_rXgV8rr{T5iBm>7f+g<=*v(q`DFe4w0ZtmP
+zwMx)t(7ZvGiVC(BhA-IFW3B><ydfJ5MYGOeXM3ID&L*#D3|)4Uuk^M{!GP8pO;e$X
+zDxndOgw9gmY`99vXt-tQIW!zDx3gKe(HiL8qH`Wc7Bq6smN&^BQ(f{Hgi&lWDEbbu
+zHtY<4ojgXtuT4B~9bB;?S_J13u;2E(B_lCUMHjL?K<}k=o!1OmtQvi^p2R&5CP{)m
+z$JKH;iDI~FEeJX@NS^G((K77L;>kQox_^e?m%LBlAc?m_zEE!^U`T!M#@{Br?-aAx
+z2v4tNvNYNXxKY3_v+FMh<VHHVsm_Q49Z7(T8GJM*MU6eDJ(*15&lrs`2Ce=Ekve#^
+zSi-Y5WPjVB#1Fz0#D2bq!R&oyJ*{6A>b9AT)M=^+I8+2=P-ZG1!k9q}6cGLdK(its
+zJc<|i8U!4fGfcKsD+ma^3Ri;i;m>wfnB&}Tw2XeI4a4714ITR4ryNy46PN=TZV)`S
+zzi8h$3+yHcn}IT*$F!-4-J<@3+ISejzx@dCt=1LKZ7W{x!#j+2juT@)frQX!&}B_X
+z*eB;5AC@e>2VQW5d}oTM9jU|WopA*IyGTP705NvWwzzM_G+U*UM^3+Fev5;#u~wm&
+zSEgB}=t*jpV-{6tmMwELHOn-MR5Z&LWd*G^%ar)<nq}F#D9Wf;){_n<x8M;RRwT)F
+z^04=Yxyw@@xo2l0bBA}@U@?=WFpsDIE-Vg$8Q$-L)Q=y3aS=F}hoE?H)(Fq11{{|#
+z0RU}D#^@f#g^66~6SQZmjsNTojKsiT2ap%$Y(%_{UI%y;#a&<@REGjI|DZY$fS%ze
+zlzV!F-wBmuQ4w?r#7L^@sA1lUZW`q+z#$4-7mWT4m<rK83HJgQv+N2%K>F~J&?FyL
+zhaDlKRHyc^83ZF8{K@&G0M~FL6kn(4^x!TNxZWGCnB4CYr$><km#!<p2KbaREapSf
+z8BwGP83x)E#vOj#qfRPfev=C^%W-8Y8xyd0Jj=2~{M>a6@Q#J@|MGs`G3=M#iVV94
+zRyEwRFD?ot9(jOL@>@cUg7O`x)eDN4mXr=(y|@-CtXWWmcd8c@0xPNU)fs@uawdFP
+zL328mmGJM9K`(&=f3(}XuD^Zu!@sw1v<tuf@*{d&kAVWdo{&#r%tvBL!*>*<h)>?3
+z1cO7_eMxY9;b96pJ&97`{Ye!l*-cBOl&zNi9wxnD@%rVq>H75<?pxYSVhDEm+V(HD
+z2zgg_LDxJv*z*eRNZ8+L{G|P$8HUQ@Uyu&wxGaC0eh&g8-EggQ2WLO*a6LL;Z=A7m
+z?H6qOn*8?EcqvP)v3k(#Iz@X*vfhqp4?q;86km#B%hHmy#kFiB@aJEy)gsoBX_DCo
+zoJnWFu$n{$aMdI!3X%(;>PT-54YteBDxIR3u~@SSa3Y_78DViX90`%nKbNAMG3-_2
+zV#ZdAV#cDq45Ov%HPd_!rMWxpy{p}e|IL0x+s>}kaSEHE{G|$Fe*ptX-<3JTZlr#)
+z0?bB}m35XVhOXrrUvGrgZT;G`)8)riqZ}|luA2OFRD()WwxjH{DQ|V=mEjF_&_`9G
+zbk9dsqIAy3RHAfE!Oq&?XehN78m+6uVraCk604!Xx(d5Z+!@qhjrLxXs<K?beE1x;
+z_1Z_(W$U$%sY_UA>Vj^$Uz=aK3l{(nAm2;A1Q<fL+Qy}PCdjr&O7`A~Yu5M63OB0T
+zMono8=}q3*-eUN3EjPCxSdX$Oe^@<+QB6%Gi`7!98Zqihwh$O-$Be8G;BGm8P(2(X
+zs!*wvG0PG_rCZA|DC*65hG($D3{TZg)HLob{-jPd!!(t}FRwG?Ih<AMeEpnLr?NAM
+z`5<3Y<Bj$&hCwb{(FJyZt*kgB&}68A$zG7q1BaK<$o4)<7rU~QC-82P-(-1<$E&<|
+zSy&Rj!)5a22Q%BdEJ&DJ5>H;DWQkX)8&iMM70X(80plorg@{}e;9Wu*JHRnn_xSJK
+zB%N$h_IaUq|IMGvub-6HPySeWZECjrjPPp84YFeZ7?V|H5(D^i9RiAGIp+m<@J%X~
+z8+KE+nc_==w4<TElFK8vCL?vJK7tWO$qFV#O|fjojpQt=$<1cI9L$XbMcM$yf?>TI
+z88;c=^;)F6eBbTEw_x>8Y59KQxNYTATbFPbfGE{+gJ=4ISc=VJK34a9o6auqW1imu
+zMMkE=d6anm)$OhCU#>AX0+J*+8!_m_)~1X%SY7Un6)w*P%81$3`sRms=@(Ps_CIKP
+zF412P@D`kVJn4b_;3#JDBLh>DUoy~yJP>ec`kv)wpx?ys${!LX<ClJZ^Xx273z*NY
+z-pLW?)Y$nlc}@wmEtBP>m|H~{7~e8@6B9`O6{m}JpA1<ArAMB~#1scY9$WAs<T)Vr
+zIL4K*y&z8uz_##ZVZ9y>`z6n%h>Y@F3gu_du^s26+8!y(Ee`$z_5kv>OCA7xiu~&E
+z*W~h|?8gN>&s{3WhrHpd-r0AR=_lI@N~mAeu2ocgLAq8k_2bjEit;Z))+!{{*jmM4
+z)wR*XI4u}82+<}zB@It946+ycxXE7V1Bbl8k<%s&<vdO@JX+a^z??$<1OLQAE_68?
+zB~$oP>}ItOo>#kY8m!h62;D-UC`wZN*frc&BhjumEBu6aC0d@NT1X7)g3<00nH(w^
+u{D*#M-uZ+7)%oM>-~T=1zgnF?Xe#DeJlO+y^lT9&3;Yo1f6o3z|M!2$Kg%8f
 
 literal 0
 HcmV?d00001
@@ -21637,10 +21917,10 @@ index 00000000000000..e134697ed96de7
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 new file mode 100644
-index 00000000000000..3e3b2c3df5e365
+index 00000000000000..81a303d5e49a5a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
-@@ -0,0 +1,80 @@
+@@ -0,0 +1,84 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21660,6 +21940,10 @@ index 00000000000000..3e3b2c3df5e365
 +int64_t go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
 +int64_t go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
++// ChaChaPoly encryption and decryption
++int64_t go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++int64_t go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++
 +// Generates an Ed25519 keypair.
 +// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
 +void go_generateKeyEd25519(uint8_t *key) __attribute__((static, slice(key)));
@@ -21744,10 +22028,10 @@ index 00000000000000..c83bb8660303f6
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
 new file mode 100644
-index 00000000000000..e6dcc68ca43e3b
+index 00000000000000..f159f4b8e9cb77
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-@@ -0,0 +1,252 @@
+@@ -0,0 +1,262 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21771,6 +22055,7 @@ index 00000000000000..e6dcc68ca43e3b
 +int64_t go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int64_t go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
 +int64_t go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
@@ -21779,6 +22064,7 @@ index 00000000000000..e6dcc68ca43e3b
 +int64_t go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int64_t go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
 +int64_t go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +int64_t go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void go_finalizeHMAC(int32_t, void*, uint8_t*);
@@ -21856,6 +22142,10 @@ index 00000000000000..e6dcc68ca43e3b
 +	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
++int64_t _mkcgo_go_decryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++	return go_decryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++}
++
 +int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3) {
 +	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
 +}
@@ -21888,6 +22178,10 @@ index 00000000000000..e6dcc68ca43e3b
 +	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
 +
++int64_t _mkcgo_go_encryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++	return go_encryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++}
++
 +int64_t _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
 +	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
@@ -22002,10 +22296,10 @@ index 00000000000000..e6dcc68ca43e3b
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
 new file mode 100644
-index 00000000000000..c8915fe82be854
+index 00000000000000..769f19a15eb71f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,68 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22034,6 +22328,7 @@ index 00000000000000..c8915fe82be854
 +int64_t _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++int64_t _mkcgo_go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
 +int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
@@ -22042,6 +22337,7 @@ index 00000000000000..c8915fe82be854
 +int64_t _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
 +int64_t _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++int64_t _mkcgo_go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
 +int64_t _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +int64_t _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
@@ -22074,10 +22370,10 @@ index 00000000000000..c8915fe82be854
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..f70d3e374df468
+index 00000000000000..4adcebf3d0614a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,274 @@
+@@ -0,0 +1,284 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22172,6 +22468,11 @@ index 00000000000000..f70d3e374df468
 +GLOBL   ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
 +
++TEXT _mkcgo_go_decryptChaChaPoly_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_decryptChaChaPoly(SB)
++GLOBL   ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptChaChaPoly_trampoline<>(SB)
++
 +TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
 +GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -22212,6 +22513,11 @@ index 00000000000000..f70d3e374df468
 +GLOBL   ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA    ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
 +
++TEXT _mkcgo_go_encryptChaChaPoly_trampoline<>(SB),NOSPLIT,$0-0
++    JMP _mkcgo_go_encryptChaChaPoly(SB)
++GLOBL   ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA    ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptChaChaPoly_trampoline<>(SB)
++
 +TEXT _mkcgo_go_expandHKDF_trampoline<>(SB),NOSPLIT,$0-0
 +    JMP _mkcgo_go_expandHKDF(SB)
 +GLOBL   ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
@@ -22354,10 +22660,10 @@ index 00000000000000..f70d3e374df468
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..dab6985e7ff1ff
+index 00000000000000..c7c5d4c80f9466
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,212 @@
+@@ -0,0 +1,220 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22427,6 +22733,10 @@ index 00000000000000..dab6985e7ff1ff
 +	return int64(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
 +}
 +
++func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	return int64(C._mkcgo_go_decryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++}
++
 +func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
 +	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey))))
 +}
@@ -22459,6 +22769,10 @@ index 00000000000000..dab6985e7ff1ff
 +	return int64(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
 +}
 +
++func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	return int64(C._mkcgo_go_encryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++}
++
 +func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
 +	return int64(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
 +}
@@ -22656,10 +22970,10 @@ index 00000000000000..ca1fa1d6f9347e
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
 new file mode 100644
-index 00000000000000..a02dbe35686dc7
+index 00000000000000..c3716b4124efcd
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,337 @@
+@@ -0,0 +1,351 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -22688,6 +23002,7 @@ index 00000000000000..a02dbe35686dc7
 +//go:linkname go_decapsulateMLKEM1024 go_decapsulateMLKEM1024
 +//go:linkname go_decapsulateMLKEM768 go_decapsulateMLKEM768
 +//go:linkname go_decryptAESGCM go_decryptAESGCM
++//go:linkname go_decryptChaChaPoly go_decryptChaChaPoly
 +//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
 +//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
 +//go:linkname go_ecdhSharedSecret go_ecdhSharedSecret
@@ -22696,6 +23011,7 @@ index 00000000000000..a02dbe35686dc7
 +//go:linkname go_encapsulateMLKEM1024 go_encapsulateMLKEM1024
 +//go:linkname go_encapsulateMLKEM768 go_encapsulateMLKEM768
 +//go:linkname go_encryptAESGCM go_encryptAESGCM
++//go:linkname go_encryptChaChaPoly go_encryptChaChaPoly
 +//go:linkname go_expandHKDF go_expandHKDF
 +//go:linkname go_extractHKDF go_extractHKDF
 +//go:linkname go_finalizeHMAC go_finalizeHMAC
@@ -22737,6 +23053,7 @@ index 00000000000000..a02dbe35686dc7
 +var go_decapsulateMLKEM1024 byte
 +var go_decapsulateMLKEM768 byte
 +var go_decryptAESGCM byte
++var go_decryptChaChaPoly byte
 +var go_deriveEncapsulationKeyMLKEM1024 byte
 +var go_deriveEncapsulationKeyMLKEM768 byte
 +var go_ecdhSharedSecret byte
@@ -22745,6 +23062,7 @@ index 00000000000000..a02dbe35686dc7
 +var go_encapsulateMLKEM1024 byte
 +var go_encapsulateMLKEM768 byte
 +var go_encryptAESGCM byte
++var go_encryptChaChaPoly byte
 +var go_expandHKDF byte
 +var go_extractHKDF byte
 +var go_finalizeHMAC byte
@@ -22826,6 +23144,11 @@ index 00000000000000..a02dbe35686dc7
 +	return int64(r0)
 +}
 +
++func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
++	return int64(r0)
++}
++
 +func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
 +	return int64(r0)
@@ -22866,6 +23189,11 @@ index 00000000000000..a02dbe35686dc7
 +	return int64(r0)
 +}
 +
++func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
++	return int64(r0)
++}
++
 +func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_expandHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)), uintptr(unsafe.Pointer(unsafe.SliceData(info))), uintptr(len(info)), uintptr(unsafe.Pointer(unsafe.SliceData(okm))), uintptr(len(okm)))
 +	return int64(r0)
@@ -22999,10 +23327,10 @@ index 00000000000000..a02dbe35686dc7
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
 new file mode 100644
-index 00000000000000..c8ec9a8ddffc52
+index 00000000000000..fc5d643f48bd87
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-@@ -0,0 +1,275 @@
+@@ -0,0 +1,283 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -23027,6 +23355,14 @@ index 00000000000000..c8ec9a8ddffc52
 +//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
@@ -23280,10 +23616,10 @@ index 00000000000000..c8ec9a8ddffc52
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
 new file mode 100644
-index 00000000000000..ecb3cd3a9e3946
+index 00000000000000..a6ba482889cc27
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-@@ -0,0 +1,274 @@
+@@ -0,0 +1,282 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -23308,6 +23644,14 @@ index 00000000000000..ecb3cd3a9e3946
 +//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
 +//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
@@ -23560,10 +23904,10 @@ index 00000000000000..ecb3cd3a9e3946
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
 new file mode 100644
-index 00000000000000..c646c454a788fd
+index 00000000000000..9949435fe9e0ae
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
-@@ -0,0 +1,34 @@
+@@ -0,0 +1,99 @@
 +// Copyright 2021 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -23574,6 +23918,69 @@ index 00000000000000..c646c454a788fd
 +// these should have zero frame size to suppress the automatic frame
 +// pointer, though it's harmless to not do this.
 +
++#ifdef GOOS_windows
++
++// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
++// PUSH_REGS_HOST_TO_ABI0.
++#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
++
++// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
++// the host ABI to Go ABI0 code. It saves all registers that are
++// callee-save in the host ABI and caller-save in Go ABI0 and prepares
++// for entry to Go.
++//
++// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
++// Clear the DF flag for the Go ABI.
++// MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	PUSHFQ			\
++	CLD			\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
++	MOVQ	DI, (0*0)(SP)	\
++	MOVQ	SI, (1*8)(SP)	\
++	MOVQ	BP, (2*8)(SP)	\
++	MOVQ	BX, (3*8)(SP)	\
++	MOVQ	R12, (4*8)(SP)	\
++	MOVQ	R13, (5*8)(SP)	\
++	MOVQ	R14, (6*8)(SP)	\
++	MOVQ	R15, (7*8)(SP)	\
++	MOVUPS	X6, (8*8)(SP)	\
++	MOVUPS	X7, (10*8)(SP)	\
++	MOVUPS	X8, (12*8)(SP)	\
++	MOVUPS	X9, (14*8)(SP)	\
++	MOVUPS	X10, (16*8)(SP)	\
++	MOVUPS	X11, (18*8)(SP)	\
++	MOVUPS	X12, (20*8)(SP)	\
++	MOVUPS	X13, (22*8)(SP)	\
++	MOVUPS	X14, (24*8)(SP)	\
++	MOVUPS	X15, (26*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*0)(SP), DI	\
++	MOVQ	(1*8)(SP), SI	\
++	MOVQ	(2*8)(SP), BP	\
++	MOVQ	(3*8)(SP), BX	\
++	MOVQ	(4*8)(SP), R12	\
++	MOVQ	(5*8)(SP), R13	\
++	MOVQ	(6*8)(SP), R14	\
++	MOVQ	(7*8)(SP), R15	\
++	MOVUPS	(8*8)(SP), X6	\
++	MOVUPS	(10*8)(SP), X7	\
++	MOVUPS	(12*8)(SP), X8	\
++	MOVUPS	(14*8)(SP), X9	\
++	MOVUPS	(16*8)(SP), X10	\
++	MOVUPS	(18*8)(SP), X11	\
++	MOVUPS	(20*8)(SP), X12	\
++	MOVUPS	(22*8)(SP), X13	\
++	MOVUPS	(24*8)(SP), X14	\
++	MOVUPS	(26*8)(SP), X15	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
++	POPFQ
++
++#else
++// SysV ABI
++
 +#define REGS_HOST_TO_ABI0_STACK (6*8)
 +
 +// SysV MXCSR matches the Go ABI, so we don't have to set that,
@@ -23598,6 +24005,8 @@ index 00000000000000..c646c454a788fd
 +	MOVQ	(4*8)(SP), R15	\
 +	MOVQ	(5*8)(SP), BP	\
 +	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
++
++#endif
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
 new file mode 100644
 index 00000000000000..5d5061ec1dbf8c
@@ -23645,10 +24054,10 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
 new file mode 100644
-index 00000000000000..fe133dacac6959
+index 00000000000000..2b7eb57f8ae783
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
-@@ -0,0 +1,29 @@
+@@ -0,0 +1,39 @@
 +// Copyright 2009 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -23667,12 +24076,22 @@ index 00000000000000..fe133dacac6959
 +	// Make room for arguments to cgocallback.
 +	ADJSP $0x18
 +
++#ifndef GOOS_windows
 +	MOVQ DI, 0x0(SP) // fn
 +	MOVQ SI, 0x8(SP) // arg
 +
 +	// Skip n in DX.
 +	MOVQ CX, 0x10(SP) // ctxt
 +
++#else
++	MOVQ CX, 0x0(SP) // fn
++	MOVQ DX, 0x8(SP) // arg
++
++	// Skip n in R8.
++	MOVQ R9, 0x10(SP) // ctxt
++
++#endif
++
 +	CALL runtime·cgocallback(SB)
 +
 +	ADJSP $-0x18
@@ -23819,77 +24238,38 @@ index 00000000000000..e48722128a09d7
 +	x_cgo_unsetenv_call     = x_cgo_unsetenv
 +	x_cgo_thread_start_call = x_cgo_thread_start
 +)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
-new file mode 100644
-index 00000000000000..8ebc46efc78533
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/doc.go
-@@ -0,0 +1,32 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
-+
-+// Package fakecgo implements the Cgo runtime (runtime/cgo) entirely in Go.
-+// This allows code that calls into C to function properly when CGO_ENABLED=0.
-+//
-+// # Goals
-+//
-+// fakecgo attempts to replicate the same naming structure as in the runtime.
-+// For example, functions that have the prefix "gcc_*" are named "go_*".
-+// This makes it easier to port other GOOSs and GOARCHs as well as to keep
-+// it in sync with runtime/cgo.
-+//
-+// # Support
-+//
-+// Currently, fakecgo only supports macOS on amd64 & arm64. It also cannot
-+// be used with -buildmode=c-archive because that requires special initialization
-+// that fakecgo does not implement at the moment.
-+//
-+// # Usage
-+//
-+// Using fakecgo is easy just import _ "github.com/ebitengine/purego" and then
-+// set the environment variable CGO_ENABLED=0.
-+// The recommended usage for fakecgo is to prefer using runtime/cgo if possible
-+// but if cross-compiling or fast build times are important fakecgo is available.
-+// Purego will pick which ever Cgo runtime is available and prefer the one that
-+// comes with Go (runtime/cgo).
-+package fakecgo
-+
-+//go:generate go run gen.go
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
 new file mode 100644
-index 00000000000000..6adf531c221742
+index 00000000000000..b631396bd2ffe7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
-@@ -0,0 +1,27 @@
+@@ -0,0 +1,14 @@
 +// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
 +
 +//go:build !cgo && darwin
 +
 +package fakecgo
 +
-+import "unsafe"
++import _ "unsafe"
 +
 +// setg_trampoline calls setg with the G provided
 +func setg_trampoline(setg uintptr, G uintptr)
 +
 +// call5 takes fn the C function and 5 arguments and calls the function with those arguments
 +func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
+new file mode 100644
+index 00000000000000..88c4cdf9ec04cc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
+@@ -0,0 +1,6 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// argset matches runtime/cgocall.go:argset.
-+type argset struct {
-+	args   *uintptr
-+	retval uintptr
-+}
++package fakecgo
 +
-+//go:nosplit
-+//go:norace
-+func (a *argset) arg(i int) unsafe.Pointer {
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
-+}
++//go:generate go run update_tool.go
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
 new file mode 100644
 index 00000000000000..6bc959b64ce3eb
@@ -24156,10 +24536,10 @@ index 00000000000000..76f7ef6dc58c7c
 +var _iscgo bool = true
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
 new file mode 100644
-index 00000000000000..26524ced1c3f0b
+index 00000000000000..001b698842a36c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
-@@ -0,0 +1,37 @@
+@@ -0,0 +1,39 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -24171,6 +24551,8 @@ index 00000000000000..26524ced1c3f0b
 +	size_t uintptr
 +	// Sources:
 +	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
++	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
 +	sigset_t       [128]byte
 +	pthread_attr_t [64]byte
 +	pthread_t      int
@@ -24254,43 +24636,256 @@ index 00000000000000..e761fecfb89280
 +//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
 +var x_cgo_unsetenv_trampoline byte
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
-index 00000000000000..a18645048960cb
+index 00000000000000..c0a759bfb849c3
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols.go
-@@ -0,0 +1,225 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,114 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
 +//go:build !cgo && darwin
 +
-+package fakecgo
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
 +
-+//go:nosplit
-+//go:norace
-+func malloc(size uintptr) unsafe.Pointer {
-+	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
-+}
++Since we're called from go and call into C we can cheat a bit with the calling conventions:
++ - in go all the registers are caller saved
++ - in C we have a couple of callee saved registers
 +
-+//go:nosplit
-+//go:norace
-+func free(ptr unsafe.Pointer) {
-+	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
-+}
++=> we can use BX, R12, R13, R14, R15 instead of the stack
 +
-+//go:nosplit
-+//go:norace
-+func setenv(name *byte, value *byte, overwrite int32) int32 {
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++*/
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_amd64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), BX
++	XORL AX, AX
++	CALL BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// X15 is designated by Go as a fixed zero register.
++	// Calling directly into ABIInternal, ensure it is zero.
++	PXOR X15, X15
++
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++
++	POP_REGS_HOST_TO_ABI0()
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), BX
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL BX
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..bf407d4427633a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,87 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_arm64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD R1, 16(RSP)
++	MOVD ·x_cgo_init_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_thread_start_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_setenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD R0, 8(RSP)
++	MOVD ·x_cgo_unsetenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R1
++	CALL R1
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	MOVD ·threadentry_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	MOVD $0, R0                     // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R6
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R6
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
+new file mode 100644
+index 00000000000000..a18645048960cb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
+@@ -0,0 +1,225 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++//go:nosplit
++//go:norace
++func malloc(size uintptr) unsafe.Pointer {
++	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
++}
++
++//go:nosplit
++//go:norace
++func free(ptr unsafe.Pointer) {
++	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func setenv(name *byte, value *byte, overwrite int32) int32 {
 +	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
 +}
 +
@@ -24466,273 +25061,67 @@ index 00000000000000..a18645048960cb
 +var _pthread_attr_setstacksize uint8
 +var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
 +
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-+
-+//go:linkname _pthread_mutex_lock _pthread_mutex_lock
-+var _pthread_mutex_lock uint8
-+var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
-+
-+//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
-+var _pthread_mutex_unlock uint8
-+var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
-+
-+//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
-+var _pthread_cond_broadcast uint8
-+var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
-+
-+//go:linkname _pthread_setspecific _pthread_setspecific
-+var _pthread_setspecific uint8
-+var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
-new file mode 100644
-index 00000000000000..8c4489f0369c25
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/symbols_darwin.go
-@@ -0,0 +1,30 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
-new file mode 100644
-index 00000000000000..60e70c0a6c6e84
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,112 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
-+
-+/*
-+trampoline for emulating required C functions for cgo in go (see cgo.go)
-+(we convert cdecl calling convention to go and vice-versa)
-+
-+Since we're called from go and call into C we can cheat a bit with the calling conventions:
-+ - in go all the registers are caller saved
-+ - in C we have a couple of callee saved registers
-+
-+=> we can use BX, R12, R13, R14, R15 instead of the stack
-+
-+C Calling convention cdecl used here (we only need integer args):
-+1. arg: DI
-+2. arg: SI
-+3. arg: DX
-+4. arg: CX
-+5. arg: R8
-+6. arg: R9
-+We don't need floats with these functions -> AX=0
-+return value will be in AX
-+*/
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_amd64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVQ DI, AX
-+	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), BX
-+	XORL AX, AX
-+	CALL BX
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0
-+	// See crosscall2.
-+	PUSH_REGS_HOST_TO_ABI0()
-+
-+	PXOR	X15, X15
-+
-+	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), BX
-+	MOVQ a1+8(FP), DI
-+	MOVQ a2+16(FP), SI
-+	MOVQ a3+24(FP), DX
-+	MOVQ a4+32(FP), CX
-+	MOVQ a5+40(FP), R8
-+
-+	XORL AX, AX // no floats
-+
-+	PUSHQ BP       // save BP
-+	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
-+	SUBQ  $16, SP  // allocate space for alignment
-+	ANDQ  $-16, SP // align on 16 bytes for SSE
-+
-+	CALL BX
-+
-+	MOVQ BP, SP // get SP back
-+	POPQ BP     // restore BP
-+
-+	MOVQ AX, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-new file mode 100644
-index 00000000000000..24ddb71f946a94
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,82 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_arm64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
 +
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R1
-+	CALL R1
-+	RET
++//go:linkname _pthread_mutex_lock _pthread_mutex_lock
++var _pthread_mutex_lock uint8
++var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
-+	// See crosscall2.
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
++//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
++var _pthread_mutex_unlock uint8
++var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
 +
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
++//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
++var _pthread_cond_broadcast uint8
++var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
 +
-+	MOVD ·threadentry_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	MOVD $0, R0                     // TODO: get the return value from threadentry
++//go:linkname _pthread_setspecific _pthread_setspecific
++var _pthread_setspecific uint8
++var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+new file mode 100644
+index 00000000000000..8c4489f0369c25
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+@@ -0,0 +1,30 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+	ADD $(8*24), RSP
-+	RET
++//go:build !cgo
 +
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R6
-+	MOVD a1+8(FP), R0
-+	MOVD a2+16(FP), R1
-+	MOVD a3+24(FP), R2
-+	MOVD a4+32(FP), R3
-+	MOVD a5+40(FP), R4
-+	CALL R6
-+	MOVD R0, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
++package fakecgo
++
++//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
-index 00000000000000..061b40ef8af8a6
+index 00000000000000..3351b7b623822a
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_stubs.s
-@@ -0,0 +1,94 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
+@@ -0,0 +1,73 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -24746,87 +25135,66 @@ index 00000000000000..061b40ef8af8a6
 +
 +TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_malloc(SB)
-+	RET
 +
 +TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_free(SB)
-+	RET
 +
 +TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setenv(SB)
-+	RET
 +
 +TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_unsetenv(SB)
-+	RET
 +
 +TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_sigfillset(SB)
-+	RET
 +
 +TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_nanosleep(SB)
-+	RET
 +
 +TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_abort(SB)
-+	RET
 +
 +TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_sigaltstack(SB)
-+	RET
 +
 +TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_init(SB)
-+	RET
 +
 +TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_create(SB)
-+	RET
 +
 +TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_detach(SB)
-+	RET
 +
 +TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_sigmask(SB)
-+	RET
 +
 +TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_self(SB)
-+	RET
 +
 +TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_get_stacksize_np(SB)
-+	RET
 +
 +TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_getstacksize(SB)
-+	RET
 +
 +TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_setstacksize(SB)
-+	RET
 +
 +TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_destroy(SB)
-+	RET
 +
 +TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_mutex_lock(SB)
-+	RET
 +
 +TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_mutex_unlock(SB)
-+	RET
 +
 +TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_cond_broadcast(SB)
-+	RET
 +
 +TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_setspecific(SB)
-+	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
 new file mode 100644
 index 00000000000000..74ee18d383784e
@@ -26940,6 +27308,100 @@ index 00000000000000..865e22ab6a3dda
 +// This definition allows us to avoid importing math/big.
 +// Conversion between BigInt and *big.Int is in xcrypto/bbig.
 +type BigInt []byte
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
+new file mode 100644
+index 00000000000000..b0ad6c0aeaff09
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
+@@ -0,0 +1,88 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	chacha20Poly1305KeySize   = 32
++	chacha20Poly1305NonceSize = 12
++	chacha20Poly1305Overhead  = 16
++)
++
++type chacha20poly1305 struct {
++	key [chacha20Poly1305KeySize]byte
++}
++
++// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if len(key) != chacha20Poly1305KeySize {
++		return nil, errors.New("chacha20poly1305: bad key length")
++	}
++	ret := new(chacha20poly1305)
++	copy(ret.key[:], key)
++	return ret, nil
++}
++
++func (c *chacha20poly1305) NonceSize() int {
++	return chacha20Poly1305NonceSize
++}
++
++func (c *chacha20poly1305) Overhead() int {
++	return chacha20Poly1305Overhead
++}
++
++func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Seal")
++	}
++	if uint64(len(plaintext)) > (1<<38)-64 {
++		panic("chacha20poly1305: plaintext too large")
++	}
++	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
++	if inexactOverlap(out, plaintext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	tag := out[len(out)-chacha20Poly1305Overhead:]
++	if cryptokit.EncryptChaChaPoly(c.key[:], plaintext, nonce, additionalData, out[:len(plaintext)], tag) != 0 {
++		panic("chacha20poly1305: encryption failed")
++	}
++	return ret
++}
++
++func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Open")
++	}
++	if len(ciphertext) < 16 {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > (1<<38)-48 {
++		panic("chacha20poly1305: ciphertext too large")
++	}
++	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
++	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
++	ret, out := sliceForAppend(dst, len(ciphertext))
++	if inexactOverlap(out, ciphertext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	var outLen int
++	if cryptokit.DecryptChaChaPoly(c.key[:], ciphertext, nonce, additionalData, tag, out, &outLen) != 0 {
++		return nil, errOpen
++	}
++	return ret[:len(dst)+outLen], nil
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
 new file mode 100644
 index 00000000000000..d4c550b90fafae
@@ -30043,6 +30505,131 @@ index 00000000000000..36f0e0c6e278bc
 +	// plus the minimum number of bits to represent the first byte.
 +	return (len(x)-1)*_S + bits.Len(uint(x[0]))
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/chacha20poly1305.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/chacha20poly1305.go
+new file mode 100644
+index 00000000000000..64398979a27d10
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/chacha20poly1305.go
+@@ -0,0 +1,119 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"crypto/cipher"
++	"errors"
++	"runtime"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
++	"github.com/microsoft/go-crypto-winnative/internal/subtle"
++)
++
++const (
++	chacha20Poly1305KeySize   = 32
++	chacha20Poly1305NonceSize = 12
++	chacha20Poly1305Overhead  = 16
++)
++
++func SupportsChaCha20Poly1305() bool {
++	_, err := loadCipher(bcrypt.CHACHA20_POLY1305_ALGORITHM, "")
++	return err == nil
++}
++
++type chacha20poly1305 struct {
++	kh bcrypt.KEY_HANDLE
++}
++
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if len(key) != chacha20Poly1305KeySize {
++		return nil, errors.New("chacha20poly1305: bad key length")
++	}
++	kh, err := newCipherHandle(bcrypt.CHACHA20_POLY1305_ALGORITHM, "", key)
++	if err != nil {
++		return nil, err
++	}
++	c := &chacha20poly1305{kh: kh}
++	runtime.SetFinalizer(c, (*chacha20poly1305).finalize)
++	return c, nil
++}
++
++func (c *chacha20poly1305) finalize() {
++	if c.kh != 0 {
++		bcrypt.DestroyKey(c.kh)
++	}
++}
++
++func (c *chacha20poly1305) NonceSize() int {
++	return chacha20Poly1305NonceSize
++}
++
++func (c *chacha20poly1305) Overhead() int {
++	return chacha20Poly1305Overhead
++}
++
++func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Seal")
++	}
++
++	if uint64(len(plaintext)) > (1<<38)-64 {
++		panic("chacha20poly1305: plaintext too large")
++	}
++	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
++	if subtle.InexactOverlap(out, plaintext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if subtle.AnyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	info := bcrypt.NewAUTHENTICATED_CIPHER_MODE_INFO(nonce, additionalData, out[len(out)-chacha20Poly1305Overhead:])
++	var encSize uint32
++	if err := bcrypt.Encrypt(c.kh, plaintext, unsafe.Pointer(info), nil, out, &encSize, 0); err != nil {
++		panic("chacha20poly1305: encryption failed: " + err.Error())
++	}
++	if int(encSize) != len(plaintext) {
++		panic("chacha20poly1305: plaintext not fully encrypted")
++	}
++	runtime.KeepAlive(c)
++	return ret
++}
++
++func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Open")
++	}
++	if len(ciphertext) < chacha20Poly1305Overhead {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > (1<<38)-48 {
++		panic("chacha20poly1305: ciphertext too large")
++	}
++	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
++	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
++	// Make room in dst to append ciphertext without tag.
++	ret, out := sliceForAppend(dst, len(ciphertext))
++	if subtle.InexactOverlap(out, ciphertext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if subtle.AnyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	info := bcrypt.NewAUTHENTICATED_CIPHER_MODE_INFO(nonce, additionalData, tag)
++	var decSize uint32
++	err := bcrypt.Decrypt(c.kh, ciphertext, unsafe.Pointer(info), nil, out, &decSize, 0)
++	if err != nil || int(decSize) != len(ciphertext) {
++		for i := range out {
++			out[i] = 0
++		}
++		return nil, errOpen
++	}
++	runtime.KeepAlive(c)
++	return ret, nil
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/cipher.go
 new file mode 100644
 index 00000000000000..c1365f8d399d21
@@ -33383,10 +33970,10 @@ index 00000000000000..56131a6bc93d3f
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..69269495c96d0d
+index 00000000000000..3fe42f9334abd0
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
-@@ -0,0 +1,394 @@
+@@ -0,0 +1,414 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33428,6 +34015,8 @@ index 00000000000000..69269495c96d0d
 +	TLS1_2_KDF_ALGORITHM = "TLS1_2_KDF"
 +	DSA_ALGORITHM        = "DSA"
 +	MLKEM_ALGORITHM      = "ML-KEM"
++
++	CHACHA20_POLY1305_ALGORITHM = "CHACHA20_POLY1305"
 +)
 +
 +const (
@@ -33715,7 +34304,7 @@ index 00000000000000..69269495c96d0d
 +	Magic KeyBlobMagicNumber
 +}
 +
-+func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
++func Encrypt(hKey KEY_HANDLE, plaintext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, ciphertext []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var pInput *byte
 +	if len(plaintext) > 0 {
 +		pInput = &plaintext[0]
@@ -33725,7 +34314,25 @@ index 00000000000000..69269495c96d0d
 +		// It won't be encrypted anyway because the plaintext length is zero.
 +		pInput = new(byte)
 +	}
-+	return _Encrypt(hKey, pInput, uint32(len(plaintext)), pPaddingInfo, pbIV, pbOutput, pcbResult, dwFlags)
++	return _Encrypt(hKey, pInput, uint32(len(plaintext)), pPaddingInfo, pbIV, ciphertext, pcbResult, dwFlags)
++}
++
++func Decrypt(hKey KEY_HANDLE, ciphertext []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, plaintext []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
++	// Previous to Windows 2025, BCryptDescrypt did not validate the padding info when ciphertext and plaintext were both zero-length.
++	// To maintain compatibility with those versions, we allocate a zero byte when ciphertext is empty.
++	var pInput, pOutput *byte
++	if len(ciphertext) == 0 && len(plaintext) == 0 {
++		pOutput = new(byte)
++		pInput = pOutput
++	} else {
++		if len(plaintext) > 0 {
++			pOutput = &plaintext[0]
++		}
++		if len(ciphertext) > 0 {
++			pInput = &ciphertext[0]
++		}
++	}
++	return _Decrypt(hKey, pInput, uint32(len(ciphertext)), pPaddingInfo, pbIV, pOutput, uint32(len(plaintext)), pcbResult, dwFlags)
 +}
 +
 +//sys	GetFipsAlgorithmMode(enabled *bool) (ntstatus error) = bcrypt.BCryptGetFipsAlgorithmMode
@@ -33757,7 +34364,7 @@ index 00000000000000..69269495c96d0d
 +//sys   ExportKey(hKey KEY_HANDLE, hExportKey KEY_HANDLE, pszBlobType *uint16, pbOutput []byte, pcbResult *uint32, dwFlags uint32) (ntstatus error) = bcrypt.BCryptExportKey
 +//sys   DestroyKey(hKey KEY_HANDLE) (ntstatus error) = bcrypt.BCryptDestroyKey
 +//sys   _Encrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptEncrypt
-+//sys   Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptDecrypt
++//sys   _Decrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput *byte, cbOutput uint32, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptDecrypt
 +//sys   SignHash (hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbInput []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptSignHash
 +//sys   VerifySignature(hKey KEY_HANDLE, pPaddingInfo unsafe.Pointer, pbHash []byte, pbSignature []byte, dwFlags PadMode) (ntstatus error) = bcrypt.BCryptVerifySignature
 +//sys   SecretAgreement(hPrivKey KEY_HANDLE, hPubKey KEY_HANDLE, phAgreedSecret *SECRET_HANDLE, dwFlags uint32) (ntstatus error) = bcrypt.BCryptSecretAgreement
@@ -33834,10 +34441,10 @@ index 00000000000000..ec2eb01aa3cd8a
 +//sys	formatMessage(flags uint32, msgsrc uintptr, msgid uint32, langid uint32, buf []uint16, args *byte) (n uint32, err error) = FormatMessageW
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
 new file mode 100644
-index 00000000000000..af29330ca347e2
+index 00000000000000..6a09e41fceda86
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/zsyscall_windows.go
-@@ -0,0 +1,446 @@
+@@ -0,0 +1,438 @@
 +// Code generated by 'go generate'; DO NOT EDIT.
 +
 +package bcrypt
@@ -33953,20 +34560,12 @@ index 00000000000000..af29330ca347e2
 +	return
 +}
 +
-+func Decrypt(hKey KEY_HANDLE, pbInput []byte, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput []byte, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
++func _Decrypt(hKey KEY_HANDLE, pbInput *byte, cbInput uint32, pPaddingInfo unsafe.Pointer, pbIV []byte, pbOutput *byte, cbOutput uint32, pcbResult *uint32, dwFlags PadMode) (ntstatus error) {
 +	var _p0 *byte
-+	if len(pbInput) > 0 {
-+		_p0 = &pbInput[0]
-+	}
-+	var _p1 *byte
 +	if len(pbIV) > 0 {
-+		_p1 = &pbIV[0]
-+	}
-+	var _p2 *byte
-+	if len(pbOutput) > 0 {
-+		_p2 = &pbOutput[0]
++		_p0 = &pbIV[0]
 +	}
-+	r0, _, _ := syscall.SyscallN(procBCryptDecrypt.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbInput)), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p1)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(_p2)), uintptr(len(pbOutput)), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
++	r0, _, _ := syscall.SyscallN(procBCryptDecrypt.Addr(), uintptr(hKey), uintptr(unsafe.Pointer(pbInput)), uintptr(cbInput), uintptr(pPaddingInfo), uintptr(unsafe.Pointer(_p0)), uintptr(len(pbIV)), uintptr(unsafe.Pointer(pbOutput)), uintptr(cbOutput), uintptr(unsafe.Pointer(pcbResult)), uintptr(dwFlags))
 +	if r0 != 0 {
 +		ntstatus = NTStatus(r0)
 +	}
@@ -34384,18 +34983,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..94f52f58126855 100644
+index b6f6376eac041a..cc1444536adb31 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251205103838-300bb5780a83
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251215143607-e068212c5cff
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
@@ -34404,7 +35003,7 @@ index b6f6376eac041a..94f52f58126855 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251202082756-9cab7d2d4a79
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index df01c6609aa..d30e01c08d4 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -18,7 +18,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 249 +++++++++++
+ src/cmd/go/systemcrypto_test.go               | 249 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -29,9 +29,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 410 +++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 418 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 416 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 424 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -45,15 +45,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 366 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 400 +++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 374 +++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 408 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2678 insertions(+), 20 deletions(-)
+ 44 files changed, 2710 insertions(+), 21 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -246,7 +246,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 48c3aa5efdb008..3ac500b85e6988 100644
+index 6d3742525c6808..287424afb0d734 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -310,7 +310,7 @@ index 48c3aa5efdb008..3ac500b85e6988 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -897,9 +908,10 @@ func (t *tester) registerTests() {
+@@ -897,9 +917,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -322,7 +322,7 @@ index 48c3aa5efdb008..3ac500b85e6988 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -1005,7 +1017,9 @@ func (t *tester) registerTests() {
+@@ -1005,7 +1023,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -928,10 +928,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..26912810eeeaa6
+index 00000000000000..444bd6ef163689
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,410 @@
+@@ -0,0 +1,418 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1342,6 +1342,14 @@ index 00000000000000..26912810eeeaa6
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
 +	return cng.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
++
++func SupportsChaCha20Poly1305() bool {
++	return cng.SupportsChaCha20Poly1305()
++}
++
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	return cng.NewChaCha20Poly1305(key)
++}
 diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
 new file mode 100644
 index 00000000000000..a9682181ffa154
@@ -1396,10 +1404,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..3e5c4c91571abc
+index 00000000000000..b3b6985d41fbd2
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,416 @@
+@@ -0,0 +1,424 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1816,6 +1824,14 @@ index 00000000000000..3e5c4c91571abc
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
 +	return xcrypto.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
++
++func SupportsChaCha20Poly1305() bool {
++	return true
++}
++
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	return xcrypto.NewChaCha20Poly1305(key)
++}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
 index 00000000000000..e4a1ddeeb7dc09
@@ -2307,10 +2323,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..0b1d97211ef7c3
+index 00000000000000..5292d7860c5bce
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,366 @@
+@@ -0,0 +1,374 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2677,12 +2693,20 @@ index 00000000000000..0b1d97211ef7c3
 +func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
 +	panic("cryptobackend: not available")
 +}
++
++func SupportsChaCha20Poly1305() bool {
++	return false
++}
++
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	panic("cryptobackend: not available")
++}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..bd8f774a9c24ba
+index 00000000000000..a95e112053ff08
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,400 @@
+@@ -0,0 +1,408 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -3083,6 +3107,14 @@ index 00000000000000..bd8f774a9c24ba
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
 +	return openssl.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
++
++func SupportsChaCha20Poly1305() bool {
++	return openssl.SupportsChaCha20Poly1305()
++}
++
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	return openssl.NewChaCha20Poly1305(key)
++}
 diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
 new file mode 100644
 index 00000000000000..5e4b436554d44d
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 8da2ae0c8b8..55a5a4b8fba 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -40,6 +40,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
  src/crypto/hmac/hmac.go                       |   2 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
+ src/crypto/hpke/aead.go                       |  14 +-
  src/crypto/internal/cryptotest/allocations.go |   6 -
  src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
@@ -78,7 +79,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
- src/crypto/tls/cipher_suites.go               |   2 +-
+ src/crypto/tls/cipher_suites.go               |  10 +-
  src/crypto/tls/defaults_boring.go             |   2 +-
  src/crypto/tls/defaults_fips140.go            |   2 +-
  src/crypto/tls/fips140_test.go                |   2 +-
@@ -101,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 97 files changed, 1489 insertions(+), 175 deletions(-)
+ 98 files changed, 1506 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1490,6 +1491,38 @@ index 4046a9555a8e35..4721a2a7ac04f7 100644
  	"crypto/internal/cryptotest"
  	"crypto/md5"
  	"crypto/sha1"
+diff --git a/src/crypto/hpke/aead.go b/src/crypto/hpke/aead.go
+index fb55c97ddf20c9..fb036863cde2dd 100644
+--- a/src/crypto/hpke/aead.go
++++ b/src/crypto/hpke/aead.go
+@@ -6,6 +6,7 @@ package hpke
+ 
+ import (
+ 	"crypto/cipher"
++	boring "crypto/internal/backend"
+ 	"errors"
+ 	"fmt"
+ 
+@@ -77,10 +78,15 @@ var aes256GCM = &aead{
+ }
+ 
+ var chacha20poly1305AEAD = &aead{
+-	nK:  chacha20poly1305.KeySize,
+-	nN:  chacha20poly1305.NonceSize,
+-	new: chacha20poly1305.New,
+-	id:  0x0003,
++	nK: chacha20poly1305.KeySize,
++	nN: chacha20poly1305.NonceSize,
++	new: func(key []byte) (cipher.AEAD, error) {
++		if boring.Enabled && boring.SupportsChaCha20Poly1305() {
++			return boring.NewChaCha20Poly1305(key)
++		}
++		return chacha20poly1305.New(key)
++	},
++	id: 0x0003,
+ }
+ 
+ func (a *aead) ID() uint16 {
 diff --git a/src/crypto/internal/cryptotest/allocations.go b/src/crypto/internal/cryptotest/allocations.go
 index 70055af70b42ec..21528faa0d6145 100644
 --- a/src/crypto/internal/cryptotest/allocations.go
@@ -3407,7 +3440,7 @@ index 727bdc4df76393..73dee851e1bb4a 100644
  		os.Setenv("GODEBUG", savedGODEBUG+","+test.godebug)
  
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 6ed63ccc2dc1f5..3bc1c16e697b88 100644
+index 6ed63ccc2dc1f5..48f37264e61e71 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -3419,6 +3452,21 @@ index 6ed63ccc2dc1f5..3bc1c16e697b88 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
  	"crypto/rc4"
+@@ -576,7 +576,13 @@ func aeadChaCha20Poly1305(key, nonceMask []byte) aead {
+ 	if len(nonceMask) != aeadNonceLength {
+ 		panic("tls: internal error: wrong nonce length")
+ 	}
+-	aead, err := chacha20poly1305.New(key)
++	var aead cipher.AEAD
++	var err error
++	if boring.Enabled && boring.SupportsChaCha20Poly1305() {
++		aead, err = boring.NewChaCha20Poly1305(key)
++	} else {
++		aead, err = chacha20poly1305.New(key)
++	}
+ 	if err != nil {
+ 		panic(err)
+ 	}
 diff --git a/src/crypto/tls/defaults_boring.go b/src/crypto/tls/defaults_boring.go
 index e88f05cc505cfb..2067bd9ebc3e50 100644
 --- a/src/crypto/tls/defaults_boring.go

From 272b9783123b9aea103dfd6a33fe7517cc5b5a18 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 18 Dec 2025 19:12:18 +0100
Subject: [PATCH 631/887] reenable unsupported TLS curves (#2014)

---
 ...TLS-settings-with-Microsoft-policies.patch | 96 ++++++++++++++-----
 1 file changed, 72 insertions(+), 24 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index 275e30178b8..7f6673c08e2 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -5,11 +5,11 @@ Subject: [PATCH] align TLS settings with Microsoft policies
 
 ---
  doc/godebug.md                   |   9 ++
- src/crypto/tls/defaults.go       |  63 ++++++++++-
+ src/crypto/tls/defaults.go       |  67 +++++++++-
  src/crypto/tls/handshake_test.go |   3 +
- src/crypto/tls/tls_test.go       | 183 +++++++++++++++++++++++++++++++
+ src/crypto/tls/tls_test.go       | 218 +++++++++++++++++++++++++++++++
  src/internal/godebugs/table.go   |   2 +
- 5 files changed, 259 insertions(+), 1 deletion(-)
+ 5 files changed, 298 insertions(+), 1 deletion(-)
 
 diff --git a/doc/godebug.md b/doc/godebug.md
 index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
@@ -32,7 +32,7 @@ index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 8de8d7e0934b07..35c2235a499c12 100644
+index 8de8d7e0934b07..3f7c0dc2981ff4 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
 @@ -5,6 +5,7 @@
@@ -43,7 +43,7 @@ index 8de8d7e0934b07..35c2235a499c12 100644
  	"internal/godebug"
  	"slices"
  	_ "unsafe" // for linkname
-@@ -15,10 +16,70 @@ import (
+@@ -15,10 +16,74 @@ import (
  
  var tlsmlkem = godebug.New("tlsmlkem")
  var tlssecpmlkem = godebug.New("tlssecpmlkem")
@@ -88,12 +88,16 @@ index 8de8d7e0934b07..35c2235a499c12 100644
 +	}
 +	// For now we only have two profiles: default Microsoft and upstream (off).
 +	defer func() {
-+		groups = slices.DeleteFunc(groups, func(c CurveID) bool {
-+			supported, found := supportedGroups[c]
-+			if !found {
-+				panic("unknown curve ID in defaultCurvePreferences: " + c.String())
++		// Move unsupported groups to the end while preserving order for supported groups.
++		slices.SortStableFunc(groups, func(a, b CurveID) int {
++			supportedA, supportedB := supportedGroups[a], supportedGroups[b]
++			if supportedA && !supportedB {
++				return -1
 +			}
-+			return !supported
++			if !supportedA && supportedB {
++				return 1
++			}
++			return 0
 +		})
 +	}()
 +	switch {
@@ -130,7 +134,7 @@ index 6e15459a9a1809..4f47dbd2030d2a 100644
  		Time:               func() time.Time { return time.Unix(0, 0) },
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
+index 5f4a2b9de4fd1f..40806059e1f458 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -24,11 +24,13 @@ import (
@@ -147,7 +151,7 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  	"slices"
  	"strings"
  	"testing"
-@@ -1983,10 +1985,50 @@ func testVerifyCertificates(t *testing.T, version uint16) {
+@@ -1983,10 +1985,70 @@ func testVerifyCertificates(t *testing.T, version uint16) {
  	}
  }
  
@@ -193,12 +197,32 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
 +
 +	defaultMicrosoftWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
 +		CurveP384, CurveP256, CurveP521, X25519}
++	if boring.Enabled {
++		// Adjust expectations based on supported groups.
++		// Be explicit about the order to test the preference order under different scenarios.
++		switch {
++		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768() && !boring.SupportsMLKEM1024():
++			defaultMicrosoftWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768, X25519}
++		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768():
++			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP256r1MLKEM768, X25519}
++		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM1024():
++			defaultMicrosoftWithPQ = []CurveID{SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, X25519}
++		case !boring.SupportsMLKEM768() && !boring.SupportsMLKEM1024():
++			defaultMicrosoftWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768}
++		case !boring.SupportsCurve("X25519"):
++			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, X25519}
++		case !boring.SupportsMLKEM768():
++			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP256r1MLKEM768}
++		case !boring.SupportsMLKEM1024():
++			defaultMicrosoftWithPQ = []CurveID{X25519MLKEM768, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519, SecP384r1MLKEM1024}
++		}
++	}
 +	defaultMicrosoftWithoutPQ := []CurveID{CurveP384, CurveP256, CurveP521, X25519}
 +
  	defaultWithPQ := []CurveID{X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024,
  		X25519, CurveP256, CurveP384, CurveP521}
  	defaultWithoutPQ := []CurveID{X25519, CurveP256, CurveP384, CurveP521}
-@@ -2001,8 +2043,16 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2001,8 +2063,16 @@ func TestHandshakeMLKEM(t *testing.T) {
  	}{
  		{
  			name:           "Default",
@@ -215,7 +239,7 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  		},
  		{
  			name: "ClientCurvePreferences",
-@@ -2017,17 +2067,41 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2017,17 +2087,41 @@ func TestHandshakeMLKEM(t *testing.T) {
  			serverConfig: func(config *Config) {
  				config.CurvePreferences = []CurveID{X25519}
  			},
@@ -241,7 +265,7 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  			},
 +			expectClient:   defaultMicrosoftWithPQ,
 +			expectSelected: CurveP256,
-+			expectHRR:      true,
++			expectHRR:      defaultMicrosoftWithPQ[0] != SecP256r1MLKEM768 && defaultMicrosoftWithPQ[0] != CurveP256,
 +		},
 +		{
 +			name: "ServerCurvePreferencesHRR GODEBUG ms_tlsprofile=off",
@@ -257,13 +281,13 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  		},
  		{
  			name: "SecP256r1MLKEM768-Only",
-@@ -2042,9 +2116,21 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2042,9 +2136,21 @@ func TestHandshakeMLKEM(t *testing.T) {
  			serverConfig: func(config *Config) {
  				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
  			},
 +			expectClient:   defaultMicrosoftWithPQ,
 +			expectSelected: SecP256r1MLKEM768,
-+			expectHRR:      true,
++			expectHRR:      defaultMicrosoftWithPQ[0] != SecP256r1MLKEM768,
 +		},
 +		{
 +			name: "SecP256r1MLKEM768-HRR GODEBUG ms_tlsprofile=off",
@@ -279,7 +303,32 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  		},
  		{
  			name: "SecP384r1MLKEM1024",
-@@ -2086,22 +2172,52 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2062,8 +2168,24 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 			serverConfig: func(config *Config) {
+ 				config.CurvePreferences = []CurveID{CurveP256}
+ 			},
++			expectClient: slices.DeleteFunc(slices.Clone(defaultMicrosoftWithPQ), func(c CurveID) bool {
++				return c != SecP256r1MLKEM768 && c != CurveP256
++			}),
++			expectSelected: CurveP256,
++		},
++		{
++			name: "CurveP256NoHRR GODEBUG ms_tlsprofile=off",
++			clientConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
++			},
++			serverConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{CurveP256}
++			},
+ 			expectClient:   []CurveID{SecP256r1MLKEM768, CurveP256},
+ 			expectSelected: CurveP256,
++			preparation: func(t *testing.T) {
++				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			},
+ 		},
+ 		{
+ 			name: "ClientMLKEMOnly",
+@@ -2086,22 +2208,52 @@ func TestHandshakeMLKEM(t *testing.T) {
  			clientConfig: func(config *Config) {
  				config.MaxVersion = VersionTLS12
  			},
@@ -332,7 +381,7 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  			expectClient:   defaultWithoutPQ,
  			expectSelected: X25519,
  		},
-@@ -2110,9 +2226,65 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2110,9 +2262,67 @@ func TestHandshakeMLKEM(t *testing.T) {
  			preparation: func(t *testing.T) {
  				t.Setenv("GODEBUG", "tlssecpmlkem=0")
  			},
@@ -352,7 +401,9 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
 +			preparation: func(t *testing.T) {
 +				t.Setenv("GODEBUG", "ms_tlsx25519=0")
 +			},
-+			expectClient:   []CurveID{SecP384r1MLKEM1024, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521},
++			expectClient: slices.DeleteFunc(slices.Clone(defaultMicrosoftWithPQ), func(c CurveID) bool {
++				return c == X25519MLKEM768 || c == X25519
++			}),
 +			expectSelected: SecP384r1MLKEM1024,
 +		},
 +		{
@@ -398,7 +449,7 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  	}
  
  	baseConfig := testConfig.Clone()
-@@ -2131,9 +2303,20 @@ func TestHandshakeMLKEM(t *testing.T) {
+@@ -2131,9 +2341,17 @@ func TestHandshakeMLKEM(t *testing.T) {
  			if test.serverConfig != nil {
  				test.serverConfig(serverConfig)
  			}
@@ -410,9 +461,6 @@ index 5f4a2b9de4fd1f..552cc2ebc56fd2 100644
  			serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
  				expectClient := slices.Clone(test.expectClient)
  				expectClient = slices.DeleteFunc(expectClient, func(c CurveID) bool {
-+					if mstlsprofile && !supportedGroups[c] {
-+						return true
-+					}
 +					if !x25519Enabled && (c == X25519MLKEM768 || c == X25519) {
 +						return true
 +					}

From 210c23a39a814d03396fb1d6c4dc33a138bf3fd6 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 18 Dec 2025 18:23:15 +0000
Subject: [PATCH 632/887] crypto doc: prevent duplicate notes across all
 platforms (#2015)

---
 eng/_util/cmd/updatecryptodocs/docs.go        | 36 +++----------------
 .../cmd/updatecryptodocs/updatecryptodocs.go  | 16 +++++++++
 eng/doc/CrossPlatformCryptography.md          |  8 ++---
 3 files changed, 24 insertions(+), 36 deletions(-)

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index 70601df3a9b..b2962038187 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -496,42 +496,14 @@ var doc = Document{
 			Items: []Item{
 				{
 					Name: "PBKDF2",
-					Platforms: map[string]PlatformStatus{
-						"windows": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
-						"linux": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
-						"macos": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
+					Notes: []string{
+						"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
 					},
 				},
 				{
 					Name: "HKDF",
-					Platforms: map[string]PlatformStatus{
-						"windows": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
-						"linux": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
-						"macos": {
-							Notes: []string{
-								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
-							},
-						},
+					Notes: []string{
+						"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
 					},
 				},
 			},
diff --git a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
index 45b22b18144..85d487ba498 100644
--- a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
@@ -322,6 +322,22 @@ func validateSection(section Section) error {
 				return fmt.Errorf("invalid supported status %q for item %q on platform %q", status.Supported, item.Name, p)
 			}
 		}
+
+		// Check for notes common to all platforms
+		noteCounts := make(map[string]int)
+		platforms := []string{"windows", "linux", "macos"}
+		for _, p := range platforms {
+			status := item.Platforms[p]
+			for _, note := range status.Notes {
+				noteCounts[note]++
+			}
+		}
+
+		for note, count := range noteCounts {
+			if count == len(platforms) {
+				return fmt.Errorf("note %q appears in all platforms for item %q; move it to the item level", note, item.Name)
+			}
+		}
 	}
 	for _, sub := range section.Subsections {
 		if err := validateSection(sub); err != nil {
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 3df63e9edd2..ab92b3a0517 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -251,10 +251,10 @@ This section includes the following packages:
 - [crypto/hkdf](https://pkg.go.dev/crypto/hkdf)
 - [crypto/pbkdf2](https://pkg.go.dev/crypto/pbkdf2)
 
-| Functions | Windows        | Linux          | macOS          |
-| --------- | -------------- | -------------- | -------------- |
-| PBKDF2    | ✔️<sup>1</sup> | ✔️<sup>1</sup> | ✔️<sup>1</sup> |
-| HKDF      | ✔️<sup>1</sup> | ✔️<sup>1</sup> | ✔️<sup>1</sup> |
+| Functions          | Windows | Linux | macOS |
+| ------------------ | ------- | ----- | ----- |
+| PBKDF2<sup>1</sup> | ✔️      | ✔️    | ✔️    |
+| HKDF<sup>1</sup>   | ✔️      | ✔️    | ✔️    |
 
 <sup>1</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 

From 0e6da50b58b0a67064e63fcf81cef8dea3b80399 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 19 Dec 2025 10:51:33 +0100
Subject: [PATCH 633/887] updatecryptodocs: consolidate platform types (#2016)

* updatecryptodocs: consolidate platform types

* George feedback
---
 eng/_util/cmd/updatecryptodocs/docs.go        | 409 +++++++++---------
 .../cmd/updatecryptodocs/updatecryptodocs.go  |  70 ++-
 eng/doc/CrossPlatformCryptography.md          |   8 +-
 3 files changed, 248 insertions(+), 239 deletions(-)

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index b2962038187..154e1862735 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -9,34 +9,61 @@ import _ "embed"
 //go:embed header.md
 var header string
 
+type SupportStatus int
+
+const (
+	Supported SupportStatus = iota
+	NotSupported
+	Warn
+	N_A
+)
+
 type PlatformStatus struct {
-	Supported         string
-	MinGoVersion      string
-	Notes             []string
-	MinMacOSVersion   string
-	MinOpenSSLVersion string
+	Supported    SupportStatus
+	MinGoVersion string
+	Notes        []string
+	MinVersion   string
 }
 
 type Item struct {
 	Name         string
 	MinGoVersion string
 	Notes        []string
-	Platforms    map[string]PlatformStatus
+	Platforms    Platforms
+}
+
+var SupportedPlatforms = []string{"windows", "linux", "macos"}
+
+type Platforms struct {
+	Windows PlatformStatus
+	Linux   PlatformStatus
+	MacOS   PlatformStatus
+}
+
+func (s Platforms) Get(platform string) PlatformStatus {
+	switch platform {
+	case "windows":
+		return s.Windows
+	case "linux":
+		return s.Linux
+	case "macos":
+		return s.MacOS
+	default:
+		panic("unknown platform: " + platform)
+	}
 }
 
 type Section struct {
-	Title             string
-	ShortTitle        string
-	ColumnHeader      string
-	Packages          []string
-	Description       string
-	MinGoVersion      string
-	MinMacOSVersion   string
-	MinOpenSSLVersion string
-	Items             []Item
-	Subsections       []Section
-	Footnotes         []string
-	Footer            string
+	Title        string
+	ShortTitle   string
+	ColumnHeader string
+	Packages     []string
+	Description  string
+	MinGoVersion string
+	Items        []Item
+	Subsections  []Section
+	Footnotes    []string
+	Footer       string
 }
 
 type Document struct {
@@ -60,8 +87,8 @@ var doc = Document{
 				{Name: "SHA-1"},
 				{
 					Name: "SHA-2-224",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{Name: "SHA-2-256"},
@@ -69,88 +96,82 @@ var doc = Document{
 				{Name: "SHA-2-512"},
 				{
 					Name: "SHA-2-512_224",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"linux":   {MinGoVersion: "1.24", MinOpenSSLVersion: "1.1.1"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						Linux:   PlatformStatus{MinGoVersion: "1.24", MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "SHA-2-512_256",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"linux":   {MinGoVersion: "1.24", MinOpenSSLVersion: "1.1.1"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						Linux:   PlatformStatus{MinGoVersion: "1.24", MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name:         "SHA-3-224",
 					MinGoVersion: "1.26",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"linux":   {MinOpenSSLVersion: "1.1.1"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name:         "SHA-3-256",
 					MinGoVersion: "1.26",
-					Platforms: map[string]PlatformStatus{
-						"windows": {
-							Notes: []string{"Available in Windows 11, version 24H2 or later."},
-						},
-						"linux": {MinOpenSSLVersion: "1.1.1"},
-						"macos": {MinMacOSVersion: "26"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{MinVersion: "11 (24H2)"},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{MinVersion: "26"},
 					},
 				},
 				{
 					Name:         "SHA-3-384",
 					MinGoVersion: "1.26",
-					Platforms: map[string]PlatformStatus{
-						"windows": {
-							Notes: []string{"Available in Windows 11, version 24H2 or later."},
-						},
-						"linux": {MinOpenSSLVersion: "1.1.1"},
-						"macos": {MinMacOSVersion: "26"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{MinVersion: "11 (24H2)"},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{MinVersion: "26"},
 					},
 				},
 				{
 					Name:         "SHA-3-512",
 					MinGoVersion: "1.26",
-					Platforms: map[string]PlatformStatus{
-						"windows": {
-							Notes: []string{"Available in Windows 11, version 24H2 or later."},
-						},
-						"linux": {MinOpenSSLVersion: "1.1.1"},
-						"macos": {MinMacOSVersion: "26"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{MinVersion: "11 (24H2)"},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
+						MacOS:   PlatformStatus{MinVersion: "26"},
 					},
 				},
 				{
 					Name: "SHAKE-128",
-					Platforms: map[string]PlatformStatus{
-						"linux": {MinOpenSSLVersion: "3.3"},
-						"macos": {Supported: "false"},
+					Platforms: Platforms{
+						Linux: PlatformStatus{MinVersion: "3.3"},
+						MacOS: PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "SHAKE-256",
-					Platforms: map[string]PlatformStatus{
-						"linux": {MinOpenSSLVersion: "3.3"},
-						"macos": {Supported: "false"},
+					Platforms: Platforms{
+						Linux: PlatformStatus{MinVersion: "3.3"},
+						MacOS: PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "CSHAKE-128",
-					Platforms: map[string]PlatformStatus{
-						"linux": {Supported: "false"},
-						"macos": {Supported: "false"},
+					Platforms: Platforms{
+						Linux: PlatformStatus{Supported: NotSupported},
+						MacOS: PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "CSHAKE-256",
-					Platforms: map[string]PlatformStatus{
-						"linux": {Supported: "false"},
-						"macos": {Supported: "false"},
+					Platforms: Platforms{
+						Linux: PlatformStatus{Supported: NotSupported},
+						MacOS: PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
@@ -171,25 +192,25 @@ var doc = Document{
 				{Name: "AES-CBC"},
 				{
 					Name: "AES-CTR",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "AES-CFB",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"linux":   {Supported: "false"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						Linux:   PlatformStatus{Supported: NotSupported},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
 					Name: "AES-OFB",
-					Platforms: map[string]PlatformStatus{
-						"windows": {Supported: "false"},
-						"linux":   {Supported: "false"},
-						"macos":   {Supported: "false"},
+					Platforms: Platforms{
+						Windows: PlatformStatus{Supported: NotSupported},
+						Linux:   PlatformStatus{Supported: NotSupported},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{
@@ -198,9 +219,9 @@ var doc = Document{
 				},
 				{
 					Name: "DES-CBC",
-					Platforms: map[string]PlatformStatus{
-						"linux": {
-							Supported: "warn",
+					Platforms: Platforms{
+						Linux: PlatformStatus{
+							Supported: Warn,
 							Notes: []string{
 								"When using OpenSSL 3, requires the legacy provider to be enabled.",
 							},
@@ -209,9 +230,9 @@ var doc = Document{
 				},
 				{
 					Name: "DES-ECB",
-					Platforms: map[string]PlatformStatus{
-						"linux": {
-							Supported: "warn",
+					Platforms: Platforms{
+						Linux: PlatformStatus{
+							Supported: Warn,
 							Notes: []string{
 								"When using OpenSSL 3, requires the legacy provider to be enabled.",
 							},
@@ -222,9 +243,9 @@ var doc = Document{
 				{Name: "3DES-CBC"},
 				{
 					Name: "RC4",
-					Platforms: map[string]PlatformStatus{
-						"linux": {
-							Supported: "warn",
+					Platforms: Platforms{
+						Linux: PlatformStatus{
+							Supported: Warn,
 							Notes: []string{
 								"When using OpenSSL 3, requires the legacy provider to be enabled.",
 							},
@@ -246,8 +267,8 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "OAEP (MD5)",
-							Platforms: map[string]PlatformStatus{
-								"macos": {
+							Platforms: Platforms{
+								MacOS: PlatformStatus{
 									Notes: []string{
 										"macOS doesn't support passing a custom label to OAEP functions.",
 									},
@@ -256,8 +277,8 @@ var doc = Document{
 						},
 						{
 							Name: "OAEP (SHA-1)",
-							Platforms: map[string]PlatformStatus{
-								"macos": {
+							Platforms: Platforms{
+								MacOS: PlatformStatus{
 									Notes: []string{
 										"macOS doesn't support passing a custom label to OAEP functions.",
 									},
@@ -269,8 +290,8 @@ var doc = Document{
 							Notes: []string{
 								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
 							},
-							Platforms: map[string]PlatformStatus{
-								"macos": {
+							Platforms: Platforms{
+								MacOS: PlatformStatus{
 									Notes: []string{
 										"macOS doesn't support passing a custom label to OAEP functions.",
 									},
@@ -279,34 +300,34 @@ var doc = Document{
 						},
 						{
 							Name: "OAEP (SHA-3)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "PSS (MD5)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {
+							Platforms: Platforms{
+								Windows: PlatformStatus{
 									Notes: []string{
-										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+										"Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
 									},
 								},
-								"macos": {Supported: "false"},
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "PSS (SHA-1)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {
+							Platforms: Platforms{
+								Windows: PlatformStatus{
 									Notes: []string{
-										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+										"Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
 									},
 								},
-								"macos": {
+								MacOS: PlatformStatus{
 									Notes: []string{
-										"On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
+										"Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
 									},
 								},
 							},
@@ -316,56 +337,56 @@ var doc = Document{
 							Notes: []string{
 								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
 							},
-							Platforms: map[string]PlatformStatus{
-								"windows": {
+							Platforms: Platforms{
+								Windows: PlatformStatus{
 									Notes: []string{
-										"On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
+										"Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.",
 									},
 								},
-								"macos": {
+								MacOS: PlatformStatus{
 									Notes: []string{
-										"On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
+										"Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).",
 									},
 								},
 							},
 						},
 						{
 							Name: "PSS (SHA-3)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{Name: "PKCS1v15 Signature (Unhashed)"},
 						{
 							Name: "PKCS1v15 Signature (RIPMED160)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {MinGoVersion: "1.24"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{MinGoVersion: "1.24"},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "PKCS1v15 Signature (MD4)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {MinGoVersion: "1.24"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{MinGoVersion: "1.24"},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "PKCS1v15 Signature (MD5)",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "PKCS1v15 Signature (MD5-SHA1)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {MinGoVersion: "1.24"},
-								"linux":   {MinGoVersion: "1.24"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{MinGoVersion: "1.24"},
+								Linux:   PlatformStatus{MinGoVersion: "1.24"},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{Name: "PKCS1v15 Signature (SHA-1)"},
@@ -377,10 +398,10 @@ var doc = Document{
 						},
 						{
 							Name: "PKCS1v15 Signature (SHA-3)",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 					},
@@ -393,8 +414,8 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "NIST P-224 (secp224r1)",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{Name: "NIST P-256 (secp256r1)"},
@@ -410,8 +431,8 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "NIST P-224 (secp224r1)",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{Name: "NIST P-256 (secp256r1)"},
@@ -420,8 +441,8 @@ var doc = Document{
 						{
 							Name:         "X25519 (curve25519)",
 							MinGoVersion: "1.26",
-							Platforms: map[string]PlatformStatus{
-								"linux": {MinOpenSSLVersion: "1.1.1"},
+							Platforms: Platforms{
+								Linux: PlatformStatus{MinVersion: "1.1.1"},
 							},
 						},
 					},
@@ -434,24 +455,24 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "Ed25519",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "Ed25519ctx",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "Ed25519ph",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"linux":   {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								Linux:   PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 					},
@@ -462,27 +483,27 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "L1024N160",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "L2048N224",
-							Platforms: map[string]PlatformStatus{
-								"windows": {Supported: "false"},
-								"macos":   {Supported: "false"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{Supported: NotSupported},
+								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "L2048N256",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
 							Name: "L3072N256",
-							Platforms: map[string]PlatformStatus{
-								"macos": {Supported: "false"},
+							Platforms: Platforms{
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 					},
@@ -520,26 +541,18 @@ var doc = Document{
 					Items: []Item{
 						{
 							Name: "768",
-							Platforms: map[string]PlatformStatus{
-								"windows": {
-									Notes: []string{
-										"Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.",
-									},
-								},
-								"linux": {MinOpenSSLVersion: "3.5.0"},
-								"macos": {MinMacOSVersion: "26"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{MinVersion: "11 (24H2)"},
+								Linux:   PlatformStatus{MinVersion: "3.5.0"},
+								MacOS:   PlatformStatus{MinVersion: "26"},
 							},
 						},
 						{
 							Name: "1024",
-							Platforms: map[string]PlatformStatus{
-								"windows": {
-									Notes: []string{
-										"Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.",
-									},
-								},
-								"linux": {MinOpenSSLVersion: "3.5.0"},
-								"macos": {MinMacOSVersion: "26"},
+							Platforms: Platforms{
+								Windows: PlatformStatus{MinVersion: "11 (24H2)"},
+								Linux:   PlatformStatus{MinVersion: "3.5.0"},
+								MacOS:   PlatformStatus{MinVersion: "26"},
 							},
 						},
 					},
@@ -568,10 +581,10 @@ var doc = Document{
 								},
 								{
 									Name: "Export-only",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "N/A"},
-										"linux":   {Supported: "N/A"},
-										"macos":   {Supported: "N/A"},
+									Platforms: Platforms{
+										Windows: PlatformStatus{Supported: N_A},
+										Linux:   PlatformStatus{Supported: N_A},
+										MacOS:   PlatformStatus{Supported: N_A},
 									},
 								},
 							},
@@ -650,22 +663,22 @@ var doc = Document{
 							Items: []Item{
 								{
 									Name: "SSL 3.0",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
-										"linux":   {Supported: "false"},
-										"macos":   {Supported: "false"},
+									Platforms: Platforms{
+										Windows: PlatformStatus{Supported: NotSupported},
+										Linux:   PlatformStatus{Supported: NotSupported},
+										MacOS:   PlatformStatus{Supported: NotSupported},
 									},
 								},
 								{
 									Name: "TLS 1.0",
-									Platforms: map[string]PlatformStatus{
-										"macos": {Supported: "false"},
+									Platforms: Platforms{
+										MacOS: PlatformStatus{Supported: NotSupported},
 									},
 								},
 								{
 									Name: "TLS 1.1",
-									Platforms: map[string]PlatformStatus{
-										"macos": {Supported: "false"},
+									Platforms: Platforms{
+										MacOS: PlatformStatus{Supported: NotSupported},
 									},
 								},
 								{Name: "TLS 1.2"},
@@ -679,9 +692,9 @@ var doc = Document{
 							Items: []Item{
 								{
 									Name: "TLS_RSA_WITH_RC4_128_SHA",
-									Platforms: map[string]PlatformStatus{
-										"linux": {
-											Supported: "warn",
+									Platforms: Platforms{
+										Linux: PlatformStatus{
+											Supported: Warn,
 											Notes: []string{
 												"When using OpenSSL 3, requires the legacy provider to be enabled.",
 											},
@@ -690,9 +703,9 @@ var doc = Document{
 								},
 								{
 									Name: "TLS_RSA_WITH_3DES_EDE_CBC_SHA",
-									Platforms: map[string]PlatformStatus{
-										"linux": {
-											Supported: "warn",
+									Platforms: Platforms{
+										Linux: PlatformStatus{
+											Supported: Warn,
 											Notes: []string{
 												"When using OpenSSL 3, requires the legacy provider to be enabled.",
 											},
@@ -706,9 +719,9 @@ var doc = Document{
 								{Name: "TLS_RSA_WITH_AES_256_GCM_SHA384"},
 								{
 									Name: "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA",
-									Platforms: map[string]PlatformStatus{
-										"linux": {
-											Supported: "warn",
+									Platforms: Platforms{
+										Linux: PlatformStatus{
+											Supported: Warn,
 											Notes: []string{
 												"When using OpenSSL 3, requires the legacy provider to be enabled.",
 											},
@@ -719,9 +732,9 @@ var doc = Document{
 								{Name: "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"},
 								{
 									Name: "TLS_ECDHE_RSA_WITH_RC4_128_SHA",
-									Platforms: map[string]PlatformStatus{
-										"linux": {
-											Supported: "warn",
+									Platforms: Platforms{
+										Linux: PlatformStatus{
+											Supported: Warn,
 											Notes: []string{
 												"When using OpenSSL 3, requires the legacy provider to be enabled.",
 											},
@@ -730,9 +743,9 @@ var doc = Document{
 								},
 								{
 									Name: "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
-									Platforms: map[string]PlatformStatus{
-										"linux": {
-											Supported: "warn",
+									Platforms: Platforms{
+										Linux: PlatformStatus{
+											Supported: Warn,
 											Notes: []string{
 												"When using OpenSSL 3, requires the legacy provider to be enabled.",
 											},
@@ -822,8 +835,8 @@ var doc = Document{
 								{Name: "ECDSAWithP521AndSHA512"},
 								{
 									Name: "Ed25519",
-									Platforms: map[string]PlatformStatus{
-										"windows": {Supported: "false"},
+									Platforms: Platforms{
+										Windows: PlatformStatus{Supported: NotSupported},
 									},
 								},
 							},
diff --git a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
index 85d487ba498..51c65d3ce15 100644
--- a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
@@ -15,7 +15,7 @@ import (
 	"text/tabwriter"
 )
 
-var docPath = filepath.Join("eng", "doc", "CrossPlatformCryptography.md")
+var docPath = flag.String("path", filepath.Join("eng", "doc", "CrossPlatformCryptography.md"), "Path to CrossPlatformCryptography.md")
 
 var useStdout = flag.Bool("stdout", false, "Write to stdout instead of file")
 
@@ -47,7 +47,7 @@ func write() error {
 		fmt.Print(s.String())
 		return nil
 	}
-	return os.WriteFile(docPath, []byte(s.String()), 0o644)
+	return os.WriteFile(*docPath, []byte(s.String()), 0o644)
 }
 
 func printSection(w io.Writer, section Section, level int) {
@@ -82,12 +82,6 @@ func printSection(w io.Writer, section Section, level int) {
 	if section.MinGoVersion != "" {
 		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting from the Microsoft build of Go %s.", section.Title, section.MinGoVersion))
 	}
-	if section.MinOpenSSLVersion != "" {
-		versionSentences = append(versionSentences, fmt.Sprintf("%s requires OpenSSL %s or later.", section.Title, section.MinOpenSSLVersion))
-	}
-	if section.MinMacOSVersion != "" {
-		versionSentences = append(versionSentences, fmt.Sprintf("%s is available starting in macOS %s or later.", section.Title, section.MinMacOSVersion))
-	}
 	if len(versionSentences) > 0 {
 		fmt.Fprintln(w, strings.Join(versionSentences, " "))
 		fmt.Fprintln(w)
@@ -140,7 +134,11 @@ func printTable(w io.Writer, section Section) {
 
 	var wipTable strings.Builder
 	tw := tabwriter.NewWriter(&wipTable, 0, 0, 1, ' ', 0)
-	fmt.Fprintf(tw, "|\t%s\t|\tWindows\t|\tLinux\t|\tmacOS\t|\n", colHeader)
+	platforms := strings.Join(SupportedPlatforms, "\t|\t")
+	platforms = strings.Replace(platforms, "windows", "Windows", 1)
+	platforms = strings.Replace(platforms, "linux", "Linux", 1)
+	platforms = strings.Replace(platforms, "macos", "macOS", 1)
+	fmt.Fprintf(tw, "|\t%s\t|\t%s\t|\n", colHeader, platforms)
 
 	// We skip the "| --- | --- | etc." row for now. We need to know the actual
 	// column lengths to put in the proper number of dashes (for raw source
@@ -195,18 +193,21 @@ func printTable(w io.Writer, section Section) {
 
 		row := []string{name + nameNotes}
 
-		for _, platform := range []string{"windows", "linux", "macos"} {
-			status := item.Platforms[platform]
+		for _, platform := range SupportedPlatforms {
+			status := item.Platforms.Get(platform)
 			symbol := ""
 			switch status.Supported {
-			case "N/A":
-				symbol = "N/A"
-			case "true":
+			case Supported:
 				symbol = "✔️"
-			case "warn":
+			case NotSupported:
+				symbol = "❌️"
+			case Warn:
 				symbol = "⚠️"
+			case N_A:
+				symbol = "N/A"
 			default:
-				symbol = "❌️"
+				// Should not happen due to prior validation
+				panic(fmt.Sprintf("unexpected status %q", status.Supported))
 			}
 
 			statusNotes := status.Notes
@@ -215,11 +216,17 @@ func printTable(w io.Writer, section Section) {
 			if status.MinGoVersion != "" {
 				versionNotes = append(versionNotes, fmt.Sprintf("Available starting in the Microsoft build of Go %s.", status.MinGoVersion))
 			}
-			if status.MinOpenSSLVersion != "" {
-				versionNotes = append(versionNotes, fmt.Sprintf("Requires OpenSSL %s or later.", status.MinOpenSSLVersion))
-			}
-			if status.MinMacOSVersion != "" {
-				versionNotes = append(versionNotes, fmt.Sprintf("Requires macOS %s or later.", status.MinMacOSVersion))
+			if status.MinVersion != "" {
+				switch platform {
+				case "windows":
+					versionNotes = append(versionNotes, fmt.Sprintf("Requires Windows %s or later.", status.MinVersion))
+				case "linux":
+					versionNotes = append(versionNotes, fmt.Sprintf("Requires OpenSSL %s or later.", status.MinVersion))
+				case "macos":
+					versionNotes = append(versionNotes, fmt.Sprintf("Requires macOS %s or later.", status.MinVersion))
+				default:
+					panic("unknown platform" + platform)
+				}
 			}
 			// Remove duplicates from notes
 			filtered := []string{}
@@ -302,21 +309,10 @@ func validateSection(section Section) error {
 			return fmt.Errorf("duplicate item name %q in section %q", item.Name, section.Title)
 		}
 		seenNames[item.Name] = true
-
-		if item.Platforms == nil {
-			item.Platforms = make(map[string]PlatformStatus)
-		}
-		for _, p := range []string{"windows", "linux", "macos"} {
-			status, ok := item.Platforms[p]
-			if !ok {
-				status = PlatformStatus{}
-			}
-			if status.Supported == "" {
-				status.Supported = "true"
-			}
-			item.Platforms[p] = status
+		for _, p := range SupportedPlatforms {
+			status := item.Platforms.Get(p)
 			switch status.Supported {
-			case "true", "false", "warn", "N/A":
+			case Supported, NotSupported, Warn, N_A:
 				// ok
 			default:
 				return fmt.Errorf("invalid supported status %q for item %q on platform %q", status.Supported, item.Name, p)
@@ -325,9 +321,9 @@ func validateSection(section Section) error {
 
 		// Check for notes common to all platforms
 		noteCounts := make(map[string]int)
-		platforms := []string{"windows", "linux", "macos"}
+		platforms := SupportedPlatforms
 		for _, p := range platforms {
-			status := item.Platforms[p]
+			status := item.Platforms.Get(p)
 			for _, note := range status.Notes {
 				noteCounts[note]++
 			}
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index ab92b3a0517..89defe307a1 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -83,7 +83,7 @@ This section includes the following packages:
 
 <sup>3</sup>Available starting in the Microsoft build of Go 1.26.
 
-<sup>4</sup>Available in Windows 11, version 24H2 or later.
+<sup>4</sup>Requires Windows 11 (24H2) or later.
 
 <sup>5</sup>Requires macOS 26 or later.
 
@@ -179,9 +179,9 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 <sup>2</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
-<sup>3</sup>On Windows, when verifying a PSS signature, [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+<sup>3</sup>Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
 
-<sup>4</sup>On macOS, custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
+<sup>4</sup>Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
 
 <sup>5</sup>Available starting in the Microsoft build of Go 1.24.
 
@@ -277,7 +277,7 @@ ML-KEM is available starting from the Microsoft build of Go 1.26.
 | 768        | ✔️<sup>1</sup> | ✔️<sup>2</sup> | ✔️<sup>3</sup> |
 | 1024       | ✔️<sup>1</sup> | ✔️<sup>2</sup> | ✔️<sup>3</sup> |
 
-<sup>1</sup>Requires Windows Server 2025 or Windows 11 (24H2, 25H2) or later.
+<sup>1</sup>Requires Windows 11 (24H2) or later.
 
 <sup>2</sup>Requires OpenSSL 3.5.0 or later.
 

From 2e244d37961b2ae298901ff4371c4c80b5d2238c Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 19 Dec 2025 17:08:56 +0100
Subject: [PATCH 634/887] Support more RSA algorithms on Windows and update
 support matrix (#2017)

* support more RSA algorithms on Windows and update support matrix

* correct docs
---
 eng/_util/cmd/updatecryptodocs/docs.go        |  26 +-
 eng/doc/CrossPlatformCryptography.md          |  47 +-
 .../0001-Vendor-external-dependencies.patch   | 555 ++++++++++++++----
 3 files changed, 486 insertions(+), 142 deletions(-)

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index 154e1862735..f5bb4f279d2 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -300,10 +300,12 @@ var doc = Document{
 						},
 						{
 							Name: "OAEP (SHA-3)",
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
+							MinGoVersion: "1.26",
 							Platforms: Platforms{
-								Windows: PlatformStatus{Supported: NotSupported},
-								Linux:   PlatformStatus{Supported: NotSupported},
-								MacOS:   PlatformStatus{Supported: NotSupported},
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{
@@ -352,9 +354,11 @@ var doc = Document{
 						},
 						{
 							Name: "PSS (SHA-3)",
+							Notes: []string{
+								"Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).",
+							},
 							Platforms: Platforms{
-								Windows: PlatformStatus{Supported: NotSupported},
-								Linux:   PlatformStatus{Supported: NotSupported},
+								Windows: PlatformStatus{MinGoVersion: "1.26"},
 								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
@@ -367,14 +371,6 @@ var doc = Document{
 								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
-						{
-							Name: "PKCS1v15 Signature (MD4)",
-							Platforms: Platforms{
-								Windows: PlatformStatus{Supported: NotSupported},
-								Linux:   PlatformStatus{MinGoVersion: "1.24"},
-								MacOS:   PlatformStatus{Supported: NotSupported},
-							},
-						},
 						{
 							Name: "PKCS1v15 Signature (MD5)",
 							Platforms: Platforms{
@@ -399,8 +395,8 @@ var doc = Document{
 						{
 							Name: "PKCS1v15 Signature (SHA-3)",
 							Platforms: Platforms{
-								Windows: PlatformStatus{Supported: NotSupported},
-								Linux:   PlatformStatus{Supported: NotSupported},
+								Windows: PlatformStatus{MinVersion: "11 (24H2)", MinGoVersion: "1.26"},
+								Linux:   PlatformStatus{MinVersion: "1.1.1"},
 								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 89defe307a1..8996d3793eb 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -156,34 +156,39 @@ Please refer to the documentation of the underlying cryptographic library for th
 
 Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).
 
-| Padding Mode                           | Windows        | Linux          | macOS          |
-| -------------------------------------- | -------------- | -------------- | -------------- |
-| OAEP (MD5)                             | ✔️             | ✔️             | ✔️<sup>1</sup> |
-| OAEP (SHA-1)                           | ✔️             | ✔️             | ✔️<sup>1</sup> |
-| OAEP (SHA-2)<sup>2</sup>               | ✔️             | ✔️             | ✔️<sup>1</sup> |
-| OAEP (SHA-3)                           | ❌️             | ❌️             | ❌️             |
-| PSS (MD5)                              | ✔️<sup>3</sup> | ✔️             | ❌️             |
-| PSS (SHA-1)                            | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
-| PSS (SHA-2)<sup>2</sup>                | ✔️<sup>3</sup> | ✔️             | ✔️<sup>4</sup> |
-| PSS (SHA-3)                            | ❌️             | ❌️             | ❌️             |
-| PKCS1v15 Signature (Unhashed)          | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (RIPMED160)         | ❌️             | ✔️<sup>5</sup> | ❌️             |
-| PKCS1v15 Signature (MD4)               | ❌️             | ✔️<sup>5</sup> | ❌️             |
-| PKCS1v15 Signature (MD5)               | ✔️             | ✔️             | ❌️             |
-| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>5</sup> | ✔️<sup>5</sup> | ❌️             |
-| PKCS1v15 Signature (SHA-1)             | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (SHA-2)<sup>2</sup> | ✔️             | ✔️             | ✔️             |
-| PKCS1v15 Signature (SHA-3)             | ❌️             | ❌️             | ❌️             |
+| Padding Mode                           | Windows          | Linux          | macOS          |
+| -------------------------------------- | ---------------- | -------------- | -------------- |
+| OAEP (MD5)                             | ✔️               | ✔️             | ✔️<sup>1</sup> |
+| OAEP (SHA-1)                           | ✔️               | ✔️             | ✔️<sup>1</sup> |
+| OAEP (SHA-2)<sup>2</sup>               | ✔️               | ✔️             | ✔️<sup>1</sup> |
+| OAEP (SHA-3)<sup>2,3</sup>             | ✔️               | ✔️             | ❌️             |
+| PSS (MD5)                              | ✔️<sup>4</sup>   | ✔️             | ❌️             |
+| PSS (SHA-1)                            | ✔️<sup>4</sup>   | ✔️             | ✔️<sup>5</sup> |
+| PSS (SHA-2)<sup>2</sup>                | ✔️<sup>4</sup>   | ✔️             | ✔️<sup>5</sup> |
+| PSS (SHA-3)<sup>2</sup>                | ✔️<sup>3</sup>   | ✔️             | ❌️             |
+| PKCS1v15 Signature (Unhashed)          | ✔️               | ✔️             | ✔️             |
+| PKCS1v15 Signature (RIPMED160)         | ❌️               | ✔️<sup>6</sup> | ❌️             |
+| PKCS1v15 Signature (MD5)               | ✔️               | ✔️             | ❌️             |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>6</sup>   | ✔️<sup>6</sup> | ❌️             |
+| PKCS1v15 Signature (SHA-1)             | ✔️               | ✔️             | ✔️             |
+| PKCS1v15 Signature (SHA-2)<sup>2</sup> | ✔️               | ✔️             | ✔️             |
+| PKCS1v15 Signature (SHA-3)             | ✔️<sup>3,7</sup> | ✔️<sup>8</sup> | ❌️             |
 
 <sup>1</sup>macOS doesn't support passing a custom label to OAEP functions.
 
 <sup>2</sup>Supports only hash algorithms that are [supported as standalone hash functions](#hash-and-message-authentication-algorithms).
 
-<sup>3</sup>Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+<sup>3</sup>Available starting in the Microsoft build of Go 1.26.
+
+<sup>4</sup>Verifying PSS signatures with [rsa.PSSSaltLengthAuto](https://pkg.go.dev/crypto/rsa#pkg-constants) is not supported.
+
+<sup>5</sup>Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
+
+<sup>6</sup>Available starting in the Microsoft build of Go 1.24.
 
-<sup>4</sup>Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
+<sup>7</sup>Requires Windows 11 (24H2) or later.
 
-<sup>5</sup>Available starting in the Microsoft build of Go 1.24.
+<sup>8</sup>Requires OpenSSL 1.1.1 or later.
 
 ### ECDSA
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index a5831ef27ef..b1548338728 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -54,7 +54,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/ecdh.go |  343 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  222 ++
  .../golang-fips/openssl/v2/ed25519.go         |  210 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  600 +++++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  620 +++++
  .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
@@ -125,7 +125,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/providersymcrypt.go            |  338 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  401 +++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  716 +++++
  .../golang-fips/openssl/v2/tls1prf.go         |  158 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
@@ -236,7 +236,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
  .../microsoft/go-crypto-winnative/cng/rc4.go  |   65 +
- .../microsoft/go-crypto-winnative/cng/rsa.go  |  396 +++
+ .../microsoft/go-crypto-winnative/cng/rsa.go  |  404 +++
  .../microsoft/go-crypto-winnative/cng/sha3.go |  203 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
  .../internal/bcrypt/bcrypt_windows.go         |  414 +++
@@ -245,7 +245,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 237 files changed, 31035 insertions(+), 7 deletions(-)
+ 237 files changed, 31378 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2136,7 +2136,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..6ef9b5fbcb1146 100644
+index efc07451b53448..ab7ea4a4b915d9 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2145,21 +2145,21 @@ index efc07451b53448..6ef9b5fbcb1146 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8
++	github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..ed947ea7d43b5f 100644
+index b6b841b44d8e38..104fcfc902e896 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262 h1:fNRFo5bregvphPwnGSPrC0IyGZf6agmeFByo6c88s7E=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85 h1:/IDnd+d+KhBvHD60Jpd1fuTW5S2FbdCfhJVL+w+ecZM=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182 h1:yeHGQpq1zuXcbMG18BPOTENjfYEgqB7ZEUYC/0eM2Lw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8 h1:lG7y5IdfKZcZI1PWkWTN1W0vpOfFmFHQCjDzx4atIWA=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078 h1:9M+LVr3rtPCD7xgX/xGFWEsyWdvTA/djZUHh2AyXTB4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
@@ -5133,10 +5133,10 @@ index 00000000000000..6413f3e42b4adb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..1f70c904dc237f
+index 00000000000000..56fae101c4feb4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,600 @@
+@@ -0,0 +1,620 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -5187,6 +5187,14 @@ index 00000000000000..1f70c904dc237f
 +	return nil
 +}
 +
++// hashToCryptoHash converts a hash.Hash implementation from this package to a crypto.Hash.
++func hashToCryptoHash(h hash.Hash) crypto.Hash {
++	if h, ok := h.(*Hash); ok {
++		return h.alg.ch
++	}
++	return 0
++}
++
 +// hashFuncToMD converts a hash.Hash function to a GOossl.EVP_MD_PTR.
 +// See [hashFuncHash] for details on error handling.
 +func hashFuncToMD(fn func() hash.Hash) (ossl.EVP_MD_PTR, error) {
@@ -5433,92 +5441,104 @@ index 00000000000000..1f70c904dc237f
 +	}
 +	// Each padding type has its own requirements in terms of when to apply the padding,
 +	// so it can't be just set at this point.
-+	setPadding := func() error {
-+		_, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, padding, nil)
-+		return err
-+	}
 +	switch padding {
 +	case ossl.RSA_PKCS1_OAEP_PADDING:
-+		md := hashToMD(h)
-+		if md == nil {
-+			return nil, errors.New("crypto/rsa: unsupported hash function")
-+		}
-+		var mgfMD ossl.EVP_MD_PTR
-+		if mgfHash != nil {
-+			// mgfHash is optional, but if it is set it must match a supported hash function.
-+			mgfMD = hashToMD(mgfHash)
-+			if mgfMD == nil {
-+				return nil, errors.New("crypto/rsa: unsupported hash function")
-+			}
-+		}
-+		// setPadding must happen before setting EVP_PKEY_CTRL_RSA_OAEP_MD.
-+		if err := setPadding(); err != nil {
-+			return nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)); err != nil {
-+			return nil, err
-+		}
-+		if mgfHash != nil {
-+			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)); err != nil {
-+				return nil, err
-+			}
-+		}
-+		// ctx takes ownership of label, so malloc a copy for OpenSSL to free.
-+		// OpenSSL does not take ownership of the label if the length is zero,
-+		// so better avoid the allocation.
-+		var clabel *byte
-+		if len(label) > 0 {
-+			clabel = (*byte)(cryptoMalloc(len(label)))
-+			copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
-+			var err error
-+			if major() == 3 {
-+				_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), int32(len(label)))
-+			} else {
-+				_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
-+			}
-+			if err != nil {
-+				cryptoFree(unsafe.Pointer(clabel))
-+				return nil, err
-+			}
-+		}
++		err = setOAEPPadding(ctx, h, mgfHash, label)
 +	case ossl.RSA_PKCS1_PSS_PADDING:
-+		alg := loadHash(ch, false)
-+		if alg == nil {
-+			return nil, errors.New("crypto/rsa: unsupported hash function")
-+		}
-+		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
-+			return nil, err
++		err = setPSSPadding(ctx, saltLen, ch)
++	case ossl.RSA_PKCS1_PADDING:
++		err = setPKCS1Padding(ctx, ch)
++	default:
++		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, padding, nil)
++	}
++	if err != nil {
++		return nil, err
++	}
++	return ctx, nil
++}
++
++func setPSSPadding(ctx ossl.EVP_PKEY_CTX_PTR, saltLen int32, ch crypto.Hash) error {
++	alg := loadHash(ch, false)
++	if alg == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++		return err
++	}
++	// setPadding must happen after setting EVP_PKEY_CTRL_MD.
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PSS_PADDING, nil); err != nil {
++		return err
++	}
++	if saltLen != 0 {
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil); err != nil {
++			return err
 +		}
-+		// setPadding must happen after setting EVP_PKEY_CTRL_MD.
-+		if err := setPadding(); err != nil {
-+			return nil, err
++	}
++	return nil
++}
++
++func setPKCS1Padding(ctx ossl.EVP_PKEY_CTX_PTR, ch crypto.Hash) error {
++	if ch == 0 {
++		// We support unhashed messages.
++		return nil
++	}
++	alg := loadHash(ch, false)
++	if alg == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++		return err
++	}
++	return nil
++}
++
++func setOAEPPadding(ctx ossl.EVP_PKEY_CTX_PTR, h, mgfHash hash.Hash, label []byte) error {
++	md := hashToMD(h)
++	if md == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	var mgfMD ossl.EVP_MD_PTR
++	if mgfHash != nil {
++		// mgfHash is optional, but if it is set it must match a supported hash function.
++		mgfMD = hashToMD(mgfHash)
++		if mgfMD == nil {
++			return errors.New("crypto/rsa: unsupported hash function")
 +		}
-+		if saltLen != 0 {
-+			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil); err != nil {
-+				return nil, err
-+			}
++	}
++	// setPadding must happen before setting EVP_PKEY_CTRL_RSA_OAEP_MD.
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_OAEP_PADDING, nil); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)); err != nil {
++		return err
++	}
++	if mgfHash != nil {
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)); err != nil {
++			return err
 +		}
-+
-+	case ossl.RSA_PKCS1_PADDING:
-+		if ch != 0 {
-+			// We support unhashed messages.
-+			alg := loadHash(ch, false)
-+			if alg == nil {
-+				return nil, errors.New("crypto/rsa: unsupported hash function")
-+			}
-+			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
-+				return nil, err
-+			}
-+			if err := setPadding(); err != nil {
-+				return nil, err
-+			}
++	}
++	// ctx takes ownership of label, so malloc a copy for OpenSSL to free.
++	// OpenSSL does not take ownership of the label if the length is zero,
++	// so better avoid the allocation.
++	var clabel *byte
++	if len(label) > 0 {
++		clabel = (*byte)(cryptoMalloc(len(label)))
++		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
++		var err error
++		if major() == 3 {
++			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), int32(len(label)))
++		} else {
++			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
 +		}
-+	default:
-+		if err := setPadding(); err != nil {
-+			return nil, err
++		if err != nil {
++			cryptoFree(unsafe.Pointer(clabel))
++			return err
 +		}
 +	}
-+	return ctx, nil
++	return nil
 +}
 +
 +func cryptEVP(withKey withKeyFunc, padding int32,
@@ -18588,10 +18608,10 @@ index 00000000000000..e933228919296d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..f1cddf8b5103db
+index 00000000000000..e989da8db9cfa6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,401 @@
+@@ -0,0 +1,716 @@
 +//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
 +
 +package openssl
@@ -18959,16 +18979,143 @@ index 00000000000000..f1cddf8b5103db
 +	return newEvpFromParams(ossl.EVP_PKEY_RSA, int32(selection), params)
 +}
 +
-+// SupportsRSAPKCS1Encryption returns true if the RSA PKCS1 v1.5 padding is supported for encryption and decryption.
-+var SupportsRSAPKCS1Encryption = sync.OnceValue(func() bool {
-+	// Generate a temporary key to check for support.
-+	// 2048 bits is a safe default that should be supported by all providers.
-+	pkey, err := generateEVPPKey(ossl.EVP_PKEY_RSA, 2048, "")
++// SupportsRSAPKCS1v15Encryption returns true if the RSA PKCS1 v1.5 padding is supported for encryption and decryption.
++var SupportsRSAPKCS1v15Encryption = sync.OnceValue(func() bool {
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
 +	if err != nil {
 +		return false
 +	}
-+	defer ossl.EVP_PKEY_free(pkey)
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++
++	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
++		return false
++	}
 +
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++		return false
++	}
++
++	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
++	// So we need to try to encrypt something to be sure.
++	in := []byte("test")
++	var outLen int
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++		return false
++	}
++	return true
++})
++
++var rsaPKCS1SignatureSupport sync.Map
++
++// SupportsRSAPKCS1v15Signature returns true if the RSA PKCS1 v1.5 padding is supported for signatures with the given hash.
++func SupportsRSAPKCS1v15Signature(ch crypto.Hash) (supported bool) {
++	v, ok := rsaPKCS1SignatureSupport.Load(ch)
++	if ok {
++		return v.(bool)
++	}
++	defer func() {
++		rsaPKCS1SignatureSupport.Store(ch, supported)
++	}()
++
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
++		return false
++	}
++	if setPKCS1Padding(ctx, ch) != nil {
++		return false
++	}
++	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
++	// So we need to try to sign something to be sure.
++	size := 1
++	if ch != 0 {
++		size = ch.Size()
++	}
++	in := make([]byte, size, maxHashSize)
++	var outLen int
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++		return false
++	}
++	return true
++}
++
++var rsaPSSSupport sync.Map
++
++// SupportsRSAPSS returns true if the RSA PSS padding is supported for signatures with the given hash.
++func SupportsRSAPSS(ch crypto.Hash) (supported bool) {
++	v, ok := rsaPSSSupport.Load(ch)
++	if ok {
++		return v.(bool)
++	}
++	defer func() {
++		rsaPSSSupport.Store(ch, supported)
++	}()
++
++	if !SupportsHash(ch) {
++		// Short-circuit if the hash itself is not supported.
++		return false
++	}
++
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
++		return false
++	}
++	if setPSSPadding(ctx, 0, ch) != nil {
++		return false
++	}
++	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
++	// So we need to try to sign something to be sure.
++	in := make([]byte, ch.Size(), maxHashSize)
++	var outLen int
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++		return false
++	}
++	return true
++}
++
++var rsaOAEPSupport sync.Map
++
++type rsaOAEPSupportEntry struct {
++	ch      crypto.Hash
++	mgfHash crypto.Hash
++}
++
++// SupportsRSAOAEP returns true if the RSA OAEP padding is supported for encryption/decryption
++// with the given hash and MGF hash.
++func SupportsRSAOAEP(h, mgfHash hash.Hash) (supported bool) {
++	ch := hashToCryptoHash(h)
++	if ch == 0 {
++		return false
++	}
++	mgfCh := hashToCryptoHash(mgfHash)
++	if mgfCh == 0 {
++		return false
++	}
++	entry := rsaOAEPSupportEntry{ch, mgfCh}
++	v, ok := rsaOAEPSupport.Load(entry)
++	if ok {
++		return v.(bool)
++	}
++	defer func() {
++		rsaOAEPSupport.Store(entry, supported)
++	}()
++
++	if !SupportsHash(ch) {
++		// Short-circuit if the hash itself is not supported.
++		return false
++	}
++
++	pkey := testRSAPrivateKey()
 +	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
 +	if err != nil {
 +		return false
@@ -18979,7 +19126,7 @@ index 00000000000000..f1cddf8b5103db
 +		return false
 +	}
 +
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++	if setOAEPPadding(ctx, h, mgfHash, nil) != nil {
 +		return false
 +	}
 +
@@ -18990,8 +19137,196 @@ index 00000000000000..f1cddf8b5103db
 +	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, &in[0], len(in)); err != nil {
 +		return false
 +	}
-+
 +	return true
++}
++
++// testRSAPrivateKey returns a test RSA private key for use in capability probing functions.
++//
++// The key is constructed from hard-coded parameters to avoid
++// spurious failures due to key generation issues and to avoid the speed cost of
++// key generation.
++var testRSAPrivateKey = sync.OnceValue(func() ossl.EVP_PKEY_PTR {
++	// RSA-2048 key "testRSA2048":
++	// https://www.rfc-editor.org/rfc/rfc9500.html#section-2.1
++	N := []byte{
++		0xB0, 0xF9, 0xE8, 0x19, 0x43, 0xA7, 0xAE, 0x98,
++		0x92, 0xAA, 0xDE, 0x17, 0xCA, 0x7C, 0x40, 0xF8,
++		0x74, 0x4F, 0xED, 0x2F, 0x81, 0x48, 0xE6, 0xC8,
++		0xEA, 0xA2, 0x7B, 0x7D, 0x00, 0x15, 0x48, 0xFB,
++		0x51, 0x92, 0xAB, 0x28, 0xB5, 0x6C, 0x50, 0x60,
++		0xB1, 0x18, 0xCC, 0xD1, 0x31, 0xE5, 0x94, 0x87,
++		0x4C, 0x6C, 0xA9, 0x89, 0xB5, 0x6C, 0x27, 0x29,
++		0x6F, 0x09, 0xFB, 0x93, 0xA0, 0x34, 0xDF, 0x32,
++		0xE9, 0x7C, 0x6F, 0xF0, 0x99, 0x8C, 0xFD, 0x8E,
++		0x6F, 0x42, 0xDD, 0xA5, 0x8A, 0xCD, 0x1F, 0xA9,
++		0x79, 0x86, 0xF1, 0x44, 0xF3, 0xD1, 0x54, 0xD6,
++		0x76, 0x50, 0x17, 0x5E, 0x68, 0x54, 0xB3, 0xA9,
++		0x52, 0x00, 0x3B, 0xC0, 0x68, 0x87, 0xB8, 0x45,
++		0x5A, 0xC2, 0xB1, 0x9F, 0x7B, 0x2F, 0x76, 0x50,
++		0x4E, 0xBC, 0x98, 0xEC, 0x94, 0x55, 0x71, 0xB0,
++		0x78, 0x92, 0x15, 0x0D, 0xDC, 0x6A, 0x74, 0xCA,
++		0x0F, 0xBC, 0xD3, 0x54, 0x97, 0xCE, 0x81, 0x53,
++		0x4D, 0xAF, 0x94, 0x18, 0x84, 0x4B, 0x13, 0xAE,
++		0xA3, 0x1F, 0x9D, 0x5A, 0x6B, 0x95, 0x57, 0xBB,
++		0xDF, 0x61, 0x9E, 0xFD, 0x4E, 0x88, 0x7F, 0x2D,
++		0x42, 0xB8, 0xDD, 0x8B, 0xC9, 0x87, 0xEA, 0xE1,
++		0xBF, 0x89, 0xCA, 0xB8, 0x5E, 0xE2, 0x1E, 0x35,
++		0x63, 0x05, 0xDF, 0x6C, 0x07, 0xA8, 0x83, 0x8E,
++		0x3E, 0xF4, 0x1C, 0x59, 0x5D, 0xCC, 0xE4, 0x3D,
++		0xAF, 0xC4, 0x91, 0x23, 0xEF, 0x4D, 0x8A, 0xBB,
++		0xA9, 0x3D, 0x39, 0x05, 0xE4, 0x02, 0x8D, 0x7B,
++		0xA9, 0x14, 0x84, 0xA2, 0x75, 0x96, 0xE0, 0x7B,
++		0x4B, 0x6E, 0xD9, 0x92, 0xF0, 0x77, 0xB5, 0x24,
++		0xD3, 0xDC, 0xFE, 0x7D, 0xDD, 0x55, 0x49, 0xBE,
++		0x7C, 0xCE, 0x8D, 0xA0, 0x35, 0xCF, 0xA0, 0xB3,
++		0xFB, 0x8F, 0x9E, 0x46, 0xF7, 0x32, 0xB2, 0xA8,
++		0x6B, 0x46, 0x01, 0x65, 0xC0, 0x8F, 0x53, 0x13}
++	E := []byte{0x01, 0x00, 0x01}
++	d := []byte{
++		0x41, 0x18, 0x8B, 0x20, 0xCF, 0xDB, 0xDB, 0xC2,
++		0xCF, 0x1F, 0xFE, 0x75, 0x2D, 0xCB, 0xAA, 0x72,
++		0x39, 0x06, 0x35, 0x2E, 0x26, 0x15, 0xD4, 0x9D,
++		0xCE, 0x80, 0x59, 0x7F, 0xCF, 0x0A, 0x05, 0x40,
++		0x3B, 0xEF, 0x00, 0xFA, 0x06, 0x51, 0x82, 0xF7,
++		0x2D, 0xEC, 0xFB, 0x59, 0x6F, 0x4B, 0x0C, 0xE8,
++		0xFF, 0x59, 0x70, 0xBA, 0xF0, 0x7A, 0x89, 0xA5,
++		0x19, 0xEC, 0xC8, 0x16, 0xB2, 0xF4, 0xFF, 0xAC,
++		0x50, 0x69, 0xAF, 0x1B, 0x06, 0xBF, 0xEF, 0x7B,
++		0xF6, 0xBC, 0xD7, 0x9E, 0x4E, 0x81, 0xC8, 0xC5,
++		0xA3, 0xA7, 0xD9, 0x13, 0x0D, 0xC3, 0xCF, 0xBA,
++		0xDA, 0xE5, 0xF6, 0xD2, 0x88, 0xF9, 0xAE, 0xE3,
++		0xF6, 0xFF, 0x92, 0xFA, 0xE0, 0xF8, 0x1A, 0xF5,
++		0x97, 0xBE, 0xC9, 0x6A, 0xE9, 0xFA, 0xB9, 0x40,
++		0x2C, 0xD5, 0xFE, 0x41, 0xF7, 0x05, 0xBE, 0xBD,
++		0xB4, 0x7B, 0xB7, 0x36, 0xD3, 0xFE, 0x6C, 0x5A,
++		0x51, 0xE0, 0xE2, 0x07, 0x32, 0xA9, 0x7B, 0x5E,
++		0x46, 0xC1, 0xCB, 0xDB, 0x26, 0xD7, 0x48, 0x54,
++		0xC6, 0xB6, 0x60, 0x4A, 0xED, 0x46, 0x37, 0x35,
++		0xFF, 0x90, 0x76, 0x04, 0x65, 0x57, 0xCA, 0xF9,
++		0x49, 0xBF, 0x44, 0x88, 0x95, 0xC2, 0x04, 0x32,
++		0xC1, 0xE0, 0x9C, 0x01, 0x4E, 0xA7, 0x56, 0x60,
++		0x43, 0x4F, 0x1A, 0x0F, 0x3B, 0xE2, 0x94, 0xBA,
++		0xBC, 0x5D, 0x53, 0x0E, 0x6A, 0x10, 0x21, 0x3F,
++		0x53, 0xB6, 0x03, 0x75, 0xFC, 0x84, 0xA7, 0x57,
++		0x3F, 0x2A, 0xF1, 0x21, 0x55, 0x84, 0xF5, 0xB4,
++		0xBD, 0xA6, 0xD4, 0xE8, 0xF9, 0xE1, 0x7A, 0x78,
++		0xD9, 0x7E, 0x77, 0xB8, 0x6D, 0xA4, 0xA1, 0x84,
++		0x64, 0x75, 0x31, 0x8A, 0x7A, 0x10, 0xA5, 0x61,
++		0x01, 0x4E, 0xFF, 0xA2, 0x3A, 0x81, 0xEC, 0x56,
++		0xE9, 0xE4, 0x10, 0x9D, 0xEF, 0x8C, 0xB3, 0xF7,
++		0x97, 0x22, 0x3F, 0x7D, 0x8D, 0x0D, 0x43, 0x51}
++	p := []byte{
++		0xDD, 0x10, 0x57, 0x02, 0x38, 0x2F, 0x23, 0x2B,
++		0x36, 0x81, 0xF5, 0x37, 0x91, 0xE2, 0x26, 0x17,
++		0xC7, 0xBF, 0x4E, 0x9A, 0xCB, 0x81, 0xED, 0x48,
++		0xDA, 0xF6, 0xD6, 0x99, 0x5D, 0xA3, 0xEA, 0xB6,
++		0x42, 0x83, 0x9A, 0xFF, 0x01, 0x2D, 0x2E, 0xA6,
++		0x28, 0xB9, 0x0A, 0xF2, 0x79, 0xFD, 0x3E, 0x6F,
++		0x7C, 0x93, 0xCD, 0x80, 0xF0, 0x72, 0xF0, 0x1F,
++		0xF2, 0x44, 0x3B, 0x3E, 0xE8, 0xF2, 0x4E, 0xD4,
++		0x69, 0xA7, 0x96, 0x13, 0xA4, 0x1B, 0xD2, 0x40,
++		0x20, 0xF9, 0x2F, 0xD1, 0x10, 0x59, 0xBD, 0x1D,
++		0x0F, 0x30, 0x1B, 0x5B, 0xA7, 0xA9, 0xD3, 0x63,
++		0x7C, 0xA8, 0xD6, 0x5C, 0x1A, 0x98, 0x15, 0x41,
++		0x7D, 0x8E, 0xAB, 0x73, 0x4B, 0x0B, 0x4F, 0x3A,
++		0x2C, 0x66, 0x1D, 0x9A, 0x1A, 0x82, 0xF3, 0xAC,
++		0x73, 0x4C, 0x40, 0x53, 0x06, 0x69, 0xAB, 0x8E,
++		0x47, 0x30, 0x45, 0xA5, 0x8E, 0x65, 0x53, 0x9D}
++	q := []byte{
++		0xCC, 0xF1, 0xE5, 0xBB, 0x90, 0xC8, 0xE9, 0x78,
++		0x1E, 0xA7, 0x5B, 0xEB, 0xF1, 0x0B, 0xC2, 0x52,
++		0xE1, 0x1E, 0xB0, 0x23, 0xA0, 0x26, 0x0F, 0x18,
++		0x87, 0x55, 0x2A, 0x56, 0x86, 0x3F, 0x4A, 0x64,
++		0x21, 0xE8, 0xC6, 0x00, 0xBF, 0x52, 0x3D, 0x6C,
++		0xB1, 0xB0, 0xAD, 0xBD, 0xD6, 0x5B, 0xFE, 0xE4,
++		0xA8, 0x8A, 0x03, 0x7E, 0x3D, 0x1A, 0x41, 0x5E,
++		0x5B, 0xB9, 0x56, 0x48, 0xDA, 0x5A, 0x0C, 0xA2,
++		0x6B, 0x54, 0xF4, 0xA6, 0x39, 0x48, 0x52, 0x2C,
++		0x3D, 0x5F, 0x89, 0xB9, 0x4A, 0x72, 0xEF, 0xFF,
++		0x95, 0x13, 0x4D, 0x59, 0x40, 0xCE, 0x45, 0x75,
++		0x8F, 0x30, 0x89, 0x80, 0x90, 0x89, 0x56, 0x58,
++		0x8E, 0xEF, 0x57, 0x5B, 0x3E, 0x4B, 0xC4, 0xC3,
++		0x68, 0xCF, 0xE8, 0x13, 0xEE, 0x9C, 0x25, 0x2C,
++		0x2B, 0x02, 0xE0, 0xDF, 0x91, 0xF1, 0xAA, 0x01,
++		0x93, 0x8D, 0x38, 0x68, 0x5D, 0x60, 0xBA, 0x6F}
++	qInv := []byte{
++		0x0A, 0x81, 0xD8, 0xA6, 0x18, 0x31, 0x4A, 0x80,
++		0x3A, 0xF6, 0x1C, 0x06, 0x71, 0x1F, 0x2C, 0x39,
++		0xB2, 0x66, 0xFF, 0x41, 0x4D, 0x53, 0x47, 0x6D,
++		0x1D, 0xA5, 0x2A, 0x43, 0x18, 0xAA, 0xFE, 0x4B,
++		0x96, 0xF0, 0xDA, 0x07, 0x15, 0x5F, 0x8A, 0x51,
++		0x34, 0xDA, 0xB8, 0x8E, 0xE2, 0x9E, 0x81, 0x68,
++		0x07, 0x6F, 0xCD, 0x78, 0xCA, 0x79, 0x1A, 0xC6,
++		0x34, 0x42, 0xA8, 0x1C, 0xD0, 0x69, 0x39, 0x27,
++		0xD8, 0x08, 0xE3, 0x35, 0xE8, 0xD8, 0xCB, 0xF2,
++		0x12, 0x19, 0x07, 0x50, 0x9A, 0x57, 0x75, 0x9B,
++		0x4F, 0x9A, 0x18, 0xFA, 0x3A, 0x7B, 0x33, 0x37,
++		0x79, 0xED, 0xDE, 0x7A, 0x45, 0x93, 0x84, 0xF8,
++		0x44, 0x4A, 0xDA, 0xEC, 0xFF, 0xEC, 0x95, 0xFD,
++		0x55, 0x2B, 0x0C, 0xFC, 0xB6, 0xC7, 0xF6, 0x92,
++		0x62, 0x6D, 0xDE, 0x1E, 0xF2, 0x68, 0xA4, 0x0D,
++		0x2F, 0x67, 0xB5, 0xC8, 0xAA, 0x38, 0x7F, 0xF7}
++	dP := []byte{
++		0x09, 0xED, 0x54, 0xEA, 0xED, 0x98, 0xF8, 0x4C,
++		0x55, 0x7B, 0x4A, 0x86, 0xBF, 0x4F, 0x57, 0x84,
++		0x93, 0xDC, 0xBC, 0x6B, 0xE9, 0x1D, 0xA1, 0x89,
++		0x37, 0x04, 0x04, 0xA9, 0x08, 0x72, 0x76, 0xF4,
++		0xCE, 0x51, 0xD8, 0xA1, 0x00, 0xED, 0x85, 0x7D,
++		0xC2, 0xB0, 0x64, 0x94, 0x74, 0xF3, 0xF1, 0x5C,
++		0xD2, 0x4C, 0x54, 0xDB, 0x28, 0x71, 0x10, 0xE5,
++		0x6E, 0x5C, 0xB0, 0x08, 0x68, 0x2F, 0x91, 0x68,
++		0xAA, 0x81, 0xF3, 0x14, 0x58, 0xB7, 0x43, 0x1E,
++		0xCC, 0x1C, 0x44, 0x90, 0x6F, 0xDA, 0x87, 0xCA,
++		0x89, 0x47, 0x10, 0xC3, 0x71, 0xE9, 0x07, 0x6C,
++		0x1D, 0x49, 0xFB, 0xAE, 0x51, 0x27, 0x69, 0x34,
++		0xF2, 0xAD, 0x78, 0x77, 0x89, 0xF4, 0x2D, 0x0F,
++		0xA0, 0xB4, 0xC9, 0x39, 0x85, 0x5D, 0x42, 0x12,
++		0x09, 0x6F, 0x70, 0x28, 0x0A, 0x4E, 0xAE, 0x7C,
++		0x8A, 0x27, 0xD9, 0xC8, 0xD0, 0x77, 0x2E, 0x65}
++	dQ := []byte{
++		0x8C, 0xB6, 0x85, 0x7A, 0x7B, 0xD5, 0x46, 0x5F,
++		0x80, 0x04, 0x7E, 0x9B, 0x87, 0xBC, 0x00, 0x27,
++		0x31, 0x84, 0x05, 0x81, 0xE0, 0x62, 0x61, 0x39,
++		0x01, 0x2A, 0x5B, 0x50, 0x5F, 0x0A, 0x33, 0x84,
++		0x7E, 0xB7, 0xB8, 0xC3, 0x28, 0x99, 0x49, 0xAD,
++		0x48, 0x6F, 0x3B, 0x4B, 0x3D, 0x53, 0x9A, 0xB5,
++		0xDA, 0x76, 0x30, 0x21, 0xCB, 0xC8, 0x2C, 0x1B,
++		0xA2, 0x34, 0xA5, 0x66, 0x8D, 0xED, 0x08, 0x01,
++		0xB8, 0x59, 0xF3, 0x43, 0xF1, 0xCE, 0x93, 0x04,
++		0xE6, 0xFA, 0xA2, 0xB0, 0x02, 0xCA, 0xD9, 0xB7,
++		0x8C, 0xDE, 0x5C, 0xDC, 0x2C, 0x1F, 0xB4, 0x17,
++		0x1C, 0x42, 0x42, 0x16, 0x70, 0xA6, 0xAB, 0x0F,
++		0x50, 0xCC, 0x4A, 0x19, 0x4E, 0xB3, 0x6D, 0x1C,
++		0x91, 0xE9, 0x35, 0xBA, 0x01, 0xB9, 0x59, 0xD8,
++		0x72, 0x8B, 0x9E, 0x64, 0x42, 0x6B, 0x3F, 0xC3,
++		0xA7, 0x50, 0x6D, 0xEB, 0x52, 0x39, 0xA8, 0xA7}
++
++	// Convert []byte to BigInt using BN_bin2bn and bnToBig
++	bytesToBigInt := func(b []byte) BigInt {
++		bn, err := ossl.BN_bin2bn(base(b), int32(len(b)), nil)
++		if err != nil {
++			panic(err)
++		}
++		defer ossl.BN_free(bn)
++		return bnToBig(bn)
++	}
++
++	priv, err := NewPrivateKeyRSA(
++		bytesToBigInt(N),
++		bytesToBigInt(E),
++		bytesToBigInt(d),
++		bytesToBigInt(p),
++		bytesToBigInt(q),
++		bytesToBigInt(dP),
++		bytesToBigInt(dQ),
++		bytesToBigInt(qInv),
++	)
++	if err != nil {
++		panic("failed to create test RSA private key: " + err.Error())
++	}
++	// Prevent finalization to avoid freeing OpenSSL objects.
++	runtime.SetFinalizer(priv, nil)
++	return priv._pkey
 +})
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
@@ -33264,10 +33599,10 @@ index 00000000000000..f484a3e2211e04
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
 new file mode 100644
-index 00000000000000..0269f9cf86539e
+index 00000000000000..42f995a480e0fe
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/rsa.go
-@@ -0,0 +1,396 @@
+@@ -0,0 +1,404 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33651,6 +33986,8 @@ index 00000000000000..0269f9cf86539e
 +
 +func cryptoHashToID(ch crypto.Hash) string {
 +	switch ch {
++	case crypto.MD4:
++		return bcrypt.MD4_ALGORITHM
 +	case crypto.MD5:
 +		return bcrypt.MD5_ALGORITHM
 +	case crypto.SHA1:
@@ -33661,6 +33998,12 @@ index 00000000000000..0269f9cf86539e
 +		return bcrypt.SHA384_ALGORITHM
 +	case crypto.SHA512:
 +		return bcrypt.SHA512_ALGORITHM
++	case crypto.SHA3_256:
++		return bcrypt.SHA3_256_ALGORITHM
++	case crypto.SHA3_384:
++		return bcrypt.SHA3_384_ALGORITHM
++	case crypto.SHA3_512:
++		return bcrypt.SHA3_512_ALGORITHM
 +	}
 +	return ""
 +}
@@ -34983,11 +35326,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..cc1444536adb31 100644
+index b6f6376eac041a..0fb122073acdff 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251218145113-52cddb05a262
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
@@ -35003,7 +35346,7 @@ index b6f6376eac041a..cc1444536adb31 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251218121426-ba94af8d2bb8
++# github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 3cb821a82160a5895af6a86d8757e4dddd6ffde8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 16:13:15 +0000
Subject: [PATCH 635/887] Update submodule to latest master (d00e96d3):
 internal/cpu: repair VNNI feature check

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 05e41225f6e..d00e96d3aec 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 05e41225f6e7e707c196b57b16ade185a7c6aa06
+Subproject commit d00e96d3aeccb11c373d125418316f0b019f4fb0

From 94ad5546dedb78c3bb2e4ea405a97f9e153b1c15 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Mon, 22 Dec 2025 13:10:38 +0100
Subject: [PATCH 636/887] Fallback to Go crypto if PKCS1v15 is not supported
 (#2018)

* support more RSA algorithms on Windows and update support matrix

* correct docs

* fallback to Go crypto if PKCS1v15 is not supported

* fix nobackend
---
 ...03-Implement-crypto-internal-backend.patch | 70 ++++++++++++-------
 patches/0004-Use-crypto-backends.patch        | 41 ++++++++---
 2 files changed, 75 insertions(+), 36 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index d30e01c08d4..85f3526d266 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -29,9 +29,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 418 +++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 428 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 424 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 426 +++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -45,15 +45,15 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 374 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 408 +++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 375 +++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 415 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2710 insertions(+), 21 deletions(-)
+ 44 files changed, 2730 insertions(+), 20 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -246,7 +246,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 6d3742525c6808..287424afb0d734 100644
+index 48c3aa5efdb008..3ac500b85e6988 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -310,7 +310,7 @@ index 6d3742525c6808..287424afb0d734 100644
  			})
  		t.registerTest("internal linking, -buildmode=pie",
  			&goTest{
-@@ -897,9 +917,10 @@ func (t *tester) registerTests() {
+@@ -897,9 +908,10 @@ func (t *tester) registerTests() {
  				timeout:   60 * time.Second,
  				buildmode: "pie",
  				ldflags:   "-linkmode=internal",
@@ -322,7 +322,7 @@ index 6d3742525c6808..287424afb0d734 100644
  			})
  		// Also test a cgo package.
  		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -1005,7 +1023,9 @@ func (t *tester) registerTests() {
+@@ -1005,7 +1017,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -928,10 +928,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..444bd6ef163689
+index 00000000000000..01e42ef9cec91b
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,418 @@
+@@ -0,0 +1,428 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -987,9 +987,19 @@ index 00000000000000..444bd6ef163689
 +	return cng.SupportsSHAKE(securityBits)
 +}
 +
-+func SupportsCurve(curve string) bool            { return true }
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++func SupportsCurve(curve string) bool        { return true }
++func SupportsRSAOAEPLabel(label []byte) bool { return true }
++func SupportsRSAPKCS1v15Encryption() bool    { return true }
++
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
++	// 0 and MD5SHA1 are special cases that are always supported for PKCS1v15 signatures.
++	switch hash {
++	case 0, crypto.MD5SHA1:
++		return true
++	default:
++		return cng.SupportsHash(hash)
++	}
++}
 +
 +type Hash = cng.Hash
 +type SHAKE = cng.SHAKE
@@ -1404,10 +1414,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..b3b6985d41fbd2
+index 00000000000000..1ac8f2fd8b6339
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,424 @@
+@@ -0,0 +1,426 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1467,7 +1477,9 @@ index 00000000000000..b3b6985d41fbd2
 +	return len(label) == 0
 +}
 +
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool {
++func SupportsRSAPKCS1v15Encryption() bool { return true }
++
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
 +	switch hash {
 +	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
 +		return true
@@ -2323,10 +2335,10 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..5292d7860c5bce
+index 00000000000000..1c49ff66dc1a2f
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,374 @@
+@@ -0,0 +1,375 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2364,9 +2376,10 @@ index 00000000000000..5292d7860c5bce
 +func SupportsSHAKE(securityBits int) bool  { panic("cryptobackend: not available") }
 +func SupportsCSHAKE(securityBits int) bool { panic("cryptobackend: not available") }
 +
-+func SupportsCurve(curve string) bool            { panic("cryptobackend: not available") }
-+func SupportsRSAOAEPLabel(label []byte) bool     { panic("cryptobackend: not available") }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { panic("cryptobackend: not available") }
++func SupportsCurve(curve string) bool                    { panic("cryptobackend: not available") }
++func SupportsRSAOAEPLabel(label []byte) bool             { panic("cryptobackend: not available") }
++func SupportsRSAPKCS1v15Encryption() bool                { panic("cryptobackend: not available") }
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool { panic("cryptobackend: not available") }
 +
 +type Hash struct {
 +	hash.Cloner
@@ -2703,10 +2716,10 @@ index 00000000000000..5292d7860c5bce
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..a95e112053ff08
+index 00000000000000..71d258d86412d2
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,408 @@
+@@ -0,0 +1,415 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2768,8 +2781,15 @@ index 00000000000000..a95e112053ff08
 +	return openssl.SupportsCurve(curve)
 +}
 +
-+func SupportsRSAOAEPLabel(label []byte) bool     { return true }
-+func SupportsPKCS1v15Hash(hash crypto.Hash) bool { return true }
++func SupportsRSAOAEPLabel(label []byte) bool { return true }
++
++func SupportsRSAPKCS1v15Encryption() bool {
++	return openssl.SupportsRSAPKCS1v15Encryption()
++}
++
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
++	return openssl.SupportsRSAPKCS1v15Signature(hash)
++}
 +
 +type Hash = openssl.Hash
 +type SHAKE = openssl.SHAKE
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 55a5a4b8fba..0bb051cfe36 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -65,7 +65,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/darwin.go                      |  71 +++++++
  src/crypto/rsa/fips.go                        |  22 +-
  src/crypto/rsa/notboring.go                   |   4 +-
- src/crypto/rsa/pkcs1v15.go                    |   6 +-
+ src/crypto/rsa/pkcs1v15.go                    |  11 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  13 +-
  src/crypto/rsa/rsa.go                         |  13 +-
@@ -102,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 98 files changed, 1506 insertions(+), 180 deletions(-)
+ 98 files changed, 1509 insertions(+), 182 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2395,7 +2395,7 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index fb2395886b053b..504bd25d2c7df1 100644
+index fb2395886b053b..6b1b6ad96a1366 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2464,7 +2464,7 @@ index fb2395886b053b..504bd25d2c7df1 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsPKCS1v15Hash(hash) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -2473,7 +2473,7 @@ index fb2395886b053b..504bd25d2c7df1 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsPKCS1v15Hash(hash) {
++	if boring.Enabled && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -2496,33 +2496,52 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 5269d7b971bda7..f1122ce61087bd 100644
+index 5269d7b971bda7..8edad9da73698a 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
-@@ -5,7 +5,7 @@
+@@ -5,7 +5,8 @@
  package rsa
  
  import (
 -	"crypto/internal/boring"
++	"crypto/internal/backend"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
-@@ -115,7 +115,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+@@ -61,7 +62,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
+ 		return nil, ErrMessageTooLong
+ 	}
+ 
+-	if boring.Enabled && rand.IsDefaultReader(random) {
++	if boring.Enabled && rand.IsDefaultReader(random) && backend.SupportsRSAPKCS1v15Encryption() {
+ 		bkey, err := boringPublicKey(pub)
+ 		if err != nil {
+ 			return nil, err
+@@ -83,7 +84,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
+ 	em[len(em)-len(msg)-1] = 0
+ 	copy(mm, msg)
+ 
+-	if boring.Enabled {
++	if boring.Enabled && backend.SupportsRSAPKCS1v15Encryption() {
+ 		var bkey *boring.PublicKeyRSA
+ 		bkey, err = boringPublicKey(pub)
+ 		if err != nil {
+@@ -115,7 +116,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && backend.SupportsRSAPKCS1v15Encryption() {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -221,7 +221,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+@@ -221,7 +222,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
  		return 0, nil, 0, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) {
++	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && backend.SupportsRSAPKCS1v15Encryption() {
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
  		if err != nil {

From 8eaa5ce6d4c22f7acf4c14196cbe2604c70e9bc1 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 22 Dec 2025 12:46:43 +0000
Subject: [PATCH 637/887] Update submodule to latest master (7ecb1f36):
 simd/archsimd: add HasAVX2() guards to tests that need them

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d00e96d3aec..7ecb1f36aca 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d00e96d3aeccb11c373d125418316f0b019f4fb0
+Subproject commit 7ecb1f36acab7b48d77991d58d456a34074a2d0e

From 6644dff2069890abf969559831de3f9958204ef2 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 24 Dec 2025 16:08:11 +0000
Subject: [PATCH 638/887] Update submodule to latest master (0f620776):
 simd/archsimd: fix "go generate" command

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 7ecb1f36aca..0f620776d73 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 7ecb1f36acab7b48d77991d58d456a34074a2d0e
+Subproject commit 0f620776d739f3de2c459c42d7ae2338ece35e67

From 3818086bc9d1c754cf57d2db997d0d4b856156ee Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 26 Dec 2025 16:07:50 +0000
Subject: [PATCH 639/887] Update submodule to latest master (7971fcdf):
 test/codegen: tidy tests for bits

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 0f620776d73..7971fcdf537 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 0f620776d739f3de2c459c42d7ae2338ece35e67
+Subproject commit 7971fcdf537054608b2443a32f0fbb6dd4eba12a

From a75314d51d1e4b5d23f3787140028dd963849444 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 29 Dec 2025 16:08:50 +0000
Subject: [PATCH 640/887] Update submodule to latest master (e790d596):
 simd/archsimd: add tests for Truncate operations

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 7971fcdf537..e790d596742 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 7971fcdf537054608b2443a32f0fbb6dd4eba12a
+Subproject commit e790d5967424b4230978f63d16ecc5033269dd02

From c85b0d3d0886bfa4f739cd54c1b484c662cb8f91 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 31 Dec 2025 16:07:42 +0000
Subject: [PATCH 641/887] Update submodule to latest master (b28808d8):
 cmd/go/internal/modindex: fix obvious bug using failed type assertion

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e790d596742..b28808d8386 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e790d5967424b4230978f63d16ecc5033269dd02
+Subproject commit b28808d838682b2911698fcb934813b02f39fa69

From cc2c4aece32b892739db176e0afbc9f794fcc96b Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 5 Jan 2026 16:09:44 +0000
Subject: [PATCH 642/887] Update submodule to latest master (f8ee0f84):
 cmd/go/testdata/vcstest/git: use git commands that work on older git versions

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index b28808d8386..f8ee0f84753 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit b28808d838682b2911698fcb934813b02f39fa69
+Subproject commit f8ee0f84753b22254d217bf28ce8ecca7db7025c

From 907905f2709b99845f67ed4dead207f7639fb6c0 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 7 Jan 2026 11:52:35 +0100
Subject: [PATCH 643/887] Move our TLS tests to a separate file (#2026)

* move our tls tests to a separate file

* fix tests

* fix FIPS mode tests
---
 ...TLS-settings-with-Microsoft-policies.patch | 448 +++++++++---------
 1 file changed, 235 insertions(+), 213 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index 7f6673c08e2..ebcb16a30cf 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -4,12 +4,15 @@ Date: Fri, 12 Dec 2025 16:46:44 +0100
 Subject: [PATCH] align TLS settings with Microsoft policies
 
 ---
- doc/godebug.md                   |   9 ++
- src/crypto/tls/defaults.go       |  67 +++++++++-
- src/crypto/tls/handshake_test.go |   3 +
- src/crypto/tls/tls_test.go       | 218 +++++++++++++++++++++++++++++++
- src/internal/godebugs/table.go   |   2 +
- 5 files changed, 298 insertions(+), 1 deletion(-)
+ doc/godebug.md                             |   9 +
+ src/crypto/internal/backend/cng_windows.go |   2 +-
+ src/crypto/tls/defaults.go                 |  67 ++++-
+ src/crypto/tls/handshake_test.go           |   3 +
+ src/crypto/tls/microsoft_test.go           | 304 +++++++++++++++++++++
+ src/crypto/tls/tls_test.go                 |   5 +-
+ src/internal/godebugs/table.go             |   2 +
+ 7 files changed, 388 insertions(+), 4 deletions(-)
+ create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
 index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
@@ -31,6 +34,19 @@ index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
  ### Go 1.25
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
+diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
+index 01e42ef9cec91b..778c851c707358 100644
+--- a/src/crypto/internal/backend/cng_windows.go
++++ b/src/crypto/internal/backend/cng_windows.go
+@@ -29,7 +29,7 @@ func init() {
+ 		return enabled
+ 	}
+ 	if err := fips140.Check(fn); err != nil {
+-		panic("cngcrypto: " + err.Error())
++		//panic("cngcrypto: " + err.Error())
+ 	}
+ 	sig.BoringCrypto()
+ }
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
 index 8de8d7e0934b07..3f7c0dc2981ff4 100644
 --- a/src/crypto/tls/defaults.go
@@ -120,10 +136,10 @@ index 8de8d7e0934b07..3f7c0dc2981ff4 100644
  	// tlsmlkem=0 restores the pre-Go 1.24 default.
  	case tlsmlkem.Value() == "0":
 diff --git a/src/crypto/tls/handshake_test.go b/src/crypto/tls/handshake_test.go
-index 6e15459a9a1809..4f47dbd2030d2a 100644
+index 9cea8182d04154..0e5b421f52dc95 100644
 --- a/src/crypto/tls/handshake_test.go
 +++ b/src/crypto/tls/handshake_test.go
-@@ -452,6 +452,9 @@ func runMain(m *testing.M) int {
+@@ -453,6 +453,9 @@ func runMain(m *testing.M) int {
  	// to use cryptotest.SetGlobalRandom instead.
  	os.Setenv("GODEBUG", "cryptocustomrand=1,"+os.Getenv("GODEBUG"))
  
@@ -133,29 +149,30 @@ index 6e15459a9a1809..4f47dbd2030d2a 100644
  	testConfig = &Config{
  		Time:               func() time.Time { return time.Unix(0, 0) },
  		Rand:               zeroSource{},
-diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 5f4a2b9de4fd1f..40806059e1f458 100644
---- a/src/crypto/tls/tls_test.go
-+++ b/src/crypto/tls/tls_test.go
-@@ -24,11 +24,13 @@ import (
- 	"internal/goexperiment"
- 	"internal/testenv"
- 	"io"
+diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
+new file mode 100644
+index 00000000000000..2c0efb8aba9a3b
+--- /dev/null
++++ b/src/crypto/tls/microsoft_test.go
+@@ -0,0 +1,304 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package tls
++
++import (
++	boring "crypto/internal/backend"
++	"crypto/tls/internal/fips140tls"
 +	"maps"
- 	"math"
- 	"math/big"
- 	"net"
- 	"os"
- 	"reflect"
++	"os"
 +	"runtime"
- 	"slices"
- 	"strings"
- 	"testing"
-@@ -1983,10 +1985,70 @@ func testVerifyCertificates(t *testing.T, version uint16) {
- 	}
- }
- 
-+func TestGroupSupport(t *testing.T) {
++	"slices"
++	"strings"
++	"testing"
++)
++
++func TestMicrosoftGroupSupport(t *testing.T) {
 +	supported := slices.Collect(maps.Keys(supportedGroups))
 +	slices.Sort(supported)
 +	for _, group := range supported {
@@ -183,290 +200,295 @@ index 5f4a2b9de4fd1f..40806059e1f458 100644
 +	}
 +}
 +
- func TestHandshakeMLKEM(t *testing.T) {
- 	if boring.Enabled && fips140tls.Required() {
- 		t.Skip("ML-KEM not supported in BoringCrypto FIPS mode")
- 	}
++func TestMicrosoftHandshakeGroups(t *testing.T) {
++	// This test is designed to verify the default Microsoft TLS profile's group preferences
++	// and behavior during the handshake. It is based on TestHandshakeMLKEM.
 +
 +	// Enable the default Microsoft TLS profile for the duration of the test.
++	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
 +	savedGODEBUG := os.Getenv("GODEBUG")
-+	os.Setenv("GODEBUG", strings.ReplaceAll(savedGODEBUG, "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
-+	t.Cleanup(func() {
-+		os.Setenv("GODEBUG", savedGODEBUG)
-+	})
 +
-+	defaultMicrosoftWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
++	defaultWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
 +		CurveP384, CurveP256, CurveP521, X25519}
 +	if boring.Enabled {
 +		// Adjust expectations based on supported groups.
 +		// Be explicit about the order to test the preference order under different scenarios.
 +		switch {
++		case fips140tls.Required():
++			defaultWithPQ = []CurveID{CurveP384, CurveP256, CurveP521}
 +		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768() && !boring.SupportsMLKEM1024():
-+			defaultMicrosoftWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768, X25519}
++			defaultWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768, X25519}
 +		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768():
-+			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP256r1MLKEM768, X25519}
++			defaultWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP256r1MLKEM768, X25519}
 +		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM1024():
-+			defaultMicrosoftWithPQ = []CurveID{SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, X25519}
++			defaultWithPQ = []CurveID{SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, X25519}
 +		case !boring.SupportsMLKEM768() && !boring.SupportsMLKEM1024():
-+			defaultMicrosoftWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768}
++			defaultWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768}
 +		case !boring.SupportsCurve("X25519"):
-+			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, X25519}
++			defaultWithPQ = []CurveID{SecP384r1MLKEM1024, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519MLKEM768, X25519}
 +		case !boring.SupportsMLKEM768():
-+			defaultMicrosoftWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP256r1MLKEM768}
++			defaultWithPQ = []CurveID{SecP384r1MLKEM1024, CurveP384, CurveP256, CurveP521, X25519, X25519MLKEM768, SecP256r1MLKEM768}
 +		case !boring.SupportsMLKEM1024():
-+			defaultMicrosoftWithPQ = []CurveID{X25519MLKEM768, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519, SecP384r1MLKEM1024}
++			defaultWithPQ = []CurveID{X25519MLKEM768, SecP256r1MLKEM768, CurveP384, CurveP256, CurveP521, X25519, SecP384r1MLKEM1024}
 +		}
 +	}
-+	defaultMicrosoftWithoutPQ := []CurveID{CurveP384, CurveP256, CurveP521, X25519}
++	defaultWithoutPQ := []CurveID{CurveP384, CurveP256, CurveP521, X25519}
 +
- 	defaultWithPQ := []CurveID{X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024,
- 		X25519, CurveP256, CurveP384, CurveP521}
- 	defaultWithoutPQ := []CurveID{X25519, CurveP256, CurveP384, CurveP521}
-@@ -2001,8 +2063,16 @@ func TestHandshakeMLKEM(t *testing.T) {
- 	}{
- 		{
- 			name:           "Default",
-+			expectClient:   defaultMicrosoftWithPQ,
++	var tests = []struct {
++		name           string
++		clientConfig   func(*Config)
++		serverConfig   func(*Config)
++		preparation    func(*testing.T)
++		expectClient   []CurveID
++		expectSelected CurveID
++		expectHRR      bool
++	}{
++		{
++			name:           "Default",
++			expectClient:   defaultWithPQ,
 +			expectSelected: X25519MLKEM768,
 +		},
 +		{
-+			name:           "Default GODEBUG ms_tlsprofile=off",
- 			expectClient:   defaultWithPQ,
- 			expectSelected: X25519MLKEM768,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			name: "ClientCurvePreferences",
++			clientConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{X25519}
 +			},
- 		},
- 		{
- 			name: "ClientCurvePreferences",
-@@ -2017,17 +2087,41 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			serverConfig: func(config *Config) {
- 				config.CurvePreferences = []CurveID{X25519}
- 			},
-+			expectClient:   defaultMicrosoftWithPQ,
++			expectClient:   []CurveID{X25519},
 +			expectSelected: X25519,
-+			expectHRR:      boring.Enabled && !boring.SupportsMLKEM768(),
 +		},
 +		{
-+			name: "ServerCurvePreferencesX25519 GODEBUG ms_tlsprofile=off",
++			name: "ServerCurvePreferencesX25519",
 +			serverConfig: func(config *Config) {
 +				config.CurvePreferences = []CurveID{X25519}
 +			},
- 			expectClient:   defaultWithPQ,
- 			expectSelected: X25519,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
-+			},
- 		},
- 		{
- 			name: "ServerCurvePreferencesHRR",
- 			serverConfig: func(config *Config) {
- 				config.CurvePreferences = []CurveID{CurveP256}
- 			},
-+			expectClient:   defaultMicrosoftWithPQ,
-+			expectSelected: CurveP256,
-+			expectHRR:      defaultMicrosoftWithPQ[0] != SecP256r1MLKEM768 && defaultMicrosoftWithPQ[0] != CurveP256,
++			expectClient:   defaultWithPQ,
++			expectSelected: X25519,
++			expectHRR:      boring.Enabled && !boring.SupportsMLKEM768(),
 +		},
 +		{
-+			name: "ServerCurvePreferencesHRR GODEBUG ms_tlsprofile=off",
++			name: "ServerCurvePreferencesHRR",
 +			serverConfig: func(config *Config) {
 +				config.CurvePreferences = []CurveID{CurveP256}
 +			},
- 			expectClient:   defaultWithPQ,
- 			expectSelected: CurveP256,
- 			expectHRR:      true,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			expectClient:   defaultWithPQ,
++			expectSelected: CurveP256,
++			expectHRR:      defaultWithPQ[0] != SecP256r1MLKEM768 && defaultWithPQ[0] != CurveP256,
++		},
++		{
++			name: "SecP256r1MLKEM768-Only",
++			clientConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{SecP256r1MLKEM768}
 +			},
- 		},
- 		{
- 			name: "SecP256r1MLKEM768-Only",
-@@ -2042,9 +2136,21 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			serverConfig: func(config *Config) {
- 				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
- 			},
-+			expectClient:   defaultMicrosoftWithPQ,
++			expectClient:   []CurveID{SecP256r1MLKEM768},
 +			expectSelected: SecP256r1MLKEM768,
-+			expectHRR:      defaultMicrosoftWithPQ[0] != SecP256r1MLKEM768,
 +		},
 +		{
-+			name: "SecP256r1MLKEM768-HRR GODEBUG ms_tlsprofile=off",
++			name: "SecP256r1MLKEM768-HRR",
 +			serverConfig: func(config *Config) {
 +				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
 +			},
- 			expectClient:   defaultWithPQ,
- 			expectSelected: SecP256r1MLKEM768,
- 			expectHRR:      true,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			expectClient:   defaultWithPQ,
++			expectSelected: SecP256r1MLKEM768,
++			expectHRR:      defaultWithPQ[0] != SecP256r1MLKEM768,
++		},
++		{
++			name: "SecP384r1MLKEM1024",
++			clientConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{SecP384r1MLKEM1024, CurveP384}
 +			},
- 		},
- 		{
- 			name: "SecP384r1MLKEM1024",
-@@ -2062,8 +2168,24 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			serverConfig: func(config *Config) {
- 				config.CurvePreferences = []CurveID{CurveP256}
- 			},
-+			expectClient: slices.DeleteFunc(slices.Clone(defaultMicrosoftWithPQ), func(c CurveID) bool {
-+				return c != SecP256r1MLKEM768 && c != CurveP256
-+			}),
-+			expectSelected: CurveP256,
++			expectClient:   []CurveID{SecP384r1MLKEM1024, CurveP384},
++			expectSelected: SecP384r1MLKEM1024,
 +		},
 +		{
-+			name: "CurveP256NoHRR GODEBUG ms_tlsprofile=off",
++			name: "CurveP256NoHRR",
 +			clientConfig: func(config *Config) {
 +				config.CurvePreferences = []CurveID{SecP256r1MLKEM768, CurveP256}
 +			},
 +			serverConfig: func(config *Config) {
 +				config.CurvePreferences = []CurveID{CurveP256}
 +			},
- 			expectClient:   []CurveID{SecP256r1MLKEM768, CurveP256},
- 			expectSelected: CurveP256,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			expectClient: slices.DeleteFunc(slices.Clone(defaultWithPQ), func(c CurveID) bool {
++				return c != SecP256r1MLKEM768 && c != CurveP256
++			}),
++			expectSelected: CurveP256,
++		},
++		{
++			name: "ClientMLKEMOnly",
++			clientConfig: func(config *Config) {
++				config.CurvePreferences = []CurveID{X25519MLKEM768}
 +			},
- 		},
- 		{
- 			name: "ClientMLKEMOnly",
-@@ -2086,22 +2208,52 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			clientConfig: func(config *Config) {
- 				config.MaxVersion = VersionTLS12
- 			},
-+			expectClient:   defaultMicrosoftWithoutPQ,
-+			expectSelected: CurveP384,
++			expectClient:   []CurveID{X25519MLKEM768},
++			expectSelected: X25519MLKEM768,
 +		},
 +		{
-+			name: "ClientTLSv12 GODEBUG ms_tlsprofile=off",
++			name: "ClientSortedCurvePreferences",
 +			clientConfig: func(config *Config) {
-+				config.MaxVersion = VersionTLS12
++				config.CurvePreferences = []CurveID{CurveP256, X25519MLKEM768}
 +			},
- 			expectClient:   defaultWithoutPQ,
- 			expectSelected: X25519,
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++			expectClient:   []CurveID{X25519MLKEM768, CurveP256},
++			expectSelected: X25519MLKEM768,
++		},
++		{
++			name: "ClientTLSv12",
++			clientConfig: func(config *Config) {
++				config.MaxVersion = VersionTLS12
 +			},
- 		},
- 		{
- 			name: "ServerTLSv12",
- 			serverConfig: func(config *Config) {
- 				config.MaxVersion = VersionTLS12
- 			},
-+			expectClient:   defaultMicrosoftWithPQ,
++			expectClient:   defaultWithoutPQ,
 +			expectSelected: CurveP384,
 +		},
 +		{
-+			name: "ServerTLSv12  GODEBUG ms_tlsprofile=off",
++			name: "ServerTLSv12",
 +			serverConfig: func(config *Config) {
 +				config.MaxVersion = VersionTLS12
 +			},
- 			expectClient:   defaultWithPQ,
- 			expectSelected: X25519,
++			expectClient:   defaultWithPQ,
++			expectSelected: CurveP384,
++		},
++		{
++			name: "GODEBUG tlsmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsprofile=off")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"tlsmlkem=0")
 +			},
- 		},
- 		{
- 			name: "GODEBUG tlsmlkem=0",
- 			preparation: func(t *testing.T) {
- 				t.Setenv("GODEBUG", "tlsmlkem=0")
- 			},
-+			expectClient:   defaultMicrosoftWithoutPQ,
++			expectClient:   defaultWithoutPQ,
 +			expectSelected: CurveP384,
 +		},
 +		{
-+			name: "GODEBUG tlsmlkem=0,ms_tlsprofile=off",
++			name: "GODEBUG tlssecpmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "tlsmlkem=0,ms_tlsprofile=off")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"tlssecpmlkem=0")
 +			},
- 			expectClient:   defaultWithoutPQ,
- 			expectSelected: X25519,
- 		},
-@@ -2110,9 +2262,67 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			preparation: func(t *testing.T) {
- 				t.Setenv("GODEBUG", "tlssecpmlkem=0")
- 			},
 +			expectClient:   []CurveID{X25519MLKEM768, CurveP384, CurveP256, CurveP521, X25519},
 +			expectSelected: X25519MLKEM768,
 +		},
 +		{
-+			name: "GODEBUG tlssecpmlkem=0,ms_tlsprofile=off",
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "tlssecpmlkem=0,ms_tlsprofile=off")
-+			},
- 			expectClient:   []CurveID{X25519MLKEM768, X25519, CurveP256, CurveP384, CurveP521},
- 			expectSelected: X25519MLKEM768,
- 		},
-+		{
 +			name: "GODEBUG ms_tlsx25519=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0")
 +			},
-+			expectClient: slices.DeleteFunc(slices.Clone(defaultMicrosoftWithPQ), func(c CurveID) bool {
++			expectClient: slices.DeleteFunc(slices.Clone(defaultWithPQ), func(c CurveID) bool {
 +				return c == X25519MLKEM768 || c == X25519
 +			}),
 +			expectSelected: SecP384r1MLKEM1024,
 +		},
 +		{
-+			name: "GODEBUG ms_tlsx25519=0,ms_tlsprofile=off",
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0,ms_tlsprofile=off")
-+			},
-+			expectClient:   []CurveID{SecP256r1MLKEM768, SecP384r1MLKEM1024, CurveP256, CurveP384, CurveP521},
-+			expectSelected: SecP256r1MLKEM768,
-+		},
-+		{
 +			name: "GODEBUG ms_tlsx25519=0,tlsmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlsmlkem=0")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0,tlsmlkem=0")
 +			},
 +			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
 +			expectSelected: CurveP384,
 +		},
 +		{
-+			name: "GODEBUG ms_tlsx25519=0,tlsmlkem=0,ms_tlsprofile=off",
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlsmlkem=0,ms_tlsprofile=off")
-+			},
-+			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
-+			expectSelected: CurveP256,
-+		},
-+		{
 +			name: "GODEBUG ms_tlsx25519=0,tlssecpmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlssecpmlkem=0")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0,tlssecpmlkem=0")
 +			},
 +			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
 +			expectSelected: CurveP384,
 +		},
-+		{
-+			name: "GODEBUG ms_tlsx25519=0,tlssecpmlkem=0,ms_tlsprofile=off",
-+			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", "ms_tlsx25519=0,tlssecpmlkem=0,ms_tlsprofile=off")
-+			},
-+			expectClient:   []CurveID{CurveP256, CurveP384, CurveP521},
-+			expectSelected: CurveP256,
-+		},
- 	}
- 
- 	baseConfig := testConfig.Clone()
-@@ -2131,9 +2341,17 @@ func TestHandshakeMLKEM(t *testing.T) {
- 			if test.serverConfig != nil {
- 				test.serverConfig(serverConfig)
- 			}
++	}
++
++	baseConfig := testConfig.Clone()
++	baseConfig.CurvePreferences = nil
++	for _, test := range tests {
++		t.Run(test.name, func(t *testing.T) {
++			if fips140tls.Required() && test.expectSelected == X25519 {
++				t.Skip("X25519 not supported in FIPS mode")
++			}
++			if boring.Enabled && fips140tls.Required() {
++				switch test.expectSelected {
++				case X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768:
++					t.Skipf("%v not supported in FIPS mode", test.expectSelected)
++				}
++			}
++			if test.preparation != nil {
++				test.preparation(t)
++			} else {
++				t.Parallel()
++			}
++			serverConfig := baseConfig.Clone()
++			if test.serverConfig != nil {
++				test.serverConfig(serverConfig)
++			}
 +			x25519Enabled := !strings.Contains(os.Getenv("GODEBUG"), "ms_tlsx25519=0")
-+			mstlsprofile := !strings.Contains(os.Getenv("GODEBUG"), "ms_tlsprofile=off")
-+			if mstlsprofile && !supportedGroups[test.expectSelected] {
++			if !supportedGroups[test.expectSelected] {
 +				t.Skipf("%v not supported", test.expectSelected)
 +			}
- 			serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
- 				expectClient := slices.Clone(test.expectClient)
- 				expectClient = slices.DeleteFunc(expectClient, func(c CurveID) bool {
++			serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
++				expectClient := slices.Clone(test.expectClient)
++				expectClient = slices.DeleteFunc(expectClient, func(c CurveID) bool {
 +					if !x25519Enabled && (c == X25519MLKEM768 || c == X25519) {
 +						return true
 +					}
- 					return fips140tls.Required() && c == X25519
- 				})
- 				if !slices.Equal(hello.SupportedCurves, expectClient) {
++					return fips140tls.Required() && c == X25519
++				})
++				if !slices.Equal(hello.SupportedCurves, expectClient) {
++					t.Errorf("got client curves %v, expected %v", hello.SupportedCurves, expectClient)
++				}
++				return nil, nil
++			}
++			clientConfig := baseConfig.Clone()
++			if test.clientConfig != nil {
++				test.clientConfig(clientConfig)
++			}
++			ss, cs, err := testHandshake(t, clientConfig, serverConfig)
++			if err != nil {
++				t.Fatal(err)
++			}
++			if ss.CurveID != test.expectSelected {
++				t.Errorf("server selected curve %v, expected %v", ss.CurveID, test.expectSelected)
++			}
++			if cs.CurveID != test.expectSelected {
++				t.Errorf("client selected curve %v, expected %v", cs.CurveID, test.expectSelected)
++			}
++			if test.expectHRR {
++				if !ss.HelloRetryRequest {
++					t.Error("server did not use HRR")
++				}
++				if !cs.HelloRetryRequest {
++					t.Error("client did not use HRR")
++				}
++			} else {
++				if ss.HelloRetryRequest {
++					t.Error("server used HRR")
++				}
++				if cs.HelloRetryRequest {
++					t.Error("client used HRR")
++				}
++			}
++		})
++	}
++}
+diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
+index 5f4a2b9de4fd1f..4f67758ded932d 100644
+--- a/src/crypto/tls/tls_test.go
++++ b/src/crypto/tls/tls_test.go
+@@ -1990,6 +1990,7 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 	defaultWithPQ := []CurveID{X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024,
+ 		X25519, CurveP256, CurveP384, CurveP521}
+ 	defaultWithoutPQ := []CurveID{X25519, CurveP256, CurveP384, CurveP521}
++	savedGODEBUG := os.Getenv("GODEBUG")
+ 	var tests = []struct {
+ 		name           string
+ 		clientConfig   func(*Config)
+@@ -2100,7 +2101,7 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 		{
+ 			name: "GODEBUG tlsmlkem=0",
+ 			preparation: func(t *testing.T) {
+-				t.Setenv("GODEBUG", "tlsmlkem=0")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"tlsmlkem=0")
+ 			},
+ 			expectClient:   defaultWithoutPQ,
+ 			expectSelected: X25519,
+@@ -2108,7 +2109,7 @@ func TestHandshakeMLKEM(t *testing.T) {
+ 		{
+ 			name: "GODEBUG tlssecpmlkem=0",
+ 			preparation: func(t *testing.T) {
+-				t.Setenv("GODEBUG", "tlssecpmlkem=0")
++				t.Setenv("GODEBUG", savedGODEBUG+","+"tlssecpmlkem=0")
+ 			},
+ 			expectClient:   []CurveID{X25519MLKEM768, X25519, CurveP256, CurveP384, CurveP521},
+ 			expectSelected: X25519MLKEM768,
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
 index 8f6d8bbdda656c..7a5ea67c7dca33 100644
 --- a/src/internal/godebugs/table.go

From 9b19fef9a71991fd396888f8cefb90aef4ba477d Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 7 Jan 2026 14:32:48 +0100
Subject: [PATCH 644/887] Prefer AES GCM over CHACHA even when hardware AES is
 not supported (#2027)

* prefer AES GCM even when hardware AES is not supported

* fips FIPS tests
---
 ...TLS-settings-with-Microsoft-policies.patch | 185 +++++++++++++++++-
 1 file changed, 180 insertions(+), 5 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index ebcb16a30cf..63f486a8dac 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -6,12 +6,15 @@ Subject: [PATCH] align TLS settings with Microsoft policies
 ---
  doc/godebug.md                             |   9 +
  src/crypto/internal/backend/cng_windows.go |   2 +-
- src/crypto/tls/defaults.go                 |  67 ++++-
+ src/crypto/tls/cipher_suites.go            |   2 +-
+ src/crypto/tls/defaults.go                 |  67 +++-
+ src/crypto/tls/handshake_client.go         |   4 +-
+ src/crypto/tls/handshake_server_tls13.go   |   2 +-
  src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 304 +++++++++++++++++++++
+ src/crypto/tls/microsoft_test.go           | 428 +++++++++++++++++++++
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 7 files changed, 388 insertions(+), 4 deletions(-)
+ 10 files changed, 516 insertions(+), 8 deletions(-)
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
@@ -47,6 +50,19 @@ index 01e42ef9cec91b..778c851c707358 100644
  	}
  	sig.BoringCrypto()
  }
+diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
+index 48f37264e61e71..d17eb19d5caee3 100644
+--- a/src/crypto/tls/cipher_suites.go
++++ b/src/crypto/tls/cipher_suites.go
+@@ -391,7 +391,7 @@ var aesgcmCiphers = map[uint16]bool{
+ // first known cipher in the peer's preference list is an AES-GCM cipher,
+ // implying the peer also has hardware support for it.
+ func isAESGCMPreferred(ciphers []uint16) bool {
+-	if !hasAESGCMHardwareSupport {
++	if !hasAESGCMHardwareSupport && ms_tlsprofile.Value() == "off" {
+ 		return false
+ 	}
+ 	for _, cID := range ciphers {
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
 index 8de8d7e0934b07..3f7c0dc2981ff4 100644
 --- a/src/crypto/tls/defaults.go
@@ -135,6 +151,41 @@ index 8de8d7e0934b07..3f7c0dc2981ff4 100644
  	switch {
  	// tlsmlkem=0 restores the pre-Go 1.24 default.
  	case tlsmlkem.Value() == "0":
+diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
+index 4f89d96ec5de28..6e48223e720764 100644
+--- a/src/crypto/tls/handshake_client.go
++++ b/src/crypto/tls/handshake_client.go
+@@ -93,7 +93,7 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
+ 		hello.secureRenegotiation = c.clientFinished[:]
+ 	}
+ 
+-	hello.cipherSuites = config.cipherSuites(hasAESGCMHardwareSupport)
++	hello.cipherSuites = config.cipherSuites(hasAESGCMHardwareSupport || ms_tlsprofile.Value() != "off")
+ 	// Don't advertise TLS 1.2-only cipher suites unless we're attempting TLS 1.2.
+ 	if maxVersion < VersionTLS12 {
+ 		hello.cipherSuites = slices.DeleteFunc(hello.cipherSuites, func(id uint16) bool {
+@@ -132,7 +132,7 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
+ 
+ 		if fips140tls.Required() {
+ 			hello.cipherSuites = append(hello.cipherSuites, allowedCipherSuitesTLS13FIPS...)
+-		} else if hasAESGCMHardwareSupport {
++		} else if hasAESGCMHardwareSupport || ms_tlsprofile.Value() != "off" {
+ 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
+ 		} else {
+ 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13NoAES...)
+diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
+index c81d0e56598634..ebd5c146757814 100644
+--- a/src/crypto/tls/handshake_server_tls13.go
++++ b/src/crypto/tls/handshake_server_tls13.go
+@@ -176,7 +176,7 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
+ 	hs.hello.compressionMethod = compressionNone
+ 
+ 	preferenceList := defaultCipherSuitesTLS13
+-	if !hasAESGCMHardwareSupport || !isAESGCMPreferred(hs.clientHello.cipherSuites) {
++	if (!hasAESGCMHardwareSupport && ms_tlsprofile.Value() == "off") || !isAESGCMPreferred(hs.clientHello.cipherSuites) {
+ 		preferenceList = defaultCipherSuitesTLS13NoAES
+ 	}
+ 	if fips140tls.Required() {
 diff --git a/src/crypto/tls/handshake_test.go b/src/crypto/tls/handshake_test.go
 index 9cea8182d04154..0e5b421f52dc95 100644
 --- a/src/crypto/tls/handshake_test.go
@@ -151,10 +202,10 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..2c0efb8aba9a3b
+index 00000000000000..248801f0680d24
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,304 @@
+@@ -0,0 +1,428 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -459,6 +510,130 @@ index 00000000000000..2c0efb8aba9a3b
 +		})
 +	}
 +}
++
++func TestMicrosoftCipherSuiteNoAES(t *testing.T) {
++	if fips140tls.Required() {
++		t.Skip("ChaCha20Poly1305 cipher suites not supported in FIPS mode")
++	}
++
++	// Enable the default Microsoft TLS profile for the duration of the test.
++	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
++
++	t.Run("TLS13", func(t *testing.T) {
++		t.Parallel()
++		clientConfig := testConfig.Clone()
++		clientConfig.MaxVersion = VersionTLS13
++
++		serverConfig := testConfig.Clone()
++		serverConfig.MaxVersion = VersionTLS13
++
++		// Check cipher suite order in ClientHello
++		// With Microsoft TLS profile, TLS 1.3 should always prefer AES over ChaCha20
++		serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
++			if len(hello.CipherSuites) == 0 {
++				t.Error("no cipher suites advertised")
++				return nil, nil
++			}
++
++			aes128Index := -1
++			aes256Index := -1
++			chachaIndex := -1
++			for i, cs := range hello.CipherSuites {
++				if cs == TLS_AES_128_GCM_SHA256 {
++					aes128Index = i
++				}
++				if cs == TLS_AES_256_GCM_SHA384 {
++					aes256Index = i
++				}
++				if cs == TLS_CHACHA20_POLY1305_SHA256 {
++					chachaIndex = i
++				}
++			}
++
++			// Microsoft profile should prefer AES over ChaCha20 in TLS 1.3
++			if chachaIndex != -1 {
++				if (aes128Index != -1 && aes128Index > chachaIndex) || (aes256Index != -1 && aes256Index > chachaIndex) {
++					t.Errorf("TLS 1.3 with Microsoft profile: AES cipher suites should come before CHACHA20_POLY1305_SHA256, got AES_128 at %d, AES_256 at %d, ChaCha at %d", aes128Index, aes256Index, chachaIndex)
++				}
++			}
++			return nil, nil
++		}
++
++		ss, cs, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatal(err)
++		}
++
++		if ss.CipherSuite != TLS_AES_128_GCM_SHA256 &&
++			ss.CipherSuite != TLS_AES_256_GCM_SHA384 &&
++			ss.CipherSuite != TLS_CHACHA20_POLY1305_SHA256 {
++			t.Errorf("unexpected TLS 1.3 cipher suite: %x", ss.CipherSuite)
++		}
++		if ss.CipherSuite != cs.CipherSuite {
++			t.Errorf("cipher suite mismatch: server=%x, client=%x", ss.CipherSuite, cs.CipherSuite)
++		}
++	})
++
++	t.Run("TLS12", func(t *testing.T) {
++		t.Parallel()
++		clientConfig := testConfig.Clone()
++		clientConfig.MaxVersion = VersionTLS12
++
++		serverConfig := testConfig.Clone()
++		serverConfig.MaxVersion = VersionTLS12
++
++		// For TLS 1.2, cipher suite ordering depends on hardware AES support.
++		// We verify that the handshake works and appropriate cipher suites are used.
++		serverConfig.GetConfigForClient = func(hello *ClientHelloInfo) (*Config, error) {
++			if len(hello.CipherSuites) == 0 {
++				t.Error("no cipher suites advertised")
++				return nil, nil
++			}
++
++			// Verify that both AES and ChaCha20 cipher suites are present
++			hasAES := false
++			hasChaCha := false
++			for _, cs := range hello.CipherSuites {
++				if cs == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ||
++					cs == TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ||
++					cs == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 ||
++					cs == TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 {
++					hasAES = true
++				}
++				if cs == TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 ||
++					cs == TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 {
++					hasChaCha = true
++				}
++			}
++
++			if !hasAES {
++				t.Error("TLS 1.2: no AES-GCM cipher suites advertised")
++			}
++			if !hasChaCha {
++				t.Error("TLS 1.2: no ChaCha20 cipher suites advertised")
++			}
++			return nil, nil
++		}
++
++		ss, cs, err := testHandshake(t, clientConfig, serverConfig)
++		if err != nil {
++			t.Fatal(err)
++		}
++
++		// Verify a reasonable TLS 1.2 cipher suite was selected
++		if ss.CipherSuite != TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 &&
++			ss.CipherSuite != TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 &&
++			ss.CipherSuite != TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 &&
++			ss.CipherSuite != TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 &&
++			ss.CipherSuite != TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 &&
++			ss.CipherSuite != TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 {
++			t.Errorf("unexpected TLS 1.2 cipher suite: %x", ss.CipherSuite)
++		}
++		if ss.CipherSuite != cs.CipherSuite {
++			t.Errorf("cipher suite mismatch: server=%x, client=%x", ss.CipherSuite, cs.CipherSuite)
++		}
++	})
++}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
 index 5f4a2b9de4fd1f..4f67758ded932d 100644
 --- a/src/crypto/tls/tls_test.go

From 40c60ebd8b38254cd9780e46c300b812b5e218b9 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 7 Jan 2026 16:09:40 +0000
Subject: [PATCH 645/887] Update submodule to latest master (d1d0fc7a):
 os/exec: avoid atomic.Bool for Cmd.startCalled

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f8ee0f84753..d1d0fc7a975 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f8ee0f84753b22254d217bf28ce8ecca7db7025c
+Subproject commit d1d0fc7a97539206e33f04bac935f6450597137c

From bf54ca073200124d267d0e70ce0a96fa0d589a8b Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 7 Jan 2026 17:56:14 +0100
Subject: [PATCH 646/887] Use the Go FIPS 140 TLS policy rather than the
 BoringSSL one (#2028)

* use the Go FIPS 140 TLS policy rather than the BoringSSL one

* fix FIPS tests
---
 patches/0004-Use-crypto-backends.patch        | 62 +------------------
 ...TLS-settings-with-Microsoft-policies.patch | 18 ++----
 2 files changed, 8 insertions(+), 72 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 0bb051cfe36..a6043be582e 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -80,9 +80,6 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   7 +
  src/crypto/tls/cipher_suites.go               |  10 +-
- src/crypto/tls/defaults_boring.go             |   2 +-
- src/crypto/tls/defaults_fips140.go            |   2 +-
- src/crypto/tls/fips140_test.go                |   2 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
  src/crypto/tls/handshake_client.go            |  12 +-
@@ -93,7 +90,6 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
  src/crypto/tls/prf.go                         |  41 ++++
- src/crypto/tls/tls_test.go                    |   2 +-
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
@@ -102,7 +98,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 98 files changed, 1509 insertions(+), 182 deletions(-)
+ 94 files changed, 1505 insertions(+), 178 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1656,7 +1652,7 @@ index e94bab74fd5774..31a3cee82c5391 100644
  		bsslModule    = "boringssl.googlesource.com/boringssl.git"
  		bsslVersion   = "v0.0.0-20251111011041-baaf868e6e8f"
 diff --git a/src/crypto/internal/fips140test/cast_test.go b/src/crypto/internal/fips140test/cast_test.go
-index 5a80006622c4c2..571f076afa2cbd 100644
+index 817dcb9a35a793..8efc547d0d52fc 100644
 --- a/src/crypto/internal/fips140test/cast_test.go
 +++ b/src/crypto/internal/fips140test/cast_test.go
 @@ -160,6 +160,7 @@ func TestConditionals(t *testing.T) {
@@ -3486,45 +3482,6 @@ index 6ed63ccc2dc1f5..48f37264e61e71 100644
  	if err != nil {
  		panic(err)
  	}
-diff --git a/src/crypto/tls/defaults_boring.go b/src/crypto/tls/defaults_boring.go
-index e88f05cc505cfb..2067bd9ebc3e50 100644
---- a/src/crypto/tls/defaults_boring.go
-+++ b/src/crypto/tls/defaults_boring.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build boringcrypto
-+//go:build goexperiment.systemcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/defaults_fips140.go b/src/crypto/tls/defaults_fips140.go
-index 19132607938a26..ee38190871b7fd 100644
---- a/src/crypto/tls/defaults_fips140.go
-+++ b/src/crypto/tls/defaults_fips140.go
-@@ -2,7 +2,7 @@
- // Use of this source code is governed by a BSD-style
- // license that can be found in the LICENSE file.
- 
--//go:build !boringcrypto
-+//go:build !goexperiment.systemcrypto
- 
- package tls
- 
-diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 96273c0fe0ea2f..3bfe7fe20966a6 100644
---- a/src/crypto/tls/fips140_test.go
-+++ b/src/crypto/tls/fips140_test.go
-@@ -7,7 +7,7 @@ package tls
- import (
- 	"crypto/ecdsa"
- 	"crypto/elliptic"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/rand"
- 	"crypto/rsa"
- 	"crypto/x509"
 diff --git a/src/crypto/tls/fipsonly/fipsonly.go b/src/crypto/tls/fipsonly/fipsonly.go
 index e702f44e986746..e506a0d8841237 100644
 --- a/src/crypto/tls/fipsonly/fipsonly.go
@@ -3953,19 +3910,6 @@ index 19f80ac2c91c20..1502dd121c0361 100644
  		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
  	}
  }
-diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 39ebb9d2f1edd3..3ab935ab1607f1 100644
---- a/src/crypto/tls/tls_test.go
-+++ b/src/crypto/tls/tls_test.go
-@@ -11,7 +11,7 @@ import (
- 	"crypto/ecdh"
- 	"crypto/ecdsa"
- 	"crypto/elliptic"
--	"crypto/internal/boring"
-+	boring "crypto/internal/backend"
- 	"crypto/rand"
- 	"crypto/tls/internal/fips140tls"
- 	"crypto/x509"
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
 index f9bd313737e21b..04548c961e74a8 100644
 --- a/src/crypto/x509/verify_test.go
@@ -4104,7 +4048,7 @@ index 2a774100a8ec67..a0cabb42b19484 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 1decebdc222d23..c095fa280b2f83 100644
+index bf2f3da535b8eb..ca66842d0753ac 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index 63f486a8dac..b06babbfa5a 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -11,10 +11,10 @@ Subject: [PATCH] align TLS settings with Microsoft policies
  src/crypto/tls/handshake_client.go         |   4 +-
  src/crypto/tls/handshake_server_tls13.go   |   2 +-
  src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 428 +++++++++++++++++++++
+ src/crypto/tls/microsoft_test.go           | 420 +++++++++++++++++++++
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 10 files changed, 516 insertions(+), 8 deletions(-)
+ 10 files changed, 508 insertions(+), 8 deletions(-)
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
@@ -202,10 +202,10 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..248801f0680d24
+index 00000000000000..b91c4cc4917dbe
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,428 @@
+@@ -0,0 +1,420 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -265,8 +265,6 @@ index 00000000000000..248801f0680d24
 +		// Adjust expectations based on supported groups.
 +		// Be explicit about the order to test the preference order under different scenarios.
 +		switch {
-+		case fips140tls.Required():
-+			defaultWithPQ = []CurveID{CurveP384, CurveP256, CurveP521}
 +		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768() && !boring.SupportsMLKEM1024():
 +			defaultWithPQ = []CurveID{CurveP384, CurveP256, CurveP521, X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768, X25519}
 +		case !boring.SupportsCurve("X25519") && !boring.SupportsMLKEM768():
@@ -446,12 +444,6 @@ index 00000000000000..248801f0680d24
 +			if fips140tls.Required() && test.expectSelected == X25519 {
 +				t.Skip("X25519 not supported in FIPS mode")
 +			}
-+			if boring.Enabled && fips140tls.Required() {
-+				switch test.expectSelected {
-+				case X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768:
-+					t.Skipf("%v not supported in FIPS mode", test.expectSelected)
-+				}
-+			}
 +			if test.preparation != nil {
 +				test.preparation(t)
 +			} else {
@@ -635,7 +627,7 @@ index 00000000000000..248801f0680d24
 +	})
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 5f4a2b9de4fd1f..4f67758ded932d 100644
+index 9bb2d0801111c2..76092416618ca0 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -1990,6 +1990,7 @@ func TestHandshakeMLKEM(t *testing.T) {

From 79fc0c2352c84e76672dc0e4029479ec1a62f262 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 7 Jan 2026 16:18:03 -0800
Subject: [PATCH 647/887] FIPS readme: add no-crypto note, clarify linking

---
 eng/doc/fips/README.md | 38 ++++++++++++++++++++++++++++----------
 1 file changed, 28 insertions(+), 10 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 5bc9f517b89..f1ddf7bd745 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -8,6 +8,7 @@ See also:
 * [The Migration Guide](../MigrationGuide.md).  Includes direct guidance on how to migrate an existing Go app to use the Microsoft build of Go and decide whether this is necessary.
 * [Cross-Platform Cryptography in the Microsoft build of Go](../CrossPlatformCryptography.md). A digestible overview of the information in the *FIPS 140 User Guide*.
 * [The Microsoft build of Go README](../../../README.md). Background information about the Microsoft build of Go and how to acquire it.
+* [The Microsoft internal policy `Microsoft.Security.Cryptography.10010`.][msc10010]
 
 # Crypto FIPS 140 support
 
@@ -63,16 +64,18 @@ These are described in the following sections in detail.
 
 ## Usage: Common configurations
 
-There are typically two goals that lead to this document. Creating a FIPS compliant app is one. The other is to comply with internal Microsoft crypto policies that have been set for Go. This table summarizes common configurations and how suitable each one is for these goals.
+The modified Go runtime is typically used to accomplish one of two goals: complying with [internal Microsoft crypto policies][msc10010] or creating a FIPS compliant app.
+The following table summarizes common configurations and how suitable each one is for these goals.
 
 > [!NOTE]
-> This section assumes the use of the Microsoft build of Go 1.24 or later.
->
-> 1.24 introduces `GODEBUG=fips140=on` as the preferred way to enable FIPS mode. See also [the Go 1.24 changelog](#go-124-feb-2025).
+> This document assumes the use of a supported version of the Microsoft build of Go: 1.24 or later.
 
 > [!NOTE]
 > Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025). Since Go 1.26, `systemcrypto` is also enabled by default on macOS.
 
+> [!TIP]
+> If an app uses no cryptography, FIPS compliance is not relevant and the internal Microsoft crypto policy doesn't apply.
+
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
 | Default, Go 1.24 | Default | Not compliant | Crypto usage is not FIPS compliant. |
@@ -461,19 +464,33 @@ Versions not listed above are not supported at all.
 >
 > The Go runtime is tested with the default configuration of each supported OpenSSL version and with the OpenSSL configurations in the [Azure Linux] 2 and [Azure Linux] 3 distributions.
 
-### Dynamic linking
+### No static linking
 
-Dynamic linking (as opposed to static linking) is a requirement for an app to be considered FIPS compliant in Microsoft. The approach the modified Go runtime takes meets that requirement.
+Microsoft's [internal policy `Microsoft.Security.Cryptography.10010`][msc10010] forbids static linking to OpenSSL.
+For Linux, we use [dlopen] when initializing OpenSSL, satisfying this requirement.
 
-For OpenSSL, Go uses [dlopen] when initializing. Sometimes this is called *dynamic loading* and not considered part of the *dynamic linking* category (https://stackoverflow.com/a/45959845), but it satisfies requirements for the same reasons as dynamic linking: the OpenSSL library provided by the OS/environment is used, and the app doesn't necessarily have to be rebuilt to take an update.
+> [!NOTE]
+> The Microsoft internal policy forbids "static linking" and requires "dynamic linking", but [dlopen] is often considered to be in a distinct category called "dynamic loading" (https://stackoverflow.com/a/45959845).
+> We have discussed this with the Crypto Board, and the [dlopen] approach does satisfy the policy requirement.
+> The key is that the Go program uses the OpenSSL library provided by the OS/environment and doesn't need to be rebuilt to take an OpenSSL update.
 
-For CNG, Go uses Windows syscalls to call the CNG APIs. This can also not be considered *dynamic linking*, but like *dynamic loading*, syscalls also mean the app is using OS-provided crypto functionality.
+> [!NOTE]
+> It's a relatively common practice in the Go ecosystem to statically link all dependencies of a Go program to produce a single binary that can run standalone.
+> This can simplify deployment and allows Go apps to run when a dynamic loader isn't present, such as in `scratch`-based containers.
+> Unfortunately, the internal policy requirement means this isn't possible to do with a Go program that uses cryptography: other dependencies can be statically linked, but not OpenSSL.
+>
+> If you are responsible for a Go app in Microsoft and it's absolutely necessary that the app is fully statically linked, contact the Crypto Board for more details.
+>
+> We have discussed support for static linking in [microsoft/go#744 *OpenSSL static linking proposal*](https://github.com/microsoft/go/issues/744)
+> However, we learned this would not be considered compliant with Microsoft policies and it isn't possible with the way OpenSSL 3 is designed to load providers, so we don't have any plans to implement it.
 
-It's common in the Go ecosystem to statically link all dependencies to produce a single binary that can run standalone (e.g. in a minimal Docker container). Unfortunately, the requirements of FIPS and the way it's implemented in Microsoft mean this is not possible for a Go program that uses the Microsoft build of Go runtime and FIPS features. If you are responsible for a Go app in Microsoft and this is impossible, contact the crypto board for more details. We opened an issue to discuss support for static linking: [microsoft/go#744 *OpenSSL static linking proposal*](https://github.com/microsoft/go/issues/744). However, as we learned this would not be considered FIPS compliant for use in Microsoft, we don't have any plans to implement it.
+The policy's requirements and recommendations for Windows and macOS don't specifically mention linking, but for clarity: the Microsoft build of Go never statically links any platform's crypto libraries.
 
 ### Portable OpenSSL
 
-The OpenSSL version present when building a program does not have to match the OpenSSL version used when running it. In fact, OpenSSL doesn't need to be present on the builder at all if the built program isn't executed on that system. *Dynamic loading* rather than *linking* makes this possible.
+The OpenSSL version present when building a program does not have to match the OpenSSL version used when running it.
+In fact, OpenSSL doesn't need to be present on the builder at all if the built program isn't executed on that system.
+*Dynamic loading at runtime* rather than *dynamic linking at build-time* makes this possible.
 
 This feature does not require any additional configuration, but it only works with OpenSSL versions known and supported by the Go toolchain.
 
@@ -589,3 +606,4 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
 [microsoft-go-images]: https://github.com/microsoft/go-images
 [OpenSSL features]: https://github.com/openssl/openssl/blob/4114964865435edc475c9ba49a7fa2b78956ab76/INSTALL.md#enable-and-disable-features
 [Azure Linux]: https://github.com/microsoft/azurelinux
+[msc10010]: https://liquid.microsoft.com/Web/Object/Read/MS.Security/Requirements/Microsoft.Security.Cryptography.10010

From 70fd4c0230f379325f4956eb5b07d199b6966ead Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 8 Jan 2026 00:45:41 +0000
Subject: [PATCH 648/887] Update submodule to latest master (28147b52): cmd/go:
 guarantee a minimum of min(4,GOMAXPROCS) to compile -c

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d1d0fc7a975..28147b52831 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d1d0fc7a97539206e33f04bac935f6450597137c
+Subproject commit 28147b528312055b535c6a69d0d4492bd502e1b0

From 98c812a5dc9dc7e70b9d532806909f2d7a5c8fd3 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 9 Jan 2026 10:37:48 +0100
Subject: [PATCH 649/887] factor out Microsoft TLS profile code to its own file
 (#2033)

---
 ...TLS-settings-with-Microsoft-policies.patch | 81 +++++++++++--------
 1 file changed, 48 insertions(+), 33 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index b06babbfa5a..7b14e4d20e6 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -7,14 +7,16 @@ Subject: [PATCH] align TLS settings with Microsoft policies
  doc/godebug.md                             |   9 +
  src/crypto/internal/backend/cng_windows.go |   2 +-
  src/crypto/tls/cipher_suites.go            |   2 +-
- src/crypto/tls/defaults.go                 |  67 +++-
+ src/crypto/tls/defaults.go                 |  17 +-
+ src/crypto/tls/defaults_microsoft.go       |  64 ++++
  src/crypto/tls/handshake_client.go         |   4 +-
  src/crypto/tls/handshake_server_tls13.go   |   2 +-
  src/crypto/tls/handshake_test.go           |   3 +
  src/crypto/tls/microsoft_test.go           | 420 +++++++++++++++++++++
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 10 files changed, 508 insertions(+), 8 deletions(-)
+ 11 files changed, 522 insertions(+), 8 deletions(-)
+ create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
@@ -64,22 +66,54 @@ index 48f37264e61e71..d17eb19d5caee3 100644
  	}
  	for _, cID := range ciphers {
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 8de8d7e0934b07..3f7c0dc2981ff4 100644
+index 8de8d7e0934b07..dd9ab351d56473 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
-@@ -5,6 +5,7 @@
- package tls
- 
- import (
-+	boring "crypto/internal/backend"
- 	"internal/godebug"
- 	"slices"
- 	_ "unsafe" // for linkname
-@@ -15,10 +16,74 @@ import (
+@@ -15,10 +15,25 @@ import (
  
  var tlsmlkem = godebug.New("tlsmlkem")
  var tlssecpmlkem = godebug.New("tlssecpmlkem")
 +var ms_tlsx25519 = godebug.New("ms_tlsx25519")
+ 
+ // defaultCurvePreferences is the default set of supported key exchanges, as
+ // well as the preference order.
+-func defaultCurvePreferences() []CurveID {
++func defaultCurvePreferences() (groups []CurveID) {
++	defer func() {
++		if ms_tlsx25519.Value() == "0" {
++			groups = slices.DeleteFunc(groups, func(c CurveID) bool {
++				return c == X25519 || c == X25519MLKEM768
++			})
++		}
++	}()
++	if ms_tlsprofile.Value() == "off" {
++		return upstreamCurvePreferences()
++	}
++	return microsoftCurvePreferences()
++}
++
++func upstreamCurvePreferences() []CurveID {
+ 	switch {
+ 	// tlsmlkem=0 restores the pre-Go 1.24 default.
+ 	case tlsmlkem.Value() == "0":
+diff --git a/src/crypto/tls/defaults_microsoft.go b/src/crypto/tls/defaults_microsoft.go
+new file mode 100644
+index 00000000000000..f01920e58bbb62
+--- /dev/null
++++ b/src/crypto/tls/defaults_microsoft.go
+@@ -0,0 +1,64 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package tls
++
++import (
++	boring "crypto/internal/backend"
++	"internal/godebug"
++	"slices"
++)
++
 +var ms_tlsprofile = godebug.New("ms_tlsprofile")
 +
 +// Support* functions are cached, so calling them multiple times is cheap.
@@ -103,22 +137,8 @@ index 8de8d7e0934b07..3f7c0dc2981ff4 100644
 +		panic("unknown GODEBUG setting ms_tlsprofile=" + ms_tlsprofile.Value())
 +	}
 +}
- 
- // defaultCurvePreferences is the default set of supported key exchanges, as
- // well as the preference order.
--func defaultCurvePreferences() []CurveID {
-+func defaultCurvePreferences() (groups []CurveID) {
-+	defer func() {
-+		if ms_tlsx25519.Value() == "0" {
-+			groups = slices.DeleteFunc(groups, func(c CurveID) bool {
-+				return c == X25519 || c == X25519MLKEM768
-+			})
-+		}
-+	}()
-+	if ms_tlsprofile.Value() == "off" {
-+		return upstreamCurvePreferences()
-+	}
-+	// For now we only have two profiles: default Microsoft and upstream (off).
++
++func microsoftCurvePreferences() (groups []CurveID) {
 +	defer func() {
 +		// Move unsupported groups to the end while preserving order for supported groups.
 +		slices.SortStableFunc(groups, func(a, b CurveID) int {
@@ -146,11 +166,6 @@ index 8de8d7e0934b07..3f7c0dc2981ff4 100644
 +		}
 +	}
 +}
-+
-+func upstreamCurvePreferences() []CurveID {
- 	switch {
- 	// tlsmlkem=0 restores the pre-Go 1.24 default.
- 	case tlsmlkem.Value() == "0":
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
 index 4f89d96ec5de28..6e48223e720764 100644
 --- a/src/crypto/tls/handshake_client.go

From 24d6ca1d6066ad1617af018d30debfeb7a9ba311 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 9 Jan 2026 11:31:41 +0100
Subject: [PATCH 650/887] align TLS 1.3 cipher suites with the Microsoft policy
 (#2034)

---
 ...TLS-settings-with-Microsoft-policies.patch | 165 +++++++++++++++---
 1 file changed, 138 insertions(+), 27 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index 7b14e4d20e6..fc94255de15 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -8,14 +8,16 @@ Subject: [PATCH] align TLS settings with Microsoft policies
  src/crypto/internal/backend/cng_windows.go |   2 +-
  src/crypto/tls/cipher_suites.go            |   2 +-
  src/crypto/tls/defaults.go                 |  17 +-
- src/crypto/tls/defaults_microsoft.go       |  64 ++++
- src/crypto/tls/handshake_client.go         |   4 +-
- src/crypto/tls/handshake_server_tls13.go   |   2 +-
+ src/crypto/tls/defaults_microsoft.go       |  83 ++++
+ src/crypto/tls/handshake_client.go         |  23 +-
+ src/crypto/tls/handshake_client_test.go    |  17 +-
+ src/crypto/tls/handshake_server_tls13.go   |  22 +-
  src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 420 +++++++++++++++++++++
+ src/crypto/tls/microsoft_test.go           | 428 +++++++++++++++++++++
+ src/crypto/tls/schannel_windows.go         |   4 +
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 11 files changed, 522 insertions(+), 8 deletions(-)
+ 13 files changed, 596 insertions(+), 21 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
@@ -98,10 +100,10 @@ index 8de8d7e0934b07..dd9ab351d56473 100644
  	case tlsmlkem.Value() == "0":
 diff --git a/src/crypto/tls/defaults_microsoft.go b/src/crypto/tls/defaults_microsoft.go
 new file mode 100644
-index 00000000000000..f01920e58bbb62
+index 00000000000000..d89507f7607e60
 --- /dev/null
 +++ b/src/crypto/tls/defaults_microsoft.go
-@@ -0,0 +1,64 @@
+@@ -0,0 +1,83 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -166,8 +168,27 @@ index 00000000000000..f01920e58bbb62
 +		}
 +	}
 +}
++
++// msDefaultCipherSuitesTLS13 is like [defaultCipherSuitesTLS13] with
++// the following changes:
++//
++//   - AES-256 comes before AES-128
++var msDefaultCipherSuitesTLS13 = []uint16{
++	TLS_AES_256_GCM_SHA384,
++	TLS_AES_128_GCM_SHA256,
++	TLS_CHACHA20_POLY1305_SHA256,
++}
++
++// msAllowedCipherSuitesTLS13FIPS is like [allowedCipherSuitesTLS13FIPS] with
++// the following changes:
++//
++//   - AES-256 comes before AES-128
++var msAllowedCipherSuitesTLS13FIPS = []uint16{
++	TLS_AES_256_GCM_SHA384,
++	TLS_AES_128_GCM_SHA256,
++}
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 4f89d96ec5de28..6e48223e720764 100644
+index 4f89d96ec5de28..b9e6188e9241ce 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -93,7 +93,7 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
@@ -179,28 +200,95 @@ index 4f89d96ec5de28..6e48223e720764 100644
  	// Don't advertise TLS 1.2-only cipher suites unless we're attempting TLS 1.2.
  	if maxVersion < VersionTLS12 {
  		hello.cipherSuites = slices.DeleteFunc(hello.cipherSuites, func(id uint16) bool {
-@@ -132,7 +132,7 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
+@@ -130,12 +130,21 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
+ 			hello.cipherSuites = nil
+ 		}
  
- 		if fips140tls.Required() {
- 			hello.cipherSuites = append(hello.cipherSuites, allowedCipherSuitesTLS13FIPS...)
+-		if fips140tls.Required() {
+-			hello.cipherSuites = append(hello.cipherSuites, allowedCipherSuitesTLS13FIPS...)
 -		} else if hasAESGCMHardwareSupport {
-+		} else if hasAESGCMHardwareSupport || ms_tlsprofile.Value() != "off" {
- 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
- 		} else {
- 			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13NoAES...)
+-			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
+-		} else {
+-			hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13NoAES...)
++		switch ms_tlsprofile.Value() {
++		case "default", "":
++			if fips140tls.Required() {
++				hello.cipherSuites = append(hello.cipherSuites, msAllowedCipherSuitesTLS13FIPS...)
++			} else {
++				hello.cipherSuites = append(hello.cipherSuites, msDefaultCipherSuitesTLS13...)
++			}
++		case "off":
++			if fips140tls.Required() {
++				hello.cipherSuites = append(hello.cipherSuites, allowedCipherSuitesTLS13FIPS...)
++			} else if hasAESGCMHardwareSupport {
++				hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13...)
++			} else {
++				hello.cipherSuites = append(hello.cipherSuites, defaultCipherSuitesTLS13NoAES...)
++			}
+ 		}
+ 
+ 		if len(hello.supportedCurves) == 0 {
+diff --git a/src/crypto/tls/handshake_client_test.go b/src/crypto/tls/handshake_client_test.go
+index e7de0b59119b8a..d9d1406371d13c 100644
+--- a/src/crypto/tls/handshake_client_test.go
++++ b/src/crypto/tls/handshake_client_test.go
+@@ -2704,9 +2704,20 @@ func testTLS13OnlyClientHelloCipherSuite(t *testing.T, ciphers []uint16) {
+ 	serverConfig := &Config{
+ 		Certificates: testConfig.Certificates,
+ 		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
+-			expectedCiphersuites := defaultCipherSuitesTLS13NoAES
+-			if fips140tls.Required() {
+-				expectedCiphersuites = allowedCipherSuitesTLS13FIPS
++			var expectedCiphersuites []uint16
++			switch ms_tlsprofile.Value() {
++			case "default", "":
++				if fips140tls.Required() {
++					expectedCiphersuites = msAllowedCipherSuitesTLS13FIPS
++				} else {
++					expectedCiphersuites = msDefaultCipherSuitesTLS13
++				}
++			case "off":
++				if fips140tls.Required() {
++					expectedCiphersuites = allowedCipherSuitesTLS13FIPS
++				} else {
++					expectedCiphersuites = defaultCipherSuitesTLS13NoAES
++				}
+ 			}
+ 			if len(chi.CipherSuites) != len(expectedCiphersuites) {
+ 				t.Errorf("only TLS 1.3 suites should be advertised, got=%x", chi.CipherSuites)
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index c81d0e56598634..ebd5c146757814 100644
+index c81d0e56598634..11fbfc58af3959 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -176,7 +176,7 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
+@@ -175,12 +175,22 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
+ 	hs.hello.sessionId = hs.clientHello.sessionId
  	hs.hello.compressionMethod = compressionNone
  
- 	preferenceList := defaultCipherSuitesTLS13
+-	preferenceList := defaultCipherSuitesTLS13
 -	if !hasAESGCMHardwareSupport || !isAESGCMPreferred(hs.clientHello.cipherSuites) {
-+	if (!hasAESGCMHardwareSupport && ms_tlsprofile.Value() == "off") || !isAESGCMPreferred(hs.clientHello.cipherSuites) {
- 		preferenceList = defaultCipherSuitesTLS13NoAES
+-		preferenceList = defaultCipherSuitesTLS13NoAES
+-	}
+-	if fips140tls.Required() {
+-		preferenceList = allowedCipherSuitesTLS13FIPS
++	var preferenceList []uint16
++	switch ms_tlsprofile.Value() {
++	case "default", "":
++		if fips140tls.Required() {
++			preferenceList = msAllowedCipherSuitesTLS13FIPS
++		} else {
++			preferenceList = msDefaultCipherSuitesTLS13
++		}
++	case "off":
++		preferenceList = defaultCipherSuitesTLS13
++		if !hasAESGCMHardwareSupport || !isAESGCMPreferred(hs.clientHello.cipherSuites) {
++			preferenceList = defaultCipherSuitesTLS13NoAES
++		}
++		if fips140tls.Required() {
++			preferenceList = allowedCipherSuitesTLS13FIPS
++		}
  	}
- 	if fips140tls.Required() {
+ 	for _, suiteID := range preferenceList {
+ 		hs.suite = mutualCipherSuiteTLS13(hs.clientHello.cipherSuites, suiteID)
 diff --git a/src/crypto/tls/handshake_test.go b/src/crypto/tls/handshake_test.go
 index 9cea8182d04154..0e5b421f52dc95 100644
 --- a/src/crypto/tls/handshake_test.go
@@ -217,10 +305,10 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..b91c4cc4917dbe
+index 00000000000000..7e7d8ba37c2df9
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,420 @@
+@@ -0,0 +1,428 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -270,8 +358,7 @@ index 00000000000000..b91c4cc4917dbe
 +	// This test is designed to verify the default Microsoft TLS profile's group preferences
 +	// and behavior during the handshake. It is based on TestHandshakeMLKEM.
 +
-+	// Enable the default Microsoft TLS profile for the duration of the test.
-+	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
++	enableMicrosoftProfile(t)
 +	savedGODEBUG := os.Getenv("GODEBUG")
 +
 +	defaultWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
@@ -523,8 +610,7 @@ index 00000000000000..b91c4cc4917dbe
 +		t.Skip("ChaCha20Poly1305 cipher suites not supported in FIPS mode")
 +	}
 +
-+	// Enable the default Microsoft TLS profile for the duration of the test.
-+	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
++	enableMicrosoftProfile(t)
 +
 +	t.Run("TLS13", func(t *testing.T) {
 +		t.Parallel()
@@ -641,6 +727,31 @@ index 00000000000000..b91c4cc4917dbe
 +		}
 +	})
 +}
++
++func TestMicrosoftTLS13OnlyClientHelloCipherSuite(t *testing.T) {
++	enableMicrosoftProfile(t)
++
++	testTLS13OnlyClientHelloCipherSuite(t, nil)
++}
++
++func enableMicrosoftProfile(t *testing.T) {
++	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
++}
+diff --git a/src/crypto/tls/schannel_windows.go b/src/crypto/tls/schannel_windows.go
+index cccfb8866f88ab..72111aa2a26f22 100644
+--- a/src/crypto/tls/schannel_windows.go
++++ b/src/crypto/tls/schannel_windows.go
+@@ -40,6 +40,10 @@ func setSchannelCipherSuites(suites, versions []uint16) {
+ 	defaultCipherSuitesTLS13 = filterCipherSuites(suites, defaultCipherSuitesTLS13)
+ 	allowedCipherSuitesTLS13FIPS = filterCipherSuites(suites, allowedCipherSuitesTLS13FIPS)
+ 
++	// Update MS-specific variables too.
++	msDefaultCipherSuitesTLS13 = defaultCipherSuitesTLS13
++	msAllowedCipherSuitesTLS13FIPS = allowedCipherSuitesTLS13FIPS
++
+ 	// Schannel doesn't have a separate preference order without AES.
+ 	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder
+ 	defaultCipherSuitesTLS13NoAES = defaultCipherSuitesTLS13
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
 index 9bb2d0801111c2..76092416618ca0 100644
 --- a/src/crypto/tls/tls_test.go

From 4ceb8708f35ec5685e531afd7b6d0783477adf4b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Jan 2026 12:57:37 +0000
Subject: [PATCH 651/887] build(deps): bump golang.org/x/sys from 0.39.0 to
 0.40.0 in /eng/_util (#2035)

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.39.0 to 0.40.0.
- [Commits](https://github.com/golang/sys/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 633ebdc115c..c621aa3acb9 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.48.0
-	golang.org/x/sys v0.39.0
+	golang.org/x/sys v0.40.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 28f016f3bfd..876942324ef 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -58,8 +58,8 @@ golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
 golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sys v0.39.0 h1:CvCKL8MeisomCi6qNZ+wbb0DN9E5AATixKsvNtMoMFk=
-golang.org/x/sys v0.39.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
+golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
 golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=

From c192f07680f36b7f0aec91d7d3cf77e2409d3a3d Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 9 Jan 2026 16:21:11 +0100
Subject: [PATCH 652/887] align TLS 1.2 cipher suites with the Microsoft policy

---
 ...TLS-settings-with-Microsoft-policies.patch | 239 +++++++++++++++---
 1 file changed, 203 insertions(+), 36 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index fc94255de15..8e48604627c 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -6,18 +6,18 @@ Subject: [PATCH] align TLS settings with Microsoft policies
 ---
  doc/godebug.md                             |   9 +
  src/crypto/internal/backend/cng_windows.go |   2 +-
- src/crypto/tls/cipher_suites.go            |   2 +-
- src/crypto/tls/defaults.go                 |  17 +-
- src/crypto/tls/defaults_microsoft.go       |  83 ++++
- src/crypto/tls/handshake_client.go         |  23 +-
+ src/crypto/tls/common.go                   |   9 +-
+ src/crypto/tls/defaults.go                 |  47 +-
+ src/crypto/tls/defaults_microsoft.go       | 153 +++++++
+ src/crypto/tls/handshake_client.go         |  21 +-
  src/crypto/tls/handshake_client_test.go    |  17 +-
  src/crypto/tls/handshake_server_tls13.go   |  22 +-
  src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 428 +++++++++++++++++++++
- src/crypto/tls/schannel_windows.go         |   4 +
+ src/crypto/tls/microsoft_test.go           | 481 +++++++++++++++++++++
+ src/crypto/tls/schannel_windows.go         |   7 +
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 13 files changed, 596 insertions(+), 21 deletions(-)
+ 13 files changed, 751 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
@@ -54,21 +54,28 @@ index 01e42ef9cec91b..778c851c707358 100644
  	}
  	sig.BoringCrypto()
  }
-diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 48f37264e61e71..d17eb19d5caee3 100644
---- a/src/crypto/tls/cipher_suites.go
-+++ b/src/crypto/tls/cipher_suites.go
-@@ -391,7 +391,7 @@ var aesgcmCiphers = map[uint16]bool{
- // first known cipher in the peer's preference list is an AES-GCM cipher,
- // implying the peer also has hardware support for it.
- func isAESGCMPreferred(ciphers []uint16) bool {
--	if !hasAESGCMHardwareSupport {
-+	if !hasAESGCMHardwareSupport && ms_tlsprofile.Value() == "off" {
- 		return false
+diff --git a/src/crypto/tls/common.go b/src/crypto/tls/common.go
+index 099a11ca63da75..68cb28f19e320d 100644
+--- a/src/crypto/tls/common.go
++++ b/src/crypto/tls/common.go
+@@ -1179,7 +1179,14 @@ func (c *Config) cipherSuites(aesGCMPreferred bool) []uint16 {
  	}
- 	for _, cID := range ciphers {
+ 	if fips140tls.Required() {
+ 		cipherSuites = slices.DeleteFunc(cipherSuites, func(id uint16) bool {
+-			return !slices.Contains(allowedCipherSuitesFIPS, id)
++			switch ms_tlsprofile.Value() {
++			case "default", "":
++				return !slices.Contains(msAllowedCipherSuitesFIPS, id)
++			case "off":
++				return !slices.Contains(allowedCipherSuitesFIPS, id)
++			default:
++				panic("unreachable")
++			}
+ 		})
+ 	}
+ 	return cipherSuites
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 8de8d7e0934b07..dd9ab351d56473 100644
+index 8de8d7e0934b07..a73737e95c3059 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
 @@ -15,10 +15,25 @@ import (
@@ -98,12 +105,55 @@ index 8de8d7e0934b07..dd9ab351d56473 100644
  	switch {
  	// tlsmlkem=0 restores the pre-Go 1.24 default.
  	case tlsmlkem.Value() == "0":
+@@ -59,19 +74,35 @@ var tlsrsakex = godebug.New("tlsrsakex")
+ var tls3des = godebug.New("tls3des")
+ 
+ func supportedCipherSuites(aesGCMPreferred bool) []uint16 {
+-	if aesGCMPreferred {
+-		return slices.Clone(cipherSuitesPreferenceOrder)
+-	} else {
+-		return slices.Clone(cipherSuitesPreferenceOrderNoAES)
++	switch ms_tlsprofile.Value() {
++	case "default", "":
++		return slices.Clone(msCipherSuitesPreferenceOrder)
++	case "off":
++		if aesGCMPreferred {
++			return slices.Clone(cipherSuitesPreferenceOrder)
++		} else {
++			return slices.Clone(cipherSuitesPreferenceOrderNoAES)
++		}
++	default:
++		panic("unreachable")
+ 	}
+ }
+ 
+ func defaultCipherSuites(aesGCMPreferred bool) []uint16 {
+ 	cipherSuites := supportedCipherSuites(aesGCMPreferred)
+ 	return slices.DeleteFunc(cipherSuites, func(c uint16) bool {
+-		return disabledCipherSuites[c] ||
+-			tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
+-			tls3des.Value() != "1" && tdesCiphers[c]
++		switch ms_tlsprofile.Value() {
++		case "default", "":
++			return msDisabledCipherSuites[c] ||
++				tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
++				tls3des.Value() != "1" && tdesCiphers[c]
++		case "off":
++			return disabledCipherSuites[c] ||
++				tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
++				tls3des.Value() != "1" && tdesCiphers[c]
++		default:
++			panic("unreachable")
++		}
+ 	})
+ }
+ 
 diff --git a/src/crypto/tls/defaults_microsoft.go b/src/crypto/tls/defaults_microsoft.go
 new file mode 100644
-index 00000000000000..d89507f7607e60
+index 00000000000000..6a3dddaf6b0ed1
 --- /dev/null
 +++ b/src/crypto/tls/defaults_microsoft.go
-@@ -0,0 +1,83 @@
+@@ -0,0 +1,153 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -187,19 +237,80 @@ index 00000000000000..d89507f7607e60
 +	TLS_AES_256_GCM_SHA384,
 +	TLS_AES_128_GCM_SHA256,
 +}
++
++// msCipherSuitesPreferenceOrder is like [cipherSuitesPreferenceOrder] with
++// the following changes:
++//
++//   - AES-256 comes before AES-128
++//   - CBC_SHA256 comes before CBC_SHA, neither have Lucky13 mitigations when using the crypto backends,
++//     so better pick the stronger one first
++var msCipherSuitesPreferenceOrder = []uint16{
++	// AEADs w/ ECDHE
++	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
++	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
++	TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,
++
++	// CBC w/ ECDHE
++	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
++	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
++	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
++
++	// AEADs w/o ECDHE
++	TLS_RSA_WITH_AES_256_GCM_SHA384,
++	TLS_RSA_WITH_AES_128_GCM_SHA256,
++
++	// CBC w/o ECDHE
++	TLS_RSA_WITH_AES_128_CBC_SHA256,
++	TLS_RSA_WITH_AES_256_CBC_SHA,
++	TLS_RSA_WITH_AES_128_CBC_SHA,
++
++	// 3DES
++	TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
++	TLS_RSA_WITH_3DES_EDE_CBC_SHA,
++
++	// RC4
++	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_RC4_128_SHA,
++	TLS_RSA_WITH_RC4_128_SHA,
++}
++
++// msAllowedCipherSuitesFIPS is like [allowedCipherSuitesFIPS] with
++// the following changes:
++//
++//   - AES-256 comes before AES-128
++var msAllowedCipherSuitesFIPS = []uint16{
++	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
++	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
++	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
++	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
++	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
++	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
++}
++
++// msDisabledCipherSuites is like [disabledCipherSuites] with
++// the following changes:
++//
++//   - CBC_SHA is disabled because they lack Lucky13 mitigations when using the crypto backends
++var msDisabledCipherSuites = map[uint16]bool{
++	// CBC_SHA
++	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: true,
++	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA:   true,
++	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: true,
++	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA:   true,
++
++	// CBC_SHA256
++	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: true,
++	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256:   true,
++	TLS_RSA_WITH_AES_128_CBC_SHA256:         true,
++
++	// RC4
++	TLS_ECDHE_ECDSA_WITH_RC4_128_SHA: true,
++	TLS_ECDHE_RSA_WITH_RC4_128_SHA:   true,
++	TLS_RSA_WITH_RC4_128_SHA:         true,
++}
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 4f89d96ec5de28..b9e6188e9241ce 100644
+index 4f89d96ec5de28..7d94bdbcb521ac 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -93,7 +93,7 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
- 		hello.secureRenegotiation = c.clientFinished[:]
- 	}
- 
--	hello.cipherSuites = config.cipherSuites(hasAESGCMHardwareSupport)
-+	hello.cipherSuites = config.cipherSuites(hasAESGCMHardwareSupport || ms_tlsprofile.Value() != "off")
- 	// Don't advertise TLS 1.2-only cipher suites unless we're attempting TLS 1.2.
- 	if maxVersion < VersionTLS12 {
- 		hello.cipherSuites = slices.DeleteFunc(hello.cipherSuites, func(id uint16) bool {
 @@ -130,12 +130,21 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
  			hello.cipherSuites = nil
  		}
@@ -305,10 +416,10 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..7e7d8ba37c2df9
+index 00000000000000..bce4691ad2c137
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,428 @@
+@@ -0,0 +1,481 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -734,20 +845,76 @@ index 00000000000000..7e7d8ba37c2df9
 +	testTLS13OnlyClientHelloCipherSuite(t, nil)
 +}
 +
++func TestMicrosoftCipherSuitePreferenceGCM256(t *testing.T) {
++	enableMicrosoftProfile(t)
++
++	testCipherSuitePreferenceOrder(t, VersionTLS12, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
++		[]uint16{TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384},
++		nil,
++	)
++}
++
++func TestMicrosoftCipherSuitePreferenceCBCSHA1(t *testing.T) {
++	enableMicrosoftProfile(t)
++
++	testCipherSuitePreferenceOrder(t, VersionTLS12, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
++		[]uint16{TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA},
++		[]uint16{TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA},
++	)
++}
++
++func TestMicrosoftCipherSuitePreferenceCBC256(t *testing.T) {
++	enableMicrosoftProfile(t)
++
++	testCipherSuitePreferenceOrder(t, VersionTLS12, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
++		[]uint16{TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256},
++		[]uint16{TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256},
++	)
++}
++
++func testCipherSuitePreferenceOrder(t *testing.T, maxVersion uint16, expected uint16, client, server []uint16) {
++	serverConfig := &Config{
++		Certificates: testConfig.Certificates,
++		MaxVersion:   maxVersion,
++		CipherSuites: server,
++		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
++			if chi.CipherSuites[0] != expected {
++				t.Error("the advertised order should not depend on Config.CipherSuites")
++			}
++			return nil, nil
++		},
++	}
++	clientConfig := &Config{
++		CipherSuites:       client,
++		MaxVersion:         maxVersion,
++		InsecureSkipVerify: true,
++	}
++	state, _, err := testHandshake(t, clientConfig, serverConfig)
++	if err != nil {
++		t.Fatalf("handshake failed: %s", err)
++	}
++	if state.CipherSuite != expected {
++		t.Error("the preference order should not depend on Config.CipherSuites")
++	}
++}
++
 +func enableMicrosoftProfile(t *testing.T) {
 +	t.Setenv("GODEBUG", strings.ReplaceAll(os.Getenv("GODEBUG"), "ms_tlsprofile=off", "")+",ms_tlsprofile=default")
 +}
 diff --git a/src/crypto/tls/schannel_windows.go b/src/crypto/tls/schannel_windows.go
-index cccfb8866f88ab..72111aa2a26f22 100644
+index cccfb8866f88ab..b2896e95e74686 100644
 --- a/src/crypto/tls/schannel_windows.go
 +++ b/src/crypto/tls/schannel_windows.go
-@@ -40,6 +40,10 @@ func setSchannelCipherSuites(suites, versions []uint16) {
+@@ -40,6 +40,13 @@ func setSchannelCipherSuites(suites, versions []uint16) {
  	defaultCipherSuitesTLS13 = filterCipherSuites(suites, defaultCipherSuitesTLS13)
  	allowedCipherSuitesTLS13FIPS = filterCipherSuites(suites, allowedCipherSuitesTLS13FIPS)
  
 +	// Update MS-specific variables too.
 +	msDefaultCipherSuitesTLS13 = defaultCipherSuitesTLS13
 +	msAllowedCipherSuitesTLS13FIPS = allowedCipherSuitesTLS13FIPS
++	msCipherSuitesPreferenceOrder = cipherSuitesPreferenceOrder
++	msAllowedCipherSuitesFIPS = allowedCipherSuitesFIPS
++	msDisabledCipherSuites = disabledCipherSuites
 +
  	// Schannel doesn't have a separate preference order without AES.
  	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder

From 0caebac04bc23ff920c0502098eaf6591b8ed1ff Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 9 Jan 2026 16:42:30 +0100
Subject: [PATCH 653/887] fix fips tests

---
 ...12-align-TLS-settings-with-Microsoft-policies.patch | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index 8e48604627c..d59a07e65d6 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -13,11 +13,11 @@ Subject: [PATCH] align TLS settings with Microsoft policies
  src/crypto/tls/handshake_client_test.go    |  17 +-
  src/crypto/tls/handshake_server_tls13.go   |  22 +-
  src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 481 +++++++++++++++++++++
+ src/crypto/tls/microsoft_test.go           | 483 +++++++++++++++++++++
  src/crypto/tls/schannel_windows.go         |   7 +
  src/crypto/tls/tls_test.go                 |   5 +-
  src/internal/godebugs/table.go             |   2 +
- 13 files changed, 751 insertions(+), 27 deletions(-)
+ 13 files changed, 753 insertions(+), 27 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
@@ -416,10 +416,10 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..bce4691ad2c137
+index 00000000000000..e3cec5f2956867
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,481 @@
+@@ -0,0 +1,483 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -855,6 +855,8 @@ index 00000000000000..bce4691ad2c137
 +}
 +
 +func TestMicrosoftCipherSuitePreferenceCBCSHA1(t *testing.T) {
++	skipFIPS(t) // CBC_SHA1 cipher suites not supported in FIPS mode
++
 +	enableMicrosoftProfile(t)
 +
 +	testCipherSuitePreferenceOrder(t, VersionTLS12, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,

From a17512c2724c480fbef6509e7dc1f2df3ede13c8 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 9 Jan 2026 16:08:11 +0000
Subject: [PATCH 654/887] Update submodule to latest master (108b333d): cmd/go:
 only use check cache action's dependencies to build vet config

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 28147b52831..108b333d510 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 28147b528312055b535c6a69d0d4492bd502e1b0
+Subproject commit 108b333d510c1f60877ac917375d7931791acfe6

From 423c62b7ac47c7c87f099a459b6e0753e201900e Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Mon, 12 Jan 2026 09:20:07 +0100
Subject: [PATCH 655/887] don't require system fips mode on Windows

---
 eng/doc/fips/README.md                        |  4 ++
 ...03-Implement-crypto-internal-backend.patch | 22 ++++------
 ...TLS-settings-with-Microsoft-policies.patch | 40 ++++++-------------
 3 files changed, 25 insertions(+), 41 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index f1ddf7bd745..404c86c2275 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -309,6 +309,9 @@ To enable FIPS mode on Windows, [enable the Windows FIPS policy](https://docs.mi
 
 For testing purposes, Windows FIPS policy can be enabled via the registry key `HKLM\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`, dword value `Enabled` set to `1`.
 
+CNG cryptographic primitives are FIPS compliant by default.
+Since Go 1.26, setting the enabled FIPS preference will not cause a panic on Windows even if the Windows FIPS policy is not enabled.
+
 ### macOS FIPS mode (CommonCrypto/CryptoKit)
 
 A platform-specific FIPS preference is never detected on macOS.
@@ -526,6 +529,7 @@ This list of major changes is intended for quick reference and for access to his
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
 - The macOS backend is no longer "preview" and is now fully supported.
 - `systemcrypto` can be disabled at build time using `MS_GO_NOSYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+- Setting the enabled FIPS preference will not cause a panic on Windows even if the Windows FIPS policy is not enabled.
 
 ### Go 1.25.2 (Oct 2025)
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 85f3526d266..ad0aa46da0b 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -29,9 +29,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 428 ++++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 422 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 426 +++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 426 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -53,7 +53,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2730 insertions(+), 20 deletions(-)
+ 44 files changed, 2724 insertions(+), 20 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -781,7 +781,7 @@ index a4b3a0422f2f41..ce290ab4617cfd 100644
  	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index bc7504e5b1c39a..734890ae6373c6 100644
+index 036eda13bc8807..33a79409ecc1fe 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -928,10 +928,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..01e42ef9cec91b
+index 00000000000000..829f5b62f70a93
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,428 @@
+@@ -0,0 +1,422 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -955,14 +955,8 @@ index 00000000000000..01e42ef9cec91b
 +)
 +
 +func init() {
-+	fn := func() bool {
-+		enabled, err := cng.FIPS()
-+		if err != nil {
-+			panic("cngcrypto: unknown FIPS mode: " + err.Error())
-+		}
-+		return enabled
-+	}
-+	if err := fips140.Check(fn); err != nil {
++	// Windows is considered FIPS compliant.
++	if err := fips140.Check(func() bool { return true }); err != nil {
 +		panic("cngcrypto: " + err.Error())
 +	}
 +	sig.BoringCrypto()
diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
index d59a07e65d6..06d77fc54d7 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
@@ -4,20 +4,19 @@ Date: Fri, 12 Dec 2025 16:46:44 +0100
 Subject: [PATCH] align TLS settings with Microsoft policies
 
 ---
- doc/godebug.md                             |   9 +
- src/crypto/internal/backend/cng_windows.go |   2 +-
- src/crypto/tls/common.go                   |   9 +-
- src/crypto/tls/defaults.go                 |  47 +-
- src/crypto/tls/defaults_microsoft.go       | 153 +++++++
- src/crypto/tls/handshake_client.go         |  21 +-
- src/crypto/tls/handshake_client_test.go    |  17 +-
- src/crypto/tls/handshake_server_tls13.go   |  22 +-
- src/crypto/tls/handshake_test.go           |   3 +
- src/crypto/tls/microsoft_test.go           | 483 +++++++++++++++++++++
- src/crypto/tls/schannel_windows.go         |   7 +
- src/crypto/tls/tls_test.go                 |   5 +-
- src/internal/godebugs/table.go             |   2 +
- 13 files changed, 753 insertions(+), 27 deletions(-)
+ doc/godebug.md                           |   9 +
+ src/crypto/tls/common.go                 |   9 +-
+ src/crypto/tls/defaults.go               |  47 ++-
+ src/crypto/tls/defaults_microsoft.go     | 153 +++++++
+ src/crypto/tls/handshake_client.go       |  21 +-
+ src/crypto/tls/handshake_client_test.go  |  17 +-
+ src/crypto/tls/handshake_server_tls13.go |  22 +-
+ src/crypto/tls/handshake_test.go         |   3 +
+ src/crypto/tls/microsoft_test.go         | 483 +++++++++++++++++++++++
+ src/crypto/tls/schannel_windows.go       |   7 +
+ src/crypto/tls/tls_test.go               |   5 +-
+ src/internal/godebugs/table.go           |   2 +
+ 12 files changed, 752 insertions(+), 26 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
@@ -41,19 +40,6 @@ index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
  ### Go 1.25
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
-diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
-index 01e42ef9cec91b..778c851c707358 100644
---- a/src/crypto/internal/backend/cng_windows.go
-+++ b/src/crypto/internal/backend/cng_windows.go
-@@ -29,7 +29,7 @@ func init() {
- 		return enabled
- 	}
- 	if err := fips140.Check(fn); err != nil {
--		panic("cngcrypto: " + err.Error())
-+		//panic("cngcrypto: " + err.Error())
- 	}
- 	sig.BoringCrypto()
- }
 diff --git a/src/crypto/tls/common.go b/src/crypto/tls/common.go
 index 099a11ca63da75..68cb28f19e320d 100644
 --- a/src/crypto/tls/common.go

From 5eed9c1381fbd60275f637432aa7331d7cf73370 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Mon, 12 Jan 2026 09:26:30 +0100
Subject: [PATCH 656/887] cleanup build scripts

---
 .../cmd/run-builder/systemfips_fallback.go    |  2 +-
 .../cmd/run-builder/systemfips_windows.go     | 55 -------------------
 eng/_util/go.mod                              |  1 -
 eng/_util/go.sum                              |  2 -
 4 files changed, 1 insertion(+), 59 deletions(-)
 delete mode 100644 eng/_util/cmd/run-builder/systemfips_windows.go

diff --git a/eng/_util/cmd/run-builder/systemfips_fallback.go b/eng/_util/cmd/run-builder/systemfips_fallback.go
index c876c9dc031..e66b19aada0 100644
--- a/eng/_util/cmd/run-builder/systemfips_fallback.go
+++ b/eng/_util/cmd/run-builder/systemfips_fallback.go
@@ -1,7 +1,7 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
 
-//go:build !windows && !linux
+//go:build !linux
 
 package main
 
diff --git a/eng/_util/cmd/run-builder/systemfips_windows.go b/eng/_util/cmd/run-builder/systemfips_windows.go
deleted file mode 100644
index 64d03bd981c..00000000000
--- a/eng/_util/cmd/run-builder/systemfips_windows.go
+++ /dev/null
@@ -1,55 +0,0 @@
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT License.
-
-package main
-
-import (
-	"fmt"
-	"log"
-
-	"golang.org/x/sys/windows/registry"
-)
-
-// enableSystemWideFIPS enables Windows system-wide FIPS and returns a state-restoring func in case
-// the host will be used later by another process. If the host is simultaneously shared, enabling
-// system-wide FIPS may interfere because this policy is a machine setting.
-func enableSystemWideFIPS() (restore func(), err error) {
-	key, err := registry.OpenKey(
-		registry.LOCAL_MACHINE,
-		`SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy`,
-		registry.QUERY_VALUE|registry.SET_VALUE)
-	if err != nil {
-		return nil, err
-	}
-
-	enabled, enabledType, err := key.GetIntegerValue("Enabled")
-	if err != nil {
-		return nil, err
-	}
-
-	if enabledType != registry.DWORD {
-		return nil, fmt.Errorf("unexpected FIPS algorithm policy Enabled key type: %v", enabledType)
-	}
-
-	if enabled == 1 {
-		log.Println("FIPS algorithm policy already enabled.")
-		return nil, nil
-	}
-
-	log.Printf("Found FIPS algorithm policy Enabled value: %v\n", enabled)
-	if err := key.SetDWordValue("Enabled", 1); err != nil {
-		return nil, err
-	}
-
-	log.Println("Enabled FIPS algorithm policy.")
-
-	return func() {
-		defer key.Close()
-		err := key.SetDWordValue("Enabled", uint32(enabled))
-		if err != nil {
-			log.Printf("Unable to set FIPS algorithm policy to original value %v: %v\n", enabled, err)
-			return
-		}
-		log.Printf("Successfully reset FIPS algorithm policy back to original value %v: %v\n", enabled, err)
-	}, nil
-}
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index c621aa3acb9..fa4307c37a9 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -11,7 +11,6 @@ require (
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.48.0
-	golang.org/x/sys v0.40.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 876942324ef..2922b00f515 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -58,8 +58,6 @@ golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
 golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
-golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
 golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
 golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
 golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=

From ab9a4f9179d722c47fc0d62645c86abb7653ebd0 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 12 Jan 2026 16:03:04 +0000
Subject: [PATCH 657/887] Update submodule to latest master (fed3b0a2):
 cmd/dist: fix goroot typo in panic message

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 108b333d510..fed3b0a2984 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 108b333d510c1f60877ac917375d7931791acfe6
+Subproject commit fed3b0a298464457c58d1150bdb3942f22bd6220

From 7f4667644d5eb3f90596d08194ef24aaeca06d04 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 13 Jan 2026 10:15:22 +0100
Subject: [PATCH 658/887] fallback to Go crypto when RSA key size is not
 supported

---
 eng/doc/CrossPlatformCryptography.md          |  2 -
 ...03-Implement-crypto-internal-backend.patch | 82 ++++++++++++++-----
 patches/0004-Use-crypto-backends.patch        | 71 ++++++++--------
 3 files changed, 96 insertions(+), 59 deletions(-)

diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 8996d3793eb..17b727ccb1c 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -146,8 +146,6 @@ This section includes the following packages:
 
 - [crypto/rsa](https://pkg.go.dev/crypto/rsa)
 
-[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.
-
 Multi-prime RSA keys are not supported.
 
 The RSA key size is subject to the limitations of the underlying cryptographic library.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index ad0aa46da0b..502be7f7737 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -24,14 +24,14 @@ desired goexperiments and build tags.
  src/cmd/internal/testdir/testdir_test.go      |   7 +
  src/cmd/link/internal/ld/main.go              |  20 +-
  src/cmd/link/link_test.go                     |   8 +
- src/crypto/internal/backend/backend_test.go   |  30 ++
+ src/crypto/internal/backend/backend_test.go   |  56 +++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 422 +++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 425 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 426 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 430 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -46,14 +46,14 @@ desired goexperiments and build tags.
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 375 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 415 +++++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 424 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  15 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2724 insertions(+), 20 deletions(-)
+ 44 files changed, 2766 insertions(+), 20 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -815,10 +815,10 @@ index 036eda13bc8807..33a79409ecc1fe 100644
  	tmpdir := t.TempDir()
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
-index 00000000000000..c2c06d3bff8c74
+index 00000000000000..093acd82556330
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_test.go
-@@ -0,0 +1,30 @@
+@@ -0,0 +1,56 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -849,6 +849,32 @@ index 00000000000000..c2c06d3bff8c74
 +func TestUnreachableExceptTests(t *testing.T) {
 +	UnreachableExceptTests()
 +}
++
++func TestSupportsRSAPrivateKey(t *testing.T) {
++	if !Enabled {
++		t.Skip("BoringCrypto not enabled")
++	}
++	tests := []struct {
++		bitLen    int
++		numPrimes int
++		supported bool
++	}{
++		{2048, 2, true},
++		{3072, 2, true},
++		{4096, 2, true},
++		{2048, 3, false},
++		{3072, 3, false},
++		{4096, 3, false},
++	}
++	for _, test := range tests {
++		t.Run("", func(t *testing.T) {
++			supported := SupportsRSAPrivateKey(test.bitLen, test.numPrimes)
++			if supported != test.supported {
++				t.Errorf("SupportsRSAPrivateKey(%d, %d) = %v; want %v", test.bitLen, test.numPrimes, supported, test.supported)
++			}
++		})
++	}
++}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
 new file mode 100644
 index 00000000000000..20251a290dc2e0
@@ -928,10 +954,10 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..829f5b62f70a93
+index 00000000000000..0a53f791c34ceb
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,422 @@
+@@ -0,0 +1,425 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1093,9 +1119,12 @@ index 00000000000000..829f5b62f70a93
 +	return cng.VerifyECDSA(pub, hash, r, s)
 +}
 +
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	// CNG only supports 2-prime RSA keys.
-+	return primes == 2
++func SupportsRSAPrivateKey(bits, primes int) bool {
++	return primes == 2 && SupportsRSAPublicKey(bits)
++}
++
++func SupportsRSAPublicKey(bits int) bool {
++	return bits >= 512 && bits%8 == 0 && bits <= 16384
 +}
 +
 +func SupportsRSASaltLength(sign bool, salt int) bool {
@@ -1408,10 +1437,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..1ac8f2fd8b6339
+index 00000000000000..80b6e9d9f5ec09
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,426 @@
+@@ -0,0 +1,430 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1569,8 +1598,12 @@ index 00000000000000..1ac8f2fd8b6339
 +	return xcrypto.VerifyECDSA(pub, hash, sig)
 +}
 +
-+func SupportsRSAKeyPrimes(primes int) bool {
-+	return primes == 2
++func SupportsRSAPrivateKey(bits, primes int) bool {
++	return primes == 2 && SupportsRSAPublicKey(bits)
++}
++
++func SupportsRSAPublicKey(bits int) bool {
++	return bits >= 1024 && bits%8 == 0 && bits <= 16384
 +}
 +
 +func SupportsRSASaltLength(sign bool, salt int) bool {
@@ -2710,10 +2743,10 @@ index 00000000000000..1c49ff66dc1a2f
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..71d258d86412d2
+index 00000000000000..929afe7f446aa6
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,415 @@
+@@ -0,0 +1,424 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2851,13 +2884,22 @@ index 00000000000000..71d258d86412d2
 +	return openssl.VerifyECDSA(pub, hash, sig)
 +}
 +
-+func SupportsRSAKeyPrimes(primes int) bool {
++func SupportsRSAPrivateKey(bits, primes int) bool {
 +	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
 +	// but SCOSSL only supports 2-prime RSA keys.
 +	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
 +	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
 +	// Given the above reasons, we only support what SCOSSL supports.
-+	return primes == 2
++	return primes == 2 && SupportsRSAPublicKey(bits)
++}
++
++func SupportsRSAPublicKey(bits int) bool {
++	min := 1024
++	if fips140.Enabled() {
++		// The built-in OpenSSL 3 FIPS provider requires at least 2048 bits for FIPS compliance.
++		min = 2048
++	}
++	return bits >= min && bits%8 == 0 && bits <= 16384
 +}
 +
 +func SupportsRSASaltLength(sign bool, salt int) bool {
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index a6043be582e..4ba5e6a8515 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -65,11 +65,11 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/darwin.go                      |  71 +++++++
  src/crypto/rsa/fips.go                        |  22 +-
  src/crypto/rsa/notboring.go                   |   4 +-
- src/crypto/rsa/pkcs1v15.go                    |  11 +-
+ src/crypto/rsa/pkcs1v15.go                    |  10 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  13 +-
- src/crypto/rsa/rsa.go                         |  13 +-
- src/crypto/rsa/rsa_test.go                    |  12 +-
+ src/crypto/rsa/rsa.go                         |  16 +-
+ src/crypto/rsa/rsa_test.go                    |   7 +-
  src/crypto/sha1/sha1.go                       |   8 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
@@ -98,7 +98,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 94 files changed, 1505 insertions(+), 178 deletions(-)
+ 94 files changed, 1500 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2391,7 +2391,7 @@ index 00000000000000..1b9c63523ee90e
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index fb2395886b053b..6b1b6ad96a1366 100644
+index fb2395886b053b..ac0ad4f9490a8b 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2408,7 +2408,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	}
  
 -	if boring.Enabled && rand.IsDefaultReader(random) {
-+	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsHash(hash) {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -2417,7 +2417,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsHash(hash) {
++	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsHash(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -2442,7 +2442,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	defer mgfHash.Reset()
  
 -	if boring.Enabled && rand.IsDefaultReader(random) {
-+	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
  			return nil, ErrMessageTooLong
@@ -2451,7 +2451,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
++	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
@@ -2460,7 +2460,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
++	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
@@ -2469,7 +2469,7 @@ index fb2395886b053b..6b1b6ad96a1366 100644
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAPKCS1v15Signature(hash) {
++	if boring.Enabled && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
@@ -2492,52 +2492,51 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 5269d7b971bda7..8edad9da73698a 100644
+index 5269d7b971bda7..003030ec762ebf 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
-@@ -5,7 +5,8 @@
+@@ -5,7 +5,7 @@
  package rsa
  
  import (
 -	"crypto/internal/boring"
-+	"crypto/internal/backend"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
  	"crypto/internal/rand"
-@@ -61,7 +62,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
+@@ -61,7 +61,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
  		return nil, ErrMessageTooLong
  	}
  
 -	if boring.Enabled && rand.IsDefaultReader(random) {
-+	if boring.Enabled && rand.IsDefaultReader(random) && backend.SupportsRSAPKCS1v15Encryption() {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAPKCS1v15Encryption() {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return nil, err
-@@ -83,7 +84,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
+@@ -83,7 +83,7 @@ func EncryptPKCS1v15(random io.Reader, pub *PublicKey, msg []byte) ([]byte, erro
  	em[len(em)-len(msg)-1] = 0
  	copy(mm, msg)
  
 -	if boring.Enabled {
-+	if boring.Enabled && backend.SupportsRSAPKCS1v15Encryption() {
++	if boring.Enabled && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAPKCS1v15Encryption() {
  		var bkey *boring.PublicKeyRSA
  		bkey, err = boringPublicKey(pub)
  		if err != nil {
-@@ -115,7 +116,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
+@@ -115,7 +115,7 @@ func DecryptPKCS1v15(random io.Reader, priv *PrivateKey, ciphertext []byte) ([]b
  		return nil, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && backend.SupportsRSAPKCS1v15Encryption() {
++	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Encryption() {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -221,7 +222,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
+@@ -221,7 +221,7 @@ func decryptPKCS1v15(priv *PrivateKey, ciphertext []byte) (valid int, em []byte,
  		return 0, nil, 0, err
  	}
  
 -	if boring.Enabled {
-+	if boring.Enabled && boring.SupportsRSAKeyPrimes(len(priv.Primes)) && backend.SupportsRSAPKCS1v15Encryption() {
++	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Encryption() {
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
  		if err != nil {
@@ -2616,7 +2615,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index b94b129867727b..5cbedca4d3888d 100644
+index b94b129867727b..9482325d58fe06 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2647,8 +2646,18 @@ index b94b129867727b..5cbedca4d3888d 100644
  
  	case *PKCS1v15DecryptOptions:
  		if l := opts.SessionKeyLen; l > 0 {
+@@ -314,8 +315,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+ 		return nil, err
+ 	}
+ 
+-	if boring.Enabled && rand.IsDefaultReader(random) &&
+-		(bits == 2048 || bits == 3072 || bits == 4096) {
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAPublicKey(bits) {
+ 		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
+ 		if err != nil {
+ 			return nil, err
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 5ae4c1dd203874..678e94ade86af6 100644
+index 124fba1e8a4faa..af6d8e9291af62 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -2660,7 +2669,7 @@ index 5ae4c1dd203874..678e94ade86af6 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	"crypto/rand"
-@@ -151,6 +151,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+@@ -157,6 +157,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -2672,18 +2681,6 @@ index 5ae4c1dd203874..678e94ade86af6 100644
  
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
-@@ -231,6 +236,11 @@ func testEverything(t *testing.T, priv *PrivateKey) {
- 	if validateErr != nil && len(priv.Primes) >= 2 {
- 		t.Errorf("Validate() failed: %s", validateErr)
- 	}
-+	if boring.Enabled && priv.N.BitLen() < 512 {
-+		// Some crypto backends (e.g. CNG and OpenSSL with SymCrypt) don't support key sizes
-+		// lower than 512 and intentionally fail rather than fall back to Go crypto.
-+		t.Skip("skipping allocations test with BoringCrypto")
-+	}
- 
- 	msg := []byte("test")
- 	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
 index 46e47df1d32cf2..0fb56a3831c8a2 100644
 --- a/src/crypto/sha1/sha1.go

From 5a20e070386650a274eae5f7ac148cc273fcad52 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 13 Jan 2026 10:45:26 +0100
Subject: [PATCH 659/887] fix nobackend

---
 patches/0003-Implement-crypto-internal-backend.patch | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 502be7f7737..8c763166323 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -2362,7 +2362,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..1c49ff66dc1a2f
+index 00000000000000..c8f281d7fd1274
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,375 @@
@@ -2483,8 +2483,8 @@ index 00000000000000..1c49ff66dc1a2f
 +func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
 +	panic("cryptobackend: not available")
 +}
-+
-+func SupportsRSAKeyPrimes(primes int) bool           { panic("cryptobackend: not available") }
++func SupportsRSAPrivateKey(bits, primes int) bool    { panic("cryptobackend: not available") }
++func SupportsRSAPublicKey(bits int) bool             { panic("cryptobackend: not available") }
 +func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
 +
 +type PublicKeyRSA struct{ _ int }

From bda5ee1daddb4b6ad69f954c0b586edbc0280c2f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 11:33:56 +0000
Subject: [PATCH 660/887] build(deps): bump golang.org/x/net from 0.48.0 to
 0.49.0 in /eng/_util (#2042)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.48.0 to 0.49.0.
- [Commits](https://github.com/golang/net/compare/v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index fa4307c37a9..c4f0a8fa397 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.48.0
+	golang.org/x/net v0.49.0
 )
 
 require (
@@ -28,9 +28,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
-	golang.org/x/crypto v0.46.0 // indirect
+	golang.org/x/crypto v0.47.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 2922b00f515..c5382103865 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -52,16 +52,16 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.46.0 h1:cKRW/pmt1pKAfetfu+RCEvjvZkA9RimPbh7bhFjGVBU=
-golang.org/x/crypto v0.46.0/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
-golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
-golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
+golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
+golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
+golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/text v0.32.0 h1:ZD01bjUt1FQ9WJ0ClOL5vxgxOI/sVCNgX1YtKwcY0mU=
-golang.org/x/text v0.32.0/go.mod h1:o/rUWzghvpD5TXrTIBuJU77MTaN0ljMWE47kxGJQ7jY=
-golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ=
-golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
+golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
+golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=

From b55492400a220acb176ef48156c909a4d730aeb2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 11:50:43 +0000
Subject: [PATCH 661/887] build(deps): bump github/codeql-action from 4.31.9 to
 4.31.10 (#2044)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.9 to 4.31.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5d4e8d1aca955e8d8589aabd499c5cae939e33c7...cdefb33c0f6224e58673d9004f47f7cb3e328b89)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 94269c9bd8e..c3b0a462132 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
+        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
         with:
           category: /language:go

From 53d61846ea36ca8ba6f40433ad966bcf9cf7b1e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 11:51:38 +0000
Subject: [PATCH 662/887] build(deps): bump actions/setup-go from 6.1.0 to
 6.2.0 (#2043)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/4dc6199c7b1a012772edbd06daecab0f50c9053c...7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/patch-build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index ebea30500ca..8bb3c778cc9 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           submodules: true
 
-      - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           go-version: '1.25'
 

From f2cf21d23e6ca4928f69086dd02851dfc0e064e1 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 14 Jan 2026 12:20:21 +0000
Subject: [PATCH 663/887] update docs to mention ms_nocgo_opensslcrypto
 experiment (#2047)

---
 eng/doc/MigrationGuide.md                            | 10 ++++++++--
 patches/0003-Implement-crypto-internal-backend.patch | 12 +++++++-----
 2 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index ce66925bb21..651883052a3 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -138,11 +138,17 @@ After switching to the Microsoft build of Go, you may encounter new build errors
 #### Cgo is not enabled
 
 ```
-Using a crypto backend requires CGO_ENABLED=1.
+Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 
-For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
+Consider using our CGO-less experiement by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
+	
+For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 ```
 
+> [!NOTE]
+> As of Go 1.26, there is a CGO-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
+> This will allow use of OpenSSL without requiring cgo.
+
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
 Sometimes a project's build scripts might explicitly disable cgo.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 8c763166323..de9248fb423 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -48,12 +48,12 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/nobackend.go      | 375 +++++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 424 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/systemcrypto_nocgo_linux.go        |  15 +
+ src/crypto/systemcrypto_nocgo_linux.go        |  17 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  57 +++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2766 insertions(+), 20 deletions(-)
+ 44 files changed, 2768 insertions(+), 20 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -3189,10 +3189,10 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..b79491c6cb7c08
+index 00000000000000..28b2c2434330d6
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
-@@ -0,0 +1,15 @@
+@@ -0,0 +1,17 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -3204,8 +3204,10 @@ index 00000000000000..b79491c6cb7c08
 +func init() {
 +	`
 +	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
++
++	Consider using our CGO-less experiement by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
 +	
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go

From 3187ea7ef980ea4e67c2c7d31f6791172c8fa4c2 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 14 Jan 2026 13:46:45 +0100
Subject: [PATCH 664/887] fix recover from boringPRFError panic

---
 patches/0004-Use-crypto-backends.patch | 69 ++++++++++++--------------
 1 file changed, 31 insertions(+), 38 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4ba5e6a8515..6be3b6d51aa 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -82,14 +82,14 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/cipher_suites.go               |  10 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
- src/crypto/tls/handshake_client.go            |  12 +-
+ src/crypto/tls/handshake_client.go            |  17 +-
  src/crypto/tls/handshake_client_tls13.go      |   2 +-
- src/crypto/tls/handshake_server.go            |  10 +-
+ src/crypto/tls/handshake_server.go            |  15 +-
  src/crypto/tls/handshake_server_tls13.go      |   5 +-
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
- src/crypto/tls/prf.go                         |  41 ++++
+ src/crypto/tls/prf.go                         |  24 +++
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
@@ -98,7 +98,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 94 files changed, 1500 insertions(+), 180 deletions(-)
+ 94 files changed, 1493 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -3506,7 +3506,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index c2b1b7037a46cf..4f89d96ec5de28 100644
+index c2b1b7037a46cf..f490c3fc5b1cae 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,10 +11,10 @@ import (
@@ -3521,17 +3521,22 @@ index c2b1b7037a46cf..4f89d96ec5de28 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -514,7 +514,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -514,7 +514,20 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
 -func (hs *clientHandshakeState) handshake() error {
 +func (hs *clientHandshakeState) handshake() (err error) {
 +	defer func() {
-+		if err == nil {
-+			err = recoverFromBoringPRFError()
-+			if err != nil {
++		if err != nil {
++			return
++		}
++		if p := recover(); p != nil {
++			if err1, ok := p.(boringPRFError); ok {
++				err = err1.err
 +				hs.c.sendAlert(alertInternalError)
++			} else {
++				panic(p)
 +			}
 +		}
 +	}()
@@ -3554,20 +3559,25 @@ index 77a24b4a78d8fc..84724fac5f951e 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index efdaeae6f7e39a..491c6d5a0e5d56 100644
+index efdaeae6f7e39a..2bd004ad23ae2e 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
-@@ -63,7 +63,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+@@ -63,7 +63,20 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
  	return hs.handshake()
  }
  
 -func (hs *serverHandshakeState) handshake() error {
 +func (hs *serverHandshakeState) handshake() (err error) {
 +	defer func() {
-+		if err == nil {
-+			err = recoverFromBoringPRFError()
-+			if err != nil {
++		if err != nil {
++			return
++		}
++		if p := recover(); p != nil {
++			if err1, ok := p.(boringPRFError); ok {
++				err = err1.err
 +				hs.c.sendAlert(alertInternalError)
++			} else {
++				panic(p)
 +			}
 +		}
 +	}()
@@ -3839,7 +3849,7 @@ index bfa22449c87178..08cda456579f64 100644
  	"hash"
  	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index 19f80ac2c91c20..1502dd121c0361 100644
+index 19f80ac2c91c20..8a64e75d8ad3b1 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -3850,10 +3860,12 @@ index 19f80ac2c91c20..1502dd121c0361 100644
  	"crypto/internal/fips140/tls12"
  	"crypto/md5"
  	"crypto/sha1"
-@@ -47,9 +48,42 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+@@ -47,9 +48,25 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
  	}
  }
  
++// boringPRFError can happen, for example, if the seed is too large. The Go implementation doesn't limit the seed size,
++// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
 +type boringPRFError struct {
 +	err error
 +}
@@ -3861,46 +3873,27 @@ index 19f80ac2c91c20..1502dd121c0361 100644
 +func (e *boringPRFError) Error() string {
 +	return e.err.Error()
 +}
-+
-+// recoverFromBoringPRFError recovers from a panic caused by the boring backend.
-+// It returns the error if it was a boringPRFError, or panics if the panic was
-+// caused by something else.
-+func recoverFromBoringPRFError() error {
-+	if p := recover(); p != nil {
-+		if err, ok := p.(boringPRFError); ok {
-+			// Could happen, for example, if the seed is too large. The Go implementation doesn't limit the seed size,
-+			// as RFC 5705 doesn't specify a limit, but stock OpenSSL restrict it to 1024 and CNG to 256.
-+			return err.err
-+		}
-+		panic(p)
-+	}
-+	return nil
-+}
-+
-+func panicBoringPRFError(err error) {
-+	panic(boringPRFError{err})
-+}
 +
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
  func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  	result := make([]byte, keyLen)
 +	if boring.Enabled && boring.SupportsTLS1PRF() {
 +		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
-+			panicBoringPRFError(fmt.Errorf("crypto/tls: prf10: %v", err))
++			panic(boringPRFError{fmt.Errorf("crypto/tls: prf10: %v", err)})
 +		}
 +		return result
 +	}
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -72,6 +106,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+@@ -72,6 +89,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
  func prf12(hashFunc func() hash.Hash) prfFunc {
  	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
 +		if boring.Enabled && boring.SupportsTLS1PRF() {
 +			result := make([]byte, keyLen)
 +			if err := boring.TLS1PRF(result, secret, []byte(label), seed, hashFunc); err != nil {
-+				panicBoringPRFError(fmt.Errorf("crypto/tls: prf12: %v", err))
++				panic(boringPRFError{fmt.Errorf("crypto/tls: prf12: %v", err)})
 +			}
 +			return result
 +		}

From fb4443d117a8df39bef91e18141a451613cb3a5e Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 14 Jan 2026 16:19:57 +0100
Subject: [PATCH 665/887] skip DSA TestSignAndVerify on FIPS mode

---
 patches/0004-Use-crypto-backends.patch | 31 +++++++++++++++++++++++++-
 1 file changed, 30 insertions(+), 1 deletion(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 6be3b6d51aa..c432873980f 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -21,6 +21,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/des/cipher.go                      |   7 +
  src/crypto/dsa/boring.go                      | 113 ++++++++++
  src/crypto/dsa/dsa.go                         |  88 ++++++++
+ src/crypto/dsa/dsa_test.go                    |   8 +
  src/crypto/dsa/notboring.go                   |  16 ++
  src/crypto/ecdh/ecdh.go                       |   2 +-
  src/crypto/ecdh/ecdh_test.go                  |  17 +-
@@ -98,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 94 files changed, 1493 insertions(+), 180 deletions(-)
+ 95 files changed, 1501 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -751,6 +752,34 @@ index 6724f861b7f2f0..4bda65558882a2 100644
 +		c.AddBytes(bytes)
 +	})
 +}
+diff --git a/src/crypto/dsa/dsa_test.go b/src/crypto/dsa/dsa_test.go
+index ad85eac0a7f0b1..bf0d5eb077b2b1 100644
+--- a/src/crypto/dsa/dsa_test.go
++++ b/src/crypto/dsa/dsa_test.go
+@@ -5,8 +5,11 @@
+ package dsa
+ 
+ import (
++	"crypto/fips140"
++	boring "crypto/internal/backend"
+ 	"crypto/rand"
+ 	"math/big"
++	"runtime"
+ 	"testing"
+ )
+ 
+@@ -83,6 +86,11 @@ func fromHex(s string) *big.Int {
+ }
+ 
+ func TestSignAndVerify(t *testing.T) {
++	if boring.Enabled && runtime.GOOS == "linux" && fips140.Enabled() {
++		// Some OpenSSL providers don't support DSA signing in FIPS mode.
++		t.Skip("skipping DSA test in FIPS mode")
++	}
++
+ 	priv := PrivateKey{
+ 		PublicKey: PublicKey{
+ 			Parameters: Parameters{
 diff --git a/src/crypto/dsa/notboring.go b/src/crypto/dsa/notboring.go
 new file mode 100644
 index 00000000000000..cd02ff5a00c3dc

From 7b2ffd77ee37ba6678038e680b239ace140159f0 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 14 Jan 2026 16:03:15 +0000
Subject: [PATCH 666/887] Update submodule to latest master (2bc4315d):
 crypto/internal/fips140test: add ML-DSA to FIPS 140-3 functional tests

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index fed3b0a2984..2bc4315d92a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit fed3b0a298464457c58d1150bdb3942f22bd6220
+Subproject commit 2bc4315d92a70d9a5e895d60defba4f799798806

From f450e01f1dcb861eacb99d24e6f4d7101e70f9de Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 15 Jan 2026 10:14:55 +0100
Subject: [PATCH 667/887] fallback to Go when doing a TLS PRF on FIPS mode

---
 patches/0004-Use-crypto-backends.patch | 29 +++++++++++++++++---------
 1 file changed, 19 insertions(+), 10 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index c432873980f..798430b72eb 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -90,7 +90,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
- src/crypto/tls/prf.go                         |  24 +++
+ src/crypto/tls/prf.go                         |  28 +++
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
@@ -99,7 +99,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1501 insertions(+), 180 deletions(-)
+ 95 files changed, 1505 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1657,7 +1657,7 @@ index 96df536d56f345..5ed6026962a17c 100644
  		cmd := testenv.Command(t, testenv.Executable(t), "-test.run=^TestFIPS140Only$", "-test.v")
  		cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=only")
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index e94bab74fd5774..31a3cee82c5391 100644
+index 6a0b46af2bbe40..fbe7ba6992d0ce 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -1701,7 +1701,7 @@ index 817dcb9a35a793..8efc547d0d52fc 100644
  	cryptotest.MustSupportFIPS140(t)
  
 diff --git a/src/crypto/internal/fips140test/fips_test.go b/src/crypto/internal/fips140test/fips_test.go
-index 52fc9d34886003..9afaf522df475c 100644
+index 7f2824ca9ac052..f0d3b2a8459871 100644
 --- a/src/crypto/internal/fips140test/fips_test.go
 +++ b/src/crypto/internal/fips140test/fips_test.go
 @@ -15,7 +15,7 @@ package fipstest
@@ -3878,10 +3878,10 @@ index bfa22449c87178..08cda456579f64 100644
  	"hash"
  	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index 19f80ac2c91c20..8a64e75d8ad3b1 100644
+index 19f80ac2c91c20..65d5c74c5e9251 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
-@@ -7,6 +7,7 @@ package tls
+@@ -7,11 +7,13 @@ package tls
  import (
  	"crypto"
  	"crypto/hmac"
@@ -3889,7 +3889,13 @@ index 19f80ac2c91c20..8a64e75d8ad3b1 100644
  	"crypto/internal/fips140/tls12"
  	"crypto/md5"
  	"crypto/sha1"
-@@ -47,9 +48,25 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+ 	"crypto/sha256"
+ 	"crypto/sha512"
++	"crypto/tls/internal/fips140tls"
+ 	"errors"
+ 	"fmt"
+ 	"hash"
+@@ -47,9 +49,28 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
  	}
  }
  
@@ -3906,7 +3912,10 @@ index 19f80ac2c91c20..8a64e75d8ad3b1 100644
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
  func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  	result := make([]byte, keyLen)
-+	if boring.Enabled && boring.SupportsTLS1PRF() {
++	// Some OpenSSL providers, such as the built-in FIPS provider, do not support
++	// the TLS 1.0 PRF. We should only reach here on FIPS mode when running tests
++	// anyway, so fall back to the Go implementation in that case.
++	if boring.Enabled && !fips140tls.Required() && boring.SupportsTLS1PRF() {
 +		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
 +			panic(boringPRFError{fmt.Errorf("crypto/tls: prf10: %v", err)})
 +		}
@@ -3915,7 +3924,7 @@ index 19f80ac2c91c20..8a64e75d8ad3b1 100644
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -72,6 +89,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+@@ -72,6 +93,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
  func prf12(hashFunc func() hash.Hash) prfFunc {
  	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
@@ -4067,7 +4076,7 @@ index 2a774100a8ec67..a0cabb42b19484 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index bf2f3da535b8eb..ca66842d0753ac 100644
+index 2746ad8783ab22..448beb50aa7b74 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (

From 112076167ad4b3518566723bc55280f02633977c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 15 Jan 2026 10:24:09 +0100
Subject: [PATCH 668/887] skip test instead of fallback

---
 patches/0004-Use-crypto-backends.patch | 52 ++++++++++++++++++--------
 1 file changed, 36 insertions(+), 16 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 798430b72eb..a5e9d1d01bf 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -90,7 +90,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/tls/internal/tls13/doc.go          |  18 ++
  src/crypto/tls/internal/tls13/tls13.go        | 195 ++++++++++++++++++
  src/crypto/tls/key_schedule.go                |   2 +-
- src/crypto/tls/prf.go                         |  28 +++
+ src/crypto/tls/prf.go                         |  24 +++
+ src/crypto/tls/prf_test.go                    |   9 +
  src/crypto/x509/verify_test.go                |   2 +-
  src/go/build/deps_test.go                     |  13 +-
  src/hash/boring_test.go                       |   9 +
@@ -99,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 95 files changed, 1505 insertions(+), 180 deletions(-)
+ 96 files changed, 1510 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -3878,10 +3879,10 @@ index bfa22449c87178..08cda456579f64 100644
  	"hash"
  	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index 19f80ac2c91c20..65d5c74c5e9251 100644
+index 19f80ac2c91c20..8a64e75d8ad3b1 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
-@@ -7,11 +7,13 @@ package tls
+@@ -7,6 +7,7 @@ package tls
  import (
  	"crypto"
  	"crypto/hmac"
@@ -3889,13 +3890,7 @@ index 19f80ac2c91c20..65d5c74c5e9251 100644
  	"crypto/internal/fips140/tls12"
  	"crypto/md5"
  	"crypto/sha1"
- 	"crypto/sha256"
- 	"crypto/sha512"
-+	"crypto/tls/internal/fips140tls"
- 	"errors"
- 	"fmt"
- 	"hash"
-@@ -47,9 +49,28 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
+@@ -47,9 +48,25 @@ func pHash(result, secret, seed []byte, hash func() hash.Hash) {
  	}
  }
  
@@ -3912,10 +3907,7 @@ index 19f80ac2c91c20..65d5c74c5e9251 100644
  // prf10 implements the TLS 1.0 pseudo-random function, as defined in RFC 2246, Section 5.
  func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  	result := make([]byte, keyLen)
-+	// Some OpenSSL providers, such as the built-in FIPS provider, do not support
-+	// the TLS 1.0 PRF. We should only reach here on FIPS mode when running tests
-+	// anyway, so fall back to the Go implementation in that case.
-+	if boring.Enabled && !fips140tls.Required() && boring.SupportsTLS1PRF() {
++	if boring.Enabled && boring.SupportsTLS1PRF() {
 +		if err := boring.TLS1PRF(result, secret, []byte(label), seed, nil); err != nil {
 +			panic(boringPRFError{fmt.Errorf("crypto/tls: prf10: %v", err)})
 +		}
@@ -3924,7 +3916,7 @@ index 19f80ac2c91c20..65d5c74c5e9251 100644
  	hashSHA1 := sha1.New
  	hashMD5 := md5.New
  
-@@ -72,6 +93,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
+@@ -72,6 +89,13 @@ func prf10(secret []byte, label string, seed []byte, keyLen int) []byte {
  // prf12 implements the TLS 1.2 pseudo-random function, as defined in RFC 5246, Section 5.
  func prf12(hashFunc func() hash.Hash) prfFunc {
  	return func(secret []byte, label string, seed []byte, keyLen int) []byte {
@@ -3938,6 +3930,34 @@ index 19f80ac2c91c20..65d5c74c5e9251 100644
  		return tls12.PRF(hashFunc, secret, label, seed, keyLen)
  	}
  }
+diff --git a/src/crypto/tls/prf_test.go b/src/crypto/tls/prf_test.go
+index 8233985a62bd22..ef1b2bfe02c3b7 100644
+--- a/src/crypto/tls/prf_test.go
++++ b/src/crypto/tls/prf_test.go
+@@ -5,7 +5,10 @@
+ package tls
+ 
+ import (
++	"crypto/fips140"
++	boring "crypto/internal/backend"
+ 	"encoding/hex"
++	"runtime"
+ 	"testing"
+ )
+ 
+@@ -46,6 +49,12 @@ type testKeysFromTest struct {
+ }
+ 
+ func TestKeysFromPreMasterSecret(t *testing.T) {
++	if boring.Enabled && runtime.GOOS == "linux" && fips140.Enabled() {
++		// Some OpenSSL providers don't support TLS 1.0 PRF in FIPS mode.
++		// The public crypto/tls API doesn't support it either, but these tests
++		// use internal functions.
++		t.Skip("Skipping test on systemcrypto FIPS builds")
++	}
+ 	for i, test := range testKeysFromTests {
+ 		in, _ := hex.DecodeString(test.preMasterSecret)
+ 		clientRandom, _ := hex.DecodeString(test.clientRandom)
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
 index f9bd313737e21b..04548c961e74a8 100644
 --- a/src/crypto/x509/verify_test.go

From e104d699bcdb93af287aa2a294581c5e61d98ee9 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 15 Jan 2026 11:58:12 +0100
Subject: [PATCH 669/887] upgrade dependencies

---
 .../0001-Vendor-external-dependencies.patch   | 1388 +++++++++--------
 1 file changed, 733 insertions(+), 655 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index b1548338728..ba8635fdd85 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -12,7 +12,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/cmd/go.sum                                |    4 +
  .../internal/telemetry/counter/deps_ignore.go |   17 +
  .../microsoft/go-infra/telemetry/LICENSE      |   21 +
- .../microsoft/go-infra/telemetry/README.md    |    7 +
+ .../microsoft/go-infra/telemetry/README.md    |    9 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
  .../go-infra/telemetry/config/config.json     |   73 +
@@ -28,7 +28,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  172 ++
  .../telemetry/internal/config/config.go       |   63 +
- .../telemetry/internal/telemetry/proginfo.go  |   32 +
+ .../telemetry/internal/telemetry/proginfo.go  |   38 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
  .../microsoft/go-infra/telemetry/telemetry.go |  125 +
  src/cmd/vendor/modules.txt                    |   11 +
@@ -47,7 +47,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/chacha20poly1305.go            |  149 +
  .../golang-fips/openssl/v2/cipher.go          |  659 +++++
  .../golang-fips/openssl/v2/const.go           |   91 +
- .../golang-fips/openssl/v2/cshake.go          |  231 ++
+ .../golang-fips/openssl/v2/cshake.go          |  253 ++
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
@@ -60,36 +60,38 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  455 ++++
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
- .../openssl/v2/internal/fakecgo/abi_amd64.h   |   34 +
+ .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
- .../openssl/v2/internal/fakecgo/asm_amd64.s   |   29 +
+ .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
- .../openssl/v2/internal/fakecgo/doc.go        |   32 +
- .../openssl/v2/internal/fakecgo/fakecgo.go    |   27 +
+ .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
+ .../openssl/v2/internal/fakecgo/generate.go   |    3 +
  .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
  .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
  .../openssl/v2/internal/fakecgo/go_linux.go   |  100 +
  .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
  .../openssl/v2/internal/fakecgo/go_util.go    |   37 +
  .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
- .../openssl/v2/internal/fakecgo/libcgo.go     |   38 +
+ .../openssl/v2/internal/fakecgo/libcgo.go     |   39 +
  .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
  .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
- .../openssl/v2/internal/fakecgo/symbols.go    |  225 ++
- .../v2/internal/fakecgo/symbols_darwin.go     |   30 +
- .../v2/internal/fakecgo/symbols_linux.go      |  277 ++
- .../v2/internal/fakecgo/trampolines_amd64.s   |  112 +
- .../v2/internal/fakecgo/trampolines_arm64.s   |   82 +
- .../v2/internal/fakecgo/trampolines_stubs.s   |   94 +
+ .../v2/internal/fakecgo/trampolines_amd64.s   |  114 +
+ .../v2/internal/fakecgo/trampolines_arm64.s   |   83 +
+ .../openssl/v2/internal/fakecgo/zsymbols.go   |  175 ++
+ .../v2/internal/fakecgo/zsymbols_darwin.go    |   60 +
+ .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
+ .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
+ .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
+ .../v2/internal/fakecgo/ztrampolines_stubs.s  |   58 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
- .../openssl/v2/internal/ossl/errors.go        |   36 +
+ .../openssl/v2/internal/ossl/errors.go        |   34 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
@@ -125,7 +127,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/providersymcrypt.go            |  338 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  716 +++++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  714 +++++
  .../golang-fips/openssl/v2/tls1prf.go         |  158 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
@@ -170,10 +172,11 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/fakecgo/libcgo_darwin.go         |   26 +
  .../internal/fakecgo/setenv.go                |   19 +
  .../internal/fakecgo/trampolines_amd64.s      |  114 +
- .../internal/fakecgo/trampolines_arm64.s      |   87 +
- .../internal/fakecgo/zsymbols.go              |  225 ++
- .../internal/fakecgo/zsymbols_darwin.go       |   30 +
- .../internal/fakecgo/ztrampolines_stubs.s     |   73 +
+ .../internal/fakecgo/trampolines_arm64.s      |   83 +
+ .../internal/fakecgo/zsymbols.go              |  175 ++
+ .../internal/fakecgo/zsymbols_darwin.go       |   60 +
+ .../internal/fakecgo/ztrampolines_darwin.s    |   19 +
+ .../internal/fakecgo/ztrampolines_stubs.s     |   58 +
  .../internal/security/security.go             |    9 +
  .../internal/security/shims.h                 |  107 +
  .../internal/security/syscall_nocgo.go        |   15 +
@@ -245,7 +248,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 237 files changed, 31378 insertions(+), 7 deletions(-)
+ 240 files changed, 31432 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -296,8 +299,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
@@ -309,14 +312,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
@@ -404,6 +409,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
@@ -477,30 +483,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index c7d3cc6136b549..dcabaf112309f9 100644
+index 85e8c4cb5fb305..b6c3222b6c3216 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.26
  
  require (
  	github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
  	golang.org/x/arch v0.23.0
  	golang.org/x/build v0.0.0-20251128064159-b9bfd88b30e8
  	golang.org/x/mod v0.30.1-0.20251115032019-269c237cf350
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index b02c469a41d244..7f16513fcb58c7 100644
+index 61c88e52530940..fc869bb61f2fe8 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLx
  github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed h1:AZR+rR1NvHCXyilk3BMgq2M9uGPibhTU1O4hxNIwFJo=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457 h1:VcZzhgedVcPpE+O7y5uAwavh0RxtuugUZgSXRoRpvQI=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980 h1:Xe/6t1ORLxP4YELza1nvuR4P5tT+ATAwfgIOzxZiVLY=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980 h1:xRaYLWEeaYNxkBV9VMnmyGIOX16GExTmNXNMXjkP42g=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.23.0 h1:lKF64A2jF6Zd8L0knGltUnegD62JMFBiCPBmQpToHhg=
@@ -556,12 +562,14 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
 new file mode 100644
-index 00000000000000..472894e2011f93
+index 00000000000000..5fc9356268f64a
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
-@@ -0,0 +1,7 @@
+@@ -0,0 +1,9 @@
 +# telemetry
 +
++[![Go Reference](https://pkg.go.dev/badge/github.com/microsoft/go-infra/telemetry.svg)](https://pkg.go.dev/github.com/microsoft/go-infra/telemetry)
++
 +This directory, the `telemetry` package, contains the telemetry transmission code for the Microsoft build of Go.
 +It is specialized to work similarly to the upstream telemetry counters.
 +
@@ -613,7 +621,7 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..52a9687f323fb8
+index 00000000000000..76053296e82470
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 @@ -0,0 +1,73 @@
@@ -672,7 +680,7 @@ index 00000000000000..52a9687f323fb8
 +					"Name": "go/invocations"
 +				},
 +				{
-+					"Name": "go/goexperiment:{ms_tls_config_schannel,systemcrypto,nosystemcrypto,opensslcrypto,cngcrypto,darwincrypto}"
++					"Name": "go/goexperiment:{ms_tls_config_schannel,systemcrypto,nosystemcrypto,opensslcrypto,cngcrypto,darwincrypto,ms_nocgo_opensslcrypto}"
 +				},
 +				{
 +					"Name": "go/subcommand:{build,install,run}"
@@ -1880,10 +1888,10 @@ index 00000000000000..7980b1505b2caa
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
 new file mode 100644
-index 00000000000000..1ac9e000e65c77
+index 00000000000000..a4949c6a90ea1b
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
-@@ -0,0 +1,32 @@
+@@ -0,0 +1,38 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1906,7 +1914,13 @@ index 00000000000000..1ac9e000e65c77
 +func ProgramInfo(info *debug.BuildInfo) (goVers, progPath string) {
 +	goVers = info.GoVersion
 +	if strings.Contains(goVers, "devel") || strings.Contains(goVers, "-") || !version.IsValid(goVers) {
-+		goVers = "devel"
++		if v, _, ok := strings.Cut(goVers, "_microsoft"); ok && version.IsValid(v) {
++			// Schema like "go1.21.1-0_microsoft ABC".
++			// Remove everything after the revision number.
++			goVers = v
++		} else {
++			goVers = "devel"
++		}
 +	}
 +
 +	progPath = info.Path
@@ -2086,14 +2100,14 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7c122cd9d171bf..96472efdde403d 100644
+index 9c179c4bcd4c30..0c76f8fac35576 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20250728075224-e97e760169ed
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -2101,7 +2115,7 @@ index 7c122cd9d171bf..96472efdde403d 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20251104173356-501791671457
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.23.0
@@ -2136,7 +2150,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..ab7ea4a4b915d9 100644
+index efc07451b53448..7183aa16a655e6 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2145,21 +2159,21 @@ index efc07451b53448..ab7ea4a4b915d9 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
++	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..104fcfc902e896 100644
+index b6b841b44d8e38..223b1d2797cf87 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85 h1:/IDnd+d+KhBvHD60Jpd1fuTW5S2FbdCfhJVL+w+ecZM=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182 h1:yeHGQpq1zuXcbMG18BPOTENjfYEgqB7ZEUYC/0eM2Lw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078 h1:9M+LVr3rtPCD7xgX/xGFWEsyWdvTA/djZUHh2AyXTB4=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83 h1:QeGy5Zv6lLfxzG+0PCOh06EVYPrYXI6q0UJhj+YXImU=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184 h1:b0PQtPdldqXsTg7yLqLo9HFUF+4Qp07Vi+ohWwTBNrU=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
  golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
  golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
@@ -2401,11 +2415,11 @@ index 00000000000000..0a6d0d0ef2c0c6
 +This project adopts the Go code of conduct: https://go.dev/conduct.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 new file mode 100644
-index 00000000000000..71b94b31aa9d3f
+index 00000000000000..654566d2bff4e0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 @@ -0,0 +1,145 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -2612,11 +2626,11 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
 new file mode 100644
-index 00000000000000..1c6af181cd3496
+index 00000000000000..29f9ecc6e2f1fa
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
 @@ -0,0 +1,149 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -2767,11 +2781,11 @@ index 00000000000000..1c6af181cd3496
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..bb2f0cbbc71232
+index 00000000000000..3bcd7538d95f05
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 @@ -0,0 +1,659 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -3529,11 +3543,11 @@ index 00000000000000..e4f8f5b5d0c4a7
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
 new file mode 100644
-index 00000000000000..a7e923a86979fa
+index 00000000000000..9ae41b4f5990b8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
-@@ -0,0 +1,231 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
+@@ -0,0 +1,253 @@
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -3586,6 +3600,8 @@ index 00000000000000..a7e923a86979fa
 +	return out
 +}
 +
++var shakeSupported sync.Map
++
 +// SupportsSHAKE returns true if the SHAKE extendable output functions
 +// with the given securityBits are supported.
 +func SupportsSHAKE(securityBits int) bool {
@@ -3595,7 +3611,27 @@ index 00000000000000..a7e923a86979fa
 +		// and we need it to implement [sha3.SHAKE].
 +		return false
 +	}
-+	return loadShake(securityBits) != nil
++	if v, ok := shakeSupported.Load(securityBits); ok {
++		return v.(bool)
++	}
++	alg := loadShake(securityBits)
++	if alg == nil {
++		shakeSupported.Store(securityBits, false)
++		return false
++	}
++	// EVP_MD objects can be non-nil but the underlying provider may not
++	// support EVP_DigestSqueeze. We need to test it.
++	var supported bool
++	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
++		defer ossl.EVP_MD_CTX_free(ctx)
++		if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err == nil {
++			var tmp [1]byte
++			_, err := ossl.EVP_DigestSqueeze(ctx, tmp[:])
++			supported = err == nil
++		}
++	}
++	shakeSupported.Store(securityBits, supported)
++	return supported
 +}
 +
 +// SupportsCSHAKE returns true if the CSHAKE extendable output functions
@@ -3766,11 +3802,11 @@ index 00000000000000..a7e923a86979fa
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..177c5bdb1afa2a
+index 00000000000000..772800a73e3389
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 @@ -0,0 +1,112 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -3884,11 +3920,11 @@ index 00000000000000..177c5bdb1afa2a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..ded266b3784191
+index 00000000000000..24ba60258c3b23
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 @@ -0,0 +1,308 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -4198,11 +4234,11 @@ index 00000000000000..ded266b3784191
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..ef1a181f6fcf29
+index 00000000000000..ad74a4b2038e59
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 @@ -0,0 +1,136 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -4340,11 +4376,11 @@ index 00000000000000..ef1a181f6fcf29
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..bf5935bd478bbd
+index 00000000000000..303ce47cab30a5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 @@ -0,0 +1,343 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -4689,11 +4725,11 @@ index 00000000000000..bf5935bd478bbd
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..d364cc0cde0dfc
+index 00000000000000..d0c29b5b821f92
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 @@ -0,0 +1,222 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -4917,11 +4953,11 @@ index 00000000000000..d364cc0cde0dfc
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..6413f3e42b4adb
+index 00000000000000..8377d7495e0731
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 @@ -0,0 +1,210 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -5133,11 +5169,11 @@ index 00000000000000..6413f3e42b4adb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..56fae101c4feb4
+index 00000000000000..4c70cd75a1a553
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 @@ -0,0 +1,620 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -5759,11 +5795,11 @@ index 00000000000000..56fae101c4feb4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..203cc9a8020212
+index 00000000000000..eb0a84acf2232f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 @@ -0,0 +1,502 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -6302,11 +6338,11 @@ index 00000000000000..f1f2364c7246d4
 +type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..1b5744dd5b1806
+index 00000000000000..7e059d023ef00b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 @@ -0,0 +1,455 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -6763,11 +6799,11 @@ index 00000000000000..1b5744dd5b1806
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..6c7940ffec1684
+index 00000000000000..14ffe51d6fefce
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 @@ -0,0 +1,282 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -7051,10 +7087,10 @@ index 00000000000000..6c7940ffec1684
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
 new file mode 100644
-index 00000000000000..c646c454a788fd
+index 00000000000000..9949435fe9e0ae
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
-@@ -0,0 +1,34 @@
+@@ -0,0 +1,99 @@
 +// Copyright 2021 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -7065,6 +7101,69 @@ index 00000000000000..c646c454a788fd
 +// these should have zero frame size to suppress the automatic frame
 +// pointer, though it's harmless to not do this.
 +
++#ifdef GOOS_windows
++
++// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
++// PUSH_REGS_HOST_TO_ABI0.
++#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
++
++// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
++// the host ABI to Go ABI0 code. It saves all registers that are
++// callee-save in the host ABI and caller-save in Go ABI0 and prepares
++// for entry to Go.
++//
++// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
++// Clear the DF flag for the Go ABI.
++// MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	PUSHFQ			\
++	CLD			\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
++	MOVQ	DI, (0*0)(SP)	\
++	MOVQ	SI, (1*8)(SP)	\
++	MOVQ	BP, (2*8)(SP)	\
++	MOVQ	BX, (3*8)(SP)	\
++	MOVQ	R12, (4*8)(SP)	\
++	MOVQ	R13, (5*8)(SP)	\
++	MOVQ	R14, (6*8)(SP)	\
++	MOVQ	R15, (7*8)(SP)	\
++	MOVUPS	X6, (8*8)(SP)	\
++	MOVUPS	X7, (10*8)(SP)	\
++	MOVUPS	X8, (12*8)(SP)	\
++	MOVUPS	X9, (14*8)(SP)	\
++	MOVUPS	X10, (16*8)(SP)	\
++	MOVUPS	X11, (18*8)(SP)	\
++	MOVUPS	X12, (20*8)(SP)	\
++	MOVUPS	X13, (22*8)(SP)	\
++	MOVUPS	X14, (24*8)(SP)	\
++	MOVUPS	X15, (26*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*0)(SP), DI	\
++	MOVQ	(1*8)(SP), SI	\
++	MOVQ	(2*8)(SP), BP	\
++	MOVQ	(3*8)(SP), BX	\
++	MOVQ	(4*8)(SP), R12	\
++	MOVQ	(5*8)(SP), R13	\
++	MOVQ	(6*8)(SP), R14	\
++	MOVQ	(7*8)(SP), R15	\
++	MOVUPS	(8*8)(SP), X6	\
++	MOVUPS	(10*8)(SP), X7	\
++	MOVUPS	(12*8)(SP), X8	\
++	MOVUPS	(14*8)(SP), X9	\
++	MOVUPS	(16*8)(SP), X10	\
++	MOVUPS	(18*8)(SP), X11	\
++	MOVUPS	(20*8)(SP), X12	\
++	MOVUPS	(22*8)(SP), X13	\
++	MOVUPS	(24*8)(SP), X14	\
++	MOVUPS	(26*8)(SP), X15	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
++	POPFQ
++
++#else
++// SysV ABI
++
 +#define REGS_HOST_TO_ABI0_STACK (6*8)
 +
 +// SysV MXCSR matches the Go ABI, so we don't have to set that,
@@ -7089,6 +7188,8 @@ index 00000000000000..c646c454a788fd
 +	MOVQ	(4*8)(SP), R15	\
 +	MOVQ	(5*8)(SP), BP	\
 +	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
++
++#endif
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
 new file mode 100644
 index 00000000000000..5d5061ec1dbf8c
@@ -7136,10 +7237,10 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
 new file mode 100644
-index 00000000000000..fe133dacac6959
+index 00000000000000..2b7eb57f8ae783
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
-@@ -0,0 +1,29 @@
+@@ -0,0 +1,39 @@
 +// Copyright 2009 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -7158,12 +7259,22 @@ index 00000000000000..fe133dacac6959
 +	// Make room for arguments to cgocallback.
 +	ADJSP $0x18
 +
++#ifndef GOOS_windows
 +	MOVQ DI, 0x0(SP) // fn
 +	MOVQ SI, 0x8(SP) // arg
 +
 +	// Skip n in DX.
 +	MOVQ CX, 0x10(SP) // ctxt
 +
++#else
++	MOVQ CX, 0x0(SP) // fn
++	MOVQ DX, 0x8(SP) // arg
++
++	// Skip n in R8.
++	MOVQ R9, 0x10(SP) // ctxt
++
++#endif
++
 +	CALL runtime·cgocallback(SB)
 +
 +	ADJSP $-0x18
@@ -7310,58 +7421,22 @@ index 00000000000000..5f70632fa7cc33
 +	x_cgo_unsetenv_call     = x_cgo_unsetenv
 +	x_cgo_thread_start_call = x_cgo_thread_start
 +)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
-new file mode 100644
-index 00000000000000..84159b1b1eb914
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/doc.go
-@@ -0,0 +1,32 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || linux)
-+
-+// Package fakecgo implements the Cgo runtime (runtime/cgo) entirely in Go.
-+// This allows code that calls into C to function properly when CGO_ENABLED=0.
-+//
-+// # Goals
-+//
-+// fakecgo attempts to replicate the same naming structure as in the runtime.
-+// For example, functions that have the prefix "gcc_*" are named "go_*".
-+// This makes it easier to port other GOOSs and GOARCHs as well as to keep
-+// it in sync with runtime/cgo.
-+//
-+// # Support
-+//
-+// Currently, fakecgo only supports macOS on amd64 & arm64. It also cannot
-+// be used with -buildmode=c-archive because that requires special initialization
-+// that fakecgo does not implement at the moment.
-+//
-+// # Usage
-+//
-+// Using fakecgo is easy just import _ "github.com/ebitengine/purego" and then
-+// set the environment variable CGO_ENABLED=0.
-+// The recommended usage for fakecgo is to prefer using runtime/cgo if possible
-+// but if cross-compiling or fast build times are important fakecgo is available.
-+// Purego will pick which ever Cgo runtime is available and prefer the one that
-+// comes with Go (runtime/cgo).
-+package fakecgo
-+
-+//go:generate go run gen.go
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
 new file mode 100644
-index 00000000000000..59c8c1674baa67
+index 00000000000000..7927deb2785263
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
-@@ -0,0 +1,27 @@
+@@ -0,0 +1,29 @@
 +// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
 +
 +//go:build !cgo && (darwin || linux)
 +
 +package fakecgo
 +
-+import "unsafe"
++import (
++	"unsafe"
++)
 +
 +// setg_trampoline calls setg with the G provided
 +func setg_trampoline(setg uintptr, G uintptr)
@@ -7381,6 +7456,15 @@ index 00000000000000..59c8c1674baa67
 +	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
 +	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
+new file mode 100644
+index 00000000000000..ca8d5f843f8421
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
+@@ -0,0 +1,3 @@
++package fakecgo
++
++//go:generate go run update_tool.go
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
 new file mode 100644
 index 00000000000000..d0868f0f790351
@@ -7753,10 +7837,10 @@ index 00000000000000..ba142ec481d026
 +var _iscgo bool = true
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
 new file mode 100644
-index 00000000000000..1d56bf2b83f4b4
+index 00000000000000..8a0790faf1d5d9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
-@@ -0,0 +1,38 @@
+@@ -0,0 +1,39 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -7768,6 +7852,7 @@ index 00000000000000..1d56bf2b83f4b4
 +	size_t uintptr
 +	// Sources:
 +	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
 +	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
 +	sigset_t       [128]byte
 +	pthread_attr_t [64]byte
@@ -7918,12 +8003,221 @@ index 00000000000000..8d7b9831d31fae
 +//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
 +var x_cgo_unsetenv_trampoline byte
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+new file mode 100644
+index 00000000000000..e4a61f5978515b
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,114 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
++
++Since we're called from go and call into C we can cheat a bit with the calling conventions:
++ - in go all the registers are caller saved
++ - in C we have a couple of callee saved registers
++
++=> we can use BX, R12, R13, R14, R15 instead of the stack
++
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++*/
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_amd64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), BX
++	XORL AX, AX
++	CALL BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// X15 is designated by Go as a fixed zero register.
++	// Calling directly into ABIInternal, ensure it is zero.
++	PXOR X15, X15
++
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
++
++	POP_REGS_HOST_TO_ABI0()
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), BX
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL BX
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..1ebee99617dbde
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,83 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_arm64.h"
++
++// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R1
++	CALL R1
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	MOVD ·threadentry_call(SB), R26
++	MOVD (R26), R2
++	CALL (R2)
++	MOVD $0, R0                     // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R6
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R6
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
-index 00000000000000..52e7e7e3824dcb
+index 00000000000000..c5df904098e92a
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols.go
-@@ -0,0 +1,225 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
+@@ -0,0 +1,175 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8014,36 +8308,6 @@ index 00000000000000..52e7e7e3824dcb
 +
 +//go:nosplit
 +//go:norace
-+func pthread_self() pthread_t {
-+	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_get_stacksize_np(thread pthread_t) size_t {
-+	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
-+	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
 +func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
 +	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
 +}
@@ -8114,26 +8378,6 @@ index 00000000000000..52e7e7e3824dcb
 +var _pthread_sigmask uint8
 +var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
 +
-+//go:linkname _pthread_self _pthread_self
-+var _pthread_self uint8
-+var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
-+
-+//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
-+var _pthread_get_stacksize_np uint8
-+var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
-+var _pthread_attr_setstacksize uint8
-+var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-+
 +//go:linkname _pthread_mutex_lock _pthread_mutex_lock
 +var _pthread_mutex_lock uint8
 +var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
@@ -8149,12 +8393,12 @@ index 00000000000000..52e7e7e3824dcb
 +//go:linkname _pthread_setspecific _pthread_setspecific
 +var _pthread_setspecific uint8
 +var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
 new file mode 100644
-index 00000000000000..8c4489f0369c25
+index 00000000000000..08a7601c2ed0ff
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_darwin.go
-@@ -0,0 +1,30 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
+@@ -0,0 +1,60 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8164,6 +8408,8 @@ index 00000000000000..8c4489f0369c25
 +
 +package fakecgo
 +
++import "unsafe"
++
 +//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
@@ -8176,21 +8422,49 @@ index 00000000000000..8c4489f0369c25
 +//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
++
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
++
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
 new file mode 100644
-index 00000000000000..85728bb394c248
+index 00000000000000..38ee622a366042
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/symbols_linux.go
-@@ -0,0 +1,277 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
+@@ -0,0 +1,294 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8224,15 +8498,32 @@ index 00000000000000..85728bb394c248
 +//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
 +//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
++
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
++
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
 +
 +//go:nosplit
 +//go:norace
@@ -8468,312 +8759,53 @@ index 00000000000000..85728bb394c248
 +		c.retval = uintptr(ret)
 +	}
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
 new file mode 100644
-index 00000000000000..7c72b78a866bbd
+index 00000000000000..35ef7ac11cb955
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,112 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || linux)
-+
-+/*
-+trampoline for emulating required C functions for cgo in go (see cgo.go)
-+(we convert cdecl calling convention to go and vice-versa)
-+
-+Since we're called from go and call into C we can cheat a bit with the calling conventions:
-+ - in go all the registers are caller saved
-+ - in C we have a couple of callee saved registers
-+
-+=> we can use BX, R12, R13, R14, R15 instead of the stack
-+
-+C Calling convention cdecl used here (we only need integer args):
-+1. arg: DI
-+2. arg: SI
-+3. arg: DX
-+4. arg: CX
-+5. arg: R8
-+6. arg: R9
-+We don't need floats with these functions -> AX=0
-+return value will be in AX
-+*/
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_amd64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVQ DI, AX
-+	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), BX
-+	XORL AX, AX
-+	CALL BX
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0
-+	// See crosscall2.
-+	PUSH_REGS_HOST_TO_ABI0()
-+
-+	PXOR	X15, X15
-+
-+	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), BX
-+	MOVQ a1+8(FP), DI
-+	MOVQ a2+16(FP), SI
-+	MOVQ a3+24(FP), DX
-+	MOVQ a4+32(FP), CX
-+	MOVQ a5+40(FP), R8
-+
-+	XORL AX, AX // no floats
-+
-+	PUSHQ BP       // save BP
-+	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
-+	SUBQ  $16, SP  // allocate space for alignment
-+	ANDQ  $-16, SP // align on 16 bytes for SSE
-+
-+	CALL BX
-+
-+	MOVQ BP, SP // get SP back
-+	POPQ BP     // restore BP
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
+@@ -0,0 +1,19 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+	MOVQ AX, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-new file mode 100644
-index 00000000000000..2a03bc53f1c39c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,82 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo
 +
 +#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_arm64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R1
-+	CALL R1
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
-+	// See crosscall2.
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
-+
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
-+
-+	MOVD ·threadentry_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
-+	MOVD $0, R0                     // TODO: get the return value from threadentry
-+
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
 +
-+	ADD $(8*24), RSP
-+	RET
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
 +
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R6
-+	MOVD a1+8(FP), R0
-+	MOVD a2+16(FP), R1
-+	MOVD a3+24(FP), R2
-+	MOVD a4+32(FP), R3
-+	MOVD a5+40(FP), R4
-+	CALL R6
-+	MOVD R0, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
 new file mode 100644
-index 00000000000000..dcd1412237a0a3
+index 00000000000000..da07005c0bc988
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_stubs.s
-@@ -0,0 +1,94 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
+@@ -0,0 +1,16 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo
 +
 +#include "textflag.h"
 +
-+// these stubs are here because it is not possible to go:linkname directly the C functions on darwin arm64
-+
-+TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_malloc(SB)
-+	RET
-+
-+TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_free(SB)
-+	RET
-+
-+TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setenv(SB)
-+	RET
-+
-+TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_unsetenv(SB)
-+	RET
-+
-+TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigfillset(SB)
-+	RET
-+
-+TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_nanosleep(SB)
-+	RET
-+
-+TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_abort(SB)
-+	RET
-+
-+TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigaltstack(SB)
-+	RET
-+
-+TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_init(SB)
-+	RET
-+
-+TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_create(SB)
-+	RET
-+
-+TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_detach(SB)
-+	RET
-+
-+TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_sigmask(SB)
-+	RET
-+
-+TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_self(SB)
-+	RET
-+
-+TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_get_stacksize_np(SB)
-+	RET
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
 +TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_getstacksize(SB)
-+	RET
-+
-+TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_setstacksize(SB)
-+	RET
 +
 +TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_destroy(SB)
-+	RET
-+
-+TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_lock(SB)
-+	RET
-+
-+TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_unlock(SB)
-+	RET
-+
-+TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_cond_broadcast(SB)
-+	RET
-+
-+TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_setspecific(SB)
-+	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
 new file mode 100644
 index 00000000000000..603cd6802eea20
@@ -8983,9 +9015,73 @@ index 00000000000000..b5aeb4b47a2e55
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 +
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
+new file mode 100644
+index 00000000000000..8417ba55e1e5cf
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
+@@ -0,0 +1,58 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_malloc(SB)
++
++TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_free(SB)
++
++TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setenv(SB)
++
++TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_unsetenv(SB)
++
++TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigfillset(SB)
++
++TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_nanosleep(SB)
++
++TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_abort(SB)
++
++TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigaltstack(SB)
++
++TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_init(SB)
++
++TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_create(SB)
++
++TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_detach(SB)
++
++TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_sigmask(SB)
++
++TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_lock(SB)
++
++TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_unlock(SB)
++
++TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_cond_broadcast(SB)
++
++TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_setspecific(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
 new file mode 100644
-index 00000000000000..8c86ce392c8323
+index 00000000000000..59560c7d590f7a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
 @@ -0,0 +1,108 @@
@@ -8993,7 +9089,7 @@ index 00000000000000..8c86ce392c8323
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +#include "go_asm.h"
 +#include "textflag.h"
@@ -9099,7 +9195,7 @@ index 00000000000000..8c86ce392c8323
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
 new file mode 100644
-index 00000000000000..10f3da0ab4e951
+index 00000000000000..025276dffb2aa5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
 @@ -0,0 +1,87 @@
@@ -9107,7 +9203,7 @@ index 00000000000000..10f3da0ab4e951
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +#include "go_asm.h"
 +#include "textflag.h"
@@ -9210,12 +9306,10 @@ index 00000000000000..e94cca9e27e30a
 +#endif // _GO_DL_SHIMS_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
 new file mode 100644
-index 00000000000000..faefd9c97109ff
+index 00000000000000..4b8fd49edd2d40
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
-@@ -0,0 +1,36 @@
-+//go:build cgo || goexperiment.ms_nocgo_opensslcrypto
-+
+@@ -0,0 +1,34 @@
 +package ossl
 +
 +import (
@@ -9272,11 +9366,11 @@ index 00000000000000..ef1d99652e3bae
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
 new file mode 100644
-index 00000000000000..04178991217173
+index 00000000000000..822ff8fbbdf9a1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
 @@ -0,0 +1,16 @@
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +package ossl
 +
@@ -9294,7 +9388,7 @@ index 00000000000000..04178991217173
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
 new file mode 100644
-index 00000000000000..bb8ea6fafdc4d9
+index 00000000000000..9d38464e9fb964
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
 @@ -0,0 +1,59 @@
@@ -9302,8 +9396,8 @@ index 00000000000000..bb8ea6fafdc4d9
 +package ossl
 +
 +//go:generate go run ../../cmd/mkcgo -out zossl.go -mode dynload -package ossl shims.h
-+//go:generate go run ../../cmd/mkcgo -out zossl.go -nocgo -mode dynload -package ossl -tags goexperiment.ms_nocgo_opensslcrypto shims.h
-+//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package ossl -tags "unix && goexperiment.ms_nocgo_opensslcrypto" dl.h
++//go:generate go run ../../cmd/mkcgo -out zossl.go -nocgo -mode dynload -package ossl shims.h
++//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package ossl -tags unix dl.h
 +
 +import "unsafe"
 +
@@ -9799,11 +9893,11 @@ index 00000000000000..3ce5eb8435c9fd
 +#endif // _GO_OSSL_SHIMS_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..2fa7bd4c66b3fb
+index 00000000000000..0e3e6ca7d87db2
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
 @@ -0,0 +1,84 @@
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +package ossl
 +
@@ -9889,33 +9983,33 @@ index 00000000000000..2fa7bd4c66b3fb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 new file mode 100644
-index 00000000000000..dffedf87367375
+index 00000000000000..d6a7523ba10197
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 @@ -0,0 +1,5 @@
-+//go:build !cgo && darwin && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && darwin
 +
 +package ossl
 +
 +//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
 new file mode 100644
-index 00000000000000..63a5798fe55a75
+index 00000000000000..20cb4556a12aa8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
 @@ -0,0 +1,5 @@
-+//go:build !cgo && linux && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && linux
 +
 +package ossl
 +
 +//go:cgo_import_dynamic _ _ "libdl.so.2"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
 new file mode 100644
-index 00000000000000..6c2ae8d47bac94
+index 00000000000000..9564b3a7033521
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
 @@ -0,0 +1,20 @@
-+//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && unix
 +
 +package ossl
 +
@@ -9937,11 +10031,11 @@ index 00000000000000..6c2ae8d47bac94
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
 new file mode 100644
-index 00000000000000..0e541464f568cb
+index 00000000000000..48640cdcbf558f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
 @@ -0,0 +1,22 @@
-+//go:build !cgo && windows && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && windows
 +
 +package ossl
 +
@@ -9965,13 +10059,13 @@ index 00000000000000..0e541464f568cb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
 new file mode 100644
-index 00000000000000..4d03a5f97cec27
+index 00000000000000..25b9fddfbc888b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
 @@ -0,0 +1,51 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:build !cgo && (unix && goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cgo && unix
 +
 +#include "textflag.h"
 +
@@ -10022,13 +10116,13 @@ index 00000000000000..4d03a5f97cec27
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 new file mode 100644
-index 00000000000000..fb345aac77ea48
+index 00000000000000..e4d870cecde36c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 @@ -0,0 +1,45 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:build !cgo && unix && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo && unix
 +
 +package ossl
 +
@@ -13998,13 +14092,13 @@ index 00000000000000..7ced663df8a562
 +import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..a8ff682b06c5c4
+index 00000000000000..56b1f871c7fcbf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 @@ -0,0 +1,2390 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +package ossl
 +
@@ -16394,11 +16488,11 @@ index 00000000000000..a8ff682b06c5c4
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 new file mode 100644
-index 00000000000000..f1248bb3ccd7a6
+index 00000000000000..38ed8f5d69d946
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 @@ -0,0 +1,371 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -16771,11 +16865,11 @@ index 00000000000000..f1248bb3ccd7a6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..34bffbf4f723a7
+index 00000000000000..30ed1f38392629
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 @@ -0,0 +1,253 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
 +package openssl
@@ -17052,11 +17146,11 @@ index 00000000000000..c35f1bdcbef80b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
 new file mode 100644
-index 00000000000000..c464f41a5076fb
+index 00000000000000..47bfafa9d4c63f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
 @@ -0,0 +1,32 @@
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +package openssl
 +
@@ -17090,11 +17184,11 @@ index 00000000000000..c464f41a5076fb
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
 new file mode 100644
-index 00000000000000..be03becaaeeeb7
+index 00000000000000..de987d68d364a6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
 @@ -0,0 +1,165 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package osslsetup
 +
@@ -17261,11 +17355,11 @@ index 00000000000000..be03becaaeeeb7
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
 new file mode 100644
-index 00000000000000..faa9c37742133e
+index 00000000000000..fa00950e79da39
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
 @@ -0,0 +1,160 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package osslsetup
 +
@@ -17464,11 +17558,11 @@ index 00000000000000..0e61cc128ef981
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
 new file mode 100644
-index 00000000000000..26962b73dcd3a8
+index 00000000000000..1a2f48ed510326
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
 @@ -0,0 +1,32 @@
-+//go:build unix && !cmd_go_bootstrap && !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build unix && !cmd_go_bootstrap && !cgo
 +
 +package osslsetup
 +
@@ -17544,11 +17638,11 @@ index 00000000000000..c4981aef84b42f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
 new file mode 100644
-index 00000000000000..53b53586a05812
+index 00000000000000..63eb1994606e8e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
 @@ -0,0 +1,74 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package osslsetup
 +
@@ -17641,11 +17735,11 @@ index 00000000000000..810ccaa4fc3330
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
 new file mode 100644
-index 00000000000000..089f15899b1a01
+index 00000000000000..fd1cad5692a0bc
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
 @@ -0,0 +1,21 @@
-+//go:build !cgo && goexperiment.ms_nocgo_opensslcrypto
++//go:build !cgo
 +
 +package osslsetup
 +
@@ -17668,11 +17762,11 @@ index 00000000000000..089f15899b1a01
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
 new file mode 100644
-index 00000000000000..a9310fd6ec4721
+index 00000000000000..3bdc8037c0c9af
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
 @@ -0,0 +1,184 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -17858,11 +17952,11 @@ index 00000000000000..a9310fd6ec4721
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..ab4bb9b2348dab
+index 00000000000000..c12c0119e99767
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 @@ -0,0 +1,54 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -17918,11 +18012,11 @@ index 00000000000000..ab4bb9b2348dab
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 new file mode 100644
-index 00000000000000..afbb7f4d0d6f5e
+index 00000000000000..e366c7a7a833fa
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 @@ -0,0 +1,239 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -18163,11 +18257,11 @@ index 00000000000000..afbb7f4d0d6f5e
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 new file mode 100644
-index 00000000000000..125404e395d198
+index 00000000000000..cc6e108e948727
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 @@ -0,0 +1,338 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -18507,11 +18601,11 @@ index 00000000000000..125404e395d198
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 new file mode 100644
-index 00000000000000..3c70b19cce3513
+index 00000000000000..bcc58f2e42ec86
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 @@ -0,0 +1,21 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -18534,11 +18628,11 @@ index 00000000000000..3c70b19cce3513
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 new file mode 100644
-index 00000000000000..e933228919296d
+index 00000000000000..25fa08d0152e81
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 @@ -0,0 +1,68 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -18608,11 +18702,11 @@ index 00000000000000..e933228919296d
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..e989da8db9cfa6
+index 00000000000000..935a3962b9d00f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,716 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
+@@ -0,0 +1,714 @@
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -18948,23 +19042,21 @@ index 00000000000000..e989da8db9cfa6
 +	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
 +	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
 +
-+	if p != nil && q != nil {
-+		allPrecomputedExists := dp != nil && dq != nil && qinv != nil
-+		// The precomputed values should only be passed if P and Q are present
-+		// and every precomputed value is present. (If any precomputed value is
-+		// missing, don't pass any of them.)
-+		//
-+		// In OpenSSL 3.0 and 3.1, we must also omit P and Q if any precomputed
-+		// value is missing. See https://github.com/openssl/openssl/pull/22334
-+		if minor() >= 2 || allPrecomputedExists {
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
-+		}
-+		if allPrecomputedExists {
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
-+			bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
-+		}
++	// OpenSSL 3.0 and 3.1 required all the precomputed values if
++	// P and Q are present. See:
++	// https://github.com/openssl/openssl/pull/22334
++	//
++	// We could only set P and Q if they exist when using OpenSSL 3.2
++	// or newer, but the RSA provider might be built with an older
++	// OpenSSL version, in which case it would still require all the
++	// precomputed values. So better always provide all the values or
++	// none of them.
++	if p != nil && q != nil && dp != nil && dq != nil && qinv != nil {
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
 +	}
 +
 +	params, err := bld.build()
@@ -19330,11 +19422,11 @@ index 00000000000000..e989da8db9cfa6
 +})
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..5a0aa905f03e43
+index 00000000000000..57930900c2bfa8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 @@ -0,0 +1,158 @@
-+//go:build !cmd_go_bootstrap && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -19494,13 +19586,13 @@ index 00000000000000..5a0aa905f03e43
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 new file mode 100644
-index 00000000000000..a40affbb5d6273
+index 00000000000000..4d945290e3bdff
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
 @@ -0,0 +1,86 @@
 +// Code generated by cmd/genaesmodes. DO NOT EDIT.
 +
-+//go:build (cgo || goexperiment.ms_nocgo_opensslcrypto) && !cmd_go_bootstrap
++//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
@@ -24607,7 +24699,7 @@ index 00000000000000..88c4cdf9ec04cc
 +//go:generate go run update_tool.go
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
 new file mode 100644
-index 00000000000000..6bc959b64ce3eb
+index 00000000000000..d0868f0f790351
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
 @@ -0,0 +1,88 @@
@@ -24615,7 +24707,7 @@ index 00000000000000..6bc959b64ce3eb
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && darwin
++//go:build !cgo
 +
 +package fakecgo
 +
@@ -25093,10 +25185,10 @@ index 00000000000000..c0a759bfb849c3
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..bf407d4427633a
+index 00000000000000..959dafa43dc6b8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,87 @@
+@@ -0,0 +1,83 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -25106,32 +25198,28 @@ index 00000000000000..bf407d4427633a
 +#include "go_asm.h"
 +#include "abi_arm64.h"
 +
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
-+	MOVD R1, 16(RSP)
 +	MOVD ·x_cgo_init_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_thread_start_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_setenv_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD R0, 8(RSP)
 +	MOVD ·x_cgo_unsetenv_call(SB), R26
 +	MOVD (R26), R2
 +	CALL (R2)
@@ -25186,10 +25274,10 @@ index 00000000000000..bf407d4427633a
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
 new file mode 100644
-index 00000000000000..a18645048960cb
+index 00000000000000..9349ba86bc82bb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
-@@ -0,0 +1,225 @@
+@@ -0,0 +1,175 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -25280,36 +25368,6 @@ index 00000000000000..a18645048960cb
 +
 +//go:nosplit
 +//go:norace
-+func pthread_self() pthread_t {
-+	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_get_stacksize_np(thread pthread_t) size_t {
-+	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
-+	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
 +func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
 +	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
 +}
@@ -25380,26 +25438,6 @@ index 00000000000000..a18645048960cb
 +var _pthread_sigmask uint8
 +var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
 +
-+//go:linkname _pthread_self _pthread_self
-+var _pthread_self uint8
-+var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
-+
-+//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
-+var _pthread_get_stacksize_np uint8
-+var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
-+var _pthread_attr_setstacksize uint8
-+var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-+
 +//go:linkname _pthread_mutex_lock _pthread_mutex_lock
 +var _pthread_mutex_lock uint8
 +var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
@@ -25417,10 +25455,10 @@ index 00000000000000..a18645048960cb
 +var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
 new file mode 100644
-index 00000000000000..8c4489f0369c25
+index 00000000000000..08a7601c2ed0ff
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
-@@ -0,0 +1,30 @@
+@@ -0,0 +1,60 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -25430,6 +25468,8 @@ index 00000000000000..8c4489f0369c25
 +
 +package fakecgo
 +
++import "unsafe"
++
 +//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
@@ -25442,21 +25482,74 @@ index 00000000000000..8c4489f0369c25
 +//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
++
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
++
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
+new file mode 100644
+index 00000000000000..35ef7ac11cb955
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
+@@ -0,0 +1,19 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
++
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
++
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
-index 00000000000000..3351b7b623822a
+index 00000000000000..c63651b123f1bc
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
-@@ -0,0 +1,73 @@
+@@ -0,0 +1,58 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -25466,7 +25559,7 @@ index 00000000000000..3351b7b623822a
 +
 +#include "textflag.h"
 +
-+// these stubs are here because it is not possible to go:linkname directly the C functions on darwin arm64
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
 +TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_malloc(SB)
@@ -25504,21 +25597,6 @@ index 00000000000000..3351b7b623822a
 +TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_sigmask(SB)
 +
-+TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_self(SB)
-+
-+TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_get_stacksize_np(SB)
-+
-+TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_getstacksize(SB)
-+
-+TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_setstacksize(SB)
-+
-+TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_destroy(SB)
-+
 +TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_mutex_lock(SB)
 +
@@ -35326,18 +35404,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..0fb122073acdff 100644
+index b6f6376eac041a..6cb7848a29c00f 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20251219133548-db44f2109b85
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20251218120905-3dc2f5f6b182
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
@@ -35346,7 +35424,7 @@ index b6f6376eac041a..0fb122073acdff 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20251219091053-f9796ee5d078
++# github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 76a4b8d48ab9245f0e01d3cd253eed55c5f14aeb Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 15 Jan 2026 13:01:25 +0100
Subject: [PATCH 670/887] bump openssl

---
 .../0001-Vendor-external-dependencies.patch   | 31 ++++++++++++++-----
 1 file changed, 23 insertions(+), 8 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index ba8635fdd85..60a18815ac2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -90,6 +90,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   58 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
+ .../openssl/v2/internal/ossl/asm_others.s     |    7 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
@@ -248,7 +249,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 240 files changed, 31432 insertions(+), 7 deletions(-)
+ 241 files changed, 31439 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -324,6 +325,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
@@ -2150,7 +2152,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..7183aa16a655e6 100644
+index efc07451b53448..4333a7155532dc 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2159,17 +2161,17 @@ index efc07451b53448..7183aa16a655e6 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..223b1d2797cf87 100644
+index b6b841b44d8e38..126eae60f4b991 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83 h1:QeGy5Zv6lLfxzG+0PCOh06EVYPrYXI6q0UJhj+YXImU=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055 h1:I6wGxCUkueebFXN3Mn8bPJQV+XkwK9CNNlpgm3nB1O0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184 h1:b0PQtPdldqXsTg7yLqLo9HFUF+4Qp07Vi+ohWwTBNrU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
@@ -9286,6 +9288,19 @@ index 00000000000000..025276dffb2aa5
 +	MOVD	R1, libcCallInfo_r2(R3)	// save r2
 +
 +    RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
+new file mode 100644
+index 00000000000000..dfc38e4106d778
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
+@@ -0,0 +1,7 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && !arm64 && !amd64
++
++// This file silences errors about body-less functions.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
 new file mode 100644
 index 00000000000000..e94cca9e27e30a
@@ -35404,11 +35419,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..6cb7848a29c00f 100644
+index b6f6376eac041a..42fde54eacaeda 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260115104635-63db5bc96a83
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig

From 505e3ca1cb1fe0e9b18123cfcaa0519f5d54b0fd Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 15 Jan 2026 10:26:58 -0800
Subject: [PATCH 671/887] Update gopdb for build fix (#2055)

---
 eng/pipeline/steps/install-gopdb.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/steps/install-gopdb.yml b/eng/pipeline/steps/install-gopdb.yml
index ba20d2da42f..75952de51c3 100644
--- a/eng/pipeline/steps/install-gopdb.yml
+++ b/eng/pipeline/steps/install-gopdb.yml
@@ -7,7 +7,7 @@
 parameters:
   - name: version
     type: string
-    default: 0.2.1
+    default: 0.2.6
 
 steps:
   - pwsh: |

From 13642bb32dac1f3725a7bd83ed0d30b83fb14799 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 15 Jan 2026 18:28:29 +0000
Subject: [PATCH 672/887] CI: add build support for Windows arm64 (#2053)

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 26afb0ef32a..98ded7aabfd 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -71,6 +71,7 @@ stages:
           - { os: windows, arch: amd64, config: buildandpack }
           - { os: linux, arch: arm, hostArch: amd64, config: buildandpack }
           - { os: linux, arch: arm64, hostArch: amd64, config: buildandpack }
+          - { os: windows, arch: arm64, hostArch: amd64, config: buildandpack }
           - { os: darwin, arch: amd64, config: buildandpack }
           - { os: darwin, arch: arm64, hostArch: amd64, config: buildandpack }
           - ${{ if parameters.includeArm64Host }}:
@@ -85,6 +86,7 @@ stages:
           # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: test }
           # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test }
           # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test, fips: true }
+          # - { experiment: nosystemcrypto, os: windows, arch: arm64, config: test }
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: devscript }
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test }
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }

From a21516fc71bb7cef7cde10073848e33ba2294aed Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 15 Jan 2026 11:54:14 -0800
Subject: [PATCH 673/887] Ensure gopdb isn't cross-compiled (#2059)

---
 eng/pipeline/steps/install-gopdb.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/eng/pipeline/steps/install-gopdb.yml b/eng/pipeline/steps/install-gopdb.yml
index 75952de51c3..e693ff83eee 100644
--- a/eng/pipeline/steps/install-gopdb.yml
+++ b/eng/pipeline/steps/install-gopdb.yml
@@ -28,6 +28,12 @@ steps:
       . eng/utilities.ps1
       Download-Stage0 # Make sure we have a Go toolchain available
       cd go-pdb
+
+      # Ensure we don't cross-compile. gopdb needs to run on the current machine.
+      $env:GOOS = ''
+      $env:GOARCH = ''
+      $env:GOARM = ''
+
       & go build -o $(pdbPath)/gopdb.exe ./cmd/gopdb
     displayName: Install gopdb
 

From 5352fc25aab022dbf54443f565892f5b78cd59a7 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 16 Jan 2026 02:26:07 -0800
Subject: [PATCH 674/887] Crypto docs updates and generator strengthening
 (#2061)

* Match updatecryptodocs with doc changes, improve editability, self-test

* Fix typo, update note about cgo-less experiment

* Fix CRLF-checkout line ending comparison
---
 eng/_util/cmd/updatecryptodocs/docs.go        | 54 +++++++++++++------
 .../cmd/updatecryptodocs/updatecryptodocs.go  | 34 ++++++++----
 .../updatecryptodocs/updatecryptodocs_test.go | 32 +++++++++++
 eng/doc/MigrationGuide.md                     | 10 ++--
 ...03-Implement-crypto-internal-backend.patch |  2 +-
 5 files changed, 102 insertions(+), 30 deletions(-)
 create mode 100644 eng/_util/cmd/updatecryptodocs/updatecryptodocs_test.go

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index f5bb4f279d2..35545d2e36a 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -54,16 +54,18 @@ func (s Platforms) Get(platform string) PlatformStatus {
 }
 
 type Section struct {
-	Title        string
-	ShortTitle   string
-	ColumnHeader string
-	Packages     []string
-	Description  string
-	MinGoVersion string
-	Items        []Item
-	Subsections  []Section
-	Footnotes    []string
-	Footer       string
+	Title                 string
+	ShortTitle            string
+	ColumnHeader          string
+	Packages              []string
+	Description           string
+	DescriptionParagraphs []string
+	MinGoVersion          string
+	Items                 []Item
+	Subsections           []Section
+	Footnotes             []string
+	Footer                string
+	FooterParagraphs      []string
 }
 
 type Document struct {
@@ -186,7 +188,14 @@ var doc = Document{
 			Title:        "Symmetric encryption",
 			ColumnHeader: "Cipher + Mode",
 			Packages:     []string{"crypto/aes", "crypto/cipher", "crypto/des", "crypto/rc4"},
-			Footer:       "- Key Sizes\n\n  AES-GCM works with 128, 192, and 256-bit keys.\n\n- Nonce Sizes\n\n  AES-GCM works with 12-byte nonces.\n\n- Tag Sizes\n\n  AES-GCM works with 16-byte tags.",
+			FooterParagraphs: []string{
+				"- Key Sizes",
+				"  AES-GCM works with 128, 192, and 256-bit keys.",
+				"- Nonce Sizes",
+				"  AES-GCM works with 12-byte nonces.",
+				"- Tag Sizes",
+				"  AES-GCM works with 16-byte tags.",
+			},
 			Items: []Item{
 				{Name: "AES-ECB"},
 				{Name: "AES-CBC"},
@@ -263,7 +272,13 @@ var doc = Document{
 					Title:        "RSA",
 					ColumnHeader: "Padding Mode",
 					Packages:     []string{"crypto/rsa"},
-					Description:  "[rsa.GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey) only supports the following key sizes (in bits): 2048, 3072, 4096.\n\nMulti-prime RSA keys are not supported.\n\nThe RSA key size is subject to the limitations of the underlying cryptographic library.\nFor example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.\nPlease refer to the documentation of the underlying cryptographic library for the specific limitations.\n\nOperations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					DescriptionParagraphs: []string{
+						"Multi-prime RSA keys are not supported.",
+						"The RSA key size is subject to the limitations of the underlying cryptographic library.\n" +
+							"For example, on some Windows and SCOSSL configurations, the key size should be multiple of 8.\n" +
+							"Please refer to the documentation of the underlying cryptographic library for the specific limitations.",
+						"Operations that require random numbers (rand io.Reader) only support [rand.Reader](https://pkg.go.dev/crypto/rand#Reader).",
+					},
 					Items: []Item{
 						{
 							Name: "OAEP (MD5)",
@@ -556,9 +571,14 @@ var doc = Document{
 			},
 		},
 		{
-			Title:       "Higher-level protocols",
-			Packages:    []string{"HPKE", "TLS"},
-			Description: "High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,\nsuch as TLS or Hybrid Public Key Encryption (HPKE).\n\nThese protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.\n\nThis section includes the following subsections:",
+			Title:    "Higher-level protocols",
+			Packages: []string{"HPKE", "TLS"},
+			DescriptionParagraphs: []string{
+				"High-level protocols are algorithms that combine multiple cryptographic primitives to provide a specific functionality,\n" +
+					"such as TLS or Hybrid Public Key Encryption (HPKE).",
+				"These protocols are implemented using native Go code, but they rely on the underlying OS cryptographic libraries for the cryptographic operations.",
+				"This section includes the following subsections:",
+			},
 			Subsections: []Section{
 				{
 					Title:    "Hybrid Public Key Encryption (HPKE)",
@@ -684,7 +704,9 @@ var doc = Document{
 						{
 							Title:        "TLS Cipher Suites",
 							ColumnHeader: "Name",
-							Footer:       "On Windows, it is possible to restrict and reorder the cipher suites following the [Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) by building with the `ms_tls_config_schannel` goexperiment enabled.",
+							Footer: "On Windows, it is possible to restrict and reorder the cipher suites following the " +
+								"[Schannel preferences](https://learn.microsoft.com/en-us/windows/win32/secauthn/cipher-suites-in-schannel) " +
+								"by building with the `ms_tls_config_schannel` goexperiment enabled.",
 							Items: []Item{
 								{
 									Name: "TLS_RSA_WITH_RC4_128_SHA",
diff --git a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
index 51c65d3ce15..6f0daa56377 100644
--- a/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs.go
@@ -29,25 +29,34 @@ func main() {
 }
 
 func write() error {
+	s, err := generate()
+	if err != nil {
+		return fmt.Errorf("failed to generate document: %v", err)
+	}
+
+	if *useStdout {
+		fmt.Print(s)
+		return nil
+	}
+	return os.WriteFile(*docPath, []byte(s), 0o644)
+}
+
+func generate() (string, error) {
 	if err := validate(doc); err != nil {
-		return fmt.Errorf("validation failed: %v", err)
+		return "", fmt.Errorf("validation failed: %v", err)
 	}
 
 	var s strings.Builder
 
 	fmt.Fprintln(&s, "<!-- This file is generated by eng/_util/cmd/updatecryptodocs. DO NOT EDIT. -->")
 	fmt.Fprintln(&s)
-	fmt.Fprintf(&s, "%s", header)
+	normalizedHeader := strings.ReplaceAll(header, "\r\n", "\n")
+	fmt.Fprintf(&s, "%s", normalizedHeader)
 
 	for _, section := range doc.Sections {
 		printSection(&s, section, 2)
 	}
-
-	if *useStdout {
-		fmt.Print(s.String())
-		return nil
-	}
-	return os.WriteFile(*docPath, []byte(s.String()), 0o644)
+	return s.String(), nil
 }
 
 func printSection(w io.Writer, section Section, level int) {
@@ -90,10 +99,14 @@ func printSection(w io.Writer, section Section, level int) {
 		fmt.Fprintln(w, section.Description)
 		fmt.Fprintln(w)
 	}
+	for _, para := range section.DescriptionParagraphs {
+		fmt.Fprintln(w, para)
+		fmt.Fprintln(w)
+	}
 
 	// Subsections list
 	if len(section.Subsections) > 0 {
-		if section.Description == "" {
+		if section.Description == "" && len(section.DescriptionParagraphs) == 0 {
 			fmt.Fprintln(w, "This section includes the following subsections:")
 			fmt.Fprintln(w)
 		}
@@ -120,6 +133,9 @@ func printSection(w io.Writer, section Section, level int) {
 	if section.Footer != "" {
 		fmt.Fprintf(w, "\n%s\n", section.Footer)
 	}
+	for _, line := range section.FooterParagraphs {
+		fmt.Fprintf(w, "\n%s\n", line)
+	}
 
 	for _, sub := range section.Subsections {
 		printSection(w, sub, level+1)
diff --git a/eng/_util/cmd/updatecryptodocs/updatecryptodocs_test.go b/eng/_util/cmd/updatecryptodocs/updatecryptodocs_test.go
new file mode 100644
index 00000000000..3975cd2728f
--- /dev/null
+++ b/eng/_util/cmd/updatecryptodocs/updatecryptodocs_test.go
@@ -0,0 +1,32 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestUpdateCryptoDocsReproducible(t *testing.T) {
+	checkedInPath := filepath.Join("..", "..", "..", "..", *docPath)
+	checkedIn, err := os.ReadFile(checkedInPath)
+	if err != nil {
+		t.Fatalf("Failed to read checked-in document at %q: %v", checkedInPath, err)
+	}
+
+	generated, err := generate()
+	if err != nil {
+		t.Fatalf("Failed to generate document: %v", err)
+	}
+
+	// Normalize Git-checked-out line endings to LF for comparison.
+	actual := strings.ReplaceAll(string(checkedIn), "\r\n", "\n")
+
+	if actual != generated {
+		t.Errorf("Generated document does not match checked-in document. Run this command to update:\n  pwsh eng/run.ps1 updatecryptodocs")
+	}
+}
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 651883052a3..8584d45ba5f 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -140,14 +140,16 @@ After switching to the Microsoft build of Go, you may encounter new build errors
 ```
 Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 
-Consider using our CGO-less experiement by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
-	
+Consider using our cgo-less experiment by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
+
 For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 ```
 
 > [!NOTE]
-> As of Go 1.26, there is a CGO-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
-> This will allow use of OpenSSL without requiring cgo.
+> As of Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
+> This allows the use of OpenSSL without requiring cgo.
+>
+> While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental as of Go 1.26 and may have limitations.
 
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index de9248fb423..0c94c1c7af9 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -3205,7 +3205,7 @@ index 00000000000000..28b2c2434330d6
 +	`
 +	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 +
-+	Consider using our CGO-less experiement by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
++	Consider using our cgo-less experiment by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
 +	
 +	For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 +	`

From ceb91e9148d06012d504014f5ba0a2adf77067ca Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 16 Jan 2026 11:11:18 +0000
Subject: [PATCH 675/887] remove rogue stub file and rename patches to keep
 consistent casing (#2062)

* remove rogue stub file and rename patches to keep consistent casing

* rename files
---
 ...tch => 0006-Add-support-for-logging-used-Windows-APIs.patch} | 2 +-
 ...port-hack.patch => 0007-Remove-long-path-support-hack.patch} | 2 +-
 ...ch => 0012-Align-TLS-settings-with-Microsoft-policies.patch} | 2 +-
 stub                                                            | 0
 4 files changed, 3 insertions(+), 3 deletions(-)
 rename patches/{0006-add-support-for-logging-used-Windows-APIs.patch => 0006-Add-support-for-logging-used-Windows-APIs.patch} (99%)
 rename patches/{0007-remove-long-path-support-hack.patch => 0007-Remove-long-path-support-hack.patch} (98%)
 rename patches/{0012-align-TLS-settings-with-Microsoft-policies.patch => 0012-Align-TLS-settings-with-Microsoft-policies.patch} (99%)
 delete mode 100644 stub

diff --git a/patches/0006-add-support-for-logging-used-Windows-APIs.patch b/patches/0006-Add-support-for-logging-used-Windows-APIs.patch
similarity index 99%
rename from patches/0006-add-support-for-logging-used-Windows-APIs.patch
rename to patches/0006-Add-support-for-logging-used-Windows-APIs.patch
index 9fcb00b2f31..78a481d9916 100644
--- a/patches/0006-add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0006-Add-support-for-logging-used-Windows-APIs.patch
@@ -1,7 +1,7 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Tue, 19 Mar 2024 16:48:18 +0100
-Subject: [PATCH] add support for logging used Windows APIs
+Subject: [PATCH] Add support for logging used Windows APIs
 
 ---
  src/runtime/os_windows.go                    |   1 +
diff --git a/patches/0007-remove-long-path-support-hack.patch b/patches/0007-Remove-long-path-support-hack.patch
similarity index 98%
rename from patches/0007-remove-long-path-support-hack.patch
rename to patches/0007-Remove-long-path-support-hack.patch
index 213a496118d..c05c954b953 100644
--- a/patches/0007-remove-long-path-support-hack.patch
+++ b/patches/0007-Remove-long-path-support-hack.patch
@@ -1,7 +1,7 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Mon, 25 Mar 2024 12:14:00 +0100
-Subject: [PATCH] remove long path support hack
+Subject: [PATCH] Remove long path support hack
 
 Upstream Go tricks Windows into enabling long path support by setting an
 undocumented flag in the PEB. The Microsoft build of Go can't use undocumented
diff --git a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
similarity index 99%
rename from patches/0012-align-TLS-settings-with-Microsoft-policies.patch
rename to patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
index 06d77fc54d7..1a1f55703b2 100644
--- a/patches/0012-align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
@@ -1,7 +1,7 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Fri, 12 Dec 2025 16:46:44 +0100
-Subject: [PATCH] align TLS settings with Microsoft policies
+Subject: [PATCH] Align TLS settings with Microsoft policies
 
 ---
  doc/godebug.md                           |   9 +
diff --git a/stub b/stub
deleted file mode 100644
index e69de29bb2d..00000000000

From 702d0f16225cfdbf315c754ad7c375e7a0b6ea2d Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 16 Jan 2026 12:54:55 +0000
Subject: [PATCH 676/887] CI: enable native macos arm64 testing (#2063)

* CI: enable native macos arm64 testing

* switch to native build

* try pinning to macos 15
---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 10 +++++-----
 eng/pipeline/stages/pool-2.yml                   |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 98ded7aabfd..3ab4afaa0c4 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -73,7 +73,7 @@ stages:
           - { os: linux, arch: arm64, hostArch: amd64, config: buildandpack }
           - { os: windows, arch: arm64, hostArch: amd64, config: buildandpack }
           - { os: darwin, arch: amd64, config: buildandpack }
-          - { os: darwin, arch: arm64, hostArch: amd64, config: buildandpack }
+          - { os: darwin, arch: arm64, config: buildandpack }
           - ${{ if parameters.includeArm64Host }}:
             - { os: linux, arch: arm64, config: buildandpack }
         - ${{ if parameters.innerloop }}:
@@ -82,10 +82,10 @@ stages:
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: nocgo }
           - { experiment: systemcrypto, os: darwin, arch: amd64, config: test, fips: true }
-          # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: devscript }
-          # - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: test }
-          # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test }
-          # - { experiment: systemcrypto, os: darwin, arch: arm64, config: test, fips: true }
+          - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: devscript }
+          - { experiment: nosystemcrypto, os: darwin, arch: arm64, config: test }
+          - { experiment: systemcrypto, os: darwin, arch: arm64, config: test }
+          - { experiment: systemcrypto, os: darwin, arch: arm64, config: test, fips: true }
           # - { experiment: nosystemcrypto, os: windows, arch: arm64, config: test }
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: devscript }
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test }
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index 1656506a99c..d6499f0818e 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -60,5 +60,5 @@ stages:
             vmImage: 'macos-14'
             os: macOS
           ${{ else }}:
-            vmImage: 'macos-latest-internal'
+            vmImage: 'macos-15-arm64'
             os: macOS

From e6a5e41ab3ad8d64d74cde59b2b8293c92fd1579 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 16 Jan 2026 16:03:28 +0000
Subject: [PATCH 677/887] Update submodule to latest master (532e3203):
 go/types,cmd/compile/internal/types2: better diagnostic for type shadowing

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2bc4315d92a..532e3203492 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2bc4315d92a70d9a5e895d60defba4f799798806
+Subproject commit 532e3203492ebcac67b2f3aa2a52115f49d51997

From ac202498ea7d8aaf11d053512a1ce6db4e6a2ef2 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 16 Jan 2026 12:37:22 -0800
Subject: [PATCH 678/887] Use useOptimizedSDLTasks: false to fix build break
 (#2065)

---
 eng/pipeline/rolling-internal-pipeline.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/eng/pipeline/rolling-internal-pipeline.yml b/eng/pipeline/rolling-internal-pipeline.yml
index 62e0d56ea9d..b46f3e94330 100644
--- a/eng/pipeline/rolling-internal-pipeline.yml
+++ b/eng/pipeline/rolling-internal-pipeline.yml
@@ -91,6 +91,9 @@ extends:
       name: $(DncEngInternalBuildPool)
       image: 1es-windows-2022
       os: windows
+    featureFlags:
+      # https://github.com/microsoft/go-lab/issues/288
+      useOptimizedSDLTasks: false
     sdl:
       enableProductionSDL: true
       codeql:

From 6bb55ab4159e7b5075adc70d024972322e984d2a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 19 Jan 2026 16:03:13 +0000
Subject: [PATCH 679/887] Update submodule to latest master (7251c9e0): doc:
 fix urlmaxqueryparams typos

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 532e3203492..7251c9e0f00 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 532e3203492ebcac67b2f3aa2a52115f49d51997
+Subproject commit 7251c9e0f00a6d7d37bb441f3e823c160131e9b5

From d81450c9900a6a6d487db58f83fc5eed1333b9c7 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 21 Jan 2026 12:11:55 +0100
Subject: [PATCH 680/887] unskip TestSignatureSelection/ed25519 (#2070)

---
 patches/0004-Use-crypto-backends.patch | 20 +++++++-------------
 1 file changed, 7 insertions(+), 13 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index a5e9d1d01bf..4ea980e06a8 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -79,7 +79,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha3/sha3_test.go                  |  18 +-
  src/crypto/sha512/sha512.go                   |   2 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
- src/crypto/tls/auth_test.go                   |   7 +
+ src/crypto/tls/auth_test.go                   |   1 +
  src/crypto/tls/cipher_suites.go               |  10 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
@@ -100,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1510 insertions(+), 180 deletions(-)
+ 96 files changed, 1504 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -3464,19 +3464,13 @@ index 080bf694f03652..0c899f5c407ffa 100644
  	})
  }
 diff --git a/src/crypto/tls/auth_test.go b/src/crypto/tls/auth_test.go
-index 727bdc4df76393..73dee851e1bb4a 100644
+index 727bdc4df76393..5a770fcb9e85c9 100644
 --- a/src/crypto/tls/auth_test.go
 +++ b/src/crypto/tls/auth_test.go
-@@ -67,6 +67,13 @@ func TestSignatureSelection(t *testing.T) {
+@@ -67,6 +67,7 @@ func TestSignatureSelection(t *testing.T) {
  			t.Logf("skipping test[%d] - not compatible with TLS FIPS mode", testNo)
  			continue
  		}
-+
-+		if fips140tls.Required() && test.expectedSigAlg == Ed25519 {
-+			// CNG and SymCrypt do not support Ed25519.
-+			t.Logf("skipping test[%d] - Ed25519 is not compatible with Microsoft TLS FIPS mode", testNo)
-+			continue
-+		}
 +
  		savedGODEBUG := os.Getenv("GODEBUG")
  		os.Setenv("GODEBUG", savedGODEBUG+","+test.godebug)
@@ -3589,7 +3583,7 @@ index 77a24b4a78d8fc..84724fac5f951e 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index efdaeae6f7e39a..2bd004ad23ae2e 100644
+index 06675a8ce9d2a1..9b761f256f4fcf 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,20 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -3615,7 +3609,7 @@ index efdaeae6f7e39a..2bd004ad23ae2e 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index b066924e291686..c81d0e56598634 100644
+index 0033164f65da8c..04e995eddcf6c1 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -3629,7 +3623,7 @@ index b066924e291686..c81d0e56598634 100644
  	"errors"
  	"fmt"
  	"hash"
-@@ -447,9 +447,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
+@@ -453,9 +453,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
  	marshaler, ok := in.(binaryMarshaler)

From 21bdc865181b9f49d89dba7eed70e71180ad1b9a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 21 Jan 2026 16:11:02 +0000
Subject: [PATCH 681/887] Update submodule to latest master (2baa1d17):
 runtime: remove the unused scanIdx from mspan

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 7251c9e0f00..2baa1d17628 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 7251c9e0f00a6d7d37bb441f3e823c160131e9b5
+Subproject commit 2baa1d17628bb2f09757617382b1e61f1f9f0ddd

From a18a22e78bd8fa1a15d141f75d87c57a45550781 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 21 Jan 2026 09:49:31 -0800
Subject: [PATCH 682/887]  Add Microsoft version information (#2045)

---
 eng/_util/cmd/build/build.go                  |  16 +-
 ...03-Implement-crypto-internal-backend.patch |  75 +--
 ...13-Add-Microsoft-version-information.patch | 518 ++++++++++++++++++
 3 files changed, 571 insertions(+), 38 deletions(-)
 create mode 100644 patches/0013-Add-Microsoft-version-information.patch

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 6f4ff353614..a25d8bef564 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -270,7 +270,7 @@ func build(o *options) (err error) {
 				if version, err = writeDevelVersionFile(goRootDir, executableExtension); err != nil {
 					return fmt.Errorf("unable to pack: failed writing development VERSION file: %v", err)
 				}
-				// Best effort: clean up the VERSION file when we're done. This is just for dev
+				// Best effort: clean up the VERSION file when we're done. Clean up for tidier dev
 				// workflows: the temp VERSION file should never be checked in.
 				defer os.Remove(filepath.Join(goRootDir, "VERSION"))
 			} else {
@@ -279,6 +279,20 @@ func build(o *options) (err error) {
 		} else {
 			version, _, _ = strings.Cut(string(data), "\n")
 		}
+		// We also need to copy our MICROSOFT_REVISION file in so the toolset can report that it's a
+		// Microsoft build of a specific revision and embed that info into built binaries.
+		microsoftRevisionDst := filepath.Join(goRootDir, "MICROSOFT_REVISION")
+		if err := copyFile(microsoftRevisionDst, filepath.Join(rootDir, "MICROSOFT_REVISION")); err != nil {
+			if !errors.Is(err, os.ErrNotExist) {
+				return fmt.Errorf("unable to pack: failed to read MICROSOFT_REVISION file for unexpected reason: %v", err)
+			}
+			// Ok: a main branch or pre-stable release branch has no MICROSOFT_REVISION file.
+		} else {
+			// Best effort: clean up the MICROSOFT_REVISION file when we're done. Clean up for
+			// tidier dev workflows: the temp MICROSOFT_REVISION file should never be checked in.
+			defer os.Remove(microsoftRevisionDst)
+		}
+
 		cmd := exec.Command(filepath.Join(goRootDir, "bin", "go"+executableExtension), "tool", "distpack")
 		cmd.Env = append(os.Environ(), "GOROOT="+goRootDir)
 		cmd.Stdout = os.Stdout
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0c94c1c7af9..54d371133f7 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -22,7 +22,7 @@ desired goexperiments and build tags.
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
- src/cmd/link/internal/ld/main.go              |  20 +-
+ src/cmd/link/internal/ld/main.go              |   2 +-
  src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_test.go   |  56 +++
  src/crypto/internal/backend/bbig/big.go       |  17 +
@@ -50,7 +50,7 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  17 +
  src/go/build/deps_test.go                     |  24 +-
- src/internal/buildcfg/exp.go                  |  57 +++
+ src/internal/buildcfg/exp.go                  |  77 ++++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
  44 files changed, 2768 insertions(+), 20 deletions(-)
@@ -742,44 +742,18 @@ index c7060898778c88..47de9e25baa759 100644
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index a4b3a0422f2f41..ce290ab4617cfd 100644
+index a4b3a0422f2f41..0140c385e47991 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
-@@ -44,6 +44,7 @@ import (
- 	"os"
- 	"runtime"
- 	"runtime/pprof"
-+	"slices"
- 	"strconv"
- 	"strings"
- )
-@@ -188,11 +189,22 @@ func Main(arch *sys.Arch, theArch Arch) {
- 
- 	buildVersion := buildcfg.Version
- 	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
--		sep := " "
--		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
--			sep = "-"
-+		// buildVersion is intended to contain non-default experiment flags.
-+		// The Microsoft build of Go default behavior is to set the
-+		// nosystemcrypto experiments, so we don't include it in the buildVersion string.
-+		// This is also important because runtime.Version() gets the value from
-+		// the buildVersion string, and many code out there, e.g. the standard library
-+		// go/version package, doesn't expect the version to contain experiments.
-+		goexperiment = strings.Join(slices.DeleteFunc(strings.Split(goexperiment, ","), func(s string) bool {
-+			return s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
-+		}), ",")
-+		if goexperiment != "" {
-+			sep := " "
-+			if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
-+				sep = "-"
-+			}
-+			buildVersion += sep + "X:" + goexperiment
- 		}
--		buildVersion += sep + "X:" + goexperiment
+@@ -187,7 +187,7 @@ func Main(arch *sys.Arch, theArch Arch) {
  	}
- 	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
  
+ 	buildVersion := buildcfg.Version
+-	if goexperiment := buildcfg.Experiment.String(); goexperiment != "" {
++	if goexperiment := buildcfg.Experiment.MSString(); goexperiment != "" {
+ 		sep := " "
+ 		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
+ 			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
 index 036eda13bc8807..33a79409ecc1fe 100644
 --- a/src/cmd/link/link_test.go
@@ -3267,7 +3241,7 @@ index 3f2b2399ec4127..f52b6b1ac71711 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 0c25f3cce97202..4bcb62b7c63fe6 100644
+index 0c25f3cce97202..0ec29033d9de89 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -3347,6 +3321,33 @@ index 0c25f3cce97202..4bcb62b7c63fe6 100644
  	return flags, nil
  }
  
+@@ -203,6 +260,26 @@ func (exp *ExperimentFlags) String() string {
+ 	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
+ }
+ 
++// MSString returns the canonical GOEXPERIMENT string to enable this experiment
++// configuration. This is a modified version of what's returned by
++// [ExperimentFlags.String] that ensures experiments that have a different
++// baseline in the Microsoft build of Go are elided.
++//
++// Elision is important because this method is involved in the value of
++// runtime.Version(), and many usages out there, e.g. the standard library
++// go/version package, don't expect the version to contain experiments.
++func (exp *ExperimentFlags) MSString() string {
++	// Parse [String] rather than calling expList directly so that changes to
++	// [String] are reflected in [MSString] without careful tracking.
++	exps := strings.Split(exp.String(), ",")
++	// The Microsoft build of Go default behavior sets a few experiments that we
++	// need to remove from the result.
++	exps = slices.DeleteFunc(exps, func(s string) bool {
++		return s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
++	})
++	return strings.Join(exps, ",")
++}
++
+ // expList returns the list of lower-cased experiment names for
+ // experiments that differ from base. base may be nil to indicate no
+ // experiments. If all is true, then include all experiment flags,
 diff --git a/src/runtime/runtime_boring.go b/src/runtime/runtime_boring.go
 index 831ee67afc952d..d2f00d57c10286 100644
 --- a/src/runtime/runtime_boring.go
diff --git a/patches/0013-Add-Microsoft-version-information.patch b/patches/0013-Add-Microsoft-version-information.patch
new file mode 100644
index 00000000000..c9446d530c0
--- /dev/null
+++ b/patches/0013-Add-Microsoft-version-information.patch
@@ -0,0 +1,518 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Tue, 13 Jan 2026 15:28:15 -0800
+Subject: [PATCH] Add Microsoft version information
+
+Embed a Microsoft marker and the current revision into built Go binaries,
+including the Go toolset itself. This makes it easy to identify the Microsoft
+build of Go toolset and specific version through buildinfo. For example, the
+buildinfo printed by "go version -m <program>" returns this info.
+
+Includes opt-in linker flag "-ms_upstreamversion" to change the primary version
+to the Microsoft build of Go version, affecting (e.g.) "go version <program>".
+
+Includes opt-in GODEBUG=ms_version=1 to change runtime.Version() to return the
+Microsoft build of Go version string.
+---
+ doc/godebug.md                                |   9 ++
+ src/cmd/dist/build.go                         |  16 ++
+ src/cmd/dist/buildruntime.go                  |   1 +
+ src/cmd/go/go_ms_test.go                      | 149 ++++++++++++++++++
+ src/cmd/go/internal/cache/hash.go             |   6 +
+ src/cmd/go/internal/load/pkg.go               |   2 +
+ .../testdata/script/gotoolchain_local_ms.txt  |  46 ++++++
+ src/cmd/link/internal/ld/main.go              |  35 +++-
+ src/internal/buildcfg/cfg.go                  |  36 ++++-
+ src/internal/godebugs/table.go                |   1 +
+ src/runtime/extern.go                         |  25 ++-
+ src/runtime/runtime1.go                       |   4 +
+ 12 files changed, 322 insertions(+), 8 deletions(-)
+ create mode 100644 src/cmd/go/go_ms_test.go
+ create mode 100644 src/cmd/go/testdata/script/gotoolchain_local_ms.txt
+
+diff --git a/doc/godebug.md b/doc/godebug.md
+index 4c95ceb09bcbbe..6b052d8ce29b6a 100644
+--- a/doc/godebug.md
++++ b/doc/godebug.md
+@@ -192,6 +192,15 @@ Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
+ - "default": use the recommended Microsoft TLS settings. This is the default.
+ - "off": use the default upstream Go TLS settings.
+ 
++Microsoft build of Go 1.26 added a new `ms_version` setting. It controls whether
++the Go runtime uses a Microsoft-specific version string in the output of
++`runtime.Version()`. This also affects the output of `go version`. This doesn't
++affect the version embedded in a binary created by `go build`: for this, see
++the ld flag `-ms_upstreamversion`.
++The possible values of `ms_version` are:
++- "0" (default): `runtime.Version()` returns the upstream version string, for example: "go1.26.0".
++- "1": `runtime.Version()` returns the Microsoft build of Go version string, for example: "go1.26.0-1-microsoft".
++
+ ### Go 1.25
+ 
+ Go 1.25 added a new `decoratemappings` setting that controls whether the Go
+diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
+index 917f682fd4bfaf..85512e38220de6 100644
+--- a/src/cmd/dist/build.go
++++ b/src/cmd/dist/build.go
+@@ -450,6 +450,22 @@ func findgoversion() string {
+ 	return version
+ }
+ 
++// findmsgorevision returns the Microsoft-specific Go revision string from
++// MICROSOFT_REVISION, or empty string if the file doesn't exist.
++//
++// Enforces that the file content is a valid integer.
++func findmsgorevision() string {
++	path := pathf("%s/MICROSOFT_REVISION", goroot)
++	if isfile(path) {
++		r := chomp(readfile(path))
++		if _, err := strconv.Atoi(r); err != nil {
++			fatalf("MICROSOFT_REVISION content is not an integer: %q", r)
++		}
++		return r
++	}
++	return ""
++}
++
+ // goModVersion returns the go version declared in src/go.mod. This is the
+ // go version to use in the go.mod building go_bootstrap, toolchain2, and toolchain3.
+ // (toolchain1 must be built with requiredBootstrapVersion(goModVersion))
+diff --git a/src/cmd/dist/buildruntime.go b/src/cmd/dist/buildruntime.go
+index 87e88671763996..dccdca982300d7 100644
+--- a/src/cmd/dist/buildruntime.go
++++ b/src/cmd/dist/buildruntime.go
+@@ -64,6 +64,7 @@ func mkbuildcfg(file string) {
+ 	fmt.Fprintf(&buf, "const defaultGO_EXTLINK_ENABLED = `%s`\n", goextlinkenabled)
+ 	fmt.Fprintf(&buf, "const defaultGO_LDSO = `%s`\n", defaultldso)
+ 	fmt.Fprintf(&buf, "const version = `%s`\n", findgoversion())
++	fmt.Fprintf(&buf, "const msVersionRevision = `%s`\n", findmsgorevision())
+ 	fmt.Fprintf(&buf, "const defaultGOOS = runtime.GOOS\n")
+ 	fmt.Fprintf(&buf, "const defaultGOARCH = runtime.GOARCH\n")
+ 	fmt.Fprintf(&buf, "const DefaultGOFIPS140 = `%s`\n", gofips140)
+diff --git a/src/cmd/go/go_ms_test.go b/src/cmd/go/go_ms_test.go
+new file mode 100644
+index 00000000000000..6f431716475ebf
+--- /dev/null
++++ b/src/cmd/go/go_ms_test.go
+@@ -0,0 +1,149 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package main_test
++
++import (
++	"debug/buildinfo"
++	"os/exec"
++	"strings"
++	"testing"
++)
++
++func TestMicrosoftVersion(t *testing.T) {
++	tt := []struct {
++		name       string
++		ms_version string
++		wantMarker bool
++	}{
++		{"default", "", false},
++		{"0", "0", false},
++		{"1", "1", true},
++	}
++	for _, test := range tt {
++		t.Run("ms_version="+test.name, func(t *testing.T) {
++			tg := testgo(t)
++			defer tg.cleanup()
++			tg.setenv("GODEBUG", "ms_version="+test.ms_version)
++			// Check "go version" output.
++			tg.run("version")
++			cmdVersion := strings.TrimSpace(tg.stdout.String())
++			if strings.Contains(cmdVersion, "-microsoft") != test.wantMarker {
++				t.Errorf("version = %q, want '-microsoft' marker = %v", cmdVersion, test.wantMarker)
++			}
++		})
++	}
++}
++
++func TestMicrosoftBuildInfoVersion(t *testing.T) {
++	tg := testgo(t)
++	defer tg.cleanup()
++	v, msVersion, ok := msReadBuildInfo(t, tg.goTool())
++	if strings.HasSuffix(v, "-microsoft") {
++		t.Errorf("buildinfo GoVersion = %q, want no -microsoft suffix", v)
++	}
++	if !ok {
++		t.Errorf("buildinfo doesn't contain microsoft_toolset_version")
++	}
++	if !strings.Contains(msVersion, "-microsoft") {
++		t.Errorf("buildinfo microsoft_toolset_version = %q, want it to contain '-microsoft'", msVersion)
++	}
++}
++
++func TestMicrosoftEmbedUpstreamVersionLDFlag(t *testing.T) {
++	tooSlow(t, "compiles and links binaries")
++
++	tt := []struct {
++		name       string
++		ldflag     string
++		wantMarker bool
++	}{
++		{"default", "", false},
++		{"upstream", "-ms_upstreamversion=1", false},
++		{"ms", "-ms_upstreamversion=0", true},
++	}
++	for _, test := range tt {
++		t.Run(test.name, func(t *testing.T) {
++			tg := testgo(t)
++			defer tg.cleanup()
++
++			tg.parallel()
++			tg.makeTempdir()
++			tg.tempFile("main.go", `
++				package main
++				func main() {}`)
++
++			out := tg.path("main" + exeSuffix)
++			tg.run("build", "-ldflags="+test.ldflag, "-o", out, tg.path("main.go"))
++			tg.wantExecutable(out, "go build did not create main executable")
++			v, msVersion, ok := msReadBuildInfo(t, out)
++			if strings.Contains(v, "-microsoft") != test.wantMarker {
++				t.Errorf("buildinfo GoVersion = %q, want '-microsoft' marker = %v", v, test.wantMarker)
++			}
++			if !ok {
++				t.Errorf("buildinfo doesn't contain microsoft_toolset_version")
++			} else if !strings.Contains(msVersion, "-microsoft") {
++				t.Errorf("buildinfo microsoft_toolset_version = %q, want it to contain '-microsoft'", msVersion)
++			}
++		})
++	}
++}
++
++func TestMicrosoftRuntimeVersion(t *testing.T) {
++	tooSlow(t, "compiles and links binaries")
++
++	tt := []struct {
++		name       string
++		ms_version string
++		wantMarker bool
++	}{
++		{"default", "", false},
++		{"0", "0", false},
++		{"1", "1", true},
++	}
++	for _, test := range tt {
++		t.Run("ms_version="+test.name, func(t *testing.T) {
++			tg := testgo(t)
++			defer tg.cleanup()
++
++			tg.parallel()
++			tg.makeTempdir()
++			tg.tempFile("main.go", `
++				package main
++				import "fmt"
++				import "runtime"
++				func main() { fmt.Println(runtime.Version())}`)
++
++			out := tg.path("main" + exeSuffix)
++			tg.run("build", "-o", out, tg.path("main.go"))
++			tg.wantExecutable(out, "go build did not create main executable")
++
++			cmd := exec.Command(out)
++			cmd.Env = []string{"GODEBUG=ms_version=" + test.ms_version}
++			output, err := cmd.Output()
++			if err != nil {
++				t.Fatalf("running built program: %v", err)
++			}
++			runtimeVersion := strings.TrimSpace(string(output))
++			if strings.Contains(runtimeVersion, "-microsoft") != test.wantMarker {
++				t.Errorf("runtime.Version() = %q, want '-microsoft' marker = %v", runtimeVersion, test.wantMarker)
++			}
++		})
++	}
++}
++
++func msReadBuildInfo(t *testing.T, exe string) (mainVersion string, msVersion string, ok bool) {
++	t.Helper()
++
++	bi, err := buildinfo.ReadFile(exe)
++	if err != nil {
++		t.Fatalf("buildinfo.ReadFile(%q): %v", exe, err)
++	}
++	for _, s := range bi.Settings {
++		if s.Key == "microsoft_toolset_version" {
++			return bi.GoVersion, s.Value, true
++		}
++	}
++	return bi.GoVersion, "", false
++}
+diff --git a/src/cmd/go/internal/cache/hash.go b/src/cmd/go/internal/cache/hash.go
+index 27d275644a4bd0..3c40024b4b7ab7 100644
+--- a/src/cmd/go/internal/cache/hash.go
++++ b/src/cmd/go/internal/cache/hash.go
+@@ -49,6 +49,12 @@ var hashSalt = []byte(stripExperiment(runtime.Version()))
+ // version string.
+ func stripExperiment(version string) string {
+ 	if i := strings.Index(version, " X:"); i >= 0 {
++		// Check that version doesn't also have a "-X:" suffix. This will only
++		// happen if there is a coding mistake, and it's better to catch it here
++		// than experience a stale cache later due to mismatch.
++		if strings.Contains(version, "-X:") {
++			panic(fmt.Sprintf("stripExperiment found both ' X:' and '-X:' suffixes in version %q", version))
++		}
+ 		return version[:i]
+ 	}
+ 	if i := strings.Index(version, "-X:"); i >= 0 {
+diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
+index aaa3106e5a0e6e..3266f28252afea 100644
+--- a/src/cmd/go/internal/load/pkg.go
++++ b/src/cmd/go/internal/load/pkg.go
+@@ -14,6 +14,7 @@ import (
+ 	"go/build"
+ 	"go/scanner"
+ 	"go/token"
++	"internal/buildcfg"
+ 	"internal/godebug"
+ 	"internal/platform"
+ 	"io/fs"
+@@ -2416,6 +2417,7 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
+ 	if cfg.Experiment.SystemCrypto {
+ 		appendSetting("microsoft_systemcrypto", "1")
+ 	}
++	appendSetting("microsoft_toolset_version", buildcfg.Version)
+ 	appendSetting("-buildmode", buildmode)
+ 	appendSetting("-compiler", cfg.BuildContext.Compiler)
+ 	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
+diff --git a/src/cmd/go/testdata/script/gotoolchain_local_ms.txt b/src/cmd/go/testdata/script/gotoolchain_local_ms.txt
+new file mode 100644
+index 00000000000000..24538695be2cf2
+--- /dev/null
++++ b/src/cmd/go/testdata/script/gotoolchain_local_ms.txt
+@@ -0,0 +1,46 @@
++# This test uses the fake toolchain switch support in  cmd/go/internal/toolchain.Switch
++# to exercise version selection logic.
++# It's a trimmed copy of gotoolchain_local.txt that has been modified to use
++# versions just like what the Microsoft build of Go uses.
++
++env TESTGO_VERSION=go1.500
++env TESTGO_VERSION_SWITCH=switch
++
++go mod init m
++
++# GOTOOLCHAIN names can have -suffix
++env GOTOOLCHAIN=go1.800-1-microsoft
++go version
++stdout go1.800-1-microsoft
++
++env GOTOOLCHAIN=auto
++go mod edit -go=1.999 -toolchain=go1.800-1-microsoft
++go version
++stdout go1.999
++
++go mod edit -go=1.777 -toolchain=go1.800-1-microsoft
++go version
++stdout go1.800-1-microsoft
++
++# toolchain built with a custom version should know how it compares to others
++
++env TESTGO_VERSION=go1.500-1-microsoft
++go mod edit -go=1.499 -toolchain=none
++go version
++stdout go1.500-1-microsoft
++
++go mod edit -go=1.499 -toolchain=go1.499
++go version
++stdout go1.500-1-microsoft
++
++go mod edit -go=1.500 -toolchain=none
++go version
++stdout go1.500-1-microsoft
++
++go mod edit -go=1.500 -toolchain=go1.500
++go version
++stdout go1.500-1-microsoft
++
++go mod edit -go=1.501 -toolchain=none
++go version
++stdout go1.501
+diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
+index 0140c385e47991..727a992bdf7a11 100644
+--- a/src/cmd/link/internal/ld/main.go
++++ b/src/cmd/link/internal/ld/main.go
+@@ -186,15 +186,20 @@ func Main(arch *sys.Arch, theArch Arch) {
+ 		addstrdata1(ctxt, "runtime.defaultGOROOT="+buildcfg.GOROOT)
+ 	}
+ 
+-	buildVersion := buildcfg.Version
++	// Set up a function that we can apply to both the Microsoft and upstream
++	// versions. This approach is intended to minimize the patch diff and avoid
++	// touching the same lines as earlier patches.
++	appendExperimentVersion := func(buildVersion string) string { return buildVersion }
+ 	if goexperiment := buildcfg.Experiment.MSString(); goexperiment != "" {
+-		sep := " "
+-		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
+-			sep = "-"
++		appendExperimentVersion = func(buildVersion string) string {
++			sep := " "
++			if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
++				sep = "-"
++			}
++			buildVersion += sep + "X:" + goexperiment
++			return buildVersion
+ 		}
+-		buildVersion += sep + "X:" + goexperiment
+ 	}
+-	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
+ 
+ 	// TODO(matloob): define these above and then check flag values here
+ 	if ctxt.Arch.Family == sys.AMD64 && buildcfg.GOOS == "plan9" {
+@@ -210,10 +215,28 @@ func Main(arch *sys.Arch, theArch Arch) {
+ 	objabi.Flagfn1("X", "add string value `definition` of the form importpath.name=value", func(s string) { addstrdata1(ctxt, s) })
+ 	objabi.Flagcount("v", "print link trace", &ctxt.Debugvlog)
+ 	objabi.Flagfn1("importcfg", "read import configuration from `file`", ctxt.readImportCfg)
++	msEmbedUpstreamVersionFlag := flag.Bool(
++		"ms_upstreamversion", true,
++		"for compatibility, set the buildinfo GoVersion data to the upstream Go version rather than the Microsoft build of Go version")
+ 
+ 	objabi.Flagparse(usage)
+ 	counter.CountFlags("link/flag:", *flag.CommandLine)
+ 
++	var buildVersion string
++	if *msEmbedUpstreamVersionFlag {
++		buildVersion = appendExperimentVersion(buildcfg.UpstreamVersion)
++	} else {
++		buildVersion = appendExperimentVersion(buildcfg.Version)
++	}
++	// Embed build version information. Microsoft build of Go version or
++	// upstream version depending on ld flag.
++	addstrdata1(ctxt, "runtime.buildVersion="+buildVersion)
++	// Always save the ms and upstream build versions. These are used by
++	// runtime.Version() at runtime, GODEBUG=ms_version=0 or 1 determining which
++	// one is returned.
++	addstrdata1(ctxt, "runtime.upstreamBuildVersion="+appendExperimentVersion(buildcfg.UpstreamVersion))
++	addstrdata1(ctxt, "runtime.msBuildVersion="+appendExperimentVersion(buildcfg.MSVersion))
++
+ 	if ctxt.Debugvlog > 0 {
+ 		// dump symbol info on crash
+ 		defer func() { ctxt.loader.Dump() }()
+diff --git a/src/internal/buildcfg/cfg.go b/src/internal/buildcfg/cfg.go
+index 89fd74eb823162..f6d6a78531fc75 100644
+--- a/src/internal/buildcfg/cfg.go
++++ b/src/internal/buildcfg/cfg.go
+@@ -35,9 +35,43 @@ var (
+ 	ToolTags  = toolTags()
+ 	GO_LDSO   = defaultGO_LDSO
+ 	GOFIPS140 = gofips140()
+-	Version   = version
++	Version   = MSVersion
+ )
+ 
++var (
++	UpstreamVersion = version
++	MSVersion       = msVersion()
++)
++
++func msVersion() string {
++	// The "microsoft" mark if no specific revision is set (e.g. a main branch
++	// build) or "{rev}-microsoft" if a revision is set.
++	var marker string
++	if msVersionRevision == "" {
++		marker = "microsoft"
++	} else {
++		marker = msVersionRevision + "-microsoft"
++	}
++	// Gobootstrap has a version like this and we need to insert our marker
++	// before the "-X:...". The -X gets trimmed off when creating the build
++	// cache salt and causes a version mismatch with the final build of the go
++	// cmd, showing up as a stale stdlib when built with gobootstrap vs. go.
++	// Example version:
++	//
++	//   go1.26rc1-X:nodwarf5,nogreenteagc,[...]
++	if before, after, ok := strings.Cut(UpstreamVersion, "-X:"); ok {
++		return before + "-" + marker + "-X:" + after
++	}
++	// Similarly, a dev build's version has some text and a timestamp, and for
++	// better visiblity, we want to insert before the "-devel":
++	//
++	//   go1.26-devel_c16402d15b [timestamp]
++	if before, after, ok := strings.Cut(UpstreamVersion, "-devel"); ok {
++		return before + "-" + marker + "-devel" + after
++	}
++	return UpstreamVersion + "-" + marker
++}
++
+ // Error is one of the errors found (if any) in the build configuration.
+ var Error error
+ 
+diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
+index 7a5ea67c7dca33..d3e5b7b71d528c 100644
+--- a/src/internal/godebugs/table.go
++++ b/src/internal/godebugs/table.go
+@@ -51,6 +51,7 @@ var All = []Info{
+ 	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque
+ 	{Name: "ms_tlsprofile", Package: "crypto/tls", Opaque: true},
+ 	{Name: "ms_tlsx25519", Package: "crypto/tls", Opaque: true},
++	{Name: "ms_version", Package: "runtime", Opaque: true},
+ 	//{Name: "multipartfiles", Package: "mime/multipart"},
+ 	{Name: "multipartmaxheaders", Package: "mime/multipart"},
+ 	{Name: "multipartmaxparts", Package: "mime/multipart"},
+diff --git a/src/runtime/extern.go b/src/runtime/extern.go
+index a9f97a1a045525..991d5ef22c5df5 100644
+--- a/src/runtime/extern.go
++++ b/src/runtime/extern.go
+@@ -367,11 +367,34 @@ func GOROOT() string {
+ // This is accessed by "go version <binary>".
+ var buildVersion string
+ 
++// msBuildVersion is the Microsoft build of Go version string at build time.
++//
++// This is used when GODEBUG=ms_version=1 is set. It helps clarify what build of
++// Go is being used for diagnosis and support.
++//
++// This may intentionally duplicate buildVersion depending on linker settings.
++//
++// This is set by the linker.
++var msBuildVersion string
++
++// upstreamBuildVersion is the version string that upstream Go would have
++// assigned at build time.
++//
++// This is used when GODEBUG=ms_version=0 is set for compatibility.
++//
++// This may intentionally duplicate buildVersion depending on linker settings.
++//
++// This is set by the linker.
++var upstreamBuildVersion string
++
+ // Version returns the Go tree's version string.
+ // It is either the commit hash and date at the time of the build or,
+ // when possible, a release tag like "go1.3".
+ func Version() string {
+-	return buildVersion
++	if debug.msversion.Load() == 0 {
++		return upstreamBuildVersion
++	}
++	return msBuildVersion
+ }
+ 
+ // GOOS is the running program's operating system target:
+diff --git a/src/runtime/runtime1.go b/src/runtime/runtime1.go
+index 965ff8ab5167d5..2674b5d8844b18 100644
+--- a/src/runtime/runtime1.go
++++ b/src/runtime/runtime1.go
+@@ -364,6 +364,9 @@ var debug struct {
+ 	// tracebacklabels controls the inclusion of goroutine labels in the
+ 	// goroutine status header line.
+ 	tracebacklabels atomic.Int32
++
++	// msversion controls the return value of [runtime.Version()].
++	msversion atomic.Int32
+ }
+ 
+ var dbgvars = []*dbgVar{
+@@ -401,6 +404,7 @@ var dbgvars = []*dbgVar{
+ 	{name: "tracebacklabels", atomic: &debug.tracebacklabels, def: 0},
+ 	{name: "tracefpunwindoff", value: &debug.tracefpunwindoff},
+ 	{name: "updatemaxprocs", value: &debug.updatemaxprocs, def: 1},
++	{name: "ms_version", atomic: &debug.msversion, def: 0},
+ }
+ 
+ func parseRuntimeDebugVars(godebug string) {

From 49eafa39f78a6c6b895ce122a0ea7e500090687c Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 21 Jan 2026 14:34:59 -0800
Subject: [PATCH 683/887] Fix signing diag file consolidation: always run
 (#2074)

* Fix signing diag file consolidation: always run

* Update eng/_util/cmd/sign/archive.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/_util/cmd/sign/archive.go | 24 ++++++++++--------------
 eng/_util/cmd/sign/sign.go    | 18 ++++++++++--------
 2 files changed, 20 insertions(+), 22 deletions(-)

diff --git a/eng/_util/cmd/sign/archive.go b/eng/_util/cmd/sign/archive.go
index 1ee24fb7b27..b76451d3c6b 100644
--- a/eng/_util/cmd/sign/archive.go
+++ b/eng/_util/cmd/sign/archive.go
@@ -9,6 +9,7 @@ import (
 	"archive/zip"
 	"cmp"
 	"context"
+	"errors"
 	"fmt"
 	"io"
 	"io/fs"
@@ -464,27 +465,25 @@ func (a *archive) copyToDestination(ctx context.Context) error {
 }
 
 func consolidateDiagnosticFiles() error {
+	// Do as much as possible, accumulating errors to report to the user.
+	var err error
 	// Signing process logs.
-	if err := copyGlobFilesToDir(
+	err = errors.Join(err, copyGlobFilesToDir(
 		*consolidateDiagDir,
 		filepath.Join(*signingCsprojDir, "*.log"),
 		filepath.Join(*tempDir, "*.binlog"),
 		filepath.Join(*tempDir, "*.props"),
-	); err != nil {
-		return err
-	}
+	))
 	// .NET diag data, for package versions etc.
-	if err := copyGlobFilesToDir(
+	err = errors.Join(err, copyGlobFilesToDir(
 		filepath.Join(*consolidateDiagDir, "obj"),
 		filepath.Join(*signingCsprojDir, "obj", "*"),
-	); err != nil {
-		return err
-	}
+	))
 
 	// Signing working dirs. These contain the files actually sent to sign. Make
 	// it clear that they're not production-ready files through the filename.
 	cleanTempDir := filepath.Clean(*tempDir)
-	if err := withTarGzCreate(
+	err = errors.Join(err, withTarGzCreate(
 		filepath.Join(*consolidateDiagDir, "sign-work-archives.nonproduction.tar.gz"),
 		func(tw *tar.Writer) error {
 			if err := filepath.WalkDir(cleanTempDir, func(path string, d fs.DirEntry, err error) error {
@@ -531,9 +530,6 @@ func consolidateDiagnosticFiles() error {
 			}
 			return nil
 		},
-	); err != nil {
-		return err
-	}
-
-	return nil
+	))
+	return err
 }
diff --git a/eng/_util/cmd/sign/sign.go b/eng/_util/cmd/sign/sign.go
index b324bc2297f..c0f5332dfe5 100644
--- a/eng/_util/cmd/sign/sign.go
+++ b/eng/_util/cmd/sign/sign.go
@@ -7,6 +7,7 @@ package main
 import (
 	"context"
 	"crypto/sha256"
+	"errors"
 	"flag"
 	"fmt"
 	"io"
@@ -74,7 +75,7 @@ func main() {
 	}
 }
 
-func run() error {
+func run() (err error) {
 	// A context for timeout. This timeout is mainly here to make sure child MSBuild processes are
 	// terminated. There are some ctx.Err() checks sprinkled into the Go code, but canceling
 	// quickly during the packaging/repackaging work in Go is not currently important: the Go work
@@ -88,6 +89,14 @@ func run() error {
 		defer cancel()
 	}
 
+	defer func() {
+		log.Println("Consolidating diagnostic files")
+		log.Printf("Consolidated diagnostic directory: %q", *consolidateDiagDir)
+
+		consolidateErr := consolidateDiagnosticFiles()
+		err = errors.Join(err, consolidateErr)
+	}()
+
 	archives, err := findArchives(ctx, *filesGlob)
 	if err != nil {
 		return err
@@ -174,13 +183,6 @@ func run() error {
 		}
 	}
 
-	log.Println("Consolidating diagnostic files")
-	log.Printf("Consolidated diagnostic directory: %q", *consolidateDiagDir)
-
-	if err := consolidateDiagnosticFiles(); err != nil {
-		return err
-	}
-
 	return nil
 }
 

From ceae2faa48916ef9460dd0bb1ac862cd9e3f5fc1 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 22 Jan 2026 05:18:10 -0800
Subject: [PATCH 684/887] Update release notes after 1.27 split (#2073)

---
 docs/go1.26.md | 3 ---
 docs/go1.27.md | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)
 delete mode 100644 docs/go1.26.md
 create mode 100644 docs/go1.27.md

diff --git a/docs/go1.26.md b/docs/go1.26.md
deleted file mode 100644
index fbaee696950..00000000000
--- a/docs/go1.26.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# Microsoft build of Go 1.26 release notes
-
-After the release of 1.26, 1.24 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).
diff --git a/docs/go1.27.md b/docs/go1.27.md
new file mode 100644
index 00000000000..03f2881c71c
--- /dev/null
+++ b/docs/go1.27.md
@@ -0,0 +1,3 @@
+# Microsoft build of Go 1.27 release notes
+
+After the release of 1.27, 1.25 is no longer supported, per the [Go release policy](https://go.dev/doc/devel/release).

From 93ab84b0a28852c8016991636a516b63bd143a7b Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 22 Jan 2026 13:55:24 +0000
Subject: [PATCH 685/887] update openssl backend to implement riscv64 and arm
 assembly (#2075)

* update openssl backend to implement riscv64 and arm assembly

* add entries to systemcrypto_nocgo_linux.go
---
 eng/doc/MigrationGuide.md                     |   1 +
 .../0001-Vendor-external-dependencies.patch   | 739 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |   6 +-
 3 files changed, 728 insertions(+), 18 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 8584d45ba5f..543af75cce4 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -148,6 +148,7 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 > [!NOTE]
 > As of Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
 > This allows the use of OpenSSL without requiring cgo.
+> Currently this experiment is supported on the following architectures: `amd64`, `arm`, `arm64`, and `riscv64`.
 >
 > While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental as of Go 1.26 and may have limitations.
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 60a18815ac2..1d026c5d60b 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -63,7 +63,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
+ .../openssl/v2/internal/fakecgo/asm_arm.s     |   49 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
+ .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
  .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
  .../openssl/v2/internal/fakecgo/generate.go   |    3 +
@@ -71,7 +73,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
  .../openssl/v2/internal/fakecgo/go_linux.go   |  100 +
  .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
- .../openssl/v2/internal/fakecgo/go_util.go    |   37 +
+ .../openssl/v2/internal/fakecgo/go_util.go    |   38 +
  .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
  .../openssl/v2/internal/fakecgo/libcgo.go     |   39 +
  .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
@@ -79,18 +81,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
  .../v2/internal/fakecgo/trampolines_amd64.s   |  114 +
+ .../v2/internal/fakecgo/trampolines_arm.s     |   79 +
  .../v2/internal/fakecgo/trampolines_arm64.s   |   83 +
+ .../v2/internal/fakecgo/trampolines_riscv64.s |   71 +
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  175 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   60 +
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
  .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
+ .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
+ .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   58 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
+ .../openssl/v2/internal/ossl/asm_arm.s        |  105 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
  .../openssl/v2/internal/ossl/asm_others.s     |    7 +
+ .../openssl/v2/internal/ossl/asm_riscv64.s    |   96 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
@@ -249,7 +257,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 241 files changed, 31439 insertions(+), 7 deletions(-)
+ 249 files changed, 32084 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -298,7 +306,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
@@ -314,18 +324,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
@@ -2152,7 +2168,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..4333a7155532dc 100644
+index efc07451b53448..7fc97c0e091359 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2161,17 +2177,17 @@ index efc07451b53448..4333a7155532dc 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..126eae60f4b991 100644
+index b6b841b44d8e38..415c8c1b145222 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055 h1:I6wGxCUkueebFXN3Mn8bPJQV+XkwK9CNNlpgm3nB1O0=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958 h1:hoQQSWSeOzktd3B5zQ9idH9V1p8IXZgEh3amHRDOWNI=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184 h1:b0PQtPdldqXsTg7yLqLo9HFUF+4Qp07Vi+ohWwTBNrU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
@@ -7282,6 +7298,61 @@ index 00000000000000..2b7eb57f8ae783
 +	ADJSP $-0x18
 +	POP_REGS_HOST_TO_ABI0()
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
+new file mode 100644
+index 00000000000000..0fadbb3bd589ac
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
+@@ -0,0 +1,49 @@
++// Copyright 2012 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB),NOSPLIT|NOFRAME,$0
++	SUB	$(8*9), R13 // Reserve space for the floating point registers.
++	// The C arguments arrive in R0, R1, R2, and R3. We want to
++	// pass R0, R1, and R3 to Go, so we push those on the stack.
++	// Also, save C callee-save registers R4-R12.
++	MOVM.WP	[R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12], (R13)
++	// Finally, save the link register R14. This also puts the
++	// arguments we pushed for cgocallback where they need to be,
++	// starting at 4(R13).
++	MOVW.W	R14, -4(R13)
++
++	// Save VFP callee-saved registers D8-D15 (same as S16-S31).
++	// Note: We always save these since we target hard-float ABI.
++	MOVD	F8, (13*4+8*1)(R13)
++	MOVD	F9, (13*4+8*2)(R13)
++	MOVD	F10, (13*4+8*3)(R13)
++	MOVD	F11, (13*4+8*4)(R13)
++	MOVD	F12, (13*4+8*5)(R13)
++	MOVD	F13, (13*4+8*6)(R13)
++	MOVD	F14, (13*4+8*7)(R13)
++	MOVD	F15, (13*4+8*8)(R13)
++
++	BL	runtime·load_g(SB)
++	// We set up the arguments to cgocallback when saving registers above.
++	BL	runtime·cgocallback(SB)
++
++	MOVD	(13*4+8*1)(R13), F8
++	MOVD	(13*4+8*2)(R13), F9
++	MOVD	(13*4+8*3)(R13), F10
++	MOVD	(13*4+8*4)(R13), F11
++	MOVD	(13*4+8*5)(R13), F12
++	MOVD	(13*4+8*6)(R13), F13
++	MOVD	(13*4+8*7)(R13), F14
++	MOVD	(13*4+8*8)(R13), F15
++
++	MOVW.P	4(R13), R14
++	MOVM.IAW	(R13), [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12]
++	ADD	$(8*9), R13
++	MOVW	R14, R15
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
 new file mode 100644
 index 00000000000000..50e5261d922c56
@@ -7324,6 +7395,90 @@ index 00000000000000..50e5261d922c56
 +
 +	ADD $(8*24), RSP
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
+new file mode 100644
+index 00000000000000..45151bf02bacbe
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
+@@ -0,0 +1,78 @@
++// Copyright 2020 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB),NOSPLIT|NOFRAME,$0
++	/*
++	 * Push arguments for fn (X10, X11, X13), along with all callee-save
++	 * registers. Note that at procedure entry the first argument is at
++	 * 8(X2).
++	 */
++	ADD	$(-8*29), X2
++	MOV	X10, (8*1)(X2) // fn unsafe.Pointer
++	MOV	X11, (8*2)(X2) // a unsafe.Pointer
++	MOV	X13, (8*3)(X2) // ctxt uintptr
++	MOV	X8, (8*4)(X2)
++	MOV	X9, (8*5)(X2)
++	MOV	X18, (8*6)(X2)
++	MOV	X19, (8*7)(X2)
++	MOV	X20, (8*8)(X2)
++	MOV	X21, (8*9)(X2)
++	MOV	X22, (8*10)(X2)
++	MOV	X23, (8*11)(X2)
++	MOV	X24, (8*12)(X2)
++	MOV	X25, (8*13)(X2)
++	MOV	X26, (8*14)(X2)
++	MOV	g, (8*15)(X2)
++	MOV	X1, (8*16)(X2)
++	MOVD	F8, (8*17)(X2)
++	MOVD	F9, (8*18)(X2)
++	MOVD	F18, (8*19)(X2)
++	MOVD	F19, (8*20)(X2)
++	MOVD	F20, (8*21)(X2)
++	MOVD	F21, (8*22)(X2)
++	MOVD	F22, (8*23)(X2)
++	MOVD	F23, (8*24)(X2)
++	MOVD	F24, (8*25)(X2)
++	MOVD	F25, (8*26)(X2)
++	MOVD	F26, (8*27)(X2)
++	MOVD	F27, (8*28)(X2)
++
++	// Initialize Go ABI environment
++	CALL	runtime·load_g(SB)
++	CALL	runtime·cgocallback(SB)
++
++	MOV	(8*4)(X2), X8
++	MOV	(8*5)(X2), X9
++	MOV	(8*6)(X2), X18
++	MOV	(8*7)(X2), X19
++	MOV	(8*8)(X2), X20
++	MOV	(8*9)(X2), X21
++	MOV	(8*10)(X2), X22
++	MOV	(8*11)(X2), X23
++	MOV	(8*12)(X2), X24
++	MOV	(8*13)(X2), X25
++	MOV	(8*14)(X2), X26
++	MOV	(8*15)(X2), g
++	MOV	(8*16)(X2), X1
++	MOVD	(8*17)(X2), F8
++	MOVD	(8*18)(X2), F9
++	MOVD	(8*19)(X2), F18
++	MOVD	(8*20)(X2), F19
++	MOVD	(8*21)(X2), F20
++	MOVD	(8*22)(X2), F21
++	MOVD	(8*23)(X2), F22
++	MOVD	(8*24)(X2), F23
++	MOVD	(8*25)(X2), F24
++	MOVD	(8*26)(X2), F25
++	MOVD	(8*27)(X2), F26
++	MOVD	(8*28)(X2), F27
++	ADD	$(8*29), X2
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
 new file mode 100644
 index 00000000000000..5f70632fa7cc33
@@ -7771,10 +7926,10 @@ index 00000000000000..6c2f981d730980
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
 new file mode 100644
-index 00000000000000..c2497488ef6578
+index 00000000000000..4519011e114b36
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
-@@ -0,0 +1,37 @@
+@@ -0,0 +1,38 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -7805,8 +7960,9 @@ index 00000000000000..c2497488ef6578
 +		abort()
 +	}
 +	// *ts = *arg would cause a writebarrier so copy using slices
-+	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/8)
-+	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/8)
++	ptrSize := unsafe.Sizeof(uintptr(0))
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
 +	for i := range s2 {
 +		s1[i] = s2[i]
 +	}
@@ -8125,6 +8281,91 @@ index 00000000000000..e4a61f5978515b
 +
 +	MOVQ AX, ret+48(FP)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
+new file mode 100644
+index 00000000000000..7b877b4682aeb5
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
+@@ -0,0 +1,79 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
++// On ARM32, Go ABI0 uses stack-based calling convention.
++// Arguments are placed on the stack starting at 4(SP) after the prologue.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW R1, 8(R13)
++	MOVW    ·x_cgo_init_call(SB), R12
++	MOVW    (R12), R2
++	CALL    (R2)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW    ·x_cgo_thread_start_call(SB), R12
++	MOVW    (R12), R2
++	CALL    (R2)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW    ·x_cgo_setenv_call(SB), R12
++	MOVW    (R12), R2
++	CALL    (R2)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW    ·x_cgo_unsetenv_call(SB), R12
++	MOVW    (R12), R2
++	CALL    (R2)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-8
++	MOVW G+4(FP), R0
++	MOVW setg+0(FP), R1
++	BL (R1)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $8-0
++	// See crosscall2.
++	MOVW R0, 4(R13)
++	MOVW    ·threadentry_call(SB), R12
++	MOVW    (R12), R2
++	CALL    (R2)
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $8-28
++    MOVW    fn+0(FP), R5
++    MOVW    a1+4(FP), R0
++    MOVW    a2+8(FP), R1
++    MOVW    a3+12(FP), R2
++    MOVW    a4+16(FP), R3
++    MOVW    a5+20(FP), R4
++    // Store 5th arg below SP (in local frame area)
++    MOVW    R4, arg5-8(SP)
++    // Align SP to 8 bytes for call (required by ARM AAPCS)
++    SUB     $8, R13
++	CALL   	(R5)
++    ADD     $8, R13
++    MOVW    R0, r1+24(FP)
++    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
 index 00000000000000..1ebee99617dbde
@@ -8214,6 +8455,83 @@ index 00000000000000..1ebee99617dbde
 +	CALL R6
 +	MOVD R0, ret+48(FP)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+new file mode 100644
+index 00000000000000..da9ab9a08a599d
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+@@ -0,0 +1,71 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOV	X10, 8(SP)
++	MOV	X11, 16(SP)
++	MOV	·x_cgo_init_call(SB), X5
++	MOV	(X5), X6
++	JALR	RA, 0(X6)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOV	X10, 8(SP)
++	MOV	·x_cgo_thread_start_call(SB), X5
++	MOV	(X5), X6
++	JALR	RA, 0(X6)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOV	X10, 8(SP)
++	MOV	·x_cgo_setenv_call(SB), X5
++	MOV	(X5), X6
++	JALR	RA, 0(X6)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOV	X10, 8(SP)
++	MOV	·x_cgo_unsetenv_call(SB), X5
++	MOV	(X5), X6
++	JALR	RA, 0(X6)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL	·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL	·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOV	gp+8(FP), X10
++	MOV	setg+0(FP), X5
++	JALR	RA, 0(X5)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $16
++	MOV	X10, 8(SP)
++	MOV	·threadentry_call(SB), X5
++	MOV	(X5), X6
++	JALR	RA, 0(X6)
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-48
++	MOV	fn+0(FP), X9
++	MOV	a1+8(FP), X10
++	MOV	a2+16(FP), X11
++	MOV	a3+24(FP), X12
++	MOV	a4+32(FP), X13
++	MOV	a5+40(FP), X14
++	JALR	RA, 0(X9)
++	MOV	X10, ret+48(FP)
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
 index 00000000000000..c5df904098e92a
@@ -8917,6 +9235,86 @@ index 00000000000000..603cd6802eea20
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 +
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
+new file mode 100644
+index 00000000000000..1e31b9737f3395
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
+@@ -0,0 +1,74 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP	purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setegid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_seteuid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setgid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setregid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setresgid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setresuid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setreuid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setuid_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
++	MOVW	R0, 4(R13)
++	MOVW	·x_cgo_purego_setgroups_call(SB), R12
++	MOVW	(R12), R2
++	CALL	(R2)
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
 new file mode 100644
 index 00000000000000..b5aeb4b47a2e55
@@ -9017,6 +9415,104 @@ index 00000000000000..b5aeb4b47a2e55
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 +
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
+new file mode 100644
+index 00000000000000..d97eb10cee2bd5
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
+@@ -0,0 +1,92 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setegid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_seteuid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setgid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setregid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setresgid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setresuid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setreuid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setuid_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
++	MOV	·x_cgo_purego_setgroups_call(SB), T0
++	MOV	(T0), T1
++	JALR	RA, 0(T1)
++	RET
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	JMP purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
 index 00000000000000..8417ba55e1e5cf
@@ -9195,6 +9691,117 @@ index 00000000000000..59560c7d590f7a
 +	MOVQ	DX, libcCallInfo_r2(R13)
 +
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
+new file mode 100644
+index 00000000000000..96fe867d80004b
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
+@@ -0,0 +1,105 @@
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$8
++	MOVW	R0, 4(R13)
++	CALL	·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB),NOSPLIT,$0-4
++	// Load args pointer first, before modifying SP
++	MOVW	libcArgs+0(FP), R0
++	
++	// Save callee-saved registers R4-R8 and LR.
++	// We use R4 for libcArgs pointer.
++	// We use R5 for args pointer.
++	// We use R6 for n.
++	// We use R7 for scratch.
++	// We use R8 for saving SP.
++	MOVM.DB.W [R4-R8, R14], (R13)
++
++	MOVW	R0, R4 // Move libcArgs to R4
++
++	MOVW	libcCallInfo_n(R4), R6
++	MOVW	libcCallInfo_args(R4), R5
++	MOVW	libcCallInfo_fn(R4), R12
++
++	CMP	$4, R6
++	BGT	args_stack
++
++	CMP	$0, R6
++	BEQ	call
++	CMP	$1, R6
++	BEQ	args_1
++	CMP	$2, R6
++	BEQ	args_2
++	CMP	$3, R6
++	BEQ	args_3
++	
++args_4:	
++	MOVM.IA	(R5), [R0, R1, R2, R3]
++	B	call
++
++args_3:
++	MOVM.IA	(R5), [R0, R1, R2]
++	B	call
++
++args_2:
++	MOVM.IA	(R5), [R0, R1]
++	B	call
++
++args_1:
++	MOVW	(R5), R0
++	B	call
++
++args_stack:
++	// Calculate stack space needed: (n-4)*4
++	SUB	$4, R6, R7
++	MOVW	R7, R2
++	SLL	$2, R2 // bytes
++	
++	// Save SP
++	MOVW	R13, R8
++	
++	// Allocate stack
++	SUB	R2, R13
++	BIC	$7, R13 // Align to 8 bytes
++	
++	// Copy args
++	ADD	$16, R5, R14 // Src = args + 16
++	MOVW	R13, R3      // Dst = SP
++	
++copy_loop:
++	MOVW.P	4(R14), R1 // read
++	MOVW.P	R1, 4(R3)  // write
++	SUB	$1, R7
++	CMP	$0, R7
++	BNE	copy_loop
++	
++	// Load first 4 args
++	MOVM.IA	(R5), [R0, R1, R2, R3]
++	
++	// Reload fn
++	MOVW	libcCallInfo_fn(R4), R12
++	
++	BL	(R12)
++	
++	// Restore SP
++	MOVW	R8, R13
++	B	ret
++
++call:
++	BL	(R12)
++
++ret:
++	MOVW	R0, libcCallInfo_r1(R4)
++	MOVW	R1, libcCallInfo_r2(R4)
++	
++	MOVM.IA.W (R13), [R4-R8, R14]
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
 new file mode 100644
 index 00000000000000..025276dffb2aa5
@@ -9290,7 +9897,7 @@ index 00000000000000..025276dffb2aa5
 +    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
-index 00000000000000..dfc38e4106d778
+index 00000000000000..e8dfcc6c908124
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 @@ -0,0 +1,7 @@
@@ -9298,9 +9905,111 @@ index 00000000000000..dfc38e4106d778
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && !arm64 && !amd64
++//go:build !cgo && !arm && !arm64 && !amd64 && !riscv64
 +
 +// This file silences errors about body-less functions.
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
+new file mode 100644
+index 00000000000000..7b771dc770badc
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
+@@ -0,0 +1,96 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++ 
++//go:build !cgo
++ 
++#include "go_asm.h"
++#include "textflag.h"
++ 
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++    MOV A0, 8(X2)
++    CALL    ·syscallNSystemStack(SB)
++    RET
++ 
++TEXT ·syscallNAsm(SB),NOSPLIT,$0-8
++    // Save original stack pointer
++    MOV X2, X20
++ 
++    // Load pointer from stack (ABI0 calling convention)
++    MOV libcArgs+0(FP), X5
++
++    MOV libcCallInfo_args(X5), X30
++    MOV libcCallInfo_fn(X5), X29
++    // Do we have more than 8 arguments?
++    MOV libcCallInfo_n(X5), X10
++    BEQ X10, ZERO, _0args
++    MOV $1, X6
++    BEQ X10, X6, _1args
++    MOV $2, X6
++    BEQ X10, X6, _2args
++    MOV $3, X6
++    BEQ X10, X6, _3args
++    MOV $4, X6
++    BEQ X10, X6, _4args
++    MOV $5, X6
++    BEQ X10, X6, _5args
++    MOV $6, X6
++    BEQ X10, X6, _6args
++    MOV $7, X6
++    BEQ X10, X6, _7args
++    MOV $8, X6
++    BEQ X10, X6, _8args
++ 
++    // Reserve stack space for remaining args
++    ADDI    $-8, X10, X7
++    ADDI    $1, X7, X5 // make even number of words for stack alignment
++    ANDI    $-2, X5, X5
++    SLLI    $3, X5, X5
++    SUB X5, X2, X2
++ 
++    // X6: size of stack arguments (n-8)*8
++    // X7: &args[8]
++    // X8: loop counter, from 0 to (n-8)*8
++    // X9: scratch
++    // X28: copy of X2 (SP)
++    ADDI    $-8, X10, X6
++    SLLI    $3, X6, X6
++    ADDI    $(8*8), X7, X7
++    MOV ZERO, X8
++    MOV X2, X28
++stackargs:
++    ADD X8, X7, X9
++    MOV (X9), X9
++    ADD X8, X28, X31
++    MOV X9, (X31)
++    ADDI    $8, X8, X8
++    BNE X8, X6, stackargs
++ 
++_8args:
++    MOV (7*8)(X30), X17
++_7args:
++    MOV (6*8)(X30), X16
++_6args:
++    MOV (5*8)(X30), X15
++_5args:
++    MOV (4*8)(X30), X14
++_4args:
++    MOV (3*8)(X30), X13
++_3args:
++    MOV (2*8)(X30), X12
++_2args:
++    MOV (1*8)(X30), X11
++_1args:
++    MOV (0*8)(X30), X10
++_0args:
++
++    JALR    RA, (X29)
++
++    // Restore original stack pointer
++    MOV X20, X2
++ 
++    MOV libcArgs+0(FP), X5
++    MOV X10, libcCallInfo_r1(X5)    // save r1
++    MOV X11, libcCallInfo_r2(X5)    // save r2
++ 
++    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
 new file mode 100644
 index 00000000000000..e94cca9e27e30a
@@ -35419,11 +36128,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..42fde54eacaeda 100644
+index b6f6376eac041a..d6e5768a7a7439 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260115115456-4e77131fa055
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 54d371133f7..561f36797bf 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -53,7 +53,7 @@ desired goexperiments and build tags.
  src/internal/buildcfg/exp.go                  |  77 ++++
  src/runtime/runtime_boring.go                 |   5 +
  src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2768 insertions(+), 20 deletions(-)
+ 44 files changed, 2773 insertions(+), 17 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -3163,7 +3163,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..28b2c2434330d6
+index 00000000000000..8618577430daa3
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,17 @@
@@ -3171,7 +3171,7 @@ index 00000000000000..28b2c2434330d6
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (amd64 || arm64)))
++//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (amd64 || arm || arm64 || riscv64)))
 +
 +package crypto
 +

From be7109b70341bee5b67219796eb5e627d71b54ac Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 22 Jan 2026 19:17:55 +0000
Subject: [PATCH 686/887] update openssl backend to implement 386 assembly
 (#2076)

---
 eng/doc/MigrationGuide.md                     |   2 +-
 .../0001-Vendor-external-dependencies.patch   | 391 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |   2 +-
 3 files changed, 383 insertions(+), 12 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 543af75cce4..4dbc3af499e 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -148,7 +148,7 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 > [!NOTE]
 > As of Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
 > This allows the use of OpenSSL without requiring cgo.
-> Currently this experiment is supported on the following architectures: `amd64`, `arm`, `arm64`, and `riscv64`.
+> Currently this experiment is supported on the following architectures: `386`, `amd64`, `arm`, `arm64`, and `riscv64`.
 >
 > While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental as of Go 1.26 and may have limitations.
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 1d026c5d60b..45b569cfe2c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -62,6 +62,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
+ .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
  .../openssl/v2/internal/fakecgo/asm_arm.s     |   49 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
@@ -80,6 +81,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
+ .../v2/internal/fakecgo/trampolines_386.s     |  105 +
  .../v2/internal/fakecgo/trampolines_amd64.s   |  114 +
  .../v2/internal/fakecgo/trampolines_arm.s     |   79 +
  .../v2/internal/fakecgo/trampolines_arm64.s   |   83 +
@@ -89,11 +91,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
  .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
+ .../internal/fakecgo/ztrampolines_linux_386.s |  111 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
  .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   58 +
+ .../openssl/v2/internal/ossl/asm_386.s        |   94 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
  .../openssl/v2/internal/ossl/asm_arm.s        |  105 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
@@ -257,7 +261,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 249 files changed, 32084 insertions(+), 7 deletions(-)
+ 253 files changed, 32423 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -305,6 +309,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
@@ -323,6 +328,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
@@ -332,11 +338,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
@@ -2168,7 +2176,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..7fc97c0e091359 100644
+index efc07451b53448..ed09b7c7c6681b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2177,17 +2185,17 @@ index efc07451b53448..7fc97c0e091359 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..415c8c1b145222 100644
+index b6b841b44d8e38..ab31638935b5c4 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958 h1:hoQQSWSeOzktd3B5zQ9idH9V1p8IXZgEh3amHRDOWNI=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86 h1:1HjCrWzNrJSwcd2yEeP6S5ca5Zmh7dQ9UMH9AoyYqSA=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184 h1:b0PQtPdldqXsTg7yLqLo9HFUF+4Qp07Vi+ohWwTBNrU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
@@ -7253,6 +7261,41 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
 +	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
+new file mode 100644
+index 00000000000000..2e7e9512e27328
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
+@@ -0,0 +1,29 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB),NOSPLIT,$28-16
++	MOVL BP, 24(SP)
++	MOVL BX, 20(SP)
++	MOVL SI, 16(SP)
++	MOVL DI, 12(SP)
++
++	MOVL	ctxt+12(FP), AX
++	MOVL	AX, 8(SP)
++	MOVL	a+4(FP), AX
++	MOVL	AX, 4(SP)
++	MOVL	fn+0(FP), AX
++	MOVL	AX, 0(SP)
++	CALL	runtime·cgocallback(SB)
++
++	MOVL 12(SP), DI
++	MOVL 16(SP), SI
++	MOVL 20(SP), BX
++	MOVL 24(SP), BP
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
 new file mode 100644
 index 00000000000000..2b7eb57f8ae783
@@ -8161,6 +8204,117 @@ index 00000000000000..8d7b9831d31fae
 +//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
 +var x_cgo_unsetenv_trampoline byte
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
+new file mode 100644
+index 00000000000000..b0a837f4fafb8b
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
+@@ -0,0 +1,105 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
++// On i386, both GCC and Go use stack-based calling conventions.
++//
++// When C calls a function, the stack looks like:
++//   0(SP) = return address
++//   4(SP) = arg1
++//   8(SP) = arg2
++//   ...
++//
++// When we declare a Go function with frame size $N-0, Go's prologue
++// effectively does SUB $N, SP, so the C arguments shift up by N bytes:
++//   N+0(SP) = return address  
++//   N+4(SP) = arg1
++//   N+8(SP) = arg2
++//
++// Go ABI0 on 386 expects arguments starting at 0(FP) which equals N+4(SP)
++// after the prologue (where N is the local frame size).
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
++	// C args at 12(SP) and 16(SP) after frame setup (8 bytes local + 4 bytes ret addr)
++	// Go function expects args at 0(SP) and 4(SP) in local frame
++	MOVL	12(SP), AX	// first C arg
++	MOVL	16(SP), BX	// second C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	BX, 4(SP)	// Go arg 2
++	MOVL	·x_cgo_init_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $4-0
++	// C args at 8(SP) after frame setup (4 bytes local + 4 bytes ret addr)
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_thread_start_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_setenv_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_unsetenv_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL	·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL	·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++// This is called from Go, so args are at normal FP positions
++TEXT ·setg_trampoline(SB), NOSPLIT, $4-8
++	MOVL	g+4(FP), AX
++	MOVL	setg+0(FP), BX
++	// setg expects g in 0(SP)
++	MOVL	AX, 0(SP)
++	CALL	BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·threadentry_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $20-28
++	MOVL	fn+0(FP), AX
++	MOVL	a1+4(FP), BX
++	MOVL	a2+8(FP), CX
++	MOVL	a3+12(FP), DX
++	MOVL	a4+16(FP), SI
++	MOVL	a5+20(FP), DI
++	// Place arguments on local stack frame for C calling convention
++	MOVL	BX, 0(SP)	// a1
++	MOVL	CX, 4(SP)	// a2
++	MOVL	DX, 8(SP)	// a3
++	MOVL	SI, 12(SP)	// a4
++	MOVL	DI, 16(SP)	// a5
++	CALL	AX
++	MOVL	AX, r1+24(FP)
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
 index 00000000000000..e4a61f5978515b
@@ -9126,6 +9280,123 @@ index 00000000000000..da07005c0bc988
 +
 +TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_destroy(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
+new file mode 100644
+index 00000000000000..b566eb6ac38ab7
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
+@@ -0,0 +1,111 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setegid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_seteuid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setgid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setregid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setresgid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setresuid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setreuid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setuid_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
++	MOVL	8(SP), AX	// first C arg
++	MOVL	AX, 0(SP)	// Go arg 1
++	MOVL	·x_cgo_purego_setgroups_call(SB), CX
++	MOVL	(CX), CX
++	CALL	CX
++	RET
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	JMP purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
 new file mode 100644
 index 00000000000000..603cd6802eea20
@@ -9577,6 +9848,106 @@ index 00000000000000..8417ba55e1e5cf
 +
 +TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_setspecific(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
+new file mode 100644
+index 00000000000000..7302a8e55f91b2
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
+@@ -0,0 +1,94 @@
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16-0
++	MOVL	20(SP), AX	// libcArgs from C caller (frame_size + ret_addr = 16 + 4)
++	MOVL	AX, 0(SP)	// pass to Go function
++	CALL	·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB),NOSPLIT,$16-4
++	// Frame layout: 16 bytes local storage
++	// 0(SP) - saved BP (original SP)
++	// 4(SP) - saved libcArgs pointer
++	// 8(SP) - saved fn pointer
++	// 12(SP) - scratch
++
++	// Load args pointer FIRST before any stack modifications
++	MOVL	libcArgs+0(FP), SI
++
++	// Save original SP and libcArgs in local frame
++	MOVL	SP, BP
++	ADDL	$16, BP			// BP = original SP (before frame allocation)
++	MOVL	BP, 0(SP)		// save original SP
++	MOVL	SI, 4(SP)		// save libcArgs pointer
++
++	// Load struct fields
++	MOVL	libcCallInfo_fn(SI), AX
++	MOVL	AX, 8(SP)		// save fn pointer
++	MOVL	libcCallInfo_n(SI), CX
++	MOVL	libcCallInfo_args(SI), BX
++
++	// Allocate 16 bytes for fast path (0-3 args)
++	MOVL	SP, BP
++	SUBL	$16, SP
++
++	// Fast path for 0-3 args, otherwise fall through to manyargs
++	CMPL	CX, $0;	JE	_0args
++	CMPL	CX, $1;	JE	_1args
++	CMPL	CX, $2;	JE	_2args
++	CMPL	CX, $3;	JE	_3args
++
++	// manyargs: 4+ args, restore SP and reallocate
++	MOVL	BP, SP
++
++	// Calculate stack space needed: n*4 bytes, aligned to 16
++	MOVL	CX, AX
++	SHLL	$2, AX			// AX = n * 4
++	ADDL	$15, AX
++	ANDL	$~15, AX		// 16-byte align
++	SUBL	AX, SP
++
++	// Copy all args to stack
++	// BX = args pointer, CX = count, DI = dest
++	MOVL	SP, DI
++copy_loop:
++	DECL	CX
++	MOVL	(BX)(CX*4), AX
++	MOVL	AX, (DI)(CX*4)
++	CMPL	CX, $0
++	JNE	copy_loop
++	JMP	_0args
++
++	// Fast path: fall through to copy args
++_3args:
++	MOVL	8(BX), AX
++	MOVL	AX, 8(SP)
++_2args:
++	MOVL	4(BX), AX
++	MOVL	AX, 4(SP)
++_1args:
++	MOVL	0(BX), AX
++	MOVL	AX, 0(SP)
++_0args:
++	MOVL	8(BP), DX		// fn pointer from saved location
++	CALL	DX
++	MOVL	BP, SP
++
++ret:
++	// Reload libcArgs pointer from saved location
++	MOVL	4(SP), SI
++
++	// Save return values (AX already has r1, need to save DX before it's clobbered)
++	MOVL	DX, 12(SP)		// temporarily save r2
++	MOVL	AX, libcCallInfo_r1(SI)
++	MOVL	12(SP), AX
++	MOVL	AX, libcCallInfo_r2(SI)
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
 new file mode 100644
 index 00000000000000..59560c7d590f7a
@@ -9897,7 +10268,7 @@ index 00000000000000..025276dffb2aa5
 +    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
-index 00000000000000..e8dfcc6c908124
+index 00000000000000..67ab3cf1532ec9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 @@ -0,0 +1,7 @@
@@ -9905,7 +10276,7 @@ index 00000000000000..e8dfcc6c908124
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && !arm && !arm64 && !amd64 && !riscv64
++//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !riscv64
 +
 +// This file silences errors about body-less functions.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
@@ -36128,11 +36499,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..d6e5768a7a7439 100644
+index b6f6376eac041a..1e9ffd7c312b4d 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260122113511-686304cec958
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 561f36797bf..bd5e9f29fa3 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -3171,7 +3171,7 @@ index 00000000000000..8618577430daa3
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (amd64 || arm || arm64 || riscv64)))
++//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (386 || amd64 || arm || arm64 || riscv64)))
 +
 +package crypto
 +

From 41530e7fe4a6994a757ccd9c65ead2e1ec5990ce Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 22 Jan 2026 14:40:38 -0800
Subject: [PATCH 687/887] Update toolset identification guide; add migration
 note (#2079)

---
 eng/doc/MicrosoftToolsetIdentification.md | 31 +++++++++++++++++++----
 eng/doc/MigrationGuide.md                 |  1 +
 2 files changed, 27 insertions(+), 5 deletions(-)

diff --git a/eng/doc/MicrosoftToolsetIdentification.md b/eng/doc/MicrosoftToolsetIdentification.md
index 9887d72e6a4..37d69c72597 100644
--- a/eng/doc/MicrosoftToolsetIdentification.md
+++ b/eng/doc/MicrosoftToolsetIdentification.md
@@ -3,12 +3,28 @@
 Identifying whether a Go binary or toolset is from the Microsoft build of Go or the official Go distribution can be important for diagnostics and verifying expectations.
 
 As of Go 1.25, `go version` and `go version -m` don't clearly indicate the source of the toolset or binary.
-We plan to address this: see [microsoft/go#262](https://github.com/microsoft/go/issues/262).
-In the meantime, this document describes how to identify a Go program or Go toolset.
+
+As of Go 1.26, setting `GODEBUG=ms_version=1` makes `go version` report the Microsoft build version string.
+`go version -m <program>` on a `program` built by the Microsoft build of Go always includes a `microsoft_toolset_version` line specifying the Microsoft version.
+
+> [!TIP]
+> If you always set `GODEBUG=ms_version=1`, you will always have the most reliable information available.
+> If the toolset doesn't support this setting, it will simply be ignored.
+
+The below sections provide step-by-step processes to help identify a Microsoft build of Go toolset and binaries built by it.
 
 ## Identifying a Go toolset
 
-If you are able to run `go` commands but aren't sure which distribution `go` is from, you can identify it with these steps.
+If you are able to run `go` commands but aren't sure which distribution `go` is from, you can identify it with these lists of steps.
+
+First, run `go version`.
+If the output is 1.26 or later, then:
+
+1. Run `GODEBUG=ms_version=1 go version`.
+    * If the output includes the `-microsoft` suffix, it's the Microsoft build of Go.
+    * Otherwise, it isn't.
+
+If the output is 1.25 or earlier, then:
 
 1. Run `go env GOROOT` to find the root directory of the toolset.
     * If the path contains clues, it might be clear already which toolset this is.
@@ -26,14 +42,19 @@ First, read the version data from your application binary:
 go version -m <your-application>
 ```
 
-Then, look for a line that contains one of these values:
+Then, look for a line that contains `microsoft_toolset_version`.
+
+  * The presence of this line confirms that the binary was built by the Microsoft build of Go. It also shows you the version and revision used.
+  * Unfortunately, this is only available if the binary was built with Microsoft build of Go 1.26 or later.
+
+Otherwise, look for one of these clues:
 
 * `microsoft_systemcrypto=1`
 * `GOEXPERIMENT=systemcrypto`
 
 `systemcrypto` is unique to the Microsoft build of Go, so if either of these strings is present, it confirms that the binary is built by the Microsoft build of Go.
 
-If `GOEXPERIMENT=nosystemcrypto` is present (note the `no` prefix), it confirms that the binary was built with the Microsoft build of Go, but `systemcrypto` was explicitly disabled.
+If `GOEXPERIMENT=nosystemcrypto` is present (note the `no` prefix), it also confirms that the binary was built with the Microsoft build of Go, but it shows that `systemcrypto` was explicitly disabled.
 
 If none of the above are present, we can't confirm which build of Go was used.
 However, this situation means that the application doesn't meet Microsoft internal crypto policy, which may be enough information in some cases.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 4dbc3af499e..7de068ffae8 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -45,6 +45,7 @@ The Microsoft build of Go includes [patches](/patches/) that:
 - **Add [toolset telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/)**, enabled by default.
 - **Disable [GOTOOLCHAIN](https://go.dev/doc/toolchain) by default** to avoid mixups with the official Go distribution.
 - **Remove use of undocumented Windows APIs** for compatibility, security, and compliance.
+- **Embed Microsoft-specific version information** into built Go binaries for [easier identification](./MicrosoftToolsetIdentification.md).
 
 The patches directory at each Git tag specifies the exact code changes we have made to the official Go toolchain of that version.
 If it's critical to you to understand the exact set of changes we've made, please review the patch files.

From 9713f01c579c8df93b861fb36d47b224f13ea7ab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Jan 2026 11:07:57 +0000
Subject: [PATCH 688/887] build(deps): bump actions/checkout from 6.0.1 to
 6.0.2 (#2080)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml      | 2 +-
 .github/workflows/linter.yml      | 2 +-
 .github/workflows/patch-build.yml | 2 +-
 .github/workflows/test.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c3b0a462132..92842e9ef4e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 3f3373fcb89..a6d22473e58 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -16,7 +16,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Run golangci-lint
         working-directory: eng/_util
         run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 8bb3c778cc9..acf4d7d7120 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: true
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index caeffab17c9..db652810c2d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -28,6 +28,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - run: pwsh eng/run.ps1 submodule-refresh -shallow

From e366da6dbaa6d98a602d50958cb0b235cecd0d20 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 16:07:12 +0000
Subject: [PATCH 689/887] Update submodule to latest master (f809faeb):
 go/scanner: clear all fields after Scanner reuse

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2baa1d17628..f809faeb8e2 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2baa1d17628bb2f09757617382b1e61f1f9f0ddd
+Subproject commit f809faeb8e2534da29e980ebd98dfbd4e8a7f4ba

From a53ff3b6ce6151bd15ad8a71b7227f9996d3a0f9 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Mon, 26 Jan 2026 10:12:45 -0800
Subject: [PATCH 690/887] fips README: add container FIPS mode notes

---
 eng/doc/fips/README.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 404c86c2275..ee4e90ad5e4 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -148,6 +148,10 @@ The next sections describe how to select a crypto backend in some common scenari
 
 If you use [the Microsoft build of Go images produced by microsoft/go-images][microsoft-go-images], the `systemcrypto` backend is enabled by default as of Go 1.25.
 
+> [!NOTE]
+> Inside a Linux container, [the system-wide FIPS mode is shared with the container host](#linux-fips-mode-openssl).
+> This means Go binaries built using the Microsoft build of Go with a compliant build configuration don't require any extra runtime configuration to use the expected FIPS mode inside a container.
+
 If you use a Dockerfile and a version of the Microsoft build of Go prior to 1.25, you can swap your Dockerfile's base image to one of our images that include the `-fips-` segment.
 These images are no longer produced as of Go 1.25.
 The `-fips-` images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images.
@@ -280,7 +284,11 @@ The `only` setting is not yet supported in the Microsoft build of Go.
 The Linux Kernel FIPS mode is read to determine the platform-specific FIPS preference on Linux.
 The Go runtime reads the content of `/proc/sys/crypto/fips_enabled`, and if it's `1`, then the platform preference is to enable FIPS.
 
-If OpenSSL is not using a FIPS-compliant engine or provider, this is considered not being in FIPS mode.
+> [!NOTE]
+> In a Linux container, the content of `/proc/sys/crypto/fips_enabled` is shared with the container host.
+> This is because the kernel is shared.
+
+If OpenSSL is not using a FIPS-compliant engine or provider, the Go runtime considers OpenSSL to not be in FIPS mode.
 
 For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
 

From 97ebd1077a86e31643b02a81ef40160056ca6bab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 18:34:48 +0000
Subject: [PATCH 691/887] build(deps): bump github/codeql-action from 4.31.10
 to 4.31.11 (#2083)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.10 to 4.31.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/cdefb33c0f6224e58673d9004f47f7cb3e328b89...19b2f06db2b6f5108140aeb04014ef02b648f789)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 92842e9ef4e..12f5b9753fe 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/autobuild@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           category: /language:go

From 4a4e84bb228aebb3cdbb55229e670451afca1842 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 26 Jan 2026 18:43:09 +0000
Subject: [PATCH 692/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 44 +++++++++----------
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 18 ++++----
 2 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 45b569cfe2c..b25a8e6247f 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -509,24 +509,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 85e8c4cb5fb305..b6c3222b6c3216 100644
+index 3b02794aa8f024..254bdd359827fd 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
-@@ -4,6 +4,8 @@ go 1.26
+@@ -4,6 +4,8 @@ go 1.27
  
  require (
- 	github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8
+ 	github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
- 	golang.org/x/arch v0.23.0
- 	golang.org/x/build v0.0.0-20251128064159-b9bfd88b30e8
- 	golang.org/x/mod v0.30.1-0.20251115032019-269c237cf350
+ 	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
+ 	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
+ 	golang.org/x/mod v0.32.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 61c88e52530940..fc869bb61f2fe8 100644
+index 987ebe2783e52f..575c7a9396431c 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8 h1:3DsUAV+VNEQa2CUVLx
- github.com/google/pprof v0.0.0-20251114195745-4902fdda35c8/go.mod h1:I6V7YzU0XDpsHqbsyrghnFZLO1gwK6NPTNvmetQIk9U=
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f h1:HU1RgM6NALf/KW9HEY
+ github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f/go.mod h1:67FPmZWbr+KDT/VlpWtw6sO9XSjpJmLuHpoLmWiTGgY=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980 h1:Xe/6t1ORLxP4YELza1nvuR4P5tT+ATAwfgIOzxZiVLY=
@@ -535,7 +535,7 @@ index 61c88e52530940..fc869bb61f2fe8 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.23.0 h1:lKF64A2jF6Zd8L0knGltUnegD62JMFBiCPBmQpToHhg=
+ golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695 h1:q45HsUyFzBjBk4mHGgUewJf6KKOkNiWB8wMx0X6elyA=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -2126,7 +2126,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 9c179c4bcd4c30..0c76f8fac35576 100644
+index b0e53e80ce6914..02af6a9e37bf47 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2144,7 +2144,7 @@ index 9c179c4bcd4c30..0c76f8fac35576 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.23.0
+ # golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  ## explicit; go 1.24.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
@@ -2176,12 +2176,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index efc07451b53448..ed09b7c7c6681b 100644
+index d6c515017a7009..3ce7dacdd53a48 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.39.0 // indirect
- 	golang.org/x/text v0.32.0 // indirect
+ 	golang.org/x/sys v0.40.1-0.20260116220947-d25a7aaff8c2 // indirect
+ 	golang.org/x/text v0.33.1-0.20260122225119-3264de9174be // indirect
  )
 +
 +require (
@@ -2190,7 +2190,7 @@ index efc07451b53448..ed09b7c7c6681b 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
 +)
 diff --git a/src/go.sum b/src/go.sum
-index b6b841b44d8e38..ab31638935b5c4 100644
+index 2223d2a7c231c1..7276e8bff9d7fd 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2200,11 +2200,11 @@ index b6b841b44d8e38..ab31638935b5c4 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
- golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00 h1:JgcPM1rzpSOZS8y69FQvnY0xN0ciHlpQqwTXJcuZIA4=
- golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00/go.mod h1:Evb/oLKmMraqjZ2iQTwDwvCtJkczlDuTmdJXoZVzqU0=
- golang.org/x/net v0.47.1-0.20251128220604-7c360367ab7e h1:PAAT9cIDvIAIRQVz2txQvUFRt3jOlhiO84ihd8XMGlg=
+ golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
+ golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
+ golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f4b7e9dae5f3ae..3f2b2399ec4127 100644
+index a458731f4bc100..a699ac341662e4 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -154,6 +154,13 @@ var depsRules = `
@@ -36499,7 +36499,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b6f6376eac041a..1e9ffd7c312b4d 100644
+index 48967bc9ee3bd2..76c297089f07a1 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -36526,6 +36526,6 @@ index b6f6376eac041a..1e9ffd7c312b4d 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.46.1-0.20251210140736-7dacc380ba00
+ # golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1
  ## explicit; go 1.24.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 52e27cb4748..19ab6d19cd1 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -391,7 +391,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index df41f79338841f..0c25f3cce97202 100644
+index aa41986e8e9387..87cd1f4de3246a 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -441,15 +441,15 @@ index df41f79338841f..0c25f3cce97202 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -87,6 +113,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RandomizedHeapBase64:  true,
- 		SizeSpecializedMalloc: true,
- 		GreenTeaGC:            true,
-+		SystemCrypto:          systemCryptoSupported,
+@@ -86,6 +112,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		Dwarf5:               dwarf5Supported,
+ 		RandomizedHeapBase64: true,
+ 		GreenTeaGC:           true,
++		SystemCrypto:         systemCryptoSupported,
  	}
  	flags := &ExperimentFlags{
  		Flags:    baseline,
-@@ -126,6 +153,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -125,6 +152,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -464,7 +464,7 @@ index df41f79338841f..0c25f3cce97202 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -139,6 +174,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -138,6 +173,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		}
  	}
  
@@ -475,7 +475,7 @@ index df41f79338841f..0c25f3cce97202 100644
  	if regabiAlwaysOn {
  		flags.RegabiWrappers = true
  		flags.RegabiArgs = true
-@@ -152,6 +191,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -151,6 +190,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}

From 5296d6f96533e100e1f5ef1b03ebb09b0f203b82 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 27 Jan 2026 11:01:54 +0000
Subject: [PATCH 693/887] build(deps): bump github/codeql-action from 4.31.11
 to 4.32.0 (#2085)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.11 to 4.32.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/19b2f06db2b6f5108140aeb04014ef02b648f789...b20883b0cd1f46c72ae0ba6d1090936928f9fa30)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 12f5b9753fe..fcdb987b382 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
+        uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
+        uses: github/codeql-action/autobuild@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
+        uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
         with:
           category: /language:go

From 13074f69b834b8c05291f0c9ef5ca9f5d7f53ce0 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Wed, 28 Jan 2026 15:31:51 +0100
Subject: [PATCH 694/887] upgrade dependencies (#2087)

---
 .../0001-Vendor-external-dependencies.patch   | 370 ++++++++----------
 1 file changed, 168 insertions(+), 202 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index b25a8e6247f..7c58ce253de 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -28,7 +28,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  172 ++
  .../telemetry/internal/config/config.go       |   63 +
- .../telemetry/internal/telemetry/proginfo.go  |   38 +
+ .../telemetry/internal/telemetry/proginfo.go  |   43 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
  .../microsoft/go-infra/telemetry/telemetry.go |  125 +
  src/cmd/vendor/modules.txt                    |   11 +
@@ -82,12 +82,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
  .../v2/internal/fakecgo/trampolines_386.s     |  105 +
- .../v2/internal/fakecgo/trampolines_amd64.s   |  114 +
+ .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
  .../v2/internal/fakecgo/trampolines_arm.s     |   79 +
- .../v2/internal/fakecgo/trampolines_arm64.s   |   83 +
- .../v2/internal/fakecgo/trampolines_riscv64.s |   71 +
- .../openssl/v2/internal/fakecgo/zsymbols.go   |  175 ++
- .../v2/internal/fakecgo/zsymbols_darwin.go    |   60 +
+ .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
+ .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
+ .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
+ .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
  .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
@@ -96,7 +96,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
- .../v2/internal/fakecgo/ztrampolines_stubs.s  |   58 +
+ .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
  .../openssl/v2/internal/ossl/asm_386.s        |   94 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
  .../openssl/v2/internal/ossl/asm_arm.s        |  105 +
@@ -184,12 +184,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/fakecgo/libcgo.go                |   39 +
  .../internal/fakecgo/libcgo_darwin.go         |   26 +
  .../internal/fakecgo/setenv.go                |   19 +
- .../internal/fakecgo/trampolines_amd64.s      |  114 +
- .../internal/fakecgo/trampolines_arm64.s      |   83 +
- .../internal/fakecgo/zsymbols.go              |  175 ++
- .../internal/fakecgo/zsymbols_darwin.go       |   60 +
+ .../internal/fakecgo/trampolines_amd64.s      |  107 +
+ .../internal/fakecgo/trampolines_arm64.s      |   84 +
+ .../internal/fakecgo/zsymbols.go              |  165 ++
+ .../internal/fakecgo/zsymbols_darwin.go       |   59 +
  .../internal/fakecgo/ztrampolines_darwin.s    |   19 +
- .../internal/fakecgo/ztrampolines_stubs.s     |   58 +
+ .../internal/fakecgo/ztrampolines_stubs.s     |   55 +
  .../internal/security/security.go             |    9 +
  .../internal/security/shims.h                 |  107 +
  .../internal/security/syscall_nocgo.go        |   15 +
@@ -261,7 +261,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 253 files changed, 32423 insertions(+), 7 deletions(-)
+ 253 files changed, 32389 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -509,30 +509,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 3b02794aa8f024..254bdd359827fd 100644
+index 3b02794aa8f024..c928a8c2832b5b 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.32.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 987ebe2783e52f..575c7a9396431c 100644
+index 987ebe2783e52f..6703308bb6c7ec 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f h1:HU1RgM6NALf/KW9HEY
  github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f/go.mod h1:67FPmZWbr+KDT/VlpWtw6sO9XSjpJmLuHpoLmWiTGgY=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980 h1:Xe/6t1ORLxP4YELza1nvuR4P5tT+ATAwfgIOzxZiVLY=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980 h1:xRaYLWEeaYNxkBV9VMnmyGIOX16GExTmNXNMXjkP42g=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd h1:XE6HF7LVJ7/gD0mPMaIHJak0IFP683EUBzqx6+HxPu8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd h1:vNA5PIOnvHfH7O9GUOZXKUakJpdE7+PzsF641y7Zly0=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695 h1:q45HsUyFzBjBk4mHGgUewJf6KKOkNiWB8wMx0X6elyA=
@@ -1914,10 +1914,10 @@ index 00000000000000..7980b1505b2caa
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
 new file mode 100644
-index 00000000000000..a4949c6a90ea1b
+index 00000000000000..f6183bdf3dbf1b
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
-@@ -0,0 +1,38 @@
+@@ -0,0 +1,43 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1940,11 +1940,16 @@ index 00000000000000..a4949c6a90ea1b
 +func ProgramInfo(info *debug.BuildInfo) (goVers, progPath string) {
 +	goVers = info.GoVersion
 +	if strings.Contains(goVers, "devel") || strings.Contains(goVers, "-") || !version.IsValid(goVers) {
-+		if v, _, ok := strings.Cut(goVers, "_microsoft"); ok && version.IsValid(v) {
-+			// Schema like "go1.21.1-0_microsoft ABC".
-+			// Remove everything after the revision number.
++		if v, rest, ok := strings.Cut(goVers, "-microsoft"); ok &&
++			version.IsValid(v) &&
++			!strings.Contains(rest, "devel") {
++
++			// For schemas like "go1.21.1-0-microsoft", "go1.21-microsoft", and
++			// "go1.21rc1-microsoft", keep the revision number (if any is
++			// present) and remove everything after.
 +			goVers = v
 +		} else {
++			// This may be a schema like "go1.21-microsoft-devel_abc123 ..."
 +			goVers = "devel"
 +		}
 +	}
@@ -2126,14 +2131,14 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index b0e53e80ce6914..02af6a9e37bf47 100644
+index b0e53e80ce6914..1f333d23429699 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260114110637-9d75809e6980
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -2141,7 +2146,7 @@ index b0e53e80ce6914..02af6a9e37bf47 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260114110637-9d75809e6980
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
@@ -2176,7 +2181,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..3ce7dacdd53a48 100644
+index d6c515017a7009..3045badcd4a21b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2185,21 +2190,21 @@ index d6c515017a7009..3ce7dacdd53a48 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad
++	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..7276e8bff9d7fd 100644
+index 2223d2a7c231c1..57fbc3a10dbfa6 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86 h1:1HjCrWzNrJSwcd2yEeP6S5ca5Zmh7dQ9UMH9AoyYqSA=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184 h1:b0PQtPdldqXsTg7yLqLo9HFUF+4Qp07Vi+ohWwTBNrU=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f h1:SvZJthaYYoyAxBX87EnmIFn4PmT/UbvKClLiSMhK8uw=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310 h1:6glr29v7Xj03OFXfUngI9wY5heRq3vUdlkndcMWoSDI=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad h1:EwtwytetcPW2ftJns7yDSUL0lQFsly0BPp4xeuRfDsQ=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
@@ -8317,10 +8322,10 @@ index 00000000000000..b0a837f4fafb8b
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
-index 00000000000000..e4a61f5978515b
+index 00000000000000..0e50f2a91f1b50
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,114 @@
+@@ -0,0 +1,107 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -8330,12 +8335,6 @@ index 00000000000000..e4a61f5978515b
 +trampoline for emulating required C functions for cgo in go (see cgo.go)
 +(we convert cdecl calling convention to go and vice-versa)
 +
-+Since we're called from go and call into C we can cheat a bit with the calling conventions:
-+ - in go all the registers are caller saved
-+ - in C we have a couple of callee saved registers
-+
-+=> we can use BX, R12, R13, R14, R15 instead of the stack
-+
 +C Calling convention cdecl used here (we only need integer args):
 +1. arg: DI
 +2. arg: SI
@@ -8345,6 +8344,7 @@ index 00000000000000..e4a61f5978515b
 +6. arg: R9
 +We don't need floats with these functions -> AX=0
 +return value will be in AX
++temporary register is R11
 +*/
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -8355,46 +8355,44 @@ index 00000000000000..e4a61f5978515b
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
 +	MOVQ DI, AX
 +	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_init_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_thread_start_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_setenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_unsetenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
++	JMP ·x_cgo_notify_runtime_init_done(SB)
 +
 +TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
++	JMP ·x_cgo_bindm(SB)
 +
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
 +	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), BX
++	MOVQ setg+0(FP), R11
 +	XORL AX, AX
-+	CALL BX
++	CALL R11
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $0
@@ -8406,15 +8404,15 @@ index 00000000000000..e4a61f5978515b
 +	PXOR X15, X15
 +
 +	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·threadentry_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +
 +	POP_REGS_HOST_TO_ABI0()
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), BX
++	MOVQ fn+0(FP), R11
 +	MOVQ a1+8(FP), DI
 +	MOVQ a2+16(FP), SI
 +	MOVQ a3+24(FP), DX
@@ -8428,7 +8426,7 @@ index 00000000000000..e4a61f5978515b
 +	SUBQ  $16, SP  // allocate space for alignment
 +	ANDQ  $-16, SP // align on 16 bytes for SSE
 +
-+	CALL BX
++	CALL R11
 +
 +	MOVQ BP, SP // get SP back
 +	POPQ BP     // restore BP
@@ -8522,10 +8520,10 @@ index 00000000000000..7b877b4682aeb5
 +    RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..1ebee99617dbde
+index 00000000000000..025d6dc8776710
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,83 @@
+@@ -0,0 +1,84 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -8537,29 +8535,30 @@ index 00000000000000..1ebee99617dbde
 +
 +// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
 +// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
++// R9 is used as a temporary register.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_init_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_thread_start_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_setenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_unsetenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
@@ -8573,8 +8572,8 @@ index 00000000000000..1ebee99617dbde
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
 +	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R1
-+	CALL R1
++	MOVD setg+0(FP), R9
++	CALL R9
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
@@ -8587,9 +8586,9 @@ index 00000000000000..1ebee99617dbde
 +	SAVE_F8_TO_F15(8*14)
 +	STP (R29, R30), (8*22)(RSP)
 +
-+	MOVD ·threadentry_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·threadentry_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	MOVD $0, R0                     // TODO: get the return value from threadentry
 +
 +	RESTORE_R19_TO_R28(8*4)
@@ -8600,21 +8599,21 @@ index 00000000000000..1ebee99617dbde
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R6
++	MOVD fn+0(FP), R9
 +	MOVD a1+8(FP), R0
 +	MOVD a2+16(FP), R1
 +	MOVD a3+24(FP), R2
 +	MOVD a4+32(FP), R3
 +	MOVD a5+40(FP), R4
-+	CALL R6
++	CALL R9
 +	MOVD R0, ret+48(FP)
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 new file mode 100644
-index 00000000000000..da9ab9a08a599d
+index 00000000000000..e70cca75bfdc02
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
-@@ -0,0 +1,71 @@
+@@ -0,0 +1,72 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
@@ -8624,34 +8623,35 @@ index 00000000000000..da9ab9a08a599d
 +#include "go_asm.h"
 +
 +// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// X5 is used as temporary register.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
 +	MOV	X10, 8(SP)
 +	MOV	X11, 16(SP)
 +	MOV	·x_cgo_init_call(SB), X5
-+	MOV	(X5), X6
-+	JALR	RA, 0(X6)
++	MOV	(X5), X5
++	JALR	RA, 0(X5)
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
 +	MOV	X10, 8(SP)
 +	MOV	·x_cgo_thread_start_call(SB), X5
-+	MOV	(X5), X6
-+	JALR	RA, 0(X6)
++	MOV	(X5), X5
++	JALR	RA, 0(X5)
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
 +	MOV	X10, 8(SP)
 +	MOV	·x_cgo_setenv_call(SB), X5
-+	MOV	(X5), X6
-+	JALR	RA, 0(X6)
++	MOV	(X5), X5
++	JALR	RA, 0(X5)
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
 +	MOV	X10, 8(SP)
 +	MOV	·x_cgo_unsetenv_call(SB), X5
-+	MOV	(X5), X6
-+	JALR	RA, 0(X6)
++	MOV	(X5), X5
++	JALR	RA, 0(X5)
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
@@ -8672,26 +8672,26 @@ index 00000000000000..da9ab9a08a599d
 +TEXT threadentry_trampoline(SB), NOSPLIT, $16
 +	MOV	X10, 8(SP)
 +	MOV	·threadentry_call(SB), X5
-+	MOV	(X5), X6
-+	JALR	RA, 0(X6)
++	MOV	(X5), X5
++	JALR	RA, 0(X5)
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-48
-+	MOV	fn+0(FP), X9
++	MOV	fn+0(FP), X5
 +	MOV	a1+8(FP), X10
 +	MOV	a2+16(FP), X11
 +	MOV	a3+24(FP), X12
 +	MOV	a4+32(FP), X13
 +	MOV	a5+40(FP), X14
-+	JALR	RA, 0(X9)
++	JALR	RA, 0(X5)
 +	MOV	X10, ret+48(FP)
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
-index 00000000000000..c5df904098e92a
+index 00000000000000..fb667453f207c0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
-@@ -0,0 +1,175 @@
+@@ -0,0 +1,165 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8752,12 +8752,6 @@ index 00000000000000..c5df904098e92a
 +
 +//go:nosplit
 +//go:norace
-+func sigaltstack(ss *stack_t, old_ss *stack_t) int32 {
-+	return int32(call5(sigaltstackABI0, uintptr(unsafe.Pointer(ss)), uintptr(unsafe.Pointer(old_ss)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
 +func pthread_attr_init(attr *pthread_attr_t) int32 {
 +	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
 +}
@@ -8832,10 +8826,6 @@ index 00000000000000..c5df904098e92a
 +var _abort uint8
 +var abortABI0 = uintptr(unsafe.Pointer(&_abort))
 +
-+//go:linkname _sigaltstack _sigaltstack
-+var _sigaltstack uint8
-+var sigaltstackABI0 = uintptr(unsafe.Pointer(&_sigaltstack))
-+
 +//go:linkname _pthread_attr_init _pthread_attr_init
 +var _pthread_attr_init uint8
 +var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
@@ -8869,10 +8859,10 @@ index 00000000000000..c5df904098e92a
 +var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
 new file mode 100644
-index 00000000000000..08a7601c2ed0ff
+index 00000000000000..960f8168eb88d7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
-@@ -0,0 +1,60 @@
+@@ -0,0 +1,59 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -8891,7 +8881,6 @@ index 00000000000000..08a7601c2ed0ff
 +//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
@@ -9786,10 +9775,10 @@ index 00000000000000..d97eb10cee2bd5
 +	JMP purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
-index 00000000000000..8417ba55e1e5cf
+index 00000000000000..6a073bea0944d1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,55 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -9822,9 +9811,6 @@ index 00000000000000..8417ba55e1e5cf
 +TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_abort(SB)
 +
-+TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigaltstack(SB)
-+
 +TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_init(SB)
 +
@@ -26160,10 +26146,10 @@ index 00000000000000..e761fecfb89280
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
-index 00000000000000..c0a759bfb849c3
+index 00000000000000..098f56ce5e6b77
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,114 @@
+@@ -0,0 +1,107 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -26173,12 +26159,6 @@ index 00000000000000..c0a759bfb849c3
 +trampoline for emulating required C functions for cgo in go (see cgo.go)
 +(we convert cdecl calling convention to go and vice-versa)
 +
-+Since we're called from go and call into C we can cheat a bit with the calling conventions:
-+ - in go all the registers are caller saved
-+ - in C we have a couple of callee saved registers
-+
-+=> we can use BX, R12, R13, R14, R15 instead of the stack
-+
 +C Calling convention cdecl used here (we only need integer args):
 +1. arg: DI
 +2. arg: SI
@@ -26188,6 +26168,7 @@ index 00000000000000..c0a759bfb849c3
 +6. arg: R9
 +We don't need floats with these functions -> AX=0
 +return value will be in AX
++temporary register is R11
 +*/
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -26198,46 +26179,44 @@ index 00000000000000..c0a759bfb849c3
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
 +	MOVQ DI, AX
 +	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_init_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_thread_start_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_setenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
 +	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·x_cgo_unsetenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
++	JMP ·x_cgo_notify_runtime_init_done(SB)
 +
 +TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
++	JMP ·x_cgo_bindm(SB)
 +
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
 +	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), BX
++	MOVQ setg+0(FP), R11
 +	XORL AX, AX
-+	CALL BX
++	CALL R11
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $0
@@ -26249,15 +26228,15 @@ index 00000000000000..c0a759bfb849c3
 +	PXOR X15, X15
 +
 +	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
++	MOVQ ·threadentry_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +
 +	POP_REGS_HOST_TO_ABI0()
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), BX
++	MOVQ fn+0(FP), R11
 +	MOVQ a1+8(FP), DI
 +	MOVQ a2+16(FP), SI
 +	MOVQ a3+24(FP), DX
@@ -26271,7 +26250,7 @@ index 00000000000000..c0a759bfb849c3
 +	SUBQ  $16, SP  // allocate space for alignment
 +	ANDQ  $-16, SP // align on 16 bytes for SSE
 +
-+	CALL BX
++	CALL R11
 +
 +	MOVQ BP, SP // get SP back
 +	POPQ BP     // restore BP
@@ -26280,10 +26259,10 @@ index 00000000000000..c0a759bfb849c3
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..959dafa43dc6b8
+index 00000000000000..59bdba1f7592f8
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,83 @@
+@@ -0,0 +1,84 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -26295,29 +26274,30 @@ index 00000000000000..959dafa43dc6b8
 +
 +// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
 +// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
++// R9 is used as a temporary register.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_init_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_thread_start_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_setenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·x_cgo_unsetenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
@@ -26331,8 +26311,8 @@ index 00000000000000..959dafa43dc6b8
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
 +	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R1
-+	CALL R1
++	MOVD setg+0(FP), R9
++	CALL R9
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
@@ -26345,9 +26325,9 @@ index 00000000000000..959dafa43dc6b8
 +	SAVE_F8_TO_F15(8*14)
 +	STP (R29, R30), (8*22)(RSP)
 +
-+	MOVD ·threadentry_call(SB), R26
-+	MOVD (R26), R2
-+	CALL (R2)
++	MOVD ·threadentry_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	MOVD $0, R0                     // TODO: get the return value from threadentry
 +
 +	RESTORE_R19_TO_R28(8*4)
@@ -26358,21 +26338,21 @@ index 00000000000000..959dafa43dc6b8
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R6
++	MOVD fn+0(FP), R9
 +	MOVD a1+8(FP), R0
 +	MOVD a2+16(FP), R1
 +	MOVD a3+24(FP), R2
 +	MOVD a4+32(FP), R3
 +	MOVD a5+40(FP), R4
-+	CALL R6
++	CALL R9
 +	MOVD R0, ret+48(FP)
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
 new file mode 100644
-index 00000000000000..9349ba86bc82bb
+index 00000000000000..3f720df236e392
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
-@@ -0,0 +1,175 @@
+@@ -0,0 +1,165 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -26433,12 +26413,6 @@ index 00000000000000..9349ba86bc82bb
 +
 +//go:nosplit
 +//go:norace
-+func sigaltstack(ss *stack_t, old_ss *stack_t) int32 {
-+	return int32(call5(sigaltstackABI0, uintptr(unsafe.Pointer(ss)), uintptr(unsafe.Pointer(old_ss)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
 +func pthread_attr_init(attr *pthread_attr_t) int32 {
 +	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
 +}
@@ -26513,10 +26487,6 @@ index 00000000000000..9349ba86bc82bb
 +var _abort uint8
 +var abortABI0 = uintptr(unsafe.Pointer(&_abort))
 +
-+//go:linkname _sigaltstack _sigaltstack
-+var _sigaltstack uint8
-+var sigaltstackABI0 = uintptr(unsafe.Pointer(&_sigaltstack))
-+
 +//go:linkname _pthread_attr_init _pthread_attr_init
 +var _pthread_attr_init uint8
 +var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
@@ -26550,10 +26520,10 @@ index 00000000000000..9349ba86bc82bb
 +var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
 new file mode 100644
-index 00000000000000..08a7601c2ed0ff
+index 00000000000000..960f8168eb88d7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
-@@ -0,0 +1,60 @@
+@@ -0,0 +1,59 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -26572,7 +26542,6 @@ index 00000000000000..08a7601c2ed0ff
 +//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigaltstack sigaltstack "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
@@ -26641,10 +26610,10 @@ index 00000000000000..35ef7ac11cb955
 +	JMP purego_pthread_attr_setstacksize(SB)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
-index 00000000000000..c63651b123f1bc
+index 00000000000000..c59e0dce68c449
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
-@@ -0,0 +1,58 @@
+@@ -0,0 +1,55 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -26677,9 +26646,6 @@ index 00000000000000..c63651b123f1bc
 +TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_abort(SB)
 +
-+TEXT _sigaltstack(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigaltstack(SB)
-+
 +TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_init(SB)
 +
@@ -36499,18 +36465,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..76c297089f07a1 100644
+index 48967bc9ee3bd2..788e564ca4d552 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260122161456-253270d31f86
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260114113743-000278575184
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
@@ -36519,7 +36485,7 @@ index 48967bc9ee3bd2..76c297089f07a1 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20260114031524-c493765efc5f
++# github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 4b68cf9faf11687f18d9f7c3bc72cd572f55042a Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 28 Jan 2026 16:08:16 +0000
Subject: [PATCH 695/887] Update submodule to latest master (13403585):
 cmd/compile: simplify slice/array range loops on loong64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f809faeb8e2..134035855cb 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f809faeb8e2534da29e980ebd98dfbd4e8a7f4ba
+Subproject commit 134035855cbc84e25765c2a4af3d152aaf430c5c

From 31646b4196971f7619e9b286d503a46a2ba76ccf Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 28 Jan 2026 16:23:41 +0000
Subject: [PATCH 696/887] resolve 3-way merge conflicts

---
 patches/0001-Vendor-external-dependencies.patch | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 7c58ce253de..5d453cd9bc2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -509,24 +509,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 3b02794aa8f024..c928a8c2832b5b 100644
+index 3bc983397186a6..6556bfdbe3f0a4 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
- 	github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f
+ 	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.32.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 987ebe2783e52f..6703308bb6c7ec 100644
+index 224585feb6332d..ebf6a4c11e165e 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f h1:HU1RgM6NALf/KW9HEY
- github.com/google/pprof v0.0.0-20251213031049-b05bdaca462f/go.mod h1:67FPmZWbr+KDT/VlpWtw6sO9XSjpJmLuHpoLmWiTGgY=
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
+ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd h1:XE6HF7LVJ7/gD0mPMaIHJak0IFP683EUBzqx6+HxPu8=
@@ -2131,7 +2131,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index b0e53e80ce6914..1f333d23429699 100644
+index ceed574b32b507..e29e38f7da3cb3 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan

From 0abb9621d74f30a5daabe6d7aa675d326121f9de Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Wed, 28 Jan 2026 10:27:09 -0800
Subject: [PATCH 697/887] Include newline at end of GOTOOLCHAIN warning

---
 patches/0005-Disable-GOTOOLCHAIN-support.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0005-Disable-GOTOOLCHAIN-support.patch b/patches/0005-Disable-GOTOOLCHAIN-support.patch
index 42d4befff5f..0dfe5897ee9 100644
--- a/patches/0005-Disable-GOTOOLCHAIN-support.patch
+++ b/patches/0005-Disable-GOTOOLCHAIN-support.patch
@@ -29,7 +29,7 @@ index 6ff2b921d464bc..36c3bdfc9b6087 100644
 -GOTOOLCHAIN=auto
 +GOTOOLCHAIN=local
 diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
-index 10ee92536b96cd..200ba17202276f 100644
+index 10ee92536b96cd..93e52f78b56dd4 100644
 --- a/src/cmd/go/internal/cfg/cfg.go
 +++ b/src/cmd/go/internal/cfg/cfg.go
 @@ -452,6 +452,24 @@ func Getenv(key string) string {
@@ -50,7 +50,7 @@ index 10ee92536b96cd..200ba17202276f 100644
 +			if v := os.Getenv("MS_GOTOOLCHAIN_ALLOW_NON_LOCAL"); v != "1" {
 +				println("GOTOOLCHAIN is set to \"" + val + "\" but only \"local\" is allowed.")
 +				println("To allow this, set MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1 in your environment.")
-+				print("Take into account that that could cause the go command to use a different toolchain than the Microsoft build of Go.")
++				println("Take into account that that could cause the go command to use a different toolchain than the Microsoft build of Go.")
 +				os.Exit(1)
 +			}
 +		}

From 9a3a93a647ac6b42f36c60b9807fbab9a00e5187 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 29 Jan 2026 11:21:27 +0000
Subject: [PATCH 698/887] build(deps): bump github.com/golang-jwt/jwt/v5 in
 /eng/_util (#2091)

Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.3.0 to 5.3.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index c4f0a8fa397..a8d2ebf27fd 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -7,7 +7,7 @@ module github.com/microsoft/go/_util
 go 1.24.0
 
 require (
-	github.com/golang-jwt/jwt/v5 v5.3.0
+	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.49.0
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index c5382103865..1f60f376210 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -12,8 +12,8 @@ github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHk
 github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
 github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
-github.com/golang-jwt/jwt/v5 v5.3.0 h1:pv4AsKCKKZuqlgs5sUmn4x8UlGa0kEVt/puTpKx9vvo=
-github.com/golang-jwt/jwt/v5 v5.3.0/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
+github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
 github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=

From 5993731bbf5abcb5c3334961cef90fe798fc70d9 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 29 Jan 2026 04:34:43 -0800
Subject: [PATCH 699/887] Update Additional Features draft doc, include version
 features (#2086)

* add Microsoft Build of Go - Additional Features document

* Update Additional Features doc

* Update eng/doc/AdditionalFeatures.md

Co-authored-by: Quim Muntal <qmuntaldiaz@microsoft.com>

* Describe GOTOOLCHAIN safeguard

* Add TLS setting alignment section

---------

Co-authored-by: George Adams <georgeadams1995@gmail.com>
Co-authored-by: Quim Muntal <qmuntaldiaz@microsoft.com>
---
 eng/doc/AdditionalFeatures.md | 183 ++++++++++++++++++++++++++++++++++
 eng/doc/MigrationGuide.md     |   3 +-
 2 files changed, 184 insertions(+), 2 deletions(-)
 create mode 100644 eng/doc/AdditionalFeatures.md

diff --git a/eng/doc/AdditionalFeatures.md b/eng/doc/AdditionalFeatures.md
new file mode 100644
index 00000000000..cde9de12f6d
--- /dev/null
+++ b/eng/doc/AdditionalFeatures.md
@@ -0,0 +1,183 @@
+# Additional Features Provided by the Microsoft build of Go
+
+This document provides a comprehensive overview of all features currently implemented in the Microsoft build of Go that are not part of the official Go distribution.
+
+If you are trying to use the Microsoft build of Go but aren't looking for a precise guide to every feature, see [the Migration Guide](/eng/doc/MigrationGuide.md).
+
+The `patches` directory at each Git tag specifies the exact code changes we have made to the official Go toolchain of that version.
+If it's critical to you to understand the exact implementation details of all changes we've made, please review the patch files.
+
+## Telemetry
+
+The Microsoft build of Go collects [opt-out (enabled by default) toolset telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/).
+
+See the [Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
+
+## System-provided cryptography backend
+
+We have implemented changes to the Go standard library to call a platform-specific system-provided cryptography library rather than running the pure Go implementation.
+Its main purposes are to comply with Microsoft's internal cryptography policies and implement FIPS 140 compliance.
+
+As of Go 1.25, this feature is enabled by default.
+
+Prior to Go 1.25, this feature can be enabled by setting the `GOEXPERIMENT` environment variable to `systemcrypto` before building a Go program.
+Other methods of changing goexperiment settings also work.
+
+See [the Migration Guide](/eng/doc/MigrationGuide.md) for more information about when, and how, to configure this feature.
+
+More details are available in the [FIPS README](/eng/doc/fips/README.md).
+These changes also include improvements to crypto library behavior to make it easier to comply with some FIPS requirements.
+
+> [!NOTE]
+> The purpose of this feature is to comply with the Microsoft internal cryptography policies, which mandate using system-provided cryptography modules.
+> We encourage Go developers who aren't subject to those policies to continue using the official Go cryptography implementation.
+
+## TLS setting alignment with Microsoft internal policies
+
+The Microsoft build of Go can align the default TLS settings with Microsoft internal cryptography policies.
+This allows developers to comply without changing application code that uses (or indirectly uses) the `crypto/tls` package.
+
+Go 1.26 introduces `ms_tlsprofile`.
+The possible values are:
+
+- `default`: (default) use the recommended Microsoft TLS settings.
+- `off`: use the upstream Go TLS settings.
+
+Go 1.26 also introduces `ms_tlsx25519`.
+The possible values of `ms_tlsx25519` are:
+
+- `0` disables the X25519 and X25519MLKEM768 TLS groups.
+- `1` (default) enables these groups.
+
+These features operate independently from the system-provided cryptography backend feature.
+They work the same way when the pure Go cryptography implementation is used.
+
+## Version string changes to identify the Microsoft build of Go
+
+### Embed Microsoft build of Go version information in binaries
+
+This feature embeds Microsoft-specific version information into built Go binaries, making it easy to [identify the Microsoft build of Go toolset](/eng/doc/MicrosoftToolsetIdentification.md) and its specific version.
+
+As of Go 1.26, this feature is enabled.
+
+Every binary built by the Microsoft build of Go has a `microsoft_toolset_version` field in its list of buildinfo settings.
+This string indicates the Microsoft build of Go version used to create the binary.
+This information is accessible through `go version -m <program>` and the `debug/buildinfo` package's [BuildInfo](https://pkg.go.dev/runtime/debug#BuildInfo) struct `Settings` field.
+
+For example, `go version -m <program>` produces output with a line like this, indicating that `program` was built by revision 1 of the Microsoft build of Go 1.26.0:
+
+```
+build   microsoft_toolset_version=go1.26.0-1-microsoft
+```
+
+The opt-in features described in the following sections can embed this string more deeply into built binaries, and change `runtime.Version()` to return the Microsoft version rather than the upstream version.
+
+> [!NOTE]
+> The Microsoft version string format is designed to be compatible with tools that rely on version parsing.
+> It follows the expectations of the [go/version](https://pkg.go.dev/go/version) package.
+
+### Runtime identification of Microsoft build
+
+Microsoft build of Go 1.26 adds a new GODEBUG setting named `ms_version`.
+It controls whether the Go runtime uses a Microsoft-specific version string in the output of `runtime.Version()`.
+
+As of Go 1.26, this feature is available, but disabled by default.
+
+In Go 1.27, we plan to change this feature to be enabled by default.
+
+If you build a program that reports the Go version it uses, you may find this feature useful to provide more accurate data for diagnosis and status reporting.
+This setting also affects the output of the `go version` command.
+
+The possible values of `ms_version` are:
+
+- `0`: `runtime.Version()` returns the upstream version string, for example: `go1.26.0`.
+- `1`: `runtime.Version()` returns the Microsoft build of Go version string, for example: `go1.26.0-1-microsoft`.
+
+> [!TIP]
+> GODEBUG settings can be changed by setting the `GODEBUG` environment variable, but the default values of the settings can also be changed in several other ways, such as modifying the `go.mod` file.
+> See [Go, Backwards Compatibility, and GODEBUG](https://go.dev/doc/godebug) for more information.
+
+Using `ms_version` with the `go version` command allows you to easily determine if a given toolset is an up to date version of the Microsoft build of Go.
+For example, in a Linux shell:
+
+```
+$ GODEBUG=ms_version=1 go version
+go version go1.26.0-1-microsoft linux/amd64
+```
+
+> [!NOTE]
+> To implement the `ms_version` feature, the Microsoft build of Go as of 1.26 always embeds *both* the upstream version string and the Microsoft version string into built binaries.
+> This is independent from the `-ms_upstreamversion` linker flag described in the next section.
+
+### Assign GoVersion to use Microsoft build identity
+
+The Microsoft build of Go includes a feature to bake in the version string of the Microsoft build of Go instead of the upstream version.
+
+As of Go 1.26, this feature is available, but disabled by default.
+
+In Go 1.27, we plan to change this feature to be enabled by default.
+
+> [!NOTE]
+> Building `<program>` then running `go version <program>` shows a version baked into the program's binary, such as `go1.26.0`.
+> This baked-in version is represented by `GoVersion` in [`debug/buildinfo.BuildInfo`](https://pkg.go.dev/runtime/debug#BuildInfo), so we call it the binary's `GoVersion`.
+>
+> The `GoVersion` is not necessarily the same version that `runtime.Version()` returns at runtime.
+> These versions are controlled separately.
+
+We added a linker flag `-ms_upstreamversion` that configures this behavior.
+The possible values are:
+
+- `0`: the `GoVersion` is assigned the Microsoft build of Go version string, for example: `go1.26.0-1-microsoft`.
+- `1`: the `GoVersion` is assigned the upstream version string, for example: `go1.26.0`.
+
+By default, as of Go 1.26, the `-ms_upstreamversion` flag is set to `1`.
+Changing it from `1` to `0` to use this feature is done by passing the `-ms_upstreamversion=0` linker flag.
+For example, use `-ldflags` with `go build`:
+
+```
+$ go build -ldflags="-ms_upstreamversion=0" program.go
+$ go version program
+program: go1.26.0-1-microsoft
+```
+
+> [!NOTE]
+> The linker flag's value is inverted compared to the question "is this feature enabled".
+> This is because our goal is to set it to `0` by default in Go 1.27 and beyond.
+> `0` is a more ergonomic default for boolean Go flags than `1` is.
+
+## Disable `GOTOOLCHAIN`
+
+The Microsoft build of Go disables the `GOTOOLCHAIN` feature by default to ensure consistent builds and toolchain usage.
+Specifically, the default `GOTOOLCHAIN` value is `local` rather than `auto`.
+
+See <https://go.dev/doc/toolchain> for more information about `GOTOOLCHAIN`.
+
+This change [is recommended by the Go team](https://github.com/golang/go/issues/57001#issuecomment-1332657428) for Linux distributions of Go, and the reasoning applies to the Microsoft build of Go as well.
+We anticipate that otherwise, many who use the Microsoft build of Go would find themselves in a situation where their build switched to the official Go toolchain without their knowledge, and they would silently lose features they rely on for compliance.
+
+As an additional safeguard against this risk, when the Microsoft build of Go detects that `GOTOOLCHAIN` has been manually changed to anything other than `local`, it prints a warning message to stderr and immediately exits with a non-zero status code.
+This safeguard prevents forgotten or unintentional `GOTOOLCHAIN` settings from causing silent changes in toolchain behavior.
+The printed message includes instructions to override the safeguard if necessary.
+
+## Additional Windows support
+
+### Use Windows Schannel settings for TLS
+
+This Windows-only feature filters and orders cipher suites according to Windows Schannel settings.
+It ensures TLS configuration matches the system's security policies at runtime.
+
+> [!WARNING]
+> This feature may reduce compatibility between TLS clients or servers and other implementations.
+> Enable it only if your use case specifically requires alignment with Windows Schannel configuration settings.
+
+As of Go 1.24.7, it can be enabled by setting the environment variable `GOEXPERIMENT` to `ms_tls_config_schannel` before building a Go program.
+Other methods of changing goexperiment settings also work.
+
+It is not supported and has no effect on Windows 8 and earlier and (the equivalent) Windows Server 2012 and earlier.
+
+### Remove use of undocumented Windows APIs
+
+For compatibility, security, and compliance reasons, we have removed the use of undocumented Windows APIs in the Microsoft build of Go.
+
+Unfortunately, this may result in some loss of long-path functionality on some Windows systems.
+See [the long-path troubleshooting section of the Migration Guide](/eng/doc/MigrationGuide.md#long-path-errors-on-windows) for an example.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 7de068ffae8..a7d60ebaab6 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -47,8 +47,7 @@ The Microsoft build of Go includes [patches](/patches/) that:
 - **Remove use of undocumented Windows APIs** for compatibility, security, and compliance.
 - **Embed Microsoft-specific version information** into built Go binaries for [easier identification](./MicrosoftToolsetIdentification.md).
 
-The patches directory at each Git tag specifies the exact code changes we have made to the official Go toolchain of that version.
-If it's critical to you to understand the exact set of changes we've made, please review the patch files.
+For a detailed description of every feature, see the [Additional Features](./AdditionalFeatures.md) document.
 
 ## CI and build environment migration steps
 

From c5558d15589cd3d2e3858cd60cfff164e2e3ed58 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Sat, 31 Jan 2026 13:35:34 +0000
Subject: [PATCH 700/887] pull down latest fakecgo patches from openssl/darwin
 backends (#2092)

---
 .../0001-Vendor-external-dependencies.patch   | 6845 +++++++++--------
 1 file changed, 3510 insertions(+), 3335 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 7c58ce253de..2c545792b46 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -64,11 +64,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
  .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
- .../openssl/v2/internal/fakecgo/asm_arm.s     |   49 +
+ .../openssl/v2/internal/fakecgo/asm_arm.s     |   52 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
  .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
  .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
+ .../openssl/v2/internal/fakecgo/fakecgo.lock  |    3 +
  .../openssl/v2/internal/fakecgo/generate.go   |    3 +
  .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
  .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
@@ -81,9 +82,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
- .../v2/internal/fakecgo/trampolines_386.s     |  105 +
+ .../v2/internal/fakecgo/trampolines_386.s     |  107 +
  .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
- .../v2/internal/fakecgo/trampolines_arm.s     |   79 +
+ .../v2/internal/fakecgo/trampolines_arm.s     |   81 +
  .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
  .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
@@ -91,18 +92,18 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
  .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
- .../internal/fakecgo/ztrampolines_linux_386.s |  111 +
- .../fakecgo/ztrampolines_linux_amd64.s        |  103 +
+ .../internal/fakecgo/ztrampolines_linux_386.s |  110 +
+ .../fakecgo/ztrampolines_linux_amd64.s        |  102 +
  .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
- .../fakecgo/ztrampolines_linux_arm64.s        |   94 +
+ .../fakecgo/ztrampolines_linux_arm64.s        |   93 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
- .../openssl/v2/internal/ossl/asm_386.s        |   94 +
- .../openssl/v2/internal/ossl/asm_amd64.s      |  108 +
- .../openssl/v2/internal/ossl/asm_arm.s        |  105 +
- .../openssl/v2/internal/ossl/asm_arm64.s      |   87 +
+ .../openssl/v2/internal/ossl/asm_386.s        |   98 +
+ .../openssl/v2/internal/ossl/asm_amd64.s      |  120 +
+ .../openssl/v2/internal/ossl/asm_arm.s        |  104 +
+ .../openssl/v2/internal/ossl/asm_arm64.s      |   97 +
  .../openssl/v2/internal/ossl/asm_others.s     |    7 +
- .../openssl/v2/internal/ossl/asm_riscv64.s    |   96 +
+ .../openssl/v2/internal/ossl/asm_riscv64.s    |  109 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
@@ -114,7 +115,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
  .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
- .../openssl/v2/internal/ossl/zdl.s            |   51 +
+ .../openssl/v2/internal/ossl/zdl.s            |   53 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
  .../openssl/v2/internal/ossl/zossl.c          | 2056 ++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         |   67 +
@@ -150,20 +151,20 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/commoncrypto/syscall_nocgo.go    |   15 +
  .../internal/commoncrypto/zcommoncrypto.c     |   47 +
  .../internal/commoncrypto/zcommoncrypto.go    |   50 +
- .../internal/commoncrypto/zcommoncrypto.h     |   71 +
- .../internal/commoncrypto/zcommoncrypto.s     |   69 +
+ .../internal/commoncrypto/zcommoncrypto.h     |   69 +
+ .../internal/commoncrypto/zcommoncrypto.s     |   74 +
  .../commoncrypto/zcommoncrypto_cgo.go         |   60 +
  .../commoncrypto/zcommoncrypto_go124.go       |   11 +
  .../commoncrypto/zcommoncrypto_nocgo.go       |   89 +
- .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 174600 bytes
- .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 167416 bytes
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 176512 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 169880 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
  .../internal/cryptokit/shims.h                |   84 +
  .../internal/cryptokit/syscall_nocgo.go       |   15 +
  .../internal/cryptokit/zcryptokit.c           |  262 ++
- .../internal/cryptokit/zcryptokit.h           |   68 +
- .../internal/cryptokit/zcryptokit.s           |  284 ++
+ .../internal/cryptokit/zcryptokit.h           |   66 +
+ .../internal/cryptokit/zcryptokit.s           |  332 +++
  .../internal/cryptokit/zcryptokit_cgo.go      |  220 ++
  .../cryptokit/zcryptokit_cgo_go124.go         |   78 +
  .../internal/cryptokit/zcryptokit_nocgo.go    |  351 +++
@@ -175,11 +176,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/fakecgo/asm_arm64.s              |   36 +
  .../internal/fakecgo/callbacks.go             |   93 +
  .../internal/fakecgo/fakecgo.go               |   14 +
+ .../internal/fakecgo/fakecgo.lock             |    3 +
  .../internal/fakecgo/generate.go              |    6 +
  .../internal/fakecgo/go_darwin.go             |   88 +
  .../internal/fakecgo/go_libinit.go            |   72 +
  .../internal/fakecgo/go_setenv.go             |   18 +
- .../internal/fakecgo/go_util.go               |   37 +
+ .../internal/fakecgo/go_util.go               |   38 +
  .../internal/fakecgo/iscgo.go                 |   19 +
  .../internal/fakecgo/libcgo.go                |   39 +
  .../internal/fakecgo/libcgo_darwin.go         |   26 +
@@ -195,20 +197,20 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/security/syscall_nocgo.go        |   15 +
  .../internal/security/zsecurity.c             |  127 +
  .../internal/security/zsecurity.go            |   21 +
- .../internal/security/zsecurity.h             |  100 +
- .../internal/security/zsecurity.s             |  149 +
+ .../internal/security/zsecurity.h             |   98 +
+ .../internal/security/zsecurity.s             |  170 ++
  .../internal/security/zsecurity_cgo.go        |  368 +++
  .../internal/security/zsecurity_cgo_go124.go  |   14 +
  .../internal/security/zsecurity_go124.go      |   13 +
  .../internal/security/zsecurity_nocgo.go      |  453 ++++
- .../internal/xsyscall/asm_amd64.s             |  108 +
- .../internal/xsyscall/asm_arm64.s             |   87 +
+ .../internal/xsyscall/asm_amd64.s             |  120 +
+ .../internal/xsyscall/asm_arm64.s             |   97 +
  .../go-crypto-darwin/internal/xsyscall/dl.h   |   15 +
  .../internal/xsyscall/syscall_nocgo.go        |   88 +
  .../internal/xsyscall/syscall_nocgo_darwin.go |   25 +
  .../internal/xsyscall/syscall_nocgo_others.go |   14 +
  .../internal/xsyscall/xsyscall.go             |    6 +
- .../go-crypto-darwin/internal/xsyscall/zdl.s  |   54 +
+ .../go-crypto-darwin/internal/xsyscall/zdl.s  |   56 +
  .../internal/xsyscall/zdl_nocgo.go            |   48 +
  .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
@@ -261,7 +263,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 253 files changed, 32389 insertions(+), 7 deletions(-)
+ 255 files changed, 32532 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -316,6 +318,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
@@ -422,6 +425,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
@@ -2181,7 +2185,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..3045badcd4a21b 100644
+index d6c515017a7009..3145dea23ec479 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2190,19 +2194,19 @@ index d6c515017a7009..3045badcd4a21b 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..57fbc3a10dbfa6 100644
+index 2223d2a7c231c1..9cf0c5ec7294ec 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310 h1:6glr29v7Xj03OFXfUngI9wY5heRq3vUdlkndcMWoSDI=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad h1:EwtwytetcPW2ftJns7yDSUL0lQFsly0BPp4xeuRfDsQ=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb h1:ptC7mpk/0vizJzhyOPC+dqx6zwziw22DpCiqJhICddk=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
@@ -7268,7 +7272,7 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
 new file mode 100644
-index 00000000000000..2e7e9512e27328
+index 00000000000000..7475ec8a0b21fc
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
 @@ -0,0 +1,29 @@
@@ -7282,19 +7286,19 @@ index 00000000000000..2e7e9512e27328
 +// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
 +// Saves C callee-saved registers and calls cgocallback with three arguments.
 +// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB),NOSPLIT,$28-16
++TEXT crosscall2(SB), NOSPLIT, $28-16
 +	MOVL BP, 24(SP)
 +	MOVL BX, 20(SP)
 +	MOVL SI, 16(SP)
 +	MOVL DI, 12(SP)
 +
-+	MOVL	ctxt+12(FP), AX
-+	MOVL	AX, 8(SP)
-+	MOVL	a+4(FP), AX
-+	MOVL	AX, 4(SP)
-+	MOVL	fn+0(FP), AX
-+	MOVL	AX, 0(SP)
-+	CALL	runtime·cgocallback(SB)
++	MOVL ctxt+12(FP), AX
++	MOVL AX, 8(SP)
++	MOVL a+4(FP), AX
++	MOVL AX, 4(SP)
++	MOVL fn+0(FP), AX
++	MOVL AX, 0(SP)
++	CALL runtime·cgocallback(SB)
 +
 +	MOVL 12(SP), DI
 +	MOVL 16(SP), SI
@@ -7348,10 +7352,10 @@ index 00000000000000..2b7eb57f8ae783
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
 new file mode 100644
-index 00000000000000..0fadbb3bd589ac
+index 00000000000000..68034e6035aa44
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
-@@ -0,0 +1,49 @@
+@@ -0,0 +1,52 @@
 +// Copyright 2012 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -7362,45 +7366,48 @@ index 00000000000000..0fadbb3bd589ac
 +// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
 +// Saves C callee-saved registers and calls cgocallback with three arguments.
 +// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB),NOSPLIT|NOFRAME,$0
-+	SUB	$(8*9), R13 // Reserve space for the floating point registers.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	SUB $(8*9), R13 // Reserve space for the floating point registers.
++
 +	// The C arguments arrive in R0, R1, R2, and R3. We want to
 +	// pass R0, R1, and R3 to Go, so we push those on the stack.
 +	// Also, save C callee-save registers R4-R12.
-+	MOVM.WP	[R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12], (R13)
++	MOVM.WP [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12], (R13)
++
 +	// Finally, save the link register R14. This also puts the
 +	// arguments we pushed for cgocallback where they need to be,
 +	// starting at 4(R13).
-+	MOVW.W	R14, -4(R13)
++	MOVW.W R14, -4(R13)
 +
 +	// Save VFP callee-saved registers D8-D15 (same as S16-S31).
 +	// Note: We always save these since we target hard-float ABI.
-+	MOVD	F8, (13*4+8*1)(R13)
-+	MOVD	F9, (13*4+8*2)(R13)
-+	MOVD	F10, (13*4+8*3)(R13)
-+	MOVD	F11, (13*4+8*4)(R13)
-+	MOVD	F12, (13*4+8*5)(R13)
-+	MOVD	F13, (13*4+8*6)(R13)
-+	MOVD	F14, (13*4+8*7)(R13)
-+	MOVD	F15, (13*4+8*8)(R13)
-+
-+	BL	runtime·load_g(SB)
++	MOVD F8, (13*4+8*1)(R13)
++	MOVD F9, (13*4+8*2)(R13)
++	MOVD F10, (13*4+8*3)(R13)
++	MOVD F11, (13*4+8*4)(R13)
++	MOVD F12, (13*4+8*5)(R13)
++	MOVD F13, (13*4+8*6)(R13)
++	MOVD F14, (13*4+8*7)(R13)
++	MOVD F15, (13*4+8*8)(R13)
++
++	BL runtime·load_g(SB)
++
 +	// We set up the arguments to cgocallback when saving registers above.
-+	BL	runtime·cgocallback(SB)
-+
-+	MOVD	(13*4+8*1)(R13), F8
-+	MOVD	(13*4+8*2)(R13), F9
-+	MOVD	(13*4+8*3)(R13), F10
-+	MOVD	(13*4+8*4)(R13), F11
-+	MOVD	(13*4+8*5)(R13), F12
-+	MOVD	(13*4+8*6)(R13), F13
-+	MOVD	(13*4+8*7)(R13), F14
-+	MOVD	(13*4+8*8)(R13), F15
-+
-+	MOVW.P	4(R13), R14
-+	MOVM.IAW	(R13), [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12]
-+	ADD	$(8*9), R13
-+	MOVW	R14, R15
++	BL runtime·cgocallback(SB)
++
++	MOVD (13*4+8*1)(R13), F8
++	MOVD (13*4+8*2)(R13), F9
++	MOVD (13*4+8*3)(R13), F10
++	MOVD (13*4+8*4)(R13), F11
++	MOVD (13*4+8*5)(R13), F12
++	MOVD (13*4+8*6)(R13), F13
++	MOVD (13*4+8*7)(R13), F14
++	MOVD (13*4+8*8)(R13), F15
++
++	MOVW.P   4(R13), R14
++	MOVM.IAW (R13), [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12]
++	ADD      $(8*9), R13
++	MOVW     R14, R15
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
 new file mode 100644
 index 00000000000000..50e5261d922c56
@@ -7445,7 +7452,7 @@ index 00000000000000..50e5261d922c56
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
 new file mode 100644
-index 00000000000000..45151bf02bacbe
+index 00000000000000..acf82c1b5ae501
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
 @@ -0,0 +1,78 @@
@@ -7459,72 +7466,72 @@ index 00000000000000..45151bf02bacbe
 +// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
 +// Saves C callee-saved registers and calls cgocallback with three arguments.
 +// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB),NOSPLIT|NOFRAME,$0
-+	/*
-+	 * Push arguments for fn (X10, X11, X13), along with all callee-save
-+	 * registers. Note that at procedure entry the first argument is at
-+	 * 8(X2).
-+	 */
-+	ADD	$(-8*29), X2
-+	MOV	X10, (8*1)(X2) // fn unsafe.Pointer
-+	MOV	X11, (8*2)(X2) // a unsafe.Pointer
-+	MOV	X13, (8*3)(X2) // ctxt uintptr
-+	MOV	X8, (8*4)(X2)
-+	MOV	X9, (8*5)(X2)
-+	MOV	X18, (8*6)(X2)
-+	MOV	X19, (8*7)(X2)
-+	MOV	X20, (8*8)(X2)
-+	MOV	X21, (8*9)(X2)
-+	MOV	X22, (8*10)(X2)
-+	MOV	X23, (8*11)(X2)
-+	MOV	X24, (8*12)(X2)
-+	MOV	X25, (8*13)(X2)
-+	MOV	X26, (8*14)(X2)
-+	MOV	g, (8*15)(X2)
-+	MOV	X1, (8*16)(X2)
-+	MOVD	F8, (8*17)(X2)
-+	MOVD	F9, (8*18)(X2)
-+	MOVD	F18, (8*19)(X2)
-+	MOVD	F19, (8*20)(X2)
-+	MOVD	F20, (8*21)(X2)
-+	MOVD	F21, (8*22)(X2)
-+	MOVD	F22, (8*23)(X2)
-+	MOVD	F23, (8*24)(X2)
-+	MOVD	F24, (8*25)(X2)
-+	MOVD	F25, (8*26)(X2)
-+	MOVD	F26, (8*27)(X2)
-+	MOVD	F27, (8*28)(X2)
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * Push arguments for fn (X10, X11, X13), along with all callee-save
++ * registers. Note that at procedure entry the first argument is at
++ * 8(X2).
++ */
++	ADD  $(-8*29), X2
++	MOV  X10, (8*1)(X2)  // fn unsafe.Pointer
++	MOV  X11, (8*2)(X2)  // a unsafe.Pointer
++	MOV  X13, (8*3)(X2)  // ctxt uintptr
++	MOV  X8, (8*4)(X2)
++	MOV  X9, (8*5)(X2)
++	MOV  X18, (8*6)(X2)
++	MOV  X19, (8*7)(X2)
++	MOV  X20, (8*8)(X2)
++	MOV  X21, (8*9)(X2)
++	MOV  X22, (8*10)(X2)
++	MOV  X23, (8*11)(X2)
++	MOV  X24, (8*12)(X2)
++	MOV  X25, (8*13)(X2)
++	MOV  X26, (8*14)(X2)
++	MOV  g, (8*15)(X2)
++	MOV  X1, (8*16)(X2)
++	MOVD F8, (8*17)(X2)
++	MOVD F9, (8*18)(X2)
++	MOVD F18, (8*19)(X2)
++	MOVD F19, (8*20)(X2)
++	MOVD F20, (8*21)(X2)
++	MOVD F21, (8*22)(X2)
++	MOVD F22, (8*23)(X2)
++	MOVD F23, (8*24)(X2)
++	MOVD F24, (8*25)(X2)
++	MOVD F25, (8*26)(X2)
++	MOVD F26, (8*27)(X2)
++	MOVD F27, (8*28)(X2)
 +
 +	// Initialize Go ABI environment
-+	CALL	runtime·load_g(SB)
-+	CALL	runtime·cgocallback(SB)
-+
-+	MOV	(8*4)(X2), X8
-+	MOV	(8*5)(X2), X9
-+	MOV	(8*6)(X2), X18
-+	MOV	(8*7)(X2), X19
-+	MOV	(8*8)(X2), X20
-+	MOV	(8*9)(X2), X21
-+	MOV	(8*10)(X2), X22
-+	MOV	(8*11)(X2), X23
-+	MOV	(8*12)(X2), X24
-+	MOV	(8*13)(X2), X25
-+	MOV	(8*14)(X2), X26
-+	MOV	(8*15)(X2), g
-+	MOV	(8*16)(X2), X1
-+	MOVD	(8*17)(X2), F8
-+	MOVD	(8*18)(X2), F9
-+	MOVD	(8*19)(X2), F18
-+	MOVD	(8*20)(X2), F19
-+	MOVD	(8*21)(X2), F20
-+	MOVD	(8*22)(X2), F21
-+	MOVD	(8*23)(X2), F22
-+	MOVD	(8*24)(X2), F23
-+	MOVD	(8*25)(X2), F24
-+	MOVD	(8*26)(X2), F25
-+	MOVD	(8*27)(X2), F26
-+	MOVD	(8*28)(X2), F27
-+	ADD	$(8*29), X2
++	CALL runtime·load_g(SB)
++	CALL runtime·cgocallback(SB)
++
++	MOV  (8*4)(X2), X8
++	MOV  (8*5)(X2), X9
++	MOV  (8*6)(X2), X18
++	MOV  (8*7)(X2), X19
++	MOV  (8*8)(X2), X20
++	MOV  (8*9)(X2), X21
++	MOV  (8*10)(X2), X22
++	MOV  (8*11)(X2), X23
++	MOV  (8*12)(X2), X24
++	MOV  (8*13)(X2), X25
++	MOV  (8*14)(X2), X26
++	MOV  (8*15)(X2), g
++	MOV  (8*16)(X2), X1
++	MOVD (8*17)(X2), F8
++	MOVD (8*18)(X2), F9
++	MOVD (8*19)(X2), F18
++	MOVD (8*20)(X2), F19
++	MOVD (8*21)(X2), F20
++	MOVD (8*22)(X2), F21
++	MOVD (8*23)(X2), F22
++	MOVD (8*24)(X2), F23
++	MOVD (8*25)(X2), F24
++	MOVD (8*26)(X2), F25
++	MOVD (8*27)(X2), F26
++	MOVD (8*28)(X2), F27
++	ADD  $(8*29), X2
 +
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
@@ -7661,6 +7668,15 @@ index 00000000000000..7927deb2785263
 +	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
 +	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
+new file mode 100644
+index 00000000000000..57250706a043f1
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
+@@ -0,0 +1,3 @@
++{
++  "commit_hash": "49bede11a66085d4400e4a257e4c77c9604c791a"
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
 new file mode 100644
 index 00000000000000..ca8d5f843f8421
@@ -7974,7 +7990,7 @@ index 00000000000000..6c2f981d730980
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
 new file mode 100644
-index 00000000000000..4519011e114b36
+index 00000000000000..8a71c5a558610a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
 @@ -0,0 +1,38 @@
@@ -8008,7 +8024,7 @@ index 00000000000000..4519011e114b36
 +		abort()
 +	}
 +	// *ts = *arg would cause a writebarrier so copy using slices
-+	ptrSize := unsafe.Sizeof(uintptr(0))
++	const ptrSize = unsafe.Sizeof(uintptr(0))
 +	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
 +	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
 +	for i := range s2 {
@@ -8211,14 +8227,14 @@ index 00000000000000..8d7b9831d31fae
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
 new file mode 100644
-index 00000000000000..b0a837f4fafb8b
+index 00000000000000..2e049260d4aad6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
-@@ -0,0 +1,105 @@
+@@ -0,0 +1,107 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (freebsd || linux)
++//go:build !cgo && (darwin || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -8234,7 +8250,7 @@ index 00000000000000..b0a837f4fafb8b
 +//
 +// When we declare a Go function with frame size $N-0, Go's prologue
 +// effectively does SUB $N, SP, so the C arguments shift up by N bytes:
-+//   N+0(SP) = return address  
++//   N+0(SP) = return address
 +//   N+4(SP) = arg1
 +//   N+8(SP) = arg2
 +//
@@ -8244,81 +8260,83 @@ index 00000000000000..b0a837f4fafb8b
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
 +	// C args at 12(SP) and 16(SP) after frame setup (8 bytes local + 4 bytes ret addr)
 +	// Go function expects args at 0(SP) and 4(SP) in local frame
-+	MOVL	12(SP), AX	// first C arg
-+	MOVL	16(SP), BX	// second C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	BX, 4(SP)	// Go arg 2
-+	MOVL	·x_cgo_init_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 12(SP), AX               // first C arg
++	MOVL 16(SP), BX               // second C arg
++	MOVL AX, 0(SP)                // Go arg 1
++	MOVL BX, 4(SP)                // Go arg 2
++	MOVL ·x_cgo_init_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $4-0
 +	// C args at 8(SP) after frame setup (4 bytes local + 4 bytes ret addr)
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_thread_start_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                        // first C arg
++	MOVL AX, 0(SP)                        // Go arg 1
++	MOVL ·x_cgo_thread_start_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_setenv_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                  // first C arg
++	MOVL AX, 0(SP)                  // Go arg 1
++	MOVL ·x_cgo_setenv_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_unsetenv_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                    // first C arg
++	MOVL AX, 0(SP)                    // Go arg 1
++	MOVL ·x_cgo_unsetenv_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL	·x_cgo_notify_runtime_init_done(SB)
++	CALL ·x_cgo_notify_runtime_init_done(SB)
 +	RET
 +
 +TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL	·x_cgo_bindm(SB)
++	CALL ·x_cgo_bindm(SB)
 +	RET
 +
 +// func setg_trampoline(setg uintptr, g uintptr)
 +// This is called from Go, so args are at normal FP positions
 +TEXT ·setg_trampoline(SB), NOSPLIT, $4-8
-+	MOVL	g+4(FP), AX
-+	MOVL	setg+0(FP), BX
++	MOVL g+4(FP), AX
++	MOVL setg+0(FP), BX
++
 +	// setg expects g in 0(SP)
-+	MOVL	AX, 0(SP)
-+	CALL	BX
++	MOVL AX, 0(SP)
++	CALL BX
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·threadentry_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                 // first C arg
++	MOVL AX, 0(SP)                 // Go arg 1
++	MOVL ·threadentry_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $20-28
-+	MOVL	fn+0(FP), AX
-+	MOVL	a1+4(FP), BX
-+	MOVL	a2+8(FP), CX
-+	MOVL	a3+12(FP), DX
-+	MOVL	a4+16(FP), SI
-+	MOVL	a5+20(FP), DI
++	MOVL fn+0(FP), AX
++	MOVL a1+4(FP), BX
++	MOVL a2+8(FP), CX
++	MOVL a3+12(FP), DX
++	MOVL a4+16(FP), SI
++	MOVL a5+20(FP), DI
++
 +	// Place arguments on local stack frame for C calling convention
-+	MOVL	BX, 0(SP)	// a1
-+	MOVL	CX, 4(SP)	// a2
-+	MOVL	DX, 8(SP)	// a3
-+	MOVL	SI, 12(SP)	// a4
-+	MOVL	DI, 16(SP)	// a5
-+	CALL	AX
-+	MOVL	AX, r1+24(FP)
++	MOVL BX, 0(SP)     // a1
++	MOVL CX, 4(SP)     // a2
++	MOVL DX, 8(SP)     // a3
++	MOVL SI, 12(SP)    // a4
++	MOVL DI, 16(SP)    // a5
++	CALL AX
++	MOVL AX, r1+24(FP)
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
@@ -8435,14 +8453,14 @@ index 00000000000000..0e50f2a91f1b50
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
 new file mode 100644
-index 00000000000000..7b877b4682aeb5
+index 00000000000000..b30bff6c63f411
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
-@@ -0,0 +1,79 @@
+@@ -0,0 +1,81 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (freebsd || linux)
++//go:build !cgo && (darwin || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -8454,30 +8472,30 @@ index 00000000000000..7b877b4682aeb5
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
 +	MOVW R0, 4(R13)
 +	MOVW R1, 8(R13)
-+	MOVW    ·x_cgo_init_call(SB), R12
-+	MOVW    (R12), R2
-+	CALL    (R2)
++	MOVW ·x_cgo_init_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8-0
 +	MOVW R0, 4(R13)
-+	MOVW    ·x_cgo_thread_start_call(SB), R12
-+	MOVW    (R12), R2
-+	CALL    (R2)
++	MOVW ·x_cgo_thread_start_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8-0
 +	MOVW R0, 4(R13)
-+	MOVW    ·x_cgo_setenv_call(SB), R12
-+	MOVW    (R12), R2
-+	CALL    (R2)
++	MOVW ·x_cgo_setenv_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8-0
 +	MOVW R0, 4(R13)
-+	MOVW    ·x_cgo_unsetenv_call(SB), R12
-+	MOVW    (R12), R2
-+	CALL    (R2)
++	MOVW ·x_cgo_unsetenv_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
@@ -8491,36 +8509,38 @@ index 00000000000000..7b877b4682aeb5
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0-8
 +	MOVW G+4(FP), R0
-+	MOVW setg+0(FP), R1
-+	BL (R1)
++	MOVW setg+0(FP), R12
++	BL   (R12)
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $8-0
 +	// See crosscall2.
 +	MOVW R0, 4(R13)
-+	MOVW    ·threadentry_call(SB), R12
-+	MOVW    (R12), R2
-+	CALL    (R2)
++	MOVW ·threadentry_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $8-28
-+    MOVW    fn+0(FP), R5
-+    MOVW    a1+4(FP), R0
-+    MOVW    a2+8(FP), R1
-+    MOVW    a3+12(FP), R2
-+    MOVW    a4+16(FP), R3
-+    MOVW    a5+20(FP), R4
-+    // Store 5th arg below SP (in local frame area)
-+    MOVW    R4, arg5-8(SP)
-+    // Align SP to 8 bytes for call (required by ARM AAPCS)
-+    SUB     $8, R13
-+	CALL   	(R5)
-+    ADD     $8, R13
-+    MOVW    R0, r1+24(FP)
-+    RET
++	MOVW fn+0(FP), R12
++	MOVW a1+4(FP), R0
++	MOVW a2+8(FP), R1
++	MOVW a3+12(FP), R2
++	MOVW a4+16(FP), R3
++	MOVW a5+20(FP), R4
++
++	// Store 5th arg below SP (in local frame area)
++	MOVW R4, arg5-8(SP)
++
++	// Align SP to 8 bytes for call (required by ARM AAPCS)
++	SUB  $8, R13
++	CALL (R12)
++	ADD  $8, R13
++	MOVW R0, r1+24(FP)
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..025d6dc8776710
+index 00000000000000..ddd01434d04cda
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 @@ -0,0 +1,84 @@
@@ -8589,7 +8609,7 @@ index 00000000000000..025d6dc8776710
 +	MOVD ·threadentry_call(SB), R9
 +	MOVD (R9), R9
 +	CALL R9
-+	MOVD $0, R0                     // TODO: get the return value from threadentry
++	MOVD $0, R0                    // TODO: get the return value from threadentry
 +
 +	RESTORE_R19_TO_R28(8*4)
 +	RESTORE_F8_TO_F15(8*14)
@@ -8610,7 +8630,7 @@ index 00000000000000..025d6dc8776710
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 new file mode 100644
-index 00000000000000..e70cca75bfdc02
+index 00000000000000..50b364773606d1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 @@ -0,0 +1,72 @@
@@ -8626,65 +8646,65 @@ index 00000000000000..e70cca75bfdc02
 +// X5 is used as temporary register.
 +
 +TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOV	X10, 8(SP)
-+	MOV	X11, 16(SP)
-+	MOV	·x_cgo_init_call(SB), X5
-+	MOV	(X5), X5
-+	JALR	RA, 0(X5)
++	MOV  X10, 8(SP)
++	MOV  X11, 16(SP)
++	MOV  ·x_cgo_init_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOV	X10, 8(SP)
-+	MOV	·x_cgo_thread_start_call(SB), X5
-+	MOV	(X5), X5
-+	JALR	RA, 0(X5)
++	MOV  X10, 8(SP)
++	MOV  ·x_cgo_thread_start_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOV	X10, 8(SP)
-+	MOV	·x_cgo_setenv_call(SB), X5
-+	MOV	(X5), X5
-+	JALR	RA, 0(X5)
++	MOV  X10, 8(SP)
++	MOV  ·x_cgo_setenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOV	X10, 8(SP)
-+	MOV	·x_cgo_unsetenv_call(SB), X5
-+	MOV	(X5), X5
-+	JALR	RA, 0(X5)
++	MOV  X10, 8(SP)
++	MOV  ·x_cgo_unsetenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
 +TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL	·x_cgo_notify_runtime_init_done(SB)
++	CALL ·x_cgo_notify_runtime_init_done(SB)
 +	RET
 +
 +TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL	·x_cgo_bindm(SB)
++	CALL ·x_cgo_bindm(SB)
 +	RET
 +
 +// func setg_trampoline(setg uintptr, g uintptr)
 +TEXT ·setg_trampoline(SB), NOSPLIT, $0
-+	MOV	gp+8(FP), X10
-+	MOV	setg+0(FP), X5
-+	JALR	RA, 0(X5)
++	MOV  gp+8(FP), X10
++	MOV  setg+0(FP), X5
++	CALL X5
 +	RET
 +
 +TEXT threadentry_trampoline(SB), NOSPLIT, $16
-+	MOV	X10, 8(SP)
-+	MOV	·threadentry_call(SB), X5
-+	MOV	(X5), X5
-+	JALR	RA, 0(X5)
++	MOV  X10, 8(SP)
++	MOV  ·threadentry_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $0-48
-+	MOV	fn+0(FP), X5
-+	MOV	a1+8(FP), X10
-+	MOV	a2+16(FP), X11
-+	MOV	a3+24(FP), X12
-+	MOV	a4+32(FP), X13
-+	MOV	a5+40(FP), X14
-+	JALR	RA, 0(X5)
-+	MOV	X10, ret+48(FP)
++	MOV  fn+0(FP), X5
++	MOV  a1+8(FP), X10
++	MOV  a2+16(FP), X11
++	MOV  a3+24(FP), X12
++	MOV  a4+32(FP), X13
++	MOV  a5+40(FP), X14
++	CALL X5
++	MOV  X10, ret+48(FP)
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
@@ -9271,10 +9291,10 @@ index 00000000000000..da07005c0bc988
 +	JMP purego_pthread_attr_destroy(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
 new file mode 100644
-index 00000000000000..b566eb6ac38ab7
+index 00000000000000..2903c5bdb7e54c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
-@@ -0,0 +1,111 @@
+@@ -0,0 +1,110 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -9284,114 +9304,113 @@ index 00000000000000..b566eb6ac38ab7
 +
 +#include "textflag.h"
 +
-+
 +TEXT ___errno_location(SB), NOSPLIT, $0-0
 +	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setegid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                          // first C arg
++	MOVL AX, 0(SP)                          // Go arg 1
++	MOVL ·x_cgo_purego_setegid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setegid(SB), NOSPLIT, $0-0
 +	JMP purego_setegid(SB)
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_seteuid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                          // first C arg
++	MOVL AX, 0(SP)                          // Go arg 1
++	MOVL ·x_cgo_purego_seteuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _seteuid(SB), NOSPLIT, $0-0
 +	JMP purego_seteuid(SB)
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setgid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                         // first C arg
++	MOVL AX, 0(SP)                         // Go arg 1
++	MOVL ·x_cgo_purego_setgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setgid(SB), NOSPLIT, $0-0
 +	JMP purego_setgid(SB)
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setregid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                           // first C arg
++	MOVL AX, 0(SP)                           // Go arg 1
++	MOVL ·x_cgo_purego_setregid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setregid(SB), NOSPLIT, $0-0
 +	JMP purego_setregid(SB)
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setresgid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                            // first C arg
++	MOVL AX, 0(SP)                            // Go arg 1
++	MOVL ·x_cgo_purego_setresgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setresgid(SB), NOSPLIT, $0-0
 +	JMP purego_setresgid(SB)
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setresuid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                            // first C arg
++	MOVL AX, 0(SP)                            // Go arg 1
++	MOVL ·x_cgo_purego_setresuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setresuid(SB), NOSPLIT, $0-0
 +	JMP purego_setresuid(SB)
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setreuid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                           // first C arg
++	MOVL AX, 0(SP)                           // Go arg 1
++	MOVL ·x_cgo_purego_setreuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setreuid(SB), NOSPLIT, $0-0
 +	JMP purego_setreuid(SB)
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setuid_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                         // first C arg
++	MOVL AX, 0(SP)                         // Go arg 1
++	MOVL ·x_cgo_purego_setuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setuid(SB), NOSPLIT, $0-0
 +	JMP purego_setuid(SB)
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
-+	MOVL	8(SP), AX	// first C arg
-+	MOVL	AX, 0(SP)	// Go arg 1
-+	MOVL	·x_cgo_purego_setgroups_call(SB), CX
-+	MOVL	(CX), CX
-+	CALL	CX
++	MOVL 8(SP), AX                            // first C arg
++	MOVL AX, 0(SP)                            // Go arg 1
++	MOVL ·x_cgo_purego_setgroups_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
 new file mode 100644
-index 00000000000000..603cd6802eea20
+index 00000000000000..776a6f3ad9533b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
-@@ -0,0 +1,103 @@
+@@ -0,0 +1,102 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -9401,95 +9420,94 @@ index 00000000000000..603cd6802eea20
 +
 +#include "textflag.h"
 +
-+
 +TEXT ___errno_location(SB), NOSPLIT, $0-0
 +	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setegid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setegid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setegid(SB), NOSPLIT, $0-0
 +	JMP purego_setegid(SB)
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_seteuid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_seteuid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _seteuid(SB), NOSPLIT, $0-0
 +	JMP purego_seteuid(SB)
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setgid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setgid(SB), NOSPLIT, $0-0
 +	JMP purego_setgid(SB)
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setregid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setregid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setregid(SB), NOSPLIT, $0-0
 +	JMP purego_setregid(SB)
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setresgid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresgid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setresgid(SB), NOSPLIT, $0-0
 +	JMP purego_setresgid(SB)
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setresuid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresuid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setresuid(SB), NOSPLIT, $0-0
 +	JMP purego_setresuid(SB)
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setreuid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setreuid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setreuid(SB), NOSPLIT, $0-0
 +	JMP purego_setreuid(SB)
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setuid_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setuid_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setuid(SB), NOSPLIT, $0-0
 +	JMP purego_setuid(SB)
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVQ	DI, AX
-+	MOVQ	·x_cgo_purego_setgroups_call(SB), DX
-+	MOVQ	(DX), CX
-+	CALL	CX
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgroups_call(SB), DX
++	MOVQ (DX), CX
++	CALL CX
 +	RET
 +
 +TEXT _setgroups(SB), NOSPLIT, $0-0
@@ -9497,7 +9515,7 @@ index 00000000000000..603cd6802eea20
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
 new file mode 100644
-index 00000000000000..1e31b9737f3395
+index 00000000000000..09401d72019bde
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
 @@ -0,0 +1,74 @@
@@ -9511,76 +9529,76 @@ index 00000000000000..1e31b9737f3395
 +#include "textflag.h"
 +
 +TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP	purego___errno_location(SB)
++	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setegid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setegid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_seteuid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_seteuid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setgid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setregid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setregid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setresgid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresgid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setresuid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresuid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setreuid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setreuid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setuid_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setuid_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
-+	MOVW	R0, 4(R13)
-+	MOVW	·x_cgo_purego_setgroups_call(SB), R12
-+	MOVW	(R12), R2
-+	CALL	(R2)
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgroups_call(SB), R12
++	MOVW (R12), R2
++	CALL (R2)
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
 new file mode 100644
-index 00000000000000..b5aeb4b47a2e55
+index 00000000000000..0b25425c004d38
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
-@@ -0,0 +1,94 @@
+@@ -0,0 +1,93 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -9590,86 +9608,85 @@ index 00000000000000..b5aeb4b47a2e55
 +
 +#include "textflag.h"
 +
-+
 +TEXT ___errno_location(SB), NOSPLIT, $0-0
 +	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setegid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setegid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setegid(SB), NOSPLIT, $0-0
 +	JMP purego_setegid(SB)
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_seteuid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_seteuid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _seteuid(SB), NOSPLIT, $0-0
 +	JMP purego_seteuid(SB)
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setgid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setgid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setgid(SB), NOSPLIT, $0-0
 +	JMP purego_setgid(SB)
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setregid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setregid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setregid(SB), NOSPLIT, $0-0
 +	JMP purego_setregid(SB)
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setresgid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setresgid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setresgid(SB), NOSPLIT, $0-0
 +	JMP purego_setresgid(SB)
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setresuid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setresuid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setresuid(SB), NOSPLIT, $0-0
 +	JMP purego_setresuid(SB)
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setreuid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setreuid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setreuid(SB), NOSPLIT, $0-0
 +	JMP purego_setreuid(SB)
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setuid_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setuid_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setuid(SB), NOSPLIT, $0-0
 +	JMP purego_setuid(SB)
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVD	·x_cgo_purego_setgroups_call(SB), R26
-+	MOVD	(R26), R2
-+	CALL	(R2)
++	MOVD ·x_cgo_purego_setgroups_call(SB), R26
++	MOVD (R26), R2
++	CALL R2
 +	RET
 +
 +TEXT _setgroups(SB), NOSPLIT, $0-0
@@ -9677,7 +9694,7 @@ index 00000000000000..b5aeb4b47a2e55
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
 new file mode 100644
-index 00000000000000..d97eb10cee2bd5
+index 00000000000000..30dbb92f51fbb8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
 @@ -0,0 +1,92 @@
@@ -9694,81 +9711,81 @@ index 00000000000000..d97eb10cee2bd5
 +	JMP purego___errno_location(SB)
 +
 +TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setegid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setegid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setegid(SB), NOSPLIT, $0-0
 +	JMP purego_setegid(SB)
 +
 +TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_seteuid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_seteuid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _seteuid(SB), NOSPLIT, $0-0
 +	JMP purego_seteuid(SB)
 +
 +TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setgid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setgid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setgid(SB), NOSPLIT, $0-0
 +	JMP purego_setgid(SB)
 +
 +TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setregid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setregid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setregid(SB), NOSPLIT, $0-0
 +	JMP purego_setregid(SB)
 +
 +TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setresgid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setresgid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setresgid(SB), NOSPLIT, $0-0
 +	JMP purego_setresgid(SB)
 +
 +TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setresuid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setresuid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setresuid(SB), NOSPLIT, $0-0
 +	JMP purego_setresuid(SB)
 +
 +TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setreuid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setreuid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setreuid(SB), NOSPLIT, $0-0
 +	JMP purego_setreuid(SB)
 +
 +TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setuid_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setuid_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setuid(SB), NOSPLIT, $0-0
 +	JMP purego_setuid(SB)
 +
 +TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOV	·x_cgo_purego_setgroups_call(SB), T0
-+	MOV	(T0), T1
-+	JALR	RA, 0(T1)
++	MOV  ·x_cgo_purego_setgroups_call(SB), T0
++	MOV  (T0), T1
++	CALL T1
 +	RET
 +
 +TEXT _setgroups(SB), NOSPLIT, $0-0
@@ -9836,10 +9853,10 @@ index 00000000000000..6a073bea0944d1
 +	JMP purego_pthread_setspecific(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
 new file mode 100644
-index 00000000000000..7302a8e55f91b2
+index 00000000000000..f414d62c0f1ff7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
-@@ -0,0 +1,94 @@
+@@ -0,0 +1,98 @@
 +// Copyright 2026 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -9849,13 +9866,13 @@ index 00000000000000..7302a8e55f91b2
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16-0
-+	MOVL	20(SP), AX	// libcArgs from C caller (frame_size + ret_addr = 16 + 4)
-+	MOVL	AX, 0(SP)	// pass to Go function
-+	CALL	·syscallNSystemStack(SB)
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16-0
++	MOVL 20(SP), AX               // libcArgs from C caller (frame_size + ret_addr = 16 + 4)
++	MOVL AX, 0(SP)                // pass to Go function
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$16-4
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-4
 +	// Frame layout: 16 bytes local storage
 +	// 0(SP) - saved BP (original SP)
 +	// 4(SP) - saved libcArgs pointer
@@ -9863,83 +9880,87 @@ index 00000000000000..7302a8e55f91b2
 +	// 12(SP) - scratch
 +
 +	// Load args pointer FIRST before any stack modifications
-+	MOVL	libcArgs+0(FP), SI
++	MOVL libcArgs+0(FP), SI
 +
 +	// Save original SP and libcArgs in local frame
-+	MOVL	SP, BP
-+	ADDL	$16, BP			// BP = original SP (before frame allocation)
-+	MOVL	BP, 0(SP)		// save original SP
-+	MOVL	SI, 4(SP)		// save libcArgs pointer
++	MOVL SP, BP
++	ADDL $16, BP   // BP = original SP (before frame allocation)
++	MOVL BP, 0(SP) // save original SP
++	MOVL SI, 4(SP) // save libcArgs pointer
 +
 +	// Load struct fields
-+	MOVL	libcCallInfo_fn(SI), AX
-+	MOVL	AX, 8(SP)		// save fn pointer
-+	MOVL	libcCallInfo_n(SI), CX
-+	MOVL	libcCallInfo_args(SI), BX
++	MOVL libcCallInfo_fn(SI), AX
++	MOVL AX, 8(SP)                 // save fn pointer
++	MOVL libcCallInfo_n(SI), CX
++	MOVL libcCallInfo_args(SI), BX
 +
 +	// Allocate 16 bytes for fast path (0-3 args)
-+	MOVL	SP, BP
-+	SUBL	$16, SP
++	MOVL SP, BP
++	SUBL $16, SP
 +
 +	// Fast path for 0-3 args, otherwise fall through to manyargs
-+	CMPL	CX, $0;	JE	_0args
-+	CMPL	CX, $1;	JE	_1args
-+	CMPL	CX, $2;	JE	_2args
-+	CMPL	CX, $3;	JE	_3args
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
 +
 +	// manyargs: 4+ args, restore SP and reallocate
-+	MOVL	BP, SP
++	MOVL BP, SP
 +
 +	// Calculate stack space needed: n*4 bytes, aligned to 16
-+	MOVL	CX, AX
-+	SHLL	$2, AX			// AX = n * 4
-+	ADDL	$15, AX
-+	ANDL	$~15, AX		// 16-byte align
-+	SUBL	AX, SP
++	MOVL CX, AX
++	SHLL $2, AX   // AX = n * 4
++	ADDL $15, AX
++	ANDL $~15, AX // 16-byte align
++	SUBL AX, SP
 +
 +	// Copy all args to stack
 +	// BX = args pointer, CX = count, DI = dest
-+	MOVL	SP, DI
++	MOVL SP, DI
++
 +copy_loop:
-+	DECL	CX
-+	MOVL	(BX)(CX*4), AX
-+	MOVL	AX, (DI)(CX*4)
-+	CMPL	CX, $0
-+	JNE	copy_loop
-+	JMP	_0args
-+
-+	// Fast path: fall through to copy args
++	DECL CX
++	MOVL (BX)(CX*4), AX
++	MOVL AX, (DI)(CX*4)
++	CMPL CX, $0
++	JNE  copy_loop
++	JMP  _0args
++
++// Fast path: fall through to copy args
 +_3args:
-+	MOVL	8(BX), AX
-+	MOVL	AX, 8(SP)
++	MOVL 8(BX), AX
++	MOVL AX, 8(SP)
++
 +_2args:
-+	MOVL	4(BX), AX
-+	MOVL	AX, 4(SP)
++	MOVL 4(BX), AX
++	MOVL AX, 4(SP)
++
 +_1args:
-+	MOVL	0(BX), AX
-+	MOVL	AX, 0(SP)
++	MOVL 0(BX), AX
++	MOVL AX, 0(SP)
++
 +_0args:
-+	MOVL	8(BP), DX		// fn pointer from saved location
-+	CALL	DX
-+	MOVL	BP, SP
++	MOVL 8(BP), DX // fn pointer from saved location
++	CALL DX
++	MOVL BP, SP
 +
 +ret:
 +	// Reload libcArgs pointer from saved location
-+	MOVL	4(SP), SI
++	MOVL 4(SP), SI
 +
 +	// Save return values (AX already has r1, need to save DX before it's clobbered)
-+	MOVL	DX, 12(SP)		// temporarily save r2
-+	MOVL	AX, libcCallInfo_r1(SI)
-+	MOVL	12(SP), AX
-+	MOVL	AX, libcCallInfo_r2(SI)
++	MOVL DX, 12(SP)              // temporarily save r2
++	MOVL AX, libcCallInfo_r1(SI)
++	MOVL 12(SP), AX
++	MOVL AX, libcCallInfo_r2(SI)
 +
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
 new file mode 100644
-index 00000000000000..59560c7d590f7a
+index 00000000000000..512d8087daf527
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
-@@ -0,0 +1,108 @@
+@@ -0,0 +1,120 @@
 +// Copyright 2009 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -9949,13 +9970,15 @@ index 00000000000000..59560c7d590f7a
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
 +#ifdef GOOS_windows
-+	MOVQ	CX, 0(SP)
++	MOVQ CX, 0(SP)
++
 +#else
-+	MOVQ	DI, 0(SP)
++	MOVQ DI, 0(SP)
++
 +#endif
-+	CALL	·syscallNSystemStack(SB)
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
 +#ifdef GOOS_windows
@@ -9964,96 +9987,106 @@ index 00000000000000..59560c7d590f7a
 +#define RegArgsN 6
 +#endif
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$16-8
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
 +	// Load pointer from stack (ABI0 calling convention)
 +	// Store argument and original SP in a callee-saved register
-+	MOVQ	libcArgs+0(FP), R13
-+	MOVQ	SP, R14
-+	
++	MOVQ libcArgs+0(FP), R13
++	MOVQ SP, R14
++
 +	// Align stack to 16 bytes
-+	ANDQ	$~15, SP
++	ANDQ $~15, SP
 +
-+	MOVQ	libcCallInfo_fn(R13), R11
-+	MOVQ	libcCallInfo_n(R13), CX
-+	MOVQ	libcCallInfo_args(R13), R10
++	MOVQ libcCallInfo_fn(R13), R11
++	MOVQ libcCallInfo_n(R13), CX
++	MOVQ libcCallInfo_args(R13), R10
 +
 +	// Fast version, do not store args on the stack.
-+	CMPL	CX, $0;	JE	_0args
-+	CMPL	CX, $1;	JE	_1args
-+	CMPL	CX, $2;	JE	_2args
-+	CMPL	CX, $3;	JE	_3args
-+	CMPL	CX, $4;	JE	_4args
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
++	CMPL CX, $4; JE _4args
++
 +#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
-+	CMPL	CX, $5;	JE	_5args
-+	CMPL	CX, $6;	JE	_6args
++	CMPL CX, $5; JE _5args
++	CMPL CX, $6; JE _6args
++
 +#endif
 +
 +	// Reserve stack space for remaining args
-+	MOVQ	CX, R12
-+	SUBQ	$RegArgsN, R12
-+	ADDQ	$1, R12 // make even number of words for stack alignment
-+	ANDQ	$~1, R12
-+	SHLQ	$3, R12
-+	SUBQ	R12, SP
++	MOVQ CX, R12
++	SUBQ $RegArgsN, R12
++	ADDQ $1, R12        // make even number of words for stack alignment
++	ANDQ $~1, R12
++	SHLQ $3, R12
++	SUBQ R12, SP
 +
 +	// Copy args to the stack.
 +	// CX: count of stack arguments (n-RegArgsN)
 +	// SI: &args[RegArgsN]
 +	// DI: copy of RSP
-+	SUBQ	$RegArgsN, CX
-+	MOVQ	R10, SI
-+	ADDQ	$(8*RegArgsN), SI
-+	MOVQ	SP, DI
++	SUBQ $RegArgsN, CX
++	MOVQ R10, SI
++	ADDQ $(8*RegArgsN), SI
++	MOVQ SP, DI
 +	CLD
 +	REP; MOVSQ
 +
 +#ifndef GOOS_windows
 +_6args:
-+	MOVQ	(5*8)(R10), R9
++	MOVQ (5*8)(R10), R9
++
 +_5args:
-+	MOVQ	(4*8)(R10), R8
++	MOVQ (4*8)(R10), R8
++
 +#endif
 +_4args:
-+	MOVQ	(3*8)(R10), CX
++	MOVQ (3*8)(R10), CX
++
 +_3args:
-+	MOVQ	(2*8)(R10), DX
++	MOVQ (2*8)(R10), DX
++
 +_2args:
-+	MOVQ	(1*8)(R10), SI
++	MOVQ (1*8)(R10), SI
++
 +_1args:
-+	MOVQ	(0*8)(R10), DI
++	MOVQ (0*8)(R10), DI
++
 +_0args:
 +
-+	XORL	AX, AX	    // vararg: say "no float args"
++	XORL AX, AX // vararg: say "no float args"
 +
 +#ifdef GOOS_windows
 +	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
 +	// and 32 bytes of shadow space on the stack.
-+	ADJSP	$32
-+	MOVQ	CX, R9
-+	MOVQ	DX, R8
-+	MOVQ	SI, DX
-+	MOVQ	DI, CX
++	ADJSP $32
++	MOVQ  CX, R9
++	MOVQ  DX, R8
++	MOVQ  SI, DX
++	MOVQ  DI, CX
++
 +#endif
 +
-+	CALL	R11
++	CALL R11
 +
 +#ifdef GOOS_windows
-+	ADJSP	$-32
++	ADJSP $-32
++
 +#endif
 +
-+	MOVQ	R14, SP		// free stack space
++	MOVQ R14, SP // free stack space
 +
 +	// Return result.
-+	MOVQ	AX, libcCallInfo_r1(R13)
-+	MOVQ	DX, libcCallInfo_r2(R13)
++	MOVQ AX, libcCallInfo_r1(R13)
++	MOVQ DX, libcCallInfo_r2(R13)
 +
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
 new file mode 100644
-index 00000000000000..96fe867d80004b
+index 00000000000000..ff8e2c5513b7fa
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
-@@ -0,0 +1,105 @@
+@@ -0,0 +1,104 @@
 +// Copyright 2026 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -10063,108 +10096,107 @@ index 00000000000000..96fe867d80004b
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$8
-+	MOVW	R0, 4(R13)
-+	CALL	·syscallNSystemStack(SB)
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $8
++	MOVW R0, 4(R13)
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$0-4
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-4
 +	// Load args pointer first, before modifying SP
-+	MOVW	libcArgs+0(FP), R0
-+	
-+	// Save callee-saved registers R4-R8 and LR.
++	MOVW libcArgs+0(FP), R0
++
++	// Save callee-saved registers R4-R7 and LR.
 +	// We use R4 for libcArgs pointer.
 +	// We use R5 for args pointer.
-+	// We use R6 for n.
++	// We use R6 for n, then reused for saving SP.
 +	// We use R7 for scratch.
-+	// We use R8 for saving SP.
-+	MOVM.DB.W [R4-R8, R14], (R13)
-+
-+	MOVW	R0, R4 // Move libcArgs to R4
-+
-+	MOVW	libcCallInfo_n(R4), R6
-+	MOVW	libcCallInfo_args(R4), R5
-+	MOVW	libcCallInfo_fn(R4), R12
-+
-+	CMP	$4, R6
-+	BGT	args_stack
-+
-+	CMP	$0, R6
-+	BEQ	call
-+	CMP	$1, R6
-+	BEQ	args_1
-+	CMP	$2, R6
-+	BEQ	args_2
-+	CMP	$3, R6
-+	BEQ	args_3
-+	
-+args_4:	
-+	MOVM.IA	(R5), [R0, R1, R2, R3]
-+	B	call
++	MOVM.DB.W [R4-R7, R14], (R13)
++
++	MOVW R0, R4 // Move libcArgs to R4
++
++	MOVW libcCallInfo_n(R4), R6
++	MOVW libcCallInfo_args(R4), R5
++	MOVW libcCallInfo_fn(R4), R12
++
++	CMP $4, R6
++	BGT args_stack
++
++	CMP $0, R6
++	BEQ call
++	CMP $1, R6
++	BEQ args_1
++	CMP $2, R6
++	BEQ args_2
++	CMP $3, R6
++	BEQ args_3
++
++args_4:
++	MOVM.IA (R5), [R0, R1, R2, R3]
++	B       call
 +
 +args_3:
-+	MOVM.IA	(R5), [R0, R1, R2]
-+	B	call
++	MOVM.IA (R5), [R0, R1, R2]
++	B       call
 +
 +args_2:
-+	MOVM.IA	(R5), [R0, R1]
-+	B	call
++	MOVM.IA (R5), [R0, R1]
++	B       call
 +
 +args_1:
-+	MOVW	(R5), R0
-+	B	call
++	MOVW (R5), R0
++	B    call
 +
 +args_stack:
 +	// Calculate stack space needed: (n-4)*4
-+	SUB	$4, R6, R7
-+	MOVW	R7, R2
-+	SLL	$2, R2 // bytes
-+	
-+	// Save SP
-+	MOVW	R13, R8
-+	
++	SUB  $4, R6, R7
++	MOVW R7, R2
++	SLL  $2, R2     // bytes
++
++	// Save SP (R6 is free now, n no longer needed)
++	MOVW R13, R6
++
 +	// Allocate stack
-+	SUB	R2, R13
-+	BIC	$7, R13 // Align to 8 bytes
-+	
++	SUB R2, R13
++	BIC $7, R13 // Align to 8 bytes
++
 +	// Copy args
-+	ADD	$16, R5, R14 // Src = args + 16
-+	MOVW	R13, R3      // Dst = SP
-+	
++	ADD  $16, R5, R14 // Src = args + 16
++	MOVW R13, R3      // Dst = SP
++
 +copy_loop:
-+	MOVW.P	4(R14), R1 // read
-+	MOVW.P	R1, 4(R3)  // write
-+	SUB	$1, R7
-+	CMP	$0, R7
-+	BNE	copy_loop
-+	
++	MOVW.P 4(R14), R1 // read
++	MOVW.P R1, 4(R3)  // write
++	SUB    $1, R7
++	CMP    $0, R7
++	BNE    copy_loop
++
 +	// Load first 4 args
-+	MOVM.IA	(R5), [R0, R1, R2, R3]
-+	
++	MOVM.IA (R5), [R0, R1, R2, R3]
++
 +	// Reload fn
-+	MOVW	libcCallInfo_fn(R4), R12
-+	
-+	BL	(R12)
-+	
++	MOVW libcCallInfo_fn(R4), R12
++
++	BL (R12)
++
 +	// Restore SP
-+	MOVW	R8, R13
-+	B	ret
++	MOVW R6, R13
++	B    ret
 +
 +call:
-+	BL	(R12)
++	BL (R12)
 +
 +ret:
-+	MOVW	R0, libcCallInfo_r1(R4)
-+	MOVW	R1, libcCallInfo_r2(R4)
-+	
-+	MOVM.IA.W (R13), [R4-R8, R14]
++	MOVW R0, libcCallInfo_r1(R4)
++	MOVW R1, libcCallInfo_r2(R4)
++
++	MOVM.IA.W (R13), [R4-R7, R14]
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
 new file mode 100644
-index 00000000000000..025276dffb2aa5
+index 00000000000000..261a7e4cb90d56
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
-@@ -0,0 +1,87 @@
+@@ -0,0 +1,97 @@
 +// Copyright 2015 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -10174,84 +10206,94 @@ index 00000000000000..025276dffb2aa5
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
-+	MOVD	R0, 8(RSP)
-+	CALL	·syscallNSystemStack(SB)
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVD R0, 8(RSP)
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$0-16
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
 +	// Save original stack pointer
-+	MOVD	RSP, R20
++	MOVD RSP, R20
 +
 +	// Load pointer from stack (ABI0 calling convention)
-+	MOVD	libcArgs+0(FP), R3
++	MOVD libcArgs+0(FP), R3
++
++	MOVD libcCallInfo_args(R3), R12
++	MOVD libcCallInfo_fn(R3), R13
 +
-+	MOVD	libcCallInfo_args(R3), R12
-+	MOVD	libcCallInfo_fn(R3), R13
 +	// Do we have more than 8 arguments?
-+	MOVD	libcCallInfo_n(R3), R0
-+	CMP	$0,	R0; BEQ	_0args
-+	CMP	$1,	R0; BEQ	_1args
-+	CMP	$2,	R0; BEQ	_2args
-+	CMP	$3,	R0; BEQ	_3args
-+	CMP	$4,	R0; BEQ	_4args
-+	CMP	$5,	R0; BEQ	_5args
-+	CMP	$6,	R0; BEQ	_6args
-+	CMP	$7,	R0; BEQ	_7args
-+	CMP	$8,	R0; BEQ	_8args
++	MOVD libcCallInfo_n(R3), R0
++	CMP  $0, R0; BEQ _0args
++	CMP  $1, R0; BEQ _1args
++	CMP  $2, R0; BEQ _2args
++	CMP  $3, R0; BEQ _3args
++	CMP  $4, R0; BEQ _4args
++	CMP  $5, R0; BEQ _5args
++	CMP  $6, R0; BEQ _6args
++	CMP  $7, R0; BEQ _7args
++	CMP  $8, R0; BEQ _8args
 +
 +	// Reserve stack space for remaining args
-+	SUB	$8, R0, R2
-+	ADD	$1, R2, R3 // make even number of words for stack alignment
-+	AND	$~1, R3
-+	LSL	$3, R3
-+	SUB	R3, RSP
++	SUB $8, R0, R2
++	ADD $1, R2, R3 // make even number of words for stack alignment
++	AND $~1, R3
++	LSL $3, R3
++	SUB R3, RSP
 +
 +	// R4: size of stack arguments (n-8)*8
 +	// R5: &args[8]
 +	// R6: loop counter, from 0 to (n-8)*8
 +	// R7: scratch
 +	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
-+	SUB	$8, R0, R4
-+	LSL	$3, R4
-+	ADD	$(8*8), R12, R5
-+	MOVD	$0, R6
-+	MOVD	RSP, R8
++	SUB  $8, R0, R4
++	LSL  $3, R4
++	ADD  $(8*8), R12, R5
++	MOVD $0, R6
++	MOVD RSP, R8
++
 +stackargs:
-+	MOVD	(R6)(R5), R7
-+	MOVD	R7, (R6)(R8)
-+	ADD	$8, R6
-+	CMP	R6, R4
-+	BNE	stackargs
++	MOVD (R6)(R5), R7
++	MOVD R7, (R6)(R8)
++	ADD  $8, R6
++	CMP  R6, R4
++	BNE  stackargs
 +
 +_8args:
-+	MOVD	(7*8)(R12), R7
++	MOVD (7*8)(R12), R7
++
 +_7args:
-+	MOVD	(6*8)(R12), R6
++	MOVD (6*8)(R12), R6
++
 +_6args:
-+	MOVD	(5*8)(R12), R5
++	MOVD (5*8)(R12), R5
++
 +_5args:
-+	MOVD	(4*8)(R12), R4
++	MOVD (4*8)(R12), R4
++
 +_4args:
-+	MOVD	(3*8)(R12), R3
++	MOVD (3*8)(R12), R3
++
 +_3args:
-+	MOVD	(2*8)(R12), R2
++	MOVD (2*8)(R12), R2
++
 +_2args:
-+	MOVD	(1*8)(R12), R1
++	MOVD (1*8)(R12), R1
++
 +_1args:
-+	MOVD	(0*8)(R12), R0
++	MOVD (0*8)(R12), R0
++
 +_0args:
 +
-+	BL	(R13)
++	BL (R13)
 +
 +	// Restore original stack pointer
-+	MOVD	R20, RSP
++	MOVD R20, RSP
 +
-+	MOVD	libcArgs+0(FP), R3
-+	MOVD	R0, libcCallInfo_r1(R3)	// save r1
-+	MOVD	R1, libcCallInfo_r2(R3)	// save r2
++	MOVD libcArgs+0(FP), R3
++	MOVD R0, libcCallInfo_r1(R3) // save r1
++	MOVD R1, libcCallInfo_r2(R3) // save r2
 +
-+    RET
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
 index 00000000000000..67ab3cf1532ec9
@@ -10267,106 +10309,119 @@ index 00000000000000..67ab3cf1532ec9
 +// This file silences errors about body-less functions.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
 new file mode 100644
-index 00000000000000..7b771dc770badc
+index 00000000000000..6ff0ddd2922d8b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
-@@ -0,0 +1,96 @@
+@@ -0,0 +1,109 @@
 +// Copyright 2015 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
-+ 
++
 +//go:build !cgo
-+ 
++
 +#include "go_asm.h"
 +#include "textflag.h"
-+ 
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
-+    MOV A0, 8(X2)
-+    CALL    ·syscallNSystemStack(SB)
-+    RET
-+ 
-+TEXT ·syscallNAsm(SB),NOSPLIT,$0-8
-+    // Save original stack pointer
-+    MOV X2, X20
-+ 
-+    // Load pointer from stack (ABI0 calling convention)
-+    MOV libcArgs+0(FP), X5
-+
-+    MOV libcCallInfo_args(X5), X30
-+    MOV libcCallInfo_fn(X5), X29
-+    // Do we have more than 8 arguments?
-+    MOV libcCallInfo_n(X5), X10
-+    BEQ X10, ZERO, _0args
-+    MOV $1, X6
-+    BEQ X10, X6, _1args
-+    MOV $2, X6
-+    BEQ X10, X6, _2args
-+    MOV $3, X6
-+    BEQ X10, X6, _3args
-+    MOV $4, X6
-+    BEQ X10, X6, _4args
-+    MOV $5, X6
-+    BEQ X10, X6, _5args
-+    MOV $6, X6
-+    BEQ X10, X6, _6args
-+    MOV $7, X6
-+    BEQ X10, X6, _7args
-+    MOV $8, X6
-+    BEQ X10, X6, _8args
-+ 
-+    // Reserve stack space for remaining args
-+    ADDI    $-8, X10, X7
-+    ADDI    $1, X7, X5 // make even number of words for stack alignment
-+    ANDI    $-2, X5, X5
-+    SLLI    $3, X5, X5
-+    SUB X5, X2, X2
-+ 
-+    // X6: size of stack arguments (n-8)*8
-+    // X7: &args[8]
-+    // X8: loop counter, from 0 to (n-8)*8
-+    // X9: scratch
-+    // X28: copy of X2 (SP)
-+    ADDI    $-8, X10, X6
-+    SLLI    $3, X6, X6
-+    ADDI    $(8*8), X7, X7
-+    MOV ZERO, X8
-+    MOV X2, X28
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOV  A0, 8(X2)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
++	// Load pointer from stack (ABI0 calling convention)
++	MOV libcArgs+0(FP), X5
++
++	// Save original stack pointer
++	MOV X2, X20
++
++	// Align stack to 16 bytes for C calling convention
++	ANDI $-16, X2, X2
++
++	MOV libcCallInfo_args(X5), X30
++	MOV libcCallInfo_fn(X5), X29
++
++	// Do we have more than 8 arguments?
++	MOV libcCallInfo_n(X5), X10
++	BEQ X10, ZERO, _0args
++	MOV $1, X6
++	BEQ X10, X6, _1args
++	MOV $2, X6
++	BEQ X10, X6, _2args
++	MOV $3, X6
++	BEQ X10, X6, _3args
++	MOV $4, X6
++	BEQ X10, X6, _4args
++	MOV $5, X6
++	BEQ X10, X6, _5args
++	MOV $6, X6
++	BEQ X10, X6, _6args
++	MOV $7, X6
++	BEQ X10, X6, _7args
++	MOV $8, X6
++	BEQ X10, X6, _8args
++
++	// Reserve stack space for remaining args
++	ADDI $-8, X10, X7
++	ADDI $1, X7, X5   // make even number of words for stack alignment
++	ANDI $-2, X5, X5
++	SLLI $3, X5, X5
++	SUB  X5, X2, X2
++
++	// X6: size of stack arguments (n-8)*8
++	// X7: &args[8]
++	// X8: loop counter, from 0 to (n-8)*8
++	// X9: scratch
++	// X28: copy of X2 (SP)
++	ADDI $-8, X10, X6
++	SLLI $3, X6, X6
++	ADDI $(8*8), X7, X7
++	MOV  ZERO, X8
++	MOV  X2, X28
++
 +stackargs:
-+    ADD X8, X7, X9
-+    MOV (X9), X9
-+    ADD X8, X28, X31
-+    MOV X9, (X31)
-+    ADDI    $8, X8, X8
-+    BNE X8, X6, stackargs
-+ 
++	ADD  X8, X7, X9
++	MOV  (X9), X9
++	ADD  X8, X28, X31
++	MOV  X9, (X31)
++	ADDI $8, X8, X8
++	BNE  X8, X6, stackargs
++
 +_8args:
-+    MOV (7*8)(X30), X17
++	MOV (7*8)(X30), X17
++
 +_7args:
-+    MOV (6*8)(X30), X16
++	MOV (6*8)(X30), X16
++
 +_6args:
-+    MOV (5*8)(X30), X15
++	MOV (5*8)(X30), X15
++
 +_5args:
-+    MOV (4*8)(X30), X14
++	MOV (4*8)(X30), X14
++
 +_4args:
-+    MOV (3*8)(X30), X13
++	MOV (3*8)(X30), X13
++
 +_3args:
-+    MOV (2*8)(X30), X12
++	MOV (2*8)(X30), X12
++
 +_2args:
-+    MOV (1*8)(X30), X11
++	MOV (1*8)(X30), X11
++
 +_1args:
-+    MOV (0*8)(X30), X10
++	MOV (0*8)(X30), X10
++
 +_0args:
 +
-+    JALR    RA, (X29)
++	CALL X29
 +
-+    // Restore original stack pointer
-+    MOV X20, X2
-+ 
-+    MOV libcArgs+0(FP), X5
-+    MOV X10, libcCallInfo_r1(X5)    // save r1
-+    MOV X11, libcCallInfo_r2(X5)    // save r2
-+ 
-+    RET
++	// Restore original stack pointer
++	MOV X20, X2
++
++	MOV libcArgs+0(FP), X5
++	MOV X10, libcCallInfo_r1(X5) // save r1
++	MOV X11, libcCallInfo_r2(X5) // save r2
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
 new file mode 100644
 index 00000000000000..e94cca9e27e30a
@@ -11140,17 +11195,16 @@ index 00000000000000..48640cdcbf558f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
 new file mode 100644
-index 00000000000000..25b9fddfbc888b
+index 00000000000000..42f49b44875f91
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
-@@ -0,0 +1,51 @@
+@@ -0,0 +1,53 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && unix
 +
 +#include "textflag.h"
 +
-+
 +#ifndef GOARCH_amd64
 +#ifndef GOARCH_arm64
 +#ifndef GOARCH_riscv64
@@ -11171,29 +11225,32 @@ index 00000000000000..25b9fddfbc888b
 +#endif
 +#endif
 +
-+
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
 +#endif
-+TEXT _mkcgo_dlclose_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlclose(SB)
-+GLOBL   ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlerror_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlerror(SB)
-+GLOBL   ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlopen_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlopen(SB)
-+GLOBL   ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlsym_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlsym(SB)
-+GLOBL   ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
++TEXT _mkcgo_dlclose_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlclose(SB)
++
++GLOBL ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
++
++TEXT _mkcgo_dlerror_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlerror(SB)
++
++GLOBL ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
++
++TEXT _mkcgo_dlopen_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlopen(SB)
++
++GLOBL ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
++
++TEXT _mkcgo_dlsym_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlsym(SB)
++
++GLOBL ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 new file mode 100644
@@ -21046,10 +21103,10 @@ index 00000000000000..0a25e0621df627
 +)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
 new file mode 100644
-index 00000000000000..5fab22b463dd58
+index 00000000000000..016e73758ac4e0
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
-@@ -0,0 +1,71 @@
+@@ -0,0 +1,69 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21108,9 +21165,7 @@ index 00000000000000..5fab22b463dd58
 +	kCCAlgorithmRC4 = 4,
 +} CCAlgorithm;
 +
-+typedef void* mkcgo_err_state;
-+mkcgo_err_state mkcgo_err_retrieve();
-+void mkcgo_err_free(mkcgo_err_state);
++uintptr_t mkcgo_err_retrieve();
 +
 +CCCryptorStatus _mkcgo_CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
 +CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
@@ -21123,10 +21178,10 @@ index 00000000000000..5fab22b463dd58
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
 new file mode 100644
-index 00000000000000..27df632639b49f
+index 00000000000000..968a0d0fccd10f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
-@@ -0,0 +1,69 @@
+@@ -0,0 +1,74 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -21136,7 +21191,6 @@ index 00000000000000..27df632639b49f
 +
 +#include "textflag.h"
 +
-+
 +#ifndef GOARCH_amd64
 +#ifndef GOARCH_arm64
 +#ifndef GOARCH_riscv64
@@ -21157,48 +21211,54 @@ index 00000000000000..27df632639b49f
 +#endif
 +#endif
 +
-+
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
 +#endif
-+TEXT _mkcgo_CCCrypt_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCrypt(SB)
-+GLOBL   ·_mkcgo_CCCrypt_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCrypt_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCrypt_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorCreate_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCryptorCreate(SB)
-+GLOBL   ·_mkcgo_CCCryptorCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCryptorCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorCreateWithMode_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCryptorCreateWithMode(SB)
-+GLOBL   ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreateWithMode_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorRelease_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCryptorRelease(SB)
-+GLOBL   ·_mkcgo_CCCryptorRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCryptorRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorRelease_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorReset_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCryptorReset(SB)
-+GLOBL   ·_mkcgo_CCCryptorReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCryptorReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorReset_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorUpdate_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCCryptorUpdate(SB)
-+GLOBL   ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorUpdate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CCKeyDerivationPBKDF(SB)
-+GLOBL   ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB)
++TEXT _mkcgo_CCCrypt_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCrypt(SB)
++
++GLOBL ·_mkcgo_CCCrypt_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCrypt_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCrypt_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorCreate(SB)
++
++GLOBL ·_mkcgo_CCCryptorCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreateWithMode_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorCreateWithMode(SB)
++
++GLOBL ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreateWithMode_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorRelease_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorRelease(SB)
++
++GLOBL ·_mkcgo_CCCryptorRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorReset_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorReset(SB)
++
++GLOBL ·_mkcgo_CCCryptorReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorReset_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorUpdate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorUpdate(SB)
++
++GLOBL ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorUpdate_trampoline<>(SB)
++
++TEXT _mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCKeyDerivationPBKDF(SB)
++
++GLOBL ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB)
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
 new file mode 100644
-index 00000000000000..599a18a4424fd5
+index 00000000000000..f569456a1e6010
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
 @@ -0,0 +1,60 @@
@@ -21230,9 +21290,9 @@ index 00000000000000..599a18a4424fd5
 +type CCPseudoRandomAlgorithm = C.CCPseudoRandomAlgorithm
 +
 +//go:nosplit
-+func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
 +	x := uintptr(unsafe.Pointer(p))
-+	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
 +}
 +
 +func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
@@ -21376,2019 +21436,2035 @@ index 00000000000000..9de8feb80b0276
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..58008e32187f486c82dc7d8da38c5bce1e13c0ea
+index 0000000000000000000000000000000000000000..5377aaadc4efef055c3ba5538d00394e067b2139
 GIT binary patch
-literal 174600
-zcmeFa4R~%@T_2h=f<&idg12f!Em5a6qf$eKHWbnK-~`^&=4dP&jKFxp#~Cuh%*5eD
-zLfc62@V43PZkub(W1e2nJokde>!s$ZuTMY&?}3pM!H-y5j906{iX;X#dbu<zdhYLI
-zt-bfV-<{+P45Lq<IrC)Jde{1||JVAjwf^gK|LR}-(O*BQukYMv_2GZ``*Qp>`tiSE
-z{Ndjh<8PChC;U79ahB@qn`RmO+Y7&evyXqbGZFtTU%q-}{;K2t{lf977Z$%`?C1V<
-zf$s@OZ2Z)@zP-;u<OzL?5r*OA%P)WJYfA~2FW-Ish3AWe$j4BT)K?b6REo^YmtXm^
-zt1m16?#9;%d@Y57!>x0|*En}u-`^{W<+00`U;DcI?!EfV%U54Nd*z`k_g=o-EpPLC
-zjp%1WiS>VTPWm6c?KbH=M-(ELFTdioS0B3Xfmh|fyYcnC!TA2qkU#xz&p~CyzuSta
-zV!-#{1FtPAq^iG-fNw068-(E0-!b@Oy;lGA;_K#bKj4deG=VRuvWiN-gZ?hx|KKZU
-zUiR7<)c3^1i!K(Re;Du$hNOQME2aSHie0|^;LE@36_@Y3|7EYba^C~@K3J9aF9N<`
-z#(gjD#TQ8lFXg>|_GPcQdU@`F*WLHPE5YC0WrF>SmTvL$ojMcrH~Lw(_5GleqACKu
-zD>IkxeduNPUvXyDUY35q_@=(d`TPIT_2FM?XEQO*@E_riw(nARAodje_4Sb`(|4Y9
-zTi;jX$1MK0`UbbtNdn;CSA@SmMmPurPcaf^-SWSu0dg3BEc&$9s4YD2!MO*}$nJaa
-z0jA+^1b^h`X_EVO4?gtjzAhMK2`<VJ@O<-w4_(R2m+)V{`(+QIDhd=|AIg)?X>d=!
-zML6m-@?FOF0yWIZhaP;zmDj#DG|?LQFMsoc54>XTp@*(K@QT+9&u}+iFL?cHuU@$y
-zY5Z4H-r_mCmXGJo-S?WS_dRg=-q$?%ve>d~@O<mbUwh@D?+F!AoBv%`UUBul@452L
-zfscy*sQ*IA6@Du9*#lcc@9z6vJNvS$udw;X{2n~_zx=)j&^DM~V>hJp0!Vcqsz4l_
-zfae8QPy_c}wf-x1H8lx=Ps0DaZ@F?+7J9n8kmc3qAA0$HS06fAzZbsspWhd&C$Hy<
-zygAHC{5<sf*{cs$@Qi}D3Z97vU-7cnoS(ZobLD}n_q`%EKEOr1B|Clr2dr;>;K2v3
-zykKs2_Q8k5BjE}?u@AKZYRZ2zJH)H^z5Kq{K*5tQd&R3+6PKFFNA_9dp7#wr6+I+>
-zH?Mtc@ICB~p595`+e|*B{PlBlw;kTTNq(Bi`0-)?(>n_Ln(6p)^V-9MM9@(A^DlY<
-zP>dpDbRxYpGLhah+)VEonn>pcCz5B}*-Tz~Xa5BLhhHzebEuizedn-90L$o0&VT1U
-z@4NTje>m{eH<2sj`}XrMI)CZ>3t!ND<Ht6kz=<TA`RkiECz94Qf@bo;X7bi1Vi%GR
-zO(gAx(%ORxw)z=>k!I2wb#w&LK1YWU9dZ<Gw2uEuu!D#mF?wTshb$o64q+#Rn<3l?
-z;d%(yLbw{j<q$4~aM59F{^re_Av#+`XF_z~+dBhywI=ZkK?A|lJLi*!5${91d84%p
-zmRTAp9YhhVQHbn0OtdD`#&I)kH2mXQXP|j)@2Gj#!_8z5!fishiR7csOs+SRtRu-$
-zCTVRuT3?i~I|N9^ce*j`78v%<!mw`)+Y!S=no-{qX{dqB)f4JYH93*Kbs92Gq${lX
-zX1c;^yO7+NNVbNRAl^qD?d3gH<zGlX3iw3;T}=LJB6-IcViU;%?08|bnapiWBy;P{
-z<es&O<et@u<kIp)a&c)Q8DDHBE37cc&dP$0SW!XGTMf}{)Bc*$<)mW22IwipRFOb2
-zRVqYTnrU0IsL*U)Xx@cb?I_gD3&DP!G*%?Nx0$vmPBS67B_Vw#ji8xr5n4P>ByV3v
-z&V_5AM8kReDxw3e2jD7#z8Flm$niufs36sfgh(wx+H!@h42gkkm_cefNqbGT{RM$4
-zL84~VhSD}$l^ID}5;M&tW7-}Q!&@}R3+QOl7VB>!Sy@)Xuc4NQm5{9>;bQXZ6Ukc_
-z75gA!ONarMO#=Nvzk=2gF(%ou5H|*I?ljYkIGU-b1QKW&V^9CYyV#Z8+=11R9so%N
-zfL3E`N59$<JzXJ>FjESPZfDPA_8FkBY$hLWCa>>rCeMQ2#X^=5<YKaIU7&Y_>eo>?
-z)WQa$1FZq}W$8OiNel`+D9h=|jb^en4RG|s&7?h}*j7gjw6_tMLb^4?q;y4~X=b?h
-z*WhbysO-vSUKXm)wv_5hHO8bhDOxL23f#pcE9*ruayFK8)<7)sqSUm_B(#=hDQ8q%
-zwwVNGMFCb;0&r5hoMe$CdL&?#wL3ziF6-uGKk9B#3GJm4!hI+08gvhVL2Z0(TZb&q
-z>9gi=K9|$&Bea&lKx-X%p8kvM5r{Ww%^SUb!M^z`yR!R|^DjMr&-w2>fBByGfw@(n
-z#GsiybLn;G`rh?aSl>Hog6B8C0{<7{f!hm1-7w-21RQBwqliTDnOKgaB6dssma`u-
-zjgUXd)2)<)KLBHu@f>Yt7=7-3Gkp>UlB4Fe<Gz8nT>r%Nb95-?J~ucN!&Dl90Fk`E
-zdHt`4oB!i?nybxoH{h0FAo@Viz{UM0y_B71@?<$AoqO@G%YRTCO`ixY_mP&U+}TVu
-zT!xO!xQKSUncN{r@DezIYjbbeA2I*n3fz(Z>-*ohbbaX}`hxv)S8qS;d-M3suf6T+
-zQx3lg{2w(pVR8KTP0cUAAu@+wmCN-`XE6_S$M=Fr3n6mtVJLy(^vEOqK@Y|#eB>m(
-zgumxv7#}}=x4O5<Q3yOYAVJbOWG?K>%*XfPYytUl@b`f4Z&aSa=A&3Y=ix8X1093d
-zWAH%Xh2Ap)4|EtFD7?@GbjIIs=R|V#&VIV0`1R5|hv<qz33uN);ySqY@EBZCw%lI*
-z6Mytan;1zk{tUs&CzAKU5gkPALh>tcL}$<<E+oGJmqXn`(q`wwrpf@Ep;7k(7|~Hg
-zcbqzc=)R+1CwODyLx^^qI*8~dqkmK0DICygm@V7Lsg5e#(j$n6K*QyY)+T<b)LpG*
-zM5Fg-ugM*#yf}ARCpfQYq1h6}@9{vFr5|Bfb+iFhtsxp}wD5vcC2QEu*6RS|CTk>+
-zceX)%$#}_OjSc}T1s=pU0aClhX{caTH~dzb2F5y8>V@PN;C3DfSd1P!+T*ZZNIn9<
-zNofgvOqj38TqctHJB7o#unwnn4NfZ@)_dTvUV_7VaS<-cJgNx(qaD_a4lB^G-a;3%
-zH7K^);x1`5_zUi)0_s@fqTI?6rPX<{DwGD-w>4!H(>aP!#ps!i8AZc96+Ug68HMSl
-zEeZ_qlA~MrnKR5wqo0|3w-_)*IBk<~5YD{788Y2r(;X?K51u!D&RM~b%X!AKEkX+q
-zT((6d1($6J(Sg>h?KrbCL7CMK$C*%3t+UDrewth#sCANwvZQ{+NNrFtPwA2s`mYg%
-zT6b#aCTWccZl#f<7|Kx$8^sa%PF9W!F4`N+Nw?M!Tu3^Qay1l6<y>D(uA|QyQSL7y
-zHi}rqtxfGc+rhId7nLiHQgf7UHHkTGTg29mdD$&^$qW#Dz1EVz#Too*sT|W!m)d4v
-ze|jSMoQW_ZWNjhMRtPnbTsIqbsi!D{CpOcF4z%{<Qn!RRZTAr&JbKZT2ZcsDf?udK
-z7DY9zi?p5M)B}H3IJq!^{ZE<%n$HoUR5Su)^od{!f*_$R%yk6O-chi%?O<6X+N%g+
-z74L|n6#<~z5S*QLS`~k$LK5LiNwlNX14q&y^DSX}UT9m32<*&KR-j`2M$jQA(RN}|
-zzmo<_NgGaDRv_y!LTj{r<n&_%P9K$~HKU7Ihn+N1h~3(UWb&GKC2?y{lD70K&Gf6s
-zYi7HX*ZePD)9p3?GmIsoC9iqIsMd|RqhM<jL1c$<48EHMJ6+j-%QQs+qBmVq*1@kx
-zsTqx(vw}=wCoPJ7@CoIq_EG1yg<$&`jTPXlfKvsmA)=a75)6t76?{JmeDV(;U(fp#
-z*7NKeam0lOG>ITC;te7WA8H@k4c-v@HvqAJL$HRRdCO~gJE+)hPimJ{&GkR5Q#jh=
-zUT7JRqx`<iqFBrO8(xXS9EhuNbDMB#HsI92x#4QuB{(-1;oOWbHIqw=VB5}3YZjV}
-z&AUOZMPG!XO)^0a%#>nse$ac<6^ezXU1&xCEHs-J(g=bz5LQ-s?GCPzlL{|JOIM3|
-zNp@J#ZOOI>Epiw!mXXu74EK|t(lQ+V81OpEAYX=CS5-&%h#*l&_tj@F!_ktumf=>F
-zP+EptLxPv#mK5VM+%jTVhNDq)8l)gNHCmK|C3Y>tkqWw-5h<y(42N-#^w<+A2&<WK
-z{f)(7oRTu}8XMN@iA4UwUNdR-H<Nz2Z+%otmK`Clvi`OK98^CV#wKYbD;;7@-oA}s
-zpmo6`d0<cwsTaocRh}6DMzt~ygPUcLZ0(Shq`iy409v=3QYP2!rVZ9H*me$<uiFVU
-zRmYCijv68X?X51~rCVJLc6*{HEar{o?2aK8c~B}AYn9n*lyfLeSmsMtngmF*$r6B*
-z<Qqn8mQ(tONhL;O(vonsmrJ<zowTb!J)1p`F*7l&;1RFmZ2+AH#ChUP!r&Q}^Rh)I
-z_IM<#ASI8a^NMbd<kejs$&NYQHsWCfTE`nfB#OzzavX-V59H;f7=O$(LjI!XQBsQ5
-z@dln6_Xmf$`1NS5KRuS~HB(-%>4%!VUekw|*K1}Wxz}qfcUv`>XqFe&YmNaD)@wSB
-zj=*Sk9feNZv7}nBp=kk@>ox0){!Ojde9DV7YtRh*kwvMhyj!SdVGqM**=Rt>We90&
-zE$ugk%@uBtXn&;#Kr1cNAmRD(8Z}i~+QEh&m4~jM>cmRRCILdf><Kt}AXXGsT3D%A
-zX<>DErDadRa)tIC?Qw;?($bKO`;g*DaN3B(O3QZPkSuI`O51~d;;Ajx!WMM0qCQLO
-z0fUm9>j6WG^*S8s)~HdqP^&38Z_o+FaE@ZcD0&=}G&2g*O~YbO{W8mxh($kwK1S?;
-zL>Lo&0E8s-f^8hr9p=cJtdx8YZ!pR~aurk18A5k2v&<qXI7ah`4z!l-7`b6-XACoT
-zLPcigRZU^^)u05*O(seweTtD<zhZUEEVL`w4($r{KB{14OaWcNLB&)vhBzYM-ODVp
-zRy!_UW?2e_(v?NTyv#C;*oB14EF*}Wu*@Rz9%Q3(on(&Etp+i}zh!{MV)L?FXv8{*
-zqp*A_G#cp|OUDM^W?+A5BI&=C^_5BTZkK6Fl(oMImuUvS23miu)fQ7pSB?k)*G@r3
-zu~BKn0N+lfu|~&VNn9WC#CB^<+_l#gWXlR#s|a!ql_<S{^d4rafhVpfph}JqAmbRp
-zK<nSwjZ;?IW)=u;D%kRDStkIHxC9c>o;qT4MF44L@Z1Y?s*ptZQj!;BjwM;XAS2Pb
-z*Knv1)F9Opu?#wCsFc*_r2bOUnv)h4XaUWhkM-?c1@F;2T^#}lmBbsQQd2GV2HIMC
-zk>|su2AI?~gS4ezX{KL2o(~(RJfHW!xZCsj4_%(ms!=T)@w$R7E-*y78LzCxl(YYq
-zX^H|wk4WmVvf^3{n}XJ2BsRuDfQPjh8#*=wC@)U8NbJ@k0=a@qhy;~nOaus%(D{^6
-z{REU=+5gM5m&pTH_Q%fnEgGfsUFR?1Ak{Id40WK%<c;woE=9ma5vV+d@g2H%fXHXC
-zXvQ8|TK(+l?ErA%hiK2Z>XSx&rSU_QlJQj+#9Y3nlt$zGG1b5Shz{mNvM+}8zlrqz
-z<)%3D^dHlzxkW(jAlwxM7!;Az$92++$c~LzBS66Ojxt+}qiIMaEv-r-3{y-G8z^a`
-z|K?60ky!`S3}?H|Y;F^M$uOet8kR~|#t;v{ErF!kQ)s5pw+``iGwX9b=ZJ8sC@Cy(
-zbP8%sQ(FVI$pWsWWSmi8t|&|wnL-HRm;}d2BBeUS6j^Xmd$v?&UchsU0fZH`u-r`N
-zSaDDT=0nHl@1Zp<LR{IOAiM1A{0m`W9qd4Z*?!_nd}JjU7z}NXg%R#Dw83p?g$!vr
-zH8*hAIQFs1Zl?waTiu5Gvy-fD6S;ZO)Rc=FPO@#6<_ehxQWzqldq}m+UH&VRy;E3>
-zwkH6v;?a2b>k!e;rCV_%bl84R7LXDRS7v?8tZc3Wo%I2e%xNO|aHt2bcBEe4P({;F
-zL*|y0oVJT3VH^=dTz?o<j1tQtlRtxL4=Zh918i&tJef+QD*{hj7U<#{mfhByVW}x@
-z!7Z$*4949C@C5IziReJ<yEFu^Sj}3j!6_$d4;`Ep-lmRjPU2W-TM9`7aIB9(Fxmjf
-zMDi!0;pG@~=*eTQa3$FyF()fa3fSf^v2W=Iisgs`J%gaq?m?d=;HoL`f>Y67kbF0L
-zVg@46yexbA4#t7p!kINpd61a*7us<EqIE*5gV|6ltTnF86L>N>4yv^#^RxC0(q#iY
-z?h@)Jc-(!EZBkHMgo>FRCSe7J!8uG_bUfCXLOf-}lXZxdC$pL{VnPMPThl`9P1AH`
-zR=>1&7Xh5qrYteZTJ6&Jk<n}`2wH;jWRa=5&`{WiUU|G~m9W^wcM<(cGyTf09PxCO
-zPFB(E(8Y`bN(1W{B9RX!qOmQPf5&(YWfqNteTn$t8_(|VM%~}Jskxm#g8r`5VX^hY
-zVvLBLM!ym?j~#UMgz<J-ieM2p^V)t!?cV*&2;i&zjI!fMN=sue5H%*AFi**oWLT3T
-z%YJ4`G4?YJ#n{idcDnl+l}L3a7A?wbpViOI0AuK9W)U4|9bo7{zd%vVUp$$)vY#7(
-z_}ifkWbJtX_OvMF$?$gtwMD2XZXe>P3FV|Kdjv>J{d>CQBz0%84B0^$*I8>2zwDMv
-zA(+A8cL3EnV)@`l#2gm1Q=ei@eTubg=9D^&q%w0hq)4?R427BVcg(Ay%%aiEOT-V~
-zSa%<QXPq#fFS1)tGASdmGBA}B-7U506RaI0`VL2VgxewPF!ZRu9NbI^a6@}K%DhWf
-z5%$ioUp5BenSm%Z%xIKP#4*_-E2;T&Wnof|`S!lj)p{hVhkI775p<2_Oumrpq1Z8s
-zoeIDj?g7wx7AqaASot82AqigU#qH*`KkplOQy;u{7`^qV(FF5kiSMxmhA<<oj(3b+
-zHav?Yjs(q&ht$>8%9afhk5+HZOISAB#hibvlPR@bBnjmzQ+2F(O))mxCB@immlcES
-zm&~mOBJPgU6@jOo2H?1nN8D$sc5?S%QDxvBtOHMIwi}2JwEi*fJwkrhg_>&KT(;a?
-z;1}2vz~RNKI2!059?uSMJ8Yts_sAW34lx<d9?3A!GM=@)@RdMm5FHN+dMxh&9)7`L
-zFd(0cg2e1#(4Vm4d0<O{T&ln=s)@qDxfl$-z}B>CdTYe6L_lW?zoN#R<GUwG@aE;S
-z2bORI$%^aVDjWlfu*lIMZXeBpHYf3Gp!IUCk9i?4&6<M9yaeGD%n~+?u$D-@R1hUN
-zNc)((>X3X`yD^GvQgXDW7=)=sveic_xHDiG`|&Ht7;{cYf>8}e;2<>TI)g-)6%(hj
-zm!mxO$wPuF&SatHm6Qr6YI>mcZ5(!UE;qbb61d#NugIl^3cHL^46dz2fK?YgAqirv
-zmw;!;7`!@_SuxeDOfE1|P6`}!Oee6oT|ydiPDla=J2`Ns8J}6tWQI`;HX(4fF9vm%
-zlr<c#HMEzJ93aDS#TIRi{W{t5nSsOa#R4t4{j~5K@r~<P(x~G9doaTe$=<k*%xbQB
-zM=2@WV^AIgH^i)twP*}n&NULwdEvBe&bX7JVwPAmEo;CxKW<z{Mumri*E1=eNNml5
-zipVXBpRP5L6C2k&V5NGNj!ZBP>mMueSY)48kvX;+F~rr4>!jCRkq18o(dy2RV}ga=
-zo+sRKNP0FdTgHogmGkD}y?1^;_?hwtV1=9D8)HAaR|KO7-ml??!#{^;jWu0|WWqcP
-z!+g!Ul2@Z>aj_n@5r;ACD7Yn`!6i%1f`)q4{)t2VZ@Qn}C6z>5_ZUMc8%)cV97eFN
-zp?(GcrJ;TnKf8u{=A%V3-Ag|6h*bnDk~GvW6IMh0s$v}K7Zu}BFO$L?sXWxHM7kpI
-z&{)qL>eqlV4E5`X;)avuKO!YN&fuHX5U*cN!u-N%gm7rL+b;-<H{mLsrnbe!hI0dN
-zdbXAty34dl0CbKKXpN!PmuMol+m~Pp)Y5Q3E9>zkm}f<IISr@#5}^PGy?)}(GzaLJ
-zh$v5k-k_kiN;8Ex17}X8KSU_3;wUIz4ulNDU><oR4AMvHq-X%~LXl`)pwsCk%q+M=
-zJ}8@fAfB*UYJHP=W?2<_vr?9>FMjyklIE|vKm2*&{;&?TAKtDmwGSl^(dCD$Sm7d@
-zkG%UXgeC6o99g-=C`SYHENju}O9)&HX2&i!cICQh3Jo12@$e<V8Utj_8j+V-@)6=l
-zy|)W<4BI5Nd<-k+atzaN%;Q+7Jcg~Kltky~7HN0HxF(k@ieI{*n0)A_+K2|iL~Z2Y
-zH!!01-bZ@$&SQwBQh$#<!{KD%<IQa080{9`yB+6r;o}KXI?p<uyM1#Qshsj0{)_bD
-z$5qSE+Ab$Qo5^UbeM%mU(04K!orII08<X#7-sqr4VZ*=(RmST|_v$=ql|SugECG3(
-z>?NKac(WD``7X4XY<-*>u55MS_a2DmE72!RRROjcz&1j-&d_Ho*ebDHz04(Rj8^nN
-zim_|bzZwok9k6|dc`r>U+JMYS%fut()ob0Ojy4Qb9e>7Zi#Lkm&C`l=rD&1>xIEU&
-z#8iQ0`ZO$>uJ#t6EsD>dR-8<z*`l(0v9KivO)Q^=MLWj5#n+1BY<4F)2V`P{0L3jl
-zdlagUPJw0nG%Olv0uy1?NT!H`EBh#y+6GhI)j+q3GXZ_DgdkqOqbF1}dsZ;F>kTig
-z?q2F(NdYHi$2Uw+j1CFv;<`qzf$Ux^HKZ*XKJQqzE@`S1b`rcq$QjgKP9}$(Ul9e9
-z`LqnC!z5hUh*KK+&Rvygo2W1E<HRk*Q#a{r{E0Uca0v)_f@%si0sjt=#Cl^Ky}Hy5
-zdD51&9nUHIgaPg*Nl1-u?)3LceE6mn<Y4a`@p=f*wS|}@9(_e5CP~FeB6_cG0KGcu
-zeh@gg3q2n^2J{sjK%g>o3*+GPy_|6@9t!OR*N?h+C;PqTz)!-)bZ~KCxwC$5ptW!3
-zNIm;aRHn|6g}h&JUZ|2?>XTLSeMn9-)@SHq2U<g}CEBj!82H)aYHi7`tF^^RCeKG>
-z>&3OTqhMuHqGeMEf?kT2h1yz;bWr__qqde9sJ50B(=-^~N5^;@La0^XuG+F}x=4rG
-zB5<sSO&0V8sF)-keb6f=S*o@hcxxS`yK3uSLFqwNR6n&BRJ90DA*oRn^Lh+>U4l?m
-zj_E8K1e~?1=1Z!YiMXMvJPw46L!>DNQq{C#esdsMS+lC9ttu`f)v0P#deI{UQ3+1c
-zBMdP~Jo;QyOtMt%Suvr@QC+H<gb4*zc_<!eeU7ba5+zPj74v#jwUn#Mv20lhmoT-s
-z7*`RsE+DK>(paPbRE$GOBMhXZQN?_nKGBgXpwV(;oqFc2o<#&va3{6PN#YBu03|3(
-z;)i2WZLyWrbNGzz27h>GZzpg#Sb?GY*H7-_Zu#v4x99KcY@DNW^(HzH+CM+*x1=fg
-zV_`kMfy#o%vu-7=DbTYH@OaoXldYd&+8L|zl|}iJJRPL3k>Bn``*{(lS+r-PhYvLD
-zKppE1jXT0|S8207^^!H}J9P8*df0oPI9O|_$?I5xvv?n4E-u}lv=BhpL6s^T4oM;=
-zh6*ghj-D_g(@uMtkj<KjvD1o^i3R~m4oAU6(?vN=w{@O$)?uoaiRq&FjHC53kcn9W
-zz_I8RWwF4rbQ%_I<%Z(2JoM*lC;+c#9YJb4#3L&BVXvoSbQEvf(R%*E!vFYAvH*{V
-zM<Xt6q6@%L-0^i2RF&-#M{;p3cs)P$+4Op7{PKE!1$`NsBdLQi!E!YCK_`>La`L}Y
-za@)`v;;>{h51>Gg)A(%~r&d!uXi|<%rExWdLm3yiVf$!_bO3^GGL=hLR48t0*aP$p
-z;J6nMH&L{Stio9N-v!#RxUz@nK<gaD4E__uTaGLuDUYL5WgMNV>QbGms?w*i!R(rt
-zjq{~_0K02t{h^q&g;gLzp;8e9S>if+IcdjbT)C=P<C1E+#&fwk+WA};{niG8gCTgU
-z>RVG^;LRu2WuX7p?w0GPsLdaCGWjjLTg$*3T&g!iUDOi^%H3Kj@@AbEY=Ieax1KMg
-zWm}N+X{L@fy!sLcrg4mMmsWGXtYJG^Brf!E2)gVDXVjGAJ0|fOdf8X*F^17-Nic>P
-z6b{BPi|9b>gJ2akKdUOxGJ)+Tea94%Vx=*TT5U3rF-$6^7kFR{(`2c}zYfM=_4q*`
-zUscNSN|vr$J?2EW@}cz^(6KRC?DCM@qA)$iaJyVxDmpA14747hN*j``?9le8bh4z<
-zCb$SHokVn?^*)ZT={tnRH`by`M}Rqs&Nx&$Bx0Ph3@et6Q6)*Zw;wkCN=|UMN(GF=
-zekc?1I!SLR#Uyj0?M2WT1Dz99N@03bO53#Uh9#GQ)-xWNl@3Za-od<xGgc?<_>O>h
-z(Bvqh1FeVQfkTrj?ML3CCXY)JGY(DeGmvo}DV7Z>SQ+-O9v`_|lLE%0UjUA3b5gsU
-zWKP2S0CLn$)Fg$eYVz>A!RI3Ramx;rPVTi18)x-vhg?par+VvpJ+6WI7LhN)l$R6z
-zP(=Q~*`CzY>L=TrR1P8%HNnJk9HZ1RNS2eLC@cn6Xk+LR*7*w?7zhp?Vp4qZKv(*a
-z(<gu}o^X!XeA>BdH?EZJ614=LECOZyLiky8unPhbYp<Y`F%ck40<T93#Mr?L>rhP^
-z)i&USY6p?Pw9ma`XzoSzId!N;jcPNZ>XcA15nM5;!qvN>RZIskA@F;dx|5-sVo$i!
-zjD+Vj?+))@`uxovhDWRzu@dO^i?oL1+~;VoA~D(ed1m?M*)F4J%m9$TO}89jCxo?&
-zopB0)a5cc`r0$LJrSNmn;Tg|cVhfLrIKXnDAw=05GwM~<H7E{Kh%l4j;1^a*=OvR)
-zRteg(34pRE;KHkeNeAjQZ|GuZfIdR`P~RGt+1Z4b6zsRV=1%aq3F|s7O&-XRu+XT&
-z6ht<3+7v`)TlW5QEPDl(eMjrvWAb8iFS+kImg548n&)Y}uxG#|ARclr>1B{P){8sR
-zQ}i-yEZe=>9VxJ=&78)|n6Y$vu`~)SO-CE(d!`XJY-w>EM}vgs!+0nT?PF3uE{1c?
-zC&Nt{E-a~@3^!xAFbOHa#dF@X0vKQG6=IP&R_KzWCs*#WvBZ@VweR4Eb8>~;a5FLu
-zjb4)v+~UWT{Oy9y&PjA|3JqBolHUXT9<kxo(_~?(shbt$M^Dk=a8(N3kH=q~4YF*q
-z`+ZWtUV>UFedp|TpT|iUyCO}(cHvC1HzZuxlH(-ohn-AG%E>Jy$B}InxpbZpM0KvI
-zfREo`C!3azZEOW>6w`|7wxMF4MB^O?^a&A#3Ssp!FEpDMns*^}9X@##3WaMrri2lP
-zT;L@JU<G+PWL2j~XOdMIPWv*@2ES+((Sg=Sv5yK*LgcWYk2Hu$s6cK-Ea90XBtdz$
-z20eWXs>5~UhN6HxDuz;l+!Ue%tq*}5+%R#CiJ?@effZB<9QkY%1)D1Pzo0HTxj+ek
-zGP~)s7fsJp(J{ZjnaPieIK~2wfz~Tg82&=Pl(aR%!nmlQU+q!;!g~(VWAQ|V-9MTp
-zP3bM2XWYc@@e>bz867yvst^t+qioRA)`nzRG4jk<<ISH)lBp4%k^oaff!;>2|F`V)
-zMW-(zaJp62c9YU6ET_*}8rDxlEz`r(zC}`tx{wPwL~!iRBRH7DmpAH#dF+{kqeoF;
-zRAml-{d0@yI2DpRre&c21fZIB{T)tbw@{vr4?^-V9sm776=aI1<NZb62b>pr1!ibE
-zew&b%dxfa<HS!lu<KfJ}U*Z?8g(?UK(KYoFc$&#S!Vv(2^%1=<X0Z`N5BVJa4tGOB
-zlx`7icQ>>mO4w>5Cd|mlMLakg&dPSrk+d2kF1VnBQlWkBAv)0d5u1b<!toW8BUBJ`
-zMI5J@0b0W*x2UGn_4;$Ze#E>;Zo442BXZvla%k1!8dub$Le0e?B!OeW&7xpO1wZJ5
-zGbjO2X4iHHvnApi0mne=OaBh*-G`Twtu+=#59sb-oxkwhv43&Rz>;e=cv5$uLa8tX
-zJ;m<8$TMTjyMsWIsS%!%)O82eNqf+$8A9M@Z<XmPFRFbsPj~&aSw9i=z6GR(grpXA
-z(bFB=i;uR@f(70s%wx}7eRuFMS5?(^@&%bk*gpEH$7E$k)f>*-RoVyhq$duS&_x_B
-z5gllK1m78gj=I|ip@L>B?c+!dTh9ifXWJ&#%94dnmql`m1-T`W`!67e_93qG`R){C
-zfYB2;7Mv{#&a2>)(NCdZ0A+S<``9SSIumf<Xtz2!zsHRmp)8zw1ro0a@fRA66sQ|z
-zmi*NAp+dNUkFr5ev3(eMW~_Pp2qc*r;VDU7`;dll(4LCM2?qpjA6A)PLrgW(clxoV
-zIir107d`Fcd0vXG5$3UHuD*S|4TD8!ABbtg`4P5{T^sDMhhiVztF#a1MZ0T4PoaHG
-zB0A9en*N&hL8wrVmG;pwxjvKg>5~dM=0$R21-XXEJq6@o=HeQsI&B1#ZXX1W1xJd4
-zqbm6AE*L<WUE4m6O6_Af;23DFqcE4B)CRT&Ss3qbx<w4}SK>=qiB7<ahtu6j6-tH4
-z&}nQRMxGgK-aZ0Jrbc*5QrAALllF#Hvx&g%z$$BRJAEflKejYyv=8c{r+xebFXYw;
-z^Vl<2-#*@C@14S-{wQix-@e5@Dw6yFSDnLItfW%swGdiKJuw%?(;5;F*)W6h!OY{o
-zAaAWB1~}bAws7yIU`uf%am_z6U&?lgd`(kS?Cl@E8Rju>$!8U`RvF+t5NK%?avzb1
-zb6OzfIYdS{_OW6u6Qg*n2)_>QX8XmGrEPFq!PcIFY)VA39l*(Ab`h}&nhWuC3RM;a
-zZWhB3TBhoUNW*i!ajkaQRGX&SiBz|9s%Gm`oJVCu2yTe3!c7Ae^7M`#f?YSznt)oH
-z3br;7L@^mh9S+8>4aQi?c8R(=Jb0fqTryxVvnL~IEd!~lakWIL*RC_dp%kGYf_P0@
-z<n`dZt8vssMihkCm$Mxa$rb^pYFt9(5sauR2&ybrq545~oM;fHI%ukPd$W$I&PJ;9
-zIn}W;laJK@&4>^*iLS!UbMk5|J9*TXwLDE$xT!INNUYBqEfWr<2vwo*TjJcC58=6H
-zEKMjeTe7^9B*MGrQ;0kgEwdn~vRH-c6;q{ygnnR8L3lDcn>W=)q}t4>ep+5sMugyo
-z=qlXs__!NOMaz@c@+euMmd6k|MazT(1wvIQ%t=D;qNHJ%3y<Jr4a+-BBGmE-B9BDN
-zEC{MBR-t;6m~qa-TK1qD+>&h6R0ku~p`7Zj!9TUJI3q&PB)SSW-wle?GXJaGr^0^E
-z=tOd5ho^3Qp6UoM6yR?T2TAlS$bNOE621sBk+Kwana6ke+G&E1-r$>Q_(nzbdnb?M
-zKV3h#RLqwdPug$8ZTB%a@mTI2Mwf)eZ?3DNf(I3>j4IHhe#zF?@`rcZnv9-t!vOg^
-z+=xQB&G1v)bVKna7WZD+EZPuvz8r99!!J7T2sXeJ0!|vk2HHNlqr6?SYl20EuWEQ-
-z!sGZU8$GKkRoodMMq^oH%vjbPJ$ZLy!&vrvdD$$mbk4%EZ7h4eSau35yJumMXHq%^
-zS4ebJU^zYuOCJrO*hcfSkEzTC`!zHo?AOqw(qJ|+CGXdav8*-MaI{x*KAr0Qnn_|y
-zE^UV=vvK%n1IIG(WcK(Pp37bZ8_QOSYIlk#acTn{J9lTkO3O{*lZd`u$L*NUbF!>G
-zeEp5d|DTUX$-GO+zpWJ^+JC-c`j33lgS?4&>4-JDNvcQ5m^S7hh+A!8kKYHQd|MK$
-zMVqk<{4{C~1E^&2SGN4Z!!+v!Ux32fG>Ul@6OI+(eL^-`hd{AB54e!zjY7PR<)Vu!
-zqbrfIjCF^vr0I}d=$a?8cMvqf^p{x+ZzqILWQ0d-^dXE0-XJkQ=NOaD<ZRlU&6KDX
-zoXv{9rtjd4pb_t&a)Q$Qcu&|5&A-1fRcK>t(wvo(dO7nKjr@^;NT<(q++1`**TXt1
-z8lsLV(Ctd3%fDCzse_-y!cLmWh~hc@U_^V7t8OD=dlyX@P7Z=N(^1)@3c^F4IwSxi
-zDjmYC7||HOZA8N=NFy=|J!FZl-|Hi~eH=v<XxCGYUW`vyM$E(>g-!H?L@ZNO)sZw2
-ztBRlzrrU@Fhc6rwWq1w7@0mt$=d}9)5R=a2tYgl$OH>QacDgttXv90HoM=RX!=vx!
-zY?pc1Ix4Z@oOU^>m$NPDx$Du>@YZsBQ<$||Y$MuJf?s6zrgfJQ@x`%VL~-ry>)aD<
-zM6SAxXf-CoaB>jDnGPd5qEqNEz2Fx|SNxhs5cM%!)<<>>a2t_)d-X&{p+!*`5l3cV
-z;vRZL;b}mdlY)>GzK61+c|v?aso1ze2Ut|qBoTT!8|}SO!rN^`g2S0)dAYjPgQ}vl
-z8`*G<ob;G<CTGKvru@=xiL=oz&IlUub{mo4up3~`xbFte=#58k=d{a7y_}W5yb}wm
-z60x%{o6)YhjffSEo@mYK>j=t5bU0Gn;aEi8;n3k{A3mY`u7}dOg2YI?+tKsB!ddq@
-zs`)<uh0|T|3UOEhBlq##r}=$C__vQ9zHr}U7E6qIf9N;Kl0St$`&@PGW1GpJ!%DT3
-z3}+b$Xce3uA%>E)1<!YOqW6m{vm4`2?;uml-TI>9MNDxxzqz#COrNjk9N4W3*<ZPe
-zIRo;IcX%g17>@^h1pF<(=S!i*cXK2Opnf0|BOVYmv*&!n6VCO$dkERSUA^+#c_+tr
-z68MDKCQ{I(n&SB#`!OG#1LF{n0KwG4wR`U|hs~uVJOlUzAcDH|c30^=o`5J7X>jzu
-z&jLpn1S7+NjdJf>j!U^#`h~>$$XN@N!w#FDZ_J9fMyiy*1(bPoBWNlR-Ydk@N_rHP
-z3Srl1B}kp!$47HjK}Uwtx_rQX{Q|m0efV?lMq>z7g&9y|@LNz*HyZt{ujY-ur!vT%
-zvvk|JzKQIPmmzpJwwn9iRa7TFTFF&DUpd91J$MTI#V0UrjhgjD{b2OmAlGz!d1A4)
-zyv#M&YP8|pwx=xnG=dyyw_mwV0(j{>Qy*XS%q$r=^pmnU$|__R;jNEv9(2r)xOU6Q
-z30S<yY*Jjq^nS)FDc*%^F+TU`JEeMq5M3Pdo}SaCmiP%(H^gQ#x6GRgm<=p~g(Y#P
-zHy*~<ni(De$>tU((x-thwDv!oNDks756ldr;HkcJd>t4h1olJKdQ-mf7amd2tGG*G
-zBUX<kEI+o18Ig=x@2D&TRF4Q4zI37vC+fxjA50|A8*C=uI|K_MbLJb5lh2JpM<j)6
-zTU1~_J$cx;vW0M*ue8)J2(CXpT)#f^sP>;Q`$??#xJ%P5CiIfL&~$Ori#Z4`?zm^%
-z!wS$bss-U(oEYQIQ+ly8k&dIt4JdwRBD7g72kl}3XtMHs+VhttFQk{Ct4l{0(u+eu
-zqYw9=$7`A4d#}g@ne+|)&P?OWKmH!9o^{}b!$)*JdCe;(tV#6es*rfG-!I1b)w*Qs
-zEvh7a8H0T(#sYIud5Zz*T`MK{-C@NetUaH6V|*=ScO6d#_)<t;ba=-3WG|_(gTt~(
-z13_3enG&zEM&dyx8x{g~b_jM51a$^?h|4N=I`sOWz1mZjRXX%4O0OV@qNeZL%<<yD
-zj-$Pc1M%qTuCeU(^0HT8**^=*k+J000t;S_3oLz9$!TYK`w37ih?Mj)=%TQ7FRq=2
-zW!PA@dnFnvu#7r-vR=lFrPGV0QDAAFg=NxM!b#%jlIzfEfo0|_EVITEI;L;{D%CR>
-z=oXidi-n?P1Zik3YC&EoS~qfPZo|=DnSI^S3q>7b!wb&I!Wuf2Rdfr>=x^|$SU#}b
-z`z<xw8xi{v^sr*|938&#k_x^Lz<e$Z-RUzqYhpxKd82w4l@wkFh-X*jn)iNIEzQ&?
-zU?`K-g?skpqkH)Z6YmnCzZW7OV#V-7;|z55fm4k528f@&*dsH3nmdfm&HRuY^HdmT
-zj_B8iGZmaZ477f`AH!h!jt*dW><4L4KCv2K0L-QVU}u+Ai~es$lEjachg-bi&8~1O
-zPD@Ua@@zqQUX(kgJQ=z3+xJsKOFwm5v6?TBUEgFs$J)tH&i)Y+z&>d}cPi;`aztTh
-zYFPOY_MWehIkoF{Un$An$R-gaaX8r`*Pzr;5U<o@e5P{9fz#PcJT;?!k#5tLSv$R?
-z<eXItv5G)RT1sl-7mqw6IQVHSOP(t1W5^t)lwb*((IMl=;ghv+N|Voz(mg`6c3-w4
-zrz*Y=ecIU_FcHkUf#^W%Po*Qhz5rE?AuX!6q;a&OLGWm^9!89FIDq0xMS%7j2l>J*
-zp<zXY5dh>JK|D|%MRcI`Uro6mphm)Z*VdrW(yWIR3+H>fCJ>vQ6U>@4U_2@bry0MZ
-zFw160*zvNBP!|VzieeGofPn{2GAm|Hu0iQoCAFMwGo^BnZuvEyIbGEhUbMiB6;PkL
-zS^qZOD|p%k*Jw{=VIM>0>dpF}f<yP@`Tf%CkF2*oQVremE$BXg2jl8TbfERwydszC
-z3+qr7vt!M!5p&*KZ?mA5CUy~nS$oMXH|vg|<A>Y{4YSTy>R{Gf-3yet_&3n{L(Jeg
-zP5`uI)?B;ts)AOoY90khu5b47=vKA22CrW1(!P0=BG|Lgh7Tsk>3jUjjEY5g0~(VS
-zO)B<mIm73|^@M@#lUe}>7QA%dLG=U9l<l`=u?3C8*M?uurH|K3G)@O@w5qB-|0coV
-z1t2(hBBiet_OWNKIJj2g@bKQ;ZX{>a?XqQFEoAl!mid{qGLEkZ_kX9@QPe^}3I0f@
-zKcU%mF0Df|3MU)z2(XMwp9zn=a6uQnC@0G0q^Nk6$j>yD`Qo{>bqNyc&?maEwgHS9
-zSvL@gID19T2nW^(1^-Hn;w=pPis#a1+%<Z{595D$(WmBf)bV32>niog9059g=4P#z
-zo1Zls-Lf_)Ii{)rm#oW(oFXgXAS<CNvZ`9W!3%|Y7zi6p*{F!<4wsC75ye04(E+l~
-zn;W95aPt9GXr*5JE$a-xCF?9Ar^re;$V#XR_SXn|<-DOg3~ht}e2PSPxMvy>%X(y<
-zKDD01=NNINvzMFSK@t|=tLI;O)^EQ0J-k|Mfw>e`EFtOK0#;V;Kz<+Qs#q3@t0D3G
-zTKr~SWj+0G8NOjKJv@<K8k$J&8JtMI^v;Rog?IKhle_O6w9HsI<${jho8o%@3vk3`
-zgrlWDZk$h8!WW1=6Tp|IP;JT9n^bw@!)Pn+>Ggrrd8cA2$(_chxqO3lnl)BI<#zca
-zUcR}->*ZY7!J^Hm1NNN7g3b;)i?HaU)_X%85t)0xR$;mJGYOdY`&v1E(XQXG0W{bc
-zKHEw4Xfo}7LrXyFJ5F2bP!CqR6kcFiqw$B6HIDX9`{NSOh8jw7DZIe4Szzg$g=O1V
-zc49YCVA(0K?4E^X&sg%sn*z&zf#v8dEXT&u>E)$QW+?5dk2_7fgQ}D9eDS8>WvIY1
-z?C8nb9Wj=;cvGtBu>wouEG$i9S(ilkdhH~B<8!xDDyPXdR)S`fn9V9t!)6*<<H{1#
-zlJ_<J4fbFes{*W9VhrC^PyRdL*H!YKwPay+BDrT7YeP#|7{X$Z7Dm}4pfzCUYDU2c
-zH@-K7q<rK154=KT0le<X6{25uG9|&NrD9C}87~|eTBlB8)lLgiM|9A&G*$5{lM2c!
-zLJ{1$@oq03NH(}fim*Lb{vw}WHVB)*Sfw%etg*8ffZQVpggwpF^Fc2LTQnG#eF4T@
-z&3swvh9){5p>RZsfcP-3f;L6KbYxT-3!egBk&}Qk^-3&GM)7^LxcTyqQI^lVKAOeH
-z!&#!TF%!Nb4+qc$H62abBm9NyFs8eYAn0txaG3z&!!qGAwqGX;pM%KP$aZ33%zegy
-zHZCS0I?#Gkzg&1}2M^*PjcW=B0=cTIB7R!i5hb_HqVMZ9jBKkDGeK{#pf@CXKLL7}
-zYtf7Yg)P-%+EzV!qVMV52w-5>{U}$gT5L6u3O|jRsHGtV8DWGjJX*eq<jSMvfQXNl
-zGYTfe9Jn7gMx)v?V&Bunq9aZM+X)JE#{{e|_BwstrI($)ioofiI$2FoP-+*fQ`a%6
-zBzsJnGSqYls_7(}WPl3yq+7gq12ywT&cSoFGDWM;SEg>=vghezC*I-<-+9L286=8e
-zmu2flL*`AQ%r8LVi+2F+vFs%w-O^<Qf4l>WMBCsMmd!C3zvz7jnN|#!2_V(uN6?n2
-z;VmwK`*S(DWiwHQp@LnY4VJx!=s@cT>ImA#ESI`Rl@ltEt627^2o&#|+Om(O`DodM
-ziS#xKdYhv6ML2&6%N~UO1BHrZ?*NxAdymXuo`!NI%QmgBbP&(h5Ju>NWsiV`Zp&T+
-zM6hf{Y1w2Bmc1+P<Cknn6}>ot;NGtyu%!mN`^wft-|3VD3hYy$N2#3N5pvaI6m;H%
-z9u><bV;DP*5JbzK(c+XW8!=taymiYyQpM`oZiv0-YTl1E*=5;_B%S%xVCH4aOrN6a
-zvFtu54@Nv|RrKpudtRLPuIl4xtKfWJBn_WyZi^a@cZs8L$Jqx@(1%9;pn@e74wk))
-z=s@eG@cnx%n^2)TDwe%wk=G+iTlR*kELt{UR2uZA3wkr6cg-tv+b9t$ywq>Oq?V9l
-z%U(qcmOX`XCCfIgHZ##@6B>mGBXq&CSHVKJWlsVkShk{EW?5EYzx;w%tc{AfsM{t2
-zn`j`orfjW;IGrLubDK`@AaMFD5nv||L6mUbppS-0i!ty{#e&Tv1$x5b;QL|D-BlUs
-zmoyxcrp(ebf|%5F(qxh3L$vuaRf!lLKlYJ0KYLItWtCy5WBtadRq~l#*?&p?t<F)V
-z;Qo#UXeihkLlD_v9L-`QS`#|nQg%xv^0llo*#t@$ku1RvYBl%^`^&(nHILyEnMbp3
-zNB}YsJ?cgh;y@dI9o)`Vjr(iv20g%UdAJX6tz`Xx(_+aWA~vOA*9e7)T6r|tB}Fhr
-zdKGqG3Z+Af+X4t<ZoJ}n%)3(^sIw2bp9!`|0BjL`g{@yGh7WM(!NgleX|`$beR9Vo
-zrz1qH#g3%-OpP%aDS}<ntFZfpuI+iz5B+;<S$yg$t+cp@a-Rt;?wT#4udww7S(P6o
-zjQy8Zk<pRPSc}^zB`xkC@|bjMqzEmNUWMHquyoS*Ui3ZEBldgYBS-!MJGu={%CKZ)
-z&7QC#<&#z&eQvz#Gvi&~BE~4giJ+HoxJ(qL*kg{?FAs#neLN1r1tuQm!AYw<Os{uw
-z?jo$DU~E&~%CrIkHx=W9Ws@$3hIVN?eiQgY@(a+B3Z<dY_yz#NI!4#Ia-A~tK&okc
-zaCCiqy@|7M6UiS-JMc3N;CJ4_gI?MA+C=gP0-(Pz&`LGB@aRZ5VX4oL4vNc#MF_SO
-ztytPhSLDcG=U5Q=W~)<6A1KGgQ9`8pmL6L5sD9}S^Qk_4g|tbe8GC+ok5?)mgZ19g
-z&*c3~iPZa^|Ks-jxIJrqzV1H2SATl@7mwTX!~O>3th%Mg`{&2|=acWxKi)q-?r&T<
-z@{ILye*;eTjqzQ0fedvZ|8f7B+IZZ5rb(P|Ug9zKH*lDNS3)ow)RgLkCpc`k<-3QN
-z)#%+7Owumxd8UD96YvA4<i~dq?uKIkoXj~tOjvMnD$EDxJ#lGZWu%y|l<qHaPkww6
-zf8GJtTn;o+(bxoyu&0f!&Vq<0gqp>nXxyt<z}Fr<cf)Luw3_K0axaA$ScxWHS7LVZ
-zQOw#rZEOtQ%=ht~GKWpy_Xe4H1b0Rycm&rzl5PvEN1>%xJdz-)VS_lI+&NX{0=(&`
-zm>{O0lX_Z*yJhLzsv*L6(R|<NZ~6Heaojaud)(g8*dDjH&(Qg>$L;O${_U|mk65)g
-z^lp1Nm7OfS1?z=fpZvz}eS8AEA7iZw;rDLk_jcuXr}BHV@_VE5d%f~|t^7M(cnj{P
-z`q0hsKx+kjaDX;1IM$i8J&GM+Fy;vO9^Nw#xxCKdTzn9OC!TnT8OO$OUaXmX7(W*c
-zSnAd|bZbS|Ik>*0;m-@E7}!EG?op?32a;dHAisR@V(j6k7vGYfpLkm@lk_H<37O<5
-zUS-m`{A!5?UA*bk#b@c$yj514z!q6$oJWupw23L?_z@87Br+%P{G&Yf0iNT|cn!}(
-z0w>QSh*f!ZE_ogk94>~Jb(@VM)%2@859c|!M#QpV*&Xk~6geu7`ZIFt`OmPUOrH64
-z0uPkc@a%1S^4tepRi2$oo(D;nx3Rl;?$7C0c|I=fO)?IiNdPO>#1!?+^5EIX&GR<~
-zo)MhH^EUCxHg*xK^6Xsl%+m+pxzo+_9#ZS|yp!joK3$NmkN|ilrpPnPgJ&Z*&u@l;
-zsb`poczyxe)O(&{qkb<gx2UMT&rwqYJ~zM`;C^mZ8s}1)4(TQrx4Wg;%sH#pz<QpO
-zZZVD;AOT22Oi>z^hcrfRX?`9i&Uq|52DI88aJEV)yt{H0hrInG(enU@FU3OaXfwNG
-z_dT3ipfBjZ(HK@iykPNCAi@I{e43((7c9cl6~9c-?2a$&;1Lo&U2%T%S^U4gfpK@d
-zHisu0`G`e$r2t*VR{<AQjGp6>t9XX&%V6datE$+!RPmDFF79@#coC`f1~Z%I#A}-?
-zBmfl?Q&cg_Llh&oiob(LA+hxqRLnkfnov>2`hh(#q~$7}dv}eBd1R+o#otBH?2eyC
-zaJGs`M7{FE;D##h4=Uz2uW#9kM}>t}+(4|VV&_uDlY+ar->u>%QtMSbmgmHeU;B(2
-zcD{<7a9%BZ!pJKA1f+n9kAjNH*$8Pz73&8sYa%UI@#k;VsQ7BFil0Q#?2btUXRDY*
-zsN%y{;^~m*eDdc}=8M6e-q*3%N&VX||5CIoZ@>IIl*ijISBR$m?HA6^KgQYEBB&Jm
-zCCMDL@Yi@(1HmPX>d)oKK712z&OAI=c^^Yu^~~pJwRnzJ(yUl0ebqDBdIr<7g(G+(
-z9BeF9uP3xu_Ec&-qpIgaPiL^eC+DIY#nv>2kO~w>-wG55-wM<*Sgt_rJE=@@rx&Wz
-z3$@-0wb~1{*b6n=3&r+W;j3AN3LjI&J!0hGYyzt!RV9=bYcN>s=6>M6g%+_KHzas}
-zKi+qeCz8_VZ?V8afY?lROcTEvNGv&##aFD*s0NYe>Q2jVd2(R}?<$F$PTL9Q;8%5c
-zme!Ixf2VOqjTyO5$%2=8q72<7&fnu#nX_Y@D~SdA^1|^tvOa%q&ZddRt48MRnFVKP
-zbQ)t$<7_=g9!5ueCz>eZt1f!qvdr0jiL;|T4%b2_VKOF}v!yC${~JA`OgdxRq9b=2
-zXSCR;f{s{P**0ez{<Vpq%-L?v4c^+%<M^<(Ib)JJQ~9#a&J~<RckMLJjzKtbwr^gJ
-z6ts5zYY#!0v+bN4T<Of?@zQO^By*<nWzJqjkIXuYPT6;0BtTOcBB>j?CE=mL7bY^_
-zsJ`~ze%M$Ch|$r}BS(eGqrSGqUwv1<jLs6X1E$0uC%-n<clBw912L07|MB5B0?4pF
-z>-y|-c!_PP^&S+*UDv<!X2swZ4jq2U(_{J{Zk!7cdxw8`@V~<p>xbYsozkA!|3y8s
-z<AX$+HsFxIf6?DA>zSwRVu6i39<ROXLW=clf4ykWys~@nmlzg;uAda_ldeP55Z)FF
-zWAIWl^SsbnUZWc0>nd2oy|y(EzN}*9<tlEH?Lx)MEL3b*KVlbD{3E%F87ow*bg5V|
-zs`#70{UcZLEI5i9;|K&5&nWPsGd`n;Uu6|9<!XiJoX6t}j2V-x;z^<@nX**83JnGo
-z_Xic<)urOXS<fzYn%3_kaBBL4b@k@8g-+kqr@%gy8Z~=yS!(@iS*~)Z)~`Q&HY(46
-za3z9H-vD$rTgD2VDqT8Nj5<98k99h|?eL)!#-RJ-xfVW|##frh`3TQiS%Wj68dW}<
-z$Nf$**kzJ5xUgDP-{DK?cC~)`B)2QsD?PWz*-y`NdtZ#QaJl~Mr+Qqjf!p!n={G*i
-z(Ts10b-xG3PVv!suTp|{`C~fYH;m2=rnd>%v9Pm&AlZ5t|3CS3U+uGC-t}2Vw@4!v
-z)3qNU#x2eU&GUwys|;}LOhT011EYXb$9|*59zA5Tj}FnD5Y;J9c0O<wIG|QMG!Cd0
-zPiVC_X}LFPwink-FVu8z(o}EKSTC;8UZ|1Yq~YGAzFu5(SSm6e^(O82CT%;Z@Kw|B
-zMun^)l^N)*&^gR5FBOj9@2cO>cgk^tMasu_9*GRAgxKR+MbynKAoRODSUqSWhfj$6
-zRSHcX;D<3Wt`BBYdEwG(1lG}zd?EP=9!f-iKZ74|Iw>Uz4o)P0f*A<z801BDA(+is
-zb409CI@-_@q`D>ZS0bTR$YsL$HnC!Qd_$n<bd(w1#OnGmD=wn!0^D%P+t(2Hsm>pN
-zGRH7KaFWD_nD>OaJ*L1<F(-O*IjC%FlR4pi>@+i6z6m(0OqGuCOHQ)55>;o4L+`sq
-zWnnpCQbG7$^Dh}<%4uX+Ym~YyckrKK5NXCfAa}59Yg{($8XpF5V8<pD-p@#VIZ8FY
-ztAo*)Fot(v@*3aE58#)o1FK_5&TIS#KTzXrBjp+|=&I6=MM9U9`y^Uebk6#7{z@cN
-z<3of~;X%bTn|DoOsv{(AQbF&pp2x!~YJ3o^7_NAJX`uCU1FCUmq9Js|kLI`NTetZu
-z*<uUEul`sb2C^wS@%d=O<ux9VFg4b=SdAanDZczCF@cWCLXBJD;nAH?<J2`q@Da(1
-zRSwtq9={^(8jll~+8S36=o;s}ol1>Q3-^iw)%c7ORO7x_5vyZ1FI=h)?4~0*ukl6v
-zK#jA9E!TKK*UeNUx-R{@jjz^`P>rv%hzhSMrX{ji<H|&@#hhx5H)D<A=G7(u+{S+y
-zFIqt7%tYl*vY;21P{&gu;3;gPXWC*7h8j0`_<&em;{gdvM|iOcS5N45waP7+VuCuA
-z1+rFnxJMmoeAY$CaH);|F}@EQYCKK|YioQBVufD40SuKIKhoWc@Cjh{>c>h@jrWUg
-ztnt3Qa952JD6jEB{6LL!d@k2`L06SFWW4M~h8+#P`UrlRzY+=6_!!|-cvLYh2@4dx
-zx-#*G9&@TSzF4a9CIDRHzl#+!>fANHCy~PgjO~5?!fiw4>4Uqm21AV-T(_0+Sa8e?
-zNLV^1iB&ApkS|<%Lf{&wn4nH&p~kK7aPvCUc%O@q;Zlu%5??$GH6AD0wKcv6)<cc+
-zZb)D!_Uen0c13~O_>vM-<Ex6s8s|+M7cNzYzcH5A_!?kP<Ga*WX&f);s?yetmo>i8
-zMPjp#glc@7a4OtUtavpRHLlEXUAbE09k3#<(Z+XC)HVL6dPTvnCgoR2w?iF^fVW5B
-zKgaT@qEO?r1i(W=g3D{%sa^LN#VTgZf|sbSaf%6aR2FJ{$=Rz6l2GHzP9wvm8vk5y
-z9cnx-VEitZU&HedH}r0U=hc3~A@dyHQ@<G@%fhUGgg*N<Z5?`ct?Ym)y!ctnu9aEL
-zt_|z$t}qjP6|j3I$e3n=cX0tj>6!^DhM6FYe_f-MuBsl4_t(!0pLp=cg;xqo;i5$_
-zV_qSvn6d6{r7OO^#g3~%X}OvWS5?ty#*_F}W5xu^&3FtyV8)!ql+C!HD@z<UUXmDb
-z6dhN%*oKX9U1;o~L~G_T`XQF^;!6<4CDB0$*NU)ngFWj*LJyvJ6_iKScmwd}<Y2&~
-zpRg+<D2}SdD}r17BFz(PgNosZfA71IxwQ)#_mTvfTf0+*Ad)rTCTs3&?V~K|%c$V0
-zp<k|(VC^kd37!<^szzZP4cN%RkQQL&xyEIr-z;1F_@d1nD@EA~*I&Xihi>!52U&cm
-z?wU3VZ0o-4=SNkNY)s|y#X4mcwr*H2_yt@44d~mp&RAjVN|&uG)@$qEfsVRv4Ww%8
-zoN)(RpYFBwDI{S!p+H^srV?c99Yv$9^Oj(Z<q#;h^$q->TSg_6y6l3k%yrdxY3pl_
-z($;4fm5r_=)<Y@U`m(@u5ib~vOX6J$;aU-P;hC?)gGYFTfwn%2SjpD;6INveWm_jA
-zfG;YbtuHA?Ti0?$(ryA#wB69N3mSLo1)AHsQ-vVHn{SgfceZt^0k*!OpuMS})e$=P
-z?BOe{b+-Ps@YF-^-jA6Hm-O3RwqCcMH!0jW&d{}<r_|V&UtB7!=P9RH&odwn;RMV6
-zR-m(GGger((q-9-^;-5Dz-hf@mwXa1xf#rQ_s?_XM^9u2Nib^#GV4*w<}Q3p(P-8U
-z{Blinc_IYL&3XhsCX)Mko+e*TD2U3Y2aS|AJ>)2DdXH?#7Kf48LnhjEKT9Oz@u07Z
-zVYf?&R)ktej&eb}cojjNGu{V4$)NcY25kgogC-&v@38_Jbe}kYLF0Td-Y1Wy8BAGl
-zX=b3@l%1-g5#Ah|Af93bQkycRhbdE!;Ky|lK3W<~xnTx+yKQf2-}S>Mt*!Qa&gAc6
-z%F?sG`p&m%ef0+roUo;>xh|?~3gd@{4n~R>KzRqH`Zw@YZj$8t-=ER*_B;mjnY<7C
-zIR4YW=PC;?t&ih;CQp8#>2L%{wkGiZX75Q&o>%CHiMWAe3p<tH)svQs-T8Ir5j386
-zVU0%=N`!Rdpn{7VKV3<1ppcY`cYX0>?x<@!AO4evH|;sGv$YuN@Z|IRDa29Ao-f$Z
-z12SBxlhV9vIM2y%oHGgiw2^6^adUD6bmc}R4<Ec&J{y&ruQqZ6xZrFGSryLug;T3O
-z!Rba<Oy7418TFj?<vBTLOaf;{rUQiLj7Z>L9*h*6#Z|Fx&ZYra;cVYiSq>6Mjt0(-
-z^NC?qXPj`G=bSSpfioi$B6CJ0<m~(57^azY7FTb&Ih*O_Ow(1@=8n+E;gPfNdY$Ey
-zVRY;bDNE=6z?qS0R&CBSg$HLJ2S0(cxXRGY8NKd`&eqKib;jv)VP~5sa<-P|<eV`H
-zoEceo(wKHeB-Gi93(n$f_-@S@{e%SGLk)9-)n<ls%bo<UsxVw4-dDP|u;lrGQq%DC
-zgg@<3%zc$v%m)nXIYscAeh5hIH8ED~f+}5JlVaQj{V^C`y`S{PavK?6tf+LJe7mw2
-z9Svr<gkSZQJ)7s`DrFK>YGf@Ua%B@qn1CI8mfTR8;*-D<-Oz9BQfnuu6=!*{DI3-n
-zgutJ*f?7Actvn-gL9IA8P9=I<SviFpYQXWe=!U)u1+7rV3WX}&iwT6FLSJ;E<Jqmy
-z^@>89;!Qoyq@zKhQ}|V{&_<q<E0jr4sFCTYp%qFbQK3HteT5d(9~AoRE`{y~h3-S4
-z_%4-Bn~VtoPMz|TR@WAGtx%;#JH@HrLZQkj6ly?h@dpe2CqQR~GFB*5=~Ad-R45;o
-zzZDDJsVH=a9NR*N9SsT{!LNFS4(2(zLYV}G8kx3ktWY8e3bl9n!T)f}-sJ>3iXQLs
-zB`A;G`)3eM-GNE?lRhr_Ce)ezMF~;%C$4?0kt}??>O!OoA1^Lj%zd6kPsaBT-bh2Z
-z`0+3*mUCVeay%-Pb1sG)h=8V8&iVR~<6gO(^Ti>@z2e+6>uU41!xCd;5uc_&ZvY*G
-zQQlf6qi+AVfZ)d}2!1Fa=tl^yzpkEx+jG?%-d7^;lNpEq>q+(7bu#1ib#?m&lttZ6
-z5k+_1^87fS7P|Iu17};S@8O7@$Lkk$h7O|3Kt2QYd;9V&)$fni)$fn|d)4nef={b{
-z-}td*pvQb*8NEyRzTVmMfk%2%t2#fJr^D1e8ITXvoix@9MW4M=kWP3diT-mXi4Jik
-ziLP=b=@?3=Bpvl8?e`|_^(O81ChhblZTBX1dXqMLlQw#j)_arIs!4ta*Pn)~PM*F6
-zohF=1T0(GJi}5YKpX;N~>B^XZxXUoZn3t$#6{QcZ+YX+-%p=jgTxpVk&qD|SmNWkx
-zQ=Do22-k5MgDBrb3eUgj<L~bQV__~DKLDl^&fG@8WKV^El`EZ!Wfa=9rx2^5P2|4e
-zK8cu)*)W1Z*TS@k$mQ@*sB*TZ73iU1&@}g9r-~9H&D44RU<nBay94xjy1vxat>A4y
-z)hKx1=Oz?r4RA>4wX{8~s1$sp{Ugo~N03+}q+q$cMg<SDAkJ>MJQaM5@=`Dfbtzb|
-z!T*qgO^OO06`E{Q0crOmRzsV}t>8WYNWqNcUQL^bqJoJ7lQEO^xf1LRGcj%jQbH)$
-z)N=*DP6s@s;5e1-R`4E*)hKwC%%v*|q~L8ONWnXbO2KQAfkN&gRwJZfqk=nv-r5zX
-zvfy>3NWmo3rC`BgzNsR#V3VSP_mr0HNP5!VL_!U1BDaD!5R-x#fmjws-&u+ZCJrdr
-zWXoS>$`wor!H22m3jRWz0tpsu-)o@Nt>EK&1vkx!0x5W22~zN)qEhfAqgvruLaate
-z!A1qo3OalpS_+;*iWE#jT?!T~=6EVX1)CHVysWfrKUeS!5^87@xfMK(m=w$i6l`JI
-zL=+WF98j>ywhiC|#nFN(A^0%$T)}O4W<kMmVWC^W8p!emth^6C)?tVh1yb;c&`ZIi
-zib}zKj7q^{h}8%w*r?!PL5G(brQm*~NWmo3rC`Bg{YyotV3VSP8%p!(e=lDlp@ue*
-zTfu{fNx_Uj!4{@XL{Y&*%Gom6@c6!88jcF4gy6%}a|ORp=R?#*#PyLEp|8Mcfn^%N
-z4eiHqa6!>2aDg4vCIe4Ek9621Jh15l?AP?Zq*qLo9WZ&7PLokzcTgrLqt7}#4|0ap
-z27a86{t2*SK05H`7GrQXzvSR&zzGiwDC?uV@u1j$!-0Vt`gm|)b(lP2n}+<wdwcqk
-z=*{)~-rkE_bnW)KZ=e2Wxs%n~r{7A@?2c6g@+VKdeYz{fc$oXs{*&g)-KH#OuGf^8
-zh$=kFEmPi9f=s!is7!fT6xkteBUWQhf{muUA!yx9!E~IX-6~RK%B0t2%7RT-L{_7n
-zNzs&dgeIed>1MQ!gc{mJZc|=EOs32T#Ii7Y0Y92DaiFg-+4581d1p)sVUMPsn{tAg
-zD6D`>mca@bg=mWek5-@`{^&?<1uwi-V+H@M)(S2VG`r&m5S(oV^CTRcokJ}vtD$+u
-zJkWY}xuK1(nd$MhW`=JFyM4_H0q$DxR>QT0Wj8CO=FMuFLb4sXSt+w<R)+O^1Yw!y
-zK_GRrVyvrKDND^tF*mE3LZOU8plPxd6{;WDUL)3csr$3OuSTK2U#rmLH%g)BQQ~Zc
-zl1NnOf5d=Lw`B0dgMSW9!aUT0;dQ7Q2dAHSum>P?JHR-m1huJ#qH0rv%4eHuB35J9
-zf{krzRM5JL6x!4fQq-nMsH;s07IOp@;qYKmY*Uj;3$H+t_6QPcXcM{H)G%UdQ;a|?
-z3)3c|*rtdBZOUZZ1_&>>2N#_Zf)7*A+tf2rXSfSp+{40a4+M;ruOB`Dnpgg3FV<B4
-zpVU_VU%o+=e>X~;UHQj40OUUPt!O&IFX+dR!1d>U(AApimP?O>pt@YD)YzKv90=Qv
-z*PoTcpT3Z1KwL8l?dVUqq3q!aF}0)r1YR^eG0VdfV`@j^8=--3z~1(doGVd3Ffb7`
-zwxH|ZTcgBJ)GG0337Xw;6T#U^B$3#HrcPWHAMa{G+chm{iFhz72_0L|rV>0VDe6&4
-z`5KiFtFhva0Kyz>Lq8TeaY({X4@ro0H6H<D@DMzk&$40~k`%*pBXX_Q@vDaFs(^S>
-zXbmxsM@$MReM&U89pd14q@Zm%Tjo2ooo!{cb{O!{7u)Ec!x$>BVJs3NwjKSzNQAV!
-z+CT8GYpR`>WqY4$cn?9dJNg%HrP@g(@a2{9{~M)m@hO2PiG1ZLf%7Pj)zhaCP50_4
-z)=h`?0>_eO5O_`C-tu`0X|=q5`o@n9(%Sy#+;5-z8W?AALndKqrIr*<nEBMr!Iz<F
-zhy5S4O0I{OO49K@vE+YOSE#Kx#407}9GqD4$BUAnUMb0;{=||G7A0XEm6Efkm3(GV
-zGR`+X0t}b{NK5tmvGj~_AGNX{tJJv9Ro#zOX3=*WwrfB3p8#pt?LrLQceqTgbnkW%
-zg1cSccS1*b+u`5OtGCO~=&D-~={tB1P=xx8?%(fr$z8W$YQMU=VXD+9ch`ogawxR#
-z;Tmu}-!T2ETw=xwiIpyi6{Ez<Xp(i#RhPu2-O{i%7p^u)VtQef9nIhFlDKY&9s*;0
-zeWH6uQ>nSc<sD7s6cQV-*wOr=Tw=xwiIpyi6{EyBhjzBarR~gKiM=H?^}3Tf)~+q7
-zZ>Z~3KlVN9RDS_MrBe-;h1pY9`cuDWKR(z@o^WRv>G&qgz*Fz`ek8v~i!)6f*x!T~
-z>hSp|EttkN&y{_y3?y0*OSbN0ubmQ~zMF^vOju9&+6S_?p*W6noe*~26At%-*^zL%
-z2txdxD@X|GM5>iT46b`xoQO|a3<3b(=OmZu3K_bPymum5ITDa|<BuI}1c^HX&1-u{
-z&AT2(bL2AWh2-}D&t+45e{&zt&*J<eY-$dU%0+zmW4trL2g#E0@Rd=`Y6*?(HQae!
-zZ)SL)HTAc*N;m4kC|SdrJ6RL$)Cvnv1SKn@!op{CF0JNguDDgo<B=-6H4@9B(_<Vw
-zyHqx&!d|ZT6&1_pM@wRShESQVp2ehXsH5nt;f&#T%<JUw)L*%TlY=DampS;n8tAip
-zGt*8&GsT)_+)MB~EXHJtfSN&5QqsZasxxN=<%hU#Rn%FFIxkst$1?J}ili7{Q?_<3
-zV$ud!EsMH_-!X4JkLRK?8=^ADqOv@M5dCgZnPg0v_esj4K2`m<M1{~8@djGAD(X6g
-z2#1`yYjr252=CvbZkCc(!D?C5CH#(}F6Z%FRAxg|=2%pghp3|8Eh>|usHE6ctItr!
-zEm7?j47C31EgJBsx^Exy>lSq?8Vxj|6^l$`WE5u+td>Qc#qXFmpT~1inGI2yV^LWi
-zLWq91s7#8Y%Ec(v>fr<~vhT2HUE>U`rF|p-ZwF2GH{%fq-KoZXu^D6^ybwBzxH7-?
-zoVEL<jq)<B*M4#9#yL%6);R6E@#ZwmnBxx<O(HgdH=dhach;b*_v1G5ajZx1F~uVK
-zs!(t&n2F_sQ4{GC$<`Qub$w+KT?rWtl;d@E!o{RrVOTMuGjFC_{8)B`Ojx@ysozNz
-zwPJZ0Wc*=!@u<%;qi>oPbzT1NKDF)dS9$!S7h1fR@wGu&rU*^l+862Ld)dPnE%40T
-zlQ2LWake(_mg}Fmeh$Bm=ROxh<1uGA_q?x}&H)Gz$$OjE|6;iLKmMQQYV+Lt`QfY1
-zd-z_(L~=cdj7RGL#Kqeu6U*Vdy5CnLy`yIO{2^xYbX3}y{QG@<xAlRxD1r-9TsV#x
-zL6%>?!v60i1Wz`=rDpOG>4W>$8i&Eg&E{7=zrXoTDhU5>HlMZ4w-`xiteMXC2ZWM}
-zZ@E>^yBJ^T{kMhVcZ~p1rCjcB)WA2>7eTadA8Mx0gQ(9R=3e+s^U(W#oOSU$>L3~a
-zWUhwKrmF9GUwZMA(s|mK{9^Kf<{N*Hif$&q*1UFouzBszZZ^OC*P7?H<st?D2mE}d
-z&({y0R)1drJAtlQ!OuJ9r3r~_A;zpkrJVNu%cp72Q1zqQK0X8ZPWNA500(xLJ#3;~
-zDLAl4?%Vbig!j|htN4{{eNx?v9N1k(E1qlk%*I)cEArRbUJ$M^v?HsvWH_=*KpdX5
-zQ5C|GT^89b@__zMj!UXdRE$&PHeDfOc4XHDBu93`(FTUaZA61Xl>J#I+n?P$3!rl<
-zz{TX(Cz7}B00vI+UJWIx%aryEw2QCm!M3;IId|Y1;|mGn8}OXh(f6#myu3$3BYT-X
-zFFfbvde3>EP-&aGP}$Tq<>!O(6p=?ue$3(0Qtmnb4pfgq%1gI6hM6wzEO9(b!@FeR
-zgG>4K-@sgJJ`!st?~7@Rc^al2;wik<n-O{<eJcUzG9o~AfkuZ=nVuh>uycV<Ww@Dq
-z>75hFOYiKTNM3knxK@j98pG*e!De_3I3A!UP9S8Z-<%vi_)_`Lw2Rz-zEy$kLFl>Y
-zvfnfVTtU!W;MqK_DlnlTFahcWCXHJXn1G>PP8axV<V8#1=tbYEz$MqREbvq=Tv5Z*
-zd0JIqLPKBz)Co))w<K`kRL1w7PpIL4DqmUxM_>B4ZqcM?!3=tZc?4yFo4Ig>z>|4e
-zRbWCxU;@+$Od7W&Fad9+hUHN&fm&^&4ec$=NJ29xdDLTMGkJRh!2xF>c(q|uxWfI8
-z_Ktq3AiQnUi8nXv{Nw4!Hn5JOto`FZa}BHu*_J5?Cw#AdsC)z&+7n=L^!7sn46om}
-zhxx1ae(<v3!m;$saQUUmfP|?PMVgO-Y9Fb(&x??I=AZ(pWdnK4W8%pR2e@M;=&ZpY
-z%RdhtKDJfs-&OpBua^I6;<xNQ7vJmnjQU&Rs<gfZ*PsDY!2se0qiRYP-iCqu81>wD
-z!sm)^dHnC1#$LzN$!m-lym2wkDk`1Y%&)_B&p=piMAdp)xluy&&>K6mT%)#J^UQLS
-zwdFWd=OpB0`PeLqE-CeNHw|AlqNwb%go58@(*42l@HvN)s`OQd57Td`YB3#un|ALm
-zt|IrCld$j{U9d>3Sn-j^i||cw6$W=NYaEVr;cdAS@qf6zQ?T+bA{~{vRqXkRU3xNf
-zJ~H_laB^_nx)9P{is`2;*j6i*dq8!B99`H1M(a>+ODqFIZR=%xQFo_<>!KTo2T!9X
-zaPe)q8xUA#9o_=V$7=o;H!3V2AvuyK%lyrWsK0L&S(X*xc9QC>O;oW=FUuxmmj5Nk
-za<Ci+^1$-gt+BjsmNzRbv!jdT$+9{=u}mY6EHe%*lN4ZxDwgSG*@VpU4UWcOIS$2v
-z<&j%sdDkp=DlG4m$dhIMwwBqRBg<;r@jh&us7_|tgv|2a4J>m4$3@3A+w#z@vAk`T
-zw<|1nO618hf1Bmu63dK3%OnLDqB@yn6B5hbU;ei5JZT%G=U)FdWb3(k_2GLk{AYK(
-z3qfTogi9UTUmhf5ync21{_?et&0_wtnJhevuA=(Eo$592{qDOB3uiq$U%mF-eeENi
-z+e{Z8?!H7Yhb_bLP0XOSySn;x0cmkBSaq(KVY#&$3+$X&;A1d~^y0&zDdq*xH<nh`
-z%M^Yt6mUbx3+$a(;LV|c&2a83f(*EfSWm%wVG}Ps$q2gk!hW~T0QO!Y19&HbiUFYV
-zuRT1AYS((5Y_jAJoWBH*U_>54c!oQCX<m!2$<{Z}YCiq%4X~n%7gV!_PQ`H6E5Db!
-zf9sT3C21O*btU19zuMjwJ18_k_91CT0g{Ut6S@Akum{`Tl@3yihKnVHPTZl>%rJ=$
-zL*d*j;ZYl>AHDXTYJAuy$tG1a9P};KtRL12&A+W40pn%1CHT??*}*wY@W^5q%1$OZ
-zFIw4*NzO7T8xy_{fTT#0ao%MKYwKl_-_O<}twj5uIzh_&m*F&Eh{sDd-IV%Elo%H!
-zeqOP7ul(Sv3NoS9oJa=iBXnKH*D7TCN@N%}84Ot^G95NFOB34KrIV!TfXoKSY*xr{
-zkdAs|++;S&WZXR8F?CDL^RMcf=XsRn`5&U_KL5kMS<faly+v+T-uN)vBp<rI_uhYa
-z#(5wfh3GyH6nuF&?MKiL7v+rg(OKIAy48Rd_YH-9DTIp-H49g?%W&xHu2I9j(Y)?x
-z15?P2ybj79uP2#0n6_C5z}W+FdOXIGd=E8^v!*6LL(aAK4y}+bYW5@GVrP4&QQIfm
-z^s;-X9Wlq$WJsn~m~j_1TQsQ^&8Y+sWphhL-_=9Sj)qo6huJzzZ6t3rC1j}<zI?=Q
-zv<@Ir8&fkIuMBLZ=TWTiNz*$<%}qJVN}R649KY>GL1*d!GzFX`mSlW4!Q>>F+s>yV
-zcm^KpnSn_7eq8wQotOeJXH0{jz69lS6{1b%%9DVu`BwM{9cM2p0j`!+pPGbe6@y&D
-zkF$)r#cErLU)&Rcz?5eu#-Pu29oz^1zUyGxK<g(hgexidhg;ILAD)2_@G2$5d=!F}
-z+a<)PxYBp%qLV2hSOP*UD!8~L2@D%OQD#L60##y%1mwsPxVR<wF^x&319G_pHtH3d
-zxt49A?gnusb8A6@nJ59Fx+I{P1Ab6}kw^lTfCRG&F0M)f!v;z^d=MpYanH?CZRlD8
-z7q<i-(b&`V@JpzJ9TJHTvuvp)=MtdDR~<|NMuxPFNS6fc79fF(g>SvkkXQl|Oe?@l
-z7*-gU%83I-m=z@mRGkwZhv^3v7q<joSxDevZJ_mk*^1VM&|5gTfoJrg4mv@CCQ>EA
-z8X{d1Y#QFh!afisU<pVtso>(KBrt5CRQ?E9q)O~4OO9LzE-nc?tNB;ocG8I1Gppe<
-zLOrvZ+fg2)=I>ATjGFnZW>qZf8(jMSmb6^;Z--#gaPg*SdWqU^vh_;-IAefB{tkz+
-zGfr&*Y@J{T*FxAmK=$<AV^W>^?uMf$tc|H+dWuWY9%!aQarVE6+Q_=PekQx?pQ!_g
-zUH`1W>V~y>=9t=|qbD%C#M~Zcmy6=6ERR!bNUdR($>At^9YADuLtu5I;wE#<Y{$_P
-znB8V>53@T(@!e1yn%zURhFK<?+5I|z$n258Dub#Vmt*Fb**=;hRMSI7<D>e+9%kJa
-z%8J~h>ka{X^&Tu?ZX{o7qz)i5tFZ$kaj$ATcGzZ5Wwy!OGP53&(eJVWrfzwXf5v#|
-zN6ZG4h|VKgBLI`7?GrwZ%dg&!@8sLBmo{@R!slo`(epAG<_O|4aE1YxU&ojnM8|D0
-z;{q(6tQTWp;1v#acJXWS{u&YP?*j}7%(uQZA2vYZbCdokqE9>qC_PRGwT#FNvQgPd
-zz60Xa^2PRrB@89jS)kW{@Ew?4r5QW3d@=NpT@em;it!cN7{u+@FZ(Wd*fJN_Ca4$Z
-zB3A)4<PeP{E>Ek$w2e<&$c5YyMwv-2`j8~kH}oPAngXyWC%uKupHcJQMYaFnCGxf;
-zJz`q%3(~vsuWVX+HTJx+*K+BZ4OOv)M#chY$RQd_zc0|>c&xae&`hEveSlGBA$>nf
-z;={frB0+lP;2CHE<Q4DKb{YQ2#CH?~s{IG|$WxQ_afvoazbHVxNrt*#a_LE`FqvD=
-zrJpyt4Fpm802*?L#?r4F1wm13%L+8mm!uCc$}FTm*6FmBJ`{;Wg7nJ4$pj)R9{G1_
-zy9{rta>Y?utAGbn2bbj|N&4s`kpLhXVoxuMu%YW$w0s=Mhz(uodUzu;7C^_GLo}9t
-z#wcbL_{*yH`byFVm`TDE((hY(9^Q*Yg7nJ4J#GQyb?;Q2p^WgRDhCX*O_?eCS6|Y+
-zW&f&K=U@HA^W|T?2|;C5BKTL?m1BQwYZ00)zHeID|NNi-ycG@XQ9Cb*QRdOZCo3uW
-zyEtm|h~7_oHw3GHKkaQH#~o|=Ei|uge?069&6S=Udo5A9HI|e0S-1zrPcqi7)$JG8
-z8R~5)i;2K*-Q8oTTt0&zsK>{6p0h_EZ~WM#*2l7Gb$?+JFt?N}yaoRHF)Q}$SwM$i
-z0N)JZMhMqKxTdh|^T@y1Q->j!Y2VQk{JSIO_7p!ZihD5swB18#r&*dF$h#b-W_qZP
-zFxAef2j7#ZkJT1$6vdm4o*+AirDEqe4Ng&;)rF5_bDu4I^3lA^24rVBiob`2{KX!5
-zwTsRytZiR9uG<&j3RlVtDR>H!=lL?6=j*-Nk}kX@ZW4TVGsRUqxqQKk4L%`Ob#Olh
-zLqs8+?=6@sJBhoj<LV}}96b%!>5BEJ{Rh0-cyNhhKE54}fSX;X6R&Q{?|@jDIDeZs
-z>oDff%T%4l{nz*&@xd;KTo4ak!s*1T+w0pE;{0vmw7)WO{;qnMBL^=D#O>;wA$fJ9
-zyi+00-zH9Pw@lpLuiRz~w|&T^+Ij4bl83(Sfm7?ey5+rDA<o|>&URlWu6_VtTp<9y
-z?S=rvJ=T9+<D~AhXD#J*bzSItzDZr^DuVj4K29wbmO(nSvVN=tg)L)ry|w-8wT}(f
-z-+a7X4Fq$t<HLS_e-a^_vv_bmp5K=ArSU7=zuSYpu~Z{pDe*Cp6E-n;f#6|u&D$su
-zjva3d+%>)y55Y_%AGL;0nsGX}(kF6TVIJBC+ukn3oAZl24u^1Qp!LnLMYxuP2*`O~
-zPyJlN&j_gPCJP&Iw>NX@VI7;t5`LWGr4}!hc!t7F77@i2jPQNi_J|Vv(PS>O^17W4
-z509^gGI7#1DoFHR+8>+9?hhx0@;NNIie)5RtnxUUMD;BCfSgciwtM(oFe-VB=S&3e
-zgl<rG{sK(cUJVbKhdZg+m80`7rC*6&6O;C>AyCs7N=qGq5>bcSksg6UTnpDVWDb9b
-z*D+4tFAMfH3nsy%dtbM=#0$G8m>DcgOMyPv-if|Iw7#zOKA7Jkj=RrFiMSe*_{*TE
-zwjE30{b7u2>gi;dYWcXBkz~i}9mYGTY23XG#+zCn@hTL}lU-97pWSDjG(I=P2a60U
-zHXck8H%5gba1lNTT=oMv;-0uBHHN|^{`gb7Ll`!_-ISi^!p^8@G{)XVvq(O4GpHa8
-zF&u2e4*Un84_UwM7Xz=q1A?=tG(R`Kw@)F8&$46qL;IsVL8EMc?$p`-N@Go2t@dzJ
-zeBunZNj3bro5eMsf!2R<tCp5<$<&NDyu!DZ_tcf1LhIk?CfwM-)Orq?kf{w-Cz*1$
-zkA<UTE*$TZ^s+&c|4nxa`t1#bVDF(*xB*oe$A>UF8m~9Q5+9XIR;I}_UeFZlp&QUw
-zhyo^alZus?M1Il4)z4UJO?tylZQSOuwS_}?e#av`omV~s=MN<OB1~;rVtY5^x&;&O
-zco-ztPa59md=zQNUZF((a2$Gb3-KvL+)9RiJhMNt@W%yD5}^hSkO*m-t+Gt150e70
-za%f!Mti&r?fKsQnRNyY%%#B}0T*!NI76^5st;rf54qgYoZ>fK4uz`5D9oK)vajX-q
-ziNPE<C`RHcIHS{x!z;oL>M{<q__@xXu@hY44<s%!L<dM~L@<e<=qP+8$;&vn2gG&-
-z-322QPq=W6L|^^sC|fhAZAZ}_OO3eH81cZFit#G@E@IYY2|#n5Jz^<+u9=<k1djbo
-zBo{j_;gdAzjMO`-bKX}WcFw9}T<bySjO#sl=j<*cKj{-X@mpEhABJ+gsV);Oef-Ec
-z0~h{Edti`9QeBQLx#2#OI!B*rbK?1ZAP#*dyXJw`U%_if_e3(d48ZKtyo95}G^I4p
-zGmeJ7Zx+95wJ9%2x*7LW3v?IpJJ4N1bfC2Zx?q@!2l;sgf)Yw3sY*QT1m6XW@w)Cj
-zcr*~M>jty~tv?dJaDgQ3v+6P!c<+aCOahV{m~O7m7M6jxbe_TYES`AqWga=mM$jfZ
-z=`s9l%5!Vv8Q2P7D)xt!sXbB`ftRM7)*1tJ-8uFxk08X3g3AhYV*(nV!mm)i>)KoX
-z7Qzt0!*y>@c>{+WBX^bgD`>a<ig7?0R4klA)53-dK&66?FYfLE=`cVyhhZW{S!xwH
-z8zMA+&`h2;*i3NsG>pI3-rL_SIRjl+LhdiL2;Qi1h}%&RUaSpE`oENq_wjnTn8r&E
-zs3h>!P*5KCC$e`i(R`L~y{B9ArZcTT&qRBqnl)iHAbjlA*?qzsMyh?6JVIc^enUdO
-zt{15F4#wfD`4kHznlZd7iSDOCX$r_<XI>%(GUXNU(tr}4_t59kp(8I5Z*gfjFt0dz
-zvEW9e<vfAckURYMs3Ix=y{**|J}#u!EHqN>6cn;;u1lj!)$(+<r$7w-|LmQ2d{ssI
-z|8E2YMFkaCENE0vEYX|LQ8b}f352HNCLy_jKuBVW5NxrFh@xUgjU7eZxHc>(c6V)9
-zc6G%Pdspn}y83&6&OA5w-g8TWqTk;i-k0*uGxN+d&y+JWXU?2^Kbo$J4L@EA&wZ}$
-z-60OX=1kcv^u9ME^9BA`?Ilmz7T$LfW74U`WcCG?^d=6m>cVQUM>}=&y${Yk8GU@%
-zhi+}Yj*8*`+Vx&#ja{TTZRxNM*W1LriXMHQj{VYH(z9qCw_1a`*<cAzGG~Wi{?<$B
-z-sz-QtPyHg@-q4AQ43d(w3i%tvm%@&-?{T>uFmeo-H+r<&K<RAa_3Qt#&vaePJXn5
-z+hWg7cz<p8E9*3{EL_}39Wb9S_v+WamfQ}a*r{~)e%1!g=gisO&ZaAT1EP07WAl3R
-zX+E3MBlDi;fxRflTrThET`N7<aNv38=JGXOxHp%-;{MFGDu}$lyRgaWHc5ddrOv7Q
-z+E-|UHM9ZKwEHp|m#{TcbpuIx<h2o|YBywQ&hvUZ-!baE;M*v@OCmf~pFxgGqK8gz
-zQcZdvrI|d+KZ#z4<?d-wg4?F%cstXl+a^usBb#rV+^E2Kt$E+3;%xrxbn2wY62K}@
-zlb^d<HK8n_)~!q~wD}97FOI~x^{>6=tNWH=ZZfdpx4~=LRZjvYJ-J|6X-~s7>+{^c
-zcrGvep6q8S!9sl(VWsz%xARLS&r+enTPcgDNwR%dcaYjMODX4*%1T+!pPf#<$N8hY
-z@IcYl7*<8Lx)>RD4I2e!qtmHhkr+q4u6&@k>l&HeKW6?6uU8f=)<uYYCH1}%*_#HF
-z&9R=nh0L*sGRF>2F~?48_N2^t@`~)+Yck<uWp+@@22`&Cd7li$aN}89toPE|CT54`
-zf!~`3Ox1g!=*@%KQg*+S@X_5`OxmI&CU1Aw^xJY&jfE$us7$^4w1C&l(X)!n@k6g9
-zF^;QiB`|~Ao>5z*MNg|eU3H|pg7){|{Q^O_+JY`<ez<2)V+smal~N?g@sqRSW>#Hp
-z)MaN9cr$C)h!yv=-+fz`R`0~1DW5(%%oSb@NzSg4?MEQI<%wsiL&TJQwR-f5Cs}Q|
-zr|jGZd)dY0`VK)h#pdeI@D%IjBfYx+o95ROKdskgvoN%h@!JiJ3)k@`A%6~IZ2o~g
-zz$L_79G<*=Qx_Al2L5$uvzz2L)2uy?yBIT=u#GDY|1j_}Q}BhToFO))+U3mBjWM&d
-zyU$}`uyW*ykIFgkl_=Za{+07{6J{8!yiw}U{p#?P^yhxHx`n%04-Xs~wz%LmLj1X3
-zP4#fBB6|5}RpYiqymb|C?1Ts4uHFFo=YBOk=+FIXuP=DJ^zPogK~tOC+hsm>3yDAX
-zt9i_Eu_`8N9TZ+&t@A4E&;9B@_pAThuhxTo?+bGN+^_y~zuH^0{kdPw4b9>|_p8Hi
-z32L^qb?Be_)!IY<bHAGJPychjI^DaU<pIl|`_;O!x1)c5?pM3Ju_h0H?pL!3q>Z2O
-zCQ!Dj#qG8KxnCWA9v!{A|L1=7$mXZYzsG*{8lES!ORHyKj9KcM3s(*0U*GOKPl8|Z
-z_UK|yzv|!+&+EMHxF?1+NW+#!c5GJ<Nk8;1eeZFv+i6I4K6O2c@yXo=j+fj$%}SPB
-zn}qSny=loEX6mUzCVl*>2a%TCtA|BiJ@ACm)s0G$>kRPx!M=$knJWb-Mx8BlX1x<+
-zvt)v!W<0`S=Wg-Q?o5=I#Ul5lQyY3mx}!}l*n1P%GqGr~nugq8@rDgMuIx?-XRcPl
-zyJ!J6z1(Q)oxtJAq?*S{7XHd+r{I23BK!@Y_VttQ09p7UvUjf3OU!-olVod8Sl94p
-zr&C9J&yl@whOcRIuKA3(>cBmP^1O9Ud6vA#S1U1q$<^SaB|PDDWpnS+P>@?TtRQMU
-z9{SW%wY;?wTZH54!~QRi_}}RH|1a+e@pTHv|DMi&*JHfjcx|Qsx`@nw4Dve82K%qR
-zi~rsOusHwiMDfDwE{^!$;Q3$R{8u>scX0j(JVc#sZL$74NBpNjJ^ydou=-yw4;D^t
-zr2aV#<E#J1aQ&YV@qdZu|0f!K+-ui#oDaQXtdgz76_2V+cu%QUN_nC89pj(m#ddiw
-zJ9OQ!^bpq2w4auD33j*RUCA}%mY2mM_pMS<+otY#f}IU>=X)6g=i`rM?9QhxJgy;H
-z4m(vZzn^%BfBjA^jx7Za=pxft1H5adfIrO6Vg;h2APQIM!8@+@(cv;3GX|ii{*I}U
-zz%!N0A7N7pL`6Y9Q=Jl-QrE*&f8d$Q=8v!`1!77;K2wi+G0`IvdP_V#@8F?lDu^65
-z)zeE5{)wkbr#TCJRL4JY=c&A8@$V1m*QlGHLfTgu?nkLMXnymqD4XBH?{m0c_~t5U
-zp7A^_Z;)T(x!%$NC+e^XMJuoOCH?Mc*N2hh>)fB&PRaj(Y<<GyZW!=#_lA|EGhWoZ
-z;ML5cRjQfhGdY^^`g;MMt!(#a5?3@;C7$uTNi#Cz4d%7IMW-qw{X)#Cd%F?98^0I1
-z30A}Bmu~oR!K>2IW*$=oyNd8u9gV6R@2u`h?=MZuu5W%ti!b-WqF;-!inh~f?({p~
-zc!W_3THwK6*o+;&BCloHd}UMMljP9p)a7mlceP`$OL{MWxgpGRXp#5L?Uuhc0(nE&
-z63<2VYQ!jKMnz<F;9ofvt<cjcs5W)3DKN6r-)JCjJnXb&_42e%r@lzda!s8ftG}!!
-zu3iqhxO-fjRkI?z2ZtBw>Tq9>$rH15Y<o^FTI_WMzKq55(EIubj#prFvVA36WQLnB
-z6}}P;#5B>O3%taOykCdFEpMo8afU9yj8*R}{_J#WH&^V=s*vX2vyd%Uy)KVC<wUr8
-zWg@P6KlWxgm8$vMQEY|LTL0H$w&fW*7cKLD8h_F~yc%}DyOLmrOW?mu#QDEZ#D6Lz
-zdWLST|4q*S7G~(|i2ox!|9d(AUs37=2fz~eFB5+MKbcG7C{M#}m9)Emau8i6dF(DJ
-zV|5iQ@f?nS<hk4nU)A8jy)D42X>wUtOn?3`-=YtEd4Ds<Pow`Nh;~05&^)JmS-W>_
-zKB^)GS4UTuU1uSD%zssSRA%~{153>-hNw7qEI*<3E}r%1ilyYbZpb76yfSr&WaGP;
-z_Plb3(>|J-$ka4vO6Sf!Q+fzs<#*p#Vkg)6a(}0(0)DhbB2(&3c%}2>o~fuq?CzX5
-zuitrx!(&WonZzmYjtS0Ba~>`3`!l+abU#>TD^TaEX5=SFF5HsKhLr$^$C_U~ZvOu3
-z3Ay2$>{I_y+kWI?PxqJSrycf)`#sQ+g94pNym)N)u2tKQJn<t*r))Md!wdD|=6y7B
-z?}tv=?2$*5OCa6*HxS4+hGmIAP&*bJgK&75F_Hft2;cbp-cUJQgmAjnGMug@hU+a%
-z>2JcU7s#8Lm~~z(-+1Hk|5l3fQGO4ps;jK27*kr4UpTk8Z|?(&Jb6xO&HmN%N=s@2
-z!wYK)%hE$tRTWiI4-74x8LF;HFDtC8sI5t#TUtH0u%>9%!1O@+ZiCW^pIlyDTUl9A
-zRTC;spH)~rE4`$)yr`zMqFjmjOfC=2uM8CtT~?P~Qc+u8oL*j9mOgJ*X;~<}wtQYy
-zVP$1$`ONgf^7QeQN=NQT7naqAT=HN2Z=1liz0y9&c=E&xbNBmkP0<5a-YZkt?Kk0j
-z3!*<AoxmIz`{6S5J_k9(#phc5Ft}S_leqW>i+`+rAn^ROc5(4*Hg^gWL19{(xcHzs
-z_C<%p>C?No^vUwCwD?s?@~_`Hb^c8j|9F!88+*9)-gp)W#QDFvh4?is#5Y-dvi4bL
-z@uOHov<ale<)7Wt`IjtxuEqa{>v+cm?H9~Qoj%***N}gr^qqsL)2CbfBeYMV^y&Rm
-zrw>~E8SN6M?|g9T^ywCVwo{9%zs45QueSIV^p8aKU&-jF57GL>*{^RQen|`Q4HloQ
-zeH$(QX%rIGZ+)I~Y$t~}{~9d*u^kepubk@=PDzq}O$+fs8z7UVU(!PSI*U){f9DG4
-zSTDwzMD3GX=i-yKPeBXul`X`lFL3tXOLBb`oZ#YTI>gog8jDXSK9T>O>s`Vv9OBZa
-zTYR$m$+q}Y80ZuAkJaZo!*-d+*<WYzw{FAu9Ecyk8?JTfllD)GZ<}oVxWT1Q);}sO
-zKAHV`i%(|1Nna1cCz<_h?b7l|W<S^Bli6?7cS-X}X20_-E<Tz4bc;`Bzh2+A%_o`t
-zCW}vIf1SlAv!AQ4g->C>(c+WYUv2UFYV1V)H~mg$KUw;q#V1R@M6XZrNtV9B;*+Hh
-zc<Z6$={sBejc$O5>;J1CcKPq+5EsAB;*<FoaJMso{WeQnKlM*L!^zSwvG|_bCAogz
-za_N)xkMy@w$Je(I-_$~U_B*NVH&}eK@-<p~|0MOl?vvE@6Zq7{KjK;@u6@>gmO6ct
-z#V1SO_(kgUt1W)Sww_*G{+(^eOjiDMi|@z!hEH7jf(|Yy+4x>>@o%u+Pc**QZ|%}2
-z?H}8wwx4bB6WS*p|JUu9+J5d%E<RcL3oO39yI*n2URAh%DtAkrzTV>BaB6Ys3-(Bz
-zzS82aYm@l;OxKU^@JZ%>(BikGe)z=YpS^$T^tl#4D#`c|9FRJFw#8e{@%ig#VEH8T
-zKiA?%C+U9;hony5Xz|JJAJ?^zK9KF~58fnk|IHnoI{yNTf4ptt^uZCS(`Q@!M@g=q
-z;Gr(P-G(^9t5Nq)rNtLIF)qHz;&q#uXnqWgcS(}9PiKoiHi>^rCcE^>{99x3wv37M
-zuYQUPO6FgK#V7Nx(c+V}U*ND7%4hM(+OO%z)aln*e6sdyDt76U)lYiJ#TO=Nza<u*
-ztbQ6TK3V;&w)kZ2mtB_Hzj}*L)_%dcE`2ipaxFfYe+3r*NRs{)ta0{}rO&qb=NbPJ
-z%|Et16G&SyF_1RDb6V#u+ILuj$?nv*e4aL!{b@dCpWo@)s`F`^4B6662TpG&dfBFT
-zkZY%edSy}ehWYhIoZR+o#`ygRU&{aWW>5Q8-Y1-I?#b=X+H`Tdv)i77w#)xfSU=DC
-zInh(*pRoR@lRaJ8)ly`o>1jX9`-Jrp*xi|Wm|ySgrt)_vdJU$heXf@5s!8h4XxZOo
-z=&dw8?SHjo_i6N}o$KswY3j}OV6xiv8}zbUp|>+*e$Q6u4MnfB>80u?`j&_FdUV7`
-z`(@rIT>qmMH@D|f;?mD|da3N)k6s7U)BahEy)kFCl|_~JUG!F8)Uv%T&|hwP+D}Vn
-zuQz(Rm$qzgI(q$0Py1`h?45#M=c`+`cQbnHuX1|YZ%bzHCG;9^XxZLR=v{1jw*MBn
-zZp^&uue<7YdCT_3qW7WM(|(-yNzlGE=v6j4dttRi{d5_6(^{eTD0<ng(EAj<o~D<o
-zUv;5wJDZ;N?PAIi)vpdhZ{>Zi9Jc;XSbxRnHJYCG@sim)3%zOoa`x<gAfdfG&|A_9
-zz1PrtvK4x5HJJaq<$U);ufOS~D(@upf~Kc^znJnyUFVu}M>e(G53ZHHR_HyAUe{LW
-zeS=<u>1kgu#=ofc-I;54<$KP*nWmPgpAOZv{l3#n_v;ObjB91+bv3;${CXyLhfAaE
-zrK;!q(OYl+Y5&msgs-=#a=eRP?)T2W3{y)~jxD$tr<tDi6JzX+J-MAmRQcB%y{65)
-zVLau!U^;qFnx6KzV(dlvcZvo9JyPeBs^8y?UVqaIUzUl=@e+FJrk5(;pU|7ORm=Hy
-z=iYCL>7~kdEPC@zFIB!Z=r!uN51&-!U54I=rk5(;N6}kjda3gL6ul1Hww!MluGwtU
-zOO@|I==C(cRQVR8SFl~n`JRQ|#io}k-#gH&H$Cku#`LSG@#Qu2R&MX|O=YhwkqxGo
-z%HDqHy|P2g_9mgX+VoP{I~Kk5JGE@@TJ)Ms&-OtR&I_8WW_5S=_Ofb8bbWk-UZv^r
-zr~8D*4HI>p@5~@I&GfWC>V3j`QT03&y~d1|%Tb2j#ipnI(inSD<H1t&8U{OisjiRv
-z(R-y8dhepwc}UClwqVgbvK4y0(W`HT-gNX<nqI1UJ_Wr7)3bfngzbB??2T!;o?ntZ
-z(|g2!eOR@teSbo4<hYjYb>E8l*Yr}^8;jm6hqi352EEm$XZx}V%exG{4+~qi_b7U6
-zOwaad6WaS!_DY<+RP$<=PF!!Mr+r)R6Ylp>{q!L8R#rHBsrqR#dcmVw&i5?zdYYd0
-zb7S(2nt$&=uW^3M`M!qUho+aR|Fvc9u*URkpEqIs?T6mV<6XX~>`g+i!Srn3H=(^_
-z(VJG^vb}53%Qijj1IN@$)Hw7sdQYC*vb}H6YcxIE7f$Hk&Ra8Ho!PRzq3G3{p7x28
-z`B#Qs{|j2Sw-mi}(+i}ye(y(beJkv}i(ZrI**<c@@@~PJuft_6`_~)2b(cE5RQo;C
-zTWRl<D0|wcjH$n<>+NRrx?bM0e=ngIFg@*CCbRbwddshB*<N>^9W60E?PDghHx|8V
-z%bh*j&rDd)HRx5EUZI&wG*2%>Z>8yJFV6df$DyeEibv6FG`&>U<)`RfY<jx)im?|}
-z&t2FQTz6~B<v0kv4u5lcH<`Ia<tRpPiRq;($64r|VS1^`aR+*prkAR}yoTPzx3%29
-zZCQ)dn_jB^vLAXq?`qlJB=kC)UaJ0bEPAip-*P=)i{3iZOVwYVMz8-WXD?Mfe}i7o
-z^itLH&VS*0Grd&(Whi=;kF;ElGW5<cy;S{WDSDkBZMhuxqu0UoQkCOf^wwFv+DA{;
-z@3+{V{_;<kZz_Ae(W^H-?W-rUcjB>Wfd>MCZnbdRO#*`^!<EP*;hviWGKRo3!ViLN
-z;Jz0B;W24}-2;J)%Z(F_?M2f4cY)(4a1Z1gO}^ZCriC9b89Q&+Io@Tgh8Ls-GG@cB
-zX@NmSa7TCu+ynjZ<~#k{;R)#71f_Qkl->zYdVQhne?2cPP>SBiP<rn`={*RgcP!))
-zb;ip_JN>1Q7osxGfYLt^N`ESp{?1VPkJP3GCLmt{SHUvK8zLDKP0oO`k+(JZb2ioM
-zkzaz+{~Npzxev@m{<+%9Wt?T~X8czb@zm!(jQ2p*Z?<I8cQHPHR9fIt>^=$Q|3gsz
-zUk>H}5m5SD!&A`f0Hv1(rT2QJ)4L2xZvrewZzPmn4wPOuD0^!woZh)`fAmg;(mNhX
-zZxWPV7q~6)&tpvWb~98xEPz463rs!`Vmf0tlYip*(rL(VL+P)A%aA9-iOAWo8{7eQ
-zq&_;sH2Uk$JombX@c+Qg2`_-Zkggq6xn7;)c#d(Dh~6OMK2Y`hGL0zxCB~3(7vtA-
-zF2&yhM`M3EWNhnpIot+6>Y)7I!{WDv>_rUP0<y;M_U5d#z&g^s2vuKaK-E(&l-<6t
-z3vxI375rglTHs5#4od%7n1SA{a6NyX3zgp~@F92typw!pK()g_i{A=<gZ^tJF28G_
-z(j5WE5`HJo9Y-NIz#U;VRQ=9|Y4|@4s(u4d^?EhWN#$=J;}=E9=)Yrp5vo4xC8PHj
-z<3DDk1r9)71v_KsHmGu)4)c*mLDlO}$kueX0Z{e29hARc7p4UYh<_NWozFMsLFF?5
-zs{YcU>^+9E?A-~~4!6Rt*lmFPmr>3?-@<WF_Ip5*W_(BD@8M@q{=Fb$#NQ27ujfGN
-z7eTc{CR98A@>duBhVdMz`hAb*&ZE)49jcygFkS>zPm3fIe}M7B=}x}PSZ3VSxCK=G
-z1)%(U_y|`Y%b?1C4EzpOz%SqgD1Uc=%IBBEo!<LU{p?|=es&Ms5qlRwmA3?{e50V!
-z9|YCU`a$)x9ii&utHWIU<52x<DO7#5gHwoqVVW!V<Hoz7$~{Fg@!J_UfhyMzQ=K1g
-zLHThDRC}KeRlX7^zemEa;a*VwZ3dP9byLy;W003XrpJs@sQz34)943>LiOjpq3kwJ
-zcKv!Xlt23z-<;&+OGNY*8y7(Nzn8@~<vG1OjpfE6#{W%p{ct^G`tSA`RKNZQl;71B
-zUj)@pr$d%S-41{+Ql35Fj<m}w6I{JEK>2wZ>_Yrp_%ApLz67(O^ml=(zn^o{0&Ds6
-zEvWonf@;U-;H~8Icc^we)8hXMUq*jFxGns8yi2zNsz0}b!_Z%MDEY%jpz8NtsQO(F
-zRlm9L7xcdx=lng@c!-F8FXJ9i^|=P)Dp!ed2dMF4OV}AZX;9^Qd5pWhFM+zgmqKnQ
-zx-EpN*AP@Whd^ED+d#GRJ1C3SK;^R#s{Se=mvF{*kpD8;@sHZ!=TX?h?m8$t55QO8
-z<xuu(p~j2h@Krbn%D>&A>b*Twy}mip>E9034ktp@>v#*_-}vSTSHFGWaMHDbs;BRV
-zJAMFFPirL;e}b{U@snXL{C;DFaXM7}<wE(l4OBgR%3%SO|0(z%_#k`%UIkUYQmA~!
-zL+SN}>Sx<P^|Q^O?0ql<0lmAR%6AD=`m><=+38UIY&KMV47T{cK=reC2fO;13?~!6
-zJ5;&<V%!v}+}Gzge?rEIP~{p0<wquzAOFjC<$D>*@4KM<z8L-+&V%yrFsS^$JtQqK
-z0{JnxHThfz2O(F(Es={Mk1w}7(zqY|iFDme{{G;!Kr!;`@J7--4<A5YVBrPu2Er%7
-zy9xi_AgBKhypHgfVI$%77G45xA^dRoEa7b|{G)@?0xJlA9X>($4Un##aW(9U%a=jb
-z!--J+D-WuieT=^x==#@NP~ne2wa)`^8SQhmg`Z;KC&0@IFS77q7M=|+A-ubVZ))Lb
-z@KVCx8|dsm0cHPTcp2ft;2h*2RK4y7Rj)f5KO5lc^$n=-HSj*laSyx$UI}l3r^2V;
-z9QY`l3OOH=(Fc}bzZ+akex0H2Z#qJT^g(IxVd8)4pB6ZW_)nnpo`L7V)lmBPLFwNH
-zrGGPAO8jL|ddI<fSP7*+2TH#XN`E>$iTE*4dKvIkm=2}C6O{heQ2JZI(~19YKd1LP
-zJQH~hl>Spt`VT?r-w)3seg%}?=}`4KAFAGtGG@b{sGm%eJHg#a|5IP)7sB6!s^6#K
-zuJA6ni1-Dt1bJ&H{h#|d{kNdn;aMpCmGCs;kA>3T7D_(=w?lrXw`;F8Q2O`66Nx__
-zN`E^j{Y{|s-|OYt^#v&X`{DV-*F)*=2&La1O8?_5*Zwa<=|2k3CjM+F{e7VN`4+|(
-zGhKgt7OMUK4i&%D!q0)a4$3TijB!tk-wmoCw6pLJg3jLCP}j+WQ1-4c)>(WFJc;;e
-z7Cz9z`#@bs+gSLQ2e|Z4LtQsdK=q3i7QWcR&w#qlLKZ&MxU0qQ2-QD+-rw14g0i<3
-zde<RjPcUOIsD9HGs^4sFY|3!`=6R^_tKfa;9|1Q*|IPiJd<m4?&E%K&b@CBV`rDa&
-z$v#fbh0=d-Z|B#e#`B>3TMSkIvn_m-vAf0Z3RTZP^>pdi8t;Nie;ZVNo^9cCjUz37
-z2vohLTlg<~IXkaHrT-UH{q%r^$eTj-w=ef}_4GDWeXKR!3Uz&5Y4QayguDdq$n|;*
-z)O=I{Wq&r5{r#cz_J-2y0;SghO0Nx+pHK8~dJjYC-2$a|6_nmGsPY!T5K%`!=?#I>
-z>j$Nm1yygKb$5CnLg}r6(t8w2??I^gFNNC@H4tiC-OJd;*w*;X9xnb}<4eXzjdvKY
-zHHKg>@|g(L?}k9t=Rw9!Q1uxw`McfI0v*u%7|Or*pz7~23%|$0?|`bWr51jMg`W&n
-zKSdTk)xsx2)kl_v?`h$?L6!f%ySZ|GVq9x{%6Ok~h4C_DEu4X$6QIgB7^-{+8aIb3
-z-+$9x`14TL$=$G+@XMjr59dOyABv%_mtCOr+Cu4l%wVVW#2fH#<lCV1=0NF9fYR#+
-zuS4D!HX{GLi_=>PrFR9C-YM`F<oWPf<S|h8+Ck}k(#`2T54HYy3_gM0#ZY?l;27j8
-z*p+@Y2daNffa*s*p~l56jZHhdb;!d|;VYop_j;)MKhwgiExa76y(U`tffn8us(p8~
-z@HQ6y^G>cmybWdlDJc7o!^_a03}+(m1F4#f-QXsy_jiP8a4pUsjo!0R^Y1_4D9ZC7
-z<Q61jg~bns8XvkE+d<7sAMW7Rou@(FPaF-28dL#!{MBu9sC3U!S^L8W;SBVaL+Q<h
-zx-JXhJa`yXzZeG}AgU+SI{J<6UHWIC(%%i0{#dB=l~CztLG_pE@NS~|L8brfFE0J-
-zQ0X6sO1}sy{RvR%=Rx(OIZ*v*I8^$dD6IVd6e|6{pweHeN+A4fsPw17Ti^ny{xumY
-z{SHw5V^gU9lLjf;pdY(9JFi2<Uk=rdwZ=)tUdH!OQoCfrEcCX7OQ>fhR{Q;To3y|r
-z?0yL!CjL{Xd3-ID-YR%JY=qKZ0i}Nxl>Rb!67h?m^yb2oVF8r>5m5RQp!CN=&D#e;
-z>Fo~pLhs(KU4Od`s=wU?)!$z4%>E$p*TLOMKMC@Cxfz?l9`N!`X@N7avji%?MNs*j
-z2$kQlQ1ks9D7{Wlc7EC_EwCD{gOXo|RB^^?*ahBV@g)#fGNwSa-+0Jl>2AH?Bc$sH
-zFN7<%bas}(3y>E=wf}Lji1hQJ(vN{^|3jeqZ7-;Py9ay_xiee{+d^HJzii?Be+{Z%
-z+y-U;3Ml*MLD^pnWxoK*{v@b=Jrb&4_lL6I1D*nRfU@5Osy)8!=<GiZW&d_4`!_(@
-zzZ%MZEtLIIsD6JWY$RwLl>LE_SFtnphqAvnJPG@oLixXTb7%iaDEs$A*}ogg{+Uqr
-zkB7IwD)=lxGob8`hv&i}Q1%ao>aRON*?)60cU?RU$B^y`sOx4ml>KWgz6k2N*%^*S
-z@2C!Gfj-E?q2{N4Q1esJ*arTD-Z$-C`1?@v@5}IW!dF4vAAhr{3x5xONcdAw;hR|a
-z*X_~*Zxj9>sPL_z?EKQ!^@Eq7<j0`e?NXB$LDh4C$rGUJWlxj0hfg5C)5guuYmBRm
-zHyJN7o?@&q78@rShZ?to#nj7}o7g%Js$SL_Z-T0q%S=8FZh`;BCLd|cGCr8*=FQWg
-z>VG2CJh`>W&jeh3HbT|UX;Aj&LgiaxJkXf)3rA9k?+F#ZoAJA!oqRIXJUs>~zipxN
-zd+vWuUIf)n<xu$zg|fFVl)di8AAWN3*Z+0#uR_JYXk2bQ0NzJF-~Z_BKM0lIF(&te
-zZ<F8lQ2BlKgR}P%l)Yz+R~w7hJA3=VRoMOJduOi^N-l#MKiWX$`_y+X{Cuc<$D7;{
-zsy|)*t<#$gl|Bnf@AGe*d=peZ%Ym}DnT0?9wbNS+m2MPN|7-fn=`Du}uY|I<pUEG7
-z8SwgLBh-5Na^soCdB$Sn1mnTReT`j>?TlZobN1deK5e|mc)js_W4&>%@o?h^V{c=3
-zV;5sv<2PTp{N6R*35zK2`B3A<DNyZqoG};by2vqkPxuk?PEhUs-sge9JIJp>$=AZy
-zkuNd18s39^82mdt1g?NR;6GqT_%QtbGw0X8;6eCvJCr}yLiuyKu@cIkLX(HXPmm9U
-z%D)|a5BbMWo%|?#6ZsyK&xiLR*TFkrKD-4EgHOSI;iGVSsCNGLlRzMZKQBZ1^CXl%
-z4;hz0`E#Plqv2=BL8yMz0cu?R<YVX04<7{rA0WR86@NF>b$cn4|I0rN1l~eE8!Em8
-z>N*<*6+ig{!jTUYiQg9Ly1DQDK;SNT6;yZ~)OE5O{2Od<;cvd@u8Y&*Glb8D(jNwO
-z9enm~An-VR5h{EI)OcJCRUZY$amInhy^LLqZH?c&WBtwelJPoNiv0yp>+_?a)=RUY
-z)=N8D_|_J_xrN{Rw$r~2dh07F{lhJMf`yN^@E_lD`d>one+;Ex2i2alVLRHh$e0Dy
-zo_m=5NK?RDS2aSdtImg7SIvU*dm=oJa_kRPUz@{^3IFI#C*KPvAfIINFsS~p8&rF)
-zf8E)C56b?NQ1&l^vVS5x2D?YXRd4`&m+<XOe*d+AUK!3<0To{k)t^Q{+23NVv;V`Z
-z&i-pq_E$jJzW~;e?kK4A<KP>F?``sr{|N-fAwLKee-c!GJOax8F0VNI9ijaH{AFkV
-zRyY*-YN++fWv~<Lo73REN)KhP7aWef{@+f%52`=!2X`la2PnHg{ma?CALbx8LfO3$
-zZiU^Y@OHvWq3q_sA;_DW{EwI1^)L|1?p{!KH;1Z^f4&$991I_TvU@k&61!K!n+cx>
-zWp_NxM($$r%P+X=X(W{0K2UbMLfL)gdCnfgr=jdV2DiX&Bm5`fr$X615<Y~yyUFjZ
-zao6J%D7!<T?CuF=_x<NMLknMpvil<Jh}{R^BZQw1Wp@sI9yw_8*U!4^`D&=^`5fc1
-z#!}-H;}B!e*v+`P@%v}&`Zhjqe89NEc(L(RV^vswn%@Y<&k(!||EEFS|K!0muG6vb
-zf0XY)i{An2y4@V=x@}|p_fzh=eF7@{9yo|{-vMRkVt6<CoCWWI^-$O0Oc=o45UBpV
-z;GZsCEmXQGQ0Yd)zr%x}uCE=S(tYs{mu`Eg{I-Eg_w|!5-3PFdbZeomo4cUWoduQO
-z-=1*kZh}g;2r9o5;Ek{v>Uua7D&2Na`E-WT|MGFC{~o*n{r^ZN{thVpW1#ephSHy^
-zc=X1=>);_!>!cl_^xt~S>Awc0zY0qKHh2rX4r-pLhteMbWq&Y~{vJ^J+rt&GBh>uy
-z{-aL+Y^Z*BjB%E6vT?BS0OQWa&5YkY;?lokTw`2iyvcZx@f2f?vDi4tIMmqN`0c}i
-zz-;`!9;%;R1l!S{mKgJ)=7(I9`#`O;cQ$!D<HrxVbjzUDpC`f3NH+`Wx*PztzT63_
-zA8rQKA6{7P?A-&E@86B58wWty+ZAdZ(GJSqzaMn=Rzmg9>!IvbK>0TX%HDWmcjLbw
-zaQ5zpT6bIxWv?2_zsXSjb_kTc4p8}jj?yZ^UlNh8;~(jt4%J^LLFo;IT9>3l{>%9C
-zey8^$R6lKi(mM@mol*v+Hwen!u2B8+Q<S9l0{=XNyb?-pA(Y-6sD61c<iCu)_($uQ
-zEur+@z1QhI4%HuTg6fBt8qYK?FwQm}ZX9hKXxzux4o=7ZC-(#b$1;As0X2U82To+%
-zdJby-zt7??gSVr1Hk95%_$hiPK=p$;7M}-q$8M%^7pU<+4Ql*vTIuHRXW((@T@O{x
-z^WZ_mp9VEA90fD@F9bF2jf2W33rc?rDE~g?qGc;B;{sSf_%Uz+ewIV|SqgKpmk+hx
-z7-RAK!rRc>1xjxR_&$1_p!(r|8Ppa34pey_GTsVRo^zqfQwg;mIT9X&USBBxc84m@
-zU!cm9234MK?{wqw>rnYT45hye%D-cw%F_ep6W$Td$B&<>1o`;`JQRChK&@}qLdD+)
-z{|0Y`(z_8hp?4+Jb+E|dtD(v>!FVuKd3J*;k1AW``HaS{L+^1Y|NahDp6j8?b1qbQ
-zPKBB$=0fE&5lVkQDF3#AD$kuvLVqRvOep&&Lal2TK#ji#!sYnCKa~G_!~4l+SE%c<
-zqs6~Xqsad|j8{SVe+rcUQ=!&xW8mi4>kH-g9#DRFg!20roYp+`7L@(JLHT(Ml>Z~4
-z)_3nwsYf8+3+4B1&|AMl`8@|-Pd<Nz^7}A&C;5zr8Yd34_-&y4e)m?#=b`+*1Iq8y
-zq1K1Tz|F8%0_Arel-~zJ`F#M?e7QB0{WouMey@P?dp^|qaXWZ8^2awjzu$uL`&B5v
-zFN4>T&)HCZFNC*}&k0cD)*Oo;4CQwhV;Yp-?=nfs@4Ml_a0Tpuy$hlIJ{ijIIWU9&
-z^5Jzb2g-gYsQO-elk<By)cSN7JPf@Zq3U~UD8Dy{^7|<o4HvpS0Oj{R@M-e-8+;c1
-z%PhVM%I~4ZOenv*K>7UvolWc8wXi+*9*6S#b|}9ugYx?vNL6MW1!eybD8D;G)%Pnj
-zhStBea2oPxD8F-{{2mD9_kZam6rtPaP=0>|A0wYPp~m&6EdFXJziW(zP<{`E@_T!@
-z26lv-V(&XDRerw%<@ZynWd3^)s_L(TvR?t^_kmD;cYs=7Uq>gHid+YkZ;3I_m~G53
-z{_`5Acen9c<GIG;jlGQN#x0FMUhUF<U_8Zml<}{|F~<JJ&#rRmUNt^pyu)~v@nGY=
-z#;(S8#;+Qjots43;R@p-sB>JMEdHk}o!&>re;cnho?|@LSZbVNeB=to1?u-|*pGUx
-zfweFfUQ75;sP^gw)n41cJz&%2jDy6#1hsE|4ODmyY>$7Vq0(i;eF=YVne+30<Bi4(
-zjVBvFx{P;=u=^yGKbOL4cr-kl@Yzsy4}<cjKUBV(!t;p#@lxl{KcK=dh4QBoDqRVb
-zKi^*B{CV5>obi6+jmA!J0d_yX*!i;>9!2_Pa6aKnpzNLi<<DQC^4$*}OME(1{d{qe
-z3ttW8&xKIw&Vur12dIAk@r91}8P75v04JdL$_4JaI2j&?{tS}`!8+ufP5yqV8>jva
-zSCQ^Ecs}t<Or8VJK^|>#52*3Dt;uhm&%A^D095)*;C0CJP0oXwciuUd?~fpU1+3&c
-zzXEF9xC9<T`ObkFFORYKBVZMJheGL%f`idJ1S<c1ExseHLGR}!PVWaeO!Wwr?^>w%
-zE8*_sf0l7;<Im@~@Y{_I#vaCPj8B~H^zJYYFz#u5V=?jg`GWC5sOxXIWb*B0+{F0B
-zSuT93F=U)*{C<&(e;I0=d=zTjyusvSjFaFsga_eOuoLV@es7)WuFt#Rm4x2}z3UIE
-zKh;6?zbq*Kb~Qe_(8(7VPcrUhY!BtnH)lA1UWSsdH68~SBOeAA!TwPGY!0j8o2Lf?
-z3kiP_%Acp9{J9#+pCh3B8EO3NG$%h`Tw%;L2BGrr230>gBq#ZqQys5|^N>%1wXhJ%
-zpI-1N*a21({?jSWpKqc3c?!y(lc27*JmZ#d0^v`b?D~5>Jev4?lLtce;~h-?<|KE$
-zy$E%E+zQVkezD23p!)L&lXr)@-qK8d?ZiOfYUKN%(q9PGuWL=tg}UA{>-i1{;?v-+
-z^t*RY@a{7+?twoOe+9gk_+fA#u800m*Htg5^6m$Bfje3J2ge7z^Wbm5-AQ*J+y*;$
-z!M3D756Yhza1R)S2f)3c#;qNo?6!gX68`#efxur#-w4${7s8uh2yTl0VNm)xaBuYc
-zSbQ5O`%T9>{YRkE-vqTUa2aez(=Rm^!T%DU3-2f0P?(P19#HkNJ?sSA!Jp9k=@^&(
-zL%0>;tD*e52}=J8DE+gb^iP7yuN+GM2+6F6#=*9*KUBIN(8~uZ-MR%X-CD>Gw`DX!
-z<<ky!r#{!$x%T)PsvbUt9FZBc7ApQu*b^>?YPV~k^p?SHaFNA7GvBq>y~Z1iOQEih
-z5d0Ay2EF=*J*cO2sCwQKs=a@l=k%X~YM%$8^lyM_pVOf9tD)=$;SI0@yaN7oG_PXA
-zb+7@x2d_c@3@H1x#u>)(P<GOx{Obah-%qv9zqL^LJqeZmPAL7;p!{0^r9T78zZ@w2
-z{h{<eVG=kOJ_65xcf-@+3V0@LfLEbE1j>HU*v+^(l%2H<V)E}fsQm7Rs=o`N@;ezS
-zeI=BB4wQd=p!B;z`S%l(oAf_|(z_lW1CNJQunHapOJEH=0$z#!8w^?+f3AS5;8dvb
-zr?1IdL(TW=DqZ|jP~*)_CZ7s5zZaW)2-Ntpi^)G!xcNK{4#ECE%jwU=KLoY@zZa&#
-z*%n@C;fGuJ<`$l2;XlrG`Zqz@xeCh8r54^Fs=j&{Zz^;0MaJI7-Hb2Haq$lthZ-}D
-z&(3!7_ZiEKhZ)}}b@5LbXBj6OHy3HIpBYTWPoU=U>m=jndB*LHZH-sWbn#~!hl`{e
-zXxt0R&XN+RcbsvQv9ED$$i?4myu^60abKwZvK7=g*i`J;07oD%f$C=qVH<{q>F^@L
-z_kb6`?V;w~&QN;q7rB0T2fUQ{<xufgLB-Fr_`RXZ{}<zZGn{;uvCg=Qu_Kh9pBFm+
-zRvYV~{H%nsUkW$D&x7EJgtvhw!0!v3AM2p>9*297|5A7g@n=~4i55TA;x~i4qxW6D
-z<7LJ&<6*|1|LWpDf%5ZNsQPR$7C`x#3zh#Un1-J_!#RY%b0p7A;mc6<wFXM>dMH0@
-zU^(%#EWXg<`&s<w)7`q_LF11{IDbAco@G4JINJEd;ZE;0D8C<s^7~xl1Sr3Ap!^vK
-z`E=V7?o0SfhcW)ZC!zd)2uklFD8EB+f8r0b_=y(Z)8fCL=KO9n4uTU%_xV&e-rN9#
-zq(9B%Lbwldw#i+M>!vvUCymSCNc4^|c?zsV?qhOiI2-wk$u8YL;c3V>ntTeZM=mn?
-zV7Lsqo5|}Z1-$pd&&}gL0)O+M`bh`ls)<gn61h%GjCoMk?bar@Gk!&(75+Yyo#DnE
-zjbG%t@YkT)=@hsW&W9Jnaqv<&6sjEtLAApUQ0=g0yi0$b@jNIy1L5&-e|QpX19d%o
-zf2dtAP<9@NvU41ie-n*|K-u|V9P3567M8(AsQ!8_ls}h4*{O!I6NFj^SB`b|h8eS<
-z?7cdM^$C0y?gy`d>PHtr*;@i-uLR28zEJk=8}0hfnQ#^1qoMjw(BzI#{paIRF8(p7
-zezC&j)1dlA$mDFOezB*?X;A&5X{1YkA5_1%%H(6=g~->9;OErH|9`_>`93zj3{}2U
-zq1vwws{Q6#crSPf^8WBLxCgu%J8ukgcAhe>gtAir)qazp+Ha(VcYr4&w}Gd^^+Q=V
-zVdr+J_G>UMhO*NKs{QtcYQJt4{`!zWU@r12umU~<uONLpC_7&bc6<}c&goF?b_`Uz
-zRap1|FavoXcmRAX$F<W^sCJqJ)lLIV-VUmrzR7m+&q1}*ohC1VYNra5M?<w!(BzI#
-z?ey^>*3MAvw8G@mpxWuqgV`@2|9()<jkbeaav9GL3Iqlce-hO7yMsvhrmzCOc94^A
-zg9jjAXYwSI2g81(?+4XScZC`J_w#|SzupejUmM_V*gqNW0*fJ+RK{q?QS*#mP<q1$
-z@>8a85LEx~3uSj3xCi>L4{&<_gtB)Fl)W<{msG~Sa25Qrzbn_vQ1T=2A@~3+XI$?A
-zse+95Q00A~pW{-fa-Ja>yT=+!p~kHPE&ltyPXAqz@K=nFLFrAl_<f=5?P~nCk4yIy
-zRQQ9&+b#SOsCnr$sPcv^d?Hl8%QSg=D805&dhhghTme-tXG7IX1ynuHhAL++RJuV>
-z>E7t&{8$2e6MhO*eJ_A&$HSoXe$I03^Z`^m9RYj6iBRn{1}fcNQ2JkGI=wfc{COD4
-zpDQ6<HX|FVU3NA89CY$3*cZFoiNvp?lH~X6BI%zuJ_J?IM_c?DV}Gc6+8!$3ANP0p
-zu7&C!Ps0AhUklaGE`#!aDU|<}Q2rkXRnDGJb~-}&{}GiU|L=kFe=!`0ULVMin6Vj@
-zzu)cW{QcPYDwMzHNG3jHoM=1*%I{sE@=Jrt@9lk^-;Y6sFNX?WXyHddm8U<<gxf&b
-z`F0=I&ey^$<b$Bvs~1#x_k${L2dMJCxVJ0sYN&j!fy(DZsPayODsRx($@p4N*Io}o
-z#a{(gAH(1z<ei|(+tIjwFX!LOQ2E>omCt!_EPAyTKFz}SweTPJbmjaUs+?~_mGeoc
-z{(L=DIj@3!;0aLv6hZZ;Q6}#N<==Zfcs@w{%a9?M_t<#u3h##F;E7Ov?`+)6_;`00
-ze!H>3xL8zu8Ox#Cdkowg_J!?m`70`0cHcBEGcGh9Z7ee88iP>f>;_eCHJaoV7)ys&
-zLbd0%a4+Ql?dIf%A*vbY8~Z}_>#x%t8;!@q-3gxx>B1R(q0;RE#}K|fRKM8_DxWuZ
-zb@9uf>>XzOau-+cm%*`wSDHNDxDVWe@JDuL9>jhQl)O2_^^EU#a=gQMl}P<vU_1$W
-z*FBtz{sgG{JqW6P*YD`kzh}JKc#iQ{W2tcpRDJd_c_*lP-30ClU);gne?JRV?p2U3
-znQ;?T{6$dd7eJ-UgFRptlz&ZK>F3CwZ|~}9EmVCz2UVXBLD{_ss=h-|?Qocd9}LwV
-z`$E<8cYkqw$XEc?&o_sv$M?5$@{>^Yzry4z;6vzL0?X*%)4FgSAurk1)z@*xfyTXz
-zU5sfW_5AHNj&DP?!-G)ue-l*wmna^)dB)Dh|84EUKQ=ySyb`M3&Vs7P3X^w)Q;@fU
-zs-N3CbIuO=awz!-sQS`(Y>Llya`mF`1XVqaGHws2A+OsCCFw!w-w)LejZp1yHI&`?
-z7T*WT&R1JHo(@&dnNan*smbqc;lfwL!w6qy^6~Jm$lG>gydmA4o6}#Y_vIq>bq!R0
-z%izv%k;Tt~dl8>+JjD3WX3qY_uqW~77%Pn1!Tqq`0m^<GDEs=(?(N|xQ1SP}?!*s<
-zYNrE?pSE}Me?;P+G2RQ+&bPvg(O(GF-ZfC|9fY#e&G_o3PX3#5nQ<Xh`_3}?P^fnA
-z1E<3-Q2Sh+p#1(B<9lKEU8wjsl^J{(D&10e1Uv`IuL3v~d1hPJUX!5OcO+E%4urDX
-z8LIu?Xyf|D3sB*A!wmkr7OLGVj027T-o&+YJybhSH~C<w{;;FTKc%^Le-o;|ya09G
-zJp(VI{?7;m0tX`ZfI5$c+kpYd^NGKcqKfT!)rNZjeILnmu`O~oJO^3a47opChAeJ{
-z%sqwPKb<aiLgwB?@10H;J0dej=>6mA;ugqV;bq9;mdF9P6j|IHc^!V8ge-1~+yqZY
-z7TY7QfoCC$9gtZ@Yh68E+yprY%aFx1<gSqNPZ!%D-vWO~3yixCz6S9<@FYYhkOwKN
-zCohCEkxzur!DCFWhPNTlH8})VBIlbt6+VbO!Q@d;>4!ksrwzRHeN3k9z4Y`sFP`bl
-zOV2Rw$qYk*14+ka73dDBroiD)<=cLfz*ars4lo^V2UX54ururmxy%Ce5k?iB=fDES
-zMQm)EZA>@n%X}2xM26yOV}r5YSYXUHrW*ssCNlQY8yk%E#sXuuG2Iw2HZg8`>5UD>
-zdSihx+n8<)7@H`mm)_W5tTz@IvyJJ-fU#*yOK)s2)*B0q*~WBZz}U2fr8hPh>x~7*
-zY-74HU~FRC_WU<C80(D%#%yD{F<@+B-1gEN8;teF0%Nu@-54-7(b2s0#s*`(vA~#Z
-zOg9FMO>{Ufy|KYqZ!9oo8`F&eV-w@Km)_W5tTz@IvyJJ-fU${j+)Hn4FxDFjjM>I?
-zW5C$N!04qnHW=%T8t)aKZA>=?j7^O5UV3ALvEEo<%r>SQ1I8xCeJ{PS!B}rBFlHOm
-zjR9j5^MRM%*kIKBq3{A@wlUopFgBs&r8hPh>x~7*Y-74HU~FQX;m=K18yk%E#sXuu
-zG2IBfbRX{J%`1WM?`1!f<>c`1V_$H9lf%D<eaZe#4*&l3^g7c&K^7UqdpJ4#`_bp`
-z<K)gaxcFE1b#l{<PVQmx;ol?v+2ru=2bY<C`1gKa+S{dH{gz8Vr<aq{-*)mLK_}On
-zJjDEOGI@mgAO8K<K4vfcd!y&}bm_yt54zII6Fih!=JPizZ}|5S&$aw2E&jzlUHb6v
-z8$P?h{9%!+&&`=m4*$O4Fw<`;cJT+Be)#wMb}{|*kc&Uk+AF)v$%ivhvMvaOe^0Nk
-zwO_r(ON;05fu<XsKGosLADVom$?HsB$GEmthxEY5JY>=*xTDr<_1@uH$uIN2<lttK
-zI72WPxlMhb0}oa8xtDOouc4mwxx(T<Jl4hQw_6ln&-ka${n;+P9?I&Yb*L9_=_gox
-zXNw<i@tv)|Ew%V2vwxn&H!;5Ha}(pd>{WJl_CGdxT|XCp2b&k2($WJ>+?VRpHqXhG
-z+&Ag-@;E1Fvsl#UmoXO4O_)9%M>#qCd*d?>b#nOkZM86w{dD??K7Icxe~@WseeRgz
-z;={kEy3a5tGd+8s!zVjANW18Bqxsk1NrAu@g)Tn)d%&Am`ta|Yj<)gzwP54ZVYJg<
-zeXx_+Yxn$F)5FQzGOq2~COxpm>T`sZzkz)9S!(4C|9*YfiO$|SOCK8V<nZr*9&h<&
-zk8t%hd!&okAs~HzILyh}8J-w;-_ozP{=SLTclh@*@3r*d-|yVT{BN}U@1(EG|JCNd
-zE=$$-YKwo@;-9qmrm>cPjq|5^hLh8+e&$(x`1dA1wDxTr;rzYK{Lf|F&}UYzOCSDy
-z*H=yM%*}*8SFm7Je`vhc69XeHef<qi9%b?2-)|o=&HTB=#q0T^(uaQ^{qaI4hkp<J
-zSnE&W-{1bq<nZsEuQU7M-!ETg_8RVX_S39>!@m!FJ>^t>;omEM(d6*&N7tDg{ypej
-zt^UHlZ#~N7>;bO)gTnQ>laqh4{+(U#@*iXN!oRP5y0w4!_sAbHIsE&-PleRp^?`NP
-zo?7qedJo$5Jj&wNTl{_&zj~0%Z=0bmeNP)-I&+<Q<Hflyet^ZNTYNu@Pq+92i|=aj
-zf3^5EOI-SE=|}Q!jm2Nx&e?C^W>lZO2fO$Ji{C3ee%|5I=URNF#UE<%+16h3EWY02
-zYc0O<9+&=Ai(hH+uULHjHZK2Hvt9mOH4yN5rM>enTQ{71wk>h-jh24TAx>Uya(BjY
-zufEM*VUCOMZ1(ayxcGHEJksYyv)5qhtIXcTCRduh0&Z^gxytNyFnd>;y#}+l-%OX^
-z5=+0M>Gw4KuBP8)<telL^^j4Y2Q2?5E&ctL{~9aLTV^la^xrglOU&M>mj7x?U%ZPe
-z?`oTGv=6EJS!eP(>yNKke>~0lV<YXN&uH`SL$kNJ*>5tr$mCZ{zRC30oBXK7uQPcc
-z##OIBk8t*f@8{&)Iwv1v@%0vep2Zhf{L>b{#Nywu_)3dE`Vj23sSjjZel?pq`vo^U
-z`_EeZNQ>8R5qkaQZ!Uh%Y?nUQ;=8wZ@p_3>pLgy030nNycKxir-o^jL?Dw~Lx4%>$
-zSaPF_Ki29yXze%3^rxBr2=k}juD7c!ewM{wY4Pjsa`t|(`1uz9y~P*U^>&Tr*WdE1
-z$advB!}RA``GQY7dly^zvQ7U&D_^?xk8Z42RbQR!o&LA1CnT?a*vXG=;pBBEIC;6|
-zZ{jO0eHZJ0OH4ijJ;kS6e{5rN)7I{KSiOU#r=RP?UWcdOXxHNbrXMu@Mar*zL*PSO
-zFD^X}dDDi#lO{iB@*0zmG`Z2_b;mmWCX?G9@8s1cA87I`Chu<PSDL(r^qQX<uJzmv
-zoPmFmD{pY}V-}x%lat>wx$`YfUTJcp^|x0{PG^%&pHIkN_LkUqyWZp`>%Z-}4iulh
-zm#e>rEI$1E+6`te{CnxA9qjbiFwW?68~-bP{mzm&J7wv^zdt_C(uaRfo-?#g-_~Q_
-zQ2$>3^<MJ86F~B6o1d14{XNq8cZS&u|Gs>U`NJ~B`&`Dqp1m$k9vCv&*1!9hT)<|a
-zJ_lI&v-fxMc#|u67^2VB%#X6yNIv>}!2OEkb>*HI*vkBA>fz*b%-`_uw^v&Hx<j13
-z9`sM8?`-yd=<4J(pSkp>0WZHVoZO!N@9DR3={2lN)?sgbzB9Su9Vd4*`|Cb&@|o?N
-ze!X3<+2MG*{<@kRwDnDwI;Wp&>zgAi|LmU5UXO77Gp_2h#_FeGgp+r(^w|TQzk^J_
-zbI`@lu=Z-O`gqmq%f$u)*_OUw510OQvmgFF^}9?C|313TcdI_q`#THk2Xg(jtq<hd
-zcr@AMX(snP(8Z55`FxB2)a1uZ{>J1frhlx-hacq9mz(@AlM76K-t^xvId_oLKhxwZ
-zEdCCYueS8po7~OxFE%;d;@6nmVDS%|{2=40t0`Chn_0g_%ejTI@_Dtf^0r&X$_I>$
-zl^^u!U%Yc{{ARRgbbkG7V&yTu_=~&6#*g;N5Bls+^U0sjj7{IWU#z_6fLM7<Rjhpf
-z?y>TXZDZx*eD!g{cCqoBSI5eyZxbsQ&yAJ!+&#K}PA-a-U)VlY?zwfWe9N3z`A%Q{
-z|Joxqe(+yn<#t=e$`!L><<pLgm5=w?KW~@V`0V^xIk!`+yv^)b`R-j~<xPC`eGu1e
-zbp3qx*I4;eUw&Wt`pfs}vHHaYv2s_R|I>GijlbNdf3Qz~nNNTF!r1g%`ufwIJI2P}
-z?(@I9ul_Ig)z81Z@?;0XpS529kH`ml{zPQ`h)-G|A|K<6@8OF--dF#3`0BI7C*RvQ
-zwmcX5+H2TRvGH&E>f>o&eh>Suuls%1*Tuf;^|tg_``>%|k@EKP>_z0aedS;28xI<N
-z<HddRV(nk=>wm8gkB$G#SDxcoXQTxppMU$V|ChVR#((9z{&!>kk4}H8@A^+Ki;aK&
-z=vaA6pZ&9Z*Z+~e>;H9M|NG82zOOhU*8XF@>){>Wc(-L`tp0w!_CMk9*!b&x<Hhm5
-z@!~_@_3)yveh0JeimtErth=J+!;53(QeXY9_0{iLzWUwO*B=h{)$en@`n}axze7u7
-z^FPGbUhSvH#_JqXwEz9Ljg@PC^*h~Hzwh|!_gi26zT>OkZPH`y@9n$(ZuQk~KVSVm
-z?5p3~eD#~@>mTcV^*h&BzZJgv-Ddk(|9<h+?+Rc2>V325`YZC)Z#Q3mTI{Re*M0SS
-zmal$C_^yYcon!MG>6@Pq^40IDzV+B%ePYw!J1kayw^yvZ>rSz9m2Z8uqi_Ci!+Jlu
-zK5p~n_kl0J>Ahq1ulMD5voF6nzWfII^4qL$ti3M2@pHK^zn^^hz3<EKa$kNEefj;n
-zAU41Ic8isD9yz)`Ciu#~na`h5K7YQfj!mEC^JgcYKfQhBKh>AtGrs)x^sR5Z_{x8$
-zFTdHo{CfDx{}*5RCwtdZb|C!G`$*C2g&iwm<+r`-BceZNer)_G?|O>Fzda*1{(SHH
-zh{P}P)&~)}Bt2HYSKC<mN3VV&`Z-?ziO8$G>mwq6?X9;W@+7bRBC-xqMVI#!uRlcM
-zYkl_n`0`)i^@oW5**^OdeD+`S*}u_e|3shtH9q@K`s|<Vvwyy?J$FAcwtVON+Vg-e
-zvGEuA+OyKvo>@h)`mg)i^D|$2E=rHppXO`NlL{3d`F!ph|GRtsMB;0F*TV_E^;jF<
-z`mwq;*8b3gW96R*#mYDN*5`wK`fGjq*ZTZF(|3J;HZ<1$OkeyYpMT?g^Yv{LW78k$
-zlRx#^H&Q=0d)He;-o$5rXZB&D>$|V7d^faFe0H;e89sTlEn?#b`Qo3&cy#(lef{Yp
-zpFClcSpD<KIoiL^J$udW=uBQr`~ok1B>vnTV&k9i{ENgd_UYg3(|^mSuVVwz{v7Jl
-zU+0rg^2zu3>|No@Kak(OI<wD^s=CUWiZP`%`Gs?f`}WQXR@TlaD=iums>>@~5E@pT
-z)u&J9fc&Wol4w_#&MYsisjUjNLOZihbtqKqSDaaqKdZ2M){qLGd*sgz%`FlM43!tj
-zwIQ<#`7gJk%!L+*5`~6}imMB!gsMtQ(4thq;T5&z#f3Gc73IB$7S<F_$?TIqF;rO<
-zst%Rcc){bRvYnb=J+HKcf|r$56b-JJ?`11r4h_vqQrtw9lUI6lVQmuqMAegAKdypI
-z)www{R5PirGBmhuTw(dlvQY7%g>yrr%7;{x*M#QR1oEvg!^ck?GAw`W_?)5n-CfYA
-z@wBd2wbdbL^*xcga1xa_D{od|6-`6sDllxTw7j~eu)L<UuqH${iVMku;Z+rLqkPDj
-zQC(A2Sfq5$(Rdf~2iKOC)s&X!my}f$qUiKygl3kO=M)u%s;k36q4MI`fZFoV{K`;K
-zO{jQSRaHe*l4?%UER{*rle9`=^+b(=X40}ox?T#UAr)1j7)3Kz6)GvCwDjBjqeE5I
-zP_2<)G;2<E&7Az=!m4?tgt+RXISM1vjH=S&nW6DBW|MqkOiV}>7Y@>erHdtx>sGZh
-zp!xdG3=XNSIy&TC@8kO^zO;Pi_yM`$;b6)*UxNPQ#*P^_u3z8&sgwqIN}0i|-l?>*
-zdXMC?3l-<o*39AxEiLk{(IFMZp}1Uwy)+{9)_^d+&!P0nc$Ho`!}7-W8Zl&CGKJnF
-z$K?!(v)ngtWKLF}zH#CGN0nEHiWuU?_Zl~}Ph7N;_3Ga{VR)a+thn%qx!$DA^y2NB
-z%&VQNHp$DHnpajmwanK(S$TDH=Z0#kyuo=&&XDL)j&YoEpmb(!MQ!!qx|&dRPL4l)
-zBww!>IiZ})EY<q(+H$YMrApyEZA}tYM!sq>r>I5y;R<hsYJbnJs<{=);TCCys<W$R
-zYK5}wrc{k?5jXGT49S}tu2`BiS|Kw_GgEF=MNLIfMOj!WTEk2f<pc-!Z-w5Fyk;wr
-zt2)J%RhN?!Zh;XwL+a*_$eR@QqP6LLed^bm2{+hpNw0?awdo_pa2-9lolGfs9eil%
-z%usa=mtmq>Gd22aYt(Q(fm(u|5S3TL*fAU0ezEPJlN0PWj>))iCbMnu*Vxhp>MHNI
-z+ln;kZ?l!Saa*#PnMFf0j)fbBi*RUyD)H2!nmLtPR5K@0v)pnA%wPx~!V<QI1>nrX
-zC(ZWOF;R=!xZyrGm>HZ`S~F{Md39k)Xh^W`sN(#5{hv2=%(P)+%7$a3EWfPm=(+p5
-z#lzf+;@Yy1xAIQ0Oc`2QU0GODG|M*=wX{;mn>ls7FHM4JJAqc*%-yUL-`|^~s<ZkI
-z4V4tumeu4jIhM~H#e%r1vZBmeLrgJG;?rA1-qb!t;hOeWvm1b8<0C_3FIGR}GY1SS
-zFDk68u65b5s>Y8gnOW6Q3+fzZ!kD@H=$Ww<8eKU9@<N3y?ztVAk{K*2t(+CA()vE$
-zf4`AP-Ti74iI;$x!Q3itacV-`6HdwOS5-JK_ExH8*Lvr2B}LYh8^a*i+{QK7Co6Mf
-z8cbZ3QLE{VQIWshTue3oc5^Y6_*=~-yubKW)t2}s<X4%BY1hmwE{U9(RiV&a?pnqN
-z``LvuH27PtlZ|gxt-SHAs<Ah=)s)rS*WHW$w%TpJv(4;1Y{<~O9Np-88(1`1aftim
-z=v|`L3~e!&(8e+vb0KXUqmj!gcKq$HO}Py%cGMNM5v;lS!QYpnn!Eq}0eyRIsE@sK
-z6ZQMwZZ%QA|E*S&tN?n|6wYk94<?-XTbVS~8ipNMTiJw)TlOO6(v4hY(Tj&*U$;>=
-zJeV^qXjL{mIK{t`Nwr*PwTalv@>h8gdlCK$6G<+)a2dGA8WOICVe!?F>>6uj@|gDU
-zUt3W#RoEQ2H_eU05SzGBHin%<SLLtqC((7-Iy<)AHkfVyIeHw?yeS?L<`xz;3v9eI
-zRgAPpBEu`Hyp7W4L{qCuYcS#Nt5R;#k18L>&MeO*3iEgh(VV6#R2C|%ZWd#Aa$}-w
-zE7!upd(f@hrjPP)YH3Y5_xY0wXOu<CKAdHYHk)Jin!Q`b{K~3|8N{{r!HTn49-0@q
-zZ?NY`dUBA*bQ62~lhwy|9pblt^DC#0FOqhiwnWEye@5=We79B6V^rK7a!!svwcGpi
-z_A2AHD*d|QjS}6;#crDVH6z;%Zkx5`1d*-H7IniLWvy_-v#LFmmUU&db()dF*^Y1$
-zkE2_{-9&2})Kyhp%3V;W6Q7>_n&?f?WNO+1^|wgeo}G5=k|;4Y*^W;NrN~B3L@D0m
-zNL-}DrrM2l`>#n0#@?Ra=hW8xJ6!(M{v9s2!Ie-eQY#qMHdsQfNVO!<YT-Jc5j!fx
-z%wLJu6XObFlcZWW#Oo$sA;jw@Ukdnjlg#;kwPcgKU(Ywh#YMNY73WXjtD>lT^mxsf
-z3QDONQ#~m(BbAdvDXMBxXeC_q`pXb^>BlL=Zu9!1Bjeow9{t(K;8%*<?2l7WCXs6>
-zF4{d)h+IB#3QC_mI^twz5XH<SZl>6-OpsyJ_T?0Rw671v-JZtl$MmFD=*RS@7WJcV
-zp2ClWeIrApw<J-BEC&4Eho^pjc%<6hV_{#8ktde^gyBitA0BxY>5mCd(Ejj<3vN30
-z$HxqzDVFa3bgqFnD1lmdgA%l`diT4OvM7<eZ-27HB}t{9s358I6P3fSA9u<sGpneu
-zx@J;^yHxYDYAWW(FCg;g&#eg-4h{x~2PZBl8$Lg8>a<}clk+v@#Ty(Db+aBmmyy}W
-z3*^2fx1v-JMS>+GdW{X02m89G6EjB!gR^Ij3i9kI@}PmRIirGkrFpq^)qN)OET#XH
-z5&4LfbvdI)<dx=(%`2@Lj-0}otf1c+o&Wg1@+NZtXU4+&7|m6asa>ydwG8)aCAt<y
-z1cRm2!~j=O)F1(~=ZuW6mz*(?x@oyy{GNFA@_*q<W?%oQuYR0xIXX0IXlB34=BGX3
-z`Y9dlx{cetnLQ>LoI87LFx-twkjqQPQa9Co=r6sprsPL=9{S9ou8zjhe`<!ucl1<!
-zDKp6Vufp=;kz<Aq&&<-{yzqII%wT2JoUn%@`_ivx*31g_E-f#qpi9pgt!~YRZt2mX
-zV%m?Ovbm#wCm%C;K&KOM37qW3(IF0M#rs)ZSXN_x_M#y2?{{*qpK6VxMRi=z;r2P2
-z>$&;z-q1F&88I`fw7jymxoE?}P0+WZwubQG!Mf;fU}MOL5gVGDX4gL`E1Q}Bz}zU=
-zAC#N7Lim01irnA&SBBAhrdh$Fin*0sC6Rr6wx4oF<ju&hDJm%{$?;~kXj`$X#@}Wu
-zc18KyZ0TWkinY$KE9gcwm}pTFwKdv05A&w>=Cp2cX73Vq?R2Pcd`SsshO-K*=jWAb
-zaZ)zi8ZB-)@*9SnUP%@>|Nl)`S&2RU4P{Sa@&CigI&-6!J&DE4KXzeT=hh;@#Krrg
-z7q+Rr`6Cy$sXfVJp%uHt{v8*#sa^U1@LEaInSR4K;Ved`%E;!0@8n?Y_NcAfrleGg
-z>?wHL8mV=)ua(a<o!X==t5PdPc0W>PDO)U>TCml8V&CnHq_h~Ryv*J+^h8ioUF7g(
-z;wo%~s;?qjlcKpgTcI4T)K;iQs<su%;R<erYNUj&nv*8UtL*Q+W5qMi{)`iaMWr=$
-z+<@@Jqcp!}_~EMJyt&oGGAk=e>*mk*&aKwu&7H{c)qcauyt7pk>JV}UPpn}h#M6&-
-z{>au|?~2M$d48YTY7T*B_AZQimjpTL^sJq$9~N~^GC%H&=KPv5IirH3nh)M<3&xjo
-z^uFT;<~^jvyho(YySMH&r}VQM&&<Bwtr+*Y<EZ1R(!#Rdy1&fHY4H)!faZg#9K>)Z
-zhG)hcHjRBvL2VLO53!F#b8~Wr_0}zCZ$0R?Bh3>Q=rD5rhFXql+iH%*THE$1*K0ri
-z7S4%o&-w8UnlsF{e)DD?m0vR^x<mNNxFF}Ki4*gyg7GDdY4Mglif-jZ9t~-|M-{n=
-zJ#zh^uiGTa>{D4Csx7XV$c9P9TzZ4I8<N?_-H<nrYdoHdH2a9)6t8LcCzzi%lO39v
-zn(@C^qz;fX##doV8m_MDy16qdc!4xs@2z1lJ#wYS?BO;)(TjS<!x4q#sS`dsN|_?@
-zgQS#6q8r#6C#8O*gC^0g^QvJ)R4t^qB-0~r<oI)qx8q)7+n^+=vyKes-ps!N9&B*R
-z)Q*Iwwhi#0^+{UJTFZ+K%(`_+QfD2hL^qpmfD7?SnNUlsvw97wt*+t3jrUpvF9`BV
-zX-z4cF4a?Wy*YPk-X!}o`kJ@tF(<(h8kerF=1?zrsl!wc@fHZ?pjCBkWo1QGO|`f4
-z?uGDhKreRlk|wWcdLi~wcQ~Z^4al*vi!a}^@Rr|z^reqflh?r$z0R04g=>@6B=Ht;
-z-l?JlZ$SF&tJ}6x)h*(*)=u=MVgkFZRE;bSTWME)J*jGZFR(WtJqKHQ1JYAUV8Z_f
-zWHLSX2BfbpQe1V3-+<hp^u9h7_2%FPnF)_yza_mI=GUf=6vK7&<aXkYRM;DkzT(Cm
-zib$!3>vn1(S}j3OaBo0*c_ob18<0LvHl+RiXQnpXmaaNidB5FOq(Oh1t;CJnl1=~l
-zu<$#JzUuYVD0R5~QmI8XbCepB#L<OirQ9uqq7IC5;MSWPW`@c`RYb9x)gfFjtXVz$
-z-2}}s?g=HjI%#UwTqKi9r5*@|Z$#_(Iqif`(tE|sSb3$%^s>Tw8t}tvk;QJL(!I&1
-ze@SUMg<KHg$oJ6jTcyr)qBQO*Y*nK091>B^2@Xk?LwKBNwX*tPtCS<#C^71pL46y5
-zb&k05dUK^N8Go8chf16#&MoqZ^e%rIw^WYGBh{ENe}qfUYo+<sHN|D6GxAHT$LI0w
-zGWt4>oSLzm)vl=<T$-6bcpm=^o>!B&BMs0!u=g!1F%MpoX!rLXZF2;>RmvqO>N_l2
-zr7X+(cAdJsqoW=GC-b8SP0w^9?YK>p0aDkEWi@A5+>5f>*=c^X%v0Ya8D$QLy0Q}=
-z%kU1Xct;0XVJ|D_w->($y+H;uGo!v$D117i|9pFr-+R6e(qz_gNF-B-3;NA<FV5>o
-z4dQ_2ub2s+r-@X3)WI6gM&w5RPgYZXqe{kLmY0*%8*<L9)5(Wo{Z$-$pdhMQ+?foW
-z%Se`IpV&M{hO-QYkB1EF7e3QaIxPBhNQmsqLStf1TEyn;oghj)_WrRCdlLHaM?d39
-z=!7?Rc<+_OT;b8@DUvqb0Da3<P2A|vs<fHG+DgsCzb<wE((+Q5arD>`)7_JFx2&w@
-zDZTmdk*4jqUN^kC*Uk10Z6!T(lq{pn=8U4(4$b+5Ur_sv+58_qg-Y0;{%=lEC3fYH
-zJ}i~ci>%(sR*KDCA%38n;|99o5NF?tL*rtGxR_q9!;)jX!)^&P|05sVCUoEreO{Z;
-zgI;ztZ&>pyrmU^>_`<$YEHma%<VbIVai>{JnAzr(Xl9EZ(d=~D$mEsYE7KhYOqgT*
-zQek6cNg;T-++KZ4bgnXL(J;zR&uQT>xVEGuROKsR&M0lpt7lQjnKrydt;b@w<n<6H
-zW^G2&c|2=VW8_s<Pb|$}P*pZ8GpG@pr$yYCuzstXUv4UK2YNF5N3RFmmqKO+=QN)z
-zj$QP*e5y11<rh|0YtONwe0X7L8DF86pWnNrv@F!Sth7ATr=+ZKW_5L+LqqIKj<4oM
-zQeVwj<aR4LLz<T}GOxC}?__soaiiGG$%;1_S60rA+7>0>G&juqrn%^%21kSsI(iSd
-zY{BQANx8*duvcMWF@Kh65oSlLC-J0?pt<FQ_2RAWL`R8pBTGTG^LRRQ&ID^||Mzre
-z_KMj?jd5^zjDvQR**U0V%(x*3`I7_9F%A+`HdoO&I3oTEi(ad?!a-V<@8b-2f16pk
-z#>4Bz1ie4li|!v+HLmODj80M&6u~x-H$r>4wh7KvGx6Ar%Am!3m!g^__J7qz?g;+P
-zE9HD^!VxdCSIjQ=uWvBdIKeWt6CToLG}*@Ra6t1HLx$(T{^1kyy^D3X6V+fFc8?P|
-z|DCFaT5%vIam{9h_g3PUtx<O#N!q1(-{M!FjZNs3?aFLiquNQ@xE7nADr{V{w#~G0
-zjW$22*tllpE48|Dje7fc8`or3|5R_($BZYv^>T}D!5NXFwoY>Ea)u`zo(9Nz^F2}g
-z3?J;pirE_qliAFh7g=$5XNK$M=hx(wO<WLmA$*v}JH?}`CbIMCJ2)P7CV-<Y)l;-R
-zoEQG0p8Q@V6;*jNa)!md7??kwBQLhusPj7hJlIu?e8<=Clt;`#^WP~C9YAkBKN0i&
-zJCS`SRZ@Z~qDgp0(%L%O$hKqZW~17U91e*wo5`ZT`Cuwf`=ZXh@P#Y$Qyv2Hcb}-!
-zB)?l8iBHJHWEb1Q@ejeg1|A(89dmF^7eeZ<NeuQatmO1uF<%{7H@`aA*PR>~oS7MQ
-zY#@9|#jTis&FhSEsTFS+_%311@KgG_O)78s?S0W@%je2s&BPyA`|T!MdJ#YAIL3L$
-zl>RTsnLWnNe)&t$e0GmjHD7Tb`2tXHN1mgU;cx$pOBns#rmasHd8QThI(+Ms`yLf;
-zV8Y1boz^FeI2`k8eCrM1a`c<<EhUV<99v3}H>P@6-)e67OXt^RX6Dt-$O|1+%dK5#
-z!h*a~ce`GO246~-TqEv!^j6aRh(Xj7pJX>BdN|blJxJWXgdbBR*7u%L>3fk{p=sZs
-z)S_lqR^snh@+V9^er5J@<JVZei>a!xjE7x$zUe<QMMTfanbdXo<=~v06yK3hH^yf#
-zYChOF24e>Q6t9B?GwuCt_j3(;(#_X3_tw?V4A<9n*pb00F<<A!wD0pj@vHGsZ;5TR
-ze6;NPBg)glTW`OiJRDJodd1hBVrzaa**CbhG!f*@95*yJNy45Pua>yO#p@+F!y2y?
-zcW^acCDlXn$U)T+{?fRI?a@c8{2HkZN5*XL;6!r!Eh(nXCVUbix&5RXEgNR8nv&XZ
-zLXFghBjvR-TK;-%uK6UI@v~E1&XD;<d6N>~qSclRiS4IMhS9%3;jO<g!0WrwmYI!W
-ze~N--W4x(^S4qr5H^JBQ=8VwlcEfY?-Ch2E*~Hvn{(jjczmM98l@>D{HQ#MUPj&HM
-z1-_9Q==aJbrg?s^Okx`6_sJxtX;RFr8?iUExLVk#d9|=&*r<86uxi+dd8KT&$ae;9
-z#2gd1T2xjEzF7I!U&D!7?f1$nQLFtvc|}%du>*R7@68T>l`dcGJB;_eqQBgiN4CC+
-zE9U2a63vlO>%BiXXa9WJif>9!)N5KSq5FpJ=D8(qKR3ZQvj56_Vg}{kEuXkWwOb-3
-zShciRHIZJ|!W2SB`z<}|cd(w|{=?P7uW>a}rBQFp+6$mj-&&@JqB%3eZ+Pa<*BhR(
-z>qK9T=gd9SZK}mBO{3j!InPk|9nRL|IcIE=JY!~t$n_BYH8nXS>WbnP<k73>6zhOQ
-zX(RUt?q#T9@#Z5c?uH|$StokEZ?B6DNs!(<-tE2Llpyy1^>%$f3By3xKgo&&d>lL&
-z;)_XDd|MzOAt6H86#Vb~dhPYcwib)Ycv^eCu57oi>wR~h`n-zCtXmTNTJ3)M!>mhY
-zorF<M_2uO>FYGD}cX~f*YNFN!FpeI(5TywyCJ18(9Mjw$c^X#r;#eEnpp*QT8(%yR
-z#B=!;h}&0oxK!|J-5a7~0F1GxYBvV>^RNbr=5xae?0oaoqHed~HIq&f)c7=P&g8!3
-zW_A=#)&J;7dC3wFMdq-&7B}8zS!Qot%a^NrBd5p!U@VyR`LUJBK&98B+a;xV099*~
-zB1_8ZRty3PtqF1gIITNTE;WCv#%7s4Rx$djKgNor^A#vEdK5<6s*uy!Ov=eY#YP}V
-zg1d1>=U#1ry<v8FYRz!5HIQu_rD4@fsL1|@zaDM${tPKL_c-W*3XEc=f(27k$p@NH
-zg@a3LxrxhA`zEbj`D?snob>ah=<c##z`RYp6B$n5*!fH2=@V#sX)L{BZiB(VzJ2hf
-z3Lqh44e)tX<2Ta?5UTD#hETnSZl!VpU<;Pu<{233OZA=?CaCw^_dz|cEJ#@|B<K(T
-zDXyZ#M7A)#PfP>EkPW(Q%Z04D&=VRVp>>w3qkYa&3mK!cRGGywOUccjS!$S3yV}DB
-z6V{>N*L0^m1Ekw+1x@>~f~J93fghb|tw6;Ha)A!{)vyAW>v8{6F8Am4s@xwIaKggn
-kv#n}HM~%!g0>)roBVa>OB-?*#%h9IE#<(~zVR2)AzlqNxXaE2J
+literal 176512
+zcmeFa3v^}4SstpHU|TR5B<F@848#J4paBeWutAP7oHmv@ov1-Kb{iSbq~%ACHP|yF
+z#;sT;OIW6Tg0}bCEG0n;t;7bc8ymz;47yxSmheUP8M|?dw+OjLtdJl>3=-lYh{F;O
+z)AxH+?Y+-F`$#>uXJFkmJxfz{s{Z<4^;gwj&;84P{s({cjDdkW{?-8ghrchvUt<ve
+z8^s^~eIEX{nc3&x=znCXfq_|;!N0-q8#o8}cNY`!@5+^HR~N52?%yw;oOyZiJI3Dd
+z-37kSK;qm_-ZAjGpM}V03@k?&hF7k<=1p%ZC0x1kk_#`tP$Wb?MvA0?vKXdPWL~-Q
+zx>sL&b@_KUzWKn{N+`JZFYoBWSCn+@%9S_0`N0RSJ^#wJx6EIC^y&jwu5`<L`c@<Q
+z$xv_xh?z3_v^%BqUVN{8<l#3J3asMWS~kA#3I&G~^LGe*f4_<hzpq?*?VGMW`ryN_
+z4|!F5<8L#*|1;#T0w3!m{<||qLI`{n{<`&d5b#X|_{KZT-~Q9@l$})2fj{Z*%0rL5
+zZtm4@n#1p@saISophmvO{0)bsMc_N@-<2zmyyiPzd*#80Uj6#34?g_BBUO7D3;2Q=
+z53Ka!i=;$`@;)^G>epVovheVmAAI<A;O`}6`r`rL^51dlYLIvM8FvnRzmvLDc;(8~
+zxhoGm`s#<SI<s0ITi<W_W<J;X!|&?0KeV$s=lK8s5CLu9rS2XWxbs=cAW^1o-F4@{
+z3-F`y)prgwzQ^r!S`Y&RUyP7{pTOU<f#6wZt2UJC4xWRbqxfUd=e$vM`O-%g9!4X3
+z@R5g^hQBfVfrWwRNbWa3^5`1|x?qqcxF|=!^G%ODdNnU!!hhu@uYMF&QK0ymP@Z(o
+zf_v_5!cnJ@?=rrZsUb~2`p9dqzUfV&N!7@I<(nRP__Yg<K6>@x*S<w~M!WfX*<0Rp
+z?dn5F<G-5n7SGwWe7tz!!8cxe@Zl>Dyz!A&$DX1F&$qtjO;;cN=b<8M^S|TjYp*@{
+z&#!({;G?2H>c3EOg`Y}&_Q2NAd&z@unt%1R*V=qzeh;39Ui09?XdBG0u^ZBP8Kim;
+zRUnS~;Cb0q)WCz+tpAE#%}hh!e)wPdEmyC}LeG{Lvb^EKqpx}J+N1sTd+}TU$%C<a
+z@_Mewo5S?u=h3&!Uwfp2XB@m$@Jv1O+E>5v!osz=s}Em$@U^k=0WRV#+40LbV14Vu
+zk34+!WefB3k31?K30LTeeW(>sQ~sOSAzpj%H4nZK3Z8!TYu~_{xZF%WcE}?4e`x60
+z=pp&LdHwf?Kfvzjxt-*L&EzA>-@Iet&f~kb$xkzxJUt$KZb#ujGo3tbUcWI+1PztH
+z@QRlK#W*s?r_#$~Q|bMq&Gi0}sdQm@DtX>L&E&p&2B+{p{CfF4BhBO`_l$}Ju#CUz
+z!auwJLk~RgRYT8yJGnBxZ@ch{3zsjv{AJCz{r)x-IF)2`e|78DRMMJ7&`f^5nY^os
+z*u~@{Q%Sp_wDz!qok0d*q?xqF9UVh-z|m1eM;rwkt<z5kb{NqUMsH5;kp+aiA?$>3
+zJA_*y+zjDH2-icn8p4$jE<0>3-nw-wMCXg>T!;>RTW9Fr)---0XdrlQ=R$G=@d3n}
+zH(UE)nWd4^K@`CTg~(ncl-ctcSfOd-w3#*<{&BrC)VzLh(!BRZGdX~a+mLZ8`CVrw
+zk2RC5BL$#L(%N;jz9?b$2#`$fbz|5sFdUqR;m{a%BZjFoquQs^P!XAHDO8~<bSiz<
+zEJU43*JuFEbd9xlF}XRF?2IZwypK8B%X=ytxS0Gd;Fke(Dfz@y^4<x=rjjL?^U`)R
+zS=gFN7B-v7{Toxs{p(Z7<<+U=(#ljax!g?FSZ|P>bp{==zJi{28lu^z88)TMX~lj8
+z&@+muK7nGUREV-P)3#($q4~Vfq6@M1QK*?0f*Ct$qDcB+Gi_0vW<qi+LMkI@W;=uy
+zk5kEeR*`e@`d^~`yk{NJq1MCjxIteGraR<#Diu_aYE43<mLP4p!q!H_KsL%CHJzlr
+zq1yf&Ti^~sqGr^T(l#5H8A)3bGtDGp+MW=@J2c0O=x@>%>u)MqTUElZpq59KkgX%(
+zQu3=)$-9;n`+3Ax5Cbe*2D*ho1+5ceOtMoUZVcbrYo-}-G*eLtB+xP@p8KcoV~=)g
+z4^~Hd03;OvT8*te{c20}bd5a1OerjSp97OQWPmQSnS8XFyk)SNya0L^3t2{xOUbTv
+zfld;t-$db13tNZ|wT9TGrSCN*F(~k$ET<<oo5{{Bz|kEyllGiqI~_65-bG*v>COm~
+z(lvpmnc+TMgRixvvTNIUS*SkSQK~D|7?aktXsyjCa8Hx0Z5GAI*+kA+1F^`9Qqwk*
+z&{~?MoN;m4W)hec1z1@Lz)9_Ll0}l}k$_d!?g)*#tXtEAsJmq)v{y<951q7c&;tYp
+zwehuW9kM*9&zr-=Tu!%-&{_fmtxe#0?$5GEAl{_4X!QC8`{u9g>i(-P+;`#r3;*oG
+zmHR&g=GK7{V`ujK|LZMx47~5zu)d$730~O#V*Fo-hwds2b<2py5OBb4jUy7pXJR>y
+zir6plTh4ycG(!F)Pq$Kzeg}+2{{W3;6rJrMI@^<G`i$oF(*e2?*FGz_5~I}9lCqKy
+zHy`_}(dK&dj+<~sFz)<Z5cm>G!#CM$CeM@`a%1S(%g|r$zckaQ@n^)na8EP!@YrSC
+zK)BmX?iM6CC|sEb%KnG>Ju%CZC(XwWzhULEl}l*!hj(1N>v-TDlefO|&TG#){zh@V
+z4b$SkZ)|?iO)-1?Wk^2+?vv(EIg5FqJ9!X<SqhQsHz4{0{MY6GM14U6#wdIV@THgW
+z_hO9Klc(=jKQ=uMWiAX!kd)e8I+Q(69>Tc-^3~wqLH~cP@(h1E>*oUeLwcMO5PJe1
+zC%n%4$KY{}!sCS3xrAQ#>+hLLuH7?8*Au_)yJv*1CzSA#d&XP`*KbU~^<)$6)j#n^
+z|Fel969df%%y}yL5FF28#4aYk1jlm@rhhT{HTV{4|4Ey@4BI3FaE8`92w+6V5#4j@
+z7@~)cf}P-YO^zViaq2Ll+l>Bod82SRXJNK%BWF6Ma6?bn$nW*Ic(b*QUn+HPYZcMx
+z=Gi@RPbqiJeN!JVm9FLr#qV)7SEV0eSa-AmRc#;|YP4{7QzdJB&Nk}+<PWRMmm9W4
+ze92_VGmRrZD+R8?E&)>ez-g#pRW}?|ng#|nR_ev%XW(C+2w04sI@;rzUQ9j)z-eje
+z5K;^Xhs<Rvd8ku(rc0afPB-A4!ZW=ep6O+Hrk9rCi!7pw;3(QN&FGl|4eKp*F+0OT
+z*%o(6tHEFJD-}@38UW=#jw!9qT~(np__(bZqnOQ6j4MVLbiyba=BaRA)66JLH*Ha1
+zfR{Yl!l9gFUK$<B+>OP^D8gx*goAMA1zwNoj+*XRA$@SM>0HhWhFmT(mhBK)c;K5Y
+zBPsZ1D~JxY-e3=zl?lqMc6i8yifWx#PH@QN<3O#`Oq3-JDn@F<ig^l`tkF@8DAc-B
+zdof9CLU3!19K}eEV$>*3$ak`KT5!?cVotiViQr<=ft2f^P%1C_Qt}x3tTE;OEMnt`
+zRs7e~Zn8Z&`)pCU;wUvo=}wcF)3!xy?U|STf|twy!KrJl2wa@OahA$4&vdC>26mjM
+zlFyt9BX-sn(rk@TQ^{jy!@lzjMeqz}7SW;Bfqdtd@TTnnB82NMnsSxUNXPICmByl|
+zhE0*S_nUg)&kAoACUE$dCV}R2f+!V@02u=!n1UckC<~JsLA3W2?Cd&N6^Zsbf>_0S
+z;%H3(=r#mrubfuJpQ(^U_)-$>DD}XR490v**j^Oc)-nQnt&|n0Sicc;#7VTBm^A35
+z;Zo9;lU5bTdW_H-ZJ#*(6oJ#nrD;vwBGyqSjTK_I4k4M`<9$ioI*_C-{Yo?a>T!?R
+z?&Kc->xaAD<A02?M6~1{ZyD955qA{qY$J&5Fpj}@yI`j)`)`=0C_r?ZOUgR>B`Gzd
+zvD5v}BzDrG*hhb=Jk>tx+_n&GKcle%d>wGAfDJ@cb4r3iF`<I*hk;N2;Zy5(pTzo|
+zeIt&z@PMWf#6`Pd#Nk67Lc75mV*dsp_HPI_5Hug}+T9-Nx7(rGXN_~c59<<+_IMdu
+z_TylGDC;QJ?*5ur-Y^y7>f6FLe48!!Ht=z{`gR#U&L#LblPk^S@-o=AkJFlmLSrj$
+zP<hcMp=i@gkRLOnn0z2~;`E4Op;;H2695a%=Y=$oV9kSdR$i-v$K<5KnbA_!a$b`C
+zR`g!79YTv7298zabS=C6_$RgOMt26hjx)%Y-8NO#(Muvo6w+Px`O9v!q^@PRbtROR
+z-8PWmWw#Z@xa_uy7?#~=+nfz42)>OL;b4hf%WkBCUS~{7DlNNV_#-`bND9L0Wn6D#
+zF&L+$OuVLsWqKl!+i=iKnuE<`5MJB>)skf=$g8ZkZ2<?>kA|^L8p&FRSd;hcA{c62
+z^ne~16h!KU@O)Kg4uDaujKkpO86-P<WF=|uBQSv0>1LG4b-G!DbquzfgXQaV0!`Jw
+zH<R2WC=m&0Z+E#a-6@rY#7!{}9MV3EcjGy`6Np7Ym5Rk#WwsjS97+?G_0ly_NVDk@
+zfRp4RMr@W-`iMy-Mq|<niKXq;60Soh?JH2vW(Q=#OpGdc-0OB*K&NqWk$96ZhKA+4
+zY?+BYj>$Sm$uaq}tKE*t8@e2mJ#)Hi#G?qbZa0QV6qAYNI1K3!$jeDF{-kMy{6z<(
+zq!g{&J<;n?Pv-i~jMr}lp>MC>3?Sz9n|Y|f>o-<FTUD88))&@qP5~0uZ#s^S!Fu)`
+z9gRIqs`VS%7+|@6v&raR*ZR#Ty=b!m&A>ldma59zglZplHEf@a283LNkT%=WMq}7j
+z;m(LQR(b%m@-hn&o-c1uQ>CRI?DSE27z3zIth{U!Aau~4kfXz3MPcQIm5P-YR)<$!
+z4g@Tp=+My~pU5jO4as;2DNY2Z9Z0Oa>=vHM($*)nFE}8c+F~tiK__eKytF<rEXlb(
+zFrrwm=aKG=8-)wCnu7DroKTGBD8`JU$5Tl&qcGhxEdJClyUd7KbSUU-#I8t$G4TgL
+zNHQ<jzcJlW4#CM<$qDh!q8uexF$J9?boa8$Jd%Qkw20_XYt<f-8<w`jFoP#lWM)y-
+z6oz4qPN3XmqI5E#7^w{^R=4azyMpb|u2Ape3f3kR&?g*LOf_SO6Y|}?>>_Km2jgXz
+zl~5>MTSm;wE~AKDOt|bahFG6v7m@d98<p!MbCm8hh#8J911uh!m;FK`)<GPO<y4{3
+zNY_|OHux?BJ5E!{;O(rpOp|x}PBWscjYarQbNDsX`YWxzm`b{KLJ0VH3Nng~N+Sk1
+zc`A)HJN`=IdWk2xI~(Gzy{RBuRnS^TkaMU+=>?<@Fmnw&aeV<*a)JOErwE2x|I+@P
+zveGuQKyX{Zj%Ux>`bXjlNJM+;h|M(tq?y5Ucg(3m65&fpUZ6RZWcdP(MC)GDp+ZoD
+zR8Pb*?4*%W(twi&OGz6}T2`P1HM>C8w|5!5Iq!6J2q07vZ<tC=wfGxoYb{1D5SJcc
+zQo9V&mVTv~e)YIOY@Bj|{`9_X7wF$~xj^eiwQ9th3U;{Q5anjPvNluB{u`z#3J_f*
+zsmIESYcp&LTAPvB7zY6!)@E$z*dU<1IMyPuTgwRK6Rsc<RFW|fAWTB%Q%3b4p!CXq
+zV5YrI9=P&;=Q+PcqjbLO!etz!Iz^SC4m7L0IeEgR3AiW%mB%o-$L&Ty<WpHRV-GE@
+zLH6`^05}6gv}auP5u<_9_#sNk<hl!DQeRU_qwzzS^FMUL-PWn(Pz>pRQ|UviO>yLP
+z0L-rzmI1Yga9<E$P()In(@8HOJ2qmC00GZ?%WN@@rXi8E)GCQEOffxdsHBa-TYG^-
+zW*ty7oc1=eg>CdDqlmt5R4QGYKs*4q1d?ixp_xM8I=$1)tPk|uL4-3!NnwGbQ&4M~
+z+6Jgi7jP{l<8T6VMPatc6ha8cBsfMADb?wv$bysF^QAJ20$x}SAgrjR)n>ZDih~+3
+zF*?0)KdosQ;>!L6*=1iBUJeWEU`HCv4iaDDvns*BU}y&{jBuZ!4Q@*-W=PYixuJU}
+zv9DEjJ2gPq>bBIM^|QKd<mN?FQ!Z*a$#z|uOJy2JVTgzxAk{K=`L9g&&S5dy_5onU
+zqwyZrA)=p4x8g+TupOT)Atf5F%=(mB*+K_88vrJm(^T@&P!C@ANWIXZil(84%pEB?
+zZ5K(xI3|X;5HYS8C6+}de*)7URoc=P*w_wuGL=Zz1fI4m(4`Hmzil?dnp518TiQ?=
+zjJpls3Eo>1(V^CNXb4`jnzd?!<4x2aIyfu5O&#5u#<9@06p{wuSRcb+v;mN*<c~tb
+z%Q5J*lgC`)O0s2QPS#cwu+3j)-!cdks}Tiy20^9WgFZ{ZRa4-Vr=q_g`EK^a3`C%L
+zS@!h3j03raGi#XgATjSRv;zS|n}k#cv!z&AbX;2`@N{q-RBKJ<XYDzp%LaJxCDc#w
+zxCbEHw4inf6*D_b!cq)_J1}+8@mOaH@r)5q*CAG(%xcbv2^A3U%nGqLQPZ_~{nB1u
+z1aMNDvcx27wM*Y8MzgCRXbH-bMW*UPLt!6!<+-YL!eUq7Mf5Ap^eel1!edoBQbn^v
+z7c&kh4XhK0L_U~^#<p7i9pg2WSu_szCE~|#JHNjhcYo)m=63ox`nytx#numtF(P&v
+zgG$gmcG%HA<L#^z!6I(vwf&6Rz5AIlz*qYjWyg_}md0KnYD_#~o{}fYu%<<p{mhJF
+z>}MK^v7d46boVnVk?JrkT9ny7ub-I%#?a5qBRbSN!q9<!fufqfcqDV}FgF14w?`Yu
+z+KT|}X;I3P;qMD-hfq=60mM-g%1PG_2#}Wg_jJce>ds;rvV$_Nv(_+v*)5ksFoVPI
+z0ICDT^1)AtIjn4_KE9gz_-fhADRmf0W#(*1k!nX63Nz>Lm{&uYMWdOQh#$YL?mhs|
+zK4CmxX1AVXQbuBBU@9lNJ8IK?tQ{lz9!GhEyCLi_^r*iY+)N2@Q=2==yjNBc_R_F_
+zHUZ(8fhaZ1Xp~RHG1($3srhqdVN#Cy_My_%dL*icdseLxbdBarzL*@K*eQyg3BVfe
+z0nmCDD;=v?`5=!W30~@@-RAW_8yI@~0K9h?z4fTk1oLEx@394jFej}}c8p#&JdY%f
+z1kH@6)790=mJJfmRPQWGST@_`oPVs7DYacB3FSIdb)I-bF*e&3#n^0D6@%-SEUX72
+z?vB$nfv27Z;P{b8+~=!ya`#|aW#Arc0#9hRTZj&|z83csA;0TFO*L;WJ8mxU3+xHt
+zFyl2G74#2}XUBIQH&M$6<PJTDm<(r;WEf}}FW6oB5}-7Qjtd1nmNx^BKj%0Ykk3g$
+zVs<d-PgwChz@<PgRp1uYL}B1u3<qCeXI3@6GiF#KptFTvQDe^W-IFAE^YYmPOE{8b
+z#dYr)P5?z%<Y*ALk7_}i)A%*idX3h{ypWe>O+jQ{g76Av2^&UOOQc>Zh!Py6L(E-u
+zIzFu37)3TMIa)Ie!qg(!86Xv07O;$i_!VS~Ien5~RHG3%2+g_9Fwtej#HsA%C{KOz
+zh@gryTBvy?rNW7t9%}vX9CmXqx4c*qxZK9C$fbn}+l^5SuB}9Xbr<cE1Ti*Cz;k2_
+zUY*LUnQB%h7Z@og1r9o<6Ik3WAq_cwlEA@U4xDMmXVx>BVHAT+2%H^?L7gpS4Tt*-
+z?NuZP$Z&kIMO$OPPPTk_;P|_-Kuc~vCHzKw^D!)GRPq0Pm|=%xZ$5_1YOZ=mDJeT(
+zP#y!f#H^0FXbfD<H4@H!;q-0JxRat{R#+6fiwHuJuYBBm3@H^Jj^4tgctWu?4=N(J
+zEPlGyMEW+aMZik+EFGC(9M(Tk;<3m+t0Hr3HDZXXn~#xRcSRok1VpPlPmT!|dV8LD
+z$D!%@xNI3O@>R~Ci}&97{qPgz55Nky!8gW!cCQG=5qwy~4TpaY(Hd*&4$Xw=7DoG;
+z<s~ml(ePq*>>>`E*i&#@u7gXKd<Kp9GJ?J%{;#{c-Y1nrTlpADC?YJ(1|0^nt`UC@
+z0HqOs9zVNAeCDHJGu<mci-=VOE0Q$guM$=x{<>lu@s}0jh%d{+RH;1Tt3<jc@X%(@
+z9q~7SF^u?|h~kEm<v$@M`_JH;)ex^=O~VSq>4b2Wx7$4kYdGO5oo2YjeTO@S-u^<Z
+zICPh3lK|+PBG6JptxM5FZnsOp6sV=)fX3G2QZUbo?(!YZb}2#uj(vl~ooOo2Gapf&
+z#=c=e?UW`AaU#x~NPmP-Sj<sSz8nY{M!`Jt#u%iJ*H_Uv;`JiYx=7#CE16mFihO=H
+z`MG%FW~KFw=9y(x=p9N~d2IQkcdTd{t82uc9j+1Uocr-z>RAU+@)$jTxQZ1nviT&u
+zuSi(p?mm*0TMTwIFi*CYoxXy=#b9>qd1H^Ro2JmvDH4xg6|6Bp)+`lywIv@YPSlCJ
+zFo&{jQp<<3axRB5{l;{Tg~~(OCQ3<k4swxpM~rKZ$)fnB3yR4{ZmErEJWSL^j(!aT
+zYw14E(jjM30S_-%ebV=Xgrn5oW6y9jS^9W0TRKI9h4*g9IbHgAf|Sk+P8aUl9z`mr
+zJjeeuz4UQa?+bRz$uDFwTIqn2$0PJTOh)hE<QK=}yPG#Vs7e?wFhYm%`qBfEx5}UP
+zGgg2+PWBQ{54>3mhkPGuOm;p_)mFAT@cRHn^Ofj6Q&oU%2e7RWZZh=Q3N}Y9SFdu(
+z8lx5ck7Dea_OFJ6aR+RetS$5fw4G3C9=o(mJVsu<);;cM!$8%6XQH-vqbS}yt2kGR
+zrU?LJ>1AT3z%qLl7EM=si_aIu7tbnACe&V0*}YiUgo7ql&%&Y|<KE&MMRB&bzFq;D
+z*djo2E3Z@?odV15Sy(j01SZ0&kxUT>R}N7wwGF1ayMg``X95Ob2|>I;NBdMXyHqf@
+z?+q`k?q2R-NdZS@C$~&cb~7TVOPd<9hO!5+)R4Al_?Sr#wJvL_6m}B4M93M`y-p^F
+zoL><IlZTOv=`aabHsX|qPIF%++9v8-`#5?F@zg*1{(j=k1Y8ONo}ijSO~AhgB(dHY
+zM|UoDL!PuHZN~%4K4E~nN)l4TntS_$5+A;K1v%L5M!fF(b&Vk=iAP@<iAhp1l8D}`
+z8$hofdJqJT?nTcBR{?!R2N0+X-O4!nJ6_H>6%U2>g3m|Y{1p4W=FpGB#&m*lXtlF>
+z$589gUXi-=Tc}K(BMW)I<h)QN`_w0^<a>~uW~|T9#SXPbTuZcF$uabwPOG&gyROz2
+zCz(7bjjb2g)}Dg3X^EE2AP9OXS{7<+J<>t-GmhF?VW8StRZP=hxE&qiZ3v-OfxBwU
+zvgu+SYKy?J9=2J~7ouX4c=SQ9m}IHiZs4s=knXCje*vWjRZ;!aUQpFCK!v16Rm|%#
+z>`e(mRXL`!Xb^DTs#+|mYA)i2s`5AxG7gbu7)VvKiutjDWNpK$nzgF9j8vzpb?HT~
+z4@4z6Nv|)&B=P8TO)<$*wdcizE=zT(Y8oaKROO*~sP&n)s%ezyrz+<4sA?rwm1Ehe
+z5-wv-aVf4MYF$8Bp`?jO0jL;<lExTFN#lz79(|%CRY0TV#ya&ZT0P4MqTo(ymy^U-
+z_ZeeL;)i2WZLyWrbNsyS27i1{Zzpg(T!EqAH%RW|Zuwn9cjfQvY~4ZU>g{wOw10ly
+zZ%I?~$HIDi1C<4jXVXgBP@wl5;PJ3&CObdLv~yPFD~s~|JRPKOkl*e_`$Z9`S+r-P
+zhYvLBKppE%jXT0|Z)vkV^^!H}J9P8*dh9g!+u=Vg*Rcd=@d3tMT)OYK0zlYdl`0$#
+zNg^gj3M`|J_8F0Br@5gC9TCfB&BVl6#R=O`smX(0EKL{X{M^>rPZKi$>@7Z96rXdn
+zUIsETPXIU;y;znDEGuVW(N=CKF3UrIzJUVpdNvWHwnMz0f*<yJIz~tFb{(zfFD(2|
+z?j=j`cz878@;15v9L1g7G(lC_K5-<MHiFml6HlktL*tj%^GoQ<&>Tq}j0u*b0Uzu`
+zGC3?K{|hCz4Xq&#Yc-1i3iRl+@2XSdey0ab%CW69E~9WL1CWe9k#iJulc`*~rb2O3
+z!yce-1joIAxQU`oWEIBB|31)$Rh0uohgx?)%-}ykj@8H_lJYn@RmRb&sxH;3sw#aN
+z8_aHq**IT11hBhS)*p&VTUh=f6e<-#kR`68my`Bf#+9pzH7=>9Ydn{$qn*!9(Qj=b
+zI2wVss=hV#h2DHdT?YD}cDGzVMQ#3|lgV${-C70S;8MK<>Y|=VQ0~@BkvH$WU<=HU
+zyY<aNTDApApJwV<!*efjV4B1jcX>Vc%Nn+$W#U2~hoH-ja7IlzzHAb&rI&r>9%C3s
+z-9%%UL*ZZy^N0?$ejco%=I2!fS|2cI`ra8N#Y$rwwc2DLW0+P<Pw&7OX30{Ge;tg$
+z>hViJzO$6$l`LJ?d(4S$=|k&tpkrgO*ySO)MPYi3;V!wlRCHK27-~IEl{O?>*`e)G
+z>2yh@O>hxZI*sU1>q8u0)AtIEudYRvjsbHNopGpiM8r5{8C5Ksph}W(k3Veum7L&i
+zl?oV#{ZJ<2b&?)Wib>`~+l!zx0XltEN@03bO53#Uh9#Gw*7F{pl@3cbUdFtHGgkd}
+ze8)gMXmT9Uq1Fv};LxN>`*pXd$<va=j6;)$3}l=qie)1T)<*rS$4Bngq=50-7l5PM
+zoYXESnUnBdfE=~HnxrsQO&)(I_*^DGZrOoS|6c33abCZ6%yq;?s<*D!;~JQ65&0ra
+zc^%OYN8~S?9Y{^BL9)$B<uD>q6HF|}F-o0+WH~8{!eU^BHijNylfSTYf#B#-CdC&J
+zbj2Sz0|MCL3FnB-r=7cY<4V~sQA^;NB2d;Zgr7GD`ye2(4hl*c69K{`@Oq*^j2*qa
+z4%M_#?E+4y_7Dk7``kN*=3Z2vS%+%esJ0`jP6-tg!4;D#T)iJ!#dH7@f`-p;^G=3t
+zihagCW+XhP`4Z0$g1>)&;SnoFtOUCKBCR1g_c_|@NKAHqnpwViw$JD}GXUi8(k(~W
+z31RJGXPg2cTn}(Mse5yBCH!1=c+T^d*urBY4zOHk2vPRNjCxgd1B$~GBFrQ>_=OeI
+zMaiU-Rf6_x0-)>(xbW&=+JQRFo4O$ypifXf)VIcEb~fQ<1^ex;xjr5@VO^)C$pbkO
+z78+HUg2;x>nu5q|OUsRtOIQvHEQgNPyT|0k=3a8&b6!phENY%-@xq<~lYn^0y`-06
+z=2$Nyj`rte)L3?VwL4Z|QJXo7mkDF(^kQigSelMD(D%$DYS_}^IF1Gh%}4QM9NNdU
+zeq0LYocqJg7%nWS_J^A@T$qHE;Nm&&c>zpr^a`=e94mCi(f$fuHI}$?qV^s9a89m}
+z8*WCXq0wvdf$RLZo4;Go+3QCKr_hjfG5IaP9}pX!J582Wnz~t0e(e+;4p*hn{doM<
+z*&xd%i#;R->?Np`(s$0@{Mnp@u`ALfY#+`Pdqcv7y*N(7e$dI3q@3JRava&#kxS<p
+zK~(343i$X9wy<gG*uPf5Mlq|HZW}7*Ni-gGK%Wp%s1Q~!^Fs4^p+y%`*Wr^_p-{M{
+zV@eot$VHg)hg+Q$r$}d#RTwk4RiF)i(K@0-t>484Dm)31!$v;RASR&#xiztbXOoZw
+z<=Gna<}Ij>LYArzrd`uWZW^Tmxfw)<S|0&9xMAWN6GN#`11qQ!I2LRa1)D1Pzo9NU
+zxj+ekGP@bhUU;U8j`_pQOny|vF%fVKwO)t9@D~QjF76w#FfJ<SS9_el@UVmQSiDtX
+z_m8GYQ+j9TdAG1_{IsKAL<f$tDue^dC>!*&vn5&9j65^ec=IQcWNL(`B*4^Aphpty
+z|E)TG+370?oNkr1-K2C1%jxr$hV>Is%k=Q3Z;{lZF62Uv5FFd`2#yx;MSyx?o_yxu
+z=uuP{Rhh$I#b-UD+e(Gxj%gX_#{g8*u3zb7b_?a{_%I|7)A9c?tb$DObbPSL`#I-@
+zUV#~!j^8Py<z68weS`dk(|9;6@E7=nYoQ9lL3B;M1fFK{kFfV|umPg?#Viz>fFANW
+z{N3(`gecu1+U{;>O_Z?JL`;~Gk&Ae6Hk_61o+D{BMqF?~2c<&$JV11)^+PrZF@$p~
+zCP%0s=9)N8GXu0nO>S9Dsq5M2eEo=dk=$-UZcpUC59H9Q#Wk*|Nrjq=Lr4P0g4;#G
+zjtc&~3(lbgK$%_J9n6=AZv`AftuOf7taqPUN_I9_7(Jl7gH8UzJIDUTH3LhIA;u$B
+zU3Z{DsW1gS#qPk!Gh@xWgFuq05uTFNbqCf-d)TTOLEvU@mFX%k7#q*iT|aHsPegra
+z0cjy2sYPA%bO#UMV?4BAfp-b><TF>_9o*oms@hJzAoDoe#~}5XtnI0K!(qEh`(U2*
+z#NiUUh{GkKL#>Z}rgYTZJ_r>wTWKFBYS?;45Ix&2sa8klPKn%dL2gCl{tL*VeTeIP
+zzB>aMVDtoze9jjI7gg|?=%-LHfHJ$beQcG8&jlPf+O1B`4{_s0C<~`vfy8q{{DnqC
+zQ4-xKv*c&C4;8`<e3T7(itWS5Gh@x$M<B`62v14s+J`iZgZ5N3PB<WN`>@LVI%2As
+zzSB=F%{lFZy69;iFZEJvjWAC>bM@`x-54xF`#?+^&X2Qw?Au^RJrw)YUZs67FWOxb
+zdJ64h8quNFR}9v)4?=}{thA4g$qksCPoGrCF)xyvD9ANL?pYuQGZ)u5&S@i<cKaZ3
+zEI3va99O|_bHM=0?ArEmQfeQg0mo2l6NS0_q&BcK%))qw(=B3zzY<@{N^}BVJe=)L
+zs!%FShE8MqF!Ib;^Y#%)GBv_elDhU`owT>Cnr#Gb2Ub~o*XetC`l+Qkr+rWtJ?-Nk
+zcp<k&m?xjP`u6d5d+!tu^+!>o`VKAjNs;82xau6vVkMP2uZ7S`YTsOXt0Uqe8)Z;F
+zk$L*(<gInW0H=G%7Vf<iY$=W;uK7piOW7`wuW5>kz5U~Nz&sW$`MiSGIs=>s0xhjV
+z9wHKP&I+VFhsX%WK31${Vib=R;n&ei*nY8OX&c;Cuyddwn-P(04{)-WeMD@6=0ZH3
+zL6rr8o5e7MmZ|z-((t@*T&rC*)uyR-BGuiTs@eJ^=TR9Ef*Yc%aMM7AJh!8VVK)u5
+zA)wZ_f}Je{QB1~Bhr_XJgE5w}U81fIk3M7#mkb!p9LPvot3ax1TrW}Twd;&<C`BlU
+zAYPLec|E$|Y8*F_F$Li@=4?+yvSq-j8dnf`93!d<f+~wusQx@VPBaKp9X3_Fy;;Xp
+z=Ofj{oa#iG$;a#eW<&^@L|5VFMR_&KhYsBY^<^#3k`-=h%pnr%vqsB=Ln%U4DEwD(
+z?#+krd^46Nl$fnp-f0ry-SZhl9*>q;5L8*LLiMVt(m_H$aG)SOA)PInY9mr@=2Sl=
+zFDfHKa6@zzZg_6ojisXHX={0$tWe7nh@7Ei!hr&zDijtZp?6WzFwBKVaI%Kw9VHQJ
+zc?^-qqh%HZRTisIy+zD8=V2{-&<$=$Hg2lJk?KfJb>HBh+*q6uA!rg^g`4jLMQWM<
+zRqj*aJpK4oa&?cVZhW5V1TPfeZvh8M^eo6>b*2)&5Hgjr6lTMd`+W8^!Pjo^%`|+o
+zqWZm%r|_SxpL6!xaNB(XPCS;oN6{r=@q2{*WIQ#tHm+ZK)GyijO8)R}Ta(dqZWthc
+zj~h`4cNu<?n{Ft+!s6a5n@1bs&X)rYZTLm!9Ra7A2smjB8)%2<j`DWRt_c<uzOvzc
+z36JAvY=Et+RB>m37>#9vF=N?uwEynLma!c6^0HlE>70jU*H{jEvFsIC_Rqs2&!lt;
+zu8`=Yz;b#XmH`?-v5n?uA5$GR#C{Ep2>UfOsWh04Ov(E-6D(`ZH5~2LoKL5Ezh;`)
+zlFPf{?Q9%A+QP96yq!I{fp@dl!N#gpqS~DyN}Sq2$IjiEFVk{U_#~pQ)p0xKvz;t!
+z51)Nw^8fPjD4BOD`8Tv8MElQIO#h)zdXP5}FCDQ)H%av<8Pmob1aYe^?D6|xl&?u*
+zwP-t*fj2<SVE~mZ{=Al7c$j6q;9F35n?^COV#2W^yidqR>kufG=K&XzyithPv0QXn
+zWpo!Zma*>ec{Cle3tjV6_FjTUn87k@;q8R*$&B!bjXsPK!5bvz=Nx0wxtz_Kv$+!0
+zg0p$i*Yq8n5j5f*R!&fwAMXkKq51bXW(sZWOq;WEQZHxz!jV5Z5a|q<j+=`vgLqhH
+zMMKmH1-e#=bom#{Aa(TPSlCH38Bsi^AB^ZAa@B1_Z1188!^uGqXF4i-TtRrqQ-=g#
+zL?h@5BcG#Xedw5$jc8N_X+%b$hb+<cdwoQ=k8>0R?Rv`5i}C5&n3*^rjYLmK#4<%y
+zorr;0RRoPN-9{uheA-aN{2GkkGmYTRX%7M*CP|31IO~|R-4fM;v%N0P2paJYD<>L}
+z;PCppIooF*wvI|{IHz4s>g8-ldhUAkG`zLk-WF!<7Tbspl;GpG-U{e4BEC2lj3}<X
+zeYJa{t;kik5v|8$7)}m?IMZQ7Cv*z^<rn<o=!##ZdmfdZ=oH{KBKh{}iHt&vqA((k
+z%)rDw^r%u#1KOMvgrx9&lr_y0;tNW}#uYliqN=8e(979q?~M}PZX*&L&Lqpr)vX>>
+z6`kG4hI8bk$E0&P8<jNWmwro}jdyWI(1^F&hy;h-0CUEDH*iL8Jc2u?T~6xdto$XO
+zSWuOSoqgGicFk=>tY|db4X1A+C>zo7SaFAA8F|Me$4@{0jPAQ0O6Lj^Bk^uW&-)7J
+z-RG$0>rLKI@AnGf-{Q0wyi6RvfG2SJDSiJioIjh#5@X&U`c1OrkD<>2R~`G<X7XpS
+zQY|IJSw;d{1*b=dp(Jg=^PRou{o=~(*5q?L$kcMTJ_>mWQyk83F7GzeZ`L~w?AC?s
+z6Ru*;fPB>*-pTjJ;{hK7f2$w(0!aOSjwAup4`gD*1A=DuqBlPMj)C`&Aluif*M1}K
+z<aisGNBXysf+p1z&+k2q`RE)Nhj;`CrWWqodyhG6E+yd^z|R2@=-%61rT2IOqEw{8
+z(f@oJIKm(p84hfed*5<g%C*ujCe}yJTA&<u*!+BBR=hP*rTpEX%%dAYQ-Sb7A)Z#!
+zqo`B}yGAQP>g+x~nyU&rGL+Wk1NO%*qFdC5KM!s;Mo?9l0X2rd1vPcEG06IA-W+%~
+zgX~4ypK-^)RCf2jLhycUH4nV6s7`#ulB;~aa*9QJ@D%uqPhi>_HS3A`!O5a6a!tpV
+zCl+hV%Upx4MjOs;d&aWQBFK?;`<0s{kkCh*BW&I?vt;1VPs-vbtB_rSw?4Uj)G<He
+z+ASw1VDTceNpTI+`x)z`crUKS_}ruKl<EyabaBXgZcdk4!b`YOxMX3KHx)1&SOyC#
+z;!ck{Ol~wYy#A3bEKjA+0bgkCzc-Z}#n&B}8AQQTed**TFh~gOhmJ{TzVR1cPtdEl
+zD_|p5k0mTWwuu>$j9Cw;tO8Vz2pGO}q7EnO#sBY2B`+OrCf_{*3n6pn8;_GOj6+8x
+zg=$+?U_U*%VO-f#IL=pE>K6pppKjEz&wN_@Pni8Q)_dHg=@t`uNnU8WwC%+l1ef;Q
+zGag_C=oHn0a3M~Napx($)R{^rQRF5Rzc&@yES7`zu>drU1)%bM!V8zDFQ%8FtIH=B
+z(@P^kqc;XG;I+)~{a0jyO#0SAXQuJxAHOG|XB~Lq@Nu0_-tdYEYZCprDkNU)_lt3U
+zwJzCtrz%Nb#$aEHvA|qZ-eN#{*GdU~cUbWVYtJW#8;Z#8I-ZQ*E1}r3!*k9jdr5^I
+z9F|QQ2*R?-jChqb5)U%jun@4bL$HS+s57`jTvoBuq1OlP)t<4e(xF#TdIdogHGSV@
+zju!{^9PM2kh(}NNjpd-1mxBV!;dxk2j3vJoSnzUMU>TrF&N|CGNPuENq@<T&7lo~R
+zaqTQDqsFq^E74eiW!%yJdYLemPA`^5fu(sKmT6-NCyAp=u0y8<mbvq=%o|JSn8E?5
+zRL@|bTU<dd7K&C8q@lH_1$m)p)5xj0Ek}E0_H{=u6m^IVFE}Sl8|YNl(Jic^zrlxN
+z`M`GXN7Za^MC?b<!-~<1boj<gD)>GC^SLy1kI&?6h!I`ojp|)iQg|I8o?Vq|-ur#E
+zG*h2|p-fg6?%9`*?&T{?yi0`sUWj~%6~hmWGtkusPch;fAb$GdfXw)5?l3kt^FwmX
+zQ(>GrqF*1*RB-w*)cTD<41?)=JAmP_AEZV3#A<v2Fq;K{on2Nf`oB3z5<gcSZt;f4
+zy27nEEjdNX^9AKaQSO-XbmY!&-_Hmw{nS~-YCb{s*f#sQuA_2)fCR8l8ql3e`kNe4
+z7@8VZK7_sJb7W5Ky4_bwvNy6#1W6oDcE~j-H59}v^%$S29CF}vHWN?Hs9&Vpv}M*#
+zFDW@^)k3TzP?DCCn)rq4n?`W-e`8tlOktly<}jrMOVErC8AlGEsfAOTe14SfahkRJ
+zvNbtX@qOsC&hCJTVAc&phgyFu9qIK2sA>XfQN1ONqZJK<N1OF1Vw}SP6jv$&wBI<$
+z7iI|!D<X^lAnzFBf$}(_L#_YUlm`K7B%F8c3=1vIdPK2szNc#fvEAuo)}#UBQAs$>
+z_!Wg&HABLVmu-Z)ILK2Ji|_^vJaCd(F>7)SN~bER<!qZNm4kH4ukp<3s;2Ow1!k;(
+z`sB^}H|So$(=ND1dnyb2Br;cT*8d0`x+l-?mp=CRdg~L_&~4v>9sqbSu0ceHT2JQ{
+zxl~_VhpLzzYj%T}^WJ)w1+_G>j~L9_OK!PYcLW_j>`rKyb-q#uv*zkvpv=X;q1NwV
+z2G4N<pe3{B+Lc!ov~pGRC_wVq_5hD=VJyw>Ik2||uU_oZzIl`)*t5`v4=Bg!d;H3b
+zibZ$>8j}`HD)wwS!{@{Ggn{joS^)<Zyma3|^#jh7?YCvI1&zbkhTqJkkJn2yP6uwZ
+zs;WKzCc)taAUMJrL?2<FeCCRSYb6ekAIR-Saz@>*TITgaW<On-pGhm@_~LMpVul?>
+zEd-R{uXXxcnqBA8Iy9qjvH_0(%c%6(@W=}nbkU1)qFhdjidTvJOjDUJo=e-5AfXO@
+zq6=#qz^IXR3z3MkSLBRvV2x1luf!<c!oaV1E^W?TqeuKO{)ZQRYCcaLKi0CTQjgCO
+zpwnk=HhQ`FPiCWA)&?cVR2ATobrq2_WF;JAB~(RLRjW66p->M4VUHji7ZKgzlJPI2
+z_@_KNK-NWbLv$5xeohrysn<cvItOscI*-U1vJwum5~_mzjly0zZ|DvqJ2m(W0?9gy
+zh-E!7PoG@R;d6|*(%H++e@9Zy_ep!!Z@&BkyjpC5xfE6`A?e%#R#xst{s88xSQd$^
+zA@TcKx}V*>p8hus-zb<Kok}l{Or`e^PbFV)&s6gAdj^}yOYRxA%vd<(f{yN+b3OlM
+zIN~zK(b8Wz&L=G4Q^cML;7e1ewq)n+s=Ucjv=#UC`oQU;Q?ZofPUBNtzQH=p2CLvx
+zUB0=^>*ZY7!J^H$1NNN7g3cZ~i?HaU)_YSO5t;k2R$;mJGYyyz`&v1E(XKzN0W{bc
+zKHEw4Xfo}7LrXyFJI-3_P!CqR6kcH2pz(*3HIDX9`{NSOmKsWNDZIe4U0~^)hh^7T
+z_F^|tVA(6M?4O6_z*zFdn*z&Wf#u{pET_iO>E&fWW+?5dk2_1d!>W_XeDS8>Wu(9|
+z>S%xMju}f_yeZZ6M1iGo9+sxDY)T@0y>=SE@wwX>mD6M!D?xKg%;uG-VKWV_aczZZ
+z$%mT$7<;gcbph5aF@_JUC%+B&O_jWVBUxIXO7369+RzFXhOii<g;DkhXbsr8np4o{
+z#`l(xly7|hj#r2*fY&{_LiCGHrX(1(RE)_#>4hUh>(oiC+F3#Bhz`1zrYe4IT0wb5
+zD1uuz-tEQ9$OiXF5w_>bU*z-424NEzt273mH+J>{kb4Y)u&0@NKIp|@%Le1JFTl8~
+znJ-J-)I`T46ply{5Ff@>(548Oj*LrV;ZwkCauRT+UWvuYD87#tH(%a6&hnYpN3-~9
+zI7?JEX2R#>;Q*STrlU!FjK6Rl#&i!61f8uJE)zg}SSDP?_UmNfa}fC&*<LJ+xz7a9
+z#>E6ghgxqRlnXEI;6WUuaZLe1AXjx&#7}ECqU5$&^nJaCk?nM1Cg=?p^hQMQKY$+Q
+zS~TN8VMq0twpEXw=zDrM1{m1&Aj%c17CTL(!cSu+YH374Mi`+Bua$2jx$;^$AmVG~
+zjDiU<2ku9W(WrKe*!Og?=!lcRc7g)k2?6Viy-weB=~bt%BXD}CPF7PCl-dRB)OAcM
+z$sUtt3^iMVYC4G~8KA;F=@#$ZK+U|7bM#`ZOwsD|m8sje>_z(6iMRN|cb;*028klr
+zW!bvXka?3R^9zvp;vGPHEPF*rcXS!SAMd~-(Jpv}WpfP1FM8iWrZvN50!a1v5ws<0
+zc#BKm{#;IO*-TVns9+yxgJmBeI@CIWI)b(_%cbs7<%A04DwaJi0>%5Lw(L`BK3X<m
+zBE7AG-nQs{F3w-VvWKDnK%rvUd%$JOJ|Hugr=eWQvP~;29mKOWgb})6*<)a#+p;$R
+z5iDC#S~i)3W$%mo_$6CXMK4YuObgZ#*ir-CLuG5C?{rE61r8|Cqf}1s2)XJp3c6@Q
+zpBBp|V;DP55JbzK)8dpY8!=taynV|)QN`-nZis#0YCeoL*=5<wB%S%xVCH4aOrN6a
+zvFrgT4@Nw1RSfD^dr_SCuIl4xtKfWJBn_WyZi^a@cZs8L$Jqx@(1%9;pn???4wk)&
+z=uqoE`2IbXO{h>E70ceR$eR(REqhB<7A>1FDh+zG1-&`ZyUw`=4r!u9tngC51(RAq
+zjxBo~F<ABt%9SkJwA#!>pG{~KB8<=l%U%Zy-IhHKh+x@@a+zgSh5hmiUa>YR=Av$!
+z2yCK(;D)lb9^!P00L^VXy@SB%^F)B1JOoj~MT34iOj?YAcPbWao+!{07DwL)bMCIn
+zNWY}vm^5RSW)Z}srjw?NBp;&9m#Ip`@c6Nh#QE8SVkxT(LmlfkK6*huv#W=%%D>e)
+z&J^6=u>cJPI}->ZJB*`QY(;BA$6Ly7sYJe(RVJH231gBa_(81(e_?+a7`5gxS|ao5
+ztQ!)5Ohk{mk%TzVhF?c_u~p;#n!7;{@H-yv!&@uaAmFrEGK`2#Y1B1BVWL((o$Qh#
+zm?FIjyZ1rq(BiHD!k8PcIG*zER0rxDK<*R4772hYqOY*^GsW-$?mU=y%P7sZ4Sq=O
+zc%SS95o@s{DW0e?CL=|#OL`S{|DJ1mQS?Lq-dYu(x=Jf89-!P4p~Zc(Mf4T6-YTo|
+zgM_jF(ke1K(m88!7p0`dJw%?AZjBV7MbfLVy9bu~eeXrzBRyfi7rt)fFR-KA;G_&I
+zN!Dzi6)B&z>gaRhU7s26`W7)p8BPSfgu`W`FvXs5w0?OY9PZ<B5H2wBFb_^z9bkIB
+zk8>AcB?V)f^44Y*5V)xrA1s@8F*LNxyYZXA7n7fXj#MZOg(kNE5Y{oe&Xwzwp$Ae;
+z<AbB?<LgbFg_}zLP};$0YyiLW7C)voxiOXejsWN{47E~?E<8FCPFU*mqr>8IX&Hj8
+zL@SoI(lt3U*f|zNzS-*3(g(_Mag-3LzNLp&J+5E+!hEW4ULkE7X~v!(-Q$(YCt<yJ
+z{E57uDUo{L^MA^opR(uDd$4er(Z9v>`(OU4?O!})&o}(>$9Z*2Pxa4F_0Rq9&p*{a
+zKjm*+J@Jh7DSrcl(9Owx4MyQW{!{)lweghyO#h_Md5I_4-@su8UJ1c$P*bWtPjJ|7
+z%XbektI@kFn511k@Js{GCg2B7$xrSf+z-b9IGJ;Pn6TjDRG1Ggdg9W+%1AL^DcxV<
+zp8Vu8{=5UOxg2PuqOlDcVNV-dodpq12sMjC(YRN!gs(k%?uOYQX*JUY<X#Rluo6wY
+zuEgx*cQI@8w6QUKE8oX=$^tfhKNw`@5!^YI;1OK=NV+Ys8HJW!@koNGh7IC;a_3Z)
+z3-G3&VuF~0PU>kL?v|ws>xKy5MT_6B{TqE=M;v#}*PgOBPE9&P&Fcpz&3kXa9G|kc
+zPv3m)DSLaWe|s{|BUbGVz1sm!WhYDT#Cl=ZC%^Ig5T5`a#8|6B_`P5Gy<7R+sr=rq
+z{NAek-mLuIDF05E-if=ZK6G<B)LH`{9H7k$j&&w&k76enjM*c7fcMNpF0XSq7as)S
+zi6>rS#<4M+7i%UT#m{8}mbx_#-CEIg4z4e0`167(2DXrld(<i1f#er3$gduKJNEF?
+zOYh9jPrSRANqQ5_giLZ2uQKUeezin{F5YzN;<NN=-YTn2V2i9W&Lc<)+Qbxc{0Ink
+z5}6Zt{$U>b0MBt}yoToyfs^Mk#Hu_ympo4h4j04Ay3NLsYWh{4NAnz9BVyUG?2dO~
+ziX4?k{TaFS{3qye$upl$;DNFlp1o~Po(F)d%CmFH^Dyc1Hg*@!gE{>w&!?rmNyfo5
+z31G#Vn4+Fp9y}YldH#mLGslWPJns^pY-1m>D$mX(&pdqqo;%$<A0V|}&wF`J>eB`3
+z8VP`BVv0PoJa{&8^ZX7dn0khZi07A~O?}{5HtG-Ja*K-U`y4ej;By140q*BkrExB$
+z>5y)6X}4RN?VPh}4Q%E)=?>$l0TO^T#1y4rc}QdAmgc8n;+W6wv1351-2-Rqgu*)O
+zH8`REk?47V<NNqfV>7#Z@PnLMpf4D_*%(zpykK!35a9s}9Qy;l#$b55;uDYIXLk2X
+zQ9@5wT-bgA050eo7%z#}=I~@AAF&9p6rjuaGT@?$(Q`b070;1<8O$PLRTVpzDqa!X
+zrTuOdFC(?yVCM6jcx`iy1fXJKiYjJ#h+^bc@hf>05?gOU#q2|82^CeWAJ_v!TCU>v
+zbZS)0BRjn+{<j3p?*45A=c|}R)GOZrH&pRpP%*!GecM(%E-bX-24YneJC`b+7Tl%7
+zZWT9?TCd`XJSTqq+Go_T^Ht=8^J?J}Mpp5kLJFw(B&e92jgfX#v3}sPCem^hzxV?+
+zD!x{$;;$oUcK0%Z^HoeDRPpia@N~$FzLI4=5A5lE9gCgRzy0!EqFs6W<)`0|m6h!7
+zH3WU$e&PK5_c<F|29;vJBw2tK{tEAEAh?WC{ly&FM{nWHnH$5E_c6p(&wP$ni|1%1
+z&6<VMS3Q%R=P@l?I)Nv`!Nx-MdO`<fPo>5)s(L>3bcPFjaxS`2?95^asX%e`tw3?`
+ztw5cE<qFiHlgbqLdZ9YKP@BC_>%CCRy-@SLP;8GCzM562@G(`~BSsF+Ca_9URYGa8
+z27|?Z?gxG^w20-n5yAWW@xGHhm6Seziv<<}#Ad2vn)uZ~V#$dtzG8(&HH<u0cUpeS
+zlM6F=S4re_+D<S>zpTTvw3giYJBu@F%*cI87Q8GHW#}$({vN-|oSouaNh~ms7mnAF
+z_4#viHcK>KH8N+<FE~S^(-?CWXPY_lFgoHp(L@<vb<z8lWzG&uoSo!xxE4AIlQGGh
+ztyDStcl3xd>5OfQPSIJM(PE<tI$~*U*PLzn*EWJOXZtxfcxyk8<HOeGj7jE9<;yy|
+zqu?yMYiDtG3c``IL-TT?ptbK`2MEfX?dIIzN@pIAmu@pAnKP9ybM|_AWY$@9%3g_)
+z08M3tq;Be#gog%Sn8<vi`uYb4VPhR2Mn^}F92F{$`uYxk4P5&|I!nwBm=b@S{QAVe
+zwdWiU#Z3PE+T(8kkYRn+^@VrfCAO8;2T&Y$UH|qw6oXqha{T$vjp@I)bw_|WIR3q(
+z{{yC2KLo%1jP}g_FY1{cA0*PW0f+qki~e?5&pd4x3vA`_c<ogeQmkkD>qUF!mEEJi
+zz_1W>{fuCrbRD9G@U~DGgIAiF=Y`ht2Gtl}SHT+Y^_@lVWfdzgS8<bU7b;d}p<=`O
+z5xbz`AIeqCSfOI2OT~&&#oq|-AHRy{!BNy0M<A$pPJtJl@fk(@Dyw)US1UZ{JRV<Q
+z%$Q^qPZLeal%?WzXfUXFFsS(6E)^HfdUm<fw0@U?Q_~-;t2eJNbq20I3-+nhsM$-a
+zQtOw?a+O21e$DX<QF#W0D-m@1R-m)lGFIqR>C&lU)afyJtkdb8$B*_IgC2_KTKHrd
+zUumA?BRm^r4bFjTRQY@!_dCU4mr2s#(t1^W$M@0gYPb8jUCBY|xjoK)dY;?6h_Z0G
+zzL+SwpW7R{3m=|-+YOFpd^@cBJur5P#rc$b!j;<ax=xS<=PY(>SF*a^D-&>+Kc@42
+zqv+gVdfSj43p-l~lARm)fB(~cwa<ci*Jl;oB8^x~*M5K)w>TR#&zpL#GQhDj2~l<r
+zi~>#_`^^@6^pMFuIz;zERHr=I`M_1+fLig;IG|QMq4nOR)!wA}UR-m%P_w;BGrdU@
+zy|~7Ep~iZXMthS6dU4TVsmOTJn{?QlwCkk8S53nk6|#m@W}vr17cjfLTsVTiseVJ>
+zDaQ>KDIec?Br>cLVvlPbQJZE!=y!RrdeB4;pAh$}6q-K34`X6nAIxU*!ll&+tfL|M
+zV)8LOl!*R*4nN>@Qc4sYo=W}*GZ5S{$cySiFq^aHh*+g`w4o(PbxY>2L_({OtAz7y
+zV#W0MhCtEjC^Ni?)%9UkTtwLixZ#rbY#{Daoj>|aj$wY_B#93(9|&`MLV=%RPW0q*
+zP}$BlbHe-Bsh-Zpvyw4$T$w5zlUAH$aV4tG6o=k-hswfo!nA_$z2;vq#EjF(u+}Jb
+zS?=gR!ywX(eL(JD*Vedf*fl;1;J}VeD7>GM`f`+Nd|wBnF<}hvz~nW4kRQM=RR>nb
+zket`}34Wl)*+$AWUeHygor;7mDGx}ru;`o(=KPgNsK!SKr^3UEX*MrWILru1n^e&I
+ztLO2siW(mVD~2ncUm9xtKSQc<W}+c<#E<5;=v#OBE7@TS#;?Ix9tIL>+~9gQx>Vx<
+z2}{Qs7pw8ZI>nd&Bqq>NS*UR<JUqG+YMi>p2tFoRvC82ZKj2rSUE^`$Qd{Hd0bS#~
+zw^OO{S>aw&pc<c3f@<6sD`Iub=Y>nvf!$3c=QX~JAE<Hmu;m&r=(?GTMAxN%xAFBl
+z5~}e{7E$31#k52gYh0P=wU|?_@n)<s+`QTbfZO;l;zbMSoSCTHX%_Ut66$zH1U!XJ
+z^h{f<!BFD{4<8WA+jv02(h**)!qpRcU9EBprkJ2kWr3^}9_~?x8lQI&GF)ooe~9nH
+zh8m9(!rB_&fLNhdZvaE3#!qzjB76dvz51yVRO5r98*6+ZFWgn*1j=iC7(Y<s9G}ZI
+zUeHygjTkSxkx@rOuRexf=C4FTH9kQ&6&_biOTq$08&@XY&|^-u#+OSq-UNVa{5Rpg
+zQRlAl1Bo0SU~C`q7j7FWPaoWkH5h8#;JU3`YU2S3OGkLIibWdog-cHeT;miI)Tu1g
+zxD_65UWXbVa1k<Gs`0<X7f(Zt$BA}rjURyZP~*HC64;5o`m&^5Q=m4!q6F3Wx}veh
+zc@xKlOV#0TjO8`H0T|TyKDAXE#|yfuv`yn>jc;|4*sdd?8s8<H3U?GMUX4YKD>GbI
+zuGV-5tcYv0@qH9^jsLM;QShrt`Bl>0P{$(R?GgCTu{^3M)c8CB@Q{$;@;2_&u6vAP
+z6*FeROH|i5#RNJk3pKvt>~#i7sPR>&k>OH}e-^k7H69l*ev`|u;dzLgdbh#zYCqwS
+zd5-U?-<*(TVb(uJpZ&VF4n4b8cEA)~{48eI$}DErhV^z=m<hff*gX?uOf$iIxqzW`
+z%>)(0Oc2Ju>5+K`kVlh)_4C4~9sOb9mBLcEXc5eqSI8=6tb1GOny+uM<7!Y^u4cnk
+zRWzFMG=9~XF@bV3p1=>7F=sJlGcM@L5=V`fB*q*?#}zKNVPjku8ha?wnt6<VgeAQA
+z5=3!HbP&R|ChXi`&jygtgC|}E<xw@>0K7Fl9PsET?8*p=qiXSr;Le~(^TgV)VmRX8
+z`)*`z?SjU=B!TAE?o=U&WX-q9nmb$jI7|96D!6Lsm+K^0dy7?qC&js{Q5Z)9HgYtg
+z1z35maT)2?%N9SmY;(s-QMShQm$1yC+kEjs79X;@u8jiQx-a|rQI#Z{P`P}uPML+R
+z8`cYc!Pb8b`nIhzR@l1IW$TLd+WITeQP-`3RBfFz?qKV)y|zAsBupn1sLS3~f^5B`
+zXtZ_S60ETt0_C>8g&%awsDx6NUC@=et{X3HeZx`O`W&OO(M`m9C`DUe6__sK1!HkZ
+zyh|ZmYr-x(i*<PL2#+w(*5?r`**bs1s*Ip)>qG?bWd*eL6~$=lTCPaiO(2T48+vv@
+z<4(Omb6a<+5JY(MZL;RhwoWy`*0&V2w-vNHLg$`6e1)~n*1r;-dg$E;F*D(ke!I)o
+z>(=w8g&W5iy4LfQ8vF7~E2Z^3<rM3A2E-wpVA<aabhd293d>fyEL*W&%YG|3t+(uw
+zPXZ>lgIVwYS+4x(iR>W>X01SGJx<x&g-<9N&ANeKu8A&Bgh07jkKxBu@(|C{<jV;K
+zQQ7pck<z9|9HmVkkPX@5C=z?fM4KLDiDWV!^mQ@pb_vm%Pz%XPE@&68BB*o5hX5!U
+zG=IXNji7AML<HkKRX~Ft5C<@5oDatP<k2*PDGM&m43wL)Q&lv=n`0C77ddUplpdx`
+zJ%S(CMfhlGFy)3B=<T+>rTxl{eru~epELQpn6mV&uO9u7)>l7>pt8P-y=i^UL~~tK
+z*$l=H4IPXWFM#q6O7*Y&y$2psc_QztK863U_j{|d@Y4D?&S&!E2bvB?fMjP1|8Mr5
+z)Z}@EL3F@wAlcGh<#+X@<#Km^-FXC!=UrIi5rq;V-8iV=;>J%`5*#QbrQ%&*JXtvD
+z+Rlgn<l#+wPV8(ghB`d?{C)~?oU-Q&cJzP@SL&oR?;6c>@*C$&LO*R}nrGaa9s^yu
+zQOS*?56Wkwa`V+jZU7gY%^<77*`RQ0)h9UJ=!)t4jv%9+vw=J(=Zs0<%*b?r(3}wo
+z{L7=Ug0r|P*3H>004tmwdMe97;>6Lw*=as8tm=#tZu6XT#w2iNWI|-lh=iPd9~{Fp
+zlg{GmO*dzAy_{*f>e}2B`Zzpt_Fb>Dd@_uVy&+}k+#fhIGR>;ZnWpgI?Bn1ka28h?
+zx;dlQUD4U5*`dxjeJ<>5yDw)Oc}~t5lfapgg(r<^XGB7seS5)KoDIK3Ge$olf%j0u
+z++e+#;oPz(!Rsmvmx%Y3t}m^4KA_YzJU!u0dlYkDWft=R!+K5;yrv%jQhQB|6}zBH
+zm)E2icR_yyhF9+=y{+6vCYLKJT_oSG>}5xT8Lr@0ePz$*Ik`%i1eF?Di-=s=L=q-o
+zM}JFhs7&!0V2N(%H*~4B6V!^cJlK>CYYRf)&sssPTi#Zl6S<&P92=(+y{)XA!VNXx
+z<VJKuUyp)TC}V{}mF~p^LQtWv=<9fPD|EA>(584(k2CFPQ0NSP)ho1-=i~}y5)^7=
+zI%;Tz5=m6(Pe5Ox1q}v;zOYN7he4r-P$<4jrPC%8LV#1J{G`?OrF|<@snJex>bFp+
+zatehS5L^7gLcb2^tWd@Zg(_VNRg4Pd!}7Odp?ejDj*w$p=%}MXp=0<}uh8K<Cs!zw
+zpim>z){PZPBtfC}F8^Zfw!O=#I`0xk&$)a5I-=>`y|;G>f6~V#-;O%-c}WRT_9w3Y
+zej{1>c-4hSmp)!xwpjRVi=Ip#9=(l*aOvY=R4nJbKIC{*D(74ZIS>I&v7GZYA;-OP
+zIp_02j(f$0=hxNdoyR4{$Ra*Xf!+W*2BW;SOh(=QZv(-PR1o|?Kro09Tz_>v2Y2PF
+zIexH2-X}9Y|NHyZZ`a9;x75|`kN+Fh?FxcQ-SYf6o))@(qk*%n)%S43&QtY^IztE1
+zWgt&L{l4&D-&Xzpa9#cW^1o93ZX)=U>i2EGzY6r253Hhh3E$T{e?IVdZ)#QN2a9x=
+zx+eqjp}LbMdZFmER|?VzuO!ibt|ZYRt|ZY_t|Xm836-Ri-lW6cq=Vk1{obU#-lW~$
+zq)u<rc5l*FZ_;LO(ndAO@8J5=aMj7vx1iI6b4g1GZfh~V#rJc4^f_Id5D<46<{0x5
+z)x4tg!FAig)0aggx|b_W67YElA;5CxpJ9qKs~_PyPGcD5n@HjL7k&Kw17Ix7MdJs+
+zbi$e22$<}t@Go<vQ?ZOfoAwN1HMEJ`H{7QY(=i)HFz8yCHW9fT9tu^?&a47GGz^;N
+zKI~LcLZq2G&mXKH;b<SHCc-C;;GfBf>{jqDplTF+$c-V)le9lX1&;{5mbOO~m4Z){
+z&-vjP5^IDMESJ});9(ZT*$tPcf=^Li3MQd01q(L#A5ySMQNiOvlWi*??Low9XcM^=
+zJOBVGn33G8X%kUYFmYfqX0kq4g1uoT#;rg~2nCyZuHZN8fQLSX7N@e^3O+!w8U?SD
+zxpYl|7Fl<dAO-I!Dg|#y1`4^4SdEZ^jSB7vdS_pp%7QnMA_bFBmx2Y0`KF4{f=!AF
+zK2Tb=C+SIh8woYEiQEd_LQD!~1Y%hjeP<~um^h$dlP!OlDOWHh1RtiJEBNo>6iBdO
+z`(8t>ZUvv#E4XP+6iC5~N|1t=6_tXg8Py8M3Su=v3N|WuUeMv|&{FUWQlwxK>Qb;^
+zF~?I8D%hl`;8mq%hq;31kWfRL$gSX6#H3(GpkNErCZecd;(&rpwrv0(D2^6P3BiY{
+z=L&Aa>kbNz3k%%})<BjoVC8-AsSZP|DUgE4gkB0BS5yifU{ng8K&(bc!A1p-3Oc;h
+zC<PB9MG7XNE(Hq~>t8BD1)CHV+)$cN|9klg2{p8d+zK8>ObTWM3brt9B8mzgQO=IZ
+zhR65)(r{ETB?KR)o-6p}Iv=7gBCe0T0(}Ke3#`%rZfZY{gA0nzfD7!PHW_#VdZNQ7
+z;ekybV85>SCB0&z?10IubefF%x`Q$~8GXU=1&}kWHt^$o^pAiY^U<Mqv>1cC`T0jb
+z2~K!mKv}=b8xM;8HyjwasgDN-R!7MrwrR*;ytk(xiQZh#@9n+gd+FL8bl*Px&vGZL
+zw@=?n(CqGA1o9`(ynVVa#dw(e<H3G&<!)1!GuLa%D?}9@<(4ULD?z5*QB<b9DvIn7
+zcM+>GC&5Nj-V(HKreHeG(QX|nGG)^1GG)Q0Ya*-B&ZKC{dqR`Z!E`g)L_!U1BDX1T
+zASP301Y%hjy?`H0nK;l_m~8ne@Vqmogs?|b&rLab1}doceooR_CU~?0{qRReaw~Xy
+ztHuicTdftmg`nBpA4G7z6)ci)aCVNhtgMCxKIQDZu-wolH*C6-8_f*g5O({T7XsY1
+z;H`%1ORH{HO3j<qES1l8<YuMJqFEW%?-7J$o=1Sx&5E(EW~D4OE5+Qb=0G4cD@GyE
+zEZK?*)emg15o^5E{WWi|QRx4uRp=N&v%9|&!TAa$k*Lsrivgi-$>3>6{{-B^Jk){V
+zb*LH#XOMWX2OxCxASaZdHq}s6ZE9HgY*S6dYV2CDu}zH&T33-mn;Joi+7t<OwJE`3
+zj-VnO9!!dDYFcUG6)4gkLqZL0B6ph_MNDmq5r}1B+C&uF6mg(UnQYqt;RW~LqEkZf
+zVd{CCdOqq5ccF`WSa|J$fU)xR!v{d~%KzH$sj2)ws;&I5AZT{?H3a8Z{;3WCxler;
+znojTw219H52VJeHZn^YC2&&7aN{y`v&w;S*c>P&9{OJpM2E;X^(2o9y8_FJ@5K}w)
+zu{b<2%fl06YDbe>p@DC~-VTtQD^Wi%FcCDipg&%&QR1K0D)Dy+n%(`?Z@V2Ol1OYp
+zGk5lDL6coAXt$;Xtq>1JC81*r+E#)`B}F|dDPN-!Vl`IW5kQ!OZRy8SCk{#Y=^+V`
+zuI3{^3?71K^I26)Ly}^6ZbYutCVtgWT^A5f3T+_f@rX$QrB8{*wnH2oj}){mXUlwt
+zwzI3O)*b^s`eGaXGZ;hVHH>9K#I~a!7>SUUSNorTcTKhPvTW~D4Sz(??Cy!T-cGfX
+zNZ`vW;~z!o+k8sk86sbKO5i(D9xLPjm}u%&#!)9LnnB<-fiv%;VZVKt*7pC;{q}{g
+zfFc?&F(`i;L8&E$6J|bjbM%F1+F}0(t&;2ErIK{K`<DD|b%olBL#$Gg&OzUjKU$Oo
+z^-4(&^?ge|Qj~;oR7%dDRr2{o$vEHm7%*T0AT8DJ$I>&#ebmZ+tWx7XS9L#DnML1i
+z*slH9uLIJs+l3gq?{Jw~>E7)k1b4f>r%y+D=kb^3)!XG~bk!}03>>`(C_?>4_wP5m
+z<gVK=wO?J`FjZ=lyKBQ#ITYIWa1A(_Z<u~rE-_<;#7dXMic#WKG|4*Ws!QV1ZfV$>
+z3m4WTF}<+Lj^=N4NnAHXkAN}0KGD6SsnlHJ@{Xo*3W*I^>}Y;&E-_<;#7dXMic#Vp
+z1aId`T-wg;mDpQSD{tx7v36}qeSKZ0`UNP9PW68+_H?S@vM_tfN`H#;V|ZF=a=4j%
+z#yw%A<C`o)&wh#bBl$gA^syb--;@{X@cAb#n8r2Fu#l<+v1I2S_S(Xy?<QgZ6V^Uo
+z`#|<C6vuI{6T+^0!r^`}I}%P8u>`^Ixq^g{PNiBo#Nc|M#fkW&#V`QyeNJ+ju92aO
+z$p@#BwG#npH~!SoMv%DtSSFWIFDAbQcrKgb`<sV&eir8+VN(lmR4(DeACsLaK1h~K
+zhOdljR!eAPZ{W`BW;4SBt?Bb6QRzlK7$s|1b0=$}omyexiJ)X{Tv+&w&gJ#|%#~ZZ
+zmUMw)ES5#5$2htWm&zto*vs|dib^IXET-QsiSaoCXS#tFlXjt%qR)m;hTk!-lgCqk
+z>=M2XlAvbh;45ojgXNo<HWZpEmNw&-f}dkCCQ}5|99oo;j-IVPo%NKT<+@#o=PmJ~
+zWbswYZi&~C6Ghk%l=d)U(iS)_OT2;KF>f=E=Mpm;5;MmVvpi%G8{HB!$(S<lnv^Ae
+zj(T%R4B0XM4Yh7p;!O$>jy%=Y@m@|CQvyr8T}oO9$7P9E@H<Mpn#XgAnGK1VV~JTF
+z5{r#)iJ257CdIBg=3$gHlf?EFhFb2;&$sGv_31wOS1a*Mv?S<7s~MTb&nVS0I4(;(
+zkKZwGF^}gGGaC{!#}czVWDy(P5;G}EEcc^S$H!B+<i5wEIM+;VbT!=2gxV(p@K(|E
+zU^5<%(0yy%C7VO`(aWK_h%56;&{=y>N+~bldR-Vda-7pNW{u&#H*ZeUj5+>j(KKRH
+zc>lTCb)OBo`Y>)PpT_D0A2TeXFAfE#gPB-b7&nmtk!(%ySJxL9(Z7(<KsjDzCtOV0
+z7lt(>I``JP#gApjq*iG+CJj2NqE;+DgN#3VFCO*jW^`DyqOOMlx=(at$`QstkB{_H
+zi}y6XCMv9}uese1*FW%8mGj}F7+nrAx|}rAXK;3hf#vktXJHUM<td^2Kh#W_^>lvL
+z@v%Q2ZLT-(_%J_@)%n0JFg2At7KF#sc7Wg#?=y+v`2F$yZsG@mZysSXPfw+d=`S4^
+zxN`us7D(qL(pfr<xK02Ie0zAo9KkaUaJiX$O#0xyw#I2NaI5(x-#pm-DJls6ZZ%)9
+z%eNXyXrh_U4+eyig>Su8&%+pB>3z7R)Ax-5QKejWeU#sm11sq(AlkQ$G}D(t)NdZ;
+zUimHa(EGleb@5W_AesEjTn$gB8t(s4dg(8vk8~jU+2rS%Z~HB(xS9M)^ZH}M&Fg=1
+ztNBI0(!66=E>vM3PxSfz;j`-Rb6_3N04w;Vr@T}lkuAi8m8g`n-iP@#+cQ-EgtnI_
+z0sq<l@XO#3@3U7<w95sD_{9C;p@Q%pTYDY9lAXU)mqdgfjw_yU_-w~{jxh2!*}f2N
+zFtlT=wP`rUE1(gc$WfKUF<uqf9rAz?NUl$+O<9a><ThO+V|I);1tiCK%h3k7-9<DQ
+zP}x6bvi;-j^8h+$0$fUdbt-w+9$?^PAJkCV&nX=kXdhqcLtEHIU)h1HjV~@tZow1Z
+zL|?Vx@^V87jqFwW(D1}p>pk&9LZxl$LS<9el%FHU(?%X)`EiKLE4e5B-=TUGQeL{l
+zanE#d2a0208s0ezA8^XA69?v6i;-9}`A|$-&eJfB5l`Xm-;B^x>AMI(rxO9H3p6@}
+z%JiJ^lpPXuqNB~^3+|ap?z?AjDtY-m;hHXn4-CP>1)Je@;dmgQIDwFrertO4=nLeC
+z(=KvH{B{Ml*P-X9%f8kea0Nkgf#>tIs=$PXzyzohm^5xnU;>7EIa}bbkRL9AqaS{|
+z0++nfvcNOBa77Kz=4n-d2@Qb>P$w{H+?K$FBO2e2?o-46NN%_Uj&AsWy-kyz2Q%mu
+z77>&MZsx)j0#D~@Re=c&feBD2FlpSDzy!RV8kQHn0&2C5Hng`enF-CH<b_X=&E!1|
+z1V_)47yjOD;R^Rf+I#w?g7DByC*B0D^QmVe+rT=Gvi7O}#5J%fWILuHobc5Kq4F_g
+zXpe!#(c6y*FubPU9_6pv`^Kw+3&-3u!{wJW0}`fI6lp#Rssp6zJ}*KZn1c$WmLcS2
+zPlzWkMBvVrptA;pEdShe_;^>XKUnb}zFeNJiDPb(YN8*0KGyFQyP;>t_lKWQ|4eL@
+z*2~};G+-(iK-^$dP07-`F>s%vo(KAT{^+*H|GF74bf7zI^zHH2yQ-Dnva6lAu=toN
+z`K;pOgy=_o;@skmvx+y*Ek1o#aV`LyEjwFI(QBoiMW^9oN|c}7nowZFpDKh)5xyW%
+zK2ysNNqm&9g^jPsN+;j#oOR@$CYVu$7w~c`P5G|mCAcrReS_<sH9kqY^zPix`1kG-
+zC|G&plD^EsI<^_bE}b3vCz;$4_(8bgT?lDM#`IGbY^x#5gP=M>j_!y8qjf0HCYAxA
+zw)HZ(tn1pryV0e`qvz0Bxb*JaQwS`xDsO}3Q}qy+wkj;2AUTpJ%lyq*tv{(1S(Y*2
+zLX_&PO;oW=FUuxmmcNU`Jy?!oePDUw_E<hN%i9%}*%wCgWLbTqSf<HGmKleZNeVDT
+z70dLpY(i%FCI@V=97pTG^4RUMyl<8}6_)o(<jFFBTgz<Zk!3abcm=mjRQ*{tA+!8<
+z1IwHPa%FSFwmfosEbp4--3rT{5_z)B-)4EV#4_X1GD!i3sQR;PLSorl+Mhk!Z|9}w
+zDS=(c*7KCW4_?8HFuVKB2>NYl50f$8_$t<y#9(>+xc>X|nBQzCOE=I@R6p=jy*7T>
+zeV1bCyl3vK*UY=GnWPKb>C%nvOA8BMiB4u4-QjLs=btViD{Mi(K=rN%X}O~t%k7<4
+z?v7B-tuil%ZnAelzfA9EVOQy;8=-0B<qpm(hYLL_XZu{ZH^_&Jk!RBL_T16^{fwk*
+zd+s;u3}gvqVIZ#{itaNHxG{G9#=KX@9_U^ltlGzg%kVJ9pfdFPYN3fQ$tPO)O?JMX
+zCiba+4}peJyzrVWbt;CoS^2%%{adHlDoL~8tSbq35Y$k2*qfofQk*oS0Ldi`pj>}k
+zIzU_4mkv^khKnzRPTc#`EU_pM#?6H{;GH((^rPI~^NkM=CE2u!hJ(nxwe9!6LYL82
+zFM=^P+flL7KHkw6YTigr!|>Oi@}fv)bEZ7cpvKPdH3Q^C%8c{oO<3(OQ~vjCEYeXJ
+z#TKsgk@=xj_#5yJ;Iq^c94rxJTm<<|$j?Fh@bc@?^9yPofcjJ01T}a#lN<Ha21?Wz
+zH#LlXC2BX>FfChXoA>pTtpjRXptfC4je~wvCgY~IRi@_V{H$-kt>*lRy5{_2uT*pX
+zUIe|(In~QgP4DuXmABnsv-MluZ>NqmKT%$}|HodtT6g*VkT7?^B;kbR5E|vDXDt!v
+z)&ttr5Uzx9*`a3riq@GD{pSs8*%z}n9c^Idx|P>M;VOsqCZDg{t^?p~g*ZLNW9OhB
+zQ4QfHDi=n6yH;7Po-U$xQQ*C22WJsIB=>aS`w=}MfQibqOti4?E}}Md5-plr2_Q=9
+z29FM}A5nWWTA>|f>oL)>yit{KrdouvddKSkBGCyo!^!&bvh)IsD`VPZPf@Egj<SMh
+z>j=cp*HP@bIsi>a=ZPhm+)pqWN)~qWsn1Wq&R`=Z5<Za^zU?Qb0L&TMFsQGfD!4Gx
+zCUfOUN7wu=d}oidrEsRui{qa3X<>z2!f&*Ux~OXdiXRmefxwh!LaQ<peUa?wL3l1*
+zXYYnuKW-shSHU0Mk;4794upUgD<Kx65F=F~#>JIBwHKXQ3BeLj?XrSPE0Vyl(eq_i
+zlps(gc1S>uEP;z#f*;X%RyqTiOJEaUv(alM8R~8jSF*4XB$$g55UQ&hX!L*|R$wHO
+zfF&Toyn;*XlEAQml1@}a30&NB!BqRwmcYd=!N)XGb-is9>R^vV;@dMjYTmg77!gzl
+zGk}pH?IO}80s9I_;9}u(HZ&xbfCRG&F!P2L#?^b`KoMp|2?AB;g!gX-fyKow!Iu;g
+zc=Q`;{YP8TrVx5p36~6wKGZ=cNYF&8B-lWtOM-2~yI9zoq691f38ocX+Li={4V22?
+zIg3<@9c9Up>%he&foD;>|FqwT+B1vdOG!Pms2P-pll)ww>2{L22dz)@t&3&MqPQO|
+z6_>_O`Nt!$XSj$nw7W!&H`#d|f1ERbB7cv=+&QPx0Jcdmgc~939zgqb;}cS!y77ji
+zeb(w!IsLFm=N^G(0v2|~h}zz|1_LI0Fqo?Yh=akrz|I)<771XY%Z~P8eTBLGSYIu$
+zs1`krZ6LLVbtap2+FK7mWPM9uXAGX(1TgCzNBgk8%iMmf?-f|~0~Tog0MQ=KaL<<z
+zx<PPQ2M}355m@~YEEnjM0A_uF_6vRWP$M$0%=Kg49jMIC!+`Eqa46_O7UpDPeXI^3
+zvaSIK!*^eOdEBwBpUHZYxizeNSVz~*W}LeHN-1+jM^|J%U`BKi(He1>teWWa31Kej
+zPVVKK%9pouN5tpTJl*ul9cCk9HgJY9oZk?c9!B49Y2%tP9`+YwVeA$T^_QGqEv!H$
+z%OL)Nz<j674cj{LQBHq4(&s`0l%DVdiZR(nHZB{=_jR0FJ`}YCdd7-Z6~Go4IeI0g
+zb7{sdF<-wuW`~A*#$tSph6iy6^~>%Lp8w3nwO#66zQ|Po4LL+3iOZ9FFl|%R#&{uj
+zgi&Uai#{UB^rgW_gr)#2%1LiyOKaTxcTpWYdX*eDN$*9cp;nOI{lnU}rB{EDSN29O
+zJ+q-Iw%*8C01Y`rW9bhC8hn>E_aU00l%x+Z$}FTGWJ!GfxI`pKuN*v<Er7h@o!TzL
+zpP2Zbf<Sff=zckSl0L2~2kDmusF&MN_bV<vO%)~!o4NFhMz@6^N*_Q&4$)ZpO`{+v
+zYHd}4e1($q0Y;gH^rt$fw>E$xkw}nUIXG`YWMSzM?a!(0GQ6qEn@44>1D=+DMQ)a)
+zk8TzT0HPuG^zI59x_(8=$1#)G(3P&|Ng`tbbiz4AW9jFNVqSs2KWoRaBz=IHCQKpy
+zp{3_B#z-VcuN>TV7eHS3PSt7B2yd$L;UL?LnX-%ar5A78MQhf%Xziw4wC_Vu@1kW_
+zPr1wy&mW?Hq^h5=^OH~E*SXI8h-LMB=@Y6S*;~o~#!;ll^<LfkVHoxA)xA69gnfb1
+zQ*!SJIqtp|N>9AKiKyJJ%gOo--&eh~pV@aU-G6(X$$xNCCjajcR7}47*jwFv1grJa
+zTF=X7)scot$-+vq^iIql&N&mX4@vu8j_H|()HqRcm=4qf$rU?vw2v2g!rXpXP75q{
+z5<XqNsJpDvtVJH}DAm=EmoaAAFZK}MkC%zFurvxRO-K9ag=1i`vz`VItj!w5cgwjC
+z8NR}4mgWPp^SsjE!rsMlkMt>BQf6TR|MF?wRtQ(*Qr;25>zq6inc+xe?`@-W>78+3
+z<U5-wZa>Pu3@&qUK(PviD@z!U3h8`I)m+&l-DkyDH{s<~$~Q>YtVeCR;33VU%XBdC
+zId=ry2t1p3_0Yl|h?R-+w~4bVV-8(fRc+j#j!#4%?Q?tw@z86WO}u*iV7Ee?zfGLh
+zSSHTjRd;sm=v9Gu=$OtXUOh<AsSxLH6Q^rkCT>?-K03zs0pwEcJh@28L-+UanRQ-0
+z60lt%&fg}^KA}upeFQ#&LjZhk4*`hVvG|2XzaF+{?dQ#Pz3hD`kF}rY6HWcvPngFn
+zt%7uDWrJ9`@*}GC`zg5JSbs0`F0~HK{!Whv`8`mCa0BBg8qdp1^wRhi?n537pkKzP
+z+8}*1@fn&vn=-traRXiTE=q)B+gn5TPHw~#LQ~1_TD|?|w$80|kK7+w6!A%KkK!8x
+z%REkqaAm0VO)x|_v4jZ7d4E!!T*A*fsNp6{TX5{RbLwHyoo6<Fl;WipFO_(P!tEgu
+z#UZ@#z2Wwl68sTst_kz{qYhtBu7@&ldN(debY0r>o5~&v$EfnzGP#OnBwTggit1VR
+z0YjnEy!!aXU{vxL&$$SG3c5kv`HMVZJ2^ZoAMOZeS5Ge7M-LWVCi>!?5m3_?V@th&
+z5>bb{ksg6UT&wIgWR8D;*I&-t-`9QHc`ykc-SxV$C0>Q@V`i{0EnWIzKnFj!X>if{
+zy4ELQe#^KnFfS$Q>d^tJZ6DRPX9>I!jzLY`oD5UV9v5Mf>{MODWCulX7d9AgYJJ4(
+zXEaatOJR(5ht+S4Zio*S8CGmEm?UoS3Ps=|e4x3;CE%#rcV%n>I7)2tr*^b3bb6;O
+zy}*^Eagl0FypPtAeB@TpL>Oi`;D&<-KL@p_5!j3|`1<oKIMPcibQ^rn45CA=@5K;^
+zW=OGuV%ZGcv9lSL#+$gp?jfi6@*FPtY6x^!i`!L0t^eZ2EoI^EuNiN6xp5=!tt%ad
+z*6h*Axy^y8%^WfzQ(LN4GUcuxYf;HUI07l@Wr`&K>uf&wPACg_(<7LD=o@ZARmSlV
+zjF86b4ZOt136r&1@{ET~#d_!s^l_+w$=sx3B_@$ykX3hMsWr<EJI`@z%0?FsD*Abq
+z@S<V)oS@&*_*q!os>JpV%wrZzyyLwV<UC=tW9LvJe>@4jxuN)^CN7IZKVC{WvGAt_
+zPZFU94Uh<Fnys@;sVkELP-DjB4OTpE1}ODyD+TV-73uiF%B8$BXMvy>ZKu}oaP(&I
+z9nN11w0Hb$ux0qz0IpAo)mRx?eS;ltk^jU`)}GVp#o-lU2bCCyS^V7O&)5mB@COo?
+z8KMKE86ucQQ1lSK(&Yss+@oTHg3^NZi6`8AN20Gzb(F2C)vlvxh^5wBYK3@kPR01N
+zz&>JDVhKRgo&#bjeLkC=@)V9aO(mB)F5$C6=!Mifs&hV6A$HEHTwIGn=Zx!7dFSlD
+zB0tg;I`P}tSQv$Jd;&nWS^5~2aRx4Uy7}@(V36l^U5+fd#Xg@pM`vj};{6984xJ_Y
+z<e}Cl;IgA%A{kt!V0LLz!qH)tQkv&EM?<GKk6*Rgl$RvkOnROLy36<-=&m3-)Y=1G
+zFigdR{GtLu2_=$LC1Kccrw_(>MS2lD8VFaU1KOe19|&K#fD<-_b(s#l55hR60m<D~
+zx6>C2%g{SJ&*S?dPt(z|z(&v}d*=z1Y07hJAm$8gIxrQR*~-+0Zpg`+%4uydK%bps
+z-|^5vAyIHufo_~Y<CGv`UN?Zs=WkPtFfm-Q_k1^S$iZ=6nZJZ~JE#~(l3~TdsXHxv
+zr~t$hbbJB%07ypxx;+XLG0IY_z<Cy-`JHC+(&1);tG;32z5c<$rfbDm%U5b1^1!>u
+zlJHa&#2PW}uzBzc`9L49<cn#%tbs}bUkwH20e>ocFB8pY`K5t$$K<s052|yZ>LF@g
+z^uxoip&Rx_OL$y09!od@pb`5`5Ba)Y3fF5Y$8X@%H~}{*aMp-P_fw!WgW|ClFA)Qo
+z@>+XoBni*0==1f^kr$(PxCkAXR~)@q@E_80-v7tmdB;~(W&Qg`Kv7g;1q&J#6@}<c
+zXhB31dJzePW}74=0U{xZDL}AA#e#^UVt1TaP(;VcSVrt|M8!5@@0w9juwqBY*ZDo)
+zv)9eN_uP`8yuQCbydUMsI&1B<*RJQBefGK6Gmn$qrx#HmRRFW?IuG_^Pu|yxc&Df}
+z;T#sP)(SXNs<#lnxY>gj(E8)mWT6LHp_86Bc`b4~PWak6`CsULfl0=T{L$nkx61{W
+zxfhBR$NP?GTspI;%)Z2v-ef|nF02My)wxsWz3b`9q4$r{xF@5J4_oK1%{Ndn{9n7#
+z^M2GK>9n4+j&G55@7eplA0U_XT&<36(xh%axP&K}^TT2O*6aV?R;t%6>e`jOyx%lx
+zVbe%^NtD-4LRs=1NUL(=?l;bvlsjtCq|{N1#&&gn&RW$`w?eJl4{y-KvT$)Db-?+2
+zxmUmTHSxA<#<uLc_uDq{e9k%ByPI)^Z$R|!XY9P*vOCdE>EZL97lFNK$hln6(Ysc9
+zu<5{y&YjEGc*nhS`Rne_Y^#Fs`_BuToo%xWXj1B&y07KlNv|e{zZ}RVY|E*-fuuZK
+z+YF~_H)ZLZ=k<2J^VLPcw}W~^B6O-gj~tiS)HyQpD=d=UN9lwf5vDu8({H(ZS`_ED
+zsYP$w5p~<7bNa}Z+a@<Ta7NbY-_FRISv#LSF?=Op^{8{88?-vFETQtPXzpms_jX?y
+z*0}3mds|xfEyLV7!OaBrM*KsoNx->JAy`&g+HkG=0=F+-$P0fU`<Y&g>nkEFy}!KG
+zU+Q|M3Kd#WSv*yet;M>H<DOeeIgeCU%6k6neD-}V9_2*@Qis|k>LO!gC^UQ&n2*k9
+ze@$Wn^?LL`Z{;<7lK+IMCv@4eXtBm3{*~1GrfTnOnCMjN`CG`T_GnJE!;_q9r?x~=
+z<|27r{_Rzw&{jCxTxRpCSAo29hheDktSvTrX>B31W6S&>IR$%9Ful`Zwv64+SFFF6
+zl2Qw?dAqx&-<G3lEOefV$ke+}3wX^Od2(?%uJcL~6}Y-q95;mRIb}snX(G?AJv=A&
+z0}bx&S@**bp=t}tV4?SpMdTs-+e;BA$4@VaIl*eUQJ1Os^G>i``NO=p?FH^j)N~Q=
+zW$DGV{uozyH6(2{(}Vpshj*3Yx#}2p73abyQEj=$`rHS5*+u300f+2No2x(FnKouU
+zO<#rZo6fgqd{(dVv#?|(^SPTU7jE!&?JOL|T>T?!f=kd`89JH!PGy{!bt2fH^<+*C
+zoFHnOtx8Y55;wT8g)FumF%fg-;0tTn0BuIK%Q<T|MxC{rJQWuTD@UHOO2I|GKlUrn
+z*Uh+L*7BySKi029=cYf_uhlKw&3kAD(fnmMLVv7ZQ$1{BiM$-Ns&Pvs-gOplCD~a1
+zWBppa>5uhm)k0_mv4?l^^j7WNEqjAbb#ASf^Rv6K_+$N=ZgZt7CgQp%bhWj?tFS-T
+zum4!T{$u_6kM(P&&Xr6Ef2?2sv3|`B&Eh}Suj4#R_+$P0kM--bnm3F*Xca4ff2?17
+zm*Z*PZS5cH*MF>E|FM3pW%xuZvfe}3&{|N$GWZ|s*P+MMk*ocGtY805>(^^|-ps14
+z9*(h$tu@Mp4-MsC-)cNhieLBE?4ozaYGV-(P`WDhlfxQhVM}(ltyd3G*Lmv<-s51m
+z<dA6p>P8G>le?81FS&cnl_<Fu4P%pg=O=fA>z0fXCD#*5OYYUfBCj5Jbm{6wCCODe
+zoiA^}KjB{40t_Seo;kPP4zrnZ!B#Y$?eHvh@f^2j%FAMrJB8>G>j`e_lRNCa6YaTJ
+zv{+5UO6lvW(uKC2+3g_CXi~y|&;qP}HG5U={l+&pbZQ<eS?DXVoq_w6kI*-)+IM%l
+z4Q8RI%ie}lFENizSL4<my{_TU&S#JI9x!{yna5n6g!YiD4%}quMeBm{JbBNxyqnF1
+z%bM`BehH@zS2p*e4F&n@rWHhu$3vic?@?3KD?B3?pIRS^e|b3mMlb$X$e0S!apLbG
+zC${sN-{@?6{2D|SKMr|UXOrVkb@6)-#6pj~Lrrk1Z8cuF?8<Qb4PN{OE`A*+{*Eqw
+zH((+*y|!Basp0r(P%r)!n^ylD6~V$ujnqH8Wum*#sg0rfKQA2r5-<KwHT$?1z^V9k
+zUNIh$ulOAYQ@QXSU$2z$Lhn1=Kh2Bo@?Lh>x@qZAwIhQ!GQqyK{VTDB!tzoqa$lbn
+zv3~0IEx3JYL{RSq;_X?pjNSgVg{L+|%Aue<^Curw8GS)5jxGfOXpoV^RN#%70{$>R
+zi**na9l}qg2XCv~`eWrfY7W3o{T){$f#)ihKSHi_5EC8px#}FxRfA{eJstO4Wk<Nm
+za;|j9=W3OwiJY0pa*1c>ZA|oB1(8Eh_3#peev+%wS<VFO>-Z<;d9{};c7L>fJ-p?q
+zq<ytxFG{sZ=QnRe+4(K>zK8ooc1B6d8PBuwCiyj9=&fylqB)u|wDNjCg5aKhtqUjL
+z;Qq{ZM*at88{;N-(}0(|H?1T*OGTU)yqa0`kZPu7vyRSqS>6H9SGM~zK`1&^#XsZa
+zDqZ-DH<)+&7M-n(_|=@wXCLHd08O?$s_<+zeSYPpA9whnG_*|9s$f?U-c?7V>c-p4
+zyVCoMZ31qi?!vEW@#WsJ$oD0zqHXt@+a1r>Hz{ZKM0>EeIiu&V@M~L~0-JDar@+<x
+z+4=0{?hNi~$KIv%UJ!FrScAe?<b5-~<?l^d-W0aP3(>tZG0M475l225nzAAddN>2s
+zkTyI8Mt1%i4dl&-otHE%Pw9O2OVli5>O6V<ZxgzD1?Y75Ih|Fr6y6&!S7>y&FAQb<
+zHx1ujkc$?39f7Zf@gnrT$b#(__?%?lFBd+;&65e=?*^ipXwhX};zi!CZxEI@)wX(u
+zF2Idd?@a#ee0Dci>{QiD%kPEAm#bcv$2|%nRK0Q$Q@x*fXE>Fr<$GG}3Zt#@Z^SL-
+zZ{-Y~i<QMcl|ShoUJbk7wTW|vixa<G#KeDaIDRT5@(kV9_?un)t(>8=!|{*w;_vO^
+ze_g4gcBLh(f4T6-|LJTJM?@NGtAySC)5Ga9iM4wr)oK(h@dA#0_PN|U{!oJl_cj6V
+ztSMxTm@NLV*dEfs$iKPInM(hOJQOO1k}+!eS5t|XwR;z5eU%RJPM-|eJ}QJ>19&J6
+zDdbImvw^AQiXlShw(ZCDzO&~&vSP_Z<AzKEz$;V7a5lcXYA-6cYi<3Mc&?^8SK62E
+zxza-ci`ad0itTLYR}-A23b=mTc&^l&h)Vm*Jy#K%+}%EK-plhgk4L#um9h)Glg{?O
+z_dUJeJM(=XO81fOCoSv>)P<@u^6HTbw`16FCBSB~mRFNoeh+(m?nv9(efCqeTa8@o
+z+5Y#1smDC#e!q3(pg<~#7a!HVYgLz#XRMdBVC#|T-ce6Ccm2qN9$m2YV~;79K$`b&
+zAdqbg$tM1R->C++(Dw)A%?QM0op*EuzuzaT|63^{#!%Jh*QxdKb6a;fu(=rNU#Av*
+zhE&y6)>Most;sK(UEHtFp+%lNtF-2j>ba%UYXZXyYYNNKN~)?VsyzFlr87#ZYtqUJ
+z>ndt%(q@-d&n~Pfnt51SAZ?#PX;@4uudc1Etf;CfDNdVNSUodsdTn`8O=(5Bms<Lg
+zd6gwasLSfordQOK7pIk%mZi;|Sz1<-R$D%|s<5)Mw0uTdVR_oPN~I(BIfZ4lC6@lz
+zqGs76W8Qio_vP9-PY*nNare>klfBgze5Hc>=(`j6aPE!%F#NsG;SMqST+<JO`vkU#
+z(Knd>St|d9sU2eUP1`sFzPmF}n9?prpJsu5*)e|l)SX@WMEMt(epQ0}>-S8af3xYI
+zNRWTy{w}>YkH)FLrdIT8TG2O~K2iH@F#RYlUfKopy9m*r>>f@|ls?z=Z!k0L9;f|+
+z>B-Y)n|=-X$4j3YOrAc?^pDX#@zSSdB~KqT{Y4$(r%yd1dHOWdU+BzY>aVet^i8I}
+zjs6j@{wqf~$Efv*@n7GHen~6(2Gb{M-$v6vi$T2lt<Q6T?cop;UxVo%-z|Rn%GoaA
+z<OJ#0w4x8%#F!}kl2-H^OrI$J)Cw0^Z|0eJ?UP&Q^oiQ1pcQ>(EBdtg&i~p3<E!9w
+zr=Q^vQ~zsBpN2kO{HgUWp`9aR(x;g|QT=3_egPAGy#CRopFZJZ!#u|S2GifMBlB}0
+zcK&X-$)!)&KTY30(fo0XOP{EJRGL1K|9aCW^53klt>Kf%f3{YK`6Tk6Yx+d~8})_U
+zd=mLj{j1X_@}Fk<ME>jbmF0XA`ENFTBL5pqpU8jioyq+-nm&>LCe!Qt#pCtgw0oTY
+zMCpU3Pn3R%-sj?zD1C$J6QvK_pFDl4>2GxtL`?s0`lm~OphJv)gXt5+7jU;xfnHn3
+zub=v7lgGEj^gVV-Fn<5-(kJR4Y40c3*SDf?ZbhH{L2~~MrcYEqji%2^Q2!e~O<q5N
+z&z$}-*D^8fv*z>U>6=ZTD1GCX$<sHPe#B0mT}=L|Hf1I%f12t0bA7`nCVfFicPP>P
+zUT^xJxYCa|zc=jQ(kJR4l{+Q(zr^(8w~9aiXYY~Re}m~0mA}#S2fI5J=gg}L_fPXa
+z?ogui8%&?Fg=Zg=KF~dR`c%`eZWn)iHXoQg{RYzqsUJQu`KKM4Jblpg7bTb<8uatL
+zd=izv(e##cO#Y1nlc#So{p<w&FPM`&eYWWn-9Og1l75Nl2h)D>`fu})<oRzf{d4W(
+zr*9gWJpCHeuTL<3n#Q^Gb{paZuSM*iTz9C@i81<0)9W@f-uZEf=@YeYgXzyo5MOYL
+z%Q8`Xm8Q4Ln3(v|rn*Ck;>$LDqWE%6pQ!yBj&=SMrEfHSqV}uTmvi$;lzxfn6SZIc
+zbeBF+{WO`r(90!u{03*Z^oi;x*Yt_vD=>Yc_S-N!d3?cgr%%*=&8ANjU!cOJPZVFO
+z=^snbznW{4r{7@u7nuLzjbB@y38c)Q5J;Jqnv%NhRvnk%vOD#yn1i!e7w2Q~@ndM)
+zr=GLLknP;*z}XGOuB+J{?%FA?U0H;`VSc+2XSKhOIldRim-7Eq^QUzy?-R;5_pGfh
+z*m7})3)^3Wwab4M99iq)oZuPrPso1MS)Q%@>QbcM?6jWceL{9|{O(CTWS{2zCX06{
+zb~DXR>s+n*t-*fkIjzTgEp|)HPU~N-`F$4q;6={wc4ppE4<@T!zs0U=8|?PfIlB#Z
+zL$O<Tq02W}Khf7ttT8*SmwBI1{f}DQ(w<AvZPcT!R{Gt8*fpD-*3Y8+jk%z`JgU4O
+zVt3_bt^3;+`+Bp}dRiiXeX#3sW$XTq$1c_Ew7!<e-vaE`{iSt(w_~@)?6lsN$luG@
+zowuxYe?MbaX?C{$79Ka|UiH_Vx_!M3{*J<~$?UWq=Y8U|Zw+=M?{M*j%;NRaYq1Nq
+z!EP0HUE5&y8Fm4)OV&?!rf%2$)y1cEyQp$R^sB?MTXLVXv+Mu3^;eADd1j||yhQ#k
+zz%KZb^Jn)1asAzm-OM)Fy^UQ%8|>OMnZMo!yI$C(zTA3wCt}yp?6mF|Ro;kkehPMJ
+z?>c|U`oT@|*9N<1vD@%Y>;AsQZl3wmx?og%5$(GtV|IzY!-UTaGmF<xhhq1-*`@jI
+zhJ@#}GVC^(-L`%^le@#E5&n|(s|T@LWB#;$=zT)tEutJBV%Ot4SB`Wui&u_qX@sEJ
+zX+1H@-%)3E(2T11`e3(mE3aCTUKbpXU4z+aeJjdeM0^Xddwpx?FIm689lO+RTF>`o
+z>^7ReWcmJ#T~J#H_$14>JNJGw%`P+@#H+ufu*)^OWck)$ci#4`=X))7O=g!Y-&NQx
+zH@jr{euiDMwm0!fR^FW%vt4&^cFFQRTw~kplI2^BUDi&{U$T5Jz^>BllI43hc2mtx
+z>xxnRDq?<l8@naDv|f((WH!(2lKJa}U1OKl{Y}K~O0!Gm?-cCT?AE%!o3LAHcD4>0
+z_q?EURrbEl-+@*w@%rhv*o`zh{&b(vykVlo`JPNtL9^5PsP_rkMbz_9?9S`idO6Cl
+zt28^Umqz)Em=Bg>H!s`yOV(c=#ICUob{}H5t_^nEa?zZY(|W#ru$$TjyW_E2Vs^>u
+zc>#9w%+A(X<F@bZ@;9pWdVX2{%<eJ&_^@hM`~Hkw+L+e;b>E)zuh}K@cNBJwN44&+
+z2D>ZG&emn)miJohn(|xsw+g%EW@qcPas7QJfBG3QKFQ9jJ9lQhnVr^cy-%p$NA%Of
+zv1^>|{3YwB#n?@)aCXV^y#Tvhv(tKRRK5}C-@CDUeNOB7zKva~zSo;ivi{eeYln^I
+z&(?Y4)?Y7OW1QN$zlqqbJH^@Ax^G;6r(n0{wATIIgxyNB(>icey+q7I&tg|_X6ydG
+z#crh8*}8Dt`1ag^_E^}uzoFP=nVr^&6UA4CUH#J5{Vm0ArrEWuc!m0(x!3r85WDQl
+zTKD%Mc0J6_){*0ucU!LcDz9$cUmxtInq9K>p5xo-Z$X4Vty6lRP<bQ9+wIuZU)y?o
+zFJm{;?6hu~$luS{rC#5<zwSIc+SuUiw2qm`-%;2#-Qw(QJu_}S*I@U$*%g|*c<1SB
+zu}fR-{An%D`-JKx;=W=Pc3sUb**O0UyMWngy)(*RL_P1!qTtLsS}(`p*wvfe3Ue2)
+z9L3mm{9EhgxB$C=*(EE--Po<Oe3SK;x3Nq8yURD3zxG^<Y;1IP$@)t#>>BQA-QPs)
+z&NI7Y{pA$wavya5lJ%FHu$yUi$@<H)*fpA6vi|ZdcFWB!S-tGJE7u!lm#n`G#ctz2
+zTQ5f$cBzj!yJY=kDRx(yU9xgKsQAn-Svfw$Zl2j`9o_qc#!*DS-?j_m?djIrw-0t5
+z%}(p;@%&|+mJ)a_5a_l)+;@w>pbqd!<c+7M1p00fNdE@%!q}kC;EwPuDE*aiU$*;<
+zHEv<N_mq@C2I+1yUIR0ck1=_y@i04n2$Y{oPIjDb+z;NA5=h@2@@RC>PLLO)27Ng{
+zC9og%H$$Z>f)`?UER<ayl-;3Fb|2L_yBpy=?5>8gyA;Z<0?Muz+!y`17|HKYn1!4L
+zWuF0MzZI1IvvZw&H5`w8G<+8B2?vmF3zOfOlM=vn`eRV~>)=Jm3rx<3%aGUd{393r
+z9ndS6v8(Yp7UOmNY^eIJGnPWt?}lopUu8T4-iqIOQ1PDx75`YM_&Y)Qd$cMga4B{x
+zq3r$+Ww#j0ZVZ%N3Z#kCH=g9|zJjuQ4$5v3lwA%Sgk4`Ke}_QXwTH4>Rf!$?Gob42
+zc&K_g7#_*-RFgmDdD7{~FF@&UhnFE=V)ATw8*&FY0sRJ^Uv+~|!QH8kCa8XU2VBkZ
+zg>W~Hr^4;w?L042yk{8u88?)<`u))O0#yB;24&yhxUKQ=S?>7N#)<G4;u;5;6S@tB
+z`w&MOR5_kL(dqApJ8}Fj$hCI2bKrkTHy^6L4uz_xA4;A7ci?`=t6&Q8G{6A70v?2Y
+zElkJ%B)ApFv!L?p315H*z{kjEZ@3C>0o5LF&UAKnz;>iN1uEYmcKkmxQUb>zPlBVc
+z&xX6hokZ-nfvV??JpWWZH$c_zV5s_frNr?fsD68vu^Osg(@g)5VrN$h4<+3RaBuP*
+z4-cYz2SS=IeSMLuzYifx)ZN~Is^5E{%6loKOQcVe9{;_K-%NA<-+=p}Z-Vky0@YrV
+zpxWbT*cHFoP=2<DtQn<$Ug-Qk4(X!lm%}YNz8EULDyaIO0#&bvLdDY#sy$vPAb(8$
+z0(JZ}<DpRXdv<<GU^K^%g{r5cjYmM$Qzle>zWOJ}i;RPfI~kui!RhaUd*k;OsQ5~u
+z>SG90`S*n#kavZ@Aa6Y0#nl9r&&^PFi(v|OrBMB?0LtGHQ03hYs(c$Lgv#{+RDXLH
+zs=vJk)!*)is+UWk?50EYw?0tyvh3It?M+Otf-3)X<7BAve@`PRu6v9(K$Y(*sCdqR
+zif1fTIS+)2e@m$N*G)|cYyqEy%KuiV{D;9Y$U(^IGJR{PejR}7*I!I={rV{=zqwHT
+z`?JX|o=1&yj6taQyBl|aivQtB&VH`(C}RiXn-iUWDO6D|f?N)CTLAYVjsmE-w=w-s
+zd9J^H1G!A<_5^&NboWEmM+H>9_7_Rl4XQrc!w+Hegp|Ms@HHs=d!Xv?GWZF9&V$Nt
+z7F2sqhYyfXK70@khHB5<q3pgGpAz_pbPq!1dluC3fsiInzbrQ;FbugKa=DwH2UX9b
+zq3SscYW`>*=j!)NsJM4AK7X{U*T;-^LDg#kl->7Z9dCu2KmH8WKQ4wU-wared=OOq
+zc8A<%blVN8e!n})#rqP}xW56ay{nDAq4L=csvZMS{+5k#{w{->KQ4sau63)2@^du&
+z7^XwjM+aDm{OahGz<T%`RD5?r)&CVx^;!XCKLmb)Y6qx#eQ%UI{;;tEs(v3InGzU|
+z{nb$Y??U5gQ1w&=75}cr=SMjCOk<vLOXD}gUHyFw72mB;^>G$d`KQ5ka5DTi%z}zH
+z0F}>2!<^l7Q2p&zsQ%Uf<?l4;jaR7h1)<XK2i4#9g6eNwp!(ZSLtVYR2xWIO{D^cl
+zQ1!BQNJ?N5$M1wH|INnBp~~M6Dz5JaJH8LqKi+_f=TWG57DJVD2HcNB!{LXp2V4uc
+zg35n=j?4dSI0AVROe0-iI0$)5$i9U1AF?@51OmHkFg^l1alFyw^I<i9E8#y#R}7y+
+z-p-DHb7V^3ZjOHppWyfsDEm3^PL7`lA3@&9j{kT>inc1Je-7W__~lUcr@)mQuY|86
+z9|oCP)BC~$3HcDHde|B6%khr}xpJ;HUINw6YD}IC)lTE#Ews;QxEvm0`c%_*g12(K
+zJ>*`h+q%P@->0F{KMt?w_`~o9c!TK|nErHlBgf~#o8a-LKf?3_;4+S9!kghe15*OC
+z@Y?`Y{})5m|M|ufpz8l<le6K|l<Oe)80-umgx?*O5_l871z&<s!k(mC2B+hH0lb9#
+z=0e>kRl#EFZzf!Wz6dT=yznwO2FkuWyb^YSO1C3ax{grk+QF;Q|2!Zia1Hzv%6=6*
+z6W$Az?oOz5%c0WU2p6Eg7M=|kLD?6>^WYSybQ7S`jf6@!1fGxnaJUHegtBiBFN8m2
+zxpZGcrCSG;?gO|4{oC+j_zaZ&U!m&#I;eWT!Z;nO-lv${7iv823%gUl9iZCb>;5T$
+zL*U!+BJ>Tg7P&u^eRnAPt)SZL+kVdeUAPea4N&$2pzIHTvfmo2UBB<^?3>|P=x>6u
+z9|&dN1IoS=d=qZ$<LuvuSE0Wd%03&)J{`(F6{?^7Pj6@c3A_~j-B9+qQ1eEn@yATp
+z|G$OmC!a(0lNX@u?lS!yP~+<ssPVPH^hL%apvKVvsD6_P)o*q+{l*NZ{|0Iteg-uT
+zpMuI~x$!J0Kc_+Uqq$K1=s434GJO`*c+G$}!0k={dC>V=4dv%CsDAYzRKIF4{h6je
+z6>411fg0C&rq48P2j!<DR6k3B7sIuOx_q95(*F}`{67FS{`ZGj9Nz}2AO45Vq<;9V
+z@iC}=c(=(5;M3S20lRYipXp9M1xn`5*VEtM%gIMT*>CLW<Wr#J-X^a;*u{5?u@)-M
+zN~m@$g=)v)rr+NffU^4!ld#(9Tet$g0M$;7#zjze=Rmc?=}_%(yy*uTcZIUs0ji$2
+zfvV?^dpLhj7_W!2yB4Y*FN3PbwVV_RIsOz>KffEQK9@n&=XJ)Dpz3p)$x~qs{XGwo
+z<)9;=&a0VF`J_YTa{yF6pB&)q*FxE^fwEr(W&a3N{41g2KLyJFTqyf#Q1+9d?8igZ
+z%V_BJPbmAXq3plf-`TH)vTuf}?>C_8dnuItMNsy0q5RK+vY!ssj`>jSxHZ)I@=YcI
+zogbbw-fg_exYW47SYs?UPBacRc7VOfZ!H%gs`po+>iv1+4N&!dsmTjr7vxi+;+zLn
+z&nH3E^LWz_GkrExy$*n?*WFCNo#{J5)nf`&J^q_Q%Ks}+{?|a&+fz{WcB|?CZ2Bvq
+z>gi&rdYT1QKgSuz7zY}A8uu`EGOpbxB`}TrRzcOnJy7*<hw)UXdMGz}DAag77*^9R
+zsZiHd?V+x#UQ2W1_F^czxlnc|KwW2zhfg4PhZ_Iy?(OVWLD{W<y6(CTK7xD_lwD6K
+ze>*_g{jit24*L|ogZwa*-8?9}KS9|Ig}N@wg0CWXg0lOho4Y<+3mGbd-i7Lqs~}aA
+zeht*TP;bnG$8o%`$$LSy({51hup?AEe7~nl_a2n~O{jK!39f+mn!dsG*Fg1yrBMA~
+zp6Lrse>_w_ngrF42AF<d(|3dFhr2@c!)1G<1ZI%$e8`lWeiGb)`=%42?gM+mdD!g*
+zb-l71oJzSn!{f03&+blt3EUSyGmVoVLnb{7(q+?M-Ob&XJpom3kH8)9dn{DCz2PCS
+zGdv0Vja{AHLr~-W?~qq^({F|9KYxbmKl9*z$cI3s-wP`JR#5po+r_1Cf=a&<s$bm>
+z)vwNlN<RoHeL7V7U7^yywW~}2JXHE8q59hcQ2p(4sPsocr9T`h{r*ttKiS2le-|qK
+zt5Ej?Ps4XmErUv53e}G$!(-uisD3sY%1^rKKi}E)m&c7a8P78Ig=&{GcH%w@zZ2o*
+z)bj|a_8Sa~@RtR3-PjxII;9uXb;=%4_TTQ95~znCL#2BkD&6Z)>0W{h&_4^$h7Um5
+zFNNp8bD`3m36*XhRJv+-KKe4K>yYE1><7bs*uS|0^+^0LK=s3?q59$fq^1N8M*lce
+zf2o1JkbA&Ba8>7&zy<iZ7b@R7q4Hf0mG6yk3Hoc{#c&aneNQNVUE%X^Ta$m>-u2(N
+z;eN#P6qNo<$W)YG1=TLIU@Csb!57gV2>%RU-p=`539m(72Gu{Vf>oqn3YC5aRR2B>
+zs$Y+T&vEET_%GyMa4}4SnjiLnD#y-H<@jn_*MFXX%I7Yqd~Sit=LV>JYN7Heh3fw&
+zK=uEzQ287N&xMCT<#P~JJM9bAPXF!X@_895pGTqcxd$qrMyPzwg34zu)Hs<1HBOF$
+z%4Z}z10D{QPk*R>6ol$W+d++o_qTERJP(!6V^H}#43*EtQ2Cq<HJ<9A##1R&K9k`U
+za5Pjt!=U>45zy=BQ2D&KwHtTOLXEp8p~hVkJP6(hH7<*w=J!3J#@9(5>1W8pq0WQ-
+zq0WOrV>_tx;I~`3;~zntuU~`zL;8oH)+fH*(j8w5f8h8tP{+5h<KJ{h34F!zH=vGh
+z59Q~-?Oi{48A^T}K7rlUCNF}j_X3m0L)Fg#CU=3aB7e}%T?ec&K4e^Byu!G^SYs?U
+zPBacR?gERcm#?;P_3}Pcy}V^y0aY*8n0zYS1G(7b6O5V0M^fDR`CO>_p8$0}-ofPO
+z0<JzAq3Y)xD1Wn|@||uRXw3O<z|;4D((hyZ{ud{o1$8|z1}eXupz?eEf1JDss-4QA
+z@*4`3Ur#81-Hku~?Bs9$<MeMr>0dG~Hy#R=-w!`I|BpcBce2U-q1wL-RDPfT=={A5
+z<?lJ;4aVY)&R;L6_`m(Z`D=ud%iwePYX_C@GvB-8mqO(`&g4!|{pp79oZX2~=`*41
+zzWCP3E1>#W4wS#G?f47dIJ?DA=|(~Izvi!<-Eyeol~DeAnY`|+fY&b@p{`H=Y&_pM
+z*H~;EZ#=@-)7aJ6!T9wC=kGn^v&Q?3HybZC)*ELVk2Q`k_Az!h?rdyt{Ps(i--pI~
+zU=iiL6l%U$0M&k{8grq>MUKe_z>U<`9#HMR_KQH^Yvebf<eT7U$XA(M4Ob%{10RJ)
+z!u#R=@O9V;z5svt+{N_@Je+v$f{N!RsCfQttb~fE(B$FpC(;ju%D)5r7Wt>ooV*Ht
+zfqb9Im%^u!>)>NBA3g|&!8c(~_!8^_)z0628VHmS&udWetcHr`QR5P*c+N0+H2j(L
+zLHI1`Izr8>pMK)v`Eh+9@ICT-Q2KkJ#_iQm@h@M;I~B+mLg}YNjk8fu`bi&i9C@IK
+zekZ7L^T0=ez~k_GsN;1|<76NBFx<+Hzqi(ni*w=I9G?wkKMZOdeEwk|@Ctkh>iBI?
+z^Kms)eH0kS8V@rbXx!P@-uUeY*58aT8<)XS{LhDn;Qu7(UEf1pSM6@ccd+Bz*zx<{
+zclLjWvR?sZf2<uJZ^uX5@t^+f?7xDt{{+gu4yrv*gj>>{MaE31_T10p$C?A)byy?p
+zPMnv*{oqWfxF<lqQYZZosQTIl{>bt5?>YH?Sb%({$-|)f!#+^$x$zz6e=U^%)lmMg
+zfbxF^JQcquK=~g4zv1{UCV%vHAn+&T+o1I2Q2l8Hl>cqta{hmO)A@fJ%KvRp{x5?k
+zlkOy_^kd=Y96!k9pWX-rjz@k3N`EF)e>@J#|6Z><|DB-X|Kc_0{|=akd;`?=$~CYv
+z*E#3Fr<5MbUvD@GdE={2egLXJ_k#PP-wn#|&#ySY55ipJMkv3x!tL?96#kRrrBHrz
+z-~{9?O@8WSHy#dy@_QhZ-)*4k<LQ?IfwAymD8Ki@?eKd8e1PL~q5O`6<B)eY`L!3_
+zcp3@iw=b06u26noe<2Wf9zF}@_i?x_ejDK%96uY%?+I`X^1ddoUE{{%WGKHwp!^;H
+z<@clK1A+J8n^1mVf}QaDFnp2YmqPiS1)GtBCV%rUH=b{R8qXIQPcfDnCmV+tgT`*g
+zZHzxWXXD%Wg7IPFZN@8&XB(?RGC`g|oF(va;-3n2pOgnRPLG1y!hxpW4QkwO12t~j
+z8DD+IjoT-oj^785qTF{w`MDB4K|UA2f5LjGaX15Z#@`UA{yd+H1*NNnN;erQ-DubZ
+zkANCqyFsP<@+p_D3skxtq0)V`+NJv#K1{l|pvKKVpwe9cmEYf<bm>+=rCS7*-|6rl
+zuo`MS91WFj7pQzvq3plHSoUlA=Wh6hWb}7K*`Ew$KL^TwiuBlx;h#I<kx<u3yF=Ok
+zn?{iR+feooLD~Nu-Vc{SohRy{>_<S^4~DYe56Zp^TnRftoj*QW<?Jtn>USp_XBsCN
+z2OAGH?rGfG`2Axp{RhT1#)ph6j8_;J7;B8h#)-zE#y-aH=o}{!_svlK><YLg{b`9Y
+zAL{&&YjR(x>+C&E-o^OIqb}XGkgk$`Ce(GoOh}ha9{_cIxd&7~+#0GsyhtaLzx$x_
+zz0-KEaR8LRy`ionIzah*^%3W9B~<^s8OmP;l)uSP{>B-*8(*b!%HM-f*Bv)N`KyMC
+zZxU3$9RlUABb5CY4`Ijgmqp}dQ1<6S_1B3|c85V-m!v`2ef6NTdkLzaHbB{(19hEJ
+z24y!0%HQ5l{qwU2oZX91*DWid>=r`V&4TKeM?m>I5b8Q+J1Dyk>AbRg0;)f*fa-@=
+z8_ze+H=bxb);QXDnDJm^2Y5XGKfNyyIF0%1U8wo%4Oqy${5&imzXwcz4Wy~NT?l2j
+z5dH_d)1msoEYs(~ees)N+zV>{Pl1~Mn;Bd>e?JFL$L?mRa$W+*aQqyo^TJ6mo&QQ8
+zT{C?wR6dzd_S-_m_u0MV2QPyK96uSJLY(DLahAe-{N+PkZ;Ua0Pe@nlwilG$Zty$o
+zIz#ot|1gP3{{d8a9yQ(pRi2BX%2Nqdo)h4y*!6>oZ(peL><U$$6sYoicaNKo-+{{K
+zpHTMKLdACqRC)G?`5f;A=M%>-Op=Q8M|cAMzJ$8Ic?(Ma0HmvSy93JZR`?}$e}NhY
+zi%ee)Ri5$2BcRH&4^(+H8LK>>-{r2ao`8z)PN?$S3{{?sp~`bMWN4+&hRSCGlzlI#
+z__l>A&pk}qf8zN0Q2x(=x~`oMHUAET6t&wSQ1KrGpCO;Up~ht=)4%_B7ysSH>!IRb
+z02TifsOz^ea2x#fgNl1UsJJ^p#r@w#cb@t;l>fg$#d$JR{3D^R@7De;5I7F`eyF(r
+z4!!GlsJLfAirDQ>P;nmvSCP*+sCi<b>34*x_Yd!Id;u!%yP@Jf7wY=(WVki{rbES@
+z2Nm}~sJIV>G*S8vQ2yWhtBd<KsJQ1rT|e#uk466Eb{F@*q2hiMD(-6_RnhH2sJIux
+zhsfu2sCjFa=?6o_y|Xa|D((+&b8+7b$0FYbJL2zhsJPF9ihCAJ=f8YN6Q<`t`R@!>
+z-*2sOaW99uJ{<;+!ESe``rZL5?rosre&*IdfT^V0!%%VG2j3!}zrlB~zsB@cP;n16
+zW<bTgGgN(lyxd*iz6H0!-xE-A-vt%-HBfP11eq$+PlED)Bvjm;;IkZm{T6rqTMMTm
+zkA{jn2P*EvpyK||&4B<@OSdne;$9D5CZG49=JjVxe*;w9HO4}yxQ9Z;-37h}JHajS
+z_x&;#_XkjMKLZu_BakUF{dy?>6;N>xgo?W(Y(`#oQy?$}xehAd>Bc-`wlUrK^o`E$
+zUgJ&1i;brldmGb?+Zlhl!KMG$xWIUl@lVDv#w_FK*SmCY8lN=YZM@!igt4cwtFeRe
+z>jvj%1<arwt}`xz+DF&f^gsW_*{wIeYP`XCk?|B`sd2LLvFn)6sNWl4f9kac&V{+~
+zE{+d{YOmf<?X@G^4>tdqeuDmGcp&;4p^n$UU5RfrRJv@~ljF}{>*9RSc&qVp<5|Y_
+z*8~E8!S8CQc&>)Ea1Q)4$4`Xvdkj=OSy1_I39m>0)737Xr=X5s4HZu%RJ!R<@qBlc
+zi|2jg^Tr2_w;DUch4}sAN*7NPtS0@n@LY~Bf%1DgR6Kuz%C{F>ggy<be!jfI9dCk)
+z=W?iY7eK|c8&tpl<Z{Ocj29RWh2yb%{W3Q$&Vm<UKh5Mp@I2%_P5xo2o2Ood8b^PJ
+zH=ti)@+^2A@@SLyhnkPuoBZCTj7#K)q0(Ok??#?yavs!q=Yxy+eh>7w!79f2bx`xh
+zRq$xacM;Tld9vw`gEiP44P`e9j>qmusQi1Hz7w2--7ia=-H&jh>Jcj6x1jWYf%}sG
+z1;!nWzg*;w-(_qt?r+@D_~eDo?r!4%;{nEZ7rXKIqVW-^@i!bQ-`>V8j9*^hjxRNq
+z7$+EiSmgAtLCuq^pyth6Og`B-5#Gu1AZ&!4VSn=b_xWyo{sZ2@@fFY;e^C9Y4yylU
+zLdCbYan(X6UuHbhc%X4BsCd3T&&Bf^lzfx%RCq1&G4N`b1r^UWuok{|F7M!R{3WP(
+zo`s6%2B>(BgNkRQ@$++>{IKyhW3Dj>m47#=`q9H;$<Lkbcr!c)`AoO~7DC0-8&<=P
+z@Jx>Xyuiit9aKEeK*e(=)OgD?ZU@J6{K>Oif3JsUqt7?_FsOdKo5|mv>Biej@LAH`
+z0k1*7*yNc|{dt7R`$CPk6qDaRgX<dP2cXhl4%M$~P0ocHZyEKx%ZWY(9zwtS@bo~S
+z1M+=vJLK!&Q^>>M!HkD2sBzUBs=U2mI^4tbAD<TR_T|3|_eJ#p+=qPr0o#-Q5~z5l
+z!Tn$m9tsbHnzwd?^4kvf<oG+M1_Jw&z7eW@E{FHQ61WTY$3WTVh}icveLE=s&8Il~
+z$Dq=$fLa&025yOqrN$z-4aalgGo%{|4@KS&s$ROly<i8Z^@E>JcInr_Zpckgajk%|
+zzYfa&0x0`4q4Fz-vOf;)%=OS%sP_r7pwjIRy?mh3ZJ6)Uy#@D1ZiLFG1MH5gjdiX)
+zzJaQT&)~uEEhzmxum@ZY)owRJ*<A~J!9}KjZk}te`;E64mqLw?61X+#kAYr&!~LnJ
+zG^l#s4ywI>n(OSJfoh*epzLoE(VqilUk&9q2>$^)!oR|wnRIW58{psITG)vFc~Jgq
+zjnj<dp!}pk#kVt5em^s5D89F#@>>m+{vIg%bD-jz4`n}1M4tm?e+ZP_r<_b0;A8L#
+zcrUyh-UhFN4e$=^hd}uc8oL>{f%5YflZN7Z9xA_kq2jw7D!;R!(pN&+=Rn2R7s|ey
+zi2i3zg0f!^Wp^_?AD#x!fK{*_PKRf~<KXSszk8CKf3AZXe^a35pMECq0Cm3KQ0er~
+zK+QKROg<ax{9bJGkx=u?UMBxo;m+qNa0vdNE~h`Ee-!Ha|9+_J{}b(ap&dWgj&Ebf
+zQ|$Opvz`44C_mRj`MKJTXF=81{>Bw$PQJp}$GDI2#aT}Oh;gVf!}zZgo&Eu1neiCo
+zyQNP5jB%!Ml5rcT>*!yYOvO*3&g09V;=IJz#n|3>{S2qS&^R0_{b9xfq5LeF?(9xA
+zjxzQ$zE$G%w;QiA9%1YW)nB%Ung^SU9UI_e<Rwu3Y$0sNd~rOyndAGxn_w5H^KL4X
+z-A6^PAKndbMZX+Me?63buIUegD*vv=2c|js0%M(VFJmXDIKL=#@iiIiq2jEB@?Q$K
+zAkM?#5{|cn7s4M3TpSyq?4E%8k^fS7Df;tFe}?I&n0{-xFLvMOJ6>ZfGah67<xfuk
+zDO8;Qf~wC3V*ym0xls9!f+@tgC!Ejm4^H6SfA|_yeXW7AyBR9Z8h9%DnWir^eSgz`
+zaXk5>f5iCHaW0;ZjTabCFpf5Ud91U08!GNcpyIyRI36nQ9H@8>gM7Me2M^=;%g6AY
+zGH^9i+>b)pT>%w$2^@s}7}HNMeGk)rGu6f2XdDE`lkSTtZoat%9!dIhOfG~2kh4wh
+zYTPi{*{?QU3#VXrvdNR->BxOePK9;IUruuAo`#np-)iy#coA}u$w$E3kh__@abm!G
+zZ~x-FKwvQO=0Ww7j>d;3IJpXH+)g*<L5<rTOzvR(nnLUNM^Ju-8+SK;nd^?f4b@Hy
+z;Eiw|yakShx5A-N?Jx+c9d?6ihc)9|`envTp!^&L7sEr~#jqXJc=+LH8!u3Po`CXm
+zDpY(Ej7LKG`FJe%2k<R;GHitEuQx%(^JgeO)lhzdQ2n*?DCcjOF%!z)n`5}HhW~;C
+z;f+xJ=n5!*OQ8Hshw|4G%HIQ{UH>^BKFjgZQ2i%pawn+%^T{Zue;le`+-CAQQ2nCB
+z<ZP&Zae&DwQ2nBLq)Yz*RKK|1<Wt}><YgmRXC?pt8ScvWiSae4@|_LUesxgoH`|W)
+zhRcx;fh*vC@Nf8ecbN0@jBzEDp8}}%n+Vl@Bkg!ccnNYlxD;+2%5@Ze?t*H+2IFEV
+zKYgLv?;xo5>t@H_8N%}d<k#V8@Hu!J={rFA`FgP9dr*GPg=)8xq1vs&jvopSM?M%H
+z0UytC?X(oCohCxH(_tp>0@Y66W;^}!Q0;V&$xEQxslw#ZQ0){nxf4`7eR8C=GgLd>
+zX7V{u?R3u(<V*hjp`IJ<0vU4YFANF<MxkE_HGb3Jz8v2Uo&-NQ+{r89p~$zJe4NRn
+z;Be9(0o6|rfa(0#0qzIyA4q!ix4<C&&xh%77Gy}JkB2?b9|mPN_AtH+3=W0r|AV0X
+z?gr)W!vW6j1t@=aL;1THGNjToq3U^KmMho0Q1a981^76uU|xS1R>J)uRgu0GRJkAS
+z@3<7IyyrpH%PGcEsQGK4>3`_w>_3FEd)@drl-(rL_k{AdxAD8aF5NRw#~(4?Wyi0A
+zIzOEwqA#)I6QKHEhRI!|M{X}-_dy@W+o0;_La6$wfU55kp~{&Hm2QxT{BCa-#}YV%
+z;|rkbeLhrs9s_0fOQvhDkD=P@I5-$ifNHNXQ0WeYvi~~6*}Vr9&p)B!`3t1$re{O7
+z&)&vgf=+%24#V#*kSa^xKqV>eccAL|1>>Vo^*qP)V~kl)_0$C_-=7X4F?<WEpR9%>
+z(BA~r->!j*e<@V_l~C~ygeqqbC_kN`{H&)^6#sot@h^s>u<Hw%8q>Fiiue0oF5XX!
+zZ$ia;5tP2fIKg-%RNQ+(<(C4L-}^mX+>b*YUk-JAp&dUCsytaR8}10@=evU`2fPX9
+zz{8>1t2b16dqI`ABUE``I>?o`2`Zl(q4GHcs=QO-voL7vY<#<iYp+M3^w&ex$1pe%
+zc@L=ab~0`}(8c!}R6h4Z<#P!<ia%@Z_*6UI(~kdifGg)0Q006ds+_B#%6T(XIj@I9
+z;ptHE6hZZ;Q6?V<72n$Zu|xkFWGe3VBpe6tg=66vP;u{R+}ij=cX#|QV}o%qRR27~
+zSPs?RV_+8S2e;(b_G>Cze%~`*Yg}lYV=OY}8iP>f>;_eCHJaqxaCRvC3sigV1p6WX
+z&puB6C&V=UQe!`;e*I0FW25mjn8EQWkS?6w4=UY$@K}y_f$BF~L*?_{-cElll)qz)
+zU+v}U{Tg^2$16=9XFM2Ya{RG9X@C6ZK*=eP(9^%z!|^ubl~DD1fw2y%UT4E{>_<Y?
+zZ*Qpj{c?Ag{%zw`#&e9-#scG5sQT<>@{UmT`r~e_8^Ncc?!)zc@hbP-P+jwS(_aXc
+z{v@b$qhTL-5LA4xb)}rhYrD95dJ(EVpMa{*l~8^!gsSi3q1qwWj`xLXkA0!)`SV>J
+zR~n~4_45>{dVFUWCqDvJ|2LR?8GHe|C9sVCy%5fZBX=f0j@R$x>TS01U}G0!d*fF-
+zy7pLWd=aWW{sz?!S3|YKWT^HWV$_$0Nd9~W$2X0CGhPH$f2TmzXTHhXz!KzNQe8dW
+z2+NQcn>+@p-u5&;(i#8qV;o@I3eMno^Y$3?-y=}zZii}*2B`M91gbq|ntp#MfA4SS
+zI2WqE_kpV4@3(dGE5=4Rlj9edTn=X=x9i0HB<YrI69_N`b-NO3UGh?>{PdmMJ>kiw
+zp9=e-A7?z&`1h@y|MOsf^rsv1jU8Yw{BP`N>!VQqKZ6Irx1jWQ!rr7G1=TM7jNfeK
+z<YuUG_p<R(sCK>wHekO5s=ZH!YVZC~e!3g~%|XfkFy3ff0@c11CQpKD_ru{VxChjD
+z+Z8JA4)8$yeA>b3KY~jC6jZuv;EC{ZsJLdp>B!~n$sZmE)xP7P+BXNvZx^WcU)#?0
+zi#MQ-KMd7BZi7lc$CzV$XA9Tf=R&n}k;%iL`olgZ^W95cyML78?B9Sd;P+*C9rgbl
+z{0lrUz<mVA_lIfJC*cPMApaG1+#)b`8T>RQF!s;zHFyP_1}`#sA)JGJ27DKuY;rYh
+zLY{4M349Vc-{dLqU&!N49tD+t2$X+f^3wM;nL6>((-xkd>E27vH0Q|-)4*ub(ftCw
+zA;k-n!b<oUTY<!#Qv%!0gbyH#J0TaqrO0Ae<f-r$WU(7^F1!_4+zWXmydGKH9XT7`
+zh%D}b%;mh^$30%$6FCU4MizHN?g1Adi@PAF!Sj*DU6H%OCCFkI<WyLJEbf5Z5tbo~
+zsmMU>dAztIvhq1#i@^5s-vg$>?oj^rgYt7ARQiJ;2<#6Fm>;RLEwhbjM$MZ#-b@9H
+zO~wXey|KWUZA>!;jLl^1r8hPh>x~7*Y-5@+U~KMe>5UD>dSihx+n8ny7&Y&D`5QIg
+zO0G8+7_*IO#(=STJ4<hDFxDFjjM>ICW5C!<OL_Sl8;teF0%Nu@%@{B?Gk<&OjSa?n
+zV}UW-m}U$Zo0-48^u`8by|KWUZA>!;jLi%zFTJtBSZ^#aW*gIt0b?^A&P#7>FxDFj
+zjM>ICW5B5MftTLcV5~P57_*IO#(=SzdE85HY%tav3yj&uG-JTn%*5!WH#QjSjRnSR
+zW12BwY-Yaq(i<C$^~M5YwlU2ZFg7#)d+Ci0#(HCcG257C3>cd^A9(4F4aRz7fic^d
+zW(*jcN$jOJHW=%T1;%V+nlWH(W}e~CEt`xD#(HCcG257C1YWxR59WOp9E5)7{1?^_
+zB!_<2{KX6>hknQW)u59@zgvD4CnnGSba~|2%7IQUFnLWcC#T-x^j!{da`UZDo@V;c
+z???|!clyxpKHq9`=y#fTF#D!|yY$OBktzSQ_nmx7rlmKz-r{dId4a_r`rY2Dp3Xk>
+zJF)+=`Uw55>vvY3rg3D#=QAsB=yxsuW%+57r#`6%Ie($wrR;R7#W&UI*Y|dE=yxg4
+z?BV2kE^hQW`4me(!^y{)eUs_0HvggDO}xVVH<vs6YHPpH?<VT#_Vl%mJcQQgP?J+l
+zKEdR!Ca+{(+rDF3pzE2=el-^Yd#BU~Hf*ibT&wWEWX(hRTsH!_T|K`a;Ox)jxb$o4
+zoW9=lSDL=q^p(ti`dl~6rEd(S-^!)0xAeVD-(>nOrcbs0HOKTzOn<ED*D$~7Q^h>5
+zc$RQd*XK@?H}v<!z~#sA9!N@BpqcwreLms>N^$}BPx{<9!O5ZD0seQclS99o`}tTW
+zhkhr1Xr7Zpze{}RWGAQ5@AT<fq<GQ-Y4bfXaQSggANn2KZAUvf)u{uAA8YAp7kw5@
+zb#j9zaqT(X$)VqI{&19&L%&Pg%gPtbatS^;+Uc8)aI&gR@vPb3$#2nD_HLIJsJHq&
+z$jaY9x%8Q1=~FA5{F9Y$gQXua(c-i5P%zHPq2HN3%IYihySH!s$>L?4>$BR@hkiHo
+zLrWj}ozrVAedu>r_p<mKE&o$3{z{AgXwx^D{&v&PGyOluyZl4H<2h-Dlhdqzjxl}c
+zcS4`G_H7*D;yu;k&t)9zGkTKw8{+!ggC>W5=e3?IO7*YCn>_Qt!Ir-M7AN;KeeMb;
+zAH)EaecE50{EEq;-?d+E?H~Fb_di*G3jJ>S%O*G7>C(Sw{zJbzf13GgxYy}FILhMZ
+zrb?glLNc44^ts36(C>a9XL9Iwyi=_HLcdGi)8x?aH1BQo8T#GpcddVC*L&{yf*7lx
+z51d?T<1O?%^2<za8tCG=I-CC5f%&K2$(Qf0{#zetu=ee-t@?L;AZX*etJyc1{my2;
+z-0bz+O|owq<nsS^r1ST>>0f8wlD_g{r{9C|ru^2J{=cSAGyP!GuQvSw=6}r+m;Rg~
+zE`2=@iS#+KgY&<En;?BUjd1!@)9ZItmH(Q%J#`?{^l7Hw)#lf1YtLg$A2j_S(>LDd
+z(m!bWnWk?D>AC6A=fPnv|J5P=RxbZ~9&+jPel~K4`oQZ}pYK|I7MOiUtG}rx>o?LA
+zf3Eo-GTixZGW~&8zBKcHLyq&m#{6HmhqKQ$`-$d%q{&%U|Mi_+d}o>em8PFz{+oFC
+zug`zX|7!F9gZa-k`=71+ubbR#<<CCMr5|YNQ`xMfPk&3_X!Z>j-#n8SSbVA6B<u5-
+z#ka=vw^)45R{n{DUHO|WzFhjT`dg*hU!R6deKy<q?LO&|Q@N?t=aFoezR}V@VC{3B
+z^~a-ae5l>^+0Dwc(d>7z@?2^8y<z$drhmosOH7|>@vbxdAr|j>rmwT~9j(4<E&X!S
+zUux;K`AeUREPaFNXB_IvS2@B{2hQSp((6xly|B{sy6({DdD9n|e(RvKUt;<_LjFuY
+zbtro3cZ1cB*01Eh;CAP)(exWlztr@>zd600Un_mU;{D9@0h@oHu<_n(=~r}c{+n)g
+z={K5wo$2)(qso8Dtxi8C8@WS$psUr-2y4$~%de-!*U{w8mVdp?7iXEitLbN$e#1YU
+z|F=xv!}O1szQE>-D$763@-Mgi*O~ozD}R>BeYbM)2cLER=Ue$UnEp>zzBO#R(C1id
+zpVWF!47|qmh05RbPbV+7{<^`g|0>%#eVWzR?YlWS+vN6Vnr!3a_A{KUMIC*5nA~jh
+z#Wa&E8Hf73ZgQ@Tr#$7?p@DQR{R_mg_f`#ojV5nf?__PJ*5_)|H=91)<W$q=nEeLR
+z&ojBB>GREgo$0qj?wpbqXt)XId@?AX<jPw-F|dW{vsXBIUz1bq`r*6N?EGr|aTn94
+z-Q(<+QeOF6V&{+RO>VaSJ@jO!Z?@}$U+SG4`W^Up%>NR*{+mgA%U=`oo<4u)f64WX
+zYkij2JGp_yTz$^B^v!nt#BUfld%OO8kos5pw0c>ycFF&qe>>l<tvCC8=kIaz*Th3%
+zeI{Exxt_$HP^k2&JG%pWp6KLCo1eEexuBy<UuNY`<Kdh>+7GSt&HFfc!6+v;9^t72
+z-7WtO<xU<GD&PK2ezxA(XWRYZUrk@1<NSTj0;3n7`FqslHJ`im=K$#&zjX3n=>ML5
+zJC|PFT(Vwv)8~7W8$NLIOXhFGr%s;0c$9s;jn|ImZ^J*GzS-;>?EE+0%HObu%kLYr
+z&+g&uwJ%=&g6U4a)9R;Tgp>bd=^F>S^z+R=m3cs)q1IkOtB)>cSb3Z}aH^%(!vlRv
+z&A-0HUY{#XZmxCm0P~-g<*5UGxz5|WeSJWijP<$Xa3^;(xy1AvZN6G#`fE+Uh3RiH
+z`BIa6nS2H9CjWbxyyKBhPBnRZ(_d)vV$&aH@>}Mw*yQ)jezM8On*B(VPcVJG$?urH
+z%H->rPhCm9;s$EC9*vYUr$@`r&yAMfV*ZV^-(hUD{Ik#gmA#_%pAL?ewf{ZRUpnm_
+zDZjFJw0y2l{@LgMGN0U&@f+#yqyf=#(ZFc=yqakF$L`VcN$sQMVcSK^BX;r0wbAmp
+z9i!#zE28Ch4v3aZW=6|bcZrraq(;l1%#N17_T|5$&;K^NM%zE<E6?q|`kOf|+WrBb
+z|L4=9_4^h_%UwH1%j3$T<!|?imY;4HE!Q0uEk9orE&t1x-=V&E`s^2NKfEMbp5(K?
+z%4dJN&;Dee{Tn{}AAR<tef{Zc&V!Nt^D<xjg}(ZK#aBN&dHH1rLZ7bQ_z27MeELB?
+z{YsyHnomExeRO<Z`NrRkKKTdc)yVR^<ZG`ptE2VWhZAYP)R*7+zW%ttH@;r+jn^;s
+zjrOPg5-EXjef-Cpzrym~UVDV)?|k#Y=f3$u?<YmZdtOnr{K%MS`5s?+hH;${nSQ6r
+zXnE%Yqve-<<A1$x{Eyus+WrKtGa~(O?~8Y|Z~Ra6jeqTnh)loxtZ2FSyl8oGLA1QZ
+zKGE`RzWHu+RkXg;tN%dDr!YTSU+$YP9`MZ<`}^Aa8ejdM?yKLSzWP19G&;Wwu5TjC
+zf1|H{pYql3@xJ;!*;l_;`096#uYS+))$b|3`d#m<-$Q)$s~-c3jQ37o{a)p(-^YFR
+z`;f1G(|qTTalZQf%2&Ui`s%mFSHCy;>bK5Uzd!owx3BMfxWZSzxBKe%O<(;!>8sy$
+zzWROKSHHswqwDWjU;R$<)$i`U`RgfP{T}3NFKsl4Y@f4z^;_qw-?5#d?Th<I%h!&M
+zmiOrwEg#=4TK?OdXnBfnzJ10wKYiiL?<rq?SNZb$z?a{8Uw+Gd`EAi5I-cQK(en4c
+z{MP#N8{oUX+iz}k`Zs;~?e5EOWl6OCM(_OBGW`TD@|C~0FP`DPc+T;a{}5mKD}3>M
+z;H&SGeC40v%WoTBJVn0pkN4&GwJ*O+U-`H4l|Ro{{%&1VKiMr6a=kY`!m{48jMT62
+z#z$Dce15e49B({@^{Zw?>yPusM_B)yH@?F1jo$bO%l~N?oxZ<UKVkiTW1{sx^^KN;
+zUVDY@FZSv$ED!SPFDyUm^FPJszsl<mVf%Z1{-5#rztHD@H?RG}=@<F@KkW0ro!9<h
+z`wnxX%ctjDk?nJwuRYsOi`K94wdW7M_I%mbo`3bV=g!{sNjRQmzV<xWyFLr+SNqyC
+z%^MG4eera~7yk70@(;^}KKbvy@lfcy9(%@jzuM^4SJ>YHL!$F*9vm%y?7KeS+h_lf
+z&;A@={7?GE_w%erM3(O+pZ;QBe24nZ*OyL-PJg6N{+HLj;qvJ{+{pZn^!fkA>u+KE
+zuD<eBv{U-*7K4L*@(Z1!^&Ncrf021)`V`h{BIN^oGQVLLrN5M%Bjf+V^VbqiU<;o-
+z*h?SQAG2F@`is2y!um-*`x>A9tv>r(efjO`vp>%#Yu|We{Ac+5P50#=$nRdA(RWBy
+zU1d$hn9`d3!r8_B`eX(xYp0c!7L6&X%PXB<GOReWZ{Lgo`BUa6u&yqhQC?V6TUF8q
+z>x{nDB_+jv!x<I%GYhL{4ymZD3*^r(nO!7uu%x_5p$(Z?$bY#NW$tKkNxY*aMa9*H
+zlS`^fr(;E_g2O9n%Zm$ZN-N6y3@xlFoSe}&e?m!RRY`S8d5w2?+>~*cR?jV+PQlB{
+zDvAbI%=5BUEJv5jO;Fr;m6KOGr?57GeZ1;PY#&oWX6nM6QBpIpuCios-PpqN8D%BK
+zM;Fd68C5={qP(VLUQHn13Nw7%gdxN7j~bUVG{3t$G-@2J>s4)a3AFm2KwUVA%A1)t
+zv#^S$p>lOFp{xACwWVb>rRDk4%PI;nbb(DPnNeDvQ&dz^T^%}9QeGT=ptihZUS&y9
+zO-b>vs;Y{r1l5(GdMgu{C#c={=J6^Q%Y<bOccCOkLn^9Dq72PlRmt=+N=yICpHos*
+z4RMm6Uo>-8b<M2&;=-!Ar5th9N0k?brD;{A#WPCAO*@g~6QVRFs<_Z04G?wuJjS1D
+zXF$t1&Ik^vt(sHfjoWekr7ta?F>XL^Xjo4k>r0R|_NXz##`f=*mCR^>XOt1l?32tY
+zv(HF|Pf2l3ZOu$ZT4|9t)`nCRm&D{6?5&aAM+19Y-=izai(*ZB=M2jm*L%c}v55@&
+zj2xRYB*t^UypcJXefz~6&l*);T~fqUHLmyAp?zc2O4d88Pu$~uGcse2hu!rdWrnA>
+zv6WXlTWyk;IVG>GdP<qEeKPavX3s9Esq!Y-$vHzJXDjAo#&hY6+KSrh!F4qy)j2u-
+z^x=HHV&s(MWMrz=hu4;S9WGf47in9Ps50_Zi#bKD`VUoj8%(o2zpCao7>8P<4W`bo
+znyC%O@|)B&vPInaBWFn7>`=whtdRy8nL5MdR#ntg6jhXkj3O<}MNv+0a8?`ahUB$)
+z36JU|BdabaC)5HXa)#8+8<96L6h&Lp`})+cbrWi^-;!Pp^J~+Gi{UzYVm}!&@H+U=
+z(itVyH4MXewPt4Y*S44udK|MjJs~2mxY{wB+J4dPpOX{pKbDhm;SA2U!C&J`1JqUC
+zZ}$~$(BI}Oe&e?0Gb59RW*!SQ41;iJoGS6mBAPjwSwu4@Ftglp2TWrMAHt<*4Ht4V
+zj-7a-cO4UPaT+t-=LR!^b4zPxPAac1oL({{Sa(u!e!l+Cn=)qVurX!B@llpvRyJq$
+zA@1T~c13Y*S&4TAo#ZlQXlZq2VNKCY-<hbjD}}rnQ^xty#5rxpv5Gl!x7ft?_ZC%k
+zX1}2&(+g|MYVtTamd_Z)g>6-3MVWUEG1(%CO>c_4DSeAVHSMovHvvcM!&75#u71X4
+z3>a2kR9IPE>$2nOm^db9WL8I980T;%j5>GEnGs!~k(DzbucVNRbZ#pqX9SB%D`%Ee
+z={h|&e!r7&-Ti78@h<^0g1J@Ps??NlZ#Oxke^ue!=v$)JL+g{vND5z5ZVrcxxy|da
+zZ)V2kbQr%XBd(@5M@9a2cTv^&+ucP~;%{{q_x|EnRa^X<kYD90s$DZO84@`&s!B>`
+zbJsF1*xv@q(BN+wC!61^T6yz(Rby{%uSu)7pSu_RZMEBSXPePy*pQ)lIl9sH7NTgf
+z;u7wYBUgLcGPOkwq0QwqY9MVMr{UogJ^yBDacxtJ9WkOdgEx16@b{&N=FXZopkMDz
+zjj>N|yng@Ny~gYJztwAkD}dfLg)>_3gK^LNZA_Z%8itiryRs=MZas>qp&K4$krxla
+zer};|cra&J(5h^BaI*hOCfVgen_WZ?%U=~m^dS5dE)op6P#L(#8WO68VX@VaXpFTn
+zc~pD&$5zCdD&&sao0djlijChWo5N4MQTc1)i8l`0=Es)X2D5xWOOF*=7PrH~?82fJ
+zfdzC<6(jA@#_)<NZ=tj$(Uhvv8eFttv3*qeSXO3vzEGIQ(}b2ZRV8I5h1D%$^h$1&
+z%9e7YjuG9I(wcJa+b0%ID+`xpIF}__JdRpB_HF_5E2}D|p=;{{59hPIWN!FAz@G06
+zud0}x$LS;bb|$Llwaf$&mxFmT#`=<kM@mw&h#`^GE^<1xMdH{z!_#I$lQyoN`Ag&0
+zmm}BL{1(X_hnFn8rP>kx)Ghv7GfbXM%d%TS{|PNxckC_SBy}9uBDv#md2OLCVFs;Q
+zX7;tEuGnV|`IS?~6{$<-X&rv7_h<OF-*+z`d18!NmdVNSr*;d@-U4~d`ncaVv^uBt
+zgXoodzh$_zZf(Ey1mX4cR&7I_pbcSoUe&Ix+sbR(EW?Gf#}El3j%*3Ha-+3(S5<jQ
+zm)@OCY<d<6BUj!NnQ7hK-y$&!#abp#V8jX0mKl>6QCBfWu@T2}kZee~MgN2aV?o&;
+zb8>I~WmSJ_|FWuERgG&Et`(eW?KQ4dxLOiewKC49wdK?mb&E5$Fgi)HtJPTB#FwS9
+zwu!Gl{kGxLXVOq3PM=Bbd{dl1w^q;Z{sg`%ia2%0T1Hh+Qp>37Nn#nUoFqmORg=Uj
+ze8~{8#_BIa%+QZ9h<>)<SBK}j0X%QELGL$;dBPN9piIJJC`RobWQB)MjDgZ8R)>Sk
+z2x6F#Aj~9d<Z&{LSTmpOSNr-<%$i87eN<0sgMCzgYSli@C8j@waBm51RPaq5;fn!(
+z($J~je>`06ZZASyhZH=f`a&o17>DX5`LuJ~6!DISLvW{KzsIQAA<6xsKb>pfO-i5^
+z-lPPr+%oz@N?Mfgl8--G{E{TIk5`an_VLQ$w~yJPmyuaiSY0!*!VT5@%$kaMu@?~e
+z^Jdos3kL^-!-Es%mkpnnH)ZOu>67wx%8PY4AYz3mv>7O)uXm7}<=l!=J&6lWAJO}$
+zlJa0b_egBU$YAiq8KZ(cuna%l;@GTF!MxJE+`8(%lX!raHF-onVr5;<=n;9PIY;G{
+z)(l5Z5=>^$AB;8~{a;0sF@Oz+p~bV7s>#q&Yp7a=d$kf-3nPNTQfgv=t0-!a11HWJ
+z8Cx$oW5RXQdcF7~@#^LOB9x4N{w;(3*;X~DWYo}%{*^6{7(?|_I@)y`w`6$Ym|$@B
+ziAM!P-Do;;`Shcxo9e#wm)@C^^CLSCedcIaM`P(fHN#^&da}Nh5oFV0VR`Y$F++!E
+zWNK$;Xp>Y%u(E1aD8iBb=+`r9W(NC|mQSysOV1juZp~AK(m5r?v>%7cW{>_~iZO$y
+z!c~PuHF1LM&3-j@2gb%(U07CQarUMlitm3Zy#A^+_OsP7phN95hw<Dpyf?K??2MR^
+zSz2CM+fuY)p(f~8QCq|D;laAdZeVlBh!LBbo6fGkQ&x6n{vC6pWWQ5x-W9_CPF~>!
+z8UK}G<U)OBu&82oC8H$#@Q5|ioDq4`@@tBw7fsLc&TNssqOTf%o3H3A%HQToJ1CM|
+z>-@TcZdQl!E=nTS<J%Tt-jqIU5iic@Go7Vn?PMJ{eL5S?GYhNd<(2B<q-?k~TFm9h
+zZ<um=C%C}*|L=sA89&nBQ1%2K|35rgXKePeC-9i@`(D`AxoeSN{NnxI7q-cx`8_Xe
+zlSh)tg;w+>_W$CAZSqk5KO8FwI@52MC!ELdsWQBH;oGhny*wIP$w+DxUQ_UvHImzU
+zD;8SgNNN^Z@JMPD-u|D|Oun=flGG?%2DdJf+}JCG9s_0cnWo3kI@N`D{Kl`sHkgKk
+z@G7z`DO#$t4aT8LZG&mJYTIBOs^B)5hD+$GIbo8#$}H~%Jsz}YF;5g0mDbd81Hu!J
+z()^m?$Eu3+W>*i(sH`Zhn>WwfEM1c~djfl=`wuJgHuR0JL&zCCp@xMJ&pzDw!%KU8
+zDk@9L^ZV9Tv-3EkPhrFhOvn*iw(Vt(VG#?*`7s-V=hckK85JDW^0tSTV0<}8t~+jG
+z-a}f=dqncQ`{-VCa(}z=%;@LcigBMimO8E~EiCJ!`^%i1Rv!@!XxR<T?jN^JeMZy{
+z=jeB1)Fv_Y5dBCrHz#LUAKh~H(e4V{M?ZePcEIOvs^^Hdt!6K_wQb*Wy=&%g;hf0!
+zoEO`mIm24^7Mzq{GbXY__{umx=cEY}@~eWeC5>wF)+35+<#-VdX?sK!x$z@%{h*&)
+zB+2MoSzS_FTrq(KlZx5&25&Vaqp!OmZ<*J4JQr^E5y8n`)9_C)KW_#rG*LC<f0<1k
+zAZLuP!jv>rUDb87r&aLwahhJ1#9>-^q(-gb#@md-&Yi@m<32k|nj-##q@+nA8`v5r
+zseQPECa|vas$oP#EhHI|Y2nwv{JF;ZaXU{oDM|9I!_&EU!rFugHaTVTKtiXsO^BfF
+zNm|cZmlvCub=#68&pKR*?rgdVA;c!#q_>ILk2N9sGAHg>i#3Zsz+&y<jH+0pn4uJF
+zlB5Eoc6j+p)3QfPy+jv!BmCt}?l@e%-oS`S-QvGB!{ph7`fy_Z2`yT8tR9-&aa@b!
+zj>F}3T{dwB2`qVJklA}kZFLQM7rht8cy*eW?Q2R|8LXa?>s=U5$(v|@MxL1L8ZIZ!
+zJ};N9uI6Yjd8xw`53wFN%ofz@+RDm`s+wx=@sM|fCs_LG3SM95<#q3feQibPNXxt7
+zM@0`E--eCW-wpSr57(5}+2XzEoiK%Kg|;MVx#x-ZuC>p9Xw<a9)ZJ<5hOiCBq2AmE
+z)9@Wk8;s>wojIXtY%j2P!@YvH_HMXm6vu`C-S9+q?%i--9VZ`Wp%#dE8G4h_`})+c
+zbrWi^-;&;&Wx}tx|H@+6bd%6e%)TFcH{6$9%+8&pW`u5AYa-3!^aS^AxR+O4t=<jy
+zMY1XF@88(B>Ao~T6TBO~$#I1n^tZ(o?xT^7+nP`RCdSa)+`eLXW|TVAe#y)tnmNLZ
+zlf<0DvQlnoOCq-3^D2UOZkSP0UQ&gMTQ0qx;2mo*4}EJ(i^e@h$5wmx&6`tlQmNEa
+z>(FXRUEOe<U1FZEWb}?YW95}5vdawFX~GYgh40A1mF}HvvZj}oQ^@%xybLom^uE1w
+z9WRY*s5T`E&0t~UoZyf|IfUk!HXExCw#nF?M|24oWu6h#_oP_oh$*jkuGEn6rwMnc
+z_-SIoBA;;Y@~3fEkr8<$n-k`ZaLIY$KEJxAxU6(qerff%Jib3mUsRM+a};l})YJ_w
+z&Bz}-m;VOOt%=`}256zi`yQ#N-2n-#v%LKmyv))j<LMac+kM((EYJG>u)4fC5xW!;
+z#ZiQ%=Q^Hs%u3$?nQQf<nvGWOD+ILs*s}kDtqBP-$`}wavg7X^@^(~t`&-)JFEi-(
+z7yF=OlN@GbM0{^rXbVr)Jlk&4XP$O@Wz?~gDMLG8`p<S>DWZK}hyz-_d@Ho+D_r#v
+zyT91LlN<g&QBC!WC>fJkUQWVj$T_1<+jENbS8?>NmxyL@8;7)cC{dn$qw^dY$}$+*
+z!!)daXyZ-ku*fY;C1hV#GA3#}P;}1THn;e5@9+CWGHwjN_k+l|L3neA_r_h+2#?(K
+zld$Oq=zIKXVrGXnrOgP|R_Z+b>r!WxmY2GWBj=8&?w+8#WoEXV(pz@O>9ifw>xQ@V
+zx)Z&fg$XytCCVtHC8Nk|hn9RoukQZFZ2k`)mB#H)|2JFx;)n8k@92vgMP{EwSBfoN
+zA$Fph<tDn~5;kZSmyC^?;-Y%FcJz+%c4WrQ{P)~l5I2C|byGpy2zuN8(P1qw-*auH
+zXKeOmiy2WncSm|B7`NqmI%l?7({*NxoY8Cx<jBO8-aEtXSdE)w?4`oy$dW?vwHx*l
+zalFmH5f=@kY>THZ90u1;pI%bsD`3tjJwZ~>qL4FedW*Ooi+*mTCxubhW+a`<17S5r
+zUS;)!(){^VWy3Opnz4DL$$bgeZ*}v^%_R1&C@b=Mz<up)MsQZk_V?(EK9^5*M*sZ6
+z>T0byR+JAfEG^^9CG+$9OfM}f=~Gr(Ueb4ZS>cT8>b^&pur4{Snj1-d`D~F}tz@Hf
+zUe3t8+UkCj+{W6?;xi{R)@4jt+1zYPlza#0Fz-7!Ba0dw5!#LGJ%zOkKKJ0%UF-#W
+z7Zw)tXPGX-Z2$j69w&2Xb~(p-^L-cb_PghXF9p@k<LJye<E^Fr-$b0zJ8Bs<D!}1U
+z0os0h7ohgq6NUohPj=l$1<0YY*-{hWh}aPpd9B)p0BKdeaX8fd?aay;4_!CL>HWdp
+zbpM#Daa})Wbb_j&2)2N{8QROWO>nlFiD$c11})|rifWeV|5Y2gBltJ3lug)iXS|Hw
+zQLEg)zQJ7M1k2P;L`a*_WSb+x0WDvd8#)JOg<j+6Q>?q4hz8rVdz|n~3dw4y4ZF7D
+z*KB5JZ6)@yHR8@ALA$i9Tm0$`+;M}lRhiA}R4YlF*JI05h0W{MmYFuM)0QU{o7b&k
+zrB*kuQ*Zrl^SaE;O7`6(QS(V3y@91$aAu^4rIXycoZ$(lrvdWba!(X{h7b1UirJeA
+z6Zy=W8@}T3Hn!Kz%dg2Rn=n5VLTJaCx7AFeCcN_Ld%Gdx<z)6>RZrIPa9-#u%<_9r
+zuc*qKmNP8o?bZBw?8~ynMr|td=fSFC_}dTvm-2{u8{&T{4^~ve<%oL6J-qIuN{UlO
+zGzrg0+FD1O*>_akY*ydlT@_JoGyY$1*S4HC3`F}$7#h+(8YYt_q?vY<rhQ`|I1Ftr
+zG=>K9^*xd-X?3w>2OFNSrPa!ov|4M=?n3F;=xN{>2sjI&sCJb|HFx?DL`G*k!Z0q2
+zojt<75ljs5W$)5LSMr5W9YD4>oUH-zTp+0KewX)#5;-tR5&|1gOUl!j-{W)3yHvvs
+z##zFAhrb=lLn@(uix9wZ@T1*~kE%Sp$yl`DQaJ`tZe{=9(%+K;py)n@2AD#tMiLJb
+z8d;pk1MjQiB71~1>T`WUW78rr8|srgrox7V#=KLX&~(^}-%!5+beV>0h!OhBF-E~A
+z`PneX2mflfPZGABv+VB{pLW^zH@1?W>kp`baGm8fy!9wFX{2c(7N4?@5^fyQ5#sRq
+zqRbTG`oc=ZBgWOJS;Ur$*6jDgk>^~(YWbB6r2M)<l)9JM1B_kF+5XKIL3iZ@?^=1V
+zr)fnXkNw1HkL(BSG-wI`3ZKPZQUn>032C^c8-eUU^3{(WZYU@0m)@-v=n&h!)BkY%
+z2I9)t8XvB99piZ-u9*is4<HJ}4_%_zwC_9@uKvQ`r{mony9sN*+xxL6l4;r#v9+NA
+zxbM=IvC!@OC)knwrh+?>r9%W_LZ|0kacIuXQQW&@W9jbQu_;$kTYPEON)Ms+Tjb>o
+z5EWH^ko)(~0&94>Vqy(WH%zRdsSsMNkI=DrMTBvy&lM5KE%K@yHWM?bMULU^lduXz
+z^FC~Oxih3IUZGLzhL=&vY=IsK)~@0=BbxLX{Jm&IX;{OYjmye871|?-?sjC(jyU#?
+zuma)vL$fCOgfc9=-dj54V+rNX_;@ZXQbh`AEzwtFW?f_p!9+V`W_8edz}rW@hxc^V
+zyi(#ZTR4D{sAb&VlrEKr=XA$CJZ(MEdE@EhwLGuzR8!jhIL}P^aMt1Z=c<IKwKJIY
+zK*Q9e=leTPA*WijD|yLBQi#@^I!Hg0GrxILMIwDuU5D!Xg(uE9KrfK99Bm5_sMq<z
+z_!KPD7N1~gVYmsFY5PmCv@oNPvd9Pf$%Fh<9~WNh3E*QSrIiR1kdENS4y0T0gzWVs
+z-^^Y%MXst>_Kz)T@lUJxC%d(Z{Wp6u=g3vr8XOORInb>9%D~mFGXNBxmWn{xH3(U$
+zMZ?-=s)GbMpN6g^r!%)<L$;_spdoI6s8|#YyA@GM8@3iwU&w-O)|xnP9suVe{9(LE
+z20Xl$7%s+=&$*wMjj_C!46M9uBg6tQRQ+T+mq~*q?4>xqN=~<%`%gSG><<8R#8Nn2
+z<tZCqTrf6TbJ#iX=c*Yq>CDz<%{NGwi6<n=bRb>1H21Gezl-R9c=XarzrLXq=OzkI
+zE-n;6R9tABs<@&yd~w4dQDu1nc^9WG9vbF=pr1EsxXI&Uk#*>ulI|QEmK^KPF)@s>
+zz8n?KXmtkjo8sa)HeXCu3;HDP&}!1SE^Y^m?&3ZH4vOmv>>^TAyBrjXQrss8+}3?!
+z8MW>!%|a040<vEG1@=VU8cZRw^#%W1Dh5P)b>v#t3Am@T$HlOU!p@@Jh}7g7Z$xIN
+zDQ`roQinDoGV-$#86;|`KIUM>?BK{&F;Zj#is9A;?)=aN?gY^V)bWky-jO+hR!`8)
+zkewUu130DTky*2w{W|03iLbM#C9-{9&mOaMj%^Z=DsTHuDLDn6RZLIV0@a21tNO4&
+zvf`KL{dE4k%NEn;^$fN&oZPSS4bQiZC^w1Wiu6D{i+ruR%4x8&vg};)LH_;&)OD@o
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..1e5916c3743b76da5951c2294529e1d5176db35d
+index 0000000000000000000000000000000000000000..2e3e6e2fb579bee1985980e6a3d4e1b676fccb74
 GIT binary patch
-literal 167416
-zcmeFa50uo`b?5o3E@(B#MhF3tu#H4_1|vKn89c@@*}+Yh2g@Xb<d%(Xl7Xr&fva0K
-zI0*0r&mftaB{H66)I`H($qep4HmNG*Fnbu80CN__^jXHy>>+8gVfJWt6rdAL3nfZM
-zu@y>dq5XW{pI^P-udAVD%i42h)#v=We!utUzWeUI@7;Uf-#>i)FR#BRiZT&@`q$3$
-zU>pDL<>Bvco|9Sg+VtNOkD9E}SCogpuek49c-M2Q0{PptX~*V&vctaH@6Y_h&wr-z
-z?ce_BR~ztJ2)y*QOmrIvM$@9leH#64+SK#tqd~x?O`ll(nbnN|kH=k&peU?{Eu|5;
-zY16}n9fj~a3D4v8gv;2uIb+~`{{PNI3me(uw@sTK{c7))9Us}W<JZ5kdHd!qn>Hou
-z`}vI)&@(Q__qSvW{qO%T8AJ0JkbBv*srcxQ?Y&#S7=I_>&E90;)m;4JU(7(V#-C^z
-z{sC{>)<+u*Nz?E59lT#~nSQ=x>pS~}jNxktOYalmCGorF;CVbsz;mQbgEHTaew)6$
-z?cq}4(Gu`~`Ip!Kqejx#9lY5ts1JBI`rEW=TTfqcQ}34xU)<cgb<4JNeP`xvekaD!
-z?uqbxQKlHx_sd@?6nAXex%I2PTOS6$PlV;)<={O&$A&)P=yyN#d&&lRQaE^<OPjWA
-zFMN5kjZDkSZ*8~u{a-dZYNK69p2x3bqM7{C&Pp!I{4D3cWZ&j`FK-J>_%i;hBEK+}
-ziGHg!iiCvH{n1OA=wp23-`f)X*5kI_K1jI!{=R$ug5P@qc((<rs44&bEGh5hQP!XR
-zl4%=jw(Z<XqwC$aRbf0!c!bZ-8ajM++xADIL>i(@I$tjbC%0|;<~V-<f72%l+hI)u
-z#D`sem2;zXe{YKEL}QP42=5`&P#@gBt+@HoM_rR`QvXf4ZCi^ww{PFPwfO4>&b>*z
-z9{Tl1cWnMLVft&5-&W5?H^rlCXYZGG^lsg><xATNzNI&T^FYs|o44<BjA$C)x4F2Z
-zch}~e!y`pM(Z50D6h0|_PDtCNyifE#`jx_tq7`Q!KLO5{dwRFhRutbvZdA@g)T$R2
-z7>p)?^U!8E(7VIZKP6Y6e~=1K27k@E%{z>Q-nhQh<&o9fdwO?lpPas*df=COJ$qt4
-zr|KK0nGB!pzy6gS+fs0T9^6uJetBE5@TJu|ca%17-O*e0jgNF5ZXm}GNr64Eb=%g>
-z5AFQQSGH|8I4WI(PU=%F0h;8`se|0n+td3c2>f87_=q_1#@C*$zLAakd41}QuYIrb
-z``Jww-z-O?Z+tCNeIpn3-=BTF`%<>8))GB_;c~V`>g=h3C|UttbC*PqcaPr^)zNEn
-z+lbe@!Y|#@S%2eetE<52H}FOTuci71-%sD#S+CvJS+CsDS$~OgKa`2;OQ%QmB{QPB
-z#i6VE=7`Pr+UNea>JJ_O5104N^32h{Ay0l!R4?p~>OBXedhu{ne|RXWZ>~l4EnB1d
-z7q>_C3T2e`^Gi9U1N>4}X;)N#w)}x>&t`eb@8_4N{62np$_x1ADc{X6Px&r>dCGV4
-zt7ks%JlT2t&bu~`x;~qo!~2|TkG&ApAG^r&JkL3v=S)4Gq%MZ0ZI5rd*0!j#-u6c4
-zAGiI3sDH*^{?miKT~VDr|H;`co%N{Y;}?6oI_u-qE6U7xIlm^V-(&JVej&fX(uBBL
-zegkz_8`ayszUf+N9lvRq-6@#e7G@hTOY4D|iTW$lUo?*4ZFKN@n!wwVg104r*XQ6t
-zOTpW+wG+CF#+~q_6P|R!lTLWj37-s~YxzB$_1?Wv{XX#T-N!HZ-v>?ZgC>6$n!J>K
-zPc5WL-+s~`=&ZjCT^`B2=jBI^LtE<bG`u6M_B8w(gnvWuZy5f48~%L<{vCyXzXShj
-z@UII0D)3J@B5Sogxb+^2pmnBJ0LRjis9uG)6?hw`0q@?UE)DpXjw#JN(#$hyD%tF4
-z=|of?$j+twxhAZ1yt95q@J~?x)20nPxhR6Sl)LkcV9l$Q&PMg`&WXOO_ObI!XMM*~
-zXmg~qo<C&M_3_)wcd4(lK9I|f*0Ohi{~gyzZ(tQxMs@m*C%YWnJTxyrbCuC|l)T5t
-zyN~kscGmwwxUA`{e`#3+{irMWJ+eHi|1L87G&1}2NOts*6;ZvGy`3^{zt%PbIGK-M
-zRQ@9QmACB!owVi0yW4pb*SCx^mQ%)h;#W{Mc=nKP^GbMsy0bo<od(Xcfj9fwpJk`l
-zUd-NN`U+F`RZ;yT@3D2?q5R|%-g?aU!l+(okLvl0{L+pT-m?%~+B@r)RhRwA^rfEG
-z{!%OH&y)UwO>gMmDx5971S3D6_ywdp$FFUdPvvLvKGWtY%yfL4MP26Du>7vhdSMRV
-z^C^FUEjQ15!M}r70lWmiw63$Br#^+X&}%wj&?yg{3ed^K_Ye=A3L6{oqH!L66rgjQ
-z=P2LDTv>;BM-G%<eQIg3?NjrMJL$jFk9N@~uCBiJxe?P>=g;~&NB!gU)mP}N)h}l=
-z(VY9IJ>LCid<)jS(Y^nt=w4dI(-Il@`4(3uzxfwZVQ*tSgpca+hi|@lCw+UY3ofBA
-z+K}h*Tcf&k%s}~`Yu}Hq{hr#$KzY+O)z#~QadgT{^y@RB$?C6v<K^gk_kA<V`;~0g
-z${Fz(k#)iNZz?CyVQt7nTc*>Lp)$Xpv9fq2YwAy5?P+M~F@yB?(buS-T=K@ZzOOvO
-z=|*}@X)aTbB|qBp$8FQ2IhB!nPV)O}zaK@PQQpePrju<m?Du>59;YtR4?7QvH<V{!
-zD=b48GH>{E$>R5v@`toY(=dV#f}=Jd9It@K{pg(vv}n7#v%bi+Vd(P_!MaR2N>_o#
-zUIrWWYtTGh&O27WcbIp-3q793R;XboRPMBP$=^kmJ~SQMWClEaujNO`gNe4ut=2X<
-z5Y-F&qk7M-s9xNSZF1DvCVQ|=_F{`rR_QRmvQ3WgE8Ap<U&<}*`w46m*(c~IYpcvP
-zwu-S+=-;iaGMnGquRV4hJ=&6~KX#R0`dZm9lAruWTSsFX&|euF16^I}rj4d;jrA$p
-zfIg6X{l?bV(8SgdydK~P-WCgQhSUA`$sX!U!t0~YL|^wW%FKMZur;cG9D68XKW$H@
-z@7*4he>Q2G^z5P^-`!c?vIjjypR4}&VftHRo9uVC$pLiRL1&vBO4=qrYiyJECTx>O
-z4tLi3j*w@_=-U2&k$LaSUpf)hzeS(%yVxhvzrTAE`{ZftlN$C(75gM%e}G%>G1(00
-z?Hc$V$Nqq?73>tXabw4zD|%16H0YAj8Ks#^8f&A-7Ld*_oxqmp$d1a67{p$ojaysd
-zT*{U>P5LvPRwuakN)bEfIrXP=$a{yibIy|PoYR@lp(D>*nb~<kxM1U4jOshRjdKAT
-zXEEuaQyzN7xWkX$l@9ma;J8Y--wy6`8uf!$y~|x1@oa_C%qGq47LP5I-P2jWD%)Ty
-zyjU6`FVGA8dY47@zUxuF7a8|<O<@H%EVnoq8%EzN!EF_Jhi>Wb>mvPYQN8rKtxq3u
-zy~LF^kPi5TF68ID$|UV8q<z)+JWu}fsIxwnomTtvY^%{hJJ&cmtc~jPW;<JNjitlG
-z<S)PvW5+K8{!-wz+|u8Bg>qkv>REVG1fJ-WUl7#`3mvR>V9m0y@(X~mkY`p@&(Gm`
-zo^&r*oO|XV=d+x>H00nARv=6;d-vIQ)4mB`LjR`lQn$sau&%RVkAPbN91SkZd52!+
-z-O<eCg9oxb3O$W{r9*^K$HKuzSpGEMXI%bcydSsk#<rPn^{VWvrnb#Rua}$HHZxMT
-zO)F*3j4YlrdB56tH@Lq8buxAib^1TBKT2znpVp}UJny2d;XAbMZRcsB51bAiWOKLJ
-zbbpkxjea6OdBpk2d!u?`PgL(Ygf2SbbkQ;V<n8F9T}~GraJuNA(?z>~OdTZsLto}~
-zkkvi-$n+i0;uk!21zm%jdz~Xc`LXkcN7!FC@Rir6`ug>qM%Nf$c>{gD_mwwVe#iQ&
-z2O0<ZCZRw2QZV~0OryWHCiT~r?dXkN@Mt&f^$>0Bh|?dE<vmV+?1iWMoc`FK)E`ZK
-z+XJMhjl{m~31}hT7Ju6Kw&;*S^v4kX?J)lBxAAYkgMWJz|MqwAZ)^CsRrE&%{UO;l
-zIsx2z53A3h9|T9)6jgYV@PChzrsmRse_FRx##%;8r`6}<+d5q$9b$Yd+Hubr(_S0C
-z?ODO1-#-`Ce|U%M@6OWSt$;Q|$oyes9Q^wDm98vpwfd-rKB|WLXiZ8VLG!{cm$ydV
-z<K*2>`SfANx7~nmyVCi#;P=QXd|Uao$lBAx__kg6w&;{9I>qY%<u8(7?J(`z_O1l}
-zD&o2*7aV&?vw01CKZ9R8CjDu3Pw3a?*GBciI#>VhsQ%gax;~n`YWuzGc$P)=(o!pz
-z>QD1ad9IL;c3}FXcHS39$$q>YJQuru{D7r_^7;O_v=`rZCV4K9_o9Vk_%qY@l{Sx&
-z3G($WaQvqH(!!|T`y4pgcK4KYh;)f?k)AMc=1~9nHY~rJa_95C0Gt+DxLyZY{D}uw
-z^B&;nb*sWlTd4C^()BcSf_P!{#J)yYzD64OY+xPc9eL5a(G$y^o>)GKo;c_0K2cAU
-z-kZ`B;!ihEYh=r6b!GB9KtE;5_hBo+1G#uR>S1&P^=Re;zZ3r3+v4MlI3MR=R4*Ke
-z>OH%odT|eWrG}4l485`!y|T~gl_O5C3^~1WlwbKc`+rRRBHe-wJlQy`e4A%!^U^iX
-z(q12XjXw1io>zHZ;Gx|aKc~m?-RKEq()c6N6Mg6l{G5bevNfqE`jBJVmGw)uH}Ok$
-zCDZrPhsA!;xujm{*-e|;gI&3oerBKOf?lBwY(9p}9dLT(Ano^%(<_IQdZnpfazyql
-zd5#8t$!X`8pj(VzaueP1G`gkf*eSU69(R2SIBE=Z!q_S8xA%-oL%*ys&v5Ki{kUx4
-z(rL9d`c-s*#!zFwgubZ-J2)QWJVW}ku6?@qN)Er|JUWWLeh@uk+U7aZJ?Hwb^Ym92
-zERT0y6fWqe=h08zFS&?*T26ZCl!so*Z~993(Ywasz6TuF3imna*uXD=SG}uT8u6@4
-zY4BZ;JA+3bWp8nQ$#!_L!uciOC!fcUk9wUXzaqcN;$Zv@eXjwxwd8GS>+f3^89%1f
-znlX6x5+~h~2exd=Ef*;7EI!2RQN4715}%|yVvI7X7dALrY{W<NzDc*G#b&{QC#99(
-zxdQm>fxm%gA$i+*Xh(%tY3uEj^&(|mZIq>Y=NA*d)WKgC)&Ion!o|Q?$}<NT^Lbt%
-z-4)9lGrl^<>A9np24<X<Fv0BIuY8?qKQ)DWe<j~e_(GQ+TnpfAaDa}Yr+IfY)Vs#h
-z^XG`$($F=f!-SnC>`)^te}?a~F8^`fPuO>(e-=3XvtSba^ZX6;&zzM0nMv8RB8%rN
-z-d}6H8{FT4IvHI=os6Hd5x&oKehPFIeM`%DS}k6sRvUi-{{;Mut*$w}$=;jIC;s4p
-zGtA-H`NTJwCm7H;Re2$OwI0pKX&&kE3zb|n8fB~w7T>FU-<x^Rv@hB675a7c(V;D0
-z>4-*WkSClwvSANiQ{S6m{%epnsxc(dS8xZ)p9R+4*DTDtCcvzsLqd4ftc5ifSkGX8
-zf2&1y#@t$kIt)+;y$iOUXR=?oHh^6|h<!dl-3CqFqNj$+pTm~_{58#IsC=cZWIt_w
-zpK-sH@`Kl8gAMRKgzbI>TYj+2JG#&Ni^?}Zzckp986Bi=YGaIFWBx<*hZ+wbc70+c
-z+YKJw*V;0jbw4hoyhGWCm@j(>+|>69hMmKzWIsdt&$#q<tf`XyEMcFeF6+T(J@|hP
-zeA~WhaNv8;e1i{l8>DWgPUX)7`wPJSLX7jX@KN)@KX~A*nX_mnBNN6`bGM9EvKb=}
-zgVO8Ju`ze6x!MJ09`?KN%FNe7bIsWrIU2V4gpZLUz9mOh>bnG45#Ost_nwxgTxOy?
-znXraDRXQ@G8Q^%C5|2zdSy#?j)F@}fy{Bx8+Hf@bDPSbzjIgEPi9YIYXY8|Djz-%_
-zvkBP^?UGutNnXOjyhF%=@+I0zu1Q-lVYY7af2$o9Uq4@LW%&Jux5L>7k%!sW2BC-A
-zl$SlrcjAy+D{oe34nUVd<j~5C9Y-9%j~#?}3acWYgUDk=@;H*g9=MyhyJLGGv<0Nc
-zE6D85`PR>>j76g@&`NDR(r-B$ovYuGXta&rL14DsP9M$~iw{%X77<q+6I~xPzF`%A
-zQ8IB!ZJ4ySE=gF`juzx+Hhjs{YUEu_-deWB@K0@BzPQ?Fb<E0?hgBh;!Hu*T@)+2J
-z8N3P05~lvZ%DIaNAK{<IwE;6@;w`L<t#jGY0Nhkg1v~^Ju20c^t8b}xI2kRr7}-)E
-zqjq8FlCxo9UsEY(T^no})tIp4-t)cEk)<xPO~0dg@htC_ey$FrSG$u;RCAWjCZ6{h
-z!ZT~}Lhim<9d0pvu=NsL#S5nDBRV2?{8mOpOIHrxhE{~d<&*<B!;b!h8M+i5?Q@p)
-zrYyn?j|dBSG?8zU(^&ni<XG@zFH}dY9AMWn@29@#LHekPbGHNZxs?%1UxSNzR~u75
-zhJJA0dJoHx{`O^zqnD@FpGxmSL)y@!eJT1xeW~|H2f=UL=qvGp_HJ}Azo|Y`c5<R0
-zqs^1AU;T;ZEt>Wv(9GEIIq9G~Vwp1ahL!_rzsOC+=_k=@5dCCm!PwLwHbkN?L01i;
-zt19TKDfK1j*Lk<tzT_G5m~wO0{!pJ1%h<3D8$>?T$At1PeQWZO#>gS@u^bj{KWgwT
-zLqEQa4CWgBmSnq8E@?V!8WTp}IRIXR>QmiV@qnwN;w5L5>}>Uwa|g1M$QL?VeV@0f
-z?0YC*R;CS(0c^>aU|*f8Y>mvIT{_y0SsF=4s&7ymSHF;yxp3{3)>_?dWUhiN2-jw7
-zuAW6k<llSQwD2XDg3qrh*XXfY6<oxJ>TsZk%aiEg;*E9b&qxpFqS2oLuWzOGa7UB8
-zgn2!zyx)e7$`|TkjVC7BOSz$c)y~rGWr(rhVa9^TmPF5(K7~3Pc`F9}478gkI+R<i
-zP9V;vvHf9%abzoNt}h+Vj7mQ>m1kt#<Rw0q=WNigj##;=5El2DW0rU7?*vnQ*r4Gn
-z{TOkkzc+E>88QfLt<RF3Or6Y_a;Wbs!>Z40`jL4?KS@V_w%zIeVcUiV1&8*bb}4*g
-zeLrTu$0J8C_w98I<;<O@zPZEUHEio!8)+H6pK|2St9_~eTAOj}H%M#RFKN`D+cq<w
-zK4<<lmTk`!U&1iMCsPONn{)QWu*W;VnYCA5x2wH3^eyj2t8We8%1&nzrn=U$+0mzS
-z+0j1m)i{dpC#B;xMj{+NT}}QDt7oKB#UDf0G0W4BEO2xsjo~|K?o%1XX~xE>mZurr
-ztT7vli|g;G&mz)!Kh4-c!#1t4yU1tw4jc>DuA@^wR_T~#+PdkpbJGk?7EgtXW(xED
-zqkWeys*+DK>FqY<G5N9{UUsxHmb6piews7}58?$w`lUJ&*d@H1_+b|xwY_|KreD8<
-zyk@66I>>*V-oU>&J;vYEZ6t^rYs6JdICV2&u5Rw#@Xf~$Pd9z1saMh2CxjXKD=Q8d
-z#p$NsGieAjG$YK@%+ff(BNyP&;nJHhPh*?c;Nj!PrZw=$+B_<6pbSp@R^Y$EY1q<L
-zZPD<3%-TG*FYxtrv>&nZaTo1nKyB&Agjb3lKUj6JrUQ%i8h@L%N1SNV%<ig`9e&wX
-z!$VUS^RE8H&Z$-0w~1>~A9Q3~-k+l<WuqF|$+b?st#sJ5hGygwzNS3)KHz=%AZ`Nf
-zfuVA5MEm;#Tu*~*xHe90YMixe5p5wOI|F{C*SSr}z8t|{FFG5b>}-G$^>?$cNlvD0
-z19UhWfPU550kT*1-2Mw1;|ISddCXW&v$fT-2PTXMnJ}wkHE%3iL3YMH29C4g46d{*
-zgDbyfE8C{eDLQ*17uXXW4SOP?+p{U%o(*(+nKGH@)jDkNS9{$)a*xwh!>(`51-c!Y
-z7~P(8x}7*9YaJ=wo~1oeufbt-`<T_k-dAh%flf||Z}fq-EF*i=)$}DJR^OR0;0dnU
-z%>>;}oay6D9CRDA_}@&w8~szX<$m^Vr+;#i6AQ!O&|zVv=W9*-CaviQDKC*WSnt?2
-zE&8>`?{NKhkY0V(K$&tpd_PW5w&lfkgZr))EuCY#VMOC7<R@HwsFj`FfPB&qCG7^%
-z+J0NSvF&>R*&d{yN!Sf8Om%w(+zj2(M~0sx_#Wsa(S8Cy(>hB!tsLmI4qLA53a=Yv
-zR~UZgEX)Dy2aN;DZm5pgy88K*0r?Oe4iCory!~MCBizs->ui!THVL>|o1`&!Vtw`p
-zul>1f6X1&ue!Y{{?`mFM@Jw4H|GmUlf79S`(v-tHc}})P(VRBcHDjOs!tV!rP^x3L
-zzD^HZ@ZVNWY`txrC0kC%cQ`vm`lkqde!V=%o>>GAk`eEF$sQHnwhcJ`0K>Gytc7(u
-zyt93ai}!89<y9F*Z@Bca-g4gtU*1(tQ@urdQCtGou}0t2L7du3JN}#5tHXHK3ibEM
-zpx;BIb;{m{lCFO{*9$k(6Vf%8?u<^o`M&7XC7yxEu0fU@OYgiNn!R*q=PBsYjlKQI
-zpj$8P<1wmD{Qc?pR-2!#$R@s&iod@tu{Y_U$`XB5UvM(}lA7V0n5$qNRplY0D^7af
-zU;H&X4Vp@)NncD;yOfSCTRDj5HX38rC!6j!!auTmj<nZEez4Y0O`PX`miB3MU{*e`
-z)>GNNN8;mv)rodq1N*C5v^bbC?wosHl%6w@U7plavd7hyX@mWmGpS^)P5yDGYt=So
-zWB9gZ;E&jL*OrDqtbQQ{--I=Eq3@%tK3r&IIxeH=;A)&cH%S>CP0BD~VI6G$Hn9%2
-zkF#}f?-T0K(xeUw3+rI>nmRBKq;}b;Lr_L;k}^7)lwrccI#?flVjZmRv~_Ur6Y9{!
-z7NRdo*1_iWc1f}hK^eJ8%IIiPh6xMnVC@E92iu0|OHCW%*R&z^t%1!&yStY@UwyHB
-ze^bwnpTOqIVsn+>e=@zU&h(|o^#DG<#uL#mFE9N$XET5U{rkx!x7t3-+cwoQV{){S
-z!5J<c_!~Xo!oSyM!==X)bAx;v|B8AVT{33<t1&mvR~eaR`V`IOHRkcGt!MGH<Nf9x
-zeyB{Xfv#rVm_B~nQfT!O@SZMaMhnD0jo;QwSdBiTT4ugbHolt^5e}NWs*ul)w+B8Y
-zVFpL?$94nwnlSK;!{CYVkgoK4GcE(VR)=jL#D1E&vY(8OD?7dE;@XKz({^>crJ-o8
-zzW=KBHT|=-zkT07oB7+d+;lT8(e}nSUS8DUctDusdWqEoPgjf9S0DfCw-zjEk3MS3
-z^?V}kKGKSZmlwMH@S6N5UH(VD?s;2o(A@EIj_7ZA;NlWI9k#xE%+s=HI-5D%dGOTl
-zA+&a*<*BvlEl+K@<*BoS#zLO9Se}k}p3a4*b0_dr?MeL6ID_FU>Ep3x!YmI1z7D&v
-zau7D+d<^P%FR(PXwMaDc@)Pj(IDD0!6#c|2>G1~r8ugn<KO2{zAO5WLYfQgvtE1nY
-z(9iqk)`qk6%bM{{OFtWK>1W4qs>RlzO=K<oa;>gS%!hvS8+96S?b6eayoP?HkLgF4
-zp&wz5HsHdtLD-1pWwq@2*fJ^odII{DCeW`@zlrp-aS8ejr|4Jq^t&7SX`CH9H*4FU
-zf7iUJrJoJA^mF5EV<G*fIr;PS(;izp_Zjvn4f%8Q8wuzKJS%?zt%hA#IS3nZc6!<I
-zaV$G2{b-PLE2%z3d+a9bZ{&BS)7$>R+1|P2dIjyB)T6$EJ#=%l{$;ZFW;W%7wGHL>
-z*u7$}WKL;aRS#>bima)6m~~cd*pa2JP1i_bLpIr~&iJ{Xv&(N+zHlFyY(+D6;%r9E
-zt*{4d0sFt^@XXh`vd1svXWI2;vR(2sSDU@^(zm7E;FGc`diSK(IPNiPwEAT;7WUdT
-zk&>kt);?ee*8V224y0fmu&~rGmkuV^OUCdHIe3Sgz&nzHcO<}Vs0nUI9jsatSjSSZ
-zjs>_Kcer6wB<gy?!8_dq-kB7<GXZXAo8WfN!FsL<tn(>Y=L6g>c)Hm&8!_E3I(W}F
-zfycVMa6YQ{g#b6!>v_Aa=S9}6US*x?E3A)u)ugHAUs-)h`=$(!uQ!3sKCA@nmeq|l
-zv8-#fw)6Y3AKr&;#(sX*h74neecSa_CFC(bE5mwE)@xy#&0K8tb%}B-Gpt=!0<Yd#
-ztLu`RuRGhT1dcxJd$-s;JGZmmaU-~sJ`eulUA`w`Z6NDO%bFWE<BL!A_K;?a*1%Er
-zmA3xgg&FpIXX3r(^egciRgGh5?eI=FH?@O2r7ITp4)<GPeW3c(Jl}oYZcXS#@LM0%
-z`)G%~v_r2~^U$|IU3$8q^?HXR?*;c>x(@D?QFy(xk;mby`iNeo4U`e|f7*AUus<U#
-zq}8JLS-OZ$_tUq9HdgOCc!_;=d67%Ajy0H8H$APjvBs`iWbG<L>$TvcKHx5!KBRFk
-zyvlb$=QUcl%e){u!@+uFQJObvs9%?@cOSoI&Fcl$3l}*P0sFOzZA@Q1VZPAtVHJFE
-zV~IP+Q#$MT;C{94*zkexcx~<p%2*lf7jgED;R7<%vjRS>bbR35uQx3{2cDFn{g5&5
-zz_$SYAs>DNnydbzuk4~J)%Q5{9c!V!*mu~Clh${6V_owO@|1>Leci9txtjX&9q*Am
-zM17a3zIG2zjJxDc^<7GRm$~}#9`8G;QD4d^9KCUUf63Li^j7M7koxARFXJDY6P~ob
-zi{Y<7M}j=1y{^9QS9`QfefjQN=-SyX>f5gR&V!Z>TQBDCLh9S@>dSk<y_-EMlu_7s
-z<NDr4eZ_Mxv%alqPe1*H@ppXKG`{`2><#TjYBtWNz9-*9{rY$oM7Ez=;Be$OkN!4&
-zmkXmU9aQ`N3&#5LbBLes^2~>>*aIdl@A~y=FO$~eZO(+4W%HC~QRbYe{z@3XoUoZL
-zex{9oF^peKSgVU~wec?y@9m~3*+kj-)+XARJyob>*lU;J9GOi0;Uk&)=Ale|%TfAB
-z)$>)(Hqh^DO>HFXn<h3A{f#@%=cFBD)7+A`le88Y8%cH&eM@?LE&sa8VL!>Lmil8|
-zJPUc+d9GtWweb5IzpwMW!t*N66`tpK&O6)cY+zfRrEivwls(i!ebTlS`Y@p@>F3ek
-z{l*@`MoW*;<OL7iXyBnoCcs0lB;d^t;2}d+_XakM;Gydby!IyW7N_7X4&W{I_yu-{
-z;4O3TmN$X7A_Z?n0B@zoF9mOvgV)sr-kKD=H37V}9zVMd#@I!|Z=HkJ-2~qH6uk8T
-zybT_|6ugZNUXO(ruG{V1l7!c{WwqH)bRX-4diyf<k25z|#r{d;*_z6;HORBw<-uM`
-z<k^+Vvn$B6+n0kq6`o18Cz+>rPf*vrzOL4PjA^&e)pdUp+8s#2I}pG-=y_q+Irbb{
-zO<P}0TVG9EUrk%bzNwk?wfx51snT&*&WR@FoKBT<Iw<Fi$D6hI<vX!2@5H{Gk9|2G
-z`*Pm3@1R?c()QIamXL+~IoX+vr(kE+K5gxolFFaw>`d_NJ-6D}IjiTocyRV%Uw3nj
-zJ734nyol}~eV%#<{!6m|sH67#k25}3AfNXA_r8|l+yUE1m^4?=SI@gNFVdI3K$=%b
-z^QukLOT28W(ivd4-^P9%Y}2dFZPT4s1qb`|70#aeM|O^N=T(Q>3+RdGtxo9US2lm?
-zATZC)>hF6VoAiZAV4im{FQAKm*}*&yOyNWR(q3ENo#$M-=Q#Vxmwk?O#FzHY()|6C
-zJpCE`PxNGLPw!l3VdgIY?@YuVS7hOARL?(0J<nSjl#mbc=;>+B);vpH&e*#2@LS~D
-zoEwEKiT2^%o>C8R!J)7b7|zx!?YFoW_61=lR6gmBH^M}(0(3Gk9Ut^A+0nk~YzwwP
-zfXh#%tk>WZWsL{psijwK7)OZCEd?@~`9(_~$tOB9Y2Tkf4`JVbZ@o)%BCzj|1D|oz
-zw)M`wKZ4vI#}2~2U;PV?=FMb#NIZA4eKcZk+#QVR+dX={8*``fHTZcfqK&Z^09zhg
-z#Ms2EZ?`bxc5@Vd4msK6SNj=D8{o&#?Eb#_E$nG-Y3hsZJnUrd2=e|9oNOL;@_r1M
-z*s$VPAHU|jw6(zO0p=`V&Y1+}K?m~?^8P<Km<NF=e8^wg?c{yGOLqWy_hs)V9r301
-z*^|rrDktx)UC1T$nc0QSiM(G&-mx!?e5K`mA9dO5<egvbYfs2KVX|9IUdcN+B;>uz
-z;$B$QknK`8VbrOxt`TPTWJ5Q>5kF-68<<YsKZ(4l9FL2U_qV$&C-0ocG*>btIhG$a
-zC7D@CorZ4j?^^+XS5Cs;-Hva2;M;P?-`zKmnWez&0p>DbE}sPEb_a78{@KqvnA?FV
-ze8^wg?qsIVrQ3?U{ymqjk95SB+Hap!W`5}K%r8b}dXSl=$jlaG2HUiNZQ4|3w!o(z
-zCo}vO`A*0TVe&g-nE{7{%(PqF3kw_aQCdzIbt)`tgxySLPUH7@|K_JwmXn!pQI=$;
-z^j2hM!Rq<|W6%C<#Ad$e&JB)l8{ykx$F~hPkeQj1nK|s|MP|Auk(q7>b3Ogc-*GUz
-zfeAilOt#O-%vzUj9rEhSUQ0USOYL(em6@F%v@r8)keM!IW-T(a2ARRHDRfODGi#8U
-zE+;em7Wq!d3}Nwjhx!?CNXSf!#l3L7;X{|^5JsIe#^v?z&18nNY?D6rPopd+Gnz}#
-zS&Uv+B>KHqt)5Nz_Abo$_U_&I_NSZs_BtCQzbdkQ>MGu^Wa4+V2Xx{=>G!{ue~qmn
-zn?vJkIs;4b8bg%*XWGsR!dG$*iqam3u4j+|?3UgO=(pwQcR!W|jHY(Wa-07@D?hf6
-zvETNS|2gt6YvdQqDceHJEX;Gx|IaU`4oe;GOFPXttEmU?VSS$w4vy}nBfw~Pd4|CK
-zsH<-~;fq~;(Noe_(p$ZUz;|H--$~_Zq0MjVyNdj4$=^l(1LR-O$p4mf;Q|ZO*Eg=i
-z9>V80sl$AmUh8nxZ>s-PKdQ4LdgnB7n6wUaZ2p?^(-#|k(oX)Z<e$~Z|CajZSr+EM
-zay*Ocu#xbYP3kbyrvHX;pdG6{t6lf52Zz=M4wKfQ)#m?o<-d-6%p^a3MejQDw>0v<
-zrM{xY!hG1(!H+$?na!~FEn9tK#GL1;@s!#RZ(&R)dk<qh_pqMv9&FKju3gFz&$*eG
-zZ!_z}nv5@Z)_=&_G3NhRCmnIVb*>6*d%pF%WhBn+80Xy5$!OJVEbvF$Qs;bUXW6m9
-zGt7@Z&;01Qs9t=I`O)*7GjoA+W-i`v?2j?Nsh{N?pBJ;1F}rm<?L3Ql7Vs=o-^~2z
-ztF{f8aS!$JyO7bZzqR>MGlsX<&&>s6Zi2VZ!Q0PodQ9*@YHp6c3OwwX;K3&Ikb-x}
-z!8_ap-jNi%BLTc2k6$q6CU{33yjl}@$5QZ)1@Ml0{8I2vIC!U<z&n$IcP4;$*5hZ#
-z+<MMolc1|~wxZ53*>VwGfvz)rI>Wr=6<5xSP0G2ND(7lY&MO}8_c3m?fN`S*j2p3j
-zf;q@<GnV|F>|Kl-*|jM0y>*6%_Kj#vqHl@yWlP}J`&y^*nFl}U!obsqUH0>s;OxT|
-zxv*Yv_rCF>_t?BUUZL+n|A%Wp;`uEXx8p3h^hKOu7BM!I;cPBzTlDlnr>&hDYpiL`
-zs<$VyemeN+{G(oEUE{t+FZV#hEw(KA3wqzt)z+^y0)<&Njn<pwm3MC&<2QCLuCU&=
-z5i>?YTo3x7XC3W!K4W{`E^Zz0x|6WOGIwy6P5yQ8zi!iO&ND8H^KeXB_+1cu^hM7G
-z;I{&Qql3SJICNGB)4WrEo$ID|%>kNoD^I{1KmPL~VbHK}B?yDBrR`DukL5$a5AS!z
-z{5WpmCHOI9!!#GCvUc#T^ZW~IB_GT$GmoI~o;C1eZNQIJ0YAFn2Yr#or48<@z^lu`
-z(^)}!-*I+Ee|{zWSe4>O%ghEpmPa-}?ZMCsJEvzU^jZVGmbtj4#4St04$IupMLA0;
-zXPGTW=bFd-*gGT14{Vs86~JEs{FM&=3gEA70-yTpj3bq0&f<Yi;aNPT8gzq(;asB`
-z<ANXC96!8I7xUwwg_q#RUK_T<#qHo*=NakDy#dC6wRh9-qaA)M4*0Pk;KxFZW7&O+
-zhBgbpYoV)?dw(XE9rgPql*ZG@?3M8CV^);l#}ND3ds?IVFnijIGhJLOuxBP=hh;v4
-zU#j)qIuAwR@tJ+J2eWUKu>5nt;CqNY_&U>mn0@xe`40XZ;^sGjPyGwjUobU?s_~q{
-zuAnXKCkz^fbD^Fe+;e31-l?syKVz=^pe&D{`)rdxL!9x6wkLg}A8oT|*sHI@uDap6
-zD(xfiX9!WwlWiI8n{8wN!rOSB`#Vs^gtcJV*3oK*-CsUTAEC9oHNID8SaS)l)n^Z6
-zd8hBt`V5^Jq_Zuv*d@cPKN{vdw_&$GTxW$2GqyUwzJn^^72>tO%<q${nDN*-*M0y@
-z@w&n}3({GS-)42pJ@;n+<Oz4*i~76jhs}EHlb0!1>4S4Y&Deb#X%*K_+Dgvsi#TcE
-z=Ina!XU4Q|Nqe7dzh~cBmrA_W0GhPOXN5TzuSc|hPy3wwoPghN5$`=V@C3u`|5AAd
-zmnXo%<Eee!f??qE?#mJ#D;;)iY)k_W&y=e*vvyyZ_Fn4jYy-om$tBCw+=YoB5lmMe
-z@4mbWZM#~uYu3$v+_K^tv}mMr>vc&Rhvn?rbMfGVnFmjf!LvU@Hr^y0ndo0KBRci{
-zPd(nf#Gd19XfPdGe1|!eQpVC^9R9orf3CQ@ILO;Czes0FXuY<jk1bm^laaHcUFRRu
-zhi|R#ZeuU>b6G1VVg4#`B$LV;%Pn(jI`<=nQ5Fwuz127R{kJjCi!Gzi4BI_eRqZ!p
-zpIH@Iu9V+*?eEi<c%G>Y4^uc8oGIU*g`)Z>OyBn!`D%Mv^BC1(eb2u3#I1fExa33i
-zr{5t@qYn1`A$zv2otxC2HTEDq`BaPg*vzOoTV%|_8_c$hUg6xJF&@8%P5UlA53AV?
-z)L}zh7xjVPrC%P%{tEI-eZfiNX*#n(@-tW_yu-fhTpsN&)LLl6r!s5l$<q$rI*&+u
-zy}q4&kaLTeGtRb{`psZZ)ogH`4X(OZNd1b|xnCvC>aR!tP3!nRk-6vEr@nrVU>cbb
-z?2okAu|bt5x(FZDLFYSY{qrWb2WTKi-ALbT&5F`0kJ`jNq>ugY@;lIPgV!5ho5np>
-z8Qs}o?Ei7}g6^xh#GO@_@aZ|9m~|XFZ|)wm2V)4IU+1?C@~t|_XT5@dKgRtGf5zPm
-zmpRv6;XmYlhBv<UiRzm<=j)F|qdx$y-%s}vyl>|WhbxrV@m{M#%^fYkVc(q{9|&k*
-z_TNpj>C*eG)wccqJhfG=Gj8TDPtYMb=P$2oIi+=qJ=p2RIjo(T&)OMm`z_e^^ydfP
-z!u=8_?S3?^E!KWC?Mn;R%rIwe@4~X{i;a)GUt=md@7tck`dByq^Lm~xo;9)`@uRU>
-zEv@k%H12f(n?Zi`L4MPI@1c}`cBr%A_a63sVBkj!-Vq0Hs0qBIDR@T%cs1|urQjWN
-z@QycucOnJvL;&x!$1m`Eh2I$m?`#uz=Th*_1@NBp_@&^TcknJWfp;+l?_vP&d5>SP
-zc18HT;NV?p0`J8XycYv_S3Q0yc&|8kuQq}AS_<B40le2ee)gO=_31`lt~+=wnThh!
-znpy{fUr4^>+9~{a$zKm+mPP#2hw)7}FJQe1<ERD3P)#}Ox=xkwd5m1*_e_w><*9P;
-zd*X6d_;oFJ)5qU^QtMoY7%R}em2cCAzC#;2ie3~BCFq^Uf74l*vcYD4*y`32xb-qN
-zZRXmS+b}c63VzCm?yu#+y?0kcxy-dw2d&dj-2Xux%pG}q@pG_abmo_AY%_1_Y`vY>
-z^gH^n>1FTlvi(sXzrB2y@Zs`ZGyD7SLwoT<y`J_qnef=TRpqm`WIN}*{+yey+6qka
-zD!zaZp|!}x>-49>c@N_>JrVw+y|1bCI^`0t@!y^vTfTv}g*mll7Tylh2$t@_D{PFw
-z318IoC7gdXTlI-veq_3%(MI5Hu<3jFE%I&Vs^G7ML0t*cd$0J-yWux!oelMr8Oxze
-zt%GgzV*`vccs%1UjoVYt!czF;(y4x`vndNYimrMWpLPG<&uFfkGChtzm9q9hbIO{b
-zxpHJcHvE)%ezg;yxN(PDQ=YGLJnv@i@n;;**THl0s;-9T&qMq30ngV2Jb#Y*6JH>{
-zXN}Ecc)pf9PC6XVNn>cZDq^eyo})(!=n;jr-Id~b7w}fu^ga9*`A+bhFh6!;cuu_G
-zIpHzS&jN!obw`QkW$8i#&p7M~VbrtmLL=SHc>X)sdn(`KsPVeDy)4J`e?eK|dFie2
-z{4_i--gsU8&J~X5E2H|qy36r=1w1Ej%<~$wKN9eKS-|td)S37K@jc4|o-b#f`%cGm
-z(iomEj%ZU6a@ZK-XuCJX^QFLB?0C*^k?#c03DcR=f@gTnyWu(EG0z#x(A^X|XFcZc
-zPy^36>^Nc6Q}bay>}EV)DxL>8mVO##?X&INtUccgj(Z&af_|q>_8xtK_PQm;VhE#c
-z&&{t-j>W|H2`&U)dt~|1j(lL#8Q$=&U-XE9Yv!k2*`@8^v%uvEa40Pxe4(4Ky$)PI
-z&$k6VGe3%HT6!z}>3j?GqUH{L`Q3!gX;S_ioAy5{?Rm<7p6?5ky_RQIQ2rI-uEOUR
-zroiV}7Uqet{FQ{wY*PMAoAzm?Jwh2ZzK1A#IZta){&C`_Drc=0<{@C-XiTil`E=v=
-z*!z3MJKcAvw!%BUpXDcO8J?WdU59}WlOBKj@1-o=&4+!}@B4}H4&#YF*E~B%*_u67
-z*n`j2gU_`EpQ{g_Yb!q2_DubYyE68^zug&p&+z=}@chff-NQHbyBLSIXJPq$o$h`m
-z#sd>~{JA{}#^-v0yDwPV_*nbwk3IGxzSvcsy|X^{*l~VO@LYM%$4t6IR>zvY@(?!5
-z735RC*^B(9eKYL+*}*tNFKvf>*4BQ-+wOrcC3vqoc&{~q_j(H6>jAv$-nU4>lMf*L
-zTASGDGgCG?{Z5P@zOmg$5%^NVZ;pdEzX?2i=tO<7DPwr})^;C73SPT|x3~$sr73vW
-zkuf}c4vSylO9{W_4&I6;@bIe>_+fL#@bED#ekpj^(uRI(n!sC|g10t+hd*HP3w$%-
-z*X`h~Zvt;a3f_hQ-bRm~^UZqj8Mfe?_2HXs#W&l&nsx;I-PqfE%sz%%zBPBMcVEWd
-zCB2_t<nzApKFI^g^7;-0`yUQA_CMUnNBbQ!hH1}h(3<M}VfkuyZ@|@+&Q}B1-ovYn
-zueQjCfwvDUe9ZYKq|1Z5`e5U~QNQ?}6w;e}Qt;C>4j!kW?!D(^d*S0j1Kq`_^E)(#
-zAE$vXz2{vT=u^6&G~7qxbapRv@^>ox{jKP4;}Z<dwz%y?=V>ov?>Y9&o#igAGu*A!
-zGOPbfLs9*avzdC|Ii9oc?e9Ahapz=)F$~*JNS|qJG><+jb<OJcW28Hd%l1o-iS9Ux
-zetQlY)FNzu_;@U0eh<6;goPEa$394$bYU0e)iSKn&Lq~A>^z~m;&YzHcJ%9IPhg7z
-zU-SO?i&m%g@~b_!eJ#K_1l~j7ebkm!+PK=zVIJy?{aVq}z&(s#<KXT97ljwF7fS1p
-z$*$GbkHwC7_+Z1n%>z$srhAAl9<=47ALq0&pH-r79SF`T(|DKW$FR*V=v{VLfqZ%L
-zm)5|`1Mp!V{iF9i*AplB-N={^+fSJ2w677CSZ77uMGN7c2Up>5-r;WnKAU%VtbGc4
-z*L|qko4;5-Bl2?pRODmmw*D_|MLu3bHeToHxvjsi4?4dBonLkG(dXo2EAX$}){u|g
-zlgP()>a{(p7g|`Cx(oSuF;myR7U9^p9lGoS&MNA?8$MrQkID<k$CZ?P>~Zq37k|>P
-zjoott`4|FD4|rb$@8_L-EOYYF(?mYDFxKJL=I#I&;b!DxA-tax$j8P&K7glndRh;m
-zF$v{~<pVuD5X#4fKt6ak@<F~l`AhSWj}6daeIOr;i4*+xhAfz|8*nQuZ-klqf}o$u
-zRvURs^0D5^#}Q;z@==<Ke6T+LORJC%*2wp<M!t`=?0qYt^Wqln!?SCRwJyN)AFF^r
-zbbCWS)=nZHE8M!}m2TZ~u-3h=3%aZU&MfM^7WoMFi6q9X);am;W{k<5dAxJo4dkPX
-zy&=oNdnS0ZM@00~{(CdOzr2Zjte{_VaCd-<(i{1B1wZwQ^N(qh4=)Sk19)cNHSvDm
-zbu1s)Yzg^T8psFlMn1@=wJT;{|5E6%IFOImh!gx*I~)B+D>5TGwFL43{ro!aw=5rv
-zt$fT^Uq-*<`{1ecJ@kVI)%V;&-U(|42seJ}{;Bz?d2C!G-|be;mpItQPdx@+HSj#m
-zvmpBM+Q9<yE`)FL<@Q0tgS1Kd;@-p1e13!GKT%&i-<I(QDq|No)9-1Id+gg@e2Z;&
-zj)nJK!J|LO(=Vuh=-mR&vjUtcN97s%z11>i*)smM%AgJAktK7#;>;hD&ND5%Cj<`}
-zm8|L<4&6%@`phcl$ClYvTgEoZn9}@OS?g}JXYF>z^V4?`;ma{s{Va3Uy7TtCnk!?>
-z-=E2&{iLGn5cAdko}dBdfOW5&>~Gm~Y5z+1b%*wRmAf#!J+HgMt^NH0GyknM9)qm)
-z&^iy5LptX1xmN^V(VXcDZiC>aINhJ2`E$D#fir@ciwN(~&|HMl4eK5a=HWGNuQTZ{
-zW6$}1bcneOrFn*U-T$O}t;`)K!F=+cWbL?~?tvP}YF=CSLCxmfp8cWxL(E+dm+k#G
-z=Im<1G`~McnBuiIMQ6_rvOdJyKEm7I0n%&^T650t=$J_Mr@yxRUHNR>7xk`u+CF;9
-zV|MS#r(Fm0ZvSb{{Cv0n{GPdgaKc#byZZfI{f-YZVLjHn{pY*==ezbN>nbC&*W-<^
-z+5R(eMt&|kI)opQIP)HV#N5@2Ph$7tEwH|dS#P-zpTW-M=uAi5_sO~3_!0`^JbU~i
-z+5g6mf%X;FP#Hf7ze9eK?zsxjEz%hy3111nA@-H<H|*Sp^^N3*SpVk>W(~T=+Xn*w
-z$ltf4`*ADWXKVeR&m{aG;a0_us^ItN&f6jGyA9_av{xj=r-skMn1BDhobe?4RcmAY
-z{ojH$NPdkc`8$FA-5{Y~=I`Fs+^zgE<ukq!{+Hf`%K*3tR>N14&-Dcp|19fD!~1vN
-zQ6K3YoHuUfE4?eL@5<_w{iSzh^^e>BLDWCvFaPPmcl*_M`&IPBq<av4wCzmQ@5g(S
-zyWa+Kcb#NBzneW3`n@2%t$WTY=yvVn(fy;9@&bN&(D@Z~|A5kRN7rR{j+^wq(QVih
-zx^tc}{BG^>Q<xps)cu(A(8p~xo#iJOes7!h!AN($L|mwUy*xK;0(3CvEZTDHoxwv+
-zrw%gSIDk&oJ{jHXeJkg=RdSy{**2pIj*QXjj`0aN8r$IxizBv*>YBh2o8zW9VgtoE
-zVgu=J=^@|>XWhv>fc@cdyu!S#!STIKaAd4n`=ln|NLYpOSW8E(Dd66d$2S@K%F<E$
-z4sS+BdzYQ1qaC-^7`MT(to>l!F^;D^j<-j@R%o^B4m__bMY|_XzuJ40##Q_0?j^iR
-z->iFJgmbk+_jApr4oSSLIi=Me${XWe9k#GMjkPb)>~|_R_Tg#Ylj>3drr8tKVbgfJ
-z|8rlbc}?ns->AJ^b}wU-IuUQ`)M5A9nL3TQI?+x-UR1}XSf`wY71xPxQzyzW_-Az=
-zv#S#@O&Db=jjz)KzD{>jCwK0^{cb;K3vJWfDF#jQt<eh2&BZ(%cJ<}ADGv!Z^&JW7
-zThx6b;$f=3Wu=`0564pV<=fPE#MO5=sBhVY6>S<{-#e(U<gJp`UfEw|FCDU#Z87DK
-z`@4hrwsh3*>}z*ZZ`sf4Pwpe{jN7AA-*|*y&V>1gd{56rA46`Q<mqQl^T{H=tigTq
-z9KU{F=8{_;@BTB&8i%(3mESAw{yX)zn#0f@K$WRJ=qlxz_Wgmk$dj_g*X}KBB7?*m
-zo($W&sf-NfS{zRrdxp*a!lI?gP21Iog%!&n--dR>jeUi&3<A^0V9uuTJUK>vEl<!L
-z*?(+#GG@z<dBV4Wo3-~6Hsi^RFTc$^F=bhv{Ewa|i{2tnitgS;ew(%v!VOQ#_Rcfg
-z*XiC9wUZAd`-Pm+PNAI)TUaqq_%^ho3`757w$U%-Tv&%q<9YI_m?sP2$wteQ5nF!D
-z6TS`HF<ZxGJo(1fx0xrVEX$L7!BP9yecM|S?oIz2)p7Po;-0GT&VJ^m`>F5WHnsiK
-zpQN3q_f!wygL^;wN88Stapus^rX8^tHB-CH8tifQq>kUhIp)&2?(WfWt?^C$*z&ET
-zm;N?7b@?&YBb1~1*l#eGPangYv;OgK2JipU?0G%;Y?ghm$d4V9VXhi||17#QaaT;X
-zv3K*$zlrK^zRdGiJb%jbpLqT=&wu0@;rS0dzsK`$dHx;GFwbxEe2cvs*mQ%Gr!gL#
-zPoTC8UXK*q-tiwi#v1hB;OvHSXZ;7{6HhLY_cD3M%hUSDzY3jxlkfjoan>HZw9Tb^
-z)c#)H#y;Ig?RuI^U+qk+5&Sj!^q2m&GhWBmv|MmE<%0iZ@E`A(-aq~b<^B%ePY2}|
-zUAiy2a*LGvMOW@4$#NfZ<(5o+XEd)b^fTo`!^_Zce1vj0QSQIz``Mt}&$)EJ;>!IT
-z<^GB*cT=+5kGOK5xKX)(>frq+%K6WfTWswge~5DbkncYZ%Kasm?g3ZsFH!CTuH1)`
-z<=*Mat=y>Gzj5$hrkuZ`-0Us=<DaD5F~0w6Q0~WFx|}Qb<CL3o<$f|*E(A3E{k|*r
-zvb*o)CFE)eVLETPg01Y=%2u$SeIGSWn(@Dl>RMY+%0$m-EvDYbdB2_a@xSfltQVb$
-zG2`X&JHNF6Sv<wM2Xm&$_*c23G!uQ4u>`H(>{i_W!}<}GsrPHVzs`dLGq<VDl(jZf
-zDF4sU<|Ge(zmx9e8viJ5D62IS+V}6||K}WiKJ4i8bI|9*jy@kv(nt8pHv6|cY6s(!
-z(TTB9jd51xM`35^%!QCn8XMKPVoWFAJ)J7}AXUC&I(;sn)8|rjA}*#A@19OiycIg(
-z*BLtD`wik7>JH)Y52~->-eSgEV>;dA=+xopbPsguaCG`$b2@EybZX<w4DFSiC{OZV
-zf0g>mht>P9B<UnS7uzwW6Ynvd7>}*;9n<Nf0i8aYq7!j3op|?jTJ=`wgzsSG$*!5u
-zx}5PlB~NyoJ*Lxbj!t(tI&t2?80Q>ly!+Cf&FS<$@MxxAjr`w9y;$$8vd8c2JoV@Q
-z5_p33O~K66H2%H+tB-dt%|vybTjK3tuSaDE>zoqhm;EdGeY1RP|5V4Uzn`(|jkLcB
-z7}(y)wV6{L|7)gqC(IS+?l${=dRPxyV9jBE*|byY53tY7xJQYz$+afSj(a4>JIt7f
-z<QF;C`Yg?5*mkBh`#iMy(rMP3p5QsgQ{y?>0xjEWMb^8P4)Gl1Il!}@XCKdQo?SfK
-zdA9QO@oePTz_XsGn`a#lXZ)5{@vP)o!Lyu4>v1_Rn)8Ct*_;(r#_nf4X3+V5r8!;o
-zoeR569?4F=)vmGBd_{pcovo2)9k%Qk`372#J!28;^jNnozd>ub!?Bp&tE=nxF}}Ez
-z@kPnR-)BzbTP;!lCDxbaSv$T1yfinWZ`~)D=S+0Tgyua8tSgsaY|3HXx#ogQ8LU6Q
-znO{<BX)$|N<lp75XH4A%cZb%R+cJ#5=GVBDy3E<zPwiyg?+^cpm90EyZ09dzI17zD
-ztQXHiw*vGNoSqA;?Y_9$?n9kran}6>y1PK}rPo-;c%AQ88*6TRUT0n76~bR3{Dsx^
-zP56gx(~)25U3igj&ViTxoo8M8zsYj0|FTb<(m2!v-oRtSo9FEM^#pI&_Ym`j{SSsW
-z?5QwxV}C`0H^*+k8}@4KK#mf;VLwOAn-c+VP6xbUugFb#bI$JnF}yhoZ;(~Pn{&{`
-zmXYL*J>&YRo#!+4&wk1AMrT?d&an0y-W-89$hkk$x`+Ka#Um-+5T^S#3~x?D>$7~H
-z2zYY_-W(<TIN?Jn-qZ*`zdGj43eOwH-zM;eHfeZsunBMa0^V$OyxHY=vpvO|T{qy(
-zZg@kxPw?hoz?(e*Z}tYf**68=90+)`AKuWn7~UL!F1Cy$Z(8m!<ElFkW$NGE<apBq
-zZ+bGEBMEP|z#ICd0{xTV^z^`+Eh*j*Rv^sqW-qkf&-b2yH~ZktR>F4^-k0LdcES%e
-zc=Lyh-<o#AxZ?!g9B{nZ(1bV31KzA~yjkUVvogh-RX5;G7rddLPVi<!z?(GzZ`KC9
-zSvLjVtPgn84R6o|hBxb>i!CF`n=6ht8#DEJ4>{iKfj3JtoLd2Jmcg4{@CJQic(WAV
-zEKBi*Fr8U#c(WE-ck{g_;LSRCvx4w0!k4Fbvy$+Q4c?SIZx}zFz?)-^H|<S$^Sbq$
-zjUKqpSr^hbt&TS>Dc-c+fHyPYO)bTn_JB9D0^ZCCcr$+ryjd9VW&yl8>Ugsdy4W&O
-zyqRm;&Eiab=NiYGBk<<ci2euOycV(F0NxyOykS2_@wLvRz9FnYnBmPFXuW{4W(B;N
-z4{z8DV$L#oy)&tAT1daR!JCZd4dcL<-JM3g==<^Pj9Td`Hk|Ao)?LVVs+F^&YZpcR
-zeXp?h5PwGN+AECxx8YOCjx%>dUWG@;p>>A!8-!1H;reFp_%j%e+>ywd{Nr8q`xNH<
-zuhRKU?0=Qcb0#kSmpgB=TXEiA*1NZt^Vlo-E1cVkf7;9syYwFGhsn07u%6%a&qu8t
-zEZy1jJTxaxdQ<x;jeHH^v&x=%A+=9=h<&FiduGSQs4ko48SJ@4yFY4qlYfr!8Noj5
-zVAmY%^C{TuR~e^F!M_iCsrMN9piAkT-(M~NkTWi{ujMSfKganR&pDguL=sjX`(I>l
-zX$?yLIQeC3U}wqJ5De`LRNZyvs=j+pASb7x!<op)N&W<~ciPDwduWPhQnE*w&QCG2
-z2QGPV5lnB-^qdFB3xr=J{Q0Ep<zMJD_;|n7@bCFdJrDm(-_5x91Q|T+WKe!9erT=O
-zVrB4%_P=6Z8=rQ4Lk5o^e~0ny85>B*AmIra<XdA02^m}#$l$V+3=$X1An$1zTs{>U
-z#2+v+xFIt1GctGp+Itz?=j3F)laqr<-s;T#2{O3f$sm44LIyWj9_ef-BZIpf?2Qig
-z-W2SODH-f>GPv9C$+!DOdP!H>1#fpFgL|9|_9bEU^#n4wrHKrZ&&c2wCxd;+%U0;H
-z-O8Z$(P%%5k<YEj;P#XZ5>_D0$RN1n!KDDqSO)ik<37Uo6Mi5ig9n?-;IrzdWOp;p
-zKS2i9`F_yO9o2FfD}&wY2Q}BN@q%Az$Y3`zxDFX)+$AA{gePQ>Z;i_&Wbja9+@N&G
-zjvK`NAaSt_@}8DK6w4I)LG8WAznc}vU>CIaGPu&o$xJ6FYm&U}o!LYNSNVRBIoi;t
-zo8@G1xs$=A4)z=edqoQNoRkdCcQUxl$sqIV;(0IWN=xDGGGuVMlfi{aSbg&Y8C=jr
-z2FYh+aDkJ-g~&@gbXe?Ukg=XY#!`$7wj+a!Q!+?cfiNS3;F1RyotYiW;0kbDN%$(l
-zyHYZ^rnw9*gn#!;GOy7yD>`M$n$>x#+4-<f?EUfQGxE=46I^k7Ft0S<gDIKOc+Jgz
-z-@St)Ii@zwIMrnLWBm6*t7c<qi8Vvzwo%;yIFP$T<7UCSA=#ChXVh4$)(L5Bdg7Rw
-zpJ&o|RmQC!(pbMeL&L2j!oHK9)3{n2eu8W`?c==Jn1sgS;`!3D<`=aF=hKXjefnD4
-zJlZ#Qlh(J$j=GMHujC#&sj->wg?JcUW$~zVXq^Q(fQ#0%XdO!fpDE1Y=2GibfT1&)
-zg_qX6EaJV|5t*}r8~8nF@Vn^oV|;>pYd#~J+|sErZf@7VIQ+(v_-WnEl;)X7QaA!9
-z#*sLK<8TtkO4+VI5gmWm<B6}Hz!Mur{fqiJo$KA8qh0^u=~&H9aoq@dTJ(?kTeRm}
-zTUu&OifEZh&{FGoG`B50_j)|>TN8LXJI>%a9N;;Y!m~U@JV#P^0;fSwhv#q#PhfjI
-zKkxCxhx?uz&#fXa^5JS7Eu;5C1LMbO{(^Z5g~^Y5I@>bZN1X0quVAalzP{i2aysK#
-zI8;fibERc#d)r0l%=vhQJ%L|$rwf}wTJ0ykFYxWEA2w@6PRj0=KUm=#*e6SYkLT0W
-z-8`HB{vqG8bMB>%&3wFQy7lp_oNK?blb^EIjW{_Uv1?Ug`6*6ujmz-FH7+q<h%@q2
-zw&!&Fwy1NpJzu<^^Vh1g`VIV>3H-@s8~l+ii5*#kw}wAsjz7%d+x3(i8vG&7@Q3_{
-zKiDb>{<!!Ae+V=DVXt<AKX;gQBMtuWJ%K+iP0Szn?fG+(I^L8&#(s1BDcZFork@<P
-z>sDg^<fgdZr95%HOUxhQ41bE*Wcvnonm?MKH2lH#pTM87fIqBrsFeTlwHp1M;m=6c
-zwIBHfiu=_De~2^uA-`=utbJ3Ppskqp<Kh$iA<VX)UrF-kZ&Li>djfx4nwUTC+w<qa
-zsqhCq9Jim`v_|_WPfO^rYR9yx>4~Dv7x%xwiTOjE;ZJT_l0O|P*Y>}@{oD)gli9_U
-z-<;N1@58(3($qfw#*c3wOOK}4`!ut8I5$2%oBq;05p#uZoep!a{$1zLV*?%3U3A<@
-zcXEJ7eRCV@W(Fg_UY2z-w?_3}quiJ7X{>Ka$M?GUlF2_~LjHn_e`1pOFSz*1B=Mhi
-z@!xmxmopZ>X6<~yooytYDBQcqJCNOUP46FfaK?WOI6oi2(cPe;M?8Q37Vwd8RRN!I
-z@VVjq_HDuZ_HCV~zEj?K&CG9`IdeO|z4TvBeSZ5A=S+ro3cM>fZR|g8tS|omliWP_
-z)Y~gJiT!RPcbK&bg)@w&?#t5mH2kd6InE}PpJm3WG+w2(3K~z<_^JFYjpJ)PUuzRs
-zmvEhVjMsTy<9U_m6`rd+FY;XBd4Y#<+tNjz3q0p}p3|9$c0FL5))lz5TBS3qO&YIP
-z%$Vn~3}eWv?YR3<H|KW1&FdUb&g=N|9M>{7zLv4^zC)S18QZQg?}Ck<r)-Tml@2n0
-zr1|t?tIeE+-%HYafbtJAKT_jdHsUmQtoB?y0iD3vjP(zt%4A;grK}r6KVr)<un#*J
-zN9^2D&k(SW0u$IOcN6&d@t?wR!cVw)meZN~<C;6(mpf(V^+Vb~%LHxq2DI7jXw&2H
-z+?T?$$Kn~&rq9u4kE0DdGPK#^XtOs(8}gU7fcqZmMO=QXqs@M318)s&cBRVf3uv=F
-zpv_hXW4oixE@1BlCa?>@PS9o_;rko3`Ix7T=G8;mTusqteL$Oajy5YCo*Pnlu1L{l
-zm7`6!qYbibXtUDMW_^k_<kxxrI*+l3INe8J<YptZx#G%Pn<{fvK$|rIZMqzcHI6oG
-zfxQlxz%BqgL7NSPZ*0)!Rn5;yZZxkQ(&n`kZI%YKX?L`l>F`{Z!gFSdHgg<p7CYL!
-z>S!~|(Pn9iHsm+w?=7ZY#O3EZ+AN1QuedT7rplZX&}KnEoB0mL0!N#Lz-|X7uyyA`
-zf;P(tU*4e2)1Ee(R}N^SJ}l9ut~0KC#`QO^xiRP$+!%CA3eOkpxN+R3UW{yi^ST{F
-z&R=)5VZ7Az3D-N5{SEm`jG-1@XKb3d{ME?HO)Io{-O=XN)L8Y4!C3Vxwj2Zds)O;0
-z8>4;|*slQ-*acuGXww31S{t-^*wcnFfy`ajZsTrCJFk1u&#7tM=VurXaPzv)YfepL
-zatb&1#o2k?=b6vAs5v$KX?&Q9pVuYa`!r@=m+wmX!G!O^S*(qD-J^C+O?I60lj7p}
-z4Bq{G#uDi+#^rR^m{}`yKB`yT9vz)EsCm`9fsx*u^Qpsc@16tQ-;h6@soxGQo7%i>
-zZhjfMN{1$7?o1$aC!EY3aWZ!{#s4EInLFxa?zEK!jboa=YRJjlnUu_tUuVr1P9rbG
-z>Fiz8SDn+k+1sHZdh&Rx%%g$K9SdZx=3pFiGIt!<CqxI}13MveX9+*oDf_-(bovjB
-z(OBNu^#X=>hXdXnCjFu2ysQ59+swN|!Z}kP0w>ddGWIf|9USoUdK!EF!nIn~%`G3)
-zyq?CxwBDC<7X12#gS3MKn%C1kK0!MmJkbvLu5cDaIL1<%AGCw{sdhkI+zxn8v;)RO
-zE1c11Xt^(-<v!}Sw>d4p@vq-zTJE*9)Skhcwgc?SL_63Ow1cg#9jtflV0TI;*QeUS
-zM%NCuyLO;4NZEQDTszp6Y6s*mZ9q=9Bg4eydt5u%qjk~qZ9C{omANr!2U~)6(Boii
-zaqXZF*js@KY@MH(Xa~Cq-_vLZ><hH*K;x>6sT$sO2fXVh{krD7d+Fc2&AeMjS+s*o
-z^p~a`Fvc~Z9jx*CAUVF(w^sU~F}4-AgSE7SHPQ!m%rVvngeTeo-xba!NwkA~!Tk0<
-zJHH+41LER#z<Z({XbhA)77Z;|1+-j6{Z=-o<sTe*n`yby((-?TmN#t&_*#i}uq<c?
-zi(NaI<=VmWluXV_wS)Pt9W3?wfU!iigE_7pEK9Wm@|Wfyr%RDx;_?ezJ6Iuou)wy1
-z_EeekgLbemXa@@%jD@Zpv;%uFFoCW4_e48bPWXyOJIFyNs}JnD3B$XY0q<s#zO^~;
-z?i+ZUdDlu=w1XSYvA4Q8_SWWe?Bn3HgnbQ+ahWxJ%w;sagVpbK&{)`;Is8cG&GV;M
-z*Zmmc4<4|42AhusO&k5uw%a&wVK!$mP3yn(LH7Q!ufvZYj=wK>XAcZ#G1)zTjNLv<
-zdwla3*_+4Sp*Pt_^yY_n*gNxPhxl%NbMb?A{K#rIcE%o#`Z)1kR<-_K`$B~K>+tWT
-z4>rah6M2B!EYDxMJS9`kjAS|B(=3nrCYAF<vpi-$l$|pOanoJx%2R2U$LyV&n1_AY
-zCeQa>p6|Ky30|VUO9->)SbYB4OYBh_&+)J~ZQR+NhED9)8qXpB*aO;6ruT8)Z`b=r
-zX+M1X^^DLowtL4rQu}|1^ZlIC`F`$Oz-iX6bY`rbX>fqQ&1mSy%GEcCF5{Ec(akYc
-zgE^(Jjyh*U_t^S6>fP5-Hd2-ExQ>i*t6W11#$}g;d*+CX>&UyW<CZDZQELHiRL9S_
-zI<~oeTod_d^;oF85_L4=VE?#LNA{k_b!5+1mG8KY?+fbqzEmBFi|fd{ucP$Y&G@J_
-z4>zjg4aca{d$6?kP3`u5!5*yNnfh3x<~QE>+Jn^}ZF_*bZ>LRq4$Or8Q6sn7dy!ZV
-zS-_U-!PYAti0ZmCWAoOC`&`sNnZ3v-pDpWrIQ3E5ldLne-Cao7+5Y_OJhs_mukpOz
-zknzo1JAuRcs{^`=gSN-IOxa&AX$>oOS1-2ReVnb`i!FTLBG#sbcf;&U>9~DX$KA);
-z*xvojOR$H!3VzJpog4?A_Hhk@<1jdW8yvp_jz?)H>I+NzZJFjyXxfO*vV(3<E{c-t
-zee&R008ix+OzvzrRXU9BKZ4$)uDT~weN7vE@Ynr)mPgP{hix9MT`lq5*D~GSS1}YZ
-z#wdDNonvt6n%-a95;4AL!fiQQ$amU)=hy4k_J6uhQ+e_m?Qdy4`g{Yl+z6i7xaM94
-z>SoWc=(K4GH+g_LILv%D`TrMWq?fwf@A{P+;(i6(*G1;u8?AjNztNY1Q)+MRFLi_a
-z1&fcNQ8&0>wBPwI{W{#&xUjYMx6}phYruUixUZW8cft+s!1TEHIowNA!ToHjy}#ml
-z=>CE!w}E@hE&Zic;Qorm$KbvS++Vfd`DOZbxG#5ME9`G+8MrS8ckHA1K8!ToS9V(5
-zf$4GoMTh$nQ@~y8^ZORdchy+F*>4=<Udd%gOG{-3*mboA_odk9__Bsx3j*91I^5eG
-z?hC+uA-H4v6&6oIcft)EV0zr&1McQ7JY?GNelK!Pox`=dZMwT*epLS$X?ON@)(4Qc
-zLVH_(VWz`jCg~YFEX;u)j1`t<Ih<zEC(Pko0ovF!_R^KE+|o}OroI_?fL?mCE3)Oz
-zn{M}6^j@dGXaNpmWu;c+^EKXIho6*ZaBrckR-31X_ag7IIr3X=SU!jso+b}<QyulL
-z`x~0n?}F;5J~ltU`Pxd^hvE4V*4FD}{JpKFJHlBr@LlDnjF_L=|0>*Um@R**dtW)%
-zfqCkd>KkSDV+uZW8oyP(NE>HU-gE8y(Y4=Gc?0E5*L1%*>5WbpzlA=K`OKNnx9jWQ
-zcscXE`@ZS#9Gphjn7c<^>7tBe?Vf9Y#oC>)Zj43M+ulQYDwlq{?bDs7z8^jDQI&Uz
-zI)!Ir=!{;`^(De3uR2o$8zYe>0b4Mqb=GG@*Dtia_Y()D!!Nlxb&C^wg{NDXraa(>
-z<t1Q&r$58P&}h2O0kQj*C!8J3+BSban(7zkYgb*_JKOdieC*ks^|smWERc+7^zn-m
-zVCA?M9vDklKPcLWPL+T@@+Wjx{7c|I4qe)Sv-AU<2S2r%y(5{W`=iW^Z~8Rv$okS$
-z-P63iKVx}&8GOZGQ!nv=x`(t^T_Vv0euv>9Pk!p{BB;xMPh~apGbh+`xi-%An|)H}
-z2xM3{R~gfpTKpo9S^aiIqtnc9%jk6dW?M#E`Hjz-DZd{-w26I(o%Af@V7ezoy0Mb8
-z>+;OqmPYqjeW`P>rnBzH!sXYL%daU{-w&Rwf|J$^$@Z&(XD9Eq;mqi#z(Y2m*3Fss
-zMV<B9NMzpwd$3lt@w4eiXVaHQEg!#FCG11Msghpnw612O{;tfeFKdrS7jQMc5!#fs
-zjwUb&YYHPf35+p|TLKTl(lFM7$J4`+S!1>dTeXI*n!u&p1P)<KEsf|8X1-i2+BC-2
-z&B`x&zqNJYmF|ie#?JjVcJ6nubB`LoD|$-j^J$%y=sYl%8LeWoYA*zR<^+3JeA0R?
-z@hQWv+OPWR0r;i0*n^tKf&YW>e~Ghu2XC?SQCep`P_}uh{A#|ZHk=)Oy6D%XY7VF|
-zuTmMYvZFF8!@+wwc+a+&Gp>|2E4)b8s$bIFqTixBiwxeVj@9AJ=+E$LWQuxArszLM
-zB?q5E*Vr*0+b{XGo$6l=4rK=eSY|C7u-Xkwdyb($@9B@wZB^)Tzq8?PSpOpRAM^Fc
-zj$`kow<%@AX-%ssyCZndhVQQaq&4*?ovA-*O#Oi^K53ovTdqHO#p}0P|0iAjOH-*o
-z_&#0q>niPBWL*D|pq|6QdpUT|dj7lmlg{$r)xYS@J^OL$Pu?G={tvqPKQWd17hB-J
-zufN^j7}uY*k`4X`@7eI(^M9J-|1`({X^#ItLH)t&$EiR4+}yCOSISQIXm9tL_F~&l
-zo3jhr@Cm9#yLR-K$t#^PPcoa!jLy~Xus!cldl`%@J9rus_veY2{=wPHX@B5PZn5^X
-z;F$ctRlPi3!lPQY<;zaddF_=EOJki?TN$24zS;C${!AkJBjR=5q2ko;WSjf59Zh>R
-z`E9()w0)TCJ3Ss{yFS*I$vLa^hbA3#GWaz~2dyr6TFIuZ6ou!5=v>*PUDY2vu)6B+
-zd!MSG;ca@A{S)~a+5d0u%u4J%%C%zG+<j7KM-9O*Yu7RE18!z-4l=@6Oux=v)wjFb
-z;AF$DNsU)o9Z8qwbijysWA_=fVRwZ06-Yj35QqH7_J$36(A-;qt^Tsz7sDPE3$FpU
-zcmue(CU8wy0Jp>DPs1I^Hpf+KJ3>6AkJ01(!ck|IO@PC?0<GOo*I8o^2{>8pLve5z
-zlb8Sp{niu?>rfJKSdS9JVSS2)<7~&=7f$M~IO%ZRdsJo4T=rm<Ip6!>iOxL>?I!JI
-z31L6YewAwWbFuBGd+#=->^`jr2=mlf7eIN&#*%$x#}c)dZQ)7qWGs=p`mnc5`(@9K
-z#SL4^*j?{$YD*1Jk0s7VTJ6RLbsn_B<eM8<^gp`$VTeA-z|@}joV7{Kd@OyS`j1#=
-z6z%>blb3g^`#<CEp|E#K=nlal%2EFs_f3>DKskey<NIaBn|`Rn!u&5ruYDo5Yhs+s
-z$#bYH&2TO|oUuFAZzpgb4shn(;9Txb;>@@9=&8@XA<o2yIRCE>=aSRKG0xfKxw%bo
-z9`ST;g7a8_Gw+tppHAXTe?CMx*2i)>pc$PhC&anzaDKw!{5`+7k3K@>+*CfYEyfqp
-zUiAsI?vPFAZAxbw(s#%<)LLDgb!ueC^e5m>nMTh6^M-UMKCDBxt3xGShmk4PA?NCV
-z&oZG7#h?zn8`_tf)PXRA6J?q@0P}`*AU>?aBI<BYll|GEfAvwbSL|eqI~%XUH#Ed&
-zjYj_twAB2J-M9E4cg<vK@-ftZ%se%<c^cW=(%+R1D;v*}U*jbH{Mlwc{+rnr(%e#g
-zV<gkB{V1GkQ1|*zX9dRZ%qeRx%ClMRN#Xoh){1-m_a<}9+M_Z^oa%|Le5By#j@c72
-zZqH$S5*aZ*k(r|<Tr%?z^a}T{g!!~ziZo60{X>_p<YXn0uRM9akGgzMG|NYwCM)kg
-zm#@++AM}_k-wo&JG;iq7No3ye&zYMub9Br#`*RYn{`;x%UVMM!YoDyb&q?Rz-Yica
-z{lNosSvN4R`bKVgzjVV(zY(1pN7i)CsLt=ZoXyr|Li4rQJ6D-Uj^CN@j@J=D-}pYK
-zvLDaU`N7Q7p-12R9P<n1g(tP2K>dTx{`GoJdhgP2FlPD5sDAmEG~cB$hWE#EbGgO(
-z{Xbx?e4O)UU;1Qc{VM1GT?OXVVoU#3=Ivj4Agb%U+K}d#%o+gB2Gm)oD&xb+IXCr>
-zFH!FOj(?MtQv?56xn=a~hcri`eGlfW(O3pqYhmQ}@&{cxA4-;E_FGYom&-}ZfmXE+
-z%IOfT?B3c$eQcX~>aw4=?MRmMfUA#}<4Mawch=AqS82ah#%Jujd818TqK#ATQ<srB
-zKR+DKi+seD<K=$Ra_Dn4c6OEiqsmy3?)OO4=QdZ4&K4DaX#Zh3H*6>Axop;47#P3U
-zXeYI2r`}F3BUhJ@E7kjruYDH(=QCB>#-!~g;VWb{26_j!B<pRxUodR<0LS0RPv9rS
-z{iK`UJ~?528-L+hcw^g-=DIZ&%9D~kJGSKZE9YF9*se3e@k?Y%<D0Vsf1*m5AMew?
-zm}<7g?9G&YobW})G826f6K3sv&6QM<CDrX7`UmY(40$YH+50)wa$}!+0>5IDu~EVj
-z_~q=L_zC!RG{Mh=1^8tH{8IgSWvt;ZX)M?Hc4_(zHyJM_EP-Fyo`Em{zhV=g%Y+5^
-z<r?QA$o@~zucLuqB@3TZxTXECTG@<A_M5xpoc|T_vx@(fkOORC`A6cT#!L+lvq>Cu
-zzqb15f!sqUb#}JBlN_IT0xokCuxr-0>TgHBhVY~18zpf`-h)@gXK3K!?=XKq_r$!P
-zw)MVPA1rcqtnRzfU3WTbS~$Lh&XUh2JFl9xd%Wczr0?LV5GOlTV={svohSdVHs)<b
-z`gigvPUlF=)>FLt29>2U1vB<<NMr3oYfozZTNPS)y%O8q@KW}px!XNU`7zF%_avNi
-z4V){aRk=&hO|cJ0yv3U{J&127-r~;qcSqLR>hu%BUHOfzO1Q<}jR{e%%2)nH<d5q>
-zy08v^;ObCvx^d90c~g6_HgLlxHaNv~VQsJKQV!}uo(Xj!Uisp)Nl4@CQ!Cr?^jgu^
-zi8&zE$(K#I;Q6yb3|~g9-7a|d3NC3A^&?MMKa5VpqbJh!8+K!a^cg07*^W6jcx8RK
-z>PS#O@=T~7@uq&j5gt|2#P!ShIVfL0)~%_2q%pJ|cJ(8ja4_{NH|7jX{YaarA9=$1
-zeZkeQlCEFTk8`{F<yx#v#r(5=QZ?Hc$Mka_30WlG)NjPq54dstvMqLwZOqq?wNR>`
-zFPm`DOLKN{{c;u$=@L^v(kALhp0Iv5^r`MJxHo(%zQOfmwcOJ1sfMNRQa;uHJ~ewG
-z_NhiJ{!{U(5_@j5GqD%u;Tz3OjxCN@n#VT7u>DT^R#UMV5;~-8$DlP{=Er>7=)1$d
-zxRRSTQO}#O#&}+(!@`k{OTf<t@ZnQa9XeuVA)$K+OX$#Hdw$0R9a`4;7D@Z1V!{F)
-zTD0XhwLx-{9cLqTH1JE*Kii}X6Bg8e%=YgS>Tl%0!AGu|*1z1u1|uv{|KcPzSWf4!
-zr0Q?Ng8FyZa;^SO*<e|Vx8eU-!v;&#pLRE)3=<aAf7se`6Y5{K;a0vH@Dny(u8ECD
-zSfc(Nlh}CKCb*ffp#Jpt4I4CRzf{l-G5?1fHeRCs<tBET2@C39v~VWWKNrC7XuuEa
-zU(F`@S3?h@yRDs8w&VCAK2>bDL|b7DFt&}b;hNcLX1^b8Tx<B!?R&DjI?XseHeI?-
-zx<haX`;9WO`#y`^$KEx@#<lNXuoHE|Ckb(_mDiiPbzt`mV~;&H!S1^=kzV(N#C2o5
-z+_vF{-8Y2aDBYtmByWcdVZ%Hl`wYD$T#fCA|18@hp37sbUAB(ZpWTd0KSWy29d`4D
-zy2sIs*OE@-;>s&MrSuxVHshG2G5NF8jSN-B>>QpCGy0k^KX<2l7k!-3S0;ThW=mP&
-z*mx&<zN*moey67wx&6qJSpyrHvvZf$zKQFKZ<wencD(!-=`>URu(OBAuQ0`h`c&&D
-zDjg1{^5)#RYXJ?kMnihqj^{eKIY)<%>BP;pWf5j@C2Rs6OnQ~2^bUqAcfge!;`JkA
-zw|w?w$<gC`o*wjJri@`XmpkU{vY7WNdW^aHlP{);%OhLN(1f_KY(GX?DLPvV7>bwQ
-z+Rkq%AAbHowDI{2-OG+X#ehD9Szb1wk4X=GOnOJ3pnQWT<%f9wJ4d4@(lkQPnR3Qj
-ztjwV6WTQ1?#@eoN`{-~s7x`iuxja>1n6ilr%eLbU;5+Q{0>jW~#GPjr$`4@~$~QDB
-zT3gA`XvEQIIG_<>mcLDCWYVk5K!%1J<r_RHE5x(U(WsK9QQ6J6cTBT1Dq1@>rV-;*
-ziFQ?Vc0BoF8o507JS)kEJ(J4!E0tkqtB$$6z%Vq*x-+Xn8W9%L$mO&BN2}{^0vcso
-z9e<n9h`0z^SH=Pw1?3wWQC3K!8{5#W(x-t9-D+*<;b{#Udc@KsF)#54Z_S4GwzJ>c
-z_U^h(V_W}Z>nF;Mb;Z_~kWTz5tqFez%W67Tm1~@xHjv}4XgB_9&r6G*)EbSOo|(ot
-zwDwC>a~oqlJQ$v-M*N3eyw^+V_z$^w-zTTzJ6yc)kJ9mPWvu%<oJXdy?g7pi^K(LL
-z|Krr!o#uotG2VW&v&9nQ+hx|mjNEl{5Ia$8VTSQrJ)O0-*7!Sq+<U}+Ph1b9eO$r*
-zEjPYRU-u-BT^BhV_z~rX9}(Kc(#;e66cZNM>A6Y#l#T#?b`tpL{0Z<)SO9-y5<g%#
-z@B_*XKOl*J6Zl1i1@Lo|!0%|luVnEzQ$BopEO@GGaWw8b5mstF4tBO|bi1y{`wMOz
-zjj^lUIvVU>opWK<(P%vlIBMO@eZhQ$=Fmca;c3QGtN09l4fPN{!zN@Rk%w{3L>_#G
-z>d5C$Dv#DX*YF!Q(bj9sKUA~KGct}YyJLv4Y|SNFo$A)pAP2guPkZ(<$loINv4rzZ
-z1HfHk><0GQxjRX#)KUJz5aYmu*zh`ALvv>ho6ylBD?7*8#k@<m>kbrSL&v^^_eFGP
-zd*i%l7V6AZo$hxw%ixX5ru|GPyCW!@cU!hwOA?pO_^;s?Hb3%Y?Am$O@7eFlFS+tF
-z?yTzOb#JnkB^Q*>yD1-8mJOPyf7yl!k9hodIEl*_9WGBy1s7+tS>Mg^p%~!8yTN6o
-z2`=;l!q4DB{370~$VW(*PdHpEQ^AEkZUSG*0WQ2-y4Z4)bO~_DCC82ZIl+s-Wzw}I
-zziGyR8a5l>)a|6kRO7WIW7hWxZMLiDr=~mnxaS~kV8FEjZ}WOP?uP41;Je@NbbpgO
-z;|JVXpi7|h_$^Ug`@`E<r>b|_>D=_5r)KuRg#9Vm?C1dfknRNaYg06SIuE#J--*#l
-zTB~XAJLaB4(rWz3%FzIQm&Ubp?%~8fGTA3J8^_Q&^4d?X{%1TpkM(_bUHeyV9q}{J
-zP~m<(@Bp}Ip3C-C>)A^lz3khd=Bl)wSaDVQSe+9zfIc3~-T^P{U7pXt=U_hnDXjst
-zcEUr~!v4+hFCM4(oZ;ml{jcYxXs)xov=8%UX~iq06@RoIu-W=ytp^-nOv=`kzK?#_
-zzw6h-_-pq3O^v6mquPgH_7{z5oMbj@<1|)*PBge{?}*u-&9BZ7;eoDNf1ooge+W<P
-z8BIE?N$V_l;IqcIJpXmi<*>sOy~q3@YX-Bk;m>UPGI%<y{z~u6IU?737ktk@n@4ke
-z>ibAvv}rVkCYh+^?3}V>>ZW%MKs$|z88{uTEb3usn6+gLpbrL-1Hxi^%HwVJOWvfM
-z4D-K|rH?yX%*YM$qqRSSj5n5O14fo*D}11{-VWa{vo^?&m)UVRD{q&`BiZyaH!zId
-z1)sl*oY*!n_u8M#cWddXkH)tYZ`X-J$D-!boDMbb#x|-|b8g(G!`f~p5AVkB9kG48
-z+RUQacD+!=!8Uh|QGfPFvVL3R8naDZLVKc(b3$iuPAD|%Pp@f^?<6}{`Lq|`lsjU_
-zq4X{~YfMRYu+~labq)i_)gba^(r0boF8utt6Ov)03&v#ESsDzZ6EzQL&+~Tr0J$7Q
-zK4n*F9M;qInGy7g=vH=c$mijx&K76M2R4Qq^VFQ18E45^dR3v385<~C-6y*%PCIPz
-z(mbp1R9R}{+83d{72=WIt1$c8$7uiWG#=_VF2kENF7t&8^)a;VaCOKz`S5fYZeF*^
-zV5)z!dk`Nqbr$SqeVwP3*6SO&q@UHiqhv$p7uz{dC)<R_{BrLD=m*QwAg*ZNC&TUe
-zsrH+>8KYW5Z1!P}W$eDptoFNEKAL{i$P(X1mV_rbo4U+4ed7SSae%&2efR)<s&tml
-zhLR3aAM``xm)^;@9`&d5_~j|v^8+L=M*d8>(9+<+?}+en?VPfWOqQ(;q<f#M#mwkp
-z@ND#-c0Oqa?ONln6MQxkW__xq?hN3k$LyZSR^}!C6ggM>(_YlDAJ7^D?~Aq4Cz^C4
-zkx7@<4d15z-=Y5Em+b>=Tk`uCO@Cbu^hD9?39GMtK8?j|&yGo-OX-P@x1uNPypZ4w
-z{lDzpeO%plegFRhoG4XPRBBPNJvFH4NTn^QsC+DGsKpgqY?-3w(-H$Mu{6PiD0QgR
-z;6#UtE45Tnj}{$maiY?Rii!p&Dmt8OLq$c)CMqgZs_1ZjAJ5P0bpo6~+Bt8x-|vrd
-zYjfv)efhaKSDY-?koAa;S+8GvEA`z}gPap|@2U59>UAUbcl0<&pW9TKd${JzbH9@0
-zny|aj&ebDXHLLgVI52f@6n$3dUONxy9x1x6ov_zAbzO_jw|6|S^R2FL(Ruc`<<~V?
-z{m}7pCTpa=*zuRUy8Fp~?Kt7*Fv^s&ckU$bZj8#2=GT?zdYC$Asy>~+qCDIis_t8N
-zdVL4{JWAQ<*xl>rY|a_c*ml}$*wK3#vNEH`4SL+F>&4xV@oNr!Ie9%hV6Qvtwd#}C
-zv*>r<=cGsbe6PQkMC0Z6sO=N$*NeL!wYhGc!|mK==LNl=NuP7mn0~^V>X?e^;Q3x1
-z7rG|hMSXk7bJxB0y%hSai|%)99;_|xhdcM`IcmSJ*=fJ0?oU&BHNHXWj@qC;J$_;@
-zyi@OqIhV3$#5=Cqcudi!cb<E5?7wtxk;vfv;5VP+&mZx)``nnG`-#>ls{amKlig?e
-zn)rMU?o2(G?vIPI{2W1>daS1FR_b2l4z7LCJTMmZF&aN((fCt;r#7`8MyOYxz00HD
-z*1naAem~)Be6PR8L0=Nov3`B@a~a2I^cXUW`uA>e9X;;*>A?DRH1!%mbS*t@uPNGR
-z@N!r6Tp|6-i>^7e9j!HONArEc`t)b%LzeBelh>8BenjmP7qxr9UZ>ddnwO>5bJ!C*
-z?X?GerZKuVxL0L;UZdajINOhF58FIj8{75c2VCDyUeA3lqt6{3&}&A1UEOQHNA(e}
-z^|+Hbt=FAdJEH5a`ltTPs6N(7^O|JM26y^-<PLic>(0HI-`uHkckIC2)hx~zcOJLj
-zwa-q@z4s;6H`_nnHu<+|`ySfX`7`=V276cYraf?ujt%`imlJx7Y=2{gYYN{1$KT<5
-zIREn;w7wJLhyI@FMgHzZ>igj~{;ici9@q2XJ9saD29FnFzq^<6_ff_^qrvAic>k-O
-zn@#e$j1L??hv&1-=I>UWy}Ecj_RdA>pXa^W`n!P|%MWSeNBsSb1zjij`z=`<rw9CR
-z<J=cLhkPmTk<N(TBfavdv-z7Z8MGVYGX!~eJ(<_Ic0MBYe(F7Ut~~UTRsH>u2lV*v
-z#6!QS#{$uP$^pMmVO-ID${qgqC9>=>g1z>tJ=XCr`kTeNM&I8(N;1puQ*@8QeYNgW
-zZ0-F0cTrpHivwyK_ing1+3Dw<tPS@j_r^Bgo3Ms2VBchO4ZOd{cDn9G_cwP~9eUiV
-z{_8o*4|0#S@o$Q$kGjv$>*n`+kFoxE(98Up?lHJmNIe#f?lG84^(%D`ljQM{{#F@r
-zC(r4rK0n~cq1=1uTA_OF`HQQf$Ddn1?&Msr_hu?z^thAzmDIUCnZ-GiI_}}IsNKu(
-zxU*pWUPftlt<2?mX7@2sT=ctNqwh^!XEr?MJdwJ-u3w|~_;+CI9x45C&^<h+i|S>K
-zbzaiBOa0a30-ay()nmp3_Ph3?9_#6z`2$>|Pu`cEu(9YK=;Zy-PU0wkPrhF(sXw|l
-zM|q<AfoKg<^AWw5nd8LzV)fkj1TVYS#-itzbU*XAsrOx+tkcu)uzRfN-tJyq4^O?`
-z>s~$ezOK}D{~7mp-9KUdxhM6!z`g$XjrOB!%LzY6(`M>=zkVLpJm`3}Yh^UPou^)t
-z*Yj_2J*NHCxmfoa(e*3K?%(wJFg-4auES~lS+DcY(1$y$j+58Hw0@i!JqA7Xy0zYi
-zQ^%#}wYRG;y1vs!G<S?u<J<E3e%$li;qTks>+^HK<|mr(=yzRDQ}^vwCQ2i}+Ssli
-zTVLOKj`Lo<pT)25C+zpAKH{V6J8=o>O}*FL?y3Cx?t4Lhza<*q&eXkH^u1s9SUk&q
-z|C9F1PJjP1b!^p#Pi(x--@CrI{%qIzto6@m>Ry-s`MX|xW{>NA>N9)yaUDN--RBw~
-zUHiGV=y~uvx&9Aw{paud@|ZAszi9N>VV-OLPq+_IT|ea7zsSAAos`jaY4HU22;3jc
-z^SQAfrap_teZh~o7l`f=`25zUdjvi|w(;|af7W}1tOuXh*Rh>Cw`&jI-*ffZockYq
-zUjM=8^^@FxJovo6Ki?GH-|7DE!RPfKd|uz~AGf{-O1uAi@Ok~{G0KC_>+7-GgU{>d
-z`rpM&e;xI~=k@*h&%OQ_isugW*hQ}cKlr>pkJ)!V_`H7f`1Hhs&+BU*9(-Q^!RPg(
-z=iYYeIo1cC*FX7MZ0a84!RPh)PClMbd+>Svccz~EdGL9Cd;hxLdlg+vIac&scJ#b1
-z*Hy(uk8Qcvc<_1s^}p+@_oYPhb;pCx>z~{&4?eGNul@gj^}N15Yqr<^mf8n-t(n&<
-zMx(zg$m`)7->)CNFVXK2^!<hQ`oDcAk-grm&*%7Oyl&?2p4_|5=dn&~@p-H$E_(g<
-zoqAui-v6lcM(Q=`ll33>I#vIHZR+2<Mg39ShWdAIUH@Q~z28x<_3OO^8$U<3-QS0Z
-z-p9@RAX0tR-$~Hx<58dYp8EH@Hr2^{G;?{~KJ{2$uLV=?omtGm9lRd>240ir{S~A7
-ze1zT~ADv(MOhWWNPu{Db$FvW7qQ6&-cJJgf3wkYi&l4<8e|sTGU!rpKMXwX<^<%xS
-z`&>+Y{-J3{Y`48OnGwCOP47ju*R}oqd6d(6E2@XzAI9%`k4E&KX?-r@K;}2^;x%;r
-zEwI$<=c#L@%IH1lsrP7~`FMN%TYt|>f8$Gk-|OV-sosw2K6!p%y!t$i-p~6%UXRt^
-z`O@o}jPr*5slTtg^H1nE@99YHRKL%n-}&43`(A7N%rm{;S$a>E-Vefa3cOD-dT-(Z
-ze}BT>t^3{T{jTzU|M36PZ}zU9&(Qlu@8W$Q`uxeZbDm}IgT61<-*a%>pHrod)O9<0
-zZsY-u;}Rc7)1PA;clbDtGY;O%tiM;e?KoH`t^ctcA4it&OX`Tmaj(_&K-Ys~j`x<I
-zy0>|~?(b52?V;ph4@d6_+!!AnCns#Zw|w53V<GC(UYU9>%Hs5XZ95h%tlx_^wE5HM
-zeR7-orT4aIjZ*JvkIEmn=PvXf7R}4OTa~+a{rw}#6P3GTbGd)rs$7=mIbn52<@i17
-z!vTx?@>b<`dY*eXl;ih}<vvBZ2lRfl;}7NY&yVK3_h`<0oQpL_ci3@w+UpZ@r8(F2
-zNq@I9`um-nN26;MpM}v_qVqE69Gwd_FM5xZ&WF+OY3Ka=d!KuBt;*7RrCqC3KYQ|I
-z{U^4$R<VCic^`cgx8YiKe2Z&U)c+0j@7<>Uom<o&#jV%>fvokufAF}yXDyne6E7N#
-zKBvt5{BQogQFQI%{a;&NyXd!GztCqHbnW`fgkQU8tLmYC4WbXJ_e5o+{stoJ8hx(_
-zdra3Qea1_l4~zC@mK|q$UzyfH?=Sp7>OC=}Mc1e(jcb;!Id^38S!DZs;<o3T6Sf~x
-z?_IO&sQvAuljoSIUF!6@tuL(mUfciEI>+4M$Dqf3jW~_1iu31B`OHAk>;CdRPk-IR
-z-gDOhe-Hm3-tx0OJAF=wQ{Op1=vsGo>iA!L&HJBF_2gLeJ$$+bDgNo?({=ycGyS^1
-zVSet^I-c-3y2IXcm%8qI-8Xz7bv-)1d7cNO{ERUwzyA0xy8e@9*MHVx=L5Np+Ps{Z
-zdY}0LyA~z0bT5&1{`U4#?WfP}O`1pTne^+>pVI&1|C{TneQw~M$M|*VUca7FM|93V
-z@xL3#Wj>CkKgT$-Y_BDmgZsap+BkMU(#LVYuQ}9V*DkB;<X*p@^@!dl$9~W~+orv8
-z$L9V2@GXvshinlSU1Rs!HFC>q?7gY}S{{9tDZ0+=J@s=P(cU3m<I;OPH-_~)$H3pE
-zj@jrsntF_WKxO>88U0TA)b-oL>E*wr>tfnG=((b(Z+C3y8^1?!$1N^uH@#fe`g`t9
-zUcXOlE*D+D)64DjJoj#BkKZ@8r|Y-g`yRdjoxPiSA9?!Uu9?iR{h{v`Vyrze-iw|(
-zXKL(c5chQ6Pp#`k(I4JFsqf#^+NFPPJV9ptR7C&AVhLCL?vH=`<A&hLUsLfZPbU2T
-z<d>DSe*bU7sbQqbJy28S?$6Y`rBwb*`uxYMua9N^*5ylIqwtUMrpzDmFQ=r;Z$}|E
-za}@eo6#9~fJ{yHT>7kECp*ubFfhhDI58V=l-sYh<MWHu%=rvL3RUSGRg${V=<)}Vh
-zZK~gUkKEMKdie5#t=H~9a^pp%&pZ%?Z#dX`-qF__yskC&{Qa%_n-h&kjvPLs?6Jy&
-z*Eb$*O*HSn>F}}E#El1!-nhT@K+|*B?&k&x(*Nqv(PJ$whmW*2HYA$%A8krpckIxC
-z)`N!+sW3l(b*QnerSSmC%{L{kJACX=L*mfE=EQ574mLL?jvac<k^L<#2M=AJ*ncQ-
-zWsAzu`m6UhA8WMYfAYUsv7i0Z^xGPSik|Y=hkb16S3jvJP*oKV&EzDx@kd`U%nyIA
-zVe^m2$7(G4l=KGAUbanozo*aeWs1D7^px`Y5Se}|qJK|KFXM!upIZ96Rr&5mS^9SE
-zPk8$9Hto-Gq0vu8^zW(d7w|!3{p4=besMIPu^4}6K|ega+x$~@Kk1eClV0QL+pSN7
-zr{~f#=gCv%xAko6&vxazJiUCI`I*>x`tq}$UPb#`txw{qr!QaX>Ek>&-l}}zd8aR5
-z=IKM*^uN0F^yTY4y<gc9r>@`H{glt$ZS@!Mg(_Rke=$$u>1W&haX;ym_mf`Z>D#Su
-zgQv$hj<%ZLhAQjdcIDeVz3DMqm!E%`mG|?&Df_ST<)=>{yr1-(eWx$q;_2J<zthuW
-zoM#@r#qrVU9p7$!dhRE^|9;Y28m<4!%*<BvKfxcl)K9ZPuFXFsH(1!WAysVt>Gt$!
-z{JE#@-{i*hEyh3M>3m1|mi>$Iz(_wu#wq<P^7Pq9Y*YTtR&cxZ$@BCv4xX*%r~EBe
-z-lzGL_LH8zUHv1TzFqxue|!4+E4okL|5{JquKxD7pT7QiPv5TpE1tex{RR4j9Y5R6
-zPlu;(SAVakZ&&}=EvK(P(QE13)nDrA<E-yi=f|mcoxc3Mr*Buj?e^1`@AmZV$`?i_
-zejZ?0HK**aGEXn${K<2?r=;)ukQLnS{-f8^x2u29(_>u!wwj-ukDPvd2~V%&<hIrE
-z)9^Vfzuo?ryr1;q&!4`0&;6vY+)sMl`02;j?CJBIzqgwI>aU!>e7&a^+MU@c>(}|U
-z)0gk_^zF)zef{+1r#*d~`_Qe{w}&s%)X#SNW5Cn9==oOTFaFW#%U5{%z8zcdkL90O
-z`R(?{>d#JJf6kJnuWoby*0OT?`e!_SyYVl2`U>~oTaAD2zfa%4Wlx`F^7%Ps{U`r$
-z`toz0UdX|<)%wLUtm5tZpXccX+w9+xGfrQ=($k9`zIFRuk2`(&eowEoY^RKW{;boN
-zU-9&cZRWr9?9-R8^7I;;=2P15yPxtyp04xvR_C|o#Od4b@btoM_W!_BPG5f1(?_=1
-z-_5(Me8o278}jtFZPE+Rv+{m_#Sl0DRD1e%`>Wp5b$o0!Kec)lo}Y^7-&6O0ucwb}
-zlU{Yv>HF8>>D%?M)6=(GzsfSJf4lN^p1$4swFjp!-{a}qtzYG(r=OorPv36+);xW?
-z^(%b->HAma>D#Se@e5Dizh+P0Zv7HhSo!VxSLNy3&Hp}6@7QL4&DEZMe9NBRzRmH&
-zIX(Kxc<oiOjJC5ga&yj!C5XxA{{^0|(@$xXgMVsro|OB(jQ3{t#$$y9%lUuYvi#A<
-z7mHP|=TR}`YvBLB2ar#<@+}V_pXR#ie)0|N%ZPoI-VB<-0PfC=?MmXKGh@yDX4r?1
-zCERO<?Wl5XW>Afce^;J6_i_sl;`!9q?{?z_gqu9P&#m_O3RFE4FEf*F9eyYywyPG4
-zGGfg&W>}5SAY5gJ3FN7cU9&H>@;&$t%5|g4b(vu&s$7Q|)}hMfqS~LT%ZS}Xxk*&H
-z2{Rl=l^Zj|K2*6X+)4hCmst5Wd^X`$RQVP&Y(|xDGQ&z#`65*LnHOio4iFx~oy_;3
-z8MfkcNU!zy8jsJ%*Al<-SC)U-3`ent_+F3i@%TFYF!2lQ_gB!)1Zuq9ZmnD3E?#Zx
-zH|I{F)~^*+uEx#AyQnvg8gI-D*RHbhuA1RAYP?;j@)g)ixpGvwGBYei%~OdPW~0iD
-zzsSmU;_E5bfhyN-hHa>Ft!7w*DwmDXy4GaGo=3S!RJjQ=97mNKGs8Yqxf;~E<fGPQ
-z`AVDTB{Lkw3ex*MzR%;Ev4i+3kFWIj9DEn?i=3~tz6)kJghRyFAm@QyW%v}#!6!1`
-z*{I_&ZidU8Pr2paHHJ?hy#^nJi`6#HQMbX(Lmh|N?&{^Xjy<S(DR*<+(Z96#F1HLh
-zw04yu=c?)wGbq9*)2~7^jG@N0_JYW85LK=pc~enypBeTloqBrApdNWvXjdIRgLSAi
-z!vdvKexb_xGl7MKhcT1<y_kXBsB&Fq*n&KzxT^-UNiRY5tJn<l@SCLP;+N@1jv1_8
-zX6rtM%0Fp_y%?vSdWC7fz|-?ReT?fPr@mdq$Ww*8^6<&H$aPoiw}4u|c{7|stzQ#r
-z-D0S9=;Q`imZH|H$jwI`cSCzEy~v%qBqO$m{Nu<i<gQ`VJPes(Cmtrg0<{k1crN2D
-zGlLS;`W2gDE^6F4W;nkmBi2H>5!62Ga4S&#Okg4DIjDAqI2hDU61Cp_X4r=b+U+%i
-zE>yiWxPy8NQSBzoaOvWV*sDmN#D|hTjvCjP84jY>w-<GsHlfNlm|+QO-B&r-wO(VA
-z^iebH^l*oV6R7p;<UWk2Vt3V|=D*4<L(P9NYTRSxW|N!i&Og`UyWCbxP;WD;|4n9C
-zftt^J)cmbHCnNR{!i)Gv!Xv2u4x3>Ms@)n?{&Lj*FF@`8JXHO;X1L15NAoj@nukGD
-zeFJ9LjoSZRsQuq*1}&)htU%>2H^Xey{+}r$p7yJ;iF~D~c`9}jsCk-umi2eo9YD=P
-z64lRsGweq7vjH_9RjBcmVl+O?B7XHE>(7cAPNVwMh9Twa@f`IBb-b0Jj<;en%tsw>
-z3%jkIHq>#Ki<;N@QnTAFM~$n*O`yg#dZFcOa7*3!3w*q8J-&=_>_c9<s;)DG8r1Pt
-zZH7gtc`h`=>GQ4J1nT%1H^VV}67`IlK^NXj{T-<JY&XM7)cWM0#<f&p^Er$ELHrml
-z;0UVRuo?ED)}al5MtU8pU$tgfj@mC}I8HxG%^-o=FDuWq{L5xIhCimBE`_nu(<?lE
-z;XFIuYVjqMFUJDRMXg^BYW=d!aAlXRUk_^CicsSlDmM3_)~m*?K&{uzUs!sLyTYJ#
-zzFb7@$63@o%$VU29wxpCwSEowM8;ch26d?Qt2M(i)I61%VK%l<Ztm%}&j#HlRDY{5
-z+TW;lW{RwxNz{5znBh1+fp*8tU>H?z8!loss@*Cx%)?g^zx=d}*iUg0=}Pm08BU|t
-zcMP>&J*e{CW>|+>_k_Z@@Kj5mH^U(h4|=!?b-o;WN=B@X`r1+R-{RJz=D!v-?ga)d
-zd)zWN+a0D+rT3%Or5Dxz9y4r0ogXTYBD)IkCzy*r!nr3~e`n3G4^>|qDt`n12Ug+&
-zmZRz~Gs6UGewNR*d6-7c&y*RCp!WYTYX1+JK_5ofA5{JZGc3U$)6N=$p^Lj(@p{Vd
-zL(NmITZNjZII6$1=a^GS)UHWXKPSv^1l7-O)O@s{#<vfn@!@|GPN4czV1}z_TYr-H
-zQpz{rxs)%*D+$N(NrXq9lo89pKIEm;>RvNwz*g$5!q1Su9KS($w!q@Y@KeMO<ClrA
-z_V^O~B=LnfPW<E(E&ninp7;U$zVdr~DSnptBK&vam!81=6fPoLym`S4=TY-AXND7~
-zdG3~syUPsgJY4JH0^CQwwZ~h&RWqDHt?xAc1LK}DgJDZ=9x}sDRK5=UDEZpWpw7~p
-zYt66_l`nyJldr%GR`adh6*HVb<r~K#@{O56pQShVnqdPfUp?|tO7%W7D8dZFg=UbC
-zyaZI8X9kOBWyD@bxk=RecA?g{1+~7-X0Q*x#=Ml{1Qy_DHBXPrh<z95a0bUv?Twnj
-zFsi*FGw4B{gWA=A?<c<A4ECX(SE$2A)~(hItMFgQUx^<ee}x$oqskYV!RnbAu>ry>
-zX0VK^ZwXc3q8ZMi>YK$6lYhnx#!=<R%%B_pj&PS5bfW6(K-Jf7hApW2nz5JsO=eJw
-zDqmv;3A~MPff?kZ>dQmbmurS`RDChzCBN#myvSe?Rer$?Mv#~Es)x;B2vy%8s=fg;
-z>_gSpi|-?Uj~TS1%D0(84Ql=MsSd6G!eedy=gnXQb^b}>Q&{It)P86|F4?>4@V%tx
-z;HwGuJjU|3qw?3I_DwY^e<}8nfAP_lzZq439V&l0YJU}>^5-Hi;qIEqwfxnn{AH;8
-z1*m<Pjmp3BD4q`@eHhiBN>u(5RQ^1i!5BUhmmirCOOig0%3p^%Pt=-Wk%tRCy!;3|
-z-j-1Na?uQ?P~|4gZ~%2&CQ;{&eluvd^yW4*toCq~hYL{U@=^OV&kUAxto|i497E+B
-zMV)U(%%I!So4d@g#>3SfF2JaM>{b0{u>5eZ-wekvsvmWp8Zm=zOK<Kn!x|4)d$<6j
-z`ceBh&kU9y=JlK57)JG@&Tk`T&~53>U1nJ0;c5>TU{pV9U+0;@@)=&g8IEC8KkB?V
-zVg{|K^Hhr&G@#B?^=43pf62V&ppJ{NY&$NJ_!#o_n?XJD(&(;Sd_4I&9%|tdR5<w%
-z3)i5+lRGTji3(?Xcq(q;der{eXNDynF81(RmW^i>wVzhZU<Org+6)Igob+%TY93lq
-z`=rGTsw};^(hPGvobBP+Oe;5oTK{P?7(}%<V1~^eZt`#$s=ZRwx|Wzhwxu`6&2TEi
-z>X|gdK2*70)Oz)pK?Q2P%FUnzwO++$kc~$vw?r--=X0oa>qni>I#KJ^VFs;ujN`lo
-zpTYUE*$nrg?w@K={is3pquLB|Q01~w<>F?z^2b<IZV6Rx5jE}wGZ;XXOQOp4n_)Lz
-zO#V((xenAkx0^vZs$3bWT&Wor;>F}IK$Xi!t!thc%>0j)n?{wJGQ%-cxe-*kVbnev
-zGJ}1%llJmZ^POu3*{J!Bo5A!SVzEnA4{DxUQS-bHHP3ZsP>uP-SD@M}N6lxM8RU6-
-zwx`EY^A<CMxiu?4jVeEdnx9EC81VEyPwz#|Lys9WdwRX6??a8Z&J6M}8mAd#V>C`P
-zSm1T{R@xm!jk5_g&T7;+tIQxDbskvzJ^7ixdHf9F8T<y}0o3tci^^Aq%2$B8FV02X
-z7tjCB^7WwdwWIPipzf3FaGY=vs=m2Z%QuP2H;kVr-vH{qxfPYK2vwgx>8E^azl}xr
-z(aZSngvU|&`ce1OeOSc4={3V1)IRDq!&cNjsg#@tD$Fp~!#N(F`AsakpB_Qw8#cop
-z)OvQK)}zY|nk~J#$qcJd`6^NCT44r-mfoB&!x$>x+I_Y^R?T1rqw}H}4x;i6p!QkP
-z4B9Qdxy=k~Q2DCyBU)!O$Vcs$JTu6~Xup`j+)7MuHQY6Vx~~|<$1v_8GaN)cZ!uto
-z)!3!_&7cx>A6J1dWxmVJumttEBoCE8*9=B}9gEI)-EJE`g?x2bh;e)w#!&0G_N&Nn
-z1s_j6%VyAtr5Z0*U^yP4Tp32^9W$K&FFSwC;9JNyiQ4C5sD0jtyHyWH^<Y#FM)jEC
-z{Ib`BQ9bx6)q^??`Y@^oqk1r^2cvq-aQ>HG4@ULiCshyXIO)Tv9*pY2s2+^!F~j*^
-zcs&@^gF24JP{&aps-6bazOO+YC)KFqq{<8{QT0}sVIeC2+|O+v&YEGbhkHC+<Kb!#
-z=Xf~V!+lG({xPhiA2UCT#XiXTO`E|KYTry^1MN?k;VAwK`A1Oqk;7)tk1F4122I#Q
-zxWNqSQT6RZ)mLYR)u{Tau$TOmW>A7EUu*_zKaIt1CA?||E2#RGQS~jE;XJCoIlP_x
-zvt}@XDnD)p19%bTOHs#F3F^2iHp3#+aaCxBl|PBa{(}73sC_-M7>gAXZopDp_;D=u
-zZt9;mgE>_HW>Ni{F~dnz|0eK#>W>)=p~?@M!9G+wH8_n`9xg{6k40FB1)je0pRw4v
-zgqKnKWyuT|Fkk&LgGu}r^$p`7wxil<#=pmU)V{96qtsW6s;|ZjOHtSRV$^Y3h&oR5
-z@t+B2<9l%RKkR(Bf*R+t8O)&e{V=M%0aSbasP_6$?e&^r8>+n))bZSeI-d8T+N;KQ
-zVL5&i%TViHY6khJ_Er|Gy+u@e^QiXbQ0>i{;TWpD5!7)%ggWk%sP=mBo!EhDuN}2-
-z+st4es=YGQ_=-{O6{6ZppxP@i!x*Z))qCyyu#7rCETGz(!8>pQ)!sOMnD)lZAc<<P
-z8FgN$N1aFZq0S?9W>|~SI+|e_D*x(_>^!n!hQp}qLMdKGy}79Sl<6PZeaa|4hW1Cy
-zAc?vk>&5?}Ts!J{zOi|WAI4SU`%v+-Kd|^I{1x#dsQ9(-Tl_L=KTUdg47J|99_~V|
-zN4<w@QS(*o;RNdbW9oZ$U7a+8aXdrwW(IxuYR1=s8ec7DkX~a3)u{YcW>AQ_Ps>G(
-zKgSG~=VGw};-^vNr_5jyA5D0|48}2P-wZ17>$IPTx}V53!-enKeNz$@-*1MksQKN8
-zny*q+yLqT~bIl+J)o!*K#8K_W%wX}`R&EkiZo&-4QRT+WU=&qu#0<(%{mnu3E87g`
-zX05+{sQ6wpY(}knEvmo8sQ%`l+RZkDII7*48La)gwYzEt^Z#b$#!=<Q%wQB%Zo~|R
-zQT-h<gA!DK<EVbc%y8ykt-n2}_--?7K<&qBRDTOm{f(pAjhVsPjJ3OJ1}ms`m(5^|
-zldIb8!Ki*StVi7s7kGTW$1ig+(0)&%%C(}(wU}Wgs+=wwieLL?WH^I5E;>==>MXvw
-z*3*kn<rcVjsNB36j^a4wno#A+J-y7+b5P|bIr*sEgc<guj<af1xrC<|c>3};tlSW)
-z+@KkDppM503LT@|0P1*a!02%gK8E?LGJ|6L9r+Weby%2+#ePkA78UNtpA+u!a6Nv7
-za0Px*<?u5Y!*ApK*SOx|C~6%?%wPz$Zi8mfjaSgWW>o)*QT@w9^)J^9R=ygG{WtY3
-zqWUw0_YqEdxB-7jxX!~x_%*`WIH7W1;c*g9;&*WnXRrg+zjiZd#WM)Em_aSRhW-_!
-z`j?B!pJN8ucn0CP8O%*u|0huWA2)+``~&UPq1LI^42w|bmt54i=Kd)b`z_&7RK5{2
-z>_Q#aEvS6uUy8;4i*P<FU!EB*PT27@jmkH0f_+224phE&Gps@F|Ftj1V*iA*sPq{#
-z97OH&TKqhgczUs?$58uu_zSVv_plpPzRL{jQTw(4{|(p1Eq&DtXHomJ9{-y8EkoT8
-zmZI(lOU$qsbw5~ShBKeHeAB3WQ)W1c$~R$#EvWjMExozP3>z%Hx!w$OQ2DYgy*X}%
-zdeETy);<>*4x;i6pxRBEVZWs}_nBc1YM(5B*7nJg87!jq$$}Y-qxSg_YM%_6K`oXt
-zA62OP%~I6;W<Ey!#CMRsFlO^PZ-x{2d-C;pe6Pp1;(p@GJ-*E2b5Z+l<ukTVrax`%
-zPN3QyMz!0EYPS>LM!WT>b>3%&6}Uorp2z2U{PL$_v1^GRMdcqc!)}cBF=~HSk6ODG
-zsCJ7{?dGD|jp5(Y?%XG>o>?;-!(Wiz<MG`d-;5#gr5<16@!6>B%+f#lc<=G?Vl-Y<
-zyIoj|9jN=Zb~9|lvskBAGibuElCK;!zA`h+#TOGlGh*@6W|%}BZ>3nuc#2T%=AqhM
-z`a~@DB3wYVJ8y<__&C~~HG?TULB1ra-F`D{#jA-g^Y~JakE4#`zK>hG-KcikQ0>;>
-z6<CF8x6%wN@J!k*H-i!!BVQcVZp;j4KgQdjiSI|n_nBc6>in=aZ0#<i+MPqSJA%_V
-zglc!t3<ofec9Uk%i{Bw%6RQ3OGc3n%5+C#UwU0*W;S}n;Q;(YGT2#9gsCM&l9&=Ic
-z=9pnNK9+XlX0ZAXJYFN;6sp}xGfd(SiEr@udXFzbozL<<5{n(C-Nm6;j8l5`f*H)C
-z9+%Fc&MUKKID?NMJZ*-fsB$A_(2Y8uRHM!prT7@qOU$4EUr4+8sCx6vP)~|+N!qn~
-zH|KX;Mjh|d$Y=9+ji8RdmAkC`GOGNN8P1~0Pa~I-U6ZKeb`Vv*8&!VlPAfl&DnDU{
-z!}t}-4I-C{T}jmO*MTbEfGR&UXype{<p<2L2fsqOF60!os{?iX)T7FmqQ+f<DpzcV
-z`KWTa$SG!5HfsMb@}N-V#!%%(QRPO=Fo`PHhny;Q^`Q1|3#wcts$2!CT)7z*p~@wY
-zOUABz)c#xju$7xam77GBn=r#+RJlRql)fv8+CLqr_GUk1*N+)9n8Gty_enG8$9Bq<
-zqxMGvGe|EmgM3u}JTq7tu>CWG+CS4~FpRq2?m?CBHiIsFG~rG&=s?xiZU))Nt>Uhw
-zJM6w@5_OzRm|-XCezpm<@9I$NU4UwD?St0dsu`@H+FLe*B~*KhX3&aiuMTy8RElb^
-z#0-}|VC~JI_UQzwy)IOHO_)J_4Q5b}YHyzz)S=p|HG}!2wKswPMSV$Bd;Mm(4>i6D
-z)V?l3wYU6!D>oyFA4ZiMGQ(z6xf;}dE<lY-Z-UT$*xdUp|EwAIq4Kw*_Hhj=e+BBk
-zEP<-Ozzmn(Yx!qU`*#SHzaMp<){e^GW`<R$`b$y!HXD_HwcqaBW>NWP%y0mezX!En
-zi}8^9k8fxG*4`5ttfJ0$EBFe|v&&|<fVv-<MCG3_gI@d+;T|*SMwRcvHOhCIVH;{c
-z?L+0SGlMeJ`99yxL7n$k-)-mp1=Rh-48DVW!x*iL8Fpbc>7A(SLWdbP;l<>y$A7{K
-zRQm~x=G_dJZntqwqn_XCz$4_Z#cryuF@tK<xT>(8b}G%V40XR$fXbh528(@M?+GuM
-z!91$`9R7y#vt~Gj+V{h#{6l8YjhdHcw;nYw)u`)X8ERgN@NMLaqsFB-bznGm8<mkh
-zi<*}iGaN(B%Lq<jFRJ}kRQVP&tU!&cP+^>TS1k4_@(<!$sd~T+lBjX@<2AI?XNKLV
-z`?(fW{$?{M$1e~rGlNo8`4U{Fe6blOP{(H+m0wR<VlaQJ&C9quf|{2kYF@fg^U{ug
-zOMmN7<Ek~o64bmDqvoZ^40BQQl8s-)#a?TF5><Y}40}=IYEu}Cu!a13Qd8}&-C~b3
-zR?Tn)b^Ta2!#?~pUFbD~9@O}|af<$QnPEFd*G*LZeP&RKrL>plW~0Wx@^?1=Y1Do2
-z6y{QH(hNpW;~qkdd(aGfP~+~x&tMa(-D=eM3MBo{H^YT@+I?~t-bns>)VTMd9$(d&
-zVJ&LhHD<Wl6VpS2>J>9sMvZ$3zeIl)&2SENz8pv8A2Wkq)VN#SCe*lVQR`lUFT!Gc
-z6y=J{AP+U}9Mrh8&2X8MiN?K%pTbF0yF;jPw@dopW`>oh`}9Rle$C_`M~!<7HSSR}
-z96^nH*bM9NAL&A^8PuT0U5%fkKUHQ}jymrrQ27hYV1<KQ<DPLRQR5y#jk^c0z;1jb
-z<+{wE6*cZ=)VQ0>um&~mD*PlCq1w$sjeCxhn8rP8h6AX_2~~Il`4gyd7of(SZ-#lO
-zap#)hC<ou?=)#B@45P+9gmd&~&<y+W`_$Kg%HM7VwWx8Ix<#mQ=b^^E%t=L$LzeIn
-zlv^}|8J%p1pF)j$(hP@D;~vD%V;8F3X4JULCH*fm!#IAE_`$ctVy`5B2Ws5ysByQM
-zVJm9fEoPXHV{{?U402K9&cT1BKiOuu)@9e>c~t&6GZ;aQyVvbPjk^^!?i!rOYRsWr
-zl^K+x#$AjWcaa(9qQ;$#pT)&DTf0-JaraC5-)DvmsK-g!c#!<de`EbwaA(~qciioE
-zJKR>c$=&CcyCrU+oA2hhvv0C?r`&OO#2s|I+;+FcZE)+{LO0*dabxaEr?oeO=d)f@
-z?l@jRxXsg>-FmmyEq6=YLO0*daeIz)d^5l8_yXp4A2QXuDshDP3e@_Qn_)3({c>?P
-zF20fTBKa0juUE~R;W#QiiD%K@Zd5&8X4r}W=>@3$mFvdc)tfDT$!)<T?d(JKvmBYK
-zU4{5Q;uEO)3(PPF)z9S)>&GO1kbD!UevX@A64lQRR6m<h^)#7bEvlbuZ?OI>y9@5D
-zJLT5kTWO~p)z1QCs&>V(i})C-{<YUfhD&%c>C>ow3}QF=22lM>nqh~h*Q5GbjjE^0
-z3`<e{oPC`gM<Z^J+w3Or0Qu(H?Kqn?!)|;V?KXRSlgF3iTZk|4_<WCF`fEE6Poa+2
-zNi*!nJILSe@ogSojqfME*yD>le(kk(9h<}GJa2|W_$l&tdwiG2@56hDFZcK|kIz9p
-zUzUGUEcSejuPqj1D^<^$!3^rWH;q>^Z&PMCj=G)<pz<fppanTZs+-NA301xUucCat
-z8P;O-d>JZ#sTstPQ%7~o4Ax#_<yY~qD8FKci>Q82q4H0f!4T@WNV;`ywOi~a+}T%K
-z{wa6JO}ce%wOfojuN1oZsPoFqF{@|N9d-xYeQu>&<}SBdxmnb8VG4Df81-<!+l8MX
-zz6C#q`!G75QRkfk{3!AHsQsU3hPkNyo@0i~N9}kS!&1r(yG?G5Tj{PHv3v`t{>`HL
-zH{szyw-?__d^^4en^66$LY;4l@OI)0QT<DpVF9Xt`DVEGD(l}Qs()i{tGmywakJg!
-z7VF;vs(;fS9&wZSX5zc>P1uU+UoGl9Q!0rsLG`cL42w|xD>TDw+)e)J!*;$Ha$8a7
-zhcbmZu1n2u`4Ib4{XxY~nPC!j{B(GHyT{j{&Ko5jU+nREkl#=I{Eb%6oEZ+Ij-wur
-z@Amk5)On-A<I6oh7e7w?a<kR5WQOCY<0<L!{T|<fI&Tc#5Q}lD*wu#TvEOU(;e-qD
-zk%Z$oML5Y#RyoIGzZvwQj{jcNJocDjH=akh%M4pk<(kc)1ou#15o#ak=IzP!W9?up
-z_Av6Tn!yZeUZ>4)0JT1KsPfgQ^L`OV>u81r7^q%+D)mk^+5Q>9PZRFO$5E~WRj%C(
-zoAJ4nt4HN4N3~br;kE0no<-F2g438mf2Yh~63-w!VFtbUaJ7Tqpq^HICgD2NJXhm6
-zSb=)}xeT)@Uup&kJe&Bn>#RSEsB&|ta?_}C6ZlZdjhn#`s$4&w$^7-1VK?gYkzHok
-zj;gN-RbLH8{lJH)A7)U53DQ>^tsm8R5$RQCP>I?H6{z_vH^Vag3&N#lSb!>*Zw8AE
-zvDkA6FPOnRs-8JiJ+o#wgS!Y%o8c&`+=v<EV6>0i6%JN~7g6VnDSR09j^eY3Pombf
-z7nQFIm9H7KFB(wo*PCGtYG0J0$`zyX>!k2WTzm!Z&&7HC2+ra#PT@V|Z%4J$;x@Q-
-zsCvp#{VPKCFBjEL993?0zvY`l^=}5%ziBfZNA+(IRjwaZZwr0^>#z@N@HVW%cVjtz
-zg8WPM*3P^;<4&UL8AA2157oa8R6DJx{xzZURipY>iRxd48J3{>myar!gUUaDEzkep
-zB)$>H@n#&wP8`CIk-r?7>RmC^`C#pu$Z!;O{_V4HbFarYq3+wNJigN7^HJy7)zIo$
-zF~dpJ{n?<$4|seV>U>(~@wFabgt`xF+sAzi{i;Dd?yN>V?yNGyO4Q@d3Nu`Kx#e3#
-z<y$brc~rhRGwedu*J<g^9cI{W>CJ6sScuA(u=M5vGt9U2<~%c;c$ux!sN3Q;xFv3(
-z8*^7)YUPI9q}%M)yX9_)yI5!C=G;NI-)%?TXSKRbsQavHPp@!SUt;wvxufoo+l{KH
-z(``f5Q{?FdZrojcvDG*1_PO0|rCWyDpM|LVqHK48#eNCldDQ-%Gs79&!TD&~42JOU
-z$=8V=!Vc7ZN4puep~|<KVIA&fAC=%;<S$0$FEYbIRQ`k+#&I|Kr)zCI6K=cP;MTdh
-zZX7kP<*RL6Gwv{ITtldK2F);uamLke25tCG^3~uwuo~6RDl@D^m9H?vLR3H3uHyZq
-z<X=VQUopdFRQ@HCziVXq`>~XAJ#Lj-;ugAdFS2~osBw*<)+_0@qsG;SYNyo<n=y-V
-zHJL#r{x$gu@FvVh^)t^5b5Z4U%y7BJ`Z<ZOC;tR0|F{{Bq4JNKVLxgf8gM81E8L+g
-zt^Y~4&aH4u-K8rm-#luZQ>bwcyWOa9cA?tsG{bhxWSnhgP>atcUok!#i%|V8G{Xd{
-ze1RG2&135K><eSj-+P)t<)1dgDOCPRGaN$Y??R2U!HuKN-;>pL-kmVR4y+(wy~pqK
-z_!4{$@wpzK<MDHsTlrZt9Q5#jhg&_|;^9iHqn<*KPk8*wU&f-pD>Z}B{iPWW;A_d>
-z>G2&NUyJV|zSQGOJU)&+#4o(S>X|pg5ga1E*W-IUz5zc>d~+4g|1%%esC{1S=D16j
-z*?DcjokgA3#yvdh4te|ls-9}M)Xj6VQTt}{`LWmlj^iK>;9ZzRt!uv-_Mz6b*9_ZG
-z>spCwr_jwu)jNABuQ%c}{vD2>j`v|yy+dX=h^lwM47*VE)}rbyb&F8-E>^~3Z8(qZ
-zIDtCe#!>Z-nc*m^-VrnGL)BZ4+J{qnt^Of5iK@RI%dig1u^gX=WvKc~&9DSjf3X?n
-zqUv9}#Om+I1B9Ct<~rVBhDE6To#XM@9zVCo_V*Yn|EL*uV+Z+LJigiED^U9~;qe6?
-zzg%Jaat5P)Y=#4<ec9>p9Ufnc+LvV>U+VGMsC`*?aV*xzIC`IF^VQ)tqvk6cwSU$E
-z+ds>w_))wQNAPYO#1ZPLMXhUvTa3y-S#JAf47Fc|QSohf3%25|*n}Uad>*PEJ&2S`
-z&$awrsQuB7+8-?*Uxu$ET#9eNA{?e%`E#s%k(-BVcjVc&4+c^DpdS_AgaJ0-#TY}a
-z^HiD5_oNxNpw_wC<EuPA7j+(6e3s>3FvB6#I(K<|r^i>L*16E*6CS^Kk*)ItYMsZ;
-zunV=$^&Y>^;|o#itOr}lzs6?8a00c?apY3AtCq>scvdfr=}*q>8bRGpHKXRa4sXUX
-z4`(A=Z&%F2$qOvpg_lvj9d(?vnPEM$rFNB}j+f>0=?D4du!MHTa2NJrJ->G1(@AeZ
-z<!deBc^rjN$78b@Hlf;SF!{SmR(}FjE(cZr(lf38NxX(%>rnGiYld;uxaZEZ_*pX?
-z#cz^-1UtBX4x2$S))1eInxFYy<_KzDhEVgDbbC<e?R}nJiYk}z^gK6?$~RJM>0PM$
-zI@|`2FY|DTTj=p|)cwHnU)Vg%pxPNn?c;tAx1;hkq1L0?%|^}F;xmZE3DkOwqv}bb
-z%5|g4m7w~!@N_<BNBlf$J?6}C3bpP77`201*D}=l@TF<7z1V|V*KRZHLe<l0hV`iO
-zm8fzhsD9?6`nmKpo_FTgcGSAInPHWOD?Oa!;cO3&JeB9esjmpDD4&ZOXB@SDt4}c(
-zF<KW?dav7on%8<%e=1P@DM0PBY^)-ExzP6S5^9`_X1IVF=e!wCpvF0j8s`A2-X2uF
-zt*CKUE1hvxnPEO^|4!}X^Q$V4>gNDz9DQyVY8=&`Ug+k!YfrZE%%a*IMYY?58c&PI
-z*LZw^$IqW@;~d33^rIU!FU_d^l8cw%K*H8LiJFIgGwegnL$4XOq2{3hH4k;D{#2s+
-zQ-qp_)pKkfR?KkR!($%q^l*oVD^TlQ;PLq$KX<mxUprn$z167st8hzE<H<+$BaZ6F
-z(vxgn7E$ptsQ6)z??SDA2Wnp0Q1vvR=A{}nFI9Lc7NFKO-wc-utiMyJ_(?PDMXh%o
-zzL+Mf@M_Lam1a<m`w8oNs4ytOYYFRnt1u`)jc@sh=7Kxy4!C`8H)<bsx^1X^)P!YN
-zjTzKmWd;SP`g7g6Cs=seop49pA-5MbFI}j4YV~jhmJlvS?UOPyoO?XaLlHlXik~vW
-zLDc@~bgNMNsL<7ixfPzxXB;?=7n6SgRjv<TPJAzFpZ1tx7pk33Gi*ZTuSC_Ca3{{P
-z^%^(BR@_H=t;g4Re4&RE9$tA|EOsIJa_|!B?K;!K4XF97a|_*k)Vk!lan!o3<#E45
-z{zcUKOrh3i(hT~sl=L2VpIhTrx@B%LM*H8xanw4kK9=WkaR&AL(=<lwV20!PY}y$@
-z<x8UK=|+`r!`;|`>TfBYPq_avHlIDHb?8Q|LzfwLpxS9S!+P9J`7+dcmU?=Lrx&2s
-zHygE13y(I(-Db)0)ntYRsC8J&wfI#toI<VRpvMn*d>4L``aALU%yWksj690-9r0CI
-zisf#$yY@(nUv?Kz>pAC6qt<gAwT=U*bxfK;E2`cmx700i3*5CwSiS|+yz6_Lv<?#<
-z?!oH_ccbRD%M7dVM&ipozRcruQS-f&V-BO{wcBlSE3k?9BGmlnpvvjZFk08OhugZY
-zn&C34{UtM;M&%zu)!*e7OV&%@kAdOb!)#r~Q1PQ?*zMsi5AVZ+)Kl*9Wgee{ht$tA
-zm|WVM$!5O!b=nN3P_IW!qWU*shT~XFc+3n3Q00<l(190GuFb7?Cm(A4NaC|d?{hoc
-ze0(1D<e5P(s{I^P``Km~$EOk2i#`}GKE%o`n85^INV$5{KB;vRZXRmC<+ysWNBeDc
-z2hRtPe*v}cCQ<ut!VLOQ^>w>-Zkb!`CQ$n<$HS{}+kZ>gO#CeByfK3s*R&Z<V07L<
-z<r_rR!&d-A`?no$Al!!P=RUli@OYN(lM&SZ8b+NrhD`p>leLpH!%o!x+K1Ywb)H`9
-z=@qDbTa4O&+3rH7g?l9Xt=kMMQ2Q(4@w_KK+Mmlzp3WQ7sQgoAm_+Tnc8}*VY?Pn8
-z(fOnf?_}O<&7eER=N#xy3F>|DY^T`egjMd#yaivL$)9j)!EwSek8lNkfUtZ#;WGRO
-z!t!jwCHPUo@*Kj<nf`82fqWw21P&3F1%&hQBm63#L^y^YCM=&oc$t3n5|)o6Jdd{%
-zmS+*3#`h7H)RDt66YC%>A49kVIgb{|M-$FR=Al47mN0F{&d7|t?nAi5pJaS5&f;x&
-z0N>%^x8Q3C-;6)NzxMD^`~u+{J=}<sgs=7ROYolwzsSQcK$YK%s{gsD^6Z@`ybD$S
-zX&ycYRi4|7D4okm>~g|qU@0<9u~(wT_q5E|Ba86qn82r?##xBDScF>VXCTC$in`uW
-z$3rUIgd20`X;A69zR9H9;nuqqZo-YZ^E4clcayHJYl^RTE8K(|bLY9fMdjV3+u_!`
-z6>h?fx$}%PD)0LB?jao>u6HZkgd20`AK~TQq}$=vyA^K2jk)t&pQ85Nq}$=vyA^K2
-zjk)t&m!k4+((Q2T-3mA1#@u<XM^Sk<>2|pFZiSn0W9~c~Eh_IO-43_jt#A`=%$;Y$
-zMde*x&lJ}6OzJu&E8K(|bLY7pMde*x=c4j%y<6cX+?YGhbto$DCfyFV-mP#GZp@wM
-zdJ~m*lWvDw?^d`8H|EZBJ&DS@Nw>qTcPre48*}HmPDJHhU2hcbaO>R)H{r(Id9E8#
-zc{k~Hxb<#@n{Z?9JcXn3Zqn^=>)i@B;l|u~&NKY_ka0KZcDVI!g`038DmRK3a%qu;
-zymhF@!}46hO&*qK6Rz;E<RRlDd3YL?mu%@rW@oNuu4QItPGwDJWoP!slkx1#?j1cl
-zvNK2X#`3Z=yUy%Bli$xA<KMx@4LvS9bKu;;b18N18viandFjd7naT48&dbi6K5vG9
-z$DcXz%<Rm`XHPvlJG1XO{m<dw=k-4?JG0~B&Wp1%$1Wb{-<6A3`FFBvs*3ur=)NL5
-zbK;6g{$0IdjelpuxiC9(=9<}SvNP9i=xEN)oNJ!v-|-tKZltY41BbFRI}djq&dyvo
-zyvV<kEmJN0`>Lr|WoM3bWQ=xX(Av!zoj2q3%^5SY|BV^RH{#M8GnVD(@r<$K*wvZQ
-z-H8jG8H=*#mW<w8aQ>Ez1v%WCG17}2w`O$Siqp4d%*f=sG6vp-%kRoqkps774Bm#b
-zw`I)9?!JtkKAh{zn3of`XH4FXGoQ|w{WK1ICS&k3xbm5dRXH)1F*%04pUvp|EUtYv
-zqvLZp{jH3dZ(;wpGm_uNrEg~}%dzidjDH8aznjtXU7Y)F#=IPw%NU-+wYiLr@8Q(<
-zGN$Fo_cKPnkE1IYV=LHoUq<(RID22loE-d3#?WtY^*0%7a`LwsQ@_Q&)r|gCTwKjq
-zlC!_dnERdL-;vq>4tC9GZ{}Dp&fcCmcRQ}WFLUjE*f)^bKY$Z=W=`ITGk0aq-i6Em
-zkh$^?*fE^hIgI@ynaL3xx+in^9-R49=Ip0%_0ySapH})<W^xQ?KbtxCSseO&=J4kg
-z|Aoxt7jSqYb7TT1zMMJvWt^YOT$sbj?=f^-`$1;MJTA;<F3P@pGyCtwj)lz51swU$
-z%+deE{vT&1e~i;V$(;EKj{Y=r?58;Vi_DQ<VD~RGdwz+tzs#JIBfriZ{WbQiWcIG$
-z+)C!W99_*ETgBerW%m6J=YN;EAXjhBTDzI!tLu1H_i-HR%o^^*nKxz4z6sa<CadGk
-z*!$M3zPIAY+p<RAru3ey*&ZBxZ`ROzvHyKp$@k&J`?DtBkE6+~u_VraAZy_RIP<}*
-z*$?8{9a$X%xIB=xBKtm^)&F7a{`;(+zn6Ds_1ujeLs^|e*!!`pzK>zo$FsUWj{Tp^
-zN`4Z1MzeZHapg-{t6x(3ce1*_gHzwhnwCA^&FcLw&VDy*POknmYwf2v{j;o@pJ8$-
-zYhVc%m$H`R@XxbGevaM0$m;n8j{hQSLQWo!PaWsX)7csC>cqv)_>vrWQ+)7E*!4H@
-z?!Uo_zll%E<eTFIZ^r32$7keFSA4h&=epwaa_N@%@+~;k8=vmQu3O{Xw<`YD__CaO
-zSA6<iioY%1eVgKMi!aNmzW8*X;%|?4->&%E<I8gL-SMe+<LbNPYjW~E@u~OVK!1F&
-zA7}dGv$FSN@xG7Y%E#iXa^~al*^lGUC*s4Oz|~L0*W}Dde0Bu8?umEbgZ-b2CqIV^
-zUyLt)5vNYXr%&MQm*R6@!ojb{hrW*UUym=y?thN={4-8Y$ET)oWF|g3gX7<iPkbMj
-ze-K~!0nW_FXXkNXAwIZ(D?g8~{v5}C6(9eV;(r|<{51~W7azF~JN^*w`~!~uAwDJ-
-z{wKcpKbY*;G0?#^p}TWOPbc=heMkS>aq=BIrrv==Jv)YV%~-o-M@KI%ym!aqdvW4@
-zJ0{<Ueed7V|9)J0|BhwZbN7zkyK(vM9V>ErXvfSD4t`|E&_}pa;5pb1E>2u1Q$N4p
-z_eYYFd#y#@P-N+;?@O=bqNx0pFSio;B^FM7A9}$vEu8xP^TQp4sjtH8+wb9*diW(C
-zzQ)7jT>q87#KS+h$?8jepZHIoV&T;Hk3a4&ES&nj?XcLwsqe=ge1?Tn-)DWZ=TCkA
-z^e;U;c8iVYJv`u1`yJl?G45v+u21#X>q~t<@h^NnQr}1XMW2u2&s%-}<nxjGzTvN)
-zXZ=ZizwqeOEu8v3+dL1qtXTQyKGo7w-`9D;Yb~7m{>{AeEu8wk&KEz;!m01id=U>A
-zwO*<3!+hoi7EXPC=A_r3`aa1oc>SsGhx~xopZY$@d9Oe9{f^)B`cvQ6_$jYH_5F_j
-z_y*czO<RuIe$u}i!+lC;j;Hm60Y6Mvl-}m~Ll1X&_-5tj9<}Zo%YW1B2(vyX_p8F(
-zLy!A<y-;E9$yYsmnZn%T|K7uw^LXcx*@=_ke`_bqV~B^<Tm5fPm>al!57%@MemL(z
-zJ!0vf;CcLWGCE@Vo?QL>JO3+OPMi9<crW3sj#z$Z`Ol;-rROwS`njII>f`?{Z7aRk
-z>$`Z5mCsF;Ctm4;4OV`p!qO9-ei!X3z5bP!ewLSC_WFPB>9fp{es=J9QTb;UEqtkm
-zS9V$WS%1anTQd@|0-n#;&zrBd@Wi7m{IV-7occcHH&$CX_5H(de}RRIIF9x6AD+MB
-zM;6xm-Bf=m`%pihx<>s;#9A7oVC-2uk)ia;Gi?4oa;b&$EIIZ)?_U}7rk~<kOYgT}
-z?8qxDocccOH+lKg_xpa`^Otd4>gR9&((>o(i4lHYPqXTeUYF9(<?PjSvJ$a*pU<zp
-z(DJucS^8OCzH^_2-*c6vH+cEQD=nP*{@aYpEu8wk-k(#C#+&;7;P#hUcy_1Ncd*97
-zsqbHXlb26@Uu@v>o%;S-o*Rq$uh-4=^K*_x^*?pIUE%3^olQRlKE7EW-vJ+A>ibZC
-z<MUZxYWaWf>z(?()f;?#4HsMb+1~#y9wh1KXWsvggso@j>!13*+;i(}e0guS{9k*i
-zg-70E;VIt_wcQr}s^?#MyM<rv`Fr1K;TL#+%la++#}`|DiH}(LnAca@YvH3_-~78Q
-ze2&-GeY=G_eSK2jkNtEHr@pWI#U4(5fBM>G)?VuS&_9@(zpq$*dSAWPyPqc+^)v4C
-zxwsMqV{h>Oj@)43Z+Lyp;}(9H=O6r#g`e-?)c0Rsah=w?Bl;r(%JG>T?T3z7>zS5+
-zs?pN3{rvG}Pha4=rk`6YExpXsZ{Xag^1W@AuJ^5}{t{3BJ5Mk2^m{$M$kRXN>0__4
-z@=s%*sQkRA|6zyKANTPOU1I4ip8iIT^XUBM>+>y7@9^|HJw3<Q>-V1C<LT3$KKdSO
-zKlJnOq^Do_FsncDGf&@R?HBp==E7`CujEN;{k+TPcRba;*Ej0nH+X#`KehT6yuO6j
-z_i3+hmM6LO^Wy8Ry<snZpVv3&;jejp{Xe$)3VnR}Uf=J%zGkoQqh4Rq%fHv#FZ29I
-zJ%54kzhC-zay@;IuivbfKg-vz+vi8`4~*8|^FPPuci87AyUEh0z5I_k4`}@oKe7J*
-z(XXF%9zN>rFZ%iChrS>6J=psBx~H#teQ)#eEqnMsJ-q1QT^`Q%{$1w%(H{@d&quh<
-zsXxVjzWPeBg*zLf<k<gsdYPx6>ERwvzmn^Q%2#^&eoycB^xygZuJQi-^Fu6uuAi@7
-zR6#haBUb0>PkX4P5BFI6cY1ogr@z6|Yi_ah>%IO8PY=BQ=`KsZ-P5Z){jjIE{H>+`
-zvC-PE@cEeX{7s(!gPwooR?A;lVfouU{r8@p?6dTCPw(>dtGvI}e!M;PIxAo0?fuI0
-z_j&$F&p$Y1^*u2)f1dxpcG&zh`~FD!{CD4A`P;bOYCZOS$ijMFT;T>!&+D*o+oGk9
-zy}`n@etcf*`>};_>F2qbmY(hT7d`)g@7Evedil`g$@|OazMk+ylCfF8zkIca=RF+v
-zaO(c_Htt82f7#RT_Vj5F|H#9O9{!5wpY-sn2<!Tx57+8vPltt*Z;67jdQY$Dws5zH
-z=Y9WO?cs!9|K8x?DL=oykMXMhHb0-<?col;zP|M)Z$HD1rzTHNeSiEjy}s)6Ed7j&
-zE&pn^_2*-t`se(5^cXK+S!Vh5Id-Kt`~3p19Yx`WDl30w+`>s;-!FT8`cek{T<P_-
-z2Ug!%-k$+pjMdL?pXc>Oq3Ca;NA-6<$|647Xz8mzv+zeeT>K*of857k;`gWj;^Ddf
-zw)Cf5YUS5TE&NI!Ps=_F-{#?(0t;W{{cYjRCi?lKr}v$0;f}{!ebruHt%p0mX663|
-zG+$$1xA2GA&kFZ^&%(Sm8HEe`Eu8Q3SvPLs>r(Z9#lruw!}3QjSQ7OEPw)MZr62Wh
-zmtQ|_yUFs;`1Sky-hS)Zmj54oJQF)De6`O{4f{er173cf7g_c5Po6*V)F>GH4_~iR
-zpN}{Dd|4`g)5^<F{=s4%=Ji+UMwg#wdw8za!f*2W3ptPI=dYj3@fhdvlb>&9pJU-B
-z58v(SsmGs>^YEIdS9v(@$LF^_-0kV#E4TVy@8P<@!Yv-I_4HqO_*<U-ZV#X9=@TA)
-zil_ghhm#&2^za>?f8N78nLmy1Up#yX=S!Ojjh@fma=qOc{?`7@;WJ;oIeduo>&E;a
-z=eXP$z9cRG6Q8s>y_^1Q%>S9z&EapPr9biP&FNoHtM8Ju@OKL~=YLhx=I|$<wK;s}
-zvp0voab$D&V)pIE{>FD~4(okM8`HnTd2M6(ZAUkUfApBm;UC|)IlS{Jo5K&`zG7p2
-zyYe@Ok3V{IxTJY=xGZgc>k2ogzxQ#Q!~Qz8Z4UnZRoeWWan0uZ8EN&OdCuna6W4AI
-z-_3b;<9Kd;<>v5n5}U&z=lhNMKVP;v+>%!R;rh+#$I|xCYtP-B{^PX#?@7!5gS7mK
-z{hP~wAuazoPu`sV?zH?pY3XH8+?@ZSwEp~k+WbE;ZGK)F^{*n9`ne`L9@fL3OG`hV
-zmi|9!>4RzM-%gwVXQhqzCuzrDkam1MKJEC@-_OWMbrxTdc6>c8?f81qBRA(iD{a3%
-zG41#&jmERyz*SNH_4#;vbiA&I8>97D4?mal|Hl4Zn6}@Z*S0zR>1q3~{<6*KRcYgy
-z&D)&*(nFiWFH1ZAk2P#gZ%;e^=hKe=JJOE-S{`?A9FN|YzcKvdwD}xOoA3IAoAclF
-z>doQv_H7PVr5*pzd+g@)o|etwkER_DnJ?d*o{^gt=Du%Z|8Gca4xg8H{{2$g{Ju49
-ze!rJCzY}Tmdr{i?`cY};>kp>Q?-$bM_Zeqx?%x?{=f5wf&F>e}=J%~>^V^y>zqh2#
-z?`qoo{vd6BuS=WXnzZ@7E^U5qO`G4&wD~>%@aFM-I&FS0ZQPum^Z3nSy-#}Mdj56V
-z{4S@>@2}G4_r|pOeOcQ4o|krgd3aiV|Cu(w$+Y=hOq<{OwDZ@a(#~IBO`G5Mr_Jxz
-z(&qQ`Y4bb(@Xhma*Y3^X;Q5=w*OzV%e=zNOa$nl@`MqiVy=KSe@}(DT4!<(3y&t5t
-z_w=;;t!EzFT>ckn?cJKzUUyo1x23iB7ir^vLt1+W)7nd<?GL@`xp9BJbpPh?^U{uw
-ze@$y|=F-jiyVJ%$l{Vk4Y4d$g+W23c)}K$NjXyhW{55I)xifA2x23gLmNxz`rL{L$
-zzj-{jpSw9c934*;vDD8cq0-mG?~RW4^>C24IsF&W^>ICYDmtFl!;J^h@<+$VdirCd
-z`|tJePZFE+zdgP=tT(i7?B7H*f9vHdqV-x2zdBm4_3*z(^S2&89<A4U_@UAItcO?A
-z>K{$3{|{;PKRVi<>*Z(C>c2Lv{^IEVVLiV-@49h(S4Zo=o_={+{SS%Oe?9#dY3uo+
-zwDo*kbiG*5|JJnid;*WJH@5%lwDr6vZ9U7P`;qnfTGH0@k<orzPya;PdhU3I+FSp5
-zRoea5-=~Ftn|3^8Uc0&cHPQXvdVRl%=4(Ct<>zhAe{))RSK9GCo|b-1TKH*c{eQ%>
-zHrL;hc0T!O+VTJIY5kji+2-=4S8oo_U$r@W_?pe(XGZI@KHfK_)&Ksq`_)gSjVCKw
-zpY`&e%ToOnCnFl7=MUDyx2L6lgT>sK|FX3G)SMPRnz=duEwr?8KV(MrooqhVALU;U
-zmpox}{wJsP|D$R7FHg%~o|ga4wDx|UcK`B@wDRYsh4a$t`?s|AW7ifQJ%9J!BR93Q
-z9=`lw>$Urj+;~yx1tl%VUeSE;z~zlMU48Jijh8lDuzUCU&%X90uiYm1(Sz3?+TVKY
-zNaF*@eg5vFjg1ZI8LvNlZPWgvO?wZw+!VX^#>N{DNFo~#9Z=WyHtpxXn!~J?VjCK_
-zifug5aCHBR8;=~kj$DkY<oSn>9ctL$dhqa}(#rj<`(J$i?rX1VY&p_+wDC}D6n*7O
-zt|aTx*Brc#fj2iFK5)t5wx|L1<%-7FY%|=gCg<vduik%boBUf%&-VFGnIO+<-MqfB
-zwf3f##!GH`;r>I{H#at1vH!-#7aZDq_)u$OTWjoEAI$TwylU^I*H&M-r}ElDi+aJ8
-ztZuCN+VhUK9y#yA^Uq6L@n=R8diaKet>;DUoScQLm@VqnQXFV#y1Hrq5f+c>S7fTS
-zgNKf`?myIeaDQtf9Z_1N`uO}Khi}}_%RR54>HP;z*U4)yId-tQ_28jvuWLTMpNux-
-zS2SLK@X($E2O5taO+_^xYVZgj(fQ|}_k5PPInj9J$l)WYY{w2YwzV`KXl-n`)S@5o
-zUT4l*{&%anb@r_mvn90*7wkUouMQnO*3xqL2whBQ(<QDucIbe1>}i&AeOsR<)84~J
-z8aHM1$vo0{T{AO63)jB7@yJnY>DmKLHymxf;o64%M_zM~rfuF?$NlS}R~$LmaDC&I
-zuXrV;uiBInO?fKHHp<ccS940x1U~!ZMmxV`@3AAVZj4SPS3XPW2M=9;<+E#2XPOtk
-zFs(q@3#%``^o7s5sO)r^o*iX6zvP0_)8)FLw2H}XY}j+GwTXlO;DPAy-+Q>B@sw6e
-zF4W1UROgy2cVEGFJ~hjQdoI2D$_p>s`@-!qlvcfP&)!pNzUb<zJs0f0=#==f7aTg;
-zc!0C#l^4FSa`!38Dt2L6>6Y=k&%fZ5`1R^aDS3XB&Z=m4U486Et;y9FyyWWUqc3Sr
-zTb~QAzUjsr8(WV==lvJ&*}L%s$|ZtR%)#rA9X@vSlABr^kM7x%UVgpZXc&7M_nd!$
-zX8rlTqfb}Ddip?$Xfm$VEbcjQzxAgk`~hSwi|W-hKY+}s6?p(ztzIqD1IVm;Pn&h)
-zir6J>&)%zVOie7yx-rA~7wDo_bL4RA;RA=8Q<*mA@G1`MDY>NV0p#0z^~qY+kLuGL
-zSvT$3lUjkx_Uyf>?Xs(DQ@wbg<<s`mpIS|7!TvAhwJ?8b`SoGgM&G`k^OYgm;FSlj
-zZ#>${VYt<-c{cXz1Ib3$x5&1|PT0`amZ_KjZ`W`0`tR9O@~jtf72kh77vz#Zr7j(y
-zHhKT|y4Dx;|5n%5i+g`{o__%g&3P=fFdT%HTTDrmZNoC3F58A>-X@#3R`cvva0=hc
-z-Ek}TIoH3e_Lb4C&W8KtQ%?6aCFhsC=3r|R_bdCaYusCM)2sepb62|DHj;z)QM@lO
-zMe4G(Rr`asCE0N@cFaVc+CMDWq7=r|F(PG4dHMzVV4u7sTA8h#8H+@t(dY{ed}vOC
-z0RQoy?*1Cw#Y5l`2XXwip!Q?1SWUNaNOqk9E9E*$)|2$*hqe=ySqlFA>0T>i*|sfI
-z#?GD5nBzTrm9%=-;cT*vQy(_R<@^?G?ag`>6B}a8Br(gg7yeWCg=<<@GhKky_hM;m
-zgY|Ro_6N(C$vWB6>cAWaImT`)kt}f!c0y(Eew(Wbm6g-?!wH-l;G{ElotJ3+BLw4f
-zmzwhHOoZ+ZW??r0UFTr~r>8W8<L1~s-%Q@sQ(C!bod=jn!lrD3A<VgE8FpK4lML;u
-zl&t9{6nQ*5MUBU^Q<QitJL~!4Ahp>KAqTNi`qgd0l<?-8FkHZ?<=#1G6Xn`DW}Y<9
-z6??gPuGra4b1hVFkDf)3({6UMbvuKrYv03zF7b^)mrcV>{iRKrLQOGMCQ>s@#dK2F
-z-wX8j)or#kqZ;5w_Xm9}N!@+1>-XAqW$ZlI#{KbJZR7q}t~nM!JDtqSw^!@VU$JPB
-z4Fk?yX4!<(aw(LlD`uH&JUBh-njJdcz+oyII%D0EDKZx-vrwnyK~kub@BkJ$Q;xR*
-z&RADm4FgjRd2_5{aiu@>xh3sXoE;o*vQB{|*4`;i@UhLxL*%i|!)kn(yX_Jp3a=RH
-z$h_&|$71r5{Q#dnY!x>w+A>^ih@+HyiM!|ECFXwYcz-s7)5P>_8O3MsKcYB1+b-WX
-zll2-7CTEl7+5H-QyWj|ao5WjD@zW+s;a7zi!tL@4cy}ReGVviul9kznaX3k`pQ<-l
-zdBxnp>{-1Sfh6HmlrF(n@NM!Oi)IYL6tW+pY_T0$ZW+Fd^92iKVQ9jKZAm>QwYtnZ
-zVY-Qf_0#<eQv2vS{X+f}CpGQ(C9h@1N!s)D($q&te42(!Q>Wz)6+H5(&Q+aKxFx7N
-zw!DCFftJ#8hgt<O2v_vAl+z;DYLudJ%yXP0vD_2%u#N6gsw%(GTS{rn^5EBzouzqX
-z=qlBF#PIE*XD^2c)-dK7Dj*ULA3<bFEZ&I$TjaH+e%joIfe%oZxtN>o3DZmKo-pbN
-zvr-AI08@0AS*e6ta;Qq?`LntzDEpk<?)WlMixe3cCT+eYVbbQC3_5L&ZJ?9o838(-
-zw!|5)%UpJP0Zm2HS>B{n6jVs5sHcEZD5ro(QcVGs)i~DMU`&03Ky?S}uf=-ThY%rK
-z8FV5eC}0p^C1MU4uW9T-Odo>)%jdrqLb?tRx;bJNxHT;mN^Z`v{#qMD#xd5US4L6=
-zdSyJ7(#wY|9y-=m1~FQ42!t`9OV77{{kc#(4IgVYipZv3kZ<Dpa}l%D-|!7ue=bCz
-z+p+#$Swag;e7zj);93Q+hiermvGR413Y#KM>3T7HON!`i4Jo3xwL_;jfL?CvWs;=d
-zR&=Tct#q|B4Txa3NS(>0;|!h0U-59~Km9eBeGhQUGa2@!Lp{fDxLxuP&NmOM2!kii
-zY}Ec7E}b5YV$5$G=jZ&^ff$nrNWin#TgQ+5hkerh4l$RD@hE_w>%I4B<VW6TKT3!2
-zyFi$hqYHyLk>4ea+XvVh_jhEfanU=*)iNYnk+m>#oCq}0r-}j%!h@f$H>O^^JE5C$
-zz37q<z5EVQ+@20AI|n4pTX=izp0Bg05Z6!ii4Gg;<@tH%IE$a39X^a^@OwG?47y3W
-zFkafNaUc&K7&CuT9esiElMc;+UNn|m2ae#A<@Dz6dg!(gOv7<4uCv~}atUvGFs|q6
-z52q6?XDb-eub*&OgX1@P3#ZV3@F-q<`XCuy2;?Ee&LU(RAVvV_GUZGramwUuLqkx$
-z4-)U3L6G(^p?Uwj!F<l9cilc=JEGf)mg{ZSv;pse-fEk|^P#hshXGqdMx(m5;qH2(
-zs@Tqa!rGu^C#sED2p?0IIN$1)q3m02IWMcl8fJ;`_k)Yc8~M*c`Z9Z&d1Pmkd8t<8
-zalBNE@;F`?^e(V<4r^$m3~fe<<U*|`q5sqYIPlc%%)o1h;KTdb3_!`PNwV`JG*03n
-z>omh0Ibz9a=NLHuybY^mm-L9X=WzT7Zq{z&ZO`H8p4PD4Q(MHbH}BMjZLu_`G;E6{
-zX@Q}on%Ey`*cOZO51cDGgXxHMf^rmFrEp$o2t(C9%IvmrA(8MY5VuA#E&8<r*rtnF
-zGPA0fNO(UAt3+O4G?nnmkp0vzQpiy#&+R;8<Pf(y0n)UqumY*3$SNf=bygteO07UD
-zR9k_VE4TuwXdzW|ZV`WdLDIY+u6Y6L#N;JP_izA#h({Ep!~da*{Y5fx*Q;p1+Yx+g
-z>MtGv=6XJe2?p!y9)5V2k104p2)!8m!nM~~t;1!|-6jx|bvqL&=LCLBC|icVA4qu0
-zz`%0u(mU_gxy=Cj=z`H|mi>-3>%J<jdsJL^2hW=0b9V4_d*mnv=iD!#<4rV)J9xhI
-zywVU+KLfA=V1puy=L#rQO=rM9G4!B@L?1kF(7_{T2ZPxR`uz15f|i52oTa`^06xq5
-zw!6giAiak@xj%Pihk66%`t|332kD(WAhb6A^8S8&3^tD0Ql-bsC6asDCec-OiB=DG
-ziRd`!Q74JpT_@pox_ShM$!Y<kfp|mQE<KQE>l%dTM7NKeG3grkmlODN@X#ol(esaR
-z0C;zr!mub;SF&F`uONr@47wX&>hm)(QxzX>7SWSpJOD$;FKvw-6_&6Ek_wB+9n3nX
-zkX{VX9O^w$!${IX!IV4`nLB!|CLfyYR;x&H)nYj(JAVxcYL_e)gl}y%B&c4bylONr
-zYF1sXNO9FdiF7xuA%a;HHq<C-wXe2G3Wyt$J^_h@ka?O$;B-lz9>|{i<bPv-%5$D=
-zkDdiWL(A>cKS}Y3{^yDO$K(Ky0g%P=Y!l*nrwPq8w;Yl=A(fLnVR_~JNtP-3Sv9`2
-zSa^A+q*h+2i41UC+GB1B+9y?t5F?JDiY%Fu8h;$N6-lWPhqksYqtU{*BB?MAEAqv$
-zo=a+u0+uOB1T4#xBt#Y#dZuI^9nF-~bWt$t?3t3a%4=gv$}p_OhOb}8l*f)aw7h5r
-z9q9Rd3`hmbl+>DQfFcUXKy-#$kjX3~fo4jQx~y+8Q&N+pPXFtesrtNd)=}jh&r5XZ
-zalGuETgFqzhw<D-O}&H+TFv{fh)n8ci3~Og0L?~lS_mb;C;)TG-Y^fB;RarTHH%<f
-z@+>3gcNk=EXoM1I5oyY}(U-8PtT7<S52E}15O){Db?vs59m|jM=vtf(7ko}8j9sC0
-zve{hBB0vWNCK;gN*F5`_vbL3>v#?SjzJ~~6&$-I0fv+=_iE#{8A{K5Gh1_-U)&Mp*
-zjP{bf5~qw_Mhqx>8AB|nM~p7L3^kRdI*QhW-G~;4^wS_or*ZTgM9IAm7u?{j9bWnw
-z@Yw18GIE2<cliJ1duks@eLMq`Yh0ATYYz1V32g(+x)SjW2=T6qO2o(+FZkK}Z&Cm_
-zPmUL$B&==Jh7+Za<an@50K-BPYSFWkg_a@en^Te7mu9vdmO;QO1UgWGU(3<?nLg-R
-z3|&{c*odPeE_N)E-`OFM#@z!*#6@ty`GO|cBcuj?_OrW(IG#qRUINwtHsV42lc%Yk
-z)G}Did@olTsM*~k@?na9O;tdF)GZW~fw+vkI=gC}H@r%R!$St=9McdDWOPUf)yLtT
-zg0xU;CI}+?+I!kyk5z_K$9SwlkhO#4jwmx+##7{WT^}#nN{!W_Qd!s8u5lketn@{+
-zjA+I3+Mx{hoZ;4LWm|d%KEiF=7<I#J)cqu&tz67eUPW$Jk!(9;_3%WtBdht1Q7G$p
-z`aLKryC|myOIf98b@D95Y$%uu-78(_rXgV8rr{T5iBm>7f+g<=*v(q`DFe4w0ZtmP
-zwMx)t(7ZvGiVC(BhA-IFW3B><ydfJ5MYGOeXM3ID&L*#D3|)4Uuk^M{!GP8pO;e$X
-zDxndOgw9gmY`99vXt-tQIW!zDx3gKe(HiL8qH`Wc7Bq6smN&^BQ(f{Hgi&lWDEbbu
-zHtY<4ojgXtuT4B~9bB;?S_J13u;2E(B_lCUMHjL?K<}k=o!1OmtQvi^p2R&5CP{)m
-z$JKH;iDI~FEeJX@NS^G((K77L;>kQox_^e?m%LBlAc?m_zEE!^U`T!M#@{Br?-aAx
-z2v4tNvNYNXxKY3_v+FMh<VHHVsm_Q49Z7(T8GJM*MU6eDJ(*15&lrs`2Ce=Ekve#^
-zSi-Y5WPjVB#1Fz0#D2bq!R&oyJ*{6A>b9AT)M=^+I8+2=P-ZG1!k9q}6cGLdK(its
-zJc<|i8U!4fGfcKsD+ma^3Ri;i;m>wfnB&}Tw2XeI4a4714ITR4ryNy46PN=TZV)`S
-zzi8h$3+yHcn}IT*$F!-4-J<@3+ISejzx@dCt=1LKZ7W{x!#j+2juT@)frQX!&}B_X
-z*eB;5AC@e>2VQW5d}oTM9jU|WopA*IyGTP705NvWwzzM_G+U*UM^3+Fev5;#u~wm&
-zSEgB}=t*jpV-{6tmMwELHOn-MR5Z&LWd*G^%ar)<nq}F#D9Wf;){_n<x8M;RRwT)F
-z^04=Yxyw@@xo2l0bBA}@U@?=WFpsDIE-Vg$8Q$-L)Q=y3aS=F}hoE?H)(Fq11{{|#
-z0RU}D#^@f#g^66~6SQZmjsNTojKsiT2ap%$Y(%_{UI%y;#a&<@REGjI|DZY$fS%ze
-zlzV!F-wBmuQ4w?r#7L^@sA1lUZW`q+z#$4-7mWT4m<rK83HJgQv+N2%K>F~J&?FyL
-zhaDlKRHyc^83ZF8{K@&G0M~FL6kn(4^x!TNxZWGCnB4CYr$><km#!<p2KbaREapSf
-z8BwGP83x)E#vOj#qfRPfev=C^%W-8Y8xyd0Jj=2~{M>a6@Q#J@|MGs`G3=M#iVV94
-zRyEwRFD?ot9(jOL@>@cUg7O`x)eDN4mXr=(y|@-CtXWWmcd8c@0xPNU)fs@uawdFP
-zL328mmGJM9K`(&=f3(}XuD^Zu!@sw1v<tuf@*{d&kAVWdo{&#r%tvBL!*>*<h)>?3
-z1cO7_eMxY9;b96pJ&97`{Ye!l*-cBOl&zNi9wxnD@%rVq>H75<?pxYSVhDEm+V(HD
-z2zgg_LDxJv*z*eRNZ8+L{G|P$8HUQ@Uyu&wxGaC0eh&g8-EggQ2WLO*a6LL;Z=A7m
-z?H6qOn*8?EcqvP)v3k(#Iz@X*vfhqp4?q;86km#B%hHmy#kFiB@aJEy)gsoBX_DCo
-zoJnWFu$n{$aMdI!3X%(;>PT-54YteBDxIR3u~@SSa3Y_78DViX90`%nKbNAMG3-_2
-zV#ZdAV#cDq45Ov%HPd_!rMWxpy{p}e|IL0x+s>}kaSEHE{G|$Fe*ptX-<3JTZlr#)
-z0?bB}m35XVhOXrrUvGrgZT;G`)8)riqZ}|luA2OFRD()WwxjH{DQ|V=mEjF_&_`9G
-zbk9dsqIAy3RHAfE!Oq&?XehN78m+6uVraCk604!Xx(d5Z+!@qhjrLxXs<K?beE1x;
-z_1Z_(W$U$%sY_UA>Vj^$Uz=aK3l{(nAm2;A1Q<fL+Qy}PCdjr&O7`A~Yu5M63OB0T
-zMono8=}q3*-eUN3EjPCxSdX$Oe^@<+QB6%Gi`7!98Zqihwh$O-$Be8G;BGm8P(2(X
-zs!*wvG0PG_rCZA|DC*65hG($D3{TZg)HLob{-jPd!!(t}FRwG?Ih<AMeEpnLr?NAM
-z`5<3Y<Bj$&hCwb{(FJyZt*kgB&}68A$zG7q1BaK<$o4)<7rU~QC-82P-(-1<$E&<|
-zSy&Rj!)5a22Q%BdEJ&DJ5>H;DWQkX)8&iMM70X(80plorg@{}e;9Wu*JHRnn_xSJK
-zB%N$h_IaUq|IMGvub-6HPySeWZECjrjPPp84YFeZ7?V|H5(D^i9RiAGIp+m<@J%X~
-z8+KE+nc_==w4<TElFK8vCL?vJK7tWO$qFV#O|fjojpQt=$<1cI9L$XbMcM$yf?>TI
-z88;c=^;)F6eBbTEw_x>8Y59KQxNYTATbFPbfGE{+gJ=4ISc=VJK34a9o6auqW1imu
-zMMkE=d6anm)$OhCU#>AX0+J*+8!_m_)~1X%SY7Un6)w*P%81$3`sRms=@(Ps_CIKP
-zF412P@D`kVJn4b_;3#JDBLh>DUoy~yJP>ec`kv)wpx?ys${!LX<ClJZ^Xx273z*NY
-z-pLW?)Y$nlc}@wmEtBP>m|H~{7~e8@6B9`O6{m}JpA1<ArAMB~#1scY9$WAs<T)Vr
-zIL4K*y&z8uz_##ZVZ9y>`z6n%h>Y@F3gu_du^s26+8!y(Ee`$z_5kv>OCA7xiu~&E
-z*W~h|?8gN>&s{3WhrHpd-r0AR=_lI@N~mAeu2ocgLAq8k_2bjEit;Z))+!{{*jmM4
-z)wR*XI4u}82+<}zB@It946+ycxXE7V1Bbl8k<%s&<vdO@JX+a^z??$<1OLQAE_68?
-zB~$oP>}ItOo>#kY8m!h62;D-UC`wZN*frc&BhjumEBu6aC0d@NT1X7)g3<00nH(w^
-u{D*#M-uZ+7)%oM>-~T=1zgnF?Xe#DeJlO+y^lT9&3;Yo1f6o3z|M!2$Kg%8f
+literal 169880
+zcmeFa50q8cecyZTTo?`5MrZ^`!Zs2!DMq*<DNb-qUhpv2#WG0|9@*H&E!;a-;Cn|l
+zI0$fq8zgi4h=TiwhA6x&(&G7JlY1{&G>ghSpzEQUS&usETckr?XqUR40*s@MP@|-Z
+zt#DNfz0Y_5Irp41XJDkr>RNf4wa(mg_SyTlfB*LW{eJu3`Qz9A;>LS}AQSMXe;r)w
+z+W2=L7k~F~oywZq)PMKwGDU;0stkW^?)f(Eb-hQ4{B7E_WAi`VVejqpXa3>mKhu2n
+zcjFtI@LEXxr+YHNuY+JPEqL7L(eI{By^lT`N!YaM6RSS6s+r*NxVxDYM9HwVG+%Do
+z^l)KEA^IGL=ka>N75w~{GBJ3~lJ;)XrboY4-m>H8H|_YfuWsJHdCR6vaeBX+w}75@
+z1uvH}hX47i8N>65@QT~EKH6kp65is1g}2)k{N1v}Z}C_rSdaw9^QKM3M|W&5Z~c;c
+zmxT9+4qn~8zppQY2%3MAP4o|V3H;*x%lBIRe!&&`kHC{W?*2i>=t&fo?j8R&eP!Fj
+zrNW~no`2<6*8ihsuHSX=X1k=eN1R}qSz>paHf`(eD{d-(rSPTA<*i$`CH1B1;5ju8
+z?w$zGS7qRe-miSMP~5R;=hm;4w>}JhpNLlYhYsH3?Kbs3;ECRK(EF54im`Chrp={I
+zTecUzve~{&%HwBuTKfL8eH{$^x`p>w<C$P4X|%JFdu4u>@n5=cOT8}$TIQSdrTiBm
+zT`y*W-)$wCd*%Djf0+p$;NkOgT7s^MZMW-4*Wb^%>wob3GXT8j=B!qc34cFL%6(ia
+z`qN)FZDaMeom**i<!xJ)#<iGB`24it!`HTLe<X<I;g!kf>2h##+qQ2G%SYgE`b1$n
+zqG^Koh%2vpZkF#KOfjE$?D3Amd&o4bb=$WUH$VEQYho$%Z^~`kTHLvP`{u31Uo&v-
+zi{tgsuRXeB^H)gIUrKpPo_(E)NB7S1mv@x6ZrbwYZ3W+Rq`-Nw_tDMUcR4|%zVF*y
+z+)>`OIp^?5@K5}2GC6@yLY@=yrquU|@}plZ>?m4w_U|Xa`ATnjD{V#ZQ}jmlJOou`
+zL|`zQ1kOX7kwAHe<$pr2KEDovCxgFw?dBauLvKzmv^=tEdvAHi_R0DCsRw_#?8Otx
+zIYDojXEJ=Y|Jqk~Y)ioTS#V3h`IT+O!k1U=+)>)Rbw|1A8z1>R+=w1OBm?%~)@@ri
+zKeY3!U){Fd;HZ2}KB-T&3`i-TQwO=D+*|%K3|?0#J|aoH{`F^SuV;gPZl8Mn>))&X
+zyX>Y*Z&ZTO*T0^ry`BsDAILu5b2-~qZwVg1cqQ8+^Yhd|5G)6;Ig5kGd&X}I8rY#Z
+zZM@gL(l6iE)p-5ut7^dMH}FOTuch`n&&S@=)u`Xz)u`Ut)p(J5Kb#2~OQr{n#WRA2
+z#i6_Q#)vKV>gWE?+7BND4_Ee$%FNNfrc8cM&?xK<8odXDM)7dacz7siY_125En9=e
+zm$nCuDs`0h^GiLY1N>4~X;;vArt-n-&t$nOAK;g(@_v4~D)af}s@%gbSLJSgxhi+@
+zt7{(jT-mw&&b>YtTA#_bbKidbvFC%vW0$y|<2ujvtfAvcXz7O+PcGzFbhSOc>3ZA3
+zu14GIU4PQ{OF{pPzxZbd%iTePzW>SDEnSVE<>Qyi-Cd1w=nFD4Udpcy8uyyAk6+Ah
+zu)N`2J--23)&z~VZ*00=TFY+|W={fUkA>L=%+h*bW`h1Id=O3{yp0ZCZwkCE33yu~
+z@cJA)cq({XwsygP@wyAybRnBAWYdLgx{#NVcRjzSt5Mz?H0}rg@;-jS|9*IKKRo&S
+z@Z`npd+Sl2^zA4Afv(0&@a2)rdtZ9w1U!a@W5|%S`Z44<h#ZHI<1ljkHgfz9ay*J0
+ze;+y4kz)-xR*|D{MCa;xa4R1Q;B}^60LRjipix7{Rb(9I0q^ormk0by$CYO;dFGlt
+z)ogaObTViRWam)-9FtZ$(bc#r_$Q(NjA;wVAK6mx&a;9ww_Z9IG``y&d{^yc=h?2t
+zjwSHsNLM3&$mZ+gx6E^?ud6YT%Z}EwcY^<&*R3v*cSX>k4|%fN!Og?-0z6k8eMc#K
+zoU;3<e{WagzX_MsU5zg<4d5TNg5M*{g2o@9yT{PoV<XwoN0tYTdiD<LxZ`@;4B%uw
+zeo5tvlvmld4|dU}AMfel(!0K;)Uk{@*7JTjb%SRw`8KaW_Gh{p!`W%zJR5kkum2!B
+zz5YV>Hq&Pq+E)gRpMS5VeTT|ZPI&7w&kKS^p(AMIFY!xzQhM(KaOvo3ToEn%<M~Uy
+zt^K7|@?RkTMVsI7zg0M^?b-bKdAy%bzVrOr_W4wP7WXr4nZisbw^`8AZqxF+x*COc
+zp65~jd=G~-e-B;-@Dh%twOx%o^c2>>uj!=0r#yTrz$f#*m-q0gu(A1GJkBGJ0(=h3
+z9Oe1AtLqT==z+?sZ!ImdeQSPE7yX#}({B34Rkc??H)8ti{5el^&_7O}eU(02{c|=G
+zv_CNI@tz;>ELisi_x(TOdub(COJLyVTU?#|=ATcby^VATAJOs0Z@h6AeSByWE@L;Y
+zyeDY1AurjQfy%wtzaIootBnj)HeDC3-X@IGx6jCQH5R^}|Lx#=_kS}BZ?0yuhPD^6
+zJL=OGV^aj<zpI{zEo(z3+9<0!ROk0IRu`{k4gK`lo`;qnGsu5GeT{+n`nSHXGQ#O*
+z_RZ6>_{V$xq-}c8ULCpj6u-av?}FenDq9`dbgFHJeSRO$q9^!K*FnjK`V4HPWk^Hk
+zjeIU!{GL+zC@+#c4B&;}s0|3mtMK#z>`oP4wA};GTpPyO{&~T=LOse?g~wh8oAfn#
+zo~%c*dPnGchh_H%@Z%UhLmhvidYAQ2{yw_&Vf>RNGobl>Rvu9qO!QISV||nZL8Gug
+zX!Pz18pYlCC`X--vIie!FFpx%l@9YOALR(Y@==EPrQXuMzlE<NKLs0QeU>@KXEFW?
+z{k!#9X7hW;^~Y{tM_V$D$FA{9Un@UG`jg*iX_U_A>935Bfvqm}&_1!%G5=+K!Z)A~
+zq+Gx8H8!O98iLmg9KqXS;mvTi|9<&HeQ|hw^qJV}{)L&DFBP^1jgR9G#p>T4&tKji
+zssCKuH|gC)Kfb%Gv1Jc-iauBU@5A)B#y8pTe3Jv%wu8<$ITZIze%kmZ?~C~+j~wo5
+z^c|thkg>J>|046gm%e;5Xnc!4;}7spWPktQ7XHaG{F6HVNe%xb=6`@&`M7)r>~<Y|
+zPvCzb*D8LB+PLv!uodMqE)TY(bXIxhkjMHc@&#n`ODFLqI<uqlBL?wTXye8<7S1Pp
+zi8JIs+huKnyRR1UbDmXy+D_R!t)Fv_eCM6bd=?vd!RpM;i^2sT=Tgwv>3y7w_&AHm
+z51;bzE5sdnlvg<1cZ1_f;eH3Ww>RlSR^??bk7Tx7d1jO64vWVY>hA4oT$8SDMHWi}
+z^aXx_UwLWJ=(`a#%ILWFYYNN3VVT9j_%M220d6ZPJ9JxrUpM(*4H~7_EIoa^EAy_j
+zfqcL(bfZ5PR3~{~ChsdI_IdK32VIS^?6mryXIqUO+PT{CVNKAOJKOnst1TZMrhEZ;
+z7(ad~@RtCu<+lFvRqA~qXk?L15qRQLetys>EO4+ofHlj)%FhSJ0<Kv>Bj3*T9QmHN
+zIQO=r=d+x@H00orRv=9<%lquTY2T#FRw}*JV{t01rHy+Z2HXnZXmDA^J^V8Fj%TJE
+zGLY|4=xvrO9U=`H3kREN`7=D9b>)w9f5P4y-)5e*tND48_%@fkT~6_BW+Z%@R_dM^
+zSUhKPf310MaDNAAGJXy;{onW>r8VeJYtVR(d-2xD9bT6^xLW7~9j{9*Hs60t_(p%L
+zczMLd%X@=HVNcNLJ%lYf;%w1z;^pnwqFv4w9dNejptD80-=YnY{h=@OHpto@VrBY{
+zXNU_PyNazr&%Mo2y!_Y&BP0B;Da6d{6Mg>rE@N{{%)Eg<-^a`wt=vO9)(fvAb|+>>
+z`VuhvEKFm^w#Mz)mhIS&UC3%T?e-9D?TE7@(&;_Uj_gIY`<xxwAGaf^G428K(^kS5
+z_ar<~j7wZ?Vq9#=Aa-PkICq#h_uIs|-yzODN}T)q#JP3i+!}VIiXD-T8`}VG<-_Vb
+z=nuhBzC{h$#Nyzi<f*$n;GeWH)v=b*(i!#r#JJ9;$d;HGi}u`m*0kF&&f0lSu;~BK
+z2aO-y>H58M^n1(U%@DeOxXZN5K7M60OIxj7s$-XGQM<G{VVB@}VV5ggr|b#J?x%kG
+zG85x&AjVzcVqEZhWF;}K;#+j?*f23}H!&`@rG{<swm{{JlvjI9#<=Abz+cI`Zt4Zc
+zUh-^Sjoi-?-;T+SS{oFNZ}V${Mq#a^zb9yX_I<9ermXsa@>;H?L8G+9>ZSVC{1UFK
+zl%qYEzNv%zMM1nj?*Pw5u0KCud7yH>UoPz>2A)Zoi<G@&;TZYM^nIo+V|0RY<@rwD
+z)L&W<G|JC{lWl)b$(G2b2p8E41E(GO=h?LUZt9)K^L%hxVBvaOWbx-cxSIP2j^4&9
+zy|e|Ix00{7X&WR9V=wkK)ADulAZG*XF!$(-?v1@z=Iq6?N$kaWPy0lBQF>p(UPwMY
+zT&;nvtJT%X?*RRkso$rq01x!y?V!Wh2<S+Qh2M!d?rn*6MqI3OFlZDG1dZO^L8G__
+z`%)*?IgWkVi+$PW?8^~nUxu80Im)kMo&9go&dA2#3r{vKs~G1Q+PrMeGql&oUZqcc
+znd=p<=ecNiCf@0_ayNDYoiuTY>_i{-f_NtupKOiWi9Yn0c4gy}?J4oeu6X`3eOMSD
+zosZj<-rcmRJ@}V<>1XzdFW42@z~<xV+yQ4-4$^)PIlFQ=ZdX#{lOytLDRVRupPX^=
+z3AV+=C%3RI$FMD_W2oR(KH>TjaMW1ngfUdwZ~3gtL%*!C&*&Jc`f>Tfr88=4^sCqa
+zjirY134K!w{%|<fd6xX=T>EtQ)g1B31#A?3{UCP4w9WJ6d)D<|7wE4pS{d)WBwVmh
+z&tac@d~yl<w2b`lDG$F?-t?8oqrBSTz6TuF2={huY$QHGR^^p0k7U-ZJj5{Qox!7z
+zy0^IaWIM80?&1^hQ|#l%Nxe-{e34&iaWHX*o>zn08p^h`_4lm}OgvL+%@{n(ypwIo
+z16#i3mW$MPj#%Qgpi#OpNo>*+Fjg5f3L6|RHWI7(7^TPZVzb~NlhO+CTn_y8z~8{N
+zfU+H2w4=f+wDk_^dV#vGHR}@H`9-{6;@~e08h`3-;UZux;c5rQJg(=-ch$<qjI*{o
+zJ9pIbK=FXaU<I?h-`<;cO1h6*@*SivaQVTt0L}&n_$Ypwd&fiFYg|2lo_AZCwx)EL
+zv@@g~YNqAS@_f#fKf(P;dvEN|d}n{=Phx+byNUg2PuQQC)IBS(c+TSf)#kmy{T-mm
+z*dk~$@ybTzKGVf3@KyXRE#+#pc$Hf1`-{XW;Aebx&GAikpEkev!w1hYr)TFE-(bFA
+zK;u=F1@zUrG(V^Lq{lB-bHQkku{Kz8ukn0eW}RtY^5v`a>*}MUzI?Sa7@a|x=p2$w
+zTX$W3Z-#lWLE5OslEh!Z9jJU3Sod7FFz=oKvxW_c!mDL1tU17X8vpxSE%Gzw)T_`i
+z01dhqY+X-hzi@p3zkCq?d;r=84Q;_wLzU0r%YXj5<~3Bm@>a8-Hos51-)d#ub@^Ze
+zJP+Z!U&WUntZ<L*^Kqlf4bU$Qc4kHg>6_XZ>(|)-5dERX#)n;>Sk3l;N6+=POjpB?
+z52@@>_95oY9s)P@y@FxqvZ~q7kpD9-za4X`W<N{XXQ5?1_^b#2&w+2-Hw_Lv51ME2
+zfwn<tGc;8`59}`h`wJn?&mc$55C8DNb7t-$O-Ck-tLAPSt!6Vu9|mRD;bU_yS97=X
+z&AjY)k(HUhh3A^XHF`8`%LyN&M?6c9YS6nFU6I^tMR%Xnr(9;DKAE(pK2<w2qZ#0M
+zosx`9Jy}=JSkSCz#N8)+i~4Xd`YB+<^o+D6;E6rz?_dnHRtZKs$g>IEjrt|^VoF)k
+zqGgBB1C@)lm0U_&F=>`I#lN*qi?5$IwmSR)BirHZI`m=o^+EWdHsy8C%AI%Ut<^Vc
+zGY8<yAbM!^#f~Qq5XTN8JEhgo&q4IDDt#Qu;1ArxyL&=^AnFUqj#tsyo%3v*RUHdP
+zTi})2dZ6D*Fgi!SBf)4Jzk|SRyMsQQxjCOE+7|MzHYUEVGqGWfcu_iWS#6lSmX<iI
+zT4xLTGaI>N>UGMlqHI0eV&tc`u2@{{vo>aR%EPKs&frGg3}p;#(hT0DWl2+iVD;R+
+z2Or^|#I*@CW8Pa>8B24;@c`UZPZc}_Bc!KjpVhb2I-QOdTa0e0k5RiYe976gXkSyU
+zWL+C<8P(XZ^xn(8+L?ux*{0vo{CJjo%Rfg0`PJ^E6SbV>vw6?`4B?rzc%gUStPQsq
+zIas;`SMLQ=^oWn>9lzBP@zT}9v*8tKVLg=yoMFd*(hOgUj`umsds7!_Mn<GXWi(N4
+zlk-^ptn^s$<S*1ltRCRkGXJN(XdQjj#5vpn`rPV><*&iT+^dbLAHzPlXWd8Zkp1>`
+zjANIl)}PAm!b957q<ty&M184`M+d=g+}JD0g7$7~Fu#dDQ+{%+AEV7vu3!C$<}XtF
+z5_o2O_?&FeouN({y5Z%3+An%jb@oZT8pJ*sUNAN_hz}9#OR!ag*s3bFYD#?x_I2)U
+zwl8^_GN#^~^*_|7ggQ2C(+1HG^)XTXm%TOR$Yb=7_n{sZZ9i)8t-wE?jSl9T{g!mQ
+zSuc4yZ61?G-#GwYgX&Y=nDKz4QSYT^)$DBbm2(ENljs*VT794QsqB4JzpPFh93!x$
+zUxIyYs=75YgLdh7H)eSx8>zlQZCw3AT<4-|v9$K;9;0(rbV0bLt-*Q*9Z`Jmb<@I^
+zUJ5?Hre0&m>NRkY9BRW6J6xH>4i|53OMgmsI2Vlm6nK3rX@@&g%97^ou*!ZLKB`>Q
+z4r@Fy)?O-2`>S@AY%fEM1rIY8Jhs@bk?{Sd_hC#w1MlXF50w^c6N<KPtrcy5SY;g9
+z>YD3IhclzHPpSHht{Z*keW=gbNWVH_^`=T%*k_Je*{Q!1O!Z-dMy~W@yfgj1c_*2n
+zgTU50E&0jdZ^o3P_P#nSdS=s)%r*8&Hu|$2&h`)6HZ&+Wv=6mQ;TzifG5b93)|5y$
+z3_Zh^2I`qJSABD*!;5siuaC5hK0rN+=heQ{f33;5bsXe1?Uy|2&uyETN1rqAI?K4{
+zNCwd~BNIad^yZvDG3@b<;LI8<Z`;-0oA#FbqP4e1ZWU)UNi(=+v!lmy+0j1m)i{dp
+zCuQR`Mj{+NUrqT=YiDFrB_G4rG0TsipYQle9>XW{+%J9<rx_ooR+(mOv&L*JE}oyx
+zpMpN4C-Q-YZC>MdQO?L6I2Nv5Pp5vY+Bwa%b<=0(rWu?po=O+bl;-<KdoNp5qnzsU
+zew)gea#;^AJ6au!`zc{RO&)^>?+w24OGYAo3HRpxuzMf0y>w-!U&n*KW~VzoD1MyY
+z#J@N_#NW_15_vb)d{;H;&}PycZSLO4&A%U>Zu(9`SJC+=q#6CI=p8VM(@no;@{neD
+zMw;iD<#7a$Tm+9!m*1p$9^0}85C48_S`&|~Eu;DdD&WL#6@4~14O_mdEgHFxS)a%D
+z1)fgF`w^=jchg=5)Rx{Nyi)M^!J30L9ayy2@Y%FI-iaq^epj{P@XNLu85&y5z4{Y7
+zr&e{(=3NRs*vPQHKgUkWM>V>WYn^&q>9lzb&nPE+O?~cuz{m2DcN2II4Apxx-ain*
+z^$fU1*T|_&jo-#t4{aeMKLdFr*Sk&0zZ@Z6FFGHf;(UM+^>?$cOHZck19UncfPU5b
+z0rFRM-SG<=;|ISdx%zG27ML-ew6)f<krT#+Oq#W|nm?9ZkiT&+@It@B;7t26IP+Vv
+zI&S)&qVp?q5x=6d=~u*Td^Ta@vk@C#p-$#|wJzJo*WSjD-0N)ou<K)UkyrxW7#p8+
+zHlBAz=Q<NMK1;iTuEAk!{Ft@JK4xq7g-&02-|P!*T}B6?)$}PN*6x`!;0dnU&jcIK
+zJJZ*jckpe@;(seUZ|qRf*8ACeoE^$ZUn~rRL#Kt6oVPXYoV=z#q`p|*$oj{&X~C~P
+zey8ilBl*>L4OFPd!}sF_6<c5EKe%V_ONIW!h{jVWUv&OM#rY5DDg9C0e;}{zza<;n
+z&Ii!(LHe7R|KQR@+tc7?_>NsN@*E)s!8VEa6Xcn+U9xSJh;8e%^~%5SHbVY|k!Q}r
+z9Keszc%b};+L+ZTKhH9tSfbP6!MLCIBMg3|8$M*6Z&JZG0axprH0Mxk?7r^$pUX!9
+zzWCtRKWR;`=GO(!v^C1#$NSoE8$3>#dbp>|skR_!Z)2S^e%demyU5;@+L)!+*@KJz
+z+3Ja<+tMuEa<;zH`75$RMd0)6^+A6BLU53d_!vxnsqnUKz{v*~rX6N2tUHjM?OWV?
+z-zHpH)nV+1%OBb=_iXUxUiGBfFWQUV#c&;K_D!9<Q(NgEjx&3B7}r{^ejgq5duz0A
+z+4p&}`ETd?;WT?8n{)ZD;Pe~s4^Cg^8VKx~Wa+W&&j;Yyi+6RMhA%z%-H!~q_0#@6
+z&b4{}K=OU7EzcHZ^S+dL|3F)8&(cBFCH{(Da5DRq((sMVS+K6E`jD{|r~DXz<ZEmj
+zJe6&ey_lwUDO+2ydJxWWG{>$_rS3x_PO^KEv<FG?u+~#eobP^y_GxTkR<W?wSJ^#D
+zlH-82jdp$mKde@?IGC~SoV#C`oI8<!9=B8S%hi@?gZ-L2sb;Nj{&8a?ZQGQu;oFvh
+zKVsWmTN3`T`h^61lh(9_zK^o@aDmZjwSQAb(ZSVteQuIEI#cQ}X;B(%|2B~Z+s9cN
+z-2DU^T2g3GT9gJ`*3iIwklJOFhDaT`N$TiKsl%j2X;7@)oO1}_k6GJkX>j)wXh`ve
+z=!@bs*s|U)iPI3NBR5GMohfygv?vYMZ}4)kZHT_qv>|>?8&cmI@wsSs_tEF8FV+}<
+zp|kUE;d5p2xhfwxm0VwE`cm|IfY@K-irANzmi&zK8Nh-5{nX<3*gnhqHnj?4bF`7c
+z87?3A8$00Azt?8dWyfQ4ggl!#3p$N08MATLn49mbj!ZLsistm1^Lf_Svv}HZe{+vK
+zRHxQN*RpPGpZIMFym}FM$BLQJ0`HFzzm-X=(`VEw%p1zrcXK1cL33DD%Gq)ENNh=(
+z!IAQz-vGWQ4Lrj%WFkCdE4|$e>wvF*T!8&G>~Oc^CDn?vo5Qw$>fl|Hx2rlV55;Ts
+z{nwc5T>R^6e((NYpZR<B+;lTO(f0apzO=B@$$&KJ^<rxWj@61bW*`6Bx8^VI2tI0T
+ztCth+?kBHgcx8brkE|(w%9VfQ8(y}RCeNKL+r@t)1NSZ_(_tIKhcc~*r?Z*Mor_HU
+zo<i$4TA5m(-pbUbTbVjPXe=tz7Aw;cFVi{5bj}2ssy#_Q8gDRiC4V^POq!KpM6Saw
+ztrAHaaWMuo-UlqraV-?jy#7RFdjh%2PKtk$mF#$ve@*%(^3T4D@sGGx_BG^Rw$<_P
+zF8JqTbnC-e{$<U$r{$kbxBRnXIkjSIq)lWk|8lLaP0WLT^O`h`xOVCJM_I!^@`wB*
+z&G3)3W*cy6*+|-mm1V8s<=8SQ|9T_*D^1{ElfH@kv+rX38&2@A;`w(E{L^?les0#b
+zKYy?JQ_DY_Zu#fN+s2~&o96V-^G|zj?Hp*dPig9(<KIYxf55Z)7va^gORGfEMx38s
+zadI5XPRc(T<eX%mqCIz$^*4&UlKE}_;C$~~eBFZfQtDFQz@EBxt%I5DKFz0`u*RYC
+zUb}bf<;-cVuj*xORgtw-53}B?4L`E9HFd2dK4i)scE-{D++BXV%0>5u$yYRED9&fp
+z91DBG=CdEHook-fmpy(lKhv%=lW&oqxytOJm%T0R2A_maQQnhS>$s=OtaX&nSlDaV
+zMoO1LSo?q>So>389Z0}BU}33WE**@on+)L{a_|nPz&nzFcO-(_Pzr8G9jtl^tm6q-
+z$0N9%aJb=9#ArR~;GIc<cQyg<Yy`J+DY%_?u%1nUbs+)kLIk&qo^N*TM##5I4&HMq
+z@K~Q0otG*<AHj`vd){yBeSx*B*I2LmGVA1CF?s6wmsg$EJ}M*Q8!52amlcEEvZ}c@
+zmi3L+cm4qW!~5~g*x%0@kzxF>Z@a##gg)kHWmxygx-EROnTxEwE>UlFhV{!z;8mWr
+zsv*7khV#8j;ONu7cbhG<b35xEH-bC)^WZPp<$D9x2(qrUqB(Li&iGWhmpogv7LK~F
+zw)K}6WY`0q3HO@QuY_w=HIAh<#5>&_)eg#(u3FeT+;53>g6dQAJoojuwV{{5Z++0{
+zqaBuMhu*H{;co$2dVApYdWR$T1$SS%0q)dMc&)2h#^Eb^#IMo@>WK7z+JB+6ACMO1
+z)x!5%zKBl`(6>c>tnyl9iGOuvq06(DwV2j69n%_F<5w-TewE?%8t_pcaJS7L<#8EV
+z<-6hYYOUX8eh{1CU_G)hDVx>M*KO(U<JYWxy~w)ZB4;Gvzt-@L>8mHq8yY#RL=J8&
+zaR+5e=bRkeuht(MIq)2=(LG5WD<b<woPT5FfDZL8M-D5T9Ju%EPD{^%Cv|9lWGFlE
+zEr5Si4!;4<MZfqfzi3MIo`Bx57U;#l!*86F-et}8%{wSl8glfyU#)jF^zt0;nLGr&
+zOGU5Uixc85y%W7lpm(XGm-}%4NgaBrqj2=*^!~D=xAbP{JqW!y=w<vvbHkI;y9oLE
+zb0sKK+Uw|bzuK#1=;gU@foo^GptnQx&V`pvUoVvJ0_g2<^m1Qt_hzpObrkm9oZj1^
+zS2FiH>)V?4_|s3A`C*?njc0!^e?xnc(#HAJ_vCw_ua9efVEd{04o80T*l*K!xis3+
+zLACGy##mpzo%i!xnR)OPf57DBUcWx?74mw#%^4B1Y?;z5>TC}hFGt@mBW<R8KhwT{
+zA^Lt1X|3*kt9}1G@4eqNC7&oe&-z3gv!@I7414Y}oGX)QJbWb6*gTYJY&l9FDLP-_
+ztONbNn(8Cr-=z3R^f&IDpHp^>O><1%PtuxXd?fiv^exHpwft+UhkYe0TN;mbb1mTN
+z;JShT)WYwp{JzHZGS@3ySGk_$y5M}Pa}nR_9DTEFr2L^4=t=rk*u$8uq@Txr_Zxo*
+zA1ygXlNUT}qk)GVnE(&F5`#A{0uLRswm0I#2p+c1!0SkXw<rN`Q3T!+k6*;^5WJ-h
+z-m(;U%M<XHN8qjS_$A=2bnv=U;H^%;TOEP7#^Yz#!x+Cv_^oyDdQ#x6PrzFrfw#fq
+zmw>m?!Rxi~qU(3dTjKEgwyZMyitcB<P`NMD_&9TeHT<7gnXQR3TO(z*yE6Dou`;_7
+zWp+i%?DqBGPesqD+7mBR-V>p9ucy_<k0I~&Ia>Fp@a{kY-hl|bgI*SPy<_j8RkZb0
+zwDncA^;NWW{F}PT&)F2Y)1?!xo|7r{oJrJkCQ{E?k2h=bD|g{v-i3cT5C3u={^i{3
+z-@&#XrR}R<ETIee^YSwpPr=Wuf7<#nCDlLI`I+EZKEKNNIjiQl_u%Z)zTxH?cfN+7
+zc?sJ={ycOD{)_Vepi%q(#~Gh1P)_FnlwZwo4uS0>OrERQtLI#v7wAi$C(p~|dBx@_
+z^IpDH=`652Zf9Q(zUj4e-*o3S!NEU$nX{<=k)31RdClSWJa*zaYZLnTmCs)~2+VV{
+z`um>4Cw+brm=_$(i`e2{aWF3cQ}|H6wAa$R^SsOVEN4Oay3do3_ocnFG=Kjj7xVd#
+zU&Ky^{`AhZ7H0k;@XiM8bwwA>1&#c((0Re~poD%%M#rW(U-KNaoVB#{@>}HDoFj!U
+ziTBYxKBZpZf<s{=Fr2Sf+HY|$?2DwGRQ=>T(M%J+3h>FmbaK$WbVvKAvn}`n5nO&E
+zb-jw5sB1hjo?3dvrg7x#oKi$bGrws0BmKl?#{K(~*dhG;@2z)vPDcFu6ToNOv~9if
+z?~kCjC-8&t?^peT<9V8H4@u@uw~q$wk-L*IeY;n$yfJq=Uq_zD1KJpS0`TSWMT}3p
+z>JAGtY&S=d=aAD)ezmW$v;lbx&F=4;*TUZBmeg2m=V7OFN6`0Qa=Llg>HBeD;=@W_
+zef*m9)7Aj97nrkv***!(gAV2)^!<NvFb@J#_)xyI+v)p$m+t`j?(5!9KHir)W>2o~
+zE1kZ#cB7Z@XJ$7(C;EN^eaF8r`jyo8ebBPk={vvL-yYL<(&V?AveI{Oi0ON`#l5hy
+zsoSL<(x9oZwwY%3X2UnZkv!!48<<YtKZ(An9*>LB_qV$)r|+E4G)FolJyskwC7oFT
+zO+$C|_bo@hD<+ZeZYQ@r$ZeUE@9vxE%o1Ss0&^)amrVk5yMwul`0QsL%<aGwK9nzQ
+zcRJJO@@++5|AEWbM?T({I_{WMXMW`H%r8P`deNCB=*$*$2H&)RZ<?wzTaZ()(;0q?
+zJjZl~G{qgE&VWNqXF4qIg#}IhC@mumnhHysX}8juGsHbUzWIsO<#gs-)FquMy&0XE
+zzp637*t0(?F)bF|xxvY8BXV2h<hJ1^Ix|x`)6TwLbf#w#o#}Bf*VE7ZJqNP~nBZf^
+zWc!@Xta16)qOZR0HRR)csiS>To!R*z3p2kOo#{qr)}S-1(HY{JLiZ#(vl^Z0b~?jv
+zk>{AskQR=2sGk9cn9j6V+zU6FF?6Y&G-%Qom$$#S(izUUjmOwOiMpK5Xf8o#GkRMQ
+z>-S!<b~YB<yEGHqyL%JcpGlAHbw);hWnlZ%mE2#=g!gI>*u;af?|-HE8ec;`hsM`*
+zCYIi73{n1{X*<hFU%`1O%6kI7o<#@nTgn%)Z_BXnek=<Zsea2cTmHYOJid?d-}Y1f
+zS;{YMmKV$^`$9`C%=0e(&o6?8B@Xu`U1prs(7}C_-lv6w<9q1{FgjeBA#gwH=<OhV
+zk)szoC3_{iRXzm13!3;&s!t1Sc|-3?%CDh(H{}mdetxt3o3e%TElf{uNW&h|=cUjv
+z&*s;9T=kpkKh=-w%!qP(6NgD@Xt(9-Do<Z*>`4dZw^Dvqv;3Rtn`c>=zvE;U(y)>A
+znJF~PwE2HiIM9yOp4G0)>%pP5iNmBcwA%8&rt&w?kC~LGuPCpjd`q+Zo9ZiCEX;=;
+z4SwwDjckUsZ`s=GBj$Whji=OqbQ@zj*?Sr5xtH~f_u`A*d;M~b_ndcm<#w}9EM<JT
+ztMMb&jxqnodg*|3uX8nE+jFnqts{1R$2jMhPR6UWvA`d1OPv3mon^-Y&oV#y9P^{+
+zgGTXL=0`7Z-pobLo4It;u|LN6rhdkEcy7!Z#_ZN|b#N`>n$NXBeKYf;uh=$V#y!->
+z??Okv@#f}7%^2QZKQ|W{a}&IM4&Hu#lVgGh5_5C(Rp4RA1P`XnLkiv@2k&qSydw#C
+zM<VcsJbsZeH^DpV;MG&$9Z$eJ9)Wkl<ClPU(!o2E0`F`B-q{Gea~?lC=GJ>2p9EW_
+zvlexh$(Bpl3T&N`(^=*vuey3(NU7&qqMmD!dS3Q;zn^iV`HUOQXWWSO6U;$=o3Z5Y
+zWbbC&$gV|E?5(prw0}fn5`BwpEL#G%@~d4YW*+>IO9M}zcE!(Qg0oLs=+esI?qlPH
+z@3m!jyiDJN{g18z3Fo)myB+7ir7z$tvw*Ro3}<v%-=en<K5gyNSYustR^{Hn#_8av
+zbCAmDy2gEtUG9a4TWnp57j(a)yRBbq1PZfk9<4XYtL)x3w;zLi>unn`V<f!m#UAvo
+zrQObBY_G??TT8y4IP7ShJ2=xO|60%}+_3pI=NZ<;xi}^-@-7HI_M&$K@LPeu(ZS!q
+zJ8V`Irn!fHo$sc5%>kNoEKedEKmPLqY4EUcHIjy0OWT9SpD2bv9zO02<#EEoi^*fi
+zrfDutb?x9;=ld7dNI#fgW*$N5y{nPOnut7BM&!|rJm`xwE^TmM30~b6p3V%?{f=`p
+z`tvK0$I65}T4pxou`ICVX%B{9_&L2x;MZ#SwbZ>^!n>t$*wH$7bW_g~>RD>*(K+X#
+zJoe6r%L5;#cRBEv1Am2sza020Qs6_s&N@<E=1d;=6g`utREKZyFgn+0#<-BjHYX1s
+z(}nUlXyL`=vDc>UaPM~TtaFWY_TB(vz}mxU<k5jV7DePSKO&C>8ppEx7Y%RbgVzE_
+zle>R9mmT%{C6veW$n2GHbJhO5J>Nct*w^0M8Z?I4+g_X*SXs3KduAMVw9coAOSRrx
+z=b|V*JiCwfVD^uamVXu)JP)xKUuWD8v){fr&%tl!-Mkd|&|iRl!PFe8#&Zh0B5h$m
+zY49*Q7wYA~_m9jTJhc_}XUtI?l;!espKXd~cxPgw?eUoC$J^|g_Uh~Kt8TikO8W@>
+zSwhtFWLrl2XW!=Y-QR&aCaeX^wvN_1?LPBi`UtJvt@FGp!<tKEtv-7o%RPOE)@SJK
+zAf0iU#V;9V{n0Szx(&O1;yN>Qn6cFX_8rtnukv2|%ltmMsu_=Mzy3pDO4e1*Tae9q
+z{B~<&?!7Pjr%$-=z^K2geZ;J{K6Qn9l|OPms2RI&Bd^|dkhhvM`yx&mxH-Gt`{^<5
+zThbnA+wa+X)}``ZYXD7N^s~yGiyvpv{ynXC_j3Y%zeTtQ*}xMFv;Rx=8C;$K2al)r
+zcMFDr&%Lipe5`ibwXq=&JUmmc*38;{W!i(Ov$PEipC=cuQ*#&Q{fJ<?`ndP?RcYI`
+zqFu9Y_T^UeuE~pLKDS<%ykT0-u059wK9pH^Y7CkE0Nr?lbabMB@r>Z~_doS`&tiM7
+zv*E#Xc<~+PR7x4ki*e-h0`j@)zRf||e#J#PTSDu#Eq`p?@|ldD7416zkUu<YeRmss
+zqMyxLJ&BgD0Y^HivZ3BGx2E$yLKqdvz|yV0(eJ|zWnOF<eR|mL!K!J$8T-s?=yJ94
+z{_8(SU*ct^Iy_9_U~r~>e<q6PQJS9bGy2u`lIAgL!+M^5{fYPZb>Pwu(NDianI;YP
+z93p$huAQ6Io;CI$J^56N`q<2<Ib&qZ!W+!Cj9%sZpfN7LhfVt~y$oyF4bZS5q(yz;
+zcj=c0vR_1hp%<Jqo~E-Kq(6fd(mU<F&gaqoLal{1a;mVFo-!Tat#gUA*X!Hab(~+s
+zoN>0r&^LoURkOi$Hn{3LL+V$w&ixvBR(&J*?^?(AiOjv%KlP1!1=Hw^VE=rJ9UD}A
+z;*0PR4LavR>z_BdJwO9FXd{2xnib_$8MTRf$sfkwm3N@u2Cvt@K8^2NW%LaX<NuEn
+z<Lmnsm-&{}Wny~HDP|pq&Yip0?7<i!=GQrHgFK5S#jIC}@5lIF!w>jY!xheXSNf0m
+zUc>8O|3vMLoQw5Gg3%uW*YBr$5!rWemcv!*>wKTJq2`+{z+vB=9UqAB!0f-9X7eTY
+zTdQsR{dsDuT4$UVFHf)`ITtUlZ8@!VioN*h#dg-t%wz2gzWo+_d;0T(Z{m9sr|f<-
+ztu5AmH0?`^teIiX+<qg=t}iw*@_vn}==^Vc9_wR0#Lw%wy17=%e<Y5^XSKX0e$cqr
+z0el9<(FgfW#=VCU@!6rSX54$&$AOVJTJVlIcta`hjwaw8jliq>crO9(xPx~h1>VU7
+zyps`lXFPt9xL5d{b@0xmz&oFScRm8|S&v@=-USEmVhX%V33!(x@SgMdMb@qezvmsi
+zt10kaNWgm`0`Ho~F9Gjm2k(^>c&{ely&8e{n#a$c7pFem=*tZUuO%~4Us@CEK!^(|
+z7hgL?954OrWz4cjeEKl4>E`*YH(?yLz!<8jXKnZC5;2d_OX8jhdbuo74{=Xe&vL)6
+z<sSO@droPc>kwlF+PCs;+R%4sLr1ZT!l4Ae^TcmD6H`9e%#T>xS^~E+W7B4?eVI)&
+zW31q(a@hWQ9^A{j0_tV19U8PwKlVKkXfWT-+e@5-AEUFs<YSw8Q|IgL#HZiUhfgnm
+zf0yl#`uHvLTq1_cchBtaBMvPShk85heKO&(bF1oSZOL}def=3XU$qsOl-2tJF@)A4
+z7jMv?3g<nH)AR<!kM<i*rPrvJ_Zt80?X~qAcw3lLTWaC$Adg__yLg3-0XPwhn!bc{
+zux5*%;H5{VJ05KW-Uge$m)|1KX08hPS{Tqun(oVzH}^)~<aIvOQ)VoOI<*eA&5sQ*
+z&fxJ3(==`morNXH$>kG$qS@31AH`SQOV0Wp-%n|-oH{*@Kaslj!E@@Gp}BH&KtBAG
+zWqz%Tn7H{(w^W(0bu#Z^?(wIb%-14w%8FJa^XK6Gg^0{oM`Zpi^z**J``*>IjFI^o
+zzIoE=WKJH#!<7MJ9mpIzQoxQVt?llF%)5cN(&q2wx5#r$=A`+t6C-op8<~?H%KRKK
+zs8io8@v<ykY~mTFT_p`V3(q(6-Ad-akH4q-J&qc$d)w=BGXEFUC7GArjLgp<^Wx3d
+z)$d&HWWFM3{LbA@=F5>eWkZ?Q;r)?_%$G)Fei)j0U*LW3(umBLG0%OMlR0^e%ohc;
+zsQ^7}j&Zczmyr1q;4N}8=eNjnOy;EN>}kO>GUwjNob*uUjAiH>6*_M{l<!az&oJ!-
+zY0#<pFrRiSnJ<ydBRH0R5_Rpf?cA(A-wTd=9RDKyPMiEa`U35Bi;cyQM%$i~UmqWf
+z3BND60C*jNl}88qflp^-!@Yj7BL=RSpLTVZwu8@nS0;i(X+G%-+<ff~;QD#KE!dfP
+zLCDk6o9R#IS(ukJcj)WyA+0^7{&t)9KPc}7>VJ;si`2b_YgVNGtGv60oS&b9oM%~>
+zC!_VRAZ=z!{WEReW6FDkI_f+RQTH;g)=2#)csEr&Yqc;B0rO^KVr?#_8^70n*H^OB
+z_Yc)pxF`0r@?<T;lT-TkVI+o0j=%j~sY~DL!@uhH{Y3QJ#uH<%xpt1SHG8_ShnTCE
+zm}?6$S06FgR${L0nZ}oPW$gF=c4vq^qvu#h&%um+llbOw7vs?OOf0{z(|vD=@xa(O
+z|J)u06LUS!H!xV+_*lp6k3IGRvDh`Py|X^{*a?15a$SAz$4tIM*2bE?@(@1DRrFJ_
+z*$ez8V>A5y*^zOEGHr))*4KX7`|gogO7LEB@Lo-U_gVtpYY})id~A_`rx-x^wWj#!
+zGZQ{K{Z5D<v9aAp5s9UQU%P`hF9jYkbc|kn$`Bs0wcSUNfY;&RElPp6BmoaUGK5FW
+zVeyN^Qo?VUgSR{d9&vRHKYY#*9x;Z+F98o<+VF363cNK5cxxi?hzBfwk=RW5^*DIz
+zQ{Zh#z}pakx6$M0VzXXihAqTqeZ*#4iOsgJq8$N$H~#h>vyY*kZ_S-9@5|V4OYi3w
+z{k%W=eaQpy`uYw;_CFkK?ti#hjQ0Cx4AY+1pf%O`!;01H-hgW>T&xDJ<-@B?thUgn
+zfwxa9e9Xlr<jaG*`d|~kL0|a26!M$zr4XlS96Zbe?d9|Gy@>JPfxgYC^E)(#ALfBC
+z<qIwk{3%^j9==QBY<3ww`EM-y{jJz<6B7*1wz%!Y=4mfu`8<2(&hbsHvwUN#Wmf-}
+zhl0i<=Q54H^IYfN*WY&};2V?~#xQI@A$z8=(LDC7)IF=;kCE;;A>S`PCc5J&_U&1C
+zP!I6^k>l}z`91vllNMIE9{V8gWDC2gubyFzb|$v2WamlIO3Zl%-_fs^J&7+0e9imk
+zFIk&b=2v@e`&xi=2)u{D`>3s}v~iW4!#va##<k+7fqR&^#=+eIE=n)pFO=4zlijOq
+z9E%_E@WG~kn+KlOO!xA>c+l35eQa-IKC49EIuJRhOygaeAHz4hsC)Tg1<K_qUs{bU
+z4<Ltq^p8IFT+chf??K0W+J4f+r+v+|*g7j{7cYc+9$baLxktVQ<ZSMdvGytGUf)O6
+z-uy+18PS&qrlKE1xA%W}EBf&&y73xU@9q74een5Z`232~k3Od#TY-P|_NIR9o<u)x
+zK-c!5QD|XZ>Mr!-g-k>HT7+ZYcKEUjI4hxhH*&tp9+l_OkE;p&*yHqLFY%;b8@uNw
+z`Y{BYUhuvI-p@JxSnBknH$^|TFxKJL=I#I&;b!z>0kUt8=*Py0egIGF^t2vAV-hM8
+z>IZgsAgUi5BKpC-(GSYyDPNk0er$jb>m&NHh<AeD(bNSqb^~sOWz976-5~g<y46PB
+zlzyzY`f&tZm41|_q93e}|ME)ogEjJftdZ|yEqmVz_`Ilv@8a3D##$F(`j3^sAG)Kd
+zA8RJjkL7ON@(Q<ZIkMKhuN%Is2F@(#UW0x__KC#CtkydH=wXb>oqfD>?M?Kfo4p~+
+zz<VZmvqwby)BbxizrQR+KbF%kIk-E(Mfr_>yiA;W)y2oO$%mIl^aFTi-!<?3zUxpw
+z@Y!Peu_U4&+#CI%oYt<Gef>+|!=i|OyvjSlf2FJ0f3%`A;!{gRKj5EV$Ni@DW0BR5
+zdFspPcYGf_mA;35@Sysh+bBC>%>d~pPTfDXI5m%tYxKLr>iJ>^+r+8I!K)6QXSn7E
+zZ>=57r|bgcrdVztJUmF7q%STXhUfE|JpWtu#q(?(f22BgfiwM{_PB?!?WH%_cH1qy
+z?+PCML7sj={X=;RIM0gUOg*a4@bAsmG0WERFI5L^Fpn;o?<~%Ii+rAG;XNUE=%{p6
+z=WyuzWYL&e^}J=BZMAi5qmC)fuT`|}Mtj!oU_3whO(J4B=Bl4zu3F!~{jTQ981wgM
+z@@PM)_&UUVwf|nw0CT|lzMTAT`E$wmO5g8}`tvouiQ)ZueLLLx-ybyd-&*4_$XXAr
+z^H4qHV;-OHix4ZCGhM-L5Zv@m-_g+gxm}CE8Ntj&M8Bn>xd`PO*7r1+hu65h&ZfVD
+zKj-_=A?7la=V{*SJ5c(*mHF05WIp*%vvyoh--8;+YF=C4g__O1J^MrDhnTw_uGsJ3
+zm@}+N)BOG*X?m}<DLQ+0ko6(n_YvOyTOet3(3*38N5@36Kl!!g@9JmsyHW4zr|qMs
+zJZAT<e%f^~@AjYO%+GiG&+nP<5Kb7&eb>IfYu|}MCalMLxBq;%|9sc~WL;%o_IkYj
+zb=!Z&&dASYM~8?bVrSkHkC<<^5|h}yc=K(nV%A$OAZD<0IXcr(-~HrVZej_gah^SK
+zk^FxX$H4n4Yp6_|MBJe`N#DDQo?E0dMq;rNaYGm@5pUSJ4;vdP4zcmi7t9)Tjkga(
+z;v@gv9epRa%6DyT{PUSu{3G0I#8Fk^9)0_Ei0|G;=N`0IB#KX+n1wO_{`)xNN&c(W
+z#`^Do3)UdzHJ;?Z4eY-S5{=9JH+VI7t9VT1Ol(B_rF-Er04{>njFl8~eZjnchIOUU
+z@9@5(G15CYZ=4n@y{oJ5>gtr^rFV7pPuhMd=%4Wy|Lowq{p!2@Dt2PhJqSPEcDCmC
+z<GsN*;0AJcpJF_}hdmYgy(qh_@0?Y!?b^qq?~qn2^ZDh%=2x-(1Io)cx~{l$++_ca
+zZNs0?x91td@6jGVrP*;!eJ67+_PDLCv-||Z?`_jQ7}?Gjc^9?6UZ0yj0XCR(7HvKD
+z+rdN5rVcXRIDk#nJ{f)A`#qfJR?U6>RNIUc92uk4x5g*nXncn|EsppqqBVviKF2L_
+z#0Ls-#0SzhriXwlob_$y0sIe-<5lKu4UX?i!I80Q?UR~-BWYE}V=W)GrhxCBJif{J
+zSC)_3cX%s4+HcueKH70xjd2?sE7}j%6XJN<<9J8#tA$p(?!e2sTC{uO^sBu`NnEvm
+z?mp6M^v(JXjBu`X>ib-?p&^cUEvLNNLwR%DYr__n=dt!Bn*C0d<~}^_dlD^GV46Kq
+zoi>l>`#<+I%}t?+xKVq%>|Vwcns{$$>a=_93{4}BCfZ3<7PYY{(v-8XLYjCsG*O4a
+zKdbLDJDPxL(x_8;JWUUJn(l!nckaLgZa-)XZPR>H44&j$gXNl=3uQR$=;b$6hNK&M
+zM<VnV^*s^EFhOrcd8Z)5u>`$58+u0^y~7cDD=w{Q^LTpigkI@eHLJa{|CqgW=vKDH
+z)IaXOA<VPoqkd;!zX!VIKdV2vpRzOV2u}azBm8nE%s=FLdM5Z7dh;Y#KXaN-7Wrij
+z?vv;F_4_gx-}ZRV52$M#-u_p9ue$HwslU}6hV}rePW3_8sL!<T557s6R4l%BZ()iK
+z^4`c~*nXSJ=wPnJ$)vew*z7MXTAtjpU5!{+p$_tFcsJbKR~YIbFpUo8Y#uL@<Irnm
+zg6+uu6DyN3TYo4Mo(<fr{VrjeOlExLZI+3t%gW?`^)gxbCS_7|-(BQ4wVjY|WKyx;
+zJhOeBzI&o}^1*n&kW=0%w3A^AE0hV(hIiCq_+QL6`-PlK>$G{iOg<ILWC1eSXk{{D
+z>knnZvw=HiX-t#JZ*F~?Wn${GGPw^NwSV2Wy~WYJ>3=O6XP@HTQ&sNS&z!oS`hjgz
+z+fV&T+IezM^#C!rkF$Tg?VK5Bj>g%vBle<Z>Q`8UJ<gug@!L4ZTsGHzdo;S%_?B^O
+z<vpX9|0Xzn<uTSHRD#CXZ!ninAH$ln{_$@{?tjbdc|G+^mVK}2j~$a?t{Qv)47M}&
+zt(a_c@8%nS9W>r}iR&-9{*3ECas3yr|G+iE_3yd<53YaB^>4U_xqgr9TkPGyryHa`
+zjq&Jw0<~rEdZgg?j{op6)}a3eXE#*38b73*WOA9ZS13DPnbtr4HTd+~Jpb={XZ^v;
+z+g!d!?eCRs?9+YJuBW;DwXWD2!C$3MfAMd+!gXw^^@6*p7yPe)|9I#0{_#hs_xE`|
+z7OA)B@_otGTcqAExq2Uo*ZYvGw`Ay@kxnoCGxfs5EAVi9gnBno@4w~wnMl2#bNRmL
+z>irz`e$mytDPHf-yLz9vS-pSe;Qc4+`7hL4Z0#R^h<g8+=Rb+m`^zrhgRb6Rrrrl#
+zy${9fz01{Gy;;3~?clvcJ%35P+1vWZKS{k~Jpb27y&re^a<1NwQ*X}I`^k8{Fwn^N
+z`>x(A?t3pUqF0Ma(|N;Hd}Y5@wu=Ak`>1j9jQ>s0(At7hCU{zFF?B!A{T<wo|4kQX
+zz35Dg8840B^{x5n;%U}Bm@`erzs5I8Gr>n0OVIkw9=-b?tRGRGy1&l-Yg_~{b5eb#
+zto50q`u{X-PWs^YJL$Vz;~%9BWwmBP`~IE&|BU0$M;w2C2L61+@#mv){s>?BX8)Q?
+z?O=Q|J~1|`G0vLeDEthaxe(=(#zr-+81jjG&!;LeNR8)^PoInM>2nD_@h;>O_nuEr
+zycs?b*BL$$`wbEs>Knr2A5ve#cZ(Ts4f%Ah<5Q>O)4lMi)A8v;>3rJk_|(Rk8QLp3
+zQJ)mQ{$uD>46FMu#`&Z;7vC}D6ZavX7>}*-9P;U-5k7r1!6)8@eB$2oY2};Y6S0HU
+zC%a}s>vG2Ll0MmS_K;7vJ3ig%_{4b!W1MrK@$SoarSs|i;E`rujsD*SU95Lj-Q#z4
+zo&NLR0-j)fQ!q1ijeqa|+T%S-GC@P<mUutd+fn(!I;TYC<^M{5->AH&f2w2F-_O|f
+zM%v#541DkS+RUkr|E1a833J7{d(6I{Ue<#aSaX<PI_<Rj1N<{H?or}wa;?d-;~w$x
+z4l^bq{Y8(pK1*{Mww-CsJ{N7ibcVI2C%KMu)wzzgz{|FJk@c>nLtF>B4sh+~+Q+q<
+zYZupcuB}{sTpPJIaINR+;abbZ8Na2KTr0Sib1mc2dR)$n=DZ+mHfIG@@cS8$8FaB<
+zslB_gb3wN$Bi+fj+BKG%uPE?NXKUnHhb=!wv4PfO&sfMhJ=Se2ZqOR;=vYko+N#F=
+zj4v)>d{H{_bIgf+t0m~a%=)rCYsYthm*z(FtnUftITKwvp?Qx2>&g`un|fGxuDKvn
+z2kXyo6_=D+TFjmm#drA|8AH3^?$BCuTZf6){2I4Xw>f+JshzC*{n0<Qx|QdQ?fk_I
+zXQ5Gs_2PN>R)Bwk(|eJ%-IrF`eW<f6&ia0VzFnaArB_+Uc!TFxnrm)*Ut?Y4RnlK3
+z{rOdmO~i+7)6rk(F1$cG=fKPV&a*E4Uu8Mhf9WSqYaD8VY>=^$&9ip>dQ3L#dkAI2
+z{s$u)_EZ?YvA-fFo8vc;4SO|qphq#;u%9E8&B=&t&O~IxUXfeM=DgkiV`Os<*`TXN
+zHs|4sts^cQd&c!sJ1=A!pZ&6vjn1?_oMG)ZvN?im&~tyLbuasKiboQ%Ax+=kFtRxV
+zug~#(G9sI^$mS^NCrBSk$fi#Eg;k+!mV4PS{x(52v`HhIgDJA<i^yiHlg%zCo9zkN
+z?7E3;b|V|weM~k7BeK~Ok<H$SZ1zn-HU}cI*^g}KTa0WDz!zIbTsAFtnsL>ghcb=t
+zZgR5eMK-+|&XGhmTaXR?Qi1+SaC&=@&6b30NGp(LWV07u@8@|>L^k`7%~sNPlirt*
+z&34icHD&Y1jNh7e!?@!F*&J}P*^nZeWf9pdcd}XOWV0e6o0T__O*gWkpN`39Lqs;K
+zBeGc&k<HpE$Yy;+Ha*A&TVQ0f9=_N*;<CBwWV12TnEQ~E%^qa4B*VEC$Yv?B*@bMd
+zCq_0)kj>JBY)I3Y)kZdJ;B^nrt0S^mi)@yY-c9<lgltxjzOgBrl9vtRrxRpz+{vaR
+zMK-V5xY^i&8=Q3^d(-M<(~^))>rG@c6WP=gvgwG(W>!Qt?Gf3`n}Tc>L}W7`*&KDU
+zSpZ*b9SPaYvF&D2rm=Iilg$xi^GZPfgKS<6*l&Pr4msJdpQHF{SKQu^Rv^vDrX60-
+zr><EM*~~*W>;*ArnY`8&w>K^1U(}RM#><9r;4AK%MrG{%cy>m;bPXR){toLd6g$-`
+z+0iu%gZ{pk*?UMlqjl|7#{S!gspQ9*Z$n-~MknBPhV>hyPj~5hX7BjZIF5WHku~`z
+zx*PW^&Bb4(3z;zfDqY}AT;eZx-eiy7d4E~=-e1n+ujH?CZY%L=S{!!yy*3V$Z&PJG
+zzv-WkT0dB}v-df8&O6yn?WZ*QHAKuRf9CnbKII|yohJO59hZWJe43~6=VI;tsFh9r
+zS;l7s`<#Pacd#!cV6$IkoH_;ne*C5KamvA$(s{qXTJa%gTxeg*Ib?sH^EIAzKGDfI
+ztUmU?$luZ$l>7<G%h$lqlCL2c+7~F=b>^y`drzV#XW+xx!01W-B)WIT=^lG%if0qL
+zN1D!0F}epXd2kU-@6YsJ0LP1@Un2dvxbEej?=txKxYfw-xlALE{7m1?xc3AdJnVE(
+zaVv3Xz1U)P@QC)m;$NGXc70O^kDz~tiR~F1i0L5dF&*StV+S!ETpH2Ar3oG6U8sZH
+zCv|YyRCJJd!06zH!0^xL-~o8=b#R~4ll4wd4#s7xGxsOx;C`or#2GOi++by-v!RR*
+z?sBj<I@o&?us0@ju-EC}Zoenr?iVSOue1x<?nVdqI34VZ!|Lme=-`$V9i*Jm!7WY)
+z`_PxI@L{{vLG7c_eioyjThYPo2^}P@K$_7(aLI#90hpl<?ghtvr0*yFKtcx(rt9D{
+z>Zjy)GtNIj2iN+3(9Rvza~Z3HJ?aNF*RAn_FE(|s2OV6C4l?c%(?QZ>I>@ueWnwyb
+zs5x#>I%LNU!hVo<p$>AN)Iki(6#7B!y(hk#716<Nc<*&^h0~LnPES_HWm}$^qJt}a
+zKgb+yG^U&7ba0u|!6goMyMw(v0lPh+gY%pYE_FJ{{JLabCSPd@vR#S}E^|7#AP%c<
+zUPK4yr|2N%j1JCsI=BFR>3|Q5oDMS9Gsswq(ZLRMa8W`BNh^?MbP!zf;G#3LLmgZW
+zjw?uCNqToe2Un---~!}#?<DgYy|aSTrmk6Cr_;`dePZuhpU=oYhfi?T?ZLd7z6Vn}
+zqw$(s{l5DRj`*0`IO9~4eIMiR3a`?}(qe0dDs7|s2H-&MPK}#I)(y$8)I6icTD49{
+zW78AI%=|o)#;Y=J{gB4`?HL+w9TEPW?3~8c+K3b6!)YJqt;QrY78lN!Ry4n;H8`JU
+zeC*TL+vd`~@td^1MSj!`Y<xBM&?$}0d@qWJu~in2YNys&fCIQ_J&V?{H1V0j9BwYL
+zUIiFBlUaCa&C5dWYn_2P8@P$zI)mROk00X`e7EK^^2sfqn&akn{fonIERLVn-Arko
+zc_e`&a6%k;XK);j<5;cO^(W%vA9y^8)nj<#!>E5zKc{oOn|!qEKRh36*(t6Y!A^_+
+zp?r(>d~3@~tw|9tGcjIj9gpU=h38(6Cvj^GPv^%OJclEAjwSG{OcBqK1fIZY^3&lt
+zoWK*<9?#EvJc;4H=f-nu=!;^wdS}b%1MtAaahktio<eDg<BnxpM*DcD@32?#Rpehk
+z;9@zQ@hlu_<kh*-^0mG1qI2f_d!;==Tz8jCn?YXfC%!)t+tof|){2~x->-PE$}_M}
+zl_D{o&(m=8Z2tL2Jj>6y4;s^AykNSG@vNR}zp~Sxiq?%dJs+`aRYLtKPH~OP@WeGP
+zp<H-p^rvFa>Go|==W2Vo_&DdUM6>!0;+qNb$!44KkuQlKSx2@;K4VTk%;DShlpC7z
+z;hm8W<&AvsRbujS?_=^I&B%wn+A;auY1WN2<-_v?`M5lxeB85_&nalUrF@M4=Hyef
+zYe!5!Ic(Rhg!0KvalK1r;(C`*KD;yXDQ4sC8`w$tXnxYj2j72!e8wX3VVy&@@=vbU
+z>F<nuMzXH`C@#>uf83N0?~HsXZ`%)R-_#~(E2jOp_c8g9X4}sf<MR3IgnW3OARm_}
+zl#hG%@>w?(`Cx~`_LG~|Y(JH0F*{c4oHjK(QMBd4{uel*e0XQ%lbaToPp9g&{jYC7
+z_ksIlesT4;r#096a4){3`p3Wd*8OAI(d2rcG@pla<HNJ*FW(z5SLoL1F!$>3bq+l~
+z&_R8Rj&IVP8sJjj+{U_@!N9MVWu44>g2t~>?~C^~*S93!m)-l4DL-RE`GR}@#3b*(
+z;NDj!dH-qm{`>Czm5jwNt(_0JvyEgEg?l$;2eO;4>;B^o&iGq^^Rp2+`ZlQe5zgPg
+z349b=Rl#Q*d~Q0weS2hn`}VHW->Gc8ZsxbmoVlIfUh-R0pWnXBIg`<E3cRZ~ZR|g8
+zt}p)olioc0)Z42!vHfl%cbc^dg|m#O?#t5mG~=w&dCn$PoMpzTG+w2(3K~z<_^IM8
+zjpJ)PUuzRsmvDo5jMunc<$8tdWv**nFK}JudY+4M+tMYji(D7Dp4FL&c0FL5))lz5
+zTBWnAOdfAn%$Vo#3}eWv?6~_;H|KW1&Fh?q&+GW}9M>>5zJ{^!zC)RY8QZQi?}Cq>
+zr*4fol@2n0r1|vYtIV8*-%C<HK>Y`qAE|RL8}BrCtoB?y37^2(jP(yC>SSK=#jG1c
+zKVs`Kun#*JN9^2D?+~z$0u$J(cN6&d@t?v8(oed1mNS{g<C;6(mpg6d^`pFjmoeV#
+zjqql-<4v!_b6*0_UW;eQn?A>zJ&rfX$na*1<IUa#Zzx~d0`7aDi+B00jyL<^4YD=7
+z*_EiXFT$Jc5#DTdFt$71>;m>~U;?`U>=<wMk-opln~!<kXkI<an`;T)tdH<!t>evd
+zhv$X_p34)wS?PGw<9LHE8{VvNyjh>%4dr#7zs_Uq<(<AqVDx4qyt(S?T$8ACWrR1Y
+zBfRN$FjhO>tO52~U;?`U>=<u0kiN0Wn^!bHC%w_Uc9b`-CU~<X!kZ4qo0$&Jr3pM|
+zCV12Cc(cgy<`u`AS&lbL61<_jIe%{vbnz}f&+%p%ym{Hxxgb$zdxSUhBfOdCV9a;C
+zSpe(~U;<m;T!`^zDe23aygBB1qj}{BZ`6my+SCokb<eu~=2bTa{k$84Zb{(zyd5_V
+z+tdqz?QdSQW61d%jyH^#nm*x1SG>QWe2FpC!fT98^DciauzJ%9Z(eh}c_lGc{X%4{
+z`ej>>fql)vc-f6nzXI%6feGvauw%Swfj6y9-aPDi!<azkZtJ)4ZA&|^d&$qKY2D{%
+z7!Ppsy3c7&O=EIOH{Xl1^SaM5pK(cZYQ)pTFjYUVOS+F~%)Bno)yle9?7~^B&3WCU
+zc1}%xoa~d{h4UHQ`}vH;vR#bJ>04uFt<Z&_QFVKCbk?BeRqp{ta&OM34!^y74)pzo
+z{FzMS4tSaB^R~J9W%w!^8q>M65uH2fbnb}LxpN8mA4%xkQKxfftS)FA)AUtCPUp@h
+zbdK^mYrb#>ec_$X-Zg#Id99nh10G^0PbBI*8qvAq5uK|$7{{H?odEVp@d5b2j_KSv
+z($9CvzwZ~H{yk$fR(5v1fRWwdi0lrN|4_Q@YQOh3%kGeH&NPO=$@HI$y-a8a2mHLA
+z#-6`$y`FV*%Lg^Dr|~eY_vM@gzrNuh?cjjs_4FN|NIM`s)(&{Cau!5%jHNU$(hlY&
+z+5zvvcEEkC9WW+Z<%~YV%Y6}E?t{L)>Ad{SfB81^a<Ap3_6**#9pG2S+QF_!JJ{;l
+z!FtyYb|-XleWD#~bnRffYX=&Gl&`nJwS!%Wc0l>k2K010I?TI#uWJW;v@Uv{Z3lgc
+zIyXkz!Inrn=yfo*xOUJ7?5)5Aw$9ItwS(QH?`gIJ_66E@pm9~kRE_L<BC_it|Jrof
+zz4))*X4$Q!F51Cm`b*Oe7~`7I4pw`65Fg*_TO)hW9NP-p!5Z4ZYS{xj<`~)o(qrv_
+z=PKut#M;5W$o%#`JHH*;1Kx%0fcscG&=@G+STwv`8R6wh=v$G_%Rf5uHuG|Y<>mhd
+zFK^inh_zzvU}>ZsEOPB&mTL#g5;{36(GKRhcCf_T1I7~74%%HiSej@DlrOcTr%TXb
+z-sR`JcCcLbV7_e!9f>;UMcToFNIRJCU@UO$paa;8fC+5PzsK6aGSZhf+d&RKS$kmD
+zO&HnDjL2>#`CHRvcmKfKEW1|fq8;3Hj=j~*vA3qrv5$k(V)ivK#%0#@F_)404OYL`
+zL1STW<cK4gH_xA0)$n78KYY;c8B8Awnl}35ZMSpY!feiBn$~~$L+t%yUxyz*9Djf0
+zo;@&}#bo#VF?Rb5?eUFYWN#jOhu&Zx(HkG;V(-iwoszqa%_R@o@gu9;*cp2`8soh8
+zx~lc}+7}|+UqgN`eyBPA7%KzZv@(C;%9Kn!Gvf7tPg)uEO{(XKv@&Ktl$|q(;-+u4
+zt4uYmjM+Oiu?+jNO_}ezGT(FO6TAq$i%GNRSbYBai|kPw&vCIgZQS{thEMF*8qcBs
+z_ygKcru%X3@6i26X+J#s^^EW|^n1rU6Z?O7=leP3^ZnenfRom*bY-lcX>dTkX*~2}
+z<?5Tnm+{GHbaPC#$edD?MxC>v@7Q`8b?<4Ek5uD1q>(Xh)oXacxa{KSo;luyG;;50
+z+%g3kwHDxJG=9d>*yi?eO_ZaxV^P}`qtT3m{gWn*>^%=@WY1TP=a9ztM`(P1f=1qj
+zG;;50ls&tZ9JS`*W;EV(j5@goOMBncZr>l-gZ2AUA8XY7#_L~SSNrj{2l@8xv`No_
+znXo@<<URJgNUVn};LG*m>lF_K4Sh3X^VWdxxu}0Kdy!8)Q_=Zw>Z7zLS!ZawZz17l
+z`}4E&_-2p2%Jo`P$2V{70uJl14(MAPv^~~k%Kv&%YgqBS%J_EobGCLFU-<rotWAr4
+z8)jd^#_h8<?ta$BmiIF+!5-=w_%U~PY8-gl$2AC!!{GRBaQqH99;KbAFD&i1b((KN
+z(?)cb9ejIoVGv*MlLyZNc&dzG^38_RrNh|%BiKD?)ptVG*R;_Gf6sr<@(8x+uq~st
+zt0kWMTBh6YRSX4;F^V77=GZy|mimEH_w@eKmVj|a^WN6Ch4N?YbAG*kZ9k~*YN||r
+zqx~(d$F6UHryIc+U)Ow}0UGT&7F{+k>81=Y2Zx#0ro8&7GBiEl`<I*1a1|QX2Il)W
+zS_4gaV>e?obhP%DdZ6K=#mn%l2O2Kf=X|$*9Sy5p+8X;?>V}5Z(69y?)=okL>4pYi
+zdK$Jm8cI{4;asczp2c&>;dxW<L>gLd>o2W@hL<f~hK7~U@QQuTFV(N3VVO%?ZhuQl
+zp<x*`;5UWe$w<m!MVF-kn4X4Tax^?K1sb$&zi*LZT8;6WeaI7NsOGYxr6uwc?7CY+
+z!xH>=VqL?(`4JixI2t+}4fCO40W{zn78Xq+2ht53V0s$f3k~L5dFZ^}>H7y}&F&uT
+zsM{acrf)mU3mP9I@6Nui#sGR)=xFON%yc-+q)x^b3+>2<vBc6Whtn+jjCRf)pbbs~
+zR_W?(YBP@R$1h^Hp6m{6y>qAAeHi5%^d~LAVJxlGir&7;{cFgT`V8(Z)YWRs^m1S1
+zUOq{Ft4+&C-V0At2HHfU?kAz|qUci}oS&Dz_EP?1^n3~H3wAL+-&WT*#2;|q|D%ox
+za@9Ur;b`AkJf^xwmh&H&&u*!`USZ!R_2?VxZSYL>GH-qT`_4BSsBF5f@1T?4*p6}L
+zJZEIO8Xd3ae>?NN`@iYGOE`@-Fy_9s{^D);PT+;lfX>}}{V!SL6Qz+ct47;<$wR$5
+z6SVEqU8lbvJn>QS=`u7$&(P3WzT)qTqzk6b-Voeqo)~PwoCc1;jf-vX`@})n`pa(a
+zeO$1>Ju}_HH1&}-DJ<~xXMKoAZPRsLh~3{j;f!I{!1;63L|?RAhiGMwZQFZ^#b<Xl
+z+Ge{mL%>C2!4qKR_<lSv7PHP!yb+(O5&kId&^P5RpMeLQB_HfM_^DOwG0801A7o~H
+z)8~0d)}bb7Ps;XzjFs&bcrE!Fx+DW=kMe$;cao3f9ZiqQ_Z@2=5t{xk*O?ZlPVfbD
+zZJY}@`;^Wh$gu9NI;JzZ_(e~%`t1xxr<vcD(dqilwv4v&8=h5D`2cZjihqco^$g=^
+z`p$}MXf>zxbt*T9wCH+K!CmLz@@wkl*VL=$b*F0Jq%}wK9qZuP#eID^Gx{mu$%oXs
+zJ9EFVt5F{b?0v+atQYP3+4Qrs>Fa}*k6)^h_F>@E$gg!?*Rnx>cji4WX^%)Za5X*>
+z^-1fUDKJP&g^`^E#+bz|h6ia$7;C`e*l=LhsBOa6t>f#)aH*ugA#I7}5&gu>m+D2E
+z$N0)w#Z@1$zB01Xw`PX%lfR9h{2lz{qb6<(p3?b#TIVG`4~%6-Yxum{OJV)KxW6np
+zX}y=^l;KzHT7CEc^3q!FLCpgp|3T!x*!j(ax7qnDt<xT;*fKSKHD6R8&W;`{`gN_E
+zLu$^;R7b4tsE+Dz<h~NQ&$gH|vXnO~yvWz8U-I0h-=aIq4B3dr+Hhv{r}#BG1>Mpq
+z`qfeC!Kbi6c8tjOSAK1%`dx!V#lZlUSqlfO4g=GkgXqtT`j6PW8vJ;``Fb~{zX<(f
+zo__p2_HKILQ$C*Bj;Xsda-WUfJNn6M=qI0{pFD<sU`tL~C;g`Br>tcCX6b*@(O;Sh
+z{os47=+|Z1xy+FMkqDi`k^4&IKI`T0=qI0*zoWnC&P{tO^i%e&(7(>n|HM@2FSa0m
+zPruzC8Pd;M%clGz_u1&Zm;W>;|7lMC)13VO7W9MHTcMwRZcenVS1V5UXm9tK_F~&l
+zG-jw3?b_2{p{#7iT<L5sGdf4V!}h#L?S(M9?BHok-JeHd`iIb;j>ijsdYg?G1jm#I
+zuITc336EOE)-V4>=e<`)ERS{8ZFP7W<z~}&`7@2^k9e>167^2)PCmOo8`88_Q{KK;
+zowg5ieW%BxV%OK&IytA6{?O!uPX@n~d~MiN&nx-5)uQlRhkcc=+FkqMgR5%(d-1o5
+zLs;AVUBU4FzUuy4#UI)KIp5rh?On>X;@8}BN@q_EAusFaF>VBIW^WHV(x!2wF}o+m
+zeH-Ca)2~U4cUc=rmlpI}d+2Pzh-75<E41N%M8A6=J)OZj+Ck`d*tB)#`v>^)FWLPy
+z>~#SyuqVPV-UNOw1-?m(!0)u>CxbtbO~+kpMxuDjPGjHug|p5=n-m`F7PL1Y$qS8P
+z#NcJM&&9!GY-3V**uhkItapjQW8F&#FFVJ<vtu{a+!s#in{=}E`o2<)xq11GHRhJ@
+zM`k)-E$Uxs&rB5dG4{pOvY!imM15axQ^G&gx`Sw$I_nRp&-h~UqwJWa_RK9f1)hvq
+z@=ZYeGSkl4+hcLV=Q94;2U2~m0q9ule5qA#{7&aiD^0Pzfki*1Z%ho)cNv)4d!Mtu
+ztC{zuuT(!1+Lof-2W84~Z+(Q%xbI!qZ&&DBg+tV%emLyIsAqtB2C2vQ-+FKQt4<5^
+z|D{i<f%5~-{)ISK;^$pg({QdhobgZ9zsGPMj^NC_!MV~C$C+pC1ytXDQ=EAp#rY2%
+z&ZQ*I+4%XqsW^{#KBwS37QvZ&%jZwWai-rNq8=NIIa`s&XX=UKTyZ!*;c)ij(`n~*
+zr{bM$F)@?&#82RLXA5<C-_!Y!^eOTowI*0+sv6xf{S3Gl18Wa~c~idgK1xH6qoJCl
+zVZ_?{#iZX{#~lsCHWO$lMrh#P>Prd@6=!d$)7bRfEok6<l!k@SaBs>!aN%Bi)a*$+
+z)#A?JtMUvFiEV??zXvZh4`la8uH&0FnYv;T^&c}&Pi;O(zPaptwbSaxGnCgji$CW!
+zZ7kr8YzujAtGzyw>DRs&&QD;R(CvLm%w22G%QIQ+ec_y1)}(to`37^@+6yztJJE?v
+zePqzjQM31A+@AONBsvnan`Ta!_tKp&!nfFdnMir<&mzxF%m1<~Uvjz=tzZ4@t;+wR
+zEB{1Vd1$>=`47AD)wJ^P>sIA&I%lYPOn+`8^O%3mT%nmWWbWIa+j#BYPEALoAFqG?
+zlQrZ%>0IF(mFc5Dd~goy80OYq&rR=_4SDf5g45&Zq|QCnd4gB6+4@XmvIhU@8uQxW
+zJ@fD3x(4_jeqXBM$A@&DG4qDl+c!SPyhdfgDeZ4iKccgUy*-qDy!;!Cjee4`>tELV
+zo5n0Y5bD=Le@-!T_v4&@`{F0N8rL|F@ES0$6<hkRv5w%y2ZM&r&rRd~WwSPcGYfS_
+ztLpkld~D;Jk|*^);N&@3eRb%lS6W7|eOPle+K*w*K%JngtOYT8e&s{1z7NOi+ve)?
+z`a5ZT@UGrTeVyW+-TRwLpKWtbUGekFo$>k}a`kzApR_(~Zyj56jkPN^#)0ho{=~L;
+znZ5!%p1Oig`uXhWJk3X4eZGB6S|5G4#_F!o57ii(()UPG>AT(4r!!F{Kl+hqeK&1S
+z$vJq|iWnHb*lbVrXQtksuAqOH(Ld4u`qw{8-1V6nZD`W=6^l`_8hgDH-;{O2uHUT<
+z8#~c_M!yuVB>P=AFMn#nygYHrGsw!eGtJR!43=vW-Lzv{ZohTT)s0U)BRYPH&S`vg
+zHaO1q<ENzg@kZ_IsbyQt-ctGTu^4D9Gcg7-X*QnF98L`#^ZWg^&oWKsirIafRjV}j
+z>&Ngcri{^&7Q-`V_x4Y~voi%xlNP}<8^LoDyHFi##%mf|HnC=spTjBRx1`1Jtk^Rh
+zCg532iTO-g1kYUaoQKKmU$wJ|XH_v^0>@<hSFf0{(th)eJQx2(<y<4~i|Gfxx8gC$
+zS7W*NVk;)I<@$cO`uu_1L#K2$xc%ljG5Z9Z=EUl#+nBDu1N|E!&R0wp$0`1uzZ$Vh
+z6DR+T_7CtKoDa|j-`}(^F1FJ5eDp0pouw@tU&IC~R+N8P%i2Bcic6B;7^?D4{;|f4
+z1Vc7dac6zZ`>5Cn%ITfX$(BE=_v%Abm+BPEFs>qx@iRxPAFK6!HF)LiQ|Rv_Q~9mt
+z+x1!M4{_!^E8(1L;w<^A-o@Cs(68pb#hWurc&{;Si#y}<omm?r(4Po*l{Y>z=@x%C
+zW<|ZKU*#84KBR$sQ5ycp(NOX}lUviL_G5kTrY~-A3Ta{OvS_J9XrasmT6nK=wVXTG
+zggl;}dc}_S*NdJe=BPvyc}(4;3!Xpw#K>jD#tVXXpWu==MjvIO^f8!YWb{OmzF{|p
+zNnc{}SL~Q*Q&u*1tc^tIqs#>QcyH(fj_|0FC!{au=g2&LtjiO9<T3OOJNn2c91MMx
+z=A4G1kGwJZC=;dc3y!{OlD?uJhj;YlTC7fm^0V<-E!!Mt^>Z^ZUF5x?Z^Y3D+>pL(
+zi=6`;^YpRSOZ54=Nf*B~R~gcmvv|nX82ZQ?qmMFC`feJ_-Dz-d#&SG^>#16$r5Vc&
+z%N{0Tx&Lcwenl9|jadAr63fN*6lZ7RSIi|Qn-d@V9I-ra`Wp86t@swHHo9WR$~9i+
+z$EMrp!=rt2H8*XdKVZ_D<BQc!3rDsuwVrIG9^{s4V@IrR#B362F&jH<&nuZ=V=Fq(
+zBku21O<Kgp7Hz%8u1)5%<fK#1x9V)-8RJJbr7n{e;m4Tm_b26t(Gyn>dY8(NN{SCh
+zT8tmXNqo4R&Ywx}!=y#{(P`_oc775cE^Fy9`Z3n@;bQ!teNL#$q(%5KY<<B=`BAa&
+ztsXY(iTR4T6kn0F7(Y5E@fEWvIGVHwKd=u?pEi9AqKZuk^<%i{E5`UyN%8kgT7(}(
+z3ujV(<RbNSHtUJ<qn3@!w~igh_FI3iV&^BKc-8O$V{MDE%h0#N7rdFjXZA(XM`%rB
+zvVWNDo2F*o0pD;k8uiV^A^bsbz>oYaek6PS7~|JD392JTE3r@%_j+Z$p|uk~av1;a
+zu?c?UU9tT7u1ZKN<Nme}X!?;u#I3SrW-QG4HADDBPs`uK4hmP}OA^n^mkH-CnKO{@
+zWbJVe<LeKRmvfrkdMbVQ(v07dPviS4E4!!s8izOIvE(u3v(t@kRmbd{rB5^VpEN&L
+zsqa+!cgFsi{E@L|>WYr>cd<vV27e!Lc7LJUzb#!hu+c?3S8M&HkXB;S7_GzyijQO?
+zP5r~pzoNX-^e$?jwO*v!>0qjC&Ye>i;epnq$nM*5X$Lpw_|Q3>ce8C>q#0aEo4^N?
+zUv(+JgW>8OaP>y<`mynYK6|R<`0+i@5BfS&$FQ5b9&>(PDEkCI#vJ{W3wh$o$hR{*
+z;a#+DKh|3<I^PW#dawAngWsrr_<0cV#+NgEuQ>h`Bm5!F$})vNCO`Z!`5k{E^&32?
+zKZ@tSaXfk=$s_Eesb{Rk>I^ngK3`L3tS=n4k51>qQ7+_>D^ml8shfAvy6yM|_zt_W
+zz%V=-ap%89^@p?!^&1`)t?y-cG~#$P9N`gZR=z1bGWk_!M2Ci(^&32?D~e~I<54xq
+zql#N!&^gWWsA&D-kVlM@#oATT#RZfLdF0C2^S`7Y_6#rIuT+Pf?>pwo0>khq>(2O!
+z@`$vMN3NXhKU!UX6X8*|)yX%7N4yK*b#*Mlqe%URN7NPN(anAGR@vK#Pu^;M^5JPs
+zpM1pfBsRbDM{mw2_rAE_3;6E()t}%x_DXZzwT)S1D}Tak=l>_vnL0O@Yo19rkmDQN
+zZhY9DLl-=$wJWzgi;i(}&280k8$)|N7(J_w_aAZZz5PnQ*W8xM`@TE*zSF(;{Z{h*
+zn;DD$4(GgSEPjBq+x*<tn*T7h_Nlq8%ghJd>ddy-_<MylLL+yd8pN;E8lhq0WzT1=
+zIW}>WAD17o&n{MG+}+J@F)tO{7w5*`=@Xyiip_aWHijMbt7Xe4#6Ko2;_v5f5&v{X
+z;-73Y{)yFtuP~t=lNPCG<Q8$oa3rp%G~<d`J;juIOj@L#+%4+qY}QlF66Yqy6p~}r
+zZ+5Mc#-}I3OsrSJZ<o(+*FX6<#H}wfe!5#<gg>owM$Gymtuq2wttYxaGM}Qk!f5<)
+zjPc$YF^FG-K12+%3Ehd6Vca!Vh8Uza^7&ILqxIr-;*d@B33bLIYFXx0(NFm?Ls{lk
+z(NSxo-8v)mL*Gi&p2-Y)n%oOH0NlmK4+$RmhMQ}xL8Ic2A;zf(i3xPJiRJ{GKBnVE
+z*2eg@KI>2E8#Klz4`UM_+dM?OYo6E50;V~l=>g{h4c@G7+S!D<J0o>-FF!?V%j0!3
+zK5gVh41r!5KY6Z=qxQS{ORj!@W_dd8DQkRkk@~qe^`qPJX=6B4Y?|;0$ESzmxO~as
+z^2AhdaXz4p1)Us<5nQ-8xQwLWLjNHA3@*Hvzg0s&qI~&;!=*YET!?)q$fXj&g?q~v
+zTW_2%5nOWdaczH2^FnZ$bdAk#n=z=S56CmLozj?ZxW;D8#!^uq@Y;o`*%&`AJ4hQC
+zaBaZ*(B3b+>3SRF?)Q;B!1pxe%cPyDxfni=-xf5qKfjH2zPhKK&PnbiOY<8h?C;5D
+zM+fMK^i9^N&6*2bvu_7^**RqUy=lHPNnVXtSv?w{@6tG$&YhgtN5=c4v~dxg<FEbv
+z>JP@Vb6NLz_x0a#>#(1Ohf4SBsRzJC^KiEBSkGSm;3eM%HJ7IK*m_r^kJUL%1K91s
+z?48KMeoOUf<Q!S2@RZg@T7Tl9>(TWAMt<SA$LEYJ2kC#kEX8x3rS@KUeyhBamGVkH
+zS|^#d{#xrK2N>(Jw9@y{@A`ZFdKiDjUdk!Sl(o%@;m!W6tlO_Orm+ufqj0axrhhj3
+z<N4JYE?n?c>nU`G=#P+zJtIqJWoaD=7jo8EnU}x5Gdk?>#O~pfsb8=*elR<m{tUU&
+zUvyCCRn3bI+k4gFWvFs0qgZY*t3FV=VDo8gPP$Pq+PQG))-AvJ01q|RX5i#peb6Hw
+zR;fqvr0N;KHVmQ@q)+g{JT0n!26Zmxe9|_~C)K%iQTtlMZjiS>!~C^$?BjMW;whs~
+z=#|z$4KmJIqHP!*mk;ql_RgXYS6CzE$K~vJpVh<5l#$MQT^tz3PXqVwqCd86%(?!j
+z^V}W<=+iiwp{;2BIXi~q#;_`OPEhn{FPn*%bJo{0Ww;kVG^eTlU2SRMY`gzT<78%x
+zPGgJkfc>cbwN8zn%r>+{`OpS`X22iu!mQO8vvo)g>c9ND51o-<>gB!1+u$~0^K1Q>
+z#<Ap651?;@=$*;mY5RQP=g$L?ZW|kswKOQ-Ft$?bV$C`0!_H2iuY>5V{4I_5dcHnA
+zg1wPWkk7!OoOof<pxNTA`Eh&?H?~@Zelwm^wEPO^c`Mc?${!2!j#ypu`%nZ|Z9k*7
+zSCoCD{pGC9`xyPgJB^3>lPkz3iOW3U0zKCLIvO0kx1wz_nCkb!F*axx?6f}6^UBV7
+zpqKQ&eyx*ip!Vstz&9&5@y^L>*xnCdHzvHJjPgx}+jCRyPiKrux6J<5v5ejCn$<o+
+z<k)HP@@>z@aI%l0N%J@AGY7Dl1N52d+Xv`tWy^GCmu!>zqaT?*^e&!tsh^$8FIUB$
+z+YsuXsaNe*c<^iRGO?0rKlhPVt61Mi-{V%>Ujz<ef10!NS~F<ZYDW`dJd<W)uO;qm
+z=3`@auW2juAAg3PSF;)Rj>YGL)Q_m`sUK*iPc->P0+TOkGrkS|-+_L~%k%;8NqGBx
+zp;0?vY)8@C4r|AKIoTZTg^Kp~A)TFX#%|d8D8U)Z{(tP<e_W+?o&Wy>oKZ|NDl9D0
+zqeDd-qf|^$a_O<5qM{^ai;63mhEXPQB*ny{4IA31sAwgnBt1G<XjIf<QBhH{g+;qm
+zv{7Ll8@9-(*j+6AEL)$)^Lo9QfiuI{?x)-L`;Xjo?!4Z=ulM!7ew?4MPuU;pW4(Q?
+zt@XbdHpDqW_oRBCt6ryKeMgUv^m$m-xtnWHn){d(*MyzLcCH@Hsa?IB$A|0pO!rgY
+z-q*u^@$17~_t@*NhtIbM|FZM#;q&YPE3a#{#-U^GRQ8d^vVN}Fd6r*0*e^Qg>-`Aj
+zlCnE7sz;umpQCHz`Z+T?SFom|GTbw&?GJDF_V%owNBx|!%g@=IJELp(c6+TodJjfU
+zw)d_3x08PJ$;bIMhq0_*7l!uO>*9J%UFXWE&**nw=j2E0e3!omM%&BpI@WbOtY6PQ
+z`IyaZ>-`?lxox|h7xX?XeST2w|2o<yeof?gWgQo~Cf!AQ7f|M|L-zMV^w}WY2iZJW
+zUs?}$?$UGNey_9LeqX<DT`#Nc8=~!KoV2HLvKBt1_wt-c-IL;-7j3+@GNuomd425P
+zb#IZ#;{Eg2pW)9x@qX4bV~5}S5Ve2M_Q}pC`aU_Z`85-r2hOCwJ9GSAfIjsYPS>sV
+zdy#`&`=WVZTQtUK``H$4|N8d_udj#E?K$7mXBrFE_Yc3TPBfN#d><e3*HRcug1p1m
+zkb{0L<rvi*q;hC~*D<c62aa5WwBOdZQ~gBO(gXI|rG2(Be^t*lGQNW7nnT~Jqw9vs
+z>vP}Hx>&!S|G$hO$JW~6>q^ErqW(#X`rTu%haB^om!sE>7~6JxjYFRmjqVK&sjjd4
+z=y%<-`f=^C&9n8f)i{36^=)X6U(bCmqt9vW(Q8xr+z)Y$+GW2-?UAlIx|6ho%-I&*
+zk7;}w&#c;GKWSdI&xW@9d4##tTDo&r_V>2SgWE8FHHY@^JYc_TogLo)K9=>d*?#rD
+zDSxcK@1}2^KcmmEuy!?XS_5b3*wFXr+@r_N_MJ9dQ~29_d_UsJ{LgdP`dcOU`+LF{
+z`JR#WzuUL*yKVk_K+mUd<1-CeJbs8hbcp&7QpY~i!sl9eKd+wKP4PLF+YX$;^IWI%
+zePXAtE*^+|Xp#2QyeD1X=csMDpFV!U_nj>0I>C45Z2a!62czepU&MRBv!eHauRP{-
+zzGEkgeq(%=qTsHxcr9)Fqu1Xre!-n9C%$l1-}mwtJ?^{b#P8|(;pjev?TNDwbUzZ^
+zr`+R@1Gnp3P5LgK>$Ju?zpu}0{w4P)sT{vg(LD<H)w)lyb-4b%LG{JDIN<jtdo&h5
+zXVYJ_U$<|#H_6GkH#zi|U$b@Hi|%jO@4COy<5}Hf>AB3?xyRc0U2htr?lV%{D-7l2
+zQ^p^k9<=+4=pN(1`s2mJj}5(!9tZei(>+$^@IA(^zkIyw?{SXqRkp9+&-i^tj`fk^
+zF_OMVj`2p<Uc0x5&hv-If7Ihr9%F92X57jBiSEIo$EDnh=-Q#}x92%7iXM+1^KmHW
+ze!a(3<)X)-+`p`!>r*+LLuun~9-G>|O~L9lPx0#v+j982t#aBI+jZ{s^H=n{uL1I-
+zHE?Ld<4}Irv8;R1=={v%yxaWmmFxTxT{91^-(OhSyLqgq@#wLF>gb%NaqIDd&O3+n
+zSn`1Vt~IL1fV!8yjcfPe`?Y&)n~rs#bn0nG?vtYa_vl_Ky8cA_Wqn?vdpM3C8;jj<
+zUGwB4_e9aTl*cjAea`y(J{YsLY1?}z<IufV^cb7#N`moc-UsM@e*JxC>-PhH^KkbA
+zhip8D?+0?$=g_aIhy2`4pX>JlhtJOkwI6jH+ch-WzFl5^yTAWtk6o{i)bVx?*!3Z*
+z!x+>~bgkZH_i{tq?cOeW+`Gk?j<oq#8pl1>&f)81##o}qy=+f(zrglI+rG=T_sCd|
+z-ab7izEzviJpldK+P3!_AM+mIpqIJF-;=z@=jnjWQ#6m!@4DvtJ%Gni9_7`?R^y27
+z0eqj><53+idVVze`)YO%a7gd7@#B^BXx);QpxrwU+CBErJvN@`9>CXy-ZNu!<@a;D
+zHnh3je*a&u9omY<K|9A9$LBWQ59HV!{8jG<a*llVRrkdF&-b|T8At95)<5I;AlLiD
+z_XpeyME3|>gY-Q5o!lo3ai75VGxOLndcSM*7$eQS!LPYrP+RwNkFdx+#+}sB^=t7S
+z?j^X7Nb`BR``16C$Nj@ExMzs&CHNfMrh5rKPq*>&nt#=M3Fh>X*99JVUEq<|1!B?t
+zQ*{4$fXA@cKk~Z35ci6?Jb(De>jL_mn_v65e~7ME+&4tmE3Ua`a{b)&xc45vhd6lT
+z9_f+S1-Q@LW%rrKzCZH&vh}%p<aL4QvCJc{3-B0k&-&x&M_w1md>!_Y*9H9X%r1Lu
+z@W|@|kGw7rJtjY7*P2IO7x3%q0lO!8<aL2ZUKe=eb%94-7dYzuX^*@vaQOWbkGwAM
+zS9(64Yp|X-e&lt5M_w1O=lK5zuPHt9x`4gM;Qz1J1@xJ?UG|-HxAXotUh5c(zQ>W*
+z-8X(-AbS7fc6*P3{(fcjJ_BBV)$2j_T&g}FWUmA3In_H4ZSnaqp7%NGJ&I9U^qO+?
+zI=8)dH2?5x-G|%f-ZuJ-p4#8DMf<ys(SDS+q5bW;S3bJ^p&WZ(rQWxw=R-Gsu5GLD
+zzp&TkAA5ML`rZe<?jDVK*U{f^wy90t3%dEW{^<KGK9s}z=nnGw_B(j3pZ9T$>GK(S
+zf4;qTsL!J4_3xtSJ>HLcvcD&ee(&Tn6MAj>f+ty;zDpv-SnM^si^uGJ<N3U=NAKCl
+zrwx1We)G22&giie`&X}v>pdpXYuc2HUPIkuuhU2E@cW}whP>##+4@|@p6u`4#cT5V
+zuC(>n<JVtPxAk!<uix9+Sik1#`_A+oX!`!M!>`GDKWbb3u5a)9_XXb0d%^TQXnJjw
+z?Yw-qe{Y-KYw$lFH}9)RZP&P;$hZr)9`_+1_o?=H`?egtcT3+hz2W_D4>RsIA9uBn
+z`~LrzakF-Hj@A29@8Z2B`uxk5bDm@0(eq&b`f~;T7?C!j*LnA3ye9rI+wnr*j^@9{
+zb{zEWIKX!Bo@ssm=a$>Se$sJ&O`dN@j;~AFh_>U<|7<%r=J;C^N3ZQ%{)XN9T04<4
+ztl{Xrha1zQ<K!MY9*+6^HpfCVrd@LVIV(%k`@-#5v{=8FZ0PfW=>2$`$EEjPMc32=
+zHV1Z0`1>*GOY?H*SoIEhy@MO-@q5&k*ZbkI>g9Nudp6YL_l@<wb*y^Zz09Ev_4s{b
+zy)RPlFM8kGffM<h_G3BkJ(lwx=VHy#K|2nQdwpWAH0QcL>HANk??L4}YVV0V^7j(;
+z8ja3{hp#2O{P&D=zRoL0U8|zB4cC$!?XQe$iP~pP9&Z1hEv{9p-=o@((l)ez;277c
+zX#5-6-?c^i+mF$Hly;>3+j5SK{q_U){`=_Kb<eBDqR&Zlt^J>TZ&P&b;(cYuymm2e
+zz0R?I?Rr_luU+(2eWG837=u3Vr|VeO`gcSg@bf!sOxGp7e^2lIi;jgHJI?g^3GD~H
+zkMXwk_tlUWU8ABrz5j`8&cSRx3vHi|-12;LkFAFv7OkK2?eoj}Y}esyRn#wSdfPS@
+z_WLed|1&zr9Q0$*)4oHRwym1;=L38;q2%o^yZIS!f7H!)?eWhF{P%l)bHR3>6Vfzx
+z&JViQeNyj#(|TIG_SPp=pB0P#zM`%{N`D6BG+$?)>eu}Z^K+;6<2^n{2km`)>(_m6
+z`|{h?uSW+q&$HeS6kY$L`hGp;_vrdho?ZXh7u)}m>!^+Y)b;nX@3Cu9Do6Jc8Ru{B
+zZ@vG_xxG&Fs5O&$9s1vl|A1eI*pCl?J+=2v-TgSf4juCADQ!gO{Coaq+wl_Lj^@9{
+zcI4PvOECuze?7JB*m;U?#~#1t(1u;RtgXXq{bBaUsnJ?L##%YJdHtUpmD`+l!ZFgK
+zYwRw&MjrDTduV;UR%ZRRpu^vHtM`)n>qODo@!$2H(T%Zw=NR~h^<y@=jvnyWm-g8E
+z<D&A>@2vCn>$k_5^?#u2;=#@Hp!bwU*T91tKHI|YQQ84Zi~7y1m*Zvb*-($)H`a@;
+z-<kEcdznKU>hb%=db)n=J@(Q2>{+|(?^n<K&Yh_&TOaz{P;4vjmF4fP`sbsx?SJXt
+zr%g~;KgsCdSS;Z_!vD83ko{+VF1{?5{YRHS<{QPo!t1i{=U+}q**}gV7IPGRCyM^b
+zqpw8K7d-k*6y533ZBcZyM>j;#`#pMB6urZvYoqAR9_@>wJs!OtHO7n0^%>%RJo?F$
+z&+JD(e=Rq*&wDdB{p`Bxy4JQUU%s#HlHFHb@!axr_C)dJ``XUF`r3V$w#8n&yKQ$%
+zV((Q~U3pbhuWH|Ad#`RwwCuj_%4^yZSM0m`irsB{nqR<ScV>{F#NY0}`kL0(E3azX
+z+mvYDeRXr<(rfnbY1?-tfA>84`P=<_+gtbUA-m<e#HCkWv%e{^e_u=D+U9*NdlT2}
+zzxJx#t*!g^UzXUtKXGBJ>e2gKcDG!!*X#dpDZH?A&))ZaxW4|s&wJNX?x<Q;JINEX
+zIaS+Ffx*{RZ2s}|SnU@1O<ufWi~Ir4pXZNpGWSQdALE3hpJep!(fLWwuVbXgs^9k*
+ztGHGF)1E)JMgL1&==76}{yn<?Qr>v3pZqQQuPm~BU#mR4-27AhF!^;4li%q1TkW4V
+z&(Ei4&f`bTZ`bKIo~`Qldw%5>^E12s`1Kb(pTC2C%>7gLwBy&W^85)7(qrx4^0SX$
+zzuNOhw-|p@`SI(wd;WlmC1OYIzk;2|uV3Q%Mf?GsW6ggRAMVl5R_mkoVe%UuCcoM9
+zx7xoQp0DHVSo7OaZR6Xjey`^@KknG|S6^rK{XB5g`fGUo@$)AhCcn7h`1QLzf2;8i
+zcz%o<p~oKM_!#hkZ?%7h9wvYEVe-58+W425nPbiWJYO2BpB95sn}4b=x7e2{O>F)d
+z^!#Z1^N(J?V;l32vHjDYpUVUsYkY+~Fw;+oan$&do<H~KE$YA9DsHuZN<Dv^gXdWN
+z*S*K;`!pZb|Cr}*)&8{SZ`J<F`;Om!eb4d7-{SdOwcq!F<F~)+`CE-Y?}Ju<tM<$F
+z&Ub#cnxB5p->Us#&)=&3*&B}Eenp?<Z`FQ{=TESIk9B@rxbgV)S3Q5L`n?}He*Hnu
+z->QCPbmHd$t2J}f`l|K(V$PrW$2fl4?y!nm-G2;w{#NZzcz%rQ-?8SW_*2K<z6#H;
+z;^cO$<EP`RR)4GYk$#x`s;?ct{?NnZ=S>{HeyitiH9uXRpXU61tod)c*V^Bze!J%v
+z+m-#O{X6iT<JTYY{H^NGe)stG7d?N1`_N<U-y#0Ms(!W_|G4LOGxB3?f7LIJU%%e-
+zJGLEreUv?5^|x9dwM)luzsd7gx43_sS~-6Er4Jsz{iNp?(f+ZvzhUk8^;<pPuZ&0S
+z|JFYpzkZkJ*KlwhYyZt;k;>0j`)|SXtF~CbC679O{YuYoKl#}GuRihk_45iXzsfjj
+z`)f}-e*GrTZ|3pOvF3l8H?bdY`_rCZ8<jfx@kv?Y`1Pwie}ZDiI={uwI)42^&)@3t
+zP2JOvU%%P&N4HqtMdw)k<QCi4;Q8%a<j;D(-(Rtbn}60kf2;MCUuOO5_&C=5l<HLl
+zev;9@N6&wY=Z|iYpQy0<TaB;U^S2sbgXeFx|B7B<?Qd1T%=5R}e=X-9zka9ZZ?*r*
+zUvm8UY4iN8_TQ4{Z#6#!)yE%SiRW*%|EexL{`k5)f2;jhQET<L8egO5Z#DmIp5M8}
+z^B*g(KK}OQzQ*!9wpgE>Q=*@&w_X&>YCk<IKktlKf|Nr3U*PFN{gg)~_@_4SDfzc#
+zeJr~#9xEoS<o^jP@@L<^Sghtq8C6rcCjRgL3(DzMzV$CCr@5|vm~xYE$cp`#(M*`Z
+zI96rHc8p;nJJvF4h9h_u@vs^8q3ZRTK@+n5J4)S^(BcV9(%z^$h!+rddfetVd3rsn
+zo%sfH%x%Tdtk{kg<W$hoY=%wveBwqktU#XX*s=V2t3QOdP;U@bFJ*=UsCxZo*ovxG
+zg6e<aby=})>ZMWj=FM;pRd3b|M^N<|@!6E0ey!E-MGl!AJ*fKKX4r+#C+;-E22}kd
+zs{T@aR%{RPBtDz@o-o56d@1=Yp5E-~W%wS_^E^G*(`R0j6}y%6VN^RqX4r~%lfK6B
+z@J9NXM{Vz*+v1kHG1UHB`CD@Vwf}lh^_txTevx*I@Of-sp&1t7^NI7#aIwy|H-)NS
+zj|Zt&hpJa=hBc^q)n=GL&C}e)R&M~`PrZIry*@MSMb+yu!)8>y1V;PyqO8~}sFz07
+zn>WKbRJ~a<96{A<#%EK$47Fc!6*Hf4Gn{!<R*X~Ij!{(lh#7X_2T5=A^af8a#yd!l
+zdHNdXE$W4n_+`?Yk@LWgT6`)N<KHmf3DogeWQMu;6Y^*2{2Amo<LRiuXgjB0X|}s1
+zsQp;v=AriEAd{i;HEy9hS!3zFZW8w~zDnd=Ra0RGW%w+{RceO07|o9vj=bFJ4dQmn
+zrOa?Z(oVk_G~;6!Pa|qSG?-yAYW^4b1K=9x6h4P|6dz0ZKIA#&9X+Ue-DcQ|Jf*m!
+z7N1CdIci*GW|)unlb?q_WE{C>5XXNdj+wy{2c6czII8}b8Fu00X}4A}<H_^<T+bio
+z;J=*oBIK#V9dSGh=eQ1Qf6k)z=ZqPSqxNS#YCkT&*tWOLEk^CXLN^z+{{~)U<qF+#
+zZlEuqoe?~T{!^%V88E{({5#Uia37Z9nQU)~86;5qv&al%sO?_c6&cRpJE%8^T6e8(
+z8EXIJqxR3*3$334R6o6_{oiAT-I$=?E;DFHwVOoV{I;V2)o;ET&R@Vg{K+4~Cy+ma
+z+OA<U>__eIF4X?2N7b)0!vty_EG9{(oncA-kQugl-0E>YYX7yJpA~DMy(-lFSGXmp
+z`7c6k_wadUy&H390!wdqn^60u0X6=5Gb}^RXD({~7Amu1rxMTMDL9B4Z^{fCQT--S
+z<x5e=LmujQh@;w%nc?EOHa}yic^E*o*KdaHsN<mxbv(41K?~}5Xf}gd)cht;^^44K
+z;RSX)45Q|^7@H}VhnlyzyUL(6Z=<O3ce@>^d1*)fYiTpXCe(hdM9ohEwY_<$?OmzJ
+ziaiczP~(|4!y$~0PYkJFfoEtusN*jeb^OK6aG8sNj=ynKKeediaPhe|&QZ6~&BtiF
+z+?AcST|KDnDtGnHvS@vjo9%81>bNMz)0y9d85E+9zXCH{W@EKoOJ>-Qs@H=$p1RGj
+z3!g$eon}yr|3SHGWU5-K%rFnNe`fec;~GJdb`0POcHn<v8>(Kb8P=orLk0dH@{3U8
+zDm25@XW9B$L7qygSvG?u{Ac1tGnhrKpFvdplo__*A85BiF|L$Z{<0bNp^nEmzJ~fs
+zES4giK<&?Q)czbZ!$H*kOrrMV+}XCh4Q?K4|Ha(p9k&0vQ1cRV2TMsO?nj#1(T$py
+zE;DREolgr<`=tP%%=YG+K`v^4#?5f?nYLXEW;llLpk5DZ-POB=sBx_Rjh_!t{dA%F
+zX-Dn<HZyF+C(&<<88o8WEx|wH+B2-*RWqE#PSR8O5cZ?CtIrHOQTw|EwZD?6{Z(m(
+zxu|t8Q$jlSN%DKmu)*Vck5`{=`>z4(X|EJD{|PrAbzX?0w!80XX3|}Js>Ne&qg#X8
+zFIA}VC(W=BHJ{7HHh<H&O1TOAckDrpx7!S>QT>*nj)wx&@vySpj)x^w`-^5cgPNZd
+zY96{!?RA=ABkFwGfI1%P&7cl-Jk**&1!{hCQT5|yIDM8K4}GZl&BMzmw{oV<+mf3`
+z&D#KK{H<;iYF-*q<8Cm+8q~OpQS+0F+TN9fZSOojNIZrb&!`#pVsw1sYpK6>Mpmqh
+z`m=Z;@c@<**Wi<}40$QGrqm49PS1)Rpxrc1QGOQhBX0HdI{YT-)%dTZFFeJ{PvIo#
+z<M=P6H+p(CPLp1Vzg77nD?g3jCVc{bNqQH)2|JNfdP|2Hwxi~y%?uk*^IR<1?t~dG
+zKiT3XGaSXsDc9%ey`J8J+TYFiMYg-i3>xuE#0_SUM73XOh6Sj4`S@kZ<(WY)juXet
+zApIn(H*bc+sCq-l-@L3DG=mh55)YU`JF34nGps_@OXA&>t2BcO{5)~F8RVnt<(c99
+zX;yCzzd*TJGnm0K;%PJJ$1LJLGw4QMlB(%4gL-^B{a2vY%W9#mmo#d<%$vb9{)BlR
+z#vfo0PGbu`fHimsOHuumm_Y*7Uy&Kakmtm9%sw$IHc0x68BC*|=a|Aa*1@D1j$xYe
+zqxf;kkC?$Qeu8+&4Ej**^_oE=-bLJC2KA`+>rn02nqd{H{Ui=kzS0aT@KeO)W{^O&
+zS7ZiDPsob(5igp-0;>Hqs{MI0oI$lejW<$$$_ys)CgKS*7)G@>WCrc{QQ|f;XhpT(
+zf@;6n3>#4G*W&=?>&&1QKSo?*1{J9G%FQ5-DdLzJtetA@ucF#tF~dbv`wMtG<<n*`
+zj|Yk8%wQ7L-h>(Sqt;V3>ikoRT2CcruvTE_$3@AynMSRzF+2}bcpLrJ;k$_E9&hC*
+zCGiky9rmHhci_#GFGH0deVmm~N#ZWldTm9Oug4ElJ`YvC@3B_CQxZ3!)^#nad?kL8
+z@~in)z6W)FZ<pjZpw@pis(c0BL4Gc({nTUZ_#H6AR*zdeu0Wj!%2DgQ%nVBL6Ph<O
+z$U~h6a?Nnz6swm;o#*DwU=DSjn>B+`RJ{>1?DDwN<2qFTwW#Bu#tf=a$3c}DBv9=X
+znc>o-t==N)e7Rr-Y1H|0-V8=D>fa38J#O>33e|rSb(~b1K?UkKDK~?BR6BWQIG<<r
+z=1}L|Su>bHop-0rU=UR=WrocjH+fu+>c0$i9F>|u3F<g1HiH<dowbuA!)a8#Db)FU
+z(hMe0=kIYd=tI@(HN$$3>pU(-wUa;{XGLaEh&s*+%wYLZ*3Oa{j-%?0p{@g?W-x-f
+z4h)+?3uX~Fn?VEWyj*VvW%x4MiKC9&(Ua`B?MEHAeP&RP^OVcQ63VsbT3mvP`%kpE
+z8Wm5RU~va3j(I$}&Ek60ywsUtiO0nruf%QpmQm|_$qW`z>wCcrCQ<E7m|>sCy&gBC
+z=BWv_P8-dj0kux+&7cg`PN^BL<XF6Hh7+iE#!>5S%nU|R>utmgx>4<PnPH8`)gBk3
+z+9^P-n|w3KL#>-!Ge~D!JM(5Z=yA&9R#ZDJsQuq;22H5_-)IK;m_?jt1~JtBU(1RN
+z=J0B57wWt=j9LdRsPlInY8}*?K^1m!UQ6Qhxn5M7VJSxUv#4<;P~$2xgF@7}3d~@Z
+zQK_97R6EmVIF4#(6xGfMYMzG8U<fr&gJ#f#YNrv^PJ<cNpxUWIwUb2cw@NdpK<&43
+zGg$d^ENW*N)y|R`&g1#ipGCDZgIY(^W-x_XN0VmIg&I#Ms+|rqY{B!X--K$X5w)%x
+z%%C2%uItPoj?bo@ao$gmMf#W-jG*@4uo<-Di)gO_wcm<R`z?;zZ!t4i`R`cl>7*~B
+z`d>ippR^gwqxR378H}RJ524BrqV_||3<gm9q2CPJQ01FZ<(p9R-Dn04sQIopgK|{)
+z5>)wO)VwClpa?aug=Vm_=Htg`{HXa$o54J4{^rb}53`7S&7d1KZ(U~4gl+U&ftt6)
+z|FU_TM$Oxl8T8{k<vQ?y)*0$?Qytz%T#P!u&Hf)NH-;)VfO;I&i~p*6sB-zJ_SPP<
+zato-(Rde_+lp8{oYe1E&MzvRldYn~^za?H-wQ@tKa($?B9jM1$t*FOcNmP6K=72X5
+z>n{;Jk9Da}!eXdTCu^PNnc>PGZQV^uomb7U*W(_K>+o{gEBEv=PtQl~pFI2`^O$P}
+zar_c-%nTO(VC|>PZ~|3t9KTGtF*6v&apDm(=tGUG*9==x^;%Htt=SBkQ0uMH3@TCe
+zD$Fn+qj93vb*>r2@$<wnGnjwS>dl$q2&&#Net~jBW-y3j#3?gq#Vq0$GiXGuzXmfX
+z$LlmtsQboTJd^Ro%`k>~9&K$UG91MBs(mvUKs_$#$7c3lpBZ+e_Dc(@e6tzkVLAOR
+z{HHl1DK~=8!3Nxi^{DkwXNEO+8tqh@!Tf(%{XtC9ULRghy<Swk9y6@K^T{v8_hABc
+z+!UaWo8^Cx+4GMWwS!SR7`0=D6&SUHQ9G#PssMFdEiZdJ7`1~@I~cWNh7}mKgHb!E
+z<E{X8+%5m!+rg+EjM~Ad9W$)Js2z;jK^>O`sN-_^ch=50>ij)~I_?Hh$6d+{2T<+y
+zn_&m4e7R)5mzm+xZ!KOl!y%6cJ#O;2(c|SM+yC`g#kfjwi2YY$2E|He-6Zg8`Y$rW
+zd`we54~HqAYX))r6miT9mVRUHEt<g?{sZ}=W-x+ke;C#NkQol3+V963Dc@%Xy?7IG
+zj~TS1+G{g|D(ojtnn5M1{R&k3<z`rdYQGo<D4#HcBK#O}p&7(c?ZwPs;Q_9nwAY3@
+z4qH*jVT&0yV}iKJ47+|Ei@kvI)u`iXWib{zmpFyHuo!Pq|7K8x8gC(Lyai^MiyChn
+zZ`XLtVC`42=)Ql|3>HxBrOluZ)o(Zc96LR3lZ?L+pM!OtUy5bKC8+gQY=%WxNV|n*
+z5W`>4-r_G~vCrTrs-HppH1=Z>d-0vL*Mn-W+YDP!$3+uPVFT(ouf?AcC-GJ+L!CcM
+zQQKW&2F0kyI|(z0<4($@|IPZJMfE?8>VFE=|D+iXq54nZH?bdee&|8<-+>>&7F7Su
+zsCCk0292n7(qINjRR2Y&?axQ`pNr~0j_N;Vh6@YU|2*ovGK)H|OriQ8!y9l2)&C&s
+zI7pen0O~mCH-ipT|MjT;Yf$}Hq54mv`mZ#@1Zw*WaT@bc=c72P|CK|r*qyk5>OYOc
+z^fzw?bExBd)(pl_{db|xOYNxhSR3j*)@p_=sBtu#VJ)hBzT~*cGsCH0*m<c2UqZVj
+z7~OX<7~QYV;N$3j+6=}}_lLvyXzau2dG55OPvMEAkD$_*e{Sgum_<B|N-yyAT-16@
+zGZ|`k7PUTxJx-zaSG&h8sQIh%xB_)QwQ!$Z*VAS&hq|uMn!yOZh3)Ic=y4Qgk>6|v
+zO{nsXW>AUR{u0#o7n?yYK9lrCZthfn!3@&)SmJpzn8T=lGpI-Y+fm9tn*S0rT>Gir
+z2aciAN6oMYHNS1B`Km$nTZ-zp#0-j2{U*$y2-R<)8R$hm)l2`_>dl+M9ID=|8O)&S
+zO`Ab2YP`j$aV5-fWzNPsf=VAY!!Fc*Z$XW>3e|5hYP<<EC_?pHXa)tSe)G*>^<S;t
+z9ID=|8O)&SO`E|Ks@|j-RHMdQgc?_&87}?M@5fQ;gJ#%)T8~Yr@m8Y7TcmW_Ei{7y
+zRKNLVkca9w*9>NVVEqnZ)V>+Eqwep^J-y7+b5ZMk?E6-)2UV}z3>#4O3O&8R)0e(y
+z$Hf3@J6lopTFfwss<$>{>8oZqgF1dXQT6IPzt;1MQT5XQV)f?Da1?c%HKFQNcz(I(
+z=c4LO{<GDaFvEV-@i_n8SnL|=jiZjY4%G3~gpXtX8qJ^zb4jm2?T0l^lG(V7ibrvc
+z_J%xe$2sD9{2o@|x3LfxarHZ#M{x$VAE(V=61CqZ%wP~-$@scZ<EuiAuM{=D5;Mrd
+zN0A;wjc4-Pe0T`QP;m$TiT+wWPNJSSPv8$w5BjDteQzv!{(1rr5%;6U*JlPjcoK29
+z8MNTFjIRncz7kaVVlznKNyJ5Fu)@V%<DW;3f6fg0Fpu<BjMj@8CQ;{?64Z9AaB)5X
+zXHey)%`k;JuDem?>i#Ll4&r_RRj$+wW2ob4anj0--^04mcB0DlnPD?({TJX5arqmT
+zzhs6JsPlgd{xep4ewF7JVs!ofdMvg?{vfLTlo__8)@?cd8y0wezUMDb*!pb8w=uu9
+zsQb$r)cs|(8CGF}IBAAUU$b(HsB#Ntm`0VGH^XjJdtH{_(rJbrmfzBDhQ+9I3CnLO
+zGQ&d4Zz(XtiLY9@aa6x!W;lxKcf<^fQR^fZv)KP}Gl-$q$=X*UgE`bXnMAFV2{ULx
+z-B&hB%?Ij!wG5+i;)lpz8@KshHN$y4iS|Z3ec01`u$B6Co?h$eC8%|mhgwgIJo%u0
+z=OyK*Q2h?0`W?UzlHZQn&uwN{k2%yY_4E=?&&B=JoB5)ZpEkomjMg!#-=;C^w_Z}d
+z3e|53s^3C<KmD$J!P;3i!&&@q@`pTq(9^rHh4dOvulDo=>bQtww7qxx_Daf6q54hX
+z9_&ZmxAmD}FFuj|)MEyn_+!e|q2{C33`=k?=}V)QzG#MHsN<~$%h{f!BrZku8^=am
+z`$y|{)eKkg3G};c1`GIo%8jA=9W}!qd?V?#o?heWMX2L=<a5^Vpd{`^_1lagHlnt-
+z!3^v1RQjzmgKGQ^<%&@K7MkJmXJfHTNFPO|kC<U6>ikfE+TL7AyfR|_PUFvsCsF-Q
+znBh1U(C?TT4CAjU*NJMs!wl;%O?siH7kK)@XY9Pwj_S8XQm!7gy=C}&EJ5{KY=#MZ
+zJpC4#K|cP1atoife$!?+hRdXPczV01SEH`CrJst$uB2Z*Sojg`tqn&8tEk7hE2#6u
+zvKcO65%HoK&Y<c|o53LJeA0wEU+_eKbiSxIgK})3-!fFYrDj-&bBrS&XEpz*<9+dy
+zvDg_njXDnUQ1x?B_2Xu^e3#W<#P3r-jXG{8Q1u5<^%w56`e{`Cc{7|s^*@0#IEFg@
+z`cd^eQ1vH=to{V5{<s+qq3Wk_3j0yVPdlo94QkxgsCrdqSca-sf?O(hBv9*LPx7eV
+z>?f?=465F=8IGaqjUboK9Yd(~+l{K%fa<RvRj<wrlc;(XIE`hf>s~&p-onSNUK&+z
+z-VCQu^(OG!IEGq3{iu4&ci8n~$qW|oB-TaR3`VhodUdGvQGvSNl$${rs(h&##8K;K
+zY0%csq8Ut~?ze|f^#{!$g^wj3FoS+ndwph*z<K(QqwZ_c2kkhSH^TwceQ76Z-L<0j
+zcR8xR0#twbW{`*KFV_s>sQ&b%2L?U2TYs&n`=c7v`Jmbib5Z>*-Dc}_9@Sq8)n6xO
+z(O!ocw4?fKGlN!Ce=TOPnzH`pF-H9{RDYvp*oNw_9<{EkQT^qj=4I(tWPeVf>P?zq
+z7ph(}YCV^u$`_*U!&Yvw^2=s8f-2vKTF1?(^7W|uvI<oD<z^U1m0$jtt=~yh`BBt;
+zS|6%>uNgL?%GaRQZ30z3A9dfhJYeOQ%y1l4eh9T*t8l-@kG;%aff?kZ&UbnEX3n#@
+zX1I2<-H)VE<>$>{7=J)KWCnw%`YAk_@eY__FKRutp~|<KK`rWhU*;A|#+Q#e@2`E-
+z?kAS;LzJ7sXup_Y3SUpT0n~M&-wZqPe9E_@&ZG6H{wpw=cQcHm?z0v@LOS;2Rg`bR
+z4=~PVGiX9>S0i3YKMiJBi@IMbN0l!#13fACJ>s?g$Y2$t>j-XRUY5;p0d;<!LY1F1
+zgF)21bh+)4ewtA8Qj5CJO5z78SA^QGLNi>s$>wDlH7`qMIE$K>Y1H*$7}b9ds(!Z_
+z)}ywoQZX*w$a<js1okk_aWfc0ZPzGXK|dpAIEcER>qeFDGJ`t&7vfqos6o}Q#y?ZP
+z$_y(|$7d0$e4!bve%R(^&YhO@GlrU%LDanT;rkhHD{8x1%&;1@UaC;@k~G5-)Vw56
+z*FC+NO8uw%tp2<i4x_fKS1~5BmGXtCehctS`pY-NJk<3g*9=E)h{e9e_6(cB5Ni7e
+z@u!R@WrlqiT{ltX+svQ_%jvJwO-TC9Lv8=!KiGZn0_IaMZ3fe*?Vdz!_k<Y^p|(4P
+zQ`m{>w+Xd<<&yE2nc*4-q3)AYcm?I#QQO^y+U`~}Y(Z^zvl-^&KQW#>Gss14cN}LK
+zj}C4OS2(%od^v|IKWhfVsO|1?J0;~>P}^ONjaY?`p<dDqN>STgjN0ym8Rnw4TPL$`
+zVw!_U{Z68`yH7IyUNdY!-KXndYoYuc2fMa=7PZ|oW;l)7?kO{D#d{b}iy1Vdwz~<x
+z%Xk{iunu+KQh_R8ZU%X%?OtLr%e182G-|ttFvLMTg?cG7=s|6F7izmZ&9E7@-HkYj
+zNmReZsO?_iVAXano8dU>aY7?rPWcMdc9)~JyUYwrQQKW&hBNQuaR=j>HiIeDc2DAO
+z7|(<mj-sw#{rDZq_nAQpYI|$kq@-LaYP)k$k3-`4XzJ-jOAMCYYumkm+U~R&PNBAY
+z0;e&B>bDEE-F1@j*P3Awrb(Z853dhUz8|&SeW>m3HNzg%c6Xa$8Q#lyO3k1IwcW+I
+zz<3g7Sb(|?uXbDc6*HJdZTGO7l9cN~ZFe*N9-A<aej3f72DQJdP}`j}!xGeXC-B=C
+zL-o7xZrkor$@oXiumkltDS`VapNksL+TWYY?t(k#4!ZqrkK5_Cxpi)}Tj`d$#qRRE
+ztiJ_!&YgBA+?3nrcDo&Jt6S-oxy5dwo98Zd#iGxREVy%c0sF5PH4j~GyW8T{xz%o^
+zTjmzKLkBpoF~5EIQrc@nmcot(yodC9)c&h8!z$GNE5V%@!*5Y;?Va{|)v6iJq4LM@
+zX^eLe)lSL`doUos9JL)KZjqbs#@+7gdA*c=+EC-HLzcphO8gY*6{z;h&9E3X&Ro<u
+z(w(u`XDK(2dR=YK498IU{itzvq1x#*!xq#y3sB?Cb=Tfu@v^(%HseR=rw%pFa%5NT
+zD8idaFGRIpV1{u#pZvwYvvEw|&6FEQjdRQl`#rxMHO?kfJB?;ogBs`Z+wC}-c8A<9
+zw*vQ2Zl%MHvt=_J!~y#4^7Kwmufu-Q%RRl!)8nY~@WR`yowON_;^#>3^YmU%Z^BQL
+zUghaYPcJ}S$5!6z<1xcYoFaYD(^H<_hLfb%d3vp<7o+Y2%C3vWUaakF=ly}4kCx3~
+z33c9E#5XW+3uZWn+KzEl`7tx-Mh^X&E;Hyv)$hRF)NeP#7L1-RLzS;FgCgYAR#RvO
+z1*rP@*hKw2Gt`GQH136Kt$f-HCQ<8c%x!g>+$y)iU4Dy|UvMYgF}Kxia;q@Ocq-j8
+z)Ols;8fz!*PPyZ5o7>>ly1DLhn_U+cP}hkWk4N1UeuMOGoWM4Wj%R!i+gpxbCA|!_
+z{!7iU1hw9a%`g{tQhxSo8}F3c={CC!Zh^aYm5py1HNJU|C){BiCcO{u!cNrq8d2w)
+zBo2{Yi5g#p8J45QS7wF<sPU!WY~!1Cd)zj+*-f~)sO#!ltBr3F6;Hckcq4HN`>+Q!
+zz82JZrUw6k^lH@js?0En8egRuCQ##Bywc7WlWq^{{7|cy>u`-3=HiEGcX7X^FPPyN
+z>iFsR^gd5-Mx8gRJ-y1)3-ObruU=v8teD{x>Npzm^g&N=N1Zq7J-yD;OYrNY=X!eF
+z)8|_3cp5{Ef7A@SQRj_`%VRN46+3z{V7)iv$;9RO6yhTMDe)LLS(O~Wqh>III(~;y
+z^EhONgBTE}%&;3(ugeUo@dDaQVmTJ#vlvGKK8kYrX0Wu+#=B^S<EZ`9imKm)I`1bj
+z+K*;fj)B_6owU2q?CS;ZB_715Qm-FXug?s-@LcM(qsrBx`YZRi0JZL7sOJS2FSF;p
+z7R(@xCo%qcGZ@AvsUN(Lc6#tU;#Sl=H{sb>k9z*F7IUdzV+IwtgY*K_c=X{<)mypL
+z>Mf$`&EtvGn=^w+RJ~Cw)_tQH4x&CUoHD~cRC}GMaWrEz4m?5QFoPtXLw-JL98G&;
+zvFDQCXa)_abx@C*&pI=##TO9Qm|;1pUYQxhluo?X6dA0d+F3!hvuuV-SV_EShBK&o
+z(`HbN(K>ST+?Zs%3mm+s(e4aBkEt0$?bl&cy_BR}7iwK}p!#n&!)DaFs72MQLX|JX
+zZ=y~PU%}Nk@_u1l#;@T5euMITsD8TL4!2cOt`0T6Bx-ymsD6r+kNJ{vE4yucOQ`WJ
+zn&BL3d=sd8qp0%TID)PC32erXV<X;)bvQx!II5r3MsvwcOUg~6#y5f*Uq7m!9_3@F
+zq+Anf{u)r@t2e`H)cDF!^@>sDS1*ahK8k7l5YAyQ&fpC=iC?9B9Wuo`3Q^~;0yCU>
+zgPngzQ0c>F*onGtYxML6PcK8AXY)Nh&(qVP-JeaM+8H;)Uex)t)ze!%J&C#x>uumW
+z^chz(>Tzci>TzeI88%>oxZVuosB-!;5tUneePp<bDz{>WDO9-u%jf&4tX!YvxAdA}
+zC8}J7<+qfZVVUK(l$zoE>uf*GxZQ4tTkTf5g>IfZ`C6+#=61R5Zk=20>cin$7c2GV
+zggff?q3*MK+)mVeR+Hz~yZLV1oq3J5H|Y+d+8J<rQSBr>zuYZy^WCXeTRS7}pxfZq
+zO6Ii^b-quyYwYYxiC0nUd&LZwa2w~NMKhSh&r@yyN3kDu-_d7=y{P&<X4r~5nXhX6
+zBIT=4<&$Pui7H=VhDErO@{4u09rJFV+u^plC2o<V{an;`EnRF*p|)!h)z5?(j$xeb
+z8a0DnOi`{GZ^0(iI2+Bd0ad@=3@cINEWm@5&qtNdGs9d|`M4P_US#D*v7CBCZlhc6
+zR=O*%vT}=(_GeMsHRkrAwyPJ_Pmjs>az)=iS<`6-4ftNlm18%Sp~hKih9#)_#b%g`
+z+OBjh&tFr19#wwM3};d0XUuRERlWoDJXXCsd7+Je%x!h+-5NLUuD;T?a{;xTQ|=&Y
+zJ5#8B2h6Y!v)O;WX3&B!qg)kMV-hv)N;9lL)h{>0Le#jIUlEJGFKr1`e$fmUQ03ER
+zIEgBsLTzV<TZB4)r)%u|I&X&kcp>H5J-yA-tMR3zmw0-yr?0%+>Mxt&gva9^_jugx
+zaRXjPJC&YZ;put!LDH9AX6-GS;W)mB^Z`%r_w*LLgY+6tulDpJyp{B|ms&fkW;l&s
+zCVkk`hdjLl?<T#gIu_#)+|h(u=T&a88%Lej)?Q*Rqt0t{9?!Uwo<5Fhr^&5xOWlN|
+z-}H<5oD$CA7jPWEh-0YzI%<X^sQo%@hP|l$+JNe((k+wJUw#qqU&lqf4X07Z`xL6(
+zNi&>4wL5NxDO9^HsCH}Iq@=z+T=;HWt>W`8IFCBs=1}d<n&Awp-Dxu%LABeCT89g}
+zto=!MOp@M?FTqxPIo9DTuol&RjTu&>+OIOh5>)#IsP;!+XzRNZb^p*|hDp@=F81_<
+zr>|UK>w6Yee#Q(3QR}kX)4M#q9<?qjJiXl0b5ZMZDQWF2n&CKVT@HA9zo)mL)@7}y
+z*LZpYwJuxF=W!z2HGH1USHIgO$xooxPXT@bb3J_~;PYq1)A%Kvz^~Iz3u?dCyH%3>
+zbfvAAS=4%&LZ$cO?bw5Z*oj}GeyQ@Y(2Yy-Q|H?H=tHfKZd7_L_FxTu0F(F?>es!%
+z+DW>llKkoC+d7y)t%FfidMDOk2fh*uaS!b*RM>o{&9ED_pPM|r(bG#%=dqZluRSlS
+z7fzz~bIRhD0Z(s2?dM8Qukdu;bZbA)KiB%5Gs6^WKeu~&o2OTz_H&`97kK(Si&p!&
+z2)TsqXkk*dJ^A=r(x;ze=bJ9ne7E8Oto1m7EV&(p9*;fS;uOA``hBS5q}L4FktMaG
+z7InPjqK=o9XOYhNY!)kV1RKd8zzXuaQRRBdVzGL~sN=EA3_DT%beLfss{IO7y<$}R
+zaa8;1b9jD}{8rTQ)?$W5sO?@k+tQcKa0c(E{4`$A5|}cBNqi^qgc(#~E#(rZ`C8s#
+zPNL>%9CaQaaZ^esZt?soRJ}6KFLn!*Pr1ob%kM|E*Xy=<dbP(%x7^bUQ1=Hh)VwS_
+z)7qJlqz`-CgDTgKD%ao^qULY)Z*2Z%QTt~GHQo_ay#Z9cBx-ys&xpk?CVd&Tf0oQ}
+z9<>feG3p1kpQ};(Yp^61y9iUL{XAfX{it^MBZ)F>Mb)oE)k~trnLzF5wWre#`8}xp
+z+--*S9@lwX<Z+?LlTYJu9PL$LHT4sy?JPj;zg&0qslH!O`Gan+q<$-EJhiCtl%m#M
+zA-;zE7-~JQ729^Mn&Ap+JD1IH7PXxdsO=m@wVOh<+lAWB2IaGz^=4RtuciF__E_w7
+zs*f7yC~7-~+<w&hYViDWH{s?<+F3ly`kg}cn?h|*r>8f1da0)`pK04Ug|*ZlK(*6>
+zS}zHF6^<rse~+N{_plibq2^)G47*YD(1x0aX4E{?p~h2znulEFGY@eyoH@hdX*2Be
+zxYy%a)c!8@^b${BI^E{42QQ`F2Gso3x>b^TC8%)}pvJNG6q}b-RQduceZtfGQTx9a
+zH80($cG^($(tw(mdaT1z)b^B^;aZW6cOI2KXNH5Q{oRbOW}NkSG3Tc`GpNDc#QM8#
+z7$or$V*MRB3`$Ykr!P^ID^E5j+);PP9YC$4KDQgSj@t1h*nnBIUvCDbsCE<X(vvJs
+zyR+_;JMIpm=A~aTc6nTj=M&eU)=9M)E}h2fTcoE^>GNhdhFU*;Zar!pmAm=wVj<f>
+z`V5{=`B7B8A$$|*gQ#_yGQ)mUKYeD{jw)Y=YQM~#eWLBJ88hs{%gJx@^hQrF_qfdC
+zIKGf_MNdH5?LXDxHq?AJyX9^PYQH4h0@QxV!%oVt7TEroN9~_EGZ@Bl@>6b$+vwK0
+z)o!I^TqPbCp!QQPz6ci{Z_h`iG1?DiI3ww2993=v)y@E_em7QO8*02&m?R#4oXuwn
+zwI2ph`=Q?qdr|%Lm|-jKq<%GOe^z;Z((_AE`?nCapH?1g&bS?t<Ez~aOHunF&(m`~
+zeLmmz;~1*^s2TR-{j}eQf5$xcnn4e~gSgua#vjAywJBGN<yhtByK#5*6w6;i?cW7=
+z4z+)$P{-XcYQGMdK?kbcR=3hEbBo=$yYy(=4{6kXnfACJuOaS3&2z6A)?x?gRi2*o
+z^g`79ujH9ysCn*lTit5Bmh>{z{wP4z)8BQ|evYH|v)(*|;p)lO|B4yTp~{b<+V6GC
+zCHtey3>O|{`)LxDK4FG^9`}0OgzdCb<>^UJFTl5JoF_54^f#Z&eG9+NnZYdT^@<tP
+z{7jqS6rM{wX@<k7dP8Q=jW42Jr`zn#oM_`1!WWaDa=YCGo<}?S`x_V(qWUjD^`CEs
+zdH7u7Tr*rg!RjrU!4$rbdipy#S|<%|iCctPZv}2HYQ5=2q0do%X`8LP8PvL)HiHzZ
+zy*{_mO}gc7iDX_2JdUBx11oVpuZC&V^V;*M?V2;gX-WH|sB$A1okvjhyYQ{pi5h1U
+zzJ+)y$JWU>YJH8N*4L;R4x{=RGQ%F!`f5V0(?-v4@ce4jx-CbozkGKo+v0x7dh0X8
+zYSjATz1>lIv8S&xdAc6Vp~}yiA+M!J>#obwJ3YM#@2B5J9AVxY%%C1WOI&9LJu#lg
+zpj;V7@0-V$6MqT|vtw_+1OJP!;QSc=3U9)z@Pi(|2mhY<di))}&Eu<ahWHAP_u`L;
+zFY)*__%q^HdHhmT{avW`&qdW|Zlibys{YeGJ_A*s%W{;@={EK{Vh+F9E@bm!*I_IE
+zkdOAr;;dL+Gk%v?ZYOTUj}yxh;(GidvD`sii(e*|XA@WBKN8EoAx`4m#PXTM9J~6y
+zog!IET!zEM@)^V>cq6fVDsch_h~?9W3-NYh`E=rZWNwS(nZ&us^`b~7h(Y_8yRum9
+zEMoQZ-0avXYQF*#SdMD%IjDA?hpPX4gxF4O<T}TkouKQVOt>*O%>*lb!cDoIZljxY
+z6K>2+({WVaO}U+JqnmUSZp=+{or~(bDYw&Ybdzqvjk#&IG^+2W+)lUAO}Ys;=IVME
+z)pt{Fr`zZz-Gm!+)9k6JzMFD8-9|U*Cft~t<~kMCcT;Ys+vq0Ugd20yT%V%)Zp!U+
+z8{MRvaAR(o11qZUrrb`q(M`GuH|C~Ua8Z3X<?6bo^hP)7Cft~t=K2)XcXho}-03#D
+zNjKrf+%(stsJ@$WJKaV%=_cHmo94O`)pt{Fr`zZz-Gm!+b)AapyD3-KAEh_CNjKrf
+z+%(sXsJ@$WJ6&COl%I4HZp=+{9f|6@DYw&Ybdzqvjk#$mNA=y5+vzsCNjKrf+%)GI
+zem!BrO}U+JqnmUSE=2Xl@Hw&A>9Ux&#`k(G&m?a4Se{Ot^jPwc@)VsQRbR5CPsz>h
+z%<0O>&7RGf<KMyfP&_xgZ(IMi-0X>h$%5SM-c$Qd<@Zx3`FG?Aqff}q9zApH%-rnm
+zvwF_T&0algjekeZ9z8oZJAL*7|IVB<drofl-1Fz3pPN1Og5ekN?|H-L(a!mO=jUcm
+zpFhLDUCHhwWvb_^bF=$jIq*t)f8`wic3;?YVQ%(vxDw`OFTG*;4UD9vza=+&rDc_W
+z=dPH)A~$<%|M>pg?13v&SLSA~UD?@6zpV@U_st7$rv1*Wna(U)y*_K;dR)9dYe|m2
+zGi&Uf*mWSQ`vA@y$eNX@uB^c>T<gl}d>0PgkTrY*uHKNfCa3zcru(q}!&w6##>Ee3
+zEy=MPv&L`4?whiDZo=`KvL@v6O<5~)us>_4A6NRbR^|LhveF;Hr7vYIe+kFGoHg-f
+z>>1DM9asK%R$2~!C2Qm>*!R_}{;%TV53-hifTKUo8v8MJ{UodVCpi0)tT{RO)2yMN
+z;>u66R^{Y;*3>-q-IvvWA1>UNwJ4{5mNoM;oLR}5UBT3YS%VMa@`G6`a^eqJlYhY8
+zKW6p)5z~LnT96~FS);4i`A}BZL%94<)`}eYVD{(-vuUp{d$tdkKa#!j5$wG+yYE&U
+z8O$CX#Q8h3(|6+1UD?ZbVfSaUdp?8xBiREZI69g=Hj0yXXHVUYOJB@h{v!5%IlJ%6
+z${)`j8^`6ZWUqV$C%=|G^);n`J$vlyI5n9)J&E(*%1(a^SLd_W<}rOAn~r_y?EW;a
+zrL#Nl$B{$Xqld76A$wo}r+=9}^Gh84Rrc7gaPimKOTWgM2eM}$z^UJ5PyY@Ff1f?{
+zdtCl~_KKYT&+M81#G#e!;T2q2$zGK+tJ$-wIQ&rd$V0gLQ1+VaeP>SJJ2}2m2XY1v
+z;AB_Ml#aTkcjYX<3;W)k)BkQ9es9jmdvW^xIWzB9es9ilFHU?cXYyk>dP~mOEjWK`
+zPWo1yN#)F@aP_vFwcBv%_MGM0v2QS^e-OLx$mzKQM?Ri2`f(imM9$DB<R^26K8gLq
+zIRnEu{Mnq5&tmFxIfI|W(J$nTeF2BYa)!sS=bJgb-^BD!au$AqgFnp~`YA5{G-pYU
+z%;${G<J@m@=6{1@OF839*!$a@zTaZ{w>b-P<aarvzr&v2=k)#_Cw`wZDO2x?559{t
+z&-}aMX*u=x@#(+Eu6M_~-;K-fj<3k!?)XSI_P!_H_a2;hPkd4izBfMfUYvbzd`>QX
+zIKKR0#W%+1Zp7Z3;(a&a+D-A!eq88}FUr(M;)5T-o{z?RKZ+|Kjjzg)o8zN5<G?^X
+zHGrKTi+6oY=^u-a%I;g@J-6V}E%9YJaBDnuEB1`Wdq;6)G`=e5?~bSM#_`X`Cq9q8
+zUx@d80hhiIUzVw{_~00hemy?+b?o|Py!)Hj`K@@@x3K%(c+b5!Hxr+q!QSu1`@V<c
+z-;YmxA6I`6U;6<r{3yQoBV4{ezH&dN4#fu#VgEvWU;&qY6<_`pPXBv+=HGGP5AoC=
+zl>f*0z#lR7P<-$qT<+Yq(#g4h==yEL*W>Ivx6Qp1d%L#vb>Z5(w{>=7_djgw`3D@k
+zVcYl(IMTOmv=6)bw{`2<v3A?G&f9VR_HAi7a&X(|LFEr_>mJ0R&ukn140exf>lwkt
+zk!?$I;<MW(Kg*p$EcT!8<l@AIa{Y(LM6px22N~IIi9>&5`Kzz964&zpN#z?}Z}Hzg
+z+u{k2U;8YJiyJJz@BlIGrM<mJdHj&adJ#|gfAYAS>%Za|kBd62z3R)Yy{DI0JpU$(
+zFWzDC`ro(z=-C#pywCFgt<>Va4_N$FFTeix-b=mw><yN`hX;7-Kk-J}{($=##d@=|
+ze)_z<^}h%HOkTg#e5Ah`Wyk*P^HKFRi*r0)|NGu2`uyZgSpI|0wEF9RKl)W3um8R0
+zcHiFhzmI#R&&T@TyL}Zm8PWbY$HsTVGb~>Jd$k{UyT$8&e^#%ns{H!jtKH`1*Z+R&
+zpS=C`zsLGBZ-4#ow?4(!LlrM7>*q;4I8=M<e;@S^-hP+oU!wKJKF#IH4*lrgjqwk!
+zCuWWp-(dOYcz(W@4?QmQ_^T?<J!)&CmH+%Zh*`-czFvkDv%l8Y?|T(<Pu}SJuS;<*
+z?{)Y1@jTu+B{y*-Rz8m*hCE-N>pA67wCC|d+Mbhn?t&*D_49I`=RYH>GgeHS`uP$6
+zE3TqX{hV1%oYNUAyTr=hN83^Py_TQj`T3szHP0XL_Rf5<)h}7EPrIr=(PZ^M|02t;
+z@cgShzuk|Ihde*m^Y8ZjwAM5~-(~yNUcs*|el(9C6~{R)^m7`={bRBcu~MGz*U!Fs
+zi>G;<s~^3OPWeqsQ5b7_mBn3uvbgn?7ALQ>_*-7S{udU1?$wrG^)!ob-lP5#vF^PV
+zpT>Da?XUm+?hn4q;sVQ#ea*+G$AS7e<+YYSU}3E8GK<&${`_TLKYfPnkI#7dYTw=~
+zF0}F`dLoFQzoVGOqt~tU^LW<k899mAs;}4Ki>!Pv`%ym+`SuPlZvDKSC!RF^Hn0Ef
+zI*Zr;-t-~wZ~gCM|H~^ZfBo-uzu^*#7q>^v#a{lm7O(%k<I8F-UjO^dXL$eXe=quU
+zAHQB#)6d-;iyHs>@%Bp3*XwZlS@8U2-@X_5_O1W@;W?krc8+uX%=`Xc|NF+T@a^k3
+z-}3chp0>aLbc?_1<6r-K;^+JRU;q2mIUMjRU;1t<|EV`vJpCSvKh3-<zop0GVK1Ne
+zL5u6X{P2e?ex{GNcEIBMxlXBm#iuNOjkj0RXYt>9d#g8EoaOBee#GKSeg7<E+4?!z
+z<JL9Hukd*ByB7bf#`+t-&*HB2`McNRPkWqKXzktZ^O=0m@^|}qr!Tj7#M|qduz1P$
+z|HK^@>;0hGzNXWxy{BBj{@%v<$Ip+aJz4v|Ggj#5g9CZQ9PeGHTK$`oR=&c^-=y;!
+z<r7~1LNC9@bwNMZzSQz-J^wkJ8`a)$yXD{F`PH8PI?qpf{y%ws((|wP{Ml=*{z+BV
+z{;KEy(>80rVa4)4@Dj`K_WYNfWclsB|L*que$Rii=NJ3_ocH`8&+qsAnVYTs^Zops
+z_Wb|y{N~?yzMr3yem(lH6RrP&C)oV&_4%*$`P}XEKj-be&)c8z_$6FxG=D1(So`1f
+z_A9*ocXC}&eu=mL)E5%7f2+OyGmD6GI%8Ab-jBTf36F2^_Gf=(?VsS=U*_$9!`mM{
+z)yDsK-hR^Cf2+4Y=Iy=1$5-q1&-MCUPqg}9_3iKW`d{+xFY)r*UuxrB_V#}6<D2*S
+zeX)<P+RJDA{O5c7Kl1U_d;34|@hy6L#b?@lHU8SRxAG|#_j~+8AK&`@!+AcwnAgA4
+z*ZcU1R)4_Dw|am5UOwN)*Wlx6_I$nXLHi@u^Y8ZjM$iAO=j+QS^t0yecY6M+x1aF*
+zC+woVZJn`p&wre@hxQ9S|ABLC`>Oo>dxFOUe!p;TndR4d{zaZY<oSAEo7Pu@=ilP_
+zqn`g$KOUQXer`I!%9nh==I1#tB4#|Tp8tE#pX#;z_j!K1=f8w`Re#MlSpG}B{d&*e
+z=Jgl5E&pwv-{|?z^Zf4jS^hsKX^;8o_4)a>pTFvTem?E>JH7s!ynddaFHZ3B^?Lp{
+zJb$d;+JA%Rr#$~jKK`bgE&oC9zu)`+ckjQ^`=9mtBVNDP>rV_@{r}efW&WDI{1>;`
+z{B-&C_&(o1gO^+R*KvQL`D?qw;zeJt9iIP{cUu0~qUG=PxX;foKfT`at3Cfz&u?eD
+z_46T*7yNknjP8H7rD7@HzV=Sy6H~Evzd!y*k2^iSz~lA%@7Z@)`CiXo^!!$j&(L^i
+zuiN7jJipoFPgDOfS&3NTyJOMM1B_4c*n2GgnCI8`SbVR?tG+&aJ+AQU{kX>qzW-n1
+z?e+Tgq0Zxezn}Ql+pNEttgNVmI~cF}FW^H9`f2g@*8K6<Z`hy8*Xt7c`7Hk{Uh?bh
+zg<ikt1y=twuOC0lVm?C}mG7ulZN7^#Zt<A!-*1to_6o04F7GY&_FB%j`ubi2<=64z
+zo_>Dp<7tW_zPkXG-}e|xxb;mI*DhK7L656`Ve#*M`%4~W?LDT$$~UZ8{)sQMxL~Kn
+zpZGhAyBjQ?^|-Of;;VhU)fLuWrH{8PVR7|oR==s-$`^S&@Ewc)9yI=0zu!8K<4y69
+z-)}vRW)xQrP>>&9V~*n1i71Snz25%47JrK4P34O}W$`CGf7p+&b3I=5>(8vuN2%Yh
+zy~X?QI^F93#<zENyTv<wewxp>_<pZn>-TFp>)Zb{%m0?|ujw;vJ|?fX@mVhacKG)E
+z$x@bHYH=fP=F`uUy}y-LTl@_lPx;waek|a4i*r5k^UbLqcY3_&@%rQKi#;yz<NsYA
+z7kT`I^Q^r=um2>rQ|;gA@rOO`_V`0y{sga|pS1Fy^ZYk>{=CO;^!oqo@qHdoc%1g~
+zs~$Icdk=VA%=yx0A{PDp%gLMLyD!}wU&MXt#`4d7^yawl6`SLCWR$NzV{`s~_UFd-
+zR^PHY9?8hBPi)SAR7U)cjP?sN;!kt@ZtQR6`J3Zkp1V0d`I^mf$5S`QdY{Y2_EH)1
+zaXaU=jrrfsXz#AaZO$)l-5fVQeRI6nyg7dGiJRk>KX!9`#s1ClH5v2!VUDYf<J<d$
+z&2h;oo8xmh&u%RLn>TKb&&z24qBA$=-@%D?WBscivpN2L%jWpnvo^<1&6w}C7i`YI
+zD5L#X?cJRJxs3Jl1<peo$8&E+`MHepMa7%TXJ;HAf66GY_kC|{zayjkcQf*@dCKPU
+zg&E^n$XLJi8S`^vv^~k#`p?bL`acr?S4RFsM*g|cc#f3+w~YMT;+x0Ume?FWEhBzw
+z#_{#)jN@xt+vfVWW*lF?&*<;pGLEmGXB=Pk8OPU~GxqP3qV;`b`(7QjcO<?&WBc1H
+zH;=D1W4*oYt()^tZrU8bux4|dzio4@_w#OCA2((k|2JhE|F7A%xqMaO=6ERM_)ljX
+z{~x+;bNTOP9RHumIQ}~`j{lEk9RHusIKSub-rWAX&fFZI@c7N~cdyzUFGceoJN&b7
+z$>#ifGtL+1U9mZTDC2neL&p4Ozj<@{Z)MEy*D~g}Cu4s9lrg{hewmH?@8=ow`=^Zg
+z{f~_K{a(iW#xu@;f6kcSmW=uRY{vY)K4X4&UcGsIMH$Ceb>rsz!u-wg!HoI+e#ZRP
+zWE_9{Gv@b?8T0$}jPuuQ#{AZ0To1=G=66TN@peu|`#UqPhi7H1m&-Hew>o2gO=ZmQ
+zeHrts_rqr$UY&e4GGl&gGUj(UV}38onBUxt<8v)zeuqxp+~2RBw>duJ<(uQd=WdRF
+zo^d^S_O+Yyf08lYr)8X<-dwS{d`(7wMH%C{^z_Z;TQd54X2$UlX7qP&Mt|33^w*rx
+z-*`rUAJ6D7%;@i$jQ-BObn|%MmT~@hT*i1l&*O)U`~TjI`93LQJfD5b=JNlMG2iE9
+zjAtdIzXvk<dw<6E|1zV$*^K_K$=Lq)XY}{py_?7PuNl|N_9rSod3ePazj1T?ljwLq
+zlD{oF-yVsd$>X_=^-qe{_mTXUMEA2t;?GCN$C0=;x<5D)KP}__<<;@c?SCnnpCjcz
+z9<84v@!O;QbtL}B==eAi7ewplNIVhkuOo3)w11AoKgnqS!Ho7_5bd8M<zJc6{$r#4
+zb0mKtqy1B&`-da>7i4T-Z$|sw8SU@NX#ew1+&o|J&e)$9N7v&c{auu?KVOrvKg%-q
+z=S>;=)82o4q`gmN?9Z2H?9aDl?9X3i9G{=gIR7tX#O2ZbYV7cjzE5i7@%prk`^V?B
+zZ_dAS*XDRnM*OCX^Xcsw`N@p<q{}w9_p*%p;fpek@26+v>w6bBj{kER_d`#p-<<!A
+z*KCeowP$nu*o?=I--y=B;pvK9pK-r>bH?_3Cuehee;>t1_HSvP@{h#3GxGnLjoFyr
+zm9d`g%!tp;-dz3$hPrV+vZMBnjK3)=e<WT#ZFBhtGRA*xM)}7-X><8_v>uPNcV|X_
+zcW1Q!^o;ty&d8t7=>L|C{$rOEU;V6|yRN#fwe8B6?`ykc_f=OsxBS^<t=GJ<W#68c
+z@4fEgeQ(|SqNZo>-1)5MU-Fu_Zc+N`eV6Uu-FD4Yd;fyc&)RwQ-n~tk1uwhulIGo4
+zH}AT#^}5(4SM0rFk0f#L{yiGnuIAnRS9@iPr8ez7R_fk8O;_)J_1>%YT}mmos_eyA
+zUbDYxciX-z_m@}gZrlCpXYIV?qP?wG?Y(;M{<bLj!q;3#(W|fBcPSg*(sJdV7hc&O
+zb*r(wa__ZUZ0@lp=i+^D*?r9x<&QNzTbDm-g1o2=^Rm5db=S4-ec^Sl*uDR<mc31{
+z+<nE~m+s$n<^Hz4?QOA3d}CgG;YGV%bV<#H7gSwRY)LP@ki8pgx#aAt+paqMInO#f
+zV~?K`P3V=E?`u0d>gVt*T*PeAu6D(qrsj*AcVETMWBQf2WoMVX@S1%sZTt3La%szz
+zyD4Zxf8*ZE_U*r5&z`+kU%j5RcYl*7_{g61tg~PIf1A73t;TU>y&r}10=;bKLUPtR
+zKTJphP17*A2WIU*UM6wUZk)@+4kZ2br%JM{t7V4-X7<`ML+nziR8^8nrB5=LDm{xg
+zo7IMqZI|(G9Z&LjI;4*q`z+{geVA3u<R+u6nL54Bmp_-;cD-J0K*Te2p0n9@IYG~}
+zXo<V0g=nza#1dhl%uPH?K_gH@_!@6AT2nar`I6-?;WXO3B~UfhJJ>4Xzn(YAbROS5
+z|ANvF(i@_3_J|rhivsA{sK9>dFs?J$ZeC+DB;1|j`(!!4>)*2x<MCE0(7XM1GrT?T
+z_H0CbLgYGL+eYQJuRyu+)ZgYmp%W()(v1hJX{^=iv~bX9<Ct;R`Mz3Cbdr`o4DMRv
+z!EF^m`|8#oXq>yjmG5=B+VkG^GK(iL3f{GDFFV?6EY|9^jn6x-r#<KF+ECIZ?~7qF
+z*e=i}f%g=o*;A_6#|!q0MVxQQ`2FY)#DNfodKfB_`F6F<F7|nx`Mz47*Grn=$G+>K
+z)<=a$+e%PLn-oE1gs4S-Qp=wyya8#C@I^H@AZ8Y6KuY<dnHmryUn{9-5jr*bgJ8iF
+z3uYAwTn{I&`^_p}O;#x*5-AE66W_V$HJ}>=B^TbSEj?@R`^*Akf3V+;gC9(arsWl%
+zdM_Jhuw%-jVcuJwH-kEQH6IrVh=X4y^Ek_)8=ACMkb%E8Ap_A3WCl+V>N38)In;i#
+z{e9m#zlB*mn!|+byoVQdP^!G+d2xdt$IEQoI-afvhK6yB83sDxr9mZxOfa*JOfYi=
+zSy9`4{~3nx0Yteu#5wc-{`f^g9U<=3hWmTRb>5QvC&Vk!EFL)fzo%h{{{&Are+_Ta
+z5%5UEG<{vrI51qSrrR_o!MP<$xlFQkluv#tGf`cn5X_(Mlrn~C+d!qw+$D|f@8zq^
+z>t4pQXq)B%OpeR>HN?!D^(rMX#A6|eUcPt{Jar~a)2f>304%@fLt_h~pF6idTu!2O
+zwx!iUSPgPKx?Uzk)IQ9F(%k(zmlY~1rys--#Q(5jd32pgvi=!E@VU!%`Bf%dckgCl
+z4gp=~egmtZJcecCqkF!I-sII*y=d)w=t(@LJOxAObEjq4@!V4~G^<jGrca^B<Jn1S
+zJf5AT#ADeR*B9?nn|TrPE>@CVT@Sj1Ki|ah0#+?|&Uw*ME}dig$?3VGl~2zVjeTma
+zR`qu2TJ$*WmMdGgJseyHJ}z`gjtfjSjW>r6ZBiFH6;r7rorWpzPV)HM!@S+0%@%sp
+z3AoYuLG>lU+`V1D+d5Rn_PxpPkLPOg`(wFQL;$Tkn%7US#+koiQCkcHN!lW^iKq2a
+zNL`orGBJ2?x-`W)a{QrFsBGjss*#K>TxiTf?w0S8Lhgj`U{TTKSQ}uCHDGEO>T0O!
+zV-1T-_E7tlFjFyhu)Haa0z<6XD5v0K>Xq-2$J7s-@hQ@67qBz%f;$#vR-FG>M3eFd
+z<mO?jxGHu{Mym};l(H;w=Nz)cERUV;&t|Zin4T?@^z7|tlE!D-<=ZA&uVG<w7A?>2
+z)|lIcMEGlzZh6H|n<R%{4fX=Am$#7Jh3$_hfX$Aw%qC9bC@X);*<k5akq(xgK?|Rf
+zd<kp+AJKEl#Tr3qV_p=Q_FQPWW&Fn13&j@GXtP=bFwMxz9?3(?5km+YgZZseg!d>b
+znb38tbmFjEB$M?z`S4mv(lE=Wwua`R#XOu!VQ0)!8ziMWR!f)s>j>@Dl<B!j{*@H<
+zj7gfu%GgL@XUyAMB=jmPsHOBeMM_NHn+VrWcN28!0Q2>?<WHU+P}cn71gfQPd|xe1
+z6VoJ-uI15HT9(DbJcFFkS1EaG=^j9R0iJiSrDaagKn%ha?OIQZT$@qy#ueKY6%vb<
+zpcx*_(Nk3g))YOZ(aS?JQOwX+kzsybwTPBb#&mK85loy#I?_S}y3&YriA@Y_U5aiF
+zR5lC}&#KIJZfg2fEv=?sY4+7f#kB%VF-L2p;%cd&s_Ey?O{OksDRdjjMQl;6PFo$m
+z>a^8ys!GeJPphcH^l7D2hB&ph+WB2Apr}Zgx^+rPK~_phJr+u?91D@48VeN<8H8M{
+z+6JxbYXtHhg!-C~cYWBGE;_wRr0qm$1Xv00L)vS);l;a;Mu6q3UvnW{2MFB?F)g`t
+zLxn<a{ZW0b_>h)6(di{mYCtdfQ!TwA#8gG#-ogM4%Fw}s0ktTb`qk%L?G&?MWC#t{
+z)W;@qjUjqT2zEA>Fg@oY(CJv^D2)!5b){O48u*|BXyJnj)GRGkk*rPOsUfwPxg|Dw
+zQ$uX@rgo_G8cNXhCQ+9ESkbN;diiRn2N2<Ikvq|a<BXh#-|1)<JpDDC{Tbqvr!(ve
+znIr}pay#T9EUNEU3GUcAvvKQNymY#B>ui4IIKSrC4s2}lT`+j|a_t03aKFzwf5Jvz
+z?{OT$&-LE_It~*5Tae@<_-zr!b5vmvob*pg<Msjb$dYWOYFtdoGPR6|Rzxj~9VY=z
+z^r@migYe+j%ayJd|Ay<PUN5R7L@)n@C~jB9B%TBO>NUQ;bkEo2RwUC;@|C&`O)dVq
+zah%1kZw_;#8T?+(zJYGC4){yUdkjVA0iXF!b#x2<laF*qxA~ImK;9=>POok*N3MtX
+zKnA9Ao%QC0NqE%-zn<qmop!REt-z&UzM@;hZbR}KPr-ihC|!L0AQ@fQJ>Eo<+#qBN
+zaBYAh)aA^gG%w_AK|@f!4-)SjwFbDiJ#=VhpI7M5W%oYRCdG{CddYIVEt@uECg`rV
+zIXoXZd(jPwF=RYGv^JbwKdGu>X8y$5pk<#_8;KA;rY@e4Q6ob!q3=19)nX03gl{rI
+z9@HNP&tX29O=dos*+gD))OZ{(Iifs{7a}bzvCjJ%dQyg_phU>qH<K`UY6Av+>b7T)
+zT1Ld{-E0Pkb}!0yL4v_aIx38&g(F7{IjxES=ifJBd1gtEXnO_6f8k{9p1kc99No_i
+zZ1*%4am>y8?7-G8&1VL-c1b)4wB!)`0|Q&TDF4E~QsGQTj1!b2pDKCsLV>l)=~0%+
+zuoCf{0!eGwX-UQca~xJOmhi9=@nZs3GUSD+5GxUH1I>%riAf`H8^~=x<90PpbsQON
+zR$&8DE(B3zlM<ym8xS+4HX!AyZ9vQv+<=s~kgB<|NU-jaGlH<0-h*)>nk4xi79g<W
+zk%al^zo_D1kqzDTD%tOL1XP^|iwD3~pAS<4{QF}MKm3b_91<afo;yEJ?X_3yco}xK
+z82|y?b|f5hg5LtPyEybQ6cWdw1|Z($H~zJAU7iZT6pT`{n0Gv|?m=zcV|(3gTx&j_
+z7Yk3fOO|4=&b<X4Z;~i&<NDI~YqyB{C2AT_LKMzEmypo%85*>SrU!XT^xpS}ZCrA;
+z5kXPl?f>|VNcr$k&Vp?-z-$+`?JV(3nrdNRwC7GYs6Q;R1%HS6jpz_c8-M$MKRkpR
+zM{lWQ@p_3wE1M)5G?!>~Z<dJqL6;^;+|D|Sx6{=FBurKd@CK3%aXWNDUXE+9J;%*H
+zb{>go;9pJ{%ppS~X+}Nth7RE0C<?=(OkLT2@w|cq&}U$7I2$oP<2_Z%;hMlGfX=Bd
+zZQMJumN0K5S&N7UE{tQP=MGvyy(elI3tF&r$uoXjOs!StLy;#36|q;%hjTJv9U#HM
+zCGCQ+sqFv>nir|B8pDeNt8P}rUNu)DolOrAK`(mHsbj!nJ;-5>v9IZ5<_@OQ8G4mY
+zq;(~o#G*h6;ia^u#Au<HV4ycv+iPdc)k`{tR=VV0M`*8x`EWJ=N{V{M=%IGTMhZJ)
+z-d^gm)fH4w!j^&88f>#1u#4ni862^OGx>P}nZfMoo&<(Z!H?okabhZBINyNtqUHAa
+zcTzl||9K++(K*0lfT|WZ5M*R~h+f%1Z_j{Z?r_MRJSlF@U{A_3<lp43qX0JQ&yXwS
+zxu%G-nGS?kmY`N>Qlwn-n9gJ?{8_JQKuT8{xFBpm%)Ge)DPO@fAV$9E%$20N7Zhj6
+zNyF>TkP{*U3-t_n6&*c8uISj_&zJ>-L(>P9SA6QdY?#50DNjZjeiZ(l%_xSON<JFy
+zr#M5dRHq?#tYjd10j&|q44y#GkdwNMZ}AMdBFQ24SAl(p^TG~VafbY0xwt`(lZ*SP
+zXxuuUDu|Jt`c|4j$e`8Cel{|}%mNuq5^$U#fhBD$K=0wm0+}1;@iN}PD_C;jF$VIi
+zBxkp~lyB%ZI?y6!zu-n+!lbgsU2B#t+3!a<yJ-6>ZcCc6f~1PhV{|y+Gcvv+<4Px!
+zO>dUKxd}L}0f%NT*|~hm+Ej)bs!<^}f^lNs8C2E4#+k;%=!1=j={$lVphWIEc%Mq)
+z99nzHT!~#qEyEqkTt*WM>fzp{mZ4FkP={?y*o|p%IG7)1`7}+Q!z8;4;0iCi&&bce
+z!AX^Tf04N1#T)$p;w?8jQXdmF<f1AG9Z*5tBlrtAu+oTl284JEP$OdGj8~ZLgI58i
+zP$kC%C<$v5wU+7YBROV2G5}i9s|GOrSmGZ5nov=Z+ZTGa89PJ}RRrJCfS>26{Pc~I
+zgBZH5aCIAl@bq>C+@!rjw3oXFB$JB>nDYg_dIWJ_@UvguuEs!LT=fF_3jjR#{GTdK
+zb%mC}U>5k5(m>7b9^pAt{A((sUIepH;1Gg`s_N{>bzZS59fn~Vo-^Q0G87?9F;t(%
+zHxe93u9?8x%wzB8?noMC`0R~HqYz~5AgAi29xj4@DoxkNs|0gxbZAu8b+&7qhu>Ga
+zmn;)nu{d@}?q1<;o>xxkB|;9TZO!XOrPuu;$ihlsTvbJGS&<k!l=ZM9zDHK`4{ntj
+z{pp{9`k6)fY($??3a?!iDVDCF4|Fedpqs`3(45A%(hw(kIU;&*2qM#1`DdaFi~@Wr
+zsK6*etH6&A%R~AQTj3sCaVeuKA$PCH1VbU$Gnm<4W;nBnBU%B0ysB1u%cY1_V~u*K
+zaEdCS5pX?6afsLi{uP3T>jL75fy2diHj6h(1O02<K|;@hM$U`jO^C<jeIwi{lwva|
+z`UV@qXpCT;JtX1pO*(WP9I;_b6V@dVzwLL+f<#{x^~899-n{ENFD3k44*F<4nR^~a
+zS%x{s)p8UiDO^GshV2;~D{rUCGVaXMXr5)A?=j>h?=o0O;{CT1nymz&bKqYE+pPO1
+z1=gN~r|;=3wYCDd89?^M1;0abSEtxiXUx#JWEZvw_~^zd4fdQ?6iwmJ6oaq=|NjHF
+zli|@~3C~(^FNO*4e$PWewDTP}v;Rk7Y4tK>w^hhUlcth@BT2vlZ%+k8tUZW<0>Ynw
+zx|almN9h7zgMeebhl#Oj0|CLRaOp8~|6*o^KF;DsgZDcvaDPoT)b;(Z6{>(H6bWRw
+zTlH9bQQJ5RG!yLYf-=BjN>@a)$p4@=?#J-&AOR4zal~_5QkMJu2BXGtQnV9D2sQ(g
+zokGGsS?>feWU)E0$BuEdr?}b?40hNWhaXa~X{Z5e%dA<C<yQ2tRakjc*rm){yc@u6
+z6spL|oR%qOl1|I9+*LR&+ak?$TBhYr#cA21tf1A?G9~%D)3Wq>w!2BB@uZC>uy6?u
+zBa)Chx!?Pv%HgSx+{-nQKEpdLh?vPxSj97V;}Hh|w(oag9;6SynFtJVMxbWcYk1~U
+zIo%)}P6qr{_K4|W9GJ*eXJKo$+62%3P&>UE?f{onBpVS_rq%&jMSe@-2h|~+hWMa5
+zAfw9LA)RsOc_&noK}BE^*duAGqZ9L%baPVP991E)bs^|4(bIrq5Wrb*W!27#R8!qY
+zKxBMa9cCDpRGn;LeG`lr_^b0(LRVr(uwOLmbm5jK`0xQ-zPsOLPM0DFE?ifD4X`ey
+zMa=IxbBiK1I0mD1VVvO~yEI8f!f$d_a6R}@W}~Ajk7rqTt8nEw2B2K4{J;HQHw8dZ
+zZAA$%g{T_7Bf_sxCK-9a`?C9!wSwa9(9H|-JuTtRhUUeUt-=Ef^6j1G1-Zb|{SD0-
+zfXL!?4Rr<e?pRkMxXFgy3>N&!ZtuFm_Bn|E-onx@{^NI$(B*mx6!3kRY6`7Cl1Li9
+z6eH~TR4qzybEv#Y4wf%$o5D;_cB$}YxdxQQ9dxyno@c(HPAzC3zuXobzrMjubekxJ
+z&8|S1{`nLk&dM(6nw?<xeal52`x}LyFdv+Tp)~kg&MZ1^amfJv;tlR}!-e;4?ENsq
+zb*aN%IgiqXh%oId@|*8(5RNjQtR4)zKBGM~M>CIT4?q-zbLbSsR-T>5!By}0dw;N-
+z1V7Bt?{+rOhGg;cC}e5_25@{=<P05M{!R+a$T}<IOeDn+hP$KvF$NBY*QNySA6JbO
+zyMJ6Y)gkH$l_vFc6I%a-btwiChbsLt{P%l-WS)<zL^96DR3e$iGH9LLLZ4Mv&0u`e
+zcGV2XC#=hAHhyQ&32QV@pF&lJTfdL%UaE(DR9z;keN0_EB$Eep!=>)*o@cmqdI;ye
+z#G9vKH%ythq;FH1=13uS`{bIH;aE#y8Lsg+c};B#>GkpD-133-NQ3f+)uSC@p&^nX
+zYN=HX_qv)X1RU)c&-wuFhSNS&5AP9`t5i5KTO0rtZY{(8CV$ROc!oPX;VH+7ipKrL
+zcbc!zLQ_%v`Z{BFhO<eXFW)Nalx7CrAH-{F{PBLG1>|BBt&Y6HBFR*iXC3G{lcCO@
+zlTf6uU($&2esL0KU?@+Jvxv3@5U3`6vH4_tSMK;2-xeD;#&_lZi}7u-jUv3OS+I9f
+zx>O$&r`BD7j|rc?BG&}?7jTRnkZwf_gSSqWN1MF(rqx^U8qCGlPtxnB;8A+5Yqs-@
+z$W_V>4jusJpsY$K23*}b27tnH&I+)74WU@&j)pYN*e?lEmWJv`E_&{PjO3yE2u8R8
+zVd)eHid7Sm9>~oUz6c%mFm5E@+ya~nIS-@VWPsOe5pxBB+lOx$tKV-6g3NJS()Zmi
+z;4T1O%5%eK`c+~IdnwXa?)f&K_3#U_e*!><bcORI^Mk?lbr4*v5q1vvbH;`{9iQ4H
+ze}mEGMjIrmVxW?^_@0CQ)n@vcUby`anqEot*FC(2ya~gTlOGHqN`90$Rq{*R!zT|o
+z5|zF$AnzpGqM>1qxb*XfZ)W+qSmg5RoeFV28<t!r&u3y7>ty*<IHM#C__v6QLu~$k
+z(tNS*6PJ|$P~?e7Ot;v{W5d=vc@AJG1|KABd*rDF#|WRZR_kGiO7dJtc1zENUDEP7
+zw&R>s+a+aL#KC^R96;W7$OAy8kY8=~x)s8(UjD#8D~Ag56?ph0eEBi&Fxo7-wi5EE
+z+z%?sKU;oKG5L$<2Nh+XAw8%NA7c+H2BWTt9{kkeHHdyCmJ-~PxIy_s^_%jA>Nw;D
+zdQOWl6pzRe_wc|C3O`7e5X-?=zu~w6WVP`o*Z9YN9piS!ZM2-jS46)@i`ajLX%%j^
+zd_1@$mVkB>w}rh!_5=S!0bMT16h4K#S?$B;)h?cft91lBaFFj$vK+tW4tL`SwCl|Z
+zzfs?amK`;;5>pXfB9lWUga3qIK%_6u7xq{C%h~_@-x>SmwZG64b!Ta`2MplZBFPr`
+NrQ82K`w#iw{{tE$12O;r
 
 literal 0
 HcmV?d00001
@@ -23804,10 +23880,10 @@ index 00000000000000..f159f4b8e9cb77
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
 new file mode 100644
-index 00000000000000..769f19a15eb71f
+index 00000000000000..d738d7278076ec
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,66 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23820,9 +23896,7 @@ index 00000000000000..769f19a15eb71f
 +#include <stdint.h>
 +
 +
-+typedef void* mkcgo_err_state;
-+mkcgo_err_state mkcgo_err_retrieve();
-+void mkcgo_err_free(mkcgo_err_state);
++uintptr_t mkcgo_err_retrieve();
 +
 +void _mkcgo_go_MD5(const uint8_t*, size_t, const uint8_t*);
 +void _mkcgo_go_SHA1(const uint8_t*, size_t, const uint8_t*);
@@ -23878,10 +23952,10 @@ index 00000000000000..769f19a15eb71f
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..4adcebf3d0614a
+index 00000000000000..4f1714d6126e3d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,284 @@
+@@ -0,0 +1,332 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23891,7 +23965,6 @@ index 00000000000000..4adcebf3d0614a
 +
 +#include "textflag.h"
 +
-+
 +#ifndef GOARCH_amd64
 +#ifndef GOARCH_arm64
 +#ifndef GOARCH_riscv64
@@ -23912,263 +23985,312 @@ index 00000000000000..4adcebf3d0614a
 +#endif
 +#endif
 +
-+
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
 +#endif
-+TEXT _mkcgo_go_MD5_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_MD5(SB)
-+GLOBL   ·_mkcgo_go_MD5_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_MD5_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_MD5_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA1_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA1(SB)
-+GLOBL   ·_mkcgo_go_SHA1_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA1_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA1_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA256_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA256(SB)
-+GLOBL   ·_mkcgo_go_SHA256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA256_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA384_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA384(SB)
-+GLOBL   ·_mkcgo_go_SHA384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA384_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA3_256_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA3_256(SB)
-+GLOBL   ·_mkcgo_go_SHA3_256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA3_256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_256_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA3_384_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA3_384(SB)
-+GLOBL   ·_mkcgo_go_SHA3_384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA3_384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_384_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA3_512_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA3_512(SB)
-+GLOBL   ·_mkcgo_go_SHA3_512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA3_512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_512_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_SHA512_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_SHA512(SB)
-+GLOBL   ·_mkcgo_go_SHA512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_SHA512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA512_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_copyHMAC_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_copyHMAC(SB)
-+GLOBL   ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_decapsulateMLKEM1024(SB)
-+GLOBL   ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_decapsulateMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_decapsulateMLKEM768(SB)
-+GLOBL   ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM768_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_decryptAESGCM(SB)
-+GLOBL   ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_decryptChaChaPoly_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_decryptChaChaPoly(SB)
-+GLOBL   ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptChaChaPoly_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
-+GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_deriveEncapsulationKeyMLKEM768(SB)
-+GLOBL   ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_ecdhSharedSecret(SB)
-+GLOBL   ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdhSharedSecret_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_ecdsaSign_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_ecdsaSign(SB)
-+GLOBL   ·_mkcgo_go_ecdsaSign_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_ecdsaSign_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaSign_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_ecdsaVerify_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_ecdsaVerify(SB)
-+GLOBL   ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaVerify_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_encapsulateMLKEM1024(SB)
-+GLOBL   ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_encapsulateMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_encapsulateMLKEM768(SB)
-+GLOBL   ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM768_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_encryptAESGCM(SB)
-+GLOBL   ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_encryptChaChaPoly_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_encryptChaChaPoly(SB)
-+GLOBL   ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptChaChaPoly_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_expandHKDF_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_expandHKDF(SB)
-+GLOBL   ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_expandHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_expandHKDF_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_extractHKDF_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_extractHKDF(SB)
-+GLOBL   ·_mkcgo_go_extractHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_extractHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_extractHKDF_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_finalizeHMAC_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_finalizeHMAC(SB)
-+GLOBL   ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_finalizeHMAC_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_freeHMAC_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_freeHMAC(SB)
-+GLOBL   ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_generateKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_generateKeyECDH(SB)
-+GLOBL   ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDH_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_generateKeyECDSA_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_generateKeyECDSA(SB)
-+GLOBL   ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDSA_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_generateKeyEd25519(SB)
-+GLOBL   ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_generateKeyMLKEM1024(SB)
-+GLOBL   ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_generateKeyMLKEM768_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_generateKeyMLKEM768(SB)
-+GLOBL   ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM768_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashBlockSize(SB)
-+GLOBL   ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashBlockSize_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashCopy_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashCopy(SB)
-+GLOBL   ·_mkcgo_go_hashCopy_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashCopy_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashCopy_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashFree_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashFree(SB)
-+GLOBL   ·_mkcgo_go_hashFree_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashFree_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashFree_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashNew_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashNew(SB)
-+GLOBL   ·_mkcgo_go_hashNew_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashNew_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashNew_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashReset_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashReset(SB)
-+GLOBL   ·_mkcgo_go_hashReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashReset_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashSize_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashSize(SB)
-+GLOBL   ·_mkcgo_go_hashSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSize_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashSum_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashSum(SB)
-+GLOBL   ·_mkcgo_go_hashSum_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashSum_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSum_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_hashWrite_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_hashWrite(SB)
-+GLOBL   ·_mkcgo_go_hashWrite_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_hashWrite_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashWrite_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_initHMAC_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_initHMAC(SB)
-+GLOBL   ·_mkcgo_go_initHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_initHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_initHMAC_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_newPrivateKeyEd25519FromSeed(SB)
-+GLOBL   ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_newPublicKeyEd25519_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_newPublicKeyEd25519(SB)
-+GLOBL   ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_publicKeyFromPrivateECDH(SB)
-+GLOBL   ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_signEd25519_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_signEd25519(SB)
-+GLOBL   ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_supportsMLKEM(SB)
-+GLOBL   ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLKEM_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_supportsSHA3(SB)
-+GLOBL   ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_supportsSHA3_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsSHA3_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_updateHMAC_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_updateHMAC(SB)
-+GLOBL   ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_validatePrivateKeyECDH(SB)
-+GLOBL   ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_validatePublicKeyECDH_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_validatePublicKeyECDH(SB)
-+GLOBL   ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
-+
-+TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_go_verifyEd25519(SB)
-+GLOBL   ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
++TEXT _mkcgo_go_MD5_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_MD5(SB)
++
++GLOBL ·_mkcgo_go_MD5_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_MD5_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_MD5_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA1_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA1(SB)
++
++GLOBL ·_mkcgo_go_SHA1_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA1_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA1_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA256_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA256(SB)
++
++GLOBL ·_mkcgo_go_SHA256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA384_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA384(SB)
++
++GLOBL ·_mkcgo_go_SHA384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_256_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_256(SB)
++
++GLOBL ·_mkcgo_go_SHA3_256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_384_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_384(SB)
++
++GLOBL ·_mkcgo_go_SHA3_384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_512_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_512(SB)
++
++GLOBL ·_mkcgo_go_SHA3_512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_512_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA512_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA512(SB)
++
++GLOBL ·_mkcgo_go_SHA512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA512_trampoline<>(SB)
++
++TEXT _mkcgo_go_copyHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_copyHMAC(SB)
++
++GLOBL ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decapsulateMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_decapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decapsulateMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decryptAESGCM(SB)
++
++GLOBL ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_decryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decryptChaChaPoly(SB)
++
++GLOBL ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptChaChaPoly_trampoline<>(SB)
++
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdhSharedSecret(SB)
++
++GLOBL ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdhSharedSecret_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaSign_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdsaSign(SB)
++
++GLOBL ·_mkcgo_go_ecdsaSign_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdsaSign_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaSign_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaVerify_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdsaVerify(SB)
++
++GLOBL ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaVerify_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encapsulateMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encapsulateMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encryptAESGCM(SB)
++
++GLOBL ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_encryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encryptChaChaPoly(SB)
++
++GLOBL ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptChaChaPoly_trampoline<>(SB)
++
++TEXT _mkcgo_go_expandHKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_expandHKDF(SB)
++
++GLOBL ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_expandHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_expandHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_extractHKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_extractHKDF(SB)
++
++GLOBL ·_mkcgo_go_extractHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_extractHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_extractHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_finalizeHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_finalizeHMAC(SB)
++
++GLOBL ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_finalizeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_freeHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_freeHMAC(SB)
++
++GLOBL ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyECDSA_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyECDSA(SB)
++
++GLOBL ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDSA_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyEd25519(SB)
++
++GLOBL ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashBlockSize(SB)
++
++GLOBL ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashCopy_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashCopy(SB)
++
++GLOBL ·_mkcgo_go_hashCopy_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashCopy_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashCopy_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashFree_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashFree(SB)
++
++GLOBL ·_mkcgo_go_hashFree_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashFree_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashFree_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashNew_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashNew(SB)
++
++GLOBL ·_mkcgo_go_hashNew_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashNew_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashNew_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashReset_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashReset(SB)
++
++GLOBL ·_mkcgo_go_hashReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashReset_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashSize(SB)
++
++GLOBL ·_mkcgo_go_hashSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSum_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashSum(SB)
++
++GLOBL ·_mkcgo_go_hashSum_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashSum_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSum_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashWrite_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashWrite(SB)
++
++GLOBL ·_mkcgo_go_hashWrite_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashWrite_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashWrite_trampoline<>(SB)
++
++TEXT _mkcgo_go_initHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_initHMAC(SB)
++
++GLOBL ·_mkcgo_go_initHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_initHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_initHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_newPrivateKeyEd25519FromSeed(SB)
++
++GLOBL ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPublicKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_newPublicKeyEd25519(SB)
++
++GLOBL ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_publicKeyFromPrivateECDH(SB)
++
++GLOBL ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_signEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signEd25519(SB)
++
++GLOBL ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsMLKEM(SB)
++
++GLOBL ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLKEM_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsSHA3(SB)
++
++GLOBL ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsSHA3_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsSHA3_trampoline<>(SB)
++
++TEXT _mkcgo_go_updateHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_updateHMAC(SB)
++
++GLOBL ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePrivateKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyEd25519(SB)
++
++GLOBL ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..c7c5d4c80f9466
+index 00000000000000..366dcf4c7b43dd
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 @@ -0,0 +1,220 @@
@@ -24188,9 +24310,9 @@ index 00000000000000..c7c5d4c80f9466
 +import "unsafe"
 +
 +//go:nosplit
-+func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
 +	x := uintptr(unsafe.Pointer(p))
-+	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
 +}
 +
 +func MD5(inputPointer []uint8, outputPointer []uint8) {
@@ -25766,6 +25888,15 @@ index 00000000000000..b631396bd2ffe7
 +
 +// call5 takes fn the C function and 5 arguments and calls the function with those arguments
 +func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
+new file mode 100644
+index 00000000000000..57250706a043f1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
+@@ -0,0 +1,3 @@
++{
++  "commit_hash": "49bede11a66085d4400e4a257e4c77c9604c791a"
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
 new file mode 100644
 index 00000000000000..88c4cdf9ec04cc
@@ -25976,10 +26107,10 @@ index 00000000000000..a79441edffbcb9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
 new file mode 100644
-index 00000000000000..b36bd00d361712
+index 00000000000000..1d59e7f6b628d1
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
-@@ -0,0 +1,37 @@
+@@ -0,0 +1,38 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -26010,8 +26141,9 @@ index 00000000000000..b36bd00d361712
 +		abort()
 +	}
 +	// *ts = *arg would cause a writebarrier so copy using slices
-+	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/8)
-+	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/8)
++	const ptrSize = unsafe.Sizeof(uintptr(0))
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
 +	for i := range s2 {
 +		s1[i] = s2[i]
 +	}
@@ -26259,7 +26391,7 @@ index 00000000000000..098f56ce5e6b77
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..59bdba1f7592f8
+index 00000000000000..2864fc192a0331
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
 @@ -0,0 +1,84 @@
@@ -26328,7 +26460,7 @@ index 00000000000000..59bdba1f7592f8
 +	MOVD ·threadentry_call(SB), R9
 +	MOVD (R9), R9
 +	CALL R9
-+	MOVD $0, R0                     // TODO: get the return value from threadentry
++	MOVD $0, R0                    // TODO: get the return value from threadentry
 +
 +	RESTORE_R19_TO_R28(8*4)
 +	RESTORE_F8_TO_F15(8*14)
@@ -26980,10 +27112,10 @@ index 00000000000000..edafb365383aca
 +)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
 new file mode 100644
-index 00000000000000..aa728f26dce676
+index 00000000000000..6b0cd286f82d58
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
-@@ -0,0 +1,100 @@
+@@ -0,0 +1,98 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -27055,9 +27187,7 @@ index 00000000000000..aa728f26dce676
 +	kCFNumberIntType = 9,
 +} CFNumberType;
 +
-+typedef void* mkcgo_err_state;
-+mkcgo_err_state mkcgo_err_retrieve();
-+void mkcgo_err_free(mkcgo_err_state);
++uintptr_t mkcgo_err_retrieve();
 +
 +CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
 +const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef);
@@ -27086,10 +27216,10 @@ index 00000000000000..aa728f26dce676
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
 new file mode 100644
-index 00000000000000..34df853d28c0cf
+index 00000000000000..ff317532f1ef02
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
-@@ -0,0 +1,149 @@
+@@ -0,0 +1,170 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -27099,7 +27229,6 @@ index 00000000000000..34df853d28c0cf
 +
 +#include "textflag.h"
 +
-+
 +#ifndef GOARCH_amd64
 +#ifndef GOARCH_arm64
 +#ifndef GOARCH_riscv64
@@ -27120,128 +27249,150 @@ index 00000000000000..34df853d28c0cf
 +#endif
 +#endif
 +
-+
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
 +#endif
-+TEXT _mkcgo_CFDataCreate_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDataCreate(SB)
-+GLOBL   ·_mkcgo_CFDataCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDataCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDataGetBytePtr_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDataGetBytePtr(SB)
-+GLOBL   ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetBytePtr_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDataGetLength_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDataGetLength(SB)
-+GLOBL   ·_mkcgo_CFDataGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDataGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetLength_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionaryCreate_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDictionaryCreate(SB)
-+GLOBL   ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionaryCreateMutable_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDictionaryCreateMutable(SB)
-+GLOBL   ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreateMutable_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionarySetValue_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFDictionarySetValue(SB)
-+GLOBL   ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionarySetValue_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFErrorCopyDescription_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFErrorCopyDescription(SB)
-+GLOBL   ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorCopyDescription_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFErrorGetCode_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFErrorGetCode(SB)
-+GLOBL   ·_mkcgo_CFErrorGetCode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFErrorGetCode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorGetCode_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFNumberCreate_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFNumberCreate(SB)
-+GLOBL   ·_mkcgo_CFNumberCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFNumberCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFNumberCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFRelease_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFRelease(SB)
-+GLOBL   ·_mkcgo_CFRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFRelease_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFStringGetCStringPtr_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFStringGetCStringPtr(SB)
-+GLOBL   ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetCStringPtr_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFStringGetLength_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_CFStringGetLength(SB)
-+GLOBL   ·_mkcgo_CFStringGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_CFStringGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetLength_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCopyExternalRepresentation(SB)
-+GLOBL   ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCopyPublicKey(SB)
-+GLOBL   ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyPublicKey_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCreateDecryptedData(SB)
-+GLOBL   ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCreateEncryptedData(SB)
-+GLOBL   ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCreateRandomKey_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCreateRandomKey(SB)
-+GLOBL   ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateRandomKey_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCreateSignature_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCreateSignature(SB)
-+GLOBL   ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateSignature_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyCreateWithData_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyCreateWithData(SB)
-+GLOBL   ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateWithData_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyGetBlockSize_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyGetBlockSize(SB)
-+GLOBL   ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyGetBlockSize_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyIsAlgorithmSupported(SB)
-+GLOBL   ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecKeyVerifySignature_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecKeyVerifySignature(SB)
-+GLOBL   ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyVerifySignature_trampoline<>(SB)
-+
-+TEXT _mkcgo_SecRandomCopyBytes_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_SecRandomCopyBytes(SB)
-+GLOBL   ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecRandomCopyBytes_trampoline<>(SB)
++TEXT _mkcgo_CFDataCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataCreate(SB)
++
++GLOBL ·_mkcgo_CFDataCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetBytePtr_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataGetBytePtr(SB)
++
++GLOBL ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetBytePtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetLength_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataGetLength(SB)
++
++GLOBL ·_mkcgo_CFDataGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionaryCreate(SB)
++
++GLOBL ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreateMutable_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionaryCreateMutable(SB)
++
++GLOBL ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreateMutable_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionarySetValue_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionarySetValue(SB)
++
++GLOBL ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionarySetValue_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorCopyDescription_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFErrorCopyDescription(SB)
++
++GLOBL ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorCopyDescription_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorGetCode_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFErrorGetCode(SB)
++
++GLOBL ·_mkcgo_CFErrorGetCode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFErrorGetCode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorGetCode_trampoline<>(SB)
++
++TEXT _mkcgo_CFNumberCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFNumberCreate(SB)
++
++GLOBL ·_mkcgo_CFNumberCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFNumberCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFNumberCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFRelease_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFRelease(SB)
++
++GLOBL ·_mkcgo_CFRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetCStringPtr_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFStringGetCStringPtr(SB)
++
++GLOBL ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetCStringPtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetLength_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFStringGetLength(SB)
++
++GLOBL ·_mkcgo_CFStringGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFStringGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCopyExternalRepresentation(SB)
++
++GLOBL ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCopyPublicKey(SB)
++
++GLOBL ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyPublicKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateDecryptedData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateEncryptedData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateRandomKey_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateRandomKey(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateRandomKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateSignature_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateSignature(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateSignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateWithData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateWithData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateWithData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyGetBlockSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyGetBlockSize(SB)
++
++GLOBL ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyGetBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyIsAlgorithmSupported(SB)
++
++GLOBL ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyVerifySignature_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyVerifySignature(SB)
++
++GLOBL ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyVerifySignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecRandomCopyBytes_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecRandomCopyBytes(SB)
++
++GLOBL ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecRandomCopyBytes_trampoline<>(SB)
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 new file mode 100644
-index 00000000000000..44a61506bca9be
+index 00000000000000..20bd49b26f21f7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 @@ -0,0 +1,368 @@
@@ -27517,9 +27668,9 @@ index 00000000000000..44a61506bca9be
 +type SecRandomRef = C.SecRandomRef
 +
 +//go:nosplit
-+func mkcgoNoEscape(p *C.mkcgo_err_state) *C.mkcgo_err_state {
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
 +	x := uintptr(unsafe.Pointer(p))
-+	return (*C.mkcgo_err_state)(unsafe.Pointer(x ^ 0))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
 +}
 +
 +func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
@@ -28113,10 +28264,10 @@ index 00000000000000..b10738f5d6ec26
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
 new file mode 100644
-index 00000000000000..59560c7d590f7a
+index 00000000000000..512d8087daf527
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
-@@ -0,0 +1,108 @@
+@@ -0,0 +1,120 @@
 +// Copyright 2009 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -28126,13 +28277,15 @@ index 00000000000000..59560c7d590f7a
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
 +#ifdef GOOS_windows
-+	MOVQ	CX, 0(SP)
++	MOVQ CX, 0(SP)
++
 +#else
-+	MOVQ	DI, 0(SP)
++	MOVQ DI, 0(SP)
++
 +#endif
-+	CALL	·syscallNSystemStack(SB)
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
 +#ifdef GOOS_windows
@@ -28141,96 +28294,106 @@ index 00000000000000..59560c7d590f7a
 +#define RegArgsN 6
 +#endif
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$16-8
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
 +	// Load pointer from stack (ABI0 calling convention)
 +	// Store argument and original SP in a callee-saved register
-+	MOVQ	libcArgs+0(FP), R13
-+	MOVQ	SP, R14
-+	
++	MOVQ libcArgs+0(FP), R13
++	MOVQ SP, R14
++
 +	// Align stack to 16 bytes
-+	ANDQ	$~15, SP
++	ANDQ $~15, SP
 +
-+	MOVQ	libcCallInfo_fn(R13), R11
-+	MOVQ	libcCallInfo_n(R13), CX
-+	MOVQ	libcCallInfo_args(R13), R10
++	MOVQ libcCallInfo_fn(R13), R11
++	MOVQ libcCallInfo_n(R13), CX
++	MOVQ libcCallInfo_args(R13), R10
 +
 +	// Fast version, do not store args on the stack.
-+	CMPL	CX, $0;	JE	_0args
-+	CMPL	CX, $1;	JE	_1args
-+	CMPL	CX, $2;	JE	_2args
-+	CMPL	CX, $3;	JE	_3args
-+	CMPL	CX, $4;	JE	_4args
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
++	CMPL CX, $4; JE _4args
++
 +#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
-+	CMPL	CX, $5;	JE	_5args
-+	CMPL	CX, $6;	JE	_6args
++	CMPL CX, $5; JE _5args
++	CMPL CX, $6; JE _6args
++
 +#endif
 +
 +	// Reserve stack space for remaining args
-+	MOVQ	CX, R12
-+	SUBQ	$RegArgsN, R12
-+	ADDQ	$1, R12 // make even number of words for stack alignment
-+	ANDQ	$~1, R12
-+	SHLQ	$3, R12
-+	SUBQ	R12, SP
++	MOVQ CX, R12
++	SUBQ $RegArgsN, R12
++	ADDQ $1, R12        // make even number of words for stack alignment
++	ANDQ $~1, R12
++	SHLQ $3, R12
++	SUBQ R12, SP
 +
 +	// Copy args to the stack.
 +	// CX: count of stack arguments (n-RegArgsN)
 +	// SI: &args[RegArgsN]
 +	// DI: copy of RSP
-+	SUBQ	$RegArgsN, CX
-+	MOVQ	R10, SI
-+	ADDQ	$(8*RegArgsN), SI
-+	MOVQ	SP, DI
++	SUBQ $RegArgsN, CX
++	MOVQ R10, SI
++	ADDQ $(8*RegArgsN), SI
++	MOVQ SP, DI
 +	CLD
 +	REP; MOVSQ
 +
 +#ifndef GOOS_windows
 +_6args:
-+	MOVQ	(5*8)(R10), R9
++	MOVQ (5*8)(R10), R9
++
 +_5args:
-+	MOVQ	(4*8)(R10), R8
++	MOVQ (4*8)(R10), R8
++
 +#endif
 +_4args:
-+	MOVQ	(3*8)(R10), CX
++	MOVQ (3*8)(R10), CX
++
 +_3args:
-+	MOVQ	(2*8)(R10), DX
++	MOVQ (2*8)(R10), DX
++
 +_2args:
-+	MOVQ	(1*8)(R10), SI
++	MOVQ (1*8)(R10), SI
++
 +_1args:
-+	MOVQ	(0*8)(R10), DI
++	MOVQ (0*8)(R10), DI
++
 +_0args:
 +
-+	XORL	AX, AX	    // vararg: say "no float args"
++	XORL AX, AX // vararg: say "no float args"
 +
 +#ifdef GOOS_windows
 +	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
 +	// and 32 bytes of shadow space on the stack.
-+	ADJSP	$32
-+	MOVQ	CX, R9
-+	MOVQ	DX, R8
-+	MOVQ	SI, DX
-+	MOVQ	DI, CX
++	ADJSP $32
++	MOVQ  CX, R9
++	MOVQ  DX, R8
++	MOVQ  SI, DX
++	MOVQ  DI, CX
++
 +#endif
 +
-+	CALL	R11
++	CALL R11
 +
 +#ifdef GOOS_windows
-+	ADJSP	$-32
++	ADJSP $-32
++
 +#endif
 +
-+	MOVQ	R14, SP		// free stack space
++	MOVQ R14, SP // free stack space
 +
 +	// Return result.
-+	MOVQ	AX, libcCallInfo_r1(R13)
-+	MOVQ	DX, libcCallInfo_r2(R13)
++	MOVQ AX, libcCallInfo_r1(R13)
++	MOVQ DX, libcCallInfo_r2(R13)
 +
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
 new file mode 100644
-index 00000000000000..025276dffb2aa5
+index 00000000000000..261a7e4cb90d56
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
-@@ -0,0 +1,87 @@
+@@ -0,0 +1,97 @@
 +// Copyright 2015 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -28240,84 +28403,94 @@ index 00000000000000..025276dffb2aa5
 +#include "go_asm.h"
 +#include "textflag.h"
 +
-+TEXT ·syscallNSystemStack_trampoline(SB),NOSPLIT,$16
-+	MOVD	R0, 8(RSP)
-+	CALL	·syscallNSystemStack(SB)
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVD R0, 8(RSP)
++	CALL ·syscallNSystemStack(SB)
 +	RET
 +
-+TEXT ·syscallNAsm(SB),NOSPLIT,$0-16
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
 +	// Save original stack pointer
-+	MOVD	RSP, R20
++	MOVD RSP, R20
 +
 +	// Load pointer from stack (ABI0 calling convention)
-+	MOVD	libcArgs+0(FP), R3
++	MOVD libcArgs+0(FP), R3
++
++	MOVD libcCallInfo_args(R3), R12
++	MOVD libcCallInfo_fn(R3), R13
 +
-+	MOVD	libcCallInfo_args(R3), R12
-+	MOVD	libcCallInfo_fn(R3), R13
 +	// Do we have more than 8 arguments?
-+	MOVD	libcCallInfo_n(R3), R0
-+	CMP	$0,	R0; BEQ	_0args
-+	CMP	$1,	R0; BEQ	_1args
-+	CMP	$2,	R0; BEQ	_2args
-+	CMP	$3,	R0; BEQ	_3args
-+	CMP	$4,	R0; BEQ	_4args
-+	CMP	$5,	R0; BEQ	_5args
-+	CMP	$6,	R0; BEQ	_6args
-+	CMP	$7,	R0; BEQ	_7args
-+	CMP	$8,	R0; BEQ	_8args
++	MOVD libcCallInfo_n(R3), R0
++	CMP  $0, R0; BEQ _0args
++	CMP  $1, R0; BEQ _1args
++	CMP  $2, R0; BEQ _2args
++	CMP  $3, R0; BEQ _3args
++	CMP  $4, R0; BEQ _4args
++	CMP  $5, R0; BEQ _5args
++	CMP  $6, R0; BEQ _6args
++	CMP  $7, R0; BEQ _7args
++	CMP  $8, R0; BEQ _8args
 +
 +	// Reserve stack space for remaining args
-+	SUB	$8, R0, R2
-+	ADD	$1, R2, R3 // make even number of words for stack alignment
-+	AND	$~1, R3
-+	LSL	$3, R3
-+	SUB	R3, RSP
++	SUB $8, R0, R2
++	ADD $1, R2, R3 // make even number of words for stack alignment
++	AND $~1, R3
++	LSL $3, R3
++	SUB R3, RSP
 +
 +	// R4: size of stack arguments (n-8)*8
 +	// R5: &args[8]
 +	// R6: loop counter, from 0 to (n-8)*8
 +	// R7: scratch
 +	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
-+	SUB	$8, R0, R4
-+	LSL	$3, R4
-+	ADD	$(8*8), R12, R5
-+	MOVD	$0, R6
-+	MOVD	RSP, R8
++	SUB  $8, R0, R4
++	LSL  $3, R4
++	ADD  $(8*8), R12, R5
++	MOVD $0, R6
++	MOVD RSP, R8
++
 +stackargs:
-+	MOVD	(R6)(R5), R7
-+	MOVD	R7, (R6)(R8)
-+	ADD	$8, R6
-+	CMP	R6, R4
-+	BNE	stackargs
++	MOVD (R6)(R5), R7
++	MOVD R7, (R6)(R8)
++	ADD  $8, R6
++	CMP  R6, R4
++	BNE  stackargs
 +
 +_8args:
-+	MOVD	(7*8)(R12), R7
++	MOVD (7*8)(R12), R7
++
 +_7args:
-+	MOVD	(6*8)(R12), R6
++	MOVD (6*8)(R12), R6
++
 +_6args:
-+	MOVD	(5*8)(R12), R5
++	MOVD (5*8)(R12), R5
++
 +_5args:
-+	MOVD	(4*8)(R12), R4
++	MOVD (4*8)(R12), R4
++
 +_4args:
-+	MOVD	(3*8)(R12), R3
++	MOVD (3*8)(R12), R3
++
 +_3args:
-+	MOVD	(2*8)(R12), R2
++	MOVD (2*8)(R12), R2
++
 +_2args:
-+	MOVD	(1*8)(R12), R1
++	MOVD (1*8)(R12), R1
++
 +_1args:
-+	MOVD	(0*8)(R12), R0
++	MOVD (0*8)(R12), R0
++
 +_0args:
 +
-+	BL	(R13)
++	BL (R13)
 +
 +	// Restore original stack pointer
-+	MOVD	R20, RSP
++	MOVD R20, RSP
 +
-+	MOVD	libcArgs+0(FP), R3
-+	MOVD	R0, libcCallInfo_r1(R3)	// save r1
-+	MOVD	R1, libcCallInfo_r2(R3)	// save r2
++	MOVD libcArgs+0(FP), R3
++	MOVD R0, libcCallInfo_r1(R3) // save r1
++	MOVD R1, libcCallInfo_r2(R3) // save r2
 +
-+    RET
++	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
 new file mode 100644
 index 00000000000000..9a24f0b6c13b1b
@@ -28498,20 +28671,19 @@ index 00000000000000..458053d55e4541
 +//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package xsyscall -tags "darwin" dl.h
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
 new file mode 100644
-index 00000000000000..9ab8a302416064
+index 00000000000000..cf4762ce141355
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
-@@ -0,0 +1,54 @@
+@@ -0,0 +1,56 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
 +// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:build !cgo && (darwin)
++//go:build !cgo && darwin
 +
 +#include "textflag.h"
 +
-+
 +#ifndef GOARCH_amd64
 +#ifndef GOARCH_arm64
 +#ifndef GOARCH_riscv64
@@ -28532,29 +28704,32 @@ index 00000000000000..9ab8a302416064
 +#endif
 +#endif
 +
-+
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
 +#endif
-+TEXT _mkcgo_dlclose_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlclose(SB)
-+GLOBL   ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlerror_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlerror(SB)
-+GLOBL   ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlopen_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlopen(SB)
-+GLOBL   ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlsym_trampoline<>(SB),NOSPLIT,$0-0
-+    JMP _mkcgo_dlsym(SB)
-+GLOBL   ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA    ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
++TEXT _mkcgo_dlclose_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlclose(SB)
++
++GLOBL ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
++
++TEXT _mkcgo_dlerror_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlerror(SB)
++
++GLOBL ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
++
++TEXT _mkcgo_dlopen_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlopen(SB)
++
++GLOBL ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
++
++TEXT _mkcgo_dlsym_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlsym(SB)
++
++GLOBL ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
 new file mode 100644
@@ -36465,18 +36640,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..788e564ca4d552 100644
+index 48967bc9ee3bd2..451a7764b7742f 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260128084701-c75483be7310
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260128084327-21e6662725ad
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto

From cda4c99bd16840d321694f1df1d29e2ded7dbcf1 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 2 Feb 2026 11:21:58 +0000
Subject: [PATCH 701/887] bump to latest commit

---
 go                                     |  2 +-
 patches/0004-Use-crypto-backends.patch | 22 +++++++++++-----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/go b/go
index 134035855cb..d99be5c4444 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 134035855cbc84e25765c2a4af3d152aaf430c5c
+Subproject commit d99be5c44449a3a40a62942272e99642962a37d9
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 4ea980e06a8..33fd8651086 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -2095,7 +2095,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  	return ek.key.Encapsulate()
  }
 diff --git a/src/crypto/mlkem/mlkem_test.go b/src/crypto/mlkem/mlkem_test.go
-index 922147ab15dec2..614d51762eddab 100644
+index e1c2ef49f15ce0..23504c64f4d805 100644
 --- a/src/crypto/mlkem/mlkem_test.go
 +++ b/src/crypto/mlkem/mlkem_test.go
 @@ -6,6 +6,7 @@ package mlkem_test
@@ -3530,7 +3530,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index c2b1b7037a46cf..f490c3fc5b1cae 100644
+index 7d4bd5bcceba4f..697dfa1ecb792e 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,10 +11,10 @@ import (
@@ -3545,7 +3545,7 @@ index c2b1b7037a46cf..f490c3fc5b1cae 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -514,7 +514,20 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -523,7 +523,20 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -3583,7 +3583,7 @@ index 77a24b4a78d8fc..84724fac5f951e 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 06675a8ce9d2a1..9b761f256f4fcf 100644
+index 34dfb13b672f79..e635079f12313f 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -63,7 +63,20 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -3609,7 +3609,7 @@ index 06675a8ce9d2a1..9b761f256f4fcf 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 0033164f65da8c..04e995eddcf6c1 100644
+index bce94ed2d8c436..14834301052886 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -3620,9 +3620,9 @@ index 0033164f65da8c..04e995eddcf6c1 100644
  	"crypto/rsa"
  	"crypto/tls/internal/fips140tls"
 +	"crypto/tls/internal/tls13"
+ 	"crypto/x509"
  	"errors"
  	"fmt"
- 	"hash"
 @@ -453,9 +453,6 @@ func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
  		UnmarshalBinary(data []byte) error
  	}
@@ -3966,10 +3966,10 @@ index f9bd313737e21b..04548c961e74a8 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f52b6b1ac71711..f6f962f38b5d00 100644
+index ad2c8fa13fd07a..de1cea23e37ba1 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -545,7 +545,7 @@ var depsRules = `
+@@ -544,7 +544,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -3978,7 +3978,7 @@ index f52b6b1ac71711..f6f962f38b5d00 100644
  
  	crypto !< FIPS;
  
-@@ -569,7 +569,12 @@ var depsRules = `
+@@ -568,7 +568,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -3992,7 +3992,7 @@ index f52b6b1ac71711..f6f962f38b5d00 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -603,7 +608,8 @@ var depsRules = `
+@@ -602,7 +607,8 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/subtle,
@@ -4002,7 +4002,7 @@ index f52b6b1ac71711..f6f962f38b5d00 100644
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/internal/boring
-@@ -621,6 +627,7 @@ var depsRules = `
+@@ -620,6 +626,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From b2f9810ac72dc2638139dec0e4eb621c1510b77c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Feb 2026 11:17:50 +0000
Subject: [PATCH 702/887] build(deps): bump github/codeql-action from 4.32.0 to
 4.32.1 (#2093)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.0 to 4.32.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b20883b0cd1f46c72ae0ba6d1090936928f9fa30...6bc82e05fd0ea64601dd4b465378bbcf57de0314)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index fcdb987b382..103942fef41 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+        uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+        uses: github/codeql-action/autobuild@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+        uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
         with:
           category: /language:go

From 52ad3cf1ec9609a99a9ac936691eea52e6395d47 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 3 Feb 2026 12:25:33 +0000
Subject: [PATCH 703/887] implement ppc64le assembly for CGO-less (#2094)

---
 eng/doc/MigrationGuide.md                     |   2 +-
 .../0001-Vendor-external-dependencies.patch   | 816 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |  22 +-
 3 files changed, 813 insertions(+), 27 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index a7d60ebaab6..d1c82db03aa 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -148,7 +148,7 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 > [!NOTE]
 > As of Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
 > This allows the use of OpenSSL without requiring cgo.
-> Currently this experiment is supported on the following architectures: `386`, `amd64`, `arm`, `arm64`, and `riscv64`.
+> Currently this experiment is supported on the following architectures: `386`, `amd64`, `arm`, `arm64`, `ppc64le` and `riscv64`.
 >
 > While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental as of Go 1.26 and may have limitations.
 
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 032f2853c33..b34cb38c3f2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -62,10 +62,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
+ .../openssl/v2/internal/fakecgo/abi_ppc64x.h  |  195 ++
  .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
  .../openssl/v2/internal/fakecgo/asm_arm.s     |   52 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
+ .../openssl/v2/internal/fakecgo/asm_ppc64le.s |   82 +
  .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
  .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
@@ -86,6 +88,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
  .../v2/internal/fakecgo/trampolines_arm.s     |   81 +
  .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
+ .../v2/internal/fakecgo/trampolines_ppc64le.s |  227 ++
  .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
@@ -96,6 +99,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../fakecgo/ztrampolines_linux_amd64.s        |  102 +
  .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   93 +
+ .../fakecgo/ztrampolines_linux_ppc64le.s      |  101 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
  .../openssl/v2/internal/ossl/asm_386.s        |   98 +
@@ -103,6 +107,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/asm_arm.s        |  104 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   97 +
  .../openssl/v2/internal/ossl/asm_others.s     |    7 +
+ .../openssl/v2/internal/ossl/asm_ppc64le.s    |  141 +
  .../openssl/v2/internal/ossl/asm_riscv64.s    |  109 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
@@ -263,7 +268,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 255 files changed, 32532 insertions(+), 7 deletions(-)
+ 260 files changed, 33278 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -311,10 +316,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
@@ -335,6 +342,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
@@ -345,6 +353,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
@@ -352,6 +361,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
@@ -2185,7 +2195,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..3145dea23ec479 100644
+index d6c515017a7009..c5ad7ca640eeb6 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2194,17 +2204,17 @@ index d6c515017a7009..3145dea23ec479 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..9cf0c5ec7294ec 100644
+index 2223d2a7c231c1..641e90d4ca1db2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb h1:ptC7mpk/0vizJzhyOPC+dqx6zwziw22DpCiqJhICddk=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f h1:1niOn99Euubk0wtGY3dJvgFQh0+KOG3eMtg4AkbjOlg=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
@@ -2213,7 +2223,7 @@ index 2223d2a7c231c1..9cf0c5ec7294ec 100644
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index a458731f4bc100..a699ac341662e4 100644
+index 863882aebf583e..a0436aa1901b7e 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -154,6 +154,13 @@ var depsRules = `
@@ -2230,7 +2240,7 @@ index a458731f4bc100..a699ac341662e4 100644
  	# TIME is SYSCALL plus the core packages about time, including context.
  	SYSCALL
  	< time/tzdata
-@@ -548,16 +555,46 @@ var depsRules = `
+@@ -547,16 +554,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2282,7 +2292,7 @@ index a458731f4bc100..a699ac341662e4 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -579,6 +616,10 @@ var depsRules = `
+@@ -578,6 +615,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2293,7 +2303,7 @@ index a458731f4bc100..a699ac341662e4 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -925,7 +966,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -924,7 +965,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2302,7 +2312,7 @@ index a458731f4bc100..a699ac341662e4 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -935,7 +976,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -934,7 +975,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -7270,6 +7280,207 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
 +	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
+new file mode 100644
+index 00000000000000..245a5266f6e9fa
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
+@@ -0,0 +1,195 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI
++//
++// On PPC64/ELFv2 targets, the following registers are callee
++// saved when called from C. They must be preserved before
++// calling into Go which does not preserve any of them.
++//
++//	R14-R31
++//	CR2-4
++//	VR20-31
++//	F14-F31
++//
++// xcoff(aix) and ELFv1 are similar, but may only require a
++// subset of these.
++//
++// These macros assume a 16 byte aligned stack pointer. This
++// is required by ELFv1, ELFv2, and AIX PPC64.
++
++#define SAVE_GPR_SIZE (18*8)
++#define SAVE_GPR(offset)               \
++	MOVD	R14, (offset+8*0)(R1)  \
++	MOVD	R15, (offset+8*1)(R1)  \
++	MOVD	R16, (offset+8*2)(R1)  \
++	MOVD	R17, (offset+8*3)(R1)  \
++	MOVD	R18, (offset+8*4)(R1)  \
++	MOVD	R19, (offset+8*5)(R1)  \
++	MOVD	R20, (offset+8*6)(R1)  \
++	MOVD	R21, (offset+8*7)(R1)  \
++	MOVD	R22, (offset+8*8)(R1)  \
++	MOVD	R23, (offset+8*9)(R1)  \
++	MOVD	R24, (offset+8*10)(R1) \
++	MOVD	R25, (offset+8*11)(R1) \
++	MOVD	R26, (offset+8*12)(R1) \
++	MOVD	R27, (offset+8*13)(R1) \
++	MOVD	R28, (offset+8*14)(R1) \
++	MOVD	R29, (offset+8*15)(R1) \
++	MOVD	g,   (offset+8*16)(R1) \
++	MOVD	R31, (offset+8*17)(R1)
++
++#define RESTORE_GPR(offset)            \
++	MOVD	(offset+8*0)(R1), R14  \
++	MOVD	(offset+8*1)(R1), R15  \
++	MOVD	(offset+8*2)(R1), R16  \
++	MOVD	(offset+8*3)(R1), R17  \
++	MOVD	(offset+8*4)(R1), R18  \
++	MOVD	(offset+8*5)(R1), R19  \
++	MOVD	(offset+8*6)(R1), R20  \
++	MOVD	(offset+8*7)(R1), R21  \
++	MOVD	(offset+8*8)(R1), R22  \
++	MOVD	(offset+8*9)(R1), R23  \
++	MOVD	(offset+8*10)(R1), R24 \
++	MOVD	(offset+8*11)(R1), R25 \
++	MOVD	(offset+8*12)(R1), R26 \
++	MOVD	(offset+8*13)(R1), R27 \
++	MOVD	(offset+8*14)(R1), R28 \
++	MOVD	(offset+8*15)(R1), R29 \
++	MOVD	(offset+8*16)(R1), g   \
++	MOVD	(offset+8*17)(R1), R31
++
++#define SAVE_FPR_SIZE (18*8)
++#define SAVE_FPR(offset)               \
++	FMOVD	F14, (offset+8*0)(R1)  \
++	FMOVD	F15, (offset+8*1)(R1)  \
++	FMOVD	F16, (offset+8*2)(R1)  \
++	FMOVD	F17, (offset+8*3)(R1)  \
++	FMOVD	F18, (offset+8*4)(R1)  \
++	FMOVD	F19, (offset+8*5)(R1)  \
++	FMOVD	F20, (offset+8*6)(R1)  \
++	FMOVD	F21, (offset+8*7)(R1)  \
++	FMOVD	F22, (offset+8*8)(R1)  \
++	FMOVD	F23, (offset+8*9)(R1)  \
++	FMOVD	F24, (offset+8*10)(R1) \
++	FMOVD	F25, (offset+8*11)(R1) \
++	FMOVD	F26, (offset+8*12)(R1) \
++	FMOVD	F27, (offset+8*13)(R1) \
++	FMOVD	F28, (offset+8*14)(R1) \
++	FMOVD	F29, (offset+8*15)(R1) \
++	FMOVD	F30, (offset+8*16)(R1) \
++	FMOVD	F31, (offset+8*17)(R1)
++
++#define RESTORE_FPR(offset)            \
++	FMOVD	(offset+8*0)(R1), F14  \
++	FMOVD	(offset+8*1)(R1), F15  \
++	FMOVD	(offset+8*2)(R1), F16  \
++	FMOVD	(offset+8*3)(R1), F17  \
++	FMOVD	(offset+8*4)(R1), F18  \
++	FMOVD	(offset+8*5)(R1), F19  \
++	FMOVD	(offset+8*6)(R1), F20  \
++	FMOVD	(offset+8*7)(R1), F21  \
++	FMOVD	(offset+8*8)(R1), F22  \
++	FMOVD	(offset+8*9)(R1), F23  \
++	FMOVD	(offset+8*10)(R1), F24 \
++	FMOVD	(offset+8*11)(R1), F25 \
++	FMOVD	(offset+8*12)(R1), F26 \
++	FMOVD	(offset+8*13)(R1), F27 \
++	FMOVD	(offset+8*14)(R1), F28 \
++	FMOVD	(offset+8*15)(R1), F29 \
++	FMOVD	(offset+8*16)(R1), F30 \
++	FMOVD	(offset+8*17)(R1), F31
++
++// Save and restore VR20-31 (aka VSR56-63). These
++// macros must point to a 16B aligned offset.
++#define SAVE_VR_SIZE (12*16)
++#define SAVE_VR(offset, rtmp)         \
++	MOVD	$(offset+16*0), rtmp  \
++	STVX	V20, (rtmp)(R1)       \
++	MOVD	$(offset+16*1), rtmp  \
++	STVX	V21, (rtmp)(R1)       \
++	MOVD	$(offset+16*2), rtmp  \
++	STVX	V22, (rtmp)(R1)       \
++	MOVD	$(offset+16*3), rtmp  \
++	STVX	V23, (rtmp)(R1)       \
++	MOVD	$(offset+16*4), rtmp  \
++	STVX	V24, (rtmp)(R1)       \
++	MOVD	$(offset+16*5), rtmp  \
++	STVX	V25, (rtmp)(R1)       \
++	MOVD	$(offset+16*6), rtmp  \
++	STVX	V26, (rtmp)(R1)       \
++	MOVD	$(offset+16*7), rtmp  \
++	STVX	V27, (rtmp)(R1)       \
++	MOVD	$(offset+16*8), rtmp  \
++	STVX	V28, (rtmp)(R1)       \
++	MOVD	$(offset+16*9), rtmp  \
++	STVX	V29, (rtmp)(R1)       \
++	MOVD	$(offset+16*10), rtmp \
++	STVX	V30, (rtmp)(R1)       \
++	MOVD	$(offset+16*11), rtmp \
++	STVX	V31, (rtmp)(R1)
++
++#define RESTORE_VR(offset, rtmp)      \
++	MOVD	$(offset+16*0), rtmp  \
++	LVX	(rtmp)(R1), V20       \
++	MOVD	$(offset+16*1), rtmp  \
++	LVX	(rtmp)(R1), V21       \
++	MOVD	$(offset+16*2), rtmp  \
++	LVX	(rtmp)(R1), V22       \
++	MOVD	$(offset+16*3), rtmp  \
++	LVX	(rtmp)(R1), V23       \
++	MOVD	$(offset+16*4), rtmp  \
++	LVX	(rtmp)(R1), V24       \
++	MOVD	$(offset+16*5), rtmp  \
++	LVX	(rtmp)(R1), V25       \
++	MOVD	$(offset+16*6), rtmp  \
++	LVX	(rtmp)(R1), V26       \
++	MOVD	$(offset+16*7), rtmp  \
++	LVX	(rtmp)(R1), V27       \
++	MOVD	$(offset+16*8), rtmp  \
++	LVX	(rtmp)(R1), V28       \
++	MOVD	$(offset+16*9), rtmp  \
++	LVX	(rtmp)(R1), V29       \
++	MOVD	$(offset+16*10), rtmp \
++	LVX	(rtmp)(R1), V30       \
++	MOVD	$(offset+16*11), rtmp \
++	LVX	(rtmp)(R1), V31
++
++// LR and CR are saved in the caller's frame. The callee must
++// make space for all other callee-save registers.
++#define SAVE_ALL_REG_SIZE (SAVE_GPR_SIZE+SAVE_FPR_SIZE+SAVE_VR_SIZE)
++
++// Stack a frame and save all callee-save registers following the
++// host OS's ABI. Fortunately, this is identical for AIX, ELFv1, and
++// ELFv2. All host ABIs require the stack pointer to maintain 16 byte
++// alignment, and save the callee-save registers in the same places.
++//
++// To restate, R1 is assumed to be aligned when this macro is used.
++// This assumes the caller's frame is compliant with the host ABI.
++// CR and LR are saved into the caller's frame per the host ABI.
++// R0 is initialized to $0 as expected by Go.
++#define STACK_AND_SAVE_HOST_TO_GO_ABI(extra)                       \
++	MOVD	LR, R0                                             \
++	MOVD	R0, 16(R1)                                         \
++	MOVW	CR, R0                                             \
++	MOVD	R0, 8(R1)                                          \
++	MOVDU	R1, -(extra)-FIXED_FRAME-SAVE_ALL_REG_SIZE(R1)     \
++	SAVE_GPR(extra+FIXED_FRAME)                                \
++	SAVE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
++	SAVE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
++	MOVD	$0, R0
++
++// This unstacks the frame, restoring all callee-save registers
++// as saved by STACK_AND_SAVE_HOST_TO_GO_ABI.
++//
++// R0 is not guaranteed to contain $0 after this macro.
++#define UNSTACK_AND_RESTORE_GO_TO_HOST_ABI(extra)                     \
++	RESTORE_GPR(extra+FIXED_FRAME)                                \
++	RESTORE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
++	RESTORE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
++	ADD 	$(extra+FIXED_FRAME+SAVE_ALL_REG_SIZE), R1            \
++	MOVD	16(R1), R0                                            \
++	MOVD	R0, LR                                                \
++	MOVD	8(R1), R0                                             \
++	MOVW	R0, CR
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
 new file mode 100644
 index 00000000000000..7475ec8a0b21fc
@@ -7450,6 +7661,94 @@ index 00000000000000..50e5261d922c56
 +
 +	ADD $(8*24), RSP
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
+new file mode 100644
+index 00000000000000..6d1938cd8d8bcd
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
+@@ -0,0 +1,82 @@
++// Copyright 2014 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_ppc64x.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++//
++// This is a simplified version that only saves GPR and FPR registers,
++// not vector registers. This keeps the stack frame smaller to avoid
++// exceeding the nosplit stack limit.
++//
++// On PPC64LE ELFv2, callee-save registers are:
++//   R14-R31 (18 GPRs = 144 bytes)
++//   F14-F31 (18 FPRs = 144 bytes)
++//   CR2-CR4 (saved in CR field)
++//
++// Stack layout (must be 16-byte aligned):
++//   32 (FIXED_FRAME) + 24 (args) + 144 (GPR) + 144 (FPR) = 344
++//   Rounded to 352 for 16-byte alignment.
++
++#define FIXED_FRAME 32
++#define SAVE_SIZE    352
++#define GPR_OFFSET   (FIXED_FRAME+24)
++#define FPR_OFFSET   (GPR_OFFSET+SAVE_GPR_SIZE)
++
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	// Save LR and CR in caller's frame per ELFv2 ABI
++	MOVD LR, R0
++	MOVD R0, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	// Allocate our stack frame
++	MOVDU R1, -SAVE_SIZE(R1)
++
++	// Save TOC (R2) in case needed
++	MOVD R2, 24(R1)
++
++	// Save callee-save GPRs
++	SAVE_GPR(GPR_OFFSET)
++
++	// Save callee-save FPRs
++	SAVE_FPR(FPR_OFFSET)
++
++	// Initialize R0 to 0 as expected by Go
++	MOVD $0, R0
++
++	// Load the current g.
++	BL runtime·load_g(SB)
++
++	// Set up arguments for cgocallback
++	MOVD R3, FIXED_FRAME+0(R1) // fn unsafe.Pointer
++	MOVD R4, FIXED_FRAME+8(R1) // a unsafe.Pointer
++
++	// Skip R5 = n uint32
++	MOVD R6, FIXED_FRAME+16(R1)  // ctxt uintptr
++	BL   runtime·cgocallback(SB)
++
++	// Restore callee-save FPRs
++	RESTORE_FPR(FPR_OFFSET)
++
++	// Restore callee-save GPRs
++	RESTORE_GPR(GPR_OFFSET)
++
++	// Restore TOC
++	MOVD 24(R1), R2
++
++	// Deallocate stack frame
++	ADD $SAVE_SIZE, R1
++
++	// Restore LR and CR from caller's frame
++	MOVD 16(R1), R0
++	MOVD R0, LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
 new file mode 100644
 index 00000000000000..acf82c1b5ae501
@@ -8628,6 +8927,239 @@ index 00000000000000..ddd01434d04cda
 +	CALL R9
 +	MOVD R0, ret+48(FP)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
+new file mode 100644
+index 00000000000000..b9b5016a611382
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
+@@ -0,0 +1,227 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2024 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// These trampolines map the C ABI to Go ABI and call into the Go equivalent functions.
++//
++// PPC64LE ELFv2 ABI stack frame layout:
++//   0(R1)  = backchain (pointer to caller's frame)
++//   8(R1)  = CR save area
++//   16(R1) = LR save area
++//   24(R1) = reserved
++//   32(R1) = parameter save area (minimum 64 bytes for 8 args)
++//
++// Two patterns are used depending on call direction:
++//
++// C→Go trampolines: The C caller already provides a 32-byte linkage area.
++//   Save LR/CR into caller's frame at 16(R1)/8(R1) BEFORE allocating,
++//   then use MOVDU to allocate and set backchain atomically.
++//
++// Go→C trampolines: Go callers don't provide ELFv2 linkage area.
++//   Allocate frame first with MOVDU, then save LR/CR into OUR frame.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	// R3, R4 already have the arguments
++	MOVD ·x_cgo_init_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	MOVD ·x_cgo_thread_start_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++// void (*_cgo_setenv)(char**)
++// C arg: R3 = pointer to env
++// This is C→Go: caller is C ABI.
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	MOVD ·x_cgo_setenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	MOVD ·x_cgo_unsetenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	CALL ·x_cgo_bindm(SB)
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
++	// Save LR, CR, and R31 to non-volatile registers (C ABI preserves R14-R31)
++	MOVD LR, R20
++	MOVW CR, R21
++	MOVD R31, R22 // save R31 because load_g clobbers it
++
++	// Load arguments from Go stack
++	MOVD 32(R1), R12 // setg function pointer
++	MOVD 40(R1), R3  // g pointer → first C arg
++
++	// Allocate ELFv2 frame for the C callee (32 bytes minimum)
++	MOVDU R1, -32(R1)
++
++	// Call setg_gcc which stores g to TLS
++	MOVD R12, CTR
++	CALL CTR
++
++	// setg_gcc stored g to TLS but restored old g in R30.
++	// Call load_g to reload g from TLS into R30.
++	// Note: load_g clobbers R31
++	CALL runtime·load_g(SB)
++
++	// Deallocate frame
++	ADD $32, R1
++
++	// Clear R0 before returning to Go code.
++	// Go uses R0 as a constant 0 for things like "std r0,X(r1)" to zero stack locations.
++	// C/assembly functions may leave garbage in R0.
++	XOR R0, R0, R0
++
++	// Restore LR, CR, and R31 from non-volatile registers
++	MOVD R22, R31 // restore R31
++	MOVD R20, LR
++	MOVW R21, CR
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD LR, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -32(R1)
++
++	MOVD ·threadentry_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	ADD $32, R1
++
++	MOVD 16(R1), LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
++	MOVD LR, R20
++	MOVW CR, R21
++
++	// Load arguments from Go stack into C argument registers
++	// Go placed args at 32(R1), 40(R1), etc.
++	MOVD 32(R1), R12 // fn
++	MOVD 40(R1), R3  // a1 → first C arg
++	MOVD 48(R1), R4  // a2 → second C arg
++	MOVD 56(R1), R5  // a3 → third C arg
++	MOVD 64(R1), R6  // a4 → fourth C arg
++	MOVD 72(R1), R7  // a5 → fifth C arg
++
++	MOVDU R1, -32(R1)
++
++	MOVD R12, CTR
++	CALL CTR
++
++	// Store return value
++	// After MOVDU -32, original 80(R1) is now at 80+32=112(R1)
++	MOVD R3, (80+32)(R1)
++
++	// Deallocate frame
++	ADD $32, R1
++
++	// Clear R0 before returning to Go code.
++	// Go uses R0 as a constant 0 register for things like "std r0,X(r1)"
++	// to zero stack locations. C functions may leave garbage in R0.
++	XOR R0, R0, R0
++
++	// Restore LR/CR from non-volatile registers
++	MOVD R20, LR
++	MOVW R21, CR
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 new file mode 100644
 index 00000000000000..50b364773606d1
@@ -9692,6 +10224,113 @@ index 00000000000000..0b25425c004d38
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 +
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
+new file mode 100644
+index 00000000000000..70c51e674587ef
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
+@@ -0,0 +1,101 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	BR purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setegid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	BR purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_seteuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	BR purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setgid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	BR purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setregid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	BR purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setresgid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	BR purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setresuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	BR purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setreuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	BR purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	BR purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
++	MOVD R3, R3
++	MOVD ·x_cgo_purego_setgroups_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	BR   (CTR)
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	BR purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
 new file mode 100644
 index 00000000000000..30dbb92f51fbb8
@@ -10296,7 +10935,7 @@ index 00000000000000..261a7e4cb90d56
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
-index 00000000000000..67ab3cf1532ec9
+index 00000000000000..340bfcc9cd9605
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 @@ -0,0 +1,7 @@
@@ -10304,9 +10943,156 @@ index 00000000000000..67ab3cf1532ec9
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !riscv64
++//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !ppc64le && !riscv64
 +
 +// This file silences errors about body-less functions.
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
+new file mode 100644
+index 00000000000000..a78a1ffca7bda7
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
+@@ -0,0 +1,141 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// R3 already contains the libcArgs pointer from cgocall
++	MOVD  LR, R0
++	MOVD  R0, 16(R1)
++	MOVDU R1, -32(R1)
++	MOVD  R3, 32(R1)
++	CALL  ·syscallNSystemStack(SB)
++	ADD   $32, R1
++	MOVD  16(R1), R0
++	MOVD  R0, LR
++	RET
++
++// PPC64LE ELFv2 ABI: R3-R10 args, R3-R4 return, R14-R31 callee-saved
++// Go ABI: R3-R10, R14-R17 args, R20-R21 scratch, R30=g, R31=scratch
++// We use R24-R28 which are callee-saved in both ABIs.
++// Go frame: 48 locals + 32 linkage = 80 bytes. Locals start at 32(R1).
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $48-8
++	// Save callee-saved registers we'll use
++	MOVD R24, 32(R1)
++	MOVD R25, 40(R1)
++	MOVD R26, 48(R1)
++	MOVD R27, 56(R1)
++	MOVD R28, 64(R1)
++
++	// Load libcArgs pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R11
++
++	// Store values we need across the C call in callee-saved registers
++	MOVD R1, R24                     // R24 = original SP
++	MOVD R11, R25                    // R25 = libcArgs
++	MOVD libcCallInfo_args(R11), R26 // R26 = args
++	MOVD libcCallInfo_fn(R11), R27   // R27 = fn
++	MOVD libcCallInfo_n(R11), R28    // R28 = n
++
++	// Do we have more than 8 arguments?
++	CMP R28, $8
++	BLE _allocsmall
++
++	// >8 args: allocate large frame ((n-8+1) & ~1) * 8 + 96
++	SUB  $8, R28, R3
++	ADD  $1, R3
++	MOVD $~1, R4
++	AND  R4, R3
++	SLD  $3, R3
++	ADD  $96, R3
++	NEG  R3, R4
++	ADD  R4, R24, R1
++	MOVD $~15, R3
++	AND  R3, R1      // 16-byte align
++	MOVD R24, 0(R1)  // back chain
++	MOVD R2, 24(R1)  // save TOC
++
++	// Copy args[8..n-1] to stack at offset 96
++	MOVD $8, R3
++
++_stackargs:
++	SLD  $3, R3, R5
++	MOVD (R26)(R5), R6
++	SUB  $8, R3, R7
++	SLD  $3, R7
++	ADD  $96, R7
++	MOVD R6, (R1)(R7)
++	ADD  $1, R3
++	CMP  R3, R28
++	BLT  _stackargs
++	BR   _8args
++
++_allocsmall:
++	// <=8 args: allocate minimum 96-byte C frame
++	ADD  $-96, R24, R1
++	MOVD $~15, R3
++	AND  R3, R1
++	MOVD R24, 0(R1)    // back chain
++	MOVD R2, 24(R1)    // save TOC
++
++	// Branch to appropriate label based on arg count
++	CMP R28, $0; BEQ _0args
++	CMP R28, $1; BEQ _1args
++	CMP R28, $2; BEQ _2args
++	CMP R28, $3; BEQ _3args
++	CMP R28, $4; BEQ _4args
++	CMP R28, $5; BEQ _5args
++	CMP R28, $6; BEQ _6args
++	CMP R28, $7; BEQ _7args
++
++_8args:
++	MOVD (7*8)(R26), R10
++
++_7args:
++	MOVD (6*8)(R26), R9
++
++_6args:
++	MOVD (5*8)(R26), R8
++
++_5args:
++	MOVD (4*8)(R26), R7
++
++_4args:
++	MOVD (3*8)(R26), R6
++
++_3args:
++	MOVD (2*8)(R26), R5
++
++_2args:
++	MOVD (1*8)(R26), R4
++
++_1args:
++	MOVD (0*8)(R26), R3
++
++_0args:
++	// ELFv2: function address in R12 and CTR
++	MOVD R27, R12
++	MOVD R12, CTR
++	BL   (CTR)
++
++	// Restore TOC and stack pointer
++	MOVD 24(R1), R2
++	MOVD R24, R1
++
++	// Save return values
++	MOVD R3, libcCallInfo_r1(R25)
++	MOVD R4, libcCallInfo_r2(R25)
++
++	// Restore callee-saved registers
++	MOVD 32(R1), R24
++	MOVD 40(R1), R25
++	MOVD 48(R1), R26
++	MOVD 56(R1), R27
++	MOVD 64(R1), R28
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
 new file mode 100644
 index 00000000000000..6ff0ddd2922d8b
@@ -36640,11 +37426,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..451a7764b7742f 100644
+index 48967bc9ee3bd2..e2d4b5953ee26a 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260130164341-07a299e63deb
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index bd5e9f29fa3..247be5b95d0 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -755,7 +755,7 @@ index a4b3a0422f2f41..0140c385e47991 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 036eda13bc8807..33a79409ecc1fe 100644
+index 541733b8e615f0..e45f1286595f4f 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -3163,7 +3163,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..8618577430daa3
+index 00000000000000..d272072340a213
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,17 @@
@@ -3171,7 +3171,7 @@ index 00000000000000..8618577430daa3
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (386 || amd64 || arm || arm64 || riscv64)))
++//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (386 || amd64 || arm || arm64 || ppc64le || riscv64)))
 +
 +package crypto
 +
@@ -3185,10 +3185,10 @@ index 00000000000000..8618577430daa3
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 3f2b2399ec4127..f52b6b1ac71711 100644
+index a0436aa1901b7e..ad2c8fa13fd07a 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -370,7 +370,7 @@ var depsRules = `
+@@ -369,7 +369,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3197,7 +3197,7 @@ index 3f2b2399ec4127..f52b6b1ac71711 100644
  	< internal/buildcfg;
  
  	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -565,6 +565,10 @@ var depsRules = `
+@@ -564,6 +564,10 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
@@ -3208,7 +3208,7 @@ index 3f2b2399ec4127..f52b6b1ac71711 100644
  	FIPS, internal/godebug, embed
  	< crypto/internal/fips140only
  	< crypto
-@@ -585,6 +589,13 @@ var depsRules = `
+@@ -584,6 +588,13 @@ var depsRules = `
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3222,7 +3222,7 @@ index 3f2b2399ec4127..f52b6b1ac71711 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -620,8 +631,15 @@ var depsRules = `
+@@ -619,8 +630,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3241,7 +3241,7 @@ index 3f2b2399ec4127..f52b6b1ac71711 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 0c25f3cce97202..0ec29033d9de89 100644
+index 87cd1f4de3246a..aa767df31dd84d 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -3260,7 +3260,7 @@ index 0c25f3cce97202..0ec29033d9de89 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -194,6 +197,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -193,6 +196,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -3321,7 +3321,7 @@ index 0c25f3cce97202..0ec29033d9de89 100644
  	return flags, nil
  }
  
-@@ -203,6 +260,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -202,6 +259,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  

From 444222aafee891c1ef813ed09ec2b39f1ba0c6f4 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 3 Feb 2026 14:28:08 +0100
Subject: [PATCH 704/887] add agentic workflow for checking patches consistency

---
 .gitattributes                                |    2 +
 .github/aw/actions-lock.json                  |   14 +
 .../patch-consistency-review.lock.yml         | 1036 +++++++++++++++++
 .github/workflows/patch-consistency-review.md |   81 ++
 4 files changed, 1133 insertions(+)
 create mode 100644 .github/aw/actions-lock.json
 create mode 100644 .github/workflows/patch-consistency-review.lock.yml
 create mode 100644 .github/workflows/patch-consistency-review.md

diff --git a/.gitattributes b/.gitattributes
index d8984ea762b..6ca82ccaaf1 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -2,3 +2,5 @@
 # "git diff header lacks filename information when removing 1 leading pathname component".
 # To fix this, always check out patch files as LF.
 *.patch -text
+
+.github/workflows/*.lock.yml linguist-generated=true merge=ours
\ No newline at end of file
diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
new file mode 100644
index 00000000000..604c88d8703
--- /dev/null
+++ b/.github/aw/actions-lock.json
@@ -0,0 +1,14 @@
+{
+  "entries": {
+    "actions/github-script@v8": {
+      "repo": "actions/github-script",
+      "version": "v8",
+      "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
+    },
+    "github/gh-aw/actions/setup@v0.40.0": {
+      "repo": "github/gh-aw/actions/setup",
+      "version": "v0.40.0",
+      "sha": "76d37d925abd44fee97379206f105b74b91a285b"
+    }
+  }
+}
diff --git a/.github/workflows/patch-consistency-review.lock.yml b/.github/workflows/patch-consistency-review.lock.yml
new file mode 100644
index 00000000000..29c52f2db18
--- /dev/null
+++ b/.github/workflows/patch-consistency-review.lock.yml
@@ -0,0 +1,1036 @@
+#
+#    ___                   _   _      
+#   / _ \                 | | (_)     
+#  | |_| | __ _  ___ _ __ | |_ _  ___ 
+#  |  _  |/ _` |/ _ \ '_ \| __| |/ __|
+#  | | | | (_| |  __/ | | | |_| | (__ 
+#  \_| |_/\__, |\___|_| |_|\__|_|\___|
+#          __/ |
+#  _    _ |___/ 
+# | |  | |                / _| |
+# | |  | | ___ _ __ _  __| |_| | _____      ____
+# | |/\| |/ _ \ '__| |/ /|  _| |/ _ \ \ /\ / / ___|
+# \  /\  / (_) | | | | ( | | | | (_) \ V  V /\__ \
+#  \/  \/ \___/|_| |_|\_\|_| |_|\___/ \_/\_/ |___/
+#
+# This file was automatically generated by gh-aw (v0.40.0). DO NOT EDIT.
+#
+# To update this file, edit the corresponding .md file and run:
+#   gh aw compile
+# For more information: https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflows.md
+#
+# Reviews PRs to ensure Git patches are updated consistently
+#
+# frontmatter-hash: fb80451ae5cb5cc232bda748a404401d54289d26219daea465467101dcf5302c
+
+name: "Patch Consistency Review Agent"
+"on":
+  pull_request:
+    paths:
+    - patches/*.patch
+    types:
+    - opened
+    - synchronize
+    - reopened
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: PR number to review
+        required: true
+        type: string
+
+permissions: {}
+
+concurrency:
+  group: "gh-aw-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}"
+  cancel-in-progress: true
+
+run-name: "Patch Consistency Review Agent"
+
+jobs:
+  activation:
+    if: (github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id)
+    runs-on: ubuntu-slim
+    permissions:
+      contents: read
+    outputs:
+      comment_id: ""
+      comment_repo: ""
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Check workflow file timestamps
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_WORKFLOW_FILE: "patch-consistency-review.lock.yml"
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/check_workflow_timestamp_api.cjs');
+            await main();
+
+  agent:
+    needs: activation
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: read
+      pull-requests: read
+    env:
+      DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
+      GH_AW_ASSETS_ALLOWED_EXTS: ""
+      GH_AW_ASSETS_BRANCH: ""
+      GH_AW_ASSETS_MAX_SIZE_KB: 0
+      GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs
+      GH_AW_SAFE_OUTPUTS: /opt/gh-aw/safeoutputs/outputs.jsonl
+      GH_AW_SAFE_OUTPUTS_CONFIG_PATH: /opt/gh-aw/safeoutputs/config.json
+      GH_AW_SAFE_OUTPUTS_TOOLS_PATH: /opt/gh-aw/safeoutputs/tools.json
+    outputs:
+      has_patch: ${{ steps.collect_output.outputs.has_patch }}
+      model: ${{ steps.generate_aw_info.outputs.model }}
+      output: ${{ steps.collect_output.outputs.output }}
+      output_types: ${{ steps.collect_output.outputs.output_types }}
+      secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Checkout repository
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        with:
+          persist-credentials: false
+      - name: Create gh-aw temp directory
+        run: bash /opt/gh-aw/actions/create_gh_aw_tmp_dir.sh
+      - name: Configure Git credentials
+        env:
+          REPO_NAME: ${{ github.repository }}
+          SERVER_URL: ${{ github.server_url }}
+        run: |
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+          # Re-authenticate git with GitHub token
+          SERVER_URL_STRIPPED="${SERVER_URL#https://}"
+          git remote set-url origin "https://x-access-token:${{ github.token }}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git"
+          echo "Git configured with standard GitHub Actions identity"
+      - name: Checkout PR branch
+        if: |
+          github.event.pull_request
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/checkout_pr_branch.cjs');
+            await main();
+      - name: Validate COPILOT_GITHUB_TOKEN secret
+        id: validate-secret
+        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
+        env:
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
+      - name: Install GitHub Copilot CLI
+        run: /opt/gh-aw/actions/install_copilot_cli.sh 0.0.400
+      - name: Install awf binary
+        run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.13.1
+      - name: Determine automatic lockdown mode for GitHub MCP server
+        id: determine-automatic-lockdown
+        env:
+          TOKEN_CHECK: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
+        if: env.TOKEN_CHECK != ''
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        with:
+          script: |
+            const determineAutomaticLockdown = require('/opt/gh-aw/actions/determine_automatic_lockdown.cjs');
+            await determineAutomaticLockdown(github, context, core);
+      - name: Download container images
+        run: bash /opt/gh-aw/actions/download_docker_images.sh ghcr.io/github/gh-aw-mcpg:v0.0.94 ghcr.io/github/github-mcp-server:v0.30.2 node:lts-alpine
+      - name: Write Safe Outputs Config
+        run: |
+          mkdir -p /opt/gh-aw/safeoutputs
+          mkdir -p /tmp/gh-aw/safeoutputs
+          mkdir -p /tmp/gh-aw/mcp-logs/safeoutputs
+          cat > /opt/gh-aw/safeoutputs/config.json << 'EOF'
+          {"add_comment":{"max":1},"create_pull_request_review_comment":{"max":10},"missing_data":{},"missing_tool":{},"noop":{"max":1}}
+          EOF
+          cat > /opt/gh-aw/safeoutputs/tools.json << 'EOF'
+          [
+            {
+              "description": "Add a comment to an existing GitHub issue, pull request, or discussion. Use this to provide feedback, answer questions, or add information to an existing conversation. For creating new items, use create_issue, create_discussion, or create_pull_request instead. CONSTRAINTS: Maximum 1 comment(s) can be added.",
+              "inputSchema": {
+                "additionalProperties": false,
+                "properties": {
+                  "body": {
+                    "description": "The comment text in Markdown format. This is the 'body' field - do not use 'comment_body' or other variations. Provide helpful, relevant information that adds value to the conversation.",
+                    "type": "string"
+                  },
+                  "item_number": {
+                    "description": "The issue, pull request, or discussion number to comment on. This is the numeric ID from the GitHub URL (e.g., 123 in github.com/owner/repo/issues/123). If omitted, the tool will attempt to resolve the target from the current workflow context (triggering issue, PR, or discussion).",
+                    "type": "number"
+                  }
+                },
+                "required": [
+                  "body"
+                ],
+                "type": "object"
+              },
+              "name": "add_comment"
+            },
+            {
+              "description": "Create a review comment on a specific line of code in a pull request. Use this for inline code review feedback, suggestions, or questions about specific code changes. For general PR comments not tied to specific lines, use add_comment instead. CONSTRAINTS: Maximum 10 review comment(s) can be created. Comments will be on the RIGHT side of the diff.",
+              "inputSchema": {
+                "additionalProperties": false,
+                "properties": {
+                  "body": {
+                    "description": "Review comment content in Markdown. Provide specific, actionable feedback about the code at this location.",
+                    "type": "string"
+                  },
+                  "line": {
+                    "description": "Line number for the comment. For single-line comments, this is the target line. For multi-line comments, this is the ending line.",
+                    "type": [
+                      "number",
+                      "string"
+                    ]
+                  },
+                  "path": {
+                    "description": "File path relative to the repository root (e.g., 'src/auth/login.js'). Must be a file that was changed in the PR.",
+                    "type": "string"
+                  },
+                  "side": {
+                    "description": "Side of the diff to comment on: RIGHT for the new version (additions), LEFT for the old version (deletions). Defaults to RIGHT.",
+                    "enum": [
+                      "LEFT",
+                      "RIGHT"
+                    ],
+                    "type": "string"
+                  },
+                  "start_line": {
+                    "description": "Starting line number for multi-line comments. When set, the comment spans from start_line to line. Omit for single-line comments.",
+                    "type": [
+                      "number",
+                      "string"
+                    ]
+                  }
+                },
+                "required": [
+                  "path",
+                  "line",
+                  "body"
+                ],
+                "type": "object"
+              },
+              "name": "create_pull_request_review_comment"
+            },
+            {
+              "description": "Report that a tool or capability needed to complete the task is not available, or share any information you deem important about missing functionality or limitations. Use this when you cannot accomplish what was requested because the required functionality is missing or access is restricted.",
+              "inputSchema": {
+                "additionalProperties": false,
+                "properties": {
+                  "alternatives": {
+                    "description": "Any workarounds, manual steps, or alternative approaches the user could take (max 256 characters).",
+                    "type": "string"
+                  },
+                  "reason": {
+                    "description": "Explanation of why this tool is needed or what information you want to share about the limitation (max 256 characters).",
+                    "type": "string"
+                  },
+                  "tool": {
+                    "description": "Optional: Name or description of the missing tool or capability (max 128 characters). Be specific about what functionality is needed.",
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "reason"
+                ],
+                "type": "object"
+              },
+              "name": "missing_tool"
+            },
+            {
+              "description": "Log a transparency message when no significant actions are needed. Use this to confirm workflow completion and provide visibility when analysis is complete but no changes or outputs are required (e.g., 'No issues found', 'All checks passed'). This ensures the workflow produces human-visible output even when no other actions are taken.",
+              "inputSchema": {
+                "additionalProperties": false,
+                "properties": {
+                  "message": {
+                    "description": "Status or completion message to log. Should explain what was analyzed and the outcome (e.g., 'Code review complete - no issues found', 'Analysis complete - all tests passing').",
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "message"
+                ],
+                "type": "object"
+              },
+              "name": "noop"
+            },
+            {
+              "description": "Report that data or information needed to complete the task is not available. Use this when you cannot accomplish what was requested because required data, context, or information is missing.",
+              "inputSchema": {
+                "additionalProperties": false,
+                "properties": {
+                  "alternatives": {
+                    "description": "Any workarounds, manual steps, or alternative approaches the user could take (max 256 characters).",
+                    "type": "string"
+                  },
+                  "context": {
+                    "description": "Additional context about the missing data or where it should come from (max 256 characters).",
+                    "type": "string"
+                  },
+                  "data_type": {
+                    "description": "Type or description of the missing data or information (max 128 characters). Be specific about what data is needed.",
+                    "type": "string"
+                  },
+                  "reason": {
+                    "description": "Explanation of why this data is needed to complete the task (max 256 characters).",
+                    "type": "string"
+                  }
+                },
+                "required": [],
+                "type": "object"
+              },
+              "name": "missing_data"
+            }
+          ]
+          EOF
+          cat > /opt/gh-aw/safeoutputs/validation.json << 'EOF'
+          {
+            "add_comment": {
+              "defaultMax": 1,
+              "fields": {
+                "body": {
+                  "required": true,
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 65000
+                },
+                "item_number": {
+                  "issueOrPRNumber": true
+                }
+              }
+            },
+            "create_pull_request_review_comment": {
+              "defaultMax": 1,
+              "fields": {
+                "body": {
+                  "required": true,
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 65000
+                },
+                "line": {
+                  "required": true,
+                  "positiveInteger": true
+                },
+                "path": {
+                  "required": true,
+                  "type": "string"
+                },
+                "side": {
+                  "type": "string",
+                  "enum": [
+                    "LEFT",
+                    "RIGHT"
+                  ]
+                },
+                "start_line": {
+                  "optionalPositiveInteger": true
+                }
+              },
+              "customValidation": "startLineLessOrEqualLine"
+            },
+            "missing_tool": {
+              "defaultMax": 20,
+              "fields": {
+                "alternatives": {
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 512
+                },
+                "reason": {
+                  "required": true,
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 256
+                },
+                "tool": {
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 128
+                }
+              }
+            },
+            "noop": {
+              "defaultMax": 1,
+              "fields": {
+                "message": {
+                  "required": true,
+                  "type": "string",
+                  "sanitize": true,
+                  "maxLength": 65000
+                }
+              }
+            }
+          }
+          EOF
+      - name: Generate Safe Outputs MCP Server Config
+        id: safe-outputs-config
+        run: |
+          # Generate a secure random API key (360 bits of entropy, 40+ chars)
+          API_KEY=""
+          API_KEY=$(openssl rand -base64 45 | tr -d '/+=')
+          PORT=3001
+          
+          # Register API key as secret to mask it from logs
+          echo "::add-mask::${API_KEY}"
+          
+          # Set outputs for next steps
+          {
+            echo "safe_outputs_api_key=${API_KEY}"
+            echo "safe_outputs_port=${PORT}"
+          } >> "$GITHUB_OUTPUT"
+          
+          echo "Safe Outputs MCP server will run on port ${PORT}"
+          
+      - name: Start Safe Outputs MCP HTTP Server
+        id: safe-outputs-start
+        env:
+          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-config.outputs.safe_outputs_port }}
+          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-config.outputs.safe_outputs_api_key }}
+          GH_AW_SAFE_OUTPUTS_TOOLS_PATH: /opt/gh-aw/safeoutputs/tools.json
+          GH_AW_SAFE_OUTPUTS_CONFIG_PATH: /opt/gh-aw/safeoutputs/config.json
+          GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs
+        run: |
+          # Environment variables are set above to prevent template injection
+          export GH_AW_SAFE_OUTPUTS_PORT
+          export GH_AW_SAFE_OUTPUTS_API_KEY
+          export GH_AW_SAFE_OUTPUTS_TOOLS_PATH
+          export GH_AW_SAFE_OUTPUTS_CONFIG_PATH
+          export GH_AW_MCP_LOG_DIR
+          
+          bash /opt/gh-aw/actions/start_safe_outputs_server.sh
+          
+      - name: Start MCP gateway
+        id: start-mcp-gateway
+        env:
+          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
+          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-start.outputs.api_key }}
+          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-start.outputs.port }}
+          GITHUB_MCP_LOCKDOWN: ${{ steps.determine-automatic-lockdown.outputs.lockdown == 'true' && '1' || '0' }}
+          GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+        run: |
+          set -eo pipefail
+          mkdir -p /tmp/gh-aw/mcp-config
+          
+          # Export gateway environment variables for MCP config and gateway script
+          export MCP_GATEWAY_PORT="80"
+          export MCP_GATEWAY_DOMAIN="host.docker.internal"
+          MCP_GATEWAY_API_KEY=""
+          MCP_GATEWAY_API_KEY=$(openssl rand -base64 45 | tr -d '/+=')
+          export MCP_GATEWAY_API_KEY
+          
+          # Register API key as secret to mask it from logs
+          echo "::add-mask::${MCP_GATEWAY_API_KEY}"
+          export GH_AW_ENGINE="copilot"
+          export MCP_GATEWAY_DOCKER_COMMAND='docker run -i --rm --network host -v /var/run/docker.sock:/var/run/docker.sock -e MCP_GATEWAY_PORT -e MCP_GATEWAY_DOMAIN -e MCP_GATEWAY_API_KEY -e DEBUG="*" -e MCP_GATEWAY_LOG_DIR -e GH_AW_MCP_LOG_DIR -e GH_AW_SAFE_OUTPUTS -e GH_AW_SAFE_OUTPUTS_CONFIG_PATH -e GH_AW_SAFE_OUTPUTS_TOOLS_PATH -e GH_AW_ASSETS_BRANCH -e GH_AW_ASSETS_MAX_SIZE_KB -e GH_AW_ASSETS_ALLOWED_EXTS -e DEFAULT_BRANCH -e GITHUB_MCP_SERVER_TOKEN -e GITHUB_MCP_LOCKDOWN -e GITHUB_REPOSITORY -e GITHUB_SERVER_URL -e GITHUB_SHA -e GITHUB_WORKSPACE -e GITHUB_TOKEN -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RUN_ATTEMPT -e GITHUB_JOB -e GITHUB_ACTION -e GITHUB_EVENT_NAME -e GITHUB_EVENT_PATH -e GITHUB_ACTOR -e GITHUB_ACTOR_ID -e GITHUB_TRIGGERING_ACTOR -e GITHUB_WORKFLOW -e GITHUB_WORKFLOW_REF -e GITHUB_WORKFLOW_SHA -e GITHUB_REF -e GITHUB_REF_NAME -e GITHUB_REF_TYPE -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e GH_AW_SAFE_OUTPUTS_PORT -e GH_AW_SAFE_OUTPUTS_API_KEY -v /opt:/opt:ro -v /tmp:/tmp:rw -v '"${GITHUB_WORKSPACE}"':'"${GITHUB_WORKSPACE}"':rw ghcr.io/github/gh-aw-mcpg:v0.0.94'
+          
+          mkdir -p /home/runner/.copilot
+          cat << MCPCONFIG_EOF | bash /opt/gh-aw/actions/start_mcp_gateway.sh
+          {
+            "mcpServers": {
+              "github": {
+                "type": "stdio",
+                "container": "ghcr.io/github/github-mcp-server:v0.30.2",
+                "env": {
+                  "GITHUB_LOCKDOWN_MODE": "$GITHUB_MCP_LOCKDOWN",
+                  "GITHUB_PERSONAL_ACCESS_TOKEN": "\${GITHUB_MCP_SERVER_TOKEN}",
+                  "GITHUB_READ_ONLY": "1",
+                  "GITHUB_TOOLSETS": "context,repos,issues,pull_requests"
+                }
+              },
+              "safeoutputs": {
+                "type": "http",
+                "url": "http://host.docker.internal:$GH_AW_SAFE_OUTPUTS_PORT",
+                "headers": {
+                  "Authorization": "\${GH_AW_SAFE_OUTPUTS_API_KEY}"
+                }
+              }
+            },
+            "gateway": {
+              "port": $MCP_GATEWAY_PORT,
+              "domain": "${MCP_GATEWAY_DOMAIN}",
+              "apiKey": "${MCP_GATEWAY_API_KEY}"
+            }
+          }
+          MCPCONFIG_EOF
+      - name: Generate agentic run info
+        id: generate_aw_info
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const fs = require('fs');
+            
+            const awInfo = {
+              engine_id: "copilot",
+              engine_name: "GitHub Copilot CLI",
+              model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
+              version: "",
+              agent_version: "0.0.400",
+              cli_version: "v0.40.0",
+              workflow_name: "Patch Consistency Review Agent",
+              experimental: false,
+              supports_tools_allowlist: true,
+              supports_http_transport: true,
+              run_id: context.runId,
+              run_number: context.runNumber,
+              run_attempt: process.env.GITHUB_RUN_ATTEMPT,
+              repository: context.repo.owner + '/' + context.repo.repo,
+              ref: context.ref,
+              sha: context.sha,
+              actor: context.actor,
+              event_name: context.eventName,
+              staged: false,
+              allowed_domains: ["defaults"],
+              firewall_enabled: true,
+              awf_version: "v0.13.1",
+              awmg_version: "v0.0.94",
+              steps: {
+                firewall: "squid"
+              },
+              created_at: new Date().toISOString()
+            };
+            
+            // Write to /tmp/gh-aw directory to avoid inclusion in PR
+            const tmpPath = '/tmp/gh-aw/aw_info.json';
+            fs.writeFileSync(tmpPath, JSON.stringify(awInfo, null, 2));
+            console.log('Generated aw_info.json at:', tmpPath);
+            console.log(JSON.stringify(awInfo, null, 2));
+            
+            // Set model as output for reuse in other steps/jobs
+            core.setOutput('model', awInfo.model);
+      - name: Generate workflow overview
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const { generateWorkflowOverview } = require('/opt/gh-aw/actions/generate_workflow_overview.cjs');
+            await generateWorkflowOverview(core);
+      - name: Create prompt with built-in context
+        env:
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
+          GH_AW_GITHUB_ACTOR: ${{ github.actor }}
+          GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}
+          GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}
+          GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
+          GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
+          GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}
+          GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}
+        run: |
+          bash /opt/gh-aw/actions/create_prompt_first.sh
+          cat << 'PROMPT_EOF' > "$GH_AW_PROMPT"
+          <system>
+          PROMPT_EOF
+          cat "/opt/gh-aw/prompts/temp_folder_prompt.md" >> "$GH_AW_PROMPT"
+          cat "/opt/gh-aw/prompts/markdown.md" >> "$GH_AW_PROMPT"
+          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
+          <safe-outputs>
+          <description>GitHub API Access Instructions</description>
+          <important>
+          The gh CLI is NOT authenticated. Do NOT use gh commands for GitHub operations.
+          </important>
+          <instructions>
+          To create or modify GitHub resources (issues, discussions, pull requests, etc.), you MUST call the appropriate safe output tool. Simply writing content will NOT work - the workflow requires actual tool calls.
+          
+          Discover available tools from the safeoutputs MCP server.
+          
+          **Critical**: Tool calls write structured data that downstream jobs process. Without tool calls, follow-up actions will be skipped.
+          
+          **Note**: If you made no other safe output tool calls during this workflow execution, call the "noop" tool to provide a status message indicating completion or that no actions were needed.
+          </instructions>
+          </safe-outputs>
+          <github-context>
+          The following GitHub context information is available for this workflow:
+          {{#if __GH_AW_GITHUB_ACTOR__ }}
+          - **actor**: __GH_AW_GITHUB_ACTOR__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_REPOSITORY__ }}
+          - **repository**: __GH_AW_GITHUB_REPOSITORY__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_WORKSPACE__ }}
+          - **workspace**: __GH_AW_GITHUB_WORKSPACE__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_EVENT_ISSUE_NUMBER__ }}
+          - **issue-number**: #__GH_AW_GITHUB_EVENT_ISSUE_NUMBER__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__ }}
+          - **discussion-number**: #__GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__ }}
+          - **pull-request-number**: #__GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_EVENT_COMMENT_ID__ }}
+          - **comment-id**: __GH_AW_GITHUB_EVENT_COMMENT_ID__
+          {{/if}}
+          {{#if __GH_AW_GITHUB_RUN_ID__ }}
+          - **workflow-run-id**: __GH_AW_GITHUB_RUN_ID__
+          {{/if}}
+          </github-context>
+          
+          PROMPT_EOF
+          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
+          </system>
+          PROMPT_EOF
+          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
+          {{#runtime-import workflows\patch-consistency-review.md}}
+          PROMPT_EOF
+      - name: Substitute placeholders
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+          GH_AW_GITHUB_ACTOR: ${{ github.actor }}
+          GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}
+          GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}
+          GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
+          GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
+          GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
+          GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}
+          GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}
+        with:
+          script: |
+            const substitutePlaceholders = require('/opt/gh-aw/actions/substitute_placeholders.cjs');
+            
+            // Call the substitution function
+            return await substitutePlaceholders({
+              file: process.env.GH_AW_PROMPT,
+              substitutions: {
+                GH_AW_GITHUB_ACTOR: process.env.GH_AW_GITHUB_ACTOR,
+                GH_AW_GITHUB_EVENT_COMMENT_ID: process.env.GH_AW_GITHUB_EVENT_COMMENT_ID,
+                GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: process.env.GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER,
+                GH_AW_GITHUB_EVENT_ISSUE_NUMBER: process.env.GH_AW_GITHUB_EVENT_ISSUE_NUMBER,
+                GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: process.env.GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER,
+                GH_AW_GITHUB_REPOSITORY: process.env.GH_AW_GITHUB_REPOSITORY,
+                GH_AW_GITHUB_RUN_ID: process.env.GH_AW_GITHUB_RUN_ID,
+                GH_AW_GITHUB_WORKSPACE: process.env.GH_AW_GITHUB_WORKSPACE
+              }
+            });
+      - name: Interpolate variables and render templates
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/interpolate_prompt.cjs');
+            await main();
+      - name: Validate prompt placeholders
+        env:
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+        run: bash /opt/gh-aw/actions/validate_prompt_placeholders.sh
+      - name: Print prompt
+        env:
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+        run: bash /opt/gh-aw/actions/print_prompt_summary.sh
+      - name: Execute GitHub Copilot CLI
+        id: agentic_execution
+        # Copilot CLI tool arguments (sorted):
+        timeout-minutes: 15
+        run: |
+          set -o pipefail
+          GH_AW_TOOL_BINS=""; command -v go >/dev/null 2>&1 && GH_AW_TOOL_BINS="$(go env GOROOT)/bin:$GH_AW_TOOL_BINS"; [ -n "$JAVA_HOME" ] && GH_AW_TOOL_BINS="$JAVA_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$CARGO_HOME" ] && GH_AW_TOOL_BINS="$CARGO_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$GEM_HOME" ] && GH_AW_TOOL_BINS="$GEM_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$CONDA" ] && GH_AW_TOOL_BINS="$CONDA/bin:$GH_AW_TOOL_BINS"; [ -n "$PIPX_BIN_DIR" ] && GH_AW_TOOL_BINS="$PIPX_BIN_DIR:$GH_AW_TOOL_BINS"; [ -n "$SWIFT_PATH" ] && GH_AW_TOOL_BINS="$SWIFT_PATH:$GH_AW_TOOL_BINS"; [ -n "$DOTNET_ROOT" ] && GH_AW_TOOL_BINS="$DOTNET_ROOT:$GH_AW_TOOL_BINS"; export GH_AW_TOOL_BINS
+          mkdir -p "$HOME/.cache"
+          sudo -E awf --env-all --env "ANDROID_HOME=${ANDROID_HOME}" --env "ANDROID_NDK=${ANDROID_NDK}" --env "ANDROID_NDK_HOME=${ANDROID_NDK_HOME}" --env "ANDROID_NDK_LATEST_HOME=${ANDROID_NDK_LATEST_HOME}" --env "ANDROID_NDK_ROOT=${ANDROID_NDK_ROOT}" --env "ANDROID_SDK_ROOT=${ANDROID_SDK_ROOT}" --env "AZURE_EXTENSION_DIR=${AZURE_EXTENSION_DIR}" --env "CARGO_HOME=${CARGO_HOME}" --env "CHROMEWEBDRIVER=${CHROMEWEBDRIVER}" --env "CONDA=${CONDA}" --env "DOTNET_ROOT=${DOTNET_ROOT}" --env "EDGEWEBDRIVER=${EDGEWEBDRIVER}" --env "GECKOWEBDRIVER=${GECKOWEBDRIVER}" --env "GEM_HOME=${GEM_HOME}" --env "GEM_PATH=${GEM_PATH}" --env "GOPATH=${GOPATH}" --env "GOROOT=${GOROOT}" --env "HOMEBREW_CELLAR=${HOMEBREW_CELLAR}" --env "HOMEBREW_PREFIX=${HOMEBREW_PREFIX}" --env "HOMEBREW_REPOSITORY=${HOMEBREW_REPOSITORY}" --env "JAVA_HOME=${JAVA_HOME}" --env "JAVA_HOME_11_X64=${JAVA_HOME_11_X64}" --env "JAVA_HOME_17_X64=${JAVA_HOME_17_X64}" --env "JAVA_HOME_21_X64=${JAVA_HOME_21_X64}" --env "JAVA_HOME_25_X64=${JAVA_HOME_25_X64}" --env "JAVA_HOME_8_X64=${JAVA_HOME_8_X64}" --env "NVM_DIR=${NVM_DIR}" --env "PIPX_BIN_DIR=${PIPX_BIN_DIR}" --env "PIPX_HOME=${PIPX_HOME}" --env "RUSTUP_HOME=${RUSTUP_HOME}" --env "SELENIUM_JAR_PATH=${SELENIUM_JAR_PATH}" --env "SWIFT_PATH=${SWIFT_PATH}" --env "VCPKG_INSTALLATION_ROOT=${VCPKG_INSTALLATION_ROOT}" --env "GH_AW_TOOL_BINS=$GH_AW_TOOL_BINS" --container-workdir "${GITHUB_WORKSPACE}" --mount /tmp:/tmp:rw --mount "${HOME}/.cache:${HOME}/.cache:rw" --mount "${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}:rw" --mount /usr/bin/cat:/usr/bin/cat:ro --mount /usr/bin/curl:/usr/bin/curl:ro --mount /usr/bin/date:/usr/bin/date:ro --mount /usr/bin/find:/usr/bin/find:ro --mount /usr/bin/gh:/usr/bin/gh:ro --mount /usr/bin/grep:/usr/bin/grep:ro --mount /usr/bin/jq:/usr/bin/jq:ro --mount /usr/bin/yq:/usr/bin/yq:ro --mount /usr/bin/cp:/usr/bin/cp:ro --mount /usr/bin/cut:/usr/bin/cut:ro --mount /usr/bin/diff:/usr/bin/diff:ro --mount /usr/bin/head:/usr/bin/head:ro --mount /usr/bin/ls:/usr/bin/ls:ro --mount /usr/bin/mkdir:/usr/bin/mkdir:ro --mount /usr/bin/rm:/usr/bin/rm:ro --mount /usr/bin/sed:/usr/bin/sed:ro --mount /usr/bin/sort:/usr/bin/sort:ro --mount /usr/bin/tail:/usr/bin/tail:ro --mount /usr/bin/wc:/usr/bin/wc:ro --mount /usr/bin/which:/usr/bin/which:ro --mount /usr/local/bin/copilot:/usr/local/bin/copilot:ro --mount /home/runner/.copilot:/home/runner/.copilot:rw --mount /opt/hostedtoolcache:/opt/hostedtoolcache:ro --mount /opt/gh-aw:/opt/gh-aw:ro --allow-domains api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.snapcraft.io,archive.ubuntu.com,azure.archive.ubuntu.com,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,github.com,host.docker.internal,json-schema.org,json.schemastore.org,keyserver.ubuntu.com,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,ppa.launchpad.net,raw.githubusercontent.com,registry.npmjs.org,s.symcb.com,s.symcd.com,security.ubuntu.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com --log-level info --proxy-logs-dir /tmp/gh-aw/sandbox/firewall/logs --enable-host-access --image-tag 0.13.1 --agent-image act \
+            -- 'source /opt/gh-aw/actions/sanitize_path.sh "$GH_AW_TOOL_BINS$(find /opt/hostedtoolcache -maxdepth 4 -type d -name bin 2>/dev/null | tr '\''\n'\'' '\'':'\'')$PATH" && /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --add-dir "${GITHUB_WORKSPACE}" --disable-builtin-mcps --allow-all-tools --allow-all-paths --share /tmp/gh-aw/sandbox/agent/logs/conversation.md --prompt "$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"${GH_AW_MODEL_AGENT_COPILOT:+ --model "$GH_AW_MODEL_AGENT_COPILOT"}' \
+            2>&1 | tee /tmp/gh-aw/agent-stdio.log
+        env:
+          COPILOT_AGENT_RUNNER_TYPE: STANDALONE
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
+          GH_AW_MCP_CONFIG: /home/runner/.copilot/mcp-config.json
+          GH_AW_MODEL_AGENT_COPILOT: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || '' }}
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
+          GITHUB_HEAD_REF: ${{ github.head_ref }}
+          GITHUB_REF_NAME: ${{ github.ref_name }}
+          GITHUB_STEP_SUMMARY: ${{ env.GITHUB_STEP_SUMMARY }}
+          GITHUB_WORKSPACE: ${{ github.workspace }}
+          XDG_CONFIG_HOME: /home/runner
+      - name: Copy Copilot session state files to logs
+        if: always()
+        continue-on-error: true
+        run: |
+          # Copy Copilot session state files to logs folder for artifact collection
+          # This ensures they are in /tmp/gh-aw/ where secret redaction can scan them
+          SESSION_STATE_DIR="$HOME/.copilot/session-state"
+          LOGS_DIR="/tmp/gh-aw/sandbox/agent/logs"
+          
+          if [ -d "$SESSION_STATE_DIR" ]; then
+            echo "Copying Copilot session state files from $SESSION_STATE_DIR to $LOGS_DIR"
+            mkdir -p "$LOGS_DIR"
+            cp -v "$SESSION_STATE_DIR"/*.jsonl "$LOGS_DIR/" 2>/dev/null || true
+            echo "Session state files copied successfully"
+          else
+            echo "No session-state directory found at $SESSION_STATE_DIR"
+          fi
+      - name: Stop MCP gateway
+        if: always()
+        continue-on-error: true
+        env:
+          MCP_GATEWAY_PORT: ${{ steps.start-mcp-gateway.outputs.gateway-port }}
+          MCP_GATEWAY_API_KEY: ${{ steps.start-mcp-gateway.outputs.gateway-api-key }}
+          GATEWAY_PID: ${{ steps.start-mcp-gateway.outputs.gateway-pid }}
+        run: |
+          bash /opt/gh-aw/actions/stop_mcp_gateway.sh "$GATEWAY_PID"
+      - name: Redact secrets in logs
+        if: always()
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/redact_secrets.cjs');
+            await main();
+        env:
+          GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GITHUB_TOKEN'
+          SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
+          SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
+          SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
+          SECRET_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload Safe Outputs
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-output
+          path: ${{ env.GH_AW_SAFE_OUTPUTS }}
+          if-no-files-found: warn
+      - name: Ingest agent output
+        id: collect_output
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
+          GH_AW_ALLOWED_DOMAINS: "api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.snapcraft.io,archive.ubuntu.com,azure.archive.ubuntu.com,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,github.com,host.docker.internal,json-schema.org,json.schemastore.org,keyserver.ubuntu.com,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,ppa.launchpad.net,raw.githubusercontent.com,registry.npmjs.org,s.symcb.com,s.symcd.com,security.ubuntu.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com"
+          GITHUB_SERVER_URL: ${{ github.server_url }}
+          GITHUB_API_URL: ${{ github.api_url }}
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/collect_ndjson_output.cjs');
+            await main();
+      - name: Upload sanitized agent output
+        if: always() && env.GH_AW_AGENT_OUTPUT
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: agent-output
+          path: ${{ env.GH_AW_AGENT_OUTPUT }}
+          if-no-files-found: warn
+      - name: Upload engine output files
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: agent_outputs
+          path: |
+            /tmp/gh-aw/sandbox/agent/logs/
+            /tmp/gh-aw/redacted-urls.log
+          if-no-files-found: ignore
+      - name: Parse agent logs for step summary
+        if: always()
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: /tmp/gh-aw/sandbox/agent/logs/
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/parse_copilot_log.cjs');
+            await main();
+      - name: Parse MCP gateway logs for step summary
+        if: always()
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/parse_mcp_gateway_log.cjs');
+            await main();
+      - name: Print firewall logs
+        if: always()
+        continue-on-error: true
+        env:
+          AWF_LOGS_DIR: /tmp/gh-aw/sandbox/firewall/logs
+        run: |
+          # Fix permissions on firewall logs so they can be uploaded as artifacts
+          # AWF runs with sudo, creating files owned by root
+          sudo chmod -R a+r /tmp/gh-aw/sandbox/firewall/logs 2>/dev/null || true
+          awf logs summary | tee -a "$GITHUB_STEP_SUMMARY"
+      - name: Upload agent artifacts
+        if: always()
+        continue-on-error: true
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: agent-artifacts
+          path: |
+            /tmp/gh-aw/aw-prompts/prompt.txt
+            /tmp/gh-aw/aw_info.json
+            /tmp/gh-aw/mcp-logs/
+            /tmp/gh-aw/sandbox/firewall/logs/
+            /tmp/gh-aw/agent-stdio.log
+          if-no-files-found: ignore
+
+  conclusion:
+    needs:
+      - activation
+      - agent
+      - detection
+      - safe_outputs
+    if: (always()) && (needs.agent.result != 'skipped')
+    runs-on: ubuntu-slim
+    permissions:
+      contents: read
+      discussions: write
+      issues: write
+      pull-requests: write
+    outputs:
+      noop_message: ${{ steps.noop.outputs.noop_message }}
+      tools_reported: ${{ steps.missing_tool.outputs.tools_reported }}
+      total_count: ${{ steps.missing_tool.outputs.total_count }}
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Debug job inputs
+        env:
+          COMMENT_ID: ${{ needs.activation.outputs.comment_id }}
+          COMMENT_REPO: ${{ needs.activation.outputs.comment_repo }}
+          AGENT_OUTPUT_TYPES: ${{ needs.agent.outputs.output_types }}
+          AGENT_CONCLUSION: ${{ needs.agent.result }}
+        run: |
+          echo "Comment ID: $COMMENT_ID"
+          echo "Comment Repo: $COMMENT_REPO"
+          echo "Agent Output Types: $AGENT_OUTPUT_TYPES"
+          echo "Agent Conclusion: $AGENT_CONCLUSION"
+      - name: Download agent output artifact
+        continue-on-error: true
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: agent-output
+          path: /tmp/gh-aw/safeoutputs/
+      - name: Setup agent output environment variable
+        run: |
+          mkdir -p /tmp/gh-aw/safeoutputs/
+          find "/tmp/gh-aw/safeoutputs/" -type f -print
+          echo "GH_AW_AGENT_OUTPUT=/tmp/gh-aw/safeoutputs/agent_output.json" >> "$GITHUB_ENV"
+      - name: Process No-Op Messages
+        id: noop
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
+          GH_AW_NOOP_MAX: 1
+          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/noop.cjs');
+            await main();
+      - name: Record Missing Tool
+        id: missing_tool
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
+          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/missing_tool.cjs');
+            await main();
+      - name: Handle Agent Failure
+        id: handle_agent_failure
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
+          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
+          GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
+          GH_AW_SECRET_VERIFICATION_RESULT: ${{ needs.agent.outputs.secret_verification_result }}
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/handle_agent_failure.cjs');
+            await main();
+      - name: Update reaction comment with completion status
+        id: conclusion
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
+          GH_AW_COMMENT_ID: ${{ needs.activation.outputs.comment_id }}
+          GH_AW_COMMENT_REPO: ${{ needs.activation.outputs.comment_repo }}
+          GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
+          GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
+          GH_AW_DETECTION_CONCLUSION: ${{ needs.detection.result }}
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/notify_comment_error.cjs');
+            await main();
+
+  detection:
+    needs: agent
+    if: needs.agent.outputs.output_types != '' || needs.agent.outputs.has_patch == 'true'
+    runs-on: ubuntu-latest
+    permissions: {}
+    timeout-minutes: 10
+    outputs:
+      success: ${{ steps.parse_results.outputs.success }}
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Download agent artifacts
+        continue-on-error: true
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: agent-artifacts
+          path: /tmp/gh-aw/threat-detection/
+      - name: Download agent output artifact
+        continue-on-error: true
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: agent-output
+          path: /tmp/gh-aw/threat-detection/
+      - name: Echo agent output types
+        env:
+          AGENT_OUTPUT_TYPES: ${{ needs.agent.outputs.output_types }}
+        run: |
+          echo "Agent output-types: $AGENT_OUTPUT_TYPES"
+      - name: Setup threat detection
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          WORKFLOW_NAME: "Patch Consistency Review Agent"
+          WORKFLOW_DESCRIPTION: "Reviews PRs to ensure Git patches are updated consistently"
+          HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/setup_threat_detection.cjs');
+            await main();
+      - name: Ensure threat-detection directory and log
+        run: |
+          mkdir -p /tmp/gh-aw/threat-detection
+          touch /tmp/gh-aw/threat-detection/detection.log
+      - name: Validate COPILOT_GITHUB_TOKEN secret
+        id: validate-secret
+        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
+        env:
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
+      - name: Install GitHub Copilot CLI
+        run: /opt/gh-aw/actions/install_copilot_cli.sh 0.0.400
+      - name: Execute GitHub Copilot CLI
+        id: agentic_execution
+        # Copilot CLI tool arguments (sorted):
+        # --allow-tool shell(cat)
+        # --allow-tool shell(grep)
+        # --allow-tool shell(head)
+        # --allow-tool shell(jq)
+        # --allow-tool shell(ls)
+        # --allow-tool shell(tail)
+        # --allow-tool shell(wc)
+        timeout-minutes: 20
+        run: |
+          set -o pipefail
+          COPILOT_CLI_INSTRUCTION="$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"
+          mkdir -p /tmp/
+          mkdir -p /tmp/gh-aw/
+          mkdir -p /tmp/gh-aw/agent/
+          mkdir -p /tmp/gh-aw/sandbox/agent/logs/
+          copilot --add-dir /tmp/ --add-dir /tmp/gh-aw/ --add-dir /tmp/gh-aw/agent/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --allow-tool 'shell(cat)' --allow-tool 'shell(grep)' --allow-tool 'shell(head)' --allow-tool 'shell(jq)' --allow-tool 'shell(ls)' --allow-tool 'shell(tail)' --allow-tool 'shell(wc)' --share /tmp/gh-aw/sandbox/agent/logs/conversation.md --prompt "$COPILOT_CLI_INSTRUCTION"${GH_AW_MODEL_DETECTION_COPILOT:+ --model "$GH_AW_MODEL_DETECTION_COPILOT"} 2>&1 | tee /tmp/gh-aw/threat-detection/detection.log
+        env:
+          COPILOT_AGENT_RUNNER_TYPE: STANDALONE
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
+          GH_AW_MODEL_DETECTION_COPILOT: ${{ vars.GH_AW_MODEL_DETECTION_COPILOT || '' }}
+          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
+          GITHUB_HEAD_REF: ${{ github.head_ref }}
+          GITHUB_REF_NAME: ${{ github.ref_name }}
+          GITHUB_STEP_SUMMARY: ${{ env.GITHUB_STEP_SUMMARY }}
+          GITHUB_WORKSPACE: ${{ github.workspace }}
+          XDG_CONFIG_HOME: /home/runner
+      - name: Parse threat detection results
+        id: parse_results
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/parse_threat_detection_results.cjs');
+            await main();
+      - name: Upload threat detection log
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: threat-detection.log
+          path: /tmp/gh-aw/threat-detection/detection.log
+          if-no-files-found: ignore
+
+  safe_outputs:
+    needs:
+      - agent
+      - detection
+    if: ((!cancelled()) && (needs.agent.result != 'skipped')) && (needs.detection.outputs.success == 'true')
+    runs-on: ubuntu-slim
+    permissions:
+      contents: read
+      discussions: write
+      issues: write
+      pull-requests: write
+    timeout-minutes: 15
+    env:
+      GH_AW_ENGINE_ID: "copilot"
+      GH_AW_WORKFLOW_ID: "patch-consistency-review"
+      GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
+    outputs:
+      process_safe_outputs_processed_count: ${{ steps.process_safe_outputs.outputs.processed_count }}
+      process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Download agent output artifact
+        continue-on-error: true
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        with:
+          name: agent-output
+          path: /tmp/gh-aw/safeoutputs/
+      - name: Setup agent output environment variable
+        run: |
+          mkdir -p /tmp/gh-aw/safeoutputs/
+          find "/tmp/gh-aw/safeoutputs/" -type f -print
+          echo "GH_AW_AGENT_OUTPUT=/tmp/gh-aw/safeoutputs/agent_output.json" >> "$GITHUB_ENV"
+      - name: Process Safe Outputs
+        id: process_safe_outputs
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
+          GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request_review_comment\":{\"max\":10,\"side\":\"RIGHT\"},\"missing_data\":{},\"missing_tool\":{}}"
+        with:
+          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/safe_output_handler_manager.cjs');
+            await main();
+
diff --git a/.github/workflows/patch-consistency-review.md b/.github/workflows/patch-consistency-review.md
new file mode 100644
index 00000000000..7afeca6e89f
--- /dev/null
+++ b/.github/workflows/patch-consistency-review.md
@@ -0,0 +1,81 @@
+---
+description: Reviews PRs to ensure Git patches are updated consistently
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - 'patches/*.patch'
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        description: "PR number to review"
+        required: true
+        type: string
+roles: all
+permissions:
+  contents: read
+  pull-requests: read
+  issues: read
+tools:
+  github:
+    toolsets: [default]
+safe-outputs:
+  create-pull-request-review-comment:
+    max: 10
+  add-comment:
+    max: 1
+timeout-minutes: 15
+---
+
+# Patch Consistency Review Agent
+
+You are an AI code reviewer specialized in ensuring consistency across the different patch files.
+
+## Your Task
+
+When a pull request modifies any patch file, review it to ensure:
+
+1. **Vendor patch**: If a patch adds, modifies, or removes a file located in a vendor directory, check that:
+   - The patch must only be 0001-Vendor-external-dependencies.patch.
+   - The associated go.mod, go.sum, and modules.txt files are updated accordingly.
+
+2. **Patch naming consistency**: Ensure that the patch file names follow the established naming conventions.
+
+3. **Patch content consistency**: Check that:
+   - No new patches are added if the new changes are already covered by existing patches.
+   - No redundant patches exist that cover the same changes.
+   - Changes are added to the appropriate patch files based on their purpose.
+
+## Context
+
+- Repository: ${{ github.repository }}
+- PR number: ${{ github.event.pull_request.number || inputs.pr_number }}
+- Modified files: Use GitHub tools to fetch the list of changed files
+
+## Patches Location
+
+- `patches/`: Directory containing all patch files for the project
+
+## Review Process
+
+1. **Identify the changed patch(es)**: Determine which patch file(s) are modified in this PR
+2. **Analyze the changes**: Understand what feature/fix is being implemented
+3. **Cross-reference other patches**: Check if the equivalent functionality exists in other patch files:
+   - Read the corresponding files in other patch directories
+   - Compare method signatures, behavior, and documentation
+4. **Report findings**: If inconsistencies are found:
+   - Use `create-pull-request-review-comment` to add inline comments on specific lines where changes should be made
+   - Use `add-comment` to provide a summary of cross-patch consistency findings
+   - Be specific about which patches need updates and what changes would bring them into alignment
+
+## Guidelines
+
+1. **Be respectful**: This is a technical review focusing on consistency, not code quality judgments
+2. **Suggest, don't demand**: Frame feedback as suggestions for maintaining consistency
+3. **Skip trivial changes**: Don't flag minor differences like comment styles or variable naming
+4. **Only comment if there are actual consistency issues**: If the PR maintains consistency or only touches one patch's content, acknowledge it positively in a summary comment
+
+## Output Format
+
+- **If consistency issues found**: Add specific review comments pointing to the gaps and suggest which other patches need similar changes
+- **If no issues found**: Add a brief summary comment confirming the changes maintain cross-patch consistency
\ No newline at end of file

From 4d8846e1d982c70e48bdb72ad11f7022ec71c961 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 3 Feb 2026 14:31:39 +0100
Subject: [PATCH 705/887] add missing EOF

---
 .gitattributes | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitattributes b/.gitattributes
index 6ca82ccaaf1..1c6ecf2625f 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -3,4 +3,4 @@
 # To fix this, always check out patch files as LF.
 *.patch -text
 
-.github/workflows/*.lock.yml linguist-generated=true merge=ours
\ No newline at end of file
+.github/workflows/*.lock.yml linguist-generated=true merge=ours

From 8f1b4d1924ab3c1b6e1e88f5747a9d3706da2c41 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 3 Feb 2026 21:21:48 +0100
Subject: [PATCH 706/887] restrict aw roles

---
 .github/workflows/patch-consistency-review.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-consistency-review.md b/.github/workflows/patch-consistency-review.md
index 7afeca6e89f..b9775489ea0 100644
--- a/.github/workflows/patch-consistency-review.md
+++ b/.github/workflows/patch-consistency-review.md
@@ -11,7 +11,7 @@ on:
         description: "PR number to review"
         required: true
         type: string
-roles: all
+roles: [admin, maintainer, write]
 permissions:
   contents: read
   pull-requests: read

From e93c1dc2de6f02b24ba1c7302f22290a09c43b2f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 4 Feb 2026 09:17:37 +0100
Subject: [PATCH 707/887] compile aw lock

---
 .../patch-consistency-review.lock.yml         | 31 +++++++++++++++++--
 1 file changed, 28 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/patch-consistency-review.lock.yml b/.github/workflows/patch-consistency-review.lock.yml
index 29c52f2db18..fa80c1ba993 100644
--- a/.github/workflows/patch-consistency-review.lock.yml
+++ b/.github/workflows/patch-consistency-review.lock.yml
@@ -21,7 +21,7 @@
 #
 # Reviews PRs to ensure Git patches are updated consistently
 #
-# frontmatter-hash: fb80451ae5cb5cc232bda748a404401d54289d26219daea465467101dcf5302c
+# frontmatter-hash: 2b5038c3dc95b282543f1fb054c091a84fb71c122041ab217da0f60eef280927
 
 name: "Patch Consistency Review Agent"
 "on":
@@ -49,7 +49,9 @@ run-name: "Patch Consistency Review Agent"
 
 jobs:
   activation:
-    if: (github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id)
+    needs: pre_activation
+    if: >
+      (needs.pre_activation.outputs.activated == 'true') && ((github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id))
     runs-on: ubuntu-slim
     permissions:
       contents: read
@@ -586,7 +588,7 @@ jobs:
           </system>
           PROMPT_EOF
           cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
-          {{#runtime-import workflows\patch-consistency-review.md}}
+          {{#runtime-import workflows/patch-consistency-review.md}}
           PROMPT_EOF
       - name: Substitute placeholders
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -985,6 +987,29 @@ jobs:
           path: /tmp/gh-aw/threat-detection/detection.log
           if-no-files-found: ignore
 
+  pre_activation:
+    if: (github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id)
+    runs-on: ubuntu-slim
+    outputs:
+      activated: ${{ steps.check_membership.outputs.is_team_member == 'true' }}
+    steps:
+      - name: Setup Scripts
+        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
+        with:
+          destination: /opt/gh-aw/actions
+      - name: Check team membership for workflow
+        id: check_membership
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          GH_AW_REQUIRED_ROLES: admin,maintainer,write
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
+            setupGlobals(core, github, context, exec, io);
+            const { main } = require('/opt/gh-aw/actions/check_membership.cjs');
+            await main();
+
   safe_outputs:
     needs:
       - agent

From 92ba09c61be41e4441000acb8a408d869fd6c45d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Feb 2026 11:55:44 +0000
Subject: [PATCH 708/887] build(deps): bump actions/checkout from 6.0.1 to
 6.0.2 (#2104)

* build(deps): bump actions/checkout from 6.0.1 to 6.0.2

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update checkout action version to v6.0.2

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 .github/workflows/patch-consistency-review.lock.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-consistency-review.lock.yml b/.github/workflows/patch-consistency-review.lock.yml
index fa80c1ba993..55e68de2b9e 100644
--- a/.github/workflows/patch-consistency-review.lock.yml
+++ b/.github/workflows/patch-consistency-review.lock.yml
@@ -102,7 +102,7 @@ jobs:
         with:
           destination: /opt/gh-aw/actions
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Create gh-aw temp directory

From 8d82d77711fb0a3a4f9940ba33ca5ef283de21d2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Feb 2026 11:56:30 +0000
Subject: [PATCH 709/887] build(deps): bump actions/download-artifact from
 6.0.0 to 7.0.0 (#2103)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/patch-consistency-review.lock.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/patch-consistency-review.lock.yml b/.github/workflows/patch-consistency-review.lock.yml
index 55e68de2b9e..f48e710f11f 100644
--- a/.github/workflows/patch-consistency-review.lock.yml
+++ b/.github/workflows/patch-consistency-review.lock.yml
@@ -817,7 +817,7 @@ jobs:
           echo "Agent Conclusion: $AGENT_CONCLUSION"
       - name: Download agent output artifact
         continue-on-error: true
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: agent-output
           path: /tmp/gh-aw/safeoutputs/
@@ -903,13 +903,13 @@ jobs:
           destination: /opt/gh-aw/actions
       - name: Download agent artifacts
         continue-on-error: true
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: agent-artifacts
           path: /tmp/gh-aw/threat-detection/
       - name: Download agent output artifact
         continue-on-error: true
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: agent-output
           path: /tmp/gh-aw/threat-detection/
@@ -1036,7 +1036,7 @@ jobs:
           destination: /opt/gh-aw/actions
       - name: Download agent output artifact
         continue-on-error: true
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
         with:
           name: agent-output
           path: /tmp/gh-aw/safeoutputs/

From 7e89140e76d6df31cab941fad6fa0caad5567a31 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 4 Feb 2026 16:08:35 +0000
Subject: [PATCH 710/887] Update submodule to latest master (a3688ab1):
 cmd/compile: add node collapse/expand to html ast output

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d99be5c4444..a3688ab13e7 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d99be5c44449a3a40a62942272e99642962a37d9
+Subproject commit a3688ab13e76762a168f43e91ca9422c847ee896

From 361a78e0911dc361b01d96463b430294ab03069f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 6 Feb 2026 10:24:02 +0000
Subject: [PATCH 711/887] build(deps): bump github/codeql-action from 4.32.1 to
 4.32.2

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.1 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/6bc82e05fd0ea64601dd4b465378bbcf57de0314...45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 103942fef41..7806fc9f153 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
+        uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
+        uses: github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
+        uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
         with:
           category: /language:go

From 1ab38c7c2ece80fc149da6869a5a8de997f1966c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 6 Feb 2026 16:08:59 +0000
Subject: [PATCH 712/887] Update submodule to latest master (d4febb45):
 crypto/tls: avoid data race when canceling a QUICConn's Context

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a3688ab13e7..d4febb45179 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a3688ab13e76762a168f43e91ca9422c847ee896
+Subproject commit d4febb45179fa99ee1d5783bcb693ed7ba14115c

From de8fbbebc62380fb14a9ead95495947316f2370d Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 16:09:39 +0000
Subject: [PATCH 713/887] Update submodule to latest master (9777cece):
 runtime: use unsafe.Slice in itabInit

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d4febb45179..9777ceceec8 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d4febb45179fa99ee1d5783bcb693ed7ba14115c
+Subproject commit 9777ceceec8fee294d038182739cab7c845ad2d1

From 48aa7aeadeeec8196a315d1f1fe7a5b29b23eef3 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 9 Feb 2026 18:45:36 +0000
Subject: [PATCH 714/887] resolve 3-way merge conflicts

---
 ...nt-ms_tls_config_schannel-experiment.patch | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 13ed9d75933..81b90dd13ef 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -24,7 +24,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 3bfe7fe20966a6..dbb6b56c48cc20 100644
+index 96273c0fe0ea2f..11d32bbc1c2551 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -14,6 +14,7 @@ import (
@@ -467,7 +467,7 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 39ebb9d2f1edd3..9bb2d0801111c2 100644
+index 4513008a5f930e..e1f868e7086061 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -21,6 +21,7 @@ import (
@@ -490,7 +490,7 @@ index 39ebb9d2f1edd3..9bb2d0801111c2 100644
  }
  
  func TestDialTimeout(t *testing.T) {
-@@ -1289,6 +1295,9 @@ func TestConnectionState(t *testing.T) {
+@@ -1324,6 +1330,9 @@ func TestConnectionState(t *testing.T) {
  		if !isFIPSVersion(v) && fips140tls.Required() {
  			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
  		}
@@ -500,7 +500,7 @@ index 39ebb9d2f1edd3..9bb2d0801111c2 100644
  		var name string
  		switch v {
  		case VersionTLS10:
-@@ -1532,6 +1541,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+@@ -1567,6 +1576,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
  		}, ""}, // static RSA fallback
  	}
  	for i, tt := range tests {
@@ -512,7 +512,7 @@ index 39ebb9d2f1edd3..9bb2d0801111c2 100644
  		err := tt.chi.SupportsCertificate(tt.c)
  		switch {
  		case tt.wantErr == "" && err != nil:
-@@ -1545,6 +1559,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+@@ -1580,6 +1594,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
  }
  
  func TestCipherSuites(t *testing.T) {
@@ -640,7 +640,7 @@ index 09be2eb0807932..b74b311279e81f 100644
 +	}
 +}
 diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index d087fd46f6b27b..c7b04451fed945 100644
+index 9526e855e8f1ba..49873764aea3a1 100644
 --- a/src/internal/syscall/windows/zsyscall_windows.go
 +++ b/src/internal/syscall/windows/zsyscall_windows.go
 @@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
@@ -651,16 +651,16 @@ index d087fd46f6b27b..c7b04451fed945 100644
  	modbcryptprimitives = syscall.NewLazyDLL(sysdll.Add("bcryptprimitives.dll"))
  	modiphlpapi         = syscall.NewLazyDLL(sysdll.Add("iphlpapi.dll"))
  	modkernel32         = syscall.NewLazyDLL(sysdll.Add("kernel32.dll"))
-@@ -63,6 +64,8 @@ var (
- 	procQueryServiceStatus                = modadvapi32.NewProc("QueryServiceStatus")
- 	procRevertToSelf                      = modadvapi32.NewProc("RevertToSelf")
+@@ -65,6 +66,8 @@ var (
+ 	procSetEntriesInAclW                  = modadvapi32.NewProc("SetEntriesInAclW")
+ 	procSetNamedSecurityInfoW             = modadvapi32.NewProc("SetNamedSecurityInfoW")
  	procSetTokenInformation               = modadvapi32.NewProc("SetTokenInformation")
 +	procBCryptEnumContextFunctions        = modbcrypt.NewProc("BCryptEnumContextFunctions")
 +	procBCryptFreeBuffer                  = modbcrypt.NewProc("BCryptFreeBuffer")
  	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
  	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
  	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -244,6 +247,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+@@ -271,6 +274,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
  	return
  }
  

From 74c181a5a09a1f633ce3d255adfa26e073d06112 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 10 Feb 2026 00:00:30 +0000
Subject: [PATCH 715/887] openssl: delete cgo-less experiment and promote to
 default (#2106)

* openssl: delete CGO-less experiment and promote to default

* fix test succeed logic

* review feedback

* dagood review

* add linux build tag
---
 eng/doc/MigrationGuide.md                     |   7 +-
 eng/doc/NocgoOpenSSL.md                       |  37 +++++
 .../stages/go-builder-matrix-stages.yml       |   8 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  44 +-----
 ...03-Implement-crypto-internal-backend.patch | 140 +++++-------------
 5 files changed, 84 insertions(+), 152 deletions(-)
 create mode 100644 eng/doc/NocgoOpenSSL.md

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index d1c82db03aa..a72afc5ad72 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -146,11 +146,10 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 ```
 
 > [!NOTE]
-> As of Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
-> This allows the use of OpenSSL without requiring cgo.
-> Currently this experiment is supported on the following architectures: `386`, `amd64`, `arm`, `arm64`, `ppc64le` and `riscv64`.
+> In Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
+> In Go 1.27, the experiment will be removed and the cgo requirement for `systemcrypto` on Linux will be lifted by default.
 >
-> While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental as of Go 1.26 and may have limitations.
+> For more details about supported architectures and backend selection, see [cgo-less OpenSSL Backend](NocgoOpenSSL.md).
 
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
new file mode 100644
index 00000000000..715668ad75c
--- /dev/null
+++ b/eng/doc/NocgoOpenSSL.md
@@ -0,0 +1,37 @@
+# Cgo-less OpenSSL Backend
+
+This document describes the cgo-less OpenSSL backend for the Microsoft build of Go, available as an experimental feature starting in Go 1.26.
+
+## Overview
+
+In Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
+
+In Go 1.27, the experiment will be removed and the cgo requirement for `systemcrypto` on Linux will be lifted by default.
+
+This allows the use of OpenSSL without requiring cgo.
+
+## Supported Architectures
+
+Currently this experiment is supported on the following architectures:
+
+- **386**
+- **amd64**
+- **arm**
+- **arm64**
+- **ppc64le**
+- **riscv64**
+
+The set of supported architectures is limited because each architecture requires a unique assembly implementation to call OpenSSL.
+Architectures are added based on demand and available resources.
+To see existing requests or request support for additional architectures, search for issues with the [`Area-Nocgo`](https://github.com/microsoft/go/labels/Area-Nocgo) label.
+
+## How the Backend is Selected
+
+If cgo is enabled (e.g., `CGO_ENABLED=1`), the cgo-based OpenSSL backend is always used.
+The cgo-less backend is only used when cgo is disabled **and** you're on a supported architecture.
+
+This means if you enable cgo for other reasons (e.g., linking your own C library or cross-compiling to an unsupported architecture), the crypto backend will use the cgo-based implementation.
+
+## Experimental Status
+
+While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental in Go 1.26 and may have limitations.
diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index 3ab4afaa0c4..f14a91ffd67 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -93,13 +93,13 @@ stages:
           - { experiment: nosystemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, fips: true }
-          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, fips: true }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: nocgo, fips: true }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: ubuntu }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: nocgo, distro: ubuntu }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
-          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: azurelinux3 }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: nocgo, distro: azurelinux3 }
           - { experiment: systemcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
-          - { experiment: 'systemcrypto,ms_nocgo_opensslcrypto', os: linux, arch: amd64, config: nocgo, distro: azurelinux3, fips: true }
+          - { experiment: systemcrypto, os: linux, arch: amd64, config: nocgo, distro: azurelinux3, fips: true }
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: devscript }
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 19ab6d19cd1..1d71a89fe4e 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -24,14 +24,12 @@ maintain this feature. For more information, see the test files.
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
  .../goexperiment/exp_darwincrypto_on.go       |  8 ++
- .../exp_ms_nocgo_opensslcrypto_off.go         |  8 ++
- .../exp_ms_nocgo_opensslcrypto_on.go          |  8 ++
  .../goexperiment/exp_opensslcrypto_off.go     |  8 ++
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 22 +++++
- 20 files changed, 421 insertions(+), 4 deletions(-)
+ src/internal/goexperiment/flags.go            | 18 ++++
+ 18 files changed, 401 insertions(+), 4 deletions(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
@@ -42,8 +40,6 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_darwincrypto_on.go
- create mode 100644 src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
- create mode 100644 src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_opensslcrypto_on.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
@@ -541,34 +537,6 @@ index 00000000000000..4bf785b999ecce
 +
 +const DarwinCrypto = true
 +const DarwinCryptoInt = 1
-diff --git a/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
-new file mode 100644
-index 00000000000000..d6448ed71cc83e
---- /dev/null
-+++ b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_off.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build !goexperiment.ms_nocgo_opensslcrypto
-+
-+package goexperiment
-+
-+const MS_Nocgo_OpenSSLCrypto = false
-+const MS_Nocgo_OpenSSLCryptoInt = 0
-diff --git a/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
-new file mode 100644
-index 00000000000000..b2faba81e67362
---- /dev/null
-+++ b/src/internal/goexperiment/exp_ms_nocgo_opensslcrypto_on.go
-@@ -0,0 +1,8 @@
-+// Code generated by mkconsts.go. DO NOT EDIT.
-+
-+//go:build goexperiment.ms_nocgo_opensslcrypto
-+
-+package goexperiment
-+
-+const MS_Nocgo_OpenSSLCrypto = true
-+const MS_Nocgo_OpenSSLCryptoInt = 1
 diff --git a/src/internal/goexperiment/exp_opensslcrypto_off.go b/src/internal/goexperiment/exp_opensslcrypto_off.go
 new file mode 100644
 index 00000000000000..b28c0976a94cb0
@@ -626,10 +594,10 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 2cfb71578b421b..be2104e8f5a437 100644
+index 2cfb71578b421b..759af57214e7f4 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,28 @@ type Flags struct {
+@@ -59,6 +59,24 @@ type Flags struct {
  	PreemptibleLoops  bool
  	StaticLockRanking bool
  	BoringCrypto      bool
@@ -651,10 +619,6 @@ index 2cfb71578b421b..be2104e8f5a437 100644
 +	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
 +	// being used to build the Go program.
 +	SystemCrypto bool
-+
-+	// MS_Nocgo_OpenSSLCrypto enables the OpenSSL crypto backend
-+	// to be used in builds that do not use cgo.
-+	MS_Nocgo_OpenSSLCrypto bool
  
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 247be5b95d0..02ff1735216 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -13,12 +13,12 @@ desired goexperiments and build tags.
  .../compile/internal/logopt/logopt_test.go    |   6 +-
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
- src/cmd/dist/test.go                          |  30 +-
+ src/cmd/dist/test.go                          |  18 +-
  src/cmd/go/go_test.go                         |  11 +
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 249 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 241 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -48,12 +48,11 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/nobackend.go      | 375 +++++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 424 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
- src/crypto/systemcrypto_nocgo_linux.go        |  17 +
+ src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
- src/internal/buildcfg/exp.go                  |  77 ++++
+ src/internal/buildcfg/exp.go                  |  74 +++
  src/runtime/runtime_boring.go                 |   5 +
- src/syscall/exec_linux_test.go                |   4 +
- 44 files changed, 2773 insertions(+), 17 deletions(-)
+ 43 files changed, 2749 insertions(+), 15 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -145,7 +144,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index e4250e12de8975..917f682fd4bfaf 100644
+index e4250e12de8975..feef0080cb12d6 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1382,6 +1382,80 @@ func toolenv() []string {
@@ -196,7 +195,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
 +		}
 +		goexp := strings.Split(value, ",")
 +		goexp = slices.DeleteFunc(goexp, func(s string) bool {
-+			return s == "systemcrypto" || s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
++			return s == "systemcrypto" || s == "nosystemcrypto"
 +		})
 +		goexp = append(goexp, "nosystemcrypto")
 +		return strings.Join(goexp, ",")
@@ -246,7 +245,7 @@ index e4250e12de8975..917f682fd4bfaf 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 48c3aa5efdb008..3ac500b85e6988 100644
+index 48c3aa5efdb008..ad050c065e463f 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -287,42 +286,7 @@ index 48c3aa5efdb008..3ac500b85e6988 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -882,14 +886,21 @@ func (t *tester) registerTests() {
- 
- 	// Test internal linking of PIE binaries where it is supported.
- 	if t.internalLinkPIE() && !disablePIE {
-+		var tags, env []string
-+		if goos == "linux" && !strings.Contains(goexperiment, "ms_nocgo_opensslcrypto") {
-+			// Linux doesn't support systemcrypto with CGO_ENABLED=0.
-+			tags = append(tags, "ms_skipfipscheck")
-+			env = append(env, "MS_GO_NOSYSTEMCRYPTO=1")
-+		}
- 		t.registerTest("internal linking, -buildmode=pie",
- 			&goTest{
- 				variant:   "pie_internal",
- 				timeout:   60 * time.Second,
- 				buildmode: "pie",
- 				ldflags:   "-linkmode=internal",
--				env:       []string{"CGO_ENABLED=0"},
-+				env:       append([]string{"CGO_ENABLED=0"}, env...),
- 				pkg:       "reflect",
-+				tags:      tags,
- 			})
- 		t.registerTest("internal linking, -buildmode=pie",
- 			&goTest{
-@@ -897,9 +908,10 @@ func (t *tester) registerTests() {
- 				timeout:   60 * time.Second,
- 				buildmode: "pie",
- 				ldflags:   "-linkmode=internal",
--				env:       []string{"CGO_ENABLED=0"},
-+				env:       append([]string{"CGO_ENABLED=0"}, env...),
- 				pkg:       "crypto/internal/fips140test",
- 				runTests:  "TestFIPSCheck",
-+				tags:      tags,
- 			})
- 		// Also test a cgo package.
- 		if t.cgoEnabled && t.internalLink() && !disablePIE {
-@@ -1005,7 +1017,9 @@ func (t *tester) registerTests() {
+@@ -1005,7 +1009,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -447,10 +411,10 @@ index 92e8a803105f8d..95d47b625c28a7 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..b6ba8158598a6c
+index 00000000000000..fcbbe6c86a2180
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,249 @@
+@@ -0,0 +1,241 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -539,12 +503,10 @@ index 00000000000000..b6ba8158598a6c
 +		goexp   string
 +		succeed bool
 +	}{
-+		{"linux", "amd64", "noms_nocgo_opensslcrypto", false}, // cgoless OpenSSL requires ms_nocgo_opensslcrypto on linux/amd64
-+		{"linux", "arm64", "noms_nocgo_opensslcrypto", false}, // cgoless OpenSSL requires ms_nocgo_opensslcrypto on linux/arm64
-+		{"linux", "ppc64le", "ms_nocgo_cngcrypto", false},     // cgoless OpenSSL not supported on linux/ppc64le
-+		{"linux", "arm", "ms_nocgo_cngcrypto", false},         // cgoless OpenSSL not supported on linux/arm
-+		{"linux", "amd64", "ms_nocgo_opensslcrypto", true},
-+		{"linux", "arm64", "ms_nocgo_opensslcrypto", true},
++		{"linux", "amd64", "", true},
++		{"linux", "arm64", "", true},
++		{"linux", "ppc64le", "", true},
++		{"linux", "arm", "", true},
 +		{"darwin", "amd64", "", true},
 +		{"darwin", "arm64", "", true},
 +		{"windows", "386", "", false}, // cgoless system crypto not supported on windows/386
@@ -617,15 +579,9 @@ index 00000000000000..b6ba8158598a6c
 +			t.Parallel()
 +			out := outPath(t)
 +			env := []string{"CGO_ENABLED=0", "GOOS=" + tt.goos, "GOARCH=" + tt.goarch, "MS_GO_NOSYSTEMCRYPTO=0"}
-+			if tt.goos == "linux" {
-+				// On linux, set ms_nocgo_opensslcrypto to allow cross-compilation without cgo.
-+				env = append(env, "GOEXPERIMENT=ms_nocgo_opensslcrypto")
-+			} else {
-+				// Set a goexperiment in case the Go toolchain has been built with GOEXPERIMENT=nosystemcrypto.
-+				// In that case, systemcrypto will not be enabled by default unless we pass an explicit GOEXPERIMENT.
-+				env = append(env, "GOEXPERIMENT=regabi")
-+
-+			}
++			// Set a goexperiment in case the Go toolchain has been built with GOEXPERIMENT=nosystemcrypto.
++			// In that case, systemcrypto will not be enabled by default unless we pass an explicit GOEXPERIMENT.
++			env = append(env, "GOEXPERIMENT=regabi")
 +			execGoTool(t, false, env, "build", "-o", out, cryptoFile)
 +			// Check that the binary has the correct settings.
 +			settings, _ := execGoTool(t, false, nil, "version", "-m", out)
@@ -2034,7 +1990,7 @@ index 00000000000000..289d6594eac54b
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
 new file mode 100644
-index 00000000000000..8da484e3ffb9b7
+index 00000000000000..f5de8e094d3d87
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl.go
 @@ -0,0 +1,59 @@
@@ -2042,7 +1998,7 @@ index 00000000000000..8da484e3ffb9b7
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build goexperiment.opensslcrypto
 +
 +package fips140
 +
@@ -2150,7 +2106,7 @@ index 00000000000000..d3d39fd77f98db
 +const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
-index 00000000000000..14b217a6e2eb21
+index 00000000000000..51e80d3332f816
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 @@ -0,0 +1,68 @@
@@ -2158,7 +2114,7 @@ index 00000000000000..14b217a6e2eb21
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build goexperiment.opensslcrypto
 +
 +// opensslsetup is a package that initializes the OpenSSL library.
 +// It doesn't export any symbol, but blank importing it has the
@@ -2336,7 +2292,7 @@ index 00000000000000..3b92bfc5fbabf6
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..c8f281d7fd1274
+index 00000000000000..5e16f39dc107c7
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
 @@ -0,0 +1,375 @@
@@ -2344,7 +2300,7 @@ index 00000000000000..c8f281d7fd1274
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !goexperiment.systemcrypto || (goexperiment.opensslcrypto && !(cgo || goexperiment.ms_nocgo_opensslcrypto))
++//go:build !goexperiment.systemcrypto
 +
 +package backend
 +
@@ -2717,7 +2673,7 @@ index 00000000000000..c8f281d7fd1274
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..929afe7f446aa6
+index 00000000000000..a7437047f91696
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,424 @@
@@ -2725,7 +2681,7 @@ index 00000000000000..929afe7f446aa6
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && linux && (cgo || goexperiment.ms_nocgo_opensslcrypto)
++//go:build goexperiment.opensslcrypto && linux
 +
 +// Package openssl provides access to OpenSSLCrypto implementation functions.
 +// Check the variable Enabled to find out whether OpenSSLCrypto is available.
@@ -3163,15 +3119,15 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..d272072340a213
+index 00000000000000..1d3d180ff70b75
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
-@@ -0,0 +1,17 @@
+@@ -0,0 +1,18 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || (goexperiment.ms_nocgo_opensslcrypto && (386 || amd64 || arm || arm64 || ppc64le || riscv64)))
++//go:build goexperiment.opensslcrypto && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64)
 +
 +package crypto
 +
@@ -3179,9 +3135,10 @@ index 00000000000000..d272072340a213
 +	`
 +	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 +
-+	Consider using our cgo-less experiment by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
++	Our cgo-less OpenSSL implementation is only supported on certain architectures.
++	These architectures are: 386, amd64, arm, arm64, ppc64le and riscv64.
 +	
-+	For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
++	For more information, including how to request support for additional architectures, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
@@ -3241,7 +3198,7 @@ index a0436aa1901b7e..ad2c8fa13fd07a 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 87cd1f4de3246a..aa767df31dd84d 100644
+index 87cd1f4de3246a..c8d7fb4cffba66 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -5,12 +5,15 @@
@@ -3260,7 +3217,7 @@ index 87cd1f4de3246a..aa767df31dd84d 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -193,6 +196,60 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -193,6 +196,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -3311,9 +3268,6 @@ index 87cd1f4de3246a..aa767df31dd84d 100644
 +			}
 +		}
 +	}
-+	if flags.MS_Nocgo_OpenSSLCrypto && !flags.SystemCrypto {
-+		errs = append(errs, "GOEXPERIMENT ms_nocgo_opensslcrypto requires systemcrypto")
-+	}
 +	if len(errs) > 0 {
 +		errs = append(errs, "For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips")
 +		return nil, errors.New(strings.Join(errs, "\n\t"))
@@ -3321,7 +3275,7 @@ index 87cd1f4de3246a..aa767df31dd84d 100644
  	return flags, nil
  }
  
-@@ -202,6 +259,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -202,6 +256,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  
@@ -3340,7 +3294,7 @@ index 87cd1f4de3246a..aa767df31dd84d 100644
 +	// The Microsoft build of Go default behavior sets a few experiments that we
 +	// need to remove from the result.
 +	exps = slices.DeleteFunc(exps, func(s string) bool {
-+		return s == "nosystemcrypto" || s == "ms_nocgo_opensslcrypto"
++		return s == "nosystemcrypto"
 +	})
 +	return strings.Join(exps, ",")
 +}
@@ -3361,25 +3315,3 @@ index 831ee67afc952d..d2f00d57c10286 100644
 +func crypto_backend_runtime_arg0() string {
 +	return boring_runtime_arg0()
 +}
-diff --git a/src/syscall/exec_linux_test.go b/src/syscall/exec_linux_test.go
-index ac04e51b144cb3..f5dd63858bd61f 100644
---- a/src/syscall/exec_linux_test.go
-+++ b/src/syscall/exec_linux_test.go
-@@ -12,6 +12,7 @@ import (
- 	"flag"
- 	"fmt"
- 	"internal/asan"
-+	"internal/goexperiment"
- 	"internal/platform"
- 	"internal/syscall/unix"
- 	"internal/testenv"
-@@ -300,6 +301,9 @@ func TestUnshareMountNameSpaceChroot(t *testing.T) {
- 
- 	cmd := testenv.Command(t, testenv.GoToolPath(t), "test", "-c", "-o", x, "syscall")
- 	cmd.Env = append(cmd.Environ(), "CGO_ENABLED=0")
-+	if !goexperiment.MS_Nocgo_OpenSSLCrypto {
-+		cmd.Env = append(cmd.Env, "MS_GO_NOSYSTEMCRYPTO=1")
-+	}
- 	if o, err := cmd.CombinedOutput(); err != nil {
- 		t.Fatalf("%v: %v\n%s", cmd, err, o)
- 	}

From 62b170f3f6a5a717332c5d03c61e09d8ef655ea3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Feb 2026 11:26:00 +0000
Subject: [PATCH 716/887] build(deps): bump golang.org/x/net from 0.49.0 to
 0.50.0 in /eng/_util (#2124)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/net/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index a8d2ebf27fd..5e2e8bcb522 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.49.0
+	golang.org/x/net v0.50.0
 )
 
 require (
@@ -28,9 +28,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
-	golang.org/x/crypto v0.47.0 // indirect
+	golang.org/x/crypto v0.48.0 // indirect
 	golang.org/x/oauth2 v0.33.0 // indirect
-	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/text v0.34.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 1f60f376210..0302a7045b5 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -52,16 +52,16 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
-golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
-golang.org/x/net v0.49.0 h1:eeHFmOGUTtaaPSGNmjBKpbng9MulQsJURQUAfUwY++o=
-golang.org/x/net v0.49.0/go.mod h1:/ysNB2EvaqvesRkuLAyjI1ycPZlQHM3q01F02UY/MV8=
+golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
+golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/net v0.50.0 h1:ucWh9eiCGyDR3vtzso0WMQinm2Dnt8cFMuQa9K33J60=
+golang.org/x/net v0.50.0/go.mod h1:UgoSli3F/pBgdJBHCTc+tp3gmrU4XswgGRgtnwWTfyM=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
-golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
-golang.org/x/tools v0.40.0 h1:yLkxfA+Qnul4cs9QA3KnlFu0lVmd8JJfoq+E41uSutA=
-golang.org/x/tools v0.40.0/go.mod h1:Ik/tzLRlbscWpqqMRjyWYDisX8bG13FrdXp3o4Sr9lc=
+golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
+golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
+golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
+golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=

From 033a843f8f903705330e6b9833ac2cf2a2154fe0 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 10 Feb 2026 19:04:12 +0000
Subject: [PATCH 717/887] docs: updae NocgoOpenSSL.md from dagood review
 (#2123)

---
 eng/doc/MigrationGuide.md |  3 +--
 eng/doc/NocgoOpenSSL.md   | 28 ++++++++++++++--------------
 2 files changed, 15 insertions(+), 16 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index a72afc5ad72..af3585f37d5 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -147,9 +147,8 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 
 > [!NOTE]
 > In Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
-> In Go 1.27, the experiment will be removed and the cgo requirement for `systemcrypto` on Linux will be lifted by default.
 >
-> For more details about supported architectures and backend selection, see [cgo-less OpenSSL Backend](NocgoOpenSSL.md).
+> For more details, see [cgo-less OpenSSL Backend](NocgoOpenSSL.md).
 
 When targeting Linux, `systemcrypto` requires cgo.
 Cgo is disabled by default on some platforms or when a C compiler is not detected
diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 715668ad75c..0a634762367 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -1,37 +1,37 @@
-# Cgo-less OpenSSL Backend
+# No-cgo OpenSSL Backend
 
-This document describes the cgo-less OpenSSL backend for the Microsoft build of Go, available as an experimental feature starting in Go 1.26.
+This document describes how to enable and use the cgo-less OpenSSL backend for the Microsoft build of Go, available as an experimental feature starting in Go 1.26.
 
 ## Overview
 
 In Go 1.26, there is a cgo-less experiment available for Linux: `ms_nocgo_opensslcrypto`.
 
+> [!NOTE]
+> While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental in Go 1.26 and may have limitations.
+
 In Go 1.27, the experiment will be removed and the cgo requirement for `systemcrypto` on Linux will be lifted by default.
 
 This allows the use of OpenSSL without requiring cgo.
 
-## Supported Architectures
+## Supported architectures
 
 Currently this experiment is supported on the following architectures:
 
-- **386**
+- 386
 - **amd64**
-- **arm**
+- arm
 - **arm64**
-- **ppc64le**
-- **riscv64**
+- ppc64le
+- riscv64
 
 The set of supported architectures is limited because each architecture requires a unique assembly implementation to call OpenSSL.
 Architectures are added based on demand and available resources.
-To see existing requests or request support for additional architectures, search for issues with the [`Area-Nocgo`](https://github.com/microsoft/go/labels/Area-Nocgo) label.
+To see existing requests or request support for additional architectures, use the [![](https://img.shields.io/github/labels/microsoft/go/Area-Nocgo)](https://github.com/microsoft/go/labels/Area-Nocgo) label.
 
-## How the Backend is Selected
+## How the backend is selected
 
 If cgo is enabled (e.g., `CGO_ENABLED=1`), the cgo-based OpenSSL backend is always used.
 The cgo-less backend is only used when cgo is disabled **and** you're on a supported architecture.
 
-This means if you enable cgo for other reasons (e.g., linking your own C library or cross-compiling to an unsupported architecture), the crypto backend will use the cgo-based implementation.
-
-## Experimental Status
-
-While `systemcrypto` is a fully supported `GOEXPERIMENT` value (it is not "experimental"), `ms_nocgo_opensslcrypto` **is** experimental in Go 1.26 and may have limitations.
+This means if cgo is enabled by default on your platform or you enable cgo for other reasons (e.g., linking your own C library), the crypto backend will use the cgo-based implementation.
+You can also intentionally enable cgo to successfully build for a platform without cgo-less OpenSSL support.

From fb5efb0d82e5facf62b65fd8a0cf05a47de63c49 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 11 Feb 2026 11:28:27 +0000
Subject: [PATCH 718/887] Consolidate crypto backend GOEXPERIMENTs into
 systemcrypto (#2126)

* Consolidate crypto backend GOEXPERIMENTs into systemcrypto

Remove the per-platform GOEXPERIMENTs (opensslcrypto, cngcrypto,
darwincrypto) and use only systemcrypto with platform build constraints.

Before this change, enabling a crypto backend required knowing which
experiment to use for each platform:
  - Linux: GOEXPERIMENT=opensslcrypto
  - Windows: GOEXPERIMENT=cngcrypto
  - Darwin: GOEXPERIMENT=darwincrypto

After this change, a single experiment works across all platforms:
  - All platforms: GOEXPERIMENT=systemcrypto

Platform-specific code now uses build constraints like:
  //go:build goexperiment.systemcrypto && linux
  //go:build goexperiment.systemcrypto && windows
  //go:build goexperiment.systemcrypto && darwin

Runtime checks use:
  goexperiment.SystemCrypto && runtime.GOOS == "linux"

This simplifies the developer experience and makes cross-platform
scripts and documentation easier to maintain.

Changes:
- Remove OpenSSLCrypto, CNGCrypto, DarwinCrypto from goexperiment.Flags
- Remove exp_*crypto_{on,off}.go files for old experiments
- Update all build constraints to use systemcrypto + platform
- Update runtime checks to use SystemCrypto + runtime.GOOS
- Update test infrastructure to only check for systemcrypto

* add back experiments but throw error

* revert position on rogue patches

* throw error on old experiments

* fix error message and update Changelog

* bump 1ES pool as 2004 has been removed
---
 eng/doc/fips/README.md                        |  57 ++--
 eng/pipeline/stages/pool-2.yml                |   2 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 285 +++---------------
 ...03-Implement-crypto-internal-backend.patch | 181 +++++------
 patches/0004-Use-crypto-backends.patch        |  78 ++---
 5 files changed, 186 insertions(+), 417 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index ee4e90ad5e4..33af7f4bef1 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -82,7 +82,7 @@ The following table summarizes common configurations and how suitable each one i
 | Default, Go 1.25 or later | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. |
 | `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. If the app is built for Linux, `systemcrypto` chooses `opensslcrypto`, and the environment variable causes it to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect with `cngcrypto`. |
+| `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. On Linux, this environment variable causes the runtime to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect on Windows or macOS. |
 | `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
 | `MS_GO_NOSYSTEMCRYPTO=1` (since Go 1.25.2) or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
 
@@ -93,35 +93,32 @@ Some configurations are invalid and intentionally result in a build error or run
 | Build-time config | Runtime config | Behavior |
 | --- | --- | --- |
 | `-tags=requirefips`, Go 1.24 | | The build fails. A crypto backend must be specified to enable FIPS features. |
-| `GOEXPERIMENT=cngcrypto,opensslcrypto` | | The build fails. Only one crypto backend can be enabled at a time. |
 | `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. |
 
 ## Usage: Build
 
-The `GOEXPERIMENT` environment variable is used at build time to select a cryptographic library backend. This modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API. The `GOEXPERIMENT` values that pick a crypto backend are:
+The `GOEXPERIMENT` environment variable is used at build time to select a cryptographic library backend. This modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API.
 
-- `systemcrypto` automatically selects the suggested crypto backend for the target platform
-   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. To disable it, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
-- `opensslcrypto` selects OpenSSL, for Linux
-- `cngcrypto` selects CNG, for Windows
-- `darwincrypto` selects CommonCrypto & CryptoKit for macOS
-- If no option is selected (and `systemcrypto` has been disabled if using Go 1.25 or later), Go standard library cryptography is used.
+- `systemcrypto` enables the system crypto backend for the target platform
+   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. Since Go 1.26, it's also enabled automatically on macOS. To disable it, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
+- If `systemcrypto` is disabled (using `MS_GO_NOSYSTEMCRYPTO=1` or `GOEXPERIMENT=nosystemcrypto`), Go standard library cryptography is used.
 
-The options are exclusive and must not be enabled at the same time as one another.
+> [!NOTE]
+> Prior to Go 1.27, per-platform experiments (`opensslcrypto`, `cngcrypto`, `darwincrypto`) were available. These have been removed in Go 1.27. Use `systemcrypto` instead, which automatically selects the appropriate backend based on the target platform.
 
-The selection made by `systemcrypto` matches the internal Microsoft crypto policy for Go. If no compliant backend exists matching the target platform, the build fails.
+The `systemcrypto` experiment uses platform-specific code via build constraints. The platform is determined by the target platform (`GOOS`), and the appropriate system cryptography library is used:
 
-| Target platform | `systemcrypto` selection | Library |
-| --- | --- | --- |
-| Linux | `opensslcrypto` | OpenSSL |
-| Windows (amd64 and arm64) | `cngcrypto` | CNG |
-| macOS | `darwincrypto` | CommonCrypto & CryptoKit |
+| Target platform | Library |
+| --- | --- |
+| Linux | OpenSSL |
+| Windows (amd64 and arm64) | CNG |
+| macOS | CommonCrypto & CryptoKit |
 
-The crypto backend selection must match the target platform. In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly select `cngcrypto`.
+In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly use CNG-based code.
 
 The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
 
-A cross-build to Windows amd64 or arm64 will typically work, because `cngcrypto` uses syscalls to call CNG rather than cgo.
+A cross-build to Windows amd64 or arm64 will typically work, because the Windows backend uses syscalls to call CNG rather than cgo.
 A cross-build to Linux or macOS, however, is more complicated (perhaps infeasible), because their backends use cgo.
 
 The Linux backends' use of cgo also introduces the glibc compatibility problem.
@@ -226,7 +223,7 @@ Another approach that generally works for any build system is to modify the buil
 
 ## Usage: Runtime
 
-A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs. This is the case for `opensslcrypto` (always using OpenSSL), `cngcrypto` (always using CNG) and `darwincrypto` (always using CommonCrypto/CryptoKit). If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
+A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs: OpenSSL on Linux, CNG on Windows, and CommonCrypto/CryptoKit on macOS. If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
 
 The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140=on` and `GOFIPS=1` settings on each supported platform.
 
@@ -376,14 +373,14 @@ Most programs aren't expected to use these options. Determining FIPS mode at run
 
 ### Build option to use Go crypto if the backend compatibility check fails
 
-When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=opensslcrypto`. The OpenSSL backend requires cgo, so the build fails:
+When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`. The OpenSSL backend on Linux requires cgo, so the build fails:
 
 ```
 # runtime
 ..\..\go\src\runtime\backenderr_gen_nofallback_openssl.go:12:2: `
-        The goexperiment.opensslcrypto tag is specified, but other tags required to enable that backend were not met.
+        The goexperiment.systemcrypto tag is specified, but other tags required to enable that backend were not met.
         Required build tags:
-          goexperiment.opensslcrypto && linux && cgo
+          goexperiment.systemcrypto && linux && cgo
         Please check your build environment and build command for a reason one or more of these tags weren't specified.
 ```
 
@@ -406,7 +403,7 @@ These are other fixes that may be used on a case-by-case basis:
 
 ### Runtime OpenSSL version override
 
-The `opensslcrypto` Go runtime automatically loads the OpenSSL shared library `libcrypto` using [dlopen] when initializing. Therefore, dlopen's shared library search conventions also apply here.
+On Linux, the Go runtime automatically loads the OpenSSL shared library `libcrypto` using [dlopen] when initializing. Therefore, dlopen's shared library search conventions also apply here.
 
 The `libcrypto` shared library file name varies among different platforms, so a best effort is done to find and load the right file:
 
@@ -424,7 +421,7 @@ This algorithm can be overridden by setting the environment variable `GO_OPENSSL
 
 ### Multiple GOEXPERIMENTS
 
-When choosing a crypto backend using `GOEXPERIMENT`, you can enable other non-crypto experiments simultaneously using a comma separator, e.g. `GOEXPERIMENT=opensslcrypto,loopvar`. Combining other experiments with one crypto backend experiment is supported.
+When using `GOEXPERIMENT`, you can enable other non-crypto experiments simultaneously using a comma separator, e.g. `GOEXPERIMENT=systemcrypto,loopvar`. Combining other experiments with `systemcrypto` is supported.
 
 For more information about other Go experiments, read the output of the command `go doc goexperiment.Flags` to see the experiments available in your specific build of the Go toolset, or check [the online goexperiment package doc](https://pkg.go.dev/internal/goexperiment) to see the options for other versions.
 
@@ -460,7 +457,7 @@ Note that while using a FIPS-certified cryptographic module is a FIPS requiremen
 
 ### Multiple OpenSSL versions allowed
 
-The `opensslcrypto` Go runtime supports multiple OpenSSL versions. It discovers and picks the OpenSSL version to use at runtime, not compile time. This helps make the feature easy to incorporate in existing builds.
+On Linux, the Go runtime supports multiple OpenSSL versions. It discovers and picks the OpenSSL version to use at runtime, not compile time. This helps make the feature easy to incorporate in existing builds.
 
 Not all OpenSSL versions are supported. OpenSSL does not maintain ABI compatibility between different releases, even if only the patch version is increased, it needs specific attention to implement support. The relative importance of each version also results in a different amount of automated testing that has been implemented for various supported version. These are supported versions and the amount of automated validation for each one:
 
@@ -532,6 +529,12 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp
 
 This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary.
 
+### Go 1.27 (Aug 2026)
+
+- The per-platform GOEXPERIMENTs (`opensslcrypto`, `cngcrypto`, `darwincrypto`) have been removed.
+  - The `systemcrypto` GOEXPERIMENT is now enabled by default on all platforms where it's supported (Windows, Linux and macOS). To disable it, set `GOEXPERIMENT=nosystemcrypto`.
+  - Using any of the removed experiments will result in a build error.
+
 ### Go 1.26 (Feb 2026)
 
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
@@ -565,7 +568,7 @@ This list of major changes is intended for quick reference and for access to his
 
 See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com/go/go-1-24-fips-update/) blog post for a summary of the Feb 2025 changes.
 
-- Introduces macOS crypto backend `darwincrypto`.
+- Introduces macOS crypto backend (removed as a separate experiment in Go 1.27, now part of `systemcrypto`).
 - Support `GODEBUG=fips140=on` as an alias for `GOFIPS=1`.
 - `GOFIPS=1` no longer tries to enable FIPS mode on Linux. It will now panic if FIPS mode is not enabled.
 - `GOFIPS=0` no longer tries to disable FIPS mode on Linux. It will now panic if FIPS mode is enabled.
@@ -585,7 +588,7 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
   - Before 1.21, selecting an unsupported backend causes *silent crypto backend fallback* and the built Go app will never use the crypto backend. This is generally not desirable because it can lead to accidental or unclear fallback to Go crypto.
     - The old behavior can be enabled using `GOEXPERIMENT=allowcryptofallback` if necessary, but it is not recommended.
   - Individual crypto calls may still fall back to the Go standard library at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information. (This behavior is unaffected by this change.)
-- Adds [`systemcrypto` experiment alias](#usage-build).
+- Adds [`systemcrypto` experiment](#usage-build).
 - Adds [`requirefips` build tag](#build-option-to-require-fips-mode).
 
 ### Go 1.20.6 and 1.19.11 (Jul 2023)
diff --git a/eng/pipeline/stages/pool-2.yml b/eng/pipeline/stages/pool-2.yml
index d6499f0818e..c560822a1b0 100644
--- a/eng/pipeline/stages/pool-2.yml
+++ b/eng/pipeline/stages/pool-2.yml
@@ -49,7 +49,7 @@ stages:
               image: 1es-ubuntu-2204
               os: linux
             ${{ elseif parameters.public }}:
-              demands: ImageOverride -equals 1es-ubuntu-2004-open
+              demands: ImageOverride -equals build.ubuntu.2204.amd64.open
             ${{ else }}:
               demands: ImageOverride -equals 1es-ubuntu-2204
               os: linux
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 1d71a89fe4e..e737c46b5c9 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,15 +11,11 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
- src/cmd/go/internal/modindex/build.go         | 56 ++++++++++++-
- src/cmd/go/internal/modindex/build_test.go    | 73 ++++++++++++++++
- src/go/build/build.go                         | 56 ++++++++++++-
- src/go/build/buildbackend_test.go             | 84 +++++++++++++++++++
- .../testdata/backendtags_openssl/main.go      |  3 +
- .../testdata/backendtags_openssl/openssl.go   |  3 +
+ src/cmd/go/internal/modindex/build_test.go    | 73 +++++++++++++++++++
+ src/go/build/buildbackend_test.go             | 50 +++++++++++++
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
- src/internal/buildcfg/exp.go                  | 42 ++++++++++
+ src/internal/buildcfg/exp.go                  | 34 +++++++++
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -28,12 +24,10 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_opensslcrypto_on.go      |  8 ++
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
- src/internal/goexperiment/flags.go            | 18 ++++
- 18 files changed, 401 insertions(+), 4 deletions(-)
+ src/internal/goexperiment/flags.go            | 18 +++++
+ 14 files changed, 245 insertions(+)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
- create mode 100644 src/go/build/testdata/backendtags_openssl/main.go
- create mode 100644 src/go/build/testdata/backendtags_openssl/openssl.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
  create mode 100644 src/go/build/testdata/backendtags_system/systemcrypto.go
  create mode 100644 src/internal/goexperiment/exp_cngcrypto_off.go
@@ -45,74 +39,6 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
-diff --git a/src/cmd/go/internal/modindex/build.go b/src/cmd/go/internal/modindex/build.go
-index 053e04dfe599e9..7f8cce76a2b723 100644
---- a/src/cmd/go/internal/modindex/build.go
-+++ b/src/cmd/go/internal/modindex/build.go
-@@ -700,9 +700,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
- 		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
- 	}
- 
-+	const system = "goexperiment.systemcrypto"
-+	const openssl = "goexperiment.opensslcrypto"
-+	const cng = "goexperiment.cngcrypto"
-+	const darwin = "goexperiment.darwincrypto"
-+	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
-+	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
-+	// will work with "go build".
-+	//
-+	// This build constraint logic is set up to accomplish two goals:
-+	//
-+	//   - "goexperiment.systemcrypto" enables the recommended backend for the current GOOS.
-+	//     E.g. "//go:build goexperiment.opensslcrypto" is satisfied by
-+	//     "goexperiment.systemcrypto", but only on Linux.
-+	//
-+	//   - "//go:build goexperiment.systemcrypto" is satisfied by any crypto backend.
-+	//     This simplifies build constraints that would otherwise need to list
-+	//     every single backend.
-+	//
-+	// "name" is a build constraint being evaluated. Here, we set up bools that
-+	// determine what would tags would satisfy this build constraint.
-+	satisfiedByAnyBackend := name == system
-+	satisfiedBySystemCrypto :=
-+		(ctxt.GOOS == "linux" && name == openssl) ||
-+			(ctxt.GOOS == "windows" && name == cng) ||
-+			(ctxt.GOOS == "darwin" && name == darwin)
-+	satisfiedBy := func(tag string) bool {
-+		if name == tag {
-+			return true
-+		}
-+		if satisfiedByAnyBackend {
-+			switch tag {
-+			case openssl, cng, darwin:
-+				return true
-+			}
-+		}
-+		if satisfiedBySystemCrypto && tag == system {
-+			return true
-+		}
-+		return false
-+	}
-+	// Keep track of all the tags that might influence this build constraint.
-+	if allTags != nil {
-+		if satisfiedByAnyBackend {
-+			allTags[openssl] = true
-+			allTags[cng] = true
-+			allTags[darwin] = true
-+		}
-+		if satisfiedBySystemCrypto {
-+			allTags[system] = true
-+		}
-+	}
-+
- 	// other tags
--	return slices.Contains(ctxt.BuildTags, name) || slices.Contains(ctxt.ToolTags, name) ||
--		slices.Contains(ctxt.ReleaseTags, name)
-+	return slices.ContainsFunc(ctxt.BuildTags, satisfiedBy) || slices.ContainsFunc(ctxt.ToolTags, satisfiedBy) ||
-+		slices.ContainsFunc(ctxt.ReleaseTags, satisfiedBy)
- }
- 
- // goodOSArchFile returns false if the name contains a $GOOS or $GOARCH
 diff --git a/src/cmd/go/internal/modindex/build_test.go b/src/cmd/go/internal/modindex/build_test.go
 new file mode 100644
 index 00000000000000..1756c5d027fee0
@@ -192,80 +118,12 @@ index 00000000000000..1756c5d027fee0
 +		})
 +	}
 +}
-diff --git a/src/go/build/build.go b/src/go/build/build.go
-index 68fb8dbbd7ab69..ceba8f5aeadc39 100644
---- a/src/go/build/build.go
-+++ b/src/go/build/build.go
-@@ -1972,9 +1972,61 @@ func (ctxt *Context) matchTag(name string, allTags map[string]bool) bool {
- 		name = "goexperiment.boringcrypto" // boringcrypto is an old name for goexperiment.boringcrypto
- 	}
- 
-+	const system = "goexperiment.systemcrypto"
-+	const openssl = "goexperiment.opensslcrypto"
-+	const cng = "goexperiment.cngcrypto"
-+	const darwin = "goexperiment.darwincrypto"
-+	// Implement the SystemCrypto GOEXPERIMENT logic. This is done here rather
-+	// than during GOEXPERIMENT parsing so "-tags goexperiment.systemcrypto"
-+	// will work with "go build".
-+	//
-+	// This build constraint logic is set up to accomplish two goals:
-+	//
-+	//   - "goexperiment.systemcrypto" enables the recommended backend for the current GOOS.
-+	//     E.g. "//go:build goexperiment.opensslcrypto" is satisfied by
-+	//     "goexperiment.systemcrypto", but only on Linux.
-+	//
-+	//   - "//go:build goexperiment.systemcrypto" is satisfied by any crypto backend.
-+	//     This simplifies build constraints that would otherwise need to list
-+	//     every single backend.
-+	//
-+	// "name" is a build constraint being evaluated. Here, we set up bools that
-+	// determine what would tags would satisfy this build constraint.
-+	satisfiedByAnyBackend := name == system
-+	satisfiedBySystemCrypto :=
-+		(ctxt.GOOS == "linux" && name == openssl) ||
-+			(ctxt.GOOS == "windows" && name == cng) ||
-+			(ctxt.GOOS == "darwin" && name == darwin)
-+	satisfiedBy := func(tag string) bool {
-+		if name == tag {
-+			return true
-+		}
-+		if satisfiedByAnyBackend {
-+			switch tag {
-+			case openssl, cng, darwin:
-+				return true
-+			}
-+		}
-+		if satisfiedBySystemCrypto && tag == system {
-+			return true
-+		}
-+		return false
-+	}
-+	// Keep track of all the tags that might influence this build constraint.
-+	if allTags != nil {
-+		if satisfiedByAnyBackend {
-+			allTags[openssl] = true
-+			allTags[cng] = true
-+			allTags[darwin] = true
-+		}
-+		if satisfiedBySystemCrypto {
-+			allTags[system] = true
-+		}
-+	}
-+
- 	// other tags
--	return slices.Contains(ctxt.BuildTags, name) || slices.Contains(ctxt.ToolTags, name) ||
--		slices.Contains(ctxt.ReleaseTags, name)
-+	return slices.ContainsFunc(ctxt.BuildTags, satisfiedBy) || slices.ContainsFunc(ctxt.ToolTags, satisfiedBy) ||
-+		slices.ContainsFunc(ctxt.ReleaseTags, satisfiedBy)
- }
- 
- // goodOSArchFile returns false if the name contains a $GOOS or $GOARCH
 diff --git a/src/go/build/buildbackend_test.go b/src/go/build/buildbackend_test.go
 new file mode 100644
-index 00000000000000..7d324f1d971eb8
+index 00000000000000..ffb835ce34a2f7
 --- /dev/null
 +++ b/src/go/build/buildbackend_test.go
-@@ -0,0 +1,84 @@
+@@ -0,0 +1,50 @@
 +// Copyright 2023 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -277,7 +135,7 @@ index 00000000000000..7d324f1d971eb8
 +	"testing"
 +)
 +
-+// Check that the crypto backend tag logic works and collects AllTags.
++// Check that the systemcrypto tag works and collects AllTags correctly.
 +// This is based on the TestAllTags test.
 +func TestCryptoBackendAllTags(t *testing.T) {
 +	ctxt := Default
@@ -287,61 +145,27 @@ index 00000000000000..7d324f1d971eb8
 +	ctxt.GOARCH = "amd64"
 +	ctxt.GOOS = "linux"
 +	ctxt.BuildTags = []string{"goexperiment.systemcrypto"}
-+	p, err := ctxt.ImportDir("testdata/backendtags_openssl", 0)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	want := []string{"goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
-+	if !reflect.DeepEqual(p.AllTags, want) {
-+		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
-+	}
-+	wantFiles := []string{"main.go", "openssl.go"}
-+	if !reflect.DeepEqual(p.GoFiles, wantFiles) {
-+		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
-+	}
 +
-+	ctxt.GOARCH = "amd64"
-+	ctxt.GOOS = "windows"
-+	ctxt.BuildTags = []string{"goexperiment.cngcrypto"}
-+	p, err = ctxt.ImportDir("testdata/backendtags_openssl", 0)
++	p, err := ctxt.ImportDir("testdata/backendtags_system", 0)
 +	if err != nil {
 +		t.Fatal(err)
 +	}
-+	// Given the current GOOS (windows), systemcrypto would not affect the
-+	// decision, so we don't want it to be included in AllTags.
-+	want = []string{"goexperiment.opensslcrypto"}
++	want := []string{"goexperiment.systemcrypto"}
 +	if !reflect.DeepEqual(p.AllTags, want) {
 +		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
 +	}
-+	wantFiles = []string{"main.go"}
++	wantFiles := []string{"main.go", "systemcrypto.go"}
 +	if !reflect.DeepEqual(p.GoFiles, wantFiles) {
 +		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
 +	}
 +
-+	// We want systemcrypto when cngcrypto is enabled on Windows.
++	// Test without systemcrypto - only main.go should be included
++	ctxt.BuildTags = []string{}
 +	p, err = ctxt.ImportDir("testdata/backendtags_system", 0)
 +	if err != nil {
 +		t.Fatal(err)
 +	}
-+	want = []string{"goexperiment.cngcrypto", "goexperiment.darwincrypto", "goexperiment.opensslcrypto", "goexperiment.systemcrypto"}
-+	if !reflect.DeepEqual(p.AllTags, want) {
-+		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
-+	}
-+	wantFiles = []string{"main.go", "systemcrypto.go"}
-+	if !reflect.DeepEqual(p.GoFiles, wantFiles) {
-+		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
-+	}
-+
-+	ctxt.GOARCH = "amd64"
-+	ctxt.GOOS = "darwin"
-+	ctxt.BuildTags = []string{"goexperiment.darwincrypto"}
-+	p, err = ctxt.ImportDir("testdata/backendtags_openssl", 0)
-+	if err != nil {
-+		t.Fatal(err)
-+	}
-+	// Given the current GOOS (darwin), systemcrypto would not affect the
-+	// decision, so we don't want it to be included in AllTags.
-+	want = []string{"goexperiment.opensslcrypto"}
++	want = []string{"goexperiment.systemcrypto"}
 +	if !reflect.DeepEqual(p.AllTags, want) {
 +		t.Errorf("AllTags = %v, want %v", p.AllTags, want)
 +	}
@@ -350,24 +174,6 @@ index 00000000000000..7d324f1d971eb8
 +		t.Errorf("GoFiles = %v, want %v", p.GoFiles, wantFiles)
 +	}
 +}
-diff --git a/src/go/build/testdata/backendtags_openssl/main.go b/src/go/build/testdata/backendtags_openssl/main.go
-new file mode 100644
-index 00000000000000..38dd16da61accb
---- /dev/null
-+++ b/src/go/build/testdata/backendtags_openssl/main.go
-@@ -0,0 +1,3 @@
-+package main
-+
-+func main() {}
-diff --git a/src/go/build/testdata/backendtags_openssl/openssl.go b/src/go/build/testdata/backendtags_openssl/openssl.go
-new file mode 100644
-index 00000000000000..dd83f0ed1269bf
---- /dev/null
-+++ b/src/go/build/testdata/backendtags_openssl/openssl.go
-@@ -0,0 +1,3 @@
-+//go:build goexperiment.opensslcrypto
-+
-+package main
 diff --git a/src/go/build/testdata/backendtags_system/main.go b/src/go/build/testdata/backendtags_system/main.go
 new file mode 100644
 index 00000000000000..38dd16da61accb
@@ -387,7 +193,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index aa41986e8e9387..87cd1f4de3246a 100644
+index aa41986e8e9387..d4121357526a84 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -445,33 +251,18 @@ index aa41986e8e9387..87cd1f4de3246a 100644
  	}
  	flags := &ExperimentFlags{
  		Flags:    baseline,
-@@ -125,6 +152,14 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -125,6 +152,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
 +			} else if f == "nosystemcrypto" {
-+				// GOEXPERIMENT=nosystemcrypto disables all system
-+				// crypto experiments.
-+				flags.Flags.OpenSSLCrypto = false
-+				flags.Flags.CNGCrypto = false
-+				flags.Flags.DarwinCrypto = false
++				// GOEXPERIMENT=nosystemcrypto disables system crypto.
 +				flags.Flags.SystemCrypto = false
 +				continue
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -138,6 +173,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		}
- 	}
- 
-+	if flags.OpenSSLCrypto || flags.CNGCrypto || flags.DarwinCrypto {
-+		flags.SystemCrypto = true
-+	}
-+
- 	if regabiAlwaysOn {
- 		flags.RegabiWrappers = true
- 		flags.RegabiArgs = true
-@@ -151,6 +190,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -151,6 +182,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -594,31 +385,31 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 2cfb71578b421b..759af57214e7f4 100644
+index 2cfb71578b421b..a0131d7ef82343 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -59,6 +59,24 @@ type Flags struct {
- 	PreemptibleLoops  bool
+@@ -60,6 +60,24 @@ type Flags struct {
  	StaticLockRanking bool
  	BoringCrypto      bool
-+	OpenSSLCrypto     bool
-+	CNGCrypto         bool
-+	DarwinCrypto      bool
-+
-+	// SystemCrypto enables the OpenSSL, CNG or Darwin crypto experiment depending on
-+	// which one is appropriate on the target GOOS.
-+	//
-+	// If SystemCrypto is enabled but no crypto experiment is appropriate on the
-+	// target GOOS, the build fails.
+ 
++	// SystemCrypto enables the system crypto backend for the target GOOS.
++	// The specific backend used depends on the platform:
++	//   - Linux: OpenSSL
++	//   - Windows: CNG
++	//   - Darwin: CommonCrypto/Security.framework
 +	//
-+	// Like any other GOEXPERIMENT, the SystemCrypto experiment sets the
-+	// "goexperiment.systemcrypto" build tag. However, to make the tag more
-+	// useful in build constraints, if any Go backend is enabled,
-+	// "goexperiment.systemcrypto" is enabled. This means
-+	// "goexperiment.systemcrypto" can be used as a build constraint meaning
-+	// "any crypto backend is enabled", even if GOEXPERIMENT=systemcrypto is not
-+	// being used to build the Go program.
++	// Platform-specific code should use build constraints like:
++	//   //go:build goexperiment.systemcrypto && linux
++	//   //go:build goexperiment.systemcrypto && windows
++	//   //go:build goexperiment.systemcrypto && darwin
 +	SystemCrypto bool
- 
++
++	// OpenSSLCrypto, CNGCrypto, and DarwinCrypto are deprecated.
++	// Use SystemCrypto instead.
++	OpenSSLCrypto bool
++	CNGCrypto     bool
++	DarwinCrypto  bool
++
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
+ 	// The "regabi" GOEXPERIMENT is an alias for all "working"
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 02ff1735216..0397e1cb92e 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -18,7 +18,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 241 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 229 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -50,9 +50,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
- src/internal/buildcfg/exp.go                  |  74 +++
+ src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2749 insertions(+), 15 deletions(-)
+ 43 files changed, 2710 insertions(+), 15 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -245,7 +245,7 @@ index e4250e12de8975..feef0080cb12d6 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 48c3aa5efdb008..ad050c065e463f 100644
+index 4984f930b932c0..b651104235adcc 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -281,19 +281,19 @@ index 48c3aa5efdb008..ad050c065e463f 100644
  	// Test ios/amd64 for the iOS simulator.
 -	if goos == "darwin" && goarch == "amd64" && t.cgoEnabled {
 +	if goos == "darwin" && goarch == "amd64" && t.cgoEnabled &&
-+		// IOS is not supported with darwincrypto.
-+		!(strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
++		// IOS is not supported with systemcrypto.
++		!strings.Contains(goexperiment, "systemcrypto") {
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -1005,7 +1009,9 @@ func (t *tester) registerTests() {
+@@ -1021,7 +1025,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
 -	if goos != "android" && !t.iOS() {
 +	// cmd/internal/testdir uses -buildmode=exe on darwin,
-+	// which is not supported by darwincrypto.
-+	if goos != "android" && !t.iOS() && !(strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "darwincrypto")) {
++	// which is not supported by systemcrypto.
++	if goos != "android" && !t.iOS() && !strings.Contains(goexperiment, "systemcrypto") {
  		// Only start multiple test dir shards on builders,
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
@@ -411,10 +411,10 @@ index 92e8a803105f8d..95d47b625c28a7 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..fcbbe6c86a2180
+index 00000000000000..306133fef6d65f
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,241 @@
+@@ -0,0 +1,229 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -426,7 +426,6 @@ index 00000000000000..fcbbe6c86a2180
 +	"internal/testenv"
 +	"os"
 +	"path/filepath"
-+	"runtime"
 +	"slices"
 +	"strings"
 +	"testing"
@@ -608,17 +607,6 @@ index 00000000000000..fcbbe6c86a2180
 +		{true, []string{"GOEXPERIMENT=systemcrypto"}},
 +		{true, []string{"GOEXPERIMENT=nosystemcrypto,systemcrypto"}},
 +	}
-+	switch runtime.GOOS {
-+	case "linux":
-+		tests = append(tests, testCase{true, []string{"GOEXPERIMENT=opensslcrypto"}})
-+	case "windows":
-+		switch runtime.GOARCH {
-+		case "amd64", "arm64":
-+			tests = append(tests, testCase{true, []string{"GOEXPERIMENT=cngcrypto"}})
-+		}
-+	case "darwin":
-+		tests = append(tests, testCase{true, []string{"GOEXPERIMENT=darwincrypto"}})
-+	}
 +	// Duplicate each test with MS_GO_NOSYSTEMCRYPTO=1, which should always result
 +	// in systemcrypto being disabled.
 +	n := len(tests)
@@ -680,7 +668,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index c7060898778c88..47de9e25baa759 100644
+index c7060898778c88..4d2bd8a87127ee 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -688,7 +676,7 @@ index c7060898778c88..47de9e25baa759 100644
  	tmpDir = t.TempDir()
  
 +	if slices.ContainsFunc(strings.Split(goExperiment, ","), func(s string) bool {
-+		return s == "systemcrypto" || s == "opensslcrypto" || s == "cngcrypto" || s == "darwincrypto"
++		return s == "systemcrypto"
 +	}) {
 +		// Codegen tests cross-compile to platforms that do not support system crypto.
 +		*allCodegen = false
@@ -711,7 +699,7 @@ index a4b3a0422f2f41..0140c385e47991 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 541733b8e615f0..e45f1286595f4f 100644
+index 19607c324ceaef..50439e47260a99 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -830,7 +818,7 @@ index 00000000000000..20251a290dc2e0
 +}
 diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
 new file mode 100644
-index 00000000000000..92623031fd87d0
+index 00000000000000..9331c34d402ba2
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big_cng.go
 @@ -0,0 +1,12 @@
@@ -838,7 +826,7 @@ index 00000000000000..92623031fd87d0
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.cngcrypto
++//go:build goexperiment.systemcrypto && windows
 +
 +package bbig
 +
@@ -848,7 +836,7 @@ index 00000000000000..92623031fd87d0
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
 new file mode 100644
-index 00000000000000..4ff10194a06e86
+index 00000000000000..e8884576d05427
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big_darwin.go
 @@ -0,0 +1,12 @@
@@ -856,7 +844,7 @@ index 00000000000000..4ff10194a06e86
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto
++//go:build goexperiment.systemcrypto && darwin
 +
 +package bbig
 +
@@ -866,7 +854,7 @@ index 00000000000000..4ff10194a06e86
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/bbig/big_openssl.go b/src/crypto/internal/backend/bbig/big_openssl.go
 new file mode 100644
-index 00000000000000..e6695dd66b1d02
+index 00000000000000..51396c3db1a871
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big_openssl.go
 @@ -0,0 +1,12 @@
@@ -874,7 +862,7 @@ index 00000000000000..e6695dd66b1d02
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto
++//go:build goexperiment.systemcrypto && linux
 +
 +package bbig
 +
@@ -884,7 +872,7 @@ index 00000000000000..e6695dd66b1d02
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..0a53f791c34ceb
+index 00000000000000..919f3482dcb3d6
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
 @@ -0,0 +1,425 @@
@@ -892,7 +880,7 @@ index 00000000000000..0a53f791c34ceb
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.cngcrypto && windows
++//go:build goexperiment.systemcrypto && windows
 +
 +// Package cng provides access to CNGCrypto implementation functions.
 +// Check the variable Enabled to find out whether CNGCrypto is available.
@@ -1367,7 +1355,7 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..80b6e9d9f5ec09
+index 00000000000000..6d0aac8021aeb0
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
 @@ -0,0 +1,430 @@
@@ -1375,7 +1363,7 @@ index 00000000000000..80b6e9d9f5ec09
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto && darwin
++//go:build goexperiment.systemcrypto && darwin
 +
 +// Package darwin provides access to DarwinCrypto implementation functions.
 +// Check the variable Enabled to find out whether DarwinCrypto is available.
@@ -1803,7 +1791,7 @@ index 00000000000000..80b6e9d9f5ec09
 +}
 diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
 new file mode 100644
-index 00000000000000..e4a1ddeeb7dc09
+index 00000000000000..d74cffe462b234
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/cng.go
 @@ -0,0 +1,35 @@
@@ -1811,7 +1799,7 @@ index 00000000000000..e4a1ddeeb7dc09
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.cngcrypto
++//go:build goexperiment.systemcrypto && windows
 +
 +package fips140
 +
@@ -1844,7 +1832,7 @@ index 00000000000000..e4a1ddeeb7dc09
 +}
 diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
 new file mode 100644
-index 00000000000000..8a2efe2346e84c
+index 00000000000000..be7c416b531e58
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/darwin.go
 @@ -0,0 +1,13 @@
@@ -1852,7 +1840,7 @@ index 00000000000000..8a2efe2346e84c
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto
++//go:build goexperiment.systemcrypto && darwin
 +
 +package fips140
 +
@@ -1990,7 +1978,7 @@ index 00000000000000..289d6594eac54b
 +}
 diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
 new file mode 100644
-index 00000000000000..f5de8e094d3d87
+index 00000000000000..95c93093d0b707
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/openssl.go
 @@ -0,0 +1,59 @@
@@ -1998,7 +1986,7 @@ index 00000000000000..f5de8e094d3d87
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto
++//go:build goexperiment.systemcrypto && linux
 +
 +package fips140
 +
@@ -2106,7 +2094,7 @@ index 00000000000000..d3d39fd77f98db
 +const isSkipFIPSCheck = true
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 new file mode 100644
-index 00000000000000..51e80d3332f816
+index 00000000000000..ef97d994841717
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
 @@ -0,0 +1,68 @@
@@ -2114,7 +2102,7 @@ index 00000000000000..51e80d3332f816
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto
++//go:build goexperiment.systemcrypto && linux
 +
 +// opensslsetup is a package that initializes the OpenSSL library.
 +// It doesn't export any symbol, but blank importing it has the
@@ -2180,7 +2168,7 @@ index 00000000000000..51e80d3332f816
 +}
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
 new file mode 100644
-index 00000000000000..e9f67449710d65
+index 00000000000000..7276cc2b871b85
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
 @@ -0,0 +1,92 @@
@@ -2188,7 +2176,7 @@ index 00000000000000..e9f67449710d65
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && cgo
++//go:build goexperiment.systemcrypto && linux && cgo
 +
 +package opensslsetup
 +
@@ -2278,7 +2266,7 @@ index 00000000000000..e9f67449710d65
 +}
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/stub.go b/src/crypto/internal/backend/internal/opensslsetup/stub.go
 new file mode 100644
-index 00000000000000..3b92bfc5fbabf6
+index 00000000000000..19fd29e19e7b96
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/stub.go
 @@ -0,0 +1,8 @@
@@ -2287,7 +2275,7 @@ index 00000000000000..3b92bfc5fbabf6
 +// license that can be found in the LICENSE file.
 +
 +// Placeholder to allow the opensslsetup package to be imported
-+// without cgo enabled or without goexperiment.opensslcrypto.
++// without cgo enabled or without goexperiment.systemcrypto on linux.
 +
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
@@ -2673,7 +2661,7 @@ index 00000000000000..5e16f39dc107c7
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..a7437047f91696
+index 00000000000000..6121670c0e3659
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
 @@ -0,0 +1,424 @@
@@ -2681,7 +2669,7 @@ index 00000000000000..a7437047f91696
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && linux
++//go:build goexperiment.systemcrypto && linux
 +
 +// Package openssl provides access to OpenSSLCrypto implementation functions.
 +// Check the variable Enabled to find out whether OpenSSLCrypto is available.
@@ -3119,7 +3107,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..1d3d180ff70b75
+index 00000000000000..d659272bf6ca13
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,18 @@
@@ -3127,7 +3115,7 @@ index 00000000000000..1d3d180ff70b75
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.opensslcrypto && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64)
++//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64)
 +
 +package crypto
 +
@@ -3198,14 +3186,10 @@ index a0436aa1901b7e..ad2c8fa13fd07a 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 87cd1f4de3246a..c8d7fb4cffba66 100644
+index d4121357526a84..c082274fcb6838 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
-@@ -5,12 +5,15 @@
- package buildcfg
- 
- import (
-+	"errors"
+@@ -8,9 +8,11 @@ import (
  	"fmt"
  	"os"
  	"reflect"
@@ -3217,65 +3201,46 @@ index 87cd1f4de3246a..c8d7fb4cffba66 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -193,6 +196,57 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -161,6 +163,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 			if strings.HasPrefix(f, "no") {
+ 				f, val = f[2:], false
+ 			}
++			// Check for deprecated per-platform crypto experiments.
++			switch f {
++			case "opensslcrypto", "cngcrypto", "darwincrypto":
++				switch {
++				case goos == "darwin" || goos == "linux" || (goos == "windows" && goarch != "386"):
++					return nil, fmt.Errorf("systemcrypto is enabled by default, GOEXPERIMENT %s is not necessary", f)
++				default:
++					return nil, fmt.Errorf("GOEXPERIMENT %s has been removed, use GOEXPERIMENT=systemcrypto instead", f)
++				}
++			}
+ 			set, ok := names[f]
+ 			if !ok {
+ 				return nil, fmt.Errorf("unknown GOEXPERIMENT %s", f)
+@@ -185,6 +197,21 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
-+	// Check crypto backend conflicts.
-+	type platform struct {
-+		goos   string
-+		goarch []string // if nil or empty, enabled on all architectures
-+	}
-+	var backends = []struct {
-+		name     string
-+		enabled  bool
-+		platform []platform
-+	}{
-+		{"systemcrypto", flags.SystemCrypto, []platform{
-+			{"linux", nil},
-+			{"windows", []string{"amd64", "arm64"}},
-+			{"darwin", nil},
-+		}},
-+		{"opensslcrypto", flags.OpenSSLCrypto, []platform{{"linux", nil}}},
-+		{"cngcrypto", flags.CNGCrypto, []platform{{"windows", []string{"amd64", "arm64"}}}},
-+		{"darwincrypto", flags.DarwinCrypto, []platform{{"darwin", nil}}},
-+	}
-+	var errs []string
-+	for i, backend := range backends {
-+		if !backend.enabled {
-+			continue
-+		}
-+		// Don't report an error if the build mode is not supported,
-+		// since that is not a problem with the experiment configuration.
-+		if goplatform.BuildModeSupported("gc", "default", goos, goarch) {
-+			if !slices.ContainsFunc(backend.platform, func(p platform) bool { return p.goos == goos }) {
-+				errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s is not supported on %s", backend.name, goos))
-+			} else {
-+				for _, platform := range backend.platform {
-+					if platform.goos == goos && (len(platform.goarch) > 0 && !slices.Contains(platform.goarch, goarch)) {
-+						errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s is not supported on %s/%s", backend.name, goos, goarch))
-+					}
-+				}
-+			}
++	// Check systemcrypto platform support.
++	if flags.SystemCrypto && goplatform.BuildModeSupported("gc", "default", goos, goarch) {
++		var supported bool
++		switch goos {
++		case "linux":
++			supported = true
++		case "windows":
++			supported = goarch == "amd64" || goarch == "arm64"
++		case "darwin":
++			supported = true
 +		}
-+		if backend.name != "systemcrypto" { // systemcrypto can coexist with other valid backends
-+			for _, backend2 := range backends[i+1:] {
-+				if !backend2.enabled || backend2.name == "systemcrypto" {
-+					continue
-+				}
-+				errs = append(errs, fmt.Sprintf("GOEXPERIMENT %s and %s are both enabled, but they are mutually exclusive",
-+					backend.name, backend2.name))
-+			}
++		if !supported {
++			return nil, fmt.Errorf("GOEXPERIMENT systemcrypto is not supported on %s/%s\n\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips", goos, goarch)
 +		}
-+	}
-+	if len(errs) > 0 {
-+		errs = append(errs, "For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips")
-+		return nil, errors.New(strings.Join(errs, "\n\t"))
 +	}
  	return flags, nil
  }
  
-@@ -202,6 +256,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -194,6 +221,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 33fd8651086..2ad21926757 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -8,7 +8,7 @@ Subject: [PATCH] Use crypto backends
  src/cmd/dist/test.go                          |   5 +-
  src/cmd/go/go_boring_test.go                  |   6 +-
  src/cmd/go/script_test.go                     |   2 +
- src/cmd/go/testdata/script/darwin_no_cgo.txt  |   2 +
+ src/cmd/go/testdata/script/darwin_no_cgo.txt  |   1 +
  .../go/testdata/script/gopath_std_vendor.txt  |   9 +
  src/cmd/link/internal/ld/config.go            |   8 +
  src/cmd/link/internal/ld/lib.go               |   6 +
@@ -33,7 +33,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/ecdsa/notboring.go                 |   4 +-
  src/crypto/ed25519/boring.go                  |  71 +++++++
  src/crypto/ed25519/ed25519.go                 |  70 +++++++
- src/crypto/ed25519/ed25519_test.go            |  13 +-
+ src/crypto/ed25519/ed25519_test.go            |  14 +-
  src/crypto/ed25519/notboring.go               |  16 ++
  src/crypto/fips140/enforcement_test.go        |   4 +
  src/crypto/fips140/fips140.go                 |   3 +-
@@ -61,14 +61,14 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rand/rand.go                       |   2 +-
  src/crypto/rand/rand_test.go                  |   9 +-
  src/crypto/rc4/rc4.go                         |  18 ++
- src/crypto/rsa/boring.go                      |  12 +-
+ src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/darwin.go                      |  71 +++++++
+ src/crypto/rsa/darwin.go                      |  71 +++
  src/crypto/rsa/fips.go                        |  22 +-
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
- src/crypto/rsa/pss_test.go                    |  13 +-
+ src/crypto/rsa/pss_test.go                    |  14 +-
  src/crypto/rsa/rsa.go                         |  16 +-
  src/crypto/rsa/rsa_test.go                    |   7 +-
  src/crypto/sha1/sha1.go                       |   8 +-
@@ -100,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1504 insertions(+), 180 deletions(-)
+ 96 files changed, 1505 insertions(+), 179 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -126,7 +126,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 3ac500b85e6988..027780a74a7fd3 100644
+index b651104235adcc..a54fc6124b1e0e 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -138,12 +138,12 @@ index 3ac500b85e6988..027780a74a7fd3 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1380,12 +1380,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1388,12 +1388,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
 -			if staticCheck.skip == nil && goos == "linux" && strings.Contains(goexperiment, "boringcrypto") {
-+			if staticCheck.skip == nil && goos == "linux" && (strings.Contains(goexperiment, "systemcrypto") || strings.Contains(goexperiment, "opensslcrypto")) {
++			if staticCheck.skip == nil && goos == "linux" && strings.Contains(goexperiment, "systemcrypto") {
  				staticCheck.skip = func(*distTest) (string, bool) {
  					return "skipping static linking check on Linux when using boringcrypto to avoid C linker warning about getaddrinfo", true
  				}
@@ -186,14 +186,13 @@ index 390a36723787f4..0576ea8add72af 100644
  
  // updateSum runs 'go mod tidy', 'go list -mod=mod -m all', or
 diff --git a/src/cmd/go/testdata/script/darwin_no_cgo.txt b/src/cmd/go/testdata/script/darwin_no_cgo.txt
-index fa445925b7c374..e36ac86fcaa58d 100644
+index fa445925b7c374..e4b9714df817ea 100644
 --- a/src/cmd/go/testdata/script/darwin_no_cgo.txt
 +++ b/src/cmd/go/testdata/script/darwin_no_cgo.txt
-@@ -4,6 +4,8 @@
+@@ -4,6 +4,7 @@
  # of cmd/go, which imports approximately everything
  # in std (certainly everything relevant).
  [!GOOS:darwin] skip
-+[GOEXPERIMENT:darwincrypto] skip
 +[GOEXPERIMENT:systemcrypto] skip
  go list -deps cmd/go
  ! stdout runtime/cgo
@@ -244,7 +243,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index bcad5add4abe19..793932e52f8f0a 100644
+index 3799aafac769fa..c6a9a270c087bb 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,12 @@ var hostobj []Hostobj
@@ -1319,10 +1318,10 @@ index a0263638ef19fe..00752fce1bae07 100644
  	default:
  		return errors.New("ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)")
 diff --git a/src/crypto/ed25519/ed25519_test.go b/src/crypto/ed25519/ed25519_test.go
-index c8a23e3246a949..393a1e40ce704e 100644
+index c8a23e3246a949..02dc683fa1a1b4 100644
 --- a/src/crypto/ed25519/ed25519_test.go
 +++ b/src/crypto/ed25519/ed25519_test.go
-@@ -9,10 +9,12 @@ import (
+@@ -9,12 +9,15 @@ import (
  	"bytes"
  	"compress/gzip"
  	"crypto"
@@ -1334,17 +1333,20 @@ index c8a23e3246a949..393a1e40ce704e 100644
 +	"internal/goexperiment"
  	"log"
  	"os"
++	"runtime"
  	"strings"
-@@ -316,7 +318,7 @@ func TestGolden(t *testing.T) {
+ 	"testing"
+ )
+@@ -316,7 +319,7 @@ func TestGolden(t *testing.T) {
  		copy(priv[32:], pubKey)
  
  		sig2 := Sign(priv[:], msg)
 -		if !bytes.Equal(sig, sig2[:]) {
-+		if !bytes.Equal(sig, sig2[:]) && !goexperiment.DarwinCrypto {
++		if !bytes.Equal(sig, sig2[:]) && !(goexperiment.SystemCrypto && runtime.GOOS == "darwin") {
  			t.Errorf("different signature result on line %d: %x vs %x", lineNo, sig, sig2)
  		}
  
-@@ -371,6 +373,11 @@ func TestAllocations(t *testing.T) {
+@@ -373,6 +376,11 @@ func TestAllocations(t *testing.T) {
  	cryptotest.SkipTestAllocations(t)
  	seed := make([]byte, SeedSize)
  	priv := NewKeyFromSeed(seed)
@@ -1356,7 +1358,7 @@ index c8a23e3246a949..393a1e40ce704e 100644
  	if allocs := testing.AllocsPerRun(100, func() {
  		message := []byte("Hello, world!")
  		pub := priv.Public().(PublicKey)
-@@ -378,8 +385,8 @@ func TestAllocations(t *testing.T) {
+@@ -380,8 +386,8 @@ func TestAllocations(t *testing.T) {
  		if !Verify(pub, message, signature) {
  			t.Fatal("signature didn't verify")
  		}
@@ -2296,10 +2298,10 @@ index c4d2b0d382e7fc..ba8dc141117e59 100644
  		return
  	}
 diff --git a/src/crypto/rsa/boring.go b/src/crypto/rsa/boring.go
-index b9f9d3154f2589..ba66dd33a1f9f3 100644
+index b9f9d3154f2589..27bdf13d2268ce 100644
 --- a/src/crypto/rsa/boring.go
 +++ b/src/crypto/rsa/boring.go
-@@ -2,14 +2,15 @@
+@@ -2,15 +2,17 @@
  // Use of this source code is governed by a BSD-style
  // license that can be found in the LICENSE file.
  
@@ -2316,14 +2318,16 @@ index b9f9d3154f2589..ba66dd33a1f9f3 100644
  	"crypto/internal/boring/bcache"
 +	"internal/goexperiment"
  	"math/big"
++	"runtime"
  )
  
-@@ -62,6 +63,11 @@ type boringPriv struct {
+ // Cached conversions from Go PublicKey/PrivateKey to BoringCrypto.
+@@ -62,6 +64,11 @@ type boringPriv struct {
  }
  
  func boringPrivateKey(priv *PrivateKey) (*boring.PrivateKeyRSA, error) {
 +	// CommonCrypto requires the CRT values to be precomputed if nil
-+	if goexperiment.DarwinCrypto && (priv.Precomputed.Dp == nil || priv.Precomputed.Dq == nil || priv.Precomputed.Qinv == nil) {
++	if goexperiment.SystemCrypto && runtime.GOOS == "darwin" && (priv.Precomputed.Dp == nil || priv.Precomputed.Dq == nil || priv.Precomputed.Qinv == nil) {
 +		priv.Precompute()
 +		priv.Precomputed.fips = nil
 +	}
@@ -2345,7 +2349,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/darwin.go b/src/crypto/rsa/darwin.go
 new file mode 100644
-index 00000000000000..1b9c63523ee90e
+index 00000000000000..bff8ac449c9a3b
 --- /dev/null
 +++ b/src/crypto/rsa/darwin.go
 @@ -0,0 +1,71 @@
@@ -2353,7 +2357,7 @@ index 00000000000000..1b9c63523ee90e
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.darwincrypto
++//go:build goexperiment.systemcrypto && darwin
 +
 +package rsa
 +
@@ -2594,10 +2598,10 @@ index c65552cd93526a..910416abe842f5 100644
  	ciphertext := decodeBase64("fjOVdirUzFoLlukv80dBllMLjXythIf22feqPrNo0YoIjzyzyoMFiLjAc/Y4krkeZ11XFThIrEvw\nkRiZcCq5ng==")
  	_, err := DecryptPKCS1v15(nil, test512Key, ciphertext)
 diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
-index e03f4ab06603c6..cd44f3af23b0d4 100644
+index e03f4ab06603c6..a9d9daba2fd6ce 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -8,12 +8,14 @@ import (
+@@ -8,6 +8,7 @@ import (
  	"bufio"
  	"compress/bzip2"
  	"crypto"
@@ -2605,24 +2609,28 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  	"crypto/internal/fips140"
  	"crypto/rand"
  	. "crypto/rsa"
+@@ -14,8 +15,10 @@ import (
  	"crypto/sha256"
  	"crypto/sha512"
  	"encoding/hex"
 +	"internal/goexperiment"
  	"math/big"
  	"os"
++	"runtime"
  	"strconv"
-@@ -104,6 +106,9 @@ func TestPSSGolden(t *testing.T) {
+ 	"strings"
+ 	"testing"
+@@ -104,6 +107,9 @@ func TestPSSGolden(t *testing.T) {
  			hashed = h.Sum(hashed[:0])
  
  			if err := VerifyPSS(key, hash, hashed, sig, opts); err != nil {
-+				if goexperiment.DarwinCrypto && key.N.BitLen() == 1025 {
++				if goexperiment.SystemCrypto && runtime.GOOS == "darwin" && key.N.BitLen() == 1025 {
 +					t.Skip("CommonCrypto doesn't support golden test entries with this key size")
 +				}
  				t.Error(err)
  			}
  		default:
-@@ -180,6 +185,10 @@ func TestPSSSigning(t *testing.T) {
+@@ -185,6 +191,10 @@ func TestPSSSigning(t *testing.T) {
  			continue
  		}
  
@@ -2633,7 +2641,7 @@ index e03f4ab06603c6..cd44f3af23b0d4 100644
  		opts.SaltLength = test.verifySaltLength
  		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
  		good := test.good
-@@ -241,7 +250,9 @@ func fromHex(hexStr string) []byte {
+@@ -246,7 +256,9 @@ func fromHex(hexStr string) []byte {
  
  func TestInvalidPSSSaltLength(t *testing.T) {
  	t.Setenv("GODEBUG", "rsa1024min=0")
@@ -4090,7 +4098,7 @@ index 2a774100a8ec67..a0cabb42b19484 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 2746ad8783ab22..448beb50aa7b74 100644
+index 2746ad8783ab22..c39f32c8fba6fc 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
@@ -4105,14 +4113,16 @@ index 2746ad8783ab22..448beb50aa7b74 100644
  		t.Skipf("skipping test on %q", runtime.GOOS)
  	}
  
-+	if goexperiment.OpenSSLCrypto {
++	if goexperiment.SystemCrypto && runtime.GOOS == "linux" {
 +		// OpenSSL default behavior is to maintain open FDs to any
 +		// random devices that get used by the random number library.
 +		// Since those FDs are not marked FD_CLOEXEC or O_CLOEXEC,
 +		// they also get inherited by children.
-+		t.Skip("skipping test because test was run with OpenSSLCrypto")
++		t.Skip("skipping test because test was run with systemcrypto on linux (OpenSSL)")
 +	}
 +
  	// Force network usage, to verify the epoll (or whatever) fd
  	// doesn't leak to the child,
  	ln, err := net.Listen("tcp", "127.0.0.1:0")
+ 	if err != nil {
+ 		t.Fatal(err)

From b6cdc526c6846d564daf67fffcd87dad1e1101e7 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 12 Feb 2026 15:01:54 +0100
Subject: [PATCH 719/887] upgrade and don't pin go infra images

---
 eng/pipeline/pr-outerloop-pipeline.yml      | 8 ++++----
 eng/pipeline/pr-pipeline.yml                | 8 ++++----
 eng/pipeline/rolling-innerloop-pipeline.yml | 8 ++++----
 eng/pipeline/rolling-pipeline.yml           | 8 ++++----
 4 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index bcac1eb3cf4..39003c269c5 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -24,13 +24,13 @@ variables:
 resources:
   containers:
     - container: ubuntu2204
-      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
+      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 915a337b91b..8fdc2ed9bbf 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -21,13 +21,13 @@ resources:
     # (container: ... image: ...) is not the same as the one 1ES PT uses, so updating these requires
     # separate changes.
     - container: ubuntu2204
-      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
+      image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
     - container: mariner2
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default
     - container: mariner2arm64
-      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
+      image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
     - container: azurelinux3
-      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
+      image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
 
 stages:
   - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 6c88808fa37..1f7b0232784 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -44,13 +44,13 @@ extends:
         suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
     containers:
       ubuntu2204:
-        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
+        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
 
     stages:
       - template: stages/go-builder-matrix-stages.yml
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index 5f5c8780c92..fdb49aeb640 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -37,13 +37,13 @@ extends:
         suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
     containers:
       ubuntu2204:
-        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default-20241026145220-02e8663
+        image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
       mariner2:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default-20241029143752-6049f85
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default
       mariner2arm64:
-        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default-20241029143304-6049f85
+        image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
       azurelinux3:
-        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default-20241210101540-a3a1203
+        image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
 
     stages:
       - template: stages/go-builder-matrix-stages.yml

From 8ab855911b68bb12dd7745b482d3c66d6ed7c9c7 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 13 Feb 2026 07:32:32 +0100
Subject: [PATCH 720/887] upgrade openssl

---
 .../0001-Vendor-external-dependencies.patch   | 56 +++++++++----------
 1 file changed, 26 insertions(+), 30 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index b34cb38c3f2..2e0426d1fa3 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -126,7 +126,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/zossl.go         |   67 +
  .../openssl/v2/internal/ossl/zossl.h          |  363 +++
  .../openssl/v2/internal/ossl/zossl_cgo.go     | 1368 ++++++++++
- .../v2/internal/ossl/zossl_cgo_go124.go       |   41 +
+ .../v2/internal/ossl/zossl_cgo_go124.go       |   45 +
  .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2390 +++++++++++++++++
  .../golang-fips/openssl/v2/mlkem.go           |  371 +++
  .../golang-fips/openssl/v2/openssl.go         |  253 ++
@@ -143,7 +143,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/params.go          |  184 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
  .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
- .../openssl/v2/providersymcrypt.go            |  338 +++
+ .../openssl/v2/providersymcrypt.go            |  330 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
  .../github.com/golang-fips/openssl/v2/rsa.go  |  714 +++++
@@ -268,7 +268,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 260 files changed, 33278 insertions(+), 7 deletions(-)
+ 260 files changed, 33274 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2195,7 +2195,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..c5ad7ca640eeb6 100644
+index d6c515017a7009..922ff660ba1a10 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2204,17 +2204,17 @@ index d6c515017a7009..c5ad7ca640eeb6 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..641e90d4ca1db2 100644
+index 2223d2a7c231c1..7fa45836c2c67e 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f h1:1niOn99Euubk0wtGY3dJvgFQh0+KOG3eMtg4AkbjOlg=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c h1:p0QTwdjwbAVb2M+qYggEEeVLGW/lHYx623pr16NBHHQ=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
@@ -7969,12 +7969,12 @@ index 00000000000000..7927deb2785263
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 new file mode 100644
-index 00000000000000..57250706a043f1
+index 00000000000000..0a5d657971cba1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 @@ -0,0 +1,3 @@
 +{
-+  "commit_hash": "49bede11a66085d4400e4a257e4c77c9604c791a"
++  "commit_hash": "071d22a94b4bc442118b3b0927274dd5ae4d7551"
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
 new file mode 100644
@@ -8929,14 +8929,14 @@ index 00000000000000..ddd01434d04cda
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
 new file mode 100644
-index 00000000000000..b9b5016a611382
+index 00000000000000..586ccaf91df1a4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
 @@ -0,0 +1,227 @@
 +// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2024 The Ebitengine Authors
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && linux
++//go:build !cgo && (darwin || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -11375,7 +11375,7 @@ index 00000000000000..9d38464e9fb964
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..3ce5eb8435c9fd
+index 00000000000000..d926c6adf17dda
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 @@ -0,0 +1,434 @@
@@ -11597,8 +11597,8 @@ index 00000000000000..3ce5eb8435c9fd
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
 +const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
++int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
 +int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
@@ -15969,10 +15969,10 @@ index 00000000000000..059562f35df7b3
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
 new file mode 100644
-index 00000000000000..7ced663df8a562
+index 00000000000000..677ef1d157a670
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-@@ -0,0 +1,41 @@
+@@ -0,0 +1,45 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build go1.24 && !cmd_go_bootstrap
@@ -16004,6 +16004,10 @@ index 00000000000000..7ced663df8a562
 +#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
 +#cgo noescape _mkcgo_EVP_EncryptUpdate
 +#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_MD_CTX_get_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
++#cgo noescape _mkcgo_EVP_MD_CTX_set_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
 +#cgo noescape _mkcgo_EVP_PKEY_derive
 +#cgo nocallback _mkcgo_EVP_PKEY_derive
 +#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
@@ -20181,10 +20185,10 @@ index 00000000000000..e366c7a7a833fa
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
 new file mode 100644
-index 00000000000000..cc6e108e948727
+index 00000000000000..bdba34f1378e9c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
-@@ -0,0 +1,338 @@
+@@ -0,0 +1,330 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -20192,7 +20196,6 @@ index 00000000000000..cc6e108e948727
 +import (
 +	"crypto"
 +	"errors"
-+	"runtime"
 +	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
@@ -20380,9 +20383,6 @@ index 00000000000000..cc6e108e948727
 +func symCryptHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
 +	size, typ := symCryptHashStateInfo(ch)
 +	state := make([]byte, size, _SYMCRYPT_SHA512_STATE_EXPORT_SIZE) // 512 is the largest size
-+	var pinner runtime.Pinner
-+	pinner.Pin(&state[0])
-+	defer pinner.Unpin()
 +	params := [2]ossl.OSSL_PARAM{
 +		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), unsafe.Pointer(&state[0]), len(state)),
 +		ossl.OSSL_PARAM_construct_end(),
@@ -20458,10 +20458,6 @@ index 00000000000000..cc6e108e948727
 +		panic("unsupported hash " + ch.String())
 +	}
 +	var checksum int32 = 1
-+	var pinner runtime.Pinner
-+	pinner.Pin(blobPtr)
-+	pinner.Pin(&checksum)
-+	defer pinner.Unpin()
 +	params := [3]ossl.OSSL_PARAM{
 +		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), blobPtr, int(hdr.size)),
 +		ossl.OSSL_PARAM_construct_int32(_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr(), &checksum),
@@ -37426,11 +37422,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..e2d4b5953ee26a 100644
+index 48967bc9ee3bd2..a0d2092e08e8c4 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260203103936-d61ccf20b60f
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig

From e61df24a670bebea498b95b69119f5bdaf6a29b3 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 13 Feb 2026 16:20:15 +0100
Subject: [PATCH 721/887] fix TestLSAN

---
 patches/0014-fix-TestLSAN.patch | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 patches/0014-fix-TestLSAN.patch

diff --git a/patches/0014-fix-TestLSAN.patch b/patches/0014-fix-TestLSAN.patch
new file mode 100644
index 00000000000..efe9c89591a
--- /dev/null
+++ b/patches/0014-fix-TestLSAN.patch
@@ -0,0 +1,22 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 13 Feb 2026 16:12:40 +0100
+Subject: [PATCH] fix TestLSAN
+
+---
+ src/cmd/cgo/internal/testsanitizers/cc_test.go | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/cmd/cgo/internal/testsanitizers/cc_test.go b/src/cmd/cgo/internal/testsanitizers/cc_test.go
+index f2239fb9cffc2e..406f81c7bc510d 100644
+--- a/src/cmd/cgo/internal/testsanitizers/cc_test.go
++++ b/src/cmd/cgo/internal/testsanitizers/cc_test.go
+@@ -502,7 +502,7 @@ func (c *config) checkCSanitizer() (skip bool, err error) {
+ 		return false, nil
+ 	}
+ 
+-	if out, err := exec.Command(dst).CombinedOutput(); err != nil {
++	if out, err := hangProneCmd(dst).CombinedOutput(); err != nil {
+ 		if os.IsNotExist(err) {
+ 			return true, fmt.Errorf("%#q failed to produce executable: %v", cmd, err)
+ 		}

From 2d0aeb5ed97a9a86023fe0dc2db60f321fbf8c26 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 13 Feb 2026 16:59:44 +0100
Subject: [PATCH 722/887] skip TestLSAN

---
 patches/0014-fix-TestLSAN.patch  | 22 ----------------------
 patches/0014-skip-TestLSAN.patch | 21 +++++++++++++++++++++
 2 files changed, 21 insertions(+), 22 deletions(-)
 delete mode 100644 patches/0014-fix-TestLSAN.patch
 create mode 100644 patches/0014-skip-TestLSAN.patch

diff --git a/patches/0014-fix-TestLSAN.patch b/patches/0014-fix-TestLSAN.patch
deleted file mode 100644
index efe9c89591a..00000000000
--- a/patches/0014-fix-TestLSAN.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 13 Feb 2026 16:12:40 +0100
-Subject: [PATCH] fix TestLSAN
-
----
- src/cmd/cgo/internal/testsanitizers/cc_test.go | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/cmd/cgo/internal/testsanitizers/cc_test.go b/src/cmd/cgo/internal/testsanitizers/cc_test.go
-index f2239fb9cffc2e..406f81c7bc510d 100644
---- a/src/cmd/cgo/internal/testsanitizers/cc_test.go
-+++ b/src/cmd/cgo/internal/testsanitizers/cc_test.go
-@@ -502,7 +502,7 @@ func (c *config) checkCSanitizer() (skip bool, err error) {
- 		return false, nil
- 	}
- 
--	if out, err := exec.Command(dst).CombinedOutput(); err != nil {
-+	if out, err := hangProneCmd(dst).CombinedOutput(); err != nil {
- 		if os.IsNotExist(err) {
- 			return true, fmt.Errorf("%#q failed to produce executable: %v", cmd, err)
- 		}
diff --git a/patches/0014-skip-TestLSAN.patch b/patches/0014-skip-TestLSAN.patch
new file mode 100644
index 00000000000..e98471c18e2
--- /dev/null
+++ b/patches/0014-skip-TestLSAN.patch
@@ -0,0 +1,21 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 13 Feb 2026 16:58:59 +0100
+Subject: [PATCH] skip TestLSAN
+
+---
+ src/cmd/cgo/internal/testsanitizers/lsan_test.go | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
+index 4dde3d20eca038..4ca85d6631773d 100644
+--- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go
++++ b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
+@@ -14,6 +14,7 @@ import (
+ )
+ 
+ func TestLSAN(t *testing.T) {
++	t.Skip("skipping test for LSAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
+ 	config := mustHaveLSAN(t)
+ 
+ 	t.Parallel()

From 5a423e5bdcf3c28bc4809831d67eff763a824f85 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 13 Feb 2026 09:52:22 -0800
Subject: [PATCH 723/887] Update docs for 1.26 and 1.24 EOL (#2132)

* Update download table for 1.26

* Clean up eng/doc after 1.24 EOL

* Update FIPS readme "supported version" explicit note

* Add windows-arm64 to downloads table
---
 .../cmd/updatelinktable/updatelinktable.go    |  11 +-
 eng/doc/AdditionalFeatures.md                 |   3 -
 eng/doc/Downloads.md                          |  22 +-
 eng/doc/MigrationGuide.md                     |  62 +-----
 eng/doc/fips/README.md                        | 201 ++++--------------
 eng/doc/release-branch-links.json             | 161 +++++++-------
 6 files changed, 149 insertions(+), 311 deletions(-)

diff --git a/eng/_util/cmd/updatelinktable/updatelinktable.go b/eng/_util/cmd/updatelinktable/updatelinktable.go
index 6f72c6c6958..c5b7bf837fe 100644
--- a/eng/_util/cmd/updatelinktable/updatelinktable.go
+++ b/eng/_util/cmd/updatelinktable/updatelinktable.go
@@ -23,7 +23,7 @@ This command updates the table in ` + docPath + ` and data in ` + jsonPath + `.
 
 var supported = []version{
 	{
-		Number:       "1.25",
+		Number:       "1.26",
 		LatestStable: true,
 		Platforms: map[string]struct{}{
 			"darwin-amd64":  {},
@@ -32,12 +32,13 @@ var supported = []version{
 			"linux-arm64":   {},
 			"linux-armv6l":  {},
 			"windows-amd64": {},
+			"windows-arm64": {},
 			"src":           {},
 			"assets":        {},
 		},
 	},
 	{
-		Number:         "1.24",
+		Number:         "1.25",
 		PreviousStable: true,
 		Platforms: map[string]struct{}{
 			"darwin-amd64":  {},
@@ -246,6 +247,9 @@ func data() (string, []supportdata.Branch) {
 				types = fileTypes("")
 			}
 			for _, f := range types {
+				if strings.HasPrefix(p, "darwin-") && v.Number == "1.25" {
+					b.WriteString("**Preview**<sup>2</sup><br/>")
+				}
 				artifact := f.ArtifactLink(v.Number, p, os, arch)
 				writeURL(f.Name, artifact.URL)
 				branch.Files = append(branch.Files, artifact)
@@ -291,9 +295,6 @@ func platformPrettyName(p string) string {
 	if pretty, ok := platformPrettyNames[p]; ok {
 		return pretty
 	}
-	if strings.HasPrefix(p, "darwin-") {
-		p = p + " (macOS) **Preview**<sup>2</sup>"
-	}
 	return p
 }
 
diff --git a/eng/doc/AdditionalFeatures.md b/eng/doc/AdditionalFeatures.md
index cde9de12f6d..b109c7aab82 100644
--- a/eng/doc/AdditionalFeatures.md
+++ b/eng/doc/AdditionalFeatures.md
@@ -170,9 +170,6 @@ It ensures TLS configuration matches the system's security policies at runtime.
 > This feature may reduce compatibility between TLS clients or servers and other implementations.
 > Enable it only if your use case specifically requires alignment with Windows Schannel configuration settings.
 
-As of Go 1.24.7, it can be enabled by setting the environment variable `GOEXPERIMENT` to `ms_tls_config_schannel` before building a Go program.
-Other methods of changing goexperiment settings also work.
-
 It is not supported and has no effect on Windows 8 and earlier and (the equivalent) Windows Server 2012 and earlier.
 
 ### Remove use of undocumented Windows APIs
diff --git a/eng/doc/Downloads.md b/eng/doc/Downloads.md
index a997dfd0682..c3c2efbda94 100644
--- a/eng/doc/Downloads.md
+++ b/eng/doc/Downloads.md
@@ -13,16 +13,17 @@ For example, a 1.20 link will download 1.20.8-1 if that is the latest version of
 <!-- The following section is generated by 'eng/run.ps1 updatelinktable'. Do not edit by hand. -->
 <!-- BEGIN TABLES -->
 
-|   | 1.25 | 1.24 |
+|   | 1.26 | 1.25 |
 | --- | --- | --- |
-| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig)<br/> |
- Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.25.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.24.assets.json)<br/> |
- darwin-amd64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig)<br/> |
- darwin-arm64 (macOS) **Preview**<sup>2</sup> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig)<br/> |
- linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig)<br/> |
- linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig)<br/> |
- linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig)<br/> |
- windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256)<br/> |
+| Source code | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.26.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.src.tar.gz.sig)<br/> | - [Source (tar.gz)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig)<br/> |
+ Metadata | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.26.assets.json)<br/> | - [Asset manifest (json)](https://aka.ms/golang/release/latest/go1.25.assets.json)<br/> |
+ darwin-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz.sig)<br/> | **Preview**<sup>2</sup><br/>- [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig)<br/> |
+ darwin-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz.sig)<br/> | **Preview**<sup>2</sup><br/>- [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig)<br/> |
+ linux-amd64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig)<br/> |
+ linux-arm64 | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig)<br/> |
+ linux-armv6l | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz.sig)<br/> | - [Binaries (tar.gz)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256)<br/>- [Signature<sup>1</sup>](https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig)<br/> |
+ windows-amd64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.26.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.windows-amd64.zip.sha256)<br/> | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256)<br/> |
+ windows-arm64 | - [Binaries (zip)](https://aka.ms/golang/release/latest/go1.26.windows-arm64.zip)<br/>- [Checksum (SHA256)](https://aka.ms/golang/release/latest/go1.26.windows-arm64.zip.sha256)<br/> | N/A |
 
 
 <!-- END TABLES -->
@@ -31,8 +32,7 @@ For example, a 1.20 link will download 1.20.8-1 if that is the latest version of
 > * https://download.microsoft.com/download/f/a/2/fa2420dd-3f08-4621-82cf-5a22abcbc8f9/microsoft-managed-lang-compiler.asc
 > * Shortened link for sharing: https://aka.ms/managed-lang-compiler-public-key
 
-> <sup>2</sup> - The macOS builds and `systemcrypto` support are currently in preview and shouldn't be used in production.
-> Please [open an issue](https://github.com/microsoft/go/issues/new) if you encounter any problems.
+> <sup>2</sup> - In 1.25, the macOS builds and `systemcrypto` support are in preview and shouldn't be used in production.
 
 ## Downloading a specific version
 
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index af3585f37d5..22443c738a7 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -223,29 +223,8 @@ It happens when the `GOEXPERIMENT` environment variable includes `systemcrypto`
 If you're trying to migrate to the Microsoft build of Go, check your build environment to ensure that the `go` command is the Microsoft build of Go.
 See [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md).
 
-If you're trying to make a build command compliant with Microsoft crypto policy but still compatible with **both the Microsoft build of Go and the official Go distribution**, this is possible:
-
-- If you're using Go 1.25 or later, remove `systemcrypto` from `GOEXPERIMENT`. Starting in 1.25, `systemcrypto` is enabled by default.
-  - If `GOEXPERIMENT` only contains `systemcrypto`, delete the assignment entirely.
-  - If it's not possible to find the `GOEXPERIMENT` setting in your build scripts and remove `systemcrypto`, reassign `GOEXPERIMENT` to remove `systemcrypto` just before your build commands.
-- If you're using Go 1.24 or earlier, or want to use both 1.24 and 1.25, use build tags instead of `GOEXPERIMENT`.
-  - Manually enabling `systemcrypto` in the Microsoft build of Go 1.25 is unnecessary, but harmless.
-
-**Build tags** (also known as build constraints) are more flexible than `GOEXPERIMENT`: build tag names are not verified against the list of known experiments.
-You can pass build tags to a `go build` command using the `-tags` flag:
-
-```
-go build -tags=goexperiment.systemcrypto .
-```
-
-See [Build Tags](fips/README.md#build-tags) in the FIPS README documentation for more information about using build tags with `systemcrypto`.
-
-If passing additional arguments to `go build` is undesirable, you can alternatively set up the `GOFLAGS` environment variable to include `-tags=goexperiment.systemcrypto`.
-This makes all subsequent `go` commands automatically use that build tag.
-See [`cmd/go` documentation](https://pkg.go.dev/cmd/go#hdr-Environment_variables) and [the FIPS readme](fips/README.md#assign-goflags-environment-variable-to-automatically-pass--tags-to-go-build) for more information about using GOFLAGS.
-
-> [!WARNING]
-> `nosystemcrypto` can't be specified as a build tag.
+If you're trying to make a build command compliant with Microsoft crypto policy but still compatible with **both the Microsoft build of Go and the official Go distribution**, remove `systemcrypto` from `GOEXPERIMENT`.
+`systemcrypto` is enabled by default, so it's not necessary to specify it using `GOEXPERIMENT`.
 
 See [Disabling `systemcrypto`](#disabling-systemcrypto) for information about how to disable `systemcrypto` if you need to temporarily avoid migrating to it.
 
@@ -359,48 +338,13 @@ For specific guidance within Microsoft:
 ## Disabling `systemcrypto`
 
 The difficulty of migrating to using `systemcrypto` can vary significantly depending on the Go project.
-If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto` by following these instructions:
-
-- If you're using Go 1.25.2 or later, set the `MS_GO_NOSYSTEMCRYPTO` environment variable to 1.
-- Otherwise, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
-  - If you have already set `GOEXPERIMENT`, append `,nosystemcrypto` to the existing value.
-
+If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto` by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to 1.
 After that, build commands won't encounter errors related to `systemcrypto`, and the resulting program won't attempt to use system-provided cryptography at runtime.
 
 For more information about these options, see [the "Build option to use Go crypto" section of the FIPS README](fips/README.md#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
 
-Alternatively, if you experienced an unexpected auto-update to 1.25 that broke your project, you should downgrade to the latest version of 1.24.
-This will disable `systemcrypto` by default and give you time to plan the migration.
-You can choose to upgrade at your own pace, as long as you complete the migration before 1.24 reaches EOL (End of Life).
-**1.24 EOL is expected in February 2025.**
-
-For most installation methods, specify 1.24, and you will get the latest, most secure version of 1.24.
-
-> [!TIP]
-> To update to the latest version of 1.24 in Azure Linux 3, use this command:
->
-> ```bash
-> sudo tdnf install -y 'golang < 1.25'
-> ```
->
-> Using the constraint `< 1.25` rather than a specific version ensures that you get the latest, most secure version of Go 1.24.
->
-> Some care may be needed: the above command installs, downgrades, or updates `golang`, but it doesn't lock the version to 1.24.
-> `golang` will be updated to the latest version of 1.25 the next time you run `tdnf update`.
-> This command may only be suitable for some situations, such as CI, and may need to be run just before any steps that use `go`.
->
-> `dnf` has `versionlock` capabilities, but it doesn't enable upgrades to newer patches within the major version.
-> It will only lock to a specific version.
-
-If you're unable to complete migration to `systemcrypto` right away, we recommend disabling systemcrypto with 1.25 rather than using 1.24, if possible.
-This approach lets you benefit from other changes in 1.25.
-It also avoids setting the migration deadline of 1.24 EOL.
-
 More information about exceptions to the Microsoft cryptography policy can be found at [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
 
-> [!NOTE]
-> Like any major version of Go, there may be more breaking changes that you need to evaluate before upgrading, not only `systemcrypto`.
-
 > [!NOTE]
 > The Microsoft build of Go does apply [other changes](#whats-different) to the official Go distribution, but `systemcrypto` is the most impactful, and the only one that adds additional dependencies.
 
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 33af7f4bef1..c448dcb7daa 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -36,7 +36,7 @@ The Microsoft build of Go modifies the Go runtime to call into a platform-provid
 Depending on the platform, this is done using cgo or syscalls.
 This allows Go programs to use a platform-provided FIPS 140 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. Since 1.24, on macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. On macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
 
 > [!IMPORTANT]
 > An application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_.
@@ -68,7 +68,7 @@ The modified Go runtime is typically used to accomplish one of two goals: comply
 The following table summarizes common configurations and how suitable each one is for these goals.
 
 > [!NOTE]
-> This document assumes the use of a supported version of the Microsoft build of Go: 1.24 or later.
+> This document assumes the use of a supported version of the Microsoft build of Go: 1.25 or later.
 
 > [!NOTE]
 > Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025). Since Go 1.26, `systemcrypto` is also enabled by default on macOS.
@@ -78,30 +78,31 @@ The following table summarizes common configurations and how suitable each one i
 
 | Build-time config | Runtime config | Internal Microsoft crypto policy | FIPS behavior |
 | --- | --- | --- | --- |
-| Default, Go 1.24 | Default | Not compliant | Crypto usage is not FIPS compliant. |
-| Default, Go 1.25 or later | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. |
-| `GOEXPERIMENT=systemcrypto` | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
-| `GOEXPERIMENT=systemcrypto` | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. On Linux, this environment variable causes the runtime to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect on Windows or macOS. |
-| `GOEXPERIMENT=systemcrypto` and `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
-| `MS_GO_NOSYSTEMCRYPTO=1` (since Go 1.25.2) or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
-
-A [Docker base image](#dockerfile-base-image) is available that includes suitable build-time config in the environment.
+| Default | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
+| `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. The `GOEXPERIMENT` setting is redundant because `systemcrypto` is enabled by default. |
+| Default | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
+| Default | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. On Linux, this environment variable causes the runtime to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect on Windows or macOS. |
+| `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
+| `MS_GO_NOSYSTEMCRYPTO=1` or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
+| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=ms_nocgo_opensslcrypto`, Go 1.26 | Default | Compliant | [Experimental](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/NocgoOpenSSL.md). Crypto usage is FIPS compliant. |
 
 Some configurations are invalid and intentionally result in a build error or runtime panic:
 
 | Build-time config | Runtime config | Behavior |
 | --- | --- | --- |
-| `-tags=requirefips`, Go 1.24 | | The build fails. A crypto backend must be specified to enable FIPS features. |
-| `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto` | | The build fails. Cgo is required to use the OpenSSL backend. |
+| `MS_GO_NOSYSTEMCRYPTO=1` and `-tags=requirefips` | | The build fails. A crypto backend must be specified to enable FIPS features. |
+| `GOOS=linux CGO_ENABLED=0` | | The build fails. Cgo is required to use the OpenSSL backend. |
 
 ## Usage: Build
 
-The `GOEXPERIMENT` environment variable is used at build time to select a cryptographic library backend. This modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API.
+The default behavior of the Microsoft build of Go is to use a platform-provided cryptographic library using `systemcrypto`.
+See the [Migration Guide](/eng/doc/MigrationGuide.md) for more information on incorporating the Microsoft build of Go into your build system.
+
+`systemcrypto` modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API.
+If `systemcrypto` is disabled (see [build option to use Go crypto](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails)), Go standard library cryptography is used.
 
-- `systemcrypto` enables the system crypto backend for the target platform
-   - Since Go 1.25, this experiment is enabled automatically on Windows and Linux. Since Go 1.26, it's also enabled automatically on macOS. To disable it, see [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
-- If `systemcrypto` is disabled (using `MS_GO_NOSYSTEMCRYPTO=1` or `GOEXPERIMENT=nosystemcrypto`), Go standard library cryptography is used.
+> [!NOTE]
+> "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
 
 > [!NOTE]
 > Prior to Go 1.27, per-platform experiments (`opensslcrypto`, `cngcrypto`, `darwincrypto`) were available. These have been removed in Go 1.27. Use `systemcrypto` instead, which automatically selects the appropriate backend based on the target platform.
@@ -111,116 +112,28 @@ The `systemcrypto` experiment uses platform-specific code via build constraints.
 | Target platform | Library |
 | --- | --- |
 | Linux | OpenSSL |
-| Windows (amd64 and arm64) | CNG |
+| Windows | CNG |
 | macOS | CommonCrypto & CryptoKit |
 
-In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows GOEXPERIMENT=systemcrypto` will correctly use CNG-based code.
+In a cross-build scenario, such as using Linux to build an app that will run on Windows, `GOOS=windows` will correctly use CNG-based code for the `systemcrypto` backend.
 
-The Microsoft build of Go must be used for these `GOEXPERIMENT` values to work. See setup instructions in [the distribution section of the microsoft/go readme][microsoft-go-download].
-
-A cross-build to Windows amd64 or arm64 will typically work, because the Windows backend uses syscalls to call CNG rather than cgo.
-A cross-build to Linux or macOS, however, is more complicated (perhaps infeasible), because their backends use cgo.
+A cross-build to Windows or macOS will typically work, because these backends use approaches like syscalls to call the crypto library rather than cgo.
+A cross-build to Linux, however, is more complicated (perhaps infeasible), because its backend uses cgo.
 
 The Linux backends' use of cgo also introduces the glibc compatibility problem.
 Building a cgo program on a distro that uses a new glibc version and running that program on a distro with an older glibc version may fail due to missing glibc symbols.
 This is often mitigated by building on a distro with the oldest expected glibc version.
 We have also successfully used a rootfs to build on an older glibc version (and cross-compile arm64 binaries on an amd64 machine), with rough notes available in [microsoft/go#1866](https://github.com/microsoft/go/issues/1866).
 
-> [!NOTE]
-> "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
-
-Setting the `goexperiment.<option>` build tag can be used as an alternative to setting the `GOEXPERIMENT` environment variable.
-
-> [!NOTE]
-> For details about combining multiple `GOEXPERIMENT`s and using build tags to customize your build, see [Usage: GOEXPERIMENTs and backend build tags](#usage-goexperiments-and-backend-build-tags).
+> [!TIP]
+> Go 1.26 introduces an experiment to use OpenSSL on Linux without cgo.
+> See [No-cgo OpenSSL Backend](/eng/doc/NocgoOpenSSL.md) for more information.
 
 If a crypto backend is selected but isn't supported, the build fails.
 For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
 
 For more information about disabling the crypto backend, see [build option to use Go crypto](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
 
-The next sections describe how to select a crypto backend in some common scenarios.
-
-### Dockerfile base image
-
-If you use [the Microsoft build of Go images produced by microsoft/go-images][microsoft-go-images], the `systemcrypto` backend is enabled by default as of Go 1.25.
-
-> [!NOTE]
-> Inside a Linux container, [the system-wide FIPS mode is shared with the container host](#linux-fips-mode-openssl).
-> This means Go binaries built using the Microsoft build of Go with a compliant build configuration don't require any extra runtime configuration to use the expected FIPS mode inside a container.
-
-If you use a Dockerfile and a version of the Microsoft build of Go prior to 1.25, you can swap your Dockerfile's base image to one of our images that include the `-fips-` segment.
-These images are no longer produced as of Go 1.25.
-The `-fips-` images include `env GOEXPERIMENT=systemcrypto` and are otherwise the same as the non`-fips-` images.
-They are provided for convenience.
-
-See [the microsoft/go-images documentation][microsoft-go-images] for more information about available images and how to use them.
-
-### Dockerfile env instruction
-
-> [!NOTE]
-> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
-
-If you don't use the standard Go base images (e.g. your Dockerfile downloads the Microsoft build of Go manually), you can use an `env` instruction before the build instruction in your Dockerfile:
-
-```dockerfile
-env GOEXPERIMENT=systemcrypto
-```
-
-### Modify the build command
-
-> [!NOTE]
-> Since Go 1.25, `systemcrypto` is enabled by default on Linux and Windows. There is no need to manually enable using OpenSSL/CNG under the hood anymore. See also [the Go 1.25 changelog](#go-125-aug-2025).
-
-Another approach that generally works for any build system is to modify the build command or build script. This section lists some helpful snippets to select a backend.
-
-#### Linux/macOS shell (bash) - Set `GOEXPERIMENT` environment variable
-
-- Set the environment variable for all future commands:
-  ```sh
-  export GOEXPERIMENT=systemcrypto
-  go build ./myapp
-  go build ./myapp2
-  ```
-- Or set the environment variable for only one command:
-  ```sh
-  GOEXPERIMENT=systemcrypto go build ./myapp
-  ```
-
-#### PowerShell - Set `GOEXPERIMENT` environment variable
-
-- ```pwsh
-  $env:GOEXPERIMENT = "systemcrypto"
-  go build ./myapp
-  ```
-
-#### Shell independent - Pass `-tags=...` flag to `go build`
-
-- ```
-  go build "-tags=goexperiment.systemcrypto" ./myapp
-  ```
-
-> [!NOTE]
-> Quoting the argument is necessary in some shells (notably PowerShell) to escape "`.`" or "`,`" if present. Quoting isn't required by every shell.
-
-#### Assign `GOFLAGS` environment variable to automatically pass `-tags=...` to `go build`
-
-- Instead of assigning `GOEXPERIMENT` directly, you can assign `GOFLAGS` to pass `-tags` to `go build`. This is useful if you already use `GOFLAGS` for other purposes, or if it would be difficult to modify `GOEXPERIMENT` for some other reason.
-- This is generally not necessary, and using the simpler `GOEXPERIMENT` environment variable is recommended.
-- Linux/macOS shell:
-  ```
-  export GOFLAGS='-tags=goexperiment.systemcrypto'
-  go build ./myapp
-  ```
-- PowerShell:
-  ```
-  $env:GOFLAGS = "-tags=goexperiment.systemcrypto"
-  go build ./myapp
-  ```
-
-> [!NOTE]
-> If `-tags` is specified in `GOFLAGS` and `-tags` is also passed directly to the build command, the value passed to the build command is used and the one in `GOFLAGS` is ignored.
-
 ## Usage: Runtime
 
 A program built with `systemcrypto` always uses the system-provided cryptography library for supported crypto APIs: OpenSSL on Linux, CNG on Windows, and CommonCrypto/CryptoKit on macOS. If the platform's crypto library can't be found or loaded, the Go program panics during initialization.
@@ -228,54 +141,36 @@ A program built with `systemcrypto` always uses the system-provided cryptography
 The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140=on` and `GOFIPS=1` settings on each supported platform.
 
 The Microsoft build of Go detects your FIPS mode preference by evaluating this list.
-The first match wins.
 
 - If environment variable setting `GODEBUG=fips140=on` is found: Enabled ✅
   - More specifically, if [`GODEBUG`](https://go.dev/doc/godebug) contains `fips140=on`.
   - This is the recommended way to set your FIPS preference.
 - If the environment variable `GOFIPS` is set to:
   - `1`: Enabled ✅
-  - `0`: Disabled ❌ (Go 1.24 and prior)
-  - Any other value: No preference detected. ❔
 - If the environment variable `GOLANG_FIPS` is set to:
   - `1`: Enabled ✅
-  - `0`: Disabled ❌ (Go 1.24 and prior)
-  - Any other value: No preference detected. ❔
 - If a platform-specific preference is detected: Enabled ✅
   - See the following sections for per-platform details.
-  - The platform-specific detection never results in a Disabled preference.
+- If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled: Enabled ✅
 - Otherwise: no preference detected. ❔
 
-After that, the following validation is performed:
-
-- If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled, then:
-  - If the detected preference is Disabled ❌, the program panics due to the conflict.
-  - Otherwise, the preference is set to Enabled ✅.
+If FIPS mode preference is Enabled ✅, then:
 
-Finally, based on the preference, the Microsoft build of Go does the following:
+- If the platform's crypto library is not in FIPS mode, the program panics during initialization.
+  - This may help detect and refuse to run with incorrectly configured environments.
+- The program enables [Go Runtime FIPS mode](#go-runtime-fips-mode).
 
-- Enabled ✅
-  - If the platform's crypto library is not in FIPS mode, the program panics during initialization.
-    - This may help detect and refuse to run with incorrectly configured environments.
-  - The program enables [Go Runtime FIPS mode](#go-runtime-fips-mode).
-- Disabled ❌
-  - Prior to Go 1.25: if the platform's crypto library is in FIPS mode, the program panics during initialization.
-  - Since Go 1.25: no effect.
-- No preference detected ❔
-  - No effect.
-
-> [!NOTE]
-> The options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
-
-Since Go 1.24, the Go runtime has an independent FIPS mode, and it may be important to distinguish its FIPS mode from the system or crypto engine's FIPS mode.
-The most familiar difference is that it changes TLS stack behavior.
+The Go runtime FIPS mode may be important to distinguish its FIPS mode from the system FIPS mode or crypto engine's FIPS mode.
 The [Go Runtime FIPS mode](#go-runtime-fips-mode) section describes this in more detail.
 
-Go 1.24 also introduces `GODEBUG=fips140=only`.
+There is also `GODEBUG=fips140=only`.
 It acts as `GODEBUG=fips140=on`, but also makes a best effort to panic if a non-FIPS 140-3 compliant algorithm is used.
 The `only` setting is not yet supported in the Microsoft build of Go.
 (See [microsoft/go#1656 Support `GODEBUG=fips140=only`](https://github.com/microsoft/go/issues/1656).)
 
+> [!NOTE]
+> The `GODEBUG`, `GOFIPS`, and `GOLANG_FIPS` options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
+
 ### Linux FIPS mode (OpenSSL)
 
 The Linux Kernel FIPS mode is read to determine the platform-specific FIPS preference on Linux.
@@ -286,18 +181,13 @@ The Go runtime reads the content of `/proc/sys/crypto/fips_enabled`, and if it's
 > This is because the kernel is shared.
 
 If OpenSSL is not using a FIPS-compliant engine or provider, the Go runtime considers OpenSSL to not be in FIPS mode.
+The Go runtime makes no attempt to modify OpenSSL FIPS mode.
 
 For more information about the standard OpenSSL FIPS behavior, see https://www.openssl.org/docs/fips.html.
 
-> [!WARNING]
-> Prior to Go 1.24, setting `GOFIPS` makes the Go runtime attempt to modify the configured FIPS mode.
-> This includes disabling FIPS mode if `GOFIPS=0` even if OpenSSL is configured to be in FIPS mode by default.
->
-> Since Go 1.24, the Go runtime no longer makes any attempt to modify OpenSSL FIPS mode.
-
-> [!NOTE]
-> Prior to Go 1.24, it was possible to test FIPS mode app behavior on a non-FIPS system by setting `GOFIPS=1`.
-> This is no longer possible in 1.24, but some mechanisms are provided by OpenSSL and distros to help run this type of test.
+> [!TIP]
+> You might want to test FIPS mode app behavior, perhaps on an otherwise non-FIPS system.
+> OpenSSL and some Linux distros provide mechanisms to help run this type of test.
 >
 > For OpenSSL 3, see [`OPENSSL_CONF`](https://docs.openssl.org/3.0/man5/config/) to change to a FIPS crypto provider.
 >
@@ -330,12 +220,9 @@ However, for compatibility reasons (see [the Go Runtime FIPS mode](#go-runtime-f
 
 See the [About Apple security certifications](https://support.apple.com/guide/certifications/about-apple-security-certifications-apc30d0ed034/1/web/1.0) page for more information.
 
-> [!NOTE]
-> Prior to 1.24, there was no macOS backend for the Microsoft build of Go.
-
 ### Go Runtime FIPS mode
 
-Since Go 1.24, the Go runtime has a FIPS mode.
+The Go runtime has a FIPS mode.
 It is enabled by `GODEBUG=fips140=on` (or any equivalent).
 It can be checked by calling [crypto/fips140.Enabled](https://pkg.go.dev/crypto/fips140#Enabled).
 
@@ -343,8 +230,7 @@ This mode has many effects described in [FIPS 140-3 Compliance](https://go.dev/d
 One notable effect is that the Go runtime TLS stack will only use FIPS-compliant settings.
 
 The [FIPS mode preference system](#usage-runtime) automatically enables Go runtime FIPS mode when necessary.
-For example, if a Linux system is in system-wide FIPS mode, the Microsoft build of Go enables OpenSSL FIPS mode and the Go runtime FIPS mode.
-If a Windows system is in FIPS mode, CNG is already in FIPS mode, and the fork enables the Go runtime FIPS mode.
+For example, if a Linux system is in system-wide FIPS mode, the Microsoft build of Go ensure OpenSSL is in FIPS mode and enables the Go runtime FIPS mode.
 
 > [!WARNING]
 > On macOS, there is no such thing as system-wide FIPS mode.
@@ -373,7 +259,7 @@ Most programs aren't expected to use these options. Determining FIPS mode at run
 
 ### Build option to use Go crypto if the backend compatibility check fails
 
-When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`. The OpenSSL backend on Linux requires cgo, so the build fails:
+When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0`. The OpenSSL backend on Linux requires cgo, so the build fails:
 
 ```
 # runtime
@@ -389,9 +275,10 @@ We recommend fixing the build environment to allow the crypto backend to be used
 These are other fixes that may be used on a case-by-case basis:
 
 - Intentionally disable the backend and intentional become incompliant with the internal Microsoft crypto policy or FIPS. For builds within Microsoft, this should only be done under a documented exception. To do so:
+  > [!WARNING]
+  > Disabling `systemcrypto` should only be done under **exceptional circumstances** in builds performed by Microsoft. See [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
   - With Go 1.25.2 or later, set `MS_GO_NOSYSTEMCRYPTO=1`.
   - With Go 1.25 or later, set `GOEXPERIMENT=nosystemcrypto`.
-  - With Go 1.24, either set `GOEXPERIMENT=nosystemcrypto` or remove the `GOEXPERIMENT` setting entirely.
 - Refactor the code to not use a `crypto` package. For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
 
 > [!NOTE]
diff --git a/eng/doc/release-branch-links.json b/eng/doc/release-branch-links.json
index d0a935fe8ab..0fb0cee7a2f 100644
--- a/eng/doc/release-branch-links.json
+++ b/eng/doc/release-branch-links.json
@@ -1,169 +1,178 @@
 [
   {
-    "version": "go1.25",
+    "version": "go1.26",
     "stable": true,
     "latestStable": true,
     "files": [
       {
-        "filename": "go1.25.src.tar.gz",
+        "filename": "go1.26.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.src.tar.gz.sig"
       },
       {
-        "filename": "go1.25.assets.json",
+        "filename": "go1.26.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.25.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.26.assets.json"
       },
       {
-        "filename": "go1.25.darwin-amd64.tar.gz",
+        "filename": "go1.26.darwin-amd64.tar.gz",
         "os": "darwin",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.darwin-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.darwin-arm64.tar.gz",
+        "filename": "go1.26.darwin-arm64.tar.gz",
         "os": "darwin",
         "arch": "arm64",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.darwin-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-amd64.tar.gz",
+        "filename": "go1.26.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-arm64.tar.gz",
+        "filename": "go1.26.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.25.linux-armv6l.tar.gz",
+        "filename": "go1.26.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.26.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.25.windows-amd64.zip",
+        "filename": "go1.26.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.25",
+        "version": "go1.26",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.26.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.windows-amd64.zip.sha256"
+      },
+      {
+        "filename": "go1.26.windows-arm64.zip",
+        "os": "windows",
+        "arch": "arm64",
+        "version": "go1.26",
+        "kind": "archive",
+        "url": "https://aka.ms/golang/release/latest/go1.26.windows-arm64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.26.windows-arm64.zip.sha256"
       }
     ]
   },
   {
-    "version": "go1.24",
+    "version": "go1.25",
     "stable": true,
     "previousStable": true,
     "files": [
       {
-        "filename": "go1.24.src.tar.gz",
+        "filename": "go1.25.src.tar.gz",
         "os": "",
         "arch": "",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "source",
-        "url": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.src.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.src.tar.gz.sig"
       },
       {
-        "filename": "go1.24.assets.json",
+        "filename": "go1.25.assets.json",
         "os": "",
         "arch": "",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "manifest",
-        "url": "https://aka.ms/golang/release/latest/go1.24.assets.json"
+        "url": "https://aka.ms/golang/release/latest/go1.25.assets.json"
       },
       {
-        "filename": "go1.24.darwin-amd64.tar.gz",
+        "filename": "go1.25.darwin-amd64.tar.gz",
         "os": "darwin",
         "arch": "amd64",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.24.darwin-arm64.tar.gz",
+        "filename": "go1.25.darwin-arm64.tar.gz",
         "os": "darwin",
         "arch": "arm64",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.darwin-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.darwin-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.24.linux-amd64.tar.gz",
+        "filename": "go1.25.linux-amd64.tar.gz",
         "os": "linux",
         "arch": "amd64",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-amd64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-amd64.tar.gz.sig"
       },
       {
-        "filename": "go1.24.linux-arm64.tar.gz",
+        "filename": "go1.25.linux-arm64.tar.gz",
         "os": "linux",
         "arch": "arm64",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-arm64.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-arm64.tar.gz.sig"
       },
       {
-        "filename": "go1.24.linux-armv6l.tar.gz",
+        "filename": "go1.25.linux-armv6l.tar.gz",
         "os": "linux",
         "arch": "armv6l",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sha256",
-        "signatureURL": "https://aka.ms/golang/release/latest/go1.24.linux-armv6l.tar.gz.sig"
+        "url": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sha256",
+        "signatureURL": "https://aka.ms/golang/release/latest/go1.25.linux-armv6l.tar.gz.sig"
       },
       {
-        "filename": "go1.24.windows-amd64.zip",
+        "filename": "go1.25.windows-amd64.zip",
         "os": "windows",
         "arch": "amd64",
-        "version": "go1.24",
+        "version": "go1.25",
         "kind": "archive",
-        "url": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip",
-        "checksumURL": "https://aka.ms/golang/release/latest/go1.24.windows-amd64.zip.sha256"
+        "url": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip",
+        "checksumURL": "https://aka.ms/golang/release/latest/go1.25.windows-amd64.zip.sha256"
       }
     ]
   }

From 6b72ee6aca64c3872f7dc5d871aa4073bd804716 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 13 Feb 2026 17:52:50 +0000
Subject: [PATCH 724/887] docs: handful of go 1.26 release cleanup (#2131)

* docs: handful of go 1.26 release cleanup

* Revert Downloads.md

---------

Co-authored-by: Davis Goodin <dagood@microsoft.com>
---
 README.md                              |  1 +
 eng/_util/cmd/updatecryptodocs/docs.go |  9 ++--
 eng/doc/CrossPlatformCryptography.md   | 66 ++++++++++++--------------
 3 files changed, 35 insertions(+), 41 deletions(-)

diff --git a/README.md b/README.md
index 80895435dd7..f31f4334afb 100644
--- a/README.md
+++ b/README.md
@@ -63,6 +63,7 @@ We build the forked Go toolset with the following list of OS/Arch combinations:
 * `linux_armv6l`
 * `linux_arm64`
 * `windows_amd64`
+* `windows_arm64`
 * `darwin_amd64`
 * `darwin_arm64`
 
diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index 35545d2e36a..73c3adf864f 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -100,7 +100,7 @@ var doc = Document{
 					Name: "SHA-2-512_224",
 					Platforms: Platforms{
 						Windows: PlatformStatus{Supported: NotSupported},
-						Linux:   PlatformStatus{MinGoVersion: "1.24", MinVersion: "1.1.1"},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
 						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
@@ -108,7 +108,7 @@ var doc = Document{
 					Name: "SHA-2-512_256",
 					Platforms: Platforms{
 						Windows: PlatformStatus{Supported: NotSupported},
-						Linux:   PlatformStatus{MinGoVersion: "1.24", MinVersion: "1.1.1"},
+						Linux:   PlatformStatus{MinVersion: "1.1.1"},
 						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
@@ -382,7 +382,6 @@ var doc = Document{
 							Name: "PKCS1v15 Signature (RIPMED160)",
 							Platforms: Platforms{
 								Windows: PlatformStatus{Supported: NotSupported},
-								Linux:   PlatformStatus{MinGoVersion: "1.24"},
 								MacOS:   PlatformStatus{Supported: NotSupported},
 							},
 						},
@@ -395,9 +394,7 @@ var doc = Document{
 						{
 							Name: "PKCS1v15 Signature (MD5-SHA1)",
 							Platforms: Platforms{
-								Windows: PlatformStatus{MinGoVersion: "1.24"},
-								Linux:   PlatformStatus{MinGoVersion: "1.24"},
-								MacOS:   PlatformStatus{Supported: NotSupported},
+								MacOS: PlatformStatus{Supported: NotSupported},
 							},
 						},
 						{Name: "PKCS1v15 Signature (SHA-1)"},
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 17b727ccb1c..883612f03b4 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -57,39 +57,37 @@ This section includes the following packages:
 - [crypto/sha3](https://pkg.go.dev/crypto/sha3)
 - [crypto/hmac](https://pkg.go.dev/crypto/hmac)
 
-| Algorithm             | Windows        | Linux            | macOS          |
-| --------------------- | -------------- | ---------------- | -------------- |
-| MD5                   | ✔️             | ✔️               | ✔️             |
-| SHA-1                 | ✔️             | ✔️               | ✔️             |
-| SHA-2-224             | ❌️             | ✔️               | ✔️             |
-| SHA-2-256             | ✔️             | ✔️               | ✔️             |
-| SHA-2-384             | ✔️             | ✔️               | ✔️             |
-| SHA-2-512             | ✔️             | ✔️               | ✔️             |
-| SHA-2-512_224         | ❌️             | ✔️<sup>1,2</sup> | ❌️             |
-| SHA-2-512_256         | ❌️             | ✔️<sup>1,2</sup> | ❌️             |
-| SHA-3-224<sup>3</sup> | ❌️             | ✔️<sup>2</sup>   | ❌️             |
-| SHA-3-256<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
-| SHA-3-384<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
-| SHA-3-512<sup>3</sup> | ✔️<sup>4</sup> | ✔️<sup>2</sup>   | ✔️<sup>5</sup> |
-| SHAKE-128             | ✔️             | ✔️<sup>6</sup>   | ❌️             |
-| SHAKE-256             | ✔️             | ✔️<sup>6</sup>   | ❌️             |
-| CSHAKE-128            | ✔️             | ❌️               | ❌️             |
-| CSHAKE-256            | ✔️             | ❌️               | ❌️             |
-| HMAC<sup>7</sup>      | ✔️             | ✔️               | ✔️             |
-
-<sup>1</sup>Available starting in the Microsoft build of Go 1.24.
+| Algorithm             | Windows        | Linux          | macOS          |
+| --------------------- | -------------- | -------------- | -------------- |
+| MD5                   | ✔️             | ✔️             | ✔️             |
+| SHA-1                 | ✔️             | ✔️             | ✔️             |
+| SHA-2-224             | ❌️             | ✔️             | ✔️             |
+| SHA-2-256             | ✔️             | ✔️             | ✔️             |
+| SHA-2-384             | ✔️             | ✔️             | ✔️             |
+| SHA-2-512             | ✔️             | ✔️             | ✔️             |
+| SHA-2-512_224         | ❌️             | ✔️<sup>1</sup> | ❌️             |
+| SHA-2-512_256         | ❌️             | ✔️<sup>1</sup> | ❌️             |
+| SHA-3-224<sup>2</sup> | ❌️             | ✔️<sup>1</sup> | ❌️             |
+| SHA-3-256<sup>2</sup> | ✔️<sup>3</sup> | ✔️<sup>1</sup> | ✔️<sup>4</sup> |
+| SHA-3-384<sup>2</sup> | ✔️<sup>3</sup> | ✔️<sup>1</sup> | ✔️<sup>4</sup> |
+| SHA-3-512<sup>2</sup> | ✔️<sup>3</sup> | ✔️<sup>1</sup> | ✔️<sup>4</sup> |
+| SHAKE-128             | ✔️             | ✔️<sup>5</sup> | ❌️             |
+| SHAKE-256             | ✔️             | ✔️<sup>5</sup> | ❌️             |
+| CSHAKE-128            | ✔️             | ❌️             | ❌️             |
+| CSHAKE-256            | ✔️             | ❌️             | ❌️             |
+| HMAC<sup>6</sup>      | ✔️             | ✔️             | ✔️             |
+
+<sup>1</sup>Requires OpenSSL 1.1.1 or later.
 
-<sup>2</sup>Requires OpenSSL 1.1.1 or later.
-
-<sup>3</sup>Available starting in the Microsoft build of Go 1.26.
+<sup>2</sup>Available starting in the Microsoft build of Go 1.26.
 
-<sup>4</sup>Requires Windows 11 (24H2) or later.
+<sup>3</sup>Requires Windows 11 (24H2) or later.
 
-<sup>5</sup>Requires macOS 26 or later.
+<sup>4</sup>Requires macOS 26 or later.
 
-<sup>6</sup>Requires OpenSSL 3.3 or later.
+<sup>5</sup>Requires OpenSSL 3.3 or later.
 
-<sup>7</sup>Supports only hash algorithms that are supported as standalone hash functions.
+<sup>6</sup>Supports only hash algorithms that are supported as standalone hash functions.
 
 ## Symmetric encryption
 
@@ -165,12 +163,12 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 | PSS (SHA-2)<sup>2</sup>                | ✔️<sup>4</sup>   | ✔️             | ✔️<sup>5</sup> |
 | PSS (SHA-3)<sup>2</sup>                | ✔️<sup>3</sup>   | ✔️             | ❌️             |
 | PKCS1v15 Signature (Unhashed)          | ✔️               | ✔️             | ✔️             |
-| PKCS1v15 Signature (RIPMED160)         | ❌️               | ✔️<sup>6</sup> | ❌️             |
+| PKCS1v15 Signature (RIPMED160)         | ❌️               | ✔️             | ❌️             |
 | PKCS1v15 Signature (MD5)               | ✔️               | ✔️             | ❌️             |
-| PKCS1v15 Signature (MD5-SHA1)          | ✔️<sup>6</sup>   | ✔️<sup>6</sup> | ❌️             |
+| PKCS1v15 Signature (MD5-SHA1)          | ✔️               | ✔️             | ❌️             |
 | PKCS1v15 Signature (SHA-1)             | ✔️               | ✔️             | ✔️             |
 | PKCS1v15 Signature (SHA-2)<sup>2</sup> | ✔️               | ✔️             | ✔️             |
-| PKCS1v15 Signature (SHA-3)             | ✔️<sup>3,7</sup> | ✔️<sup>8</sup> | ❌️             |
+| PKCS1v15 Signature (SHA-3)             | ✔️<sup>3,6</sup> | ✔️<sup>7</sup> | ❌️             |
 
 <sup>1</sup>macOS doesn't support passing a custom label to OAEP functions.
 
@@ -182,11 +180,9 @@ Operations that require random numbers (rand io.Reader) only support [rand.Reade
 
 <sup>5</sup>Custom salt lengths are not supported. PSS always uses the [`rsa.PSSSaltLengthEqualsHash`](https://pkg.go.dev/crypto/rsa#pkg-constants).
 
-<sup>6</sup>Available starting in the Microsoft build of Go 1.24.
-
-<sup>7</sup>Requires Windows 11 (24H2) or later.
+<sup>6</sup>Requires Windows 11 (24H2) or later.
 
-<sup>8</sup>Requires OpenSSL 1.1.1 or later.
+<sup>7</sup>Requires OpenSSL 1.1.1 or later.
 
 ### ECDSA
 

From d31ce28cea82197a441b8f51f903a8f0a0488b67 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 13 Feb 2026 16:59:44 +0100
Subject: [PATCH 725/887] skip TestLSAN

---
 patches/0014-fix-TestLSAN.patch  | 22 ----------------------
 patches/0014-skip-TestLSAN.patch | 21 +++++++++++++++++++++
 2 files changed, 21 insertions(+), 22 deletions(-)
 delete mode 100644 patches/0014-fix-TestLSAN.patch
 create mode 100644 patches/0014-skip-TestLSAN.patch

diff --git a/patches/0014-fix-TestLSAN.patch b/patches/0014-fix-TestLSAN.patch
deleted file mode 100644
index efe9c89591a..00000000000
--- a/patches/0014-fix-TestLSAN.patch
+++ /dev/null
@@ -1,22 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 13 Feb 2026 16:12:40 +0100
-Subject: [PATCH] fix TestLSAN
-
----
- src/cmd/cgo/internal/testsanitizers/cc_test.go | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/cmd/cgo/internal/testsanitizers/cc_test.go b/src/cmd/cgo/internal/testsanitizers/cc_test.go
-index f2239fb9cffc2e..406f81c7bc510d 100644
---- a/src/cmd/cgo/internal/testsanitizers/cc_test.go
-+++ b/src/cmd/cgo/internal/testsanitizers/cc_test.go
-@@ -502,7 +502,7 @@ func (c *config) checkCSanitizer() (skip bool, err error) {
- 		return false, nil
- 	}
- 
--	if out, err := exec.Command(dst).CombinedOutput(); err != nil {
-+	if out, err := hangProneCmd(dst).CombinedOutput(); err != nil {
- 		if os.IsNotExist(err) {
- 			return true, fmt.Errorf("%#q failed to produce executable: %v", cmd, err)
- 		}
diff --git a/patches/0014-skip-TestLSAN.patch b/patches/0014-skip-TestLSAN.patch
new file mode 100644
index 00000000000..e98471c18e2
--- /dev/null
+++ b/patches/0014-skip-TestLSAN.patch
@@ -0,0 +1,21 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 13 Feb 2026 16:58:59 +0100
+Subject: [PATCH] skip TestLSAN
+
+---
+ src/cmd/cgo/internal/testsanitizers/lsan_test.go | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
+index 4dde3d20eca038..4ca85d6631773d 100644
+--- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go
++++ b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
+@@ -14,6 +14,7 @@ import (
+ )
+ 
+ func TestLSAN(t *testing.T) {
++	t.Skip("skipping test for LSAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
+ 	config := mustHaveLSAN(t)
+ 
+ 	t.Parallel()

From 5993db28ad4b88527e17b85424e562abd00ef6d2 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Sun, 15 Feb 2026 08:59:39 +0100
Subject: [PATCH 726/887] skip TestASAN

---
 ....patch => 0014-skip-sanitizer-tests.patch} | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)
 rename patches/{0014-skip-TestLSAN.patch => 0014-skip-sanitizer-tests.patch} (50%)

diff --git a/patches/0014-skip-TestLSAN.patch b/patches/0014-skip-sanitizer-tests.patch
similarity index 50%
rename from patches/0014-skip-TestLSAN.patch
rename to patches/0014-skip-sanitizer-tests.patch
index e98471c18e2..32d59a97183 100644
--- a/patches/0014-skip-TestLSAN.patch
+++ b/patches/0014-skip-sanitizer-tests.patch
@@ -1,12 +1,27 @@
 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
 From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
 Date: Fri, 13 Feb 2026 16:58:59 +0100
-Subject: [PATCH] skip TestLSAN
+Subject: [PATCH] skip sanitizer tests
 
+Skipping sanitizer tests until they are less flaky.
+See https://github.com/golang/go/issues/72996.
 ---
+ src/cmd/cgo/internal/testsanitizers/asan_test.go | 1 +
  src/cmd/cgo/internal/testsanitizers/lsan_test.go | 1 +
- 1 file changed, 1 insertion(+)
+ 2 files changed, 2 insertions(+)
 
+diff --git a/src/cmd/cgo/internal/testsanitizers/asan_test.go b/src/cmd/cgo/internal/testsanitizers/asan_test.go
+index cb7d857280416f..9d9957082ee459 100644
+--- a/src/cmd/cgo/internal/testsanitizers/asan_test.go
++++ b/src/cmd/cgo/internal/testsanitizers/asan_test.go
+@@ -18,6 +18,7 @@ import (
+ )
+ 
+ func TestASAN(t *testing.T) {
++	t.Skip("skipping test for ASAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
+ 	config := mustHaveASAN(t)
+ 
+ 	t.Parallel()
 diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
 index 4dde3d20eca038..4ca85d6631773d 100644
 --- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go

From 7b743c2f9c0d0a63f4cf6e143ee3265850b59297 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Sun, 15 Feb 2026 09:00:19 +0100
Subject: [PATCH 727/887] skip TestASAN

---
 patches/0014-skip-TestLSAN.patch | 21 ---------------------
 1 file changed, 21 deletions(-)
 delete mode 100644 patches/0014-skip-TestLSAN.patch

diff --git a/patches/0014-skip-TestLSAN.patch b/patches/0014-skip-TestLSAN.patch
deleted file mode 100644
index e98471c18e2..00000000000
--- a/patches/0014-skip-TestLSAN.patch
+++ /dev/null
@@ -1,21 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 13 Feb 2026 16:58:59 +0100
-Subject: [PATCH] skip TestLSAN
-
----
- src/cmd/cgo/internal/testsanitizers/lsan_test.go | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-index 4dde3d20eca038..4ca85d6631773d 100644
---- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-+++ b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-@@ -14,6 +14,7 @@ import (
- )
- 
- func TestLSAN(t *testing.T) {
-+	t.Skip("skipping test for LSAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
- 	config := mustHaveLSAN(t)
- 
- 	t.Parallel()

From 81bd3bfe23d0813e7dd77cc9f9e52d672c9f0914 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Mon, 16 Feb 2026 03:50:54 -0800
Subject: [PATCH 728/887] Update docs for GoTool@0, update quick start (#2139)

* Update docs for GoTool@0, update quick start

* Fix GoTool@0 section link
---
 README.md                 | 11 ++++++++---
 eng/doc/MigrationGuide.md | 35 +++++++++++++++++++++++++----------
 2 files changed, 33 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index f31f4334afb..d0e9296bee3 100644
--- a/README.md
+++ b/README.md
@@ -109,10 +109,10 @@ After the repository is added, install the Microsoft build of Go by running the
 sudo apt-get update && sudo apt-get install msft-golang
 ```
 
-### Binary archive
+### Azure Pipelines `GoTool@0` task
 
-[Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
-for several platforms are available as `zip` and `tar.gz` files.
+The [`GoTool@0`](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
+For more details, see [the GoTool@0 section of the Migration Guide](eng/doc/MigrationGuide.md#the-gotool0-azure-pipelines-task).
 
 ### The `go-install.ps1` script
 
@@ -121,6 +121,11 @@ It can install specific versions or the latest releases.
 
 If you use Azure Pipelines, try running the script in a [script step](https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/cmd-line-v2?view=azure-pipelines) and pass the `-AzurePipelinePath` argument to automatically set up `go` in the environment for future steps.
 
+### Binary archive
+
+[Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
+for several platforms are available as `zip` and `tar.gz` files.
+
 ### Build from source
 
 #### Pre-patched source tarball
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 22443c738a7..fc7a9e18ccb 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -16,8 +16,6 @@ To comply with Microsoft internal policy for the use of Go, most projects need t
 
 1. [Use the Microsoft build of Go **for CI (Continuous Integration) and build environments.**](#ci-and-build-environment-migration-steps)
     - See [Microsoft Toolset Identification](./MicrosoftToolsetIdentification.md) if it's not clear which distribution of Go you're currently using.
-1. If you use a version of Go prior to 1.25, [enable `systemcrypto`](#enable-systemcrypto).
-    - Starting with 1.25 (Linux and Windows) and 1.26 (macOS), `systemcrypto` is enabled by default, and no action is required.
 1. [**Test** your program.](#testing)
     - It's important to test on all target platforms. The changes to runtime behavior are platform-specific.
 1. Consider **whether your project must be FIPS compliant** and if so, [**review your project**](#review-project-for-fips-compliance).
@@ -31,9 +29,14 @@ Like the official Go distribution, the Microsoft build of Go has no Go runtime c
 Your Go application is still a single executable binary.
 However, in some cases, it may now have additional dependencies.
 
-Regardless of which method you use to install Go, we recommend picking a specific major version of Go and setting up your build system to use the latest update to that major version, a.k.a. pinning the major version.
-Both official Go and the Microsoft build of Go occasionally have breaking changes in new major versions, and pinning lets you plan for and execute migrations at your own pace.
-However, we recognize that pinning increases maintenance burden when there are no breaking changes, and ultimately the risk must be evaluated in the context of each project.
+> [!TIP]
+> Regardless of which method you use to install Go, we recommend picking a specific major version of Go and setting up your build system to use the latest update to that major version.
+> (For example, `1.26.*`. This is also called "pinning" to major version `26`.)
+> Both official Go and the Microsoft build of Go occasionally have breaking changes in new major versions, and pinning lets you migrate to the next major version at your own pace.
+>
+> However, pinning increases maintenance burden when there are no breaking changes, because you are responsible for making sure you aren't using a version of Go that is past End-of-Life (EOL) and insecure.
+> Some projects may prefer to always use the latest version of Go to be sure they never miss maintenance, even though this puts the project at risk of unexpected breaks when a new major version is released.
+> Ultimately, these risks must be evaluated in the context of each project.
 
 ## What's different?
 
@@ -59,12 +62,24 @@ This section describes some migration scenarios we know about and the path we re
 >
 > The scenarios in the following sections simply offer targeted guidance to help find the easiest approach.
 
-### The `GoTool@0` Azure Pipelines step
+### The `GoTool@0` Azure Pipelines task
+
+The [GoTool@0](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
+
+To use it, set these parameters:
 
-The `GoTool@0` step doesn't currently support the Microsoft build of Go, and there is no equivalent step.
-(See [microsoft/go#483](https://github.com/microsoft/go/issues/483).)
+* `version`: the task supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version. We recommend using the latest major version, currently `1.26`.
+* `goDownloadUrl`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
 
-The most universal replacement is to use a `script` step to run [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+The resulting step in a yml-based Azure Pipeline looks like this:
+
+```yml
+- task: GoTool@0
+  displayName: 'Install Go'
+  inputs:
+    version: '1.26'
+    goDownloadUrl: 'https://aka.ms/golang/release/latest'
+```
 
 ### A `go` toolset that happens to be on my build agent
 
@@ -106,7 +121,7 @@ Install instructions [are in the project README file](/README.md#ubuntu).
 ### A OneBranch Azure Pipeline
 
 We are not aware of an enhanced migration path for OneBranch pipelines that should be preferred over the Azure Pipelines migrations mentioned above.
-See the above sections for [`GoTool@0`](#the-gotool0-azure-pipelines-step) and [container jobs](#an-azure-pipelines-container-job-referring-to-the-official-golang-container-image) to find the best fit for your project.
+See the above sections for [`GoTool@0`](#the-gotool0-azure-pipelines-task) and [container jobs](#an-azure-pipelines-container-job-referring-to-the-official-golang-container-image) to find the best fit for your project.
 
 ### Direct download of the Go `tar.gz` or `zip` file
 

From 765af3075c822c64982142332f13e0ae4d163b69 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Feb 2026 11:51:26 +0000
Subject: [PATCH 729/887] build(deps): bump github/codeql-action from 4.32.2 to
 4.32.3 (#2142)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.2 to 4.32.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2...9e907b5e64f6b83e7804b09294d44122997950d6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7806fc9f153..a1ee1030337 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
+        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
+        uses: github/codeql-action/autobuild@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
+        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           category: /language:go

From b995d1315755702f48d23eb0f04c1d4a65a328c4 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Sun, 15 Feb 2026 09:00:19 +0100
Subject: [PATCH 730/887] skip TestASAN

---
 patches/0014-skip-TestLSAN.patch | 21 ---------------------
 1 file changed, 21 deletions(-)
 delete mode 100644 patches/0014-skip-TestLSAN.patch

diff --git a/patches/0014-skip-TestLSAN.patch b/patches/0014-skip-TestLSAN.patch
deleted file mode 100644
index e98471c18e2..00000000000
--- a/patches/0014-skip-TestLSAN.patch
+++ /dev/null
@@ -1,21 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 13 Feb 2026 16:58:59 +0100
-Subject: [PATCH] skip TestLSAN
-
----
- src/cmd/cgo/internal/testsanitizers/lsan_test.go | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-index 4dde3d20eca038..4ca85d6631773d 100644
---- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-+++ b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-@@ -14,6 +14,7 @@ import (
- )
- 
- func TestLSAN(t *testing.T) {
-+	t.Skip("skipping test for LSAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
- 	config := mustHaveLSAN(t)
- 
- 	t.Parallel()

From 6f2916f391838e3bf115084d40783093174e639f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 17 Feb 2026 11:07:10 +0100
Subject: [PATCH 731/887] skip more tests

---
 patches/0014-skip-sanitizer-tests.patch | 32 ++++++++++++-------------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/patches/0014-skip-sanitizer-tests.patch b/patches/0014-skip-sanitizer-tests.patch
index 32d59a97183..a962a86f454 100644
--- a/patches/0014-skip-sanitizer-tests.patch
+++ b/patches/0014-skip-sanitizer-tests.patch
@@ -11,26 +11,26 @@ See https://github.com/golang/go/issues/72996.
  2 files changed, 2 insertions(+)
 
 diff --git a/src/cmd/cgo/internal/testsanitizers/asan_test.go b/src/cmd/cgo/internal/testsanitizers/asan_test.go
-index cb7d857280416f..9d9957082ee459 100644
+index cb7d857280416f..3c6aa4a324f7e7 100644
 --- a/src/cmd/cgo/internal/testsanitizers/asan_test.go
 +++ b/src/cmd/cgo/internal/testsanitizers/asan_test.go
-@@ -18,6 +18,7 @@ import (
- )
+@@ -144,6 +144,7 @@ func TestASANFuzz(t *testing.T) {
+ }
  
- func TestASAN(t *testing.T) {
-+	t.Skip("skipping test for ASAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
- 	config := mustHaveASAN(t)
- 
- 	t.Parallel()
+ func mustHaveASAN(t *testing.T) *config {
++	t.Skip("skipping sanitizer tests until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
+ 	testenv.MustHaveGoBuild(t)
+ 	testenv.MustHaveCGO(t)
+ 	goos, err := goEnv("GOOS")
 diff --git a/src/cmd/cgo/internal/testsanitizers/lsan_test.go b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-index 4dde3d20eca038..4ca85d6631773d 100644
+index 4dde3d20eca038..0e0ed2ffab8c3f 100644
 --- a/src/cmd/cgo/internal/testsanitizers/lsan_test.go
 +++ b/src/cmd/cgo/internal/testsanitizers/lsan_test.go
-@@ -14,6 +14,7 @@ import (
- )
- 
- func TestLSAN(t *testing.T) {
-+	t.Skip("skipping test for LSAN until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
- 	config := mustHaveLSAN(t)
+@@ -74,6 +74,7 @@ func TestLSAN(t *testing.T) {
+ }
  
- 	t.Parallel()
+ func mustHaveLSAN(t *testing.T) *config {
++	t.Skip("skipping sanitizer tests until we have a better way to reliably test it in CI. See https://github.com/golang/go/issues/72996.")
+ 	testenv.MustHaveGoBuild(t)
+ 	testenv.MustHaveCGO(t)
+ 	goos, err := goEnv("GOOS")

From a35c845f31e04a16620b100158fec04458953489 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Tue, 17 Feb 2026 11:48:55 +0000
Subject: [PATCH 732/887] Update submodule to latest master (f65692ea):
 cmd/compile: don't drop same register twice (#2137)

Co-authored-by: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9777ceceec8..f65692ea562 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9777ceceec8fee294d038182739cab7c845ad2d1
+Subproject commit f65692ea562bf24c21ae46854e98584dd4bcc201

From d83b7c582ce717dd2c8720b6e56e077af444e3d3 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 17 Feb 2026 12:45:25 +0000
Subject: [PATCH 733/887] implement s390x assembly for CGO-less (#2143)

---
 README.md                                     |   6 -
 eng/doc/NocgoOpenSSL.md                       |   1 +
 .../0001-Vendor-external-dependencies.patch   | 497 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |  31 +-
 4 files changed, 495 insertions(+), 40 deletions(-)

diff --git a/README.md b/README.md
index d0e9296bee3..5ab69498a7c 100644
--- a/README.md
+++ b/README.md
@@ -67,12 +67,6 @@ We build the forked Go toolset with the following list of OS/Arch combinations:
 * `darwin_amd64`
 * `darwin_arm64`
 
-> [!NOTE]
-> Cross-compilation to Windows is supported.
-> For other OS targets, cgo makes cross-compilation difficult, but it may still be possible.
->
-> For example, to build a program for `windows_arm64`, you can cross-compile on a `windows_amd64` or `linux_amd64` host.
-
 Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we
 recommend migrating existing Go projects to use the Microsoft build of Go. This
 guide also helps resolve commonly encountered issues.
diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 0a634762367..67fee33f762 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -23,6 +23,7 @@ Currently this experiment is supported on the following architectures:
 - **arm64**
 - ppc64le
 - riscv64
+- s390x (added in Go 1.27)
 
 The set of supported architectures is limited because each architecture requires a unique assembly implementation to call OpenSSL.
 Architectures are added based on demand and available resources.
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 2e0426d1fa3..92b8f5c709c 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -69,6 +69,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
  .../openssl/v2/internal/fakecgo/asm_ppc64le.s |   82 +
  .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
+ .../openssl/v2/internal/fakecgo/asm_s390x.s   |   55 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
  .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
  .../openssl/v2/internal/fakecgo/fakecgo.lock  |    3 +
@@ -90,6 +91,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
  .../v2/internal/fakecgo/trampolines_ppc64le.s |  227 ++
  .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
+ .../v2/internal/fakecgo/trampolines_s390x.s   |  163 ++
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
@@ -101,6 +103,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../fakecgo/ztrampolines_linux_arm64.s        |   93 +
  .../fakecgo/ztrampolines_linux_ppc64le.s      |  101 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
+ .../fakecgo/ztrampolines_linux_s390x.s        |   90 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
  .../openssl/v2/internal/ossl/asm_386.s        |   98 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  120 +
@@ -109,6 +112,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/asm_others.s     |    7 +
  .../openssl/v2/internal/ossl/asm_ppc64le.s    |  141 +
  .../openssl/v2/internal/ossl/asm_riscv64.s    |  109 +
+ .../openssl/v2/internal/ossl/asm_s390x.s      |  117 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
  .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
@@ -120,7 +124,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
  .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
- .../openssl/v2/internal/ossl/zdl.s            |   53 +
+ .../openssl/v2/internal/ossl/zdl.s            |   55 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
  .../openssl/v2/internal/ossl/zossl.c          | 2056 ++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         |   67 +
@@ -268,7 +272,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 260 files changed, 33274 insertions(+), 7 deletions(-)
+ 264 files changed, 33701 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -323,6 +327,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
@@ -344,6 +349,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
@@ -355,6 +361,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
@@ -363,6 +370,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
@@ -2195,7 +2203,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..922ff660ba1a10 100644
+index d6c515017a7009..d7839b1f9b0e8d 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2204,17 +2212,17 @@ index d6c515017a7009..922ff660ba1a10 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..7fa45836c2c67e 100644
+index 2223d2a7c231c1..2c22d474c24c7f 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c h1:p0QTwdjwbAVb2M+qYggEEeVLGW/lHYx623pr16NBHHQ=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1 h1:GaJ5M4Mic8ZElJ9YLxhphlCjLy0Cy+2QB8/O40GKF8s=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
@@ -7833,6 +7841,67 @@ index 00000000000000..acf82c1b5ae501
 +	ADD  $(8*29), X2
 +
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
+new file mode 100644
+index 00000000000000..b64466501dee38
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
+@@ -0,0 +1,55 @@
++// Copyright 2016 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	// Start with standard C stack frame layout and linkage.
++
++	// Save R6-R15 in the register save area of the calling function.
++	STMG R6, R15, 48(R15)
++
++	// Allocate 96 bytes on the stack.
++	MOVD $-96(R15), R15
++
++	// Save F8-F15 in our stack frame.
++	FMOVD F8, 32(R15)
++	FMOVD F9, 40(R15)
++	FMOVD F10, 48(R15)
++	FMOVD F11, 56(R15)
++	FMOVD F12, 64(R15)
++	FMOVD F13, 72(R15)
++	FMOVD F14, 80(R15)
++	FMOVD F15, 88(R15)
++
++	// Initialize Go ABI environment.
++	BL runtime·load_g(SB)
++
++	MOVD R2, 8(R15)  // fn unsafe.Pointer
++	MOVD R3, 16(R15) // a unsafe.Pointer
++
++	// Skip R4 = n uint32
++	MOVD R5, 24(R15)             // ctxt uintptr
++	BL   runtime·cgocallback(SB)
++
++	FMOVD 32(R15), F8
++	FMOVD 40(R15), F9
++	FMOVD 48(R15), F10
++	FMOVD 56(R15), F11
++	FMOVD 64(R15), F12
++	FMOVD 72(R15), F13
++	FMOVD 80(R15), F14
++	FMOVD 88(R15), F15
++
++	// De-allocate stack frame.
++	MOVD $96(R15), R15
++
++	// Restore R6-R15.
++	LMG 48(R15), R6, R15
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
 new file mode 100644
 index 00000000000000..5f70632fa7cc33
@@ -7969,12 +8038,12 @@ index 00000000000000..7927deb2785263
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 new file mode 100644
-index 00000000000000..0a5d657971cba1
+index 00000000000000..4e9bbeb5c4f3e3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 @@ -0,0 +1,3 @@
 +{
-+  "commit_hash": "071d22a94b4bc442118b3b0927274dd5ae4d7551"
++  "commit_hash": "585a4c527464bb6ef91b22aef08d55219c8fab09"
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
 new file mode 100644
@@ -9238,6 +9307,175 @@ index 00000000000000..50b364773606d1
 +	CALL X5
 +	MOV  X10, ret+48(FP)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
+new file mode 100644
+index 00000000000000..49fec0cf2f1718
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
+@@ -0,0 +1,163 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build go1.27 && !cgo && linux
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// S390X ELF ABI: args R2-R6, return R2, callee-save R6-R13/R15/F8-F15, R14=LR, R15=SP
++// CRITICAL: R0 as base register means "no base" (literal 0), not R0's value!
++
++// x_cgo_init_trampoline must preserve R9 for Go runtime
++TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R14, R0
++	MOVD R15, R1
++	SUB  $192, R15
++	MOVD R1, 0(R15)   // backchain
++	MOVD R0, 160(R15) // save R14
++	MOVD R1, 168(R15) // save old R15
++	MOVD R9, 176(R15) // save R9 (Go runtime needs this preserved)
++
++	MOVD ·x_cgo_init_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 176(R15), R9
++	MOVD 160(R15), R14
++	MOVD 168(R15), R15
++	BR   R14
++
++// Standard trampoline pattern: save R14/R15, call via pointer, restore
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R14, R0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)
++	MOVD R0, 152(R15)
++
++	MOVD ·x_cgo_thread_start_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R14, R0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)
++	MOVD R0, 152(R15)
++
++	MOVD ·x_cgo_setenv_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R14, R0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)
++	MOVD R0, 152(R15)
++
++	MOVD ·x_cgo_unsetenv_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++// These just tail-call into Go functions
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	BR ·x_cgo_notify_runtime_init_done(SB)
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	BR ·x_cgo_bindm(SB)
++
++// setg_trampoline(setg uintptr, g uintptr) - called from Go
++TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
++	MOVD 8(R15), R1  // setg function pointer
++	MOVD 16(R15), R2 // g pointer → C arg
++
++	MOVD R14, R0
++	MOVD R15, R3
++	SUB  $160, R15
++	MOVD R3, 0(R15)
++	MOVD R0, 112(R15)
++
++	BL R1                 // call setg_gcc
++	BL runtime·load_g(SB)
++
++	MOVD 112(R15), R14
++	ADD  $160, R15
++	BR   R14
++
++// threadentry_trampoline - called FROM C (pthread_create), arg in R2
++TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	STMG R6, R15, 48(R15) // C save area
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)       // backchain
++	MOVD R2, 8(R15)       // pthread arg → Go arg
++
++	MOVD ·threadentry_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	ADD $176, R15
++	LMG 48(R15), R6, R15
++	RET
++
++// call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr - Go calling C
++TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
++	// Load Go args before modifying R15
++	MOVD 8(R15), R1   // fn
++	MOVD 16(R15), R7  // a1
++	MOVD 24(R15), R8  // a2
++	MOVD 32(R15), R9  // a3
++	MOVD 40(R15), R10 // a4
++	MOVD 48(R15), R11 // a5
++
++	// Save state
++	MOVD R15, R0    // original R15
++	MOVD R12, R6    // Go's R12
++	ADD  $-128, R15
++
++	// Set up C frame with backchain
++	MOVD R0, 0(R15) // backchain → original R15
++	MOVD R0, R3     // R3 = original R15 (can't use R0 as base!)
++	MOVD 0(R3), R7  // save 0(original R15)
++	MOVD $0, 0(R3)  // terminate backchain
++
++	// Save context
++	MOVD R14, 8(R15)
++	MOVD R6, 16(R15) // R12
++	MOVD R0, 24(R15) // original R15
++	MOVD R7, 32(R15) // saved backchain
++
++	// Set up C args (reload a1 since R7 was clobbered)
++	MOVD 16(R3), R2 // a1 (use R3 as base, not R0!)
++	MOVD R8, R3     // a2
++	MOVD R9, R4     // a3
++	MOVD R10, R5    // a4
++	MOVD R11, R6    // a5
++
++	BL R1
++
++	// Store result and restore
++	MOVD 24(R15), R3 // original R15
++	MOVD R2, 56(R3)  // return value
++	MOVD 32(R15), R7
++	MOVD R7, 0(R3)   // restore backchain
++
++	MOVD 8(R15), R14
++	MOVD 16(R15), R12
++	MOVD 24(R15), R15
++	BR   R14
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
 index 00000000000000..fb667453f207c0
@@ -10429,6 +10667,102 @@ index 00000000000000..30dbb92f51fbb8
 +
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
+new file mode 100644
+index 00000000000000..edc21761ddd8ad
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
+@@ -0,0 +1,90 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build go1.27 && !cgo
++
++#include "textflag.h"
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2 already has the argument from C caller
++	MOVD ·x_cgo_purego_setegid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setegid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _seteuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setgid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2, R3 have arguments from C caller
++	MOVD ·x_cgo_purego_setregid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setregid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2, R3, R4 have arguments from C caller
++	MOVD ·x_cgo_purego_setresgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setresgid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2, R3, R4 have arguments from C caller
++	MOVD ·x_cgo_purego_setresuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setresuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2, R3 have arguments from C caller
++	MOVD ·x_cgo_purego_setreuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setreuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT|NOFRAME, $0
++	// R2, R3 have arguments from C caller
++	MOVD ·x_cgo_purego_setgroups_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _setgroups(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setgroups(SB)
++
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
 index 00000000000000..6a073bea0944d1
@@ -10935,7 +11269,7 @@ index 00000000000000..261a7e4cb90d56
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
-index 00000000000000..340bfcc9cd9605
+index 00000000000000..1c45d920f07f18
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 @@ -0,0 +1,7 @@
@@ -10943,7 +11277,7 @@ index 00000000000000..340bfcc9cd9605
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !ppc64le && !riscv64
++//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !ppc64le && !riscv64 && (!s390x || !go1.27)
 +
 +// This file silences errors about body-less functions.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
@@ -11208,6 +11542,129 @@ index 00000000000000..6ff0ddd2922d8b
 +	MOV X11, libcCallInfo_r2(X5) // save r2
 +
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
+new file mode 100644
+index 00000000000000..0fbccc3731dae4
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
+@@ -0,0 +1,117 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build go1.27 && !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++// S390X ELF ABI:
++// - Args in R2-R6, float args in F0, F2, F4, F6
++// - Return values in R2, R3 (and F0 for floats)
++// - Callee-saved: R6-R13, R15, F8-F15
++// - R14 is link register (return address)
++// - R15 is stack pointer
++// - Standard frame: 160 bytes minimum with register save area at 48(R15)
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// R2 already contains the libcArgs pointer from cgocall
++	// Save callee-saved registers to caller's save area
++	STMG R6, R15, 48(R15)
++	MOVD R15, R1
++	SUB  $32, R15
++	MOVD R1, 0(R15)
++	MOVD R2, 8(R15)
++	BL   ·syscallNSystemStack(SB)
++	ADD  $32, R15
++	LMG  48(R15), R6, R15
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $64-8
++	// Save callee-saved registers we'll use (R6-R11)
++	STMG R6, R11, 8(R15)
++
++	// Load libcArgs pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R11
++
++	// Store values we need across the C call in callee-saved registers
++	MOVD R15, R7                    // R7 = original SP
++	MOVD R11, R8                    // R8 = libcArgs
++	MOVD libcCallInfo_args(R11), R9 // R9 = args
++	MOVD libcCallInfo_fn(R11), R10  // R10 = fn
++	MOVD libcCallInfo_n(R11), R6    // R6 = n
++
++	// Do we have more than 5 arguments?
++	CMPBLE R6, $5, _allocsmall
++
++	// >5 args: allocate frame for stack args ((n-5+1) & ~1) * 8 + 160
++	MOVD R6, R1
++	SUB  $5, R1
++	ADD  $1, R1
++	MOVD $~1, R0
++	AND  R0, R1
++	SLD  $3, R1
++	ADD  $160, R1
++	SUB  R1, R7, R15
++	MOVD $~15, R0
++	AND  R0, R15     // 16-byte align
++	MOVD R7, 0(R15)  // back chain
++
++	// Copy args[5..n-1] to stack at offset 160
++	MOVD $5, R1
++
++_stackargs:
++	SLD  $3, R1, R3
++	MOVD (R9)(R3*1), R0
++	SUB  $5, R1, R4
++	SLD  $3, R4
++	ADD  $160, R4
++	MOVD R0, (R15)(R4*1)
++	ADD  $1, R1
++	CMP  R1, R6
++	BLT  _stackargs
++	BR   _5args
++
++_allocsmall:
++	// <=5 args: allocate minimum 160-byte C frame
++	SUB  $160, R7, R15
++	MOVD $~15, R0
++	AND  R0, R15
++	MOVD R7, 0(R15)    // back chain
++
++	// Branch to appropriate label based on arg count
++	CMPBEQ R6, $0, _0args
++	CMPBEQ R6, $1, _1args
++	CMPBEQ R6, $2, _2args
++	CMPBEQ R6, $3, _3args
++	CMPBEQ R6, $4, _4args
++
++_5args:
++	MOVD (4*8)(R9), R6
++
++_4args:
++	MOVD (3*8)(R9), R5
++
++_3args:
++	MOVD (2*8)(R9), R4
++
++_2args:
++	MOVD (1*8)(R9), R3
++
++_1args:
++	MOVD (0*8)(R9), R2
++
++_0args:
++	BL R10
++
++	// Restore stack pointer
++	MOVD R7, R15
++
++	// Save return values
++	MOVD R2, libcCallInfo_r1(R8)
++	MOVD R3, libcCallInfo_r2(R8)
++
++	// Restore callee-saved registers (R6-R11)
++	LMG 8(R15), R6, R11
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
 new file mode 100644
 index 00000000000000..e94cca9e27e30a
@@ -11927,11 +12384,11 @@ index 00000000000000..20cb4556a12aa8
 +//go:cgo_import_dynamic _ _ "libdl.so.2"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
 new file mode 100644
-index 00000000000000..9564b3a7033521
+index 00000000000000..5bdbec31d8f2ce
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
 @@ -0,0 +1,20 @@
-+//go:build !cgo && unix
++//go:build !cgo && unix && (go1.27 || !s390x)
 +
 +package ossl
 +
@@ -11981,10 +12438,10 @@ index 00000000000000..48640cdcbf558f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
 new file mode 100644
-index 00000000000000..42f49b44875f91
+index 00000000000000..068a94d4c83ae1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
-@@ -0,0 +1,53 @@
+@@ -0,0 +1,55 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && unix
@@ -11999,6 +12456,7 @@ index 00000000000000..42f49b44875f91
 +#ifndef GOARCH_mips64le
 +#ifndef GOARCH_ppc64
 +#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
 +#ifndef GOARCH_sparc64
 +#define _GOPTRSIZE 4
 +#endif
@@ -12010,6 +12468,7 @@ index 00000000000000..42f49b44875f91
 +#endif
 +#endif
 +#endif
++#endif
 +
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
@@ -19486,11 +19945,11 @@ index 00000000000000..0e61cc128ef981
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
 new file mode 100644
-index 00000000000000..1a2f48ed510326
+index 00000000000000..2985d598579236
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
 @@ -0,0 +1,32 @@
-+//go:build unix && !cmd_go_bootstrap && !cgo
++//go:build unix && !cmd_go_bootstrap && !cgo && (go1.27 || !s390x)
 +
 +package osslsetup
 +
@@ -37422,11 +37881,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..a0d2092e08e8c4 100644
+index 48967bc9ee3bd2..028f6a94dee47e 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260209104757-7aebba71e96c
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0397e1cb92e..0a7082556ea 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -10,7 +10,7 @@ Update the Go toolchain build settings so that it uses the
 desired goexperiments and build tags.
 ---
  .gitignore                                    |   2 +
- .../compile/internal/logopt/logopt_test.go    |   6 +-
+ .../compile/internal/logopt/logopt_test.go    |   5 +
  src/cmd/compile/script_test.go                |   8 +
  src/cmd/dist/build.go                         |  80 +++-
  src/cmd/dist/test.go                          |  18 +-
@@ -18,7 +18,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 229 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 231 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2710 insertions(+), 15 deletions(-)
+ 43 files changed, 2712 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -94,7 +94,7 @@ index 344b31f7ac1c1d..b4583113d5aa15 100644
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
 diff --git a/src/cmd/compile/internal/logopt/logopt_test.go b/src/cmd/compile/internal/logopt/logopt_test.go
-index 1edabf9fb7ff04..026f8cb0278ab6 100644
+index 1edabf9fb7ff04..16f898462cc067 100644
 --- a/src/cmd/compile/internal/logopt/logopt_test.go
 +++ b/src/cmd/compile/internal/logopt/logopt_test.go
 @@ -5,6 +5,7 @@
@@ -105,14 +105,13 @@ index 1edabf9fb7ff04..026f8cb0278ab6 100644
  	"internal/testenv"
  	"os"
  	"path/filepath"
-@@ -147,7 +148,10 @@ func s15a8(x *[15]int64) [15]int64 {
- 		arches := []string{runtime.GOARCH}
+@@ -148,6 +149,10 @@ func s15a8(x *[15]int64) [15]int64 {
  		goos0 := runtime.GOOS
  		if runtime.GOARCH == "amd64" { // Test many things with "linux" (wasm will get "js")
--			arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
-+			if !goexperiment.SystemCrypto {
-+				// SystemCrypto does not support cross-compilation.
-+				arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
+ 			arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
++			if goexperiment.SystemCrypto {
++				// SystemCrypto does not support cross-compilation on all architectures.
++				arches = []string{"arm", "arm64", "386", "amd64", "ppc64le", "riscv64", "s390x"}
 +			}
  			goos0 = "linux"
  		}
@@ -411,10 +410,10 @@ index 92e8a803105f8d..95d47b625c28a7 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..306133fef6d65f
+index 00000000000000..50974ee299111c
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,229 @@
+@@ -0,0 +1,231 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -505,6 +504,8 @@ index 00000000000000..306133fef6d65f
 +		{"linux", "amd64", "", true},
 +		{"linux", "arm64", "", true},
 +		{"linux", "ppc64le", "", true},
++		{"linux", "riscv64", "", true},
++		{"linux", "s390x", "", true},
 +		{"linux", "arm", "", true},
 +		{"darwin", "amd64", "", true},
 +		{"darwin", "arm64", "", true},
@@ -3107,7 +3108,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..d659272bf6ca13
+index 00000000000000..b21bc80cfe948f
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,18 @@
@@ -3115,7 +3116,7 @@ index 00000000000000..d659272bf6ca13
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64)
++//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64 || s390x)
 +
 +package crypto
 +
@@ -3124,7 +3125,7 @@ index 00000000000000..d659272bf6ca13
 +	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 +
 +	Our cgo-less OpenSSL implementation is only supported on certain architectures.
-+	These architectures are: 386, amd64, arm, arm64, ppc64le and riscv64.
++	These architectures are: 386, amd64, arm, arm64, ppc64le, riscv64 and s390x.
 +	
 +	For more information, including how to request support for additional architectures, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 +	`

From 351297d833a915a3baa667e53319fbc78f39477b Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 17 Feb 2026 14:21:01 +0000
Subject: [PATCH 734/887] darwin: fix SHA-2-224 incorrectly marked as supported
 (#2144)

---
 eng/_util/cmd/updatecryptodocs/docs.go | 1 +
 eng/doc/CrossPlatformCryptography.md   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/eng/_util/cmd/updatecryptodocs/docs.go b/eng/_util/cmd/updatecryptodocs/docs.go
index 73c3adf864f..65ff3207e3f 100644
--- a/eng/_util/cmd/updatecryptodocs/docs.go
+++ b/eng/_util/cmd/updatecryptodocs/docs.go
@@ -91,6 +91,7 @@ var doc = Document{
 					Name: "SHA-2-224",
 					Platforms: Platforms{
 						Windows: PlatformStatus{Supported: NotSupported},
+						MacOS:   PlatformStatus{Supported: NotSupported},
 					},
 				},
 				{Name: "SHA-2-256"},
diff --git a/eng/doc/CrossPlatformCryptography.md b/eng/doc/CrossPlatformCryptography.md
index 883612f03b4..095c0ef7429 100644
--- a/eng/doc/CrossPlatformCryptography.md
+++ b/eng/doc/CrossPlatformCryptography.md
@@ -61,7 +61,7 @@ This section includes the following packages:
 | --------------------- | -------------- | -------------- | -------------- |
 | MD5                   | ✔️             | ✔️             | ✔️             |
 | SHA-1                 | ✔️             | ✔️             | ✔️             |
-| SHA-2-224             | ❌️             | ✔️             | ✔️             |
+| SHA-2-224             | ❌️             | ✔️             | ❌️             |
 | SHA-2-256             | ✔️             | ✔️             | ✔️             |
 | SHA-2-384             | ✔️             | ✔️             | ✔️             |
 | SHA-2-512             | ✔️             | ✔️             | ✔️             |

From 465066c7a8c0c77a20f8bb8857ca2920373b3653 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 17 Feb 2026 15:20:55 +0000
Subject: [PATCH 735/887] implement loong64 assembly for CGO-less (#2145)

---
 eng/doc/NocgoOpenSSL.md                       |   1 +
 .../0001-Vendor-external-dependencies.patch   | 456 +++++++++++++++++-
 ...03-Implement-crypto-internal-backend.patch |  20 +-
 3 files changed, 458 insertions(+), 19 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 67fee33f762..059576f7795 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -21,6 +21,7 @@ Currently this experiment is supported on the following architectures:
 - **amd64**
 - arm
 - **arm64**
+- loong64
 - ppc64le
 - riscv64
 - s390x (added in Go 1.27)
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 92b8f5c709c..2b4156f9af3 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -62,11 +62,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
+ .../openssl/v2/internal/fakecgo/abi_loong64.h |   60 +
  .../openssl/v2/internal/fakecgo/abi_ppc64x.h  |  195 ++
  .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
  .../openssl/v2/internal/fakecgo/asm_arm.s     |   52 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
+ .../openssl/v2/internal/fakecgo/asm_loong64.s |   40 +
  .../openssl/v2/internal/fakecgo/asm_ppc64le.s |   82 +
  .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
  .../openssl/v2/internal/fakecgo/asm_s390x.s   |   55 +
@@ -89,6 +91,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
  .../v2/internal/fakecgo/trampolines_arm.s     |   81 +
  .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
+ .../v2/internal/fakecgo/trampolines_loong64.s |   88 +
  .../v2/internal/fakecgo/trampolines_ppc64le.s |  227 ++
  .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
  .../v2/internal/fakecgo/trampolines_s390x.s   |  163 ++
@@ -101,6 +104,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../fakecgo/ztrampolines_linux_amd64.s        |  102 +
  .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
  .../fakecgo/ztrampolines_linux_arm64.s        |   93 +
+ .../fakecgo/ztrampolines_linux_loong64.s      |   92 +
  .../fakecgo/ztrampolines_linux_ppc64le.s      |  101 +
  .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
  .../fakecgo/ztrampolines_linux_s390x.s        |   90 +
@@ -109,6 +113,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/asm_amd64.s      |  120 +
  .../openssl/v2/internal/ossl/asm_arm.s        |  104 +
  .../openssl/v2/internal/ossl/asm_arm64.s      |   97 +
+ .../openssl/v2/internal/ossl/asm_loong64.s    |  116 +
  .../openssl/v2/internal/ossl/asm_others.s     |    7 +
  .../openssl/v2/internal/ossl/asm_ppc64le.s    |  141 +
  .../openssl/v2/internal/ossl/asm_riscv64.s    |  109 +
@@ -272,7 +277,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 264 files changed, 33701 insertions(+), 7 deletions(-)
+ 269 files changed, 34097 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -320,11 +325,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
@@ -347,6 +354,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
@@ -359,6 +367,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
@@ -367,6 +376,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
@@ -2203,7 +2213,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..d7839b1f9b0e8d 100644
+index d6c515017a7009..15ab996b3e47e5 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2212,17 +2222,17 @@ index d6c515017a7009..d7839b1f9b0e8d 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..2c22d474c24c7f 100644
+index 2223d2a7c231c1..11a1b9af830278 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1 h1:GaJ5M4Mic8ZElJ9YLxhphlCjLy0Cy+2QB8/O40GKF8s=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4 h1:2kbDvyeg2zT1dsjfp6I445SCP4ryK88vnIODU+x0W3o=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
@@ -7288,6 +7298,72 @@ index 00000000000000..5d5061ec1dbf8c
 +	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
 +	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
 +	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
+new file mode 100644
+index 00000000000000..b10d83732f1c6e
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
+@@ -0,0 +1,60 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R22_TO_R31(offset) saves R22 ~ R31 to the stack space
++// of ((offset)+0*8)(R3) ~ ((offset)+9*8)(R3).
++//
++// SAVE_F24_TO_F31(offset) saves F24 ~ F31 to the stack space
++// of ((offset)+0*8)(R3) ~ ((offset)+7*8)(R3).
++//
++// Note: g is R22
++
++#define SAVE_R22_TO_R31(offset)	\
++	MOVV	g,   ((offset)+(0*8))(R3)	\
++	MOVV	R23, ((offset)+(1*8))(R3)	\
++	MOVV	R24, ((offset)+(2*8))(R3)	\
++	MOVV	R25, ((offset)+(3*8))(R3)	\
++	MOVV	R26, ((offset)+(4*8))(R3)	\
++	MOVV	R27, ((offset)+(5*8))(R3)	\
++	MOVV	R28, ((offset)+(6*8))(R3)	\
++	MOVV	R29, ((offset)+(7*8))(R3)	\
++	MOVV	R30, ((offset)+(8*8))(R3)	\
++	MOVV	R31, ((offset)+(9*8))(R3)
++
++#define SAVE_F24_TO_F31(offset)	\
++	MOVD	F24, ((offset)+(0*8))(R3)	\
++	MOVD	F25, ((offset)+(1*8))(R3)	\
++	MOVD	F26, ((offset)+(2*8))(R3)	\
++	MOVD	F27, ((offset)+(3*8))(R3)	\
++	MOVD	F28, ((offset)+(4*8))(R3)	\
++	MOVD	F29, ((offset)+(5*8))(R3)	\
++	MOVD	F30, ((offset)+(6*8))(R3)	\
++	MOVD	F31, ((offset)+(7*8))(R3)
++
++#define RESTORE_R22_TO_R31(offset)	\
++	MOVV	((offset)+(0*8))(R3),  g	\
++	MOVV	((offset)+(1*8))(R3), R23	\
++	MOVV	((offset)+(2*8))(R3), R24	\
++	MOVV	((offset)+(3*8))(R3), R25	\
++	MOVV	((offset)+(4*8))(R3), R26	\
++	MOVV	((offset)+(5*8))(R3), R27	\
++	MOVV	((offset)+(6*8))(R3), R28	\
++	MOVV	((offset)+(7*8))(R3), R29	\
++	MOVV	((offset)+(8*8))(R3), R30	\
++	MOVV	((offset)+(9*8))(R3), R31
++
++#define RESTORE_F24_TO_F31(offset)	\
++	MOVD	((offset)+(0*8))(R3), F24	\
++	MOVD	((offset)+(1*8))(R3), F25	\
++	MOVD	((offset)+(2*8))(R3), F26	\
++	MOVD	((offset)+(3*8))(R3), F27	\
++	MOVD	((offset)+(4*8))(R3), F28	\
++	MOVD	((offset)+(5*8))(R3), F29	\
++	MOVD	((offset)+(6*8))(R3), F30	\
++	MOVD	((offset)+(7*8))(R3), F31
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
 new file mode 100644
 index 00000000000000..245a5266f6e9fa
@@ -7669,6 +7745,52 @@ index 00000000000000..50e5261d922c56
 +
 +	ADD $(8*24), RSP
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
+new file mode 100644
+index 00000000000000..e81df86a56e4ad
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
+@@ -0,0 +1,40 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_loong64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * We still need to save all callee save register as before, and then
++ * push 3 args for fn (R4, R5, R7), skipping R6.
++ * Also note that at procedure entry in gc world, 8(R29) will be the
++ *  first arg.
++ */
++
++	ADDV $(-23*8), R3
++	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
++	MOVV R5, (2*8)(R3) // a unsafe.Pointer
++	MOVV R7, (3*8)(R3) // ctxt uintptr
++
++	SAVE_R22_TO_R31((4*8))
++	SAVE_F24_TO_F31((14*8))
++	MOVV R1, (22*8)(R3)
++
++	// Initialize Go ABI environment
++	JAL runtime·load_g(SB)
++
++	JAL runtime·cgocallback(SB)
++
++	RESTORE_R22_TO_R31((4*8))
++	RESTORE_F24_TO_F31((14*8))
++	MOVV (22*8)(R3), R1
++
++	ADDV $(23*8), R3
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
 new file mode 100644
 index 00000000000000..6d1938cd8d8bcd
@@ -8996,6 +9118,100 @@ index 00000000000000..ddd01434d04cda
 +	CALL R9
 +	MOVD R0, ret+48(FP)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
+new file mode 100644
+index 00000000000000..89bf8813bade7a
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
+@@ -0,0 +1,88 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++
++//go:build !cgo && (darwin || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_loong64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// R23 is used as temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVV R4, 8(R3)
++	MOVV R5, 16(R3)
++	MOVV ·x_cgo_init_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVV R4, 8(R3)
++	MOVV ·x_cgo_thread_start_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVV R4, 8(R3)
++	MOVV ·x_cgo_setenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVV R4, 8(R3)
++	MOVV ·x_cgo_unsetenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOVV G+8(FP), R4
++	MOVV setg+0(FP), R23
++	CALL (R23)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	ADDV $(-23*8), R3
++	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
++	MOVV R5, (2*8)(R3) // a unsafe.Pointer
++	MOVV R7, (3*8)(R3) // ctxt uintptr
++
++	SAVE_R22_TO_R31((4*8))
++	SAVE_F24_TO_F31((14*8))
++	MOVV R1, (22*8)(R3)
++
++	MOVV ·threadentry_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++
++	RESTORE_R22_TO_R31((4*8))
++	RESTORE_F24_TO_F31((14*8))
++	MOVV (22*8)(R3), R1
++
++	ADDV $(23*8), R3
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVV fn+0(FP), R23
++	MOVV a1+8(FP), R4
++	MOVV a2+16(FP), R5
++	MOVV a3+24(FP), R6
++	MOVV a4+32(FP), R7
++	MOVV a5+40(FP), R8
++	CALL (R23)
++	MOVV R4, ret+48(FP)
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
 new file mode 100644
 index 00000000000000..586ccaf91df1a4
@@ -10462,6 +10678,104 @@ index 00000000000000..0b25425c004d38
 +TEXT _setgroups(SB), NOSPLIT, $0-0
 +	JMP purego_setgroups(SB)
 +
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
+new file mode 100644
+index 00000000000000..3c8a0d64e659fa
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
+@@ -0,0 +1,92 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++TEXT ___errno_location(SB), NOSPLIT, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setegid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setegid(SB), NOSPLIT, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_seteuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _seteuid(SB), NOSPLIT, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setgid(SB), NOSPLIT, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setregid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setregid(SB), NOSPLIT, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setresgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setresgid(SB), NOSPLIT, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setresuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setresuid(SB), NOSPLIT, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setreuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setreuid(SB), NOSPLIT, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setuid(SB), NOSPLIT, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
++	MOVV ·x_cgo_purego_setgroups_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _setgroups(SB), NOSPLIT, $0-0
++	JMP purego_setgroups(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
 new file mode 100644
 index 00000000000000..70c51e674587ef
@@ -11267,9 +11581,131 @@ index 00000000000000..261a7e4cb90d56
 +	MOVD R1, libcCallInfo_r2(R3) // save r2
 +
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
+new file mode 100644
+index 00000000000000..83ab9979dfdbfe
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
+@@ -0,0 +1,116 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVV R4, 8(R3)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
++	// Load pointer from stack (ABI0 calling convention)
++	MOVV libcArgs+0(FP), R12
++
++	// Save original stack pointer
++	MOVV R3, R23
++
++	// Align stack to 16 bytes for C calling convention
++	MOVV $-16, R15
++	AND  R15, R3
++
++	MOVV libcCallInfo_args(R12), R13
++	MOVV libcCallInfo_fn(R12), R14
++
++	// Do we have more than 8 arguments?
++	MOVV libcCallInfo_n(R12), R4
++	BEQ  R4, R0, _0args
++	MOVV $1, R15
++	BEQ  R4, R15, _1args
++	MOVV $2, R15
++	BEQ  R4, R15, _2args
++	MOVV $3, R15
++	BEQ  R4, R15, _3args
++	MOVV $4, R15
++	BEQ  R4, R15, _4args
++	MOVV $5, R15
++	BEQ  R4, R15, _5args
++	MOVV $6, R15
++	BEQ  R4, R15, _6args
++	MOVV $7, R15
++	BEQ  R4, R15, _7args
++	MOVV $8, R15
++	BEQ  R4, R15, _8args
++
++	// Reserve stack space for remaining args
++	MOVV R4, R16
++	ADDV $-8, R16 // R16 = n-8
++	MOVV R16, R12 // R12 = n-8 (reuse R12, no longer need libcArgs)
++	ADDV $1, R12  // R12 = (n-8)+1
++	MOVV $-2, R15
++	AND  R15, R12 // make even number of words for stack alignment
++	SLLV $3, R12  // R12 = bytes to reserve
++	SUBV R12, R3  // SP -= bytes
++
++	// R16: size of stack arguments (n-8)*8
++	// R15: &args[8]
++	// R17: loop counter, from 0 to (n-8)*8
++	// R18: scratch
++	// R19: copy of R3 (SP)
++	// R20: scratch
++	SLLV $3, R16     // R16 = (n-8)*8
++	MOVV R13, R15
++	ADDV $(8*8), R15 // R15 = args + 64 = &args[8]
++	MOVV R0, R17     // R17 = 0 (loop counter)
++	MOVV R3, R19     // R19 = SP copy
++
++stackargs:
++	MOVV R15, R18
++	ADDV R17, R18            // R18 = &args[8] + counter
++	MOVV (R18), R18          // R18 = args[8 + counter/8]
++	MOVV R19, R20
++	ADDV R17, R20            // R20 = SP_copy + counter
++	MOVV R18, (R20)          // stack[counter/8] = R18
++	ADDV $8, R17             // counter += 8
++	BNE  R17, R16, stackargs // while counter != (n-8)*8
++
++_8args:
++	MOVV (7*8)(R13), R11
++
++_7args:
++	MOVV (6*8)(R13), R10
++
++_6args:
++	MOVV (5*8)(R13), R9
++
++_5args:
++	MOVV (4*8)(R13), R8
++
++_4args:
++	MOVV (3*8)(R13), R7
++
++_3args:
++	MOVV (2*8)(R13), R6
++
++_2args:
++	MOVV (1*8)(R13), R5
++
++_1args:
++	MOVV (0*8)(R13), R4
++
++_0args:
++
++	CALL (R14)
++
++	// Restore original stack pointer
++	MOVV R23, R3
++
++	MOVV libcArgs+0(FP), R12
++	MOVV R4, libcCallInfo_r1(R12) // save r1
++	MOVV R5, libcCallInfo_r2(R12) // save r2
++
++	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 new file mode 100644
-index 00000000000000..1c45d920f07f18
+index 00000000000000..59cfb27799734a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
 @@ -0,0 +1,7 @@
@@ -11277,7 +11713,7 @@ index 00000000000000..1c45d920f07f18
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !ppc64le && !riscv64 && (!s390x || !go1.27)
++//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !loong64 && !ppc64le && !riscv64 && (!s390x || !go1.27)
 +
 +// This file silences errors about body-less functions.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
@@ -37881,11 +38317,11 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..028f6a94dee47e 100644
+index 48967bc9ee3bd2..1f87e000dbdbc9 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260216103108-5ebb75d331c1
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 0a7082556ea..f8c2500c7c2 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -18,7 +18,7 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 231 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 233 ++++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2712 insertions(+), 14 deletions(-)
+ 43 files changed, 2714 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -94,7 +94,7 @@ index 344b31f7ac1c1d..b4583113d5aa15 100644
  # For files created by specific development environment (e.g. editor),
  # use alternative ways to exclude files from git.
 diff --git a/src/cmd/compile/internal/logopt/logopt_test.go b/src/cmd/compile/internal/logopt/logopt_test.go
-index 1edabf9fb7ff04..16f898462cc067 100644
+index 1edabf9fb7ff04..f47c17401e480b 100644
 --- a/src/cmd/compile/internal/logopt/logopt_test.go
 +++ b/src/cmd/compile/internal/logopt/logopt_test.go
 @@ -5,6 +5,7 @@
@@ -111,7 +111,7 @@ index 1edabf9fb7ff04..16f898462cc067 100644
  			arches = []string{"arm", "arm64", "386", "amd64", "mips", "mips64", "loong64", "ppc64le", "riscv64", "s390x", "wasm"}
 +			if goexperiment.SystemCrypto {
 +				// SystemCrypto does not support cross-compilation on all architectures.
-+				arches = []string{"arm", "arm64", "386", "amd64", "ppc64le", "riscv64", "s390x"}
++				arches = []string{"arm", "arm64", "386", "amd64", "loong64", "ppc64le", "riscv64", "s390x"}
 +			}
  			goos0 = "linux"
  		}
@@ -410,10 +410,10 @@ index 92e8a803105f8d..95d47b625c28a7 100644
  	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
-index 00000000000000..50974ee299111c
+index 00000000000000..d6cc434197cff1
 --- /dev/null
 +++ b/src/cmd/go/systemcrypto_test.go
-@@ -0,0 +1,231 @@
+@@ -0,0 +1,233 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -501,8 +501,10 @@ index 00000000000000..50974ee299111c
 +		goexp   string
 +		succeed bool
 +	}{
++		{"linux", "386", "", true},
 +		{"linux", "amd64", "", true},
 +		{"linux", "arm64", "", true},
++		{"linux", "loong64", "", true},
 +		{"linux", "ppc64le", "", true},
 +		{"linux", "riscv64", "", true},
 +		{"linux", "s390x", "", true},
@@ -3108,7 +3110,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..b21bc80cfe948f
+index 00000000000000..1461a5f75b3b06
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,18 @@
@@ -3116,7 +3118,7 @@ index 00000000000000..b21bc80cfe948f
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || ppc64le || riscv64 || s390x)
++//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || loong64 || ppc64le || riscv64 || s390x)
 +
 +package crypto
 +
@@ -3125,7 +3127,7 @@ index 00000000000000..b21bc80cfe948f
 +	Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 +
 +	Our cgo-less OpenSSL implementation is only supported on certain architectures.
-+	These architectures are: 386, amd64, arm, arm64, ppc64le, riscv64 and s390x.
++	These architectures are: 386, amd64, arm, arm64, loong64, ppc64le, riscv64 and s390x.
 +	
 +	For more information, including how to request support for additional architectures, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
 +	`

From 01ecf2ff9832c26a00db5a15f7400b0b42b447f7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Feb 2026 12:51:50 +0000
Subject: [PATCH 736/887] build(deps): bump github/codeql-action from 4.32.3 to
 4.32.4 (#2152)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.3 to 4.32.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e907b5e64f6b83e7804b09294d44122997950d6...89a39a4e59826350b863aa6b6252a07ad50cf83e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a1ee1030337..23032a90b37 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           category: /language:go

From 997b7f341f3607337e1ba86398ec2bc2a0972595 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 23 Feb 2026 16:11:36 +0000
Subject: [PATCH 737/887] Update submodule to latest master (4e693d1e):
 go/token: add File.String method

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f65692ea562..4e693d1ec52 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f65692ea562bf24c21ae46854e98584dd4bcc201
+Subproject commit 4e693d1ec52c86b262ac23f0d6cee6b60fef4fb0

From bdc1b0054a2d6c03b378dd7823cd44ab0b45afbc Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 24 Feb 2026 09:16:03 +0000
Subject: [PATCH 738/887] hash: implement missing boring logic for
 SHA512_224/256 (#2153)

---
 ...03-Implement-crypto-internal-backend.patch | 38 +++++-----
 patches/0004-Use-crypto-backends.patch        | 69 ++++++++++++++-----
 2 files changed, 73 insertions(+), 34 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index f8c2500c7c2..d0069a13087 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -31,7 +31,7 @@ desired goexperiments and build tags.
  .../internal/backend/bbig/big_openssl.go      |  12 +
  src/crypto/internal/backend/cng_windows.go    | 425 +++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 430 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 432 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2714 insertions(+), 14 deletions(-)
+ 43 files changed, 2716 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -244,7 +244,7 @@ index e4250e12de8975..feef0080cb12d6 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 4984f930b932c0..b651104235adcc 100644
+index 4396c9de190f1f..91502c9a23f724 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -381,10 +381,10 @@ index e2a77d7d7df85b..aaa3106e5a0e6e 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index 92e8a803105f8d..95d47b625c28a7 100644
+index 57bcde6da433a3..ce38a989aa87ff 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
-@@ -305,6 +305,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+@@ -309,6 +309,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
  	// Override GOOS and GOARCH for the build to build the tool using
  	// the same GOOS and GOARCH as this go command.
  	cfg.ForceHost()
@@ -395,7 +395,7 @@ index 92e8a803105f8d..95d47b625c28a7 100644
  
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
-@@ -312,8 +316,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+@@ -316,8 +320,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
  	loaderstate.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
@@ -1358,10 +1358,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..6d0aac8021aeb0
+index 00000000000000..a491519e864dc5
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,430 @@
+@@ -0,0 +1,432 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1442,16 +1442,18 @@ index 00000000000000..6d0aac8021aeb0
 +func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
 +func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
 +
-+func NewMD5() hash.Hash    { return xcrypto.NewMD5() }
-+func NewSHA1() hash.Hash   { return xcrypto.NewSHA1() }
-+func NewSHA224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA256() hash.Hash { return xcrypto.NewSHA256() }
-+func NewSHA384() hash.Hash { return xcrypto.NewSHA384() }
-+func NewSHA512() hash.Hash { return xcrypto.NewSHA512() }
-+func NewSHA3_224() *Hash   { panic("cryptobackend: not available") }
-+func NewSHA3_256() *Hash   { return xcrypto.NewSHA3_256() }
-+func NewSHA3_384() *Hash   { return xcrypto.NewSHA3_384() }
-+func NewSHA3_512() *Hash   { return xcrypto.NewSHA3_512() }
++func NewMD5() hash.Hash        { return xcrypto.NewMD5() }
++func NewSHA1() hash.Hash       { return xcrypto.NewSHA1() }
++func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA256() hash.Hash     { return xcrypto.NewSHA256() }
++func NewSHA384() hash.Hash     { return xcrypto.NewSHA384() }
++func NewSHA512() hash.Hash     { return xcrypto.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_256() *Hash       { return xcrypto.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return xcrypto.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return xcrypto.NewSHA3_512() }
 +
 +func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
 +func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 2ad21926757..5d95483669b 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -63,7 +63,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/darwin.go                      |  71 +++
+ src/crypto/rsa/darwin.go                      |  71 +++++++
  src/crypto/rsa/fips.go                        |  22 +-
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
@@ -77,7 +77,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha256/sha256_test.go              |  44 ++--
  src/crypto/sha3/sha3.go                       | 124 +++++++++--
  src/crypto/sha3/sha3_test.go                  |  18 +-
- src/crypto/sha512/sha512.go                   |   2 +-
+ src/crypto/sha512/sha512.go                   |  14 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
  src/crypto/tls/auth_test.go                   |   1 +
  src/crypto/tls/cipher_suites.go               |  10 +-
@@ -100,7 +100,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1505 insertions(+), 179 deletions(-)
+ 96 files changed, 1518 insertions(+), 180 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -126,7 +126,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index b651104235adcc..a54fc6124b1e0e 100644
+index 91502c9a23f724..41cde9ef2206af 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -138,7 +138,7 @@ index b651104235adcc..a54fc6124b1e0e 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1388,12 +1388,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1383,12 +1383,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -1346,7 +1346,7 @@ index c8a23e3246a949..02dc683fa1a1b4 100644
  			t.Errorf("different signature result on line %d: %x vs %x", lineNo, sig, sig2)
  		}
  
-@@ -373,6 +376,11 @@ func TestAllocations(t *testing.T) {
+@@ -371,6 +374,11 @@ func TestAllocations(t *testing.T) {
  	cryptotest.SkipTestAllocations(t)
  	seed := make([]byte, SeedSize)
  	priv := NewKeyFromSeed(seed)
@@ -1358,7 +1358,7 @@ index c8a23e3246a949..02dc683fa1a1b4 100644
  	if allocs := testing.AllocsPerRun(100, func() {
  		message := []byte("Hello, world!")
  		pub := priv.Public().(PublicKey)
-@@ -380,8 +386,8 @@ func TestAllocations(t *testing.T) {
+@@ -378,8 +386,8 @@ func TestAllocations(t *testing.T) {
  		if !Verify(pub, message, signature) {
  			t.Fatal("signature didn't verify")
  		}
@@ -2601,7 +2601,7 @@ diff --git a/src/crypto/rsa/pss_test.go b/src/crypto/rsa/pss_test.go
 index e03f4ab06603c6..a9d9daba2fd6ce 100644
 --- a/src/crypto/rsa/pss_test.go
 +++ b/src/crypto/rsa/pss_test.go
-@@ -8,6 +8,7 @@ import (
+@@ -8,14 +8,17 @@ import (
  	"bufio"
  	"compress/bzip2"
  	"crypto"
@@ -2609,7 +2609,6 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  	"crypto/internal/fips140"
  	"crypto/rand"
  	. "crypto/rsa"
-@@ -14,8 +15,10 @@ import (
  	"crypto/sha256"
  	"crypto/sha512"
  	"encoding/hex"
@@ -2630,7 +2629,7 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  				t.Error(err)
  			}
  		default:
-@@ -185,6 +191,10 @@ func TestPSSSigning(t *testing.T) {
+@@ -180,6 +186,10 @@ func TestPSSSigning(t *testing.T) {
  			continue
  		}
  
@@ -2641,7 +2640,7 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  		opts.SaltLength = test.verifySaltLength
  		err = VerifyPSS(&rsaPrivateKey.PublicKey, hash, hashed, sig, &opts)
  		good := test.good
-@@ -246,7 +256,9 @@ func fromHex(hexStr string) []byte {
+@@ -241,7 +251,9 @@ func fromHex(hexStr string) []byte {
  
  func TestInvalidPSSSaltLength(t *testing.T) {
  	t.Setenv("GODEBUG", "rsa1024min=0")
@@ -3352,7 +3351,7 @@ index 3973e0afd1b935..4a92e2652a50c4 100644
  	}
  	h.Write(bytes.Repeat([]byte{0}, 200))
 diff --git a/src/crypto/sha512/sha512.go b/src/crypto/sha512/sha512.go
-index 1435eac1f5b5dc..17e8501154762a 100644
+index 1435eac1f5b5dc..ca424cb6b904ba 100644
 --- a/src/crypto/sha512/sha512.go
 +++ b/src/crypto/sha512/sha512.go
 @@ -12,7 +12,7 @@ package sha512
@@ -3364,8 +3363,48 @@ index 1435eac1f5b5dc..17e8501154762a 100644
  	"crypto/internal/fips140/sha512"
  	"hash"
  )
+@@ -58,6 +58,9 @@ func New() hash.Hash {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New512_224() hash.Hash {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA512_224) {
++		return boring.NewSHA512_224()
++	}
+ 	return sha512.New512_224()
+ }
+ 
+@@ -66,6 +69,9 @@ func New512_224() hash.Hash {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New512_256() hash.Hash {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA512_256) {
++		return boring.NewSHA512_256()
++	}
+ 	return sha512.New512_256()
+ }
+ 
+@@ -106,6 +112,9 @@ func Sum384(data []byte) [Size384]byte {
+ 
+ // Sum512_224 returns the Sum512/224 checksum of the data.
+ func Sum512_224(data []byte) [Size224]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA512_224) {
++		return boring.SHA512_224(data)
++	}
+ 	h := New512_224()
+ 	h.Write(data)
+ 	var sum [Size224]byte
+@@ -115,6 +124,9 @@ func Sum512_224(data []byte) [Size224]byte {
+ 
+ // Sum512_256 returns the Sum512/256 checksum of the data.
+ func Sum512_256(data []byte) [Size256]byte {
++	if boring.Enabled && boring.SupportsHash(crypto.SHA512_256) {
++		return boring.SHA512_256(data)
++	}
+ 	h := New512_256()
+ 	h.Write(data)
+ 	var sum [Size256]byte
 diff --git a/src/crypto/sha512/sha512_test.go b/src/crypto/sha512/sha512_test.go
-index 080bf694f03652..0c899f5c407ffa 100644
+index 080bf694f03652..389e2738a4e885 100644
 --- a/src/crypto/sha512/sha512_test.go
 +++ b/src/crypto/sha512/sha512_test.go
 @@ -8,9 +8,11 @@ package sha512
@@ -3425,7 +3464,7 @@ index 080bf694f03652..0c899f5c407ffa 100644
  	cryptotest.SkipTestAllocations(t)
 +	expectedAllocations := 0.0
 +	if boring.Enabled {
-+		expectedAllocations = 2
++		expectedAllocations = 10
 +	}
  	if n := testing.AllocsPerRun(10, func() {
  		in := []byte("hello, world!")
@@ -4124,5 +4163,3 @@ index 2746ad8783ab22..c39f32c8fba6fc 100644
  	// Force network usage, to verify the epoll (or whatever) fd
  	// doesn't leak to the child,
  	ln, err := net.Listen("tcp", "127.0.0.1:0")
- 	if err != nil {
- 		t.Fatal(err)

From 8244bb7b10f042aa23eae1791ec3762b88d28f31 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 24 Feb 2026 16:27:37 -0800
Subject: [PATCH 739/887] Normalize checked-in CRLF to LF

---
 .azuredevops/dependabot.yml |   10 +-
 SUPPORT.md                  |   42 +-
 eng/doc/README.md           |   18 +-
 eng/doc/fips/UserGuide.md   | 3624 +++++++++++++++++------------------
 eng/signing/.gitignore      |   26 +-
 5 files changed, 1860 insertions(+), 1860 deletions(-)

diff --git a/.azuredevops/dependabot.yml b/.azuredevops/dependabot.yml
index f18e60565a4..a47d2fdb43b 100644
--- a/.azuredevops/dependabot.yml
+++ b/.azuredevops/dependabot.yml
@@ -1,5 +1,5 @@
-version: 2
-
-# Disabling dependabot on Azure DevOps as this is a mirrored repo. Updates should go through github.
-enable-campaigned-updates: false
-enable-security-updates: false
+version: 2
+
+# Disabling dependabot on Azure DevOps as this is a mirrored repo. Updates should go through github.
+enable-campaigned-updates: false
+enable-security-updates: false
diff --git a/SUPPORT.md b/SUPPORT.md
index 115f96c43fc..5594fc5c2ff 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -1,21 +1,21 @@
-# Support
-
-For help and questions about the Go programming language and tools, visit the official website: <https://go.dev/>.
-
-Take a look at the [Migration Guide](eng/doc/MigrationGuide.md) for more information about migrating from the official build of Go to the Microsoft build of Go, specifically.
-
-## How to file issues and get help
-
-This project uses GitHub Issues to track bugs and feature requests. Please search the existing
-issues before filing new issues to avoid duplicates. For new issues, [file your bug or
-feature request as a new Issue][file].
-
-For help and questions about the microsoft/go project, please [file an issue][file].
-
-If you believe you have found a security vulnerability, please report it privately following the instructions in [SECURITY.md](SECURITY.md).
-
-## Microsoft Support Policy
-
-Support for this project is limited to the resources listed above.
-
-[file]: https://github.com/microsoft/go/issues/new/choose
+# Support
+
+For help and questions about the Go programming language and tools, visit the official website: <https://go.dev/>.
+
+Take a look at the [Migration Guide](eng/doc/MigrationGuide.md) for more information about migrating from the official build of Go to the Microsoft build of Go, specifically.
+
+## How to file issues and get help
+
+This project uses GitHub Issues to track bugs and feature requests. Please search the existing
+issues before filing new issues to avoid duplicates. For new issues, [file your bug or
+feature request as a new Issue][file].
+
+For help and questions about the microsoft/go project, please [file an issue][file].
+
+If you believe you have found a security vulnerability, please report it privately following the instructions in [SECURITY.md](SECURITY.md).
+
+## Microsoft Support Policy
+
+Support for this project is limited to the resources listed above.
+
+[file]: https://github.com/microsoft/go/issues/new/choose
diff --git a/eng/doc/README.md b/eng/doc/README.md
index 6c07ed6b63c..aaed7c9848b 100644
--- a/eng/doc/README.md
+++ b/eng/doc/README.md
@@ -1,9 +1,9 @@
-This directory, `/eng/doc`, contains documents describing the Microsoft
-infrastructure used to build Go, in particular any designs that are not obvious
-by reading the infrastructure code itself.
-
-For cryptography information, see the [CrossPlatformCryptography.md](CrossPlatformCryptography.md) doc.
-For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
-
-The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.
-The [release-branch-links.json](release-branch-links.json) file contains the same data in JSON format suitable for parsing.
+This directory, `/eng/doc`, contains documents describing the Microsoft
+infrastructure used to build Go, in particular any designs that are not obvious
+by reading the infrastructure code itself.
+
+For cryptography information, see the [CrossPlatformCryptography.md](CrossPlatformCryptography.md) doc.
+For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
+
+The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.
+The [release-branch-links.json](release-branch-links.json) file contains the same data in JSON format suitable for parsing.
diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index 94cd3436654..be7efb77bfe 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -1,1813 +1,1813 @@
-# FIPS 140-2 User Guide
-
-This document is a user guide for the Microsoft build of Go crypto package running on FIPS 140-2 compatibility mode (hereafter referred to as FIPS). It is intended as a technical reference for developers using, and system administrators installing, the Go toolset, and for use in risk assessment reviews by security auditors. This is not a replacement for the Go crypto documentation, rather it is a collection of notes and more detailed explanations in the context of FIPS compatibility.
-
-The Go crypto documentation is available online at https://pkg.go.dev/crypto.
-
-<!-- The following table of contents is maintained using https://marketplace.visualstudio.com/items?itemName=yzhang.markdown-all-in-one -->
-
-- [FIPS 140-2 User Guide](#fips-140-2-user-guide)
-  - [The Microsoft build of Go crypto backends](#the-microsoft-build-of-go-crypto-backends)
-  - [Using Go crypto APIs](#using-go-crypto-apis)
-    - [crypto/aes](#cryptoaes)
-      - [func NewCipher](#func-newcipher)
-    - [crypto/cipher](#cryptocipher)
-      - [func NewGCM](#func-newgcm)
-      - [func NewGCMWithNonceSize](#func-newgcmwithnoncesize)
-      - [func NewGCMWithTagSize](#func-newgcmwithtagsize)
-      - [func NewCBCDecrypter](#func-newcbcdecrypter)
-      - [func NewCBCEncrypter](#func-newcbcencrypter)
-      - [func NewCFBDecrypter](#func-newcfbdecrypter)
-      - [func NewCFBEncrypter](#func-newcfbencrypter)
-      - [func NewCTR](#func-newctr)
-      - [func NewOFB](#func-newofb)
-      - [func StreamReader.Read](#func-streamreaderread)
-      - [func StreamWriter.Write](#func-streamwriterwrite)
-      - [func StreamWriter.Close](#func-streamwriterclose)
-    - [crypto/des](#cryptodes)
-      - [func NewCipher](#func-newcipher-1)
-      - [func NewTripleDESCipher](#func-newtripledescipher)
-    - [crypto/dsa](#cryptodsa)
-    - [crypto/ecdh](#cryptoecdh)
-      - [func P256](#func-p256)
-      - [func P384](#func-p384)
-      - [func P521](#func-p521)
-      - [func X25519](#func-x25519)
-      - [func PrivateKey.ECDH](#func-privatekeyecdh)
-    - [crypto/ecdsa](#cryptoecdsa)
-      - [func Sign](#func-sign)
-      - [func SignASN1](#func-signasn1)
-      - [func Verify](#func-verify)
-      - [func VerifyASN1](#func-verifyasn1)
-      - [func GenerateKey](#func-generatekey)
-      - [func PrivateKey.Sign](#func-privatekeysign)
-    - [crypto/ed25519](#cryptoed25519)
-      - [func GenerateKey](#func-generatekey-1)
-      - [func Sign](#func-sign-1)
-      - [func Verify](#func-verify-1)
-      - [func VerifyWithOptions](#func-verifywithoptions)
-      - [func NewKeyFromSeed](#func-newkeyfromseed)
-      - [func PrivateKey.Sign](#func-privatekeysign-1)
-    - [crypto/elliptic](#cryptoelliptic)
-    - [crypto/hmac](#cryptohmac)
-      - [func Equal](#func-equal)
-      - [func New](#func-new)
-    - [crypto/md5](#cryptomd5)
-      - [func New](#func-new-1)
-      - [func Sum](#func-sum)
-    - [crypto/rand](#cryptorand)
-      - [var Reader](#var-reader)
-      - [func Int](#func-int)
-      - [func Prime](#func-prime)
-      - [func Read](#func-read)
-    - [crypto/rc4](#cryptorc4)
-      - [func NewCipher](#func-newcipher-2)
-    - [crypto/sha1](#cryptosha1)
-      - [func New](#func-new-2)
-      - [func Sum](#func-sum-1)
-    - [crypto/sha256](#cryptosha256)
-      - [func New](#func-new-3)
-      - [func New224](#func-new224)
-      - [func Sum224](#func-sum224)
-      - [func Sum256](#func-sum256)
-    - [crypto/sha512](#cryptosha512)
-      - [func New](#func-new-4)
-      - [func New384](#func-new384)
-      - [func New512\_224](#func-new512_224)
-      - [func New512\_256](#func-new512_256)
-      - [func Sum384](#func-sum384)
-      - [func Sum512](#func-sum512)
-      - [func Sum512\_224](#func-sum512_224)
-      - [func Sum512\_256](#func-sum512_256)
-    - [crypto/rsa](#cryptorsa)
-      - [func DecryptOAEP](#func-decryptoaep)
-      - [func DecryptPKCS1v15](#func-decryptpkcs1v15)
-      - [func DecryptPKCS1v15SessionKey](#func-decryptpkcs1v15sessionkey)
-      - [func EncryptPKCS1v15](#func-encryptpkcs1v15)
-      - [func SignPKCS1v15](#func-signpkcs1v15)
-      - [func SignPSS](#func-signpss)
-      - [func VerifyPKCS1v15](#func-verifypkcs1v15)
-      - [func VerifyPSS](#func-verifypss)
-      - [func GenerateKey](#func-generatekey-2)
-      - [func GenerateMultiPrimeKey](#func-generatemultiprimekey)
-      - [func PrivateKey.Decrypt](#func-privatekeydecrypt)
-      - [func PrivateKey.Sign](#func-privatekeysign-2)
-    - [crypto/subtle](#cryptosubtle)
-    - [crypto/tls](#cryptotls)
-
-## The Microsoft build of Go crypto backends
-
-The OpenSSL backend uses [golang-fips/openssl].
-The CNG backend uses [go-crypto-winnative].
-For more general information about the backends, such as how to enable them, see the [Microsoft build of Go FIPS README](./README.md).
-
-[golang-fips/openssl]: https://github.com/golang-fips/openssl
-[go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
-
-> [!NOTE]
-> The CNG backend uses a module called "bcrypt" to interact with CNG.
-> Some identifiers and functions used by the CNG backend include a "bcrypt" prefix, referring to the "bcrypt" CNG module.
-> For example, `BCryptGenRandom` is a function that generates random numbers using CNG.
->
-> There is also a password hashing algorithm called "bcrypt".
-> It is unrelated, and not in the scope of this document.
-
-## Using Go crypto APIs
-
-This section describes how to use Go crypto APIs in a FIPS compliant manner.
-
-As a general rule, crypto APIs will delegate low-level operations to the crypto backend if these rules are met:
-
-- The operation is supported by the crypto backend.
-- The set of input parameters are supported by the crypto backend.
-
-If any of the previous rules are not met, the operation will fall back to standard Go crypto unless otherwise specified. Standard Go crypto will behave as expected but is not FIPS compliant. There is not yet any way to configure the crypto APIs to panic instead of falling back to standard Go crypto. See [microsoft/go#428](https://github.com/microsoft/go/issues/428).
-
-When reading the requirements section, the key word "must" is to be interpreted as a necessary condition to use the given API in a FIPS compliant manner.
-
-### [crypto/aes](https://pkg.go.dev/crypto/aes)
-
-Package aes implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.
-
-#### func [NewCipher](https://pkg.go.dev/crypto/aes#NewCipher)
-
-```go
-func aes.NewCipher(key []byte) (cipher cipher.Block, err error)
-```
-
-NewCipher creates and returns a new [cipher.Block](https://pkg.go.dev/crypto/cipher#Block).
-
-**Requirements**
-
-- `key` length must be 16, 24, or 32 bytes.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using a cipher function that depends on the `key` length:
-
-- If `len(key) == 16` uses [EVP_aes_128_ecb].
-- If `len(key) == 24` uses [EVP_aes_192_ecb].
-- If `len(key) == 32` uses [EVP_aes_256_ecb].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `16`.
-- `Encrypt` uses [EVP_EncryptUpdate].
-- `Decrypt` uses [EVP_DecryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_AES_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `16`.
-- `Encrypt` uses [BCryptEncrypt].
-- `Decrypt` uses [BCryptDecrypt].
-
-</details>
-
-### [crypto/cipher](https://pkg.go.dev/crypto/cipher)
-
-Package cipher implements standard block cipher modes that can be wrapped around low-level block cipher implementations.
-
-#### func [NewGCM](https://pkg.go.dev/crypto/cipher#NewGCM)
-
-```go
-func cipher.NewGCM(cipher cipher.Block) (aead cipher.AEAD, err error)
-```
-
-NewGCM returns the given 128-bit, block cipher wrapped in Galois Counter Mode with the standard nonce length.
-
-**Requirements**
-
-- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cipher` implements the cipher.AEAD interface using a cipher function that depends on the key length of cipher:
-
-- `NonceSize` always returns `12`.
-- `Overhead` always returns `16`.
-- The cipher used in `Seal` and `Open` depends on the key length used in `aes.NewCipher(key []byte)`:
-  - If `len(key) == 16` uses [EVP_aes_128_gcm].
-  - If `len(key) == 24` uses [EVP_aes_192_gcm].
-  - If `len(key) == 32` uses [EVP_aes_256_gcm].
-- `Seal` uses [EVP_EncryptUpdate] for the encryption and [EVP_EncryptFinal_ex] for authenticating.
-- `Open` uses [EVP_DecryptUpdate] for the decryption and [EVP_DecryptFinal_ex] for authenticating.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_AES_ALGORITHM` with `BCRYPT_CHAIN_MODE_GCM` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-- `NonceSize` always returns `12`.
-- `Overhead` always returns `16`.
-- `Encrypt` uses [BCryptEncrypt].
-- `Decrypt` uses [BCryptDecrypt].
-
-</details>
-
-#### func [NewGCMWithNonceSize](https://pkg.go.dev/crypto/cipher#NewGCMWithNonceSize)
-
-```go
-func cipher.NewGCMWithNonceSize(cipher cipher.Block, size int) (aead cipher.AEAD, error)
-```
-
-NewGCMWithNonceSize returns the given 128-bit, block cipher wrapped in Galois Counter Mode, which accepts nonces of the given length.
-
-**Requirements**
-
-- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
-- `size` must be 12.
-
-**Implementation**
-
-`aead` can have different implementations depending on the supplied parameters:
-
-- If the parameters meet the requirements, then `aead` behaves exactly as if it was created with [aes.NewCipher](#func-newgcm).
-- If `cipher` is an object created by [aes.NewCipher](#func-newcipher) and `size != 12`, then `aead` is implemented by the standard Go library and the crypto backend is only used for encryption and decryption.
-- Else `aead` is completely implemented by the standard Go library.
-
-#### func [NewGCMWithTagSize](https://pkg.go.dev/crypto/cipher#NewGCMWithTagSize)
-
-```go
-func cipher.NewGCMWithTagSize(cipher cipher.Block, tagSize int) (aead cipher.AEAD, error)
-```
-
-NewGCMWithTagSize returns the given 128-bit, block cipher wrapped in Galois Counter Mode, which generates tags with the given length.
-
-**Requirements**
-
-- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
-- `tagSize` must be 16.
-
-**Implementation**
-
-`aead` can have different implementations depending on the supplied parameters:
-
-- If the parameters meet the requirements, then `aead` behaves exactly as if it was created with [aes.NewCipher](#func-newgcm).
-- If `cipher` is an object created by [aes.NewCipher](#func-newcipher) and `tagSize != 16` then `aead` is implemented by the standard Go library using the crypto backend for encryption and decryption.
-- Else `aead` is completely implemented by the standard Go library.
-
-#### func [NewCBCDecrypter](https://pkg.go.dev/crypto/cipher#NewCBCDecrypter)
-
-```go
-func cipher.NewCBCDecrypter(block Block, iv []byte) (cbc cipher.BlockMode)
-```
-
-NewCBCDecrypter returns a BlockMode which decrypts in cipher block chaining mode, using the given Block.
-
-**Requirements**
-
-- `block` must be an object created by [aes.NewCipher](#func-newcipher), [des.NewCipher](#func-newcipher-1), or [des.NewTripleDESCipher](#func-newtripledescipher).
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cbc` implements the cipher.BlockMode interface using a cipher that depends on the `block` key length:
-
-- For `aes.NewCipher`:
-  - If `len(key) == 16` then the cipher used is [EVP_aes_128_cbc].
-  - If `len(key) == 24` then the cipher used is [EVP_aes_192_cbc].
-  - If `len(key) == 32` then the cipher used is [EVP_aes_256_cbc].
-- For `des.NewCipher`, the cipher used is [EVP_des_cbc].
-- For `des.NewTripleDESCipher`, the cipher used is [EVP_des_ede3_cbc].
-
-In all cases the cipher will have the padding disabled using [EVP_CIPHER_CTX_set_padding].
-
-The cipher.BlockMode methods are implemented as follows:
-
-- `BlockSize` always returns the underlying cipher block size.
-- `CryptBlocks` uses [EVP_DecryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the underlying cipher [algorithm identifier]  with `BCRYPT_CHAIN_MODE_CBC` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns the underlying cipher block size.
-- `CryptBlocks` uses [BCryptDecrypt].
-
-</details>
-
-#### func [NewCBCEncrypter](https://pkg.go.dev/crypto/cipher#NewCBCEncrypter)
-
-```go
-func cipher.NewCBCEncrypter(block Block, iv []byte) (cbc cipher.BlockMode)
-```
-
-NewCBCEncrypter returns a BlockMode which encrypts in cipher block chaining mode, using the given Block.
-
-**Requirements**
-
-- `block` must be an object created by [aes.NewCipher](#func-newcipher), [des.NewCipher](#func-newcipher-1), or [des.NewTripleDESCipher](#func-newtripledescipher).
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cbc` implements the cipher.BlockMode interface using a cipher that depends on the `block` key length:
-
-- For `aes.NewCipher`:
-  - If `len(key) == 16` then the cipher used is [EVP_aes_128_cbc].
-  - If `len(key) == 24` then the cipher used is [EVP_aes_192_cbc].
-  - If `len(key) == 32` then the cipher used is [EVP_aes_256_cbc].
-- For `des.NewCipher`, the cipher used is [EVP_des_cbc].
-- For `des.NewTripleDESCipher`, the cipher used is [EVP_des_ede3_cbc].
-
-The cipher.BlockMode methods are implemented as follows:
-
-- `BlockSize` always returns the underlying cipher block size.
-- `CryptBlocks` uses [EVP_EncryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the underlying cipher [algorithm identifier]  with `BCRYPT_CHAIN_MODE_CBC` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns the underlying cipher block size.
-- `CryptBlocks` uses [BCryptEncrypt].
-
-</details>
-
-#### func [NewCFBDecrypter](https://pkg.go.dev/crypto/cipher#NewCFBDecrypter)
-
-cipher.NewCFBDecrypter is not implemented by any backend.
-
-#### func [NewCFBEncrypter](https://pkg.go.dev/crypto/cipher#NewCFBEncrypter)
-
-cipher.NewCFBEncrypter is not implemented by any backend.
-
-#### func [NewCTR](https://pkg.go.dev/crypto/cipher#NewCTR)
-
-```go
-func cipher.NewCTR(block Block, iv []byte) (ctr cipher.Stream)
-```
-
-NewCTR returns a Stream which encrypts/decrypts using the given Block in counter mode.
-
-**Requirements**
-
-- The CNG backend does not implement this function.
-- `block` must be an object created by [aes.NewCipher](#func-newcipher).
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`ctr` implements the cipher.Stream interface using a cipher that depends on the `block` key length:
-
-- If `len(key) == 16` then the cipher used is [EVP_aes_128_ctr].
-- If `len(key) == 24` then the cipher used is [EVP_aes_192_ctr].
-- If `len(key) == 32` then the cipher used is [EVP_aes_256_ctr].
-
-The cipher.Stream methods are implemented as follows:
-- `XORKeyStream(dst, src []byte)` XORs each byte in the given slice using [EVP_EncryptUpdate].
-
-</details>
-
-#### func [NewOFB](https://pkg.go.dev/crypto/cipher#NewOFB)
-
-cipher.NewOFB is not implemented by any backend.
-
-#### func [StreamReader.Read](https://pkg.go.dev/crypto/cipher#StreamReader.Read)
-
-```go
-func (r cipher.StreamReader) Read(dst []byte) (n int, err error)
-```
-
-**Requirements**
-
-- The CNG backend does not implement this function.
-- `r.S` must be an object created by [cipher.NewCTR](#func-newctr).
-
-#### func [StreamWriter.Write](https://pkg.go.dev/crypto/cipher#StreamWriter.Write)
-
-```go
-func (w cipher.StreamWriter) Write(src []byte) (n int, err error)
-```
-
-**Requirements**
-
-- The CNG backend does not implement this function.
-- `r.S` must be an object created by [cipher.NewCTR](#func-newctr).
-
-#### func [StreamWriter.Close](https://pkg.go.dev/crypto/cipher#StreamWriter.Close)
-
-```go
-func (w cipher.StreamWriter) Close() error
-```
-
-Does not contain crypto algorithms, out of FIPS scope.
-
-### [crypto/des](https://pkg.go.dev/crypto/des)
-
-Package des implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.
-
-DES is cryptographically broken and should not be used for secure applications.
-
-#### func [NewCipher](https://pkg.go.dev/crypto/des#NewCipher)
-
-```go
-func des.NewCipher(key []byte) (cipher.Block, error)
-```
-
-NewCipher creates and returns a new cipher.Block.
-
-**Requirements**
-
-- `key` length must be 8 bytes.
-- OpenSSL does not provide a DES implementation in FIPS mode. In that case, the code will fall back to standard Go crypto.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [EVP_des_128_ecb] cipher function.
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `8`.
-- `Encrypt` uses [EVP_EncryptUpdate].
-- `Decrypt` uses [EVP_DecryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_DES_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `8`.
-- `Encrypt` uses [BCryptEncrypt].
-- `Decrypt` uses [BCryptDecrypt].
-
-</details>
-
-#### func [NewTripleDESCipher](https://pkg.go.dev/crypto/des#NewTripleDESCipher)
-
-```go
-NewTripleDESCipher(key []byte) (cipher.Block, error)
-```
-
-NewTripleDESCipher creates and returns a new cipher.Block.
-
-**Requirements**
-
-- `key` length must be 24 bytes.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [EVP_des_ede3_ecb] cipher function.
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `8`.
-- `Encrypt` uses [EVP_EncryptUpdate].
-- `Decrypt` uses [EVP_DecryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_DES3_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
-
-The cipher.Block methods are implemented as follows:
-
-- `BlockSize` always returns `8`.
-- `Encrypt` uses [BCryptEncrypt].
-- `Decrypt` uses [BCryptDecrypt].
-
-</details>
-
-### [crypto/dsa](https://pkg.go.dev/crypto/dsa)
-
-Not implemented by any backend.
-
-### [crypto/ecdh](https://pkg.go.dev/crypto/ecdh)
-
-Package ecdh implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.
-
-**Implementation**
-
-All supported curves implement the `ecdh.Curve` interface as follows:
-
-<details><summary>OpenSSL (click for details)</summary>
-
- - `GenerateKey` uses [EVP_PKEY_keygen].
- - `NewPrivateKey` uses [EVP_PKEY_new].
- - `NewPublicKey` uses [EVP_PKEY_new].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
- - `GenerateKey` uses [BCryptGenerateKeyPair] and [BCryptExportKey].
- - `NewPrivateKey` uses [BCryptImportKeyPair].
- - `NewPublicKey` uses [BCryptImportKeyPair].
-
-</details>
-
-#### func [P256](https://pkg.go.dev/crypto/ecdh#P256)
-
-```go
-func ecdh.P256() ecdh.Curve
-```
-
-P256 returns a Curve which implements NIST P-256.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The curve uses `NID_X9_62_prime256v1`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The curve uses `BCRYPT_ECC_CURVE_NISTP256`.
-
-</details>
-
-#### func [P384](https://pkg.go.dev/crypto/ecdh#P384)
-
-```go
-func ecdh.P384() ecdh.Curve
-```
-
-P384 returns a Curve which implements NIST P-384.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The curve uses `NID_secp384r1`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The curve uses `BCRYPT_ECC_CURVE_NISTP384`.
-
-</details>
-
-#### func [P521](https://pkg.go.dev/crypto/ecdh#P521)
-
-```go
-func ecdh.P521() ecdh.Curve
-```
-
-P521 returns a Curve which implements NIST P-521.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The curve uses `NID_secp521r1`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The curve uses `BCRYPT_ECC_CURVE_NISTP521`.
-
-</details>
-
-#### func [X25519](https://pkg.go.dev/crypto/ecdh#X25519)
-
-ecdh.X25519 is not implemented by any backend.
-
-#### func [PrivateKey.ECDH](https://pkg.go.dev/crypto/ecdh#PrivateKey.ECDH)
-
-```go
-func (k *ecdh.PrivateKey) ECDH(remote *ecdh.PublicKey) ([]byte, error)
-```
-
-ECDH performs an ECDH exchange and returns the shared secret. The PrivateKey and PublicKey must use the same curve.
-
-**Requirements**
-
-- `remote` must be an object created from `ecdh.P256()`, `ecdh.P384()`, or `ecdh.P521()`.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The key is derived using [EVP_PKEY_derive].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The key is derived using [BCryptDeriveKey].
-
-</details>
-
-### [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
-
-Package ecdsa implements the Elliptic Curve Digital Signature Algorithm, as defined in FIPS 186-3.
-
-#### func [Sign](https://pkg.go.dev/crypto/ecdsa#Sign)
-
-```go
-func ecdsa.Sign(rand io.Reader, priv *ecdsa.PrivateKey, hash []byte) (r, s *big.Int, err error)
-```
-
-Sign signs a hash using the private key.
-
-**Requirements**
-
-- `rand` must be boring.RandReader, else Sign will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
-- `hash` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`r` and `s` are generated using [EVP_PKEY_sign].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`r` and `s` are generated using [BCryptSignHash].
-
-</details>
-
-#### func [SignASN1](https://pkg.go.dev/crypto/ecdsa#SignASN1)
-
-```go
-func ecdsa.SignASN1(rand io.Reader, priv *ecdsa.PrivateKey, hash []byte) (sig []byte, err error)
-```
-
-SignASN1 signs a hash using the private key. It behaves as [ecdsa.Sign](#func-sign) but returns an ASN.1 encoded signature instead.
-
-#### func [Verify](https://pkg.go.dev/crypto/ecdsa#Verify)
-
-```go
-func ecdsa.Verify(pub *ecdsa.PublicKey, hash []byte, r, s *big.Int) bool
-```
-
-Verify verifies the signature in r, s of hash using the public key.
-
-**Requirements**
-
-There are no specific parameters requirements in order to be FIPS compliant.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The signature is verified using [EVP_PKEY_verify].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The signature is verified using [BCryptVerifySignature].
-
-</details>
-
-#### func [VerifyASN1](https://pkg.go.dev/crypto/ecdsa#VerifyASN1)
-
-```go
-func ecdsa.VerifyASN1(pub *ecdsa.PublicKey, hash, sig []byte) bool
-```
-
-VerifyASN1 verifies the ASN.1 encoded signature, sig, of hash using the public key. It behaves as [ecdsa.Verify](#func-verify) but accepts an ASN.1 encoded signature instead.
-
-#### func [GenerateKey](https://pkg.go.dev/crypto/ecdsa#GenerateKey)
-
-```go
-func ecdsa.GenerateKey(c elliptic.Curve, rand io.Reader) (priv *ecdsa.PrivateKey, err error)
-```
-
-GenerateKey generates a public and private key pair.
-
-**Requirements**
-
-- `c.Params().Name` must be one of the following values: P-224, P-256, P-384, or P-521.
-- The CNG backend does not support P-224. 
-- `rand` must be boring.RandReader, else GenerateKey will panic. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`priv` is a wrapper around an [EVP_PKEY] generated using [EVP_PKEY_keygen].
-
-`priv` curve algorithm depends on the value of `c`:
-
-- If `c.Params().Name == "P-224"` then curve is `NID_secp224r1`.
-- If `c.Params().Name == "P-256"` then curve is `NID_X9_62_prime256v1`.
-- If `c.Params().Name == "P-384"` then curve is `NID_secp384r1`.
-- If `c.Params().Name == "P-521"` then curve is `NID_secp521r1`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`priv` is generated using [BCryptGenerateKeyPair].
-
-`priv` [algorithm identifier] is `BCRYPT_ECDSA_ALGORITHM` and the [named elliptic curve] depends on the value of `c`:
-
-- If `c.Params().Name == "P-224"` then curve is `BCRYPT_ECC_CURVE_NISTP224`.
-- If `c.Params().Name == "P-256"` then curve is `BCRYPT_ECC_CURVE_NISTP256`.
-- If `c.Params().Name == "P-384"` then curve is `BCRYPT_ECC_CURVE_NISTP384`.
-- If `c.Params().Name == "P-521"` then curve is `BCRYPT_ECC_CURVE_NISTP521`.
-
-</details>
-
-#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/ecdsa#PrivateKey.Sign)
-
-```go
-func (priv *ecdsa.PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
-```
-
-Sign signs `digest` with `priv`.
-
-**Requirements**
-
-- `rand` must be boring.RandReader, else Sign will panic. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The message is signed using [EVP_PKEY_sign].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The message is signed using [BCryptSignHash].
-
-</details>
-
-### [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
-
-Package ed25519 implements the Ed25519 signature algorithm. See https://ed25519.cr.yp.to/.
-
-**Requirements**
-
-The CNG backend and some old OpenSSL distributions don't support ED25519.
-In those cases, the code will fall back to standard Go crypto.
-
-#### func [GenerateKey](https://pkg.go.dev/crypto/ed25519#GenerateKey)
-
-```go
-func GenerateKey(rand io.Reader) (pub ed25519.PublicKey, priv ed25519.PrivateKey, error)
-```
-
-GenerateKey generates a public/private key pair using entropy from rand. If rand is nil, crypto/rand.Reader will be used.
-
-**Requirements**
-
-- `rand` must be boring.RandReader or nil. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`pub` and `priv` are generated using [EVP_PKEY_keygen] with the `EVP_PKEY_ED25519` algorithm.
-
-</details>
-
-#### func [Sign](https://pkg.go.dev/crypto/ed25519#Sign)
-
-```go
-func Sign(privateKey ed25519.PrivateKey, message []byte) []byte
-```
-
-Sign signs the message with privateKey and returns a signature. It will panic if len(privateKey) is not PrivateKeySize.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`message` is signed using [EVP_MD_CTX_new], [EVP_DigestSignInit] and [EVP_DigestSign].
-
-</details>
-
-#### func [Verify](https://pkg.go.dev/crypto/ed25519#Verify)
-
-```go
-func Verify(publicKey ed25519.PublicKey, message, sig []byte) bool
-```
-
-Verify reports whether sig is a valid signature of message by publicKey. It will panic if len(publicKey) is not PublicKeySize.
-
-**Requirements**
-
-- OpenSSL version must be 1.1.1b or higher. Otherwise, falls back to standard Go crypto.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`message` is verified against `sig` using [EVP_MD_CTX_new], [EVP_DigestVerifyInit] and [EVP_DigestVerify].
-
-
-</details>
-
-#### func [VerifyWithOptions](https://pkg.go.dev/crypto/ed25519#VerifyWithOptions)
-
-```go
-func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options) error
-```
-
-VerifyWithOptions reports whether sig is a valid signature of message by publicKey. A valid signature is indicated by returning a nil error. It will panic if len(publicKey) is not PublicKeySize.
-
-**Requirements**
-
-- Only `opts.Hash == nil && opts.Context == ""` is implemented using the OpenSSL backend. Other combinations fall back to standard Go code.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`message` is verified against `sig` using [EVP_MD_CTX_new], [EVP_DigestVerifyInit] and [EVP_DigestVerify].
-
-
-</details>
-
-#### func [NewKeyFromSeed](https://pkg.go.dev/crypto/ed25519#NewKeyFromSeed)
-
-```go
-func NewKeyFromSeed(seed []byte) (priv ed25519.PrivateKey)
-```
-
-NewKeyFromSeed calculates a private key from a seed. It will panic if len(seed) is not SeedSize.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`priv` is generated using [EVP_PKEY_new_raw_private_key] with the `EVP_PKEY_ED25519` algorithm.
-
-
-</details>
-
-#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/ed25519#PrivateKey.Sign)
-
-```go
-func (priv ed25519.PrivateKey) Sign(rand io.Reader, message []byte, opts crypto.SignerOpts) (signature []byte, err error)
-```
-
-Sign signs the given message with `priv`. `rand` is ignored and can be nil.
-
-**Requirements**
-
-- Only `opts.Hash == nil && opts.Context == ""` is implemented using the OpenSSL backend. Other combinations fall back to standard Go code.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`message` is signed using [EVP_MD_CTX_new], [EVP_DigestSignInit] and [EVP_DigestSign].
-
-</details>
-
-### [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
-
-Not implemented by any backend, but to use `ecdsa.GenerateKey`, one of the following `elliptic.Curve` constructors must be used to specify the curve. See [`ecdsa.GenerateKey`](#func-generatekey) for additional requirements. As long as the requirements are met, only the name of the curve is used, not the curve parameters or methods implemented by standard Go crypto, allowing FIPS compliance.
-
-```go
-func elliptic.P224() elliptic.Curve
-func elliptic.P256() elliptic.Curve
-func elliptic.P384() elliptic.Curve
-func elliptic.P521() elliptic.Curve
-```
-
-### [crypto/hmac](https://pkg.go.dev/crypto/hmac)
-
-Package hmac implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
-
-#### func [Equal](https://pkg.go.dev/crypto/hmac#Equal)
-
-```go
-func hmac.Equal(mac1, mac2 []byte) bool
-```
-
-Equal compares two MACs for equality without leaking timing information.
-
-This function does not implement any cryptographic algorithm, therefore out of FIPS scope.
-
-#### func [New](https://pkg.go.dev/crypto/hmac#New)
-
-```go
-func hmac.New(h func() hash.Hash, key []byte) hash.Hash
-```
-
-New returns a new HMAC hash using the given hash.Hash type and key.
-
-**Requirements**
-
-- `h` must be one of the following functions: sha1.New, sha224.New, sha256.New, sha384.New, or sha512.New.
-- The CNG backend does not support sha224.New. 
-
-**Implementation**
-
-<details><summary>OpenSSL 1.x (click for details)</summary>
-
-The hmac is generated using [HMAC_CTX_new] and [HMAC_Init_ex].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [HMAC_Update].
-- `Sum` using [HMAC_Final].
-- `Reset` using [HMAC_Init_ex].
-
-</details>
-
-<details><summary>OpenSSL 3.x (click for details)</summary>
-
-The hmac is generated using [EVP_MAC_CTX_new] and [EVP_MAC_init].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_MAC_update].
-- `Sum` using [EVP_MAC_final].
-- `Reset` using [EVP_MAC_init].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hmac is generated using [BCryptCreateHash] with the `BCRYPT_ALG_HANDLE_HMAC_FLAG` flag.
-
-The [algorithm identifier] depends on the value of `h`:
-
-- If `h == sha1.New` then algorithm is `BCRYPT_SHA1_ALGORITHM`.
-- If `h == sha256.New` then algorithm is `BCRYPT_SHA256_ALGORITHM`.
-- If `h == sha384.New` then algorithm is `BCRYPT_SHA384_ALGORITHM`.
-- If `h == sha512.New` then algorithm is `BCRYPT_SHA512_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-### [crypto/md5](https://pkg.go.dev/crypto/md5)
-
-Package md5 implements the MD5 hash algorithm as defined in RFC 1321.
-
-MD5 is cryptographically broken and should not be used for secure applications.
-
-#### func [New](https://pkg.go.dev/crypto/md5#New)
-
-```go
-func md5.New() hash.Hash
-```
-
-New returns a new hash.Hash computing the MD5 checksum.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_md5].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_MD5_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-#### func [Sum](https://pkg.go.dev/crypto/md5#Sum)
-
-```go
-func md5.Sum(data []byte) [15]byte
-```
-
-Sum returns the MD5 checksum of the data.
-It internally uses md5.New() to compute the checksum.
-
-### [crypto/rand](https://pkg.go.dev/crypto/rand)
-
-Package rand implements a cryptographically secure random number generator.
-
-#### var [Reader](https://pkg.go.dev/crypto/rand#pkg-variables)
-
-```go
-var Reader io.Reader
-```
-
-Reader is a global, shared instance of a cryptographically secure random number generator.
-
-It is assigned to boring.RandReader in the crypto/rand init function.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`rand.Reader` implements `io.Reader` using [RAND_bytes]
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`rand.Reader` implements `io.Reader` using [BCryptGenRandom]
-
-</details>
-
-#### func [Int](https://pkg.go.dev/crypto/rand#Int)
-
-```go
-func rand.Int(rand io.Reader, max *big.Int) (n *big.Int, err error)
-```
-
-Int returns a uniform random value in [0, max). It panics if max <= 0.
-
-**Requirements**
-
-- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-
-#### func [Prime](https://pkg.go.dev/crypto/rand#Prime)
-
-```go
-func Prime(rand io.Reader, bits int) (p *big.Int, err error)
-```
-
-Prime returns a number of the given bit length that is prime with high probability.
-
-**Requirements**
-
-- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-
-#### func [Read](https://pkg.go.dev/crypto/rand#Read)
-
-```go
-func Read(b []byte) (n int, err error)
-```
-
-Read is a helper function that calls rand.Reader.Read using io.ReadFull.
-
-**Requirements**
-
-- `rand.Reader` must be boring.RandReader. This invariant is normally met as `rand.Reader` is assigned to boring.RandReader in the crypto/rand init function.
-
-### [crypto/rc4](https://pkg.go.dev/crypto/rc4)
-
-Package rc4 implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.
-
-#### func [NewCipher](https://pkg.go.dev/crypto/rc4#NewCipher)
-
-```go
-func rc4.NewCipher() rc4.Cipher
-```
-
-NewCipher creates and returns a new Cipher. The key argument should be the RC4 key, at least 1 byte and at most 256 bytes.
-
-**Requirements**
-
-Some OpenSSL distributions don't implement RC4, e.g., OpenSSL 1.x compiled with `-DOPENSSL_NO_RC4` and OpenSSL 3.x that can't load the legacy provider.
-In those cases, `rc4.NewCipher()` will fall back to standard Go crypto.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The cipher is generated using [EVP_CIPHER_CTX_new] and [EVP_CipherInit_ex] with the cipher type [EVP_rc4].
-
-The rc4.Cipher methods are implemented as follows:
-
-- `Reset` using [EVP_CIPHER_CTX_free].
-- `XORKeyStream` using [EVP_EncryptUpdate].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The cipher is generated using [BCryptGenerateSymmetricKey] using the `BCRYPT_RC4_ALGORITHM` mode.
-
-The rc4.Cipher methods are implemented as follows:
-
-- `Reset` using [BCryptDestroyKey].
-- `XORKeyStream` using [BCryptEncrypt].
-
-</details>
-
-### [crypto/sha1](https://pkg.go.dev/crypto/sha1)
-
-Package sha1 implements the SHA-1 hash algorithm as defined in RFC 3174.
-
-SHA-1 is an approved FIPS 140-2 hash algorithm although it is cryptographically broken and should not be used for secure applications.
-
-#### func [New](https://pkg.go.dev/crypto/sha1#New)
-
-```go
-func sha1.New() hash.Hash
-```
-
-New returns a new hash.Hash computing the SHA1 checksum.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha1].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA1_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-#### func [Sum](https://pkg.go.dev/crypto/sha1#Sum)
-
-```go
-func sha1.Sum(data []byte) [20]byte
-```
-
-Sum returns the SHA-1 checksum of the data.
-It internally uses sha1.New() to compute the checksum.
-
-### [crypto/sha256](https://pkg.go.dev/crypto/sha256)
-
-Package sha256 implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.
-
-#### func [New](https://pkg.go.dev/crypto/sha256#New)
-
-```go
-func sha256.New() hash.Hash
-```
-
-New returns a new hash.Hash computing the SHA256 checksum.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha256].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA256_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-#### func [New224](https://pkg.go.dev/crypto/sha256#New224)
-
-```go
-func sha256.New224() hash.Hash
-```
-
-New224 returns a new hash.Hash computing the SHA224 checksum.
-
-**Requirements**
-
-- The CNG backend does not implement this function.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha24].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-#### func [Sum224](https://pkg.go.dev/crypto/sha256#Sum224)
-
-```go
-func sha256.Sum224(data []byte) [24]byte
-```
-
-Sum224 returns the SHA224 checksum of the data.
-It internally uses sha224.New() to compute the checksum.
-
-**Requirements**
-
-- The CNG backend does not implement this function.
-
-#### func [Sum256](https://pkg.go.dev/crypto/sha256#Sum256)
-
-```go
-func sha256.Sum256(data []byte) [32]byte
-```
-
-Sum256 returns the SHA256 checksum of the data.
-It internally uses sha256.New() to compute the checksum.
-
-### [crypto/sha512](https://pkg.go.dev/crypto/sha512)
-
-Package sha512 implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
-
-#### func [New](https://pkg.go.dev/crypto/sha512#New)
-
-```go
-func sha512.New() hash.Hash
-```
-
-New returns a new hash.Hash computing the SHA-512 checksum.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha512].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA512_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-#### func [New384](https://pkg.go.dev/crypto/sha512#New384)
-
-```go
-func sha512.New384() hash.Hash
-```
-
-New384 returns a new hash.Hash computing the SHA-384 checksum.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha384].
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [EVP_DigestUpdate].
-- `Sum` using [EVP_DigestFinal].
-- `Reset` using [EVP_DigestInit].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA384_ALGORITHM`.
-
-The hash.Hash methods are implemented as follows:
-
-- `Write` using [BCryptHashData].
-- `Sum` using [BCryptFinishHash].
-- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
-
-</details>
-
-#### func [New512_224](https://pkg.go.dev/crypto/sha512#New512_224)
-
-sha512.New512_224 is not implemented by any backend.
-
-#### func [New512_256](https://pkg.go.dev/crypto/sha512#New512_256)
-
-sha512.New512_256 is not implemented by any backend.
-
-#### func [Sum384](https://pkg.go.dev/crypto/sha512#Sum384)
-
-```go
-func sha512.Sum384(data []byte) [48]byte
-```
-
-Sum384 returns the SHA384 checksum of the data.
-It internally uses sha512.New384() to compute the checksum.
-
-#### func [Sum512](https://pkg.go.dev/crypto/sha512#Sum512)
-
-```go
-func sha512.Sum512(data []byte) [64]byte
-```
-
-Sum512 returns the SHA512 checksum of the data.
-It internally uses sha512.New() to compute the checksum.
-
-#### func [Sum512_224](https://pkg.go.dev/crypto/sha512#Sum512_224)
-
-sha512.Sum512_224 is not implemented by any backend.
-
-#### func [Sum512_256](https://pkg.go.dev/crypto/sha512#Sum512_256)
-
-sha512.Sum512_256 is not implemented by any backend.
-
-### [crypto/rsa](https://pkg.go.dev/crypto/rsa)
-
-Package rsa implements RSA encryption as specified in PKCS #1 and RFC 8017.
-
-#### func [DecryptOAEP](https://pkg.go.dev/crypto/rsa#DecryptOAEP)
-
-```go
-func rsa.DecryptOAEP(h hash.Hash, rand io.Reader, priv *rsa.PrivateKey, ciphertext []byte, label []byte) ([]byte, error)
-```
-
-DecryptOAEP decrypts ciphertext using RSA-OAEP.
-
-**Requirements**
-
-- `h` must be the result of one of the following functions: sha1.New(), sha224.New(), sha256.New(), sha384.New(), or sha512.New().
-- The CNG backend does not support sha224.New().
-- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_OAEP_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`ciphertext` is decrypted using [BCryptDecrypt] with [BCRYPT_OAEP_PADDING_INFO] padding information and `BCRYPT_PAD_OAEP` pad mode.
-
-</details>
-
-#### func [DecryptPKCS1v15](https://pkg.go.dev/crypto/rsa#DecryptPKCS1v15)
-
-```go
-func rsa.DecryptPKCS1v15(rand io.Reader, priv *rsa.PrivateKey, ciphertext []byte) ([]byte, error)
-```
-
-DecryptPKCS1v15 decrypts a plaintext using RSA and the padding scheme from PKCS #1 v1.5.
-
-**Requirements**
-
-- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
-- `priv.Primes` length must be 2 when using the CNG backend.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`ciphertext` is decrypted using [BCryptDecrypt] with `BCRYPT_PAD_PKCS1` pad mode.
-
-</details>
-
-#### func [DecryptPKCS1v15SessionKey](https://pkg.go.dev/crypto/rsa#DecryptPKCS1v15SessionKey)
-
-```go
-func rsa.DecryptPKCS1v15SessionKey(rand io.Reader, priv *PrivateKey, ciphertext []byte, key []byte) error
-```
-
-DecryptPKCS1v15SessionKey decrypts a session key using RSA and the padding scheme from PKCS #1 v1.5.
-
-**Requirements**
-
-- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
-- `priv.Primes` length must be 2 when using the CNG backend.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_PADDING` pad mode and copied into `key`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`ciphertext` is decrypted using [BCryptDecrypt] with `BCRYPT_PAD_PKCS1` pad mode and copied into `key`.
-
-</details>
-
-#### func [EncryptPKCS1v15](https://pkg.go.dev/crypto/rsa#EncryptPKCS1v15)
-
-```go
-func rsa.EncryptPKCS1v15(rand io.Reader, pub *rsa.PublicKey, msg []byte) ([]byte, error)
-```
-
-**Requirements**
-
-- `rand` must be boring.RandReader, else SignPSS will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`msg` is encrypted using [EVP_PKEY_encrypt] with `RSA_PKCS1_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`msg` is encrypted using [BCryptEncrypt] with `BCRYPT_PAD_PKCS1` pad mode.
-
-</details>
-
-#### func [SignPKCS1v15](https://pkg.go.dev/crypto/rsa#SignPKCS1v15)
-
-```go
-func rsa.SignPKCS1v15(rand io.Reader, priv *rsa.PrivateKey, hash crypto.Hash, hashed []byte) ([]byte, error)
-```
-
-SignPKCS1v15 calculates the signature of hashed using RSASSA-PKCS1-V1_5-SIGN from RSA PKCS #1 v1.5.
-
-**Requirements**
-
-- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
-- `priv.Primes` length must be 2 when using the CNG backend.
-- `hash` must be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPKCS1v15 will fail.
-- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
-- `hashed` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`hashed` is signed using [EVP_PKEY_sign] with `RSA_PKCS1_PADDING`.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`hashed` is signed using [BCryptSignHash] with [BCRYPT_PKCS1_PADDING_INFO] padding information and `BCRYPT_PAD_PKCS1` pad mode.
-
-</details>
-
-#### func [SignPSS](https://pkg.go.dev/crypto/rsa#SignPSS)
-
-```go
-func rsa.SignPSS(rand io.Reader, priv *rsa.PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error)
-```
-
-SignPSS calculates the signature of digest using PSS.
-
-**Requirements**
-
-- `rand` must be boring.RandReader, else SignPSS will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
-- `priv.Primes` length must be 2 when using the CNG backend.
-- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPSS will fail.
-- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
-- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-- `opts` can be nil.
-- `opts.SaltLength` can either be a number of bytes, or one of the following constants: rsa.PSSSaltLengthAuto and rsa.PSSSaltLengthEqualsHash.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`digest` is signed using [EVP_PKEY_sign] with `RSA_PKCS1_PSS_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`digest` is signed using [BCryptSignHash] with [BCRYPT_PSS_PADDING_INFO] padding information and `BCRYPT_PAD_PSS` pad mode.
-
-</details>
-
-#### func [VerifyPKCS1v15](https://pkg.go.dev/crypto/rsa#VerifyPKCS1v15)
-
-```go
-func rsa.VerifyPKCS1v15(pub *rsa.PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error
-```
-
-VerifyPKCS1v15 verifies an RSA PKCS #1 v1.5 signature.
-
-**Requirements**
-
-- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPSS will fail.
-- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
-- `hashed` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`sig` is verified using [EVP_PKEY_verify] with `RSA_PKCS1_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`sig` is verified using [BCryptVerifySignature] with [BCRYPT_PKCS1_PADDING_INFO] padding information and `BCRYPT_PAD_PKCS1` pad mode.
-
-</details>
-
-#### func [VerifyPSS](https://pkg.go.dev/crypto/rsa#VerifyPSS)
-
-```go
-func rsa.VerifyPSS(pub *rsa.PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error
-```
-
-VerifyPSS verifies a PSS signature.
-
-**Requirements**
-
-- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else VerifyPSS will fail.
-- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
-- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
-- `opts` can be nil.
-- `opts.SaltLength` can either be a number of bytes, or one of the following constants: rsa.PSSSaltLengthAuto and rsa.PSSSaltLengthEqualsHash.
-- The CNG backend does not support nil `opts` nor rsa.PSSSaltLengthAuto.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`sig` is verified using using [EVP_PKEY_verify] with `RSA_PKCS1_PSS_PADDING` pad mode.
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`sig` is verified using [BCryptVerifySignature] with [PSS_PADDING_INFO] padding information and `BCRYPT_PAD_PSS` pad mode.
-
-</details>
-
-#### func [GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey)
-
-```go
-func rsa.GenerateKey(rand io.Reader, bits int) (priv *rsa.PrivateKey, err error)
-```
-
-GenerateKey generates a public and private key pair.
-
-**Requirements**
-
-- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-- `bits` must be either 2048 or 3072.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`priv` is a wrapper around [EVP_PKEY] generated using [EVP_PKEY_keygen].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`priv` is generated using [BCryptGenerateKeyPair] with the [algorithm identifier] `BCRYPT_RSA_ALGORITHM`.
-
-</details>
-
-#### func [GenerateMultiPrimeKey](https://pkg.go.dev/crypto/rsa#GenerateMultiPrimeKey)
-
-```go
-func rsa.GenerateMultiPrimeKey(rand io.Reader, nprimes int, bits int) (priv *rsa.PrivateKey, err error)
-```
-
-GenerateMultiPrimeKey generates a multi-prime RSA keypair of the given bit size.
-
-**Requirements**
-
-- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
-- `nprimes` must be 2. 
-- `bits` must be either 2048 or 3072.
-
-**Implementation**
-
-<details><summary>OpenSSL (click for details)</summary>
-
-`priv` is a wrapper around [EVP_PKEY] generated using [EVP_PKEY_keygen].
-
-</details>
-
-<details><summary>CNG (click for details)</summary>
-
-`priv` is generated using [BCryptGenerateKeyPair] with the [algorithm identifier] `BCRYPT_RSA_ALGORITHM`.
-
-</details>
-
-#### func [PrivateKey.Decrypt](https://pkg.go.dev/crypto/rsa#PrivateKey.Decrypt)
-
-```go
-func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error)
-```
-
-Decrypt decrypts `ciphertext` with `priv`.
-
-The decrypt function depends on `opts`:
-
-- If `opts` is nil, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
-- If `opts` type is `*rsa.OAEPOptions`, it calls [rsa.DecryptOAEP](#func-decryptoaep)`(opts.Hash.New(), rand, priv, ciphertext, opts.Label)`.
-- If `opts` type is `*rsa.OAEPOptions` and `ops.Hash` is different than `opts.MGFHash`, it falls back to standard Go crypto.
-- If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen > 0`, it calls [rsa.DecryptPKCS1v15SessionKey](#func-decryptpkcs1v15sessionkey)`(rand, priv, ciphertext, plaintext)` with a random `plaintext`.
-- If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen == 0`, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
-- Else it returns an error.
-
-Each case may impose additional parameter requirements. After determining which case applies, check the linked function to find the additional restrictions.
-
-#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/rsa#PrivateKey.Sign)
-
-```go
-func (priv *rsa.PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
-```
-
-Sign signs `digest` with `priv`.
-
-The sign function depends on `opts`:
-
-- If `opts` type is `*rsa.PSSOptions`, it calls [rsa.SignPSS](#func-signpss)`(rand, priv, pssOpts.Hash, digest, opts)`
-- Else it calls [rsa.SignPKCS1v15](#func-signpkcs1v15)`(rand, priv, opts.HashFunc(), digest)`.
-
-Each case may impose additional parameter requirements. After determining which case applies, check the linked function to find the additional restrictions.
-
-### [crypto/subtle](https://pkg.go.dev/crypto/subtle)
-
-Does not contain crypto primitives, out of FIPS scope.
-
-### [crypto/tls](https://pkg.go.dev/crypto/tls)
-
-Package tls partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
-
-Package tls will automatically use FIPS compliant primitives implemented in other crypto packages.
-
-Since Go 1.22, the Microsoft build of Go runtime automatically enforces that tls only uses FIPS-approved settings when running in FIPS mode.
-Prior to Go 1.22, a program using tls must import the `crypto/tls/fipsonly` package to be compliant with these restrictions.
-
-When using TLS in FIPS-only mode the TLS handshake has the following restrictions:
-
-- TLS versions:
-  - `tls.VersionTLS12`
-  - `tls.VersionTLS13`
-- ECDSA elliptic curves:
-  - `tls.CurveP256`
-  - `tls.CurveP384`
-  - `tls.CurveP521`
-- Cipher suites for TLS 1.2:
-  - `tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`
-  - `tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`
-  - `tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`
-  - `tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`
-- Cipher suites for TLS 1.3:
-  - `tls.TLS_AES_128_GCM_SHA256`
-  - `tls.TLS_AES_256_GCM_SHA384`
-- x509 certificate public key:
-  - `rsa.PublicKey` with a bit length of 2048 or 3072. Bit length of 4096 is still not supported, see [this issue](https://github.com/golang/go/issues/41147) for more info.
-  - `ecdsa.PublicKey`  with a supported elliptic curve.
-- Signature algorithms:
-  - `tls.PSSWithSHA256`
-  - `tls.PSSWithSHA384`
-  - `tls.PSSWithSHA512`
-  - `tls.PKCS1WithSHA256`
-  - `tls.ECDSAWithP256AndSHA256`
-  - `tls.PKCS1WithSHA384`
-  - `tls.ECDSAWithP384AndSHA384`
-  - `tls.PKCS1WithSHA512`
-  - `tls.ECDSAWithP521AndSHA512`
-
-[EVP_EncryptUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_EncryptUpdate.html
-[EVP_DecryptUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_DecryptUpdate.html
-[RAND_bytes]: https://www.openssl.org/docs/man3.0/man3/RAND_bytes.html
-[EVP_PKEY]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY.html
-[EVP_PKEY_new]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_new.html
-[EVP_PKEY_new_raw_private_key]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_new_raw_private_key.html
-[EVP_PKEY_keygen]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_keygen.html
-[EVP_PKEY_sign]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_sign.html
-[EVP_PKEY_verify]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_verify.html
-[EVP_PKEY_encrypt]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_encrypt.html
-[EVP_PKEY_decrypt]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_decrypt.html
-[EVP_PKEY_derive]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_derive.html
-[EVP_MD_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_MD_CTX_new.html
-[EVP_DigestUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestUpdate.html
-[EVP_DigestFinal]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestFinal.html
-[EVP_DigestInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestInit.html
-[EVP_DigestInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestInit_ex.html
-[EVP_DigestSign]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSign.html
-[EVP_DigestVerify]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestVerify.html
-[EVP_DigestSign]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSign.html
-[EVP_DigestSignInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSignInit.html
-[EVP_DigestVerifyInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestVerifyInit.html
-[EVP_EncryptFinal_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_EncryptFinal_ex.html
-[EVP_DecryptFinal_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_DecryptFinal_ex.html
-[EVP_CIPHER_CTX_set_padding]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_set_padding.html
-[EVP_aes_128_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_ecb.html
-[EVP_aes_192_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_ecb.html
-[EVP_aes_256_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_ecb.html
-[EVP_aes_128_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_gcm.html
-[EVP_aes_192_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_gcm.html
-[EVP_aes_256_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_gcm.html
-[EVP_aes_128_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_ctr.html
-[EVP_aes_192_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_ctr.html
-[EVP_aes_256_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_ctr.html
-[EVP_aes_128_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_cbc.html
-[EVP_aes_192_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_cbc.html
-[EVP_des_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ecb.html
-[EVP_des_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_des_cbc.html
-[EVP_des_ede3_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ede3_ecb.html
-[EVP_des_ede3_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ede3_cbc.html
-[EVP_aes_256_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_cbc.html
-[EVP_rc4]: https://www.openssl.org/docs/man3.0/man3/EVP_rc4.html
-[EVP_md5]: https://www.openssl.org/docs/man3.0/man3/EVP_md5.html
-[EVP_sha1]: https://www.openssl.org/docs/man3.0/man3/EVP_sha1.html
-[EVP_sha224]: https://www.openssl.org/docs/man3.0/man3/EVP_sha224.html
-[EVP_sha256]: https://www.openssl.org/docs/man3.0/man3/EVP_sha256.html
-[EVP_sha384]: https://www.openssl.org/docs/man3.0/man3/EVP_sha384.html
-[EVP_sha512]: https://www.openssl.org/docs/man3.0/man3/EVP_sha512.html
-[HMAC_CTX_new]: https://www.openssl.org/docs/man3.0/man3/HMAC_CTX_new.html
-[HMAC_Init_ex]: https://www.openssl.org/docs/man3.0/man3/HMAC_Init_ex.html
-[HMAC_Update]: https://www.openssl.org/docs/man3.0/man3/HMAC_Update.html
-[HMAC_Final]: https://www.openssl.org/docs/man3.0/man3/HMAC_Final.html
-[EVP_MAC_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_CTX_new.html
-[EVP_MAC_init]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_init.html
-[EVP_MAC_update]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_update.html
-[EVP_MAC_final]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_final.html
-[EVP_CIPHER_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_new.html
-[EVP_CipherInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_CipherInit_ex.html
-[EVP_CIPHER_CTX_free]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_free.html
-
-[algorithm identifier]: https://docs.microsoft.com/en-us/windows/win32/seccng/cng-algorithm-identifiers
-[named elliptic curve]: https://docs.microsoft.com/en-us/windows/win32/seccng/cng-named-elliptic-curves
-[BCryptGenRandom]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgenrandom
-[BCryptGenerateSymmetricKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgeneratesymmetrickey
-[BCryptGenerateKeyPair]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgeneratekeypair
-[BCryptImportKeyPair]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptimportkeypair
-[BCryptExportKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptexportkey
-[BCryptEncrypt]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptencrypt
-[BCryptDecrypt]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptdecrypt
-[BCryptSignHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptsignhash
-[BCryptVerifySignature]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptverifysignature
-[BCryptCreateHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptcreatehash
-[BCryptHashData]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcrypthashdata
-[BCryptFinishHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptfinishhash
-[BCryptDestroyHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptdestroyhash
-[BCRYPT_OAEP_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_oaep_padding_info
-[BCRYPT_PKCS1_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_pkcs1_padding_info
-[BCRYPT_PSS_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_pss_padding_info
-[BCryptDeriveKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptderivekey
+# FIPS 140-2 User Guide
+
+This document is a user guide for the Microsoft build of Go crypto package running on FIPS 140-2 compatibility mode (hereafter referred to as FIPS). It is intended as a technical reference for developers using, and system administrators installing, the Go toolset, and for use in risk assessment reviews by security auditors. This is not a replacement for the Go crypto documentation, rather it is a collection of notes and more detailed explanations in the context of FIPS compatibility.
+
+The Go crypto documentation is available online at https://pkg.go.dev/crypto.
+
+<!-- The following table of contents is maintained using https://marketplace.visualstudio.com/items?itemName=yzhang.markdown-all-in-one -->
+
+- [FIPS 140-2 User Guide](#fips-140-2-user-guide)
+  - [The Microsoft build of Go crypto backends](#the-microsoft-build-of-go-crypto-backends)
+  - [Using Go crypto APIs](#using-go-crypto-apis)
+    - [crypto/aes](#cryptoaes)
+      - [func NewCipher](#func-newcipher)
+    - [crypto/cipher](#cryptocipher)
+      - [func NewGCM](#func-newgcm)
+      - [func NewGCMWithNonceSize](#func-newgcmwithnoncesize)
+      - [func NewGCMWithTagSize](#func-newgcmwithtagsize)
+      - [func NewCBCDecrypter](#func-newcbcdecrypter)
+      - [func NewCBCEncrypter](#func-newcbcencrypter)
+      - [func NewCFBDecrypter](#func-newcfbdecrypter)
+      - [func NewCFBEncrypter](#func-newcfbencrypter)
+      - [func NewCTR](#func-newctr)
+      - [func NewOFB](#func-newofb)
+      - [func StreamReader.Read](#func-streamreaderread)
+      - [func StreamWriter.Write](#func-streamwriterwrite)
+      - [func StreamWriter.Close](#func-streamwriterclose)
+    - [crypto/des](#cryptodes)
+      - [func NewCipher](#func-newcipher-1)
+      - [func NewTripleDESCipher](#func-newtripledescipher)
+    - [crypto/dsa](#cryptodsa)
+    - [crypto/ecdh](#cryptoecdh)
+      - [func P256](#func-p256)
+      - [func P384](#func-p384)
+      - [func P521](#func-p521)
+      - [func X25519](#func-x25519)
+      - [func PrivateKey.ECDH](#func-privatekeyecdh)
+    - [crypto/ecdsa](#cryptoecdsa)
+      - [func Sign](#func-sign)
+      - [func SignASN1](#func-signasn1)
+      - [func Verify](#func-verify)
+      - [func VerifyASN1](#func-verifyasn1)
+      - [func GenerateKey](#func-generatekey)
+      - [func PrivateKey.Sign](#func-privatekeysign)
+    - [crypto/ed25519](#cryptoed25519)
+      - [func GenerateKey](#func-generatekey-1)
+      - [func Sign](#func-sign-1)
+      - [func Verify](#func-verify-1)
+      - [func VerifyWithOptions](#func-verifywithoptions)
+      - [func NewKeyFromSeed](#func-newkeyfromseed)
+      - [func PrivateKey.Sign](#func-privatekeysign-1)
+    - [crypto/elliptic](#cryptoelliptic)
+    - [crypto/hmac](#cryptohmac)
+      - [func Equal](#func-equal)
+      - [func New](#func-new)
+    - [crypto/md5](#cryptomd5)
+      - [func New](#func-new-1)
+      - [func Sum](#func-sum)
+    - [crypto/rand](#cryptorand)
+      - [var Reader](#var-reader)
+      - [func Int](#func-int)
+      - [func Prime](#func-prime)
+      - [func Read](#func-read)
+    - [crypto/rc4](#cryptorc4)
+      - [func NewCipher](#func-newcipher-2)
+    - [crypto/sha1](#cryptosha1)
+      - [func New](#func-new-2)
+      - [func Sum](#func-sum-1)
+    - [crypto/sha256](#cryptosha256)
+      - [func New](#func-new-3)
+      - [func New224](#func-new224)
+      - [func Sum224](#func-sum224)
+      - [func Sum256](#func-sum256)
+    - [crypto/sha512](#cryptosha512)
+      - [func New](#func-new-4)
+      - [func New384](#func-new384)
+      - [func New512\_224](#func-new512_224)
+      - [func New512\_256](#func-new512_256)
+      - [func Sum384](#func-sum384)
+      - [func Sum512](#func-sum512)
+      - [func Sum512\_224](#func-sum512_224)
+      - [func Sum512\_256](#func-sum512_256)
+    - [crypto/rsa](#cryptorsa)
+      - [func DecryptOAEP](#func-decryptoaep)
+      - [func DecryptPKCS1v15](#func-decryptpkcs1v15)
+      - [func DecryptPKCS1v15SessionKey](#func-decryptpkcs1v15sessionkey)
+      - [func EncryptPKCS1v15](#func-encryptpkcs1v15)
+      - [func SignPKCS1v15](#func-signpkcs1v15)
+      - [func SignPSS](#func-signpss)
+      - [func VerifyPKCS1v15](#func-verifypkcs1v15)
+      - [func VerifyPSS](#func-verifypss)
+      - [func GenerateKey](#func-generatekey-2)
+      - [func GenerateMultiPrimeKey](#func-generatemultiprimekey)
+      - [func PrivateKey.Decrypt](#func-privatekeydecrypt)
+      - [func PrivateKey.Sign](#func-privatekeysign-2)
+    - [crypto/subtle](#cryptosubtle)
+    - [crypto/tls](#cryptotls)
+
+## The Microsoft build of Go crypto backends
+
+The OpenSSL backend uses [golang-fips/openssl].
+The CNG backend uses [go-crypto-winnative].
+For more general information about the backends, such as how to enable them, see the [Microsoft build of Go FIPS README](./README.md).
+
+[golang-fips/openssl]: https://github.com/golang-fips/openssl
+[go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
+
+> [!NOTE]
+> The CNG backend uses a module called "bcrypt" to interact with CNG.
+> Some identifiers and functions used by the CNG backend include a "bcrypt" prefix, referring to the "bcrypt" CNG module.
+> For example, `BCryptGenRandom` is a function that generates random numbers using CNG.
+>
+> There is also a password hashing algorithm called "bcrypt".
+> It is unrelated, and not in the scope of this document.
+
+## Using Go crypto APIs
+
+This section describes how to use Go crypto APIs in a FIPS compliant manner.
+
+As a general rule, crypto APIs will delegate low-level operations to the crypto backend if these rules are met:
+
+- The operation is supported by the crypto backend.
+- The set of input parameters are supported by the crypto backend.
+
+If any of the previous rules are not met, the operation will fall back to standard Go crypto unless otherwise specified. Standard Go crypto will behave as expected but is not FIPS compliant. There is not yet any way to configure the crypto APIs to panic instead of falling back to standard Go crypto. See [microsoft/go#428](https://github.com/microsoft/go/issues/428).
+
+When reading the requirements section, the key word "must" is to be interpreted as a necessary condition to use the given API in a FIPS compliant manner.
+
+### [crypto/aes](https://pkg.go.dev/crypto/aes)
+
+Package aes implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.
+
+#### func [NewCipher](https://pkg.go.dev/crypto/aes#NewCipher)
+
+```go
+func aes.NewCipher(key []byte) (cipher cipher.Block, err error)
+```
+
+NewCipher creates and returns a new [cipher.Block](https://pkg.go.dev/crypto/cipher#Block).
+
+**Requirements**
+
+- `key` length must be 16, 24, or 32 bytes.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using a cipher function that depends on the `key` length:
+
+- If `len(key) == 16` uses [EVP_aes_128_ecb].
+- If `len(key) == 24` uses [EVP_aes_192_ecb].
+- If `len(key) == 32` uses [EVP_aes_256_ecb].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `16`.
+- `Encrypt` uses [EVP_EncryptUpdate].
+- `Decrypt` uses [EVP_DecryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_AES_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `16`.
+- `Encrypt` uses [BCryptEncrypt].
+- `Decrypt` uses [BCryptDecrypt].
+
+</details>
+
+### [crypto/cipher](https://pkg.go.dev/crypto/cipher)
+
+Package cipher implements standard block cipher modes that can be wrapped around low-level block cipher implementations.
+
+#### func [NewGCM](https://pkg.go.dev/crypto/cipher#NewGCM)
+
+```go
+func cipher.NewGCM(cipher cipher.Block) (aead cipher.AEAD, err error)
+```
+
+NewGCM returns the given 128-bit, block cipher wrapped in Galois Counter Mode with the standard nonce length.
+
+**Requirements**
+
+- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cipher` implements the cipher.AEAD interface using a cipher function that depends on the key length of cipher:
+
+- `NonceSize` always returns `12`.
+- `Overhead` always returns `16`.
+- The cipher used in `Seal` and `Open` depends on the key length used in `aes.NewCipher(key []byte)`:
+  - If `len(key) == 16` uses [EVP_aes_128_gcm].
+  - If `len(key) == 24` uses [EVP_aes_192_gcm].
+  - If `len(key) == 32` uses [EVP_aes_256_gcm].
+- `Seal` uses [EVP_EncryptUpdate] for the encryption and [EVP_EncryptFinal_ex] for authenticating.
+- `Open` uses [EVP_DecryptUpdate] for the decryption and [EVP_DecryptFinal_ex] for authenticating.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_AES_ALGORITHM` with `BCRYPT_CHAIN_MODE_GCM` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+- `NonceSize` always returns `12`.
+- `Overhead` always returns `16`.
+- `Encrypt` uses [BCryptEncrypt].
+- `Decrypt` uses [BCryptDecrypt].
+
+</details>
+
+#### func [NewGCMWithNonceSize](https://pkg.go.dev/crypto/cipher#NewGCMWithNonceSize)
+
+```go
+func cipher.NewGCMWithNonceSize(cipher cipher.Block, size int) (aead cipher.AEAD, error)
+```
+
+NewGCMWithNonceSize returns the given 128-bit, block cipher wrapped in Galois Counter Mode, which accepts nonces of the given length.
+
+**Requirements**
+
+- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
+- `size` must be 12.
+
+**Implementation**
+
+`aead` can have different implementations depending on the supplied parameters:
+
+- If the parameters meet the requirements, then `aead` behaves exactly as if it was created with [aes.NewCipher](#func-newgcm).
+- If `cipher` is an object created by [aes.NewCipher](#func-newcipher) and `size != 12`, then `aead` is implemented by the standard Go library and the crypto backend is only used for encryption and decryption.
+- Else `aead` is completely implemented by the standard Go library.
+
+#### func [NewGCMWithTagSize](https://pkg.go.dev/crypto/cipher#NewGCMWithTagSize)
+
+```go
+func cipher.NewGCMWithTagSize(cipher cipher.Block, tagSize int) (aead cipher.AEAD, error)
+```
+
+NewGCMWithTagSize returns the given 128-bit, block cipher wrapped in Galois Counter Mode, which generates tags with the given length.
+
+**Requirements**
+
+- `cipher` must be an object created by [aes.NewCipher](#func-newcipher).
+- `tagSize` must be 16.
+
+**Implementation**
+
+`aead` can have different implementations depending on the supplied parameters:
+
+- If the parameters meet the requirements, then `aead` behaves exactly as if it was created with [aes.NewCipher](#func-newgcm).
+- If `cipher` is an object created by [aes.NewCipher](#func-newcipher) and `tagSize != 16` then `aead` is implemented by the standard Go library using the crypto backend for encryption and decryption.
+- Else `aead` is completely implemented by the standard Go library.
+
+#### func [NewCBCDecrypter](https://pkg.go.dev/crypto/cipher#NewCBCDecrypter)
+
+```go
+func cipher.NewCBCDecrypter(block Block, iv []byte) (cbc cipher.BlockMode)
+```
+
+NewCBCDecrypter returns a BlockMode which decrypts in cipher block chaining mode, using the given Block.
+
+**Requirements**
+
+- `block` must be an object created by [aes.NewCipher](#func-newcipher), [des.NewCipher](#func-newcipher-1), or [des.NewTripleDESCipher](#func-newtripledescipher).
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cbc` implements the cipher.BlockMode interface using a cipher that depends on the `block` key length:
+
+- For `aes.NewCipher`:
+  - If `len(key) == 16` then the cipher used is [EVP_aes_128_cbc].
+  - If `len(key) == 24` then the cipher used is [EVP_aes_192_cbc].
+  - If `len(key) == 32` then the cipher used is [EVP_aes_256_cbc].
+- For `des.NewCipher`, the cipher used is [EVP_des_cbc].
+- For `des.NewTripleDESCipher`, the cipher used is [EVP_des_ede3_cbc].
+
+In all cases the cipher will have the padding disabled using [EVP_CIPHER_CTX_set_padding].
+
+The cipher.BlockMode methods are implemented as follows:
+
+- `BlockSize` always returns the underlying cipher block size.
+- `CryptBlocks` uses [EVP_DecryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the underlying cipher [algorithm identifier]  with `BCRYPT_CHAIN_MODE_CBC` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns the underlying cipher block size.
+- `CryptBlocks` uses [BCryptDecrypt].
+
+</details>
+
+#### func [NewCBCEncrypter](https://pkg.go.dev/crypto/cipher#NewCBCEncrypter)
+
+```go
+func cipher.NewCBCEncrypter(block Block, iv []byte) (cbc cipher.BlockMode)
+```
+
+NewCBCEncrypter returns a BlockMode which encrypts in cipher block chaining mode, using the given Block.
+
+**Requirements**
+
+- `block` must be an object created by [aes.NewCipher](#func-newcipher), [des.NewCipher](#func-newcipher-1), or [des.NewTripleDESCipher](#func-newtripledescipher).
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cbc` implements the cipher.BlockMode interface using a cipher that depends on the `block` key length:
+
+- For `aes.NewCipher`:
+  - If `len(key) == 16` then the cipher used is [EVP_aes_128_cbc].
+  - If `len(key) == 24` then the cipher used is [EVP_aes_192_cbc].
+  - If `len(key) == 32` then the cipher used is [EVP_aes_256_cbc].
+- For `des.NewCipher`, the cipher used is [EVP_des_cbc].
+- For `des.NewTripleDESCipher`, the cipher used is [EVP_des_ede3_cbc].
+
+The cipher.BlockMode methods are implemented as follows:
+
+- `BlockSize` always returns the underlying cipher block size.
+- `CryptBlocks` uses [EVP_EncryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the underlying cipher [algorithm identifier]  with `BCRYPT_CHAIN_MODE_CBC` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns the underlying cipher block size.
+- `CryptBlocks` uses [BCryptEncrypt].
+
+</details>
+
+#### func [NewCFBDecrypter](https://pkg.go.dev/crypto/cipher#NewCFBDecrypter)
+
+cipher.NewCFBDecrypter is not implemented by any backend.
+
+#### func [NewCFBEncrypter](https://pkg.go.dev/crypto/cipher#NewCFBEncrypter)
+
+cipher.NewCFBEncrypter is not implemented by any backend.
+
+#### func [NewCTR](https://pkg.go.dev/crypto/cipher#NewCTR)
+
+```go
+func cipher.NewCTR(block Block, iv []byte) (ctr cipher.Stream)
+```
+
+NewCTR returns a Stream which encrypts/decrypts using the given Block in counter mode.
+
+**Requirements**
+
+- The CNG backend does not implement this function.
+- `block` must be an object created by [aes.NewCipher](#func-newcipher).
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`ctr` implements the cipher.Stream interface using a cipher that depends on the `block` key length:
+
+- If `len(key) == 16` then the cipher used is [EVP_aes_128_ctr].
+- If `len(key) == 24` then the cipher used is [EVP_aes_192_ctr].
+- If `len(key) == 32` then the cipher used is [EVP_aes_256_ctr].
+
+The cipher.Stream methods are implemented as follows:
+- `XORKeyStream(dst, src []byte)` XORs each byte in the given slice using [EVP_EncryptUpdate].
+
+</details>
+
+#### func [NewOFB](https://pkg.go.dev/crypto/cipher#NewOFB)
+
+cipher.NewOFB is not implemented by any backend.
+
+#### func [StreamReader.Read](https://pkg.go.dev/crypto/cipher#StreamReader.Read)
+
+```go
+func (r cipher.StreamReader) Read(dst []byte) (n int, err error)
+```
+
+**Requirements**
+
+- The CNG backend does not implement this function.
+- `r.S` must be an object created by [cipher.NewCTR](#func-newctr).
+
+#### func [StreamWriter.Write](https://pkg.go.dev/crypto/cipher#StreamWriter.Write)
+
+```go
+func (w cipher.StreamWriter) Write(src []byte) (n int, err error)
+```
+
+**Requirements**
+
+- The CNG backend does not implement this function.
+- `r.S` must be an object created by [cipher.NewCTR](#func-newctr).
+
+#### func [StreamWriter.Close](https://pkg.go.dev/crypto/cipher#StreamWriter.Close)
+
+```go
+func (w cipher.StreamWriter) Close() error
+```
+
+Does not contain crypto algorithms, out of FIPS scope.
+
+### [crypto/des](https://pkg.go.dev/crypto/des)
+
+Package des implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.
+
+DES is cryptographically broken and should not be used for secure applications.
+
+#### func [NewCipher](https://pkg.go.dev/crypto/des#NewCipher)
+
+```go
+func des.NewCipher(key []byte) (cipher.Block, error)
+```
+
+NewCipher creates and returns a new cipher.Block.
+
+**Requirements**
+
+- `key` length must be 8 bytes.
+- OpenSSL does not provide a DES implementation in FIPS mode. In that case, the code will fall back to standard Go crypto.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [EVP_des_128_ecb] cipher function.
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `8`.
+- `Encrypt` uses [EVP_EncryptUpdate].
+- `Decrypt` uses [EVP_DecryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_DES_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `8`.
+- `Encrypt` uses [BCryptEncrypt].
+- `Decrypt` uses [BCryptDecrypt].
+
+</details>
+
+#### func [NewTripleDESCipher](https://pkg.go.dev/crypto/des#NewTripleDESCipher)
+
+```go
+NewTripleDESCipher(key []byte) (cipher.Block, error)
+```
+
+NewTripleDESCipher creates and returns a new cipher.Block.
+
+**Requirements**
+
+- `key` length must be 24 bytes.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [EVP_des_ede3_ecb] cipher function.
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `8`.
+- `Encrypt` uses [EVP_EncryptUpdate].
+- `Decrypt` uses [EVP_DecryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`cipher` implements the cipher.Block interface using the [algorithm identifier] `BCRYPT_DES3_ALGORITHM` with `BCRYPT_CHAIN_MODE_ECB` mode, generated using [BCryptGenerateSymmetricKey].
+
+The cipher.Block methods are implemented as follows:
+
+- `BlockSize` always returns `8`.
+- `Encrypt` uses [BCryptEncrypt].
+- `Decrypt` uses [BCryptDecrypt].
+
+</details>
+
+### [crypto/dsa](https://pkg.go.dev/crypto/dsa)
+
+Not implemented by any backend.
+
+### [crypto/ecdh](https://pkg.go.dev/crypto/ecdh)
+
+Package ecdh implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.
+
+**Implementation**
+
+All supported curves implement the `ecdh.Curve` interface as follows:
+
+<details><summary>OpenSSL (click for details)</summary>
+
+ - `GenerateKey` uses [EVP_PKEY_keygen].
+ - `NewPrivateKey` uses [EVP_PKEY_new].
+ - `NewPublicKey` uses [EVP_PKEY_new].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+ - `GenerateKey` uses [BCryptGenerateKeyPair] and [BCryptExportKey].
+ - `NewPrivateKey` uses [BCryptImportKeyPair].
+ - `NewPublicKey` uses [BCryptImportKeyPair].
+
+</details>
+
+#### func [P256](https://pkg.go.dev/crypto/ecdh#P256)
+
+```go
+func ecdh.P256() ecdh.Curve
+```
+
+P256 returns a Curve which implements NIST P-256.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The curve uses `NID_X9_62_prime256v1`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The curve uses `BCRYPT_ECC_CURVE_NISTP256`.
+
+</details>
+
+#### func [P384](https://pkg.go.dev/crypto/ecdh#P384)
+
+```go
+func ecdh.P384() ecdh.Curve
+```
+
+P384 returns a Curve which implements NIST P-384.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The curve uses `NID_secp384r1`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The curve uses `BCRYPT_ECC_CURVE_NISTP384`.
+
+</details>
+
+#### func [P521](https://pkg.go.dev/crypto/ecdh#P521)
+
+```go
+func ecdh.P521() ecdh.Curve
+```
+
+P521 returns a Curve which implements NIST P-521.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The curve uses `NID_secp521r1`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The curve uses `BCRYPT_ECC_CURVE_NISTP521`.
+
+</details>
+
+#### func [X25519](https://pkg.go.dev/crypto/ecdh#X25519)
+
+ecdh.X25519 is not implemented by any backend.
+
+#### func [PrivateKey.ECDH](https://pkg.go.dev/crypto/ecdh#PrivateKey.ECDH)
+
+```go
+func (k *ecdh.PrivateKey) ECDH(remote *ecdh.PublicKey) ([]byte, error)
+```
+
+ECDH performs an ECDH exchange and returns the shared secret. The PrivateKey and PublicKey must use the same curve.
+
+**Requirements**
+
+- `remote` must be an object created from `ecdh.P256()`, `ecdh.P384()`, or `ecdh.P521()`.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The key is derived using [EVP_PKEY_derive].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The key is derived using [BCryptDeriveKey].
+
+</details>
+
+### [crypto/ecdsa](https://pkg.go.dev/crypto/ecdsa)
+
+Package ecdsa implements the Elliptic Curve Digital Signature Algorithm, as defined in FIPS 186-3.
+
+#### func [Sign](https://pkg.go.dev/crypto/ecdsa#Sign)
+
+```go
+func ecdsa.Sign(rand io.Reader, priv *ecdsa.PrivateKey, hash []byte) (r, s *big.Int, err error)
+```
+
+Sign signs a hash using the private key.
+
+**Requirements**
+
+- `rand` must be boring.RandReader, else Sign will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
+- `hash` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`r` and `s` are generated using [EVP_PKEY_sign].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`r` and `s` are generated using [BCryptSignHash].
+
+</details>
+
+#### func [SignASN1](https://pkg.go.dev/crypto/ecdsa#SignASN1)
+
+```go
+func ecdsa.SignASN1(rand io.Reader, priv *ecdsa.PrivateKey, hash []byte) (sig []byte, err error)
+```
+
+SignASN1 signs a hash using the private key. It behaves as [ecdsa.Sign](#func-sign) but returns an ASN.1 encoded signature instead.
+
+#### func [Verify](https://pkg.go.dev/crypto/ecdsa#Verify)
+
+```go
+func ecdsa.Verify(pub *ecdsa.PublicKey, hash []byte, r, s *big.Int) bool
+```
+
+Verify verifies the signature in r, s of hash using the public key.
+
+**Requirements**
+
+There are no specific parameters requirements in order to be FIPS compliant.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The signature is verified using [EVP_PKEY_verify].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The signature is verified using [BCryptVerifySignature].
+
+</details>
+
+#### func [VerifyASN1](https://pkg.go.dev/crypto/ecdsa#VerifyASN1)
+
+```go
+func ecdsa.VerifyASN1(pub *ecdsa.PublicKey, hash, sig []byte) bool
+```
+
+VerifyASN1 verifies the ASN.1 encoded signature, sig, of hash using the public key. It behaves as [ecdsa.Verify](#func-verify) but accepts an ASN.1 encoded signature instead.
+
+#### func [GenerateKey](https://pkg.go.dev/crypto/ecdsa#GenerateKey)
+
+```go
+func ecdsa.GenerateKey(c elliptic.Curve, rand io.Reader) (priv *ecdsa.PrivateKey, err error)
+```
+
+GenerateKey generates a public and private key pair.
+
+**Requirements**
+
+- `c.Params().Name` must be one of the following values: P-224, P-256, P-384, or P-521.
+- The CNG backend does not support P-224. 
+- `rand` must be boring.RandReader, else GenerateKey will panic. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`priv` is a wrapper around an [EVP_PKEY] generated using [EVP_PKEY_keygen].
+
+`priv` curve algorithm depends on the value of `c`:
+
+- If `c.Params().Name == "P-224"` then curve is `NID_secp224r1`.
+- If `c.Params().Name == "P-256"` then curve is `NID_X9_62_prime256v1`.
+- If `c.Params().Name == "P-384"` then curve is `NID_secp384r1`.
+- If `c.Params().Name == "P-521"` then curve is `NID_secp521r1`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`priv` is generated using [BCryptGenerateKeyPair].
+
+`priv` [algorithm identifier] is `BCRYPT_ECDSA_ALGORITHM` and the [named elliptic curve] depends on the value of `c`:
+
+- If `c.Params().Name == "P-224"` then curve is `BCRYPT_ECC_CURVE_NISTP224`.
+- If `c.Params().Name == "P-256"` then curve is `BCRYPT_ECC_CURVE_NISTP256`.
+- If `c.Params().Name == "P-384"` then curve is `BCRYPT_ECC_CURVE_NISTP384`.
+- If `c.Params().Name == "P-521"` then curve is `BCRYPT_ECC_CURVE_NISTP521`.
+
+</details>
+
+#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/ecdsa#PrivateKey.Sign)
+
+```go
+func (priv *ecdsa.PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
+```
+
+Sign signs `digest` with `priv`.
+
+**Requirements**
+
+- `rand` must be boring.RandReader, else Sign will panic. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The message is signed using [EVP_PKEY_sign].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The message is signed using [BCryptSignHash].
+
+</details>
+
+### [crypto/ed25519](https://pkg.go.dev/crypto/ed25519)
+
+Package ed25519 implements the Ed25519 signature algorithm. See https://ed25519.cr.yp.to/.
+
+**Requirements**
+
+The CNG backend and some old OpenSSL distributions don't support ED25519.
+In those cases, the code will fall back to standard Go crypto.
+
+#### func [GenerateKey](https://pkg.go.dev/crypto/ed25519#GenerateKey)
+
+```go
+func GenerateKey(rand io.Reader) (pub ed25519.PublicKey, priv ed25519.PrivateKey, error)
+```
+
+GenerateKey generates a public/private key pair using entropy from rand. If rand is nil, crypto/rand.Reader will be used.
+
+**Requirements**
+
+- `rand` must be boring.RandReader or nil. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`pub` and `priv` are generated using [EVP_PKEY_keygen] with the `EVP_PKEY_ED25519` algorithm.
+
+</details>
+
+#### func [Sign](https://pkg.go.dev/crypto/ed25519#Sign)
+
+```go
+func Sign(privateKey ed25519.PrivateKey, message []byte) []byte
+```
+
+Sign signs the message with privateKey and returns a signature. It will panic if len(privateKey) is not PrivateKeySize.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`message` is signed using [EVP_MD_CTX_new], [EVP_DigestSignInit] and [EVP_DigestSign].
+
+</details>
+
+#### func [Verify](https://pkg.go.dev/crypto/ed25519#Verify)
+
+```go
+func Verify(publicKey ed25519.PublicKey, message, sig []byte) bool
+```
+
+Verify reports whether sig is a valid signature of message by publicKey. It will panic if len(publicKey) is not PublicKeySize.
+
+**Requirements**
+
+- OpenSSL version must be 1.1.1b or higher. Otherwise, falls back to standard Go crypto.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`message` is verified against `sig` using [EVP_MD_CTX_new], [EVP_DigestVerifyInit] and [EVP_DigestVerify].
+
+
+</details>
+
+#### func [VerifyWithOptions](https://pkg.go.dev/crypto/ed25519#VerifyWithOptions)
+
+```go
+func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options) error
+```
+
+VerifyWithOptions reports whether sig is a valid signature of message by publicKey. A valid signature is indicated by returning a nil error. It will panic if len(publicKey) is not PublicKeySize.
+
+**Requirements**
+
+- Only `opts.Hash == nil && opts.Context == ""` is implemented using the OpenSSL backend. Other combinations fall back to standard Go code.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`message` is verified against `sig` using [EVP_MD_CTX_new], [EVP_DigestVerifyInit] and [EVP_DigestVerify].
+
+
+</details>
+
+#### func [NewKeyFromSeed](https://pkg.go.dev/crypto/ed25519#NewKeyFromSeed)
+
+```go
+func NewKeyFromSeed(seed []byte) (priv ed25519.PrivateKey)
+```
+
+NewKeyFromSeed calculates a private key from a seed. It will panic if len(seed) is not SeedSize.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`priv` is generated using [EVP_PKEY_new_raw_private_key] with the `EVP_PKEY_ED25519` algorithm.
+
+
+</details>
+
+#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/ed25519#PrivateKey.Sign)
+
+```go
+func (priv ed25519.PrivateKey) Sign(rand io.Reader, message []byte, opts crypto.SignerOpts) (signature []byte, err error)
+```
+
+Sign signs the given message with `priv`. `rand` is ignored and can be nil.
+
+**Requirements**
+
+- Only `opts.Hash == nil && opts.Context == ""` is implemented using the OpenSSL backend. Other combinations fall back to standard Go code.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`message` is signed using [EVP_MD_CTX_new], [EVP_DigestSignInit] and [EVP_DigestSign].
+
+</details>
+
+### [crypto/elliptic](https://pkg.go.dev/crypto/elliptic)
+
+Not implemented by any backend, but to use `ecdsa.GenerateKey`, one of the following `elliptic.Curve` constructors must be used to specify the curve. See [`ecdsa.GenerateKey`](#func-generatekey) for additional requirements. As long as the requirements are met, only the name of the curve is used, not the curve parameters or methods implemented by standard Go crypto, allowing FIPS compliance.
+
+```go
+func elliptic.P224() elliptic.Curve
+func elliptic.P256() elliptic.Curve
+func elliptic.P384() elliptic.Curve
+func elliptic.P521() elliptic.Curve
+```
+
+### [crypto/hmac](https://pkg.go.dev/crypto/hmac)
+
+Package hmac implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
+
+#### func [Equal](https://pkg.go.dev/crypto/hmac#Equal)
+
+```go
+func hmac.Equal(mac1, mac2 []byte) bool
+```
+
+Equal compares two MACs for equality without leaking timing information.
+
+This function does not implement any cryptographic algorithm, therefore out of FIPS scope.
+
+#### func [New](https://pkg.go.dev/crypto/hmac#New)
+
+```go
+func hmac.New(h func() hash.Hash, key []byte) hash.Hash
+```
+
+New returns a new HMAC hash using the given hash.Hash type and key.
+
+**Requirements**
+
+- `h` must be one of the following functions: sha1.New, sha224.New, sha256.New, sha384.New, or sha512.New.
+- The CNG backend does not support sha224.New. 
+
+**Implementation**
+
+<details><summary>OpenSSL 1.x (click for details)</summary>
+
+The hmac is generated using [HMAC_CTX_new] and [HMAC_Init_ex].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [HMAC_Update].
+- `Sum` using [HMAC_Final].
+- `Reset` using [HMAC_Init_ex].
+
+</details>
+
+<details><summary>OpenSSL 3.x (click for details)</summary>
+
+The hmac is generated using [EVP_MAC_CTX_new] and [EVP_MAC_init].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_MAC_update].
+- `Sum` using [EVP_MAC_final].
+- `Reset` using [EVP_MAC_init].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hmac is generated using [BCryptCreateHash] with the `BCRYPT_ALG_HANDLE_HMAC_FLAG` flag.
+
+The [algorithm identifier] depends on the value of `h`:
+
+- If `h == sha1.New` then algorithm is `BCRYPT_SHA1_ALGORITHM`.
+- If `h == sha256.New` then algorithm is `BCRYPT_SHA256_ALGORITHM`.
+- If `h == sha384.New` then algorithm is `BCRYPT_SHA384_ALGORITHM`.
+- If `h == sha512.New` then algorithm is `BCRYPT_SHA512_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+### [crypto/md5](https://pkg.go.dev/crypto/md5)
+
+Package md5 implements the MD5 hash algorithm as defined in RFC 1321.
+
+MD5 is cryptographically broken and should not be used for secure applications.
+
+#### func [New](https://pkg.go.dev/crypto/md5#New)
+
+```go
+func md5.New() hash.Hash
+```
+
+New returns a new hash.Hash computing the MD5 checksum.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_md5].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_MD5_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+#### func [Sum](https://pkg.go.dev/crypto/md5#Sum)
+
+```go
+func md5.Sum(data []byte) [15]byte
+```
+
+Sum returns the MD5 checksum of the data.
+It internally uses md5.New() to compute the checksum.
+
+### [crypto/rand](https://pkg.go.dev/crypto/rand)
+
+Package rand implements a cryptographically secure random number generator.
+
+#### var [Reader](https://pkg.go.dev/crypto/rand#pkg-variables)
+
+```go
+var Reader io.Reader
+```
+
+Reader is a global, shared instance of a cryptographically secure random number generator.
+
+It is assigned to boring.RandReader in the crypto/rand init function.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`rand.Reader` implements `io.Reader` using [RAND_bytes]
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`rand.Reader` implements `io.Reader` using [BCryptGenRandom]
+
+</details>
+
+#### func [Int](https://pkg.go.dev/crypto/rand#Int)
+
+```go
+func rand.Int(rand io.Reader, max *big.Int) (n *big.Int, err error)
+```
+
+Int returns a uniform random value in [0, max). It panics if max <= 0.
+
+**Requirements**
+
+- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+
+#### func [Prime](https://pkg.go.dev/crypto/rand#Prime)
+
+```go
+func Prime(rand io.Reader, bits int) (p *big.Int, err error)
+```
+
+Prime returns a number of the given bit length that is prime with high probability.
+
+**Requirements**
+
+- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+
+#### func [Read](https://pkg.go.dev/crypto/rand#Read)
+
+```go
+func Read(b []byte) (n int, err error)
+```
+
+Read is a helper function that calls rand.Reader.Read using io.ReadFull.
+
+**Requirements**
+
+- `rand.Reader` must be boring.RandReader. This invariant is normally met as `rand.Reader` is assigned to boring.RandReader in the crypto/rand init function.
+
+### [crypto/rc4](https://pkg.go.dev/crypto/rc4)
+
+Package rc4 implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.
+
+#### func [NewCipher](https://pkg.go.dev/crypto/rc4#NewCipher)
+
+```go
+func rc4.NewCipher() rc4.Cipher
+```
+
+NewCipher creates and returns a new Cipher. The key argument should be the RC4 key, at least 1 byte and at most 256 bytes.
+
+**Requirements**
+
+Some OpenSSL distributions don't implement RC4, e.g., OpenSSL 1.x compiled with `-DOPENSSL_NO_RC4` and OpenSSL 3.x that can't load the legacy provider.
+In those cases, `rc4.NewCipher()` will fall back to standard Go crypto.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The cipher is generated using [EVP_CIPHER_CTX_new] and [EVP_CipherInit_ex] with the cipher type [EVP_rc4].
+
+The rc4.Cipher methods are implemented as follows:
+
+- `Reset` using [EVP_CIPHER_CTX_free].
+- `XORKeyStream` using [EVP_EncryptUpdate].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The cipher is generated using [BCryptGenerateSymmetricKey] using the `BCRYPT_RC4_ALGORITHM` mode.
+
+The rc4.Cipher methods are implemented as follows:
+
+- `Reset` using [BCryptDestroyKey].
+- `XORKeyStream` using [BCryptEncrypt].
+
+</details>
+
+### [crypto/sha1](https://pkg.go.dev/crypto/sha1)
+
+Package sha1 implements the SHA-1 hash algorithm as defined in RFC 3174.
+
+SHA-1 is an approved FIPS 140-2 hash algorithm although it is cryptographically broken and should not be used for secure applications.
+
+#### func [New](https://pkg.go.dev/crypto/sha1#New)
+
+```go
+func sha1.New() hash.Hash
+```
+
+New returns a new hash.Hash computing the SHA1 checksum.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha1].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA1_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+#### func [Sum](https://pkg.go.dev/crypto/sha1#Sum)
+
+```go
+func sha1.Sum(data []byte) [20]byte
+```
+
+Sum returns the SHA-1 checksum of the data.
+It internally uses sha1.New() to compute the checksum.
+
+### [crypto/sha256](https://pkg.go.dev/crypto/sha256)
+
+Package sha256 implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.
+
+#### func [New](https://pkg.go.dev/crypto/sha256#New)
+
+```go
+func sha256.New() hash.Hash
+```
+
+New returns a new hash.Hash computing the SHA256 checksum.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha256].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA256_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+#### func [New224](https://pkg.go.dev/crypto/sha256#New224)
+
+```go
+func sha256.New224() hash.Hash
+```
+
+New224 returns a new hash.Hash computing the SHA224 checksum.
+
+**Requirements**
+
+- The CNG backend does not implement this function.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha24].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+#### func [Sum224](https://pkg.go.dev/crypto/sha256#Sum224)
+
+```go
+func sha256.Sum224(data []byte) [24]byte
+```
+
+Sum224 returns the SHA224 checksum of the data.
+It internally uses sha224.New() to compute the checksum.
+
+**Requirements**
+
+- The CNG backend does not implement this function.
+
+#### func [Sum256](https://pkg.go.dev/crypto/sha256#Sum256)
+
+```go
+func sha256.Sum256(data []byte) [32]byte
+```
+
+Sum256 returns the SHA256 checksum of the data.
+It internally uses sha256.New() to compute the checksum.
+
+### [crypto/sha512](https://pkg.go.dev/crypto/sha512)
+
+Package sha512 implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
+
+#### func [New](https://pkg.go.dev/crypto/sha512#New)
+
+```go
+func sha512.New() hash.Hash
+```
+
+New returns a new hash.Hash computing the SHA-512 checksum.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha512].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA512_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+#### func [New384](https://pkg.go.dev/crypto/sha512#New384)
+
+```go
+func sha512.New384() hash.Hash
+```
+
+New384 returns a new hash.Hash computing the SHA-384 checksum.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+The hash is generated using [EVP_MD_CTX_new] and [EVP_DigestInit_ex] with the algorithm [EVP_sha384].
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [EVP_DigestUpdate].
+- `Sum` using [EVP_DigestFinal].
+- `Reset` using [EVP_DigestInit].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+The hash is generated using [BCryptCreateHash] with the [algorithm identifier] `BCRYPT_SHA384_ALGORITHM`.
+
+The hash.Hash methods are implemented as follows:
+
+- `Write` using [BCryptHashData].
+- `Sum` using [BCryptFinishHash].
+- `Reset` using [BCryptDestroyHash] and [BCryptCreateHash].
+
+</details>
+
+#### func [New512_224](https://pkg.go.dev/crypto/sha512#New512_224)
+
+sha512.New512_224 is not implemented by any backend.
+
+#### func [New512_256](https://pkg.go.dev/crypto/sha512#New512_256)
+
+sha512.New512_256 is not implemented by any backend.
+
+#### func [Sum384](https://pkg.go.dev/crypto/sha512#Sum384)
+
+```go
+func sha512.Sum384(data []byte) [48]byte
+```
+
+Sum384 returns the SHA384 checksum of the data.
+It internally uses sha512.New384() to compute the checksum.
+
+#### func [Sum512](https://pkg.go.dev/crypto/sha512#Sum512)
+
+```go
+func sha512.Sum512(data []byte) [64]byte
+```
+
+Sum512 returns the SHA512 checksum of the data.
+It internally uses sha512.New() to compute the checksum.
+
+#### func [Sum512_224](https://pkg.go.dev/crypto/sha512#Sum512_224)
+
+sha512.Sum512_224 is not implemented by any backend.
+
+#### func [Sum512_256](https://pkg.go.dev/crypto/sha512#Sum512_256)
+
+sha512.Sum512_256 is not implemented by any backend.
+
+### [crypto/rsa](https://pkg.go.dev/crypto/rsa)
+
+Package rsa implements RSA encryption as specified in PKCS #1 and RFC 8017.
+
+#### func [DecryptOAEP](https://pkg.go.dev/crypto/rsa#DecryptOAEP)
+
+```go
+func rsa.DecryptOAEP(h hash.Hash, rand io.Reader, priv *rsa.PrivateKey, ciphertext []byte, label []byte) ([]byte, error)
+```
+
+DecryptOAEP decrypts ciphertext using RSA-OAEP.
+
+**Requirements**
+
+- `h` must be the result of one of the following functions: sha1.New(), sha224.New(), sha256.New(), sha384.New(), or sha512.New().
+- The CNG backend does not support sha224.New().
+- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_OAEP_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`ciphertext` is decrypted using [BCryptDecrypt] with [BCRYPT_OAEP_PADDING_INFO] padding information and `BCRYPT_PAD_OAEP` pad mode.
+
+</details>
+
+#### func [DecryptPKCS1v15](https://pkg.go.dev/crypto/rsa#DecryptPKCS1v15)
+
+```go
+func rsa.DecryptPKCS1v15(rand io.Reader, priv *rsa.PrivateKey, ciphertext []byte) ([]byte, error)
+```
+
+DecryptPKCS1v15 decrypts a plaintext using RSA and the padding scheme from PKCS #1 v1.5.
+
+**Requirements**
+
+- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
+- `priv.Primes` length must be 2 when using the CNG backend.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`ciphertext` is decrypted using [BCryptDecrypt] with `BCRYPT_PAD_PKCS1` pad mode.
+
+</details>
+
+#### func [DecryptPKCS1v15SessionKey](https://pkg.go.dev/crypto/rsa#DecryptPKCS1v15SessionKey)
+
+```go
+func rsa.DecryptPKCS1v15SessionKey(rand io.Reader, priv *PrivateKey, ciphertext []byte, key []byte) error
+```
+
+DecryptPKCS1v15SessionKey decrypts a session key using RSA and the padding scheme from PKCS #1 v1.5.
+
+**Requirements**
+
+- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
+- `priv.Primes` length must be 2 when using the CNG backend.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`ciphertext` is decrypted using [EVP_PKEY_decrypt] with `RSA_PKCS1_PADDING` pad mode and copied into `key`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`ciphertext` is decrypted using [BCryptDecrypt] with `BCRYPT_PAD_PKCS1` pad mode and copied into `key`.
+
+</details>
+
+#### func [EncryptPKCS1v15](https://pkg.go.dev/crypto/rsa#EncryptPKCS1v15)
+
+```go
+func rsa.EncryptPKCS1v15(rand io.Reader, pub *rsa.PublicKey, msg []byte) ([]byte, error)
+```
+
+**Requirements**
+
+- `rand` must be boring.RandReader, else SignPSS will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`msg` is encrypted using [EVP_PKEY_encrypt] with `RSA_PKCS1_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`msg` is encrypted using [BCryptEncrypt] with `BCRYPT_PAD_PKCS1` pad mode.
+
+</details>
+
+#### func [SignPKCS1v15](https://pkg.go.dev/crypto/rsa#SignPKCS1v15)
+
+```go
+func rsa.SignPKCS1v15(rand io.Reader, priv *rsa.PrivateKey, hash crypto.Hash, hashed []byte) ([]byte, error)
+```
+
+SignPKCS1v15 calculates the signature of hashed using RSASSA-PKCS1-V1_5-SIGN from RSA PKCS #1 v1.5.
+
+**Requirements**
+
+- `rand` is not used. Blinding, if implemented, is delegated to crypto backend.
+- `priv.Primes` length must be 2 when using the CNG backend.
+- `hash` must be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPKCS1v15 will fail.
+- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
+- `hashed` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`hashed` is signed using [EVP_PKEY_sign] with `RSA_PKCS1_PADDING`.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`hashed` is signed using [BCryptSignHash] with [BCRYPT_PKCS1_PADDING_INFO] padding information and `BCRYPT_PAD_PKCS1` pad mode.
+
+</details>
+
+#### func [SignPSS](https://pkg.go.dev/crypto/rsa#SignPSS)
+
+```go
+func rsa.SignPSS(rand io.Reader, priv *rsa.PrivateKey, hash crypto.Hash, digest []byte, opts *PSSOptions) ([]byte, error)
+```
+
+SignPSS calculates the signature of digest using PSS.
+
+**Requirements**
+
+- `rand` must be boring.RandReader, else SignPSS will panic. `crypto/rand.Reader` normally meets this invariant, as it is assigned to boring.RandReader in the crypto/rand init function.
+- `priv.Primes` length must be 2 when using the CNG backend.
+- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPSS will fail.
+- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
+- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+- `opts` can be nil.
+- `opts.SaltLength` can either be a number of bytes, or one of the following constants: rsa.PSSSaltLengthAuto and rsa.PSSSaltLengthEqualsHash.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`digest` is signed using [EVP_PKEY_sign] with `RSA_PKCS1_PSS_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`digest` is signed using [BCryptSignHash] with [BCRYPT_PSS_PADDING_INFO] padding information and `BCRYPT_PAD_PSS` pad mode.
+
+</details>
+
+#### func [VerifyPKCS1v15](https://pkg.go.dev/crypto/rsa#VerifyPKCS1v15)
+
+```go
+func rsa.VerifyPKCS1v15(pub *rsa.PublicKey, hash crypto.Hash, hashed []byte, sig []byte) error
+```
+
+VerifyPKCS1v15 verifies an RSA PKCS #1 v1.5 signature.
+
+**Requirements**
+
+- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else SignPSS will fail.
+- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
+- `hashed` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`sig` is verified using [EVP_PKEY_verify] with `RSA_PKCS1_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`sig` is verified using [BCryptVerifySignature] with [BCRYPT_PKCS1_PADDING_INFO] padding information and `BCRYPT_PAD_PKCS1` pad mode.
+
+</details>
+
+#### func [VerifyPSS](https://pkg.go.dev/crypto/rsa#VerifyPSS)
+
+```go
+func rsa.VerifyPSS(pub *rsa.PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts *PSSOptions) error
+```
+
+VerifyPSS verifies a PSS signature.
+
+**Requirements**
+
+- `hash` can be one of the following values: crypto.MD5, crypto.MD5SHA1, crypto.SHA1, crypto.SHA224, crypto.SHA256, rypto.SHA384, or crypto.SHA512. Else VerifyPSS will fail.
+- The CNG backend does not support crypto.MD5SHA1 nor crypto.SHA224.
+- `digest` must be the result of hashing a message using a FIPS compliant hashing algorithm.
+- `opts` can be nil.
+- `opts.SaltLength` can either be a number of bytes, or one of the following constants: rsa.PSSSaltLengthAuto and rsa.PSSSaltLengthEqualsHash.
+- The CNG backend does not support nil `opts` nor rsa.PSSSaltLengthAuto.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`sig` is verified using using [EVP_PKEY_verify] with `RSA_PKCS1_PSS_PADDING` pad mode.
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`sig` is verified using [BCryptVerifySignature] with [PSS_PADDING_INFO] padding information and `BCRYPT_PAD_PSS` pad mode.
+
+</details>
+
+#### func [GenerateKey](https://pkg.go.dev/crypto/rsa#GenerateKey)
+
+```go
+func rsa.GenerateKey(rand io.Reader, bits int) (priv *rsa.PrivateKey, err error)
+```
+
+GenerateKey generates a public and private key pair.
+
+**Requirements**
+
+- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+- `bits` must be either 2048 or 3072.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`priv` is a wrapper around [EVP_PKEY] generated using [EVP_PKEY_keygen].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`priv` is generated using [BCryptGenerateKeyPair] with the [algorithm identifier] `BCRYPT_RSA_ALGORITHM`.
+
+</details>
+
+#### func [GenerateMultiPrimeKey](https://pkg.go.dev/crypto/rsa#GenerateMultiPrimeKey)
+
+```go
+func rsa.GenerateMultiPrimeKey(rand io.Reader, nprimes int, bits int) (priv *rsa.PrivateKey, err error)
+```
+
+GenerateMultiPrimeKey generates a multi-prime RSA keypair of the given bit size.
+
+**Requirements**
+
+- `rand` must be boring.RandReader. `crypto/rand.Reader` normally meets this invariant as it is assigned to boring.RandReader in the crypto/rand init function.
+- `nprimes` must be 2. 
+- `bits` must be either 2048 or 3072.
+
+**Implementation**
+
+<details><summary>OpenSSL (click for details)</summary>
+
+`priv` is a wrapper around [EVP_PKEY] generated using [EVP_PKEY_keygen].
+
+</details>
+
+<details><summary>CNG (click for details)</summary>
+
+`priv` is generated using [BCryptGenerateKeyPair] with the [algorithm identifier] `BCRYPT_RSA_ALGORITHM`.
+
+</details>
+
+#### func [PrivateKey.Decrypt](https://pkg.go.dev/crypto/rsa#PrivateKey.Decrypt)
+
+```go
+func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.DecrypterOpts) (plaintext []byte, err error)
+```
+
+Decrypt decrypts `ciphertext` with `priv`.
+
+The decrypt function depends on `opts`:
+
+- If `opts` is nil, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
+- If `opts` type is `*rsa.OAEPOptions`, it calls [rsa.DecryptOAEP](#func-decryptoaep)`(opts.Hash.New(), rand, priv, ciphertext, opts.Label)`.
+- If `opts` type is `*rsa.OAEPOptions` and `ops.Hash` is different than `opts.MGFHash`, it falls back to standard Go crypto.
+- If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen > 0`, it calls [rsa.DecryptPKCS1v15SessionKey](#func-decryptpkcs1v15sessionkey)`(rand, priv, ciphertext, plaintext)` with a random `plaintext`.
+- If `opts` type is `*rsa.PKCS1v15DecryptOptions` and `opts.SessionKeyLen == 0`, it calls [rsa.DecryptPKCS1v15](#func-decryptpkcs1v15)`(rand, priv, ciphertext)`.
+- Else it returns an error.
+
+Each case may impose additional parameter requirements. After determining which case applies, check the linked function to find the additional restrictions.
+
+#### func [PrivateKey.Sign](https://pkg.go.dev/crypto/rsa#PrivateKey.Sign)
+
+```go
+func (priv *rsa.PrivateKey) Sign(rand io.Reader, digest []byte, opts crypto.SignerOpts) ([]byte, error)
+```
+
+Sign signs `digest` with `priv`.
+
+The sign function depends on `opts`:
+
+- If `opts` type is `*rsa.PSSOptions`, it calls [rsa.SignPSS](#func-signpss)`(rand, priv, pssOpts.Hash, digest, opts)`
+- Else it calls [rsa.SignPKCS1v15](#func-signpkcs1v15)`(rand, priv, opts.HashFunc(), digest)`.
+
+Each case may impose additional parameter requirements. After determining which case applies, check the linked function to find the additional restrictions.
+
+### [crypto/subtle](https://pkg.go.dev/crypto/subtle)
+
+Does not contain crypto primitives, out of FIPS scope.
+
+### [crypto/tls](https://pkg.go.dev/crypto/tls)
+
+Package tls partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
+
+Package tls will automatically use FIPS compliant primitives implemented in other crypto packages.
+
+Since Go 1.22, the Microsoft build of Go runtime automatically enforces that tls only uses FIPS-approved settings when running in FIPS mode.
+Prior to Go 1.22, a program using tls must import the `crypto/tls/fipsonly` package to be compliant with these restrictions.
+
+When using TLS in FIPS-only mode the TLS handshake has the following restrictions:
+
+- TLS versions:
+  - `tls.VersionTLS12`
+  - `tls.VersionTLS13`
+- ECDSA elliptic curves:
+  - `tls.CurveP256`
+  - `tls.CurveP384`
+  - `tls.CurveP521`
+- Cipher suites for TLS 1.2:
+  - `tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`
+  - `tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`
+  - `tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`
+  - `tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`
+- Cipher suites for TLS 1.3:
+  - `tls.TLS_AES_128_GCM_SHA256`
+  - `tls.TLS_AES_256_GCM_SHA384`
+- x509 certificate public key:
+  - `rsa.PublicKey` with a bit length of 2048 or 3072. Bit length of 4096 is still not supported, see [this issue](https://github.com/golang/go/issues/41147) for more info.
+  - `ecdsa.PublicKey`  with a supported elliptic curve.
+- Signature algorithms:
+  - `tls.PSSWithSHA256`
+  - `tls.PSSWithSHA384`
+  - `tls.PSSWithSHA512`
+  - `tls.PKCS1WithSHA256`
+  - `tls.ECDSAWithP256AndSHA256`
+  - `tls.PKCS1WithSHA384`
+  - `tls.ECDSAWithP384AndSHA384`
+  - `tls.PKCS1WithSHA512`
+  - `tls.ECDSAWithP521AndSHA512`
+
+[EVP_EncryptUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_EncryptUpdate.html
+[EVP_DecryptUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_DecryptUpdate.html
+[RAND_bytes]: https://www.openssl.org/docs/man3.0/man3/RAND_bytes.html
+[EVP_PKEY]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY.html
+[EVP_PKEY_new]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_new.html
+[EVP_PKEY_new_raw_private_key]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_new_raw_private_key.html
+[EVP_PKEY_keygen]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_keygen.html
+[EVP_PKEY_sign]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_sign.html
+[EVP_PKEY_verify]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_verify.html
+[EVP_PKEY_encrypt]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_encrypt.html
+[EVP_PKEY_decrypt]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_decrypt.html
+[EVP_PKEY_derive]: https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_derive.html
+[EVP_MD_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_MD_CTX_new.html
+[EVP_DigestUpdate]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestUpdate.html
+[EVP_DigestFinal]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestFinal.html
+[EVP_DigestInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestInit.html
+[EVP_DigestInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestInit_ex.html
+[EVP_DigestSign]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSign.html
+[EVP_DigestVerify]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestVerify.html
+[EVP_DigestSign]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSign.html
+[EVP_DigestSignInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestSignInit.html
+[EVP_DigestVerifyInit]: https://www.openssl.org/docs/man3.0/man3/EVP_DigestVerifyInit.html
+[EVP_EncryptFinal_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_EncryptFinal_ex.html
+[EVP_DecryptFinal_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_DecryptFinal_ex.html
+[EVP_CIPHER_CTX_set_padding]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_set_padding.html
+[EVP_aes_128_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_ecb.html
+[EVP_aes_192_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_ecb.html
+[EVP_aes_256_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_ecb.html
+[EVP_aes_128_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_gcm.html
+[EVP_aes_192_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_gcm.html
+[EVP_aes_256_gcm]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_gcm.html
+[EVP_aes_128_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_ctr.html
+[EVP_aes_192_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_ctr.html
+[EVP_aes_256_ctr]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_ctr.html
+[EVP_aes_128_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_128_cbc.html
+[EVP_aes_192_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_192_cbc.html
+[EVP_des_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ecb.html
+[EVP_des_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_des_cbc.html
+[EVP_des_ede3_ecb]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ede3_ecb.html
+[EVP_des_ede3_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_des_ede3_cbc.html
+[EVP_aes_256_cbc]: https://www.openssl.org/docs/man3.0/man3/EVP_aes_256_cbc.html
+[EVP_rc4]: https://www.openssl.org/docs/man3.0/man3/EVP_rc4.html
+[EVP_md5]: https://www.openssl.org/docs/man3.0/man3/EVP_md5.html
+[EVP_sha1]: https://www.openssl.org/docs/man3.0/man3/EVP_sha1.html
+[EVP_sha224]: https://www.openssl.org/docs/man3.0/man3/EVP_sha224.html
+[EVP_sha256]: https://www.openssl.org/docs/man3.0/man3/EVP_sha256.html
+[EVP_sha384]: https://www.openssl.org/docs/man3.0/man3/EVP_sha384.html
+[EVP_sha512]: https://www.openssl.org/docs/man3.0/man3/EVP_sha512.html
+[HMAC_CTX_new]: https://www.openssl.org/docs/man3.0/man3/HMAC_CTX_new.html
+[HMAC_Init_ex]: https://www.openssl.org/docs/man3.0/man3/HMAC_Init_ex.html
+[HMAC_Update]: https://www.openssl.org/docs/man3.0/man3/HMAC_Update.html
+[HMAC_Final]: https://www.openssl.org/docs/man3.0/man3/HMAC_Final.html
+[EVP_MAC_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_CTX_new.html
+[EVP_MAC_init]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_init.html
+[EVP_MAC_update]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_update.html
+[EVP_MAC_final]: https://www.openssl.org/docs/man3.0/man3/EVP_MAC_final.html
+[EVP_CIPHER_CTX_new]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_new.html
+[EVP_CipherInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_CipherInit_ex.html
+[EVP_CIPHER_CTX_free]: https://www.openssl.org/docs/man3.0/man3/EVP_CIPHER_CTX_free.html
+
+[algorithm identifier]: https://docs.microsoft.com/en-us/windows/win32/seccng/cng-algorithm-identifiers
+[named elliptic curve]: https://docs.microsoft.com/en-us/windows/win32/seccng/cng-named-elliptic-curves
+[BCryptGenRandom]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgenrandom
+[BCryptGenerateSymmetricKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgeneratesymmetrickey
+[BCryptGenerateKeyPair]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptgeneratekeypair
+[BCryptImportKeyPair]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptimportkeypair
+[BCryptExportKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptexportkey
+[BCryptEncrypt]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptencrypt
+[BCryptDecrypt]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptdecrypt
+[BCryptSignHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptsignhash
+[BCryptVerifySignature]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptverifysignature
+[BCryptCreateHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptcreatehash
+[BCryptHashData]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcrypthashdata
+[BCryptFinishHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptfinishhash
+[BCryptDestroyHash]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptdestroyhash
+[BCRYPT_OAEP_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_oaep_padding_info
+[BCRYPT_PKCS1_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_pkcs1_padding_info
+[BCRYPT_PSS_PADDING_INFO]: https://docs.microsoft.com/en-us/windows/win32/api/Bcrypt/ns-bcrypt-bcrypt_pss_padding_info
+[BCryptDeriveKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptderivekey
 [BCryptDestroyKey]: https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptdestroykey
\ No newline at end of file
diff --git a/eng/signing/.gitignore b/eng/signing/.gitignore
index 46f843c4821..e78bb423bb4 100644
--- a/eng/signing/.gitignore
+++ b/eng/signing/.gitignore
@@ -1,13 +1,13 @@
-# Copyright (c) Microsoft Corporation.
-# Use of this source code is governed by a BSD-style
-# license that can be found in the LICENSE file.
-
-# Ignore results of reproducing a signing job locally.
-*.binlog
-bin/
-obj/
-diag/
-signing-log/
-signing-temp/
-tosign/
-signed/
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Ignore results of reproducing a signing job locally.
+*.binlog
+bin/
+obj/
+diag/
+signing-log/
+signing-temp/
+tosign/
+signed/

From d06bfbec6f7e2bbad3c8cddac490a711ea6fcd6b Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Wed, 25 Feb 2026 09:59:04 +0000
Subject: [PATCH 740/887] Enable GODEBUG=fips140=only with systemcrypto
 backends (#2149)

* Enable GODEBUG=fips140=only with systemcrypto backends

* back out darwin CTR changes

* remove FIPSApproved and reimplement CBC FIPS

* fix SHA512_* checks

* fix sha512 test allocations

* review comments

* re-vendor backends

* skip CTR on windows

* explicitly state which curves are supported on CNG

* docs review feedback
---
 eng/doc/fips/README.md                        |  12 +-
 .../0001-Vendor-external-dependencies.patch   | 482 +++++++++++++++---
 ...03-Implement-crypto-internal-backend.patch |  56 +-
 patches/0004-Use-crypto-backends.patch        | 429 ++++++++++++++--
 4 files changed, 850 insertions(+), 129 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index c448dcb7daa..c2bcd4d6e70 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -81,6 +81,7 @@ The following table summarizes common configurations and how suitable each one i
 | Default | Default | Compliant | Can be used to create a compliant app. FIPS mode is determined by system-wide configuration. Make sure you are familiar with your platform's system-wide FIPS switch, described in [Usage: Runtime](#usage-runtime). |
 | `GOEXPERIMENT=systemcrypto` | Default | Compliant | Can be used to create a compliant app. The `GOEXPERIMENT` setting is redundant because `systemcrypto` is enabled by default. |
 | Default | `GODEBUG=fips140=on` or `GOFIPS=1` | Compliant | Can be used to create a compliant app. Depending on platform, the app enables FIPS mode, ensures it is already enabled, or doesn't do any additional checks. The app panics if there is a problem. See [Usage: Runtime](#usage-runtime). |
+| Default | `GODEBUG=fips140=only`, Go 1.27+ | Compliant | Same as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used. Note: if the backend does not support a particular algorithm, the call panics rather than falling back to Go standard library crypto. See [Cross-Platform Cryptography](../CrossPlatformCryptography.md) to check algorithm support per platform, and [Usage: Runtime](#usage-runtime). |
 | Default | `GO_OPENSSL_VERSION_OVERRIDE=1.1.1k-fips` | Compliant | Can be used to create a compliant app. On Linux, this environment variable causes the runtime to load `libcrypto.so.1.1.1k-fips` instead of using the automatic search behavior. This environment variable has no effect on Windows or macOS. |
 | `-tags=requirefips` | Default | Compliant | Can be used to create a compliant app. The behavior is the same as `GODEBUG=fips140=on` and `GOFIPS=1`, but no runtime configuration is necessary. See [the `requirefips` section](#build-option-to-require-fips-mode) for more information on when this "locked-in" approach may be useful rather than the flexible approach. |
 | `MS_GO_NOSYSTEMCRYPTO=1` or `GOEXPERIMENT=nosystemcrypto` | Default | Not compliant | Crypto usage is not FIPS compliant. |
@@ -163,10 +164,14 @@ If FIPS mode preference is Enabled ✅, then:
 The Go runtime FIPS mode may be important to distinguish its FIPS mode from the system FIPS mode or crypto engine's FIPS mode.
 The [Go Runtime FIPS mode](#go-runtime-fips-mode) section describes this in more detail.
 
-There is also `GODEBUG=fips140=only`.
+Since Go 1.27, there is also `GODEBUG=fips140=only`.
 It acts as `GODEBUG=fips140=on`, but also makes a best effort to panic if a non-FIPS 140-3 compliant algorithm is used.
-The `only` setting is not yet supported in the Microsoft build of Go.
-(See [microsoft/go#1656 Support `GODEBUG=fips140=only`](https://github.com/microsoft/go/issues/1656).)
+
+> [!NOTE]
+> When `fips140=only` is set with a system crypto backend, the enforcement depends on the backend's algorithm support.
+> If the backend does not support a particular FIPS-approved algorithm (e.g. SHA-512/224 on macOS, or CTR mode on macOS), a call to that algorithm will panic rather than falling back to the Go standard library implementation.
+> This means that `fips140=only` may restrict the set of usable algorithms compared to `fips140=on`, depending on the platform.
+> See [Cross-Platform Cryptography](../CrossPlatformCryptography.md) to check which algorithms are supported on each platform.
 
 > [!NOTE]
 > The `GODEBUG`, `GOFIPS`, and `GOLANG_FIPS` options described in this section have no effect at build time, only runtime. When the Go program starts up, it examines its environment variables and other platform-specific configurations. This is normally the desired behavior. See [`requirefips`](#build-option-to-require-fips-mode) for info about an optional build tag that may affect FIPS mode.
@@ -418,6 +423,7 @@ This list of major changes is intended for quick reference and for access to his
 
 ### Go 1.27 (Aug 2026)
 
+- Support for `GODEBUG=fips140=only` has been added. It acts as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used.
 - The per-platform GOEXPERIMENTs (`opensslcrypto`, `cngcrypto`, `darwincrypto`) have been removed.
   - The `systemcrypto` GOEXPERIMENT is now enabled by default on all platforms where it's supported (Windows, Linux and macOS). To disable it, set `GOEXPERIMENT=nosystemcrypto`.
   - Using any of the removed experiments will result in a build error.
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 2b4156f9af3..c76de32cb4a 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -41,7 +41,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 +
- .../github.com/golang-fips/openssl/v2/aes.go  |  145 +
+ .../github.com/golang-fips/openssl/v2/aes.go  |  157 ++
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../openssl/v2/chacha20poly1305.go            |  149 +
@@ -55,7 +55,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/ecdsa.go           |  222 ++
  .../golang-fips/openssl/v2/ed25519.go         |  210 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  620 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  502 ++++
+ .../github.com/golang-fips/openssl/v2/hash.go |  518 ++++
  .../golang-fips/openssl/v2/hashclone.go       |   14 +
  .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
  .../github.com/golang-fips/openssl/v2/hkdf.go |  455 ++++
@@ -75,8 +75,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
  .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
  .../openssl/v2/internal/fakecgo/fakecgo.lock  |    3 +
+ .../openssl/v2/internal/fakecgo/freebsd.go    |   27 +
  .../openssl/v2/internal/fakecgo/generate.go   |    3 +
  .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
+ .../openssl/v2/internal/fakecgo/go_freebsd.go |  100 +
  .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
  .../openssl/v2/internal/fakecgo/go_linux.go   |  100 +
  .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
@@ -84,6 +86,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
  .../openssl/v2/internal/fakecgo/libcgo.go     |   39 +
  .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
+ .../v2/internal/fakecgo/libcgo_freebsd.go     |   20 +
  .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
  .../openssl/v2/internal/fakecgo/linux.go      |   34 +
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
@@ -97,8 +100,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_s390x.s   |  163 ++
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
+ .../v2/internal/fakecgo/zsymbols_freebsd.go   |   48 +
  .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
+ .../internal/fakecgo/ztrampolines_freebsd.s   |   16 +
  .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
  .../internal/fakecgo/ztrampolines_linux_386.s |  110 +
  .../fakecgo/ztrampolines_linux_amd64.s        |  102 +
@@ -126,6 +131,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/shims.h          |  434 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
+ .../v2/internal/ossl/syscall_nocgo_freebsd.go |    5 +
  .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
  .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
@@ -226,7 +232,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/xsyscall/xsyscall.go             |    6 +
  .../go-crypto-darwin/internal/xsyscall/zdl.s  |   56 +
  .../internal/xsyscall/zdl_nocgo.go            |   48 +
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  144 +
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  152 ++
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../xcrypto/chacha20poly1305.go               |   88 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
@@ -237,7 +243,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
  .../microsoft/go-crypto-darwin/xcrypto/evp.go |  339 +++
  .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
- .../go-crypto-darwin/xcrypto/hash.go          |  320 +++
+ .../go-crypto-darwin/xcrypto/hash.go          |  335 +++
  .../go-crypto-darwin/xcrypto/hashclone.go     |   17 +
  .../xcrypto/hashclone_go125.go                |   12 +
  .../go-crypto-darwin/xcrypto/hkdf.go          |  103 +
@@ -248,7 +254,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  208 ++
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
- .../microsoft/go-crypto-winnative/cng/aes.go  |  427 +++
+ .../microsoft/go-crypto-winnative/cng/aes.go  |  435 +++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
  .../microsoft/go-crypto-winnative/cng/big.go  |   30 +
  .../cng/chacha20poly1305.go                   |  119 +
@@ -258,7 +264,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  327 +++
+ .../microsoft/go-crypto-winnative/cng/hash.go |  342 +++
  .../go-crypto-winnative/cng/hashclone.go      |   18 +
  .../cng/hashclone_go125.go                    |   13 +
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  133 +
@@ -277,7 +283,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 269 files changed, 34097 insertions(+), 7 deletions(-)
+ 275 files changed, 34387 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -338,8 +344,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
@@ -347,6 +355,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
@@ -360,8 +369,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
@@ -389,6 +400,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
@@ -2213,7 +2225,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..15ab996b3e47e5 100644
+index d6c515017a7009..348650059a4497 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2222,21 +2234,21 @@ index d6c515017a7009..15ab996b3e47e5 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3
++	github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..11a1b9af830278 100644
+index 2223d2a7c231c1..55a77ae199a9af 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4 h1:2kbDvyeg2zT1dsjfp6I445SCP4ryK88vnIODU+x0W3o=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357 h1:ILqgGD8SGjjtSweSBanrXyX8Aco33yFSJEqsnJgmXHU=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9 h1:joliMChkkfHV3vAPKzu9kefdw0K+d89A8r9gTm3MFS4=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35 h1:SCC2CxzMO45+PyZ4wVN/pUqjjH6BSznbMuSDmIBoV6w=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3 h1:yV7XVN+idaUMe3FrnP72MJt6swY7inyE/a5lusmVuuA=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb h1:i7oTrN4NEokm433J/M8EfxiSm/W0feEPtLZ62YzePtQ=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
@@ -2478,10 +2490,10 @@ index 00000000000000..0a6d0d0ef2c0c6
 +This project adopts the Go code of conduct: https://go.dev/conduct.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
 new file mode 100644
-index 00000000000000..654566d2bff4e0
+index 00000000000000..8d5d44db2ba360
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
-@@ -0,0 +1,145 @@
+@@ -0,0 +1,157 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2574,14 +2586,26 @@ index 00000000000000..654566d2bff4e0
 +	return c.cipher.newCBC(iv, cipherOpEncrypt)
 +}
 +
++func (c cipherWithCBC) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpEncrypt)
++}
++
 +func (c cipherWithCBC) NewCBCDecrypter(iv []byte) cipher.BlockMode {
 +	return c.cipher.newCBC(iv, cipherOpDecrypt)
 +}
 +
++func (c cipherWithCBC) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpDecrypt)
++}
++
 +func (c cipherWithCTR) NewCTR(iv []byte) cipher.Stream {
 +	return c.cipher.newCTR(iv)
 +}
 +
++func (c cipherWithCTR) NewFIPSCTR(iv []byte) cipher.Stream {
++	return c.cipher.newCTR(iv)
++}
++
 +func (c cipherWithGCM) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
 +	return c.cipher.newGCMChecked(nonceSize, tagSize)
 +}
@@ -5858,10 +5882,10 @@ index 00000000000000..4c70cd75a1a553
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..eb0a84acf2232f
+index 00000000000000..a48a303bdc8147
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,502 @@
+@@ -0,0 +1,518 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -6089,6 +6113,22 @@ index 00000000000000..eb0a84acf2232f
 +var _ hash.Hash = (*Hash)(nil)
 +var _ HashCloner = (*Hash)(nil)
 +
++// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
++func FIPSApprovedHash(h hash.Hash) bool {
++	xh, ok := h.(*Hash)
++	if !ok {
++		return false
++	}
++	switch xh.alg.ch {
++	case crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512,
++		crypto.SHA512_224, crypto.SHA512_256,
++		crypto.SHA3_224, crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
++		return true
++	default:
++		return false
++	}
++}
++
 +// hashBufSize is the size of the buffer used for hashing.
 +// 256 bytes is a reasonable compromise for general purpose use,
 +// and the resulting evpHash size is still similar to the
@@ -8026,7 +8066,7 @@ index 00000000000000..b64466501dee38
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
 new file mode 100644
-index 00000000000000..5f70632fa7cc33
+index 00000000000000..f29e690cc15b3a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
 @@ -0,0 +1,93 @@
@@ -8034,7 +8074,7 @@ index 00000000000000..5f70632fa7cc33
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8125,14 +8165,14 @@ index 00000000000000..5f70632fa7cc33
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
 new file mode 100644
-index 00000000000000..7927deb2785263
+index 00000000000000..0ff5482714439b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
 @@ -0,0 +1,29 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8167,6 +8207,39 @@ index 00000000000000..4e9bbeb5c4f3e3
 +{
 +  "commit_hash": "585a4c527464bb6ef91b22aef08d55219c8fab09"
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
+new file mode 100644
+index 00000000000000..bb73a709e69188
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
+@@ -0,0 +1,27 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build freebsd && !cgo
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++// Supply environ and __progname, because we don't
++// link against the standard FreeBSD crt0.o and the
++// libc dynamic library needs them.
++
++// Note: when building with cross-compiling or CGO_ENABLED=0, add
++// the following argument to `go` so that these symbols are defined by
++// making fakecgo the Cgo.
++//   -gcflags="github.com/ebitengine/purego/internal/fakecgo=-std"
++
++//go:linkname _environ environ
++//go:linkname _progname __progname
++
++//go:cgo_export_dynamic environ
++//go:cgo_export_dynamic __progname
++
++var _environ uintptr
++var _progname uintptr
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
 new file mode 100644
 index 00000000000000..ca8d5f843f8421
@@ -8270,16 +8343,122 @@ index 00000000000000..d0868f0f790351
 +	//	init_working_dir();
 +	//#endif
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
+new file mode 100644
+index 00000000000000..a3ba6bc8228757
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
+@@ -0,0 +1,100 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	// fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
++
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++	var attr *pthread_attr_t
++
++	/* The memory sanitizer distributed with versions of clang
++	   before 3.8 has a bug: if you call mmap before malloc, mmap
++	   may return an address that is later overwritten by the msan
++	   library.  Avoid this problem by forcing a call to malloc
++	   here, before we ever call malloc.
++
++	   This is only required for the memory sanitizer, so it's
++	   unfortunate that we always run it.  It should be possible
++	   to remove this when we no longer care about versions of
++	   clang before 3.8.  The test for this is
++	   misc/cgo/testsanitizers.
++
++	   GCC works hard to eliminate a seemingly unnecessary call to
++	   malloc, so we actually use the memory we allocate.  */
++
++	setg_func = setg
++	attr = (*pthread_attr_t)(malloc(unsafe.Sizeof(*attr)))
++	if attr == nil {
++		println("fakecgo: malloc failed")
++		abort()
++	}
++	pthread_attr_init(attr)
++	pthread_attr_getstacksize(attr, &size)
++	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
++	// but this should be OK since we are taking the address of the first variable in this function.
++	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
++	pthread_attr_destroy(attr)
++	free(unsafe.Pointer(attr))
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
 new file mode 100644
-index 00000000000000..0eadc51daecc75
+index 00000000000000..e5a66f39d4f3f5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
 @@ -0,0 +1,72 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8456,14 +8635,14 @@ index 00000000000000..9f380c1b431807
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
 new file mode 100644
-index 00000000000000..6c2f981d730980
+index 00000000000000..e42d84f0b75ea6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
 @@ -0,0 +1,18 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8480,14 +8659,14 @@ index 00000000000000..6c2f981d730980
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
 new file mode 100644
-index 00000000000000..8a71c5a558610a
+index 00000000000000..ff190007e8b6c0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
 @@ -0,0 +1,38 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8524,7 +8703,7 @@ index 00000000000000..8a71c5a558610a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
 new file mode 100644
-index 00000000000000..ba142ec481d026
+index 00000000000000..28af41cc640724
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
 @@ -0,0 +1,19 @@
@@ -8532,7 +8711,7 @@ index 00000000000000..ba142ec481d026
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +// The runtime package contains an uninitialized definition
 +// for runtime·iscgo. Override it to tell the runtime we're here.
@@ -8549,14 +8728,14 @@ index 00000000000000..ba142ec481d026
 +var _iscgo bool = true
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
 new file mode 100644
-index 00000000000000..8a0790faf1d5d9
+index 00000000000000..38f94419397d8d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
 @@ -0,0 +1,39 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8624,6 +8803,32 @@ index 00000000000000..ecdcb2e7852560
 +type stack_t struct {
 +	/* not implemented */
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
+new file mode 100644
+index 00000000000000..4bfb70c3d5ee9a
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
+@@ -0,0 +1,20 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_cond_t  uintptr
++	pthread_mutex_t uintptr
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t(0)
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t(0)
++)
++
++type stack_t struct {
++	/* not implemented */
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
 new file mode 100644
 index 00000000000000..b08a44a1001bc0
@@ -8692,7 +8897,7 @@ index 00000000000000..42c2b7d0b8176f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
 new file mode 100644
-index 00000000000000..8d7b9831d31fae
+index 00000000000000..f30af0e1515699
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
 @@ -0,0 +1,19 @@
@@ -8700,7 +8905,7 @@ index 00000000000000..8d7b9831d31fae
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -8717,14 +8922,14 @@ index 00000000000000..8d7b9831d31fae
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
 new file mode 100644
-index 00000000000000..2e049260d4aad6
+index 00000000000000..43277f854d34aa
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
 @@ -0,0 +1,107 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -8830,14 +9035,14 @@ index 00000000000000..2e049260d4aad6
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 new file mode 100644
-index 00000000000000..0e50f2a91f1b50
+index 00000000000000..a4ca5ea98214fd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
 @@ -0,0 +1,107 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +/*
 +trampoline for emulating required C functions for cgo in go (see cgo.go)
@@ -8943,14 +9148,14 @@ index 00000000000000..0e50f2a91f1b50
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
 new file mode 100644
-index 00000000000000..b30bff6c63f411
+index 00000000000000..9aa7eb0accb4c8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
 @@ -0,0 +1,81 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -9030,14 +9235,14 @@ index 00000000000000..b30bff6c63f411
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..ddd01434d04cda
+index 00000000000000..dceb1cac6e821c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 @@ -0,0 +1,84 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -9120,14 +9325,14 @@ index 00000000000000..ddd01434d04cda
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
 new file mode 100644
-index 00000000000000..89bf8813bade7a
+index 00000000000000..72c58f3f4fe01a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
 @@ -0,0 +1,88 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -9214,14 +9419,14 @@ index 00000000000000..89bf8813bade7a
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
 new file mode 100644
-index 00000000000000..586ccaf91df1a4
+index 00000000000000..8a1434e60d756d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
 @@ -0,0 +1,227 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -9447,14 +9652,14 @@ index 00000000000000..586ccaf91df1a4
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 new file mode 100644
-index 00000000000000..50b364773606d1
+index 00000000000000..4154684b63ff51
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
 @@ -0,0 +1,72 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +#include "go_asm.h"
@@ -9694,7 +9899,7 @@ index 00000000000000..49fec0cf2f1718
 +	BR   R14
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 new file mode 100644
-index 00000000000000..fb667453f207c0
+index 00000000000000..e1339193b9764d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
 @@ -0,0 +1,165 @@
@@ -9703,7 +9908,7 @@ index 00000000000000..fb667453f207c0
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +package fakecgo
 +
@@ -9928,6 +10133,60 @@ index 00000000000000..960f8168eb88d7
 +//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
 +var _pthread_attr_setstacksize uint8
 +var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
+new file mode 100644
+index 00000000000000..d69775596fddf3
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
+@@ -0,0 +1,48 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.7"
++//go:cgo_import_dynamic purego_free free "libc.so.7"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.7"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.7"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.7"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.7"
++//go:cgo_import_dynamic purego_abort abort "libc.so.7"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so"
++
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
++
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
 new file mode 100644
 index 00000000000000..38ee622a366042
@@ -10253,6 +10512,28 @@ index 00000000000000..35ef7ac11cb955
 +
 +TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_pthread_attr_setstacksize(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
+new file mode 100644
+index 00000000000000..da07005c0bc988
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
+@@ -0,0 +1,16 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
 new file mode 100644
 index 00000000000000..da07005c0bc988
@@ -11079,7 +11360,7 @@ index 00000000000000..edc21761ddd8ad
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
-index 00000000000000..6a073bea0944d1
+index 00000000000000..067583d68517a9
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 @@ -0,0 +1,55 @@
@@ -11088,7 +11369,7 @@ index 00000000000000..6a073bea0944d1
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || linux)
++//go:build !cgo && (darwin || freebsd || linux)
 +
 +#include "textflag.h"
 +
@@ -12798,22 +13079,33 @@ index 00000000000000..0e3e6ca7d87db2
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 new file mode 100644
-index 00000000000000..d6a7523ba10197
+index 00000000000000..c5115146e74dc5
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
 @@ -0,0 +1,5 @@
-+//go:build !cgo && darwin
++//go:build !cgo
 +
 +package ossl
 +
 +//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
+new file mode 100644
+index 00000000000000..c16ed6018f87c1
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
+@@ -0,0 +1,5 @@
++//go:build !cgo
++
++package ossl
++
++//go:cgo_import_dynamic _ _ "libc.so.7"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
 new file mode 100644
-index 00000000000000..20cb4556a12aa8
+index 00000000000000..9a5cf6f78a7b5b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
 @@ -0,0 +1,5 @@
-+//go:build !cgo && linux
++//go:build !cgo
 +
 +package ossl
 +
@@ -30464,10 +30756,10 @@ index 00000000000000..a30d07b27ed848
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
 new file mode 100644
-index 00000000000000..cc4bc4f25fefa4
+index 00000000000000..5f005eda956f2c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
-@@ -0,0 +1,144 @@
+@@ -0,0 +1,152 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -30591,10 +30883,18 @@ index 00000000000000..cc4bc4f25fefa4
 +	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
 +}
 +
++func (c *aesCipher) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
 +func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
 +	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
 +}
 +
++func (c *aesCipher) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
++
 +// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
 +func sliceForAppend(in []byte, n int) (head, tail []byte) {
 +	if total := len(in) + n; cap(in) >= total {
@@ -32023,10 +32323,10 @@ index 00000000000000..82a961d974f129
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
 new file mode 100644
-index 00000000000000..e03ae435ac563f
+index 00000000000000..f44e192ecbe548
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,320 @@
+@@ -0,0 +1,335 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -32264,6 +32564,21 @@ index 00000000000000..e03ae435ac563f
 +	return h.alg.size
 +}
 +
++// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
++func FIPSApprovedHash(h hash.Hash) bool {
++	xh, ok := h.(*Hash)
++	if !ok {
++		return false
++	}
++	switch xh.alg.ch {
++	case crypto.SHA256, crypto.SHA384, crypto.SHA512,
++		crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
++		return true
++	default:
++		return false
++	}
++}
++
 +var _ hash.Hash = (*Hash)(nil)
 +var _ HashCloner = (*Hash)(nil)
 +
@@ -33327,10 +33642,10 @@ index 00000000000000..9e841e7a26e4eb
 +    SOFTWARE
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
 new file mode 100644
-index 00000000000000..99fe3c7189d9d2
+index 00000000000000..3c235d27562871
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
-@@ -0,0 +1,427 @@
+@@ -0,0 +1,435 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33424,10 +33739,18 @@ index 00000000000000..99fe3c7189d9d2
 +	return newCBC(true, bcrypt.AES_ALGORITHM, c.key, iv)
 +}
 +
++func (c *aesCipher) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(true, bcrypt.AES_ALGORITHM, c.key, iv)
++}
++
 +func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
 +	return newCBC(false, bcrypt.AES_ALGORITHM, c.key, iv)
 +}
 +
++func (c *aesCipher) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(false, bcrypt.AES_ALGORITHM, c.key, iv)
++}
++
 +type noGCM struct {
 +	cipher.Block
 +}
@@ -35181,10 +35504,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..124f7418740ef4
+index 00000000000000..d1d018ccbffa8c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,327 @@
+@@ -0,0 +1,342 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -35347,6 +35670,21 @@ index 00000000000000..124f7418740ef4
 +var _ hash.Hash = (*Hash)(nil)
 +var _ HashCloner = (*Hash)(nil)
 +
++// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
++func FIPSApprovedHash(h hash.Hash) bool {
++	xh, ok := h.(*Hash)
++	if !ok {
++		return false
++	}
++	switch xh.alg.id {
++	case bcrypt.SHA256_ALGORITHM, bcrypt.SHA384_ALGORITHM, bcrypt.SHA512_ALGORITHM,
++		bcrypt.SHA3_256_ALGORITHM, bcrypt.SHA3_384_ALGORITHM, bcrypt.SHA3_512_ALGORITHM:
++		return true
++	default:
++		return false
++	}
++}
++
 +// Hash implements [hash.Hash].
 +type Hash struct {
 +	alg *hashAlgorithm
@@ -38317,18 +38655,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..1f87e000dbdbc9 100644
+index 48967bc9ee3bd2..b4491a043c1f3f 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260217140351-4e237614ceb4
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35
 +## explicit; go 1.24
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260130143703-78cb726ef357
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
@@ -38337,7 +38675,7 @@ index 48967bc9ee3bd2..1f87e000dbdbc9 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
++# github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb
 +## explicit; go 1.24
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index d0069a13087..d15b3643b18 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -29,9 +29,9 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_cng.go   |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  .../internal/backend/bbig/big_openssl.go      |  12 +
- src/crypto/internal/backend/cng_windows.go    | 425 +++++++++++++++++
+ src/crypto/internal/backend/cng_windows.go    | 438 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 432 ++++++++++++++++++
+ src/crypto/internal/backend/darwin_darwin.go  | 438 ++++++++++++++++++
  src/crypto/internal/backend/fips140/cng.go    |  35 ++
  src/crypto/internal/backend/fips140/darwin.go |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
@@ -45,14 +45,14 @@ desired goexperiments and build tags.
  .../internal/opensslsetup/opensslsetup.go     |  68 +++
  .../opensslsetup/opensslsetup_test.go         |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
- src/crypto/internal/backend/nobackend.go      | 375 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 424 +++++++++++++++++
+ src/crypto/internal/backend/nobackend.go      | 376 +++++++++++++++
+ src/crypto/internal/backend/openssl_linux.go  | 430 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2716 insertions(+), 14 deletions(-)
+ 43 files changed, 2742 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
@@ -875,10 +875,10 @@ index 00000000000000..51396c3db1a871
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
 new file mode 100644
-index 00000000000000..919f3482dcb3d6
+index 00000000000000..9bc7525be1e462
 --- /dev/null
 +++ b/src/crypto/internal/backend/cng_windows.go
-@@ -0,0 +1,425 @@
+@@ -0,0 +1,438 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -895,6 +895,7 @@ index 00000000000000..919f3482dcb3d6
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
++	"crypto/internal/fips140only"
 +	"hash"
 +	_ "unsafe"
 +
@@ -907,6 +908,7 @@ index 00000000000000..919f3482dcb3d6
 +		panic("cngcrypto: " + err.Error())
 +	}
 +	sig.BoringCrypto()
++	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -920,6 +922,10 @@ index 00000000000000..919f3482dcb3d6
 +	return cng.SupportsHash(h)
 +}
 +
++func FIPSApprovedHash(h hash.Hash) bool {
++	return cng.FIPSApprovedHash(h)
++}
++
 +func SupportsSHAKE(securityBits int) bool {
 +	return cng.SupportsSHAKE(securityBits)
 +}
@@ -928,7 +934,14 @@ index 00000000000000..919f3482dcb3d6
 +	return cng.SupportsSHAKE(securityBits)
 +}
 +
-+func SupportsCurve(curve string) bool        { return true }
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-224", "P-256", "P-384", "P-521", "X25519":
++		return true
++	}
++	return false
++}
++
 +func SupportsRSAOAEPLabel(label []byte) bool { return true }
 +func SupportsRSAPKCS1v15Encryption() bool    { return true }
 +
@@ -1358,10 +1371,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
 new file mode 100644
-index 00000000000000..a491519e864dc5
+index 00000000000000..805e95c926a1a1
 --- /dev/null
 +++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,432 @@
+@@ -0,0 +1,438 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1378,6 +1391,7 @@ index 00000000000000..a491519e864dc5
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
++	"crypto/internal/fips140only"
 +	"hash"
 +	"io"
 +	_ "unsafe"
@@ -1391,6 +1405,7 @@ index 00000000000000..a491519e864dc5
 +		panic("darwincrypto: " + err.Error())
 +	}
 +	sig.BoringCrypto()
++	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -1404,6 +1419,10 @@ index 00000000000000..a491519e864dc5
 +	return xcrypto.SupportsHash(h)
 +}
 +
++func FIPSApprovedHash(h hash.Hash) bool {
++	return xcrypto.FIPSApprovedHash(h)
++}
++
 +func SupportsSHAKE(securityBits int) bool  { return false }
 +func SupportsCSHAKE(securityBits int) bool { return false }
 +
@@ -2285,10 +2304,10 @@ index 00000000000000..19fd29e19e7b96
 +package opensslsetup
 diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..5e16f39dc107c7
+index 00000000000000..cdc768b1e4b57d
 --- /dev/null
 +++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,375 @@
+@@ -0,0 +1,376 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2321,7 +2340,8 @@ index 00000000000000..5e16f39dc107c7
 +
 +const RandReader = randReader(0)
 +
-+func SupportsHash(h crypto.Hash) bool { panic("cryptobackend: not available") }
++func SupportsHash(h crypto.Hash) bool   { panic("cryptobackend: not available") }
++func FIPSApprovedHash(h hash.Hash) bool { panic("cryptobackend: not available") }
 +
 +func SupportsSHAKE(securityBits int) bool  { panic("cryptobackend: not available") }
 +func SupportsCSHAKE(securityBits int) bool { panic("cryptobackend: not available") }
@@ -2666,10 +2686,10 @@ index 00000000000000..5e16f39dc107c7
 +}
 diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
 new file mode 100644
-index 00000000000000..6121670c0e3659
+index 00000000000000..ccac6ce8ad0b35
 --- /dev/null
 +++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,424 @@
+@@ -0,0 +1,430 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2687,6 +2707,7 @@ index 00000000000000..6121670c0e3659
 +	"crypto/internal/backend/fips140"
 +	_ "crypto/internal/backend/internal/opensslsetup"
 +	"crypto/internal/boring/sig"
++	"crypto/internal/fips140only"
 +	"hash"
 +
 +	"github.com/golang-fips/openssl/v2"
@@ -2711,6 +2732,7 @@ index 00000000000000..6121670c0e3659
 +		panic("opensslcrypto: " + err.Error() + ": " + openssl.VersionText())
 +	}
 +	sig.BoringCrypto()
++	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
 +
 +const RandReader = openssl.RandReader
@@ -2719,6 +2741,10 @@ index 00000000000000..6121670c0e3659
 +	return openssl.SupportsHash(h)
 +}
 +
++func FIPSApprovedHash(h hash.Hash) bool {
++	return openssl.FIPSApprovedHash(h)
++}
++
 +func SupportsSHAKE(securityBits int) bool {
 +	return openssl.SupportsSHAKE(securityBits)
 +}
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5d95483669b..ee9699b8f6c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -15,6 +15,8 @@ Subject: [PATCH] Use crypto backends
  src/crypto/aes/aes.go                         |   2 +-
  src/crypto/aes/aes_test.go                    |   2 +-
  src/crypto/boring/boring.go                   |   4 +-
+ src/crypto/cipher/cbc.go                      |  16 ++
+ src/crypto/cipher/ctr.go                      |   7 +
  src/crypto/cipher/ctr_aes_test.go             |   2 +-
  src/crypto/cipher/gcm.go                      |  59 +++++-
  src/crypto/cipher/gcm_test.go                 |   9 +-
@@ -39,14 +41,16 @@ Subject: [PATCH] Use crypto backends
  src/crypto/fips140/fips140.go                 |   3 +-
  src/crypto/hkdf/hkdf.go                       |  14 ++
  src/crypto/hkdf/hkdf_test.go                  |   2 +-
- src/crypto/hmac/hmac.go                       |   2 +-
+ src/crypto/hmac/hmac.go                       |  16 +-
  src/crypto/hmac/hmac_test.go                  |   2 +-
  src/crypto/hpke/aead.go                       |  14 +-
  src/crypto/internal/cryptotest/allocations.go |   6 -
  src/crypto/internal/cryptotest/fips140.go     |   8 +
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
- .../internal/fips140only/fips140only_test.go  |   6 +
+ src/crypto/internal/fips140hash/hash.go       |   3 +-
+ .../internal/fips140only/fips140only.go       |  11 +-
+ .../internal/fips140only/fips140only_test.go  |  52 +++--
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
@@ -64,18 +68,18 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
  src/crypto/rsa/darwin.go                      |  71 +++++++
- src/crypto/rsa/fips.go                        |  22 +-
+ src/crypto/rsa/fips.go                        |  84 ++++----
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  14 +-
- src/crypto/rsa/rsa.go                         |  16 +-
+ src/crypto/rsa/rsa.go                         |  29 +--
  src/crypto/rsa/rsa_test.go                    |   7 +-
- src/crypto/sha1/sha1.go                       |   8 +-
+ src/crypto/sha1/sha1.go                       |  11 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
  src/crypto/sha256/sha256.go                   |   6 +-
  src/crypto/sha256/sha256_test.go              |  44 ++--
- src/crypto/sha3/sha3.go                       | 124 +++++++++--
+ src/crypto/sha3/sha3.go                       | 129 ++++++++++--
  src/crypto/sha3/sha3_test.go                  |  18 +-
  src/crypto/sha512/sha512.go                   |  14 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
@@ -100,7 +104,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 96 files changed, 1518 insertions(+), 180 deletions(-)
+ 100 files changed, 1629 insertions(+), 249 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -307,6 +311,78 @@ index 097c37e343fdb8..a5d603896d3890 100644
  
  // Enabled reports whether BoringCrypto handles supported crypto operations.
  func Enabled() bool {
+diff --git a/src/crypto/cipher/cbc.go b/src/crypto/cipher/cbc.go
+index 87bafee08ade4f..198de1d17b7e7c 100644
+--- a/src/crypto/cipher/cbc.go
++++ b/src/crypto/cipher/cbc.go
+@@ -44,6 +44,12 @@ type cbcEncAble interface {
+ 	NewCBCEncrypter(iv []byte) BlockMode
+ }
+ 
++// fipsCBCEncAble is an interface implemented by ciphers that have a specific
++// optimized implementation of CBC encryption that is compliant with FIPS 140-2.
++type fipsCBCEncAble interface {
++	NewFIPSCBCEncrypter(iv []byte) BlockMode
++}
++
+ // NewCBCEncrypter returns a BlockMode which encrypts in cipher block chaining
+ // mode, using the given Block. The length of iv must be the same as the
+ // Block's block size.
+@@ -54,6 +60,9 @@ func NewCBCEncrypter(b Block, iv []byte) BlockMode {
+ 	if b, ok := b.(*aes.Block); ok {
+ 		return aes.NewCBCEncrypter(b, [16]byte(iv))
+ 	}
++	if cbc, ok := b.(fipsCBCEncAble); ok {
++		return cbc.NewFIPSCBCEncrypter(iv)
++	}
+ 	if fips140only.Enforced() {
+ 		panic("crypto/cipher: use of CBC with non-AES ciphers is not allowed in FIPS 140-only mode")
+ 	}
+@@ -123,6 +132,10 @@ type cbcDecAble interface {
+ 	NewCBCDecrypter(iv []byte) BlockMode
+ }
+ 
++type fipsCBCDecAble interface {
++	NewFIPSCBCDecrypter(iv []byte) BlockMode
++}
++
+ // NewCBCDecrypter returns a BlockMode which decrypts in cipher block chaining
+ // mode, using the given Block. The length of iv must be the same as the
+ // Block's block size and must match the iv used to encrypt the data.
+@@ -133,6 +146,9 @@ func NewCBCDecrypter(b Block, iv []byte) BlockMode {
+ 	if b, ok := b.(*aes.Block); ok {
+ 		return aes.NewCBCDecrypter(b, [16]byte(iv))
+ 	}
++	if cbc, ok := b.(fipsCBCDecAble); ok {
++		return cbc.NewFIPSCBCDecrypter(iv)
++	}
+ 	if fips140only.Enforced() {
+ 		panic("crypto/cipher: use of CBC with non-AES ciphers is not allowed in FIPS 140-only mode")
+ 	}
+diff --git a/src/crypto/cipher/ctr.go b/src/crypto/cipher/ctr.go
+index 8e63ed7e668a4c..10ed72d2540b6e 100644
+--- a/src/crypto/cipher/ctr.go
++++ b/src/crypto/cipher/ctr.go
+@@ -36,12 +36,19 @@ type ctrAble interface {
+ 	NewCTR(iv []byte) Stream
+ }
+ 
++type fipsCTRAble interface {
++	NewFIPSCTR(iv []byte) Stream
++}
++
+ // NewCTR returns a [Stream] which encrypts/decrypts using the given [Block] in
+ // counter mode. The length of iv must be the same as the [Block]'s block size.
+ func NewCTR(block Block, iv []byte) Stream {
+ 	if block, ok := block.(*aes.Block); ok {
+ 		return aesCtrWrapper{aes.NewCTR(block, iv)}
+ 	}
++	if ctr, ok := block.(fipsCTRAble); ok {
++		return ctr.NewFIPSCTR(iv)
++	}
+ 	if fips140only.Enforced() {
+ 		panic("crypto/cipher: use of CTR with non-AES ciphers is not allowed in FIPS 140-only mode")
+ 	}
 diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
 index 1d8ae78674ebe2..1ce8f093834d55 100644
 --- a/src/crypto/cipher/ctr_aes_test.go
@@ -1494,7 +1570,7 @@ index 57d90f88e93e75..4069ab057a2525 100644
  	"crypto/md5"
  	"crypto/sha1"
 diff --git a/src/crypto/hmac/hmac.go b/src/crypto/hmac/hmac.go
-index e7976e25193dfe..9578e1e985c02d 100644
+index e7976e25193dfe..58b357ee52c328 100644
 --- a/src/crypto/hmac/hmac.go
 +++ b/src/crypto/hmac/hmac.go
 @@ -22,7 +22,7 @@ timing side-channels:
@@ -1506,6 +1582,34 @@ index e7976e25193dfe..9578e1e985c02d 100644
  	"crypto/internal/fips140/hmac"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
+@@ -37,13 +37,6 @@ import (
+ // the returned Hash does not implement [encoding.BinaryMarshaler]
+ // or [encoding.BinaryUnmarshaler].
+ func New(h func() hash.Hash, key []byte) hash.Hash {
+-	if boring.Enabled {
+-		hm := boring.NewHMAC(h, key)
+-		if hm != nil {
+-			return hm
+-		}
+-		// BoringCrypto did not recognize h, so fall through to standard Go code.
+-	}
+ 	h = fips140hash.UnwrapNew(h)
+ 	if fips140only.Enforced() {
+ 		if len(key) < 112/8 {
+@@ -53,6 +46,13 @@ func New(h func() hash.Hash, key []byte) hash.Hash {
+ 			panic("crypto/hmac: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 		}
+ 	}
++	if boring.Enabled {
++		hm := boring.NewHMAC(h, key)
++		if hm != nil {
++			return hm
++		}
++		// BoringCrypto did not recognize h, so fall through to standard Go code.
++	}
+ 	return hmac.New(h, key)
+ }
+ 
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
 index 4046a9555a8e35..4721a2a7ac04f7 100644
 --- a/src/crypto/hmac/hmac_test.go
@@ -1635,8 +1739,55 @@ index 2b6cf4b75fc6b7..3a1b9e5cc67ecc 100644
  	"crypto/internal/impl"
  	"internal/goarch"
  	"internal/goos"
+diff --git a/src/crypto/internal/fips140hash/hash.go b/src/crypto/internal/fips140hash/hash.go
+index 6d67ee8b3429a1..8f8d5937ea913c 100644
+--- a/src/crypto/internal/fips140hash/hash.go
++++ b/src/crypto/internal/fips140hash/hash.go
+@@ -5,14 +5,13 @@
+ package fips140hash
+ 
+ import (
+-	fsha3 "crypto/internal/fips140/sha3"
+ 	"crypto/sha3"
+ 	"hash"
+ 	_ "unsafe"
+ )
+ 
+ //go:linkname sha3Unwrap
+-func sha3Unwrap(*sha3.SHA3) *fsha3.Digest
++func sha3Unwrap(*sha3.SHA3) hash.Hash
+ 
+ // Unwrap returns h, or a crypto/internal/fips140 inner implementation of h.
+ //
+diff --git a/src/crypto/internal/fips140only/fips140only.go b/src/crypto/internal/fips140only/fips140only.go
+index 1b0a4be6ba5897..72fea1cfa7eed8 100644
+--- a/src/crypto/internal/fips140only/fips140only.go
++++ b/src/crypto/internal/fips140only/fips140only.go
+@@ -20,13 +20,20 @@ func Enforced() bool {
+ 	return fips140.Enforced()
+ }
+ 
++// BackendApprovedHash is set by a crypto backend during init to provide
++// backend-specific FIPS hash approval checking. If nil, only the standard
++// library FIPS hash types are recognized as approved.
++var BackendApprovedHash func(h hash.Hash) bool
++
+ func ApprovedHash(h hash.Hash) bool {
+ 	switch h.(type) {
+ 	case *sha256.Digest, *sha512.Digest, *sha3.Digest:
+ 		return true
+-	default:
+-		return false
+ 	}
++	if BackendApprovedHash != nil {
++		return BackendApprovedHash(h)
++	}
++	return false
+ }
+ 
+ func ApprovedRandomReader(r io.Reader) bool {
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
-index 96df536d56f345..5ed6026962a17c 100644
+index 96df536d56f345..01613841a3c87e 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go
 +++ b/src/crypto/internal/fips140only/fips140only_test.go
 @@ -17,6 +17,7 @@ import (
@@ -1647,18 +1798,85 @@ index 96df536d56f345..5ed6026962a17c 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	"crypto/internal/fips140only"
-@@ -47,6 +48,11 @@ import (
+@@ -39,6 +40,7 @@ import (
+ 	"io"
+ 	"math/big"
+ 	"os"
++	"runtime"
+ 	"strings"
+ 	"testing"
  
- func TestFIPS140Only(t *testing.T) {
- 	cryptotest.MustSupportFIPS140(t)
-+	// TODO: Remove this skip when SystemCrypto supports fips140=only mode.
-+	// https://github.com/microsoft/go/issues/1656
-+	if boring.Enabled {
-+		t.Skip("SystemCrypto does not support fips140=only mode")
+@@ -89,7 +91,12 @@ func testFIPS140Only(t *testing.T) {
+ 	expectPanic(t, func() { cipher.NewCFBEncrypter(aesBlock, iv) })
+ 	expectPanic(t, func() { cipher.NewCFBDecrypter(aesBlock, iv) })
+ 
+-	cipher.NewCTR(aesBlock, iv)
++	if boring.Enabled && (runtime.GOOS == "darwin" || runtime.GOOS == "windows") {
++		// The darwin/windows crypto backends don't support CTR.
++		expectPanic(t, func() { cipher.NewCTR(aesBlock, iv) })
++	} else {
++		cipher.NewCTR(aesBlock, iv)
++	}
+ 	expectPanic(t, func() { cipher.NewCTR(notAESBlock, iv) })
+ 
+ 	expectPanic(t, func() { cipher.NewOFB(aesBlock, iv) })
+@@ -310,13 +317,16 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
+ 	expectErr(t, errRet2(hpke.DHKEM(ecdh.X25519()).NewPublicKey(make([]byte, 32))))
+ 	hpkeK, err := hpke.MLKEM768().GenerateKey()
+ 	expectNoErr(t, err)
+-	expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
+-	expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
+-
+-	// fips140=only mode should prevent any operation that would make the FIPS
+-	// 140-3 module set its service indicator to false.
+-	if !fips140.ServiceIndicator() {
+-		t.Errorf("service indicator not set")
++	if !boring.Enabled {
++		// TODO implement error handling in backends that check for fips140only.Enforced().
++		expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
++		expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
++
++		// fips140=only mode should prevent any operation that would make the FIPS
++		// 140-3 module set its service indicator to false.
++		if !fips140.ServiceIndicator() {
++			t.Errorf("service indicator not set")
++		}
+ 	}
+ }
+ 
+@@ -329,16 +339,22 @@ type readerWrap struct {
+ }
+ 
+ func withApprovedHash(f func(crypto.Hash)) {
+-	f(crypto.SHA224)
+-	f(crypto.SHA256)
+-	f(crypto.SHA384)
+-	f(crypto.SHA512)
+-	f(crypto.SHA3_224)
+-	f(crypto.SHA3_256)
+-	f(crypto.SHA3_384)
+-	f(crypto.SHA3_512)
+-	f(crypto.SHA512_224)
+-	f(crypto.SHA512_256)
++	for _, h := range []crypto.Hash{
++		crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512,
++		crypto.SHA512_224, crypto.SHA512_256,
++	} {
++		if boring.Enabled && !boring.SupportsHash(h) {
++			continue
++		}
++		f(h)
++	}
++	for _, h := range []crypto.Hash{crypto.SHA3_224, crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512} {
++		if boring.Enabled {
++			// TODO implement fallbacks that checks hash.Hash
++			continue
++		}
++		f(h)
 +	}
- 	if !fips140only.Enforced() {
- 		cmd := testenv.Command(t, testenv.Executable(t), "-test.run=^TestFIPS140Only$", "-test.v")
- 		cmd.Env = append(cmd.Environ(), "GODEBUG=fips140=only")
+ }
+ 
+ func withNonApprovedHash(f func(crypto.Hash)) {
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
 index 6a0b46af2bbe40..fbe7ba6992d0ce 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
@@ -1730,7 +1948,7 @@ index 29648b9f386ed7..b3113a3ee2e1fa 100644
  	"crypto/internal/randutil"
  	"internal/godebug"
 diff --git a/src/crypto/md5/md5.go b/src/crypto/md5/md5.go
-index f1287887ff5e25..b2e26308349566 100644
+index f1287887ff5e25..61e9cc23e5667f 100644
 --- a/src/crypto/md5/md5.go
 +++ b/src/crypto/md5/md5.go
 @@ -12,6 +12,7 @@ package md5
@@ -1745,7 +1963,7 @@ index f1287887ff5e25..b2e26308349566 100644
  // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
  // state of the hash.
  func New() hash.Hash {
-+	if boring.Enabled && boring.SupportsHash(crypto.MD5) {
++	if boring.Enabled && boring.SupportsHash(crypto.MD5) && !fips140only.Enforced() {
 +		return boring.NewMD5()
 +	}
  	d := new(digest)
@@ -2425,7 +2643,7 @@ index 00000000000000..bff8ac449c9a3b
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index fb2395886b053b..ac0ad4f9490a8b 100644
+index fb2395886b053b..18334e731f9349 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2437,24 +2655,72 @@ index fb2395886b053b..ac0ad4f9490a8b 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
-@@ -71,7 +71,7 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
+@@ -71,7 +71,17 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
  		hash = opts.Hash
  	}
  
 -	if boring.Enabled && rand.IsDefaultReader(random) {
++	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
++		return nil, err
++	}
++	if fips140only.Enforced() && !fips140only.ApprovedHash(hash.New()) {
++		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++	}
++	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
++		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
++	}
++
 +	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsHash(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -134,7 +134,7 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+@@ -82,16 +92,6 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
+ 
+ 	h := fips140hash.Unwrap(hash.New())
+ 
+-	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
+-		return nil, err
+-	}
+-	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
+-		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	}
+-	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
+-		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+-	}
+-
+ 	k, err := fipsPrivateKey(priv)
+ 	if err != nil {
+ 		return nil, err
+@@ -134,7 +134,14 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
  		return err
  	}
  
 -	if boring.Enabled {
++	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
++		return err
++	}
++	if fips140only.Enforced() && !fips140only.ApprovedHash(hash.New()) {
++		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++	}
++
 +	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsHash(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
+@@ -147,13 +154,6 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+ 
+ 	h := fips140hash.Unwrap(hash.New())
+ 
+-	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
+-		return err
+-	}
+-	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
+-		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	}
+-
+ 	k, err := fipsPublicKey(pub)
+ 	if err != nil {
+ 		return err
 @@ -203,10 +203,12 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
  //
  // See [EncryptOAEP] for additional details.
@@ -2489,24 +2755,66 @@ index fb2395886b053b..ac0ad4f9490a8b 100644
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -331,7 +333,7 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -331,7 +333,14 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
 -	if boring.Enabled {
++	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
++		return nil, err
++	}
++	if fips140only.Enforced() && hash != crypto.Hash(0) && !fips140only.ApprovedHash(hash.New()) {
++		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++	}
++
 +	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -374,7 +376,7 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -339,13 +348,6 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+ 		return boring.SignRSAPKCS1v15(bkey, hash, hashed)
+ 	}
+ 
+-	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
+-		return nil, err
+-	}
+-	if fips140only.Enforced() && !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
+-		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	}
+-
+ 	k, err := fipsPrivateKey(priv)
+ 	if err != nil {
+ 		return nil, err
+@@ -374,7 +376,14 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
 -	if boring.Enabled {
++	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
++		return err
++	}
++	if fips140only.Enforced() && hash != crypto.Hash(0) && !fips140only.ApprovedHash(hash.New()) {
++		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++	}
++
 +	if boring.Enabled && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
+@@ -385,13 +394,6 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+ 		return nil
+ 	}
+ 
+-	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
+-		return err
+-	}
+-	if fips140only.Enforced() && !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
+-		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	}
+-
+ 	k, err := fipsPublicKey(pub)
+ 	if err != nil {
+ 		return err
 diff --git a/src/crypto/rsa/notboring.go b/src/crypto/rsa/notboring.go
 index 2abc0436405f8a..3e4d6f3eef61e6 100644
 --- a/src/crypto/rsa/notboring.go
@@ -2652,7 +2960,7 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index b94b129867727b..9482325d58fe06 100644
+index b94b129867727b..149dd4321f8d72 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2683,16 +2991,36 @@ index b94b129867727b..9482325d58fe06 100644
  
  	case *PKCS1v15DecryptOptions:
  		if l := opts.SessionKeyLen; l > 0 {
-@@ -314,8 +315,7 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+@@ -314,8 +315,14 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
  		return nil, err
  	}
  
 -	if boring.Enabled && rand.IsDefaultReader(random) &&
 -		(bits == 2048 || bits == 3072 || bits == 4096) {
++	if fips140only.Enforced() && bits < 2048 {
++		return nil, errors.New("crypto/rsa: use of keys smaller than 2048 bits is not allowed in FIPS 140-only mode")
++	}
++	if fips140only.Enforced() && bits%2 == 1 {
++		return nil, errors.New("crypto/rsa: use of keys with odd size is not allowed in FIPS 140-only mode")
++	}
++
 +	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSAPublicKey(bits) {
  		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
  		if err != nil {
  			return nil, err
+@@ -352,12 +359,6 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+ 
+ 	random = rand.CustomReader(random)
+ 
+-	if fips140only.Enforced() && bits < 2048 {
+-		return nil, errors.New("crypto/rsa: use of keys smaller than 2048 bits is not allowed in FIPS 140-only mode")
+-	}
+-	if fips140only.Enforced() && bits%2 == 1 {
+-		return nil, errors.New("crypto/rsa: use of keys with odd size is not allowed in FIPS 140-only mode")
+-	}
+ 	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
+ 		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+ 	}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 124fba1e8a4faa..af6d8e9291af62 100644
 --- a/src/crypto/rsa/rsa_test.go
@@ -2719,7 +3047,7 @@ index 124fba1e8a4faa..af6d8e9291af62 100644
  	msg := []byte("hi!")
  	enc, err := EncryptPKCS1v15(rand.Reader, &priv.PublicKey, msg)
 diff --git a/src/crypto/sha1/sha1.go b/src/crypto/sha1/sha1.go
-index 46e47df1d32cf2..0fb56a3831c8a2 100644
+index 46e47df1d32cf2..05a1368f9833e5 100644
 --- a/src/crypto/sha1/sha1.go
 +++ b/src/crypto/sha1/sha1.go
 @@ -10,7 +10,7 @@ package sha1
@@ -2731,7 +3059,24 @@ index 46e47df1d32cf2..0fb56a3831c8a2 100644
  	"crypto/internal/fips140only"
  	"errors"
  	"hash"
-@@ -271,12 +271,12 @@ func (d *digest) constSum() [Size]byte {
+@@ -113,7 +113,7 @@ func (d *digest) Reset() {
+ // [encoding.BinaryUnmarshaler] to marshal and unmarshal the internal
+ // state of the hash.
+ func New() hash.Hash {
+-	if boring.Enabled {
++	if boring.Enabled && !fips140only.Enforced() {
+ 		return boring.NewSHA1()
+ 	}
+ 	d := new(digest)
+@@ -153,7 +153,6 @@ func (d *digest) Write(p []byte) (nn int, err error) {
+ }
+ 
+ func (d *digest) Sum(in []byte) []byte {
+-	boring.Unreachable()
+ 	// Make a copy of d so that caller can keep writing and summing.
+ 	d0 := *d
+ 	hash := d0.checkSum()
+@@ -271,12 +270,12 @@ func (d *digest) constSum() [Size]byte {
  
  // Sum returns the SHA-1 checksum of the data.
  func Sum(data []byte) [Size]byte {
@@ -2942,7 +3287,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index 48c67e9fe11005..3fe46309e0fda8 100644
+index 48c67e9fe11005..1ab7ae42462ef6 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -3013,7 +3358,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  	// Outline the allocation for up to 512 bits of output to the caller's stack.
  	out := make([]byte, 64)
  	return sumSHAKE256(out, data, length)
-@@ -99,7 +118,9 @@ func sumSHAKE256(out, data []byte, length int) []byte {
+@@ -99,36 +118,53 @@ func sumSHAKE256(out, data []byte, length int) []byte {
  // SHA3 is an instance of a SHA-3 hash. It implements [hash.Hash].
  // The zero value is a usable SHA3-256 hash.
  type SHA3 struct {
@@ -3024,7 +3369,13 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  }
  
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
-@@ -109,26 +130,38 @@ func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
+-func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
++func fips140hash_sha3Unwrap(sha3 *SHA3) hash.Hash {
++	if sha3.boringS != nil {
++		return sha3.boringS
++	}
+ 	return &sha3.s
+ }
  
  // New224 creates a new SHA3-224 hash.
  func New224() *SHA3 {
@@ -3068,7 +3419,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  		*s = *New256()
  	}
  }
-@@ -136,53 +169,81 @@ func (s *SHA3) init() {
+@@ -136,53 +172,81 @@ func (s *SHA3) init() {
  // Write absorbs more data into the hash's state.
  func (s *SHA3) Write(p []byte) (n int, err error) {
  	s.init()
@@ -3151,7 +3502,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  	r := *d
  	return &r, nil
  }
-@@ -190,23 +251,30 @@ func (d *SHA3) Clone() (hash.Cloner, error) {
+@@ -190,23 +254,30 @@ func (d *SHA3) Clone() (hash.Cloner, error) {
  // SHAKE is an instance of a SHAKE extendable output function.
  // The zero value is a usable SHAKE256 hash.
  type SHAKE struct {
@@ -3186,7 +3537,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  }
  
  // NewCSHAKE128 creates a new cSHAKE128 XOF.
-@@ -215,7 +283,10 @@ func NewSHAKE256() *SHAKE {
+@@ -215,7 +286,10 @@ func NewSHAKE256() *SHAKE {
  // cSHAKE is desired. S is a customization byte string used for domain
  // separation. When N and S are both empty, this is equivalent to NewSHAKE128.
  func NewCSHAKE128(N, S []byte) *SHAKE {
@@ -3198,7 +3549,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  }
  
  // NewCSHAKE256 creates a new cSHAKE256 XOF.
-@@ -224,7 +295,10 @@ func NewCSHAKE128(N, S []byte) *SHAKE {
+@@ -224,7 +298,10 @@ func NewCSHAKE128(N, S []byte) *SHAKE {
  // cSHAKE is desired. S is a customization byte string used for domain
  // separation. When N and S are both empty, this is equivalent to NewSHAKE256.
  func NewCSHAKE256(N, S []byte) *SHAKE {
@@ -3210,7 +3561,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  }
  
  // Write absorbs more data into the XOF's state.
-@@ -232,6 +306,9 @@ func NewCSHAKE256(N, S []byte) *SHAKE {
+@@ -232,6 +309,9 @@ func NewCSHAKE256(N, S []byte) *SHAKE {
  // It panics if any output has already been read.
  func (s *SHAKE) Write(p []byte) (n int, err error) {
  	s.init()
@@ -3220,7 +3571,7 @@ index 48c67e9fe11005..3fe46309e0fda8 100644
  	return s.s.Write(p)
  }
  
-@@ -240,35 +317,54 @@ func (s *SHAKE) Write(p []byte) (n int, err error) {
+@@ -240,35 +320,54 @@ func (s *SHAKE) Write(p []byte) (n int, err error) {
  // Any call to Write after a call to Read will panic.
  func (s *SHAKE) Read(p []byte) (n int, err error) {
  	s.init()

From 6000e898fb4e1ea8fcf21479deea02c13fef38d1 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 25 Feb 2026 10:06:48 +0000
Subject: [PATCH 741/887] resolve conflicts

---
 patches/0004-Use-crypto-backends.patch        | 21 ++----
 ...TLS-settings-with-Microsoft-policies.patch | 65 +++++--------------
 2 files changed, 21 insertions(+), 65 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index ee9699b8f6c..953821f37f4 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -83,7 +83,6 @@ Subject: [PATCH] Use crypto backends
  src/crypto/sha3/sha3_test.go                  |  18 +-
  src/crypto/sha512/sha512.go                   |  14 +-
  src/crypto/sha512/sha512_test.go              |  32 ++-
- src/crypto/tls/auth_test.go                   |   1 +
  src/crypto/tls/cipher_suites.go               |  10 +-
  src/crypto/tls/fipsonly/fipsonly.go           |   2 +-
  src/crypto/tls/fipsonly/fipsonly_test.go      |   2 +-
@@ -104,7 +103,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 100 files changed, 1629 insertions(+), 249 deletions(-)
+ 99 files changed, 1628 insertions(+), 249 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -130,7 +129,7 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 91502c9a23f724..41cde9ef2206af 100644
+index 7314eaffa3f800..089cc2b36ab186 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -720,7 +720,7 @@ func (t *tester) registerTests() {
@@ -142,7 +141,7 @@ index 91502c9a23f724..41cde9ef2206af 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1383,12 +1383,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1384,12 +1384,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -247,7 +246,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 3799aafac769fa..c6a9a270c087bb 100644
+index cac9cc0b98f6d9..ae553979a7fd09 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,12 @@ var hostobj []Hostobj
@@ -3861,18 +3860,6 @@ index 080bf694f03652..389e2738a4e885 100644
  		})
  	})
  }
-diff --git a/src/crypto/tls/auth_test.go b/src/crypto/tls/auth_test.go
-index 727bdc4df76393..5a770fcb9e85c9 100644
---- a/src/crypto/tls/auth_test.go
-+++ b/src/crypto/tls/auth_test.go
-@@ -67,6 +67,7 @@ func TestSignatureSelection(t *testing.T) {
- 			t.Logf("skipping test[%d] - not compatible with TLS FIPS mode", testNo)
- 			continue
- 		}
-+
- 		savedGODEBUG := os.Getenv("GODEBUG")
- 		os.Setenv("GODEBUG", savedGODEBUG+","+test.godebug)
- 
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
 index 6ed63ccc2dc1f5..48f37264e61e71 100644
 --- a/src/crypto/tls/cipher_suites.go
diff --git a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
index 1a1f55703b2..66a028bae46 100644
--- a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
@@ -14,17 +14,16 @@ Subject: [PATCH] Align TLS settings with Microsoft policies
  src/crypto/tls/handshake_test.go         |   3 +
  src/crypto/tls/microsoft_test.go         | 483 +++++++++++++++++++++++
  src/crypto/tls/schannel_windows.go       |   7 +
- src/crypto/tls/tls_test.go               |   5 +-
  src/internal/godebugs/table.go           |   2 +
- 12 files changed, 752 insertions(+), 26 deletions(-)
+ 11 files changed, 749 insertions(+), 24 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
+index 7184b2aaf1ce67..07fc1ea6d19970 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -183,6 +183,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
+@@ -197,6 +197,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
  to `cryptocustomrand=0`, ignoring the random parameters. Using `cryptocustomrand=1`
  reverts to the pre-Go 1.26 behavior.
  
@@ -41,10 +40,10 @@ index 28a2dc506ef8ff..4c95ceb09bcbbe 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/crypto/tls/common.go b/src/crypto/tls/common.go
-index 099a11ca63da75..68cb28f19e320d 100644
+index f38a43829a0998..491e3673fe6629 100644
 --- a/src/crypto/tls/common.go
 +++ b/src/crypto/tls/common.go
-@@ -1179,7 +1179,14 @@ func (c *Config) cipherSuites(aesGCMPreferred bool) []uint16 {
+@@ -1192,7 +1192,14 @@ func (c *Config) cipherSuites(aesGCMPreferred bool) []uint16 {
  	}
  	if fips140tls.Required() {
  		cipherSuites = slices.DeleteFunc(cipherSuites, func(id uint16) bool {
@@ -294,7 +293,7 @@ index 00000000000000..6a3dddaf6b0ed1
 +	TLS_RSA_WITH_RC4_128_SHA:         true,
 +}
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 4f89d96ec5de28..7d94bdbcb521ac 100644
+index 697dfa1ecb792e..1e4953c77bcc0d 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -130,12 +130,21 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
@@ -354,10 +353,10 @@ index e7de0b59119b8a..d9d1406371d13c 100644
  			if len(chi.CipherSuites) != len(expectedCiphersuites) {
  				t.Errorf("only TLS 1.3 suites should be advertised, got=%x", chi.CipherSuites)
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index c81d0e56598634..11fbfc58af3959 100644
+index 14834301052886..dbf66fa8a23cc5 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
-@@ -175,12 +175,22 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
+@@ -176,12 +176,22 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
  	hs.hello.sessionId = hs.clientHello.sessionId
  	hs.hello.compressionMethod = compressionNone
  
@@ -402,7 +401,7 @@ index 9cea8182d04154..0e5b421f52dc95 100644
  		Rand:               zeroSource{},
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..e3cec5f2956867
+index 00000000000000..3d9c3ea17eca85
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
 @@ -0,0 +1,483 @@
@@ -415,6 +414,7 @@ index 00000000000000..e3cec5f2956867
 +import (
 +	boring "crypto/internal/backend"
 +	"crypto/tls/internal/fips140tls"
++	"internal/testenv"
 +	"maps"
 +	"os"
 +	"runtime"
@@ -456,7 +456,6 @@ index 00000000000000..e3cec5f2956867
 +	// and behavior during the handshake. It is based on TestHandshakeMLKEM.
 +
 +	enableMicrosoftProfile(t)
-+	savedGODEBUG := os.Getenv("GODEBUG")
 +
 +	defaultWithPQ := []CurveID{X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
 +		CurveP384, CurveP256, CurveP521, X25519}
@@ -595,7 +594,7 @@ index 00000000000000..e3cec5f2956867
 +		{
 +			name: "GODEBUG tlsmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"tlsmlkem=0")
++				testenv.SetGODEBUG(t, "tlsmlkem=0")
 +			},
 +			expectClient:   defaultWithoutPQ,
 +			expectSelected: CurveP384,
@@ -603,7 +602,7 @@ index 00000000000000..e3cec5f2956867
 +		{
 +			name: "GODEBUG tlssecpmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"tlssecpmlkem=0")
++				testenv.SetGODEBUG(t, "tlssecpmlkem=0")
 +			},
 +			expectClient:   []CurveID{X25519MLKEM768, CurveP384, CurveP256, CurveP521, X25519},
 +			expectSelected: X25519MLKEM768,
@@ -611,7 +610,7 @@ index 00000000000000..e3cec5f2956867
 +		{
 +			name: "GODEBUG ms_tlsx25519=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0")
++				testenv.SetGODEBUG(t, "ms_tlsx25519=0")
 +			},
 +			expectClient: slices.DeleteFunc(slices.Clone(defaultWithPQ), func(c CurveID) bool {
 +				return c == X25519MLKEM768 || c == X25519
@@ -621,7 +620,7 @@ index 00000000000000..e3cec5f2956867
 +		{
 +			name: "GODEBUG ms_tlsx25519=0,tlsmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0,tlsmlkem=0")
++				testenv.SetGODEBUG(t, "ms_tlsx25519=0,tlsmlkem=0")
 +			},
 +			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
 +			expectSelected: CurveP384,
@@ -629,7 +628,7 @@ index 00000000000000..e3cec5f2956867
 +		{
 +			name: "GODEBUG ms_tlsx25519=0,tlssecpmlkem=0",
 +			preparation: func(t *testing.T) {
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"ms_tlsx25519=0,tlssecpmlkem=0")
++				testenv.SetGODEBUG(t, "ms_tlsx25519=0,tlssecpmlkem=0")
 +			},
 +			expectClient:   []CurveID{CurveP384, CurveP256, CurveP521},
 +			expectSelected: CurveP384,
@@ -907,41 +906,11 @@ index cccfb8866f88ab..b2896e95e74686 100644
  	// Schannel doesn't have a separate preference order without AES.
  	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder
  	defaultCipherSuitesTLS13NoAES = defaultCipherSuitesTLS13
-diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 9bb2d0801111c2..76092416618ca0 100644
---- a/src/crypto/tls/tls_test.go
-+++ b/src/crypto/tls/tls_test.go
-@@ -1990,6 +1990,7 @@ func TestHandshakeMLKEM(t *testing.T) {
- 	defaultWithPQ := []CurveID{X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024,
- 		X25519, CurveP256, CurveP384, CurveP521}
- 	defaultWithoutPQ := []CurveID{X25519, CurveP256, CurveP384, CurveP521}
-+	savedGODEBUG := os.Getenv("GODEBUG")
- 	var tests = []struct {
- 		name           string
- 		clientConfig   func(*Config)
-@@ -2100,7 +2101,7 @@ func TestHandshakeMLKEM(t *testing.T) {
- 		{
- 			name: "GODEBUG tlsmlkem=0",
- 			preparation: func(t *testing.T) {
--				t.Setenv("GODEBUG", "tlsmlkem=0")
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"tlsmlkem=0")
- 			},
- 			expectClient:   defaultWithoutPQ,
- 			expectSelected: X25519,
-@@ -2108,7 +2109,7 @@ func TestHandshakeMLKEM(t *testing.T) {
- 		{
- 			name: "GODEBUG tlssecpmlkem=0",
- 			preparation: func(t *testing.T) {
--				t.Setenv("GODEBUG", "tlssecpmlkem=0")
-+				t.Setenv("GODEBUG", savedGODEBUG+","+"tlssecpmlkem=0")
- 			},
- 			expectClient:   []CurveID{X25519MLKEM768, X25519, CurveP256, CurveP384, CurveP521},
- 			expectSelected: X25519MLKEM768,
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
-index 8f6d8bbdda656c..7a5ea67c7dca33 100644
+index 10c4eb715e99e4..edf933b0a770bd 100644
 --- a/src/internal/godebugs/table.go
 +++ b/src/internal/godebugs/table.go
-@@ -49,6 +49,8 @@ var All = []Info{
+@@ -48,6 +48,8 @@ var All = []Info{
  	{Name: "httpservecontentkeepheaders", Package: "net/http", Changed: 23, Old: "1"},
  	{Name: "installgoroot", Package: "go/build"},
  	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque

From 7e3441b66ceaa40131e52f65a6bc8a11cb648460 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 25 Feb 2026 12:34:04 +0000
Subject: [PATCH 742/887] Remove redundant OS/arch build tags where filename
 suffix already constrains (#2157)

---
 .github/aw/actions-lock.json                  |  6 +-
 .github/workflows/patch-consistency-review.md |  2 +
 ...03-Implement-crypto-internal-backend.patch | 80 +++++++++----------
 patches/0004-Use-crypto-backends.patch        | 10 +--
 4 files changed, 50 insertions(+), 48 deletions(-)

diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 604c88d8703..f4f8324579e 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -5,10 +5,10 @@
       "version": "v8",
       "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
     },
-    "github/gh-aw/actions/setup@v0.40.0": {
+    "github/gh-aw/actions/setup@v0.50.2": {
       "repo": "github/gh-aw/actions/setup",
-      "version": "v0.40.0",
-      "sha": "76d37d925abd44fee97379206f105b74b91a285b"
+      "version": "v0.50.2",
+      "sha": "e32435511ac2c5aa0e08b19284a25dc98fadf1e1"
     }
   }
 }
diff --git a/.github/workflows/patch-consistency-review.md b/.github/workflows/patch-consistency-review.md
index b9775489ea0..6d726548eb7 100644
--- a/.github/workflows/patch-consistency-review.md
+++ b/.github/workflows/patch-consistency-review.md
@@ -74,6 +74,8 @@ When a pull request modifies any patch file, review it to ensure:
 2. **Suggest, don't demand**: Frame feedback as suggestions for maintaining consistency
 3. **Skip trivial changes**: Don't flag minor differences like comment styles or variable naming
 4. **Only comment if there are actual consistency issues**: If the PR maintains consistency or only touches one patch's content, acknowledge it positively in a summary comment
+5. **Prefer filename suffix constraints over build tags**: When a Go file targets a specific OS or architecture, use the filename suffix convention (e.g. `_linux.go`, `_windows.go`, `_darwin.go`) rather than duplicating that constraint in a `//go:build` tag. If the filename suffix already implies the OS/arch, the build tag should not repeat it. For example, `foo_linux.go` with `//go:build goexperiment.systemcrypto` is preferred over `foo.go` with `//go:build goexperiment.systemcrypto && linux`.
+6. **Avoid extraneous blank lines in patches**: Patches should not introduce unnecessary blank lines between functions, at the end of files, or between import groups. Keep whitespace consistent with the surrounding code style.
 
 ## Output Format
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index d15b3643b18..1034d075436 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -26,24 +26,24 @@ desired goexperiments and build tags.
  src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_test.go   |  56 +++
  src/crypto/internal/backend/bbig/big.go       |  17 +
- src/crypto/internal/backend/bbig/big_cng.go   |  12 +
+ .../internal/backend/bbig/big_windows.go      |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
- .../internal/backend/bbig/big_openssl.go      |  12 +
+ .../internal/backend/bbig/big_linux.go         |  12 +
  src/crypto/internal/backend/cng_windows.go    | 438 ++++++++++++++++++
  src/crypto/internal/backend/common.go         |  46 ++
  src/crypto/internal/backend/darwin_darwin.go  | 438 ++++++++++++++++++
- src/crypto/internal/backend/fips140/cng.go    |  35 ++
- src/crypto/internal/backend/fips140/darwin.go |  13 +
+ .../internal/backend/fips140/cng_windows.go   |  35 ++
+ .../internal/backend/fips140/darwin_darwin.go  |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
- .../internal/backend/fips140/openssl.go       |  59 +++
+ .../internal/backend/fips140/openssl_linux.go  |  59 +++
  .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
- .../internal/opensslsetup/opensslsetup.go     |  68 +++
- .../opensslsetup/opensslsetup_test.go         |  92 ++++
+ .../opensslsetup/opensslsetup_linux.go        |  68 +++
+ .../opensslsetup/opensslsetup_linux_test.go    |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 376 +++++++++++++++
  src/crypto/internal/backend/openssl_linux.go  | 430 +++++++++++++++++
@@ -56,24 +56,24 @@ desired goexperiments and build tags.
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
- create mode 100644 src/crypto/internal/backend/bbig/big_cng.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_windows.go
  create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
- create mode 100644 src/crypto/internal/backend/bbig/big_openssl.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_linux.go
  create mode 100644 src/crypto/internal/backend/cng_windows.go
  create mode 100644 src/crypto/internal/backend/common.go
  create mode 100644 src/crypto/internal/backend/darwin_darwin.go
- create mode 100644 src/crypto/internal/backend/fips140/cng.go
- create mode 100644 src/crypto/internal/backend/fips140/darwin.go
+ create mode 100644 src/crypto/internal/backend/fips140/cng_windows.go
+ create mode 100644 src/crypto/internal/backend/fips140/darwin_darwin.go
  create mode 100644 src/crypto/internal/backend/fips140/fips140.go
  create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl.go
+ create mode 100644 src/crypto/internal/backend/fips140/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_off.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_on.go
- create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
- create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
+ create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
+ create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/stub.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
  create mode 100644 src/crypto/internal/backend/openssl_linux.go
@@ -819,17 +819,17 @@ index 00000000000000..20251a290dc2e0
 +func Dec(b []uint) *big.Int {
 +	return nil
 +}
-diff --git a/src/crypto/internal/backend/bbig/big_cng.go b/src/crypto/internal/backend/bbig/big_cng.go
+diff --git a/src/crypto/internal/backend/bbig/big_windows.go b/src/crypto/internal/backend/bbig/big_windows.go
 new file mode 100644
 index 00000000000000..9331c34d402ba2
 --- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_cng.go
++++ b/src/crypto/internal/backend/bbig/big_windows.go
 @@ -0,0 +1,12 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && windows
++//go:build goexperiment.systemcrypto
 +
 +package bbig
 +
@@ -847,7 +847,7 @@ index 00000000000000..e8884576d05427
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && darwin
++//go:build goexperiment.systemcrypto
 +
 +package bbig
 +
@@ -855,17 +855,17 @@ index 00000000000000..e8884576d05427
 +
 +var Enc = bbig.Enc
 +var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/bbig/big_openssl.go b/src/crypto/internal/backend/bbig/big_openssl.go
+diff --git a/src/crypto/internal/backend/bbig/big_linux.go b/src/crypto/internal/backend/bbig/big_linux.go
 new file mode 100644
 index 00000000000000..51396c3db1a871
 --- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_openssl.go
++++ b/src/crypto/internal/backend/bbig/big_linux.go
 @@ -0,0 +1,12 @@
 +// Copyright 2022 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux
++//go:build goexperiment.systemcrypto
 +
 +package bbig
 +
@@ -883,7 +883,7 @@ index 00000000000000..9bc7525be1e462
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && windows
++//go:build goexperiment.systemcrypto
 +
 +// Package cng provides access to CNGCrypto implementation functions.
 +// Check the variable Enabled to find out whether CNGCrypto is available.
@@ -1379,7 +1379,7 @@ index 00000000000000..805e95c926a1a1
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && darwin
++//go:build goexperiment.systemcrypto
 +
 +// Package darwin provides access to DarwinCrypto implementation functions.
 +// Check the variable Enabled to find out whether DarwinCrypto is available.
@@ -1813,17 +1813,17 @@ index 00000000000000..805e95c926a1a1
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
 +	return xcrypto.NewChaCha20Poly1305(key)
 +}
-diff --git a/src/crypto/internal/backend/fips140/cng.go b/src/crypto/internal/backend/fips140/cng.go
+diff --git a/src/crypto/internal/backend/fips140/cng_windows.go b/src/crypto/internal/backend/fips140/cng_windows.go
 new file mode 100644
 index 00000000000000..d74cffe462b234
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/cng.go
++++ b/src/crypto/internal/backend/fips140/cng_windows.go
 @@ -0,0 +1,35 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && windows
++//go:build goexperiment.systemcrypto
 +
 +package fips140
 +
@@ -1854,17 +1854,17 @@ index 00000000000000..d74cffe462b234
 +	}
 +	return enabled != 0
 +}
-diff --git a/src/crypto/internal/backend/fips140/darwin.go b/src/crypto/internal/backend/fips140/darwin.go
+diff --git a/src/crypto/internal/backend/fips140/darwin_darwin.go b/src/crypto/internal/backend/fips140/darwin_darwin.go
 new file mode 100644
 index 00000000000000..be7c416b531e58
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/darwin.go
++++ b/src/crypto/internal/backend/fips140/darwin_darwin.go
 @@ -0,0 +1,13 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && darwin
++//go:build goexperiment.systemcrypto
 +
 +package fips140
 +
@@ -2000,17 +2000,17 @@ index 00000000000000..289d6594eac54b
 +func systemFIPSMode() bool {
 +	return false
 +}
-diff --git a/src/crypto/internal/backend/fips140/openssl.go b/src/crypto/internal/backend/fips140/openssl.go
+diff --git a/src/crypto/internal/backend/fips140/openssl_linux.go b/src/crypto/internal/backend/fips140/openssl_linux.go
 new file mode 100644
 index 00000000000000..95c93093d0b707
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl.go
++++ b/src/crypto/internal/backend/fips140/openssl_linux.go
 @@ -0,0 +1,59 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux
++//go:build goexperiment.systemcrypto
 +
 +package fips140
 +
@@ -2116,17 +2116,17 @@ index 00000000000000..d3d39fd77f98db
 +package fips140
 +
 +const isSkipFIPSCheck = true
-diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
 new file mode 100644
 index 00000000000000..ef97d994841717
 --- /dev/null
-+++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup.go
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
 @@ -0,0 +1,68 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux
++//go:build goexperiment.systemcrypto
 +
 +// opensslsetup is a package that initializes the OpenSSL library.
 +// It doesn't export any symbol, but blank importing it has the
@@ -2190,17 +2190,17 @@ index 00000000000000..ef97d994841717
 +	}
 +	return lcryptoFallback
 +}
-diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
 new file mode 100644
 index 00000000000000..7276cc2b871b85
 --- /dev/null
-+++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_test.go
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
 @@ -0,0 +1,92 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux && cgo
++//go:build goexperiment.systemcrypto && cgo
 +
 +package opensslsetup
 +
@@ -2694,7 +2694,7 @@ index 00000000000000..ccac6ce8ad0b35
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux
++//go:build goexperiment.systemcrypto
 +
 +// Package openssl provides access to OpenSSLCrypto implementation functions.
 +// Check the variable Enabled to find out whether OpenSSLCrypto is available.
@@ -3146,7 +3146,7 @@ index 00000000000000..1461a5f75b3b06
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && linux && !(cgo || 386 || amd64 || arm || arm64 || loong64 || ppc64le || riscv64 || s390x)
++//go:build goexperiment.systemcrypto && !(cgo || 386 || amd64 || arm || arm64 || loong64 || ppc64le || riscv64 || s390x)
 +
 +package crypto
 +
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 953821f37f4..246e933bf08 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -67,7 +67,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/darwin.go                      |  71 +++++++
+ src/crypto/rsa/darwin_darwin.go                |  71 +++++++
  src/crypto/rsa/fips.go                        |  84 ++++----
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
@@ -109,7 +109,7 @@ Subject: [PATCH] Use crypto backends
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
- create mode 100644 src/crypto/rsa/darwin.go
+ create mode 100644 src/crypto/rsa/darwin_darwin.go
  create mode 100644 src/crypto/tls/internal/tls13/doc.go
  create mode 100644 src/crypto/tls/internal/tls13/tls13.go
  create mode 100644 src/hash/boring_test.go
@@ -2564,17 +2564,17 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
-diff --git a/src/crypto/rsa/darwin.go b/src/crypto/rsa/darwin.go
+diff --git a/src/crypto/rsa/darwin_darwin.go b/src/crypto/rsa/darwin_darwin.go
 new file mode 100644
 index 00000000000000..bff8ac449c9a3b
 --- /dev/null
-+++ b/src/crypto/rsa/darwin.go
++++ b/src/crypto/rsa/darwin_darwin.go
 @@ -0,0 +1,71 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && darwin
++//go:build goexperiment.systemcrypto
 +
 +package rsa
 +

From 8ca082e73c31aacfe589deb0c840f0d13dea4e65 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 16:11:28 +0000
Subject: [PATCH 743/887] Update submodule to latest master (5b40e48a): Revert
 "cmd/compile: add loclist for removed DCL nodes"

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 4e693d1ec52..5b40e48a297 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 4e693d1ec52c86b262ac23f0d6cee6b60fef4fb0
+Subproject commit 5b40e48a2970734e816d2a9f2eac163a3315f3c2

From b057ef3a45ce63d8a72df7bcdfa9d933439480b0 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 25 Feb 2026 12:01:49 -0800
Subject: [PATCH 744/887] Improve platform-specific crypto filenames (#2159)

---
 ...03-Implement-crypto-internal-backend.patch | 3192 ++++++++---------
 patches/0004-Use-crypto-backends.patch        |  158 +-
 2 files changed, 1675 insertions(+), 1675 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 1034d075436..f438eb9b043 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -24,29 +24,29 @@ desired goexperiments and build tags.
  src/cmd/internal/testdir/testdir_test.go      |   7 +
  src/cmd/link/internal/ld/main.go              |   2 +-
  src/cmd/link/link_test.go                     |   8 +
+ src/crypto/internal/backend/backend_darwin.go | 438 ++++++++++++++++++
+ src/crypto/internal/backend/backend_linux.go  | 430 +++++++++++++++++
  src/crypto/internal/backend/backend_test.go   |  56 +++
+ .../internal/backend/backend_windows.go       | 438 ++++++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
- .../internal/backend/bbig/big_windows.go      |  12 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
- .../internal/backend/bbig/big_linux.go         |  12 +
- src/crypto/internal/backend/cng_windows.go    | 438 ++++++++++++++++++
+ src/crypto/internal/backend/bbig/big_linux.go |  12 +
+ .../internal/backend/bbig/big_windows.go      |  12 +
  src/crypto/internal/backend/common.go         |  46 ++
- src/crypto/internal/backend/darwin_darwin.go  | 438 ++++++++++++++++++
- .../internal/backend/fips140/cng_windows.go   |  35 ++
- .../internal/backend/fips140/darwin_darwin.go  |  13 +
  .../internal/backend/fips140/fips140.go       |  70 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
- .../internal/backend/fips140/openssl_linux.go  |  59 +++
  .../fips140/requirefips_nosystemcrypto.go     |  15 +
  .../backend/fips140/skipfipscheck_off.go      |   9 +
  .../backend/fips140/skipfipscheck_on.go       |   9 +
+ .../backend/fips140/systemfips_darwin.go      |  13 +
+ .../backend/fips140/systemfips_linux.go       |  59 +++
+ .../backend/fips140/systemfips_windows.go     |  35 ++
  .../opensslsetup/opensslsetup_linux.go        |  68 +++
- .../opensslsetup/opensslsetup_linux_test.go    |  92 ++++
+ .../opensslsetup/opensslsetup_linux_test.go   |  92 ++++
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 376 +++++++++++++++
- src/crypto/internal/backend/openssl_linux.go  | 430 +++++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
@@ -54,29 +54,29 @@ desired goexperiments and build tags.
  src/runtime/runtime_boring.go                 |   5 +
  43 files changed, 2742 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
+ create mode 100644 src/crypto/internal/backend/backend_darwin.go
+ create mode 100644 src/crypto/internal/backend/backend_linux.go
  create mode 100644 src/crypto/internal/backend/backend_test.go
+ create mode 100644 src/crypto/internal/backend/backend_windows.go
  create mode 100644 src/crypto/internal/backend/bbig/big.go
- create mode 100644 src/crypto/internal/backend/bbig/big_windows.go
  create mode 100644 src/crypto/internal/backend/bbig/big_darwin.go
  create mode 100644 src/crypto/internal/backend/bbig/big_linux.go
- create mode 100644 src/crypto/internal/backend/cng_windows.go
+ create mode 100644 src/crypto/internal/backend/bbig/big_windows.go
  create mode 100644 src/crypto/internal/backend/common.go
- create mode 100644 src/crypto/internal/backend/darwin_darwin.go
- create mode 100644 src/crypto/internal/backend/fips140/cng_windows.go
- create mode 100644 src/crypto/internal/backend/fips140/darwin_darwin.go
  create mode 100644 src/crypto/internal/backend/fips140/fips140.go
  create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
- create mode 100644 src/crypto/internal/backend/fips140/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_off.go
  create mode 100644 src/crypto/internal/backend/fips140/skipfipscheck_on.go
+ create mode 100644 src/crypto/internal/backend/fips140/systemfips_darwin.go
+ create mode 100644 src/crypto/internal/backend/fips140/systemfips_linux.go
+ create mode 100644 src/crypto/internal/backend/fips140/systemfips_windows.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
  create mode 100644 src/crypto/internal/backend/internal/opensslsetup/stub.go
  create mode 100644 src/crypto/internal/backend/nobackend.go
- create mode 100644 src/crypto/internal/backend/openssl_linux.go
  create mode 100644 src/crypto/internal/backend/stub.s
  create mode 100644 src/crypto/systemcrypto_nocgo_linux.go
 
@@ -244,7 +244,7 @@ index e4250e12de8975..feef0080cb12d6 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 4396c9de190f1f..91502c9a23f724 100644
+index 78213a7a552e1e..7314eaffa3f800 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -156,10 +156,12 @@ func (t *tester) run() {
@@ -734,150 +734,11 @@ index 19607c324ceaef..50439e47260a99 100644
  	t.Parallel()
  
  	tmpdir := t.TempDir()
-diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
-new file mode 100644
-index 00000000000000..093acd82556330
---- /dev/null
-+++ b/src/crypto/internal/backend/backend_test.go
-@@ -0,0 +1,56 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"testing"
-+)
-+
-+// Test that Unreachable panics.
-+func TestUnreachable(t *testing.T) {
-+	defer func() {
-+		if Enabled {
-+			if err := recover(); err == nil {
-+				t.Fatal("expected Unreachable to panic")
-+			}
-+		} else {
-+			if err := recover(); err != nil {
-+				t.Fatalf("expected Unreachable to be a no-op")
-+			}
-+		}
-+	}()
-+	Unreachable()
-+}
-+
-+// Test that UnreachableExceptTests does not panic (this is a test).
-+func TestUnreachableExceptTests(t *testing.T) {
-+	UnreachableExceptTests()
-+}
-+
-+func TestSupportsRSAPrivateKey(t *testing.T) {
-+	if !Enabled {
-+		t.Skip("BoringCrypto not enabled")
-+	}
-+	tests := []struct {
-+		bitLen    int
-+		numPrimes int
-+		supported bool
-+	}{
-+		{2048, 2, true},
-+		{3072, 2, true},
-+		{4096, 2, true},
-+		{2048, 3, false},
-+		{3072, 3, false},
-+		{4096, 3, false},
-+	}
-+	for _, test := range tests {
-+		t.Run("", func(t *testing.T) {
-+			supported := SupportsRSAPrivateKey(test.bitLen, test.numPrimes)
-+			if supported != test.supported {
-+				t.Errorf("SupportsRSAPrivateKey(%d, %d) = %v; want %v", test.bitLen, test.numPrimes, supported, test.supported)
-+			}
-+		})
-+	}
-+}
-diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
-new file mode 100644
-index 00000000000000..20251a290dc2e0
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big.go
-@@ -0,0 +1,17 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !goexperiment.systemcrypto
-+
-+package bbig
-+
-+import "math/big"
-+
-+func Enc(b *big.Int) []uint {
-+	return nil
-+}
-+
-+func Dec(b []uint) *big.Int {
-+	return nil
-+}
-diff --git a/src/crypto/internal/backend/bbig/big_windows.go b/src/crypto/internal/backend/bbig/big_windows.go
-new file mode 100644
-index 00000000000000..9331c34d402ba2
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_windows.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package bbig
-+
-+import "github.com/microsoft/go-crypto-winnative/cng/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
-new file mode 100644
-index 00000000000000..e8884576d05427
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_darwin.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package bbig
-+
-+import "github.com/microsoft/go-crypto-darwin/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/bbig/big_linux.go b/src/crypto/internal/backend/bbig/big_linux.go
-new file mode 100644
-index 00000000000000..51396c3db1a871
---- /dev/null
-+++ b/src/crypto/internal/backend/bbig/big_linux.go
-@@ -0,0 +1,12 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package bbig
-+
-+import "github.com/golang-fips/openssl/v2/bbig"
-+
-+var Enc = bbig.Enc
-+var Dec = bbig.Dec
-diff --git a/src/crypto/internal/backend/cng_windows.go b/src/crypto/internal/backend/cng_windows.go
+diff --git a/src/crypto/internal/backend/backend_darwin.go b/src/crypto/internal/backend/backend_darwin.go
 new file mode 100644
-index 00000000000000..9bc7525be1e462
+index 00000000000000..657e27ed74dc99
 --- /dev/null
-+++ b/src/crypto/internal/backend/cng_windows.go
++++ b/src/crypto/internal/backend/backend_darwin.go
 @@ -0,0 +1,438 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
@@ -885,9 +746,9 @@ index 00000000000000..9bc7525be1e462
 +
 +//go:build goexperiment.systemcrypto
 +
-+// Package cng provides access to CNGCrypto implementation functions.
-+// Check the variable Enabled to find out whether CNGCrypto is available.
-+// If CNGCrypto is not available, the functions in this package all panic.
++// Package darwin provides access to DarwinCrypto implementation functions.
++// Check the variable Enabled to find out whether DarwinCrypto is available.
++// If DarwinCrypto is not available, the functions in this package all panic.
 +package backend
 +
 +import (
@@ -897,15 +758,16 @@ index 00000000000000..9bc7525be1e462
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140only"
 +	"hash"
++	"io"
 +	_ "unsafe"
 +
-+	"github.com/microsoft/go-crypto-winnative/cng"
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
 +)
 +
 +func init() {
-+	// Windows is considered FIPS compliant.
++	// Darwin is considered FIPS compliant.
 +	if err := fips140.Check(func() bool { return true }); err != nil {
-+		panic("cngcrypto: " + err.Error())
++		panic("darwincrypto: " + err.Error())
 +	}
 +	sig.BoringCrypto()
 +	fips140only.BackendApprovedHash = FIPSApprovedHash
@@ -914,143 +776,133 @@ index 00000000000000..9bc7525be1e462
 +// Enabled controls whether FIPS crypto is enabled.
 +const Enabled = true
 +
-+type BigInt = cng.BigInt
++type BigInt = xcrypto.BigInt
 +
-+const RandReader = cng.RandReader
++const RandReader = xcrypto.RandReader
 +
 +func SupportsHash(h crypto.Hash) bool {
-+	return cng.SupportsHash(h)
++	return xcrypto.SupportsHash(h)
 +}
 +
 +func FIPSApprovedHash(h hash.Hash) bool {
-+	return cng.FIPSApprovedHash(h)
-+}
-+
-+func SupportsSHAKE(securityBits int) bool {
-+	return cng.SupportsSHAKE(securityBits)
++	return xcrypto.FIPSApprovedHash(h)
 +}
 +
-+func SupportsCSHAKE(securityBits int) bool {
-+	return cng.SupportsSHAKE(securityBits)
-+}
++func SupportsSHAKE(securityBits int) bool  { return false }
++func SupportsCSHAKE(securityBits int) bool { return false }
 +
 +func SupportsCurve(curve string) bool {
 +	switch curve {
-+	case "P-224", "P-256", "P-384", "P-521", "X25519":
++	case "P-256", "P-384", "P-521", "X25519":
 +		return true
 +	}
 +	return false
 +}
 +
-+func SupportsRSAOAEPLabel(label []byte) bool { return true }
-+func SupportsRSAPKCS1v15Encryption() bool    { return true }
++func SupportsRSAOAEPLabel(label []byte) bool {
++	// CommonCrypto doesn't support labels
++	// https://github.com/microsoft/go-crypto-darwin/issues/22
++	return len(label) == 0
++}
++
++func SupportsRSAPKCS1v15Encryption() bool { return true }
 +
 +func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
-+	// 0 and MD5SHA1 are special cases that are always supported for PKCS1v15 signatures.
 +	switch hash {
-+	case 0, crypto.MD5SHA1:
++	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
 +		return true
-+	default:
-+		return cng.SupportsHash(hash)
 +	}
++	return false
 +}
 +
-+type Hash = cng.Hash
-+type SHAKE = cng.SHAKE
-+
-+func NewMD5() hash.Hash        { return cng.NewMD5() }
-+func NewSHA1() hash.Hash       { return cng.NewSHA1() }
-+func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
-+func NewSHA256() hash.Hash     { return cng.NewSHA256() }
-+func NewSHA384() hash.Hash     { return cng.NewSHA384() }
-+func NewSHA512() hash.Hash     { return cng.NewSHA512() }
-+func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
-+func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
-+func NewSHA3_224() *Hash       { panic("cngcrypto: not available") }
-+func NewSHA3_256() *Hash       { return cng.NewSHA3_256() }
-+func NewSHA3_384() *Hash       { return cng.NewSHA3_384() }
-+func NewSHA3_512() *Hash       { return cng.NewSHA3_512() }
-+
-+func NewSHAKE128() *SHAKE             { return cng.NewSHAKE128() }
-+func NewSHAKE256() *SHAKE             { return cng.NewSHAKE256() }
-+func NewCSHAKE128(N, S []byte) *SHAKE { return cng.NewCSHAKE128(N, S) }
-+func NewCSHAKE256(N, S []byte) *SHAKE { return cng.NewCSHAKE256(N, S) }
-+
-+func MD5(p []byte) (sum [16]byte)         { return cng.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)        { return cng.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)      { panic("cngcrypto: not available") }
-+func SHA256(p []byte) (sum [32]byte)      { return cng.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)      { return cng.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)      { return cng.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte)  { panic("cngcrypto: not available") }
-+func SHA512_256(p []byte) (sum [32]byte)  { panic("cngcrypto: not available") }
-+func SumSHA3_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
-+func SumSHA3_256(p []byte) (sum [32]byte) { return cng.SumSHA3_256(p) }
-+func SumSHA3_384(p []byte) (sum [48]byte) { return cng.SumSHA3_384(p) }
-+func SumSHA3_512(p []byte) (sum [64]byte) { return cng.SumSHA3_512(p) }
-+
-+func SumSHAKE128(data []byte, length int) (sum []byte) { return cng.SumSHAKE128(data, length) }
-+func SumSHAKE256(data []byte, length int) (sum []byte) { return cng.SumSHAKE256(data, length) }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
-+	return cng.NewHMAC(h, key)
-+}
++type Hash = xcrypto.Hash
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewAESCipher(key)
++type SHAKE struct {
++	io.Reader
++	hash.Hash
 +}
 +
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	return cng.NewGCMTLS(c)
-+}
++func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
 +
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	return cng.NewGCMTLS13(c)
-+}
++func NewMD5() hash.Hash        { return xcrypto.NewMD5() }
++func NewSHA1() hash.Hash       { return xcrypto.NewSHA1() }
++func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA256() hash.Hash     { return xcrypto.NewSHA256() }
++func NewSHA384() hash.Hash     { return xcrypto.NewSHA384() }
++func NewSHA512() hash.Hash     { return xcrypto.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_256() *Hash       { return xcrypto.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return xcrypto.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return xcrypto.NewSHA3_512() }
 +
-+type PublicKeyECDSA = cng.PublicKeyECDSA
-+type PrivateKeyECDSA = cng.PrivateKeyECDSA
++func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
++func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
++func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
 +
-+func GenerateKeyECDSA(curve string) (X, Y, D cng.BigInt, err error) {
-+	return cng.GenerateKeyECDSA(curve)
++func MD5(p []byte) (sum [16]byte)         { return xcrypto.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return xcrypto.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)      { return xcrypto.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return xcrypto.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return xcrypto.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { return xcrypto.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return xcrypto.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return xcrypto.SumSHA3_512(p) }
++
++func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
++	return xcrypto.NewHMAC(h, key)
 +}
 +
-+func NewPrivateKeyECDSA(curve string, X, Y, D cng.BigInt) (*cng.PrivateKeyECDSA, error) {
-+	return cng.NewPrivateKeyECDSA(curve, X, Y, D)
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	return xcrypto.NewAESCipher(key)
 +}
 +
-+func NewPublicKeyECDSA(curve string, X, Y cng.BigInt) (*cng.PublicKeyECDSA, error) {
-+	return cng.NewPublicKeyECDSA(curve, X, Y)
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS(c)
 +}
 +
-+//go:linkname encodeSignature crypto/ecdsa.encodeSignature
-+func encodeSignature(r, s []byte) ([]byte, error)
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	return xcrypto.NewGCMTLS13(c)
++}
 +
-+//go:linkname parseSignature crypto/ecdsa.parseSignature
-+func parseSignature(sig []byte) (r, s []byte, err error)
++type PublicKeyECDSA = xcrypto.PublicKeyECDSA
++type PrivateKeyECDSA = xcrypto.PrivateKeyECDSA
 +
-+func SignMarshalECDSA(priv *cng.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	r, s, err := cng.SignECDSA(priv, hash)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return encodeSignature(r, s)
++func GenerateKeyECDSA(curve string) (X, Y, D xcrypto.BigInt, err error) {
++	return xcrypto.GenerateKeyECDSA(curve)
 +}
 +
-+func VerifyECDSA(pub *cng.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	rBytes, sBytes, err := parseSignature(sig)
-+	if err != nil {
-+		return false
-+	}
-+	return cng.VerifyECDSA(pub, hash, cng.BigInt(rBytes), cng.BigInt(sBytes))
++func NewPrivateKeyECDSA(curve string, X, Y, D xcrypto.BigInt) (*xcrypto.PrivateKeyECDSA, error) {
++	return xcrypto.NewPrivateKeyECDSA(curve, X, Y, D)
 +}
 +
-+func SignECDSA(priv *cng.PrivateKeyECDSA, hash []byte) (r, s cng.BigInt, err error) {
-+	return cng.SignECDSA(priv, hash)
++func NewPublicKeyECDSA(curve string, X, Y xcrypto.BigInt) (*xcrypto.PublicKeyECDSA, error) {
++	return xcrypto.NewPublicKeyECDSA(curve, X, Y)
 +}
 +
-+func VerifyECDSARaw(pub *cng.PublicKeyECDSA, hash []byte, r, s cng.BigInt) bool {
-+	return cng.VerifyECDSA(pub, hash, r, s)
++//go:linkname encodeSignature crypto/ecdsa.encodeSignature
++func encodeSignature(r, s []byte) ([]byte, error)
++
++//go:linkname parseSignature crypto/ecdsa.parseSignature
++func parseSignature(sig []byte) (r, s []byte, err error)
++
++func SignMarshalECDSA(priv *xcrypto.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return xcrypto.SignMarshalECDSA(priv, hash)
++}
++
++func VerifyECDSA(pub *xcrypto.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return xcrypto.VerifyECDSA(pub, hash, sig)
 +}
 +
 +func SupportsRSAPrivateKey(bits, primes int) bool {
@@ -1058,88 +910,107 @@ index 00000000000000..9bc7525be1e462
 +}
 +
 +func SupportsRSAPublicKey(bits int) bool {
-+	return bits >= 512 && bits%8 == 0 && bits <= 16384
++	return bits >= 1024 && bits%8 == 0 && bits <= 16384
 +}
 +
 +func SupportsRSASaltLength(sign bool, salt int) bool {
-+	if sign {
-+		return true
-+	}
-+	return salt != 0 // rsa.PSSSaltLengthAuto
++	// CommonCrypto doesn't support custom salt length
++	return salt == -1
 +}
 +
-+type PublicKeyRSA = cng.PublicKeyRSA
-+type PrivateKeyRSA = cng.PrivateKeyRSA
++type PublicKeyRSA = xcrypto.PublicKeyRSA
++type PrivateKeyRSA = xcrypto.PrivateKeyRSA
 +
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *cng.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return cng.DecryptRSAOAEP(h, priv, ciphertext, label)
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *xcrypto.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAOAEP(h, priv, ciphertext, label)
 +}
 +
-+func DecryptRSAPKCS1(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return cng.DecryptRSAPKCS1(priv, ciphertext)
++func DecryptRSAPKCS1(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSAPKCS1(priv, ciphertext)
 +}
 +
-+func DecryptRSANoPadding(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return cng.DecryptRSANoPadding(priv, ciphertext)
++func DecryptRSANoPadding(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return xcrypto.DecryptRSANoPadding(priv, ciphertext)
 +}
 +
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *cng.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return cng.EncryptRSAOAEP(h, pub, msg, label)
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *xcrypto.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAOAEP(h, pub, msg, label)
 +}
 +
-+func EncryptRSAPKCS1(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return cng.EncryptRSAPKCS1(pub, msg)
++func EncryptRSAPKCS1(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSAPKCS1(pub, msg)
 +}
 +
-+func EncryptRSANoPadding(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return cng.EncryptRSANoPadding(pub, msg)
++func EncryptRSANoPadding(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return xcrypto.EncryptRSANoPadding(pub, msg)
 +}
 +
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt, err error) {
-+	return cng.GenerateKeyRSA(bits)
++//go:linkname decodeKeyRSA crypto/rsa.decodeKey
++func decodeKeyRSA(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error)
++
++//go:linkname encodeKeyRSA crypto/rsa.encodeKey
++func encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) ([]byte, error)
++
++//go:linkname encodePublicKeyRSA crypto/rsa.encodePublicKey
++func encodePublicKeyRSA(N, E xcrypto.BigInt) ([]byte, error)
++
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error) {
++	data, err := xcrypto.GenerateKeyRSA(bits)
++	if err != nil {
++		return
++	}
++	return decodeKeyRSA(data)
 +}
 +
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt) (*cng.PrivateKeyRSA, error) {
-+	return cng.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) (*xcrypto.PrivateKeyRSA, error) {
++	encoded, err := encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPrivateKeyRSA(encoded)
 +}
 +
-+func NewPublicKeyRSA(N, E cng.BigInt) (*cng.PublicKeyRSA, error) {
-+	return cng.NewPublicKeyRSA(N, E)
++func NewPublicKeyRSA(N, E xcrypto.BigInt) (*xcrypto.PublicKeyRSA, error) {
++	encoded, err := encodePublicKeyRSA(N, E)
++	if err != nil {
++		return nil, err
++	}
++	return xcrypto.NewPublicKeyRSA(encoded)
 +}
 +
-+func SignRSAPKCS1v15(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return cng.SignRSAPKCS1v15(priv, h, hashed)
++func SignRSAPKCS1v15(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return xcrypto.SignRSAPKCS1v15(priv, h, hashed)
 +}
 +
-+func SignRSAPSS(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return cng.SignRSAPSS(priv, h, hashed, saltLen)
++func SignRSAPSS(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return xcrypto.SignRSAPSS(priv, h, hashed, saltLen)
 +}
 +
-+func VerifyRSAPKCS1v15(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return cng.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++func VerifyRSAPKCS1v15(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return xcrypto.VerifyRSAPKCS1v15(pub, h, hashed, sig)
 +}
 +
-+func VerifyRSAPSS(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return cng.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++func VerifyRSAPSS(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return xcrypto.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
 +}
 +
-+type PrivateKeyECDH = cng.PrivateKeyECDH
-+type PublicKeyECDH = cng.PublicKeyECDH
++type PrivateKeyECDH = xcrypto.PrivateKeyECDH
++type PublicKeyECDH = xcrypto.PublicKeyECDH
 +
-+func ECDH(priv *cng.PrivateKeyECDH, pub *cng.PublicKeyECDH) ([]byte, error) {
-+	return cng.ECDH(priv, pub)
++func ECDH(priv *xcrypto.PrivateKeyECDH, pub *xcrypto.PublicKeyECDH) ([]byte, error) {
++	return xcrypto.ECDH(priv, pub)
 +}
 +
-+func GenerateKeyECDH(curve string) (*cng.PrivateKeyECDH, []byte, error) {
-+	return cng.GenerateKeyECDH(curve)
++func GenerateKeyECDH(curve string) (*xcrypto.PrivateKeyECDH, []byte, error) {
++	return xcrypto.GenerateKeyECDH(curve)
 +}
 +
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*cng.PrivateKeyECDH, error) {
-+	return cng.NewPrivateKeyECDH(curve, bytes)
++func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
++	return xcrypto.NewPrivateKeyECDH(curve, bytes)
 +}
 +
-+func NewPublicKeyECDH(curve string, bytes []byte) (*cng.PublicKeyECDH, error) {
-+	return cng.NewPublicKeyECDH(curve, bytes)
++func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
++	return xcrypto.NewPublicKeyECDH(curve, bytes)
 +}
 +
 +func SupportsTLS13KDF() bool {
@@ -1151,29 +1022,31 @@ index 00000000000000..9bc7525be1e462
 +}
 +
 +func SupportsHKDF() bool {
-+	return cng.SupportsHKDF()
++	return true
 +}
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return cng.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++	return xcrypto.ExpandHKDF(h, pseudorandomKey, info, keyLength)
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return cng.ExtractHKDF(h, secret, salt)
++	return xcrypto.ExtractHKDF(h, secret, salt)
 +}
 +
-+func SupportsPBKDF2() bool { return true }
++func SupportsPBKDF2() bool {
++	return true
++}
 +
-+func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return cng.PBKDF2(password, salt, iter, keyLen, h)
++func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return xcrypto.PBKDF2(pass, salt, iter, keyLen, h)
 +}
 +
 +func SupportsTLS1PRF() bool {
-+	return true
++	return false
 +}
 +
 +func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	return cng.TLS1PRF(result, secret, label, seed, h)
++	panic("cryptobackend: not available")
 +}
 +
 +func SupportsDESCipher() bool {
@@ -1185,1940 +1058,2067 @@ index 00000000000000..9bc7525be1e462
 +}
 +
 +func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewDESCipher(key)
++	return xcrypto.NewDESCipher(key)
 +}
 +
 +func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return cng.NewTripleDESCipher(key)
++	return xcrypto.NewTripleDESCipher(key)
 +}
 +
 +func SupportsRC4() bool { return true }
 +
-+type RC4Cipher = cng.RC4Cipher
-+
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return cng.NewRC4Cipher(key) }
-+
-+func SupportsEd25519() bool { return false }
++type RC4Cipher = xcrypto.RC4Cipher
 +
-+type PublicKeyEd25519 struct{}
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return xcrypto.NewRC4Cipher(key) }
 +
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
++func SupportsEd25519() bool {
++	return true
 +}
 +
-+type PrivateKeyEd25519 struct{}
-+
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
++type PublicKeyEd25519 = xcrypto.PublicKeyEd25519
++type PrivateKeyEd25519 = xcrypto.PrivateKeyEd25519
 +
 +func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
++	return xcrypto.GenerateKeyEd25519(), nil
 +}
 +
 +func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
++	return xcrypto.NewPrivateKeyEd25519(priv)
 +}
 +
 +func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
++	return xcrypto.NewPublicKeyEd25519(pub)
 +}
 +
 +func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
++	return xcrypto.NewPrivateKeyEd25519FromSeed(seed)
 +}
 +
 +func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
++	return xcrypto.SignEd25519(priv, message)
 +}
 +
 +func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
++	return xcrypto.VerifyEd25519(pub, message, sig)
 +}
 +
-+type PrivateKeyDSA = cng.PrivateKeyDSA
-+type PublicKeyDSA = cng.PublicKeyDSA
-+
 +func SupportsDSA(l, n int) bool {
-+	// These are the only N values supported by CNG
-+	return n == 160 || n == 256
++	return false
 +}
 +
-+func GenerateParametersDSA(l, n int) (p, q, g cng.BigInt, err error) {
-+	params, err := cng.GenerateParametersDSA(l)
-+	if err != nil {
-+		return nil, nil, nil, err
-+	}
-+	return params.P, params.Q, params.G, nil
++func GenerateParametersDSA(l, n int) (p, q, g xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
-+	return cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
-+}
++type PrivateKeyDSA struct{}
++type PublicKeyDSA struct{}
 +
-+func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
-+	return cng.NewPrivateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, x, y)
++func GenerateKeyDSA(p, q, g xcrypto.BigInt) (x, y xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
-+	return cng.NewPublicKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, y)
++func NewPrivateKeyDSA(p, q, g, x, y xcrypto.BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {
-+	return cng.SignDSA(priv, hash)
++func NewPublicKeyDSA(p, q, g, y xcrypto.BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
-+	return cng.VerifyDSA(pub, hashed, r, s)
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (xcrypto.BigInt, xcrypto.BigInt, error)) (r, s xcrypto.BigInt, err error) {
++	panic("cryptobackend: not available")
++}
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
 +}
 +
 +func SupportsMLKEM768() bool {
-+	return cng.SupportsMLKEM()
++	return xcrypto.SupportsMLKEM()
 +}
 +
 +func SupportsMLKEM1024() bool {
-+	return cng.SupportsMLKEM()
++	return xcrypto.SupportsMLKEM()
 +}
 +
-+type DecapsulationKeyMLKEM768 = cng.DecapsulationKeyMLKEM768
-+type EncapsulationKeyMLKEM768 = cng.EncapsulationKeyMLKEM768
++type DecapsulationKeyMLKEM768 = xcrypto.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = xcrypto.EncapsulationKeyMLKEM768
 +
 +func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	return cng.GenerateKeyMLKEM768()
++	return xcrypto.GenerateKeyMLKEM768()
 +}
 +
 +func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	return cng.NewDecapsulationKeyMLKEM768(seed)
++	return xcrypto.NewDecapsulationKeyMLKEM768(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	return cng.NewEncapsulationKeyMLKEM768(encapsulationKey)
++	return xcrypto.NewEncapsulationKeyMLKEM768(encapsulationKey)
 +}
 +
-+type DecapsulationKeyMLKEM1024 = cng.DecapsulationKeyMLKEM1024
-+type EncapsulationKeyMLKEM1024 = cng.EncapsulationKeyMLKEM1024
++type DecapsulationKeyMLKEM1024 = xcrypto.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = xcrypto.EncapsulationKeyMLKEM1024
 +
 +func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	return cng.GenerateKeyMLKEM1024()
++	return xcrypto.GenerateKeyMLKEM1024()
 +}
 +
 +func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	return cng.NewDecapsulationKeyMLKEM1024(seed)
++	return xcrypto.NewDecapsulationKeyMLKEM1024(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	return cng.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++	return xcrypto.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
 +
 +func SupportsChaCha20Poly1305() bool {
-+	return cng.SupportsChaCha20Poly1305()
++	return true
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	return cng.NewChaCha20Poly1305(key)
-+}
-diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
-new file mode 100644
-index 00000000000000..a9682181ffa154
---- /dev/null
-+++ b/src/crypto/internal/backend/common.go
-@@ -0,0 +1,46 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+package backend
-+
-+import (
-+	"crypto/internal/boring/sig"
-+	"runtime"
-+)
-+
-+// Unreachable marks code that should be unreachable
-+// when backend is in use.
-+func Unreachable() {
-+	if Enabled {
-+		panic("cryptobackend: invalid code execution")
-+	} else {
-+		// Code that's unreachable is exactly the code
-+		// we want to detect for reporting standard Go crypto.
-+		sig.StandardCrypto()
-+	}
-+}
-+
-+// Provided by runtime.crypto_backend_runtime_arg0 to avoid os import.
-+func runtime_arg0() string
-+
-+func hasSuffix(s, t string) bool {
-+	return len(s) > len(t) && s[len(s)-len(t):] == t
-+}
-+
-+// UnreachableExceptTests marks code that should be unreachable
-+// when backend is in use. It panics.
-+func UnreachableExceptTests() {
-+	// runtime_arg0 is not supported on windows.
-+	// We are going through the same code patch on linux,
-+	// so if we are unintentionally calling an 'unreachable' function,
-+	// we will catch it there.
-+	if Enabled && runtime.GOOS != "windows" {
-+		name := runtime_arg0()
-+		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
-+		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
-+			println("cryptobackend: unexpected code execution in", name)
-+			panic("cryptobackend: invalid code execution")
-+		}
-+	}
++	return xcrypto.NewChaCha20Poly1305(key)
 +}
-diff --git a/src/crypto/internal/backend/darwin_darwin.go b/src/crypto/internal/backend/darwin_darwin.go
+diff --git a/src/crypto/internal/backend/backend_linux.go b/src/crypto/internal/backend/backend_linux.go
 new file mode 100644
-index 00000000000000..805e95c926a1a1
+index 00000000000000..a4ca780ebb0251
 --- /dev/null
-+++ b/src/crypto/internal/backend/darwin_darwin.go
-@@ -0,0 +1,438 @@
++++ b/src/crypto/internal/backend/backend_linux.go
+@@ -0,0 +1,430 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +//go:build goexperiment.systemcrypto
 +
-+// Package darwin provides access to DarwinCrypto implementation functions.
-+// Check the variable Enabled to find out whether DarwinCrypto is available.
-+// If DarwinCrypto is not available, the functions in this package all panic.
++// Package openssl provides access to OpenSSLCrypto implementation functions.
++// Check the variable Enabled to find out whether OpenSSLCrypto is available.
++// If OpenSSLCrypto is not available, the functions in this package all panic.
 +package backend
 +
 +import (
 +	"crypto"
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
++	_ "crypto/internal/backend/internal/opensslsetup"
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140only"
 +	"hash"
-+	"io"
-+	_ "unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/xcrypto"
++	"github.com/golang-fips/openssl/v2"
 +)
 +
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
++
++type BigInt = openssl.BigInt
++
 +func init() {
-+	// Darwin is considered FIPS compliant.
-+	if err := fips140.Check(func() bool { return true }); err != nil {
-+		panic("darwincrypto: " + err.Error())
++	// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
++	// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
++	// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
++	// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
++	// openssl.FIPSCapable to determine whether FIPS mode is enabled.
++	if err := fips140.Check(func() bool { return openssl.FIPSCapable() }); err != nil {
++		// This path can be reached for the following reasons:
++		// - In OpenSSL 1, the active engine doesn't support FIPS mode.
++		// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
++		// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
++		panic("opensslcrypto: " + err.Error() + ": " + openssl.VersionText())
 +	}
 +	sig.BoringCrypto()
 +	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
 +
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = xcrypto.BigInt
-+
-+const RandReader = xcrypto.RandReader
++const RandReader = openssl.RandReader
 +
 +func SupportsHash(h crypto.Hash) bool {
-+	return xcrypto.SupportsHash(h)
++	return openssl.SupportsHash(h)
 +}
 +
 +func FIPSApprovedHash(h hash.Hash) bool {
-+	return xcrypto.FIPSApprovedHash(h)
++	return openssl.FIPSApprovedHash(h)
 +}
 +
-+func SupportsSHAKE(securityBits int) bool  { return false }
-+func SupportsCSHAKE(securityBits int) bool { return false }
++func SupportsSHAKE(securityBits int) bool {
++	return openssl.SupportsSHAKE(securityBits)
++}
 +
-+func SupportsCurve(curve string) bool {
-+	switch curve {
-+	case "P-256", "P-384", "P-521", "X25519":
-+		return true
-+	}
-+	return false
++func SupportsCSHAKE(securityBits int) bool {
++	return openssl.SupportsCSHAKE(securityBits)
 +}
 +
-+func SupportsRSAOAEPLabel(label []byte) bool {
-+	// CommonCrypto doesn't support labels
-+	// https://github.com/microsoft/go-crypto-darwin/issues/22
-+	return len(label) == 0
++func SupportsCurve(curve string) bool {
++	return openssl.SupportsCurve(curve)
 +}
 +
-+func SupportsRSAPKCS1v15Encryption() bool { return true }
++func SupportsRSAOAEPLabel(label []byte) bool { return true }
++
++func SupportsRSAPKCS1v15Encryption() bool {
++	return openssl.SupportsRSAPKCS1v15Encryption()
++}
 +
 +func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
-+	switch hash {
-+	case crypto.SHA1, crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512, 0:
-+		return true
-+	}
-+	return false
++	return openssl.SupportsRSAPKCS1v15Signature(hash)
 +}
 +
-+type Hash = xcrypto.Hash
++type Hash = openssl.Hash
++type SHAKE = openssl.SHAKE
 +
-+type SHAKE struct {
-+	io.Reader
-+	hash.Hash
-+}
++func NewMD5() hash.Hash        { return openssl.NewMD5() }
++func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
++func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
++func NewSHA256() hash.Hash     { return openssl.NewSHA256() }
++func NewSHA384() hash.Hash     { return openssl.NewSHA384() }
++func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
++func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
++func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
++func NewSHA3_224() *Hash       { return openssl.NewSHA3_224() }
++func NewSHA3_256() *Hash       { return openssl.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return openssl.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return openssl.NewSHA3_512() }
 +
-+func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
-+func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
-+func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++func NewSHAKE128() *SHAKE             { return openssl.NewSHAKE128() }
++func NewSHAKE256() *SHAKE             { return openssl.NewSHAKE256() }
++func NewCSHAKE128(N, S []byte) *SHAKE { return openssl.NewCSHAKE128(N, S) }
++func NewCSHAKE256(N, S []byte) *SHAKE { return openssl.NewCSHAKE256(N, S) }
 +
-+func NewMD5() hash.Hash        { return xcrypto.NewMD5() }
-+func NewSHA1() hash.Hash       { return xcrypto.NewSHA1() }
-+func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA256() hash.Hash     { return xcrypto.NewSHA256() }
-+func NewSHA384() hash.Hash     { return xcrypto.NewSHA384() }
-+func NewSHA512() hash.Hash     { return xcrypto.NewSHA512() }
-+func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
-+func NewSHA3_256() *Hash       { return xcrypto.NewSHA3_256() }
-+func NewSHA3_384() *Hash       { return xcrypto.NewSHA3_384() }
-+func NewSHA3_512() *Hash       { return xcrypto.NewSHA3_512() }
++func MD5(p []byte) (sum [16]byte)         { return openssl.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return openssl.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { return openssl.SHA224(p) }
++func SHA256(p []byte) (sum [32]byte)      { return openssl.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return openssl.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return openssl.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { return openssl.SHA512_224(p) }
++func SHA512_256(p []byte) (sum [32]byte)  { return openssl.SHA512_256(p) }
++func SumSHA3_224(p []byte) (sum [28]byte) { return openssl.SumSHA3_224(p) }
++func SumSHA3_256(p []byte) (sum [32]byte) { return openssl.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return openssl.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return openssl.SumSHA3_512(p) }
 +
-+func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
-+func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
-+func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
-+func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++func SumSHAKE128(data []byte, length int) (sum []byte) { return openssl.SumSHAKE128(data, length) }
++func SumSHAKE256(data []byte, length int) (sum []byte) { return openssl.SumSHAKE256(data, length) }
 +
-+func MD5(p []byte) (sum [16]byte)         { return xcrypto.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)        { return xcrypto.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte)      { return xcrypto.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)      { return xcrypto.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)      { return xcrypto.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
-+func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SumSHA3_256(p []byte) (sum [32]byte) { return xcrypto.SumSHA3_256(p) }
-+func SumSHA3_384(p []byte) (sum [48]byte) { return xcrypto.SumSHA3_384(p) }
-+func SumSHA3_512(p []byte) (sum [64]byte) { return xcrypto.SumSHA3_512(p) }
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
 +
-+func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
-+func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++func NewAESCipher(key []byte) (cipher.Block, error)   { return openssl.NewAESCipher(key) }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return openssl.NewGCMTLS(c) }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return openssl.NewGCMTLS13(c) }
 +
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
-+	return xcrypto.NewHMAC(h, key)
++type PublicKeyECDSA = openssl.PublicKeyECDSA
++type PrivateKeyECDSA = openssl.PrivateKeyECDSA
++
++func GenerateKeyECDSA(curve string) (X, Y, D openssl.BigInt, err error) {
++	return openssl.GenerateKeyECDSA(curve)
 +}
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewAESCipher(key)
++func NewPrivateKeyECDSA(curve string, X, Y, D openssl.BigInt) (*openssl.PrivateKeyECDSA, error) {
++	return openssl.NewPrivateKeyECDSA(curve, X, Y, D)
 +}
 +
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	return xcrypto.NewGCMTLS(c)
-+}
-+
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	return xcrypto.NewGCMTLS13(c)
-+}
-+
-+type PublicKeyECDSA = xcrypto.PublicKeyECDSA
-+type PrivateKeyECDSA = xcrypto.PrivateKeyECDSA
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D xcrypto.BigInt, err error) {
-+	return xcrypto.GenerateKeyECDSA(curve)
-+}
-+
-+func NewPrivateKeyECDSA(curve string, X, Y, D xcrypto.BigInt) (*xcrypto.PrivateKeyECDSA, error) {
-+	return xcrypto.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
-+
-+func NewPublicKeyECDSA(curve string, X, Y xcrypto.BigInt) (*xcrypto.PublicKeyECDSA, error) {
-+	return xcrypto.NewPublicKeyECDSA(curve, X, Y)
++func NewPublicKeyECDSA(curve string, X, Y openssl.BigInt) (*openssl.PublicKeyECDSA, error) {
++	return openssl.NewPublicKeyECDSA(curve, X, Y)
 +}
 +
-+//go:linkname encodeSignature crypto/ecdsa.encodeSignature
-+func encodeSignature(r, s []byte) ([]byte, error)
-+
-+//go:linkname parseSignature crypto/ecdsa.parseSignature
-+func parseSignature(sig []byte) (r, s []byte, err error)
-+
-+func SignMarshalECDSA(priv *xcrypto.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return xcrypto.SignMarshalECDSA(priv, hash)
++func SignMarshalECDSA(priv *openssl.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return openssl.SignMarshalECDSA(priv, hash)
 +}
 +
-+func VerifyECDSA(pub *xcrypto.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return xcrypto.VerifyECDSA(pub, hash, sig)
++func VerifyECDSA(pub *openssl.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return openssl.VerifyECDSA(pub, hash, sig)
 +}
 +
 +func SupportsRSAPrivateKey(bits, primes int) bool {
++	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
++	// but SCOSSL only supports 2-prime RSA keys.
++	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
++	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
++	// Given the above reasons, we only support what SCOSSL supports.
 +	return primes == 2 && SupportsRSAPublicKey(bits)
 +}
 +
 +func SupportsRSAPublicKey(bits int) bool {
-+	return bits >= 1024 && bits%8 == 0 && bits <= 16384
++	min := 1024
++	if fips140.Enabled() {
++		// The built-in OpenSSL 3 FIPS provider requires at least 2048 bits for FIPS compliance.
++		min = 2048
++	}
++	return bits >= min && bits%8 == 0 && bits <= 16384
 +}
 +
 +func SupportsRSASaltLength(sign bool, salt int) bool {
-+	// CommonCrypto doesn't support custom salt length
-+	return salt == -1
++	return true
 +}
 +
-+type PublicKeyRSA = xcrypto.PublicKeyRSA
-+type PrivateKeyRSA = xcrypto.PrivateKeyRSA
++type PublicKeyRSA = openssl.PublicKeyRSA
++type PrivateKeyRSA = openssl.PrivateKeyRSA
 +
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *xcrypto.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSAOAEP(h, priv, ciphertext, label)
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *openssl.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return openssl.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
 +}
 +
-+func DecryptRSAPKCS1(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSAPKCS1(priv, ciphertext)
++func DecryptRSAPKCS1(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return openssl.DecryptRSAPKCS1(priv, ciphertext)
 +}
 +
-+func DecryptRSANoPadding(priv *xcrypto.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return xcrypto.DecryptRSANoPadding(priv, ciphertext)
++func DecryptRSANoPadding(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return openssl.DecryptRSANoPadding(priv, ciphertext)
 +}
 +
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *xcrypto.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSAOAEP(h, pub, msg, label)
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *openssl.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return openssl.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
 +}
 +
-+func EncryptRSAPKCS1(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSAPKCS1(pub, msg)
++func EncryptRSAPKCS1(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return openssl.EncryptRSAPKCS1(pub, msg)
 +}
 +
-+func EncryptRSANoPadding(pub *xcrypto.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return xcrypto.EncryptRSANoPadding(pub, msg)
++func EncryptRSANoPadding(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return openssl.EncryptRSANoPadding(pub, msg)
 +}
 +
-+//go:linkname decodeKeyRSA crypto/rsa.decodeKey
-+func decodeKeyRSA(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error)
-+
-+//go:linkname encodeKeyRSA crypto/rsa.encodeKey
-+func encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) ([]byte, error)
-+
-+//go:linkname encodePublicKeyRSA crypto/rsa.encodePublicKey
-+func encodePublicKeyRSA(N, E xcrypto.BigInt) ([]byte, error)
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt, err error) {
-+	data, err := xcrypto.GenerateKeyRSA(bits)
-+	if err != nil {
-+		return
-+	}
-+	return decodeKeyRSA(data)
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt, err error) {
++	return openssl.GenerateKeyRSA(bits)
 +}
 +
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv xcrypto.BigInt) (*xcrypto.PrivateKeyRSA, error) {
-+	encoded, err := encodeKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return xcrypto.NewPrivateKeyRSA(encoded)
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt) (*openssl.PrivateKeyRSA, error) {
++	return openssl.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
 +}
 +
-+func NewPublicKeyRSA(N, E xcrypto.BigInt) (*xcrypto.PublicKeyRSA, error) {
-+	encoded, err := encodePublicKeyRSA(N, E)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return xcrypto.NewPublicKeyRSA(encoded)
++func NewPublicKeyRSA(N, E openssl.BigInt) (*openssl.PublicKeyRSA, error) {
++	return openssl.NewPublicKeyRSA(N, E)
 +}
 +
-+func SignRSAPKCS1v15(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return xcrypto.SignRSAPKCS1v15(priv, h, hashed)
++func SignRSAPKCS1v15(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return openssl.SignRSAPKCS1v15(priv, h, hashed)
 +}
 +
-+func SignRSAPSS(priv *xcrypto.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return xcrypto.SignRSAPSS(priv, h, hashed, saltLen)
++func SignRSAPSS(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return openssl.SignRSAPSS(priv, h, hashed, saltLen)
 +}
 +
-+func VerifyRSAPKCS1v15(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return xcrypto.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++func VerifyRSAPKCS1v15(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return openssl.VerifyRSAPKCS1v15(pub, h, hashed, sig)
 +}
 +
-+func VerifyRSAPSS(pub *xcrypto.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return xcrypto.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++func VerifyRSAPSS(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return openssl.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
 +}
 +
-+type PrivateKeyECDH = xcrypto.PrivateKeyECDH
-+type PublicKeyECDH = xcrypto.PublicKeyECDH
++type PublicKeyECDH = openssl.PublicKeyECDH
++type PrivateKeyECDH = openssl.PrivateKeyECDH
 +
-+func ECDH(priv *xcrypto.PrivateKeyECDH, pub *xcrypto.PublicKeyECDH) ([]byte, error) {
-+	return xcrypto.ECDH(priv, pub)
++func ECDH(priv *openssl.PrivateKeyECDH, pub *openssl.PublicKeyECDH) ([]byte, error) {
++	return openssl.ECDH(priv, pub)
 +}
 +
-+func GenerateKeyECDH(curve string) (*xcrypto.PrivateKeyECDH, []byte, error) {
-+	return xcrypto.GenerateKeyECDH(curve)
++func GenerateKeyECDH(curve string) (*openssl.PrivateKeyECDH, []byte, error) {
++	return openssl.GenerateKeyECDH(curve)
 +}
 +
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*xcrypto.PrivateKeyECDH, error) {
-+	return xcrypto.NewPrivateKeyECDH(curve, bytes)
++func NewPrivateKeyECDH(curve string, bytes []byte) (*openssl.PrivateKeyECDH, error) {
++	return openssl.NewPrivateKeyECDH(curve, bytes)
 +}
 +
-+func NewPublicKeyECDH(curve string, bytes []byte) (*xcrypto.PublicKeyECDH, error) {
-+	return xcrypto.NewPublicKeyECDH(curve, bytes)
++func NewPublicKeyECDH(curve string, bytes []byte) (*openssl.PublicKeyECDH, error) {
++	return openssl.NewPublicKeyECDH(curve, bytes)
 +}
 +
 +func SupportsTLS13KDF() bool {
-+	return false
++	return openssl.SupportsTLS13KDF()
 +}
 +
 +func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
++	return openssl.ExpandTLS13KDF(h, pseudorandomKey, label, context, keyLength)
 +}
 +
 +func SupportsHKDF() bool {
-+	return true
++	return openssl.SupportsHKDF()
 +}
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return xcrypto.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return xcrypto.ExtractHKDF(h, secret, salt)
++	return openssl.ExtractHKDF(h, secret, salt)
 +}
 +
 +func SupportsPBKDF2() bool {
-+	return true
++	return openssl.SupportsPBKDF2()
 +}
 +
 +func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return xcrypto.PBKDF2(pass, salt, iter, keyLen, h)
++	return openssl.PBKDF2(pass, salt, iter, keyLen, h)
 +}
 +
 +func SupportsTLS1PRF() bool {
-+	return false
++	return openssl.SupportsTLS1PRF()
 +}
 +
 +func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
++	return openssl.TLS1PRF(result, secret, label, seed, h)
 +}
 +
 +func SupportsDESCipher() bool {
-+	return true
++	return openssl.SupportsDESCipher()
 +}
 +
 +func SupportsTripleDESCipher() bool {
-+	return true
++	return openssl.SupportsTripleDESCipher()
 +}
 +
 +func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewDESCipher(key)
++	return openssl.NewDESCipher(key)
 +}
 +
 +func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return xcrypto.NewTripleDESCipher(key)
++	return openssl.NewTripleDESCipher(key)
 +}
 +
-+func SupportsRC4() bool { return true }
++func SupportsRC4() bool {
++	return openssl.SupportsRC4()
++}
 +
-+type RC4Cipher = xcrypto.RC4Cipher
++type RC4Cipher = openssl.RC4Cipher
 +
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return xcrypto.NewRC4Cipher(key) }
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return openssl.NewRC4Cipher(key) }
 +
-+func SupportsEd25519() bool {
-+	return true
-+}
++func SupportsEd25519() bool { return openssl.SupportsEd25519() }
 +
-+type PublicKeyEd25519 = xcrypto.PublicKeyEd25519
-+type PrivateKeyEd25519 = xcrypto.PrivateKeyEd25519
++type PublicKeyEd25519 = *openssl.PublicKeyEd25519
++type PrivateKeyEd25519 = *openssl.PrivateKeyEd25519
 +
 +func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	return xcrypto.GenerateKeyEd25519(), nil
++	return openssl.GenerateKeyEd25519()
++}
++
++// Deprecated: use NewPrivateKeyEd25519 instead.
++func NewPrivateKeyEd25119(priv []byte) (PrivateKeyEd25519, error) {
++	return openssl.NewPrivateKeyEd25519(priv)
++}
++
++// Deprecated: use NewPublicKeyEd25519 instead.
++func NewPublicKeyEd25119(pub []byte) (PublicKeyEd25519, error) {
++	return openssl.NewPublicKeyEd25519(pub)
 +}
 +
 +func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	return xcrypto.NewPrivateKeyEd25519(priv)
++	return openssl.NewPrivateKeyEd25519(priv)
 +}
 +
 +func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	return xcrypto.NewPublicKeyEd25519(pub)
++	return openssl.NewPublicKeyEd25519(pub)
 +}
 +
 +func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	return xcrypto.NewPrivateKeyEd25519FromSeed(seed)
++	return openssl.NewPrivateKeyEd25519FromSeed(seed)
 +}
 +
 +func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	return xcrypto.SignEd25519(priv, message)
++	return openssl.SignEd25519(priv, message)
 +}
 +
 +func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	return xcrypto.VerifyEd25519(pub, message, sig)
++	return openssl.VerifyEd25519(pub, message, sig)
 +}
 +
++type PublicKeyDSA = openssl.PublicKeyDSA
++type PrivateKeyDSA = openssl.PrivateKeyDSA
++
 +func SupportsDSA(l, n int) bool {
-+	return false
++	return openssl.SupportsDSA()
 +}
 +
-+func GenerateParametersDSA(l, n int) (p, q, g xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
++func GenerateParametersDSA(l, n int) (p, q, g openssl.BigInt, err error) {
++	params, err := openssl.GenerateParametersDSA(l, n)
++	return params.P, params.Q, params.G, err
 +}
 +
-+type PrivateKeyDSA struct{}
-+type PublicKeyDSA struct{}
-+
-+func GenerateKeyDSA(p, q, g xcrypto.BigInt) (x, y xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
++func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
++	return openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
 +}
 +
-+func NewPrivateKeyDSA(p, q, g, x, y xcrypto.BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
++func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
++	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, x, y)
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y xcrypto.BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
++func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
++	return openssl.NewPublicKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, y)
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (xcrypto.BigInt, xcrypto.BigInt, error)) (r, s xcrypto.BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
++	sig, err := openssl.SignDSA(priv, hash)
++	if err != nil {
++		return nil, nil, err
++	}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s xcrypto.BigInt, encodeSignature func(r, s xcrypto.BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
++	r, s, err = parseSignature(sig)
++	if err != nil {
++		return nil, nil, err
++	}
 +
-+func SupportsMLKEM768() bool {
-+	return xcrypto.SupportsMLKEM()
++	return openssl.BigInt(r), openssl.BigInt(s), nil
 +}
 +
-+func SupportsMLKEM1024() bool {
-+	return xcrypto.SupportsMLKEM()
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s openssl.BigInt) ([]byte, error)) bool {
++	sig, err := encodeSignature(r, s)
++	if err != nil {
++		return false
++	}
++
++	return openssl.VerifyDSA(pub, hashed, sig)
 +}
 +
-+type DecapsulationKeyMLKEM768 = xcrypto.DecapsulationKeyMLKEM768
-+type EncapsulationKeyMLKEM768 = xcrypto.EncapsulationKeyMLKEM768
++func SupportsMLKEM768() bool {
++	return openssl.SupportsMLKEM768()
++}
++
++func SupportsMLKEM1024() bool {
++	return openssl.SupportsMLKEM1024()
++}
++
++type DecapsulationKeyMLKEM768 = openssl.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = openssl.EncapsulationKeyMLKEM768
 +
 +func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	return xcrypto.GenerateKeyMLKEM768()
++	return openssl.GenerateKeyMLKEM768()
 +}
 +
 +func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	return xcrypto.NewDecapsulationKeyMLKEM768(seed)
++	return openssl.NewDecapsulationKeyMLKEM768(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	return xcrypto.NewEncapsulationKeyMLKEM768(encapsulationKey)
++	return openssl.NewEncapsulationKeyMLKEM768(encapsulationKey)
 +}
 +
-+type DecapsulationKeyMLKEM1024 = xcrypto.DecapsulationKeyMLKEM1024
-+type EncapsulationKeyMLKEM1024 = xcrypto.EncapsulationKeyMLKEM1024
++type DecapsulationKeyMLKEM1024 = openssl.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = openssl.EncapsulationKeyMLKEM1024
 +
 +func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	return xcrypto.GenerateKeyMLKEM1024()
++	return openssl.GenerateKeyMLKEM1024()
 +}
 +
 +func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	return xcrypto.NewDecapsulationKeyMLKEM1024(seed)
++	return openssl.NewDecapsulationKeyMLKEM1024(seed)
 +}
 +
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	return xcrypto.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++	return openssl.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
 +
 +func SupportsChaCha20Poly1305() bool {
-+	return true
++	return openssl.SupportsChaCha20Poly1305()
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	return xcrypto.NewChaCha20Poly1305(key)
++	return openssl.NewChaCha20Poly1305(key)
 +}
-diff --git a/src/crypto/internal/backend/fips140/cng_windows.go b/src/crypto/internal/backend/fips140/cng_windows.go
+diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
 new file mode 100644
-index 00000000000000..d74cffe462b234
+index 00000000000000..093acd82556330
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/cng_windows.go
-@@ -0,0 +1,35 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
++++ b/src/crypto/internal/backend/backend_test.go
+@@ -0,0 +1,56 @@
++// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto
-+
-+package fips140
++package backend
 +
 +import (
-+	"internal/syscall/windows/sysdll"
-+	"syscall"
-+	"unsafe"
++	"testing"
 +)
 +
-+const backendEnabled = true
-+
-+// Don't use github.com/microsoft/go-crypto-winnative here.
-+// The fips140 package should have minimal dependencies.
-+// Also, don't directly query the system FIPS mode from the registry,
-+// there are some no-longer documented legacy entries that can enable FIPS mode,
-+// and BCryptGetFipsAlgorithmMode supports them all.
-+var (
-+	bcrypt = syscall.MustLoadDLL(sysdll.Add("bcrypt.dll"))
++// Test that Unreachable panics.
++func TestUnreachable(t *testing.T) {
++	defer func() {
++		if Enabled {
++			if err := recover(); err == nil {
++				t.Fatal("expected Unreachable to panic")
++			}
++		} else {
++			if err := recover(); err != nil {
++				t.Fatalf("expected Unreachable to be a no-op")
++			}
++		}
++	}()
++	Unreachable()
++}
 +
-+	bcryptGetFipsAlgorithmMode = bcrypt.MustFindProc("BCryptGetFipsAlgorithmMode")
-+)
++// Test that UnreachableExceptTests does not panic (this is a test).
++func TestUnreachableExceptTests(t *testing.T) {
++	UnreachableExceptTests()
++}
 +
-+func systemFIPSMode() bool {
-+	var enabled uint32
-+	ret, _, _ := bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
-+	if ret != 0 {
-+		return false
++func TestSupportsRSAPrivateKey(t *testing.T) {
++	if !Enabled {
++		t.Skip("BoringCrypto not enabled")
++	}
++	tests := []struct {
++		bitLen    int
++		numPrimes int
++		supported bool
++	}{
++		{2048, 2, true},
++		{3072, 2, true},
++		{4096, 2, true},
++		{2048, 3, false},
++		{3072, 3, false},
++		{4096, 3, false},
++	}
++	for _, test := range tests {
++		t.Run("", func(t *testing.T) {
++			supported := SupportsRSAPrivateKey(test.bitLen, test.numPrimes)
++			if supported != test.supported {
++				t.Errorf("SupportsRSAPrivateKey(%d, %d) = %v; want %v", test.bitLen, test.numPrimes, supported, test.supported)
++			}
++		})
 +	}
-+	return enabled != 0
 +}
-diff --git a/src/crypto/internal/backend/fips140/darwin_darwin.go b/src/crypto/internal/backend/fips140/darwin_darwin.go
+diff --git a/src/crypto/internal/backend/backend_windows.go b/src/crypto/internal/backend/backend_windows.go
 new file mode 100644
-index 00000000000000..be7c416b531e58
+index 00000000000000..26f0e5d79f0588
 --- /dev/null
-+++ b/src/crypto/internal/backend/fips140/darwin_darwin.go
-@@ -0,0 +1,13 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
++++ b/src/crypto/internal/backend/backend_windows.go
+@@ -0,0 +1,438 @@
++// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +//go:build goexperiment.systemcrypto
 +
-+package fips140
++// Package cng provides access to CNGCrypto implementation functions.
++// Check the variable Enabled to find out whether CNGCrypto is available.
++// If CNGCrypto is not available, the functions in this package all panic.
++package backend
 +
-+const backendEnabled = true
++import (
++	"crypto"
++	"crypto/cipher"
++	"crypto/internal/backend/fips140"
++	"crypto/internal/boring/sig"
++	"crypto/internal/fips140only"
++	"hash"
++	_ "unsafe"
 +
-+func systemFIPSMode() bool {
-+	return false
++	"github.com/microsoft/go-crypto-winnative/cng"
++)
++
++func init() {
++	// Windows is considered FIPS compliant.
++	if err := fips140.Check(func() bool { return true }); err != nil {
++		panic("cngcrypto: " + err.Error())
++	}
++	sig.BoringCrypto()
++	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
-diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
-new file mode 100644
-index 00000000000000..1bf7c3b7d63da8
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,70 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+package fips140
++// Enabled controls whether FIPS crypto is enabled.
++const Enabled = true
 +
-+import (
-+	"errors"
-+	"internal/godebug"
-+	"runtime"
-+	"syscall"
-+)
++type BigInt = cng.BigInt
 +
-+var fips140GODEBUG = godebug.New("fips140")
++const RandReader = cng.RandReader
 +
-+// Enabled reports whether FIPS 140 mode is enabled by using GODEBUG, GOFIPS, GOLANG_FIPS,
-+// the 'requirefips' build tag, or any other platform-specific mechanism.
-+func Enabled() bool {
-+	return enabled
++func SupportsHash(h crypto.Hash) bool {
++	return cng.SupportsHash(h)
 +}
 +
-+var enabled bool
++func FIPSApprovedHash(h hash.Hash) bool {
++	return cng.FIPSApprovedHash(h)
++}
 +
-+// message is a human-readable message about how [Enabled] was set.
-+var message string
++func SupportsSHAKE(securityBits int) bool {
++	return cng.SupportsSHAKE(securityBits)
++}
 +
-+func init() {
-+	// TODO: Decide which environment variable to use.
-+	// See https://github.com/microsoft/go/issues/397.
-+	var ok bool
-+	value := fips140GODEBUG.Value()
-+	if value == "on" || value == "only" || value == "debug" {
-+		message = "environment variable GODEBUG=fips140=" + value
-+		value = "1"
-+	} else if value, ok = syscall.Getenv("GOFIPS"); ok {
-+		message = "environment variable GOFIPS"
-+	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
-+		message = "environment variable GOLANG_FIPS"
-+	} else if systemFIPSMode() {
-+		message = "system FIPS mode"
-+		value = "1"
-+	}
-+	enabled = value == "1"
-+	if isRequireFIPS {
-+		if isSkipFIPSCheck {
-+			panic("the 'requirefips' build tag is enabled, but it conflicts " +
-+				"with the 'ms_skipfipscheck' build tag")
-+		}
-+		message = "requirefips tag set"
-+		enabled = true
-+	}
++func SupportsCSHAKE(securityBits int) bool {
++	return cng.SupportsSHAKE(securityBits)
 +}
 +
-+// Check checks whether fips mode, as returned by fips(),
-+// is valid given the current settings.
-+func Check(fips func() bool) error {
-+	if isSkipFIPSCheck || !enabled {
-+		return nil
-+	}
-+	if !backendEnabled {
-+		if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
-+			return errors.New("FIPS mode requested (" + message + ") but no crypto backend is supported on " + runtime.GOOS)
-+		}
-+		return errors.New("FIPS mode requested (" + message + ") but no supported crypto backend is enabled")
-+	}
-+	if !fips() {
-+		return errors.New("FIPS mode requested (" + message + ") but not available")
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-224", "P-256", "P-384", "P-521", "X25519":
++		return true
 +	}
-+	return nil
++	return false
 +}
-diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
-new file mode 100644
-index 00000000000000..b33d08c84e2dae
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/isrequirefips.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+//go:build requirefips
++func SupportsRSAOAEPLabel(label []byte) bool { return true }
++func SupportsRSAPKCS1v15Encryption() bool    { return true }
 +
-+package fips140
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
++	// 0 and MD5SHA1 are special cases that are always supported for PKCS1v15 signatures.
++	switch hash {
++	case 0, crypto.MD5SHA1:
++		return true
++	default:
++		return cng.SupportsHash(hash)
++	}
++}
 +
-+const isRequireFIPS = true
-\ No newline at end of file
-diff --git a/src/crypto/internal/backend/fips140/norequirefips.go b/src/crypto/internal/backend/fips140/norequirefips.go
-new file mode 100644
-index 00000000000000..6f01b9a3524dee
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/norequirefips.go
-@@ -0,0 +1,9 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++type Hash = cng.Hash
++type SHAKE = cng.SHAKE
 +
-+//go:build !requirefips
++func NewMD5() hash.Hash        { return cng.NewMD5() }
++func NewSHA1() hash.Hash       { return cng.NewSHA1() }
++func NewSHA224() hash.Hash     { panic("cngcrypto: not available") }
++func NewSHA256() hash.Hash     { return cng.NewSHA256() }
++func NewSHA384() hash.Hash     { return cng.NewSHA384() }
++func NewSHA512() hash.Hash     { return cng.NewSHA512() }
++func NewSHA512_224() hash.Hash { panic("cngcrypto: not available") }
++func NewSHA512_256() hash.Hash { panic("cngcrypto: not available") }
++func NewSHA3_224() *Hash       { panic("cngcrypto: not available") }
++func NewSHA3_256() *Hash       { return cng.NewSHA3_256() }
++func NewSHA3_384() *Hash       { return cng.NewSHA3_384() }
++func NewSHA3_512() *Hash       { return cng.NewSHA3_512() }
 +
-+package fips140
++func NewSHAKE128() *SHAKE             { return cng.NewSHAKE128() }
++func NewSHAKE256() *SHAKE             { return cng.NewSHAKE256() }
++func NewCSHAKE128(N, S []byte) *SHAKE { return cng.NewCSHAKE128(N, S) }
++func NewCSHAKE256(N, S []byte) *SHAKE { return cng.NewCSHAKE256(N, S) }
 +
-+const isRequireFIPS = false
-\ No newline at end of file
-diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
-new file mode 100644
-index 00000000000000..289d6594eac54b
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
-@@ -0,0 +1,13 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func MD5(p []byte) (sum [16]byte)         { return cng.MD5(p) }
++func SHA1(p []byte) (sum [20]byte)        { return cng.SHA1(p) }
++func SHA224(p []byte) (sum [28]byte)      { panic("cngcrypto: not available") }
++func SHA256(p []byte) (sum [32]byte)      { return cng.SHA256(p) }
++func SHA384(p []byte) (sum [48]byte)      { return cng.SHA384(p) }
++func SHA512(p []byte) (sum [64]byte)      { return cng.SHA512(p) }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cngcrypto: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cngcrypto: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cngcrypto: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { return cng.SumSHA3_256(p) }
++func SumSHA3_384(p []byte) (sum [48]byte) { return cng.SumSHA3_384(p) }
++func SumSHA3_512(p []byte) (sum [64]byte) { return cng.SumSHA3_512(p) }
 +
-+//go:build !goexperiment.systemcrypto
++func SumSHAKE128(data []byte, length int) (sum []byte) { return cng.SumSHAKE128(data, length) }
++func SumSHAKE256(data []byte, length int) (sum []byte) { return cng.SumSHAKE256(data, length) }
 +
-+package fips140
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash {
++	return cng.NewHMAC(h, key)
++}
 +
-+const backendEnabled = false
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewAESCipher(key)
++}
 +
-+func systemFIPSMode() bool {
-+	return false
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	return cng.NewGCMTLS(c)
 +}
-diff --git a/src/crypto/internal/backend/fips140/openssl_linux.go b/src/crypto/internal/backend/fips140/openssl_linux.go
-new file mode 100644
-index 00000000000000..95c93093d0b707
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/openssl_linux.go
-@@ -0,0 +1,59 @@
-+// Copyright 2024 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	return cng.NewGCMTLS13(c)
++}
 +
-+package fips140
++type PublicKeyECDSA = cng.PublicKeyECDSA
++type PrivateKeyECDSA = cng.PrivateKeyECDSA
 +
-+import (
-+	_ "crypto/internal/backend/internal/opensslsetup"
-+	"syscall"
++func GenerateKeyECDSA(curve string) (X, Y, D cng.BigInt, err error) {
++	return cng.GenerateKeyECDSA(curve)
++}
 +
-+	"github.com/golang-fips/openssl/v2/osslsetup"
-+)
++func NewPrivateKeyECDSA(curve string, X, Y, D cng.BigInt) (*cng.PrivateKeyECDSA, error) {
++	return cng.NewPrivateKeyECDSA(curve, X, Y, D)
++}
 +
-+const backendEnabled = true
++func NewPublicKeyECDSA(curve string, X, Y cng.BigInt) (*cng.PublicKeyECDSA, error) {
++	return cng.NewPublicKeyECDSA(curve, X, Y)
++}
 +
-+// systemFIPSMode reports whether the system is in FIPS mode.
-+// It first checks the kernel, and if that is not available, it checks the
-+// OpenSSL library.
-+func systemFIPSMode() bool {
-+	if kernelFIPSMode() {
-+		return true
++//go:linkname encodeSignature crypto/ecdsa.encodeSignature
++func encodeSignature(r, s []byte) ([]byte, error)
++
++//go:linkname parseSignature crypto/ecdsa.parseSignature
++func parseSignature(sig []byte) (r, s []byte, err error)
++
++func SignMarshalECDSA(priv *cng.PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	r, s, err := cng.SignECDSA(priv, hash)
++	if err != nil {
++		return nil, err
 +	}
-+	return osslsetup.FIPS()
++	return encodeSignature(r, s)
 +}
 +
-+// kernelFIPSMode reports whether the kernel is in FIPS mode.
-+func kernelFIPSMode() bool {
-+	var fd int
-+	for {
-+		var err error
-+		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
-+		if err == nil {
-+			break
-+		}
-+		switch err {
-+		case syscall.EINTR:
-+			continue
-+		case syscall.ENOENT:
-+			return false
-+		default:
-+			// If there is an error reading we could either panic or assume FIPS is not enabled.
-+			// Panicking would be too disruptive for apps that don't require FIPS.
-+			// If an app wants to be 100% sure that is running in FIPS mode
-+			// it should use fips140.Enabled() or GODEBUG=fips140=1.
-+			return false
-+		}
-+	}
-+	defer syscall.Close(fd)
-+	var tmp [1]byte
-+	n, err := syscall.Read(fd, tmp[:])
-+	if n != 1 || err != nil {
-+		// We return false instead of panicing for the same reason as before.
++func VerifyECDSA(pub *cng.PublicKeyECDSA, hash []byte, sig []byte) bool {
++	rBytes, sBytes, err := parseSignature(sig)
++	if err != nil {
 +		return false
 +	}
-+	// fips_enabled can be either '0' or '1'.
-+	return tmp[0] == '1'
++	return cng.VerifyECDSA(pub, hash, cng.BigInt(rBytes), cng.BigInt(sBytes))
 +}
-diff --git a/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
-new file mode 100644
-index 00000000000000..dad6bcea9451e2
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
-@@ -0,0 +1,15 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build requirefips && !goexperiment.systemcrypto
 +
-+package fips140
++func SignECDSA(priv *cng.PrivateKeyECDSA, hash []byte) (r, s cng.BigInt, err error) {
++	return cng.SignECDSA(priv, hash)
++}
 +
-+func init() {
-+	`
-+	The requirefips tag is enabled, but no crypto backend is enabled.
-+	A crypto backend is required to enable FIPS mode.
-+	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
-+	`
++func VerifyECDSARaw(pub *cng.PublicKeyECDSA, hash []byte, r, s cng.BigInt) bool {
++	return cng.VerifyECDSA(pub, hash, r, s)
 +}
-diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_off.go b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
-new file mode 100644
-index 00000000000000..f60b10dfa3aaf3
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
-@@ -0,0 +1,9 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+//go:build !ms_skipfipscheck
++func SupportsRSAPrivateKey(bits, primes int) bool {
++	return primes == 2 && SupportsRSAPublicKey(bits)
++}
 +
-+package fips140
++func SupportsRSAPublicKey(bits int) bool {
++	return bits >= 512 && bits%8 == 0 && bits <= 16384
++}
 +
-+const isSkipFIPSCheck = false
-diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_on.go b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
-new file mode 100644
-index 00000000000000..d3d39fd77f98db
---- /dev/null
-+++ b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
-@@ -0,0 +1,9 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func SupportsRSASaltLength(sign bool, salt int) bool {
++	if sign {
++		return true
++	}
++	return salt != 0 // rsa.PSSSaltLengthAuto
++}
 +
-+//go:build ms_skipfipscheck
++type PublicKeyRSA = cng.PublicKeyRSA
++type PrivateKeyRSA = cng.PrivateKeyRSA
 +
-+package fips140
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *cng.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return cng.DecryptRSAOAEP(h, priv, ciphertext, label)
++}
 +
-+const isSkipFIPSCheck = true
-diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
-new file mode 100644
-index 00000000000000..ef97d994841717
---- /dev/null
-+++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
-@@ -0,0 +1,68 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func DecryptRSAPKCS1(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return cng.DecryptRSAPKCS1(priv, ciphertext)
++}
 +
-+//go:build goexperiment.systemcrypto
++func DecryptRSANoPadding(priv *cng.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return cng.DecryptRSANoPadding(priv, ciphertext)
++}
 +
-+// opensslsetup is a package that initializes the OpenSSL library.
-+// It doesn't export any symbol, but blank importing it has the
-+// side effect of initializing the OpenSSL library.
-+package opensslsetup
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *cng.PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return cng.EncryptRSAOAEP(h, pub, msg, label)
++}
 +
-+import (
-+	"syscall"
++func EncryptRSAPKCS1(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return cng.EncryptRSAPKCS1(pub, msg)
++}
 +
-+	"github.com/golang-fips/openssl/v2/osslsetup"
-+)
++func EncryptRSANoPadding(pub *cng.PublicKeyRSA, msg []byte) ([]byte, error) {
++	return cng.EncryptRSANoPadding(pub, msg)
++}
 +
-+// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
-+// FreeBSD library version numbering does not directly align to the version of osslsetup.
-+// Its preferred search order is 11 -> 111.
-+var knownVersions = [...]string{"3", "1.1", "11", "111"}
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt, err error) {
++	return cng.GenerateKeyRSA(bits)
++}
 +
-+const lcryptoPrefix = "libcrypto.so."
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv cng.BigInt) (*cng.PrivateKeyRSA, error) {
++	return cng.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++}
 +
-+func init() {
-+	lib := library()
-+	if err := osslsetup.Init(lib); err != nil {
-+		panic("opensslcrypto: can't initialize OpenSSL " + lib + ": " + err.Error())
-+	}
++func NewPublicKeyRSA(N, E cng.BigInt) (*cng.PublicKeyRSA, error) {
++	return cng.NewPublicKeyRSA(N, E)
 +}
 +
-+// library returns the name of the OpenSSL library to use.
-+// It first checks the environment variable GO_OPENSSL_VERSION_OVERRIDE.
-+// If that is not set, it searches a well-known list of library names.
-+// If no library is found, it returns "libcrypto.so".
-+func library() string {
-+	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
-+		return lcryptoPrefix + version
-+	}
-+	if lib := searchKnownLibrary(); lib != "" {
-+		return lib
-+	}
-+	return lcryptoPrefix[:len(lcryptoPrefix)-1] // no version found, try without version suffix
++func SignRSAPKCS1v15(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return cng.SignRSAPKCS1v15(priv, h, hashed)
 +}
 +
-+// checkVersion is a variable that holds the osslsetup.CheckVersion function.
-+// It is initialized in the init function to allow overriding in tests.
-+var checkVersion = osslsetup.CheckVersion
-+
-+// searchKnownLibrary returns the name of the highest available FIPS-enabled version of OpenSSL
-+// using the known library suffixes.
-+// If no FIPS-enabled version is found, it returns the name of the highest available version.
-+// If no version is found, it returns an empty string.
-+func searchKnownLibrary() string {
-+	var lcryptoFallback string
-+	for _, v := range knownVersions {
-+		lcryptoCandidate := lcryptoPrefix + v
-+		if exists, fips := checkVersion(lcryptoCandidate); exists {
-+			if fips {
-+				return lcryptoCandidate
-+			}
-+			if lcryptoFallback == "" {
-+				lcryptoFallback = lcryptoCandidate
-+			}
-+		}
-+	}
-+	return lcryptoFallback
++func SignRSAPSS(priv *cng.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return cng.SignRSAPSS(priv, h, hashed, saltLen)
 +}
-diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
-new file mode 100644
-index 00000000000000..7276cc2b871b85
---- /dev/null
-+++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
-@@ -0,0 +1,92 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto && cgo
++func VerifyRSAPKCS1v15(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	return cng.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++}
 +
-+package opensslsetup
++func VerifyRSAPSS(pub *cng.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return cng.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++}
 +
-+import "testing"
++type PrivateKeyECDH = cng.PrivateKeyECDH
++type PublicKeyECDH = cng.PublicKeyECDH
 +
-+func mockCheckVersion(t *testing.T, fn func(string) (bool, bool)) {
-+	original := checkVersion
-+	t.Cleanup(func() {
-+		checkVersion = original
-+	})
-+	checkVersion = fn
++func ECDH(priv *cng.PrivateKeyECDH, pub *cng.PublicKeyECDH) ([]byte, error) {
++	return cng.ECDH(priv, pub)
 +}
 +
-+func assertLibrary(t *testing.T, expected string) {
-+	if result := library(); result != expected {
-+		t.Errorf("expected %s, got %s", expected, result)
-+	}
++func GenerateKeyECDH(curve string) (*cng.PrivateKeyECDH, []byte, error) {
++	return cng.GenerateKeyECDH(curve)
 +}
 +
-+func TestLibraryWithEnvOverride(t *testing.T) {
-+	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "1.1")
-+	mockCheckVersion(t, func(s string) (bool, bool) { return false, false })
-+	assertLibrary(t, "libcrypto.so.1.1")
++func NewPrivateKeyECDH(curve string, bytes []byte) (*cng.PrivateKeyECDH, error) {
++	return cng.NewPrivateKeyECDH(curve, bytes)
 +}
 +
-+func TestLibraryWithKnownVersion(t *testing.T) {
-+	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
++func NewPublicKeyECDH(curve string, bytes []byte) (*cng.PublicKeyECDH, error) {
++	return cng.NewPublicKeyECDH(curve, bytes)
++}
 +
-+	const maxLib = "libcrypto.so.3"
++func SupportsTLS13KDF() bool {
++	return false
++}
 +
-+	t.Run("AllExistsNoneFIPS", func(t *testing.T) {
-+		mockCheckVersion(t, func(s string) (bool, bool) {
-+			return true, false
-+		})
-+		for _, v := range knownVersions {
-+			t.Run(v, func(t *testing.T) {
-+				assertLibrary(t, maxLib)
-+			})
-+		}
-+	})
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	panic("cryptobackend: not available")
++}
 +
-+	t.Run("OnlyOneExists", func(t *testing.T) {
-+		for _, v := range knownVersions {
-+			t.Run(v, func(t *testing.T) {
-+				expected := "libcrypto.so." + v
-+				mockCheckVersion(t, func(s string) (bool, bool) {
-+					if s == expected {
-+						return true, false
-+					}
-+					return false, false
-+				})
-+				assertLibrary(t, expected)
-+			})
-+		}
-+	})
++func SupportsHKDF() bool {
++	return cng.SupportsHKDF()
++}
 +
-+	t.Run("AllExistsOnlyOneFIPS", func(t *testing.T) {
-+		fipsLib := "libcrypto.so.1.1"
-+		mockCheckVersion(t, func(s string) (bool, bool) {
-+			return true, s == fipsLib
-+		})
-+		for _, v := range knownVersions {
-+			t.Run(v, func(t *testing.T) {
-+				assertLibrary(t, fipsLib)
-+			})
-+		}
-+	})
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	return cng.ExpandHKDF(h, pseudorandomKey, info, keyLength)
++}
 +
-+	t.Run("AllExistsAndAreFIPS", func(t *testing.T) {
-+		mockCheckVersion(t, func(s string) (bool, bool) {
-+			return true, true
-+		})
-+		for _, v := range knownVersions {
-+			t.Run(v, func(t *testing.T) {
-+				assertLibrary(t, maxLib)
-+			})
-+		}
-+	})
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	return cng.ExtractHKDF(h, secret, salt)
 +}
 +
-+func TestLibraryNoVersionFound(t *testing.T) {
-+	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
-+	mockCheckVersion(t, func(string) (bool, bool) {
-+		return false, false
-+	})
-+	assertLibrary(t, "libcrypto.so")
++func SupportsPBKDF2() bool { return true }
++
++func PBKDF2(password, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
++	return cng.PBKDF2(password, salt, iter, keyLen, h)
 +}
-diff --git a/src/crypto/internal/backend/internal/opensslsetup/stub.go b/src/crypto/internal/backend/internal/opensslsetup/stub.go
-new file mode 100644
-index 00000000000000..19fd29e19e7b96
---- /dev/null
-+++ b/src/crypto/internal/backend/internal/opensslsetup/stub.go
-@@ -0,0 +1,8 @@
-+// Copyright 2025 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+// Placeholder to allow the opensslsetup package to be imported
-+// without cgo enabled or without goexperiment.systemcrypto on linux.
++func SupportsTLS1PRF() bool {
++	return true
++}
 +
-+package opensslsetup
-diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
-new file mode 100644
-index 00000000000000..cdc768b1e4b57d
---- /dev/null
-+++ b/src/crypto/internal/backend/nobackend.go
-@@ -0,0 +1,376 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
++	return cng.TLS1PRF(result, secret, label, seed, h)
++}
 +
-+//go:build !goexperiment.systemcrypto
++func SupportsDESCipher() bool {
++	return true
++}
 +
-+package backend
++func SupportsTripleDESCipher() bool {
++	return true
++}
 +
-+import (
-+	"crypto"
-+	"crypto/cipher"
-+	"crypto/internal/backend/fips140"
-+	"hash"
-+	"io"
-+)
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewDESCipher(key)
++}
 +
-+func init() {
-+	if err := fips140.Check(func() bool { return false }); err != nil {
-+		panic(err)
-+	}
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	return cng.NewTripleDESCipher(key)
 +}
 +
-+const Enabled = false
++func SupportsRC4() bool { return true }
 +
-+type BigInt = []uint
++type RC4Cipher = cng.RC4Cipher
 +
-+type randReader int
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return cng.NewRC4Cipher(key) }
 +
-+func (randReader) Read(b []byte) (int, error) { panic("cryptobackend: not available") }
++func SupportsEd25519() bool { return false }
 +
-+const RandReader = randReader(0)
++type PublicKeyEd25519 struct{}
 +
-+func SupportsHash(h crypto.Hash) bool   { panic("cryptobackend: not available") }
-+func FIPSApprovedHash(h hash.Hash) bool { panic("cryptobackend: not available") }
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
 +
-+func SupportsSHAKE(securityBits int) bool  { panic("cryptobackend: not available") }
-+func SupportsCSHAKE(securityBits int) bool { panic("cryptobackend: not available") }
++type PrivateKeyEd25519 struct{}
 +
-+func SupportsCurve(curve string) bool                    { panic("cryptobackend: not available") }
-+func SupportsRSAOAEPLabel(label []byte) bool             { panic("cryptobackend: not available") }
-+func SupportsRSAPKCS1v15Encryption() bool                { panic("cryptobackend: not available") }
-+func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool { panic("cryptobackend: not available") }
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
++}
 +
-+type Hash struct {
-+	hash.Cloner
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func (d *Hash) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
-+func (d *Hash) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
-+func (d *Hash) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
 +
-+type SHAKE struct {
-+	io.Reader
-+	hash.Hash
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
-+func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
-+func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
++}
 +
-+func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
-+func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
-+func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA256() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA384() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
-+func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
-+func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
-+func NewSHA3_256() *Hash       { panic("cryptobackend: not available") }
-+func NewSHA3_384() *Hash       { panic("cryptobackend: not available") }
-+func NewSHA3_512() *Hash       { panic("cryptobackend: not available") }
-+
-+func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
-+func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
-+func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
-+func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
-+
-+func MD5(p []byte) (sum [16]byte)         { panic("cryptobackend: not available") }
-+func SHA1(p []byte) (sum [20]byte)        { panic("cryptobackend: not available") }
-+func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
-+func SHA256(p []byte) (sum [32]byte)      { panic("cryptobackend: not available") }
-+func SHA384(p []byte) (sum [48]byte)      { panic("cryptobackend: not available") }
-+func SHA512(p []byte) (sum [64]byte)      { panic("cryptobackend: not available") }
-+func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
-+func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
-+func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
-+func SumSHA3_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
-+func SumSHA3_384(p []byte) (sum [48]byte) { panic("cryptobackend: not available") }
-+func SumSHA3_512(p []byte) (sum [64]byte) { panic("cryptobackend: not available") }
-+
-+func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
-+func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
-+
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
-+
-+func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { panic("cryptobackend: not available") }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
-+
-+type PublicKeyECDSA struct{ _ int }
-+type PrivateKeyECDSA struct{ _ int }
-+
-+func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
-+	panic("cryptobackend: not available")
-+}
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
 +	panic("cryptobackend: not available")
 +}
-+func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
++
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
 +	panic("cryptobackend: not available")
 +}
-+func SupportsRSAPrivateKey(bits, primes int) bool    { panic("cryptobackend: not available") }
-+func SupportsRSAPublicKey(bits int) bool             { panic("cryptobackend: not available") }
-+func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
 +
-+type PublicKeyRSA struct{ _ int }
-+type PrivateKeyRSA struct{ _ int }
++type PrivateKeyDSA = cng.PrivateKeyDSA
++type PublicKeyDSA = cng.PublicKeyDSA
 +
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
-+func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
++func SupportsDSA(l, n int) bool {
++	// These are the only N values supported by CNG
++	return n == 160 || n == 256
 +}
-+func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
++
++func GenerateParametersDSA(l, n int) (p, q, g cng.BigInt, err error) {
++	params, err := cng.GenerateParametersDSA(l)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	return params.P, params.Q, params.G, nil
 +}
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+	panic("cryptobackend: not available")
++
++func GenerateKeyDSA(p, q, g cng.BigInt) (x, y cng.BigInt, err error) {
++	return cng.GenerateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g})
 +}
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
-+	panic("cryptobackend: not available")
++
++func NewPrivateKeyDSA(p, q, g, x, y cng.BigInt) (*cng.PrivateKeyDSA, error) {
++	return cng.NewPrivateKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, x, y)
 +}
-+func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) {
-+	panic("cryptobackend: not available")
++
++func NewPublicKeyDSA(p, q, g, y cng.BigInt) (*cng.PublicKeyDSA, error) {
++	return cng.NewPublicKeyDSA(cng.DSAParameters{P: p, Q: q, G: g}, y)
 +}
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
++
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (cng.BigInt, cng.BigInt, error)) (r, s cng.BigInt, err error) {
++	return cng.SignDSA(priv, hash)
 +}
-+func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	panic("cryptobackend: not available")
++
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s cng.BigInt, encodeSignature func(r, s cng.BigInt) ([]byte, error)) bool {
++	return cng.VerifyDSA(pub, hashed, r, s)
 +}
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	panic("cryptobackend: not available")
++
++func SupportsMLKEM768() bool {
++	return cng.SupportsMLKEM()
 +}
-+func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	panic("cryptobackend: not available")
++
++func SupportsMLKEM1024() bool {
++	return cng.SupportsMLKEM()
 +}
 +
-+type PublicKeyECDH struct{}
-+type PrivateKeyECDH struct{}
++type DecapsulationKeyMLKEM768 = cng.DecapsulationKeyMLKEM768
++type EncapsulationKeyMLKEM768 = cng.EncapsulationKeyMLKEM768
 +
-+func ECDH(*PrivateKeyECDH, *PublicKeyECDH) ([]byte, error)    { panic("cryptobackend: not available") }
-+func GenerateKeyECDH(string) (*PrivateKeyECDH, []byte, error) { panic("cryptobackend: not available") }
-+func NewPrivateKeyECDH(string, []byte) (*PrivateKeyECDH, error) {
-+	panic("cryptobackend: not available")
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	return cng.GenerateKeyMLKEM768()
 +}
-+func NewPublicKeyECDH(string, []byte) (*PublicKeyECDH, error) { panic("cryptobackend: not available") }
-+func (*PublicKeyECDH) Bytes() []byte                          { panic("cryptobackend: not available") }
-+func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)    { panic("cryptobackend: not available") }
 +
-+func SupportsTLS13KDF() bool { panic("cryptobackend: not available") }
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	return cng.NewDecapsulationKeyMLKEM768(seed)
++}
 +
-+func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	return cng.NewEncapsulationKeyMLKEM768(encapsulationKey)
 +}
 +
-+func SupportsHKDF() bool { panic("cryptobackend: not available") }
++type DecapsulationKeyMLKEM1024 = cng.DecapsulationKeyMLKEM1024
++type EncapsulationKeyMLKEM1024 = cng.EncapsulationKeyMLKEM1024
 +
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	panic("cryptobackend: not available")
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	return cng.GenerateKeyMLKEM1024()
 +}
 +
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	return cng.NewDecapsulationKeyMLKEM1024(seed)
 +}
 +
-+func SupportsPBKDF2() bool { panic("cryptobackend: not available") }
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	panic("cryptobackend: not available")
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	return cng.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +}
 +
-+func SupportsTLS1PRF() bool { panic("cryptobackend: not available") }
++func SupportsChaCha20Poly1305() bool {
++	return cng.SupportsChaCha20Poly1305()
++}
 +
-+func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	panic("cryptobackend: not available")
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	return cng.NewChaCha20Poly1305(key)
 +}
+diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
+new file mode 100644
+index 00000000000000..20251a290dc2e0
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big.go
+@@ -0,0 +1,17 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func SupportsDESCipher() bool { panic("cryptobackend: not available") }
++//go:build !goexperiment.systemcrypto
 +
-+func SupportsTripleDESCipher() bool { panic("cryptobackend: not available") }
++package bbig
 +
-+func NewDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
++import "math/big"
 +
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
++func Enc(b *big.Int) []uint {
++	return nil
++}
 +
-+func SupportsRC4() bool { panic("cryptobackend: not available") }
++func Dec(b []uint) *big.Int {
++	return nil
++}
+diff --git a/src/crypto/internal/backend/bbig/big_darwin.go b/src/crypto/internal/backend/bbig/big_darwin.go
+new file mode 100644
+index 00000000000000..889f2ff7c703d8
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_darwin.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+type RC4Cipher struct{}
++//go:build goexperiment.systemcrypto
 +
-+func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
++package bbig
 +
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { panic("cryptobackend: not available") }
++import "github.com/microsoft/go-crypto-darwin/bbig"
 +
-+func SupportsEd25519() bool { panic("cryptobackend: not available") }
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/bbig/big_linux.go b/src/crypto/internal/backend/bbig/big_linux.go
+new file mode 100644
+index 00000000000000..8a133422f20fa0
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_linux.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+type PublicKeyEd25519 struct{}
++//go:build goexperiment.systemcrypto
 +
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
++package bbig
 +
-+type PrivateKeyEd25519 struct{}
++import "github.com/golang-fips/openssl/v2/bbig"
 +
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/bbig/big_windows.go b/src/crypto/internal/backend/bbig/big_windows.go
+new file mode 100644
+index 00000000000000..f2c21a88bff471
+--- /dev/null
++++ b/src/crypto/internal/backend/bbig/big_windows.go
+@@ -0,0 +1,12 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
++//go:build goexperiment.systemcrypto
 +
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
++package bbig
 +
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	panic("cryptobackend: not available")
-+}
++import "github.com/microsoft/go-crypto-winnative/cng/bbig"
 +
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	panic("cryptobackend: not available")
++var Enc = bbig.Enc
++var Dec = bbig.Dec
+diff --git a/src/crypto/internal/backend/common.go b/src/crypto/internal/backend/common.go
+new file mode 100644
+index 00000000000000..a9682181ffa154
+--- /dev/null
++++ b/src/crypto/internal/backend/common.go
+@@ -0,0 +1,46 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package backend
++
++import (
++	"crypto/internal/boring/sig"
++	"runtime"
++)
++
++// Unreachable marks code that should be unreachable
++// when backend is in use.
++func Unreachable() {
++	if Enabled {
++		panic("cryptobackend: invalid code execution")
++	} else {
++		// Code that's unreachable is exactly the code
++		// we want to detect for reporting standard Go crypto.
++		sig.StandardCrypto()
++	}
++}
++
++// Provided by runtime.crypto_backend_runtime_arg0 to avoid os import.
++func runtime_arg0() string
++
++func hasSuffix(s, t string) bool {
++	return len(s) > len(t) && s[len(s)-len(t):] == t
++}
++
++// UnreachableExceptTests marks code that should be unreachable
++// when backend is in use. It panics.
++func UnreachableExceptTests() {
++	// runtime_arg0 is not supported on windows.
++	// We are going through the same code patch on linux,
++	// so if we are unintentionally calling an 'unreachable' function,
++	// we will catch it there.
++	if Enabled && runtime.GOOS != "windows" {
++		name := runtime_arg0()
++		// If ran on Windows we'd need to allow _test.exe and .test.exe as well.
++		if !hasSuffix(name, "_test") && !hasSuffix(name, ".test") {
++			println("cryptobackend: unexpected code execution in", name)
++			panic("cryptobackend: invalid code execution")
++		}
++	}
++}
+diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
+new file mode 100644
+index 00000000000000..1bf7c3b7d63da8
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/fips140.go
+@@ -0,0 +1,70 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package fips140
++
++import (
++	"errors"
++	"internal/godebug"
++	"runtime"
++	"syscall"
++)
++
++var fips140GODEBUG = godebug.New("fips140")
++
++// Enabled reports whether FIPS 140 mode is enabled by using GODEBUG, GOFIPS, GOLANG_FIPS,
++// the 'requirefips' build tag, or any other platform-specific mechanism.
++func Enabled() bool {
++	return enabled
++}
++
++var enabled bool
++
++// message is a human-readable message about how [Enabled] was set.
++var message string
++
++func init() {
++	// TODO: Decide which environment variable to use.
++	// See https://github.com/microsoft/go/issues/397.
++	var ok bool
++	value := fips140GODEBUG.Value()
++	if value == "on" || value == "only" || value == "debug" {
++		message = "environment variable GODEBUG=fips140=" + value
++		value = "1"
++	} else if value, ok = syscall.Getenv("GOFIPS"); ok {
++		message = "environment variable GOFIPS"
++	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
++		message = "environment variable GOLANG_FIPS"
++	} else if systemFIPSMode() {
++		message = "system FIPS mode"
++		value = "1"
++	}
++	enabled = value == "1"
++	if isRequireFIPS {
++		if isSkipFIPSCheck {
++			panic("the 'requirefips' build tag is enabled, but it conflicts " +
++				"with the 'ms_skipfipscheck' build tag")
++		}
++		message = "requirefips tag set"
++		enabled = true
++	}
++}
++
++// Check checks whether fips mode, as returned by fips(),
++// is valid given the current settings.
++func Check(fips func() bool) error {
++	if isSkipFIPSCheck || !enabled {
++		return nil
++	}
++	if !backendEnabled {
++		if runtime.GOOS != "linux" && runtime.GOOS != "windows" && runtime.GOOS != "darwin" {
++			return errors.New("FIPS mode requested (" + message + ") but no crypto backend is supported on " + runtime.GOOS)
++		}
++		return errors.New("FIPS mode requested (" + message + ") but no supported crypto backend is enabled")
++	}
++	if !fips() {
++		return errors.New("FIPS mode requested (" + message + ") but not available")
++	}
++	return nil
++}
+diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
+new file mode 100644
+index 00000000000000..b33d08c84e2dae
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/isrequirefips.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build requirefips
++
++package fips140
++
++const isRequireFIPS = true
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/norequirefips.go b/src/crypto/internal/backend/fips140/norequirefips.go
+new file mode 100644
+index 00000000000000..6f01b9a3524dee
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/norequirefips.go
+@@ -0,0 +1,9 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !requirefips
++
++package fips140
++
++const isRequireFIPS = false
+\ No newline at end of file
+diff --git a/src/crypto/internal/backend/fips140/nosystemcrypto.go b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+new file mode 100644
+index 00000000000000..289d6594eac54b
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/nosystemcrypto.go
+@@ -0,0 +1,13 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !goexperiment.systemcrypto
++
++package fips140
++
++const backendEnabled = false
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
+new file mode 100644
+index 00000000000000..dad6bcea9451e2
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/requirefips_nosystemcrypto.go
+@@ -0,0 +1,15 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build requirefips && !goexperiment.systemcrypto
++
++package fips140
++
++func init() {
++	`
++	The requirefips tag is enabled, but no crypto backend is enabled.
++	A crypto backend is required to enable FIPS mode.
++	For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
++	`
++}
+diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_off.go b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
+new file mode 100644
+index 00000000000000..f60b10dfa3aaf3
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/skipfipscheck_off.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !ms_skipfipscheck
++
++package fips140
++
++const isSkipFIPSCheck = false
+diff --git a/src/crypto/internal/backend/fips140/skipfipscheck_on.go b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
+new file mode 100644
+index 00000000000000..d3d39fd77f98db
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/skipfipscheck_on.go
+@@ -0,0 +1,9 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build ms_skipfipscheck
++
++package fips140
++
++const isSkipFIPSCheck = true
+diff --git a/src/crypto/internal/backend/fips140/systemfips_darwin.go b/src/crypto/internal/backend/fips140/systemfips_darwin.go
+new file mode 100644
+index 00000000000000..606a2db4dd685f
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/systemfips_darwin.go
+@@ -0,0 +1,13 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package fips140
++
++const backendEnabled = true
++
++func systemFIPSMode() bool {
++	return false
++}
+diff --git a/src/crypto/internal/backend/fips140/systemfips_linux.go b/src/crypto/internal/backend/fips140/systemfips_linux.go
+new file mode 100644
+index 00000000000000..19cafc156fbc5d
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/systemfips_linux.go
+@@ -0,0 +1,59 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package fips140
++
++import (
++	_ "crypto/internal/backend/internal/opensslsetup"
++	"syscall"
++
++	"github.com/golang-fips/openssl/v2/osslsetup"
++)
++
++const backendEnabled = true
++
++// systemFIPSMode reports whether the system is in FIPS mode.
++// It first checks the kernel, and if that is not available, it checks the
++// OpenSSL library.
++func systemFIPSMode() bool {
++	if kernelFIPSMode() {
++		return true
++	}
++	return osslsetup.FIPS()
++}
++
++// kernelFIPSMode reports whether the kernel is in FIPS mode.
++func kernelFIPSMode() bool {
++	var fd int
++	for {
++		var err error
++		fd, err = syscall.Open("/proc/sys/crypto/fips_enabled", syscall.O_RDONLY, 0)
++		if err == nil {
++			break
++		}
++		switch err {
++		case syscall.EINTR:
++			continue
++		case syscall.ENOENT:
++			return false
++		default:
++			// If there is an error reading we could either panic or assume FIPS is not enabled.
++			// Panicking would be too disruptive for apps that don't require FIPS.
++			// If an app wants to be 100% sure that is running in FIPS mode
++			// it should use fips140.Enabled() or GODEBUG=fips140=1.
++			return false
++		}
++	}
++	defer syscall.Close(fd)
++	var tmp [1]byte
++	n, err := syscall.Read(fd, tmp[:])
++	if n != 1 || err != nil {
++		// We return false instead of panicing for the same reason as before.
++		return false
++	}
++	// fips_enabled can be either '0' or '1'.
++	return tmp[0] == '1'
 +}
+diff --git a/src/crypto/internal/backend/fips140/systemfips_windows.go b/src/crypto/internal/backend/fips140/systemfips_windows.go
+new file mode 100644
+index 00000000000000..a705e7bc4fc536
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/systemfips_windows.go
+@@ -0,0 +1,35 @@
++// Copyright 2024 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	panic("cryptobackend: not available")
-+}
++//go:build goexperiment.systemcrypto
 +
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	panic("cryptobackend: not available")
-+}
++package fips140
 +
-+func SupportsDSA(l, n int) bool {
-+	panic("cryptobackend: not available")
-+}
++import (
++	"internal/syscall/windows/sysdll"
++	"syscall"
++	"unsafe"
++)
 +
-+func GenerateParametersDSA(l, n int) (p, q, g BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
++const backendEnabled = true
 +
-+type PublicKeyDSA struct{ _ int }
-+type PrivateKeyDSA struct{ _ int }
++// Don't use github.com/microsoft/go-crypto-winnative here.
++// The fips140 package should have minimal dependencies.
++// Also, don't directly query the system FIPS mode from the registry,
++// there are some no-longer documented legacy entries that can enable FIPS mode,
++// and BCryptGetFipsAlgorithmMode supports them all.
++var (
++	bcrypt = syscall.MustLoadDLL(sysdll.Add("bcrypt.dll"))
 +
-+func GenerateKeyDSA(p, q, g BigInt) (x, y BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
++	bcryptGetFipsAlgorithmMode = bcrypt.MustFindProc("BCryptGetFipsAlgorithmMode")
++)
 +
-+func NewPrivateKeyDSA(p, q, g, x, y BigInt) (*PrivateKeyDSA, error) {
-+	panic("cryptobackend: not available")
++func systemFIPSMode() bool {
++	var enabled uint32
++	ret, _, _ := bcryptGetFipsAlgorithmMode.Call(uintptr(unsafe.Pointer(&enabled)))
++	if ret != 0 {
++		return false
++	}
++	return enabled != 0
 +}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
+new file mode 100644
+index 00000000000000..968cdf35985f80
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
+@@ -0,0 +1,68 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func NewPublicKeyDSA(p, q, g, y BigInt) (*PublicKeyDSA, error) {
-+	panic("cryptobackend: not available")
-+}
++//go:build goexperiment.systemcrypto
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (BigInt, BigInt, error)) (r, s BigInt, err error) {
-+	panic("cryptobackend: not available")
-+}
++// opensslsetup is a package that initializes the OpenSSL library.
++// It doesn't export any symbol, but blank importing it has the
++// side effect of initializing the OpenSSL library.
++package opensslsetup
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
-+	panic("cryptobackend: not available")
-+}
++import (
++	"syscall"
 +
-+func SupportsMLKEM768() bool {
-+	panic("cryptobackend: not available")
-+}
++	"github.com/golang-fips/openssl/v2/osslsetup"
++)
 +
-+func SupportsMLKEM1024() bool {
-+	panic("cryptobackend: not available")
-+}
++// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
++// FreeBSD library version numbering does not directly align to the version of osslsetup.
++// Its preferred search order is 11 -> 111.
++var knownVersions = [...]string{"3", "1.1", "11", "111"}
 +
-+type DecapsulationKeyMLKEM768 struct{}
-+type EncapsulationKeyMLKEM768 struct{}
++const lcryptoPrefix = "libcrypto.so."
 +
-+func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	panic("cryptobackend: not available")
++func init() {
++	lib := library()
++	if err := osslsetup.Init(lib); err != nil {
++		panic("opensslcrypto: can't initialize OpenSSL " + lib + ": " + err.Error())
++	}
 +}
 +
-+func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	panic("cryptobackend: not available")
++// library returns the name of the OpenSSL library to use.
++// It first checks the environment variable GO_OPENSSL_VERSION_OVERRIDE.
++// If that is not set, it searches a well-known list of library names.
++// If no library is found, it returns "libcrypto.so".
++func library() string {
++	if version, _ := syscall.Getenv("GO_OPENSSL_VERSION_OVERRIDE"); version != "" {
++		return lcryptoPrefix + version
++	}
++	if lib := searchKnownLibrary(); lib != "" {
++		return lib
++	}
++	return lcryptoPrefix[:len(lcryptoPrefix)-1] // no version found, try without version suffix
 +}
 +
-+func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	panic("cryptobackend: not available")
-+}
++// checkVersion is a variable that holds the osslsetup.CheckVersion function.
++// It is initialized in the init function to allow overriding in tests.
++var checkVersion = osslsetup.CheckVersion
 +
-+func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
-+	panic("cryptobackend: not available")
++// searchKnownLibrary returns the name of the highest available FIPS-enabled version of OpenSSL
++// using the known library suffixes.
++// If no FIPS-enabled version is found, it returns the name of the highest available version.
++// If no version is found, it returns an empty string.
++func searchKnownLibrary() string {
++	var lcryptoFallback string
++	for _, v := range knownVersions {
++		lcryptoCandidate := lcryptoPrefix + v
++		if exists, fips := checkVersion(lcryptoCandidate); exists {
++			if fips {
++				return lcryptoCandidate
++			}
++			if lcryptoFallback == "" {
++				lcryptoFallback = lcryptoCandidate
++			}
++		}
++	}
++	return lcryptoFallback
 +}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
+new file mode 100644
+index 00000000000000..2e45358029f484
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux_test.go
+@@ -0,0 +1,92 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	panic("cryptobackend: not available")
-+}
++//go:build goexperiment.systemcrypto && cgo
 +
-+func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
-+	panic("cryptobackend: not available")
-+}
++package opensslsetup
 +
-+func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
-+	panic("cryptobackend: not available")
-+}
++import "testing"
 +
-+func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
-+	panic("cryptobackend: not available")
++func mockCheckVersion(t *testing.T, fn func(string) (bool, bool)) {
++	original := checkVersion
++	t.Cleanup(func() {
++		checkVersion = original
++	})
++	checkVersion = fn
 +}
 +
-+type DecapsulationKeyMLKEM1024 struct{}
-+type EncapsulationKeyMLKEM1024 struct{}
-+
-+func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	panic("cryptobackend: not available")
++func assertLibrary(t *testing.T, expected string) {
++	if result := library(); result != expected {
++		t.Errorf("expected %s, got %s", expected, result)
++	}
 +}
 +
-+func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	panic("cryptobackend: not available")
++func TestLibraryWithEnvOverride(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "1.1")
++	mockCheckVersion(t, func(s string) (bool, bool) { return false, false })
++	assertLibrary(t, "libcrypto.so.1.1")
 +}
 +
-+func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	panic("cryptobackend: not available")
-+}
++func TestLibraryWithKnownVersion(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
 +
-+func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
-+	panic("cryptobackend: not available")
-+}
++	const maxLib = "libcrypto.so.3"
 +
-+func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	panic("cryptobackend: not available")
-+}
++	t.Run("AllExistsNoneFIPS", func(t *testing.T) {
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, false
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, maxLib)
++			})
++		}
++	})
 +
-+func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
-+	panic("cryptobackend: not available")
-+}
++	t.Run("OnlyOneExists", func(t *testing.T) {
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				expected := "libcrypto.so." + v
++				mockCheckVersion(t, func(s string) (bool, bool) {
++					if s == expected {
++						return true, false
++					}
++					return false, false
++				})
++				assertLibrary(t, expected)
++			})
++		}
++	})
 +
-+func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
-+	panic("cryptobackend: not available")
++	t.Run("AllExistsOnlyOneFIPS", func(t *testing.T) {
++		fipsLib := "libcrypto.so.1.1"
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, s == fipsLib
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, fipsLib)
++			})
++		}
++	})
++
++	t.Run("AllExistsAndAreFIPS", func(t *testing.T) {
++		mockCheckVersion(t, func(s string) (bool, bool) {
++			return true, true
++		})
++		for _, v := range knownVersions {
++			t.Run(v, func(t *testing.T) {
++				assertLibrary(t, maxLib)
++			})
++		}
++	})
 +}
 +
-+func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
-+	panic("cryptobackend: not available")
++func TestLibraryNoVersionFound(t *testing.T) {
++	t.Setenv("GO_OPENSSL_VERSION_OVERRIDE", "")
++	mockCheckVersion(t, func(string) (bool, bool) {
++		return false, false
++	})
++	assertLibrary(t, "libcrypto.so")
 +}
+diff --git a/src/crypto/internal/backend/internal/opensslsetup/stub.go b/src/crypto/internal/backend/internal/opensslsetup/stub.go
+new file mode 100644
+index 00000000000000..19fd29e19e7b96
+--- /dev/null
++++ b/src/crypto/internal/backend/internal/opensslsetup/stub.go
+@@ -0,0 +1,8 @@
++// Copyright 2025 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
-+func SupportsChaCha20Poly1305() bool {
-+	return false
-+}
++// Placeholder to allow the opensslsetup package to be imported
++// without cgo enabled or without goexperiment.systemcrypto on linux.
 +
-+func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	panic("cryptobackend: not available")
-+}
-diff --git a/src/crypto/internal/backend/openssl_linux.go b/src/crypto/internal/backend/openssl_linux.go
++package opensslsetup
+diff --git a/src/crypto/internal/backend/nobackend.go b/src/crypto/internal/backend/nobackend.go
 new file mode 100644
-index 00000000000000..ccac6ce8ad0b35
+index 00000000000000..cdc768b1e4b57d
 --- /dev/null
-+++ b/src/crypto/internal/backend/openssl_linux.go
-@@ -0,0 +1,430 @@
++++ b/src/crypto/internal/backend/nobackend.go
+@@ -0,0 +1,376 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
-+//go:build goexperiment.systemcrypto
++//go:build !goexperiment.systemcrypto
 +
-+// Package openssl provides access to OpenSSLCrypto implementation functions.
-+// Check the variable Enabled to find out whether OpenSSLCrypto is available.
-+// If OpenSSLCrypto is not available, the functions in this package all panic.
 +package backend
 +
 +import (
 +	"crypto"
 +	"crypto/cipher"
 +	"crypto/internal/backend/fips140"
-+	_ "crypto/internal/backend/internal/opensslsetup"
-+	"crypto/internal/boring/sig"
-+	"crypto/internal/fips140only"
 +	"hash"
-+
-+	"github.com/golang-fips/openssl/v2"
++	"io"
 +)
 +
-+// Enabled controls whether FIPS crypto is enabled.
-+const Enabled = true
-+
-+type BigInt = openssl.BigInt
-+
 +func init() {
-+	// Some distributions, e.g. Azure Linux 3, don't set the `fips=yes` property when running in FIPS mode,
-+	// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
-+	// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
-+	// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
-+	// openssl.FIPSCapable to determine whether FIPS mode is enabled.
-+	if err := fips140.Check(func() bool { return openssl.FIPSCapable() }); err != nil {
-+		// This path can be reached for the following reasons:
-+		// - In OpenSSL 1, the active engine doesn't support FIPS mode.
-+		// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
-+		// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
-+		panic("opensslcrypto: " + err.Error() + ": " + openssl.VersionText())
++	if err := fips140.Check(func() bool { return false }); err != nil {
++		panic(err)
 +	}
-+	sig.BoringCrypto()
-+	fips140only.BackendApprovedHash = FIPSApprovedHash
 +}
 +
-+const RandReader = openssl.RandReader
++const Enabled = false
 +
-+func SupportsHash(h crypto.Hash) bool {
-+	return openssl.SupportsHash(h)
-+}
++type BigInt = []uint
 +
-+func FIPSApprovedHash(h hash.Hash) bool {
-+	return openssl.FIPSApprovedHash(h)
-+}
++type randReader int
 +
-+func SupportsSHAKE(securityBits int) bool {
-+	return openssl.SupportsSHAKE(securityBits)
-+}
++func (randReader) Read(b []byte) (int, error) { panic("cryptobackend: not available") }
 +
-+func SupportsCSHAKE(securityBits int) bool {
-+	return openssl.SupportsCSHAKE(securityBits)
-+}
++const RandReader = randReader(0)
 +
-+func SupportsCurve(curve string) bool {
-+	return openssl.SupportsCurve(curve)
-+}
++func SupportsHash(h crypto.Hash) bool   { panic("cryptobackend: not available") }
++func FIPSApprovedHash(h hash.Hash) bool { panic("cryptobackend: not available") }
 +
-+func SupportsRSAOAEPLabel(label []byte) bool { return true }
++func SupportsSHAKE(securityBits int) bool  { panic("cryptobackend: not available") }
++func SupportsCSHAKE(securityBits int) bool { panic("cryptobackend: not available") }
 +
-+func SupportsRSAPKCS1v15Encryption() bool {
-+	return openssl.SupportsRSAPKCS1v15Encryption()
-+}
++func SupportsCurve(curve string) bool                    { panic("cryptobackend: not available") }
++func SupportsRSAOAEPLabel(label []byte) bool             { panic("cryptobackend: not available") }
++func SupportsRSAPKCS1v15Encryption() bool                { panic("cryptobackend: not available") }
++func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool { panic("cryptobackend: not available") }
 +
-+func SupportsRSAPKCS1v15Signature(hash crypto.Hash) bool {
-+	return openssl.SupportsRSAPKCS1v15Signature(hash)
++type Hash struct {
++	hash.Cloner
 +}
 +
-+type Hash = openssl.Hash
-+type SHAKE = openssl.SHAKE
-+
-+func NewMD5() hash.Hash        { return openssl.NewMD5() }
-+func NewSHA1() hash.Hash       { return openssl.NewSHA1() }
-+func NewSHA224() hash.Hash     { return openssl.NewSHA224() }
-+func NewSHA256() hash.Hash     { return openssl.NewSHA256() }
-+func NewSHA384() hash.Hash     { return openssl.NewSHA384() }
-+func NewSHA512() hash.Hash     { return openssl.NewSHA512() }
-+func NewSHA512_224() hash.Hash { return openssl.NewSHA512_224() }
-+func NewSHA512_256() hash.Hash { return openssl.NewSHA512_256() }
-+func NewSHA3_224() *Hash       { return openssl.NewSHA3_224() }
-+func NewSHA3_256() *Hash       { return openssl.NewSHA3_256() }
-+func NewSHA3_384() *Hash       { return openssl.NewSHA3_384() }
-+func NewSHA3_512() *Hash       { return openssl.NewSHA3_512() }
-+
-+func NewSHAKE128() *SHAKE             { return openssl.NewSHAKE128() }
-+func NewSHAKE256() *SHAKE             { return openssl.NewSHAKE256() }
-+func NewCSHAKE128(N, S []byte) *SHAKE { return openssl.NewCSHAKE128(N, S) }
-+func NewCSHAKE256(N, S []byte) *SHAKE { return openssl.NewCSHAKE256(N, S) }
++func (d *Hash) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (d *Hash) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (d *Hash) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
 +
-+func MD5(p []byte) (sum [16]byte)         { return openssl.MD5(p) }
-+func SHA1(p []byte) (sum [20]byte)        { return openssl.SHA1(p) }
-+func SHA224(p []byte) (sum [28]byte)      { return openssl.SHA224(p) }
-+func SHA256(p []byte) (sum [32]byte)      { return openssl.SHA256(p) }
-+func SHA384(p []byte) (sum [48]byte)      { return openssl.SHA384(p) }
-+func SHA512(p []byte) (sum [64]byte)      { return openssl.SHA512(p) }
-+func SHA512_224(p []byte) (sum [28]byte)  { return openssl.SHA512_224(p) }
-+func SHA512_256(p []byte) (sum [32]byte)  { return openssl.SHA512_256(p) }
-+func SumSHA3_224(p []byte) (sum [28]byte) { return openssl.SumSHA3_224(p) }
-+func SumSHA3_256(p []byte) (sum [32]byte) { return openssl.SumSHA3_256(p) }
-+func SumSHA3_384(p []byte) (sum [48]byte) { return openssl.SumSHA3_384(p) }
-+func SumSHA3_512(p []byte) (sum [64]byte) { return openssl.SumSHA3_512(p) }
++type SHAKE struct {
++	io.Reader
++	hash.Hash
++}
 +
-+func SumSHAKE128(data []byte, length int) (sum []byte) { return openssl.SumSHAKE128(data, length) }
-+func SumSHAKE256(data []byte, length int) (sum []byte) { return openssl.SumSHAKE256(data, length) }
++func (s *SHAKE) MarshalBinary() ([]byte, error)        { panic("cryptobackend: not available") }
++func (s *SHAKE) AppendBinary(p []byte) ([]byte, error) { panic("cryptobackend: not available") }
++func (s *SHAKE) UnmarshalBinary(data []byte) error     { panic("cryptobackend: not available") }
 +
-+func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { return openssl.NewHMAC(h, key) }
++func NewMD5() hash.Hash        { panic("cryptobackend: not available") }
++func NewSHA1() hash.Hash       { panic("cryptobackend: not available") }
++func NewSHA224() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA256() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA384() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512() hash.Hash     { panic("cryptobackend: not available") }
++func NewSHA512_224() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA512_256() hash.Hash { panic("cryptobackend: not available") }
++func NewSHA3_224() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_256() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_384() *Hash       { panic("cryptobackend: not available") }
++func NewSHA3_512() *Hash       { panic("cryptobackend: not available") }
 +
-+func NewAESCipher(key []byte) (cipher.Block, error)   { return openssl.NewAESCipher(key) }
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { return openssl.NewGCMTLS(c) }
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { return openssl.NewGCMTLS13(c) }
++func NewSHAKE128() *SHAKE             { panic("cryptobackend: not available") }
++func NewSHAKE256() *SHAKE             { panic("cryptobackend: not available") }
++func NewCSHAKE128(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
++func NewCSHAKE256(N, S []byte) *SHAKE { panic("cryptobackend: not available") }
 +
-+type PublicKeyECDSA = openssl.PublicKeyECDSA
-+type PrivateKeyECDSA = openssl.PrivateKeyECDSA
++func MD5(p []byte) (sum [16]byte)         { panic("cryptobackend: not available") }
++func SHA1(p []byte) (sum [20]byte)        { panic("cryptobackend: not available") }
++func SHA224(p []byte) (sum [28]byte)      { panic("cryptobackend: not available") }
++func SHA256(p []byte) (sum [32]byte)      { panic("cryptobackend: not available") }
++func SHA384(p []byte) (sum [48]byte)      { panic("cryptobackend: not available") }
++func SHA512(p []byte) (sum [64]byte)      { panic("cryptobackend: not available") }
++func SHA512_224(p []byte) (sum [28]byte)  { panic("cryptobackend: not available") }
++func SHA512_256(p []byte) (sum [32]byte)  { panic("cryptobackend: not available") }
++func SumSHA3_224(p []byte) (sum [28]byte) { panic("cryptobackend: not available") }
++func SumSHA3_256(p []byte) (sum [32]byte) { panic("cryptobackend: not available") }
++func SumSHA3_384(p []byte) (sum [48]byte) { panic("cryptobackend: not available") }
++func SumSHA3_512(p []byte) (sum [64]byte) { panic("cryptobackend: not available") }
 +
-+func GenerateKeyECDSA(curve string) (X, Y, D openssl.BigInt, err error) {
-+	return openssl.GenerateKeyECDSA(curve)
-+}
++func SumSHAKE128(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
++func SumSHAKE256(data []byte, length int) (sum []byte) { panic("cryptobackend: not available") }
 +
-+func NewPrivateKeyECDSA(curve string, X, Y, D openssl.BigInt) (*openssl.PrivateKeyECDSA, error) {
-+	return openssl.NewPrivateKeyECDSA(curve, X, Y, D)
-+}
++func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("cryptobackend: not available") }
 +
-+func NewPublicKeyECDSA(curve string, X, Y openssl.BigInt) (*openssl.PublicKeyECDSA, error) {
-+	return openssl.NewPublicKeyECDSA(curve, X, Y)
-+}
++func NewAESCipher(key []byte) (cipher.Block, error)   { panic("cryptobackend: not available") }
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error)   { panic("cryptobackend: not available") }
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) { panic("cryptobackend: not available") }
 +
-+func SignMarshalECDSA(priv *openssl.PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return openssl.SignMarshalECDSA(priv, hash)
-+}
++type PublicKeyECDSA struct{ _ int }
++type PrivateKeyECDSA struct{ _ int }
 +
-+func VerifyECDSA(pub *openssl.PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return openssl.VerifyECDSA(pub, hash, sig)
++func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func SupportsRSAPrivateKey(bits, primes int) bool {
-+	// The built-in OpenSSL 3 providers and OpenSSL 1 do support n-prime RSA keys,
-+	// but SCOSSL only supports 2-prime RSA keys.
-+	// Only 2-prime RSA keys are FIPS compliant, other n having compatibility
-+	// and security issues. Even crypto/rsa deprecated rsa.GenerateMultiPrimeKey as of Go 1.21.
-+	// Given the above reasons, we only support what SCOSSL supports.
-+	return primes == 2 && SupportsRSAPublicKey(bits)
++func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func SupportsRSAPublicKey(bits int) bool {
-+	min := 1024
-+	if fips140.Enabled() {
-+		// The built-in OpenSSL 3 FIPS provider requires at least 2048 bits for FIPS compliance.
-+		min = 2048
-+	}
-+	return bits >= min && bits%8 == 0 && bits <= 16384
++func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func SupportsRSASaltLength(sign bool, salt int) bool {
-+	return true
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+type PublicKeyRSA = openssl.PublicKeyRSA
-+type PrivateKeyRSA = openssl.PrivateKeyRSA
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *openssl.PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return openssl.DecryptRSAOAEP(h, mgfHash, priv, ciphertext, label)
++func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
++	panic("cryptobackend: not available")
 +}
++func SupportsRSAPrivateKey(bits, primes int) bool    { panic("cryptobackend: not available") }
++func SupportsRSAPublicKey(bits int) bool             { panic("cryptobackend: not available") }
++func SupportsRSASaltLength(sign bool, salt int) bool { panic("cryptobackend: not available") }
 +
-+func DecryptRSAPKCS1(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return openssl.DecryptRSAPKCS1(priv, ciphertext)
-+}
++type PublicKeyRSA struct{ _ int }
++type PrivateKeyRSA struct{ _ int }
 +
-+func DecryptRSANoPadding(priv *openssl.PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return openssl.DecryptRSANoPadding(priv, ciphertext)
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *openssl.PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return openssl.EncryptRSAOAEP(h, mgfHash, pub, msg, label)
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func EncryptRSAPKCS1(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return openssl.EncryptRSAPKCS1(pub, msg)
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func EncryptRSANoPadding(pub *openssl.PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return openssl.EncryptRSANoPadding(pub, msg)
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt, err error) {
-+	return openssl.GenerateKeyRSA(bits)
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv openssl.BigInt) (*openssl.PrivateKeyRSA, error) {
-+	return openssl.NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv)
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func NewPublicKeyRSA(N, E openssl.BigInt) (*openssl.PublicKeyRSA, error) {
-+	return openssl.NewPublicKeyRSA(N, E)
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func SignRSAPKCS1v15(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return openssl.SignRSAPKCS1v15(priv, h, hashed)
++func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func SignRSAPSS(priv *openssl.PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return openssl.SignRSAPSS(priv, h, hashed, saltLen)
++func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func VerifyRSAPKCS1v15(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	return openssl.VerifyRSAPKCS1v15(pub, h, hashed, sig)
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+func VerifyRSAPSS(pub *openssl.PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return openssl.VerifyRSAPSS(pub, h, hashed, sig, saltLen)
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
-+
-+type PublicKeyECDH = openssl.PublicKeyECDH
-+type PrivateKeyECDH = openssl.PrivateKeyECDH
-+
-+func ECDH(priv *openssl.PrivateKeyECDH, pub *openssl.PublicKeyECDH) ([]byte, error) {
-+	return openssl.ECDH(priv, pub)
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	panic("cryptobackend: not available")
 +}
-+
-+func GenerateKeyECDH(curve string) (*openssl.PrivateKeyECDH, []byte, error) {
-+	return openssl.GenerateKeyECDH(curve)
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	panic("cryptobackend: not available")
 +}
 +
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*openssl.PrivateKeyECDH, error) {
-+	return openssl.NewPrivateKeyECDH(curve, bytes)
-+}
++type PublicKeyECDH struct{}
++type PrivateKeyECDH struct{}
 +
-+func NewPublicKeyECDH(curve string, bytes []byte) (*openssl.PublicKeyECDH, error) {
-+	return openssl.NewPublicKeyECDH(curve, bytes)
++func ECDH(*PrivateKeyECDH, *PublicKeyECDH) ([]byte, error)    { panic("cryptobackend: not available") }
++func GenerateKeyECDH(string) (*PrivateKeyECDH, []byte, error) { panic("cryptobackend: not available") }
++func NewPrivateKeyECDH(string, []byte) (*PrivateKeyECDH, error) {
++	panic("cryptobackend: not available")
 +}
++func NewPublicKeyECDH(string, []byte) (*PublicKeyECDH, error) { panic("cryptobackend: not available") }
++func (*PublicKeyECDH) Bytes() []byte                          { panic("cryptobackend: not available") }
++func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)    { panic("cryptobackend: not available") }
 +
-+func SupportsTLS13KDF() bool {
-+	return openssl.SupportsTLS13KDF()
-+}
++func SupportsTLS13KDF() bool { panic("cryptobackend: not available") }
 +
 +func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
-+	return openssl.ExpandTLS13KDF(h, pseudorandomKey, label, context, keyLength)
++	panic("cryptobackend: not available")
 +}
 +
-+func SupportsHKDF() bool {
-+	return openssl.SupportsHKDF()
-+}
++func SupportsHKDF() bool { panic("cryptobackend: not available") }
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
++	panic("cryptobackend: not available")
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	return openssl.ExtractHKDF(h, secret, salt)
++	panic("cryptobackend: not available")
 +}
 +
-+func SupportsPBKDF2() bool {
-+	return openssl.SupportsPBKDF2()
-+}
++func SupportsPBKDF2() bool { panic("cryptobackend: not available") }
 +
-+func PBKDF2(pass, salt []byte, iter, keyLen int, h func() hash.Hash) ([]byte, error) {
-+	return openssl.PBKDF2(pass, salt, iter, keyLen, h)
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func SupportsTLS1PRF() bool {
-+	return openssl.SupportsTLS1PRF()
-+}
++func SupportsTLS1PRF() bool { panic("cryptobackend: not available") }
 +
 +func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
-+	return openssl.TLS1PRF(result, secret, label, seed, h)
++	panic("cryptobackend: not available")
 +}
 +
-+func SupportsDESCipher() bool {
-+	return openssl.SupportsDESCipher()
-+}
++func SupportsDESCipher() bool { panic("cryptobackend: not available") }
 +
-+func SupportsTripleDESCipher() bool {
-+	return openssl.SupportsTripleDESCipher()
-+}
++func SupportsTripleDESCipher() bool { panic("cryptobackend: not available") }
 +
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	return openssl.NewDESCipher(key)
-+}
++func NewDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
 +
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	return openssl.NewTripleDESCipher(key)
-+}
++func NewTripleDESCipher(key []byte) (cipher.Block, error) { panic("cryptobackend: not available") }
 +
-+func SupportsRC4() bool {
-+	return openssl.SupportsRC4()
-+}
++func SupportsRC4() bool { panic("cryptobackend: not available") }
 +
-+type RC4Cipher = openssl.RC4Cipher
++type RC4Cipher struct{}
 +
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) { return openssl.NewRC4Cipher(key) }
++func (c *RC4Cipher) Reset()                       { panic("cryptobackend: not available") }
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) { panic("cryptobackend: not available") }
 +
-+func SupportsEd25519() bool { return openssl.SupportsEd25519() }
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) { panic("cryptobackend: not available") }
 +
-+type PublicKeyEd25519 = *openssl.PublicKeyEd25519
-+type PrivateKeyEd25519 = *openssl.PrivateKeyEd25519
++func SupportsEd25519() bool { panic("cryptobackend: not available") }
 +
-+func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
-+	return openssl.GenerateKeyEd25519()
++type PublicKeyEd25519 struct{}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+// Deprecated: use NewPrivateKeyEd25519 instead.
-+func NewPrivateKeyEd25119(priv []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519(priv)
++type PrivateKeyEd25519 struct{}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+// Deprecated: use NewPublicKeyEd25519 instead.
-+func NewPublicKeyEd25119(pub []byte) (PublicKeyEd25519, error) {
-+	return openssl.NewPublicKeyEd25519(pub)
++func GenerateKeyEd25519() (PrivateKeyEd25519, error) {
++	panic("cryptobackend: not available")
 +}
 +
 +func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519(priv)
++	panic("cryptobackend: not available")
 +}
 +
 +func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	return openssl.NewPublicKeyEd25519(pub)
++	panic("cryptobackend: not available")
 +}
 +
 +func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	return openssl.NewPrivateKeyEd25519FromSeed(seed)
++	panic("cryptobackend: not available")
 +}
 +
 +func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	return openssl.SignEd25519(priv, message)
++	panic("cryptobackend: not available")
 +}
 +
 +func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	return openssl.VerifyEd25519(pub, message, sig)
++	panic("cryptobackend: not available")
 +}
 +
-+type PublicKeyDSA = openssl.PublicKeyDSA
-+type PrivateKeyDSA = openssl.PrivateKeyDSA
-+
 +func SupportsDSA(l, n int) bool {
-+	return openssl.SupportsDSA()
++	panic("cryptobackend: not available")
 +}
 +
-+func GenerateParametersDSA(l, n int) (p, q, g openssl.BigInt, err error) {
-+	params, err := openssl.GenerateParametersDSA(l, n)
-+	return params.P, params.Q, params.G, err
++func GenerateParametersDSA(l, n int) (p, q, g BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func GenerateKeyDSA(p, q, g openssl.BigInt) (x, y openssl.BigInt, err error) {
-+	return openssl.GenerateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g})
-+}
++type PublicKeyDSA struct{ _ int }
++type PrivateKeyDSA struct{ _ int }
 +
-+func NewPrivateKeyDSA(p, q, g, x, y openssl.BigInt) (*openssl.PrivateKeyDSA, error) {
-+	return openssl.NewPrivateKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, x, y)
++func GenerateKeyDSA(p, q, g BigInt) (x, y BigInt, err error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func NewPublicKeyDSA(p, q, g, y openssl.BigInt) (*openssl.PublicKeyDSA, error) {
-+	return openssl.NewPublicKeyDSA(openssl.DSAParameters{P: p, Q: q, G: g}, y)
++func NewPrivateKeyDSA(p, q, g, x, y BigInt) (*PrivateKeyDSA, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (openssl.BigInt, openssl.BigInt, error)) (r, s openssl.BigInt, err error) {
-+	sig, err := openssl.SignDSA(priv, hash)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	r, s, err = parseSignature(sig)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+
-+	return openssl.BigInt(r), openssl.BigInt(s), nil
++func NewPublicKeyDSA(p, q, g, y BigInt) (*PublicKeyDSA, error) {
++	panic("cryptobackend: not available")
 +}
 +
-+func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s openssl.BigInt, encodeSignature func(r, s openssl.BigInt) ([]byte, error)) bool {
-+	sig, err := encodeSignature(r, s)
-+	if err != nil {
-+		return false
-+	}
++func SignDSA(priv *PrivateKeyDSA, hash []byte, parseSignature func([]byte) (BigInt, BigInt, error)) (r, s BigInt, err error) {
++	panic("cryptobackend: not available")
++}
 +
-+	return openssl.VerifyDSA(pub, hashed, sig)
++func VerifyDSA(pub *PublicKeyDSA, hashed []byte, r, s BigInt, encodeSignature func(r, s BigInt) ([]byte, error)) bool {
++	panic("cryptobackend: not available")
 +}
 +
 +func SupportsMLKEM768() bool {
-+	return openssl.SupportsMLKEM768()
++	panic("cryptobackend: not available")
 +}
 +
 +func SupportsMLKEM1024() bool {
-+	return openssl.SupportsMLKEM1024()
++	panic("cryptobackend: not available")
 +}
 +
-+type DecapsulationKeyMLKEM768 = openssl.DecapsulationKeyMLKEM768
-+type EncapsulationKeyMLKEM768 = openssl.EncapsulationKeyMLKEM768
++type DecapsulationKeyMLKEM768 struct{}
++type EncapsulationKeyMLKEM768 struct{}
 +
 +func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	return openssl.GenerateKeyMLKEM768()
++	panic("cryptobackend: not available")
 +}
 +
 +func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	return openssl.NewDecapsulationKeyMLKEM768(seed)
++	panic("cryptobackend: not available")
 +}
 +
 +func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	return openssl.NewEncapsulationKeyMLKEM768(encapsulationKey)
++	panic("cryptobackend: not available")
 +}
 +
-+type DecapsulationKeyMLKEM1024 = openssl.DecapsulationKeyMLKEM1024
-+type EncapsulationKeyMLKEM1024 = openssl.EncapsulationKeyMLKEM1024
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cryptobackend: not available")
++}
++
++type DecapsulationKeyMLKEM1024 struct{}
++type EncapsulationKeyMLKEM1024 struct{}
 +
 +func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	return openssl.GenerateKeyMLKEM1024()
++	panic("cryptobackend: not available")
 +}
 +
 +func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	return openssl.NewDecapsulationKeyMLKEM1024(seed)
++	panic("cryptobackend: not available")
 +}
 +
 +func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	return openssl.NewEncapsulationKeyMLKEM1024(encapsulationKey)
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	panic("cryptobackend: not available")
++}
++
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	panic("cryptobackend: not available")
++}
++
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	panic("cryptobackend: not available")
 +}
 +
 +func SupportsChaCha20Poly1305() bool {
-+	return openssl.SupportsChaCha20Poly1305()
++	return false
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	return openssl.NewChaCha20Poly1305(key)
++	panic("cryptobackend: not available")
 +}
 diff --git a/src/crypto/internal/backend/stub.s b/src/crypto/internal/backend/stub.s
 new file mode 100644
@@ -3138,7 +3138,7 @@ index 00000000000000..5e4b436554d44d
 +// (because the implementation might be here).
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
-index 00000000000000..1461a5f75b3b06
+index 00000000000000..7500bd3a86472b
 --- /dev/null
 +++ b/src/crypto/systemcrypto_nocgo_linux.go
 @@ -0,0 +1,18 @@
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 246e933bf08..0b7842f8f7a 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -67,13 +67,13 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/darwin_darwin.go                |  71 +++++++
  src/crypto/rsa/fips.go                        |  84 ++++----
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
  src/crypto/rsa/pss_test.go                    |  14 +-
  src/crypto/rsa/rsa.go                         |  29 +--
+ src/crypto/rsa/rsa_darwin.go                  |  71 +++++++
  src/crypto/rsa/rsa_test.go                    |   7 +-
  src/crypto/sha1/sha1.go                       |  11 +-
  src/crypto/sha1/sha1_test.go                  |  11 +-
@@ -109,7 +109,7 @@ Subject: [PATCH] Use crypto backends
  create mode 100644 src/crypto/ecdsa/badlinkname.go
  create mode 100644 src/crypto/ed25519/boring.go
  create mode 100644 src/crypto/ed25519/notboring.go
- create mode 100644 src/crypto/rsa/darwin_darwin.go
+ create mode 100644 src/crypto/rsa/rsa_darwin.go
  create mode 100644 src/crypto/tls/internal/tls13/doc.go
  create mode 100644 src/crypto/tls/internal/tls13/tls13.go
  create mode 100644 src/hash/boring_test.go
@@ -2564,83 +2564,6 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
-diff --git a/src/crypto/rsa/darwin_darwin.go b/src/crypto/rsa/darwin_darwin.go
-new file mode 100644
-index 00000000000000..bff8ac449c9a3b
---- /dev/null
-+++ b/src/crypto/rsa/darwin_darwin.go
-@@ -0,0 +1,71 @@
-+// Copyright 2017 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build goexperiment.systemcrypto
-+
-+package rsa
-+
-+import (
-+	"crypto/internal/backend"
-+	"crypto/internal/backend/bbig"
-+	"errors"
-+	"math/big"
-+	_ "unsafe"
-+
-+	"golang.org/x/crypto/cryptobyte"
-+	"golang.org/x/crypto/cryptobyte/asn1"
-+)
-+
-+//go:linkname decodeKey
-+func decodeKey(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
-+	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
-+		return nil, nil, nil, nil, nil, nil, nil, nil, e
-+	}
-+	input := cryptobyte.String(data)
-+	var version int
-+	n, e, d, p, q, dp, dq, qinv := new(big.Int), new(big.Int), new(big.Int), new(big.Int),
-+		new(big.Int), new(big.Int), new(big.Int), new(big.Int)
-+	// Parse the ASN.1 sequence
-+	if !input.ReadASN1(&input, asn1.SEQUENCE) {
-+		return bad(errors.New("invalid ASN.1 structure: not a sequence"))
-+	}
-+	if !input.ReadASN1Integer(&version) || version != 0 {
-+		return bad(errors.New("invalid ASN.1 structure: unsupported version"))
-+	}
-+	if !input.ReadASN1Integer(n) || !input.ReadASN1Integer(e) ||
-+		!input.ReadASN1Integer(d) || !input.ReadASN1Integer(p) ||
-+		!input.ReadASN1Integer(q) || !input.ReadASN1Integer(dp) ||
-+		!input.ReadASN1Integer(dq) || !input.ReadASN1Integer(qinv) {
-+		return bad(errors.New("invalid ASN.1 structure"))
-+	}
-+	return bbig.Enc(n), bbig.Enc(e), bbig.Enc(d), bbig.Enc(p), bbig.Enc(q),
-+		bbig.Enc(dp), bbig.Enc(dq), bbig.Enc(qinv), nil
-+}
-+
-+//go:linkname encodeKey
-+func encodeKey(N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt) ([]byte, error) {
-+	builder := cryptobyte.NewBuilder(nil)
-+	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		b.AddASN1Int64(0)               // Add version as int64
-+		b.AddASN1BigInt(bbig.Dec(N))    // Add modulus
-+		b.AddASN1BigInt(bbig.Dec(E))    // Add public exponent
-+		b.AddASN1BigInt(bbig.Dec(D))    // Add private exponent
-+		b.AddASN1BigInt(bbig.Dec(P))    // Add prime1
-+		b.AddASN1BigInt(bbig.Dec(Q))    // Add prime2
-+		b.AddASN1BigInt(bbig.Dec(Dp))   // Add exponent1
-+		b.AddASN1BigInt(bbig.Dec(Dq))   // Add exponent2
-+		b.AddASN1BigInt(bbig.Dec(Qinv)) // Add coefficient
-+	})
-+	return builder.Bytes()
-+}
-+
-+//go:linkname encodePublicKey
-+func encodePublicKey(N, E backend.BigInt) ([]byte, error) {
-+	builder := cryptobyte.NewBuilder(nil)
-+	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
-+		b.AddASN1BigInt(bbig.Dec(N)) // Add modulus
-+		b.AddASN1BigInt(bbig.Dec(E)) // Add public exponent
-+	})
-+	return builder.Bytes()
-+}
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
 index fb2395886b053b..18334e731f9349 100644
 --- a/src/crypto/rsa/fips.go
@@ -3020,6 +2943,83 @@ index b94b129867727b..149dd4321f8d72 100644
  	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
  		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
  	}
+diff --git a/src/crypto/rsa/rsa_darwin.go b/src/crypto/rsa/rsa_darwin.go
+new file mode 100644
+index 00000000000000..b549c6e3b17484
+--- /dev/null
++++ b/src/crypto/rsa/rsa_darwin.go
+@@ -0,0 +1,71 @@
++// Copyright 2017 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build goexperiment.systemcrypto
++
++package rsa
++
++import (
++	"crypto/internal/backend"
++	"crypto/internal/backend/bbig"
++	"errors"
++	"math/big"
++	_ "unsafe"
++
++	"golang.org/x/crypto/cryptobyte"
++	"golang.org/x/crypto/cryptobyte/asn1"
++)
++
++//go:linkname decodeKey
++func decodeKey(data []byte) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt, err error) {
++		return nil, nil, nil, nil, nil, nil, nil, nil, e
++	}
++	input := cryptobyte.String(data)
++	var version int
++	n, e, d, p, q, dp, dq, qinv := new(big.Int), new(big.Int), new(big.Int), new(big.Int),
++		new(big.Int), new(big.Int), new(big.Int), new(big.Int)
++	// Parse the ASN.1 sequence
++	if !input.ReadASN1(&input, asn1.SEQUENCE) {
++		return bad(errors.New("invalid ASN.1 structure: not a sequence"))
++	}
++	if !input.ReadASN1Integer(&version) || version != 0 {
++		return bad(errors.New("invalid ASN.1 structure: unsupported version"))
++	}
++	if !input.ReadASN1Integer(n) || !input.ReadASN1Integer(e) ||
++		!input.ReadASN1Integer(d) || !input.ReadASN1Integer(p) ||
++		!input.ReadASN1Integer(q) || !input.ReadASN1Integer(dp) ||
++		!input.ReadASN1Integer(dq) || !input.ReadASN1Integer(qinv) {
++		return bad(errors.New("invalid ASN.1 structure"))
++	}
++	return bbig.Enc(n), bbig.Enc(e), bbig.Enc(d), bbig.Enc(p), bbig.Enc(q),
++		bbig.Enc(dp), bbig.Enc(dq), bbig.Enc(qinv), nil
++}
++
++//go:linkname encodeKey
++func encodeKey(N, E, D, P, Q, Dp, Dq, Qinv backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1Int64(0)               // Add version as int64
++		b.AddASN1BigInt(bbig.Dec(N))    // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E))    // Add public exponent
++		b.AddASN1BigInt(bbig.Dec(D))    // Add private exponent
++		b.AddASN1BigInt(bbig.Dec(P))    // Add prime1
++		b.AddASN1BigInt(bbig.Dec(Q))    // Add prime2
++		b.AddASN1BigInt(bbig.Dec(Dp))   // Add exponent1
++		b.AddASN1BigInt(bbig.Dec(Dq))   // Add exponent2
++		b.AddASN1BigInt(bbig.Dec(Qinv)) // Add coefficient
++	})
++	return builder.Bytes()
++}
++
++//go:linkname encodePublicKey
++func encodePublicKey(N, E backend.BigInt) ([]byte, error) {
++	builder := cryptobyte.NewBuilder(nil)
++	builder.AddASN1(asn1.SEQUENCE, func(b *cryptobyte.Builder) {
++		b.AddASN1BigInt(bbig.Dec(N)) // Add modulus
++		b.AddASN1BigInt(bbig.Dec(E)) // Add public exponent
++	})
++	return builder.Bytes()
++}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
 index 124fba1e8a4faa..af6d8e9291af62 100644
 --- a/src/crypto/rsa/rsa_test.go

From 9dded4bb54f4b4edd41fa9e66b300d28bbc1a10a Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 25 Feb 2026 20:04:07 +0000
Subject: [PATCH 745/887] resolve 3-way merge conflicts

---
 patches/0004-Use-crypto-backends.patch | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 246e933bf08..1f3b1bd09ee 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -67,7 +67,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/darwin_darwin.go                |  71 +++++++
+ src/crypto/rsa/darwin_darwin.go               |  71 +++++++
  src/crypto/rsa/fips.go                        |  84 ++++----
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
@@ -1759,10 +1759,10 @@ index 6d67ee8b3429a1..8f8d5937ea913c 100644
  // Unwrap returns h, or a crypto/internal/fips140 inner implementation of h.
  //
 diff --git a/src/crypto/internal/fips140only/fips140only.go b/src/crypto/internal/fips140only/fips140only.go
-index 1b0a4be6ba5897..72fea1cfa7eed8 100644
+index a8d840b17022cc..2a17f7da2d4aaa 100644
 --- a/src/crypto/internal/fips140only/fips140only.go
 +++ b/src/crypto/internal/fips140only/fips140only.go
-@@ -20,13 +20,20 @@ func Enforced() bool {
+@@ -18,11 +18,18 @@ func Enforced() bool {
  	return fips140.Enforced()
  }
  
@@ -1783,8 +1783,6 @@ index 1b0a4be6ba5897..72fea1cfa7eed8 100644
 +	}
 +	return false
  }
- 
- func ApprovedRandomReader(r io.Reader) bool {
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
 index 96df536d56f345..01613841a3c87e 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go
@@ -1934,7 +1932,7 @@ index 7f2824ca9ac052..f0d3b2a8459871 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/internal/rand/rand.go b/src/crypto/internal/rand/rand.go
-index 29648b9f386ed7..b3113a3ee2e1fa 100644
+index 00e736a579859a..3583dadcf7aeec 100644
 --- a/src/crypto/internal/rand/rand.go
 +++ b/src/crypto/internal/rand/rand.go
 @@ -5,7 +5,7 @@
@@ -2426,7 +2424,7 @@ index 018fe013cef600..ec710c6f935e3b 100644
  	"crypto/internal/rand"
  	"io"
 diff --git a/src/crypto/rand/rand_test.go b/src/crypto/rand/rand_test.go
-index 3bb3d5f1acda25..cd4b55de7c48cb 100644
+index 13e4a65db28bd2..3404dd39d73c6f 100644
 --- a/src/crypto/rand/rand_test.go
 +++ b/src/crypto/rand/rand_test.go
 @@ -7,6 +7,7 @@ package rand
@@ -2435,9 +2433,9 @@ index 3bb3d5f1acda25..cd4b55de7c48cb 100644
  	"compress/flate"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
+ 	"crypto/internal/rand"
  	"errors"
- 	"internal/testenv"
-@@ -154,13 +155,17 @@ var sink byte
+@@ -156,13 +157,17 @@ var sink byte
  
  func TestAllocations(t *testing.T) {
  	cryptotest.SkipTestAllocations(t)
@@ -2566,7 +2564,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/darwin_darwin.go b/src/crypto/rsa/darwin_darwin.go
 new file mode 100644
-index 00000000000000..bff8ac449c9a3b
+index 00000000000000..b549c6e3b17484
 --- /dev/null
 +++ b/src/crypto/rsa/darwin_darwin.go
 @@ -0,0 +1,71 @@

From 165873c80410bd67ed47e281eb52e442c2680a45 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 25 Feb 2026 15:41:47 -0800
Subject: [PATCH 746/887] Include revision in Microsoft-specific version string
 (#2140)

* Include revision in Microsoft-specific version string

* Split VERSION and MICROSOFT_REVISION handling
---
 eng/_util/cmd/build/build.go | 46 ++++++++++++++++++++----------------
 1 file changed, 26 insertions(+), 20 deletions(-)

diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index a25d8bef564..7634bcc41f6 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -110,6 +110,7 @@ func build(o *options) (err error) {
 	if err != nil {
 		return err
 	}
+	goRootDir := filepath.Join(rootDir, "go")
 
 	if o.Refresh {
 		config, err := patch.FindAncestorConfig(rootDir)
@@ -142,6 +143,21 @@ func build(o *options) (err error) {
 		return err
 	}
 
+	// Make sure the MICROSOFT_REVISION file from the outer repository is in the Go root. We need to
+	// copy it in before running the build (not just before running distpack) because it's used
+	// during the build to generate the "src/internal/buildcfg/zbootstrap.go" file.
+	microsoftRevisionDst := filepath.Join(goRootDir, "MICROSOFT_REVISION")
+	if err := copyFile(microsoftRevisionDst, filepath.Join(rootDir, "MICROSOFT_REVISION")); err != nil {
+		if !errors.Is(err, os.ErrNotExist) {
+			return fmt.Errorf("unable to read MICROSOFT_REVISION file for unexpected reason: %v", err)
+		}
+		// Ok: a main branch or pre-stable release branch has no MICROSOFT_REVISION file.
+	} else {
+		// Best effort: clean up the MICROSOFT_REVISION file when we're done. Clean up for
+		// tidier dev workflows: the temp MICROSOFT_REVISION file should never be checked in.
+		defer os.Remove(microsoftRevisionDst)
+	}
+
 	// The upstream build scripts in {repo-root}/src require your working directory to be src, or
 	// they instantly fail. Change the current process dir so that we can run them.
 	if err := os.Chdir("go/src"); err != nil {
@@ -213,7 +229,6 @@ func build(o *options) (err error) {
 		}
 	}
 
-	goRootDir := filepath.Join(rootDir, "go")
 	if o.CreatePDB {
 		if _, err := exec.LookPath("gopdb"); err != nil {
 			return fmt.Errorf("gopdb not found in PATH: %v", err)
@@ -262,36 +277,26 @@ func build(o *options) (err error) {
 	}
 
 	if o.PackBuild || o.PackSource {
-		// distpack needs a VERSION file to run. If we're on the main branch, we don't have one, so
-		// use dist's version calculation to create a temp dev version and put it in VERSION.
+		// We need to figure out the version string so we can identify the distpack output files and
+		// copy them to our artifacts dir with the right names.
 		var version string
 		if data, err := os.ReadFile(filepath.Join(goRootDir, "VERSION")); err != nil {
 			if errors.Is(err, os.ErrNotExist) {
+				// The distpack tool needs a VERSION file to exist or it'll fail. If we're on the
+				// main branch, there won't be a VERSION file, so use dist's version calculation to
+				// create a temp dev version and put it in VERSION.
 				if version, err = writeDevelVersionFile(goRootDir, executableExtension); err != nil {
-					return fmt.Errorf("unable to pack: failed writing development VERSION file: %v", err)
+					return fmt.Errorf("unable to write development VERSION file: %v", err)
 				}
-				// Best effort: clean up the VERSION file when we're done. Clean up for tidier dev
-				// workflows: the temp VERSION file should never be checked in.
+				// Best effort: clean up the VERSION file when we're done with the build. Clean up
+				// for tidier dev workflows: the temp VERSION file should never be checked in.
 				defer os.Remove(filepath.Join(goRootDir, "VERSION"))
 			} else {
-				return fmt.Errorf("unable to pack: VERSION file in unexpected state: %v", err)
+				return fmt.Errorf("unable to read VERSION file for unexpected reason: %v", err)
 			}
 		} else {
 			version, _, _ = strings.Cut(string(data), "\n")
 		}
-		// We also need to copy our MICROSOFT_REVISION file in so the toolset can report that it's a
-		// Microsoft build of a specific revision and embed that info into built binaries.
-		microsoftRevisionDst := filepath.Join(goRootDir, "MICROSOFT_REVISION")
-		if err := copyFile(microsoftRevisionDst, filepath.Join(rootDir, "MICROSOFT_REVISION")); err != nil {
-			if !errors.Is(err, os.ErrNotExist) {
-				return fmt.Errorf("unable to pack: failed to read MICROSOFT_REVISION file for unexpected reason: %v", err)
-			}
-			// Ok: a main branch or pre-stable release branch has no MICROSOFT_REVISION file.
-		} else {
-			// Best effort: clean up the MICROSOFT_REVISION file when we're done. Clean up for
-			// tidier dev workflows: the temp MICROSOFT_REVISION file should never be checked in.
-			defer os.Remove(microsoftRevisionDst)
-		}
 
 		cmd := exec.Command(filepath.Join(goRootDir, "bin", "go"+executableExtension), "tool", "distpack")
 		cmd.Env = append(os.Environ(), "GOROOT="+goRootDir)
@@ -342,6 +347,7 @@ func build(o *options) (err error) {
 }
 
 func writeDevelVersionFile(goRootDir, executableExtension string) (string, error) {
+	// Use "go tool dist version" to directly get the version the toolset would call itself.
 	cmd := exec.Command(filepath.Join(goRootDir, "bin", "go"+executableExtension), "tool", "dist", "version")
 	cmd.Env = append(os.Environ(), "GOROOT="+goRootDir)
 	vBytes, err := cmd.CombinedOutput()

From e93ca5aeb67df738ba84abedb7ab48047be941e5 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 26 Feb 2026 09:09:15 +0000
Subject: [PATCH 747/887] re generate zsyscalltrace_windows.go

---
 ...-Add-support-for-logging-used-Windows-APIs.patch | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/patches/0006-Add-support-for-logging-used-Windows-APIs.patch b/patches/0006-Add-support-for-logging-used-Windows-APIs.patch
index 78a481d9916..9b8d777d7a5 100644
--- a/patches/0006-Add-support-for-logging-used-Windows-APIs.patch
+++ b/patches/0006-Add-support-for-logging-used-Windows-APIs.patch
@@ -8,19 +8,19 @@ Subject: [PATCH] Add support for logging used Windows APIs
  src/runtime/syscalltrace_generate_windows.go |  50 +++++++
  src/runtime/syscalltrace_windows.go          | 136 +++++++++++++++++++
  src/runtime/syscalltrace_windows_test.go     |  81 +++++++++++
- src/runtime/zsyscalltrace_windows.go         |  59 ++++++++
+ src/runtime/zsyscalltrace_windows.go         |  60 ++++++++
  src/syscall/dll_windows.go                   |   4 +
- 6 files changed, 331 insertions(+)
+ 6 files changed, 332 insertions(+)
  create mode 100644 src/runtime/syscalltrace_generate_windows.go
  create mode 100644 src/runtime/syscalltrace_windows.go
  create mode 100644 src/runtime/syscalltrace_windows_test.go
  create mode 100644 src/runtime/zsyscalltrace_windows.go
 
 diff --git a/src/runtime/os_windows.go b/src/runtime/os_windows.go
-index f47419cf7dfe0d..f08a01b0801fd7 100644
+index 8ed4b12c8a6b12..6d56064feaa7f7 100644
 --- a/src/runtime/os_windows.go
 +++ b/src/runtime/os_windows.go
-@@ -220,6 +220,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
+@@ -222,6 +222,7 @@ func windowsFindfunc(lib uintptr, name []byte) stdFunction {
  	if name[len(name)-1] != 0 {
  		throw("usage")
  	}
@@ -315,10 +315,10 @@ index 00000000000000..626c5e98f7eae4
 +}
 diff --git a/src/runtime/zsyscalltrace_windows.go b/src/runtime/zsyscalltrace_windows.go
 new file mode 100644
-index 00000000000000..d827281b8e9f7b
+index 00000000000000..a34fca73d5f7e5
 --- /dev/null
 +++ b/src/runtime/zsyscalltrace_windows.go
-@@ -0,0 +1,59 @@
+@@ -0,0 +1,60 @@
 +// Code generated by syscalltrace_generate_windows.go. DO NOT EDIT.
 +
 +package runtime
@@ -346,6 +346,7 @@ index 00000000000000..d827281b8e9f7b
 +	"GetSystemDirectoryA\x00",
 +	"GetSystemInfo\x00",
 +	"GetThreadContext\x00",
++	"IsProcessorFeaturePresent\x00",
 +	"SetThreadContext\x00",
 +	"LoadLibraryExW\x00",
 +	"PostQueuedCompletionStatus\x00",

From 4b895171e035e1f20933e83eeaa72ecb65860267 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 26 Feb 2026 02:29:53 -0800
Subject: [PATCH 748/887] Change patch consistency workflow to instructions
 (#2161)

Allow Copilot to refine instructions a bit more during transition to
instructions. Add a canary statement to give a positive indication that
the instructions were used.
---
 .../patch-consistency.instructions.md         |   55 +
 .../patch-consistency-review.lock.yml         | 1061 -----------------
 .github/workflows/patch-consistency-review.md |   83 --
 3 files changed, 55 insertions(+), 1144 deletions(-)
 create mode 100644 .github/instructions/patch-consistency.instructions.md
 delete mode 100644 .github/workflows/patch-consistency-review.lock.yml
 delete mode 100644 .github/workflows/patch-consistency-review.md

diff --git a/.github/instructions/patch-consistency.instructions.md b/.github/instructions/patch-consistency.instructions.md
new file mode 100644
index 00000000000..11b2f94a69b
--- /dev/null
+++ b/.github/instructions/patch-consistency.instructions.md
@@ -0,0 +1,55 @@
+---
+description: "Use when reviewing, editing, or creating Git patch files in the patches/ directory. Covers patch consistency rules, vendor constraints, naming conventions, and Go file build tag guidelines. Apply during code review and pull request review of patch changes."
+applyTo: "patches/*.patch"
+---
+
+# Patch consistency review
+
+## Project context
+
+The `patches/` directory contains `git format-patch` files that are applied on top of the upstream Go source tree, which is in the `go/` submodule. Each patch is prefixed with a sequence number and a short description of its purpose, e.g. `0001-Vendor-external-dependencies.patch`, `0004-Use-crypto-backends.patch`. The patches are applied in order, and each one should be self-contained to a single logical concern and describe that concern in the commit message.
+
+## Rules to check
+
+### Vendor changes must be in the vendor patch
+
+If the diff adds, modifies, or removes any file under a `vendor/` directory path, verify:
+- The change is in `0001-Vendor-external-dependencies.patch` only. No other patch should touch vendor files
+- The corresponding `go.mod`, `go.sum`, and `modules.txt` changes are included in the same patch
+- The vendor patch doesn't include changes other than `vendor/` files, related module files, and `src/crypto/internal/backend/deps_ignore.go`
+
+### Patch naming convention
+
+New or renamed patch files must follow the `NNNN-Short-Description.patch` pattern (zero-padded four-digit prefix, hyphen-separated description) consistent with existing patches in the directory.
+
+### No redundant or misplaced changes
+
+- A new patch should not duplicate changes already covered by an existing patch
+- Changes should be in the patch whose description matches the concern. For example, crypto backend changes belong in the crypto backend patch, not in the vendor patch or a new unrelated patch
+- If an existing patch already covers the area being changed, the change should amend that patch rather than create a new one
+
+### Go file OS/arch constraints
+
+When a patch adds or modifies a Go file that targets a specific OS or architecture, prefer the filename suffix convention (`_linux.go`, `_windows.go`, `_darwin.go`) over adding OS/arch constraints in `//go:build` tags. If the filename suffix already implies the OS/arch, the build tag should not repeat it.
+
+- Preferred: `foo_linux.go` with `//go:build goexperiment.systemcrypto`
+- Avoid: `foo.go` with `//go:build goexperiment.systemcrypto && linux`
+
+### No extraneous blank lines
+
+Patches should not introduce unnecessary blank lines between functions, at the end of files, or between import groups. Whitespace should be consistent with the surrounding code in the Go source tree.
+
+## How to review
+
+1. **Identify which patch(es) changed**: Check the PR's modified files for `patches/*.patch`
+2. **Analyze the intent**: Read the patch diff to understand what feature or fix is being implemented
+3. **Cross-reference other patches**: Check if other patches in the directory touch the same source files or implement related functionality. Compare method signatures, behavior, and documentation for consistency
+4. **Flag inconsistencies**: Be specific about which patches need updates and what changes would bring them into alignment
+5. **If no issues**: Include the message "Patches are happy!" in the review conclusion if no consistency issues are found.
+
+## Review tone
+
+- Frame feedback as suggestions for maintaining consistency, not demands
+- Focus on consistency across the patch set, not general code quality
+- Skip trivial differences like comment styles or variable naming
+- Only comment when there are actual consistency issues to flag
diff --git a/.github/workflows/patch-consistency-review.lock.yml b/.github/workflows/patch-consistency-review.lock.yml
deleted file mode 100644
index f48e710f11f..00000000000
--- a/.github/workflows/patch-consistency-review.lock.yml
+++ /dev/null
@@ -1,1061 +0,0 @@
-#
-#    ___                   _   _      
-#   / _ \                 | | (_)     
-#  | |_| | __ _  ___ _ __ | |_ _  ___ 
-#  |  _  |/ _` |/ _ \ '_ \| __| |/ __|
-#  | | | | (_| |  __/ | | | |_| | (__ 
-#  \_| |_/\__, |\___|_| |_|\__|_|\___|
-#          __/ |
-#  _    _ |___/ 
-# | |  | |                / _| |
-# | |  | | ___ _ __ _  __| |_| | _____      ____
-# | |/\| |/ _ \ '__| |/ /|  _| |/ _ \ \ /\ / / ___|
-# \  /\  / (_) | | | | ( | | | | (_) \ V  V /\__ \
-#  \/  \/ \___/|_| |_|\_\|_| |_|\___/ \_/\_/ |___/
-#
-# This file was automatically generated by gh-aw (v0.40.0). DO NOT EDIT.
-#
-# To update this file, edit the corresponding .md file and run:
-#   gh aw compile
-# For more information: https://github.com/github/gh-aw/blob/main/.github/aw/github-agentic-workflows.md
-#
-# Reviews PRs to ensure Git patches are updated consistently
-#
-# frontmatter-hash: 2b5038c3dc95b282543f1fb054c091a84fb71c122041ab217da0f60eef280927
-
-name: "Patch Consistency Review Agent"
-"on":
-  pull_request:
-    paths:
-    - patches/*.patch
-    types:
-    - opened
-    - synchronize
-    - reopened
-  workflow_dispatch:
-    inputs:
-      pr_number:
-        description: PR number to review
-        required: true
-        type: string
-
-permissions: {}
-
-concurrency:
-  group: "gh-aw-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}"
-  cancel-in-progress: true
-
-run-name: "Patch Consistency Review Agent"
-
-jobs:
-  activation:
-    needs: pre_activation
-    if: >
-      (needs.pre_activation.outputs.activated == 'true') && ((github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id))
-    runs-on: ubuntu-slim
-    permissions:
-      contents: read
-    outputs:
-      comment_id: ""
-      comment_repo: ""
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Check workflow file timestamps
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_WORKFLOW_FILE: "patch-consistency-review.lock.yml"
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/check_workflow_timestamp_api.cjs');
-            await main();
-
-  agent:
-    needs: activation
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      issues: read
-      pull-requests: read
-    env:
-      DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
-      GH_AW_ASSETS_ALLOWED_EXTS: ""
-      GH_AW_ASSETS_BRANCH: ""
-      GH_AW_ASSETS_MAX_SIZE_KB: 0
-      GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs
-      GH_AW_SAFE_OUTPUTS: /opt/gh-aw/safeoutputs/outputs.jsonl
-      GH_AW_SAFE_OUTPUTS_CONFIG_PATH: /opt/gh-aw/safeoutputs/config.json
-      GH_AW_SAFE_OUTPUTS_TOOLS_PATH: /opt/gh-aw/safeoutputs/tools.json
-    outputs:
-      has_patch: ${{ steps.collect_output.outputs.has_patch }}
-      model: ${{ steps.generate_aw_info.outputs.model }}
-      output: ${{ steps.collect_output.outputs.output }}
-      output_types: ${{ steps.collect_output.outputs.output_types }}
-      secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          persist-credentials: false
-      - name: Create gh-aw temp directory
-        run: bash /opt/gh-aw/actions/create_gh_aw_tmp_dir.sh
-      - name: Configure Git credentials
-        env:
-          REPO_NAME: ${{ github.repository }}
-          SERVER_URL: ${{ github.server_url }}
-        run: |
-          git config --global user.email "github-actions[bot]@users.noreply.github.com"
-          git config --global user.name "github-actions[bot]"
-          # Re-authenticate git with GitHub token
-          SERVER_URL_STRIPPED="${SERVER_URL#https://}"
-          git remote set-url origin "https://x-access-token:${{ github.token }}@${SERVER_URL_STRIPPED}/${REPO_NAME}.git"
-          echo "Git configured with standard GitHub Actions identity"
-      - name: Checkout PR branch
-        if: |
-          github.event.pull_request
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/checkout_pr_branch.cjs');
-            await main();
-      - name: Validate COPILOT_GITHUB_TOKEN secret
-        id: validate-secret
-        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
-        env:
-          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-      - name: Install GitHub Copilot CLI
-        run: /opt/gh-aw/actions/install_copilot_cli.sh 0.0.400
-      - name: Install awf binary
-        run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.13.1
-      - name: Determine automatic lockdown mode for GitHub MCP server
-        id: determine-automatic-lockdown
-        env:
-          TOKEN_CHECK: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
-        if: env.TOKEN_CHECK != ''
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
-        with:
-          script: |
-            const determineAutomaticLockdown = require('/opt/gh-aw/actions/determine_automatic_lockdown.cjs');
-            await determineAutomaticLockdown(github, context, core);
-      - name: Download container images
-        run: bash /opt/gh-aw/actions/download_docker_images.sh ghcr.io/github/gh-aw-mcpg:v0.0.94 ghcr.io/github/github-mcp-server:v0.30.2 node:lts-alpine
-      - name: Write Safe Outputs Config
-        run: |
-          mkdir -p /opt/gh-aw/safeoutputs
-          mkdir -p /tmp/gh-aw/safeoutputs
-          mkdir -p /tmp/gh-aw/mcp-logs/safeoutputs
-          cat > /opt/gh-aw/safeoutputs/config.json << 'EOF'
-          {"add_comment":{"max":1},"create_pull_request_review_comment":{"max":10},"missing_data":{},"missing_tool":{},"noop":{"max":1}}
-          EOF
-          cat > /opt/gh-aw/safeoutputs/tools.json << 'EOF'
-          [
-            {
-              "description": "Add a comment to an existing GitHub issue, pull request, or discussion. Use this to provide feedback, answer questions, or add information to an existing conversation. For creating new items, use create_issue, create_discussion, or create_pull_request instead. CONSTRAINTS: Maximum 1 comment(s) can be added.",
-              "inputSchema": {
-                "additionalProperties": false,
-                "properties": {
-                  "body": {
-                    "description": "The comment text in Markdown format. This is the 'body' field - do not use 'comment_body' or other variations. Provide helpful, relevant information that adds value to the conversation.",
-                    "type": "string"
-                  },
-                  "item_number": {
-                    "description": "The issue, pull request, or discussion number to comment on. This is the numeric ID from the GitHub URL (e.g., 123 in github.com/owner/repo/issues/123). If omitted, the tool will attempt to resolve the target from the current workflow context (triggering issue, PR, or discussion).",
-                    "type": "number"
-                  }
-                },
-                "required": [
-                  "body"
-                ],
-                "type": "object"
-              },
-              "name": "add_comment"
-            },
-            {
-              "description": "Create a review comment on a specific line of code in a pull request. Use this for inline code review feedback, suggestions, or questions about specific code changes. For general PR comments not tied to specific lines, use add_comment instead. CONSTRAINTS: Maximum 10 review comment(s) can be created. Comments will be on the RIGHT side of the diff.",
-              "inputSchema": {
-                "additionalProperties": false,
-                "properties": {
-                  "body": {
-                    "description": "Review comment content in Markdown. Provide specific, actionable feedback about the code at this location.",
-                    "type": "string"
-                  },
-                  "line": {
-                    "description": "Line number for the comment. For single-line comments, this is the target line. For multi-line comments, this is the ending line.",
-                    "type": [
-                      "number",
-                      "string"
-                    ]
-                  },
-                  "path": {
-                    "description": "File path relative to the repository root (e.g., 'src/auth/login.js'). Must be a file that was changed in the PR.",
-                    "type": "string"
-                  },
-                  "side": {
-                    "description": "Side of the diff to comment on: RIGHT for the new version (additions), LEFT for the old version (deletions). Defaults to RIGHT.",
-                    "enum": [
-                      "LEFT",
-                      "RIGHT"
-                    ],
-                    "type": "string"
-                  },
-                  "start_line": {
-                    "description": "Starting line number for multi-line comments. When set, the comment spans from start_line to line. Omit for single-line comments.",
-                    "type": [
-                      "number",
-                      "string"
-                    ]
-                  }
-                },
-                "required": [
-                  "path",
-                  "line",
-                  "body"
-                ],
-                "type": "object"
-              },
-              "name": "create_pull_request_review_comment"
-            },
-            {
-              "description": "Report that a tool or capability needed to complete the task is not available, or share any information you deem important about missing functionality or limitations. Use this when you cannot accomplish what was requested because the required functionality is missing or access is restricted.",
-              "inputSchema": {
-                "additionalProperties": false,
-                "properties": {
-                  "alternatives": {
-                    "description": "Any workarounds, manual steps, or alternative approaches the user could take (max 256 characters).",
-                    "type": "string"
-                  },
-                  "reason": {
-                    "description": "Explanation of why this tool is needed or what information you want to share about the limitation (max 256 characters).",
-                    "type": "string"
-                  },
-                  "tool": {
-                    "description": "Optional: Name or description of the missing tool or capability (max 128 characters). Be specific about what functionality is needed.",
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "reason"
-                ],
-                "type": "object"
-              },
-              "name": "missing_tool"
-            },
-            {
-              "description": "Log a transparency message when no significant actions are needed. Use this to confirm workflow completion and provide visibility when analysis is complete but no changes or outputs are required (e.g., 'No issues found', 'All checks passed'). This ensures the workflow produces human-visible output even when no other actions are taken.",
-              "inputSchema": {
-                "additionalProperties": false,
-                "properties": {
-                  "message": {
-                    "description": "Status or completion message to log. Should explain what was analyzed and the outcome (e.g., 'Code review complete - no issues found', 'Analysis complete - all tests passing').",
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "message"
-                ],
-                "type": "object"
-              },
-              "name": "noop"
-            },
-            {
-              "description": "Report that data or information needed to complete the task is not available. Use this when you cannot accomplish what was requested because required data, context, or information is missing.",
-              "inputSchema": {
-                "additionalProperties": false,
-                "properties": {
-                  "alternatives": {
-                    "description": "Any workarounds, manual steps, or alternative approaches the user could take (max 256 characters).",
-                    "type": "string"
-                  },
-                  "context": {
-                    "description": "Additional context about the missing data or where it should come from (max 256 characters).",
-                    "type": "string"
-                  },
-                  "data_type": {
-                    "description": "Type or description of the missing data or information (max 128 characters). Be specific about what data is needed.",
-                    "type": "string"
-                  },
-                  "reason": {
-                    "description": "Explanation of why this data is needed to complete the task (max 256 characters).",
-                    "type": "string"
-                  }
-                },
-                "required": [],
-                "type": "object"
-              },
-              "name": "missing_data"
-            }
-          ]
-          EOF
-          cat > /opt/gh-aw/safeoutputs/validation.json << 'EOF'
-          {
-            "add_comment": {
-              "defaultMax": 1,
-              "fields": {
-                "body": {
-                  "required": true,
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 65000
-                },
-                "item_number": {
-                  "issueOrPRNumber": true
-                }
-              }
-            },
-            "create_pull_request_review_comment": {
-              "defaultMax": 1,
-              "fields": {
-                "body": {
-                  "required": true,
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 65000
-                },
-                "line": {
-                  "required": true,
-                  "positiveInteger": true
-                },
-                "path": {
-                  "required": true,
-                  "type": "string"
-                },
-                "side": {
-                  "type": "string",
-                  "enum": [
-                    "LEFT",
-                    "RIGHT"
-                  ]
-                },
-                "start_line": {
-                  "optionalPositiveInteger": true
-                }
-              },
-              "customValidation": "startLineLessOrEqualLine"
-            },
-            "missing_tool": {
-              "defaultMax": 20,
-              "fields": {
-                "alternatives": {
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 512
-                },
-                "reason": {
-                  "required": true,
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 256
-                },
-                "tool": {
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 128
-                }
-              }
-            },
-            "noop": {
-              "defaultMax": 1,
-              "fields": {
-                "message": {
-                  "required": true,
-                  "type": "string",
-                  "sanitize": true,
-                  "maxLength": 65000
-                }
-              }
-            }
-          }
-          EOF
-      - name: Generate Safe Outputs MCP Server Config
-        id: safe-outputs-config
-        run: |
-          # Generate a secure random API key (360 bits of entropy, 40+ chars)
-          API_KEY=""
-          API_KEY=$(openssl rand -base64 45 | tr -d '/+=')
-          PORT=3001
-          
-          # Register API key as secret to mask it from logs
-          echo "::add-mask::${API_KEY}"
-          
-          # Set outputs for next steps
-          {
-            echo "safe_outputs_api_key=${API_KEY}"
-            echo "safe_outputs_port=${PORT}"
-          } >> "$GITHUB_OUTPUT"
-          
-          echo "Safe Outputs MCP server will run on port ${PORT}"
-          
-      - name: Start Safe Outputs MCP HTTP Server
-        id: safe-outputs-start
-        env:
-          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-config.outputs.safe_outputs_port }}
-          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-config.outputs.safe_outputs_api_key }}
-          GH_AW_SAFE_OUTPUTS_TOOLS_PATH: /opt/gh-aw/safeoutputs/tools.json
-          GH_AW_SAFE_OUTPUTS_CONFIG_PATH: /opt/gh-aw/safeoutputs/config.json
-          GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs
-        run: |
-          # Environment variables are set above to prevent template injection
-          export GH_AW_SAFE_OUTPUTS_PORT
-          export GH_AW_SAFE_OUTPUTS_API_KEY
-          export GH_AW_SAFE_OUTPUTS_TOOLS_PATH
-          export GH_AW_SAFE_OUTPUTS_CONFIG_PATH
-          export GH_AW_MCP_LOG_DIR
-          
-          bash /opt/gh-aw/actions/start_safe_outputs_server.sh
-          
-      - name: Start MCP gateway
-        id: start-mcp-gateway
-        env:
-          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
-          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-start.outputs.api_key }}
-          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-start.outputs.port }}
-          GITHUB_MCP_LOCKDOWN: ${{ steps.determine-automatic-lockdown.outputs.lockdown == 'true' && '1' || '0' }}
-          GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-        run: |
-          set -eo pipefail
-          mkdir -p /tmp/gh-aw/mcp-config
-          
-          # Export gateway environment variables for MCP config and gateway script
-          export MCP_GATEWAY_PORT="80"
-          export MCP_GATEWAY_DOMAIN="host.docker.internal"
-          MCP_GATEWAY_API_KEY=""
-          MCP_GATEWAY_API_KEY=$(openssl rand -base64 45 | tr -d '/+=')
-          export MCP_GATEWAY_API_KEY
-          
-          # Register API key as secret to mask it from logs
-          echo "::add-mask::${MCP_GATEWAY_API_KEY}"
-          export GH_AW_ENGINE="copilot"
-          export MCP_GATEWAY_DOCKER_COMMAND='docker run -i --rm --network host -v /var/run/docker.sock:/var/run/docker.sock -e MCP_GATEWAY_PORT -e MCP_GATEWAY_DOMAIN -e MCP_GATEWAY_API_KEY -e DEBUG="*" -e MCP_GATEWAY_LOG_DIR -e GH_AW_MCP_LOG_DIR -e GH_AW_SAFE_OUTPUTS -e GH_AW_SAFE_OUTPUTS_CONFIG_PATH -e GH_AW_SAFE_OUTPUTS_TOOLS_PATH -e GH_AW_ASSETS_BRANCH -e GH_AW_ASSETS_MAX_SIZE_KB -e GH_AW_ASSETS_ALLOWED_EXTS -e DEFAULT_BRANCH -e GITHUB_MCP_SERVER_TOKEN -e GITHUB_MCP_LOCKDOWN -e GITHUB_REPOSITORY -e GITHUB_SERVER_URL -e GITHUB_SHA -e GITHUB_WORKSPACE -e GITHUB_TOKEN -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RUN_ATTEMPT -e GITHUB_JOB -e GITHUB_ACTION -e GITHUB_EVENT_NAME -e GITHUB_EVENT_PATH -e GITHUB_ACTOR -e GITHUB_ACTOR_ID -e GITHUB_TRIGGERING_ACTOR -e GITHUB_WORKFLOW -e GITHUB_WORKFLOW_REF -e GITHUB_WORKFLOW_SHA -e GITHUB_REF -e GITHUB_REF_NAME -e GITHUB_REF_TYPE -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e GH_AW_SAFE_OUTPUTS_PORT -e GH_AW_SAFE_OUTPUTS_API_KEY -v /opt:/opt:ro -v /tmp:/tmp:rw -v '"${GITHUB_WORKSPACE}"':'"${GITHUB_WORKSPACE}"':rw ghcr.io/github/gh-aw-mcpg:v0.0.94'
-          
-          mkdir -p /home/runner/.copilot
-          cat << MCPCONFIG_EOF | bash /opt/gh-aw/actions/start_mcp_gateway.sh
-          {
-            "mcpServers": {
-              "github": {
-                "type": "stdio",
-                "container": "ghcr.io/github/github-mcp-server:v0.30.2",
-                "env": {
-                  "GITHUB_LOCKDOWN_MODE": "$GITHUB_MCP_LOCKDOWN",
-                  "GITHUB_PERSONAL_ACCESS_TOKEN": "\${GITHUB_MCP_SERVER_TOKEN}",
-                  "GITHUB_READ_ONLY": "1",
-                  "GITHUB_TOOLSETS": "context,repos,issues,pull_requests"
-                }
-              },
-              "safeoutputs": {
-                "type": "http",
-                "url": "http://host.docker.internal:$GH_AW_SAFE_OUTPUTS_PORT",
-                "headers": {
-                  "Authorization": "\${GH_AW_SAFE_OUTPUTS_API_KEY}"
-                }
-              }
-            },
-            "gateway": {
-              "port": $MCP_GATEWAY_PORT,
-              "domain": "${MCP_GATEWAY_DOMAIN}",
-              "apiKey": "${MCP_GATEWAY_API_KEY}"
-            }
-          }
-          MCPCONFIG_EOF
-      - name: Generate agentic run info
-        id: generate_aw_info
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        with:
-          script: |
-            const fs = require('fs');
-            
-            const awInfo = {
-              engine_id: "copilot",
-              engine_name: "GitHub Copilot CLI",
-              model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
-              version: "",
-              agent_version: "0.0.400",
-              cli_version: "v0.40.0",
-              workflow_name: "Patch Consistency Review Agent",
-              experimental: false,
-              supports_tools_allowlist: true,
-              supports_http_transport: true,
-              run_id: context.runId,
-              run_number: context.runNumber,
-              run_attempt: process.env.GITHUB_RUN_ATTEMPT,
-              repository: context.repo.owner + '/' + context.repo.repo,
-              ref: context.ref,
-              sha: context.sha,
-              actor: context.actor,
-              event_name: context.eventName,
-              staged: false,
-              allowed_domains: ["defaults"],
-              firewall_enabled: true,
-              awf_version: "v0.13.1",
-              awmg_version: "v0.0.94",
-              steps: {
-                firewall: "squid"
-              },
-              created_at: new Date().toISOString()
-            };
-            
-            // Write to /tmp/gh-aw directory to avoid inclusion in PR
-            const tmpPath = '/tmp/gh-aw/aw_info.json';
-            fs.writeFileSync(tmpPath, JSON.stringify(awInfo, null, 2));
-            console.log('Generated aw_info.json at:', tmpPath);
-            console.log(JSON.stringify(awInfo, null, 2));
-            
-            // Set model as output for reuse in other steps/jobs
-            core.setOutput('model', awInfo.model);
-      - name: Generate workflow overview
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        with:
-          script: |
-            const { generateWorkflowOverview } = require('/opt/gh-aw/actions/generate_workflow_overview.cjs');
-            await generateWorkflowOverview(core);
-      - name: Create prompt with built-in context
-        env:
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
-          GH_AW_GITHUB_ACTOR: ${{ github.actor }}
-          GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}
-          GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}
-          GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
-          GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
-          GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
-          GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}
-          GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}
-        run: |
-          bash /opt/gh-aw/actions/create_prompt_first.sh
-          cat << 'PROMPT_EOF' > "$GH_AW_PROMPT"
-          <system>
-          PROMPT_EOF
-          cat "/opt/gh-aw/prompts/temp_folder_prompt.md" >> "$GH_AW_PROMPT"
-          cat "/opt/gh-aw/prompts/markdown.md" >> "$GH_AW_PROMPT"
-          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
-          <safe-outputs>
-          <description>GitHub API Access Instructions</description>
-          <important>
-          The gh CLI is NOT authenticated. Do NOT use gh commands for GitHub operations.
-          </important>
-          <instructions>
-          To create or modify GitHub resources (issues, discussions, pull requests, etc.), you MUST call the appropriate safe output tool. Simply writing content will NOT work - the workflow requires actual tool calls.
-          
-          Discover available tools from the safeoutputs MCP server.
-          
-          **Critical**: Tool calls write structured data that downstream jobs process. Without tool calls, follow-up actions will be skipped.
-          
-          **Note**: If you made no other safe output tool calls during this workflow execution, call the "noop" tool to provide a status message indicating completion or that no actions were needed.
-          </instructions>
-          </safe-outputs>
-          <github-context>
-          The following GitHub context information is available for this workflow:
-          {{#if __GH_AW_GITHUB_ACTOR__ }}
-          - **actor**: __GH_AW_GITHUB_ACTOR__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_REPOSITORY__ }}
-          - **repository**: __GH_AW_GITHUB_REPOSITORY__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_WORKSPACE__ }}
-          - **workspace**: __GH_AW_GITHUB_WORKSPACE__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_EVENT_ISSUE_NUMBER__ }}
-          - **issue-number**: #__GH_AW_GITHUB_EVENT_ISSUE_NUMBER__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__ }}
-          - **discussion-number**: #__GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__ }}
-          - **pull-request-number**: #__GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_EVENT_COMMENT_ID__ }}
-          - **comment-id**: __GH_AW_GITHUB_EVENT_COMMENT_ID__
-          {{/if}}
-          {{#if __GH_AW_GITHUB_RUN_ID__ }}
-          - **workflow-run-id**: __GH_AW_GITHUB_RUN_ID__
-          {{/if}}
-          </github-context>
-          
-          PROMPT_EOF
-          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
-          </system>
-          PROMPT_EOF
-          cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT"
-          {{#runtime-import workflows/patch-consistency-review.md}}
-          PROMPT_EOF
-      - name: Substitute placeholders
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-          GH_AW_GITHUB_ACTOR: ${{ github.actor }}
-          GH_AW_GITHUB_EVENT_COMMENT_ID: ${{ github.event.comment.id }}
-          GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: ${{ github.event.discussion.number }}
-          GH_AW_GITHUB_EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
-          GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: ${{ github.event.pull_request.number }}
-          GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
-          GH_AW_GITHUB_RUN_ID: ${{ github.run_id }}
-          GH_AW_GITHUB_WORKSPACE: ${{ github.workspace }}
-        with:
-          script: |
-            const substitutePlaceholders = require('/opt/gh-aw/actions/substitute_placeholders.cjs');
-            
-            // Call the substitution function
-            return await substitutePlaceholders({
-              file: process.env.GH_AW_PROMPT,
-              substitutions: {
-                GH_AW_GITHUB_ACTOR: process.env.GH_AW_GITHUB_ACTOR,
-                GH_AW_GITHUB_EVENT_COMMENT_ID: process.env.GH_AW_GITHUB_EVENT_COMMENT_ID,
-                GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER: process.env.GH_AW_GITHUB_EVENT_DISCUSSION_NUMBER,
-                GH_AW_GITHUB_EVENT_ISSUE_NUMBER: process.env.GH_AW_GITHUB_EVENT_ISSUE_NUMBER,
-                GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER: process.env.GH_AW_GITHUB_EVENT_PULL_REQUEST_NUMBER,
-                GH_AW_GITHUB_REPOSITORY: process.env.GH_AW_GITHUB_REPOSITORY,
-                GH_AW_GITHUB_RUN_ID: process.env.GH_AW_GITHUB_RUN_ID,
-                GH_AW_GITHUB_WORKSPACE: process.env.GH_AW_GITHUB_WORKSPACE
-              }
-            });
-      - name: Interpolate variables and render templates
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/interpolate_prompt.cjs');
-            await main();
-      - name: Validate prompt placeholders
-        env:
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-        run: bash /opt/gh-aw/actions/validate_prompt_placeholders.sh
-      - name: Print prompt
-        env:
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-        run: bash /opt/gh-aw/actions/print_prompt_summary.sh
-      - name: Execute GitHub Copilot CLI
-        id: agentic_execution
-        # Copilot CLI tool arguments (sorted):
-        timeout-minutes: 15
-        run: |
-          set -o pipefail
-          GH_AW_TOOL_BINS=""; command -v go >/dev/null 2>&1 && GH_AW_TOOL_BINS="$(go env GOROOT)/bin:$GH_AW_TOOL_BINS"; [ -n "$JAVA_HOME" ] && GH_AW_TOOL_BINS="$JAVA_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$CARGO_HOME" ] && GH_AW_TOOL_BINS="$CARGO_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$GEM_HOME" ] && GH_AW_TOOL_BINS="$GEM_HOME/bin:$GH_AW_TOOL_BINS"; [ -n "$CONDA" ] && GH_AW_TOOL_BINS="$CONDA/bin:$GH_AW_TOOL_BINS"; [ -n "$PIPX_BIN_DIR" ] && GH_AW_TOOL_BINS="$PIPX_BIN_DIR:$GH_AW_TOOL_BINS"; [ -n "$SWIFT_PATH" ] && GH_AW_TOOL_BINS="$SWIFT_PATH:$GH_AW_TOOL_BINS"; [ -n "$DOTNET_ROOT" ] && GH_AW_TOOL_BINS="$DOTNET_ROOT:$GH_AW_TOOL_BINS"; export GH_AW_TOOL_BINS
-          mkdir -p "$HOME/.cache"
-          sudo -E awf --env-all --env "ANDROID_HOME=${ANDROID_HOME}" --env "ANDROID_NDK=${ANDROID_NDK}" --env "ANDROID_NDK_HOME=${ANDROID_NDK_HOME}" --env "ANDROID_NDK_LATEST_HOME=${ANDROID_NDK_LATEST_HOME}" --env "ANDROID_NDK_ROOT=${ANDROID_NDK_ROOT}" --env "ANDROID_SDK_ROOT=${ANDROID_SDK_ROOT}" --env "AZURE_EXTENSION_DIR=${AZURE_EXTENSION_DIR}" --env "CARGO_HOME=${CARGO_HOME}" --env "CHROMEWEBDRIVER=${CHROMEWEBDRIVER}" --env "CONDA=${CONDA}" --env "DOTNET_ROOT=${DOTNET_ROOT}" --env "EDGEWEBDRIVER=${EDGEWEBDRIVER}" --env "GECKOWEBDRIVER=${GECKOWEBDRIVER}" --env "GEM_HOME=${GEM_HOME}" --env "GEM_PATH=${GEM_PATH}" --env "GOPATH=${GOPATH}" --env "GOROOT=${GOROOT}" --env "HOMEBREW_CELLAR=${HOMEBREW_CELLAR}" --env "HOMEBREW_PREFIX=${HOMEBREW_PREFIX}" --env "HOMEBREW_REPOSITORY=${HOMEBREW_REPOSITORY}" --env "JAVA_HOME=${JAVA_HOME}" --env "JAVA_HOME_11_X64=${JAVA_HOME_11_X64}" --env "JAVA_HOME_17_X64=${JAVA_HOME_17_X64}" --env "JAVA_HOME_21_X64=${JAVA_HOME_21_X64}" --env "JAVA_HOME_25_X64=${JAVA_HOME_25_X64}" --env "JAVA_HOME_8_X64=${JAVA_HOME_8_X64}" --env "NVM_DIR=${NVM_DIR}" --env "PIPX_BIN_DIR=${PIPX_BIN_DIR}" --env "PIPX_HOME=${PIPX_HOME}" --env "RUSTUP_HOME=${RUSTUP_HOME}" --env "SELENIUM_JAR_PATH=${SELENIUM_JAR_PATH}" --env "SWIFT_PATH=${SWIFT_PATH}" --env "VCPKG_INSTALLATION_ROOT=${VCPKG_INSTALLATION_ROOT}" --env "GH_AW_TOOL_BINS=$GH_AW_TOOL_BINS" --container-workdir "${GITHUB_WORKSPACE}" --mount /tmp:/tmp:rw --mount "${HOME}/.cache:${HOME}/.cache:rw" --mount "${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}:rw" --mount /usr/bin/cat:/usr/bin/cat:ro --mount /usr/bin/curl:/usr/bin/curl:ro --mount /usr/bin/date:/usr/bin/date:ro --mount /usr/bin/find:/usr/bin/find:ro --mount /usr/bin/gh:/usr/bin/gh:ro --mount /usr/bin/grep:/usr/bin/grep:ro --mount /usr/bin/jq:/usr/bin/jq:ro --mount /usr/bin/yq:/usr/bin/yq:ro --mount /usr/bin/cp:/usr/bin/cp:ro --mount /usr/bin/cut:/usr/bin/cut:ro --mount /usr/bin/diff:/usr/bin/diff:ro --mount /usr/bin/head:/usr/bin/head:ro --mount /usr/bin/ls:/usr/bin/ls:ro --mount /usr/bin/mkdir:/usr/bin/mkdir:ro --mount /usr/bin/rm:/usr/bin/rm:ro --mount /usr/bin/sed:/usr/bin/sed:ro --mount /usr/bin/sort:/usr/bin/sort:ro --mount /usr/bin/tail:/usr/bin/tail:ro --mount /usr/bin/wc:/usr/bin/wc:ro --mount /usr/bin/which:/usr/bin/which:ro --mount /usr/local/bin/copilot:/usr/local/bin/copilot:ro --mount /home/runner/.copilot:/home/runner/.copilot:rw --mount /opt/hostedtoolcache:/opt/hostedtoolcache:ro --mount /opt/gh-aw:/opt/gh-aw:ro --allow-domains api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.snapcraft.io,archive.ubuntu.com,azure.archive.ubuntu.com,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,github.com,host.docker.internal,json-schema.org,json.schemastore.org,keyserver.ubuntu.com,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,ppa.launchpad.net,raw.githubusercontent.com,registry.npmjs.org,s.symcb.com,s.symcd.com,security.ubuntu.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com --log-level info --proxy-logs-dir /tmp/gh-aw/sandbox/firewall/logs --enable-host-access --image-tag 0.13.1 --agent-image act \
-            -- 'source /opt/gh-aw/actions/sanitize_path.sh "$GH_AW_TOOL_BINS$(find /opt/hostedtoolcache -maxdepth 4 -type d -name bin 2>/dev/null | tr '\''\n'\'' '\'':'\'')$PATH" && /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --add-dir "${GITHUB_WORKSPACE}" --disable-builtin-mcps --allow-all-tools --allow-all-paths --share /tmp/gh-aw/sandbox/agent/logs/conversation.md --prompt "$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"${GH_AW_MODEL_AGENT_COPILOT:+ --model "$GH_AW_MODEL_AGENT_COPILOT"}' \
-            2>&1 | tee /tmp/gh-aw/agent-stdio.log
-        env:
-          COPILOT_AGENT_RUNNER_TYPE: STANDALONE
-          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-          GH_AW_MCP_CONFIG: /home/runner/.copilot/mcp-config.json
-          GH_AW_MODEL_AGENT_COPILOT: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || '' }}
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
-          GITHUB_HEAD_REF: ${{ github.head_ref }}
-          GITHUB_REF_NAME: ${{ github.ref_name }}
-          GITHUB_STEP_SUMMARY: ${{ env.GITHUB_STEP_SUMMARY }}
-          GITHUB_WORKSPACE: ${{ github.workspace }}
-          XDG_CONFIG_HOME: /home/runner
-      - name: Copy Copilot session state files to logs
-        if: always()
-        continue-on-error: true
-        run: |
-          # Copy Copilot session state files to logs folder for artifact collection
-          # This ensures they are in /tmp/gh-aw/ where secret redaction can scan them
-          SESSION_STATE_DIR="$HOME/.copilot/session-state"
-          LOGS_DIR="/tmp/gh-aw/sandbox/agent/logs"
-          
-          if [ -d "$SESSION_STATE_DIR" ]; then
-            echo "Copying Copilot session state files from $SESSION_STATE_DIR to $LOGS_DIR"
-            mkdir -p "$LOGS_DIR"
-            cp -v "$SESSION_STATE_DIR"/*.jsonl "$LOGS_DIR/" 2>/dev/null || true
-            echo "Session state files copied successfully"
-          else
-            echo "No session-state directory found at $SESSION_STATE_DIR"
-          fi
-      - name: Stop MCP gateway
-        if: always()
-        continue-on-error: true
-        env:
-          MCP_GATEWAY_PORT: ${{ steps.start-mcp-gateway.outputs.gateway-port }}
-          MCP_GATEWAY_API_KEY: ${{ steps.start-mcp-gateway.outputs.gateway-api-key }}
-          GATEWAY_PID: ${{ steps.start-mcp-gateway.outputs.gateway-pid }}
-        run: |
-          bash /opt/gh-aw/actions/stop_mcp_gateway.sh "$GATEWAY_PID"
-      - name: Redact secrets in logs
-        if: always()
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/redact_secrets.cjs');
-            await main();
-        env:
-          GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GITHUB_TOKEN'
-          SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-          SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
-          SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
-          SECRET_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Upload Safe Outputs
-        if: always()
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
-        with:
-          name: safe-output
-          path: ${{ env.GH_AW_SAFE_OUTPUTS }}
-          if-no-files-found: warn
-      - name: Ingest agent output
-        id: collect_output
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_SAFE_OUTPUTS: ${{ env.GH_AW_SAFE_OUTPUTS }}
-          GH_AW_ALLOWED_DOMAINS: "api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.snapcraft.io,archive.ubuntu.com,azure.archive.ubuntu.com,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,github.com,host.docker.internal,json-schema.org,json.schemastore.org,keyserver.ubuntu.com,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,ppa.launchpad.net,raw.githubusercontent.com,registry.npmjs.org,s.symcb.com,s.symcd.com,security.ubuntu.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com"
-          GITHUB_SERVER_URL: ${{ github.server_url }}
-          GITHUB_API_URL: ${{ github.api_url }}
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/collect_ndjson_output.cjs');
-            await main();
-      - name: Upload sanitized agent output
-        if: always() && env.GH_AW_AGENT_OUTPUT
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
-        with:
-          name: agent-output
-          path: ${{ env.GH_AW_AGENT_OUTPUT }}
-          if-no-files-found: warn
-      - name: Upload engine output files
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
-        with:
-          name: agent_outputs
-          path: |
-            /tmp/gh-aw/sandbox/agent/logs/
-            /tmp/gh-aw/redacted-urls.log
-          if-no-files-found: ignore
-      - name: Parse agent logs for step summary
-        if: always()
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: /tmp/gh-aw/sandbox/agent/logs/
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/parse_copilot_log.cjs');
-            await main();
-      - name: Parse MCP gateway logs for step summary
-        if: always()
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/parse_mcp_gateway_log.cjs');
-            await main();
-      - name: Print firewall logs
-        if: always()
-        continue-on-error: true
-        env:
-          AWF_LOGS_DIR: /tmp/gh-aw/sandbox/firewall/logs
-        run: |
-          # Fix permissions on firewall logs so they can be uploaded as artifacts
-          # AWF runs with sudo, creating files owned by root
-          sudo chmod -R a+r /tmp/gh-aw/sandbox/firewall/logs 2>/dev/null || true
-          awf logs summary | tee -a "$GITHUB_STEP_SUMMARY"
-      - name: Upload agent artifacts
-        if: always()
-        continue-on-error: true
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
-        with:
-          name: agent-artifacts
-          path: |
-            /tmp/gh-aw/aw-prompts/prompt.txt
-            /tmp/gh-aw/aw_info.json
-            /tmp/gh-aw/mcp-logs/
-            /tmp/gh-aw/sandbox/firewall/logs/
-            /tmp/gh-aw/agent-stdio.log
-          if-no-files-found: ignore
-
-  conclusion:
-    needs:
-      - activation
-      - agent
-      - detection
-      - safe_outputs
-    if: (always()) && (needs.agent.result != 'skipped')
-    runs-on: ubuntu-slim
-    permissions:
-      contents: read
-      discussions: write
-      issues: write
-      pull-requests: write
-    outputs:
-      noop_message: ${{ steps.noop.outputs.noop_message }}
-      tools_reported: ${{ steps.missing_tool.outputs.tools_reported }}
-      total_count: ${{ steps.missing_tool.outputs.total_count }}
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Debug job inputs
-        env:
-          COMMENT_ID: ${{ needs.activation.outputs.comment_id }}
-          COMMENT_REPO: ${{ needs.activation.outputs.comment_repo }}
-          AGENT_OUTPUT_TYPES: ${{ needs.agent.outputs.output_types }}
-          AGENT_CONCLUSION: ${{ needs.agent.result }}
-        run: |
-          echo "Comment ID: $COMMENT_ID"
-          echo "Comment Repo: $COMMENT_REPO"
-          echo "Agent Output Types: $AGENT_OUTPUT_TYPES"
-          echo "Agent Conclusion: $AGENT_CONCLUSION"
-      - name: Download agent output artifact
-        continue-on-error: true
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: agent-output
-          path: /tmp/gh-aw/safeoutputs/
-      - name: Setup agent output environment variable
-        run: |
-          mkdir -p /tmp/gh-aw/safeoutputs/
-          find "/tmp/gh-aw/safeoutputs/" -type f -print
-          echo "GH_AW_AGENT_OUTPUT=/tmp/gh-aw/safeoutputs/agent_output.json" >> "$GITHUB_ENV"
-      - name: Process No-Op Messages
-        id: noop
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/noop.cjs');
-            await main();
-      - name: Record Missing Tool
-        id: missing_tool
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/missing_tool.cjs');
-            await main();
-      - name: Handle Agent Failure
-        id: handle_agent_failure
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
-          GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-          GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
-          GH_AW_SECRET_VERIFICATION_RESULT: ${{ needs.agent.outputs.secret_verification_result }}
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/handle_agent_failure.cjs');
-            await main();
-      - name: Update reaction comment with completion status
-        id: conclusion
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_COMMENT_ID: ${{ needs.activation.outputs.comment_id }}
-          GH_AW_COMMENT_REPO: ${{ needs.activation.outputs.comment_repo }}
-          GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-          GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
-          GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
-          GH_AW_DETECTION_CONCLUSION: ${{ needs.detection.result }}
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/notify_comment_error.cjs');
-            await main();
-
-  detection:
-    needs: agent
-    if: needs.agent.outputs.output_types != '' || needs.agent.outputs.has_patch == 'true'
-    runs-on: ubuntu-latest
-    permissions: {}
-    timeout-minutes: 10
-    outputs:
-      success: ${{ steps.parse_results.outputs.success }}
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Download agent artifacts
-        continue-on-error: true
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: agent-artifacts
-          path: /tmp/gh-aw/threat-detection/
-      - name: Download agent output artifact
-        continue-on-error: true
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: agent-output
-          path: /tmp/gh-aw/threat-detection/
-      - name: Echo agent output types
-        env:
-          AGENT_OUTPUT_TYPES: ${{ needs.agent.outputs.output_types }}
-        run: |
-          echo "Agent output-types: $AGENT_OUTPUT_TYPES"
-      - name: Setup threat detection
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          WORKFLOW_NAME: "Patch Consistency Review Agent"
-          WORKFLOW_DESCRIPTION: "Reviews PRs to ensure Git patches are updated consistently"
-          HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/setup_threat_detection.cjs');
-            await main();
-      - name: Ensure threat-detection directory and log
-        run: |
-          mkdir -p /tmp/gh-aw/threat-detection
-          touch /tmp/gh-aw/threat-detection/detection.log
-      - name: Validate COPILOT_GITHUB_TOKEN secret
-        id: validate-secret
-        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
-        env:
-          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-      - name: Install GitHub Copilot CLI
-        run: /opt/gh-aw/actions/install_copilot_cli.sh 0.0.400
-      - name: Execute GitHub Copilot CLI
-        id: agentic_execution
-        # Copilot CLI tool arguments (sorted):
-        # --allow-tool shell(cat)
-        # --allow-tool shell(grep)
-        # --allow-tool shell(head)
-        # --allow-tool shell(jq)
-        # --allow-tool shell(ls)
-        # --allow-tool shell(tail)
-        # --allow-tool shell(wc)
-        timeout-minutes: 20
-        run: |
-          set -o pipefail
-          COPILOT_CLI_INSTRUCTION="$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"
-          mkdir -p /tmp/
-          mkdir -p /tmp/gh-aw/
-          mkdir -p /tmp/gh-aw/agent/
-          mkdir -p /tmp/gh-aw/sandbox/agent/logs/
-          copilot --add-dir /tmp/ --add-dir /tmp/gh-aw/ --add-dir /tmp/gh-aw/agent/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --allow-tool 'shell(cat)' --allow-tool 'shell(grep)' --allow-tool 'shell(head)' --allow-tool 'shell(jq)' --allow-tool 'shell(ls)' --allow-tool 'shell(tail)' --allow-tool 'shell(wc)' --share /tmp/gh-aw/sandbox/agent/logs/conversation.md --prompt "$COPILOT_CLI_INSTRUCTION"${GH_AW_MODEL_DETECTION_COPILOT:+ --model "$GH_AW_MODEL_DETECTION_COPILOT"} 2>&1 | tee /tmp/gh-aw/threat-detection/detection.log
-        env:
-          COPILOT_AGENT_RUNNER_TYPE: STANDALONE
-          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-          GH_AW_MODEL_DETECTION_COPILOT: ${{ vars.GH_AW_MODEL_DETECTION_COPILOT || '' }}
-          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
-          GITHUB_HEAD_REF: ${{ github.head_ref }}
-          GITHUB_REF_NAME: ${{ github.ref_name }}
-          GITHUB_STEP_SUMMARY: ${{ env.GITHUB_STEP_SUMMARY }}
-          GITHUB_WORKSPACE: ${{ github.workspace }}
-          XDG_CONFIG_HOME: /home/runner
-      - name: Parse threat detection results
-        id: parse_results
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        with:
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/parse_threat_detection_results.cjs');
-            await main();
-      - name: Upload threat detection log
-        if: always()
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
-        with:
-          name: threat-detection.log
-          path: /tmp/gh-aw/threat-detection/detection.log
-          if-no-files-found: ignore
-
-  pre_activation:
-    if: (github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id)
-    runs-on: ubuntu-slim
-    outputs:
-      activated: ${{ steps.check_membership.outputs.is_team_member == 'true' }}
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Check team membership for workflow
-        id: check_membership
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_REQUIRED_ROLES: admin,maintainer,write
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/check_membership.cjs');
-            await main();
-
-  safe_outputs:
-    needs:
-      - agent
-      - detection
-    if: ((!cancelled()) && (needs.agent.result != 'skipped')) && (needs.detection.outputs.success == 'true')
-    runs-on: ubuntu-slim
-    permissions:
-      contents: read
-      discussions: write
-      issues: write
-      pull-requests: write
-    timeout-minutes: 15
-    env:
-      GH_AW_ENGINE_ID: "copilot"
-      GH_AW_WORKFLOW_ID: "patch-consistency-review"
-      GH_AW_WORKFLOW_NAME: "Patch Consistency Review Agent"
-    outputs:
-      process_safe_outputs_processed_count: ${{ steps.process_safe_outputs.outputs.processed_count }}
-      process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
-    steps:
-      - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@76d37d925abd44fee97379206f105b74b91a285b # v0.40.0
-        with:
-          destination: /opt/gh-aw/actions
-      - name: Download agent output artifact
-        continue-on-error: true
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: agent-output
-          path: /tmp/gh-aw/safeoutputs/
-      - name: Setup agent output environment variable
-        run: |
-          mkdir -p /tmp/gh-aw/safeoutputs/
-          find "/tmp/gh-aw/safeoutputs/" -type f -print
-          echo "GH_AW_AGENT_OUTPUT=/tmp/gh-aw/safeoutputs/agent_output.json" >> "$GITHUB_ENV"
-      - name: Process Safe Outputs
-        id: process_safe_outputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
-        env:
-          GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request_review_comment\":{\"max\":10,\"side\":\"RIGHT\"},\"missing_data\":{},\"missing_tool\":{}}"
-        with:
-          github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
-          script: |
-            const { setupGlobals } = require('/opt/gh-aw/actions/setup_globals.cjs');
-            setupGlobals(core, github, context, exec, io);
-            const { main } = require('/opt/gh-aw/actions/safe_output_handler_manager.cjs');
-            await main();
-
diff --git a/.github/workflows/patch-consistency-review.md b/.github/workflows/patch-consistency-review.md
deleted file mode 100644
index 6d726548eb7..00000000000
--- a/.github/workflows/patch-consistency-review.md
+++ /dev/null
@@ -1,83 +0,0 @@
----
-description: Reviews PRs to ensure Git patches are updated consistently
-on:
-  pull_request:
-    types: [opened, synchronize, reopened]
-    paths:
-      - 'patches/*.patch'
-  workflow_dispatch:
-    inputs:
-      pr_number:
-        description: "PR number to review"
-        required: true
-        type: string
-roles: [admin, maintainer, write]
-permissions:
-  contents: read
-  pull-requests: read
-  issues: read
-tools:
-  github:
-    toolsets: [default]
-safe-outputs:
-  create-pull-request-review-comment:
-    max: 10
-  add-comment:
-    max: 1
-timeout-minutes: 15
----
-
-# Patch Consistency Review Agent
-
-You are an AI code reviewer specialized in ensuring consistency across the different patch files.
-
-## Your Task
-
-When a pull request modifies any patch file, review it to ensure:
-
-1. **Vendor patch**: If a patch adds, modifies, or removes a file located in a vendor directory, check that:
-   - The patch must only be 0001-Vendor-external-dependencies.patch.
-   - The associated go.mod, go.sum, and modules.txt files are updated accordingly.
-
-2. **Patch naming consistency**: Ensure that the patch file names follow the established naming conventions.
-
-3. **Patch content consistency**: Check that:
-   - No new patches are added if the new changes are already covered by existing patches.
-   - No redundant patches exist that cover the same changes.
-   - Changes are added to the appropriate patch files based on their purpose.
-
-## Context
-
-- Repository: ${{ github.repository }}
-- PR number: ${{ github.event.pull_request.number || inputs.pr_number }}
-- Modified files: Use GitHub tools to fetch the list of changed files
-
-## Patches Location
-
-- `patches/`: Directory containing all patch files for the project
-
-## Review Process
-
-1. **Identify the changed patch(es)**: Determine which patch file(s) are modified in this PR
-2. **Analyze the changes**: Understand what feature/fix is being implemented
-3. **Cross-reference other patches**: Check if the equivalent functionality exists in other patch files:
-   - Read the corresponding files in other patch directories
-   - Compare method signatures, behavior, and documentation
-4. **Report findings**: If inconsistencies are found:
-   - Use `create-pull-request-review-comment` to add inline comments on specific lines where changes should be made
-   - Use `add-comment` to provide a summary of cross-patch consistency findings
-   - Be specific about which patches need updates and what changes would bring them into alignment
-
-## Guidelines
-
-1. **Be respectful**: This is a technical review focusing on consistency, not code quality judgments
-2. **Suggest, don't demand**: Frame feedback as suggestions for maintaining consistency
-3. **Skip trivial changes**: Don't flag minor differences like comment styles or variable naming
-4. **Only comment if there are actual consistency issues**: If the PR maintains consistency or only touches one patch's content, acknowledge it positively in a summary comment
-5. **Prefer filename suffix constraints over build tags**: When a Go file targets a specific OS or architecture, use the filename suffix convention (e.g. `_linux.go`, `_windows.go`, `_darwin.go`) rather than duplicating that constraint in a `//go:build` tag. If the filename suffix already implies the OS/arch, the build tag should not repeat it. For example, `foo_linux.go` with `//go:build goexperiment.systemcrypto` is preferred over `foo.go` with `//go:build goexperiment.systemcrypto && linux`.
-6. **Avoid extraneous blank lines in patches**: Patches should not introduce unnecessary blank lines between functions, at the end of files, or between import groups. Keep whitespace consistent with the surrounding code style.
-
-## Output Format
-
-- **If consistency issues found**: Add specific review comments pointing to the gaps and suggest which other patches need similar changes
-- **If no issues found**: Add a brief summary comment confirming the changes maintain cross-patch consistency
\ No newline at end of file

From 9e0d9fd3efdb0a31d78f12c15f96aac8aed5e5a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 26 Feb 2026 16:26:11 +0000
Subject: [PATCH 749/887] build(deps): bump actions/setup-go from 6.2.0 to
 6.3.0 (#2163)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5...4b73464bb391d4059bd26b0524d20df3927bd417)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/patch-build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index acf4d7d7120..af26c3217f8 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           submodules: true
 
-      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
+      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
           go-version: '1.25'
 

From db152279d2ee0140eafc689bd186a053fffc72e7 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 27 Feb 2026 16:19:58 +0000
Subject: [PATCH 750/887] Update submodule to latest master (f71432d2):
 cmd/compile: fix bloop test

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 5b40e48a297..f71432d223e 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 5b40e48a2970734e816d2a9f2eac163a3315f3c2
+Subproject commit f71432d223eeb2139b460957817400750fd13655

From 0f0768ab1d1cfb0bb4dcd89c2fe875cebfe55cec Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 27 Feb 2026 14:37:38 -0800
Subject: [PATCH 751/887] Add "go" _util command; use it to run getmingw
 (#2165)

* Add "go" _util command; use it to run getmingw

* Don't use flags for _util go command
---
 eng/_util/cmd/go/go.go            | 41 +++++++++++++++++++++++++++++++
 eng/pipeline/stages/run-stage.yml |  7 ++----
 2 files changed, 43 insertions(+), 5 deletions(-)
 create mode 100644 eng/_util/cmd/go/go.go

diff --git a/eng/_util/cmd/go/go.go b/eng/_util/cmd/go/go.go
new file mode 100644
index 00000000000..26f98f72fa4
--- /dev/null
+++ b/eng/_util/cmd/go/go.go
@@ -0,0 +1,41 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	"github.com/microsoft/go-infra/executil"
+)
+
+// This command runs the given go command using _util's version of Go with the
+// working directory set to the root of the _util module.
+//
+// All args pass through to Go. Unlike other commands, "-h"/"-help" are not
+// handled to give a detailed description of this command. It doesn't seem worth
+// the effort to handle help args in a way that doesn't introduce further edge
+// cases or usability complications.
+
+func main() {
+	if err := run(); err != nil {
+		fmt.Fprintf(os.Stderr, "Error: %v\n", err)
+		os.Exit(1)
+	}
+}
+
+func run() error {
+	stage0Goroot := os.Getenv("STAGE_0_GOROOT")
+	if stage0Goroot == "" {
+		return fmt.Errorf("STAGE_0_GOROOT not set")
+	}
+
+	return executil.Run(executil.Dir(
+		filepath.Join("eng", "_util"),
+		filepath.Join(stage0Goroot, "bin", "go"),
+		os.Args[1:]...,
+	))
+}
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index a5d3c9c20dc..6d9e3101731 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -226,11 +226,8 @@ stages:
                 displayName: Remove unexpected tools
 
               - pwsh: |
-                  # Use the version of getmingw specified in the util module.
-                  cd eng\_util
-                  go install github.com/microsoft/go-infra/cmd/getmingw
-                  & "$(go env GOPATH)/bin/getmingw" diagnose
-                  & "$(go env GOPATH)/bin/getmingw" run -ci azdo -source nixman -version 13.2.0-rt_v11-rev0 -arch x86_64 -threading posix -exception seh -runtime msvcrt
+                  eng/run.ps1 go run github.com/microsoft/go-infra/cmd/getmingw diagnose
+                  eng/run.ps1 go run github.com/microsoft/go-infra/cmd/getmingw run -ci azdo -source nixman -version 13.2.0-rt_v11-rev0 -arch x86_64 -threading posix -exception seh -runtime msvcrt
                 displayName: Install MinGW
 
             # Build. This includes retry logic internally if necessary for this builder.

From 0f4aaec8547395d12895665496772f2fdd24c8b4 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 27 Feb 2026 15:26:31 -0800
Subject: [PATCH 752/887] Update _util dependencies (#2166)

---
 .github/workflows/linter.yml | 2 +-
 eng/_util/go.mod             | 8 ++++----
 eng/_util/go.sum             | 8 ++++++--
 3 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index a6d22473e58..3a5bbf562b9 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -19,4 +19,4 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Run golangci-lint
         working-directory: eng/_util
-        run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.0 golangci-lint run -v
+        run: docker run --rm -v $(pwd):/app -w /app golangci/golangci-lint:v2.10 golangci-lint run -v
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 5e2e8bcb522..1eb1b63b6ed 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -4,13 +4,13 @@
 
 module github.com/microsoft/go/_util
 
-go 1.24.0
+go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.50.0
+	golang.org/x/net v0.51.0
 )
 
 require (
@@ -19,7 +19,7 @@ require (
 	github.com/Masterminds/semver/v3 v3.3.0 // indirect
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/google/go-github/v65 v65.0.0 // indirect
-	github.com/google/go-querystring v1.1.0 // indirect
+	github.com/google/go-querystring v1.2.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
 	github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 // indirect
@@ -29,7 +29,7 @@ require (
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
 	golang.org/x/crypto v0.48.0 // indirect
-	golang.org/x/oauth2 v0.33.0 // indirect
+	golang.org/x/oauth2 v0.35.0 // indirect
 	golang.org/x/text v0.34.0 // indirect
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 0302a7045b5..8cc06dbd7b8 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -21,6 +21,8 @@ github.com/google/go-github/v65 v65.0.0 h1:pQ7BmO3DZivvFk92geC0jB0q2m3gyn8vnYPgV
 github.com/google/go-github/v65 v65.0.0/go.mod h1:DvrqWo5hvsdhJvHd4WyVF9ttANN3BniqjP8uTFMNb60=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
 github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
+github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0=
+github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -54,10 +56,12 @@ go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
 golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
 golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
-golang.org/x/net v0.50.0 h1:ucWh9eiCGyDR3vtzso0WMQinm2Dnt8cFMuQa9K33J60=
-golang.org/x/net v0.50.0/go.mod h1:UgoSli3F/pBgdJBHCTc+tp3gmrU4XswgGRgtnwWTfyM=
+golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
+golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
 golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
 golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
+golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
 golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
 golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=

From c1a8f53702de4cbd75ce55886e268c341f3f9467 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 2 Mar 2026 13:38:48 +0000
Subject: [PATCH 753/887] build(deps): bump github/codeql-action from 4.32.4 to
 4.32.5 (#2167)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.4 to 4.32.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...c793b717bc78562f491db7b0e93a3a178b099162)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 23032a90b37..bb3bbd41964 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/autobuild@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
+        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
         with:
           category: /language:go

From f13f72dc116fc4bf920f1f697d171251a9ef9906 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 2 Mar 2026 16:08:31 +0000
Subject: [PATCH 754/887] Update submodule to latest master (a6a4a41e): all:
 test: remove unneeded loop variables

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index f71432d223e..a6a4a41e225 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit f71432d223eeb2139b460957817400750fd13655
+Subproject commit a6a4a41e225096a2599762d95af9c32d944a15e2

From f575c674d25f3ac1bd57bac8544e1a86a46f41f0 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 3 Mar 2026 12:34:39 +0000
Subject: [PATCH 755/887] Enforce FIPS 140-only mode for ChaCha20Poly1305 in
 backends (#2171)

---
 ...03-Implement-crypto-internal-backend.patch | 36 ++++++++++++-------
 patches/0004-Use-crypto-backends.patch        | 27 ++++++--------
 2 files changed, 34 insertions(+), 29 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index f438eb9b043..fa6c2a804ab 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -18,16 +18,16 @@ desired goexperiments and build tags.
  src/cmd/go/internal/cfg/cfg.go                |  16 +
  src/cmd/go/internal/load/pkg.go               |   3 +
  src/cmd/go/internal/tool/tool.go              |   9 +-
- src/cmd/go/systemcrypto_test.go               | 233 ++++++++++
+ src/cmd/go/systemcrypto_test.go               | 233 +++++++++
  .../go/testdata/script/env_cross_build.txt    |   2 +
  .../script/test_android_issue62123.txt        |   2 +
  src/cmd/internal/testdir/testdir_test.go      |   7 +
  src/cmd/link/internal/ld/main.go              |   2 +-
  src/cmd/link/link_test.go                     |   8 +
- src/crypto/internal/backend/backend_darwin.go | 438 ++++++++++++++++++
- src/crypto/internal/backend/backend_linux.go  | 430 +++++++++++++++++
+ src/crypto/internal/backend/backend_darwin.go | 442 ++++++++++++++++++
+ src/crypto/internal/backend/backend_linux.go  | 434 +++++++++++++++++
  src/crypto/internal/backend/backend_test.go   |  56 +++
- .../internal/backend/backend_windows.go       | 438 ++++++++++++++++++
+ .../internal/backend/backend_windows.go       | 442 ++++++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
  .../internal/backend/bbig/big_darwin.go       |  12 +
  src/crypto/internal/backend/bbig/big_linux.go |  12 +
@@ -52,7 +52,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2742 insertions(+), 14 deletions(-)
+ 43 files changed, 2754 insertions(+), 14 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -702,7 +702,7 @@ index a4b3a0422f2f41..0140c385e47991 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 19607c324ceaef..50439e47260a99 100644
+index ff7842ca3ffd87..164f3883d3f527 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -736,10 +736,10 @@ index 19607c324ceaef..50439e47260a99 100644
  	tmpdir := t.TempDir()
 diff --git a/src/crypto/internal/backend/backend_darwin.go b/src/crypto/internal/backend/backend_darwin.go
 new file mode 100644
-index 00000000000000..657e27ed74dc99
+index 00000000000000..73830cae246cbd
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_darwin.go
-@@ -0,0 +1,438 @@
+@@ -0,0 +1,442 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -757,6 +757,7 @@ index 00000000000000..657e27ed74dc99
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140only"
++	"errors"
 +	"hash"
 +	"io"
 +	_ "unsafe"
@@ -1176,14 +1177,17 @@ index 00000000000000..657e27ed74dc99
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if fips140only.Enforced() {
++		return nil, errors.New("chacha20poly1305: use of ChaCha20Poly1305 is not allowed in FIPS 140-only mode")
++	}
 +	return xcrypto.NewChaCha20Poly1305(key)
 +}
 diff --git a/src/crypto/internal/backend/backend_linux.go b/src/crypto/internal/backend/backend_linux.go
 new file mode 100644
-index 00000000000000..a4ca780ebb0251
+index 00000000000000..7a832bd68754df
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_linux.go
-@@ -0,0 +1,430 @@
+@@ -0,0 +1,434 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1202,6 +1206,7 @@ index 00000000000000..a4ca780ebb0251
 +	_ "crypto/internal/backend/internal/opensslsetup"
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140only"
++	"errors"
 +	"hash"
 +
 +	"github.com/golang-fips/openssl/v2"
@@ -1612,6 +1617,9 @@ index 00000000000000..a4ca780ebb0251
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if fips140only.Enforced() {
++		return nil, errors.New("chacha20poly1305: use of ChaCha20Poly1305 is not allowed in FIPS 140-only mode")
++	}
 +	return openssl.NewChaCha20Poly1305(key)
 +}
 diff --git a/src/crypto/internal/backend/backend_test.go b/src/crypto/internal/backend/backend_test.go
@@ -1678,10 +1686,10 @@ index 00000000000000..093acd82556330
 +}
 diff --git a/src/crypto/internal/backend/backend_windows.go b/src/crypto/internal/backend/backend_windows.go
 new file mode 100644
-index 00000000000000..26f0e5d79f0588
+index 00000000000000..d25ef26f77013d
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_windows.go
-@@ -0,0 +1,438 @@
+@@ -0,0 +1,442 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1699,6 +1707,7 @@ index 00000000000000..26f0e5d79f0588
 +	"crypto/internal/backend/fips140"
 +	"crypto/internal/boring/sig"
 +	"crypto/internal/fips140only"
++	"errors"
 +	"hash"
 +	_ "unsafe"
 +
@@ -2118,6 +2127,9 @@ index 00000000000000..26f0e5d79f0588
 +}
 +
 +func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if fips140only.Enforced() {
++		return nil, errors.New("chacha20poly1305: use of ChaCha20Poly1305 is not allowed in FIPS 140-only mode")
++	}
 +	return cng.NewChaCha20Poly1305(key)
 +}
 diff --git a/src/crypto/internal/backend/bbig/big.go b/src/crypto/internal/backend/bbig/big.go
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 0596a97943d..6b96d526bfc 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -50,7 +50,7 @@ Subject: [PATCH] Use crypto backends
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140hash/hash.go       |   3 +-
  .../internal/fips140only/fips140only.go       |  11 +-
- .../internal/fips140only/fips140only_test.go  |  52 +++--
+ .../internal/fips140only/fips140only_test.go  |  45 ++--
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
  src/crypto/internal/fips140test/fips_test.go  |   2 +-
@@ -103,7 +103,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 99 files changed, 1628 insertions(+), 249 deletions(-)
+ 99 files changed, 1624 insertions(+), 246 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -176,10 +176,10 @@ index ed0fbf3d53d75b..a2f74c8095d449 100644
  func TestBoringInternalLink(t *testing.T) {
  	tg := testgo(t)
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index 390a36723787f4..0576ea8add72af 100644
+index f6eaddf8fb3f40..48151eee988ba4 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
-@@ -297,6 +297,8 @@ var extraEnvKeys = []string{
+@@ -296,6 +296,8 @@ var extraEnvKeys = []string{
  	"GO_TESTING_GOTOOLS", // for gccgo testing
  	"GCCGO",              // for gccgo testing
  	"GCCGOTOOLDIR",       // for gccgo testing
@@ -1784,7 +1784,7 @@ index a8d840b17022cc..2a17f7da2d4aaa 100644
 +	return false
  }
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
-index 96df536d56f345..01613841a3c87e 100644
+index 96df536d56f345..91d2a792d90296 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go
 +++ b/src/crypto/internal/fips140only/fips140only_test.go
 @@ -17,6 +17,7 @@ import (
@@ -1817,22 +1817,15 @@ index 96df536d56f345..01613841a3c87e 100644
  	expectPanic(t, func() { cipher.NewCTR(notAESBlock, iv) })
  
  	expectPanic(t, func() { cipher.NewOFB(aesBlock, iv) })
-@@ -310,13 +317,16 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
- 	expectErr(t, errRet2(hpke.DHKEM(ecdh.X25519()).NewPublicKey(make([]byte, 32))))
- 	hpkeK, err := hpke.MLKEM768().GenerateKey()
- 	expectNoErr(t, err)
--	expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
--	expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
--
+@@ -313,10 +320,12 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
+ 	expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
+ 	expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
+ 
 -	// fips140=only mode should prevent any operation that would make the FIPS
 -	// 140-3 module set its service indicator to false.
 -	if !fips140.ServiceIndicator() {
 -		t.Errorf("service indicator not set")
 +	if !boring.Enabled {
-+		// TODO implement error handling in backends that check for fips140only.Enforced().
-+		expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
-+		expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
-+
 +		// fips140=only mode should prevent any operation that would make the FIPS
 +		// 140-3 module set its service indicator to false.
 +		if !fips140.ServiceIndicator() {
@@ -1841,7 +1834,7 @@ index 96df536d56f345..01613841a3c87e 100644
  	}
  }
  
-@@ -329,16 +339,22 @@ type readerWrap struct {
+@@ -329,16 +338,22 @@ type readerWrap struct {
  }
  
  func withApprovedHash(f func(crypto.Hash)) {

From 6576fdb64f53dd39a190ed3b0636d234d88d88a7 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 16:10:13 +0000
Subject: [PATCH 756/887] Update submodule to latest master (0b9bcbc5):
 net/http: add basic unexported pluggable HTTP/3 support

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a6a4a41e225..0b9bcbc58c4 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a6a4a41e225096a2599762d95af9c32d944a15e2
+Subproject commit 0b9bcbc58c4cf127d5a42989d08cc0236faa71cc

From 712971e2adc8c7042599875680effbf66693b85a Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 5 Mar 2026 08:45:36 -0800
Subject: [PATCH 757/887] docs: rework "Build option to use Go crypto" (#2173)

* docs: rework "Build option to use Go crypto"

* Update changelog for MS_GO_NOSYSTEMCRYPTO

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/doc/MigrationGuide.md | 40 +++++++++++++++++------
 eng/doc/fips/README.md    | 67 +++++++++++++++++++++++----------------
 2 files changed, 70 insertions(+), 37 deletions(-)

diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index fc7a9e18ccb..9d56816da3e 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -152,12 +152,28 @@ After switching to the Microsoft build of Go, you may encounter new build errors
 
 #### Cgo is not enabled
 
+You may see this error message if cgo is not enabled:
+
+```
+# crypto
+../../../sdk/msgo1.26.0-1/src/crypto/systemcrypto_nocgo_linux.go:10:2: `
+        Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
+
+        Consider using our cgo-less experiment by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
+
+        For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
+        ` (untyped string constant "\n\tUsing GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1....) is not used
 ```
-Using GOEXPERIMENT=systemcrypto on Linux requires CGO_ENABLED=1.
 
-Consider using our cgo-less experiment by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.
+In Go 1.25, you may see this similar error:
 
-For more information, visit https://github.com/microsoft/go/blob/microsoft/main/eng/doc/MigrationGuide.md#cgo-is-not-enabled
+```
+# crypto
+../../../sdk/msgo1.25.7-1/src/crypto/systemcrypto_nocgo.go:10:2: `
+        Using a crypto backend requires CGO_ENABLED=1.
+
+        For more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips
+        ` (untyped string constant "\n\tUsing a crypto backend requires CGO_ENABLED=1.\n\t\n\tFor more i...) is not used
 ```
 
 > [!NOTE]
@@ -165,10 +181,12 @@ For more information, visit https://github.com/microsoft/go/blob/microsoft/main/
 >
 > For more details, see [cgo-less OpenSSL Backend](NocgoOpenSSL.md).
 
+When building a Go program that imports a `crypto` package (or has a dependency that imports a `crypto` package), the build will check that the build environment and target are compatible with the crypto backend being used.
+If it's incompatible, the build will fail with an error like the above.
+
 When targeting Linux, `systemcrypto` requires cgo.
-Cgo is disabled by default on some platforms or when a C compiler is not detected
+Cgo is disabled by default on some platforms or when a C compiler is not detected.
 Sometimes a project's build scripts might explicitly disable cgo.
-There are good reasons to disable cgo, but unfortunately, cgo is currently necessary to use `systemcrypto` on Linux.
 
 In this case, you should first try to install a C compiler, like `gcc`.
 
@@ -353,15 +371,17 @@ For specific guidance within Microsoft:
 ## Disabling `systemcrypto`
 
 The difficulty of migrating to using `systemcrypto` can vary significantly depending on the Go project.
-If the change requires further planning and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto` by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to 1.
-After that, build commands won't encounter errors related to `systemcrypto`, and the resulting program won't attempt to use system-provided cryptography at runtime.
+If this change requires further planning, and if it's acceptable for your project to be temporarily out of compliance with Microsoft cryptography policy, you can disable `systemcrypto`.
 
-For more information about these options, see [the "Build option to use Go crypto" section of the FIPS README](fips/README.md#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
+After disabling `systemcrypto`, build commands won't encounter errors related to `systemcrypto`, and the built program won't attempt to use system-provided cryptography at runtime, instead using the ordinary Go crypto implementation.
 
-More information about exceptions to the Microsoft cryptography policy can be found at [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
+To disable `systemcrypto`, see the instructions in [the "Build option to use Go crypto" section of the FIPS README](fips/README.md#build-option-to-use-go-crypto).
 
 > [!NOTE]
-> The Microsoft build of Go does apply [other changes](#whats-different) to the official Go distribution, but `systemcrypto` is the most impactful, and the only one that adds additional dependencies.
+> `systemcrypto` is the most impactful change in the Microsoft build of Go compared to upstream Go, and the only change that adds additional runtime dependencies.
+>
+> However, the Microsoft build of Go does apply [other changes](#whats-different) to the official Go distribution that may cause an issue.
+> If you disable `systemcrypto` and still encounter a problem, it may be caused by another change.
 
 ## Additional Resources
 
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index c2bcd4d6e70..794d5292766 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -100,7 +100,7 @@ The default behavior of the Microsoft build of Go is to use a platform-provided
 See the [Migration Guide](/eng/doc/MigrationGuide.md) for more information on incorporating the Microsoft build of Go into your build system.
 
 `systemcrypto` modifies the Go runtime included in the program to use the specified platform-provided cryptographic library whenever it calls a Go standard library crypto API.
-If `systemcrypto` is disabled (see [build option to use Go crypto](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails)), Go standard library cryptography is used.
+If `systemcrypto` is disabled (see [build option to use Go crypto](#build-option-to-use-go-crypto)), Go standard library cryptography is used.
 
 > [!NOTE]
 > "Experiment" doesn't indicate the FIPS features are experimental. The original intent of `GOEXPERIMENT` is to use it to enable experimental features in the Go runtime and toolchain, but we and Google are now using `GOEXPERIMENT` for this FIPS-related feature because the mechanism itself perfectly fits our needs.
@@ -133,7 +133,7 @@ We have also successfully used a rootfs to build on an older glibc version (and
 If a crypto backend is selected but isn't supported, the build fails.
 For example, attempting to use the OpenSSL backend without cgo enabled results in a build error.
 
-For more information about disabling the crypto backend, see [build option to use Go crypto](#build-option-to-use-go-crypto-if-the-backend-compatibility-check-fails).
+For more information about disabling the crypto backend, see [build option to use Go crypto](#build-option-to-use-go-crypto).
 
 ## Usage: Runtime
 
@@ -262,36 +262,45 @@ Most programs aren't expected to use these options. Determining FIPS mode at run
 - The program's documentation can state it will always run in FIPS mode without any nuance about environment variables.
 - If the program is used by someone unfamiliar with the system they're configuring, the panic will help catch mistakes before they become a problem.
 
-### Build option to use Go crypto if the backend compatibility check fails
+### Build option to use Go crypto
 
-When building a Go program that imports a `crypto` package, the build will check that the build environment and target are compatible with the crypto backend being used, if any. If it's incompatible, the build will fail with an error. For example, a common unsupported build configuration is `GOOS=linux CGO_ENABLED=0`. The OpenSSL backend on Linux requires cgo, so the build fails:
+The Microsoft build of Go uses the `systemcrypto` backend by default to provide `crypto` functionality.
+It's possible to disable `systemcrypto` and use the Go standard library's implementation of cryptography instead.
 
-```
-# runtime
-..\..\go\src\runtime\backenderr_gen_nofallback_openssl.go:12:2: `
-        The goexperiment.systemcrypto tag is specified, but other tags required to enable that backend were not met.
-        Required build tags:
-          goexperiment.systemcrypto && linux && cgo
-        Please check your build environment and build command for a reason one or more of these tags weren't specified.
-```
+> [!CAUTION]
+> Within Microsoft, disabling `systemcrypto` should only be done in exceptional circumstances under a documented exception.
+>
+> More information about the Microsoft cryptography policy can be found at [Microsoft.Security.Cryptography.10010 on the Liquid Microsoft-internal site.][msc10010]
+>
+> If you haven't already, check the [Migration Guide](/eng/doc/MigrationGuide.md) to find common issues and fixes.
+
+> [!TIP]
+> If your project doesn't use the `crypto` package at all, `systemcrypto` is not included in your program.
+> This is an alternative to complying with cryptography policies: refactor the code to not use any cryptography.
+> While this isn't possible for many types of projects, it may be an ideal approach for tools that only run on a local machine.
+>
+> For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
 
-We recommend fixing the build environment to allow the crypto backend to be used. (Enable cgo.)
+If it's acceptable to become noncompliant with the internal Microsoft crypto policy and FIPS, you can use the Go standard library cryptography implementation by disabling the `systemcrypto` backend:
 
-These are other fixes that may be used on a case-by-case basis:
+- With Go 1.25.2 or later, set the `MS_GO_NOSYSTEMCRYPTO` environment variable to `1`.
+- With Go 1.25 or later, set the `GOEXPERIMENT` environment variable to `nosystemcrypto`.
 
-- Intentionally disable the backend and intentional become incompliant with the internal Microsoft crypto policy or FIPS. For builds within Microsoft, this should only be done under a documented exception. To do so:
-  > [!WARNING]
-  > Disabling `systemcrypto` should only be done under **exceptional circumstances** in builds performed by Microsoft. See [Disabling `systemcrypto`](../MigrationGuide.md#disabling-systemcrypto).
-  - With Go 1.25.2 or later, set `MS_GO_NOSYSTEMCRYPTO=1`.
-  - With Go 1.25 or later, set `GOEXPERIMENT=nosystemcrypto`.
-- Refactor the code to not use a `crypto` package. For example, when computing a hash for non-cryptographic purposes, there are several alternatives in the Go standard library that don't require a crypto backend, such as `hash/fnv` or `hash/maphash`.
+Both of the above methods are supported, but we encourage using `MS_GO_NOSYSTEMCRYPTO` instead of `GOEXPERIMENT`:
 
-> [!NOTE]
+- `GOEXPERIMENT=nosystemcrypto` may make your *build command* incompatible with the official Go toolset. ([microsoft/go#1880](https://github.com/microsoft/go/issues/1880))
+- `MS_GO_NOSYSTEMCRYPTO=1` doesn't involve the `GOEXPERIMENT` mechanism. It's simpler to use and to incorporate into any build process.
+
+> [!WARNING]
 > `MS_GO_NOSYSTEMCRYPTO=1` has precedence over `GOEXPERIMENT` values.
-> For example, setting `MS_GO_NOSYSTEMCRYPTO=1` and `GOEXPERIMENT=systemcrypto` builds a program that uses Go standard library cryptography.
+> It will disable the backend even if `GOEXPERIMENT=systemcrypto` is set.
+>
+> Specifically, `MS_GO_NOSYSTEMCRYPTO=1 GOEXPERIMENT=systemcrypto go build .` builds a program that uses Go standard library cryptography.
 
-> [!IMPORTANT]
-> Individual crypto calls may fall back to standard Go crypto at runtime if the selected backend doesn't support an API or the arguments used. See the [FIPS User Guide](UserGuide.md) for more information.
+> [!NOTE]
+> Your program may use Go crypto even if `systemcrypto` is enabled.
+> If the selected backend doesn't support an API or the specific arguments used to call it, the call may fall back to using standard Go crypto at runtime.
+> See the [FIPS User Guide](UserGuide.md) for more information.
 
 ### Runtime OpenSSL version override
 
@@ -425,19 +434,23 @@ This list of major changes is intended for quick reference and for access to his
 
 - Support for `GODEBUG=fips140=only` has been added. It acts as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used.
 - The per-platform GOEXPERIMENTs (`opensslcrypto`, `cngcrypto`, `darwincrypto`) have been removed.
-  - The `systemcrypto` GOEXPERIMENT is now enabled by default on all platforms where it's supported (Windows, Linux and macOS). To disable it, set `GOEXPERIMENT=nosystemcrypto`.
   - Using any of the removed experiments will result in a build error.
+  - The `systemcrypto` GOEXPERIMENT has been the preferred way to select a crypto backend since it was introduced in Go 1.21. It is now the only way.
+  - The build tags (build constraints) associated with the removed GOEXPERIMENTs are no longer supported.
+    - The per-platform tags are not set by the Microsoft build of Go when `systemcrypto` is enabled.
+    - Manually using `-tags` to enable a per-platform backend tag no longer has any effect on the standard library.
+    - The `goexperiment.systemcrypto` build tag remains supported, and its behavior has not changed.
 
 ### Go 1.26 (Feb 2026)
 
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
 - The macOS backend is no longer "preview" and is now fully supported.
-- `systemcrypto` can be disabled at build time using `MS_GO_NOSYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+- `systemcrypto` can be [disabled at build time](#build-option-to-use-go-crypto) by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to `1`.
 - Setting the enabled FIPS preference will not cause a panic on Windows even if the Windows FIPS policy is not enabled.
 
 ### Go 1.25.2 (Oct 2025)
 
-- `systemcrypto` can be disabled at build time using `MS_GO_NOSYSTEMCRYPTO=1`. This is now the preferred way to disable `systemcrypto` when necessary.
+- `systemcrypto` can be [disabled at build time](#build-option-to-use-go-crypto) by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to `1`.
 
 ### Go 1.25 (Aug 2025)
 

From 0aab7108a6d59ec5abe06ddf6ced48112e9c3ee6 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 6 Mar 2026 16:07:36 +0000
Subject: [PATCH 758/887] Update submodule to latest master (cbab448d):
 crypto/x509: fix name constraint checking panic

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 0b9bcbc58c4..cbab448de1c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 0b9bcbc58c4cf127d5a42989d08cc0236faa71cc
+Subproject commit cbab448de1c562e417b179d29f99758f4680630b

From 0431cd2adbdb8b6d4ae4293b9f6de548c05f3bfe Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 7 Mar 2026 08:11:49 +0000
Subject: [PATCH 759/887] build(deps): bump github/codeql-action from 4.32.5 to
 4.32.6 (#2178)

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bb3bbd41964..d699100dce0 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
+        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
+        uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
+        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
         with:
           category: /language:go

From dae0ecbc16757fd4b9115952e587fb69250c95e8 Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Tue, 10 Mar 2026 16:19:57 +0000
Subject: [PATCH 760/887] remove Windows Server 2019 testing (#2181)

---
 eng/pipeline/stages/go-builder-matrix-stages.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/eng/pipeline/stages/go-builder-matrix-stages.yml b/eng/pipeline/stages/go-builder-matrix-stages.yml
index f14a91ffd67..b556c35f04e 100644
--- a/eng/pipeline/stages/go-builder-matrix-stages.yml
+++ b/eng/pipeline/stages/go-builder-matrix-stages.yml
@@ -104,7 +104,6 @@ stages:
           - { experiment: nosystemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test }
           - { experiment: systemcrypto, os: windows, arch: amd64, config: test, fips: true }
-          - { experiment: systemcrypto, os: windows, arch: amd64, config: test, distro: '2019', broken: true } # Affected by https://golang.org/issue/10842.
           - { experiment: ms_tls_config_schannel, os: windows, arch: amd64, config: test }
           # Test that buildandpack works on Windows x86-32, but don't release it.
           - { experiment: nosystemcrypto, os: windows, hostArch: amd64, arch: 386, config: buildandpack }

From c0e1bab5e9ebfb6435f888e79cbce8d73a528a60 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 16:11:12 +0000
Subject: [PATCH 761/887] Update submodule to latest master (e30e65f7):
 syscall,runtime/cgo: use cgo_ldflag to link against -lsocket and -lxnet on
 Solaris

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index cbab448de1c..e30e65f7a8b 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit cbab448de1c562e417b179d29f99758f4680630b
+Subproject commit e30e65f7a8bda0351d9def5a6bc91471bddafd3d

From 593de1c42fb294149a84613f95a02f4bb8cfd41f Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 11 Mar 2026 16:46:28 +0000
Subject: [PATCH 762/887] resolve 3-way merge conflicts

---
 ...013-Add-Microsoft-version-information.patch | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/patches/0013-Add-Microsoft-version-information.patch b/patches/0013-Add-Microsoft-version-information.patch
index c9446d530c0..36aa56baf6b 100644
--- a/patches/0013-Add-Microsoft-version-information.patch
+++ b/patches/0013-Add-Microsoft-version-information.patch
@@ -31,10 +31,10 @@ Microsoft build of Go version string.
  create mode 100644 src/cmd/go/testdata/script/gotoolchain_local_ms.txt
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index 4c95ceb09bcbbe..6b052d8ce29b6a 100644
+index beee0f46498d4d..f2eb13d1dde4d4 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -192,6 +192,15 @@ Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
+@@ -218,6 +218,15 @@ Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
  - "default": use the recommended Microsoft TLS settings. This is the default.
  - "off": use the default upstream Go TLS settings.
  
@@ -51,7 +51,7 @@ index 4c95ceb09bcbbe..6b052d8ce29b6a 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index 917f682fd4bfaf..85512e38220de6 100644
+index feef0080cb12d6..e9b74bd4abf191 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -450,6 +450,22 @@ func findgoversion() string {
@@ -334,10 +334,10 @@ index 00000000000000..24538695be2cf2
 +go version
 +stdout go1.501
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 0140c385e47991..727a992bdf7a11 100644
+index 24fecd47360a8d..cb4b51df2aeebd 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
-@@ -186,15 +186,20 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -188,15 +188,20 @@ func Main(arch *sys.Arch, theArch Arch) {
  		addstrdata1(ctxt, "runtime.defaultGOROOT="+buildcfg.GOROOT)
  	}
  
@@ -364,7 +364,7 @@ index 0140c385e47991..727a992bdf7a11 100644
  
  	// TODO(matloob): define these above and then check flag values here
  	if ctxt.Arch.Family == sys.AMD64 && buildcfg.GOOS == "plan9" {
-@@ -210,10 +215,28 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -212,10 +217,28 @@ func Main(arch *sys.Arch, theArch Arch) {
  	objabi.Flagfn1("X", "add string value `definition` of the form importpath.name=value", func(s string) { addstrdata1(ctxt, s) })
  	objabi.Flagcount("v", "print link trace", &ctxt.Debugvlog)
  	objabi.Flagfn1("importcfg", "read import configuration from `file`", ctxt.readImportCfg)
@@ -443,7 +443,7 @@ index 89fd74eb823162..f6d6a78531fc75 100644
  var Error error
  
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
-index 7a5ea67c7dca33..d3e5b7b71d528c 100644
+index 1ba17bc136710f..a3868ad860ed4a 100644
 --- a/src/internal/godebugs/table.go
 +++ b/src/internal/godebugs/table.go
 @@ -51,6 +51,7 @@ var All = []Info{
@@ -495,7 +495,7 @@ index a9f97a1a045525..991d5ef22c5df5 100644
  
  // GOOS is the running program's operating system target:
 diff --git a/src/runtime/runtime1.go b/src/runtime/runtime1.go
-index 965ff8ab5167d5..2674b5d8844b18 100644
+index 10754eee1cd999..20ce0d57d003bd 100644
 --- a/src/runtime/runtime1.go
 +++ b/src/runtime/runtime1.go
 @@ -364,6 +364,9 @@ var debug struct {
@@ -509,7 +509,7 @@ index 965ff8ab5167d5..2674b5d8844b18 100644
  
  var dbgvars = []*dbgVar{
 @@ -401,6 +404,7 @@ var dbgvars = []*dbgVar{
- 	{name: "tracebacklabels", atomic: &debug.tracebacklabels, def: 0},
+ 	{name: "tracebacklabels", atomic: &debug.tracebacklabels, def: 1},
  	{name: "tracefpunwindoff", value: &debug.tracefpunwindoff},
  	{name: "updatemaxprocs", value: &debug.updatemaxprocs, def: 1},
 +	{name: "ms_version", atomic: &debug.msversion, def: 0},

From 9a74680b2291c49b112ed096b423347055560ebd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 12 Mar 2026 11:05:12 +0000
Subject: [PATCH 763/887] build(deps): bump golang.org/x/net from 0.51.0 to
 0.52.0 in /eng/_util (#2185)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/net/compare/v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 22 ++++++++--------------
 2 files changed, 11 insertions(+), 17 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1eb1b63b6ed..c62f6eced4d 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.8
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.51.0
+	golang.org/x/net v0.52.0
 )
 
 require (
@@ -28,9 +28,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/oauth2 v0.35.0 // indirect
-	golang.org/x/text v0.34.0 // indirect
+	golang.org/x/text v0.35.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 8cc06dbd7b8..1bdbbd57e12 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -14,13 +14,10 @@ github.com/go-test/deep v1.1.1 h1:0r/53hagsehfO4bzD2Pgr/+RgHqhmf+k1Bpse2cTu1U=
 github.com/go-test/deep v1.1.1/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
 github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
 github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
-github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
 github.com/google/go-github/v65 v65.0.0 h1:pQ7BmO3DZivvFk92geC0jB0q2m3gyn8vnYPgV7GSLhQ=
 github.com/google/go-github/v65 v65.0.0/go.mod h1:DvrqWo5hvsdhJvHd4WyVF9ttANN3BniqjP8uTFMNb60=
-github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
-github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/go-querystring v1.2.0 h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0=
 github.com/google/go-querystring v1.2.0/go.mod h1:8IFJqpSRITyJ8QhQ13bmbeMBDfmeEJZD5A0egEOmkqU=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
@@ -54,19 +51,16 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
 go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
-golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
-golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
-golang.org/x/oauth2 v0.33.0 h1:4Q+qn+E5z8gPRJfmRy7C2gGG3T4jIprK6aSYgTXGRpo=
-golang.org/x/oauth2 v0.33.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
+golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
+golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
 golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
 golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
-golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
-golang.org/x/tools v0.41.0 h1:a9b8iMweWG+S0OBnlU36rzLp20z1Rp10w+IY2czHTQc=
-golang.org/x/tools v0.41.0/go.mod h1:XSY6eDqxVNiYgezAVqqCeihT4j1U2CCsqvH3WhQpnlg=
-golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
+golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
+golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k=
+golang.org/x/tools v0.42.0/go.mod h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

From f28bcee6faffe1475394e0ce759f0bde9fdbf26c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Mar 2026 12:41:06 +0000
Subject: [PATCH 764/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#2188)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.8...v0.0.9)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 16 ++++++++--------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index c62f6eced4d..2535377925d 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.8
+	github.com/microsoft/go-infra v0.0.9
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.52.0
 )
@@ -27,9 +27,9 @@ require (
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
-	go.yaml.in/yaml/v4 v4.0.0-rc.3 // indirect
+	go.yaml.in/yaml/v4 v4.0.0-rc.4 // indirect
 	golang.org/x/crypto v0.49.0 // indirect
-	golang.org/x/oauth2 v0.35.0 // indirect
+	golang.org/x/oauth2 v0.36.0 // indirect
 	golang.org/x/text v0.35.0 // indirect
 )
 
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 1bdbbd57e12..03408b10ff1 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.8 h1:p7vlLlOk7JqyoifCDz5ON4YgE+NPvmuPd1b2a9IRdWo=
-github.com/microsoft/go-infra v0.0.8/go.mod h1:bq40MsG2wiwmaEF1NhMNUcmABwpVKLuexYhRuxsDR5o=
+github.com/microsoft/go-infra v0.0.9 h1:emnuI8I9HGQESkwuTD2YAQFokgPKUzOjRlqpLp4+AfQ=
+github.com/microsoft/go-infra v0.0.9/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
@@ -49,18 +49,18 @@ github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w=
 github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
 github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H4=
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
-go.yaml.in/yaml/v4 v4.0.0-rc.3 h1:3h1fjsh1CTAPjW7q/EMe+C8shx5d8ctzZTrLcs/j8Go=
-go.yaml.in/yaml/v4 v4.0.0-rc.3/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
+go.yaml.in/yaml/v4 v4.0.0-rc.4 h1:UP4+v6fFrBIb1l934bDl//mmnoIZEDK0idg1+AIvX5U=
+go.yaml.in/yaml/v4 v4.0.0-rc.4/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
 golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
 golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
 golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
-golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
-golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
+golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
+golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
 golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
-golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k=
-golang.org/x/tools v0.42.0/go.mod h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0=
+golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
+golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

From 8dea67c3f13c87fd037316b239d89ae167c62359 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Mar 2026 13:47:52 +0000
Subject: [PATCH 765/887] build(deps): bump github/codeql-action from 4.32.6 to
 4.33.0 (#2189)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.6 to 4.33.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0d579ffd059c29b07949a3cce3983f0780820c98...b1bff81932f5cdfc8695c7752dcee935dcd061c8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index d699100dce0..83a6799ef99 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+        uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
         with:
           category: /language:go

From 9be7a71a425eafae2cd4e600a77feaf293332359 Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Wed, 18 Mar 2026 01:00:22 +0000
Subject: [PATCH 766/887] implement Installation.md and document using setup-go
 (#2190)

* implement Installation.md and document using setup-go

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Fix link to go-install.ps1 script in Migration Guide

Updated link in MigrationGuide.md to point to Installation.md.

* remove outdated 1.24 reference

* Update eng/doc/Installation.md

Co-authored-by: Quim Muntal <qmuntaldiaz@microsoft.com>

* Fix link to Installation Guide in Migration Guide

Corrected the link to the Installation Guide for Ubuntu golang package.

* Update eng/doc/MigrationGuide.md

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Quim Muntal <qmuntaldiaz@microsoft.com>
Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 README.md                 | 110 ++++++++------------------------------
 eng/doc/Installation.md   | 109 +++++++++++++++++++++++++++++++++++++
 eng/doc/MigrationGuide.md |  26 +++------
 3 files changed, 137 insertions(+), 108 deletions(-)
 create mode 100644 eng/doc/Installation.md

diff --git a/README.md b/README.md
index 5ab69498a7c..86f82b793bb 100644
--- a/README.md
+++ b/README.md
@@ -57,95 +57,27 @@ There are a few additional support resources internal to Microsoft:
 
 ## Download and install
 
-We build the forked Go toolset with the following list of OS/Arch combinations:
-
-* `linux_amd64`
-* `linux_armv6l`
-* `linux_arm64`
-* `windows_amd64`
-* `windows_arm64`
-* `darwin_amd64`
-* `darwin_arm64`
-
-Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we
-recommend migrating existing Go projects to use the Microsoft build of Go. This
-guide also helps resolve commonly encountered issues.
-
-The following sections list the ways to get the Microsoft build of Go.
-
-> [!NOTE]
-> Don't see an option that works for you? Let us know!  
-> File a GitHub issue, or comment on an existing issue in this tag:
-  [![](https://img.shields.io/github/labels/microsoft/go/Area-Acquisition)](https://github.com/microsoft/go/labels/Area-Acquisition)
-
-### Docker Container Images
-
-**[microsoft/go-images](https://github.com/microsoft/go-images)** maintains and
-documents container images that are available on Microsoft Artifact Registry.
-
-### Azure Linux
-
-The **[Azure Linux](https://github.com/microsoft/azurelinux)** distribution
-includes the `golang` package, a build of this fork of Go.
-
-For more information about how to manage the `systemcrypto` migration from 1.24
-to 1.25 in Azure Linux 3, see
-[the `systemcrypto` section of the Migration Guide](eng/doc/MigrationGuide.md#migration-to-systemcrypto).
-
-### Ubuntu
-
-To install the Microsoft build of Go using an Ubuntu package, first set up the [Linux package repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages).
-Packages are available in the Ubuntu 22.04 and 24.04 repositories.
-
-After the repository is added, install the Microsoft build of Go by running the following commands:
-
-```bash
-sudo apt-get update && sudo apt-get install msft-golang
-```
-
-### Azure Pipelines `GoTool@0` task
-
-The [`GoTool@0`](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
-For more details, see [the GoTool@0 section of the Migration Guide](eng/doc/MigrationGuide.md#the-gotool0-azure-pipelines-task).
-
-### The `go-install.ps1` script
-
-The [cross-platform `go-install.ps1` script](https://github.com/microsoft/go-infra/tree/main/goinstallscript) installs the Microsoft build of Go.
-It can install specific versions or the latest releases.
-
-If you use Azure Pipelines, try running the script in a [script step](https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/cmd-line-v2?view=azure-pipelines) and pass the `-AzurePipelinePath` argument to automatically set up `go` in the environment for future steps.
-
-### Binary archive
-
-[Signed builds of Go](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/Downloads.md)
-for several platforms are available as `zip` and `tar.gz` files.
-
-### Build from source
-
-#### Pre-patched source tarball
-
-[The microsoft/go GitHub releases](https://github.com/microsoft/go/releases)
-include a source tarball file ending in `.src.tar.gz`. After downloading and
-extracting the tar.gz file, build it using the
-[upstream instructions](https://go.dev/doc/install/source).
-
-> [!NOTE]
-> The `zip` file that GitHub offers for download on the [microsoft/go releases page](https://github.com/microsoft/go/releases) is incomplete: it doesn't include the `go` submodule.
-> Make sure to download the `.src.tar.gz` file instead, or [clone the repository using Git and set up the patched submodule](#clone-and-build).
-
-#### Clone and build
-
-First, clone this repository using Git and check out the desired tag or commit.
-
-If you want to contribute to the Microsoft build of Go project, read the [Developer Guide](eng/doc/DeveloperGuide.md).
-It lists the steps we recommend to set up a Microsoft build of Go development environment, execute your first build, run the standard library test suite, and contribute a PR.
-
-If you just want to build on your own machine, you may find it more
-convenient to use the tools provided by the `eng/run.ps1` script. We use this
-script for CI builds. See [eng/README.md](eng/README.md) for more details about
-`eng/run.ps1` and other repository infrastructure.
-
-Once built, the Microsoft build of Go binary is found at `go/bin/go`.
+We build the Microsoft build of Go toolset with the following OS/Arch combinations:
+
+| OS | `amd64` | `arm64` | `armv6l` |
+| --- | :---: | :---: | :---: |
+| `linux` | ✓ | ✓ | ✓ |
+| `windows` | ✓ | ✓ | |
+| `darwin` (macOS) | ✓ | ✓ | |
+
+Visit the [Migration Guide](eng/doc/MigrationGuide.md) for guidance about how we recommend migrating existing Go projects to use the Microsoft build of Go.
+This guide also helps resolve commonly encountered issues.
+
+The [Installation](eng/doc/Installation.md) documentation contains sections describing each of the following installation methods:
+
+* [Docker Container Images](eng/doc/Installation.md#docker-container-images)
+* [Azure Linux](eng/doc/Installation.md#azure-linux)
+* [Ubuntu](eng/doc/Installation.md#ubuntu)
+* [Azure Pipelines `GoTool@0` task](eng/doc/Installation.md#azure-pipelines-gotool0-task)
+* [GitHub Actions `setup-go`](eng/doc/Installation.md#github-actions-setup-go)
+* [The `go-install.ps1` script](eng/doc/Installation.md#the-go-installps1-script)
+* [Binary archive](eng/doc/Installation.md#binary-archive)
+* [Build from source](eng/doc/Installation.md#build-from-source)
 
 ## Contributing
 
diff --git a/eng/doc/Installation.md b/eng/doc/Installation.md
new file mode 100644
index 00000000000..be7ec1dd6af
--- /dev/null
+++ b/eng/doc/Installation.md
@@ -0,0 +1,109 @@
+# Installation
+
+Visit the [Migration Guide](MigrationGuide.md) for guidance about how we
+recommend migrating existing Go projects to use the Microsoft build of Go. This
+guide also helps resolve commonly encountered issues.
+
+> [!NOTE]
+> Don't see an option that works for you? Let us know!  
+> File a GitHub issue, or comment on an existing issue in this tag:
+  [![](https://img.shields.io/github/labels/microsoft/go/Area-Acquisition)](https://github.com/microsoft/go/labels/Area-Acquisition)
+
+## Docker Container Images
+
+**[microsoft/go-images](https://github.com/microsoft/go-images)** maintains and
+documents container images that are available on Microsoft Artifact Registry.
+
+## Azure Linux
+
+The **[Azure Linux](https://github.com/microsoft/azurelinux)** distribution
+includes the `golang` package, a build of this fork of Go.
+
+## Ubuntu
+
+To install the Microsoft build of Go using an Ubuntu package, first set up the [Linux package repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages).
+Packages are available in the Ubuntu 22.04 and 24.04 repositories.
+
+After the repository is added, install the Microsoft build of Go by running the following commands:
+
+```bash
+sudo apt-get update && sudo apt-get install msft-golang
+```
+
+## Azure Pipelines `GoTool@0` task
+
+The [`GoTool@0`](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
+
+To use it, set these parameters:
+
+* `version`: the task supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version.
+* `goDownloadUrl`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
+
+The resulting step in a yml-based Azure Pipeline looks like this:
+
+```yml
+- task: GoTool@0
+  displayName: 'Install Go'
+  inputs:
+    version: '1.26'
+    goDownloadUrl: 'https://aka.ms/golang/release/latest'
+```
+
+## GitHub Actions `setup-go`
+
+The [`actions/setup-go`](https://github.com/actions/setup-go) GitHub Action supports installing the Microsoft build of Go.
+
+To use it, set these parameters:
+
+* `go-version`: the version of Go to install.
+* `go-download-base-url`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
+
+The resulting step in a GitHub Actions workflow looks like this:
+
+```yml
+- uses: actions/setup-go@v6
+  with:
+    go-version: '1.26'
+    go-download-base-url: 'https://aka.ms/golang/release/latest'
+```
+
+## The `go-install.ps1` script
+
+The [cross-platform `go-install.ps1` script](https://github.com/microsoft/go-infra/tree/main/goinstallscript) installs the Microsoft build of Go.
+It can install specific versions or the latest releases.
+
+If you use Azure Pipelines, try running the script in a [script step](https://learn.microsoft.com/en-us/azure/devops/pipelines/tasks/reference/cmd-line-v2?view=azure-pipelines) and pass the `-AzurePipelinePath` argument to automatically set up `go` in the environment for future steps.
+
+If you use GitHub Actions, pass the `-GitHubActionsPath` argument to automatically set up `go` in the environment for future steps.
+
+## Binary archive
+
+[Signed builds of Go](Downloads.md)
+for several platforms are available as `zip` and `tar.gz` files.
+
+## Build from source
+
+### Pre-patched source tarball
+
+[The microsoft/go GitHub releases](https://github.com/microsoft/go/releases)
+include a source tarball file ending in `.src.tar.gz`. After downloading and
+extracting the tar.gz file, build it using the
+[upstream instructions](https://go.dev/doc/install/source).
+
+> [!NOTE]
+> The `zip` file that GitHub offers for download on the [microsoft/go releases page](https://github.com/microsoft/go/releases) is incomplete: it doesn't include the `go` submodule.
+> Make sure to download the `.src.tar.gz` file instead, or [clone the repository using Git and set up the patched submodule](#clone-and-build).
+
+### Clone and build
+
+First, clone this repository using Git and check out the desired tag or commit.
+
+If you want to contribute to the Microsoft build of Go project, read the [Developer Guide](DeveloperGuide.md).
+It lists the steps we recommend to set up a Microsoft build of Go development environment, execute your first build, run the standard library test suite, and contribute a PR.
+
+If you just want to build on your own machine, you may find it more
+convenient to use the tools provided by the `eng/run.ps1` script. We use this
+script for CI builds. See [eng/README.md](../../eng/README.md) for more details about
+`eng/run.ps1` and other repository infrastructure.
+
+Once built, the Microsoft build of Go binary is found at `go/bin/go`.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index 9d56816da3e..a67e53d55b2 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -57,34 +57,22 @@ For a detailed description of every feature, see the [Additional Features](./Add
 This section describes some migration scenarios we know about and the path we recommend following for each one.
 
 > [!NOTE]
-> Any method of installing the Microsoft build of Go specified [in the project README file](/README.md#download-and-install) is valid.
+> Any method of installing the Microsoft build of Go specified [in the Installation guide](Installation.md) is valid.
 > If you see a good fit, go ahead and use it.
 >
 > The scenarios in the following sections simply offer targeted guidance to help find the easiest approach.
 
-### The `GoTool@0` Azure Pipelines task
+### A CI task or action that installs Go
 
-The [GoTool@0](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
+If your CI system has a built-in task or action that installs Go, it may support installing the Microsoft build of Go:
 
-To use it, set these parameters:
-
-* `version`: the task supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version. We recommend using the latest major version, currently `1.26`.
-* `goDownloadUrl`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
-
-The resulting step in a yml-based Azure Pipeline looks like this:
-
-```yml
-- task: GoTool@0
-  displayName: 'Install Go'
-  inputs:
-    version: '1.26'
-    goDownloadUrl: 'https://aka.ms/golang/release/latest'
-```
+* **Azure Pipelines:** use the [`GoTool@0` task](Installation.md#azure-pipelines-gotool0-task).
+* **GitHub Actions:** use the [`actions/setup-go` action](Installation.md#github-actions-setup-go).
 
 ### A `go` toolset that happens to be on my build agent
 
 Some build agents (VMs, containers, etc.) have `go` conveniently pre-installed, but it's the official distribution of Go rather than the Microsoft build.
-A universal migration is to use [the cross-platform `go-install.ps1` script](/README.md#the-go-installps1-script).
+A universal migration is to use [the cross-platform `go-install.ps1` script](Installation.md#the-go-installps1-script).
 However, we recommend looking at these options first:
 
 * Request that your agent provider includes the Microsoft build of Go.
@@ -116,7 +104,7 @@ If you're using it, no action is needed.
 ### An Ubuntu `golang` package
 
 Ubuntu packages for the Microsoft build of Go are `msft-golang` on the [Linux Software Repository for Microsoft Products](https://learn.microsoft.com/en-us/linux/packages), also known as PMC (packages.microsoft.com).
-Install instructions [are in the project README file](/README.md#ubuntu).
+Install instructions [are in the Installation Guide](Installation.md#ubuntu).
 
 ### A OneBranch Azure Pipeline
 

From fdb360c63d4ba9f38e1d04ba9dacd106d7fd274a Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 18 Mar 2026 01:12:00 -0700
Subject: [PATCH 767/887] Revendor backends (#2192)

---
 .../0001-Vendor-external-dependencies.patch   | 5081 ++++++++---------
 1 file changed, 2307 insertions(+), 2774 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index c76de32cb4a..a8aa09ff431 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -44,43 +44,42 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../github.com/golang-fips/openssl/v2/aes.go  |  157 ++
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../openssl/v2/chacha20poly1305.go            |  149 +
- .../golang-fips/openssl/v2/cipher.go          |  659 +++++
+ .../openssl/v2/chacha20poly1305.go            |  151 +
+ .../golang-fips/openssl/v2/cipher.go          |  662 +++++
  .../golang-fips/openssl/v2/const.go           |   91 +
  .../golang-fips/openssl/v2/cshake.go          |  253 ++
  .../github.com/golang-fips/openssl/v2/des.go  |  112 +
- .../github.com/golang-fips/openssl/v2/dsa.go  |  308 +++
+ .../github.com/golang-fips/openssl/v2/dsa.go  |  305 ++
  .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  343 +++
- .../golang-fips/openssl/v2/ecdsa.go           |  222 ++
+ .../github.com/golang-fips/openssl/v2/ecdh.go |  340 +++
+ .../golang-fips/openssl/v2/ecdsa.go           |  219 ++
  .../golang-fips/openssl/v2/ed25519.go         |  210 ++
  .../github.com/golang-fips/openssl/v2/evp.go  |  620 +++++
- .../github.com/golang-fips/openssl/v2/hash.go |  518 ++++
- .../golang-fips/openssl/v2/hashclone.go       |   14 +
- .../golang-fips/openssl/v2/hashclone_go125.go |    9 +
- .../github.com/golang-fips/openssl/v2/hkdf.go |  455 ++++
- .../github.com/golang-fips/openssl/v2/hmac.go |  282 ++
+ .../github.com/golang-fips/openssl/v2/hash.go |  520 ++++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  451 +++
+ .../github.com/golang-fips/openssl/v2/hmac.go |  278 ++
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
  .../openssl/v2/internal/fakecgo/abi_loong64.h |   60 +
  .../openssl/v2/internal/fakecgo/abi_ppc64x.h  |  195 ++
+ .../openssl/v2/internal/fakecgo/abi_riscv64.h |   72 +
  .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
  .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
  .../openssl/v2/internal/fakecgo/asm_arm.s     |   52 +
  .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
  .../openssl/v2/internal/fakecgo/asm_loong64.s |   40 +
  .../openssl/v2/internal/fakecgo/asm_ppc64le.s |   82 +
- .../openssl/v2/internal/fakecgo/asm_riscv64.s |   78 +
+ .../openssl/v2/internal/fakecgo/asm_riscv64.s |   37 +
  .../openssl/v2/internal/fakecgo/asm_s390x.s   |   55 +
  .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
- .../openssl/v2/internal/fakecgo/fakecgo.go    |   29 +
+ .../openssl/v2/internal/fakecgo/fakecgo.go    |   14 +
  .../openssl/v2/internal/fakecgo/fakecgo.lock  |    3 +
  .../openssl/v2/internal/fakecgo/freebsd.go    |   27 +
  .../openssl/v2/internal/fakecgo/generate.go   |    3 +
  .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
- .../openssl/v2/internal/fakecgo/go_freebsd.go |  100 +
+ .../openssl/v2/internal/fakecgo/go_freebsd.go |   79 +
  .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
- .../openssl/v2/internal/fakecgo/go_linux.go   |  100 +
+ .../openssl/v2/internal/fakecgo/go_linux.go   |   79 +
  .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
  .../openssl/v2/internal/fakecgo/go_util.go    |   38 +
  .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
@@ -88,31 +87,31 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
  .../v2/internal/fakecgo/libcgo_freebsd.go     |   20 +
  .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
- .../openssl/v2/internal/fakecgo/linux.go      |   34 +
+ .../openssl/v2/internal/fakecgo/linux.go      |  184 ++
  .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
- .../v2/internal/fakecgo/trampolines_386.s     |  107 +
+ .../v2/internal/fakecgo/trampolines_386.s     |  121 +
  .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
- .../v2/internal/fakecgo/trampolines_arm.s     |   81 +
- .../v2/internal/fakecgo/trampolines_arm64.s   |   84 +
- .../v2/internal/fakecgo/trampolines_loong64.s |   88 +
- .../v2/internal/fakecgo/trampolines_ppc64le.s |  227 ++
- .../v2/internal/fakecgo/trampolines_riscv64.s |   72 +
- .../v2/internal/fakecgo/trampolines_s390x.s   |  163 ++
+ .../v2/internal/fakecgo/trampolines_arm.s     |  122 +
+ .../v2/internal/fakecgo/trampolines_arm64.s   |   81 +
+ .../internal/fakecgo/trampolines_linux_386.s  |   78 +
+ .../fakecgo/trampolines_linux_amd64.s         |   69 +
+ .../internal/fakecgo/trampolines_linux_arm.s  |   69 +
+ .../fakecgo/trampolines_linux_arm64.s         |   60 +
+ .../fakecgo/trampolines_linux_loong64.s       |   60 +
+ .../fakecgo/trampolines_linux_ppc64le.s       |   69 +
+ .../fakecgo/trampolines_linux_riscv64.s       |   60 +
+ .../fakecgo/trampolines_linux_s390x.s         |   53 +
+ .../v2/internal/fakecgo/trampolines_loong64.s |   78 +
+ .../v2/internal/fakecgo/trampolines_ppc64le.s |  128 +
+ .../v2/internal/fakecgo/trampolines_riscv64.s |   76 +
+ .../v2/internal/fakecgo/trampolines_s390x.s   |  154 ++
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
  .../v2/internal/fakecgo/zsymbols_freebsd.go   |   48 +
- .../v2/internal/fakecgo/zsymbols_linux.go     |  294 ++
+ .../v2/internal/fakecgo/zsymbols_linux.go     |  158 ++
  .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
  .../internal/fakecgo/ztrampolines_freebsd.s   |   16 +
- .../v2/internal/fakecgo/ztrampolines_linux.s  |   16 +
- .../internal/fakecgo/ztrampolines_linux_386.s |  110 +
- .../fakecgo/ztrampolines_linux_amd64.s        |  102 +
- .../internal/fakecgo/ztrampolines_linux_arm.s |   74 +
- .../fakecgo/ztrampolines_linux_arm64.s        |   93 +
- .../fakecgo/ztrampolines_linux_loong64.s      |   92 +
- .../fakecgo/ztrampolines_linux_ppc64le.s      |  101 +
- .../fakecgo/ztrampolines_linux_riscv64.s      |   92 +
- .../fakecgo/ztrampolines_linux_s390x.s        |   90 +
+ .../v2/internal/fakecgo/ztrampolines_linux.s  |   46 +
  .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
  .../openssl/v2/internal/ossl/asm_386.s        |   98 +
  .../openssl/v2/internal/ossl/asm_amd64.s      |  120 +
@@ -136,15 +135,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   55 +
- .../openssl/v2/internal/ossl/zdl_nocgo.go     |   45 +
- .../openssl/v2/internal/ossl/zossl.c          | 2056 ++++++++++++++
+ .../openssl/v2/internal/ossl/zdl_nocgo.go     |   58 +
+ .../openssl/v2/internal/ossl/zossl.c          | 2054 ++++++++++++++
  .../openssl/v2/internal/ossl/zossl.go         |   67 +
  .../openssl/v2/internal/ossl/zossl.h          |  363 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1368 ++++++++++
- .../v2/internal/ossl/zossl_cgo_go124.go       |   45 +
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2390 +++++++++++++++++
- .../golang-fips/openssl/v2/mlkem.go           |  371 +++
- .../golang-fips/openssl/v2/openssl.go         |  253 ++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1486 ++++++++++
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2450 +++++++++++++++++
+ .../golang-fips/openssl/v2/mlkem.go           |  365 +++
+ .../golang-fips/openssl/v2/openssl.go         |  244 ++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
  .../golang-fips/openssl/v2/osslsetup/fips.go  |  165 ++
@@ -155,14 +153,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/osslsetup/osslsetup.go         |   74 +
  .../openssl/v2/osslsetup/osslsetup_cgo.go     |   11 +
  .../openssl/v2/osslsetup/osslsetup_nocgo.go   |   21 +
- .../golang-fips/openssl/v2/params.go          |  184 ++
+ .../golang-fips/openssl/v2/params.go          |  180 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
  .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
  .../openssl/v2/providersymcrypt.go            |  330 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
  .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  714 +++++
- .../golang-fips/openssl/v2/tls1prf.go         |  158 ++
+ .../github.com/golang-fips/openssl/v2/rsa.go  |  711 +++++
+ .../golang-fips/openssl/v2/tls1prf.go         |  156 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
@@ -172,10 +170,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/commoncrypto/zcommoncrypto.c     |   47 +
  .../internal/commoncrypto/zcommoncrypto.go    |   50 +
  .../internal/commoncrypto/zcommoncrypto.h     |   69 +
- .../internal/commoncrypto/zcommoncrypto.s     |   74 +
- .../commoncrypto/zcommoncrypto_cgo.go         |   60 +
- .../commoncrypto/zcommoncrypto_go124.go       |   11 +
- .../commoncrypto/zcommoncrypto_nocgo.go       |   89 +
+ .../internal/commoncrypto/zcommoncrypto.s     |   76 +
+ .../commoncrypto/zcommoncrypto_cgo.go         |   64 +
+ .../commoncrypto/zcommoncrypto_nocgo.go       |  102 +
  .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 176512 bytes
  .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 169880 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
@@ -184,10 +181,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/cryptokit/syscall_nocgo.go       |   15 +
  .../internal/cryptokit/zcryptokit.c           |  262 ++
  .../internal/cryptokit/zcryptokit.h           |   66 +
- .../internal/cryptokit/zcryptokit.s           |  332 +++
- .../internal/cryptokit/zcryptokit_cgo.go      |  220 ++
- .../cryptokit/zcryptokit_cgo_go124.go         |   78 +
- .../internal/cryptokit/zcryptokit_nocgo.go    |  351 +++
+ .../internal/cryptokit/zcryptokit.s           |  334 +++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  320 +++
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  364 +++
  .../cryptokit/zcryptokit_swift_amd64.go       |  283 ++
  .../cryptokit/zcryptokit_swift_arm64.go       |  282 ++
  .../internal/fakecgo/abi_amd64.h              |   99 +
@@ -207,7 +203,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/fakecgo/libcgo_darwin.go         |   26 +
  .../internal/fakecgo/setenv.go                |   19 +
  .../internal/fakecgo/trampolines_amd64.s      |  107 +
- .../internal/fakecgo/trampolines_arm64.s      |   84 +
+ .../internal/fakecgo/trampolines_arm64.s      |   81 +
  .../internal/fakecgo/zsymbols.go              |  165 ++
  .../internal/fakecgo/zsymbols_darwin.go       |   59 +
  .../internal/fakecgo/ztrampolines_darwin.s    |   19 +
@@ -218,21 +214,15 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/security/zsecurity.c             |  127 +
  .../internal/security/zsecurity.go            |   21 +
  .../internal/security/zsecurity.h             |   98 +
- .../internal/security/zsecurity.s             |  170 ++
- .../internal/security/zsecurity_cgo.go        |  368 +++
- .../internal/security/zsecurity_cgo_go124.go  |   14 +
- .../internal/security/zsecurity_go124.go      |   13 +
- .../internal/security/zsecurity_nocgo.go      |  453 ++++
+ .../internal/security/zsecurity.s             |  172 ++
+ .../internal/security/zsecurity_cgo.go        |  388 +++
+ .../internal/security/zsecurity_nocgo.go      |  466 ++++
  .../internal/xsyscall/asm_amd64.s             |  120 +
  .../internal/xsyscall/asm_arm64.s             |   97 +
- .../go-crypto-darwin/internal/xsyscall/dl.h   |   15 +
- .../internal/xsyscall/syscall_nocgo.go        |   88 +
- .../internal/xsyscall/syscall_nocgo_darwin.go |   25 +
+ .../internal/xsyscall/syscall_nocgo.go        |   72 +
+ .../internal/xsyscall/syscall_nocgo_darwin.go |   10 +
  .../internal/xsyscall/syscall_nocgo_others.go |   14 +
- .../internal/xsyscall/xsyscall.go             |    6 +
- .../go-crypto-darwin/internal/xsyscall/zdl.s  |   56 +
- .../internal/xsyscall/zdl_nocgo.go            |   48 +
- .../microsoft/go-crypto-darwin/xcrypto/aes.go |  152 ++
+ .../microsoft/go-crypto-darwin/xcrypto/aes.go |  152 +
  .../microsoft/go-crypto-darwin/xcrypto/big.go |   16 +
  .../xcrypto/chacha20poly1305.go               |   88 +
  .../go-crypto-darwin/xcrypto/cipher.go        |  114 +
@@ -243,9 +233,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
  .../microsoft/go-crypto-darwin/xcrypto/evp.go |  339 +++
  .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
- .../go-crypto-darwin/xcrypto/hash.go          |  335 +++
- .../go-crypto-darwin/xcrypto/hashclone.go     |   17 +
- .../xcrypto/hashclone_go125.go                |   12 +
+ .../go-crypto-darwin/xcrypto/hash.go          |  337 +++
  .../go-crypto-darwin/xcrypto/hkdf.go          |  103 +
  .../go-crypto-darwin/xcrypto/hmac.go          |  119 +
  .../go-crypto-darwin/xcrypto/mlkem.go         |  261 ++
@@ -264,9 +252,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
- .../microsoft/go-crypto-winnative/cng/hash.go |  342 +++
- .../go-crypto-winnative/cng/hashclone.go      |   18 +
- .../cng/hashclone_go125.go                    |   13 +
+ .../microsoft/go-crypto-winnative/cng/hash.go |  344 +++
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  133 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   70 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
@@ -283,7 +269,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 275 files changed, 34387 insertions(+), 7 deletions(-)
+ 261 files changed, 34032 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -325,14 +311,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/evp.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hash.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
@@ -363,6 +348,14 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
@@ -374,14 +367,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
@@ -410,7 +395,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
@@ -443,7 +427,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
@@ -455,7 +438,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
@@ -489,18 +471,12 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
@@ -513,8 +489,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
@@ -534,8 +508,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdh.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/ecdsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
- create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
@@ -2225,7 +2197,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..348650059a4497 100644
+index d6c515017a7009..17efde8b19a412 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2234,21 +2206,21 @@ index d6c515017a7009..348650059a4497 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974
++	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..55a77ae199a9af 100644
+index 2223d2a7c231c1..0f168e2048a2e2 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35 h1:SCC2CxzMO45+PyZ4wVN/pUqjjH6BSznbMuSDmIBoV6w=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35/go.mod h1:EtVnMfLGkB4pihGOH+tXEV0WlXxewWdT1n3GLJEHvpw=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3 h1:yV7XVN+idaUMe3FrnP72MJt6swY7inyE/a5lusmVuuA=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3/go.mod h1:MTii5PQwRlfUjYpGoF8CPLGwXSHTbLHGRN9FVNML5N0=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb h1:i7oTrN4NEokm433J/M8EfxiSm/W0feEPtLZ62YzePtQ=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb/go.mod h1:gD686525Li/blRSYwSzFJ6/LJQVFJp7Y0MKp+dmqFbc=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb h1:FMUkmY3tU9zypzAzwdQvFg1sKM4kXcUKz+GkR/X6Im8=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb/go.mod h1:E+yPtdllHdy5S8YLMfcIRcqjqQySyiexqxxaLK7+cQQ=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974 h1:HdIFLjjkXB3AJ7cXjVynU+69l96flEVAlOwonfXVFqM=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c h1:kHYNsP4g/LehejM+7p42t1ZQWlV/HJBwwjCE7SwFBKo=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
@@ -2713,10 +2685,10 @@ index 00000000000000..6461f241f863fc
 +type BigInt []uint
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
 new file mode 100644
-index 00000000000000..29f9ecc6e2f1fa
+index 00000000000000..789076408c515b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
-@@ -0,0 +1,149 @@
+@@ -0,0 +1,151 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2794,17 +2766,18 @@ index 00000000000000..29f9ecc6e2f1fa
 +	}
 +	if len(additionalData) > 0 {
 +		var discard int32
-+		if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, base(additionalData), int32(len(additionalData))); err != nil {
++		if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, additionalData); err != nil {
 +			panic(err)
 +		}
 +	}
 +	var outl int32
 +	if len(plaintext) > 0 {
-+		if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, base(plaintext), int32(len(plaintext))); err != nil {
++		if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, plaintext); err != nil {
 +			panic(err)
 +		}
 +	}
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &outl); err != nil {
++	var discard int32
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
 +		panic(err)
 +	}
 +	tag := out[len(out)-chacha20Poly1305Overhead:]
@@ -2850,17 +2823,18 @@ index 00000000000000..29f9ecc6e2f1fa
 +	}
 +	if len(additionalData) > 0 {
 +		var discard int32
-+		if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, base(additionalData), int32(len(additionalData))); err != nil {
++		if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, additionalData); err != nil {
 +			return nil, err
 +		}
 +	}
 +	var outl int32
 +	if len(ciphertext) > 0 {
-+		if _, err := ossl.EVP_DecryptUpdate(ctx, base(out), &outl, base(ciphertext), int32(len(ciphertext))); err != nil {
++		if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, ciphertext); err != nil {
 +			return nil, err
 +		}
 +	}
-+	if _, err := ossl.EVP_DecryptFinal_ex(ctx, base(out[outl:]), &outl); err != nil {
++	var discard int32
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
 +		return nil, errOpen
 +	}
 +	runtime.KeepAlive(c)
@@ -2868,10 +2842,10 @@ index 00000000000000..29f9ecc6e2f1fa
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..3bcd7538d95f05
+index 00000000000000..228b023453b3d3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,659 @@
+@@ -0,0 +1,662 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3059,7 +3033,7 @@ index 00000000000000..3bcd7538d95f05
 +	defer ossl.EVP_CIPHER_CTX_free(enc_ctx)
 +
 +	var outl int32
-+	if _, err := ossl.EVP_EncryptUpdate(enc_ctx, base(dst), &outl, base(src), int32(c.blockSize)); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(enc_ctx, dst[:c.blockSize], &outl, src[:c.blockSize]); err != nil {
 +		return err
 +	}
 +	runtime.KeepAlive(c)
@@ -3089,7 +3063,7 @@ index 00000000000000..3bcd7538d95f05
 +	}
 +
 +	var outl int32
-+	ossl.EVP_DecryptUpdate(dec_ctx, base(dst), &outl, base(src), int32(c.blockSize))
++	ossl.EVP_DecryptUpdate(dec_ctx, dst[:c.blockSize], &outl, src[:c.blockSize])
 +	runtime.KeepAlive(c)
 +	return nil
 +}
@@ -3117,7 +3091,7 @@ index 00000000000000..3bcd7538d95f05
 +	}
 +	if len(src) > 0 {
 +		var outl int32
-+		if _, err := ossl.EVP_CipherUpdate(x.ctx, base(dst), &outl, base(src), int32(len(src))); err != nil {
++		if _, err := ossl.EVP_CipherUpdate(x.ctx, dst, &outl, src); err != nil {
 +			panic("crypto/cipher: " + err.Error())
 +		}
 +		runtime.KeepAlive(x)
@@ -3161,7 +3135,7 @@ index 00000000000000..3bcd7538d95f05
 +		return
 +	}
 +	var outl int32
-+	if _, err := ossl.EVP_EncryptUpdate(x.ctx, base(dst), &outl, base(src), int32(len(src))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(x.ctx, dst, &outl, src); err != nil {
 +		panic("crypto/cipher: " + err.Error())
 +	}
 +	runtime.KeepAlive(x)
@@ -3341,16 +3315,17 @@ index 00000000000000..3bcd7538d95f05
 +		panic(err)
 +	}
 +	var outl, discard int32
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
 +		panic(err)
 +	}
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, baseNeverEmpty(plaintext), int32(len(plaintext))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
 +		panic(err)
 +	}
 +	if len(plaintext) != int(outl) {
 +		panic("cipher: incorrect length returned from GCM EncryptUpdate")
 +	}
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
++	discard = 0
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
 +		panic(err)
 +	}
 +	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
@@ -3392,16 +3367,17 @@ index 00000000000000..3bcd7538d95f05
 +		panic(err)
 +	}
 +	var outl, discard int32
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
 +		panic(err)
 +	}
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, base(out), &outl, baseNeverEmpty(plaintext), int32(len(plaintext))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
 +		panic(err)
 +	}
 +	if len(plaintext) != int(outl) {
 +		panic("cipher: incorrect length returned from GCM EncryptUpdate")
 +	}
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
++	discard = 0
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
 +		panic(err)
 +	}
 +	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
@@ -3456,16 +3432,17 @@ index 00000000000000..3bcd7538d95f05
 +		return nil, errOpen
 +	}
 +	var outl, discard int32
-+	if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, baseNeverEmpty(aad), int32(len(aad))); err != nil {
++	if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
 +		return nil, errOpen
 +	}
-+	if _, err := ossl.EVP_DecryptUpdate(ctx, base(out), &outl, baseNeverEmpty(ciphertext), int32(len(ciphertext))); err != nil {
++	if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, sliceNeverNil(ciphertext)); err != nil {
 +		return nil, errOpen
 +	}
 +	if len(ciphertext) != int(outl) {
 +		return nil, errOpen
 +	}
-+	if _, err := ossl.EVP_DecryptFinal_ex(ctx, base(out[outl:]), &discard); err != nil {
++	discard = 0
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
 +		return nil, errOpen
 +	}
 +	runtime.KeepAlive(g)
@@ -3630,7 +3607,7 @@ index 00000000000000..e4f8f5b5d0c4a7
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
 new file mode 100644
-index 00000000000000..9ae41b4f5990b8
+index 00000000000000..c9fd5e5ad8d25c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
 @@ -0,0 +1,253 @@
@@ -3666,7 +3643,7 @@ index 00000000000000..9ae41b4f5990b8
 +	if _, err := ossl.EVP_DigestUpdate(ctx, data); err != nil {
 +		panic(err)
 +	}
-+	if _, err := ossl.EVP_DigestFinalXOF(ctx, out, len(out)); err != nil {
++	if _, err := ossl.EVP_DigestFinalXOF(ctx, out); err != nil {
 +		panic(err)
 +	}
 +}
@@ -4007,10 +3984,10 @@ index 00000000000000..772800a73e3389
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..24ba60258c3b23
+index 00000000000000..63e2e63851fc7b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,308 @@
+@@ -0,0 +1,305 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4259,10 +4236,7 @@ index 00000000000000..24ba60258c3b23
 +func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +
 +	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_P, params.P, false)
@@ -4321,7 +4295,7 @@ index 00000000000000..24ba60258c3b23
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..ad74a4b2038e59
+index 00000000000000..ea9587b5678add
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 @@ -0,0 +1,136 @@
@@ -4413,13 +4387,13 @@ index 00000000000000..ad74a4b2038e59
 +// encodeEcPoint encodes pt.
 +func encodeEcPoint(group ossl.EC_GROUP_PTR, pt ossl.EC_POINT_PTR) ([]byte, error) {
 +	// Get encoded point size.
-+	n, err := ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, nil, 0, nil)
++	n, err := ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, nil, nil)
 +	if err != nil {
 +		return nil, err
 +	}
 +	// Encode point into bytes.
 +	bytes := make([]byte, n)
-+	if _, err = ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, base(bytes), n, nil); err != nil {
++	if _, err = ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, bytes, nil); err != nil {
 +		return nil, err
 +	}
 +	return bytes, nil
@@ -4442,7 +4416,7 @@ index 00000000000000..ad74a4b2038e59
 +
 +func extractPKEYRawPublic(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
 +	keylen := len(pub)
-+	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, base(pub), &keylen); err != nil {
++	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, pub, &keylen); err != nil {
 +		return err
 +	}
 +	if keylen != len(pub) {
@@ -4453,7 +4427,7 @@ index 00000000000000..ad74a4b2038e59
 +
 +func extractPKEYRawPrivate(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
 +	keylen := len(pub)
-+	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(pub), &keylen); err != nil {
++	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, pub, &keylen); err != nil {
 +		return err
 +	}
 +	if keylen != len(pub) {
@@ -4463,10 +4437,10 @@ index 00000000000000..ad74a4b2038e59
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..303ce47cab30a5
+index 00000000000000..65f669a6f77156
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,343 @@
+@@ -0,0 +1,340 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4600,9 +4574,9 @@ index 00000000000000..303ce47cab30a5
 +func newECDHPkey(curve string, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
 +	if curve == "X25519" {
 +		if isPrivate {
-+			return ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_X25519, nil, base(bytes), len(bytes))
++			return ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_X25519, nil, bytes)
 +		} else {
-+			return ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_X25519, nil, base(bytes), len(bytes))
++			return ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_X25519, nil, bytes)
 +		}
 +	}
 +	nid := curveNID(curve)
@@ -4630,7 +4604,7 @@ index 00000000000000..303ce47cab30a5
 +	}()
 +	group := ossl.EC_KEY_get0_group(key)
 +	if isPrivate {
-+		priv, err := ossl.BN_bin2bn(base(bytes), int32(len(bytes)), nil)
++		priv, err := ossl.BN_bin2bn(bytes, nil)
 +		if err != nil {
 +			return nil, err
 +		}
@@ -4652,7 +4626,7 @@ index 00000000000000..303ce47cab30a5
 +			return nil, err
 +		}
 +		defer ossl.EC_POINT_free(pub)
-+		if _, err := ossl.EC_POINT_oct2point(group, pub, base(bytes), len(bytes), nil); err != nil {
++		if _, err := ossl.EC_POINT_oct2point(group, pub, bytes, nil); err != nil {
 +			return nil, err
 +		}
 +		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
@@ -4673,15 +4647,12 @@ index 00000000000000..303ce47cab30a5
 +func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
 +	checkMajorVersion(3)
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
 +	var selection int32
 +	if isPrivate {
-+		priv, err := ossl.BN_bin2bn(base(bytes), int32(len(bytes)), nil)
++		priv, err := ossl.BN_bin2bn(bytes, nil)
 +		if err != nil {
 +			return nil, err
 +		}
@@ -4751,7 +4722,7 @@ index 00000000000000..303ce47cab30a5
 +		return nil, err
 +	}
 +	out := make([]byte, keylen)
-+	if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++	if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
 +		return nil, err
 +	}
 +	return out, nil
@@ -4772,7 +4743,7 @@ index 00000000000000..303ce47cab30a5
 +	if curve == "X25519" {
 +		bytes = make([]byte, privateKeySizeX25519)
 +		keylen := len(bytes)
-+		if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, base(bytes), &keylen); err != nil {
++		if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, bytes, &keylen); err != nil {
 +			return nil, nil, err
 +		}
 +	} else {
@@ -4812,10 +4783,10 @@ index 00000000000000..303ce47cab30a5
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..d0c29b5b821f92
+index 00000000000000..3157d02967aeb2
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,222 @@
+@@ -0,0 +1,219 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5017,10 +4988,7 @@ index 00000000000000..d0c29b5b821f92
 +		return nil, err
 +	}
 +	// Construct the parameters.
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
 +	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
@@ -5040,7 +5008,7 @@ index 00000000000000..d0c29b5b821f92
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..8377d7495e0731
+index 00000000000000..dc0060972d3e2a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 @@ -0,0 +1,210 @@
@@ -5175,7 +5143,7 @@ index 00000000000000..8377d7495e0731
 +	if len(pub) != publicKeySizeEd25519 {
 +		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
 +	}
-+	pkey, err := ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_ED25519, nil, base(pub), len(pub))
++	pkey, err := ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_ED25519, nil, pub)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -5191,7 +5159,7 @@ index 00000000000000..8377d7495e0731
 +	if len(seed) != seedSizeEd25519 {
 +		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
 +	}
-+	pkey, err := ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_ED25519, nil, base(seed), len(seed))
++	pkey, err := ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_ED25519, nil, seed)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -5229,7 +5197,7 @@ index 00000000000000..8377d7495e0731
 +		return err
 +	}
 +	siglen := signatureSizeEd25519
-+	if _, err := ossl.EVP_DigestSign(ctx, base(sig), &siglen, base(message), len(message)); err != nil {
++	if _, err := ossl.EVP_DigestSign(ctx, sig, &siglen, message); err != nil {
 +		return err
 +	}
 +	if siglen != signatureSizeEd25519 {
@@ -5249,14 +5217,14 @@ index 00000000000000..8377d7495e0731
 +	if _, err := ossl.EVP_DigestVerifyInit(ctx, nil, nil, nil, pub._pkey); err != nil {
 +		return err
 +	}
-+	if _, err := ossl.EVP_DigestVerify(ctx, base(sig), len(sig), base(message), len(message)); err != nil {
++	if _, err := ossl.EVP_DigestVerify(ctx, sig, message); err != nil {
 +		return errors.New("ed25519: invalid signature")
 +	}
 +	return nil
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..4c70cd75a1a553
+index 00000000000000..5d7ddbbf02cfe1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 @@ -0,0 +1,620 @@
@@ -5535,8 +5503,8 @@ index 00000000000000..4c70cd75a1a553
 +
 +type withKeyFunc func(func(ossl.EVP_PKEY_PTR) error) error
 +type initFunc func(ossl.EVP_PKEY_CTX_PTR) error
-+type cryptFunc func(ossl.EVP_PKEY_CTX_PTR, *byte, *int, *byte, int) error
-+type verifyFunc func(ossl.EVP_PKEY_CTX_PTR, *byte, int, *byte, int) error
++type cryptFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, *int, []byte) error
++type verifyFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, []byte) error
 +
 +func setupEVP(withKey withKeyFunc, padding int32,
 +	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
@@ -5652,7 +5620,7 @@ index 00000000000000..4c70cd75a1a553
 +		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
 +		var err error
 +		if major() == 3 {
-+			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Pointer(clabel), int32(len(label)))
++			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
 +		} else {
 +			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
 +		}
@@ -5682,7 +5650,7 @@ index 00000000000000..4c70cd75a1a553
 +	}
 +	outLen := int(pkeySize)
 +	out := make([]byte, pkeySize)
-+	if err := crypt(ctx, base(out), &outLen, base(in), len(in)); err != nil {
++	if err := crypt(ctx, out, &outLen, in); err != nil {
 +		return nil, err
 +	}
 +	// The size returned by EVP_PKEY_get_size() is only preliminary and not exact,
@@ -5700,7 +5668,7 @@ index 00000000000000..4c70cd75a1a553
 +		return err
 +	}
 +	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	return verify(ctx, base(sig), len(sig), base(in), len(in))
++	return verify(ctx, sig, in)
 +}
 +
 +func evpEncrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
@@ -5708,8 +5676,8 @@ index 00000000000000..4c70cd75a1a553
 +		_, err := ossl.EVP_PKEY_encrypt_init(ctx)
 +		return err
 +	}
-+	encrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
-+		if _, err := ossl.EVP_PKEY_encrypt(ctx, out, outLen, in, inLen); err != nil {
++	encrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		if _, err := ossl.EVP_PKEY_encrypt(ctx, out, outLen, in); err != nil {
 +			return err
 +		}
 +		return nil
@@ -5722,8 +5690,8 @@ index 00000000000000..4c70cd75a1a553
 +		_, err := ossl.EVP_PKEY_decrypt_init(ctx)
 +		return err
 +	}
-+	decrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
-+		_, err := ossl.EVP_PKEY_decrypt(ctx, out, outLen, in, inLen)
++	decrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		_, err := ossl.EVP_PKEY_decrypt(ctx, out, outLen, in)
 +		return err
 +	}
 +	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, decryptInit, decrypt, msg)
@@ -5734,8 +5702,8 @@ index 00000000000000..4c70cd75a1a553
 +		_, err := ossl.EVP_PKEY_sign_init(ctx)
 +		return err
 +	}
-+	sign := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen *int, in *byte, inLen int) error {
-+		_, err := ossl.EVP_PKEY_sign(ctx, out, outLen, in, inLen)
++	sign := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		_, err := ossl.EVP_PKEY_sign(ctx, out, outLen, in)
 +		return err
 +	}
 +	return cryptEVP(withKey, padding, nil, nil, nil, saltLen, h, signtInit, sign, hashed)
@@ -5746,8 +5714,8 @@ index 00000000000000..4c70cd75a1a553
 +		_, err := ossl.EVP_PKEY_verify_init(ctx)
 +		return err
 +	}
-+	verify := func(ctx ossl.EVP_PKEY_CTX_PTR, out *byte, outLen int, in *byte, inLen int) error {
-+		_, err := ossl.EVP_PKEY_verify(ctx, out, outLen, in, inLen)
++	verify := func(ctx ossl.EVP_PKEY_CTX_PTR, sig []byte, in []byte) error {
++		_, err := ossl.EVP_PKEY_verify(ctx, sig, in)
 +		return err
 +	}
 +	return verifyEVP(withKey, padding, nil, nil, saltLen, h, verifyInit, verify, sig, hashed)
@@ -5782,7 +5750,7 @@ index 00000000000000..4c70cd75a1a553
 +	}
 +	out = make([]byte, outLen)
 +	// Obtain the signature
-+	if _, err := ossl.EVP_DigestSignFinal(ctx, base(out), &outLen); err != nil {
++	if _, err := ossl.EVP_DigestSignFinal(ctx, out, &outLen); err != nil {
 +		return nil, err
 +	}
 +	return out[:outLen], nil
@@ -5809,7 +5777,7 @@ index 00000000000000..4c70cd75a1a553
 +			return err
 +		}
 +	}
-+	if _, err := ossl.EVP_DigestVerifyFinal(ctx, base(sig), len(sig)); err != nil {
++	if _, err := ossl.EVP_DigestVerifyFinal(ctx, sig); err != nil {
 +		return err
 +	}
 +	return nil
@@ -5882,10 +5850,10 @@ index 00000000000000..4c70cd75a1a553
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
 new file mode 100644
-index 00000000000000..a48a303bdc8147
+index 00000000000000..d9c2c6c5f989e0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,518 @@
+@@ -0,0 +1,520 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5921,6 +5889,8 @@ index 00000000000000..a48a303bdc8147
 +// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
 +const maxHashSize = 64
 +
++type HashCloner = hash.Cloner
++
 +func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
 +	_, err := ossl.EVP_Digest(p, sum, nil, loadHash(ch, true).md, nil)
 +	return err == nil
@@ -6404,47 +6374,12 @@ index 00000000000000..a48a303bdc8147
 +	x := uint32(b[3]) | uint32(b[2])<<8 | uint32(b[1])<<16 | uint32(b[0])<<24
 +	return b[4:], x
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
-new file mode 100644
-index 00000000000000..423668c6acf239
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hashclone.go
-@@ -0,0 +1,14 @@
-+//go:build !go1.25 && !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"hash"
-+)
-+
-+// HashCloner is an interface that defines a Clone method.
-+type HashCloner interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() (HashCloner, error)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go b/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
-new file mode 100644
-index 00000000000000..f1f2364c7246d4
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hashclone_go125.go
-@@ -0,0 +1,9 @@
-+//go:build go1.25 && !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"hash"
-+)
-+
-+type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..7e059d023ef00b
+index 00000000000000..610703a870c21a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,455 @@
+@@ -0,0 +1,451 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -6561,7 +6496,7 @@ index 00000000000000..7e059d023ef00b
 +	}
 +	c.buf = append(c.buf, make([]byte, needLen)...)
 +	outLen := prevLen + needLen
-+	if _, err := ossl.EVP_PKEY_derive(c.ctx, base(c.buf), &outLen); err != nil {
++	if _, err := ossl.EVP_PKEY_derive(c.ctx, c.buf, &outLen); err != nil {
 +		return 0, err
 +	}
 +	n := copy(p, c.buf[prevLen:outLen])
@@ -6612,7 +6547,7 @@ index 00000000000000..7e059d023ef00b
 +			return nil, err
 +		}
 +		out := make([]byte, keylen)
-+		if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
 +			return nil, err
 +		}
 +		return out[:keylen], nil
@@ -6627,7 +6562,7 @@ index 00000000000000..7e059d023ef00b
 +			return nil, err
 +		}
 +		out := make([]byte, size)
-+		if _, err := ossl.EVP_KDF_derive(ctx, base(out), len(out), nil); err != nil {
++		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
 +			return nil, err
 +		}
 +		return out, nil
@@ -6662,7 +6597,7 @@ index 00000000000000..7e059d023ef00b
 +			return out, nil
 +		}
 +		keylen := keyLength
-+		if _, err := ossl.EVP_PKEY_derive(ctx, base(out), &keylen); err != nil {
++		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
 +			return nil, err
 +		}
 +	case 3:
@@ -6677,7 +6612,7 @@ index 00000000000000..7e059d023ef00b
 +			// We can only exit after calling newHKDFCtx3 because we still need it to validate the parameters.
 +			return out, nil
 +		}
-+		if _, err := ossl.EVP_KDF_derive(ctx, base(out), keyLength, nil); err != nil {
++		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
 +			return nil, err
 +		}
 +	default:
@@ -6705,7 +6640,7 @@ index 00000000000000..7e059d023ef00b
 +		return nil, err
 +	}
 +	defer ossl.EVP_KDF_CTX_free(ctx)
-+	if _, err := ossl.EVP_KDF_derive(ctx, base(out), keyLength, nil); err != nil {
++	if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
 +		return nil, err
 +	}
 +	return out, nil
@@ -6790,10 +6725,8 @@ index 00000000000000..7e059d023ef00b
 +		}
 +	}()
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return ctx, err
-+	}
++	bld := newParamBuilder()
++	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY))
 +	bld.addOctetString(_OSSL_KDF_PARAM_PREFIX, []byte("tls13 "))
@@ -6846,10 +6779,8 @@ index 00000000000000..7e059d023ef00b
 +		}
 +	}()
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return ctx, err
-+	}
++	bld := newParamBuilder()
++	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
 +	if len(secret) > 0 {
@@ -6894,7 +6825,7 @@ index 00000000000000..7e059d023ef00b
 +	}
 +	c.buf = append(c.buf, make([]byte, needLen)...)
 +	outLen := prevLen + needLen
-+	if _, err := ossl.EVP_KDF_derive(c.ctx, base(c.buf), outLen, nil); err != nil {
++	if _, err := ossl.EVP_KDF_derive(c.ctx, c.buf[:outLen], nil); err != nil {
 +		return 0, err
 +	}
 +	n := copy(p, c.buf[prevLen:outLen])
@@ -6902,10 +6833,10 @@ index 00000000000000..7e059d023ef00b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..14ffe51d6fefce
+index 00000000000000..fec80f30b1c94f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,282 @@
+@@ -0,0 +1,278 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -6915,7 +6846,6 @@ index 00000000000000..14ffe51d6fefce
 +	"runtime"
 +	"slices"
 +	"sync"
-+	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
@@ -6989,7 +6919,7 @@ index 00000000000000..14ffe51d6fefce
 +	if err != nil {
 +		panic(err)
 +	}
-+	if _, err := ossl.HMAC_Init_ex(ctx, unsafe.Pointer(&key[0]), int32(len(key)), md, nil); err != nil {
++	if _, err := ossl.HMAC_Init_ex(ctx, key, md, nil); err != nil {
 +		panic(err)
 +	}
 +	return hmacCtx1{ctx}
@@ -7005,10 +6935,7 @@ index 00000000000000..14ffe51d6fefce
 +})
 +
 +func buildHMAC3Params(md ossl.EVP_MD_PTR) (ossl.OSSL_PARAM_PTR, error) {
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	return bld.build()
@@ -7056,7 +6983,7 @@ index 00000000000000..14ffe51d6fefce
 +		panic(err)
 +	}
 +
-+	if _, err := ossl.EVP_MAC_init(ctx, base(key), len(key), params); err != nil {
++	if _, err := ossl.EVP_MAC_init(ctx, key, params); err != nil {
 +		ossl.EVP_MAC_CTX_free(ctx)
 +		panic(err)
 +	}
@@ -7076,11 +7003,11 @@ index 00000000000000..14ffe51d6fefce
 +func (h *opensslHMAC) Reset() {
 +	switch major() {
 +	case 1:
-+		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, 0, nil, nil); err != nil {
++		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, nil, nil); err != nil {
 +			panic(err)
 +		}
 +	case 3:
-+		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, base(h.ctx3.key), len(h.ctx3.key), nil); err != nil {
++		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, h.ctx3.key, nil); err != nil {
 +			panic(err)
 +		}
 +	default:
@@ -7103,9 +7030,9 @@ index 00000000000000..14ffe51d6fefce
 +	if len(p) > 0 {
 +		switch major() {
 +		case 1:
-+			ossl.HMAC_Update(h.ctx1.ctx, base(p), len(p))
++			ossl.HMAC_Update(h.ctx1.ctx, p)
 +		case 3:
-+			ossl.EVP_MAC_update(h.ctx3.ctx, base(p), len(p))
++			ossl.EVP_MAC_update(h.ctx3.ctx, p)
 +		default:
 +			panic(errUnsupportedVersion())
 +		}
@@ -7137,14 +7064,14 @@ index 00000000000000..14ffe51d6fefce
 +		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
 +			panic(err)
 +		}
-+		ossl.HMAC_Final(ctx2, base(h.sum[:h.size]), nil)
++		ossl.HMAC_Final(ctx2, h.sum[:h.size], nil)
 +	case 3:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
 +		}
 +		defer ossl.EVP_MAC_CTX_free(ctx2)
-+		ossl.EVP_MAC_final(ctx2, base(h.sum[:h.size]), nil, len(h.sum))
++		ossl.EVP_MAC_final(ctx2, h.sum[:h.size], nil)
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -7605,6 +7532,84 @@ index 00000000000000..245a5266f6e9fa
 +	MOVD	R0, LR                                                \
 +	MOVD	8(R1), R0                                             \
 +	MOVW	R0, CR
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
+new file mode 100644
+index 00000000000000..b9322e0c53e2ac
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
+@@ -0,0 +1,72 @@
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_GPR(offset) saves X8, X9, X18-X27 to the stack space
++// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
++//
++// SAVE_FPR(offset) saves F8, F9, F18-F27 to the stack space
++// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
++//
++// Note: g is X27
++
++#define SAVE_GPR(offset) \
++	MOV X8, ((offset)+0*8)(X2)   \
++	MOV X9, ((offset)+1*8)(X2)   \
++	MOV X18, ((offset)+2*8)(X2)  \
++	MOV X19, ((offset)+3*8)(X2)  \
++	MOV X20, ((offset)+4*8)(X2)  \
++	MOV X21, ((offset)+5*8)(X2)  \
++	MOV X22, ((offset)+6*8)(X2)  \
++	MOV X23, ((offset)+7*8)(X2)  \
++	MOV X24, ((offset)+8*8)(X2)  \
++	MOV X25, ((offset)+9*8)(X2)  \
++	MOV X26, ((offset)+10*8)(X2) \
++	MOV g, ((offset)+11*8)(X2)
++
++#define RESTORE_GPR(offset) \
++	MOV ((offset)+0*8)(X2), X8   \
++	MOV ((offset)+1*8)(X2), X9   \
++	MOV ((offset)+2*8)(X2), X18  \
++	MOV ((offset)+3*8)(X2), X19  \
++	MOV ((offset)+4*8)(X2), X20  \
++	MOV ((offset)+5*8)(X2), X21  \
++	MOV ((offset)+6*8)(X2), X22  \
++	MOV ((offset)+7*8)(X2), X23  \
++	MOV ((offset)+8*8)(X2), X24  \
++	MOV ((offset)+9*8)(X2), X25  \
++	MOV ((offset)+10*8)(X2), X26 \
++	MOV ((offset)+11*8)(X2), g
++
++#define SAVE_FPR(offset) \
++	MOVD F8, ((offset)+0*8)(X2)   \
++	MOVD F9, ((offset)+1*8)(X2)   \
++	MOVD F18, ((offset)+2*8)(X2)  \
++	MOVD F19, ((offset)+3*8)(X2)  \
++	MOVD F20, ((offset)+4*8)(X2)  \
++	MOVD F21, ((offset)+5*8)(X2)  \
++	MOVD F22, ((offset)+6*8)(X2)  \
++	MOVD F23, ((offset)+7*8)(X2)  \
++	MOVD F24, ((offset)+8*8)(X2)  \
++	MOVD F25, ((offset)+9*8)(X2)  \
++	MOVD F26, ((offset)+10*8)(X2) \
++	MOVD F27, ((offset)+11*8)(X2)
++
++#define RESTORE_FPR(offset) \
++	MOVD ((offset)+0*8)(X2), F8   \
++	MOVD ((offset)+1*8)(X2), F9   \
++	MOVD ((offset)+2*8)(X2), F18  \
++	MOVD ((offset)+3*8)(X2), F19  \
++	MOVD ((offset)+4*8)(X2), F20  \
++	MOVD ((offset)+5*8)(X2), F21  \
++	MOVD ((offset)+6*8)(X2), F22  \
++	MOVD ((offset)+7*8)(X2), F23  \
++	MOVD ((offset)+8*8)(X2), F24  \
++	MOVD ((offset)+9*8)(X2), F25  \
++	MOVD ((offset)+10*8)(X2), F26 \
++	MOVD ((offset)+11*8)(X2), F27
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
 new file mode 100644
 index 00000000000000..7475ec8a0b21fc
@@ -7921,15 +7926,16 @@ index 00000000000000..6d1938cd8d8bcd
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
 new file mode 100644
-index 00000000000000..acf82c1b5ae501
+index 00000000000000..d34699e5a84d2a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
-@@ -0,0 +1,78 @@
+@@ -0,0 +1,37 @@
 +// Copyright 2020 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
 +
 +#include "textflag.h"
++#include "abi_riscv64.h"
 +
 +// Called by C code generated by cmd/cgo.
 +// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
@@ -7941,66 +7947,24 @@ index 00000000000000..acf82c1b5ae501
 + * registers. Note that at procedure entry the first argument is at
 + * 8(X2).
 + */
-+	ADD  $(-8*29), X2
-+	MOV  X10, (8*1)(X2)  // fn unsafe.Pointer
-+	MOV  X11, (8*2)(X2)  // a unsafe.Pointer
-+	MOV  X13, (8*3)(X2)  // ctxt uintptr
-+	MOV  X8, (8*4)(X2)
-+	MOV  X9, (8*5)(X2)
-+	MOV  X18, (8*6)(X2)
-+	MOV  X19, (8*7)(X2)
-+	MOV  X20, (8*8)(X2)
-+	MOV  X21, (8*9)(X2)
-+	MOV  X22, (8*10)(X2)
-+	MOV  X23, (8*11)(X2)
-+	MOV  X24, (8*12)(X2)
-+	MOV  X25, (8*13)(X2)
-+	MOV  X26, (8*14)(X2)
-+	MOV  g, (8*15)(X2)
-+	MOV  X1, (8*16)(X2)
-+	MOVD F8, (8*17)(X2)
-+	MOVD F9, (8*18)(X2)
-+	MOVD F18, (8*19)(X2)
-+	MOVD F19, (8*20)(X2)
-+	MOVD F20, (8*21)(X2)
-+	MOVD F21, (8*22)(X2)
-+	MOVD F22, (8*23)(X2)
-+	MOVD F23, (8*24)(X2)
-+	MOVD F24, (8*25)(X2)
-+	MOVD F25, (8*26)(X2)
-+	MOVD F26, (8*27)(X2)
-+	MOVD F27, (8*28)(X2)
++	ADD $(-8*29), X2
++	MOV X10, (8*1)(X2) // fn unsafe.Pointer
++	MOV X11, (8*2)(X2) // a unsafe.Pointer
++	MOV X13, (8*3)(X2) // ctxt uintptr
++
++	SAVE_GPR((8*4))
++	MOV X1, (8*16)(X2)
++	SAVE_FPR((8*17))
 +
 +	// Initialize Go ABI environment
 +	CALL runtime·load_g(SB)
 +	CALL runtime·cgocallback(SB)
 +
-+	MOV  (8*4)(X2), X8
-+	MOV  (8*5)(X2), X9
-+	MOV  (8*6)(X2), X18
-+	MOV  (8*7)(X2), X19
-+	MOV  (8*8)(X2), X20
-+	MOV  (8*9)(X2), X21
-+	MOV  (8*10)(X2), X22
-+	MOV  (8*11)(X2), X23
-+	MOV  (8*12)(X2), X24
-+	MOV  (8*13)(X2), X25
-+	MOV  (8*14)(X2), X26
-+	MOV  (8*15)(X2), g
-+	MOV  (8*16)(X2), X1
-+	MOVD (8*17)(X2), F8
-+	MOVD (8*18)(X2), F9
-+	MOVD (8*19)(X2), F18
-+	MOVD (8*20)(X2), F19
-+	MOVD (8*21)(X2), F20
-+	MOVD (8*22)(X2), F21
-+	MOVD (8*23)(X2), F22
-+	MOVD (8*24)(X2), F23
-+	MOVD (8*25)(X2), F24
-+	MOVD (8*26)(X2), F25
-+	MOVD (8*27)(X2), F26
-+	MOVD (8*28)(X2), F27
-+	ADD  $(8*29), X2
++	RESTORE_GPR((8*4))
++	MOV (8*16)(X2), X1
++	RESTORE_FPR((8*17))
++
++	ADD $(8*29), X2
 +
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
@@ -8165,10 +8129,10 @@ index 00000000000000..f29e690cc15b3a
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
 new file mode 100644
-index 00000000000000..0ff5482714439b
+index 00000000000000..58b95e1f4157f2
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
-@@ -0,0 +1,29 @@
+@@ -0,0 +1,14 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
 +
@@ -8176,36 +8140,21 @@ index 00000000000000..0ff5482714439b
 +
 +package fakecgo
 +
-+import (
-+	"unsafe"
-+)
++import _ "unsafe"
 +
 +// setg_trampoline calls setg with the G provided
 +func setg_trampoline(setg uintptr, G uintptr)
 +
 +// call5 takes fn the C function and 5 arguments and calls the function with those arguments
 +func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
-+
-+// argset matches runtime/cgocall.go:argset.
-+type argset struct {
-+	args   *uintptr
-+	retval uintptr
-+}
-+
-+//go:nosplit
-+//go:norace
-+func (a *argset) arg(i int) unsafe.Pointer {
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
-+}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 new file mode 100644
-index 00000000000000..4e9bbeb5c4f3e3
+index 00000000000000..9b0650d53777bd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
 @@ -0,0 +1,3 @@
 +{
-+  "commit_hash": "585a4c527464bb6ef91b22aef08d55219c8fab09"
++  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
 new file mode 100644
@@ -8345,10 +8294,10 @@ index 00000000000000..d0868f0f790351
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
 new file mode 100644
-index 00000000000000..a3ba6bc8228757
+index 00000000000000..55ff71e2672086
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
-@@ -0,0 +1,100 @@
+@@ -0,0 +1,79 @@
 +// Copyright 2011 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -8418,36 +8367,15 @@ index 00000000000000..a3ba6bc8228757
 +//go:nosplit
 +func x_cgo_init(g *G, setg uintptr) {
 +	var size size_t
-+	var attr *pthread_attr_t
-+
-+	/* The memory sanitizer distributed with versions of clang
-+	   before 3.8 has a bug: if you call mmap before malloc, mmap
-+	   may return an address that is later overwritten by the msan
-+	   library.  Avoid this problem by forcing a call to malloc
-+	   here, before we ever call malloc.
-+
-+	   This is only required for the memory sanitizer, so it's
-+	   unfortunate that we always run it.  It should be possible
-+	   to remove this when we no longer care about versions of
-+	   clang before 3.8.  The test for this is
-+	   misc/cgo/testsanitizers.
-+
-+	   GCC works hard to eliminate a seemingly unnecessary call to
-+	   malloc, so we actually use the memory we allocate.  */
++	var attr pthread_attr_t
 +
 +	setg_func = setg
-+	attr = (*pthread_attr_t)(malloc(unsafe.Sizeof(*attr)))
-+	if attr == nil {
-+		println("fakecgo: malloc failed")
-+		abort()
-+	}
-+	pthread_attr_init(attr)
-+	pthread_attr_getstacksize(attr, &size)
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
 +	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
 +	// but this should be OK since we are taking the address of the first variable in this function.
 +	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
-+	pthread_attr_destroy(attr)
-+	free(unsafe.Pointer(attr))
++	pthread_attr_destroy(&attr)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
 new file mode 100644
@@ -8529,10 +8457,10 @@ index 00000000000000..e5a66f39d4f3f5
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
 new file mode 100644
-index 00000000000000..9f380c1b431807
+index 00000000000000..089d9fe489407b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
-@@ -0,0 +1,100 @@
+@@ -0,0 +1,79 @@
 +// Copyright 2011 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -8602,36 +8530,15 @@ index 00000000000000..9f380c1b431807
 +//go:nosplit
 +func x_cgo_init(g *G, setg uintptr) {
 +	var size size_t
-+	var attr *pthread_attr_t
-+
-+	/* The memory sanitizer distributed with versions of clang
-+	   before 3.8 has a bug: if you call mmap before malloc, mmap
-+	   may return an address that is later overwritten by the msan
-+	   library.  Avoid this problem by forcing a call to malloc
-+	   here, before we ever call malloc.
-+
-+	   This is only required for the memory sanitizer, so it's
-+	   unfortunate that we always run it.  It should be possible
-+	   to remove this when we no longer care about versions of
-+	   clang before 3.8.  The test for this is
-+	   misc/cgo/testsanitizers.
-+
-+	   GCC works hard to eliminate a seemingly unnecessary call to
-+	   malloc, so we actually use the memory we allocate.  */
++	var attr pthread_attr_t
 +
 +	setg_func = setg
-+	attr = (*pthread_attr_t)(malloc(unsafe.Sizeof(*attr)))
-+	if attr == nil {
-+		println("fakecgo: malloc failed")
-+		abort()
-+	}
-+	pthread_attr_init(attr)
-+	pthread_attr_getstacksize(attr, &size)
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
 +	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
 +	// but this should be OK since we are taking the address of the first variable in this function.
 +	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
-+	pthread_attr_destroy(attr)
-+	free(unsafe.Pointer(attr))
++	pthread_attr_destroy(&attr)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
 new file mode 100644
@@ -8857,12 +8764,13 @@ index 00000000000000..b08a44a1001bc0
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
 new file mode 100644
-index 00000000000000..42c2b7d0b8176f
+index 00000000000000..f98e272e42720e
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
-@@ -0,0 +1,34 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
+@@ -0,0 +1,184 @@
++// Copyright 2016 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
 +
 +//go:build !cgo && linux
 +
@@ -8870,6 +8778,18 @@ index 00000000000000..42c2b7d0b8176f
 +
 +import "unsafe"
 +
++// argset matches runtime/cgocall.go:argset.
++type argset struct {
++	args   *uintptr
++	retval uintptr
++}
++
++//go:nosplit
++//go:norace
++func (a *argset) arg(i int) unsafe.Pointer {
++	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
++
 +//go:linkname _cgo_libc_setegid syscall.cgo_libc_setegid
 +//go:linkname _cgo_libc_seteuid syscall.cgo_libc_seteuid
 +//go:linkname _cgo_libc_setgid syscall.cgo_libc_setgid
@@ -8890,11 +8810,148 @@ index 00000000000000..42c2b7d0b8176f
 +var _cgo_libc_setuid = &_cgo_purego_setuid_trampoline
 +var _cgo_libc_setgroups = &_cgo_purego_setgroups_trampoline
 +
++//go:nosplit
++//go:norace
 +func errno() int32 {
 +	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
 +	loc := __errno_location()
 +	return **(**int32)(unsafe.Pointer(&loc))
 +}
++
++//go:linkname _cgo_purego_setegid_trampoline _cgo_purego_setegid_trampoline
++var _cgo_purego_setegid_trampoline byte
++var x_cgo_purego_setegid_call = x_cgo_purego_setegid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setegid(c *argset) {
++	ret := setegid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_seteuid_trampoline _cgo_purego_seteuid_trampoline
++var _cgo_purego_seteuid_trampoline byte
++var x_cgo_purego_seteuid_call = x_cgo_purego_seteuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_seteuid(c *argset) {
++	ret := seteuid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setgid_trampoline _cgo_purego_setgid_trampoline
++var _cgo_purego_setgid_trampoline byte
++var x_cgo_purego_setgid_call = x_cgo_purego_setgid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgid(c *argset) {
++	ret := setgid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setregid_trampoline _cgo_purego_setregid_trampoline
++var _cgo_purego_setregid_trampoline byte
++var x_cgo_purego_setregid_call = x_cgo_purego_setregid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setregid(c *argset) {
++	ret := setregid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setresgid_trampoline _cgo_purego_setresgid_trampoline
++var _cgo_purego_setresgid_trampoline byte
++var x_cgo_purego_setresgid_call = x_cgo_purego_setresgid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresgid(c *argset) {
++	ret := setresgid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setresuid_trampoline _cgo_purego_setresuid_trampoline
++var _cgo_purego_setresuid_trampoline byte
++var x_cgo_purego_setresuid_call = x_cgo_purego_setresuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresuid(c *argset) {
++	ret := setresuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setreuid_trampoline _cgo_purego_setreuid_trampoline
++var _cgo_purego_setreuid_trampoline byte
++var x_cgo_purego_setreuid_call = x_cgo_purego_setreuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setreuid(c *argset) {
++	ret := setreuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setuid_trampoline _cgo_purego_setuid_trampoline
++var _cgo_purego_setuid_trampoline byte
++var x_cgo_purego_setuid_call = x_cgo_purego_setuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setuid(c *argset) {
++	ret := setuid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setgroups_trampoline _cgo_purego_setgroups_trampoline
++var _cgo_purego_setgroups_trampoline byte
++var x_cgo_purego_setgroups_call = x_cgo_purego_setgroups
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgroups(c *argset) {
++	ret := setgroups(uint32(uintptr(c.arg(0))), (*uint32)(c.arg(1)))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
 new file mode 100644
 index 00000000000000..f30af0e1515699
@@ -8922,10 +8979,10 @@ index 00000000000000..f30af0e1515699
 +var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
 new file mode 100644
-index 00000000000000..43277f854d34aa
+index 00000000000000..cf56a6c71575eb
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
-@@ -0,0 +1,107 @@
+@@ -0,0 +1,121 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
@@ -9008,15 +9065,29 @@ index 00000000000000..43277f854d34aa
 +	CALL BX
 +	RET
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                 // first C arg
-+	MOVL AX, 0(SP)                 // Go arg 1
++TEXT threadentry_trampoline(SB), NOSPLIT, $24-4
++	// Save callee-saved registers
++	MOVL BP, 20(SP)
++	MOVL BX, 16(SP)
++	MOVL SI, 12(SP)
++	MOVL DI, 8(SP)
++
++	// Move C argument (arg) to stack for Go function
++	MOVL arg+0(FP), AX
++	MOVL AX, 0(SP)
++
 +	MOVL ·threadentry_call(SB), CX
 +	MOVL (CX), CX
 +	CALL CX
++
++	// Restore callee-saved registers
++	MOVL 8(SP), DI
++	MOVL 12(SP), SI
++	MOVL 16(SP), BX
++	MOVL 20(SP), BP
 +	RET
 +
-+TEXT ·call5(SB), NOSPLIT, $20-28
++TEXT ·call5(SB), NOSPLIT, $24-28
 +	MOVL fn+0(FP), AX
 +	MOVL a1+4(FP), BX
 +	MOVL a2+8(FP), CX
@@ -9148,10 +9219,10 @@ index 00000000000000..a4ca5ea98214fd
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
 new file mode 100644
-index 00000000000000..9aa7eb0accb4c8
+index 00000000000000..c17925d60d6787
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
-@@ -0,0 +1,81 @@
+@@ -0,0 +1,122 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
@@ -9208,12 +9279,53 @@ index 00000000000000..9aa7eb0accb4c8
 +	BL   (R12)
 +	RET
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $8-0
-+	// See crosscall2.
-+	MOVW R0, 4(R13)
++TEXT threadentry_trampoline(SB), NOSPLIT, $104-0
++	// Save C callee-saved registers at C-to-Go boundary.
++	// See crosscall2 in asm_arm.s.
++	// ARM AAPCS callee-saved: R4-R11 (includes g=R10), D8-D15.
++	// LR is saved/restored by the Go-managed frame prologue/epilogue.
++	MOVW R0, 4(R13) // arg for threadentry_call
++
++	MOVW R4, 8(R13)
++	MOVW R5, 12(R13)
++	MOVW R6, 16(R13)
++	MOVW R7, 20(R13)
++	MOVW R8, 24(R13)
++	MOVW R9, 28(R13)
++	MOVW g, 32(R13)   // R10
++	MOVW R11, 36(R13)
++
++	MOVD F8, 40(R13)
++	MOVD F9, 48(R13)
++	MOVD F10, 56(R13)
++	MOVD F11, 64(R13)
++	MOVD F12, 72(R13)
++	MOVD F13, 80(R13)
++	MOVD F14, 88(R13)
++	MOVD F15, 96(R13)
++
 +	MOVW ·threadentry_call(SB), R12
 +	MOVW (R12), R12
 +	CALL (R12)
++
++	MOVD 40(R13), F8
++	MOVD 48(R13), F9
++	MOVD 56(R13), F10
++	MOVD 64(R13), F11
++	MOVD 72(R13), F12
++	MOVD 80(R13), F13
++	MOVD 88(R13), F14
++	MOVD 96(R13), F15
++
++	MOVW 8(R13), R4
++	MOVW 12(R13), R5
++	MOVW 16(R13), R6
++	MOVW 20(R13), R7
++	MOVW 24(R13), R8
++	MOVW 28(R13), R9
++	MOVW 32(R13), g
++	MOVW 36(R13), R11
++
 +	RET
 +
 +TEXT ·call5(SB), NOSPLIT, $8-28
@@ -9235,10 +9347,10 @@ index 00000000000000..9aa7eb0accb4c8
 +	RET
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..dceb1cac6e821c
+index 00000000000000..1deb2747ad3245
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,84 @@
+@@ -0,0 +1,81 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -9299,7 +9411,6 @@ index 00000000000000..dceb1cac6e821c
 +
 +	SAVE_R19_TO_R28(8*4)
 +	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
 +
 +	MOVD ·threadentry_call(SB), R9
 +	MOVD (R9), R9
@@ -9308,8 +9419,6 @@ index 00000000000000..dceb1cac6e821c
 +
 +	RESTORE_R19_TO_R28(8*4)
 +	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
-+
 +	ADD $(8*24), RSP
 +	RET
 +
@@ -9323,454 +9432,911 @@ index 00000000000000..dceb1cac6e821c
 +	CALL R9
 +	MOVD R0, ret+48(FP)
 +	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
 new file mode 100644
-index 00000000000000..72c58f3f4fe01a
+index 00000000000000..eea96638fa9a9b
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
-@@ -0,0 +1,88 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
+@@ -0,0 +1,78 @@
 +// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || freebsd || linux)
++//go:build !cgo && linux
 +
 +#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_loong64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+// R23 is used as temporary register.
 +
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVV R4, 8(R3)
-+	MOVV R5, 16(R3)
-+	MOVV ·x_cgo_init_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setegid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVV R4, 8(R3)
-+	MOVV ·x_cgo_thread_start_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_seteuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVV R4, 8(R3)
-+	MOVV ·x_cgo_setenv_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVV R4, 8(R3)
-+	MOVV ·x_cgo_unsetenv_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setregid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setresgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setresuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0
-+	MOVV G+8(FP), R4
-+	MOVV setg+0(FP), R23
-+	CALL (R23)
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setreuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0
-+	// See crosscall2.
-+	ADDV $(-23*8), R3
-+	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
-+	MOVV R5, (2*8)(R3) // a unsafe.Pointer
-+	MOVV R7, (3*8)(R3) // ctxt uintptr
-+
-+	SAVE_R22_TO_R31((4*8))
-+	SAVE_F24_TO_F31((14*8))
-+	MOVV R1, (22*8)(R3)
-+
-+	MOVV ·threadentry_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+
-+	RESTORE_R22_TO_R31((4*8))
-+	RESTORE_F24_TO_F31((14*8))
-+	MOVV (22*8)(R3), R1
-+
-+	ADDV $(23*8), R3
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
 +
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVV fn+0(FP), R23
-+	MOVV a1+8(FP), R4
-+	MOVV a2+16(FP), R5
-+	MOVV a3+24(FP), R6
-+	MOVV a4+32(FP), R7
-+	MOVV a5+40(FP), R8
-+	CALL (R23)
-+	MOVV R4, ret+48(FP)
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setgroups_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
 +	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
 new file mode 100644
-index 00000000000000..8a1434e60d756d
+index 00000000000000..424ebc1e7cbb42
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
-@@ -0,0 +1,227 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
+@@ -0,0 +1,69 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || freebsd || linux)
++//go:build !cgo && linux
 +
 +#include "textflag.h"
-+#include "go_asm.h"
 +
-+// These trampolines map the C ABI to Go ABI and call into the Go equivalent functions.
-+//
-+// PPC64LE ELFv2 ABI stack frame layout:
-+//   0(R1)  = backchain (pointer to caller's frame)
-+//   8(R1)  = CR save area
-+//   16(R1) = LR save area
-+//   24(R1) = reserved
-+//   32(R1) = parameter save area (minimum 64 bytes for 8 args)
-+//
-+// Two patterns are used depending on call direction:
-+//
-+// C→Go trampolines: The C caller already provides a 32-byte linkage area.
-+//   Save LR/CR into caller's frame at 16(R1)/8(R1) BEFORE allocating,
-+//   then use MOVDU to allocate and set backchain atomically.
-+//
-+// Go→C trampolines: Go callers don't provide ELFv2 linkage area.
-+//   Allocate frame first with MOVDU, then save LR/CR into OUR frame.
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setegid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_seteuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	// R3, R4 already have the arguments
-+	MOVD ·x_cgo_init_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setregid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	ADD $32, R1
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresgid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
 +	RET
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setreuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
 +
-+	MOVD ·x_cgo_thread_start_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgroups_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
+new file mode 100644
+index 00000000000000..284fe5d0e3a87a
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
+@@ -0,0 +1,69 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+	ADD $32, R1
++//go:build !cgo && linux
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setegid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
-+// void (*_cgo_setenv)(char**)
-+// C arg: R3 = pointer to env
-+// This is C→Go: caller is C ABI.
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_seteuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	MOVD ·x_cgo_setenv_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setregid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	ADD $32, R1
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresgid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
 +	RET
 +
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setreuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
 +
-+	MOVD ·x_cgo_unsetenv_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgroups_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
+new file mode 100644
+index 00000000000000..771910817b7686
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
+@@ -0,0 +1,60 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+	ADD $32, R1
++//go:build !cgo && linux
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setegid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setgid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setregid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	ADD $32, R1
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
 +	RET
 +
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
 +
-+	CALL ·x_cgo_bindm(SB)
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
+new file mode 100644
+index 00000000000000..ebcc1176c0a0a6
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
+@@ -0,0 +1,60 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+	ADD $32, R1
++//go:build !cgo && linux
 +
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setegid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
 +	RET
 +
-+TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
-+	// Save LR, CR, and R31 to non-volatile registers (C ABI preserves R14-R31)
-+	MOVD LR, R20
-+	MOVW CR, R21
-+	MOVD R31, R22 // save R31 because load_g clobbers it
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_seteuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Load arguments from Go stack
-+	MOVD 32(R1), R12 // setg function pointer
-+	MOVD 40(R1), R3  // g pointer → first C arg
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Allocate ELFv2 frame for the C callee (32 bytes minimum)
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setregid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Call setg_gcc which stores g to TLS
-+	MOVD R12, CTR
-+	CALL CTR
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setresgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// setg_gcc stored g to TLS but restored old g in R30.
-+	// Call load_g to reload g from TLS into R30.
-+	// Note: load_g clobbers R31
-+	CALL runtime·load_g(SB)
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setresuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Deallocate frame
-+	ADD $32, R1
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setreuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Clear R0 before returning to Go code.
-+	// Go uses R0 as a constant 0 for things like "std r0,X(r1)" to zero stack locations.
-+	// C/assembly functions may leave garbage in R0.
-+	XOR R0, R0, R0
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
 +
-+	// Restore LR, CR, and R31 from non-volatile registers
-+	MOVD R22, R31 // restore R31
-+	MOVD R20, LR
-+	MOVW R21, CR
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setgroups_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
 +	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
+new file mode 100644
+index 00000000000000..59a95a929fb5c2
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
+@@ -0,0 +1,69 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD LR, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
++//go:build !cgo && linux
 +
-+	MOVDU R1, -32(R1)
++#include "textflag.h"
 +
-+	MOVD ·threadentry_call(SB), R12
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setegid_call(SB), R12
 +	MOVD (R12), R12
 +	MOVD R12, CTR
 +	CALL CTR
-+
-+	ADD $32, R1
-+
-+	MOVD 16(R1), LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
 +	RET
 +
-+TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
-+	MOVD LR, R20
-+	MOVW CR, R21
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
-+	// Load arguments from Go stack into C argument registers
-+	// Go placed args at 32(R1), 40(R1), etc.
-+	MOVD 32(R1), R12 // fn
-+	MOVD 40(R1), R3  // a1 → first C arg
-+	MOVD 48(R1), R4  // a2 → second C arg
-+	MOVD 56(R1), R5  // a3 → third C arg
-+	MOVD 64(R1), R6  // a4 → fourth C arg
-+	MOVD 72(R1), R7  // a5 → fifth C arg
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setgid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
-+	MOVDU R1, -32(R1)
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setregid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R12
++	MOVD (R12), R12
 +	MOVD R12, CTR
 +	CALL CTR
++	RET
 +
-+	// Store return value
-+	// After MOVDU -32, original 80(R1) is now at 80+32=112(R1)
-+	MOVD R3, (80+32)(R1)
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
-+	// Deallocate frame
-+	ADD $32, R1
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
-+	// Clear R0 before returning to Go code.
-+	// Go uses R0 as a constant 0 register for things like "std r0,X(r1)"
-+	// to zero stack locations. C functions may leave garbage in R0.
-+	XOR R0, R0, R0
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
 +
-+	// Restore LR/CR from non-volatile registers
-+	MOVD R20, LR
-+	MOVW R21, CR
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
 +	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
 new file mode 100644
-index 00000000000000..4154684b63ff51
+index 00000000000000..9e892dbd2daf71
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
-@@ -0,0 +1,72 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
+@@ -0,0 +1,60 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
 +
-+//go:build !cgo && (darwin || freebsd || linux)
++//go:build !cgo && linux
 +
 +#include "textflag.h"
-+#include "go_asm.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+// X5 is used as temporary register.
 +
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOV  X10, 8(SP)
-+	MOV  X11, 16(SP)
-+	MOV  ·x_cgo_init_call(SB), X5
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setegid_call(SB), X5
 +	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOV  X10, 8(SP)
-+	MOV  ·x_cgo_thread_start_call(SB), X5
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_seteuid_call(SB), X5
 +	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOV  X10, 8(SP)
-+	MOV  ·x_cgo_setenv_call(SB), X5
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setgid_call(SB), X5
 +	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOV  X10, 8(SP)
-+	MOV  ·x_cgo_unsetenv_call(SB), X5
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setregid_call(SB), X5
 +	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setresgid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setresuid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
 +	RET
 +
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0
-+	MOV  gp+8(FP), X10
-+	MOV  setg+0(FP), X5
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setreuid_call(SB), X5
++	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $16
-+	MOV  X10, 8(SP)
-+	MOV  ·threadentry_call(SB), X5
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setuid_call(SB), X5
 +	MOV  (X5), X5
 +	CALL X5
 +	RET
 +
-+TEXT ·call5(SB), NOSPLIT, $0-48
-+	MOV  fn+0(FP), X5
-+	MOV  a1+8(FP), X10
-+	MOV  a2+16(FP), X11
-+	MOV  a3+24(FP), X12
-+	MOV  a4+32(FP), X13
-+	MOV  a5+40(FP), X14
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setgroups_call(SB), X5
++	MOV  (X5), X5
 +	CALL X5
-+	MOV  X10, ret+48(FP)
 +	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
 new file mode 100644
-index 00000000000000..49fec0cf2f1718
+index 00000000000000..ce4247c989f4c1
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
-@@ -0,0 +1,163 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
+@@ -0,0 +1,53 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
 +// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build go1.27 && !cgo && linux
++//go:build go1.27 && !cgo
 +
 +#include "textflag.h"
-+#include "go_asm.h"
-+
-+// S390X ELF ABI: args R2-R6, return R2, callee-save R6-R13/R15/F8-F15, R14=LR, R15=SP
-+// CRITICAL: R0 as base register means "no base" (literal 0), not R0's value!
-+
-+// x_cgo_init_trampoline must preserve R9 for Go runtime
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R14, R0
-+	MOVD R15, R1
-+	SUB  $192, R15
-+	MOVD R1, 0(R15)   // backchain
-+	MOVD R0, 160(R15) // save R14
-+	MOVD R1, 168(R15) // save old R15
-+	MOVD R9, 176(R15) // save R9 (Go runtime needs this preserved)
 +
-+	MOVD ·x_cgo_init_call(SB), R1
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setegid_call(SB), R1
 +	MOVD (R1), R1
-+	BL   R1
++	BR   R1
 +
-+	MOVD 176(R15), R9
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setregid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
+new file mode 100644
+index 00000000000000..b93b5da90a8333
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
+@@ -0,0 +1,78 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_loong64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// R23 is used as temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVV ·x_cgo_init_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_thread_start_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_setenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_unsetenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOVV G+8(FP), R4
++	MOVV setg+0(FP), R23
++	CALL (R23)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $176
++	// See crosscall2.
++	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
++	MOVV R5, (2*8)(R3) // a unsafe.Pointer
++	MOVV R7, (3*8)(R3) // ctxt uintptr
++
++	SAVE_R22_TO_R31((4*8))
++	SAVE_F24_TO_F31((14*8))
++
++	MOVV ·threadentry_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++
++	RESTORE_R22_TO_R31((4*8))
++	RESTORE_F24_TO_F31((14*8))
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVV fn+0(FP), R23
++	MOVV a1+8(FP), R4
++	MOVV a2+16(FP), R5
++	MOVV a3+24(FP), R6
++	MOVV a4+32(FP), R7
++	MOVV a5+40(FP), R8
++	CALL (R23)
++	MOVV R4, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
+new file mode 100644
+index 00000000000000..444529d8ae820b
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
+@@ -0,0 +1,128 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_ppc64x.h"
++
++// These trampolines map the C ABI to Go ABI and call into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $16-16
++	MOVD R31, 8(R1) // save R31 (load_g clobbers it)
++
++	MOVD setg+0(FP), R12
++	MOVD newg+8(FP), R3
++
++	MOVD R12, CTR
++	CALL CTR
++
++	CALL runtime·load_g(SB)
++
++	MOVD 8(R1), R31
++	XOR  R0, R0, R0
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// Called from C (pthread_create). Must save all C callee-saved registers.
++	// Uses NOFRAME for proper ELFv2 backchain via MOVDU.
++	MOVD LR, R0
++	MOVD R0, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -320(R1)
++
++	SAVE_GPR(32)
++	SAVE_FPR(32+SAVE_GPR_SIZE)
++
++	MOVD $0, R0
++
++	MOVD ·threadentry_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	RESTORE_FPR(32+SAVE_GPR_SIZE)
++	RESTORE_GPR(32)
++
++	ADD $320, R1
++
++	MOVD 16(R1), R0
++	MOVD R0, LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
++	MOVD LR, R20
++	MOVW CR, R21
++
++	// Load arguments from Go stack into C argument registers
++	// Go placed args at 32(R1), 40(R1), etc.
++	MOVD 32(R1), R12 // fn
++	MOVD 40(R1), R3  // a1 → first C arg
++	MOVD 48(R1), R4  // a2 → second C arg
++	MOVD 56(R1), R5  // a3 → third C arg
++	MOVD 64(R1), R6  // a4 → fourth C arg
++	MOVD 72(R1), R7  // a5 → fifth C arg
++
++	MOVDU R1, -32(R1)
++
++	MOVD R12, CTR
++	CALL CTR
++
++	// Store return value
++	// After MOVDU -32, original 80(R1) is now at 80+32=112(R1)
++	MOVD R3, (80+32)(R1)
++
++	// Deallocate frame
++	ADD $32, R1
++
++	// Clear R0 before returning to Go code.
++	// Go uses R0 as a constant 0 register for things like "std r0,X(r1)"
++	// to zero stack locations. C functions may leave garbage in R0.
++	XOR R0, R0, R0
++
++	// Restore LR/CR from non-volatile registers
++	MOVD R20, LR
++	MOVW R21, CR
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+new file mode 100644
+index 00000000000000..b162fdde234629
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
+@@ -0,0 +1,76 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_riscv64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// X5 is used as temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOV  ·x_cgo_init_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_thread_start_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_setenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_unsetenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOV  gp+8(FP), X10
++	MOV  setg+0(FP), X5
++	CALL X5
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $200
++	MOV X10, 8(SP)
++
++	SAVE_GPR(8*2)
++	SAVE_FPR(8*14)
++
++	MOV  ·threadentry_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++
++	RESTORE_GPR(8*2)
++	RESTORE_FPR(8*14)
++
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-48
++	MOV  fn+0(FP), X5
++	MOV  a1+8(FP), X10
++	MOV  a2+16(FP), X11
++	MOV  a3+24(FP), X12
++	MOV  a4+32(FP), X13
++	MOV  a5+40(FP), X14
++	CALL X5
++	MOV  X10, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
+new file mode 100644
+index 00000000000000..2b68d438e4ec1d
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
+@@ -0,0 +1,154 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build go1.27 && !cgo && linux
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R2-R6, which matches Go ABIInternal for the first five arguments.
++// R1 is used as a temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R15, R1
++	SUB  $192, R15
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 160(R15) // save R14
++	MOVD R9, 168(R15)  // save R9 (Go runtime needs this preserved)
++
++	MOVD ·x_cgo_init_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 168(R15), R9
 +	MOVD 160(R15), R14
-+	MOVD 168(R15), R15
++	ADD  $192, R15
 +	BR   R14
 +
-+// Standard trampoline pattern: save R14/R15, call via pointer, restore
 +TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R14, R0
 +	MOVD R15, R1
 +	SUB  $176, R15
-+	MOVD R1, 0(R15)
-+	MOVD R0, 152(R15)
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
 +
 +	MOVD ·x_cgo_thread_start_call(SB), R1
 +	MOVD (R1), R1
@@ -9781,11 +10347,10 @@ index 00000000000000..49fec0cf2f1718
 +	BR   R14
 +
 +TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R14, R0
 +	MOVD R15, R1
 +	SUB  $176, R15
-+	MOVD R1, 0(R15)
-+	MOVD R0, 152(R15)
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
 +
 +	MOVD ·x_cgo_setenv_call(SB), R1
 +	MOVD (R1), R1
@@ -9796,11 +10361,10 @@ index 00000000000000..49fec0cf2f1718
 +	BR   R14
 +
 +TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R14, R0
 +	MOVD R15, R1
 +	SUB  $176, R15
-+	MOVD R1, 0(R15)
-+	MOVD R0, 152(R15)
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
 +
 +	MOVD ·x_cgo_unsetenv_call(SB), R1
 +	MOVD (R1), R1
@@ -9820,7 +10384,7 @@ index 00000000000000..49fec0cf2f1718
 +// setg_trampoline(setg uintptr, g uintptr) - called from Go
 +TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
 +	MOVD 8(R15), R1  // setg function pointer
-+	MOVD 16(R15), R2 // g pointer → C arg
++	MOVD 16(R15), R2 // g pointer -> C arg
 +
 +	MOVD R14, R0
 +	MOVD R15, R3
@@ -9835,13 +10399,11 @@ index 00000000000000..49fec0cf2f1718
 +	ADD  $160, R15
 +	BR   R14
 +
-+// threadentry_trampoline - called FROM C (pthread_create), arg in R2
 +TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
 +	STMG R6, R15, 48(R15) // C save area
 +	MOVD R15, R1
 +	SUB  $176, R15
 +	MOVD R1, 0(R15)       // backchain
-+	MOVD R2, 8(R15)       // pthread arg → Go arg
 +
 +	MOVD ·threadentry_call(SB), R1
 +	MOVD (R1), R1
@@ -9851,7 +10413,6 @@ index 00000000000000..49fec0cf2f1718
 +	LMG 48(R15), R6, R15
 +	RET
 +
-+// call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr - Go calling C
 +TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
 +	// Load Go args before modifying R15
 +	MOVD 8(R15), R1   // fn
@@ -9867,7 +10428,7 @@ index 00000000000000..49fec0cf2f1718
 +	ADD  $-128, R15
 +
 +	// Set up C frame with backchain
-+	MOVD R0, 0(R15) // backchain → original R15
++	MOVD R0, 0(R15) // backchain -> original R15
 +	MOVD R0, R3     // R3 = original R15 (can't use R0 as base!)
 +	MOVD 0(R3), R7  // save 0(original R15)
 +	MOVD $0, 0(R3)  // terminate backchain
@@ -10104,867 +10665,41 @@ index 00000000000000..960f8168eb88d7
 +//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
 +//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
 +
-+//go:nosplit
-+//go:norace
-+func pthread_self() pthread_t {
-+	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_get_stacksize_np(thread pthread_t) size_t {
-+	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
-+	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
-+}
-+
-+//go:linkname _pthread_self _pthread_self
-+var _pthread_self uint8
-+var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
-+
-+//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
-+var _pthread_get_stacksize_np uint8
-+var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
-+
-+//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
-+var _pthread_attr_setstacksize uint8
-+var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
-new file mode 100644
-index 00000000000000..d69775596fddf3
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
-@@ -0,0 +1,48 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "libc.so.7"
-+//go:cgo_import_dynamic purego_free free "libc.so.7"
-+//go:cgo_import_dynamic purego_setenv setenv "libc.so.7"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.7"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.7"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.7"
-+//go:cgo_import_dynamic purego_abort abort "libc.so.7"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so"
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
-new file mode 100644
-index 00000000000000..38ee622a366042
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
-@@ -0,0 +1,294 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "libc.so.6"
-+//go:cgo_import_dynamic purego_free free "libc.so.6"
-+//go:cgo_import_dynamic purego_setenv setenv "libc.so.6"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.6"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.6"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.6"
-+//go:cgo_import_dynamic purego_abort abort "libc.so.6"
-+//go:cgo_import_dynamic purego_sigaltstack sigaltstack "libc.so.6"
-+//go:cgo_import_dynamic purego___errno_location __errno_location "libc.so.6"
-+//go:cgo_import_dynamic purego_setegid setegid "libc.so.6"
-+//go:cgo_import_dynamic purego_seteuid seteuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setgid setgid "libc.so.6"
-+//go:cgo_import_dynamic purego_setregid setregid "libc.so.6"
-+//go:cgo_import_dynamic purego_setresgid setresgid "libc.so.6"
-+//go:cgo_import_dynamic purego_setresuid setresuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setreuid setreuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setuid setuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setgroups setgroups "libc.so.6"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-+
-+//go:nosplit
-+//go:norace
-+func __errno_location() uintptr {
-+	return uintptr(call5(__errno_locationABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setegid(egid uint32) int32 {
-+	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func seteuid(euid uint32) int32 {
-+	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setgid(gid uint32) int32 {
-+	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setregid(rgid uint32, egid uint32) int32 {
-+	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setresgid(rgid uint32, egid uint32, sgid uint32) int32 {
-+	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setresuid(ruid uint32, euid uint32, suid uint32) int32 {
-+	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setreuid(ruid uint32, euid uint32) int32 {
-+	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setuid(uid uint32) int32 {
-+	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setgroups(ngid uint32, gidset *uint32) int32 {
-+	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
-+}
-+
-+//go:linkname ___errno_location ___errno_location
-+var ___errno_location uint8
-+var __errno_locationABI0 = uintptr(unsafe.Pointer(&___errno_location))
-+
-+//go:linkname _setegid _setegid
-+var _setegid uint8
-+var setegidABI0 = uintptr(unsafe.Pointer(&_setegid))
-+
-+//go:linkname _seteuid _seteuid
-+var _seteuid uint8
-+var seteuidABI0 = uintptr(unsafe.Pointer(&_seteuid))
-+
-+//go:linkname _setgid _setgid
-+var _setgid uint8
-+var setgidABI0 = uintptr(unsafe.Pointer(&_setgid))
-+
-+//go:linkname _setregid _setregid
-+var _setregid uint8
-+var setregidABI0 = uintptr(unsafe.Pointer(&_setregid))
-+
-+//go:linkname _setresgid _setresgid
-+var _setresgid uint8
-+var setresgidABI0 = uintptr(unsafe.Pointer(&_setresgid))
-+
-+//go:linkname _setresuid _setresuid
-+var _setresuid uint8
-+var setresuidABI0 = uintptr(unsafe.Pointer(&_setresuid))
-+
-+//go:linkname _setreuid _setreuid
-+var _setreuid uint8
-+var setreuidABI0 = uintptr(unsafe.Pointer(&_setreuid))
-+
-+//go:linkname _setuid _setuid
-+var _setuid uint8
-+var setuidABI0 = uintptr(unsafe.Pointer(&_setuid))
-+
-+//go:linkname _setgroups _setgroups
-+var _setgroups uint8
-+var setgroupsABI0 = uintptr(unsafe.Pointer(&_setgroups))
-+
-+//go:linkname _cgo_purego_setegid_trampoline _cgo_purego_setegid_trampoline
-+var _cgo_purego_setegid_trampoline byte
-+var x_cgo_purego_setegid_call = x_cgo_purego_setegid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setegid(c *argset) {
-+	ret := setegid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_seteuid_trampoline _cgo_purego_seteuid_trampoline
-+var _cgo_purego_seteuid_trampoline byte
-+var x_cgo_purego_seteuid_call = x_cgo_purego_seteuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_seteuid(c *argset) {
-+	ret := seteuid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setgid_trampoline _cgo_purego_setgid_trampoline
-+var _cgo_purego_setgid_trampoline byte
-+var x_cgo_purego_setgid_call = x_cgo_purego_setgid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setgid(c *argset) {
-+	ret := setgid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setregid_trampoline _cgo_purego_setregid_trampoline
-+var _cgo_purego_setregid_trampoline byte
-+var x_cgo_purego_setregid_call = x_cgo_purego_setregid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setregid(c *argset) {
-+	ret := setregid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setresgid_trampoline _cgo_purego_setresgid_trampoline
-+var _cgo_purego_setresgid_trampoline byte
-+var x_cgo_purego_setresgid_call = x_cgo_purego_setresgid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setresgid(c *argset) {
-+	ret := setresgid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setresuid_trampoline _cgo_purego_setresuid_trampoline
-+var _cgo_purego_setresuid_trampoline byte
-+var x_cgo_purego_setresuid_call = x_cgo_purego_setresuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setresuid(c *argset) {
-+	ret := setresuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setreuid_trampoline _cgo_purego_setreuid_trampoline
-+var _cgo_purego_setreuid_trampoline byte
-+var x_cgo_purego_setreuid_call = x_cgo_purego_setreuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setreuid(c *argset) {
-+	ret := setreuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setuid_trampoline _cgo_purego_setuid_trampoline
-+var _cgo_purego_setuid_trampoline byte
-+var x_cgo_purego_setuid_call = x_cgo_purego_setuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setuid(c *argset) {
-+	ret := setuid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setgroups_trampoline _cgo_purego_setgroups_trampoline
-+var _cgo_purego_setgroups_trampoline byte
-+var x_cgo_purego_setgroups_call = x_cgo_purego_setgroups
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setgroups(c *argset) {
-+	ret := setgroups(uint32(uintptr(c.arg(0))), (*uint32)(c.arg(1)))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
-new file mode 100644
-index 00000000000000..35ef7ac11cb955
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
-@@ -0,0 +1,19 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_self(SB)
-+
-+TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_get_stacksize_np(SB)
-+
-+TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_setstacksize(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
-new file mode 100644
-index 00000000000000..da07005c0bc988
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
-@@ -0,0 +1,16 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_getstacksize(SB)
-+
-+TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_destroy(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
-new file mode 100644
-index 00000000000000..da07005c0bc988
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
-@@ -0,0 +1,16 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_getstacksize(SB)
-+
-+TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_destroy(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
-new file mode 100644
-index 00000000000000..2903c5bdb7e54c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_386.s
-@@ -0,0 +1,110 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                          // first C arg
-+	MOVL AX, 0(SP)                          // Go arg 1
-+	MOVL ·x_cgo_purego_setegid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                          // first C arg
-+	MOVL AX, 0(SP)                          // Go arg 1
-+	MOVL ·x_cgo_purego_seteuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                         // first C arg
-+	MOVL AX, 0(SP)                         // Go arg 1
-+	MOVL ·x_cgo_purego_setgid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	JMP purego_setgid(SB)
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                           // first C arg
-+	MOVL AX, 0(SP)                           // Go arg 1
-+	MOVL ·x_cgo_purego_setregid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	JMP purego_setregid(SB)
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                            // first C arg
-+	MOVL AX, 0(SP)                            // Go arg 1
-+	MOVL ·x_cgo_purego_setresgid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	JMP purego_setresgid(SB)
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                            // first C arg
-+	MOVL AX, 0(SP)                            // Go arg 1
-+	MOVL ·x_cgo_purego_setresuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	JMP purego_setresuid(SB)
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                           // first C arg
-+	MOVL AX, 0(SP)                           // Go arg 1
-+	MOVL ·x_cgo_purego_setreuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	JMP purego_setreuid(SB)
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                         // first C arg
-+	MOVL AX, 0(SP)                         // Go arg 1
-+	MOVL ·x_cgo_purego_setuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	JMP purego_setuid(SB)
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                            // first C arg
-+	MOVL AX, 0(SP)                            // Go arg 1
-+	MOVL ·x_cgo_purego_setgroups_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	JMP purego_setgroups(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
-new file mode 100644
-index 00000000000000..776a6f3ad9533b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_amd64.s
-@@ -0,0 +1,102 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setegid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_seteuid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setgid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	JMP purego_setgid(SB)
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setregid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	JMP purego_setregid(SB)
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setresgid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	JMP purego_setresgid(SB)
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setresuid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	JMP purego_setresuid(SB)
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setreuid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	JMP purego_setreuid(SB)
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setuid_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	JMP purego_setuid(SB)
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setgroups_call(SB), DX
-+	MOVQ (DX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	JMP purego_setgroups(SB)
-+
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
-new file mode 100644
-index 00000000000000..09401d72019bde
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm.s
-@@ -0,0 +1,74 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setegid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_seteuid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setgid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setregid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setresgid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setresuid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setreuid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setuid_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setgroups_call(SB), R12
-+	MOVW (R12), R2
-+	CALL (R2)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
-new file mode 100644
-index 00000000000000..0b25425c004d38
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_arm64.s
-@@ -0,0 +1,93 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setegid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setgid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	JMP purego_setgid(SB)
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setregid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	JMP purego_setregid(SB)
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	JMP purego_setresgid(SB)
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	JMP purego_setresuid(SB)
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
-+
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	JMP purego_setreuid(SB)
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setuid_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
 +
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	JMP purego_setuid(SB)
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R26
-+	MOVD (R26), R2
-+	CALL R2
-+	RET
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
 +
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	JMP purego_setgroups(SB)
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
 +
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
 new file mode 100644
-index 00000000000000..3c8a0d64e659fa
+index 00000000000000..d69775596fddf3
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_loong64.s
-@@ -0,0 +1,92 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
+@@ -0,0 +1,48 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -10972,204 +10707,217 @@ index 00000000000000..3c8a0d64e659fa
 +
 +//go:build !cgo
 +
-+#include "textflag.h"
-+
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setegid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_seteuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setgid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++package fakecgo
 +
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	JMP purego_setgid(SB)
++import "unsafe"
 +
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setregid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.7"
++//go:cgo_import_dynamic purego_free free "libc.so.7"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.7"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.7"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.7"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.7"
++//go:cgo_import_dynamic purego_abort abort "libc.so.7"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so"
 +
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	JMP purego_setregid(SB)
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setresgid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
 +
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	JMP purego_setresgid(SB)
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
 +
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setresuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
+new file mode 100644
+index 00000000000000..cbb120431ab6bb
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
+@@ -0,0 +1,158 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	JMP purego_setresuid(SB)
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setreuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++//go:build !cgo
 +
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	JMP purego_setreuid(SB)
++package fakecgo
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++import "unsafe"
 +
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	JMP purego_setuid(SB)
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.6"
++//go:cgo_import_dynamic purego_free free "libc.so.6"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.6"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.6"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.6"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.6"
++//go:cgo_import_dynamic purego_abort abort "libc.so.6"
++//go:cgo_import_dynamic purego___errno_location __errno_location "libc.so.6"
++//go:cgo_import_dynamic purego_setegid setegid "libc.so.6"
++//go:cgo_import_dynamic purego_seteuid seteuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgid setgid "libc.so.6"
++//go:cgo_import_dynamic purego_setregid setregid "libc.so.6"
++//go:cgo_import_dynamic purego_setresgid setresgid "libc.so.6"
++//go:cgo_import_dynamic purego_setresuid setresuid "libc.so.6"
++//go:cgo_import_dynamic purego_setreuid setreuid "libc.so.6"
++//go:cgo_import_dynamic purego_setuid setuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgroups setgroups "libc.so.6"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVV ·x_cgo_purego_setgroups_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
++//go:nosplit
++//go:norace
++func __errno_location() uintptr {
++	return uintptr(call5(__errno_locationABI0, 0, 0, 0, 0, 0))
++}
 +
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	JMP purego_setgroups(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
-new file mode 100644
-index 00000000000000..70c51e674587ef
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_ppc64le.s
-@@ -0,0 +1,101 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++//go:nosplit
++//go:norace
++func setegid(egid uint32) int32 {
++	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
++}
 +
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++//go:nosplit
++//go:norace
++func seteuid(euid uint32) int32 {
++	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
++}
 +
-+//go:build !cgo
++//go:nosplit
++//go:norace
++func setgid(gid uint32) int32 {
++	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
++}
 +
-+#include "textflag.h"
++//go:nosplit
++//go:norace
++func setregid(rgid uint32, egid uint32) int32 {
++	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
++}
 +
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	BR purego___errno_location(SB)
++//go:nosplit
++//go:norace
++func setresgid(rgid uint32, egid uint32, sgid uint32) int32 {
++	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
++}
 +
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setegid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:nosplit
++//go:norace
++func setresuid(ruid uint32, euid uint32, suid uint32) int32 {
++	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
++}
 +
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	BR purego_setegid(SB)
++//go:nosplit
++//go:norace
++func setreuid(ruid uint32, euid uint32) int32 {
++	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:nosplit
++//go:norace
++func setuid(uid uint32) int32 {
++	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
++}
 +
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	BR purego_seteuid(SB)
++//go:nosplit
++//go:norace
++func setgroups(ngid uint32, gidset *uint32) int32 {
++	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setgid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
 +
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	BR purego_setgid(SB)
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
 +
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setregid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname ___errno_location ___errno_location
++var ___errno_location uint8
++var __errno_locationABI0 = uintptr(unsafe.Pointer(&___errno_location))
 +
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	BR purego_setregid(SB)
++//go:linkname _setegid _setegid
++var _setegid uint8
++var setegidABI0 = uintptr(unsafe.Pointer(&_setegid))
 +
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname _seteuid _seteuid
++var _seteuid uint8
++var seteuidABI0 = uintptr(unsafe.Pointer(&_seteuid))
 +
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	BR purego_setresgid(SB)
++//go:linkname _setgid _setgid
++var _setgid uint8
++var setgidABI0 = uintptr(unsafe.Pointer(&_setgid))
 +
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname _setregid _setregid
++var _setregid uint8
++var setregidABI0 = uintptr(unsafe.Pointer(&_setregid))
 +
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	BR purego_setresuid(SB)
++//go:linkname _setresgid _setresgid
++var _setresgid uint8
++var setresgidABI0 = uintptr(unsafe.Pointer(&_setresgid))
 +
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname _setresuid _setresuid
++var _setresuid uint8
++var setresuidABI0 = uintptr(unsafe.Pointer(&_setresuid))
 +
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	BR purego_setreuid(SB)
++//go:linkname _setreuid _setreuid
++var _setreuid uint8
++var setreuidABI0 = uintptr(unsafe.Pointer(&_setreuid))
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname _setuid _setuid
++var _setuid uint8
++var setuidABI0 = uintptr(unsafe.Pointer(&_setuid))
 +
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	BR purego_setuid(SB)
++//go:linkname _setgroups _setgroups
++var _setgroups uint8
++var setgroupsABI0 = uintptr(unsafe.Pointer(&_setgroups))
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOVD R3, R3
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	BR   (CTR)
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
 +
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	BR purego_setgroups(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
 new file mode 100644
-index 00000000000000..30dbb92f51fbb8
+index 00000000000000..35ef7ac11cb955
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_riscv64.s
-@@ -0,0 +1,92 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
+@@ -0,0 +1,19 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
@@ -11179,185 +10927,90 @@ index 00000000000000..30dbb92f51fbb8
 +
 +#include "textflag.h"
 +
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setegid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
-+
-+TEXT _setegid(SB), NOSPLIT, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_seteuid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
-+
-+TEXT _seteuid(SB), NOSPLIT, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setgid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
-+
-+TEXT _setgid(SB), NOSPLIT, $0-0
-+	JMP purego_setgid(SB)
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setregid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
-+
-+TEXT _setregid(SB), NOSPLIT, $0-0
-+	JMP purego_setregid(SB)
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setresgid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
-+TEXT _setresgid(SB), NOSPLIT, $0-0
-+	JMP purego_setresgid(SB)
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
 +
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setresuid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
 +
-+TEXT _setresuid(SB), NOSPLIT, $0-0
-+	JMP purego_setresuid(SB)
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
+new file mode 100644
+index 00000000000000..da07005c0bc988
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
+@@ -0,0 +1,16 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setreuid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+TEXT _setreuid(SB), NOSPLIT, $0-0
-+	JMP purego_setreuid(SB)
++//go:build !cgo
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setuid_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
++#include "textflag.h"
 +
-+TEXT _setuid(SB), NOSPLIT, $0-0
-+	JMP purego_setuid(SB)
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0
-+	MOV  ·x_cgo_purego_setgroups_call(SB), T0
-+	MOV  (T0), T1
-+	CALL T1
-+	RET
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
 +
-+TEXT _setgroups(SB), NOSPLIT, $0-0
-+	JMP purego_setgroups(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
 new file mode 100644
-index 00000000000000..edc21761ddd8ad
+index 00000000000000..ba2cb38918d538
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux_s390x.s
-@@ -0,0 +1,90 @@
++++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
+@@ -0,0 +1,46 @@
 +// Code generated by 'go generate' with gen.go. DO NOT EDIT.
 +
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build go1.27 && !cgo
++//go:build !cgo
 +
 +#include "textflag.h"
 +
-+TEXT ___errno_location(SB), NOSPLIT, $0-0
-+	JMP purego___errno_location(SB)
++// these stubs are here because it is not possible to go:linkname directly the C functions
 +
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2 already has the argument from C caller
-+	MOVD ·x_cgo_purego_setegid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
++TEXT ___errno_location(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego___errno_location(SB)
 +
 +TEXT _setegid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setegid(SB)
 +
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _seteuid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_seteuid(SB)
 +
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setgid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setgid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setgid(SB)
 +
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2, R3 have arguments from C caller
-+	MOVD ·x_cgo_purego_setregid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setregid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setregid(SB)
 +
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2, R3, R4 have arguments from C caller
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setresgid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setresgid(SB)
 +
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2, R3, R4 have arguments from C caller
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setresuid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setresuid(SB)
 +
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2, R3 have arguments from C caller
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setreuid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setreuid(SB)
 +
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setuid(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setuid(SB)
 +
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	// R2, R3 have arguments from C caller
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
 +TEXT _setgroups(SB), NOSPLIT|NOFRAME, $0-0
 +	JMP purego_setgroups(SB)
 +
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
 new file mode 100644
 index 00000000000000..067583d68517a9
@@ -12549,7 +12202,7 @@ index 00000000000000..9d38464e9fb964
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..d926c6adf17dda
+index 00000000000000..ef675266fc2f0d
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 @@ -0,0 +1,434 @@
@@ -12705,12 +12358,12 @@ index 00000000000000..d926c6adf17dda
 +// BIO API
 +const _BIO_METHOD_PTR BIO_s_mem(void) __attribute__((tag(""),tag("init_3"),noerror));
 +_BIO_PTR BIO_new(const _BIO_METHOD_PTR type) __attribute__((tag(""),tag("init_3")));
-+int BIO_free(_BIO_PTR a) __attribute__((tag(""),tag("init_3"),noerror));
++int BIO_free(_BIO_PTR a) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
 +long BIO_ctrl(_BIO_PTR bp, int cmd, long larg, void *parg) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
 +
 +// ERR API
 +unsigned long ERR_peek_error(void) __attribute__((noerror));
-+void ERR_print_errors(_BIO_PTR bp) __attribute__((tag(""),tag("init_3")));
++void ERR_print_errors(_BIO_PTR bp) __attribute__((tag(""),tag("init_3"),noescape,nocallback));
 +
 +// OPENSSL API
 +const char *OpenSSL_version(int type) __attribute__((noerror));
@@ -12739,7 +12392,7 @@ index 00000000000000..d926c6adf17dda
 +const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
 +
 +// RAND API
-+int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback));
++int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback,slice("arg0","arg1")));
 +
 +// EVP_MD API
 +_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
@@ -12773,28 +12426,28 @@ index 00000000000000..d926c6adf17dda
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
 +int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
-+int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md")));
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md","size")));
 +int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
 +int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
 +int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
-+int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice(md)));
-+int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t len) __attribute__((tag("33"),noescape,nocallback,slice(md)));
-+int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t len) __attribute__((tag("33"),noescape,nocallback,slice("out","len")));
-+int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback));
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice("md","s")));
++int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t mdlen) __attribute__((tag("33"),noescape,nocallback,slice("md","mdlen")));
++int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t outlen) __attribute__((tag("33"),noescape,nocallback,slice("out","outlen")));
++int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback,slice("sigret","siglen"),slice("tbs","tbslen")));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen);
++int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen) __attribute__((slice("sig","siglen")));
 +int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen);
-+int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111")));
++int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen) __attribute__((slice("sig","siglen")));
++int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),slice("sigret","siglen"),slice("tbs","tbslen")));
 +
 +// HMAC API
-+int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1")));
-+int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1")));
-+int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1")));
++int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
++int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
++int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
 +
 +_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
-+int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1")));
-+void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1")));
++int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1"),noescape,nocallback));
++void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1"),noescape,nocallback));
 +
 +// EVP_CIPHER API
 +_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
@@ -12825,18 +12478,18 @@ index 00000000000000..d926c6adf17dda
 +void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
 +int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
 +int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
-+int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
++int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
 +int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
-+int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback));
++int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
++int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback,slice("out","outl")));
 +int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback));
-+int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback));
++int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
++int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback,slice("outm","outl")));
 +
 +// EVP_PKEY API
 +_EVP_PKEY_PTR EVP_PKEY_new(void);
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111"),slice("key","keylen")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111"),slice("key","keylen")));
 +int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
 +int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
 +void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
@@ -12844,40 +12497,40 @@ index 00000000000000..d926c6adf17dda
 +int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
 +_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
 +_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3")));
++int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3"),slice("pub","publen")));
 +size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
-+int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3")));
-+int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3")));
++int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3"),noescape,nocallback));
++int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3"),slice("buf","buf_len")));
 +int EVP_PKEY_up_ref(_EVP_PKEY_PTR key);
 +int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int len) __attribute__((tag("3")));
-+int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *len) __attribute__((tag("111"),noescape,nocallback));
-+int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *len) __attribute__((tag("111"),noescape,nocallback));
++int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int labellen) __attribute__((tag("3"),slice("label","labellen")));
++int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *publen) __attribute__((tag("111"),noescape,nocallback,slice("pub","publen")));
++int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *privlen) __attribute__((tag("111"),noescape,nocallback,slice("priv","privlen")));
 +int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
 +int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
 +int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
-+int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
-+int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
++int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey) __attribute__((noescape,nocallback));
++int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
++int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
 +int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
 +int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
 +int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
 +int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4);
-+int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen);
++int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
++int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sig","siglen"),slice("tbs","tbslen")));
 +int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
 +int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
-+int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback));
++int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback,slice("key","keylen")));
 +int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
 +
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
@@ -12886,9 +12539,9 @@ index 00000000000000..d926c6adf17dda
 +int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
 +int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
 +int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
++int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
++int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
 +
 +// RSA API
 +_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
@@ -12906,10 +12559,10 @@ index 00000000000000..d926c6adf17dda
 +void BN_clear(_BIGNUM_PTR arg0);
 +void BN_clear_free(_BIGNUM_PTR arg0);
 +int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
-+_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2);
-+_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int len, _BIGNUM_PTR ret);
-+int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
-+int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1")));
++_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2) __attribute__((slice("arg0","arg1")));
++_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int slen, _BIGNUM_PTR ret) __attribute__((slice("s","slen")));
++int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
++int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
 +
 +// EC API
 +int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
@@ -12926,8 +12579,8 @@ index 00000000000000..d926c6adf17dda
 +int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
 +int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
 +int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
-+size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
-+int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t len, _BN_CTX_PTR ctx);
++size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
++int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
 +_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
 +void EC_GROUP_free(_EC_GROUP_PTR group);
 +
@@ -12935,20 +12588,20 @@ index 00000000000000..d926c6adf17dda
 +_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
 +_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
 +int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3"),noescape,nocallback));
 +_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
-+int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3")));
-+int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3")));
++int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback,slice("key","keylen")));
++int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3"),noescape,nocallback,slice("data","datalen")));
++int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3"),noescape,nocallback,slice("out","outsize")));
 +
 +// OSSL_PARAM API
 +void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
 +const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
-+_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3")));
++_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3"),noerror));
 +void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
 +_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
++int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
 +int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
 +int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
 +
@@ -12972,8 +12625,8 @@ index 00000000000000..d926c6adf17dda
 +int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
 +size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out);
++int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),slice("key","keylen")));
++int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out) __attribute__((slice("pass","passlen"),slice("salt","saltlen"),slice("out","keylen")));
 +
 +// OBJ API
 +const char *OBJ_nid2sn(int n) __attribute__((noerror));
@@ -13227,10 +12880,10 @@ index 00000000000000..068a94d4c83ae1
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
 new file mode 100644
-index 00000000000000..e4d870cecde36c
+index 00000000000000..0a087c1514bd8b
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
-@@ -0,0 +1,45 @@
+@@ -0,0 +1,58 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo && unix
@@ -13244,6 +12897,19 @@ index 00000000000000..e4d870cecde36c
 +
 +var _ = runtime.GOOS
 +
++var _mkcgoAlwaysFalseDl bool
++var _mkcgoEscapeSinkDl unsafe.Pointer
++
++// mkcgoEscapePtrDl forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrDl(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseDl {
++		_mkcgoEscapeSinkDl = p
++	}
++	return p
++}
++
 +//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
 +//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
 +//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
@@ -13266,22 +12932,22 @@ index 00000000000000..e4d870cecde36c
 +var _mkcgo_dlopen_trampoline_addr uintptr
 +
 +func Dlopen(path *byte, flags int32) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
++	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(mkcgoEscapePtrDl(unsafe.Pointer(path))), uintptr(flags))
 +	return unsafe.Pointer(r0)
 +}
 +
 +var _mkcgo_dlsym_trampoline_addr uintptr
 +
 +func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
++	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(mkcgoEscapePtrDl(unsafe.Pointer(symbol))))
 +	return unsafe.Pointer(r0)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..832ecd8558ffef
+index 00000000000000..c284c017339d4a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2056 @@
+@@ -0,0 +1,2054 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -13406,7 +13072,7 @@ index 00000000000000..832ecd8558ffef
 +_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
 +_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
 +_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
-+int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, void*, int);
++int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, unsigned char*, int);
 +int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
 +int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
 +int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
@@ -13496,7 +13162,7 @@ index 00000000000000..832ecd8558ffef
 +void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
 +_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
 +int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
-+int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR);
 +int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
 +const char* (*_g_OBJ_nid2sn)(int);
 +void (*_g_OPENSSL_init)(void);
@@ -13508,7 +13174,7 @@ index 00000000000000..832ecd8558ffef
 +_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
 +int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
 +int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
-+int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t);
++int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t);
 +int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
 +_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
 +void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
@@ -14668,7 +14334,7 @@ index 00000000000000..832ecd8558ffef
 +	return _ret;
 +}
 +
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, void* _arg1, int _arg2, uintptr_t *_err_state) {
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -15160,7 +14826,7 @@ index 00000000000000..832ecd8558ffef
 +	return _ret;
 +}
 +
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const void* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, uintptr_t *_err_state) {
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, uintptr_t *_err_state) {
 +	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -15214,10 +14880,8 @@ index 00000000000000..832ecd8558ffef
 +	_g_OSSL_PARAM_BLD_free(_arg0);
 +}
 +
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(uintptr_t *_err_state) {
-+	_OSSL_PARAM_BLD_PTR _ret = _g_OSSL_PARAM_BLD_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void) {
++	return _g_OSSL_PARAM_BLD_new();
 +}
 +
 +int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
@@ -15232,7 +14896,7 @@ index 00000000000000..832ecd8558ffef
 +	return _ret;
 +}
 +
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const void* _arg2, size_t _arg3, uintptr_t *_err_state) {
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
 +	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
 +	return _ret;
@@ -15413,7 +15077,7 @@ index 00000000000000..39b0a728fdd700
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..e7513f3e402401
+index 00000000000000..c65571c283503c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 @@ -0,0 +1,363 @@
@@ -15652,7 +15316,7 @@ index 00000000000000..e7513f3e402401
 +_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, uintptr_t *);
 +_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, uintptr_t *);
 +_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, void*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, unsigned char*, int, uintptr_t *);
 +int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
 +int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
 +int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
@@ -15746,7 +15410,7 @@ index 00000000000000..e7513f3e402401
 +void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
 +_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *);
 +int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const void*, int, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
 +int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
 +const char* _mkcgo_OBJ_nid2sn(int);
 +void _mkcgo_OPENSSL_init(void);
@@ -15755,10 +15419,10 @@ index 00000000000000..e7513f3e402401
 +unsigned int _mkcgo_OPENSSL_version_minor(void);
 +unsigned int _mkcgo_OPENSSL_version_patch(void);
 +void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(uintptr_t *);
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void);
 +int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, uintptr_t *);
 +int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, uintptr_t *);
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const void*, size_t, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t, uintptr_t *);
 +int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, uintptr_t *);
 +_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, uintptr_t *);
 +void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
@@ -15782,10 +15446,10 @@ index 00000000000000..e7513f3e402401
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..059562f35df7b3
+index 00000000000000..7e7063d31539c8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1368 @@
+@@ -0,0 +1,1486 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -15795,6 +15459,78 @@ index 00000000000000..059562f35df7b3
 +#cgo unix LDFLAGS: -ldl
 +
 +#include "zossl.h"
++#cgo noescape _mkcgo_BIO_ctrl
++#cgo nocallback _mkcgo_BIO_ctrl
++#cgo noescape _mkcgo_BIO_free
++#cgo nocallback _mkcgo_BIO_free
++#cgo noescape _mkcgo_ERR_print_errors
++#cgo nocallback _mkcgo_ERR_print_errors
++#cgo noescape _mkcgo_EVP_CipherUpdate
++#cgo nocallback _mkcgo_EVP_CipherUpdate
++#cgo noescape _mkcgo_EVP_DecryptFinal_ex
++#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
++#cgo noescape _mkcgo_EVP_DecryptUpdate
++#cgo nocallback _mkcgo_EVP_DecryptUpdate
++#cgo noescape _mkcgo_EVP_Digest
++#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestFinalXOF
++#cgo nocallback _mkcgo_EVP_DigestFinalXOF
++#cgo noescape _mkcgo_EVP_DigestFinal_ex
++#cgo nocallback _mkcgo_EVP_DigestFinal_ex
++#cgo noescape _mkcgo_EVP_DigestSign
++#cgo nocallback _mkcgo_EVP_DigestSign
++#cgo noescape _mkcgo_EVP_DigestSqueeze
++#cgo nocallback _mkcgo_EVP_DigestSqueeze
++#cgo noescape _mkcgo_EVP_DigestUpdate
++#cgo nocallback _mkcgo_EVP_DigestUpdate
++#cgo noescape _mkcgo_EVP_EncryptFinal_ex
++#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
++#cgo noescape _mkcgo_EVP_EncryptUpdate
++#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_MAC_CTX_free
++#cgo nocallback _mkcgo_EVP_MAC_CTX_free
++#cgo noescape _mkcgo_EVP_MAC_final
++#cgo nocallback _mkcgo_EVP_MAC_final
++#cgo noescape _mkcgo_EVP_MAC_init
++#cgo nocallback _mkcgo_EVP_MAC_init
++#cgo noescape _mkcgo_EVP_MAC_update
++#cgo nocallback _mkcgo_EVP_MAC_update
++#cgo noescape _mkcgo_EVP_MD_CTX_get_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
++#cgo noescape _mkcgo_EVP_MD_CTX_set_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_EC
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_EC
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_ED25519
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_ED25519
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLKEM
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLKEM
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_RSA
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_RSA
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_X25519
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_X25519
++#cgo noescape _mkcgo_EVP_PKEY_derive
++#cgo nocallback _mkcgo_EVP_PKEY_derive
++#cgo noescape _mkcgo_EVP_PKEY_get_bn_param
++#cgo nocallback _mkcgo_EVP_PKEY_get_bn_param
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo noescape _mkcgo_EVP_PKEY_keygen
++#cgo nocallback _mkcgo_EVP_PKEY_keygen
++#cgo noescape _mkcgo_HMAC_CTX_copy
++#cgo nocallback _mkcgo_HMAC_CTX_copy
++#cgo noescape _mkcgo_HMAC_CTX_free
++#cgo nocallback _mkcgo_HMAC_CTX_free
++#cgo noescape _mkcgo_HMAC_Final
++#cgo nocallback _mkcgo_HMAC_Final
++#cgo noescape _mkcgo_HMAC_Init_ex
++#cgo nocallback _mkcgo_HMAC_Init_ex
++#cgo noescape _mkcgo_HMAC_Update
++#cgo nocallback _mkcgo_HMAC_Update
++#cgo noescape _mkcgo_RAND_bytes
++#cgo nocallback _mkcgo_RAND_bytes
 +*/
 +import "C"
 +import "unsafe"
@@ -15917,21 +15653,21 @@ index 00000000000000..059562f35df7b3
 +	return C._mkcgo_BIO_s_mem()
 +}
 +
-+func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), arg2, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg0))), C.int(len(arg0)), arg2, mkcgoNoEscape(&_err))
 +	return _ret, newMkcgoErr("BN_bin2bn", uintptr(_err))
 +}
 +
-+func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("BN_bn2binpad", uintptr(_err))
 +}
 +
-+func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(to)), C.int(tolen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", uintptr(_err))
 +}
 +
@@ -15947,9 +15683,9 @@ index 00000000000000..059562f35df7b3
 +	C._mkcgo_BN_free(arg0)
 +}
 +
-+func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(s)), C.int(len), ret, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(s))), C.int(len(s)), ret, mkcgoNoEscape(&_err))
 +	return _ret, newMkcgoErr("BN_lebin2bn", uintptr(_err))
 +}
 +
@@ -16087,15 +15823,15 @@ index 00000000000000..059562f35df7b3
 +	return _ret, newMkcgoErr("EC_POINT_new", uintptr(_err))
 +}
 +
-+func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", uintptr(_err))
 +}
 +
-+func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(buf)), C.size_t(len), ctx, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
 +	return int(_ret), newMkcgoErr("EC_POINT_point2oct", uintptr(_err))
 +}
 +
@@ -16161,15 +15897,21 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", uintptr(_err))
 +}
 +
-+func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_CipherUpdate: *outl exceeds len(out)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", uintptr(_err))
 +}
 +
-+func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(outm) {
++		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(outm)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(outm))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", uintptr(_err))
 +}
 +
@@ -16179,25 +15921,34 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", uintptr(_err))
 +}
 +
-+func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", uintptr(_err))
 +}
 +
 +func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	if size != nil && int(*size) > len(md) {
++		panic("EVP_Digest: *size exceeds len(md)")
++	}
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
 +}
 +
-+func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte, len int) (int32, error) {
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestFinalXOF(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), C.size_t(len), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestFinalXOF(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), C.size_t(len(md)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestFinalXOF", uintptr(_err))
 +}
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
++	if s != nil && int(*s) > len(md) {
++		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
++	}
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", uintptr(_err))
@@ -16215,15 +15966,21 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", uintptr(_err))
 +}
 +
-+func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sigret) {
++		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(sigret)), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestSign", uintptr(_err))
 +}
 +
-+func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sig) {
++		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", uintptr(_err))
 +}
 +
@@ -16245,15 +16002,15 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", uintptr(_err))
 +}
 +
-+func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(sigret)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), C.size_t(len(sigret)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestVerify", uintptr(_err))
 +}
 +
-+func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", uintptr(_err))
 +}
 +
@@ -16263,9 +16020,12 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", uintptr(_err))
 +}
 +
-+func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", uintptr(_err))
 +}
 +
@@ -16275,9 +16035,12 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", uintptr(_err))
 +}
 +
-+func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(in)), C.int(inl), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", uintptr(_err))
 +}
 +
@@ -16303,9 +16066,9 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", uintptr(_err))
 +}
 +
-+func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_KDF_derive", uintptr(_err))
 +}
 +
@@ -16357,21 +16120,21 @@ index 00000000000000..059562f35df7b3
 +	return _ret, newMkcgoErr("EVP_MAC_fetch", uintptr(_err))
 +}
 +
-+func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(out)), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(outsize), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(len(out)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_MAC_final", uintptr(_err))
 +}
 +
-+func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), params, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_MAC_init", uintptr(_err))
 +}
 +
-+func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(data)), C.size_t(datalen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_MAC_update", uintptr(_err))
 +}
 +
@@ -16451,9 +16214,9 @@ index 00000000000000..059562f35df7b3
 +	return int32(C._mkcgo_EVP_MD_get_type(md))
 +}
 +
-+func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", uintptr(_err))
 +}
 +
@@ -16485,21 +16248,21 @@ index 00000000000000..059562f35df7b3
 +	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", uintptr(_err))
 +}
 +
-+func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, label, C.int(len), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(label))), C.int(len(label)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", uintptr(_err))
 +}
 +
-+func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", uintptr(_err))
 +}
 +
-+func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.int(arg2), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", uintptr(_err))
 +}
 +
@@ -16563,9 +16326,12 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate_init", uintptr(_err))
 +}
 +
-+func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", uintptr(_err))
 +}
 +
@@ -16575,9 +16341,12 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", uintptr(_err))
 +}
 +
-+func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
++	if keylen != nil && int(*keylen) > len(key) {
++		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(key)), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", uintptr(_err))
 +}
 +
@@ -16605,9 +16374,12 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate_init", uintptr(_err))
 +}
 +
-+func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", uintptr(_err))
 +}
 +
@@ -16669,21 +16441,27 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", uintptr(_err))
 +}
 +
-+func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf *byte, buf_len int, out_len *int) (int32, error) {
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_octet_string_param(pkey, (*C.char)(unsafe.Pointer(key_name)), (*C.uchar)(unsafe.Pointer(buf)), C.size_t(buf_len), (*C.size_t)(unsafe.Pointer(out_len)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_get_octet_string_param(pkey, (*C.char)(unsafe.Pointer(key_name)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), (*C.size_t)(unsafe.Pointer(out_len)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_get_octet_string_param", uintptr(_err))
 +}
 +
-+func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
++	if privlen != nil && int(*privlen) > len(priv) {
++		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(priv)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(priv))), (*C.size_t)(unsafe.Pointer(privlen)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", uintptr(_err))
 +}
 +
-+func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
++	if publen != nil && int(*publen) > len(pub) {
++		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), (*C.size_t)(unsafe.Pointer(len)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), (*C.size_t)(unsafe.Pointer(publen)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", uintptr(_err))
 +}
 +
@@ -16711,15 +16489,15 @@ index 00000000000000..059562f35df7b3
 +	return _ret, newMkcgoErr("EVP_PKEY_new", uintptr(_err))
 +}
 +
-+func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
 +	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", uintptr(_err))
 +}
 +
-+func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(key)), C.size_t(keylen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
 +	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", uintptr(_err))
 +}
 +
@@ -16753,15 +16531,18 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", uintptr(_err))
 +}
 +
-+func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(pub)), C.size_t(publen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), C.size_t(len(pub)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", uintptr(_err))
 +}
 +
-+func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(arg3)), C.size_t(arg4), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", uintptr(_err))
 +}
 +
@@ -16777,9 +16558,9 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", uintptr(_err))
 +}
 +
-+func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(sig)), C.size_t(siglen), (*C.uchar)(unsafe.Pointer(tbs)), C.size_t(tbslen), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", uintptr(_err))
 +}
 +
@@ -16971,21 +16752,24 @@ index 00000000000000..059562f35df7b3
 +	return _ret, newMkcgoErr("HMAC_CTX_new", uintptr(_err))
 +}
 +
-+func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("HMAC_Final: *arg2 exceeds len(arg1)")
++	}
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(arg1)), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("HMAC_Final", uintptr(_err))
 +}
 +
-+func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Init_ex(arg0, arg1, C.int(arg2), arg3, arg4, mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_HMAC_Init_ex(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), arg3, arg4, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("HMAC_Init_ex", uintptr(_err))
 +}
 +
-+func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(arg1)), C.size_t(arg2), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.size_t(len(arg1)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("HMAC_Update", uintptr(_err))
 +}
 +
@@ -17031,10 +16815,8 @@ index 00000000000000..059562f35df7b3
 +	C._mkcgo_OSSL_PARAM_BLD_free(bld)
 +}
 +
-+func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_new", uintptr(_err))
++func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
++	return C._mkcgo_OSSL_PARAM_BLD_new()
 +}
 +
 +func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
@@ -17049,15 +16831,15 @@ index 00000000000000..059562f35df7b3
 +	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", uintptr(_err))
 +}
 +
-+func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), buf, C.size_t(bsize), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", uintptr(_err))
 +}
 +
-+func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(buf)), C.size_t(bsize), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", uintptr(_err))
 +}
 +
@@ -17103,15 +16885,15 @@ index 00000000000000..059562f35df7b3
 +	return uint64(C._mkcgo_OpenSSL_version_num())
 +}
 +
-+func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
++func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(pass)), C.int(passlen), (*C.uchar)(unsafe.Pointer(salt)), C.int(saltlen), C.int(iter), digest, C.int(keylen), (*C.uchar)(unsafe.Pointer(out)), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(unsafe.SliceData(pass))), C.int(len(pass)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(salt))), C.int(len(salt)), C.int(iter), digest, C.int(len(out)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", uintptr(_err))
 +}
 +
-+func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
++func RAND_bytes(arg0 []byte) (int32, error) {
 +	var _err C.uintptr_t
-+	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(arg0)), C.int(arg1), mkcgoNoEscape(&_err))
++	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg0))), C.int(len(arg0)), mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("RAND_bytes", uintptr(_err))
 +}
 +
@@ -17154,63 +16936,12 @@ index 00000000000000..059562f35df7b3
 +	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
 +	return int32(_ret), newMkcgoErr("RSA_set0_key", uintptr(_err))
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-new file mode 100644
-index 00000000000000..677ef1d157a670
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo_go124.go
-@@ -0,0 +1,45 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package ossl
-+
-+/*
-+#cgo noescape _mkcgo_BIO_ctrl
-+#cgo nocallback _mkcgo_BIO_ctrl
-+#cgo noescape _mkcgo_EVP_CipherUpdate
-+#cgo nocallback _mkcgo_EVP_CipherUpdate
-+#cgo noescape _mkcgo_EVP_DecryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
-+#cgo noescape _mkcgo_EVP_DecryptUpdate
-+#cgo nocallback _mkcgo_EVP_DecryptUpdate
-+#cgo noescape _mkcgo_EVP_Digest
-+#cgo nocallback _mkcgo_EVP_Digest
-+#cgo noescape _mkcgo_EVP_DigestFinalXOF
-+#cgo nocallback _mkcgo_EVP_DigestFinalXOF
-+#cgo noescape _mkcgo_EVP_DigestFinal_ex
-+#cgo nocallback _mkcgo_EVP_DigestFinal_ex
-+#cgo noescape _mkcgo_EVP_DigestSign
-+#cgo nocallback _mkcgo_EVP_DigestSign
-+#cgo noescape _mkcgo_EVP_DigestSqueeze
-+#cgo nocallback _mkcgo_EVP_DigestSqueeze
-+#cgo noescape _mkcgo_EVP_DigestUpdate
-+#cgo nocallback _mkcgo_EVP_DigestUpdate
-+#cgo noescape _mkcgo_EVP_EncryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
-+#cgo noescape _mkcgo_EVP_EncryptUpdate
-+#cgo nocallback _mkcgo_EVP_EncryptUpdate
-+#cgo noescape _mkcgo_EVP_MD_CTX_get_params
-+#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
-+#cgo noescape _mkcgo_EVP_MD_CTX_set_params
-+#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
-+#cgo noescape _mkcgo_EVP_PKEY_derive
-+#cgo nocallback _mkcgo_EVP_PKEY_derive
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo noescape _mkcgo_RAND_bytes
-+#cgo nocallback _mkcgo_RAND_bytes
-+*/
-+import "C"
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..56b1f871c7fcbf
+index 00000000000000..1f3ab498325710
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2390 @@
+@@ -0,0 +1,2450 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo
@@ -17224,6 +16955,19 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _ = runtime.GOOS
 +
++var _mkcgoAlwaysFalseOssl bool
++var _mkcgoEscapeSinkOssl unsafe.Pointer
++
++// mkcgoEscapePtrOssl forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrOssl(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseOssl {
++		_mkcgoEscapeSinkOssl = p
++	}
++	return p
++}
++
 +type OPENSSL_INIT_SETTINGS_PTR unsafe.Pointer
 +type OSSL_LIB_CTX_PTR unsafe.Pointer
 +type OSSL_PROVIDER_PTR unsafe.Pointer
@@ -17285,25 +17029,25 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_BN_bin2bn uintptr
 +
-+func BN_bin2bn(arg0 *byte, arg1 int32, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg0)))), uintptr(len(arg0)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
 +	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", _err)
 +}
 +
 +var _mkcgo_BN_bn2binpad uintptr
 +
-+func BN_bn2binpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("BN_bn2binpad", _err)
 +}
 +
 +var _mkcgo_BN_bn2lebinpad uintptr
 +
-+func BN_bn2lebinpad(a BIGNUM_PTR, to *byte, tolen int32) (int32, error) {
++func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(unsafe.Pointer(to)), uintptr(tolen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("BN_bn2lebinpad", _err)
 +}
 +
@@ -17327,9 +17071,9 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_BN_lebin2bn uintptr
 +
-+func BN_lebin2bn(s *byte, len int32, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(unsafe.Pointer(s)), uintptr(len), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(s)))), uintptr(len(s)), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
 +	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", _err)
 +}
 +
@@ -17351,14 +17095,14 @@ index 00000000000000..56b1f871c7fcbf
 +var _mkcgo_CRYPTO_free uintptr
 +
 +func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
-+	syscallN(0, _mkcgo_CRYPTO_free, uintptr(str), uintptr(unsafe.Pointer(file)), uintptr(line))
++	syscallN(0, _mkcgo_CRYPTO_free, uintptr(str), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line))
 +}
 +
 +var _mkcgo_CRYPTO_malloc uintptr
 +
 +func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(unsafe.Pointer(file)), uintptr(line), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line), uintptr(unsafe.Pointer(&_err)))
 +	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", _err)
 +}
 +
@@ -17379,13 +17123,13 @@ index 00000000000000..56b1f871c7fcbf
 +var _mkcgo_DSA_get0_key uintptr
 +
 +func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_DSA_get0_key, uintptr(d), uintptr(unsafe.Pointer(pub_key)), uintptr(unsafe.Pointer(priv_key)))
++	syscallN(0, _mkcgo_DSA_get0_key, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pub_key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(priv_key))))
 +}
 +
 +var _mkcgo_DSA_get0_pqg uintptr
 +
 +func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_DSA_get0_pqg, uintptr(d), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)), uintptr(unsafe.Pointer(g)))
++	syscallN(0, _mkcgo_DSA_get0_pqg, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(g))))
 +}
 +
 +var _mkcgo_DSA_new uintptr
@@ -17525,17 +17269,17 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EC_POINT_oct2point uintptr
 +
-+func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf *byte, len int, ctx BN_CTX_PTR) (int32, error) {
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EC_POINT_oct2point", _err)
 +}
 +
 +var _mkcgo_EC_POINT_point2oct uintptr
 +
-+func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf *byte, len int, ctx BN_CTX_PTR) (int, error) {
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(unsafe.Pointer(buf)), uintptr(len), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
 +	return int(r0), newMkcgoErr("EC_POINT_point2oct", _err)
 +}
 +
@@ -17602,7 +17346,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", _err)
 +}
 +
@@ -17624,23 +17368,29 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_CipherUpdate uintptr
 +
-+func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_CipherUpdate: *outl exceeds len(out)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_CipherUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_DecryptFinal_ex uintptr
 +
-+func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm *byte, outl *int32) (int32, error) {
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(outm) {
++		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(outm)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(outm))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", _err)
 +}
 +
@@ -17648,21 +17398,27 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_DecryptUpdate uintptr
 +
-+func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", _err)
 +}
 +
 +var _mkcgo_EVP_Digest uintptr
 +
 +func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	if size != nil && int(*size) > len(md) {
++		panic("EVP_Digest: *size exceeds len(md)")
++	}
 +	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_Digest", _err)
@@ -17670,15 +17426,18 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_DigestFinalXOF uintptr
 +
-+func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte, len int) (int32, error) {
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinalXOF, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(len), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinalXOF, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(len(md)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestFinalXOF", _err)
 +}
 +
 +var _mkcgo_EVP_DigestFinal_ex uintptr
 +
 +func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
++	if s != nil && int(*s) > len(md) {
++		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
++	}
 +	var _err uintptr
 +	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", _err)
@@ -17702,17 +17461,23 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_DigestSign uintptr
 +
-+func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret *byte, siglen *int, tbs *byte, tbslen int) (int32, error) {
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sigret) {
++		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(sigret))), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(unsafe.SliceData(tbs))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestSign", _err)
 +}
 +
 +var _mkcgo_EVP_DigestSignFinal uintptr
 +
-+func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen *int) (int32, error) {
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sig) {
++		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(siglen))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", _err)
 +}
 +
@@ -17720,7 +17485,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
 +}
 +
@@ -17742,17 +17507,17 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_DigestVerify uintptr
 +
-+func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(unsafe.Pointer(sigret)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sigret)))), uintptr(len(sigret)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestVerify", _err)
 +}
 +
 +var _mkcgo_EVP_DigestVerifyFinal uintptr
 +
-+func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig *byte, siglen int) (int32, error) {
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", _err)
 +}
 +
@@ -17760,15 +17525,18 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(unsafe.Pointer(pctx)), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", _err)
 +}
 +
 +var _mkcgo_EVP_EncryptFinal_ex uintptr
 +
-+func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32) (int32, error) {
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", _err)
 +}
 +
@@ -17776,15 +17544,18 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(iv)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", _err)
 +}
 +
 +var _mkcgo_EVP_EncryptUpdate uintptr
 +
-+func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out *byte, outl *int32, in *byte, inl int32) (int32, error) {
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(in)), uintptr(inl), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", _err)
 +}
 +
@@ -17820,9 +17591,9 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_KDF_derive uintptr
 +
-+func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_KDF_derive", _err)
 +}
 +
@@ -17830,7 +17601,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", _err)
 +}
 +
@@ -17844,7 +17615,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_KEYMGMT_fetch, uintptr(libctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_KEYMGMT_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_KEYMGMT_PTR(r0), newMkcgoErr("EVP_KEYMGMT_fetch", _err)
 +}
 +
@@ -17888,31 +17659,31 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_final uintptr
 +
-+func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out *byte, outl *int, outsize int) (int32, error) {
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(outl)), uintptr(outsize), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_MAC_final", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_init uintptr
 +
-+func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key *byte, keylen int, params OSSL_PARAM_PTR) (int32, error) {
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_MAC_init", _err)
 +}
 +
 +var _mkcgo_EVP_MAC_update uintptr
 +
-+func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data *byte, datalen int) (int32, error) {
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(data)), uintptr(datalen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_MAC_update", _err)
 +}
 +
@@ -17982,7 +17753,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", _err)
 +}
 +
@@ -18029,9 +17800,9 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
 +
-+func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
 +}
 +
@@ -18061,7 +17832,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(unsafe.Pointer(propquery)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(propquery))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
 +}
 +
@@ -18075,25 +17846,25 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
 +
-+func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label unsafe.Pointer, len int32) (int32, error) {
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(label), uintptr(len), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(label)))), uintptr(len(label)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
 +
-+func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
 +
-+func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 int32) (int32, error) {
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
 +}
 +
@@ -18167,7 +17938,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate, uintptr(ctx), uintptr(unsafe.Pointer(genkey)), uintptr(unsafe.Pointer(genkeylen)), uintptr(unsafe.Pointer(wrappedkey)), uintptr(wrappedkeylen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(wrappedkeylen), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate", _err)
 +}
 +
@@ -18181,9 +17952,12 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_decrypt uintptr
 +
-+func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", _err)
 +}
 +
@@ -18197,9 +17971,12 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_derive uintptr
 +
-+func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key *byte, keylen *int) (int32, error) {
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
++	if keylen != nil && int(*keylen) > len(key) {
++		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_derive", _err)
 +}
 +
@@ -18223,7 +18000,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate, uintptr(ctx), uintptr(unsafe.Pointer(wrappedkey)), uintptr(unsafe.Pointer(wrappedkeylen)), uintptr(unsafe.Pointer(genkey)), uintptr(unsafe.Pointer(genkeylen)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate", _err)
 +}
 +
@@ -18237,9 +18014,12 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_encrypt uintptr
 +
-+func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", _err)
 +}
 +
@@ -18261,7 +18041,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(unsafe.Pointer(pkey)), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pkey))), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", _err)
 +}
 +
@@ -18301,7 +18081,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(ppub)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppub))), uintptr(unsafe.Pointer(&_err)))
 +	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
 +}
 +
@@ -18323,25 +18103,31 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_get_octet_string_param uintptr
 +
-+func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf *byte, buf_len int, out_len *int) (int32, error) {
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_octet_string_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(buf)), uintptr(buf_len), uintptr(unsafe.Pointer(out_len)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_octet_string_param, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key_name))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(out_len))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_get_octet_string_param", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
 +
-+func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv *byte, len *int) (int32, error) {
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
++	if privlen != nil && int(*privlen) > len(priv) {
++		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(priv)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(priv))), uintptr(unsafe.Pointer(privlen)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
 +
-+func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub *byte, len *int) (int32, error) {
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
++	if publen != nil && int(*publen) > len(pub) {
++		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(unsafe.Pointer(len)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(pub))), uintptr(unsafe.Pointer(publen)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
 +}
 +
@@ -18379,17 +18165,17 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
 +
-+func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
 +
-+func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key *byte, keylen int) (EVP_PKEY_PTR, error) {
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(unsafe.Pointer(key)), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
 +}
 +
@@ -18397,7 +18183,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppkey))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", _err)
 +}
 +
@@ -18435,17 +18221,20 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
 +
-+func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub *byte, publen int) (int32, error) {
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(unsafe.Pointer(pub)), uintptr(publen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pub)))), uintptr(len(pub)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
 +}
 +
 +var _mkcgo_EVP_PKEY_sign uintptr
 +
-+func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 *byte, arg2 *int, arg3 *byte, arg4 int) (int32, error) {
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(arg3)), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_sign", _err)
 +}
 +
@@ -18467,9 +18256,9 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_EVP_PKEY_verify uintptr
 +
-+func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig *byte, siglen int, tbs *byte, tbslen int) (int32, error) {
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(unsafe.Pointer(sig)), uintptr(siglen), uintptr(unsafe.Pointer(tbs)), uintptr(tbslen), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("EVP_PKEY_verify", _err)
 +}
 +
@@ -18485,7 +18274,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(unsafe.Pointer(algorithm)), uintptr(unsafe.Pointer(properties)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
 +	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", _err)
 +}
 +
@@ -18784,25 +18573,28 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_HMAC_Final uintptr
 +
-+func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 *uint32) (int32, error) {
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("HMAC_Final: *arg2 exceeds len(arg1)")
++	}
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("HMAC_Final", _err)
 +}
 +
 +var _mkcgo_HMAC_Init_ex uintptr
 +
-+func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 unsafe.Pointer, arg2 int32, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("HMAC_Init_ex", _err)
 +}
 +
 +var _mkcgo_HMAC_Update uintptr
 +
-+func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 *byte, arg2 int) (int32, error) {
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(arg1)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("HMAC_Update", _err)
 +}
 +
@@ -18868,17 +18660,16 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_OSSL_PARAM_BLD_new uintptr
 +
-+func OSSL_PARAM_BLD_new() (OSSL_PARAM_BLD_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_new, uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_BLD_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_new", _err)
++func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
++	r0, _ := syscallN(0, _mkcgo_OSSL_PARAM_BLD_new)
++	return OSSL_PARAM_BLD_PTR(r0)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
 +
 +func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
 +}
 +
@@ -18886,23 +18677,23 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(num), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(num), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
 +
-+func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf unsafe.Pointer, bsize int) (int32, error) {
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(buf), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
 +}
 +
 +var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
 +
-+func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf *byte, bsize int) (int32, error) {
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(buf)), uintptr(bsize), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
 +}
 +
@@ -18924,14 +18715,14 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(unsafe.Pointer(key)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(unsafe.Pointer(&_err)))
 +	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", _err)
 +}
 +
 +var _mkcgo_OSSL_PROVIDER_available uintptr
 +
 +func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
-+	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(unsafe.Pointer(name)))
++	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))))
 +	return int32(r0)
 +}
 +
@@ -18946,7 +18737,7 @@ index 00000000000000..56b1f871c7fcbf
 +
 +func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(unsafe.Pointer(name)), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
 +	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", _err)
 +}
 +
@@ -18970,17 +18761,17 @@ index 00000000000000..56b1f871c7fcbf
 +
 +var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
 +
-+func PKCS5_PBKDF2_HMAC(pass *byte, passlen int32, salt *byte, saltlen int32, iter int32, digest EVP_MD_PTR, keylen int32, out *byte) (int32, error) {
++func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(unsafe.Pointer(pass)), uintptr(passlen), uintptr(unsafe.Pointer(salt)), uintptr(saltlen), uintptr(iter), uintptr(digest), uintptr(keylen), uintptr(unsafe.Pointer(out)), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pass)))), uintptr(len(pass)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(iter), uintptr(digest), uintptr(len(out)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(out)))), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
 +}
 +
 +var _mkcgo_RAND_bytes uintptr
 +
-+func RAND_bytes(arg0 *byte, arg1 int32) (int32, error) {
++func RAND_bytes(arg0 []byte) (int32, error) {
 +	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(arg0)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(unsafe.SliceData(arg0))), uintptr(len(arg0)), uintptr(unsafe.Pointer(&_err)))
 +	return int32(r0), newMkcgoErr("RAND_bytes", _err)
 +}
 +
@@ -18993,19 +18784,19 @@ index 00000000000000..56b1f871c7fcbf
 +var _mkcgo_RSA_get0_crt_params uintptr
 +
 +func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(unsafe.Pointer(dmp1)), uintptr(unsafe.Pointer(dmq1)), uintptr(unsafe.Pointer(iqmp)))
++	syscallN(0, _mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmp1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmq1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iqmp))))
 +}
 +
 +var _mkcgo_RSA_get0_factors uintptr
 +
 +func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(unsafe.Pointer(p)), uintptr(unsafe.Pointer(q)))
++	syscallN(0, _mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))))
 +}
 +
 +var _mkcgo_RSA_get0_key uintptr
 +
 +func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_key, uintptr(rsa), uintptr(unsafe.Pointer(n)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(d)))
++	syscallN(0, _mkcgo_RSA_get0_key, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(n))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(e))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(d))))
 +}
 +
 +var _mkcgo_RSA_new uintptr
@@ -19603,10 +19394,10 @@ index 00000000000000..56b1f871c7fcbf
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 new file mode 100644
-index 00000000000000..38ed8f5d69d946
+index 00000000000000..17444fbf258584
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
-@@ -0,0 +1,371 @@
+@@ -0,0 +1,365 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -19907,7 +19698,7 @@ index 00000000000000..38ed8f5d69d946
 +	}
 +	defer ossl.EVP_PKEY_free(pkey)
 +
-+	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_KEM_SEED.ptr(), base(seed), seedSizeMLKEM, nil)
++	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_KEM_SEED.ptr(), seed, nil)
 +	return err
 +}
 +
@@ -19917,10 +19708,7 @@ index 00000000000000..38ed8f5d69d946
 +		return nil, errors.New("mlkem: invalid seed size")
 +	}
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +
 +	bld.addOctetString(_OSSL_PKEY_PARAM_ML_KEM_SEED, seed)
@@ -19936,10 +19724,7 @@ index 00000000000000..38ed8f5d69d946
 +
 +// createMLKEMPublicKey creates an ML-KEM public key from encoded bytes.
 +func createMLKEMPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +
 +	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
@@ -19980,10 +19765,10 @@ index 00000000000000..38ed8f5d69d946
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..30ed1f38392629
+index 00000000000000..43fd4a209ab821
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,253 @@
+@@ -0,0 +1,244 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -20103,21 +19888,12 @@ index 00000000000000..30ed1f38392629
 +	return osslsetup.SetFIPS(enable)
 +}
 +
-+var zero byte
-+
-+// baseNeverEmpty returns the address of the underlying array in b.
-+// If b has zero length, it returns a pointer to a zero byte.
-+func baseNeverEmpty(b []byte) *byte {
-+	if len(b) == 0 {
-+		return &zero
++// sliceNeverNil returns b if non-nil, and a non-nil zero-length slice otherwise.
++func sliceNeverNil(b []byte) []byte {
++	if b == nil {
++		return []byte{}
 +	}
-+	return unsafe.SliceData(b)
-+}
-+
-+// pbase returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func pbase(b []byte) unsafe.Pointer {
-+	return unsafe.Pointer(base(b))
++	return b
 +}
 +
 +// base returns the address of the underlying array in b,
@@ -20193,7 +19969,7 @@ index 00000000000000..30ed1f38392629
 +	}
 +	// Limbs are always ordered in LSB first, so we can safely apply
 +	// BN_lebin2bn regardless of host endianness.
-+	bn, err := ossl.BN_lebin2bn(wbase(x), int32(len(x)*wordBytes), nil)
++	bn, err := ossl.BN_lebin2bn(unsafe.Slice(wbase(x), len(x)*wordBytes), nil)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -20208,7 +19984,7 @@ index 00000000000000..30ed1f38392629
 +	// Limbs are always ordered in LSB first, so we can safely apply
 +	// BN_bn2lebinpad regardless of host endianness.
 +	x := make(BigInt, ossl.BN_num_bits(bn))
-+	if _, err := ossl.BN_bn2lebinpad(bn, wbase(x), int32(len(x)*wordBytes)); err != nil {
++	if _, err := ossl.BN_bn2lebinpad(bn, unsafe.Slice(wbase(x), len(x)*wordBytes)); err != nil {
 +		panic(err)
 +	}
 +	if isBigEndian() {
@@ -20221,7 +19997,7 @@ index 00000000000000..30ed1f38392629
 +// it at to, padding with zeroes if necessary. If len(to) is not large enough to
 +// hold the result, an error is returned.
 +func bnToBinPad(bn ossl.BIGNUM_PTR, to []byte) error {
-+	_, err := ossl.BN_bn2binpad(bn, base(to), int32(len(to)))
++	_, err := ossl.BN_bn2binpad(bn, to)
 +	return err
 +}
 +
@@ -20877,16 +20653,17 @@ index 00000000000000..fd1cad5692a0bc
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
 new file mode 100644
-index 00000000000000..3bdc8037c0c9af
+index 00000000000000..aae278e743a73a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-@@ -0,0 +1,184 @@
+@@ -0,0 +1,180 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
 +
 +import (
 +	"runtime"
++	"unsafe"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
@@ -20918,17 +20695,14 @@ index 00000000000000..3bdc8037c0c9af
 +}
 +
 +// newParamBuilder creates a new paramBuilder.
-+func newParamBuilder() (*paramBuilder, error) {
-+	bld, err := ossl.OSSL_PARAM_BLD_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	pb := &paramBuilder{
-+		bld:      bld,
-+		bnToFree: make([]bnParam, 0, 8), // the maximum known number of BIGNUMs to free are 8 for RSA
++// [paramBuilder.finalize] must be called to free the builder.
++func newParamBuilder() *paramBuilder {
++	bld := ossl.OSSL_PARAM_BLD_new()
++	if bld == nil {
++		// If this happens it indicates an issue allocating memory.
++		panic("openssl: failed to create OSSL_PARAM_BLD")
 +	}
-+	runtime.SetFinalizer(pb, (*paramBuilder).finalize)
-+	return pb, nil
++	return &paramBuilder{bld: bld}
 +}
 +
 +// finalize frees the builder.
@@ -20985,7 +20759,10 @@ index 00000000000000..3bdc8037c0c9af
 +		return
 +	}
 +	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
-+	if _, err := ossl.OSSL_PARAM_BLD_push_utf8_string(b.bld, name.ptr(), value, size); err != nil {
++	if size == 0 {
++		size = cStringLen(value)
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_utf8_string(b.bld, name.ptr(), unsafe.Slice(value, size)); err != nil {
 +		b.err = addParamError{name.str(), err}
 +	}
 +}
@@ -20999,11 +20776,22 @@ index 00000000000000..3bdc8037c0c9af
 +	if len(value) != 0 {
 +		b.pinner.Pin(&value[0])
 +	}
-+	if _, err := ossl.OSSL_PARAM_BLD_push_octet_string(b.bld, name.ptr(), pbase(value), len(value)); err != nil {
++	if _, err := ossl.OSSL_PARAM_BLD_push_octet_string(b.bld, name.ptr(), value); err != nil {
 +		b.err = addParamError{name.str(), err}
 +	}
 +}
 +
++func cStringLen(ptr *byte) int {
++	if ptr == nil {
++		return 0
++	}
++	for n := 0; ; n++ {
++		if *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(n))) == 0 {
++			return n
++		}
++	}
++}
++
 +// addInt32 adds an int32 to the builder.
 +func (b *paramBuilder) addInt32(name cString, value int32) {
 +	if !b.check() {
@@ -21024,27 +20812,6 @@ index 00000000000000..3bdc8037c0c9af
 +	}
 +}
 +
-+// addBin adds a byte slice to the builder.
-+// The slice is converted to a BIGNUM using BN_bin2bn and freed when the builder is finalized.
-+// If private is true, the BIGNUM will be cleared with BN_clear_free,
-+// otherwise it will be freed with BN_free.
-+func (b *paramBuilder) addBin(name cString, value []byte, private bool) {
-+	if !b.check() {
-+		return
-+	}
-+	if len(value) == 0 {
-+		// Nothing to do.
-+		return
-+	}
-+	bn, err := ossl.BN_bin2bn(base(value), int32(len(value)), nil)
-+	if err != nil {
-+		b.err = err
-+		return
-+	}
-+	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
-+	b.addBN(name, bn)
-+}
-+
 +// addBigInt adds a BigInt to the builder.
 +// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
 +// If private is true, the BIGNUM will be cleared with BN_clear_free,
@@ -21062,12 +20829,17 @@ index 00000000000000..3bdc8037c0c9af
 +		b.err = err
 +		return
 +	}
++	if b.bnToFree == nil {
++		// Preallocate the slice to avoid growing it later, which would cause allocations and copies.
++		// The maximum known number of BIGNUMs to free are 8 for RSA, so we use that as the capacity.
++		b.bnToFree = make([]bnParam, 0, 8)
++	}
 +	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
 +	b.addBN(name, bn)
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..c12c0119e99767
+index 00000000000000..5f87281d8746a3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 @@ -0,0 +1,54 @@
@@ -21119,7 +20891,7 @@ index 00000000000000..c12c0119e99767
 +		return nil, errors.New("unsupported hash function")
 +	}
 +	out := make([]byte, keyLen)
-+	_, err = ossl.PKCS5_PBKDF2_HMAC(base(password), int32(len(password)), base(salt), int32(len(salt)), int32(iter), md, int32(keyLen), base(out))
++	_, err = ossl.PKCS5_PBKDF2_HMAC(password, salt, int32(iter), md, out)
 +	if err != nil {
 +		return nil, err
 +	}
@@ -21708,7 +21480,7 @@ index 00000000000000..bdba34f1378e9c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 new file mode 100644
-index 00000000000000..bcc58f2e42ec86
+index 00000000000000..963c3ad733dcf0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
 @@ -0,0 +1,21 @@
@@ -21726,7 +21498,7 @@ index 00000000000000..bcc58f2e42ec86
 +	}
 +	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
 +	// We check it even so.
-+	if _, err := ossl.RAND_bytes(base(b), int32(len(b))); err != nil {
++	if _, err := ossl.RAND_bytes(b); err != nil {
 +		return 0, err
 +	}
 +	return len(b), nil
@@ -21735,7 +21507,7 @@ index 00000000000000..bcc58f2e42ec86
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 new file mode 100644
-index 00000000000000..25fa08d0152e81
+index 00000000000000..28e846829f29ea
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 @@ -0,0 +1,68 @@
@@ -21799,7 +21571,7 @@ index 00000000000000..25fa08d0152e81
 +	// which is what crypto/rc4 does.
 +	_ = dst[len(src)-1]
 +	var outLen int32
-+	if _, err := ossl.EVP_EncryptUpdate(c.ctx, base(dst), &outLen, base(src), int32(len(src))); err != nil {
++	if _, err := ossl.EVP_EncryptUpdate(c.ctx, dst, &outLen, src); err != nil {
 +		panic("crypto/rc4: " + err.Error())
 +	}
 +	if int(outLen) != len(src) {
@@ -21809,10 +21581,10 @@ index 00000000000000..25fa08d0152e81
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..935a3962b9d00f
+index 00000000000000..2aa773d9592e06
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,714 @@
+@@ -0,0 +1,711 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -22139,10 +21911,7 @@ index 00000000000000..935a3962b9d00f
 +}
 +
 +func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return nil, err
-+	}
++	bld := newParamBuilder()
 +	defer bld.finalize()
 +
 +	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
@@ -22199,7 +21968,7 @@ index 00000000000000..935a3962b9d00f
 +	// So we need to try to encrypt something to be sure.
 +	in := []byte("test")
 +	var outLen int
-+	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
 +		return false
 +	}
 +	return true
@@ -22237,7 +22006,7 @@ index 00000000000000..935a3962b9d00f
 +	}
 +	in := make([]byte, size, maxHashSize)
 +	var outLen int
-+	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
 +		return false
 +	}
 +	return true
@@ -22276,7 +22045,7 @@ index 00000000000000..935a3962b9d00f
 +	// So we need to try to sign something to be sure.
 +	in := make([]byte, ch.Size(), maxHashSize)
 +	var outLen int
-+	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
 +		return false
 +	}
 +	return true
@@ -22333,7 +22102,7 @@ index 00000000000000..935a3962b9d00f
 +	// So we need to try to encrypt something to be sure.
 +	in := []byte("test")
 +	var outLen int
-+	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, &in[0], len(in)); err != nil {
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
 +		return false
 +	}
 +	return true
@@ -22502,7 +22271,7 @@ index 00000000000000..935a3962b9d00f
 +
 +	// Convert []byte to BigInt using BN_bin2bn and bnToBig
 +	bytesToBigInt := func(b []byte) BigInt {
-+		bn, err := ossl.BN_bin2bn(base(b), int32(len(b)), nil)
++		bn, err := ossl.BN_bin2bn(b, nil)
 +		if err != nil {
 +			panic(err)
 +		}
@@ -22529,10 +22298,10 @@ index 00000000000000..935a3962b9d00f
 +})
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..57930900c2bfa8
+index 00000000000000..38fea6de0c33c4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-@@ -0,0 +1,158 @@
+@@ -0,0 +1,156 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -22632,7 +22401,7 @@ index 00000000000000..57930900c2bfa8
 +		return err
 +	}
 +	outLen := len(result)
-+	if _, err := ossl.EVP_PKEY_derive(ctx, base(result), &outLen); err != nil {
++	if _, err := ossl.EVP_PKEY_derive(ctx, result, &outLen); err != nil {
 +		return err
 +	}
 +	// The Go standard library expects TLS1PRF to return the requested number of bytes,
@@ -22672,10 +22441,8 @@ index 00000000000000..57930900c2bfa8
 +	}
 +	defer ossl.EVP_KDF_CTX_free(ctx)
 +
-+	bld, err := newParamBuilder()
-+	if err != nil {
-+		return err
-+	}
++	bld := newParamBuilder()
++	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
 +	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
@@ -22686,7 +22453,7 @@ index 00000000000000..57930900c2bfa8
 +	}
 +	defer ossl.OSSL_PARAM_free(params)
 +
-+	if _, err := ossl.EVP_KDF_derive(ctx, base(result), len(result), params); err != nil {
++	if _, err := ossl.EVP_KDF_derive(ctx, result, params); err != nil {
 +		return err
 +	}
 +	return nil
@@ -22864,7 +22631,7 @@ index 00000000000000..e1b9ee1d005406
 +//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -nocgo -package commoncrypto --noerrors shims.h
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
 new file mode 100644
-index 00000000000000..b186cf8723ed20
+index 00000000000000..de1f9bc059aa43
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
 @@ -0,0 +1,72 @@
@@ -22933,9 +22700,9 @@ index 00000000000000..b186cf8723ed20
 +
 +CCCryptorStatus CCCryptorCreate(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(key, keyLength), slice(iv)));
 +CCCryptorStatus CCCryptorRelease(CCCryptorRef cryptorRef) __attribute__((framework(System, B)));
-+CCCryptorStatus CCCryptorUpdate(CCCryptorRef cryptorRef, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((framework(System, B), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCCryptorUpdate(CCCryptorRef cryptorRef, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
 +CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm algorithm, const char *password, size_t passwordLen, const uint8_t *salt, size_t saltLen, CCPseudoRandomAlgorithm prf, unsigned rounds, uint8_t *derivedKey, size_t derivedKeyLen) __attribute__((framework(System, B), slice(password, passwordLen), slice(salt, saltLen), slice(derivedKey, derivedKeyLen)));
-+CCCryptorStatus CCCrypt(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((framework(System, B), slice(key, keyLength), slice(iv), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCCrypt(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(key, keyLength), slice(iv), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
 +CCCryptorStatus CCCryptorCreateWithMode(CCOperation op, CCMode mode, CCAlgorithm alg, CCPadding padding, const void *iv, const void *key, size_t keyLength, const void *tweak, size_t tweakLength, int numRounds, CCModeOptions options, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(iv), slice(key, keyLength), slice(tweak, tweakLength)));
 +CCCryptorStatus CCCryptorReset(CCCryptorRef cryptorRef, const void *iv) __attribute__((framework(System, B), slice(iv)));
 +
@@ -23147,10 +22914,10 @@ index 00000000000000..016e73758ac4e0
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
 new file mode 100644
-index 00000000000000..968a0d0fccd10f
+index 00000000000000..a722bc56d9dab4
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
-@@ -0,0 +1,74 @@
+@@ -0,0 +1,76 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23168,6 +22935,7 @@ index 00000000000000..968a0d0fccd10f
 +#ifndef GOARCH_mips64le
 +#ifndef GOARCH_ppc64
 +#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
 +#ifndef GOARCH_sparc64
 +#define _GOPTRSIZE 4
 +#endif
@@ -23179,6 +22947,7 @@ index 00000000000000..968a0d0fccd10f
 +#endif
 +#endif
 +#endif
++#endif
 +
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
@@ -23227,10 +22996,10 @@ index 00000000000000..968a0d0fccd10f
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
 new file mode 100644
-index 00000000000000..f569456a1e6010
+index 00000000000000..a774ad9a32ae86
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
-@@ -0,0 +1,60 @@
+@@ -0,0 +1,64 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23243,6 +23012,10 @@ index 00000000000000..f569456a1e6010
 +#cgo darwin LDFLAGS: -framework System
 +
 +#include "zcommoncrypto.h"
++#cgo noescape _mkcgo_CCCrypt
++#cgo nocallback _mkcgo_CCCrypt
++#cgo noescape _mkcgo_CCCryptorUpdate
++#cgo nocallback _mkcgo_CCCryptorUpdate
 +*/
 +import "C"
 +import "unsafe"
@@ -23291,29 +23064,12 @@ index 00000000000000..f569456a1e6010
 +func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
 +	return C._mkcgo_CCKeyDerivationPBKDF(algorithm, (*C.char)(unsafe.Pointer(unsafe.SliceData(password))), C.size_t(len(password)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), prf, C.uint(rounds), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(derivedKey))), C.size_t(len(derivedKey)))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
-new file mode 100644
-index 00000000000000..c4cb78b4888fa5
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_go124.go
-@@ -0,0 +1,11 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package commoncrypto
-+
-+/*
-+ */
-+import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
 new file mode 100644
-index 00000000000000..9de8feb80b0276
+index 00000000000000..b17312278da948
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
-@@ -0,0 +1,89 @@
+@@ -0,0 +1,102 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -23330,6 +23086,19 @@ index 00000000000000..9de8feb80b0276
 +
 +var _ = runtime.GOOS
 +
++var _mkcgoAlwaysFalseCommoncrypto bool
++var _mkcgoEscapeSinkCommoncrypto unsafe.Pointer
++
++// mkcgoEscapePtrCommoncrypto forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrCommoncrypto(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseCommoncrypto {
++		_mkcgoEscapeSinkCommoncrypto = p
++	}
++	return p
++}
++
 +type CCCryptorRef unsafe.Pointer
 +type CCModeOptions = uint32
 +
@@ -23360,7 +23129,7 @@ index 00000000000000..9de8feb80b0276
 +var _mkcgo_CCCryptorCreate_trampoline_addr uintptr
 +
 +func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorCreate_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(cryptorRef)))
++	r0, _ := syscallN(0, _mkcgo_CCCryptorCreate_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
 +	return CCCryptorStatus(r0)
 +}
 +
@@ -23371,7 +23140,7 @@ index 00000000000000..9de8feb80b0276
 +	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
 +		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds)<<32|uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
 +	} else {
-+		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds), uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
++		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(tweak)))), uintptr(len(tweak)), uintptr(numRounds), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
 +	}
 +	return CCCryptorStatus(r0)
 +}
@@ -23386,7 +23155,7 @@ index 00000000000000..9de8feb80b0276
 +var _mkcgo_CCCryptorReset_trampoline_addr uintptr
 +
 +func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorReset_trampoline_addr, uintptr(cryptorRef), uintptr(unsafe.Pointer(unsafe.SliceData(iv))))
++	r0, _ := syscallN(0, _mkcgo_CCCryptorReset_trampoline_addr, uintptr(cryptorRef), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))))
 +	return CCCryptorStatus(r0)
 +}
 +
@@ -23400,7 +23169,7 @@ index 00000000000000..9de8feb80b0276
 +var _mkcgo_CCKeyDerivationPBKDF_trampoline_addr uintptr
 +
 +func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCKeyDerivationPBKDF_trampoline_addr, uintptr(algorithm), uintptr(unsafe.Pointer(unsafe.SliceData(password))), uintptr(len(password)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(prf), uintptr(rounds), uintptr(unsafe.Pointer(unsafe.SliceData(derivedKey))), uintptr(len(derivedKey)))
++	r0, _ := syscallN(0, _mkcgo_CCKeyDerivationPBKDF_trampoline_addr, uintptr(algorithm), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(password)))), uintptr(len(password)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(prf), uintptr(rounds), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(derivedKey)))), uintptr(len(derivedKey)))
 +	return CCCryptorStatus(r0)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
@@ -25470,7 +25239,7 @@ index 00000000000000..e134697ed96de7
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 new file mode 100644
-index 00000000000000..81a303d5e49a5a
+index 00000000000000..d9ad79d513f910
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 @@ -0,0 +1,84 @@
@@ -25490,52 +25259,52 @@ index 00000000000000..81a303d5e49a5a
 +#include <stdint.h>
 +
 +// AES GCM encryption and decryption
-+int64_t go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+int64_t go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++int64_t go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++int64_t go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
 +// ChaChaPoly encryption and decryption
-+int64_t go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+int64_t go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++int64_t go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++int64_t go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
 +// Generates an Ed25519 keypair.
 +// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
-+void go_generateKeyEd25519(uint8_t *key) __attribute__((static, slice(key)));
-+int64_t go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((static, slice(key), slice(seed)));
-+int64_t go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((static, slice(key), slice(pub)));
-+int64_t go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
-+int64_t go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((static, slice(publicKey), slice(message, messageLength), slice(sig)));
++void go_generateKeyEd25519(uint8_t *key) __attribute__((noescape, nocallback, static, slice(key)));
++int64_t go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((noescape, nocallback, static, slice(key), slice(seed)));
++int64_t go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((noescape, nocallback, static, slice(key), slice(pub)));
++int64_t go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((noescape, nocallback, static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
++int64_t go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((noescape, nocallback, static, slice(publicKey), slice(message, messageLength), slice(sig)));
 +
 +// HKDF key derivation
-+int64_t go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
-+int64_t go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++int64_t go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((noescape, nocallback, static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
++int64_t go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((noescape, nocallback, static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
 +
-+void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int64_t keyLength) __attribute__((nocallback, static, slice(key, keyLength)));
-+void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((nocallback, static));
++void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int64_t keyLength) __attribute__((noescape, nocallback, static, slice(key, keyLength)));
++void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((noescape, nocallback, static));
 +void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
-+void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((static));
++void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
 +
 +void go_MD5(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA1(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+int64_t go_supportsSHA3() __attribute__((nocallback, static));
++int64_t go_supportsSHA3() __attribute__((noescape, nocallback, static));
 +void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +
-+void *go_hashNew(int32_t hashAlgorithm) __attribute__((nocallback, static));
++void *go_hashNew(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
 +void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
-+void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
-+int64_t go_hashSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
-+int64_t go_hashBlockSize(int32_t hashAlgorithm) __attribute__((nocallback, static));
-+void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
-+void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((nocallback, static));
++void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++int64_t go_hashSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++int64_t go_hashBlockSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
 +
 +// ML-KEM (Post-quantum key encapsulation mechanism)
-+int64_t go_supportsMLKEM() __attribute__((nocallback, static));
++int64_t go_supportsMLKEM() __attribute__((noescape, nocallback, static));
 +int64_t go_generateKeyMLKEM768(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
 +int64_t go_generateKeyMLKEM1024(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
 +int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, int64_t seedLen, uint8_t *encapKey, int64_t encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
@@ -25921,10 +25690,10 @@ index 00000000000000..d738d7278076ec
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..4f1714d6126e3d
+index 00000000000000..85d38bd6d881c3
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,332 @@
+@@ -0,0 +1,334 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25942,6 +25711,7 @@ index 00000000000000..4f1714d6126e3d
 +#ifndef GOARCH_mips64le
 +#ifndef GOARCH_ppc64
 +#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
 +#ifndef GOARCH_sparc64
 +#define _GOPTRSIZE 4
 +#endif
@@ -25953,6 +25723,7 @@ index 00000000000000..4f1714d6126e3d
 +#endif
 +#endif
 +#endif
++#endif
 +
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
@@ -26259,10 +26030,10 @@ index 00000000000000..4f1714d6126e3d
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..366dcf4c7b43dd
+index 00000000000000..a5612fded9b225
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,220 @@
+@@ -0,0 +1,320 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26274,6 +26045,106 @@ index 00000000000000..366dcf4c7b43dd
 +#cgo CFLAGS: -Wno-attributes
 +
 +#include "zcryptokit.h"
++#cgo noescape _mkcgo_go_MD5
++#cgo nocallback _mkcgo_go_MD5
++#cgo noescape _mkcgo_go_SHA1
++#cgo nocallback _mkcgo_go_SHA1
++#cgo noescape _mkcgo_go_SHA256
++#cgo nocallback _mkcgo_go_SHA256
++#cgo noescape _mkcgo_go_SHA384
++#cgo nocallback _mkcgo_go_SHA384
++#cgo noescape _mkcgo_go_SHA3_256
++#cgo nocallback _mkcgo_go_SHA3_256
++#cgo noescape _mkcgo_go_SHA3_384
++#cgo nocallback _mkcgo_go_SHA3_384
++#cgo noescape _mkcgo_go_SHA3_512
++#cgo nocallback _mkcgo_go_SHA3_512
++#cgo noescape _mkcgo_go_SHA512
++#cgo nocallback _mkcgo_go_SHA512
++#cgo noescape _mkcgo_go_copyHMAC
++#cgo nocallback _mkcgo_go_copyHMAC
++#cgo noescape _mkcgo_go_decapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_decapsulateMLKEM1024
++#cgo noescape _mkcgo_go_decapsulateMLKEM768
++#cgo nocallback _mkcgo_go_decapsulateMLKEM768
++#cgo noescape _mkcgo_go_decryptAESGCM
++#cgo nocallback _mkcgo_go_decryptAESGCM
++#cgo noescape _mkcgo_go_decryptChaChaPoly
++#cgo nocallback _mkcgo_go_decryptChaChaPoly
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo noescape _mkcgo_go_ecdhSharedSecret
++#cgo nocallback _mkcgo_go_ecdhSharedSecret
++#cgo noescape _mkcgo_go_ecdsaSign
++#cgo nocallback _mkcgo_go_ecdsaSign
++#cgo noescape _mkcgo_go_ecdsaVerify
++#cgo nocallback _mkcgo_go_ecdsaVerify
++#cgo noescape _mkcgo_go_encapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
++#cgo noescape _mkcgo_go_encapsulateMLKEM768
++#cgo nocallback _mkcgo_go_encapsulateMLKEM768
++#cgo noescape _mkcgo_go_encryptAESGCM
++#cgo nocallback _mkcgo_go_encryptAESGCM
++#cgo noescape _mkcgo_go_encryptChaChaPoly
++#cgo nocallback _mkcgo_go_encryptChaChaPoly
++#cgo noescape _mkcgo_go_expandHKDF
++#cgo nocallback _mkcgo_go_expandHKDF
++#cgo noescape _mkcgo_go_extractHKDF
++#cgo nocallback _mkcgo_go_extractHKDF
++#cgo noescape _mkcgo_go_finalizeHMAC
++#cgo nocallback _mkcgo_go_finalizeHMAC
++#cgo noescape _mkcgo_go_freeHMAC
++#cgo nocallback _mkcgo_go_freeHMAC
++#cgo noescape _mkcgo_go_generateKeyECDH
++#cgo nocallback _mkcgo_go_generateKeyECDH
++#cgo noescape _mkcgo_go_generateKeyECDSA
++#cgo nocallback _mkcgo_go_generateKeyECDSA
++#cgo noescape _mkcgo_go_generateKeyEd25519
++#cgo nocallback _mkcgo_go_generateKeyEd25519
++#cgo noescape _mkcgo_go_generateKeyMLKEM1024
++#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
++#cgo noescape _mkcgo_go_generateKeyMLKEM768
++#cgo nocallback _mkcgo_go_generateKeyMLKEM768
++#cgo noescape _mkcgo_go_hashBlockSize
++#cgo nocallback _mkcgo_go_hashBlockSize
++#cgo noescape _mkcgo_go_hashCopy
++#cgo nocallback _mkcgo_go_hashCopy
++#cgo noescape _mkcgo_go_hashFree
++#cgo nocallback _mkcgo_go_hashFree
++#cgo noescape _mkcgo_go_hashNew
++#cgo nocallback _mkcgo_go_hashNew
++#cgo noescape _mkcgo_go_hashReset
++#cgo nocallback _mkcgo_go_hashReset
++#cgo noescape _mkcgo_go_hashSize
++#cgo nocallback _mkcgo_go_hashSize
++#cgo noescape _mkcgo_go_hashSum
++#cgo nocallback _mkcgo_go_hashSum
++#cgo noescape _mkcgo_go_hashWrite
++#cgo nocallback _mkcgo_go_hashWrite
++#cgo noescape _mkcgo_go_initHMAC
++#cgo nocallback _mkcgo_go_initHMAC
++#cgo noescape _mkcgo_go_newPrivateKeyEd25519FromSeed
++#cgo nocallback _mkcgo_go_newPrivateKeyEd25519FromSeed
++#cgo noescape _mkcgo_go_newPublicKeyEd25519
++#cgo nocallback _mkcgo_go_newPublicKeyEd25519
++#cgo noescape _mkcgo_go_publicKeyFromPrivateECDH
++#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
++#cgo noescape _mkcgo_go_signEd25519
++#cgo nocallback _mkcgo_go_signEd25519
++#cgo noescape _mkcgo_go_supportsMLKEM
++#cgo nocallback _mkcgo_go_supportsMLKEM
++#cgo noescape _mkcgo_go_supportsSHA3
++#cgo nocallback _mkcgo_go_supportsSHA3
++#cgo noescape _mkcgo_go_updateHMAC
++#cgo nocallback _mkcgo_go_updateHMAC
++#cgo noescape _mkcgo_go_validatePrivateKeyECDH
++#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
++#cgo noescape _mkcgo_go_validatePublicKeyECDH
++#cgo nocallback _mkcgo_go_validatePublicKeyECDH
++#cgo noescape _mkcgo_go_verifyEd25519
++#cgo nocallback _mkcgo_go_verifyEd25519
 +*/
 +import "C"
 +import "unsafe"
@@ -26483,96 +26354,12 @@ index 00000000000000..366dcf4c7b43dd
 +func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
 +	return int64(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
-new file mode 100644
-index 00000000000000..ca1fa1d6f9347e
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo_go124.go
-@@ -0,0 +1,78 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package cryptokit
-+
-+/*
-+#cgo noescape _mkcgo_go_MD5
-+#cgo nocallback _mkcgo_go_MD5
-+#cgo noescape _mkcgo_go_SHA1
-+#cgo nocallback _mkcgo_go_SHA1
-+#cgo noescape _mkcgo_go_SHA256
-+#cgo nocallback _mkcgo_go_SHA256
-+#cgo noescape _mkcgo_go_SHA384
-+#cgo nocallback _mkcgo_go_SHA384
-+#cgo noescape _mkcgo_go_SHA3_256
-+#cgo nocallback _mkcgo_go_SHA3_256
-+#cgo noescape _mkcgo_go_SHA3_384
-+#cgo nocallback _mkcgo_go_SHA3_384
-+#cgo noescape _mkcgo_go_SHA3_512
-+#cgo nocallback _mkcgo_go_SHA3_512
-+#cgo noescape _mkcgo_go_SHA512
-+#cgo nocallback _mkcgo_go_SHA512
-+#cgo noescape _mkcgo_go_decapsulateMLKEM1024
-+#cgo nocallback _mkcgo_go_decapsulateMLKEM1024
-+#cgo noescape _mkcgo_go_decapsulateMLKEM768
-+#cgo nocallback _mkcgo_go_decapsulateMLKEM768
-+#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM1024
-+#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
-+#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
-+#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
-+#cgo noescape _mkcgo_go_ecdhSharedSecret
-+#cgo nocallback _mkcgo_go_ecdhSharedSecret
-+#cgo noescape _mkcgo_go_ecdsaSign
-+#cgo nocallback _mkcgo_go_ecdsaSign
-+#cgo noescape _mkcgo_go_ecdsaVerify
-+#cgo nocallback _mkcgo_go_ecdsaVerify
-+#cgo noescape _mkcgo_go_encapsulateMLKEM1024
-+#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
-+#cgo noescape _mkcgo_go_encapsulateMLKEM768
-+#cgo nocallback _mkcgo_go_encapsulateMLKEM768
-+#cgo noescape _mkcgo_go_finalizeHMAC
-+#cgo nocallback _mkcgo_go_finalizeHMAC
-+#cgo nocallback _mkcgo_go_freeHMAC
-+#cgo noescape _mkcgo_go_generateKeyECDH
-+#cgo nocallback _mkcgo_go_generateKeyECDH
-+#cgo noescape _mkcgo_go_generateKeyECDSA
-+#cgo nocallback _mkcgo_go_generateKeyECDSA
-+#cgo noescape _mkcgo_go_generateKeyMLKEM1024
-+#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
-+#cgo noescape _mkcgo_go_generateKeyMLKEM768
-+#cgo nocallback _mkcgo_go_generateKeyMLKEM768
-+#cgo nocallback _mkcgo_go_hashBlockSize
-+#cgo nocallback _mkcgo_go_hashCopy
-+#cgo nocallback _mkcgo_go_hashFree
-+#cgo nocallback _mkcgo_go_hashNew
-+#cgo nocallback _mkcgo_go_hashReset
-+#cgo nocallback _mkcgo_go_hashSize
-+#cgo noescape _mkcgo_go_hashSum
-+#cgo nocallback _mkcgo_go_hashSum
-+#cgo noescape _mkcgo_go_hashWrite
-+#cgo nocallback _mkcgo_go_hashWrite
-+#cgo nocallback _mkcgo_go_initHMAC
-+#cgo noescape _mkcgo_go_publicKeyFromPrivateECDH
-+#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
-+#cgo nocallback _mkcgo_go_supportsMLKEM
-+#cgo nocallback _mkcgo_go_supportsSHA3
-+#cgo noescape _mkcgo_go_updateHMAC
-+#cgo nocallback _mkcgo_go_updateHMAC
-+#cgo noescape _mkcgo_go_validatePrivateKeyECDH
-+#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
-+#cgo noescape _mkcgo_go_validatePublicKeyECDH
-+#cgo nocallback _mkcgo_go_validatePublicKeyECDH
-+*/
-+import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
 new file mode 100644
-index 00000000000000..c3716b4124efcd
+index 00000000000000..64315a13705101
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,351 @@
+@@ -0,0 +1,364 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26589,6 +26376,19 @@ index 00000000000000..c3716b4124efcd
 +
 +var _ = runtime.GOOS
 +
++var _mkcgoAlwaysFalseCryptokit bool
++var _mkcgoEscapeSinkCryptokit unsafe.Pointer
++
++// mkcgoEscapePtrCryptokit forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrCryptokit(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseCryptokit {
++		_mkcgoEscapeSinkCryptokit = p
++	}
++	return p
++}
++
 +//go:linkname go_MD5 go_MD5
 +//go:linkname go_SHA1 go_SHA1
 +//go:linkname go_SHA256 go_SHA256
@@ -27859,12 +27659,12 @@ index 00000000000000..b631396bd2ffe7
 +func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
 new file mode 100644
-index 00000000000000..57250706a043f1
+index 00000000000000..9b0650d53777bd
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
 @@ -0,0 +1,3 @@
 +{
-+  "commit_hash": "49bede11a66085d4400e4a257e4c77c9604c791a"
++  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
 new file mode 100644
@@ -28360,10 +28160,10 @@ index 00000000000000..098f56ce5e6b77
 +	RET
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
 new file mode 100644
-index 00000000000000..2864fc192a0331
+index 00000000000000..970f3fd9a1ef0d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,84 @@
+@@ -0,0 +1,81 @@
 +// SPDX-License-Identifier: Apache-2.0
 +// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
@@ -28424,7 +28224,6 @@ index 00000000000000..2864fc192a0331
 +
 +	SAVE_R19_TO_R28(8*4)
 +	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
 +
 +	MOVD ·threadentry_call(SB), R9
 +	MOVD (R9), R9
@@ -28433,8 +28232,6 @@ index 00000000000000..2864fc192a0331
 +
 +	RESTORE_R19_TO_R28(8*4)
 +	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
-+
 +	ADD $(8*24), RSP
 +	RET
 +
@@ -28787,7 +28584,7 @@ index 00000000000000..74ee18d383784e
 +//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
 new file mode 100644
-index 00000000000000..e1ba0ec484288f
+index 00000000000000..2f29d1d916958f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
 @@ -0,0 +1,107 @@
@@ -28874,20 +28671,20 @@ index 00000000000000..e1ba0ec484288f
 +
 +int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
 +SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
-+SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((framework(Security, A)));
-+SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((framework(Security, A)));
-+CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((framework(Security, A)));
-+Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
 +Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
 +size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
 +
-+CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((framework(CoreFoundation, A), slice(bytes, length)));
++CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((noescape, nocallback, framework(CoreFoundation, A), slice(bytes, length)));
 +CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
 +CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
-+CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((framework(CoreFoundation, A)));
++CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((noescape, nocallback, framework(CoreFoundation, A)));
 +CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
 +const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
 +void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
@@ -29185,10 +28982,10 @@ index 00000000000000..6b0cd286f82d58
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
 new file mode 100644
-index 00000000000000..ff317532f1ef02
+index 00000000000000..5b021a6afed14b
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
-@@ -0,0 +1,170 @@
+@@ -0,0 +1,172 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29206,6 +29003,7 @@ index 00000000000000..ff317532f1ef02
 +#ifndef GOARCH_mips64le
 +#ifndef GOARCH_ppc64
 +#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
 +#ifndef GOARCH_sparc64
 +#define _GOPTRSIZE 4
 +#endif
@@ -29217,6 +29015,7 @@ index 00000000000000..ff317532f1ef02
 +#endif
 +#endif
 +#endif
++#endif
 +
 +#ifndef _GOPTRSIZE
 +#define _GOPTRSIZE 8
@@ -29361,10 +29160,10 @@ index 00000000000000..ff317532f1ef02
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
 new file mode 100644
-index 00000000000000..20bd49b26f21f7
+index 00000000000000..c17b764ee90662
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
-@@ -0,0 +1,368 @@
+@@ -0,0 +1,388 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29378,6 +29177,26 @@ index 00000000000000..20bd49b26f21f7
 +#cgo darwin LDFLAGS: -framework Security
 +
 +#include "zsecurity.h"
++#cgo noescape _mkcgo_CFDataCreate
++#cgo nocallback _mkcgo_CFDataCreate
++#cgo noescape _mkcgo_CFNumberCreate
++#cgo nocallback _mkcgo_CFNumberCreate
++#cgo noescape _mkcgo_SecKeyCopyExternalRepresentation
++#cgo nocallback _mkcgo_SecKeyCopyExternalRepresentation
++#cgo noescape _mkcgo_SecKeyCreateDecryptedData
++#cgo nocallback _mkcgo_SecKeyCreateDecryptedData
++#cgo noescape _mkcgo_SecKeyCreateEncryptedData
++#cgo nocallback _mkcgo_SecKeyCreateEncryptedData
++#cgo noescape _mkcgo_SecKeyCreateRandomKey
++#cgo nocallback _mkcgo_SecKeyCreateRandomKey
++#cgo noescape _mkcgo_SecKeyCreateSignature
++#cgo nocallback _mkcgo_SecKeyCreateSignature
++#cgo noescape _mkcgo_SecKeyCreateWithData
++#cgo nocallback _mkcgo_SecKeyCreateWithData
++#cgo noescape _mkcgo_SecKeyVerifySignature
++#cgo nocallback _mkcgo_SecKeyVerifySignature
++#cgo noescape _mkcgo_SecRandomCopyBytes
++#cgo nocallback _mkcgo_SecRandomCopyBytes
 +*/
 +import "C"
 +import "unsafe"
@@ -29733,51 +29552,12 @@ index 00000000000000..20bd49b26f21f7
 +func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
 +	return int32(C._mkcgo_SecRandomCopyBytes(rnd, C.size_t(len(bytes)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(bytes)))))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
-new file mode 100644
-index 00000000000000..52f1736a94347c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo_go124.go
-@@ -0,0 +1,14 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package security
-+
-+/*
-+#cgo noescape _mkcgo_SecRandomCopyBytes
-+#cgo nocallback _mkcgo_SecRandomCopyBytes
-+*/
-+import "C"
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
-new file mode 100644
-index 00000000000000..3001e7040e80f1
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_go124.go
-@@ -0,0 +1,13 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build go1.24 && !cmd_go_bootstrap
-+
-+package security
-+
-+/*
-+#cgo noescape _mkcgo_SecRandomCopyBytes
-+#cgo nocallback _mkcgo_SecRandomCopyBytes
-+*/
-+import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
 new file mode 100644
-index 00000000000000..b10738f5d6ec26
+index 00000000000000..08bafd9a64d7c4
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
-@@ -0,0 +1,453 @@
+@@ -0,0 +1,466 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29794,6 +29574,19 @@ index 00000000000000..b10738f5d6ec26
 +
 +var _ = runtime.GOOS
 +
++var _mkcgoAlwaysFalseSecurity bool
++var _mkcgoEscapeSinkSecurity unsafe.Pointer
++
++// mkcgoEscapePtrSecurity forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrSecurity(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseSecurity {
++		_mkcgoEscapeSinkSecurity = p
++	}
++	return p
++}
++
 +type Boolean = byte
 +type SecRandomRef unsafe.Pointer
 +type SecKeyRef unsafe.Pointer
@@ -30097,14 +29890,14 @@ index 00000000000000..b10738f5d6ec26
 +var _mkcgo_CFDictionaryCreate_trampoline_addr uintptr
 +
 +func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
-+	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreate_trampoline_addr, uintptr(allocator), uintptr(unsafe.Pointer(keys)), uintptr(unsafe.Pointer(values)), uintptr(numValues), uintptr(unsafe.Pointer(keyCallBacks)), uintptr(unsafe.Pointer(valueCallBacks)))
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreate_trampoline_addr, uintptr(allocator), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keys))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(values))), uintptr(numValues), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
 +	return CFDictionaryRef(r0)
 +}
 +
 +var _mkcgo_CFDictionaryCreateMutable_trampoline_addr uintptr
 +
 +func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
-+	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreateMutable_trampoline_addr, uintptr(allocator), uintptr(capacity), uintptr(unsafe.Pointer(keyCallBacks)), uintptr(unsafe.Pointer(valueCallBacks)))
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreateMutable_trampoline_addr, uintptr(allocator), uintptr(capacity), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
 +	return CFMutableDictionaryRef(r0)
 +}
 +
@@ -30460,33 +30253,12 @@ index 00000000000000..261a7e4cb90d56
 +	MOVD R1, libcCallInfo_r2(R3) // save r2
 +
 +	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
-new file mode 100644
-index 00000000000000..9a24f0b6c13b1b
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/dl.h
-@@ -0,0 +1,15 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// C APIs. Run "go generate ." to regenerate the bindings.
-+
-+#ifndef _GO_DL_SHIMS_H // only include this header once
-+#define _GO_DL_SHIMS_H
-+
-+void *dlopen(const char *path, int flags);
-+int dlclose(void *handle);
-+void *dlsym(void *handle, const char *symbol);
-+char *dlerror(void);
-+
-+#endif // _GO_DL_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
 new file mode 100644
-index 00000000000000..20f2ae5d853877
+index 00000000000000..a9ad56e22fa2ac
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
-@@ -0,0 +1,88 @@
+@@ -0,0 +1,72 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -30559,28 +30331,12 @@ index 00000000000000..20f2ae5d853877
 +func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
 +	return SyscallN(errType, fn, args...)
 +}
-+
-+// syscallNRaw performs a syscall with the given function and arguments,
-+// without any error checking nor switching to the system stack.
-+//
-+//go:nosplit
-+func syscallNRaw(fn uintptr, args ...uintptr) uintptr {
-+	libcArgs := libcCallInfo{
-+		fn: fn,
-+		n:  uintptr(len(args)),
-+	}
-+	if libcArgs.n != 0 {
-+		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
-+	}
-+	syscallNAsm(&libcArgs)
-+	return libcArgs.r1
-+}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
 new file mode 100644
-index 00000000000000..c7e683e6790a27
+index 00000000000000..2d4d32fca87fdb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
-@@ -0,0 +1,25 @@
+@@ -0,0 +1,10 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -30589,23 +30345,8 @@ index 00000000000000..c7e683e6790a27
 +package xsyscall
 +
 +import (
-+	"unsafe"
-+
 +	_ "github.com/microsoft/go-crypto-darwin/internal/fakecgo"
 +)
-+
-+//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
-+
-+func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
-+	r0 := Dlsym(handle, unsafe.StringData(symbol))
-+	if r0 == nil {
-+		if !optional {
-+			panic("cannot get required symbol " + symbol)
-+		}
-+		return 0
-+	}
-+	return uintptr(r0)
-+}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
 new file mode 100644
 index 00000000000000..28dba16a23340e
@@ -30626,134 +30367,6 @@ index 00000000000000..28dba16a23340e
 +func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
 +	panic("SyscallN is not supported on this architecture")
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
-new file mode 100644
-index 00000000000000..458053d55e4541
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/xsyscall.go
-@@ -0,0 +1,6 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+package xsyscall
-+
-+//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package xsyscall -tags "darwin" dl.h
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
-new file mode 100644
-index 00000000000000..cf4762ce141355
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl.s
-@@ -0,0 +1,56 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo && darwin
-+
-+#include "textflag.h"
-+
-+#ifndef GOARCH_amd64
-+#ifndef GOARCH_arm64
-+#ifndef GOARCH_riscv64
-+#ifndef GOARCH_loong64
-+#ifndef GOARCH_mips64
-+#ifndef GOARCH_mips64le
-+#ifndef GOARCH_ppc64
-+#ifndef GOARCH_ppc64le
-+#ifndef GOARCH_sparc64
-+#define _GOPTRSIZE 4
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+
-+#ifndef _GOPTRSIZE
-+#define _GOPTRSIZE 8
-+#endif
-+TEXT _mkcgo_dlclose_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlclose(SB)
-+
-+GLOBL ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlerror_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlerror(SB)
-+
-+GLOBL ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlopen_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlopen(SB)
-+
-+GLOBL ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlsym_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlsym(SB)
-+
-+GLOBL ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
-+
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
-new file mode 100644
-index 00000000000000..a30d07b27ed848
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/zdl_nocgo.go
-@@ -0,0 +1,48 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo && darwin
-+
-+package xsyscall
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+)
-+
-+var _ = runtime.GOOS
-+
-+//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
-+//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
-+//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
-+//go:cgo_import_dynamic _mkcgo_dlsym dlsym ""
-+
-+var _mkcgo_dlclose_trampoline_addr uintptr
-+
-+func Dlclose(handle unsafe.Pointer) int32 {
-+	r0, _ := syscallN(0, _mkcgo_dlclose_trampoline_addr, uintptr(handle))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_dlerror_trampoline_addr uintptr
-+
-+func Dlerror() *byte {
-+	r0, _ := syscallN(0, _mkcgo_dlerror_trampoline_addr)
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_dlopen_trampoline_addr uintptr
-+
-+func Dlopen(path *byte, flags int32) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(unsafe.Pointer(path)), uintptr(flags))
-+	return unsafe.Pointer(r0)
-+}
-+
-+var _mkcgo_dlsym_trampoline_addr uintptr
-+
-+func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(unsafe.Pointer(symbol)))
-+	return unsafe.Pointer(r0)
-+}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
 new file mode 100644
 index 00000000000000..5f005eda956f2c
@@ -32323,10 +31936,10 @@ index 00000000000000..82a961d974f129
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
 new file mode 100644
-index 00000000000000..f44e192ecbe548
+index 00000000000000..016827afea2eee
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,335 @@
+@@ -0,0 +1,337 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -32363,6 +31976,8 @@ index 00000000000000..f44e192ecbe548
 +	blockSize int
 +}
 +
++type HashCloner = hash.Cloner
++
 +var cacheHash sync.Map // map[crypto.Hash]*hashAlgorithm
 +
 +// supportsSHA3 returns true if SHA-3 is available on this macOS version.
@@ -32662,47 +32277,6 @@ index 00000000000000..f44e192ecbe548
 +func NewSHA3_512() *Hash {
 +	return newHash(crypto.SHA3_512)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
-new file mode 100644
-index 00000000000000..1e3c96d429ff33
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone.go
-@@ -0,0 +1,17 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build !go1.25 && darwin
-+
-+package xcrypto
-+
-+import (
-+	"hash"
-+)
-+
-+// HashCloner is an interface that defines a Clone method.
-+type HashCloner interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() (HashCloner, error)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
-new file mode 100644
-index 00000000000000..a4b0c717ef5e38
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hashclone_go125.go
-@@ -0,0 +1,12 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build go1.25 && darwin
-+
-+package xcrypto
-+
-+import (
-+	"hash"
-+)
-+
-+type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
 new file mode 100644
 index 00000000000000..f6183de583d9ac
@@ -35504,10 +35078,10 @@ index 00000000000000..586e9ae2ebb0c9
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
 new file mode 100644
-index 00000000000000..d1d018ccbffa8c
+index 00000000000000..13c39fea4f64fb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hash.go
-@@ -0,0 +1,342 @@
+@@ -0,0 +1,344 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -35530,6 +35104,8 @@ index 00000000000000..d1d018ccbffa8c
 +// maxHashSize is the size of SHA512 and SHA3_512, the largest hashes we support.
 +const maxHashSize = 64
 +
++type HashCloner = hash.Cloner
++
 +// SupportsHash returns true if a hash.Hash implementation is supported for h.
 +func SupportsHash(h crypto.Hash) bool {
 +	switch h {
@@ -35850,49 +35426,6 @@ index 00000000000000..d1d018ccbffa8c
 +		panic(err)
 +	}
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
-new file mode 100644
-index 00000000000000..2340cb2f0127f9
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone.go
-@@ -0,0 +1,18 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build !go1.25 && windows
-+// +build !go1.25,windows
-+
-+package cng
-+
-+import (
-+	"hash"
-+)
-+
-+// HashCloner is an interface that defines a Clone method.
-+type HashCloner interface {
-+	hash.Hash
-+	// Clone returns a separate Hash instance with the same state as h.
-+	Clone() (HashCloner, error)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
-new file mode 100644
-index 00000000000000..f86a9e9bfd47a9
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hashclone_go125.go
-@@ -0,0 +1,13 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build go1.25 && windows
-+// +build go1.25,windows
-+
-+package cng
-+
-+import (
-+	"hash"
-+)
-+
-+type HashCloner = hash.Cloner
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
 new file mode 100644
 index 00000000000000..aa48b084d708da
@@ -38655,19 +38188,19 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..b4491a043c1f3f 100644
+index 48967bc9ee3bd2..203fcbdad089ae 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260224093412-4123abe33e35
-+## explicit; go 1.24
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb
++## explicit; go 1.25
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260224094848-e322614384c3
-+## explicit; go 1.24
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974
++## explicit; go 1.25
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
 +github.com/microsoft/go-crypto-darwin/internal/cryptokit
@@ -38675,8 +38208,8 @@ index 48967bc9ee3bd2..b4491a043c1f3f 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb
-+## explicit; go 1.24
++# github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
++## explicit; go 1.25
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt

From dd8aa5413db0128b73b1cc3f6e05140e3c72dad6 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 18 Mar 2026 11:45:14 -0700
Subject: [PATCH 768/887] Update Installation doc (#2195)

---
 README.md                 |  2 +-
 eng/doc/Installation.md   | 65 +++++++++++++++++++++++----------------
 eng/doc/MigrationGuide.md |  2 +-
 3 files changed, 40 insertions(+), 29 deletions(-)

diff --git a/README.md b/README.md
index 86f82b793bb..808d23a4eb8 100644
--- a/README.md
+++ b/README.md
@@ -74,7 +74,7 @@ The [Installation](eng/doc/Installation.md) documentation contains sections desc
 * [Azure Linux](eng/doc/Installation.md#azure-linux)
 * [Ubuntu](eng/doc/Installation.md#ubuntu)
 * [Azure Pipelines `GoTool@0` task](eng/doc/Installation.md#azure-pipelines-gotool0-task)
-* [GitHub Actions `setup-go`](eng/doc/Installation.md#github-actions-setup-go)
+* [GitHub Actions `setup-go` action](eng/doc/Installation.md#github-actions-setup-go-action)
 * [The `go-install.ps1` script](eng/doc/Installation.md#the-go-installps1-script)
 * [Binary archive](eng/doc/Installation.md#binary-archive)
 * [Build from source](eng/doc/Installation.md#build-from-source)
diff --git a/eng/doc/Installation.md b/eng/doc/Installation.md
index be7ec1dd6af..e1be3595c18 100644
--- a/eng/doc/Installation.md
+++ b/eng/doc/Installation.md
@@ -1,23 +1,26 @@
 # Installation
 
-Visit the [Migration Guide](MigrationGuide.md) for guidance about how we
-recommend migrating existing Go projects to use the Microsoft build of Go. This
-guide also helps resolve commonly encountered issues.
+These are the installation methods available for the Microsoft build of Go.
+
+This document allows you to choose an installation method based on your own needs.
+For an opinionated guide about how to migrate an existing project from the official build of Go to the Microsoft build of Go in a Microsoft build environment, visit the [Migration Guide](MigrationGuide.md).
+
+If you try to use the Microsoft build of Go and encounter problems, check the [Migration Guide](MigrationGuide.md) for solutions to commonly encountered issues.
 
 > [!NOTE]
-> Don't see an option that works for you? Let us know!  
-> File a GitHub issue, or comment on an existing issue in this tag:
-  [![](https://img.shields.io/github/labels/microsoft/go/Area-Acquisition)](https://github.com/microsoft/go/labels/Area-Acquisition)
+> Don't see an installation option that works for you? Let us know!
+>
+> Look for an existing issue with the [![](https://img.shields.io/github/labels/microsoft/go/Area-Acquisition)](https://github.com/microsoft/go/labels/Area-Acquisition) tag and leave a comment, or file a new issue.
+> You can also get in contact using our other [support resources](/README.md#support).
 
 ## Docker Container Images
 
-**[microsoft/go-images](https://github.com/microsoft/go-images)** maintains and
-documents container images that are available on Microsoft Artifact Registry.
+[microsoft/go-images](https://github.com/microsoft/go-images) maintains and documents container images that are available on Microsoft Artifact Registry.
 
 ## Azure Linux
 
-The **[Azure Linux](https://github.com/microsoft/azurelinux)** distribution
-includes the `golang` package, a build of this fork of Go.
+The Azure Linux 3 `golang` package is the Microsoft build of Go.
+Azure Linux is maintained at [microsoft/azurelinux](https://github.com/microsoft/azurelinux).
 
 ## Ubuntu
 
@@ -34,9 +37,10 @@ sudo apt-get update && sudo apt-get install msft-golang
 
 The [`GoTool@0`](https://learn.microsoft.com/azure/devops/pipelines/tasks/reference/go-tool-v0) Azure Pipelines build task supports installing the Microsoft build of Go.
 
-To use it, set these parameters:
+To use it, set these inputs:
 
-* `version`: the task supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version.
+* `version`: the version of Go to install.
+  * The task supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version.
 * `goDownloadUrl`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
 
 The resulting step in a yml-based Azure Pipeline looks like this:
@@ -49,13 +53,15 @@ The resulting step in a yml-based Azure Pipeline looks like this:
     goDownloadUrl: 'https://aka.ms/golang/release/latest'
 ```
 
-## GitHub Actions `setup-go`
+## GitHub Actions `setup-go` action
 
 The [`actions/setup-go`](https://github.com/actions/setup-go) GitHub Action supports installing the Microsoft build of Go.
 
-To use it, set these parameters:
+To use it, set these inputs:
 
 * `go-version`: the version of Go to install.
+  * The action supports the version formats `1.X`, `1.X.Y`, and `1.X.Y-Z`, and if there is a partial match, it installs the latest matching version.
+  * The `stable` and `oldstable` aliases are not supported when installing the Microsoft build of Go.
 * `go-download-base-url`: use `https://aka.ms/golang/release/latest` to select the Microsoft build of Go.
 
 The resulting step in a GitHub Actions workflow looks like this:
@@ -78,21 +84,26 @@ If you use GitHub Actions, pass the `-GitHubActionsPath` argument to automatical
 
 ## Binary archive
 
-[Signed builds of Go](Downloads.md)
-for several platforms are available as `zip` and `tar.gz` files.
+[Signed builds of Go](Downloads.md) are available as `zip` and `tar.gz` files.
+
+After downloading the appropriate archive for your platform, extract it to the directory of your choice.
+Use the `go` (or `go.exe`) executable in the `go/bin` directory.
 
 ## Build from source
 
+To build the Microsoft build of Go from source with minimal system dependencies, we recommend that you use a [pre-patched source tarball](#pre-patched-source-tarball).
+For example, a maintainer of a Microsoft build of Go package for a Linux distro might prefer this method.
+
+If you expect to contribute to the Microsoft build of Go project in the future, you should [clone and build](#clone-and-build).
+
 ### Pre-patched source tarball
 
-[The microsoft/go GitHub releases](https://github.com/microsoft/go/releases)
-include a source tarball file ending in `.src.tar.gz`. After downloading and
-extracting the tar.gz file, build it using the
-[upstream instructions](https://go.dev/doc/install/source).
+Each [microsoft/go GitHub release](https://github.com/microsoft/go/releases) includes a source tarball file ending in `.src.tar.gz`.
+Download and extract that `.src.tar.gz` file, then use the [official Go build from source instructions](https://go.dev/doc/install/source).
 
-> [!NOTE]
-> The `zip` file that GitHub offers for download on the [microsoft/go releases page](https://github.com/microsoft/go/releases) is incomplete: it doesn't include the `go` submodule.
-> Make sure to download the `.src.tar.gz` file instead, or [clone the repository using Git and set up the patched submodule](#clone-and-build).
+> [!WARNING]
+> The `Source code (zip)` and `Source code (tar.gz)` files that GitHub offers for download on the [microsoft/go releases page](https://github.com/microsoft/go/releases) are incomplete: they don't include the `go` submodule, and don't include a pointer to the correct upstream Go commit to use.
+> Make sure to download the `.src.tar.gz` file.
 
 ### Clone and build
 
@@ -100,10 +111,10 @@ First, clone this repository using Git and check out the desired tag or commit.
 
 If you want to contribute to the Microsoft build of Go project, read the [Developer Guide](DeveloperGuide.md).
 It lists the steps we recommend to set up a Microsoft build of Go development environment, execute your first build, run the standard library test suite, and contribute a PR.
+This creates a patched `go/` directory containing the `src/make.bash` script that can be used with the standard Go build from source instructions.
 
-If you just want to build on your own machine, you may find it more
-convenient to use the tools provided by the `eng/run.ps1` script. We use this
-script for CI builds. See [eng/README.md](../../eng/README.md) for more details about
-`eng/run.ps1` and other repository infrastructure.
+If you want to build on your own machine with minimal extra steps, run `pwsh eng/run.ps1 build --refresh`.
+We use this script for CI builds.
+See [eng/README.md](../../eng/README.md) for more details about `eng/run.ps1` and the prerequisites necessary to run it.
 
 Once built, the Microsoft build of Go binary is found at `go/bin/go`.
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index a67e53d55b2..c4918c63517 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -67,7 +67,7 @@ This section describes some migration scenarios we know about and the path we re
 If your CI system has a built-in task or action that installs Go, it may support installing the Microsoft build of Go:
 
 * **Azure Pipelines:** use the [`GoTool@0` task](Installation.md#azure-pipelines-gotool0-task).
-* **GitHub Actions:** use the [`actions/setup-go` action](Installation.md#github-actions-setup-go).
+* **GitHub Actions:** use the [`actions/setup-go` action](Installation.md#github-actions-setup-go-action).
 
 ### A `go` toolset that happens to be on my build agent
 

From 2f8182b028e3fc06227cd000eaada1532b91b62c Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 19 Mar 2026 00:47:52 -0700
Subject: [PATCH 769/887] upgrader: support running in go/, work with run.ps1
 (#2196)

---
 .../cmd/upgrader/{main.go => upgrader.go}     | 51 ++++++++++++++++---
 1 file changed, 43 insertions(+), 8 deletions(-)
 rename eng/_util/cmd/upgrader/{main.go => upgrader.go} (78%)

diff --git a/eng/_util/cmd/upgrader/main.go b/eng/_util/cmd/upgrader/upgrader.go
similarity index 78%
rename from eng/_util/cmd/upgrader/main.go
rename to eng/_util/cmd/upgrader/upgrader.go
index ca7830a8860..c79af3aea85 100644
--- a/eng/_util/cmd/upgrader/main.go
+++ b/eng/_util/cmd/upgrader/upgrader.go
@@ -145,20 +145,55 @@ func upgradeDependency(info *depsInfo) error {
 	return nil
 }
 
-var goBinary = sync.OnceValue(func() string {
-	//lint:ignore SA1019 we want to know the binary that built us
-	//nolint:staticcheck // deprecated okay
-	path := filepath.Join(runtime.GOROOT(), "bin", "go")
+var repoRoot = sync.OnceValues(func() (string, error) {
+	dir, err := os.Getwd()
+	if err != nil {
+		return "", fmt.Errorf("failed to get working directory: %w", err)
+	}
+	for {
+		if _, err := os.Stat(filepath.Join(dir, ".git-go-patch")); err == nil {
+			log.Printf("Found repo root: %s\n", dir)
+			return dir, nil
+		}
+		parent := filepath.Dir(dir)
+		if parent == dir {
+			return "", fmt.Errorf("could not find repo root: no .git-go-patch file found in any ancestor directory")
+		}
+		dir = parent
+	}
+})
+
+var goBinary = sync.OnceValues(func() (string, error) {
+	ext := ""
 	if runtime.GOOS == "windows" {
-		path += ".exe"
+		ext = ".exe"
 	}
+	// Use the dev-built Go binary, if it exists.
+	if root, err := repoRoot(); err == nil {
+		path := filepath.Join(root, "go", "bin", "go"+ext)
+		if _, err := os.Stat(path); err == nil {
+			log.Printf("Using %s\n", path)
+			return path, nil
+		}
+	}
+	//lint:ignore SA1019 we want to know the binary that built us
+	//nolint:staticcheck // deprecated okay
+	path := filepath.Join(runtime.GOROOT(), "bin", "go"+ext)
 	log.Printf("Using %s\n", path)
-	return path
+	return path, nil
 })
 
 func runGoCmd(wd string, args ...string) error {
-	cmd := exec.Command(goBinary(), args...)
-	cmd.Dir = wd
+	root, err := repoRoot()
+	if err != nil {
+		return err
+	}
+	binary, err := goBinary()
+	if err != nil {
+		return err
+	}
+	cmd := exec.Command(binary, args...)
+	cmd.Dir = filepath.Join(root, wd)
 	out, err := cmd.CombinedOutput()
 	if err != nil {
 		return fmt.Errorf("%q failed: %v: %s", cmd, err, out)

From d2f6bd81844cd8a7235f9f27386a22e376caec18 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 19 Mar 2026 16:02:55 +0100
Subject: [PATCH 770/887] improve NocgoOpenSSL.md

---
 eng/doc/NocgoOpenSSL.md | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 059576f7795..c57860dbce6 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -32,8 +32,23 @@ To see existing requests or request support for additional architectures, use th
 
 ## How the backend is selected
 
-If cgo is enabled (e.g., `CGO_ENABLED=1`), the cgo-based OpenSSL backend is always used.
-The cgo-less backend is only used when cgo is disabled **and** you're on a supported architecture.
+* If cgo is explicitly enabled with `CGO_ENABLED=1`, the cgo-based OpenSSL backend is used.
+* If cgo is disabled with `CGO_ENABLED=0` and you're on a supported architecture, the cgo-less OpenSSL backend is used.
+* If cgo is not explicitly enabled or disabled, then the cgo-less OpenSSL backend is used if the Go toolchain decides that cgo should be disabled. The are the rules at the time of writing:
+  * cgo is disabled if the Go toolchain is build with `CGO_ENABLED=0`. Note that that's not currently the case for the Microsoft build of Go. 
+  * cgo is disabled when cross-compiling.
+  * cgo is diables if the `CC` environment variable is not set to an existing executable.
 
-This means if cgo is enabled by default on your platform or you enable cgo for other reasons (e.g., linking your own C library), the crypto backend will use the cgo-based implementation.
-You can also intentionally enable cgo to successfully build for a platform without cgo-less OpenSSL support.
+## Runtime dependencies
+
+The cgo-less OpenSSL backend still relies in the C machinery to load OpenSSL at runtime and manage threading.
+
+This is an exhaustive list of the runtime dependencies other than OpenSSL itself:
+
+* `libc.so.6` for various C library functions. There is no minimum version requirement.
+* `libdl.so.2` for loading OpenSSL at runtime using `dlopen`. There is no minimum version requirement.
+* `libpthread.so.0` for managing Go's threads. There is no minimum version requirement.
+
+Note that `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
+The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.
+If your platform doesn't provide these libraries, you can create them as symlinks to `libc.so.6` to satisfy the dependencies, e.g. `ln -s libc.so.6 libdl.so.2` and `ln -s libc.so.6 libpthread.so.0`.

From 87e01b3737ff4809e8b3b99eeb23be2bed3a933c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 19 Mar 2026 16:04:10 +0100
Subject: [PATCH 771/887] typo

---
 eng/doc/NocgoOpenSSL.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index c57860dbce6..b28f72725fd 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -41,7 +41,7 @@ To see existing requests or request support for additional architectures, use th
 
 ## Runtime dependencies
 
-The cgo-less OpenSSL backend still relies in the C machinery to load OpenSSL at runtime and manage threading.
+The cgo-less OpenSSL backend still relies in the C machinery to load OpenSSL at runtime and manage threads.
 
 This is an exhaustive list of the runtime dependencies other than OpenSSL itself:
 

From 7955954744d011241e3894b854f269d80eb35fc1 Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Thu, 19 Mar 2026 16:14:56 +0100
Subject: [PATCH 772/887] Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 eng/doc/NocgoOpenSSL.md | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index b28f72725fd..a3519022784 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -34,21 +34,22 @@ To see existing requests or request support for additional architectures, use th
 
 * If cgo is explicitly enabled with `CGO_ENABLED=1`, the cgo-based OpenSSL backend is used.
 * If cgo is disabled with `CGO_ENABLED=0` and you're on a supported architecture, the cgo-less OpenSSL backend is used.
-* If cgo is not explicitly enabled or disabled, then the cgo-less OpenSSL backend is used if the Go toolchain decides that cgo should be disabled. The are the rules at the time of writing:
-  * cgo is disabled if the Go toolchain is build with `CGO_ENABLED=0`. Note that that's not currently the case for the Microsoft build of Go. 
+* If cgo is not explicitly enabled or disabled, then the cgo-less OpenSSL backend is used if the Go toolchain decides that cgo should be disabled. These are the rules at the time of writing:
+  * cgo is disabled if the Go toolchain is built with `CGO_ENABLED=0`. Note that that's not currently the case for the Microsoft build of Go. 
   * cgo is disabled when cross-compiling.
-  * cgo is diables if the `CC` environment variable is not set to an existing executable.
+  * cgo is disabled if the `CC` environment variable is not set to an existing executable.
 
 ## Runtime dependencies
 
-The cgo-less OpenSSL backend still relies in the C machinery to load OpenSSL at runtime and manage threads.
+The cgo-less OpenSSL backend still relies on the C machinery to load OpenSSL at runtime and manage threads.
 
-This is an exhaustive list of the runtime dependencies other than OpenSSL itself:
+The following are the expected runtime dependencies other than OpenSSL itself on glibc-based systems:
 
-* `libc.so.6` for various C library functions. There is no minimum version requirement.
-* `libdl.so.2` for loading OpenSSL at runtime using `dlopen`. There is no minimum version requirement.
-* `libpthread.so.0` for managing Go's threads. There is no minimum version requirement.
+* `libc.so.6` for various C library functions. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
+* `libdl.so.2` for loading OpenSSL at runtime using `dlopen`. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
+* `libpthread.so.0` for managing Go's threads. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
 
 Note that `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
 The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.
-If your platform doesn't provide these libraries, you can create them as symlinks to `libc.so.6` to satisfy the dependencies, e.g. `ln -s libc.so.6 libdl.so.2` and `ln -s libc.so.6 libpthread.so.0`.
+If your platform doesn't provide these libraries, the preferred solution is to install the appropriate runtime or compatibility packages so that `libdl.so.2` and `libpthread.so.0` are available in standard system library directories (for example `/lib` or `/usr/lib`).
+As an advanced workaround, you may instead create symlinks to `libc.so.6` in a directory searched by the dynamic linker (for example, a system library directory) and update the loader cache if required (for example by running `ldconfig`); this typically requires root privileges and should only be done if you understand the implications for your system's C library.

From 94da23e8f9ab3e044916a918421db27677557e75 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 19 Mar 2026 16:18:27 +0100
Subject: [PATCH 773/887] remove sentences

---
 eng/doc/NocgoOpenSSL.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index a3519022784..85d6da27af5 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -45,9 +45,9 @@ The cgo-less OpenSSL backend still relies on the C machinery to load OpenSSL at
 
 The following are the expected runtime dependencies other than OpenSSL itself on glibc-based systems:
 
-* `libc.so.6` for various C library functions. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
-* `libdl.so.2` for loading OpenSSL at runtime using `dlopen`. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
-* `libpthread.so.0` for managing Go's threads. There is no additional minimum version requirement beyond the glibc baseline supported by this Go distribution.
+* `libc.so.6` for various C library functions.
+* `libdl.so.2` for loading OpenSSL at runtime using `dlopen`.
+* `libpthread.so.0` for managing Go's threads.
 
 Note that `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
 The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.

From f8acfcc15416627abb0fa6c5a97ba4ec8c6bd97f Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Thu, 19 Mar 2026 14:10:34 -0700
Subject: [PATCH 774/887] Rename pipeline step (#2197)

---
 .github/workflows/test.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index db652810c2d..7682d7f3018 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,9 @@
 # time to hit the patch failure N times. However, the actual tests run in AzDO, so we can't
 # reasonably cancel them from here (GitHub Actions).
 
-name: "Test"
+# The "0:" prefix makes this workflow's checks sort above the alphabetical AzDO stage names on the
+# PR checks list, so patch failures are immediately visible without scrolling.
+name: "0: Test"
 
 on:
   pull_request:

From 35940078da51c2ee4be6d066174ef172fb316ded Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 20 Mar 2026 09:10:08 +0100
Subject: [PATCH 775/887] Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/NocgoOpenSSL.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 85d6da27af5..8059e0ee720 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -33,8 +33,10 @@ To see existing requests or request support for additional architectures, use th
 ## How the backend is selected
 
 * If cgo is explicitly enabled with `CGO_ENABLED=1`, the cgo-based OpenSSL backend is used.
-* If cgo is disabled with `CGO_ENABLED=0` and you're on a supported architecture, the cgo-less OpenSSL backend is used.
-* If cgo is not explicitly enabled or disabled, then the cgo-less OpenSSL backend is used if the Go toolchain decides that cgo should be disabled. These are the rules at the time of writing:
+* If cgo is disabled with `CGO_ENABLED=0`, then:
+  * If you're on a supported architecture, the cgo-less OpenSSL backend is used.
+  * If you're on an unsupported architecture, the build fails.
+* If cgo is not explicitly enabled or disabled, then the cgo-less OpenSSL backend is used if the Go toolchain decides that cgo should be disabled. The rules are officially described by [cmd/cgo](https://pkg.go.dev/cmd/cgo). This is a summary, at the time of writing (2026-03-19):
   * cgo is disabled if the Go toolchain is built with `CGO_ENABLED=0`. Note that that's not currently the case for the Microsoft build of Go. 
   * cgo is disabled when cross-compiling.
   * cgo is disabled if the `CC` environment variable is not set to an existing executable.

From b4f4fea836a7bc99408f17b1471264abc428633a Mon Sep 17 00:00:00 2001
From: Quim Muntal <qmuntaldiaz@microsoft.com>
Date: Fri, 20 Mar 2026 09:10:30 +0100
Subject: [PATCH 776/887] Apply suggestions from code review

Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 eng/doc/NocgoOpenSSL.md | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 8059e0ee720..5c80410e076 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -51,7 +51,10 @@ The following are the expected runtime dependencies other than OpenSSL itself on
 * `libdl.so.2` for loading OpenSSL at runtime using `dlopen`.
 * `libpthread.so.0` for managing Go's threads.
 
-Note that `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
-The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.
-If your platform doesn't provide these libraries, the preferred solution is to install the appropriate runtime or compatibility packages so that `libdl.so.2` and `libpthread.so.0` are available in standard system library directories (for example `/lib` or `/usr/lib`).
-As an advanced workaround, you may instead create symlinks to `libc.so.6` in a directory searched by the dynamic linker (for example, a system library directory) and update the loader cache if required (for example by running `ldconfig`); this typically requires root privileges and should only be done if you understand the implications for your system's C library.
+> [!NOTE]
+> The `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
+> The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.
+>
+> If your platform doesn't provide these libraries, the preferred solution is to install the appropriate runtime or compatibility packages so that `libdl.so.2` and `libpthread.so.0` are available in standard system library directories (for example `/lib` or `/usr/lib`).
+>
+> As an advanced workaround, you may instead symlink `libdl.so.2` and `libpthread.so.0` to `libc.so.6` in a directory searched by the dynamic linker (for example, a system library directory) and update the loader cache if required (for example by running `ldconfig`); this typically requires root privileges and should only be done if you understand the implications for your system's C library.

From babafd4643e360a66ea28fb2aded4111c3863045 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 20 Mar 2026 09:14:42 +0100
Subject: [PATCH 777/887] add clarification

---
 eng/doc/NocgoOpenSSL.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/eng/doc/NocgoOpenSSL.md b/eng/doc/NocgoOpenSSL.md
index 5c80410e076..10826cf228b 100644
--- a/eng/doc/NocgoOpenSSL.md
+++ b/eng/doc/NocgoOpenSSL.md
@@ -55,6 +55,8 @@ The following are the expected runtime dependencies other than OpenSSL itself on
 > The `libdl.so.2` and `libpthread.so.0` functionality is already provided by `libc.so.6` since glibc 2.34.
 > The Microsoft build of Go supports platforms with older versions of glibc, so it still links to `libdl.so.2` and `libpthread.so.0` directly.
 >
+> There is no runtime dependency on the same libc that the program was built with. You can, for example, build a program on a system with glibc 2.34 or later and run it on a system with an older glibc version.
+>
 > If your platform doesn't provide these libraries, the preferred solution is to install the appropriate runtime or compatibility packages so that `libdl.so.2` and `libpthread.so.0` are available in standard system library directories (for example `/lib` or `/usr/lib`).
 >
 > As an advanced workaround, you may instead symlink `libdl.so.2` and `libpthread.so.0` to `libc.so.6` in a directory searched by the dynamic linker (for example, a system library directory) and update the loader cache if required (for example by running `ldconfig`); this typically requires root privileges and should only be done if you understand the implications for your system's C library.

From 3cafd1dd85def381eb08e1c9205daed63c364f25 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Fri, 20 Mar 2026 11:26:49 -0700
Subject: [PATCH 778/887] Add patch skipping TestMachoIssue32233 (#2202)

---
 ...istently-failing-TestMachoIssue32233.patch | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch

diff --git a/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch b/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch
new file mode 100644
index 00000000000..861362dd0c6
--- /dev/null
+++ b/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch
@@ -0,0 +1,26 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Fri, 20 Mar 2026 08:55:22 -0700
+Subject: [PATCH] Skip consistently failing TestMachoIssue32233
+
+Skip TestMachoIssue32233, which recently has often (?) failed PR validation and
+blocks unrelated changes. We don't expect the behavior of this test to be
+changed by our patches.
+
+Tracked at https://github.com/microsoft/go/issues/2200
+---
+ src/cmd/link/internal/ld/dwarf_test.go | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/cmd/link/internal/ld/dwarf_test.go b/src/cmd/link/internal/ld/dwarf_test.go
+index 3cede8fe4b99a1..0c4b75f8456cb7 100644
+--- a/src/cmd/link/internal/ld/dwarf_test.go
++++ b/src/cmd/link/internal/ld/dwarf_test.go
+@@ -1203,6 +1203,7 @@ func TestPackageNameAttr(t *testing.T) {
+ }
+ 
+ func TestMachoIssue32233(t *testing.T) {
++	t.Skip("failing, may be flaky: https://github.com/microsoft/go/issues/2200")
+ 	testenv.MustHaveGoBuild(t)
+ 	testenv.MustHaveCGO(t)
+ 

From 1c6dff6f6f92faed3c4c8f8cff9fd31346d5a864 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Mon, 23 Mar 2026 03:29:12 -0700
Subject: [PATCH 779/887] Parallelize Patch Build sequence test (#2203)

* Parallelize Patch Build sequence test

* Apply feedback

Use eng/artifacts.
Rely on WalkGoPatches.
Explicitly don't support zero patch files.

* Fix Build directory

* For diag, make -github-actions additional, not exclusive

* Skip the race build
---
 .github/workflows/patch-build.yml             | 52 ++++++-----
 eng/_util/cmd/build/build.go                  | 23 +++--
 .../submodule-refresh/submodule-refresh.go    | 47 ++++++++++
 .../write-patch-matrix/write-patch-matrix.go  | 86 +++++++++++++++++++
 4 files changed, 180 insertions(+), 28 deletions(-)
 create mode 100644 eng/_util/cmd/write-patch-matrix/write-patch-matrix.go

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index af26c3217f8..54e7c51c420 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -16,37 +16,49 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
+  list_patches:
+    name: Generate patch build matrix
+    runs-on: ubuntu-latest
+    outputs:
+      patches: ${{ steps.list.outputs.patches }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Write patch matrix
+        id: list
+        run: pwsh eng/run.ps1 write-patch-matrix -github-actions
+
   build_patches:
-    name: Patches Build in Order
+    name: "Build up to ${{ matrix.patch.name }}"
+    needs: list_patches
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        patch: ${{ fromJson(needs.list_patches.outputs.patches) }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           submodules: true
 
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
-        with:
-          go-version: '1.25'
-
       - name: Set mock git config name/email
         run: |
           git config --global user.email "joe@blogs.com"
           git config --global user.name "Joe Blogs"
 
-      - name: Build patches
+      - name: Apply patches 1-${{ matrix.patch.number }}
+        run: pwsh eng/run.ps1 submodule-refresh -commits -take ${{ matrix.patch.number }}
+
+      - name: Build
         run: |
-          for file in $(ls -v patches/*.patch); do
-            echo "::group::Building $file"
-            cd ${{ github.workspace }}/go
-            git am --whitespace=nowarn ${{ github.workspace }}/$file
-            cd ${{ github.workspace }}/go/src
-            bash make.bash
-            ${{ github.workspace }}/go/bin/go mod vendor
-            cd ${{ github.workspace }}/go/src/cmd
-            ${{ github.workspace }}/go/bin/go mod vendor
-            cd ${{ github.workspace }}/go/src
-            # Check if the vendor directory is clean
-            git diff --exit-code vendor cmd/vendor || (echo "Vendor directories are not clean. Please run 'go mod vendor' in the appropriate directories and commit the changes." && exit 1)
-            echo "::endgroup::"
-          done
+          set -x
+          # Don't build with the race detector. https://github.com/microsoft/go/issues/2204
+          pwsh eng/run.ps1 build -skipbuildrace
+          cd ${{ github.workspace }}/go/src
+          ${{ github.workspace }}/go/bin/go mod vendor
+          cd ${{ github.workspace }}/go/src/cmd
+          ${{ github.workspace }}/go/bin/go mod vendor
+          cd ${{ github.workspace }}/go/src
+          # Check if the vendor directory is clean
+          git diff --exit-code vendor cmd/vendor || (echo "Vendor directories are not clean. Please run 'go mod vendor' in the appropriate directories and commit the changes." && exit 1)
diff --git a/eng/_util/cmd/build/build.go b/eng/_util/cmd/build/build.go
index 7634bcc41f6..923d89e04ce 100644
--- a/eng/_util/cmd/build/build.go
+++ b/eng/_util/cmd/build/build.go
@@ -41,6 +41,7 @@ func main() {
 	o := &options{}
 
 	flag.BoolVar(&o.SkipBuild, "skipbuild", false, "Disable building Go.")
+	flag.BoolVar(&o.SkipBuildRace, "skipbuildrace", false, "Disable building Go with race detector.")
 	flag.BoolVar(&o.Test, "test", false, "Enable running tests.")
 	flag.BoolVar(&o.PackBuild, "packbuild", false, "Enable creating an archive of this build using upstream 'distpack' and placing it in eng/artifacts/bin.")
 	flag.BoolVar(&o.PackSource, "packsource", false, "Enable creating a source archive using upstream 'distpack' and placing it in eng/artifacts/bin.")
@@ -78,13 +79,14 @@ func main() {
 }
 
 type options struct {
-	SkipBuild  bool
-	Test       bool
-	PackBuild  bool
-	PackSource bool
-	CreatePDB  bool
-	Refresh    bool
-	Experiment string
+	SkipBuild     bool
+	SkipBuildRace bool
+	Test          bool
+	PackBuild     bool
+	PackSource    bool
+	CreatePDB     bool
+	Refresh       bool
+	Experiment    string
 
 	TestJSONFlags *buildutil.TestJSONFlags
 
@@ -202,7 +204,12 @@ func build(o *options) (err error) {
 		// The race runtime requires cgo.
 		// It isn't supported on arm or 386.
 		// It's supported on arm64, but the official linux-arm64 distribution doesn't include it.
-		if os.Getenv("CGO_ENABLED") != "0" && targetArch != "arm" && targetArch != "arm64" && targetArch != "386" {
+		if !o.SkipBuildRace &&
+			os.Getenv("CGO_ENABLED") != "0" &&
+			targetArch != "arm" &&
+			targetArch != "arm64" &&
+			targetArch != "386" {
+
 			fmt.Println("---- Building race runtime...")
 			err := runCommandLine(
 				filepath.Join("..", "bin", "go"+executableExtension),
diff --git a/eng/_util/cmd/submodule-refresh/submodule-refresh.go b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
index effc1f99b22..a4c62bbb947 100644
--- a/eng/_util/cmd/submodule-refresh/submodule-refresh.go
+++ b/eng/_util/cmd/submodule-refresh/submodule-refresh.go
@@ -5,8 +5,11 @@
 package main
 
 import (
+	"errors"
 	"flag"
 	"fmt"
+	"io"
+	"log"
 	"os"
 	"path/filepath"
 
@@ -22,6 +25,7 @@ applies patches to the stage by default, or optionally as commits.
 var (
 	commits          = flag.Bool("commits", false, "Apply the patches as commits.")
 	skipPatch        = flag.Bool("skip-patch", false, "Skip applying patches.")
+	take             = flag.Int("take", -1, "Only apply the first N patches. -1 means apply all.")
 	origin           = flag.String("origin", "", "Use this origin instead of the default defined in '.gitmodules' to fetch the repository.")
 	shallow          = flag.Bool("shallow", false, "Clone the submodule with depth 1.")
 	fetchBearerToken = flag.String("fetch-bearer-token", "", "Use this bearer token to fetch the submodule repository.")
@@ -75,8 +79,51 @@ func refresh(rootDir string) error {
 		mode = patch.ApplyModeCommits
 	}
 
+	if *take >= 0 {
+		// The patch API applies all patches in a directory. To apply only the
+		// first N, copy them into a temporary directory and point the config there.
+		tmpDirRelative := filepath.Join("eng", "artifacts", "submodule-refresh", "patch-subset")
+		tmpDir := filepath.Join(config.RootDir, tmpDirRelative)
+		if err := os.RemoveAll(tmpDir); err != nil {
+			return err
+		}
+		if err := os.MkdirAll(tmpDir, 0o777); err != nil {
+			return err
+		}
+		i := 0
+		if err := patch.WalkGoPatches(config, func(path string) error {
+			if i >= *take {
+				log.Printf("Not including patch %q\n", path)
+				return nil
+			}
+			i++
+			log.Printf("Taking patch %q\n", path)
+			return copyFile(path, filepath.Join(tmpDir, filepath.Base(path)))
+		}); err != nil {
+			return err
+		}
+		if *take > i {
+			return fmt.Errorf("-take %d exceeds number of patches (%d)", *take, i)
+		}
+		config.PatchesDir = tmpDirRelative
+	}
+
 	if err := patch.Apply(config, mode); err != nil {
 		return err
 	}
 	return nil
 }
+
+func copyFile(src, dst string) error {
+	in, err := os.Open(src)
+	if err != nil {
+		return err
+	}
+	defer in.Close()
+	out, err := os.Create(dst)
+	if err != nil {
+		return err
+	}
+	_, copyErr := io.Copy(out, in)
+	return errors.Join(copyErr, out.Close())
+}
diff --git a/eng/_util/cmd/write-patch-matrix/write-patch-matrix.go b/eng/_util/cmd/write-patch-matrix/write-patch-matrix.go
new file mode 100644
index 00000000000..20ed3c392ed
--- /dev/null
+++ b/eng/_util/cmd/write-patch-matrix/write-patch-matrix.go
@@ -0,0 +1,86 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"encoding/json"
+	"errors"
+	"flag"
+	"fmt"
+	"log"
+	"os"
+	"path/filepath"
+
+	"github.com/microsoft/go-infra/patch"
+)
+
+const description = `
+This command reads patch files from the patches/ directory and writes a JSON
+array to stdout suitable for use as a GitHub Actions matrix. Each entry contains
+a "number" (1-based position) and "name" (filename).
+
+Use -github-actions to write the result to $GITHUB_OUTPUT as "patches=<json>".
+`
+
+func main() {
+	if err := run(); err != nil {
+		log.Fatal(err)
+	}
+}
+
+func run() error {
+	ghActions := flag.Bool("github-actions", false, "Write the result to $GITHUB_OUTPUT.")
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description)
+	}
+	flag.Parse()
+
+	type entry struct {
+		Number int    `json:"number"`
+		Name   string `json:"name"`
+	}
+	var entries []entry
+
+	config, err := patch.FindAncestorConfig(".")
+	if err != nil {
+		return err
+	}
+
+	n := 1
+	if err := patch.WalkGoPatches(config, func(s string) error {
+		entries = append(entries, entry{Number: n, Name: filepath.Base(s)})
+		n++
+		return nil
+	}); err != nil {
+		return fmt.Errorf("error walking patches: %v", err)
+	}
+
+	if len(entries) == 0 {
+		return errors.New("no patches found")
+	}
+
+	out, err := json.Marshal(entries)
+	if err != nil {
+		return err
+	}
+
+	fmt.Println(string(out))
+
+	if *ghActions {
+		ghOutputPath := os.Getenv("GITHUB_OUTPUT")
+		if ghOutputPath == "" {
+			return fmt.Errorf("GITHUB_OUTPUT environment variable is not set")
+		}
+		f, err := os.OpenFile(ghOutputPath, os.O_APPEND|os.O_WRONLY, 0)
+		if err != nil {
+			return err
+		}
+		_, writeErr := fmt.Fprintf(f, "patches=%s\n", out)
+		return errors.Join(writeErr, f.Close())
+	}
+	return nil
+}

From 57281cd0f4ce3ca974bc19a80b5106834d6f784a Mon Sep 17 00:00:00 2001
From: George Adams <gadams@microsoft.com>
Date: Mon, 23 Mar 2026 11:34:56 +0000
Subject: [PATCH 780/887] Move fips140only.BackendApprovedHash to patch 0003
 (#2205)

Patch 0003 references fips140only.BackendApprovedHash in
backend_linux.go, backend_windows.go, and backend_darwin.go, but the
BackendApprovedHash variable and the updated ApprovedHash function were
only added to fips140only.go in patch 0004. This caused a build failure
when building at the 0003 commit:

    # crypto/internal/backend
    crypto/internal/backend/backend_linux.go:44:14: undefined: fips140only.BackendApprovedHash

Move the fips140only.go hunk from patch 0004 into patch 0003 so the
symbol exists when it is first used.
---
 .github/workflows/patch-build.yml             |  3 +-
 ...03-Implement-crypto-internal-backend.patch | 28 ++++++++++++++++++-
 patches/0004-Use-crypto-backends.patch        | 28 +------------------
 3 files changed, 29 insertions(+), 30 deletions(-)

diff --git a/.github/workflows/patch-build.yml b/.github/workflows/patch-build.yml
index 54e7c51c420..4c947c0a949 100644
--- a/.github/workflows/patch-build.yml
+++ b/.github/workflows/patch-build.yml
@@ -53,8 +53,7 @@ jobs:
       - name: Build
         run: |
           set -x
-          # Don't build with the race detector. https://github.com/microsoft/go/issues/2204
-          pwsh eng/run.ps1 build -skipbuildrace
+          pwsh eng/run.ps1 build
           cd ${{ github.workspace }}/go/src
           ${{ github.workspace }}/go/bin/go mod vendor
           cd ${{ github.workspace }}/go/src/cmd
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index fa6c2a804ab..577185973f6 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -48,11 +48,12 @@ desired goexperiments and build tags.
  .../backend/internal/opensslsetup/stub.go     |   8 +
  src/crypto/internal/backend/nobackend.go      | 376 +++++++++++++++
  src/crypto/internal/backend/stub.s            |  10 +
+ .../internal/fips140only/fips140only.go       |  11 +-
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 43 files changed, 2754 insertions(+), 14 deletions(-)
+ 44 files changed, 2761 insertions(+), 17 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -3148,6 +3149,31 @@ index 00000000000000..5e4b436554d44d
 +// Having this assembly file keeps the go command
 +// from complaining about the missing body
 +// (because the implementation might be here).
+diff --git a/src/crypto/internal/fips140only/fips140only.go b/src/crypto/internal/fips140only/fips140only.go
+index a8d840b17022cc..2a17f7da2d4aaa 100644
+--- a/src/crypto/internal/fips140only/fips140only.go
++++ b/src/crypto/internal/fips140only/fips140only.go
+@@ -18,11 +18,18 @@ func Enforced() bool {
+ 	return fips140.Enforced()
+ }
+ 
++// BackendApprovedHash is set by a crypto backend during init to provide
++// backend-specific FIPS hash approval checking. If nil, only the standard
++// library FIPS hash types are recognized as approved.
++var BackendApprovedHash func(h hash.Hash) bool
++
+ func ApprovedHash(h hash.Hash) bool {
+ 	switch h.(type) {
+ 	case *sha256.Digest, *sha512.Digest, *sha3.Digest:
+ 		return true
+-	default:
+-		return false
+ 	}
++	if BackendApprovedHash != nil {
++		return BackendApprovedHash(h)
++	}
++	return false
+ }
 diff --git a/src/crypto/systemcrypto_nocgo_linux.go b/src/crypto/systemcrypto_nocgo_linux.go
 new file mode 100644
 index 00000000000000..7500bd3a86472b
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 6b96d526bfc..89afdff493c 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -49,7 +49,6 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/cryptotest/hash.go        |   3 +-
  .../internal/cryptotest/implementations.go    |   2 +-
  src/crypto/internal/fips140hash/hash.go       |   3 +-
- .../internal/fips140only/fips140only.go       |  11 +-
  .../internal/fips140only/fips140only_test.go  |  45 ++--
  src/crypto/internal/fips140test/acvp_test.go  |   6 +
  src/crypto/internal/fips140test/cast_test.go  |   2 +
@@ -103,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 99 files changed, 1624 insertions(+), 246 deletions(-)
+ 98 files changed, 1617 insertions(+), 243 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -1758,31 +1757,6 @@ index 6d67ee8b3429a1..8f8d5937ea913c 100644
  
  // Unwrap returns h, or a crypto/internal/fips140 inner implementation of h.
  //
-diff --git a/src/crypto/internal/fips140only/fips140only.go b/src/crypto/internal/fips140only/fips140only.go
-index a8d840b17022cc..2a17f7da2d4aaa 100644
---- a/src/crypto/internal/fips140only/fips140only.go
-+++ b/src/crypto/internal/fips140only/fips140only.go
-@@ -18,11 +18,18 @@ func Enforced() bool {
- 	return fips140.Enforced()
- }
- 
-+// BackendApprovedHash is set by a crypto backend during init to provide
-+// backend-specific FIPS hash approval checking. If nil, only the standard
-+// library FIPS hash types are recognized as approved.
-+var BackendApprovedHash func(h hash.Hash) bool
-+
- func ApprovedHash(h hash.Hash) bool {
- 	switch h.(type) {
- 	case *sha256.Digest, *sha512.Digest, *sha3.Digest:
- 		return true
--	default:
--		return false
- 	}
-+	if BackendApprovedHash != nil {
-+		return BackendApprovedHash(h)
-+	}
-+	return false
- }
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
 index 96df536d56f345..91d2a792d90296 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go

From c01b007b9fd2e223c17b37b47bfe4517b6f98a4a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 23 Mar 2026 11:40:17 +0000
Subject: [PATCH 781/887] build(deps): bump github/codeql-action from 4.33.0 to
 4.34.1 (#2206)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.34.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b1bff81932f5cdfc8695c7752dcee935dcd061c8...38697555549f1db7851b81482ff19f1fa5c4fedc)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 83a6799ef99..b0af6f91197 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+        uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+        uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+        uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
         with:
           category: /language:go

From 6729d545e61b826b7766a4d454839b2ead30ec79 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 24 Mar 2026 15:10:53 +0000
Subject: [PATCH 782/887] temp apply CL 754080

---
 go                                            |   2 +-
 ...x-host-object-s-.pdata-entries-order.patch | 216 ++++++++++++++++++
 2 files changed, 217 insertions(+), 1 deletion(-)
 create mode 100644 patches/0015-cmd-link-fix-host-object-s-.pdata-entries-order.patch

diff --git a/go b/go
index e30e65f7a8b..0613d0309ce 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e30e65f7a8bda0351d9def5a6bc91471bddafd3d
+Subproject commit 0613d0309ce820ee651d7a0cf8e158c87fc6c444
diff --git a/patches/0015-cmd-link-fix-host-object-s-.pdata-entries-order.patch b/patches/0015-cmd-link-fix-host-object-s-.pdata-entries-order.patch
new file mode 100644
index 00000000000..a0c89e8df58
--- /dev/null
+++ b/patches/0015-cmd-link-fix-host-object-s-.pdata-entries-order.patch
@@ -0,0 +1,216 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Wed, 11 Mar 2026 13:14:41 +0100
+Subject: [PATCH] cmd/link: fix host object's .pdata entries order
+
+Host objects are expected to have their .pdata entries in the correct
+order, but the Go internal linker might reorder some of the functions
+associated with the .pdata entries. This causes the .pdata section
+in the final binary to have entries in the wrong order, and therefore
+issues with unwinding on Windows.
+
+The fix is to treat the .pdata entries of host objects as individual
+symbols that will be retained only if the function they are associated
+with is retained. Also, those entries will be sorted together with the
+.pdata entries emitted by the Go compiler, ensuring the correct order
+in the final binary.
+
+Fixes #65116
+
+Change-Id: I421471b2aef519b0c20707a40c4b7957db5d2ed5
+---
+ src/cmd/link/internal/ld/data.go     | 14 ++++++
+ src/cmd/link/internal/ld/lib.go      |  4 +-
+ src/cmd/link/internal/loadpe/ldpe.go | 17 +++++--
+ src/cmd/link/internal/loadpe/seh.go  | 69 +++++++++++++++++++++-------
+ 4 files changed, 79 insertions(+), 25 deletions(-)
+
+diff --git a/src/cmd/link/internal/ld/data.go b/src/cmd/link/internal/ld/data.go
+index 1265b028e679fa..6ea55deebd8b16 100644
+--- a/src/cmd/link/internal/ld/data.go
++++ b/src/cmd/link/internal/ld/data.go
+@@ -1689,6 +1689,20 @@ func (ctxt *Link) dodata(symGroupType []sym.SymKind) {
+ 		ldr.SetAttrOnList(s, true)
+ 	}
+ 
++	// SEH symbols are tracked in side lists (sehp.pdata/xdata), so make
++	// them follow the same reachability decision used for all other data.
++	filterReachableSEH := func(syms []loader.Sym) []loader.Sym {
++		out := syms[:0]
++		for _, s := range syms {
++			if ldr.AttrReachable(s) {
++				out = append(out, s)
++			}
++		}
++		return out
++	}
++	sehp.pdata = filterReachableSEH(sehp.pdata)
++	sehp.xdata = filterReachableSEH(sehp.xdata)
++
+ 	// Now that we have the data symbols, but before we start
+ 	// to assign addresses, record all the necessary
+ 	// dynamic relocations. These will grow the relocation
+diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
+index 1c2b344abef7aa..77397383a79e88 100644
+--- a/src/cmd/link/internal/ld/lib.go
++++ b/src/cmd/link/internal/ld/lib.go
+@@ -2411,9 +2411,7 @@ func ldobj(ctxt *Link, f *bio.Reader, lib *sym.Library, length int64, pn string,
+ 			if len(ls.Resources) != 0 {
+ 				setpersrc(ctxt, ls.Resources)
+ 			}
+-			if ls.PData != 0 {
+-				sehp.pdata = append(sehp.pdata, ls.PData)
+-			}
++			sehp.pdata = append(sehp.pdata, ls.PData...)
+ 			if ls.XData != 0 {
+ 				sehp.xdata = append(sehp.xdata, ls.XData)
+ 			}
+diff --git a/src/cmd/link/internal/loadpe/ldpe.go b/src/cmd/link/internal/loadpe/ldpe.go
+index 2073045c479a97..fe39fad429d1f8 100644
+--- a/src/cmd/link/internal/loadpe/ldpe.go
++++ b/src/cmd/link/internal/loadpe/ldpe.go
+@@ -222,7 +222,7 @@ var comdatDefinitions map[string]int64
+ type Symbols struct {
+ 	Textp     []loader.Sym // text symbols
+ 	Resources []loader.Sym // .rsrc section or set of .rsrc$xx sections
+-	PData     loader.Sym
++	PData     []loader.Sym
+ 	XData     loader.Sym
+ }
+ 
+@@ -256,7 +256,10 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
+ 	defer f.Close()
+ 	state.f = f
+ 
+-	var ls Symbols
++	var (
++		ls    Symbols
++		pdata loader.Sym
++	)
+ 
+ 	// TODO return error if found .cormeta
+ 
+@@ -312,7 +315,7 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
+ 			ls.Resources = append(ls.Resources, s)
+ 		} else if bld.Type() == sym.SSEHSECT {
+ 			if sect.Name == ".pdata" {
+-				ls.PData = s
++				pdata = s
+ 			} else if sect.Name == ".xdata" {
+ 				ls.XData = s
+ 			}
+@@ -596,8 +599,12 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
+ 		}
+ 	}
+ 
+-	if ls.PData != 0 {
+-		processSEH(l, arch, ls.PData, ls.XData)
++	if pdata != 0 {
++		subs, err := processSEH(l, arch, pdata)
++		if err != nil {
++			return nil, err
++		}
++		ls.PData = subs
+ 	}
+ 
+ 	return &ls, nil
+diff --git a/src/cmd/link/internal/loadpe/seh.go b/src/cmd/link/internal/loadpe/seh.go
+index 545958f1d60bee..91d67c67fa7380 100644
+--- a/src/cmd/link/internal/loadpe/seh.go
++++ b/src/cmd/link/internal/loadpe/seh.go
+@@ -21,24 +21,19 @@ const (
+ 	unwCodeSize        = 2 // Bytes per unwind code.
+ )
+ 
+-// processSEH walks all pdata relocations looking for exception handler function symbols.
+-// We want to mark these as reachable if the function that they protect is reachable
+-// in the final binary.
+-func processSEH(ldr *loader.Loader, arch *sys.Arch, pdata sym.LoaderSym, xdata sym.LoaderSym) error {
++// processSEH walks host-object pdata relocations and returns the set of
++// per-entry pdata symbols created from the input section.
++func processSEH(ldr *loader.Loader, arch *sys.Arch, pdata sym.LoaderSym) ([]loader.Sym, error) {
+ 	switch arch.Family {
+ 	case sys.AMD64:
+-		ldr.SetAttrReachable(pdata, true)
+-		if xdata != 0 {
+-			ldr.SetAttrReachable(xdata, true)
+-		}
+ 		return processSEHAMD64(ldr, pdata)
+ 	default:
+ 		// TODO: support SEH on other architectures.
+-		return fmt.Errorf("unsupported architecture for SEH: %v", arch.Family)
++		return nil, fmt.Errorf("unsupported architecture for SEH: %v", arch.Family)
+ 	}
+ }
+ 
+-func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) error {
++func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) ([]loader.Sym, error) {
+ 	// The following loop traverses a list of pdata entries,
+ 	// each entry being 3 relocations long. The first relocation
+ 	// is a pointer to the function symbol to which the pdata entry
+@@ -48,18 +43,58 @@ func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) error {
+ 	// https://learn.microsoft.com/en-us/cpp/build/exception-handling-x64#struct-runtime_function
+ 	rels := ldr.Relocs(pdata)
+ 	if rels.Count()%3 != 0 {
+-		return fmt.Errorf(".pdata symbol %q has invalid relocation count", ldr.SymName(pdata))
++		return nil, fmt.Errorf(".pdata symbol %q has invalid relocation count", ldr.SymName(pdata))
+ 	}
++	data := ldr.Data(pdata)
++	entries := make([]loader.Sym, 0, rels.Count()/3)
++
+ 	for i := 0; i < rels.Count(); i += 3 {
+-		xrel := rels.At(i + 2)
+-		handler := findHandlerInXDataAMD64(ldr, xrel.Sym(), xrel.Add())
+-		if handler != 0 {
+-			sb := ldr.MakeSymbolUpdater(rels.At(i).Sym())
++		// Create a new symbol for the pdata entry.
++		entry := ldr.MakeSymbolBuilder("")
++		entry.SetType(sym.SSEHSECT)
++		entry.SetAlign(4)
++		entry.SetSize(12)
++		entryOff := int(rels.At(i).Off())
++		entryEnd := entryOff + 4*3
++		entry.SetData(data[entryOff:entryEnd:entryEnd])
++
++		// Add a relocation from the target function to the pdata entry
++		// and to the exception handler, if present, to ensure they are
++		// retained by dead code elimination.
++		if targetFunc := rels.At(i).Sym(); targetFunc != 0 {
++			sb := ldr.MakeSymbolUpdater(targetFunc)
+ 			r, _ := sb.AddRel(objabi.R_KEEP)
+-			r.SetSym(handler)
++			r.SetSym(entry.Sym())
++			xrel := rels.At(i + 2)
++			if xrel.Sym() != 0 {
++				r, _ = sb.AddRel(objabi.R_KEEP)
++				r.SetSym(xrel.Sym())
++			}
++			handler := findHandlerInXDataAMD64(ldr, xrel.Sym(), xrel.Add())
++			if handler != 0 {
++				r, _ = sb.AddRel(objabi.R_KEEP)
++				r.SetSym(handler)
++			}
+ 		}
++
++		// Copy the relocations from the original .pdata entry to the new symbol,
++		// adjusting the offsets.
++		for j := range 3 {
++			rOld := rels.At(i + j)
++			typ := rOld.Type()
++			if rOld.Weak() {
++				typ |= objabi.R_WEAK
++			}
++			rel, _ := entry.AddRel(typ)
++			rel.SetOff(int32(j * 4))
++			rel.SetSiz(rOld.Siz())
++			rel.SetSym(rOld.Sym())
++			rel.SetAdd(rOld.Add())
++		}
++
++		entries = append(entries, entry.Sym())
+ 	}
+-	return nil
++	return entries, nil
+ }
+ 
+ // findHandlerInXDataAMD64 finds the symbol in the .xdata section that

From 88c86408b5c1d1cba92bab22c5f3e27158f88904 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 24 Mar 2026 15:16:40 +0000
Subject: [PATCH 783/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 22 +++++++++----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index c76de32cb4a..cda58da7a1d 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -553,7 +553,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 3bc983397186a6..6556bfdbe3f0a4 100644
+index d15db1306b8e0b..f726601843bdaa 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -564,9 +564,9 @@ index 3bc983397186a6..6556bfdbe3f0a4 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
- 	golang.org/x/mod v0.32.0
+ 	golang.org/x/mod v0.34.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 224585feb6332d..ebf6a4c11e165e 100644
+index 23627773f00451..5ac25412c24ac4 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -2175,7 +2175,7 @@ index 00000000000000..d592037b570130
 +	return ok
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index ceed574b32b507..e29e38f7da3cb3 100644
+index 7b5b9aa37f749c..c2b79ea9ca5213 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2225,11 +2225,11 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index d6c515017a7009..348650059a4497 100644
+index 2ac54d7b35e011..043e7ea6bbe4a8 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.40.1-0.20260116220947-d25a7aaff8c2 // indirect
+ 	golang.org/x/sys v0.42.1-0.20260320201212-a76ec62d6c53 // indirect
  	golang.org/x/text v0.33.1-0.20260122225119-3264de9174be // indirect
  )
 +
@@ -2239,7 +2239,7 @@ index d6c515017a7009..348650059a4497 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260224091131-eabf5d4ea9cb
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2223d2a7c231c1..55a77ae199a9af 100644
+index ba6fd0576632d4..40a76b70d3cc2d 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2253,7 +2253,7 @@ index 2223d2a7c231c1..55a77ae199a9af 100644
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 863882aebf583e..a0436aa1901b7e 100644
+index be424e1b16c8d0..722b21661f29a8 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -154,6 +154,13 @@ var depsRules = `
@@ -2333,7 +2333,7 @@ index 863882aebf583e..a0436aa1901b7e 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -924,7 +965,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -928,7 +969,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2342,7 +2342,7 @@ index 863882aebf583e..a0436aa1901b7e 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -934,7 +975,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -938,7 +979,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -38655,7 +38655,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 48967bc9ee3bd2..b4491a043c1f3f 100644
+index e8c6f1efb099eb..ad1216357d8cb2 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@

From c06d93c6f1fa1f9e3e430d452ed5cfbea6fb06d3 Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Tue, 24 Mar 2026 12:08:24 -0700
Subject: [PATCH 784/887] Include package in JUnit test names (#2207)

---
 eng/_util/buildutil/testjson.go | 4 +++-
 eng/_util/go.mod                | 2 +-
 eng/_util/go.sum                | 4 ++--
 3 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 6a60709b2fe..214e70ef055 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -62,7 +62,9 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 			defer func() {
 				err = errors.Join(err, jf.Close())
 			}()
-			c := json2junit.NewConverter(jf)
+			c := json2junit.NewConverterWithOptions(jf, &json2junit.Options{
+				IncludePackageInTestName: true,
+			})
 			defer func() {
 				err = errors.Join(err, c.Close())
 			}()
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 2535377925d..ba4459701a0 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.9
+	github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.52.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 03408b10ff1..9932b4a72c9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.9 h1:emnuI8I9HGQESkwuTD2YAQFokgPKUzOjRlqpLp4+AfQ=
-github.com/microsoft/go-infra v0.0.9/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
+github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96 h1:GK33KDwSMiBpGR82fU2MIdwk+febXI+d51uLQI5nmIE=
+github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=

From 68b26e02738b7eb07b5ca15b062117666a3a6eec Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Wed, 25 Mar 2026 10:17:28 -0700
Subject: [PATCH 785/887] Add patchcheck, check vendor patch (#2211)

* Add patchcheck, check vendor patch

* Fix dependency_test.go package

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Fix PatchFile doc and add must-appear check for vendor paths

Co-authored-by: dagood <12819531+dagood@users.noreply.github.com>
Agent-Logs-Url: https://github.com/microsoft/go/sessions/d35ddbc7-6b8f-49a5-9db7-2b6fd461e791

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: dagood <12819531+dagood@users.noreply.github.com>
---
 eng/_util/cmd/patchcheck/patchcheck.go        |  46 ++++++
 .../{testutil => internal}/dependency_test.go |   2 +-
 eng/_util/internal/patchcheck/patchcheck.go   | 137 ++++++++++++++++++
 .../internal/patchcheck/patchcheck_test.go    |  19 +++
 eng/_util/internal/patchcheck/vendoronly.go   | 101 +++++++++++++
 5 files changed, 304 insertions(+), 1 deletion(-)
 create mode 100644 eng/_util/cmd/patchcheck/patchcheck.go
 rename eng/_util/{testutil => internal}/dependency_test.go (99%)
 create mode 100644 eng/_util/internal/patchcheck/patchcheck.go
 create mode 100644 eng/_util/internal/patchcheck/patchcheck_test.go
 create mode 100644 eng/_util/internal/patchcheck/vendoronly.go

diff --git a/eng/_util/cmd/patchcheck/patchcheck.go b/eng/_util/cmd/patchcheck/patchcheck.go
new file mode 100644
index 00000000000..206e40cd519
--- /dev/null
+++ b/eng/_util/cmd/patchcheck/patchcheck.go
@@ -0,0 +1,46 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package main
+
+import (
+	"flag"
+	"fmt"
+	"log"
+
+	"github.com/microsoft/go/_util/internal/patchcheck"
+)
+
+var description = `
+This command checks the patch files in the patches/ directory for common issues.
+`
+
+func main() {
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(), "Usage:\n")
+		flag.PrintDefaults()
+		fmt.Fprintf(flag.CommandLine.Output(), "%s\n", description)
+	}
+
+	flag.Parse()
+
+	if err := run(); err != nil {
+		log.Fatalln(err)
+	}
+}
+
+func run() error {
+	issues, err := patchcheck.FindPatchIssues()
+	if err != nil {
+		return err
+	}
+	if len(issues) == 0 {
+		fmt.Println("Patches are happy!")
+		return nil
+	}
+	for _, issue := range issues {
+		fmt.Printf("%s: %s\n", issue.PatchFile, issue.Message)
+	}
+	return fmt.Errorf("found %d patch issue(s)", len(issues))
+}
diff --git a/eng/_util/testutil/dependency_test.go b/eng/_util/internal/dependency_test.go
similarity index 99%
rename from eng/_util/testutil/dependency_test.go
rename to eng/_util/internal/dependency_test.go
index d989b1ffc4d..c8c2eb7e990 100644
--- a/eng/_util/testutil/dependency_test.go
+++ b/eng/_util/internal/dependency_test.go
@@ -2,7 +2,7 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-package testutil
+package internal
 
 import (
 	"errors"
diff --git a/eng/_util/internal/patchcheck/patchcheck.go b/eng/_util/internal/patchcheck/patchcheck.go
new file mode 100644
index 00000000000..b6427a70b25
--- /dev/null
+++ b/eng/_util/internal/patchcheck/patchcheck.go
@@ -0,0 +1,137 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package patchcheck checks Microsoft build of Go patch files for common issues
+// without needing to apply them.
+package patchcheck
+
+import (
+	"fmt"
+	"os"
+	"os/exec"
+	"strconv"
+	"strings"
+	"sync"
+
+	"github.com/microsoft/go-infra/patch"
+)
+
+type PatchIssue struct {
+	// PatchFile is the base name of the patch file.
+	PatchFile string
+	// Message is a description of the issue.
+	Message string
+}
+
+func FindPatchIssues() ([]*PatchIssue, error) {
+	patchFiles, err := wdPatchList()
+	if err != nil {
+		return nil, err
+	}
+	var issues []*PatchIssue
+	for _, patchFile := range patchFiles {
+		patchIssues, err := checkPatch(patchFile)
+		if err != nil {
+			return nil, err
+		}
+		issues = append(issues, patchIssues...)
+	}
+	return issues, nil
+}
+
+func checkPatch(patchFile string) ([]*PatchIssue, error) {
+	mods, err := readPatchNumstat(patchFile)
+	if err != nil {
+		return nil, err
+	}
+	var issues []*PatchIssue
+	issues, err = appendVendorOnlyIssues(issues, patchFile, mods)
+	if err != nil {
+		return nil, err
+	}
+	return issues, nil
+}
+
+type patchModification struct {
+	adds, removes uint64
+	path          string
+}
+
+// readPatchNumstat runs "git apply --numstat" on the given patch file with
+// absolute path and returns the list of modified files with their add/remove
+// line counts.
+func readPatchNumstat(patchFile string) ([]patchModification, error) {
+	// Git only provides numstat output if we are in the root of the repository.
+	// It's unclear why it doesn't work in subdirectories, even in "patches/".
+	// It may be due to security features intended to prevent paths from
+	// reaching outside of the repository.
+	repoRoot, err := repoRoot()
+	if err != nil {
+		return nil, fmt.Errorf("getting repo root: %w", err)
+	}
+
+	cmd := exec.Command("git", "apply", "--no-index", "--numstat", patchFile)
+	cmd.Dir = repoRoot
+	out, err := cmd.CombinedOutput()
+	if err != nil {
+		return nil, fmt.Errorf("git apply --no-index --numstat %s in %s: %w\noutput:\n%s", patchFile, repoRoot, err, string(out))
+	}
+
+	var mods []patchModification
+	for _, line := range strings.Split(strings.TrimSuffix(string(out), "\n"), "\n") {
+		if line == "" {
+			continue
+		}
+		fields := strings.SplitN(line, "\t", 3)
+		if len(fields) != 3 {
+			return nil, fmt.Errorf("unexpected numstat line in %s: %q", patchFile, line)
+		}
+		mod := patchModification{path: fields[2]}
+		// Binary files show "-" for adds/removes.
+		if fields[0] != "-" {
+			mod.adds, err = strconv.ParseUint(fields[0], 10, 64)
+			if err != nil {
+				return nil, fmt.Errorf("parsing adds in %s: %q: %w", patchFile, line, err)
+			}
+		}
+		if fields[1] != "-" {
+			mod.removes, err = strconv.ParseUint(fields[1], 10, 64)
+			if err != nil {
+				return nil, fmt.Errorf("parsing removes in %s: %q: %w", patchFile, line, err)
+			}
+		}
+		mods = append(mods, mod)
+	}
+	return mods, nil
+}
+
+var repoRoot = sync.OnceValues(func() (string, error) {
+	rootCmd := exec.Command("git", "rev-parse", "--show-toplevel")
+	root, err := rootCmd.Output()
+	if err != nil {
+		return "", err
+	}
+	repoRoot := strings.TrimSpace(string(root))
+	return repoRoot, nil
+})
+
+// wdPatchList is the list of patch files relative to the working directory.
+var wdPatchList = sync.OnceValues(func() ([]string, error) {
+	wd, err := os.Getwd()
+	if err != nil {
+		return nil, err
+	}
+	config, err := patch.FindAncestorConfig(wd)
+	if err != nil {
+		return nil, err
+	}
+	var patches []string
+	if err := patch.WalkGoPatches(config, func(s string) error {
+		patches = append(patches, s)
+		return nil
+	}); err != nil {
+		return nil, err
+	}
+	return patches, nil
+})
diff --git a/eng/_util/internal/patchcheck/patchcheck_test.go b/eng/_util/internal/patchcheck/patchcheck_test.go
new file mode 100644
index 00000000000..4ac7e45f1e9
--- /dev/null
+++ b/eng/_util/internal/patchcheck/patchcheck_test.go
@@ -0,0 +1,19 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package patchcheck
+
+import (
+	"testing"
+)
+
+func TestFindPatchIssues(t *testing.T) {
+	issues, err := FindPatchIssues()
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, issue := range issues {
+		t.Errorf("%s: %s", issue.PatchFile, issue.Message)
+	}
+}
diff --git a/eng/_util/internal/patchcheck/vendoronly.go b/eng/_util/internal/patchcheck/vendoronly.go
new file mode 100644
index 00000000000..d7ab814d09b
--- /dev/null
+++ b/eng/_util/internal/patchcheck/vendoronly.go
@@ -0,0 +1,101 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package patchcheck
+
+import (
+	"fmt"
+	"path/filepath"
+	"strings"
+)
+
+// vendorPatchGlob matches the vendor patch filename.
+const vendorPatchGlob = "0001-*.patch"
+
+// vendorOnlyPaths lists paths that must appear in the vendor patch and must
+// *only* appear in the vendor patch. Each entry is either an exact path or a
+// prefix ending in "/" to match a directory tree.
+var vendorOnlyPaths = []string{
+	"src/vendor/",
+	"src/go.mod",
+	"src/go.sum",
+	"src/cmd/vendor/",
+	"src/cmd/go.mod",
+	"src/cmd/go.sum",
+	"src/go/build/vendor_test.go",
+	"src/crypto/internal/backend/deps_ignore.go",
+	"src/cmd/internal/telemetry/counter/deps_ignore.go",
+}
+
+// vendorSharedPaths must appear in the vendor patch, but may also appear in
+// non-vendor patches.
+var vendorSharedPaths = []string{
+	"src/go/build/deps_test.go",
+}
+
+func appendVendorOnlyIssues(issues []*PatchIssue, patchFile string, mods []patchModification) ([]*PatchIssue, error) {
+	patchName := filepath.Base(patchFile)
+	isVendorPatch, err := filepath.Match(vendorPatchGlob, patchName)
+	if err != nil {
+		return nil, err
+	}
+
+	for _, mod := range mods {
+		vo := isVendorOnlyPath(mod.path)
+		vs := isVendorSharedPath(mod.path)
+		if isVendorPatch && !vo && !vs {
+			issues = append(issues, &PatchIssue{
+				PatchFile: patchName,
+				Message:   fmt.Sprintf("vendor patch must not contain changes to non-vendor file: %s", mod.path),
+			})
+		}
+		if !isVendorPatch && vo {
+			issues = append(issues, &PatchIssue{
+				PatchFile: patchName,
+				Message:   fmt.Sprintf("non-vendor patch must not contain changes to vendor file: %s", mod.path),
+			})
+		}
+	}
+
+	if isVendorPatch {
+		for _, required := range append(vendorOnlyPaths, vendorSharedPaths...) {
+			found := false
+			for _, mod := range mods {
+				if matchPathList([]string{required}, mod.path) {
+					found = true
+					break
+				}
+			}
+			if !found {
+				issues = append(issues, &PatchIssue{
+					PatchFile: patchName,
+					Message:   fmt.Sprintf("vendor patch must contain changes to: %s", required),
+				})
+			}
+		}
+	}
+
+	return issues, nil
+}
+
+func isVendorOnlyPath(path string) bool {
+	return matchPathList(vendorOnlyPaths, path)
+}
+
+func isVendorSharedPath(path string) bool {
+	return matchPathList(vendorSharedPaths, path)
+}
+
+func matchPathList(list []string, path string) bool {
+	for _, p := range list {
+		if strings.HasSuffix(p, "/") {
+			if strings.HasPrefix(path, p) {
+				return true
+			}
+		} else if path == p {
+			return true
+		}
+	}
+	return false
+}

From 7c4287681bbdd9157bd41f9b24a59a46ab564910 Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Mon, 23 Mar 2026 15:36:34 -0700
Subject: [PATCH 786/887] Pass attempt and job attempt labels to JUnit output

Add -attempt and -jobattempt flags to run-builder, passed through to
json2junit. This distinguishes test results along two retry dimensions:

- System.JobAttempt (AzDO job-level rerun): passed as -jobattempt
- retryAttempts loop (in-job test retry): passed as -attempt

All retry attempts are published in a single test run with title:
  'linux-amd64 test (ubuntu) (job attempt 2)'

Suite names inside the XML distinguish retries:
  'cmd/go [job attempt 2, retry 3]'

Includes a temporary forced flake on attempt 1 for testing retry
visibility (marked with TODO for removal).

Fixes: https://github.com/microsoft/go/issues/2134
---
 eng/_util/buildutil/testjson.go   |  8 ++++++++
 eng/_util/go.mod                  |  2 +-
 eng/_util/go.sum                  |  4 ++--
 eng/pipeline/stages/run-stage.yml | 22 ++++++++++++++++------
 4 files changed, 27 insertions(+), 9 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 214e70ef055..1f0ce1412ba 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -21,6 +21,7 @@ import (
 type TestJSONFlags struct {
 	JUnitOutFile   string
 	RawTestOutFile string
+	JobAttempt     string
 }
 
 func BindTestJSONFlags() *TestJSONFlags {
@@ -31,6 +32,9 @@ func BindTestJSONFlags() *TestJSONFlags {
 	flag.StringVar(
 		&f.RawTestOutFile, "rawtestout", "",
 		"Write raw test output to a new file at this path and summarize any test JSON before it reaches stdout.")
+	flag.StringVar(
+		&f.JobAttempt, "jobattempt", "",
+		"Label for the CI job-level rerun attempt (e.g. System.StageAttempt), included in JUnit test suite names.")
 	return &f
 }
 
@@ -42,6 +46,9 @@ func (f *TestJSONFlags) AppendToCmdline(cmdline []string) []string {
 		if f.RawTestOutFile != "" {
 			cmdline = append(cmdline, "-rawtestout", f.RawTestOutFile)
 		}
+		if f.JobAttempt != "" {
+			cmdline = append(cmdline, "-jobattempt", f.JobAttempt)
+		}
 	}
 	return cmdline
 }
@@ -64,6 +71,7 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 			}()
 			c := json2junit.NewConverterWithOptions(jf, &json2junit.Options{
 				IncludePackageInTestName: true,
+				JobAttempt:               f.JobAttempt,
 			})
 			defer func() {
 				err = errors.Join(err, c.Close())
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index ba4459701a0..1d564bd43b5 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96
+	github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.52.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 9932b4a72c9..a8a40dab198 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96 h1:GK33KDwSMiBpGR82fU2MIdwk+febXI+d51uLQI5nmIE=
-github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
+github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc h1:tAXbJvXs8FvgSZk4Zvi38E5QFt6/Cm/9vNDrTba1UZs=
+github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 6d9e3101731..eb740f2d04b 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -265,8 +265,17 @@ stages:
                       -builder '${{ parameters.builder.os }}-${{ parameters.builder.arch }}-${{ parameters.builder.config }}' `
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
-                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults.xml' `
-                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt'
+                      -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml' `
+                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt' `
+                      -jobattempt '$(System.StageAttempt)'
+
+                  # TODO: Remove this forced flake. It's used to test retry attempt visibility.
+                  # https://github.com/microsoft/go/issues/2134
+                  # Clear TEST_BUILDER_SUCCESSFUL on every attempt so all retries run and the
+                  # job ultimately fails. This lets us manually rerun to verify the job attempt label.
+                  Write-Host "##vso[task.setvariable variable=TEST_BUILDER_SUCCESSFUL]"
+                  Write-Host "Forcing flake on all attempts to test retry + job attempt visibility."
+                  exit 1
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -281,14 +290,15 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
-            # Publish test results. Use the last-overwritten result, if multiple attempts were made.
+            # Publish test results from all attempts in a single test run.
+            # Suite names in the XML include retry/job attempt labels to distinguish them.
             - task: PublishTestResults@2
               displayName: Publish test results
               condition: succeededOrFailed()
               inputs:
                 testResultsFormat: JUnit
-                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults.xml
-                testRunTitle: $(System.JobDisplayName)
+                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-*.xml
+                testRunTitle: $(System.JobDisplayName) (attempt $(System.StageAttempt))
                 buildPlatform: ${{ parameters.builder.arch }}
                 buildConfiguration: ${{ parameters.builder.config }}
                 publishRunAttachments: true
@@ -299,7 +309,7 @@ stages:
               condition: succeededOrFailed()
               inputs:
                 targetPath: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput
-                artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.JobAttempt)
+                artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.StageAttempt)
 
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
           #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:

From a7646cb9ad1c90d756ef359a601f9cd0debe0a7f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 09:27:39 +0100
Subject: [PATCH 787/887] update submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 0613d0309ce..291ee5d7de2 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 0613d0309ce820ee651d7a0cf8e158c87fc6c444
+Subproject commit 291ee5d7de2a2d96c44c57084f6383235baab2a1

From ca46b77e07a04a560690fabbfbecb67a30f14245 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 09:34:04 +0100
Subject: [PATCH 788/887] fix conflicts

---
 ...nt-ms_tls_config_schannel-experiment.patch |  20 +-
 ...x-host-object-s-.pdata-entries-order.patch | 216 ------------------
 2 files changed, 10 insertions(+), 226 deletions(-)
 delete mode 100644 patches/0016-cmd-link-fix-host-object-s-.pdata-entries-order.patch

diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 81b90dd13ef..0b01dccf686 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -24,7 +24,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 96273c0fe0ea2f..11d32bbc1c2551 100644
+index 5a72c493e03eba..930d8c6d134e94 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -14,6 +14,7 @@ import (
@@ -35,7 +35,7 @@ index 96273c0fe0ea2f..11d32bbc1c2551 100644
  	"internal/obscuretestdata"
  	"internal/testenv"
  	"math/big"
-@@ -191,6 +192,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
+@@ -190,6 +191,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
  		}
  		serverConfig.BuildNameToCertificate()
  		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
@@ -467,7 +467,7 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 4513008a5f930e..e1f868e7086061 100644
+index 4df1aed1706c74..f447dc3432945a 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -21,6 +21,7 @@ import (
@@ -553,13 +553,13 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index be2104e8f5a437..bbe0c40b404a66 100644
+index 86c5570bf12edb..66051d85e2ea23 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -150,4 +150,12 @@ type Flags struct {
- 
- 	// RuntimeSecret enables the runtime/secret package.
- 	RuntimeSecret bool
+@@ -151,4 +151,12 @@ type Flags struct {
+ 	// from interleaved key/elem slots (KVKVKVKV) to split key and elem
+ 	// arrays (KKKKVVVV).
+ 	MapSplitGroup bool
 +
 +	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
 +	// suites according to the Windows Schannel settings.
@@ -640,7 +640,7 @@ index 09be2eb0807932..b74b311279e81f 100644
 +	}
 +}
 diff --git a/src/internal/syscall/windows/zsyscall_windows.go b/src/internal/syscall/windows/zsyscall_windows.go
-index 9526e855e8f1ba..49873764aea3a1 100644
+index 5bc228e63069ca..b4959928a817aa 100644
 --- a/src/internal/syscall/windows/zsyscall_windows.go
 +++ b/src/internal/syscall/windows/zsyscall_windows.go
 @@ -38,6 +38,7 @@ func errnoErr(e syscall.Errno) error {
@@ -660,7 +660,7 @@ index 9526e855e8f1ba..49873764aea3a1 100644
  	procProcessPrng                       = modbcryptprimitives.NewProc("ProcessPrng")
  	procGetAdaptersAddresses              = modiphlpapi.NewProc("GetAdaptersAddresses")
  	procCreateEventW                      = modkernel32.NewProc("CreateEventW")
-@@ -271,6 +274,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
+@@ -272,6 +275,19 @@ func SetTokenInformation(tokenHandle syscall.Token, tokenInformationClass uint32
  	return
  }
  
diff --git a/patches/0016-cmd-link-fix-host-object-s-.pdata-entries-order.patch b/patches/0016-cmd-link-fix-host-object-s-.pdata-entries-order.patch
deleted file mode 100644
index a0c89e8df58..00000000000
--- a/patches/0016-cmd-link-fix-host-object-s-.pdata-entries-order.patch
+++ /dev/null
@@ -1,216 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Wed, 11 Mar 2026 13:14:41 +0100
-Subject: [PATCH] cmd/link: fix host object's .pdata entries order
-
-Host objects are expected to have their .pdata entries in the correct
-order, but the Go internal linker might reorder some of the functions
-associated with the .pdata entries. This causes the .pdata section
-in the final binary to have entries in the wrong order, and therefore
-issues with unwinding on Windows.
-
-The fix is to treat the .pdata entries of host objects as individual
-symbols that will be retained only if the function they are associated
-with is retained. Also, those entries will be sorted together with the
-.pdata entries emitted by the Go compiler, ensuring the correct order
-in the final binary.
-
-Fixes #65116
-
-Change-Id: I421471b2aef519b0c20707a40c4b7957db5d2ed5
----
- src/cmd/link/internal/ld/data.go     | 14 ++++++
- src/cmd/link/internal/ld/lib.go      |  4 +-
- src/cmd/link/internal/loadpe/ldpe.go | 17 +++++--
- src/cmd/link/internal/loadpe/seh.go  | 69 +++++++++++++++++++++-------
- 4 files changed, 79 insertions(+), 25 deletions(-)
-
-diff --git a/src/cmd/link/internal/ld/data.go b/src/cmd/link/internal/ld/data.go
-index 1265b028e679fa..6ea55deebd8b16 100644
---- a/src/cmd/link/internal/ld/data.go
-+++ b/src/cmd/link/internal/ld/data.go
-@@ -1689,6 +1689,20 @@ func (ctxt *Link) dodata(symGroupType []sym.SymKind) {
- 		ldr.SetAttrOnList(s, true)
- 	}
- 
-+	// SEH symbols are tracked in side lists (sehp.pdata/xdata), so make
-+	// them follow the same reachability decision used for all other data.
-+	filterReachableSEH := func(syms []loader.Sym) []loader.Sym {
-+		out := syms[:0]
-+		for _, s := range syms {
-+			if ldr.AttrReachable(s) {
-+				out = append(out, s)
-+			}
-+		}
-+		return out
-+	}
-+	sehp.pdata = filterReachableSEH(sehp.pdata)
-+	sehp.xdata = filterReachableSEH(sehp.xdata)
-+
- 	// Now that we have the data symbols, but before we start
- 	// to assign addresses, record all the necessary
- 	// dynamic relocations. These will grow the relocation
-diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 1c2b344abef7aa..77397383a79e88 100644
---- a/src/cmd/link/internal/ld/lib.go
-+++ b/src/cmd/link/internal/ld/lib.go
-@@ -2411,9 +2411,7 @@ func ldobj(ctxt *Link, f *bio.Reader, lib *sym.Library, length int64, pn string,
- 			if len(ls.Resources) != 0 {
- 				setpersrc(ctxt, ls.Resources)
- 			}
--			if ls.PData != 0 {
--				sehp.pdata = append(sehp.pdata, ls.PData)
--			}
-+			sehp.pdata = append(sehp.pdata, ls.PData...)
- 			if ls.XData != 0 {
- 				sehp.xdata = append(sehp.xdata, ls.XData)
- 			}
-diff --git a/src/cmd/link/internal/loadpe/ldpe.go b/src/cmd/link/internal/loadpe/ldpe.go
-index 2073045c479a97..fe39fad429d1f8 100644
---- a/src/cmd/link/internal/loadpe/ldpe.go
-+++ b/src/cmd/link/internal/loadpe/ldpe.go
-@@ -222,7 +222,7 @@ var comdatDefinitions map[string]int64
- type Symbols struct {
- 	Textp     []loader.Sym // text symbols
- 	Resources []loader.Sym // .rsrc section or set of .rsrc$xx sections
--	PData     loader.Sym
-+	PData     []loader.Sym
- 	XData     loader.Sym
- }
- 
-@@ -256,7 +256,10 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
- 	defer f.Close()
- 	state.f = f
- 
--	var ls Symbols
-+	var (
-+		ls    Symbols
-+		pdata loader.Sym
-+	)
- 
- 	// TODO return error if found .cormeta
- 
-@@ -312,7 +315,7 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
- 			ls.Resources = append(ls.Resources, s)
- 		} else if bld.Type() == sym.SSEHSECT {
- 			if sect.Name == ".pdata" {
--				ls.PData = s
-+				pdata = s
- 			} else if sect.Name == ".xdata" {
- 				ls.XData = s
- 			}
-@@ -596,8 +599,12 @@ func Load(l *loader.Loader, arch *sys.Arch, localSymVersion int, input *bio.Read
- 		}
- 	}
- 
--	if ls.PData != 0 {
--		processSEH(l, arch, ls.PData, ls.XData)
-+	if pdata != 0 {
-+		subs, err := processSEH(l, arch, pdata)
-+		if err != nil {
-+			return nil, err
-+		}
-+		ls.PData = subs
- 	}
- 
- 	return &ls, nil
-diff --git a/src/cmd/link/internal/loadpe/seh.go b/src/cmd/link/internal/loadpe/seh.go
-index 545958f1d60bee..91d67c67fa7380 100644
---- a/src/cmd/link/internal/loadpe/seh.go
-+++ b/src/cmd/link/internal/loadpe/seh.go
-@@ -21,24 +21,19 @@ const (
- 	unwCodeSize        = 2 // Bytes per unwind code.
- )
- 
--// processSEH walks all pdata relocations looking for exception handler function symbols.
--// We want to mark these as reachable if the function that they protect is reachable
--// in the final binary.
--func processSEH(ldr *loader.Loader, arch *sys.Arch, pdata sym.LoaderSym, xdata sym.LoaderSym) error {
-+// processSEH walks host-object pdata relocations and returns the set of
-+// per-entry pdata symbols created from the input section.
-+func processSEH(ldr *loader.Loader, arch *sys.Arch, pdata sym.LoaderSym) ([]loader.Sym, error) {
- 	switch arch.Family {
- 	case sys.AMD64:
--		ldr.SetAttrReachable(pdata, true)
--		if xdata != 0 {
--			ldr.SetAttrReachable(xdata, true)
--		}
- 		return processSEHAMD64(ldr, pdata)
- 	default:
- 		// TODO: support SEH on other architectures.
--		return fmt.Errorf("unsupported architecture for SEH: %v", arch.Family)
-+		return nil, fmt.Errorf("unsupported architecture for SEH: %v", arch.Family)
- 	}
- }
- 
--func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) error {
-+func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) ([]loader.Sym, error) {
- 	// The following loop traverses a list of pdata entries,
- 	// each entry being 3 relocations long. The first relocation
- 	// is a pointer to the function symbol to which the pdata entry
-@@ -48,18 +43,58 @@ func processSEHAMD64(ldr *loader.Loader, pdata sym.LoaderSym) error {
- 	// https://learn.microsoft.com/en-us/cpp/build/exception-handling-x64#struct-runtime_function
- 	rels := ldr.Relocs(pdata)
- 	if rels.Count()%3 != 0 {
--		return fmt.Errorf(".pdata symbol %q has invalid relocation count", ldr.SymName(pdata))
-+		return nil, fmt.Errorf(".pdata symbol %q has invalid relocation count", ldr.SymName(pdata))
- 	}
-+	data := ldr.Data(pdata)
-+	entries := make([]loader.Sym, 0, rels.Count()/3)
-+
- 	for i := 0; i < rels.Count(); i += 3 {
--		xrel := rels.At(i + 2)
--		handler := findHandlerInXDataAMD64(ldr, xrel.Sym(), xrel.Add())
--		if handler != 0 {
--			sb := ldr.MakeSymbolUpdater(rels.At(i).Sym())
-+		// Create a new symbol for the pdata entry.
-+		entry := ldr.MakeSymbolBuilder("")
-+		entry.SetType(sym.SSEHSECT)
-+		entry.SetAlign(4)
-+		entry.SetSize(12)
-+		entryOff := int(rels.At(i).Off())
-+		entryEnd := entryOff + 4*3
-+		entry.SetData(data[entryOff:entryEnd:entryEnd])
-+
-+		// Add a relocation from the target function to the pdata entry
-+		// and to the exception handler, if present, to ensure they are
-+		// retained by dead code elimination.
-+		if targetFunc := rels.At(i).Sym(); targetFunc != 0 {
-+			sb := ldr.MakeSymbolUpdater(targetFunc)
- 			r, _ := sb.AddRel(objabi.R_KEEP)
--			r.SetSym(handler)
-+			r.SetSym(entry.Sym())
-+			xrel := rels.At(i + 2)
-+			if xrel.Sym() != 0 {
-+				r, _ = sb.AddRel(objabi.R_KEEP)
-+				r.SetSym(xrel.Sym())
-+			}
-+			handler := findHandlerInXDataAMD64(ldr, xrel.Sym(), xrel.Add())
-+			if handler != 0 {
-+				r, _ = sb.AddRel(objabi.R_KEEP)
-+				r.SetSym(handler)
-+			}
- 		}
-+
-+		// Copy the relocations from the original .pdata entry to the new symbol,
-+		// adjusting the offsets.
-+		for j := range 3 {
-+			rOld := rels.At(i + j)
-+			typ := rOld.Type()
-+			if rOld.Weak() {
-+				typ |= objabi.R_WEAK
-+			}
-+			rel, _ := entry.AddRel(typ)
-+			rel.SetOff(int32(j * 4))
-+			rel.SetSiz(rOld.Siz())
-+			rel.SetSym(rOld.Sym())
-+			rel.SetAdd(rOld.Add())
-+		}
-+
-+		entries = append(entries, entry.Sym())
- 	}
--	return nil
-+	return entries, nil
- }
- 
- // findHandlerInXDataAMD64 finds the symbol in the .xdata section that

From cc0fdbdb61ab32364e88d0ea42b1ebe0248e1bf6 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 11:05:52 +0100
Subject: [PATCH 789/887] fix TestMicrosoftVersion

---
 ...13-Add-Microsoft-version-information.patch | 30 ++++++++++---------
 1 file changed, 16 insertions(+), 14 deletions(-)

diff --git a/patches/0013-Add-Microsoft-version-information.patch b/patches/0013-Add-Microsoft-version-information.patch
index 36aa56baf6b..1772907eeae 100644
--- a/patches/0013-Add-Microsoft-version-information.patch
+++ b/patches/0013-Add-Microsoft-version-information.patch
@@ -17,7 +17,7 @@ Microsoft build of Go version string.
  doc/godebug.md                                |   9 ++
  src/cmd/dist/build.go                         |  16 ++
  src/cmd/dist/buildruntime.go                  |   1 +
- src/cmd/go/go_ms_test.go                      | 149 ++++++++++++++++++
+ src/cmd/go/go_ms_test.go                      | 151 ++++++++++++++++++
  src/cmd/go/internal/cache/hash.go             |   6 +
  src/cmd/go/internal/load/pkg.go               |   2 +
  .../testdata/script/gotoolchain_local_ms.txt  |  46 ++++++
@@ -26,15 +26,15 @@ Microsoft build of Go version string.
  src/internal/godebugs/table.go                |   1 +
  src/runtime/extern.go                         |  25 ++-
  src/runtime/runtime1.go                       |   4 +
- 12 files changed, 322 insertions(+), 8 deletions(-)
+ 12 files changed, 324 insertions(+), 8 deletions(-)
  create mode 100644 src/cmd/go/go_ms_test.go
  create mode 100644 src/cmd/go/testdata/script/gotoolchain_local_ms.txt
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index beee0f46498d4d..f2eb13d1dde4d4 100644
+index 1736fd71017add..114079d8f99527 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -218,6 +218,15 @@ Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
+@@ -216,6 +216,15 @@ Microsoft build of Go 1.26 added a new `ms_tlsprofile` setting that controls the
  - "default": use the recommended Microsoft TLS settings. This is the default.
  - "off": use the default upstream Go TLS settings.
  
@@ -51,10 +51,10 @@ index beee0f46498d4d..f2eb13d1dde4d4 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index feef0080cb12d6..e9b74bd4abf191 100644
+index ec10d9597b69fc..cd2b83cb6150b0 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -450,6 +450,22 @@ func findgoversion() string {
+@@ -454,6 +454,22 @@ func findgoversion() string {
  	return version
  }
  
@@ -91,10 +91,10 @@ index 87e88671763996..dccdca982300d7 100644
  	fmt.Fprintf(&buf, "const DefaultGOFIPS140 = `%s`\n", gofips140)
 diff --git a/src/cmd/go/go_ms_test.go b/src/cmd/go/go_ms_test.go
 new file mode 100644
-index 00000000000000..6f431716475ebf
+index 00000000000000..635c40dec22dd8
 --- /dev/null
 +++ b/src/cmd/go/go_ms_test.go
-@@ -0,0 +1,149 @@
+@@ -0,0 +1,151 @@
 +// Copyright 2015 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -122,6 +122,7 @@ index 00000000000000..6f431716475ebf
 +		t.Run("ms_version="+test.name, func(t *testing.T) {
 +			tg := testgo(t)
 +			defer tg.cleanup()
++			tg.parallel()
 +			tg.setenv("GODEBUG", "ms_version="+test.ms_version)
 +			// Check "go version" output.
 +			tg.run("version")
@@ -136,6 +137,7 @@ index 00000000000000..6f431716475ebf
 +func TestMicrosoftBuildInfoVersion(t *testing.T) {
 +	tg := testgo(t)
 +	defer tg.cleanup()
++	tg.parallel()
 +	v, msVersion, ok := msReadBuildInfo(t, tg.goTool())
 +	if strings.HasSuffix(v, "-microsoft") {
 +		t.Errorf("buildinfo GoVersion = %q, want no -microsoft suffix", v)
@@ -334,7 +336,7 @@ index 00000000000000..24538695be2cf2
 +go version
 +stdout go1.501
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index 24fecd47360a8d..cb4b51df2aeebd 100644
+index 5e592c7c6697d7..df70274e03b5df 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
 @@ -188,15 +188,20 @@ func Main(arch *sys.Arch, theArch Arch) {
@@ -455,10 +457,10 @@ index 1ba17bc136710f..a3868ad860ed4a 100644
  	{Name: "multipartmaxheaders", Package: "mime/multipart"},
  	{Name: "multipartmaxparts", Package: "mime/multipart"},
 diff --git a/src/runtime/extern.go b/src/runtime/extern.go
-index a9f97a1a045525..991d5ef22c5df5 100644
+index a69f4aaede794d..f5c35867b78e26 100644
 --- a/src/runtime/extern.go
 +++ b/src/runtime/extern.go
-@@ -367,11 +367,34 @@ func GOROOT() string {
+@@ -369,11 +369,34 @@ func GOROOT() string {
  // This is accessed by "go version <binary>".
  var buildVersion string
  
@@ -495,10 +497,10 @@ index a9f97a1a045525..991d5ef22c5df5 100644
  
  // GOOS is the running program's operating system target:
 diff --git a/src/runtime/runtime1.go b/src/runtime/runtime1.go
-index 10754eee1cd999..20ce0d57d003bd 100644
+index 8da3682261bf9f..3b4531df8a5ec1 100644
 --- a/src/runtime/runtime1.go
 +++ b/src/runtime/runtime1.go
-@@ -364,6 +364,9 @@ var debug struct {
+@@ -365,6 +365,9 @@ var debug struct {
  	// tracebacklabels controls the inclusion of goroutine labels in the
  	// goroutine status header line.
  	tracebacklabels atomic.Int32
@@ -508,7 +510,7 @@ index 10754eee1cd999..20ce0d57d003bd 100644
  }
  
  var dbgvars = []*dbgVar{
-@@ -401,6 +404,7 @@ var dbgvars = []*dbgVar{
+@@ -402,6 +405,7 @@ var dbgvars = []*dbgVar{
  	{name: "tracebacklabels", atomic: &debug.tracebacklabels, def: 1},
  	{name: "tracefpunwindoff", value: &debug.tracefpunwindoff},
  	{name: "updatemaxprocs", value: &debug.updatemaxprocs, def: 1},

From ab3bd70db07cb9e77f1933d567ea9d1d27d1f6a8 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 14:52:20 +0100
Subject: [PATCH 790/887] upgrade go-infra/telemetry

---
 .../0001-Vendor-external-dependencies.patch   | 178 +++++++++++-------
 1 file changed, 109 insertions(+), 69 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index d458f3728a9..21901507cf7 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -18,8 +18,8 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-infra/telemetry/config/config.json     |   73 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  169 ++
- .../internal/appinsights/inmemorychannel.go   |  341 +++
+ .../telemetry/internal/appinsights/client.go  |  182 ++
+ .../internal/appinsights/inmemorychannel.go   |  349 +++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
  .../internal/contracts/response.go            |   32 +
@@ -27,10 +27,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  172 ++
- .../telemetry/internal/config/config.go       |   63 +
+ .../telemetry/internal/config/config.go       |   78 +
  .../telemetry/internal/telemetry/proginfo.go  |   43 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
- .../microsoft/go-infra/telemetry/telemetry.go |  125 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  141 +
  src/cmd/vendor/modules.txt                    |   11 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
@@ -269,7 +269,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 261 files changed, 34032 insertions(+), 7 deletions(-)
+ 261 files changed, 34084 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -525,28 +525,28 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index d15db1306b8e0b..f726601843bdaa 100644
+index d15db1306b8e0b..729a1b141b4fe4 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.34.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 23627773f00451..5ac25412c24ac4 100644
+index 23627773f00451..7611e884110f50 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
  github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd h1:XE6HF7LVJ7/gD0mPMaIHJak0IFP683EUBzqx6+HxPu8=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:XQP+NhZgM1i1+asOSnAFPRzv2HhQibhk6k6FIllx8/Y=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b h1:Q7JCIS7Egwhnlvt6tNNt3KPO9ctGHgyzlRKI0zrIai0=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd h1:vNA5PIOnvHfH7O9GUOZXKUakJpdE7+PzsF641y7Zly0=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
@@ -830,10 +830,10 @@ index 00000000000000..2e96890f60b871
 +- Improve testing.
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
 new file mode 100644
-index 00000000000000..8e280f7c675a46
+index 00000000000000..cecf8c8b42c7f9
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
-@@ -0,0 +1,169 @@
+@@ -0,0 +1,182 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -952,6 +952,9 @@ index 00000000000000..8e280f7c675a46
 +// Close flushes and tears down the submission goroutine and closes internal channels.
 +// Waits until all pending telemetry items have been submitted.
 +func (c *Client) Close(ctx context.Context) {
++	// Synchronize with any in-progress init so we don't miss
++	// a channel that is about to be created.
++	c.initOnce.Do(func() {})
 +	if !c.initialized.Load() {
 +		return
 +	}
@@ -962,6 +965,12 @@ index 00000000000000..8e280f7c675a46
 +// Any telemetry waiting to be sent is discarded.
 +// This is a more abrupt version of [Client.Close].
 +func (c *Client) Stop() {
++	// Synchronize with any in-progress init so we don't miss
++	// a channel that is about to be created.
++	c.initOnce.Do(func() {})
++	if !c.initialized.Load() {
++		return
++	}
 +	c.channel.stop()
 +}
 +
@@ -971,6 +980,10 @@ index 00000000000000..8e280f7c675a46
 +		return
 +	}
 +	c.init()
++	if !c.initialized.Load() {
++		// Stop or Close consumed initOnce before init could run.
++		return
++	}
 +	ev := c.context.envelop(data)
 +	if err := ev.Sanitize(); err != nil {
 +		c.channel.warn("tags were not sanitary and have been sanitized", "error", err)
@@ -1005,10 +1018,10 @@ index 00000000000000..8e280f7c675a46
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
 new file mode 100644
-index 00000000000000..af13a2102d2933
+index 00000000000000..abc091e2b5c6b8
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/inmemorychannel.go
-@@ -0,0 +1,341 @@
+@@ -0,0 +1,349 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1055,6 +1068,7 @@ index 00000000000000..af13a2102d2933
 +
 +	throttled   atomic.Bool
 +	closed      atomic.Bool
++	closeOnce   sync.Once
 +	sendQueue   []*[]batchItem
 +	sendQueueMu sync.Mutex
 +	sendMu      sync.Mutex
@@ -1115,8 +1129,12 @@ index 00000000000000..af13a2102d2933
 +
 +// Queues a single telemetry item
 +func (channel *inMemoryChannel) send(item *contracts.Envelope) {
-+	if item != nil && !channel.closed.Load() {
-+		channel.collectChan <- item
++	if item == nil || channel.closed.Load() {
++		return
++	}
++	select {
++	case channel.collectChan <- item:
++	case <-channel.cancelCtx.Done():
 +	}
 +}
 +
@@ -1125,7 +1143,10 @@ index 00000000000000..af13a2102d2933
 +	if channel.closed.Load() {
 +		return
 +	}
-+	channel.flushChan <- struct{}{}
++	select {
++	case channel.flushChan <- struct{}{}:
++	case <-channel.cancelCtx.Done():
++	}
 +}
 +
 +func (channel *inMemoryChannel) retry(throttled bool, retryAfter time.Time, items []batchItem) {
@@ -1138,13 +1159,11 @@ index 00000000000000..af13a2102d2933
 +var errClosed = errors.New("client closed")
 +
 +func (channel *inMemoryChannel) stop() {
-+	if channel.closed.Load() {
-+		return
-+	}
-+
-+	channel.closed.Store(true)
-+	channel.cancelCauseFunc(errStopped)
-+	channel.checkInflight()
++	channel.closeOnce.Do(func() {
++		channel.closed.Store(true)
++		channel.cancelCauseFunc(errStopped)
++		channel.checkInflight()
++	})
 +}
 +
 +// close flushes and tears down the submission goroutine and closes internal
@@ -1152,19 +1171,21 @@ index 00000000000000..af13a2102d2933
 +// (it is then safe to shut down without losing telemetry) or when
 +// the context is canceled.
 +func (channel *inMemoryChannel) close(ctx context.Context) {
-+	if channel.closed.Load() {
-+		return
-+	}
-+
-+	channel.closed.Store(true)
-+	channel.flushChan <- struct{}{}
-+	select {
-+	case <-ctx.Done():
-+		channel.cancelCauseFunc(context.Cause(ctx))
-+	case <-channel.cancelCtx.Done():
-+		// Successfully flushed
-+	}
-+	channel.checkInflight()
++	channel.closeOnce.Do(func() {
++		channel.closed.Store(true)
++		select {
++		case channel.flushChan <- struct{}{}:
++		case <-channel.cancelCtx.Done():
++			// acceptLoop already exited.
++		}
++		select {
++		case <-ctx.Done():
++			channel.cancelCauseFunc(context.Cause(ctx))
++		case <-channel.cancelCtx.Done():
++			// Successfully flushed
++		}
++		channel.checkInflight()
++	})
 +}
 +
 +func (channel *inMemoryChannel) checkInflight() {
@@ -1861,10 +1882,10 @@ index 00000000000000..0299c87c81cb41
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
 new file mode 100644
-index 00000000000000..7980b1505b2caa
+index 00000000000000..1cb6c22a7bcd72
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-@@ -0,0 +1,63 @@
+@@ -0,0 +1,78 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1914,8 +1935,12 @@ index 00000000000000..7980b1505b2caa
 +}
 +
 +// Expand takes a counter defined with buckets and expands it into distinct
-+// strings for each bucket.
++// strings for each bucket. If the counter ends with "*" (e.g. "go/package:*"),
++// it is returned as-is to indicate a wildcard prefix match.
 +func Expand(counter string) []string {
++	if strings.HasSuffix(counter, "*") {
++		return []string{counter}
++	}
 +	prefix, rest, hasBuckets := strings.Cut(counter, "{")
 +	var counters []string
 +	if hasBuckets {
@@ -1928,6 +1953,17 @@ index 00000000000000..7980b1505b2caa
 +	}
 +	return counters
 +}
++
++// IsWildcard reports whether the counter name is a wildcard pattern.
++func IsWildcard(name string) bool {
++	return strings.HasSuffix(name, "*")
++}
++
++// WildcardPrefix returns the prefix of a wildcard counter name,
++// stripping the trailing "*".
++func WildcardPrefix(name string) string {
++	return strings.TrimSuffix(name, "*")
++}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
 new file mode 100644
 index 00000000000000..f6183bdf3dbf1b
@@ -2017,10 +2053,10 @@ index 00000000000000..02d112edb8ad3e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
 new file mode 100644
-index 00000000000000..d592037b570130
+index 00000000000000..dd1e614cfbd654
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -0,0 +1,125 @@
+@@ -0,0 +1,141 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -2033,6 +2069,7 @@ index 00000000000000..d592037b570130
 +	"runtime"
 +	"runtime/debug"
 +	"slices"
++	"strings"
 +	"time"
 +
 +	"github.com/microsoft/go-infra/telemetry/internal/appinsights"
@@ -2074,6 +2111,7 @@ index 00000000000000..d592037b570130
 +}
 +
 +var countersToUpload map[string]struct{}
++var wildcardPrefixes []string
 +
 +// Start initializes telemetry using the specified configuration.
 +func Start(cfg Config) {
@@ -2110,12 +2148,19 @@ index 00000000000000..d592037b570130
 +		return // Program not configured for telemetry
 +	}
 +	countersToUpload = make(map[string]struct{})
++	wildcardPrefixes = nil
 +	for _, c := range uploadConfig.Programs[progIdx].Counters {
 +		if c.Name == "" {
 +			continue // Skip empty counter names
 +		}
 +		for _, e := range config.Expand(c.Name) {
-+			countersToUpload[e] = struct{}{}
++			if config.IsWildcard(e) {
++				if prefix := config.WildcardPrefix(e); prefix != "" {
++					wildcardPrefixes = append(wildcardPrefixes, prefix)
++				}
++			} else {
++				countersToUpload[e] = struct{}{}
++			}
 +		}
 +	}
 +
@@ -2143,19 +2188,26 @@ index 00000000000000..d592037b570130
 +}
 +
 +func uploadFilter(name string) bool {
-+	_, ok := countersToUpload[name]
-+	return ok
++	if _, ok := countersToUpload[name]; ok {
++		return true
++	}
++	for _, prefix := range wildcardPrefixes {
++		if strings.HasPrefix(name, prefix) {
++			return true
++		}
++	}
++	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7b5b9aa37f749c..c2b79ea9ca5213 100644
+index 7b5b9aa37f749c..da0ddff4fdd903 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260128082012-a1498e2b57dd
-+## explicit; go 1.24
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b
++## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
 +github.com/microsoft/go-infra/telemetry/internal/appinsights
@@ -2197,11 +2249,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-<<<<<<< HEAD
-index 2ac54d7b35e011..043e7ea6bbe4a8 100644
-=======
-index d6c515017a7009..17efde8b19a412 100644
->>>>>>> upstream/microsoft/main
+index 2ac54d7b35e011..15c3ae9e5d1138 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2215,11 +2263,7 @@ index d6c515017a7009..17efde8b19a412 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-<<<<<<< HEAD
-index ba6fd0576632d4..40a76b70d3cc2d 100644
-=======
-index 2223d2a7c231c1..0f168e2048a2e2 100644
->>>>>>> upstream/microsoft/main
+index ba6fd0576632d4..fa636b09d87598 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2233,10 +2277,10 @@ index 2223d2a7c231c1..0f168e2048a2e2 100644
  golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
  golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index be424e1b16c8d0..722b21661f29a8 100644
+index b01136376ef951..469f9ad34cec7b 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -154,6 +154,13 @@ var depsRules = `
+@@ -152,6 +152,13 @@ var depsRules = `
  	< internal/syscall/execenv
  	< SYSCALL;
  
@@ -2250,7 +2294,7 @@ index be424e1b16c8d0..722b21661f29a8 100644
  	# TIME is SYSCALL plus the core packages about time, including context.
  	SYSCALL
  	< time/tzdata
-@@ -547,16 +554,46 @@ var depsRules = `
+@@ -545,16 +552,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2302,7 +2346,7 @@ index be424e1b16c8d0..722b21661f29a8 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -578,6 +615,10 @@ var depsRules = `
+@@ -576,6 +613,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2313,7 +2357,7 @@ index be424e1b16c8d0..722b21661f29a8 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -928,7 +969,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -926,7 +967,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2322,7 +2366,7 @@ index be424e1b16c8d0..722b21661f29a8 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -938,7 +979,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -936,7 +977,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -38196,11 +38240,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-<<<<<<< HEAD
-index e8c6f1efb099eb..ad1216357d8cb2 100644
-=======
-index 48967bc9ee3bd2..203fcbdad089ae 100644
->>>>>>> upstream/microsoft/main
+index e8c6f1efb099eb..537ba69a0046d4 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@

From 492067eb191c2c722beec27a6b0517ed654fe45c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 16:13:56 +0100
Subject: [PATCH 791/887] log telemetry errors while testing

---
 patches/0009-Add-appinsights-telemetry.patch | 44 +++++++++++---------
 1 file changed, 25 insertions(+), 19 deletions(-)

diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index edbc0e10aa7..0eb5475969d 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -6,12 +6,12 @@ Subject: [PATCH] Add appinsights telemetry
 ---
  README.md                                     | 15 ++++++
  src/cmd/go/main.go                            |  8 +++
- src/cmd/go/mstelemetry_test.go                | 52 +++++++++++++++++++
- src/cmd/go/script_test.go                     |  8 +++
+ src/cmd/go/mstelemetry_test.go                | 52 ++++++++++++++++++
+ src/cmd/go/script_test.go                     |  9 ++++
  src/cmd/go/scriptcmds_test.go                 | 11 ++++
- src/cmd/internal/telemetry/counter/counter.go | 48 ++++++++++++++++-
+ src/cmd/internal/telemetry/counter/counter.go | 53 ++++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 ++
- 7 files changed, 144 insertions(+), 1 deletion(-)
+ 7 files changed, 150 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -39,10 +39,10 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +these practices.
 \ No newline at end of file
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index e81969ca4a3144..67dbcb2e7a3cb9 100644
+index 8cdfd9196e4cb1..3f4a4d8f912969 100644
 --- a/src/cmd/go/main.go
 +++ b/src/cmd/go/main.go
-@@ -111,6 +111,14 @@ func main() {
+@@ -110,6 +110,14 @@ func main() {
  	}
  	flag.Usage = base.Usage
  	flag.Parse()
@@ -116,10 +116,10 @@ index 00000000000000..6993137ad56e8c
 +	fmt.Fprint(w, `{"itemsReceived": 1, "itemsAccepted": 1}`)
 +}
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index 1345ea8bb8e530..e2b75957e21d3a 100644
+index f84a42352c5768..b7168754091aa1 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
-@@ -60,6 +60,7 @@ func TestScript(t *testing.T) {
+@@ -62,6 +62,7 @@ func TestScript(t *testing.T) {
  	}
  
  	StartProxy()
@@ -127,16 +127,17 @@ index 1345ea8bb8e530..e2b75957e21d3a 100644
  
  	var (
  		ctx         = context.Background()
-@@ -254,6 +255,8 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
+@@ -256,6 +257,9 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
  		"HGRCPATH=",
  		"GOTOOLCHAIN=auto",
  		"MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1", // allow non-local toolchains, some tests expect GOTOOLCHAIN to be honored
 +		"MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT=" + appInsightsURL,
 +		"MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL=1", // allow telemetry for Go development versions
++		"MS_GOTOOLCHAIN_TELEMETRY_VERBOSE=2",        // enable verbose telemetry logging to help diagnose test failures
  		"newline=\n",
  	}
  
-@@ -408,6 +411,11 @@ func checkCounters(t *testing.T, telemetryDir string) {
+@@ -410,6 +414,11 @@ func checkCounters(t *testing.T, telemetryDir string) {
  			t.Fatal("go was invoked but no counters were incremented")
  		}
  	}
@@ -149,10 +150,10 @@ index 1345ea8bb8e530..e2b75957e21d3a 100644
  
  // Copied from https://go.googlesource.com/telemetry/+/5f08a0cbff3f/internal/telemetry/mode.go#122
 diff --git a/src/cmd/go/scriptcmds_test.go b/src/cmd/go/scriptcmds_test.go
-index ced8d880e9ae3a..b3ad521ff94873 100644
+index 8195e830caa31b..cb59a8b278e9b4 100644
 --- a/src/cmd/go/scriptcmds_test.go
 +++ b/src/cmd/go/scriptcmds_test.go
-@@ -71,6 +71,7 @@ func scriptCC(cmdExec script.Cmd) script.Cmd {
+@@ -72,6 +72,7 @@ func scriptCC(cmdExec script.Cmd) script.Cmd {
  }
  
  var scriptGoInvoked sync.Map // testing.TB → go command was invoked
@@ -160,7 +161,7 @@ index ced8d880e9ae3a..b3ad521ff94873 100644
  
  // scriptGo runs the go command.
  func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd {
-@@ -85,6 +86,16 @@ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd
+@@ -86,6 +87,16 @@ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd
  		if !dup {
  			t.Cleanup(func() { scriptGoInvoked.Delete(t) })
  		}
@@ -178,7 +179,7 @@ index ced8d880e9ae3a..b3ad521ff94873 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..2c1b8143d60764 100644
+index 5cef0b0041551a..df806e4f2f6efc 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
 @@ -7,10 +7,24 @@
@@ -206,7 +207,7 @@ index 5cef0b0041551a..2c1b8143d60764 100644
  )
  
  var openCalled bool
-@@ -24,9 +38,38 @@ func Open() {
+@@ -24,9 +38,43 @@ func Open() {
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
  }
  
@@ -216,8 +217,13 @@ index 5cef0b0041551a..2c1b8143d60764 100644
 +		return
 +	}
 +	var logger *slog.Logger
-+	if os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_VERBOSE") == "1" {
-+		logger = slog.Default()
++	level := slog.LevelWarn
++	switch os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_VERBOSE") {
++	case "2":
++		level = slog.LevelInfo
++		fallthrough
++	case "1":
++		logger = slog.New(slog.NewTextHandler(log.Default().Writer(), &slog.HandlerOptions{Level: level}))
 +	}
 +	mstelemetry.Start(mstelemetry.Config{
 +		InstrumentationKey: appInsightsInstrumentationKey,
@@ -245,7 +251,7 @@ index 5cef0b0041551a..2c1b8143d60764 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +87,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +92,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -253,7 +259,7 @@ index 5cef0b0041551a..2c1b8143d60764 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +100,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +105,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {

From b25c7741686fae2044827a5ad13ef2623bddec39 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 27 Mar 2026 16:55:25 +0100
Subject: [PATCH 792/887] fix telemetry

---
 patches/0009-Add-appinsights-telemetry.patch | 51 +++++++++++++-------
 1 file changed, 33 insertions(+), 18 deletions(-)

diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index 0eb5475969d..33ae5531a8d 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -4,14 +4,14 @@ Date: Thu, 29 May 2025 14:53:58 +0200
 Subject: [PATCH] Add appinsights telemetry
 
 ---
- README.md                                     | 15 ++++++
+ README.md                                     | 15 +++++
  src/cmd/go/main.go                            |  8 +++
- src/cmd/go/mstelemetry_test.go                | 52 ++++++++++++++++++
- src/cmd/go/script_test.go                     |  9 ++++
- src/cmd/go/scriptcmds_test.go                 | 11 ++++
- src/cmd/internal/telemetry/counter/counter.go | 53 ++++++++++++++++++-
- .../telemetry/counter/counter_bootstrap.go    |  3 ++
- 7 files changed, 150 insertions(+), 1 deletion(-)
+ src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++++
+ src/cmd/go/script_test.go                     |  9 +++
+ src/cmd/go/scriptcmds_test.go                 | 22 ++++++++
+ src/cmd/internal/telemetry/counter/counter.go | 53 +++++++++++++++++-
+ .../telemetry/counter/counter_bootstrap.go    |  3 +
+ 7 files changed, 165 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -59,10 +59,10 @@ index 8cdfd9196e4cb1..3f4a4d8f912969 100644
  
 diff --git a/src/cmd/go/mstelemetry_test.go b/src/cmd/go/mstelemetry_test.go
 new file mode 100644
-index 00000000000000..6993137ad56e8c
+index 00000000000000..010270fb6ad4cf
 --- /dev/null
 +++ b/src/cmd/go/mstelemetry_test.go
-@@ -0,0 +1,52 @@
+@@ -0,0 +1,56 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -115,8 +115,12 @@ index 00000000000000..6993137ad56e8c
 +	appInsightsRequests.Add(1)
 +	fmt.Fprint(w, `{"itemsReceived": 1, "itemsAccepted": 1}`)
 +}
++
++func appInsightsTotalRequests() int64 {
++	return appInsightsRequests.Load()
++}
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index f84a42352c5768..b7168754091aa1 100644
+index f84a42352c5768..69c1d70c0a972f 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
 @@ -62,6 +62,7 @@ func TestScript(t *testing.T) {
@@ -141,8 +145,8 @@ index f84a42352c5768..b7168754091aa1 100644
  			t.Fatal("go was invoked but no counters were incremented")
  		}
  	}
-+	if _, ok := scriptGoBuildInvoked.Load(testing.TB(t)); ok {
-+		if appInsightsRequests.Load() == 0 {
++	if _, ok := scriptGoBuildSucceeded.Load(testing.TB(t)); ok {
++		if appInsightsTotalRequests() == 0 {
 +			t.Fatal("go was invoked but no App Insights request were recorded")
 +		}
 +	}
@@ -150,18 +154,18 @@ index f84a42352c5768..b7168754091aa1 100644
  
  // Copied from https://go.googlesource.com/telemetry/+/5f08a0cbff3f/internal/telemetry/mode.go#122
 diff --git a/src/cmd/go/scriptcmds_test.go b/src/cmd/go/scriptcmds_test.go
-index 8195e830caa31b..cb59a8b278e9b4 100644
+index 8195e830caa31b..882aeecfa562b9 100644
 --- a/src/cmd/go/scriptcmds_test.go
 +++ b/src/cmd/go/scriptcmds_test.go
 @@ -72,6 +72,7 @@ func scriptCC(cmdExec script.Cmd) script.Cmd {
  }
  
  var scriptGoInvoked sync.Map // testing.TB → go command was invoked
-+var scriptGoBuildInvoked sync.Map
++var scriptGoBuildSucceeded sync.Map
  
  // scriptGo runs the go command.
  func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd {
-@@ -86,6 +87,16 @@ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd
+@@ -86,6 +87,27 @@ func scriptGo(cancel func(*exec.Cmd) error, waitDelay time.Duration) script.Cmd
  		if !dup {
  			t.Cleanup(func() { scriptGoInvoked.Delete(t) })
  		}
@@ -169,10 +173,21 @@ index 8195e830caa31b..cb59a8b278e9b4 100644
 +			// If the first argument is a subcommand, record it.
 +			switch s[0] {
 +			case "build", "install", "run":
-+				_, dup = scriptGoBuildInvoked.LoadOrStore(t, true)
-+				if !dup {
-+					t.Cleanup(func() { scriptGoBuildInvoked.Delete(t) })
++				wait, err := cmd.Run(state, s...)
++				if err != nil {
++					return wait, err
++				}
++				waitAndRecord := func(state *script.State) (stdout, stderr string, err error) {
++					stdout, stderr, err = wait(state)
++					if err == nil {
++						_, dup = scriptGoBuildSucceeded.LoadOrStore(t, true)
++						if !dup {
++							t.Cleanup(func() { scriptGoBuildSucceeded.Delete(t) })
++						}
++					}
++					return stdout, stderr, err
 +				}
++				return waitAndRecord, nil
 +			}
 +		}
  		return cmd.Run(state, s...)

From 8b6d5c3ca87e2f493caad3e4eaa86f2ac0384311 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 30 Mar 2026 12:50:17 +0000
Subject: [PATCH 793/887] build(deps): bump github/codeql-action from 4.34.1 to
 4.35.1 (#2214)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/38697555549f1db7851b81482ff19f1fa5c4fedc...c10b8064de6f491fea524254123dbe5e09572f13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b0af6f91197..8e165e398fb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           category: /language:go

From 1ccccbc41f5a3e64e9d805e477ca607ecd667c6f Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Fri, 27 Mar 2026 09:21:46 -0700
Subject: [PATCH 794/887] fix flake

---
 eng/pipeline/stages/run-stage.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index eb740f2d04b..8e755574afd 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -275,7 +275,13 @@ stages:
                   # job ultimately fails. This lets us manually rerun to verify the job attempt label.
                   Write-Host "##vso[task.setvariable variable=TEST_BUILDER_SUCCESSFUL]"
                   Write-Host "Forcing flake on all attempts to test retry + job attempt visibility."
-                  exit 1
+                  # On the FINAL attempt, explicitly fail the step so the stage fails and can be
+                  # rerun to verify the job attempt label. Non-FINAL attempts skip this so the
+                  # retry chain continues (ignoreLASTEXITCODE: true handles their exit code).
+                  if ('${{ attempt }}' -eq 'FINAL') {
+                    Write-Host "##vso[task.complete result=Failed;]Forced failure for retry visibility testing."
+                    exit 1
+                  }
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:

From a4c97b108a39578cf8b59a401e2e7c2f48af6fef Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Wed, 1 Apr 2026 10:31:21 -0700
Subject: [PATCH 795/887] Remove forced flake -- stage for review

---
 eng/_util/go.mod                  |  2 +-
 eng/_util/go.sum                  |  4 ++--
 eng/pipeline/stages/run-stage.yml | 14 --------------
 3 files changed, 3 insertions(+), 17 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 1d564bd43b5..ec8e4f8d413 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc
+	github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.52.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index a8a40dab198..8748aa261d9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc h1:tAXbJvXs8FvgSZk4Zvi38E5QFt6/Cm/9vNDrTba1UZs=
-github.com/microsoft/go-infra v0.0.10-0.20260326200658-506529e22ddc/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
+github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1 h1:y5hD73+fwkiKd5d6qANKBTAPyDe+Qph8D4zwoeJOwGg=
+github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 8e755574afd..529103d1be7 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -268,20 +268,6 @@ stages:
                       -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml' `
                       -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt' `
                       -jobattempt '$(System.StageAttempt)'
-
-                  # TODO: Remove this forced flake. It's used to test retry attempt visibility.
-                  # https://github.com/microsoft/go/issues/2134
-                  # Clear TEST_BUILDER_SUCCESSFUL on every attempt so all retries run and the
-                  # job ultimately fails. This lets us manually rerun to verify the job attempt label.
-                  Write-Host "##vso[task.setvariable variable=TEST_BUILDER_SUCCESSFUL]"
-                  Write-Host "Forcing flake on all attempts to test retry + job attempt visibility."
-                  # On the FINAL attempt, explicitly fail the step so the stage fails and can be
-                  # rerun to verify the job attempt label. Non-FINAL attempts skip this so the
-                  # retry chain continues (ignoreLASTEXITCODE: true handles their exit code).
-                  if ('${{ attempt }}' -eq 'FINAL') {
-                    Write-Host "##vso[task.complete result=Failed;]Forced failure for retry visibility testing."
-                    exit 1
-                  }
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:

From df335678d7ecad36e1046d1a4eaba834404466a7 Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 1 Apr 2026 23:45:28 -0700
Subject: [PATCH 796/887] Update eng/pipeline/stages/run-stage.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/pipeline/stages/run-stage.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 529103d1be7..680e6ddf554 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -290,7 +290,7 @@ stages:
               inputs:
                 testResultsFormat: JUnit
                 testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-*.xml
-                testRunTitle: $(System.JobDisplayName) (attempt $(System.StageAttempt))
+                testRunTitle: $(System.JobDisplayName) (stage attempt $(System.StageAttempt))
                 buildPlatform: ${{ parameters.builder.arch }}
                 buildConfiguration: ${{ parameters.builder.config }}
                 publishRunAttachments: true

From 7837bb8eae88f1754df02216bbf3b4a135455dc4 Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 1 Apr 2026 23:45:38 -0700
Subject: [PATCH 797/887] Update eng/pipeline/stages/run-stage.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/pipeline/stages/run-stage.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 680e6ddf554..7eda25f5acf 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -290,6 +290,7 @@ stages:
               inputs:
                 testResultsFormat: JUnit
                 testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-*.xml
+                mergeTestResults: true
                 testRunTitle: $(System.JobDisplayName) (stage attempt $(System.StageAttempt))
                 buildPlatform: ${{ parameters.builder.arch }}
                 buildConfiguration: ${{ parameters.builder.config }}

From 3daf7300ac5e642dec226c37da1511b7b7f95c9e Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 1 Apr 2026 23:45:47 -0700
Subject: [PATCH 798/887] Update eng/pipeline/stages/run-stage.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/pipeline/stages/run-stage.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index 7eda25f5acf..f5f4b0a591a 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -302,7 +302,7 @@ stages:
               condition: succeededOrFailed()
               inputs:
                 targetPath: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput
-                artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.StageAttempt)
+                artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.StageAttempt)-job-$(System.JobAttempt)
 
           # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
           #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:

From a1e96c537346774f2f8799c9ddd1b305eb3c1363 Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 1 Apr 2026 23:46:00 -0700
Subject: [PATCH 799/887] Update eng/_util/buildutil/testjson.go

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 eng/_util/buildutil/testjson.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 1f0ce1412ba..9da9ef89081 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -34,7 +34,7 @@ func BindTestJSONFlags() *TestJSONFlags {
 		"Write raw test output to a new file at this path and summarize any test JSON before it reaches stdout.")
 	flag.StringVar(
 		&f.JobAttempt, "jobattempt", "",
-		"Label for the CI job-level rerun attempt (e.g. System.StageAttempt), included in JUnit test suite names.")
+		"Label for the CI attempt (such as a stage or job rerun; e.g. Azure DevOps System.StageAttempt), included in JUnit test suite names.")
 	return &f
 }
 

From 01314bcb35ad3b097273eac726c0355779a31ff9 Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Thu, 2 Apr 2026 10:06:52 -0700
Subject: [PATCH 800/887] remove -jobattempt

---
 eng/_util/buildutil/testjson.go   |  8 -------
 eng/_util/go.mod                  |  2 +-
 eng/_util/go.sum                  |  4 ++--
 eng/pipeline/stages/run-stage.yml | 35 ++++++++++++++++++-------------
 4 files changed, 23 insertions(+), 26 deletions(-)

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 9da9ef89081..214e70ef055 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -21,7 +21,6 @@ import (
 type TestJSONFlags struct {
 	JUnitOutFile   string
 	RawTestOutFile string
-	JobAttempt     string
 }
 
 func BindTestJSONFlags() *TestJSONFlags {
@@ -32,9 +31,6 @@ func BindTestJSONFlags() *TestJSONFlags {
 	flag.StringVar(
 		&f.RawTestOutFile, "rawtestout", "",
 		"Write raw test output to a new file at this path and summarize any test JSON before it reaches stdout.")
-	flag.StringVar(
-		&f.JobAttempt, "jobattempt", "",
-		"Label for the CI attempt (such as a stage or job rerun; e.g. Azure DevOps System.StageAttempt), included in JUnit test suite names.")
 	return &f
 }
 
@@ -46,9 +42,6 @@ func (f *TestJSONFlags) AppendToCmdline(cmdline []string) []string {
 		if f.RawTestOutFile != "" {
 			cmdline = append(cmdline, "-rawtestout", f.RawTestOutFile)
 		}
-		if f.JobAttempt != "" {
-			cmdline = append(cmdline, "-jobattempt", f.JobAttempt)
-		}
 	}
 	return cmdline
 }
@@ -71,7 +64,6 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 			}()
 			c := json2junit.NewConverterWithOptions(jf, &json2junit.Options{
 				IncludePackageInTestName: true,
-				JobAttempt:               f.JobAttempt,
 			})
 			defer func() {
 				err = errors.Join(err, c.Close())
diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index ec8e4f8d413..ba4459701a0 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1
+	github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.52.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 8748aa261d9..9932b4a72c9 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1 h1:y5hD73+fwkiKd5d6qANKBTAPyDe+Qph8D4zwoeJOwGg=
-github.com/microsoft/go-infra v0.0.10-0.20260401171018-3fd8e08fb2a1/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
+github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96 h1:GK33KDwSMiBpGR82fU2MIdwk+febXI+d51uLQI5nmIE=
+github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index f5f4b0a591a..acc05a8410e 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -266,8 +266,15 @@ stages:
                       $(if ('${{ parameters.builder.experiment }}') { '-experiment'; '${{ parameters.builder.experiment }}' }) `
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
                       -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml' `
-                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt' `
-                      -jobattempt '$(System.StageAttempt)'
+                      -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt'
+
+                  # TODO: Remove this forced flake. It's used to test retry attempt visibility.
+                  # https://github.com/microsoft/go/issues/2134
+                  Write-Host "##vso[task.setvariable variable=TEST_BUILDER_SUCCESSFUL]"
+                  if ('${{ attempt }}' -eq 'FINAL') {
+                    Write-Host "##vso[task.complete result=Failed;]Forced failure for retry visibility testing."
+                    exit 1
+                  }
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -282,19 +289,17 @@ stages:
                   # Don't fail the job if we are at the last retry and the builder is marked as broken.
                   continueOnError: true
 
-            # Publish test results from all attempts in a single test run.
-            # Suite names in the XML include retry/job attempt labels to distinguish them.
-            - task: PublishTestResults@2
-              displayName: Publish test results
-              condition: succeededOrFailed()
-              inputs:
-                testResultsFormat: JUnit
-                testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-*.xml
-                mergeTestResults: true
-                testRunTitle: $(System.JobDisplayName) (stage attempt $(System.StageAttempt))
-                buildPlatform: ${{ parameters.builder.arch }}
-                buildConfiguration: ${{ parameters.builder.config }}
-                publishRunAttachments: true
+              # Publish this retry attempt's test results as its own test run.
+              - task: PublishTestResults@2
+                displayName: Publish test results (${{ attempt }})
+                condition: succeededOrFailed()
+                inputs:
+                  testResultsFormat: JUnit
+                  testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml
+                  testRunTitle: $(System.JobDisplayName) (retry ${{ attempt }}, stage attempt $(System.StageAttempt))
+                  buildPlatform: ${{ parameters.builder.arch }}
+                  buildConfiguration: ${{ parameters.builder.config }}
+                  publishRunAttachments: true
 
             # Publish raw test JSON output and the published (or attempted to publish) JUnit XML.
             - task: ${{ iif(eq(variables['System.TeamProject'], 'public'), '', '1ES.') }}PublishPipelineArtifact@1

From 90db8adbabc7848ccc5fe8e9de0414fa8c82863c Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Fri, 3 Apr 2026 14:44:49 -0700
Subject: [PATCH 801/887] remove forced flake

---
 eng/pipeline/stages/run-stage.yml | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index acc05a8410e..da30e5b5d26 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -267,14 +267,6 @@ stages:
                       $(if ('${{ parameters.builder.fips }}') { '-fipsmode' }) `
                       -junitout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml' `
                       -rawtestout '$(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/raw-json-attempt-${{ attempt }}.txt'
-
-                  # TODO: Remove this forced flake. It's used to test retry attempt visibility.
-                  # https://github.com/microsoft/go/issues/2134
-                  Write-Host "##vso[task.setvariable variable=TEST_BUILDER_SUCCESSFUL]"
-                  if ('${{ attempt }}' -eq 'FINAL') {
-                    Write-Host "##vso[task.complete result=Failed;]Forced failure for retry visibility testing."
-                    exit 1
-                  }
                 ${{ if eq(length(parameters.retryAttempts), 1) }}:
                   displayName: Test
                 ${{ else }}:
@@ -292,7 +284,7 @@ stages:
               # Publish this retry attempt's test results as its own test run.
               - task: PublishTestResults@2
                 displayName: Publish test results (${{ attempt }})
-                condition: succeededOrFailed()
+                condition: and(ne(variables['TEST_BUILDER_SUCCESSFUL'], 'true'), succeededOrFailed())
                 inputs:
                   testResultsFormat: JUnit
                   testResultsFiles: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput/TestResults-attempt-${{ attempt }}.xml

From b6710419ae299a4e9e9639b8514a26c9dc7d7cac Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 7 Apr 2026 12:12:50 +0200
Subject: [PATCH 802/887] fix TestScript

---
 .../0001-Vendor-external-dependencies.patch   | 68 ++++++++++++-------
 patches/0009-Add-appinsights-telemetry.patch  | 26 +++----
 2 files changed, 56 insertions(+), 38 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 21901507cf7..c5f6c9835b2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -18,7 +18,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-infra/telemetry/config/config.json     |   73 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  182 ++
+ .../telemetry/internal/appinsights/client.go  |  192 ++
  .../internal/appinsights/inmemorychannel.go   |  349 +++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
@@ -28,9 +28,9 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  172 ++
  .../telemetry/internal/config/config.go       |   78 +
- .../telemetry/internal/telemetry/proginfo.go  |   43 +
+ .../telemetry/internal/telemetry/proginfo.go  |   46 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
- .../microsoft/go-infra/telemetry/telemetry.go |  141 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  144 +
  src/cmd/vendor/modules.txt                    |   11 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
@@ -269,7 +269,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 261 files changed, 34084 insertions(+), 7 deletions(-)
+ 261 files changed, 34100 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -525,28 +525,28 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index d15db1306b8e0b..729a1b141b4fe4 100644
+index d15db1306b8e0b..164fb7426c7704 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.34.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 23627773f00451..7611e884110f50 100644
+index 23627773f00451..e3806df7e3076e 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
  github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b h1:Q7JCIS7Egwhnlvt6tNNt3KPO9ctGHgyzlRKI0zrIai0=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f h1:2CnbYQdvkOERXlOrpx0bWurWlynUHmmgxALucaOnVQg=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd h1:vNA5PIOnvHfH7O9GUOZXKUakJpdE7+PzsF641y7Zly0=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
@@ -830,10 +830,10 @@ index 00000000000000..2e96890f60b871
 +- Improve testing.
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
 new file mode 100644
-index 00000000000000..cecf8c8b42c7f9
+index 00000000000000..c3dd88924fdcfa
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
-@@ -0,0 +1,182 @@
+@@ -0,0 +1,192 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -898,7 +898,9 @@ index 00000000000000..cecf8c8b42c7f9
 +
 +// init initializes the client.
 +// It is safe to call this method multiple times concurrently.
-+func (c *Client) init() {
++// Returns true if the client is initialized after the call, false if init
++// is called after the client has been stopped or closed.
++func (c *Client) init() bool {
 +	c.initOnce.Do(func() {
 +		if c.InstrumentationKey == "" {
 +			panic("instrumentation key is required")
@@ -916,6 +918,17 @@ index 00000000000000..cecf8c8b42c7f9
 +		go c.channel.acceptLoop()
 +		c.initialized.Store(true)
 +	})
++	return c.initialized.Load()
++
++}
++
++// cancel tries to prevent the client from being initialized.
++// It is safe to call this method multiple times concurrently.
++// Returns true if the client is not initialized after the call, false if cancel
++// is called after the client has been initialized.
++func (c *Client) cancel() bool {
++	c.initOnce.Do(func() {})
++	return !c.initialized.Load()
 +}
 +
 +func setupContext(instrumentationKey string, tags map[string]string) *telemetryContext {
@@ -954,8 +967,7 @@ index 00000000000000..cecf8c8b42c7f9
 +func (c *Client) Close(ctx context.Context) {
 +	// Synchronize with any in-progress init so we don't miss
 +	// a channel that is about to be created.
-+	c.initOnce.Do(func() {})
-+	if !c.initialized.Load() {
++	if c.cancel() {
 +		return
 +	}
 +	c.channel.close(ctx)
@@ -967,8 +979,7 @@ index 00000000000000..cecf8c8b42c7f9
 +func (c *Client) Stop() {
 +	// Synchronize with any in-progress init so we don't miss
 +	// a channel that is about to be created.
-+	c.initOnce.Do(func() {})
-+	if !c.initialized.Load() {
++	if c.cancel() {
 +		return
 +	}
 +	c.channel.stop()
@@ -979,8 +990,7 @@ index 00000000000000..cecf8c8b42c7f9
 +	if n == 0 || (c.UploadFilter != nil && !c.UploadFilter(data.Name)) {
 +		return
 +	}
-+	c.init()
-+	if !c.initialized.Load() {
++	if !c.init() {
 +		// Stop or Close consumed initOnce before init could run.
 +		return
 +	}
@@ -1966,10 +1976,10 @@ index 00000000000000..1cb6c22a7bcd72
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
 new file mode 100644
-index 00000000000000..f6183bdf3dbf1b
+index 00000000000000..4dd4b5b3243a0d
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/proginfo.go
-@@ -0,0 +1,43 @@
+@@ -0,0 +1,46 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1989,7 +1999,7 @@ index 00000000000000..f6183bdf3dbf1b
 +// the Go version, and will typically be of the form "go1.2.3", not a semantic
 +// version of the form "v1.2.3". Go versions may also include spaces and
 +// special characters.
-+func ProgramInfo(info *debug.BuildInfo) (goVers, progPath string) {
++func ProgramInfo(info *debug.BuildInfo, trimTestSuffix bool) (goVers, progPath string) {
 +	goVers = info.GoVersion
 +	if strings.Contains(goVers, "devel") || strings.Contains(goVers, "-") || !version.IsValid(goVers) {
 +		if v, rest, ok := strings.Cut(goVers, "-microsoft"); ok &&
@@ -2010,6 +2020,9 @@ index 00000000000000..f6183bdf3dbf1b
 +	if progPath == "" {
 +		progPath = strings.TrimSuffix(filepath.Base(os.Args[0]), ".exe")
 +	}
++	if trimTestSuffix {
++		progPath, _ = strings.CutSuffix(progPath, ".test") // Remove ".test" suffix added by "go test"
++	}
 +
 +	return goVers, progPath
 +}
@@ -2053,10 +2066,10 @@ index 00000000000000..02d112edb8ad3e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
 new file mode 100644
-index 00000000000000..dd1e614cfbd654
+index 00000000000000..e50deaa4189b18
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -0,0 +1,141 @@
+@@ -0,0 +1,144 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -2105,6 +2118,9 @@ index 00000000000000..dd1e614cfbd654
 +	// upload configuration does not explicitly include them.
 +	AllowGoDevel bool
 +
++	// If true, remove ".test" suffix from program name when running tests.
++	TrimTestSuffix bool
++
 +	// Logger specifies a structured logger.
 +	// If nil nothing is logged.
 +	Logger *slog.Logger
@@ -2132,7 +2148,7 @@ index 00000000000000..dd1e614cfbd654
 +	if !ok {
 +		panic("failed to read build info for telemetry")
 +	}
-+	ver, prog := telemetry.ProgramInfo(bi)
++	ver, prog := telemetry.ProgramInfo(bi, cfg.TrimTestSuffix)
 +	if ver == "devel" {
 +		if !cfg.AllowGoDevel {
 +			// If the Go version is a development version and we are not allowing
@@ -2199,14 +2215,14 @@ index 00000000000000..dd1e614cfbd654
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7b5b9aa37f749c..da0ddff4fdd903 100644
+index 7b5b9aa37f749c..ea74e94ccc601c 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260327132859-2bb09fc2075b
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f
 +## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index 33ae5531a8d..88461d5a0c7 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -7,11 +7,11 @@ Subject: [PATCH] Add appinsights telemetry
  README.md                                     | 15 +++++
  src/cmd/go/main.go                            |  8 +++
  src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++++
- src/cmd/go/script_test.go                     |  9 +++
+ src/cmd/go/script_test.go                     | 10 ++++
  src/cmd/go/scriptcmds_test.go                 | 22 ++++++++
- src/cmd/internal/telemetry/counter/counter.go | 53 +++++++++++++++++-
+ src/cmd/internal/telemetry/counter/counter.go | 54 +++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 +
- 7 files changed, 165 insertions(+), 1 deletion(-)
+ 7 files changed, 167 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -120,7 +120,7 @@ index 00000000000000..010270fb6ad4cf
 +	return appInsightsRequests.Load()
 +}
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index f84a42352c5768..69c1d70c0a972f 100644
+index f84a42352c5768..7521ce3db4af9f 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
 @@ -62,6 +62,7 @@ func TestScript(t *testing.T) {
@@ -131,17 +131,18 @@ index f84a42352c5768..69c1d70c0a972f 100644
  
  	var (
  		ctx         = context.Background()
-@@ -256,6 +257,9 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
+@@ -256,6 +257,10 @@ func scriptEnv(srv *vcstest.Server, srvCertFile string) ([]string, error) {
  		"HGRCPATH=",
  		"GOTOOLCHAIN=auto",
  		"MS_GOTOOLCHAIN_ALLOW_NON_LOCAL=1", // allow non-local toolchains, some tests expect GOTOOLCHAIN to be honored
 +		"MS_GOTOOLCHAIN_TELEMETRY_ENDPOINT=" + appInsightsURL,
-+		"MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL=1", // allow telemetry for Go development versions
-+		"MS_GOTOOLCHAIN_TELEMETRY_VERBOSE=2",        // enable verbose telemetry logging to help diagnose test failures
++		"MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL=1",   // allow telemetry for Go development versions
++		"MS_GOTOOLCHAIN_TELEMETRY_VERBOSE=2",          // enable verbose telemetry logging to help diagnose test failures
++		"MS_GOTOOLCHAIN_TELEMETRY_TRIM_TEST_SUFFIX=1", // trim ".test" suffix from program name for telemetry purposes when running tests
  		"newline=\n",
  	}
  
-@@ -410,6 +414,11 @@ func checkCounters(t *testing.T, telemetryDir string) {
+@@ -410,6 +415,11 @@ func checkCounters(t *testing.T, telemetryDir string) {
  			t.Fatal("go was invoked but no counters were incremented")
  		}
  	}
@@ -194,7 +195,7 @@ index 8195e830caa31b..882aeecfa562b9 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..df806e4f2f6efc 100644
+index 5cef0b0041551a..8c2bae0e613c92 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
 @@ -7,10 +7,24 @@
@@ -222,7 +223,7 @@ index 5cef0b0041551a..df806e4f2f6efc 100644
  )
  
  var openCalled bool
-@@ -24,9 +38,43 @@ func Open() {
+@@ -24,9 +38,44 @@ func Open() {
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
  }
  
@@ -246,6 +247,7 @@ index 5cef0b0041551a..df806e4f2f6efc 100644
 +		AllowGoDevel:       os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_ALLOW_GO_DEVEL") == "1",
 +		UploadConfig:       msconfig.Config,
 +		Logger:             logger,
++		TrimTestSuffix:     os.Getenv("MS_GOTOOLCHAIN_TELEMETRY_TRIM_TEST_SUFFIX") == "1",
 +	})
 +}
 +
@@ -266,7 +268,7 @@ index 5cef0b0041551a..df806e4f2f6efc 100644
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +92,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +93,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -274,7 +276,7 @@ index 5cef0b0041551a..df806e4f2f6efc 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +105,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +106,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {

From 766f582c9954ffcf5837552d03a45e7a6835adf3 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 7 Apr 2026 14:57:48 +0200
Subject: [PATCH 803/887] revendor

---
 patches/0001-Vendor-external-dependencies.patch | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index c5f6c9835b2..d1d33b78420 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -525,28 +525,28 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index d15db1306b8e0b..164fb7426c7704 100644
+index d15db1306b8e0b..d9db8bce7b540b 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.34.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 23627773f00451..e3806df7e3076e 100644
+index 23627773f00451..1b41d11a010450 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
  github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f h1:2CnbYQdvkOERXlOrpx0bWurWlynUHmmgxALucaOnVQg=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c h1:qOt7PpDH8k4734emsdXNylY79cY2qOHubeVP8Z/5iwI=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd h1:vNA5PIOnvHfH7O9GUOZXKUakJpdE7+PzsF641y7Zly0=
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
@@ -2215,14 +2215,14 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7b5b9aa37f749c..ea74e94ccc601c 100644
+index 7b5b9aa37f749c..1f05d26a591c8d 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260407095442-128403fa6c0f
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c
 +## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter

From 040d75cdb4f5178dc6a6ad2fb003b3ecb5007d0f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 7 Apr 2026 14:59:25 +0200
Subject: [PATCH 804/887] upgrade submodule

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 291ee5d7de2..a415314c0bd 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 291ee5d7de2a2d96c44c57084f6383235baab2a1
+Subproject commit a415314c0bdec971ecd503471c804ec0208c6a2b

From 5f595ff286128811b8ad5a57bdf816f500525a25 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Apr 2026 12:21:24 +0200
Subject: [PATCH 805/887] fix http2 and windows tests

---
 patches/0016-Skip-http2-tests.patch           |  41 +++++
 ...imum-Windows-target-version-fallback.patch | 167 ++++++++++++++++++
 2 files changed, 208 insertions(+)
 create mode 100644 patches/0016-Skip-http2-tests.patch
 create mode 100644 patches/0017-Port-minimum-Windows-target-version-fallback.patch

diff --git a/patches/0016-Skip-http2-tests.patch b/patches/0016-Skip-http2-tests.patch
new file mode 100644
index 00000000000..39b7477f355
--- /dev/null
+++ b/patches/0016-Skip-http2-tests.patch
@@ -0,0 +1,41 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Wed, 8 Apr 2026 12:15:13 +0200
+Subject: [PATCH] Skip http2 tests
+
+http2 tests can't be run in FIPS mode due to a weird interaction between
+crypto and test/synctest bubbles.
+
+Tracked at https://github.com/golang/go/issues/78557
+---
+ src/net/http/internal/http2/http2_test.go | 10 ++++++++++
+ 1 file changed, 10 insertions(+)
+
+diff --git a/src/net/http/internal/http2/http2_test.go b/src/net/http/internal/http2/http2_test.go
+index ad1b9a6d06e773..7e7042796a12d8 100644
+--- a/src/net/http/internal/http2/http2_test.go
++++ b/src/net/http/internal/http2/http2_test.go
+@@ -5,6 +5,7 @@
+ package http2
+ 
+ import (
++	"crypto/fips140"
+ 	"flag"
+ 	"fmt"
+ 	"os"
+@@ -28,6 +29,15 @@ func init() {
+ 	flag.BoolVar(&VerboseLogs, "verboseh2", VerboseLogs, "Verbose HTTP/2 debug logging")
+ }
+ 
++func TestMain(m *testing.M) {
++	if fips140.Enabled() {
++		// TODO: Remove once https://github.com/golang/go/issues/78557 is resolved.
++		os.Exit(0)
++	}
++
++	os.Exit(m.Run())
++}
++
+ func TestSettingString(t *testing.T) {
+ 	tests := []struct {
+ 		s    Setting
diff --git a/patches/0017-Port-minimum-Windows-target-version-fallback.patch b/patches/0017-Port-minimum-Windows-target-version-fallback.patch
new file mode 100644
index 00000000000..4e64f5340cc
--- /dev/null
+++ b/patches/0017-Port-minimum-Windows-target-version-fallback.patch
@@ -0,0 +1,167 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Wed, 8 Apr 2026 12:19:33 +0200
+Subject: [PATCH] Port minimum Windows target version fallback
+
+Remove once https://go-review.googlesource.com/c/go/+/763960 is merged.
+---
+ src/cmd/link/internal/ld/lib.go | 105 ++++++++++++++++++++++++++------
+ 1 file changed, 85 insertions(+), 20 deletions(-)
+
+diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
+index 6499182422863c..8e96bc7c027226 100644
+--- a/src/cmd/link/internal/ld/lib.go
++++ b/src/cmd/link/internal/ld/lib.go
+@@ -34,6 +34,7 @@ import (
+ 	"bytes"
+ 	"debug/elf"
+ 	"debug/macho"
++	"debug/pe"
+ 	"encoding/base64"
+ 	"encoding/binary"
+ 	"fmt"
+@@ -1467,7 +1468,7 @@ func (ctxt *Link) hostlink() {
+ 	// Only macOS supports unmapped segments such as our __DWARF segment.
+ 	combineDwarf := ctxt.IsDarwin() && !*FlagW && machoPlatform == PLATFORM_MACOS
+ 
+-	var isMSVC bool // used on Windows
++	var isMSVC, isLLD bool // used on Windows
+ 	wlPrefix := "-Wl,--"
+ 
+ 	switch ctxt.HeadType {
+@@ -1521,6 +1522,9 @@ func (ctxt *Link) hostlink() {
+ 		}
+ 	case objabi.Hwindows:
+ 		isMSVC = ctxt.isMSVC()
++		if !isMSVC {
++			isLLD = ctxt.isLLD()
++		}
+ 		if isMSVC {
+ 			// For various options, MSVC lld-link only accepts one dash.
+ 			// TODO: It seems mingw clang supports one or two dashes,
+@@ -1543,10 +1547,22 @@ func (ctxt *Link) hostlink() {
+ 		argv = append(argv, wlPrefix+"nxcompat")
+ 
+ 		if !isMSVC {
+-			argv = append(argv, fmt.Sprintf("-Wl,--major-os-version=%d", PeMinimumTargetMajorVersion))
+-			argv = append(argv, fmt.Sprintf("-Wl,--minor-os-version=%d", PeMinimumTargetMinorVersion))
+-			argv = append(argv, fmt.Sprintf("-Wl,--major-subsystem-version=%d", PeMinimumTargetMajorVersion))
+-			argv = append(argv, fmt.Sprintf("-Wl,--minor-subsystem-version=%d", PeMinimumTargetMinorVersion))
++			peMajorVersion := PeMinimumTargetMajorVersion
++			peMinorVersion := PeMinimumTargetMinorVersion
++			if peMajorVersion >= 10 && !isLLD &&
++				!peHasLoadConfigDirectorySupport(ctxt.Arch, argv[0]) {
++				// The external linker doesn't support wiring up
++				// _load_config_used to the PE Load Configuration
++				// Directory. Windows 10+ validates this directory,
++				// so fall back to an older version to avoid
++				// load failures.
++				peMajorVersion = 6
++				peMinorVersion = 3
++			}
++			argv = append(argv, fmt.Sprintf("-Wl,--major-os-version=%d", peMajorVersion))
++			argv = append(argv, fmt.Sprintf("-Wl,--minor-os-version=%d", peMinorVersion))
++			argv = append(argv, fmt.Sprintf("-Wl,--major-subsystem-version=%d", peMajorVersion))
++			argv = append(argv, fmt.Sprintf("-Wl,--minor-subsystem-version=%d", peMinorVersion))
+ 		}
+ 	case objabi.Haix:
+ 		argv = append(argv, "-pthread")
+@@ -1971,23 +1987,9 @@ func (ctxt *Link) hostlink() {
+ 		checkStatic(p)
+ 	}
+ 	if ctxt.HeadType == objabi.Hwindows {
+-		// Determine which linker we're using. Add in the extldflags in
+-		// case used has specified "-fuse-ld=...".
+-		extld := ctxt.extld()
+-		name, args := extld[0], extld[1:]
+-		args = append(args, trimLinkerArgv(flagExtldflags)...)
+-		args = append(args, "-Wl,--version")
+-		cmd := exec.Command(name, args...)
+-		usingLLD := false
+-		if out, err := cmd.CombinedOutput(); err == nil {
+-			if bytes.Contains(out, []byte("LLD ")) {
+-				usingLLD = true
+-			}
+-		}
+-
+ 		// use gcc linker script to work around gcc bug
+ 		// (see https://golang.org/issue/20183 for details).
+-		if !usingLLD {
++		if !isLLD {
+ 			p := writeGDBLinkerScript()
+ 			argv = append(argv, "-Wl,-T,"+p)
+ 		}
+@@ -2240,6 +2242,54 @@ func linkerFlagSupported(arch *sys.Arch, linker, altLinker, flag string) bool {
+ 	return err == nil && !bytes.Contains(out, []byte("unrecognized")) && !bytes.Contains(out, []byte("unknown"))
+ }
+ 
++// peHasLoadConfigDirectorySupport checks whether the external linker
++// populates the PE Load Configuration Directory data directory entry
++// when it encounters a _load_config_used symbol.
++//
++// GNU ld gained this support in binutils 2.45. MSVC link.exe and
++// LLVM lld-link have always supported it.
++func peHasLoadConfigDirectorySupport(arch *sys.Arch, linker string) bool {
++	src := filepath.Join(*flagTmpdir, "loadcfg_test.c")
++	if err := os.WriteFile(src, []byte(`
++#ifdef _WIN64
++typedef unsigned long long uintptr;
++#else
++typedef unsigned long uintptr;
++#endif
++const uintptr _load_config_used[2] = { sizeof(_load_config_used), 0 };
++int main() { return 0; }
++`), 0666); err != nil {
++		return false
++	}
++
++	outPath := filepath.Join(*flagTmpdir, "loadcfg_test.exe")
++	flags := hostlinkArchArgs(arch)
++	flags = append(flags, "-o", outPath, src)
++	cmd := exec.Command(linker, flags...)
++	cmd.Env = append([]string{"LC_ALL=C"}, os.Environ()...)
++	if err := cmd.Run(); err != nil {
++		return false
++	}
++
++	f, err := pe.Open(outPath)
++	if err != nil {
++		return false
++	}
++	defer f.Close()
++
++	switch oh := f.OptionalHeader.(type) {
++	case *pe.OptionalHeader64:
++		if int(pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG) < len(oh.DataDirectory) {
++			return oh.DataDirectory[pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG].VirtualAddress != 0
++		}
++	case *pe.OptionalHeader32:
++		if int(pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG) < len(oh.DataDirectory) {
++			return oh.DataDirectory[pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG].VirtualAddress != 0
++		}
++	}
++	return false
++}
++
+ // trimLinkerArgv returns a new copy of argv that does not include flags
+ // that are not relevant for testing whether some linker option works.
+ func trimLinkerArgv(argv []string) []string {
+@@ -3139,3 +3189,18 @@ func (ctxt *Link) isMSVC() bool {
+ 	}
+ 	return false
+ }
++
++// isLLD reports whether the C toolchain is using LLD as the linker.
++func (ctxt *Link) isLLD() bool {
++	extld := ctxt.extld()
++	name, args := extld[0], extld[1:]
++	args = append(args, trimLinkerArgv(flagExtldflags)...)
++	args = append(args, "-Wl,--version")
++	cmd := exec.Command(name, args...)
++	if out, err := cmd.CombinedOutput(); err == nil {
++		if bytes.Contains(out, []byte("LLD ")) {
++			return true
++		}
++	}
++	return false
++}

From ce4c6d450e6afab38ea51f07144ce01fb0a01519 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Apr 2026 14:07:52 +0200
Subject: [PATCH 806/887] fix TestTransportPingWriteBlocks

---
 ...TLS-settings-with-Microsoft-policies.patch | 53 +++++++++++++------
 1 file changed, 37 insertions(+), 16 deletions(-)

diff --git a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
index 66a028bae46..90880488ca1 100644
--- a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
@@ -4,26 +4,27 @@ Date: Fri, 12 Dec 2025 16:46:44 +0100
 Subject: [PATCH] Align TLS settings with Microsoft policies
 
 ---
- doc/godebug.md                           |   9 +
- src/crypto/tls/common.go                 |   9 +-
- src/crypto/tls/defaults.go               |  47 ++-
- src/crypto/tls/defaults_microsoft.go     | 153 +++++++
- src/crypto/tls/handshake_client.go       |  21 +-
- src/crypto/tls/handshake_client_test.go  |  17 +-
- src/crypto/tls/handshake_server_tls13.go |  22 +-
- src/crypto/tls/handshake_test.go         |   3 +
- src/crypto/tls/microsoft_test.go         | 483 +++++++++++++++++++++++
- src/crypto/tls/schannel_windows.go       |   7 +
- src/internal/godebugs/table.go           |   2 +
- 11 files changed, 749 insertions(+), 24 deletions(-)
+ doc/godebug.md                                |   9 +
+ src/crypto/tls/common.go                      |   9 +-
+ src/crypto/tls/defaults.go                    |  47 +-
+ src/crypto/tls/defaults_microsoft.go          | 153 ++++++
+ src/crypto/tls/handshake_client.go            |  21 +-
+ src/crypto/tls/handshake_client_test.go       |  17 +-
+ src/crypto/tls/handshake_server_tls13.go      |  22 +-
+ src/crypto/tls/handshake_test.go              |   3 +
+ src/crypto/tls/microsoft_test.go              | 483 ++++++++++++++++++
+ src/crypto/tls/schannel_windows.go            |   7 +
+ src/internal/godebugs/table.go                |   2 +
+ src/net/http/internal/http2/transport_test.go |   2 +
+ 12 files changed, 751 insertions(+), 24 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index 7184b2aaf1ce67..07fc1ea6d19970 100644
+index 4935d64850883d..1736fd71017add 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -197,6 +197,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
+@@ -207,6 +207,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
  to `cryptocustomrand=0`, ignoring the random parameters. Using `cryptocustomrand=1`
  reverts to the pre-Go 1.26 behavior.
  
@@ -907,10 +908,10 @@ index cccfb8866f88ab..b2896e95e74686 100644
  	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder
  	defaultCipherSuitesTLS13NoAES = defaultCipherSuitesTLS13
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
-index 10c4eb715e99e4..edf933b0a770bd 100644
+index 7ddfad14ea1be0..1ba17bc136710f 100644
 --- a/src/internal/godebugs/table.go
 +++ b/src/internal/godebugs/table.go
-@@ -48,6 +48,8 @@ var All = []Info{
+@@ -49,6 +49,8 @@ var All = []Info{
  	{Name: "httpservecontentkeepheaders", Package: "net/http", Changed: 23, Old: "1"},
  	{Name: "installgoroot", Package: "go/build"},
  	{Name: "jstmpllitinterp", Package: "html/template", Opaque: true}, // bug #66217: remove Opaque
@@ -919,3 +920,23 @@ index 10c4eb715e99e4..edf933b0a770bd 100644
  	//{Name: "multipartfiles", Package: "mime/multipart"},
  	{Name: "multipartmaxheaders", Package: "mime/multipart"},
  	{Name: "multipartmaxparts", Package: "mime/multipart"},
+diff --git a/src/net/http/internal/http2/transport_test.go b/src/net/http/internal/http2/transport_test.go
+index 955c2208ad4a86..0f5dc2ab51c728 100644
+--- a/src/net/http/internal/http2/transport_test.go
++++ b/src/net/http/internal/http2/transport_test.go
+@@ -15,6 +15,7 @@ import (
+ 	"errors"
+ 	"flag"
+ 	"fmt"
++	"internal/testenv"
+ 	"io"
+ 	"log"
+ 	"math/rand"
+@@ -2744,6 +2745,7 @@ func testTransportCloseAfterLostPing(t testing.TB) {
+ }
+ 
+ func TestTransportPingWriteBlocks(t *testing.T) {
++	testenv.SetGODEBUG(t, "ms_tlsprofile=off")
+ 	ts := newTestServer(t,
+ 		func(w http.ResponseWriter, r *http.Request) {},
+ 	)

From 58aadc0cfc6038c508b488eb1a27907ab951ca26 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 8 Apr 2026 14:17:39 +0200
Subject: [PATCH 807/887] fix windows

---
 .../0017-Port-minimum-Windows-target-version-fallback.patch   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0017-Port-minimum-Windows-target-version-fallback.patch b/patches/0017-Port-minimum-Windows-target-version-fallback.patch
index 4e64f5340cc..9cbca31251b 100644
--- a/patches/0017-Port-minimum-Windows-target-version-fallback.patch
+++ b/patches/0017-Port-minimum-Windows-target-version-fallback.patch
@@ -9,7 +9,7 @@ Remove once https://go-review.googlesource.com/c/go/+/763960 is merged.
  1 file changed, 85 insertions(+), 20 deletions(-)
 
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 6499182422863c..8e96bc7c027226 100644
+index 6499182422863c..2f5feb5490809a 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -34,6 +34,7 @@ import (
@@ -57,7 +57,7 @@ index 6499182422863c..8e96bc7c027226 100644
 +				// so fall back to an older version to avoid
 +				// load failures.
 +				peMajorVersion = 6
-+				peMinorVersion = 3
++				peMinorVersion = 1
 +			}
 +			argv = append(argv, fmt.Sprintf("-Wl,--major-os-version=%d", peMajorVersion))
 +			argv = append(argv, fmt.Sprintf("-Wl,--minor-os-version=%d", peMinorVersion))

From a4dc72526a07cc006f56fc3cb074a9b4d574315e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 16:04:28 +0000
Subject: [PATCH 808/887] Update submodule to latest master (352d76b2):
 cmd/compile: remove unused inNonInitFunction context

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index a415314c0bd..352d76b2912 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit a415314c0bdec971ecd503471c804ec0208c6a2b
+Subproject commit 352d76b2912b20ede8b3238fc2ed7b697bc2695b

From a19b3be3b478c37c520a3b29d141684dc6c091ff Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 9 Apr 2026 09:13:08 +0100
Subject: [PATCH 809/887] resolve 3-way merge conflicts

---
 ...03-Implement-crypto-internal-backend.patch | 56 +++++++++----------
 patches/0004-Use-crypto-backends.patch        | 46 +++++++--------
 2 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 577185973f6..03532b2aa60 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -53,7 +53,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 44 files changed, 2761 insertions(+), 17 deletions(-)
+ 44 files changed, 2763 insertions(+), 16 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -144,10 +144,10 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index e4250e12de8975..feef0080cb12d6 100644
+index eacaa53b909632..63f3e2644a912f 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1382,6 +1382,80 @@ func toolenv() []string {
+@@ -1396,6 +1396,80 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
@@ -228,7 +228,7 @@ index e4250e12de8975..feef0080cb12d6 100644
  	return env
  }
  
-@@ -1624,12 +1698,12 @@ func cmdbootstrap() {
+@@ -1638,12 +1712,12 @@ func cmdbootstrap() {
  		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
  	}
@@ -245,10 +245,10 @@ index e4250e12de8975..feef0080cb12d6 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 78213a7a552e1e..7314eaffa3f800 100644
+index 2c1cc27d58cc11..7f66bb58d1580f 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -156,10 +156,12 @@ func (t *tester) run() {
+@@ -158,10 +158,12 @@ func (t *tester) run() {
  		}
  	}
  
@@ -262,7 +262,7 @@ index 78213a7a552e1e..7314eaffa3f800 100644
  	}
  
  	if !t.listMode {
-@@ -176,9 +178,9 @@ func (t *tester) run() {
+@@ -178,9 +180,9 @@ func (t *tester) run() {
  			// and virtualization we usually start with a clean GOCACHE, so we would
  			// end up rebuilding large parts of the standard library that aren't
  			// otherwise relevant to the actual set of packages under test.
@@ -275,7 +275,7 @@ index 78213a7a552e1e..7314eaffa3f800 100644
  		}
  	}
  
-@@ -772,7 +774,9 @@ func (t *tester) registerTests() {
+@@ -766,7 +768,9 @@ func (t *tester) registerTests() {
  	}
  
  	// Test ios/amd64 for the iOS simulator.
@@ -286,7 +286,7 @@ index 78213a7a552e1e..7314eaffa3f800 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -1021,7 +1025,9 @@ func (t *tester) registerTests() {
+@@ -1015,7 +1019,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -298,7 +298,7 @@ index 78213a7a552e1e..7314eaffa3f800 100644
  		// where they get distributed to multiple machines.
  		// See issues 20141 and 31834.
 diff --git a/src/cmd/go/go_test.go b/src/cmd/go/go_test.go
-index 260c91e800b622..467d8d6547b70a 100644
+index 47839e0229b951..2d1a7fa99d551e 100644
 --- a/src/cmd/go/go_test.go
 +++ b/src/cmd/go/go_test.go
 @@ -13,6 +13,7 @@ import (
@@ -323,7 +323,7 @@ index 260c91e800b622..467d8d6547b70a 100644
  
  		if testGOROOT := os.Getenv("TESTGO_GOROOT"); testGOROOT != "" {
  			// Disallow installs to the GOROOT from which testgo was built.
-@@ -1778,6 +1786,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
+@@ -1779,6 +1787,9 @@ func TestGenerateUsesBuildContext(t *testing.T) {
  }
  
  func TestGoEnv(t *testing.T) {
@@ -368,7 +368,7 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index e2a77d7d7df85b..aaa3106e5a0e6e 100644
+index f40de7fe12fd37..04797bfc529ac1 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -2413,6 +2413,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
@@ -382,10 +382,10 @@ index e2a77d7d7df85b..aaa3106e5a0e6e 100644
  	appendSetting("-compiler", cfg.BuildContext.Compiler)
  	if gccgoflags := BuildGccgoflags.String(); gccgoflags != "" && cfg.BuildContext.Compiler == "gccgo" {
 diff --git a/src/cmd/go/internal/tool/tool.go b/src/cmd/go/internal/tool/tool.go
-index 57bcde6da433a3..ce38a989aa87ff 100644
+index 094c5b719bb291..4d2ab9e00395a8 100644
 --- a/src/cmd/go/internal/tool/tool.go
 +++ b/src/cmd/go/internal/tool/tool.go
-@@ -309,6 +309,10 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
+@@ -335,6 +335,10 @@ func buildAndRunBuiltinTool(ld *modload.Loader, ctx context.Context, toolName, t
  	// Override GOOS and GOARCH for the build to build the tool using
  	// the same GOOS and GOARCH as this go command.
  	cfg.ForceHost()
@@ -396,8 +396,8 @@ index 57bcde6da433a3..ce38a989aa87ff 100644
  
  	// Ignore go.mod and go.work: we don't need them, and we want to be able
  	// to run the tool even if there's an issue with the module or workspace the
-@@ -316,8 +320,11 @@ func buildAndRunBuiltinTool(loaderstate *modload.State, ctx context.Context, too
- 	loaderstate.RootMode = modload.NoRoot
+@@ -342,8 +346,11 @@ func buildAndRunBuiltinTool(ld *modload.Loader, ctx context.Context, toolName, t
+ 	ld.RootMode = modload.NoRoot
  
  	runFunc := func(b *work.Builder, ctx context.Context, a *work.Action) error {
 +		// Now that the tool is built, revert the GOEXPERIMENT
@@ -408,7 +408,7 @@ index 57bcde6da433a3..ce38a989aa87ff 100644
 +		return runBuiltTool(toolName, env, cmdline)
  	}
  
- 	buildAndRunTool(loaderstate, ctx, tool, args, runFunc)
+ 	buildAndRunTool(ld, ctx, tool, args, runFunc)
 diff --git a/src/cmd/go/systemcrypto_test.go b/src/cmd/go/systemcrypto_test.go
 new file mode 100644
 index 00000000000000..d6cc434197cff1
@@ -672,7 +672,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index c7060898778c88..4d2bd8a87127ee 100644
+index 66c1619902e73e..d30198ae493442 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -690,10 +690,10 @@ index c7060898778c88..4d2bd8a87127ee 100644
  		gorootTestDir: filepath.Join(testenv.GOROOT(t), "test"),
  		runoutputGate: make(chan bool, *runoutputLimit),
 diff --git a/src/cmd/link/internal/ld/main.go b/src/cmd/link/internal/ld/main.go
-index a4b3a0422f2f41..0140c385e47991 100644
+index 19ed197a20b57e..5e592c7c6697d7 100644
 --- a/src/cmd/link/internal/ld/main.go
 +++ b/src/cmd/link/internal/ld/main.go
-@@ -187,7 +187,7 @@ func Main(arch *sys.Arch, theArch Arch) {
+@@ -189,7 +189,7 @@ func Main(arch *sys.Arch, theArch Arch) {
  	}
  
  	buildVersion := buildcfg.Version
@@ -703,7 +703,7 @@ index a4b3a0422f2f41..0140c385e47991 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index ff7842ca3ffd87..164f3883d3f527 100644
+index ac9a7a90b90155..7112047dcb5f39 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -724,7 +724,7 @@ index ff7842ca3ffd87..164f3883d3f527 100644
  	if testing.Short() && testenv.Builder() == "" {
  		t.Skip("skipping in -short mode with $GO_BUILDER_NAME empty")
  	}
-@@ -599,6 +603,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
+@@ -597,6 +601,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
  		t.Skip("skipping on non-{linux,darwin}/amd64 platform")
  	}
  
@@ -3199,10 +3199,10 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index a0436aa1901b7e..ad2c8fa13fd07a 100644
+index 2c523a20bdfbc7..b6ff825fc811b3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -369,7 +369,7 @@ var depsRules = `
+@@ -367,7 +367,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3210,8 +3210,8 @@ index a0436aa1901b7e..ad2c8fa13fd07a 100644
 +	FMT, internal/goexperiment, internal/platform
  	< internal/buildcfg;
  
- 	container/heap, go/constant, go/parser, internal/buildcfg, internal/goversion, internal/types/errors
-@@ -564,6 +564,10 @@ var depsRules = `
+ 	# The vast majority of standard library packages should not be resorting to regexp.
+@@ -559,6 +559,10 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
@@ -3222,7 +3222,7 @@ index a0436aa1901b7e..ad2c8fa13fd07a 100644
  	FIPS, internal/godebug, embed
  	< crypto/internal/fips140only
  	< crypto
-@@ -584,6 +588,13 @@ var depsRules = `
+@@ -579,6 +583,13 @@ var depsRules = `
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3236,7 +3236,7 @@ index a0436aa1901b7e..ad2c8fa13fd07a 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -619,8 +630,15 @@ var depsRules = `
+@@ -614,8 +625,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 89afdff493c..e38ad27ab60 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -102,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 98 files changed, 1617 insertions(+), 243 deletions(-)
+ 98 files changed, 1615 insertions(+), 244 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -128,10 +128,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 7314eaffa3f800..089cc2b36ab186 100644
+index 7f66bb58d1580f..03cca6183229f9 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -720,7 +720,7 @@ func (t *tester) registerTests() {
+@@ -714,7 +714,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -140,7 +140,7 @@ index 7314eaffa3f800..089cc2b36ab186 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1384,12 +1384,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1378,12 +1378,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -175,10 +175,10 @@ index ed0fbf3d53d75b..a2f74c8095d449 100644
  func TestBoringInternalLink(t *testing.T) {
  	tg := testgo(t)
 diff --git a/src/cmd/go/script_test.go b/src/cmd/go/script_test.go
-index f6eaddf8fb3f40..48151eee988ba4 100644
+index 088b9a8b5fdb2e..6a27473d4ed1d6 100644
 --- a/src/cmd/go/script_test.go
 +++ b/src/cmd/go/script_test.go
-@@ -296,6 +296,8 @@ var extraEnvKeys = []string{
+@@ -299,6 +299,8 @@ var extraEnvKeys = []string{
  	"GO_TESTING_GOTOOLS", // for gccgo testing
  	"GCCGO",              // for gccgo testing
  	"GCCGOTOOLDIR",       // for gccgo testing
@@ -245,7 +245,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index cac9cc0b98f6d9..ae553979a7fd09 100644
+index a05c8c2b48be4b..6499182422863c 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1176,6 +1176,12 @@ var hostobj []Hostobj
@@ -1269,7 +1269,7 @@ index 00000000000000..4e18cdfbaad4fd
 +	return key, nil
 +}
 diff --git a/src/crypto/ed25519/ed25519.go b/src/crypto/ed25519/ed25519.go
-index a0263638ef19fe..00752fce1bae07 100644
+index ed599ad2908dfb..b3106b9ed83811 100644
 --- a/src/crypto/ed25519/ed25519.go
 +++ b/src/crypto/ed25519/ed25519.go
 @@ -17,6 +17,7 @@ package ed25519
@@ -1306,9 +1306,9 @@ index a0263638ef19fe..00752fce1bae07 100644
 +		return pubKey, privKey, err
 +	}
  
- 	seed := make([]byte, SeedSize)
- 	if _, err := io.ReadFull(random, seed); err != nil {
-@@ -175,6 +190,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
+ 	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
+ 		return nil, nil, errors.New("crypto/ed25519: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+@@ -188,6 +203,17 @@ func GenerateKey(random io.Reader) (PublicKey, PrivateKey, error) {
  // with RFC 8032. RFC 8032's private keys correspond to seeds in this
  // package.
  func NewKeyFromSeed(seed []byte) PrivateKey {
@@ -1326,7 +1326,7 @@ index a0263638ef19fe..00752fce1bae07 100644
  	// Outline the function body so that the returned key can be stack-allocated.
  	privateKey := make([]byte, PrivateKeySize)
  	newKeyFromSeed(privateKey, seed)
-@@ -193,6 +219,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
+@@ -206,6 +232,17 @@ func newKeyFromSeed(privateKey, seed []byte) {
  // Sign signs the message with privateKey and returns a signature. It will
  // panic if len(privateKey) is not [PrivateKeySize].
  func Sign(privateKey PrivateKey, message []byte) []byte {
@@ -1344,7 +1344,7 @@ index a0263638ef19fe..00752fce1bae07 100644
  	// Outline the function body so that the returned signature can be
  	// stack-allocated.
  	signature := make([]byte, SignatureSize)
-@@ -222,6 +259,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
+@@ -235,6 +272,32 @@ func Verify(publicKey PublicKey, message, sig []byte) bool {
  	return VerifyWithOptions(publicKey, message, sig, &Options{Hash: crypto.Hash(0)}) == nil
  }
  
@@ -1377,7 +1377,7 @@ index a0263638ef19fe..00752fce1bae07 100644
  // VerifyWithOptions reports whether sig is a valid signature of message by
  // publicKey. A valid signature is indicated by returning a nil error. It will
  // panic if len(publicKey) is not [PublicKeySize].
-@@ -250,6 +313,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
+@@ -263,6 +326,13 @@ func VerifyWithOptions(publicKey PublicKey, message, sig []byte, opts *Options)
  		}
  		return ed25519.VerifyCtx(k, message, sig, opts.Context)
  	case opts.Hash == crypto.Hash(0): // Ed25519
@@ -2847,7 +2847,7 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index b94b129867727b..149dd4321f8d72 100644
+index 3a744f3e3fb603..ef00f6008818b2 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -3918,7 +3918,7 @@ index 7d4bd5bcceba4f..697dfa1ecb792e 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 77a24b4a78d8fc..84724fac5f951e 100644
+index 65177767a05b1f..87b637a0f25602 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -10,9 +10,9 @@ import (
@@ -3959,7 +3959,7 @@ index 34dfb13b672f79..e635079f12313f 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index bce94ed2d8c436..14834301052886 100644
+index b45d7cbc537ffe..c88871127ae8bb 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -4303,7 +4303,7 @@ index 8233985a62bd22..ef1b2bfe02c3b7 100644
  		in, _ := hex.DecodeString(test.preMasterSecret)
  		clientRandom, _ := hex.DecodeString(test.clientRandom)
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index f9bd313737e21b..04548c961e74a8 100644
+index 1d3e845d0f0a9c..eb4318faf13f7b 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
 @@ -3127,7 +3127,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
@@ -4316,10 +4316,10 @@ index f9bd313737e21b..04548c961e74a8 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index ad2c8fa13fd07a..de1cea23e37ba1 100644
+index b6ff825fc811b3..1fc0a4ac947345 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -544,7 +544,7 @@ var depsRules = `
+@@ -539,7 +539,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -4328,7 +4328,7 @@ index ad2c8fa13fd07a..de1cea23e37ba1 100644
  
  	crypto !< FIPS;
  
-@@ -568,7 +568,12 @@ var depsRules = `
+@@ -563,7 +563,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -4342,7 +4342,7 @@ index ad2c8fa13fd07a..de1cea23e37ba1 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -602,7 +607,8 @@ var depsRules = `
+@@ -597,7 +602,8 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/subtle,
@@ -4352,7 +4352,7 @@ index ad2c8fa13fd07a..de1cea23e37ba1 100644
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/internal/boring
-@@ -620,6 +626,7 @@ var depsRules = `
+@@ -615,6 +621,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem

From bc0a93cbe1c79b710f2f72a060638d64cb505e97 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 10 Apr 2026 08:02:14 +0000
Subject: [PATCH 810/887] Update submodule to latest master (ff7dfb5c):
 cmd/internal/obj/loong64: correct instruction encoding

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 352d76b2912..ff7dfb5c3b3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 352d76b2912b20ede8b3238fc2ed7b697bc2695b
+Subproject commit ff7dfb5c3b365b0f41210fe0af0c66447b13c392

From fb72ece51e0a1eb084ea96006e23da072a5b35b3 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 10 Apr 2026 10:06:28 +0200
Subject: [PATCH 811/887] 3-way merge and remove patch 17

---
 .../0001-Vendor-external-dependencies.patch   |  30 ++--
 ...imum-Windows-target-version-fallback.patch | 167 ------------------
 2 files changed, 15 insertions(+), 182 deletions(-)
 delete mode 100644 patches/0017-Port-minimum-Windows-target-version-fallback.patch

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index d1d33b78420..ce002934c04 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -525,7 +525,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index d15db1306b8e0b..d9db8bce7b540b 100644
+index 9a2085fab3b18d..b53a7dfaed80ce 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -538,7 +538,7 @@ index d15db1306b8e0b..d9db8bce7b540b 100644
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.34.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 23627773f00451..1b41d11a010450 100644
+index 1affc0bbc1da72..63342ee8c34e0f 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -2215,7 +2215,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 7b5b9aa37f749c..1f05d26a591c8d 100644
+index dfde90a9fa13fd..d6c51800898d4c 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2265,12 +2265,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 2ac54d7b35e011..15c3ae9e5d1138 100644
+index a8ebee0bd27779..12852375112b91 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
  	golang.org/x/sys v0.42.1-0.20260320201212-a76ec62d6c53 // indirect
- 	golang.org/x/text v0.33.1-0.20260122225119-3264de9174be // indirect
+ 	golang.org/x/text v0.35.0 // indirect
  )
 +
 +require (
@@ -2279,7 +2279,7 @@ index 2ac54d7b35e011..15c3ae9e5d1138 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index ba6fd0576632d4..fa636b09d87598 100644
+index e5f656652a7f7f..6442c6ae7cf0e5 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2289,11 +2289,11 @@ index ba6fd0576632d4..fa636b09d87598 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c h1:kHYNsP4g/LehejM+7p42t1ZQWlV/HJBwwjCE7SwFBKo=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
- golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1 h1:peTBrYsTa5Rr+jB2pbgd7X08cFAun6ME4So3jfEkYL4=
- golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
- golang.org/x/net v0.49.1-0.20260122225915-f2078620ee33 h1:pNHjOZ0w6qb8R9EDmEsBXmV4o2YKLvtRiEk4q5gN5Hg=
+ golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+ golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
+ golang.org/x/net v0.52.1-0.20260406204716-056ac742146a h1:3li6mFiqneqvrkq+zbxvMG+VdvDQa27vKCR4kx3vmp0=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b01136376ef951..469f9ad34cec7b 100644
+index 2f424e7e3c0e59..2c523a20bdfbc7 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -152,6 +152,13 @@ var depsRules = `
@@ -2310,7 +2310,7 @@ index b01136376ef951..469f9ad34cec7b 100644
  	# TIME is SYSCALL plus the core packages about time, including context.
  	SYSCALL
  	< time/tzdata
-@@ -545,16 +552,46 @@ var depsRules = `
+@@ -542,16 +549,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2362,7 +2362,7 @@ index b01136376ef951..469f9ad34cec7b 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -576,6 +613,10 @@ var depsRules = `
+@@ -573,6 +610,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index e8c6f1efb099eb..537ba69a0046d4 100644
+index 35468f6f1ded3b..107a16389e527e 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -38283,6 +38283,6 @@ index e8c6f1efb099eb..537ba69a0046d4 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.47.1-0.20260113154411-7d0074ccc6f1
- ## explicit; go 1.24.0
+ # golang.org/x/crypto v0.49.0
+ ## explicit; go 1.25.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0017-Port-minimum-Windows-target-version-fallback.patch b/patches/0017-Port-minimum-Windows-target-version-fallback.patch
deleted file mode 100644
index 9cbca31251b..00000000000
--- a/patches/0017-Port-minimum-Windows-target-version-fallback.patch
+++ /dev/null
@@ -1,167 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Wed, 8 Apr 2026 12:19:33 +0200
-Subject: [PATCH] Port minimum Windows target version fallback
-
-Remove once https://go-review.googlesource.com/c/go/+/763960 is merged.
----
- src/cmd/link/internal/ld/lib.go | 105 ++++++++++++++++++++++++++------
- 1 file changed, 85 insertions(+), 20 deletions(-)
-
-diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 6499182422863c..2f5feb5490809a 100644
---- a/src/cmd/link/internal/ld/lib.go
-+++ b/src/cmd/link/internal/ld/lib.go
-@@ -34,6 +34,7 @@ import (
- 	"bytes"
- 	"debug/elf"
- 	"debug/macho"
-+	"debug/pe"
- 	"encoding/base64"
- 	"encoding/binary"
- 	"fmt"
-@@ -1467,7 +1468,7 @@ func (ctxt *Link) hostlink() {
- 	// Only macOS supports unmapped segments such as our __DWARF segment.
- 	combineDwarf := ctxt.IsDarwin() && !*FlagW && machoPlatform == PLATFORM_MACOS
- 
--	var isMSVC bool // used on Windows
-+	var isMSVC, isLLD bool // used on Windows
- 	wlPrefix := "-Wl,--"
- 
- 	switch ctxt.HeadType {
-@@ -1521,6 +1522,9 @@ func (ctxt *Link) hostlink() {
- 		}
- 	case objabi.Hwindows:
- 		isMSVC = ctxt.isMSVC()
-+		if !isMSVC {
-+			isLLD = ctxt.isLLD()
-+		}
- 		if isMSVC {
- 			// For various options, MSVC lld-link only accepts one dash.
- 			// TODO: It seems mingw clang supports one or two dashes,
-@@ -1543,10 +1547,22 @@ func (ctxt *Link) hostlink() {
- 		argv = append(argv, wlPrefix+"nxcompat")
- 
- 		if !isMSVC {
--			argv = append(argv, fmt.Sprintf("-Wl,--major-os-version=%d", PeMinimumTargetMajorVersion))
--			argv = append(argv, fmt.Sprintf("-Wl,--minor-os-version=%d", PeMinimumTargetMinorVersion))
--			argv = append(argv, fmt.Sprintf("-Wl,--major-subsystem-version=%d", PeMinimumTargetMajorVersion))
--			argv = append(argv, fmt.Sprintf("-Wl,--minor-subsystem-version=%d", PeMinimumTargetMinorVersion))
-+			peMajorVersion := PeMinimumTargetMajorVersion
-+			peMinorVersion := PeMinimumTargetMinorVersion
-+			if peMajorVersion >= 10 && !isLLD &&
-+				!peHasLoadConfigDirectorySupport(ctxt.Arch, argv[0]) {
-+				// The external linker doesn't support wiring up
-+				// _load_config_used to the PE Load Configuration
-+				// Directory. Windows 10+ validates this directory,
-+				// so fall back to an older version to avoid
-+				// load failures.
-+				peMajorVersion = 6
-+				peMinorVersion = 1
-+			}
-+			argv = append(argv, fmt.Sprintf("-Wl,--major-os-version=%d", peMajorVersion))
-+			argv = append(argv, fmt.Sprintf("-Wl,--minor-os-version=%d", peMinorVersion))
-+			argv = append(argv, fmt.Sprintf("-Wl,--major-subsystem-version=%d", peMajorVersion))
-+			argv = append(argv, fmt.Sprintf("-Wl,--minor-subsystem-version=%d", peMinorVersion))
- 		}
- 	case objabi.Haix:
- 		argv = append(argv, "-pthread")
-@@ -1971,23 +1987,9 @@ func (ctxt *Link) hostlink() {
- 		checkStatic(p)
- 	}
- 	if ctxt.HeadType == objabi.Hwindows {
--		// Determine which linker we're using. Add in the extldflags in
--		// case used has specified "-fuse-ld=...".
--		extld := ctxt.extld()
--		name, args := extld[0], extld[1:]
--		args = append(args, trimLinkerArgv(flagExtldflags)...)
--		args = append(args, "-Wl,--version")
--		cmd := exec.Command(name, args...)
--		usingLLD := false
--		if out, err := cmd.CombinedOutput(); err == nil {
--			if bytes.Contains(out, []byte("LLD ")) {
--				usingLLD = true
--			}
--		}
--
- 		// use gcc linker script to work around gcc bug
- 		// (see https://golang.org/issue/20183 for details).
--		if !usingLLD {
-+		if !isLLD {
- 			p := writeGDBLinkerScript()
- 			argv = append(argv, "-Wl,-T,"+p)
- 		}
-@@ -2240,6 +2242,54 @@ func linkerFlagSupported(arch *sys.Arch, linker, altLinker, flag string) bool {
- 	return err == nil && !bytes.Contains(out, []byte("unrecognized")) && !bytes.Contains(out, []byte("unknown"))
- }
- 
-+// peHasLoadConfigDirectorySupport checks whether the external linker
-+// populates the PE Load Configuration Directory data directory entry
-+// when it encounters a _load_config_used symbol.
-+//
-+// GNU ld gained this support in binutils 2.45. MSVC link.exe and
-+// LLVM lld-link have always supported it.
-+func peHasLoadConfigDirectorySupport(arch *sys.Arch, linker string) bool {
-+	src := filepath.Join(*flagTmpdir, "loadcfg_test.c")
-+	if err := os.WriteFile(src, []byte(`
-+#ifdef _WIN64
-+typedef unsigned long long uintptr;
-+#else
-+typedef unsigned long uintptr;
-+#endif
-+const uintptr _load_config_used[2] = { sizeof(_load_config_used), 0 };
-+int main() { return 0; }
-+`), 0666); err != nil {
-+		return false
-+	}
-+
-+	outPath := filepath.Join(*flagTmpdir, "loadcfg_test.exe")
-+	flags := hostlinkArchArgs(arch)
-+	flags = append(flags, "-o", outPath, src)
-+	cmd := exec.Command(linker, flags...)
-+	cmd.Env = append([]string{"LC_ALL=C"}, os.Environ()...)
-+	if err := cmd.Run(); err != nil {
-+		return false
-+	}
-+
-+	f, err := pe.Open(outPath)
-+	if err != nil {
-+		return false
-+	}
-+	defer f.Close()
-+
-+	switch oh := f.OptionalHeader.(type) {
-+	case *pe.OptionalHeader64:
-+		if int(pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG) < len(oh.DataDirectory) {
-+			return oh.DataDirectory[pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG].VirtualAddress != 0
-+		}
-+	case *pe.OptionalHeader32:
-+		if int(pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG) < len(oh.DataDirectory) {
-+			return oh.DataDirectory[pe.IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG].VirtualAddress != 0
-+		}
-+	}
-+	return false
-+}
-+
- // trimLinkerArgv returns a new copy of argv that does not include flags
- // that are not relevant for testing whether some linker option works.
- func trimLinkerArgv(argv []string) []string {
-@@ -3139,3 +3189,18 @@ func (ctxt *Link) isMSVC() bool {
- 	}
- 	return false
- }
-+
-+// isLLD reports whether the C toolchain is using LLD as the linker.
-+func (ctxt *Link) isLLD() bool {
-+	extld := ctxt.extld()
-+	name, args := extld[0], extld[1:]
-+	args = append(args, trimLinkerArgv(flagExtldflags)...)
-+	args = append(args, "-Wl,--version")
-+	cmd := exec.Command(name, args...)
-+	if out, err := cmd.CombinedOutput(); err == nil {
-+		if bytes.Contains(out, []byte("LLD ")) {
-+			return true
-+		}
-+	}
-+	return false
-+}

From 588f99bcac48019b133b747712bd7348376535f5 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Fri, 10 Apr 2026 10:51:45 +0200
Subject: [PATCH 812/887] fix tests

---
 patches/0016-Skip-http2-tests.patch | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/patches/0016-Skip-http2-tests.patch b/patches/0016-Skip-http2-tests.patch
index 39b7477f355..03fccc86d3b 100644
--- a/patches/0016-Skip-http2-tests.patch
+++ b/patches/0016-Skip-http2-tests.patch
@@ -9,7 +9,8 @@ crypto and test/synctest bubbles.
 Tracked at https://github.com/golang/go/issues/78557
 ---
  src/net/http/internal/http2/http2_test.go | 10 ++++++++++
- 1 file changed, 10 insertions(+)
+ src/net/http/transport_test.go            |  5 +++++
+ 2 files changed, 15 insertions(+)
 
 diff --git a/src/net/http/internal/http2/http2_test.go b/src/net/http/internal/http2/http2_test.go
 index ad1b9a6d06e773..7e7042796a12d8 100644
@@ -39,3 +40,26 @@ index ad1b9a6d06e773..7e7042796a12d8 100644
  func TestSettingString(t *testing.T) {
  	tests := []struct {
  		s    Setting
+diff --git a/src/net/http/transport_test.go b/src/net/http/transport_test.go
+index ea9a19ac9ad42b..ae0729cafd7216 100644
+--- a/src/net/http/transport_test.go
++++ b/src/net/http/transport_test.go
+@@ -14,6 +14,7 @@ import (
+ 	"bytes"
+ 	"compress/gzip"
+ 	"context"
++	"crypto/fips140"
+ 	"crypto/rand"
+ 	"crypto/tls"
+ 	"crypto/x509"
+@@ -480,6 +481,10 @@ func testTransportReadToEndReusesConn(t *testing.T, mode testMode) {
+ // manage to drain it before the next request, the connection is re-used;
+ // otherwise, a new connection is made.
+ func TestTransportNotReadToEndConnectionReuse(t *testing.T) {
++	if fips140.Enabled() {
++		// TODO: Remove once https://github.com/golang/go/issues/78557 is resolved.
++		t.Skip("skipping test in FIPS 140 mode, see https://github.com/golang/go/issues/78557")
++	}
+ 	run(t, testTransportNotReadToEndConnectionReuse, []testMode{http1Mode, https1Mode})
+ }
+ func testTransportNotReadToEndConnectionReuse(t *testing.T, mode testMode) {

From 0d950ba92154fba8dd298e810e710e4e33b61392 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 Apr 2026 10:25:14 +0000
Subject: [PATCH 813/887] build(deps): bump golang.org/x/net from 0.52.0 to
 0.53.0 in /eng/_util

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/net/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index ba4459701a0..b37f1b3ff8e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.52.0
+	golang.org/x/net v0.53.0
 )
 
 require (
@@ -28,9 +28,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.4 // indirect
-	golang.org/x/crypto v0.49.0 // indirect
+	golang.org/x/crypto v0.50.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/text v0.35.0 // indirect
+	golang.org/x/text v0.36.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 9932b4a72c9..af478c16ae7 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -51,14 +51,14 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.4 h1:UP4+v6fFrBIb1l934bDl//mmnoIZEDK0idg1+AIvX5U=
 go.yaml.in/yaml/v4 v4.0.0-rc.4/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
-golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
-golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
-golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
+golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
+golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
+golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
+golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
-golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
-golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
+golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
+golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
 golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
 golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From 8d92bb43481b3784e9330a9f6df730577c77df5c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 10 Apr 2026 16:03:54 +0000
Subject: [PATCH 814/887] Update submodule to latest master (2f3c778b):
 net/http: add support for running HTTP tests against HTTP/3

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index ff7dfb5c3b3..2f3c778b232 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit ff7dfb5c3b365b0f41210fe0af0c66447b13c392
+Subproject commit 2f3c778b232dd53c41e1b623d25cd9f4ab28aaa5

From d623bad4390aeb6a0086f4b5474c51d4ad44c4be Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Mon, 13 Apr 2026 09:15:46 +0200
Subject: [PATCH 815/887] git am --3

---
 patches/0004-Use-crypto-backends.patch | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index e38ad27ab60..205bf13c668 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -245,10 +245,10 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index a05c8c2b48be4b..6499182422863c 100644
+index 96d25c718847d5..2f5feb5490809a 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
-@@ -1176,6 +1176,12 @@ var hostobj []Hostobj
+@@ -1177,6 +1177,12 @@ var hostobj []Hostobj
  // These packages can use internal linking mode.
  // Others trigger external mode.
  var internalpkg = []string{
@@ -4316,7 +4316,7 @@ index 1d3e845d0f0a9c..eb4318faf13f7b 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index b6ff825fc811b3..1fc0a4ac947345 100644
+index 52c0785a87e5e8..b15ef32c94c1c3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -539,7 +539,7 @@ var depsRules = `
@@ -4359,7 +4359,7 @@ index b6ff825fc811b3..1fc0a4ac947345 100644
 +	< crypto/tls/internal/tls13
  	< CRYPTO;
  
- 	CGO, fmt, net !< CRYPTO;
+ 	CRYPTO
 diff --git a/src/hash/boring_test.go b/src/hash/boring_test.go
 new file mode 100644
 index 00000000000000..52748c44698076

From 03f172f9c5c86cd0dc6fc127080b0c92f9f72092 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 15 Apr 2026 16:24:46 +0000
Subject: [PATCH 816/887] Update submodule to latest master (e32ec474):
 crypto/internal/fips140/drbg: build tag out entropy generation on Wasm

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2f3c778b232..e32ec4742e3 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2f3c778b232dd53c41e1b623d25cd9f4ab28aaa5
+Subproject commit e32ec4742e3a9b5a28635e20806331afd587b429

From dc0a8fec3e10d8fce0bc48f409d0f6aa929fb435 Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 15 Apr 2026 14:39:55 -0700
Subject: [PATCH 817/887] Use PATH Go by default; download stage 0 into repo
 when opted in (#2230)

By default, use Go from PATH to build tools and bootstrap. This avoids
downloading Go on developer machines, where a suitable version is
typically already available. A log line notes that results may differ
from CI and names the opt-in variable.

Set MS_USE_CI_STAGE0=1 to download the exact CI stage 0 version into
eng/artifacts/_goStage0/ (repo-local, cleaned by 'git clean -xdf').
The '_' prefix prevents moddeps_test traversal failures. CI pipelines
set this variable via pipeline.yml so their behavior is unchanged.

The previous MS_USE_PATH_GO variable is removed: PATH Go is now the
default, so it is no longer needed.

Fixes https://github.com/microsoft/go/issues/12
---
 eng/pipeline/variables/pipeline.yml |  5 +++++
 eng/run.ps1                         | 21 +++++++++++----------
 eng/utilities.ps1                   |  7 ++++++-
 3 files changed, 22 insertions(+), 11 deletions(-)

diff --git a/eng/pipeline/variables/pipeline.yml b/eng/pipeline/variables/pipeline.yml
index f8083fc6945..155c2b768b9 100644
--- a/eng/pipeline/variables/pipeline.yml
+++ b/eng/pipeline/variables/pipeline.yml
@@ -24,3 +24,8 @@ variables:
   - name: MS_GOTOOLCHAIN_TELEMETRY_ENABLED
     value: '0'
 
+  # Download the exact stage 0 Go version in CI rather than using whatever is on PATH.
+  # See https://github.com/microsoft/go/issues/12
+  - name: MS_USE_CI_STAGE0
+    value: '1'
+
diff --git a/eng/run.ps1 b/eng/run.ps1
index 8fa0dfe07f2..ee9d1a47799 100644
--- a/eng/run.ps1
+++ b/eng/run.ps1
@@ -17,10 +17,9 @@ To list all possible tools:
 
 Builds 'eng/_util/cmd/<tool>/<tool>.go' and runs it using the list of arguments.
 
-This command automatically installs a known version of the Microsoft build Go that
-will be used to build the tools. The known version of Go will also be used to build the
-Go source code, if it's built. Set environment variable "MS_USE_PATH_GO" to 1 to
-your own Go from PATH instead.
+This command uses Go from PATH by default. Set "MS_USE_CI_STAGE0" to 1 to instead
+download the exact Go version used in CI into the repository at
+'eng/artifacts/_goStage0/'. This is useful for reproducing CI-specific failures.
 
 Every tool accepts a '-h' argument to show tool usage help.
 #>
@@ -82,17 +81,19 @@ if (-not ($tool_source -is [System.IO.FileInfo])) {
 # Now that we have a single result, navigate upwards to see which module it's in.
 $tool_module = $tool_source.Directory.Parent.Parent.FullName
 
-# Download a consistent stage 0 version of Go unless opted out.
-if ($env:MS_USE_PATH_GO -eq "1") {
+# Set up a Go toolset. See https://github.com/microsoft/go/issues/12
+#  - Default: use Go from PATH.
+#  - "MS_USE_CI_STAGE0=1": download the exact CI stage 0 version (eng/artifacts/_goStage0/).
+if ($env:MS_USE_CI_STAGE0 -eq "1") {
+  Download-Stage0
+} else {
   try {
-    Write-Host "Using $(go version) from '$(go env GOROOT)'. Results may differ from CI environment."
+    Write-Host "Using $(go version) from '$(go env GOROOT)'. Results may differ from CI. Set MS_USE_CI_STAGE0=1 to download the CI version."
   } catch {
-    Write-Host "Error: 'go' is most likely not in PATH. To download the known version, set 'MS_USE_PATH_GO' to '0' or unset it, then try again."
+    Write-Host "Error: 'go' is not in PATH. Install Go or set MS_USE_CI_STAGE0=1 to download it automatically."
     Write-Host "Exception: $_"
     exit 1
   }
-} else {
-  Download-Stage0
 }
 
 $stage0_goroot = & go env GOROOT
diff --git a/eng/utilities.ps1 b/eng/utilities.ps1
index 6437e48171b..c338bbe022f 100644
--- a/eng/utilities.ps1
+++ b/eng/utilities.ps1
@@ -26,9 +26,14 @@ function Download-Stage0() {
   # specific version of Go. The downloaded copy of Go is called the "stage 0" version.
   $stage0_go_version = 'go1.25.0-1'
 
+  # Install stage 0 Go inside the repository (under "eng/artifacts/") to avoid modifying the user's
+  # home directory, and to make cleanup easy (included in "git clean -xdf"). The "_" prefix prevents
+  # Go's moddeps_test from traversing into this directory. See https://github.com/microsoft/go/issues/12
+  $stage0_install_dir = Join-Path $PSScriptRoot "artifacts" "_goStage0"
+
   # Source the install script so that we can use the PATH it assigns.
   $installScriptPath = Join-Path $PSScriptRoot "_util" "go-install.ps1"
-  . $installScriptPath -Version $stage0_go_version
+  . $installScriptPath -Version $stage0_go_version -InstallDir $stage0_install_dir
 }
 
 # Copied from https://github.com/dotnet/install-scripts/blob/49d5da7f7d313aa65d24fe95cc29767faef553fd/src/dotnet-install.ps1#L180-L197

From 9c94b3c7d4cfa0be3e283c804e2484838daddec6 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 16 Apr 2026 11:02:49 +0100
Subject: [PATCH 818/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 34 +++++++++----------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index ce002934c04..f4086fdb00e 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -525,7 +525,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 9a2085fab3b18d..b53a7dfaed80ce 100644
+index 4d96507cc3aa35..4e3a777d6d66ff 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -536,9 +536,9 @@ index 9a2085fab3b18d..b53a7dfaed80ce 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
- 	golang.org/x/mod v0.34.0
+ 	golang.org/x/mod v0.35.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 1affc0bbc1da72..63342ee8c34e0f 100644
+index 3ec3d536af3da9..c2d7ebe32aa092 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -2215,7 +2215,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index dfde90a9fa13fd..d6c51800898d4c 100644
+index e7f2b95af8de8f..228d4718ce333c 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2265,12 +2265,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index a8ebee0bd27779..12852375112b91 100644
+index 93578227a229e7..9dd3dc50f2d0d9 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.42.1-0.20260320201212-a76ec62d6c53 // indirect
- 	golang.org/x/text v0.35.0 // indirect
+ 	golang.org/x/sys v0.43.0 // indirect
+ 	golang.org/x/text v0.36.0 // indirect
  )
 +
 +require (
@@ -2279,7 +2279,7 @@ index a8ebee0bd27779..12852375112b91 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index e5f656652a7f7f..6442c6ae7cf0e5 100644
+index c088007f57652f..61948fa2a7a070 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2289,11 +2289,11 @@ index e5f656652a7f7f..6442c6ae7cf0e5 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c h1:kHYNsP4g/LehejM+7p42t1ZQWlV/HJBwwjCE7SwFBKo=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
- golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
- golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
- golang.org/x/net v0.52.1-0.20260406204716-056ac742146a h1:3li6mFiqneqvrkq+zbxvMG+VdvDQa27vKCR4kx3vmp0=
+ golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
+ golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
+ golang.org/x/net v0.53.1-0.20260410192740-cd64923cd7f4 h1:YxvMAEWKTqJ1JPwbgY2r7MoIutOit7xTXgoxo887lWQ=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 2f424e7e3c0e59..2c523a20bdfbc7 100644
+index dd036a156898cf..e8eeb9455e4bb5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -152,6 +152,13 @@ var depsRules = `
@@ -2362,7 +2362,7 @@ index 2f424e7e3c0e59..2c523a20bdfbc7 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -573,6 +610,10 @@ var depsRules = `
+@@ -576,6 +613,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2373,7 +2373,7 @@ index 2f424e7e3c0e59..2c523a20bdfbc7 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -926,7 +967,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -935,7 +976,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2382,7 +2382,7 @@ index 2f424e7e3c0e59..2c523a20bdfbc7 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -936,7 +977,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -945,7 +986,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 35468f6f1ded3b..107a16389e527e 100644
+index afa1c640fae9d8..bc6c939b6942f4 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -38283,6 +38283,6 @@ index 35468f6f1ded3b..107a16389e527e 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.49.0
+ # golang.org/x/crypto v0.50.0
  ## explicit; go 1.25.0
  golang.org/x/crypto/chacha20

From 0a03d7257abaaeb2611408116f4d9d305bec5084 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 11:53:08 +0000
Subject: [PATCH 819/887] build(deps): bump github/codeql-action from 4.35.1 to
 4.35.2 (#2233)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 8e165e398fb..67fe0a1a04c 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           category: /language:go

From 74cdbe5596a04941e19cbdadf8c5b2e923aada9a Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Thu, 16 Apr 2026 12:19:36 -0700
Subject: [PATCH 820/887] Pull in truncation warning

---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index b37f1b3ff8e..60e6ad8fc03 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96
+	github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.53.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index af478c16ae7..81a5ae3cd83 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96 h1:GK33KDwSMiBpGR82fU2MIdwk+febXI+d51uLQI5nmIE=
-github.com/microsoft/go-infra v0.0.10-0.20260322221929-fd732e56be96/go.mod h1:HjCdUUo5fRDh0jFvKS2Ownh6RKKsWVJkXXuWS7FGKsY=
+github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc h1:30J8WxjqbdWfBhQ1e3qoWFCj/nzySj6BfpHTbCkj62s=
+github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
@@ -59,8 +59,8 @@ golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
 golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
-golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
-golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
+golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
+golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

From 04d27b9c61f42ce5649316620311ccc18ed4f08e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 17 Apr 2026 16:04:25 +0000
Subject: [PATCH 821/887] Update submodule to latest master (ed1646a8):
 internal/cpu: add vector crypto extension detection for riscv64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index e32ec4742e3..ed1646a8ae4 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit e32ec4742e3a9b5a28635e20806331afd587b429
+Subproject commit ed1646a8ae43d151c81e144f031b7f37d7947d7d

From 027f6a6ba5e8104e11e2e618d1bcfac11cff926f Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Mon, 20 Apr 2026 09:03:12 +0100
Subject: [PATCH 822/887] resolve 3-way merge conflicts

---
 patches/0001-Vendor-external-dependencies.patch | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index f4086fdb00e..f69237a0b8a 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -2265,7 +2265,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 93578227a229e7..9dd3dc50f2d0d9 100644
+index 13194d3e0e55c2..094fc9bab7f346 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2279,7 +2279,7 @@ index 93578227a229e7..9dd3dc50f2d0d9 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index c088007f57652f..61948fa2a7a070 100644
+index 1403e6f10b6a03..f4c10be0c19b33 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2291,7 +2291,7 @@ index c088007f57652f..61948fa2a7a070 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
  golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
- golang.org/x/net v0.53.1-0.20260410192740-cd64923cd7f4 h1:YxvMAEWKTqJ1JPwbgY2r7MoIutOit7xTXgoxo887lWQ=
+ golang.org/x/net v0.53.1-0.20260416211419-a4ac1da285b7 h1:pI4f6RycO6XrhGZl0Wt2rylPksDZLr8jT6uZGzLQGvA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index dd036a156898cf..e8eeb9455e4bb5 100644
 --- a/src/go/build/deps_test.go
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index afa1c640fae9d8..bc6c939b6942f4 100644
+index 03e65dc108d943..21165a217a76fc 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@

From 8f8ffd3846c47ca9abe95163b55165752b818355 Mon Sep 17 00:00:00 2001
From: michelle-clayton-work <mclayton+github@microsoft.com>
Date: Mon, 20 Apr 2026 18:15:09 -0700
Subject: [PATCH 823/887] Fix GOFIPS detection bug; add GODEBUG=fips140=off
 (#2184)

Fix GOFIPS handling to match the documented behavior: only GOFIPS=1
enables FIPS mode, and any other value (including 0 and the empty
string) is treated as if GOFIPS were unset. The same applies to
GOLANG_FIPS.

Add GODEBUG=fips140=off as the supported way to explicitly disable
FIPS mode and skip the platform-specific FIPS detection (e.g. the
Linux kernel FIPS flag at /proc/sys/crypto/fips_enabled).

Previously, due to a bug, setting GOFIPS or GOLANG_FIPS to any value
silently bypassed the platform FIPS detection while only =1 actually
enabled FIPS mode. That contradicted the docs and made it easy to
accidentally disable FIPS detection through a typo or empty
assignment. Programs that previously relied on GOFIPS=0 to skip
platform FIPS detection should switch to GODEBUG=fips140=off.

Fixes microsoft/go#2184
---
 eng/doc/fips/README.md                        |  17 ++
 ...03-Implement-crypto-internal-backend.patch | 152 +++++++++++++++---
 2 files changed, 147 insertions(+), 22 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 794d5292766..c4d58154904 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -146,10 +146,23 @@ The Microsoft build of Go detects your FIPS mode preference by evaluating this l
 - If environment variable setting `GODEBUG=fips140=on` is found: Enabled ✅
   - More specifically, if [`GODEBUG`](https://go.dev/doc/godebug) contains `fips140=on`.
   - This is the recommended way to set your FIPS preference.
+  - `GODEBUG=fips140=only` and `GODEBUG=fips140=debug` also enable FIPS mode. See [Go Runtime FIPS mode](#go-runtime-fips-mode).
+- If environment variable setting `GODEBUG=fips140=off` is found: Disabled ❌
+  - This explicitly disables FIPS mode and skips platform-specific FIPS
+    detection (e.g. the Linux kernel FIPS flag). This is the only supported
+    way to skip platform FIPS detection.
 - If the environment variable `GOFIPS` is set to:
   - `1`: Enabled ✅
+  - Any other value (including `0` and the empty string) is ignored, and
+    detection continues with the next item in this list. To explicitly
+    disable FIPS mode and skip platform FIPS detection, use
+    `GODEBUG=fips140=off`.
 - If the environment variable `GOLANG_FIPS` is set to:
   - `1`: Enabled ✅
+  - Any other value (including `0` and the empty string) is ignored, and
+    detection continues with the next item in this list. To explicitly
+    disable FIPS mode and skip platform FIPS detection, use
+    `GODEBUG=fips140=off`.
 - If a platform-specific preference is detected: Enabled ✅
   - See the following sections for per-platform details.
 - If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled: Enabled ✅
@@ -433,6 +446,9 @@ This list of major changes is intended for quick reference and for access to his
 ### Go 1.27 (Aug 2026)
 
 - Support for `GODEBUG=fips140=only` has been added. It acts as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used.
+- `GODEBUG=fips140=off` now explicitly disables FIPS mode and skips the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag at `/proc/sys/crypto/fips_enabled`). This is the supported way to opt out of platform FIPS detection. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184).
+- `GOFIPS` now matches its documented behavior: only `GOFIPS=1` enables FIPS mode, and any other value (including `0` and the empty string) is treated as if `GOFIPS` were unset. The same applies to `GOLANG_FIPS`.
+  - In Go 1.25 and 1.26, due to a bug, setting `GOFIPS` (or `GOLANG_FIPS`) to any value silently bypassed the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag) even though only `=1` actually enabled FIPS mode. Programs that previously relied on `GOFIPS=0` to skip platform FIPS detection should switch to `GODEBUG=fips140=off`.
 - The per-platform GOEXPERIMENTs (`opensslcrypto`, `cngcrypto`, `darwincrypto`) have been removed.
   - Using any of the removed experiments will result in a build error.
   - The `systemcrypto` GOEXPERIMENT has been the preferred way to select a crypto backend since it was introduced in Go 1.21. It is now the only way.
@@ -463,6 +479,7 @@ This list of major changes is intended for quick reference and for access to his
   - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
 
 - `GOFIPS=0` support has been removed. It now has no effect.
+  - Note: due to a bug, in Go 1.25 and 1.26 setting `GOFIPS` (or `GOLANG_FIPS`) to any value other than `1` actually still bypassed the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag), even though it was documented as having no effect. This was fixed in Go 1.27, which also adds `GODEBUG=fips140=off` as the supported way to explicitly disable FIPS mode and skip platform FIPS detection. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184).
 
 - `GOEXPERIMENT=boringcrypto` has been removed.
 
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 03532b2aa60..706f8ff1e26 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -33,7 +33,8 @@ desired goexperiments and build tags.
  src/crypto/internal/backend/bbig/big_linux.go |  12 +
  .../internal/backend/bbig/big_windows.go      |  12 +
  src/crypto/internal/backend/common.go         |  46 ++
- .../internal/backend/fips140/fips140.go       |  70 +++
+ .../internal/backend/fips140/fips140.go       |  95 ++++
+ .../internal/backend/fips140/fips140_test.go  |  75 +++
  .../internal/backend/fips140/isrequirefips.go |   9 +
  .../internal/backend/fips140/norequirefips.go |   9 +
  .../backend/fips140/nosystemcrypto.go         |  13 +
@@ -53,7 +54,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  47 ++
  src/runtime/runtime_boring.go                 |   5 +
- 44 files changed, 2763 insertions(+), 16 deletions(-)
+ 45 files changed, 2863 insertions(+), 16 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -65,6 +66,7 @@ desired goexperiments and build tags.
  create mode 100644 src/crypto/internal/backend/bbig/big_windows.go
  create mode 100644 src/crypto/internal/backend/common.go
  create mode 100644 src/crypto/internal/backend/fips140/fips140.go
+ create mode 100644 src/crypto/internal/backend/fips140/fips140_test.go
  create mode 100644 src/crypto/internal/backend/fips140/isrequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/norequirefips.go
  create mode 100644 src/crypto/internal/backend/fips140/nosystemcrypto.go
@@ -368,10 +370,10 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index f40de7fe12fd37..04797bfc529ac1 100644
+index 91282ef9ace1c6..8f0deba2378f44 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
-@@ -2413,6 +2413,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
+@@ -2415,6 +2415,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
  			buildmode = "archive"
  		}
  	}
@@ -2264,10 +2266,10 @@ index 00000000000000..a9682181ffa154
 +}
 diff --git a/src/crypto/internal/backend/fips140/fips140.go b/src/crypto/internal/backend/fips140/fips140.go
 new file mode 100644
-index 00000000000000..1bf7c3b7d63da8
+index 00000000000000..6c3568d77d2c0a
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/fips140.go
-@@ -0,0 +1,70 @@
+@@ -0,0 +1,95 @@
 +// Copyright 2024 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -2297,20 +2299,7 @@ index 00000000000000..1bf7c3b7d63da8
 +func init() {
 +	// TODO: Decide which environment variable to use.
 +	// See https://github.com/microsoft/go/issues/397.
-+	var ok bool
-+	value := fips140GODEBUG.Value()
-+	if value == "on" || value == "only" || value == "debug" {
-+		message = "environment variable GODEBUG=fips140=" + value
-+		value = "1"
-+	} else if value, ok = syscall.Getenv("GOFIPS"); ok {
-+		message = "environment variable GOFIPS"
-+	} else if value, ok = syscall.Getenv("GOLANG_FIPS"); ok {
-+		message = "environment variable GOLANG_FIPS"
-+	} else if systemFIPSMode() {
-+		message = "system FIPS mode"
-+		value = "1"
-+	}
-+	enabled = value == "1"
++	enabled, message = detect(fips140GODEBUG.Value(), syscall.Getenv, systemFIPSMode)
 +	if isRequireFIPS {
 +		if isSkipFIPSCheck {
 +			panic("the 'requirefips' build tag is enabled, but it conflicts " +
@@ -2321,6 +2310,44 @@ index 00000000000000..1bf7c3b7d63da8
 +	}
 +}
 +
++// detect reports whether FIPS 140 mode should be enabled and returns a
++// human-readable message describing how the decision was made.
++//
++// godebug is the value of the fips140 GODEBUG setting. getenv is used to look
++// up the GOFIPS and GOLANG_FIPS environment variables and mirrors the
++// semantics of [syscall.Getenv]. systemFIPS reports whether the platform
++// indicates that FIPS mode should be enabled (e.g. the Linux kernel FIPS flag).
++//
++// The inputs are taken as parameters, rather than read directly, to make the
++// detection logic easy to test without depending on process state.
++func detect(godebug string, getenv func(string) (string, bool), systemFIPS func() bool) (enabled bool, message string) {
++	switch godebug {
++	case "on", "only", "debug":
++		return true, "environment variable GODEBUG=fips140=" + godebug
++	case "off":
++		// GODEBUG=fips140=off explicitly disables FIPS mode and bypasses
++		// the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag).
++		// This is the only supported way to skip the platform FIPS detection.
++		return false, "environment variable GODEBUG=fips140=off"
++	}
++	// Only "1" is a meaningful value for GOFIPS and GOLANG_FIPS. Any other
++	// value (including "0" and the empty string) is treated as if the
++	// variable were unset, to match the documented behavior and to avoid
++	// silently bypassing the platform FIPS detection due to a typo or
++	// accidental setting. To explicitly disable FIPS mode and skip the
++	// platform FIPS detection, use GODEBUG=fips140=off.
++	if v, ok := getenv("GOFIPS"); ok && v == "1" {
++		return true, "environment variable GOFIPS=1"
++	}
++	if v, ok := getenv("GOLANG_FIPS"); ok && v == "1" {
++		return true, "environment variable GOLANG_FIPS=1"
++	}
++	if systemFIPS() {
++		return true, "system FIPS mode"
++	}
++	return false, ""
++}
++
 +// Check checks whether fips mode, as returned by fips(),
 +// is valid given the current settings.
 +func Check(fips func() bool) error {
@@ -2338,6 +2365,87 @@ index 00000000000000..1bf7c3b7d63da8
 +	}
 +	return nil
 +}
+diff --git a/src/crypto/internal/backend/fips140/fips140_test.go b/src/crypto/internal/backend/fips140/fips140_test.go
+new file mode 100644
+index 00000000000000..9fb7df809baed8
+--- /dev/null
++++ b/src/crypto/internal/backend/fips140/fips140_test.go
+@@ -0,0 +1,75 @@
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++package fips140
++
++import (
++	"testing"
++)
++
++// fakeEnv returns a getenv function that serves lookups from m, with the
++// same (value, ok) semantics as [syscall.Getenv]. A key present in m with an
++// empty string value represents a set-but-empty environment variable.
++func fakeEnv(m map[string]string) func(string) (string, bool) {
++	return func(key string) (string, bool) {
++		v, ok := m[key]
++		return v, ok
++	}
++}
++
++// TestDetect exercises the FIPS 140 detection logic in isolation, without
++// depending on process environment variables or the host's kernel FIPS
++// configuration. This lets us cover combinations that would otherwise be
++// impossible to test on a single machine, such as the kernel FIPS flag
++// being set or not set for the same test run.
++func TestDetect(t *testing.T) {
++	tests := []struct {
++		name        string
++		godebug     string
++		env         map[string]string
++		systemFIPS  bool
++		wantEnabled bool
++		wantMessage string
++	}{
++		// GODEBUG=fips140 takes precedence over everything else.
++		{name: "GODEBUG=on", godebug: "on", wantEnabled: true, wantMessage: "environment variable GODEBUG=fips140=on"},
++		{name: "GODEBUG=only", godebug: "only", wantEnabled: true, wantMessage: "environment variable GODEBUG=fips140=only"},
++		{name: "GODEBUG=debug", godebug: "debug", wantEnabled: true, wantMessage: "environment variable GODEBUG=fips140=debug"},
++		{name: "GODEBUG=on beats GOFIPS=0 and kernel FIPS", godebug: "on", env: map[string]string{"GOFIPS": "0"}, systemFIPS: true, wantEnabled: true, wantMessage: "environment variable GODEBUG=fips140=on"},
++		{name: "GODEBUG=off beats kernel FIPS", godebug: "off", systemFIPS: true, wantEnabled: false, wantMessage: "environment variable GODEBUG=fips140=off"},
++		{name: "GODEBUG=off beats GOFIPS=1", godebug: "off", env: map[string]string{"GOFIPS": "1"}, wantEnabled: false, wantMessage: "environment variable GODEBUG=fips140=off"},
++
++		// GOFIPS=1 enables FIPS when GODEBUG is unset/empty/unrecognized.
++		{name: "GOFIPS=1", env: map[string]string{"GOFIPS": "1"}, wantEnabled: true, wantMessage: "environment variable GOFIPS=1"},
++		{name: "GOFIPS=1 beats kernel FIPS off", env: map[string]string{"GOFIPS": "1"}, systemFIPS: false, wantEnabled: true, wantMessage: "environment variable GOFIPS=1"},
++		{name: "GODEBUG unrecognized, GOFIPS=1", godebug: "bogus", env: map[string]string{"GOFIPS": "1"}, wantEnabled: true, wantMessage: "environment variable GOFIPS=1"},
++
++		// Non-"1" values of GOFIPS are ignored and fall through.
++		{name: "GOFIPS=0 falls through to kernel FIPS on", env: map[string]string{"GOFIPS": "0"}, systemFIPS: true, wantEnabled: true, wantMessage: "system FIPS mode"},
++		{name: "GOFIPS=0 falls through to kernel FIPS off", env: map[string]string{"GOFIPS": "0"}, systemFIPS: false, wantEnabled: false, wantMessage: ""},
++		{name: "GOFIPS empty falls through to kernel FIPS on", env: map[string]string{"GOFIPS": ""}, systemFIPS: true, wantEnabled: true, wantMessage: "system FIPS mode"},
++		{name: "GOFIPS=garbage falls through", env: map[string]string{"GOFIPS": "garbage"}, systemFIPS: false, wantEnabled: false, wantMessage: ""},
++
++		// GOLANG_FIPS behaves the same as GOFIPS.
++		{name: "GOLANG_FIPS=1", env: map[string]string{"GOLANG_FIPS": "1"}, wantEnabled: true, wantMessage: "environment variable GOLANG_FIPS=1"},
++		{name: "GOFIPS=1 beats GOLANG_FIPS=0", env: map[string]string{"GOFIPS": "1", "GOLANG_FIPS": "0"}, wantEnabled: true, wantMessage: "environment variable GOFIPS=1"},
++		{name: "GOLANG_FIPS=0 falls through to kernel FIPS on", env: map[string]string{"GOLANG_FIPS": "0"}, systemFIPS: true, wantEnabled: true, wantMessage: "system FIPS mode"},
++
++		// With nothing set, the kernel FIPS flag controls the result.
++		{name: "nothing set, kernel FIPS on", systemFIPS: true, wantEnabled: true, wantMessage: "system FIPS mode"},
++		{name: "nothing set, kernel FIPS off", systemFIPS: false, wantEnabled: false, wantMessage: ""},
++	}
++
++	for _, tc := range tests {
++		t.Run(tc.name, func(t *testing.T) {
++			systemFIPS := func() bool { return tc.systemFIPS }
++			gotEnabled, gotMessage := detect(tc.godebug, fakeEnv(tc.env), systemFIPS)
++			if gotEnabled != tc.wantEnabled || gotMessage != tc.wantMessage {
++				t.Errorf("detect(godebug=%q, env=%v, systemFIPS=%v) = (%v, %q), want (%v, %q)",
++					tc.godebug, tc.env, tc.systemFIPS,
++					gotEnabled, gotMessage, tc.wantEnabled, tc.wantMessage)
++			}
++		})
++	}
++}
 diff --git a/src/crypto/internal/backend/fips140/isrequirefips.go b/src/crypto/internal/backend/fips140/isrequirefips.go
 new file mode 100644
 index 00000000000000..b33d08c84e2dae
@@ -3199,7 +3307,7 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 2c523a20bdfbc7..b6ff825fc811b3 100644
+index e8eeb9455e4bb5..52c0785a87e5e8 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -367,7 +367,7 @@ var depsRules = `
@@ -3236,7 +3344,7 @@ index 2c523a20bdfbc7..b6ff825fc811b3 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -614,8 +625,15 @@ var depsRules = `
+@@ -617,8 +628,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  

From dee646a5d97ebdb52f6b624d80f25beb98cc7830 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 22 Apr 2026 16:09:04 +0000
Subject: [PATCH 824/887] Update submodule to latest master (122eb7d0):
 internal/cpu: add zbc extension detection for riscv64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index ed1646a8ae4..122eb7d0351 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit ed1646a8ae43d151c81e144f031b7f37d7947d7d
+Subproject commit 122eb7d0351ac6766212e7ad3ee9533b8daee066

From 0f6d647d2dade17023c2a49897b116271305418d Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Thu, 23 Apr 2026 01:14:02 -0700
Subject: [PATCH 825/887] Add reusable line endings check workflow (#2246)

* Add reusable line endings check workflow

* Add default text=auto eol=lf to .gitattributes

* Pin reusable workflow to commit SHA
---
 .gitattributes                           |  3 +++
 .github/workflows/check-line-endings.yml | 16 ++++++++++++++++
 2 files changed, 19 insertions(+)
 create mode 100644 .github/workflows/check-line-endings.yml

diff --git a/.gitattributes b/.gitattributes
index 1c6ecf2625f..5a14080823e 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,6 @@
+# Default: normalize text files to LF in the repo and on checkout.
+* text=auto eol=lf
+
 # On Windows, running "git apply" with CRLF patch files causes an error for binary files:
 # "git diff header lacks filename information when removing 1 leading pathname component".
 # To fix this, always check out patch files as LF.
diff --git a/.github/workflows/check-line-endings.yml b/.github/workflows/check-line-endings.yml
new file mode 100644
index 00000000000..d6a4464267a
--- /dev/null
+++ b/.github/workflows/check-line-endings.yml
@@ -0,0 +1,16 @@
+name: Check Line Endings
+
+on:
+  push:
+    branches:
+      - "microsoft/*"
+  pull_request:
+    branches:
+      - "microsoft/*"
+
+permissions:
+  contents: read
+
+jobs:
+  check-line-endings:
+    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@944d1d054c1265bf35b6632d42682217330907c4 # main

From 5277f249a85c83020f9d920239e546eb4f7d625e Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 23 Apr 2026 09:15:29 +0100
Subject: [PATCH 826/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch    | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index f69237a0b8a..37f845f5ada 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -2265,7 +2265,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 13194d3e0e55c2..094fc9bab7f346 100644
+index f3c1d75f28cf16..e9ae7119fca209 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2279,7 +2279,7 @@ index 13194d3e0e55c2..094fc9bab7f346 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 1403e6f10b6a03..f4c10be0c19b33 100644
+index 4333b2a6605111..15822722755f56 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2291,9 +2291,9 @@ index 1403e6f10b6a03..f4c10be0c19b33 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
  golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
- golang.org/x/net v0.53.1-0.20260416211419-a4ac1da285b7 h1:pI4f6RycO6XrhGZl0Wt2rylPksDZLr8jT6uZGzLQGvA=
+ golang.org/x/net v0.53.1-0.20260420212600-f70faeaf29ed h1:7TjurTHs0hDGI2ZSxkEJy0ToTN3VoUsPAZ6MYUEvl48=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index dd036a156898cf..e8eeb9455e4bb5 100644
+index f1f86117c6c04c..94997ebea42dcd 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -152,6 +152,13 @@ var depsRules = `
@@ -2310,7 +2310,7 @@ index dd036a156898cf..e8eeb9455e4bb5 100644
  	# TIME is SYSCALL plus the core packages about time, including context.
  	SYSCALL
  	< time/tzdata
-@@ -542,16 +549,46 @@ var depsRules = `
+@@ -535,16 +542,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2362,7 +2362,7 @@ index dd036a156898cf..e8eeb9455e4bb5 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -576,6 +613,10 @@ var depsRules = `
+@@ -569,6 +606,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2373,7 +2373,7 @@ index dd036a156898cf..e8eeb9455e4bb5 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -935,7 +976,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -939,7 +980,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2382,7 +2382,7 @@ index dd036a156898cf..e8eeb9455e4bb5 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -945,7 +986,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -949,7 +990,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 03e65dc108d943..21165a217a76fc 100644
+index 944f0194bdbd49..285068ad2f72e6 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@

From d0387be3fd445ec1aa41f0a91e5af007e5975cf3 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 23 Apr 2026 14:25:27 -0700
Subject: [PATCH 827/887] Use pipelineymlgen to share container definitions
 (#2231)

Create pr.gen.yml to generate both pr-pipeline.yml and pr-outerloop-pipeline.yml
from a single source, using inlineif for the outerloop vs innerloop differences.

Create rolling.gen.yml to generate both rolling-innerloop-pipeline.yml and
rolling-pipeline.yml from a single source, using inlineif for the innerloop-
specific parameters section and builder flags.

Also fix a duplicate entry in variables/codeql.yml.

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
---
 eng/_util/go.mod                            |  2 +-
 eng/_util/go.sum                            |  4 +-
 eng/pipeline/data/containers.yml            | 10 +++
 eng/pipeline/pr-outerloop-pipeline.yml      | 22 +++---
 eng/pipeline/pr-pipeline.yml                | 19 ++---
 eng/pipeline/pr.gen.yml                     | 49 +++++++++++++
 eng/pipeline/rolling-innerloop-pipeline.yml | 17 ++---
 eng/pipeline/rolling-pipeline.yml           | 16 +++--
 eng/pipeline/rolling.gen.yml                | 78 +++++++++++++++++++++
 eng/pipeline/variables/codeql.yml           |  2 -
 10 files changed, 178 insertions(+), 41 deletions(-)
 create mode 100644 eng/pipeline/data/containers.yml
 create mode 100644 eng/pipeline/pr.gen.yml
 create mode 100644 eng/pipeline/rolling.gen.yml

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 60e6ad8fc03..8e405ed4fba 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc
+	github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.53.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 81a5ae3cd83..eb511d93883 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc h1:30J8WxjqbdWfBhQ1e3qoWFCj/nzySj6BfpHTbCkj62s=
-github.com/microsoft/go-infra v0.0.10-0.20260411064856-24be3e9cffcc/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
+github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571 h1:9FWo2PHJ6HGLPYF4VP6DupIeA0YN39xg9c4hnn75L+E=
+github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
diff --git a/eng/pipeline/data/containers.yml b/eng/pipeline/data/containers.yml
new file mode 100644
index 00000000000..55cd66438aa
--- /dev/null
+++ b/eng/pipeline/data/containers.yml
@@ -0,0 +1,10 @@
+# Containers used in pipelines. This data template can be used with pipelineymlgen
+# to generate the right format for "real" AzDO pipelines and 1ES pipelines.
+- container: ubuntu2204
+  image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
+- container: mariner2
+  image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-amd64-default
+- container: mariner2arm64
+  image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
+- container: azurelinux3
+  image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
diff --git a/eng/pipeline/pr-outerloop-pipeline.yml b/eng/pipeline/pr-outerloop-pipeline.yml
index 39003c269c5..b7c7a02c614 100644
--- a/eng/pipeline/pr-outerloop-pipeline.yml
+++ b/eng/pipeline/pr-outerloop-pipeline.yml
@@ -1,26 +1,25 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: pr.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
-# This pipeline can be triggered via PR comment to run outerloop builders.
+# PR validation pipelines: innerloop and outerloop.
+# The outerloop pipeline can be triggered via PR comment to run outerloop builders.
+# The outerloop pipeline definition must be adjusted using the AzDO UI to require
+# a comment before running the build. There is unfortunately no way to configure
+# this from YAML.
 
-# https://dev.azure.com/dnceng-public/public/_build?definitionId=192
+# innerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=191
+# outerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=192
 
 trigger: none
 pr:
-  # Configure this pipeline to *potentially* run on any Microsoft-maintained branch. The pattern
-  # allows commands like "/azp run" to find this pipeline.
-  #
-  # Note: if all we did was configure "pr:", this pipeline would be triggered *by default* on any
-  # new PR. To make the pipeline run on demand, the pipeline definition must be adjusted using the
-  # AzDO UI to require a comment before running the build. There is unfortunately no way to
-  # configure this from YAML.
   - microsoft/*
   - dev/*
-
 variables:
   - template: variables/pipeline.yml
-
 resources:
   containers:
     - container: ubuntu2204
@@ -31,7 +30,6 @@ resources:
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
-
 stages:
   - template: stages/go-builder-matrix-stages.yml
     parameters:
diff --git a/eng/pipeline/pr-pipeline.yml b/eng/pipeline/pr-pipeline.yml
index 8fdc2ed9bbf..072005a908e 100644
--- a/eng/pipeline/pr-pipeline.yml
+++ b/eng/pipeline/pr-pipeline.yml
@@ -1,25 +1,27 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: pr.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
-# This pipeline validates PRs. It builds Go and runs inner loop tests.
+# PR validation pipelines: innerloop and outerloop.
+# The outerloop pipeline can be triggered via PR comment to run outerloop builders.
+# The outerloop pipeline definition must be adjusted using the AzDO UI to require
+# a comment before running the build. There is unfortunately no way to configure
+# this from YAML.
 
-# https://dev.azure.com/dnceng-public/public/_build?definitionId=191
+# innerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=191
+# outerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=192
 
 trigger: none
 pr:
   - microsoft/*
   - dev/*
-
 variables:
   - template: variables/pipeline.yml
-
 resources:
   containers:
-    # Predefine named containers. Using "container:" inside the job would work, because this is not
-    # 1ES PT. However, to share code, use the same names here. Unfortunately the format used here
-    # (container: ... image: ...) is not the same as the one 1ES PT uses, so updating these requires
-    # separate changes.
     - container: ubuntu2204
       image: mcr.microsoft.com/microsoft-go/infra-images:ubuntu-22.04-amd64-default
     - container: mariner2
@@ -28,7 +30,6 @@ resources:
       image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
     - container: azurelinux3
       image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
-
 stages:
   - template: stages/go-builder-matrix-stages.yml
     parameters:
diff --git a/eng/pipeline/pr.gen.yml b/eng/pipeline/pr.gen.yml
new file mode 100644
index 00000000000..67ee00a8ffd
--- /dev/null
+++ b/eng/pipeline/pr.gen.yml
@@ -0,0 +1,49 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# PR validation pipelines: innerloop and outerloop.
+# The outerloop pipeline can be triggered via PR comment to run outerloop builders.
+# The outerloop pipeline definition must be adjusted using the AzDO UI to require
+# a comment before running the build. There is unfortunately no way to configure
+# this from YAML.
+
+# innerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=191
+# outerloop: https://dev.azure.com/dnceng-public/public/_build?definitionId=192
+
+pipelineymlgen:
+  data:
+    containers:
+      ${ inlinetemplate "data/containers.yml" }
+  output:
+    - file: pr-pipeline.yml
+      data:
+        outerloop: false
+    - file: pr-outerloop-pipeline.yml
+      data:
+        outerloop: true
+---
+
+trigger: none
+pr:
+  - microsoft/*
+  - dev/*
+
+variables:
+  - template: variables/pipeline.yml
+
+resources:
+  containers:
+    - ${ inlinerange .containers }:
+      - container: ${ .container }
+        image: ${ .image }
+
+stages:
+  - template: stages/go-builder-matrix-stages.yml
+    parameters:
+      ctx: {}
+      ${ inlineif .outerloop }:
+        outerloop: true
+      ${ inlineelse }:
+        innerloop: true
+        buildandpack: true
diff --git a/eng/pipeline/rolling-innerloop-pipeline.yml b/eng/pipeline/rolling-innerloop-pipeline.yml
index 1f7b0232784..777c48d8c89 100644
--- a/eng/pipeline/rolling-innerloop-pipeline.yml
+++ b/eng/pipeline/rolling-innerloop-pipeline.yml
@@ -1,11 +1,17 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: rolling.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
-# This pipeline runs innerloop (reliable, relatively quick) tests on rolling builds.
-# The intent is that if this pipeline fails, it should block official release for a good reason.
+# Rolling test pipelines: innerloop and outerloop.
+# The innerloop pipeline runs reliable, relatively quick tests.
+# If the innerloop pipeline fails, it should block official release for a good reason.
+# The outerloop pipeline runs tests that may be unreliable or very slow.
 
-# https://dev.azure.com/dnceng/internal/_build?definitionId=1342
+# innerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=1342
+# outerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=987
 
 trigger:
   batch: true
@@ -14,24 +20,20 @@ trigger:
       - microsoft/*
       - dev/official/*
 pr: none
-
 parameters:
   # By default, don't use the shared, potentially constrained linux-arm64 pool.
   - name: includeArm64Host
     displayName: 'Include Linux arm64 host builders'
     type: boolean
     default: false
-
 variables:
   - template: variables/pipeline.yml
-
 resources:
   repositories:
     - repository: 1ESPipelineTemplates
       type: git
       name: 1ESPipelineTemplates/1ESPipelineTemplates
       ref: refs/tags/release
-
 extends:
   template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
@@ -51,7 +53,6 @@ extends:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
-
     stages:
       - template: stages/go-builder-matrix-stages.yml
         parameters:
diff --git a/eng/pipeline/rolling-pipeline.yml b/eng/pipeline/rolling-pipeline.yml
index fdb49aeb640..c273f0050bd 100644
--- a/eng/pipeline/rolling-pipeline.yml
+++ b/eng/pipeline/rolling-pipeline.yml
@@ -1,11 +1,17 @@
+# Code generated by pipelineymlgen; DO NOT EDIT.
+# Origin file: rolling.gen.yml
+
 # Copyright (c) Microsoft Corporation.
 # Use of this source code is governed by a BSD-style
 # license that can be found in the LICENSE file.
 
-# This pipeline runs rolling builders that include tests that may be unreliable or very slow.
-# If a test is reliable/fast, it should be run by rolling-innerloop-pipeline.yml.
+# Rolling test pipelines: innerloop and outerloop.
+# The innerloop pipeline runs reliable, relatively quick tests.
+# If the innerloop pipeline fails, it should block official release for a good reason.
+# The outerloop pipeline runs tests that may be unreliable or very slow.
 
-# https://dev.azure.com/dnceng/internal/_build?definitionId=987
+# innerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=1342
+# outerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=987
 
 trigger:
   batch: true
@@ -14,17 +20,14 @@ trigger:
       - microsoft/*
       - dev/official/*
 pr: none
-
 variables:
   - template: variables/pipeline.yml
-
 resources:
   repositories:
     - repository: 1ESPipelineTemplates
       type: git
       name: 1ESPipelineTemplates/1ESPipelineTemplates
       ref: refs/tags/release
-
 extends:
   template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
   parameters:
@@ -44,7 +47,6 @@ extends:
         image: mcr.microsoft.com/microsoft-go/infra-images:cbl-mariner-2.0-arm64-default
       azurelinux3:
         image: mcr.microsoft.com/microsoft-go/infra-images:azurelinux-3.0-amd64-default
-
     stages:
       - template: stages/go-builder-matrix-stages.yml
         parameters:
diff --git a/eng/pipeline/rolling.gen.yml b/eng/pipeline/rolling.gen.yml
new file mode 100644
index 00000000000..4cf89cc9e24
--- /dev/null
+++ b/eng/pipeline/rolling.gen.yml
@@ -0,0 +1,78 @@
+# Copyright (c) Microsoft Corporation.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+# Rolling test pipelines: innerloop and outerloop.
+# The innerloop pipeline runs reliable, relatively quick tests.
+# If the innerloop pipeline fails, it should block official release for a good reason.
+# The outerloop pipeline runs tests that may be unreliable or very slow.
+
+# innerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=1342
+# outerloop: https://dev.azure.com/dnceng/internal/_build?definitionId=987
+
+pipelineymlgen:
+  data:
+    containers:
+      ${ inlinetemplate "data/containers.yml" }
+  output:
+    - file: rolling-innerloop-pipeline.yml
+      data:
+        innerloop: true
+    - file: rolling-pipeline.yml
+      data:
+        innerloop: false
+---
+
+trigger:
+  batch: true
+  branches:
+    include:
+      - microsoft/*
+      - dev/official/*
+pr: none
+
+${ inlineif .innerloop }:
+  parameters:
+    # By default, don't use the shared, potentially constrained linux-arm64 pool.
+    - name: includeArm64Host
+      displayName: 'Include Linux arm64 host builders'
+      type: boolean
+      default: false
+
+variables:
+  - template: variables/pipeline.yml
+
+resources:
+  repositories:
+    - repository: 1ESPipelineTemplates
+      type: git
+      name: 1ESPipelineTemplates/1ESPipelineTemplates
+      ref: refs/tags/release
+
+extends:
+  template: v1/1ES.Unofficial.PipelineTemplate.yml@1ESPipelineTemplates
+  parameters:
+    sdl:
+      sourceAnalysisPool:
+        name: NetCore1ESPool-Internal
+        image: 1es-windows-2022
+        os: windows
+      suppression:
+        suppressionFile: $(Build.SourcesDirectory)/.config/guardian/.gdnsuppress
+    containers:
+      ${ inlinerange .containers }:
+        ${ .container }:
+          image: ${ .image }
+
+    stages:
+      - template: stages/go-builder-matrix-stages.yml
+        parameters:
+          ctx: {}
+          ${ inlineif .innerloop }:
+            innerloop: true
+            # Include buildandpack builders. The official internal build uses slightly different build
+            # machines than this pipeline. This one tests against our minimum requirements.
+            buildandpack: true
+            includeArm64Host: ${{ parameters.includeArm64Host }}
+          ${ inlineelse }:
+            outerloop: true
diff --git a/eng/pipeline/variables/codeql.yml b/eng/pipeline/variables/codeql.yml
index 599ade703db..78992edc543 100644
--- a/eng/pipeline/variables/codeql.yml
+++ b/eng/pipeline/variables/codeql.yml
@@ -7,5 +7,3 @@ variables:
     value: true
   - name: Codeql.PublishDatabaseLog
     value: true
-  - name: Codeql.PublishDatabaseLog
-    value: true

From fe05dcabbc4b004d247af0027cd52841fb943061 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 23 Apr 2026 14:26:21 -0700
Subject: [PATCH 828/887] FIPS readme: streamline FIPS preference eval (#2247)

* FIPS readme: streamline FIPS preference eval

Co-authored-by: Copilot <copilot@github.com>

* Omit "GODEBUG=" in main eval: simpler, and also inclusive to other setting methods

---------

Co-authored-by: Copilot <copilot@github.com>
---
 eng/doc/fips/README.md | 47 ++++++++++++++++++++++--------------------
 1 file changed, 25 insertions(+), 22 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index c4d58154904..2a4fc000623 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -141,28 +141,13 @@ A program built with `systemcrypto` always uses the system-provided cryptography
 
 The following sections describe how to enable FIPS mode and the effect of the `GODEBUG=fips140=on` and `GOFIPS=1` settings on each supported platform.
 
-The Microsoft build of Go detects your FIPS mode preference by evaluating this list.
-
-- If environment variable setting `GODEBUG=fips140=on` is found: Enabled ✅
-  - More specifically, if [`GODEBUG`](https://go.dev/doc/godebug) contains `fips140=on`.
-  - This is the recommended way to set your FIPS preference.
-  - `GODEBUG=fips140=only` and `GODEBUG=fips140=debug` also enable FIPS mode. See [Go Runtime FIPS mode](#go-runtime-fips-mode).
-- If environment variable setting `GODEBUG=fips140=off` is found: Disabled ❌
-  - This explicitly disables FIPS mode and skips platform-specific FIPS
-    detection (e.g. the Linux kernel FIPS flag). This is the only supported
-    way to skip platform FIPS detection.
-- If the environment variable `GOFIPS` is set to:
-  - `1`: Enabled ✅
-  - Any other value (including `0` and the empty string) is ignored, and
-    detection continues with the next item in this list. To explicitly
-    disable FIPS mode and skip platform FIPS detection, use
-    `GODEBUG=fips140=off`.
-- If the environment variable `GOLANG_FIPS` is set to:
-  - `1`: Enabled ✅
-  - Any other value (including `0` and the empty string) is ignored, and
-    detection continues with the next item in this list. To explicitly
-    disable FIPS mode and skip platform FIPS detection, use
-    `GODEBUG=fips140=off`.
+The Microsoft build of Go detects your FIPS mode preference by evaluating this list in order.
+
+- If the [`GODEBUG`](https://go.dev/doc/godebug) settings include a `fips140` setting:
+  - If `fips140=on`, `fips140=only`, or `fips140=debug`: Enabled ✅
+  - If `fips140=off`: Disabled ❌ (As of Go 1.27, 1.26.3-1, and 1.25.10-1.)
+- If the environment variable `GOFIPS` or `GOLANG_FIPS` is set to `1`: Enabled ✅
+  - Any other value (including `0` and the empty string) is ignored.
 - If a platform-specific preference is detected: Enabled ✅
   - See the following sections for per-platform details.
 - If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled: Enabled ✅
@@ -174,12 +159,30 @@ If FIPS mode preference is Enabled ✅, then:
   - This may help detect and refuse to run with incorrectly configured environments.
 - The program enables [Go Runtime FIPS mode](#go-runtime-fips-mode).
 
+If FIPS mode preference is Disabled ❌, then:
+
+- The program explicitly disables [Go Runtime FIPS mode](#go-runtime-fips-mode).
+
+> [!TIP]
+> The `GODEBUG` `fips140` settings such as `GODEBUG=fips140=on` are the recommended way to set your FIPS preference.
+
 The Go runtime FIPS mode may be important to distinguish its FIPS mode from the system FIPS mode or crypto engine's FIPS mode.
 The [Go Runtime FIPS mode](#go-runtime-fips-mode) section describes this in more detail.
 
 Since Go 1.27, there is also `GODEBUG=fips140=only`.
 It acts as `GODEBUG=fips140=on`, but also makes a best effort to panic if a non-FIPS 140-3 compliant algorithm is used.
 
+> [!NOTE]
+> The "Disabled ❌" preference is the only supported way to skip platform-specific FIPS detection.
+>
+> A scenario where this may be necessary is running containers on a Linux host.
+> If the container host runs a Linux kernel with FIPS mode enabled, this preference is shared with every container it runs.
+> If that host runs a container that includes a copy of OpenSSL that isn't in FIPS mode, a Go program that runs in the container panics during initialization.
+> (The Linux kernel is shared with containers. OpenSSL is not.)
+>
+> In this scenario, **if FIPS compliance is desired**, the fix is to change the container to use a FIPS-compliant version of OpenSSL.
+> However, if FIPS compliance is **not** desired, it may be preferable to configure the container to ignore the Linux kernel's FIPS preference.
+
 > [!NOTE]
 > When `fips140=only` is set with a system crypto backend, the enforcement depends on the backend's algorithm support.
 > If the backend does not support a particular FIPS-approved algorithm (e.g. SHA-512/224 on macOS, or CTR mode on macOS), a call to that algorithm will panic rather than falling back to the Go standard library implementation.

From ca402133d1aa50e31d4f660ff615b15cc6faf02c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 24 Apr 2026 16:04:41 +0000
Subject: [PATCH 829/887] Update submodule to latest master (d484fb9d):
 cmd/internal/obj/riscv: generate inst.go with make

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 122eb7d0351..d484fb9ddf4 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 122eb7d0351ac6766212e7ad3ee9533b8daee066
+Subproject commit d484fb9ddf4d38d10b3352d02637b77234f3c222

From 125a383531742bf020c5fc907bbd7f3140330baa Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 27 Apr 2026 16:26:40 +0000
Subject: [PATCH 830/887] Update submodule to latest master (1d23a4ca):
 runtime: tweak outdated comment in cgocallback for amd64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index d484fb9ddf4..1d23a4caa16 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit d484fb9ddf4d38d10b3352d02637b77234f3c222
+Subproject commit 1d23a4caa167aee586191a93ba2fafb397da88f0

From 8dfee1bd5622d84cbe4c776c5c31a091d974aa10 Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 28 Apr 2026 14:19:51 -0700
Subject: [PATCH 831/887] FIPS readme: update to describe no GOFIPS backport

---
 eng/doc/fips/README.md | 34 +++++++++++++++++++++++++++-------
 1 file changed, 27 insertions(+), 7 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 2a4fc000623..e101e0dc7f5 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -145,9 +145,15 @@ The Microsoft build of Go detects your FIPS mode preference by evaluating this l
 
 - If the [`GODEBUG`](https://go.dev/doc/godebug) settings include a `fips140` setting:
   - If `fips140=on`, `fips140=only`, or `fips140=debug`: Enabled ✅
-  - If `fips140=off`: Disabled ❌ (As of Go 1.27, 1.26.3-1, and 1.25.10-1.)
-- If the environment variable `GOFIPS` or `GOLANG_FIPS` is set to `1`: Enabled ✅
-  - Any other value (including `0` and the empty string) is ignored.
+  - (**Since Go 1.27**) If `fips140=off`: Disabled ❌
+- If the environment variable `GOFIPS` is set to:
+  - `1`: Enabled ✅
+  - (**Prior to Go 1.27**) Any other value, including `0` and the empty string: Disabled ❌
+    - See the [Go 1.25 changelog](#go-125-aug-2025) for details.
+- If the environment variable `GOLANG_FIPS` is set:
+  - `1`: Enabled ✅
+  - (**Prior to Go 1.27**) Any other value, including `0` and the empty string: Disabled ❌
+    - See the [Go 1.25 changelog](#go-125-aug-2025) for details.
 - If a platform-specific preference is detected: Enabled ✅
   - See the following sections for per-platform details.
 - If the [build option to require FIPS mode](#build-option-to-require-fips-mode) is enabled: Enabled ✅
@@ -450,8 +456,8 @@ This list of major changes is intended for quick reference and for access to his
 
 - Support for `GODEBUG=fips140=only` has been added. It acts as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used.
 - `GODEBUG=fips140=off` now explicitly disables FIPS mode and skips the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag at `/proc/sys/crypto/fips_enabled`). This is the supported way to opt out of platform FIPS detection. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184).
-- `GOFIPS` now matches its documented behavior: only `GOFIPS=1` enables FIPS mode, and any other value (including `0` and the empty string) is treated as if `GOFIPS` were unset. The same applies to `GOLANG_FIPS`.
-  - In Go 1.25 and 1.26, due to a bug, setting `GOFIPS` (or `GOLANG_FIPS`) to any value silently bypassed the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag) even though only `=1` actually enabled FIPS mode. Programs that previously relied on `GOFIPS=0` to skip platform FIPS detection should switch to `GODEBUG=fips140=off`.
+- The `GOFIPS` environment variable check now matches its intended behavior: only `GOFIPS=1` enables FIPS mode, and any other value (including `0` and the empty string) is treated as if `GOFIPS` were unset.
+  - The same applies to `GOLANG_FIPS`.
 - The per-platform GOEXPERIMENTs (`opensslcrypto`, `cngcrypto`, `darwincrypto`) have been removed.
   - Using any of the removed experiments will result in a build error.
   - The `systemcrypto` GOEXPERIMENT has been the preferred way to select a crypto backend since it was introduced in Go 1.21. It is now the only way.
@@ -460,6 +466,13 @@ This list of major changes is intended for quick reference and for access to his
     - Manually using `-tags` to enable a per-platform backend tag no longer has any effect on the standard library.
     - The `goexperiment.systemcrypto` build tag remains supported, and its behavior has not changed.
 
+### Go 1.26.3
+
+- The [Usage: Runtime](#usage-runtime) documentation has been updated to correctly describe the influence of the `GOFIPS` environment variable during FIPS mode selection.
+  - Specifically, the behavior when `GOFIPS` is any value other than `1` is now described.
+  - The behavior has not changed.
+  - The same applies to `GOLANG_FIPS`.
+
 ### Go 1.26 (Feb 2026)
 
 - The `systemcrypto` goexperiment is now enabled by default on macOS.
@@ -467,6 +480,13 @@ This list of major changes is intended for quick reference and for access to his
 - `systemcrypto` can be [disabled at build time](#build-option-to-use-go-crypto) by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to `1`.
 - Setting the enabled FIPS preference will not cause a panic on Windows even if the Windows FIPS policy is not enabled.
 
+### Go 1.25.9
+
+- The [Usage: Runtime](#usage-runtime) documentation has been updated to correctly describe the influence of the `GOFIPS` environment variable during FIPS mode selection.
+  - Specifically, the behavior when `GOFIPS` is any value other than `1` is now described.
+  - The behavior has not changed.
+  - The same applies to `GOLANG_FIPS`.
+
 ### Go 1.25.2 (Oct 2025)
 
 - `systemcrypto` can be [disabled at build time](#build-option-to-use-go-crypto) by setting the `MS_GO_NOSYSTEMCRYPTO` environment variable to `1`.
@@ -481,8 +501,8 @@ This list of major changes is intended for quick reference and for access to his
   - If your app doesn't depend on a crypto package, you may, for example, use `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`.
   - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
 
-- `GOFIPS=0` support has been removed. It now has no effect.
-  - Note: due to a bug, in Go 1.25 and 1.26 setting `GOFIPS` (or `GOLANG_FIPS`) to any value other than `1` actually still bypassed the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag), even though it was documented as having no effect. This was fixed in Go 1.27, which also adds `GODEBUG=fips140=off` as the supported way to explicitly disable FIPS mode and skip platform FIPS detection. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184).
+- `GOFIPS=0` support has been removed. ~~It now has no effect.~~
+  - Note: due to a bug, in Go 1.25 and 1.26 setting `GOFIPS` (or `GOLANG_FIPS`) to any value other than `1` actually bypasses the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag), even though all non-`1` values were originally intended to have no effect. This bug is fixed in 1.27, but out of caution, the fix was not backported to 1.25 or 1.26 to avoid breaking compatibility with existing builds. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184) for details about the bug, and [Usage: Runtime](#usage-runtime) for current behavior.
 
 - `GOEXPERIMENT=boringcrypto` has been removed.
 

From cb3a8a13e59586b90e9fbd74f499275f59e2b79c Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 28 Apr 2026 14:43:29 -0700
Subject: [PATCH 832/887] Clarify 1.25 entry, more specific

---
 eng/doc/fips/README.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index e101e0dc7f5..8892307412d 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -501,8 +501,9 @@ This list of major changes is intended for quick reference and for access to his
   - If your app doesn't depend on a crypto package, you may, for example, use `GOOS=linux CGO_ENABLED=0 GOEXPERIMENT=systemcrypto`.
   - If your app doesn't use a crypto package and you make a change that introduces a crypto package dependency, you will only encounter a compatibility check failure after the change. The change may be in your transitive dependencies: for example, depending on a new module that uses `crypto/sha256` may trigger the compatibility check. This is undesirable, but it's necessary to enable flexibility.
 
-- `GOFIPS=0` support has been removed. ~~It now has no effect.~~
-  - Note: due to a bug, in Go 1.25 and 1.26 setting `GOFIPS` (or `GOLANG_FIPS`) to any value other than `1` actually bypasses the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag), even though all non-`1` values were originally intended to have no effect. This bug is fixed in 1.27, but out of caution, the fix was not backported to 1.25 or 1.26 to avoid breaking compatibility with existing builds. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184) for details about the bug, and [Usage: Runtime](#usage-runtime) for current behavior.
+- `GOFIPS=0` no longer causes a panic if FIPS mode is enabled.
+  - Note: the original intent was to make `GOFIPS` behavior only have two possibilities: `1` (enabled preference) or non-`1` (no-op). However, due to a bug, in Go 1.25 and 1.26, setting `GOFIPS` to any value other than `1` actually bypasses the platform-specific FIPS detection (e.g. the Linux kernel FIPS flag). This bug is fixed in 1.27, but out of caution, the fix has not been backported to 1.25 or 1.26 to avoid breaking compatibility with existing builds. See [microsoft/go#2184](https://github.com/microsoft/go/issues/2184) for details about the bug, and [Usage: Runtime](#usage-runtime) for a description of the current behavior.
+  - The same applies to `GOLANG_FIPS`.
 
 - `GOEXPERIMENT=boringcrypto` has been removed.
 

From a211fd9095fdcd00bef3bd0c7d24e81bad8bf4de Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@microsoft.com>
Date: Tue, 28 Apr 2026 14:46:04 -0700
Subject: [PATCH 833/887] Fix "is set" -> "is set to"

---
 eng/doc/fips/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 8892307412d..837147e1742 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -150,7 +150,7 @@ The Microsoft build of Go detects your FIPS mode preference by evaluating this l
   - `1`: Enabled ✅
   - (**Prior to Go 1.27**) Any other value, including `0` and the empty string: Disabled ❌
     - See the [Go 1.25 changelog](#go-125-aug-2025) for details.
-- If the environment variable `GOLANG_FIPS` is set:
+- If the environment variable `GOLANG_FIPS` is set to:
   - `1`: Enabled ✅
   - (**Prior to Go 1.27**) Any other value, including `0` and the empty string: Disabled ❌
     - See the [Go 1.25 changelog](#go-125-aug-2025) for details.

From e3ae7da3fb3a8cd605348b06275417e2b168ac15 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 29 Apr 2026 16:58:37 +0000
Subject: [PATCH 834/887] Update submodule to latest master (60eb90e6):
 encoding/json/jsontext: add TODO about removing Internal symbol

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 1d23a4caa16..60eb90e6b03 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 1d23a4caa167aee586191a93ba2fafb397da88f0
+Subproject commit 60eb90e6b03f5656bb05f9a887814f69995b1a3e

From 39a576c0d00dbb0243fba468bc67c264534d5498 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 30 Apr 2026 10:30:43 +0100
Subject: [PATCH 835/887] resolve conflicts

---
 patches/0004-Use-crypto-backends.patch        | 110 +++++++++---------
 ...nt-ms_tls_config_schannel-experiment.patch |  28 ++---
 2 files changed, 71 insertions(+), 67 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 205bf13c668..1dbf7aa4310 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -245,7 +245,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 96d25c718847d5..2f5feb5490809a 100644
+index 3db1a6490c3ce9..718216a015b268 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1177,6 +1177,12 @@ var hostobj []Hostobj
@@ -507,7 +507,7 @@ index 88892e155551b3..675dbed240e8af 100644
  // theoretically support. It's a copy of the generic implementation from
  // crypto/internal/fips140/aes/gcm/gcm_generic.go, refer to that file for more details.
 diff --git a/src/crypto/cipher/gcm_test.go b/src/crypto/cipher/gcm_test.go
-index 8daa0ded22e176..eeb5cf0f904b55 100644
+index 8ba0bb3981319d..7b212f8f19b101 100644
 --- a/src/crypto/cipher/gcm_test.go
 +++ b/src/crypto/cipher/gcm_test.go
 @@ -8,7 +8,6 @@ import (
@@ -518,7 +518,7 @@ index 8daa0ded22e176..eeb5cf0f904b55 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	fipsaes "crypto/internal/fips140/aes"
-@@ -728,9 +727,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
+@@ -727,9 +726,13 @@ func testGCMAEAD(t *testing.T, newCipher func(key []byte) cipher.Block) {
  
  			// Test NewGCMWithRandomNonce.
  			t.Run("GCMWithRandomNonce", func(t *testing.T) {
@@ -533,7 +533,7 @@ index 8daa0ded22e176..eeb5cf0f904b55 100644
  				cryptotest.TestAEAD(t, func() (cipher.AEAD, error) { return cipher.NewGCMWithRandomNonce(block) })
  			})
  		})
-@@ -753,7 +756,7 @@ func TestGCMExtraMethods(t *testing.T) {
+@@ -752,7 +755,7 @@ func TestGCMExtraMethods(t *testing.T) {
  		})
  		t.Run("NewGCMWithRandomNonce", func(t *testing.T) {
  			block := newCipher(make([]byte, 16))
@@ -1466,7 +1466,7 @@ index 00000000000000..77b69a3be88183
 +	panic("boringcrypto: not available")
 +}
 diff --git a/src/crypto/fips140/enforcement_test.go b/src/crypto/fips140/enforcement_test.go
-index c2f66d544bfbd0..a1eb9bcecbf621 100644
+index d230c0f4ec1fa1..56020ea5f6c2a3 100644
 --- a/src/crypto/fips140/enforcement_test.go
 +++ b/src/crypto/fips140/enforcement_test.go
 @@ -7,6 +7,7 @@ package fips140_test
@@ -1475,23 +1475,23 @@ index c2f66d544bfbd0..a1eb9bcecbf621 100644
  	"crypto/fips140"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
- 	"internal/testenv"
  	"testing"
-@@ -26,6 +27,9 @@ func isAllowed() bool {
+ )
+@@ -25,6 +26,9 @@ func isAllowed() bool {
  }
  
  func TestWithoutEnforcement(t *testing.T) {
 +	if boring.Enabled {
 +		t.Skip("GODEBUG=fips140=only not supported")
 +	}
- 	cryptotest.MustSupportFIPS140(t)
  	if !fips140.Enforced() {
- 		cmd := testenv.Command(t, testenv.Executable(t), "-test.run=^TestWithoutEnforcement$", "-test.v")
+ 		cryptotest.RerunWithFIPS140Enforced(t)
+ 		return
 diff --git a/src/crypto/fips140/fips140.go b/src/crypto/fips140/fips140.go
-index f44f3b399b2f05..041081f54744b1 100644
+index d3f63d3bf18fcb..7197af537228aa 100644
 --- a/src/crypto/fips140/fips140.go
 +++ b/src/crypto/fips140/fips140.go
-@@ -5,6 +5,7 @@
+@@ -11,6 +11,7 @@
  package fips140
  
  import (
@@ -1499,7 +1499,7 @@ index f44f3b399b2f05..041081f54744b1 100644
  	"crypto/internal/fips140"
  	"crypto/internal/fips140/check"
  )
-@@ -21,7 +22,7 @@ func Enabled() bool {
+@@ -27,7 +28,7 @@ func Enabled() bool {
  	if fips140.Enabled && !check.Verified {
  		panic("crypto/fips140: FIPS 140-3 mode enabled, but integrity check didn't pass")
  	}
@@ -1609,7 +1609,7 @@ index e7976e25193dfe..58b357ee52c328 100644
  }
  
 diff --git a/src/crypto/hmac/hmac_test.go b/src/crypto/hmac/hmac_test.go
-index 4046a9555a8e35..4721a2a7ac04f7 100644
+index b324d1f02cda7d..1df17bdc90a1f0 100644
 --- a/src/crypto/hmac/hmac_test.go
 +++ b/src/crypto/hmac/hmac_test.go
 @@ -5,7 +5,7 @@
@@ -1619,8 +1619,8 @@ index 4046a9555a8e35..4721a2a7ac04f7 100644
 -	"crypto/internal/boring"
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
+ 	"crypto/internal/fips140hash"
  	"crypto/md5"
- 	"crypto/sha1"
 diff --git a/src/crypto/hpke/aead.go b/src/crypto/hpke/aead.go
 index fb55c97ddf20c9..fb036863cde2dd 100644
 --- a/src/crypto/hpke/aead.go
@@ -1678,18 +1678,19 @@ index 70055af70b42ec..21528faa0d6145 100644
  	if race.Enabled || msan.Enabled || asan.Enabled {
  		t.Skip("skipping allocations test with sanitizers")
 diff --git a/src/crypto/internal/cryptotest/fips140.go b/src/crypto/internal/cryptotest/fips140.go
-index c24622ce5ac3c2..bdc5a63e204922 100644
+index 54c796197a29e2..f4c1d0a681753b 100644
 --- a/src/crypto/internal/cryptotest/fips140.go
 +++ b/src/crypto/internal/cryptotest/fips140.go
-@@ -5,13 +5,21 @@
+@@ -5,6 +5,8 @@
  package cryptotest
  
  import (
 +	boring "crypto/internal/backend"
 +	bfips140 "crypto/internal/backend/fips140"
  	"crypto/internal/fips140"
- 	"testing"
- )
+ 	"internal/testenv"
+ 	"regexp"
+@@ -13,9 +15,15 @@ import (
  
  func MustSupportFIPS140(t *testing.T) {
  	t.Helper()
@@ -1703,6 +1704,8 @@ index c24622ce5ac3c2..bdc5a63e204922 100644
 +		t.Skipf("skipping: FIPS is not enabled")
 +	}
  }
+ 
+ func RerunWithFIPS140Enabled(t *testing.T) {
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
 index 37fd96a2d9d0b9..6d4b190831d57d 100644
 --- a/src/crypto/internal/cryptotest/hash.go
@@ -1758,7 +1761,7 @@ index 6d67ee8b3429a1..8f8d5937ea913c 100644
  // Unwrap returns h, or a crypto/internal/fips140 inner implementation of h.
  //
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
-index 96df536d56f345..91d2a792d90296 100644
+index 462e279ce2e97c..07f9a3db478878 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go
 +++ b/src/crypto/internal/fips140only/fips140only_test.go
 @@ -17,6 +17,7 @@ import (
@@ -1769,7 +1772,7 @@ index 96df536d56f345..91d2a792d90296 100644
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
  	"crypto/internal/fips140only"
-@@ -39,6 +40,7 @@ import (
+@@ -38,6 +39,7 @@ import (
  	"io"
  	"math/big"
  	"os"
@@ -1777,7 +1780,7 @@ index 96df536d56f345..91d2a792d90296 100644
  	"strings"
  	"testing"
  
-@@ -89,7 +91,12 @@ func testFIPS140Only(t *testing.T) {
+@@ -81,7 +83,12 @@ func testFIPS140Only(t *testing.T) {
  	expectPanic(t, func() { cipher.NewCFBEncrypter(aesBlock, iv) })
  	expectPanic(t, func() { cipher.NewCFBDecrypter(aesBlock, iv) })
  
@@ -1791,7 +1794,7 @@ index 96df536d56f345..91d2a792d90296 100644
  	expectPanic(t, func() { cipher.NewCTR(notAESBlock, iv) })
  
  	expectPanic(t, func() { cipher.NewOFB(aesBlock, iv) })
-@@ -313,10 +320,12 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
+@@ -305,10 +312,12 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
  	expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
  	expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
  
@@ -1808,7 +1811,7 @@ index 96df536d56f345..91d2a792d90296 100644
  	}
  }
  
-@@ -329,16 +338,22 @@ type readerWrap struct {
+@@ -321,16 +330,22 @@ type readerWrap struct {
  }
  
  func withApprovedHash(f func(crypto.Hash)) {
@@ -1899,7 +1902,7 @@ index 7f2824ca9ac052..f0d3b2a8459871 100644
  	"crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
 diff --git a/src/crypto/internal/rand/rand.go b/src/crypto/internal/rand/rand.go
-index 00e736a579859a..3583dadcf7aeec 100644
+index 5845cfe92bbffb..26f23eac5855dc 100644
 --- a/src/crypto/internal/rand/rand.go
 +++ b/src/crypto/internal/rand/rand.go
 @@ -5,7 +5,7 @@
@@ -2011,7 +2014,7 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index b652e3bae9dd71..ff6cf6ff0aad0d 100644
+index f0fd6a4993a8e6..3743fd90f32e4c 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
 @@ -13,6 +13,7 @@ package mlkem
@@ -2085,7 +2088,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  	return dk.key.Bytes()
  }
  
-@@ -76,13 +97,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
+@@ -79,13 +100,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -2106,7 +2109,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -98,22 +125,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
+@@ -101,22 +128,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
  // An EncapsulationKey768 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey768.
  type EncapsulationKey768 struct {
@@ -2143,7 +2146,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  	return ek.key.Bytes()
  }
  
-@@ -125,41 +164,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+@@ -128,41 +167,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
@@ -2211,7 +2214,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  	return dk.key.Bytes()
  }
  
-@@ -168,13 +230,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+@@ -174,13 +236,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -2232,7 +2235,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -190,22 +258,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
+@@ -196,22 +264,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
  // An EncapsulationKey1024 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey1024.
  type EncapsulationKey1024 struct {
@@ -2269,7 +2272,7 @@ index b652e3bae9dd71..ff6cf6ff0aad0d 100644
  	return ek.key.Bytes()
  }
  
-@@ -217,5 +297,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+@@ -223,5 +303,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {
@@ -3251,7 +3254,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index 48c67e9fe11005..1ab7ae42462ef6 100644
+index f7c5549ddd113c..f35de2cb5c6652 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -3322,7 +3325,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  	// Outline the allocation for up to 512 bits of output to the caller's stack.
  	out := make([]byte, 64)
  	return sumSHAKE256(out, data, length)
-@@ -99,36 +118,53 @@ func sumSHAKE256(out, data []byte, length int) []byte {
+@@ -99,37 +118,54 @@ func sumSHAKE256(out, data []byte, length int) []byte {
  // SHA3 is an instance of a SHA-3 hash. It implements [hash.Hash].
  // The zero value is a usable SHA3-256 hash.
  type SHA3 struct {
@@ -3333,12 +3336,13 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  }
  
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
--func fips140hash_sha3Unwrap(sha3 *SHA3) *sha3.Digest {
-+func fips140hash_sha3Unwrap(sha3 *SHA3) hash.Hash {
-+	if sha3.boringS != nil {
-+		return sha3.boringS
+-func fips140hash_sha3Unwrap(s *SHA3) *sha3.Digest {
++func fips140hash_sha3Unwrap(s *SHA3) hash.Hash {
++	if s.boringS != nil {
++		return s.boringS
 +	}
- 	return &sha3.s
+ 	s.init()
+ 	return &s.s
  }
  
  // New224 creates a new SHA3-224 hash.
@@ -3383,7 +3387,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  		*s = *New256()
  	}
  }
-@@ -136,53 +172,81 @@ func (s *SHA3) init() {
+@@ -137,53 +173,81 @@ func (s *SHA3) init() {
  // Write absorbs more data into the hash's state.
  func (s *SHA3) Write(p []byte) (n int, err error) {
  	s.init()
@@ -3466,7 +3470,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  	r := *d
  	return &r, nil
  }
-@@ -190,23 +254,30 @@ func (d *SHA3) Clone() (hash.Cloner, error) {
+@@ -191,23 +255,30 @@ func (d *SHA3) Clone() (hash.Cloner, error) {
  // SHAKE is an instance of a SHAKE extendable output function.
  // The zero value is a usable SHAKE256 hash.
  type SHAKE struct {
@@ -3501,7 +3505,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  }
  
  // NewCSHAKE128 creates a new cSHAKE128 XOF.
-@@ -215,7 +286,10 @@ func NewSHAKE256() *SHAKE {
+@@ -216,7 +287,10 @@ func NewSHAKE256() *SHAKE {
  // cSHAKE is desired. S is a customization byte string used for domain
  // separation. When N and S are both empty, this is equivalent to NewSHAKE128.
  func NewCSHAKE128(N, S []byte) *SHAKE {
@@ -3513,7 +3517,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  }
  
  // NewCSHAKE256 creates a new cSHAKE256 XOF.
-@@ -224,7 +298,10 @@ func NewCSHAKE128(N, S []byte) *SHAKE {
+@@ -225,7 +299,10 @@ func NewCSHAKE128(N, S []byte) *SHAKE {
  // cSHAKE is desired. S is a customization byte string used for domain
  // separation. When N and S are both empty, this is equivalent to NewSHAKE256.
  func NewCSHAKE256(N, S []byte) *SHAKE {
@@ -3525,7 +3529,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  }
  
  // Write absorbs more data into the XOF's state.
-@@ -232,6 +309,9 @@ func NewCSHAKE256(N, S []byte) *SHAKE {
+@@ -233,6 +310,9 @@ func NewCSHAKE256(N, S []byte) *SHAKE {
  // It panics if any output has already been read.
  func (s *SHAKE) Write(p []byte) (n int, err error) {
  	s.init()
@@ -3535,7 +3539,7 @@ index 48c67e9fe11005..1ab7ae42462ef6 100644
  	return s.s.Write(p)
  }
  
-@@ -240,35 +320,54 @@ func (s *SHAKE) Write(p []byte) (n int, err error) {
+@@ -241,35 +321,54 @@ func (s *SHAKE) Write(p []byte) (n int, err error) {
  // Any call to Write after a call to Read will panic.
  func (s *SHAKE) Read(p []byte) (n int, err error) {
  	s.init()
@@ -4209,12 +4213,12 @@ index 00000000000000..579aaedabb188a
 +	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
 +}
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index bfa22449c87178..08cda456579f64 100644
+index 97f4993a179939..94e28436850760 100644
 --- a/src/crypto/tls/key_schedule.go
 +++ b/src/crypto/tls/key_schedule.go
-@@ -8,8 +8,8 @@ import (
- 	"crypto"
+@@ -9,8 +9,8 @@ import (
  	"crypto/ecdh"
+ 	"crypto/fips140"
  	"crypto/hmac"
 -	"crypto/internal/fips140/tls13"
  	"crypto/mlkem"
@@ -4316,10 +4320,10 @@ index 1d3e845d0f0a9c..eb4318faf13f7b 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 52c0785a87e5e8..b15ef32c94c1c3 100644
+index 465142153d1476..ac1e6265e51acd 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -539,7 +539,7 @@ var depsRules = `
+@@ -532,7 +532,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -4328,7 +4332,7 @@ index 52c0785a87e5e8..b15ef32c94c1c3 100644
  
  	crypto !< FIPS;
  
-@@ -563,7 +563,12 @@ var depsRules = `
+@@ -556,7 +556,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -4342,7 +4346,7 @@ index 52c0785a87e5e8..b15ef32c94c1c3 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -597,7 +602,8 @@ var depsRules = `
+@@ -590,7 +595,8 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/subtle,
@@ -4352,7 +4356,7 @@ index 52c0785a87e5e8..b15ef32c94c1c3 100644
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/internal/boring
-@@ -615,6 +621,7 @@ var depsRules = `
+@@ -608,6 +614,7 @@ var depsRules = `
  	  crypto/pbkdf2,
  	  crypto/ecdh,
  	  crypto/mlkem
@@ -4440,7 +4444,7 @@ index 2a774100a8ec67..a0cabb42b19484 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 2746ad8783ab22..c39f32c8fba6fc 100644
+index 2d966b627e1e81..532f24384bd309 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 0b01dccf686..b8bb7b1d578 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -24,27 +24,27 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 5a72c493e03eba..930d8c6d134e94 100644
+index 5644d235acf1c6..ada973d1328c50 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
-@@ -14,6 +14,7 @@ import (
+@@ -15,6 +15,7 @@ import (
+ 	"crypto/x509"
  	"crypto/x509/pkix"
- 	"encoding/pem"
  	"fmt"
 +	"internal/goexperiment"
- 	"internal/obscuretestdata"
  	"internal/testenv"
  	"math/big"
-@@ -190,6 +191,9 @@ func TestFIPSServerCipherSuites(t *testing.T) {
- 		}
- 		serverConfig.BuildNameToCertificate()
+ 	"net"
+@@ -191,6 +192,9 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
+ func TestFIPSServerCipherSuites(t *testing.T) {
+ 	for _, id := range allCipherSuitesIncludingTLS13() {
  		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
 +			if goexperiment.MS_TLS_Config_Schannel && !isSchannelCipherSuite(id) {
 +				t.Skip("skipping Schannel unsupported cipher suite")
 +			}
+ 			serverConfig := testConfigFIPS140.Clone()
  			clientHello := &clientHelloMsg{
  				vers:                         VersionTLS12,
- 				random:                       make([]byte, 32),
 diff --git a/src/crypto/tls/schannel_disabled_test.go b/src/crypto/tls/schannel_disabled_test.go
 new file mode 100644
 index 00000000000000..d598d48dedf762
@@ -467,10 +467,10 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index 4df1aed1706c74..f447dc3432945a 100644
+index e8089162fb588a..5fe96985c49223 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
-@@ -21,6 +21,7 @@ import (
+@@ -22,6 +22,7 @@ import (
  	"encoding/pem"
  	"errors"
  	"fmt"
@@ -478,7 +478,7 @@ index 4df1aed1706c74..f447dc3432945a 100644
  	"internal/testenv"
  	"io"
  	"math"
-@@ -211,6 +212,11 @@ func skipFIPS(t *testing.T) {
+@@ -219,6 +220,11 @@ func skipFIPS(t *testing.T) {
  	if fips140tls.Required() {
  		t.Skip("skipping test in FIPS mode")
  	}
@@ -490,7 +490,7 @@ index 4df1aed1706c74..f447dc3432945a 100644
  }
  
  func TestDialTimeout(t *testing.T) {
-@@ -1324,6 +1330,9 @@ func TestConnectionState(t *testing.T) {
+@@ -1332,6 +1338,9 @@ func TestConnectionState(t *testing.T) {
  		if !isFIPSVersion(v) && fips140tls.Required() {
  			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
  		}
@@ -500,7 +500,7 @@ index 4df1aed1706c74..f447dc3432945a 100644
  		var name string
  		switch v {
  		case VersionTLS10:
-@@ -1567,6 +1576,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+@@ -1575,6 +1584,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
  		}, ""}, // static RSA fallback
  	}
  	for i, tt := range tests {
@@ -512,7 +512,7 @@ index 4df1aed1706c74..f447dc3432945a 100644
  		err := tt.chi.SupportsCertificate(tt.c)
  		switch {
  		case tt.wantErr == "" && err != nil:
-@@ -1580,6 +1594,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+@@ -1588,6 +1602,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
  }
  
  func TestCipherSuites(t *testing.T) {

From a750707d05339b3b9972d0c3ebdb2e6eff55770c Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 30 Apr 2026 10:38:15 +0100
Subject: [PATCH 836/887] run s.init() regardless of backend

---
 patches/0004-Use-crypto-backends.patch | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 1dbf7aa4310..79512a9fde5 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -3254,7 +3254,7 @@ index a18a536ba2896f..7b3b37c3b0c10d 100644
  	}
  }
 diff --git a/src/crypto/sha3/sha3.go b/src/crypto/sha3/sha3.go
-index f7c5549ddd113c..f35de2cb5c6652 100644
+index f7c5549ddd113c..71f915d4c05045 100644
 --- a/src/crypto/sha3/sha3.go
 +++ b/src/crypto/sha3/sha3.go
 @@ -8,6 +8,7 @@ package sha3
@@ -3338,10 +3338,10 @@ index f7c5549ddd113c..f35de2cb5c6652 100644
  //go:linkname fips140hash_sha3Unwrap crypto/internal/fips140hash.sha3Unwrap
 -func fips140hash_sha3Unwrap(s *SHA3) *sha3.Digest {
 +func fips140hash_sha3Unwrap(s *SHA3) hash.Hash {
+ 	s.init()
 +	if s.boringS != nil {
 +		return s.boringS
 +	}
- 	s.init()
  	return &s.s
  }
  

From baa26373aab7e10022db749186e0b72f203296d8 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 30 Apr 2026 14:56:33 +0200
Subject: [PATCH 837/887] fix TestFIPSServerProtocolVersion

---
 ...nt-ms_tls_config_schannel-experiment.patch | 19 +++++++++++++++----
 1 file changed, 15 insertions(+), 4 deletions(-)

diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index b8bb7b1d578..14d36e4b29f 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -4,7 +4,7 @@ Date: Tue, 19 Aug 2025 15:16:09 +0200
 Subject: [PATCH] Implement ms_tls_config_schannel experiment
 
 ---
- src/crypto/tls/fips140_test.go                |   4 +
+ src/crypto/tls/fips140_test.go                |   8 +
  src/crypto/tls/schannel_disabled_test.go      |  11 +
  src/crypto/tls/schannel_windows.go            | 166 +++++++++++++
  src/crypto/tls/schannel_windows_test.go       | 226 ++++++++++++++++++
@@ -16,7 +16,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  .../syscall/windows/version_windows.go        |  11 +
  .../syscall/windows/version_windows_test.go   |   7 +
  .../syscall/windows/zsyscall_windows.go       |  16 ++
- 12 files changed, 512 insertions(+)
+ 12 files changed, 516 insertions(+)
  create mode 100644 src/crypto/tls/schannel_disabled_test.go
  create mode 100644 src/crypto/tls/schannel_windows.go
  create mode 100644 src/crypto/tls/schannel_windows_test.go
@@ -24,7 +24,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 5644d235acf1c6..ada973d1328c50 100644
+index 5644d235acf1c6..4152949d49c262 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
 @@ -15,6 +15,7 @@ import (
@@ -35,7 +35,18 @@ index 5644d235acf1c6..ada973d1328c50 100644
  	"internal/testenv"
  	"math/big"
  	"net"
-@@ -191,6 +192,9 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
+@@ -63,6 +64,10 @@ func generateKeyShare(group CurveID) keyShare {
+ func TestFIPSServerProtocolVersion(t *testing.T) {
+ 	test := func(t *testing.T, name string, v uint16, msg string) {
+ 		t.Run(name, func(t *testing.T) {
++			if goexperiment.MS_TLS_Config_Schannel && v < VersionTLS12 {
++				// Schannel may have disabled TLS 1.0 and 1.1.
++				t.Skip("skipping Schannel unsupported protocol version")
++			}
+ 			serverConfig := testConfigFIPS140.Clone()
+ 			serverConfig.MinVersion = VersionSSL30
+ 			serverConfig.MaxVersion = VersionTLS13
+@@ -191,6 +196,9 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
  func TestFIPSServerCipherSuites(t *testing.T) {
  	for _, id := range allCipherSuitesIncludingTLS13() {
  		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {

From 979524fcbef18a07faa362c17073f330d3cc9832 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Apr 2026 13:47:11 +0000
Subject: [PATCH 838/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#2252)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.10-0.20260420165249-d41a92f0b571 to 0.0.10.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/commits/v0.0.10)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 8e405ed4fba..910bcb46d58 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571
+	github.com/microsoft/go-infra v0.0.10
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.53.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index eb511d93883..434e94b05f1 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571 h1:9FWo2PHJ6HGLPYF4VP6DupIeA0YN39xg9c4hnn75L+E=
-github.com/microsoft/go-infra v0.0.10-0.20260420165249-d41a92f0b571/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
+github.com/microsoft/go-infra v0.0.10 h1:EetBVBICjabaz4oU1CoKht0WAduK2XnROu53TdQvzkg=
+github.com/microsoft/go-infra v0.0.10/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=

From 7a5ae7c60418abd733fff5e13bfedffcee616b66 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 4 May 2026 12:39:41 +0000
Subject: [PATCH 839/887] build(deps): bump github/codeql-action from 4.35.2 to
 4.35.3

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...e46ed2cbd01164d986452f91f178727624ae40d7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 67fe0a1a04c..4c4f6188888 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
+        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
         with:
           category: /language:go

From d4182ed1deb5fadfc5fa4226e64102d6d2416563 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 4 May 2026 17:02:30 +0000
Subject: [PATCH 840/887] Update submodule to latest master (28686722):
 cmd/compile: resync regmask refactoring change

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 60eb90e6b03..28686722028 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 60eb90e6b03f5656bb05f9a887814f69995b1a3e
+Subproject commit 2868672202889a65a98653c7d5d7b629c7938556

From 64a6de47c184a94c9cb767d45fd22522e25586eb Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 5 May 2026 12:57:41 +0100
Subject: [PATCH 841/887] resolve 3-way merge conflicts

---
 ...Implement-ms_tls_config_schannel-experiment.patch | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 14d36e4b29f..a6ec9bd439f 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -478,7 +478,7 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index e8089162fb588a..5fe96985c49223 100644
+index e2b1aa01c7c2ec..47bedb7709196d 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
 @@ -22,6 +22,7 @@ import (
@@ -564,13 +564,13 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 86c5570bf12edb..66051d85e2ea23 100644
+index baa40788e4bd34..9315e7f07bb5c3 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
-@@ -151,4 +151,12 @@ type Flags struct {
- 	// from interleaved key/elem slots (KVKVKVKV) to split key and elem
- 	// arrays (KKKKVVVV).
- 	MapSplitGroup bool
+@@ -154,4 +154,12 @@ type Flags struct {
+ 
+ 	// GenericMethods enables use of generic methods.
+ 	GenericMethods bool
 +
 +	// MS_TLS_Config_Schannel enables the filtering and ordering of cipher
 +	// suites according to the Windows Schannel settings.

From cf63974b5ee0ff809368e8d94ec6dad43328b61c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 6 May 2026 11:50:05 +0200
Subject: [PATCH 842/887] Remove TestMachoIssue32233 skip patch

---
 ...istently-failing-TestMachoIssue32233.patch | 26 -------------------
 ...ests.patch => 0015-Skip-http2-tests.patch} |  0
 2 files changed, 26 deletions(-)
 delete mode 100644 patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch
 rename patches/{0016-Skip-http2-tests.patch => 0015-Skip-http2-tests.patch} (100%)

diff --git a/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch b/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch
deleted file mode 100644
index 861362dd0c6..00000000000
--- a/patches/0015-Skip-consistently-failing-TestMachoIssue32233.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Fri, 20 Mar 2026 08:55:22 -0700
-Subject: [PATCH] Skip consistently failing TestMachoIssue32233
-
-Skip TestMachoIssue32233, which recently has often (?) failed PR validation and
-blocks unrelated changes. We don't expect the behavior of this test to be
-changed by our patches.
-
-Tracked at https://github.com/microsoft/go/issues/2200
----
- src/cmd/link/internal/ld/dwarf_test.go | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/src/cmd/link/internal/ld/dwarf_test.go b/src/cmd/link/internal/ld/dwarf_test.go
-index 3cede8fe4b99a1..0c4b75f8456cb7 100644
---- a/src/cmd/link/internal/ld/dwarf_test.go
-+++ b/src/cmd/link/internal/ld/dwarf_test.go
-@@ -1203,6 +1203,7 @@ func TestPackageNameAttr(t *testing.T) {
- }
- 
- func TestMachoIssue32233(t *testing.T) {
-+	t.Skip("failing, may be flaky: https://github.com/microsoft/go/issues/2200")
- 	testenv.MustHaveGoBuild(t)
- 	testenv.MustHaveCGO(t)
- 
diff --git a/patches/0016-Skip-http2-tests.patch b/patches/0015-Skip-http2-tests.patch
similarity index 100%
rename from patches/0016-Skip-http2-tests.patch
rename to patches/0015-Skip-http2-tests.patch

From b36eb443f2b2020dfc0d245c6a9f877e84f1110c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 6 May 2026 15:34:39 +0200
Subject: [PATCH 843/887] promote MS_GO_NOSYSTEMCRYPTO

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 107 ++++++++++++++++--
 1 file changed, 100 insertions(+), 7 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index e737c46b5c9..7a0ed572a1d 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -11,11 +11,16 @@ information about the behavior.
 Includes new tests in "build_test.go" and "buildbackend_test.go" to help
 maintain this feature. For more information, see the test files.
 ---
+ src/cmd/go/alldocs.go                         |  3 +
+ src/cmd/go/internal/envcmd/env.go             |  3 +-
+ src/cmd/go/internal/help/helpdoc.go           |  3 +
  src/cmd/go/internal/modindex/build_test.go    | 73 +++++++++++++++++++
+ src/cmd/go/testdata/script/env_changed.txt    |  3 +
  src/go/build/buildbackend_test.go             | 50 +++++++++++++
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
  src/internal/buildcfg/exp.go                  | 34 +++++++++
+ src/internal/cfg/cfg.go                       |  1 +
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
  src/internal/goexperiment/exp_cngcrypto_on.go |  8 ++
  .../goexperiment/exp_darwincrypto_off.go      |  8 ++
@@ -25,7 +30,7 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 +++++
- 14 files changed, 245 insertions(+)
+ 19 files changed, 257 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
@@ -39,6 +44,55 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_off.go
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
+diff --git a/src/cmd/go/alldocs.go b/src/cmd/go/alldocs.go
+index 560cdb28fe5e86..7c4bf70b24f9c7 100644
+--- a/src/cmd/go/alldocs.go
++++ b/src/cmd/go/alldocs.go
+@@ -2616,6 +2616,9 @@
+ //		mentioned will be considered insecure by 'go get'.
+ //		Because the variable is defined by Git, the default value cannot
+ //		be set using 'go env -w'.
++//	MS_GO_NOSYSTEMCRYPTO
++//		Whether to disable the use of the system's cryptography libraries.
++//		Set to 1 to disable the use of system cryptography libraries.
+ //
+ // Additional information available from 'go env' but not read from the environment:
+ //
+diff --git a/src/cmd/go/internal/envcmd/env.go b/src/cmd/go/internal/envcmd/env.go
+index e950c651691c40..86ee152e96b71b 100644
+--- a/src/cmd/go/internal/envcmd/env.go
++++ b/src/cmd/go/internal/envcmd/env.go
+@@ -118,6 +118,7 @@ func MkEnv() []cfg.EnvVar {
+ 		{Name: "GOTOOLDIR", Value: build.ToolDir},
+ 		{Name: "GOVCS", Value: cfg.GOVCS},
+ 		{Name: "GOVERSION", Value: runtime.Version()},
++		{Name: "MS_GO_NOSYSTEMCRYPTO", Value: os.Getenv("MS_GO_NOSYSTEMCRYPTO")},
+ 	}
+ 
+ 	for i := range env {
+@@ -126,7 +127,7 @@ func MkEnv() []cfg.EnvVar {
+ 			if env[i].Value != "on" && env[i].Value != "" {
+ 				env[i].Changed = true
+ 			}
+-		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPRIVATE", "GOTMPDIR", "GOVCS":
++		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPRIVATE", "GOTMPDIR", "GOVCS", "MS_GO_NOSYSTEMCRYPTO":
+ 			if env[i].Value != "" {
+ 				env[i].Changed = true
+ 			}
+diff --git a/src/cmd/go/internal/help/helpdoc.go b/src/cmd/go/internal/help/helpdoc.go
+index 4f76f7f9c1fc68..783d11609c0bf4 100644
+--- a/src/cmd/go/internal/help/helpdoc.go
++++ b/src/cmd/go/internal/help/helpdoc.go
+@@ -755,6 +755,9 @@ Special-purpose environment variables:
+ 		mentioned will be considered insecure by 'go get'.
+ 		Because the variable is defined by Git, the default value cannot
+ 		be set using 'go env -w'.
++	MS_GO_NOSYSTEMCRYPTO
++		Whether to disable the use of the system's cryptography libraries.
++		Set to 1 to disable the use of system cryptography libraries.
+ 
+ Additional information available from 'go env' but not read from the environment:
+ 
 diff --git a/src/cmd/go/internal/modindex/build_test.go b/src/cmd/go/internal/modindex/build_test.go
 new file mode 100644
 index 00000000000000..1756c5d027fee0
@@ -118,6 +172,34 @@ index 00000000000000..1756c5d027fee0
 +		})
 +	}
 +}
+diff --git a/src/cmd/go/testdata/script/env_changed.txt b/src/cmd/go/testdata/script/env_changed.txt
+index da9560062704e6..a12836ff65fd03 100644
+--- a/src/cmd/go/testdata/script/env_changed.txt
++++ b/src/cmd/go/testdata/script/env_changed.txt
+@@ -13,6 +13,7 @@ env CGO_CPPFLAGS=nodefault
+ env GOFIPS140=latest
+ [cgo] env CGO_ENABLED=0
+ env GCCGO=nodefault
++env MS_GO_NOSYSTEMCRYPTO=1
+ 
+ go env -changed
+ # linux output like GOTOOLCHAIN='local'
+@@ -26,6 +27,7 @@ stdout 'CGO_CPPFLAGS=''?nodefault''?'
+ stdout 'GOFIPS140=''?latest''?'
+ [cgo] stdout 'CGO_ENABLED=''?0''?'
+ stdout 'GCCGO=''?nodefault''?'
++stdout 'MS_GO_NOSYSTEMCRYPTO=''?1''?'
+ 
+ go env -changed -json
+ stdout '"GOTOOLCHAIN": "local"'
+@@ -37,6 +39,7 @@ stdout '"CGO_CPPFLAGS": "nodefault"'
+ stdout '"GOFIPS140": "latest"'
+ [cgo] stdout '"CGO_ENABLED": "0"'
+ stdout '"GCCGO": "nodefault"'
++stdout '"MS_GO_NOSYSTEMCRYPTO": "1"'
+ 
+ [GOOS:windows] env GOOS=linux
+ [!GOOS:windows] env GOOS=windows
 diff --git a/src/go/build/buildbackend_test.go b/src/go/build/buildbackend_test.go
 new file mode 100644
 index 00000000000000..ffb835ce34a2f7
@@ -193,7 +275,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index aa41986e8e9387..d4121357526a84 100644
+index c8506d41bb240f..f4d514baf8657e 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -224,7 +306,7 @@ index aa41986e8e9387..d4121357526a84 100644
  	flags, err := ParseGOEXPERIMENT(GOOS, GOARCH, envOr("GOEXPERIMENT", defaultGOEXPERIMENT))
  	if err != nil {
  		Error = err
-@@ -69,6 +83,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -67,6 +81,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		regabiSupported = true
  	}
  
@@ -243,7 +325,7 @@ index aa41986e8e9387..d4121357526a84 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -86,6 +112,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -84,6 +110,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		Dwarf5:               dwarf5Supported,
  		RandomizedHeapBase64: true,
  		GreenTeaGC:           true,
@@ -251,7 +333,7 @@ index aa41986e8e9387..d4121357526a84 100644
  	}
  	flags := &ExperimentFlags{
  		Flags:    baseline,
-@@ -125,6 +152,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -123,6 +150,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -262,7 +344,7 @@ index aa41986e8e9387..d4121357526a84 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -151,6 +182,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -149,6 +180,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -272,6 +354,17 @@ index aa41986e8e9387..d4121357526a84 100644
  	return flags, nil
  }
  
+diff --git a/src/internal/cfg/cfg.go b/src/internal/cfg/cfg.go
+index 9329769721b7de..1724afb71b851e 100644
+--- a/src/internal/cfg/cfg.go
++++ b/src/internal/cfg/cfg.go
+@@ -70,5 +70,6 @@ const KnownEnv = `
+ 	GOWASM
+ 	GOWORK
+ 	GO_EXTLINK_ENABLED
++	MS_GO_NOSYSTEMCRYPTO
+ 	PKG_CONFIG
+ `
 diff --git a/src/internal/goexperiment/exp_cngcrypto_off.go b/src/internal/goexperiment/exp_cngcrypto_off.go
 new file mode 100644
 index 00000000000000..eb879f94fa0c42
@@ -385,7 +478,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 2cfb71578b421b..a0131d7ef82343 100644
+index 72f787bec7825a..baa40788e4bd34 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,24 @@ type Flags struct {

From a8158fe68137663f68c9d13da173f0f0554daafc Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 6 May 2026 16:03:31 +0000
Subject: [PATCH 844/887] Update submodule to latest master (eb845eca):
 go/types, types2: include type arguments in instantiated type cycle errors

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 28686722028..eb845eca727 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2868672202889a65a98653c7d5d7b629c7938556
+Subproject commit eb845eca727d878b721b3b5efb70368d97d8711f

From 602436dd7d1eccea0359e54569420b0f56c1d1b3 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 6 May 2026 17:33:53 +0100
Subject: [PATCH 845/887] resolve 3-way merge conflicts

---
 patches/0001-Vendor-external-dependencies.patch    | 10 +++++-----
 .../0002-Add-crypto-backend-GOEXPERIMENTs.patch    | 14 +++++++-------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 37f845f5ada..6e4ba73d5a1 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -2265,7 +2265,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index f3c1d75f28cf16..e9ae7119fca209 100644
+index 0eca449cf9fb81..49362e996c544c 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2279,7 +2279,7 @@ index f3c1d75f28cf16..e9ae7119fca209 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 4333b2a6605111..15822722755f56 100644
+index 26612cb0ed7afd..48a65c1dec4003 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2291,9 +2291,9 @@ index 4333b2a6605111..15822722755f56 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
  golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
- golang.org/x/net v0.53.1-0.20260420212600-f70faeaf29ed h1:7TjurTHs0hDGI2ZSxkEJy0ToTN3VoUsPAZ6MYUEvl48=
+ golang.org/x/net v0.53.1-0.20260505181449-5e11a5ab891c h1:wrF5RobEIw4Wj2wvtEac1FCXJLWmFGe+ZolWSwFYN5s=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index f1f86117c6c04c..94997ebea42dcd 100644
+index e8ba18f2baf3d3..03896fca65f120 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -152,6 +152,13 @@ var depsRules = `
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index 944f0194bdbd49..285068ad2f72e6 100644
+index ef7c64402dec38..16e61507b64ba5 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index e737c46b5c9..aadbadfdc62 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -193,7 +193,7 @@ index 00000000000000..eb8a026982259c
 +
 +package main
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index aa41986e8e9387..d4121357526a84 100644
+index 82866cef66b5af..723b8b7f113e8a 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -224,7 +224,7 @@ index aa41986e8e9387..d4121357526a84 100644
  	flags, err := ParseGOEXPERIMENT(GOOS, GOARCH, envOr("GOEXPERIMENT", defaultGOEXPERIMENT))
  	if err != nil {
  		Error = err
-@@ -69,6 +83,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -67,6 +81,18 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		regabiSupported = true
  	}
  
@@ -243,15 +243,15 @@ index aa41986e8e9387..d4121357526a84 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -86,6 +112,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		Dwarf5:               dwarf5Supported,
+@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  		RandomizedHeapBase64: true,
  		GreenTeaGC:           true,
+ 		GoroutineLeakProfile: true,
 +		SystemCrypto:         systemCryptoSupported,
  	}
  	flags := &ExperimentFlags{
  		Flags:    baseline,
-@@ -125,6 +152,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -124,6 +151,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -262,7 +262,7 @@ index aa41986e8e9387..d4121357526a84 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -151,6 +182,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +181,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -385,7 +385,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 2cfb71578b421b..a0131d7ef82343 100644
+index 683316b2135d52..b8ddbb1cb5b9ab 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,24 @@ type Flags struct {

From 1c5508971868d3524bd4ea822f95fcbd0513988c Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 7 May 2026 09:37:19 +0200
Subject: [PATCH 846/887] Upload

---
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 45 +++++++++--
 ...03-Implement-crypto-internal-backend.patch | 79 +++++++++++--------
 patches/0009-Add-appinsights-telemetry.patch  | 31 +++++++-
 ...13-Add-Microsoft-version-information.patch | 20 ++---
 4 files changed, 129 insertions(+), 46 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 6828dc0e2db..75ac0c032af 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -19,6 +19,7 @@ maintain this feature. For more information, see the test files.
  src/go/build/buildbackend_test.go             | 50 +++++++++++++
  .../build/testdata/backendtags_system/main.go |  3 +
  .../backendtags_system/systemcrypto.go        |  3 +
+ src/internal/buildcfg/cfg.go                  |  2 +
  src/internal/buildcfg/exp.go                  | 34 +++++++++
  src/internal/cfg/cfg.go                       |  1 +
  .../goexperiment/exp_cngcrypto_off.go         |  8 ++
@@ -30,7 +31,8 @@ maintain this feature. For more information, see the test files.
  .../goexperiment/exp_systemcrypto_off.go      |  8 ++
  .../goexperiment/exp_systemcrypto_on.go       |  8 ++
  src/internal/goexperiment/flags.go            | 18 +++++
- 19 files changed, 257 insertions(+), 1 deletion(-)
+ src/internal/platform/supported.go            | 12 +++
+ 21 files changed, 271 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/internal/modindex/build_test.go
  create mode 100644 src/go/build/buildbackend_test.go
  create mode 100644 src/go/build/testdata/backendtags_system/main.go
@@ -274,8 +276,21 @@ index 00000000000000..eb8a026982259c
 +//go:build goexperiment.systemcrypto
 +
 +package main
+diff --git a/src/internal/buildcfg/cfg.go b/src/internal/buildcfg/cfg.go
+index 89fd74eb823162..6d266ff641d721 100644
+--- a/src/internal/buildcfg/cfg.go
++++ b/src/internal/buildcfg/cfg.go
+@@ -38,6 +38,8 @@ var (
+ 	Version   = version
+ )
+ 
++var SystemCryptoDisabled = os.Getenv("MS_GO_NOSYSTEMCRYPTO") == "1"
++
+ // Error is one of the errors found (if any) in the build configuration.
+ var Error error
+ 
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index c8506d41bb240f..f4d514baf8657e 100644
+index 82866cef66b5af..195e53de95eedd 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -290,7 +305,7 @@ index c8506d41bb240f..f4d514baf8657e 100644
  // default in the current toolchain. This is, in effect, the "control"
  // configuration and any variation from this is an experiment.
  var Experiment ExperimentFlags = func() ExperimentFlags {
-+	if os.Getenv("MS_GO_NOSYSTEMCRYPTO") == "1" {
++	if SystemCryptoDisabled {
 +		// If MS_GO_NOSYSTEMCRYPTO is set, ensure that nosystemcrypto is in GOEXPERIMENT.
 +		// We do it here because it is the earliest point where the toolchain tries to retrive
 +		// the GOEXPERIMENT value.
@@ -344,7 +359,7 @@ index c8506d41bb240f..f4d514baf8657e 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -149,6 +180,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +181,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -478,7 +493,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 72f787bec7825a..baa40788e4bd34 100644
+index 683316b2135d52..b8ddbb1cb5b9ab 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,24 @@ type Flags struct {
@@ -506,3 +521,23 @@ index 72f787bec7825a..baa40788e4bd34 100644
  	// Regabi is split into several sub-experiments that can be
  	// enabled individually. Not all combinations work.
  	// The "regabi" GOEXPERIMENT is an alias for all "working"
+diff --git a/src/internal/platform/supported.go b/src/internal/platform/supported.go
+index 6cee00a7aebcdb..1182e37b86c0fc 100644
+--- a/src/internal/platform/supported.go
++++ b/src/internal/platform/supported.go
+@@ -281,3 +281,15 @@ func FirstClass(goos, goarch string) bool {
+ func Broken(goos, goarch string) bool {
+ 	return distInfo[OSArch{goos, goarch}].Broken
+ }
++
++// SystemCryptoSupported reports whether goos/goarch supports system crypto.
++func SystemCryptoSupported(goos, goarch string) bool {
++	switch goos {
++	case "linux", "darwin":
++		return true
++	case "windows":
++		return goarch == "amd64" || goarch == "arm64"
++	default:
++		return false
++	}
++}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 706f8ff1e26..02687035d53 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -52,9 +52,9 @@ desired goexperiments and build tags.
  .../internal/fips140only/fips140only.go       |  11 +-
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
- src/internal/buildcfg/exp.go                  |  47 ++
+ src/internal/buildcfg/exp.go                  |  50 +-
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2863 insertions(+), 16 deletions(-)
+ 45 files changed, 2854 insertions(+), 28 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -146,10 +146,10 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index eacaa53b909632..63f3e2644a912f 100644
+index a0f8d8dd372088..6a1a5258b22dc8 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1396,6 +1396,80 @@ func toolenv() []string {
+@@ -1398,6 +1398,80 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
@@ -230,7 +230,7 @@ index eacaa53b909632..63f3e2644a912f 100644
  	return env
  }
  
-@@ -1638,12 +1712,12 @@ func cmdbootstrap() {
+@@ -1640,12 +1714,12 @@ func cmdbootstrap() {
  		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
  	}
@@ -370,10 +370,10 @@ index a4edd854f1d35a..10ee92536b96cd 100644
  	// This will also update the BuildContext's tool tags to include the new
  	// experiment tags.
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index 91282ef9ace1c6..8f0deba2378f44 100644
+index 1d90061b065f5f..0d5d4fe0556564 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
-@@ -2415,6 +2415,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
+@@ -2417,6 +2417,9 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
  			buildmode = "archive"
  		}
  	}
@@ -674,7 +674,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 66c1619902e73e..d30198ae493442 100644
+index 07984396b7d44e..c7fbda270159f3 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -705,7 +705,7 @@ index 19ed197a20b57e..5e592c7c6697d7 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index ac9a7a90b90155..7112047dcb5f39 100644
+index 941cee36a62a4b..4ccd22da3bcd0a 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
 @@ -12,6 +12,7 @@ import (
@@ -3307,7 +3307,7 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e8eeb9455e4bb5..52c0785a87e5e8 100644
+index 03896fca65f120..465142153d1476 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -367,7 +367,7 @@ var depsRules = `
@@ -3319,7 +3319,7 @@ index e8eeb9455e4bb5..52c0785a87e5e8 100644
  	< internal/buildcfg;
  
  	# The vast majority of standard library packages should not be resorting to regexp.
-@@ -559,6 +559,10 @@ var depsRules = `
+@@ -552,6 +552,10 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
@@ -3330,7 +3330,7 @@ index e8eeb9455e4bb5..52c0785a87e5e8 100644
  	FIPS, internal/godebug, embed
  	< crypto/internal/fips140only
  	< crypto
-@@ -579,6 +583,13 @@ var depsRules = `
+@@ -572,6 +576,13 @@ var depsRules = `
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3344,7 +3344,7 @@ index e8eeb9455e4bb5..52c0785a87e5e8 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -617,8 +628,15 @@ var depsRules = `
+@@ -610,8 +621,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3363,7 +3363,7 @@ index e8eeb9455e4bb5..52c0785a87e5e8 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index d4121357526a84..c082274fcb6838 100644
+index 195e53de95eedd..c8b37f1e64955e 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -8,9 +8,11 @@ import (
@@ -3378,7 +3378,35 @@ index d4121357526a84..c082274fcb6838 100644
  )
  
  // ExperimentFlags represents a set of GOEXPERIMENT flags relative to a baseline
-@@ -161,6 +163,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -81,17 +83,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		regabiSupported = true
+ 	}
+ 
+-	// These are the goos/goarch combinations where systemcrypto is
+-	// enabled by default.
+-	var systemCryptoSupported bool
+-	switch goos {
+-	case "windows":
+-		systemCryptoSupported = goarch == "amd64" || goarch == "arm64"
+-	case "linux":
+-		systemCryptoSupported = true
+-	case "darwin":
+-		systemCryptoSupported = true
+-	}
++	systemCryptoSupported := goplatform.SystemCryptoSupported(goos, goarch)
+ 
+ 	// Older versions (anything before V16) of dsymutil don't handle
+ 	// the .debug_rnglists section in DWARF5. See
+@@ -111,7 +103,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RandomizedHeapBase64: true,
+ 		GreenTeaGC:           true,
+ 		GoroutineLeakProfile: true,
+-		SystemCrypto:         systemCryptoSupported,
++		SystemCrypto:         systemCryptoSupported, // if system crypto is supported, enable it by default
+ 	}
+ 	flags := &ExperimentFlags{
+ 		Flags:    baseline,
+@@ -160,6 +152,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  			if strings.HasPrefix(f, "no") {
  				f, val = f[2:], false
  			}
@@ -3395,29 +3423,18 @@ index d4121357526a84..c082274fcb6838 100644
  			set, ok := names[f]
  			if !ok {
  				return nil, fmt.Errorf("unknown GOEXPERIMENT %s", f)
-@@ -185,6 +197,21 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -184,6 +186,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
-+	// Check systemcrypto platform support.
-+	if flags.SystemCrypto && goplatform.BuildModeSupported("gc", "default", goos, goarch) {
-+		var supported bool
-+		switch goos {
-+		case "linux":
-+			supported = true
-+		case "windows":
-+			supported = goarch == "amd64" || goarch == "arm64"
-+		case "darwin":
-+			supported = true
-+		}
-+		if !supported {
-+			return nil, fmt.Errorf("GOEXPERIMENT systemcrypto is not supported on %s/%s\n\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips", goos, goarch)
-+		}
++	if flags.SystemCrypto && !systemCryptoSupported && goplatform.BuildModeSupported("gc", "default", goos, goarch) {
++		// System crypto enabled but not supported.
++		return nil, fmt.Errorf("GOEXPERIMENT systemcrypto is not supported on %s/%s\n\tFor more information, visit https://github.com/microsoft/go/tree/microsoft/main/eng/doc/fips", goos, goarch)
 +	}
  	return flags, nil
  }
  
-@@ -194,6 +221,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -193,6 +199,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  
diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index 88461d5a0c7..ac3beaf70d5 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -5,13 +5,14 @@ Subject: [PATCH] Add appinsights telemetry
 
 ---
  README.md                                     | 15 +++++
+ .../internal/telemetrystats/telemetrystats.go | 10 ++++
  src/cmd/go/main.go                            |  8 +++
  src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++++
  src/cmd/go/script_test.go                     | 10 ++++
  src/cmd/go/scriptcmds_test.go                 | 22 ++++++++
  src/cmd/internal/telemetry/counter/counter.go | 54 +++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 +
- 7 files changed, 167 insertions(+), 1 deletion(-)
+ 8 files changed, 177 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -38,6 +39,34 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +our privacy statement. Your use of the software operates as your consent to
 +these practices.
 \ No newline at end of file
+diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
+index f975a759a1be55..f37857306d2f17 100644
+--- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
++++ b/src/cmd/go/internal/telemetrystats/telemetrystats.go
+@@ -11,6 +11,8 @@ import (
+ 	"cmd/go/internal/cfg"
+ 	"cmd/go/internal/modload"
+ 	"cmd/internal/telemetry/counter"
++	"internal/buildcfg"
++	"internal/platform"
+ 	"strings"
+ )
+ 
+@@ -39,6 +41,14 @@ func incrementConfig() {
+ 		counter.Inc("go/cgo:disabled")
+ 	}
+ 
++	if platform.SystemCryptoSupported(cfg.Goos, cfg.Goarch) {
++		if buildcfg.SystemCryptoDisabled {
++			counter.Inc("msgo/systemcrypto:disabled")
++		} else {
++			counter.Inc("msgo/systemcrypto:enabled")
++		}
++	}
++
+ 	counter.Inc("go/platform/target/goos:" + cfg.Goos)
+ 	counter.Inc("go/platform/target/goarch:" + cfg.Goarch)
+ 	switch cfg.Goarch {
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
 index 8cdfd9196e4cb1..3f4a4d8f912969 100644
 --- a/src/cmd/go/main.go
diff --git a/patches/0013-Add-Microsoft-version-information.patch b/patches/0013-Add-Microsoft-version-information.patch
index 1772907eeae..f8ae5f87aee 100644
--- a/patches/0013-Add-Microsoft-version-information.patch
+++ b/patches/0013-Add-Microsoft-version-information.patch
@@ -51,10 +51,10 @@ index 1736fd71017add..114079d8f99527 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index ec10d9597b69fc..cd2b83cb6150b0 100644
+index 6a1a5258b22dc8..0d6b05a42920bb 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -454,6 +454,22 @@ func findgoversion() string {
+@@ -455,6 +455,22 @@ func findgoversion() string {
  	return version
  }
  
@@ -264,7 +264,7 @@ index 27d275644a4bd0..3c40024b4b7ab7 100644
  	}
  	if i := strings.Index(version, "-X:"); i >= 0 {
 diff --git a/src/cmd/go/internal/load/pkg.go b/src/cmd/go/internal/load/pkg.go
-index aaa3106e5a0e6e..3266f28252afea 100644
+index 0d5d4fe0556564..78cd9a2680b03f 100644
 --- a/src/cmd/go/internal/load/pkg.go
 +++ b/src/cmd/go/internal/load/pkg.go
 @@ -14,6 +14,7 @@ import (
@@ -275,7 +275,7 @@ index aaa3106e5a0e6e..3266f28252afea 100644
  	"internal/godebug"
  	"internal/platform"
  	"io/fs"
-@@ -2416,6 +2417,7 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
+@@ -2420,6 +2421,7 @@ func (p *Package) setBuildInfo(ctx context.Context, f *modfetch.Fetcher, autoVCS
  	if cfg.Experiment.SystemCrypto {
  		appendSetting("microsoft_systemcrypto", "1")
  	}
@@ -396,10 +396,10 @@ index 5e592c7c6697d7..df70274e03b5df 100644
  		// dump symbol info on crash
  		defer func() { ctxt.loader.Dump() }()
 diff --git a/src/internal/buildcfg/cfg.go b/src/internal/buildcfg/cfg.go
-index 89fd74eb823162..f6d6a78531fc75 100644
+index 6d266ff641d721..d1ed759065e278 100644
 --- a/src/internal/buildcfg/cfg.go
 +++ b/src/internal/buildcfg/cfg.go
-@@ -35,9 +35,43 @@ var (
+@@ -35,11 +35,45 @@ var (
  	ToolTags  = toolTags()
  	GO_LDSO   = defaultGO_LDSO
  	GOFIPS140 = gofips140()
@@ -407,6 +407,8 @@ index 89fd74eb823162..f6d6a78531fc75 100644
 +	Version   = MSVersion
  )
  
+ var SystemCryptoDisabled = os.Getenv("MS_GO_NOSYSTEMCRYPTO") == "1"
+ 
 +var (
 +	UpstreamVersion = version
 +	MSVersion       = msVersion()
@@ -497,10 +499,10 @@ index a69f4aaede794d..f5c35867b78e26 100644
  
  // GOOS is the running program's operating system target:
 diff --git a/src/runtime/runtime1.go b/src/runtime/runtime1.go
-index 8da3682261bf9f..3b4531df8a5ec1 100644
+index 835aa8ecedb484..78c2673fbe3661 100644
 --- a/src/runtime/runtime1.go
 +++ b/src/runtime/runtime1.go
-@@ -365,6 +365,9 @@ var debug struct {
+@@ -361,6 +361,9 @@ var debug struct {
  	// tracebacklabels controls the inclusion of goroutine labels in the
  	// goroutine status header line.
  	tracebacklabels atomic.Int32
@@ -510,7 +512,7 @@ index 8da3682261bf9f..3b4531df8a5ec1 100644
  }
  
  var dbgvars = []*dbgVar{
-@@ -402,6 +405,7 @@ var dbgvars = []*dbgVar{
+@@ -398,6 +401,7 @@ var dbgvars = []*dbgVar{
  	{name: "tracebacklabels", atomic: &debug.tracebacklabels, def: 1},
  	{name: "tracefpunwindoff", value: &debug.tracefpunwindoff},
  	{name: "updatemaxprocs", value: &debug.updatemaxprocs, def: 1},

From 585620dc82d7f0845f10d3fb86a66bd0c84c8e4c Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 7 May 2026 20:42:31 +0000
Subject: [PATCH 847/887] Update submodule to latest master (1a9af071): cmd/go:
 reject sumdb response lacking module hash

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index eb845eca727..1a9af071203 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit eb845eca727d878b721b3b5efb70368d97d8711f
+Subproject commit 1a9af07120312d368815712a4dce2dd2070342e5

From f9977fb5b90a654681f23ed2973389b53ecbada9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 8 May 2026 10:25:40 +0000
Subject: [PATCH 848/887] build(deps): bump github/codeql-action from 4.35.3 to
 4.35.4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.35.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...68bde559dea0fdcac2102bfdf6230c5f70eb485e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4c4f6188888..732abc786cb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/autobuild@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
         with:
           category: /language:go

From a616d6128843858c667b29b0529c13e36f09ad43 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 May 2026 16:01:55 +0000
Subject: [PATCH 849/887] build(deps): bump golang.org/x/net from 0.53.0 to
 0.54.0 in /eng/_util

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.54.0.
- [Commits](https://github.com/golang/net/compare/v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod |  6 +++---
 eng/_util/go.sum | 12 ++++++------
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 910bcb46d58..408acede7d6 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.10
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.53.0
+	golang.org/x/net v0.54.0
 )
 
 require (
@@ -28,9 +28,9 @@ require (
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.4 // indirect
-	golang.org/x/crypto v0.50.0 // indirect
+	golang.org/x/crypto v0.51.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/text v0.36.0 // indirect
+	golang.org/x/text v0.37.0 // indirect
 )
 
 tool github.com/microsoft/go-infra/cmd/pipelineymlgen
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 434e94b05f1..0a73bab63f0 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -51,14 +51,14 @@ github.com/stretchr/testify v1.5.1 h1:nOGnQDM7FYENwehXlg/kFVnos3rEvtKTjRvOWSzb6H
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 go.yaml.in/yaml/v4 v4.0.0-rc.4 h1:UP4+v6fFrBIb1l934bDl//mmnoIZEDK0idg1+AIvX5U=
 go.yaml.in/yaml/v4 v4.0.0-rc.4/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
-golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
-golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
-golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
-golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
+golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
+golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
+golang.org/x/net v0.54.0 h1:2zJIZAxAHV/OHCDTCOHAYehQzLfSXuf/5SoL/Dv6w/w=
+golang.org/x/net v0.54.0/go.mod h1:Sj4oj8jK6XmHpBZU/zWHw3BV3abl4Kvi+Ut7cQcY+cQ=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
-golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
-golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
+golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
+golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
 golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
 golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

From a3e4b5bf31d2eaf3dcafc707a021f91518e46c74 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 11 May 2026 16:07:49 +0000
Subject: [PATCH 850/887] Update submodule to latest master (25681742):
 runtime: fix TestUsingVDSO on linux/ppc64le

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 1a9af071203..2568174249a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 1a9af07120312d368815712a4dce2dd2070342e5
+Subproject commit 2568174249aeb5d747656735ecc28535ac4e58c3

From e4153122182e407edbc0baae43cbdeddd57b9a33 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 12 May 2026 10:56:55 +0100
Subject: [PATCH 851/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 20 ++++++------
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 14 ++++-----
 ...03-Implement-crypto-internal-backend.patch | 31 +++++++------------
 3 files changed, 28 insertions(+), 37 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 6e4ba73d5a1..088182c0c42 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -2265,7 +2265,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 0eca449cf9fb81..49362e996c544c 100644
+index 6d80cf09379169..b2fbb15ce64840 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2279,7 +2279,7 @@ index 0eca449cf9fb81..49362e996c544c 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 26612cb0ed7afd..48a65c1dec4003 100644
+index 2dc38d5149dd8c..3d93933ebaee78 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2291,12 +2291,12 @@ index 26612cb0ed7afd..48a65c1dec4003 100644
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
  golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
- golang.org/x/net v0.53.1-0.20260505181449-5e11a5ab891c h1:wrF5RobEIw4Wj2wvtEac1FCXJLWmFGe+ZolWSwFYN5s=
+ golang.org/x/net v0.53.1-0.20260507172500-689f70a42abd h1:fdoEg/JbXgrgSi4eGFGDWLptqZ8qxc8cMoAPCIrA3sA=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index e8ba18f2baf3d3..03896fca65f120 100644
+index 752f90091425a8..4adb0db977e5a5 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -152,6 +152,13 @@ var depsRules = `
+@@ -153,6 +153,13 @@ var depsRules = `
  	< internal/syscall/execenv
  	< SYSCALL;
  
@@ -2310,7 +2310,7 @@ index e8ba18f2baf3d3..03896fca65f120 100644
  	# TIME is SYSCALL plus the core packages about time, including context.
  	SYSCALL
  	< time/tzdata
-@@ -535,16 +542,46 @@ var depsRules = `
+@@ -536,16 +543,46 @@ var depsRules = `
  	NONE < crypto/internal/boring/sig, crypto/internal/boring/syso;
  	sync/atomic < crypto/internal/boring/bcache;
  
@@ -2362,7 +2362,7 @@ index e8ba18f2baf3d3..03896fca65f120 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -569,6 +606,10 @@ var depsRules = `
+@@ -570,6 +607,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2373,7 +2373,7 @@ index e8ba18f2baf3d3..03896fca65f120 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -939,7 +980,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -940,7 +981,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2382,7 +2382,7 @@ index e8ba18f2baf3d3..03896fca65f120 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -949,7 +990,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -950,7 +991,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index ef7c64402dec38..16e61507b64ba5 100644
+index b9879da69c7695..bd3bdb7f5f0109 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 75ac0c032af..8f177e34d61 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -290,7 +290,7 @@ index 89fd74eb823162..6d266ff641d721 100644
  var Error error
  
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 82866cef66b5af..195e53de95eedd 100644
+index c8506d41bb240f..ec32ea2b4bf13c 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -340,15 +340,15 @@ index 82866cef66b5af..195e53de95eedd 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -85,6 +111,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -84,6 +110,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		Dwarf5:               dwarf5Supported,
  		RandomizedHeapBase64: true,
  		GreenTeaGC:           true,
- 		GoroutineLeakProfile: true,
-+		SystemCrypto:         systemCryptoSupported,
++		SystemCrypto:         systemCryptoSupported, // if system crypto is supported, enable it by default
  	}
  	flags := &ExperimentFlags{
  		Flags:    baseline,
-@@ -124,6 +151,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -123,6 +150,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -359,7 +359,7 @@ index 82866cef66b5af..195e53de95eedd 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -150,6 +181,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -149,6 +180,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -493,7 +493,7 @@ index 00000000000000..fcd4cb9da0d162
 +const SystemCrypto = true
 +const SystemCryptoInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index 683316b2135d52..b8ddbb1cb5b9ab 100644
+index 17fe15270aba60..5f09ad11a701e2 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -60,6 +60,24 @@ type Flags struct {
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 02687035d53..b6771ff037a 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -52,9 +52,9 @@ desired goexperiments and build tags.
  .../internal/fips140only/fips140only.go       |  11 +-
  src/crypto/systemcrypto_nocgo_linux.go        |  18 +
  src/go/build/deps_test.go                     |  24 +-
- src/internal/buildcfg/exp.go                  |  50 +-
+ src/internal/buildcfg/exp.go                  |  48 +-
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2854 insertions(+), 28 deletions(-)
+ 45 files changed, 2853 insertions(+), 27 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -3307,10 +3307,10 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 03896fca65f120..465142153d1476 100644
+index 4adb0db977e5a5..0b7d08133be300 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -367,7 +367,7 @@ var depsRules = `
+@@ -368,7 +368,7 @@ var depsRules = `
  	math/big, go/token
  	< go/constant;
  
@@ -3319,7 +3319,7 @@ index 03896fca65f120..465142153d1476 100644
  	< internal/buildcfg;
  
  	# The vast majority of standard library packages should not be resorting to regexp.
-@@ -552,6 +552,10 @@ var depsRules = `
+@@ -553,6 +553,10 @@ var depsRules = `
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
@@ -3330,7 +3330,7 @@ index 03896fca65f120..465142153d1476 100644
  	FIPS, internal/godebug, embed
  	< crypto/internal/fips140only
  	< crypto
-@@ -572,6 +576,13 @@ var depsRules = `
+@@ -573,6 +577,13 @@ var depsRules = `
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
@@ -3344,7 +3344,7 @@ index 03896fca65f120..465142153d1476 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -610,8 +621,15 @@ var depsRules = `
+@@ -611,8 +622,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3363,7 +3363,7 @@ index 03896fca65f120..465142153d1476 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 195e53de95eedd..c8b37f1e64955e 100644
+index 35b4d011584f52..1029dc8eb4fc83 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -8,9 +8,11 @@ import (
@@ -3397,16 +3397,7 @@ index 195e53de95eedd..c8b37f1e64955e 100644
  
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
-@@ -111,7 +103,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		RandomizedHeapBase64: true,
- 		GreenTeaGC:           true,
- 		GoroutineLeakProfile: true,
--		SystemCrypto:         systemCryptoSupported,
-+		SystemCrypto:         systemCryptoSupported, // if system crypto is supported, enable it by default
- 	}
- 	flags := &ExperimentFlags{
- 		Flags:    baseline,
-@@ -160,6 +152,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -159,6 +151,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  			if strings.HasPrefix(f, "no") {
  				f, val = f[2:], false
  			}
@@ -3423,7 +3414,7 @@ index 195e53de95eedd..c8b37f1e64955e 100644
  			set, ok := names[f]
  			if !ok {
  				return nil, fmt.Errorf("unknown GOEXPERIMENT %s", f)
-@@ -184,6 +186,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -183,6 +185,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -3434,7 +3425,7 @@ index 195e53de95eedd..c8b37f1e64955e 100644
  	return flags, nil
  }
  
-@@ -193,6 +199,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -192,6 +198,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  

From 6db9cc4c4eac207ae3d93425505547fb714c3a62 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 13 May 2026 09:07:15 +0000
Subject: [PATCH 852/887] build(deps): bump
 microsoft/go-infra/.github/workflows/check-line-endings.yml from 0.0.10 to
 0.0.11 (#2276)

* build(deps): bump microsoft/go-infra/.github/workflows/check-line-endings.yml

Bumps [microsoft/go-infra/.github/workflows/check-line-endings.yml](https://github.com/microsoft/go-infra) from 0.0.10 to 0.0.11.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/944d1d054c1265bf35b6632d42682217330907c4...5e6a5b28f97bcd009df177f658149009d29d1b1c)

---
updated-dependencies:
- dependency-name: microsoft/go-infra/.github/workflows/check-line-endings.yml
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Apply suggestion from @dagood

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Davis Goodin <dagood@users.noreply.github.com>
---
 .github/workflows/check-line-endings.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check-line-endings.yml b/.github/workflows/check-line-endings.yml
index d6a4464267a..1045dc7187d 100644
--- a/.github/workflows/check-line-endings.yml
+++ b/.github/workflows/check-line-endings.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   check-line-endings:
-    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@944d1d054c1265bf35b6632d42682217330907c4 # main
+    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@5e6a5b28f97bcd009df177f658149009d29d1b1c # v0.0.11

From a1e8087cfa164715769d21844ac4c020434294c3 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 13 May 2026 16:03:36 +0000
Subject: [PATCH 853/887] Update submodule to latest master (364de84f): all:
 turn on cgo/external linking for linux/ppc64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 2568174249a..364de84f360 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 2568174249aeb5d747656735ecc28535ac4e58c3
+Subproject commit 364de84f3609e320490ae89ac1543883966f3c5d

From 223c37c8c3088da918fad053a8f8a55b688f5f08 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Wed, 13 May 2026 17:59:31 +0100
Subject: [PATCH 854/887] resolve 3-way merge conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 24 +++++++++----------
 patches/0009-Add-appinsights-telemetry.patch  |  4 ++--
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 088182c0c42..a4ec2d8ce32 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -525,7 +525,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 4d96507cc3aa35..4e3a777d6d66ff 100644
+index 930247f4c895b7..4ec198a52d70e9 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -538,7 +538,7 @@ index 4d96507cc3aa35..4e3a777d6d66ff 100644
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.35.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 3ec3d536af3da9..c2d7ebe32aa092 100644
+index 89e5f334cfffbb..1209f1208e06d3 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -2215,7 +2215,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index e7f2b95af8de8f..228d4718ce333c 100644
+index 6ba72c229f6240..f8ef5d5c1f1d04 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2265,12 +2265,12 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 6d80cf09379169..b2fbb15ce64840 100644
+index 8703fad3b226c9..49ec9458982cbb 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.43.0 // indirect
- 	golang.org/x/text v0.36.0 // indirect
+ 	golang.org/x/sys v0.44.0 // indirect
+ 	golang.org/x/text v0.37.0 // indirect
  )
 +
 +require (
@@ -2279,7 +2279,7 @@ index 6d80cf09379169..b2fbb15ce64840 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 2dc38d5149dd8c..3d93933ebaee78 100644
+index 43554ff45c183e..4c2a20060315bd 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2289,9 +2289,9 @@ index 2dc38d5149dd8c..3d93933ebaee78 100644
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c h1:kHYNsP4g/LehejM+7p42t1ZQWlV/HJBwwjCE7SwFBKo=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
- golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
- golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
- golang.org/x/net v0.53.1-0.20260507172500-689f70a42abd h1:fdoEg/JbXgrgSi4eGFGDWLptqZ8qxc8cMoAPCIrA3sA=
+ golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
+ golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
+ golang.org/x/net v0.54.1-0.20260509022215-ad8140e0aa2e h1:ITxjUIeFp/ACbvnNlOZLoDmomcET3Yt4lFMgeqBebXk=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 752f90091425a8..4adb0db977e5a5 100644
 --- a/src/go/build/deps_test.go
@@ -38256,7 +38256,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index b9879da69c7695..bd3bdb7f5f0109 100644
+index d72017d2a43c1e..a0df64287bf4ba 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -38283,6 +38283,6 @@ index b9879da69c7695..bd3bdb7f5f0109 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.50.0
+ # golang.org/x/crypto v0.51.0
  ## explicit; go 1.25.0
  golang.org/x/crypto/chacha20
diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index ac3beaf70d5..9bb8d64efb1 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -40,7 +40,7 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +these practices.
 \ No newline at end of file
 diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
-index f975a759a1be55..f37857306d2f17 100644
+index c6e58935bb0ee2..5aec1694aaae96 100644
 --- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
 +++ b/src/cmd/go/internal/telemetrystats/telemetrystats.go
 @@ -11,6 +11,8 @@ import (
@@ -66,7 +66,7 @@ index f975a759a1be55..f37857306d2f17 100644
 +
  	counter.Inc("go/platform/target/goos:" + cfg.Goos)
  	counter.Inc("go/platform/target/goarch:" + cfg.Goarch)
- 	switch cfg.Goarch {
+ 	counter.Inc("go/platform/target/port:" + cfg.Goos + "-" + cfg.Goarch)
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
 index 8cdfd9196e4cb1..3f4a4d8f912969 100644
 --- a/src/cmd/go/main.go

From 4a06e1f909905f52dc9207dcedccecb1d634c818 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 13 May 2026 18:13:22 +0100
Subject: [PATCH 855/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#2275)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.10 to 0.0.11.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.10...v0.0.11)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 408acede7d6..59b4ea60b6e 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.10
+	github.com/microsoft/go-infra v0.0.11
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.54.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 0a73bab63f0..43e7eff2a6c 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.10 h1:EetBVBICjabaz4oU1CoKht0WAduK2XnROu53TdQvzkg=
-github.com/microsoft/go-infra v0.0.10/go.mod h1:DST10Gfood7K6NWquhn+jY3/NABtvlyeRjG5oEFNiVE=
+github.com/microsoft/go-infra v0.0.11 h1:d0GpEVQ8mlHYrV4HCI8NlpeKAbEXWjYDE6L5SI89XLM=
+github.com/microsoft/go-infra v0.0.11/go.mod h1:ALUdZDL59s9dvJGm0Gpkvm2l6G8RLCVAy+zWY3he1wk=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=

From 37d187348de277c9081b93e7e6511e7dc73141de Mon Sep 17 00:00:00 2001
From: Michelle Clayton <mclayton+github@microsoft.com>
Date: Wed, 13 May 2026 18:19:06 -0700
Subject: [PATCH 856/887] Drop obsolete retain-build placeholder for go-lab#59
 (#2277)

The TODO comment was a marker that 1ES PT migration removed Arcade's retain-build step. The replacement is now in microsoft/go-infra's release pipeline (release-build-steps.yml, after wait-ci-trigger), which discovers the auto-triggered microsoft-go build and pins it externally. The microsoft-go pipeline itself can't gate retention because CI-triggered runs don't carry release parameters; the release pipeline is the only caller that knows it's a release.

See microsoft/go-infra#480.
---
 eng/pipeline/stages/run-stage.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/eng/pipeline/stages/run-stage.yml b/eng/pipeline/stages/run-stage.yml
index da30e5b5d26..cbf66ed3904 100644
--- a/eng/pipeline/stages/run-stage.yml
+++ b/eng/pipeline/stages/run-stage.yml
@@ -301,10 +301,6 @@ stages:
                 targetPath: $(Build.SourcesDirectory)/eng/artifacts/RawTestOutput
                 artifactName: raw-test-output-${{ parameters.builder.id }}-retry-$(System.StageAttempt)-job-$(System.JobAttempt)
 
-          # - ${{ if eq(parameters.builder.config, 'buildandpack' ) }}:
-          #   - ${{ if ne(parameters.releaseVersion, 'nil') }}:
-          #     # Retain the build: https://github.com/microsoft/go-lab/issues/59
-
           - ${{ if eq(parameters.builder.os, 'linux') }}:
             # Files may be owned by root because builds don't set user ID. If this build is running on a
             # persistent machine, later builds may fail to clean up this build's directory as as

From 89b4b5059900ad49f429852fa56ad377d4c876ed Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Fri, 15 May 2026 10:19:07 +0100
Subject: [PATCH 857/887] re-vendor crypto backends (#2279)

* re-vendor crypto backends

* update OpenSSL
---
 .../0001-Vendor-external-dependencies.patch   | 6979 ++++++++++-------
 1 file changed, 4350 insertions(+), 2629 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index a4ec2d8ce32..cbd39cdab58 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -15,7 +15,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-infra/telemetry/README.md    |    9 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   73 +
+ .../go-infra/telemetry/config/config.json     |   76 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
  .../telemetry/internal/appinsights/client.go  |  192 ++
@@ -37,7 +37,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/go.sum                                    |    6 +
  src/go/build/deps_test.go                     |   55 +-
  src/go/build/vendor_test.go                   |    4 +
- .../golang-fips/openssl/v2/.gitignore         |    2 +
+ .../golang-fips/openssl/v2/.gitignore         |    3 +
  .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
  .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
  .../golang-fips/openssl/v2/README.md          |   66 +
@@ -45,18 +45,18 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../golang-fips/openssl/v2/bbig/big.go        |   37 +
  .../github.com/golang-fips/openssl/v2/big.go  |   11 +
  .../openssl/v2/chacha20poly1305.go            |  151 +
- .../golang-fips/openssl/v2/cipher.go          |  662 +++++
- .../golang-fips/openssl/v2/const.go           |   91 +
- .../golang-fips/openssl/v2/cshake.go          |  253 ++
- .../github.com/golang-fips/openssl/v2/des.go  |  112 +
+ .../golang-fips/openssl/v2/cipher.go          |  665 +++++
+ .../golang-fips/openssl/v2/const.go           |   99 +
+ .../golang-fips/openssl/v2/cshake.go          |  255 ++
+ .../github.com/golang-fips/openssl/v2/des.go  |  118 +
  .../github.com/golang-fips/openssl/v2/dsa.go  |  305 ++
- .../github.com/golang-fips/openssl/v2/ec.go   |  136 +
+ .../github.com/golang-fips/openssl/v2/ec.go   |  131 +
  .../github.com/golang-fips/openssl/v2/ecdh.go |  340 +++
  .../golang-fips/openssl/v2/ecdsa.go           |  219 ++
- .../golang-fips/openssl/v2/ed25519.go         |  210 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  620 +++++
+ .../golang-fips/openssl/v2/ed25519.go         |  208 ++
+ .../github.com/golang-fips/openssl/v2/evp.go  |  614 ++++
  .../github.com/golang-fips/openssl/v2/hash.go |  520 ++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  451 +++
+ .../github.com/golang-fips/openssl/v2/hkdf.go |  441 +++
  .../github.com/golang-fips/openssl/v2/hmac.go |  278 ++
  .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
  .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
@@ -104,7 +104,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/fakecgo/trampolines_loong64.s |   78 +
  .../v2/internal/fakecgo/trampolines_ppc64le.s |  128 +
  .../v2/internal/fakecgo/trampolines_riscv64.s |   76 +
- .../v2/internal/fakecgo/trampolines_s390x.s   |  154 ++
+ .../v2/internal/fakecgo/trampolines_s390x.s   |  154 +
  .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
  .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
  .../v2/internal/fakecgo/zsymbols_freebsd.go   |   48 +
@@ -124,10 +124,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../openssl/v2/internal/ossl/asm_s390x.s      |  117 +
  .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
  .../openssl/v2/internal/ossl/errors.go        |   34 +
- .../openssl/v2/internal/ossl/errors_cgo.go    |   14 +
+ .../openssl/v2/internal/ossl/errors_cgo.go    |   30 +
  .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
  .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/shims.h          |  434 +++
+ .../openssl/v2/internal/ossl/shims.h          |  442 +++
  .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
  .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
  .../v2/internal/ossl/syscall_nocgo_freebsd.go |    5 +
@@ -136,29 +136,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
  .../openssl/v2/internal/ossl/zdl.s            |   55 +
  .../openssl/v2/internal/ossl/zdl_nocgo.go     |   58 +
- .../openssl/v2/internal/ossl/zossl.c          | 2054 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   67 +
- .../openssl/v2/internal/ossl/zossl.h          |  363 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1486 ++++++++++
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2450 +++++++++++++++++
- .../golang-fips/openssl/v2/mlkem.go           |  365 +++
- .../golang-fips/openssl/v2/openssl.go         |  244 ++
+ .../openssl/v2/internal/ossl/zossl.c          | 2071 ++++++++++++++
+ .../openssl/v2/internal/ossl/zossl.go         |   73 +
+ .../openssl/v2/internal/ossl/zossl.h          |  371 +++
+ .../openssl/v2/internal/ossl/zossl_cgo.go     | 1502 ++++++++++
+ .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2468 +++++++++++++++++
+ .../golang-fips/openssl/v2/mldsa.go           |  448 +++
+ .../golang-fips/openssl/v2/mlkem.go           |  368 +++
+ .../golang-fips/openssl/v2/openssl.go         |  240 ++
  .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
  .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
- .../golang-fips/openssl/v2/osslsetup/fips.go  |  165 ++
- .../golang-fips/openssl/v2/osslsetup/init.go  |  160 ++
+ .../golang-fips/openssl/v2/osslsetup/fips.go  |  166 ++
+ .../golang-fips/openssl/v2/osslsetup/init.go  |  169 ++
  .../openssl/v2/osslsetup/init_cgo_unix.go     |   31 +
  .../openssl/v2/osslsetup/init_nocgo_unix.go   |   32 +
  .../openssl/v2/osslsetup/init_windows.go      |   36 +
- .../openssl/v2/osslsetup/osslsetup.go         |   74 +
+ .../openssl/v2/osslsetup/osslsetup.go         |  108 +
  .../openssl/v2/osslsetup/osslsetup_cgo.go     |   11 +
  .../openssl/v2/osslsetup/osslsetup_nocgo.go   |   21 +
- .../golang-fips/openssl/v2/params.go          |  180 ++
+ .../golang-fips/openssl/v2/params.go          |  190 ++
  .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
- .../golang-fips/openssl/v2/provideropenssl.go |  239 ++
+ .../golang-fips/openssl/v2/provideropenssl.go |  249 ++
  .../openssl/v2/providersymcrypt.go            |  330 +++
  .../github.com/golang-fips/openssl/v2/rand.go |   21 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |   68 +
+ .../github.com/golang-fips/openssl/v2/rc4.go  |   74 +
  .../github.com/golang-fips/openssl/v2/rsa.go  |  711 +++++
  .../golang-fips/openssl/v2/tls1prf.go         |  156 ++
  .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
@@ -173,19 +174,20 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/commoncrypto/zcommoncrypto.s     |   76 +
  .../commoncrypto/zcommoncrypto_cgo.go         |   64 +
  .../commoncrypto/zcommoncrypto_nocgo.go       |  102 +
- .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 176512 bytes
- .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 169880 bytes
+ .../internal/cryptokit/CryptoKit_amd64.syso   |  Bin 0 -> 181384 bytes
+ .../internal/cryptokit/CryptoKit_arm64.syso   |  Bin 0 -> 176808 bytes
  .../internal/cryptokit/cryptokit.go           |    8 +
  .../internal/cryptokit/cryptokit_cgo.go       |   10 +
- .../internal/cryptokit/shims.h                |   84 +
+ .../internal/cryptokit/shims.h                |  127 +
  .../internal/cryptokit/syscall_nocgo.go       |   15 +
- .../internal/cryptokit/zcryptokit.c           |  262 ++
- .../internal/cryptokit/zcryptokit.h           |   66 +
- .../internal/cryptokit/zcryptokit.s           |  334 +++
- .../internal/cryptokit/zcryptokit_cgo.go      |  320 +++
- .../internal/cryptokit/zcryptokit_nocgo.go    |  364 +++
- .../cryptokit/zcryptokit_swift_amd64.go       |  283 ++
- .../cryptokit/zcryptokit_swift_arm64.go       |  282 ++
+ .../internal/cryptokit/xcodebuild_version.txt |    2 +
+ .../internal/cryptokit/zcryptokit.c           |  317 +++
+ .../internal/cryptokit/zcryptokit.h           |   77 +
+ .../internal/cryptokit/zcryptokit.s           |  400 +++
+ .../internal/cryptokit/zcryptokit_cgo.go      |  386 +++
+ .../internal/cryptokit/zcryptokit_nocgo.go    |  441 +++
+ .../cryptokit/zcryptokit_swift_amd64.go       |  307 ++
+ .../cryptokit/zcryptokit_swift_arm64.go       |  306 ++
  .../internal/fakecgo/abi_amd64.h              |   99 +
  .../internal/fakecgo/abi_arm64.h              |   39 +
  .../internal/fakecgo/asm_amd64.s              |   39 +
@@ -229,15 +231,16 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-darwin/xcrypto/des.go |  111 +
  .../microsoft/go-crypto-darwin/xcrypto/ec.go  |   39 +
  .../go-crypto-darwin/xcrypto/ecdh.go          |  146 +
- .../go-crypto-darwin/xcrypto/ecdsa.go         |  154 ++
+ .../go-crypto-darwin/xcrypto/ecdsa.go         |  154 +
  .../go-crypto-darwin/xcrypto/ed25519.go       |  124 +
  .../microsoft/go-crypto-darwin/xcrypto/evp.go |  339 +++
  .../microsoft/go-crypto-darwin/xcrypto/gcm.go |  218 ++
  .../go-crypto-darwin/xcrypto/hash.go          |  337 +++
  .../go-crypto-darwin/xcrypto/hkdf.go          |  103 +
  .../go-crypto-darwin/xcrypto/hmac.go          |  119 +
+ .../go-crypto-darwin/xcrypto/mldsa.go         |  222 ++
  .../go-crypto-darwin/xcrypto/mlkem.go         |  261 ++
- .../go-crypto-darwin/xcrypto/pbkdf2.go        |   68 +
+ .../go-crypto-darwin/xcrypto/pbkdf2.go        |   76 +
  .../go-crypto-darwin/xcrypto/rand.go          |   28 +
  .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  208 ++
@@ -256,6 +259,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/hkdf.go |  133 +
  .../microsoft/go-crypto-winnative/cng/hmac.go |   70 +
  .../microsoft/go-crypto-winnative/cng/keys.go |  220 ++
+ .../go-crypto-winnative/cng/mldsa.go          |  425 +++
  .../go-crypto-winnative/cng/mlkem.go          |  405 +++
  .../go-crypto-winnative/cng/pbkdf2.go         |   70 +
  .../microsoft/go-crypto-winnative/cng/rand.go |   28 +
@@ -263,13 +267,13 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-crypto-winnative/cng/rsa.go  |  404 +++
  .../microsoft/go-crypto-winnative/cng/sha3.go |  203 ++
  .../go-crypto-winnative/cng/tls1prf.go        |   89 +
- .../internal/bcrypt/bcrypt_windows.go         |  414 +++
+ .../internal/bcrypt/bcrypt_windows.go         |  434 +++
  .../internal/bcrypt/ntstatus_windows.go       |   45 +
  .../internal/bcrypt/zsyscall_windows.go       |  438 +++
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 261 files changed, 34100 insertions(+), 7 deletions(-)
+ 265 files changed, 35749 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -396,6 +400,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
+ create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
  create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
@@ -434,6 +439,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
@@ -491,6 +497,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
@@ -511,6 +518,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hkdf.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/hmac.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/keys.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/mldsa.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/pbkdf2.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/rand.go
@@ -525,30 +533,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 930247f4c895b7..4ec198a52d70e9 100644
+index 930247f4c895b7..080a70ec79a1a7 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.35.0
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 89e5f334cfffbb..1209f1208e06d3 100644
+index 89e5f334cfffbb..03092e84af8453 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
  github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c h1:qOt7PpDH8k4734emsdXNylY79cY2qOHubeVP8Z/5iwI=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd h1:vNA5PIOnvHfH7O9GUOZXKUakJpdE7+PzsF641y7Zly0=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76 h1:nP1tNhLNK4ceYOGVEfAY44tj/5Q0vq/pOqZggUzXHXc=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76 h1:LESU567RNJA+E3w8PyUdwbswh/PY8vF0xvsf3fUERMI=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695 h1:q45HsUyFzBjBk4mHGgUewJf6KKOkNiWB8wMx0X6elyA=
@@ -663,10 +671,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..76053296e82470
+index 00000000000000..4b16ad97f35d1a
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,73 @@
+@@ -0,0 +1,76 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -735,6 +743,9 @@ index 00000000000000..76053296e82470
 +				},
 +				{
 +					"Name": "go/cgo:{enabled,disabled}"
++				},
++				{
++					"Name": "msgo/systemcrypto:{enabled,disabled}"
 +				}
 +			]
 +		}
@@ -2215,14 +2226,14 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 6ba72c229f6240..f8ef5d5c1f1d04 100644
+index 6ba72c229f6240..52e14e559e925d 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260407113113-dbc3015a3e9c
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
 +## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -2230,7 +2241,7 @@ index 6ba72c229f6240..f8ef5d5c1f1d04 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260128082012-a1498e2b57dd
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
@@ -2265,7 +2276,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 8703fad3b226c9..49ec9458982cbb 100644
+index 8703fad3b226c9..10ccf74f86ae3b 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2274,21 +2285,21 @@ index 8703fad3b226c9..49ec9458982cbb 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb
-+	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974
-+	github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
++	github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce
++	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b
++	github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 43554ff45c183e..4c2a20060315bd 100644
+index 43554ff45c183e..143b3063c17042 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb h1:FMUkmY3tU9zypzAzwdQvFg1sKM4kXcUKz+GkR/X6Im8=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb/go.mod h1:E+yPtdllHdy5S8YLMfcIRcqjqQySyiexqxxaLK7+cQQ=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974 h1:HdIFLjjkXB3AJ7cXjVynU+69l96flEVAlOwonfXVFqM=
-+github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c h1:kHYNsP4g/LehejM+7p42t1ZQWlV/HJBwwjCE7SwFBKo=
-+github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce h1:Kl2/ytBV5nuKMGe6YNZsm3IEq9y1i0xjf/LUdAXBK9A=
++github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce/go.mod h1:E+yPtdllHdy5S8YLMfcIRcqjqQySyiexqxxaLK7+cQQ=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b h1:HADuteQytnLec1jmAOGPGCukWIxObrAm/CBYtVzuo5o=
++github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe h1:WDbUuTTKY8VElMRA3JJ8Quvj9xK9GqEcTiBZ3BF+7mI=
++github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
  golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
  golang.org/x/net v0.54.1-0.20260509022215-ad8140e0aa2e h1:ITxjUIeFp/ACbvnNlOZLoDmomcET3Yt4lFMgeqBebXk=
@@ -2408,12 +2419,13 @@ index 7f6237ffd59c11..8f68bc361081f1 100644
  // Verify that the vendor directories contain only packages matching the list above.
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
 new file mode 100644
-index 00000000000000..b6c942fc91eec7
+index 00000000000000..0846322952e4df
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
-@@ -0,0 +1,2 @@
+@@ -0,0 +1,3 @@
 +**/.DS_Store
 +.vscode/
++.github/benchcheck/benchcheck
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml b/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
 new file mode 100644
 index 00000000000000..aed2e22df2d555
@@ -2458,7 +2470,7 @@ index 00000000000000..97e85154015761
 \ No newline at end of file
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/README.md b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 new file mode 100644
-index 00000000000000..0a6d0d0ef2c0c6
+index 00000000000000..6e4c916be0fdcf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/README.md
 @@ -0,0 +1,66 @@
@@ -2490,7 +2502,7 @@ index 00000000000000..0a6d0d0ef2c0c6
 +
 +### Multiple OpenSSL versions supported
 +
-+The `openssl` package has support for multiple OpenSSL versions, namely 1.1.0, 1.1.1 and 3.x.
++The `openssl` package has support for multiple OpenSSL versions, namely 1.1.1, 3.x, and 4.x.
 +
 +All supported OpenSSL versions pass a small set of automatic tests that ensure they can be built and that there are no major regressions.
 +These tests do not validate the cryptographic correctness of the `openssl` package.
@@ -2910,10 +2922,10 @@ index 00000000000000..789076408c515b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
 new file mode 100644
-index 00000000000000..228b023453b3d3
+index 00000000000000..f70da2a40b8ee3
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,662 @@
+@@ -0,0 +1,665 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -2998,12 +3010,15 @@ index 00000000000000..228b023453b3d3
 +		return v.(ossl.EVP_CIPHER_PTR)
 +	}
 +	defer func() {
-+		if cipher != nil && major() == 3 {
-+			// On OpenSSL 3, directly operating on a EVP_CIPHER object
-+			// not created by EVP_CIPHER has negative performance
-+			// implications, as cipher operations will have
-+			// to fetch it on every call. Better to just fetch it once here.
-+			cipher, _ = ossl.EVP_CIPHER_fetch(nil, ossl.EVP_CIPHER_get0_name(cipher), nil)
++		if cipher != nil {
++			switch major() {
++			case 3, 4:
++				// On OpenSSL 3, directly operating on a EVP_CIPHER object
++				// not created by EVP_CIPHER has negative performance
++				// implications, as cipher operations will have
++				// to fetch it on every call. Better to just fetch it once here.
++				cipher, _ = ossl.EVP_CIPHER_fetch(nil, ossl.EVP_CIPHER_get0_name(cipher), nil)
++			}
 +		}
 +		cacheCipher.Store(cacheCipherKey{k, mode}, cipher)
 +	}()
@@ -3578,10 +3593,10 @@ index 00000000000000..228b023453b3d3
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
 new file mode 100644
-index 00000000000000..e4f8f5b5d0c4a7
+index 00000000000000..a8165e13f85164
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,91 @@
+@@ -0,0 +1,99 @@
 +package openssl
 +
 +import "unsafe"
@@ -3621,6 +3636,9 @@ index 00000000000000..e4f8f5b5d0c4a7
 +	_KeyTypeX25519           cString = "X25519\x00"
 +	_KeyTypeMLKEM768         cString = "ML-KEM-768\x00"
 +	_KeyTypeMLKEM1024        cString = "ML-KEM-1024\x00"
++	_KeyTypeMLDSA44          cString = "ML-DSA-44\x00"
++	_KeyTypeMLDSA65          cString = "ML-DSA-65\x00"
++	_KeyTypeMLDSA87          cString = "ML-DSA-87\x00"
 +	_KeyTypeChacha20Poly1305 cString = "CHACHA20-POLY1305\x00"
 +
 +	// Digest names
@@ -3669,16 +3687,21 @@ index 00000000000000..e4f8f5b5d0c4a7
 +	_OSSL_PKEY_PARAM_RSA_EXPONENT2      cString = "rsa-exponent2\x00"
 +	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1   cString = "rsa-coefficient1\x00"
 +	_OSSL_PKEY_PARAM_ML_KEM_SEED        cString = "seed\x00"
++	_OSSL_PKEY_PARAM_ML_DSA_SEED        cString = "seed\x00"
++
++	// Signature parameters
++	_OSSL_SIGNATURE_PARAM_CONTEXT_STRING cString = "context-string\x00"
++	_OSSL_SIGNATURE_PARAM_MU             cString = "mu\x00"
 +
 +	// MAC parameters
 +	_OSSL_MAC_PARAM_DIGEST cString = "digest\x00"
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
 new file mode 100644
-index 00000000000000..c9fd5e5ad8d25c
+index 00000000000000..b37b8e7cc10ac0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
-@@ -0,0 +1,253 @@
+@@ -0,0 +1,255 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3734,13 +3757,15 @@ index 00000000000000..c9fd5e5ad8d25c
 +
 +var shakeSupported sync.Map
 +
++var hasDigestSqueeze = sync.OnceValue(ossl.EVP_DigestSqueeze_Available)
++
 +// SupportsSHAKE returns true if the SHAKE extendable output functions
 +// with the given securityBits are supported.
 +func SupportsSHAKE(securityBits int) bool {
-+	if major() == 1 || (major() == 3 && minor() < 3) {
-+		// SHAKE MD's are supported since OpenSSL 1.1.1,
-+		// but EVP_DigestSqueeze is only supported since 3.3,
-+		// and we need it to implement [sha3.SHAKE].
++	if !hasDigestSqueeze() {
++		// SHAKE MD's are supported since OpenSSL 1.1.1, but
++		// EVP_DigestSqueeze (added in OpenSSL 3.3) is required to
++		// implement [sha3.SHAKE]'s streaming Read API.
 +		return false
 +	}
 +	if v, ok := shakeSupported.Load(securityBits); ok {
@@ -3934,10 +3959,10 @@ index 00000000000000..c9fd5e5ad8d25c
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
 new file mode 100644
-index 00000000000000..772800a73e3389
+index 00000000000000..71586bbb74bbee
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-@@ -0,0 +1,112 @@
+@@ -0,0 +1,118 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -3952,9 +3977,15 @@ index 00000000000000..772800a73e3389
 +// If CBC is also supported, then the returned cipher.Block
 +// will also implement NewCBCEncrypter and NewCBCDecrypter.
 +func SupportsDESCipher() bool {
-+	// True for stock OpenSSL 1 w/o FIPS.
-+	// False for stock OpenSSL 3 unless the legacy provider is available.
-+	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherDES, cipherModeECB) != nil
++	switch major() {
++	case 1:
++		// DES is not part of the OpenSSL 1.x FIPS module.
++		return !FIPS() && loadCipher(cipherDES, cipherModeECB) != nil
++	default:
++		// On OpenSSL 3+ availability is decided by the algorithm probe:
++		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
++		return loadCipher(cipherDES, cipherModeECB) != nil
++	}
 +}
 +
 +// SupportsTripleDESCipher returns true if NewTripleDESCipher is supported,
@@ -4052,7 +4083,7 @@ index 00000000000000..772800a73e3389
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 new file mode 100644
-index 00000000000000..63e2e63851fc7b
+index 00000000000000..3a025ff7d40011
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
 @@ -0,0 +1,305 @@
@@ -4150,7 +4181,7 @@ index 00000000000000..63e2e63851fc7b
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
-+	case 3:
++	case 3, 4:
 +		defer func() {
 +			ossl.BN_free(p)
 +			ossl.BN_free(q)
@@ -4216,7 +4247,7 @@ index 00000000000000..63e2e63851fc7b
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_key(dsa, &by, &bx)
-+	case 3:
++	case 3, 4:
 +		defer func() {
 +			ossl.BN_clear_free(bx)
 +			ossl.BN_free(by)
@@ -4247,7 +4278,7 @@ index 00000000000000..63e2e63851fc7b
 +	switch major() {
 +	case 1:
 +		return newDSA1(params, x, y)
-+	case 3:
++	case 3, 4:
 +		return newDSA3(params, x, y)
 +	default:
 +		panic(errUnsupportedVersion())
@@ -4302,7 +4333,7 @@ index 00000000000000..63e2e63851fc7b
 +}
 +
 +func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	bld := newParamBuilder()
 +	defer bld.finalize()
@@ -4363,10 +4394,10 @@ index 00000000000000..63e2e63851fc7b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
 new file mode 100644
-index 00000000000000..ea9587b5678add
+index 00000000000000..666493af4d51d4
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,136 @@
+@@ -0,0 +1,131 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -4391,11 +4422,6 @@ index 00000000000000..ea9587b5678add
 +}
 +
 +var supportsX25519 = sync.OnceValue(func() bool {
-+	if !versionAtOrAbove(1, 1, 1) {
-+		// X25519 support was added in OpenSSL 1.1.0, but the APIs we use
-+		// to implement it were only added in 1.1.1.
-+		return false
-+	}
 +	ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_X25519, nil)
 +	if ctx != nil {
 +		ossl.EVP_PKEY_CTX_free(ctx)
@@ -4505,7 +4531,7 @@ index 00000000000000..ea9587b5678add
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 new file mode 100644
-index 00000000000000..65f669a6f77156
+index 00000000000000..212b53b9a4e583
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
 @@ -0,0 +1,340 @@
@@ -4617,7 +4643,7 @@ index 00000000000000..65f669a6f77156
 +			if bytes, err = encodeEcPoint(group, pt); err != nil {
 +				return nil, err
 +			}
-+		case 3:
++		case 3, 4:
 +			pkey = k._pkey
 +			if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
 +				return nil, err
@@ -4651,7 +4677,7 @@ index 00000000000000..65f669a6f77156
 +	switch major() {
 +	case 1:
 +		return newECDHPkey1(nid, bytes, isPrivate)
-+	case 3:
++	case 3, 4:
 +		return newECDHPkey3(nid, bytes, isPrivate)
 +	default:
 +		panic(errUnsupportedVersion())
@@ -4713,7 +4739,7 @@ index 00000000000000..65f669a6f77156
 +}
 +
 +func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	bld := newParamBuilder()
 +	defer bld.finalize()
@@ -4823,7 +4849,7 @@ index 00000000000000..65f669a6f77156
 +			if priv == nil {
 +				return nil, nil, fail("missing ECDH private key")
 +			}
-+		case 3:
++		case 3, 4:
 +			if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
 +				return nil, nil, err
 +			}
@@ -4851,7 +4877,7 @@ index 00000000000000..65f669a6f77156
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 new file mode 100644
-index 00000000000000..3157d02967aeb2
+index 00000000000000..eb7ccff87c14bd
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
 @@ -0,0 +1,219 @@
@@ -4948,7 +4974,7 @@ index 00000000000000..3157d02967aeb2
 +		}
 +		// Get Z. We don't need to free it, get0 does not increase the reference count.
 +		bd = ossl.EC_KEY_get0_private_key(key)
-+	case 3:
++	case 3, 4:
 +		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X.ptr(), &bx); err != nil {
 +			return nil, nil, nil, err
 +		}
@@ -5006,7 +5032,7 @@ index 00000000000000..3157d02967aeb2
 +	switch major() {
 +	case 1:
 +		return newECDSAKey1(nid, bx, by, bd)
-+	case 3:
++	case 3, 4:
 +		return newECDSAKey3(nid, bx, by, bd)
 +	default:
 +		panic(errUnsupportedVersion())
@@ -5038,7 +5064,7 @@ index 00000000000000..3157d02967aeb2
 +}
 +
 +func newECDSAKey3(nid int32, bx, by, bd ossl.BIGNUM_PTR) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	// Create the encoded public key public key from bx and by.
 +	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
@@ -5076,10 +5102,10 @@ index 00000000000000..3157d02967aeb2
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
 new file mode 100644
-index 00000000000000..dc0060972d3e2a
+index 00000000000000..0baf58dc756106
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,210 @@
+@@ -0,0 +1,208 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5110,14 +5136,12 @@ index 00000000000000..dc0060972d3e2a
 +var supportsEd25519 = sync.OnceValue(func() bool {
 +	switch major() {
 +	case 1:
-+		if versionAtOrAbove(1, 1, 1) {
-+			ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
-+			if ctx != nil {
-+				ossl.EVP_PKEY_CTX_free(ctx)
-+				return true
-+			}
++		ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
++		if ctx != nil {
++			ossl.EVP_PKEY_CTX_free(ctx)
++			return true
 +		}
-+	case 3:
++	case 3, 4:
 +		sig, _ := ossl.EVP_SIGNATURE_fetch(nil, _KeyTypeED25519.ptr(), nil)
 +		if sig != nil {
 +			ossl.EVP_SIGNATURE_free(sig)
@@ -5292,10 +5316,10 @@ index 00000000000000..dc0060972d3e2a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
 new file mode 100644
-index 00000000000000..5d7ddbbf02cfe1
+index 00000000000000..ff59409e3d1f76
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,620 @@
+@@ -0,0 +1,614 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -5433,33 +5457,21 @@ index 00000000000000..5d7ddbbf02cfe1
 +		hash.magic = magic512
 +		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA512_224:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha512_224()
-+			hash.magic = magic512_224
-+			hash.marshalledSize = marshaledSize512
-+		}
++		hash.md = ossl.EVP_sha512_224()
++		hash.magic = magic512_224
++		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA512_256:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha512_256()
-+			hash.magic = magic512_256
-+			hash.marshalledSize = marshaledSize512
-+		}
++		hash.md = ossl.EVP_sha512_256()
++		hash.magic = magic512_256
++		hash.marshalledSize = marshaledSize512
 +	case crypto.SHA3_224:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha3_224()
-+		}
++		hash.md = ossl.EVP_sha3_224()
 +	case crypto.SHA3_256:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha3_256()
-+		}
++		hash.md = ossl.EVP_sha3_256()
 +	case crypto.SHA3_384:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha3_384()
-+		}
++		hash.md = ossl.EVP_sha3_384()
 +	case crypto.SHA3_512:
-+		if versionAtOrAbove(1, 1, 1) {
-+			hash.md = ossl.EVP_sha3_512()
-+		}
++		hash.md = ossl.EVP_sha3_512()
 +	}
 +	if hash.md == nil {
 +		cacheMD.Store(ch, (*hashAlgorithm)(nil))
@@ -5468,7 +5480,8 @@ index 00000000000000..5d7ddbbf02cfe1
 +	hash.ch = ch
 +	hash.size = int(ossl.EVP_MD_get_size(hash.md))
 +	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
-+	if major() == 3 {
++	switch major() {
++	case 3, 4:
 +		// On OpenSSL 3, directly operating on a EVP_MD object
 +		// not created by EVP_MD_fetch has negative performance
 +		// implications, as digest operations will have
@@ -5489,7 +5502,7 @@ index 00000000000000..5d7ddbbf02cfe1
 +	switch major() {
 +	case 1:
 +		hash.provider = providerOSSLDefault
-+	case 3:
++	case 3, 4:
 +		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
 +			cname := ossl.OSSL_PROVIDER_get0_name(prov)
 +			switch goString(cname) {
@@ -5541,7 +5554,7 @@ index 00000000000000..5d7ddbbf02cfe1
 +		if _, err := ossl.EVP_PKEY_keygen(ctx, &pkey); err != nil {
 +			return nil, err
 +		}
-+	case 3:
++	case 3, 4:
 +		var err error
 +		switch id {
 +		case ossl.EVP_PKEY_RSA:
@@ -5556,6 +5569,12 @@ index 00000000000000..5d7ddbbf02cfe1
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM768.ptr())
 +		case ossl.EVP_PKEY_MLKEM_1024:
 +			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM1024.ptr())
++		case ossl.EVP_PKEY_ML_DSA_44:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA44.ptr())
++		case ossl.EVP_PKEY_ML_DSA_65:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA65.ptr())
++		case ossl.EVP_PKEY_ML_DSA_87:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA87.ptr())
 +		default:
 +			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
 +		}
@@ -5687,9 +5706,10 @@ index 00000000000000..5d7ddbbf02cfe1
 +		clabel = (*byte)(cryptoMalloc(len(label)))
 +		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
 +		var err error
-+		if major() == 3 {
++		switch major() {
++		case 3, 4:
 +			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
-+		} else {
++		default:
 +			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
 +		}
 +		if err != nil {
@@ -5885,10 +5905,8 @@ index 00000000000000..5d7ddbbf02cfe1
 +	}
 +	var pkey ossl.EVP_PKEY_PTR
 +	if _, err := ossl.EVP_PKEY_fromdata(ctx, &pkey, selection, params); err != nil {
-+		if major() == 3 && minor() <= 2 {
-+			// OpenSSL 3.0.1 and 3.0.2 have a bug where EVP_PKEY_fromdata
-+			// does not free the internally allocated EVP_PKEY on error.
-+			// See https://github.com/openssl/openssl/issues/17407.
++		//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 leak EVP_PKEY on error: https://github.com/openssl/openssl/issues/17407.
++		if major() == 3 && minor() == 0 && patch() <= 2 {
 +			ossl.EVP_PKEY_free(pkey)
 +		}
 +		return nil, err
@@ -6444,10 +6462,10 @@ index 00000000000000..d9c2c6c5f989e0
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
 new file mode 100644
-index 00000000000000..610703a870c21a
+index 00000000000000..695bf122165169
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,451 @@
+@@ -0,0 +1,441 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -6467,8 +6485,8 @@ index 00000000000000..610703a870c21a
 +func SupportsHKDF() bool {
 +	switch major() {
 +	case 1:
-+		return versionAtOrAbove(1, 1, 1)
-+	case 3:
++		return true
++	case 3, 4:
 +		_, err := fetchHKDF3()
 +		return err == nil
 +	default:
@@ -6481,7 +6499,7 @@ index 00000000000000..610703a870c21a
 +	switch major() {
 +	case 1:
 +		return false
-+	case 3:
++	case 3, 4:
 +		// TLS13-KDF is available in OpenSSL 3.0.0 and later.
 +		_, err := fetchTLS13_KDF()
 +		return err == nil
@@ -6619,7 +6637,7 @@ index 00000000000000..610703a870c21a
 +			return nil, err
 +		}
 +		return out[:keylen], nil
-+	case 3:
++	case 3, 4:
 +		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
 +		if err != nil {
 +			return nil, err
@@ -6668,7 +6686,7 @@ index 00000000000000..610703a870c21a
 +		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
 +			return nil, err
 +		}
-+	case 3:
++	case 3, 4:
 +		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
@@ -6735,7 +6753,7 @@ index 00000000000000..610703a870c21a
 +		c := &hkdf1{ctx: ctx, hashLen: size}
 +		runtime.SetFinalizer(c, (*hkdf1).finalize)
 +		return c, nil
-+	case 3:
++	case 3, 4:
 +		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
@@ -6765,7 +6783,7 @@ index 00000000000000..610703a870c21a
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchTLS13_KDF = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS13_KDF.ptr(), nil)
 +	if err != nil {
@@ -6776,7 +6794,7 @@ index 00000000000000..610703a870c21a
 +
 +// newTLS13KDFExpandCtx3 fetches the "TLS13-KDF" for TLS 1.3 handshakes.
 +func newTLS13KDFExpandCtx3(md ossl.EVP_MD_PTR, label, context, pseudorandomKey []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := fetchTLS13_KDF()
 +	if err != nil {
@@ -6800,9 +6818,7 @@ index 00000000000000..610703a870c21a
 +	bld.addOctetString(_OSSL_KDF_PARAM_PREFIX, []byte("tls13 "))
 +	bld.addOctetString(_OSSL_KDF_PARAM_LABEL, label)
 +	bld.addOctetString(_OSSL_KDF_PARAM_DATA, context)
-+	if len(pseudorandomKey) > 0 {
-+		bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
-+	}
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
 +
 +	params, err := bld.build()
 +	if err != nil {
@@ -6820,7 +6836,7 @@ index 00000000000000..610703a870c21a
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchHKDF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_HKDF.ptr(), nil)
 +	if err != nil {
@@ -6831,7 +6847,7 @@ index 00000000000000..610703a870c21a
 +
 +// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
 +func newHKDFCtx3(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := fetchHKDF3()
 +	if err != nil {
@@ -6851,18 +6867,10 @@ index 00000000000000..610703a870c21a
 +	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
 +	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
-+	if len(secret) > 0 {
-+		bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
-+	}
-+	if len(salt) > 0 {
-+		bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
-+	}
-+	if len(pseudorandomKey) > 0 {
-+		bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
-+	}
-+	if len(info) > 0 {
-+		bld.addOctetString(_OSSL_KDF_PARAM_INFO, info)
-+	}
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
++	bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
++	bld.addOctetString(_OSSL_KDF_PARAM_INFO, info)
 +	params, err := bld.build()
 +	if err != nil {
 +		return ctx, err
@@ -6901,7 +6909,7 @@ index 00000000000000..610703a870c21a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 new file mode 100644
-index 00000000000000..fec80f30b1c94f
+index 00000000000000..7f629c2f74a4db
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
 @@ -0,0 +1,278 @@
@@ -6950,7 +6958,7 @@ index 00000000000000..fec80f30b1c94f
 +			return nil
 +		}
 +		hmac.ctx1 = ctx
-+	case 3:
++	case 3, 4:
 +		ctx := newHMAC3(key, md)
 +		if ctx.ctx == nil {
 +			return nil
@@ -7056,12 +7064,12 @@ index 00000000000000..fec80f30b1c94f
 +		panic(err)
 +	}
 +	var hkey []byte
-+	if minor() == 0 && patch() <= 2 {
++	//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 EVP_MAC_init does not reset without a key: https://github.com/openssl/openssl/issues/17811.
++	if major() == 3 && minor() == 0 && patch() <= 2 {
 +		// EVP_MAC_init only resets the ctx internal state if a key is passed
 +		// when using OpenSSL 3.0.0, 3.0.1, and 3.0.2. Save a copy of the key
 +		// in the context so Reset can use it later. New OpenSSL versions
 +		// do not have this issue so it isn't necessary to save the key.
-+		// See https://github.com/openssl/openssl/issues/17811.
 +		hkey = make([]byte, len(key))
 +		copy(hkey, key)
 +	}
@@ -7074,7 +7082,7 @@ index 00000000000000..fec80f30b1c94f
 +		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, nil, nil); err != nil {
 +			panic(err)
 +		}
-+	case 3:
++	case 3, 4:
 +		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, h.ctx3.key, nil); err != nil {
 +			panic(err)
 +		}
@@ -7099,7 +7107,7 @@ index 00000000000000..fec80f30b1c94f
 +		switch major() {
 +		case 1:
 +			ossl.HMAC_Update(h.ctx1.ctx, p)
-+		case 3:
++		case 3, 4:
 +			ossl.EVP_MAC_update(h.ctx3.ctx, p)
 +		default:
 +			panic(errUnsupportedVersion())
@@ -7133,7 +7141,7 @@ index 00000000000000..fec80f30b1c94f
 +			panic(err)
 +		}
 +		ossl.HMAC_Final(ctx2, h.sum[:h.size], nil)
-+	case 3:
++	case 3, 4:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
@@ -7165,7 +7173,7 @@ index 00000000000000..fec80f30b1c94f
 +		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
 +		return cl, nil
 +
-+	case 3:
++	case 3, 4:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
@@ -12163,17 +12171,33 @@ index 00000000000000..4b8fd49edd2d40
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
 new file mode 100644
-index 00000000000000..ef1d99652e3bae
+index 00000000000000..f7678a67c0231a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
-@@ -0,0 +1,14 @@
+@@ -0,0 +1,30 @@
 +package ossl
 +
 +/*
 +#include "zossl.h"
 +
++// Force mkcgo_err_retrieve to be stack-guarded,
++// even when it doesn't actually need it.
++// This is necessary to ensure Go binaries built
++// with -fstack-protector-strong comply with BinSkim BA3003,
++// so that at least one function in the binary uses __stack_chk_guard.
++// See https://github.com/microsoft/go/issues/2240.
++
++#define MKCGO_STACK_PROTECT
++
++#if defined(__has_attribute)
++#if __has_attribute(stack_protect)
++#undef MKCGO_STACK_PROTECT
++#define MKCGO_STACK_PROTECT __attribute__((stack_protect))
++#endif
++#endif
++
 +// mkcgo_err_retrieve retrieves the error state from OpenSSL.
-+uintptr_t mkcgo_err_retrieve() {
++uintptr_t MKCGO_STACK_PROTECT mkcgo_err_retrieve() {
 +	// BIO operations using BIO_s_mem should not fail.
 +	_BIO_PTR bio = _mkcgo_BIO_new(_mkcgo_BIO_s_mem(), NULL);
 +	_mkcgo_ERR_print_errors(bio);
@@ -12270,10 +12294,10 @@ index 00000000000000..9d38464e9fb964
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
 new file mode 100644
-index 00000000000000..ef675266fc2f0d
+index 00000000000000..7c71f0d811fe80
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,434 @@
+@@ -0,0 +1,442 @@
 +// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
 +// OpenSSL C API. Run "go generate ." to regenerate the bindings.
 +// Do not include this file, import "zossl.h" instead.
@@ -12329,6 +12353,9 @@ index 00000000000000..ef675266fc2f0d
 +	_EVP_PKEY_DSA         = 116,
 +    _EVP_PKEY_MLKEM_768  = 1455,
 +    _EVP_PKEY_MLKEM_1024 = 1456,
++    _EVP_PKEY_ML_DSA_44  = 1457,
++    _EVP_PKEY_ML_DSA_65  = 1458,
++    _EVP_PKEY_ML_DSA_87  = 1459,
 +	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
 +	_EVP_MAX_MD_SIZE    = 64,
 +
@@ -12358,6 +12385,9 @@ index 00000000000000..ef675266fc2f0d
 +
 +	_NID_ML_KEM_768 = 1455,
 +	_NID_ML_KEM_1024 = 1456,
++	_NID_ML_DSA_44 = 1457,
++	_NID_ML_DSA_65 = 1458,
++	_NID_ML_DSA_87 = 1459,
 +
 +	_RSA_PKCS1_PADDING                 = 1,
 +	_RSA_NO_PADDING                    = 3,
@@ -12413,10 +12443,10 @@ index 00000000000000..ef675266fc2f0d
 +typedef int point_conversion_form_t;
 +
 +// Tags used by mkcgo to determine which OpenSSL version each function is available in:
-+// - no tag: OpenSSL 1.0 or later
++// - no tag: available in all supported versions (OpenSSL 1.1.1+)
 +// - legacy_1: Only OpenSSL 1
 +// - 3: OpenSSL 3.0 or later
-+// - 111: OpenSSL 1.1.1 or later
++// - 33: OpenSSL 3.3 or later
 +
 +// The noescape/nocallback attributes are performance optimizations.
 +// Only add functions that have been observed to benefit from these
@@ -12479,16 +12509,16 @@ index 00000000000000..ef675266fc2f0d
 +const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
 +const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
 +const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((tag("111"),noerror));
-+const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((tag("111"),noerror));
++const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((noerror));
 +
 +_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
 +void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
-+int EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR ctx, int cmd, int p1, void *p2) __attribute__((tag("111")));
++int EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR ctx, int cmd, int p1, void *p2);
 +int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
 +const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
 +const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
@@ -12500,13 +12530,13 @@ index 00000000000000..ef675266fc2f0d
 +int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
 +int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice("md","s")));
 +int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t mdlen) __attribute__((tag("33"),noescape,nocallback,slice("md","mdlen")));
-+int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t outlen) __attribute__((tag("33"),noescape,nocallback,slice("out","outlen")));
-+int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),noescape,nocallback,slice("sigret","siglen"),slice("tbs","tbslen")));
++int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t outlen) __attribute__((tag("33"),optional,noescape,nocallback,slice("out","outlen")));
++int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((noescape,nocallback,slice("sigret","siglen"),slice("tbs","tbslen")));
 +int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
 +int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen) __attribute__((slice("sig","siglen")));
 +int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
 +int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen) __attribute__((slice("sig","siglen")));
-+int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((tag("111"),slice("sigret","siglen"),slice("tbs","tbslen")));
++int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sigret","siglen"),slice("tbs","tbslen")));
 +
 +// HMAC API
 +int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
@@ -12556,8 +12586,8 @@ index 00000000000000..ef675266fc2f0d
 +
 +// EVP_PKEY API
 +_EVP_PKEY_PTR EVP_PKEY_new(void);
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111"),slice("key","keylen")));
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((tag("111"),slice("key","keylen")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
 +int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
 +int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
 +void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
@@ -12572,8 +12602,8 @@ index 00000000000000..ef675266fc2f0d
 +int EVP_PKEY_up_ref(_EVP_PKEY_PTR key);
 +int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
 +int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int labellen) __attribute__((tag("3"),slice("label","labellen")));
-+int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *publen) __attribute__((tag("111"),noescape,nocallback,slice("pub","publen")));
-+int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *privlen) __attribute__((tag("111"),noescape,nocallback,slice("priv","privlen")));
++int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *publen) __attribute__((noescape,nocallback,slice("pub","publen")));
++int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *privlen) __attribute__((noescape,nocallback,slice("priv","privlen")));
 +int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
 +int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
@@ -12599,12 +12629,14 @@ index 00000000000000..ef675266fc2f0d
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
 +_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
 +
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
 +_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
 +void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
 +int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
++int EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
 +int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
 +int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
 +int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
@@ -12700,7 +12732,7 @@ index 00000000000000..ef675266fc2f0d
 +const char *OBJ_nid2sn(int n) __attribute__((noerror));
 +
 +// EVP KEM API for ML-KEM (OpenSSL 3.x)
-+_EVP_KEYMGMT_PTR EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++_EVP_KEYMGMT_PTR EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3"),optional));
 +void EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR keymgmt) __attribute__((tag("3")));
 +int EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
 +int EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *wrappedkey, size_t *wrappedkeylen, unsigned char *genkey, size_t *genkeylen) __attribute__((tag("3")));
@@ -13012,10 +13044,10 @@ index 00000000000000..0a087c1514bd8b
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
 new file mode 100644
-index 00000000000000..c284c017339d4a
+index 00000000000000..b4567cb95136b1
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2054 @@
+@@ -0,0 +1,2071 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#include <stddef.h>
@@ -13145,6 +13177,7 @@ index 00000000000000..c284c017339d4a
 +int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
 +int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
 +int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
++int (*_g_EVP_PKEY_CTX_set_params)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
 +_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
 +int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
 +int (*_g_EVP_PKEY_decapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
@@ -13313,15 +13346,18 @@ index 00000000000000..c284c017339d4a
 +	__mkcgo__dlsym(EVP_DigestFinal_ex)
 +	__mkcgo__dlsym(EVP_DigestInit)
 +	__mkcgo__dlsym(EVP_DigestInit_ex)
++	__mkcgo__dlsym(EVP_DigestSign)
 +	__mkcgo__dlsym(EVP_DigestSignFinal)
 +	__mkcgo__dlsym(EVP_DigestSignInit)
 +	__mkcgo__dlsym(EVP_DigestUpdate)
++	__mkcgo__dlsym(EVP_DigestVerify)
 +	__mkcgo__dlsym(EVP_DigestVerifyFinal)
 +	__mkcgo__dlsym(EVP_DigestVerifyInit)
 +	__mkcgo__dlsym(EVP_EncryptFinal_ex)
 +	__mkcgo__dlsym(EVP_EncryptInit_ex)
 +	__mkcgo__dlsym(EVP_EncryptUpdate)
 +	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
++	__mkcgo__dlsym(EVP_MD_CTX_ctrl)
 +	__mkcgo__dlsym(EVP_MD_CTX_free)
 +	__mkcgo__dlsym(EVP_MD_CTX_new)
 +	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
@@ -13336,9 +13372,13 @@ index 00000000000000..c284c017339d4a
 +	__mkcgo__dlsym(EVP_PKEY_encrypt)
 +	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
 +	__mkcgo__dlsym(EVP_PKEY_free)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
 +	__mkcgo__dlsym(EVP_PKEY_keygen)
 +	__mkcgo__dlsym(EVP_PKEY_keygen_init)
 +	__mkcgo__dlsym(EVP_PKEY_new)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
 +	__mkcgo__dlsym(EVP_PKEY_paramgen)
 +	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
 +	__mkcgo__dlsym(EVP_PKEY_sign)
@@ -13372,7 +13412,13 @@ index 00000000000000..c284c017339d4a
 +	__mkcgo__dlsym(EVP_sha224)
 +	__mkcgo__dlsym(EVP_sha256)
 +	__mkcgo__dlsym(EVP_sha384)
++	__mkcgo__dlsym(EVP_sha3_224)
++	__mkcgo__dlsym(EVP_sha3_256)
++	__mkcgo__dlsym(EVP_sha3_384)
++	__mkcgo__dlsym(EVP_sha3_512)
 +	__mkcgo__dlsym(EVP_sha512)
++	__mkcgo__dlsym(EVP_sha512_224)
++	__mkcgo__dlsym(EVP_sha512_256)
 +	__mkcgo__dlsym(OBJ_nid2sn)
 +	__mkcgo__dlsym(OPENSSL_init)
 +	__mkcgo__dlsym(OPENSSL_init_crypto)
@@ -13420,15 +13466,18 @@ index 00000000000000..c284c017339d4a
 +	_g_EVP_DigestFinal_ex = NULL;
 +	_g_EVP_DigestInit = NULL;
 +	_g_EVP_DigestInit_ex = NULL;
++	_g_EVP_DigestSign = NULL;
 +	_g_EVP_DigestSignFinal = NULL;
 +	_g_EVP_DigestSignInit = NULL;
 +	_g_EVP_DigestUpdate = NULL;
++	_g_EVP_DigestVerify = NULL;
 +	_g_EVP_DigestVerifyFinal = NULL;
 +	_g_EVP_DigestVerifyInit = NULL;
 +	_g_EVP_EncryptFinal_ex = NULL;
 +	_g_EVP_EncryptInit_ex = NULL;
 +	_g_EVP_EncryptUpdate = NULL;
 +	_g_EVP_MD_CTX_copy_ex = NULL;
++	_g_EVP_MD_CTX_ctrl = NULL;
 +	_g_EVP_MD_CTX_free = NULL;
 +	_g_EVP_MD_CTX_new = NULL;
 +	_g_EVP_PKEY_CTX_ctrl = NULL;
@@ -13443,9 +13492,13 @@ index 00000000000000..c284c017339d4a
 +	_g_EVP_PKEY_encrypt = NULL;
 +	_g_EVP_PKEY_encrypt_init = NULL;
 +	_g_EVP_PKEY_free = NULL;
++	_g_EVP_PKEY_get_raw_private_key = NULL;
++	_g_EVP_PKEY_get_raw_public_key = NULL;
 +	_g_EVP_PKEY_keygen = NULL;
 +	_g_EVP_PKEY_keygen_init = NULL;
 +	_g_EVP_PKEY_new = NULL;
++	_g_EVP_PKEY_new_raw_private_key = NULL;
++	_g_EVP_PKEY_new_raw_public_key = NULL;
 +	_g_EVP_PKEY_paramgen = NULL;
 +	_g_EVP_PKEY_paramgen_init = NULL;
 +	_g_EVP_PKEY_sign = NULL;
@@ -13479,7 +13532,13 @@ index 00000000000000..c284c017339d4a
 +	_g_EVP_sha224 = NULL;
 +	_g_EVP_sha256 = NULL;
 +	_g_EVP_sha384 = NULL;
++	_g_EVP_sha3_224 = NULL;
++	_g_EVP_sha3_256 = NULL;
++	_g_EVP_sha3_384 = NULL;
++	_g_EVP_sha3_512 = NULL;
 +	_g_EVP_sha512 = NULL;
++	_g_EVP_sha512_224 = NULL;
++	_g_EVP_sha512_256 = NULL;
 +	_g_OBJ_nid2sn = NULL;
 +	_g_OPENSSL_init = NULL;
 +	_g_OPENSSL_init_crypto = NULL;
@@ -13488,38 +13547,6 @@ index 00000000000000..c284c017339d4a
 +	_g_RAND_bytes = NULL;
 +}
 +
-+void __mkcgo_load_111(void* handle) {
-+	__mkcgo__dlsym(EVP_DigestSign)
-+	__mkcgo__dlsym(EVP_DigestVerify)
-+	__mkcgo__dlsym(EVP_MD_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
-+	__mkcgo__dlsym(EVP_sha3_224)
-+	__mkcgo__dlsym(EVP_sha3_256)
-+	__mkcgo__dlsym(EVP_sha3_384)
-+	__mkcgo__dlsym(EVP_sha3_512)
-+	__mkcgo__dlsym(EVP_sha512_224)
-+	__mkcgo__dlsym(EVP_sha512_256)
-+}
-+
-+void __mkcgo_unload_111() {
-+	_g_EVP_DigestSign = NULL;
-+	_g_EVP_DigestVerify = NULL;
-+	_g_EVP_MD_CTX_ctrl = NULL;
-+	_g_EVP_PKEY_get_raw_private_key = NULL;
-+	_g_EVP_PKEY_get_raw_public_key = NULL;
-+	_g_EVP_PKEY_new_raw_private_key = NULL;
-+	_g_EVP_PKEY_new_raw_public_key = NULL;
-+	_g_EVP_sha3_224 = NULL;
-+	_g_EVP_sha3_256 = NULL;
-+	_g_EVP_sha3_384 = NULL;
-+	_g_EVP_sha3_512 = NULL;
-+	_g_EVP_sha512_224 = NULL;
-+	_g_EVP_sha512_256 = NULL;
-+}
-+
 +void __mkcgo_load_3(void* handle) {
 +	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
 +	__mkcgo__dlsym(EVP_CIPHER_fetch)
@@ -13532,7 +13559,7 @@ index 00000000000000..c284c017339d4a
 +	__mkcgo__dlsym(EVP_KDF_derive)
 +	__mkcgo__dlsym(EVP_KDF_fetch)
 +	__mkcgo__dlsym(EVP_KDF_free)
-+	__mkcgo__dlsym(EVP_KEYMGMT_fetch)
++	__mkcgo__dlsym_nocheck(EVP_KEYMGMT_fetch, EVP_KEYMGMT_fetch)
 +	__mkcgo__dlsym(EVP_KEYMGMT_free)
 +	__mkcgo__dlsym(EVP_MAC_CTX_dup)
 +	__mkcgo__dlsym(EVP_MAC_CTX_free)
@@ -13560,6 +13587,7 @@ index 00000000000000..c284c017339d4a
 +	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
 +	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
 +	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_params)
 +	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
 +	__mkcgo__dlsym(EVP_PKEY_decapsulate)
 +	__mkcgo__dlsym(EVP_PKEY_decapsulate_init)
@@ -13633,6 +13661,7 @@ index 00000000000000..c284c017339d4a
 +	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
 +	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
 +	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
++	_g_EVP_PKEY_CTX_set_params = NULL;
 +	_g_EVP_PKEY_Q_keygen = NULL;
 +	_g_EVP_PKEY_decapsulate = NULL;
 +	_g_EVP_PKEY_decapsulate_init = NULL;
@@ -13668,7 +13697,7 @@ index 00000000000000..c284c017339d4a
 +
 +void __mkcgo_load_33(void* handle) {
 +	__mkcgo__dlsym(EVP_DigestFinalXOF)
-+	__mkcgo__dlsym(EVP_DigestSqueeze)
++	__mkcgo__dlsym_nocheck(EVP_DigestSqueeze, EVP_DigestSqueeze)
 +}
 +
 +void __mkcgo_unload_33() {
@@ -14150,6 +14179,10 @@ index 00000000000000..c284c017339d4a
 +	return _ret;
 +}
 +
++int _mkcgo_available_EVP_DigestSqueeze() {
++	return _g_EVP_DigestSqueeze != NULL;
++}
++
 +int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
 +	int _ret = _g_EVP_DigestSqueeze(_arg0, _arg1, _arg2);
 +	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
@@ -14236,6 +14269,10 @@ index 00000000000000..c284c017339d4a
 +	_g_EVP_KDF_free(_arg0);
 +}
 +
++int _mkcgo_available_EVP_KEYMGMT_fetch() {
++	return _g_EVP_KEYMGMT_fetch != NULL;
++}
++
 +_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_KEYMGMT_PTR _ret = _g_EVP_KEYMGMT_fetch(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
@@ -14432,6 +14469,12 @@ index 00000000000000..c284c017339d4a
 +	return _ret;
 +}
 +
++int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
@@ -14444,6 +14487,12 @@ index 00000000000000..c284c017339d4a
 +	return _ret;
 +}
 +
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
 +	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
 +	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
@@ -15072,10 +15121,10 @@ index 00000000000000..c284c017339d4a
 +
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
 new file mode 100644
-index 00000000000000..39b0a728fdd700
+index 00000000000000..9f39419e8d14ae
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,67 @@
+@@ -0,0 +1,73 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -15101,6 +15150,9 @@ index 00000000000000..39b0a728fdd700
 +	EVP_PKEY_DSA                        = 116
 +	EVP_PKEY_MLKEM_768                  = 1455
 +	EVP_PKEY_MLKEM_1024                 = 1456
++	EVP_PKEY_ML_DSA_44                  = 1457
++	EVP_PKEY_ML_DSA_65                  = 1458
++	EVP_PKEY_ML_DSA_87                  = 1459
 +	EVP_PKEY_OP_DERIVE                  = (1 << 10)
 +	EVP_MAX_MD_SIZE                     = 64
 +	EVP_PKEY_PUBLIC_KEY                 = 0x86
@@ -15123,6 +15175,9 @@ index 00000000000000..39b0a728fdd700
 +	NID_secp521r1                       = 716
 +	NID_ML_KEM_768                      = 1455
 +	NID_ML_KEM_1024                     = 1456
++	NID_ML_DSA_44                       = 1457
++	NID_ML_DSA_65                       = 1458
++	NID_ML_DSA_87                       = 1459
 +	RSA_PKCS1_PADDING                   = 1
 +	RSA_NO_PADDING                      = 3
 +	RSA_PKCS1_OAEP_PADDING              = 4
@@ -15145,10 +15200,10 @@ index 00000000000000..39b0a728fdd700
 +)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
 new file mode 100644
-index 00000000000000..c65571c283503c
+index 00000000000000..5e172b625edf3a
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,363 @@
+@@ -0,0 +1,371 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +#ifndef MKCGO_H // only include this header once
@@ -15208,6 +15263,9 @@ index 00000000000000..c65571c283503c
 +	_EVP_PKEY_DSA = 116,
 +	_EVP_PKEY_MLKEM_768 = 1455,
 +	_EVP_PKEY_MLKEM_1024 = 1456,
++	_EVP_PKEY_ML_DSA_44 = 1457,
++	_EVP_PKEY_ML_DSA_65 = 1458,
++	_EVP_PKEY_ML_DSA_87 = 1459,
 +	_EVP_PKEY_OP_DERIVE = (1 << 10),
 +	_EVP_MAX_MD_SIZE = 64,
 +	_EVP_PKEY_PUBLIC_KEY = 0x86,
@@ -15230,6 +15288,9 @@ index 00000000000000..c65571c283503c
 +	_NID_secp521r1 = 716,
 +	_NID_ML_KEM_768 = 1455,
 +	_NID_ML_KEM_1024 = 1456,
++	_NID_ML_DSA_44 = 1457,
++	_NID_ML_DSA_65 = 1458,
++	_NID_ML_DSA_87 = 1459,
 +	_RSA_PKCS1_PADDING = 1,
 +	_RSA_NO_PADDING = 3,
 +	_RSA_PKCS1_OAEP_PADDING = 4,
@@ -15254,8 +15315,6 @@ index 00000000000000..c65571c283503c
 +uintptr_t mkcgo_err_retrieve();
 +void __mkcgo_load_(void* handle);
 +void __mkcgo_unload_();
-+void __mkcgo_load_111(void* handle);
-+void __mkcgo_unload_111();
 +void __mkcgo_load_3(void* handle);
 +void __mkcgo_unload_3();
 +void __mkcgo_load_33(void* handle);
@@ -15269,6 +15328,8 @@ index 00000000000000..c65571c283503c
 +void __mkcgo_load_version(void* handle);
 +void __mkcgo_unload_version();
 +
++int _mkcgo_available_EVP_DigestSqueeze();
++int _mkcgo_available_EVP_KEYMGMT_fetch();
 +int _mkcgo_available_EVP_chacha20_poly1305();
 +int _mkcgo_available_OPENSSL_version_major();
 +int _mkcgo_available_OPENSSL_version_minor();
@@ -15389,8 +15450,10 @@ index 00000000000000..c65571c283503c
 +int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
 +int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
 +int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, uintptr_t *);
 +_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
@@ -15514,10 +15577,10 @@ index 00000000000000..c65571c283503c
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
 new file mode 100644
-index 00000000000000..7e7063d31539c8
+index 00000000000000..9faa8e16a69cf6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1486 @@
+@@ -0,0 +1,1502 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +package ossl
@@ -15567,10 +15630,14 @@ index 00000000000000..7e7063d31539c8
 +#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
 +#cgo noescape _mkcgo_EVP_MD_CTX_set_params
 +#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
++#cgo noescape _mkcgo_EVP_PKEY_CTX_set_params
++#cgo nocallback _mkcgo_EVP_PKEY_CTX_set_params
 +#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_EC
 +#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_EC
 +#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_ED25519
 +#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_ED25519
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLDSA
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLDSA
 +#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLKEM
 +#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLKEM
 +#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_RSA
@@ -15641,14 +15708,6 @@ index 00000000000000..7e7063d31539c8
 +	C.__mkcgo_unload_()
 +}
 +
-+func MkcgoLoad_111(handle unsafe.Pointer) {
-+	C.__mkcgo_load_111(handle)
-+}
-+
-+func MkcgoUnload_111() {
-+	C.__mkcgo_unload_111()
-+}
-+
 +func MkcgoLoad_3(handle unsafe.Pointer) {
 +	C.__mkcgo_load_3(handle)
 +}
@@ -16058,6 +16117,10 @@ index 00000000000000..7e7063d31539c8
 +	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", uintptr(_err))
 +}
 +
++func EVP_DigestSqueeze_Available() bool {
++	return C._mkcgo_available_EVP_DigestSqueeze() != 0
++}
++
 +func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_DigestSqueeze(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), C.size_t(len(out)), mkcgoNoEscape(&_err))
@@ -16150,6 +16213,10 @@ index 00000000000000..7e7063d31539c8
 +	C._mkcgo_EVP_KDF_free(kdf)
 +}
 +
++func EVP_KEYMGMT_fetch_Available() bool {
++	return C._mkcgo_available_EVP_KEYMGMT_fetch() != 0
++}
++
 +func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_KEYMGMT_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
@@ -16346,6 +16413,12 @@ index 00000000000000..7e7063d31539c8
 +	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", uintptr(_err))
 +}
 +
++func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_params", uintptr(_err))
++}
++
 +func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
@@ -16358,6 +16431,12 @@ index 00000000000000..7e7063d31539c8
 +	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", uintptr(_err))
 +}
 +
++func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLDSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", uintptr(_err))
++}
++
 +func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
 +	var _err C.uintptr_t
 +	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLKEM(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
@@ -17006,10 +17085,10 @@ index 00000000000000..7e7063d31539c8
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..1f3ab498325710
+index 00000000000000..9940275b3749ff
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2450 @@
+@@ -0,0 +1,2468 @@
 +// Code generated by mkcgo. DO NOT EDIT.
 +
 +//go:build !cgo
@@ -17557,6 +17636,10 @@ index 00000000000000..1f3ab498325710
 +	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
 +}
 +
++func EVP_DigestSqueeze_Available() bool {
++	return _mkcgo_EVP_DigestSqueeze != 0
++}
++
 +var _mkcgo_EVP_DigestSqueeze uintptr
 +
 +func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
@@ -17679,6 +17762,10 @@ index 00000000000000..1f3ab498325710
 +	syscallN(0, _mkcgo_EVP_KDF_free, uintptr(kdf))
 +}
 +
++func EVP_KEYMGMT_fetch_Available() bool {
++	return _mkcgo_EVP_KEYMGMT_fetch != 0
++}
++
 +var _mkcgo_EVP_KEYMGMT_fetch uintptr
 +
 +func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
@@ -17952,6 +18039,14 @@ index 00000000000000..1f3ab498325710
 +	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
 +}
 +
++var _mkcgo_EVP_PKEY_CTX_set_params uintptr
++
++func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_params", _err)
++}
++
 +var _mkcgo_EVP_PKEY_Q_keygen uintptr
 +
 +func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
@@ -17971,6 +18066,12 @@ index 00000000000000..1f3ab498325710
 +	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
 +}
 +
++func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", _err)
++}
++
 +func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
 +	var _err uintptr
 +	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
@@ -18958,15 +19059,18 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_DigestFinal_ex = dlsym(handle, "EVP_DigestFinal_ex\x00", false)
 +	_mkcgo_EVP_DigestInit = dlsym(handle, "EVP_DigestInit\x00", false)
 +	_mkcgo_EVP_DigestInit_ex = dlsym(handle, "EVP_DigestInit_ex\x00", false)
++	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
 +	_mkcgo_EVP_DigestSignFinal = dlsym(handle, "EVP_DigestSignFinal\x00", false)
 +	_mkcgo_EVP_DigestSignInit = dlsym(handle, "EVP_DigestSignInit\x00", false)
 +	_mkcgo_EVP_DigestUpdate = dlsym(handle, "EVP_DigestUpdate\x00", false)
++	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
 +	_mkcgo_EVP_DigestVerifyFinal = dlsym(handle, "EVP_DigestVerifyFinal\x00", false)
 +	_mkcgo_EVP_DigestVerifyInit = dlsym(handle, "EVP_DigestVerifyInit\x00", false)
 +	_mkcgo_EVP_EncryptFinal_ex = dlsym(handle, "EVP_EncryptFinal_ex\x00", false)
 +	_mkcgo_EVP_EncryptInit_ex = dlsym(handle, "EVP_EncryptInit_ex\x00", false)
 +	_mkcgo_EVP_EncryptUpdate = dlsym(handle, "EVP_EncryptUpdate\x00", false)
 +	_mkcgo_EVP_MD_CTX_copy_ex = dlsym(handle, "EVP_MD_CTX_copy_ex\x00", false)
++	_mkcgo_EVP_MD_CTX_ctrl = dlsym(handle, "EVP_MD_CTX_ctrl\x00", false)
 +	_mkcgo_EVP_MD_CTX_free = dlsym(handle, "EVP_MD_CTX_free\x00", false)
 +	_mkcgo_EVP_MD_CTX_new = dlsym(handle, "EVP_MD_CTX_new\x00", false)
 +	_mkcgo_EVP_PKEY_CTX_ctrl = dlsym(handle, "EVP_PKEY_CTX_ctrl\x00", false)
@@ -18981,9 +19085,13 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_PKEY_encrypt = dlsym(handle, "EVP_PKEY_encrypt\x00", false)
 +	_mkcgo_EVP_PKEY_encrypt_init = dlsym(handle, "EVP_PKEY_encrypt_init\x00", false)
 +	_mkcgo_EVP_PKEY_free = dlsym(handle, "EVP_PKEY_free\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
 +	_mkcgo_EVP_PKEY_keygen = dlsym(handle, "EVP_PKEY_keygen\x00", false)
 +	_mkcgo_EVP_PKEY_keygen_init = dlsym(handle, "EVP_PKEY_keygen_init\x00", false)
 +	_mkcgo_EVP_PKEY_new = dlsym(handle, "EVP_PKEY_new\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_public_key = dlsym(handle, "EVP_PKEY_new_raw_public_key\x00", false)
 +	_mkcgo_EVP_PKEY_paramgen = dlsym(handle, "EVP_PKEY_paramgen\x00", false)
 +	_mkcgo_EVP_PKEY_paramgen_init = dlsym(handle, "EVP_PKEY_paramgen_init\x00", false)
 +	_mkcgo_EVP_PKEY_sign = dlsym(handle, "EVP_PKEY_sign\x00", false)
@@ -19017,7 +19125,13 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_sha224 = dlsym(handle, "EVP_sha224\x00", false)
 +	_mkcgo_EVP_sha256 = dlsym(handle, "EVP_sha256\x00", false)
 +	_mkcgo_EVP_sha384 = dlsym(handle, "EVP_sha384\x00", false)
++	_mkcgo_EVP_sha3_224 = dlsym(handle, "EVP_sha3_224\x00", false)
++	_mkcgo_EVP_sha3_256 = dlsym(handle, "EVP_sha3_256\x00", false)
++	_mkcgo_EVP_sha3_384 = dlsym(handle, "EVP_sha3_384\x00", false)
++	_mkcgo_EVP_sha3_512 = dlsym(handle, "EVP_sha3_512\x00", false)
 +	_mkcgo_EVP_sha512 = dlsym(handle, "EVP_sha512\x00", false)
++	_mkcgo_EVP_sha512_224 = dlsym(handle, "EVP_sha512_224\x00", false)
++	_mkcgo_EVP_sha512_256 = dlsym(handle, "EVP_sha512_256\x00", false)
 +	_mkcgo_OBJ_nid2sn = dlsym(handle, "OBJ_nid2sn\x00", false)
 +	_mkcgo_OPENSSL_init = dlsym(handle, "OPENSSL_init\x00", false)
 +	_mkcgo_OPENSSL_init_crypto = dlsym(handle, "OPENSSL_init_crypto\x00", false)
@@ -19065,15 +19179,18 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_DigestFinal_ex = 0
 +	_mkcgo_EVP_DigestInit = 0
 +	_mkcgo_EVP_DigestInit_ex = 0
++	_mkcgo_EVP_DigestSign = 0
 +	_mkcgo_EVP_DigestSignFinal = 0
 +	_mkcgo_EVP_DigestSignInit = 0
 +	_mkcgo_EVP_DigestUpdate = 0
++	_mkcgo_EVP_DigestVerify = 0
 +	_mkcgo_EVP_DigestVerifyFinal = 0
 +	_mkcgo_EVP_DigestVerifyInit = 0
 +	_mkcgo_EVP_EncryptFinal_ex = 0
 +	_mkcgo_EVP_EncryptInit_ex = 0
 +	_mkcgo_EVP_EncryptUpdate = 0
 +	_mkcgo_EVP_MD_CTX_copy_ex = 0
++	_mkcgo_EVP_MD_CTX_ctrl = 0
 +	_mkcgo_EVP_MD_CTX_free = 0
 +	_mkcgo_EVP_MD_CTX_new = 0
 +	_mkcgo_EVP_PKEY_CTX_ctrl = 0
@@ -19088,9 +19205,13 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_PKEY_encrypt = 0
 +	_mkcgo_EVP_PKEY_encrypt_init = 0
 +	_mkcgo_EVP_PKEY_free = 0
++	_mkcgo_EVP_PKEY_get_raw_private_key = 0
++	_mkcgo_EVP_PKEY_get_raw_public_key = 0
 +	_mkcgo_EVP_PKEY_keygen = 0
 +	_mkcgo_EVP_PKEY_keygen_init = 0
 +	_mkcgo_EVP_PKEY_new = 0
++	_mkcgo_EVP_PKEY_new_raw_private_key = 0
++	_mkcgo_EVP_PKEY_new_raw_public_key = 0
 +	_mkcgo_EVP_PKEY_paramgen = 0
 +	_mkcgo_EVP_PKEY_paramgen_init = 0
 +	_mkcgo_EVP_PKEY_sign = 0
@@ -19124,7 +19245,13 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_sha224 = 0
 +	_mkcgo_EVP_sha256 = 0
 +	_mkcgo_EVP_sha384 = 0
++	_mkcgo_EVP_sha3_224 = 0
++	_mkcgo_EVP_sha3_256 = 0
++	_mkcgo_EVP_sha3_384 = 0
++	_mkcgo_EVP_sha3_512 = 0
 +	_mkcgo_EVP_sha512 = 0
++	_mkcgo_EVP_sha512_224 = 0
++	_mkcgo_EVP_sha512_256 = 0
 +	_mkcgo_OBJ_nid2sn = 0
 +	_mkcgo_OPENSSL_init = 0
 +	_mkcgo_OPENSSL_init_crypto = 0
@@ -19133,38 +19260,6 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_RAND_bytes = 0
 +}
 +
-+func MkcgoLoad_111(handle unsafe.Pointer) {
-+	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
-+	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
-+	_mkcgo_EVP_MD_CTX_ctrl = dlsym(handle, "EVP_MD_CTX_ctrl\x00", false)
-+	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
-+	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
-+	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
-+	_mkcgo_EVP_PKEY_new_raw_public_key = dlsym(handle, "EVP_PKEY_new_raw_public_key\x00", false)
-+	_mkcgo_EVP_sha3_224 = dlsym(handle, "EVP_sha3_224\x00", false)
-+	_mkcgo_EVP_sha3_256 = dlsym(handle, "EVP_sha3_256\x00", false)
-+	_mkcgo_EVP_sha3_384 = dlsym(handle, "EVP_sha3_384\x00", false)
-+	_mkcgo_EVP_sha3_512 = dlsym(handle, "EVP_sha3_512\x00", false)
-+	_mkcgo_EVP_sha512_224 = dlsym(handle, "EVP_sha512_224\x00", false)
-+	_mkcgo_EVP_sha512_256 = dlsym(handle, "EVP_sha512_256\x00", false)
-+}
-+
-+func MkcgoUnload_111() {
-+	_mkcgo_EVP_DigestSign = 0
-+	_mkcgo_EVP_DigestVerify = 0
-+	_mkcgo_EVP_MD_CTX_ctrl = 0
-+	_mkcgo_EVP_PKEY_get_raw_private_key = 0
-+	_mkcgo_EVP_PKEY_get_raw_public_key = 0
-+	_mkcgo_EVP_PKEY_new_raw_private_key = 0
-+	_mkcgo_EVP_PKEY_new_raw_public_key = 0
-+	_mkcgo_EVP_sha3_224 = 0
-+	_mkcgo_EVP_sha3_256 = 0
-+	_mkcgo_EVP_sha3_384 = 0
-+	_mkcgo_EVP_sha3_512 = 0
-+	_mkcgo_EVP_sha512_224 = 0
-+	_mkcgo_EVP_sha512_256 = 0
-+}
-+
 +func MkcgoLoad_3(handle unsafe.Pointer) {
 +	_mkcgo_EC_POINT_set_affine_coordinates = dlsym(handle, "EC_POINT_set_affine_coordinates\x00", false)
 +	_mkcgo_EVP_CIPHER_fetch = dlsym(handle, "EVP_CIPHER_fetch\x00", false)
@@ -19177,7 +19272,7 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_KDF_derive = dlsym(handle, "EVP_KDF_derive\x00", false)
 +	_mkcgo_EVP_KDF_fetch = dlsym(handle, "EVP_KDF_fetch\x00", false)
 +	_mkcgo_EVP_KDF_free = dlsym(handle, "EVP_KDF_free\x00", false)
-+	_mkcgo_EVP_KEYMGMT_fetch = dlsym(handle, "EVP_KEYMGMT_fetch\x00", false)
++	_mkcgo_EVP_KEYMGMT_fetch = dlsym(handle, "EVP_KEYMGMT_fetch\x00", true)
 +	_mkcgo_EVP_KEYMGMT_free = dlsym(handle, "EVP_KEYMGMT_free\x00", false)
 +	_mkcgo_EVP_MAC_CTX_dup = dlsym(handle, "EVP_MAC_CTX_dup\x00", false)
 +	_mkcgo_EVP_MAC_CTX_free = dlsym(handle, "EVP_MAC_CTX_free\x00", false)
@@ -19205,6 +19300,7 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_salt\x00", false)
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_md\x00", false)
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_mode\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_params = dlsym(handle, "EVP_PKEY_CTX_set_params\x00", false)
 +	_mkcgo_EVP_PKEY_Q_keygen = dlsym(handle, "EVP_PKEY_Q_keygen\x00", false)
 +	_mkcgo_EVP_PKEY_decapsulate = dlsym(handle, "EVP_PKEY_decapsulate\x00", false)
 +	_mkcgo_EVP_PKEY_decapsulate_init = dlsym(handle, "EVP_PKEY_decapsulate_init\x00", false)
@@ -19278,6 +19374,7 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = 0
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = 0
 +	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = 0
++	_mkcgo_EVP_PKEY_CTX_set_params = 0
 +	_mkcgo_EVP_PKEY_Q_keygen = 0
 +	_mkcgo_EVP_PKEY_decapsulate = 0
 +	_mkcgo_EVP_PKEY_decapsulate_init = 0
@@ -19313,7 +19410,7 @@ index 00000000000000..1f3ab498325710
 +
 +func MkcgoLoad_33(handle unsafe.Pointer) {
 +	_mkcgo_EVP_DigestFinalXOF = dlsym(handle, "EVP_DigestFinalXOF\x00", false)
-+	_mkcgo_EVP_DigestSqueeze = dlsym(handle, "EVP_DigestSqueeze\x00", false)
++	_mkcgo_EVP_DigestSqueeze = dlsym(handle, "EVP_DigestSqueeze\x00", true)
 +}
 +
 +func MkcgoUnload_33() {
@@ -19460,12 +19557,466 @@ index 00000000000000..1f3ab498325710
 +	_mkcgo_OPENSSL_version_patch = 0
 +	_mkcgo_OpenSSL_version_num = 0
 +}
+diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go b/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
+new file mode 100644
+index 00000000000000..d608947c8b9ae1
+--- /dev/null
++++ b/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
+@@ -0,0 +1,448 @@
++//go:build !cmd_go_bootstrap
++
++package openssl
++
++import (
++	"errors"
++	"sync"
++
++	"github.com/golang-fips/openssl/v2/internal/ossl"
++)
++
++const (
++	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
++	privateKeySizeMLDSA = 32
++
++	// publicKeySizeMLDSA44 is the size of an ML-DSA-44 public key encoding.
++	publicKeySizeMLDSA44 = 1312
++
++	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
++	publicKeySizeMLDSA65 = 1952
++
++	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
++	publicKeySizeMLDSA87 = 2592
++
++	// signatureSizeMLDSA44 is the size of an ML-DSA-44 signature.
++	signatureSizeMLDSA44 = 2420
++
++	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
++	signatureSizeMLDSA65 = 3309
++
++	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
++	signatureSizeMLDSA87 = 4627
++
++	// muSizeMLDSA is the size of the pre-hashed mu input to the external-mu
++	// variants of Sign and Verify.
++	muSizeMLDSA = 64
++
++	// maxContextSizeMLDSA is the maximum allowed length of the context string
++	// passed to Sign and Verify.
++	maxContextSizeMLDSA = 255
++)
++
++// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
++// on this platform. Providers may not implement every security level, so
++// callers must probe each parameter set they intend to use.
++func SupportsMLDSA(params MLDSAParameters) bool {
++	switch params.keyType {
++	case ossl.EVP_PKEY_ML_DSA_44:
++		return supportsMLDSA44()
++	case ossl.EVP_PKEY_ML_DSA_65:
++		return supportsMLDSA65()
++	case ossl.EVP_PKEY_ML_DSA_87:
++		return supportsMLDSA87()
++	default:
++		return false
++	}
++}
++
++// probeMLDSA reports whether the OpenSSL provider exposes the given ML-DSA
++// algorithm via the keymgmt fetch interface. ML-DSA was added in OpenSSL 3.5;
++// older 3.x releases return nil for unknown algorithm names, and 1.x lacks
++// the fetch interface entirely.
++func probeMLDSA(name cString) bool {
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
++	}
++	mgmt, _ := ossl.EVP_KEYMGMT_fetch(nil, name.ptr(), nil)
++	if mgmt == nil {
++		return false
++	}
++	ossl.EVP_KEYMGMT_free(mgmt)
++	return true
++}
++
++var (
++	supportsMLDSA44 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA44) })
++	supportsMLDSA65 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA65) })
++	supportsMLDSA87 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA87) })
++)
++
++// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
++type MLDSAParameters struct {
++	name          string
++	keyType       int32
++	keyTypeName   cString
++	publicKeySize int
++	signatureSize int
++}
++
++var (
++	mldsa44 = MLDSAParameters{
++		name:          "ML-DSA-44",
++		keyType:       ossl.EVP_PKEY_ML_DSA_44,
++		keyTypeName:   _KeyTypeMLDSA44,
++		publicKeySize: publicKeySizeMLDSA44,
++		signatureSize: signatureSizeMLDSA44,
++	}
++	mldsa65 = MLDSAParameters{
++		name:          "ML-DSA-65",
++		keyType:       ossl.EVP_PKEY_ML_DSA_65,
++		keyTypeName:   _KeyTypeMLDSA65,
++		publicKeySize: publicKeySizeMLDSA65,
++		signatureSize: signatureSizeMLDSA65,
++	}
++	mldsa87 = MLDSAParameters{
++		name:          "ML-DSA-87",
++		keyType:       ossl.EVP_PKEY_ML_DSA_87,
++		keyTypeName:   _KeyTypeMLDSA87,
++		publicKeySize: publicKeySizeMLDSA87,
++		signatureSize: signatureSizeMLDSA87,
++	}
++)
++
++// MLDSA44 returns the ML-DSA-44 parameter set.
++func MLDSA44() MLDSAParameters { return mldsa44 }
++
++// MLDSA65 returns the ML-DSA-65 parameter set.
++func MLDSA65() MLDSAParameters { return mldsa65 }
++
++// MLDSA87 returns the ML-DSA-87 parameter set.
++func MLDSA87() MLDSAParameters { return mldsa87 }
++
++func (params MLDSAParameters) valid() bool {
++	switch params {
++	case mldsa44, mldsa65, mldsa87:
++		return true
++	default:
++		return false
++	}
++}
++
++// PublicKeySize returns the size of public keys for this parameter set, in bytes.
++func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
++
++// SignatureSize returns the size of signatures for this parameter set, in bytes.
++func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
++
++// String returns the name of the parameter set.
++func (params MLDSAParameters) String() string { return params.name }
++
++var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
++
++// PrivateKeyMLDSA is an ML-DSA private key seed.
++type PrivateKeyMLDSA struct {
++	params MLDSAParameters
++	seed   [privateKeySizeMLDSA]byte
++}
++
++// GenerateKeyMLDSA generates a new ML-DSA private key.
++func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	if err := generateMLDSASeed(params.keyType, key.seed[:]); err != nil {
++		return nil, err
++	}
++	return key, nil
++}
++
++// NewPrivateKeyMLDSA constructs an ML-DSA private key from its 32-byte seed.
++func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid private key size")
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	copy(key.seed[:], seed)
++	return key, nil
++}
++
++// Bytes returns the private key seed.
++func (key *PrivateKeyMLDSA) Bytes() []byte {
++	return key.seed[:]
++}
++
++// Parameters returns the parameters associated with this private key.
++func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// PublicKey returns the corresponding public key.
++func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
++	publicKey := &PublicKeyMLDSA{params: key.params}
++	if err := mldsaExtractPublicKey(key.params, key.seed[:], publicKey.bytes[:key.params.publicKeySize]); err != nil {
++		panic(err)
++	}
++	return publicKey
++}
++
++// Sign signs message with the private key, optionally binding the signature
++// to a context string. The context string must be at most 255 bytes long.
++func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
++	return mldsaSign(key.params, key.seed[:], message, context)
++}
++
++// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
++// mu must be exactly 64 bytes long.
++func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
++	if len(mu) != muSizeMLDSA {
++		return nil, errors.New("mldsa: invalid message hash length")
++	}
++	return mldsaSignExternalMu(key.params, key.seed[:], mu)
++}
++
++// PublicKeyMLDSA is an ML-DSA public key.
++type PublicKeyMLDSA struct {
++	params MLDSAParameters
++	bytes  [publicKeySizeMLDSA87]byte
++}
++
++// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
++func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(publicKey) != params.publicKeySize {
++		return nil, errors.New("mldsa: invalid public key size")
++	}
++	// Validate by attempting a key import.
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return nil, err
++	}
++	ossl.EVP_PKEY_free(pkey)
++	key := &PublicKeyMLDSA{params: params}
++	copy(key.bytes[:], publicKey)
++	return key, nil
++}
++
++// Bytes returns the public key encoding.
++func (key *PublicKeyMLDSA) Bytes() []byte {
++	return key.bytes[:key.params.publicKeySize]
++}
++
++// Parameters returns the parameters associated with this public key.
++func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// Verify verifies an ML-DSA signature over message bound to the given context.
++func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
++	return mldsaVerify(key.params, key.bytes[:key.params.publicKeySize], message, signature, context)
++}
++
++// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message
++// representative. mu must be exactly 64 bytes long.
++func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
++	if len(mu) != muSizeMLDSA {
++		return errors.New("mldsa: invalid message hash length")
++	}
++	return mldsaVerifyExternalMu(key.params, key.bytes[:key.params.publicKeySize], mu, signature)
++}
++
++// Helper functions
++
++// generateMLDSASeed generates a new ML-DSA private key and extracts the seed.
++func generateMLDSASeed(keyType int32, seed []byte) error {
++	pkey, err := generateEVPPKey(keyType, 0, "")
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_DSA_SEED.ptr(), seed, nil)
++	return err
++}
++
++// createMLDSAPrivateKey creates an ML-DSA EVP_PKEY from a 32-byte seed.
++func createMLDSAPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid seed size")
++	}
++
++	bld := newParamBuilder()
++	defer bld.finalize()
++
++	bld.addOctetString(_OSSL_PKEY_PARAM_ML_DSA_SEED, seed)
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
++}
++
++// createMLDSAPublicKey creates an ML-DSA EVP_PKEY from encoded public key bytes.
++func createMLDSAPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
++	bld := newParamBuilder()
++	defer bld.finalize()
++
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
++}
++
++// mldsaExtractPublicKey derives and copies the encoded public key bytes from
++// a private key seed.
++func mldsaExtractPublicKey(params MLDSAParameters, seed, dst []byte) error {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	var pubLen int
++	if _, err := ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), dst, &pubLen); err != nil {
++		return err
++	}
++	if pubLen != params.publicKeySize {
++		return errors.New("mldsa: unexpected public key size")
++	}
++	return nil
++}
++
++// mldsaSigParams builds the OSSL_PARAM array used to bind a context string
++// (and/or the external-mu flag) to an ML-DSA Sign or Verify operation.
++// Returns nil params when neither is set.
++func mldsaSigParams(context string, externalMu bool) (ossl.OSSL_PARAM_PTR, error) {
++	if len(context) > maxContextSizeMLDSA {
++		return nil, errors.New("mldsa: context too long")
++	}
++	if context == "" && !externalMu {
++		return nil, nil
++	}
++	bld := newParamBuilder()
++	defer bld.finalize()
++	if context != "" {
++		bld.addOctetString(_OSSL_SIGNATURE_PARAM_CONTEXT_STRING, []byte(context))
++	}
++	if externalMu {
++		bld.addInt32(_OSSL_SIGNATURE_PARAM_MU, 1)
++	}
++	return bld.build()
++}
++
++func mldsaSign(params MLDSAParameters, seed, message []byte, context string) ([]byte, error) {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaSignWithKey(pkey, params, message, context, false)
++}
++
++func mldsaSignExternalMu(params MLDSAParameters, seed, mu []byte) ([]byte, error) {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaSignWithKey(pkey, params, mu, "", true)
++}
++
++func mldsaSignWithKey(pkey ossl.EVP_PKEY_PTR, params MLDSAParameters, message []byte, context string, externalMu bool) ([]byte, error) {
++	mdctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_MD_CTX_free(mdctx)
++
++	var pctx ossl.EVP_PKEY_CTX_PTR
++	if _, err := ossl.EVP_DigestSignInit(mdctx, &pctx, nil, nil, pkey); err != nil {
++		return nil, err
++	}
++	sigParams, err := mldsaSigParams(context, externalMu)
++	if err != nil {
++		return nil, err
++	}
++	if sigParams != nil {
++		defer ossl.OSSL_PARAM_free(sigParams)
++		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
++			return nil, err
++		}
++	}
++
++	signature := make([]byte, params.signatureSize)
++	siglen := params.signatureSize
++	if _, err := ossl.EVP_DigestSign(mdctx, signature, &siglen, message); err != nil {
++		return nil, err
++	}
++	if siglen != params.signatureSize {
++		return nil, errors.New("mldsa: unexpected signature length")
++	}
++	return signature[:siglen], nil
++}
++
++func mldsaVerify(params MLDSAParameters, publicKey, message, signature []byte, context string) error {
++	if len(signature) != params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaVerifyWithKey(pkey, message, signature, context, false)
++}
++
++func mldsaVerifyExternalMu(params MLDSAParameters, publicKey, mu, signature []byte) error {
++	if len(signature) != params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaVerifyWithKey(pkey, mu, signature, "", true)
++}
++
++func mldsaVerifyWithKey(pkey ossl.EVP_PKEY_PTR, message, signature []byte, context string, externalMu bool) error {
++	mdctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_MD_CTX_free(mdctx)
++
++	var pctx ossl.EVP_PKEY_CTX_PTR
++	if _, err := ossl.EVP_DigestVerifyInit(mdctx, &pctx, nil, nil, pkey); err != nil {
++		return err
++	}
++	sigParams, err := mldsaSigParams(context, externalMu)
++	if err != nil {
++		return err
++	}
++	if sigParams != nil {
++		defer ossl.OSSL_PARAM_free(sigParams)
++		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
++			return err
++		}
++	}
++
++	if _, err := ossl.EVP_DigestVerify(mdctx, signature, message); err != nil {
++		return errors.New("mldsa: invalid signature")
++	}
++	return nil
++}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
 new file mode 100644
-index 00000000000000..17444fbf258584
+index 00000000000000..1bf7ae9aade6af
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
-@@ -0,0 +1,365 @@
+@@ -0,0 +1,368 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -19500,36 +20051,39 @@ index 00000000000000..17444fbf258584
 +
 +// SupportsMLKEM768 returns true if ML-KEM-768 is supported on this platform.
 +func SupportsMLKEM768() bool {
-+	if major() >= 3 && minor() >= 5 {
-+		return supportsMLKEM768()
-+	}
-+	return false
++	return supportsMLKEM768()
 +}
 +
 +// SupportsMLKEM1024 returns true if ML-KEM-1024 is supported on this platform.
 +func SupportsMLKEM1024() bool {
-+	if major() >= 3 && minor() >= 5 {
-+		return supportsMLKEM1024()
-+	}
-+	return false
++	return supportsMLKEM1024()
 +}
 +
 +var supportsMLKEM768 = sync.OnceValue(func() bool {
++	// EVP_KEYMGMT_fetch was added in OpenSSL 3.0; if it is not available we
++	// are on 1.x and ML-KEM is not supported. On 3.0–3.4 the fetch returns
++	// nil for the ML-KEM algorithm name, which the probe reports as false.
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
++	}
 +	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM768.ptr(), nil)
-+	if sig != nil {
-+		ossl.EVP_KEYMGMT_free(sig)
-+		return true
++	if sig == nil {
++		return false
 +	}
-+	return false
++	ossl.EVP_KEYMGMT_free(sig)
++	return true
 +})
 +
 +var supportsMLKEM1024 = sync.OnceValue(func() bool {
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
++	}
 +	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM1024.ptr(), nil)
-+	if sig != nil {
-+		ossl.EVP_KEYMGMT_free(sig)
-+		return true
++	if sig == nil {
++		return false
 +	}
-+	return false
++	ossl.EVP_KEYMGMT_free(sig)
++	return true
 +})
 +
 +// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
@@ -19833,10 +20387,10 @@ index 00000000000000..17444fbf258584
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
 new file mode 100644
-index 00000000000000..43fd4a209ab821
+index 00000000000000..212d3979c59529
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,244 @@
+@@ -0,0 +1,240 @@
 +//go:build !cmd_go_bootstrap
 +
 +// Package openssl provides access to OpenSSL cryptographic functions.
@@ -19908,14 +20462,17 @@ index 00000000000000..43fd4a209ab821
 +}
 +
 +func errUnsupportedVersion() error {
-+	return errors.New("openssl: OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()))
++	return errors.New("openssl: unsupported OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()) + " (minimum supported version is 1.1.1)")
 +}
 +
-+// checkMajorVersion panics if the current major version is not expected.
-+func checkMajorVersion(expected int) {
-+	if major() != expected {
-+		panic("openssl: incorrect major version (" + strconv.Itoa(major()) + "), expected " + strconv.Itoa(expected))
++// checkMajorVersion panics if the current major version is not one of the expected versions.
++func checkMajorVersion(expected ...int) {
++	for _, v := range expected {
++		if major() == v {
++			return
++		}
 +	}
++	panic("openssl: incorrect major version (" + strconv.Itoa(major()) + ")")
 +}
 +
 +type fail string
@@ -20069,13 +20626,6 @@ index 00000000000000..43fd4a209ab821
 +	return err
 +}
 +
-+// versionAtOrAbove returns true when
-+// (major(), minor(), patch()) >= (vmajor, vminor, vpatch),
-+// compared lexicographically.
-+func versionAtOrAbove(vmajor, vminor, vpatch int) bool {
-+	return major() > vmajor || (major() == vmajor && minor() > vminor) || (major() == vmajor && minor() == vminor && patch() >= vpatch)
-+}
-+
 +func bigEndianUint64(b []byte) uint64 {
 +	_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
 +	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
@@ -20143,10 +20693,10 @@ index 00000000000000..47bfafa9d4c63f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
 new file mode 100644
-index 00000000000000..de987d68d364a6
+index 00000000000000..138e1ab10f7f75
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
-@@ -0,0 +1,165 @@
+@@ -0,0 +1,166 @@
 +//go:build !cmd_go_bootstrap
 +
 +package osslsetup
@@ -20200,7 +20750,7 @@ index 00000000000000..de987d68d364a6
 +	switch vMajor {
 +	case 1:
 +		return ossl.FIPS_mode() == 1
-+	case 3:
++	case 3, 4:
 +		// Check if the default properties contain `fips=1`.
 +		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
 +			// Note that it is still possible that the provider used by default is FIPS-compliant,
@@ -20238,7 +20788,8 @@ index 00000000000000..de987d68d364a6
 +	if FIPS() {
 +		return true
 +	}
-+	if vMajor == 3 {
++	switch vMajor {
++	case 3, 4:
 +		// Load the provider with and without the `fips=yes` query.
 +		// If the providers are the same, then the default provider is FIPS-capable.
 +		provFIPS := sha256Provider(_ProviderNameFips)
@@ -20272,7 +20823,7 @@ index 00000000000000..de987d68d364a6
 +			return err
 +		}
 +		return nil
-+	case 3:
++	case 3, 4:
 +		var shaProps, provName cString
 +		if enable {
 +			shaProps = _PropFIPSYes
@@ -20314,10 +20865,10 @@ index 00000000000000..de987d68d364a6
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
 new file mode 100644
-index 00000000000000..fa00950e79da39
+index 00000000000000..a2e236bab9fddf
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
-@@ -0,0 +1,160 @@
+@@ -0,0 +1,169 @@
 +//go:build !cmd_go_bootstrap
 +
 +package osslsetup
@@ -20345,13 +20896,9 @@ index 00000000000000..fa00950e79da39
 +	ossl.MkcgoLoad_(handle)
 +	if vMajor == 1 {
 +		ossl.MkcgoLoad_legacy_1(handle)
-+		if vPatch == 1 {
-+			ossl.MkcgoLoad_111(handle)
-+		}
 +	} else {
-+		ossl.MkcgoLoad_111(handle)
 +		ossl.MkcgoLoad_3(handle)
-+		if vMajor >= 3 && vMinor >= 3 {
++		if vMajor > 3 || (vMajor == 3 && vMinor >= 3) {
 +			ossl.MkcgoLoad_33(handle)
 +		}
 +	}
@@ -20396,12 +20943,15 @@ index 00000000000000..fa00950e79da39
 +		case 1:
 +			loadX = ossl.MkcgoLoad_init_1
 +			unloadX = ossl.MkcgoUnload_init_1
-+		case 3:
++		default:
++			if vMajor < 3 {
++				// openLibrary should have already rejected this.
++				panic(errUnsupportedVersion())
++			}
++			// Any 3+ major uses the OpenSSL 3 init shim: 3+ guarantees
++			// ABI/API compatibility within the same major.
 +			loadX = ossl.MkcgoLoad_init_3
 +			unloadX = ossl.MkcgoUnload_init_3
-+		default:
-+			// We shouldn't get here: openLibrary should have already returned an error.
-+			panic(errUnsupportedVersion())
 +		}
 +		return
 +	}
@@ -20468,10 +21018,20 @@ index 00000000000000..fa00950e79da39
 +	var supported bool
 +	switch vMajor {
 +	case 1:
-+		supported = vMinor == 1
-+	case 3:
-+		// OpenSSL guarantees API and ABI compatibility within the same major version since OpenSSL 3.
-+		supported = true
++		supported = vMinor == 1 && vPatch >= 1
++	default:
++		// 3+ guarantees ABI/API compatibility within the same major,
++		// so any tested major is supported. Untested 3+ majors require
++		// GODEBUG=ms_opensslallowuntested=1.
++		for _, m := range testedMajors {
++			if vMajor == m {
++				supported = true
++				break
++			}
++		}
++		if !supported && vMajor >= 3 && allowUntestedMajor() {
++			supported = true
++		}
 +	}
 +	if !supported {
 +		return handle, nil, errUnsupportedVersion()
@@ -20597,10 +21157,10 @@ index 00000000000000..c4981aef84b42f
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
 new file mode 100644
-index 00000000000000..63eb1994606e8e
+index 00000000000000..cbf60ff9f1462c
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
-@@ -0,0 +1,74 @@
+@@ -0,0 +1,108 @@
 +//go:build !cmd_go_bootstrap
 +
 +package osslsetup
@@ -20609,6 +21169,7 @@ index 00000000000000..63eb1994606e8e
 +	"errors"
 +	"strconv"
 +	"sync"
++	"syscall"
 +
 +	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
@@ -20617,6 +21178,39 @@ index 00000000000000..63eb1994606e8e
 +	vMajor, vMinor, vPatch int
 +)
 +
++// testedMajors lists the OpenSSL major versions this backend has been
++// tested against. [openLibrary] rejects majors not in this list unless
++// GODEBUG=ms_opensslallowuntested=1 is set. OpenSSL 1 is supported only
++// at 1.1.1+; that minor/patch constraint is enforced separately in
++// [openLibrary].
++var testedMajors = [...]int{1, 3, 4}
++
++// allowUntestedMajor reports whether the user has set
++// GODEBUG=ms_opensslallowuntested=1. The "ms_" prefix marks this as a
++// Microsoft-defined GODEBUG so it will not collide with upstream Go.
++var allowUntestedMajor = sync.OnceValue(func() bool {
++	godebug, _ := syscall.Getenv("GODEBUG")
++	return godebugAllowUntested(godebug)
++})
++
++// godebugAllowUntested reports whether the comma-separated GODEBUG string
++// contains ms_opensslallowuntested=1. Matches internal/godebug parsing:
++// no whitespace trimming.
++func godebugAllowUntested(godebug string) bool {
++	const key = "ms_opensslallowuntested=1"
++	var start int = 0
++	for i := 0; i <= len(godebug); i++ {
++		if i < len(godebug) && godebug[i] != ',' {
++			continue
++		}
++		if godebug[start:i] == key {
++			return true
++		}
++		start = i + 1
++	}
++	return false
++}
++
 +func VersionMajor() int {
 +	return vMajor
 +}
@@ -20634,7 +21228,7 @@ index 00000000000000..63eb1994606e8e
 +}
 +
 +func errUnsupportedVersion() error {
-+	return errors.New("openssl: OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch))
++	return errors.New("openssl: unsupported OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch) + " (minimum supported version is 1.1.1)")
 +}
 +
 +var (
@@ -20721,10 +21315,10 @@ index 00000000000000..fd1cad5692a0bc
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
 new file mode 100644
-index 00000000000000..aae278e743a73a
+index 00000000000000..d8843d2afa94a8
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-@@ -0,0 +1,180 @@
+@@ -0,0 +1,190 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -20841,6 +21435,16 @@ index 00000000000000..aae278e743a73a
 +	if !b.check() {
 +		return
 +	}
++	if value == nil {
++		// Short-circuit a nil slice: don't pass anything at all to OpenSSL.
++		// OpenSSL 3.5.6 raises an error when passed null, and expects users
++		// to not call this function at all in this case.
++		// See https://github.com/openssl/openssl/issues/30728
++		//
++		// Don't short-circuit empty slices, as they might have a meaning.
++		// For example, in KDFs an empty salt is different from a nil salt.
++		return
++	}
 +	if len(value) != 0 {
 +		b.pinner.Pin(&value[0])
 +	}
@@ -20907,7 +21511,7 @@ index 00000000000000..aae278e743a73a
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 new file mode 100644
-index 00000000000000..5f87281d8746a3
+index 00000000000000..2e34d4d95f0733
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
 @@ -0,0 +1,54 @@
@@ -20928,7 +21532,7 @@ index 00000000000000..5f87281d8746a3
 +	switch major() {
 +	case 1:
 +		return true
-+	case 3:
++	case 3, 4:
 +		_, err := fetchPBKDF2()
 +		return err == nil
 +	default:
@@ -20940,7 +21544,7 @@ index 00000000000000..5f87281d8746a3
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchPBKDF2 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_PBKDF2.ptr(), nil)
 +	if err != nil {
@@ -20967,10 +21571,10 @@ index 00000000000000..5f87281d8746a3
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
 new file mode 100644
-index 00000000000000..e366c7a7a833fa
+index 00000000000000..7709a5005a8cc0
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
-@@ -0,0 +1,239 @@
+@@ -0,0 +1,249 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -21156,6 +21760,16 @@ index 00000000000000..e366c7a7a833fa
 +			algctx unsafe.Pointer
 +		}
 +		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
++	case 4:
++		// OpenSSL 4 removed the ENGINE, md_data, and update fields from EVP_MD_CTX.
++		// https://github.com/openssl/openssl/blob/openssl-4.0.0-alpha1/crypto/evp/evp_local.h
++		type mdCtx struct {
++			_      [2]unsafe.Pointer // reqdigest, digest
++			_      uint32            // flags
++			_      unsafe.Pointer    // pctx
++			algctx unsafe.Pointer
++		}
++		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
 +	default:
 +		panic(errUnsupportedVersion())
 +	}
@@ -21575,10 +22189,10 @@ index 00000000000000..963c3ad733dcf0
 +const RandReader = randReader(0)
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
 new file mode 100644
-index 00000000000000..28e846829f29ea
+index 00000000000000..390336bfbafcf6
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,74 @@
 +//go:build !cmd_go_bootstrap
 +
 +package openssl
@@ -21591,9 +22205,15 @@ index 00000000000000..28e846829f29ea
 +
 +// SupportsRC4 returns true if NewRC4Cipher is supported.
 +func SupportsRC4() bool {
-+	// True for stock OpenSSL 1 w/o FIPS.
-+	// False for stock OpenSSL 3 unless the legacy provider is available.
-+	return (versionAtOrAbove(3, 0, 0) || !FIPS()) && loadCipher(cipherRC4, cipherModeNone) != nil
++	switch major() {
++	case 1:
++		// RC4 is not part of the OpenSSL 1.x FIPS module.
++		return !FIPS() && loadCipher(cipherRC4, cipherModeNone) != nil
++	default:
++		// On OpenSSL 3+ availability is decided by the algorithm probe:
++		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
++		return loadCipher(cipherRC4, cipherModeNone) != nil
++	}
 +}
 +
 +// A RC4Cipher is an instance of RC4 using a particular key.
@@ -21649,7 +22269,7 @@ index 00000000000000..28e846829f29ea
 +}
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 new file mode 100644
-index 00000000000000..2aa773d9592e06
+index 00000000000000..2e0fa35a3c63f7
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
 @@ -0,0 +1,711 @@
@@ -21692,7 +22312,7 @@ index 00000000000000..2aa773d9592e06
 +		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
 +		P, Q = bnToBig(p), bnToBig(q)
 +		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
-+	case 3:
++	case 3, 4:
 +		tmp, err := ossl.BN_new()
 +		if err != nil {
 +			return bad(err)
@@ -21760,7 +22380,7 @@ index 00000000000000..2aa773d9592e06
 +			ossl.EVP_PKEY_free(pkey)
 +			return nil, err
 +		}
-+	case 3:
++	case 3, 4:
 +		var err error
 +		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
 +			return nil, err
@@ -21839,7 +22459,7 @@ index 00000000000000..2aa773d9592e06
 +			ossl.EVP_PKEY_free(pkey)
 +			return nil, err
 +		}
-+	case 3:
++	case 3, 4:
 +		var err error
 +		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
 +			return nil, err
@@ -22366,7 +22986,7 @@ index 00000000000000..2aa773d9592e06
 +})
 diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 new file mode 100644
-index 00000000000000..38fea6de0c33c4
+index 00000000000000..1f7dcb7cf38f1f
 --- /dev/null
 +++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
 @@ -0,0 +1,156 @@
@@ -22388,7 +23008,7 @@ index 00000000000000..38fea6de0c33c4
 +	switch major() {
 +	case 1:
 +		return minor() >= 1
-+	case 3:
++	case 3, 4:
 +		_, err := fetchTLS1PRF3()
 +		return err == nil
 +	default:
@@ -22422,7 +23042,7 @@ index 00000000000000..38fea6de0c33c4
 +	switch major() {
 +	case 1:
 +		return tls1PRF1(result, secret, label, seed, md)
-+	case 3:
++	case 3, 4:
 +		return tls1PRF3(result, secret, label, seed, md)
 +	default:
 +		return errUnsupportedVersion()
@@ -22486,7 +23106,7 @@ index 00000000000000..38fea6de0c33c4
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchTLS1PRF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS1_PRF.ptr(), nil)
 +	if err != nil {
@@ -22497,7 +23117,7 @@ index 00000000000000..38fea6de0c33c4
 +
 +// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
 +func tls1PRF3(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
-+	checkMajorVersion(3)
++	checkMajorVersion(3, 4)
 +
 +	kdf, err := fetchTLS1PRF3()
 +	if err != nil {
@@ -23242,2035 +23862,2075 @@ index 00000000000000..b17312278da948
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..5377aaadc4efef055c3ba5538d00394e067b2139
+index 0000000000000000000000000000000000000000..7d9406cdef877632dc046249d921ec782fe48d6b
 GIT binary patch
-literal 176512
-zcmeFa3v^}4SstpHU|TR5B<F@848#J4paBeWutAP7oHmv@ov1-Kb{iSbq~%ACHP|yF
-z#;sT;OIW6Tg0}bCEG0n;t;7bc8ymz;47yxSmheUP8M|?dw+OjLtdJl>3=-lYh{F;O
-z)AxH+?Y+-F`$#>uXJFkmJxfz{s{Z<4^;gwj&;84P{s({cjDdkW{?-8ghrchvUt<ve
-z8^s^~eIEX{nc3&x=znCXfq_|;!N0-q8#o8}cNY`!@5+^HR~N52?%yw;oOyZiJI3Dd
-z-37kSK;qm_-ZAjGpM}V03@k?&hF7k<=1p%ZC0x1kk_#`tP$Wb?MvA0?vKXdPWL~-Q
-zx>sL&b@_KUzWKn{N+`JZFYoBWSCn+@%9S_0`N0RSJ^#wJx6EIC^y&jwu5`<L`c@<Q
-z$xv_xh?z3_v^%BqUVN{8<l#3J3asMWS~kA#3I&G~^LGe*f4_<hzpq?*?VGMW`ryN_
-z4|!F5<8L#*|1;#T0w3!m{<||qLI`{n{<`&d5b#X|_{KZT-~Q9@l$})2fj{Z*%0rL5
-zZtm4@n#1p@saISophmvO{0)bsMc_N@-<2zmyyiPzd*#80Uj6#34?g_BBUO7D3;2Q=
-z53Ka!i=;$`@;)^G>epVovheVmAAI<A;O`}6`r`rL^51dlYLIvM8FvnRzmvLDc;(8~
-zxhoGm`s#<SI<s0ITi<W_W<J;X!|&?0KeV$s=lK8s5CLu9rS2XWxbs=cAW^1o-F4@{
-z3-F`y)prgwzQ^r!S`Y&RUyP7{pTOU<f#6wZt2UJC4xWRbqxfUd=e$vM`O-%g9!4X3
-z@R5g^hQBfVfrWwRNbWa3^5`1|x?qqcxF|=!^G%ODdNnU!!hhu@uYMF&QK0ymP@Z(o
-zf_v_5!cnJ@?=rrZsUb~2`p9dqzUfV&N!7@I<(nRP__Yg<K6>@x*S<w~M!WfX*<0Rp
-z?dn5F<G-5n7SGwWe7tz!!8cxe@Zl>Dyz!A&$DX1F&$qtjO;;cN=b<8M^S|TjYp*@{
-z&#!({;G?2H>c3EOg`Y}&_Q2NAd&z@unt%1R*V=qzeh;39Ui09?XdBG0u^ZBP8Kim;
-zRUnS~;Cb0q)WCz+tpAE#%}hh!e)wPdEmyC}LeG{Lvb^EKqpx}J+N1sTd+}TU$%C<a
-z@_Mewo5S?u=h3&!Uwfp2XB@m$@Jv1O+E>5v!osz=s}Em$@U^k=0WRV#+40LbV14Vu
-zk34+!WefB3k31?K30LTeeW(>sQ~sOSAzpj%H4nZK3Z8!TYu~_{xZF%WcE}?4e`x60
-z=pp&LdHwf?Kfvzjxt-*L&EzA>-@Iet&f~kb$xkzxJUt$KZb#ujGo3tbUcWI+1PztH
-z@QRlK#W*s?r_#$~Q|bMq&Gi0}sdQm@DtX>L&E&p&2B+{p{CfF4BhBO`_l$}Ju#CUz
-z!auwJLk~RgRYT8yJGnBxZ@ch{3zsjv{AJCz{r)x-IF)2`e|78DRMMJ7&`f^5nY^os
-z*u~@{Q%Sp_wDz!qok0d*q?xqF9UVh-z|m1eM;rwkt<z5kb{NqUMsH5;kp+aiA?$>3
-zJA_*y+zjDH2-icn8p4$jE<0>3-nw-wMCXg>T!;>RTW9Fr)---0XdrlQ=R$G=@d3n}
-zH(UE)nWd4^K@`CTg~(ncl-ctcSfOd-w3#*<{&BrC)VzLh(!BRZGdX~a+mLZ8`CVrw
-zk2RC5BL$#L(%N;jz9?b$2#`$fbz|5sFdUqR;m{a%BZjFoquQs^P!XAHDO8~<bSiz<
-zEJU43*JuFEbd9xlF}XRF?2IZwypK8B%X=ytxS0Gd;Fke(Dfz@y^4<x=rjjL?^U`)R
-zS=gFN7B-v7{Toxs{p(Z7<<+U=(#ljax!g?FSZ|P>bp{==zJi{28lu^z88)TMX~lj8
-z&@+muK7nGUREV-P)3#($q4~Vfq6@M1QK*?0f*Ct$qDcB+Gi_0vW<qi+LMkI@W;=uy
-zk5kEeR*`e@`d^~`yk{NJq1MCjxIteGraR<#Diu_aYE43<mLP4p!q!H_KsL%CHJzlr
-zq1yf&Ti^~sqGr^T(l#5H8A)3bGtDGp+MW=@J2c0O=x@>%>u)MqTUElZpq59KkgX%(
-zQu3=)$-9;n`+3Ax5Cbe*2D*ho1+5ceOtMoUZVcbrYo-}-G*eLtB+xP@p8KcoV~=)g
-z4^~Hd03;OvT8*te{c20}bd5a1OerjSp97OQWPmQSnS8XFyk)SNya0L^3t2{xOUbTv
-zfld;t-$db13tNZ|wT9TGrSCN*F(~k$ET<<oo5{{Bz|kEyllGiqI~_65-bG*v>COm~
-z(lvpmnc+TMgRixvvTNIUS*SkSQK~D|7?aktXsyjCa8Hx0Z5GAI*+kA+1F^`9Qqwk*
-z&{~?MoN;m4W)hec1z1@Lz)9_Ll0}l}k$_d!?g)*#tXtEAsJmq)v{y<951q7c&;tYp
-zwehuW9kM*9&zr-=Tu!%-&{_fmtxe#0?$5GEAl{_4X!QC8`{u9g>i(-P+;`#r3;*oG
-zmHR&g=GK7{V`ujK|LZMx47~5zu)d$730~O#V*Fo-hwds2b<2py5OBb4jUy7pXJR>y
-zir6plTh4ycG(!F)Pq$Kzeg}+2{{W3;6rJrMI@^<G`i$oF(*e2?*FGz_5~I}9lCqKy
-zHy`_}(dK&dj+<~sFz)<Z5cm>G!#CM$CeM@`a%1S(%g|r$zckaQ@n^)na8EP!@YrSC
-zK)BmX?iM6CC|sEb%KnG>Ju%CZC(XwWzhULEl}l*!hj(1N>v-TDlefO|&TG#){zh@V
-z4b$SkZ)|?iO)-1?Wk^2+?vv(EIg5FqJ9!X<SqhQsHz4{0{MY6GM14U6#wdIV@THgW
-z_hO9Klc(=jKQ=uMWiAX!kd)e8I+Q(69>Tc-^3~wqLH~cP@(h1E>*oUeLwcMO5PJe1
-zC%n%4$KY{}!sCS3xrAQ#>+hLLuH7?8*Au_)yJv*1CzSA#d&XP`*KbU~^<)$6)j#n^
-z|Fel969df%%y}yL5FF28#4aYk1jlm@rhhT{HTV{4|4Ey@4BI3FaE8`92w+6V5#4j@
-z7@~)cf}P-YO^zViaq2Ll+l>Bod82SRXJNK%BWF6Ma6?bn$nW*Ic(b*QUn+HPYZcMx
-z=Gi@RPbqiJeN!JVm9FLr#qV)7SEV0eSa-AmRc#;|YP4{7QzdJB&Nk}+<PWRMmm9W4
-ze92_VGmRrZD+R8?E&)>ez-g#pRW}?|ng#|nR_ev%XW(C+2w04sI@;rzUQ9j)z-eje
-z5K;^Xhs<Rvd8ku(rc0afPB-A4!ZW=ep6O+Hrk9rCi!7pw;3(QN&FGl|4eKp*F+0OT
-z*%o(6tHEFJD-}@38UW=#jw!9qT~(np__(bZqnOQ6j4MVLbiyba=BaRA)66JLH*Ha1
-zfR{Yl!l9gFUK$<B+>OP^D8gx*goAMA1zwNoj+*XRA$@SM>0HhWhFmT(mhBK)c;K5Y
-zBPsZ1D~JxY-e3=zl?lqMc6i8yifWx#PH@QN<3O#`Oq3-JDn@F<ig^l`tkF@8DAc-B
-zdof9CLU3!19K}eEV$>*3$ak`KT5!?cVotiViQr<=ft2f^P%1C_Qt}x3tTE;OEMnt`
-zRs7e~Zn8Z&`)pCU;wUvo=}wcF)3!xy?U|STf|twy!KrJl2wa@OahA$4&vdC>26mjM
-zlFyt9BX-sn(rk@TQ^{jy!@lzjMeqz}7SW;Bfqdtd@TTnnB82NMnsSxUNXPICmByl|
-zhE0*S_nUg)&kAoACUE$dCV}R2f+!V@02u=!n1UckC<~JsLA3W2?Cd&N6^Zsbf>_0S
-z;%H3(=r#mrubfuJpQ(^U_)-$>DD}XR490v**j^Oc)-nQnt&|n0Sicc;#7VTBm^A35
-z;Zo9;lU5bTdW_H-ZJ#*(6oJ#nrD;vwBGyqSjTK_I4k4M`<9$ioI*_C-{Yo?a>T!?R
-z?&Kc->xaAD<A02?M6~1{ZyD955qA{qY$J&5Fpj}@yI`j)`)`=0C_r?ZOUgR>B`Gzd
-zvD5v}BzDrG*hhb=Jk>tx+_n&GKcle%d>wGAfDJ@cb4r3iF`<I*hk;N2;Zy5(pTzo|
-zeIt&z@PMWf#6`Pd#Nk67Lc75mV*dsp_HPI_5Hug}+T9-Nx7(rGXN_~c59<<+_IMdu
-z_TylGDC;QJ?*5ur-Y^y7>f6FLe48!!Ht=z{`gR#U&L#LblPk^S@-o=AkJFlmLSrj$
-zP<hcMp=i@gkRLOnn0z2~;`E4Op;;H2695a%=Y=$oV9kSdR$i-v$K<5KnbA_!a$b`C
-zR`g!79YTv7298zabS=C6_$RgOMt26hjx)%Y-8NO#(Muvo6w+Px`O9v!q^@PRbtROR
-z-8PWmWw#Z@xa_uy7?#~=+nfz42)>OL;b4hf%WkBCUS~{7DlNNV_#-`bND9L0Wn6D#
-zF&L+$OuVLsWqKl!+i=iKnuE<`5MJB>)skf=$g8ZkZ2<?>kA|^L8p&FRSd;hcA{c62
-z^ne~16h!KU@O)Kg4uDaujKkpO86-P<WF=|uBQSv0>1LG4b-G!DbquzfgXQaV0!`Jw
-zH<R2WC=m&0Z+E#a-6@rY#7!{}9MV3EcjGy`6Np7Ym5Rk#WwsjS97+?G_0ly_NVDk@
-zfRp4RMr@W-`iMy-Mq|<niKXq;60Soh?JH2vW(Q=#OpGdc-0OB*K&NqWk$96ZhKA+4
-zY?+BYj>$Sm$uaq}tKE*t8@e2mJ#)Hi#G?qbZa0QV6qAYNI1K3!$jeDF{-kMy{6z<(
-zq!g{&J<;n?Pv-i~jMr}lp>MC>3?Sz9n|Y|f>o-<FTUD88))&@qP5~0uZ#s^S!Fu)`
-z9gRIqs`VS%7+|@6v&raR*ZR#Ty=b!m&A>ldma59zglZplHEf@a283LNkT%=WMq}7j
-z;m(LQR(b%m@-hn&o-c1uQ>CRI?DSE27z3zIth{U!Aau~4kfXz3MPcQIm5P-YR)<$!
-z4g@Tp=+My~pU5jO4as;2DNY2Z9Z0Oa>=vHM($*)nFE}8c+F~tiK__eKytF<rEXlb(
-zFrrwm=aKG=8-)wCnu7DroKTGBD8`JU$5Tl&qcGhxEdJClyUd7KbSUU-#I8t$G4TgL
-zNHQ<jzcJlW4#CM<$qDh!q8uexF$J9?boa8$Jd%Qkw20_XYt<f-8<w`jFoP#lWM)y-
-z6oz4qPN3XmqI5E#7^w{^R=4azyMpb|u2Ape3f3kR&?g*LOf_SO6Y|}?>>_Km2jgXz
-zl~5>MTSm;wE~AKDOt|bahFG6v7m@d98<p!MbCm8hh#8J911uh!m;FK`)<GPO<y4{3
-zNY_|OHux?BJ5E!{;O(rpOp|x}PBWscjYarQbNDsX`YWxzm`b{KLJ0VH3Nng~N+Sk1
-zc`A)HJN`=IdWk2xI~(Gzy{RBuRnS^TkaMU+=>?<@Fmnw&aeV<*a)JOErwE2x|I+@P
-zveGuQKyX{Zj%Ux>`bXjlNJM+;h|M(tq?y5Ucg(3m65&fpUZ6RZWcdP(MC)GDp+ZoD
-zR8Pb*?4*%W(twi&OGz6}T2`P1HM>C8w|5!5Iq!6J2q07vZ<tC=wfGxoYb{1D5SJcc
-zQo9V&mVTv~e)YIOY@Bj|{`9_X7wF$~xj^eiwQ9th3U;{Q5anjPvNluB{u`z#3J_f*
-zsmIESYcp&LTAPvB7zY6!)@E$z*dU<1IMyPuTgwRK6Rsc<RFW|fAWTB%Q%3b4p!CXq
-zV5YrI9=P&;=Q+PcqjbLO!etz!Iz^SC4m7L0IeEgR3AiW%mB%o-$L&Ty<WpHRV-GE@
-zLH6`^05}6gv}auP5u<_9_#sNk<hl!DQeRU_qwzzS^FMUL-PWn(Pz>pRQ|UviO>yLP
-z0L-rzmI1Yga9<E$P()In(@8HOJ2qmC00GZ?%WN@@rXi8E)GCQEOffxdsHBa-TYG^-
-zW*ty7oc1=eg>CdDqlmt5R4QGYKs*4q1d?ixp_xM8I=$1)tPk|uL4-3!NnwGbQ&4M~
-z+6Jgi7jP{l<8T6VMPatc6ha8cBsfMADb?wv$bysF^QAJ20$x}SAgrjR)n>ZDih~+3
-zF*?0)KdosQ;>!L6*=1iBUJeWEU`HCv4iaDDvns*BU}y&{jBuZ!4Q@*-W=PYixuJU}
-zv9DEjJ2gPq>bBIM^|QKd<mN?FQ!Z*a$#z|uOJy2JVTgzxAk{K=`L9g&&S5dy_5onU
-zqwyZrA)=p4x8g+TupOT)Atf5F%=(mB*+K_88vrJm(^T@&P!C@ANWIXZil(84%pEB?
-zZ5K(xI3|X;5HYS8C6+}de*)7URoc=P*w_wuGL=Zz1fI4m(4`Hmzil?dnp518TiQ?=
-zjJpls3Eo>1(V^CNXb4`jnzd?!<4x2aIyfu5O&#5u#<9@06p{wuSRcb+v;mN*<c~tb
-z%Q5J*lgC`)O0s2QPS#cwu+3j)-!cdks}Tiy20^9WgFZ{ZRa4-Vr=q_g`EK^a3`C%L
-zS@!h3j03raGi#XgATjSRv;zS|n}k#cv!z&AbX;2`@N{q-RBKJ<XYDzp%LaJxCDc#w
-zxCbEHw4inf6*D_b!cq)_J1}+8@mOaH@r)5q*CAG(%xcbv2^A3U%nGqLQPZ_~{nB1u
-z1aMNDvcx27wM*Y8MzgCRXbH-bMW*UPLt!6!<+-YL!eUq7Mf5Ap^eel1!edoBQbn^v
-z7c&kh4XhK0L_U~^#<p7i9pg2WSu_szCE~|#JHNjhcYo)m=63ox`nytx#numtF(P&v
-zgG$gmcG%HA<L#^z!6I(vwf&6Rz5AIlz*qYjWyg_}md0KnYD_#~o{}fYu%<<p{mhJF
-z>}MK^v7d46boVnVk?JrkT9ny7ub-I%#?a5qBRbSN!q9<!fufqfcqDV}FgF14w?`Yu
-z+KT|}X;I3P;qMD-hfq=60mM-g%1PG_2#}Wg_jJce>ds;rvV$_Nv(_+v*)5ksFoVPI
-z0ICDT^1)AtIjn4_KE9gz_-fhADRmf0W#(*1k!nX63Nz>Lm{&uYMWdOQh#$YL?mhs|
-zK4CmxX1AVXQbuBBU@9lNJ8IK?tQ{lz9!GhEyCLi_^r*iY+)N2@Q=2==yjNBc_R_F_
-zHUZ(8fhaZ1Xp~RHG1($3srhqdVN#Cy_My_%dL*icdseLxbdBarzL*@K*eQyg3BVfe
-z0nmCDD;=v?`5=!W30~@@-RAW_8yI@~0K9h?z4fTk1oLEx@394jFej}}c8p#&JdY%f
-z1kH@6)790=mJJfmRPQWGST@_`oPVs7DYacB3FSIdb)I-bF*e&3#n^0D6@%-SEUX72
-z?vB$nfv27Z;P{b8+~=!ya`#|aW#Arc0#9hRTZj&|z83csA;0TFO*L;WJ8mxU3+xHt
-zFyl2G74#2}XUBIQH&M$6<PJTDm<(r;WEf}}FW6oB5}-7Qjtd1nmNx^BKj%0Ykk3g$
-zVs<d-PgwChz@<PgRp1uYL}B1u3<qCeXI3@6GiF#KptFTvQDe^W-IFAE^YYmPOE{8b
-z#dYr)P5?z%<Y*ALk7_}i)A%*idX3h{ypWe>O+jQ{g76Av2^&UOOQc>Zh!Py6L(E-u
-zIzFu37)3TMIa)Ie!qg(!86Xv07O;$i_!VS~Ien5~RHG3%2+g_9Fwtej#HsA%C{KOz
-zh@gryTBvy?rNW7t9%}vX9CmXqx4c*qxZK9C$fbn}+l^5SuB}9Xbr<cE1Ti*Cz;k2_
-zUY*LUnQB%h7Z@og1r9o<6Ik3WAq_cwlEA@U4xDMmXVx>BVHAT+2%H^?L7gpS4Tt*-
-z?NuZP$Z&kIMO$OPPPTk_;P|_-Kuc~vCHzKw^D!)GRPq0Pm|=%xZ$5_1YOZ=mDJeT(
-zP#y!f#H^0FXbfD<H4@H!;q-0JxRat{R#+6fiwHuJuYBBm3@H^Jj^4tgctWu?4=N(J
-zEPlGyMEW+aMZik+EFGC(9M(Tk;<3m+t0Hr3HDZXXn~#xRcSRok1VpPlPmT!|dV8LD
-z$D!%@xNI3O@>R~Ci}&97{qPgz55Nky!8gW!cCQG=5qwy~4TpaY(Hd*&4$Xw=7DoG;
-z<s~ml(ePq*>>>`E*i&#@u7gXKd<Kp9GJ?J%{;#{c-Y1nrTlpADC?YJ(1|0^nt`UC@
-z0HqOs9zVNAeCDHJGu<mci-=VOE0Q$guM$=x{<>lu@s}0jh%d{+RH;1Tt3<jc@X%(@
-z9q~7SF^u?|h~kEm<v$@M`_JH;)ex^=O~VSq>4b2Wx7$4kYdGO5oo2YjeTO@S-u^<Z
-zICPh3lK|+PBG6JptxM5FZnsOp6sV=)fX3G2QZUbo?(!YZb}2#uj(vl~ooOo2Gapf&
-z#=c=e?UW`AaU#x~NPmP-Sj<sSz8nY{M!`Jt#u%iJ*H_Uv;`JiYx=7#CE16mFihO=H
-z`MG%FW~KFw=9y(x=p9N~d2IQkcdTd{t82uc9j+1Uocr-z>RAU+@)$jTxQZ1nviT&u
-zuSi(p?mm*0TMTwIFi*CYoxXy=#b9>qd1H^Ro2JmvDH4xg6|6Bp)+`lywIv@YPSlCJ
-zFo&{jQp<<3axRB5{l;{Tg~~(OCQ3<k4swxpM~rKZ$)fnB3yR4{ZmErEJWSL^j(!aT
-zYw14E(jjM30S_-%ebV=Xgrn5oW6y9jS^9W0TRKI9h4*g9IbHgAf|Sk+P8aUl9z`mr
-zJjeeuz4UQa?+bRz$uDFwTIqn2$0PJTOh)hE<QK=}yPG#Vs7e?wFhYm%`qBfEx5}UP
-zGgg2+PWBQ{54>3mhkPGuOm;p_)mFAT@cRHn^Ofj6Q&oU%2e7RWZZh=Q3N}Y9SFdu(
-z8lx5ck7Dea_OFJ6aR+RetS$5fw4G3C9=o(mJVsu<);;cM!$8%6XQH-vqbS}yt2kGR
-zrU?LJ>1AT3z%qLl7EM=si_aIu7tbnACe&V0*}YiUgo7ql&%&Y|<KE&MMRB&bzFq;D
-z*djo2E3Z@?odV15Sy(j01SZ0&kxUT>R}N7wwGF1ayMg``X95Ob2|>I;NBdMXyHqf@
-z?+q`k?q2R-NdZS@C$~&cb~7TVOPd<9hO!5+)R4Al_?Sr#wJvL_6m}B4M93M`y-p^F
-zoL><IlZTOv=`aabHsX|qPIF%++9v8-`#5?F@zg*1{(j=k1Y8ONo}ijSO~AhgB(dHY
-zM|UoDL!PuHZN~%4K4E~nN)l4TntS_$5+A;K1v%L5M!fF(b&Vk=iAP@<iAhp1l8D}`
-z8$hofdJqJT?nTcBR{?!R2N0+X-O4!nJ6_H>6%U2>g3m|Y{1p4W=FpGB#&m*lXtlF>
-z$589gUXi-=Tc}K(BMW)I<h)QN`_w0^<a>~uW~|T9#SXPbTuZcF$uabwPOG&gyROz2
-zCz(7bjjb2g)}Dg3X^EE2AP9OXS{7<+J<>t-GmhF?VW8StRZP=hxE&qiZ3v-OfxBwU
-zvgu+SYKy?J9=2J~7ouX4c=SQ9m}IHiZs4s=knXCje*vWjRZ;!aUQpFCK!v16Rm|%#
-z>`e(mRXL`!Xb^DTs#+|mYA)i2s`5AxG7gbu7)VvKiutjDWNpK$nzgF9j8vzpb?HT~
-z4@4z6Nv|)&B=P8TO)<$*wdcizE=zT(Y8oaKROO*~sP&n)s%ezyrz+<4sA?rwm1Ehe
-z5-wv-aVf4MYF$8Bp`?jO0jL;<lExTFN#lz79(|%CRY0TV#ya&ZT0P4MqTo(ymy^U-
-z_ZeeL;)i2WZLyWrbNsyS27i1{Zzpg(T!EqAH%RW|Zuwn9cjfQvY~4ZU>g{wOw10ly
-zZ%I?~$HIDi1C<4jXVXgBP@wl5;PJ3&CObdLv~yPFD~s~|JRPKOkl*e_`$Z9`S+r-P
-zhYvLBKppE%jXT0|Z)vkV^^!H}J9P8*dh9g!+u=Vg*Rcd=@d3tMT)OYK0zlYdl`0$#
-zNg^gj3M`|J_8F0Br@5gC9TCfB&BVl6#R=O`smX(0EKL{X{M^>rPZKi$>@7Z96rXdn
-zUIsETPXIU;y;znDEGuVW(N=CKF3UrIzJUVpdNvWHwnMz0f*<yJIz~tFb{(zfFD(2|
-z?j=j`cz878@;15v9L1g7G(lC_K5-<MHiFml6HlktL*tj%^GoQ<&>Tq}j0u*b0Uzu`
-zGC3?K{|hCz4Xq&#Yc-1i3iRl+@2XSdey0ab%CW69E~9WL1CWe9k#iJulc`*~rb2O3
-z!yce-1joIAxQU`oWEIBB|31)$Rh0uohgx?)%-}ykj@8H_lJYn@RmRb&sxH;3sw#aN
-z8_aHq**IT11hBhS)*p&VTUh=f6e<-#kR`68my`Bf#+9pzH7=>9Ydn{$qn*!9(Qj=b
-zI2wVss=hV#h2DHdT?YD}cDGzVMQ#3|lgV${-C70S;8MK<>Y|=VQ0~@BkvH$WU<=HU
-zyY<aNTDApApJwV<!*efjV4B1jcX>Vc%Nn+$W#U2~hoH-ja7IlzzHAb&rI&r>9%C3s
-z-9%%UL*ZZy^N0?$ejco%=I2!fS|2cI`ra8N#Y$rwwc2DLW0+P<Pw&7OX30{Ge;tg$
-z>hViJzO$6$l`LJ?d(4S$=|k&tpkrgO*ySO)MPYi3;V!wlRCHK27-~IEl{O?>*`e)G
-z>2yh@O>hxZI*sU1>q8u0)AtIEudYRvjsbHNopGpiM8r5{8C5Ksph}W(k3Veum7L&i
-zl?oV#{ZJ<2b&?)Wib>`~+l!zx0XltEN@03bO53#Uh9#Gw*7F{pl@3cbUdFtHGgkd}
-ze8)gMXmT9Uq1Fv};LxN>`*pXd$<va=j6;)$3}l=qie)1T)<*rS$4Bngq=50-7l5PM
-zoYXESnUnBdfE=~HnxrsQO&)(I_*^DGZrOoS|6c33abCZ6%yq;?s<*D!;~JQ65&0ra
-zc^%OYN8~S?9Y{^BL9)$B<uD>q6HF|}F-o0+WH~8{!eU^BHijNylfSTYf#B#-CdC&J
-zbj2Sz0|MCL3FnB-r=7cY<4V~sQA^;NB2d;Zgr7GD`ye2(4hl*c69K{`@Oq*^j2*qa
-z4%M_#?E+4y_7Dk7``kN*=3Z2vS%+%esJ0`jP6-tg!4;D#T)iJ!#dH7@f`-p;^G=3t
-zihagCW+XhP`4Z0$g1>)&;SnoFtOUCKBCR1g_c_|@NKAHqnpwViw$JD}GXUi8(k(~W
-z31RJGXPg2cTn}(Mse5yBCH!1=c+T^d*urBY4zOHk2vPRNjCxgd1B$~GBFrQ>_=OeI
-zMaiU-Rf6_x0-)>(xbW&=+JQRFo4O$ypifXf)VIcEb~fQ<1^ex;xjr5@VO^)C$pbkO
-z78+HUg2;x>nu5q|OUsRtOIQvHEQgNPyT|0k=3a8&b6!phENY%-@xq<~lYn^0y`-06
-z=2$Nyj`rte)L3?VwL4Z|QJXo7mkDF(^kQigSelMD(D%$DYS_}^IF1Gh%}4QM9NNdU
-zeq0LYocqJg7%nWS_J^A@T$qHE;Nm&&c>zpr^a`=e94mCi(f$fuHI}$?qV^s9a89m}
-z8*WCXq0wvdf$RLZo4;Go+3QCKr_hjfG5IaP9}pX!J582Wnz~t0e(e+;4p*hn{doM<
-z*&xd%i#;R->?Np`(s$0@{Mnp@u`ALfY#+`Pdqcv7y*N(7e$dI3q@3JRava&#kxS<p
-zK~(343i$X9wy<gG*uPf5Mlq|HZW}7*Ni-gGK%Wp%s1Q~!^Fs4^p+y%`*Wr^_p-{M{
-zV@eot$VHg)hg+Q$r$}d#RTwk4RiF)i(K@0-t>484Dm)31!$v;RASR&#xiztbXOoZw
-z<=Gna<}Ij>LYArzrd`uWZW^Tmxfw)<S|0&9xMAWN6GN#`11qQ!I2LRa1)D1Pzo9NU
-zxj+ekGP@bhUU;U8j`_pQOny|vF%fVKwO)t9@D~QjF76w#FfJ<SS9_el@UVmQSiDtX
-z_m8GYQ+j9TdAG1_{IsKAL<f$tDue^dC>!*&vn5&9j65^ec=IQcWNL(`B*4^Aphpty
-z|E)TG+370?oNkr1-K2C1%jxr$hV>Is%k=Q3Z;{lZF62Uv5FFd`2#yx;MSyx?o_yxu
-z=uuP{Rhh$I#b-UD+e(Gxj%gX_#{g8*u3zb7b_?a{_%I|7)A9c?tb$DObbPSL`#I-@
-zUV#~!j^8Py<z68weS`dk(|9;6@E7=nYoQ9lL3B;M1fFK{kFfV|umPg?#Viz>fFANW
-z{N3(`gecu1+U{;>O_Z?JL`;~Gk&Ae6Hk_61o+D{BMqF?~2c<&$JV11)^+PrZF@$p~
-zCP%0s=9)N8GXu0nO>S9Dsq5M2eEo=dk=$-UZcpUC59H9Q#Wk*|Nrjq=Lr4P0g4;#G
-zjtc&~3(lbgK$%_J9n6=AZv`AftuOf7taqPUN_I9_7(Jl7gH8UzJIDUTH3LhIA;u$B
-zU3Z{DsW1gS#qPk!Gh@xWgFuq05uTFNbqCf-d)TTOLEvU@mFX%k7#q*iT|aHsPegra
-z0cjy2sYPA%bO#UMV?4BAfp-b><TF>_9o*oms@hJzAoDoe#~}5XtnI0K!(qEh`(U2*
-z#NiUUh{GkKL#>Z}rgYTZJ_r>wTWKFBYS?;45Ix&2sa8klPKn%dL2gCl{tL*VeTeIP
-zzB>aMVDtoze9jjI7gg|?=%-LHfHJ$beQcG8&jlPf+O1B`4{_s0C<~`vfy8q{{DnqC
-zQ4-xKv*c&C4;8`<e3T7(itWS5Gh@x$M<B`62v14s+J`iZgZ5N3PB<WN`>@LVI%2As
-zzSB=F%{lFZy69;iFZEJvjWAC>bM@`x-54xF`#?+^&X2Qw?Au^RJrw)YUZs67FWOxb
-zdJ64h8quNFR}9v)4?=}{thA4g$qksCPoGrCF)xyvD9ANL?pYuQGZ)u5&S@i<cKaZ3
-zEI3va99O|_bHM=0?ArEmQfeQg0mo2l6NS0_q&BcK%))qw(=B3zzY<@{N^}BVJe=)L
-zs!%FShE8MqF!Ib;^Y#%)GBv_elDhU`owT>Cnr#Gb2Ub~o*XetC`l+Qkr+rWtJ?-Nk
-zcp<k&m?xjP`u6d5d+!tu^+!>o`VKAjNs;82xau6vVkMP2uZ7S`YTsOXt0Uqe8)Z;F
-zk$L*(<gInW0H=G%7Vf<iY$=W;uK7piOW7`wuW5>kz5U~Nz&sW$`MiSGIs=>s0xhjV
-z9wHKP&I+VFhsX%WK31${Vib=R;n&ei*nY8OX&c;Cuyddwn-P(04{)-WeMD@6=0ZH3
-zL6rr8o5e7MmZ|z-((t@*T&rC*)uyR-BGuiTs@eJ^=TR9Ef*Yc%aMM7AJh!8VVK)u5
-zA)wZ_f}Je{QB1~Bhr_XJgE5w}U81fIk3M7#mkb!p9LPvot3ax1TrW}Twd;&<C`BlU
-zAYPLec|E$|Y8*F_F$Li@=4?+yvSq-j8dnf`93!d<f+~wusQx@VPBaKp9X3_Fy;;Xp
-z=Ofj{oa#iG$;a#eW<&^@L|5VFMR_&KhYsBY^<^#3k`-=h%pnr%vqsB=Ln%U4DEwD(
-z?#+krd^46Nl$fnp-f0ry-SZhl9*>q;5L8*LLiMVt(m_H$aG)SOA)PInY9mr@=2Sl=
-zFDfHKa6@zzZg_6ojisXHX={0$tWe7nh@7Ei!hr&zDijtZp?6WzFwBKVaI%Kw9VHQJ
-zc?^-qqh%HZRTisIy+zD8=V2{-&<$=$Hg2lJk?KfJb>HBh+*q6uA!rg^g`4jLMQWM<
-zRqj*aJpK4oa&?cVZhW5V1TPfeZvh8M^eo6>b*2)&5Hgjr6lTMd`+W8^!Pjo^%`|+o
-zqWZm%r|_SxpL6!xaNB(XPCS;oN6{r=@q2{*WIQ#tHm+ZK)GyijO8)R}Ta(dqZWthc
-zj~h`4cNu<?n{Ft+!s6a5n@1bs&X)rYZTLm!9Ra7A2smjB8)%2<j`DWRt_c<uzOvzc
-z36JAvY=Et+RB>m37>#9vF=N?uwEynLma!c6^0HlE>70jU*H{jEvFsIC_Rqs2&!lt;
-zu8`=Yz;b#XmH`?-v5n?uA5$GR#C{Ep2>UfOsWh04Ov(E-6D(`ZH5~2LoKL5Ezh;`)
-zlFPf{?Q9%A+QP96yq!I{fp@dl!N#gpqS~DyN}Sq2$IjiEFVk{U_#~pQ)p0xKvz;t!
-z51)Nw^8fPjD4BOD`8Tv8MElQIO#h)zdXP5}FCDQ)H%av<8Pmob1aYe^?D6|xl&?u*
-zwP-t*fj2<SVE~mZ{=Al7c$j6q;9F35n?^COV#2W^yidqR>kufG=K&XzyithPv0QXn
-zWpo!Zma*>ec{Cle3tjV6_FjTUn87k@;q8R*$&B!bjXsPK!5bvz=Nx0wxtz_Kv$+!0
-zg0p$i*Yq8n5j5f*R!&fwAMXkKq51bXW(sZWOq;WEQZHxz!jV5Z5a|q<j+=`vgLqhH
-zMMKmH1-e#=bom#{Aa(TPSlCH38Bsi^AB^ZAa@B1_Z1188!^uGqXF4i-TtRrqQ-=g#
-zL?h@5BcG#Xedw5$jc8N_X+%b$hb+<cdwoQ=k8>0R?Rv`5i}C5&n3*^rjYLmK#4<%y
-zorr;0RRoPN-9{uheA-aN{2GkkGmYTRX%7M*CP|31IO~|R-4fM;v%N0P2paJYD<>L}
-z;PCppIooF*wvI|{IHz4s>g8-ldhUAkG`zLk-WF!<7Tbspl;GpG-U{e4BEC2lj3}<X
-zeYJa{t;kik5v|8$7)}m?IMZQ7Cv*z^<rn<o=!##ZdmfdZ=oH{KBKh{}iHt&vqA((k
-z%)rDw^r%u#1KOMvgrx9&lr_y0;tNW}#uYliqN=8e(979q?~M}PZX*&L&Lqpr)vX>>
-z6`kG4hI8bk$E0&P8<jNWmwro}jdyWI(1^F&hy;h-0CUEDH*iL8Jc2u?T~6xdto$XO
-zSWuOSoqgGicFk=>tY|db4X1A+C>zo7SaFAA8F|Me$4@{0jPAQ0O6Lj^Bk^uW&-)7J
-z-RG$0>rLKI@AnGf-{Q0wyi6RvfG2SJDSiJioIjh#5@X&U`c1OrkD<>2R~`G<X7XpS
-zQY|IJSw;d{1*b=dp(Jg=^PRou{o=~(*5q?L$kcMTJ_>mWQyk83F7GzeZ`L~w?AC?s
-z6Ru*;fPB>*-pTjJ;{hK7f2$w(0!aOSjwAup4`gD*1A=DuqBlPMj)C`&Aluif*M1}K
-z<aisGNBXysf+p1z&+k2q`RE)Nhj;`CrWWqodyhG6E+yd^z|R2@=-%61rT2IOqEw{8
-z(f@oJIKm(p84hfed*5<g%C*ujCe}yJTA&<u*!+BBR=hP*rTpEX%%dAYQ-Sb7A)Z#!
-zqo`B}yGAQP>g+x~nyU&rGL+Wk1NO%*qFdC5KM!s;Mo?9l0X2rd1vPcEG06IA-W+%~
-zgX~4ypK-^)RCf2jLhycUH4nV6s7`#ulB;~aa*9QJ@D%uqPhi>_HS3A`!O5a6a!tpV
-zCl+hV%Upx4MjOs;d&aWQBFK?;`<0s{kkCh*BW&I?vt;1VPs-vbtB_rSw?4Uj)G<He
-z+ASw1VDTceNpTI+`x)z`crUKS_}ruKl<EyabaBXgZcdk4!b`YOxMX3KHx)1&SOyC#
-z;!ck{Ol~wYy#A3bEKjA+0bgkCzc-Z}#n&B}8AQQTed**TFh~gOhmJ{TzVR1cPtdEl
-zD_|p5k0mTWwuu>$j9Cw;tO8Vz2pGO}q7EnO#sBY2B`+OrCf_{*3n6pn8;_GOj6+8x
-zg=$+?U_U*%VO-f#IL=pE>K6pppKjEz&wN_@Pni8Q)_dHg=@t`uNnU8WwC%+l1ef;Q
-zGag_C=oHn0a3M~Napx($)R{^rQRF5Rzc&@yES7`zu>drU1)%bM!V8zDFQ%8FtIH=B
-z(@P^kqc;XG;I+)~{a0jyO#0SAXQuJxAHOG|XB~Lq@Nu0_-tdYEYZCprDkNU)_lt3U
-zwJzCtrz%Nb#$aEHvA|qZ-eN#{*GdU~cUbWVYtJW#8;Z#8I-ZQ*E1}r3!*k9jdr5^I
-z9F|QQ2*R?-jChqb5)U%jun@4bL$HS+s57`jTvoBuq1OlP)t<4e(xF#TdIdogHGSV@
-zju!{^9PM2kh(}NNjpd-1mxBV!;dxk2j3vJoSnzUMU>TrF&N|CGNPuENq@<T&7lo~R
-zaqTQDqsFq^E74eiW!%yJdYLemPA`^5fu(sKmT6-NCyAp=u0y8<mbvq=%o|JSn8E?5
-zRL@|bTU<dd7K&C8q@lH_1$m)p)5xj0Ek}E0_H{=u6m^IVFE}Sl8|YNl(Jic^zrlxN
-z`M`GXN7Za^MC?b<!-~<1boj<gD)>GC^SLy1kI&?6h!I`ojp|)iQg|I8o?Vq|-ur#E
-zG*h2|p-fg6?%9`*?&T{?yi0`sUWj~%6~hmWGtkusPch;fAb$GdfXw)5?l3kt^FwmX
-zQ(>GrqF*1*RB-w*)cTD<41?)=JAmP_AEZV3#A<v2Fq;K{on2Nf`oB3z5<gcSZt;f4
-zy27nEEjdNX^9AKaQSO-XbmY!&-_Hmw{nS~-YCb{s*f#sQuA_2)fCR8l8ql3e`kNe4
-z7@8VZK7_sJb7W5Ky4_bwvNy6#1W6oDcE~j-H59}v^%$S29CF}vHWN?Hs9&Vpv}M*#
-zFDW@^)k3TzP?DCCn)rq4n?`W-e`8tlOktly<}jrMOVErC8AlGEsfAOTe14SfahkRJ
-zvNbtX@qOsC&hCJTVAc&phgyFu9qIK2sA>XfQN1ONqZJK<N1OF1Vw}SP6jv$&wBI<$
-z7iI|!D<X^lAnzFBf$}(_L#_YUlm`K7B%F8c3=1vIdPK2szNc#fvEAuo)}#UBQAs$>
-z_!Wg&HABLVmu-Z)ILK2Ji|_^vJaCd(F>7)SN~bER<!qZNm4kH4ukp<3s;2Ow1!k;(
-z`sB^}H|So$(=ND1dnyb2Br;cT*8d0`x+l-?mp=CRdg~L_&~4v>9sqbSu0ceHT2JQ{
-zxl~_VhpLzzYj%T}^WJ)w1+_G>j~L9_OK!PYcLW_j>`rKyb-q#uv*zkvpv=X;q1NwV
-z2G4N<pe3{B+Lc!ov~pGRC_wVq_5hD=VJyw>Ik2||uU_oZzIl`)*t5`v4=Bg!d;H3b
-zibZ$>8j}`HD)wwS!{@{Ggn{joS^)<Zyma3|^#jh7?YCvI1&zbkhTqJkkJn2yP6uwZ
-zs;WKzCc)taAUMJrL?2<FeCCRSYb6ekAIR-Saz@>*TITgaW<On-pGhm@_~LMpVul?>
-zEd-R{uXXxcnqBA8Iy9qjvH_0(%c%6(@W=}nbkU1)qFhdjidTvJOjDUJo=e-5AfXO@
-zq6=#qz^IXR3z3MkSLBRvV2x1luf!<c!oaV1E^W?TqeuKO{)ZQRYCcaLKi0CTQjgCO
-zpwnk=HhQ`FPiCWA)&?cVR2ATobrq2_WF;JAB~(RLRjW66p->M4VUHji7ZKgzlJPI2
-z_@_KNK-NWbLv$5xeohrysn<cvItOscI*-U1vJwum5~_mzjly0zZ|DvqJ2m(W0?9gy
-zh-E!7PoG@R;d6|*(%H++e@9Zy_ep!!Z@&BkyjpC5xfE6`A?e%#R#xst{s88xSQd$^
-zA@TcKx}V*>p8hus-zb<Kok}l{Or`e^PbFV)&s6gAdj^}yOYRxA%vd<(f{yN+b3OlM
-zIN~zK(b8Wz&L=G4Q^cML;7e1ewq)n+s=Ucjv=#UC`oQU;Q?ZofPUBNtzQH=p2CLvx
-zUB0=^>*ZY7!J^H$1NNN7g3cZ~i?HaU)_YSO5t;k2R$;mJGYyyz`&v1E(XKzN0W{bc
-zKHEw4Xfo}7LrXyFJI-3_P!CqR6kcH2pz(*3HIDX9`{NSOmKsWNDZIe4U0~^)hh^7T
-z_F^|tVA(6M?4O6_z*zFdn*z&Wf#u{pET_iO>E&fWW+?5dk2_1d!>W_XeDS8>Wu(9|
-z>S%xMju}f_yeZZ6M1iGo9+sxDY)T@0y>=SE@wwX>mD6M!D?xKg%;uG-VKWV_aczZZ
-z$%mT$7<;gcbph5aF@_JUC%+B&O_jWVBUxIXO7369+RzFXhOii<g;DkhXbsr8np4o{
-z#`l(xly7|hj#r2*fY&{_LiCGHrX(1(RE)_#>4hUh>(oiC+F3#Bhz`1zrYe4IT0wb5
-zD1uuz-tEQ9$OiXF5w_>bU*z-424NEzt273mH+J>{kb4Y)u&0@NKIp|@%Le1JFTl8~
-znJ-J-)I`T46ply{5Ff@>(548Oj*LrV;ZwkCauRT+UWvuYD87#tH(%a6&hnYpN3-~9
-zI7?JEX2R#>;Q*STrlU!FjK6Rl#&i!61f8uJE)zg}SSDP?_UmNfa}fC&*<LJ+xz7a9
-z#>E6ghgxqRlnXEI;6WUuaZLe1AXjx&#7}ECqU5$&^nJaCk?nM1Cg=?p^hQMQKY$+Q
-zS~TN8VMq0twpEXw=zDrM1{m1&Aj%c17CTL(!cSu+YH374Mi`+Bua$2jx$;^$AmVG~
-zjDiU<2ku9W(WrKe*!Og?=!lcRc7g)k2?6Viy-weB=~bt%BXD}CPF7PCl-dRB)OAcM
-z$sUtt3^iMVYC4G~8KA;F=@#$ZK+U|7bM#`ZOwsD|m8sje>_z(6iMRN|cb;*028klr
-zW!bvXka?3R^9zvp;vGPHEPF*rcXS!SAMd~-(Jpv}WpfP1FM8iWrZvN50!a1v5ws<0
-zc#BKm{#;IO*-TVns9+yxgJmBeI@CIWI)b(_%cbs7<%A04DwaJi0>%5Lw(L`BK3X<m
-zBE7AG-nQs{F3w-VvWKDnK%rvUd%$JOJ|Hugr=eWQvP~;29mKOWgb})6*<)a#+p;$R
-z5iDC#S~i)3W$%mo_$6CXMK4YuObgZ#*ir-CLuG5C?{rE61r8|Cqf}1s2)XJp3c6@Q
-zpBBp|V;DP55JbzK)8dpY8!=taynV|)QN`-nZis#0YCeoL*=5<wB%S%xVCH4aOrN6a
-zvFrgT4@Nw1RSfD^dr_SCuIl4xtKfWJBn_WyZi^a@cZs8L$Jqx@(1%9;pn???4wk)&
-z=uqoE`2IbXO{h>E70ceR$eR(REqhB<7A>1FDh+zG1-&`ZyUw`=4r!u9tngC51(RAq
-zjxBo~F<ABt%9SkJwA#!>pG{~KB8<=l%U%Zy-IhHKh+x@@a+zgSh5hmiUa>YR=Av$!
-z2yCK(;D)lb9^!P00L^VXy@SB%^F)B1JOoj~MT34iOj?YAcPbWao+!{07DwL)bMCIn
-zNWY}vm^5RSW)Z}srjw?NBp;&9m#Ip`@c6Nh#QE8SVkxT(LmlfkK6*huv#W=%%D>e)
-z&J^6=u>cJPI}->ZJB*`QY(;BA$6Ly7sYJe(RVJH231gBa_(81(e_?+a7`5gxS|ao5
-ztQ!)5Ohk{mk%TzVhF?c_u~p;#n!7;{@H-yv!&@uaAmFrEGK`2#Y1B1BVWL((o$Qh#
-zm?FIjyZ1rq(BiHD!k8PcIG*zER0rxDK<*R4772hYqOY*^GsW-$?mU=y%P7sZ4Sq=O
-zc%SS95o@s{DW0e?CL=|#OL`S{|DJ1mQS?Lq-dYu(x=Jf89-!P4p~Zc(Mf4T6-YTo|
-zgM_jF(ke1K(m88!7p0`dJw%?AZjBV7MbfLVy9bu~eeXrzBRyfi7rt)fFR-KA;G_&I
-zN!Dzi6)B&z>gaRhU7s26`W7)p8BPSfgu`W`FvXs5w0?OY9PZ<B5H2wBFb_^z9bkIB
-zk8>AcB?V)f^44Y*5V)xrA1s@8F*LNxyYZXA7n7fXj#MZOg(kNE5Y{oe&Xwzwp$Ae;
-z<AbB?<LgbFg_}zLP};$0YyiLW7C)voxiOXejsWN{47E~?E<8FCPFU*mqr>8IX&Hj8
-zL@SoI(lt3U*f|zNzS-*3(g(_Mag-3LzNLp&J+5E+!hEW4ULkE7X~v!(-Q$(YCt<yJ
-z{E57uDUo{L^MA^opR(uDd$4er(Z9v>`(OU4?O!})&o}(>$9Z*2Pxa4F_0Rq9&p*{a
-zKjm*+J@Jh7DSrcl(9Owx4MyQW{!{)lweghyO#h_Md5I_4-@su8UJ1c$P*bWtPjJ|7
-z%XbektI@kFn511k@Js{GCg2B7$xrSf+z-b9IGJ;Pn6TjDRG1Ggdg9W+%1AL^DcxV<
-zp8Vu8{=5UOxg2PuqOlDcVNV-dodpq12sMjC(YRN!gs(k%?uOYQX*JUY<X#Rluo6wY
-zuEgx*cQI@8w6QUKE8oX=$^tfhKNw`@5!^YI;1OK=NV+Ys8HJW!@koNGh7IC;a_3Z)
-z3-G3&VuF~0PU>kL?v|ws>xKy5MT_6B{TqE=M;v#}*PgOBPE9&P&Fcpz&3kXa9G|kc
-zPv3m)DSLaWe|s{|BUbGVz1sm!WhYDT#Cl=ZC%^Ig5T5`a#8|6B_`P5Gy<7R+sr=rq
-z{NAek-mLuIDF05E-if=ZK6G<B)LH`{9H7k$j&&w&k76enjM*c7fcMNpF0XSq7as)S
-zi6>rS#<4M+7i%UT#m{8}mbx_#-CEIg4z4e0`167(2DXrld(<i1f#er3$gduKJNEF?
-zOYh9jPrSRANqQ5_giLZ2uQKUeezin{F5YzN;<NN=-YTn2V2i9W&Lc<)+Qbxc{0Ink
-z5}6Zt{$U>b0MBt}yoToyfs^Mk#Hu_ympo4h4j04Ay3NLsYWh{4NAnz9BVyUG?2dO~
-ziX4?k{TaFS{3qye$upl$;DNFlp1o~Po(F)d%CmFH^Dyc1Hg*@!gE{>w&!?rmNyfo5
-z31G#Vn4+Fp9y}YldH#mLGslWPJns^pY-1m>D$mX(&pdqqo;%$<A0V|}&wF`J>eB`3
-z8VP`BVv0PoJa{&8^ZX7dn0khZi07A~O?}{5HtG-Ja*K-U`y4ej;By140q*BkrExB$
-z>5y)6X}4RN?VPh}4Q%E)=?>$l0TO^T#1y4rc}QdAmgc8n;+W6wv1351-2-Rqgu*)O
-zH8`REk?47V<NNqfV>7#Z@PnLMpf4D_*%(zpykK!35a9s}9Qy;l#$b55;uDYIXLk2X
-zQ9@5wT-bgA050eo7%z#}=I~@AAF&9p6rjuaGT@?$(Q`b070;1<8O$PLRTVpzDqa!X
-zrTuOdFC(?yVCM6jcx`iy1fXJKiYjJ#h+^bc@hf>05?gOU#q2|82^CeWAJ_v!TCU>v
-zbZS)0BRjn+{<j3p?*45A=c|}R)GOZrH&pRpP%*!GecM(%E-bX-24YneJC`b+7Tl%7
-zZWT9?TCd`XJSTqq+Go_T^Ht=8^J?J}Mpp5kLJFw(B&e92jgfX#v3}sPCem^hzxV?+
-zD!x{$;;$oUcK0%Z^HoeDRPpia@N~$FzLI4=5A5lE9gCgRzy0!EqFs6W<)`0|m6h!7
-zH3WU$e&PK5_c<F|29;vJBw2tK{tEAEAh?WC{ly&FM{nWHnH$5E_c6p(&wP$ni|1%1
-z&6<VMS3Q%R=P@l?I)Nv`!Nx-MdO`<fPo>5)s(L>3bcPFjaxS`2?95^asX%e`tw3?`
-ztw5cE<qFiHlgbqLdZ9YKP@BC_>%CCRy-@SLP;8GCzM562@G(`~BSsF+Ca_9URYGa8
-z27|?Z?gxG^w20-n5yAWW@xGHhm6Seziv<<}#Ad2vn)uZ~V#$dtzG8(&HH<u0cUpeS
-zlM6F=S4re_+D<S>zpTTvw3giYJBu@F%*cI87Q8GHW#}$({vN-|oSouaNh~ms7mnAF
-z_4#viHcK>KH8N+<FE~S^(-?CWXPY_lFgoHp(L@<vb<z8lWzG&uoSo!xxE4AIlQGGh
-ztyDStcl3xd>5OfQPSIJM(PE<tI$~*U*PLzn*EWJOXZtxfcxyk8<HOeGj7jE9<;yy|
-zqu?yMYiDtG3c``IL-TT?ptbK`2MEfX?dIIzN@pIAmu@pAnKP9ybM|_AWY$@9%3g_)
-z08M3tq;Be#gog%Sn8<vi`uYb4VPhR2Mn^}F92F{$`uYxk4P5&|I!nwBm=b@S{QAVe
-zwdWiU#Z3PE+T(8kkYRn+^@VrfCAO8;2T&Y$UH|qw6oXqha{T$vjp@I)bw_|WIR3q(
-z{{yC2KLo%1jP}g_FY1{cA0*PW0f+qki~e?5&pd4x3vA`_c<ogeQmkkD>qUF!mEEJi
-zz_1W>{fuCrbRD9G@U~DGgIAiF=Y`ht2Gtl}SHT+Y^_@lVWfdzgS8<bU7b;d}p<=`O
-z5xbz`AIeqCSfOI2OT~&&#oq|-AHRy{!BNy0M<A$pPJtJl@fk(@Dyw)US1UZ{JRV<Q
-z%$Q^qPZLeal%?WzXfUXFFsS(6E)^HfdUm<fw0@U?Q_~-;t2eJNbq20I3-+nhsM$-a
-zQtOw?a+O21e$DX<QF#W0D-m@1R-m)lGFIqR>C&lU)afyJtkdb8$B*_IgC2_KTKHrd
-zUumA?BRm^r4bFjTRQY@!_dCU4mr2s#(t1^W$M@0gYPb8jUCBY|xjoK)dY;?6h_Z0G
-zzL+SwpW7R{3m=|-+YOFpd^@cBJur5P#rc$b!j;<ax=xS<=PY(>SF*a^D-&>+Kc@42
-zqv+gVdfSj43p-l~lARm)fB(~cwa<ci*Jl;oB8^x~*M5K)w>TR#&zpL#GQhDj2~l<r
-zi~>#_`^^@6^pMFuIz;zERHr=I`M_1+fLig;IG|QMq4nOR)!wA}UR-m%P_w;BGrdU@
-zy|~7Ep~iZXMthS6dU4TVsmOTJn{?QlwCkk8S53nk6|#m@W}vr17cjfLTsVTiseVJ>
-zDaQ>KDIec?Br>cLVvlPbQJZE!=y!RrdeB4;pAh$}6q-K34`X6nAIxU*!ll&+tfL|M
-zV)8LOl!*R*4nN>@Qc4sYo=W}*GZ5S{$cySiFq^aHh*+g`w4o(PbxY>2L_({OtAz7y
-zV#W0MhCtEjC^Ni?)%9UkTtwLixZ#rbY#{Daoj>|aj$wY_B#93(9|&`MLV=%RPW0q*
-zP}$BlbHe-Bsh-Zpvyw4$T$w5zlUAH$aV4tG6o=k-hswfo!nA_$z2;vq#EjF(u+}Jb
-zS?=gR!ywX(eL(JD*Vedf*fl;1;J}VeD7>GM`f`+Nd|wBnF<}hvz~nW4kRQM=RR>nb
-zket`}34Wl)*+$AWUeHygor;7mDGx}ru;`o(=KPgNsK!SKr^3UEX*MrWILru1n^e&I
-ztLO2siW(mVD~2ncUm9xtKSQc<W}+c<#E<5;=v#OBE7@TS#;?Ix9tIL>+~9gQx>Vx<
-z2}{Qs7pw8ZI>nd&Bqq>NS*UR<JUqG+YMi>p2tFoRvC82ZKj2rSUE^`$Qd{Hd0bS#~
-zw^OO{S>aw&pc<c3f@<6sD`Iub=Y>nvf!$3c=QX~JAE<Hmu;m&r=(?GTMAxN%xAFBl
-z5~}e{7E$31#k52gYh0P=wU|?_@n)<s+`QTbfZO;l;zbMSoSCTHX%_Ut66$zH1U!XJ
-z^h{f<!BFD{4<8WA+jv02(h**)!qpRcU9EBprkJ2kWr3^}9_~?x8lQI&GF)ooe~9nH
-zh8m9(!rB_&fLNhdZvaE3#!qzjB76dvz51yVRO5r98*6+ZFWgn*1j=iC7(Y<s9G}ZI
-zUeHygjTkSxkx@rOuRexf=C4FTH9kQ&6&_biOTq$08&@XY&|^-u#+OSq-UNVa{5Rpg
-zQRlAl1Bo0SU~C`q7j7FWPaoWkH5h8#;JU3`YU2S3OGkLIibWdog-cHeT;miI)Tu1g
-zxD_65UWXbVa1k<Gs`0<X7f(Zt$BA}rjURyZP~*HC64;5o`m&^5Q=m4!q6F3Wx}veh
-zc@xKlOV#0TjO8`H0T|TyKDAXE#|yfuv`yn>jc;|4*sdd?8s8<H3U?GMUX4YKD>GbI
-zuGV-5tcYv0@qH9^jsLM;QShrt`Bl>0P{$(R?GgCTu{^3M)c8CB@Q{$;@;2_&u6vAP
-z6*FeROH|i5#RNJk3pKvt>~#i7sPR>&k>OH}e-^k7H69l*ev`|u;dzLgdbh#zYCqwS
-zd5-U?-<*(TVb(uJpZ&VF4n4b8cEA)~{48eI$}DErhV^z=m<hff*gX?uOf$iIxqzW`
-z%>)(0Oc2Ju>5+K`kVlh)_4C4~9sOb9mBLcEXc5eqSI8=6tb1GOny+uM<7!Y^u4cnk
-zRWzFMG=9~XF@bV3p1=>7F=sJlGcM@L5=V`fB*q*?#}zKNVPjku8ha?wnt6<VgeAQA
-z5=3!HbP&R|ChXi`&jygtgC|}E<xw@>0K7Fl9PsET?8*p=qiXSr;Le~(^TgV)VmRX8
-z`)*`z?SjU=B!TAE?o=U&WX-q9nmb$jI7|96D!6Lsm+K^0dy7?qC&js{Q5Z)9HgYtg
-z1z35maT)2?%N9SmY;(s-QMShQm$1yC+kEjs79X;@u8jiQx-a|rQI#Z{P`P}uPML+R
-z8`cYc!Pb8b`nIhzR@l1IW$TLd+WITeQP-`3RBfFz?qKV)y|zAsBupn1sLS3~f^5B`
-zXtZ_S60ETt0_C>8g&%awsDx6NUC@=et{X3HeZx`O`W&OO(M`m9C`DUe6__sK1!HkZ
-zyh|ZmYr-x(i*<PL2#+w(*5?r`**bs1s*Ip)>qG?bWd*eL6~$=lTCPaiO(2T48+vv@
-z<4(Omb6a<+5JY(MZL;RhwoWy`*0&V2w-vNHLg$`6e1)~n*1r;-dg$E;F*D(ke!I)o
-z>(=w8g&W5iy4LfQ8vF7~E2Z^3<rM3A2E-wpVA<aabhd293d>fyEL*W&%YG|3t+(uw
-zPXZ>lgIVwYS+4x(iR>W>X01SGJx<x&g-<9N&ANeKu8A&Bgh07jkKxBu@(|C{<jV;K
-zQQ7pck<z9|9HmVkkPX@5C=z?fM4KLDiDWV!^mQ@pb_vm%Pz%XPE@&68BB*o5hX5!U
-zG=IXNji7AML<HkKRX~Ft5C<@5oDatP<k2*PDGM&m43wL)Q&lv=n`0C77ddUplpdx`
-zJ%S(CMfhlGFy)3B=<T+>rTxl{eru~epELQpn6mV&uO9u7)>l7>pt8P-y=i^UL~~tK
-z*$l=H4IPXWFM#q6O7*Y&y$2psc_QztK863U_j{|d@Y4D?&S&!E2bvB?fMjP1|8Mr5
-z)Z}@EL3F@wAlcGh<#+X@<#Km^-FXC!=UrIi5rq;V-8iV=;>J%`5*#QbrQ%&*JXtvD
-z+Rlgn<l#+wPV8(ghB`d?{C)~?oU-Q&cJzP@SL&oR?;6c>@*C$&LO*R}nrGaa9s^yu
-zQOS*?56Wkwa`V+jZU7gY%^<77*`RQ0)h9UJ=!)t4jv%9+vw=J(=Zs0<%*b?r(3}wo
-z{L7=Ug0r|P*3H>004tmwdMe97;>6Lw*=as8tm=#tZu6XT#w2iNWI|-lh=iPd9~{Fp
-zlg{GmO*dzAy_{*f>e}2B`Zzpt_Fb>Dd@_uVy&+}k+#fhIGR>;ZnWpgI?Bn1ka28h?
-zx;dlQUD4U5*`dxjeJ<>5yDw)Oc}~t5lfapgg(r<^XGB7seS5)KoDIK3Ge$olf%j0u
-z++e+#;oPz(!Rsmvmx%Y3t}m^4KA_YzJU!u0dlYkDWft=R!+K5;yrv%jQhQB|6}zBH
-zm)E2icR_yyhF9+=y{+6vCYLKJT_oSG>}5xT8Lr@0ePz$*Ik`%i1eF?Di-=s=L=q-o
-zM}JFhs7&!0V2N(%H*~4B6V!^cJlK>CYYRf)&sssPTi#Zl6S<&P92=(+y{)XA!VNXx
-z<VJKuUyp)TC}V{}mF~p^LQtWv=<9fPD|EA>(584(k2CFPQ0NSP)ho1-=i~}y5)^7=
-zI%;Tz5=m6(Pe5Ox1q}v;zOYN7he4r-P$<4jrPC%8LV#1J{G`?OrF|<@snJex>bFp+
-zatehS5L^7gLcb2^tWd@Zg(_VNRg4Pd!}7Odp?ejDj*w$p=%}MXp=0<}uh8K<Cs!zw
-zpim>z){PZPBtfC}F8^Zfw!O=#I`0xk&$)a5I-=>`y|;G>f6~V#-;O%-c}WRT_9w3Y
-zej{1>c-4hSmp)!xwpjRVi=Ip#9=(l*aOvY=R4nJbKIC{*D(74ZIS>I&v7GZYA;-OP
-zIp_02j(f$0=hxNdoyR4{$Ra*Xf!+W*2BW;SOh(=QZv(-PR1o|?Kro09Tz_>v2Y2PF
-zIexH2-X}9Y|NHyZZ`a9;x75|`kN+Fh?FxcQ-SYf6o))@(qk*%n)%S43&QtY^IztE1
-zWgt&L{l4&D-&Xzpa9#cW^1o93ZX)=U>i2EGzY6r253Hhh3E$T{e?IVdZ)#QN2a9x=
-zx+eqjp}LbMdZFmER|?VzuO!ibt|ZYRt|ZY_t|Xm836-Ri-lW6cq=Vk1{obU#-lW~$
-zq)u<rc5l*FZ_;LO(ndAO@8J5=aMj7vx1iI6b4g1GZfh~V#rJc4^f_Id5D<46<{0x5
-z)x4tg!FAig)0aggx|b_W67YElA;5CxpJ9qKs~_PyPGcD5n@HjL7k&Kw17Ix7MdJs+
-zbi$e22$<}t@Go<vQ?ZOfoAwN1HMEJ`H{7QY(=i)HFz8yCHW9fT9tu^?&a47GGz^;N
-zKI~LcLZq2G&mXKH;b<SHCc-C;;GfBf>{jqDplTF+$c-V)le9lX1&;{5mbOO~m4Z){
-z&-vjP5^IDMESJ});9(ZT*$tPcf=^Li3MQd01q(L#A5ySMQNiOvlWi*??Low9XcM^=
-zJOBVGn33G8X%kUYFmYfqX0kq4g1uoT#;rg~2nCyZuHZN8fQLSX7N@e^3O+!w8U?SD
-zxpYl|7Fl<dAO-I!Dg|#y1`4^4SdEZ^jSB7vdS_pp%7QnMA_bFBmx2Y0`KF4{f=!AF
-zK2Tb=C+SIh8woYEiQEd_LQD!~1Y%hjeP<~um^h$dlP!OlDOWHh1RtiJEBNo>6iBdO
-z`(8t>ZUvv#E4XP+6iC5~N|1t=6_tXg8Py8M3Su=v3N|WuUeMv|&{FUWQlwxK>Qb;^
-zF~?I8D%hl`;8mq%hq;31kWfRL$gSX6#H3(GpkNErCZecd;(&rpwrv0(D2^6P3BiY{
-z=L&Aa>kbNz3k%%})<BjoVC8-AsSZP|DUgE4gkB0BS5yifU{ng8K&(bc!A1p-3Oc;h
-zC<PB9MG7XNE(Hq~>t8BD1)CHV+)$cN|9klg2{p8d+zK8>ObTWM3brt9B8mzgQO=IZ
-zhR65)(r{ETB?KR)o-6p}Iv=7gBCe0T0(}Ke3#`%rZfZY{gA0nzfD7!PHW_#VdZNQ7
-z;ekybV85>SCB0&z?10IubefF%x`Q$~8GXU=1&}kWHt^$o^pAiY^U<Mqv>1cC`T0jb
-z2~K!mKv}=b8xM;8HyjwasgDN-R!7MrwrR*;ytk(xiQZh#@9n+gd+FL8bl*Px&vGZL
-zw@=?n(CqGA1o9`(ynVVa#dw(e<H3G&<!)1!GuLa%D?}9@<(4ULD?z5*QB<b9DvIn7
-zcM+>GC&5Nj-V(HKreHeG(QX|nGG)^1GG)Q0Ya*-B&ZKC{dqR`Z!E`g)L_!U1BDX1T
-zASP301Y%hjy?`H0nK;l_m~8ne@Vqmogs?|b&rLab1}doceooR_CU~?0{qRReaw~Xy
-ztHuicTdftmg`nBpA4G7z6)ci)aCVNhtgMCxKIQDZu-wolH*C6-8_f*g5O({T7XsY1
-z;H`%1ORH{HO3j<qES1l8<YuMJqFEW%?-7J$o=1Sx&5E(EW~D4OE5+Qb=0G4cD@GyE
-zEZK?*)emg15o^5E{WWi|QRx4uRp=N&v%9|&!TAa$k*Lsrivgi-$>3>6{{-B^Jk){V
-zb*LH#XOMWX2OxCxASaZdHq}s6ZE9HgY*S6dYV2CDu}zH&T33-mn;Joi+7t<OwJE`3
-zj-VnO9!!dDYFcUG6)4gkLqZL0B6ph_MNDmq5r}1B+C&uF6mg(UnQYqt;RW~LqEkZf
-zVd{CCdOqq5ccF`WSa|J$fU)xR!v{d~%KzH$sj2)ws;&I5AZT{?H3a8Z{;3WCxler;
-znojTw219H52VJeHZn^YC2&&7aN{y`v&w;S*c>P&9{OJpM2E;X^(2o9y8_FJ@5K}w)
-zu{b<2%fl06YDbe>p@DC~-VTtQD^Wi%FcCDipg&%&QR1K0D)Dy+n%(`?Z@V2Ol1OYp
-zGk5lDL6coAXt$;Xtq>1JC81*r+E#)`B}F|dDPN-!Vl`IW5kQ!OZRy8SCk{#Y=^+V`
-zuI3{^3?71K^I26)Ly}^6ZbYutCVtgWT^A5f3T+_f@rX$QrB8{*wnH2oj}){mXUlwt
-zwzI3O)*b^s`eGaXGZ;hVHH>9K#I~a!7>SUUSNorTcTKhPvTW~D4Sz(??Cy!T-cGfX
-zNZ`vW;~z!o+k8sk86sbKO5i(D9xLPjm}u%&#!)9LnnB<-fiv%;VZVKt*7pC;{q}{g
-zfFc?&F(`i;L8&E$6J|bjbM%F1+F}0(t&;2ErIK{K`<DD|b%olBL#$Gg&OzUjKU$Oo
-z^-4(&^?ge|Qj~;oR7%dDRr2{o$vEHm7%*T0AT8DJ$I>&#ebmZ+tWx7XS9L#DnML1i
-z*slH9uLIJs+l3gq?{Jw~>E7)k1b4f>r%y+D=kb^3)!XG~bk!}03>>`(C_?>4_wP5m
-z<gVK=wO?J`FjZ=lyKBQ#ITYIWa1A(_Z<u~rE-_<;#7dXMic#WKG|4*Ws!QV1ZfV$>
-z3m4WTF}<+Lj^=N4NnAHXkAN}0KGD6SsnlHJ@{Xo*3W*I^>}Y;&E-_<;#7dXMic#Vp
-z1aId`T-wg;mDpQSD{tx7v36}qeSKZ0`UNP9PW68+_H?S@vM_tfN`H#;V|ZF=a=4j%
-z#yw%A<C`o)&wh#bBl$gA^syb--;@{X@cAb#n8r2Fu#l<+v1I2S_S(Xy?<QgZ6V^Uo
-z`#|<C6vuI{6T+^0!r^`}I}%P8u>`^Ixq^g{PNiBo#Nc|M#fkW&#V`QyeNJ+ju92aO
-z$p@#BwG#npH~!SoMv%DtSSFWIFDAbQcrKgb`<sV&eir8+VN(lmR4(DeACsLaK1h~K
-zhOdljR!eAPZ{W`BW;4SBt?Bb6QRzlK7$s|1b0=$}omyexiJ)X{Tv+&w&gJ#|%#~ZZ
-zmUMw)ES5#5$2htWm&zto*vs|dib^IXET-QsiSaoCXS#tFlXjt%qR)m;hTk!-lgCqk
-z>=M2XlAvbh;45ojgXNo<HWZpEmNw&-f}dkCCQ}5|99oo;j-IVPo%NKT<+@#o=PmJ~
-zWbswYZi&~C6Ghk%l=d)U(iS)_OT2;KF>f=E=Mpm;5;MmVvpi%G8{HB!$(S<lnv^Ae
-zj(T%R4B0XM4Yh7p;!O$>jy%=Y@m@|CQvyr8T}oO9$7P9E@H<Mpn#XgAnGK1VV~JTF
-z5{r#)iJ257CdIBg=3$gHlf?EFhFb2;&$sGv_31wOS1a*Mv?S<7s~MTb&nVS0I4(;(
-zkKZwGF^}gGGaC{!#}czVWDy(P5;G}EEcc^S$H!B+<i5wEIM+;VbT!=2gxV(p@K(|E
-zU^5<%(0yy%C7VO`(aWK_h%56;&{=y>N+~bldR-Vda-7pNW{u&#H*ZeUj5+>j(KKRH
-zc>lTCb)OBo`Y>)PpT_D0A2TeXFAfE#gPB-b7&nmtk!(%ySJxL9(Z7(<KsjDzCtOV0
-z7lt(>I``JP#gApjq*iG+CJj2NqE;+DgN#3VFCO*jW^`DyqOOMlx=(at$`QstkB{_H
-zi}y6XCMv9}uese1*FW%8mGj}F7+nrAx|}rAXK;3hf#vktXJHUM<td^2Kh#W_^>lvL
-z@v%Q2ZLT-(_%J_@)%n0JFg2At7KF#sc7Wg#?=y+v`2F$yZsG@mZysSXPfw+d=`S4^
-zxN`us7D(qL(pfr<xK02Ie0zAo9KkaUaJiX$O#0xyw#I2NaI5(x-#pm-DJls6ZZ%)9
-z%eNXyXrh_U4+eyig>Su8&%+pB>3z7R)Ax-5QKejWeU#sm11sq(AlkQ$G}D(t)NdZ;
-zUimHa(EGleb@5W_AesEjTn$gB8t(s4dg(8vk8~jU+2rS%Z~HB(xS9M)^ZH}M&Fg=1
-ztNBI0(!66=E>vM3PxSfz;j`-Rb6_3N04w;Vr@T}lkuAi8m8g`n-iP@#+cQ-EgtnI_
-z0sq<l@XO#3@3U7<w95sD_{9C;p@Q%pTYDY9lAXU)mqdgfjw_yU_-w~{jxh2!*}f2N
-zFtlT=wP`rUE1(gc$WfKUF<uqf9rAz?NUl$+O<9a><ThO+V|I);1tiCK%h3k7-9<DQ
-zP}x6bvi;-j^8h+$0$fUdbt-w+9$?^PAJkCV&nX=kXdhqcLtEHIU)h1HjV~@tZow1Z
-zL|?Vx@^V87jqFwW(D1}p>pk&9LZxl$LS<9el%FHU(?%X)`EiKLE4e5B-=TUGQeL{l
-zanE#d2a0208s0ezA8^XA69?v6i;-9}`A|$-&eJfB5l`Xm-;B^x>AMI(rxO9H3p6@}
-z%JiJ^lpPXuqNB~^3+|ap?z?AjDtY-m;hHXn4-CP>1)Je@;dmgQIDwFrertO4=nLeC
-z(=KvH{B{Ml*P-X9%f8kea0Nkgf#>tIs=$PXzyzohm^5xnU;>7EIa}bbkRL9AqaS{|
-z0++nfvcNOBa77Kz=4n-d2@Qb>P$w{H+?K$FBO2e2?o-46NN%_Uj&AsWy-kyz2Q%mu
-z77>&MZsx)j0#D~@Re=c&feBD2FlpSDzy!RV8kQHn0&2C5Hng`enF-CH<b_X=&E!1|
-z1V_)47yjOD;R^Rf+I#w?g7DByC*B0D^QmVe+rT=Gvi7O}#5J%fWILuHobc5Kq4F_g
-zXpe!#(c6y*FubPU9_6pv`^Kw+3&-3u!{wJW0}`fI6lp#Rssp6zJ}*KZn1c$WmLcS2
-zPlzWkMBvVrptA;pEdShe_;^>XKUnb}zFeNJiDPb(YN8*0KGyFQyP;>t_lKWQ|4eL@
-z*2~};G+-(iK-^$dP07-`F>s%vo(KAT{^+*H|GF74bf7zI^zHH2yQ-Dnva6lAu=toN
-z`K;pOgy=_o;@skmvx+y*Ek1o#aV`LyEjwFI(QBoiMW^9oN|c}7nowZFpDKh)5xyW%
-zK2ysNNqm&9g^jPsN+;j#oOR@$CYVu$7w~c`P5G|mCAcrReS_<sH9kqY^zPix`1kG-
-zC|G&plD^EsI<^_bE}b3vCz;$4_(8bgT?lDM#`IGbY^x#5gP=M>j_!y8qjf0HCYAxA
-zw)HZ(tn1pryV0e`qvz0Bxb*JaQwS`xDsO}3Q}qy+wkj;2AUTpJ%lyq*tv{(1S(Y*2
-zLX_&PO;oW=FUuxmmcNU`Jy?!oePDUw_E<hN%i9%}*%wCgWLbTqSf<HGmKleZNeVDT
-z70dLpY(i%FCI@V=97pTG^4RUMyl<8}6_)o(<jFFBTgz<Zk!3abcm=mjRQ*{tA+!8<
-z1IwHPa%FSFwmfosEbp4--3rT{5_z)B-)4EV#4_X1GD!i3sQR;PLSorl+Mhk!Z|9}w
-zDS=(c*7KCW4_?8HFuVKB2>NYl50f$8_$t<y#9(>+xc>X|nBQzCOE=I@R6p=jy*7T>
-zeV1bCyl3vK*UY=GnWPKb>C%nvOA8BMiB4u4-QjLs=btViD{Mi(K=rN%X}O~t%k7<4
-z?v7B-tuil%ZnAelzfA9EVOQy;8=-0B<qpm(hYLL_XZu{ZH^_&Jk!RBL_T16^{fwk*
-zd+s;u3}gvqVIZ#{itaNHxG{G9#=KX@9_U^ltlGzg%kVJ9pfdFPYN3fQ$tPO)O?JMX
-zCiba+4}peJyzrVWbt;CoS^2%%{adHlDoL~8tSbq35Y$k2*qfofQk*oS0Ldi`pj>}k
-zIzU_4mkv^khKnzRPTc#`EU_pM#?6H{;GH((^rPI~^NkM=CE2u!hJ(nxwe9!6LYL82
-zFM=^P+flL7KHkw6YTigr!|>Oi@}fv)bEZ7cpvKPdH3Q^C%8c{oO<3(OQ~vjCEYeXJ
-z#TKsgk@=xj_#5yJ;Iq^c94rxJTm<<|$j?Fh@bc@?^9yPofcjJ01T}a#lN<Ha21?Wz
-zH#LlXC2BX>FfChXoA>pTtpjRXptfC4je~wvCgY~IRi@_V{H$-kt>*lRy5{_2uT*pX
-zUIe|(In~QgP4DuXmABnsv-MluZ>NqmKT%$}|HodtT6g*VkT7?^B;kbR5E|vDXDt!v
-z)&ttr5Uzx9*`a3riq@GD{pSs8*%z}n9c^Idx|P>M;VOsqCZDg{t^?p~g*ZLNW9OhB
-zQ4QfHDi=n6yH;7Po-U$xQQ*C22WJsIB=>aS`w=}MfQibqOti4?E}}Md5-plr2_Q=9
-z29FM}A5nWWTA>|f>oL)>yit{KrdouvddKSkBGCyo!^!&bvh)IsD`VPZPf@Egj<SMh
-z>j=cp*HP@bIsi>a=ZPhm+)pqWN)~qWsn1Wq&R`=Z5<Za^zU?Qb0L&TMFsQGfD!4Gx
-zCUfOUN7wu=d}oidrEsRui{qa3X<>z2!f&*Ux~OXdiXRmefxwh!LaQ<peUa?wL3l1*
-zXYYnuKW-shSHU0Mk;4794upUgD<Kx65F=F~#>JIBwHKXQ3BeLj?XrSPE0Vyl(eq_i
-zlps(gc1S>uEP;z#f*;X%RyqTiOJEaUv(alM8R~8jSF*4XB$$g55UQ&hX!L*|R$wHO
-zfF&Toyn;*XlEAQml1@}a30&NB!BqRwmcYd=!N)XGb-is9>R^vV;@dMjYTmg77!gzl
-zGk}pH?IO}80s9I_;9}u(HZ&xbfCRG&F!P2L#?^b`KoMp|2?AB;g!gX-fyKow!Iu;g
-zc=Q`;{YP8TrVx5p36~6wKGZ=cNYF&8B-lWtOM-2~yI9zoq691f38ocX+Li={4V22?
-zIg3<@9c9Up>%he&foD;>|FqwT+B1vdOG!Pms2P-pll)ww>2{L22dz)@t&3&MqPQO|
-z6_>_O`Nt!$XSj$nw7W!&H`#d|f1ERbB7cv=+&QPx0Jcdmgc~939zgqb;}cS!y77ji
-zeb(w!IsLFm=N^G(0v2|~h}zz|1_LI0Fqo?Yh=akrz|I)<771XY%Z~P8eTBLGSYIu$
-zs1`krZ6LLVbtap2+FK7mWPM9uXAGX(1TgCzNBgk8%iMmf?-f|~0~Tog0MQ=KaL<<z
-zx<PPQ2M}355m@~YEEnjM0A_uF_6vRWP$M$0%=Kg49jMIC!+`Eqa46_O7UpDPeXI^3
-zvaSIK!*^eOdEBwBpUHZYxizeNSVz~*W}LeHN-1+jM^|J%U`BKi(He1>teWWa31Kej
-zPVVKK%9pouN5tpTJl*ul9cCk9HgJY9oZk?c9!B49Y2%tP9`+YwVeA$T^_QGqEv!H$
-z%OL)Nz<j674cj{LQBHq4(&s`0l%DVdiZR(nHZB{=_jR0FJ`}YCdd7-Z6~Go4IeI0g
-zb7{sdF<-wuW`~A*#$tSph6iy6^~>%Lp8w3nwO#66zQ|Po4LL+3iOZ9FFl|%R#&{uj
-zgi&Uai#{UB^rgW_gr)#2%1LiyOKaTxcTpWYdX*eDN$*9cp;nOI{lnU}rB{EDSN29O
-zJ+q-Iw%*8C01Y`rW9bhC8hn>E_aU00l%x+Z$}FTGWJ!GfxI`pKuN*v<Er7h@o!TzL
-zpP2Zbf<Sff=zckSl0L2~2kDmusF&MN_bV<vO%)~!o4NFhMz@6^N*_Q&4$)ZpO`{+v
-zYHd}4e1($q0Y;gH^rt$fw>E$xkw}nUIXG`YWMSzM?a!(0GQ6qEn@44>1D=+DMQ)a)
-zk8TzT0HPuG^zI59x_(8=$1#)G(3P&|Ng`tbbiz4AW9jFNVqSs2KWoRaBz=IHCQKpy
-zp{3_B#z-VcuN>TV7eHS3PSt7B2yd$L;UL?LnX-%ar5A78MQhf%Xziw4wC_Vu@1kW_
-zPr1wy&mW?Hq^h5=^OH~E*SXI8h-LMB=@Y6S*;~o~#!;ll^<LfkVHoxA)xA69gnfb1
-zQ*!SJIqtp|N>9AKiKyJJ%gOo--&eh~pV@aU-G6(X$$xNCCjajcR7}47*jwFv1grJa
-zTF=X7)scot$-+vq^iIql&N&mX4@vu8j_H|()HqRcm=4qf$rU?vw2v2g!rXpXP75q{
-z5<XqNsJpDvtVJH}DAm=EmoaAAFZK}MkC%zFurvxRO-K9ag=1i`vz`VItj!w5cgwjC
-z8NR}4mgWPp^SsjE!rsMlkMt>BQf6TR|MF?wRtQ(*Qr;25>zq6inc+xe?`@-W>78+3
-z<U5-wZa>Pu3@&qUK(PviD@z!U3h8`I)m+&l-DkyDH{s<~$~Q>YtVeCR;33VU%XBdC
-zId=ry2t1p3_0Yl|h?R-+w~4bVV-8(fRc+j#j!#4%?Q?tw@z86WO}u*iV7Ee?zfGLh
-zSSHTjRd;sm=v9Gu=$OtXUOh<AsSxLH6Q^rkCT>?-K03zs0pwEcJh@28L-+UanRQ-0
-z60lt%&fg}^KA}upeFQ#&LjZhk4*`hVvG|2XzaF+{?dQ#Pz3hD`kF}rY6HWcvPngFn
-zt%7uDWrJ9`@*}GC`zg5JSbs0`F0~HK{!Whv`8`mCa0BBg8qdp1^wRhi?n537pkKzP
-z+8}*1@fn&vn=-traRXiTE=q)B+gn5TPHw~#LQ~1_TD|?|w$80|kK7+w6!A%KkK!8x
-z%REkqaAm0VO)x|_v4jZ7d4E!!T*A*fsNp6{TX5{RbLwHyoo6<Fl;WipFO_(P!tEgu
-z#UZ@#z2Wwl68sTst_kz{qYhtBu7@&ldN(debY0r>o5~&v$EfnzGP#OnBwTggit1VR
-z0YjnEy!!aXU{vxL&$$SG3c5kv`HMVZJ2^ZoAMOZeS5Ge7M-LWVCi>!?5m3_?V@th&
-z5>bb{ksg6UT&wIgWR8D;*I&-t-`9QHc`ykc-SxV$C0>Q@V`i{0EnWIzKnFj!X>if{
-zy4ELQe#^KnFfS$Q>d^tJZ6DRPX9>I!jzLY`oD5UV9v5Mf>{MODWCulX7d9AgYJJ4(
-zXEaatOJR(5ht+S4Zio*S8CGmEm?UoS3Ps=|e4x3;CE%#rcV%n>I7)2tr*^b3bb6;O
-zy}*^Eagl0FypPtAeB@TpL>Oi`;D&<-KL@p_5!j3|`1<oKIMPcibQ^rn45CA=@5K;^
-zW=OGuV%ZGcv9lSL#+$gp?jfi6@*FPtY6x^!i`!L0t^eZ2EoI^EuNiN6xp5=!tt%ad
-z*6h*Axy^y8%^WfzQ(LN4GUcuxYf;HUI07l@Wr`&K>uf&wPACg_(<7LD=o@ZARmSlV
-zjF86b4ZOt136r&1@{ET~#d_!s^l_+w$=sx3B_@$ykX3hMsWr<EJI`@z%0?FsD*Abq
-z@S<V)oS@&*_*q!os>JpV%wrZzyyLwV<UC=tW9LvJe>@4jxuN)^CN7IZKVC{WvGAt_
-zPZFU94Uh<Fnys@;sVkELP-DjB4OTpE1}ODyD+TV-73uiF%B8$BXMvy>ZKu}oaP(&I
-z9nN11w0Hb$ux0qz0IpAo)mRx?eS;ltk^jU`)}GVp#o-lU2bCCyS^V7O&)5mB@COo?
-z8KMKE86ucQQ1lSK(&Yss+@oTHg3^NZi6`8AN20Gzb(F2C)vlvxh^5wBYK3@kPR01N
-zz&>JDVhKRgo&#bjeLkC=@)V9aO(mB)F5$C6=!Mifs&hV6A$HEHTwIGn=Zx!7dFSlD
-zB0tg;I`P}tSQv$Jd;&nWS^5~2aRx4Uy7}@(V36l^U5+fd#Xg@pM`vj};{6984xJ_Y
-z<e}Cl;IgA%A{kt!V0LLz!qH)tQkv&EM?<GKk6*Rgl$RvkOnROLy36<-=&m3-)Y=1G
-zFigdR{GtLu2_=$LC1Kccrw_(>MS2lD8VFaU1KOe19|&K#fD<-_b(s#l55hR60m<D~
-zx6>C2%g{SJ&*S?dPt(z|z(&v}d*=z1Y07hJAm$8gIxrQR*~-+0Zpg`+%4uydK%bps
-z-|^5vAyIHufo_~Y<CGv`UN?Zs=WkPtFfm-Q_k1^S$iZ=6nZJZ~JE#~(l3~TdsXHxv
-zr~t$hbbJB%07ypxx;+XLG0IY_z<Cy-`JHC+(&1);tG;32z5c<$rfbDm%U5b1^1!>u
-zlJHa&#2PW}uzBzc`9L49<cn#%tbs}bUkwH20e>ocFB8pY`K5t$$K<s052|yZ>LF@g
-z^uxoip&Rx_OL$y09!od@pb`5`5Ba)Y3fF5Y$8X@%H~}{*aMp-P_fw!WgW|ClFA)Qo
-z@>+XoBni*0==1f^kr$(PxCkAXR~)@q@E_80-v7tmdB;~(W&Qg`Kv7g;1q&J#6@}<c
-zXhB31dJzePW}74=0U{xZDL}AA#e#^UVt1TaP(;VcSVrt|M8!5@@0w9juwqBY*ZDo)
-zv)9eN_uP`8yuQCbydUMsI&1B<*RJQBefGK6Gmn$qrx#HmRRFW?IuG_^Pu|yxc&Df}
-z;T#sP)(SXNs<#lnxY>gj(E8)mWT6LHp_86Bc`b4~PWak6`CsULfl0=T{L$nkx61{W
-zxfhBR$NP?GTspI;%)Z2v-ef|nF02My)wxsWz3b`9q4$r{xF@5J4_oK1%{Ndn{9n7#
-z^M2GK>9n4+j&G55@7eplA0U_XT&<36(xh%axP&K}^TT2O*6aV?R;t%6>e`jOyx%lx
-zVbe%^NtD-4LRs=1NUL(=?l;bvlsjtCq|{N1#&&gn&RW$`w?eJl4{y-KvT$)Db-?+2
-zxmUmTHSxA<#<uLc_uDq{e9k%ByPI)^Z$R|!XY9P*vOCdE>EZL97lFNK$hln6(Ysc9
-zu<5{y&YjEGc*nhS`Rne_Y^#Fs`_BuToo%xWXj1B&y07KlNv|e{zZ}RVY|E*-fuuZK
-z+YF~_H)ZLZ=k<2J^VLPcw}W~^B6O-gj~tiS)HyQpD=d=UN9lwf5vDu8({H(ZS`_ED
-zsYP$w5p~<7bNa}Z+a@<Ta7NbY-_FRISv#LSF?=Op^{8{88?-vFETQtPXzpms_jX?y
-z*0}3mds|xfEyLV7!OaBrM*KsoNx->JAy`&g+HkG=0=F+-$P0fU`<Y&g>nkEFy}!KG
-zU+Q|M3Kd#WSv*yet;M>H<DOeeIgeCU%6k6neD-}V9_2*@Qis|k>LO!gC^UQ&n2*k9
-ze@$Wn^?LL`Z{;<7lK+IMCv@4eXtBm3{*~1GrfTnOnCMjN`CG`T_GnJE!;_q9r?x~=
-z<|27r{_Rzw&{jCxTxRpCSAo29hheDktSvTrX>B31W6S&>IR$%9Ful`Zwv64+SFFF6
-zl2Qw?dAqx&-<G3lEOefV$ke+}3wX^Od2(?%uJcL~6}Y-q95;mRIb}snX(G?AJv=A&
-z0}bx&S@**bp=t}tV4?SpMdTs-+e;BA$4@VaIl*eUQJ1Os^G>i``NO=p?FH^j)N~Q=
-zW$DGV{uozyH6(2{(}Vpshj*3Yx#}2p73abyQEj=$`rHS5*+u300f+2No2x(FnKouU
-zO<#rZo6fgqd{(dVv#?|(^SPTU7jE!&?JOL|T>T?!f=kd`89JH!PGy{!bt2fH^<+*C
-zoFHnOtx8Y55;wT8g)FumF%fg-;0tTn0BuIK%Q<T|MxC{rJQWuTD@UHOO2I|GKlUrn
-z*Uh+L*7BySKi029=cYf_uhlKw&3kAD(fnmMLVv7ZQ$1{BiM$-Ns&Pvs-gOplCD~a1
-zWBppa>5uhm)k0_mv4?l^^j7WNEqjAbb#ASf^Rv6K_+$N=ZgZt7CgQp%bhWj?tFS-T
-zum4!T{$u_6kM(P&&Xr6Ef2?2sv3|`B&Eh}Suj4#R_+$P0kM--bnm3F*Xca4ff2?17
-zm*Z*PZS5cH*MF>E|FM3pW%xuZvfe}3&{|N$GWZ|s*P+MMk*ocGtY805>(^^|-ps14
-z9*(h$tu@Mp4-MsC-)cNhieLBE?4ozaYGV-(P`WDhlfxQhVM}(ltyd3G*Lmv<-s51m
-z<dA6p>P8G>le?81FS&cnl_<Fu4P%pg=O=fA>z0fXCD#*5OYYUfBCj5Jbm{6wCCODe
-zoiA^}KjB{40t_Seo;kPP4zrnZ!B#Y$?eHvh@f^2j%FAMrJB8>G>j`e_lRNCa6YaTJ
-zv{+5UO6lvW(uKC2+3g_CXi~y|&;qP}HG5U={l+&pbZQ<eS?DXVoq_w6kI*-)+IM%l
-z4Q8RI%ie}lFENizSL4<my{_TU&S#JI9x!{yna5n6g!YiD4%}quMeBm{JbBNxyqnF1
-z%bM`BehH@zS2p*e4F&n@rWHhu$3vic?@?3KD?B3?pIRS^e|b3mMlb$X$e0S!apLbG
-zC${sN-{@?6{2D|SKMr|UXOrVkb@6)-#6pj~Lrrk1Z8cuF?8<Qb4PN{OE`A*+{*Eqw
-zH((+*y|!Basp0r(P%r)!n^ylD6~V$ujnqH8Wum*#sg0rfKQA2r5-<KwHT$?1z^V9k
-zUNIh$ulOAYQ@QXSU$2z$Lhn1=Kh2Bo@?Lh>x@qZAwIhQ!GQqyK{VTDB!tzoqa$lbn
-zv3~0IEx3JYL{RSq;_X?pjNSgVg{L+|%Aue<^Curw8GS)5jxGfOXpoV^RN#%70{$>R
-zi**na9l}qg2XCv~`eWrfY7W3o{T){$f#)ihKSHi_5EC8px#}FxRfA{eJstO4Wk<Nm
-za;|j9=W3OwiJY0pa*1c>ZA|oB1(8Eh_3#peev+%wS<VFO>-Z<;d9{};c7L>fJ-p?q
-zq<ytxFG{sZ=QnRe+4(K>zK8ooc1B6d8PBuwCiyj9=&fylqB)u|wDNjCg5aKhtqUjL
-z;Qq{ZM*at88{;N-(}0(|H?1T*OGTU)yqa0`kZPu7vyRSqS>6H9SGM~zK`1&^#XsZa
-zDqZ-DH<)+&7M-n(_|=@wXCLHd08O?$s_<+zeSYPpA9whnG_*|9s$f?U-c?7V>c-p4
-zyVCoMZ31qi?!vEW@#WsJ$oD0zqHXt@+a1r>Hz{ZKM0>EeIiu&V@M~L~0-JDar@+<x
-z+4=0{?hNi~$KIv%UJ!FrScAe?<b5-~<?l^d-W0aP3(>tZG0M475l225nzAAddN>2s
-zkTyI8Mt1%i4dl&-otHE%Pw9O2OVli5>O6V<ZxgzD1?Y75Ih|Fr6y6&!S7>y&FAQb<
-zHx1ujkc$?39f7Zf@gnrT$b#(__?%?lFBd+;&65e=?*^ipXwhX};zi!CZxEI@)wX(u
-zF2Idd?@a#ee0Dci>{QiD%kPEAm#bcv$2|%nRK0Q$Q@x*fXE>Fr<$GG}3Zt#@Z^SL-
-zZ{-Y~i<QMcl|ShoUJbk7wTW|vixa<G#KeDaIDRT5@(kV9_?un)t(>8=!|{*w;_vO^
-ze_g4gcBLh(f4T6-|LJTJM?@NGtAySC)5Ga9iM4wr)oK(h@dA#0_PN|U{!oJl_cj6V
-ztSMxTm@NLV*dEfs$iKPInM(hOJQOO1k}+!eS5t|XwR;z5eU%RJPM-|eJ}QJ>19&J6
-zDdbImvw^AQiXlShw(ZCDzO&~&vSP_Z<AzKEz$;V7a5lcXYA-6cYi<3Mc&?^8SK62E
-zxza-ci`ad0itTLYR}-A23b=mTc&^l&h)Vm*Jy#K%+}%EK-plhgk4L#um9h)Glg{?O
-z_dUJeJM(=XO81fOCoSv>)P<@u^6HTbw`16FCBSB~mRFNoeh+(m?nv9(efCqeTa8@o
-z+5Y#1smDC#e!q3(pg<~#7a!HVYgLz#XRMdBVC#|T-ce6Ccm2qN9$m2YV~;79K$`b&
-zAdqbg$tM1R->C++(Dw)A%?QM0op*EuzuzaT|63^{#!%Jh*QxdKb6a;fu(=rNU#Av*
-zhE&y6)>Most;sK(UEHtFp+%lNtF-2j>ba%UYXZXyYYNNKN~)?VsyzFlr87#ZYtqUJ
-z>ndt%(q@-d&n~Pfnt51SAZ?#PX;@4uudc1Etf;CfDNdVNSUodsdTn`8O=(5Bms<Lg
-zd6gwasLSfordQOK7pIk%mZi;|Sz1<-R$D%|s<5)Mw0uTdVR_oPN~I(BIfZ4lC6@lz
-zqGs76W8Qio_vP9-PY*nNare>klfBgze5Hc>=(`j6aPE!%F#NsG;SMqST+<JO`vkU#
-z(Knd>St|d9sU2eUP1`sFzPmF}n9?prpJsu5*)e|l)SX@WMEMt(epQ0}>-S8af3xYI
-zNRWTy{w}>YkH)FLrdIT8TG2O~K2iH@F#RYlUfKopy9m*r>>f@|ls?z=Z!k0L9;f|+
-z>B-Y)n|=-X$4j3YOrAc?^pDX#@zSSdB~KqT{Y4$(r%yd1dHOWdU+BzY>aVet^i8I}
-zjs6j@{wqf~$Efv*@n7GHen~6(2Gb{M-$v6vi$T2lt<Q6T?cop;UxVo%-z|Rn%GoaA
-z<OJ#0w4x8%#F!}kl2-H^OrI$J)Cw0^Z|0eJ?UP&Q^oiQ1pcQ>(EBdtg&i~p3<E!9w
-zr=Q^vQ~zsBpN2kO{HgUWp`9aR(x;g|QT=3_egPAGy#CRopFZJZ!#u|S2GifMBlB}0
-zcK&X-$)!)&KTY30(fo0XOP{EJRGL1K|9aCW^53klt>Kf%f3{YK`6Tk6Yx+d~8})_U
-zd=mLj{j1X_@}Fk<ME>jbmF0XA`ENFTBL5pqpU8jioyq+-nm&>LCe!Qt#pCtgw0oTY
-zMCpU3Pn3R%-sj?zD1C$J6QvK_pFDl4>2GxtL`?s0`lm~OphJv)gXt5+7jU;xfnHn3
-zub=v7lgGEj^gVV-Fn<5-(kJR4Y40c3*SDf?ZbhH{L2~~MrcYEqji%2^Q2!e~O<q5N
-z&z$}-*D^8fv*z>U>6=ZTD1GCX$<sHPe#B0mT}=L|Hf1I%f12t0bA7`nCVfFicPP>P
-zUT^xJxYCa|zc=jQ(kJR4l{+Q(zr^(8w~9aiXYY~Re}m~0mA}#S2fI5J=gg}L_fPXa
-z?ogui8%&?Fg=Zg=KF~dR`c%`eZWn)iHXoQg{RYzqsUJQu`KKM4Jblpg7bTb<8uatL
-zd=izv(e##cO#Y1nlc#So{p<w&FPM`&eYWWn-9Og1l75Nl2h)D>`fu})<oRzf{d4W(
-zr*9gWJpCHeuTL<3n#Q^Gb{paZuSM*iTz9C@i81<0)9W@f-uZEf=@YeYgXzyo5MOYL
-z%Q8`Xm8Q4Ln3(v|rn*Ck;>$LDqWE%6pQ!yBj&=SMrEfHSqV}uTmvi$;lzxfn6SZIc
-zbeBF+{WO`r(90!u{03*Z^oi;x*Yt_vD=>Yc_S-N!d3?cgr%%*=&8ANjU!cOJPZVFO
-z=^snbznW{4r{7@u7nuLzjbB@y38c)Q5J;Jqnv%NhRvnk%vOD#yn1i!e7w2Q~@ndM)
-zr=GLLknP;*z}XGOuB+J{?%FA?U0H;`VSc+2XSKhOIldRim-7Eq^QUzy?-R;5_pGfh
-z*m7})3)^3Wwab4M99iq)oZuPrPso1MS)Q%@>QbcM?6jWceL{9|{O(CTWS{2zCX06{
-zb~DXR>s+n*t-*fkIjzTgEp|)HPU~N-`F$4q;6={wc4ppE4<@T!zs0U=8|?PfIlB#Z
-zL$O<Tq02W}Khf7ttT8*SmwBI1{f}DQ(w<AvZPcT!R{Gt8*fpD-*3Y8+jk%z`JgU4O
-zVt3_bt^3;+`+Bp}dRiiXeX#3sW$XTq$1c_Ew7!<e-vaE`{iSt(w_~@)?6lsN$luG@
-zowuxYe?MbaX?C{$79Ka|UiH_Vx_!M3{*J<~$?UWq=Y8U|Zw+=M?{M*j%;NRaYq1Nq
-z!EP0HUE5&y8Fm4)OV&?!rf%2$)y1cEyQp$R^sB?MTXLVXv+Mu3^;eADd1j||yhQ#k
-zz%KZb^Jn)1asAzm-OM)Fy^UQ%8|>OMnZMo!yI$C(zTA3wCt}yp?6mF|Ro;kkehPMJ
-z?>c|U`oT@|*9N<1vD@%Y>;AsQZl3wmx?og%5$(GtV|IzY!-UTaGmF<xhhq1-*`@jI
-zhJ@#}GVC^(-L`%^le@#E5&n|(s|T@LWB#;$=zT)tEutJBV%Ot4SB`Wui&u_qX@sEJ
-zX+1H@-%)3E(2T11`e3(mE3aCTUKbpXU4z+aeJjdeM0^Xddwpx?FIm689lO+RTF>`o
-z>^7ReWcmJ#T~J#H_$14>JNJGw%`P+@#H+ufu*)^OWck)$ci#4`=X))7O=g!Y-&NQx
-zH@jr{euiDMwm0!fR^FW%vt4&^cFFQRTw~kplI2^BUDi&{U$T5Jz^>BllI43hc2mtx
-z>xxnRDq?<l8@naDv|f((WH!(2lKJa}U1OKl{Y}K~O0!Gm?-cCT?AE%!o3LAHcD4>0
-z_q?EURrbEl-+@*w@%rhv*o`zh{&b(vykVlo`JPNtL9^5PsP_rkMbz_9?9S`idO6Cl
-zt28^Umqz)Em=Bg>H!s`yOV(c=#ICUob{}H5t_^nEa?zZY(|W#ru$$TjyW_E2Vs^>u
-zc>#9w%+A(X<F@bZ@;9pWdVX2{%<eJ&_^@hM`~Hkw+L+e;b>E)zuh}K@cNBJwN44&+
-z2D>ZG&emn)miJohn(|xsw+g%EW@qcPas7QJfBG3QKFQ9jJ9lQhnVr^cy-%p$NA%Of
-zv1^>|{3YwB#n?@)aCXV^y#Tvhv(tKRRK5}C-@CDUeNOB7zKva~zSo;ivi{eeYln^I
-z&(?Y4)?Y7OW1QN$zlqqbJH^@Ax^G;6r(n0{wATIIgxyNB(>icey+q7I&tg|_X6ydG
-z#crh8*}8Dt`1ag^_E^}uzoFP=nVr^&6UA4CUH#J5{Vm0ArrEWuc!m0(x!3r85WDQl
-zTKD%Mc0J6_){*0ucU!LcDz9$cUmxtInq9K>p5xo-Z$X4Vty6lRP<bQ9+wIuZU)y?o
-zFJm{;?6hu~$luS{rC#5<zwSIc+SuUiw2qm`-%;2#-Qw(QJu_}S*I@U$*%g|*c<1SB
-zu}fR-{An%D`-JKx;=W=Pc3sUb**O0UyMWngy)(*RL_P1!qTtLsS}(`p*wvfe3Ue2)
-z9L3mm{9EhgxB$C=*(EE--Po<Oe3SK;x3Nq8yURD3zxG^<Y;1IP$@)t#>>BQA-QPs)
-z&NI7Y{pA$wavya5lJ%FHu$yUi$@<H)*fpA6vi|ZdcFWB!S-tGJE7u!lm#n`G#ctz2
-zTQ5f$cBzj!yJY=kDRx(yU9xgKsQAn-Svfw$Zl2j`9o_qc#!*DS-?j_m?djIrw-0t5
-z%}(p;@%&|+mJ)a_5a_l)+;@w>pbqd!<c+7M1p00fNdE@%!q}kC;EwPuDE*aiU$*;<
-zHEv<N_mq@C2I+1yUIR0ck1=_y@i04n2$Y{oPIjDb+z;NA5=h@2@@RC>PLLO)27Ng{
-zC9og%H$$Z>f)`?UER<ayl-;3Fb|2L_yBpy=?5>8gyA;Z<0?Muz+!y`17|HKYn1!4L
-zWuF0MzZI1IvvZw&H5`w8G<+8B2?vmF3zOfOlM=vn`eRV~>)=Jm3rx<3%aGUd{393r
-z9ndS6v8(Yp7UOmNY^eIJGnPWt?}lopUu8T4-iqIOQ1PDx75`YM_&Y)Qd$cMga4B{x
-zq3r$+Ww#j0ZVZ%N3Z#kCH=g9|zJjuQ4$5v3lwA%Sgk4`Ke}_QXwTH4>Rf!$?Gob42
-zc&K_g7#_*-RFgmDdD7{~FF@&UhnFE=V)ATw8*&FY0sRJ^Uv+~|!QH8kCa8XU2VBkZ
-zg>W~Hr^4;w?L042yk{8u88?)<`u))O0#yB;24&yhxUKQ=S?>7N#)<G4;u;5;6S@tB
-z`w&MOR5_kL(dqApJ8}Fj$hCI2bKrkTHy^6L4uz_xA4;A7ci?`=t6&Q8G{6A70v?2Y
-zElkJ%B)ApFv!L?p315H*z{kjEZ@3C>0o5LF&UAKnz;>iN1uEYmcKkmxQUb>zPlBVc
-z&xX6hokZ-nfvV??JpWWZH$c_zV5s_frNr?fsD68vu^Osg(@g)5VrN$h4<+3RaBuP*
-z4-cYz2SS=IeSMLuzYifx)ZN~Is^5E{%6loKOQcVe9{;_K-%NA<-+=p}Z-Vky0@YrV
-zpxWbT*cHFoP=2<DtQn<$Ug-Qk4(X!lm%}YNz8EULDyaIO0#&bvLdDY#sy$vPAb(8$
-z0(JZ}<DpRXdv<<GU^K^%g{r5cjYmM$Qzle>zWOJ}i;RPfI~kui!RhaUd*k;OsQ5~u
-z>SG90`S*n#kavZ@Aa6Y0#nl9r&&^PFi(v|OrBMB?0LtGHQ03hYs(c$Lgv#{+RDXLH
-zs=vJk)!*)is+UWk?50EYw?0tyvh3It?M+Otf-3)X<7BAve@`PRu6v9(K$Y(*sCdqR
-zif1fTIS+)2e@m$N*G)|cYyqEy%KuiV{D;9Y$U(^IGJR{PejR}7*I!I={rV{=zqwHT
-z`?JX|o=1&yj6taQyBl|aivQtB&VH`(C}RiXn-iUWDO6D|f?N)CTLAYVjsmE-w=w-s
-zd9J^H1G!A<_5^&NboWEmM+H>9_7_Rl4XQrc!w+Hegp|Ms@HHs=d!Xv?GWZF9&V$Nt
-z7F2sqhYyfXK70@khHB5<q3pgGpAz_pbPq!1dluC3fsiInzbrQ;FbugKa=DwH2UX9b
-zq3SscYW`>*=j!)NsJM4AK7X{U*T;-^LDg#kl->7Z9dCu2KmH8WKQ4wU-wared=OOq
-zc8A<%blVN8e!n})#rqP}xW56ay{nDAq4L=csvZMS{+5k#{w{->KQ4sau63)2@^du&
-z7^XwjM+aDm{OahGz<T%`RD5?r)&CVx^;!XCKLmb)Y6qx#eQ%UI{;;tEs(v3InGzU|
-z{nb$Y??U5gQ1w&=75}cr=SMjCOk<vLOXD}gUHyFw72mB;^>G$d`KQ5ka5DTi%z}zH
-z0F}>2!<^l7Q2p&zsQ%Uf<?l4;jaR7h1)<XK2i4#9g6eNwp!(ZSLtVYR2xWIO{D^cl
-zQ1!BQNJ?N5$M1wH|INnBp~~M6Dz5JaJH8LqKi+_f=TWG57DJVD2HcNB!{LXp2V4uc
-zg35n=j?4dSI0AVROe0-iI0$)5$i9U1AF?@51OmHkFg^l1alFyw^I<i9E8#y#R}7y+
-z-p-DHb7V^3ZjOHppWyfsDEm3^PL7`lA3@&9j{kT>inc1Je-7W__~lUcr@)mQuY|86
-z9|oCP)BC~$3HcDHde|B6%khr}xpJ;HUINw6YD}IC)lTE#Ews;QxEvm0`c%_*g12(K
-zJ>*`h+q%P@->0F{KMt?w_`~o9c!TK|nErHlBgf~#o8a-LKf?3_;4+S9!kghe15*OC
-z@Y?`Y{})5m|M|ufpz8l<le6K|l<Oe)80-umgx?*O5_l871z&<s!k(mC2B+hH0lb9#
-z=0e>kRl#EFZzf!Wz6dT=yznwO2FkuWyb^YSO1C3ax{grk+QF;Q|2!Zia1Hzv%6=6*
-z6W$Az?oOz5%c0WU2p6Eg7M=|kLD?6>^WYSybQ7S`jf6@!1fGxnaJUHegtBiBFN8m2
-zxpZGcrCSG;?gO|4{oC+j_zaZ&U!m&#I;eWT!Z;nO-lv${7iv823%gUl9iZCb>;5T$
-zL*U!+BJ>Tg7P&u^eRnAPt)SZL+kVdeUAPea4N&$2pzIHTvfmo2UBB<^?3>|P=x>6u
-z9|&dN1IoS=d=qZ$<LuvuSE0Wd%03&)J{`(F6{?^7Pj6@c3A_~j-B9+qQ1eEn@yATp
-z|G$OmC!a(0lNX@u?lS!yP~+<ssPVPH^hL%apvKVvsD6_P)o*q+{l*NZ{|0Iteg-uT
-zpMuI~x$!J0Kc_+Uqq$K1=s434GJO`*c+G$}!0k={dC>V=4dv%CsDAYzRKIF4{h6je
-z6>411fg0C&rq48P2j!<DR6k3B7sIuOx_q95(*F}`{67FS{`ZGj9Nz}2AO45Vq<;9V
-z@iC}=c(=(5;M3S20lRYipXp9M1xn`5*VEtM%gIMT*>CLW<Wr#J-X^a;*u{5?u@)-M
-zN~m@$g=)v)rr+NffU^4!ld#(9Tet$g0M$;7#zjze=Rmc?=}_%(yy*uTcZIUs0ji$2
-zfvV?^dpLhj7_W!2yB4Y*FN3PbwVV_RIsOz>KffEQK9@n&=XJ)Dpz3p)$x~qs{XGwo
-z<)9;=&a0VF`J_YTa{yF6pB&)q*FxE^fwEr(W&a3N{41g2KLyJFTqyf#Q1+9d?8igZ
-z%V_BJPbmAXq3plf-`TH)vTuf}?>C_8dnuItMNsy0q5RK+vY!ssj`>jSxHZ)I@=YcI
-zogbbw-fg_exYW47SYs?UPBacRc7VOfZ!H%gs`po+>iv1+4N&!dsmTjr7vxi+;+zLn
-z&nH3E^LWz_GkrExy$*n?*WFCNo#{J5)nf`&J^q_Q%Ks}+{?|a&+fz{WcB|?CZ2Bvq
-z>gi&rdYT1QKgSuz7zY}A8uu`EGOpbxB`}TrRzcOnJy7*<hw)UXdMGz}DAag77*^9R
-zsZiHd?V+x#UQ2W1_F^czxlnc|KwW2zhfg4PhZ_Iy?(OVWLD{W<y6(CTK7xD_lwD6K
-ze>*_g{jit24*L|ogZwa*-8?9}KS9|Ig}N@wg0CWXg0lOho4Y<+3mGbd-i7Lqs~}aA
-zeht*TP;bnG$8o%`$$LSy({51hup?AEe7~nl_a2n~O{jK!39f+mn!dsG*Fg1yrBMA~
-zp6Lrse>_w_ngrF42AF<d(|3dFhr2@c!)1G<1ZI%$e8`lWeiGb)`=%42?gM+mdD!g*
-zb-l71oJzSn!{f03&+blt3EUSyGmVoVLnb{7(q+?M-Ob&XJpom3kH8)9dn{DCz2PCS
-zGdv0Vja{AHLr~-W?~qq^({F|9KYxbmKl9*z$cI3s-wP`JR#5po+r_1Cf=a&<s$bm>
-z)vwNlN<RoHeL7V7U7^yywW~}2JXHE8q59hcQ2p(4sPsocr9T`h{r*ttKiS2le-|qK
-zt5Ej?Ps4XmErUv53e}G$!(-uisD3sY%1^rKKi}E)m&c7a8P78Ig=&{GcH%w@zZ2o*
-z)bj|a_8Sa~@RtR3-PjxII;9uXb;=%4_TTQ95~znCL#2BkD&6Z)>0W{h&_4^$h7Um5
-zFNNp8bD`3m36*XhRJv+-KKe4K>yYE1><7bs*uS|0^+^0LK=s3?q59$fq^1N8M*lce
-zf2o1JkbA&Ba8>7&zy<iZ7b@R7q4Hf0mG6yk3Hoc{#c&aneNQNVUE%X^Ta$m>-u2(N
-z;eN#P6qNo<$W)YG1=TLIU@Csb!57gV2>%RU-p=`539m(72Gu{Vf>oqn3YC5aRR2B>
-zs$Y+T&vEET_%GyMa4}4SnjiLnD#y-H<@jn_*MFXX%I7Yqd~Sit=LV>JYN7Heh3fw&
-zK=uEzQ287N&xMCT<#P~JJM9bAPXF!X@_895pGTqcxd$qrMyPzwg34zu)Hs<1HBOF$
-z%4Z}z10D{QPk*R>6ol$W+d++o_qTERJP(!6V^H}#43*EtQ2Cq<HJ<9A##1R&K9k`U
-za5Pjt!=U>45zy=BQ2D&KwHtTOLXEp8p~hVkJP6(hH7<*w=J!3J#@9(5>1W8pq0WQ-
-zq0WOrV>_tx;I~`3;~zntuU~`zL;8oH)+fH*(j8w5f8h8tP{+5h<KJ{h34F!zH=vGh
-z59Q~-?Oi{48A^T}K7rlUCNF}j_X3m0L)Fg#CU=3aB7e}%T?ec&K4e^Byu!G^SYs?U
-zPBacR?gERcm#?;P_3}Pcy}V^y0aY*8n0zYS1G(7b6O5V0M^fDR`CO>_p8$0}-ofPO
-z0<JzAq3Y)xD1Wn|@||uRXw3O<z|;4D((hyZ{ud{o1$8|z1}eXupz?eEf1JDss-4QA
-z@*4`3Ur#81-Hku~?Bs9$<MeMr>0dG~Hy#R=-w!`I|BpcBce2U-q1wL-RDPfT=={A5
-z<?lJ;4aVY)&R;L6_`m(Z`D=ud%iwePYX_C@GvB-8mqO(`&g4!|{pp79oZX2~=`*41
-zzWCP3E1>#W4wS#G?f47dIJ?DA=|(~Izvi!<-Eyeol~DeAnY`|+fY&b@p{`H=Y&_pM
-z*H~;EZ#=@-)7aJ6!T9wC=kGn^v&Q?3HybZC)*ELVk2Q`k_Az!h?rdyt{Ps(i--pI~
-zU=iiL6l%U$0M&k{8grq>MUKe_z>U<`9#HMR_KQH^Yvebf<eT7U$XA(M4Ob%{10RJ)
-z!u#R=@O9V;z5svt+{N_@Je+v$f{N!RsCfQttb~fE(B$FpC(;ju%D)5r7Wt>ooV*Ht
-zfqb9Im%^u!>)>NBA3g|&!8c(~_!8^_)z0628VHmS&udWetcHr`QR5P*c+N0+H2j(L
-zLHI1`Izr8>pMK)v`Eh+9@ICT-Q2KkJ#_iQm@h@M;I~B+mLg}YNjk8fu`bi&i9C@IK
-zekZ7L^T0=ez~k_GsN;1|<76NBFx<+Hzqi(ni*w=I9G?wkKMZOdeEwk|@Ctkh>iBI?
-z^Kms)eH0kS8V@rbXx!P@-uUeY*58aT8<)XS{LhDn;Qu7(UEf1pSM6@ccd+Bz*zx<{
-zclLjWvR?sZf2<uJZ^uX5@t^+f?7xDt{{+gu4yrv*gj>>{MaE31_T10p$C?A)byy?p
-zPMnv*{oqWfxF<lqQYZZosQTIl{>bt5?>YH?Sb%({$-|)f!#+^$x$zz6e=U^%)lmMg
-zfbxF^JQcquK=~g4zv1{UCV%vHAn+&T+o1I2Q2l8Hl>cqta{hmO)A@fJ%KvRp{x5?k
-zlkOy_^kd=Y96!k9pWX-rjz@k3N`EF)e>@J#|6Z><|DB-X|Kc_0{|=akd;`?=$~CYv
-z*E#3Fr<5MbUvD@GdE={2egLXJ_k#PP-wn#|&#ySY55ipJMkv3x!tL?96#kRrrBHrz
-z-~{9?O@8WSHy#dy@_QhZ-)*4k<LQ?IfwAymD8Ki@?eKd8e1PL~q5O`6<B)eY`L!3_
-zcp3@iw=b06u26noe<2Wf9zF}@_i?x_ejDK%96uY%?+I`X^1ddoUE{{%WGKHwp!^;H
-z<@clK1A+J8n^1mVf}QaDFnp2YmqPiS1)GtBCV%rUH=b{R8qXIQPcfDnCmV+tgT`*g
-zZHzxWXXD%Wg7IPFZN@8&XB(?RGC`g|oF(va;-3n2pOgnRPLG1y!hxpW4QkwO12t~j
-z8DD+IjoT-oj^785qTF{w`MDB4K|UA2f5LjGaX15Z#@`UA{yd+H1*NNnN;erQ-DubZ
-zkANCqyFsP<@+p_D3skxtq0)V`+NJv#K1{l|pvKKVpwe9cmEYf<bm>+=rCS7*-|6rl
-zuo`MS91WFj7pQzvq3plHSoUlA=Wh6hWb}7K*`Ew$KL^TwiuBlx;h#I<kx<u3yF=Ok
-zn?{iR+feooLD~Nu-Vc{SohRy{>_<S^4~DYe56Zp^TnRftoj*QW<?Jtn>USp_XBsCN
-z2OAGH?rGfG`2Axp{RhT1#)ph6j8_;J7;B8h#)-zE#y-aH=o}{!_svlK><YLg{b`9Y
-zAL{&&YjR(x>+C&E-o^OIqb}XGkgk$`Ce(GoOh}ha9{_cIxd&7~+#0GsyhtaLzx$x_
-zz0-KEaR8LRy`ionIzah*^%3W9B~<^s8OmP;l)uSP{>B-*8(*b!%HM-f*Bv)N`KyMC
-zZxU3$9RlUABb5CY4`Ijgmqp}dQ1<6S_1B3|c85V-m!v`2ef6NTdkLzaHbB{(19hEJ
-z24y!0%HQ5l{qwU2oZX91*DWid>=r`V&4TKeM?m>I5b8Q+J1Dyk>AbRg0;)f*fa-@=
-z8_ze+H=bxb);QXDnDJm^2Y5XGKfNyyIF0%1U8wo%4Oqy${5&imzXwcz4Wy~NT?l2j
-z5dH_d)1msoEYs(~ees)N+zV>{Pl1~Mn;Bd>e?JFL$L?mRa$W+*aQqyo^TJ6mo&QQ8
-zT{C?wR6dzd_S-_m_u0MV2QPyK96uSJLY(DLahAe-{N+PkZ;Ua0Pe@nlwilG$Zty$o
-zIz#ot|1gP3{{d8a9yQ(pRi2BX%2Nqdo)h4y*!6>oZ(peL><U$$6sYoicaNKo-+{{K
-zpHTMKLdACqRC)G?`5f;A=M%>-Op=Q8M|cAMzJ$8Ic?(Ma0HmvSy93JZR`?}$e}NhY
-zi%ee)Ri5$2BcRH&4^(+H8LK>>-{r2ao`8z)PN?$S3{{?sp~`bMWN4+&hRSCGlzlI#
-z__l>A&pk}qf8zN0Q2x(=x~`oMHUAET6t&wSQ1KrGpCO;Up~ht=)4%_B7ysSH>!IRb
-z02TifsOz^ea2x#fgNl1UsJJ^p#r@w#cb@t;l>fg$#d$JR{3D^R@7De;5I7F`eyF(r
-z4!!GlsJLfAirDQ>P;nmvSCP*+sCi<b>34*x_Yd!Id;u!%yP@Jf7wY=(WVki{rbES@
-z2Nm}~sJIV>G*S8vQ2yWhtBd<KsJQ1rT|e#uk466Eb{F@*q2hiMD(-6_RnhH2sJIux
-zhsfu2sCjFa=?6o_y|Xa|D((+&b8+7b$0FYbJL2zhsJPF9ihCAJ=f8YN6Q<`t`R@!>
-z-*2sOaW99uJ{<;+!ESe``rZL5?rosre&*IdfT^V0!%%VG2j3!}zrlB~zsB@cP;n16
-zW<bTgGgN(lyxd*iz6H0!-xE-A-vt%-HBfP11eq$+PlED)Bvjm;;IkZm{T6rqTMMTm
-zkA{jn2P*EvpyK||&4B<@OSdne;$9D5CZG49=JjVxe*;w9HO4}yxQ9Z;-37h}JHajS
-z_x&;#_XkjMKLZu_BakUF{dy?>6;N>xgo?W(Y(`#oQy?$}xehAd>Bc-`wlUrK^o`E$
-zUgJ&1i;brldmGb?+Zlhl!KMG$xWIUl@lVDv#w_FK*SmCY8lN=YZM@!igt4cwtFeRe
-z>jvj%1<arwt}`xz+DF&f^gsW_*{wIeYP`XCk?|B`sd2LLvFn)6sNWl4f9kac&V{+~
-zE{+d{YOmf<?X@G^4>tdqeuDmGcp&;4p^n$UU5RfrRJv@~ljF}{>*9RSc&qVp<5|Y_
-z*8~E8!S8CQc&>)Ea1Q)4$4`Xvdkj=OSy1_I39m>0)737Xr=X5s4HZu%RJ!R<@qBlc
-zi|2jg^Tr2_w;DUch4}sAN*7NPtS0@n@LY~Bf%1DgR6Kuz%C{F>ggy<be!jfI9dCk)
-z=W?iY7eK|c8&tpl<Z{Ocj29RWh2yb%{W3Q$&Vm<UKh5Mp@I2%_P5xo2o2Ood8b^PJ
-zH=ti)@+^2A@@SLyhnkPuoBZCTj7#K)q0(Ok??#?yavs!q=Yxy+eh>7w!79f2bx`xh
-zRq$xacM;Tld9vw`gEiP44P`e9j>qmusQi1Hz7w2--7ia=-H&jh>Jcj6x1jWYf%}sG
-z1;!nWzg*;w-(_qt?r+@D_~eDo?r!4%;{nEZ7rXKIqVW-^@i!bQ-`>V8j9*^hjxRNq
-z7$+EiSmgAtLCuq^pyth6Og`B-5#Gu1AZ&!4VSn=b_xWyo{sZ2@@fFY;e^C9Y4yylU
-zLdCbYan(X6UuHbhc%X4BsCd3T&&Bf^lzfx%RCq1&G4N`b1r^UWuok{|F7M!R{3WP(
-zo`s6%2B>(BgNkRQ@$++>{IKyhW3Dj>m47#=`q9H;$<Lkbcr!c)`AoO~7DC0-8&<=P
-z@Jx>Xyuiit9aKEeK*e(=)OgD?ZU@J6{K>Oif3JsUqt7?_FsOdKo5|mv>Biej@LAH`
-z0k1*7*yNc|{dt7R`$CPk6qDaRgX<dP2cXhl4%M$~P0ocHZyEKx%ZWY(9zwtS@bo~S
-z1M+=vJLK!&Q^>>M!HkD2sBzUBs=U2mI^4tbAD<TR_T|3|_eJ#p+=qPr0o#-Q5~z5l
-z!Tn$m9tsbHnzwd?^4kvf<oG+M1_Jw&z7eW@E{FHQ61WTY$3WTVh}icveLE=s&8Il~
-z$Dq=$fLa&025yOqrN$z-4aalgGo%{|4@KS&s$ROly<i8Z^@E>JcInr_Zpckgajk%|
-zzYfa&0x0`4q4Fz-vOf;)%=OS%sP_r7pwjIRy?mh3ZJ6)Uy#@D1ZiLFG1MH5gjdiX)
-zzJaQT&)~uEEhzmxum@ZY)owRJ*<A~J!9}KjZk}te`;E64mqLw?61X+#kAYr&!~LnJ
-zG^l#s4ywI>n(OSJfoh*epzLoE(VqilUk&9q2>$^)!oR|wnRIW58{psITG)vFc~Jgq
-zjnj<dp!}pk#kVt5em^s5D89F#@>>m+{vIg%bD-jz4`n}1M4tm?e+ZP_r<_b0;A8L#
-zcrUyh-UhFN4e$=^hd}uc8oL>{f%5YflZN7Z9xA_kq2jw7D!;R!(pN&+=Rn2R7s|ey
-zi2i3zg0f!^Wp^_?AD#x!fK{*_PKRf~<KXSszk8CKf3AZXe^a35pMECq0Cm3KQ0er~
-zK+QKROg<ax{9bJGkx=u?UMBxo;m+qNa0vdNE~h`Ee-!Ha|9+_J{}b(ap&dWgj&Ebf
-zQ|$Opvz`44C_mRj`MKJTXF=81{>Bw$PQJp}$GDI2#aT}Oh;gVf!}zZgo&Eu1neiCo
-zyQNP5jB%!Ml5rcT>*!yYOvO*3&g09V;=IJz#n|3>{S2qS&^R0_{b9xfq5LeF?(9xA
-zjxzQ$zE$G%w;QiA9%1YW)nB%Ung^SU9UI_e<Rwu3Y$0sNd~rOyndAGxn_w5H^KL4X
-z-A6^PAKndbMZX+Me?63buIUegD*vv=2c|js0%M(VFJmXDIKL=#@iiIiq2jEB@?Q$K
-zAkM?#5{|cn7s4M3TpSyq?4E%8k^fS7Df;tFe}?I&n0{-xFLvMOJ6>ZfGah67<xfuk
-zDO8;Qf~wC3V*ym0xls9!f+@tgC!Ejm4^H6SfA|_yeXW7AyBR9Z8h9%DnWir^eSgz`
-zaXk5>f5iCHaW0;ZjTabCFpf5Ud91U08!GNcpyIyRI36nQ9H@8>gM7Me2M^=;%g6AY
-zGH^9i+>b)pT>%w$2^@s}7}HNMeGk)rGu6f2XdDE`lkSTtZoat%9!dIhOfG~2kh4wh
-zYTPi{*{?QU3#VXrvdNR->BxOePK9;IUruuAo`#np-)iy#coA}u$w$E3kh__@abm!G
-zZ~x-FKwvQO=0Ww7j>d;3IJpXH+)g*<L5<rTOzvR(nnLUNM^Ju-8+SK;nd^?f4b@Hy
-z;Eiw|yakShx5A-N?Jx+c9d?6ihc)9|`envTp!^&L7sEr~#jqXJc=+LH8!u3Po`CXm
-zDpY(Ej7LKG`FJe%2k<R;GHitEuQx%(^JgeO)lhzdQ2n*?DCcjOF%!z)n`5}HhW~;C
-z;f+xJ=n5!*OQ8Hshw|4G%HIQ{UH>^BKFjgZQ2i%pawn+%^T{Zue;le`+-CAQQ2nCB
-z<ZP&Zae&DwQ2nBLq)Yz*RKK|1<Wt}><YgmRXC?pt8ScvWiSae4@|_LUesxgoH`|W)
-zhRcx;fh*vC@Nf8ecbN0@jBzEDp8}}%n+Vl@Bkg!ccnNYlxD;+2%5@Ze?t*H+2IFEV
-zKYgLv?;xo5>t@H_8N%}d<k#V8@Hu!J={rFA`FgP9dr*GPg=)8xq1vs&jvopSM?M%H
-z0UytC?X(oCohCxH(_tp>0@Y66W;^}!Q0;V&$xEQxslw#ZQ0){nxf4`7eR8C=GgLd>
-zX7V{u?R3u(<V*hjp`IJ<0vU4YFANF<MxkE_HGb3Jz8v2Uo&-NQ+{r89p~$zJe4NRn
-z;Be9(0o6|rfa(0#0qzIyA4q!ix4<C&&xh%77Gy}JkB2?b9|mPN_AtH+3=W0r|AV0X
-z?gr)W!vW6j1t@=aL;1THGNjToq3U^KmMho0Q1a981^76uU|xS1R>J)uRgu0GRJkAS
-z@3<7IyyrpH%PGcEsQGK4>3`_w>_3FEd)@drl-(rL_k{AdxAD8aF5NRw#~(4?Wyi0A
-zIzOEwqA#)I6QKHEhRI!|M{X}-_dy@W+o0;_La6$wfU55kp~{&Hm2QxT{BCa-#}YV%
-z;|rkbeLhrs9s_0fOQvhDkD=P@I5-$ifNHNXQ0WeYvi~~6*}Vr9&p)B!`3t1$re{O7
-z&)&vgf=+%24#V#*kSa^xKqV>eccAL|1>>Vo^*qP)V~kl)_0$C_-=7X4F?<WEpR9%>
-z(BA~r->!j*e<@V_l~C~ygeqqbC_kN`{H&)^6#sot@h^s>u<Hw%8q>Fiiue0oF5XX!
-zZ$ia;5tP2fIKg-%RNQ+(<(C4L-}^mX+>b*YUk-JAp&dUCsytaR8}10@=evU`2fPX9
-zz{8>1t2b16dqI`ABUE``I>?o`2`Zl(q4GHcs=QO-voL7vY<#<iYp+M3^w&ex$1pe%
-zc@L=ab~0`}(8c!}R6h4Z<#P!<ia%@Z_*6UI(~kdifGg)0Q006ds+_B#%6T(XIj@I9
-z;ptHE6hZZ;Q6?V<72n$Zu|xkFWGe3VBpe6tg=66vP;u{R+}ij=cX#|QV}o%qRR27~
-zSPs?RV_+8S2e;(b_G>Cze%~`*Yg}lYV=OY}8iP>f>;_eCHJaqxaCRvC3sigV1p6WX
-z&puB6C&V=UQe!`;e*I0FW25mjn8EQWkS?6w4=UY$@K}y_f$BF~L*?_{-cElll)qz)
-zU+v}U{Tg^2$16=9XFM2Ya{RG9X@C6ZK*=eP(9^%z!|^ubl~DD1fw2y%UT4E{>_<Y?
-zZ*Qpj{c?Ag{%zw`#&e9-#scG5sQT<>@{UmT`r~e_8^Ncc?!)zc@hbP-P+jwS(_aXc
-z{v@b$qhTL-5LA4xb)}rhYrD95dJ(EVpMa{*l~8^!gsSi3q1qwWj`xLXkA0!)`SV>J
-zR~n~4_45>{dVFUWCqDvJ|2LR?8GHe|C9sVCy%5fZBX=f0j@R$x>TS01U}G0!d*fF-
-zy7pLWd=aWW{sz?!S3|YKWT^HWV$_$0Nd9~W$2X0CGhPH$f2TmzXTHhXz!KzNQe8dW
-z2+NQcn>+@p-u5&;(i#8qV;o@I3eMno^Y$3?-y=}zZii}*2B`M91gbq|ntp#MfA4SS
-zI2WqE_kpV4@3(dGE5=4Rlj9edTn=X=x9i0HB<YrI69_N`b-NO3UGh?>{PdmMJ>kiw
-zp9=e-A7?z&`1h@y|MOsf^rsv1jU8Yw{BP`N>!VQqKZ6Irx1jWQ!rr7G1=TM7jNfeK
-z<YuUG_p<R(sCK>wHekO5s=ZH!YVZC~e!3g~%|XfkFy3ff0@c11CQpKD_ru{VxChjD
-z+Z8JA4)8$yeA>b3KY~jC6jZuv;EC{ZsJLdp>B!~n$sZmE)xP7P+BXNvZx^WcU)#?0
-zi#MQ-KMd7BZi7lc$CzV$XA9Tf=R&n}k;%iL`olgZ^W95cyML78?B9Sd;P+*C9rgbl
-z{0lrUz<mVA_lIfJC*cPMApaG1+#)b`8T>RQF!s;zHFyP_1}`#sA)JGJ27DKuY;rYh
-zLY{4M349Vc-{dLqU&!N49tD+t2$X+f^3wM;nL6>((-xkd>E27vH0Q|-)4*ub(ftCw
-zA;k-n!b<oUTY<!#Qv%!0gbyH#J0TaqrO0Ae<f-r$WU(7^F1!_4+zWXmydGKH9XT7`
-zh%D}b%;mh^$30%$6FCU4MizHN?g1Adi@PAF!Sj*DU6H%OCCFkI<WyLJEbf5Z5tbo~
-zsmMU>dAztIvhq1#i@^5s-vg$>?oj^rgYt7ARQiJ;2<#6Fm>;RLEwhbjM$MZ#-b@9H
-zO~wXey|KWUZA>!;jLl^1r8hPh>x~7*Y-5@+U~KMe>5UD>dSihx+n8ny7&Y&D`5QIg
-zO0G8+7_*IO#(=STJ4<hDFxDFjjM>ICW5C!<OL_Sl8;teF0%Nu@%@{B?Gk<&OjSa?n
-zV}UW-m}U$Zo0-48^u`8by|KWUZA>!;jLi%zFTJtBSZ^#aW*gIt0b?^A&P#7>FxDFj
-zjM>ICW5B5MftTLcV5~P57_*IO#(=SzdE85HY%tav3yj&uG-JTn%*5!WH#QjSjRnSR
-zW12BwY-Yaq(i<C$^~M5YwlU2ZFg7#)d+Ci0#(HCcG257C3>cd^A9(4F4aRz7fic^d
-zW(*jcN$jOJHW=%T1;%V+nlWH(W}e~CEt`xD#(HCcG257C1YWxR59WOp9E5)7{1?^_
-zB!_<2{KX6>hknQW)u59@zgvD4CnnGSba~|2%7IQUFnLWcC#T-x^j!{da`UZDo@V;c
-z???|!clyxpKHq9`=y#fTF#D!|yY$OBktzSQ_nmx7rlmKz-r{dId4a_r`rY2Dp3Xk>
-zJF)+=`Uw55>vvY3rg3D#=QAsB=yxsuW%+57r#`6%Ie($wrR;R7#W&UI*Y|dE=yxg4
-z?BV2kE^hQW`4me(!^y{)eUs_0HvggDO}xVVH<vs6YHPpH?<VT#_Vl%mJcQQgP?J+l
-zKEdR!Ca+{(+rDF3pzE2=el-^Yd#BU~Hf*ibT&wWEWX(hRTsH!_T|K`a;Ox)jxb$o4
-zoW9=lSDL=q^p(ti`dl~6rEd(S-^!)0xAeVD-(>nOrcbs0HOKTzOn<ED*D$~7Q^h>5
-zc$RQd*XK@?H}v<!z~#sA9!N@BpqcwreLms>N^$}BPx{<9!O5ZD0seQclS99o`}tTW
-zhkhr1Xr7Zpze{}RWGAQ5@AT<fq<GQ-Y4bfXaQSggANn2KZAUvf)u{uAA8YAp7kw5@
-zb#j9zaqT(X$)VqI{&19&L%&Pg%gPtbatS^;+Uc8)aI&gR@vPb3$#2nD_HLIJsJHq&
-z$jaY9x%8Q1=~FA5{F9Y$gQXua(c-i5P%zHPq2HN3%IYihySH!s$>L?4>$BR@hkiHo
-zLrWj}ozrVAedu>r_p<mKE&o$3{z{AgXwx^D{&v&PGyOluyZl4H<2h-Dlhdqzjxl}c
-zcS4`G_H7*D;yu;k&t)9zGkTKw8{+!ggC>W5=e3?IO7*YCn>_Qt!Ir-M7AN;KeeMb;
-zAH)EaecE50{EEq;-?d+E?H~Fb_di*G3jJ>S%O*G7>C(Sw{zJbzf13GgxYy}FILhMZ
-zrb?glLNc44^ts36(C>a9XL9Iwyi=_HLcdGi)8x?aH1BQo8T#GpcddVC*L&{yf*7lx
-z51d?T<1O?%^2<za8tCG=I-CC5f%&K2$(Qf0{#zetu=ee-t@?L;AZX*etJyc1{my2;
-z-0bz+O|owq<nsS^r1ST>>0f8wlD_g{r{9C|ru^2J{=cSAGyP!GuQvSw=6}r+m;Rg~
-zE`2=@iS#+KgY&<En;?BUjd1!@)9ZItmH(Q%J#`?{^l7Hw)#lf1YtLg$A2j_S(>LDd
-z(m!bWnWk?D>AC6A=fPnv|J5P=RxbZ~9&+jPel~K4`oQZ}pYK|I7MOiUtG}rx>o?LA
-zf3Eo-GTixZGW~&8zBKcHLyq&m#{6HmhqKQ$`-$d%q{&%U|Mi_+d}o>em8PFz{+oFC
-zug`zX|7!F9gZa-k`=71+ubbR#<<CCMr5|YNQ`xMfPk&3_X!Z>j-#n8SSbVA6B<u5-
-z#ka=vw^)45R{n{DUHO|WzFhjT`dg*hU!R6deKy<q?LO&|Q@N?t=aFoezR}V@VC{3B
-z^~a-ae5l>^+0Dwc(d>7z@?2^8y<z$drhmosOH7|>@vbxdAr|j>rmwT~9j(4<E&X!S
-zUux;K`AeUREPaFNXB_IvS2@B{2hQSp((6xly|B{sy6({DdD9n|e(RvKUt;<_LjFuY
-zbtro3cZ1cB*01Eh;CAP)(exWlztr@>zd600Un_mU;{D9@0h@oHu<_n(=~r}c{+n)g
-z={K5wo$2)(qso8Dtxi8C8@WS$psUr-2y4$~%de-!*U{w8mVdp?7iXEitLbN$e#1YU
-z|F=xv!}O1szQE>-D$763@-Mgi*O~ozD}R>BeYbM)2cLER=Ue$UnEp>zzBO#R(C1id
-zpVWF!47|qmh05RbPbV+7{<^`g|0>%#eVWzR?YlWS+vN6Vnr!3a_A{KUMIC*5nA~jh
-z#Wa&E8Hf73ZgQ@Tr#$7?p@DQR{R_mg_f`#ojV5nf?__PJ*5_)|H=91)<W$q=nEeLR
-z&ojBB>GREgo$0qj?wpbqXt)XId@?AX<jPw-F|dW{vsXBIUz1bq`r*6N?EGr|aTn94
-z-Q(<+QeOF6V&{+RO>VaSJ@jO!Z?@}$U+SG4`W^Up%>NR*{+mgA%U=`oo<4u)f64WX
-zYkij2JGp_yTz$^B^v!nt#BUfld%OO8kos5pw0c>ycFF&qe>>l<tvCC8=kIaz*Th3%
-zeI{Exxt_$HP^k2&JG%pWp6KLCo1eEexuBy<UuNY`<Kdh>+7GSt&HFfc!6+v;9^t72
-z-7WtO<xU<GD&PK2ezxA(XWRYZUrk@1<NSTj0;3n7`FqslHJ`im=K$#&zjX3n=>ML5
-zJC|PFT(Vwv)8~7W8$NLIOXhFGr%s;0c$9s;jn|ImZ^J*GzS-;>?EE+0%HObu%kLYr
-z&+g&uwJ%=&g6U4a)9R;Tgp>bd=^F>S^z+R=m3cs)q1IkOtB)>cSb3Z}aH^%(!vlRv
-z&A-0HUY{#XZmxCm0P~-g<*5UGxz5|WeSJWijP<$Xa3^;(xy1AvZN6G#`fE+Uh3RiH
-z`BIa6nS2H9CjWbxyyKBhPBnRZ(_d)vV$&aH@>}Mw*yQ)jezM8On*B(VPcVJG$?urH
-z%H->rPhCm9;s$EC9*vYUr$@`r&yAMfV*ZV^-(hUD{Ik#gmA#_%pAL?ewf{ZRUpnm_
-zDZjFJw0y2l{@LgMGN0U&@f+#yqyf=#(ZFc=yqakF$L`VcN$sQMVcSK^BX;r0wbAmp
-z9i!#zE28Ch4v3aZW=6|bcZrraq(;l1%#N17_T|5$&;K^NM%zE<E6?q|`kOf|+WrBb
-z|L4=9_4^h_%UwH1%j3$T<!|?imY;4HE!Q0uEk9orE&t1x-=V&E`s^2NKfEMbp5(K?
-z%4dJN&;Dee{Tn{}AAR<tef{Zc&V!Nt^D<xjg}(ZK#aBN&dHH1rLZ7bQ_z27MeELB?
-z{YsyHnomExeRO<Z`NrRkKKTdc)yVR^<ZG`ptE2VWhZAYP)R*7+zW%ttH@;r+jn^;s
-zjrOPg5-EXjef-Cpzrym~UVDV)?|k#Y=f3$u?<YmZdtOnr{K%MS`5s?+hH;${nSQ6r
-zXnE%Yqve-<<A1$x{Eyus+WrKtGa~(O?~8Y|Z~Ra6jeqTnh)loxtZ2FSyl8oGLA1QZ
-zKGE`RzWHu+RkXg;tN%dDr!YTSU+$YP9`MZ<`}^Aa8ejdM?yKLSzWP19G&;Wwu5TjC
-zf1|H{pYql3@xJ;!*;l_;`096#uYS+))$b|3`d#m<-$Q)$s~-c3jQ37o{a)p(-^YFR
-z`;f1G(|qTTalZQf%2&Ui`s%mFSHCy;>bK5Uzd!owx3BMfxWZSzxBKe%O<(;!>8sy$
-zzWROKSHHswqwDWjU;R$<)$i`U`RgfP{T}3NFKsl4Y@f4z^;_qw-?5#d?Th<I%h!&M
-zmiOrwEg#=4TK?OdXnBfnzJ10wKYiiL?<rq?SNZb$z?a{8Uw+Gd`EAi5I-cQK(en4c
-z{MP#N8{oUX+iz}k`Zs;~?e5EOWl6OCM(_OBGW`TD@|C~0FP`DPc+T;a{}5mKD}3>M
-z;H&SGeC40v%WoTBJVn0pkN4&GwJ*O+U-`H4l|Ro{{%&1VKiMr6a=kY`!m{48jMT62
-z#z$Dce15e49B({@^{Zw?>yPusM_B)yH@?F1jo$bO%l~N?oxZ<UKVkiTW1{sx^^KN;
-zUVDY@FZSv$ED!SPFDyUm^FPJszsl<mVf%Z1{-5#rztHD@H?RG}=@<F@KkW0ro!9<h
-z`wnxX%ctjDk?nJwuRYsOi`K94wdW7M_I%mbo`3bV=g!{sNjRQmzV<xWyFLr+SNqyC
-z%^MG4eera~7yk70@(;^}KKbvy@lfcy9(%@jzuM^4SJ>YHL!$F*9vm%y?7KeS+h_lf
-z&;A@={7?GE_w%erM3(O+pZ;QBe24nZ*OyL-PJg6N{+HLj;qvJ{+{pZn^!fkA>u+KE
-zuD<eBv{U-*7K4L*@(Z1!^&Ncrf021)`V`h{BIN^oGQVLLrN5M%Bjf+V^VbqiU<;o-
-z*h?SQAG2F@`is2y!um-*`x>A9tv>r(efjO`vp>%#Yu|We{Ac+5P50#=$nRdA(RWBy
-zU1d$hn9`d3!r8_B`eX(xYp0c!7L6&X%PXB<GOReWZ{Lgo`BUa6u&yqhQC?V6TUF8q
-z>x{nDB_+jv!x<I%GYhL{4ymZD3*^r(nO!7uu%x_5p$(Z?$bY#NW$tKkNxY*aMa9*H
-zlS`^fr(;E_g2O9n%Zm$ZN-N6y3@xlFoSe}&e?m!RRY`S8d5w2?+>~*cR?jV+PQlB{
-zDvAbI%=5BUEJv5jO;Fr;m6KOGr?57GeZ1;PY#&oWX6nM6QBpIpuCios-PpqN8D%BK
-zM;Fd68C5={qP(VLUQHn13Nw7%gdxN7j~bUVG{3t$G-@2J>s4)a3AFm2KwUVA%A1)t
-zv#^S$p>lOFp{xACwWVb>rRDk4%PI;nbb(DPnNeDvQ&dz^T^%}9QeGT=ptihZUS&y9
-zO-b>vs;Y{r1l5(GdMgu{C#c={=J6^Q%Y<bOccCOkLn^9Dq72PlRmt=+N=yICpHos*
-z4RMm6Uo>-8b<M2&;=-!Ar5th9N0k?brD;{A#WPCAO*@g~6QVRFs<_Z04G?wuJjS1D
-zXF$t1&Ik^vt(sHfjoWekr7ta?F>XL^Xjo4k>r0R|_NXz##`f=*mCR^>XOt1l?32tY
-zv(HF|Pf2l3ZOu$ZT4|9t)`nCRm&D{6?5&aAM+19Y-=izai(*ZB=M2jm*L%c}v55@&
-zj2xRYB*t^UypcJXefz~6&l*);T~fqUHLmyAp?zc2O4d88Pu$~uGcse2hu!rdWrnA>
-zv6WXlTWyk;IVG>GdP<qEeKPavX3s9Esq!Y-$vHzJXDjAo#&hY6+KSrh!F4qy)j2u-
-z^x=HHV&s(MWMrz=hu4;S9WGf47in9Ps50_Zi#bKD`VUoj8%(o2zpCao7>8P<4W`bo
-znyC%O@|)B&vPInaBWFn7>`=whtdRy8nL5MdR#ntg6jhXkj3O<}MNv+0a8?`ahUB$)
-z36JU|BdabaC)5HXa)#8+8<96L6h&Lp`})+cbrWi^-;!Pp^J~+Gi{UzYVm}!&@H+U=
-z(itVyH4MXewPt4Y*S44udK|MjJs~2mxY{wB+J4dPpOX{pKbDhm;SA2U!C&J`1JqUC
-zZ}$~$(BI}Oe&e?0Gb59RW*!SQ41;iJoGS6mBAPjwSwu4@Ftglp2TWrMAHt<*4Ht4V
-zj-7a-cO4UPaT+t-=LR!^b4zPxPAac1oL({{Sa(u!e!l+Cn=)qVurX!B@llpvRyJq$
-zA@1T~c13Y*S&4TAo#ZlQXlZq2VNKCY-<hbjD}}rnQ^xty#5rxpv5Gl!x7ft?_ZC%k
-zX1}2&(+g|MYVtTamd_Z)g>6-3MVWUEG1(%CO>c_4DSeAVHSMovHvvcM!&75#u71X4
-z3>a2kR9IPE>$2nOm^db9WL8I980T;%j5>GEnGs!~k(DzbucVNRbZ#pqX9SB%D`%Ee
-z={h|&e!r7&-Ti78@h<^0g1J@Ps??NlZ#Oxke^ue!=v$)JL+g{vND5z5ZVrcxxy|da
-zZ)V2kbQr%XBd(@5M@9a2cTv^&+ucP~;%{{q_x|EnRa^X<kYD90s$DZO84@`&s!B>`
-zbJsF1*xv@q(BN+wC!61^T6yz(Rby{%uSu)7pSu_RZMEBSXPePy*pQ)lIl9sH7NTgf
-z;u7wYBUgLcGPOkwq0QwqY9MVMr{UogJ^yBDacxtJ9WkOdgEx16@b{&N=FXZopkMDz
-zjj>N|yng@Ny~gYJztwAkD}dfLg)>_3gK^LNZA_Z%8itiryRs=MZas>qp&K4$krxla
-zer};|cra&J(5h^BaI*hOCfVgen_WZ?%U=~m^dS5dE)op6P#L(#8WO68VX@VaXpFTn
-zc~pD&$5zCdD&&sao0djlijChWo5N4MQTc1)i8l`0=Es)X2D5xWOOF*=7PrH~?82fJ
-zfdzC<6(jA@#_)<NZ=tj$(Uhvv8eFttv3*qeSXO3vzEGIQ(}b2ZRV8I5h1D%$^h$1&
-z%9e7YjuG9I(wcJa+b0%ID+`xpIF}__JdRpB_HF_5E2}D|p=;{{59hPIWN!FAz@G06
-zud0}x$LS;bb|$Llwaf$&mxFmT#`=<kM@mw&h#`^GE^<1xMdH{z!_#I$lQyoN`Ag&0
-zmm}BL{1(X_hnFn8rP>kx)Ghv7GfbXM%d%TS{|PNxckC_SBy}9uBDv#md2OLCVFs;Q
-zX7;tEuGnV|`IS?~6{$<-X&rv7_h<OF-*+z`d18!NmdVNSr*;d@-U4~d`ncaVv^uBt
-zgXoodzh$_zZf(Ey1mX4cR&7I_pbcSoUe&Ix+sbR(EW?Gf#}El3j%*3Ha-+3(S5<jQ
-zm)@OCY<d<6BUj!NnQ7hK-y$&!#abp#V8jX0mKl>6QCBfWu@T2}kZee~MgN2aV?o&;
-zb8>I~WmSJ_|FWuERgG&Et`(eW?KQ4dxLOiewKC49wdK?mb&E5$Fgi)HtJPTB#FwS9
-zwu!Gl{kGxLXVOq3PM=Bbd{dl1w^q;Z{sg`%ia2%0T1Hh+Qp>37Nn#nUoFqmORg=Uj
-ze8~{8#_BIa%+QZ9h<>)<SBK}j0X%QELGL$;dBPN9piIJJC`RobWQB)MjDgZ8R)>Sk
-z2x6F#Aj~9d<Z&{LSTmpOSNr-<%$i87eN<0sgMCzgYSli@C8j@waBm51RPaq5;fn!(
-z($J~je>`06ZZASyhZH=f`a&o17>DX5`LuJ~6!DISLvW{KzsIQAA<6xsKb>pfO-i5^
-z-lPPr+%oz@N?Mfgl8--G{E{TIk5`an_VLQ$w~yJPmyuaiSY0!*!VT5@%$kaMu@?~e
-z^Jdos3kL^-!-Es%mkpnnH)ZOu>67wx%8PY4AYz3mv>7O)uXm7}<=l!=J&6lWAJO}$
-zlJa0b_egBU$YAiq8KZ(cuna%l;@GTF!MxJE+`8(%lX!raHF-onVr5;<=n;9PIY;G{
-z)(l5Z5=>^$AB;8~{a;0sF@Oz+p~bV7s>#q&Yp7a=d$kf-3nPNTQfgv=t0-!a11HWJ
-z8Cx$oW5RXQdcF7~@#^LOB9x4N{w;(3*;X~DWYo}%{*^6{7(?|_I@)y`w`6$Ym|$@B
-ziAM!P-Do;;`Shcxo9e#wm)@C^^CLSCedcIaM`P(fHN#^&da}Nh5oFV0VR`Y$F++!E
-zWNK$;Xp>Y%u(E1aD8iBb=+`r9W(NC|mQSysOV1juZp~AK(m5r?v>%7cW{>_~iZO$y
-z!c~PuHF1LM&3-j@2gb%(U07CQarUMlitm3Zy#A^+_OsP7phN95hw<Dpyf?K??2MR^
-zSz2CM+fuY)p(f~8QCq|D;laAdZeVlBh!LBbo6fGkQ&x6n{vC6pWWQ5x-W9_CPF~>!
-z8UK}G<U)OBu&82oC8H$#@Q5|ioDq4`@@tBw7fsLc&TNssqOTf%o3H3A%HQToJ1CM|
-z>-@TcZdQl!E=nTS<J%Tt-jqIU5iic@Go7Vn?PMJ{eL5S?GYhNd<(2B<q-?k~TFm9h
-zZ<um=C%C}*|L=sA89&nBQ1%2K|35rgXKePeC-9i@`(D`AxoeSN{NnxI7q-cx`8_Xe
-zlSh)tg;w+>_W$CAZSqk5KO8FwI@52MC!ELdsWQBH;oGhny*wIP$w+DxUQ_UvHImzU
-zD;8SgNNN^Z@JMPD-u|D|Oun=flGG?%2DdJf+}JCG9s_0cnWo3kI@N`D{Kl`sHkgKk
-z@G7z`DO#$t4aT8LZG&mJYTIBOs^B)5hD+$GIbo8#$}H~%Jsz}YF;5g0mDbd81Hu!J
-z()^m?$Eu3+W>*i(sH`Zhn>WwfEM1c~djfl=`wuJgHuR0JL&zCCp@xMJ&pzDw!%KU8
-zDk@9L^ZV9Tv-3EkPhrFhOvn*iw(Vt(VG#?*`7s-V=hckK85JDW^0tSTV0<}8t~+jG
-z-a}f=dqncQ`{-VCa(}z=%;@LcigBMimO8E~EiCJ!`^%i1Rv!@!XxR<T?jN^JeMZy{
-z=jeB1)Fv_Y5dBCrHz#LUAKh~H(e4V{M?ZePcEIOvs^^Hdt!6K_wQb*Wy=&%g;hf0!
-zoEO`mIm24^7Mzq{GbXY__{umx=cEY}@~eWeC5>wF)+35+<#-VdX?sK!x$z@%{h*&)
-zB+2MoSzS_FTrq(KlZx5&25&Vaqp!OmZ<*J4JQr^E5y8n`)9_C)KW_#rG*LC<f0<1k
-zAZLuP!jv>rUDb87r&aLwahhJ1#9>-^q(-gb#@md-&Yi@m<32k|nj-##q@+nA8`v5r
-zseQPECa|vas$oP#EhHI|Y2nwv{JF;ZaXU{oDM|9I!_&EU!rFugHaTVTKtiXsO^BfF
-zNm|cZmlvCub=#68&pKR*?rgdVA;c!#q_>ILk2N9sGAHg>i#3Zsz+&y<jH+0pn4uJF
-zlB5Eoc6j+p)3QfPy+jv!BmCt}?l@e%-oS`S-QvGB!{ph7`fy_Z2`yT8tR9-&aa@b!
-zj>F}3T{dwB2`qVJklA}kZFLQM7rht8cy*eW?Q2R|8LXa?>s=U5$(v|@MxL1L8ZIZ!
-zJ};N9uI6Yjd8xw`53wFN%ofz@+RDm`s+wx=@sM|fCs_LG3SM95<#q3feQibPNXxt7
-zM@0`E--eCW-wpSr57(5}+2XzEoiK%Kg|;MVx#x-ZuC>p9Xw<a9)ZJ<5hOiCBq2AmE
-z)9@Wk8;s>wojIXtY%j2P!@YvH_HMXm6vu`C-S9+q?%i--9VZ`Wp%#dE8G4h_`})+c
-zbrWi^-;&;&Wx}tx|H@+6bd%6e%)TFcH{6$9%+8&pW`u5AYa-3!^aS^AxR+O4t=<jy
-zMY1XF@88(B>Ao~T6TBO~$#I1n^tZ(o?xT^7+nP`RCdSa)+`eLXW|TVAe#y)tnmNLZ
-zlf<0DvQlnoOCq-3^D2UOZkSP0UQ&gMTQ0qx;2mo*4}EJ(i^e@h$5wmx&6`tlQmNEa
-z>(FXRUEOe<U1FZEWb}?YW95}5vdawFX~GYgh40A1mF}HvvZj}oQ^@%xybLom^uE1w
-z9WRY*s5T`E&0t~UoZyf|IfUk!HXExCw#nF?M|24oWu6h#_oP_oh$*jkuGEn6rwMnc
-z_-SIoBA;;Y@~3fEkr8<$n-k`ZaLIY$KEJxAxU6(qerff%Jib3mUsRM+a};l})YJ_w
-z&Bz}-m;VOOt%=`}256zi`yQ#N-2n-#v%LKmyv))j<LMac+kM((EYJG>u)4fC5xW!;
-z#ZiQ%=Q^Hs%u3$?nQQf<nvGWOD+ILs*s}kDtqBP-$`}wavg7X^@^(~t`&-)JFEi-(
-z7yF=OlN@GbM0{^rXbVr)Jlk&4XP$O@Wz?~gDMLG8`p<S>DWZK}hyz-_d@Ho+D_r#v
-zyT91LlN<g&QBC!WC>fJkUQWVj$T_1<+jENbS8?>NmxyL@8;7)cC{dn$qw^dY$}$+*
-z!!)daXyZ-ku*fY;C1hV#GA3#}P;}1THn;e5@9+CWGHwjN_k+l|L3neA_r_h+2#?(K
-zld$Oq=zIKXVrGXnrOgP|R_Z+b>r!WxmY2GWBj=8&?w+8#WoEXV(pz@O>9ifw>xQ@V
-zx)Z&fg$XytCCVtHC8Nk|hn9RoukQZFZ2k`)mB#H)|2JFx;)n8k@92vgMP{EwSBfoN
-zA$Fph<tDn~5;kZSmyC^?;-Y%FcJz+%c4WrQ{P)~l5I2C|byGpy2zuN8(P1qw-*auH
-zXKeOmiy2WncSm|B7`NqmI%l?7({*NxoY8Cx<jBO8-aEtXSdE)w?4`oy$dW?vwHx*l
-zalFmH5f=@kY>THZ90u1;pI%bsD`3tjJwZ~>qL4FedW*Ooi+*mTCxubhW+a`<17S5r
-zUS;)!(){^VWy3Opnz4DL$$bgeZ*}v^%_R1&C@b=Mz<up)MsQZk_V?(EK9^5*M*sZ6
-z>T0byR+JAfEG^^9CG+$9OfM}f=~Gr(Ueb4ZS>cT8>b^&pur4{Snj1-d`D~F}tz@Hf
-zUe3t8+UkCj+{W6?;xi{R)@4jt+1zYPlza#0Fz-7!Ba0dw5!#LGJ%zOkKKJ0%UF-#W
-z7Zw)tXPGX-Z2$j69w&2Xb~(p-^L-cb_PghXF9p@k<LJye<E^Fr-$b0zJ8Bs<D!}1U
-z0os0h7ohgq6NUohPj=l$1<0YY*-{hWh}aPpd9B)p0BKdeaX8fd?aay;4_!CL>HWdp
-zbpM#Daa})Wbb_j&2)2N{8QROWO>nlFiD$c11})|rifWeV|5Y2gBltJ3lug)iXS|Hw
-zQLEg)zQJ7M1k2P;L`a*_WSb+x0WDvd8#)JOg<j+6Q>?q4hz8rVdz|n~3dw4y4ZF7D
-z*KB5JZ6)@yHR8@ALA$i9Tm0$`+;M}lRhiA}R4YlF*JI05h0W{MmYFuM)0QU{o7b&k
-zrB*kuQ*Zrl^SaE;O7`6(QS(V3y@91$aAu^4rIXycoZ$(lrvdWba!(X{h7b1UirJeA
-z6Zy=W8@}T3Hn!Kz%dg2Rn=n5VLTJaCx7AFeCcN_Ld%Gdx<z)6>RZrIPa9-#u%<_9r
-zuc*qKmNP8o?bZBw?8~ynMr|td=fSFC_}dTvm-2{u8{&T{4^~ve<%oL6J-qIuN{UlO
-zGzrg0+FD1O*>_akY*ydlT@_JoGyY$1*S4HC3`F}$7#h+(8YYt_q?vY<rhQ`|I1Ftr
-zG=>K9^*xd-X?3w>2OFNSrPa!ov|4M=?n3F;=xN{>2sjI&sCJb|HFx?DL`G*k!Z0q2
-zojt<75ljs5W$)5LSMr5W9YD4>oUH-zTp+0KewX)#5;-tR5&|1gOUl!j-{W)3yHvvs
-z##zFAhrb=lLn@(uix9wZ@T1*~kE%Sp$yl`DQaJ`tZe{=9(%+K;py)n@2AD#tMiLJb
-z8d;pk1MjQiB71~1>T`WUW78rr8|srgrox7V#=KLX&~(^}-%!5+beV>0h!OhBF-E~A
-z`PneX2mflfPZGABv+VB{pLW^zH@1?W>kp`baGm8fy!9wFX{2c(7N4?@5^fyQ5#sRq
-zqRbTG`oc=ZBgWOJS;Ur$*6jDgk>^~(YWbB6r2M)<l)9JM1B_kF+5XKIL3iZ@?^=1V
-zr)fnXkNw1HkL(BSG-wI`3ZKPZQUn>032C^c8-eUU^3{(WZYU@0m)@-v=n&h!)BkY%
-z2I9)t8XvB99piZ-u9*is4<HJ}4_%_zwC_9@uKvQ`r{mony9sN*+xxL6l4;r#v9+NA
-zxbM=IvC!@OC)knwrh+?>r9%W_LZ|0kacIuXQQW&@W9jbQu_;$kTYPEON)Ms+Tjb>o
-z5EWH^ko)(~0&94>Vqy(WH%zRdsSsMNkI=DrMTBvy&lM5KE%K@yHWM?bMULU^lduXz
-z^FC~Oxih3IUZGLzhL=&vY=IsK)~@0=BbxLX{Jm&IX;{OYjmye871|?-?sjC(jyU#?
-zuma)vL$fCOgfc9=-dj54V+rNX_;@ZXQbh`AEzwtFW?f_p!9+V`W_8edz}rW@hxc^V
-zyi(#ZTR4D{sAb&VlrEKr=XA$CJZ(MEdE@EhwLGuzR8!jhIL}P^aMt1Z=c<IKwKJIY
-zK*Q9e=leTPA*WijD|yLBQi#@^I!Hg0GrxILMIwDuU5D!Xg(uE9KrfK99Bm5_sMq<z
-z_!KPD7N1~gVYmsFY5PmCv@oNPvd9Pf$%Fh<9~WNh3E*QSrIiR1kdENS4y0T0gzWVs
-z-^^Y%MXst>_Kz)T@lUJxC%d(Z{Wp6u=g3vr8XOORInb>9%D~mFGXNBxmWn{xH3(U$
-zMZ?-=s)GbMpN6g^r!%)<L$;_spdoI6s8|#YyA@GM8@3iwU&w-O)|xnP9suVe{9(LE
-z20Xl$7%s+=&$*wMjj_C!46M9uBg6tQRQ+T+mq~*q?4>xqN=~<%`%gSG><<8R#8Nn2
-z<tZCqTrf6TbJ#iX=c*Yq>CDz<%{NGwi6<n=bRb>1H21Gezl-R9c=XarzrLXq=OzkI
-zE-n;6R9tABs<@&yd~w4dQDu1nc^9WG9vbF=pr1EsxXI&Uk#*>ulI|QEmK^KPF)@s>
-zz8n?KXmtkjo8sa)HeXCu3;HDP&}!1SE^Y^m?&3ZH4vOmv>>^TAyBrjXQrss8+}3?!
-z8MW>!%|a040<vEG1@=VU8cZRw^#%W1Dh5P)b>v#t3Am@T$HlOU!p@@Jh}7g7Z$xIN
-zDQ`roQinDoGV-$#86;|`KIUM>?BK{&F;Zj#is9A;?)=aN?gY^V)bWky-jO+hR!`8)
-zkewUu130DTky*2w{W|03iLbM#C9-{9&mOaMj%^Z=DsTHuDLDn6RZLIV0@a21tNO4&
-zvf`KL{dE4k%NEn;^$fN&oZPSS4bQiZC^w1Wiu6D{i+ruR%4x8&vg};)LH_;&)OD@o
+literal 181384
+zcmeFa4S1zlT_>380gbjz;;!yS(IF~Inh__h;)He3ThP&4YfAD61#zUO(lphih3<~s
+z6$#^$HEnUnyu4h^?86=N?0^$TTI1s&(e=6k4cvl~3iuVqj|scu7<7<?pah0-B7^k)
+zKF)bR?tPO~V>gWRbV2%@d(Qv-zs~=h^FN>O?|teoKJ$freP{k&AO3^Cufg9T68eVm
+zhksvzzZqs8^KbFJEY;UH*l&RNn<)7A#ZK<Kc=7V3`OD!4f{PblG(PpB{CA8U{9KOj
+zNl09N|Czo&B9bTdEk+oI7caj2&dYb^DHku^e)dIY^WTR7&x+CY^}Y2>-w9#>--EBd
+z=kCkTzIgdHvzH#Ybayv@OKV1SEs$7QKO=qBMsDhRYECwbUA%bL{r5eX3*3!w@)wNn
+zb)m%cFPp!iTW{+7+6+q`0lo(>KXA`|uLw!q_;v%n=LLBWfsgu&|89zr5ccv{*5Al4
+z8qrvQAN#+}-^ep>QoVMei~75G@BJ^Ix%0sp{GOP2@%bETI^Y`&NwdIr(!Yxr?|<13
+z-gWVwd+&V3rF-tX`~L3woelVc+4U{<;)|q2hVtG!d*@x3FV5Zf>U-{cIrzK1NPj-y
+ztKH(%r6BJ#<o!V>l~j1~;-#63cRz6Fy_cNXT^}18mTxO?vDGQt-_2-NMf%^2A4B+a
+zDKPP*uT(aPGJXA7H}%0Z`f8Im_0?fkDBm|Jh`zq3A>`i<{{AcezWHR;0;2cdvye25
+zKNfw~tJD_0>;Ad>(8%t&|30SSZv=nj=UI~b)%QQ}%Dxf|vIH092zZ`<{{xq@@&)`C
+zZ@=>aR7H;BTS9r#ISKBz8-$}yBi}`QFH}RCeBl1OE<N~QXi^pOUwr=k_uV!3zyp`=
+zyX!T=GhF8Dg|B(=@}+x`#(x#%EuOP0`FP&kJ+Hca&wUr~e%1YV#-5@A&kJ7m;H3wC
+zI8;Ps{tsTd>+(H6eChdtk1qXD|GAR8`01+89@q+cx8L*N?46hIviZjR9z6HH?4JA3
+zHke;wH>C4INOcdYKpY)|=Y^M01NU6E{=4jIY7zn;hyT02_tIrq=*jXzmRFvA;AQt*
+ze&Bfho_oRf+!L!OtLH9xGnnJ}dEhm(m+$YwGYa0i@J!r)*PX9AJ9l~J(tVfjxhpn4
+zz(u?TJANSttQXvO|9zKUI5#_c{{!NYaJin?hgty@<)6<E@$x+{yXRF<@Z_C$y^=L?
+zp`LuGe&wTs?_~FLTPJx}J^7<OqF6gKchkYm>ecGW_|ZZCZ5@Su^>qBGe&yQW9q%4^
+zT21B8zU1tS&t5qDq8HX5`sfA(oJg88pLyhwiKH=&pq~6zJ$X|dv2)2EO(gA_(%ORx
+zHv1W*<D>PYG3w|DqJ54IBRb^h5TZwaBiKPi4;j5azD-UMZiTQD!i^BFhj1-~t07zo
+z;c^I<Lb&L#G5^RTkA&!K9-Rr%ftPd!Zf#8B7lIms+d5~HYl!zDUccVh0n03nln$Z@
+zRw+dDxkA}|HUsInp4N`=SM!f6oq_t5-NX8=*XqeGWZZy^6Um32nOv<W&5jg+GD&00
+z(dwdv-6lXXzFo$!lVjLD4a1%>Y()$cX_IQ7NJB+5T}z<~RiP8<o2DV^MB1VO)YBGg
+z?_6?yBH0{Pf_NWsw3qi(HgGQaFyI#fbUyi;iR3L~h)pC5Fu#S3dNQ{@k<6{tlRH)?
+zk~>x=k_*cd$@!&;WPGunv{-MDoplBsvA%+yH*2EVrWw|y%SpxF59leyRG&aGRVYMR
+z>S<fDsL*UyXx@cb`zTb;3c-w>G?pj5tDZI}PCX&HB_Wj&)SH`x7LOCj!^_AycjeP)
+zKM$`UI?%We9xUjK!E}=xPo#nhQne&RY6;SYE37pn2AabRQqxJ=tE%lUw*_tzBx*)Y
+zDQ&ZHnUS<1G1I1GOxt5(c$4OM4*f&gVEs)btz{*=AGJKJgysqo&L_V=k-TY9vEM>$
+z2{FL3WuRN=SI{^l#-w>9#I?akw(Dt=IO?gW1QKW&W4Ha)+t~v?vJI;vJphsl0IkNx
+zwtlrGdfFn7FjESP-e=cj_86dxt0y0<C$H(RC(nW2#X_@5kn_owb%9O|s$WClPz&pb
+z4m1YXrKN8%B{3-Qpe&~+*XzmVG{Dh))|2*(Vw)W?(B48|3hCw$lhT$z)289xQ-QCs
+zuClF-tSnUD+*GP7)fkh;q-eFK6u75JT5EYRayFK6RzocEqSUm_B(#=#A!k%vwwVNG
+zMFCb;0B};fm}HS8dL&?#wL3ziF6)uWe$?Hf652}zgnLffG3YJ=gWCAowhmdI(`U`$
+zd?u&cM`$g9fyNr}-1c7f2*jH-=8ayzVBh@JytMNJXJ2~uj<f&t?8Q6Y4dzyW5@TKS
+z*;oI~nZCEv&wd+C@a)Dn;J-pVaC2^`>qb0+fCFS>6p<)C6QTT_0*{|F$;pTKE(^c^
+z88CDA-FJV}z|&p}akBA$7@g}LI@iN``i1o?M|}ftfFp3Ve&vH_>R0~y%)lG2_P_tH
+zuAZR-F!#m50T`yX7E~a4PyOm=hU+W!GuPolVDx!kP{DcN1fuPF@}+Vft}RD@qn<vQ
+z<Vj0dpI%QrJeG_bsJ80KErJB?-1WG-m;XbHFn(CSy7wJRSC`JC(eItPeDguy>&74X
+z#+xpG<-vD~-wl`+|9xluYp#pUgJ&Rp54aEOZ*vy&KzDpMh_MhNSFS;5Xzv*PL3U#l
+zz6AKv3;25;#_RE;cc>qm9EHGh0}>>qwiotf&*OV=senA{2lerJm1pp=te>KPIEEn&
+z1Hll?a3Xm(9K%7x&LzJK$8ZKFdoKC+82i;elQw$+wjT!R_!wGOKY$S(MReP#BZ%%f
+z3Y`VFXnY9Kj#CE_-C*?d<t@S?oQ7G^hEH@H;U*qJJOmoIt~WODOQmjYEF&7-FuO1A
+z$>dJCPdUbmL<?#zQT!fPa9R2hh80I^P}M4;w)%oQnkrf2XLGFzK>n(_WVuP}#Fva0
+zJjXaPvr;gWZxJB1kD7)GR&~RHq-kK#VWpl+eiQ!Rp@7Bck)u7H<GJKR0GyPT(B*{r
+zgUn?jxwn&hjtgt>9#`Q#!gIU>p5q00j^`KQE6k&c;K<o?Y|?WC8rECr0yYQ5R$JU9
+zjT(Q!?^8e>Yk-n}H=?vEcT$DY;Da`%jAA-NF{&6{#4)3&nWx;jOq)hwx@m&~1H9mI
+z<__Ns^U~<>Wo{-$E)h=KBpie@FYroCci41Ca_NH$Oy_S_FywNcvF0YBg$KUVB9emd
+zw1ntD<CXScS(%{BYKI3)sHoOi<phUGJ_yu0$wXOFzha~|sF<f%NsEqTM4{H5+RI29
+zV}fhdG897@ieaNTB;QHvDCeTR&YW~}4Z*pj11VQRp;TV(`Q$44tP$nD7qL;qy8O%3
+zZmc~m`&3c6;wUvo>1Lgn)3!xyY@3&zoR_8ng45Ml61X^nV=I+o9_UhA4D8rWBwsWU
+zM$~3oNSiG}O(a*%hJD*9ir^W>G@=8ItMY9d!kf1Hh!C!|Xv&pABOSpnR2qw-8rDSG
+z-f8NAxtV*LFoC^Kn*^HAA)-_?0%Y`w;Hy9oB$S0ohalS93O2VKEQ>^Y1wpLhZE@5R
+z0J;sq*=wd%@n<R|5x$T_J4!upB>gep61L}swy}u7UL|D(D%NiV9dZ(FCnohfX|RyA
+z?xbY}vK}L}M%#x@KSJR2QE6IJtB7^jNh7(~jXg*v_jN}SH+CgyL%-6de)YJoY<F^B
+zZ^Bkc(S7}1j3uIF_tmJ@jku#=b0ep{`QMo;$YJzn3)<NK3u&!MYo`C*+^|5DYyZok
+zZPY!h7nSPD4#wT=V`9==1)MazhKQ<0NhrmHE_}ZUTJ&Fw{>=Zd>s|I$I0C{WnM4p5
+zxdy4#>y14qBX}q5Zve#p2Ei(V`lDUz+D3Jh9h@E2nnwLyM|(znEt7HZ-BV@eYh9n`
+zl`2dfxLP&00bgSsz6N{_u2x-u&v70;$M{k`xv&Vf?Q=9{q0ra~)Tq4ZB2ctRCdjXt
+zQcOMxI#qfovCy;&%?N;nX0t--*s(^yIxDVi!Gm#9?p$D^cKk9Gp+ycI`7*GVmZ{$Q
+zSuIo1y#TMH46<daHC1)=S_l$_bQgO1G8HYUv`n?4gu*h_DiXX*wWJuAsg@DLG8Ju`
+zvl9iu*U+LB)}l(wRHOoRv9m5MQ(-tFJ!FvzMo)Ifs8CsG+F~&nr=(2028Cs9f@m1u
+ztta*VdeRTCs*h@EHV={4wLY~D98^CB*bUN1S{-6d9^OJQ&^YG-HZUlN)C<SiD##1~
+zqgojUf3pmd&26%hw095~K<ipl%H+D%w87ZY@oOss%ht67nyNdlC)o&HAQI5t=<-&&
+zSttvM>tY}{h{r5;jb`kQAr=KyDi$-9*{BtBC{0)fOIxClHYW=JPLj(Ou~|;(BPJCX
+zjY&%+mbRA*xb~d1qoA>izz)HfnHW~^sMopHfk(sGJn<%B$P3F|%|#~mI0`EuB}d@{
+zKUsDZ?k_nC+bkSrY)NC7gwVG&Mi7Z&G7-kJ2ZS-{b0#_Yh<-sqc&&5A{V6oAVJ;3m
+zR_imx@qfze8U2vm>luBBc|Btmta&}djJ2i8M6;l<o^eFYc|D`!=m>PX<0yD`3s1G4
+z!8!&k*E7}_{d}!weAbH?tI!PmgGH&TxUD7o<W^V`raQG7qRSA{=2TjVV6s;tR;mEB
+z5-|-Do<FV%y673Ss66z+R3}y<HV6<pNKa7FV7Ha`CRQp|B3K<>iP#me7~ONU$0zYh
+zL`^d8L5f4cX~zsJ5nH)uu(1AF?PK+cr?yxNTc$}%ormVjgOZ%{<srp-NB(qk)F@o2
+zQ5T$dl7wP7Los3$J)T0^Gz!yA!(vGFGQ^aK#Q~jzee5Dc7!zRtge3EV{RYz=<`9^)
+z3QmA`!sMv9iYe#}q07q<vq%aa$~>Y2jb(c%ZdlsF!Hkwrk(qf_Qy2y{I)HMWiPA}*
+zVx-ouSk*EF?FzO-yF$H>Drk)<piefam}<rlhvd7w3?XZ^2jOLirBEnsEh6S+h+)Le
+zC0vFWLF|}i2$A<_7nSQIbChn@h#8J111zSRmz`WA)<GN&<<y|jNY_|eHTV_-J1!GR
+z|Bb9aOp<r|E>ohcjWGBwGx#;o_!F&0m`d6@Bm{gc1x<>LN+Sk1St^Y+EdEO3`hn+#
+zo2%lky{4eKte~-iAmdPp(hEp)8Xb7zd>d7AhyWQ!2nHIjus@}&w9PCK^el7JvuABp
+zBXJ2NqCIuQW=jBRn3QJjkW+;u!WWXfU~weLvIPr?R$k+vLQsQLPsB3lq@hAmpOg9v
+zNvlp;RG=Q$E{OH*Rd;VDJ6#<D2o=N|q*7BYh6dVNn~)3QwS>kNHI+8>D{bmmj|;-a
+zDHr6$KVEi0eyZexaFPyGE7E<Kn3vWn{yS5}8W@c}NkJQNt%A0$wF=3VNUpF}VN1q}
+zxFtTa#7hX|bS)zi^xb44l)@zRE=5%DgI3G?V@>U~@xYGH`<(Lo>;)X;Assk%>in;d
+zA9AV>mqXO$0gP|codN_WOMxlH-D7HY=P}(gykqt!8tmm`agQ|UEzd7wR>f_z6@=Ae
+z?7djIzxR-C-9)k{1p3cJdhb$Qe0g?_S<Boaptce2l<1^BEs~x`c5IqCH`wqma>h6t
+zn}#GVC`u>{K1$HG0UC?(i~1NdnsXa(ABN(%DH>=ul#xQUjk-V<Hp*N%`3yBX1%Lv|
+zNuyltL8%O(oHokUh>{q<wvursN56DBCIUFAJ&T-}G%u*R#qfJ!sh-ZEI>uMn8#FH+
+zoxKBlpr!p|p8bNwtYU`~Tx(QF+WkZm3<lvY)IbB;VQ2$d*NPI-bP8+W)^Y5^6y3sg
+zbu#j{HXQA-1Rs>*aFi8=6DMFZpwU~Sn{AOJ98C)9-$m3imi$X5+rLyzVR5Mnj&3GL
+z^+Q2p_cmETO0+Opz!9^Wa~+Hfeb9w!Z6f(#P^)MCspt8syTL*oNO@^HPZGuvs#NDo
+zMiryOJfzqsFlxy}lLag|%|(-Hszllncxuy2&aYzmX{{cXT;dMVf^7!FUJV$7^HfK4
+zpz#sbYpPRi@P?^OG!6-lbq)SXKK97u@UjGpIpTL&%Hg`fied|k;B6@=AXHOJKsePS
+zh^!s5N;8c75lb-+i(VHv8{&py%|!*RB?RS$IK_-+dj{z}4M%xyID*<FRIDJIQFEF(
+zXW+PN=gXOrZpMfws}L(si06%%P*H?gCSg5VK}(E#ohSl0spL;sOQk)LL!;SNpxW_p
+zEsIFoG>0e(t5jq2DuFS7bQ%4^Y7~DpFCFp}j84F?+BM!x3Vgv80k5k9H9_K7SHOO-
+zI`FhbHg&C+yMGvU|Ii2QFbUb@qv#(B4O|$oOCv;Vh5d}Vfe$)*OiwYL6>+<%Y`DV&
+za>E@#w7cOdJKbbfT~$1WSgbnn1iw2=lBrA*Rt<MbF*e+qVr;lnH~NoK!&Qk?hY?}p
+zX8W{;I|DqS;m#sD(AbCm(I6?R`HM&5T6?Iqki>yTHq>m-1F)x!*uMI}@s8|dlTcCI
+zKEz?l%1K+h1V{@VX1eJlbrZ1+*+H3p1&u)jwp%F#GZOp`pgO=QyFDc4uu_`(_+aYe
+zgGIZg)Uw+xf#-Hxftn!EZVT8CR&~6ma(p|q{T>N<m|p079xQO3iN{zo(zn?Z5N<K_
+z=(ie2zeT0ps%-!)kEpJ%H>My9Gjg*xMJ!y9RJtiPaN-faFjvGhu%mPhmy+M3+%{6J
+z&eABy<a5a`ij9B}0#;!UT(WD_s>LL4EEquGPo3X#0hu^03XKLv+&)CKyU{2c+rETS
+zqoL)vcoapWWC5e>M2%(`u=RwEMn;pc(a>(tXfT$|tpz+<w#Nu1aLgM80Z$SeFFm7O
+z7+aEuM*$TY%^0EsjqlV_LBlH49(rcrvSti*uyLv#ruLkzg|9<4f1yg&5Cj2Kn_zPu
+zI1m2kibS+aY85kDa<Ck_ST1cmo7Ij54O+7bVoY8FXqclelUCANVd3QARRjZ#Khzx6
+zQ(erH1kscs`4BXC^RLZm=HWy$aHFPX@GB@U%c)L+?iXWDkcJ({EYUUFHK6P1IFwf$
+z0|^zVg`>s72_+6RzE3_z<Z^^)GcHFX;arTt62MRaAmkjA1TlsS!0SfCB-o9qYHcej
+zB`{LK!I+B%Mb-*PL(VZt;GmuXHzlx%6)GHZ?izhZfsE0eq#8icF-)68hcRM_LEJCY
+zfu4hlup-v`-;RJWU%!fpW)}faofL5&KreR1Y)k5j`^DBmoK0-@3gELD*RKMw3;)4S
+zLldh=7p6X8Dolz#TaEd2*!8QJhIbL%e<qSD&vy>0|KSPLv3fciCVJULn6C4n<@u1R
+z5(n_beoH17j?sJ;;{^r?_6rEun%<*M4xPoLyje0R$-O2Pr(CHy4DMjGK=JEAV1okK
+z$?7;-<zyLlOTwNwU~Ch_1I7-b-2;ZQu@E9k^gi|wi_KCh_2k1z8iM*H6{j0AG7T7q
+zEUy9MNU`#Op%Q7!HYry`OAjXw7#x<ufH92dK;zrh`G(<F0|Tsf1=Ql*g-Mu9n5XF=
+zCw^Ihb{-6jF=ZKL@>9ZR244HKo_LjjJ(cn#*F(`dNo7M3e}z^PRC6Ok5$mg<$yp+4
+zwx=N9>D@Y^V#Tb9x~4Xf`XZAOP0Ub>v|9YCD=1!-@c?)ZlWO0I0eKpFJ)AL1-WPYl
+zm#!{;@XV5Cwz{JBlyF6@F#|#eH>;~q6mwQhp`Z=%kO~4kOaai`m3t5>0cAE6sEXX@
+z9y*-{6yywNH+8-3;8~%%qYiq&ud@OnwQs}0n<u_vXGuE}-;+5BSx|5^g2Ct}O!7yM
+z$esual*<VAe-S-d?|JygZoiZJr^&)6>&=BD*fejMOV)JZlL=Bf&pDdAd1IJP3tYs5
+z?@P~rQdRPttzz=GGZ`(VPsyVZ`sqxD$K~Yb#pGM+*E>)OBm_oOBzh8`z1R78txqli
+zS+e;_slgKv@1<Z2+(jZ>+CAoVEnVXGE{J3+QC+S%vO6KW@(Q8%J_msq%T>!<vdTN;
+zY4D3*lMZO;_%-UlHLPBW<`qpvrlxhI5%TKJb=1+S&J`6tR$0837q6dGoRei+&iG+3
+z6H_@B*=WVms~6m6Dw&wgi_f3N#3BJuxxGv*<ye+a!lKcuxA<yaeC?#-)WkXg@>?F-
+zQt+}~C&#jN5*BTo1t!8Q*w%;r6O>DBpQ+9oqi@5WT^|f0RJ4bk-sNrU*kkngj+d^n
+z{&b;(!3jso#@9_ycEiyK$!i(_2AX$cp+9Y~QSc5=<AMi}BZ=VY5uNQ@olFkV!w3bF
+z2a$|v2?=*CsVfcL+>T1LP1LtQaWoC$aVrV3F+1^UBMz|xPf$&+Cg9%&RIE3~(dA0r
+zkSF!DD<0_c4j|6fOGs@5yGPzF@Zp;Rkb~P-5$_%u!fst5Nj&<9bA*zLkwo;V=9WOO
+zj<_EL_HRW`cW@KBpV$}4Q{DfckPPr{rGCKkM(XBm?C0tOZ-tHNgwMcoXYI^DW6uz~
+z<n0kurp|eUyx(<RsFEFmuu6Um$!U}I8M@Sg#*k}?wktUXe(k8cwq)1cwY5c@sx8OD
+z1>x4Dl-ry_5cHC_EY#LYq!UKDIH;<&mXV2i-w<jYL&L9{5Ne1o)s|(`MG(|h2W4VC
+zsJsvG$0YISgBUT%QUxznOPHnF`VlBSsEX>R_JXPwqX-qMVqTA7uVt!oOlL)4*t1sE
+zd_h$+5jRwo#etA<sA`IVR5h)bFRv!8RZ$32bnVMjscMB#scy4IB{)g9d1I1z^tpqW
+zWU1P-VnT=eORAcL2?bTbzND%zvQ<r@gpgFIig`V%TFO-ASaVqk7qIGbekHJzk6BRC
+zSfl_{j6+Ey45Xw{#e6R_(UAwBSwz>jRHdGIt7j2G6x>PeVv_hOpTV;veuyB|biAmZ
+zgKsT2_=BhSb^-^3T`=qs`pJFRARD+D|9jf)UjJS{!>!lX(y`Eb_-Vhx{BabOlWhK~
+zbP{$@JY&FiFB0M5tTFGDS>&U99Knl|%VBSKUIa9QAoFl&reXXD*vJtKJ5Wb@U0q@T
+z+eN{wQiufg8@hFSIX-M~+~9XqtkbM`A7d^qT_5M4kkp_`<qn1<5fei>mSIPaakXfd
+zy)wu~&4lgu7#YY!%}ng}VyWj$*cy+)Qkblyo4E|rdGQ%Xt7RY)vt}aO{LZl~=2(_a
+z!lGG5kRi-JZGpHYfpV#BG_FO{%jx8pw@$>o&0JhfOcvnbaIf^j2AVvM#*K$nT~*nR
+zpw45-oTFm%SH6H=4jYENoZm&?h32;*LQTQ4_kV+v$ssz?Ecr*29G7fYkc&0gc?1?v
+zKKhnAF|H(RE5@bg4aK<h%%KZwpECMH&QQ=zQ{{Zh8w^=CdwjmJ78iHprmJ>;RTxXT
+zJ3t#27IqOGXq<tV!CwNl<;WtEvN$?X#?gtYF4c*uDwD2}W|vTj_I=!yuDY1ilD1YT
+z(y1ej1Pb0-T3D2nYD(j`TpR7&tVvmobp-oE@J`j2roM1?{VKW-uoce38|XjVz1k3e
+zdA0qtlgV$<z2a~aT&PK?i+UnKxmWD@L*BPJFW3Sz<X(NZkQQx0m60~x>H7S19EirX
+zlaTpgHQNz~8q~r(f|4EKbcu3&_&Q#jEc(Vh#xM$HL}Qpi;b082hz>OV1z1JR&q^(M
+zuYjZ}Bn1PES3B#3k}*swrl%WF{nKQr!k-StVD<PV37_H5@Jg1_ad&f~TcptX4CvUf
+zEOv1SZcvyWW4KwaEfpP>1qK?AQl&M?R&-!{R61EuX&qbyl};i$&`7`m^d~gF%3<xN
+zZy5pRC_3Y4Uqd3sDax>7%`vJZ3HMBUo!+ua1&rIfC=>BINsn*DBy-Xp6-9YX$EuXV
+z^r)1!Y1<7;Dg%vgeRNhjDA{;9={%18cqb}$R$&bvJ=F+^2ThJ5I?#9>JZ@-GrTsck
+z)Z|e?V#cA#Jq9w)L&cgy3R=VdMF#_Vok39Qse*9|7_Y?uII7J_?P8KS3HMp$m>sK0
+z3e&C0gCAm#N`Bn31Eu48t%KTW{o29bhw02yy;Z#)*SLJD-v`r+%Y(kyoV|>*D>XIx
+z$u=jEgNQ^;FcBlu5y(WAnGKRiK~AxwJ!nEW9Wca(x(*RG`doY#u(7z3s*3M_4>6Xs
+z1QBM1!Dm6q+#V1IRKBi?brBy}3`ZMDdH=yGRFg)v4FJi>Basmm6G4qh5UPl3qzcuj
+zQSm6IP;C`Z>3k*zvtCqx44u)9@7)gy{`oeBGx$2|z)oLWL^N50`F8ZHy@DXw{0;u_
+z&5a#KPx081zeP9tw8co|uLii%duG?imqPNQ!&9C!D?CtvC>H`kG4`H}dexIhOmokl
+zgH@a)NG5Hc2-*)=0F-?of@uen4%EqA*A1rteTed*W;Kp_uCUG;v7f!+=<zPDDzUJd
+zI8Tny#Uws=Y%DgKWBhEw+MLF7Z#~1ZoAV;`J!#@`NZ4dNcegVvvQzV-W_1!4x8(8d
+zUcC$wpRu^(J3*ph(H`IG#WIp(QR_H~moa1M^kS*ySn7_}(CDWTHEij~36piO@_lF@
+zllpN!98^3WZpv_B$@6%)8N-E1Ljf)x)SMN-_-d~Zi_Eb?mmEFb(3XuQu574%2frD2
+ziPn%CZWg7X(W@iCbyVCf-OA}~A4dm$8nVtMe+u|rV#D)x2~ObZ40G{yJ9Ic4A<_MK
+zyi~KbY_j`3QovfjTB#;YFL??lP3(#^Y1)SKgD$i~I2_qxz)91;bTTC=CNC&CjzlZS
+zrL&75s&iEZ+A4>mB5DJzB?W9+(~9Y~j$+~El2*}oRUvHIWrb$5Lh~-9uEUS61iDQZ
+zGNn|Dt)MoFo(48H#-PiI(d8!<h99#Gw84*AL3E(8h6gP$riom-N%|0zP=Q=aEa4dr
+zBtdz$2EB0zs>4;}hL9M^O`=pFH-+dx<EKClZWAk-6FCJMLP3?lv0yDPSXaS6aKTxW
+z04THL5db@D=$PMAZ_4k9IK~2wfyURv5J0Y9O4=M@VH_yYul6W^;bJmbN%FhacGqZ{
+zG?Lf<4mxg>5ikxyqD;`w=DK8P8EMnl;+ft^im4Hv5&%<8fiCyjPg{2SqSKcUINhph
+zZ#jKCOP{qAte1#-+DS8cQiD2>t2e|v90fwKe+OPxt`_EV&m0^ziUeaSa`@|b4n4Y;
+z6g+bvi$MPpKo#xztdsXpt~hNTgydmr{1byJ$P`bT`}4fZ&Qq&So6Jxr@sTf*$~t7m
+zx7DK3SCtgIfxZ6*09>b1P~7?#c-oX-gj1ac>mzzxoRb1tV+gXj_LJTH2vNF8wB_!n
+zB}&)=A|{-3Cl`31Qa0_A<=x!?^TY)gUQjBu%Uwiqh2AD1hTtQc9HD}kEpePS4WK*G
+zAh&38OANZnF)xza%E@hu+!)BA8xYs&=CD+#IWvSLa4fiy7wo9uoD0sN1VEWx*$vDV
+zh_4461C94cNT1+KHdk3VoJmjGYy5@xEG1Fll%Qs9-Q9qIaZU?mf_`E*V5CiB%esL;
+zim4Hv5>#~q)<t{JDj7oHZosP2)i+f4XqN7JX|rA;>OBia%Lqvg>Y%3^criX+02V5Q
+z`P?&C-3|OIS3T8cvIUbz*)IC2$3!<c(8cUj8R~YyR+gcsI6NYX@yhMK+%5<eG~3lK
+z4%MK2gchE76}e7<++t2{N#y=H$e~?`>-b_+V+u0B*a<AEXuq?0!Fd&Yw+jYPW>>b0
+z^#bvkfMcNXW$H2g&?>HAv2ZvOgy%2#3yp=Mpq0e()x)EJaZ?p#qA{+s0&uEdNSnr%
+zwTnQCsS%zMRJ99fHf`@x!JbjOU079qRV&qW-swjocv`!l4tm<fcX)}kLYU7zbJgwQ
+zjTjt4yFg64nUAtv?ATDbnT2-YC4}<YSLu<vI`kCU#U!EwjSso+D7OnjRkw?d$@Q6B
+zKZEY^f_c%r$8vHtk^2LXL%R^y>87yZAg<d5fn&juyx^z`erdl722f^Kwu{4P*JxYA
+z0mne&Whji%o|$L@gDi~q+uRa{_$%?D<)m=gqjJ0ua4HPq6i7q6Fw&;6W$hx6Vrqn^
+z1Xb<Ax@fPvU2Gt*{aaP-EvIj1=|`4=6&F$OIq5K`)}Ri0+Qm0`VYNb-&pmV1?c%le
+z(kUENOi@peah@8jaxC+e&0`_7vUzMSz0x7^&>Ut^JowlrWjBsKg>+o*;ICwJB$^)z
+zDk)oj6dJqj2fu*&pSNhU3gY$fJs{I6-ytGV;%R}j3zLB+;Xr{<X!PO)t|)%(-=!8A
+zUl!kzt!?fqXigCk#!kS=Bz6(8jhPGabOKct1XUL6qUwk2!UHIA@p;))>!!LDscvUf
+z&DLi*A!-sKxFNbOZZ4t{ZtM7^Km)A{sL@fN&CejFld39d{|vha9I%r1WrCDl)!bMG
+zBGuCxB2i<#t*=Qqlp+*(+)&UUGy7Wku=@uhBd(`0YiwIYn#+JwJ*^<}D8@n+1XUL6
+zqWTfZ)EE+-;F<=fz1cC<#YlB2qiVK3OOLflgy4qgy1031R!?18Ua^*E$qHBE=MgzU
+z%Y*|3LUmF2lmzwOKzOhdiwD;7lI5Ky5x%lMgUF-NG7Ew#i*-?bt*P$0-R|0e4iz-#
+zO?5I-oyw^Gt^A)R5rP|{>*D6GK-jIJOUskia*eD|%XLIf&@$mbflyr(-XPH$9GYOu
+z9;m`A5Y3w99VHQJc?^+9qh%HZRTk@_`u9zB!&KK51c#zIYO2GL>PSX)r^uvOel*+=
+zA-EyBE^d}Vky_TKOYyuE&YzD?B$u|itnTwkhq(HOzd0Pt(7k)S-d=Xt!i((_DNAA3
+zc6^7=>Lqx=;L5ep?)M9xz<;uSblyHZ+&+vB2aC^K*F^OVDrk)=(4$nz<~Q<(cf0D0
+zo^k>o`K8;jr<}k)Zqp0tOWIG;w|QpKLb&tfV9)`bY9y|MsjxW}Hn8^4*<`Jj9gmjK
+zm(&I6KCOr06E<2_R4PAHPmIR0nqygW^!VL{bz|A<<z*ws(m4&wma**iV%g5I?3{*0
+zjzwV`E0^dn$8vNUmOdFqwvFXy%Tk#Q_Dg6)*e{_;rNL}uO5QISV_EOZ)Ew>AoKJ6h
+zzhsiwk_%hm?NuBlTgNd5yuCWUig#C6(0MFdC92&iqQof&blW^q_6$wo!Y8PFosrui
+zPjRxWJ$z<|$^XU2iDce|<o}=*8rpxha{0|Z8A0Aeyl}1-ogmetWK8EW5X7yvu$%6K
+zL`m<9nOG~N5b^s!IyUR;chjsFe03vj%_`>A#3a0zsY83wIs}TVwtx#s+P_0lCSgch
+zBn{u+ie;=je2ykuXH(ZZ(R>R*BTRphwXhT$o<I+8edwX{2wo#GKSvgmPUURcoXr%d
+z=A6xne&mdx5$~XK!bg=_f(!eR+575Kxi&T@%~>(2motB{0yC0A!9LS*bJ1l950k8D
+zh&rY~Z|5Oh-oqkF@4pobE@@Ln6wk2-BifC~%SOcZF4<r>83^J`NBxZ|2oKSPJC6E9
+zRMf|CQ6D<iWFs0@K^l=!=pi<A{p?18m+KZ83WC}N4@q7W$DL|3u}d00ei+N-Rdpx^
+zVpS0|!jz3jaQKvzi23ygzsDEBozw0IKunSlCvny>XIllTIcM7?&IlUu4k{-ak>Kzq
+zfjQe@9=31_Y&fS~OzP!qQ+h5v+85pmZEpy(c57`!yGro!RBsxWjOYhpI>CtIn%F;d
+zPqZGnDjU&COoriPAc!*^l`YTPFZtsaM_1Hl;T}X+Pjmzi(MBZCT|JRe==cweNOQOH
+z7uxLPx9Rc+Er<8+Tbc!w?vBQ4$g66SJlP3EPgE-yXW57Zhx0k|VRh>TRYiY0qI8a2
+z@R)QeXTw$qR}N#DoU_pqX9SHfWg`+CR_Dzb_rJgyeeDSDoOUs(m$TxR6=FeEB6ikg
+zGupMb5wW7tY*(GWhM;If2P63%hehNa3>|#I!IR2&A(YM)9!BEb2OgLzy$^QUeTVLR
+zy(#(FejjSE{uts5=fBpm1PD`h-=<e@>dD8U&yaAWZs4!6_O|B^;Sd2@1+>Mi(35&T
+zvkmukOYZBf<Ll$Mb&#obVSSYAJf<+5zg*a=r{9ei2=sc{AS&xz@;9zxt+O(PzRYX?
+z7<?_i^Q(aF9UMUdNO%v$Cy<-Z{jzU6)Ax=cWcyZe>o>qsfW*Td@y#wYB^oupt&??-
+z99bxjudTaC8pajf2Z>WLZ;;f(@zKOD9~9qdHKJ6cu@L>Qo(+yL_(g^T8><;(ehVT{
+zv{J3?sE3TT@KjECY{7T$oB2b90WPEb4WP^;6J_~}-F+b*^yt(5cubdCFMs1LQx$Zi
+zk--ln1?*SPp*u`=uh)i9O*rFM8$5?vx?byNUDdDa!_Lsg%W-mdqIt`65xfICwS8~T
+zs*;OxUU>Ive1$^LM=wKdQ7<^j!=G|=mr13nyq~g*_Zo}pMK|Q$NL%<BQasjNs2axk
+zt+%G%FU)#kmJA#=>(mvtDx|XW@Xp6K_B-ZBZN@DnBM_ep3cCzCJsXt>H1ni*E3S>m
+zMGdDJM!hV*h`ie}x@>rO<1sWmEE_DNF=0Z$t7YR$LaB!b##igjh2?s4ZgC=g7WhKz
+z{>VhKA736|W)KBWai!yHz#t*8AF0-w@(r)>kj~r&b_i!cIFxX&0GD4n@RyeSo-QUr
+zdw@fepOs?t3>Peb4B!=nX(XCOf465AuyePf3W*#RHl5LEE`(!p4_#x|ls)Ih61Q~%
+zA3g8<_=sz%zkVG0-$|_BxC_%QAM}d6@N*tY;^GW~^V{wTcd?>#gla)J7bn8F6O^9s
+zOr+x|avk8?6QQkQd1nU;I+Iw?DXtfty)bz$y)cMMK0KG6AF||EuJxbA^LE+y2T3OV
+z(f**8_(@}be^1XE6uxil_v`qGG!ERcDWS4#@bTTjRaQo#hcA-NH}Z#9KsFeCjL!QW
+zbKEzsd>~wu&0Ig_yss2pe5W8RgG`B6_2I;WH4+Xf2-toQY$J$PBv?(P?L_#MPB{`M
+zER%EyP&lWXW7%?1)O^@?IRVR#vF!HpvYTVsbF>yJzx-)s9!Wejmh7Bv&dX7brH?8(
+z>1=F20dRk<mzO~or9?xgVHq}-tzIl6IhN7Wu#6c?*3xr{YB`qrX;>zWC7jF+UyD;s
+zPv=->PQx;5ETKaR2a8g*7W8*Z$i>3XGJ-U;mewkMc;RP_WxepT?r3i<`nsPNemVfc
+z!q1vtgIhtfNB{0mLZi8ImV!E9-)i+rmMtRo^SxmO=<9X3#Y-f3ubTN>>iH6%c_DY`
+zZ08ZgN?KHspP2F23NR-M^Cb^)`M0Fgruqb|z{u+K4FWJ#6K}dIpRE}E1_pZc?)KSr
+zC=|mBt1{5l2k9`P8^A9K;jl27@msag|BCl^v@Nf~*w3e*9?mXsIxx_9xF4Nb`WERB
+z$7+xk<rAwo5k-!18w>>Oys~Q1|IIKx`_OB62+YUH{B6OogcK>y0zOclM-<nuOnEXB
+zO;<0cgqHs2v|<&Xq`A7mevY;C`oBN~>LG6EOeOp_d=!Ev21bOn=d(0UE!}D>Bxz_0
+z&&$SPLf_y9rJB&jtK%>XDuo<4eFlN2Skx=hZPHr8b9zC!8LJjz1%Z;hp@d(kwn+s0
+zKa1tX6NRNJKS#`AY6zCtu<8X4d1KY4o*hwpl;-R{OrHyfIoqo$@9dQB%#MM0Fsd4&
+z1C4h{NB(4d`Y^MjdJ7tdIS)crHs@i)V9vt;Etqq^R2i2w2n{PDjL@M*Mi38_M-d%p
+z{G2JXph?P{2ZfgAJfv7SKO>hmfL-0_beS`8qaIZP2W9Xp3bAZPgcUEh2xWdyCNCD@
+z4H#(i^5O;&B$+u|Oda$_W*;(bo>U4ru-qEIoUZB#FE(K3J%cYOH<Dg9H!G3*9&`Q!
+zx>KnXSuO16khyAe{$_9(%sH;2@enn*rBrD3l<~yg`H*m>7jb%e=TYcfI)hR50X!I0
+zKce^`2Ij-)orwl?m>tzy&^XL_iv_i`utQK^yepV<2dUtfnc$w#Fz0Ng4V1Y$7btV_
+zZlLjQQ)WSvlsR+l$*Tied8)VspIqJO;~XsZ&LHPSD(z-R?t>i*UHFh?oPL8#5^=Ez
+zUr4I#mMvfSjH|Bd+g?io%d>R4>IEdE2z@`=>8n=IS|)Y8mZ2IC+-NmaJMndb<Li0|
+z_MhyTXN9nzd*<>3VFeBk?uJq+84Q7PM%^wesU#rXjr=rN5y#htiwMU<pn3Q!ZT^N@
+z>AV-$S&`k575T73k{_)^j+QvHqeMl*JnvOt9<WQ~8{1+)roLqZk>h1*5)P#Zg^@*^
+z;LT+Gis!v%+~-Xz2m^X}il*W-p_?6puPJzRBRd-Gs<~O~<>n6q-n^o~b<MIa16;DM
+zAaa7NghMGpb;<f_vpZxW?%%^Gr>`0Ve33+W&SVLZzje0{S&5MK)yvJkO|M+9{g!o>
+zZ17CYJR&E^N;qIARF|x&uy>u~bB_@24C`K+PcEVOW6(ADq8m;$^>Xt!NQ&QI;Wv}I
+z)}x>KPF}UOoLs8X@=y4Q=_*z}Zb5z@=9*Zxh^rNUNAPjI{Dt^H2;cv}jBFP5l1(7O
+zry}j4C;G->vgy-b<HM+Z_sIGH-n{BlAHY-F?|RA+>mQ|qB>3Ht%C3)BzU7GgRpwtG
+zFWsI-@)DB~E;>AAIpqegPjjw^MHCMA2!<UDI@m^Y42v+M6!N<I6H<SV9%JKL%p_p&
+z-Y@>kU%LQ%j|RG6GgygcNlk9m(ma87PjJFwiu;K1-Ppo%EbgMTu(L*UK4}?bUG|<|
+zdd{(IxG0xFI;UaTGL~#HCC9RzW7#<k%dW9xizzvly&TKoX;_YorPHgIKAEBPqOR&B
+zy$q^O#<RtgoR^^-%dn$0ld8D8JYp<yF{Mz`V>y=EX;|vUvL-SU>6<3;dm>JaH3`Pb
+z%#0G%MA37z#igM&ww6@>-F1H~H!RSsFtJJl;RCqIp8<YNCGS{G7Vrh+JC?ClvxL>%
+zMf3q&oMDfE0B-V(f@5wpuM0`>M)RM0#b!z@_>DfU*!+%@DG5YSF(&`27jg`(QysBt
+zrv<4aFtF0PD!w(TptwR4!DkI_bu^|7K5cNeZU|D?^ze%YVUrcBCI+81IC}wrk022C
+zw5guYV;(XV4aQyqzlIQG%S6{T5ow4njvx^bA5K)zrU;lWjFM42hRv}ahZ7VukCd37
+zJmRaQakJwsqb%R_dS%l$gqxZic5Q@&&;7!8GeJ!kllBOI;TnkP?jZ;|YZ<O7fcVf!
+zxNO|o7I<@qLAGYaL>0!|WDIEIBp=a%#-)Bu!lWIn$srBW5-O03_p=3n$H+vWu@zBr
+zn=1OKUR!8x5+>3c%;^n@-s?dRv#_-Y0|#35h|eY?A4WEW98bSS5QAO!Gd)`z+pHrM
+z{wp(4ON2%t!iZ#e(Ru^P<rl5{01;laR+Q6aG6(L5jnSw!jo9~5u?UEBwDx5J-7x{n
+ziFEp!OD{Wp1%cCtg<SO*R4MI(b*eHZ6=aV|Q!Y4NfT}xbGEZvgbUzN0fIn0#Z=~!$
+zPb)^W`fSDM#w~l^mc3}pmj8~0Ui=bUCClChF<ABzL7RR^58s5suO7=5NV2J;{CGA}
+zxZ7JSo_O^y(W##xdCPE30bm>4iWN1y4W+{20}Wp;XQH{uL=}b#c7Qfm_Aa6WjrT(x
+zLEA90VA+HU<hm?-R0Q((HEr2P(tNaR!bE!OIlT?hJMy9x*$x!CEPETcY}vbr!Lrv-
+zu3*`w6{h&{><VFoF22<c7Rr{r3W#9Yiqf*l94vcB+{X_gk}BE?f#BV*Ah4wdx_ipj
+zgxu+&0{T=BdL+r|9U)geMnUII=rOTuGKR6^5J9x;87&^kvg6{>ja&AiDz<f`Krc!I
+z`(CWcl4UQFbkqCFO)oDtwb|Tb*?mwRjCj_n(Ap|?EX8^6Dm#vj3eLAJ((pOYwy5Fw
+zlo{J%koDP2jFz^9!ojka5glke7ruXwWfLk?N0()<ia_C{s`~78Ravxb!bE!0IlURt
+zdpYMCIAMYkvBC@e7EEdhIkxN-#9-M|C|9s-(`qvleKw&{h%iDIEPDkklr4J_5W%t)
+z<#Ncf3j1Xf9GfvJ=E9`w2yCK(;Ht9ql~bov1ZZx<=^X@4pCtn9tRaXJ&KvZxFljLc
+z-l<ryd8j~7HSGTcda`m=M*0N}$D}E<G>sr8)txk%C;5<ScKxtG43F>n$XU4ORS82K
+zs|>ygMn0RD_I@Bc{V>K9l(qmh1-jiG*l8#!TXQPX#zzwE)8M4Fcy81fV6y;Nv^Ft<
+zNEGX_R6YrSX`+YnB?3<J;+MWqgB*_8;LaoXrpNQ}Xh?Gqa9Y$DLd3RW_8+f-T@=9-
+z>2<ODBW%Z5ab^zgDl3RL0Q>MuTI@&U@z5d(fGwi$V(UNU;{&+!XrYZ3wDAptAI6JM
+zN7=<Ev;TMvB27{RyQJ5}?z3In^O7fY;EiSRsjH;Y;vUL99$MTrTSVW*)=#@pbQFXR
+zYSZ0SbH-ZSMk(3i4kDkEev1^LMbhhH_hVowd_P3rt36~t=I<9{npBvJVd=+;JZ6Q-
+zCzU$-fM4mewWTj)V$|To&Py_y7<x&Dlf%j>GoLC8XTW$srKZB=Zz!29j8)2OO=tM)
+zit&N1Nf+zj7{pfmc;LC@H=z<0N<*P>996pz)+I{ku=Pn}4~(-!m7U+5=P#Twn@Ijr
+zY+!UXfZrvH2iC?{Cz3xG0LTA<#*#)0es?K+`)h6u+8z{_<qyJ2Tk&g5O+#dxn{ro5
+zA3pP^sl#VL{c&3xm~@f0Cqcsc%C4OAcA=hgET2!VI`8((zukK5=;L``F`Pes!hWBy
+zUwu#D3HuG74S%Bltv8?Oe?Nrw@I?Rng#SR_>k0p%;=O|>{0D5KKjHs!LHh5g|A4~;
+zJDgYGlNOvv9P`A4=V`^eb(n?d-H<&@e!`Y_>BUh^*7(VA%%t>Wz%~GP!qz<JC!SE?
+z(Ob=5Fipc9B2DYY@x26H%*&@8T|2qH7^Mw*O{J3XF1IIVqePf$=McuZ0kUE1*{8$<
+zU3Kc7oOzZLb`=)zT|m#uFwY|gSk(}b^unTx7MMxFYw}^t$2cK;WO6Xd#GmzaZV|f(
+zPSTOT8K&w&;H+Y$FX;M%-FPcNMZ-RB*5^7^-*JsJ%oJ#V3C-4U-zuG3ad!B2R?q#>
+z$HBjSOwZrweUvBck=FBsJ+fE&JfGis!XD8JKG8p7fDHZk=h+@HTJPd?bh7Y9tRI#>
+zA&uXA_@s1y#%gn6r|b7t*Y8f(?~ShC>s`Osx_++~f2Rv?#9dDxsyP~Hw7>@k`%G=P
+z!mB~=5G%7By50#fqEdOC!nydM1y3~bQZSB%$qo1*Jp-dDjJ(+juXAv1NaLm#P}8}k
+zkW8O~WAtys6IkB=CwPM>J^#k+e8ii3ne<XIndI2t&7^br)eWx~pU1vdfzQIHU%Odl
+z8;Y#DJ^5=}xagGU_z?~46jGMJGcUuC=eYA-!Sj&7$@2(e-8?&&JdX(u7p+S?k0P~N
+zy~9}!cI{X;EW_hnl{}}(@~A%}x1K+N9b@v0iw}B4xPoVI%ai9ml<(%*x#W3}*m=9T
+z#B+Z}zgy4T=Z|{Uo`32aP^I<ma2qN-wP2pVBk+viIG(jfpOEJrQ0eB`x#XFr3&3-y
+z%=2!>SvSwySx$WAphW_3Jc%ht<D(0{;2v$`bx<(%3=<L0FGQPq=U3XO-vv)oMX{;=
+z<o${o@VNj=vkofV(m0pWbjV6_9xrATEqx>7tXrD3EGOM$99BaDkcOC|G%OFRF>=?y
+zZ@|Pc|JY{7fL6N=&Q=J8kE~pVlj$FRj^W^?T$rjiZ<+Z7orGQ7!@6D@RzbW5@e&}y
+zV-S4ip^n!ep2o2G+&c)`yyfQ*=oyH!8_z+;S$)gl_ISVyQ+z%O;n%p>Wjq78sABXS
+zk6y(yWM2j|k65>gol6xj3GVz(S;dP;wYs`hJe%dj>yj-JfQpGJs+i>=ijiBz-_N6t
+z*oq4(hTil^sZ7PwEP_2T1euDT{Be}&R`FexD*hDqQJ~`Iqr~YdCK2_@*T4-`+#ggt
+ziQhMD#iPPPE3P5dtzzd=#gl?NzgJdq9jVnS9?Np#$CZ5s4Vz(kPB@PiKEY!Z{}rtb
+zv*@5=ayCNR(Tep0=N^!jsrcV~tU|^2SE~4@2->`57s2T&CK0Om;N^IV<GHVAnXdqQ
+zdZ)%>CwfEW%14LG@2Jd)cGo*9Uxo4$&0GG<Uk1|oJ1TfMVwlZ_-}U?`AA48?m3%!U
+znS&NSgLf(rT)?RQJdW(ck8GpZV9$FK@NhUjC!60Y=EK(_TNb4$?KKw;;dyXyu@JqU
+z&u-B(foIh133Yoq^lS!md~znrC^S9qg5qe~1;xR(3+f1RbV2PosYr3V7pl_>wbl!@
+z(hIfN3pLvd#rD_5SG^l5e5@1qb&-Pu9aMj+nkg*)U~t&U{Jt-Q-J{bXAmE1>Bz^>v
+z-^zMZ2cyx8V86?_Zr;<W{NtY~_1n)tg}`hd{-`Yen@}QH{4<eJ?zh!vizcYd-Nc)9
+z*i#pEKZ;4$MZ9d)&uqg=-E!gNnZYpy>Ou-mYyQ<IG~z*k*xb_M+nZcLYKG6RYsM~^
+z{qMu4FVZGWICC~DHN&c6*N|)GhbeA%cU!HQ^gx>VGL(1>HA7Q@yz>h5SOI>`;8#&I
+zM>s|kdXW48JjNfUqu%=fZp};+jn^`)nK4`*2%14BqcOEoGixkZ(#%UK?u}{Yhdv_B
+zd<wy1sF@YAgnLv9noIt*jG(BQy@F;Avv~McE556QBx^?Hi<<fS{h4OixACS$rDnEC
+zxTKlqQQRBT%uDvAnOy{rp=LVP#g>BRx_@mTC~9UW(*|C8%i?&^3vt*CldKt)FKXsV
+zoVU3(Mfbc?Ge;y`(##0Oy)n%^7xsysiA%1Jp=S21i$eweP>|obD{5vd(}v&dQA<H<
+zVmdUlooQx=Xo{No2xl$UOq>LKKs~U#-s`$`V^_o%aGHL#?#jFR>Dm)NKJuqImS=ER
+z^bA|y<*!C3uI#K6=RB=`WvuV=vknGgCVzh0!FR-;DK4vPJ~!}&&Qjx@z>c2yOJ1iK
+zI{u-9r`{IRKeB!%K<plTWdG|SMzzcLq^j|R18=#WYahPhdcN@Is^|ZR;4!Rc4*cjF
+zG))e#ZD7nmVzHiixYTuvNmmw+x3P7>$}NEN+hRR)K->Qe`pZz)aW=xaQXFP++0qq_
+z^^T_3L0rqLuH|`gIKEiFvdO5cSb13$*9nqWu`=^2HY}@{aH`^eomDYoc@-;NRje4R
+z_<7*|QB?7)SSb#ScYNrEtN4Ncq$>Vz2p+>Ko+e8^;D<&t>0eU_idDRnRjVH|icOj6
+zsHtTHu40uhG-XxsQ{nlBD((+Mz`re3aXvY2Ug*?azl%i8<pykn)vqjc`YwMZ8l+NV
+z&0-&p_4rJ+T;=fRw;X(X28e1MUsj#|DA2jtGM3k=(p9I5u}<#;Z`E~*Np_DLh((-I
+z-~9SNyWtA`nLky9J`*J#y9&kPo%XJ^JGok{#2E-4+v#i;_tV~}L?)>c7go9(>A_1m
+z)B0MlTRqb%y;k}Eph@(+R{3im)GX^K5lGa0mNjtmL0|o$Yji02{GQ*}tGNIE^l;@p
+zypIwDIripz*L#0D&pV94B-y+MIdQ<0JrxFv4Ft!Z=B>OJ?p@<$T*96~Gl5B9W~{}{
+z5M|?G6t}QzY);qpzG%o~=NY2x4g;J9((8IDHe_;44AJcn)gf+nws6hYkk&OLqXXA9
+z^I7RlTJBAn?Zq|I3q_Z=3;k4Y(pWF9(O#&L-lXB)q`qEUbi})uIP6W@>rL8nQa(3L
+z!&@*ifK*1Iw{+)r>)6oGCVqdSeoDg{ZlFo|_y`n{VHcpDY_1?0J40Jkc-y2^M-HFZ
+z_v<fO9`Kj1u}V<WXRe!5S>eJ`7}m*=d@lJA9u`H1JcA#2U6)d#;NV2^F|05Yzp1M8
+z0<+HMCHi?s0}1wu=C444o@4knG0%}Nu>@|9MNrH!mxaWy7=?4&?$ql|eSlghagl8m
+za6ZNT3t!5v(GLhE@uBivVQ!Bp@Kfc9o+J+{+uRTxzaO9KY5Bs5tWjmEbc7eHxK*nh
+ziK;UKO^ONXR2Ce}NoP+pNPgQ8)HQ|$GOTrGU3T67cQA;w$sQq_&{o#CY}hqE4B)^{
+z=tIIsd3?E1HNK+@4_FWi?<{3CzKaYOE>s6rzmc5P_#u9v#@R-SHJ;N|jUS1G9vSG9
+zXwj(pGyV!BRO3U0Q{h3yv|1-_xT+u|ZBjv3ubwBX@j<X+xcphOfyS>7sK%Lzh7j&}
+z4C$A@Pn2x31&0gfL1nSV4IW<E$<BiWB)lOK;l*nFtW^HR$|l7`jZ;~uaVuPU%xavv
+zMvae1R;*&W#&`LZbJsY=DNRQ!Yg|2`Yn=D)0z0wBr-i$vKs7$21l72&dBy6O%?cN)
+z!>`d~HNFTK)Hr+CVvXl?RcT8ip&DOyG_>)RDiW&kHNvUzs$yCKcTM89x{&x=h}|__
+z2P=k49^L?)+xYL?q8eu=YJAe=Ctb%=BH$&XM9&|_8VqgR;NkmtS&auIEFIy+YWU2%
+zuSU8BQ%ux2m4zC&!o#aRp^eWfE4<*8)%ah2Nmk==0iv?TS0PB~)oVFBvBq`nFAbln
+zX0LvvyH=|4e$kCJ-j@|F)i{B&8Xv?D)HuiIVvXl?RcS-U%Wh=Y(NN<f_+@n!NT|lg
+z2&clMifPNoHHi;M3rU+)dfNCRSTS7ka2)`y@jt=K;?%k7cym`GhX+mDd%D0Cz7MU3
+zjbjal8aKFJ8z}VZ0SQY-c(IB_S+OTkUE>rJ)Tu1gxD_5=P6#zlU89YY;X<$eX)RN#
+zSC0!Tl{LPb*Z6kMPOR}oN!wDOHol|;)%c2{vBr7P&axD$13P<2&T4!WKTzX4T{WK5
+zRi&*NFKc|=(NN<X_|-!~HNHhS749gOzru`OU72Z{RC;Q>Q>gJB0Jz3Kj)hF<oSA6j
+zvn+@e8~ut`!Poq2J(dS}sBwdb@9$-8JRq3|u2|z@6)OZnFHv3N6cgyEERbDt_6mbI
+zjxRfn3>Rwri@|m1)#HNEpI}0PS<O1T|Lb~H39cMc{QdZ5OKTdQYR(8*)2keQzW<7j
+z26#0=*#T2{K{sDbP-ecGU|6mu>_I)6dA<VJJ@aHtGtXPOV5D@-JQc&t6U?n?w9-}c
+z{qg?e=AnO?d!?|HA<QE}$5puE8O_+YGg}H|#x+XI-6}j~qi8haN&M=uF*GhDXJ$Nx
+zA24IiVu~GCPFI#VY`i2f;wa2Gd`T4tU-ap~9!j)kx}!rZQTlw4OQM4iu9mPT#M6g_
+z9z5|@G!L-)YHoIbRX1nTwh`oKSn;r_Xm0i^;A5<Vid_SWLtFb%ueA#rFU1Npvv#Kn
+zfmy?yBSHkS=FZkWs`O3j6xlTeu9INx4OU4#xyDtL+&F5mk^Ldqd9e7nZ1#bo#g8xA
+z+_5s&Y|XN|Z0q6Lt5SSq2`gv(Wm{KvX6s`rmo1JeGq-ia($)zlTmSdCRBKyjEVp%~
+z%hna^we{~mcB!;%>zr{1Tb~Anpy6oiQ@qoQ7poY^);E+OTkj|uZG8*BDlCUUnXRwm
+z2i-C%p)mEz>B?MJjF+~)>L_h}hEdt*8e%<^qOC6rOc!s1C@zVM`@+={cHx<?!h;Eo
+zFwoX#5i1<l=1*9a5fp8mhycE*fVRG*7;Rn46-k>5p@E&)vkMw;VhA*|b*BnJgg4(N
+zYwm38R0DeUbp`DW1>sx49?KhB!d+$S-w01V*m{5P+1n*suUbEx6uR#9L#0OhKEG60
+zKU7Y>erQ0hA1=wVUjTHrY{qiSR=O-(v0lsmQE*zlnpp5juw=Ip%zEdqGv!CK-bND4
+zT7k@Zl(M-CA5%1%bq&8<6D3cCK$%&O;KxLAFVD+m%LzGA+4P{1(x!(TrA_aW4cX!_
+z5_`x*o9<_cWZcilq1RF|>@EvYOQ?n9FcY-Is|f1$!5#n#2F;%^Xd@^ZG!emgj}*|L
+z`@{hZ8g~bhcy}OkQUr(1TmfaK>{JzvrfiN)5N}ri-lk0HVan7a_;Fo?kLLzct_gRA
+zDf`IE2Y&mwh18xSD+8Fa^em>{gYr1C@;ss`fBGjLS&8q#PGS7e(7{Ol(k`#LcmEZ?
+zkMelmk9-3E$=}m`-1YO&M|qMf*_?n)qrs@(?>%|V^GNJ)-5{C^+g-oAPfjnE^Q+Dq
+zY5Xo>jYp6Qgmmwy3)dt#EhWKWLQ*Ob^hKb#!)(>|$L;BRIMb15cCHpf9oz`z=E=`+
+zxhq?sqbFmyLZ_s8)^L`S#)l=C#3MKgG_QDMas)k|+@|E(KEE}PHmT!mb+OFZ6tcQF
+z>lZR{Hs~n2Ui!L2_*KnWUzU?`#w2iNWZJMbXG8*ja(^V}EUto;IhzJx7iXN%1f9tz
+z&UBW$#@#yO1lv4koG}TU8JRvDWX_0$oc#nG!JxCaT2tn1rkAs=oU?65gU&eHuGU#L
+z`9()wld^P<7n~WHX3^%1NXXeI!B5~Ut}2u{qZi$!v$dQvPM4v+z}d#JoULX#8D~ra
+zXGRuY5~rOJ2|4>GIcIV9d%I?czT%Ddi^E)CrQXCn1WyE3R2VK0PEuljb;<s}QqyoX
+z+@HqD=eo+w{eQ#K|DT8C@{)cENbMytmhZAEU0#x6+-3cF7+$qs^iZ+&jxTnpbe?>>
+z=`K1NRJw#;)s;P)<zy;l5>#qr`aYa1n@FHiPPq2}p4?6~-!BYq=XaFU+6ijKSvh=4
+zI;<rKfj|2OwXS>HdPd}eT5%18O7yn1a&ouRfOI=oy?B6vR_H4b%N5FB2VOj2j0%16
+zv5sb0p=(_Vtph<&=%k}Tp;P!(t<YMQlPQ!*P^gjV0HPI2BvGNi0)2%R)E^Z3?Info
+z1%>WGq4;i_PV<Zj0Zx(glW$iRcC1jPMmxnR{#>ET$rWlqDs)Q<{YOA&g)){aROwQv
+zVpJ$U*l;5jy4|JFA#!XB9d<M*bOgVu6*`#ZWC~>x6l!GJs<A?eBq-G0Wcscf_9nl(
+z%A0&D%EO!d<ke%mN%)UG{`^|hS$6)pmMna--sLi+3!ls{OU*sSq9)^e`wu~r>G@BF
+zQLvcvijd<`sF-s;<bY-D(iC&PCFHmlF6Mki$Z;<?_w1_LyXm077+J)pUC@0&r(l$K
+zbjhgO`wbxY`7Q)M6%g3I=l)?e2RCP`Ik=}l-p4F{y>ncBmX29muByuype*Wggeb~0
+z107`F!~CFzv+3R6--W;VM19Ht9*6ooc*hOZ=g(Bt=Z~T+>T`-H9!-5d^wDLY3m=+H
+z{77+EV@2cb_U|9<P0DV6pKd_OM{ib50mgcvMthU!RCnQ`Kiri>2e&JUu5VY;5xUH-
+zq{H5%z22nV-lU!0r0w3Mt=^<gZ_-9@(t2;wT5r;7caq<s_NNlNCqv(hP7%)HGRk1O
+zBLdlED865<7osuRj0uR_n=_1giD_0*dak-k;OWRb65Wdxoc>ggYwPWZzs8hhTG+yM
+zx!NGg*O9{WD{T^bCm0KJ%lKiumdIj?hA-Nv@b7V@Qn4n5Hti|IDrghA->sNLOvhvx
+zfmjx%O++q-hkBJ${MapMO47K~L<x~*>fB9ULc;zIPCaye!LF>}EkNZCL8jn6ZtP&*
+zqx~H!cu45AG(D`S6nv<B&i6);SRtffxjaS%53(T6Ubs9Je1!5+FbS0uEZE>rNWmsW
+z1&<0%b3*}X_ajz8o5-!;J^)C;jAUL)n~0)<i35`>ll6Tkyh_i+s9;J61)F-N;8*K_
+z2ET@xT@EfQco$g}3SJ>|X-k0?Nw<_B1#c@V1+Pj53b}(=g^+@c3hoGcb4Q%Yg4d8D
+z1(Q%o!Ggv7QAKFMCPfABDy_LqG@8tBAfbXbkz2v*h)KbWKr9QR?~z3X69*J*vf)s@
+zzhx8^ObNk<sb>oQUvP>eSg?Jofks)uN7V|hn-c|6@VpYF;6+8H;7LX$<Pu^PLJBr2
+zcvjHfWW#ziEO-hjQZNaX6f9WG*;IrIHYqB2S!vC^Ou;iqsGv>cR`4`pQZOS>u!Yfk
+z$x*??0R@|E+W<a*92HCn!H2153T|Vh4hoJ71!V<mAnWaek93%!r9cWE5qc?jR8c9o
+zk5MUj46zC!1sfGSEa>pEsubLh6e*a5N(vS%*0WTE3N|S!xTdrw2UpV`LP7;?BDaDE
+z5tD)$fr2een~0)<i318Y+3@iTzw{jyObNk<sb>m)k<NFhi-_wTFUACd2hnK&*R`L<
+z!39O9$Z=C&&<zvHLmd|Jx90sG0(L;_0P_lnvI8csx@mIh>mkbI<nlQOXMx<XTmczE
+zdCf0B2JDz$4!o|x80MEx-Tzf^!VQ0AeV8{y6#HXr_+Qu6ioohHS;aOB`NNTN-453e
+z+{`D|csu-m2g07)KffdQvHN!TcM`OD%Mt?lk0;&^ClSzJf)4jT-hbTOw`|IC=6X$e
+ziKxP(_%h`UCCHRJiprFiMUkEH7Gf3VB-m)m>w?xz9!#&<SF9jKrc8PzQx<I65?PIQ
+zCPh=;7Mdm<Oq=o=5-MmDxlMT$F_|(W5X-{o3l!0mi36r=vc;$Pv(b(c!emT6Gvx#`
+zO;|w<1cDVX3egq`9<4w>uv?F`%nEM*l?p4^skDOU5VU#Ak0ChS3P>bc!GV^E)zCa6
+z9%y`fv7wExn(6V?dK2H&_JYl<5b%w(@f9rCEW24LHEUMW6q4=8%}SYhvob8372(vZ
+z?x*N#R*aRJm9o^V6mzqh$rZ{d1ezvWQK9;Qv4&V<v-;2L6$<6|ReK*@*du83mfL>$
+zMifdSQKA1A28605fhX^O4>Sq$PzRP27d<l%vY&XcrZ05cz&NG^wW*q-YEy&CXPc@c
+zR$<qIjcsaF(7HMm+SCwI)TT(N)TRWBIf9CCcrYopsY#`U=iNwq1PK+iiQH{!7%{ae
+zMj)1jX%kUwQ^bKbWwLDpgbyr)<A0P8e3*LHrk;&D!&?RUy)nGTLcm!0`r!kdS>^xL
+zFI80jM=C4-fS}D=zV)p)Qu#+Zz~eskO<GS@YwE|4z?-n&P-;z8%b$lr(7pVr)YzJE
+z<A-g>>&eRDPhVg(AeTSaJUnqj*uxWIYDW;q!xOVSJTazrG`=1h_&V%u7s;6t^#cPF
+zL1PR0<+oHQ@#B?B{5gU)Z}}L4)4L=Ri7jaA*j4WFQVZIum?A6@4@M=SV+-0)f=4Aq
+zJt`?*qY`2jR@@Oln1ikB$3iC#N%-j@36WCs5g-N+!L#`+E2beyG2A4RTepT^6;xLQ
+z#FIX&h<Q9>Qb6fbp0Vu^2gf4?ZOhp(-=XbnDXX!~fR8fSM*o^#Q~9-;MMA{3qaPTF
+zkd{^Z+kdg5+CN=c?QbP$^Ohq7r&l|P1irk|{WC0fV^4kDgpRi7+{A4tkJYp<j@0u@
+zXxX_5IzL+OF5Mr)>m7rzuKz*z%jf<9j4`+!ld!Bp%LymKd`f2jt5K(={p?~%I@-sU
+z{4;fZ+Db!=>-hzm9OREJ`3reTQ12?qq5asBd}*e%Ut6R(ds4|~=OyF(;zMi~VZW(*
+zKb4*^?yGj~rz$n>Q+4mBDl_k^4NJFY9=N<)g-F<~LaeY`#dPmhF~;4hA3LUFyy@WU
+zv+6DR6{Wfbk-q)s0!7eRboc(GBzM(@r~T;e4Ns*;xl0?K%AwG{r)xkCP~Px-MkX<1
+zxx`AB#EMbkWi-huXR0J|VYf4Et%WDQB{99Ot{ut$P?ET6NFD-Xd>y8|BdOF(;^K~^
+za&n0cNQu28`M+ioGnPxNbV;ljCH`sfcB;gM?Z{q<y~Q;3bH{b0r7fm^RMm-o^kH?P
+zzllIyc;1PIo4o8Pd)`0N{o7U8*F>T(jN)@@W9n*~UjA$K>sOoWiOJ^e{E_NI&RQ|N
+z?$7NU^R*p}S6fgF$E{8XOZRreeO-1G7(5TLq=1{bebBWA%L#lF%<B-OjiqUEl8P^U
+z@0MJqEi!a2dDlevN~$+^hXh~o>13~So=g4|@FM`i_iXo)3%fXv2%DLM<8dAz-Wl&q
+z@Bu*F)%KXJSt_BCy^1@iYxO2xQcj;Oi3&IB=@E;t*3eZpwZgo-p1lgjXR9u(WM`t>
+zlJ(9PP}G6Kbkp*4UtSmw52%G}VNEd+*wlh}j4zRs=H^U>&DTitJ{cY&lpDc!vp9}V
+zN{AM-p=RdbtA*&P_7JN#^$E>-ilxf9MbO-w%BYwkpk`t%?mta^HtQ)nYjvX%d(P#D
+z_$npd$Oz*b)nvQ5xmrlt2FFE-JNO+X-pb;c#LR}o%(28Q4_U-USz;y`lPQ)YewKP`
+zNetOFow!knw<rW2Wsxkt>{+hk!;CQINrKWEc$8`b92X^C!|#~4p2ahXnGK1VV~JTF
+zvWShc#7v43?}%`rj(J!lZAxPM0s{^A)~8$bC=3M>k1?pM<Edy#fTBZ!I;Kk$rCJ5Y
+zMTwX3JLauq@l0Z7Lt^GwVwQ)*VxufElcL0=SghlN30yiqWKloRS8lkW3AG2QCmc{l
+zzyr$hID?j|aYuUz<@cWo)dgJ3bv@zk&spmk*~YB6+ss-MJe?UN`QdqHPNcQ|s5kdT
+zP{w<38GJZ$4?^=SqECALChQTsG7~-S6tUw&iTb7Qh$FGjzxrc&fFB92W$@-Sf90R&
+z2uPS3wN+qO{aH|wvtw0sYX?_vfkI!LTNH%`^#k?k7j8K4*JtxRuy2X_DYc{<eOS5Y
+zdt<{GE%q>49M;n><m?Lr#nI)bU{E}&U)lW(=PP%-8x@J{FW^UguYPK{zEVH)9)5DJ
+z^Ug=0|B2*k&;*``ys~wsp5XuEM+d)A{e3gi1G4WPA`nk6rM1bg@9Vp%547jL7<3OK
+z&4r_g_Ykn)al4*gK=7poxKK~{eVswzJF06O1~ZS;zwW#H>u*Dh{~oD7XN#-bBs5k}
+zXZr&}%BHsyE6%3?U*WyQg`>BR08v-Dfv4Rb&L>Hh@1hLJ_@^^5zJOxf@$U5erzKC?
+zm%KN5U;Uv!rMmb<hbvbH>sLPUNd0TxUq7=Y7bfC+oWB<o^mVNMzZ^9UU9p0`>xgY!
+zYO)YxR)SIno>t4>r%azrT}RuQdyMT9)%SN7KfiDDLQLwn*el|z(daqhkaEz&(&e54
+zpSDff9O#qHPczL9sYazPPZSF#()B5hC>+$a0JqA}j;Ri~qDNc?jqqfQsuYeX8AHcN
+z9?-e1DG+}cTgYwNB4c(;*OjY-;~S3FFqGxvY3Y~-lkK0<p9vP!89>)^Sikiedcy#4
+zKKcEL<W1Xvfe*V|0Y_~Z(XN4Zk_+2t`detO9eA?%?8x{!9Njf^6{{{UFOSg3UZ#s$
+zZ!RoXJGy&>O4}4wWm8v#U)P4C%h3af7lCCdb9DbBG>byYOEu1zF0T9#JZ-pC_<m$|
+zdp0mvbZ_4s)0QFws0?wQhNrBXi^!Qs-$Vd<I0#T1pwU4LBl#dGPI$aW8y~JGU-k5f
+z<fTvVpGaQx^l&Q`Jvn?00tPnyscpY2jm16JtIm2qGC92eRq}IL?U|o@qXK(4*8S$9
+zD>DmRLC{R#`7EtlU_wJ+0#pf18aE^`0dGj)e;_wk0!KIZMg^9)Wv8zw@N_0zk_kMM
+zrF9ETXb4PzDuGGkh6E<y4GH|e$;*|%(aZh+ZqTG>K?99`9zjvy$xOIh;HfOFTVO&%
+zU;<PLOd2;NFad8wU^%(VpjO#vLwjql3m`Ouf|FY#n|QJU!G52d+_!8qDSenI`D__`
+z+Iq=posOKL;25Cnv|7pjU{SI;jC3$W9}^d(M)<4pe(Z|iiZ2NloYsJZrGqAXXCpp{
+zAEbhBjeAG{(xQGJNxJ`v>f05OsDlWpwF!B$R02>?3Fv$DD@^N~*_Y0F-|r;<;F<Co
+zO%bkrD!qlDSL+EnbWO(5-NF-zp4!0EqQCLDeoqlYbq#f!EW8<Y;VSW+_Uq$Etlncj
+z?{(V3P&OV{%?Kg0?p)Cq#$U~<D2$@nt*~fgCC8t|M^uw16=$b#Y;jFiPo!Qusd)WV
+z>XRoG=Y;rV+1ZTpZU(P!sf51f<(C}T4+#Z_XkC384_`1Ts8KV}57HOt)^IwG>SoRg
+z{*DsNK*9@cnN_AZVUV1Mzk%B#xSm+yM5GIE&K!fERY%aKV8x9&Iv;Z@7-_{Wy%RbV
+z{+I?F7u-P3g|z2k`Y8*x)mk;=Qyn2Ee)Y^clq(X;fKd4G+W4Zb69;!hm-P0Z#nJuz
+zo3o)ku*|Bw0hW){4V+)^V)+oskvv)EZ_XM0A-Kr0i~$#TRA+6Xie-9PHX*b8&p1AV
+z<v2J8md9?4<vp{!(Zw=5yhxrbs{<6vH2KIf<ES^10t`{bGQBLDkXgRY5f&`R;We;4
+za$_v-nB`6v%i9I=WSPIMWj6B2vKoB6GTJ7p<5@N#v;1X&WzM;HaA4K8Jal6$Z<*z-
+zE|xn5@?@F6&GK-8WyYapk^&4-9nZ1}iDhru{$=yHora#P?(c?dJzKW_2g+m1_9aAf
+zGi1(p8@Sq_2l5BW7;h+H%Ql~{&n63a0AOwd{lXE>{<EshcJH-^z4G0Fh0{K>(0vWM
+zd~G6~+ejC#l@H<1eIq&*uJvzKb@u53vceYYb5zfI4V8PHvE24)<<5k1ZiQJnbc?;q
+zyG45Mg<jJ0*Fsas%I%(3?q7s*w#T_!gM7HScOpG+KYbuQ&L~RTPycU~LEMY7Fo^FW
+zin2k#7_MBK_3fs+%j;?S-rWdPlx+TESxZ|+jolgj@>Ah|`|oei5b&U6W@w!*!&>Y5
+zy<GmSQ&?R|(_pZaguNy5jO9%QT2W4$lqxxo0g~%+3%fA<9a(!C<PF>V?%ipIn5Bnt
+zaqg9PC(Jm*C-HPmH9mY(dJ?*-cK!ZT=n~rMB`}6IH$9#dJ|6Man#hsUFuWa4d7iT2
+z?NbGfSq2q$<(J4KWp@LltYU>7v;CiC<B*QRC^dKS7@6<If&@OUmhiFhUPCTDO63Ix
+zin;*jrXc6Db7~%7j;FR}=VpAhnpz(OkK!>-uc}#ooq7K{8=_?kZSkeY$<_h2b;yQ3
+zu}U@$>X91brnX*`&CT~Kmu{%}9#u8pU;1%1-ycWN+k8{KJOtaWWr9C+jm?%1Lzmts
+zdFZ1&icmg}6XpVN>JOn4?gm?$$7Zb#=vD&S<q$#*BD3gF({4qp)XVw6Dz!?7K548u
+zT0?X_(|ge?R<h57ZBzlo*LFN+V?K5qQ4Pr^DwjllxIXn}^^}O(<$%wv@3Qp(M524-
+zo(}nOL=P<<C6y_eXl~CXqBd<3?a%7H01%0~fun;vj;K8psdt#I#YEXp_6U;tl|LP~
+z8?6F}M8}ATH_t1G7GEIoglE!ZDfX13tl;S?0`YT*6q_AZ4~yi$U0*W3lVEa_%xz^;
+z8Jy(CnnoZJKDns7mhjMOq@3^z$~q&zgsR}WLYvGLClRIjT52Sm{pcVdxLQ^v>&%kY
+zCETsX?>jQrJjahzia=n>GaF;j#`^v}@Jvc)#|9cWKuaN9SHZvBl)^J1;FU^<`6vYI
+zxFiH?55l>akw^%ZfDnrc&M!#<!$wb*Sy6&OmDmGEmcYd=!Ov^_Dx6`<B(RCMZ1h^n
+z&8uNGNH7y6AXG^L8a?0#6&Q&mU<pVttKj^KBrt5C)Mi$cz{NecOV#Ksfs0#$4{2nQ
+z1aayU>R_8h;@c;iYTj8LU<6PdOaVrQw1r4Xf?bu?1S}$v1S|mwrWIf&4J(Yx=fnY_
+znH41nRGkyvU+G6}xVR<wx?BQ}b_0!nYb#n4!q%#Sa3eA{g-(#5j!a2FsFDO5Di)uB
+z5fVwj5|Ch0!TAkIVAw#Z_}#on)jX(+cOAI6B=D?gXYsfZv}acIbvS|8Gb@@wc{ssm
+ziKgrXXS1Rev5Z*}_haS%4#9qt&6m^661UZ)HN{`244BB*?$)E+-0B%HD|%4qIBAYa
+z_v*H5jvlktrph=Di*)Q^ZYp45*Ndp_t1zHMlTz1P1rR&`St2@Vn432x_V<g99>e+)
+zbB|+vIme<}^SDJTs$iYT;h1<8KxBPgU?&Wg8w9YvI*uO0`WADKV|_cvvJ<dC7rTg7
+zu+C(&zE=ehSw9q5^^hxrIU;~r@1y-fUp>?`daAcPj&*mKGCOzsI{VMTs0UdXqvS1&
+zQ~^ZRHNarFK2~2IXKd>yvR-Fy1?wKh(aW;srlB>n70nnOO>s70Msyz03UQe1rPalr
+zT*|_4OOJ17ySNuNGRMQ`tvsFd${S`IVm5G=%q{a96_bPL>n&|u^TnY<F&4&Z;ZXm`
+z`P1AIWU>t69|+7@%G|K#A0K`6cNmk_Xl6#Ko{R&E5!psKRGK~R=+xr%^aao}R^0jr
+zTVQ1W`!Oh{O?Hsk`s;xQ7n@m&h6i!`Eyg4RJTIAvYrE7taDn%5?N+O)7|Do65*H`$
+zV0uspwG*Ao9buH2WTFpIz(o5^kqAuzSd<gK3z?sra%y|HpsG>92Ztk2?ce_aIcSpJ
+zi%0{FAievC)`q25e~?x7Y9>9iAtPIFWGsM&9HO!Gdjbu<O3QtSW+Vma1B^0r>HAsI
+zhj1g2AiZ+%7_$Jfig&8cfJJyRh`KLP?ccvc&Yh%>u2GPFQSf>x40XTc(xL9xGU?})
+zUYN_Jn*lWB5RIi@Gm3Qutz{QnQFgTX@MMOMgyz!gfLzk*18kHgNUt1!pfWBcqWw8l
+zXR0H-sfM$r@<?d;7v)w-`sh}%0IIWQF2@kCq3c(09_DbaBQ|uU>-mgGD1fqHKx64=
+zjAB+nYtq?M2nux{V3e6lzo+AREgpxAM1u6n@kb~N(mS<Xgg4c2T2vpy08@6!#$SEI
+zF4^;|T(Up>VYy_#grM3bYhF4!@%vU!oX>hKOfGw04C4n)@$c;UwMX@y);l0*_4{aV
+z4mn|6zwmU~>q3sZtGU9HVh<9P+i@{j-*Ee<mya{^($f2js!aS756Z-U3qhBO7ateX
+z`Ok+wI*BfYb3cwXVV;r9EhP(Y#Ju2?J^LL<cI;&i6kiMZs|qWeBzcLu>RRM#?Kygk
+zmw3qB<FFj%SnLEmR=%dYu)?fF9_ujGbsR4v%(UO@A^bRA#!kXg%dyxWI}QuSxP0e3
+zdRT4ND86gYeZnMoY*O;9@p8dy9?>58aPXQC$)95Hq1WrwDF9|+0sg{K)m8>q*z_rO
+zy!Oa5hE1F??7bb6F1#`BYy40>#ce$KkHIAl?9OqKe--0RE*-9^prXUDB9D{5dp61C
+zHEQfnTh^ntOz<${{slS^=ieB&HclqqeW+l&i#UIqIIA+UMVD1o8~2anlf(Nv9KS(4
+z^b#i%?>-)|)kU1Ydv<{(xvaCxT^-r~fj~TTL?;vP-stai5$A6cr<Yxn++MeQ@XVDS
+z+2>I}N*=nq`%bL$?k)R`F5>)c;_MTO#MMWnE%zz<v<vFoj>DJSe_W5+vz9Yk)vLbo
+zKJ}_|2)cUJxRw*<DGSSxJG8QXtVH=y&UpT6u=-x$&1wyp%^e-|^ZStq;nwBHw|ril
+z=b>@NipxB8+}BV$RYON_Yc+IjqVSr*HDqqF3-&SQ^?_T*SK|qtiR8mBr>=O02;FhT
+zUc$Lu-5=+%?j**&eL0a_TIAt8gi8aBx5Lojgc2ek=Y2kPVhNx9SHnye)-fsD$f$>P
+zcAl9S=8zPA<5q(|P9NVc_``cC`))nyzg{CC2B6x|zxvl)e9Ioyc?Of4&;7`&7~Jyv
+zD4`lVyKx&b&b|#jK;P}j`+{iKMs+%Y-6hZ9&)viery%d{!_N<;I*bHQT~Ns<>SsQM
+zPIVMT&_&Hbo45t2L(=0b#+voQgi(*EjmL@Rz2Wp!HpwQLSVlVSp6<d57Ik=VOsF&+
+zKX@Lx7&9ono{HdY(iGP4avTs*zrt16>?#d<;w62-bVRTVTLHOtVk+<){91mVBiQFG
+zD=^Wi8K_B(F&x)F#!O+MTDr7_cJOlpb%fV0Y`vuoJ(%wzj^EFkyFKV1#(;BWIA3N?
+zz0nQA>IP-l>K1Tu1b151b&PjV1a~`w@#D)s#D*{b2r13GPYD_@-Ju;f`qr`{gNls@
+zlg2$Sp$J@z!$9!%bcM^n_IB*b7;C7&rYejQVQBTvSbCN#NuwfF8)M7sOaADQpouUH
+zaX=0S3*HB{s3CeI9D}nz|A7OxG$*&=ho=x7XxxNR3eA{e1;w%%yW?jwE{sQUMcqSE
+z{$(@VPty>YYS_kYqJhQ>(E0*aa1|J@dAV^l>&?459B;$o0dz5f;%gaXLZ;SLt7OVU
+z13Uvbv4Lw!zefO)e-TYH{O;*nUULuacK1g5mY<kW-|}jdIK6KX^<v*5F5{Jf(8XxS
+z1qZnWoP1{D%zMzcc&{+=NyMZz&3X>s0Cx>eH1*vhi;8zdC}%1y#3ZT;NovhjxF+~v
+zlRNH$+1|q$N54E09{VdEG4v-I-i!9JERB1!=PHaY5JeYB79Ka+vHvNMKNv@Sx{dmf
+zC*HDzn!Ji}XyMuF15Xm60u7J|X}HW&=nliGU{Htma=nkBZgMHd9bQ0Ph=YK3Xe($P
+z{GZ`GcIYo_XcMSwVuA@<w$_S%X<HF@p62ljH=q`ocuFT4hkJw_)Jz=q@pFwoW2d^r
+zA4ptehz^yug@D~a-s6}&rUWFPntZlmW_^iKUu|Oh4gQ0zPD}OcNVW0{tvcSp;nn+%
+zDgaHh+}Y@UC0eCB`3W40n!xwwjWXT_v%jg%ev4eFv)@*19FE2X+;7S{`$Hz<JC(|1
+zXTPHab@scC9y0}1D-n@B70y4NWSoHuo_4;l8W`mHU6<qdV?)(FeRRGy6m-6{*wFcM
+z*cfQM8D2X2Ig-H@31$~2LFBoX^IQ)+yAz$nuO4+%n=Ca&P@M7>0O(HRcc43i=s@Gu
+zpbLhnc#tPJ$P>yX(zh_D9)>Y@L12tGjOW2)L^}o`q8(_wLHKk#4}F6Qr}0otKSwS=
+za<|q``lfa((NVvC&*KC+ur%uEhe%yc<ZzaO(VM9ly_Km=2Ny~8I4_VdGKW}~+0p{B
+zp6>sj-Nj}IO`Yyq{^ZL5+Pq~RB~I`DXGy)-{fiwuforyv4SPNFaa7PC($MdRp5D7f
+zJ&eAe)NhQ@KfhCq{vJx4&Zzh*GP(h7f*D}rV&41`3Pv%;Uy*IDV3Te39yGJe7Sgv6
+z2mF8)1r5pvfSTaKIYzn0dXzA_M>;JTjj0bsf{pegI?%Wsm6&nmXNl8jVWgJ1Kb!NU
+zhL+A1=``FF@Hv)nq%<2uha<;0mzc-l#v4OTfuF_3wcgYx4bpf5W5?OM48oJBn_Diq
+zjUZTKgObRV_Y!%7OWp^s4D$`QVttVrEroPFPEQKYqog#3LUG_J5QFI#*We3-oIePU
+zXD_KL><lYd2riVL{iwiq@JrAxB?QNo*IqB4-v9y)k6Vbu*2qM#z$Dnfjsj8K{}I{)
+z$Ox4u4pF&5)#1hQ);dbv_U~Y78!8@Lm0o50gR=PcPA{>ifEaICf$4q_yv;+&z|FdF
+z|4pUyi&z@KoEBZe_@3t`hnP9zZ|=y}nKF;-U6_aPwl^;Oca@(+d3fvRI~;@p4oqQC
+z%y^KDIIjNt=-5us6%NFw7dq#XPCeX8#kHA85^ok=n>^<H^yInp!r-~|{E+cnxz_J9
+znWgmuPL$zqEK}P_dqsiI$zWcOU+^~;6*QNa_bB}hz-#tqVOQ}}^S9u4Xq+gx9Qn9x
+z((bI`Ylw7eCh>VpGLni(`x<LX(3rjMXw{f)*bM@p3ZY}@dJc0%-hIv=_pz?<B#z*+
+zqg_d}qXdrITSl>pqS#E#TnUwkH+49`x-p2Y9TquuW@ndxMP&4NgEiE=xxg39O>qen
+zm*aq2yt#JbyzvNy3vBYI>=d)bv|^f=<p)oN(?okJ?wgyTC#dpNhCEHA6hV)ikxh#t
+zXJj*329{5liUkg37PldNdJYe<Fo*NB5%=-Z4K8A-obJ~LZzzz${m1Zit@pz^#B%aq
+zLB1vme6q2wm>0?7N%gP-rD3Wb)~0<BUTFV+_TB_Msv_(E?;t9QO2%Cf35tSBG+{?Y
+z6WM}*M8c+`B!mEwKw=ga6^#lAB8rNNxDa>T8OLo@UUA%T$7M!bM&mBxf;$Q$zt6Yo
+zbh`VdyA#y;zyIfX=|}nG)H!wP)OK&(d#i8jVwhZZ&Kbp@EoRU3@jQ$`1X73lBxVtm
+z6F!aLqlfuuG5bNyH`}kt_dRv2(_-W`rUB<M`HX0*eF@6U*vOEry$;706nmbmJ5^C$
+z2P=<1Gx)Q`?B2fE<#H8%E5Qnt=C6%h8?lv}1RHwc@9?g6IqXS4XS?Xjdoy*bEO##3
+zTgLqGJy`n?HKHp2of6d~;d4+_q3-%`jf*&ZDyl{DbzJGwSAlTgT1&@qL)gx#ZOn*1
+zH8yij+}WForb?RUz5`O{lB75;*WF38tLVBG44)l!;&*39txU|z0wofKlIVF?C|_eF
+z`&uonah2m;WjVN~;&!HXu5@BIS6k4J3*4FBmIbk;Hlb8IO=eJJ-D$E#n`#}u?fo%-
+z?EHA{mo>QJ6v-8nUb4n5vUyd@I8N8(_^<h-qV}~~FtefWf9d;P5&QXiD;vJ%<8!`z
+z*PU-U4-Dof%6_ps%foUO?0n8hoe?=XG`#d*Gy>BFJI^FX!WFf9&iZiln!k!5xCc0&
+zSH|gUUGsUHhI@wQZzT_(yO4TwPI8yHD>+w%@471A@VPPT0KZ%rG{0zJ&bd#i`LyN;
+zpWhpG{{O%H{NRe=jqd3?hPj@;oE!;znx)v*=Lb4GMIA7=K0ny{{D9@h|Gno2Jx^%#
+zvE}$&cWmiSj)spdpX-btyf4Fg*RQj-K0k2FqeeZu2(Qu>szv!-60r68!LxnWu!_*L
+z04)r}RmPQ~zm8u{@-m5ApC7E(;Mw~8fMxsE=Lai!4|sTM$`Jz_efS@8oICvYAV<T8
+z|FYoWzuFDJ-~asJQkCAgtDRd1xIix<N5g@-xPs@Yx;yn-pC4>}e!#F>;GRJ6+?M+l
+zTc00neST1Hy}?3b>+=H^r~aO1qJ3vupC4>}e!yyc>+=J*7GLdFM9H66^uQ*3{pW7=
+z`-c`=pC9-~5nG=h{DJ2O#~jn>74@*A-HN&wITEg@|Nr{@K<~fb`uzpJ$?11~e_;<^
+z>D9<<uS1S<BV{*oBpfMQpFjK;zQ5qV6ZvO-abfEh7TD#oiUn;4cc1pZ_l1T2e!qkE
+zOt37{bAD~V@w;O67~Vfej@pE*TOe+$tJ9EYWt~;so(C7Sws`sPD%cL6dH#0=+&c(|
+z&vknZ+)pv^q~9+^?8`4t`7&L8cNbrKTMkcQUfV|hdV4#6?9u4s!;Ugtu=Dqz;p0QS
+zX9)iC!rtoeXFfxSY5-q*zagJHrtX@>Z`SwQGuFFho7;(Prjc(LESHX-eg*4Bk=e)V
+zn)i3Q4KMzpJkt$Mn!iBhL_fsz+r#GvcKz32<#t;v<BxC{N@ROM-3Bh{;*_=SGHo!7
+z*<Wb;|Lyno%E)J1{kct|n`r~)y~bl6{lzx<xqwXsd($Wj-JgR~F<Y!Zf9DQ8@-5db
+z{lHGWzM1dzo%b%kcCLLVP9O8_0KO!kDF(Frh>EkHqN<kP9a+Qvh1KEh`F=k~-H+z^
+z*)h)#H>QKVWYKNYS9`JLp@!_yd+S!YO8PxLE{E?ax3|vqR>Hk?wa%dmS?OKZb&dCF
+zQRwYCzhiHm24d9SI*G~l*463#?pA)tXx<f{E068xirQPZo@Co~wt+ue%znr3p4R~2
+z$TAn$n6tOdx%Xz_Z=wwR3k)UEEeui)H48TROGMWU^WA&s@G~82HnFKRbLZag#;#`h
+zVe6#}&+WI*aE{+(zf%wQSIp+=dH&Tj_WJ$UAA1S!TJ_&AT41kVe}3>hzp;f!2U$2&
+zWr;h-`F1ZEK`{!c#q2}f7a*J!li!sd{z1jS4<Y*HnEPIis}3$Y;9~8f=(<~z&sGho
+zXg;teV3cIJacsNMyK2O<3tWj|f6XwrSX1R-o_mQ81*IXinBB~OX+l;^S7$MQ!QS4`
+zN9VU1atd@N;cpr_i4CA`<ChvD<kbF^yz^GL8>RNu(|IxPM=_0Vp;`}yjol_PUgjCm
+z*so@K-`aNgk~{r`3t8?8_up^j>vNHOD@>ChiD<Q*+lpUcTe}y!N^8rYulI^oG45AK
+za)dPrl5oE!V(k9b6Y$vY0zb$1c^kQwelNqFE1xAt!{<ts9R0lAPl)*|7W>|F>UqEM
+zD{k!CTA^bh+gy8qg*K=8Ql6^s+a_vbDb1pR$9SFy!acXrCoT8R9|r#9SmV=|0W)>m
+z^4+G(8b!$4X~DX24Aw|-e?}4ElUGzJoG6_%e}T%3K2fe%s04Pm`j8eo#B7gLQXH3V
+zd!%Ydv-rCDchK@>H!`@hY&Cy`N0<^RMoCOrS17-QjuhS=8FP#XZ;zaafpb;HAK@1N
+zL!ID$agjjeFc8Q$zQ@$LbzSW?#?n=z!hz&R1=9GgU!eSys@#E6XHZ=1_X+tmKpxJz
+zFMF|`aJ6OYGiH80p}$y9l({h7dSbf!)2%0}_2>Vm>xpM(4`ImbD~PGEvFiypUHo?k
+z{a4%ODsZ=+@CTuK>j^)>>>I*b9Qf(%))O_Z0TSJ7cirTcAj@1Kk-hrfr~3vYD;T$)
+z@Po|#28Pd9_w|ABPV>lS`qj9z6aE_hY%%*%cM0P+$n(Bl(!yib^^5I<5C10f6<IDE
+z|2wGuydRz|qr4`^!N0z1o?BaU?$WojY<=*ZKS#Q1ai)>AKY%ztECu9%FD2)CO%DhE
+z9VK^7vq}l`7Nj}&m-_J?HrI{r^}UQjE&3US&0L~iPS3ONUfNe5{JD97|EbXh{&jN;
+z+|_r~?^g|)_Z*9doOw;#<;?5Tu9^Nx4Y!Rep07A73ciCgcXl`aYL_zC4J>DLp-Y-O
+zyE}??)40-8jj5iCKm7JId&8-{?96Ys_6K$v&94#sPX*Z*?ictMCoZt>R`2W<4)f~P
+zICGz<{vc)U0u63o@P)2;HViab*W4YG_Et2z*qcAx_H(^?!d`o3Kb7itrTe8pxV}-{
+z5KdBk$hz2Jb`9_+k-0v7Au!VgA#bCxN7prT@VnZ%G;=!tcD|?`o%S9&dsUu)GUcD(
+zx_WGgI;5?42dJ3iztrL5e^hbnE=hDfq>GZ^G00z|@SExWl@RW_C48*#HM9BWj|TZ}
+zxM}KXHO$;}o2w(scD*M@?-$Z>piCD2wI_b3eS+hFzSe7Bo#i?V2V6Yx^Wa=W*lul2
+zdW`Dkx$V@RS5)ICdC{_}VI0GKA^!K5c<qtzC>OAQ_lI><-x_zS*Qs6S4;Q4L!t?!d
+zGP;9YEt$H`N-vvmFMM#llS5i~nD|jVbGgZG$s6vPsDjpAF@B+cAMyYB_staXGMPrM
+zG0!;2tuYJ9(eN76^;Gm;8Q1*w?Vzpin_-%CVBChsW)F>PKc?fnZ)WTLT8=}^dA{iq
+z{sy(XinUqJ3Mb*M5;bh(sOV2<Iw*3c-Fm;4G1uVz+P()g`uK3t{_gnDn;Z=vA3oQa
+zIQsao#+{nC-mhKmmnaVl(PzL7E`96$TGmcnO6l|hbW#Bs9%&%FX4-ncHo<qH-8^#_
+zH?<m3TkqHEvS#c3TCNcM+hn%hudTb9Sfy({UI5}Q`5JM*cAtG4eXcyLl{;7NMUIBg
+zm1`70)VXr&{aU(Z>-}0Cxb#rVjnb|6YiSI7BOG))tl{r?{=4;ltxktpCTzW5%MyI+
+z{aU*@p5rb+w%)JpTdM=_*88<u8~yLxul2vV+Q(h(`8Uz~xBfQpSkHIaO1)^3=h}NK
+z`?Gy()S2Pi$1cs?Gk3Qq{5|vaZrmrhXYL;9*3TZ2bDzDL|1--Q1$XDAqOG6ZUC8?E
+zx=Wb&_LeSuExT)o`72zj%(ov{*4=+yB3me<lKRpmwQY9dR@)ly)-}dN<>UR+_E2pq
+zZ^WYObDTH-{6V*oPI1ZMpU%~dH|Jvh0^d>gRK<3k`o{{HE0ys<dVpoNyBwXrLMI-!
+zuBa=lW_~Z?eE&4f-kZ+jT^E#pp=QkQFR)!eI+vLf*(&_mGe|uWV&@HUQh?H_g>RGa
+z%f{6P{&|JFO!h%JPwr8}!-{R*Ei1uVy=v3f&HvB?6}fxMDx%J#rK@RL9=7;>Idz++
+zs>AUwqcDqKw}$-NwuoQp#P7$4f3r6mh#DXNYPQK({M00*j@ZKZQ+@nABpO`zP^d0`
+zdzJOPTNX#+uW|8bQylRto%ox{NqFmI)SHbPZ2#0q{B)>`|Bfwd{|$=3y^@L7Ck5Nz
+zKSH9j=SJdR=;D9TZ*TR71^cnl74j8-;7~`oaL>9P<_~T>Yy7OsiyiVd*8Ll_o_#|7
+z$mEUAu)n=XQ!^tcu7zf$%Q4??42-&cXs-(Ouc5VHiR3L*;Zmy=*t1XYZ?M$6V#A~a
+z%_1t158R}f$RFm%|HSHizYER3YZ1#b4A#z&>zGN7tL5HRZrIhRC|63vL`gKnbO-P1
+zuz0RCwkRtL_@{#W5spfUxXN)RF|Iyxn&?9hb_<=Id-1As)dM-~D#K-%t)xIyi%Ckb
+z|5fj!oVTK*Yg~H=zx#28EjnMhQ;MChxaFxs99vj*_+r%8oxz-yJ7}+Vkv8H@jkOqB
+z_52ov-+uy(l<udsE8QI?5<Z}bI?lVMneW?azH1=={JMwhZ|5t^|C!)qsxwmjGgz+j
+zMb2QyvY~PQY;}nC+|54N&*%*2+@COYIQ-ThPJFU^Yc7W^RnfPWTSY8)10nKe{tb*l
+zKNP=XQ^hi;jef~}cpSNW^ZmveJC)Y`NYz9aN9_5)J^6N-?fhe>gjJN#V)inBM)s{^
+zzs=)*IKv;3TtNN}iB`Tl1i3@fLKmWYQ_R`{-i_<Ux&utKK?iT3)^xuzlGEZ|mKg5%
+z)?y*AifA$WYQI%<uDot$>wtUFs_D-0I&0=?nW&ksVs>z3h-zjR<opGG!q_3pzg@w$
+zBLvU5?&#q66UB7VeA@)(=e+%7MT2MDd?K^voyeapW`E=&^xL=QKj4S9TR-~dEmKYW
+z)}?Us%0<2A{lcBGRI9q*^|Ui?W8>eTlH7aslAUpLv9kC_@n?(KQ+)jEm3w~uGgh4V
+z<)U8vheYBJoN*f)f2|^D@Qj;<mBpXKpDkwp;^*fY<*s`lvwS6Nf4K<8zizU15?jDj
+z<#1mm9PaCm;$)CmyI)eR&czE|z<wWI)VcV9WiCCuDRh-2|EBoh>1IWS)45+l3WwW6
+zNp+`cSA@OjX#o{WbFRY|=^b45$Z6im@$#-c-W_woFQQfR5dTD%-EEq3k)<MA7=B;X
+z{P6qEU9tQy4F+qc#&b2wyV6!E=PDHCN{MPqXJUKpysJawxytdbJ`cOnj;wH0O2n1l
+zq!r_;mRv2G^Aha9`>RuP0>AIrE@wVpNYo)IYL9_ViEJ6z*(vz(D)vEbU@KlKZ>bLZ
+zJ0Um6z7#O~xvK4R7C76@uZ}wLNnT&s2Y<ansr<WOP`ka$_sThUt)y8y<fOY)r<=Am
+z=in!1?eOH2DkYTW{tbn)jA7Ztt@vMRfhL^ALU|KHaXG`K_78dO|E`oMM$*Hd?d^{s
+zce3<9i$VX<vQ8!X^e&%KR#`f*xN=Ov<Z<1)9A4<;NyU|iRZJ@$Um5CGP+3rtR#aYI
+zTJG%o6i+Css7xy<m{D3)nKrq&Vsb%c;lv}-LTPP#rC~9AN<~#!S!sD?(YUmU1r-z1
+z##c=#tSm0&_wC$g_>`jQWkrRkOJ<~vFRhv~E^SJ2N!qlD#U({)Ra2&w7nGG1PnnQb
+zFePnBnetKk)Pj<#qPqMQ1>=i`7EC*~YW(=3^4!wmDV0U#Y14`;C#Fp)nov+#JhdpT
+z5WoD=sXlqC#o^O?bQ{yHOFF(wiqa<+6qZ)_>bcD03kt*DUHteTTvb^xwqy&6@rC`4
+ze@{DW$whOUy`BEVq#r*xyKDdUa*?(DHvCke{~YDPsW|qNW#avG>Z_x+t*6i5(HpF8
+z7GIySo7dl!Ab$o=O7*!dLH^nUyxtveL!o-*uWvvfYL`5Js_7465w%SyrJnyRc17y5
+z566X;p(ge8`G<J@U&$X&pO)_R-)$RTpWE5%rzh~A#@A!@x!9v#`O8gzC+!z6{`_p8
+z5w$+`@|QKBuWmrU(Dauzk6*ux!M@-L`^4ARjQ4t8ORZ16_(BuBB9T770sYDb^l1~l
+z|IUo#xb5c;N1=r6*MPpd0euEPbF9xl6ZC)nbg#E+)N7yBrcc8xUi_&ue11FD*UO(~
+z`oXMM;*H<@3w{1ec4dBtwyBqY{k2}7l3@JjF7^6E{kPooiSno3m^^=(=@aE&eRJ~s
+z8Mh>lf8lM(^RG93qVjX^NS=SW=|7@n<Mm(G-9CRJ{px#@>+|pP`rG{guGfF5k9vK3
+zk9ztn(;v<OI9_}!SNV(`_J}`z*8kh<6ZL<tep;7LBK`6P^r`PB&tKMnezoa)Bx;|}
+zz5geD%hYS1+O^5`%h!2*e}5jVmp`=G>$`J);8RbZ)zl|F!I?VV{0!~v^@-YV^)6n&
+ziTv^AZ`z*8^H-bx5c0>1Z~4AHzs7$&{mT8keiaMBc;jc`{$8K4eS-YDd&lRJ9pdND
+z=<4;>awfPe?w^cqK524-_N_V6>l3YiYE8c+!SSv7XrDhl!TEi8Z?C_M`o-(N+<{(i
+zr*SVt!VfJpeSuG_rw<MCN&BLY*S=|{ACO@DlnwRy6P3T*^ya31`T9vxJ_*Y=eWLbT
+zIl|{p)PC#ryWe~gwco-*uTK>JYSR}uFLCDAIG;aJ{Q0I&)PBoPOJ4qZ(<f@btda)G
+zH+`b<S!4P{?VDBV{TC)!Uo5Zi`oSFk;*HPHSziCQ1o>B1d;P^AUjE$kygpHU>t}g=
+zqWJRXd3~bzmS5`iiQ+4}((4n&7h3G~Hz$}M%dhwPs}juL-Tk-<rJOM|lrlXvC3UCm
+zn=K?uJJL0#I`rqx6d&t9e!zQ|)HzLh@9Yn!p-@L``tX02+37mVeZqFR=Wl<}b_=$>
+zxalSCQd;)9<jgq1`_*-q`y{cy8H3d)dV5`mHDvz=1~moVUe{&G>{U;lqS8+D_AC?p
+zCmfH7vg?RlvqsqIkg>kFVSgH$Ys^m9Z|)N=cfbPIUMlxy>}n@@f4Yu~u^V_%Q(4OH
+zMfofBcDkNRWcLGhW#!&Z*L8{P_Ql8a>E2G)cZuxui;!tEy`5d>)f*>@uLQffW~b}D
+z7=KaqU4&ig9Pck|794l-_ZW5?W;bm2F?O|$u-l1tTxE8;9*l`Es-3%FmvyNxSJ#D!
+z>_%fZ_YQAo>zlakG7Gzvjj+25yA6%7djq?SI~y){6Lu5LPS=ky^@!?^cJzJq0}Z$H
+zAnYbK!mbj#+(y`4i`^Qt)AeOcd{O=J6uR0+tUt^w-gx;EyAF?fyR@KP@5p@HojH+Z
+zcHw)B@%$ZyUD%(lKiwxhf1~0XCx0*ca&;XVV>jshZ8d}2k$4ey%ii;LwjPa)mneVt
+zV^^yu27Ho@t9P;6`-6u4HRWKQtGxyd`0I$>T(e6S-!SY}e$ueNv#{G>cFFwd+?Mfq
+z!~R~xZlc*G^Y;UGHD5IBZ(q(eYs~H=j+rt27BxTmV3+lk_m|AB1iNK=O9`K3c8jn}
+z{m$Fjb#G)GSQr{Fk72j?S8vze(&LTOkFl#UJ6#96Pk5Y0)ng|Pwi~v0;ceFSaEx8l
+z`0JvBa%*pwZ2XPJu16#6W?@&>2)nzmTh<7>H?XU1gxx0W_TJCe!>*s>wsSkK-7*gH
+zc25S!fi;u*V-R+0+Ba-hiCy)<-p;P8<Cc3ZcFT_Pc6NOo*X}9oR%UxUU1z&bxPPPi
+z?Mv)N9p~+m_1o?`7Yy=ty6%qg7j?Wk3cC(@4f`91UB21bb$Hx*T!h`k6TQEB^Vh;q
+zJKv98?#bRx*X8aLu5Z+Meiyq9r+PcPK95^&Q=RL_dpljHC-T=3yPVU#UEP&fxLnJo
+z_=aJZR_^WWx;<{WXJI#Snzu`|zLvk6v8y&aU5B_&xZJ4zeG$72+R4U8*Q1H-e!wnt
+zjx*b=>(WGa`*QM|KF8bH^=aIC^ucbS*%g?(c*mg<?ADl_t}WarT#u;p?;`A0o1Ly(
+zW9*{p`xtf`E^0WwkFiT#;Ozz_nZG-6Z0vEdw@VgZ7wj_3E?Iw!#%|d{?=M+@%))N@
+z72Ymcf82##hwHpuvi^7jyDYOy)*qX&n`?H->f3G?#-G_G>yJU$ExW1V_$skmX?Dr_
+z<67)KzuEgs7T;6Y)tcQ=HeBM3zb~=dV0Ov+ZTA+Ok8bnj>bgGB_&W-_hwt=uy1q|j
+zHx9enzj-@d=O?ne2)pSIdplk4C$hU={{HUmlGWo~>_$E2?UL1_DQnl7mEJB{Jvw5y
+zYL&N3R*zxW<-g?ZlGWoZ`Fq*hX^oetzBgl+`%iDD`xx=;{(5Ul=o(ffx4_++gnG?}
+zS0GP^2Q~?%S3u4wy-MIV@MP2P2it@~>9617IoH?=?oYlH<JVk-%WkOgAmc|jrRWw@
+z`rD9O;k{mmJcaFbFHFOJJXF2|;CSp>LfP#GW%tdE-tJZ?yF$ndRnkv_vde?AI~>a2
+zmp7z@eue#^?3+UNnx}85@%G=s6zrdcvcCw*zBB9wcY#abyGv6-e<9yLpycb|3CQQ0
+zd@7uP+{ffLa3=CO+)q-uU5sn5^YZn^5m4<`d#z8u-*`Gam;4i<>Qw+0XD_HYH(ulI
+z{|YBzw+zbe1}M9kP<BT`mH+LMl+bYOK8LdV0LpF!l--$7cA0Pw><)yo+Yid_hpWBa
+z{ZQ?5I#l}%f@+VJa4+(OOn!&^Y$K7MfYM(JCnKL{@+t6q<oB-f^?w<v{4<Sx;s2mN
+z3ab3W;34Sufr|Gx?(@m-8u&PNcR|I~8>&4sp!~gdh39R?MaEw6G4geS^8ef-Z+A0%
+zl=KUr(l=l3{XS%zYdi%izF|;yJ)z>;4=TQ&F7xp{4;9~HsQBh`|59<CV%*jE88;D?
+z{)Ta$u{TtG)?ecFPaE%p9kE|v@>t^#OYaSTM&BJOzOOm3?2Mm(LY6vvyllM5I0vfy
+z61Wkb2vv{vmcFy4|GL1Z{{zZ?8I=7MmcA`~i2D9=kuUcFD7zEk!=z_f`ls`Kdt7BK
+zfe)ZBgo-yCsy*96wO>=H{{H#Gl+aT69Xy}o)jBu}z6=%btx$Gnz(>fJ1J&-Gxv#8t
+zJOC=5XXkoeYb-PNHFkn(zk{IS`Nsvm{ceY9zZ;FyjQye7;g>lnp%s+-6}%t54i(Q5
+zsQO(B<*yW~en&&quPv0_?ojn>0ad?dQ1x3k+t=?&D7&km>Q@9+zvpN9`b~zaUq|CU
+zQ1wWKDt7~uPUYSRH6G?c)#p6pNMn1b`fLXuq@2&sO9}lQJ_}X;?NH?(2Gy?nL6!T$
+zxt>?RzoNegs@$`o$}NWKr{kggbb$9^x2f9K<8ml})lmNSH~xH%mp?WxfcKK`JeY$2
+zeJuTlvr|I%kp3oA`Vgr0+1|KjrkC%AitlD9yLnLYO@WH9A5?rTq2l}eET3=9nLduY
+zjbn}7jqQwYo#E{+hpJDO$$J=^K+WHO&+vBl8J9w(Uk=r87eK{#G*o{b2-RQv8NZ+I
+z<$po7*JDuqb~{u(rdj$amVTV2?`r8Arg{5MpzMdkJE-pfsB*W3@_YN#l+c}|FN8|(
+z2Gy>gRe3%Jm!ba~l>Snv_B<V`{f0rcXMea99t+Q9TptO~gZn|1|5K&6dmi3RzQs`G
+zoL}MFu>vZdy^LR$dwHet3gdZD?Kc%Fo?W5Z@0Zhkdwpko)_4_EyA6QLDYqBA4ITg$
+z_ZMZpejh;jdmO5M7sLCoI~~ey98~?rK-F&)RQ-;Gs^4x<cAu5{`aJ+uzm`zrWW^L;
+zpR<g`Q1!@%DmMqJ-0vp)`n&}-9$quvW}F69pAqnO;_CtLf_p)g|4WH4zY6|^a&uv8
+z(hr3@BJU5i{!4{dlD=w^FYjKc@|GEA8V5q2f21F2Jk;3Axcamdw$X;tZ-T048B{;^
+zHU3)c<@=%Z1tzyNelyYQml<aokARuf>oCYQPwNBVuEhQP1fTv0Y>NCh*b4m|_$~Hl
+zK(*)LQ0@Qoc<=w;Q0?{<{2sd+_#M0o%DxJ!{fEO}NbdpFo`*v9`$6zh%4q{HgH53N
+z{p})ecMtrLd}l$G+uPDNj!Ox3COsFnB>e!WerO5R56z(ZVR@l%$Frc?X#i9^zB|_Q
+zN~rXHCcj(Y(=UNKuAC1wo~FSR>N6PjqugDg+HpI`BbwG5^L;zM3j32j6>9#R0@eQ`
+zjE5Ru8sqi%L+S4}o@YEBD$XuY?b`~f+^0|V<vsw_PxrvRDZd7)+$r!UI2fv(4}>|$
+zKb?{i+5o?Ts>f?k{qhi0dtU-&UkKGtnNaP$d9+V|&v*$`yT5d@Z?_dtaTXX`8ecle
+zr(bV8!FV)Odv=0~<K+{5J3Ii@4)++(H|9arzZ3kKau0&*VKb<BSC8`LJP2iX9n?6S
+z0W}WGpvpNOs=lq^FQkW{@_#?lkHfE_#^GmB<M4T?cDWJCZYtC`>;u&<OGfzm_kybb
+zrs1Azq3Tx)RqiUNa?7E{!--J!9BOQD{CSv<|6fq?KMa3>S3#9O1OAAd3im=@m*>a(
+zhfw2vHPm>Y3sp`jR5=rky^PJFjyoHNdag6RV_XPz+$n^b7a36X+t&EV30|&*(ziAF
+z?OdOJuW_QWm+{vje%yWy_oRJ4f;#S8Xz6D_jpqu;qk-1_;2YHU2&i`a=6K)k4?)Fq
+z9aMkMg8#xUAN~`LgtG4n)$V)1cS+wc*tg?4xRmry;XKNDA6^Lm0oC72pxS#1TtmL2
+zp!$0oOMi5bAOES4y$$If4fOr+HdH^Xg6fAdsCGOGs-1R#iu>B*JV!vKZ)ftg1AO`r
+zsN+s=sBzRCsy;hI&HvY!%sTEo1KBdy`cbHMycBBwcZ2Hx)=>Swr*R!h$qS(Ll_pO%
+z9&6kMD$XA$Ozry)RJpVHN99&Q_0tr{qsG?xkSytk!MEVfQ0@0gUw_<r5WYkD-B9(o
+z460wILACb~DEkAT`sv#~zP%rZO26JX1a?Nhpto<gnNV@IHNJhUmlqgMHU7o;Tefe{
+z@1Wwi7^)qrpxR}MvA1zIsQQ1Gl@fZJazBNy!&OjmErcq6DwN$RP~)&C)Huw5DU`Dd
+zRDJ(_jIZBHsQiC}OW{3G<M1}9ad;tAyNrdh>jpIro5Ej_PdeJy|3AHa`HvZIhZ-+6
+zQ02~rDz_6<J@<jC=dQ-jj`H$DQ1M?075{YjCL9S>eov_KA2`yld#1vj@HYX<U%v5h
+z_#f=jO#bzVln_Hcy%tvE=M8uZ@=QxFglCgJ5?)Vw$kIRU$^9<U--cI_em<0+VmO!d
+zQ{XGe+gbXTJyJq*NUw#fNWTMig15lU+>f~)sy${wwciM+di5|iff`pIclYVfK=sQL
+z@O1j)5m*kdH+{9~&xCAEZ(Rx5Z`68}>5njdS2&6E!(a*A)$~7f^ZvhqlS%&^PJu5%
+z#dVMAZ-=F%-w4ZK8dSUg1*+Y5H2%A*Z}*p>(pSP8sn6~38h8m@1gqeS@MQQj><@Jw
+z*d3mN|LvjfV>W?wd9Mv!=ojMo9*#l(CCrEKK-u393*l{0`EG>Dw-_ql<**3-MQ}Vk
+z6Uu%V91QzI<vSKCUk|8!o#7Dl9bqnP1!eyOos<VZgUa_IRK7J(`Cf;^(Z2{sz(=9%
+z7r_(Z1yK3UgUUA@DqjUW8GQ*H4Nr!$?*-M~he5S#d*e?GE{*fgpwgd)ZSZp++yt+H
+zYX9@#cCZAVM0y6~6q5cd2T|GI4`qK9R6osvvY!Hnk=_Z){<#cq{~(n8)o>B%bD-?Y
+z;PIq)fwF($aBu%Gl>IeO{XQ4Uz8sDty&IJM>chPK3Ml&;sPVA?%Ki*^D(QWo>}%8g
+zIQ@rl9@Ko91vO4)LXDFG)Au(0(NOcLJJfvI-Sppg^!{Fk^79<jxcLXvxVhEzb4`Cf
+z)Vw<jYTlh_`X0vJp#1CtHIBB28b|96_2s+-rC$X#Kc9e_pVymyrg0RMT^`i98U!`2
+zGEBd#>34>j$J;^8<Btxp_Ay=u<!3R}IJ*>%hE=8?Y5Jj1^L-%He81yhKmM+P8fS})
+zg;3*fn91$nV*J0?Atkf}<8>^QysybM?Y(>wl>WVgyu27n-q+;U5A^axsN+z7;~r4)
+zr$Y7L4p9B~X*+NCw6O-t?i#56Sp?NTr<*?4cqo+JK~U}A2CDrx9pL@FV|)<G?ypeo
+zdk0keUSRt1#%w6NqoCTaD^&Z<*x!%qaZvMkI8-|xZ)^+Ij=P%N3=Trx2I_qAbz6V_
+z{1D3jzoGp93(EfzDElj53ij1d=i5ps`%<X5Cql*D5z4+jOu>FvDEsZ8>{FoH<JUCb
+z9{&Sn|92?+8=&m3fU;i*)z0&v+PM#u{V`DX?V;>jLD}yK)qgFZ`tR>;{Q2-gsPn)y
+z<2d6mV;^G|V>{#S#-_#}_Va#jfokt7q1yWr<5;Nn&NF!cY=&JgsQ7w7wQnX=`~JoB
+z+nPQE)t<k!_U-u=RQ{Ks@~?t!K0}SC8%%$N=@&xRUQq2-Z2D77KMJaSPJn8kL!sKG
+zm9e>T<Gwz9o$(#x3&urI^`8w@|FeyQ;eV+A(I)Q>HBWzSW$Ps9)=BUd>~4dap9N5M
+z{oz2;)8X03ZQ=FEKeY6A_dwY#g0edUo`pOGUWJ?u<!|FY-tGe^yJw-+Rgc0~kS~U^
+z%YpKD7?j=aQ0uH_Q0uIB_V#v<Ku&Gx55Uc=x9))&e~aL+*iV8wp5z)2fSgLxw>A0e
+zy?p<zg=+r~q1yi$sC@UD{tl@Ay9uiQE--zW=_f(;|2U}r&oO<b={rJ=p97)h;|`|(
+zZcktSS5V{cQ>gKG64d$c1lWY@o#UXc@0!Ej=zrV8uP1(ioO*kG168kgp!73g8{*F~
+zc7-~>?hUoxUbDNuo>~RfUQfWkkZ%T5zN6ux@Gv+4zk5O1y}O&A*Q;S4^sAu8&0|pG
+z<|>$mJQyl}FR1(nLFHe!tIz*FRQ@-i#?uQ><LOqY{G*}r4}!|y6)OL)fARUhhRXjb
+z)Hr(^UWMHQQ28f8<v$rJe;=s)J3t+m{*&tS{|Ghy)<TWHr=arBg&IFquoLNJP~)o@
+z%FiIv?*uhYK5pUpq_GNiCg1(Lq=X7+*V~|5r@|x2zZh!$cR4IVe-U)+R4Dsla3Jgt
+z-8vO2Uk|8!o#7Dl9bqnP1!e!k&OGOapFy`yh03=ED&OnSty7^}r$X7^2-%~begxFG
+z%Y+(thd_<H>vrOPEczm-@v%E>jr>^ilu$c3435N4f9T?cE?(&3g<5}fgj#>Jg0jDF
+zNAGVbyiV<5ay8U=Erc4c2fz(*H>mdC38s>N{SGOi8qya*#WfvHfJIRKe<D1N`V520
+z*B-j_60Anw0&3iDZk7_d7Wqp!3f97<@ExeQ-++qyuTbM-4pcc6P~}X3DrYQIIbEU3
+zIT)S|TSJZSouSJ4b^DaiQ1~@eIcuT%<wK}`c^s;oMNs9O3sp`PR5@i(<@AOsr#n0g
+z9tt%NT0xc53=V>u=v0;SGt{_Q4>fLHf-2`msB$iWD(8Hta?XY-=LD#7`a;c@o>24U
+zV5oBTgk#~3P~~h3HLic#){pCVpvqYaHLos$npYRV&CIK6sB#KTe*o0Hdbg>cM+ZTj
+z*Y<)sucaD4+Qy&P-hfJf2I{>05c~%J*Filmd83I>e;TeO{Z6R#4=GgkufvZ>|2tIr
+z*CC(&KD>qW`%S(DsvplVc@k86XPKM{)h^qa{4<qXh5RJc`Fy$YI^%`LX~uEJVa7hj
+zF2;7o4}J@|_IM4d-Y*!JK%M93n>-mdr`%yC4>s;^y!Susv8J7;LACd>Q0LzilUHmC
+zxpu69YL}@{{!W1^cZBg!V<wYT`n{p_e=&Yar%SGYD(^_B^0t90@9|%}d?r-?oC;N5
+z7bt(Npz`l-T+6{g@<-fslKy!p`AOqqV;iXQKKsf0zZa^!NhY_4>i6xT%KP_^-rrMD
+z{#F<-GY<Q~``Z^P{*S-+{%WA)(NN>%`|rHnqfqJRLzR1s$s4~7xp8zERD35v+3gQy
+z_uhIhFM%3gnNW7WeB;xffU=uua!;snxB6>uw;0M_K9t?QCa?L*kH;FQ@wmWvhH-*%
+zm@(UUn6Z_yneoRjy`K+_uNWUQ-fq0oc)qdBc#82jV|Qaa<L<_$#vj)C@;)}cVZ0pb
+z_%I8q-)0(fq2@!j$p^tNkXu3Z_a|S3LLVc)4JF?U-$TCI<O*1Wd?LIW9s@6f2g2uJ
+zbND3ud99D@NvJsPhl=BFV>MJ9r<*(ieu+E~s@y%`r^q{+{Kn_(fkb`|N`Di)5qTcG
+z2A0A_a5#Js9tod@?V<Yh=g)i`pF_p*fpIxh95<MJ8vGhL7izq8fI4nAhbniUPuZi2
+zy!jKae-mncJ_4m*^>HZlA@V&?`R72*r(!65)kp68ed#Ad={rNsk9R%{g|357K&4*|
+zbzIGcSHkv|zWD<`{%?aXlfD4Tz6ff(?+l-X-`D!|7od)}mqWEfwQ;iXBx8SL7h^l)
+z?#8CZAKv$V?tq-q(r<uT7cGHW7aeEm*_M8UrGN3BxBmdj{%t7x3oZRzOFzTX53%&N
+zmfq6RZ~wRN$0bnxc)4*bR6pjK{QbKjxBjVx9E#JQgdBR)7emE;9y|{DRH*hl0<I%{
+zACtd$hrQv*_d)5apvJ)oQ2p59ZSQ{%xC#A+x4i#nq5S_9=8(PsDt|Hjg!H~9?+Lph
+zzq7{cuZJ2()1dqx^``fKFqHqD;70h)zr6paVL#*>p#0B-@00&TlMjJikiYq-*WU*<
+z4(CJpKmHBx|41nR`$74C@AXjVQ0!iVT7SF%Td;0<5Z<8tP~{cEbmR^uuY1jp<I%7U
+zssT`bJ3{&W@>TY-V_ys9_bs>!exHI%NWWUd?sRwvayOHIS?%Y+X;6MgLis%c%I~kQ
+zghB^m|234~&*0AZeGOht`fX5t&w=fc`<T2v)Olq3%ieDhl;0dEzs=wi=r_IO{r(7d
+z!f!2nf%FHU{4Rk1KptxH9#Hde&Wqk}1(e?rP=5D>ucF@(D&B2ibNqh&LMZeU=}$uW
+zy#~I9oNw|0Q1ke;=l%S9+<2GqYU3PZg)!ea*m#7oy>WMAit+2`y#IHMtBemAZ#3Sr
+ziuNV$#ZcEbmqX3xi{Nk6>rB&+hC2QahMKSajQc>%*BwpX^eo?LM*bPf&pU7t?eGd*
+z2%m(Se`i8HKN}0>?_^_!aT}=deZ(`~Usou9dqVl!5nc>`d)m*pJD~hs3gz!Y;~3-N
+zQ2s_f<^2tX^4A&4Uwe2FYy~yHo_*5$y9dhOZN{^VgP{DC{=@q_4a(m@D1XPmYS<a-
+zyzu@L-rqA&{vJ0jG7g7ow_GScnNWTXglEHjpw1&tuk?QIg7R~V@eJdUP=2~W`PmD~
+zPjh${-2AwoFLy$<*JV(C<{R^kZK3?^3+3lO|Kt693+LkJ6R7!dDU_e-P<~D~_A_n|
+z<);ahpO02}KX1Z0_;~?pK1_r1b1Iadk;ab3mml-v`BCFC;}yp9jHSlW#sS7|#siG0
+z#{WF({eEG5)A*F}e&fx?MaEgiO5;zD`1$b}RQ$EZd!gn>jmfj2*7YSO7a5N*e))I5
+z&V3DP{qiteLOacaTJKJRnm;E(jlcb&{Otf$ZWH614|{nYTulB__&NE8L-{)h%3m|6
+z^VLred4G>X`MVX$-%?|x@gTUE{5wIdkG^}*`+E|~-z`w{=W?j{MnTyh4R0pB9aQ;0
+zKH%-&gqj~WL)l#jwSFptvdf0@djQn<Uw^;1`xn%D>M<z01yFXSQ0IfAp#1F*wZ3Ww
+zW%t(KyxpTv<M(1HyJ=ACty7@vx<L8c6KZ_^dY_FG<J-pPjgJ`bFfK7(XgtF>5DwsY
+zdo<MXwkPb#arSVibxJGKZ~QCo9@6;)%5E+E3cL5A`u_#f-v-+d?_6UQ+=M&|ZiL;T
+z)-mniamd?1)$hyYq0j-O*Fv4YR>4C^e+({!*F%*v70NyrD!zT;ugH(y8w&L&zI&kJ
+zyB&7N&r+!M(0tQRf(x)a70T{J_!)LXpvK*irr!&y9vklQ`~<2VtDx#}8&o|O!5riY
+zsJKQ$)gu?G9zCGy(Ggw@cY!MB)4RR>N~riQf~v=%urKlL2NmBwuq%FAK&`tr-sSc0
+z!1>s{3}yEm`~bVhp~m~2roRBH9utkjq3Y2Csvdhm)uSowhy2l<KCTy`>ah~49?PKW
+zaV@+Eo()yb2&j5zK*hJ|4quN8q5Pf;wJtvc>Ueu3JcqasgNplLcoY8HK+U`6rhor-
+zANT#n8=&Hz1r_&5sP*JPxFi0$LB)FjRJ_gMA=qtR=FfW{K>5EHs-4e-iaQ5tz4`oY
+zKHevw;(Y`v-ZSA${7-?3w-{cF|1nVWf1v5xK(+G^w|ag674K6}@m>WxU_T%3fWN6w
+z@fJeGI}j?~W8m4aEtLOnZn5zV74KZAb?lB%?VAD>@2@xecprsl;{P6~cyEVS;D0I9
+zacI8j$3Vr~#n=`q-lkCTzIhY*v3~(J!{38Y@!kX#?|i6u&w*#b0x187L$&Y58-2X1
+zpw`F7LB*R574H#H?Yr@YQ0M~ue+?DyTKE$F--kLLzF_*LQ1Mn83!vid0~POH@Codj
+z!|n0+Q;m=JBdB;^fQt8VI2Yak<-Zgv-Xo#fw;9yB`@*F*exVz`(2ZX>8~=wvH-6zW
+z_-_MsTyAdq_pkTy-fz4CD&AR8@s5OAuMdRV;jbHX;}<I4=1}o&zRs^pK7jInFI2o|
+zLdBZ{wVr?eT3_Bn#+!|o8qYSiGBz{*c#Y5Zq45>tEaU0MQ;h?SJ&gY(h&IIW597VY
+zYmM`aM;i|{?rq%G_}$gs&n3pQjK#(g#@@z_oFw;Wyqp77eu?o!V?X1r#?4oGyDyDz
+z8J{tBh6`xNUEyK)`}oRG=vcTC&L{nTsD8N#s$b57X)qUFg1!&j%>DJ<EdApv7>C67
+z2vol1umkqTK*ih9xQ}r=<M)fa{zNzpzdfMh*%4;JPcILJsz`qu%I|Yf@hpRiXDXb5
+z{xqm~dRqF9Q1R4W=JWjvDxM;!c!nB}F?KZWV?5{5P^bXEr$WV(0gr||!7-$3Q?=sx
+zW}%PgWvF<rg@x!BLd7%2(lemq*$yh-rb~Q0^Wd-KJIQ#canr><eJSjQJ_j;%(!XC2
+z3XQ}6Yf$ptFdz9MlP5qOfBKo+7M_8uMS$$z;bb-y`4K4j3aI02rO89!Lgd3t-T_{O
+z{P}!u|0LA;W8j5Uj(L1E)N!FFJcxQ74pn|D({G#?3LS&p*U%mB;KA6v4^{39roR(r
+zV|P82-PN!oc9%evcc$rcp!%<?@evMgl5aDPHV!bp%)wUrM~!91Q;Z+Z@%mSc7eLLk
+zT}<A{!B6?0H$G$>ZA>?|G(JAd+b@M1$#)Ul1WQdGXlw^Bq+a?`-(2|q`F@=J6>1*N
+zfpbVd18%0NE1<^B0H|@+1S+m?&huPkEHVx?{(P?2zX=u3Q&92TX7X9a;johOGGRGP
+zg&OxCR{MGQ5G*78PN;ZphKlD5n1)?vsCd$hPoLxED~;zHI~bcm#q;CYKAtsD^4-Qc
+z@Knkh3rE9jsCagRN5ju&hC(Ni{w~~1JpY7>=T4}2#=>7=XX96A`FV63)VR-wr;z^`
+zlUqWK+h5M~`Zr)c^50Cp7*-%pHaQ1s{I)l_3Dms$;0&MtF*pzT8k46&jpN}aXF$!X
+zlo_-W<L%?=?s_l%?{G8e*Fz4?>3v~)=0y*vdC?iFo*m(~u$AfmGtIa67f|E(71)vd
+z&sh4c@E7DIuqpn=LbX!{lwEtM<I_G+{<nc0NdNa#uAkv@xDj3nFD1SrxE=N<LfL1-
+zgV1+1{WehkYpcBdlTi8Zfx3^i6mHA)?PB93xCy_bAg8?aK`;%wL!sKI4Qv5-hPs|_
+z3YC9-CHFr`Uj-G{eNgtdLfJ2ZvcC|@ekzoGp=8!$!=d*5XF=slhprr`d>bl!zK<Y3
+z_?5mAs+>JwTiUT1RKIKk)ef7=SwF#bQ2M9gf$(7wyT3u%-36P%YfS&|(|!LvZ+ysj
+zGu%XbRKbmuTMU)|1h_xx8Bp!q8n%HuLfOAl=KJRrDEo(?`sYe0`}3jfvf#z|-5bt^
+zJHc5{n}sfbKbCU-z-}>=|JlZJ;}|GE8Bp=HgDP()sQA`R@#U?7%KtQ!{gqJT=Rzp^
+za;W%DfQs*ED7%f5dAA3CUx%geSvUng3Qvd2rN=H0%72zI-PjV!&$<#H-}_MIJqs1z
+ztx)A%4wb(e%KikX`1(TGr$fcJ6O{cglf2!7a4d0L3{QmT!BKE3JQ+@cOojBXPxHs0
+zd*Bk}2~fwMekQktI<JRJey7+UZytfNzXIw!UTN|WsN>6FChq`s-u`t0al>z66UOxy
+zFa<8L^h+)MLQ6lw(lagn5KDi1y!Z1el%MCJ{G0~WP9u%)7J2zO<9K79v8nOfao%pK
+zvCybZ+w%8Sq389+`NmY^f5v+K65|ENqo9s=KNWcWN5+Z9;l}Usz5adURZ#gtCVw@?
+z>;G=N)i}_&uW<+CJ*Rs6YoNx<*-*!~QO3RDVe~^YsPU5mx8XSO#wlFyl70<53tj>@
+zbN-qOWp^q}!%s(eF8Van?_>IJMtl7Yunl$>8#^1D8oxc+>#sDP4>w^y9&UtLMr}e;
+zoa;~W<*$WJi1RTxk@WN7csLCz&N8St`$5IIJDh~RndwtZ|K^EaKMyL-sm4~uFGu<G
+zw~S{SCqcz|JXD+=jGvG6ajt<X|5cGVZ-zrDe-g}vW1!+3B|UbBLB+Xg1i!t4em#_a
+zEtLLoDE(CUE9`GPZ@7=I)VRCxlVLvnHRCknIH<V$L&e?J_(7hJ`&Fp&o`-x|Uk7(3
+zo^dc0j)IEo1Sq@qP;vb@l#>?vwNUyGq4W<!>CcCXJInae3H~^9He5n_ceoe%_cZz2
+zT<!}auZGeuGgcc%89Tzmv1@Mfr$a*SJuXi}<*R`wpg+gtli+0Jo+j@OCm?@+ytjWD
+zo{xOD$#daM<X;B)_PobfXxtlWe!ex(^BLHNat|{8dYqSEF+K*>{^Q`8_#Fk$f$8vE
+z*bb`wT0^zpF9Ur0Er;?u+gJ|erzI>R-!8Biew5?K`I}IFRzvx@6{;Ujf%4PI*apha
+zv;9M%A>@A)=D~$f<8T&~pP5j8@}T^rLiJ~EKkx5A<E~Kt9_h>ag#7ow-Qf99<6|0>
+zzcMI){h<6chw^t#A3rWmgX+ISpvFb2$?JOiaq&Eq{uVeA{d|+hL-luGlhdI3dpnaq
+zIM(;~N~rwTK=t>zCXa^d@2|3az1}uH3stWwsD3Mk>bFxY{Qy{vydOLd?gnRI|MD^3
+z&!fg=P=0cu`mGOCzxA;64M&GUry+k2OW@~l8umBAHgKVFCX}B8q55qfsD9ho(qHPu
+zdkT?P!4Yr;WGR~d<5AwvhsIZ+{7i%DuSrn-HOA80z}=Bs!ad;wNBaJm1=W6ip!(+!
+zledMMw;vzj^^ZgK&n+fbL-o%XlaGMvpEQ#<_VoSpHe7=L2cY`r8k46&^-uR6{yEDB
+z-9w?a$d^IQ!&9N!X&@xz^utYV3Ogci=;rlz!~Mv2Bh)y&5FUd5B={@r58LAJ5V#*~
+z4!e;4ZPySPxSoTuI|Qa7w}qP-*Day^{e*EE`X`|5?t$`mDU`ob*opL`q3YRGdi>OO
+z_VVj+Dd{i6BRCE}3u)Tc-J$CD6`93<K-KF(sQRB}>BT1RYx1|5-tH6Qqfq%5nmo%m
+z-O^8m8_^Ghs>dOgz8Bnt{8NU{|1Ol>b5M56jAc;u&4a3M7f2P;4~Hsu52$=ipz<v}
+zJQQk0{V#`Vzj;voF&>6UKLM&8e>sfz_#>}}n`!U0Q1(wl`B?~MHxsJ-e5mq|h7^^)
+zGgNzjlJ0pkY>mHfX+*{K9#lJCY4RlFD5!dOhw|GJ%J0TQeLsE<+u-LZm<At(itm1?
+z_!cUi{3k=jmjmVJP$)k;K*jeKl~#OrLyd=?P;ngu71w(Qd--q18sh?}_)4Js4uSHU
+z0T}}6yIJ~A9enzmQ0ccr#eE&z8!m+MQvqH7!+l6^4%O~Wpz5`;y|34sQ1!YIs$Q2s
+zm0u23elAqK+C$ZA^Ff|3Lbdz7CSM9w-&RodZEoCfppWNGD8DP9{N4Z+|13*C&C-vz
+z^fah??G9D1W>EF|x}C4ri%|7?7VZmgfr@VqR9qz{_lJsWd&tml{qq4l_k*87ref>+
+zpyC~DJi_?%{yzO<<EzI1f$GO=U<Wt{Zp*3hSkoVF{Iadj|CaF?<KK)m#%id3nhaIH
+zT$4A_DcckGH!y|qR|t1O9&GZikpI#@B6x8QRR8rhs#20)-jC;E<hu<r1k>k0*;l|$
+zq)&jG84o8ym2<f1zijRE-)_u?YTtGH(r)Bi2_-Kzo&k3x{o9tFe}{ySeyg$2m<!c@
+zy&$K8^u3|laT}<1e0(3D?=EApafGqAF~iszZo<!|y?wq9p*x<zorz}&)OG3=Q1zPy
+z84BsAoBmX&{Mk_XTEd;M|79;9-)*oN@&kMN_P7zM-L8acx4BS$PlamNj!^BLX6f5P
+zwflE_`1~u3bB*oc67;X`?%VBdDEShob}l!$2reZ(A95;eeIo1uZ`jq>`(oojV-Mqj
+z#$BP>{hPn|_I?|xy|0Aor}K?j#&ly#<2R|^?iHwZdJL-FmYRGV>_xmsL$$|8E%@CL
+z<d>l2`B3dM+PHZa-yV+{XBhj#W7K|7?Y4PmpYKbkcCUqM_t&8OE;D@*{1yBCjSubQ
+z+pz$u9lM#lhjD##?l+UJcQUKJ?}2@h`|il|LfW+l)O|Gl?t;qc2)BW)Ouu0V?$f9}
+zjjtF_fb!b`wnyK_xVf2^Z-EEne=(H*%c1;V1b?GmXPSN#JOKTx+xvF^ALE(EiBSDH
+z9G*t}dVjX&Q7fo^eRDgX?<wQC#u3Ke#tf)_Y+>?`WLE#`w+VVvk4K^A&x25L-U2m$
+z^s~p(&w<Kc43+Olcr5ANpyJvd9*w+9Q{O)uxAFb>4OBmV0Oj`~sPQoys{dzL`l;{`
+z(g#BI@1DjFns|98RR7V|uHCmW`I8ji?@vJKZ-VOIIVSTg&&?;EMT92OAFN?R#gOUf
+z_A{-3EBVU)1MqL~Zul#_1^yde2cLsi!6V=$CeMS%BcBUb!!u2;fQykQn_L8!B9Ae7
+zB)k>*1d|6q<?jvU|469(T}@7h%HQ5(=CI4p;n3MLZA1H`-vKs<R4<ebtKs=P>JY!+
+zP&XYC>u7N;av8i7S^N^2w$b}lMvLo^^C2;h7S|(>f~O;kKO*Ns>N;Bd2{{K&LKeS6
+z&VsbTXz_dG9<UTy`~f)w(l(>TZ;?B|A;{ua$Z2pmviLRf-tc5(@f+k+cm%Te8FDko
+z@lro^5c(7usJ};xpChZBy_$q}=>YeEX>boHf4f8Z*&8Z<O9(=H!nB<kw@eLfUKVTd
+zEUq-x7^{u>#w=r+F=VXe_~Y^$YmC*#d}Ed|%@{J)?r8aqHO6XVzA?*~W(*l?87QuN
+zV~w%em~YH7rWr%VS{lgZH`W-djrqnbW12B!tmU}n@*8W6)y8~dmNCs3GS+hZa`}xl
+z#%g1}G0T`{3>j-VPPzQX8e_FF-<V}gGlq<{9N%1iV~w%em~YH7rWr%VT8?Wjzp=(x
+zZOk`j8Pkj*V=c!$m)}@ptTyHwvy5rRkg=A`F2AwHSZ&NVW*O6rA!9A`f<L!gX{<3;
+z8}p4>#xx^v`O*({>)TMxc%^WUptG0trA~bcGQFH{@=_))>*3H!lh2#%<?!#-o_Da>
+zPxtwENcVF1_hNrBIsE&t4|lZuH+%b$rVsx<>#}hEJG{Qo?8Co5y4K<i|K8|J7H|0X
+zMVp%({yotF7JvBnLl;~9!@sxro5|td&#XSg;vYz*`OKN(WxcdQpVghb9R5AW*RB3#
+zL%sf=lg*x+O8OjN_RCHGFY_P%y~Fp+e-;mm^f}1t7yiA&gUx<9H@oyn58HFoOP?9$
+zf4%7^a-7;_`?OI0onHS#OV%eT)uDwPKlB;O|B_d7JkaOTe#lL#Lp^Tu_MNbkzP8-!
+zD@?z)>327M>W*H2X&;|IBb=Y(ge%YTA7uJ0(?7eN*QeTeDK>qo>36jJWftH59Jl2!
+zgNp@y#+sZ)JLz*WC-fF6X`%4%haP!??2#*^<-{}4^xb^^Ur3W)iz|IbFfZFQN#lph
+zz5Z&_q^~`IKlp4QS^D)X8uWRN|D_NAUb)so(r+;RJc}p%d*2I=LEp4GH0pMrf0un_
+zUmZ%b^48E_uD$6eeI7sB+vl5oRx5Ac!R+-LD6(J8$yT4w`g{E-)6b<}q))xj>vzfV
+z`driBYx<S*yuPdHb4>p))0dfk#<4!XUIMI7%Wb{?)!d}k=eNFIztHk8rQcNk`n#Mu
+z<nDJ<-x||DWBTfQy?&65ujQuy%JixCdHubn|J?Ms;qj+~5}$i*{Nz}Cxi)@MyLkOS
+zt^KE4dycU7uQh)g&Hoyc^;<)Ve>oSm`gF7UWtsms&Hr*PcJ#R-3;U+kp)&KoC)e-l
+z-__=?zxB^5lRpo~&tg%Zsph|j`QOXxpKJcV&hq{zn*UPszta4DWAz_p`4?JztF8Wr
+zS^njg|6Z$qhS^_k@og}FUBdlu?fam`muvPTExt1I-#^>OS8e`RS$ylw-@3NwY0qk#
+zzxP>x<eGhFi>H~{|7PP`>mPk~%JTjfoBaZ_-`nDO(ew*VKiJAoHT{7W-(1t*YWilT
+zFR}c~O#hYn?_l~lmcPdI+jHN>&0o`ZJlxkWA3J?=4l~(~e=|*AX8J{@FEjnirmr@A
+zt?8>xKd`qiugu!#%Wb{?>YIIeH<^CA>HBQw^;x%h{YKMQoBmqUhwkwDW2`?`S^ZYp
+z@utk`w~y&pn|_Jur<?xoc6`V;|0h{|y6Dqqo#`i<{vy+_yus_gv*X>v=D))H=bQii
+zEdIHc|8dJ-W5<`NreAFOy{vv2c6@o+^vg_NYWkIb_2m~?{Z?A}pIZ47t^7VVzaF;y
+zpIH8~RX+b@t6#O*?_%-g+WDXj>kp0p)EVCXJkCc>e$>mocJlIiJ0GrV;^i94zsAnr
+zD@|@*>GidC{P-K^Ir+=C<JI9NmzloUWUc@8dEeyaHXmPBc};6VYpnijPDkFZCX{9C
+zhus*5l5<SH!So$W?qc#NlXJ|zhso!doNMxUv(GU3rZRtiUVp8RuLt#Ok&+f#ZsTXM
+z>C0~P`h&?Yea0<bo^Sf)HlFu2eb(Jxe+~7O{c0Nz%S>Kx^W#X?Ytn~*zkFNM=i7R$
+ziTO_(l;RwoOn=K>*LnJM<bTN-j2nIKrM{BGzlVKqsh7jQFaC!43;&*TZ<E8npL`C*
+zIDdnkyHLAryqsp^hvI$t7kd4dR$ln`wZE|P!oOEOz~asF<{@sAdjGrmguIiy9R7Xz
+z-X>=?_4OTY?X&V=FISly{=N8VIX?gL9^T&oD?e?bm&;5}ZRh0`R^RaNU3WA&{QJ_c
+zTYb`O{rsBcuRYS2zX$W7MGEV)wcejnB`;s+<rhq^n_l`X;D71!?~~;Am^pd%`(AEu
+z_NkwHxe4=E_A6I;xr^zuY`*4L{i}J%t4|yHUG`ZAIWcrWsg-w#mv6E5S(xqRrKV3y
+z_wr6QUc<lNeWtZX`1i8Ahy9iK^154p)>wP&XXDj-V{ebew~~jp`sjv`;tT&i_I#7W
+zzlZ&el^6c~?^8_<|K9egR(@`0c?*T^G=2E@#9Nvi{{8NEkEBhu;d;Z4hi@L?<;5oN
+zbd;Cpnmpa?kFw)Wf0O%|yobphO}^daE+!vg{vI=bNB8pn?=kuBCfAt!fZ6Y7`Mc=+
+zL%h$M{yfwFVDcQx|Eb9-X1~VdrlwCdf3r;A#N<I7?|o1B_G`!bCR+YvM66s^94pV~
+z{19#b>T$91bpiV}X|ekEvSa086JzBx##6NaHf>|&R|Ed~1?2bJ#M+NNDOP@v>y&8!
+z%X-Gj6UN8NZ!(Xf?b|kum46JhM_UeP(e?*Th?OthHCA3TCRTp5L#%x5s95>yy<_E0
+ze~Fdbo*FB^8Yq8#`&j+Qfp}-`9IO8*(0*?XiPdZ0XLNn{**{j^VOXrZYL{4f&gfYA
+z!UJOEPMmL|{r?Zg^=SFK6Jq6axk((YpV2l}-u1v(`ImtG(t!Q6fPJUH{CGNG|4_jG
+zu7G`qz<4@pzu0(k0`V*kwEv_)`+UoJEG3i`3V+7B`4EvuxOgJ+1p)n)0sUP8{ZE1R
+zKQd6?ubh3T?sHUNe(fEYU$>8ot?#da_UIFsUq=MSqn@{>)Ro3>&W?|jwLc(Qf3>sE
+zs>^Ywo39c1KY{vdUsH7cPJ!`u^`uz+oq_RJ7&sml1?tmgkJ$Xj<;Tk31?GSA6Jzzg
+z_KB4*3C#aRf%$*$X|eVl0{#!%D^~x{KzpBXa;*N1!14XJ!Lj;5f%*Sc;COd>VXS@s
+zK>xosC|18;i&*))!13bIz<j6*wC{s~_TB&BSbr6P_MIJQ-%kSVtA}9G<KsVp_B}Ds
+zzNZJ;_n^S>@8LlEwhs6^>G;_4rU%;hSk}$a@w^pi-)VvN?H1^-$$|DAc}lFmPXg`x
+zLZE&3FNn1t8ff2l0`2=!pnZ=FjE|B)`wk4uw+jR9dw-yPrv=)#O<=r?547)tf%d&Q
+z(7sm%+BZ9J{JJgBzDok_`&giT9}Bc^i@@>fKRd>@=j~l%<*Wg*^7t;X@~wgM$;A_6
+z^<4w!|1$%}r_SAC?I#DydoNI4dSJb^Dp1~>Kza8C%9|f3Z%Lp$?bD1N-{%L)Yf>Dm
+ze>hOy^MUfp-TEnV{6A-`@<-&^yT{6lb7SS}^J3+il32O5n=cW6j}490f9Tdj5&iY4
+zvHH7<V&(JP_=wowwN0$PYoI>c2kO%^P@iK0_30d_PgS5k+7B1qK79lAIV(_~;eq;`
+z5U9_of%?o1)MwHNl^6N^%blMi@*9Eip#AdE_Vc^M%ButOVdud3)JBTv{FevD%Y%XO
+z**q{lhXmreJ1{;o0_Cj^l=oqvyhnz|#*-PS|IhAt7a0$`y7hQOzPLd7Bl4H-_!W@{
+z1p0S%pno@xjLqLX(4Rkyi`DlG^k-q9KhJXQ6Dj{$*M1TC7}sAB`3%=z5xLB@Uqo)@
+z+Akt+=lUliZw&Z<DBwTE^-sk9j)4D?fd5ki{trJcw*K1$>Nhgr|KouF>jVDp4b0!F
+zK!5%mn9tfT7~Q`w1p2dg;P^9eRIL4Hf&SdVt)C<9aciJIR|ooYFE>6yb)Odl=jSFa
+zo;r1CV_-ha3appU+)438KKmRSE5Du{D`y7g^R5B=<pKMifp~Z79_#NPIkEEEz<jS6
+z6s!MbV61#gKpqsZ*Y}~K>-TgZp8W#nuN&R?inK@bK>faGB7a$R2Db#{bDPKNs{{H0
+z1QVTqgX^z|zt)pu^@{@bEU#kfQ|$D0;pp8yG5Qq&{p^;p`W@Z)isWbSTTK3%fPK4w
+z{@8&2{(w9+Aa8Q*5h?G3fWOd~38iBu7F0~^U0OCHG-h(q<U*0eqA7*tGs-G^Pb}cS
+z+|m-CI<6>QYEj|1ih>bE<;CN%YFCk&(XX^>%D95c;?gNy`V>?ajL7UdW@u4ac~M2t
+zluDO8WaJP`E2b5XuN+fQQc_xYZ0Yp6SdK56=G=7ctq4j77GpDcT(>TrGRmsPmJ}Bb
+zESiy5d`3~<ah<w$&Fq<1Jhh-Ifqg~sgee7;RpmvEvd`>VQB*XpzNrs$LQ&<g8D&Ms
+z&KO)UWkN~OxZ?{Z7Y&%wyL3ur(e%pD7^_UbAwzrj9W!W1cAqireA0j+RKPWDMG>_2
+z9!gtyiN>3lH?g3cl4)EeCUiCC*s9`^%Hk<w#+Q^9VCVxITQs3~N_JskQAI^Ksc6c$
+z*o3MnMbpcQ3M-4o^(`+iEl<!~37WSofq8<~jc*>Waj{HT*T@h`V${2|yeP)d+?5xN
+zFQK-KzcEvb$}1pF#*8VPIH{s?(wK1t<<p8u@y$n*7eu77<;CMB6b%`B8rg@MMzcX9
+zJde?&rs!EWE;BQFSCvmKa^rAFcj=3#Oc>HLH#|&73=U-IF?i6xzJt4W>ygZ;``|%+
+z^0Iq$Z`h_=*JL(5U16CSow_8m>eMBN`Cl|HyQ*>`)3dnHP0-$@<BIA<pV3)|gDyH6
+z4C#7&>6F6yCY`hU<_+oGzxUuo23>LnXZNn>xm#XNcBii0>ZSJ>Fr}iXkO@4b^WZ*R
+z>#3EkbB``@)4OJNs+S&d*M*#!PHz)3k4J0tZC<C5c_kGiO9K7eDR0K)$wigr?%*>b
+zyLa><F0-o+0>u-mN~<c4ol#j-k)0jPA1T*WBfBU&vy)oAU)2;hN|WXAkv1la8e@!F
+zF}tuq|KSF2glP}wSIyiA<8Y5O!qod!H#Ndoev_I;_lQ5~WcSXS9Bx>;HQFGvlTJ&y
+z<)xLSg{387qi73rQJ9@^Y>!6R_0FsF5;-~~nOQTkv%@{mKfCvg>HYJDg`;R}{=k^}
+zy>7xC_DAxoV}5V`NHzRGPwXdC25x}&DV|VNQOPun*J@_Qcx{Xsp~o?cGZLc8imM&C
+zrTrJ%|Jm6Y-3N09FPOk7I^*~F(ggL5_s4xjI`ohEir={n`ONG@M{^ttcMOxTPn;%k
+zW>MXo%q*&#6PQ_Pxjn~n2=C4MwUUM9gp-Dy<`zFuE82R8``nDojA_M{6NgW!C>USV
+zJ7dP_<Hn59|9K+^j_NzGq#r&?#*~yyoqU*IaZD~9S5;EvmfcC#HhqdK$_gqACkD<$
+z4XrrxCX5^s$P?$Z9mlHPnY+%W{&=rbRdnjsr)YdZRY_$YC&wuh2Cy0~FDor^YlsmR
+zN&Wn$$Q#+UFx=9?X7&f*SbgNs*qK$-kj$QarxX^HRaE)nSW*+mh|EqEQLE`}&V(`N
+z?x_=E8#KCcdgc`su(Ib`WJG30VR6~SqH-<n>&G8-5^1~N?IQkCGBYE$oa>v)BCdHx
+zWOgqvm==2-)o^HCa+yhywdtSXkU96~I_%mh^Urh`zbT_u<$p#){&9CP&G^UN#Wdm{
+zbr<(K<##n(yo;GX;3)Qr=XW`Ze_8aqT*ZvE%uY<w><Q&XMU%OX8j{i7rf#2%KQeRw
+ze6JdJf4)}@zdze+(&p{vud@GG>(*VfXLjk^n~QE;!n+$rblJF~@-08u#!Tuz%W2Hi
+z{&Sp0CV1=_p@(jPZE3aZ=J=oHi)sER_==k8e}XrECJm19sA1S+de3g1x3ulL<i?wi
+zf81-l`S?e@CRi(Vt}K|)@IoZ+8mW<4ldbl+QEh9$qHzsJ5pzh1%>L+QRz^2}AGBXa
+zcHazZvVIvOf@{8H3#&%Eh&^2Vt|(#;4!^@if<r;L4qT1)4mU&J`ppo3?r%}%;AC%P
+z=0vl*k=bKLLU2|`ox8*CxCE^m4xDu24~IX)PrT#7?};bg5ukB??3U=UJeQfI$02o3
+zEn<X`<;9h#8u4^wz?8w<O6P%4K^~8P>hhEql@t|J)QPdT-eXindT22;)|}@tBa17i
+zaL;5|!Pt^WjQv=E>280_&3<?JJ*KR@bS%2YKB4kHrxZ<#T!Yy&r+($7lk+%H#$HOs
+zjHtR}OVm<4Z^Ga}mdM;oYF0PN8etW?LatwA)U-+JE&5<@H~Z^5iyYJwnl$n*Xs~7c
+zbAssmq(O`1jw838+%5P1!Q6HJ8!}8@Ox^9%g#Hs+H0;>jhD+)=u0?Xkk^0&V*MtQm
+zu*}mFlEH<6u^)SvCHh2M?}k}+b}+Yp6yP3R)O&Ifv<=@k)t#N#XDC6-Nc{e(OT!r=
+zPdXa34R>oJ!f;;IQw`h7YvU{<m9qy#2_lZ}34c#bPepuF<t2S6;%(~Z=k{&%Gm%7Q
+zdLk0+k$SiAbpt<v5vM`B0i48$wyI}TKjL@}l1&o-I3{7mxYZwwIk~ss4ewy?;0<qo
+zzdNo~q*ZXLyW(-JBF&P(s#8~c*iiqe@0hZYL&gRscifxKF_%<>3u3b*TOHT8O}q@Q
+zZ<~0%8?=p_T$6@ccXDlnRdA^qEHdikn$%n1rgYFvgDZ((hCp*io!IMJ#x!<P%b2E4
+zVi{@ZBt~`3+@MYD3MN>As3uP0DY7t$x+5QSRqt?A&mi_mR8So`2KQulf*pv0M)jUY
+z)-zBck$GKD?H_wargS|6<xi}R1euwEVP=9blRQz0Q()8+mJva9U@X?VUsc~eW<)l^
+zK4x4tXdh=G8w?>bTEg2}0*AB60wtI=yc`LpN1EO5T#4(Diq~tt@WP^=LyeL#^mE)C
+z@zNt9_$5NnW6V(|$(3s`pYPx;%Ag+Jq6`gOyaq!`T9wFcuVA+LHA!Y4uOi9p<JBW*
+z&jLAiqhn^L!h(v*VWobmj_FicI=%j)X3X@-l^F%cW@Pls7<xuYzv+1+NA(>)e2h-R
+z^&EEU#3em@H^Vo|!n@GeN12y9qoV6@p4;{q(SJ-{G26F_^U7vq_vxQkT-lGmlX>kN
+z$E&uR{Xw@1HtMck;$XvpW)o<mf(?3&AMBR6&FraQ16w$$e??cCv~#BsW1`!a=A~KX
+zzMpH}`kk7rxih<{sOgpE1%;J41N-#*FO{NBWwU6(lyU#XLNX{s+m6|FH-qsPZmX%Z
+zP2Fg$?6+m@qn_Xx$yMZx8PToIsP;X&r4GB{kn{SV<jun40P^QL<jDUgIqdEmF!T4h
+zi)_vaE&!tMNq5R9ES+4&2#!1_;pQFFV(gg8!tsUUv)utK+Lw;FbvM&u7S&tsD|X@V
+z$KukqiX^ABEe|f<sU_-u?Up-?ckbC@hj}Bru-SZEW|#5Y^VIg%A>+rhb-hzT#q_*l
+zor6mHS*O)I>tz11S>8GRx$M7k#O;)ztUp$RL|*?J=Zwt%N(~Zt{k`jn8UFm15kJ;W
+zzjr;+fZN}>o@l_UJ5NTQJ=X2DufO<-T~8!;`(GK|3EKM)&QI?(a;T16BL((Q#@-nU
+zUoa&#id?$5tEc3)?!t(p=ZK_c;p?iTMv*<~NzLR-S6oSrB6aYWU&)PKC3FWov&&dL
+zchjLZvJEwU6E?y$5`=5W#^k7L&PEuA8?_Opk)~~gakzmSVH&BSZ{~zq^2&O+ubS}$
+zvIkc}1%<_xGnks(>@6Ns+3zGZao*&LzL{mE#WSW)cRP41^Ck~vBX9S<C2mjG2{RC~
+zj~!ac^_H`b4F1R+gf69JMN`Ift*T%<Y-X2&sBhIEN9`lFZy5BAx<56h-fq?Dl>@T}
+zWDKbL3WBcm0wqV^-q^yjdpB5i|Kw$N(Ivu&?sid<*{yg=Syd&w;0Dvi<;4XhT`CGn
+zDzmd2ygS~rZi_A(E&Sf;2{GGlW52MWKB?CZu}_0?v$Okl(G^A)J$AOu-6x!(ZP{bC
+z)N@qdR<J?X`nKy7eE}-i!`adOIlX>|X7{aoP<r~9%7M`XB2dROvQHm6bWC|h{hG$~
+zc*7Az_j0_5dN)3z(%kqF`Ek(AUp8iTEvqQ18do}$OUTm6jD{}7Q^uEOb}g-{WOURW
+z*LX4!>Gu8^BV5<;PsW(M30%&{v`p|DRvG}=0|O1Ftl{RWm@#>5DPI*$)7SoRm=>9-
+zF}I59E-a#MC9|a=aqhUcx|8OJci+1a8DejOC(RK5j(E~6(L>0(KdF6W3M8<e;TpPs
+zR68e`^l6cAKLtyz@5eu=-=ZwZi;kQy+$nJjBG}@b$pZ<WJhvc%#%F1`Xf0s2u;|8R
+zNnUiM5&ijk3qq)$b&I}?%l4I_u?wlVv$?)myeXW>Dt6x1w~9Ym>)XYdq4kaGP0RWw
+zNjf8Db4{RS>bA#d#A#XDKiGE39Y?y#O|p8q>-;xln7o+qd`Rp+p+&=vHQJLqj%$(J
+zaiqR}_$MwPfhG5rJ9X||RZ+<nH20k=zJ1J>+$)Q@k5(}<*DYg5<_)tyqfeu@;>?b-
+zA;;&NQF*+}UhFZ_p}q%_xl>qCRaRD7URmKTd|e86*YzBOM+kiX+ojm+BEl(kU#}h%
+zI}HO*!yEp3bs&GFrQBeP_g(3PIeafPCQIEFTD-3-2mFU;O(RVGb&)P#8(|zC&5baP
+zTyHhPSbjB_6Pnf^1@`r7SMi3vUhRzHxCnl|I+30KdUc?Ulh3no4@7;Rc#HA}#?<e1
+z6Yj7-lHVO=BHt4Koz<|zO+r8QHbdCgs{_T=+s=^GjL>brL9|(%k>I~x?aGR))z_;7
+zk!(r-2X|m?xi3x71YfV-;<zFm`p4pmjM3=MZOCVEw^{fL(Sd3>Gin{~zhq`n-5h1c
+zNn+~%EADEW+QxzKUy7gv_~@hoTA20@_n7<UNx-4LrXh`!BjMNIvyx@4Ui=bb_hvdY
+zwzRvF^}hS;YP!g908bf$di?Q5t_{!WGF>AH2Sm7Dsdr^|9YCc_DMQl`^t#}t60xYP
+z#NY`BbEwV0Z@<5?R~Pe@<mzxS&z30FTMD;^kJ`t)nnr!uRz!NrF`1*mxJrVa7+Pnh
+zPSYy0n)qqYW@Q%xiVae<rdMCNxKST>X-p3Y(|E;#9Mc_K8nx|XGU^8L?pl$<$vnw7
+zPm64pWck+^fu<;;Pqev%_rPX9%0x1H#lO+(Mz*{^e_TEyx)muNazH7ROF3!&N=q{=
+z#09C3#6TyexK$epTVtE58E~ScXZk%`J3;y=s~9j!ze4RO_gky{K1<%#i-{Oy%WMP1
+z8M-Hmy5B8}EV(#Org=`=yqD$GG+Q7fPLh0>XN&a1B3q_s^TqTz&(FT3*b08lF?K1=
+z)}z`W0)!ApH}N(f63zpl1SR%Jp3zB&<wY`wzHK3+OcfB*1IiiV8NZtECXJB$U9yQ6
+z_iwuSw02giW$mHwSfZJd2fE7qfhMQY<1;y(zpUd~H1Pms$qqWqV&sql)|G)FVl31>
+z$*?TfJ;}iIVCrF6+AnkM7fT;0@QKhQSfSf~qmFr7-=<UEMn7P&6@p=@aEfM%OnAuc
+zYPGs<_hI^g-eiPTo|ZVfh5ad1Ht^@cXUh^{4}?-naya7~$IK97>_V?wl{mz>K4!^a
+zI9<Vj^Mp7q`&~X5s+0Ce2zJcYlYozScn5Hg>e>QiVSf^}jt;jg+FVH!hm1PYY}&Bd
+z_%@THS(d$^d6GJRRKXMD8LVx|uR(3;-=ggEeL{br<rgrD*fmjNZRK0V9N)cIgzBs5
+z^IBeLP>~G?20lKlqU^3PvQ*Tte^KH2qPam;L)xYrE7IEiTlCLuP3`QMhZXJDM#}e3
+zHBwsjk|U%z>MU_)qC?3|D6GpmG?d-M&dIDjp*i9(M}+p|&Qb3`LbKa%PiP8kIVH4b
+zfFg4rgeF3N>@`uuxA|n4Z|C!Dw-+Mb&f@gf78=g<&$l>J+x7)=AgFD14u5?RI8J>3
+zIejEYYKGsH{Jh*JXUGjVXFBKNluR^NFKZcb)TOOo)5NJ-)9&D~y`C<B?~I-4(`<D3
+zC>IPb9Yr-BBKup1AKTS*!_b<NYG9WGG0a)VAZ-ES>3yIPh<(~nb()*OgXPPQN!TfW
+z*fD^CCp(ivhlk%$p9V1K5%obQWvFyz2`KU7G{O0UZy$|!kMXzg8E!itd($G1zACpn
+zU;w}{=j>TEuuJn<HG47!0zpOBwEaC?nsfZL7Vb{PSSQf_#8e-&I;@Q~(nI)+4rMtF
+z#HT7h*53Pjfz>>H39%ZdA0bxL)J$5Px6tpB)i4=%TCau)xkFjC&1Rg@I+Pe*KAEUM
+zsI23Lm)k@7k`-#Teq@;~nLVKgBDCocMF`b20m6@mYl@%Uh08gR`D<i(g8yISx@sQL
+zdwtnn^*7hpS$;glb07v`Xp}UzsERRHuBAQ7u@<4;<an?rwIvMf(i%UF8D$MiCI;5~
+zM^bOR9aTnP)AF8jvk}ol$pgqX)qd|Os_6<0%U(dUSqSG-geZ)jHTF8$k>1VT&pSOO
+z`uRm^kh~)VFMhMkRHLig$ox@g{ydr13U0<RcVLXJ_mAGeiJx}d6_OohL$pRiqcBwy
+zpS{UafT+qm{9IO`&c*?HgQyCmYHK>ou3p6$W-5@XP3zT^WV8;Y5~ZEipjbIuD3!{%
+z@Fx)$8IOQ29eAP<986##E^6U_o3k02rj=b9Fd3L@YcgN1(^U%F?($g^Xgeq)GiY~r
+ziQ!$Q-lNnxgu83V5sd6b;s{1$u&n9U@2FpQ+(H{gHslT~o4hmU^asLA(_JB+mk_y5
+z%jSw>ahdyp_~SSqh*K+2{|J6IhU!ElGj+9;LJSm&LUF#`%rEFFpuYf1ke&HF%cFSw
+z=~En!R)o0#_(HQWoz5(()`lvY>~FoH9Nul#WOX-)!K`cr3m2jC-YIqUQ}%C)4_cY&
+z?>~?Vy%*t1sBPo}K{v_=4KgZUC{tbeI7gI9^$-ZxaZLP=Z;@2Fxj>eqJ$9@39__PR
+z#rRmS-73CE`|T2Aw7tPUBW}2SV<Xy%m%!uTTD&4|sFzJ$VJBZxoY4~Y#@-Y3f|DaG
+zIeO=$^gIS22*v>&B*m3ry=Urt>pep=SnpNYi`&S2&ZzgrxqPk4R2H98c#uAxNOj}S
+zdP5+Y;sF!9{D~+W@_$yKp?br<xnxwl4i%_K3KytIEDKaT%K||wqzfc}R!$4@sz2QO
+z=Y;dAnMmv#{SG2E_ud^uW?z|i5UIYA<{%<7pB_Yp88(z3<F2OvQ#c>lQdX}(@bEIh
+z9RX#6I|RxEJ<O>mP*`CV?l@cKn<*}R1Ns8E5W2Q8rOP47+{CVjjAmGj5$ojP<WNeY
+zKwV|`!-iBp$e+3lPq+hX{jyJHFT3<9d09<ipM)hQ%Qtk5AN*8>k&4L2bfaObyc$Sb
+Mn^_f3=$l3V1Jj|5j{pDw
 
 literal 0
 HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_arm64.syso
 new file mode 100644
-index 0000000000000000000000000000000000000000..2e3e6e2fb579bee1985980e6a3d4e1b676fccb74
+index 0000000000000000000000000000000000000000..ae6d99aad314a9d30478eaa03c171729fd988441
 GIT binary patch
-literal 169880
-zcmeFa50q8cecyZTTo?`5MrZ^`!Zs2!DMq*<DNb-qUhpv2#WG0|9@*H&E!;a-;Cn|l
-zI0$fq8zgi4h=TiwhA6x&(&G7JlY1{&G>ghSpzEQUS&usETckr?XqUR40*s@MP@|-Z
-zt#DNfz0Y_5Irp41XJDkr>RNf4wa(mg_SyTlfB*LW{eJu3`Qz9A;>LS}AQSMXe;r)w
-z+W2=L7k~F~oywZq)PMKwGDU;0stkW^?)f(Eb-hQ4{B7E_WAi`VVejqpXa3>mKhu2n
-zcjFtI@LEXxr+YHNuY+JPEqL7L(eI{By^lT`N!YaM6RSS6s+r*NxVxDYM9HwVG+%Do
-z^l)KEA^IGL=ka>N75w~{GBJ3~lJ;)XrboY4-m>H8H|_YfuWsJHdCR6vaeBX+w}75@
-z1uvH}hX47i8N>65@QT~EKH6kp65is1g}2)k{N1v}Z}C_rSdaw9^QKM3M|W&5Z~c;c
-zmxT9+4qn~8zppQY2%3MAP4o|V3H;*x%lBIRe!&&`kHC{W?*2i>=t&fo?j8R&eP!Fj
-zrNW~no`2<6*8ihsuHSX=X1k=eN1R}qSz>paHf`(eD{d-(rSPTA<*i$`CH1B1;5ju8
-z?w$zGS7qRe-miSMP~5R;=hm;4w>}JhpNLlYhYsH3?Kbs3;ECRK(EF54im`Chrp={I
-zTecUzve~{&%HwBuTKfL8eH{$^x`p>w<C$P4X|%JFdu4u>@n5=cOT8}$TIQSdrTiBm
-zT`y*W-)$wCd*%Djf0+p$;NkOgT7s^MZMW-4*Wb^%>wob3GXT8j=B!qc34cFL%6(ia
-z`qN)FZDaMeom**i<!xJ)#<iGB`24it!`HTLe<X<I;g!kf>2h##+qQ2G%SYgE`b1$n
-zqG^Koh%2vpZkF#KOfjE$?D3Amd&o4bb=$WUH$VEQYho$%Z^~`kTHLvP`{u31Uo&v-
-zi{tgsuRXeB^H)gIUrKpPo_(E)NB7S1mv@x6ZrbwYZ3W+Rq`-Nw_tDMUcR4|%zVF*y
-z+)>`OIp^?5@K5}2GC6@yLY@=yrquU|@}plZ>?m4w_U|Xa`ATnjD{V#ZQ}jmlJOou`
-zL|`zQ1kOX7kwAHe<$pr2KEDovCxgFw?dBauLvKzmv^=tEdvAHi_R0DCsRw_#?8Otx
-zIYDojXEJ=Y|Jqk~Y)ioTS#V3h`IT+O!k1U=+)>)Rbw|1A8z1>R+=w1OBm?%~)@@ri
-zKeY3!U){Fd;HZ2}KB-T&3`i-TQwO=D+*|%K3|?0#J|aoH{`F^SuV;gPZl8Mn>))&X
-zyX>Y*Z&ZTO*T0^ry`BsDAILu5b2-~qZwVg1cqQ8+^Yhd|5G)6;Ig5kGd&X}I8rY#Z
-zZM@gL(l6iE)p-5ut7^dMH}FOTuch`n&&S@=)u`Xz)u`Ut)p(J5Kb#2~OQr{n#WRA2
-z#i6_Q#)vKV>gWE?+7BND4_Ee$%FNNfrc8cM&?xK<8odXDM)7dacz7siY_125En9=e
-zm$nCuDs`0h^GiLY1N>4~X;;vArt-n-&t$nOAK;g(@_v4~D)af}s@%gbSLJSgxhi+@
-zt7{(jT-mw&&b>YtTA#_bbKidbvFC%vW0$y|<2ujvtfAvcXz7O+PcGzFbhSOc>3ZA3
-zu14GIU4PQ{OF{pPzxZbd%iTePzW>SDEnSVE<>Qyi-Cd1w=nFD4Udpcy8uyyAk6+Ah
-zu)N`2J--23)&z~VZ*00=TFY+|W={fUkA>L=%+h*bW`h1Id=O3{yp0ZCZwkCE33yu~
-z@cJA)cq({XwsygP@wyAybRnBAWYdLgx{#NVcRjzSt5Mz?H0}rg@;-jS|9*IKKRo&S
-z@Z`npd+Sl2^zA4Afv(0&@a2)rdtZ9w1U!a@W5|%S`Z44<h#ZHI<1ljkHgfz9ay*J0
-ze;+y4kz)-xR*|D{MCa;xa4R1Q;B}^60LRjipix7{Rb(9I0q^ormk0by$CYO;dFGlt
-z)ogaObTViRWam)-9FtZ$(bc#r_$Q(NjA;wVAK6mx&a;9ww_Z9IG``y&d{^yc=h?2t
-zjwSHsNLM3&$mZ+gx6E^?ud6YT%Z}EwcY^<&*R3v*cSX>k4|%fN!Og?-0z6k8eMc#K
-zoU;3<e{WagzX_MsU5zg<4d5TNg5M*{g2o@9yT{PoV<XwoN0tYTdiD<LxZ`@;4B%uw
-zeo5tvlvmld4|dU}AMfel(!0K;)Uk{@*7JTjb%SRw`8KaW_Gh{p!`W%zJR5kkum2!B
-zz5YV>Hq&Pq+E)gRpMS5VeTT|ZPI&7w&kKS^p(AMIFY!xzQhM(KaOvo3ToEn%<M~Uy
-zt^K7|@?RkTMVsI7zg0M^?b-bKdAy%bzVrOr_W4wP7WXr4nZisbw^`8AZqxF+x*COc
-zp65~jd=G~-e-B;-@Dh%twOx%o^c2>>uj!=0r#yTrz$f#*m-q0gu(A1GJkBGJ0(=h3
-z9Oe1AtLqT==z+?sZ!ImdeQSPE7yX#}({B34Rkc??H)8ti{5el^&_7O}eU(02{c|=G
-zv_CNI@tz;>ELisi_x(TOdub(COJLyVTU?#|=ATcby^VATAJOs0Z@h6AeSByWE@L;Y
-zyeDY1AurjQfy%wtzaIootBnj)HeDC3-X@IGx6jCQH5R^}|Lx#=_kS}BZ?0yuhPD^6
-zJL=OGV^aj<zpI{zEo(z3+9<0!ROk0IRu`{k4gK`lo`;qnGsu5GeT{+n`nSHXGQ#O*
-z_RZ6>_{V$xq-}c8ULCpj6u-av?}FenDq9`dbgFHJeSRO$q9^!K*FnjK`V4HPWk^Hk
-zjeIU!{GL+zC@+#c4B&;}s0|3mtMK#z>`oP4wA};GTpPyO{&~T=LOse?g~wh8oAfn#
-zo~%c*dPnGchh_H%@Z%UhLmhvidYAQ2{yw_&Vf>RNGobl>Rvu9qO!QISV||nZL8Gug
-zX!Pz18pYlCC`X--vIie!FFpx%l@9YOALR(Y@==EPrQXuMzlE<NKLs0QeU>@KXEFW?
-z{k!#9X7hW;^~Y{tM_V$D$FA{9Un@UG`jg*iX_U_A>935Bfvqm}&_1!%G5=+K!Z)A~
-zq+Gx8H8!O98iLmg9KqXS;mvTi|9<&HeQ|hw^qJV}{)L&DFBP^1jgR9G#p>T4&tKji
-zssCKuH|gC)Kfb%Gv1Jc-iauBU@5A)B#y8pTe3Jv%wu8<$ITZIze%kmZ?~C~+j~wo5
-z^c|thkg>J>|046gm%e;5Xnc!4;}7spWPktQ7XHaG{F6HVNe%xb=6`@&`M7)r>~<Y|
-zPvCzb*D8LB+PLv!uodMqE)TY(bXIxhkjMHc@&#n`ODFLqI<uqlBL?wTXye8<7S1Pp
-zi8JIs+huKnyRR1UbDmXy+D_R!t)Fv_eCM6bd=?vd!RpM;i^2sT=Tgwv>3y7w_&AHm
-z51;bzE5sdnlvg<1cZ1_f;eH3Ww>RlSR^??bk7Tx7d1jO64vWVY>hA4oT$8SDMHWi}
-z^aXx_UwLWJ=(`a#%ILWFYYNN3VVT9j_%M220d6ZPJ9JxrUpM(*4H~7_EIoa^EAy_j
-zfqcL(bfZ5PR3~{~ChsdI_IdK32VIS^?6mryXIqUO+PT{CVNKAOJKOnst1TZMrhEZ;
-z7(ad~@RtCu<+lFvRqA~qXk?L15qRQLetys>EO4+ofHlj)%FhSJ0<Kv>Bj3*T9QmHN
-zIQO=r=d+x@H00orRv=9<%lquTY2T#FRw}*JV{t01rHy+Z2HXnZXmDA^J^V8Fj%TJE
-zGLY|4=xvrO9U=`H3kREN`7=D9b>)w9f5P4y-)5e*tND48_%@fkT~6_BW+Z%@R_dM^
-zSUhKPf310MaDNAAGJXy;{onW>r8VeJYtVR(d-2xD9bT6^xLW7~9j{9*Hs60t_(p%L
-zczMLd%X@=HVNcNLJ%lYf;%w1z;^pnwqFv4w9dNejptD80-=YnY{h=@OHpto@VrBY{
-zXNU_PyNazr&%Mo2y!_Y&BP0B;Da6d{6Mg>rE@N{{%)Eg<-^a`wt=vO9)(fvAb|+>>
-z`VuhvEKFm^w#Mz)mhIS&UC3%T?e-9D?TE7@(&;_Uj_gIY`<xxwAGaf^G428K(^kS5
-z_ar<~j7wZ?Vq9#=Aa-PkICq#h_uIs|-yzODN}T)q#JP3i+!}VIiXD-T8`}VG<-_Vb
-z=nuhBzC{h$#Nyzi<f*$n;GeWH)v=b*(i!#r#JJ9;$d;HGi}u`m*0kF&&f0lSu;~BK
-z2aO-y>H58M^n1(U%@DeOxXZN5K7M60OIxj7s$-XGQM<G{VVB@}VV5ggr|b#J?x%kG
-zG85x&AjVzcVqEZhWF;}K;#+j?*f23}H!&`@rG{<swm{{JlvjI9#<=Abz+cI`Zt4Zc
-zUh-^Sjoi-?-;T+SS{oFNZ}V${Mq#a^zb9yX_I<9ermXsa@>;H?L8G+9>ZSVC{1UFK
-zl%qYEzNv%zMM1nj?*Pw5u0KCud7yH>UoPz>2A)Zoi<G@&;TZYM^nIo+V|0RY<@rwD
-z)L&W<G|JC{lWl)b$(G2b2p8E41E(GO=h?LUZt9)K^L%hxVBvaOWbx-cxSIP2j^4&9
-zy|e|Ix00{7X&WR9V=wkK)ADulAZG*XF!$(-?v1@z=Iq6?N$kaWPy0lBQF>p(UPwMY
-zT&;nvtJT%X?*RRkso$rq01x!y?V!Wh2<S+Qh2M!d?rn*6MqI3OFlZDG1dZO^L8G__
-z`%)*?IgWkVi+$PW?8^~nUxu80Im)kMo&9go&dA2#3r{vKs~G1Q+PrMeGql&oUZqcc
-znd=p<=ecNiCf@0_ayNDYoiuTY>_i{-f_NtupKOiWi9Yn0c4gy}?J4oeu6X`3eOMSD
-zosZj<-rcmRJ@}V<>1XzdFW42@z~<xV+yQ4-4$^)PIlFQ=ZdX#{lOytLDRVRupPX^=
-z3AV+=C%3RI$FMD_W2oR(KH>TjaMW1ngfUdwZ~3gtL%*!C&*&Jc`f>Tfr88=4^sCqa
-zjirY134K!w{%|<fd6xX=T>EtQ)g1B31#A?3{UCP4w9WJ6d)D<|7wE4pS{d)WBwVmh
-z&tac@d~yl<w2b`lDG$F?-t?8oqrBSTz6TuF2={huY$QHGR^^p0k7U-ZJj5{Qox!7z
-zy0^IaWIM80?&1^hQ|#l%Nxe-{e34&iaWHX*o>zn08p^h`_4lm}OgvL+%@{n(ypwIo
-z16#i3mW$MPj#%Qgpi#OpNo>*+Fjg5f3L6|RHWI7(7^TPZVzb~NlhO+CTn_y8z~8{N
-zfU+H2w4=f+wDk_^dV#vGHR}@H`9-{6;@~e08h`3-;UZux;c5rQJg(=-ch$<qjI*{o
-zJ9pIbK=FXaU<I?h-`<;cO1h6*@*SivaQVTt0L}&n_$Ypwd&fiFYg|2lo_AZCwx)EL
-zv@@g~YNqAS@_f#fKf(P;dvEN|d}n{=Phx+byNUg2PuQQC)IBS(c+TSf)#kmy{T-mm
-z*dk~$@ybTzKGVf3@KyXRE#+#pc$Hf1`-{XW;Aebx&GAikpEkev!w1hYr)TFE-(bFA
-zK;u=F1@zUrG(V^Lq{lB-bHQkku{Kz8ukn0eW}RtY^5v`a>*}MUzI?Sa7@a|x=p2$w
-zTX$W3Z-#lWLE5OslEh!Z9jJU3Sod7FFz=oKvxW_c!mDL1tU17X8vpxSE%Gzw)T_`i
-z01dhqY+X-hzi@p3zkCq?d;r=84Q;_wLzU0r%YXj5<~3Bm@>a8-Hos51-)d#ub@^Ze
-zJP+Z!U&WUntZ<L*^Kqlf4bU$Qc4kHg>6_XZ>(|)-5dERX#)n;>Sk3l;N6+=POjpB?
-z52@@>_95oY9s)P@y@FxqvZ~q7kpD9-za4X`W<N{XXQ5?1_^b#2&w+2-Hw_Lv51ME2
-zfwn<tGc;8`59}`h`wJn?&mc$55C8DNb7t-$O-Ck-tLAPSt!6Vu9|mRD;bU_yS97=X
-z&AjY)k(HUhh3A^XHF`8`%LyN&M?6c9YS6nFU6I^tMR%Xnr(9;DKAE(pK2<w2qZ#0M
-zosx`9Jy}=JSkSCz#N8)+i~4Xd`YB+<^o+D6;E6rz?_dnHRtZKs$g>IEjrt|^VoF)k
-zqGgBB1C@)lm0U_&F=>`I#lN*qi?5$IwmSR)BirHZI`m=o^+EWdHsy8C%AI%Ut<^Vc
-zGY8<yAbM!^#f~Qq5XTN8JEhgo&q4IDDt#Qu;1ArxyL&=^AnFUqj#tsyo%3v*RUHdP
-zTi})2dZ6D*Fgi!SBf)4Jzk|SRyMsQQxjCOE+7|MzHYUEVGqGWfcu_iWS#6lSmX<iI
-zT4xLTGaI>N>UGMlqHI0eV&tc`u2@{{vo>aR%EPKs&frGg3}p;#(hT0DWl2+iVD;R+
-z2Or^|#I*@CW8Pa>8B24;@c`UZPZc}_Bc!KjpVhb2I-QOdTa0e0k5RiYe976gXkSyU
-zWL+C<8P(XZ^xn(8+L?ux*{0vo{CJjo%Rfg0`PJ^E6SbV>vw6?`4B?rzc%gUStPQsq
-zIas;`SMLQ=^oWn>9lzBP@zT}9v*8tKVLg=yoMFd*(hOgUj`umsds7!_Mn<GXWi(N4
-zlk-^ptn^s$<S*1ltRCRkGXJN(XdQjj#5vpn`rPV><*&iT+^dbLAHzPlXWd8Zkp1>`
-zjANIl)}PAm!b957q<ty&M184`M+d=g+}JD0g7$7~Fu#dDQ+{%+AEV7vu3!C$<}XtF
-z5_o2O_?&FeouN({y5Z%3+An%jb@oZT8pJ*sUNAN_hz}9#OR!ag*s3bFYD#?x_I2)U
-zwl8^_GN#^~^*_|7ggQ2C(+1HG^)XTXm%TOR$Yb=7_n{sZZ9i)8t-wE?jSl9T{g!mQ
-zSuc4yZ61?G-#GwYgX&Y=nDKz4QSYT^)$DBbm2(ENljs*VT794QsqB4JzpPFh93!x$
-zUxIyYs=75YgLdh7H)eSx8>zlQZCw3AT<4-|v9$K;9;0(rbV0bLt-*Q*9Z`Jmb<@I^
-zUJ5?Hre0&m>NRkY9BRW6J6xH>4i|53OMgmsI2Vlm6nK3rX@@&g%97^ou*!ZLKB`>Q
-z4r@Fy)?O-2`>S@AY%fEM1rIY8Jhs@bk?{Sd_hC#w1MlXF50w^c6N<KPtrcy5SY;g9
-z>YD3IhclzHPpSHht{Z*keW=gbNWVH_^`=T%*k_Je*{Q!1O!Z-dMy~W@yfgj1c_*2n
-zgTU50E&0jdZ^o3P_P#nSdS=s)%r*8&Hu|$2&h`)6HZ&+Wv=6mQ;TzifG5b93)|5y$
-z3_Zh^2I`qJSABD*!;5siuaC5hK0rN+=heQ{f33;5bsXe1?Uy|2&uyETN1rqAI?K4{
-zNCwd~BNIad^yZvDG3@b<;LI8<Z`;-0oA#FbqP4e1ZWU)UNi(=+v!lmy+0j1m)i{dp
-zCuQR`Mj{+NUrqT=YiDFrB_G4rG0TsipYQle9>XW{+%J9<rx_ooR+(mOv&L*JE}oyx
-zpMpN4C-Q-YZC>MdQO?L6I2Nv5Pp5vY+Bwa%b<=0(rWu?po=O+bl;-<KdoNp5qnzsU
-zew)gea#;^AJ6au!`zc{RO&)^>?+w24OGYAo3HRpxuzMf0y>w-!U&n*KW~VzoD1MyY
-z#J@N_#NW_15_vb)d{;H;&}PycZSLO4&A%U>Zu(9`SJC+=q#6CI=p8VM(@no;@{neD
-zMw;iD<#7a$Tm+9!m*1p$9^0}85C48_S`&|~Eu;DdD&WL#6@4~14O_mdEgHFxS)a%D
-z1)fgF`w^=jchg=5)Rx{Nyi)M^!J30L9ayy2@Y%FI-iaq^epj{P@XNLu85&y5z4{Y7
-zr&e{(=3NRs*vPQHKgUkWM>V>WYn^&q>9lzb&nPE+O?~cuz{m2DcN2II4Apxx-ain*
-z^$fU1*T|_&jo-#t4{aeMKLdFr*Sk&0zZ@Z6FFGHf;(UM+^>?$cOHZck19UncfPU5b
-z0rFRM-SG<=;|ISdx%zG27ML-ew6)f<krT#+Oq#W|nm?9ZkiT&+@It@B;7t26IP+Vv
-zI&S)&qVp?q5x=6d=~u*Td^Ta@vk@C#p-$#|wJzJo*WSjD-0N)ou<K)UkyrxW7#p8+
-zHlBAz=Q<NMK1;iTuEAk!{Ft@JK4xq7g-&02-|P!*T}B6?)$}PN*6x`!;0dnU&jcIK
-zJJZ*jckpe@;(seUZ|qRf*8ACeoE^$ZUn~rRL#Kt6oVPXYoV=z#q`p|*$oj{&X~C~P
-zey8ilBl*>L4OFPd!}sF_6<c5EKe%V_ONIW!h{jVWUv&OM#rY5DDg9C0e;}{zza<;n
-z&Ii!(LHe7R|KQR@+tc7?_>NsN@*E)s!8VEa6Xcn+U9xSJh;8e%^~%5SHbVY|k!Q}r
-z9Keszc%b};+L+ZTKhH9tSfbP6!MLCIBMg3|8$M*6Z&JZG0axprH0Mxk?7r^$pUX!9
-zzWCtRKWR;`=GO(!v^C1#$NSoE8$3>#dbp>|skR_!Z)2S^e%demyU5;@+L)!+*@KJz
-z+3Ja<+tMuEa<;zH`75$RMd0)6^+A6BLU53d_!vxnsqnUKz{v*~rX6N2tUHjM?OWV?
-z-zHpH)nV+1%OBb=_iXUxUiGBfFWQUV#c&;K_D!9<Q(NgEjx&3B7}r{^ejgq5duz0A
-z+4p&}`ETd?;WT?8n{)ZD;Pe~s4^Cg^8VKx~Wa+W&&j;Yyi+6RMhA%z%-H!~q_0#@6
-z&b4{}K=OU7EzcHZ^S+dL|3F)8&(cBFCH{(Da5DRq((sMVS+K6E`jD{|r~DXz<ZEmj
-zJe6&ey_lwUDO+2ydJxWWG{>$_rS3x_PO^KEv<FG?u+~#eobP^y_GxTkR<W?wSJ^#D
-zlH-82jdp$mKde@?IGC~SoV#C`oI8<!9=B8S%hi@?gZ-L2sb;Nj{&8a?ZQGQu;oFvh
-zKVsWmTN3`T`h^61lh(9_zK^o@aDmZjwSQAb(ZSVteQuIEI#cQ}X;B(%|2B~Z+s9cN
-z-2DU^T2g3GT9gJ`*3iIwklJOFhDaT`N$TiKsl%j2X;7@)oO1}_k6GJkX>j)wXh`ve
-z=!@bs*s|U)iPI3NBR5GMohfygv?vYMZ}4)kZHT_qv>|>?8&cmI@wsSs_tEF8FV+}<
-zp|kUE;d5p2xhfwxm0VwE`cm|IfY@K-irANzmi&zK8Nh-5{nX<3*gnhqHnj?4bF`7c
-z87?3A8$00Azt?8dWyfQ4ggl!#3p$N08MATLn49mbj!ZLsistm1^Lf_Svv}HZe{+vK
-zRHxQN*RpPGpZIMFym}FM$BLQJ0`HFzzm-X=(`VEw%p1zrcXK1cL33DD%Gq)ENNh=(
-z!IAQz-vGWQ4Lrj%WFkCdE4|$e>wvF*T!8&G>~Oc^CDn?vo5Qw$>fl|Hx2rlV55;Ts
-z{nwc5T>R^6e((NYpZR<B+;lTO(f0apzO=B@$$&KJ^<rxWj@61bW*`6Bx8^VI2tI0T
-ztCth+?kBHgcx8brkE|(w%9VfQ8(y}RCeNKL+r@t)1NSZ_(_tIKhcc~*r?Z*Mor_HU
-zo<i$4TA5m(-pbUbTbVjPXe=tz7Aw;cFVi{5bj}2ssy#_Q8gDRiC4V^POq!KpM6Saw
-ztrAHaaWMuo-UlqraV-?jy#7RFdjh%2PKtk$mF#$ve@*%(^3T4D@sGGx_BG^Rw$<_P
-zF8JqTbnC-e{$<U$r{$kbxBRnXIkjSIq)lWk|8lLaP0WLT^O`h`xOVCJM_I!^@`wB*
-z&G3)3W*cy6*+|-mm1V8s<=8SQ|9T_*D^1{ElfH@kv+rX38&2@A;`w(E{L^?les0#b
-zKYy?JQ_DY_Zu#fN+s2~&o96V-^G|zj?Hp*dPig9(<KIYxf55Z)7va^gORGfEMx38s
-zadI5XPRc(T<eX%mqCIz$^*4&UlKE}_;C$~~eBFZfQtDFQz@EBxt%I5DKFz0`u*RYC
-zUb}bf<;-cVuj*xORgtw-53}B?4L`E9HFd2dK4i)scE-{D++BXV%0>5u$yYRED9&fp
-z91DBG=CdEHook-fmpy(lKhv%=lW&oqxytOJm%T0R2A_maQQnhS>$s=OtaX&nSlDaV
-zMoO1LSo?q>So>389Z0}BU}33WE**@on+)L{a_|nPz&nzFcO-(_Pzr8G9jtl^tm6q-
-z$0N9%aJb=9#ArR~;GIc<cQyg<Yy`J+DY%_?u%1nUbs+)kLIk&qo^N*TM##5I4&HMq
-z@K~Q0otG*<AHj`vd){yBeSx*B*I2LmGVA1CF?s6wmsg$EJ}M*Q8!52amlcEEvZ}c@
-zmi3L+cm4qW!~5~g*x%0@kzxF>Z@a##gg)kHWmxygx-EROnTxEwE>UlFhV{!z;8mWr
-zsv*7khV#8j;ONu7cbhG<b35xEH-bC)^WZPp<$D9x2(qrUqB(Li&iGWhmpogv7LK~F
-zw)K}6WY`0q3HO@QuY_w=HIAh<#5>&_)eg#(u3FeT+;53>g6dQAJoojuwV{{5Z++0{
-zqaBuMhu*H{;co$2dVApYdWR$T1$SS%0q)dMc&)2h#^Eb^#IMo@>WK7z+JB+6ACMO1
-z)x!5%zKBl`(6>c>tnyl9iGOuvq06(DwV2j69n%_F<5w-TewE?%8t_pcaJS7L<#8EV
-z<-6hYYOUX8eh{1CU_G)hDVx>M*KO(U<JYWxy~w)ZB4;Gvzt-@L>8mHq8yY#RL=J8&
-zaR+5e=bRkeuht(MIq)2=(LG5WD<b<woPT5FfDZL8M-D5T9Ju%EPD{^%Cv|9lWGFlE
-zEr5Si4!;4<MZfqfzi3MIo`Bx57U;#l!*86F-et}8%{wSl8glfyU#)jF^zt0;nLGr&
-zOGU5Uixc85y%W7lpm(XGm-}%4NgaBrqj2=*^!~D=xAbP{JqW!y=w<vvbHkI;y9oLE
-zb0sKK+Uw|bzuK#1=;gU@foo^GptnQx&V`pvUoVvJ0_g2<^m1Qt_hzpObrkm9oZj1^
-zS2FiH>)V?4_|s3A`C*?njc0!^e?xnc(#HAJ_vCw_ua9efVEd{04o80T*l*K!xis3+
-zLACGy##mpzo%i!xnR)OPf57DBUcWx?74mw#%^4B1Y?;z5>TC}hFGt@mBW<R8KhwT{
-zA^Lt1X|3*kt9}1G@4eqNC7&oe&-z3gv!@I7414Y}oGX)QJbWb6*gTYJY&l9FDLP-_
-ztONbNn(8Cr-=z3R^f&IDpHp^>O><1%PtuxXd?fiv^exHpwft+UhkYe0TN;mbb1mTN
-z;JShT)WYwp{JzHZGS@3ySGk_$y5M}Pa}nR_9DTEFr2L^4=t=rk*u$8uq@Txr_Zxo*
-zA1ygXlNUT}qk)GVnE(&F5`#A{0uLRswm0I#2p+c1!0SkXw<rN`Q3T!+k6*;^5WJ-h
-z-m(;U%M<XHN8qjS_$A=2bnv=U;H^%;TOEP7#^Yz#!x+Cv_^oyDdQ#x6PrzFrfw#fq
-zmw>m?!Rxi~qU(3dTjKEgwyZMyitcB<P`NMD_&9TeHT<7gnXQR3TO(z*yE6Dou`;_7
-zWp+i%?DqBGPesqD+7mBR-V>p9ucy_<k0I~&Ia>Fp@a{kY-hl|bgI*SPy<_j8RkZb0
-zwDncA^;NWW{F}PT&)F2Y)1?!xo|7r{oJrJkCQ{E?k2h=bD|g{v-i3cT5C3u={^i{3
-z-@&#XrR}R<ETIee^YSwpPr=Wuf7<#nCDlLI`I+EZKEKNNIjiQl_u%Z)zTxH?cfN+7
-zc?sJ={ycOD{)_Vepi%q(#~Gh1P)_FnlwZwo4uS0>OrERQtLI#v7wAi$C(p~|dBx@_
-z^IpDH=`652Zf9Q(zUj4e-*o3S!NEU$nX{<=k)31RdClSWJa*zaYZLnTmCs)~2+VV{
-z`um>4Cw+brm=_$(i`e2{aWF3cQ}|H6wAa$R^SsOVEN4Oay3do3_ocnFG=Kjj7xVd#
-zU&Ky^{`AhZ7H0k;@XiM8bwwA>1&#c((0Re~poD%%M#rW(U-KNaoVB#{@>}HDoFj!U
-ziTBYxKBZpZf<s{=Fr2Sf+HY|$?2DwGRQ=>T(M%J+3h>FmbaK$WbVvKAvn}`n5nO&E
-zb-jw5sB1hjo?3dvrg7x#oKi$bGrws0BmKl?#{K(~*dhG;@2z)vPDcFu6ToNOv~9if
-z?~kCjC-8&t?^peT<9V8H4@u@uw~q$wk-L*IeY;n$yfJq=Uq_zD1KJpS0`TSWMT}3p
-z>JAGtY&S=d=aAD)ezmW$v;lbx&F=4;*TUZBmeg2m=V7OFN6`0Qa=Llg>HBeD;=@W_
-zef*m9)7Aj97nrkv***!(gAV2)^!<NvFb@J#_)xyI+v)p$m+t`j?(5!9KHir)W>2o~
-zE1kZ#cB7Z@XJ$7(C;EN^eaF8r`jyo8ebBPk={vvL-yYL<(&V?AveI{Oi0ON`#l5hy
-zsoSL<(x9oZwwY%3X2UnZkv!!48<<YtKZ(An9*>LB_qV$)r|+E4G)FolJyskwC7oFT
-zO+$C|_bo@hD<+ZeZYQ@r$ZeUE@9vxE%o1Ss0&^)amrVk5yMwul`0QsL%<aGwK9nzQ
-zcRJJO@@++5|AEWbM?T({I_{WMXMW`H%r8P`deNCB=*$*$2H&)RZ<?wzTaZ()(;0q?
-zJjZl~G{qgE&VWNqXF4qIg#}IhC@mumnhHysX}8juGsHbUzWIsO<#gs-)FquMy&0XE
-zzp637*t0(?F)bF|xxvY8BXV2h<hJ1^Ix|x`)6TwLbf#w#o#}Bf*VE7ZJqNP~nBZf^
-zWc!@Xta16)qOZR0HRR)csiS>To!R*z3p2kOo#{qr)}S-1(HY{JLiZ#(vl^Z0b~?jv
-zk>{AskQR=2sGk9cn9j6V+zU6FF?6Y&G-%Qom$$#S(izUUjmOwOiMpK5Xf8o#GkRMQ
-z>-S!<b~YB<yEGHqyL%JcpGlAHbw);hWnlZ%mE2#=g!gI>*u;af?|-HE8ec;`hsM`*
-zCYIi73{n1{X*<hFU%`1O%6kI7o<#@nTgn%)Z_BXnek=<Zsea2cTmHYOJid?d-}Y1f
-zS;{YMmKV$^`$9`C%=0e(&o6?8B@Xu`U1prs(7}C_-lv6w<9q1{FgjeBA#gwH=<OhV
-zk)szoC3_{iRXzm13!3;&s!t1Sc|-3?%CDh(H{}mdetxt3o3e%TElf{uNW&h|=cUjv
-z&*s;9T=kpkKh=-w%!qP(6NgD@Xt(9-Do<Z*>`4dZw^Dvqv;3Rtn`c>=zvE;U(y)>A
-znJF~PwE2HiIM9yOp4G0)>%pP5iNmBcwA%8&rt&w?kC~LGuPCpjd`q+Zo9ZiCEX;=;
-z4SwwDjckUsZ`s=GBj$Whji=OqbQ@zj*?Sr5xtH~f_u`A*d;M~b_ndcm<#w}9EM<JT
-ztMMb&jxqnodg*|3uX8nE+jFnqts{1R$2jMhPR6UWvA`d1OPv3mon^-Y&oV#y9P^{+
-zgGTXL=0`7Z-pobLo4It;u|LN6rhdkEcy7!Z#_ZN|b#N`>n$NXBeKYf;uh=$V#y!->
-z??Okv@#f}7%^2QZKQ|W{a}&IM4&Hu#lVgGh5_5C(Rp4RA1P`XnLkiv@2k&qSydw#C
-zM<VcsJbsZeH^DpV;MG&$9Z$eJ9)Wkl<ClPU(!o2E0`F`B-q{Gea~?lC=GJ>2p9EW_
-zvlexh$(Bpl3T&N`(^=*vuey3(NU7&qqMmD!dS3Q;zn^iV`HUOQXWWSO6U;$=o3Z5Y
-zWbbC&$gV|E?5(prw0}fn5`BwpEL#G%@~d4YW*+>IO9M}zcE!(Qg0oLs=+esI?qlPH
-z@3m!jyiDJN{g18z3Fo)myB+7ir7z$tvw*Ro3}<v%-=en<K5gyNSYustR^{Hn#_8av
-zbCAmDy2gEtUG9a4TWnp57j(a)yRBbq1PZfk9<4XYtL)x3w;zLi>unn`V<f!m#UAvo
-zrQObBY_G??TT8y4IP7ShJ2=xO|60%}+_3pI=NZ<;xi}^-@-7HI_M&$K@LPeu(ZS!q
-zJ8V`Irn!fHo$sc5%>kNoEKedEKmPLqY4EUcHIjy0OWT9SpD2bv9zO02<#EEoi^*fi
-zrfDutb?x9;=ld7dNI#fgW*$N5y{nPOnut7BM&!|rJm`xwE^TmM30~b6p3V%?{f=`p
-z`tvK0$I65}T4pxou`ICVX%B{9_&L2x;MZ#SwbZ>^!n>t$*wH$7bW_g~>RD>*(K+X#
-zJoe6r%L5;#cRBEv1Am2sza020Qs6_s&N@<E=1d;=6g`utREKZyFgn+0#<-BjHYX1s
-z(}nUlXyL`=vDc>UaPM~TtaFWY_TB(vz}mxU<k5jV7DePSKO&C>8ppEx7Y%RbgVzE_
-zle>R9mmT%{C6veW$n2GHbJhO5J>Nct*w^0M8Z?I4+g_X*SXs3KduAMVw9coAOSRrx
-z=b|V*JiCwfVD^uamVXu)JP)xKUuWD8v){fr&%tl!-Mkd|&|iRl!PFe8#&Zh0B5h$m
-zY49*Q7wYA~_m9jTJhc_}XUtI?l;!espKXd~cxPgw?eUoC$J^|g_Uh~Kt8TikO8W@>
-zSwhtFWLrl2XW!=Y-QR&aCaeX^wvN_1?LPBi`UtJvt@FGp!<tKEtv-7o%RPOE)@SJK
-zAf0iU#V;9V{n0Szx(&O1;yN>Qn6cFX_8rtnukv2|%ltmMsu_=Mzy3pDO4e1*Tae9q
-z{B~<&?!7Pjr%$-=z^K2geZ;J{K6Qn9l|OPms2RI&Bd^|dkhhvM`yx&mxH-Gt`{^<5
-zThbnA+wa+X)}``ZYXD7N^s~yGiyvpv{ynXC_j3Y%zeTtQ*}xMFv;Rx=8C;$K2al)r
-zcMFDr&%Lipe5`ibwXq=&JUmmc*38;{W!i(Ov$PEipC=cuQ*#&Q{fJ<?`ndP?RcYI`
-zqFu9Y_T^UeuE~pLKDS<%ykT0-u059wK9pH^Y7CkE0Nr?lbabMB@r>Z~_doS`&tiM7
-zv*E#Xc<~+PR7x4ki*e-h0`j@)zRf||e#J#PTSDu#Eq`p?@|ldD7416zkUu<YeRmss
-zqMyxLJ&BgD0Y^HivZ3BGx2E$yLKqdvz|yV0(eJ|zWnOF<eR|mL!K!J$8T-s?=yJ94
-z{_8(SU*ct^Iy_9_U~r~>e<q6PQJS9bGy2u`lIAgL!+M^5{fYPZb>Pwu(NDianI;YP
-z93p$huAQ6Io;CI$J^56N`q<2<Ib&qZ!W+!Cj9%sZpfN7LhfVt~y$oyF4bZS5q(yz;
-zcj=c0vR_1hp%<Jqo~E-Kq(6fd(mU<F&gaqoLal{1a;mVFo-!Tat#gUA*X!Hab(~+s
-zoN>0r&^LoURkOi$Hn{3LL+V$w&ixvBR(&J*?^?(AiOjv%KlP1!1=Hw^VE=rJ9UD}A
-z;*0PR4LavR>z_BdJwO9FXd{2xnib_$8MTRf$sfkwm3N@u2Cvt@K8^2NW%LaX<NuEn
-z<Lmnsm-&{}Wny~HDP|pq&Yip0?7<i!=GQrHgFK5S#jIC}@5lIF!w>jY!xheXSNf0m
-zUc>8O|3vMLoQw5Gg3%uW*YBr$5!rWemcv!*>wKTJq2`+{z+vB=9UqAB!0f-9X7eTY
-zTdQsR{dsDuT4$UVFHf)`ITtUlZ8@!VioN*h#dg-t%wz2gzWo+_d;0T(Z{m9sr|f<-
-ztu5AmH0?`^teIiX+<qg=t}iw*@_vn}==^Vc9_wR0#Lw%wy17=%e<Y5^XSKX0e$cqr
-z0el9<(FgfW#=VCU@!6rSX54$&$AOVJTJVlIcta`hjwaw8jliq>crO9(xPx~h1>VU7
-zyps`lXFPt9xL5d{b@0xmz&oFScRm8|S&v@=-USEmVhX%V33!(x@SgMdMb@qezvmsi
-zt10kaNWgm`0`Ho~F9Gjm2k(^>c&{ely&8e{n#a$c7pFem=*tZUuO%~4Us@CEK!^(|
-z7hgL?954OrWz4cjeEKl4>E`*YH(?yLz!<8jXKnZC5;2d_OX8jhdbuo74{=Xe&vL)6
-z<sSO@droPc>kwlF+PCs;+R%4sLr1ZT!l4Ae^TcmD6H`9e%#T>xS^~E+W7B4?eVI)&
-zW31q(a@hWQ9^A{j0_tV19U8PwKlVKkXfWT-+e@5-AEUFs<YSw8Q|IgL#HZiUhfgnm
-zf0yl#`uHvLTq1_cchBtaBMvPShk85heKO&(bF1oSZOL}def=3XU$qsOl-2tJF@)A4
-z7jMv?3g<nH)AR<!kM<i*rPrvJ_Zt80?X~qAcw3lLTWaC$Adg__yLg3-0XPwhn!bc{
-zux5*%;H5{VJ05KW-Uge$m)|1KX08hPS{Tqun(oVzH}^)~<aIvOQ)VoOI<*eA&5sQ*
-z&fxJ3(==`morNXH$>kG$qS@31AH`SQOV0Wp-%n|-oH{*@Kaslj!E@@Gp}BH&KtBAG
-zWqz%Tn7H{(w^W(0bu#Z^?(wIb%-14w%8FJa^XK6Gg^0{oM`Zpi^z**J``*>IjFI^o
-zzIoE=WKJH#!<7MJ9mpIzQoxQVt?llF%)5cN(&q2wx5#r$=A`+t6C-op8<~?H%KRKK
-zs8io8@v<ykY~mTFT_p`V3(q(6-Ad-akH4q-J&qc$d)w=BGXEFUC7GArjLgp<^Wx3d
-z)$d&HWWFM3{LbA@=F5>eWkZ?Q;r)?_%$G)Fei)j0U*LW3(umBLG0%OMlR0^e%ohc;
-zsQ^7}j&Zczmyr1q;4N}8=eNjnOy;EN>}kO>GUwjNob*uUjAiH>6*_M{l<!az&oJ!-
-zY0#<pFrRiSnJ<ydBRH0R5_Rpf?cA(A-wTd=9RDKyPMiEa`U35Bi;cyQM%$i~UmqWf
-z3BND60C*jNl}88qflp^-!@Yj7BL=RSpLTVZwu8@nS0;i(X+G%-+<ff~;QD#KE!dfP
-zLCDk6o9R#IS(ukJcj)WyA+0^7{&t)9KPc}7>VJ;si`2b_YgVNGtGv60oS&b9oM%~>
-zC!_VRAZ=z!{WEReW6FDkI_f+RQTH;g)=2#)csEr&Yqc;B0rO^KVr?#_8^70n*H^OB
-z_Yc)pxF`0r@?<T;lT-TkVI+o0j=%j~sY~DL!@uhH{Y3QJ#uH<%xpt1SHG8_ShnTCE
-zm}?6$S06FgR${L0nZ}oPW$gF=c4vq^qvu#h&%um+llbOw7vs?OOf0{z(|vD=@xa(O
-z|J)u06LUS!H!xV+_*lp6k3IGRvDh`Py|X^{*a?15a$SAz$4tIM*2bE?@(@1DRrFJ_
-z*$ez8V>A5y*^zOEGHr))*4KX7`|gogO7LEB@Lo-U_gVtpYY})id~A_`rx-x^wWj#!
-zGZQ{K{Z5D<v9aAp5s9UQU%P`hF9jYkbc|kn$`Bs0wcSUNfY;&RElPp6BmoaUGK5FW
-zVeyN^Qo?VUgSR{d9&vRHKYY#*9x;Z+F98o<+VF363cNK5cxxi?hzBfwk=RW5^*DIz
-zQ{Zh#z}pakx6$M0VzXXihAqTqeZ*#4iOsgJq8$N$H~#h>vyY*kZ_S-9@5|V4OYi3w
-z{k%W=eaQpy`uYw;_CFkK?ti#hjQ0Cx4AY+1pf%O`!;01H-hgW>T&xDJ<-@B?thUgn
-zfwxa9e9Xlr<jaG*`d|~kL0|a26!M$zr4XlS96Zbe?d9|Gy@>JPfxgYC^E)(#ALfBC
-z<qIwk{3%^j9==QBY<3ww`EM-y{jJz<6B7*1wz%!Y=4mfu`8<2(&hbsHvwUN#Wmf-}
-zhl0i<=Q54H^IYfN*WY&};2V?~#xQI@A$z8=(LDC7)IF=;kCE;;A>S`PCc5J&_U&1C
-zP!I6^k>l}z`91vllNMIE9{V8gWDC2gubyFzb|$v2WamlIO3Zl%-_fs^J&7+0e9imk
-zFIk&b=2v@e`&xi=2)u{D`>3s}v~iW4!#va##<k+7fqR&^#=+eIE=n)pFO=4zlijOq
-z9E%_E@WG~kn+KlOO!xA>c+l35eQa-IKC49EIuJRhOygaeAHz4hsC)Tg1<K_qUs{bU
-z4<Ltq^p8IFT+chf??K0W+J4f+r+v+|*g7j{7cYc+9$baLxktVQ<ZSMdvGytGUf)O6
-z-uy+18PS&qrlKE1xA%W}EBf&&y73xU@9q74een5Z`232~k3Od#TY-P|_NIR9o<u)x
-zK-c!5QD|XZ>Mr!-g-k>HT7+ZYcKEUjI4hxhH*&tp9+l_OkE;p&*yHqLFY%;b8@uNw
-z`Y{BYUhuvI-p@JxSnBknH$^|TFxKJL=I#I&;b!z>0kUt8=*Py0egIGF^t2vAV-hM8
-z>IZgsAgUi5BKpC-(GSYyDPNk0er$jb>m&NHh<AeD(bNSqb^~sOWz976-5~g<y46PB
-zlzyzY`f&tZm41|_q93e}|ME)ogEjJftdZ|yEqmVz_`Ilv@8a3D##$F(`j3^sAG)Kd
-zA8RJjkL7ON@(Q<ZIkMKhuN%Is2F@(#UW0x__KC#CtkydH=wXb>oqfD>?M?Kfo4p~+
-zz<VZmvqwby)BbxizrQR+KbF%kIk-E(Mfr_>yiA;W)y2oO$%mIl^aFTi-!<?3zUxpw
-z@Y!Peu_U4&+#CI%oYt<Gef>+|!=i|OyvjSlf2FJ0f3%`A;!{gRKj5EV$Ni@DW0BR5
-zdFspPcYGf_mA;35@Sysh+bBC>%>d~pPTfDXI5m%tYxKLr>iJ>^+r+8I!K)6QXSn7E
-zZ>=57r|bgcrdVztJUmF7q%STXhUfE|JpWtu#q(?(f22BgfiwM{_PB?!?WH%_cH1qy
-z?+PCML7sj={X=;RIM0gUOg*a4@bAsmG0WERFI5L^Fpn;o?<~%Ii+rAG;XNUE=%{p6
-z=WyuzWYL&e^}J=BZMAi5qmC)fuT`|}Mtj!oU_3whO(J4B=Bl4zu3F!~{jTQ981wgM
-z@@PM)_&UUVwf|nw0CT|lzMTAT`E$wmO5g8}`tvouiQ)ZueLLLx-ybyd-&*4_$XXAr
-z^H4qHV;-OHix4ZCGhM-L5Zv@m-_g+gxm}CE8Ntj&M8Bn>xd`PO*7r1+hu65h&ZfVD
-zKj-_=A?7la=V{*SJ5c(*mHF05WIp*%vvyoh--8;+YF=C4g__O1J^MrDhnTw_uGsJ3
-zm@}+N)BOG*X?m}<DLQ+0ko6(n_YvOyTOet3(3*38N5@36Kl!!g@9JmsyHW4zr|qMs
-zJZAT<e%f^~@AjYO%+GiG&+nP<5Kb7&eb>IfYu|}MCalMLxBq;%|9sc~WL;%o_IkYj
-zb=!Z&&dASYM~8?bVrSkHkC<<^5|h}yc=K(nV%A$OAZD<0IXcr(-~HrVZej_gah^SK
-zk^FxX$H4n4Yp6_|MBJe`N#DDQo?E0dMq;rNaYGm@5pUSJ4;vdP4zcmi7t9)Tjkga(
-z;v@gv9epRa%6DyT{PUSu{3G0I#8Fk^9)0_Ei0|G;=N`0IB#KX+n1wO_{`)xNN&c(W
-z#`^Do3)UdzHJ;?Z4eY-S5{=9JH+VI7t9VT1Ol(B_rF-Er04{>njFl8~eZjnchIOUU
-z@9@5(G15CYZ=4n@y{oJ5>gtr^rFV7pPuhMd=%4Wy|Lowq{p!2@Dt2PhJqSPEcDCmC
-z<GsN*;0AJcpJF_}hdmYgy(qh_@0?Y!?b^qq?~qn2^ZDh%=2x-(1Io)cx~{l$++_ca
-zZNs0?x91td@6jGVrP*;!eJ67+_PDLCv-||Z?`_jQ7}?Gjc^9?6UZ0yj0XCR(7HvKD
-z+rdN5rVcXRIDk#nJ{f)A`#qfJR?U6>RNIUc92uk4x5g*nXncn|EsppqqBVviKF2L_
-z#0Ls-#0SzhriXwlob_$y0sIe-<5lKu4UX?i!I80Q?UR~-BWYE}V=W)GrhxCBJif{J
-zSC)_3cX%s4+HcueKH70xjd2?sE7}j%6XJN<<9J8#tA$p(?!e2sTC{uO^sBu`NnEvm
-z?mp6M^v(JXjBu`X>ib-?p&^cUEvLNNLwR%DYr__n=dt!Bn*C0d<~}^_dlD^GV46Kq
-zoi>l>`#<+I%}t?+xKVq%>|Vwcns{$$>a=_93{4}BCfZ3<7PYY{(v-8XLYjCsG*O4a
-zKdbLDJDPxL(x_8;JWUUJn(l!nckaLgZa-)XZPR>H44&j$gXNl=3uQR$=;b$6hNK&M
-zM<VnV^*s^EFhOrcd8Z)5u>`$58+u0^y~7cDD=w{Q^LTpigkI@eHLJa{|CqgW=vKDH
-z)IaXOA<VPoqkd;!zX!VIKdV2vpRzOV2u}azBm8nE%s=FLdM5Z7dh;Y#KXaN-7Wrij
-z?vv;F_4_gx-}ZRV52$M#-u_p9ue$HwslU}6hV}rePW3_8sL!<T557s6R4l%BZ()iK
-z^4`c~*nXSJ=wPnJ$)vew*z7MXTAtjpU5!{+p$_tFcsJbKR~YIbFpUo8Y#uL@<Irnm
-zg6+uu6DyN3TYo4Mo(<fr{VrjeOlExLZI+3t%gW?`^)gxbCS_7|-(BQ4wVjY|WKyx;
-zJhOeBzI&o}^1*n&kW=0%w3A^AE0hV(hIiCq_+QL6`-PlK>$G{iOg<ILWC1eSXk{{D
-z>knnZvw=HiX-t#JZ*F~?Wn${GGPw^NwSV2Wy~WYJ>3=O6XP@HTQ&sNS&z!oS`hjgz
-z+fV&T+IezM^#C!rkF$Tg?VK5Bj>g%vBle<Z>Q`8UJ<gug@!L4ZTsGHzdo;S%_?B^O
-z<vpX9|0Xzn<uTSHRD#CXZ!ninAH$ln{_$@{?tjbdc|G+^mVK}2j~$a?t{Qv)47M}&
-zt(a_c@8%nS9W>r}iR&-9{*3ECas3yr|G+iE_3yd<53YaB^>4U_xqgr9TkPGyryHa`
-zjq&Jw0<~rEdZgg?j{op6)}a3eXE#*38b73*WOA9ZS13DPnbtr4HTd+~Jpb={XZ^v;
-z+g!d!?eCRs?9+YJuBW;DwXWD2!C$3MfAMd+!gXw^^@6*p7yPe)|9I#0{_#hs_xE`|
-z7OA)B@_otGTcqAExq2Uo*ZYvGw`Ay@kxnoCGxfs5EAVi9gnBno@4w~wnMl2#bNRmL
-z>irz`e$mytDPHf-yLz9vS-pSe;Qc4+`7hL4Z0#R^h<g8+=Rb+m`^zrhgRb6Rrrrl#
-zy${9fz01{Gy;;3~?clvcJ%35P+1vWZKS{k~Jpb27y&re^a<1NwQ*X}I`^k8{Fwn^N
-z`>x(A?t3pUqF0Ma(|N;Hd}Y5@wu=Ak`>1j9jQ>s0(At7hCU{zFF?B!A{T<wo|4kQX
-zz35Dg8840B^{x5n;%U}Bm@`erzs5I8Gr>n0OVIkw9=-b?tRGRGy1&l-Yg_~{b5eb#
-zto50q`u{X-PWs^YJL$Vz;~%9BWwmBP`~IE&|BU0$M;w2C2L61+@#mv){s>?BX8)Q?
-z?O=Q|J~1|`G0vLeDEthaxe(=(#zr-+81jjG&!;LeNR8)^PoInM>2nD_@h;>O_nuEr
-zycs?b*BL$$`wbEs>Knr2A5ve#cZ(Ts4f%Ah<5Q>O)4lMi)A8v;>3rJk_|(Rk8QLp3
-zQJ)mQ{$uD>46FMu#`&Z;7vC}D6ZavX7>}*-9P;U-5k7r1!6)8@eB$2oY2};Y6S0HU
-zC%a}s>vG2Ll0MmS_K;7vJ3ig%_{4b!W1MrK@$SoarSs|i;E`rujsD*SU95Lj-Q#z4
-zo&NLR0-j)fQ!q1ijeqa|+T%S-GC@P<mUutd+fn(!I;TYC<^M{5->AH&f2w2F-_O|f
-zM%v#541DkS+RUkr|E1a833J7{d(6I{Ue<#aSaX<PI_<Rj1N<{H?or}wa;?d-;~w$x
-z4l^bq{Y8(pK1*{Mww-CsJ{N7ibcVI2C%KMu)wzzgz{|FJk@c>nLtF>B4sh+~+Q+q<
-zYZupcuB}{sTpPJIaINR+;abbZ8Na2KTr0Sib1mc2dR)$n=DZ+mHfIG@@cS8$8FaB<
-zslB_gb3wN$Bi+fj+BKG%uPE?NXKUnHhb=!wv4PfO&sfMhJ=Se2ZqOR;=vYko+N#F=
-zj4v)>d{H{_bIgf+t0m~a%=)rCYsYthm*z(FtnUftITKwvp?Qx2>&g`un|fGxuDKvn
-z2kXyo6_=D+TFjmm#drA|8AH3^?$BCuTZf6){2I4Xw>f+JshzC*{n0<Qx|QdQ?fk_I
-zXQ5Gs_2PN>R)Bwk(|eJ%-IrF`eW<f6&ia0VzFnaArB_+Uc!TFxnrm)*Ut?Y4RnlK3
-z{rOdmO~i+7)6rk(F1$cG=fKPV&a*E4Uu8Mhf9WSqYaD8VY>=^$&9ip>dQ3L#dkAI2
-z{s$u)_EZ?YvA-fFo8vc;4SO|qphq#;u%9E8&B=&t&O~IxUXfeM=DgkiV`Os<*`TXN
-zHs|4sts^cQd&c!sJ1=A!pZ&6vjn1?_oMG)ZvN?im&~tyLbuasKiboQ%Ax+=kFtRxV
-zug~#(G9sI^$mS^NCrBSk$fi#Eg;k+!mV4PS{x(52v`HhIgDJA<i^yiHlg%zCo9zkN
-z?7E3;b|V|weM~k7BeK~Ok<H$SZ1zn-HU}cI*^g}KTa0WDz!zIbTsAFtnsL>ghcb=t
-zZgR5eMK-+|&XGhmTaXR?Qi1+SaC&=@&6b30NGp(LWV07u@8@|>L^k`7%~sNPlirt*
-z&34icHD&Y1jNh7e!?@!F*&J}P*^nZeWf9pdcd}XOWV0e6o0T__O*gWkpN`39Lqs;K
-zBeGc&k<HpE$Yy;+Ha*A&TVQ0f9=_N*;<CBwWV12TnEQ~E%^qa4B*VEC$Yv?B*@bMd
-zCq_0)kj>JBY)I3Y)kZdJ;B^nrt0S^mi)@yY-c9<lgltxjzOgBrl9vtRrxRpz+{vaR
-zMK-V5xY^i&8=Q3^d(-M<(~^))>rG@c6WP=gvgwG(W>!Qt?Gf3`n}Tc>L}W7`*&KDU
-zSpZ*b9SPaYvF&D2rm=Iilg$xi^GZPfgKS<6*l&Pr4msJdpQHF{SKQu^Rv^vDrX60-
-zr><EM*~~*W>;*ArnY`8&w>K^1U(}RM#><9r;4AK%MrG{%cy>m;bPXR){toLd6g$-`
-z+0iu%gZ{pk*?UMlqjl|7#{S!gspQ9*Z$n-~MknBPhV>hyPj~5hX7BjZIF5WHku~`z
-zx*PW^&Bb4(3z;zfDqY}AT;eZx-eiy7d4E~=-e1n+ujH?CZY%L=S{!!yy*3V$Z&PJG
-zzv-WkT0dB}v-df8&O6yn?WZ*QHAKuRf9CnbKII|yohJO59hZWJe43~6=VI;tsFh9r
-zS;l7s`<#Pacd#!cV6$IkoH_;ne*C5KamvA$(s{qXTJa%gTxeg*Ib?sH^EIAzKGDfI
-ztUmU?$luZ$l>7<G%h$lqlCL2c+7~F=b>^y`drzV#XW+xx!01W-B)WIT=^lG%if0qL
-zN1D!0F}epXd2kU-@6YsJ0LP1@Un2dvxbEej?=txKxYfw-xlALE{7m1?xc3AdJnVE(
-zaVv3Xz1U)P@QC)m;$NGXc70O^kDz~tiR~F1i0L5dF&*StV+S!ETpH2Ar3oG6U8sZH
-zCv|YyRCJJd!06zH!0^xL-~o8=b#R~4ll4wd4#s7xGxsOx;C`or#2GOi++by-v!RR*
-z?sBj<I@o&?us0@ju-EC}Zoenr?iVSOue1x<?nVdqI34VZ!|Lme=-`$V9i*Jm!7WY)
-z`_PxI@L{{vLG7c_eioyjThYPo2^}P@K$_7(aLI#90hpl<?ghtvr0*yFKtcx(rt9D{
-z>Zjy)GtNIj2iN+3(9Rvza~Z3HJ?aNF*RAn_FE(|s2OV6C4l?c%(?QZ>I>@ueWnwyb
-zs5x#>I%LNU!hVo<p$>AN)Iki(6#7B!y(hk#716<Nc<*&^h0~LnPES_HWm}$^qJt}a
-zKgb+yG^U&7ba0u|!6goMyMw(v0lPh+gY%pYE_FJ{{JLabCSPd@vR#S}E^|7#AP%c<
-zUPK4yr|2N%j1JCsI=BFR>3|Q5oDMS9Gsswq(ZLRMa8W`BNh^?MbP!zf;G#3LLmgZW
-zjw?uCNqToe2Un---~!}#?<DgYy|aSTrmk6Cr_;`dePZuhpU=oYhfi?T?ZLd7z6Vn}
-zqw$(s{l5DRj`*0`IO9~4eIMiR3a`?}(qe0dDs7|s2H-&MPK}#I)(y$8)I6icTD49{
-zW78AI%=|o)#;Y=J{gB4`?HL+w9TEPW?3~8c+K3b6!)YJqt;QrY78lN!Ry4n;H8`JU
-zeC*TL+vd`~@td^1MSj!`Y<xBM&?$}0d@qWJu~in2YNys&fCIQ_J&V?{H1V0j9BwYL
-zUIiFBlUaCa&C5dWYn_2P8@P$zI)mROk00X`e7EK^^2sfqn&akn{fonIERLVn-Arko
-zc_e`&a6%k;XK);j<5;cO^(W%vA9y^8)nj<#!>E5zKc{oOn|!qEKRh36*(t6Y!A^_+
-zp?r(>d~3@~tw|9tGcjIj9gpU=h38(6Cvj^GPv^%OJclEAjwSG{OcBqK1fIZY^3&lt
-zoWK*<9?#EvJc;4H=f-nu=!;^wdS}b%1MtAaahktio<eDg<BnxpM*DcD@32?#Rpehk
-z;9@zQ@hlu_<kh*-^0mG1qI2f_d!;==Tz8jCn?YXfC%!)t+tof|){2~x->-PE$}_M}
-zl_D{o&(m=8Z2tL2Jj>6y4;s^AykNSG@vNR}zp~Sxiq?%dJs+`aRYLtKPH~OP@WeGP
-zp<H-p^rvFa>Go|==W2Vo_&DdUM6>!0;+qNb$!44KkuQlKSx2@;K4VTk%;DShlpC7z
-z;hm8W<&AvsRbujS?_=^I&B%wn+A;auY1WN2<-_v?`M5lxeB85_&nalUrF@M4=Hyef
-zYe!5!Ic(Rhg!0KvalK1r;(C`*KD;yXDQ4sC8`w$tXnxYj2j72!e8wX3VVy&@@=vbU
-z>F<nuMzXH`C@#>uf83N0?~HsXZ`%)R-_#~(E2jOp_c8g9X4}sf<MR3IgnW3OARm_}
-zl#hG%@>w?(`Cx~`_LG~|Y(JH0F*{c4oHjK(QMBd4{uel*e0XQ%lbaToPp9g&{jYC7
-z_ksIlesT4;r#096a4){3`p3Wd*8OAI(d2rcG@pla<HNJ*FW(z5SLoL1F!$>3bq+l~
-z&_R8Rj&IVP8sJjj+{U_@!N9MVWu44>g2t~>?~C^~*S93!m)-l4DL-RE`GR}@#3b*(
-z;NDj!dH-qm{`>Czm5jwNt(_0JvyEgEg?l$;2eO;4>;B^o&iGq^^Rp2+`ZlQe5zgPg
-z349b=Rl#Q*d~Q0weS2hn`}VHW->Gc8ZsxbmoVlIfUh-R0pWnXBIg`<E3cRZ~ZR|g8
-zt}p)olioc0)Z42!vHfl%cbc^dg|m#O?#t5mG~=w&dCn$PoMpzTG+w2(3K~z<_^IM8
-zjpJ)PUuzRsmvDo5jMunc<$8tdWv**nFK}JudY+4M+tMYji(D7Dp4FL&c0FL5))lz5
-zTBWnAOdfAn%$Vo#3}eWv?6~_;H|KW1&Fh?q&+GW}9M>>5zJ{^!zC)RY8QZQi?}Cq>
-zr*4fol@2n0r1|vYtIV8*-%C<HK>Y`qAE|RL8}BrCtoB?y37^2(jP(yC>SSK=#jG1c
-zKVs`Kun#*JN9^2D?+~z$0u$J(cN6&d@t?v8(oed1mNS{g<C;6(mpg6d^`pFjmoeV#
-zjqql-<4v!_b6*0_UW;eQn?A>zJ&rfX$na*1<IUa#Zzx~d0`7aDi+B00jyL<^4YD=7
-z*_EiXFT$Jc5#DTdFt$71>;m>~U;?`U>=<wMk-opln~!<kXkI<an`;T)tdH<!t>evd
-zhv$X_p34)wS?PGw<9LHE8{VvNyjh>%4dr#7zs_Uq<(<AqVDx4qyt(S?T$8ACWrR1Y
-zBfRN$FjhO>tO52~U;?`U>=<u0kiN0Wn^!bHC%w_Uc9b`-CU~<X!kZ4qo0$&Jr3pM|
-zCV12Cc(cgy<`u`AS&lbL61<_jIe%{vbnz}f&+%p%ym{Hxxgb$zdxSUhBfOdCV9a;C
-zSpe(~U;<m;T!`^zDe23aygBB1qj}{BZ`6my+SCokb<eu~=2bTa{k$84Zb{(zyd5_V
-z+tdqz?QdSQW61d%jyH^#nm*x1SG>QWe2FpC!fT98^DciauzJ%9Z(eh}c_lGc{X%4{
-z`ej>>fql)vc-f6nzXI%6feGvauw%Swfj6y9-aPDi!<azkZtJ)4ZA&|^d&$qKY2D{%
-z7!Ppsy3c7&O=EIOH{Xl1^SaM5pK(cZYQ)pTFjYUVOS+F~%)Bno)yle9?7~^B&3WCU
-zc1}%xoa~d{h4UHQ`}vH;vR#bJ>04uFt<Z&_QFVKCbk?BeRqp{ta&OM34!^y74)pzo
-z{FzMS4tSaB^R~J9W%w!^8q>M65uH2fbnb}LxpN8mA4%xkQKxfftS)FA)AUtCPUp@h
-zbdK^mYrb#>ec_$X-Zg#Id99nh10G^0PbBI*8qvAq5uK|$7{{H?odEVp@d5b2j_KSv
-z($9CvzwZ~H{yk$fR(5v1fRWwdi0lrN|4_Q@YQOh3%kGeH&NPO=$@HI$y-a8a2mHLA
-z#-6`$y`FV*%Lg^Dr|~eY_vM@gzrNuh?cjjs_4FN|NIM`s)(&{Cau!5%jHNU$(hlY&
-z+5zvvcEEkC9WW+Z<%~YV%Y6}E?t{L)>Ad{SfB81^a<Ap3_6**#9pG2S+QF_!JJ{;l
-z!FtyYb|-XleWD#~bnRffYX=&Gl&`nJwS!%Wc0l>k2K010I?TI#uWJW;v@Uv{Z3lgc
-zIyXkz!Inrn=yfo*xOUJ7?5)5Aw$9ItwS(QH?`gIJ_66E@pm9~kRE_L<BC_it|Jrof
-zz4))*X4$Q!F51Cm`b*Oe7~`7I4pw`65Fg*_TO)hW9NP-p!5Z4ZYS{xj<`~)o(qrv_
-z=PKut#M;5W$o%#`JHH*;1Kx%0fcscG&=@G+STwv`8R6wh=v$G_%Rf5uHuG|Y<>mhd
-zFK^inh_zzvU}>ZsEOPB&mTL#g5;{36(GKRhcCf_T1I7~74%%HiSej@DlrOcTr%TXb
-z-sR`JcCcLbV7_e!9f>;UMcToFNIRJCU@UO$paa;8fC+5PzsK6aGSZhf+d&RKS$kmD
-zO&HnDjL2>#`CHRvcmKfKEW1|fq8;3Hj=j~*vA3qrv5$k(V)ivK#%0#@F_)404OYL`
-zL1STW<cK4gH_xA0)$n78KYY;c8B8Awnl}35ZMSpY!feiBn$~~$L+t%yUxyz*9Djf0
-zo;@&}#bo#VF?Rb5?eUFYWN#jOhu&Zx(HkG;V(-iwoszqa%_R@o@gu9;*cp2`8soh8
-zx~lc}+7}|+UqgN`eyBPA7%KzZv@(C;%9Kn!Gvf7tPg)uEO{(XKv@&Ktl$|q(;-+u4
-zt4uYmjM+Oiu?+jNO_}ezGT(FO6TAq$i%GNRSbYBai|kPw&vCIgZQS{thEMF*8qcBs
-z_ygKcru%X3@6i26X+J#s^^EW|^n1rU6Z?O7=leP3^ZnenfRom*bY-lcX>dTkX*~2}
-z<?5Tnm+{GHbaPC#$edD?MxC>v@7Q`8b?<4Ek5uD1q>(Xh)oXacxa{KSo;luyG;;50
-z+%g3kwHDxJG=9d>*yi?eO_ZaxV^P}`qtT3m{gWn*>^%=@WY1TP=a9ztM`(P1f=1qj
-zG;;50ls&tZ9JS`*W;EV(j5@goOMBncZr>l-gZ2AUA8XY7#_L~SSNrj{2l@8xv`No_
-znXo@<<URJgNUVn};LG*m>lF_K4Sh3X^VWdxxu}0Kdy!8)Q_=Zw>Z7zLS!ZawZz17l
-z`}4E&_-2p2%Jo`P$2V{70uJl14(MAPv^~~k%Kv&%YgqBS%J_EobGCLFU-<rotWAr4
-z8)jd^#_h8<?ta$BmiIF+!5-=w_%U~PY8-gl$2AC!!{GRBaQqH99;KbAFD&i1b((KN
-z(?)cb9ejIoVGv*MlLyZNc&dzG^38_RrNh|%BiKD?)ptVG*R;_Gf6sr<@(8x+uq~st
-zt0kWMTBh6YRSX4;F^V77=GZy|mimEH_w@eKmVj|a^WN6Ch4N?YbAG*kZ9k~*YN||r
-zqx~(d$F6UHryIc+U)Ow}0UGT&7F{+k>81=Y2Zx#0ro8&7GBiEl`<I*1a1|QX2Il)W
-zS_4gaV>e?obhP%DdZ6K=#mn%l2O2Kf=X|$*9Sy5p+8X;?>V}5Z(69y?)=okL>4pYi
-zdK$Jm8cI{4;asczp2c&>;dxW<L>gLd>o2W@hL<f~hK7~U@QQuTFV(N3VVO%?ZhuQl
-zp<x*`;5UWe$w<m!MVF-kn4X4Tax^?K1sb$&zi*LZT8;6WeaI7NsOGYxr6uwc?7CY+
-z!xH>=VqL?(`4JixI2t+}4fCO40W{zn78Xq+2ht53V0s$f3k~L5dFZ^}>H7y}&F&uT
-zsM{acrf)mU3mP9I@6Nui#sGR)=xFON%yc-+q)x^b3+>2<vBc6Whtn+jjCRf)pbbs~
-zR_W?(YBP@R$1h^Hp6m{6y>qAAeHi5%^d~LAVJxlGir&7;{cFgT`V8(Z)YWRs^m1S1
-zUOq{Ft4+&C-V0At2HHfU?kAz|qUci}oS&Dz_EP?1^n3~H3wAL+-&WT*#2;|q|D%ox
-za@9Ur;b`AkJf^xwmh&H&&u*!`USZ!R_2?VxZSYL>GH-qT`_4BSsBF5f@1T?4*p6}L
-zJZEIO8Xd3ae>?NN`@iYGOE`@-Fy_9s{^D);PT+;lfX>}}{V!SL6Qz+ct47;<$wR$5
-z6SVEqU8lbvJn>QS=`u7$&(P3WzT)qTqzk6b-Voeqo)~PwoCc1;jf-vX`@})n`pa(a
-zeO$1>Ju}_HH1&}-DJ<~xXMKoAZPRsLh~3{j;f!I{!1;63L|?RAhiGMwZQFZ^#b<Xl
-z+Ge{mL%>C2!4qKR_<lSv7PHP!yb+(O5&kId&^P5RpMeLQB_HfM_^DOwG0801A7o~H
-z)8~0d)}bb7Ps;XzjFs&bcrE!Fx+DW=kMe$;cao3f9ZiqQ_Z@2=5t{xk*O?ZlPVfbD
-zZJY}@`;^Wh$gu9NI;JzZ_(e~%`t1xxr<vcD(dqilwv4v&8=h5D`2cZjihqco^$g=^
-z`p$}MXf>zxbt*T9wCH+K!CmLz@@wkl*VL=$b*F0Jq%}wK9qZuP#eID^Gx{mu$%oXs
-zJ9EFVt5F{b?0v+atQYP3+4Qrs>Fa}*k6)^h_F>@E$gg!?*Rnx>cji4WX^%)Za5X*>
-z^-1fUDKJP&g^`^E#+bz|h6ia$7;C`e*l=LhsBOa6t>f#)aH*ugA#I7}5&gu>m+D2E
-z$N0)w#Z@1$zB01Xw`PX%lfR9h{2lz{qb6<(p3?b#TIVG`4~%6-Yxum{OJV)KxW6np
-zX}y=^l;KzHT7CEc^3q!FLCpgp|3T!x*!j(ax7qnDt<xT;*fKSKHD6R8&W;`{`gN_E
-zLu$^;R7b4tsE+Dz<h~NQ&$gH|vXnO~yvWz8U-I0h-=aIq4B3dr+Hhv{r}#BG1>Mpq
-z`qfeC!Kbi6c8tjOSAK1%`dx!V#lZlUSqlfO4g=GkgXqtT`j6PW8vJ;``Fb~{zX<(f
-zo__p2_HKILQ$C*Bj;Xsda-WUfJNn6M=qI0{pFD<sU`tL~C;g`Br>tcCX6b*@(O;Sh
-z{os47=+|Z1xy+FMkqDi`k^4&IKI`T0=qI0*zoWnC&P{tO^i%e&(7(>n|HM@2FSa0m
-zPruzC8Pd;M%clGz_u1&Zm;W>;|7lMC)13VO7W9MHTcMwRZcenVS1V5UXm9tK_F~&l
-zG-jw3?b_2{p{#7iT<L5sGdf4V!}h#L?S(M9?BHok-JeHd`iIb;j>ijsdYg?G1jm#I
-zuITc336EOE)-V4>=e<`)ERS{8ZFP7W<z~}&`7@2^k9e>167^2)PCmOo8`88_Q{KK;
-zowg5ieW%BxV%OK&IytA6{?O!uPX@n~d~MiN&nx-5)uQlRhkcc=+FkqMgR5%(d-1o5
-zLs;AVUBU4FzUuy4#UI)KIp5rh?On>X;@8}BN@q_EAusFaF>VBIW^WHV(x!2wF}o+m
-zeH-Ca)2~U4cUc=rmlpI}d+2Pzh-75<E41N%M8A6=J)OZj+Ck`d*tB)#`v>^)FWLPy
-z>~#SyuqVPV-UNOw1-?m(!0)u>CxbtbO~+kpMxuDjPGjHug|p5=n-m`F7PL1Y$qS8P
-z#NcJM&&9!GY-3V**uhkItapjQW8F&#FFVJ<vtu{a+!s#in{=}E`o2<)xq11GHRhJ@
-zM`k)-E$Uxs&rB5dG4{pOvY!imM15axQ^G&gx`Sw$I_nRp&-h~UqwJWa_RK9f1)hvq
-z@=ZYeGSkl4+hcLV=Q94;2U2~m0q9ule5qA#{7&aiD^0Pzfki*1Z%ho)cNv)4d!Mtu
-ztC{zuuT(!1+Lof-2W84~Z+(Q%xbI!qZ&&DBg+tV%emLyIsAqtB2C2vQ-+FKQt4<5^
-z|D{i<f%5~-{)ISK;^$pg({QdhobgZ9zsGPMj^NC_!MV~C$C+pC1ytXDQ=EAp#rY2%
-z&ZQ*I+4%XqsW^{#KBwS37QvZ&%jZwWai-rNq8=NIIa`s&XX=UKTyZ!*;c)ij(`n~*
-zr{bM$F)@?&#82RLXA5<C-_!Y!^eOTowI*0+sv6xf{S3Gl18Wa~c~idgK1xH6qoJCl
-zVZ_?{#iZX{#~lsCHWO$lMrh#P>Prd@6=!d$)7bRfEok6<l!k@SaBs>!aN%Bi)a*$+
-z)#A?JtMUvFiEV??zXvZh4`la8uH&0FnYv;T^&c}&Pi;O(zPaptwbSaxGnCgji$CW!
-zZ7kr8YzujAtGzyw>DRs&&QD;R(CvLm%w22G%QIQ+ec_y1)}(to`37^@+6yztJJE?v
-zePqzjQM31A+@AONBsvnan`Ta!_tKp&!nfFdnMir<&mzxF%m1<~Uvjz=tzZ4@t;+wR
-zEB{1Vd1$>=`47AD)wJ^P>sIA&I%lYPOn+`8^O%3mT%nmWWbWIa+j#BYPEALoAFqG?
-zlQrZ%>0IF(mFc5Dd~goy80OYq&rR=_4SDf5g45&Zq|QCnd4gB6+4@XmvIhU@8uQxW
-zJ@fD3x(4_jeqXBM$A@&DG4qDl+c!SPyhdfgDeZ4iKccgUy*-qDy!;!Cjee4`>tELV
-zo5n0Y5bD=Le@-!T_v4&@`{F0N8rL|F@ES0$6<hkRv5w%y2ZM&r&rRd~WwSPcGYfS_
-ztLpkld~D;Jk|*^);N&@3eRb%lS6W7|eOPle+K*w*K%JngtOYT8e&s{1z7NOi+ve)?
-z`a5ZT@UGrTeVyW+-TRwLpKWtbUGekFo$>k}a`kzApR_(~Zyj56jkPN^#)0ho{=~L;
-znZ5!%p1Oig`uXhWJk3X4eZGB6S|5G4#_F!o57ii(()UPG>AT(4r!!F{Kl+hqeK&1S
-z$vJq|iWnHb*lbVrXQtksuAqOH(Ld4u`qw{8-1V6nZD`W=6^l`_8hgDH-;{O2uHUT<
-z8#~c_M!yuVB>P=AFMn#nygYHrGsw!eGtJR!43=vW-Lzv{ZohTT)s0U)BRYPH&S`vg
-zHaO1q<ENzg@kZ_IsbyQt-ctGTu^4D9Gcg7-X*QnF98L`#^ZWg^&oWKsirIafRjV}j
-z>&Ngcri{^&7Q-`V_x4Y~voi%xlNP}<8^LoDyHFi##%mf|HnC=spTjBRx1`1Jtk^Rh
-zCg532iTO-g1kYUaoQKKmU$wJ|XH_v^0>@<hSFf0{(th)eJQx2(<y<4~i|Gfxx8gC$
-zS7W*NVk;)I<@$cO`uu_1L#K2$xc%ljG5Z9Z=EUl#+nBDu1N|E!&R0wp$0`1uzZ$Vh
-z6DR+T_7CtKoDa|j-`}(^F1FJ5eDp0pouw@tU&IC~R+N8P%i2Bcic6B;7^?D4{;|f4
-z1Vc7dac6zZ`>5Cn%ITfX$(BE=_v%Abm+BPEFs>qx@iRxPAFK6!HF)LiQ|Rv_Q~9mt
-z+x1!M4{_!^E8(1L;w<^A-o@Cs(68pb#hWurc&{;Si#y}<omm?r(4Po*l{Y>z=@x%C
-zW<|ZKU*#84KBR$sQ5ycp(NOX}lUviL_G5kTrY~-A3Ta{OvS_J9XrasmT6nK=wVXTG
-zggl;}dc}_S*NdJe=BPvyc}(4;3!Xpw#K>jD#tVXXpWu==MjvIO^f8!YWb{OmzF{|p
-zNnc{}SL~Q*Q&u*1tc^tIqs#>QcyH(fj_|0FC!{au=g2&LtjiO9<T3OOJNn2c91MMx
-z=A4G1kGwJZC=;dc3y!{OlD?uJhj;YlTC7fm^0V<-E!!Mt^>Z^ZUF5x?Z^Y3D+>pL(
-zi=6`;^YpRSOZ54=Nf*B~R~gcmvv|nX82ZQ?qmMFC`feJ_-Dz-d#&SG^>#16$r5Vc&
-z%N{0Tx&Lcwenl9|jadAr63fN*6lZ7RSIi|Qn-d@V9I-ra`Wp86t@swHHo9WR$~9i+
-z$EMrp!=rt2H8*XdKVZ_D<BQc!3rDsuwVrIG9^{s4V@IrR#B362F&jH<&nuZ=V=Fq(
-zBku21O<Kgp7Hz%8u1)5%<fK#1x9V)-8RJJbr7n{e;m4Tm_b26t(Gyn>dY8(NN{SCh
-zT8tmXNqo4R&Ywx}!=y#{(P`_oc775cE^Fy9`Z3n@;bQ!teNL#$q(%5KY<<B=`BAa&
-ztsXY(iTR4T6kn0F7(Y5E@fEWvIGVHwKd=u?pEi9AqKZuk^<%i{E5`UyN%8kgT7(}(
-z3ujV(<RbNSHtUJ<qn3@!w~igh_FI3iV&^BKc-8O$V{MDE%h0#N7rdFjXZA(XM`%rB
-zvVWNDo2F*o0pD;k8uiV^A^bsbz>oYaek6PS7~|JD392JTE3r@%_j+Z$p|uk~av1;a
-zu?c?UU9tT7u1ZKN<Nme}X!?;u#I3SrW-QG4HADDBPs`uK4hmP}OA^n^mkH-CnKO{@
-zWbJVe<LeKRmvfrkdMbVQ(v07dPviS4E4!!s8izOIvE(u3v(t@kRmbd{rB5^VpEN&L
-zsqa+!cgFsi{E@L|>WYr>cd<vV27e!Lc7LJUzb#!hu+c?3S8M&HkXB;S7_GzyijQO?
-zP5r~pzoNX-^e$?jwO*v!>0qjC&Ye>i;epnq$nM*5X$Lpw_|Q3>ce8C>q#0aEo4^N?
-zUv(+JgW>8OaP>y<`mynYK6|R<`0+i@5BfS&$FQ5b9&>(PDEkCI#vJ{W3wh$o$hR{*
-z;a#+DKh|3<I^PW#dawAngWsrr_<0cV#+NgEuQ>h`Bm5!F$})vNCO`Z!`5k{E^&32?
-zKZ@tSaXfk=$s_Eesb{Rk>I^ngK3`L3tS=n4k51>qQ7+_>D^ml8shfAvy6yM|_zt_W
-zz%V=-ap%89^@p?!^&1`)t?y-cG~#$P9N`gZR=z1bGWk_!M2Ci(^&32?D~e~I<54xq
-zql#N!&^gWWsA&D-kVlM@#oATT#RZfLdF0C2^S`7Y_6#rIuT+Pf?>pwo0>khq>(2O!
-z@`$vMN3NXhKU!UX6X8*|)yX%7N4yK*b#*Mlqe%URN7NPN(anAGR@vK#Pu^;M^5JPs
-zpM1pfBsRbDM{mw2_rAE_3;6E()t}%x_DXZzwT)S1D}Tak=l>_vnL0O@Yo19rkmDQN
-zZhY9DLl-=$wJWzgi;i(}&280k8$)|N7(J_w_aAZZz5PnQ*W8xM`@TE*zSF(;{Z{h*
-zn;DD$4(GgSEPjBq+x*<tn*T7h_Nlq8%ghJd>ddy-_<MylLL+yd8pN;E8lhq0WzT1=
-zIW}>WAD17o&n{MG+}+J@F)tO{7w5*`=@Xyiip_aWHijMbt7Xe4#6Ko2;_v5f5&v{X
-z;-73Y{)yFtuP~t=lNPCG<Q8$oa3rp%G~<d`J;juIOj@L#+%4+qY}QlF66Yqy6p~}r
-zZ+5Mc#-}I3OsrSJZ<o(+*FX6<#H}wfe!5#<gg>owM$Gymtuq2wttYxaGM}Qk!f5<)
-zjPc$YF^FG-K12+%3Ehd6Vca!Vh8Uza^7&ILqxIr-;*d@B33bLIYFXx0(NFm?Ls{lk
-z(NSxo-8v)mL*Gi&p2-Y)n%oOH0NlmK4+$RmhMQ}xL8Ic2A;zf(i3xPJiRJ{GKBnVE
-z*2eg@KI>2E8#Klz4`UM_+dM?OYo6E50;V~l=>g{h4c@G7+S!D<J0o>-FF!?V%j0!3
-zK5gVh41r!5KY6Z=qxQS{ORj!@W_dd8DQkRkk@~qe^`qPJX=6B4Y?|;0$ESzmxO~as
-z^2AhdaXz4p1)Us<5nQ-8xQwLWLjNHA3@*Hvzg0s&qI~&;!=*YET!?)q$fXj&g?q~v
-zTW_2%5nOWdaczH2^FnZ$bdAk#n=z=S56CmLozj?ZxW;D8#!^uq@Y;o`*%&`AJ4hQC
-zaBaZ*(B3b+>3SRF?)Q;B!1pxe%cPyDxfni=-xf5qKfjH2zPhKK&PnbiOY<8h?C;5D
-zM+fMK^i9^N&6*2bvu_7^**RqUy=lHPNnVXtSv?w{@6tG$&YhgtN5=c4v~dxg<FEbv
-z>JP@Vb6NLz_x0a#>#(1Ohf4SBsRzJC^KiEBSkGSm;3eM%HJ7IK*m_r^kJUL%1K91s
-z?48KMeoOUf<Q!S2@RZg@T7Tl9>(TWAMt<SA$LEYJ2kC#kEX8x3rS@KUeyhBamGVkH
-zS|^#d{#xrK2N>(Jw9@y{@A`ZFdKiDjUdk!Sl(o%@;m!W6tlO_Orm+ufqj0axrhhj3
-z<N4JYE?n?c>nU`G=#P+zJtIqJWoaD=7jo8EnU}x5Gdk?>#O~pfsb8=*elR<m{tUU&
-zUvyCCRn3bI+k4gFWvFs0qgZY*t3FV=VDo8gPP$Pq+PQG))-AvJ01q|RX5i#peb6Hw
-zR;fqvr0N;KHVmQ@q)+g{JT0n!26Zmxe9|_~C)K%iQTtlMZjiS>!~C^$?BjMW;whs~
-z=#|z$4KmJIqHP!*mk;ql_RgXYS6CzE$K~vJpVh<5l#$MQT^tz3PXqVwqCd86%(?!j
-z^V}W<=+iiwp{;2BIXi~q#;_`OPEhn{FPn*%bJo{0Ww;kVG^eTlU2SRMY`gzT<78%x
-zPGgJkfc>cbwN8zn%r>+{`OpS`X22iu!mQO8vvo)g>c9ND51o-<>gB!1+u$~0^K1Q>
-z#<Ap651?;@=$*;mY5RQP=g$L?ZW|kswKOQ-Ft$?bV$C`0!_H2iuY>5V{4I_5dcHnA
-zg1wPWkk7!OoOof<pxNTA`Eh&?H?~@Zelwm^wEPO^c`Mc?${!2!j#ypu`%nZ|Z9k*7
-zSCoCD{pGC9`xyPgJB^3>lPkz3iOW3U0zKCLIvO0kx1wz_nCkb!F*axx?6f}6^UBV7
-zpqKQ&eyx*ip!Vstz&9&5@y^L>*xnCdHzvHJjPgx}+jCRyPiKrux6J<5v5ejCn$<o+
-z<k)HP@@>z@aI%l0N%J@AGY7Dl1N52d+Xv`tWy^GCmu!>zqaT?*^e&!tsh^$8FIUB$
-z+YsuXsaNe*c<^iRGO?0rKlhPVt61Mi-{V%>Ujz<ef10!NS~F<ZYDW`dJd<W)uO;qm
-z=3`@auW2juAAg3PSF;)Rj>YGL)Q_m`sUK*iPc->P0+TOkGrkS|-+_L~%k%;8NqGBx
-zp;0?vY)8@C4r|AKIoTZTg^Kp~A)TFX#%|d8D8U)Z{(tP<e_W+?o&Wy>oKZ|NDl9D0
-zqeDd-qf|^$a_O<5qM{^ai;63mhEXPQB*ny{4IA31sAwgnBt1G<XjIf<QBhH{g+;qm
-zv{7Ll8@9-(*j+6AEL)$)^Lo9QfiuI{?x)-L`;Xjo?!4Z=ulM!7ew?4MPuU;pW4(Q?
-zt@XbdHpDqW_oRBCt6ryKeMgUv^m$m-xtnWHn){d(*MyzLcCH@Hsa?IB$A|0pO!rgY
-z-q*u^@$17~_t@*NhtIbM|FZM#;q&YPE3a#{#-U^GRQ8d^vVN}Fd6r*0*e^Qg>-`Aj
-zlCnE7sz;umpQCHz`Z+T?SFom|GTbw&?GJDF_V%owNBx|!%g@=IJELp(c6+TodJjfU
-zw)d_3x08PJ$;bIMhq0_*7l!uO>*9J%UFXWE&**nw=j2E0e3!omM%&BpI@WbOtY6PQ
-z`IyaZ>-`?lxox|h7xX?XeST2w|2o<yeof?gWgQo~Cf!AQ7f|M|L-zMV^w}WY2iZJW
-zUs?}$?$UGNey_9LeqX<DT`#Nc8=~!KoV2HLvKBt1_wt-c-IL;-7j3+@GNuomd425P
-zb#IZ#;{Eg2pW)9x@qX4bV~5}S5Ve2M_Q}pC`aU_Z`85-r2hOCwJ9GSAfIjsYPS>sV
-zdy#`&`=WVZTQtUK``H$4|N8d_udj#E?K$7mXBrFE_Yc3TPBfN#d><e3*HRcug1p1m
-zkb{0L<rvi*q;hC~*D<c62aa5WwBOdZQ~gBO(gXI|rG2(Be^t*lGQNW7nnT~Jqw9vs
-z>vP}Hx>&!S|G$hO$JW~6>q^ErqW(#X`rTu%haB^om!sE>7~6JxjYFRmjqVK&sjjd4
-z=y%<-`f=^C&9n8f)i{36^=)X6U(bCmqt9vW(Q8xr+z)Y$+GW2-?UAlIx|6ho%-I&*
-zk7;}w&#c;GKWSdI&xW@9d4##tTDo&r_V>2SgWE8FHHY@^JYc_TogLo)K9=>d*?#rD
-zDSxcK@1}2^KcmmEuy!?XS_5b3*wFXr+@r_N_MJ9dQ~29_d_UsJ{LgdP`dcOU`+LF{
-z`JR#WzuUL*yKVk_K+mUd<1-CeJbs8hbcp&7QpY~i!sl9eKd+wKP4PLF+YX$;^IWI%
-zePXAtE*^+|Xp#2QyeD1X=csMDpFV!U_nj>0I>C45Z2a!62czepU&MRBv!eHauRP{-
-zzGEkgeq(%=qTsHxcr9)Fqu1Xre!-n9C%$l1-}mwtJ?^{b#P8|(;pjev?TNDwbUzZ^
-zr`+R@1Gnp3P5LgK>$Ju?zpu}0{w4P)sT{vg(LD<H)w)lyb-4b%LG{JDIN<jtdo&h5
-zXVYJ_U$<|#H_6GkH#zi|U$b@Hi|%jO@4COy<5}Hf>AB3?xyRc0U2htr?lV%{D-7l2
-zQ^p^k9<=+4=pN(1`s2mJj}5(!9tZei(>+$^@IA(^zkIyw?{SXqRkp9+&-i^tj`fk^
-zF_OMVj`2p<Uc0x5&hv-If7Ihr9%F92X57jBiSEIo$EDnh=-Q#}x92%7iXM+1^KmHW
-ze!a(3<)X)-+`p`!>r*+LLuun~9-G>|O~L9lPx0#v+j982t#aBI+jZ{s^H=n{uL1I-
-zHE?Ld<4}Irv8;R1=={v%yxaWmmFxTxT{91^-(OhSyLqgq@#wLF>gb%NaqIDd&O3+n
-zSn`1Vt~IL1fV!8yjcfPe`?Y&)n~rs#bn0nG?vtYa_vl_Ky8cA_Wqn?vdpM3C8;jj<
-zUGwB4_e9aTl*cjAea`y(J{YsLY1?}z<IufV^cb7#N`moc-UsM@e*JxC>-PhH^KkbA
-zhip8D?+0?$=g_aIhy2`4pX>JlhtJOkwI6jH+ch-WzFl5^yTAWtk6o{i)bVx?*!3Z*
-z!x+>~bgkZH_i{tq?cOeW+`Gk?j<oq#8pl1>&f)81##o}qy=+f(zrglI+rG=T_sCd|
-z-ab7izEzviJpldK+P3!_AM+mIpqIJF-;=z@=jnjWQ#6m!@4DvtJ%Gni9_7`?R^y27
-z0eqj><53+idVVze`)YO%a7gd7@#B^BXx);QpxrwU+CBErJvN@`9>CXy-ZNu!<@a;D
-zHnh3je*a&u9omY<K|9A9$LBWQ59HV!{8jG<a*llVRrkdF&-b|T8At95)<5I;AlLiD
-z_XpeyME3|>gY-Q5o!lo3ai75VGxOLndcSM*7$eQS!LPYrP+RwNkFdx+#+}sB^=t7S
-z?j^X7Nb`BR``16C$Nj@ExMzs&CHNfMrh5rKPq*>&nt#=M3Fh>X*99JVUEq<|1!B?t
-zQ*{4$fXA@cKk~Z35ci6?Jb(De>jL_mn_v65e~7ME+&4tmE3Ua`a{b)&xc45vhd6lT
-z9_f+S1-Q@LW%rrKzCZH&vh}%p<aL4QvCJc{3-B0k&-&x&M_w1md>!_Y*9H9X%r1Lu
-z@W|@|kGw7rJtjY7*P2IO7x3%q0lO!8<aL2ZUKe=eb%94-7dYzuX^*@vaQOWbkGwAM
-zS9(64Yp|X-e&lt5M_w1O=lK5zuPHt9x`4gM;Qz1J1@xJ?UG|-HxAXotUh5c(zQ>W*
-z-8X(-AbS7fc6*P3{(fcjJ_BBV)$2j_T&g}FWUmA3In_H4ZSnaqp7%NGJ&I9U^qO+?
-zI=8)dH2?5x-G|%f-ZuJ-p4#8DMf<ys(SDS+q5bW;S3bJ^p&WZ(rQWxw=R-Gsu5GLD
-zzp&TkAA5ML`rZe<?jDVK*U{f^wy90t3%dEW{^<KGK9s}z=nnGw_B(j3pZ9T$>GK(S
-zf4;qTsL!J4_3xtSJ>HLcvcD&ee(&Tn6MAj>f+ty;zDpv-SnM^si^uGJ<N3U=NAKCl
-zrwx1We)G22&giie`&X}v>pdpXYuc2HUPIkuuhU2E@cW}whP>##+4@|@p6u`4#cT5V
-zuC(>n<JVtPxAk!<uix9+Sik1#`_A+oX!`!M!>`GDKWbb3u5a)9_XXb0d%^TQXnJjw
-z?Yw-qe{Y-KYw$lFH}9)RZP&P;$hZr)9`_+1_o?=H`?egtcT3+hz2W_D4>RsIA9uBn
-z`~LrzakF-Hj@A29@8Z2B`uxk5bDm@0(eq&b`f~;T7?C!j*LnA3ye9rI+wnr*j^@9{
-zb{zEWIKX!Bo@ssm=a$>Se$sJ&O`dN@j;~AFh_>U<|7<%r=J;C^N3ZQ%{)XN9T04<4
-ztl{Xrha1zQ<K!MY9*+6^HpfCVrd@LVIV(%k`@-#5v{=8FZ0PfW=>2$`$EEjPMc32=
-zHV1Z0`1>*GOY?H*SoIEhy@MO-@q5&k*ZbkI>g9Nudp6YL_l@<wb*y^Zz09Ev_4s{b
-zy)RPlFM8kGffM<h_G3BkJ(lwx=VHy#K|2nQdwpWAH0QcL>HANk??L4}YVV0V^7j(;
-z8ja3{hp#2O{P&D=zRoL0U8|zB4cC$!?XQe$iP~pP9&Z1hEv{9p-=o@((l)ez;277c
-zX#5-6-?c^i+mF$Hly;>3+j5SK{q_U){`=_Kb<eBDqR&Zlt^J>TZ&P&b;(cYuymm2e
-zz0R?I?Rr_luU+(2eWG837=u3Vr|VeO`gcSg@bf!sOxGp7e^2lIi;jgHJI?g^3GD~H
-zkMXwk_tlUWU8ABrz5j`8&cSRx3vHi|-12;LkFAFv7OkK2?eoj}Y}esyRn#wSdfPS@
-z_WLed|1&zr9Q0$*)4oHRwym1;=L38;q2%o^yZIS!f7H!)?eWhF{P%l)bHR3>6Vfzx
-z&JViQeNyj#(|TIG_SPp=pB0P#zM`%{N`D6BG+$?)>eu}Z^K+;6<2^n{2km`)>(_m6
-z`|{h?uSW+q&$HeS6kY$L`hGp;_vrdho?ZXh7u)}m>!^+Y)b;nX@3Cu9Do6Jc8Ru{B
-zZ@vG_xxG&Fs5O&$9s1vl|A1eI*pCl?J+=2v-TgSf4juCADQ!gO{Coaq+wl_Lj^@9{
-zcI4PvOECuze?7JB*m;U?#~#1t(1u;RtgXXq{bBaUsnJ?L##%YJdHtUpmD`+l!ZFgK
-zYwRw&MjrDTduV;UR%ZRRpu^vHtM`)n>qODo@!$2H(T%Zw=NR~h^<y@=jvnyWm-g8E
-z<D&A>@2vCn>$k_5^?#u2;=#@Hp!bwU*T91tKHI|YQQ84Zi~7y1m*Zvb*-($)H`a@;
-z-<kEcdznKU>hb%=db)n=J@(Q2>{+|(?^n<K&Yh_&TOaz{P;4vjmF4fP`sbsx?SJXt
-zr%g~;KgsCdSS;Z_!vD83ko{+VF1{?5{YRHS<{QPo!t1i{=U+}q**}gV7IPGRCyM^b
-zqpw8K7d-k*6y533ZBcZyM>j;#`#pMB6urZvYoqAR9_@>wJs!OtHO7n0^%>%RJo?F$
-z&+JD(e=Rq*&wDdB{p`Bxy4JQUU%s#HlHFHb@!axr_C)dJ``XUF`r3V$w#8n&yKQ$%
-zV((Q~U3pbhuWH|Ad#`RwwCuj_%4^yZSM0m`irsB{nqR<ScV>{F#NY0}`kL0(E3azX
-z+mvYDeRXr<(rfnbY1?-tfA>84`P=<_+gtbUA-m<e#HCkWv%e{^e_u=D+U9*NdlT2}
-zzxJx#t*!g^UzXUtKXGBJ>e2gKcDG!!*X#dpDZH?A&))ZaxW4|s&wJNX?x<Q;JINEX
-zIaS+Ffx*{RZ2s}|SnU@1O<ufWi~Ir4pXZNpGWSQdALE3hpJep!(fLWwuVbXgs^9k*
-ztGHGF)1E)JMgL1&==76}{yn<?Qr>v3pZqQQuPm~BU#mR4-27AhF!^;4li%q1TkW4V
-z&(Ei4&f`bTZ`bKIo~`Qldw%5>^E12s`1Kb(pTC2C%>7gLwBy&W^85)7(qrx4^0SX$
-zzuNOhw-|p@`SI(wd;WlmC1OYIzk;2|uV3Q%Mf?GsW6ggRAMVl5R_mkoVe%UuCcoM9
-zx7xoQp0DHVSo7OaZR6Xjey`^@KknG|S6^rK{XB5g`fGUo@$)AhCcn7h`1QLzf2;8i
-zcz%o<p~oKM_!#hkZ?%7h9wvYEVe-58+W425nPbiWJYO2BpB95sn}4b=x7e2{O>F)d
-z^!#Z1^N(J?V;l32vHjDYpUVUsYkY+~Fw;+oan$&do<H~KE$YA9DsHuZN<Dv^gXdWN
-z*S*K;`!pZb|Cr}*)&8{SZ`J<F`;Om!eb4d7-{SdOwcq!F<F~)+`CE-Y?}Ju<tM<$F
-z&Ub#cnxB5p->Us#&)=&3*&B}Eenp?<Z`FQ{=TESIk9B@rxbgV)S3Q5L`n?}He*Hnu
-z->QCPbmHd$t2J}f`l|K(V$PrW$2fl4?y!nm-G2;w{#NZzcz%rQ-?8SW_*2K<z6#H;
-z;^cO$<EP`RR)4GYk$#x`s;?ct{?NnZ=S>{HeyitiH9uXRpXU61tod)c*V^Bze!J%v
-z+m-#O{X6iT<JTYY{H^NGe)stG7d?N1`_N<U-y#0Ms(!W_|G4LOGxB3?f7LIJU%%e-
-zJGLEreUv?5^|x9dwM)luzsd7gx43_sS~-6Er4Jsz{iNp?(f+ZvzhUk8^;<pPuZ&0S
-z|JFYpzkZkJ*KlwhYyZt;k;>0j`)|SXtF~CbC679O{YuYoKl#}GuRihk_45iXzsfjj
-z`)f}-e*GrTZ|3pOvF3l8H?bdY`_rCZ8<jfx@kv?Y`1Pwie}ZDiI={uwI)42^&)@3t
-zP2JOvU%%P&N4HqtMdw)k<QCi4;Q8%a<j;D(-(Rtbn}60kf2;MCUuOO5_&C=5l<HLl
-zev;9@N6&wY=Z|iYpQy0<TaB;U^S2sbgXeFx|B7B<?Qd1T%=5R}e=X-9zka9ZZ?*r*
-zUvm8UY4iN8_TQ4{Z#6#!)yE%SiRW*%|EexL{`k5)f2;jhQET<L8egO5Z#DmIp5M8}
-z^B*g(KK}OQzQ*!9wpgE>Q=*@&w_X&>YCk<IKktlKf|Nr3U*PFN{gg)~_@_4SDfzc#
-zeJr~#9xEoS<o^jP@@L<^Sghtq8C6rcCjRgL3(DzMzV$CCr@5|vm~xYE$cp`#(M*`Z
-zI96rHc8p;nJJvF4h9h_u@vs^8q3ZRTK@+n5J4)S^(BcV9(%z^$h!+rddfetVd3rsn
-zo%sfH%x%Tdtk{kg<W$hoY=%wveBwqktU#XX*s=V2t3QOdP;U@bFJ*=UsCxZo*ovxG
-zg6e<aby=})>ZMWj=FM;pRd3b|M^N<|@!6E0ey!E-MGl!AJ*fKKX4r+#C+;-E22}kd
-zs{T@aR%{RPBtDz@o-o56d@1=Yp5E-~W%wS_^E^G*(`R0j6}y%6VN^RqX4r~%lfK6B
-z@J9NXM{Vz*+v1kHG1UHB`CD@Vwf}lh^_txTevx*I@Of-sp&1t7^NI7#aIwy|H-)NS
-zj|Zt&hpJa=hBc^q)n=GL&C}e)R&M~`PrZIry*@MSMb+yu!)8>y1V;PyqO8~}sFz07
-zn>WKbRJ~a<96{A<#%EK$47Fc!6*Hf4Gn{!<R*X~Ij!{(lh#7X_2T5=A^af8a#yd!l
-zdHNdXE$W4n_+`?Yk@LWgT6`)N<KHmf3DogeWQMu;6Y^*2{2Amo<LRiuXgjB0X|}s1
-zsQp;v=AriEAd{i;HEy9hS!3zFZW8w~zDnd=Ra0RGW%w+{RceO07|o9vj=bFJ4dQmn
-zrOa?Z(oVk_G~;6!Pa|qSG?-yAYW^4b1K=9x6h4P|6dz0ZKIA#&9X+Ue-DcQ|Jf*m!
-z7N1CdIci*GW|)unlb?q_WE{C>5XXNdj+wy{2c6czII8}b8Fu00X}4A}<H_^<T+bio
-z;J=*oBIK#V9dSGh=eQ1Qf6k)z=ZqPSqxNS#YCkT&*tWOLEk^CXLN^z+{{~)U<qF+#
-zZlEuqoe?~T{!^%V88E{({5#Uia37Z9nQU)~86;5qv&al%sO?_c6&cRpJE%8^T6e8(
-z8EXIJqxR3*3$334R6o6_{oiAT-I$=?E;DFHwVOoV{I;V2)o;ET&R@Vg{K+4~Cy+ma
-z+OA<U>__eIF4X?2N7b)0!vty_EG9{(oncA-kQugl-0E>YYX7yJpA~DMy(-lFSGXmp
-z`7c6k_wadUy&H390!wdqn^60u0X6=5Gb}^RXD({~7Amu1rxMTMDL9B4Z^{fCQT--S
-z<x5e=LmujQh@;w%nc?EOHa}yic^E*o*KdaHsN<mxbv(41K?~}5Xf}gd)cht;^^44K
-z;RSX)45Q|^7@H}VhnlyzyUL(6Z=<O3ce@>^d1*)fYiTpXCe(hdM9ohEwY_<$?OmzJ
-ziaiczP~(|4!y$~0PYkJFfoEtusN*jeb^OK6aG8sNj=ynKKeediaPhe|&QZ6~&BtiF
-z+?AcST|KDnDtGnHvS@vjo9%81>bNMz)0y9d85E+9zXCH{W@EKoOJ>-Qs@H=$p1RGj
-z3!g$eon}yr|3SHGWU5-K%rFnNe`fec;~GJdb`0POcHn<v8>(Kb8P=orLk0dH@{3U8
-zDm25@XW9B$L7qygSvG?u{Ac1tGnhrKpFvdplo__*A85BiF|L$Z{<0bNp^nEmzJ~fs
-zES4giK<&?Q)czbZ!$H*kOrrMV+}XCh4Q?K4|Ha(p9k&0vQ1cRV2TMsO?nj#1(T$py
-zE;DREolgr<`=tP%%=YG+K`v^4#?5f?nYLXEW;llLpk5DZ-POB=sBx_Rjh_!t{dA%F
-zX-Dn<HZyF+C(&<<88o8WEx|wH+B2-*RWqE#PSR8O5cZ?CtIrHOQTw|EwZD?6{Z(m(
-zxu|t8Q$jlSN%DKmu)*Vck5`{=`>z4(X|EJD{|PrAbzX?0w!80XX3|}Js>Ne&qg#X8
-zFIA}VC(W=BHJ{7HHh<H&O1TOAckDrpx7!S>QT>*nj)wx&@vySpj)x^w`-^5cgPNZd
-zY96{!?RA=ABkFwGfI1%P&7cl-Jk**&1!{hCQT5|yIDM8K4}GZl&BMzmw{oV<+mf3`
-z&D#KK{H<;iYF-*q<8Cm+8q~OpQS+0F+TN9fZSOojNIZrb&!`#pVsw1sYpK6>Mpmqh
-z`m=Z;@c@<**Wi<}40$QGrqm49PS1)Rpxrc1QGOQhBX0HdI{YT-)%dTZFFeJ{PvIo#
-z<M=P6H+p(CPLp1Vzg77nD?g3jCVc{bNqQH)2|JNfdP|2Hwxi~y%?uk*^IR<1?t~dG
-zKiT3XGaSXsDc9%ey`J8J+TYFiMYg-i3>xuE#0_SUM73XOh6Sj4`S@kZ<(WY)juXet
-zApIn(H*bc+sCq-l-@L3DG=mh55)YU`JF34nGps_@OXA&>t2BcO{5)~F8RVnt<(c99
-zX;yCzzd*TJGnm0K;%PJJ$1LJLGw4QMlB(%4gL-^B{a2vY%W9#mmo#d<%$vb9{)BlR
-z#vfo0PGbu`fHimsOHuumm_Y*7Uy&Kakmtm9%sw$IHc0x68BC*|=a|Aa*1@D1j$xYe
-zqxf;kkC?$Qeu8+&4Ej**^_oE=-bLJC2KA`+>rn02nqd{H{Ui=kzS0aT@KeO)W{^O&
-zS7ZiDPsob(5igp-0;>Hqs{MI0oI$lejW<$$$_ys)CgKS*7)G@>WCrc{QQ|f;XhpT(
-zf@;6n3>#4G*W&=?>&&1QKSo?*1{J9G%FQ5-DdLzJtetA@ucF#tF~dbv`wMtG<<n*`
-zj|Yk8%wQ7L-h>(Sqt;V3>ikoRT2CcruvTE_$3@AynMSRzF+2}bcpLrJ;k$_E9&hC*
-zCGiky9rmHhci_#GFGH0deVmm~N#ZWldTm9Oug4ElJ`YvC@3B_CQxZ3!)^#nad?kL8
-z@~in)z6W)FZ<pjZpw@pis(c0BL4Gc({nTUZ_#H6AR*zdeu0Wj!%2DgQ%nVBL6Ph<O
-z$U~h6a?Nnz6swm;o#*DwU=DSjn>B+`RJ{>1?DDwN<2qFTwW#Bu#tf=a$3c}DBv9=X
-znc>o-t==N)e7Rr-Y1H|0-V8=D>fa38J#O>33e|rSb(~b1K?UkKDK~?BR6BWQIG<<r
-z=1}L|Su>bHop-0rU=UR=WrocjH+fu+>c0$i9F>|u3F<g1HiH<dowbuA!)a8#Db)FU
-z(hMe0=kIYd=tI@(HN$$3>pU(-wUa;{XGLaEh&s*+%wYLZ*3Oa{j-%?0p{@g?W-x-f
-z4h)+?3uX~Fn?VEWyj*VvW%x4MiKC9&(Ua`B?MEHAeP&RP^OVcQ63VsbT3mvP`%kpE
-z8Wm5RU~va3j(I$}&Ek60ywsUtiO0nruf%QpmQm|_$qW`z>wCcrCQ<E7m|>sCy&gBC
-z=BWv_P8-dj0kux+&7cg`PN^BL<XF6Hh7+iE#!>5S%nU|R>utmgx>4<PnPH8`)gBk3
-z+9^P-n|w3KL#>-!Ge~D!JM(5Z=yA&9R#ZDJsQuq;22H5_-)IK;m_?jt1~JtBU(1RN
-z=J0B57wWt=j9LdRsPlInY8}*?K^1m!UQ6Qhxn5M7VJSxUv#4<;P~$2xgF@7}3d~@Z
-zQK_97R6EmVIF4#(6xGfMYMzG8U<fr&gJ#f#YNrv^PJ<cNpxUWIwUb2cw@NdpK<&43
-zGg$d^ENW*N)y|R`&g1#ipGCDZgIY(^W-x_XN0VmIg&I#Ms+|rqY{B!X--K$X5w)%x
-z%%C2%uItPoj?bo@ao$gmMf#W-jG*@4uo<-Di)gO_wcm<R`z?;zZ!t4i`R`cl>7*~B
-z`d>ippR^gwqxR378H}RJ524BrqV_||3<gm9q2CPJQ01FZ<(p9R-Dn04sQIopgK|{)
-z5>)wO)VwClpa?aug=Vm_=Htg`{HXa$o54J4{^rb}53`7S&7d1KZ(U~4gl+U&ftt6)
-z|FU_TM$Oxl8T8{k<vQ?y)*0$?Qytz%T#P!u&Hf)NH-;)VfO;I&i~p*6sB-zJ_SPP<
-zato-(Rde_+lp8{oYe1E&MzvRldYn~^za?H-wQ@tKa($?B9jM1$t*FOcNmP6K=72X5
-z>n{;Jk9Da}!eXdTCu^PNnc>PGZQV^uomb7U*W(_K>+o{gEBEv=PtQl~pFI2`^O$P}
-zar_c-%nTO(VC|>PZ~|3t9KTGtF*6v&apDm(=tGUG*9==x^;%Htt=SBkQ0uMH3@TCe
-zD$Fn+qj93vb*>r2@$<wnGnjwS>dl$q2&&#Net~jBW-y3j#3?gq#Vq0$GiXGuzXmfX
-z$LlmtsQboTJd^Ro%`k>~9&K$UG91MBs(mvUKs_$#$7c3lpBZ+e_Dc(@e6tzkVLAOR
-z{HHl1DK~=8!3Nxi^{DkwXNEO+8tqh@!Tf(%{XtC9ULRghy<Swk9y6@K^T{v8_hABc
-z+!UaWo8^Cx+4GMWwS!SR7`0=D6&SUHQ9G#PssMFdEiZdJ7`1~@I~cWNh7}mKgHb!E
-z<E{X8+%5m!+rg+EjM~Ad9W$)Js2z;jK^>O`sN-_^ch=50>ij)~I_?Hh$6d+{2T<+y
-zn_&m4e7R)5mzm+xZ!KOl!y%6cJ#O;2(c|SM+yC`g#kfjwi2YY$2E|He-6Zg8`Y$rW
-zd`we54~HqAYX))r6miT9mVRUHEt<g?{sZ}=W-x+ke;C#NkQol3+V963Dc@%Xy?7IG
-zj~TS1+G{g|D(ojtnn5M1{R&k3<z`rdYQGo<D4#HcBK#O}p&7(c?ZwPs;Q_9nwAY3@
-z4qH*jVT&0yV}iKJ47+|Ei@kvI)u`iXWib{zmpFyHuo!Pq|7K8x8gC(Lyai^MiyChn
-zZ`XLtVC`42=)Ql|3>HxBrOluZ)o(Zc96LR3lZ?L+pM!OtUy5bKC8+gQY=%WxNV|n*
-z5W`>4-r_G~vCrTrs-HppH1=Z>d-0vL*Mn-W+YDP!$3+uPVFT(ouf?AcC-GJ+L!CcM
-zQQKW&2F0kyI|(z0<4($@|IPZJMfE?8>VFE=|D+iXq54nZH?bdee&|8<-+>>&7F7Su
-zsCCk0292n7(qINjRR2Y&?axQ`pNr~0j_N;Vh6@YU|2*ovGK)H|OriQ8!y9l2)&C&s
-zI7pen0O~mCH-ipT|MjT;Yf$}Hq54mv`mZ#@1Zw*WaT@bc=c72P|CK|r*qyk5>OYOc
-z^fzw?bExBd)(pl_{db|xOYNxhSR3j*)@p_=sBtu#VJ)hBzT~*cGsCH0*m<c2UqZVj
-z7~OX<7~QYV;N$3j+6=}}_lLvyXzau2dG55OPvMEAkD$_*e{Sgum_<B|N-yyAT-16@
-zGZ|`k7PUTxJx-zaSG&h8sQIh%xB_)QwQ!$Z*VAS&hq|uMn!yOZh3)Ic=y4Qgk>6|v
-zO{nsXW>AUR{u0#o7n?yYK9lrCZthfn!3@&)SmJpzn8T=lGpI-Y+fm9tn*S0rT>Gir
-z2aciAN6oMYHNS1B`Km$nTZ-zp#0-j2{U*$y2-R<)8R$hm)l2`_>dl+M9ID=|8O)&S
-zO`Ab2YP`j$aV5-fWzNPsf=VAY!!Fc*Z$XW>3e|5hYP<<EC_?pHXa)tSe)G*>^<S;t
-z9ID=|8O)&SO`E|Ks@|j-RHMdQgc?_&87}?M@5fQ;gJ#%)T8~Yr@m8Y7TcmW_Ei{7y
-zRKNLVkca9w*9>NVVEqnZ)V>+Eqwep^J-y7+b5ZMk?E6-)2UV}z3>#4O3O&8R)0e(y
-z$Hf3@J6lopTFfwss<$>{>8oZqgF1dXQT6IPzt;1MQT5XQV)f?Da1?c%HKFQNcz(I(
-z=c4LO{<GDaFvEV-@i_n8SnL|=jiZjY4%G3~gpXtX8qJ^zb4jm2?T0l^lG(V7ibrvc
-z_J%xe$2sD9{2o@|x3LfxarHZ#M{x$VAE(V=61CqZ%wP~-$@scZ<EuiAuM{=D5;Mrd
-zN0A;wjc4-Pe0T`QP;m$TiT+wWPNJSSPv8$w5BjDteQzv!{(1rr5%;6U*JlPjcoK29
-z8MNTFjIRncz7kaVVlznKNyJ5Fu)@V%<DW;3f6fg0Fpu<BjMj@8CQ;{?64Z9AaB)5X
-zXHey)%`k;JuDem?>i#Ll4&r_RRj$+wW2ob4anj0--^04mcB0DlnPD?({TJX5arqmT
-zzhs6JsPlgd{xep4ewF7JVs!ofdMvg?{vfLTlo__8)@?cd8y0wezUMDb*!pb8w=uu9
-zsQb$r)cs|(8CGF}IBAAUU$b(HsB#Ntm`0VGH^XjJdtH{_(rJbrmfzBDhQ+9I3CnLO
-zGQ&d4Zz(XtiLY9@aa6x!W;lxKcf<^fQR^fZv)KP}Gl-$q$=X*UgE`bXnMAFV2{ULx
-z-B&hB%?Ij!wG5+i;)lpz8@KshHN$y4iS|Z3ec01`u$B6Co?h$eC8%|mhgwgIJo%u0
-z=OyK*Q2h?0`W?UzlHZQn&uwN{k2%yY_4E=?&&B=JoB5)ZpEkomjMg!#-=;C^w_Z}d
-z3e|53s^3C<KmD$J!P;3i!&&@q@`pTq(9^rHh4dOvulDo=>bQtww7qxx_Daf6q54hX
-z9_&ZmxAmD}FFuj|)MEyn_+!e|q2{C33`=k?=}V)QzG#MHsN<~$%h{f!BrZku8^=am
-z`$y|{)eKkg3G};c1`GIo%8jA=9W}!qd?V?#o?heWMX2L=<a5^Vpd{`^_1lagHlnt-
-z!3^v1RQjzmgKGQ^<%&@K7MkJmXJfHTNFPO|kC<U6>ikfE+TL7AyfR|_PUFvsCsF-Q
-znBh1U(C?TT4CAjU*NJMs!wl;%O?siH7kK)@XY9Pwj_S8XQm!7gy=C}&EJ5{KY=#MZ
-zJpC4#K|cP1atoife$!?+hRdXPczV01SEH`CrJst$uB2Z*Sojg`tqn&8tEk7hE2#6u
-zvKcO65%HoK&Y<c|o53LJeA0wEU+_eKbiSxIgK})3-!fFYrDj-&bBrS&XEpz*<9+dy
-zvDg_njXDnUQ1x?B_2Xu^e3#W<#P3r-jXG{8Q1u5<^%w56`e{`Cc{7|s^*@0#IEFg@
-z`cd^eQ1vH=to{V5{<s+qq3Wk_3j0yVPdlo94QkxgsCrdqSca-sf?O(hBv9*LPx7eV
-z>?f?=465F=8IGaqjUboK9Yd(~+l{K%fa<RvRj<wrlc;(XIE`hf>s~&p-onSNUK&+z
-z-VCQu^(OG!IEGq3{iu4&ci8n~$qW|oB-TaR3`VhodUdGvQGvSNl$${rs(h&##8K;K
-zY0%csq8Ut~?ze|f^#{!$g^wj3FoS+ndwph*z<K(QqwZ_c2kkhSH^TwceQ76Z-L<0j
-zcR8xR0#twbW{`*KFV_s>sQ&b%2L?U2TYs&n`=c7v`Jmbib5Z>*-Dc}_9@Sq8)n6xO
-z(O!ocw4?fKGlN!Ce=TOPnzH`pF-H9{RDYvp*oNw_9<{EkQT^qj=4I(tWPeVf>P?zq
-z7ph(}YCV^u$`_*U!&Yvw^2=s8f-2vKTF1?(^7W|uvI<oD<z^U1m0$jtt=~yh`BBt;
-zS|6%>uNgL?%GaRQZ30z3A9dfhJYeOQ%y1l4eh9T*t8l-@kG;%aff?kZ&UbnEX3n#@
-zX1I2<-H)VE<>$>{7=J)KWCnw%`YAk_@eY__FKRutp~|<KK`rWhU*;A|#+Q#e@2`E-
-z?kAS;LzJ7sXup_Y3SUpT0n~M&-wZqPe9E_@&ZG6H{wpw=cQcHm?z0v@LOS;2Rg`bR
-z4=~PVGiX9>S0i3YKMiJBi@IMbN0l!#13fACJ>s?g$Y2$t>j-XRUY5;p0d;<!LY1F1
-zgF)21bh+)4ewtA8Qj5CJO5z78SA^QGLNi>s$>wDlH7`qMIE$K>Y1H*$7}b9ds(!Z_
-z)}ywoQZX*w$a<js1okk_aWfc0ZPzGXK|dpAIEcER>qeFDGJ`t&7vfqos6o}Q#y?ZP
-z$_y(|$7d0$e4!bve%R(^&YhO@GlrU%LDanT;rkhHD{8x1%&;1@UaC;@k~G5-)Vw56
-z*FC+NO8uw%tp2<i4x_fKS1~5BmGXtCehctS`pY-NJk<3g*9=E)h{e9e_6(cB5Ni7e
-z@u!R@WrlqiT{ltX+svQ_%jvJwO-TC9Lv8=!KiGZn0_IaMZ3fe*?Vdz!_k<Y^p|(4P
-zQ`m{>w+Xd<<&yE2nc*4-q3)AYcm?I#QQO^y+U`~}Y(Z^zvl-^&KQW#>Gss14cN}LK
-zj}C4OS2(%od^v|IKWhfVsO|1?J0;~>P}^ONjaY?`p<dDqN>STgjN0ym8Rnw4TPL$`
-zVw!_U{Z68`yH7IyUNdY!-KXndYoYuc2fMa=7PZ|oW;l)7?kO{D#d{b}iy1Vdwz~<x
-z%Xk{iunu+KQh_R8ZU%X%?OtLr%e182G-|ttFvLMTg?cG7=s|6F7izmZ&9E7@-HkYj
-zNmReZsO?_iVAXano8dU>aY7?rPWcMdc9)~JyUYwrQQKW&hBNQuaR=j>HiIeDc2DAO
-z7|(<mj-sw#{rDZq_nAQpYI|$kq@-LaYP)k$k3-`4XzJ-jOAMCYYumkm+U~R&PNBAY
-z0;e&B>bDEE-F1@j*P3Awrb(Z853dhUz8|&SeW>m3HNzg%c6Xa$8Q#lyO3k1IwcW+I
-zz<3g7Sb(|?uXbDc6*HJdZTGO7l9cN~ZFe*N9-A<aej3f72DQJdP}`j}!xGeXC-B=C
-zL-o7xZrkor$@oXiumkltDS`VapNksL+TWYY?t(k#4!ZqrkK5_Cxpi)}Tj`d$#qRRE
-ztiJ_!&YgBA+?3nrcDo&Jt6S-oxy5dwo98Zd#iGxREVy%c0sF5PH4j~GyW8T{xz%o^
-zTjmzKLkBpoF~5EIQrc@nmcot(yodC9)c&h8!z$GNE5V%@!*5Y;?Va{|)v6iJq4LM@
-zX^eLe)lSL`doUos9JL)KZjqbs#@+7gdA*c=+EC-HLzcphO8gY*6{z;h&9E3X&Ro<u
-z(w(u`XDK(2dR=YK498IU{itzvq1x#*!xq#y3sB?Cb=Tfu@v^(%HseR=rw%pFa%5NT
-zD8idaFGRIpV1{u#pZvwYvvEw|&6FEQjdRQl`#rxMHO?kfJB?;ogBs`Z+wC}-c8A<9
-zw*vQ2Zl%MHvt=_J!~y#4^7Kwmufu-Q%RRl!)8nY~@WR`yowON_;^#>3^YmU%Z^BQL
-zUghaYPcJ}S$5!6z<1xcYoFaYD(^H<_hLfb%d3vp<7o+Y2%C3vWUaakF=ly}4kCx3~
-z33c9E#5XW+3uZWn+KzEl`7tx-Mh^X&E;Hyv)$hRF)NeP#7L1-RLzS;FgCgYAR#RvO
-z1*rP@*hKw2Gt`GQH136Kt$f-HCQ<8c%x!g>+$y)iU4Dy|UvMYgF}Kxia;q@Ocq-j8
-z)Ols;8fz!*PPyZ5o7>>ly1DLhn_U+cP}hkWk4N1UeuMOGoWM4Wj%R!i+gpxbCA|!_
-z{!7iU1hw9a%`g{tQhxSo8}F3c={CC!Zh^aYm5py1HNJU|C){BiCcO{u!cNrq8d2w)
-zBo2{Yi5g#p8J45QS7wF<sPU!WY~!1Cd)zj+*-f~)sO#!ltBr3F6;Hckcq4HN`>+Q!
-zz82JZrUw6k^lH@js?0En8egRuCQ##Bywc7WlWq^{{7|cy>u`-3=HiEGcX7X^FPPyN
-z>iFsR^gd5-Mx8gRJ-y1)3-ObruU=v8teD{x>Npzm^g&N=N1Zq7J-yD;OYrNY=X!eF
-z)8|_3cp5{Ef7A@SQRj_`%VRN46+3z{V7)iv$;9RO6yhTMDe)LLS(O~Wqh>III(~;y
-z^EhONgBTE}%&;3(ugeUo@dDaQVmTJ#vlvGKK8kYrX0Wu+#=B^S<EZ`9imKm)I`1bj
-z+K*;fj)B_6owU2q?CS;ZB_715Qm-FXug?s-@LcM(qsrBx`YZRi0JZL7sOJS2FSF;p
-z7R(@xCo%qcGZ@AvsUN(Lc6#tU;#Sl=H{sb>k9z*F7IUdzV+IwtgY*K_c=X{<)mypL
-z>Mf$`&EtvGn=^w+RJ~Cw)_tQH4x&CUoHD~cRC}GMaWrEz4m?5QFoPtXLw-JL98G&;
-zvFDQCXa)_abx@C*&pI=##TO9Qm|;1pUYQxhluo?X6dA0d+F3!hvuuV-SV_EShBK&o
-z(`HbN(K>ST+?Zs%3mm+s(e4aBkEt0$?bl&cy_BR}7iwK}p!#n&!)DaFs72MQLX|JX
-zZ=y~PU%}Nk@_u1l#;@T5euMITsD8TL4!2cOt`0T6Bx-ymsD6r+kNJ{vE4yucOQ`WJ
-zn&BL3d=sd8qp0%TID)PC32erXV<X;)bvQx!II5r3MsvwcOUg~6#y5f*Uq7m!9_3@F
-zq+Anf{u)r@t2e`H)cDF!^@>sDS1*ahK8k7l5YAyQ&fpC=iC?9B9Wuo`3Q^~;0yCU>
-zgPngzQ0c>F*onGtYxML6PcK8AXY)Nh&(qVP-JeaM+8H;)Uex)t)ze!%J&C#x>uumW
-z^chz(>Tzci>TzeI88%>oxZVuosB-!;5tUneePp<bDz{>WDO9-u%jf&4tX!YvxAdA}
-zC8}J7<+qfZVVUK(l$zoE>uf*GxZQ4tTkTf5g>IfZ`C6+#=61R5Zk=20>cin$7c2GV
-zggff?q3*MK+)mVeR+Hz~yZLV1oq3J5H|Y+d+8J<rQSBr>zuYZy^WCXeTRS7}pxfZq
-zO6Ii^b-quyYwYYxiC0nUd&LZwa2w~NMKhSh&r@yyN3kDu-_d7=y{P&<X4r~5nXhX6
-zBIT=4<&$Pui7H=VhDErO@{4u09rJFV+u^plC2o<V{an;`EnRF*p|)!h)z5?(j$xeb
-z8a0DnOi`{GZ^0(iI2+Bd0ad@=3@cINEWm@5&qtNdGs9d|`M4P_US#D*v7CBCZlhc6
-zR=O*%vT}=(_GeMsHRkrAwyPJ_Pmjs>az)=iS<`6-4ftNlm18%Sp~hKih9#)_#b%g`
-z+OBjh&tFr19#wwM3};d0XUuRERlWoDJXXCsd7+Je%x!h+-5NLUuD;T?a{;xTQ|=&Y
-zJ5#8B2h6Y!v)O;WX3&B!qg)kMV-hv)N;9lL)h{>0Le#jIUlEJGFKr1`e$fmUQ03ER
-zIEgBsLTzV<TZB4)r)%u|I&X&kcp>H5J-yA-tMR3zmw0-yr?0%+>Mxt&gva9^_jugx
-zaRXjPJC&YZ;put!LDH9AX6-GS;W)mB^Z`%r_w*LLgY+6tulDpJyp{B|ms&fkW;l&s
-zCVkk`hdjLl?<T#gIu_#)+|h(u=T&a88%Lej)?Q*Rqt0t{9?!Uwo<5Fhr^&5xOWlN|
-z-}H<5oD$CA7jPWEh-0YzI%<X^sQo%@hP|l$+JNe((k+wJUw#qqU&lqf4X07Z`xL6(
-zNi&>4wL5NxDO9^HsCH}Iq@=z+T=;HWt>W`8IFCBs=1}d<n&Awp-Dxu%LABeCT89g}
-zto=!MOp@M?FTqxPIo9DTuol&RjTu&>+OIOh5>)#IsP;!+XzRNZb^p*|hDp@=F81_<
-zr>|UK>w6Yee#Q(3QR}kX)4M#q9<?qjJiXl0b5ZMZDQWF2n&CKVT@HA9zo)mL)@7}y
-z*LZpYwJuxF=W!z2HGH1USHIgO$xooxPXT@bb3J_~;PYq1)A%Kvz^~Iz3u?dCyH%3>
-zbfvAAS=4%&LZ$cO?bw5Z*oj}GeyQ@Y(2Yy-Q|H?H=tHfKZd7_L_FxTu0F(F?>es!%
-z+DW>llKkoC+d7y)t%FfidMDOk2fh*uaS!b*RM>o{&9ED_pPM|r(bG#%=dqZluRSlS
-z7fzz~bIRhD0Z(s2?dM8Qukdu;bZbA)KiB%5Gs6^WKeu~&o2OTz_H&`97kK(Si&p!&
-z2)TsqXkk*dJ^A=r(x;ze=bJ9ne7E8Oto1m7EV&(p9*;fS;uOA``hBS5q}L4FktMaG
-z7InPjqK=o9XOYhNY!)kV1RKd8zzXuaQRRBdVzGL~sN=EA3_DT%beLfss{IO7y<$}R
-zaa8;1b9jD}{8rTQ)?$W5sO?@k+tQcKa0c(E{4`$A5|}cBNqi^qgc(#~E#(rZ`C8s#
-zPNL>%9CaQaaZ^esZt?soRJ}6KFLn!*Pr1ob%kM|E*Xy=<dbP(%x7^bUQ1=Hh)VwS_
-z)7qJlqz`-CgDTgKD%ao^qULY)Z*2Z%QTt~GHQo_ay#Z9cBx-ys&xpk?CVd&Tf0oQ}
-z9<>feG3p1kpQ};(Yp^61y9iUL{XAfX{it^MBZ)F>Mb)oE)k~trnLzF5wWre#`8}xp
-z+--*S9@lwX<Z+?LlTYJu9PL$LHT4sy?JPj;zg&0qslH!O`Gan+q<$-EJhiCtl%m#M
-zA-;zE7-~JQ729^Mn&Ap+JD1IH7PXxdsO=m@wVOh<+lAWB2IaGz^=4RtuciF__E_w7
-zs*f7yC~7-~+<w&hYViDWH{s?<+F3ly`kg}cn?h|*r>8f1da0)`pK04Ug|*ZlK(*6>
-zS}zHF6^<rse~+N{_plibq2^)G47*YD(1x0aX4E{?p~h2znulEFGY@eyoH@hdX*2Be
-zxYy%a)c!8@^b${BI^E{42QQ`F2Gso3x>b^TC8%)}pvJNG6q}b-RQduceZtfGQTx9a
-zH80($cG^($(tw(mdaT1z)b^B^;aZW6cOI2KXNH5Q{oRbOW}NkSG3Tc`GpNDc#QM8#
-z7$or$V*MRB3`$Ykr!P^ID^E5j+);PP9YC$4KDQgSj@t1h*nnBIUvCDbsCE<X(vvJs
-zyR+_;JMIpm=A~aTc6nTj=M&eU)=9M)E}h2fTcoE^>GNhdhFU*;Zar!pmAm=wVj<f>
-z`V5{=`B7B8A$$|*gQ#_yGQ)mUKYeD{jw)Y=YQM~#eWLBJ88hs{%gJx@^hQrF_qfdC
-zIKGf_MNdH5?LXDxHq?AJyX9^PYQH4h0@QxV!%oVt7TEroN9~_EGZ@Bl@>6b$+vwK0
-z)o!I^TqPbCp!QQPz6ci{Z_h`iG1?DiI3ww2993=v)y@E_em7QO8*02&m?R#4oXuwn
-zwI2ph`=Q?qdr|%Lm|-jKq<%GOe^z;Z((_AE`?nCapH?1g&bS?t<Ez~aOHunF&(m`~
-zeLmmz;~1*^s2TR-{j}eQf5$xcnn4e~gSgua#vjAywJBGN<yhtByK#5*6w6;i?cW7=
-z4z+)$P{-XcYQGMdK?kbcR=3hEbBo=$yYy(=4{6kXnfACJuOaS3&2z6A)?x?gRi2*o
-z^g`79ujH9ysCn*lTit5Bmh>{z{wP4z)8BQ|evYH|v)(*|;p)lO|B4yTp~{b<+V6GC
-zCHtey3>O|{`)LxDK4FG^9`}0OgzdCb<>^UJFTl5JoF_54^f#Z&eG9+NnZYdT^@<tP
-z{7jqS6rM{wX@<k7dP8Q=jW42Jr`zn#oM_`1!WWaDa=YCGo<}?S`x_V(qWUjD^`CEs
-zdH7u7Tr*rg!RjrU!4$rbdipy#S|<%|iCctPZv}2HYQ5=2q0do%X`8LP8PvL)HiHzZ
-zy*{_mO}gc7iDX_2JdUBx11oVpuZC&V^V;*M?V2;gX-WH|sB$A1okvjhyYQ{pi5h1U
-zzJ+)y$JWU>YJH8N*4L;R4x{=RGQ%F!`f5V0(?-v4@ce4jx-CbozkGKo+v0x7dh0X8
-zYSjATz1>lIv8S&xdAc6Vp~}yiA+M!J>#obwJ3YM#@2B5J9AVxY%%C1WOI&9LJu#lg
-zpj;V7@0-V$6MqT|vtw_+1OJP!;QSc=3U9)z@Pi(|2mhY<di))}&Eu<ahWHAP_u`L;
-zFY)*__%q^HdHhmT{avW`&qdW|Zlibys{YeGJ_A*s%W{;@={EK{Vh+F9E@bm!*I_IE
-zkdOAr;;dL+Gk%v?ZYOTUj}yxh;(GidvD`sii(e*|XA@WBKN8EoAx`4m#PXTM9J~6y
-zog!IET!zEM@)^V>cq6fVDsch_h~?9W3-NYh`E=rZWNwS(nZ&us^`b~7h(Y_8yRum9
-zEMoQZ-0avXYQF*#SdMD%IjDA?hpPX4gxF4O<T}TkouKQVOt>*O%>*lb!cDoIZljxY
-z6K>2+({WVaO}U+JqnmUSZp=+{or~(bDYw&Ybdzqvjk#&IG^+2W+)lUAO}Ys;=IVME
-z)pt{Fr`zZz-Gm!+)9k6JzMFD8-9|U*Cft~t<~kMCcT;Ys+vq0Ugd20yT%V%)Zp!U+
-z8{MRvaAR(o11qZUrrb`q(M`GuH|C~Ua8Z3X<?6bo^hP)7Cft~t=K2)XcXho}-03#D
-zNjKrf+%(stsJ@$WJKaV%=_cHmo94O`)pt{Fr`zZz-Gm!+b)AapyD3-KAEh_CNjKrf
-z+%(sXsJ@$WJ6&COl%I4HZp=+{9f|6@DYw&Ybdzqvjk#$mNA=y5+vzsCNjKrf+%)GI
-zem!BrO}U+JqnmUSE=2Xl@Hw&A>9Ux&#`k(G&m?a4Se{Ot^jPwc@)VsQRbR5CPsz>h
-z%<0O>&7RGf<KMyfP&_xgZ(IMi-0X>h$%5SM-c$Qd<@Zx3`FG?Aqff}q9zApH%-rnm
-zvwF_T&0algjekeZ9z8oZJAL*7|IVB<drofl-1Fz3pPN1Og5ekN?|H-L(a!mO=jUcm
-zpFhLDUCHhwWvb_^bF=$jIq*t)f8`wic3;?YVQ%(vxDw`OFTG*;4UD9vza=+&rDc_W
-z=dPH)A~$<%|M>pg?13v&SLSA~UD?@6zpV@U_st7$rv1*Wna(U)y*_K;dR)9dYe|m2
-zGi&Uf*mWSQ`vA@y$eNX@uB^c>T<gl}d>0PgkTrY*uHKNfCa3zcru(q}!&w6##>Ee3
-zEy=MPv&L`4?whiDZo=`KvL@v6O<5~)us>_4A6NRbR^|LhveF;Hr7vYIe+kFGoHg-f
-z>>1DM9asK%R$2~!C2Qm>*!R_}{;%TV53-hifTKUo8v8MJ{UodVCpi0)tT{RO)2yMN
-z;>u66R^{Y;*3>-q-IvvWA1>UNwJ4{5mNoM;oLR}5UBT3YS%VMa@`G6`a^eqJlYhY8
-zKW6p)5z~LnT96~FS);4i`A}BZL%94<)`}eYVD{(-vuUp{d$tdkKa#!j5$wG+yYE&U
-z8O$CX#Q8h3(|6+1UD?ZbVfSaUdp?8xBiREZI69g=Hj0yXXHVUYOJB@h{v!5%IlJ%6
-z${)`j8^`6ZWUqV$C%=|G^);n`J$vlyI5n9)J&E(*%1(a^SLd_W<}rOAn~r_y?EW;a
-zrL#Nl$B{$Xqld76A$wo}r+=9}^Gh84Rrc7gaPimKOTWgM2eM}$z^UJ5PyY@Ff1f?{
-zdtCl~_KKYT&+M81#G#e!;T2q2$zGK+tJ$-wIQ&rd$V0gLQ1+VaeP>SJJ2}2m2XY1v
-z;AB_Ml#aTkcjYX<3;W)k)BkQ9es9jmdvW^xIWzB9es9ilFHU?cXYyk>dP~mOEjWK`
-zPWo1yN#)F@aP_vFwcBv%_MGM0v2QS^e-OLx$mzKQM?Ri2`f(imM9$DB<R^26K8gLq
-zIRnEu{Mnq5&tmFxIfI|W(J$nTeF2BYa)!sS=bJgb-^BD!au$AqgFnp~`YA5{G-pYU
-z%;${G<J@m@=6{1@OF839*!$a@zTaZ{w>b-P<aarvzr&v2=k)#_Cw`wZDO2x?559{t
-z&-}aMX*u=x@#(+Eu6M_~-;K-fj<3k!?)XSI_P!_H_a2;hPkd4izBfMfUYvbzd`>QX
-zIKKR0#W%+1Zp7Z3;(a&a+D-A!eq88}FUr(M;)5T-o{z?RKZ+|Kjjzg)o8zN5<G?^X
-zHGrKTi+6oY=^u-a%I;g@J-6V}E%9YJaBDnuEB1`Wdq;6)G`=e5?~bSM#_`X`Cq9q8
-zUx@d80hhiIUzVw{_~00hemy?+b?o|Py!)Hj`K@@@x3K%(c+b5!Hxr+q!QSu1`@V<c
-z-;YmxA6I`6U;6<r{3yQoBV4{ezH&dN4#fu#VgEvWU;&qY6<_`pPXBv+=HGGP5AoC=
-zl>f*0z#lR7P<-$qT<+Yq(#g4h==yEL*W>Ivx6Qp1d%L#vb>Z5(w{>=7_djgw`3D@k
-zVcYl(IMTOmv=6)bw{`2<v3A?G&f9VR_HAi7a&X(|LFEr_>mJ0R&ukn140exf>lwkt
-zk!?$I;<MW(Kg*p$EcT!8<l@AIa{Y(LM6px22N~IIi9>&5`Kzz964&zpN#z?}Z}Hzg
-z+u{k2U;8YJiyJJz@BlIGrM<mJdHj&adJ#|gfAYAS>%Za|kBd62z3R)Yy{DI0JpU$(
-zFWzDC`ro(z=-C#pywCFgt<>Va4_N$FFTeix-b=mw><yN`hX;7-Kk-J}{($=##d@=|
-ze)_z<^}h%HOkTg#e5Ah`Wyk*P^HKFRi*r0)|NGu2`uyZgSpI|0wEF9RKl)W3um8R0
-zcHiFhzmI#R&&T@TyL}Zm8PWbY$HsTVGb~>Jd$k{UyT$8&e^#%ns{H!jtKH`1*Z+R&
-zpS=C`zsLGBZ-4#ow?4(!LlrM7>*q;4I8=M<e;@S^-hP+oU!wKJKF#IH4*lrgjqwk!
-zCuWWp-(dOYcz(W@4?QmQ_^T?<J!)&CmH+%Zh*`-czFvkDv%l8Y?|T(<Pu}SJuS;<*
-z?{)Y1@jTu+B{y*-Rz8m*hCE-N>pA67wCC|d+Mbhn?t&*D_49I`=RYH>GgeHS`uP$6
-zE3TqX{hV1%oYNUAyTr=hN83^Py_TQj`T3szHP0XL_Rf5<)h}7EPrIr=(PZ^M|02t;
-z@cgShzuk|Ihde*m^Y8ZjwAM5~-(~yNUcs*|el(9C6~{R)^m7`={bRBcu~MGz*U!Fs
-zi>G;<s~^3OPWeqsQ5b7_mBn3uvbgn?7ALQ>_*-7S{udU1?$wrG^)!ob-lP5#vF^PV
-zpT>Da?XUm+?hn4q;sVQ#ea*+G$AS7e<+YYSU}3E8GK<&${`_TLKYfPnkI#7dYTw=~
-zF0}F`dLoFQzoVGOqt~tU^LW<k899mAs;}4Ki>!Pv`%ym+`SuPlZvDKSC!RF^Hn0Ef
-zI*Zr;-t-~wZ~gCM|H~^ZfBo-uzu^*#7q>^v#a{lm7O(%k<I8F-UjO^dXL$eXe=quU
-zAHQB#)6d-;iyHs>@%Bp3*XwZlS@8U2-@X_5_O1W@;W?krc8+uX%=`Xc|NF+T@a^k3
-z-}3chp0>aLbc?_1<6r-K;^+JRU;q2mIUMjRU;1t<|EV`vJpCSvKh3-<zop0GVK1Ne
-zL5u6X{P2e?ex{GNcEIBMxlXBm#iuNOjkj0RXYt>9d#g8EoaOBee#GKSeg7<E+4?!z
-z<JL9Hukd*ByB7bf#`+t-&*HB2`McNRPkWqKXzktZ^O=0m@^|}qr!Tj7#M|qduz1P$
-z|HK^@>;0hGzNXWxy{BBj{@%v<$Ip+aJz4v|Ggj#5g9CZQ9PeGHTK$`oR=&c^-=y;!
-z<r7~1LNC9@bwNMZzSQz-J^wkJ8`a)$yXD{F`PH8PI?qpf{y%ws((|wP{Ml=*{z+BV
-z{;KEy(>80rVa4)4@Dj`K_WYNfWclsB|L*que$Rii=NJ3_ocH`8&+qsAnVYTs^Zops
-z_Wb|y{N~?yzMr3yem(lH6RrP&C)oV&_4%*$`P}XEKj-be&)c8z_$6FxG=D1(So`1f
-z_A9*ocXC}&eu=mL)E5%7f2+OyGmD6GI%8Ab-jBTf36F2^_Gf=(?VsS=U*_$9!`mM{
-z)yDsK-hR^Cf2+4Y=Iy=1$5-q1&-MCUPqg}9_3iKW`d{+xFY)r*UuxrB_V#}6<D2*S
-zeX)<P+RJDA{O5c7Kl1U_d;34|@hy6L#b?@lHU8SRxAG|#_j~+8AK&`@!+AcwnAgA4
-z*ZcU1R)4_Dw|am5UOwN)*Wlx6_I$nXLHi@u^Y8ZjM$iAO=j+QS^t0yecY6M+x1aF*
-zC+woVZJn`p&wre@hxQ9S|ABLC`>Oo>dxFOUe!p;TndR4d{zaZY<oSAEo7Pu@=ilP_
-zqn`g$KOUQXer`I!%9nh==I1#tB4#|Tp8tE#pX#;z_j!K1=f8w`Re#MlSpG}B{d&*e
-z=Jgl5E&pwv-{|?z^Zf4jS^hsKX^;8o_4)a>pTFvTem?E>JH7s!ynddaFHZ3B^?Lp{
-zJb$d;+JA%Rr#$~jKK`bgE&oC9zu)`+ckjQ^`=9mtBVNDP>rV_@{r}efW&WDI{1>;`
-z{B-&C_&(o1gO^+R*KvQL`D?qw;zeJt9iIP{cUu0~qUG=PxX;foKfT`at3Cfz&u?eD
-z_46T*7yNknjP8H7rD7@HzV=Sy6H~Evzd!y*k2^iSz~lA%@7Z@)`CiXo^!!$j&(L^i
-zuiN7jJipoFPgDOfS&3NTyJOMM1B_4c*n2GgnCI8`SbVR?tG+&aJ+AQU{kX>qzW-n1
-z?e+Tgq0Zxezn}Ql+pNEttgNVmI~cF}FW^H9`f2g@*8K6<Z`hy8*Xt7c`7Hk{Uh?bh
-zg<ikt1y=twuOC0lVm?C}mG7ulZN7^#Zt<A!-*1to_6o04F7GY&_FB%j`ubi2<=64z
-zo_>Dp<7tW_zPkXG-}e|xxb;mI*DhK7L656`Ve#*M`%4~W?LDT$$~UZ8{)sQMxL~Kn
-zpZGhAyBjQ?^|-Of;;VhU)fLuWrH{8PVR7|oR==s-$`^S&@Ewc)9yI=0zu!8K<4y69
-z-)}vRW)xQrP>>&9V~*n1i71Snz25%47JrK4P34O}W$`CGf7p+&b3I=5>(8vuN2%Yh
-zy~X?QI^F93#<zENyTv<wewxp>_<pZn>-TFp>)Zb{%m0?|ujw;vJ|?fX@mVhacKG)E
-z$x@bHYH=fP=F`uUy}y-LTl@_lPx;waek|a4i*r5k^UbLqcY3_&@%rQKi#;yz<NsYA
-z7kT`I^Q^r=um2>rQ|;gA@rOO`_V`0y{sga|pS1Fy^ZYk>{=CO;^!oqo@qHdoc%1g~
-zs~$Icdk=VA%=yx0A{PDp%gLMLyD!}wU&MXt#`4d7^yawl6`SLCWR$NzV{`s~_UFd-
-zR^PHY9?8hBPi)SAR7U)cjP?sN;!kt@ZtQR6`J3Zkp1V0d`I^mf$5S`QdY{Y2_EH)1
-zaXaU=jrrfsXz#AaZO$)l-5fVQeRI6nyg7dGiJRk>KX!9`#s1ClH5v2!VUDYf<J<d$
-z&2h;oo8xmh&u%RLn>TKb&&z24qBA$=-@%D?WBscivpN2L%jWpnvo^<1&6w}C7i`YI
-zD5L#X?cJRJxs3Jl1<peo$8&E+`MHepMa7%TXJ;HAf66GY_kC|{zayjkcQf*@dCKPU
-zg&E^n$XLJi8S`^vv^~k#`p?bL`acr?S4RFsM*g|cc#f3+w~YMT;+x0Ume?FWEhBzw
-z#_{#)jN@xt+vfVWW*lF?&*<;pGLEmGXB=Pk8OPU~GxqP3qV;`b`(7QjcO<?&WBc1H
-zH;=D1W4*oYt()^tZrU8bux4|dzio4@_w#OCA2((k|2JhE|F7A%xqMaO=6ERM_)ljX
-z{~x+;bNTOP9RHumIQ}~`j{lEk9RHusIKSub-rWAX&fFZI@c7N~cdyzUFGceoJN&b7
-z$>#ifGtL+1U9mZTDC2neL&p4Ozj<@{Z)MEy*D~g}Cu4s9lrg{hewmH?@8=ow`=^Zg
-z{f~_K{a(iW#xu@;f6kcSmW=uRY{vY)K4X4&UcGsIMH$Ceb>rsz!u-wg!HoI+e#ZRP
-zWE_9{Gv@b?8T0$}jPuuQ#{AZ0To1=G=66TN@peu|`#UqPhi7H1m&-Hew>o2gO=ZmQ
-zeHrts_rqr$UY&e4GGl&gGUj(UV}38onBUxt<8v)zeuqxp+~2RBw>duJ<(uQd=WdRF
-zo^d^S_O+Yyf08lYr)8X<-dwS{d`(7wMH%C{^z_Z;TQd54X2$UlX7qP&Mt|33^w*rx
-z-*`rUAJ6D7%;@i$jQ-BObn|%MmT~@hT*i1l&*O)U`~TjI`93LQJfD5b=JNlMG2iE9
-zjAtdIzXvk<dw<6E|1zV$*^K_K$=Lq)XY}{py_?7PuNl|N_9rSod3ePazj1T?ljwLq
-zlD{oF-yVsd$>X_=^-qe{_mTXUMEA2t;?GCN$C0=;x<5D)KP}__<<;@c?SCnnpCjcz
-z9<84v@!O;QbtL}B==eAi7ewplNIVhkuOo3)w11AoKgnqS!Ho7_5bd8M<zJc6{$r#4
-zb0mKtqy1B&`-da>7i4T-Z$|sw8SU@NX#ew1+&o|J&e)$9N7v&c{auu?KVOrvKg%-q
-z=S>;=)82o4q`gmN?9Z2H?9aDl?9X3i9G{=gIR7tX#O2ZbYV7cjzE5i7@%prk`^V?B
-zZ_dAS*XDRnM*OCX^Xcsw`N@p<q{}w9_p*%p;fpek@26+v>w6bBj{kER_d`#p-<<!A
-z*KCeowP$nu*o?=I--y=B;pvK9pK-r>bH?_3Cuehee;>t1_HSvP@{h#3GxGnLjoFyr
-zm9d`g%!tp;-dz3$hPrV+vZMBnjK3)=e<WT#ZFBhtGRA*xM)}7-X><8_v>uPNcV|X_
-zcW1Q!^o;ty&d8t7=>L|C{$rOEU;V6|yRN#fwe8B6?`ykc_f=OsxBS^<t=GJ<W#68c
-z@4fEgeQ(|SqNZo>-1)5MU-Fu_Zc+N`eV6Uu-FD4Yd;fyc&)RwQ-n~tk1uwhulIGo4
-zH}AT#^}5(4SM0rFk0f#L{yiGnuIAnRS9@iPr8ez7R_fk8O;_)J_1>%YT}mmos_eyA
-zUbDYxciX-z_m@}gZrlCpXYIV?qP?wG?Y(;M{<bLj!q;3#(W|fBcPSg*(sJdV7hc&O
-zb*r(wa__ZUZ0@lp=i+^D*?r9x<&QNzTbDm-g1o2=^Rm5db=S4-ec^Sl*uDR<mc31{
-z+<nE~m+s$n<^Hz4?QOA3d}CgG;YGV%bV<#H7gSwRY)LP@ki8pgx#aAt+paqMInO#f
-zV~?K`P3V=E?`u0d>gVt*T*PeAu6D(qrsj*AcVETMWBQf2WoMVX@S1%sZTt3La%szz
-zyD4Zxf8*ZE_U*r5&z`+kU%j5RcYl*7_{g61tg~PIf1A73t;TU>y&r}10=;bKLUPtR
-zKTJphP17*A2WIU*UM6wUZk)@+4kZ2br%JM{t7V4-X7<`ML+nziR8^8nrB5=LDm{xg
-zo7IMqZI|(G9Z&LjI;4*q`z+{geVA3u<R+u6nL54Bmp_-;cD-J0K*Te2p0n9@IYG~}
-zXo<V0g=nza#1dhl%uPH?K_gH@_!@6AT2nar`I6-?;WXO3B~UfhJJ>4Xzn(YAbROS5
-z|ANvF(i@_3_J|rhivsA{sK9>dFs?J$ZeC+DB;1|j`(!!4>)*2x<MCE0(7XM1GrT?T
-z_H0CbLgYGL+eYQJuRyu+)ZgYmp%W()(v1hJX{^=iv~bX9<Ct;R`Mz3Cbdr`o4DMRv
-z!EF^m`|8#oXq>yjmG5=B+VkG^GK(iL3f{GDFFV?6EY|9^jn6x-r#<KF+ECIZ?~7qF
-z*e=i}f%g=o*;A_6#|!q0MVxQQ`2FY)#DNfodKfB_`F6F<F7|nx`Mz47*Grn=$G+>K
-z)<=a$+e%PLn-oE1gs4S-Qp=wyya8#C@I^H@AZ8Y6KuY<dnHmryUn{9-5jr*bgJ8iF
-z3uYAwTn{I&`^_p}O;#x*5-AE66W_V$HJ}>=B^TbSEj?@R`^*Akf3V+;gC9(arsWl%
-zdM_Jhuw%-jVcuJwH-kEQH6IrVh=X4y^Ek_)8=ACMkb%E8Ap_A3WCl+V>N38)In;i#
-z{e9m#zlB*mn!|+byoVQdP^!G+d2xdt$IEQoI-afvhK6yB83sDxr9mZxOfa*JOfYi=
-zSy9`4{~3nx0Yteu#5wc-{`f^g9U<=3hWmTRb>5QvC&Vk!EFL)fzo%h{{{&Are+_Ta
-z5%5UEG<{vrI51qSrrR_o!MP<$xlFQkluv#tGf`cn5X_(Mlrn~C+d!qw+$D|f@8zq^
-z>t4pQXq)B%OpeR>HN?!D^(rMX#A6|eUcPt{Jar~a)2f>304%@fLt_h~pF6idTu!2O
-zwx!iUSPgPKx?Uzk)IQ9F(%k(zmlY~1rys--#Q(5jd32pgvi=!E@VU!%`Bf%dckgCl
-z4gp=~egmtZJcecCqkF!I-sII*y=d)w=t(@LJOxAObEjq4@!V4~G^<jGrca^B<Jn1S
-zJf5AT#ADeR*B9?nn|TrPE>@CVT@Sj1Ki|ah0#+?|&Uw*ME}dig$?3VGl~2zVjeTma
-zR`qu2TJ$*WmMdGgJseyHJ}z`gjtfjSjW>r6ZBiFH6;r7rorWpzPV)HM!@S+0%@%sp
-z3AoYuLG>lU+`V1D+d5Rn_PxpPkLPOg`(wFQL;$Tkn%7US#+koiQCkcHN!lW^iKq2a
-zNL`orGBJ2?x-`W)a{QrFsBGjss*#K>TxiTf?w0S8Lhgj`U{TTKSQ}uCHDGEO>T0O!
-zV-1T-_E7tlFjFyhu)Haa0z<6XD5v0K>Xq-2$J7s-@hQ@67qBz%f;$#vR-FG>M3eFd
-z<mO?jxGHu{Mym};l(H;w=Nz)cERUV;&t|Zin4T?@^z7|tlE!D-<=ZA&uVG<w7A?>2
-z)|lIcMEGlzZh6H|n<R%{4fX=Am$#7Jh3$_hfX$Aw%qC9bC@X);*<k5akq(xgK?|Rf
-zd<kp+AJKEl#Tr3qV_p=Q_FQPWW&Fn13&j@GXtP=bFwMxz9?3(?5km+YgZZseg!d>b
-znb38tbmFjEB$M?z`S4mv(lE=Wwua`R#XOu!VQ0)!8ziMWR!f)s>j>@Dl<B!j{*@H<
-zj7gfu%GgL@XUyAMB=jmPsHOBeMM_NHn+VrWcN28!0Q2>?<WHU+P}cn71gfQPd|xe1
-z6VoJ-uI15HT9(DbJcFFkS1EaG=^j9R0iJiSrDaagKn%ha?OIQZT$@qy#ueKY6%vb<
-zpcx*_(Nk3g))YOZ(aS?JQOwX+kzsybwTPBb#&mK85loy#I?_S}y3&YriA@Y_U5aiF
-zR5lC}&#KIJZfg2fEv=?sY4+7f#kB%VF-L2p;%cd&s_Ey?O{OksDRdjjMQl;6PFo$m
-z>a^8ys!GeJPphcH^l7D2hB&ph+WB2Apr}Zgx^+rPK~_phJr+u?91D@48VeN<8H8M{
-z+6JxbYXtHhg!-C~cYWBGE;_wRr0qm$1Xv00L)vS);l;a;Mu6q3UvnW{2MFB?F)g`t
-zLxn<a{ZW0b_>h)6(di{mYCtdfQ!TwA#8gG#-ogM4%Fw}s0ktTb`qk%L?G&?MWC#t{
-z)W;@qjUjqT2zEA>Fg@oY(CJv^D2)!5b){O48u*|BXyJnj)GRGkk*rPOsUfwPxg|Dw
-zQ$uX@rgo_G8cNXhCQ+9ESkbN;diiRn2N2<Ikvq|a<BXh#-|1)<JpDDC{Tbqvr!(ve
-znIr}pay#T9EUNEU3GUcAvvKQNymY#B>ui4IIKSrC4s2}lT`+j|a_t03aKFzwf5Jvz
-z?{OT$&-LE_It~*5Tae@<_-zr!b5vmvob*pg<Msjb$dYWOYFtdoGPR6|Rzxj~9VY=z
-z^r@migYe+j%ayJd|Ay<PUN5R7L@)n@C~jB9B%TBO>NUQ;bkEo2RwUC;@|C&`O)dVq
-zah%1kZw_;#8T?+(zJYGC4){yUdkjVA0iXF!b#x2<laF*qxA~ImK;9=>POok*N3MtX
-zKnA9Ao%QC0NqE%-zn<qmop!REt-z&UzM@;hZbR}KPr-ihC|!L0AQ@fQJ>Eo<+#qBN
-zaBYAh)aA^gG%w_AK|@f!4-)SjwFbDiJ#=VhpI7M5W%oYRCdG{CddYIVEt@uECg`rV
-zIXoXZd(jPwF=RYGv^JbwKdGu>X8y$5pk<#_8;KA;rY@e4Q6ob!q3=19)nX03gl{rI
-z9@HNP&tX29O=dos*+gD))OZ{(Iifs{7a}bzvCjJ%dQyg_phU>qH<K`UY6Av+>b7T)
-zT1Ld{-E0Pkb}!0yL4v_aIx38&g(F7{IjxES=ifJBd1gtEXnO_6f8k{9p1kc99No_i
-zZ1*%4am>y8?7-G8&1VL-c1b)4wB!)`0|Q&TDF4E~QsGQTj1!b2pDKCsLV>l)=~0%+
-zuoCf{0!eGwX-UQca~xJOmhi9=@nZs3GUSD+5GxUH1I>%riAf`H8^~=x<90PpbsQON
-zR$&8DE(B3zlM<ym8xS+4HX!AyZ9vQv+<=s~kgB<|NU-jaGlH<0-h*)>nk4xi79g<W
-zk%al^zo_D1kqzDTD%tOL1XP^|iwD3~pAS<4{QF}MKm3b_91<afo;yEJ?X_3yco}xK
-z82|y?b|f5hg5LtPyEybQ6cWdw1|Z($H~zJAU7iZT6pT`{n0Gv|?m=zcV|(3gTx&j_
-z7Yk3fOO|4=&b<X4Z;~i&<NDI~YqyB{C2AT_LKMzEmypo%85*>SrU!XT^xpS}ZCrA;
-z5kXPl?f>|VNcr$k&Vp?-z-$+`?JV(3nrdNRwC7GYs6Q;R1%HS6jpz_c8-M$MKRkpR
-zM{lWQ@p_3wE1M)5G?!>~Z<dJqL6;^;+|D|Sx6{=FBurKd@CK3%aXWNDUXE+9J;%*H
-zb{>go;9pJ{%ppS~X+}Nth7RE0C<?=(OkLT2@w|cq&}U$7I2$oP<2_Z%;hMlGfX=Bd
-zZQMJumN0K5S&N7UE{tQP=MGvyy(elI3tF&r$uoXjOs!StLy;#36|q;%hjTJv9U#HM
-zCGCQ+sqFv>nir|B8pDeNt8P}rUNu)DolOrAK`(mHsbj!nJ;-5>v9IZ5<_@OQ8G4mY
-zq;(~o#G*h6;ia^u#Au<HV4ycv+iPdc)k`{tR=VV0M`*8x`EWJ=N{V{M=%IGTMhZJ)
-z-d^gm)fH4w!j^&88f>#1u#4ni862^OGx>P}nZfMoo&<(Z!H?okabhZBINyNtqUHAa
-zcTzl||9K++(K*0lfT|WZ5M*R~h+f%1Z_j{Z?r_MRJSlF@U{A_3<lp43qX0JQ&yXwS
-zxu%G-nGS?kmY`N>Qlwn-n9gJ?{8_JQKuT8{xFBpm%)Ge)DPO@fAV$9E%$20N7Zhj6
-zNyF>TkP{*U3-t_n6&*c8uISj_&zJ>-L(>P9SA6QdY?#50DNjZjeiZ(l%_xSON<JFy
-zr#M5dRHq?#tYjd10j&|q44y#GkdwNMZ}AMdBFQ24SAl(p^TG~VafbY0xwt`(lZ*SP
-zXxuuUDu|Jt`c|4j$e`8Cel{|}%mNuq5^$U#fhBD$K=0wm0+}1;@iN}PD_C;jF$VIi
-zBxkp~lyB%ZI?y6!zu-n+!lbgsU2B#t+3!a<yJ-6>ZcCc6f~1PhV{|y+Gcvv+<4Px!
-zO>dUKxd}L}0f%NT*|~hm+Ej)bs!<^}f^lNs8C2E4#+k;%=!1=j={$lVphWIEc%Mq)
-z99nzHT!~#qEyEqkTt*WM>fzp{mZ4FkP={?y*o|p%IG7)1`7}+Q!z8;4;0iCi&&bce
-z!AX^Tf04N1#T)$p;w?8jQXdmF<f1AG9Z*5tBlrtAu+oTl284JEP$OdGj8~ZLgI58i
-zP$kC%C<$v5wU+7YBROV2G5}i9s|GOrSmGZ5nov=Z+ZTGa89PJ}RRrJCfS>26{Pc~I
-zgBZH5aCIAl@bq>C+@!rjw3oXFB$JB>nDYg_dIWJ_@UvguuEs!LT=fF_3jjR#{GTdK
-zb%mC}U>5k5(m>7b9^pAt{A((sUIepH;1Gg`s_N{>bzZS59fn~Vo-^Q0G87?9F;t(%
-zHxe93u9?8x%wzB8?noMC`0R~HqYz~5AgAi29xj4@DoxkNs|0gxbZAu8b+&7qhu>Ga
-zmn;)nu{d@}?q1<;o>xxkB|;9TZO!XOrPuu;$ihlsTvbJGS&<k!l=ZM9zDHK`4{ntj
-z{pp{9`k6)fY($??3a?!iDVDCF4|Fedpqs`3(45A%(hw(kIU;&*2qM#1`DdaFi~@Wr
-zsK6*etH6&A%R~AQTj3sCaVeuKA$PCH1VbU$Gnm<4W;nBnBU%B0ysB1u%cY1_V~u*K
-zaEdCS5pX?6afsLi{uP3T>jL75fy2diHj6h(1O02<K|;@hM$U`jO^C<jeIwi{lwva|
-z`UV@qXpCT;JtX1pO*(WP9I;_b6V@dVzwLL+f<#{x^~899-n{ENFD3k44*F<4nR^~a
-zS%x{s)p8UiDO^GshV2;~D{rUCGVaXMXr5)A?=j>h?=o0O;{CT1nymz&bKqYE+pPO1
-z1=gN~r|;=3wYCDd89?^M1;0abSEtxiXUx#JWEZvw_~^zd4fdQ?6iwmJ6oaq=|NjHF
-zli|@~3C~(^FNO*4e$PWewDTP}v;Rk7Y4tK>w^hhUlcth@BT2vlZ%+k8tUZW<0>Ynw
-zx|almN9h7zgMeebhl#Oj0|CLRaOp8~|6*o^KF;DsgZDcvaDPoT)b;(Z6{>(H6bWRw
-zTlH9bQQJ5RG!yLYf-=BjN>@a)$p4@=?#J-&AOR4zal~_5QkMJu2BXGtQnV9D2sQ(g
-zokGGsS?>feWU)E0$BuEdr?}b?40hNWhaXa~X{Z5e%dA<C<yQ2tRakjc*rm){yc@u6
-z6spL|oR%qOl1|I9+*LR&+ak?$TBhYr#cA21tf1A?G9~%D)3Wq>w!2BB@uZC>uy6?u
-zBa)Chx!?Pv%HgSx+{-nQKEpdLh?vPxSj97V;}Hh|w(oag9;6SynFtJVMxbWcYk1~U
-zIo%)}P6qr{_K4|W9GJ*eXJKo$+62%3P&>UE?f{onBpVS_rq%&jMSe@-2h|~+hWMa5
-zAfw9LA)RsOc_&noK}BE^*duAGqZ9L%baPVP991E)bs^|4(bIrq5Wrb*W!27#R8!qY
-zKxBMa9cCDpRGn;LeG`lr_^b0(LRVr(uwOLmbm5jK`0xQ-zPsOLPM0DFE?ifD4X`ey
-zMa=IxbBiK1I0mD1VVvO~yEI8f!f$d_a6R}@W}~Ajk7rqTt8nEw2B2K4{J;HQHw8dZ
-zZAA$%g{T_7Bf_sxCK-9a`?C9!wSwa9(9H|-JuTtRhUUeUt-=Ef^6j1G1-Zb|{SD0-
-zfXL!?4Rr<e?pRkMxXFgy3>N&!ZtuFm_Bn|E-onx@{^NI$(B*mx6!3kRY6`7Cl1Li9
-z6eH~TR4qzybEv#Y4wf%$o5D;_cB$}YxdxQQ9dxyno@c(HPAzC3zuXobzrMjubekxJ
-z&8|S1{`nLk&dM(6nw?<xeal52`x}LyFdv+Tp)~kg&MZ1^amfJv;tlR}!-e;4?ENsq
-zb*aN%IgiqXh%oId@|*8(5RNjQtR4)zKBGM~M>CIT4?q-zbLbSsR-T>5!By}0dw;N-
-z1V7Bt?{+rOhGg;cC}e5_25@{=<P05M{!R+a$T}<IOeDn+hP$KvF$NBY*QNySA6JbO
-zyMJ6Y)gkH$l_vFc6I%a-btwiChbsLt{P%l-WS)<zL^96DR3e$iGH9LLLZ4Mv&0u`e
-zcGV2XC#=hAHhyQ&32QV@pF&lJTfdL%UaE(DR9z;keN0_EB$Eep!=>)*o@cmqdI;ye
-z#G9vKH%ythq;FH1=13uS`{bIH;aE#y8Lsg+c};B#>GkpD-133-NQ3f+)uSC@p&^nX
-zYN=HX_qv)X1RU)c&-wuFhSNS&5AP9`t5i5KTO0rtZY{(8CV$ROc!oPX;VH+7ipKrL
-zcbc!zLQ_%v`Z{BFhO<eXFW)Nalx7CrAH-{F{PBLG1>|BBt&Y6HBFR*iXC3G{lcCO@
-zlTf6uU($&2esL0KU?@+Jvxv3@5U3`6vH4_tSMK;2-xeD;#&_lZi}7u-jUv3OS+I9f
-zx>O$&r`BD7j|rc?BG&}?7jTRnkZwf_gSSqWN1MF(rqx^U8qCGlPtxnB;8A+5Yqs-@
-z$W_V>4jusJpsY$K23*}b27tnH&I+)74WU@&j)pYN*e?lEmWJv`E_&{PjO3yE2u8R8
-zVd)eHid7Sm9>~oUz6c%mFm5E@+ya~nIS-@VWPsOe5pxBB+lOx$tKV-6g3NJS()Zmi
-z;4T1O%5%eK`c+~IdnwXa?)f&K_3#U_e*!><bcORI^Mk?lbr4*v5q1vvbH;`{9iQ4H
-ze}mEGMjIrmVxW?^_@0CQ)n@vcUby`anqEot*FC(2ya~gTlOGHqN`90$Rq{*R!zT|o
-z5|zF$AnzpGqM>1qxb*XfZ)W+qSmg5RoeFV28<t!r&u3y7>ty*<IHM#C__v6QLu~$k
-z(tNS*6PJ|$P~?e7Ot;v{W5d=vc@AJG1|KABd*rDF#|WRZR_kGiO7dJtc1zENUDEP7
-zw&R>s+a+aL#KC^R96;W7$OAy8kY8=~x)s8(UjD#8D~Ag56?ph0eEBi&Fxo7-wi5EE
-z+z%?sKU;oKG5L$<2Nh+XAw8%NA7c+H2BWTt9{kkeHHdyCmJ-~PxIy_s^_%jA>Nw;D
-zdQOWl6pzRe_wc|C3O`7e5X-?=zu~w6WVP`o*Z9YN9piS!ZM2-jS46)@i`ajLX%%j^
-zd_1@$mVkB>w}rh!_5=S!0bMT16h4K#S?$B;)h?cft91lBaFFj$vK+tW4tL`SwCl|Z
-zzfs?amK`;;5>pXfB9lWUga3qIK%_6u7xq{C%h~_@-x>SmwZG64b!Ta`2MplZBFPr`
-NrQ82K`w#iw{{tE$12O;r
+literal 176808
+zcmeFa50q8cecyZTTo?u<BZL51$VOr&#RxYf#Wk*RgNL~;#yCatNJchE;NH0c-#fA)
+zL4Xs~BAMF~1-C?l75W}o#q-A|_g?&H7nLZG^-!$IqI&9DYKFYfE_FQxm_!*+qn8qk
+za8*lspYQ&2?m6e)fsrCBd0CpZ&YW}i+55MD|Mu_q+kel0dE?LDx;Y3^0e||}u7@_R
+zyY&zRcW@Qb=CSF&KltBF(co^C;m`k`!n3YvO5|_DhHV>vb(?**zaRJ~UwNSZ+duu(
+zo;ti1691w<73}yB50iq&eIDI6Y<MWQEmu$3u;Ftn9#~QTz0kpN=mo3xrGo2_0lY`P
+zS=_YklN+}E+AnY1x^dHn4RQQ_@7FC}zwfFz|C=epul}1`f;;QghEE$d<hN{oq)u=W
+z-V;w)cza!m@{<<7U;R*vl|cx}J^=5LZCi_*zvj}D@b3N%3$M%Gg3i7aEUW*Cm(jmQ
+z{Nns8?6rXYkt_7Xev97|(_4&Oqp<Ys__yI3TOKOp9x3qq=YM|fKdtBLckpJoq~8PH
+z_5L<&*wWLR-%$KU?rR&1n>TGq%J<(pcuwttKWK#Kt1{Jy-f#SJF28NV_RZfcZhi>-
+zJ{PV3goD>9UE}Y+IeLE&dV6hBjD;IEY%FZpv^DpQjrL_y9@qYjrSHGl*TIL;W9i?F
+znJuPG+(ff-ugq-;|3A!SOM%3sxh8!v|3yfaa?iI0fsjzXg?F?B%lPs9KW+)mZw~_C
+z1^033?-TAi$9*aQ|H1WHts)J7KTXQrTq^q0UpH-I<(BQ6X>`Rco0Z13kW2XdwBf@y
+zw`_elh~?px$>-^Ea57uAZVbyu;BWX`ZY!dxgAg6Qp6liN2NTRE9yfz`ziC+aZQYXJ
+z_{bx!i8Y~rLuSk7{PwL|H*U`Vnt^jS@FIBK|7(wI+xQLA^w*@kCC|QYibvP>;@7to
+zH*eVV^({GXIhw$^x95?KTX#4?G=1N@F~6<2V`IkQAvs0x6#wf?PT-S}XG7j5^?k1R
+z$S>!%<*hpV_YH8q(No+^ThaR_dZT*ohpHkXFc^&k=l+dIpt#NQKcQD&xetQJgTHdk
+z#%)GJuTL+uJiKCSPjTDU@%j6Od%sxp;tA!Ppf}7j9zI)t?U%Q0Nx=D8a7)1X`7Qa}
+z*H>)cR@k_CTQTn&ANf4oh+OZN1G{(gmdzXQ-~P+Lyk)DwQTgh8l1;S?Xi`2S1G%l(
+zQ~Wv%zAu-5Sdw_V6pXz2XsYsNCg@w0e!Tm9x~<w0Jbv~<x~0nNr}~3nDLBkp7(CuR
+zHYKRxb7r;iUe8KDKc%zw=A$br!0G$F^oDa+AN)TnKe`uqkG53aB<=0ew2{9|2YuOH
+zK`pm4sP*g*YWagf?V-V-wy_%2Hf;`SU)vhg$~Se^3VXTV!hIk2+qmxtYR{HFdhOXX
+zSLq|%xk`6(=PJ$R&Q-dDJ6Gw$+__4(bJsP8XRh>Y?z6AW2IptfGkKnQ?Xj1G+GFRq
+zUgA2#^+HgC)+f2}s=<@<xr_F;$2VMSo8MV$d$aQo+kP(SoBHSfY=5yUs9~?4oYB%*
+z3tB#VuGrOC8-u<eHTBi(%Aj_aDf{@@>^cMUDc)7H>!4+IP;2|vhHHg2+><c76EM3i
+z%r;;a)&esX^p)X*a0=nAckp_ez}u97w<!Xz*TI9Qg12dNC;S($JCRK%vgt%NoyevW
+zd3Dw<3IAQ4wc_reb`SU$_izXQd*I1E@Z|5qlS}EFt5Kfx?j`@e&f2T+<>A!LuReSX
+z9z(+sWJp@|2yz@ij)TZ?2swTaIes5G9!8G8gB+{Kv4R}S$Wb^N9Kfx3Ab{7YY7QI=
+zhk{xK8JCf9m<POzhg}}<FC0~#+2omR@|4r*k;3ty)}Nk5{j*G3;aF$wqG&u0{ilph
+zBY$K|z1vR<*6eEGxuEvU%-|X6`}WhFwQY;w&7sa(_JGaT%e~0&LT_iSKa(D*rf&oP
+z+pbw%BJZ-GM!SEq%fZdU^Bg=^9leJsdz7+!sDF27?SBZDm7TS(FAm@zw1VHmOM==D
+z(A^{G?vdg2$iqv6S~Yzub=-QbZ7Oh5pFOAYdCIG7+ebTTn~!(5bLn00V(M5z9cy{N
+zl)AyQhkP5CA^TIEwW0JRaGn9Y8Q1<KJ-PZydWvcLhW6z_?UOfK+PA4Z<%G8`^Lt)U
+z%e4o!>^bhVC#Cny1DE#B+6B?FH=e)H)7n>PCI5@$KWp<F{<jKewLP0ZJBRmk$#;gk
+zZJ$qNr}I3`mdQ<Xa+?k<Gi_RSM`tZJlizcwf3Al^ntukb9C!)G!kW%n7J724;n!r+
+z;8PYp<=~Tf-@|+Olv`haFCJ%+M-D!RWe)TEsH^J$&**{5%SIL!SR0vL(1{(Bo$bOl
+zuBcpnaJVd6nSIXF9Q2K0doN;pWoOf=VCM6a9`F7Wehb#!!QKD2_+D7f)e;!^*%okl
+z**(99c&mQl{fBSAef!(P!r9vK^Vs_fHwCpe<Wnx)b*(Mcxxa04@ISMu-~qLZa%sag
+z`Hu7Hp!R$aJgv0zY59h(3UG{X7{kU-O?B4hznT3`@WXq)orXsj(`iHFCH#nN+rm^(
+z6O8|<`Xj!n4c(wl-cbj*JfE^Ud67Ec5w_d&((->QY4>1r49qvb`@G5+oD%-38I22n
+zyz394ZDx7+t`ppU<@W+d<M4(PZBy;<4?&;k3108qFBwsv@r6oDk%sOYIf(~)uezhW
+zNY)#`3*}Q=kWak`uUFxJ46pBiXRa*=so;}>b%A=6Pki^fSf{Vf^JG1e;rl}0`yji<
+zSmP!eYwQbZxxGQHXGc)W?<CeZ>|%{w#2UMaE#O_@Aa}(Yhqx=&803CC_dS1&m_zXf
+zzQ)ELvrOz^;tuSzjXh>?zxCQ<Z{ZJHQnkk}bH`>X9+CXB>#fd6XS3KH6DufY=%(Gx
+z$L2)ikhKXPk1eBIpNSdPHHjGnuLn4Sx5>hr>U{V;ifek~@OrU*_}#wwscEm~HV3uO
+z64%7)-x|+f+#0F>xp<7xvjcm)v$M8o7ybs@DLeWQcGJWddtHpN4<EJP#TW<TF~(1u
+z7~?~+7~|oCoweRWlo>QWv+rM}KJ@C>j|a8y(&m3aoFPB@gB!#dM~E}3#2FRhj9452
+zZpEYW{rKN1_#PvUK(1xt4Yg4dk6`nQr(7O<LgBRX%p#ACHRRLfy9>vO2|CgviU$UW
+zJ7}ZE$K}o>VuDlTKW%MA);*W=#49flui*Cwh$&Qe0iTgO<9y!>__`OZ&TKy`T!>Z9
+z1-0!yRyj+ovVi>XDGR?s+>u9dnZtc2I4&3Nw}Si3I(^8hxWwg=%$6$84D#G+@z_M&
+zJ)O17($&q#Vo`v;z%TGCE)HtFZw0j?I_~3>+){8@VsS9Bh<+~vx8;-_oYL3ZMgFTn
+zt?-7Wr<Zp{-WAr75BRw*^yfv@N#57Ud&Trcp8OX<XKge+srsksR^vyuuXKD^4IgfC
+zG22SZhlePiLmnm`Ukv<3z-yV(SG-8QuLQL;vdIHae9F!ZYPoq1Ry(jhWMO6J0%IQ6
+z^q`iV$@LQXUbZ;*%tX(pySQi2!67Y2nqU_9*k{weNtdrPGVQiF<<`)~eJlcQIdC+%
+zEa4e`nP<l{Qw|v@hRF5Q%M}ig293G>^)#<fru<Rf9kZ}Zj55di#q6AMVw7{<uQrKM
+zrY2&PY1Dn$(v*E4@Hepv_>T}P6jq}v(}LO`^DI6Z8N=6NJ69|A&hfR-YV-XO`5OGk
+zu<NVt4r;kwL9OQi{^OAIA4ln{ZpDA>aQ<VT^B?=2|JeC1{f2x7_Q(4T>o4f1(%zpX
+zCVvdwd<@<6enNfK$6ho%Cgzzye|2rbPOt4We!}!u*I}o9e|5c;Tj+aw;9101#B6_W
+z0%os;X?)M-xbNAt6`Q{Up6{fs9iV+2a<*T3xXao8-N<N<v;BMHw!dlrav%B8@34P)
+z9G<9uNuSpAFR}jv*#1HKm_zh2zegYQ`}8pn)5rWB`j}Pvm=$b)8QZTmVeC1$6%VSt
+zW5d8v@jwOH#QLCz$y0TCz(461%A+kKg;TQE^e>$sko`CPn^Vw#+O)N>kF)(b!NO*r
+z32Lw3=4=)1dD~KWGl&i!wC%K)yZl^Xv-Krad`TthOI9X)2|Um3aAm8MJx1BR)Q|l!
+z{mXUqFPFLgCHOtOoc^WymgwA(A^MkH^e^!T75ss>-zuM{yxLW=e_31x{N=psqF!+9
+zA<xE@$o({Z%Tf70>o=l(%k1i)mRsZK?+$8T_V$&sYRknnT#JKRVUg8K*+SWr>_y7a
+z9*iw(=XpU8x54e;xxm@reU=ANTU6Lh|8p8;&QkWAg=6G1&D%L!#^?m~73Vs6Q-5Jz
+zP%FLwPPY9$CHpTwAY5eQ4V;<KKgXtJcXrltbND?MoaR}$-hWv9c@M7UnYu!Izl>-2
+zsr14oXx_~4p1M7kER2ocQ%}oQ$%C8?tb;tGFM2jMeu=a3OUAMBXFTnVHh%0w2^+r-
+zK6G=n2DYwNbP_vd>U|IKHnttSoApC~QhlWce^7G$iM>HBw<oCeYz=Dp9r%Mm`V)uo
+z2RrcxyPQ8b;QYZs=MN5XSASynyYvh43B;S@jbW-E@hojrKH^#0*JH0aKXI8mdM$rp
+z`V{M|oQz$U?AANG-ou?fMXV37DQ?$$(LLIM?E~~S=>u$z=P#nCVISml+z<3@r43+{
+zHtobN>=Iw_1L)|+!|3WB=LgX1;y&jG_Q(A|(>}lfV#kA&ITYyw9CLjDe1Yi$+`tzc
+z!51_gZv?l{)`O!ROH7P6(&mcCoqae;o>TY??7kmwEUHZ^op#xu#tve$HSQSp0iH|P
+zZESJwlx?@Bee+z-&<8k!Pr)`1VE2tpI8DCioV_`NeZeLvefx{fo}R^@_&&gkZoCpc
+z`SD6)+mJ_bxx*c~6uN}_OmL6%0d|sSsmmjoEmI!)3Fw`{qldcJyFNfKvRLf;0N|&-
+zgCA4$J|wpc9F|)8irfqOy&PJ)DEl07{mP(Ld?Tn8-m>(V_@8%X9Bw7L^8)qlCSJcn
+zo~z@;|Eq&qc1=*rbvs_H4QhYn`vI#hFE$DeGAS$p&&9xB0}kC>b0|BP>lMn=j`9~<
+z`-(49*Ts5W#?H;-eY=Cdfbmi9yXFC-oogB}rgNPm-%FO3p6TfSH0PHNSsr9b(>SJJ
+z7I)ic(@shEeFNh!=D7Te$pg*?2lyv`nrFvDJr{a9YuVGhTVMALh5e)*BW+(j&Fhyb
+zU*+9V3(NS6na*F#9LHary^g<_neZ2_)csmu@q8cfH+}>BO`l*bGH!K!0(dB178Y=|
+zSbPdC_WggQF907*Jgsrr@t%Kl?`h_>>|EK~jG6Z{Ch%-&9yVB)=BPBM^7z?uCKw4)
+z)+b7y6@K5Hy3e#5#nff&wQO%RrY?5`BU338oky{0_g#}sO)(cVK-<$ejASOb{iQDh
+z>yB#{=7$?#R`3l`c$Kt;H49iz69<2{MgD$PwG0jY(4c3**7bDytJnI8j|Yg8`=M>X
+z&=x#3SbC6{`YYEowy*k?x19cxxj*gh<<foE6btq9dyp9VA~E$qiD!J8?}w>eKlWyz
+zBQ-LB&1qx2TjSq@*g1_04>?;`PIrSxx5k@mer!c$2h;a6cXU6v$)*a1ozE$!A0Yn&
+zF25bGDW|_o+LxhaE%>Yj{|CXh?b`+ieh--6-~(*~&}L{VeFfNG1@>1%oS#LGn(O@0
+zz0aBP`-XU7xOJpFY-K+n-we;{bC;T{oNMMGpFu8Wz7qaw&eG^iJ{8v)eoJR6nbgQa
+z^g=SObhziF?xa(Vx?|Gnx>FtvMpD4>`XhN5-2`7#&rndWr{ta!@j*2ojC=tYF`Xi9
+z5qMrgN81@I97Jv#5@UsG4-L9)(ky=JH&!}qoqn#<>fA?+EQZqeA-@^d2H=I-fY%i(
+zC*GlFRzIxo>W8)g^v259j-B<>{~Lh+N~@qx1L#j#`ZJuuFW<qtJ3_zQf-UfKb?Tp$
+z(XnT4wf(d5P%zR0y=t4YbT0)XZQKWd)pjdm@@hlOCEay*`i~5LJ|FeSCX|O#Mh?Dh
+znLNBRFnN~-mfDupqx%fLlAY=ZVe(sbTlgvSPVKEix{+nNWu%?D)b6A|^T}HoO_{W4
+z`zv>(4Ne24mJ!X3N<Tbr%fl_;G{dyT@=yzSS$n23!lgof)g``HMq7;T7<_o1O1kh@
+zK4kmtN+$AtSa5kiB$(n~i^X9S9P%v&2Lp$6Qx9ojJslA^8I_|vX(`>)4lZ;Gu7N?C
+z$wQj*n6zQZLG?${N)}h?pz5j&1%_vySF%6S7nPTPtdwj!B#vX=%ff3mzt?YUk=nOx
+zOC5%Ml!x&b&BmcJ@-65)dN-~O!Dh;a$aV<+0CkNSn=D??MvR}~p0E{)@nY?lc0##6
+zwLy(<H*J65ZsO03?Cfo!ju?KzmwxF!dQf&YSac6ygALup!vpxqSo^~s4`7eW*y9Pc
+zKYYmSDYpGRO&L>f#@bo6L+PzaLvCtg0~vIwWYfJq%cuA}Mz44;Sqtw<-r636ZwdbK
+z+vrrL-qu5%BF*Sehs|SPVsHAvYe06$jWhN;8ueZ}Q%=v2eVNstz7M%I&IR}5hx&~?
+z(UnM9>59r;X{skvM*4YI?yxqcoR=NpH*!*Yjq8qIJEOHScNjk;I%k`F8h?zBLu%cO
+z*DVVdz8JXNO?}38<KtxuB0g$#9N#hA#CMS9eaBDXJHCf*emChmhMM>elNRwErRKh4
+zkTJj^#sH0s@`1HC8SkG{BVKpBj+lJBH~P_0*AK;OdM8>3O4g3_)5hfE`<?I5`wH@x
+zUo|lcwnt-(1IX0(_o9B~8QQP)Ew^3UKG*pc_$b>b-zEJudN%6pD85C0MY526l}@S6
+zuJ-fqq#K>>u=dE{i%bWIxhA7`(cjX;XK2%^Lw-bl#rqZ$x8<>^Zk|fz%ENKrCA_`;
+z`lHznck&p!KV<!ppD!~pD)3CZq>aelhwas*qfaKy*=P4GTUOz{+NgY&Vj$sS@X0uM
+z_#$inXM{E>Z0F>$a*X(obi{w~Y~BM~b+iR-uU?qu=J|(^-KfoL@ppbw_-Cx2wEV<|
+z4MpA!*WcN6XftV!Huo$Zhwn>i(`GGQ&Nq=}WSQ4HwYzlPr;%p#f;8{b436mt9vu-p
+zOuE`^J->f8c=-3j*54aEpj~ws8uL6$2b><Nt<RTC&>h3K(B4_yH+g|&cspcyi1N+q
+z=lR{jD+G`4uQ*uJUBwQ<uc;k1{>YB&D=t)fRK3{I5QcoN_uKu(&IM2P=ifP<t0FM}
+zJ20c`RiwXTQ|M>nUsB=`INWfpWV+Sbb9k&aB71A>dB;1n=d^jV4ibNC)<33i`$yFO
+zBv+qp*TJ~!8?Akb$N1jnKvSRQjnr?u%k)E?Pc?W-$879XPFq_f9vJ_C?u31q;kti_
+z^?!%{ZrXWc<FWOhbn`oEM~Wr-W#i$6+DURg#ppQs)b?ZfBI|(KCI!Fp_;hElT;7=9
+z@UXq#Kt@gd2I<DuAhWQ|qdx=mO+&xoejB_>(Y^<520b01Ju3c=_8&q!+~I5i?~T1s
+zyfs?4=h7L~TPDrhv!uWA^J%hM-tY7ihblhye(O(VQ%e?>;y*u^uk~e`cT)Rn3xb(#
+ztgS249)2&fuG#lbL~k2@)&I7(#_?y^;R$SG+e&p`(odS;dwHrKc0(IUc>^bJ;Y^c_
+zL?;ACHcPfk&&F=KJO&@0$F+U<^e7&JCtNz5j%hupS=UV*QINetN22Tde7q;W@Sd(g
+zLubz49-Msp&fw&EuKvKTVN={C8~G7vzjS-&NoegRrg?b4t+(^<<v;X(Rq}nSEzkZo
+z^S+RHzp5>^W_`cv5)VZiw%V*ojE(6r|6jh}#D^z*|3U55*kE|2m|Fe+N!;6H`%9CI
+zT?@wm>*GBqnyytRR<!HYwN72@)t#ND-xZzbdDis%WV=}dfS&tx>ynS+PRZEX)-PSF
+z<Sh<ne29Ldv9t4&V~dk$`w5%gp|r^OP<oPSzkYlugg=^&*lzcngg=ySgm2QKF}f{l
+z`<L?)G(_sij8jKPlR8XVlm;93G}2((nBmc|dv2gX;}!`X4cV~_`8~zjm69!MXkffF
+zE{8}RnQ`jqXi|qsi_&22Xd?}gJ{Gp9sho$Jj02jqs2prr-_MWJ5UC?GP8}Uh>M&_h
+z8e}u;V~w^AVdG63;%?dy_mb^HOV=v2JN&~5jg^P7LPzshp^}cvsgkbKr@oq%&qwJ`
+zf8<1R9f;`Fcy+(&yUnHlAH2HgXPh4e2W;|*g*RFI6vn*RW66JDs_!4TKB7ziVVg~V
+zx+FXzW9a-gF*bBsA2-R^l2JDvULKxgY>LLb>*L+F|77t@)yMgehx~=s+bITzSJx^X
+zlj%RtVC*$jJ(5q2<VZV`o;*?{txAkmA@1<w5#qgYF#S`?nSKR%!*LDL434CQet2|}
+zO#{y`4Veg!erS`d<mbXV;A>^b+91|m&!WFO%lNF)BvZz}Yv)~(w=3E$4=eCgcK$MR
+z0So{6>fgTSpHKVkYG$$-cW!(0H(s6J;bcIX?AJnT^N&>Wla1btee=6>7q$nVGW8BQ
+zIq~iu;fV|{%yZ?DHRVsZ@(+K@%eGYKxs&Bg$->CPy^G0oNW7eJEtF|VJe|Q@$82P3
+z*McfG63?tmTOu;G=~kw`uN#$Vi<RlHm+35II;+laCsVa2$)`N(<VyZfuA~{ck`~Hv
+z$fcDcX~VwX?sRL^_Vb#__84-NpA`QjEBWj?|LXKL^3T4D@voyb&OiD<mVdXyKiiMf
+z*mRwL=?MR9y5*l8kFMlfBW)sW`Il*RZDJ1mn=?NDC~N!M!okUlG{Zk&g#7DpY3WGX
+zu$85J#NCwD_`!H>qbI_@LIeNm^fmI&zKij1D8avy=ieRh?+&MPw*6WCn-t-nO}G4;
+z<nWI2Z<5nL&p++UVxCd`S&c<C=%3@?aD;!Oj#s3G{2Ov<rAXSan^!0~IgX~s<sS`_
+zard}Q(SD5a><!zh8}eKGVC`FSUhi)9+vt*QV86vo%?Xe9+%N~2x!LYPcsX@aYY2K+
+zKagkrz(cGlXd`CS+WRKsvc!u`_B1kn=*Rf8y(*_T(eE!%T&Veh#NL9L>?@eYH9f_c
+z!{cYOtihJt<zurgD_BDa9$MGAm3txvD(*<E=h@L|*7IoYS$j95F^Pe-%fZ^+1lFDe
+ztUVT%Y_RruCgTqSZ=Zv=zX`kp33vx0xE*YQ+aU*QunDZg30Q|CxK$l)%z4N7cGST;
+z)&$=11ia%B+)g#Y?X-jSToYJl60puhaC^b?&CZL4GJVm(JKF>vYfz%|J;ieo+*q69
+zW!m#H>r*bWChHZ}f?PIvs@a!UoGe^%u&*|O{YC=z8xdUJ@_hUVvBI6iVeI#0{&k3X
+z*zY;JR6rlIttr+vv4(*-Y}x|rn+w!io@!&T0(cc$SJb38-*RzQ0UUkW52x5N+k08t
+zvliURp9O!(PJ3{3>sdQhVvNG|n~Lkm!`hg_TjU#T>nqMlu|F^s?mdi-(QE8RduFz`
+z+cEBKlqtMqVQ+Ky0&8JpKePPqUG3ICy$F75f?6-_ut+=f_A(29bI{VW8eXq)IP$FZ
+z>cY2h6`ZIeccrsl#^Gz;tNnIUN5s}?eW=p@gtREH=HF@gB0jCcjz#0C;!0#mEcL^?
+zU7nS!H?n@{h}MBAhHAUp#!!aWUEm`d@L`)j%Htxk$}S67uL_^BSDNo|upXYDl+AMJ
+zTV`nu_jkO|S?kZUXO>vCLL7`;HtVAs<gk=A!XI{WpiJSElY_f!jh&GLzr%HCN0Gyl
+z$XaISw~QRnp`OLaVTqFi&wg!{_Sj^pL;G<;*@1VsCfCW~*WtP77k?E4O^Dtq^b#9X
+ziQ}|Za9ny9v2M++IoL*-!a+x`yK7CCp_kvi?N0CZLGJ?5YuAT|xJ&OuZ#(oZaP;z=
+zbI*lA=%o&=dk@Prq4$f9-oiVfcQ5p2pqH@@?dcwu-g(IPCMRFYXup7Tew(`&wmN$G
+z-8;w8yBT`tir(4qvL4rk@|^>{a~-`r`+dM#d#ZiO+JA68dT)VV$=vI#Z)@7?>0=F_
+zHi<O<tk@#k-F)qwY>(NS(gTe%18b*dl7`<Fy|kVEYR{UZ(E7lBe10_jGU*<t!ct&N
+zvoH$Nc%B~A{xbT05oxXNeXD){YV`d)(pud67W;mb_dfn<h;4>v+t_AJ`ebe}RqNT8
+zs^#~mY7ZSq)ixeX)ixc%)(QX1>|NFUwWhHSaZ8g}2fN|UZy*-(^U*%u(K<VghczD)
+z%U)4EtbtzIQhRI}*Bq|7Tvv&M-r#zT>k8K^T$j0C;(CtjjEj*@MPj5=*jV{G#Yp(K
+zh8PLI7W1cXMSLEyRzqAPc=$L24}Z`A5C0H@H+@BY4K+I9$1<b?#@`DbKFh$H+XUXc
+z1iX0>c<mm)Nc<pp3mm*fP2ep~z*`)Fx5VR@fVb4aTh;{L@&vr)5qMo5KRah1(!0{Z
+zTipcSngqNx5qRAmzXZIs4&FKoFSZ7LeH>oz`W0pk{5`BsDE6dkpJks>g*YZwW>ccf
+zrbwAySBAJJR%Uae%;rd$t-c=OqUfIA9q}^79T8f0dRlFtFXY`WN9*n;yxWt2w<iK`
+zua|{gztppD1#Nu=ZG8o8eFbfOMJ+dI@>jEKGA9dFSI^NV^&Csob1YKNagR6aOiQ;D
+zC*Dq+IEOfK4sqh_Yv0F59;WR}{|o49_O#+f#z2S{t6#G5NI~__cJU&37EiA*@yd!>
+z?mamBv~S&J)3#qBUVITBK>jRr2>vC-anM+Ni5Q46wH)ONF9)^aYpGh{inS3Y&rA57
+zvo6oe*v)g~d4)WeZJr|Ub4ouB?2FS`Lr#o&v3ZQS{i5IyXTB2DX8%*`|F&OrxShi<
+zob5EY^>SD2Uf2uF-P8Me&k|dn8wchY2lEADh%Y*rXMibuC|}rV>5ZOm@>@Ue@|`9h
+z?+abiHAn2`j2}N6jmQ4T;hB8_c*lcU?nQLrRKQ+T=saV2P(VK<qa%}C%y<e~j$2xK
+zxaaw8&Idu4#QW%a^ujvef<taCFkH-5*llso?TVxwRsH0v*3-nV9DFh`ogDNm-O+x%
+zbPGN`g3C{&uGf$gb&W;FKns^`+9+v-h>oT{WBDWf#An9i^rQG6;`DEQ+2uJJiPNjV
+zCr*F<0T-tqKyRzWGsNjD{*mK(Gu=KY-Eg{nNc%Z%V;tV@D=DtYoXid)&%*(2jCHfb
+z<isN;wq0?ng&DS+L&)=>(@pN?{F`p%(KDm3cX~^$IJ2c`pKAMlr<(`pSN&tBbNijX
+z9|q>2gUP+f??M+a+kx2%%xUAm-0NWOV=u;M9L&AI6h4$MY<2p++vVHC{urNcH~Dy9
+zxOmIB`u@qEvoN!70dFV#Y3U+%MBlHX?{AEw@4KL7r_*=td49+AoixRtMmMGJ;1JXI
+zWfu3`(z<RJR+9!zxs~-a@hb<PjJ_iW#qd#m|2+DpdOR*h-{0%HoWB2k>XHsgkJTTV
+zkj^ZDrk-2-dKV+#CF96<tCQOf<o2^pzFV)OGwr}^2j&7`E*b}BuY<Xnvz>m%!R!U5
+z@S%L6*Xc};%eM)A^>z1<kN1U(Gse}KXa0fHnR#8r`{+zNI<p>~AvVnsn;ID<ZRC37
+zw9e@a_dLI2IzyWJ524P0LriDpTHJGU>iSVwL>e^Z7Sz*jq%)_~?}^}IbmqOT%jwK_
+zsY^OjcqckDb49J6@nU}lR<l0k_HHM)waD%7Ir(;9M`v2ZyP51kLuXcxqcf`=%r)4V
+zpK>r)0~37A_+^jNnJ$-aCHm^~b&-$vg^Rb2t23Wm;B;m=I<pL&=|X3gqcikta`bDO
+z>dbO<W|`9&?s<O4bcVEW+(LE+9AY~22IZkWcNO2^eeE>zL6gR+eA<n4=BK4I5nPPU
+zyw`O(ozeKeY@YWO@<XBByKMbztdH)}Ods7nn?Cxn=6!VSQOv$%?K=K%zkK=Y>NgWt
+zD8A5`SYb(E<e_mt#d=0IOGsa8`|gTK6q^)|;+J2*mo3JZ`|&4WG>uUf+w$jC7jce>
+z)pk?<Im$1pmlw<l$32TI%>V5A^*W18<DtUW({@_*IezN=kV3noEy~w+(ib?|@IUfH
+z@<%%7uQ;!c+qil%&z3i|;nR#?#>eSQ6pi6{-n=6pH`l`Sw1qV6Abm~~8s^yi&x&5`
+zq3ojUqxLNqXV!5Tmxh_P{J&FqY^?DU*xceK%1^JCe@8ZVx`lbr$tR>?E$P#m&@j#B
+z-zOYspK7NC+N(J)p|y^~xHPod^1D?2s%`s)H^6@-S4+LTU{2Tuv{;x$M}r?fdOMwB
+zeObEl=CC=3P2(EX*QYR6lfH}boV!>je-|<4UDwWMc+a_H7j7}@vzm<mcGg~J%@%WU
+ztfdV&Q!Y~hwpqXRK^>j3vn9tkZ*DwZ{dh~_Y}WL2JDzu%xyqNAt2`6b@-Hw~`6A~V
+zoaKCjbJrceW1Mc{=dXt66s%_4jWL_Y+PM~R&E=XWTgzPK6|3)N?BWVKwF7<p7UOU`
+zxhLl;iN9mxX1hA2Uw!KT=*)$NaX7)-<KXRW0&iae9(FB+x8KiYMdkzr?|_4MunD|F
+z33!Jh@CH48k#RG@JM7?9o4`AofOj+k@0iCg0q?kjcd7}z(+PN|Bk-Q{_}Ou@o-@Q1
+z_%NNHwec+b@Xz7D@Ows1r<o(X=<0c;Nj;Yn^<0kB^P0!|PR4%bGWIi<u^-kgFdz6m
+z#)H3~{xD-db`3}Y{$#JJU&<b0#ua)O+Wu$(+=|#S$$j8sE)6_=+66zS2+lrjzDuLe
+z9j-Z@f3q#S?KSKSzA?J?Li0gN^Y6CtTl4Wc7cYw*=g?!l@9Bk4n>#gLSXG=*><Qoz
+zeQog5ynhj0FBn~CyrTymZnALw^R}+GzU(yMO}Fs0&LgX`yW8Bleafu0ZN$VKyz9aK
+z_pG7a;*av(?%f*lb;n@~zpx(8TFAZu{%_g*xwY;r3Dwoorug(JGyf&{#D+cVfRC@q
+zuXpg*0e^iH_|UKOe^g%cbLMQa<H*Lxm9LNne{&ZjX~<P;5&ls90OaBOj-fn`S$Hvd
+z4BE79?%g(i>+I#+YUu}ay)M4#S&2MWN93_QB9AWQfh{UviwwQX!K=&B<es-ZH?=Rj
+z40$Y1$fIRiT^>sUTb}kHIrntIuSM{S7%9Kly<5b)#c|ltI=6LE&m!tsZ0pfHWL@@C
+z<MJS8=~)VVVyOHw2Y)H>mo<S8{W<72@;C^O;8X5Eg!fg_;GtrUP)1j*JhnJ__<mU^
+zkNp;2Odh*!+BWxY8^5#d0qsKaU=Ny`!|G{A9t$G!m>ZGDJdH)w&rZ=<4LWDf@X0+t
+zok_DlrhX2J=aJdF?B<RAc}%{246+xsr!}Yzu^%-*EwJ!ffjun_J5~>UOTWKQ>AC53
+zd6Y}+vx>BjLDtyo{NW+i-sk5y_%ne&rwM%M59eHW!Xx;kbGky_?<EZ$>O7n<?TVGh
+zO~|87eG%FU`xs`aFO%l-^N{|X>DO$H_iKK<#hy33kUsW})-y%-Fj3EwZ7J<(e~-`H
+zEot9@JxAjwR>$y^k*g1WgtHnx%9$PWIE#Kt-`EDt8wb@(d8>D0UkjiuT|NIWu_tFp
+zUf2@U*oW~Xdn)@bKN5NVrs5!-Kd<u~bl3dlon~+R=%WGWPX^T?*8W$>Qzno0o%*xm
+zbym)gcrTqPoAtuMtAX=1+Pm_EJ9B>(vbg}Cl}~#9qkGkMLR~lG@NMK(9?5a+KL#gT
+zSevH&7d~V4?nn0`tIt@yQ(anDq4RwF_{fD!{k)-zpRbo0`;VO`fn)0U4THzjY6$zY
+zHsATrTDa#QW_)2wXU)^3Ixl2sAD{0u@jyTA!=EFncTw0WV!ROU7aiO$TDWEQ?TtMM
+z&Fm#Vf4_T2c|+g*(Dk5w7Q8?Grq29ikIEyRwLihXBGbM_UwFKG5&eUOQ-hO*l;zXs
+zq2(fHnUBG@R~&EEH@WaN;N=}`Xi*#^y2d^ggmjI4iZ;le&}!Po1<^8>C_5$?ju+K*
+zdgSuY$bNDDD|1yLZ+?b6pRlyZR-OL@d*p{%-|uXdXsfW-yUbqr3OZFrr+$_;E&d9&
+zhoia;j;i-#7M}V2F^l8a#{;`&XR4hGxbSh&Mq3BI$F<7(-pd`*DSOsMHQh3D`7YtC
+za}ezu--Ww6YuZP3zC(NYSqBZCPqoPQ&8m)a`F&J+Z*gBo*>xfAvOTXq3f{MLQqM13
+zJAYeH8z}w4wF|dfoG*#j8-T}o%cGo)_9xJ&vnMXo_Wb$~;2J#?e9eoE-5Jz=%boRo
+zfimYQt9Shw_G58>^U?LR@n7Oh^<U(i@hPTHc>YeCM|o97`NBTw`(b;)?afCgRo+ae
+zbpE)J-Pjat41L`5d{^T<{ans_#HQ%npu5Z-fkFDgI)`U~-<EdxGzC801fSri?32=8
+zho(0l{aoekjO+ih2KPt6_4~LkA*c4KDjU=~K4fV(=gtF%{a&`u9N~e^MGq!9eo<fa
+zTOMy`*tezkv|FA{*@iVCz7M&)<)qfp^|YpHd1Bayh+#L*WKGDNlwAw5>$-hO_z?Cb
+zPuRUtTKmd65aNBiH_ELAp?%qJdf4@^!Y#WS*vwb?Gw~iHt}}g1Vz<Xk>_(m?Hnvi`
+zG2=da@T2Nm?&Ut8b`+gw-<RmK>_czUu5Y>D_l+WbL5(9FaPST`fp;hY?@$EZpzi}E
+z;2n1Gs!iY>O~5-Efp^T~7wHQMzvB+xsV4AFC*Ylqz<bW)mw<Q1!F!<zycZMjUW~vy
+z>+y@M$q;_$9K4sBz<W6X@8t-*iyprOyjL8&%T3_DmVozK1l|>opFJxm)R(Ic-WyHe
+zy_JCXRs>#)U*BNi^{5}k*xEzWSw}IGbrkg5a*QFGdX{&cEYP1cdP$$MK`-ee%)ma*
+zz$Tk-&oFiw>Lq;#JLYi*dq?j$p>>#p*mmuq_#SQO`^4afiN$3@3h+C-lywxWuTWol
+z+9zDU8QhBWE6g175}Rhm7{O2F6gy=#*0?#KUi!7rpm;QP?m0AMcLX)97x#N~6|b22
+zz*{WL?Zmy?dWdt0Q+2kfVE1y@8S;h2;70$dw=2b%<T&daHmQErO!P7j<LB-+0h6+V
+zl_R#++T#3G#RuR_jQ!BM06%8GHDSgQcyIb^>umi7-g?$xEVgqn+ladbE87h%YXjz3
+z>ixjB8KNh6_2J2mM{A*@+ve}#p69ojgF(I)2DFl<=c44zvynG>7p4M}uJr*~>eM>T
+zw#nqx9^E%cb9jbn3*ZlQ=Gr53Gdm~;&89B+D8A}ha@IEleoAw|)ah~jiPW_Vo>Ld!
+zqnlMk2NcgvSmqZMFVw$5<Kv^~nv>|c?!VRH=H6B!bIOWVBlENH{!B#X%Of&>4*Geo
+zv-5kF+cHMxU6J+O<S{&48ql8(YFYe9&W#VWeK;ZWWx!i%^Y?Ji^E)PU(tMxX$ei~^
+z=A?%*KLrfx%pH%&{DnH6q0C<*4LUVv<kPY{_`TEN+eGHSLoBBHJ&sMsWB$5zIhp?}
+z>XOV0??mRuka_<4>%O-ycI|u#@zU*1=8KUzWkZ<{!utaenJ<XQd_VN_USl3T3v3x9
+z^F^$Sn&a9zd5p~G1+*z_7W)Kru8-2%?oP<O9eDF>{vPgme#c}^T8=c8H8SVf$ei?0
+z=FR%}2kUrx`4+0AL1%Pq=0-AKB$-EWH0MM^Uu-<#uUpqH+s@6}X!K7wiC%L?^;Y}b
+zrf~{vf%aX+#wSQqA3^7>K5Jso#P^Wq$_~t|&rOow%)7dJ^nI;xUN5Tib4Z`-<|eO#
+z6E@S#X|2bn%*0=Nd-_gn=S&Mz=enq!iB9v4f$2d5y@lyE?;j{H_QlK*)3%CTT+<@;
+zzr?$X$m84u+VM0C^LL~5FCne9N&T%h@4r{x1Jp6d?}OC6h^r-1f0cK~Ca6;_7UpjQ
+z^Lk@KZ7sGPjooFx9VlJ6n6~YLXZmthCzy|aazfu@iu6sAV?+OcuB)-%<kr$(Z8@3S
+zLBDAo{igNwn|kOsZKB`Qo2q?nbIN|JXlsi05<N@QpXJuDj{f?6C&pLJI(pXo*}a4A
+zI}_Nu*!PLt`gzm0I>%Y!th;;c;w_(k>}C2>7rDBofBLa1_oG~cH-FmX+ZX9y?W6s@
+zgx;xt^)mNl|LS5QUZzciaV&9r!`z+VDUKJs*P6h)l7M$50`IEtA4K|Bg7=1l_f`{l
+zEr~cAdlKSD|JLFc=?@9sG#9r|ZxXlD501s{#DyU|`o{(yV}@!w#$N~?eQ87Qye9D4
+z6Yz)yLwNKXEPj#xkl-zH@D?|LN8dPxA8}&{kA8y1F9DBu*x*P1x<S5O33y!*c*OJ;
+zzexW|_^o#E)--|Foq*RJfw$J<=lWOci2K*mzv`iXwTb>!?+V%x@V62(?=WlZnN#aJ
+zS=^Pf-?QA!9sRr~`Yo(I@%noAMAqi-t*_0$UO(%1=v$R(Z<49j`)2p6zh&30UtVVW
+z4O$~r+`q!~x90ma@b+oBPrLpF`Lf_HSf&pKec`$D<TvNe)27ReKZbdry?9#j6a6%J
+zpl?{}JP6J{s^@_(#WOAs{L#0jqThik!YBWoM!$#B_vHp=SlqVb%QQb)Jk7qWQ+!M0
+zINug|?n8ZFKN!>=K9#EVp61&9p}yV&0pB4>F%Dtvg#47o8nt$-&@#Qxk2P+qDt?QP
+zH*PzG-+B%n3<kvS$nkJc%T|fak6Kv0_&c*!crWkd<65Y1FhyD_wl-q>QPE1j@fh)+
+zU(0!vcoO)zvy^+$`l=##?d$A)?&iMUec*i%ybsyB3Ts!`xw(Cv;reFVZh^a>u}TMb
+z8@MPv_X4n1qLa&3*uE(7!9#oNF=`fgTF=|V`}|&8KYni}{mYpJY-@kyoGPtf(7X@v
+z)mc3&mda5sOZmcbWVr`E?82V;cxMgo1b;O;=F@hQCO)yg%%{cH3PHPgA>6azD*Vke
+z^35S<^NftOhF;HwUC_5Xs4Y;x?`pl@cU}GHxux&xo6wKf(2Xlx?YH#x_Q2;?;PYjt
+zA3aV#HUWR|mb!jy9Y;T|LRW9VdTeOhjDEbFVxHOQM=yNY44kFB+lrhA**|d({dg&%
+zA3L0W?2N1#-EkfL=mE|;@O}}z&pQ2B;Phi%6a84vc!gVwx(!^!KcgRWko~lXeyok?
+z2k^AktcUj+S5TQyKk&o-QT^zS=m*b6KPZ=_d|^8J(G4HgMD$}G?*xBtT^G#w3%KPL
+z)zi%P7vP`jRvURo`mx69$02l8`r-SC*VPZ!Zhw6#`oa3`Ue<5-vd+4934ET{!rDZ;
+z4pwvI#(pdXKI_Lr`_VOyek^utYL~b*wUKq$;a=oc=<Y&4B6}Fd8-tkb&TQSj@;ds_
+z0^W<jy9K=2zaai;kGGk(UerWC7Gsz0aQ#wnQGTNzuh7?g$@Ot*lMgM3=m+r3-d^7O
+zy}hA+5VOVfqdlS@JRAL>To(9d?|3`<F)yMYuklXsFL#Ev!t9$DpWdjaY5lQZWBiWw
+zW1iKIIkIKg9dCmtVtY(Kb9YdiLfMA7aMDd*bNBdt%`9=Pc#KcmFB@k1nuoz*5S)&2
+z%?aL}&d;Ij+@SVn>W^V(!*#s-;qS~kfB#x`cc!i5Mb$yuR2$WvY3%_PP48F^(=EJH
+zf=AoWVgqCgitE97S_Eh6@oRkEaUIia9RsRkIXI&?rcd4aE^%(P@cy;np^sVgQu?WH
+zx<vcEe=YrNv2|>tj)p#5N$W(kPwH02+LPaVsIL>yH~pT`JQm~e{yZ1$VU(N(IWtRV
+zaw+aNXMGZ*DXvzWmW-?Q4bf<vUSY1>$Lachsg0{YYG7#{!T{?Lv=%}2SojZ^m{i}&
+zC^O%zZ?Nl~&T7|Ov(6pYysyrIkDk}Ac>?7dVxGFpIprEt*Lmj`h||1%9AutBd7kFI
+zzNew@gqU+YBlEd`l(x1_-_@||wDf(A89du_BUFAceIIic_8SQP49w`c+gc}}v(g7x
+zZ{y<^dtSOdZ@$^MlIDKj*D;LrPk!C=2fFxyE>37X?E_u>z%F7}Kd_4*_~;LO^oj~`
+z!27mu=mQ`9fsg*%;-h2doM+M_gT(l;bIa)~)YmuLZ`G;KVAmwhBc8YOCw~1XXDbuu
+zD~&VB>9Z(yH+>A^a;+ydeHi)#>cePFY;=8{&YXz#W3=|yt*<N77qIgUw%?-f@7cb|
+zSIze@G{)T@>APr+k?ouCJvYAHXZt1(#QG+BU!jjvcHj3K<lBDH@qX<)h~iVFAH+C&
+z-`$+~qrT5w`X&);Dzzp@um&ivF&uq&MZa}Mm(Hz;_L=;52DLsweI=XE_Kox`T>8OR
+zu<HF7^@qM{@+QwDeP8=8@8cZo2YUH|UjA)d8}NZ%exR3s8};(XTO!{eW{*>U=EEl#
+z2k*vD>wZ?gw~VhY<Da#kMB{wr(p>Ib?5!=c|D#`d`F_v^cQ%)NxbaWK1o}oU<Kf-f
+z^QAO9Zm93J&Bmv;RpsXd!|!i8kDrwPyTrSw4{iIopl|A*|Fivdzm6YeUzM%Le*baM
+z`NaXo^ZFSx)LF#(F6vF3(N)fT<wV=mCOG2n^{v$g97)rdslid>o6s7=k+|W8I1<N%
+zI1<O`o1cTg70&v;roJoealFWUr@`?<O>kr^Sl@zdz>ze4pThD{bMbtC;_(e8MzVao
+z^~N}|zcs{>u~L1HP-DmjN5+vghU{@X>2bU@_?29%ov-(@*0&$^?IzuIE_)K!3hCw?
+zdtw27k3%?DI`q8<%AikCy!9Q3yGg$he=9>4md9V;EeNRFe+NXk==^=rQU<2*DtFjC
+zo~D1{X`0=HCdRr9P28K(M7p7=!+zVu&@}95qMgKO8l50bnfmusEZ*)rQPg4Zr_PWj
+zV45`Q6y2Vtdp%8eK$F`WxXSGdY@uzMZ#Kb`Y-_Mob6TMchaA1!o6<|Vp?5e!Z(iSZ
+zkPH*_mXvn_G8|3N%WosYVMp&!gx-=%%iBDj-rJy8`c_VBzvM4oldY+wTTK09LGZL_
+z)HgE>+z#DmT)Trb#lW&B_fU4~t-;Alz1$}UwSU6z$*JJe@c&7!KIQ_S%yVb`>62%;
+z`~83mr`T`PkHOnNqt1)&yI>j<&>VrjC8;`PgDwjP*`SZULz$E;zW$q*4eg5eMkYh{
+z8$m_~Gx}D9WK!QZDtlnRe>nk}3|m-XyW+Ru-4J^X)rLy;+sH;g^DZr8^LUvYg<dNY
+zd`J41tV~7|GU2y@o3`JYY$lW9*WY8An7XV?{-u}6{C6mmyv4W7y=glk-N>Y5zddDb
+zoxVRInS3;E7c$B_0htWdzjtN$&Tqpz>M%0N+i!cCcNv$~Ve@#Id?A#{JY=%o%4FEq
+zAGQ;I8@QvE#%40P^o{peCZ;Ycle@uD`<S7_w7rFHk8-=(_g|WCo1QQ<^2|3}PH5k*
+z_UvkJq59a`uUp>yc(+?0Z(vLY*7qarR_#^$cl~}|!P9<3wb_39(Y~+z<1NpX^{tL*
+zUzv8qp37AA0&9}T*n2rPg|n&Ub8of%`RIPfSj<0s)5!V13Qk^ljI|ae_IUp~bKu~`
+zx~#sjZ%3YgGxGeM$n(F^e#dzyp5;4X;o4n%jNRv`@fClzHTQIV@8aA4E2zEwmt23v
+z^=Djv%r(mOhg|=e>%VY4%k>|*ewXVA*AUn5uy=v_2B=SCHA9Tes6B&kcrN|euXFao
+zV_cMZzUA6++1XeA4SP(#!@k;Yn{yfZR#667eENyGPjxTEwhG2VY^}GUvbD0Ct0p^J
+z$~XLEOC=M@Lv<7aJJ0La{{KjImf%0{7N*+1Eq%EJ&ST(wd3aLa<!=VHOTW$U?`j=@
+zjYZFIv1<a(KVt9N6FvHfT?2FeoAEP`GQ^9Q{;K|cKz|N@NH6^Q8>bg}jUlhg`N@5k
+zABNt4$M63Tp*Qd7{hFgU54~S=^s-Od&$ElqQyjeoBj5UW2SR$$mA`R%(bX|@^>Vtk
+z@A3xd9p?9ciqQL@qxTmay$?d~FF1PHBOayqKNBxVzE6xt@1OlGp!biVZxnimp!a_0
+z{jdD~?-6>x=;*!I(fdW{z1Puuf1KXmbo7?TqxXOPEui-=q3^GtH#4R0^5>!VRet}!
+z5qdxC=*>8KKMTDXNAKt3^xp62ecsVK;9_9es)eNKeBv_wFu#7eOyA7=zcKQRy&crF
+zE~JnOp4R$UbCv|pxAI&eeeCT{v&MSt_V3Oe`zGgRkgj}V-{hO4so+!e^R=e7TkrlC
+z>wHwFp0Dxz2A9sYUDYHWzk7;}$9=o2V8{Qa+g*jer_LOyvY+zur*yu9Vi=wG=<Mpx
+zIJtbn$>nE|%O{*%J{6aXx8JYAAGN=+@#Mppy~f@v8XF*XF4LEf%12}N8t)F}!}FMz
+z56@-#*4lGy<nv%eJ`X13!@E#EJbU^4KKM;YKKR_farrQgqV-i(V(H5ti|(Cv^0~{&
+zr^CtTF67hU<nyuS@+mp_v~li<_S`nMAB_e5BJD@xL3;j$xO_BbL_aK)56_`|crI&>
+z!prAV5&3*7As^m_^5NOb=NBg`AL66Garu~WvbopHc`3K6{V-<6SW?)2ZgKLt&B=$e
+zIYw`D^0~daeC~w)W-+p{Gq=~z@fo|Fvu%D8c*Mwx$Nbqgmv>D3Y#YUNZx7$pr?~b<
+z_cq4EHijkMBWBat9?!e8RkUZ1*n;>wzAky9W1tOl-I+Vg*^)h+1)t+A`0V0ICuL*l
+zPnmJb0%u@rjiMc=jE_&6F-+Qs#vHYWM)QZ(hG5%_eVcKuaEdk6$GMJjRk;qgz_+$)
+zUTee;aP8;X$F-Mh57$nv9b8+vHgolIt>;?DwU(=!YYkTy*K)39TuZr@aIp?u>(2YZ
+zU2~p;>Zdb)>f2diW>;-H=X|S-^d#%ndTWj_$2*<*qWuW!cW8{P$i9TB^I4<HUI+E_
+zv+R4A0q<w9*3_KqaCt@T9>z}>F@CB((m!M#^1CfT-+9(sX4x~b4ZJiTso$ED%(iw(
+zc28-pF~@!ijboX5uJTMhrj9pKoPBluG1>y_)HQ}6-N?Sho(5<a+-*AV-qwMB1bsd>
+zD|DH&te@J>I_lSd)yDkUMXa-DFGP;@_Br-gWZ_#5{s~UcS@tlTTVeN1Pq#Q{Nz0L@
+z_l2vhJARAbSL%BYdf3lVxJdeIq`$nPwt@QFCc`J_&b>nVv@Y`vyDWP-{%x9XD=hxp
+zNsSvf$Oai3*}P!)X~bm1UZGGn>=`n$VQ-P)8~co6vN?Jk*&IVQ=uu2IFId`)Y}or0
+z%H~u=Hm4^bn=^Kwn~}|P$Oc_CvN;1^Y#njgaF)5=Z)b1Hm%r|0vl7`HOtBvb*&ISP
+z=y?u(H?ld1Yz`%4Lt2hBBb!t3nmt&#;}O}MMmC2@KSugsLN-;>UtAH&W~rAA<K+#q
+z+3IAozlm&mBeL1-WV6G`W@|z=JFX*}oydlEACt}gh-`L6WV1UWn>`bd&Ay0i_97c>
+zi;>Mf_+smb%ckWvE1LtU+A|xRY<iGQPpX#Nglsk;8|+dJ`($L(gKRb>WJ6kxG$Whc
+z@Om%5cSU5g2ia^UeJAO?3E6BV{Xktd|AqdfX*bLhG{|P3lg+v&vRM+5%~B_u<xV!s
+z60%u-9ocjt8|-vUHtQm?Ss9Vd>WFOCOh7hkBeLm6HuwS~o3-%8))AM@MJJo}soL!O
+zoosd?n?<QwZa1=7jBIuwo1IQJi;&IYgltI5k!EDG8eVtvdu2p6Ymm)S(z{4sl90_Z
+z(%08z!}r;&Y?$w8kj+sioAxHMdBcu#89(qA=d#G(v^v?eBxKWi9obAnHr0e|+9R@=
+z9+Az=h-~IeKsNItvYCr)4m;V*gD<v@gluNncC#Q=<2;yW6zgOUA)6}!_6ONq4cKRk
+zYz{ctTwzZX`<Kia9p2xNrgMLcY-Ymixzsg1BAYqLhCL)Y=SX`>V*aLu{0r)`NqN~Y
+zZ*#$YSE`7=A4^ZIYQMVTJIzU|KUyuNM^?`d`g&heOv&6|N%Mc~VW1x*ItuKyDzeY2
+zcnn^rSTjXB<De#8zd8HhX%2fdzo+uMaIA}bw$D^}F%|Y{3omk}F@0KhUTC-8`IubK
+zJ|@o+uVgQB?(R5!+w(WuzO7;#^(T$*JRBIl$#?d=1kZUVzgalz^lLD%KJ(?oeth;*
+zCF7ZG=YpDInx~29V(p&&SCUQk1;$bZ`#A@@>R`W^fL*2kPmCn^_Yf}?k5Uf46wdf_
+z1njpC^lc>VQ#R-Syx?M@<8fHMM>};sXrI=7Wsgx_u?BILU-zZGc%ofrXb8ui<LJpL
+z_;5NfdXhbk?wxYFcM9D*ozOkf^i5Htd*I^txcPXd=S6TlOZqwTy%g8I?8}`7AKxc8
+z@_Q*&%OXExyP2nI(7}UF2h}I1pIyzjSRFj1ekbv@>94P?>);{u?_ekI*n1S!LDFM7
+z$ZzSO#$-YrTpZEC#R(ncU8sXRCv|YiM0Ak;fYHHqL0t#;!F#WRdz_xEb$YTtF5BYT
+zCOWv+=^*`#m=3P9GRp39I=I8ZUhiP<PQYHD(7_(3gFF4%6L$ZU_R<x0AlsdsN3_f7
+zU~e2&Z%;%AH#N~g${8Kp<aDqXec22jwptz3zB29aGWxk09o(AGLDItW!N5h|h0^z-
+zLLJ-<j(bSoOZvWq4(@NRgU`w?Deh)ou0aRacspq4daId~)xmDrL3`$DnX^JeJJ^j5
+zu0aPGQ;O*z=`kJTx6whyokATvP#>G%J0>S%c93_W4)UDTK^#ldF{HR1)EN`>@1{p|
+zunXRM9bD%0WSY~Hm2ue?r!~>R<=zgmrXt#>o9=XQiPOPF4)#n3duamp%!CfkaXPrz
+z>7W_I;9M&56&4}e#pvJ?r-Sq2uzKf2bZ~AH9i*Jm!MRQc=b<m{@L_?|LB^8?7&kFG
+z*lzbF$9ynpxdpbYaLIy;_H&0ixD*_hk-nVtu7nP*Y_5azkl$V7%tQ7}4^A4JJH7K{
+zv-!udZ@v5Z$LveQ1Q*?2<BQGr8cSz1H+G}@2j4P@kDrY(CN<u-O#ZI$Dz=`l)Hb4T
+zF7{_`(->J~O`l>&tpU*3t=8~qjJ<Ju%+LR7Y%1l}_Gzxfo(tpF_z}w~uF{-9+kD&p
+zwTJmeV?!Eu3)h#FH21IdabIFA>`T|$X494#kI~vQ#Y}JE&&!$n&HB9`M)5Fy$>LG&
+z&>ARk02i$_(;BlnJ`-49!TJG}32_1j>kABCT8}oL=SoK~($2k(-+czZa~?m&BKV%r
+z1B$;bpX8?<enS!bM&tNZN)ucgHk`l_I3bR_GdK>#anxEkt>+LQf8g<?UmnAgcqPQM
+z!>$3de6(w`JRd9R39jkFC&zi2s^iH!%ga=Zmt|mkJa>CM>7&N*bTON3Z+R$!=V$`Y
+z(gg7wPT&cgIzJtrLkT>A?eYAI$CLir58WJN1wB@Ot=iEtvI>1NeKyU9Fz2B(_1TW3
+zTSj_$r|;Kme~M!1Rj%Krb!x()Lf(6HC$9E!iq1du@0IoheYo2rX;V!Mt@zva<0_vp
+z>$pxR##i63%x_?yC`9^mK2OcfQ~KXJyFxL|-O#wI$y{YH+4kqGo@=kZ)AN#DuV(aT
+z*sdcB^(Wsl!L?4dT-X+Y6Ut>sYum(^mbm@^+snoGY5qbq%Wlw@X^>AkU6+sIMq<V)
+zvNiG<b@Fj@H|6xYx_o$N<U@HQAL5djeBAq(d|aB54`&sG^102d>8i_z-wpC{c|!TP
+z-(Ef^pz((CF|nGHPu{NUGV&R+Ysy0TWG1*4t<<;{EtC)MjC}IxxO{+}l+P1hKE(MA
+z@)?cDhxJG0(l1@BV(*N6hSRS7s1KlbzgU+K?~HsXZ`%*+QfU_&?=bDhy^qPqrP=nQ
+zzJqH&f0>XEzZ>M^@`UnnzrB3!n}~ey!(sc$OoC6&kCi6H{8*)9(!|<N-j)m74{$>H
+z@Xp95Gbt{g4%KV@gl|80gZp?faQQovScg0V^$VWTv-r|97JlO0$HMZX4Quf-^=~1Z
+zzbjx4(5<0k{?tEfk0J5Seti#+?*g9a=aL<6W9`~N;Mc7OPo2LhsQn6cT)L~i)+_nG
+z=-wAhdFH|s<#X=+6XU%9s(W7^=lz%5`{&*J3n`0Vvo_uD&gK%&g?kre`_mh)>G`t`
+z&e*$v^Rp2+`tGXu;phI}2|nsGmBD8We6Bl3eM@AH`j*a<-!HAdX6C5Pytn=S%HDkw
+zpQAp1Q{o#IALs~c`v30h$fBp-y^h4!=H6!37UWJd{<$ZOO{w>l3THSoSA8Y3*2V9A
+z()g#wJJn~>xVy&RwU&T&1aC3#@CMgat}9%xab4zmh3g{M%Uq1J7S3^<<$96p1)b$-
+z*V?ve9YCA40fo~m+&O^OcbjqYqbbIGSJ-j#!)}gjpPPp{7N3Xd-M7MwKd)vido^R(
+zy$4b?GZtNCo`n8Dmbx`YRM^jakLJIRt}t^9niH1(6e(ZW&%8yI^8$INxn8x?{BigM
+z&SpM)Fi|J-fS1y4%=?h7$G|@5U>ve@Jw1cKJ`7A?tKJP78~5|@$4Ec!=0#4WYL9EK
+zcTeV|nTL<^23~r<X?U|c!ke9rH$4u|JqbK}61?ekyxHY=gNzJsHaXtxPVk2Eg-zhT
+z3%Yoh-RyX?7v3OS!<!w6I(s9$*&5-^W(Q-d<IN6W?*t~WbHI-AW)JCm>%952=Z)sU
+zqrADC;LX|yZ`L^8EOmIUOW?UQ!JFldH{Fgm=(6F>GRK>>3Eoh?ungS0p^JCfF2|eo
+z@aCecb9JK5<q_VjjPRz*!C2{dvl`fIfC=mzuw%SgNBa6YZ?0%QO?snw=qPWlCU~<b
+z!kc!-n`sWu#R)v8C3rK_@n(VJ%@xO+>5eyx61<_j&d${LqI-Cko#S}31m3*n>YSIT
+zb7q7$b0fT&<6z8nyqO2=c3=WqXYR##vzYWHb>1BDywN;xgg3Hbu{QM<<FKcly}9bf
+zj9+$R#w`gvU$*1Cp}lz}u=eH+JLao3Kt^vE-!wMiExR5!v^SJ5Fy@(igRx}ZWiJQT
+z-n7D-Hym%SB*vCsiHt43X6rGqFFP2oxiRG{z`hDhVCR4x<4p^^X|40-A<rB7^{EeA
+zTg<ma?L6!`KL@5Ys1MMmck{3>X%0-|YD(8UmYautiTQ_fngb)ISO474!;<d%C1xI$
+z-?sn3_>!N8Jsg<>J8b8`6ragI6?hlUKk)459~R1YF}7A_EX}O#d6BiuZV#N!SJXV{
+z9l%KLeXIQM@9mx*eeX4UDpk7`UN((o+uVFGe3cK4>D=jv&K-9;cgX47a|!t$O6c5S
+zr*o&QE@&*$=-i;wxzh=qqkLfyoj8TQ@Ge_*I(J6<Uv7nm_{n35IuA#5?r22kst(3c
+zr*p@EeO!D1KCojt_Z;bGIu*C~iBJEDaTY5(JHKyacQ7KmgXBNZTy|4``#qN30pXmg
+z4T6)gpNyY0w1a(q9!}%OUuAu`n+x8rc{q(}X$`RE(p)>(PdnJBc{qI|D$))}kF^7S
+zn|8pNDPcR96KMx?677I@VLRYC)(#lg)VB}~FZV=vxd-}oH|OQ0_nMcxEibhv_lE6&
+zarjs}*b!+5n_W9t>)OH2gifwaw1f4o9c*>&K;wvt_13v|up`k9C|_8Io^C~ld6(^R
+z?O+$}fH>E*gWg1)>m%)8Q=}dAI2fB;JLm=WW?%wa-=~eWgPo-Bs<#97-P(4bu~EiF
+zjqJK3vg;=Qn&z_m!oPiw+rb*@q8*&aUYd5mI8{SCSn2&ie2l7hwfsSSd@5`Qt7!)-
+z<qzz*VdxJ?kF^7STYpd=FXW8&`nsGwc0M}v2fPd00nf2^pm9vbFbyx4M|im$`j$24
+z<voYqV_q(^y!_Yj@`mkzzE-RqERM8;1+E=TckN(FLMNvu+QA&x4i<TTz<8kA!A#c<
+z7AM*P<qI>>(?#eo@3M1UJ6I}zFxR$&_C%d?BJE&aq#ew4Fy^^-&<^Yczy!AD%VX_e
+z3F%Ag?H~i6tUs{p9E|LyMPxUP{H@Jp_Z#1Rk7d_NU9^Mi&WX3WIq}x!bK<M|-~BjX
+z_SA}+9|sKgATWOU<1M%FE#?_~7j;tK`H!);mi-le3{c;B4WHQq6Yia5to2#i-rJvH
+zk1KnY-e&*O+aKp*@66jBlCkZFi}$qIhgZ1qIQCN1#(3}bQtJ=Slcs+18_4R?$LeE<
+zu`<AIR_4!LnS!ZjYP=rsX;wydNcB9?tc=-*WycAkxc#9kQ*Ktq?AdB8!x;yrp66Ye
+zAG)(XE<x`?((IWqU%7UPJ$YjpuFt|77h@Veu}^G_y?F(Ezu6bZ^BB*!3a*|%C0pnA
+zXLZzV+E_<o{}1oHO@sHLP5Ulzn%R)fl-oZiSs~wMJoIDRvP0tK*myL$IiX5q4k${a
+z&aBb5iam{b_B2*_R!kJq$T+p?HN0SKbzyXmAn!sNdG>aD(*$UY?jwrI+|&4gqtTD$
+zHp<cZtf-%g(P+lJeyL6)=QxBk@~nMdA&qxNXuLB)Bkw{QdG<8Qcil*iTBC41IbL_1
+zIk^`~d*9S<`JQvQ7wYiD#}HHC`{twfRerqXUcQ$+X`JsD-(<!TvkOvuhbyS{5P#+O
+z2DOLw1+|U6L2c7!*&_4ptrPYe@UlnR#~=Cj7V)z`*F8&I^(=kzXX!tBK5Xpm1P<$<
+z_VVq9eex+QPAYD@q_w2PS4CpOdpPr5-)^~QK5N9H-y$OJoe|j^)JuFyxxRZ?qgvd<
+zJOcZ5D&WVw+KDmXX+PBfG8h8K?}6j@@qveF6S8|+*QYxBhf^ck*EWD%g-1`$58~@?
+z{MtX25lqG>PU`!{xr6vKXw|o6Wmnp;w?FjXKs|`hIbiK;k-NS>*L!hNU+?;$Ry-8Y
+zXH)yu{<5IY))}zm4xHL2_Z4~q_K=wOwm#xfeXm&W_5D@P$Lv~{w$9!Q#Fjm4;psa3
+zGqJ7t9tbq1sV5IjrabB94$Ofe=A3~kdsKv`Ro<3dkA~+a_bE0ko`Qzcrrt&xT3Y+`
+zy+eH~N$?HN)<DBq`#ZZ_cWbw^T`p~<y%&h-db*%tB{ZxahX&FO4Z!p?Y<4shCPKqt
+zYhUkDXgCKAFPVB9X}Aat%b?-1#mmsJ3>sduzq5;UcQh<^X-n)~Yxop<Jw!~DTRIL6
+zq#GK5>1p^mN5c~nph4^Bd)w7l)!4l`Z?u7iawa`eSfH4|u79<<+lkKF^|#qM5gO(?
+z8s<3~=0L+-Xdw2>wU0vs>4t^{bsBDlhTOrr?(2I<S#(fqeB0dkc$>a2GBc<xA@BB0
+zoi)wT_M?jf=?AanrqibAHx;HiJf>kMrgzqK=IJELmznFPPDktGXYmzJb~)Yttx0wd
+zguauIZ3$}njs)j?(f^x48@21+ds=|k>ec}FI{Zn?ktSM%hoR{JY0#nPacDRz8e~(m
+zGn=n-)EdX=*()}l>tt-*?loQIz7<)gN4Ce>0qsAPPqgnW9uwVr%6IKY-h8yB@@9#>
+zi&KKyg_{&h%GPnNROzm8uXDMy;Tm5v-2djIT@}h0e=x>e<kVDWt^LjHcTzvR=iB}}
+zmXpx+(exxUuX1?`vJ5(p3Eme{lGk0={+zWoQCjJ5*V=9-j-h^?ecSe>&XdmvPkc)J
+zIuC8pb7sy1Pkg>ax^z_M(-33C^2A^Z<|Ob8-a6a%q0jA?4?pkbwZ{Yt{8Q+PV4C_!
+zi`Ex|1)lyq9Pz4+b6hUE`6J;KE0+mIMAt&r=!qWDR*um0cE<AX66MCAr42k5eYA7`
+z7goqWE!rETrheP!d0*CRvUcvxM^lwI!K;}(R;8>wE`YCOV(1dzm`jV&En37=@iUqp
+z<>ULN+Yy@nF4x(xe>~mB*_Ja-=zBCN*4JqLAnR8+13DN<>)sKJOwxTcH8NRuVwzU&
+z;aN+ik8t)<lUR+I=UK+8^erCwGp*0l`W^FKRO2VCkF#*^b8xwvdbyi=_4~dP6>!qp
+z9K}>xi`L0=HJ=*!0`L^iX|IEMp5Ixk4hQx*65CZf?E4wm^cmP>?ftHh_Hp1;$glNK
+zm(xLCSL&u$tLfB87jQKO5seSE#!7X>V33xCu^Jdhh61w=YXdQ3m6$OGr_=-vX^Sj<
+zCf=;(Z5|VIrqvhuh>bbnv%V!XM7;Su;?3_9ZytuvYCk&DQEQpRqyACiPGU#x4Zuz{
+z#GT@?)-;L7DefvS``8b!wO)BZ^CZY_0NE{c@#nx4JKv+V$o(Z-rovtGDb=C$$dL}e
+zc2jdK^?3`Oi6^;R93#(}$n&s0%TRgK!Yki`j!E_{BU5zmXt8IxAsf+H$)`qsio4MV
+z=$1ZU|3)N3`3-xnnYAnatU=jFgG0u_0G3^kXV<Y-hU__<{=Bk3z@Jp$$0`>yU6=km
+z^bdLZiJRDq=wrBY+O8`!b&p1Ajy^m3$!q8*pP_%)(GP6NNo#@MG5wU4tlug9PdfSw
+z6QRFD^7m^G?Ob0-e<?zLKJuK2JP&*MJNn6I<)3!)cjxxK8~Qs`&pW68K1cr(6QMuf
+zg8V)GcE4Xpf7-5FwDOPA9DVlkpXB84=pT0U1N+^}|J~7#otqVH>*b8sJ=;#y2GxF|
+zvA5P?YJI!<8?yJarL(lFS=<$im!*s2#MrO5x)_^zsdCBkOlKsQ^OK-`1~!NNcCLS+
+z_d4rU@6=ut&&rQT&W6vXynQdenKX~TYv)n?D;bNo;uG06(QV4)ot=bM!+-Lr{V87?
+zKF!msSg_n-*NHw`Qf$=4nJ_CVS05ZU=Oo@JUS|!i*<<ZvV%7cEiqq3S`R}5|_S0lq
+zi6QPdA^8j<CmTO8UIHG{hw%5P-KXKchjF4FLnOv|tWU!P1+g)V@^F2xNE^OB`mGD;
+z*;ML6Z$lq%)9y3hydXw?)$aM2VfK6gyAgi=I`A`1;G47v{0>|GF5A~?fZv~n7mD!{
+zxN8kW6mR)e{BfUf?#CC83y*pDrtt8;F?eb1y>Rg8(~k=eztt2T>o;QXSjQ2<V_k=Z
+z=i<4{S5N3Whw{z(USOp(+r(%U=1T8@Zk=5gjfb?4BMSQnXOvgyulsmR-%{F;h{ZII
+z9xYR4KArkZ?4-EIj@4-&*Sr(p$ygoVXe5p@ZJPZi7B`K}DW3XB(-^5AIu^RvXN4QL
+z(mCZyQ$O3l!anJ{B7@j01C#LuAB&oKOy<*MD?(p@9jV7c&ZclCo7U**d{x2h=l3A>
+z$livwi+cL0XMlRVz14f!yK;wx`TrPy_0=$532|nu;)XbvY<#RSea!*Ja2|@_%(JnB
+zrS3S+{MP<7+lO%Wwi(XU6UF)8JDdy7$A&nk<L9K8oAG(r;Y=Ldfb(bsXPynt*z`D`
+z*;7Y7>d#!4&%BS~tTW&$=*ANc=O6lgZP*UMxgoF9Ev6r#J=qO-ci<nfVMe!jHh5!G
+z<a469myMl~f3xSf%hz6)2Hr<$=yo)elQaxZkcNz-fxbus4fzNSJR2HHO=uv^;6$Cq
+zmjm;<H1Ix3!+dB^OaZT+<my}K&O;XeE036cQYTvYw!7gazv1DD%4jh1_u!@GI_#dk
+z`}mGg{fy+^6BC>BP%JH<Zrk2{jprh#TZjRsRNfp;^=U5#d-ZGH2aYA?Vzm$B*|hd!
+zaDFlCsl88po4Hx-&lupHXlm0Q4L|3~et<E1exae=_VEJKzcKS&ycgZS0FPpOI3ne>
+zKgjcLyz*ak<qJ+vqV>zB-l+U%T=^%Om50_FmH)UaUv5?&e%+}2b?3k|FX!}QjCr{~
+zW$w$&fiXww=fGC~?!@##y71<spRc@~Zn59ID@`8x(Y>>ngP+Y9+2lU?hD*O5oE$^f
+z#+U=vIdvD(>FP9ecQs=Kmzk3dpP4%j=j7pW_^mMfl${ULnbypM;YZ(oP-|)CozOab
+z*$16R?fsnm-uYi=Eb;S<(|(chMCa?gF3nHd{``-aa~|W2+)JPD<P70i)yu%VoNwv7
+z%pCZodxP58{eg6;LC?;cd3Dah)48Uq>l5+0t#3<q)W6EfZoK-c&`~XMM(4*h=b(K9
+zI)9`|eIGM;Jayq?uD*}Q>)Yb$E8M6)c&GiQmpjBeyU(;~eYSl)b-~Y#cEszu-_`fT
+zjq1avnlmn0cTqp%vI%|I1@L(40{Z9YVxw~qpK|q;Z&V*PxtdRnT*l^9@QwN|O;h@A
+zarNn3P00_N5v}jKZ6`T@%sK}H<1_WPGws=lx19^<-+A;;^uPJ&m+3n_!1p63o3<3|
+zXPB|d+lVh&yNZrr6Z<Md#@5$=qf6>@B<-o2Q$Eo!r>t>G#>s4(()_Z<EV;(fLyb+z
+zM=MUQWL(|EwNqo`jn+TT0LK~Ocw<XA#;3g|m2`{Qv#8iP){h}xY3Rq8G}|Z8oJ56~
+zL^R$7{o2#lOun&w;HCOL@ED%?CgY-{`LRfYXU6UsZ@{yo37#e`f@eB{=Q#Ghj86{v
+zIb7fWAH#E~$(Si=F+5B5tbhhQ^G*6~CM|+zrhb0Fcz(^sTvqPoH1~welYO{q$&62$
+zGp>9eE-L2=eYco?5I?I=CHZRn)W~)mAFXe)%f9z#?mwY3yX|-E>328aG%Hp|)%MH!
+z+R?v3`s(Ue#c_&%pRq!JqmGmR?)^vj_R&XZgLj5;$$S?B>l;q`2BXfI7LJ$jck1sc
+zMy#am-e~nLlHZlm7^z}hjrRzK{H6MiI=fk8?&>3|oZgj5Q=F*xvKOjLbqZ$KHzJRX
+zEp1!XI<yMB^1djH**k3Psq-|-Y3dJg=1e5voT=k1`K#WA*x#`K$9s!+_q7V|bq0pT
+zoiXu_w8NdX%iyl^Ce9_@;_t?os8{u?{CvuXG>|V!!~f-IC^-8+;MSh0{n+@q9#0#b
+zLRwf)D_TksS}4;%3-47fJkx_bo}OySj<Hwso+jpWM3b+ZbiwmyY8bf;+n8VQ?iO6~
+z#^|F=ls<x2Bcmsh^bPs3QP&SE*>T9atZe_UG900gG7a?c-q43l5+0gU3hB$ZIi(>_
+zA9E_Ak35FAq#OFkC!7s^rTRRAp^v;V`Y02n@2if!a+1Eh{brE*p(cN(#p+ZjKikKu
+zr0Zjp@<9#s@!rq}977*@Li*AzcFt_n)5kg`(MKLbAL)iZ@`dzeEFSVThCcGf=%Y-O
+zzU%hKZZo*o`(ykD*AqIcBJ7V1$sZ>AW4}MK7$WSC4O{%5Mdvi1?7veJ+tZq!##rTS
+z`c<>yW0k{}zxBAn{(d)cL{ooUvSZpNZpgd3u-8%hTh2^s^!+BSJ|1YtnXfa3nU2(h
+zjLi6J!Y@>Ztscbu4{0%fI%LnhXz-_{bR&)?E#gn}w%+T;CmHFFi=#T~c*gjVZc>*?
+zi|}LA+IZpFl<!6-Ts`PmQ+|}1#A~F*_>mtcUdyyJ^24M>_|akOwLX2Ecr9(|F#0iC
+zkJn=Spe;7Uh9)h-k0IHS>*z<xzPEZ<uO}97Wtzl=q{aBrF-}~VZi1spi|_+qP>)}m
+zk0V6K`ZYJ}<rd>dsYz^S(jxrGUw=&A&V_qDtk)CeM<pE}pReMx@$)veD_LGg@zS?J
+zVr`4D$1si}?z>)WXZGdMx6s<VwuF5c?|a^6o`5)Tyf&b3Y7P?nfdet)mx&qKYsR_>
+z?bBBsF<ObWqPSN}YYnX(#Ee74a*s8{jJL<~R~W|*X=R+=+JJh@I7oj~F_an4axu&x
+z@z2wW?eKZR)x?eT(-pV)v-h=UPH~d;z1@t5-%no7^>yot^j%XkPE0<H$E&P-obqej
+z+>D=+$COV`Hf^LlYUdVxn)QYCIYoVk)W0*n&g74bZ&O!vOumynS{3-a%K7;DZvU`!
+z*}z5@H5aORDf#M<R{EbYTImaDU5fmnso&+VP+n<z7xl%Ovs8R(V5)4!opl!Bf%IHH
+z-i{+XxEaTXj>){6Ve2Bz;7XdGTMhYO@~bZ8cQ9PN{jT09UOzT5&zDaW96x^O`GKu7
+zbqu8}KSo_l7s@`tk5Ly(QZD3)E2B8h@Pv2Ky8YN}Iq%{$VCa3N<jyUN@`g0gBi{IO
+zhVLcEpL~Qrq*+-u;g87=e@uSIpGf@%PwI-|`5zpQo=EZt|7hwNZLvJUN5*v~evYZu
+zx#+$6EFq6vnF=sW-Mov|ZO1aCkFG2*43CE08Ddc$krwhOZ{sY(qhZIRp$Lyiv+`}i
+zBa>fsMs#SXUcbSUx}tdYIv$miJSw?$03DMokMcGK4%?NR8wzbm-t_?}7xKuJv1dq0
+zKkPYB-ma8~T%0@V$^ygiDDBRPit>oGkVmeZwI8j{-b8qmZgui)!Xw@V$g(^d;ZdZ1
+z!z1d7^62{UcdPtoB>rxduAHb0O{&M=!<Hwp`H<(|S^Vwe?r<+!slHCs#?`XtKjAgX
+zAJkd<iLL+so8WDxey&-6M&Di!p47OnJ<H5JoB6ZroM*;Zx8|ZMnf0M>9*CY-#`{mW
+z_uf|}-)k;P<-MIwzVC4Fy^Tt~e<$PV-{-6_ji>i>{+FMN+WW%9+M?#7&NHU}=A)lu
+zFIK8?486o!o#79k7$9EMTAd;K!Jem;QP&^vW9!5Ax9bBlcJAh*G#5o2_bm3+erMH=
+zp=0Zw<chD^8H)5bO7;FmG+vgEZs^yTv`8GExk10CBT`R#oO*}>8tO4=k$Q%2&|ese
+zj8~WH{e?I^P3p-jEmBYB2K98*>nW${pCtPNrFfs@ovs<u7;_`c#JVBkamDg>9g^=~
+zxOF}z{&wqph?8}Gh1O!5^*-RLG2440b0V7Ci}ovyFlJk!ZxOEZp>MGP-HDYc#rqaV
+z=v!2Vzj8ulw9dLp|6&8SpvoLbCCxl2`f27t88_Fu9_xGEdLQ&d-{sSuy%c(y+>6%_
+z+=V8-2p;~Hn;We_qxuztj5QAs>+8%6&EeJi7LFHb+jqD1**HnxB8m4oe4pih+FkuD
+zXBHC85>2aIY%_4Zx|yqLsJkOlH_wVcv?e=Vx6W%;e~G>Udeu%Ie^&EeSAW6P@6WSt
+zPJ5HJHknBMJe&H_ZN;K797;A#c!XojLvdWb=5TppBDlEN&i3(~9P$xdcs95UH^Bw_
+zAp8t2yjL8h{QyzEe9qxgo(L}3!UnmNBDnBu`C{vh^Cf~yCO$UpWi%gL#$D_39W%C6
+zkL~zvV!Po~J+>RQeWYk?H|@oV`4d03IzSufcWuDO#y;Nj<E+trJFA+Ujok0f>0Ag;
+z$EE}|?fY(H9j%^ele3chq8j(Aq(}UBH@wf%p2P52;~G9bz}`gt)oki9`&5kI(t1;^
+zqnL{h_%#z&hx)Nw8XMEu?~V2`ZjYLcb=bXd*7l60XS4S3!`HrilU?8YH2jl|=uh8<
+zeYy>PVvn#%#%^FkiECc{q1$JnGql>$_S@lyv6VyE9?f})$CuJU`2Fz0E8n^9_rn*q
+zHhw=G7=32_5_J>;iyL$Qvm^ua{a<X?ku+y`@xC`T?b}s+h4k+TJgdU9r_rs*T85`I
+z4rAgK%0$-?XilylSk^8+X!K_QoA32Uve!75_IBPVuXILvg`>{IZ??`_Yb2SQH1+xX
+zI&Zi^k65p)e!kh?l-3;24EkCcAHmNWocN7igx}2sX7rrP*XhI9bDVUZlh%-Mp*I>&
+z^ZKN3R}MK`%(xq4G_t)K#~et{z&5gH65G?x?~9rz9kS0_ui<q<<y1!fy@9mssrFgg
+zd>X%#u2u7PZd|&m-%%gi#`%_0Io}dEeP&)6{%JhUz{$A!kf)Ik^{CIOdiwD*1IU{6
+zhImdmX}n4GPo>U<)X_#AI$JGTcLiUgdQ;4251{X#wd3<oSv|R*HT&u60AryA+L~!I
+z=vdoF*&m9WFR(t!kKNfZ!TaqwxRmLq-FO}AA0p<XJv~DVYunnaYp>sF^;zRx8f!DO
+z<!x+e*QdI1u96+|5k1-qVEWV<8#kIVJc}RF3;7DQ%@wolnkf(4d{+z}um`fQ(xEYy
+z8HSc9ACfZgF}CEOzOY{hqW%7+-cdUyre}lOu*FGh$28U@{pm;F2GBc`zr*?u;m3Yl
+z`;7&cR!OJK-nMGS&Tp)8_Cz*BvbhIdPrWrbS;U4+ogCEu3BNgK>eIkAa<}{YgFem&
+zf0DCL`U-sa_yRa5ZOX;;WWt!>snD*t`WtM^ki}JVirRBGgnbZhojg~;bv5@Rlzo`{
+ziquWtmd()_TLZK$#g`hl_OgF^82?J0nxnOT-pb3QVUH|d(Pzb4Zj4xCWM*6{Z)F<J
+zO~Vhx0E$1uyu-FVXslN71y^gcQ^r2XpJOBP*2lxJS?@O<vTu@w_RK|bnPY6Y#aVi4
+zbU5#H*z;i=+Qx%v{eozvJwUVg(aipOUfH=D^5Q=#!*=egMSL3)|6ThdUGVzxk5-QM
+z_jov*Z)V4br;Z38voE#OV)v<1hq3FxH+H?l@h4+trM38W?L6%W8{bb~p&wf<ztN8`
+zmQU7sR{hvN*}>P1y}O;?x@6yHbLXP(Z16VqK<kj(yI2w)mQRzpn>I|{ck?V8Aw7G=
+zwfhC|BDCY9cFt`o_C#v|8v3aw&GsJ`xpRw;lu~A&X)ALxe~j)*2emghYJX(&e8005
+zTWs>>ZN8+h`X2OuANoa?#oO7%lJ#2^^k_ctjsNISyzG2e+CG=z*#Nu?%TvzKZOS?S
+zHJb2W!xQ&kYOk_?p${AKKFsZbE!Fj1Ix5}r-^Ws0@O=`kzpZo#w;5qyP<v*D_cQ4k
+zoMko}KQrUn?7#1P3H8XAJd>6kuyNuA^rBqSx(Q_He3)M!BVTNMLdMRa-^eeAzM#YA
+zS3F^KE1hN!oyAA%o;0uf`aKROWGH$nl=+9cllPO{O*!5<-)HQ&x0$BxI{Y=RE!f*X
+z?%<_uyVh8YY3K06_&scfi8F@nngO$JWT?f~tym77`r@75@1%Xbtjn_N5VT%FJTiEh
+zXV)fpZ**hSt=o|;=h@VqxA5iDzUa=G4d*C^TbxguWY$-`Z$8b@+~Ct3u9Z?9uP-8p
+zDtOAD{eW`+iu>x+&ENhX>1oyfqcmyc2k^th)7X+KHl><>pJ{P8H_$Sa&?)fJoWG~-
+z2<7CPe}L}%7WaGb(dYT5&ymqdBUwjN6}u>3ZR8C+>7iZMB7fl4C=m~ub&IC2#=7JA
+zLAZ8fpo9)c7ltR*b$`g}(wFBrUG1=XrZZbi8%Vo(E9#R@g|Q=TTyvQ8m#W$;D&0~X
+zRUMr)vVv#L)9ZYC-#(rOUO6)voSnY%tTMJu`MD!E{{s%HD~uO1ZoY2V#TM8Mz4z<h
+zVzEVsYh!5}yLft4mx(Vr>^xC9ZRgg03ZD*+u7Bp%YEi%Pm-7~{_Y99A3pez`30zDp
+zK$@u={Kkz1N-odP|Ht0_z(sb}ci$hF*#wm+F{DL{X5!L{$|@=<R*s^J7L``2*ka{U
+zR!Afj6HJJ~ighd)i9sa>D=MuMmns`ar4`$;(n_DDmR79f78Si|MHeF~RcdKPgXaEx
+z&+o^E-GxM3U-$F8p4alyy!ZNlo$FlZ&zwIqmdEai>X_^Mwhl`_sGV<dyr1;(*}W(G
+zfdQ8Hl<qB-u+BJ+pR|9+<41fv7l@0;ec(`htk8W%?Kf9c-zh&YV%^03-(6R%J6-$H
+zebU47@C8`1ourKu+>6t{?{oc8#^&M$`?fzr`#N^SpS$DvZ0lNmSKQw3*5TO8@A2`y
+zix1%c+?&wvn0(!z*I(y5Q+9u=Z}0c(+&!TCB!_t4q=3(Ni65P!{C`r$-Yw$&BA&n2
+zb^I*%N^TptjBA<?=luKO+v@{~Th^(6mG=eoJ(23q*J<M$7wTDl-V5M+d-i_M*MG+M
+z7M{)X`F3w%>p>6S-u*6^Z}a}hBe)-W_@dos`JZ`W>%wPk&n92~rE@-m4_tVM&P}v#
+z?A#d-`#Brib9@eWs=&_aPTF^mXs+lplfD;1<@R3RIp;e_ICqP$@gyIz9bfxl-szcs
+zJ=<^RfSLol$0h$<5Vxy2rgkxI7mx4xtT^E3L>+#QfzQDwj{3hj?w@fV;P5`@adDiT
+z$HmX`C#|f`0d&nl=Uuw)pzGHk;GA^t_sePB*m;@nTL#WNFVpuP`seo1$qt+Aaenf}
+z+r%l$uX9dad(gR*&Q;Fn^YMM|UBq$s^m#IA=V1D-$9UTtIP<(~l5y1afGnSB^&NKP
+ziO)mWcW~W3-q)Y89O}<G{W!c&KjJv+M|@pjpybT!3IomY^@M$|BP8`%(BA#i_jn!O
+zv)|V;e1hu_b`9ad+yD8?cAS}}j4hwdH=To=K9`CA9ruN6GJbyFVV`y4GW<K<#~k<b
+zD9&XHF1GWePw@Fvb!(io|J1x!-nbm|LHiNiBhYbc_c`+0lSz(QB^-<SJj@){_lfCV
+z%Wa%L*tps@r}IRe*J)XHKYLwzi61xPG_~u;<&(5~dflA)ooD)vxA^?9)XSdqa|5nH
+zYTkZ#_xbZU-<~=L{5VN|ea652lzpzhjeNIro#upnZi?rFeeW38eC+tooS@Ggc0TyU
+z5^uM|Ki?<)n0eI4bN93CVLuKg?YJ0^;Ym9NXBp$&<L~L?<5_c6`HQrlKW^<->+|#f
+zg*LShi;oxHu72xa_xPlK>oc^{@2%fw*AX9^sZVoh-_PeKE$#F%_^dwsyN;0^evI55
+zC$6=gICbVZdfad7(*EPS@p1aBa}wrNoF{3|IsbRoi9SE<ZRZZ!iI1HfwhXHC7joQ8
+zCOK|CfOmBZZ&~FXy|44$-!~3({Cp(G&&TX}Z})Nc{9D&(i{f)v?Xz_+A^ttJ`1l$h
+zXW4)2*mU|>%W?KN$J>*Iem$S>hdrKr>Gmq`PO^>vkFMow4Ayxk^6Yc@@AAIlI`1xi
+zoA+A3L%Ocx>z%;(a|iv?_fqMa+jltT>w6INeWn`IuT$<DybBl~`*|1fjAK9VT>j+s
+z&*weYWc*ygfBV?an4iCobN)Wg`TIDWe{t>;UteLr`&{;?IuE+9>qWW`cKRCF(cNoc
+z=kMd3;J6*1=N`3l>iD?BzvJ_;Q+_->e;?=keVp_6an9ez;j`2E`#9WxK79T@&iVT|
+z=kMd_-dOy3bKv}a9DPPSe;?=keH>l4pX5GDeE!URl=xa@huxbxeGQ4Q($C+=`2}5%
+z8aRI+=Zx=YI)5K0-tNxd$FX<0C%HC${yvWG@$9+h!u58pb@)BD^Y?LdU*i0Iob&f_
+z&fmxR#oou!bK|?udNiJYzbC$5eg6HP{|~<3bMnv~x|eRxf$O_hxUZt;#p37ve*X7*
+z&VEi>_Z4(Lrsqf|lO>#w_%qSR?Osg$J`dZ9o{v8JeIDK0*ZE8Q40VU)Ieic4=+AKv
+zh-WBI-vc^)<~^X@HtzF19{R7g@5eo-)9>-{Tuce)5+%FeTgr1NEbA@yyv<qf@$mje
+z{2mX_&YXUahkH}|KYzpfr{vfBKdX9=hi5@{pSwK$9uLok#LwXH{OF~-&wA?l1C~$E
+zIP2b+Jy)&!JU_#`HplOIwkp0CMA)B;9@TqA-=QyhrzXB<bXebSr8*04*ZXWAP8Qs8
+z72)sl%x-R=;EtQ)f8X!+T!;PpcAh8G?+~1RKI5o=SK#3@pY7ChgK^uZ?z#W;clY<_
+zr9Dp1V#UwOoV0fU{;xgL?CqcZ?0}wsv1?)eo(}g*Zl`bctb^O>Yy6%LWzTp|$Dd2m
+zGf8?6Zg<^IACJ#Xc^=K5;~B8=iO1xqUt>A!&!=_RdpM`Z^teA)Hely6Dx>cril329
+z+Ot@CRxiQ2(f2F-BHK89J>#r);%97#i?4~$_QB7;`uW%HGVt8giKBbog*m+ET^Qn3
+z-|2T@NK^QrKJ5E0%mDAgob=}>kNfkJ1O84-hrc6pRKF|5KIyQ2S4#WD#0byW^E)lp
+zuhU_cD}FX`H~plA@AY|0-u<xeQMT_=w)buIUCMe7SI=Euiu|Ab)~9)g@6+rvKFz*D
+z`%yjjsP8S`eP?p_J(LgfF3E?e*XD|?XFUt7XYjH-d#K;lji2RAT3VbhPWR{Xj{3HJ
+z+?R)a-H8GJH~W$^o_p-r=UL4-&Ym}npVd5h&-*7j?%&fdK8qdp`OVns9Zij&u94|C
+z)X3+b%@Sum|CqG??fd-WsePV*jN`07+8^8dR%bo~sW{CY?T`1}51+i}y5{BN)Baff
+zP4jQP-=k-pceh<zzQjGx6CSqZy8c)F*}UWa{NhQQuW|kkeIKGeo9a0&=GrOSPIuqq
+z({Wg1`RLvEoR6x0@}KnYMx%UuopE4Koz(RJ<)N<oOZusItMq)N-eb|bQtRxua|6jc
+zhWPjHZ`Wo|^1Eal^Ka*vb{o%=ok-H30X^4kzgzqbjzeqy?xLQfkNbPn-sy>-MLcZJ
+zxP9U>U)}+K&h5B8gQha^vL4-i55eA1)Hv{*YpLEjI&<0ld*E1(c>kJA#{2y&p5S;m
+z$?@-uXF2J!jp3d?owPn(y4xr6#C<q*W*_4H)M0C<sDSU|IBd`2=^b)=7eePP{Ci-}
+z`#Bx<j)cYSKKp9lX{GJ-1nKcSIlAY$KK`xwruTfbOnPVM<_FpFEpF?uJ%1m!b=0mM
+z$MYnPr(7K8ZTY|Bwn&fLO4@V$R%UnHEG<!>-{55#PTDxdZJgS(JaIg2#Btt+|2uAj
+z^tg@VdzOcPYkAuJU0FQ?9{(2IDZMXFT}hjl`YiN6eRhvJZqf65leDR^JNGzj@2}YN
+z?zHXs3KB*BZmfNefbQ4qZnJtXR@dxLzr(`6wLJ0oo$_sq`F1*Pz>oE8e>N6pem|YP
+zD@ogjZU3fvv<;u=u=Vl~=6RMjf06a;xVKw>JdbHh{oVJO*5j6@_cPUpy=8x(XH&i3
+z_bi9+|4#0iSNuEP9;r+F?f9A2fwQ*t!@hl;+EdQQ(e`n>+sn^Co_eQcZ~LEBzt37%
+z_q^*Af0vuB&;Q1{o8*0#y=_g=);aHH9Od1Nqkb-N*v}=BelBt9%-@04yAe8<_=TJs
+z{6}f+r`cEQ+(6ss&vahE`i=LI$#c&O;yD?|`}qKQ<2gRC=X{{!fb)T)`<xHNaeK}O
+zPVI9(a9I7(eqzu00Nd7C=L5X!X!B6t1*7wS+xF~p+}>kAd>k6E@?X5vk3+1J_!!AL
+zQd?Ti_*i(-+dgUENvvby?Z*q^cinD3UU)}id~7`Z8!Pm|-VN3}<nb7G>>jImuYhy4
+z)5q%F@9m_|@%wy~i`!4$)4uAsNXtzf#qwmK9kY-7G5dHT{w>eApKLd~$Lx=?UCpas
+ztap7URrXZ!j*kqKZ09&`-*%XHB@ZX!&tA7DOSV7Ik-Fpd4*QI}`z|owPZRHl*OM2<
+zzwN#I+pniMuIt!-C-Lz-pdIyD-)9r=`{_eG=BMIw-#o{y2TwBp;=IH$uKCF?#N(2G
+zm_M5zFFVVja}T`>5^qN*{ds{7d*AcJ1NM$&mi9i(d9L1hxUGZZJLkIkUD*B3Jvi@<
+z+um(2-sjOa_2=jPJ9FZF?om7Tvy7$je$K<Tk393dN$+pO{Tr|{@p92u%@=!*#rIbo
+zzP~!<b8z6S{r}-J=W|>Sb;fmfSl!mX9aHw*M<;i;1+Qyh_Z)Oj-;P`PGxy_`{_TDD
+zQH6J$-skZAx_;lq-t&6s8T$_PclSLcz2k4+3uf<d>$m$f7wmhD_}(8rAN)Mu`%}ny
+z><9Q9vilid^{7rAYxFMG8Q<@dd<oZl^xY{hIpZA9u6I0i`+ENkP<=m6mb{aE@7V6=
+z;N5z)ESd-Ue62Cp?_TUT-s(fVOv&Hl{LbFR&2p}%?=?^znmejvbH8y-o_{u<^Ri#u
+zxgFOl&N;8+I@pQi|Ifc;iF2y+*I;!`=kz<7`(6XkHRSWxV9#HJJ!c=$asC>tj#Ke>
+z93}0%boW|se7-?kd@gg!&Mo#k4o<QkkIz$&`*mcl6`a2Yd;S{i<$K>j=iF4E1I}NA
+z)n~Tz*I>_IgSF>;<Il*4&tHSpy@vR@@6p}Q&UUT#{59BTp7^idJvkXaBYyn+HQ0Nu
+z;hlB;glhrudCFlsPl>OeoWBOk^}h4hVB@)P>ijiWeeV|6$IoAbJ$3#X?D=c3iCgYI
+z%5StBwck1a0QW?=&Yk}>&&T+0m~($jzrCXGY2{il#}(bX`LsU^qwlBHekH!H%{AW>
+z$vyj7=9lh66`lR;3+Mg1A5+3}5hecIpFRudxdQ6BWxr=lPS-!+b?VugjsxmHx=;Oa
+z+@AUm>$Cbj&$8^+KbfSzx-LI(Zod!uoke?A@#53p4W{20ytm)X-uoPozMpFEIGo`6
+zt;Qh9wf^JDOXJ@^<ayBi?(<6VK3vz<xt^~33wr+H{=46YO1mexMz7~xp7~IFCPL2^
+z>U&S(az|g3x9_ar{?}2RH|V)0`~LT?Ly0HF*Ev|f@iQdHcfU*1@1=Cuc|}|g|Bj!F
+zIqJs}u5)BN3h%g`=dSeo+thQ;@159vMVlL!mf3wp`wo7dr{H<N-FpvurY=5zp>ADE
+z*<IcfC#~!UxDTP<*4DKemh)A|{I|e0FMsZS^Q>w1u=;J!Rvy^zQ{Hd?ZnE2wy3We8
+zxC4BS-~C>&j(hKSulKvr`~CI*Nxzx9x*w+R5Wbz~!t~n+2lhQ_&)V_bjGu_t?|@&U
+zqK<f+JFKpsbvd5p%hC0VSdQbq90M!|&)uEie$j!;!FtlZ<a+;Yi_`bJsUu#FQ$OEw
+zu+8zj)VXuJD3N*R?p(W&JUr(Te-G;3_;?&o+WOx2I^a?J?51n+n!lBM>WrTeIjdcL
+zFQwhzv}Lqy%<uP7mzFzzM&#^rr*^N|?kP8LX1RaSvmIxbOM0H;d&=?exDQ7y?(_SV
+zJM4K*?kUH=_m=y+{qFJcd`I@=#q7f_=9x?Os~V5vwoTpZv1UMHY{#12@6yzBojMNb
+zd2WqUyx(U3q5WEXtkH3S<=ywVb9kR;EaJF5$AzTk#97A$)zADoUH{1gjyuf7bB=3q
+z+@AUe_Brmv{ohmn(F5u~yifgc+&%T*mb|C$`u<w|22(snCx1I1{{~llY}@CzxOi6J
+zjN=gZ3r`=1c&^}$T*Ex)I7Gkoz4W`sq35OjIdj@-ywHy)^g+io9g_-nzr%6B_tnfN
+zJ>#JF6LeoHp7%*@J0(0rXX`<~kE8FO+)cA*4}H5G;P+mRpZmR(yU(WC{LuGO+I;w8
+zxgU4pW1{{3@9F(s+%DH7<97YHqxEvs=K7-c7sq{j^SI9vr)6toU-%vUPQ@FZ_r6EH
+z;r{Qty~BS0qUa|#efLe5`<M`?zOygTaqGkS4o}Ue^&8&*(4lnVDYkFcSlRO(8n4U!
+z_doWI&k3!^lRier?LNisG2H8Z)or`SmVq<JdG|RCEAPulUGcG;y5g}-vMvt)EXPFa
+z|BH8@5$dqxN|y3^4psYv(_>2;@jjY1P9M|vjP2_*j+!%PA5;E2{U7jS3hVK{kB#=c
+z$A9jA_va};Hd062-;+Pza{PubN7pZ6Ig&QlvW&rf9~*5st}pgue1~rz)DbVoQLF1`
+zT_2ambKTa}8FS_Mne+bvalSL-`0bW+wv%{nAGJBK@A2}~Zhw8AoZPK*&+|G*cc0g>
+z&l}A3ckXVRdS1t#r`CDdo?|X;Y8(5y(tYmjE{~pfjE`Fbd)naNaa@PR#mC&U%OyR}
+z@jd1E_ug{xG573phds~9J>~fK-f}wT>iJy#U(bZ>zWd1YS|dd~Q@#6Jw(|wHp1;BO
+zX0wkQNhIp^duH)DxAuAVJ-7DUS>;dOKflU%b88)({d;HRO{Dc7{_5lZ-V^rVdH!D-
+zfx^4*zWdWJdS#;Uhwk@XzNr4wuPbCqf12G*;aB3&7d*s+yrliThyErG{gsD47KcuF
+z=(afYJ`dd*hu-F)H^-qjdgz8Y^coLc6^A-J^iotGU*taDJ!<X_9p};U-`VmzZ1LYO
+z%Cqa=8|FF4GyaZV`?{XqYo32q@5_%}`|2mxJgy@Szv`;q$6j~CRaf>Vo^!1CSa<r0
+zYp=cL+PGZ9Rj<6_y54m6vDaO5eQ)~JS6%n&W4#?+zs{z5d6Xu{i?6=!`ktO^uI;^|
+zGu?IUx~}w<*I(Vyd(|~pd#f+L`ij1uD>_K-eqH*?Yp%b#Gkx_{-RT>;uIj!bef`xp
+zTzjmi=c=n;nLc)P`UO2IN9(UW)_wgIr^{b=?8+-%c<hE}U4P}3S6thC%~e<TUU6;u
+zhO2tJ(pO*c%45A(z4nT92letnQ-3egQamnRwkwWMclQ-XUVW_Nn(J)w;=)%R>)5S5
+z?mzYa=JmbDUeWz?G-HkZH~#y{mw#dL+vVSV`t-YRUHsr>SLIbj{e?*mANJR5@RN;a
+z{&{?2frnCAr{|>4u(Q-(JvHr@zVkp!pFE&^F$X{W?HrI^#EXCW^Eu0@=9zz`_mQ5y
+zkMt@}FQI1k+2<@@9S;ZVuaT7fmT&NKORuE-e(5~l9RFnxSib&8S$gJx`a2(M>Ej}u
+zIA{42kF)gh`|scX@~2w*LE~3>AL%vskzViVE6juamcRU2)_y%-fWBXPTZ^T48t07v
+z?0uwHy!hVB58X%lhNma!|Hb>P|BYbvA2fd3_mQ4@*}a!v_Vls?)_+TfmG3sr9Uo7x
+zv2=#`%)fFU*iuE8oI8K2J$;Ll%l+0**K4f4xr_Esui}HM{$|*C_AB4=CQJ8b&gp;N
+z(+?`YI&kmh8wM@?pz_@}-h25)Pd}*q_RzhTZ@cN<+aJ97-pj9h`Yhwe|IQho%-gN}
+zLFr|B`<%an(x+~<^a@T=OZKUMDc-Rp61A4?oc4?V#1fVd*uOMRT6zN;&wlHF_>-32
+zc|iS}_mST6*Y{pNe;?`PpSt(*8Bbqj``>ST+UKl%h3$FI8K1$=+<W@uyrs`RX#e%w
+zwQT7_)VyE&n=6*ye!%ggYt7O-jdS`pbf+csadNib`sx1Oy_a9~^m5AY*T0SbwDP`Z
+zIj8-NA6j}7jqf+VYwxo3h6BdGKS?S6`q)41TmE88Z!pejzyHCO&~?H7{a-7y^k(bE
+zIpu2}V(E<s9N+tY#nR^wSU(MyTlzuA$MmBuz5amq+daMSfb?Zgue5YV`K-UkSpBUm
+z|9<Pg_3`)K{+OrNS+;Y=XXy!+a8Ua@o_^5yHRvuFe+P|U@zX5*pz&KjYU%ZHE$8k(
+zD}7=dG=5o6KdArno_^5yrJsNA?YDdSLE|^xWaSTPf6mhnnxCb=Y2^<Z-?kT6`W9<$
+zzxCg&UliuAsc8T7@it4JIG}v}F-vcS{pufkg{2?Vztv7lKd668S6TW&{YzhK=?C?1
+z?zNVFQ2)yNEWQ1J?W6w>ExqA@{U`gx_^;p(UYIE8dw4-f@nwlLF=hOJjcW?}^K-LA
+zqPh5CC4XA*CxxS_L<Q+}{D0Q6-0kb16>(1<lH+`xIQBE-8zx`R&ya7Le2w>!FL7f*
+z;sm|fd2?*EjZZF29NEH43KQL%X4t?>39p-B5mj!%jI#K|MB+%7TkY-)5>I_A?t&y=
+zvs>k^4HP8aUXVDlitOsUSIn@Cmk?euLk=0|Bb}&v%8^xjqzqNA)C?u4a>Zs?`y(qi
+zjw;uROxYtXsB+C_XhM~1G(!cdy`?u5B#Oyjk1C(SM-Wb+%I{=i!#1k?mKhdN<)=~Q
+z+wpmXYw=eZ&l)o%@G$ACZ?yOoGfZFy@fnZr_xJ{U9r0<8FZcL0=J7j-??m;p%H4W{
+zg=gF$$$F{raEUwLUy!(!@^h%=nl-}=YPs@e7(p#pBdVPQQpJ&-*IT)5Gi;&CZJJ>o
+zRW5@n*MP62Ts^A2Iy2Ow%GH>m1XXVS53JlUK9X`nsB(j5$e_ygo1qm|t^_sy%M6;v
+ze+o7JIWzR(qeyS__*RdvLUv6@iab8$@e52khWyARs-6imbmO~-FGh{8Ca0Ej{swal
+z7fByQ^>f4w8GJhVIx!wsRJ{#mD8)M{x5Iu;%Q1zjKPxHM<d(T9cl`Q-#6OdN1l8WK
+z8LBW|Z}>UVH+wC8!wl`Hc1qpV>nxl{^?w>w-;^0fQ2p;h^}im~|2i{lv;S8Amr?Z=
+zq1s=1jXCaixh-zFyWT@SmNzFU*XMR(J>ez~m$@mA-@c|GaX;Ey$4lt%ni)p%GU}^D
+z)mMZUk#Fm2>;D`oegYLg;_<B>U+eJ|9zXr+g2X?PZwl2;&I~=MdeZn$q?dYniKowW
+z+jw-jwfGO@t3lOMZH6M$_^!Rm#&H%kzB6VR!9OQ`7~jo)dB}_gag1=rj9O9ary5nh
+z$_(qjUyxX!-B~QgIxMAJtr=BeIpIn(Dn|~bO=V`3V<XY}8JE;w<!*Obc-|d#Gk8DR
+z=|e4NuNjI_>t%zTg4$m<qcv3ft7f!<YJb^`GI$a7mEh+wg`dIID{VPf%rJrfK>RqW
+z-7zy{P~+Q-caUC#8lP%2l%U497&X2{W|TsWZ^Dc=uCVc)L6y&&VGuRG&8YER?6mP3
+zmekwswxGtP8P&fgGt{B_x52?c<C8%xZ#T|k3w{=>F<!4`C_=Tn_zD}(1v8pMjpwWx
+z<x%4~ZAL?=_1Q0Jx4|vNlhjv&>R+)Lc8*#9R#Ee74%LrYGmPLI<@!*|Uxli_T#|pj
+z-5hl@ZW;a^`HNBQ6`5i3<(9u6XG!lyrFWTO<z?2+h}-7Yp!#2p%3o!MVvM)1;Oh_L
+z^=F1&RR3F0{U2<z_M6=@ckQJXzvzy+os#9P^zhd2S-w@&{%hXDqi)9Idr|YD6V=~#
+zGnAm_!Ng0fo<Y=n=s}Hty~n3LzS!fJS}p%HDt{K0zZz!<SE1UeG{eU4TK;kT8`4Km
+z>BDBIMUBVW@0ip0*Mz4~`Eq6$M2&AdY8>lO<6CQnV$}9kgzsV=rpzdTe@uAi#j(*6
+zs=ql@`AIW$;-^(Fsz3P_oA1+RG>Mw;6J|7qn(w1#REb(YWs>?QUu5>W4Q`3M^FmuM
+zTX+e}xoL(W)OzW{QtIzCqjpsLZD!PpYQM#dc7EH|$1wgs^gn~2#5UA&wwfW08s9Qh
+zyQOB>X}0lQK#lJds$9+t!>I8cLXGdB8D&u8+iyl)sPU~um9H^F0yVx1FR<}#LXB6E
+zB>&29nTx3Tx`686yczPS_1}dWpPk>d<z2^5k$(~Y7IPS{S2GNv+HFFOXQLU_qsFt&
+zjA~HhS#3tEO`K2D&NT9w>&Ot66CT7%Sgwp2y76|>%TfIrf4;RdW=12Zc81Mp5Y<k`
+zj2iI4lq*Ax$JX;~9Om3%w^b^ihnJpf`6k?Ux7uBAEJz$>xmS^ElHDt2SjI=v{*oE>
+zqVo0NFOjd?44wFE<ZCyhDooOTC2GA?m|^2Le7i-h$5Fh9`Z9Qk{GFJ>c2v1GGc=&q
+zX9Yfh^b~5nCCsq&9Gh>8_-FKE!HnkdgM{bID2tkJ{iyPNW~jjnska!5>CgPLEq%@m
+z?a2R*<Qs^m{4i?$4x!fXpc#5l>$e!So>mzwt%nJz{<}-hviNRE{Ms|kLDc@a5AR2N
+zU8r&BG(#=2t30w*Z|h+L`OM$6Zbqw;{;ZfGkL-$%G@|BPC2C$*m{A%v-^$IX3^m_M
+z&8YtwR;~?IuGNfMQ01D<s0mfB(TvugZp$-|TEEk%ez&0JPa|snG?<|t4^zI*jH*%n
+z-i~-<l726s*4MllMv+6(k#4*{>7A%?YBxgzYQ9vW*7sJOmESbOG-@98qSkk<r`LFT
+z!oxdHi_3*^)cRlhbz5&sl6pJc5;y-;iyv~U-E!3WEJgLR#0-<QHoils@f|dy3~GG)
+z&8QDGzP)BtjvCkPr%*4;v4Mq{M~&088G2FuY(eF($3x^xqqeg$RDVj%u=8Z!ucO9i
+z3RPdu48s`j*HPQqpc!RQ+gZOEb)v?-235Y=4BJn#?Q9k`?lq|GW3$HkIp^k4<28-y
+z-;^1$sP)>6n$K%bwB=evEms~dz)@7YBWCDEZQnJhajrI_O4K-4m{B=uoXgB;;|W}M
+zp}kqu_CAB!-t%UdKyB|WsQxTH-s)d8qj^;Qb7nMysy}Z={iyv!Gin^FB=zl7`*^q`
+zQu#bw?5;e{@{PG&ZW^_nm7(?rrDiC>%W1#ZjB<~)e3Pi{al#Dam?qzt8Fk{F)Yp!e
+zus+(%P=Q*H8%L}k3#fUP$8{XXZ{ZlK+^8A)QR}e{zejo<YJJt3p%~-yGvrobQ_74I
+z_@{(-s$!#M)I6I;m7g+0H-3kD8?YD?7T>+|m^fb;Lv7ESk7m75eh#&MXHn~S#tf6F
+z_1l2)aTm27Rvu-`+vXNa;wLICzTBO8r0vhAQ1dy98i#Q+^k6ITRjBn<fe&Z-(q>eK
+z@%l5v=C9d)F@u_K?Wp<OW=5^3`PO1a&8Yd-WJc4!YUM^z<wneC7*%e_j0REVGG>%U
+z&C3K{L_aqwtlz_^erHhgr{4^H_%O=%no$?NgnZTbT}+|YSHcVnhi!j8f&WJOIBJ~6
+z%+QaTFYT!HU4<%NX@-qQ*gVRi)^`soz1s}69<K55(&e`P%TepCSW@qJ+H7<;FSGEh
+z+vT>P)@Ku{pN(c%eYlP9ENXmb%qWi<-)S?NLXB_Ej9O6RT8$f6f#1Z<huLy$m?4Mi
+z=P)XNA8I>m#cyFVsy|I;s6mZe3bmcBms@>nW|%{5XS1m7Y{rc8sO@apjK)#p-i;d9
+zE;Cf)cc^#!S8Uw7QR7)D$-nbZa}zaQ8>s%Rn_(H%zai9oE=Mg_5o)<MA5xI`HZGvr
+zoj1b-s@-nXICq&*J8GQU%%}x5&dp|&!1z49jO~o}I`Ki+h&)Qv)L=%X7^r{ymkSc3
+z^lt<IitrFBz8l|3d^=7N-uWeqU&RsPm+%DfeIDPA<HWb%*OmWL%fE*2C4L#dO8huB
+z;22)aIE|WN1T}8MX6QxD^E%YH)S98l!zm9hl-fMcq4G_dVGy<6Gx%nfyWfoZ@J7PD
+zX4Hx**J6e$RJlrg3;8O{D2+pe%gtz;&Z^v&8RjsaXUL;HO*3Yc#|+_VGa5ma8#Y55
+zs$46+iF_?))Qo>bxXFwvQROPku=QXow}}Jf+c2Yb93;GEMpIZoIA=y#)O;B?qfXR3
+zsX)z>V$?h-GNWx)(lqN~89#z~{Giq!{wwz3m$4PqPKy~eq1tIQqf&eg;Sw_{#wXKW
+z5&jnIJ!OXN66PD@v4z)>f76UMu$S<<87-meTQs9A-avTVjK)y)kD}@yF~cCL{tUj3
+z{QYLshkro0*Noax^|hH%6&@p8X+{;O`qQZT%gs=Ns=pXJ$X{eeDdc`+Q^Jfk9%S{c
+zn^7KLN&2)IO`+<~q3WMB!#Jw`F}#ZWqh>UMzfXABjQUXZ^_o!wzM62o8P%ccuSL~g
+zV}?pp{S|l(`O{`pjy;6S%qWGbFJVT@543qSgqla)sCm?7Ms=wDWhL^zBgOnj^J<%&
+zA-kd@t9Ui(qxf>dWvKiqRQ`2#1|PvCRQ?(4BE1Kdf9nC3e-)K~4mD4wQ2EF3736P1
+z<zKqL<)206pFqv$5mf$u<k^QKwW$0H?A+C#JSzV<YTgf_^7rAjq&K4SuNK+%x?+YY
+z59d7GhuZFYQS-dVjJi?tyvvN5P}_Z@87ffa(y0AfxfzwA_G_hPv~{7C+cd+Rhi5%J
+zimGP>wH*wb(GY4o7&N1HRQqjas6v&i#CZQ`Mrn-qk7l%WfwymlyoaYfJcz0%gW68|
+z&8QExo%EVfGphY2GnAvsm7(^trDjxu+Rql7(b^#^w`zt-4^Mcw7gbLWYCGySqb}5T
+z)M-ZbsP^m3P>d>9gxX)H%qW4{U+<)1qa{?iMKg?fc+|t4sCwE_+gY0#wW7AO7Bi|w
+z)l+4Lourl9M(y{v%xDv}-`_B!9BO~e`^PdGN9~Wt%%~N$-!DRKuN#H7y{?;44s-Oc
+z4S$97g#rurqrw~1s`PPGxYWaocPHX-3o5<L!?~X(;^mk$L%)anJlu#Hj|SAdt~aAP
+z)V!`WqcYTZl$v4vCl+2a!wjmPJZgSUo6!_%e&)<*5LHjc42>Rc@Ng-ro)XkND>kDd
+z)I3X>(aMh1vuuW}hsQnKjjE>$HD5Z-s2w$5+RUg1)t_oJZ1a4d!dqsTL)9~jTJJMv
+zlt-=iX*23Xt@m~_YC)~{W;3cl?Z-+{>woFTiFp0bp!U~!Gs@x1*pE#jrySiAW*Eh%
+zQ+^oLpCMF#2F)mg>QBEJ)uHOCMb%Sdh6+?Y<*0hfP~%f-MkT26DK?{pA6Y%~sCwqi
+zFpa7whpJ~1wZ10ID2rNO<7U)`>Q5`Go)$ASpz5hZ)l-X_KQ(4ljha7IX0)+w^{k`n
+zSu?{Ds-6W@J@csfJZDC;sQEl&M%~CE>_`P_y`{}azmB8zrnkp2TK=J}uQAm2nnA6v
+zelzO9hZ5h3YPTJ=UfRs46}4Vk%%~cbzXFv%jT--QGb%%kf2kR5{+H!nL*-vZjq{2b
+zEu+SH$&98@^-rMkXHnxhZboCM@f<ay9*p~sasN@{)@DYnsBvpCqY~736`N5CHC_ob
+zn&<gi&F?<cc(tL%tJRDuQTwN2)aRYeEnY|@yoP^8cp9}|>qO;iMCGf(cM?wHl*;{w
+z<;$Y-4Wsh);t1g`JVCe?<Nf9jEZ;IJ-z<)kZyNQvX%LmK7FAybDqk_amv930Ico9W
+zEnf~B2u~uX(A^Ve$fD-uxETgf^Q;B6UuiZ&+Qa1@UfWE>*Nx^-`DV?K#XqP0anyPl
+zGow+|dKodJUR1drGc=>hHKEpjqZu`z)_=VjRiMhH&5%Hq+xfoDvu!ilLd~;HGg?5E
+zn>Rxi<9?#%^OzZpqUQ668Fiz|b(x_aRjv-T-PD><4QjioHlqY;-tF*wH%6PNdADIk
+zQ>gR79P*_c-IHdRz)J{c&CrOyOSuL!sz;rV*Wt5RZ?$Hq!e>)o2`YcF8BP70?Z^Aw
+zF4TExBXY`oq#Tc88EPJsnxPnfg?ft2XlBFe8N_F>{Jr>6%Jrbib(^6KwO=d7R!rb1
+zZhhCbmqn~0Jcw~U7}tYwJ!UAwxE_q_!FQ^j@7VUVh;cm_*Mo6A7}sNlGK}lNxE>r)
+zJ>RzNZ4u*oFs=vVdN8iX3}qPCgK<5m?Qv_}w#P+OJ>#hDX9%^u4WhQUj2Ze-_4b*e
+z4VAwXHP1@Su<$LPuVxtX@SulFQR}<&&P3vR)>FF~wV~!mEB+?!w3wk0r|4e;zK;C$
+zW>klNK)BY7Dp2*M&1mzRiNwnZZ<x_Ks{S=p{i|kJLe;;B9pqmyqj~HkJZDBzsQPkd
+z)Q?vX?lYraRQ)}u`n%20j;g;6uOfe|8MWZ=6K*!6I=q5#tr?Z$Q>ZVuX4~5&YI~b7
+zLl(8YjhmqekC1=il+E`(d@SKKJ_)nmNF-iG{o`gdhU)Jqs=p&<7)13qgV&J1-;DaO
+zhj6bMwWI25GouoGBIQ!}G2HpOg*Q>#?FwFmdE_JKk!jR?nli&AK9u?<%xD<@f_j=z
+z_159*u^KhsE3u7wDp2*L&5%OP_nlSWeo@D}b^Ivt%h-+csQuv_YB^`kXa=>Mc{3VE
+zZ6AH8_PbH-ccR*FN44K(hI&-{wW#gB8g(44K($|rS7Hj)egZWwcD@!HZKLMJmKiOh
+z+Mh<XKZ(!4EUNu+RQqFQ=ts5RizC>LIzG3f+Hb~otjG9xfE~0~YeqHLNx0gKN>S}^
+z{;RdWhR-0pf@*&m)&7zh^7wSpr%?NuNz`$F9M%3Xz83pY?f0R!>s~YJL2cLFX4H&o
+zzZ|u{DM9U@ic$NgA~U2={YaQ${a-BqBx?UOVTN|p{%2{$&Ywn6=TH6kVA}07qfXTM
+zS}PV{J?gr1=6_p!FWyBxZK(M1uUh;F{wMK$sQB5hSo}0<9u9jrgPIqu9&SRdrwR|3
+zp~h`<*~+h>&WlE{fPM~}(I8$xIAcbQsPn=qOK++)qY6uJN}JKnmu<P%QOmt%M)UYE
+z%1@%&nJ}X)UQBr0jK)yyj+#*!=2%Y~U$XIDH^U6-e6P>rdp*7hHLf+NaVkc&yYWS9
+zcioKEQ0=ao(F&^FWiy&xvT|8ef5**e3{`H_j7Cu9hRvu1)!(%*SbtZ|FpcVOkH>d=
+zd;@BISE2fwLiKm;e_6Y$X0(E8ciD`VQ0*?7QT`4qH-_r(s2Ppm#p<6K4WY^nno$v|
+zzblK@-(@r8Q2p)l_)d?nL(RhqRDX9qZ|$z2+FdrICA^sMq8Tlq+MPF}(SNpfyHMLv
+zrx|Kd?QVU};y2AOkDBLwsQxy2dZVY8qslEWSh*!L<WSo~8|EliZSmbzW=NpQ&3x9%
+z<;^gH+HUGm<w`xh#M9UQ$;xF>{U0|&FKYX$K$YA6M@!!_!#t|JL66UPd@IJ=;k<2U
+z&8YoHEk2lWt1+W8+@bzr)c7y{Ln85Cgy&G<A>1U~@8Kr=3&K_SVU@!P-1tl)v4RWu
+zMVvsbzpNRJ;RS?8&8QpW?H|>zQdGZ6%xLTH6N#Tv&pN6fIou|k^>8QtfN-maD^b_6
+zi|`{VH<yU7JI~|45}w2_V+Pf)elzOD3kdg^Q9Y_(6_(zVHluP&Zz?mR&6C#eWmLbH
+z%xDC8m-I+CYCU$Dp$@elsX#5y=HDd}Kc+tmsC@Hg7)NctgQ$GXvx&qO;VM+VN;B+y
+z+P0fDRKEP*CK7*1zEM=Z5i@k6=6MNz3^)G9($~!}gPPA>IEf9OUhnCpsChd#lSr&$
+z7FGYa8G2Fkvl_pGC7xdF=^LN2dDxEnJl2LfKWsHa3+nu^*$g{>ZTYrQ`L@ikiORQO
+zhA~uqqn6%1VuoQ$?;bKk4Ju!?rFU1Eq0-X3E6lL?Nz1o@YIoiYbEtM_%}|4yA7xm;
+zdM`Dj64X2@Hly{t&5tG2{8%)jetaU^aS!Tzvki5=S&wl)@nxhJqsF<&3>$xyNc@C+
+zv#9tPGmPW&i0}0Hc8{+`&9`#Y{Mi14wY!08cNx|0465B6w$bhos{TPUbm0$4uk-j?
+zk1xYU;#a3F|B4x=QS)~U)o$;{t=%qEyDg}8Yf<f1;_uOJ3e|4H3~PUpNc=nLc~tzg
+z8AkCr#J72TtH)QPjw7WQFYlBuFUHG@YIh1FoJ5_6O_(8z4`Drxo6!h<oP3?A_S?-+
+zi_ai_=VKPXZH9T&cGiYZWO<rV?be~%EyZ8QVpO|DW=LTf?drn_Mq3|cKTp1SRJ(I#
+z7{@x|+daO`<Ev2H@9amc-Dy<2Sya1y_!R6xwcBlmF8pQM?KGoS{4?@Zq1vr9Ljs>l
+z{2T`##m|~y1mp8S)bf_0+D)O_UHNb#@daE$wYzAB1^gx2oj0Qy{1@_#pz0qsLnkf~
+zU+M7`9=~<F?Qe!q?e?SE?LxI%kEgH})ozU$s_|0VtumuDeu;crC#>B~GtA=}@xvZJ
+z<ngVj<7vfYBJm;WNt;nQ>hozCYClnGh7#mEdAf_uutg!2+ccwj)P7_Lb^PnW2b11y
+zMy>c{+H1jh|7eCfq{<^TIDu8D?R@oviTJseK8%kCe`e*UQRS!1FpereiXXsX)b?7B
+zdM;*}N>#oL)qW|ee2E!$j$8RH%u;>>wcTY=<!e#pGgPkf{iyPNX6Qt<--e^ug4%A1
+zP~}H%vvR|zazke5MV0HucVZ`M-j|`uW$BFC8%LEJGs7UNTtALrFKXUaqRLIZ-^%4s
+z<tEKAiYhmZ<2Z;q&efvI&HkyCn?aS!n_&V~ZXDl>qo{e)h$`3eCmdf`&&_7kh?fv<
+zFrzvwAY5xk)u`i2l^IRb8O@t9RK8I&8bRe7Hlt3|ylO(tt41@bM13A8LX}UMkrq<t
+z*E{cvjkZzsZJAL9*|d*zqRwyXQQK>s8FpA$orkWX=Hnu29*m;e>s37U^_WpNs=Y2V
+z>O{5IZblpLvGx}6$BbVN)!w8Tx=`&kq2_NLs=WlNz11;mZ^ew3QSB|6(ITq71v6?z
+zEngk#e5(xAUa1+D-fivWQS*Hg)m|5>Toe8!@s+4@6=qobV=Fh0n&+da{C%kNu@+SR
+zW;2wamTT)>Hoxal`SYmrvoTcuQ8RR+@;76=KSt#*#Z~fev5_hNrWs~Y`E#iGoI&O9
+zL7l%fqw+VIp&XUJ2sMv~Z{<D+<2GbQgQ)#q2A|LVw%-grsPmE*RQ_f&N+Y|7rgAeX
+zLzOSZyD48{h7@WZt+TN!|C$-i;S=faggb`X{|}<}|2?SligtV%`RY*1Q)`A&d=lv;
+zsN+Mi8Mbb*>p>gHuI|VJs{I_Q{G=KBP|MYZy3Vu3PUWTaZ_|u6P|LH9&!zq~Gc2Rd
+zmu67;^JX-Jw-FvRqYSEiKmLgFeP-xJ&GTkd{w6c3LXAhUtDT(2W8)n*9?Piln8!Aa
+z8)|v7X6Q$aM;~fDdd<*=PbYs1vTHt4gKEDNRldXwt8cgEnnR688@`18wVF{2YI&OR
+zH>khK4E3n<xC&JMv>9!_Es<as+q7Xu>!|W;_#c#CHNz5WJItf<Pn*#wYCL+~F4TCm
+zV0?an8jouHJ@OT!mZ!)JYr{4ktEll<F~b~cJZ6wX$B}VV`~9f$eP(DxEmsw4Jmzn<
+z_U2HZD`w3wgYj|04DHC2Z)!86R@8F0;3w!uvl$vt`;kgi{t7eNd8;k=io1wf?iti_
+zkD<<cN3n!*BWBc(TK~PM<?S&;D{6V0kxl<dHLBfG)N-xeWXrv3h8*g=xDGYGwW#H-
+zF+(+Kd8^E@G!*~HVbh`+EufZn9zRMy=FE^s9p}f9O|EIojCxS(x!G+%EpIhyd5iJa
+zu?QbTxs(}gzQvYz9ksk`W>`Qi?;NsAI5L51cL=q-t*G_fVum#8e0=IgTizUMc_+;<
+zfm+_I85)sIrm4Y<>QT#EhaaLJwPvV7?Z-<{`HRhH?aj8lb8a5Byc4M9&EQk8U-6Xd
+zGowz_`fWokZ>t&VQOjG4>@tp&q1xRUwB=nuE$_S;Mp2&wDp2b;jauGvGnAp0x6}+X
+z1BnEu22FW0nno?}6n>3<<jjyo9ft-{`7>tJidw(5ZWU^I%TUX^^+)#kViPZ-+=dw~
+zqn39OwY&>vm_{vc4ms61GK^}s2ep3dQOjFrh9cDGkFht|@{XdGcf<_CsO23pLp5^h
+z(Ntwdm8j*dz-9W8HbW`uIJ%v&{99(UfLh+1n?)_}Flu?bP@ii$v6yz+&8P{rybY-3
+ztv5p@YI)PhDb<k#s@=6W+VW1LmUqew{ix49<*0s?xG8u04=sMf&AT}_>yElZZkOBU
+zHoFaOt($VU-{9@ItL~CJ?M}Mm?ua|+HoFaOty|@$-GpR4<@>GOoSSt=-F~;n?Q~n+
+zCU^1m9FG{s8GIJwIF7%AgZL-JXHe^@-wfUObkdu#1}pJ4@>QVj8>P*ln`%m5{R6I3
+z(BB1AJ@aOm#yZm5Fy1e^4Q{Pl<xagWk+_L=#!>z3#}@3ww-Dcss=v()O{jiWqxw;V
+zH<K@g>ZfjwVOZ_6^jTCtbEtYI%`l4UXC11a)oz7b<`%mnHzX3*(M~_ApKbU;Y{1tL
+zUyrK4&J0zkewLv6x&B)2x07!T)z4Kk%%ak>sD2Kk>KQUaFRGtqsQts%_2#0RbKCKG
+z<SR#QPi1CU=;i()<#MR_Ni+20wZyl1e5=P-q4uxE9$)0~E7v6w!^F>^>dBj77>9`O
+z_V_N3uR|S|%00f!<2SD5JdXGUR6X-%7{@;)zTe~fJiZBaJa2eSBJtboZ|cpc4z*va
+z#ahOz#tfAh_aA?o{6%K8+{1TE6J9c-MO66(d>ZBF%`k)NcNUd@+>E;M#e}=es1sGb
+z9iLA5HZwG%`dfp_Uu{OE_(axEkvn^hg{R$7cgU@GYur+|$eq2~%e$kJ{xo~I!L4%B
+z?((ax+^jq8cDpU8{d^;8zhC3wGB<_e#BX%7KgVU%_K?Tl!7&^oeiSv&N6avc@w_%e
+zH`b897Bwza?%Jy?yx`8deQrCde=Vr~)qA+YEx{X!-~N4`)50}W|K_j-C-9Gm&!YM_
+zZiX>b|3=Nwhw5Jgs(-ca=2aG6b{E`1w;R>Jc2xhGJY4OTV-N8uyc##VtbdF6LfV<a
+zZsK#O{!N-;0@c5)83s}PYeMZ8D&5Uj+J0afwS7&Qp&PFuUz5i-dVD!*d)c|t@^71A
+z0kwa~dHkfu_v4$1Z}a$8kFP>)H^m-b<nb$4*#2P#<NbyihVgym@AmjEkFP^*Kjj`@
+z=J6YywtpzXYUcTBM<Ve6mOqCV6CTA66RyUmvE5afQ6<LbKdA9bo1q+knQ)mI^iYS&
+z?Yts3T0^b(Wl8-rSWkG`<Hzs;^m7#NPq`5@>cV(lqw-gy_Uma>`{iaRLhaXAj`6vG
+zdZtnHCX2_hAIm7$hbq@=hEDu-%C(~MRioM~_3%!+)w6-RK9|D>VirF_zA=0};X%|m
+z_T%N)i@HwNh4*85I?bpR)5O=I+N(m9t3Z`2N0lqaBFYt+(ay`Q+!p>a^KjD)>-bBA
+z*UYels&5`u-z=)WNxYEyCd_CAA3=N<svl`AAidm-O7Q~1C1y1JGR{W{Pnl5;H4i3H
+z<2hl5ES3@;H^U&RT*i!=@u`HH%%~AnPXnr+dNb7FFA=UaLmE}C+>CmI&8IH6&27eb
+zKZ_SpZyKM>dMZM#*PS*iw~5NPgqjx%sP^a0kVnmnEUMfnDt{Mdu^Hcujrhk{kMF@6
+zd^`EqUh4DRU2tbn^-Q4pH-hS4AF7>h)OOO2%GZGEUmdD{wPvV9^{)g~E``d!{CkPS
+zTX7cOgn7*16b|474wJtH)lQ>Z=T@WYDMj^97gN-~^_N&XE2wgdsC?6?{^d~pn>521
+z{yO<GsQ&e$@;72HR^zL%5`Q1l_-ZW0w~~LN)%LqxsQp~08PcfzZo=btem71Ji>ULm
+zDGPV!JU)ZkzqWgPo5xq9&c8}LzS!eeIp}IXI*V#|#tb7EpJ#CrqR+|msLzdaW|+lG
+zl-~?psC=E4-ra77HcRhrHA4!OPbW93Z>J?TY@_PiGD8-XZ`{(m$ILKl>D?n{s7I}z
+z8h7JG7G8C8Zr1I0d)!L5++F7&`b6qmar17@?Q~n+3b)MN=A`k7%#RgGJ&W#;+wV5I
+zb#A$&+(NUJn{_AMaks^-bF1C;7g)I!)V!NV9S?Hu5Y`hOM9tfb8T#-L`<Y%dYQ_=r
+zRpQ&R0(BmdHbXh8e3=<`e#_?j65dMwMO6L;Gt8s%&zWHoYZ#Ya)cAC{X}8GT`Atio
+zb|+EGHHuoUKDPz6T+OI<n#|CEDVD3=jLPv3$hXzRcbMZQs-GKXSVxs#Gs8TppILkZ
+z`NvWD$ILK_%0FU;UR3^i)N<9h8_&1!k~{Ba++NgjwWF4+!A+x<s~pu%nHfqj$#NB&
+z(fadvew2K(_zIjs^)qjVX;k?sGmN78*^RFxe-|o$ry1H&`P<A;kIG+!I!|1CuGx%Q
+z&IWg<(ZXx)vOD4qqL#A<wVW+(HEKDlQ0-QlA&rGP{+ZGCZ}1(=<Xgl?-~y`O^JbVs
+zm7g`k1ghWt_(<~iq4M{dp$C<}+YHU9{8gysEOIBGWBcW9)c&!{3>Ek&@})dJ;qgn)
+z=6)LS)2RGYX2^KB-@{EFZuD@Ohf6)Y-jGN<lX~V+^~{-J46h=-&*OVNz7ac!uk`o|
+zkKaDZ`!2*Uqv}~Q1HV-me?Re%#}9gZE53{TwH{yN@kRI!;#1G^_54h8&Yh6#zlPn6
+z$5*-~?q<E0N6m)`d>fAAEttVuu^+X*`pnRaT3<b8XhE&7G-@6u+^uI=z0-ID_2lsN
+zID*=ahf(zonPCuBZ^jIrsCuhW^_I9PRDb85o=6<S8N33ssO@MRRqvP?Mp5;Sn4uR{
+zZyjoWO-5G#klT-{zYZ_Q8vIo(L(Sh(RQ)ApC`Q#^WQL78tA80)e;=~R9%(?W_j)s=
+zQ1f>EX%@d`hCFKCj(Pm3$9JLTTa(8(dVD!*zU^?*qx!eauz;FxQy!o5_zb>|_;!zP
+z^Z07id@J?%5|3Yds?E2-S{tVxw+%H;+fT81vw^n|UPZ-E;yZByM{x|_rg1>6&uX_E
+zl|TPvpC_n!l10ULVLx`_A7U%sO!*Y5p3NtjE2#W^sCm(iniuUJUx`-|uD~uV!<#5y
+z#bi)DWo`;p&jgWL|6{22Ka7fR#b3h~ti;VH*!rD8jep(@?Wpxz=kc{3pFpkO<;Pq8
+zB{Pg;yg%{yUXQOst>03QFY);0YFoe4sCK8!(1%*T%^u(6@ujHsyZJcFzhQ=H)c&O8
+zv5W&Q9zpgW<C1Y1!Dj6Ba3ivbAF227dKI7hD7S*z4wlU@hiqa;Mo`;9KR$ta+wgH%
+ziyTspr18OOAC<4|G33Km)OOZlhGta#O=hS@ZO7%PawVwxw;pZvFCd44BcrJC88JgW
+zYB|e2zRcsdA7$@lY$2yUO`B%4ft+GBt(#F7YFujFV$^t~6sG;PN=sjsgtH#*Mdj;u
+zn?1h5!{u&?$8SE;j?XKo<(x&en?udRArE(9d>lvRt97@2&BkL1HQrO$sPd?KhEe7E
+zQ03BiMB{=Q=Q1-Cqt@g4uiAQAMvZqbR$&inJ$0L*3st_;42`JzYf$AXQR}G~)vvV*
+z-fJN}hgwgQX6W^BkB8IvILeP7w*HSu%C~#C-mOB7Pcf>UjYn8J^Y|Rvna0Pf9@IP=
+zL-l{u3?r!i51XL})&DkB|C>?u)}i{J#s<>2FSq`0nPCn!&w3>3os#@j9!|I$X-i*5
+z^?Mps|0t^dZdAXUJif}~w=c8!8PxJj;iEB&swab5zis#!EJv-cGSu>xnxO=>y!=du
+z44V(P<y}E7?;@%{GpPP#QOnzdT3_8}sP%A-hqoR^ew9b%TQI{2YFtVs^%S`~<<{?2
+zRC^1k_NGzGKjrb`9^dEj&8X#XL@j?kYWb^B%U_CG{t|pFuKkMjXVnbTsD6%m{D{Z5
+zq54^Y&u07A?<QhYhR-Fe-&w?{7=MGXewPuW?T6ZOEx5Dpu$ysv-7d*;w&GK<4hyKS
+z){Kgk&hqOeLAme{bJm@9C*5&(5Vib$sPX9Za5X-Ja20C3SDIm=ERjePKZ}Z=F~b;Y
+z{`b1IsCiN9ZvL``=kZsFpTeh;e-u@22pfnWM9sU58TwG|^qQd+<NXAx{t|ckmu!7a
+znV}P(O?rdJ*L!@ahf6%Xc4;C}PQHApIf@#;A-BbClp1&ZP0}k->!BF69*WFp<q|8u
+z=#IN1?x5S}cB96<)x!;_^-+tLVJYgmN(pKlip`*hH*4v~#)B>2Dyp6ZRQWtU94Aoy
+z?Zt-@Ub)z}SJZefpvHUN46_)oS2JX>hVp%=_15d@J)Yi%T91vW^-<yKp+|*tCAMBB
+z&CrG#?>djK_4s1c`dWXG<zF+yJpMWL&*AeKXZ;==Ml;yN|MF&(f1r(f&h2x%-FCM{
+zvfdg{>#q{E{wmC9`y#7n!_B)nH|u8HF4TCpp~k<_!=?BF!X+55H#000bKi{kS&YZo
+z45O%V?s01{p5N}q11vm;zfJiZYTQRq<pxpfGlN>6{buMzwbNsU7F7OfRQ<*7)ctMT
+zb7p8qt&e(-uk-j44;OoQ^?uyPBHt`(|2<=d5&T`^$BKA9i18gYqY>2g^kG!LhRiUC
+zmlDpHp$k>6(~KG<<?7rDclbhUzY}XoZ*v>ml?#|G)U#|xOQ`l2QSC37VIE5e&zT{I
+zDmQ6HgIGhkVtgXwr<)H_zwaw&CF#@nhlI1J`89}|Ul}uMLFI3BOI`hrm*Usm71Vs1
+z_wY1oo=xJ5k)Ohf_X{Ja<rp?Y2DM-4Lgnj3)zggeeg#_y*P!~T-%o8O+@G}h(1V&s
+z-KcrgWrlWCJ8fpDN6n)$)O;-U^b$|sDfII})I6JWvu+b=zBHO)he6UjT0zAxn<0mq
+zhr=Gvvj<8KZK(NG>+v-n&%QF=UzB1$<IXyj5q;1jH~Km?8F848pQHX8{9pXk(kJlm
+z@grDVn0UjV;r9vu3I1<<H#XrrJbV+j6MhqZ17Gjq>+p8MulDd2_~(RQ?&06XJmKH=
+z@N-e+kD}^-8mj!0JbVOI{*fN$^eZmU;W*CEZZ^TPzk$sy@i1iZ5--9G(&uuy!y@(J
+zy9mp>2=^e%ST27`xC>d<a`_X&?Z~o}%R;`2vlZV=SYAlD8Q(%!GN#3i_(sAqMYtXr
+zn{s)Ga4ilHmKPAN#@7*+Ny3%bL0H~R`)Rz2uw(-&E`w_b%L2kB_*;bKkH}wy&nGOm
+z34_+VR&(OVgw@WY3KI`h{g1&kJ`z>muc7LBG^%_RLZTAW7scD}1qpYRni=B@wEvb_
+zH{-Uu^={ftxU1}M<MM9S)qY#??QXrBb`$O@``x&_n{_j8yIb$3-Gr<CbzI)fx*50K
+zt#{LI!d+#6;_`0R)qXqfzgzF7-GsZ!emO4hX5Eb2?$*0$H{q_b-;K+=SvTXhyY+6`
+zO}MLvyu7RZwCeNy^9Ai5u6NUJ!d+#58Mp6dUF~-j-|p7CX*c1nvVV-ryID8mw!8Ii
+z+D*8t>@VZ;uJ)%2XWVwT-c7p+ca_X>c{l53+;+F#O}hzqmF<FmUNGxs-HhAr*1KsJ
+z;&OR>0;i_(ksO*vJS-~+cX?P|PPpE~^5KNFL94uEN<XluaJn#GSX4Na98MM$E+<#`
+z?|f<@Ra7{0$?PRXg~O#IrTn{emjC81ow~HBaP6}7%Zdu~>6vs<;pFAH%Zmy}sz$4d
+z3TLb4`0vz_=_ABEW%MaUg{x0l<G%|}TYMU=)aC1n3ODLD`R~@z?W0A7n~htI)bQNg
+zbBhYcTE<%__2SVNljr4|FQ-)dVmq}Rn?6STD@I>IsaI_C-=&V_4qES=>Eypx%v?cg
+z?`UsP;Y#l+|IJ-Lb$wCc_VqjbcmA~tuPrJZy<zMI`h3GW|DEld>!T+(7UXX%C@LI$
+zOTo}vaOo`t%W`6<U~&kzh6=Xj+)V}ZH{s}83&!4x^KUI!kUMWJ$lQ!mHy2FH%y7Zr
+zFs=_5Y{;396wH1Ehd){{@=;v*Xu+z?eXL;WW4QCNg3J`IO%<%mv41KU|0i7kr-BWc
+z|7^j`XK`quV0ZzS7YbJ7<mU=<pTq6X73|3Qe=b<~XPo+c!Sv@9zgDobruc6bEPNBk
+z?kpI;6W8x7*pT^e70i4Kht>;**Kv8hU`0-TyCC;%9Q#he_;+yX?t<yNab~b^c95Ad
+ze^cSYO}O;-!sWN)>aB%qx8n9#;m#Niy|-}qy*Toxg`<Cp+4mPtydNiz7v_#*exh(@
+z0v9F=7bkJ^MB&y69Q|<N*oSd3SGbhJiH{aeepK;Og=14V`SHTs$8qK_3upflhrUoa
+z`~}?nLgAL2_)_8ImvH#Yg(F|a*{>ANeFZ1KTA2GPuB;TUuHf9i6wdz(Zhx(C=WDpS
+zTDZ1~%WH)zYdHPQ!u&Teb7$e;ow)Mt!qsnM{yT*;-@(D}77l$ESHD-d_C1{We&Ou*
+zacHw}coT=W3rDtb{6~e^AK~ne3+H}}>vt7y+=U}QDIEO?PG*w1jJB?U<iY^1-<aIE
+z5i_?Y2XDo#Ta(*z{9VcHyKv->lcRr(`FAI0-i^7j<kT20y(hW+9-Mz~a^bzW`M%`V
+z`*3YMxjrtl$@MHQ-<Djt4L3fR-25P}eki&2A>7I(w{y7uk>tilaN<+R$xq?n=aWO9
+z$NA4E7v#uda&!^b|24VsuZsU#a^Y*3T}@7`;^t~{OU`~hIrnuO|3)(V4P5+2a!GFe
+zFuDChoZ3!KZ!7&r$?T7C`A5kWIrrn_{EsnnS90(!T)Qi|E=PBgV>`ILliZP$KS}0(
+zg1Mp8)DZin(VJ3ZH{s$<sU<n{*3|4<apLCG<juHxb81a445t={ar$kk{M&HzZK*A}
+z^7ho~+i~_CskwJ3{vD|;IX{wG7{S~vsi|9V<(AZ{ocLgB@`E`1q14ESaO*><ZMig=
+zTAswo6RF$@9K1a>bUWs6PtC~rkEa$sj_di<MjqEbnOgrOZhR`W`6-;9OXcSjo=a`Y
+z$<L&6pTW$0YH%KRzMRS|<J4DD(_g{-S5q@z#gT8NM!%)_jnwo8=Kd`;^=~-+{Z#(@
+zxbwqQW?SLyR9<fWD7Ez?oWCoza2L+qd}#jWLyYh6p`BsOy#3JN+i~)JhjQ=3>Fl9=
+z7IU{9nz{{_KX7Q}14{q!q1=ZtpF1>@lb<>?^C_G?d1&q==00<1>NAS}?4g;@;?%;S
+z=>=T*+@aOaDg8@_roMzTUp_SZWqIeJ**kIWdxz$~hZFyPX!752@CS#6et^qAIJ6>j
+z|8Z#QKXCk~hq6D#ou3}c+>I-DA6k{unG5on3;yJK4rUx!cmH^2BJn`ZInp;-<cq2-
+zy{*M^9OuKA^3QtsEgTdTu6VJf|NY}FJmleCj{mB!-s}66+9TZT;g5LuDi0s`@YNok
+zyxQuU?XdbMA8p|l4?pg)9)6RhU-mc)uMSxFU-=-T{&nAI;Wv2x?I8>Qvxf(7wy?gW
+zQ2iV6_8-OhkHS43elv9`yy)R|&##Be^mmiDH~dMf??F$p_BTEJA3k0!e{JcH_i*0B
+z*ZBCAf6CJT*2lkV&B7JC%kw=8KiB(H?d^Z?G1gxC(bk_FA6~TlyT3dCUwqhCxZTr#
+z<m0*fyYhEkZRxwe6aQS#zx%uLJ6`|p@3^OWEPs{{@A_-<`LX*u?l0Kw&+{$)Mc$v?
+z-%)@6Zht)eep>&`naUe2{~LP=vkqq8V&N`@Ij0@c2Xg+}uO-a-*qyIme+^;Ixx0Kk
+zPAbefeAdIdzV*Nh)2G8tO6N1el&Al1Ef1eL@*W;km=nHj9%|IzLpcGwtRRzErB405
+zkpC;J&k6ebtKT48m`U__|9?tdO7DG{rN771n>~Hi(_86-{{HIOR=#VuJoT!4iI;Ek
+z^gd6&)zdd$VddZ9>5ZQLB~Kq`O!W6XmS6RaowD#_`FyEx)1xf>rdB;CoKDno5k`N<
+zSis8&FMIn>XtMPF2U|Lyf#Y=Df6(9Eth>t!DevvShd7nj{RjQs=IOiZ_aBK<y6#u#
+zZ_(4Mz5K_#Kb>r+`uli2`BRz1h_C;ehpD|xqSf<H`0`DZDt99B&1YEtG0%Uc)*t!X
+zJ-@DdYWa8AuJm`&b1i+u({<f4PG=tIug24dJpJ{aKH}*w_4JIVf56i#JpKJgt^Qh{
+z&vzcO`V+oASNQyx_wuj0pQV?+-P(V?r!RZ@J3T!&V(Hg<`nsoo($gDmwe&A~dfMAB
+zXKrixvfuRdXIuX=yXnkJrLR25*7sfYgj1Qsl#ge>kAIoxzr4}Pmw33#>#y?q+n!_T
+zeV%^Y>+kaVKlMzjpN|xAhw2_~`HMXNtG)h&ho`;%=5JX4$G!d@Pe0}LZ)vB;U+J@~
+z{;b#kF0X&v$LmrrKjP)vy!@Ol=<(O${ag3)U-aeg^8BCl{#AQe*H1KlrFX`~6DwXn
+zAEDxi!@ho+z5Z8w|MFh{_q>0Vp8w**R^OU$zsvQuJiGhDmw12beR=-L=Xc+Q*8UT`
+z|BGJ#$31_u*Z%`gpZE0Zy!}Q`f4=u`*3%a}z24K`>E%~F{Sr@a_w<~XU-tAPm(l-1
+zwqH+wVYMw^`BSaGS93hq_-zCWANTZ1PycIA-}dw^Pp|Rx3p|{9nU#M{gS9v5<CDL@
+z>QCHg>Hp~IQ=VSJxT*c&Axppf*;YR9>0O>)cC)2lQBQg*6TfVzm^*!cGwI9sjCxBi
+z^7DsTPoMJiulfFA%<KO(@83FA>hEIjU)IxGJ-v6p(#z_t{!Jg>_jvtdUVnp^pY`%L
+zd-=(?S^05KU-a}-o?bs<>06$@>giAO<zIfMrQhuBb15K>DE9f4_4a??$8Xci|GAf6
+z`;e8t)t5i-`M-LI<zf71b>hX}vmbBa@=nV?*<|6RaSPwik7rvQ7Jen?6DnVK%EAxw
+z@WPsf-^}@h(&xTm;ZJ+GoaNTv(>#B<=YL<4{HbiB#Mj>=t|NRwHj(l3h2Y^K4}X{Q
+z6Q%E-kNlyBxik{j|4z@}=iz_!@Q8<}Jb#aezs32Aj?YzZjEg5m>7T;+H(B^gp58EM
+z;p-@`^u-%3{Ewc#?(_9ZPtW-A<=<I;<uAL%^8eJsZ8ur?*wvO^dzXb@;OX;z{-^gN
+zRbCG@=<iKOEj+`1RDV_cU+Mp+xMvNL>?&)4pdv9u9ukqqtVCWFHhp`#=K%zAr>AFj
+zGCMnyxw|uY5O3~u-|o5Dp6=ehw|BaipcIv|A{BoC8l)gtQe}x$w331<OSCXTOrank
+zC{hy8P!?s$LqsJ?@$mc3IrpA(zWeCg(>>Ug?C#g+dz|xq=R2?OJEyOF9zt-24(&yF
+zxy<pO=yLdO2>RmZ8d1MDLQoSwZxa0fxz6EdKb7OZ5XKe!d>ib8{0gFf;MWN6108<m
+zM18M(EvJ8>;I|CPbol9r`ff3Zz1_v=zke0~Vt6~}ckkCY><ReWk8}7<LO*vyZ~;H>
+z5%4$uo0mVZ#_3O7&*6?}?>EkK81I2%eXkSip{I!UKX-%ktBd;n_8x~{B--=+B8RUK
+z<t0d>z|Rve;Qa1+jDdI-%J_fa6CC~$$YJ{VB8PDpK=`3|a`+0N-?#iJhyPRXyYo>F
+ze;WJ~@lSt%!^?u-l@D;ZE!zLtZ*jN^;}PP&4#oxid`PtSo|7E@q|nceV*LK3D1Y#!
+zynIXOV+(?b`1z1%@85YGzC++Y3PCOW+#&4wFBqVMPh04V0r1Ctp?#j@-@H}Gf8l`R
+zKP=$8A-NMjvqJuj4u|g-@*jmuHu!m)kbn0p8F=E~MfrO%a0s7m0nhX}{L~v@e0bVh
+zPJBX)cRzS7hd(Req9}hv!0&q<FAv1{dLZDt1^ik8*9H6;0k;Hvr{MQrf?xghoZr_3
+z{7(Y@qJY07@OK3LZExWCPZcocCu9Au6YztA{>1`*xxl|#z^@YJrv>~$QT`eM_h3Bd
+zn&JBUHmsji_?fUDP~rRU(&1eg|JCv**LC>g1iyMxFTVo%i%Ngl)8Q3TUj0SA{7J&E
+zMc}6s_}<%f`o|Y^_|vb^;ooTL@DE<D!{59@hyQ};<C~Cwq_z+5^{Vh4&(Yx@-l@Y+
+zK)+V;KX$7Qf8^(N_=i8M!>hIqKS|{O9N~}oTB^LYt91AoZ`9!*ZRzkMg#R0098vjQ
+z596*1|K_uF_`y4L_@Qfc_=iu^Va!KY`CVh_@bB;F@b8fRv+y##{3W|O{Fem(0fK)E
+z!T&nJ|1!b<9Kk<J`qSP^bop&k|BsUX`*xzA=QDXXa%YA=?>&k9Bz!k1|3gy#XQcdd
+zr2J!~zdNM8&mr(0@vqkt|N4xpw|C|hI(#+EcdC7Vg7n8%k^cIR#9zPjOFF&F@TEQu
+znZHW-rOX}@z7ysLRsJoczx{bjFaO(Z9sYGP9vY-QUx#&>%D?OAFy^DH<;HC~{0vwh
+zsO7gmTZcbF{QvJS=;ddL|9_9@^LL594~hSOkBsklFHx;ekNE$ekn!$abshhJ_{0Bf
+z=;i-L#*1rySucNr_=8Et-^Yo5PZRyVo9OpuqTh#!eqVN{F8`&ZKm01u?+w@J_}?M=
+z{R+`<h1d)4hpPI0AJOks&(+I+MD+Ur(eE42>iCOS>+qY2exFJF>0Ly>r}uRF0nzVM
+z$oTbcqTin+{o@@(zZZ#qA0qmF3(;?d^p`4`U+yFN#e2G{e*c>2w?_2abani{A^LrU
+z==WZt->(w=mWh7<>X|zK&&=s?<0c)xudKtLBJ;_IJ-z&PGTyE}T`#|NUWeaF<l((5
+zRbSSO4u6ZtdyvTc6(a9pBJU9*Z;QzL10wGgcj@xKLgd{~<h`D)pKd%6etxfp^b)?A
+zjn5MP=*@chqvv$^u>&2hu<=OJf0eCIB>Yo5I{sa3{U*yl-_XlH!1{+QA6%iAKZUgC
+z)ucU7C+%@bdu}D|c@JsNi%5GekoLU)yk4J^q&<hEJ@=6IoFnad`!4d6pYOBviG;sL
+z`oj;_bo_^jKYW+?!z}5aKItzu=`W9y{%Mf@*(de+{ES|o9U||$MBX0}dH4>5+WuYA
+z{*SZq?#4(V3v4|u;SaO%Si*S!LG9liV&Ctw@lN8Oyj92l2R44m@)r<$+QgpM6MMd&
+z=||Fklj%>wF0+?}@&1xp-}{;VWVy-oC*kXueI$HxU8nyt;s5d(z5KI;|2qi(dkFvY
+zg#Rl^``%3W|1=w)Wc?l`{NF_U_dUd(FRJVHec*XI{2#=g9`V<U#GW4_{&{^<=l3aM
+z&-W60-f#=z%g=Yn{QL@5A6b6#q>lf=Z5>|y86AE@MTh@)Nr!idKjZy)wLV`U_%^9;
+zaY4ub*EJn}7Ab#hLoa^`fj@ahFYl4^=acq+ozw^4B~$B<?^39+LE87nPt(hL43_<C
+z<4P=7U{d}OV6K+GxUIt#0z)pfhJO{9R;}Ng3B1Md;Y;!PtzXdbzd-6=Blr&y{A*c#
+zLvC=sN6H^1@UId06GYzIh`bYavt#c&{(hy?9iFfc+=Cka4PUzLT5s45D*F!nx7BI!
+zZ|iQ-w{ETOJ3DUAYXH`@zEN1|^xJhO@H*|%vJ*HvM%mtWyFJ%;+X4G}b9WO^{X?%2
+z*iNg}sV#K|QC-fuhm1|Rf;H%@dw|nBm@5?v-Tq$7tF603%e(AW>&0@}ShT!LPCo_T
+z_nK`d==a=Q_(s`x-Fh6ASF`B`=Z0N(X}ICEn=Q9~);Vz3+LcZ_a0kJOmVL?(dZ$W@
+zr_Q&1r{Qk&181-0Zaard{YJy>ZFM|A?9Ci{!TwC!ZGsjqxidA;lcX&Q+FV4o(B8`C
+zcBN{c*)*5!Yx!4eo1n3<LbJvxqQ&c(1v?kK;1p|Er1otvPrz+otM6O;P7jm;_Qo$$
+zh1pAeuN8Q0yV2@6fXH>V=Qh2zS*y9eAAaSw>*5QcD#JLn0)3-3<Mw);UWnFjyMwM<
+z3*35@e+}I!cR%Qk*A0@<lX^inRA;e_HtKh~ogP$i20dq{(QntVt7m9Q`a=d%rPFgY
+zM4`-{+h~DCK!SbA?fG1iUE9Cl2N&$R(>wG)G}k-W%8}4s&#O1x&Aq#TdRvsBXQQ`T
+z;2Ef`#i(}}g-XA7$z?vZIgjODyScfz6}sHc1|eA3II~{en4eq7LYm(=vuv3Q^P_R*
+z%2_yzOqfw9ma?#lrPE*$w{G@>eHd!I8XIgXow^&VePI@dwi1qPo8_~eb}f!FYgVnz
+z+11KM8bayxhFOVmp0iGy#qwP2`-Qc(@77>2+ML~3F2{<IY<8iP_<h+Z#=e*AN<e9_
+zaxs`&{R6bERot~&{%(udxo8a!4&0!}2GSj~q7K*KYcQaB&3>ovFAW3NH%&?}<+5g&
+zu4xoe>np+yvM6{>^N^r2Y}BGz8_7RZcn;JB#uwF`139!v4phz;&6EQf`DUW37U2`9
+zS+Nd6#e!K?1fz&k>{hQ6bZVVeh@@f&7B#c5w2%X@Vntl!=#b%AL(>c`uxeI@gH`KX
+zSc|;$q)#1{O=z%5=+Q7orI*d%9X*|ofe5UFFMCbb55NtRv?kD?zve-Mswbc&^aMp#
+zV(I$0_S5ZenuYldnEIV2%;JTk@InXW%A1^*H0Wf!l8rlxr%?n$!#EZi2Aps?K_v`L
+zF>@B0V&)VyA#H1M4~Fmxt}$Ve+`R4FU2J`%tj=S@{Z_#!;1ZQDVk?E=#ky_d|JLsM
+zE!Fkb3h-#zt=6RjzIe0`I`w|bWm|}hrOmSEcb%ZNPiCS~D-Nr<yGdvgrtJi**vuW_
+z#QS?x<QM0b-G<X|1r|(>?dBRT*t?w;TSM%Kn#Acvfwfy^t9jHkRWl!e^>R5h&cZ5c
+z(^#ywYfjhib8)a1hkEQ7MPFHln=lh<b2pbHIjPE7v|I;vDX_2FF$y)WyYIq^br8hs
+zPnk&F9hpV)Qqm}F^<b|SxUhfQG3I;Dp}r>^UA58{c#>S3PJ<!%+;kb1i^en=CaY3e
+zl}|&Fle5#*I5|5_iIcKR+@~B#ZAqJ%2^i@+o+B|z-WDB+mDbaYA~>np?78j%?4vdd
+z^TKtP3zK;6^toccn?6_Ue$(cfsopuh%brZT(VpEXRV%RR#w|QM`~s8J-QM_vt>)Cz
+zVye0JbeKv9*Jp$UJkA@p*^!S=jTgB26nH6~J_T-kCZ&B`>4pn~#ktvWbywO-^2f=!
+zCi&x}TvOIcvw_nby%0%UBjqH`TJ6E1yI2Fd_0hG^h7{@j>N2Y^$B)cc3TCw+RJKys
+zp=-XZg;j1A`fzciTIhqr5m=-Q1z{UtH(CkRP>ri0+4sjHrp}&|IL*6rl50JIdbKil
+zhwNYr8g&PlbdtNnH25Tq2S=$-(g=``k2n%tf*8{U4DCeW4hD!=M0p;L^~1nJYdF(@
+zJ#&4g?X_kO_q~=o({CU4oNgC3g)>fjX0wZj@esMV<h1&d;cm|h0Ll?9T5E5>aXbXb
+z91Fr>5lzo+xsD%!`tiM1#6l+9Iy%IscD<kt=Pu_k@)Wgm1r~8(_+obPl!Y<3>sdU_
+zeKoYH<-YpBsdaq5pJzd;hEoIbym34(sqG%h-JOWct@Jtv7EHlo@A@|giS%k^FJLt(
+zTI9Ytu=KTeoR{K|ncUQAM1&FI%;a>Dijwnul{T42Ak-6BijmD&9%`|}{8dUF@gIel
+zEhajcP3518F`6+u;LBv3h>^`$wpSeGrV2>Gv@rIvQ6qg{Kfh6@_}EdLX;Nw)WMDy&
+zSWJZCh9|OkW~4`FD5k7GkLQdgkTH~zxS?5dRD*FvOO3`wuK6%!<3#8wrN*iy_-P%+
+zTezyM%y0|GiPOWuuo`ViL&I1LwMZ;DfT4jDB$!~u(Q*b7=qiR3uW=HCEGOZCp45gx
+z5P{Y?n;Sh!r_}T)ou8y9Vo9w4Q#@}^#FA=B!77$T7$Y7}w!6EVd&IdDkF&MS+J>W(
+zWUag7xakY*IBxn%n&QgIHM6SG<eCGEE`q5@Wpd5rMvl8F8*SAa?SGW%ni3FoXJTr~
+z&cxJIoq;J8oq-goc_fa$f}u@SRGh&{E=-iOe#$B~9K{gy7#A&;WAGy6J&1vbBE=$|
+zF$5GM{W@061FF)cV+cr}UMwqV6adjksb)s3CPAPQyV;?|q%X!!!s7T^kIaFu^~;g?
+z2@6?T1=(A|gc&lN$ps1}4VNSId#QGw6O+gg8Xi+$xUh&Z#9m^9of9dNzL!<tO9aYM
+z8)Y)~#FUO3cq{_6@K^*Rw#BqcnN5)gYLqOwC0Y1M4ave!Y6r!Sr2!hnn&SuOI^0$5
+zV$d1H7d7_aASgIXg~Cc<`*Le#VC~*gZJf7p8jdk67U8e}GF-zWxG=vBvQ4e6p<g}^
+z5#fcMRon6)G0d~NLvwl6@`4rkcNW*#1g@CKHX&QAta4tMUfHmsCR8+6WhvL>%8tX<
+zSj5VbtWs#dUj~)V7I$n_zo1@FE3#i<>Wv#UOWj5ZMGb<UQwvV7FRvVv6f`Ov7&-0w
+zF$yVw5KJ+Je7+&{zff0~KsQlu3|7X|4_X4oNZ3UVhpN`0S96Pw%Ww`D!n{5uZlZcH
+zfJ~PmjQmq#IL{Sm9F3h!)}RXj^|ZTKsC5py(1T?J29ET=E%xl7)~Gd1Hh`(TaKw$4
+zz}ljEd|vv(VX}H*!bZlFHh$%jrWWNSczlLQbI;fet=$sjzt@dY1I|1#adxxOfNc7r
+z;}0wk=b+Y#Fj{QZF(&i!+2pzGSVr7pimb_6kjC{m<_zOlT9Cr^sOyO#pWh0}buAus
+zJu!mq5!VwVxUzXtMm3`>{`lfYUr%JSJ(k{`qVEa)lXI0rwcI0->`eV+DBLh*BFU`_
+z+dXCDvW*dpo;#Un;l3&pNoKoeq9HHbab+UOHt_9NHZp4jo`4&rJ&fq#P%9H$lU0}l
+zRaSy2G7m+h&K$_0Qgfh6)#gAB6`TWAwvekimBi{UunTz*mt26IkW=%5A-E<S_Ih@(
+zavQ4HI`FGTx8n^51C|>cSO?pXB0OJhv23xMhX9yM+X3vi7{2WM@&uvO>AG#Z-1i}-
+zYLp!1z7D`jhO)T3P*u*S>{uS`AXqoo3Tx5j2Hfcp$?EaOn6fJ)Wv^z-F5wnoXI^Yd
+zj5)8}?FW!ww*fltc}}b3JFUPpN1l!^M#;aB!ojn$n_5Dzeia0564Qeo4caozY6*83
+zB@9N3wDFrSW5TyRE@#EIKBOKC+m_pSwTfEURP8y48`P{ufzpe1u&#Cp(#Ff?#qDjo
+zSBSS%v-s#5sa8&^Q6+zkI$Oy#;{9NbZySwr*LVB%&NgfzI|tAkN?yCsG0L5O0KFp`
+z*B~+>&AwXLVWxpU3bxgR?YyQLdUp#ufVoZ-hNPjo{Nce~2QJjkfVm;Xzd0j4RXZw*
+zHWtcJG9)^rQzssEXHq1cd*>j~55Y4Dl261lNz^VR%%6!bT_6Q}$P~S*=sCmbXXL#q
+zDmBiB2kOTn$rddq3^pZ>QG>B5vnvu#o@3M?Kgnp(xPTc`bUu=7(Nc+gz8<3raniA_
+z`9k{2w!V-`^yWBPk_)F{>3$o>N_N&bUV?|lkz#HcN69dTmRv(L6Q##skHcl@D%D*!
+zV`(bpWHIW9|0u+4F`+-C^H0SX%@})oHseH$Y{s&^y!)pMNWp}&<>G9m?+1{A#%^=L
+zy=J&QA9!$%=I?H?W$dnXPW)4yM#YNLOi0M#bi?2*Blq}UyX>zx2lyIJ3dLIiKHK>6
+z#})X)8W2K&o8{~q@u)`lO>}YljP8ac8b12sHldfAVx2AN7IrEHw?ZD0Xor?`5t{H1
+zy(R}L-xuNbH3xFon{%Mb{Z<ZS<cpm-6*b-q#Kmpa@KG1H8BziZdT~1qk6+v-I?nd9
+z&;rU$<+12VpE@d=&|s6$vr$IgKR;qK#Bh_!CzcE$E^ZTXv2=z^G^o1BH&D?MdIG<=
+z&15B(;>B%JlX2`%GqA?zg$|l>aeM4~NrO&SFWE;`<BsA<v(3V*)}$E>4O$)AFAGgE
+zvw{Yb1mux>umN|K4C>1AX*M@B-L~6<BG@3pr7r$mgdRT45|u>nBVp>b;KmDKQt29n
+zI&940*bMj$hb#K*BDKV3hlPd*8SaoT4;Lnu!`tiWG+eW}h{7R9BAbOunuKs*$c>Dh
+zCKoav_;Jmqp&JE!bwpS*)?PNbVIQY7vIiv7#Hs~yWOtx6eA%bS$a3PrDkq2Q>$V@%
+zTi%}S`I{Cz$AwP?nZX&jQxFW7Ji}f(g#VTf17`X7__0`nH^A`V!G}}|epww){-Q`T
+zM2H0`eUQn(*a5!o72tz7dZ=1SoQUX^^F94^0?(tgYCur>5RM($daLVid-mmCt7;Uy
+zwim#`8FWvm>Tu8&D84aoJHC(0yiR+?@mlcMj%}A3aD}7P^4e~>(Q=x;Uq0)?QgG7;
+z-^JI+YJ7nRNeGsC+UomrnCAgW30&-iJk4Sf%LTiEPhYVou0)FI81+ozX&p+vu^{Ad
+zU<X!f`*LW$@N||P%j&LABGJkr51du{J2*H+cS-HpMyF@(nblZAnLU6rOyN0r083?n
+zi^vG|G0D&(*T*CSh6mXWEz-W|hc|9fNeL<flfVp}S4UIkt?6c}yyf|T#?~;DTq@W_
+zD+ify_im7Rs!O|%avpGOGLnxxHF3Iy<3lJj@J)rAv`B>R2+=9Y_>51JFhde!ntGk9
+z#z~B`UqdO(!PPN%(hpvU84moy9N%d#8HTdW4hMmF#={X3_pq%wk}PzU@OgBu-^Ilh
+z3vsabY(|GRbT;vr$;2$9UNCx)ny>LECapb)w%Hd8nYF)cdN*y`_y?Tw8xR!HTf)Wa
+zhi@rk{Pe}bBY+uwK9rZ_R2Tz-0H5ksrgugJSyEbf{GyV_i_r$<hSWnh+8b`$m(9D@
+zGg_y=rkG;CJW}@8GNk0{B@;*?$5}>MzB|Php%7gTADz-oOm=4Z3FQ_?xrmUToNV>R
+zB$TWD{DiW?+NFg244}&D9fVPYao-z7VXgbsIUioQ^#()3u=;zJd$AAs!|u(OEsrnT
+zTYv#i|E6Qa=LZ9}6Z>#08Lwz7`MZo?47*qcY`FZ4`&`&1Bh5;u$KEofwApi-G0W$)
+zGjNT&=d>Wd(;~yCT<EA?ZYcTErkQa=WVlZFDXW_4Fw};mjI_&wG3P5C15XR!rM?n+
+zAgt5oc&9mC*wJ1IfI*nlKlx&Sk~}#zIk<WFakOVdGUx>DfljJqrSnKYls}FGT-^DF
+zW@S*b&L!{R`i)9#SXAG2Wy>94013k?=U7w&R%vloqi-@MJTYai;_`QVX=MAUP25uz
+zqwPSCPfYqoYl^MWJUuBtV~Vnffz+WY{)*qxdx2)2;}W77=Xiu@rpXwzrf#7hm#h(k
+z@l@M2VnCjvtW2}X%V<-Sm^^(dq7okAn#{du4>>MbNme@^S#n9H59kSRzlDz<!6Q&r
+z$naAig0h-);vyTe_#7GS;QwFb(qkUu*xReDRe#JaCeu&s;5p%S!z3>mX;J=qT{M>-
+zqa1A#IyO16v?snKOjxCjRE_kq5mP2O*3mub*m#qpjD$tYQR=OD#4*%7A+wF!?<iH3
+zT|voZ7pd9G<IuD4_@UVhbFb|Ip1bMmdD2tNgR}euDYk`Bt3O(%8)jGMk$FL!{KaHy
+zGr06)^#Y^0I;_PuPU>!l&XCGxHi=fA(D0n9YMi}95lK`Lj=C=sS!b05dYMs`P#Q+l
+zA?zA!n36M<P#T8T(<w1%om7gHdfAABm2!(8sZ_*$5@W$r-&SWAc+4fZU;+_h(Tcck
+z%6k}^=5c9AlYww;2J&Lh?Ya=#Z8t-LFb=Aa$!vEz#i(5-`$j3*gwr`>0!I2IF##hC
+zSY~wVBeZXN+>#cGipz~xH}-2hvlrmuYWx+F*exNvI?c>wS;iv#SQmZb-?IFIF{}Lq
+zz!KcEkyJ&)-s8V^#WM!PL7_3<4;l;jBSYsQErE6BdCxbk%G#P`Ep;*H0+KI6HnP*n
+zNmW}=nbqNX%$1W@n;EEdftZM@%wWk?5RX~Le`AdQs1*E!87MRr>6R@hg>x^=D?!^Z
+z08=+2AWSlfzTly{2yDRHl^jTTu49t-KhBx#$c-klOnhTEjqk*FcGDP7dTTe0@5J|Z
+zkulg_=0C%W<m?+gqYb`n1qa<lRs>l&@DqaK_0SkH|G7W*HNG|)CBG@(V**A<j%*hg
+zHava~J+&I$LWblZ2o!`5rcgQB_sY?}_PvtX5PgpV=NUKN4)M!pasHr*1&+vT7Bxks
+zh$Z={h1kvzMzM2DNVrf40T}q1a?9)sc%y^;tyFG~f1_B0F%@4YRZbKoS56d0l>-<n
+zR|@MhYs1M=1mHhYhYt1|hVX-i(XZ3-Ux3V@(0_<<EK>QSdt;I5zt=YwY503MV-d+Q
+zcPug(g_H2XH#7VKpZsB#()tEGT^<!s&xi`BYp??B2eXV}I3QqWW!<9)Miu?QYx{u%
+zKR*ZA8jweVzdY&UPi|s(O8L=Ea}OqOcpGJBY)Yhnb~8VL1#Af5Ke2*_tVtbyldIPm
+z+IyXWTemx12cnt~zw!J4e^wA~w<@^ZUI%|+F&A!_ew&HRt7xz~6~d>R3#Y<=l}^o^
+iykRDUiltLLTXm-84B_(V%z@`0;BPIxW(IyX_WuA9Ry^|n
 
 literal 0
 HcmV?d00001
@@ -25307,16 +25967,35 @@ index 00000000000000..e134697ed96de7
 +import "C"
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
 new file mode 100644
-index 00000000000000..d9ad79d513f910
+index 00000000000000..dc98c702b3d50f
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
-@@ -0,0 +1,84 @@
+@@ -0,0 +1,127 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings
-+// for the CommonCrypto C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zcryptokit.h" instead.
++// This header declares the C API for the CryptoKit Swift bindings.
++//
++// It serves two purposes:
++// 1. The mkcgo tool parses it to generate cgo and Go bindings.
++//    Run "go generate ." to regenerate them.
++// 2. Swift's @implementation @c validates that Swift function signatures
++//    match these declarations at compile time (via cryptokit.h wrapper).
++//
++// Type conventions:
++//   - Return types and length parameters use `long` (not int64_t) because
++//     Swift imports `long` as `Int` and `int64_t` as `Int64`. The Swift
++//     implementations use `Int`, so the header must use `long` to match.
++//     On macOS (LP64), both are 64-bit.
++//   - Buffer size parameters use `size_t` where the mkcgo `slice()` attribute
++//     pairs them with a pointer for Go slice generation.
++//   - Pointer nullability is declared via `#pragma clang assume_nonnull`
++//     (guarded by __clang__) so Swift sees non-optional pointer types.
++//     mkcgo parses this file as text and ignores the pragma.
++//   - Custom __attribute__ annotations (noescape, nocallback, static, slice)
++//     are mkcgo extensions. The cryptokit.h wrapper strips them for clang.
++//
++// Do not include this file directly; import "zcryptokit.h" instead.
 +
 +// mkcgo:static_imports
 +
@@ -25326,73 +26005,97 @@ index 00000000000000..d9ad79d513f910
 +#include <stddef.h>
 +#include <stdint.h>
 +
++// When compiled by clang (e.g. via Swift bridging header), assume all
++// pointers are nonnull. mkcgo parses this file as text, not via clang,
++// so the #ifdef ensures mkcgo never sees these pragmas.
++#ifdef __clang__
++#pragma clang assume_nonnull begin
++#endif
++
 +// AES GCM encryption and decryption
-+int64_t go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+int64_t go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++long go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++long go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
 +// ChaChaPoly encryption and decryption
-+int64_t go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+int64_t go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++long go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++long go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
 +
 +// Generates an Ed25519 keypair.
 +// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
 +void go_generateKeyEd25519(uint8_t *key) __attribute__((noescape, nocallback, static, slice(key)));
-+int64_t go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((noescape, nocallback, static, slice(key), slice(seed)));
-+int64_t go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((noescape, nocallback, static, slice(key), slice(pub)));
-+int64_t go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((noescape, nocallback, static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
-+int64_t go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((noescape, nocallback, static, slice(publicKey), slice(message, messageLength), slice(sig)));
++long go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((noescape, nocallback, static, slice(key), slice(seed)));
++long go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((noescape, nocallback, static, slice(key), slice(pub)));
++long go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((noescape, nocallback, static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
++long go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((noescape, nocallback, static, slice(publicKey), slice(message, messageLength), slice(sig)));
 +
 +// HKDF key derivation
-+int64_t go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((noescape, nocallback, static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
-+int64_t go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((noescape, nocallback, static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++long go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((noescape, nocallback, static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
++long go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((noescape, nocallback, static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
 +
-+void *go_initHMAC(int32_t hashFunction, const uint8_t *key, int64_t keyLength) __attribute__((noescape, nocallback, static, slice(key, keyLength)));
++void *go_initHMAC(int32_t hashFunction, const uint8_t *key, long keyLength) __attribute__((noescape, nocallback, static, slice(key, keyLength)));
 +void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((noescape, nocallback, static));
-+void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
 +void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
 +
-+void go_MD5(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA1(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+int64_t go_supportsSHA3() __attribute__((noescape, nocallback, static));
-+void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, const uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_MD5(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA1(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++long go_supportsSHA3() __attribute__((noescape, nocallback, static));
++void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
 +
 +void *go_hashNew(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
-+void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, int64_t length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
 +void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
 +void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
-+int64_t go_hashSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
-+int64_t go_hashBlockSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++long go_hashSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++long go_hashBlockSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
 +void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
 +void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
 +
 +// ML-KEM (Post-quantum key encapsulation mechanism)
-+int64_t go_supportsMLKEM() __attribute__((noescape, nocallback, static));
-+int64_t go_generateKeyMLKEM768(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+int64_t go_generateKeyMLKEM1024(uint8_t *seed, int64_t seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, int64_t seedLen, uint8_t *encapKey, int64_t encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+int64_t go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, int64_t seedLen, uint8_t *encapKey, int64_t encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+int64_t go_encapsulateMLKEM768(const uint8_t *encapKey, int64_t encapKeyLen, uint8_t *sharedKey, int64_t sharedKeyLen, uint8_t *ciphertext, int64_t ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+int64_t go_encapsulateMLKEM1024(const uint8_t *encapKey, int64_t encapKeyLen, uint8_t *sharedKey, int64_t sharedKeyLen, uint8_t *ciphertext, int64_t ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+int64_t go_decapsulateMLKEM768(const uint8_t *seed, int64_t seedLen, const uint8_t *ciphertext, int64_t ciphertextLen, uint8_t *sharedKey, int64_t sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
-+int64_t go_decapsulateMLKEM1024(const uint8_t *seed, int64_t seedLen, const uint8_t *ciphertext, int64_t ciphertextLen, uint8_t *sharedKey, int64_t sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++long go_supportsMLKEM() __attribute__((noescape, nocallback, static));
++long go_generateKeyMLKEM768(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_generateKeyMLKEM1024(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++long go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++long go_encapsulateMLKEM768(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++long go_encapsulateMLKEM1024(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++long go_decapsulateMLKEM768(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++long go_decapsulateMLKEM1024(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++
++// ML-DSA (Post-quantum digital signature algorithm)
++long go_supportsMLDSA() __attribute__((noescape, nocallback, static));
++long go_generateKeyMLDSA65(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_generateKeyMLDSA87(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_derivePublicKeyMLDSA65(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
++long go_derivePublicKeyMLDSA87(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
++long go_signMLDSA65(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
++long go_signMLDSA87(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
++long go_verifyMLDSA65(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
++long go_verifyMLDSA87(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
++long go_validatePublicKeyMLDSA65(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++long go_validatePublicKeyMLDSA87(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
 +
 +// ECDH
-+int64_t go_generateKeyECDH(int32_t curveID, uint8_t *privateKey, int64_t privateKeyLen, uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
-+int64_t go_publicKeyFromPrivateECDH(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen, uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
-+int64_t go_ecdhSharedSecret(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen, const uint8_t *publicKey, int64_t publicKeyLen, uint8_t *sharedSecret, int64_t sharedSecretLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen), slice(sharedSecret, sharedSecretLen)));
-+int64_t go_validatePrivateKeyECDH(int32_t curveID, const uint8_t *privateKey, int64_t privateKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen)));
-+int64_t go_validatePublicKeyECDH(int32_t curveID, const uint8_t *publicKey, int64_t publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++long go_generateKeyECDH(int32_t curveID, uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++long go_publicKeyFromPrivateECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++long go_ecdhSharedSecret(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, const uint8_t *publicKey, long publicKeyLen, uint8_t *sharedSecret, long sharedSecretLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen), slice(sharedSecret, sharedSecretLen)));
++long go_validatePrivateKeyECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen)));
++long go_validatePublicKeyECDH(int32_t curveID, const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
 +
 +// ECDSA
-+int64_t go_generateKeyECDSA(int32_t curveID, uint8_t *x, int64_t xLen, uint8_t *y, int64_t yLen, uint8_t *d, int64_t dLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(d, dLen)));
-+int64_t go_ecdsaSign(int32_t curveID, const uint8_t *d, int64_t dLen, const uint8_t *message, int64_t messageLen, uint8_t *signature, int64_t *signatureLen) __attribute__((noescape, nocallback, static, slice(d, dLen), slice(message, messageLen), slice(signature)));
-+int64_t go_ecdsaVerify(int32_t curveID, const uint8_t *x, int64_t xLen, const uint8_t *y, int64_t yLen, const uint8_t *message, int64_t messageLen, const uint8_t *signature, int64_t signatureLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(message, messageLen), slice(signature, signatureLen)));
++long go_generateKeyECDSA(int32_t curveID, uint8_t *x, long xLen, uint8_t *y, long yLen, uint8_t *d, long dLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(d, dLen)));
++long go_ecdsaSign(int32_t curveID, const uint8_t *d, long dLen, const uint8_t *message, long messageLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(d, dLen), slice(message, messageLen), slice(signature)));
++long go_ecdsaVerify(int32_t curveID, const uint8_t *x, long xLen, const uint8_t *y, long yLen, const uint8_t *message, long messageLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(message, messageLen), slice(signature, signatureLen)));
++
++#ifdef __clang__
++#pragma clang assume_nonnull end
++#endif
 +
 +#endif // _GO_CRYPTOKIT_SHIMS_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
@@ -25416,12 +26119,20 @@ index 00000000000000..c83bb8660303f6
 +func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
 +	return xsyscall.SyscallN(errType, fn, args...)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
+new file mode 100644
+index 00000000000000..e96680e304c47d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
+@@ -0,0 +1,2 @@
++Xcode 26.4.1
++Build version 17E202
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
 new file mode 100644
-index 00000000000000..f159f4b8e9cb77
+index 00000000000000..d0d2a5bbd3475d
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-@@ -0,0 +1,262 @@
+@@ -0,0 +1,317 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25433,86 +26144,97 @@ index 00000000000000..f159f4b8e9cb77
 +#include <stdio.h>
 +#include "zcryptokit.h"
 +
-+void go_MD5(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA1(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA256(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA384(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA3_256(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA3_384(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
-+void go_SHA512(const uint8_t*, size_t, const uint8_t*);
++void go_MD5(const uint8_t*, size_t, uint8_t*);
++void go_SHA1(const uint8_t*, size_t, uint8_t*);
++void go_SHA256(const uint8_t*, size_t, uint8_t*);
++void go_SHA384(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_256(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_384(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_512(const uint8_t*, size_t, uint8_t*);
++void go_SHA512(const uint8_t*, size_t, uint8_t*);
 +void* go_copyHMAC(int32_t, void*);
-+int64_t go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int64_t go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int64_t go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_ecdsaSign(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t*);
-+int64_t go_ecdsaVerify(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t);
-+int64_t go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int64_t go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int64_t go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+int64_t go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
++long go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
++long go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
++long go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
++long go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void go_freeHMAC(int32_t, void*);
-+int64_t go_generateKeyECDH(int32_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_generateKeyECDSA(int32_t, uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++long go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
++long go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
 +void go_generateKeyEd25519(uint8_t*);
-+int64_t go_generateKeyMLKEM1024(uint8_t*, int64_t);
-+int64_t go_generateKeyMLKEM768(uint8_t*, int64_t);
-+int64_t go_hashBlockSize(int32_t);
++long go_generateKeyMLDSA65(uint8_t*, long);
++long go_generateKeyMLDSA87(uint8_t*, long);
++long go_generateKeyMLKEM1024(uint8_t*, long);
++long go_generateKeyMLKEM768(uint8_t*, long);
++long go_hashBlockSize(int32_t);
 +void* go_hashCopy(int32_t, void*);
 +void go_hashFree(int32_t, void*);
 +void* go_hashNew(int32_t);
 +void go_hashReset(int32_t, void*);
-+int64_t go_hashSize(int32_t);
++long go_hashSize(int32_t);
 +void go_hashSum(int32_t, void*, uint8_t*);
-+void go_hashWrite(int32_t, void*, const uint8_t*, int64_t);
-+void* go_initHMAC(int32_t, const uint8_t*, int64_t);
-+int64_t go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+int64_t go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+int64_t go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+int64_t go_supportsMLKEM(void);
-+int64_t go_supportsSHA3(void);
-+void go_updateHMAC(int32_t, void*, const uint8_t*, int64_t);
-+int64_t go_validatePrivateKeyECDH(int32_t, const uint8_t*, int64_t);
-+int64_t go_validatePublicKeyECDH(int32_t, const uint8_t*, int64_t);
-+int64_t go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
-+
-+void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void go_hashWrite(int32_t, void*, const uint8_t*, long);
++void* go_initHMAC(int32_t, const uint8_t*, long);
++long go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++long go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++long go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
++long go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++long go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_supportsMLDSA(void);
++long go_supportsMLKEM(void);
++long go_supportsSHA3(void);
++void go_updateHMAC(int32_t, void*, const uint8_t*, long);
++long go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
++long go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
++long go_validatePublicKeyMLDSA65(const uint8_t*, long);
++long go_validatePublicKeyMLDSA87(const uint8_t*, long);
++long go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++long go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++
++void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_MD5(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA1(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA1(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA1(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA256(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA256(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA384(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA384(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA3_256(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA3_256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA3_256(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA3_384(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA3_384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA3_384(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA3_512(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA3_512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA3_512(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_SHA512(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2) {
++void _mkcgo_go_SHA512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
 +	go_SHA512(_arg0, _arg1, _arg2);
 +}
 +
@@ -25520,63 +26242,71 @@ index 00000000000000..f159f4b8e9cb77
 +	return go_copyHMAC(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, int64_t _arg1, const uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
++long _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
 +	return go_decapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int64_t _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, int64_t _arg1, const uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
++long _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
 +	return go_decapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int64_t _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++long _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
 +	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
-+int64_t _mkcgo_go_decryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++long _mkcgo_go_decryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
 +	return go_decryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
-+int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3) {
++long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
 +	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3) {
++long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
 +	return go_deriveEncapsulationKeyMLKEM768(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int64_t _mkcgo_go_ecdhSharedSecret(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t _arg6) {
++long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_derivePublicKeyMLDSA65(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_derivePublicKeyMLDSA87(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_ecdhSharedSecret(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
 +	return go_ecdhSharedSecret(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
-+int64_t _mkcgo_go_ecdsaSign(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t* _arg6) {
++long _mkcgo_go_ecdsaSign(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long* _arg6) {
 +	return go_ecdsaSign(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
-+int64_t _mkcgo_go_ecdsaVerify(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, const uint8_t* _arg3, int64_t _arg4, const uint8_t* _arg5, int64_t _arg6, const uint8_t* _arg7, int64_t _arg8) {
++long _mkcgo_go_ecdsaVerify(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, const uint8_t* _arg5, long _arg6, const uint8_t* _arg7, long _arg8) {
 +	return go_ecdsaVerify(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
 +}
 +
-+int64_t _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
++long _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
 +	return go_encapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int64_t _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, int64_t _arg1, uint8_t* _arg2, int64_t _arg3, uint8_t* _arg4, int64_t _arg5) {
++long _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
 +	return go_encapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+int64_t _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++long _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
 +	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
 +
-+int64_t _mkcgo_go_encryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++long _mkcgo_go_encryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
 +	return go_encryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
 +
-+int64_t _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++long _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
 +	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
-+int64_t _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++long _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
 +	return go_extractHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
@@ -25588,11 +26318,11 @@ index 00000000000000..f159f4b8e9cb77
 +	go_freeHMAC(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_generateKeyECDH(int32_t _arg0, uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4) {
++long _mkcgo_go_generateKeyECDH(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
 +	return go_generateKeyECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
 +}
 +
-+int64_t _mkcgo_go_generateKeyECDSA(int32_t _arg0, uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4, uint8_t* _arg5, int64_t _arg6) {
++long _mkcgo_go_generateKeyECDSA(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
 +	return go_generateKeyECDSA(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
@@ -25600,15 +26330,23 @@ index 00000000000000..f159f4b8e9cb77
 +	go_generateKeyEd25519(_arg0);
 +}
 +
-+int64_t _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, int64_t _arg1) {
++long _mkcgo_go_generateKeyMLDSA65(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLDSA65(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyMLDSA87(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLDSA87(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, long _arg1) {
 +	return go_generateKeyMLKEM1024(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, int64_t _arg1) {
++long _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, long _arg1) {
 +	return go_generateKeyMLKEM768(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_hashBlockSize(int32_t _arg0) {
++long _mkcgo_go_hashBlockSize(int32_t _arg0) {
 +	return go_hashBlockSize(_arg0);
 +}
 +
@@ -25628,7 +26366,7 @@ index 00000000000000..f159f4b8e9cb77
 +	go_hashReset(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_hashSize(int32_t _arg0) {
++long _mkcgo_go_hashSize(int32_t _arg0) {
 +	return go_hashSize(_arg0);
 +}
 +
@@ -25636,60 +26374,88 @@ index 00000000000000..f159f4b8e9cb77
 +	go_hashSum(_arg0, _arg1, _arg2);
 +}
 +
-+void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int64_t _arg3) {
++void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
 +	go_hashWrite(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
++void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
 +	return go_initHMAC(_arg0, _arg1, _arg2);
 +}
 +
-+int64_t _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
++long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
 +	return go_newPrivateKeyEd25519FromSeed(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
++long _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
 +	return go_newPublicKeyEd25519(_arg0, _arg1);
 +}
 +
-+int64_t _mkcgo_go_publicKeyFromPrivateECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2, uint8_t* _arg3, int64_t _arg4) {
++long _mkcgo_go_publicKeyFromPrivateECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
 +	return go_publicKeyFromPrivateECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
 +}
 +
-+int64_t _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
++long _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
 +	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int64_t _mkcgo_go_supportsMLKEM(void) {
++long _mkcgo_go_signMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
++	return go_signMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_signMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
++	return go_signMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_supportsMLDSA(void) {
++	return go_supportsMLDSA();
++}
++
++long _mkcgo_go_supportsMLKEM(void) {
 +	return go_supportsMLKEM();
 +}
 +
-+int64_t _mkcgo_go_supportsSHA3(void) {
++long _mkcgo_go_supportsSHA3(void) {
 +	return go_supportsSHA3();
 +}
 +
-+void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, int64_t _arg3) {
++void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
 +	go_updateHMAC(_arg0, _arg1, _arg2, _arg3);
 +}
 +
-+int64_t _mkcgo_go_validatePrivateKeyECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
++long _mkcgo_go_validatePrivateKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
 +	return go_validatePrivateKeyECDH(_arg0, _arg1, _arg2);
 +}
 +
-+int64_t _mkcgo_go_validatePublicKeyECDH(int32_t _arg0, const uint8_t* _arg1, int64_t _arg2) {
++long _mkcgo_go_validatePublicKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
 +	return go_validatePublicKeyECDH(_arg0, _arg1, _arg2);
 +}
 +
-+int64_t _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
++long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1) {
++	return go_validatePublicKeyMLDSA65(_arg0, _arg1);
++}
++
++long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1) {
++	return go_validatePublicKeyMLDSA87(_arg0, _arg1);
++}
++
++long _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
 +	return go_verifyEd25519(_arg0, _arg1, _arg2, _arg3);
 +}
 +
++long _mkcgo_go_verifyMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
++	return go_verifyMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_verifyMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
++	return go_verifyMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
 new file mode 100644
-index 00000000000000..d738d7278076ec
+index 00000000000000..f933f59c3013da
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,66 @@
+@@ -0,0 +1,77 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25704,64 +26470,75 @@ index 00000000000000..d738d7278076ec
 +
 +uintptr_t mkcgo_err_retrieve();
 +
-+void _mkcgo_go_MD5(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA1(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA256(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA384(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA3_256(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA3_384(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA3_512(const uint8_t*, size_t, const uint8_t*);
-+void _mkcgo_go_SHA512(const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_MD5(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA1(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA256(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA384(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_256(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_384(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_512(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA512(const uint8_t*, size_t, uint8_t*);
 +void* _mkcgo_go_copyHMAC(int32_t, void*);
-+int64_t _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_decapsulateMLKEM768(const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int64_t _mkcgo_go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_ecdsaSign(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, uint8_t*, int64_t*);
-+int64_t _mkcgo_go_ecdsaVerify(int32_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t, const uint8_t*, int64_t);
-+int64_t _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_encapsulateMLKEM768(const uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int64_t _mkcgo_go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+int64_t _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+int64_t _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long _mkcgo_go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
 +void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
 +void _mkcgo_go_freeHMAC(int32_t, void*);
-+int64_t _mkcgo_go_generateKeyECDH(int32_t, uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_generateKeyECDSA(int32_t, uint8_t*, int64_t, uint8_t*, int64_t, uint8_t*, int64_t);
++long _mkcgo_go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
 +void _mkcgo_go_generateKeyEd25519(uint8_t*);
-+int64_t _mkcgo_go_generateKeyMLKEM1024(uint8_t*, int64_t);
-+int64_t _mkcgo_go_generateKeyMLKEM768(uint8_t*, int64_t);
-+int64_t _mkcgo_go_hashBlockSize(int32_t);
++long _mkcgo_go_generateKeyMLDSA65(uint8_t*, long);
++long _mkcgo_go_generateKeyMLDSA87(uint8_t*, long);
++long _mkcgo_go_generateKeyMLKEM1024(uint8_t*, long);
++long _mkcgo_go_generateKeyMLKEM768(uint8_t*, long);
++long _mkcgo_go_hashBlockSize(int32_t);
 +void* _mkcgo_go_hashCopy(int32_t, void*);
 +void _mkcgo_go_hashFree(int32_t, void*);
 +void* _mkcgo_go_hashNew(int32_t);
 +void _mkcgo_go_hashReset(int32_t, void*);
-+int64_t _mkcgo_go_hashSize(int32_t);
++long _mkcgo_go_hashSize(int32_t);
 +void _mkcgo_go_hashSum(int32_t, void*, uint8_t*);
-+void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, int64_t);
-+void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, int64_t);
-+int64_t _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+int64_t _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+int64_t _mkcgo_go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, int64_t, uint8_t*, int64_t);
-+int64_t _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+int64_t _mkcgo_go_supportsMLKEM(void);
-+int64_t _mkcgo_go_supportsSHA3(void);
-+void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, int64_t);
-+int64_t _mkcgo_go_validatePrivateKeyECDH(int32_t, const uint8_t*, int64_t);
-+int64_t _mkcgo_go_validatePublicKeyECDH(int32_t, const uint8_t*, int64_t);
-+int64_t _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, long);
++void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, long);
++long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++long _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++long _mkcgo_go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_supportsMLDSA(void);
++long _mkcgo_go_supportsMLKEM(void);
++long _mkcgo_go_supportsSHA3(void);
++void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, long);
++long _mkcgo_go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t*, long);
++long _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++long _mkcgo_go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long _mkcgo_go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
 +
 +#endif // MKCGO_H
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
 new file mode 100644
-index 00000000000000..85d38bd6d881c3
+index 00000000000000..5be36f4b35dedb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,334 @@
+@@ -0,0 +1,400 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -25886,6 +26663,18 @@ index 00000000000000..85d38bd6d881c3
 +GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
 +
++TEXT _mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_derivePublicKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_derivePublicKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB)
++
 +TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB), NOSPLIT, $0-0
 +	JMP _mkcgo_go_ecdhSharedSecret(SB)
 +
@@ -25970,6 +26759,18 @@ index 00000000000000..85d38bd6d881c3
 +GLOBL ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_generateKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA87_trampoline<>(SB)
++
 +TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
 +	JMP _mkcgo_go_generateKeyMLKEM1024(SB)
 +
@@ -26060,6 +26861,24 @@ index 00000000000000..85d38bd6d881c3
 +GLOBL ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_signMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_signMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_signMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_signMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA87_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsMLDSA_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsMLDSA(SB)
++
++GLOBL ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLDSA_trampoline<>(SB)
++
 +TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB), NOSPLIT, $0-0
 +	JMP _mkcgo_go_supportsMLKEM(SB)
 +
@@ -26090,18 +26909,42 @@ index 00000000000000..85d38bd6d881c3
 +GLOBL ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
 +
++TEXT _mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB)
++
 +TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB), NOSPLIT, $0-0
 +	JMP _mkcgo_go_verifyEd25519(SB)
 +
 +GLOBL ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
 +DATA ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
 +
++TEXT _mkcgo_go_verifyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA87_trampoline<>(SB)
++
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
 new file mode 100644
-index 00000000000000..a5612fded9b225
+index 00000000000000..c05dd1acf80954
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,320 @@
+@@ -0,0 +1,386 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26143,6 +26986,10 @@ index 00000000000000..a5612fded9b225
 +#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
 +#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
 +#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo noescape _mkcgo_go_derivePublicKeyMLDSA65
++#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA65
++#cgo noescape _mkcgo_go_derivePublicKeyMLDSA87
++#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA87
 +#cgo noescape _mkcgo_go_ecdhSharedSecret
 +#cgo nocallback _mkcgo_go_ecdhSharedSecret
 +#cgo noescape _mkcgo_go_ecdsaSign
@@ -26171,6 +27018,10 @@ index 00000000000000..a5612fded9b225
 +#cgo nocallback _mkcgo_go_generateKeyECDSA
 +#cgo noescape _mkcgo_go_generateKeyEd25519
 +#cgo nocallback _mkcgo_go_generateKeyEd25519
++#cgo noescape _mkcgo_go_generateKeyMLDSA65
++#cgo nocallback _mkcgo_go_generateKeyMLDSA65
++#cgo noescape _mkcgo_go_generateKeyMLDSA87
++#cgo nocallback _mkcgo_go_generateKeyMLDSA87
 +#cgo noescape _mkcgo_go_generateKeyMLKEM1024
 +#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
 +#cgo noescape _mkcgo_go_generateKeyMLKEM768
@@ -26201,6 +27052,12 @@ index 00000000000000..a5612fded9b225
 +#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
 +#cgo noescape _mkcgo_go_signEd25519
 +#cgo nocallback _mkcgo_go_signEd25519
++#cgo noescape _mkcgo_go_signMLDSA65
++#cgo nocallback _mkcgo_go_signMLDSA65
++#cgo noescape _mkcgo_go_signMLDSA87
++#cgo nocallback _mkcgo_go_signMLDSA87
++#cgo noescape _mkcgo_go_supportsMLDSA
++#cgo nocallback _mkcgo_go_supportsMLDSA
 +#cgo noescape _mkcgo_go_supportsMLKEM
 +#cgo nocallback _mkcgo_go_supportsMLKEM
 +#cgo noescape _mkcgo_go_supportsSHA3
@@ -26211,8 +27068,16 @@ index 00000000000000..a5612fded9b225
 +#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
 +#cgo noescape _mkcgo_go_validatePublicKeyECDH
 +#cgo nocallback _mkcgo_go_validatePublicKeyECDH
++#cgo noescape _mkcgo_go_validatePublicKeyMLDSA65
++#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA65
++#cgo noescape _mkcgo_go_validatePublicKeyMLDSA87
++#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA87
 +#cgo noescape _mkcgo_go_verifyEd25519
 +#cgo nocallback _mkcgo_go_verifyEd25519
++#cgo noescape _mkcgo_go_verifyMLDSA65
++#cgo nocallback _mkcgo_go_verifyMLDSA65
++#cgo noescape _mkcgo_go_verifyMLDSA87
++#cgo nocallback _mkcgo_go_verifyMLDSA87
 +*/
 +import "C"
 +import "unsafe"
@@ -26260,11 +27125,11 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	return int64(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey))))
++	return int64(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
 +}
 +
 +func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	return int64(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey))))
++	return int64(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
 +}
 +
 +func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
@@ -26276,31 +27141,39 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
-+	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey))))
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
 +}
 +
 +func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
-+	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey))))
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
++}
++
++func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_derivePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_derivePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
 +}
 +
 +func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
-+	return int64(C._mkcgo_go_ecdhSharedSecret(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedSecret))), C.int64_t(len(sharedSecret))))
++	return int64(C._mkcgo_go_ecdhSharedSecret(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedSecret))), C.long(len(sharedSecret))))
 +}
 +
 +func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
-+	return int64(C._mkcgo_go_ecdsaSign(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.int64_t(len(d)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.int64_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.int64_t)(unsafe.Pointer(signatureLen))))
++	return int64(C._mkcgo_go_ecdsaSign(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
 +}
 +
 +func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
-+	return int64(C._mkcgo_go_ecdsaVerify(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.int64_t(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.int64_t(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.int64_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.int64_t(len(signature))))
++	return int64(C._mkcgo_go_ecdsaVerify(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
 +}
 +
 +func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	return int64(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext))))
++	return int64(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
 +}
 +
 +func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	return int64(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.int64_t(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.int64_t(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.int64_t(len(ciphertext))))
++	return int64(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
 +}
 +
 +func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
@@ -26328,23 +27201,31 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
++	return int64(C._mkcgo_go_generateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
 +}
 +
 +func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyECDSA(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.int64_t(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.int64_t(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.int64_t(len(d))))
++	return int64(C._mkcgo_go_generateKeyECDSA(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d))))
 +}
 +
 +func GenerateKeyEd25519(key []uint8) {
 +	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
++func GenerateKeyMLDSA65(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
++func GenerateKeyMLDSA87(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
 +func GenerateKeyMLKEM1024(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed))))
++	return int64(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
 +}
 +
 +func GenerateKeyMLKEM768(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.int64_t(len(seed))))
++	return int64(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
 +}
 +
 +func HashBlockSize(hashAlgorithm int32) int64 {
@@ -26376,11 +27257,11 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int64_t(len(data)))
++	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
 +}
 +
 +func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
-+	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.int64_t(len(key)))
++	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.long(len(key)))
 +}
 +
 +func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
@@ -26392,13 +27273,25 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_publicKeyFromPrivateECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
++	return int64(C._mkcgo_go_publicKeyFromPrivateECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
 +}
 +
 +func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
 +	return int64(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
 +}
 +
++func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_signMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++}
++
++func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_signMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++}
++
++func SupportsMLDSA() int64 {
++	return int64(C._mkcgo_go_supportsMLDSA())
++}
++
 +func SupportsMLKEM() int64 {
 +	return int64(C._mkcgo_go_supportsMLKEM())
 +}
@@ -26408,26 +27301,42 @@ index 00000000000000..a5612fded9b225
 +}
 +
 +func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.int64_t(len(data)))
++	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
 +}
 +
 +func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePrivateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.int64_t(len(privateKey))))
++	return int64(C._mkcgo_go_validatePrivateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey))))
 +}
 +
 +func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePublicKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.int64_t(len(publicKey))))
++	return int64(C._mkcgo_go_validatePublicKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
 +}
 +
 +func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
 +	return int64(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
 +}
++
++func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_verifyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++}
++
++func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_verifyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
 new file mode 100644
-index 00000000000000..64315a13705101
+index 00000000000000..222ece4bb14349
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,364 @@
+@@ -0,0 +1,441 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26472,6 +27381,8 @@ index 00000000000000..64315a13705101
 +//go:linkname go_decryptChaChaPoly go_decryptChaChaPoly
 +//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
 +//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
++//go:linkname go_derivePublicKeyMLDSA65 go_derivePublicKeyMLDSA65
++//go:linkname go_derivePublicKeyMLDSA87 go_derivePublicKeyMLDSA87
 +//go:linkname go_ecdhSharedSecret go_ecdhSharedSecret
 +//go:linkname go_ecdsaSign go_ecdsaSign
 +//go:linkname go_ecdsaVerify go_ecdsaVerify
@@ -26486,6 +27397,8 @@ index 00000000000000..64315a13705101
 +//go:linkname go_generateKeyECDH go_generateKeyECDH
 +//go:linkname go_generateKeyECDSA go_generateKeyECDSA
 +//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
++//go:linkname go_generateKeyMLDSA65 go_generateKeyMLDSA65
++//go:linkname go_generateKeyMLDSA87 go_generateKeyMLDSA87
 +//go:linkname go_generateKeyMLKEM1024 go_generateKeyMLKEM1024
 +//go:linkname go_generateKeyMLKEM768 go_generateKeyMLKEM768
 +//go:linkname go_hashBlockSize go_hashBlockSize
@@ -26501,12 +27414,19 @@ index 00000000000000..64315a13705101
 +//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
 +//go:linkname go_publicKeyFromPrivateECDH go_publicKeyFromPrivateECDH
 +//go:linkname go_signEd25519 go_signEd25519
++//go:linkname go_signMLDSA65 go_signMLDSA65
++//go:linkname go_signMLDSA87 go_signMLDSA87
++//go:linkname go_supportsMLDSA go_supportsMLDSA
 +//go:linkname go_supportsMLKEM go_supportsMLKEM
 +//go:linkname go_supportsSHA3 go_supportsSHA3
 +//go:linkname go_updateHMAC go_updateHMAC
 +//go:linkname go_validatePrivateKeyECDH go_validatePrivateKeyECDH
 +//go:linkname go_validatePublicKeyECDH go_validatePublicKeyECDH
++//go:linkname go_validatePublicKeyMLDSA65 go_validatePublicKeyMLDSA65
++//go:linkname go_validatePublicKeyMLDSA87 go_validatePublicKeyMLDSA87
 +//go:linkname go_verifyEd25519 go_verifyEd25519
++//go:linkname go_verifyMLDSA65 go_verifyMLDSA65
++//go:linkname go_verifyMLDSA87 go_verifyMLDSA87
 +
 +var go_MD5 byte
 +var go_SHA1 byte
@@ -26523,6 +27443,8 @@ index 00000000000000..64315a13705101
 +var go_decryptChaChaPoly byte
 +var go_deriveEncapsulationKeyMLKEM1024 byte
 +var go_deriveEncapsulationKeyMLKEM768 byte
++var go_derivePublicKeyMLDSA65 byte
++var go_derivePublicKeyMLDSA87 byte
 +var go_ecdhSharedSecret byte
 +var go_ecdsaSign byte
 +var go_ecdsaVerify byte
@@ -26537,6 +27459,8 @@ index 00000000000000..64315a13705101
 +var go_generateKeyECDH byte
 +var go_generateKeyECDSA byte
 +var go_generateKeyEd25519 byte
++var go_generateKeyMLDSA65 byte
++var go_generateKeyMLDSA87 byte
 +var go_generateKeyMLKEM1024 byte
 +var go_generateKeyMLKEM768 byte
 +var go_hashBlockSize byte
@@ -26552,12 +27476,19 @@ index 00000000000000..64315a13705101
 +var go_newPublicKeyEd25519 byte
 +var go_publicKeyFromPrivateECDH byte
 +var go_signEd25519 byte
++var go_signMLDSA65 byte
++var go_signMLDSA87 byte
++var go_supportsMLDSA byte
 +var go_supportsMLKEM byte
 +var go_supportsSHA3 byte
 +var go_updateHMAC byte
 +var go_validatePrivateKeyECDH byte
 +var go_validatePublicKeyECDH byte
++var go_validatePublicKeyMLDSA65 byte
++var go_validatePublicKeyMLDSA87 byte
 +var go_verifyEd25519 byte
++var go_verifyMLDSA65 byte
++var go_verifyMLDSA87 byte
 +
 +func MD5(inputPointer []uint8, outputPointer []uint8) {
 +	syscallN(0, uintptr(unsafe.Pointer(&go_MD5)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
@@ -26626,6 +27557,16 @@ index 00000000000000..64315a13705101
 +	return int64(r0)
 +}
 +
++func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
 +func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdhSharedSecret)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedSecret))), uintptr(len(sharedSecret)))
 +	return int64(r0)
@@ -26693,6 +27634,16 @@ index 00000000000000..64315a13705101
 +	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
 +}
 +
++func GenerateKeyMLDSA65(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
++func GenerateKeyMLDSA87(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
 +func GenerateKeyMLKEM1024(seed []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
 +	return int64(r0)
@@ -26764,6 +27715,21 @@ index 00000000000000..64315a13705101
 +	return int64(r0)
 +}
 +
++func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
++}
++
++func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
++}
++
++func SupportsMLDSA() int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLDSA)))
++	return int64(r0)
++}
++
 +func SupportsMLKEM() int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLKEM)))
 +	return int64(r0)
@@ -26788,16 +27754,36 @@ index 00000000000000..64315a13705101
 +	return int64(r0)
 +}
 +
++func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
 +func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
 +	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sig))))
 +	return int64(r0)
 +}
++
++func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
++
++func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
 new file mode 100644
-index 00000000000000..fc5d643f48bd87
+index 00000000000000..2b9858f5e5ce80
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-@@ -0,0 +1,283 @@
+@@ -0,0 +1,307 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -26982,6 +27968,32 @@ index 00000000000000..fc5d643f48bd87
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
@@ -27046,7 +28058,6 @@ index 00000000000000..fc5d643f48bd87
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
 +//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
-+//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
@@ -27056,10 +28067,10 @@ index 00000000000000..fc5d643f48bd87
 +//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
-+//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
 +//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
@@ -27074,7 +28085,6 @@ index 00000000000000..fc5d643f48bd87
 +//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
 +//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
 +//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
-+//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
 +//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
 +//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
 +//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
@@ -27083,10 +28093,10 @@ index 00000000000000..fc5d643f48bd87
 +//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
 new file mode 100644
-index 00000000000000..a6ba482889cc27
+index 00000000000000..ce5806b1910da9
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-@@ -0,0 +1,282 @@
+@@ -0,0 +1,306 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +// Code generated by genswiftimports. DO NOT EDIT.
@@ -27271,6 +28281,32 @@ index 00000000000000..a6ba482889cc27
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
 +//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
 +//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
@@ -27335,7 +28371,6 @@ index 00000000000000..a6ba482889cc27
 +//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
 +//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
 +//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
-+//go:cgo_import_dynamic $sSW5start5countSWSVSg_SitcfC $sSW5start5countSWSVSg_SitcfC ""
 +//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
 +//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
@@ -27345,10 +28380,10 @@ index 00000000000000..a6ba482889cc27
 +//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
 +//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
 +//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
-+//go:cgo_import_dynamic $sSw5start5countSwSvSg_SitcfC $sSw5start5countSwSvSg_SitcfC ""
 +//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
 +//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
@@ -27362,7 +28397,6 @@ index 00000000000000..a6ba482889cc27
 +//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
 +//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
 +//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
-+//go:cgo_import_dynamic swift_errorRetain swift_errorRetain ""
 +//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
 +//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
 +//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
@@ -28652,7 +29686,7 @@ index 00000000000000..74ee18d383784e
 +//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
 new file mode 100644
-index 00000000000000..2f29d1d916958f
+index 00000000000000..d37be58038a718
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
 @@ -0,0 +1,107 @@
@@ -28686,7 +29720,7 @@ index 00000000000000..2f29d1d916958f
 +typedef void *CFAllocatorRef;
 +typedef void *CFDictionaryKeyCallBacks;
 +typedef void *CFDictionaryValueCallBacks;
-+typedef int32_t CFIndex;
++typedef long CFIndex;
 +typedef CFStringRef SecKeyAlgorithm;
 +
 +typedef enum {
@@ -28701,7 +29735,7 @@ index 00000000000000..2f29d1d916958f
 +} CFStringEncoding;
 +
 +typedef enum {
-+  kCFNumberIntType = 9
++  kCFNumberLongType = 10
 +} CFNumberType;
 +
 +extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
@@ -28919,7 +29953,7 @@ index 00000000000000..a74278d02fd6ef
 +
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
 new file mode 100644
-index 00000000000000..edafb365383aca
+index 00000000000000..41aa0341b8a2b2
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
 @@ -0,0 +1,21 @@
@@ -28942,11 +29976,11 @@ index 00000000000000..edafb365383aca
 +)
 +
 +const (
-+	KCFNumberIntType CFNumberType = 9
++	KCFNumberLongType CFNumberType = 10
 +)
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
 new file mode 100644
-index 00000000000000..6b0cd286f82d58
+index 00000000000000..8a2524b3cd0fe6
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
 @@ -0,0 +1,98 @@
@@ -28975,7 +30009,7 @@ index 00000000000000..6b0cd286f82d58
 +typedef void* CFAllocatorRef;
 +typedef void* CFDictionaryKeyCallBacks;
 +typedef void* CFDictionaryValueCallBacks;
-+typedef int32_t CFIndex;
++typedef long CFIndex;
 +typedef CFStringRef SecKeyAlgorithm;
 +
 +extern const CFAllocatorRef kCFAllocatorDefault;
@@ -29018,7 +30052,7 @@ index 00000000000000..6b0cd286f82d58
 +} CFStringEncoding;
 +
 +typedef enum {
-+	kCFNumberIntType = 9,
++	kCFNumberLongType = 10,
 +} CFNumberType;
 +
 +uintptr_t mkcgo_err_retrieve();
@@ -29622,7 +30656,7 @@ index 00000000000000..c17b764ee90662
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
 new file mode 100644
-index 00000000000000..08bafd9a64d7c4
+index 00000000000000..7e5d52ef2d3c63
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
 @@ -0,0 +1,466 @@
@@ -29668,7 +30702,7 @@ index 00000000000000..08bafd9a64d7c4
 +type CFAllocatorRef unsafe.Pointer
 +type CFDictionaryKeyCallBacks unsafe.Pointer
 +type CFDictionaryValueCallBacks unsafe.Pointer
-+type CFIndex = int32
++type CFIndex = int64
 +type SecKeyAlgorithm = CFStringRef
 +
 +type SecKeyOperationType int32
@@ -31435,7 +32469,7 @@ index 00000000000000..316ecba6792d47
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 new file mode 100644
-index 00000000000000..39a70bfcd259d8
+index 00000000000000..a085303b10ac00
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
 @@ -0,0 +1,339 @@
@@ -31749,7 +32783,7 @@ index 00000000000000..39a70bfcd259d8
 +		unsafe.Pointer(keyType),
 +	)
 +
-+	cfNum := security.CFNumberCreate(security.KCFAllocatorDefault, security.KCFNumberIntType, unsafe.Pointer(&keySize))
++	cfNum := security.CFNumberCreate(security.KCFAllocatorDefault, security.KCFNumberLongType, unsafe.Pointer(&keySize))
 +	defer security.CFRelease(security.CFTypeRef(cfNum))
 +
 +	security.CFDictionarySetValue(
@@ -32579,6 +33613,234 @@ index 00000000000000..80a951f8ea1a2a
 +		return 0
 +	}
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
+new file mode 100644
+index 00000000000000..136d81fe3c152e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
+@@ -0,0 +1,222 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
++	privateKeySizeMLDSA = 32
++
++	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
++	publicKeySizeMLDSA65 = 1952
++
++	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
++	publicKeySizeMLDSA87 = 2592
++
++	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
++	signatureSizeMLDSA65 = 3309
++
++	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
++	signatureSizeMLDSA87 = 4627
++)
++
++// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
++// on this platform.
++func SupportsMLDSA(params MLDSAParameters) bool {
++	switch params.publicKeySize {
++	case publicKeySizeMLDSA65, publicKeySizeMLDSA87:
++		return cryptokit.SupportsMLDSA() == 1
++	default:
++		return false
++	}
++}
++
++// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
++type MLDSAParameters struct {
++	name          string
++	publicKeySize int
++	signatureSize int
++	generateKey   func(seed []uint8) int64
++	derivePublic  func(seed []uint8, publicKey []uint8) int64
++	sign          func(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64
++	verify        func(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64
++	validatePub   func(publicKey []uint8) int64
++}
++
++var (
++	mldsa65 = MLDSAParameters{
++		name:          "ML-DSA-65",
++		publicKeySize: publicKeySizeMLDSA65,
++		signatureSize: signatureSizeMLDSA65,
++		generateKey:   cryptokit.GenerateKeyMLDSA65,
++		derivePublic:  cryptokit.DerivePublicKeyMLDSA65,
++		sign:          cryptokit.SignMLDSA65,
++		verify:        cryptokit.VerifyMLDSA65,
++		validatePub:   cryptokit.ValidatePublicKeyMLDSA65,
++	}
++	mldsa87 = MLDSAParameters{
++		name:          "ML-DSA-87",
++		publicKeySize: publicKeySizeMLDSA87,
++		signatureSize: signatureSizeMLDSA87,
++		generateKey:   cryptokit.GenerateKeyMLDSA87,
++		derivePublic:  cryptokit.DerivePublicKeyMLDSA87,
++		sign:          cryptokit.SignMLDSA87,
++		verify:        cryptokit.VerifyMLDSA87,
++		validatePub:   cryptokit.ValidatePublicKeyMLDSA87,
++	}
++)
++
++// MLDSA65 returns the ML-DSA-65 parameter set.
++func MLDSA65() MLDSAParameters { return mldsa65 }
++
++// MLDSA87 returns the ML-DSA-87 parameter set.
++func MLDSA87() MLDSAParameters { return mldsa87 }
++
++func (params MLDSAParameters) valid() bool {
++	return params.generateKey != nil
++}
++
++// PublicKeySize returns the size of public keys for this parameter set, in bytes.
++func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
++
++// SignatureSize returns the size of signatures for this parameter set, in bytes.
++func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
++
++// String returns the name of the parameter set.
++func (params MLDSAParameters) String() string { return params.name }
++
++var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
++
++// PrivateKeyMLDSA is an ML-DSA private key seed.
++type PrivateKeyMLDSA struct {
++	params MLDSAParameters
++	seed   [privateKeySizeMLDSA]byte
++}
++
++// GenerateKeyMLDSA generates a new ML-DSA private key.
++func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	if ret := params.generateKey(key.seed[:]); ret != 0 {
++		return nil, errors.New("mldsa: key generation failed")
++	}
++	return key, nil
++}
++
++// NewPrivateKeyMLDSA constructs an ML-DSA private key from its seed.
++func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid private key size")
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	copy(key.seed[:], seed)
++	return key, nil
++}
++
++// Bytes returns the private key seed.
++func (key *PrivateKeyMLDSA) Bytes() []byte {
++	return key.seed[:]
++}
++
++// Parameters returns the parameters associated with this private key.
++func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// PublicKey returns the corresponding public key.
++func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
++	publicKey := &PublicKeyMLDSA{params: key.params}
++	if ret := key.params.derivePublic(key.seed[:], publicKey.bytes[:key.params.publicKeySize]); ret != 0 {
++		panic("mldsa: failed to derive public key")
++	}
++	return publicKey
++}
++
++// Sign signs message with context using ML-DSA.
++func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
++	if len(context) > 255 {
++		return nil, errors.New("mldsa: context too long")
++	}
++	signature := make([]byte, key.params.signatureSize)
++	sigLen := int64(key.params.signatureSize)
++	contextBytes := []byte(context)
++	if ret := key.params.sign(key.seed[:], message, contextBytes, signature, &sigLen); ret != 0 {
++		return nil, errors.New("mldsa: signing failed")
++	}
++	return signature[:sigLen], nil
++}
++
++// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
++func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
++	if len(mu) != 64 {
++		return nil, errors.New("mldsa: invalid message hash length")
++	}
++	return nil, errors.New("mldsa: external mu not supported")
++}
++
++// PublicKeyMLDSA is an ML-DSA public key.
++type PublicKeyMLDSA struct {
++	params MLDSAParameters
++	bytes  [publicKeySizeMLDSA87]byte
++}
++
++// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
++func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(publicKey) != params.publicKeySize {
++		return nil, errors.New("mldsa: invalid public key size")
++	}
++	if ret := params.validatePub(publicKey); ret != 0 {
++		return nil, errors.New("mldsa: invalid public key")
++	}
++	key := &PublicKeyMLDSA{params: params}
++	copy(key.bytes[:], publicKey)
++	return key, nil
++}
++
++// Bytes returns the public key encoding.
++func (key *PublicKeyMLDSA) Bytes() []byte {
++	return key.bytes[:key.params.publicKeySize]
++}
++
++// Parameters returns the parameters associated with this public key.
++func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// Verify verifies an ML-DSA signature.
++func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
++	if len(signature) != key.params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	if len(context) > 255 {
++		return errors.New("mldsa: context too long")
++	}
++	contextBytes := []byte(context)
++	if ret := key.params.verify(key.bytes[:key.params.publicKeySize], message, contextBytes, signature); ret != 0 {
++		return errors.New("mldsa: verification failed")
++	}
++	return nil
++}
++
++// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message representative.
++func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
++	if len(mu) != 64 {
++		return errors.New("mldsa: invalid message hash length")
++	}
++	if len(signature) != key.params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	return errors.New("mldsa: external mu not supported")
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
 new file mode 100644
 index 00000000000000..b5131703afdbcc
@@ -32848,10 +34110,10 @@ index 00000000000000..b5131703afdbcc
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
 new file mode 100644
-index 00000000000000..75416a508374ca
+index 00000000000000..b50fc17d0f8d66
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
-@@ -0,0 +1,68 @@
+@@ -0,0 +1,76 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -32863,11 +34125,19 @@ index 00000000000000..75416a508374ca
 +	"crypto"
 +	"errors"
 +	"hash"
++	"math"
 +
 +	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
 +)
 +
 +func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	// CommonCrypto's CCKeyDerivationPBKDF takes an unsigned 32-bit iteration
++	// count, so reject values that would overflow or wrap. In practice the
++	// recommended iteration count is around 300,000.
++	if iter <= 0 || iter > math.MaxUint32 {
++		return nil, errors.New("PBKDF2: invalid iteration count")
++	}
++
 +	// Map Go hash function to CommonCrypto hash constant
 +	ccDigest, err := hashToCCDigestPBKDF2(fh())
 +	if err != nil {
@@ -35935,6 +37205,437 @@ index 00000000000000..bc150a7bd39272
 +	}
 +	return nil
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mldsa.go
+new file mode 100644
+index 00000000000000..673fdcd3b3e9e5
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mldsa.go
+@@ -0,0 +1,425 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build windows
++// +build windows
++
++package cng
++
++import (
++	"errors"
++	"runtime"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-winnative/internal/bcrypt"
++)
++
++const (
++	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
++	privateKeySizeMLDSA = 32
++
++	// publicKeySizeMLDSA44 is the size of an ML-DSA-44 public key encoding.
++	publicKeySizeMLDSA44 = 1312
++
++	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
++	publicKeySizeMLDSA65 = 1952
++
++	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
++	publicKeySizeMLDSA87 = 2592
++
++	// signatureSizeMLDSA44 is the size of an ML-DSA-44 signature.
++	signatureSizeMLDSA44 = 2420
++
++	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
++	signatureSizeMLDSA65 = 3309
++
++	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
++	signatureSizeMLDSA87 = 4627
++
++	sizeOfPQDSAKeyBlobHeader      = 12
++	maxMLDSAParameterSetNameBytes = 6
++	sizeOfPrivateSeedBlobMLDSA    = sizeOfPQDSAKeyBlobHeader + maxMLDSAParameterSetNameBytes + privateKeySizeMLDSA
++	sizeOfPublicKeyBlobMLDSA87    = sizeOfPQDSAKeyBlobHeader + maxMLDSAParameterSetNameBytes + publicKeySizeMLDSA87
++)
++
++type mldsaAlgorithm struct {
++	handle bcrypt.ALG_HANDLE
++}
++
++func loadMLDSA() (mldsaAlgorithm, error) {
++	return loadOrStoreAlg(bcrypt.MLDSA_ALGORITHM, 0, "", func(h bcrypt.ALG_HANDLE) (mldsaAlgorithm, error) {
++		return mldsaAlgorithm{handle: h}, nil
++	})
++}
++
++// SupportsMLDSA returns true if ML-DSA is supported on this platform.
++func SupportsMLDSA() bool {
++	_, err := loadMLDSA()
++	return err == nil
++}
++
++func generateMLDSAKey(paramSet string, dst []byte) error {
++	alg, err := loadMLDSA()
++	if err != nil {
++		return err
++	}
++
++	var hKey bcrypt.KEY_HANDLE
++	if err := bcrypt.GenerateKeyPair(alg.handle, &hKey, 0, 0); err != nil {
++		return err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	if err := setString(bcrypt.HANDLE(hKey), bcrypt.PARAMETER_SET_NAME, paramSet); err != nil {
++		return err
++	}
++	if err := bcrypt.FinalizeKeyPair(hKey, 0); err != nil {
++		return err
++	}
++
++	var blob [sizeOfPrivateSeedBlobMLDSA]byte
++	var size uint32
++	if err := bcrypt.ExportKey(hKey, 0, utf16PtrFromString(bcrypt.PQDSA_PRIVATE_SEED_BLOB), blob[:], &size, 0); err != nil {
++		return err
++	}
++	return extractPQDSAKeyBytes(dst, blob[:size])
++}
++
++func newPQDSAKeyBlob(dst []byte, paramSet string, keyBytes []byte, magic bcrypt.KeyBlobMagicNumber) ([]byte, error) {
++	paramSetByteLen := (len(paramSet) + 1) * 2
++	blobSize := 12 + paramSetByteLen + len(keyBytes)
++	if len(dst) < blobSize {
++		return nil, errors.New("mldsa: destination blob too small")
++	}
++	blob := dst[:blobSize]
++	putUint32LE(blob[0:4], uint32(magic))
++	putUint32LE(blob[4:8], uint32(paramSetByteLen))
++	putUint32LE(blob[8:12], uint32(len(keyBytes)))
++	for i := 0; i < len(paramSet); i++ {
++		if paramSet[i] == 0 || paramSet[i] > 127 {
++			panic("newPQDSAKeyBlob only supports ASCII parameter set names, got " + paramSet)
++		}
++		putUint16LE(blob[12+i*2:], uint16(paramSet[i]))
++	}
++	putUint16LE(blob[12+len(paramSet)*2:], 0)
++	copy(blob[12+paramSetByteLen:], keyBytes)
++	return blob, nil
++}
++
++func extractPQDSAKeyBytes(dst, blob []byte) error {
++	if len(blob) < 12 {
++		return errors.New("mldsa: blob too small")
++	}
++	cbParameterSet := getUint32LE(blob[4:8])
++	cbKey := getUint32LE(blob[8:12])
++	headerSize := 12 + int(cbParameterSet)
++	if len(blob) < headerSize+int(cbKey) {
++		return errors.New("mldsa: invalid blob size")
++	}
++	if len(dst) != int(cbKey) {
++		return errors.New("mldsa: destination size mismatch")
++	}
++	copy(dst, blob[headerSize:headerSize+int(cbKey)])
++	return nil
++}
++
++func importMLDSAPrivateKey(paramSet string, seed []byte) (bcrypt.KEY_HANDLE, error) {
++	alg, err := loadMLDSA()
++	if err != nil {
++		return 0, err
++	}
++	var blobBuf [sizeOfPrivateSeedBlobMLDSA]byte
++	blob, err := newPQDSAKeyBlob(blobBuf[:], paramSet, seed, bcrypt.MLDSA_PRIVATE_SEED_MAGIC)
++	if err != nil {
++		return 0, err
++	}
++	var hKey bcrypt.KEY_HANDLE
++	if err := bcrypt.ImportKeyPair(alg.handle, 0, utf16PtrFromString(bcrypt.PQDSA_PRIVATE_SEED_BLOB), &hKey, blob, 0); err != nil {
++		return 0, err
++	}
++	return hKey, nil
++}
++
++func importMLDSAPublicKey(paramSet string, publicKey []byte) (bcrypt.KEY_HANDLE, error) {
++	alg, err := loadMLDSA()
++	if err != nil {
++		return 0, err
++	}
++	var blobBuf [sizeOfPublicKeyBlobMLDSA87]byte
++	blob, err := newPQDSAKeyBlob(blobBuf[:], paramSet, publicKey, bcrypt.MLDSA_PUBLIC_MAGIC)
++	if err != nil {
++		return 0, err
++	}
++	var hKey bcrypt.KEY_HANDLE
++	if err := bcrypt.ImportKeyPair(alg.handle, 0, utf16PtrFromString(bcrypt.PQDSA_PUBLIC_BLOB), &hKey, blob, 0); err != nil {
++		return 0, err
++	}
++	return hKey, nil
++}
++
++func mldsaPublicKey(paramSet string, seed, dst []byte) error {
++	hKey, err := importMLDSAPrivateKey(paramSet, seed)
++	if err != nil {
++		return err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	var blob [sizeOfPublicKeyBlobMLDSA87]byte
++	var size uint32
++	if err := bcrypt.ExportKey(hKey, 0, utf16PtrFromString(bcrypt.PQDSA_PUBLIC_BLOB), blob[:], &size, 0); err != nil {
++		return err
++	}
++	return extractPQDSAKeyBytes(dst, blob[:size])
++}
++
++func mldsaPadding(context string) (bcrypt.PQDSA_PADDING_INFO, []byte, bcrypt.PadMode, error) {
++	if len(context) > 255 {
++		return bcrypt.PQDSA_PADDING_INFO{}, nil, 0, errors.New("mldsa: context too long")
++	}
++	if context == "" {
++		return bcrypt.PQDSA_PADDING_INFO{}, nil, bcrypt.PAD_PQDSA, nil
++	}
++	contextBytes := []byte(context)
++	return bcrypt.PQDSA_PADDING_INFO{
++		Context:     &contextBytes[0],
++		ContextSize: uint32(len(contextBytes)),
++	}, contextBytes, bcrypt.PAD_PQDSA, nil
++}
++
++func mldsaSign(paramSet string, seed, message []byte, signatureSize int, context string) ([]byte, error) {
++	hKey, err := importMLDSAPrivateKey(paramSet, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	info, contextBytes, flags, err := mldsaPadding(context)
++	if err != nil {
++		return nil, err
++	}
++	var infoPtr unsafe.Pointer
++	if flags != 0 {
++		infoPtr = unsafe.Pointer(&info)
++		defer runtime.KeepAlive(contextBytes)
++	}
++
++	signature := make([]byte, signatureSize)
++	var size uint32
++	if err := bcrypt.SignHash(hKey, infoPtr, message, signature, &size, flags); err != nil {
++		return nil, err
++	}
++	return signature[:size], nil
++}
++
++func mldsaSignExternalMu(paramSet string, seed, mu []byte, signatureSize int) ([]byte, error) {
++	if len(mu) != 64 {
++		return nil, errors.New("mldsa: invalid message hash length")
++	}
++	hKey, err := importMLDSAPrivateKey(paramSet, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	signature := make([]byte, signatureSize)
++	var size uint32
++	if err := bcrypt.SignHash(hKey, nil, mu, signature, &size, bcrypt.MLDSA_EXTERNAL_MU); err != nil {
++		return nil, err
++	}
++	return signature[:size], nil
++}
++
++func mldsaVerify(paramSet string, publicKey, message, signature []byte, signatureSize int, context string) error {
++	if len(signature) != signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	hKey, err := importMLDSAPublicKey(paramSet, publicKey)
++	if err != nil {
++		return err
++	}
++	defer bcrypt.DestroyKey(hKey)
++
++	info, contextBytes, flags, err := mldsaPadding(context)
++	if err != nil {
++		return err
++	}
++	var infoPtr unsafe.Pointer
++	if flags != 0 {
++		infoPtr = unsafe.Pointer(&info)
++		defer runtime.KeepAlive(contextBytes)
++	}
++	return bcrypt.VerifySignature(hKey, infoPtr, message, signature, flags)
++}
++
++func mldsaVerifyExternalMu(paramSet string, publicKey, mu, signature []byte, signatureSize int) error {
++	if len(mu) != 64 {
++		return errors.New("mldsa: invalid message hash length")
++	}
++	if len(signature) != signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	hKey, err := importMLDSAPublicKey(paramSet, publicKey)
++	if err != nil {
++		return err
++	}
++	defer bcrypt.DestroyKey(hKey)
++	return bcrypt.VerifySignature(hKey, nil, mu, signature, bcrypt.MLDSA_EXTERNAL_MU)
++}
++
++// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
++type MLDSAParameters struct {
++	name          string
++	paramSet      string
++	publicKeySize int
++	signatureSize int
++}
++
++var (
++	mldsa44 = MLDSAParameters{
++		name:          "ML-DSA-44",
++		paramSet:      bcrypt.MLDSA_PARAMETER_SET_44,
++		publicKeySize: publicKeySizeMLDSA44,
++		signatureSize: signatureSizeMLDSA44,
++	}
++	mldsa65 = MLDSAParameters{
++		name:          "ML-DSA-65",
++		paramSet:      bcrypt.MLDSA_PARAMETER_SET_65,
++		publicKeySize: publicKeySizeMLDSA65,
++		signatureSize: signatureSizeMLDSA65,
++	}
++	mldsa87 = MLDSAParameters{
++		name:          "ML-DSA-87",
++		paramSet:      bcrypt.MLDSA_PARAMETER_SET_87,
++		publicKeySize: publicKeySizeMLDSA87,
++		signatureSize: signatureSizeMLDSA87,
++	}
++)
++
++// MLDSA44 returns the ML-DSA-44 parameter set.
++func MLDSA44() MLDSAParameters { return mldsa44 }
++
++// MLDSA65 returns the ML-DSA-65 parameter set.
++func MLDSA65() MLDSAParameters { return mldsa65 }
++
++// MLDSA87 returns the ML-DSA-87 parameter set.
++func MLDSA87() MLDSAParameters { return mldsa87 }
++
++func (params MLDSAParameters) valid() bool {
++	switch params {
++	case mldsa44, mldsa65, mldsa87:
++		return true
++	default:
++		return false
++	}
++}
++
++// PublicKeySize returns the size of public keys for this parameter set, in bytes.
++func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
++
++// SignatureSize returns the size of signatures for this parameter set, in bytes.
++func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
++
++// String returns the name of the parameter set.
++func (params MLDSAParameters) String() string { return params.name }
++
++var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
++
++// PrivateKeyMLDSA is an ML-DSA private key seed.
++type PrivateKeyMLDSA struct {
++	params MLDSAParameters
++	seed   [privateKeySizeMLDSA]byte
++}
++
++// GenerateKeyMLDSA generates a new ML-DSA private key.
++func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	if err := generateMLDSAKey(params.paramSet, key.seed[:]); err != nil {
++		return nil, err
++	}
++	return key, nil
++}
++
++// NewPrivateKeyMLDSA constructs an ML-DSA private key from its seed.
++func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid private key size")
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	copy(key.seed[:], seed)
++	return key, nil
++}
++
++// Bytes returns the private key seed.
++func (key *PrivateKeyMLDSA) Bytes() []byte {
++	return key.seed[:]
++}
++
++// Parameters returns the parameters associated with this private key.
++func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// PublicKey returns the corresponding public key.
++func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
++	publicKey := &PublicKeyMLDSA{params: key.params}
++	if err := mldsaPublicKey(key.params.paramSet, key.seed[:], publicKey.bytes[:key.params.publicKeySize]); err != nil {
++		panic(err)
++	}
++	return publicKey
++}
++
++// Sign signs message with context using ML-DSA.
++func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
++	return mldsaSign(key.params.paramSet, key.seed[:], message, key.params.signatureSize, context)
++}
++
++// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
++func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
++	return mldsaSignExternalMu(key.params.paramSet, key.seed[:], mu, key.params.signatureSize)
++}
++
++// PublicKeyMLDSA is an ML-DSA public key.
++type PublicKeyMLDSA struct {
++	params MLDSAParameters
++	bytes  [publicKeySizeMLDSA87]byte
++}
++
++// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
++func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(publicKey) != params.publicKeySize {
++		return nil, errors.New("mldsa: invalid public key size")
++	}
++	if hKey, err := importMLDSAPublicKey(params.paramSet, publicKey); err != nil {
++		return nil, err
++	} else {
++		bcrypt.DestroyKey(hKey)
++	}
++	key := &PublicKeyMLDSA{params: params}
++	copy(key.bytes[:], publicKey)
++	return key, nil
++}
++
++// Bytes returns the public key encoding.
++func (key *PublicKeyMLDSA) Bytes() []byte {
++	return key.bytes[:key.params.publicKeySize]
++}
++
++// Parameters returns the parameters associated with this public key.
++func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// Verify verifies an ML-DSA signature.
++func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
++	return mldsaVerify(key.params.paramSet, key.bytes[:key.params.publicKeySize], message, signature, key.params.signatureSize, context)
++}
++
++// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message representative.
++func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
++	return mldsaVerifyExternalMu(key.params.paramSet, key.bytes[:key.params.publicKeySize], mu, signature, key.params.signatureSize)
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-winnative/cng/mlkem.go
 new file mode 100644
 index 00000000000000..f220e1d9d29794
@@ -37243,10 +38944,10 @@ index 00000000000000..56131a6bc93d3f
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
 new file mode 100644
-index 00000000000000..3fe42f9334abd0
+index 00000000000000..7c24727f821191
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-winnative/internal/bcrypt/bcrypt_windows.go
-@@ -0,0 +1,414 @@
+@@ -0,0 +1,434 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -37287,6 +38988,7 @@ index 00000000000000..3fe42f9334abd0
 +	TLS1_1_KDF_ALGORITHM = "TLS1_1_KDF"
 +	TLS1_2_KDF_ALGORITHM = "TLS1_2_KDF"
 +	DSA_ALGORITHM        = "DSA"
++	MLDSA_ALGORITHM      = "ML-DSA"
 +	MLKEM_ALGORITHM      = "ML-KEM"
 +
 +	CHACHA20_POLY1305_ALGORITHM = "CHACHA20_POLY1305"
@@ -37323,6 +39025,9 @@ index 00000000000000..3fe42f9334abd0
 +	ECCPRIVATE_BLOB         = "ECCPRIVATEBLOB"
 +	DSA_PUBLIC_BLOB         = "DSAPUBLICBLOB"
 +	DSA_PRIVATE_BLOB        = "DSAPRIVATEBLOB"
++	PQDSA_PUBLIC_BLOB       = "PQDSAPUBLICBLOB"
++	PQDSA_PRIVATE_BLOB      = "PQDSAPRIVATEBLOB"
++	PQDSA_PRIVATE_SEED_BLOB = "PQDSAPRIVATESEEDBLOB"
 +	MLKEM_PUBLIC_BLOB       = "MLKEMPUBLICBLOB"
 +	MLKEM_PRIVATE_SEED_BLOB = "MLKEMPRIVATESEEDBLOB"
 +)
@@ -37385,8 +39090,11 @@ index 00000000000000..3fe42f9334abd0
 +)
 +
 +const (
-+	// ML-KEM related properties and constants
++	// Post-quantum related properties and constants
 +	PARAMETER_SET_NAME       = "ParameterSetName"
++	MLDSA_PARAMETER_SET_44   = "44"
++	MLDSA_PARAMETER_SET_65   = "65"
++	MLDSA_PARAMETER_SET_87   = "87"
 +	MLKEM_PARAMETER_SET_768  = "768"
 +	MLKEM_PARAMETER_SET_1024 = "1024"
 +)
@@ -37429,11 +39137,13 @@ index 00000000000000..3fe42f9334abd0
 +type PadMode uint32
 +
 +const (
-+	PAD_UNDEFINED PadMode = 0x0
-+	PAD_NONE      PadMode = 0x1
-+	PAD_PKCS1     PadMode = 0x2
-+	PAD_OAEP      PadMode = 0x4
-+	PAD_PSS       PadMode = 0x8
++	PAD_UNDEFINED     PadMode = 0x0
++	PAD_NONE          PadMode = 0x1
++	PAD_PKCS1         PadMode = 0x2
++	PAD_OAEP          PadMode = 0x4
++	PAD_PSS           PadMode = 0x8
++	PAD_PQDSA         PadMode = 0x20
++	MLDSA_EXTERNAL_MU PadMode = 0x40
 +)
 +
 +type AlgorithmProviderFlags uint32
@@ -37463,6 +39173,10 @@ index 00000000000000..3fe42f9334abd0
 +	DSA_PUBLIC_MAGIC_V2     KeyBlobMagicNumber = 0x32425044
 +	DSA_PRIVATE_MAGIC_V2    KeyBlobMagicNumber = 0x32565044
 +
++	MLDSA_PUBLIC_MAGIC       KeyBlobMagicNumber = 0x4B505344
++	MLDSA_PRIVATE_MAGIC      KeyBlobMagicNumber = 0x4B535344
++	MLDSA_PRIVATE_SEED_MAGIC KeyBlobMagicNumber = 0x53535344
++
 +	MLKEM_PUBLIC_MAGIC       KeyBlobMagicNumber = 0x504B4C4D
 +	MLKEM_PRIVATE_MAGIC      KeyBlobMagicNumber = 0x524B4C4D
 +	MLKEM_PRIVATE_SEED_MAGIC KeyBlobMagicNumber = 0x534B4C4D
@@ -37536,6 +39250,13 @@ index 00000000000000..3fe42f9334abd0
 +	Salt  uint32
 +}
 +
++// https://learn.microsoft.com/en-us/windows/win32/api/bcrypt/nf-bcrypt-bcryptsignhash
++type PQDSA_PADDING_INFO struct {
++	Context      *byte
++	ContextSize  uint32
++	PrehashAlgID *uint16
++}
++
 +// https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_rsakey_blob
 +type RSAKEY_BLOB struct {
 +	Magic         KeyBlobMagicNumber
@@ -38256,18 +39977,18 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d72017d2a43c1e..a0df64287bf4ba 100644
+index d72017d2a43c1e..f352d97e430e89 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260317100950-3fc1e29e8efb
++# github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce
 +## explicit; go 1.25
 +github.com/golang-fips/openssl/v2
 +github.com/golang-fips/openssl/v2/bbig
 +github.com/golang-fips/openssl/v2/internal/fakecgo
 +github.com/golang-fips/openssl/v2/internal/ossl
 +github.com/golang-fips/openssl/v2/osslsetup
-+# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260317085126-9a7217034974
++# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b
 +## explicit; go 1.25
 +github.com/microsoft/go-crypto-darwin/bbig
 +github.com/microsoft/go-crypto-darwin/internal/commoncrypto
@@ -38276,7 +39997,7 @@ index d72017d2a43c1e..a0df64287bf4ba 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-winnative v0.0.0-20260307231751-f82d13314c5c
++# github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +## explicit; go 1.25
 +github.com/microsoft/go-crypto-winnative/cng
 +github.com/microsoft/go-crypto-winnative/cng/bbig

From 703cd6df505430b611f7bf8294c54fcd821d0140 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 May 2026 15:13:36 +0000
Subject: [PATCH 858/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util (#2280)

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.11 to 0.0.13.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.11...v0.0.13)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 59b4ea60b6e..353a3db41f9 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.11
+	github.com/microsoft/go-infra v0.0.13
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.54.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 43e7eff2a6c..318abc4e41f 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.11 h1:d0GpEVQ8mlHYrV4HCI8NlpeKAbEXWjYDE6L5SI89XLM=
-github.com/microsoft/go-infra v0.0.11/go.mod h1:ALUdZDL59s9dvJGm0Gpkvm2l6G8RLCVAy+zWY3he1wk=
+github.com/microsoft/go-infra v0.0.13 h1:s7ymSsDJagh35CYuJDc8GJdBqtZ5sE696oi7mxRMnvI=
+github.com/microsoft/go-infra v0.0.13/go.mod h1:+NF5K79FJNpFKRPX7J9g9tZ2NFZa9dM751xWPpF3IgY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=
@@ -59,8 +59,8 @@ golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=
 golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38=
-golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
-golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
+golang.org/x/tools v0.45.0 h1:18qN3FAooORvApf5XjCXgsuayZOEtXf6JK18I3+ONa8=
+golang.org/x/tools v0.45.0/go.mod h1:LuUGqqaXcXMEFEruIVJVm5mgDD8vww/z/SR1gQ4uE/0=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

From 8e68dfbd1ec26228c7b4430b494071718714bad5 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 15 May 2026 16:03:49 +0000
Subject: [PATCH 859/887] Update submodule to latest master (212065c9):
 cmd/compile: shuffle bits.Sub intrinsic generation on amd64

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 364de84f360..212065c9221 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 364de84f3609e320490ae89ac1543883966f3c5d
+Subproject commit 212065c9221bc01b176ce5820fccae19c2a54c4b

From bbc786d53d276bfb9b0f3a09b9f06f43e430b11f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 May 2026 18:55:52 +0000
Subject: [PATCH 860/887] build(deps): bump
 microsoft/go-infra/.github/workflows/check-line-endings.yml (#2281)

Bumps [microsoft/go-infra/.github/workflows/check-line-endings.yml](https://github.com/microsoft/go-infra) from 0.0.11 to 0.0.13.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/5e6a5b28f97bcd009df177f658149009d29d1b1c...f4e3833067a0e64dbf9581e3e4d2df2a353f6dd0)

---
updated-dependencies:
- dependency-name: microsoft/go-infra/.github/workflows/check-line-endings.yml
  dependency-version: 0.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/check-line-endings.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check-line-endings.yml b/.github/workflows/check-line-endings.yml
index 1045dc7187d..ec9c12e13e1 100644
--- a/.github/workflows/check-line-endings.yml
+++ b/.github/workflows/check-line-endings.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   check-line-endings:
-    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@5e6a5b28f97bcd009df177f658149009d29d1b1c # v0.0.11
+    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@f4e3833067a0e64dbf9581e3e4d2df2a353f6dd0 # v0.0.13

From 787fceabcbb7b11f973d00a86114660524348066 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 19:21:34 +0000
Subject: [PATCH 861/887] build(deps): bump github/codeql-action from 4.35.4 to
 4.35.5

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.35.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.35.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 732abc786cb..110248f748a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/autobuild@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
         with:
           category: /language:go

From 0aa3f273b38217abd66760852746e372dc34edfa Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 20 May 2026 08:57:42 +0000
Subject: [PATCH 862/887] Update submodule to latest `master` in
 `microsoft/main` (#2284)

* Update submodule to latest master (6997bcd8): crypto/x509: add RawSignatureAlgorithm

* resolve 3-way merge conflicts

* Fix test JSON JUnit conversion timing

* move SystemCrypto flag

* float json patch

---------

Co-authored-by: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
Co-authored-by: George Adams <georgeadams1995@gmail.com>
Co-authored-by: qmuntal <quimmuntal@gmail.com>
---
 eng/_util/buildutil/testjson.go               | 76 ++++++++-------
 eng/_util/buildutil/testjson_test.go          | 94 +++++++++++++++++++
 go                                            |  2 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch | 24 ++---
 ...ix-JSON-processing-of-trailing-bytes.patch | 51 ++++++++++
 5 files changed, 201 insertions(+), 46 deletions(-)
 create mode 100644 eng/_util/buildutil/testjson_test.go
 create mode 100644 patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch

diff --git a/eng/_util/buildutil/testjson.go b/eng/_util/buildutil/testjson.go
index 214e70ef055..303a3ae6b28 100644
--- a/eng/_util/buildutil/testjson.go
+++ b/eng/_util/buildutil/testjson.go
@@ -49,44 +49,40 @@ func (f *TestJSONFlags) AppendToCmdline(cmdline []string) []string {
 func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 	var writers []io.Writer
 	var needJSON bool
+	var rawTestOutFile string
+	var removeRawTestOutFile bool
+	var rawTestOut *os.File
 
 	if f != nil {
-		if f.JUnitOutFile != "" {
-			var jf *os.File
-			if err := os.MkdirAll(filepath.Dir(f.JUnitOutFile), 0o755); err != nil {
-				return fmt.Errorf("failed to create directory for JUnit output: %v", err)
+		if f.RawTestOutFile != "" || f.JUnitOutFile != "" {
+			rawTestOutFile = f.RawTestOutFile
+			if rawTestOutFile != "" {
+				if err := os.MkdirAll(filepath.Dir(rawTestOutFile), 0o755); err != nil {
+					return fmt.Errorf("failed to create directory for raw test output: %v", err)
+				}
+				rawTestOut, err = os.Create(rawTestOutFile)
+			} else {
+				rawTestOut, err = os.CreateTemp("", "go-test-json-*.txt")
 			}
-			if jf, err = os.Create(f.JUnitOutFile); err != nil {
-				return err
+			if err != nil {
+				return fmt.Errorf("failed to create raw test output: %v", err)
 			}
-			defer func() {
-				err = errors.Join(err, jf.Close())
-			}()
-			c := json2junit.NewConverterWithOptions(jf, &json2junit.Options{
-				IncludePackageInTestName: true,
-			})
-			defer func() {
-				err = errors.Join(err, c.Close())
-			}()
-			writers = append(writers, c)
-			needJSON = true
-		}
-		if f.RawTestOutFile != "" {
-			var rf *os.File
-			if err := os.MkdirAll(filepath.Dir(f.RawTestOutFile), 0o755); err != nil {
-				return fmt.Errorf("failed to create directory for raw test output: %v", err)
+			if rawTestOutFile == "" {
+				rawTestOutFile = rawTestOut.Name()
+				removeRawTestOutFile = true
+			}
+			if removeRawTestOutFile {
+				defer func() {
+					err = errors.Join(err, os.Remove(rawTestOutFile))
+				}()
 			}
-			if rf, err = os.Create(f.RawTestOutFile); err != nil {
-				return err
+			if f.RawTestOutFile != "" {
+				writers = append(writers, &testJSONSummaryConverter{w: os.Stdout})
+			}
+			writers = append(writers, rawTestOut)
+			if f.RawTestOutFile == "" {
+				writers = append(writers, os.Stdout)
 			}
-			defer func() {
-				err = errors.Join(err, rf.Close())
-			}()
-			writers = append(
-				writers,
-				&testJSONSummaryConverter{w: os.Stdout},
-				rf,
-			)
 			needJSON = true
 		} else {
 			// If we don't summarize, we need to write directly to stdout.
@@ -97,7 +93,21 @@ func (f *TestJSONFlags) RunTestCmd(cmdline []string) (err error) {
 		cmdline = append(cmdline, "-json")
 	}
 
-	return RunCmdMultiWriter(cmdline, writers...)
+	runErr := RunCmdMultiWriter(cmdline, writers...)
+	if rawTestOut != nil {
+		runErr = errors.Join(runErr, rawTestOut.Close())
+	}
+
+	if f != nil && f.JUnitOutFile != "" {
+		// Convert after the command exits so a converter error can't close the
+		// test process' stdout pipe and truncate the raw output.
+		runErr = errors.Join(runErr, json2junit.ConvertFileWithOptions(
+			f.JUnitOutFile,
+			rawTestOutFile,
+			&json2junit.Options{IncludePackageInTestName: true},
+		))
+	}
+	return runErr
 }
 
 // testJSONSummaryConverter reads Go JSON test output and writes a summary that
diff --git a/eng/_util/buildutil/testjson_test.go b/eng/_util/buildutil/testjson_test.go
new file mode 100644
index 00000000000..191e5c54100
--- /dev/null
+++ b/eng/_util/buildutil/testjson_test.go
@@ -0,0 +1,94 @@
+// Copyright (c) Microsoft Corporation.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package buildutil
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func TestRunTestCmdConvertsRawOutputAfterCommand(t *testing.T) {
+	t.Setenv("GO_WANT_TESTJSON_HELPER_PROCESS", "good-json")
+
+	tmpDir := t.TempDir()
+	rawOut := filepath.Join(tmpDir, "raw.jsonl")
+	junitOut := filepath.Join(tmpDir, "test-results.xml")
+	flags := &TestJSONFlags{
+		JUnitOutFile:   junitOut,
+		RawTestOutFile: rawOut,
+	}
+
+	if err := flags.RunTestCmd([]string{os.Args[0], "-test.run=TestRunTestCmdHelperProcess", "--"}); err != nil {
+		t.Fatal(err)
+	}
+
+	raw, err := os.ReadFile(rawOut)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(string(raw), "TestDescribeConflict") {
+		t.Fatalf("raw output does not contain test event:\n%s", raw)
+	}
+
+	junit, err := os.ReadFile(junitOut)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(string(junit), `name="net/http.TestDescribeConflict"`) {
+		t.Fatalf("JUnit output does not contain package-prefixed test name:\n%s", junit)
+	}
+}
+
+func TestRunTestCmdPreservesRawOutputWhenJUnitConversionFails(t *testing.T) {
+	t.Setenv("GO_WANT_TESTJSON_HELPER_PROCESS", "bad-json")
+
+	tmpDir := t.TempDir()
+	rawOut := filepath.Join(tmpDir, "raw.jsonl")
+	junitOut := filepath.Join(tmpDir, "test-results.xml")
+	flags := &TestJSONFlags{
+		JUnitOutFile:   junitOut,
+		RawTestOutFile: rawOut,
+	}
+
+	err := flags.RunTestCmd([]string{os.Args[0], "-test.run=TestRunTestCmdHelperProcess", "--"})
+	if err == nil {
+		t.Fatal("expected JUnit conversion to fail")
+	}
+	if !strings.Contains(err.Error(), "no run entry for TestMissing") {
+		t.Fatalf("expected missing run entry error, got %v", err)
+	}
+
+	raw, err := os.ReadFile(rawOut)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !strings.Contains(string(raw), "TestMissing") {
+		t.Fatalf("raw output does not contain failing converter line:\n%s", raw)
+	}
+}
+
+func TestRunTestCmdHelperProcess(t *testing.T) {
+	switch os.Getenv("GO_WANT_TESTJSON_HELPER_PROCESS") {
+	case "good-json":
+		fmt.Print(`{"Time":"2026-05-19T07:24:14Z","Action":"start","Package":"net/http"}
+{"Time":"2026-05-19T07:24:14Z","Action":"run","Package":"net/http","Test":"TestDescribeConflict"}
+{"Time":"2026-05-19T07:24:14Z","Action":"output","Package":"net/http","Test":"TestDescribeConflict","Output":"=== RUN   TestDescribeConflict\n"}
+{"Time":"2026-05-19T07:24:14Z","Action":"pass","Package":"net/http","Test":"TestDescribeConflict","Elapsed":0}
+{"Time":"2026-05-19T07:24:14Z","Action":"pass","Package":"net/http","Elapsed":0}
+`)
+	case "bad-json":
+		fmt.Print(`{"Time":"2026-05-19T07:24:14Z","Action":"start","Package":"net/http"}
+{"Time":"2026-05-19T07:24:14Z","Action":"run","Package":"net/http","Test":"TestDescribeConflict"}
+{"Time":"2026-05-19T07:24:14Z","Action":"pass","Package":"net/http","Test":"TestDescribeConflict","Elapsed":0}
+{"Time":"2026-05-19T07:24:14Z","Action":"pass","Package":"net/http","Test":"TestMissing","Elapsed":0}
+`)
+	default:
+		return
+	}
+	os.Exit(0)
+}
diff --git a/go b/go
index 212065c9221..6997bcd820a 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 212065c9221bc01b176ce5820fccae19c2a54c4b
+Subproject commit 6997bcd820a70664b9d353092bd46bf0b88c4eac
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 8f177e34d61..89266518b64 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -290,7 +290,7 @@ index 89fd74eb823162..6d266ff641d721 100644
  var Error error
  
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index c8506d41bb240f..ec32ea2b4bf13c 100644
+index 3c7e2aa7d442d2..87b50da167e5e6 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -340,15 +340,15 @@ index c8506d41bb240f..ec32ea2b4bf13c 100644
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
  	// https://github.com/golang/go/issues/26379#issuecomment-2677068742
-@@ -84,6 +110,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
- 		Dwarf5:               dwarf5Supported,
- 		RandomizedHeapBase64: true,
- 		GreenTeaGC:           true,
+@@ -79,6 +105,7 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 	dwarf5Supported := (goos != "darwin" && goos != "ios" && goos != "aix")
+ 
+ 	baseline := goexperiment.Flags{
 +		SystemCrypto:         systemCryptoSupported, // if system crypto is supported, enable it by default
- 	}
- 	flags := &ExperimentFlags{
- 		Flags:    baseline,
-@@ -123,6 +150,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+ 		RegabiWrappers:       regabiSupported,
+ 		RegabiArgs:           regabiSupported,
+ 		Dwarf5:               dwarf5Supported,
+@@ -124,6 +151,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -359,7 +359,7 @@ index c8506d41bb240f..ec32ea2b4bf13c 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -149,6 +180,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -150,6 +181,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
@@ -522,10 +522,10 @@ index 17fe15270aba60..5f09ad11a701e2 100644
  	// enabled individually. Not all combinations work.
  	// The "regabi" GOEXPERIMENT is an alias for all "working"
 diff --git a/src/internal/platform/supported.go b/src/internal/platform/supported.go
-index 6cee00a7aebcdb..1182e37b86c0fc 100644
+index 6f37e368596498..471c5cc430bb29 100644
 --- a/src/internal/platform/supported.go
 +++ b/src/internal/platform/supported.go
-@@ -281,3 +281,15 @@ func FirstClass(goos, goarch string) bool {
+@@ -279,3 +279,15 @@ func FirstClass(goos, goarch string) bool {
  func Broken(goos, goarch string) bool {
  	return distInfo[OSArch{goos, goarch}].Broken
  }
diff --git a/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch b/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch
new file mode 100644
index 00000000000..380749c3429
--- /dev/null
+++ b/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch
@@ -0,0 +1,51 @@
+From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
+From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
+Date: Tue, 19 May 2026 11:42:41 -0700
+Subject: [PATCH] cmd/dist: fix JSON processing of trailing bytes
+
+The testJSONFilter.process was implicitly depending
+on the exact internal buffer size of the json.Decoder,
+which happened to be large enough in v1 for most lines
+that cmd/dist cared about.
+
+However, the re-implementation of v1 using encoding/json/v2
+changes the implicit buffer size used, which results in
+some trailing bytes accidentally being discarded.
+
+The correct use of json.Decoder.Buffered requires also
+consulting the input io.Reader for additional trailing data.
+
+Fixes #79498
+
+Change-Id: If4bdac12b638d78e0870808f2285fb1731b0fae6
+Reviewed-on: https://go-review.googlesource.com/c/go/+/779980
+Reviewed-by: Michael Pratt <mpratt@google.com>
+Reviewed-by: Damien Neil <dneil@google.com>
+Auto-Submit: Damien Neil <dneil@google.com>
+LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
+---
+ src/cmd/dist/testjson.go | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/src/cmd/dist/testjson.go b/src/cmd/dist/testjson.go
+index c190c665ebf779..8ae6e8905d578c 100644
+--- a/src/cmd/dist/testjson.go
++++ b/src/cmd/dist/testjson.go
+@@ -80,7 +80,8 @@ func (f *testJSONFilter) process(line []byte) {
+ 		// struct, or other additions outside of it. If humans are ever looking
+ 		// at the output, it's really nice to keep field order because it
+ 		// preserves a lot of regularity in the output.
+-		dec := json.NewDecoder(bytes.NewBuffer(line))
++		lineBuf := bytes.NewBuffer(line)
++		dec := json.NewDecoder(lineBuf)
+ 		dec.UseNumber()
+ 		val, err := decodeJSONValue(dec)
+ 		if err == nil && val.atom == json.Delim('{') {
+@@ -105,6 +106,7 @@ func (f *testJSONFilter) process(line []byte) {
+ 				// Copy any trailing text. We expect at most a "\n" here, but
+ 				// there could be other text and we want to feed that through.
+ 				io.Copy(f.w, dec.Buffered())
++				io.Copy(f.w, lineBuf)
+ 				return
+ 			}
+ 		}

From a2a3044752c3fb44f722549713328bad14aa1167 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 20 May 2026 09:02:53 +0000
Subject: [PATCH 863/887] Update submodule to latest master (47f26133):
 cmd/internal/obj/loong64: add ll.acq.{w,d}, sc.rel.{w,d}, sc.q instruction

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 6997bcd820a..47f26133bd6 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 6997bcd820a70664b9d353092bd46bf0b88c4eac
+Subproject commit 47f26133bd6f63ea659ce28bfdb7761de96964d0

From 44866a7b79461cd8226dc6192955454773883b14 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 20 May 2026 14:39:31 +0200
Subject: [PATCH 864/887] fix conflicts

---
 .../0001-Vendor-external-dependencies.patch   |  16 +-
 ...002-Add-crypto-backend-GOEXPERIMENTs.patch |  16 +-
 ...03-Implement-crypto-internal-backend.patch |  30 +-
 patches/0004-Use-crypto-backends.patch        | 394 ++++++++++--------
 ...nt-ms_tls_config_schannel-experiment.patch |  36 +-
 ...TLS-settings-with-Microsoft-policies.patch | 230 +++++-----
 ...ix-JSON-processing-of-trailing-bytes.patch |  51 ---
 7 files changed, 378 insertions(+), 395 deletions(-)
 delete mode 100644 patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index cbd39cdab58..69cc45138d0 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -533,7 +533,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 930247f4c895b7..080a70ec79a1a7 100644
+index 938fdb2955f766..5e8404e1a7e2ea 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -544,9 +544,9 @@ index 930247f4c895b7..080a70ec79a1a7 100644
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
  	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
- 	golang.org/x/mod v0.35.0
+ 	golang.org/x/mod v0.36.1-0.20260513122029-343ee60345a1
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 89e5f334cfffbb..03092e84af8453 100644
+index d78128ce1beace..a607cee2c045d6 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -2226,7 +2226,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 6ba72c229f6240..52e14e559e925d 100644
+index 68ae04853cc802..703836c46ee18e 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2304,7 +2304,7 @@ index 43554ff45c183e..143b3063c17042 100644
  golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
  golang.org/x/net v0.54.1-0.20260509022215-ad8140e0aa2e h1:ITxjUIeFp/ACbvnNlOZLoDmomcET3Yt4lFMgeqBebXk=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 752f90091425a8..4adb0db977e5a5 100644
+index 25cb06182cae3d..02b52e2ab9c296 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -153,6 +153,13 @@ var depsRules = `
@@ -2373,7 +2373,7 @@ index 752f90091425a8..4adb0db977e5a5 100644
  	< crypto/internal/boring
  	< crypto/boring
  	< crypto/internal/rand
-@@ -570,6 +607,10 @@ var depsRules = `
+@@ -571,6 +608,10 @@ var depsRules = `
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
@@ -2384,7 +2384,7 @@ index 752f90091425a8..4adb0db977e5a5 100644
  	CRYPTO, FMT, math/big, internal/saferio
  	< crypto/internal/boring/bbig
  	< crypto/internal/fips140cache
-@@ -940,7 +981,7 @@ var buildIgnore = []byte("\n//go:build ignore")
+@@ -947,7 +988,7 @@ var buildIgnore = []byte("\n//go:build ignore")
  
  func findImports(pkg string) ([]string, error) {
  	vpkg := pkg
@@ -2393,7 +2393,7 @@ index 752f90091425a8..4adb0db977e5a5 100644
  		vpkg = "vendor/" + pkg
  	}
  	dir := filepath.Join(Default.GOROOT, "src", vpkg)
-@@ -950,7 +991,7 @@ func findImports(pkg string) ([]string, error) {
+@@ -957,7 +998,7 @@ func findImports(pkg string) ([]string, error) {
  	}
  	var imports []string
  	var haveImport = map[string]bool{}
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 89266518b64..31d03738a0b 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -47,7 +47,7 @@ maintain this feature. For more information, see the test files.
  create mode 100644 src/internal/goexperiment/exp_systemcrypto_on.go
 
 diff --git a/src/cmd/go/alldocs.go b/src/cmd/go/alldocs.go
-index 560cdb28fe5e86..7c4bf70b24f9c7 100644
+index 74cafe9613917d..31ce076273aba2 100644
 --- a/src/cmd/go/alldocs.go
 +++ b/src/cmd/go/alldocs.go
 @@ -2616,6 +2616,9 @@
@@ -290,7 +290,7 @@ index 89fd74eb823162..6d266ff641d721 100644
  var Error error
  
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 3c7e2aa7d442d2..87b50da167e5e6 100644
+index 8eeef17c1f470e..d474ed1d4d466d 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -6,6 +6,7 @@ package buildcfg
@@ -344,11 +344,11 @@ index 3c7e2aa7d442d2..87b50da167e5e6 100644
  	dwarf5Supported := (goos != "darwin" && goos != "ios" && goos != "aix")
  
  	baseline := goexperiment.Flags{
-+		SystemCrypto:         systemCryptoSupported, // if system crypto is supported, enable it by default
- 		RegabiWrappers:       regabiSupported,
- 		RegabiArgs:           regabiSupported,
- 		Dwarf5:               dwarf5Supported,
-@@ -124,6 +151,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
++		SystemCrypto:          systemCryptoSupported,
+ 		RegabiWrappers:        regabiSupported,
+ 		RegabiArgs:            regabiSupported,
+ 		Dwarf5:                dwarf5Supported,
+@@ -126,6 +153,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  				// to build with any experiment flags.
  				flags.Flags = goexperiment.Flags{}
  				continue
@@ -359,7 +359,7 @@ index 3c7e2aa7d442d2..87b50da167e5e6 100644
  			}
  			val := true
  			if strings.HasPrefix(f, "no") {
-@@ -150,6 +181,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -152,6 +183,9 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.RegabiArgs && !flags.RegabiWrappers {
  		return nil, fmt.Errorf("GOEXPERIMENT regabiargs requires regabiwrappers")
  	}
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index b6771ff037a..722be26c37a 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -146,7 +146,7 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index a0f8d8dd372088..6a1a5258b22dc8 100644
+index de2c7be2e833f9..415f4baeff2510 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
 @@ -1398,6 +1398,80 @@ func toolenv() []string {
@@ -247,7 +247,7 @@ index a0f8d8dd372088..6a1a5258b22dc8 100644
  	if debug {
  		run("", ShowOutput|CheckExit, pathf("%s/compile", tooldir), "-V=full")
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 2c1cc27d58cc11..7f66bb58d1580f 100644
+index aadb1ff52b067f..dab28b6f1ced0a 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
 @@ -158,10 +158,12 @@ func (t *tester) run() {
@@ -277,7 +277,7 @@ index 2c1cc27d58cc11..7f66bb58d1580f 100644
  		}
  	}
  
-@@ -766,7 +768,9 @@ func (t *tester) registerTests() {
+@@ -774,7 +776,9 @@ func (t *tester) registerTests() {
  	}
  
  	// Test ios/amd64 for the iOS simulator.
@@ -288,7 +288,7 @@ index 2c1cc27d58cc11..7f66bb58d1580f 100644
  		t.registerTest("GOOS=ios on darwin/amd64",
  			&goTest{
  				variant:  "amd64ios",
-@@ -1015,7 +1019,9 @@ func (t *tester) registerTests() {
+@@ -1023,7 +1027,9 @@ func (t *tester) registerTests() {
  		t.registerRaceTests()
  	}
  
@@ -705,18 +705,18 @@ index 19ed197a20b57e..5e592c7c6697d7 100644
  		if !strings.Contains(buildVersion, "-") { // See go.dev/issue/75953.
  			sep = "-"
 diff --git a/src/cmd/link/link_test.go b/src/cmd/link/link_test.go
-index 941cee36a62a4b..4ccd22da3bcd0a 100644
+index e7c406c4ad1eb8..ac36a6dd1ca1a0 100644
 --- a/src/cmd/link/link_test.go
 +++ b/src/cmd/link/link_test.go
-@@ -12,6 +12,7 @@ import (
- 	"debug/pe"
+@@ -13,6 +13,7 @@ import (
  	"errors"
  	"internal/abi"
+ 	"internal/buildcfg"
 +	"internal/goexperiment"
  	"internal/platform"
  	"internal/testenv"
  	"internal/xcoff"
-@@ -367,6 +368,9 @@ func TestBuildForTvOS(t *testing.T) {
+@@ -368,6 +369,9 @@ func TestBuildForTvOS(t *testing.T) {
  	if runtime.GOOS != "darwin" {
  		t.Skip("skipping on non-darwin platform")
  	}
@@ -726,7 +726,7 @@ index 941cee36a62a4b..4ccd22da3bcd0a 100644
  	if testing.Short() && testenv.Builder() == "" {
  		t.Skip("skipping in -short mode with $GO_BUILDER_NAME empty")
  	}
-@@ -597,6 +601,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
+@@ -598,6 +602,10 @@ func TestIssue34788Android386TLSSequence(t *testing.T) {
  		t.Skip("skipping on non-{linux,darwin}/amd64 platform")
  	}
  
@@ -3307,7 +3307,7 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 4adb0db977e5a5..0b7d08133be300 100644
+index 02b52e2ab9c296..7794e12bc86890 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -368,7 +368,7 @@ var depsRules = `
@@ -3344,7 +3344,7 @@ index 4adb0db977e5a5..0b7d08133be300 100644
  	FIPS, internal/godebug, embed,
  	crypto/internal/boring/sig,
  	crypto/internal/boring/syso,
-@@ -611,8 +622,15 @@ var depsRules = `
+@@ -612,8 +623,15 @@ var depsRules = `
  	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
  	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
  
@@ -3363,7 +3363,7 @@ index 4adb0db977e5a5..0b7d08133be300 100644
  	< crypto/rand
  	< crypto/ed25519 # depends on crypto/rand.Reader
 diff --git a/src/internal/buildcfg/exp.go b/src/internal/buildcfg/exp.go
-index 35b4d011584f52..1029dc8eb4fc83 100644
+index d474ed1d4d466d..864f3ab2f05a66 100644
 --- a/src/internal/buildcfg/exp.go
 +++ b/src/internal/buildcfg/exp.go
 @@ -8,9 +8,11 @@ import (
@@ -3397,7 +3397,7 @@ index 35b4d011584f52..1029dc8eb4fc83 100644
  
  	// Older versions (anything before V16) of dsymutil don't handle
  	// the .debug_rnglists section in DWARF5. See
-@@ -159,6 +151,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -162,6 +154,16 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  			if strings.HasPrefix(f, "no") {
  				f, val = f[2:], false
  			}
@@ -3414,7 +3414,7 @@ index 35b4d011584f52..1029dc8eb4fc83 100644
  			set, ok := names[f]
  			if !ok {
  				return nil, fmt.Errorf("unknown GOEXPERIMENT %s", f)
-@@ -183,6 +185,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
+@@ -186,6 +188,10 @@ func ParseGOEXPERIMENT(goos, goarch, goexp string) (*ExperimentFlags, error) {
  	if flags.BoringCrypto {
  		return nil, fmt.Errorf("GOEXPERIMENT boringcrypto is not supported in the Microsoft build of Go")
  	}
@@ -3425,7 +3425,7 @@ index 35b4d011584f52..1029dc8eb4fc83 100644
  	return flags, nil
  }
  
-@@ -192,6 +198,26 @@ func (exp *ExperimentFlags) String() string {
+@@ -195,6 +201,26 @@ func (exp *ExperimentFlags) String() string {
  	return strings.Join(expList(&exp.Flags, &exp.baseline, false), ",")
  }
  
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 79512a9fde5..61c1b637fff 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -56,7 +56,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/rand/rand.go              |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
- src/crypto/mlkem/mlkem.go                     | 109 ++++++++--
+ src/crypto/mlkem/mlkem.go                     | 119 +++++++++--
  src/crypto/mlkem/mlkem_test.go                |   8 +
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
@@ -66,7 +66,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/rc4/rc4.go                         |  18 ++
  src/crypto/rsa/boring.go                      |  13 +-
  src/crypto/rsa/boring_test.go                 |   2 +-
- src/crypto/rsa/fips.go                        |  84 ++++----
+ src/crypto/rsa/fips.go                        |  94 +++++----
  src/crypto/rsa/notboring.go                   |   4 +-
  src/crypto/rsa/pkcs1v15.go                    |  10 +-
  src/crypto/rsa/pkcs1v15_test.go               |   5 +
@@ -102,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 98 files changed, 1615 insertions(+), 244 deletions(-)
+ 98 files changed, 1628 insertions(+), 251 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -128,10 +128,10 @@ index f0e3575637c62a..9eab3b4e66e60b 100644
  package main
  
 diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
-index 7f66bb58d1580f..03cca6183229f9 100644
+index dab28b6f1ced0a..3263a1700e5980 100644
 --- a/src/cmd/dist/test.go
 +++ b/src/cmd/dist/test.go
-@@ -714,7 +714,7 @@ func (t *tester) registerTests() {
+@@ -722,7 +722,7 @@ func (t *tester) registerTests() {
  	})
  
  	// Check that all crypto packages compile (and test correctly, in longmode) with fips.
@@ -140,7 +140,7 @@ index 7f66bb58d1580f..03cca6183229f9 100644
  		// Test standard crypto packages with fips140=on.
  		t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
  			variant: "gofips140",
-@@ -1378,12 +1378,11 @@ func (t *tester) registerCgoTests(heading string) {
+@@ -1386,12 +1386,11 @@ func (t *tester) registerCgoTests(heading string) {
  			// a C linker warning on Linux.
  			// in function `bio_ip_and_port_to_socket_and_addr':
  			// warning: Using 'getaddrinfo' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
@@ -219,7 +219,7 @@ index 4aaf46b5d0f0dc..ec58a217400caa 100644
  
  go list -f '{{.Dir}}' vendor/golang.org/x/net/http2/hpack
 diff --git a/src/cmd/link/internal/ld/config.go b/src/cmd/link/internal/ld/config.go
-index 802fb35aee4e65..4416731b69ec26 100644
+index acbebf28598a9c..5f6d8a91ea384c 100644
 --- a/src/cmd/link/internal/ld/config.go
 +++ b/src/cmd/link/internal/ld/config.go
 @@ -7,6 +7,7 @@ package ld
@@ -245,7 +245,7 @@ index 802fb35aee4e65..4416731b69ec26 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 3db1a6490c3ce9..718216a015b268 100644
+index 9cbc12919f1d00..f61d9515e4d3b0 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1177,6 +1177,12 @@ var hostobj []Hostobj
@@ -382,7 +382,7 @@ index 8e63ed7e668a4c..10ed72d2540b6e 100644
  		panic("crypto/cipher: use of CTR with non-AES ciphers is not allowed in FIPS 140-only mode")
  	}
 diff --git a/src/crypto/cipher/ctr_aes_test.go b/src/crypto/cipher/ctr_aes_test.go
-index 1d8ae78674ebe2..1ce8f093834d55 100644
+index b6620d182fefc7..d89be99cf57545 100644
 --- a/src/crypto/cipher/ctr_aes_test.go
 +++ b/src/crypto/cipher/ctr_aes_test.go
 @@ -14,7 +14,7 @@ import (
@@ -395,10 +395,10 @@ index 1d8ae78674ebe2..1ce8f093834d55 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"encoding/binary"
 diff --git a/src/crypto/cipher/gcm.go b/src/crypto/cipher/gcm.go
-index 88892e155551b3..675dbed240e8af 100644
+index f2cf6248dc8c9b..663d418c4e5631 100644
 --- a/src/crypto/cipher/gcm.go
 +++ b/src/crypto/cipher/gcm.go
-@@ -93,6 +93,15 @@ func newGCM(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+@@ -89,6 +89,15 @@ func newGCM(cipher Block, nonceSize, tagSize int) (AEAD, error) {
  func NewGCMWithRandomNonce(cipher Block) (AEAD, error) {
  	c, ok := cipher.(*aes.Block)
  	if !ok {
@@ -414,7 +414,7 @@ index 88892e155551b3..675dbed240e8af 100644
  		return nil, errors.New("cipher: NewGCMWithRandomNonce requires aes.Block")
  	}
  	g, err := gcm.New(c, gcmStandardNonceSize, gcmTagSize)
-@@ -103,7 +112,7 @@ func NewGCMWithRandomNonce(cipher Block) (AEAD, error) {
+@@ -99,7 +108,7 @@ func NewGCMWithRandomNonce(cipher Block) (AEAD, error) {
  }
  
  type gcmWithRandomNonce struct {
@@ -423,7 +423,7 @@ index 88892e155551b3..675dbed240e8af 100644
  }
  
  func (g gcmWithRandomNonce) NonceSize() int {
-@@ -157,7 +166,14 @@ func (g gcmWithRandomNonce) Seal(dst, nonce, plaintext, additionalData []byte) [
+@@ -153,7 +162,14 @@ func (g gcmWithRandomNonce) Seal(dst, nonce, plaintext, additionalData []byte) [
  		plaintext = ciphertext[:len(plaintext)]
  	}
  
@@ -439,7 +439,7 @@ index 88892e155551b3..675dbed240e8af 100644
  	return ret
  }
  
-@@ -190,7 +206,7 @@ func (g gcmWithRandomNonce) Open(dst, nonce, ciphertext, additionalData []byte)
+@@ -186,7 +202,7 @@ func (g gcmWithRandomNonce) Open(dst, nonce, ciphertext, additionalData []byte)
  		ciphertext = ciphertext[gcmStandardNonceSize:]
  	}
  
@@ -448,7 +448,7 @@ index 88892e155551b3..675dbed240e8af 100644
  	if err != nil {
  		return nil, err
  	}
-@@ -204,6 +220,14 @@ type gcmAble interface {
+@@ -200,6 +216,14 @@ type gcmAble interface {
  	NewGCM(nonceSize, tagSize int) (AEAD, error)
  }
  
@@ -463,7 +463,7 @@ index 88892e155551b3..675dbed240e8af 100644
  func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
  	if tagSize < gcmMinimumTagSize || tagSize > gcmBlockSize {
  		return nil, errors.New("cipher: incorrect tag size given to GCM")
-@@ -212,7 +236,16 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+@@ -208,7 +232,16 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
  		return nil, errors.New("cipher: the nonce can't have zero length")
  	}
  	if cipher, ok := cipher.(gcmAble); ok {
@@ -481,7 +481,7 @@ index 88892e155551b3..675dbed240e8af 100644
  	}
  	if cipher.BlockSize() != gcmBlockSize {
  		return nil, errors.New("cipher: NewGCM requires 128-bit block cipher")
-@@ -220,6 +253,24 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
+@@ -216,6 +249,24 @@ func newGCMFallback(cipher Block, nonceSize, tagSize int) (AEAD, error) {
  	return &gcmFallback{cipher: cipher, nonceSize: nonceSize, tagSize: tagSize}, nil
  }
  
@@ -1132,7 +1132,7 @@ index 275c60b4de49eb..ff8bddf28c4545 100644
  	"math/big"
  )
 diff --git a/src/crypto/ecdsa/ecdsa.go b/src/crypto/ecdsa/ecdsa.go
-index b336f32eb69ef5..1eb2604505e229 100644
+index 40a89017570171..a0fb823b7c9197 100644
 --- a/src/crypto/ecdsa/ecdsa.go
 +++ b/src/crypto/ecdsa/ecdsa.go
 @@ -20,8 +20,8 @@ import (
@@ -1146,7 +1146,7 @@ index b336f32eb69ef5..1eb2604505e229 100644
  	"crypto/internal/fips140/ecdsa"
  	"crypto/internal/fips140/nistec"
  	"crypto/internal/fips140cache"
-@@ -334,7 +334,7 @@ func (priv *PrivateKey) Sign(random io.Reader, digest []byte, opts crypto.Signer
+@@ -339,7 +339,7 @@ func (priv *PrivateKey) Sign(random io.Reader, digest []byte, opts crypto.Signer
  // ignored unless GODEBUG=cryptocustomrand=1 is set. This setting will be removed
  // in a future Go release. Instead, use [testing/cryptotest.SetGlobalRandom].
  func GenerateKey(c elliptic.Curve, r io.Reader) (*PrivateKey, error) {
@@ -1155,19 +1155,19 @@ index b336f32eb69ef5..1eb2604505e229 100644
  		x, y, d, err := boring.GenerateKeyECDSA(c.Params().Name)
  		if err != nil {
  			return nil, err
-@@ -380,7 +380,7 @@ func generateFIPS[P ecdsa.Point[P]](curve elliptic.Curve, c *ecdsa.Curve[P], ran
- // is set. This setting will be removed in a future Go release. Instead, use
- // [testing/cryptotest.SetGlobalRandom].
- func SignASN1(r io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
+@@ -389,7 +389,7 @@ func SignASN1(r io.Reader, priv *PrivateKey, hash []byte) ([]byte, error) {
+ 		return nil, errors.New("ecdsa: hash cannot be empty")
+ 	}
+ 
 -	if boring.Enabled && rand.IsDefaultReader(r) {
 +	if boring.Enabled && rand.IsDefaultReader(r) && boring.SupportsCurve(priv.Curve.Params().Name) {
  		b, err := boringPrivateKey(priv)
  		if err != nil {
  			return nil, err
-@@ -494,7 +494,7 @@ func addASN1IntBytes(b *cryptobyte.Builder, bytes []byte) {
- // The inputs are not considered confidential, and may leak through timing side
- // channels, or if an attacker has control of part of the inputs.
- func VerifyASN1(pub *PublicKey, hash, sig []byte) bool {
+@@ -510,7 +510,7 @@ func VerifyASN1(pub *PublicKey, hash, sig []byte) bool {
+ 		return false
+ 	}
+ 
 -	if boring.Enabled {
 +	if boring.Enabled && boring.SupportsCurve(pub.Curve.Params().Name) {
  		key, err := boringPublicKey(pub)
@@ -1678,7 +1678,7 @@ index 70055af70b42ec..21528faa0d6145 100644
  	if race.Enabled || msan.Enabled || asan.Enabled {
  		t.Skip("skipping allocations test with sanitizers")
 diff --git a/src/crypto/internal/cryptotest/fips140.go b/src/crypto/internal/cryptotest/fips140.go
-index 54c796197a29e2..f4c1d0a681753b 100644
+index a4c9fc977bc136..ef9fa5d540bd8b 100644
 --- a/src/crypto/internal/cryptotest/fips140.go
 +++ b/src/crypto/internal/cryptotest/fips140.go
 @@ -5,6 +5,8 @@
@@ -1690,22 +1690,22 @@ index 54c796197a29e2..f4c1d0a681753b 100644
  	"crypto/internal/fips140"
  	"internal/testenv"
  	"regexp"
-@@ -13,9 +15,15 @@ import (
+@@ -15,9 +17,15 @@ import (
  
- func MustSupportFIPS140(t *testing.T) {
- 	t.Helper()
+ func MustSupportFIPS140(tb testing.TB) {
+ 	tb.Helper()
 +	if !boring.Enabled {
-+		t.Skip("skipping: boring not enabled")
++		tb.Skip("skipping: boring not enabled")
 +	}
  	if err := fips140.Supported(); err != nil {
- 		t.Skipf("test requires FIPS 140 mode: %v", err)
+ 		tb.Skipf("test requires FIPS 140 mode: %v", err)
  	}
 +	if !bfips140.Enabled() {
-+		t.Skipf("skipping: FIPS is not enabled")
++		tb.Skipf("skipping: FIPS is not enabled")
 +	}
  }
  
- func RerunWithFIPS140Enabled(t *testing.T) {
+ // MustMinimumFIPS140ModuleVersion skips the test if compiled against a lower
 diff --git a/src/crypto/internal/cryptotest/hash.go b/src/crypto/internal/cryptotest/hash.go
 index 37fd96a2d9d0b9..6d4b190831d57d 100644
 --- a/src/crypto/internal/cryptotest/hash.go
@@ -1761,7 +1761,7 @@ index 6d67ee8b3429a1..8f8d5937ea913c 100644
  // Unwrap returns h, or a crypto/internal/fips140 inner implementation of h.
  //
 diff --git a/src/crypto/internal/fips140only/fips140only_test.go b/src/crypto/internal/fips140only/fips140only_test.go
-index 462e279ce2e97c..07f9a3db478878 100644
+index a940fb2a3a0010..878d1cb8115abb 100644
 --- a/src/crypto/internal/fips140only/fips140only_test.go
 +++ b/src/crypto/internal/fips140only/fips140only_test.go
 @@ -17,6 +17,7 @@ import (
@@ -1794,7 +1794,7 @@ index 462e279ce2e97c..07f9a3db478878 100644
  	expectPanic(t, func() { cipher.NewCTR(notAESBlock, iv) })
  
  	expectPanic(t, func() { cipher.NewOFB(aesBlock, iv) })
-@@ -305,10 +312,12 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
+@@ -306,10 +313,12 @@ bXVL8iKLrG91IYQByUHZIn3WVAd2bfi4MfKagRt0ggd4
  	expectErr(t, errRet2(hpke.Seal(hpkeK.PublicKey(), hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, nil)))
  	expectErr(t, errRet2(hpke.Open(hpkeK, hpke.HKDFSHA256(), hpke.ChaCha20Poly1305(), nil, make([]byte, 2000))))
  
@@ -1811,7 +1811,7 @@ index 462e279ce2e97c..07f9a3db478878 100644
  	}
  }
  
-@@ -321,16 +330,22 @@ type readerWrap struct {
+@@ -322,16 +331,22 @@ type readerWrap struct {
  }
  
  func withApprovedHash(f func(crypto.Hash)) {
@@ -1845,7 +1845,7 @@ index 462e279ce2e97c..07f9a3db478878 100644
  
  func withNonApprovedHash(f func(crypto.Hash)) {
 diff --git a/src/crypto/internal/fips140test/acvp_test.go b/src/crypto/internal/fips140test/acvp_test.go
-index 6a0b46af2bbe40..fbe7ba6992d0ce 100644
+index 90e152e1484d5d..b0d4dfc77c6225 100644
 --- a/src/crypto/internal/fips140test/acvp_test.go
 +++ b/src/crypto/internal/fips140test/acvp_test.go
 @@ -22,6 +22,8 @@ import (
@@ -2014,18 +2014,21 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index f0fd6a4993a8e6..3743fd90f32e4c 100644
+index f0fd6a4993a8e6..db1170e82a352a 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
-@@ -13,6 +13,7 @@ package mlkem
+@@ -13,7 +13,10 @@ package mlkem
  
  import (
  	"crypto"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
++	irand "crypto/internal/rand"
++	"crypto/rand"
  )
  
-@@ -36,38 +37,58 @@ const (
+ const (
+@@ -36,38 +39,66 @@ const (
  	EncapsulationKeySize1024 = 1568
  )
  
@@ -2036,12 +2039,20 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
 -	key *mlkem.DecapsulationKey768
 +	key       *mlkem.DecapsulationKey768
 +	boringKey boring.DecapsulationKeyMLKEM768
++}
++
++func supportsBoringMLKEM768() bool {
++	return boring.Enabled && irand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM768()
++}
++
++func supportsBoringMLKEM1024() bool {
++	return boring.Enabled && irand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM1024()
  }
  
  // GenerateKey768 generates a new decapsulation key, drawing random bytes from
  // a secure source. The decapsulation key must be kept secret.
  func GenerateKey768() (*DecapsulationKey768, error) {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if supportsBoringMLKEM768() {
 +		key, err := boring.GenerateKeyMLKEM768()
 +		if err != nil {
 +			return nil, err
@@ -2061,7 +2072,7 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // NewDecapsulationKey768 expands a decapsulation key from a 64-byte seed in the
  // "d || z" form. The seed must be uniformly random.
  func NewDecapsulationKey768(seed []byte) (*DecapsulationKey768, error) {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if supportsBoringMLKEM768() {
 +		key, err := boring.NewDecapsulationKeyMLKEM768(seed)
 +		if err != nil {
 +			return nil, err
@@ -2082,17 +2093,17 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  //
  // The decapsulation key must be kept secret.
  func (dk *DecapsulationKey768) Bytes() []byte {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if dk.key == nil {
 +		return dk.boringKey.Bytes()
 +	}
  	return dk.key.Bytes()
  }
  
-@@ -79,13 +100,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
+@@ -79,13 +110,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if dk.key == nil {
 +		return dk.boringKey.Decapsulate(ciphertext)
 +	}
  	return dk.key.Decapsulate(ciphertext)
@@ -2102,14 +2113,14 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // ciphertexts.
  func (dk *DecapsulationKey768) EncapsulationKey() *EncapsulationKey768 {
 -	return &EncapsulationKey768{dk.key.EncapsulationKey()}
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if dk.key == nil {
 +		return &EncapsulationKey768{boringKey: dk.boringKey.EncapsulationKey()}
 +	}
 +	return &EncapsulationKey768{key: dk.key.EncapsulationKey()}
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -101,22 +128,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
+@@ -101,22 +138,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
  // An EncapsulationKey768 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey768.
  type EncapsulationKey768 struct {
@@ -2121,7 +2132,7 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // NewEncapsulationKey768 parses an encapsulation key from its encoded form. If
  // the encapsulation key is not valid, NewEncapsulationKey768 returns an error.
  func NewEncapsulationKey768(encapsulationKey []byte) (*EncapsulationKey768, error) {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if supportsBoringMLKEM768() {
 +		key, err := boring.NewEncapsulationKeyMLKEM768(encapsulationKey)
 +		if err != nil {
 +			return nil, err
@@ -2140,17 +2151,17 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  
  // Bytes returns the encapsulation key as a byte slice.
  func (ek *EncapsulationKey768) Bytes() []byte {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if ek.key == nil {
 +		return ek.boringKey.Bytes()
 +	}
  	return ek.key.Bytes()
  }
  
-@@ -128,41 +167,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+@@ -128,41 +177,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
-+	if boring.Enabled && boring.SupportsMLKEM768() {
++	if ek.key == nil {
 +		return ek.boringKey.Encapsulate()
 +	}
  	return ek.key.Encapsulate()
@@ -2167,7 +2178,7 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // GenerateKey1024 generates a new decapsulation key, drawing random bytes from
  // a secure source. The decapsulation key must be kept secret.
  func GenerateKey1024() (*DecapsulationKey1024, error) {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if supportsBoringMLKEM1024() {
 +		key, err := boring.GenerateKeyMLKEM1024()
 +		if err != nil {
 +			return nil, err
@@ -2187,7 +2198,7 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // NewDecapsulationKey1024 expands a decapsulation key from a 64-byte seed in the
  // "d || z" form. The seed must be uniformly random.
  func NewDecapsulationKey1024(seed []byte) (*DecapsulationKey1024, error) {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if supportsBoringMLKEM1024() {
 +		key, err := boring.NewDecapsulationKeyMLKEM1024(seed)
 +		if err != nil {
 +			return nil, err
@@ -2208,17 +2219,17 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  //
  // The decapsulation key must be kept secret.
  func (dk *DecapsulationKey1024) Bytes() []byte {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if dk.key == nil {
 +		return dk.boringKey.Bytes()
 +	}
  	return dk.key.Bytes()
  }
  
-@@ -174,13 +236,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+@@ -174,13 +246,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if dk.key == nil {
 +		return dk.boringKey.Decapsulate(ciphertext)
 +	}
  	return dk.key.Decapsulate(ciphertext)
@@ -2228,14 +2239,14 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // ciphertexts.
  func (dk *DecapsulationKey1024) EncapsulationKey() *EncapsulationKey1024 {
 -	return &EncapsulationKey1024{dk.key.EncapsulationKey()}
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if dk.key == nil {
 +		return &EncapsulationKey1024{boringKey: dk.boringKey.EncapsulationKey()}
 +	}
 +	return &EncapsulationKey1024{key: dk.key.EncapsulationKey()}
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -196,22 +264,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
+@@ -196,22 +274,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
  // An EncapsulationKey1024 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey1024.
  type EncapsulationKey1024 struct {
@@ -2247,7 +2258,7 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  // NewEncapsulationKey1024 parses an encapsulation key from its encoded form. If
  // the encapsulation key is not valid, NewEncapsulationKey1024 returns an error.
  func NewEncapsulationKey1024(encapsulationKey []byte) (*EncapsulationKey1024, error) {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if supportsBoringMLKEM1024() {
 +		key, err := boring.NewEncapsulationKeyMLKEM1024(encapsulationKey)
 +		if err != nil {
 +			return nil, err
@@ -2266,17 +2277,17 @@ index f0fd6a4993a8e6..3743fd90f32e4c 100644
  
  // Bytes returns the encapsulation key as a byte slice.
  func (ek *EncapsulationKey1024) Bytes() []byte {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if ek.key == nil {
 +		return ek.boringKey.Bytes()
 +	}
  	return ek.key.Bytes()
  }
  
-@@ -223,5 +303,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+@@ -223,5 +313,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {
-+	if boring.Enabled && boring.SupportsMLKEM1024() {
++	if ek.key == nil {
 +		return ek.boringKey.Encapsulate()
 +	}
  	return ek.key.Encapsulate()
@@ -2533,7 +2544,7 @@ index 838fcc1244bdbe..d89f732345e8a3 100644
  // Note: Can run these tests against the non-BoringCrypto
  // version of the code by using "CGO_ENABLED=0 go test".
 diff --git a/src/crypto/rsa/fips.go b/src/crypto/rsa/fips.go
-index fb2395886b053b..18334e731f9349 100644
+index e756512fecd6d5..9b35eab6e3a811 100644
 --- a/src/crypto/rsa/fips.go
 +++ b/src/crypto/rsa/fips.go
 @@ -6,7 +6,7 @@ package rsa
@@ -2545,76 +2556,79 @@ index fb2395886b053b..18334e731f9349 100644
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140hash"
  	"crypto/internal/fips140only"
-@@ -71,7 +71,17 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
+@@ -71,17 +71,6 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
  		hash = opts.Hash
  	}
  
--	if boring.Enabled && rand.IsDefaultReader(random) {
-+	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
-+		return nil, err
-+	}
-+	if fips140only.Enforced() && !fips140only.ApprovedHash(hash.New()) {
-+		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
-+	}
-+	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
-+		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
-+	}
-+
-+	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsHash(hash) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -82,16 +92,6 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
- 
- 	h := fips140hash.Unwrap(hash.New())
- 
--	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
--		return nil, err
--	}
--	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
--		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	if boring.Enabled && rand.IsDefaultReader(random) && priv.N.BitLen() >= 1024 {
+-		bkey, err := boringPrivateKey(priv)
+-		if err != nil {
+-			return nil, err
+-		}
+-		return boring.SignRSAPSS(bkey, hash, digest, opts.saltLength())
 -	}
--	if fips140only.Enforced() && !fips140only.ApprovedRandomReader(random) {
--		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+-	if priv.N.BitLen() >= 1024 {
+-		boring.UnreachableExceptTests()
 -	}
 -
+ 	if !hash.Available() {
+ 		return nil, errors.New("crypto/rsa: requested hash function unavailable: " + hash.String())
+ 	}
+@@ -97,6 +86,14 @@ func SignPSS(random io.Reader, priv *PrivateKey, hash crypto.Hash, digest []byte
+ 		return nil, errors.New("crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only mode")
+ 	}
+ 
++	if boring.Enabled && rand.IsDefaultReader(random) && boring.SupportsRSASaltLength(true, opts.saltLength()) && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsHash(hash) {
++		bkey, err := boringPrivateKey(priv)
++		if err != nil {
++			return nil, err
++		}
++		return boring.SignRSAPSS(bkey, hash, digest, opts.saltLength())
++	}
++
  	k, err := fipsPrivateKey(priv)
  	if err != nil {
  		return nil, err
-@@ -134,7 +134,14 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+@@ -139,17 +136,6 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
  		return err
  	}
  
 -	if boring.Enabled {
-+	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
-+		return err
-+	}
-+	if fips140only.Enforced() && !fips140only.ApprovedHash(hash.New()) {
-+		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
-+	}
-+
-+	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsHash(hash) {
- 		bkey, err := boringPublicKey(pub)
- 		if err != nil {
- 			return err
-@@ -147,13 +154,6 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
- 
- 	h := fips140hash.Unwrap(hash.New())
- 
--	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
--		return err
--	}
--	if fips140only.Enforced() && !fips140only.ApprovedHash(h) {
--		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-		bkey, err := boringPublicKey(pub)
+-		if err != nil {
+-			return err
+-		}
+-		if err := boring.VerifyRSAPSS(bkey, hash, digest, sig, opts.saltLength()); err != nil {
+-			return ErrVerification
+-		}
+-		return nil
 -	}
 -
+ 	if !hash.Available() {
+ 		return errors.New("crypto/rsa: requested hash function unavailable: " + hash.String())
+ 	}
+@@ -162,6 +148,17 @@ func VerifyPSS(pub *PublicKey, hash crypto.Hash, digest []byte, sig []byte, opts
+ 		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 	}
+ 
++	if boring.Enabled && boring.SupportsRSASaltLength(false, opts.saltLength()) && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsHash(hash) {
++		bkey, err := boringPublicKey(pub)
++		if err != nil {
++			return err
++		}
++		if err := boring.VerifyRSAPSS(bkey, hash, digest, sig, opts.saltLength()); err != nil {
++			return ErrVerification
++		}
++		return nil
++	}
++
  	k, err := fipsPublicKey(pub)
  	if err != nil {
  		return err
-@@ -203,10 +203,12 @@ func EncryptOAEP(hash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, l
- //
- // See [EncryptOAEP] for additional details.
- func EncryptOAEPWithOptions(random io.Reader, pub *PublicKey, msg []byte, opts *OAEPOptions) ([]byte, error) {
+@@ -217,10 +214,12 @@ func EncryptOAEPWithOptions(random io.Reader, pub *PublicKey, msg []byte, opts *
+ 	if opts.MGFHash != 0 && !opts.MGFHash.Available() {
+ 		return nil, errors.New("crypto/rsa: requested hash function unavailable: " + opts.MGFHash.String())
+ 	}
 -	if opts.MGFHash == 0 {
 -		return encryptOAEP(opts.Hash.New(), opts.Hash.New(), random, pub, msg, opts.Label)
 +	hash := opts.Hash.New()
@@ -2627,7 +2641,7 @@ index fb2395886b053b..18334e731f9349 100644
  }
  
  func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *PublicKey, msg []byte, label []byte) ([]byte, error) {
-@@ -217,7 +219,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
+@@ -231,7 +230,7 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
  	defer hash.Reset()
  	defer mgfHash.Reset()
  
@@ -2636,46 +2650,57 @@ index fb2395886b053b..18334e731f9349 100644
  		k := pub.Size()
  		if len(msg) > k-2*hash.Size()-2 {
  			return nil, ErrMessageTooLong
-@@ -269,7 +271,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
+@@ -242,7 +241,6 @@ func encryptOAEP(hash hash.Hash, mgfHash hash.Hash, random io.Reader, pub *Publi
+ 		}
+ 		return boring.EncryptRSAOAEP(hash, mgfHash, bkey, msg, label)
+ 	}
+-	boring.UnreachableExceptTests()
+ 
+ 	hash = fips140hash.Unwrap(hash)
+ 
+@@ -283,7 +281,7 @@ func decryptOAEP(hash, mgfHash hash.Hash, priv *PrivateKey, ciphertext []byte, l
  		return nil, err
  	}
  
--	if boring.Enabled {
+-	if boring.Enabled && priv.N.BitLen() >= 1024 {
 +	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAOAEPLabel(label) && hash == mgfHash {
  		k := priv.Size()
  		if len(ciphertext) > k ||
  			k < hash.Size()*2+2 {
-@@ -331,7 +333,14 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
+@@ -345,23 +343,23 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
  		return nil, err
  	}
  
--	if boring.Enabled {
-+	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
-+		return nil, err
-+	}
-+	if fips140only.Enforced() && hash != crypto.Hash(0) && !fips140only.ApprovedHash(hash.New()) {
-+		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
-+	}
-+
-+	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
- 		bkey, err := boringPrivateKey(priv)
- 		if err != nil {
- 			return nil, err
-@@ -339,13 +348,6 @@ func SignPKCS1v15(random io.Reader, priv *PrivateKey, hash crypto.Hash, hashed [
- 		return boring.SignRSAPKCS1v15(bkey, hash, hashed)
- 	}
- 
--	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
--		return nil, err
--	}
--	if fips140only.Enforced() && !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
--		return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	if boring.Enabled && priv.N.BitLen() >= 1024 {
+-		bkey, err := boringPrivateKey(priv)
+-		if err != nil {
+-			return nil, err
+-		}
+-		return boring.SignRSAPKCS1v15(bkey, hash, hashed)
 -	}
 -
+ 	if err := checkFIPS140OnlyPrivateKey(priv); err != nil {
+ 		return nil, err
+ 	}
+ 	if fips140only.Enforced() {
+-		if !hash.Available() || !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
++		if hash == crypto.Hash(0) || !hash.Available() || !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
+ 			return nil, errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+ 		}
+ 	}
+ 
++	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Signature(hash) {
++		bkey, err := boringPrivateKey(priv)
++		if err != nil {
++			return nil, err
++		}
++		return boring.SignRSAPKCS1v15(bkey, hash, hashed)
++	}
++
  	k, err := fipsPrivateKey(priv)
  	if err != nil {
  		return nil, err
-@@ -374,7 +376,14 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -390,7 +388,16 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return err
  	}
  
@@ -2683,23 +2708,27 @@ index fb2395886b053b..18334e731f9349 100644
 +	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
 +		return err
 +	}
-+	if fips140only.Enforced() && hash != crypto.Hash(0) && !fips140only.ApprovedHash(hash.New()) {
-+		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++	if fips140only.Enforced() {
++		if !hash.Available() || !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
++			return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
++		}
 +	}
 +
 +	if boring.Enabled && boring.SupportsRSAPublicKey(pub.N.BitLen()) && boring.SupportsRSAPKCS1v15Signature(hash) {
  		bkey, err := boringPublicKey(pub)
  		if err != nil {
  			return err
-@@ -385,13 +394,6 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
+@@ -401,15 +408,6 @@ func VerifyPKCS1v15(pub *PublicKey, hash crypto.Hash, hashed []byte, sig []byte)
  		return nil
  	}
  
 -	if err := checkFIPS140OnlyPublicKey(pub); err != nil {
 -		return err
 -	}
--	if fips140only.Enforced() && !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
--		return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-	if fips140only.Enforced() {
+-		if !hash.Available() || !fips140only.ApprovedHash(fips140hash.Unwrap(hash.New())) {
+-			return errors.New("crypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode")
+-		}
 -	}
 -
  	k, err := fipsPublicKey(pub)
@@ -2724,7 +2753,7 @@ index 2abc0436405f8a..3e4d6f3eef61e6 100644
  func boringPublicKey(*PublicKey) (*boring.PublicKeyRSA, error) {
  	panic("boringcrypto: not available")
 diff --git a/src/crypto/rsa/pkcs1v15.go b/src/crypto/rsa/pkcs1v15.go
-index 5269d7b971bda7..003030ec762ebf 100644
+index bfe7346fc67c54..003030ec762ebf 100644
 --- a/src/crypto/rsa/pkcs1v15.go
 +++ b/src/crypto/rsa/pkcs1v15.go
 @@ -5,7 +5,7 @@
@@ -2758,7 +2787,7 @@ index 5269d7b971bda7..003030ec762ebf 100644
  		return nil, err
  	}
  
--	if boring.Enabled {
+-	if boring.Enabled && priv.N.BitLen() >= 1024 {
 +	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Encryption() {
  		bkey, err := boringPrivateKey(priv)
  		if err != nil {
@@ -2767,7 +2796,7 @@ index 5269d7b971bda7..003030ec762ebf 100644
  		return 0, nil, 0, err
  	}
  
--	if boring.Enabled {
+-	if boring.Enabled && priv.N.BitLen() >= 1024 {
 +	if boring.Enabled && boring.SupportsRSAPrivateKey(priv.N.BitLen(), len(priv.Primes)) && boring.SupportsRSAPKCS1v15Encryption() {
  		var bkey *boring.PrivateKeyRSA
  		bkey, err = boringPrivateKey(priv)
@@ -2850,7 +2879,7 @@ index e03f4ab06603c6..a9d9daba2fd6ce 100644
  		t.Fatal(err)
  	}
 diff --git a/src/crypto/rsa/rsa.go b/src/crypto/rsa/rsa.go
-index 3a744f3e3fb603..ef00f6008818b2 100644
+index 93e08ed6cd8f71..2e8392c7ac34cf 100644
 --- a/src/crypto/rsa/rsa.go
 +++ b/src/crypto/rsa/rsa.go
 @@ -43,8 +43,8 @@ package rsa
@@ -2864,10 +2893,10 @@ index 3a744f3e3fb603..ef00f6008818b2 100644
  	"crypto/internal/fips140/bigmod"
  	"crypto/internal/fips140/rsa"
  	"crypto/internal/fips140only"
-@@ -176,11 +176,12 @@ func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.D
- 
- 	switch opts := opts.(type) {
- 	case *OAEPOptions:
+@@ -182,11 +182,12 @@ func (priv *PrivateKey) Decrypt(rand io.Reader, ciphertext []byte, opts crypto.D
+ 		if opts.MGFHash != 0 && !opts.MGFHash.Available() {
+ 			return nil, errors.New("rsa: requested hash function unavailable: " + opts.MGFHash.String())
+ 		}
 -		if opts.MGFHash == 0 {
 -			return decryptOAEP(opts.Hash.New(), opts.Hash.New(), priv, ciphertext, opts.Label)
 -		} else {
@@ -2881,7 +2910,7 @@ index 3a744f3e3fb603..ef00f6008818b2 100644
  
  	case *PKCS1v15DecryptOptions:
  		if l := opts.SessionKeyLen; l > 0 {
-@@ -314,8 +315,14 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+@@ -320,8 +321,14 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
  		return nil, err
  	}
  
@@ -2898,7 +2927,7 @@ index 3a744f3e3fb603..ef00f6008818b2 100644
  		bN, bE, bD, bP, bQ, bDp, bDq, bQinv, err := boring.GenerateKeyRSA(bits)
  		if err != nil {
  			return nil, err
-@@ -352,12 +359,6 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
+@@ -358,12 +365,6 @@ func GenerateKey(random io.Reader, bits int) (*PrivateKey, error) {
  
  	random = rand.CustomReader(random)
  
@@ -2989,7 +3018,7 @@ index 00000000000000..b549c6e3b17484
 +	return builder.Bytes()
 +}
 diff --git a/src/crypto/rsa/rsa_test.go b/src/crypto/rsa/rsa_test.go
-index 124fba1e8a4faa..af6d8e9291af62 100644
+index 8c1b22bf4f41b4..ca8a3740e8d31a 100644
 --- a/src/crypto/rsa/rsa_test.go
 +++ b/src/crypto/rsa/rsa_test.go
 @@ -8,7 +8,7 @@ import (
@@ -3000,8 +3029,8 @@ index 124fba1e8a4faa..af6d8e9291af62 100644
 +	boring "crypto/internal/backend"
  	"crypto/internal/cryptotest"
  	"crypto/internal/fips140"
- 	"crypto/rand"
-@@ -157,6 +157,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
+ 	"crypto/internal/fips140/ecdsa"
+@@ -228,6 +228,11 @@ func testKeyBasics(t *testing.T, priv *PrivateKey) {
  	if priv.D.Cmp(priv.N) > 0 {
  		t.Errorf("private exponent too large")
  	}
@@ -3830,7 +3859,7 @@ index 080bf694f03652..389e2738a4e885 100644
  	})
  }
 diff --git a/src/crypto/tls/cipher_suites.go b/src/crypto/tls/cipher_suites.go
-index 6ed63ccc2dc1f5..48f37264e61e71 100644
+index 1952be64fa952c..bad4a5093e3bbb 100644
 --- a/src/crypto/tls/cipher_suites.go
 +++ b/src/crypto/tls/cipher_suites.go
 @@ -10,7 +10,7 @@ import (
@@ -3842,7 +3871,7 @@ index 6ed63ccc2dc1f5..48f37264e61e71 100644
  	fipsaes "crypto/internal/fips140/aes"
  	"crypto/internal/fips140/aes/gcm"
  	"crypto/rc4"
-@@ -576,7 +576,13 @@ func aeadChaCha20Poly1305(key, nonceMask []byte) aead {
+@@ -568,7 +568,13 @@ func aeadChaCha20Poly1305(key, nonceMask []byte) aead {
  	if len(nonceMask) != aeadNonceLength {
  		panic("tls: internal error: wrong nonce length")
  	}
@@ -3884,14 +3913,15 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
  
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 7d4bd5bcceba4f..697dfa1ecb792e 100644
+index 52bf6087b62955..6d97d1fba0dfa9 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -11,10 +11,10 @@ import (
+@@ -11,11 +11,11 @@ import (
  	"crypto/ecdsa"
  	"crypto/ed25519"
  	"crypto/hpke"
 -	"crypto/internal/fips140/tls13"
+ 	"crypto/mldsa"
  	"crypto/rsa"
  	"crypto/subtle"
  	"crypto/tls/internal/fips140tls"
@@ -3899,7 +3929,7 @@ index 7d4bd5bcceba4f..697dfa1ecb792e 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -523,7 +523,20 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -524,7 +524,20 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
  
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -3922,7 +3952,7 @@ index 7d4bd5bcceba4f..697dfa1ecb792e 100644
  
  	// If we did not load a session (hs.session == nil), but we did set a
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index 65177767a05b1f..87b637a0f25602 100644
+index d367020c2066bf..6a83eda3573245 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -10,9 +10,9 @@ import (
@@ -3937,10 +3967,10 @@ index 65177767a05b1f..87b637a0f25602 100644
  	"hash"
  	"slices"
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 34dfb13b672f79..e635079f12313f 100644
+index cde70463ef0fa4..4df9e6f5aac92c 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
-@@ -63,7 +63,20 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
+@@ -64,7 +64,20 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
  	return hs.handshake()
  }
  
@@ -3963,7 +3993,7 @@ index 34dfb13b672f79..e635079f12313f 100644
  
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index b45d7cbc537ffe..c88871127ae8bb 100644
+index 3175d74587d83a..ed7c2de8db51f1 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -11,9 +11,9 @@ import (
@@ -4213,7 +4243,7 @@ index 00000000000000..579aaedabb188a
 +	return ExpandLabel(s.hash, secret, "exporter", h.Sum(nil), length)
 +}
 diff --git a/src/crypto/tls/key_schedule.go b/src/crypto/tls/key_schedule.go
-index 97f4993a179939..94e28436850760 100644
+index 652a6489b899d6..36528e93156bef 100644
 --- a/src/crypto/tls/key_schedule.go
 +++ b/src/crypto/tls/key_schedule.go
 @@ -9,8 +9,8 @@ import (
@@ -4227,7 +4257,7 @@ index 97f4993a179939..94e28436850760 100644
  	"hash"
  	"io"
 diff --git a/src/crypto/tls/prf.go b/src/crypto/tls/prf.go
-index 19f80ac2c91c20..8a64e75d8ad3b1 100644
+index bc59300f41c762..463ae16480f2be 100644
 --- a/src/crypto/tls/prf.go
 +++ b/src/crypto/tls/prf.go
 @@ -7,6 +7,7 @@ package tls
@@ -4320,10 +4350,10 @@ index 1d3e845d0f0a9c..eb4318faf13f7b 100644
  
  	var dsaPriv dsa.PrivateKey
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 465142153d1476..ac1e6265e51acd 100644
+index 7794e12bc86890..d6ef0bf10ebc1c 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
-@@ -532,7 +532,7 @@ var depsRules = `
+@@ -533,7 +533,7 @@ var depsRules = `
  	< crypto/internal/fips140/edwards25519
  	< crypto/internal/fips140/ed25519
  	< crypto/internal/fips140/rsa
@@ -4332,7 +4362,7 @@ index 465142153d1476..ac1e6265e51acd 100644
  
  	crypto !< FIPS;
  
-@@ -556,7 +556,12 @@ var depsRules = `
+@@ -557,7 +557,12 @@ var depsRules = `
  	< crypto/internal/backend/internal/opensslsetup
  	< crypto/internal/backend/fips140;
  
@@ -4346,7 +4376,7 @@ index 465142153d1476..ac1e6265e51acd 100644
  	< crypto/internal/fips140only
  	< crypto
  	< crypto/subtle
-@@ -590,7 +595,8 @@ var depsRules = `
+@@ -591,7 +596,8 @@ var depsRules = `
  	crypto/internal/fips140only,
  	crypto,
  	crypto/subtle,
@@ -4356,10 +4386,10 @@ index 465142153d1476..ac1e6265e51acd 100644
  	< crypto/sha3
  	< crypto/internal/fips140hash
  	< crypto/internal/boring
-@@ -608,6 +614,7 @@ var depsRules = `
- 	  crypto/pbkdf2,
+@@ -610,6 +616,7 @@ var depsRules = `
  	  crypto/ecdh,
- 	  crypto/mlkem
+ 	  crypto/mlkem,
+ 	  crypto/mldsa
 +	< crypto/tls/internal/tls13
  	< CRYPTO;
  
@@ -4430,10 +4460,10 @@ index 00000000000000..11dc691600b110
 +
 +const boringEnabled = false
 diff --git a/src/net/lookup_test.go b/src/net/lookup_test.go
-index 2a774100a8ec67..a0cabb42b19484 100644
+index 42211ed099ed1e..e6d185374ffe6d 100644
 --- a/src/net/lookup_test.go
 +++ b/src/net/lookup_test.go
-@@ -1499,6 +1499,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
+@@ -1500,6 +1500,9 @@ func TestLookupPortIPNetworkString(t *testing.T) {
  }
  
  func TestLookupNoSuchHost(t *testing.T) {
@@ -4444,7 +4474,7 @@ index 2a774100a8ec67..a0cabb42b19484 100644
  
  	const testNXDOMAIN = "invalid.invalid."
 diff --git a/src/os/exec/exec_test.go b/src/os/exec/exec_test.go
-index 2d966b627e1e81..532f24384bd309 100644
+index 4f39d9bbe345a8..0a379aaf9c1859 100644
 --- a/src/os/exec/exec_test.go
 +++ b/src/os/exec/exec_test.go
 @@ -14,6 +14,7 @@ import (
diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index a6ec9bd439f..69a9f7001ee 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -24,10 +24,10 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  create mode 100644 src/internal/goexperiment/exp_ms_tls_config_schannel_on.go
 
 diff --git a/src/crypto/tls/fips140_test.go b/src/crypto/tls/fips140_test.go
-index 5644d235acf1c6..4152949d49c262 100644
+index c3f6ec917b5632..fa54d22ec65057 100644
 --- a/src/crypto/tls/fips140_test.go
 +++ b/src/crypto/tls/fips140_test.go
-@@ -15,6 +15,7 @@ import (
+@@ -16,6 +16,7 @@ import (
  	"crypto/x509"
  	"crypto/x509/pkix"
  	"fmt"
@@ -35,7 +35,7 @@ index 5644d235acf1c6..4152949d49c262 100644
  	"internal/testenv"
  	"math/big"
  	"net"
-@@ -63,6 +64,10 @@ func generateKeyShare(group CurveID) keyShare {
+@@ -67,6 +68,10 @@ func generateKeyShare(group CurveID) keyShare {
  func TestFIPSServerProtocolVersion(t *testing.T) {
  	test := func(t *testing.T, name string, v uint16, msg string) {
  		t.Run(name, func(t *testing.T) {
@@ -46,7 +46,7 @@ index 5644d235acf1c6..4152949d49c262 100644
  			serverConfig := testConfigFIPS140.Clone()
  			serverConfig.MinVersion = VersionSSL30
  			serverConfig.MaxVersion = VersionTLS13
-@@ -191,6 +196,9 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
+@@ -195,6 +200,9 @@ func isFIPSSignatureScheme(alg SignatureScheme) bool {
  func TestFIPSServerCipherSuites(t *testing.T) {
  	for _, id := range allCipherSuitesIncludingTLS13() {
  		t.Run(fmt.Sprintf("suite=%s", CipherSuiteName(id)), func(t *testing.T) {
@@ -247,7 +247,7 @@ index 00000000000000..cccfb8866f88ab
 +}
 diff --git a/src/crypto/tls/schannel_windows_test.go b/src/crypto/tls/schannel_windows_test.go
 new file mode 100644
-index 00000000000000..b1bdb31863cc7a
+index 00000000000000..c38f52f42fa26b
 --- /dev/null
 +++ b/src/crypto/tls/schannel_windows_test.go
 @@ -0,0 +1,226 @@
@@ -364,7 +364,7 @@ index 00000000000000..b1bdb31863cc7a
 +	}, []uint16{VersionTLS12}, func() {
 +		serverConfig := &Config{
 +			CipherSuites: []uint16{TLS_RSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
-+			Certificates: testConfig.Certificates,
++			Certificates: testConfigServer.Certificates,
 +			MaxVersion:   VersionTLS12,
 +			GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
 +				if chi.CipherSuites[0] != TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 {
@@ -393,7 +393,7 @@ index 00000000000000..b1bdb31863cc7a
 +		TLS_AES_256_GCM_SHA384,
 +	}, []uint16{VersionTLS13}, func() {
 +		serverConfig := &Config{
-+			Certificates: testConfig.Certificates,
++			Certificates: testConfigServer.Certificates,
 +		}
 +		clientConfig := &Config{
 +			InsecureSkipVerify: true,
@@ -417,7 +417,7 @@ index 00000000000000..b1bdb31863cc7a
 +		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
 +	}, []uint16{VersionTLS13, VersionTLS12}, func() {
 +		serverConfig := &Config{
-+			Certificates: testConfig.Certificates,
++			Certificates: testConfigServer.Certificates,
 +			MaxVersion:   VersionTLS13,
 +		}
 +		clientConfig := &Config{
@@ -438,7 +438,7 @@ index 00000000000000..b1bdb31863cc7a
 +		TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
 +	}, []uint16{VersionTLS12}, func() {
 +		serverConfig := &Config{
-+			Certificates: testConfig.Certificates,
++			Certificates: testConfigServer.Certificates,
 +		}
 +		clientConfig := &Config{
 +			InsecureSkipVerify: true,
@@ -478,10 +478,10 @@ index 00000000000000..b1bdb31863cc7a
 +	}
 +}
 diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
-index e2b1aa01c7c2ec..47bedb7709196d 100644
+index 3db1365a971349..e82298dd26c997 100644
 --- a/src/crypto/tls/tls_test.go
 +++ b/src/crypto/tls/tls_test.go
-@@ -22,6 +22,7 @@ import (
+@@ -24,6 +24,7 @@ import (
  	"encoding/pem"
  	"errors"
  	"fmt"
@@ -489,7 +489,7 @@ index e2b1aa01c7c2ec..47bedb7709196d 100644
  	"internal/testenv"
  	"io"
  	"math"
-@@ -219,6 +220,11 @@ func skipFIPS(t *testing.T) {
+@@ -243,6 +244,11 @@ func skipFIPS(t *testing.T) {
  	if fips140tls.Required() {
  		t.Skip("skipping test in FIPS mode")
  	}
@@ -501,7 +501,7 @@ index e2b1aa01c7c2ec..47bedb7709196d 100644
  }
  
  func TestDialTimeout(t *testing.T) {
-@@ -1332,6 +1338,9 @@ func TestConnectionState(t *testing.T) {
+@@ -1357,6 +1363,9 @@ func TestConnectionState(t *testing.T) {
  		if !isFIPSVersion(v) && fips140tls.Required() {
  			t.Skipf("skipping test in FIPS 140-3 mode for non-FIPS version %x", v)
  		}
@@ -511,8 +511,8 @@ index e2b1aa01c7c2ec..47bedb7709196d 100644
  		var name string
  		switch v {
  		case VersionTLS10:
-@@ -1575,6 +1584,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
- 		}, ""}, // static RSA fallback
+@@ -1605,6 +1614,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+ 		}, "doesn't support ML-DSA"},
  	}
  	for i, tt := range tests {
 +		if goexperiment.MS_TLS_Config_Schannel &&
@@ -520,10 +520,10 @@ index e2b1aa01c7c2ec..47bedb7709196d 100644
 +			// Schannel might not support TLS 1.0.
 +			continue
 +		}
- 		err := tt.chi.SupportsCertificate(tt.c)
+ 		err := tt.chi.SupportsCertificate(&tt.c)
  		switch {
  		case tt.wantErr == "" && err != nil:
-@@ -1588,6 +1602,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
+@@ -1618,6 +1632,11 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
  }
  
  func TestCipherSuites(t *testing.T) {
@@ -564,7 +564,7 @@ index 00000000000000..a2dbc6187da2a0
 +const MS_TLS_Config_Schannel = true
 +const MS_TLS_Config_SchannelInt = 1
 diff --git a/src/internal/goexperiment/flags.go b/src/internal/goexperiment/flags.go
-index baa40788e4bd34..9315e7f07bb5c3 100644
+index 5f09ad11a701e2..ca710118b41336 100644
 --- a/src/internal/goexperiment/flags.go
 +++ b/src/internal/goexperiment/flags.go
 @@ -154,4 +154,12 @@ type Flags struct {
diff --git a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
index 90880488ca1..0ba4afd6de4 100644
--- a/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
+++ b/patches/0012-Align-TLS-settings-with-Microsoft-policies.patch
@@ -6,25 +6,25 @@ Subject: [PATCH] Align TLS settings with Microsoft policies
 ---
  doc/godebug.md                                |   9 +
  src/crypto/tls/common.go                      |   9 +-
- src/crypto/tls/defaults.go                    |  47 +-
- src/crypto/tls/defaults_microsoft.go          | 153 ++++++
+ src/crypto/tls/defaults.go                    |  37 +-
+ src/crypto/tls/defaults_microsoft.go          | 144 ++++++
  src/crypto/tls/handshake_client.go            |  21 +-
  src/crypto/tls/handshake_client_test.go       |  17 +-
  src/crypto/tls/handshake_server_tls13.go      |  22 +-
- src/crypto/tls/handshake_test.go              |   3 +
- src/crypto/tls/microsoft_test.go              | 483 ++++++++++++++++++
+ src/crypto/tls/handshake_test.go              |   5 +-
+ src/crypto/tls/microsoft_test.go              | 486 ++++++++++++++++++
  src/crypto/tls/schannel_windows.go            |   7 +
  src/internal/godebugs/table.go                |   2 +
  src/net/http/internal/http2/transport_test.go |   2 +
- 12 files changed, 751 insertions(+), 24 deletions(-)
+ 12 files changed, 737 insertions(+), 24 deletions(-)
  create mode 100644 src/crypto/tls/defaults_microsoft.go
  create mode 100644 src/crypto/tls/microsoft_test.go
 
 diff --git a/doc/godebug.md b/doc/godebug.md
-index 4935d64850883d..1736fd71017add 100644
+index 9c5c01d3b27670..1dac34c151305b 100644
 --- a/doc/godebug.md
 +++ b/doc/godebug.md
-@@ -207,6 +207,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
+@@ -225,6 +225,15 @@ APIs ignore the random `io.Reader` parameter. For Go 1.26, it defaults
  to `cryptocustomrand=0`, ignoring the random parameters. Using `cryptocustomrand=1`
  reverts to the pre-Go 1.26 behavior.
  
@@ -41,10 +41,10 @@ index 4935d64850883d..1736fd71017add 100644
  
  Go 1.25 added a new `decoratemappings` setting that controls whether the Go
 diff --git a/src/crypto/tls/common.go b/src/crypto/tls/common.go
-index f38a43829a0998..491e3673fe6629 100644
+index b2cb869650ca97..1c01df4067b1be 100644
 --- a/src/crypto/tls/common.go
 +++ b/src/crypto/tls/common.go
-@@ -1192,7 +1192,14 @@ func (c *Config) cipherSuites(aesGCMPreferred bool) []uint16 {
+@@ -1194,7 +1194,14 @@ func (c *Config) cipherSuites(aesGCMPreferred bool) []uint16 {
  	}
  	if fips140tls.Required() {
  		cipherSuites = slices.DeleteFunc(cipherSuites, func(id uint16) bool {
@@ -61,39 +61,46 @@ index f38a43829a0998..491e3673fe6629 100644
  	}
  	return cipherSuites
 diff --git a/src/crypto/tls/defaults.go b/src/crypto/tls/defaults.go
-index 8de8d7e0934b07..a73737e95c3059 100644
+index c89036047ad5a3..5ae76aca239600 100644
 --- a/src/crypto/tls/defaults.go
 +++ b/src/crypto/tls/defaults.go
-@@ -15,10 +15,25 @@ import (
+@@ -18,14 +18,17 @@ var tlsmlkem = godebug.New("tlsmlkem")
  
- var tlsmlkem = godebug.New("tlsmlkem")
+ // tlssecpmlkem=0 restores the pre-Go 1.26 default key exchanges.
  var tlssecpmlkem = godebug.New("tlssecpmlkem")
 +var ms_tlsx25519 = godebug.New("ms_tlsx25519")
  
- // defaultCurvePreferences is the default set of supported key exchanges, as
- // well as the preference order.
--func defaultCurvePreferences() []CurveID {
-+func defaultCurvePreferences() (groups []CurveID) {
-+	defer func() {
-+		if ms_tlsx25519.Value() == "0" {
-+			groups = slices.DeleteFunc(groups, func(c CurveID) bool {
-+				return c == X25519 || c == X25519MLKEM768
-+			})
-+		}
-+	}()
-+	if ms_tlsprofile.Value() == "off" {
-+		return upstreamCurvePreferences()
+ // defaultCurveEnabled returns whether the key exchange c is enabled by default.
+ func defaultCurveEnabled(c CurveID) bool {
+ 	switch c {
+-	case X25519, CurveP256, CurveP384, CurveP521:
++	case X25519:
++		return ms_tlsx25519.Value() != "0"
++	case CurveP256, CurveP384, CurveP521:
+ 		return true
+ 	case X25519MLKEM768:
+-		return tlsmlkem.Value() != "0"
++		return tlsmlkem.Value() != "0" && ms_tlsx25519.Value() != "0"
+ 	case SecP256r1MLKEM768, SecP384r1MLKEM1024:
+ 		return tlsmlkem.Value() != "0" && tlssecpmlkem.Value() != "0"
+ 	default:
+@@ -36,6 +39,9 @@ func defaultCurveEnabled(c CurveID) bool {
+ // curvePreferenceOrder is the fixed preference order of key exchanges. It must
+ // include every supported key exchange.
+ func curvePreferenceOrder() []CurveID {
++	if ms_tlsprofile.Value() != "off" {
++		return microsoftCurvePreferences()
 +	}
-+	return microsoftCurvePreferences()
-+}
-+
-+func upstreamCurvePreferences() []CurveID {
- 	switch {
- 	// tlsmlkem=0 restores the pre-Go 1.24 default.
- 	case tlsmlkem.Value() == "0":
-@@ -59,19 +74,35 @@ var tlsrsakex = godebug.New("tlsrsakex")
- var tls3des = godebug.New("tls3des")
+ 	return []CurveID{
+ 		X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024, MLKEM1024,
+ 		X25519, CurveP256, CurveP384, CurveP521,
+@@ -66,18 +72,35 @@ func defaultSupportedSignatureAlgorithms() []SignatureScheme {
+ 	}
+ }
  
++var tlsrsakex = godebug.New("tlsrsakex")
++var tls3des = godebug.New("tls3des")
++
  func supportedCipherSuites(aesGCMPreferred bool) []uint16 {
 -	if aesGCMPreferred {
 -		return slices.Clone(cipherSuitesPreferenceOrder)
@@ -116,18 +123,12 @@ index 8de8d7e0934b07..a73737e95c3059 100644
  func defaultCipherSuites(aesGCMPreferred bool) []uint16 {
  	cipherSuites := supportedCipherSuites(aesGCMPreferred)
  	return slices.DeleteFunc(cipherSuites, func(c uint16) bool {
--		return disabledCipherSuites[c] ||
--			tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
--			tls3des.Value() != "1" && tdesCiphers[c]
+-		return disabledCipherSuites[c]
 +		switch ms_tlsprofile.Value() {
 +		case "default", "":
-+			return msDisabledCipherSuites[c] ||
-+				tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
-+				tls3des.Value() != "1" && tdesCiphers[c]
++			return msDisabledCipherSuites[c]
 +		case "off":
-+			return disabledCipherSuites[c] ||
-+				tlsrsakex.Value() != "1" && rsaKexCiphers[c] ||
-+				tls3des.Value() != "1" && tdesCiphers[c]
++			return disabledCipherSuites[c]
 +		default:
 +			panic("unreachable")
 +		}
@@ -136,10 +137,10 @@ index 8de8d7e0934b07..a73737e95c3059 100644
  
 diff --git a/src/crypto/tls/defaults_microsoft.go b/src/crypto/tls/defaults_microsoft.go
 new file mode 100644
-index 00000000000000..6a3dddaf6b0ed1
+index 00000000000000..bfa39c963b08fb
 --- /dev/null
 +++ b/src/crypto/tls/defaults_microsoft.go
-@@ -0,0 +1,153 @@
+@@ -0,0 +1,144 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -163,6 +164,7 @@ index 00000000000000..6a3dddaf6b0ed1
 +	X25519MLKEM768:     !boring.Enabled || boring.SupportsCurve("X25519") && boring.SupportsMLKEM768(),
 +	SecP256r1MLKEM768:  !boring.Enabled || boring.SupportsMLKEM768(),
 +	SecP384r1MLKEM1024: !boring.Enabled || boring.SupportsMLKEM1024(),
++	MLKEM1024:          !boring.Enabled || boring.SupportsMLKEM1024(),
 +}
 +
 +func init() {
@@ -176,33 +178,23 @@ index 00000000000000..6a3dddaf6b0ed1
 +	}
 +}
 +
-+func microsoftCurvePreferences() (groups []CurveID) {
-+	defer func() {
-+		// Move unsupported groups to the end while preserving order for supported groups.
-+		slices.SortStableFunc(groups, func(a, b CurveID) int {
-+			supportedA, supportedB := supportedGroups[a], supportedGroups[b]
-+			if supportedA && !supportedB {
-+				return -1
-+			}
-+			if !supportedA && supportedB {
-+				return 1
-+			}
-+			return 0
-+		})
-+	}()
-+	switch {
-+	case tlsmlkem.Value() == "0":
-+		// tlsmlkem=0 restores the pre-Go 1.24 default.
-+		return []CurveID{CurveP384, CurveP256, CurveP521, X25519}
-+	case tlssecpmlkem.Value() == "0":
-+		// tlssecpmlkem=0 restores the pre-Go 1.26 default.
-+		return []CurveID{X25519MLKEM768, CurveP384, CurveP256, CurveP521, X25519}
-+	default:
-+		return []CurveID{
-+			X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768,
-+			CurveP384, CurveP256, CurveP521, X25519,
-+		}
++func microsoftCurvePreferences() []CurveID {
++	groups := []CurveID{
++		X25519MLKEM768, SecP384r1MLKEM1024, SecP256r1MLKEM768, MLKEM1024,
++		CurveP384, CurveP256, CurveP521, X25519,
 +	}
++	// Move unsupported groups to the end while preserving order for supported groups.
++	slices.SortStableFunc(groups, func(a, b CurveID) int {
++		supportedA, supportedB := supportedGroups[a], supportedGroups[b]
++		if supportedA && !supportedB {
++			return -1
++		}
++		if !supportedA && supportedB {
++			return 1
++		}
++		return 0
++	})
++	return groups
 +}
 +
 +// msDefaultCipherSuitesTLS13 is like [defaultCipherSuitesTLS13] with
@@ -294,10 +286,10 @@ index 00000000000000..6a3dddaf6b0ed1
 +	TLS_RSA_WITH_RC4_128_SHA:         true,
 +}
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 697dfa1ecb792e..1e4953c77bcc0d 100644
+index 6d97d1fba0dfa9..eb88634f275ce8 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
-@@ -130,12 +130,21 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
+@@ -131,12 +131,21 @@ func (c *Conn) makeClientHello() (*clientHelloMsg, *keySharePrivateKeys, *echCli
  			hello.cipherSuites = nil
  		}
  
@@ -326,12 +318,12 @@ index 697dfa1ecb792e..1e4953c77bcc0d 100644
  
  		if len(hello.supportedCurves) == 0 {
 diff --git a/src/crypto/tls/handshake_client_test.go b/src/crypto/tls/handshake_client_test.go
-index e7de0b59119b8a..d9d1406371d13c 100644
+index 64a668eae9b512..b5d20522f36903 100644
 --- a/src/crypto/tls/handshake_client_test.go
 +++ b/src/crypto/tls/handshake_client_test.go
-@@ -2704,9 +2704,20 @@ func testTLS13OnlyClientHelloCipherSuite(t *testing.T, ciphers []uint16) {
+@@ -2701,9 +2701,20 @@ func testTLS13OnlyClientHelloCipherSuite(t *testing.T, ciphers []uint16) {
  	serverConfig := &Config{
- 		Certificates: testConfig.Certificates,
+ 		Certificates: testConfigServer.Certificates,
  		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
 -			expectedCiphersuites := defaultCipherSuitesTLS13NoAES
 -			if fips140tls.Required() {
@@ -354,7 +346,7 @@ index e7de0b59119b8a..d9d1406371d13c 100644
  			if len(chi.CipherSuites) != len(expectedCiphersuites) {
  				t.Errorf("only TLS 1.3 suites should be advertised, got=%x", chi.CipherSuites)
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 14834301052886..dbf66fa8a23cc5 100644
+index ed7c2de8db51f1..cf3a3af4d1204b 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -176,12 +176,22 @@ func (hs *serverHandshakeStateTLS13) processClientHello() error {
@@ -387,25 +379,34 @@ index 14834301052886..dbf66fa8a23cc5 100644
  	for _, suiteID := range preferenceList {
  		hs.suite = mutualCipherSuiteTLS13(hs.clientHello.cipherSuites, suiteID)
 diff --git a/src/crypto/tls/handshake_test.go b/src/crypto/tls/handshake_test.go
-index 9cea8182d04154..0e5b421f52dc95 100644
+index 3205dd97d68f40..8a2e262cadec11 100644
 --- a/src/crypto/tls/handshake_test.go
 +++ b/src/crypto/tls/handshake_test.go
-@@ -453,6 +453,9 @@ func runMain(m *testing.M) int {
- 	// to use cryptotest.SetGlobalRandom instead.
- 	os.Setenv("GODEBUG", "cryptocustomrand=1,"+os.Getenv("GODEBUG"))
+@@ -8,7 +8,7 @@ import (
+ 	"bufio"
+ 	"bytes"
+ 	"context"
+-	"crypto/internal/boring"
++	boring "crypto/internal/backend"
+ 	"encoding/hex"
+ 	"errors"
+ 	"flag"
+@@ -449,6 +449,9 @@ func runMain(m *testing.M) int {
+ 		"-naccept", "1", "-verify_return_error", "-verifyCAfile", clientRootCAPath,
+ 		"-attime", fmt.Sprint(testTime().Unix())}
  
 +	// Disable Microsoft TLS profile to have consistent test results.
 +	os.Setenv("GODEBUG", "ms_tlsprofile=off,"+os.Getenv("GODEBUG"))
 +
- 	testConfig = &Config{
- 		Time:               func() time.Time { return time.Unix(0, 0) },
- 		Rand:               zeroSource{},
+ 	if *keyFile != "" {
+ 		f, err := os.OpenFile(*keyFile, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)
+ 		if err != nil {
 diff --git a/src/crypto/tls/microsoft_test.go b/src/crypto/tls/microsoft_test.go
 new file mode 100644
-index 00000000000000..3d9c3ea17eca85
+index 00000000000000..044b8008328567
 --- /dev/null
 +++ b/src/crypto/tls/microsoft_test.go
-@@ -0,0 +1,483 @@
+@@ -0,0 +1,486 @@
 +// Copyright 2025 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -415,6 +416,7 @@ index 00000000000000..3d9c3ea17eca85
 +import (
 +	boring "crypto/internal/backend"
 +	"crypto/tls/internal/fips140tls"
++	"internal/goexperiment"
 +	"internal/testenv"
 +	"maps"
 +	"os"
@@ -636,8 +638,10 @@ index 00000000000000..3d9c3ea17eca85
 +		},
 +	}
 +
-+	baseConfig := testConfig.Clone()
-+	baseConfig.CurvePreferences = nil
++	baseClientConfig := testConfigClient.Clone()
++	baseClientConfig.CurvePreferences = nil
++	baseServerConfig := testConfigServer.Clone()
++	baseServerConfig.CurvePreferences = nil
 +	for _, test := range tests {
 +		t.Run(test.name, func(t *testing.T) {
 +			if fips140tls.Required() && test.expectSelected == X25519 {
@@ -648,7 +652,7 @@ index 00000000000000..3d9c3ea17eca85
 +			} else {
 +				t.Parallel()
 +			}
-+			serverConfig := baseConfig.Clone()
++			serverConfig := baseServerConfig.Clone()
 +			if test.serverConfig != nil {
 +				test.serverConfig(serverConfig)
 +			}
@@ -669,7 +673,7 @@ index 00000000000000..3d9c3ea17eca85
 +				}
 +				return nil, nil
 +			}
-+			clientConfig := baseConfig.Clone()
++			clientConfig := baseClientConfig.Clone()
 +			if test.clientConfig != nil {
 +				test.clientConfig(clientConfig)
 +			}
@@ -711,10 +715,10 @@ index 00000000000000..3d9c3ea17eca85
 +
 +	t.Run("TLS13", func(t *testing.T) {
 +		t.Parallel()
-+		clientConfig := testConfig.Clone()
++		clientConfig := testConfigClient.Clone()
 +		clientConfig.MaxVersion = VersionTLS13
 +
-+		serverConfig := testConfig.Clone()
++		serverConfig := testConfigServer.Clone()
 +		serverConfig.MaxVersion = VersionTLS13
 +
 +		// Check cipher suite order in ClientHello
@@ -766,10 +770,10 @@ index 00000000000000..3d9c3ea17eca85
 +
 +	t.Run("TLS12", func(t *testing.T) {
 +		t.Parallel()
-+		clientConfig := testConfig.Clone()
++		clientConfig := testConfigClient.Clone()
 +		clientConfig.MaxVersion = VersionTLS12
 +
-+		serverConfig := testConfig.Clone()
++		serverConfig := testConfigServer.Clone()
 +		serverConfig.MaxVersion = VersionTLS12
 +
 +		// For TLS 1.2, cipher suite ordering depends on hardware AES support.
@@ -799,7 +803,10 @@ index 00000000000000..3d9c3ea17eca85
 +			if !hasAES {
 +				t.Error("TLS 1.2: no AES-GCM cipher suites advertised")
 +			}
-+			if !hasChaCha {
++			expectChaCha := !goexperiment.MS_TLS_Config_Schannel ||
++				isSchannelCipherSuite(TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256) ||
++				isSchannelCipherSuite(TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256)
++			if expectChaCha && !hasChaCha {
 +				t.Error("TLS 1.2: no ChaCha20 cipher suites advertised")
 +			}
 +			return nil, nil
@@ -861,22 +868,19 @@ index 00000000000000..3d9c3ea17eca85
 +}
 +
 +func testCipherSuitePreferenceOrder(t *testing.T, maxVersion uint16, expected uint16, client, server []uint16) {
-+	serverConfig := &Config{
-+		Certificates: testConfig.Certificates,
-+		MaxVersion:   maxVersion,
-+		CipherSuites: server,
-+		GetConfigForClient: func(chi *ClientHelloInfo) (*Config, error) {
-+			if chi.CipherSuites[0] != expected {
-+				t.Error("the advertised order should not depend on Config.CipherSuites")
-+			}
-+			return nil, nil
-+		},
-+	}
-+	clientConfig := &Config{
-+		CipherSuites:       client,
-+		MaxVersion:         maxVersion,
-+		InsecureSkipVerify: true,
++	serverConfig := testConfigServer.Clone()
++	serverConfig.MaxVersion = maxVersion
++	serverConfig.CipherSuites = server
++	serverConfig.GetConfigForClient = func(chi *ClientHelloInfo) (*Config, error) {
++		if chi.CipherSuites[0] != expected {
++			t.Error("the advertised order should not depend on Config.CipherSuites")
++		}
++		return nil, nil
 +	}
++	clientConfig := testConfigClient.Clone()
++	clientConfig.CipherSuites = client
++	clientConfig.MaxVersion = maxVersion
++	clientConfig.InsecureSkipVerify = true
 +	state, _, err := testHandshake(t, clientConfig, serverConfig)
 +	if err != nil {
 +		t.Fatalf("handshake failed: %s", err)
@@ -908,7 +912,7 @@ index cccfb8866f88ab..b2896e95e74686 100644
  	cipherSuitesPreferenceOrderNoAES = cipherSuitesPreferenceOrder
  	defaultCipherSuitesTLS13NoAES = defaultCipherSuitesTLS13
 diff --git a/src/internal/godebugs/table.go b/src/internal/godebugs/table.go
-index 7ddfad14ea1be0..1ba17bc136710f 100644
+index 10b3919d51e10d..d15034728ffafd 100644
 --- a/src/internal/godebugs/table.go
 +++ b/src/internal/godebugs/table.go
 @@ -49,6 +49,8 @@ var All = []Info{
@@ -921,7 +925,7 @@ index 7ddfad14ea1be0..1ba17bc136710f 100644
  	{Name: "multipartmaxheaders", Package: "mime/multipart"},
  	{Name: "multipartmaxparts", Package: "mime/multipart"},
 diff --git a/src/net/http/internal/http2/transport_test.go b/src/net/http/internal/http2/transport_test.go
-index 955c2208ad4a86..0f5dc2ab51c728 100644
+index 4863054a019ad9..42b7f94f1f2da7 100644
 --- a/src/net/http/internal/http2/transport_test.go
 +++ b/src/net/http/internal/http2/transport_test.go
 @@ -15,6 +15,7 @@ import (
@@ -932,7 +936,7 @@ index 955c2208ad4a86..0f5dc2ab51c728 100644
  	"io"
  	"log"
  	"math/rand"
-@@ -2744,6 +2745,7 @@ func testTransportCloseAfterLostPing(t testing.TB) {
+@@ -2755,6 +2756,7 @@ func testTransportCloseAfterLostPing(t testing.TB) {
  }
  
  func TestTransportPingWriteBlocks(t *testing.T) {
diff --git a/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch b/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch
deleted file mode 100644
index 380749c3429..00000000000
--- a/patches/0016-cmd-dist-fix-JSON-processing-of-trailing-bytes.patch
+++ /dev/null
@@ -1,51 +0,0 @@
-From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
-From: bot-for-go[bot] <199222863+bot-for-go[bot]@users.noreply.github.com>
-Date: Tue, 19 May 2026 11:42:41 -0700
-Subject: [PATCH] cmd/dist: fix JSON processing of trailing bytes
-
-The testJSONFilter.process was implicitly depending
-on the exact internal buffer size of the json.Decoder,
-which happened to be large enough in v1 for most lines
-that cmd/dist cared about.
-
-However, the re-implementation of v1 using encoding/json/v2
-changes the implicit buffer size used, which results in
-some trailing bytes accidentally being discarded.
-
-The correct use of json.Decoder.Buffered requires also
-consulting the input io.Reader for additional trailing data.
-
-Fixes #79498
-
-Change-Id: If4bdac12b638d78e0870808f2285fb1731b0fae6
-Reviewed-on: https://go-review.googlesource.com/c/go/+/779980
-Reviewed-by: Michael Pratt <mpratt@google.com>
-Reviewed-by: Damien Neil <dneil@google.com>
-Auto-Submit: Damien Neil <dneil@google.com>
-LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
----
- src/cmd/dist/testjson.go | 4 +++-
- 1 file changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/src/cmd/dist/testjson.go b/src/cmd/dist/testjson.go
-index c190c665ebf779..8ae6e8905d578c 100644
---- a/src/cmd/dist/testjson.go
-+++ b/src/cmd/dist/testjson.go
-@@ -80,7 +80,8 @@ func (f *testJSONFilter) process(line []byte) {
- 		// struct, or other additions outside of it. If humans are ever looking
- 		// at the output, it's really nice to keep field order because it
- 		// preserves a lot of regularity in the output.
--		dec := json.NewDecoder(bytes.NewBuffer(line))
-+		lineBuf := bytes.NewBuffer(line)
-+		dec := json.NewDecoder(lineBuf)
- 		dec.UseNumber()
- 		val, err := decodeJSONValue(dec)
- 		if err == nil && val.atom == json.Delim('{') {
-@@ -105,6 +106,7 @@ func (f *testJSONFilter) process(line []byte) {
- 				// Copy any trailing text. We expect at most a "\n" here, but
- 				// there could be other text and we want to feed that through.
- 				io.Copy(f.w, dec.Buffered())
-+				io.Copy(f.w, lineBuf)
- 				return
- 			}
- 		}

From f80de082a5b33c2136ca2f1d8cced91af2fc5592 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 20 May 2026 15:39:44 +0200
Subject: [PATCH 865/887] fix deps

---
 patches/0004-Use-crypto-backends.patch | 29 +++++++++++++-------------
 1 file changed, 14 insertions(+), 15 deletions(-)

diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 61c1b637fff..5e77f23aa51 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -56,7 +56,7 @@ Subject: [PATCH] Use crypto backends
  src/crypto/internal/rand/rand.go              |   2 +-
  src/crypto/md5/md5.go                         |  10 +
  src/crypto/md5/md5_test.go                    |  18 +-
- src/crypto/mlkem/mlkem.go                     | 119 +++++++++--
+ src/crypto/mlkem/mlkem.go                     | 118 +++++++++--
  src/crypto/mlkem/mlkem_test.go                |   8 +
  src/crypto/pbkdf2/pbkdf2.go                   |   7 +
  src/crypto/pbkdf2/pbkdf2_test.go              |   6 +-
@@ -102,7 +102,7 @@ Subject: [PATCH] Use crypto backends
  src/hash/notboring_test.go                    |   9 +
  src/net/lookup_test.go                        |   3 +
  src/os/exec/exec_test.go                      |   9 +
- 98 files changed, 1628 insertions(+), 251 deletions(-)
+ 98 files changed, 1627 insertions(+), 251 deletions(-)
  create mode 100644 src/crypto/dsa/boring.go
  create mode 100644 src/crypto/dsa/notboring.go
  create mode 100644 src/crypto/ecdsa/badlinkname.go
@@ -2014,21 +2014,20 @@ index 403ff2881f4b68..5417556a86700e 100644
  
  func maybeCloner(h hash.Hash) any {
 diff --git a/src/crypto/mlkem/mlkem.go b/src/crypto/mlkem/mlkem.go
-index f0fd6a4993a8e6..db1170e82a352a 100644
+index f0fd6a4993a8e6..53600fdf265062 100644
 --- a/src/crypto/mlkem/mlkem.go
 +++ b/src/crypto/mlkem/mlkem.go
-@@ -13,7 +13,10 @@ package mlkem
+@@ -13,7 +13,9 @@ package mlkem
  
  import (
  	"crypto"
 +	boring "crypto/internal/backend"
  	"crypto/internal/fips140/mlkem"
-+	irand "crypto/internal/rand"
-+	"crypto/rand"
++	"crypto/internal/rand"
  )
  
  const (
-@@ -36,38 +39,66 @@ const (
+@@ -36,38 +38,66 @@ const (
  	EncapsulationKeySize1024 = 1568
  )
  
@@ -2042,11 +2041,11 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
 +}
 +
 +func supportsBoringMLKEM768() bool {
-+	return boring.Enabled && irand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM768()
++	return boring.Enabled && rand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM768()
 +}
 +
 +func supportsBoringMLKEM1024() bool {
-+	return boring.Enabled && irand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM1024()
++	return boring.Enabled && rand.IsDefaultReader(rand.Reader) && boring.SupportsMLKEM1024()
  }
  
  // GenerateKey768 generates a new decapsulation key, drawing random bytes from
@@ -2099,7 +2098,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  	return dk.key.Bytes()
  }
  
-@@ -79,13 +110,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
+@@ -79,13 +109,19 @@ func (dk *DecapsulationKey768) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -2120,7 +2119,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -101,22 +138,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
+@@ -101,22 +137,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey768)(nil)
  // An EncapsulationKey768 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey768.
  type EncapsulationKey768 struct {
@@ -2157,7 +2156,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  	return ek.key.Bytes()
  }
  
-@@ -128,41 +177,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
+@@ -128,41 +176,64 @@ func (ek *EncapsulationKey768) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey768) Encapsulate() (sharedKey, ciphertext []byte) {
@@ -2225,7 +2224,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  	return dk.key.Bytes()
  }
  
-@@ -174,13 +246,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
+@@ -174,13 +245,19 @@ func (dk *DecapsulationKey1024) Bytes() []byte {
  //
  // The shared key must be kept secret.
  func (dk *DecapsulationKey1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
@@ -2246,7 +2245,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  }
  
  // Encapsulator returns the encapsulation key, like
-@@ -196,22 +274,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
+@@ -196,22 +273,34 @@ var _ crypto.Decapsulator = (*DecapsulationKey1024)(nil)
  // An EncapsulationKey1024 is the public key used to produce ciphertexts to be
  // decapsulated by the corresponding DecapsulationKey1024.
  type EncapsulationKey1024 struct {
@@ -2283,7 +2282,7 @@ index f0fd6a4993a8e6..db1170e82a352a 100644
  	return ek.key.Bytes()
  }
  
-@@ -223,5 +313,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
+@@ -223,5 +312,8 @@ func (ek *EncapsulationKey1024) Bytes() []byte {
  // For testing, derandomized encapsulation is provided by the
  // [crypto/mlkem/mlkemtest] package.
  func (ek *EncapsulationKey1024) Encapsulate() (sharedKey, ciphertext []byte) {

From 2cf4630186cc8f62afe4d515b308e555c186885f Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 20 May 2026 16:12:11 +0200
Subject: [PATCH 866/887] skip TestServerKeepAlivesEnabled

---
 patches/0015-Skip-http2-tests.patch | 30 ++++++++++++++++++++++++++---
 1 file changed, 27 insertions(+), 3 deletions(-)

diff --git a/patches/0015-Skip-http2-tests.patch b/patches/0015-Skip-http2-tests.patch
index 03fccc86d3b..b88d6369006 100644
--- a/patches/0015-Skip-http2-tests.patch
+++ b/patches/0015-Skip-http2-tests.patch
@@ -9,8 +9,9 @@ crypto and test/synctest bubbles.
 Tracked at https://github.com/golang/go/issues/78557
 ---
  src/net/http/internal/http2/http2_test.go | 10 ++++++++++
+ src/net/http/serve_test.go                |  5 +++++
  src/net/http/transport_test.go            |  5 +++++
- 2 files changed, 15 insertions(+)
+ 3 files changed, 20 insertions(+)
 
 diff --git a/src/net/http/internal/http2/http2_test.go b/src/net/http/internal/http2/http2_test.go
 index ad1b9a6d06e773..7e7042796a12d8 100644
@@ -40,8 +41,31 @@ index ad1b9a6d06e773..7e7042796a12d8 100644
  func TestSettingString(t *testing.T) {
  	tests := []struct {
  		s    Setting
+diff --git a/src/net/http/serve_test.go b/src/net/http/serve_test.go
+index 7e8398485ab4df..e3e37ffba73230 100644
+--- a/src/net/http/serve_test.go
++++ b/src/net/http/serve_test.go
+@@ -12,6 +12,7 @@ import (
+ 	"compress/gzip"
+ 	"compress/zlib"
+ 	"context"
++	"crypto/fips140"
+ 	crand "crypto/rand"
+ 	"crypto/tls"
+ 	"crypto/x509"
+@@ -6078,6 +6079,10 @@ func TestServerCloseDeadlock(t *testing.T) {
+ // Issue 17717: tests that Server.SetKeepAlivesEnabled is respected by
+ // both HTTP/1 and HTTP/2.
+ func TestServerKeepAlivesEnabled(t *testing.T) {
++	if fips140.Enabled() {
++		// TODO: Remove once https://github.com/golang/go/issues/78557 is resolved.
++		t.Skip("skipping test in FIPS 140 mode, see https://github.com/golang/go/issues/78557")
++	}
+ 	runSynctest(t, testServerKeepAlivesEnabled, http3SkippedMode)
+ }
+ func testServerKeepAlivesEnabled(t *testing.T, mode testMode) {
 diff --git a/src/net/http/transport_test.go b/src/net/http/transport_test.go
-index ea9a19ac9ad42b..ae0729cafd7216 100644
+index 30d6d13bdd0a97..8ef27157b55ce0 100644
 --- a/src/net/http/transport_test.go
 +++ b/src/net/http/transport_test.go
 @@ -14,6 +14,7 @@ import (
@@ -52,7 +76,7 @@ index ea9a19ac9ad42b..ae0729cafd7216 100644
  	"crypto/rand"
  	"crypto/tls"
  	"crypto/x509"
-@@ -480,6 +481,10 @@ func testTransportReadToEndReusesConn(t *testing.T, mode testMode) {
+@@ -474,6 +475,10 @@ func testTransportReadToEndReusesConn(t *testing.T, mode testMode) {
  // manage to drain it before the next request, the connection is re-used;
  // otherwise, a new connection is made.
  func TestTransportNotReadToEndConnectionReuse(t *testing.T) {

From eac548e64c13e5be17f5053dcf3c3633dba78da4 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Wed, 20 May 2026 17:32:53 +0200
Subject: [PATCH 867/887] fix TestGetClientCertificate

---
 ...nt-ms_tls_config_schannel-experiment.patch | 49 ++++++++++++++++++-
 1 file changed, 48 insertions(+), 1 deletion(-)

diff --git a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
index 69a9f7001ee..ee7f9013ab3 100644
--- a/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
+++ b/patches/0010-Implement-ms_tls_config_schannel-experiment.patch
@@ -5,6 +5,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
 
 ---
  src/crypto/tls/fips140_test.go                |   8 +
+ src/crypto/tls/handshake_client_test.go       |  21 ++
  src/crypto/tls/schannel_disabled_test.go      |  11 +
  src/crypto/tls/schannel_windows.go            | 166 +++++++++++++
  src/crypto/tls/schannel_windows_test.go       | 226 ++++++++++++++++++
@@ -16,7 +17,7 @@ Subject: [PATCH] Implement ms_tls_config_schannel experiment
  .../syscall/windows/version_windows.go        |  11 +
  .../syscall/windows/version_windows_test.go   |   7 +
  .../syscall/windows/zsyscall_windows.go       |  16 ++
- 12 files changed, 516 insertions(+)
+ 13 files changed, 537 insertions(+)
  create mode 100644 src/crypto/tls/schannel_disabled_test.go
  create mode 100644 src/crypto/tls/schannel_windows.go
  create mode 100644 src/crypto/tls/schannel_windows_test.go
@@ -56,6 +57,52 @@ index c3f6ec917b5632..fa54d22ec65057 100644
  			serverConfig := testConfigFIPS140.Clone()
  			clientHello := &clientHelloMsg{
  				vers:                         VersionTLS12,
+diff --git a/src/crypto/tls/handshake_client_test.go b/src/crypto/tls/handshake_client_test.go
+index 64a668eae9b512..d8ac7f232590ca 100644
+--- a/src/crypto/tls/handshake_client_test.go
++++ b/src/crypto/tls/handshake_client_test.go
+@@ -20,6 +20,7 @@ import (
+ 	"errors"
+ 	"fmt"
+ 	"internal/byteorder"
++	"internal/goexperiment"
+ 	"io"
+ 	"math/big"
+ 	"net"
+@@ -2400,6 +2401,11 @@ func testGetClientCertificate(t *testing.T, version uint16) {
+ 			t.Logf("skipping test %d for FIPS mode", i)
+ 			continue
+ 		}
++		if goexperiment.MS_TLS_Config_Schannel && clientConfig.MaxVersion == VersionTLS11 &&
++			!hasGetClientCertificateTLS11CipherSuite(clientConfig, serverConfig) {
++			t.Logf("skipping test %d; Schannel has no TLS 1.1-compatible cipher suite", i)
++			continue
++		}
+ 
+ 		type serverResult struct {
+ 			cs  ConnectionState
+@@ -2444,6 +2450,21 @@ func testGetClientCertificate(t *testing.T, version uint16) {
+ 	}
+ }
+ 
++func hasGetClientCertificateTLS11CipherSuite(clientConfig, serverConfig *Config) bool {
++	clientCipherSuites := clientConfig.cipherSuites(hasAESGCMHardwareSupport)
++	clientTLS11CipherSuites := clientCipherSuites[:0]
++	for _, id := range clientCipherSuites {
++		candidate := cipherSuiteByID(id)
++		if candidate != nil && candidate.flags&suiteTLS12 == 0 {
++			clientTLS11CipherSuites = append(clientTLS11CipherSuites, id)
++		}
++	}
++	serverCipherSuites := serverConfig.cipherSuites(isAESGCMPreferred(clientTLS11CipherSuites))
++	return selectCipherSuite(serverCipherSuites, clientTLS11CipherSuites, func(candidate *cipherSuite) bool {
++		return candidate.flags&suiteTLS12 == 0 && candidate.flags&suiteECSign == 0
++	}) != nil
++}
++
+ func TestRSAPSSKeyError(t *testing.T) {
+ 	// crypto/tls does not support the rsa_pss_pss_* SignatureSchemes. If support for
+ 	// public keys with OID RSASSA-PSS is added to crypto/x509, they will be misused with
 diff --git a/src/crypto/tls/schannel_disabled_test.go b/src/crypto/tls/schannel_disabled_test.go
 new file mode 100644
 index 00000000000000..d598d48dedf762

From 9ed0e37b2626a30205bac24609a832636173b8f0 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 09:46:18 +0000
Subject: [PATCH 868/887] Update submodule to latest master (04ed0196):
 runtime/trace: remove unused runtime_readTrace declaration

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 47f26133bd6..04ed01963e1 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 47f26133bd6f63ea659ce28bfdb7761de96964d0
+Subproject commit 04ed01963e1b2ec2f801416988cb7d57b7e13b36

From 0287cdafd0d67d24173351a814c245e45fc698ea Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Thu, 21 May 2026 11:56:50 +0200
Subject: [PATCH 869/887] fix conflicts

---
 patches/0001-Vendor-external-dependencies.patch    | 14 +++++++-------
 .../0002-Add-crypto-backend-GOEXPERIMENTs.patch    | 10 +++++-----
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 69cc45138d0..afca9565ad2 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -533,7 +533,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 938fdb2955f766..5e8404e1a7e2ea 100644
+index df4fba11865b84..c16e08c45e76b8 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -542,11 +542,11 @@ index 938fdb2955f766..5e8404e1a7e2ea 100644
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
- 	golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
+ 	golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.36.1-0.20260513122029-343ee60345a1
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d78128ce1beace..a607cee2c045d6 100644
+index b8531a556a60ab..4173afb82bbd89 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -559,7 +559,7 @@ index d78128ce1beace..a607cee2c045d6 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695 h1:q45HsUyFzBjBk4mHGgUewJf6KKOkNiWB8wMx0X6elyA=
+ golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589 h1:vhLfA6kUzRvCYV5uFBJbdMndztX1STqGC8GmQJsuldY=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -2226,7 +2226,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index 68ae04853cc802..703836c46ee18e 100644
+index b8a8f795ec2475..0844d267c939ea 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2244,8 +2244,8 @@ index 68ae04853cc802..703836c46ee18e 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.23.1-0.20260109160903-657d90bd6695
- ## explicit; go 1.24.0
+ # golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589
+ ## explicit; go 1.25.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 31d03738a0b..2132d881236 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -61,10 +61,10 @@ index 74cafe9613917d..31ce076273aba2 100644
  // Additional information available from 'go env' but not read from the environment:
  //
 diff --git a/src/cmd/go/internal/envcmd/env.go b/src/cmd/go/internal/envcmd/env.go
-index e950c651691c40..86ee152e96b71b 100644
+index ed23b856f132c6..58ce4adbc4e394 100644
 --- a/src/cmd/go/internal/envcmd/env.go
 +++ b/src/cmd/go/internal/envcmd/env.go
-@@ -118,6 +118,7 @@ func MkEnv() []cfg.EnvVar {
+@@ -125,6 +125,7 @@ func MkEnv() []cfg.EnvVar {
  		{Name: "GOTOOLDIR", Value: build.ToolDir},
  		{Name: "GOVCS", Value: cfg.GOVCS},
  		{Name: "GOVERSION", Value: runtime.Version()},
@@ -72,12 +72,12 @@ index e950c651691c40..86ee152e96b71b 100644
  	}
  
  	for i := range env {
-@@ -126,7 +127,7 @@ func MkEnv() []cfg.EnvVar {
+@@ -133,7 +134,7 @@ func MkEnv() []cfg.EnvVar {
  			if env[i].Value != "on" && env[i].Value != "" {
  				env[i].Changed = true
  			}
--		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPRIVATE", "GOTMPDIR", "GOVCS":
-+		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPRIVATE", "GOTMPDIR", "GOVCS", "MS_GO_NOSYSTEMCRYPTO":
+-		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS":
++		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS", "MS_GO_NOSYSTEMCRYPTO":
  			if env[i].Value != "" {
  				env[i].Changed = true
  			}

From 782a1ceff285381d0f08afb1765e8d744f251030 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 21 May 2026 14:02:00 +0100
Subject: [PATCH 870/887] update openssl backend to point to new location
 (#2290)

* update openssl backend to point to new location

* update docs references

* fix deps test

* fix docs link
---
 eng/_util/cmd/upgrader/upgrader.go            |     6 +-
 eng/doc/fips/README.md                        |     5 +-
 eng/doc/fips/UserGuide.md                     |     6 +-
 .../0001-Vendor-external-dependencies.patch   | 56506 ++++++++--------
 ...03-Implement-crypto-internal-backend.patch |    39 +-
 patches/0004-Use-crypto-backends.patch        |    10 +-
 6 files changed, 28215 insertions(+), 28357 deletions(-)

diff --git a/eng/_util/cmd/upgrader/upgrader.go b/eng/_util/cmd/upgrader/upgrader.go
index c79af3aea85..d3398795843 100644
--- a/eng/_util/cmd/upgrader/upgrader.go
+++ b/eng/_util/cmd/upgrader/upgrader.go
@@ -28,10 +28,10 @@ type depsInfo struct {
 
 var infos = map[string]depsInfo{
 	"openssl": {
-		url: "https://github.com/golang-fips/openssl",
-		mod: "github.com/golang-fips/openssl/v2",
+		url: "https://github.com/microsoft/go-crypto-openssl",
+		mod: "github.com/microsoft/go-crypto-openssl",
 		wd:  "./go/src",
-		ref: "v2",
+		ref: "main",
 	},
 	"windows": {
 		url: "https://github.com/microsoft/go-crypto-winnative",
diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md
index 837147e1742..6f766e6f436 100644
--- a/eng/doc/fips/README.md
+++ b/eng/doc/fips/README.md
@@ -36,7 +36,7 @@ The Microsoft build of Go modifies the Go runtime to call into a platform-provid
 Depending on the platform, this is done using cgo or syscalls.
 This allows Go programs to use a platform-provided FIPS 140 certified crypto library.
 
-On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [golang-fips/openssl] module. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. On macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
+On Linux, the fork uses [OpenSSL](https://www.openssl.org/) through the [go-crypto-openssl] module. On Windows, [CNG](https://docs.microsoft.com/en-us/windows/win32/seccng/about-cng), using [go-crypto-winnative]. On macOS, [CommonCrypto](https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man3/Common%20Crypto.3cc.html) and [CryptoKit](https://developer.apple.com/documentation/cryptokit) using [go-crypto-darwin]. Similar to BoringSSL, certain OpenSSL, CNG and CommonCrypto/CryptoKit versions are FIPS 140 certified.
 
 > [!IMPORTANT]
 > An application built with Microsoft's Go toolchain and running in FIPS compatible mode is not FIPS compliant _per-se_.
@@ -385,7 +385,7 @@ On Linux, the Go runtime supports multiple OpenSSL versions. It discovers and pi
 Not all OpenSSL versions are supported. OpenSSL does not maintain ABI compatibility between different releases, even if only the patch version is increased, it needs specific attention to implement support. The relative importance of each version also results in a different amount of automated testing that has been implemented for various supported version. These are supported versions and the amount of automated validation for each one:
 
 - OpenSSL 1.1.1: the Microsoft CI builds official releases and runs the Go toolset test suite with this version.
-- OpenSSL 1.1.0, 1.1.1, and 3.0.2: the [golang-fips/openssl] and [go-crypto-openssl] repository CI tests basic operation, but not the integration with the Go runtime.
+- OpenSSL 1.1.0, 1.1.1, and 3.0.2: the [go-crypto-openssl] repository CI tests basic operation, but not the integration with the Go runtime.
   - Prior to Go 1.25, this list includes 1.0.2.
 
 Versions not listed above are not supported at all.
@@ -560,7 +560,6 @@ See the [Microsoft build of Go 1.24 FIPS changes](https://devblogs.microsoft.com
 - For historical information about Go 1.16-1.18, see [the FIPS documentation in the 1.20 release branch](https://github.com/microsoft/go/tree/microsoft/release-branch.go1.20/eng/doc/fips). It includes details about FIPS in 1.18 and the changes in 1.19.
 
 [go-crypto-openssl]: https://github.com/microsoft/go-crypto-openssl
-[golang-fips/openssl]: https://github.com/golang-fips/openssl
 [go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
 [go-crypto-darwin]: https://github.com/microsoft/go-crypto-darwin
 [dlopen]: https://man7.org/linux/man-pages/man3/dlopen.3.html
diff --git a/eng/doc/fips/UserGuide.md b/eng/doc/fips/UserGuide.md
index be7efb77bfe..34b845811aa 100644
--- a/eng/doc/fips/UserGuide.md
+++ b/eng/doc/fips/UserGuide.md
@@ -97,12 +97,14 @@ The Go crypto documentation is available online at https://pkg.go.dev/crypto.
 
 ## The Microsoft build of Go crypto backends
 
-The OpenSSL backend uses [golang-fips/openssl].
+The OpenSSL backend uses [go-crypto-openssl].
 The CNG backend uses [go-crypto-winnative].
+The CommonCrypto/CryptoKit backend uses [go-crypto-darwin].
 For more general information about the backends, such as how to enable them, see the [Microsoft build of Go FIPS README](./README.md).
 
-[golang-fips/openssl]: https://github.com/golang-fips/openssl
+[go-crypto-openssl]: https://github.com/microsoft/go-crypto-openssl
 [go-crypto-winnative]: https://github.com/microsoft/go-crypto-winnative
+[go-crypto-darwin]: https://github.com/microsoft/go-crypto-darwin
 
 > [!NOTE]
 > The CNG backend uses a module called "bcrypt" to interact with CNG.
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index afca9565ad2..3411b570fcb 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -37,132 +37,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  src/go.sum                                    |    6 +
  src/go/build/deps_test.go                     |   55 +-
  src/go/build/vendor_test.go                   |    4 +
- .../golang-fips/openssl/v2/.gitignore         |    3 +
- .../golang-fips/openssl/v2/.gitleaks.toml     |    9 +
- .../github.com/golang-fips/openssl/v2/LICENSE |   20 +
- .../golang-fips/openssl/v2/README.md          |   66 +
- .../github.com/golang-fips/openssl/v2/aes.go  |  157 ++
- .../golang-fips/openssl/v2/bbig/big.go        |   37 +
- .../github.com/golang-fips/openssl/v2/big.go  |   11 +
- .../openssl/v2/chacha20poly1305.go            |  151 +
- .../golang-fips/openssl/v2/cipher.go          |  665 +++++
- .../golang-fips/openssl/v2/const.go           |   99 +
- .../golang-fips/openssl/v2/cshake.go          |  255 ++
- .../github.com/golang-fips/openssl/v2/des.go  |  118 +
- .../github.com/golang-fips/openssl/v2/dsa.go  |  305 ++
- .../github.com/golang-fips/openssl/v2/ec.go   |  131 +
- .../github.com/golang-fips/openssl/v2/ecdh.go |  340 +++
- .../golang-fips/openssl/v2/ecdsa.go           |  219 ++
- .../golang-fips/openssl/v2/ed25519.go         |  208 ++
- .../github.com/golang-fips/openssl/v2/evp.go  |  614 ++++
- .../github.com/golang-fips/openssl/v2/hash.go |  520 ++++
- .../github.com/golang-fips/openssl/v2/hkdf.go |  441 +++
- .../github.com/golang-fips/openssl/v2/hmac.go |  278 ++
- .../openssl/v2/internal/fakecgo/abi_amd64.h   |   99 +
- .../openssl/v2/internal/fakecgo/abi_arm64.h   |   39 +
- .../openssl/v2/internal/fakecgo/abi_loong64.h |   60 +
- .../openssl/v2/internal/fakecgo/abi_ppc64x.h  |  195 ++
- .../openssl/v2/internal/fakecgo/abi_riscv64.h |   72 +
- .../openssl/v2/internal/fakecgo/asm_386.s     |   29 +
- .../openssl/v2/internal/fakecgo/asm_amd64.s   |   39 +
- .../openssl/v2/internal/fakecgo/asm_arm.s     |   52 +
- .../openssl/v2/internal/fakecgo/asm_arm64.s   |   36 +
- .../openssl/v2/internal/fakecgo/asm_loong64.s |   40 +
- .../openssl/v2/internal/fakecgo/asm_ppc64le.s |   82 +
- .../openssl/v2/internal/fakecgo/asm_riscv64.s |   37 +
- .../openssl/v2/internal/fakecgo/asm_s390x.s   |   55 +
- .../openssl/v2/internal/fakecgo/callbacks.go  |   93 +
- .../openssl/v2/internal/fakecgo/fakecgo.go    |   14 +
- .../openssl/v2/internal/fakecgo/fakecgo.lock  |    3 +
- .../openssl/v2/internal/fakecgo/freebsd.go    |   27 +
- .../openssl/v2/internal/fakecgo/generate.go   |    3 +
- .../openssl/v2/internal/fakecgo/go_darwin.go  |   88 +
- .../openssl/v2/internal/fakecgo/go_freebsd.go |   79 +
- .../openssl/v2/internal/fakecgo/go_libinit.go |   72 +
- .../openssl/v2/internal/fakecgo/go_linux.go   |   79 +
- .../openssl/v2/internal/fakecgo/go_setenv.go  |   18 +
- .../openssl/v2/internal/fakecgo/go_util.go    |   38 +
- .../openssl/v2/internal/fakecgo/iscgo.go      |   19 +
- .../openssl/v2/internal/fakecgo/libcgo.go     |   39 +
- .../v2/internal/fakecgo/libcgo_darwin.go      |   26 +
- .../v2/internal/fakecgo/libcgo_freebsd.go     |   20 +
- .../v2/internal/fakecgo/libcgo_linux.go       |   20 +
- .../openssl/v2/internal/fakecgo/linux.go      |  184 ++
- .../openssl/v2/internal/fakecgo/setenv.go     |   19 +
- .../v2/internal/fakecgo/trampolines_386.s     |  121 +
- .../v2/internal/fakecgo/trampolines_amd64.s   |  107 +
- .../v2/internal/fakecgo/trampolines_arm.s     |  122 +
- .../v2/internal/fakecgo/trampolines_arm64.s   |   81 +
- .../internal/fakecgo/trampolines_linux_386.s  |   78 +
- .../fakecgo/trampolines_linux_amd64.s         |   69 +
- .../internal/fakecgo/trampolines_linux_arm.s  |   69 +
- .../fakecgo/trampolines_linux_arm64.s         |   60 +
- .../fakecgo/trampolines_linux_loong64.s       |   60 +
- .../fakecgo/trampolines_linux_ppc64le.s       |   69 +
- .../fakecgo/trampolines_linux_riscv64.s       |   60 +
- .../fakecgo/trampolines_linux_s390x.s         |   53 +
- .../v2/internal/fakecgo/trampolines_loong64.s |   78 +
- .../v2/internal/fakecgo/trampolines_ppc64le.s |  128 +
- .../v2/internal/fakecgo/trampolines_riscv64.s |   76 +
- .../v2/internal/fakecgo/trampolines_s390x.s   |  154 +
- .../openssl/v2/internal/fakecgo/zsymbols.go   |  165 ++
- .../v2/internal/fakecgo/zsymbols_darwin.go    |   59 +
- .../v2/internal/fakecgo/zsymbols_freebsd.go   |   48 +
- .../v2/internal/fakecgo/zsymbols_linux.go     |  158 ++
- .../v2/internal/fakecgo/ztrampolines_darwin.s |   19 +
- .../internal/fakecgo/ztrampolines_freebsd.s   |   16 +
- .../v2/internal/fakecgo/ztrampolines_linux.s  |   46 +
- .../v2/internal/fakecgo/ztrampolines_stubs.s  |   55 +
- .../openssl/v2/internal/ossl/asm_386.s        |   98 +
- .../openssl/v2/internal/ossl/asm_amd64.s      |  120 +
- .../openssl/v2/internal/ossl/asm_arm.s        |  104 +
- .../openssl/v2/internal/ossl/asm_arm64.s      |   97 +
- .../openssl/v2/internal/ossl/asm_loong64.s    |  116 +
- .../openssl/v2/internal/ossl/asm_others.s     |    7 +
- .../openssl/v2/internal/ossl/asm_ppc64le.s    |  141 +
- .../openssl/v2/internal/ossl/asm_riscv64.s    |  109 +
- .../openssl/v2/internal/ossl/asm_s390x.s      |  117 +
- .../golang-fips/openssl/v2/internal/ossl/dl.h |   12 +
- .../openssl/v2/internal/ossl/errors.go        |   34 +
- .../openssl/v2/internal/ossl/errors_cgo.go    |   30 +
- .../openssl/v2/internal/ossl/errors_nocgo.go  |   16 +
- .../openssl/v2/internal/ossl/ossl.go          |   59 +
- .../openssl/v2/internal/ossl/shims.h          |  442 +++
- .../openssl/v2/internal/ossl/syscall_nocgo.go |   84 +
- .../v2/internal/ossl/syscall_nocgo_darwin.go  |    5 +
- .../v2/internal/ossl/syscall_nocgo_freebsd.go |    5 +
- .../v2/internal/ossl/syscall_nocgo_linux.go   |    5 +
- .../v2/internal/ossl/syscall_nocgo_unix.go    |   20 +
- .../v2/internal/ossl/syscall_nocgo_windows.go |   22 +
- .../openssl/v2/internal/ossl/zdl.s            |   55 +
- .../openssl/v2/internal/ossl/zdl_nocgo.go     |   58 +
- .../openssl/v2/internal/ossl/zossl.c          | 2071 ++++++++++++++
- .../openssl/v2/internal/ossl/zossl.go         |   73 +
- .../openssl/v2/internal/ossl/zossl.h          |  371 +++
- .../openssl/v2/internal/ossl/zossl_cgo.go     | 1502 ++++++++++
- .../openssl/v2/internal/ossl/zossl_nocgo.go   | 2468 +++++++++++++++++
- .../golang-fips/openssl/v2/mldsa.go           |  448 +++
- .../golang-fips/openssl/v2/mlkem.go           |  368 +++
- .../golang-fips/openssl/v2/openssl.go         |  240 ++
- .../golang-fips/openssl/v2/openssl_cgo.go     |   16 +
- .../golang-fips/openssl/v2/openssl_nocgo.go   |   32 +
- .../golang-fips/openssl/v2/osslsetup/fips.go  |  166 ++
- .../golang-fips/openssl/v2/osslsetup/init.go  |  169 ++
- .../openssl/v2/osslsetup/init_cgo_unix.go     |   31 +
- .../openssl/v2/osslsetup/init_nocgo_unix.go   |   32 +
- .../openssl/v2/osslsetup/init_windows.go      |   36 +
- .../openssl/v2/osslsetup/osslsetup.go         |  108 +
- .../openssl/v2/osslsetup/osslsetup_cgo.go     |   11 +
- .../openssl/v2/osslsetup/osslsetup_nocgo.go   |   21 +
- .../golang-fips/openssl/v2/params.go          |  190 ++
- .../golang-fips/openssl/v2/pbkdf2.go          |   54 +
- .../golang-fips/openssl/v2/provideropenssl.go |  249 ++
- .../openssl/v2/providersymcrypt.go            |  330 +++
- .../github.com/golang-fips/openssl/v2/rand.go |   21 +
- .../github.com/golang-fips/openssl/v2/rc4.go  |   74 +
- .../github.com/golang-fips/openssl/v2/rsa.go  |  711 +++++
- .../golang-fips/openssl/v2/tls1prf.go         |  156 ++
- .../github.com/golang-fips/openssl/v2/zaes.go |   86 +
  .../microsoft/go-crypto-darwin/LICENSE        |   21 +
  .../microsoft/go-crypto-darwin/bbig/big.go    |   31 +
  .../internal/commoncrypto/commoncrypto.go     |    9 +
@@ -244,6 +118,129 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-darwin/xcrypto/rand.go          |   28 +
  .../microsoft/go-crypto-darwin/xcrypto/rc4.go |   81 +
  .../microsoft/go-crypto-darwin/xcrypto/rsa.go |  208 ++
+ .../microsoft/go-crypto-openssl/LICENSE       |   21 +
+ .../microsoft/go-crypto-openssl/bbig/big.go   |   40 +
+ .../internal/fakecgo/abi_amd64.h              |   99 +
+ .../internal/fakecgo/abi_arm64.h              |   39 +
+ .../internal/fakecgo/abi_loong64.h            |   60 +
+ .../internal/fakecgo/abi_ppc64x.h             |  195 ++
+ .../internal/fakecgo/abi_riscv64.h            |   72 +
+ .../internal/fakecgo/asm_386.s                |   29 +
+ .../internal/fakecgo/asm_amd64.s              |   39 +
+ .../internal/fakecgo/asm_arm.s                |   52 +
+ .../internal/fakecgo/asm_arm64.s              |   36 +
+ .../internal/fakecgo/asm_loong64.s            |   40 +
+ .../internal/fakecgo/asm_ppc64le.s            |   82 +
+ .../internal/fakecgo/asm_riscv64.s            |   37 +
+ .../internal/fakecgo/asm_s390x.s              |   55 +
+ .../internal/fakecgo/callbacks.go             |   93 +
+ .../internal/fakecgo/fakecgo.go               |   14 +
+ .../internal/fakecgo/fakecgo.lock             |    3 +
+ .../internal/fakecgo/freebsd.go               |   27 +
+ .../internal/fakecgo/generate.go              |    6 +
+ .../internal/fakecgo/go_darwin.go             |   88 +
+ .../internal/fakecgo/go_freebsd.go            |   79 +
+ .../internal/fakecgo/go_libinit.go            |   72 +
+ .../internal/fakecgo/go_linux.go              |   79 +
+ .../internal/fakecgo/go_setenv.go             |   18 +
+ .../internal/fakecgo/go_util.go               |   38 +
+ .../internal/fakecgo/iscgo.go                 |   19 +
+ .../internal/fakecgo/libcgo.go                |   39 +
+ .../internal/fakecgo/libcgo_darwin.go         |   26 +
+ .../internal/fakecgo/libcgo_freebsd.go        |   20 +
+ .../internal/fakecgo/libcgo_linux.go          |   20 +
+ .../internal/fakecgo/linux.go                 |  184 ++
+ .../internal/fakecgo/setenv.go                |   19 +
+ .../internal/fakecgo/trampolines_386.s        |  121 +
+ .../internal/fakecgo/trampolines_amd64.s      |  107 +
+ .../internal/fakecgo/trampolines_arm.s        |  122 +
+ .../internal/fakecgo/trampolines_arm64.s      |   81 +
+ .../internal/fakecgo/trampolines_linux_386.s  |   78 +
+ .../fakecgo/trampolines_linux_amd64.s         |   69 +
+ .../internal/fakecgo/trampolines_linux_arm.s  |   69 +
+ .../fakecgo/trampolines_linux_arm64.s         |   60 +
+ .../fakecgo/trampolines_linux_loong64.s       |   60 +
+ .../fakecgo/trampolines_linux_ppc64le.s       |   69 +
+ .../fakecgo/trampolines_linux_riscv64.s       |   60 +
+ .../fakecgo/trampolines_linux_s390x.s         |   53 +
+ .../internal/fakecgo/trampolines_loong64.s    |   78 +
+ .../internal/fakecgo/trampolines_ppc64le.s    |  128 +
+ .../internal/fakecgo/trampolines_riscv64.s    |   76 +
+ .../internal/fakecgo/trampolines_s390x.s      |  154 +
+ .../internal/fakecgo/zsymbols.go              |  165 ++
+ .../internal/fakecgo/zsymbols_darwin.go       |   59 +
+ .../internal/fakecgo/zsymbols_freebsd.go      |   48 +
+ .../internal/fakecgo/zsymbols_linux.go        |  158 ++
+ .../internal/fakecgo/ztrampolines_darwin.s    |   19 +
+ .../internal/fakecgo/ztrampolines_freebsd.s   |   16 +
+ .../internal/fakecgo/ztrampolines_linux.s     |   46 +
+ .../internal/fakecgo/ztrampolines_stubs.s     |   55 +
+ .../go-crypto-openssl/internal/ossl/asm_386.s |  101 +
+ .../internal/ossl/asm_amd64.s                 |  123 +
+ .../go-crypto-openssl/internal/ossl/asm_arm.s |  107 +
+ .../internal/ossl/asm_arm64.s                 |  100 +
+ .../internal/ossl/asm_loong64.s               |  119 +
+ .../internal/ossl/asm_others.s                |   10 +
+ .../internal/ossl/asm_ppc64le.s               |  144 +
+ .../internal/ossl/asm_riscv64.s               |  112 +
+ .../internal/ossl/asm_s390x.s                 |  120 +
+ .../go-crypto-openssl/internal/ossl/dl.h      |   15 +
+ .../go-crypto-openssl/internal/ossl/errors.go |   37 +
+ .../internal/ossl/errors_cgo.go               |   33 +
+ .../internal/ossl/errors_nocgo.go             |   19 +
+ .../go-crypto-openssl/internal/ossl/ossl.go   |   62 +
+ .../go-crypto-openssl/internal/ossl/shims.h   |  446 +++
+ .../internal/ossl/syscall_nocgo.go            |   87 +
+ .../internal/ossl/syscall_nocgo_darwin.go     |    8 +
+ .../internal/ossl/syscall_nocgo_freebsd.go    |    8 +
+ .../internal/ossl/syscall_nocgo_linux.go      |    8 +
+ .../internal/ossl/syscall_nocgo_unix.go       |   23 +
+ .../internal/ossl/syscall_nocgo_windows.go    |   25 +
+ .../go-crypto-openssl/internal/ossl/zdl.s     |   58 +
+ .../internal/ossl/zdl_nocgo.go                |   61 +
+ .../go-crypto-openssl/internal/ossl/zossl.c   | 2083 ++++++++++++++
+ .../go-crypto-openssl/internal/ossl/zossl.go  |   76 +
+ .../go-crypto-openssl/internal/ossl/zossl.h   |  375 +++
+ .../internal/ossl/zossl_cgo.go                | 1513 ++++++++++
+ .../internal/ossl/zossl_nocgo.go              | 2481 +++++++++++++++++
+ .../go-crypto-openssl/openssl/aes.go          |  158 ++
+ .../go-crypto-openssl/openssl/big.go          |   14 +
+ .../openssl/chacha20poly1305.go               |  152 +
+ .../go-crypto-openssl/openssl/cipher.go       |  666 +++++
+ .../go-crypto-openssl/openssl/const.go        |  109 +
+ .../go-crypto-openssl/openssl/cshake.go       |  256 ++
+ .../go-crypto-openssl/openssl/des.go          |  121 +
+ .../go-crypto-openssl/openssl/dsa.go          |  306 ++
+ .../microsoft/go-crypto-openssl/openssl/ec.go |  132 +
+ .../go-crypto-openssl/openssl/ecdh.go         |  341 +++
+ .../go-crypto-openssl/openssl/ecdsa.go        |  220 ++
+ .../go-crypto-openssl/openssl/ed25519.go      |  209 ++
+ .../go-crypto-openssl/openssl/evp.go          |  615 ++++
+ .../go-crypto-openssl/openssl/hash.go         |  521 ++++
+ .../go-crypto-openssl/openssl/hkdf.go         |  330 +++
+ .../go-crypto-openssl/openssl/hmac.go         |  280 ++
+ .../go-crypto-openssl/openssl/mldsa.go        |  449 +++
+ .../go-crypto-openssl/openssl/mlkem.go        |  369 +++
+ .../go-crypto-openssl/openssl/openssl.go      |  183 ++
+ .../go-crypto-openssl/openssl/openssl_cgo.go  |   17 +
+ .../openssl/openssl_nocgo.go                  |   35 +
+ .../go-crypto-openssl/openssl/params.go       |  191 ++
+ .../go-crypto-openssl/openssl/pbkdf2.go       |   86 +
+ .../openssl/provideropenssl.go                |  250 ++
+ .../openssl/providersymcrypt.go               |  331 +++
+ .../go-crypto-openssl/openssl/rand.go         |   37 +
+ .../go-crypto-openssl/openssl/rc4.go          |   76 +
+ .../go-crypto-openssl/openssl/rsa.go          |  712 +++++
+ .../go-crypto-openssl/openssl/tls1prf.go      |  157 ++
+ .../go-crypto-openssl/openssl/zaes.go         |   87 +
+ .../go-crypto-openssl/osslsetup/fips.go       |   69 +
+ .../go-crypto-openssl/osslsetup/init.go       |  170 ++
+ .../osslsetup/init_cgo_unix.go                |   34 +
+ .../osslsetup/init_nocgo_unix.go              |   35 +
+ .../osslsetup/init_windows.go                 |   37 +
+ .../go-crypto-openssl/osslsetup/osslsetup.go  |  109 +
+ .../osslsetup/osslsetup_cgo.go                |   12 +
+ .../osslsetup/osslsetup_nocgo.go              |   24 +
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
  .../microsoft/go-crypto-winnative/cng/aes.go  |  435 +++
  .../go-crypto-winnative/cng/bbig/big.go       |   31 +
@@ -252,7 +249,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-winnative/cng/cipher.go         |   52 +
  .../microsoft/go-crypto-winnative/cng/cng.go  |  140 +
  .../microsoft/go-crypto-winnative/cng/des.go  |  106 +
- .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 ++++
+ .../microsoft/go-crypto-winnative/cng/dsa.go  |  465 +++
  .../microsoft/go-crypto-winnative/cng/ecdh.go |  255 ++
  .../go-crypto-winnative/cng/ecdsa.go          |  169 ++
  .../microsoft/go-crypto-winnative/cng/hash.go |  344 +++
@@ -273,7 +270,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 265 files changed, 35749 insertions(+), 7 deletions(-)
+ 262 files changed, 35630 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -296,132 +293,6 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/telemetry/telemetry.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
  create mode 100644 src/crypto/internal/backend/deps_ignore.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitignore
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/LICENSE
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/README.md
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/aes.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/big.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cipher.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/const.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/cshake.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/des.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/dsa.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ec.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/evp.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hash.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/hmac.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/params.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rand.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rc4.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/rsa.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
- create mode 100644 src/vendor/github.com/golang-fips/openssl/v2/zaes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
@@ -503,6 +374,129 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/LICENSE
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/bbig/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_amd64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_arm64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_loong64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_ppc64x.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_riscv64.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_386.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_loong64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_ppc64le.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_riscv64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_s390x.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/callbacks.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.lock
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/freebsd.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/generate.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_freebsd.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_libinit.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_linux.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_setenv.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_util.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/iscgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_freebsd.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_linux.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/linux.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/setenv.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_386.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_386.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_loong64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_ppc64le.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_riscv64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_s390x.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_loong64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_ppc64le.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_riscv64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_s390x.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_freebsd.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_linux.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_darwin.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_freebsd.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_linux.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_stubs.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_386.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_amd64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_loong64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_others.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_ppc64le.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_riscv64.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_s390x.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/dl.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/ossl.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/shims.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_darwin.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_freebsd.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_linux.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_unix.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_windows.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl.s
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.c
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.h
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/aes.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/big.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/chacha20poly1305.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/const.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cshake.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/des.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ec.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hash.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mlkem.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_nocgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/params.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/providersymcrypt.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rand.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rc4.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/openssl/zaes.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_cgo_unix.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_nocgo_unix.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_windows.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_cgo.go
+ create mode 100644 src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_nocgo.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/aes.go
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/cng/bbig/big.go
@@ -2249,7 +2243,7 @@ index b8a8f795ec2475..0844d267c939ea 100644
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
 new file mode 100644
-index 00000000000000..ae4055d2d71303
+index 00000000000000..f5dc9afe4b0ead
 --- /dev/null
 +++ b/src/crypto/internal/backend/deps_ignore.go
 @@ -0,0 +1,22 @@
@@ -2262,8 +2256,8 @@ index 00000000000000..ae4055d2d71303
 +package main
 +
 +import (
-+	_ "github.com/golang-fips/openssl/v2"
-+	_ "github.com/golang-fips/openssl/v2/bbig"
++	_ "github.com/microsoft/go-crypto-openssl/bbig"
++	_ "github.com/microsoft/go-crypto-openssl/openssl"
 +
 +	_ "github.com/microsoft/go-crypto-darwin/bbig"
 +	_ "github.com/microsoft/go-crypto-darwin/xcrypto"
@@ -2276,7 +2270,7 @@ index 00000000000000..ae4055d2d71303
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 8703fad3b226c9..10ccf74f86ae3b 100644
+index 8703fad3b226c9..fe3cd514ef512d 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2285,19 +2279,19 @@ index 8703fad3b226c9..10ccf74f86ae3b 100644
  )
 +
 +require (
-+	github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b
++	github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 43554ff45c183e..143b3063c17042 100644
+index 43554ff45c183e..01f4f244d6f7be 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce h1:Kl2/ytBV5nuKMGe6YNZsm3IEq9y1i0xjf/LUdAXBK9A=
-+github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce/go.mod h1:E+yPtdllHdy5S8YLMfcIRcqjqQySyiexqxxaLK7+cQQ=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b h1:HADuteQytnLec1jmAOGPGCukWIxObrAm/CBYtVzuo5o=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
++github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69 h1:gtZRTEEfTbjAKMNbDGXeayGoReqVhBIw+J8QzgWuBEs=
++github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69/go.mod h1:gJrjX+yWGi9pkbfPVDDh+ZbgjtQoRSXHjb/ZyjwKk34=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe h1:WDbUuTTKY8VElMRA3JJ8Quvj9xK9GqEcTiBZ3BF+7mI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
@@ -2330,9 +2324,9 @@ index 25cb06182cae3d..02b52e2ab9c296 100644
 -	crypto/internal/boring/syso,
 -	crypto/internal/boring/bcache
 +	syscall, strconv
-+	< github.com/golang-fips/openssl/v2/internal/fakecgo
-+	< github.com/golang-fips/openssl/v2/internal/ossl
-+	< github.com/golang-fips/openssl/v2/osslsetup;
++	< github.com/microsoft/go-crypto-openssl/internal/fakecgo
++	< github.com/microsoft/go-crypto-openssl/internal/ossl
++	< github.com/microsoft/go-crypto-openssl/osslsetup;
 +
 +	syscall, strconv
 +	< github.com/microsoft/go-crypto-winnative/internal/subtle
@@ -2346,8 +2340,8 @@ index 25cb06182cae3d..02b52e2ab9c296 100644
 +	< crypto/cipher;
 +
 +	crypto, crypto/subtle, hash, crypto/cipher,
-+	github.com/golang-fips/openssl/v2/osslsetup
-+	< github.com/golang-fips/openssl/v2;
++	github.com/microsoft/go-crypto-openssl/osslsetup
++	< github.com/microsoft/go-crypto-openssl/openssl;
 +
 +	crypto, crypto/subtle, hash, crypto/cipher,
 +	github.com/microsoft/go-crypto-darwin/internal/commoncrypto,
@@ -2377,7 +2371,7 @@ index 25cb06182cae3d..02b52e2ab9c296 100644
  
  	# CRYPTO-MATH is crypto that exposes math/big APIs - no cgo, net; fmt now ok.
  
-+	math/big, github.com/golang-fips/openssl/v2 < github.com/golang-fips/openssl/v2/bbig;
++	math/big, github.com/microsoft/go-crypto-openssl/openssl < github.com/microsoft/go-crypto-openssl/bbig;
 +	math/big, github.com/microsoft/go-crypto-darwin/xcrypto < github.com/microsoft/go-crypto-darwin/bbig;
 +	math/big, github.com/microsoft/go-crypto-winnative/cng < github.com/microsoft/go-crypto-winnative/cng/bbig;
 +
@@ -2398,7 +2392,7 @@ index 25cb06182cae3d..02b52e2ab9c296 100644
  	var imports []string
  	var haveImport = map[string]bool{}
 -	if pkg == "crypto/internal/boring" {
-+	if pkg == "crypto/internal/boring" || strings.HasPrefix(pkg, "github.com/golang-fips/openssl/v2") || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-darwin") {
++	if pkg == "crypto/internal/boring" || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-openssl") || strings.HasPrefix(pkg, "github.com/microsoft/go-crypto-darwin") {
  		haveImport["C"] = true // kludge: prevent C from appearing in crypto/internal/boring imports
  	}
  	fset := token.NewFileSet()
@@ -2410,21457 +2404,636 @@ index 7f6237ffd59c11..8f68bc361081f1 100644
  	"github.com/google/pprof",
  	"github.com/ianlancetaylor/demangle",
  	"rsc.io/markdown",
-+	"github.com/golang-fips/openssl",
++	"github.com/microsoft/go-crypto-openssl",
 +	"github.com/microsoft/go-crypto-winnative",
 +	"github.com/microsoft/go-crypto-darwin",
 +	"github.com/microsoft/go-infra/telemetry",
  }
  
  // Verify that the vendor directories contain only packages matching the list above.
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitignore b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
-new file mode 100644
-index 00000000000000..0846322952e4df
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/.gitignore
-@@ -0,0 +1,3 @@
-+**/.DS_Store
-+.vscode/
-+.github/benchcheck/benchcheck
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml b/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
-new file mode 100644
-index 00000000000000..aed2e22df2d555
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/.gitleaks.toml
-@@ -0,0 +1,9 @@
-+#
-+# GitLeaks Repo Specific Configuration
-+#
-+# This allowlist is used to ignore false positives during secret scans.
-+
-+[allowlist]
-+paths = [
-+      'ecdh_test.go',
-+]
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/LICENSE b/src/vendor/github.com/golang-fips/openssl/v2/LICENSE
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
 new file mode 100644
-index 00000000000000..97e85154015761
+index 00000000000000..9e841e7a26e4eb
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/LICENSE
-@@ -0,0 +1,20 @@
-+The MIT License (MIT)
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
+@@ -0,0 +1,21 @@
++    MIT License
 +
-+Copyright (c) 2022 The Golang FIPS Authors
++    Copyright (c) Microsoft Corporation.
 +
-+Permission is hereby granted, free of charge, to any person obtaining a copy of
-+this software and associated documentation files (the "Software"), to deal in
-+the Software without restriction, including without limitation the rights to
-+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
-+the Software, and to permit persons to whom the Software is furnished to do so,
-+subject to the following conditions:
++    Permission is hereby granted, free of charge, to any person obtaining a copy
++    of this software and associated documentation files (the "Software"), to deal
++    in the Software without restriction, including without limitation the rights
++    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++    copies of the Software, and to permit persons to whom the Software is
++    furnished to do so, subject to the following conditions:
 +
-+The above copyright notice and this permission notice shall be included in all
-+copies or substantial portions of the Software.
++    The above copyright notice and this permission notice shall be included in all
++    copies or substantial portions of the Software.
 +
-+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-\ No newline at end of file
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/README.md b/src/vendor/github.com/golang-fips/openssl/v2/README.md
++    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++    SOFTWARE
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
 new file mode 100644
-index 00000000000000..6e4c916be0fdcf
+index 00000000000000..73891afeab93d7
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/README.md
-@@ -0,0 +1,66 @@
-+# Go OpenSSL bindings for FIPS compliance
-+
-+[![Go Reference](https://pkg.go.dev/badge/github.com/golang-fips/openssl/v2.svg)](https://pkg.go.dev/github.com/golang-fips/openssl/v2)
-+
-+The `openssl` package implements Go crypto primitives using OpenSSL shared libraries and cgo. When configured correctly, OpenSSL can be executed in FIPS mode, making the `openssl` package FIPS compliant.
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
+@@ -0,0 +1,31 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+The `openssl` package is designed to be used as a drop-in replacement for the [boring](https://pkg.go.dev/crypto/internal/boring) package in order to facilitate integrating `openssl` inside a forked Go toolchain.
++package bbig
 +
-+## Disclaimer
++import (
++	"math/big"
 +
-+A program directly or indirectly using this package in FIPS mode can claim it is using a FIPS-certified cryptographic module (OpenSSL), but it can't claim the program as a whole is FIPS certified without passing the certification process, nor claim it is FIPS compliant without ensuring all crypto APIs and workflows are implemented in a FIPS-compliant manner.
++	"github.com/microsoft/go-crypto-darwin/xcrypto"
++)
 +
-+## Background
++func Enc(b *big.Int) xcrypto.BigInt {
++	if b == nil {
++		return nil
++	}
++	x := b.Bytes()
++	if len(x) == 0 {
++		return xcrypto.BigInt{}
++	}
++	return x
++}
 +
-+FIPS 140-2 is a U.S. government computer security standard used to approve cryptographic modules. FIPS compliance may come up when working with U.S. government and other regulated industries.
++func Dec(b xcrypto.BigInt) *big.Int {
++	if b == nil {
++		return nil
++	}
++	if len(b) == 0 {
++		return new(big.Int)
++	}
++	return new(big.Int).SetBytes(b)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
+new file mode 100644
+index 00000000000000..e1b9ee1d005406
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
+@@ -0,0 +1,9 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+### Go FIPS compliance
++// Package commoncrypto provides a Go interface to the CommonCrypto API
++package commoncrypto
 +
-+The Go `crypto` package is not FIPS certified, and the Go team has stated that it won't be, e.g. in [golang/go/issues/21734](https://github.com/golang/go/issues/21734#issuecomment-326980213) Adam Langley says:
++//go:generate go run ../../cmd/checkheader shims.h
++//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -package commoncrypto --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -nocgo -package commoncrypto --noerrors shims.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
+new file mode 100644
+index 00000000000000..de1f9bc059aa43
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
+@@ -0,0 +1,72 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+> The status of FIPS 140 for Go itself remains "no plans, basically zero chance".
++// This header file is used by the mkcgo tool to generate cgo and Go bindings
++// for the CommonCrypto C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zcommoncrypto.h" instead.
 +
-+On the other hand, Google maintains a branch that uses cgo and BoringSSL to implement various crypto primitives: https://github.com/golang/go/blob/dev.boringcrypto/README.boringcrypto.md. As BoringSSL is FIPS 140-2 certified, an application using that branch is more likely to be FIPS 140-2 compliant, yet Google does not provide any liability about the suitability of this code in relation to the FIPS 140-2 standard.
++#ifndef _GO_COMMONCRYPTO_SHIMS_H // only include this header once
++#define _GO_COMMONCRYPTO_SHIMS_H
 +
-+## Features
++#include <stdint.h> // uint64_t
++#include <stdlib.h> // size_t
 +
-+### Multiple OpenSSL versions supported
++// The following includes are used by the checkheader tool.
++// #include <CommonCrypto/CommonCrypto.h>
 +
-+The `openssl` package has support for multiple OpenSSL versions, namely 1.1.1, 3.x, and 4.x.
++typedef void *CCCryptorRef;
++typedef uint32_t CCModeOptions;
 +
-+All supported OpenSSL versions pass a small set of automatic tests that ensure they can be built and that there are no major regressions.
-+These tests do not validate the cryptographic correctness of the `openssl` package.
++typedef enum {
++  kCCEncrypt = 0,
++  kCCDecrypt = 1,
++} CCOperation;
 +
-+On top of that, the [golang-fips Go fork](https://github.com/golang-fips/go) (maintained by Red Hat) and the [Microsoft build of Go](https://github.com/microsoft/go) test a subset of the supported OpenSSL versions when integrated with the Go `crypto` package.
-+These tests are much more exhaustive and validate a specific OpenSSL version can produce working applications.
++typedef enum {
++  kCCModeCBC = 2,
++} CCMode;
 +
-+### Building without OpenSSL headers
++typedef enum {
++  KCCOptionECBMode = 2,
++} CCOptions;
 +
-+The `openssl` package does not use any symbol from the OpenSSL headers. There is no need that have them installed to build an application which imports this library.
++typedef enum {
++  kCCSuccess = 0,
++} CCCryptorStatus;
 +
-+The CI tests in this repository verify that all the functions and constants defined in our headers match the ones in the OpenSSL headers for every supported OpenSSL version.
++typedef enum {
++  kCCPBKDF2 = 2,
++} CCPBKDFAlgorithm;
 +
-+### Portable OpenSSL
++typedef enum {
++  kCCPRFHmacAlgSHA1 = 1,
++  kCCPRFHmacAlgSHA256 = 3,
++  kCCPRFHmacAlgSHA384 = 4,
++  kCCPRFHmacAlgSHA512 = 5,
++} CCPseudoRandomAlgorithm;
 +
-+The OpenSSL bindings are implemented in such a way that the OpenSSL version available when building a program does not have to match with the OpenSSL version used when running it.
-+In fact, OpenSSL doesn't need to be present on the builder.
-+For example, using the `openssl` package and `go build .` on a Windows host with `GOOS=linux` can produce a program that successfully runs on Linux and uses OpenSSL.
++enum {
++  kCCBlockSizeAES128 = 16,
++  kCCBlockSizeDES = 8,
++};
 +
-+This feature does not require any additional configuration, but it only works with OpenSSL versions known and supported by the Go toolchain that integrates the `openssl` package.
++typedef enum {
++  ccNoPadding = 0,
++} CCPadding;
 +
-+## Limitations
++typedef enum {
++  kCCAlgorithmAES = 0,
++  kCCAlgorithmDES = 1,
++  kCCAlgorithm3DES = 2,
++  kCCAlgorithmRC4 = 4,
++} CCAlgorithm;
 +
-+- Only Unix, Unix-like and Windows platforms are supported.
-+- The build must set `CGO_ENABLED=1`.
++CCCryptorStatus CCCryptorCreate(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(key, keyLength), slice(iv)));
++CCCryptorStatus CCCryptorRelease(CCCryptorRef cryptorRef) __attribute__((framework(System, B)));
++CCCryptorStatus CCCryptorUpdate(CCCryptorRef cryptorRef, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm algorithm, const char *password, size_t passwordLen, const uint8_t *salt, size_t saltLen, CCPseudoRandomAlgorithm prf, unsigned rounds, uint8_t *derivedKey, size_t derivedKeyLen) __attribute__((framework(System, B), slice(password, passwordLen), slice(salt, saltLen), slice(derivedKey, derivedKeyLen)));
++CCCryptorStatus CCCrypt(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(key, keyLength), slice(iv), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
++CCCryptorStatus CCCryptorCreateWithMode(CCOperation op, CCMode mode, CCAlgorithm alg, CCPadding padding, const void *iv, const void *key, size_t keyLength, const void *tweak, size_t tweakLength, int numRounds, CCModeOptions options, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(iv), slice(key, keyLength), slice(tweak, tweakLength)));
++CCCryptorStatus CCCryptorReset(CCCryptorRef cryptorRef, const void *iv) __attribute__((framework(System, B), slice(iv)));
 +
-+## Acknowledgements
++#endif // _GO_COMMONCRYPTO_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..fd322bcd1b885c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+The work done to support FIPS compatibility mode leverages code and ideas from other open-source projects:
++//go:build !cgo
 +
-+- All crypto stubs are a mirror of Google's [dev.boringcrypto branch](https://github.com/golang/go/tree/dev.boringcrypto) and the release branch ports of that branch.
-+- The mapping between BoringSSL and OpenSSL APIs is taken from the former [Red Hat Go fork](https://pagure.io/go).
-+- The portable OpenSSL implementation is ported from Microsoft's [.NET runtime](https://github.com/dotnet/runtime) cryptography module.
++package commoncrypto
 +
-+## Code of Conduct
++import (
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
++)
 +
-+This project adopts the Go code of conduct: https://go.dev/conduct.
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/aes.go b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
 new file mode 100644
-index 00000000000000..8d5d44db2ba360
+index 00000000000000..24f6e3d3f50dc1
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/aes.go
-@@ -0,0 +1,157 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
+@@ -0,0 +1,47 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+import (
-+	"crypto/cipher"
-+	"errors"
-+)
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+//go:generate go run github.com/golang-fips/openssl/v2/cmd/genaesmodes -in aes.go -modes CBC,CTR,GCM -out zaes.go
-+//go:generate go run github.com/golang-fips/openssl/v2/cmd/gentestvectors -out vectors_test.go
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zcommoncrypto.h"
 +
-+// Steps to support a new AES mode, e.g. `FOO`:
-+// 1. Add `FOO` to the list of modes in the `genaesmodes` command.
-+// 2. Run `go generate` to update the generated code.
-+// 3. Implement the necessary interfaces for the new struct, which will be named `cipherWithFOO`.
++CCCryptorStatus CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
++CCCryptorStatus CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
++CCCryptorStatus CCCryptorRelease(CCCryptorRef);
++CCCryptorStatus CCCryptorReset(CCCryptorRef, const unsigned char*);
++CCCryptorStatus CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
 +
-+// NewAESCipher creates and returns a new AES cipher.Block.
-+// The key argument should be the AES key, either 16, 24, or 32 bytes to select
-+// AES-128, AES-192, or AES-256.
-+// The returned cipher.Block implements the CBC, CTR, and/or GCM modes if
-+// the underlying OpenSSL library supports them.
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	var kind cipherKind
-+	switch len(key) * 8 {
-+	case 128:
-+		kind = cipherAES128
-+	case 192:
-+		kind = cipherAES192
-+	case 256:
-+		kind = cipherAES256
-+	default:
-+		return nil, errors.New("crypto/aes: invalid key size")
-+	}
-+	c, err := newEVPCipher(key, kind)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return newAESBlock(c, kind), nil
++CCCryptorStatus _mkcgo_CCCrypt(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, const unsigned char* _arg6, size_t _arg7, unsigned char* _arg8, size_t _arg9, size_t* _arg10) {
++	return CCCrypt(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
 +}
 +
-+// NewGCMTLS returns a GCM cipher specific to TLS
-+// and should not be used for non-TLS purposes.
-+func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
-+	if c, ok := c.(interface {
-+		NewGCMTLS() (cipher.AEAD, error)
-+	}); ok {
-+		return c.NewGCMTLS()
-+	}
-+	return nil, errors.New("GCM not supported")
++CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, CCCryptorRef* _arg6) {
++	return CCCryptorCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
 +}
 +
-+// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
-+// for non-TLS purposes.
-+func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
-+	if c, ok := c.(interface {
-+		NewGCMTLS13() (cipher.AEAD, error)
-+	}); ok {
-+		return c.NewGCMTLS13()
-+	}
-+	return nil, errors.New("GCM not supported")
++CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation _arg0, CCMode _arg1, CCAlgorithm _arg2, CCPadding _arg3, const unsigned char* _arg4, const unsigned char* _arg5, size_t _arg6, const unsigned char* _arg7, size_t _arg8, int _arg9, CCModeOptions _arg10, CCCryptorRef* _arg11) {
++	return CCCryptorCreateWithMode(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
 +}
 +
-+// aesCipher implements the cipher.Block interface.
-+type aesCipher struct {
-+	cipher *evpCipher
++CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef _arg0) {
++	return CCCryptorRelease(_arg0);
 +}
 +
-+func (c aesCipher) BlockSize() int {
-+	return c.cipher.blockSize
++CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef _arg0, const unsigned char* _arg1) {
++	return CCCryptorReset(_arg0, _arg1);
 +}
 +
-+func (c aesCipher) Encrypt(dst, src []byte) {
-+	if err := c.cipher.encrypt(dst, src); err != nil {
-+		// crypto/aes expects that the panic message starts with "crypto/aes: ".
-+		panic("crypto/aes: " + err.Error())
-+	}
++CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef _arg0, const unsigned char* _arg1, size_t _arg2, unsigned char* _arg3, size_t _arg4, size_t* _arg5) {
++	return CCCryptorUpdate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
 +}
 +
-+func (c aesCipher) Decrypt(dst, src []byte) {
-+	if err := c.cipher.decrypt(dst, src); err != nil {
-+		// crypto/aes expects that the panic message starts with "crypto/aes: ".
-+		panic("crypto/aes: " + err.Error())
-+	}
++CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm _arg0, const char* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, CCPseudoRandomAlgorithm _arg5, unsigned _arg6, uint8_t* _arg7, size_t _arg8) {
++	return CCKeyDerivationPBKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
 +}
 +
-+// Implement optional interfaces for AES modes.
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
+new file mode 100644
+index 00000000000000..0a25e0621df627
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
+@@ -0,0 +1,50 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (c cipherWithCBC) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return c.cipher.newCBC(iv, cipherOpEncrypt)
-+}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+func (c cipherWithCBC) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return c.cipher.newCBC(iv, cipherOpEncrypt)
-+}
++package commoncrypto
 +
-+func (c cipherWithCBC) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return c.cipher.newCBC(iv, cipherOpDecrypt)
-+}
++const (
++	KCCEncrypt CCOperation = 0
++	KCCDecrypt CCOperation = 1
++)
 +
-+func (c cipherWithCBC) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return c.cipher.newCBC(iv, cipherOpDecrypt)
-+}
++const (
++	KCCModeCBC CCMode = 2
++)
 +
-+func (c cipherWithCTR) NewCTR(iv []byte) cipher.Stream {
-+	return c.cipher.newCTR(iv)
-+}
++const (
++	KCCOptionECBMode CCOptions = 2
++)
 +
-+func (c cipherWithCTR) NewFIPSCTR(iv []byte) cipher.Stream {
-+	return c.cipher.newCTR(iv)
-+}
++const (
++	KCCSuccess CCCryptorStatus = 0
++)
 +
-+func (c cipherWithGCM) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
-+	return c.cipher.newGCMChecked(nonceSize, tagSize)
-+}
++const (
++	KCCPBKDF2 CCPBKDFAlgorithm = 2
++)
 +
-+func (c cipherWithGCM) NewGCMTLS() (cipher.AEAD, error) {
-+	return c.cipher.newGCM(cipherGCMTLS12)
-+}
++const (
++	KCCPRFHmacAlgSHA1   CCPseudoRandomAlgorithm = 1
++	KCCPRFHmacAlgSHA256 CCPseudoRandomAlgorithm = 3
++	KCCPRFHmacAlgSHA384 CCPseudoRandomAlgorithm = 4
++	KCCPRFHmacAlgSHA512 CCPseudoRandomAlgorithm = 5
++)
 +
-+func (c cipherWithGCM) NewGCMTLS13() (cipher.AEAD, error) {
-+	return c.cipher.newGCM(cipherGCMTLS13)
-+}
++const (
++	KCCBlockSizeAES128 = 16
++	KCCBlockSizeDES    = 8
++)
 +
-+// The following interfaces have been copied out of crypto/aes/modes.go.
++const (
++	CcNoPadding CCPadding = 0
++)
 +
-+type gcmAble interface {
-+	NewGCM(nonceSize, tagSize int) (cipher.AEAD, error)
-+}
++const (
++	KCCAlgorithmAES  CCAlgorithm = 0
++	KCCAlgorithmDES  CCAlgorithm = 1
++	KCCAlgorithm3DES CCAlgorithm = 2
++	KCCAlgorithmRC4  CCAlgorithm = 4
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
+new file mode 100644
+index 00000000000000..016e73758ac4e0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
+@@ -0,0 +1,69 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+type cbcEncAble interface {
-+	NewCBCEncrypter(iv []byte) cipher.BlockMode
-+}
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+type cbcDecAble interface {
-+	NewCBCDecrypter(iv []byte) cipher.BlockMode
-+}
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
 +
-+type ctrAble interface {
-+	NewCTR(iv []byte) cipher.Stream
-+}
++#include <stdint.h>
++#include <stdlib.h>
 +
-+// Test that the interfaces are implemented.
++typedef void* CCCryptorRef;
++typedef uint32_t CCModeOptions;
 +
-+var (
-+	_ cipher.Block = (*aesCipher)(nil)
++typedef enum {
++	kCCEncrypt = 0,
++	kCCDecrypt = 1,
++} CCOperation;
 +
-+	_ cipher.Block = (*cipherWithCBC)(nil)
-+	_ cbcEncAble   = (*cipherWithCBC)(nil)
-+	_ cbcDecAble   = (*cipherWithCBC)(nil)
++typedef enum {
++	kCCModeCBC = 2,
++} CCMode;
 +
-+	_ cipher.Block = (*cipherWithCTR)(nil)
-+	_ ctrAble      = (*cipherWithCTR)(nil)
++typedef enum {
++	KCCOptionECBMode = 2,
++} CCOptions;
 +
-+	_ cipher.Block = (*cipherWithGCM)(nil)
-+	_ gcmAble      = (*cipherWithGCM)(nil)
-+)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go b/src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
-new file mode 100644
-index 00000000000000..a81cbdbef93148
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/bbig/big.go
-@@ -0,0 +1,37 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++typedef enum {
++	kCCSuccess = 0,
++} CCCryptorStatus;
 +
-+// This is a mirror of
-+// https://github.com/golang/go/blob/36b87f273cc43e21685179dc1664ebb5493d26ae/src/crypto/internal/boring/bbig/big.go.
++typedef enum {
++	kCCPBKDF2 = 2,
++} CCPBKDFAlgorithm;
 +
-+package bbig
++typedef enum {
++	kCCPRFHmacAlgSHA1 = 1,
++	kCCPRFHmacAlgSHA256 = 3,
++	kCCPRFHmacAlgSHA384 = 4,
++	kCCPRFHmacAlgSHA512 = 5,
++} CCPseudoRandomAlgorithm;
 +
-+import (
-+	"math/big"
-+	"unsafe"
++enum {
++	kCCBlockSizeAES128 = 16,
++	kCCBlockSizeDES = 8,
++};
 +
-+	"github.com/golang-fips/openssl/v2"
-+)
++typedef enum {
++	ccNoPadding = 0,
++} CCPadding;
 +
-+func Enc(b *big.Int) openssl.BigInt {
-+	if b == nil {
-+		return nil
-+	}
-+	x := b.Bits()
-+	if len(x) == 0 {
-+		return openssl.BigInt{}
-+	}
-+	return unsafe.Slice((*uint)(&x[0]), len(x))
-+}
++typedef enum {
++	kCCAlgorithmAES = 0,
++	kCCAlgorithmDES = 1,
++	kCCAlgorithm3DES = 2,
++	kCCAlgorithmRC4 = 4,
++} CCAlgorithm;
 +
-+func Dec(b openssl.BigInt) *big.Int {
-+	if b == nil {
-+		return nil
-+	}
-+	if len(b) == 0 {
-+		return new(big.Int)
-+	}
-+	x := unsafe.Slice((*big.Word)(&b[0]), len(b))
-+	return new(big.Int).SetBits(x)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/big.go b/src/vendor/github.com/golang-fips/openssl/v2/big.go
-new file mode 100644
-index 00000000000000..6461f241f863fc
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/big.go
-@@ -0,0 +1,11 @@
-+package openssl
++uintptr_t mkcgo_err_retrieve();
 +
-+// This file does not have build constraints to
-+// facilitate using BigInt in Go crypto.
-+// Go crypto references BigInt unconditionally,
-+// even if it is not finally used.
++CCCryptorStatus _mkcgo_CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
++CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
++CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef);
++CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef, const unsigned char*);
++CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
++CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
 +
-+// A BigInt is the raw words from a BigInt.
-+// This definition allows us to avoid importing math/big.
-+// Conversion between BigInt and *big.Int is in openssl/bbig.
-+type BigInt []uint
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
 new file mode 100644
-index 00000000000000..789076408c515b
+index 00000000000000..a722bc56d9dab4
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/chacha20poly1305.go
-@@ -0,0 +1,151 @@
-+//go:build !cmd_go_bootstrap
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
+@@ -0,0 +1,76 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+package openssl
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+import (
-+	"crypto/cipher"
-+	"errors"
-+	"runtime"
-+	"sync"
-+	"unsafe"
++//go:build !cgo
 +
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
++#include "textflag.h"
 +
-+const (
-+	chacha20Poly1305KeySize   = 32
-+	chacha20Poly1305NonceSize = 12
-+	chacha20Poly1305Overhead  = 16
-+)
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
 +
-+var supportsChaCha20Poly1305 = sync.OnceValue(func() bool {
-+	return loadCipher(cipherChaCha20Poly1305, cipherModeNone) != nil
-+})
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_CCCrypt_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCrypt(SB)
 +
-+func SupportsChaCha20Poly1305() bool {
-+	return supportsChaCha20Poly1305()
++GLOBL ·_mkcgo_CCCrypt_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCrypt_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCrypt_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorCreate(SB)
++
++GLOBL ·_mkcgo_CCCryptorCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorCreateWithMode_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorCreateWithMode(SB)
++
++GLOBL ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreateWithMode_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorRelease_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorRelease(SB)
++
++GLOBL ·_mkcgo_CCCryptorRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorReset_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorReset(SB)
++
++GLOBL ·_mkcgo_CCCryptorReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorReset_trampoline<>(SB)
++
++TEXT _mkcgo_CCCryptorUpdate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCCryptorUpdate(SB)
++
++GLOBL ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorUpdate_trampoline<>(SB)
++
++TEXT _mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CCKeyDerivationPBKDF(SB)
++
++GLOBL ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
+new file mode 100644
+index 00000000000000..a774ad9a32ae86
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
+@@ -0,0 +1,64 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++package commoncrypto
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#cgo darwin LDFLAGS: -framework System
++
++#include "zcommoncrypto.h"
++#cgo noescape _mkcgo_CCCrypt
++#cgo nocallback _mkcgo_CCCrypt
++#cgo noescape _mkcgo_CCCryptorUpdate
++#cgo nocallback _mkcgo_CCCryptorUpdate
++*/
++import "C"
++import "unsafe"
++
++type CCAlgorithm = C.CCAlgorithm
++type CCCryptorRef = C.CCCryptorRef
++type CCCryptorStatus = C.CCCryptorStatus
++type CCMode = C.CCMode
++type CCModeOptions = C.CCModeOptions
++type CCOperation = C.CCOperation
++type CCOptions = C.CCOptions
++type CCPBKDFAlgorithm = C.CCPBKDFAlgorithm
++type CCPadding = C.CCPadding
++type CCPseudoRandomAlgorithm = C.CCPseudoRandomAlgorithm
++
++//go:nosplit
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
 +}
 +
-+type chacha20poly1305 struct {
-+	key [chacha20Poly1305KeySize]byte
++func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	return C._mkcgo_CCCrypt(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
 +}
 +
-+// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
-+func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	if len(key) != chacha20Poly1305KeySize {
-+		return nil, errors.New("chacha20poly1305: bad key length")
-+	}
-+	ret := new(chacha20poly1305)
-+	copy(ret.key[:], key)
-+	return ret, nil
++func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorCreate(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), cryptorRef)
 +}
 +
-+func (c *chacha20poly1305) NonceSize() int {
-+	return chacha20Poly1305NonceSize
++func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorCreateWithMode(op, mode, alg, padding, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tweak))), C.size_t(len(tweak)), C.int(numRounds), options, cryptorRef)
 +}
 +
-+func (c *chacha20poly1305) Overhead() int {
-+	return chacha20Poly1305Overhead
++func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
++	return C._mkcgo_CCCryptorRelease(cryptorRef)
 +}
 +
-+func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
-+	if len(nonce) != chacha20Poly1305NonceSize {
-+		panic("chacha20poly1305: bad nonce length passed to Seal")
-+	}
-+	if uint64(len(plaintext)) > (1<<38)-64 {
-+		panic("chacha20poly1305: plaintext too large")
-+	}
-+	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
-+	if inexactOverlap(out, plaintext) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and input")
-+	}
-+	if anyOverlap(out, additionalData) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
-+	}
-+	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpEncrypt, c.key[:], nil)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(ctx)
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
-+		panic(err)
-+	}
-+	if len(additionalData) > 0 {
-+		var discard int32
-+		if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, additionalData); err != nil {
-+			panic(err)
-+		}
-+	}
-+	var outl int32
-+	if len(plaintext) > 0 {
-+		if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, plaintext); err != nil {
-+			panic(err)
-+		}
-+	}
-+	var discard int32
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
-+		panic(err)
-+	}
-+	tag := out[len(out)-chacha20Poly1305Overhead:]
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_GET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(c)
-+	return ret
++func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
++	return C._mkcgo_CCCryptorReset(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))))
 +}
 +
-+func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
-+	if len(nonce) != chacha20Poly1305NonceSize {
-+		panic("chacha20poly1305: bad nonce length passed to Open")
-+	}
-+	if len(ciphertext) < 16 {
-+		return nil, errOpen
-+	}
-+	if uint64(len(ciphertext)) > (1<<38)-48 {
-+		panic("chacha20poly1305: ciphertext too large")
-+	}
-+	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
-+	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
-+	ret, out := sliceForAppend(dst, len(ciphertext))
-+	if inexactOverlap(out, ciphertext) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and input")
-+	}
-+	if anyOverlap(out, additionalData) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
-+	}
-+	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpDecrypt, c.key[:], nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(ctx)
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
-+		return nil, err
-+	}
-+	if len(additionalData) > 0 {
-+		var discard int32
-+		if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, additionalData); err != nil {
-+			return nil, err
-+		}
-+	}
-+	var outl int32
-+	if len(ciphertext) > 0 {
-+		if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, ciphertext); err != nil {
-+			return nil, err
-+		}
-+	}
-+	var discard int32
-+	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
-+		return nil, errOpen
-+	}
-+	runtime.KeepAlive(c)
-+	return ret[:len(dst)+len(ciphertext)], nil
++func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	return C._mkcgo_CCCryptorUpdate(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
++}
++
++func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
++	return C._mkcgo_CCKeyDerivationPBKDF(algorithm, (*C.char)(unsafe.Pointer(unsafe.SliceData(password))), C.size_t(len(password)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), prf, C.uint(rounds), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(derivedKey))), C.size_t(len(derivedKey)))
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cipher.go b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
 new file mode 100644
-index 00000000000000..f70da2a40b8ee3
+index 00000000000000..b17312278da948
 --- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/cipher.go
-@@ -0,0 +1,665 @@
-+//go:build !cmd_go_bootstrap
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
+@@ -0,0 +1,102 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+package openssl
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++package commoncrypto
 +
 +import (
-+	"crypto/cipher"
-+	"errors"
 +	"runtime"
-+	"strconv"
-+	"sync"
 +	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
 +)
 +
-+type cipherKind int8
++var _ = runtime.GOOS
 +
-+const (
-+	cipherAES128 cipherKind = iota
-+	cipherAES192
-+	cipherAES256
-+	cipherDES
-+	cipherDES3
-+	cipherRC4
-+	cipherChaCha20Poly1305
-+)
++var _mkcgoAlwaysFalseCommoncrypto bool
++var _mkcgoEscapeSinkCommoncrypto unsafe.Pointer
 +
-+func (c cipherKind) String() string {
-+	switch c {
-+	case cipherAES128:
-+		return "AES-128"
-+	case cipherAES192:
-+		return "AES-192"
-+	case cipherAES256:
-+		return "AES-256"
-+	case cipherDES:
-+		return "DES"
-+	case cipherDES3:
-+		return "DES3"
-+	case cipherRC4:
-+		return "RC4"
-+	case cipherChaCha20Poly1305:
-+		return "ChaCha20-Poly1305"
-+	default:
-+		panic("unknown cipher kind: " + strconv.Itoa(int(c)))
++// mkcgoEscapePtrCommoncrypto forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrCommoncrypto(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseCommoncrypto {
++		_mkcgoEscapeSinkCommoncrypto = p
 +	}
++	return p
 +}
 +
-+type cipherMode int8
-+
-+const (
-+	cipherModeNone cipherMode = -1
-+	cipherModeECB  cipherMode = iota
-+	cipherModeCBC
-+	cipherModeCTR
-+	cipherModeGCM
-+)
++type CCCryptorRef unsafe.Pointer
++type CCModeOptions = uint32
 +
-+// cipherOp is the allowed operations for a cipher,
-+// as documented in [EVP_CipherInit_ex].
-+//
-+// [EVP_CipherInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_CipherInit_ex.html
-+type cipherOp int8
++type CCOperation int32
++type CCMode int32
++type CCOptions int32
++type CCCryptorStatus int32
++type CCPBKDFAlgorithm int32
++type CCPseudoRandomAlgorithm int32
++type CCPadding int32
++type CCAlgorithm int32
 +
-+const (
-+	cipherOpNone    cipherOp = -1 // leaves the value of the previous call, if any.
-+	cipherOpDecrypt cipherOp = 0
-+	cipherOpEncrypt cipherOp = 1
-+)
++//go:cgo_import_dynamic _mkcgo_CCCrypt CCCrypt "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreate CCCryptorCreate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorCreateWithMode CCCryptorCreateWithMode "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorRelease CCCryptorRelease "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorReset CCCryptorReset "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCCryptorUpdate CCCryptorUpdate "/System/Library/Frameworks/System.framework/Versions/B/System"
++//go:cgo_import_dynamic _mkcgo_CCKeyDerivationPBKDF CCKeyDerivationPBKDF "/System/Library/Frameworks/System.framework/Versions/B/System"
 +
-+// cacheCipher is a cache of cipherKind to GO_EVP_CIPHER_PTR.
-+var cacheCipher sync.Map
++var _mkcgo_CCCrypt_trampoline_addr uintptr
 +
-+type cacheCipherKey struct {
-+	kind cipherKind
-+	mode cipherMode
++func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCrypt_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
++	return CCCryptorStatus(r0)
 +}
 +
-+// loadCipher returns a cipher object for the given k.
-+func loadCipher(k cipherKind, mode cipherMode) (cipher ossl.EVP_CIPHER_PTR) {
-+	if v, ok := cacheCipher.Load(cacheCipherKey{k, mode}); ok {
-+		return v.(ossl.EVP_CIPHER_PTR)
-+	}
-+	defer func() {
-+		if cipher != nil {
-+			switch major() {
-+			case 3, 4:
-+				// On OpenSSL 3, directly operating on a EVP_CIPHER object
-+				// not created by EVP_CIPHER has negative performance
-+				// implications, as cipher operations will have
-+				// to fetch it on every call. Better to just fetch it once here.
-+				cipher, _ = ossl.EVP_CIPHER_fetch(nil, ossl.EVP_CIPHER_get0_name(cipher), nil)
-+			}
-+		}
-+		cacheCipher.Store(cacheCipherKey{k, mode}, cipher)
-+	}()
-+	switch k {
-+	case cipherAES128:
-+		switch mode {
-+		case cipherModeECB:
-+			cipher = ossl.EVP_aes_128_ecb()
-+		case cipherModeCBC:
-+			cipher = ossl.EVP_aes_128_cbc()
-+		case cipherModeCTR:
-+			cipher = ossl.EVP_aes_128_ctr()
-+		case cipherModeGCM:
-+			cipher = ossl.EVP_aes_128_gcm()
-+		}
-+	case cipherAES192:
-+		switch mode {
-+		case cipherModeECB:
-+			cipher = ossl.EVP_aes_192_ecb()
-+		case cipherModeCBC:
-+			cipher = ossl.EVP_aes_192_cbc()
-+		case cipherModeCTR:
-+			cipher = ossl.EVP_aes_192_ctr()
-+		case cipherModeGCM:
-+			cipher = ossl.EVP_aes_192_gcm()
-+		}
-+	case cipherAES256:
-+		switch mode {
-+		case cipherModeECB:
-+			cipher = ossl.EVP_aes_256_ecb()
-+		case cipherModeCBC:
-+			cipher = ossl.EVP_aes_256_cbc()
-+		case cipherModeCTR:
-+			cipher = ossl.EVP_aes_256_ctr()
-+		case cipherModeGCM:
-+			cipher = ossl.EVP_aes_256_gcm()
-+		}
-+	case cipherDES:
-+		switch mode {
-+		case cipherModeECB:
-+			cipher = ossl.EVP_des_ecb()
-+		case cipherModeCBC:
-+			cipher = ossl.EVP_des_cbc()
-+		}
-+	case cipherDES3:
-+		switch mode {
-+		case cipherModeECB:
-+			cipher = ossl.EVP_des_ede3_ecb()
-+		case cipherModeCBC:
-+			cipher = ossl.EVP_des_ede3_cbc()
-+		}
-+	case cipherRC4:
-+		cipher = ossl.EVP_rc4()
-+	case cipherChaCha20Poly1305:
-+		if ossl.EVP_chacha20_poly1305_Available() {
-+			cipher = ossl.EVP_chacha20_poly1305()
-+		}
-+	}
-+	return cipher
-+}
++var _mkcgo_CCCryptorCreate_trampoline_addr uintptr
 +
-+type evpCipher struct {
-+	key       []byte
-+	kind      cipherKind
-+	blockSize int
++func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorCreate_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
++	return CCCryptorStatus(r0)
 +}
 +
-+func newEVPCipher(key []byte, kind cipherKind) (*evpCipher, error) {
-+	cipher := loadCipher(kind, cipherModeECB)
-+	if cipher == nil {
-+		return nil, errors.New("crypto/cipher: unsupported cipher: " + kind.String())
++var _mkcgo_CCCryptorCreateWithMode_trampoline_addr uintptr
++
++func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds)<<32|uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
++	} else {
++		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(tweak)))), uintptr(len(tweak)), uintptr(numRounds), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
 +	}
-+	c := &evpCipher{key: make([]byte, len(key)), kind: kind}
-+	copy(c.key, key)
-+	c.blockSize = int(ossl.EVP_CIPHER_get_block_size(cipher))
-+	return c, nil
++	return CCCryptorStatus(r0)
 +}
 +
-+func (c *evpCipher) encrypt(dst, src []byte) error {
-+	if len(src) < c.blockSize {
-+		return errors.New("input not full block")
-+	}
-+	if len(dst) < c.blockSize {
-+		return errors.New("output not full block")
-+	}
-+	// Only check for overlap between the parts of src and dst that will actually be used.
-+	// This matches Go standard library behavior.
-+	if inexactOverlap(dst[:c.blockSize], src[:c.blockSize]) {
-+		return errors.New("invalid buffer overlap")
-+	}
-+	enc_ctx, err := newCipherCtx(c.kind, cipherModeECB, cipherOpEncrypt, c.key, nil)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(enc_ctx)
++var _mkcgo_CCCryptorRelease_trampoline_addr uintptr
 +
-+	var outl int32
-+	if _, err := ossl.EVP_EncryptUpdate(enc_ctx, dst[:c.blockSize], &outl, src[:c.blockSize]); err != nil {
-+		return err
-+	}
-+	runtime.KeepAlive(c)
-+	return nil
++func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorRelease_trampoline_addr, uintptr(cryptorRef))
++	return CCCryptorStatus(r0)
 +}
 +
-+func (c *evpCipher) decrypt(dst, src []byte) error {
-+	if len(src) < c.blockSize {
-+		return errors.New("input not full block")
-+	}
-+	if len(dst) < c.blockSize {
-+		return errors.New("output not full block")
-+	}
-+	// Only check for overlap between the parts of src and dst that will actually be used.
-+	// This matches Go standard library behavior.
-+	if inexactOverlap(dst[:c.blockSize], src[:c.blockSize]) {
-+		return errors.New("invalid buffer overlap")
-+	}
-+	dec_ctx, err := newCipherCtx(c.kind, cipherModeECB, cipherOpDecrypt, c.key, nil)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(dec_ctx)
-+
-+	if _, err := ossl.EVP_CIPHER_CTX_set_padding(dec_ctx, 0); err != nil {
-+		return err
-+	}
++var _mkcgo_CCCryptorReset_trampoline_addr uintptr
 +
-+	var outl int32
-+	ossl.EVP_DecryptUpdate(dec_ctx, dst[:c.blockSize], &outl, src[:c.blockSize])
-+	runtime.KeepAlive(c)
-+	return nil
++func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorReset_trampoline_addr, uintptr(cryptorRef), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))))
++	return CCCryptorStatus(r0)
 +}
 +
-+type cipherCBC struct {
-+	ctx       ossl.EVP_CIPHER_CTX_PTR
-+	blockSize int
-+}
++var _mkcgo_CCCryptorUpdate_trampoline_addr uintptr
 +
-+func (c *cipherCBC) finalize() {
-+	ossl.EVP_CIPHER_CTX_free(c.ctx)
++func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCCryptorUpdate_trampoline_addr, uintptr(cryptorRef), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
++	return CCCryptorStatus(r0)
 +}
 +
-+func (x *cipherCBC) BlockSize() int { return x.blockSize }
-+
-+func (x *cipherCBC) CryptBlocks(dst, src []byte) {
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
-+	}
-+	if len(src)%x.blockSize != 0 {
-+		panic("crypto/cipher: input not full blocks")
-+	}
-+	if len(dst) < len(src) {
-+		panic("crypto/cipher: output smaller than input")
-+	}
-+	if len(src) > 0 {
-+		var outl int32
-+		if _, err := ossl.EVP_CipherUpdate(x.ctx, dst, &outl, src); err != nil {
-+			panic("crypto/cipher: " + err.Error())
-+		}
-+		runtime.KeepAlive(x)
-+	}
-+}
-+
-+func (x *cipherCBC) SetIV(iv []byte) {
-+	if len(iv) != x.blockSize {
-+		panic("crypto/cipher: incorrect length IV")
-+	}
-+	if _, err := ossl.EVP_CipherInit_ex(x.ctx, nil, nil, nil, base(iv), int32(cipherOpNone)); err != nil {
-+		panic("crypto/cipher: " + err.Error())
-+	}
-+}
-+
-+func (c *evpCipher) newCBC(iv []byte, op cipherOp) cipher.BlockMode {
-+	ctx, err := newCipherCtx(c.kind, cipherModeCBC, op, c.key, iv)
-+	if err != nil {
-+		panic(err)
-+	}
-+	x := &cipherCBC{ctx: ctx, blockSize: c.blockSize}
-+	runtime.SetFinalizer(x, (*cipherCBC).finalize)
-+	if _, err := ossl.EVP_CIPHER_CTX_set_padding(x.ctx, 0); err != nil {
-+		panic("crypto/cipher: " + err.Error())
-+	}
-+	return x
-+}
-+
-+type cipherCTR struct {
-+	ctx ossl.EVP_CIPHER_CTX_PTR
-+}
-+
-+func (x *cipherCTR) XORKeyStream(dst, src []byte) {
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
-+	}
-+	if len(dst) < len(src) {
-+		panic("crypto/cipher: output smaller than input")
-+	}
-+	if len(src) == 0 {
-+		return
-+	}
-+	var outl int32
-+	if _, err := ossl.EVP_EncryptUpdate(x.ctx, dst, &outl, src); err != nil {
-+		panic("crypto/cipher: " + err.Error())
-+	}
-+	runtime.KeepAlive(x)
-+}
-+
-+func (c *evpCipher) newCTR(iv []byte) cipher.Stream {
-+	ctx, err := newCipherCtx(c.kind, cipherModeCTR, cipherOpEncrypt, c.key, iv)
-+	if err != nil {
-+		panic(err)
-+	}
-+	x := &cipherCTR{ctx: ctx}
-+	runtime.SetFinalizer(x, (*cipherCTR).finalize)
-+	return x
-+}
-+
-+func (c *cipherCTR) finalize() {
-+	ossl.EVP_CIPHER_CTX_free(c.ctx)
-+}
-+
-+type cipherGCMTLS uint8
-+
-+const (
-+	cipherGCMTLSNone cipherGCMTLS = iota
-+	cipherGCMTLS12
-+	cipherGCMTLS13
-+)
-+
-+type cipherGCM struct {
-+	c   *evpCipher
-+	tls cipherGCMTLS
-+	// minNextNonce is the minimum value that the next nonce can be, enforced by
-+	// all TLS modes.
-+	minNextNonce uint64
-+	// mask is the nonce mask used in TLS 1.3 mode.
-+	mask uint64
-+	// maskInitialized is true if mask has been initialized. This happens during
-+	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
-+	maskInitialized bool
-+	blockSize       int
-+}
-+
-+const (
-+	aesBlockSize         = 16
-+	gcmTagSize           = 16
-+	gcmStandardNonceSize = 12
-+	// TLS 1.2 additional data is constructed as:
-+	//
-+	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
-+	gcmTls12AddSize = 13
-+	// TLS 1.3 additional data is constructed as:
-+	//
-+	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
-+	gcmTls13AddSize      = 5
-+	gcmTlsFixedNonceSize = 4
-+)
-+
-+type noGCM struct {
-+	*evpCipher
-+}
-+
-+func (g *noGCM) BlockSize() int {
-+	return g.blockSize
-+}
-+
-+func (g *noGCM) Encrypt(dst, src []byte) {
-+	g.encrypt(dst, src)
-+}
-+
-+func (g *noGCM) Decrypt(dst, src []byte) {
-+	g.decrypt(dst, src)
-+}
-+
-+func (c *evpCipher) newGCMChecked(nonceSize, tagSize int) (cipher.AEAD, error) {
-+	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
-+		return nil, errors.New("crypto/cipher: GCM tag and nonce sizes can't be non-standard at the same time")
-+	}
-+	// Fall back to standard library for GCM with non-standard nonce or tag size.
-+	if nonceSize != gcmStandardNonceSize {
-+		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
-+	}
-+	if tagSize != gcmTagSize {
-+		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
-+	}
-+	return c.newGCM(cipherGCMTLSNone)
-+}
-+
-+func (c *evpCipher) newGCM(tls cipherGCMTLS) (cipher.AEAD, error) {
-+	g := &cipherGCM{c: c, tls: tls, blockSize: c.blockSize}
-+	return g, nil
-+}
-+
-+func (g *cipherGCM) NonceSize() int {
-+	return gcmStandardNonceSize
-+}
-+
-+func (g *cipherGCM) Overhead() int {
-+	return gcmTagSize
-+}
-+
-+func (g *cipherGCM) Seal(dst, nonce, plaintext, aad []byte) []byte {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
-+	}
-+	if uint64(len(plaintext)) > ((1<<32)-2)*uint64(g.blockSize) || len(plaintext)+gcmTagSize < len(plaintext) {
-+		panic("cipher: message too large for GCM")
-+	}
-+	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
-+		panic("cipher: message too large for buffer")
-+	}
-+	if g.tls != cipherGCMTLSNone {
-+		if g.tls == cipherGCMTLS12 && len(aad) != gcmTls12AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
-+		} else if g.tls == cipherGCMTLS13 && len(aad) != gcmTls13AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
-+		}
-+		counter := bigEndianUint64(nonce[gcmTlsFixedNonceSize:])
-+		if g.tls == cipherGCMTLS13 {
-+			// In TLS 1.3, the counter in the nonce has a mask and requires
-+			// further decoding.
-+			if !g.maskInitialized {
-+				// According to TLS 1.3 nonce construction details at
-+				// https://tools.ietf.org/html/rfc8446#section-5.3:
-+				//
-+				//   the first record transmitted under a particular traffic
-+				//   key MUST use sequence number 0.
-+				//
-+				//   The padded sequence number is XORed with [a mask].
-+				//
-+				//   The resulting quantity (of length iv_length) is used as
-+				//   the per-record nonce.
-+				//
-+				// We need to convert from the given nonce to sequence numbers
-+				// to keep track of minNextNonce and enforce the counter
-+				// maximum. On the first call, we know counter^mask is 0^mask,
-+				// so we can simply store it as the mask.
-+				g.mask = counter
-+				g.maskInitialized = true
-+			}
-+			counter ^= g.mask
-+		}
-+		// BoringCrypto enforces strictly monotonically increasing explicit nonces
-+		// and to fail after 2^64 - 1 keys as per FIPS 140-2 IG A.5,
-+		// but OpenSSL does not perform this check, so it is implemented here.
-+		const maxUint64 = 1<<64 - 1
-+		if counter == maxUint64 {
-+			panic("cipher: nonce counter must be less than 2^64 - 1")
-+		}
-+		if counter < g.minNextNonce {
-+			panic("cipher: nonce counter must be strictly monotonically increasing")
-+		}
-+		defer func() {
-+			g.minNextNonce = counter + 1
-+		}()
-+	}
-+
-+	// Make room in dst to append plaintext+overhead.
-+	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
-+
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, plaintext) {
-+		panic("cipher: invalid buffer overlap")
-+	}
-+
-+	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(ctx)
-+	// Encrypt additional data.
-+	// When sealing a TLS payload, OpenSSL app sets the additional data using
-+	// '_EVP_CIPHER_CTX_ctrl(g.ctx, _EVP_CTRL_AEAD_TLS1_AAD, _EVP_AEAD_TLS1_AAD_LEN, base(additionalData))'.
-+	// This makes the explicit nonce component to monotonically increase on every Seal operation without
-+	// relying in the explicit nonce being securely set externally,
-+	// and it also gives some interesting speed gains.
-+	// Unfortunately we can't use it because Go expects AEAD.Seal to honor the provided nonce.
-+	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
-+		panic(err)
-+	}
-+	var outl, discard int32
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
-+		panic(err)
-+	}
-+	if len(plaintext) != int(outl) {
-+		panic("cipher: incorrect length returned from GCM EncryptUpdate")
-+	}
-+	discard = 0
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(g)
-+	return ret
-+}
-+
-+func (g *cipherGCM) SealWithRandomNonce(out, nonce, plaintext, aad []byte) {
-+	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
-+		panic("crypto/cipher: message too large for GCM")
-+	}
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
-+	}
-+	if len(out) != len(plaintext)+gcmTagSize {
-+		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
-+	}
-+	if inexactOverlap(out, plaintext) {
-+		panic("crypto/cipher: invalid buffer overlap of output and input")
-+	}
-+	if anyOverlap(out, aad) {
-+		panic("crypto/cipher: invalid buffer overlap of output and additional data")
-+	}
-+
-+	if g.tls != cipherGCMTLSNone {
-+		panic("cipher: encryption failed")
-+	}
-+
-+	RandReader.Read(nonce)
-+	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(ctx)
-+
-+	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
-+		panic(err)
-+	}
-+	var outl, discard int32
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
-+		panic(err)
-+	}
-+	if len(plaintext) != int(outl) {
-+		panic("cipher: incorrect length returned from GCM EncryptUpdate")
-+	}
-+	discard = 0
-+	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(g)
-+}
-+
-+var errOpen = errors.New("cipher: message authentication failed")
-+
-+func (g *cipherGCM) Open(dst, nonce, ciphertext, aad []byte) (_ []byte, err error) {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
-+	}
-+	if len(ciphertext) < gcmTagSize {
-+		return nil, errOpen
-+	}
-+	if uint64(len(ciphertext)) > ((1<<32)-2)*uint64(g.blockSize)+gcmTagSize {
-+		return nil, errOpen
-+	}
-+	// BoringCrypto does not do any TLS check when decrypting, neither do we.
-+
-+	tag := ciphertext[len(ciphertext)-gcmTagSize:]
-+	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
-+
-+	// Make room in dst to append ciphertext without tag.
-+	ret, out := sliceForAppend(dst, len(ciphertext))
-+
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, ciphertext) {
-+		panic("cipher: invalid buffer overlap")
-+	}
-+
-+	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_CIPHER_CTX_free(ctx)
-+
-+	defer func() {
-+		if err != nil {
-+			// Zero output buffer on error.
-+			for i := range out {
-+				out[i] = 0
-+			}
-+		}
-+	}()
-+	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
-+		return nil, errOpen
-+	}
-+	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
-+		return nil, errOpen
-+	}
-+	var outl, discard int32
-+	if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
-+		return nil, errOpen
-+	}
-+	if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, sliceNeverNil(ciphertext)); err != nil {
-+		return nil, errOpen
-+	}
-+	if len(ciphertext) != int(outl) {
-+		return nil, errOpen
-+	}
-+	discard = 0
-+	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
-+		return nil, errOpen
-+	}
-+	runtime.KeepAlive(g)
-+	return ret, nil
-+}
-+
-+// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
-+func sliceForAppend(in []byte, n int) (head, tail []byte) {
-+	if total := len(in) + n; cap(in) >= total {
-+		head = in[:total]
-+	} else {
-+		head = make([]byte, total)
-+		copy(head, in)
-+	}
-+	tail = head[len(in):]
-+	return
-+}
-+
-+func newCipherCtx(kind cipherKind, mode cipherMode, encrypt cipherOp, key, iv []byte) (_ ossl.EVP_CIPHER_CTX_PTR, err error) {
-+	cipher := loadCipher(kind, mode)
-+	if cipher == nil {
-+		panic("crypto/cipher: unsupported cipher: " + kind.String())
-+	}
-+	ctx, err := ossl.EVP_CIPHER_CTX_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if err != nil {
-+			ossl.EVP_CIPHER_CTX_free(ctx)
-+		}
-+	}()
-+	if kind == cipherRC4 {
-+		// RC4 cipher supports a variable key length.
-+		// We need to set the key length before setting the key,
-+		// and to do so we need to have an initialized cipher ctx.
-+		if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, nil, nil, int32(encrypt)); err != nil {
-+			return nil, err
-+		}
-+		if _, err := ossl.EVP_CIPHER_CTX_set_key_length(ctx, int32(len(key))); err != nil {
-+			return nil, err
-+		}
-+		// Pass nil to the next call to EVP_CipherInit_ex to avoid resetting ctx's cipher.
-+		cipher = nil
-+	}
-+	if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, base(key), base(iv), int32(encrypt)); err != nil {
-+		return nil, err
-+	}
-+	return ctx, nil
-+}
-+
-+// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
-+
-+func anyOverlap(x, y []byte) bool {
-+	return len(x) > 0 && len(y) > 0 &&
-+		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
-+		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
-+}
++var _mkcgo_CCKeyDerivationPBKDF_trampoline_addr uintptr
 +
-+func inexactOverlap(x, y []byte) bool {
-+	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
-+		return false
-+	}
-+	return anyOverlap(x, y)
++func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
++	r0, _ := syscallN(0, _mkcgo_CCKeyDerivationPBKDF_trampoline_addr, uintptr(algorithm), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(password)))), uintptr(len(password)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(prf), uintptr(rounds), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(derivedKey)))), uintptr(len(derivedKey)))
++	return CCCryptorStatus(r0)
 +}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/const.go b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-new file mode 100644
-index 00000000000000..a8165e13f85164
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/const.go
-@@ -0,0 +1,99 @@
-+package openssl
-+
-+import "unsafe"
-+
-+// cString is a null-terminated string,
-+// akin to C's char*.
-+type cString string
-+
-+// str returns the string value.
-+func (s cString) str() string {
-+	return string(s)
-+}
-+
-+// ptr returns a pointer to the string data.
-+// It panics if the string is not null-terminated.
-+//
-+// The memory pointed to by the returned pointer should
-+// not be modified and it must only be passed to
-+// "const char*" parameters. Any attempt to modify it
-+// will result in a runtime panic, as Go strings are
-+// allocated in read-only memory.
-+func (s cString) ptr() *byte {
-+	if len(s) == 0 {
-+		return nil
-+	}
-+	if s[len(s)-1] != 0 {
-+		panic("must be null-terminated")
-+	}
-+	return unsafe.StringData(string(s))
-+}
-+
-+const ( //checkheader:ignore
-+	// Key types
-+	_KeyTypeRSA              cString = "RSA\x00"
-+	_KeyTypeEC               cString = "EC\x00"
-+	_KeyTypeED25519          cString = "ED25519\x00"
-+	_KeyTypeX25519           cString = "X25519\x00"
-+	_KeyTypeMLKEM768         cString = "ML-KEM-768\x00"
-+	_KeyTypeMLKEM1024        cString = "ML-KEM-1024\x00"
-+	_KeyTypeMLDSA44          cString = "ML-DSA-44\x00"
-+	_KeyTypeMLDSA65          cString = "ML-DSA-65\x00"
-+	_KeyTypeMLDSA87          cString = "ML-DSA-87\x00"
-+	_KeyTypeChacha20Poly1305 cString = "CHACHA20-POLY1305\x00"
-+
-+	// Digest names
-+	_DigestNameSHAKE128 cString = "SHAKE-128\x00"
-+	_DigestNameSHAKE256 cString = "SHAKE-256\x00"
-+
-+	// KDF names
-+	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
-+	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
-+	_OSSL_KDF_NAME_TLS1_PRF  cString = "TLS1-PRF\x00"
-+	_OSSL_KDF_NAME_TLS13_KDF cString = "TLS13-KDF\x00"
-+	_OSSL_MAC_NAME_HMAC      cString = "HMAC\x00"
-+
-+	// KDF parameters
-+	_OSSL_KDF_PARAM_DIGEST cString = "digest\x00"
-+	_OSSL_KDF_PARAM_SECRET cString = "secret\x00"
-+	_OSSL_KDF_PARAM_SEED   cString = "seed\x00"
-+	_OSSL_KDF_PARAM_KEY    cString = "key\x00"
-+	_OSSL_KDF_PARAM_INFO   cString = "info\x00"
-+	_OSSL_KDF_PARAM_SALT   cString = "salt\x00"
-+	_OSSL_KDF_PARAM_MODE   cString = "mode\x00"
-+
-+	// TLS3-KDF parameters
-+	_OSSL_KDF_PARAM_PREFIX cString = "prefix\x00"
-+	_OSSL_KDF_PARAM_LABEL  cString = "label\x00"
-+	_OSSL_KDF_PARAM_DATA   cString = "data\x00"
-+
-+	// PKEY parameters
-+	_OSSL_PKEY_PARAM_PUB_KEY            cString = "pub\x00"
-+	_OSSL_PKEY_PARAM_PRIV_KEY           cString = "priv\x00"
-+	_OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY cString = "encoded-pub-key\x00"
-+	_OSSL_PKEY_PARAM_GROUP_NAME         cString = "group\x00"
-+	_OSSL_PKEY_PARAM_EC_PUB_X           cString = "qx\x00"
-+	_OSSL_PKEY_PARAM_EC_PUB_Y           cString = "qy\x00"
-+	_OSSL_PKEY_PARAM_FFC_PBITS          cString = "pbits\x00"
-+	_OSSL_PKEY_PARAM_FFC_QBITS          cString = "qbits\x00"
-+	_OSSL_PKEY_PARAM_RSA_N              cString = "n\x00"
-+	_OSSL_PKEY_PARAM_RSA_E              cString = "e\x00"
-+	_OSSL_PKEY_PARAM_RSA_D              cString = "d\x00"
-+	_OSSL_PKEY_PARAM_FFC_P              cString = "p\x00"
-+	_OSSL_PKEY_PARAM_FFC_Q              cString = "q\x00"
-+	_OSSL_PKEY_PARAM_FFC_G              cString = "g\x00"
-+	_OSSL_PKEY_PARAM_RSA_FACTOR1        cString = "rsa-factor1\x00"
-+	_OSSL_PKEY_PARAM_RSA_FACTOR2        cString = "rsa-factor2\x00"
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT1      cString = "rsa-exponent1\x00"
-+	_OSSL_PKEY_PARAM_RSA_EXPONENT2      cString = "rsa-exponent2\x00"
-+	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1   cString = "rsa-coefficient1\x00"
-+	_OSSL_PKEY_PARAM_ML_KEM_SEED        cString = "seed\x00"
-+	_OSSL_PKEY_PARAM_ML_DSA_SEED        cString = "seed\x00"
-+
-+	// Signature parameters
-+	_OSSL_SIGNATURE_PARAM_CONTEXT_STRING cString = "context-string\x00"
-+	_OSSL_SIGNATURE_PARAM_MU             cString = "mu\x00"
-+
-+	// MAC parameters
-+	_OSSL_MAC_PARAM_DIGEST cString = "digest\x00"
-+)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/cshake.go b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
-new file mode 100644
-index 00000000000000..b37b8e7cc10ac0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/cshake.go
-@@ -0,0 +1,255 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"runtime"
-+	"strconv"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// shakeOneShot applies the SHAKE extendable output function to data and
-+// writes the output to out.
-+func shakeOneShot(secuirtyBits int, data []byte, out []byte) {
-+	// Can't use EVP_Digest because it doesn't support output lengths
-+	// larger than the block size, while crypto/sha3 supports any length.
-+	alg := loadShake(secuirtyBits)
-+	if alg == nil {
-+		panic("openssl: unsupported SHAKE" + strconv.Itoa(secuirtyBits) + " function")
-+	}
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_DigestUpdate(ctx, data); err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_DigestFinalXOF(ctx, out); err != nil {
-+		panic(err)
-+	}
-+}
-+
-+// SumSHAKE128 applies the SHAKE128 extendable output function to data and
-+// returns an output of the given length in bytes.
-+func SumSHAKE128(data []byte, length int) []byte {
-+	out := make([]byte, length)
-+	shakeOneShot(128, data, out)
-+	return out
-+}
-+
-+// SumSHAKE256 applies the SHAKE256 extendable output function to data and
-+// returns an output of the given length in bytes.
-+func SumSHAKE256(data []byte, length int) []byte {
-+	out := make([]byte, length)
-+	shakeOneShot(256, data, out)
-+	return out
-+}
-+
-+var shakeSupported sync.Map
-+
-+var hasDigestSqueeze = sync.OnceValue(ossl.EVP_DigestSqueeze_Available)
-+
-+// SupportsSHAKE returns true if the SHAKE extendable output functions
-+// with the given securityBits are supported.
-+func SupportsSHAKE(securityBits int) bool {
-+	if !hasDigestSqueeze() {
-+		// SHAKE MD's are supported since OpenSSL 1.1.1, but
-+		// EVP_DigestSqueeze (added in OpenSSL 3.3) is required to
-+		// implement [sha3.SHAKE]'s streaming Read API.
-+		return false
-+	}
-+	if v, ok := shakeSupported.Load(securityBits); ok {
-+		return v.(bool)
-+	}
-+	alg := loadShake(securityBits)
-+	if alg == nil {
-+		shakeSupported.Store(securityBits, false)
-+		return false
-+	}
-+	// EVP_MD objects can be non-nil but the underlying provider may not
-+	// support EVP_DigestSqueeze. We need to test it.
-+	var supported bool
-+	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
-+		defer ossl.EVP_MD_CTX_free(ctx)
-+		if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err == nil {
-+			var tmp [1]byte
-+			_, err := ossl.EVP_DigestSqueeze(ctx, tmp[:])
-+			supported = err == nil
-+		}
-+	}
-+	shakeSupported.Store(securityBits, supported)
-+	return supported
-+}
-+
-+// SupportsCSHAKE returns true if the CSHAKE extendable output functions
-+// with the given securityBits are supported.
-+func SupportsCSHAKE(securityBits int) bool {
-+	// OpenSSL tracker issue https://github.com/openssl/openssl/issues/28358
-+	return false
-+}
-+
-+// SHAKE is an instance of a SHAKE extendable output function.
-+type SHAKE struct {
-+	alg        *shakeAlgorithm
-+	ctx        ossl.EVP_MD_CTX_PTR
-+	lastXofLen int
-+}
-+
-+// NewSHAKE128 creates a new SHAKE128 XOF.
-+func NewSHAKE128() *SHAKE {
-+	return newSHAKE(128)
-+}
-+
-+// NewSHAKE256 creates a new SHAKE256 XOF.
-+func NewSHAKE256() *SHAKE {
-+	return newSHAKE(256)
-+}
-+
-+// NewCSHAKE128 creates a new cSHAKE128 XOF.
-+//
-+// N is used to define functions based on cSHAKE, it can be empty when plain
-+// cSHAKE is desired. S is a customization byte string used for domain
-+// separation. When N and S are both empty, this is equivalent to NewSHAKE128.
-+func NewCSHAKE128(N, S []byte) *SHAKE {
-+	if len(N) == 0 && len(S) == 0 {
-+		return NewSHAKE128()
-+	}
-+	return nil
-+}
-+
-+// NewCSHAKE256 creates a new cSHAKE256 XOF.
-+//
-+// N is used to define functions based on cSHAKE, it can be empty when plain
-+// cSHAKE is desired. S is a customization byte string used for domain
-+// separation. When N and S are both empty, this is equivalent to NewSHAKE256.
-+func NewCSHAKE256(N, S []byte) *SHAKE {
-+	if len(N) == 0 && len(S) == 0 {
-+		return NewSHAKE256()
-+	}
-+	return nil
-+}
-+
-+func newSHAKE(securityBits int) *SHAKE {
-+	alg := loadShake(securityBits)
-+	if alg == nil {
-+		panic("openssl: unsupported SHAKE" + strconv.Itoa(securityBits) + " function")
-+	}
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
-+		ossl.EVP_MD_CTX_free(ctx)
-+		panic(err)
-+	}
-+	s := &SHAKE{alg: alg, ctx: ctx}
-+	runtime.SetFinalizer(s, (*SHAKE).finalize)
-+	return s
-+}
-+
-+func (s *SHAKE) finalize() {
-+	ossl.EVP_MD_CTX_free(s.ctx)
-+}
-+
-+// Write absorbs more data into the XOF's state.
-+//
-+// It panics if any output has already been read.
-+func (s *SHAKE) Write(p []byte) (n int, err error) {
-+	defer runtime.KeepAlive(s)
-+	if len(p) == 0 {
-+		return 0, nil
-+	}
-+	if _, err := ossl.EVP_DigestUpdate(s.ctx, p); err != nil {
-+		panic(err)
-+	}
-+	return len(p), nil
-+}
-+
-+// Read squeezes more output from the XOF.
-+//
-+// Any call to Write after a call to Read will panic.
-+func (s *SHAKE) Read(p []byte) (n int, err error) {
-+	defer runtime.KeepAlive(s)
-+	if len(p) == 0 {
-+		return 0, nil
-+	}
-+	if len(p) != s.lastXofLen {
-+		if _, err := ossl.EVP_MD_CTX_ctrl(s.ctx, ossl.EVP_MD_CTRL_XOF_LEN, int32(len(p)), nil); err != nil {
-+			panic(err)
-+		}
-+		s.lastXofLen = len(p)
-+	}
-+	if _, err := ossl.EVP_DigestSqueeze(s.ctx, p); err != nil {
-+		panic(err)
-+	}
-+	return len(p), nil
-+}
-+
-+// Reset resets the XOF to its initial state.
-+func (s *SHAKE) Reset() {
-+	defer runtime.KeepAlive(s)
-+	if _, err := ossl.EVP_DigestInit_ex(s.ctx, nil, nil); err != nil {
-+		panic(err)
-+	}
-+	s.lastXofLen = 0
-+}
-+
-+// BlockSize returns the rate of the XOF.
-+func (s *SHAKE) BlockSize() int {
-+	return s.alg.blockSize
-+}
-+
-+func (s *SHAKE) MarshalBinary() ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
-+
-+func (s *SHAKE) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
-+}
-+
-+func (s *SHAKE) UnmarshalBinary(data []byte) error {
-+	return errMarshallUnsupported{}
-+}
-+
-+type shakeAlgorithm struct {
-+	md        ossl.EVP_MD_PTR
-+	blockSize int
-+}
-+
-+var cacheSHAKE sync.Map
-+
-+// loadShake converts a crypto.Hash to a EVP_MD.
-+func loadShake(securityBits int) (alg *shakeAlgorithm) {
-+	if v, ok := cacheSHAKE.Load(securityBits); ok {
-+		return v.(*shakeAlgorithm)
-+	}
-+	defer func() {
-+		cacheSHAKE.Store(securityBits, alg)
-+	}()
-+
-+	var name cString
-+	switch securityBits {
-+	case 128:
-+		name = _DigestNameSHAKE128
-+	case 256:
-+		name = _DigestNameSHAKE256
-+	default:
-+		return nil
-+	}
-+
-+	md, err := ossl.EVP_MD_fetch(nil, name.ptr(), nil)
-+	if err != nil || md == nil {
-+		return nil
-+	}
-+
-+	alg = new(shakeAlgorithm)
-+	alg.md = md
-+	alg.blockSize = int(ossl.EVP_MD_get_block_size(md))
-+	return alg
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/des.go b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-new file mode 100644
-index 00000000000000..71586bbb74bbee
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/des.go
-@@ -0,0 +1,118 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto/cipher"
-+	"errors"
-+)
-+
-+// SupportsDESCipher returns true if NewDESCipher is supported,
-+// which uses ECB mode.
-+// If CBC is also supported, then the returned cipher.Block
-+// will also implement NewCBCEncrypter and NewCBCDecrypter.
-+func SupportsDESCipher() bool {
-+	switch major() {
-+	case 1:
-+		// DES is not part of the OpenSSL 1.x FIPS module.
-+		return !FIPS() && loadCipher(cipherDES, cipherModeECB) != nil
-+	default:
-+		// On OpenSSL 3+ availability is decided by the algorithm probe:
-+		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
-+		return loadCipher(cipherDES, cipherModeECB) != nil
-+	}
-+}
-+
-+// SupportsTripleDESCipher returns true if NewTripleDESCipher is supported,
-+// which uses ECB mode.
-+// If CBC is also supported, then the returned cipher.Block
-+// will also implement NewCBCEncrypter and NewCBCDecrypter.
-+func SupportsTripleDESCipher() bool {
-+	// Should always be true for stock OpenSSL,
-+	// even when using the FIPS provider.
-+	return loadCipher(cipherDES3, cipherModeECB) != nil
-+}
-+
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 8 {
-+		return nil, errors.New("crypto/des: invalid key size")
-+	}
-+	return newDESCipher(key, cipherDES)
-+}
-+
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 24 {
-+		return nil, errors.New("crypto/des: invalid key size")
-+	}
-+	return newDESCipher(key, cipherDES3)
-+}
-+
-+func newDESCipher(key []byte, kind cipherKind) (cipher.Block, error) {
-+	c, err := newEVPCipher(key, kind)
-+	if err != nil {
-+		return nil, err
-+	}
-+	if loadCipher(kind, cipherModeCBC) == nil {
-+		return &desCipherWithoutCBC{c}, nil
-+	}
-+	return &desCipher{c}, nil
-+}
-+
-+type desExtraModes interface {
-+	NewCBCEncrypter(iv []byte) cipher.BlockMode
-+	NewCBCDecrypter(iv []byte) cipher.BlockMode
-+}
-+
-+var _ desExtraModes = (*desCipher)(nil)
-+
-+type desCipher struct {
-+	*evpCipher
-+}
-+
-+func (c *desCipher) BlockSize() int {
-+	return c.blockSize
-+}
-+
-+func (c *desCipher) Encrypt(dst, src []byte) {
-+	if err := c.encrypt(dst, src); err != nil {
-+		// crypto/des expects that the panic message starts with "crypto/des: ".
-+		panic("crypto/des: " + err.Error())
-+	}
-+}
-+
-+func (c *desCipher) Decrypt(dst, src []byte) {
-+	if err := c.decrypt(dst, src); err != nil {
-+		// crypto/des expects that the panic message starts with "crypto/des: ".
-+		panic("crypto/des: " + err.Error())
-+	}
-+}
-+
-+func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return c.newCBC(iv, cipherOpEncrypt)
-+}
-+
-+func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return c.newCBC(iv, cipherOpDecrypt)
-+}
-+
-+type desCipherWithoutCBC struct {
-+	*evpCipher
-+}
-+
-+func (c *desCipherWithoutCBC) BlockSize() int {
-+	return c.blockSize
-+}
-+
-+func (c *desCipherWithoutCBC) Encrypt(dst, src []byte) {
-+	if err := c.encrypt(dst, src); err != nil {
-+		// crypto/des expects that the panic message starts with "crypto/des: ".
-+		panic("crypto/des: " + err.Error())
-+	}
-+}
-+
-+func (c *desCipherWithoutCBC) Decrypt(dst, src []byte) {
-+	if err := c.decrypt(dst, src); err != nil {
-+		// crypto/des expects that the panic message starts with "crypto/des: ".
-+		panic("crypto/des: " + err.Error())
-+	}
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/dsa.go b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-new file mode 100644
-index 00000000000000..3a025ff7d40011
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/dsa.go
-@@ -0,0 +1,305 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// SupportsDSA returns true if the OpenSSL library supports DSA.
-+func SupportsDSA() bool {
-+	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
-+	if err != nil {
-+		return false
-+	}
-+	ossl.EVP_PKEY_CTX_free(ctx)
-+	return true
-+}
-+
-+// DSAParameters contains the DSA parameters.
-+type DSAParameters struct {
-+	P, Q, G BigInt
-+}
-+
-+// PrivateKeyDSA represents a DSA private key.
-+type PrivateKeyDSA struct {
-+	DSAParameters
-+	X, Y BigInt
-+
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PrivateKeyDSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PrivateKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+// PublicKeyDSA represents a DSA public key.
-+type PublicKeyDSA struct {
-+	DSAParameters
-+	Y BigInt
-+
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PublicKeyDSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PublicKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+// GenerateParametersDSA generates a set of DSA parameters.
-+func GenerateParametersDSA(l, n int) (DSAParameters, error) {
-+	// The DSA parameters are generated by creating a new DSA key and
-+	// extracting the domain parameters from it.
-+
-+	// Generate a new DSA key context and set the known parameters.
-+	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
-+	if err != nil {
-+		return DSAParameters{}, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_paramgen_init(ctx); err != nil {
-+		return DSAParameters{}, err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, int32(l), nil); err != nil {
-+		return DSAParameters{}, err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, int32(n), nil); err != nil {
-+		return DSAParameters{}, err
-+	}
-+	var pkey ossl.EVP_PKEY_PTR
-+	if _, err := ossl.EVP_PKEY_paramgen(ctx, &pkey); err != nil {
-+		return DSAParameters{}, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	// Extract the domain parameters from the generated key.
-+	var p, q, g ossl.BIGNUM_PTR
-+	switch major() {
-+	case 1:
-+		dsa := getDSA(pkey)
-+		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
-+	case 3, 4:
-+		defer func() {
-+			ossl.BN_free(p)
-+			ossl.BN_free(q)
-+			ossl.BN_free(g)
-+		}()
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_P.ptr(), &p); err != nil {
-+			return DSAParameters{}, err
-+		}
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_Q.ptr(), &q); err != nil {
-+			return DSAParameters{}, err
-+		}
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G.ptr(), &g); err != nil {
-+			return DSAParameters{}, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+
-+	return DSAParameters{
-+		P: bnToBig(p),
-+		Q: bnToBig(q),
-+		G: bnToBig(g),
-+	}, nil
-+}
-+
-+// NewPrivateKeyDSA creates a new DSA private key from the given parameters.
-+func NewPrivateKeyDSA(params DSAParameters, x, y BigInt) (*PrivateKeyDSA, error) {
-+	if x == nil || y == nil {
-+		panic("x and y must not be nil")
-+	}
-+	pkey, err := newDSA(params, x, y)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PrivateKeyDSA{params, x, y, pkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
-+	return k, nil
-+}
-+
-+// NewPublicKeyDSA creates a new DSA public key from the given parameters.
-+func NewPublicKeyDSA(params DSAParameters, y BigInt) (*PublicKeyDSA, error) {
-+	if y == nil {
-+		panic("y must not be nil")
-+	}
-+	pkey, err := newDSA(params, nil, y)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PublicKeyDSA{params, y, pkey}
-+	runtime.SetFinalizer(k, (*PublicKeyDSA).finalize)
-+	return k, nil
-+}
-+
-+// GenerateKeyDSA generates a new private DSA key using the given parameters.
-+func GenerateKeyDSA(params DSAParameters) (x, y BigInt, err error) {
-+	pkey, err := newDSA(params, nil, nil)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+	var bx, by ossl.BIGNUM_PTR
-+	switch major() {
-+	case 1:
-+		dsa := getDSA(pkey)
-+		ossl.DSA_get0_key(dsa, &by, &bx)
-+	case 3, 4:
-+		defer func() {
-+			ossl.BN_clear_free(bx)
-+			ossl.BN_free(by)
-+		}()
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), &by); err != nil {
-+			return nil, nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bx); err != nil {
-+			return nil, nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	return bnToBig(bx), bnToBig(by), nil
-+}
-+
-+// SignDSA signs a hash (which should be the result of hashing a larger message).
-+func SignDSA(priv *PrivateKeyDSA, hash []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, 0, 0, 0, hash)
-+}
-+
-+// VerifyDSA verifiessig using the public key, pub.
-+func VerifyDSA(pub *PublicKeyDSA, hash []byte, sig []byte) bool {
-+	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
-+}
-+
-+func newDSA(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	switch major() {
-+	case 1:
-+		return newDSA1(params, x, y)
-+	case 3, 4:
-+		return newDSA3(params, x, y)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+func newDSA1(params DSAParameters, x, y BigInt) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
-+	dsa, err := ossl.DSA_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if pkey == nil {
-+			ossl.DSA_free(dsa)
-+		}
-+	}()
-+	// No need to check for errors here, DSA_set0_* functions will fail
-+	// if the BNs are NULL and we will free non-NULL BNs in the error handling.
-+	p, _ := bigToBN(params.P)
-+	q, _ := bigToBN(params.Q)
-+	g, _ := bigToBN(params.G)
-+	if _, err := ossl.DSA_set0_pqg(dsa, p, q, g); err != nil {
-+		ossl.BN_free(p)
-+		ossl.BN_free(q)
-+		ossl.BN_free(g)
-+		return nil, err
-+	}
-+	if y != nil {
-+		pub, _ := bigToBN(y)
-+		priv, _ := bigToBN(x)
-+		if _, err := ossl.DSA_set0_key(dsa, pub, priv); err != nil {
-+			ossl.BN_free(pub)
-+			ossl.BN_clear_free(priv)
-+			return nil, err
-+		}
-+	} else {
-+		if _, err := ossl.DSA_generate_key(dsa); err != nil {
-+			return nil, err
-+		}
-+	}
-+	pkey, err = ossl.EVP_PKEY_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_DSA, unsafe.Pointer(dsa)); err != nil {
-+		ossl.EVP_PKEY_free(pkey)
-+		return nil, err
-+	}
-+	return pkey, nil
-+}
-+
-+func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_P, params.P, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_Q, params.Q, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_G, params.G, false)
-+	selection := int32(ossl.EVP_PKEY_KEYPAIR)
-+	if y != nil {
-+		bld.addBigInt(_OSSL_PKEY_PARAM_PUB_KEY, y, false)
-+		if x == nil {
-+			selection = ossl.EVP_PKEY_PUBLIC_KEY
-+		}
-+	}
-+	if x != nil {
-+		bld.addBigInt(_OSSL_PKEY_PARAM_PRIV_KEY, x, true)
-+	}
-+	bldparams, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(bldparams)
-+	pkey, err := newEvpFromParams(ossl.EVP_PKEY_DSA, selection, bldparams)
-+	if err != nil {
-+		return nil, err
-+	}
-+	if y != nil {
-+		return pkey, nil
-+	}
-+	// pkey doesn't contain the public component, but the crypto/dsa package
-+	// expects it to be always there. Generate a new key using pkey as domain
-+	// parameters placeholder.
-+	defer ossl.EVP_PKEY_free(pkey)
-+	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
-+		return nil, err
-+	}
-+	var gkey ossl.EVP_PKEY_PTR
-+	if _, err := ossl.EVP_PKEY_keygen(ctx, &gkey); err != nil {
-+		return nil, err
-+	}
-+	return gkey, nil
-+}
-+
-+// getDSA returns the DSA from pkey.
-+// If pkey does not contain an DSA it panics.
-+// The returned key should not be freed.
-+func getDSA(pkey ossl.EVP_PKEY_PTR) ossl.DSA_PTR {
-+	key, err := ossl.EVP_PKEY_get0_DSA(pkey)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return key
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ec.go b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-new file mode 100644
-index 00000000000000..666493af4d51d4
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/ec.go
-@@ -0,0 +1,131 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"strconv"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+func SupportsCurve(curve string) bool {
-+	switch curve {
-+	case "P-224", "P-256", "P-384", "P-521":
-+		return true
-+	case "X25519":
-+		return supportsX25519()
-+	default:
-+		return false
-+	}
-+}
-+
-+var supportsX25519 = sync.OnceValue(func() bool {
-+	ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_X25519, nil)
-+	if ctx != nil {
-+		ossl.EVP_PKEY_CTX_free(ctx)
-+		return true
-+	}
-+	return false
-+})
-+
-+func curveID(curve string) int32 {
-+	switch curve {
-+	case "P-224":
-+		return ossl.EVP_PKEY_EC
-+	case "P-256":
-+		return ossl.EVP_PKEY_EC
-+	case "P-384":
-+		return ossl.EVP_PKEY_EC
-+	case "P-521":
-+		return ossl.EVP_PKEY_EC
-+	case "X25519":
-+		return ossl.EVP_PKEY_X25519
-+	default:
-+		panic("openssl: unknown curve " + curve)
-+	}
-+}
-+
-+func curveNID(curve string) int32 {
-+	switch curve {
-+	case "P-224":
-+		return ossl.NID_secp224r1
-+	case "P-256":
-+		return ossl.NID_X9_62_prime256v1
-+	case "P-384":
-+		return ossl.NID_secp384r1
-+	case "P-521":
-+		return ossl.NID_secp521r1
-+	default:
-+		panic("openssl: unknown curve " + curve)
-+	}
-+}
-+
-+// curveSize returns the size of the curve in bytes.
-+func curveSize(curve string) int {
-+	switch curve {
-+	case "P-224":
-+		return 224 / 8
-+	case "P-256":
-+		return 256 / 8
-+	case "P-384":
-+		return 384 / 8
-+	case "P-521":
-+		return (521 + 7) / 8
-+	default:
-+		panic("openssl: unknown curve " + curve)
-+	}
-+}
-+
-+// encodeEcPoint encodes pt.
-+func encodeEcPoint(group ossl.EC_GROUP_PTR, pt ossl.EC_POINT_PTR) ([]byte, error) {
-+	// Get encoded point size.
-+	n, err := ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, nil, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// Encode point into bytes.
-+	bytes := make([]byte, n)
-+	if _, err = ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, bytes, nil); err != nil {
-+		return nil, err
-+	}
-+	return bytes, nil
-+}
-+
-+// generateAndEncodeEcPublicKey calls newPubKeyPointFn to generate a public key point and then encodes it.
-+func generateAndEncodeEcPublicKey(nid int32, newPubKeyPointFn func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error)) ([]byte, error) {
-+	group, err := ossl.EC_GROUP_new_by_curve_name(nid)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EC_GROUP_free(group)
-+	pt, err := newPubKeyPointFn(group)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EC_POINT_free(pt)
-+	return encodeEcPoint(group, pt)
-+}
-+
-+func extractPKEYRawPublic(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
-+	keylen := len(pub)
-+	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, pub, &keylen); err != nil {
-+		return err
-+	}
-+	if keylen != len(pub) {
-+		return errors.New("bad public key length: " + strconv.Itoa(keylen))
-+	}
-+	return nil
-+}
-+
-+func extractPKEYRawPrivate(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
-+	keylen := len(pub)
-+	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, pub, &keylen); err != nil {
-+		return err
-+	}
-+	if keylen != len(pub) {
-+		return errors.New("bad private key length: " + strconv.Itoa(keylen))
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-new file mode 100644
-index 00000000000000..212b53b9a4e583
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdh.go
-@@ -0,0 +1,340 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"runtime"
-+	"slices"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+const publicKeySizeX25519 = 32
-+const privateKeySizeX25519 = 32
-+
-+type PublicKeyECDH struct {
-+	_pkey ossl.EVP_PKEY_PTR
-+	bytes []byte
-+}
-+
-+func (k *PublicKeyECDH) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+type PrivateKeyECDH struct {
-+	_pkey ossl.EVP_PKEY_PTR
-+	curve string
-+}
-+
-+func (k *PrivateKeyECDH) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
-+	expectedLen := publicKeySizeX25519
-+	if curve != "X25519" {
-+		expectedLen = 1 + 2*curveSize(curve)
-+	}
-+	if len(bytes) != expectedLen {
-+		return nil, errors.New("NewPublicKeyECDH: wrong key length")
-+	}
-+
-+	pkey, err := newECDHPkey(curve, bytes, false)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PublicKeyECDH{pkey, slices.Clone(bytes)}
-+	runtime.SetFinalizer(k, (*PublicKeyECDH).finalize)
-+	return k, nil
-+}
-+
-+func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
-+
-+func NewPrivateKeyECDH(curve string, bytes []byte) (*PrivateKeyECDH, error) {
-+	expectedLen := privateKeySizeX25519
-+	if curve != "X25519" {
-+		expectedLen = curveSize(curve)
-+	}
-+	if len(bytes) != expectedLen {
-+		return nil, errors.New("NewPrivateKeyECDH: wrong key length")
-+	}
-+	pkey, err := newECDHPkey(curve, bytes, true)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PrivateKeyECDH{pkey, curve}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
-+	return k, nil
-+}
-+
-+func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
-+	defer runtime.KeepAlive(k)
-+	var pkey ossl.EVP_PKEY_PTR
-+	defer func() {
-+		ossl.EVP_PKEY_free(pkey)
-+	}()
-+
-+	var bytes []byte
-+	if k.curve == "X25519" {
-+		pkey = k._pkey
-+		if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
-+			return nil, err
-+		}
-+		bytes = make([]byte, publicKeySizeX25519)
-+		if err := extractPKEYRawPublic(pkey, bytes); err != nil {
-+			return nil, err
-+		}
-+	} else {
-+		switch major() {
-+		case 1:
-+			var err error
-+			pkey, err = ossl.EVP_PKEY_new()
-+			if err != nil {
-+				return nil, err
-+			}
-+			key := getECKey(k._pkey)
-+			if _, err := ossl.EVP_PKEY_set1_EC_KEY(pkey, key); err != nil {
-+				return nil, err
-+			}
-+			pt := ossl.EC_KEY_get0_public_key(key)
-+			if pt == nil {
-+				return nil, fail("missing ECDH public key")
-+			}
-+			group := ossl.EC_KEY_get0_group(key)
-+			if bytes, err = encodeEcPoint(group, pt); err != nil {
-+				return nil, err
-+			}
-+		case 3, 4:
-+			pkey = k._pkey
-+			if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
-+				return nil, err
-+			}
-+			var cbytes *byte
-+			n, err := ossl.EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
-+			if err != nil {
-+				return nil, err
-+			}
-+			bytes = goBytes(unsafe.Pointer(cbytes), n)
-+			cryptoFree(unsafe.Pointer(cbytes))
-+		default:
-+			panic(errUnsupportedVersion())
-+		}
-+	}
-+	pub := &PublicKeyECDH{pkey, bytes}
-+	pkey = nil
-+	runtime.SetFinalizer(pub, (*PublicKeyECDH).finalize)
-+	return pub, nil
-+}
-+
-+func newECDHPkey(curve string, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
-+	if curve == "X25519" {
-+		if isPrivate {
-+			return ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_X25519, nil, bytes)
-+		} else {
-+			return ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_X25519, nil, bytes)
-+		}
-+	}
-+	nid := curveNID(curve)
-+	switch major() {
-+	case 1:
-+		return newECDHPkey1(nid, bytes, isPrivate)
-+	case 3, 4:
-+		return newECDHPkey3(nid, bytes, isPrivate)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+func newECDHPkey1(nid int32, bytes []byte, isPrivate bool) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
-+	key, err := ossl.EC_KEY_new_by_curve_name(nid)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if pkey == nil {
-+			ossl.EC_KEY_free(key)
-+		}
-+	}()
-+	group := ossl.EC_KEY_get0_group(key)
-+	if isPrivate {
-+		priv, err := ossl.BN_bin2bn(bytes, nil)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.BN_clear_free(priv)
-+		if _, err := ossl.EC_KEY_set_private_key(key, priv); err != nil {
-+			return nil, err
-+		}
-+		pub, err := pointMult(group, priv)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EC_POINT_free(pub)
-+		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
-+			return nil, err
-+		}
-+	} else {
-+		pub, err := ossl.EC_POINT_new(group)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EC_POINT_free(pub)
-+		if _, err := ossl.EC_POINT_oct2point(group, pub, bytes, nil); err != nil {
-+			return nil, err
-+		}
-+		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
-+			return nil, err
-+		}
-+	}
-+	if _, err := ossl.EC_KEY_check_key(key); err != nil {
-+		// Match upstream error message.
-+		if isPrivate {
-+			return nil, errors.New("crypto/ecdh: invalid private key")
-+		} else {
-+			return nil, errors.New("crypto/ecdh: invalid public key")
-+		}
-+	}
-+	return newEVPPKEY(key)
-+}
-+
-+func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
-+	var selection int32
-+	if isPrivate {
-+		priv, err := ossl.BN_bin2bn(bytes, nil)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.BN_clear_free(priv)
-+		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
-+			return pointMult(group, priv)
-+		})
-+		if err != nil {
-+			return nil, err
-+		}
-+		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
-+		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, priv)
-+		selection = ossl.EVP_PKEY_KEYPAIR
-+	} else {
-+		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, bytes)
-+		selection = ossl.EVP_PKEY_PUBLIC_KEY
-+	}
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+	pkey, err := newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	if err := checkPkey(pkey, isPrivate); err != nil {
-+		ossl.EVP_PKEY_free(pkey)
-+		return nil, errors.New("crypto/ecdh: " + err.Error())
-+	}
-+	return pkey, nil
-+}
-+
-+func pointMult(group ossl.EC_GROUP_PTR, priv ossl.BIGNUM_PTR) (ossl.EC_POINT_PTR, error) {
-+	// OpenSSL does not expose any method to generate the public
-+	// key from the private key [1], so we have to calculate it here.
-+	// [1] https://github.com/openssl/openssl/issues/18437#issuecomment-1144717206
-+	pt, err := ossl.EC_POINT_new(group)
-+	if err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EC_POINT_mul(group, pt, priv, nil, nil, nil); err != nil {
-+		ossl.EC_POINT_free(pt)
-+		return nil, err
-+	}
-+	return pt, nil
-+}
-+
-+func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
-+	defer runtime.KeepAlive(priv)
-+	defer runtime.KeepAlive(pub)
-+	ctx, err := ossl.EVP_PKEY_CTX_new(priv._pkey, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EVP_PKEY_derive_set_peer(ctx, pub._pkey); err != nil {
-+		return nil, err
-+	}
-+	var keylen int
-+	if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
-+		return nil, err
-+	}
-+	out := make([]byte, keylen)
-+	if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
-+		return nil, err
-+	}
-+	return out, nil
-+}
-+
-+func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	pkey, err := generateEVPPKey(curveID(curve), 0, curve)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	var k *PrivateKeyECDH
-+	defer func() {
-+		if k == nil {
-+			ossl.EVP_PKEY_free(pkey)
-+		}
-+	}()
-+	var bytes []byte
-+	if curve == "X25519" {
-+		bytes = make([]byte, privateKeySizeX25519)
-+		keylen := len(bytes)
-+		if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, bytes, &keylen); err != nil {
-+			return nil, nil, err
-+		}
-+	} else {
-+		var priv ossl.BIGNUM_PTR
-+		switch major() {
-+		case 1:
-+			key := getECKey(pkey)
-+			priv = ossl.EC_KEY_get0_private_key(key)
-+			if priv == nil {
-+				return nil, nil, fail("missing ECDH private key")
-+			}
-+		case 3, 4:
-+			if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
-+				return nil, nil, err
-+			}
-+			defer ossl.BN_clear_free(priv)
-+		default:
-+			panic(errUnsupportedVersion())
-+		}
-+		// We should not leak bit length of the secret scalar in the key.
-+		// For this reason, we use BN_bn2binpad instead of BN_bn2bin with fixed length.
-+		// The fixed length is the order of the large prime subgroup of the curve,
-+		// returned by EVP_PKEY_get_bits, which is generally the upper bound for
-+		// generating a private ECDH key.
-+		bits, err := ossl.EVP_PKEY_get_bits(pkey)
-+		if err != nil {
-+			return nil, nil, err
-+		}
-+		bytes = make([]byte, (bits+7)/8)
-+		if err := bnToBinPad(priv, bytes); err != nil {
-+			return nil, nil, err
-+		}
-+	}
-+	k = &PrivateKeyECDH{pkey, curve}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
-+	return k, bytes, nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-new file mode 100644
-index 00000000000000..eb7ccff87c14bd
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/ecdsa.go
-@@ -0,0 +1,219 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"runtime"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+type PrivateKeyECDSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PrivateKeyECDSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PrivateKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+type PublicKeyECDSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PublicKeyECDSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PublicKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
-+	pkey, err := newECDSAKey(curve, x, y, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PublicKeyECDSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PublicKeyECDSA).finalize)
-+	return k, nil
-+}
-+
-+func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
-+	pkey, err := newECDSAKey(curve, x, y, d)
-+	if err != nil {
-+		return nil, err
-+	}
-+	k := &PrivateKeyECDSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
-+	return k, nil
-+}
-+
-+func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
-+	// Generate the private key.
-+	pkey, err := generateEVPPKey(ossl.EVP_PKEY_EC, 0, curve)
-+	if err != nil {
-+		return nil, nil, nil, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	var bx, by, bd ossl.BIGNUM_PTR
-+	defer func() {
-+		ossl.BN_free(bx)
-+		ossl.BN_free(by)
-+	}()
-+	switch major() {
-+	case 1:
-+		// Retrieve the internal EC_KEY, which holds the X, Y, and D coordinates.
-+		key := getECKey(pkey)
-+		group := ossl.EC_KEY_get0_group(key)
-+		pt := ossl.EC_KEY_get0_public_key(key)
-+		// Allocate two big numbers to store the X and Y coordinates.
-+		bx, err = ossl.BN_new()
-+		if err != nil {
-+			return nil, nil, nil, err
-+		}
-+		by, err = ossl.BN_new()
-+		if err != nil {
-+			return nil, nil, nil, err
-+		}
-+		// Get X and Y.
-+		if _, err := ossl.EC_POINT_get_affine_coordinates_GFp(group, pt, bx, by, nil); err != nil {
-+			return nil, nil, nil, err
-+		}
-+		// Get Z. We don't need to free it, get0 does not increase the reference count.
-+		bd = ossl.EC_KEY_get0_private_key(key)
-+	case 3, 4:
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X.ptr(), &bx); err != nil {
-+			return nil, nil, nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_Y.ptr(), &by); err != nil {
-+			return nil, nil, nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bd); err != nil {
-+			return nil, nil, nil, err
-+		}
-+		defer ossl.BN_clear_free(bd)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+
-+	// Get D.
-+	return bnToBig(bx), bnToBig(by), bnToBig(bd), nil
-+}
-+
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, 0, 0, 0, hash)
-+}
-+
-+func HashSignECDSA(priv *PrivateKeyECDSA, h crypto.Hash, msg []byte) ([]byte, error) {
-+	return evpHashSign(priv.withKey, h, msg)
-+}
-+
-+func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
-+	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
-+}
-+
-+func HashVerifyECDSA(pub *PublicKeyECDSA, h crypto.Hash, msg, sig []byte) bool {
-+	return evpHashVerify(pub.withKey, h, msg, sig) == nil
-+}
-+
-+func newECDSAKey(curve string, x, y, d BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	nid := curveNID(curve)
-+	bx, err := bigToBN(x)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.BN_free(bx)
-+	by, err := bigToBN(y)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.BN_free(by)
-+	var bd ossl.BIGNUM_PTR
-+	if d != nil {
-+		bd, err = bigToBN(d)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.BN_clear_free(bd)
-+	}
-+	switch major() {
-+	case 1:
-+		return newECDSAKey1(nid, bx, by, bd)
-+	case 3, 4:
-+		return newECDSAKey3(nid, bx, by, bd)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+func newECDSAKey1(nid int32, bx, by, bd ossl.BIGNUM_PTR) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
-+	key, err := ossl.EC_KEY_new_by_curve_name(nid)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if pkey == nil {
-+			defer ossl.EC_KEY_free(key)
-+		}
-+	}()
-+	if _, err := ossl.EC_KEY_set_public_key_affine_coordinates(key, bx, by); err != nil {
-+		return nil, err
-+	}
-+	if bd != nil {
-+		if _, err := ossl.EC_KEY_set_private_key(key, bd); err != nil {
-+			return nil, err
-+		}
-+	}
-+
-+	return newEVPPKEY(key)
-+}
-+
-+func newECDSAKey3(nid int32, bx, by, bd ossl.BIGNUM_PTR) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	// Create the encoded public key public key from bx and by.
-+	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
-+		pt, err := ossl.EC_POINT_new(group)
-+		if err != nil {
-+			return nil, err
-+		}
-+		if _, err := ossl.EC_POINT_set_affine_coordinates(group, pt, bx, by, nil); err != nil {
-+			ossl.EC_POINT_free(pt)
-+			return nil, err
-+		}
-+		return pt, nil
-+	})
-+	if err != nil {
-+		return nil, err
-+	}
-+	// Construct the parameters.
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
-+	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
-+	var selection int32
-+	if bd != nil {
-+		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, bd)
-+		selection = ossl.EVP_PKEY_KEYPAIR
-+	} else {
-+		selection = ossl.EVP_PKEY_PUBLIC_KEY
-+	}
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+	return newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-new file mode 100644
-index 00000000000000..0baf58dc756106
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/ed25519.go
-@@ -0,0 +1,208 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"runtime"
-+	"strconv"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+const (
-+	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
-+	publicKeySizeEd25519 = 32
-+	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
-+	privateKeySizeEd25519 = 64
-+	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
-+	signatureSizeEd25519 = 64
-+	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
-+	seedSizeEd25519 = 32
-+)
-+
-+// TODO: Add support for Ed25519ph and Ed25519ctx when OpenSSL supports them,
-+// which will probably be in 3.2.0 (https://github.com/openssl/openssl/issues/20418).
-+
-+var supportsEd25519 = sync.OnceValue(func() bool {
-+	switch major() {
-+	case 1:
-+		ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
-+		if ctx != nil {
-+			ossl.EVP_PKEY_CTX_free(ctx)
-+			return true
-+		}
-+	case 3, 4:
-+		sig, _ := ossl.EVP_SIGNATURE_fetch(nil, _KeyTypeED25519.ptr(), nil)
-+		if sig != nil {
-+			ossl.EVP_SIGNATURE_free(sig)
-+			return true
-+		}
-+	}
-+	return false
-+})
-+
-+// SupportsEd25519 returns true if the current OpenSSL version supports
-+// GenerateKeyEd25519, NewKeyFromSeedEd25519, SignEd25519 and VerifyEd25519.
-+func SupportsEd25519() bool {
-+	return supportsEd25519()
-+}
-+
-+type PublicKeyEd25519 struct {
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PublicKeyEd25519) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
-+	defer runtime.KeepAlive(k)
-+	pub := make([]byte, publicKeySizeEd25519)
-+	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
-+		return nil, err
-+	}
-+	return pub, nil
-+}
-+
-+type PrivateKeyEd25519 struct {
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func (k *PrivateKeyEd25519) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	defer runtime.KeepAlive(k)
-+	priv := make([]byte, privateKeySizeEd25519)
-+	if err := extractPKEYPrivEd25519(k._pkey, priv); err != nil {
-+		return nil, err
-+	}
-+	return priv, nil
-+}
-+
-+func (k *PrivateKeyEd25519) Public() (*PublicKeyEd25519, error) {
-+	pub := make([]byte, publicKeySizeEd25519)
-+	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
-+		return nil, err
-+	}
-+	pubk, err := NewPublicKeyEd25519(pub)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return pubk, nil
-+}
-+
-+// GenerateKeyEd25519 generates a private key.
-+func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
-+	pkeyPriv, err := generateEVPPKey(ossl.EVP_PKEY_ED25519, 0, "")
-+	if err != nil {
-+		return nil, err
-+	}
-+	priv := &PrivateKeyEd25519{_pkey: pkeyPriv}
-+	runtime.SetFinalizer(priv, (*PrivateKeyEd25519).finalize)
-+	return priv, nil
-+}
-+
-+// Deprecated: use NewPrivateKeyEd25519 instead.
-+func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
-+	return NewPrivateKeyEd25519(priv)
-+}
-+
-+func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
-+	if len(priv) != privateKeySizeEd25519 {
-+		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
-+	}
-+	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
-+}
-+
-+// Deprecated: use NewPublicKeyEd25519 instead.
-+func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
-+	return NewPublicKeyEd25519(pub)
-+}
-+
-+func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
-+	if len(pub) != publicKeySizeEd25519 {
-+		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
-+	}
-+	pkey, err := ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_ED25519, nil, pub)
-+	if err != nil {
-+		return nil, err
-+	}
-+	pubk := &PublicKeyEd25519{_pkey: pkey}
-+	runtime.SetFinalizer(pubk, (*PublicKeyEd25519).finalize)
-+	return pubk, nil
-+}
-+
-+// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
-+// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
-+// package.
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
-+	if len(seed) != seedSizeEd25519 {
-+		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
-+	}
-+	pkey, err := ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_ED25519, nil, seed)
-+	if err != nil {
-+		return nil, err
-+	}
-+	priv := &PrivateKeyEd25519{_pkey: pkey}
-+	runtime.SetFinalizer(priv, (*PrivateKeyEd25519).finalize)
-+	return priv, nil
-+}
-+
-+func extractPKEYPrivEd25519(pkey ossl.EVP_PKEY_PTR, priv []byte) error {
-+	if err := extractPKEYRawPublic(pkey, priv[seedSizeEd25519:]); err != nil {
-+		return err
-+	}
-+	return extractPKEYRawPrivate(pkey, priv[:seedSizeEd25519])
-+}
-+
-+// SignEd25519 signs the message with priv and returns a signature.
-+func SignEd25519(priv *PrivateKeyEd25519, message []byte) (sig []byte, err error) {
-+	// Outline the function body so that the returned key can be stack-allocated.
-+	sig = make([]byte, signatureSizeEd25519)
-+	err = signEd25519(priv, sig, message)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return sig, err
-+}
-+
-+func signEd25519(priv *PrivateKeyEd25519, sig, message []byte) error {
-+	defer runtime.KeepAlive(priv)
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if _, err := ossl.EVP_DigestSignInit(ctx, nil, nil, nil, priv._pkey); err != nil {
-+		return err
-+	}
-+	siglen := signatureSizeEd25519
-+	if _, err := ossl.EVP_DigestSign(ctx, sig, &siglen, message); err != nil {
-+		return err
-+	}
-+	if siglen != signatureSizeEd25519 {
-+		return errors.New("ed25519: bad signature length: " + strconv.Itoa(siglen))
-+	}
-+	return nil
-+}
-+
-+// VerifyEd25519 reports whether sig is a valid signature of message by pub.
-+func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
-+	defer runtime.KeepAlive(pub)
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if _, err := ossl.EVP_DigestVerifyInit(ctx, nil, nil, nil, pub._pkey); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_DigestVerify(ctx, sig, message); err != nil {
-+		return errors.New("ed25519: invalid signature")
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/evp.go b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-new file mode 100644
-index 00000000000000..ff59409e3d1f76
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/evp.go
-@@ -0,0 +1,614 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
-+	"strconv"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// cacheMD is a cache of crypto.Hash to GOossl.EVP_MD_PTR.
-+var cacheMD sync.Map
-+
-+// hashFuncHash calls fn() and returns its result.
-+// If fn() panics, the panic is recovered and returned as an error.
-+// This is used to avoid aborting the program when calling
-+// an unsupported hash function. It is the caller's responsibility
-+// to check the returned value.
-+func hashFuncHash(fn func() hash.Hash) (h hash.Hash, err error) {
-+	defer func() {
-+		r := recover()
-+		if r == nil {
-+			return
-+		}
-+		h = nil
-+		switch e := r.(type) {
-+		case error:
-+			err = e
-+		case string:
-+			err = errors.New(e)
-+		default:
-+			err = errors.New("unsupported panic")
-+		}
-+	}()
-+	return fn(), nil
-+}
-+
-+// hashToMD converts a hash.Hash implementation from this package to a GOossl.EVP_MD_PTR.
-+func hashToMD(h hash.Hash) ossl.EVP_MD_PTR {
-+	if h, ok := h.(*Hash); ok {
-+		return h.alg.md
-+	}
-+	return nil
-+}
-+
-+// hashToCryptoHash converts a hash.Hash implementation from this package to a crypto.Hash.
-+func hashToCryptoHash(h hash.Hash) crypto.Hash {
-+	if h, ok := h.(*Hash); ok {
-+		return h.alg.ch
-+	}
-+	return 0
-+}
-+
-+// hashFuncToMD converts a hash.Hash function to a GOossl.EVP_MD_PTR.
-+// See [hashFuncHash] for details on error handling.
-+func hashFuncToMD(fn func() hash.Hash) (ossl.EVP_MD_PTR, error) {
-+	h, err := hashFuncHash(fn)
-+	if err != nil {
-+		return nil, err
-+	}
-+	md := hashToMD(h)
-+	if md == nil {
-+		return nil, errors.New("unsupported hash function")
-+	}
-+	return md, nil
-+}
-+
-+// provider is an identifier for a known provider.
-+type provider uint8
-+
-+const (
-+	providerNone provider = iota
-+	providerOSSLDefault
-+	providerOSSLFIPS
-+	providerSymCrypt
-+)
-+
-+type hashAlgorithm struct {
-+	md             ossl.EVP_MD_PTR
-+	ch             crypto.Hash
-+	size           int
-+	blockSize      int
-+	provider       provider
-+	marshallable   bool
-+	magic          string
-+	marshalledSize int
-+}
-+
-+// loadHash converts a crypto.Hash to a EVP_MD.
-+func loadHash(ch crypto.Hash, must bool) (h *hashAlgorithm) {
-+	defer func() {
-+		if h == nil && must {
-+			panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
-+		}
-+	}()
-+	if v, ok := cacheMD.Load(ch); ok {
-+		return v.(*hashAlgorithm)
-+	}
-+
-+	var hash hashAlgorithm
-+	switch ch {
-+	case crypto.RIPEMD160:
-+		hash.md = ossl.EVP_ripemd160()
-+	case crypto.MD4:
-+		hash.md = ossl.EVP_md4()
-+	case crypto.MD5:
-+		hash.md = ossl.EVP_md5()
-+		hash.magic = magicMD5
-+		hash.marshalledSize = marshaledSizeMD5
-+	case crypto.MD5SHA1:
-+		hash.md = ossl.EVP_md5_sha1()
-+	case crypto.SHA1:
-+		hash.md = ossl.EVP_sha1()
-+		hash.magic = magic1
-+		hash.marshalledSize = marshaledSize1
-+	case crypto.SHA224:
-+		hash.md = ossl.EVP_sha224()
-+		hash.magic = magic224
-+		hash.marshalledSize = marshaledSize256
-+	case crypto.SHA256:
-+		hash.md = ossl.EVP_sha256()
-+		hash.magic = magic256
-+		hash.marshalledSize = marshaledSize256
-+	case crypto.SHA384:
-+		hash.md = ossl.EVP_sha384()
-+		hash.magic = magic384
-+		hash.marshalledSize = marshaledSize512
-+	case crypto.SHA512:
-+		hash.md = ossl.EVP_sha512()
-+		hash.magic = magic512
-+		hash.marshalledSize = marshaledSize512
-+	case crypto.SHA512_224:
-+		hash.md = ossl.EVP_sha512_224()
-+		hash.magic = magic512_224
-+		hash.marshalledSize = marshaledSize512
-+	case crypto.SHA512_256:
-+		hash.md = ossl.EVP_sha512_256()
-+		hash.magic = magic512_256
-+		hash.marshalledSize = marshaledSize512
-+	case crypto.SHA3_224:
-+		hash.md = ossl.EVP_sha3_224()
-+	case crypto.SHA3_256:
-+		hash.md = ossl.EVP_sha3_256()
-+	case crypto.SHA3_384:
-+		hash.md = ossl.EVP_sha3_384()
-+	case crypto.SHA3_512:
-+		hash.md = ossl.EVP_sha3_512()
-+	}
-+	if hash.md == nil {
-+		cacheMD.Store(ch, (*hashAlgorithm)(nil))
-+		return nil
-+	}
-+	hash.ch = ch
-+	hash.size = int(ossl.EVP_MD_get_size(hash.md))
-+	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
-+	switch major() {
-+	case 3, 4:
-+		// On OpenSSL 3, directly operating on a EVP_MD object
-+		// not created by EVP_MD_fetch has negative performance
-+		// implications, as digest operations will have
-+		// to fetch it on every call. Better to just fetch it once here.
-+		md, _ := ossl.EVP_MD_fetch(nil, ossl.EVP_MD_get0_name(hash.md), nil)
-+		// Don't overwrite md in case it can't be fetched, as the md may still be used
-+		// outside of EVP_MD_CTX, for example to sign and verify RSA signatures.
-+		if md != nil {
-+			hash.md = md
-+		}
-+	}
-+	if hash.magic != "" {
-+		if hash.marshalledSize == 0 {
-+			panic("marshalledSize must be set for " + hash.magic)
-+		}
-+	}
-+
-+	switch major() {
-+	case 1:
-+		hash.provider = providerOSSLDefault
-+	case 3, 4:
-+		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
-+			cname := ossl.OSSL_PROVIDER_get0_name(prov)
-+			switch goString(cname) {
-+			case "default":
-+				hash.provider = providerOSSLDefault
-+				hash.marshallable = hash.magic != ""
-+			case "fips":
-+				hash.provider = providerOSSLFIPS
-+				hash.marshallable = hash.magic != ""
-+			case "symcryptprovider":
-+				hash.provider = providerSymCrypt
-+				hash.marshallable = hash.magic != "" && isSymCryptHashStateSerializable(hash.md)
-+			}
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+
-+	cacheMD.Store(ch, &hash)
-+	return &hash
-+}
-+
-+// generateEVPPKey generates a new EVP_PKEY with the given id and properties.
-+func generateEVPPKey(id, bits int32, curve string) (ossl.EVP_PKEY_PTR, error) {
-+	if bits != 0 && curve != "" {
-+		return nil, fail("incorrect generateEVPPKey parameters")
-+	}
-+	var pkey ossl.EVP_PKEY_PTR
-+	switch major() {
-+	case 1:
-+		ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EVP_PKEY_CTX_free(ctx)
-+		if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
-+			return nil, err
-+		}
-+		if bits != 0 {
-+			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_RSA_KEYGEN_BITS, bits, nil); err != nil {
-+				return nil, err
-+			}
-+		}
-+		if id == ossl.EVP_PKEY_EC && curve != "" {
-+			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil); err != nil {
-+				return nil, err
-+			}
-+		}
-+		if _, err := ossl.EVP_PKEY_keygen(ctx, &pkey); err != nil {
-+			return nil, err
-+		}
-+	case 3, 4:
-+		var err error
-+		switch id {
-+		case ossl.EVP_PKEY_RSA:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_RSA(nil, nil, _KeyTypeRSA.ptr(), int(bits))
-+		case ossl.EVP_PKEY_EC:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_EC(nil, nil, _KeyTypeEC.ptr(), ossl.OBJ_nid2sn(curveNID(curve)))
-+		case ossl.EVP_PKEY_ED25519:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_ED25519(nil, nil, _KeyTypeED25519.ptr())
-+		case ossl.EVP_PKEY_X25519:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_X25519(nil, nil, _KeyTypeX25519.ptr())
-+		case ossl.EVP_PKEY_MLKEM_768:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM768.ptr())
-+		case ossl.EVP_PKEY_MLKEM_1024:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM1024.ptr())
-+		case ossl.EVP_PKEY_ML_DSA_44:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA44.ptr())
-+		case ossl.EVP_PKEY_ML_DSA_65:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA65.ptr())
-+		case ossl.EVP_PKEY_ML_DSA_87:
-+			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA87.ptr())
-+		default:
-+			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
-+		}
-+		if err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+
-+	return pkey, nil
-+}
-+
-+type withKeyFunc func(func(ossl.EVP_PKEY_PTR) error) error
-+type initFunc func(ossl.EVP_PKEY_CTX_PTR) error
-+type cryptFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, *int, []byte) error
-+type verifyFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, []byte) error
-+
-+func setupEVP(withKey withKeyFunc, padding int32,
-+	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
-+	init initFunc) (_ ossl.EVP_PKEY_CTX_PTR, err error) {
-+	var ctx ossl.EVP_PKEY_CTX_PTR
-+	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) error {
-+		ctx, err = ossl.EVP_PKEY_CTX_new(pkey, nil)
-+		return err
-+	}); err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if err != nil {
-+			if ctx != nil {
-+				ossl.EVP_PKEY_CTX_free(ctx)
-+				ctx = nil
-+			}
-+		}
-+	}()
-+	if err := init(ctx); err != nil {
-+		return nil, err
-+	}
-+	if padding == 0 {
-+		return ctx, nil
-+	}
-+	// Each padding type has its own requirements in terms of when to apply the padding,
-+	// so it can't be just set at this point.
-+	switch padding {
-+	case ossl.RSA_PKCS1_OAEP_PADDING:
-+		err = setOAEPPadding(ctx, h, mgfHash, label)
-+	case ossl.RSA_PKCS1_PSS_PADDING:
-+		err = setPSSPadding(ctx, saltLen, ch)
-+	case ossl.RSA_PKCS1_PADDING:
-+		err = setPKCS1Padding(ctx, ch)
-+	default:
-+		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, padding, nil)
-+	}
-+	if err != nil {
-+		return nil, err
-+	}
-+	return ctx, nil
-+}
-+
-+func setPSSPadding(ctx ossl.EVP_PKEY_CTX_PTR, saltLen int32, ch crypto.Hash) error {
-+	alg := loadHash(ch, false)
-+	if alg == nil {
-+		return errors.New("crypto/rsa: unsupported hash function")
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
-+		return err
-+	}
-+	// setPadding must happen after setting EVP_PKEY_CTRL_MD.
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PSS_PADDING, nil); err != nil {
-+		return err
-+	}
-+	if saltLen != 0 {
-+		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil); err != nil {
-+			return err
-+		}
-+	}
-+	return nil
-+}
-+
-+func setPKCS1Padding(ctx ossl.EVP_PKEY_CTX_PTR, ch crypto.Hash) error {
-+	if ch == 0 {
-+		// We support unhashed messages.
-+		return nil
-+	}
-+	alg := loadHash(ch, false)
-+	if alg == nil {
-+		return errors.New("crypto/rsa: unsupported hash function")
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
-+		return err
-+	}
-+	return nil
-+}
-+
-+func setOAEPPadding(ctx ossl.EVP_PKEY_CTX_PTR, h, mgfHash hash.Hash, label []byte) error {
-+	md := hashToMD(h)
-+	if md == nil {
-+		return errors.New("crypto/rsa: unsupported hash function")
-+	}
-+	var mgfMD ossl.EVP_MD_PTR
-+	if mgfHash != nil {
-+		// mgfHash is optional, but if it is set it must match a supported hash function.
-+		mgfMD = hashToMD(mgfHash)
-+		if mgfMD == nil {
-+			return errors.New("crypto/rsa: unsupported hash function")
-+		}
-+	}
-+	// setPadding must happen before setting EVP_PKEY_CTRL_RSA_OAEP_MD.
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_OAEP_PADDING, nil); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)); err != nil {
-+		return err
-+	}
-+	if mgfHash != nil {
-+		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)); err != nil {
-+			return err
-+		}
-+	}
-+	// ctx takes ownership of label, so malloc a copy for OpenSSL to free.
-+	// OpenSSL does not take ownership of the label if the length is zero,
-+	// so better avoid the allocation.
-+	var clabel *byte
-+	if len(label) > 0 {
-+		clabel = (*byte)(cryptoMalloc(len(label)))
-+		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
-+		var err error
-+		switch major() {
-+		case 3, 4:
-+			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
-+		default:
-+			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
-+		}
-+		if err != nil {
-+			cryptoFree(unsafe.Pointer(clabel))
-+			return err
-+		}
-+	}
-+	return nil
-+}
-+
-+func cryptEVP(withKey withKeyFunc, padding int32,
-+	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
-+	init initFunc, crypt cryptFunc, in []byte) ([]byte, error) {
-+
-+	ctx, err := setupEVP(withKey, padding, h, mgfHash, label, saltLen, ch, init)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	var pkeySize int32
-+	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
-+		pkeySize, err = ossl.EVP_PKEY_get_size(pkey)
-+		return err
-+	}); err != nil {
-+		return nil, err
-+	}
-+	outLen := int(pkeySize)
-+	out := make([]byte, pkeySize)
-+	if err := crypt(ctx, out, &outLen, in); err != nil {
-+		return nil, err
-+	}
-+	// The size returned by EVP_PKEY_get_size() is only preliminary and not exact,
-+	// so the final contents of the out buffer may be smaller.
-+	return out[:outLen], nil
-+}
-+
-+func verifyEVP(withKey withKeyFunc, padding int32,
-+	h hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
-+	init initFunc, verify verifyFunc,
-+	sig, in []byte) error {
-+
-+	ctx, err := setupEVP(withKey, padding, h, nil, label, saltLen, ch, init)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	return verify(ctx, sig, in)
-+}
-+
-+func evpEncrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
-+	encryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
-+		_, err := ossl.EVP_PKEY_encrypt_init(ctx)
-+		return err
-+	}
-+	encrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
-+		if _, err := ossl.EVP_PKEY_encrypt(ctx, out, outLen, in); err != nil {
-+			return err
-+		}
-+		return nil
-+	}
-+	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, encryptInit, encrypt, msg)
-+}
-+
-+func evpDecrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
-+	decryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
-+		_, err := ossl.EVP_PKEY_decrypt_init(ctx)
-+		return err
-+	}
-+	decrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
-+		_, err := ossl.EVP_PKEY_decrypt(ctx, out, outLen, in)
-+		return err
-+	}
-+	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, decryptInit, decrypt, msg)
-+}
-+
-+func evpSign(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	signtInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
-+		_, err := ossl.EVP_PKEY_sign_init(ctx)
-+		return err
-+	}
-+	sign := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
-+		_, err := ossl.EVP_PKEY_sign(ctx, out, outLen, in)
-+		return err
-+	}
-+	return cryptEVP(withKey, padding, nil, nil, nil, saltLen, h, signtInit, sign, hashed)
-+}
-+
-+func evpVerify(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, sig, hashed []byte) error {
-+	verifyInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
-+		_, err := ossl.EVP_PKEY_verify_init(ctx)
-+		return err
-+	}
-+	verify := func(ctx ossl.EVP_PKEY_CTX_PTR, sig []byte, in []byte) error {
-+		_, err := ossl.EVP_PKEY_verify(ctx, sig, in)
-+		return err
-+	}
-+	return verifyEVP(withKey, padding, nil, nil, saltLen, h, verifyInit, verify, sig, hashed)
-+}
-+
-+func evpHashSign(withKey withKeyFunc, h crypto.Hash, msg []byte) ([]byte, error) {
-+	alg := loadHash(h, false)
-+	if alg == nil {
-+		return nil, errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
-+	}
-+	var out []byte
-+	var outLen int
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
-+		_, err := ossl.EVP_DigestSignInit(ctx, nil, alg.md, nil, key)
-+		return err
-+	}); err != nil {
-+		return nil, err
-+	}
-+	if len(msg) > 0 {
-+		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
-+			return nil, err
-+		}
-+	}
-+	// Obtain the signature length
-+	if _, err := ossl.EVP_DigestSignFinal(ctx, nil, &outLen); err != nil {
-+		return nil, err
-+	}
-+	out = make([]byte, outLen)
-+	// Obtain the signature
-+	if _, err := ossl.EVP_DigestSignFinal(ctx, out, &outLen); err != nil {
-+		return nil, err
-+	}
-+	return out[:outLen], nil
-+}
-+
-+func evpHashVerify(withKey withKeyFunc, h crypto.Hash, msg, sig []byte) error {
-+	alg := loadHash(h, false)
-+	if alg == nil {
-+		return errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
-+	}
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
-+		_, err := ossl.EVP_DigestVerifyInit(ctx, nil, alg.md, nil, key)
-+		return err
-+	}); err != nil {
-+		return err
-+	}
-+	if len(msg) > 0 {
-+		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
-+			return err
-+		}
-+	}
-+	if _, err := ossl.EVP_DigestVerifyFinal(ctx, sig); err != nil {
-+		return err
-+	}
-+	return nil
-+}
-+
-+func newEVPPKEY(key ossl.EC_KEY_PTR) (ossl.EVP_PKEY_PTR, error) {
-+	pkey, err := ossl.EVP_PKEY_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_EC, unsafe.Pointer(key)); err != nil {
-+		ossl.EVP_PKEY_free(pkey)
-+		return nil, err
-+	}
-+	return pkey, nil
-+}
-+
-+// getECKey returns the EC_KEY from pkey.
-+// If pkey does not contain an EC_KEY it panics.
-+// The returned key should not be freed.
-+func getECKey(pkey ossl.EVP_PKEY_PTR) ossl.EC_KEY_PTR {
-+	key, err := ossl.EVP_PKEY_get0_EC_KEY(pkey)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return key
-+}
-+
-+func newEvpFromParams(id int32, selection int32, params ossl.OSSL_PARAM_PTR) (ossl.EVP_PKEY_PTR, error) {
-+	ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_fromdata_init(ctx); err != nil {
-+		return nil, err
-+	}
-+	var pkey ossl.EVP_PKEY_PTR
-+	if _, err := ossl.EVP_PKEY_fromdata(ctx, &pkey, selection, params); err != nil {
-+		//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 leak EVP_PKEY on error: https://github.com/openssl/openssl/issues/17407.
-+		if major() == 3 && minor() == 0 && patch() <= 2 {
-+			ossl.EVP_PKEY_free(pkey)
-+		}
-+		return nil, err
-+	}
-+	return pkey, nil
-+}
-+
-+func checkPkey(pkey ossl.EVP_PKEY_PTR, isPrivate bool) error {
-+	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if isPrivate {
-+		if _, err := ossl.EVP_PKEY_private_check(ctx); err != nil {
-+			// Match upstream error message.
-+			return errors.New("invalid private key")
-+		}
-+	} else {
-+		// Upstream Go does a partial check here, so do we.
-+		if _, err := ossl.EVP_PKEY_public_check_quick(ctx); err != nil {
-+			// Match upstream error message.
-+			return errors.New("invalid public key")
-+		}
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hash.go b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-new file mode 100644
-index 00000000000000..d9c2c6c5f989e0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hash.go
-@@ -0,0 +1,520 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
-+	"runtime"
-+	"strconv"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+const (
-+	magicMD5     = "md5\x01"
-+	magic1       = "sha\x01"
-+	magic224     = "sha\x02"
-+	magic256     = "sha\x03"
-+	magic384     = "sha\x04"
-+	magic512_224 = "sha\x05"
-+	magic512_256 = "sha\x06"
-+	magic512     = "sha\x07"
-+
-+	marshaledSizeMD5 = len(magicMD5) + 4*4 + 64 + 8  // from crypto/md5
-+	marshaledSize1   = len(magic1) + 5*4 + 64 + 8    // from crypto/sha1
-+	marshaledSize256 = len(magic256) + 8*4 + 64 + 8  // from crypto/sha256
-+	marshaledSize512 = len(magic512) + 8*8 + 128 + 8 // from crypto/sha512
-+)
-+
-+// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
-+const maxHashSize = 64
-+
-+type HashCloner = hash.Cloner
-+
-+func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
-+	_, err := ossl.EVP_Digest(p, sum, nil, loadHash(ch, true).md, nil)
-+	return err == nil
-+}
-+
-+func MD4(p []byte) (sum [16]byte) {
-+	if !hashOneShot(crypto.MD4, p, sum[:]) {
-+		panic("openssl: MD4 failed")
-+	}
-+	return
-+}
-+
-+func MD5(p []byte) (sum [16]byte) {
-+	if !hashOneShot(crypto.MD5, p, sum[:]) {
-+		panic("openssl: MD5 failed")
-+	}
-+	return
-+}
-+
-+func SHA1(p []byte) (sum [20]byte) {
-+	if !hashOneShot(crypto.SHA1, p, sum[:]) {
-+		panic("openssl: SHA1 failed")
-+	}
-+	return
-+}
-+
-+func SHA224(p []byte) (sum [28]byte) {
-+	if !hashOneShot(crypto.SHA224, p, sum[:]) {
-+		panic("openssl: SHA224 failed")
-+	}
-+	return
-+}
-+
-+func SHA256(p []byte) (sum [32]byte) {
-+	if !hashOneShot(crypto.SHA256, p, sum[:]) {
-+		panic("openssl: SHA256 failed")
-+	}
-+	return
-+}
-+
-+func SHA384(p []byte) (sum [48]byte) {
-+	if !hashOneShot(crypto.SHA384, p, sum[:]) {
-+		panic("openssl: SHA384 failed")
-+	}
-+	return
-+}
-+
-+func SHA512(p []byte) (sum [64]byte) {
-+	if !hashOneShot(crypto.SHA512, p, sum[:]) {
-+		panic("openssl: SHA512 failed")
-+	}
-+	return
-+}
-+
-+func SHA512_224(p []byte) (sum [28]byte) {
-+	if !hashOneShot(crypto.SHA512_224, p, sum[:]) {
-+		panic("openssl: SHA512 failed")
-+	}
-+	return
-+}
-+
-+func SHA512_256(p []byte) (sum [32]byte) {
-+	if !hashOneShot(crypto.SHA512_256, p, sum[:]) {
-+		panic("openssl: SHA512_256 failed")
-+	}
-+	return
-+}
-+
-+// cacheHashSupported is a cache of crypto.Hash support.
-+var cacheHashSupported sync.Map
-+
-+// SupportsHash reports whether the current OpenSSL version supports the given hash.
-+func SupportsHash(h crypto.Hash) bool {
-+	if v, ok := cacheHashSupported.Load(h); ok {
-+		return v.(bool)
-+	}
-+	alg := loadHash(h, false)
-+	if alg == nil {
-+		cacheHashSupported.Store(h, false)
-+		return false
-+	}
-+	// EVP_MD objects can be non-nil even when they can't be used
-+	// in a EVP_MD_CTX, e.g. MD5 in FIPS mode. We need to prove
-+	// if they can be used by passing them to a EVP_MD_CTX.
-+	var supported bool
-+	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
-+		_, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil)
-+		supported = err == nil
-+		ossl.EVP_MD_CTX_free(ctx)
-+	}
-+	cacheHashSupported.Store(h, supported)
-+	return supported
-+}
-+
-+func SumSHA3_224(p []byte) (sum [28]byte) {
-+	if !hashOneShot(crypto.SHA3_224, p, sum[:]) {
-+		panic("openssl: SHA3_224 failed")
-+	}
-+	return
-+}
-+
-+func SumSHA3_256(p []byte) (sum [32]byte) {
-+	if !hashOneShot(crypto.SHA3_256, p, sum[:]) {
-+		panic("openssl: SHA3_256 failed")
-+	}
-+	return
-+}
-+
-+func SumSHA3_384(p []byte) (sum [48]byte) {
-+	if !hashOneShot(crypto.SHA3_384, p, sum[:]) {
-+		panic("openssl: SHA3_384 failed")
-+	}
-+	return
-+}
-+
-+func SumSHA3_512(p []byte) (sum [64]byte) {
-+	if !hashOneShot(crypto.SHA3_512, p, sum[:]) {
-+		panic("openssl: SHA3_512 failed")
-+	}
-+	return
-+}
-+
-+// NewMD4 returns a new MD4 hash.
-+// The returned hash doesn't implement encoding.BinaryMarshaler and
-+// encoding.BinaryUnmarshaler.
-+func NewMD4() hash.Hash {
-+	return newHash(crypto.MD4)
-+}
-+
-+// NewMD5 returns a new MD5 hash.
-+func NewMD5() hash.Hash {
-+	return newHash(crypto.MD5)
-+}
-+
-+// NewSHA1 returns a new SHA1 hash.
-+func NewSHA1() hash.Hash {
-+	return newHash(crypto.SHA1)
-+}
-+
-+// NewSHA224 returns a new SHA224 hash.
-+func NewSHA224() hash.Hash {
-+	return newHash(crypto.SHA224)
-+}
-+
-+// NewSHA256 returns a new SHA256 hash.
-+func NewSHA256() hash.Hash {
-+	return newHash(crypto.SHA256)
-+}
-+
-+// NewSHA384 returns a new SHA384 hash.
-+func NewSHA384() hash.Hash {
-+	return newHash(crypto.SHA384)
-+}
-+
-+// NewSHA512 returns a new SHA512 hash.
-+func NewSHA512() hash.Hash {
-+	return newHash(crypto.SHA512)
-+}
-+
-+// NewSHA512_224 returns a new SHA512_224 hash.
-+func NewSHA512_224() hash.Hash {
-+	return newHash(crypto.SHA512_224)
-+}
-+
-+// NewSHA512_256 returns a new SHA512_256 hash.
-+func NewSHA512_256() hash.Hash {
-+	return newHash(crypto.SHA512_256)
-+}
-+
-+// NewSHA3_224 returns a new SHA3-224 hash.
-+func NewSHA3_224() *Hash {
-+	return newHash(crypto.SHA3_224)
-+}
-+
-+// NewSHA3_256 creates a new SHA3-256 hash.
-+func NewSHA3_256() *Hash {
-+	return newHash(crypto.SHA3_256)
-+}
-+
-+// NewSHA3_384 creates a new SHA3-384 hash.
-+func NewSHA3_384() *Hash {
-+	return newHash(crypto.SHA3_384)
-+}
-+
-+// NewSHA3_512 creates a new SHA3-512 hash.
-+func NewSHA3_512() *Hash {
-+	return newHash(crypto.SHA3_512)
-+}
-+
-+var _ hash.Hash = (*Hash)(nil)
-+var _ HashCloner = (*Hash)(nil)
-+
-+// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
-+func FIPSApprovedHash(h hash.Hash) bool {
-+	xh, ok := h.(*Hash)
-+	if !ok {
-+		return false
-+	}
-+	switch xh.alg.ch {
-+	case crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512,
-+		crypto.SHA512_224, crypto.SHA512_256,
-+		crypto.SHA3_224, crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
-+		return true
-+	default:
-+		return false
-+	}
-+}
-+
-+// hashBufSize is the size of the buffer used for hashing.
-+// 256 bytes is a reasonable compromise for general purpose use,
-+// and the resulting evpHash size is still similar to the
-+// upstream sha512 hash object.
-+const hashBufSize = 256
-+
-+// Hash implements generic hash methods.
-+type Hash struct {
-+	alg *hashAlgorithm
-+	ctx ossl.EVP_MD_CTX_PTR
-+	// ctx2 is used in Hash.Sum to avoid changing
-+	// the state of ctx. Having it here allows reusing the
-+	// same allocated object multiple times.
-+	ctx2 ossl.EVP_MD_CTX_PTR
-+
-+	// buf is a buffer for data not yet written to ctx.
-+	// It is used to reduce calls into OpenSSL for small writes.
-+	// The buffer size is a trade-off between memory usage and
-+	// number of calls into OpenSSL.
-+	buf  [hashBufSize]byte
-+	nbuf int
-+}
-+
-+func newHash(ch crypto.Hash) *Hash {
-+	// Don't call init() yet, it would be wasteful
-+	// if the caller only wants to know the hash type. This
-+	// is a common pattern in this package, as some functions
-+	// accept a `func() hash.Hash` parameter and call it just
-+	// to know the hash type.
-+	return &Hash{alg: loadHash(ch, true)}
-+}
-+
-+func (h *Hash) finalize() {
-+	if h.ctx != nil {
-+		ossl.EVP_MD_CTX_free(h.ctx)
-+	}
-+	if h.ctx2 != nil {
-+		ossl.EVP_MD_CTX_free(h.ctx2)
-+	}
-+}
-+
-+func (h *Hash) init() {
-+	if h.ctx != nil {
-+		return
-+	}
-+	var err error
-+	h.ctx, err = ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.EVP_DigestInit_ex(h.ctx, h.alg.md, nil); err != nil {
-+		ossl.EVP_MD_CTX_free(h.ctx)
-+		panic(err)
-+	}
-+	h.ctx2, err = ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		ossl.EVP_MD_CTX_free(h.ctx)
-+		panic(err)
-+	}
-+	runtime.SetFinalizer(h, (*Hash).finalize)
-+}
-+
-+func (h *Hash) write(p []byte) int {
-+	if len(p) == 0 {
-+		return 0
-+	}
-+	if h.nbuf > 0 && h.nbuf+len(p) > len(h.buf) {
-+		// We have buffered data and adding p would exceed the buffer,
-+		// flush the buffer first.
-+		h.flush()
-+	}
-+	if len(p) > len(h.buf) {
-+		// p is larger than the buffer, write it directly.
-+		h.init()
-+		if _, err := ossl.EVP_DigestUpdate(h.ctx, p); err != nil {
-+			panic(err)
-+		}
-+	} else {
-+		// Otherwise, buffer it.
-+		h.nbuf += copy(h.buf[h.nbuf:], p)
-+	}
-+	runtime.KeepAlive(h)
-+	return len(p)
-+}
-+
-+func (h *Hash) flush() {
-+	h.init()
-+	if h.nbuf > 0 {
-+		if _, err := ossl.EVP_DigestUpdate(h.ctx, h.buf[:h.nbuf]); err != nil {
-+			panic(err)
-+		}
-+		h.nbuf = 0
-+	}
-+}
-+
-+func (h *Hash) Reset() {
-+	h.nbuf = 0
-+	if h.ctx == nil {
-+		// The hash is not initialized yet, no need to reset ctx.
-+		return
-+	}
-+	// There is no need to reset h.ctx2 because it is always reset in evpHash.Sum.
-+	if _, err := ossl.EVP_DigestInit_ex(h.ctx, nil, nil); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(h)
-+}
-+
-+func (h *Hash) Write(p []byte) (int, error) {
-+	return h.write(p), nil
-+}
-+
-+func (h *Hash) WriteString(s string) (int, error) {
-+	return h.write(unsafe.Slice(unsafe.StringData(s), len(s))), nil
-+}
-+
-+func (h *Hash) WriteByte(c byte) error {
-+	h.write(unsafe.Slice(&c, 1))
-+	return nil
-+}
-+
-+func (h *Hash) Size() int {
-+	return h.alg.size
-+}
-+
-+func (h *Hash) BlockSize() int {
-+	return h.alg.blockSize
-+}
-+
-+func (h *Hash) Sum(in []byte) []byte {
-+	out := append(in, make([]byte, h.Size(), maxHashSize)...)
-+	if h.ctx == nil {
-+		// Fast path: if ctx hasn't been initialized, all data is in the buffer
-+		// and we can use the one-shot EVP_Digest function.
-+		if _, err := ossl.EVP_Digest(h.buf[:h.nbuf], out[len(in):], nil, h.alg.md, nil); err != nil {
-+			panic(err)
-+		}
-+		return out
-+	}
-+	// Slow path: copy h.ctx into h.ctx2 and call EVP_DigestFinal_ex using h.ctx2.
-+	// This is necessary because Go hash.Hash mandates that Sum has no effect
-+	// on the underlying stream. In particular it is OK to Sum, then Write more,
-+	// then Sum again, and the second Sum acts as if the first didn't happen.
-+	if _, err := ossl.EVP_MD_CTX_copy_ex(h.ctx2, h.ctx); err != nil {
-+		panic(err)
-+	}
-+	if h.nbuf > 0 {
-+		// If we have buffered data, update ctx2 with it
-+		if _, err := ossl.EVP_DigestUpdate(h.ctx2, h.buf[:h.nbuf]); err != nil {
-+			panic(err)
-+		}
-+	}
-+	if _, err := ossl.EVP_DigestFinal_ex(h.ctx2, out[len(in):], nil); err != nil {
-+		panic(err)
-+	}
-+	runtime.KeepAlive(h)
-+	return out
-+}
-+
-+// Clone returns a new Hash object that is a deep clone of itself.
-+// The duplicate object contains all state and data contained in the
-+// original object at the point of duplication.
-+func (h *Hash) Clone() (HashCloner, error) {
-+	h2 := &Hash{alg: h.alg, nbuf: h.nbuf}
-+	copy(h2.buf[:h.nbuf], h.buf[:h.nbuf])
-+	if h.ctx != nil {
-+		var err error
-+		h2.ctx, err = ossl.EVP_MD_CTX_new()
-+		if err != nil {
-+			panic(err)
-+		}
-+		if _, err := ossl.EVP_MD_CTX_copy_ex(h2.ctx, h.ctx); err != nil {
-+			ossl.EVP_MD_CTX_free(h2.ctx)
-+			panic(err)
-+		}
-+		h2.ctx2, err = ossl.EVP_MD_CTX_new()
-+		if err != nil {
-+			ossl.EVP_MD_CTX_free(h2.ctx)
-+			panic(err)
-+		}
-+		runtime.SetFinalizer(h2, (*Hash).finalize)
-+	}
-+	runtime.KeepAlive(h)
-+	return h2, nil
-+}
-+
-+type errMarshallUnsupported struct{}
-+
-+func (e errMarshallUnsupported) Error() string {
-+	return "cryptokit: hash state is not marshallable"
-+}
-+
-+func (e errMarshallUnsupported) Unwrap() error {
-+	return errors.ErrUnsupported
-+}
-+
-+func (d *Hash) MarshalBinary() ([]byte, error) {
-+	if d.alg == nil || !d.alg.marshallable {
-+		return nil, errMarshallUnsupported{}
-+	}
-+	buf := make([]byte, 0, d.alg.marshalledSize)
-+	return d.AppendBinary(buf)
-+}
-+
-+func (d *Hash) AppendBinary(buf []byte) ([]byte, error) {
-+	defer runtime.KeepAlive(d)
-+	if d.alg == nil || !d.alg.marshallable {
-+		return nil, errMarshallUnsupported{}
-+	}
-+	d.flush()
-+	switch d.alg.provider {
-+	case providerOSSLDefault, providerOSSLFIPS:
-+		return osslHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
-+	case providerSymCrypt:
-+		return symCryptHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
-+	default:
-+		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
-+	}
-+}
-+
-+func (d *Hash) UnmarshalBinary(b []byte) error {
-+	defer runtime.KeepAlive(d)
-+	d.flush()
-+	if d.alg == nil || !d.alg.marshallable {
-+		return errMarshallUnsupported{}
-+	}
-+	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != d.alg.magic {
-+		return errors.New("openssl: invalid hash state identifier")
-+	}
-+	if len(b) != d.alg.marshalledSize {
-+		return errors.New("openssl: invalid hash state size")
-+	}
-+	switch d.alg.provider {
-+	case providerOSSLDefault, providerOSSLFIPS:
-+		return osslHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
-+	case providerSymCrypt:
-+		return symCryptHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
-+	default:
-+		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
-+	}
-+}
-+
-+// appendUint64 appends x into b as a big endian byte sequence.
-+func appendUint64(b []byte, x uint64) []byte {
-+	return append(b,
-+		byte(x>>56),
-+		byte(x>>48),
-+		byte(x>>40),
-+		byte(x>>32),
-+		byte(x>>24),
-+		byte(x>>16),
-+		byte(x>>8),
-+		byte(x),
-+	)
-+}
-+
-+// appendUint32 appends x into b as a big endian byte sequence.
-+func appendUint32(b []byte, x uint32) []byte {
-+	return append(b, byte(x>>24), byte(x>>16), byte(x>>8), byte(x))
-+}
-+
-+// consumeUint64 reads a big endian uint64 number from b.
-+func consumeUint64(b []byte) ([]byte, uint64) {
-+	_ = b[7]
-+	x := uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
-+		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
-+	return b[8:], x
-+}
-+
-+// consumeUint32 reads a big endian uint32 number from b.
-+func consumeUint32(b []byte) ([]byte, uint32) {
-+	_ = b[3]
-+	x := uint32(b[3]) | uint32(b[2])<<8 | uint32(b[1])<<16 | uint32(b[0])<<24
-+	return b[4:], x
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-new file mode 100644
-index 00000000000000..695bf122165169
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hkdf.go
-@@ -0,0 +1,441 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"hash"
-+	"io"
-+	"runtime"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// SupprtHKDF reports whether the current OpenSSL version supports HKDF.
-+func SupportsHKDF() bool {
-+	switch major() {
-+	case 1:
-+		return true
-+	case 3, 4:
-+		_, err := fetchHKDF3()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// SupprtsTLS13KDF reports whether the current OpenSSL version supports TLS13-KDF.
-+func SupportsTLS13KDF() bool {
-+	switch major() {
-+	case 1:
-+		return false
-+	case 3, 4:
-+		// TLS13-KDF is available in OpenSSL 3.0.0 and later.
-+		_, err := fetchTLS13_KDF()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+func newHKDFCtx1(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (ctx ossl.EVP_PKEY_CTX_PTR, err error) {
-+	checkMajorVersion(1)
-+
-+	ctx, err = ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_HKDF, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if err != nil {
-+			ossl.EVP_PKEY_CTX_free(ctx)
-+		}
-+	}()
-+
-+	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
-+		return ctx, err
-+	}
-+
-+	ctrlSlice := func(ctrl int32, data []byte) bool {
-+		if err != nil {
-+			return false
-+		}
-+		if len(data) == 0 {
-+			return true // No data to set.
-+		}
-+		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ctrl, int32(len(data)), unsafe.Pointer(base(data)))
-+		return err == nil
-+	}
-+
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MODE, mode, nil); err != nil {
-+		return ctx, err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MD, 0, unsafe.Pointer(md)); err != nil {
-+		return ctx, err
-+	}
-+	if ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, secret) &&
-+		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_SALT, salt) &&
-+		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, pseudorandomKey) &&
-+		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_INFO, info) {
-+		return ctx, err
-+	}
-+	return ctx, nil
-+}
-+
-+type hkdf1 struct {
-+	ctx ossl.EVP_PKEY_CTX_PTR
-+
-+	hashLen int
-+	buf     []byte
-+}
-+
-+func (c *hkdf1) finalize() {
-+	if c.ctx != nil {
-+		ossl.EVP_PKEY_CTX_free(c.ctx)
-+	}
-+}
-+
-+func (c *hkdf1) Read(p []byte) (int, error) {
-+	defer runtime.KeepAlive(c)
-+
-+	// EVP_PKEY_derive doesn't support incremental output, each call
-+	// derives the key from scratch and returns the requested bytes.
-+	// To implement io.Reader, we need to ask for len(c.buf) + len(p)
-+	// bytes and copy the last derived len(p) bytes to p.
-+	// We use c.buf to know how many bytes we've already derived and
-+	// to avoid allocating the whole output buffer on each call.
-+	prevLen := len(c.buf)
-+	needLen := len(p)
-+	remains := 255*c.hashLen - prevLen
-+	// Check whether enough data can be generated.
-+	if remains < needLen {
-+		return 0, errors.New("hkdf: entropy limit reached")
-+	}
-+	c.buf = append(c.buf, make([]byte, needLen)...)
-+	outLen := prevLen + needLen
-+	if _, err := ossl.EVP_PKEY_derive(c.ctx, c.buf, &outLen); err != nil {
-+		return 0, err
-+	}
-+	n := copy(p, c.buf[prevLen:outLen])
-+	return n, nil
-+}
-+
-+// hkdfAllZerosSalt is a preallocated buffer of zeros used in ExtractHKDF().
-+// The size should be kept as large as the output length of any hash algorithm
-+// used with HKDF.
-+var hkdfAllZerosSalt [64]byte
-+
-+// ExtractHDKF implements the HDKF extract step.
-+// If salt is nil, then this function replaces it internally with a buffer of
-+// zeros whose length equals the output length of the specified hash algorithm.
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	if !SupportsHKDF() {
-+		return nil, errUnsupportedVersion()
-+	}
-+
-+	md, err := hashFuncToMD(h)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	// If calling code specifies nil salt, replace it with a buffer of hashLen
-+	// zeros, as specified in RFC 5896 and as OpenSSL EVP_KDF-HKDF documentation
-+	// instructs. Take a slice of a preallocated buffer to avoid allocating new
-+	// buffer per call, but fall back to allocating a buffer if preallocated
-+	// buffer is not large enough.
-+	if salt == nil {
-+		hlen := h().Size()
-+		if hlen > len(hkdfAllZerosSalt) {
-+			salt = make([]byte, hlen)
-+		} else {
-+			salt = hkdfAllZerosSalt[:hlen]
-+		}
-+	}
-+
-+	switch major() {
-+	case 1:
-+		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EVP_PKEY_CTX_free(ctx)
-+		var keylen int
-+		if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
-+			return nil, err
-+		}
-+		out := make([]byte, keylen)
-+		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
-+			return nil, err
-+		}
-+		return out[:keylen], nil
-+	case 3, 4:
-+		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EVP_KDF_CTX_free(ctx)
-+		size, err := ossl.EVP_KDF_CTX_get_kdf_size(ctx)
-+		if err != nil {
-+			return nil, err
-+		}
-+		out := make([]byte, size)
-+		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
-+			return nil, err
-+		}
-+		return out, nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// ExpandHKDFOneShot derives a key from the given hash, key, and optional context info.
-+func ExpandHKDFOneShot(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	if !SupportsHKDF() {
-+		return nil, errUnsupportedVersion()
-+	}
-+
-+	md, err := hashFuncToMD(h)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	out := make([]byte, keyLength)
-+	switch major() {
-+	case 1:
-+		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EVP_PKEY_CTX_free(ctx)
-+		if len(out) == 0 {
-+			// Nothing to do, so exit early.
-+			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
-+			// We can only exit after calling newHKDFCtx1 because we still need it to validate the parameters.
-+			return out, nil
-+		}
-+		keylen := keyLength
-+		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
-+			return nil, err
-+		}
-+	case 3, 4:
-+		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
-+		if err != nil {
-+			return nil, err
-+		}
-+		defer ossl.EVP_KDF_CTX_free(ctx)
-+		if len(out) == 0 {
-+			// Nothing to do, so exit early.
-+			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
-+			// We can only exit after calling newHKDFCtx3 because we still need it to validate the parameters.
-+			return out, nil
-+		}
-+		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	return out, nil
-+}
-+
-+// ExpandTLS13KDF derives a key from the given hash, key, label and context. It will use
-+// "TLS13-KDF" algorithm to do so.
-+func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
-+	if !SupportsTLS13KDF() {
-+		return nil, errUnsupportedVersion()
-+	}
-+
-+	md, err := hashFuncToMD(h)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	out := make([]byte, keyLength)
-+
-+	ctx, err := newTLS13KDFExpandCtx3(md, label, context, pseudorandomKey)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_KDF_CTX_free(ctx)
-+	if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
-+		return nil, err
-+	}
-+	return out, nil
-+}
-+
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte) (io.Reader, error) {
-+	if !SupportsHKDF() {
-+		return nil, errUnsupportedVersion()
-+	}
-+
-+	md, err := hashFuncToMD(h)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	size := int(ossl.EVP_MD_get_size(md))
-+
-+	switch major() {
-+	case 1:
-+		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
-+		if err != nil {
-+			return nil, err
-+		}
-+		c := &hkdf1{ctx: ctx, hashLen: size}
-+		runtime.SetFinalizer(c, (*hkdf1).finalize)
-+		return c, nil
-+	case 3, 4:
-+		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
-+		if err != nil {
-+			return nil, err
-+		}
-+		c := &hkdf3{ctx: ctx, hashLen: size}
-+		runtime.SetFinalizer(c, (*hkdf3).finalize)
-+		return c, nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+type hkdf3 struct {
-+	ctx ossl.EVP_KDF_CTX_PTR
-+
-+	hashLen int
-+	buf     []byte
-+}
-+
-+func (c *hkdf3) finalize() {
-+	if c.ctx != nil {
-+		ossl.EVP_KDF_CTX_free(c.ctx)
-+	}
-+}
-+
-+// fetchTLS13_KDF fetches the TLS13-KDF algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchTLS13_KDF = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS13_KDF.ptr(), nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return kdf, nil
-+})
-+
-+// newTLS13KDFExpandCtx3 fetches the "TLS13-KDF" for TLS 1.3 handshakes.
-+func newTLS13KDFExpandCtx3(md ossl.EVP_MD_PTR, label, context, pseudorandomKey []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := fetchTLS13_KDF()
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if err != nil {
-+			ossl.EVP_KDF_CTX_free(ctx)
-+		}
-+	}()
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
-+	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY))
-+	bld.addOctetString(_OSSL_KDF_PARAM_PREFIX, []byte("tls13 "))
-+	bld.addOctetString(_OSSL_KDF_PARAM_LABEL, label)
-+	bld.addOctetString(_OSSL_KDF_PARAM_DATA, context)
-+	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return ctx, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
-+		return ctx, err
-+	}
-+	return ctx, nil
-+}
-+
-+// fetchHKDF3 fetches the HKDF algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchHKDF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_HKDF.ptr(), nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return kdf, nil
-+})
-+
-+// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
-+func newHKDFCtx3(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := fetchHKDF3()
-+	if err != nil {
-+		return nil, err
-+	}
-+	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer func() {
-+		if err != nil {
-+			ossl.EVP_KDF_CTX_free(ctx)
-+		}
-+	}()
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
-+	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
-+	bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
-+	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
-+	bld.addOctetString(_OSSL_KDF_PARAM_INFO, info)
-+	params, err := bld.build()
-+	if err != nil {
-+		return ctx, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
-+		return ctx, err
-+	}
-+	return ctx, nil
-+}
-+
-+func (c *hkdf3) Read(p []byte) (int, error) {
-+	defer runtime.KeepAlive(c)
-+
-+	// EVP_KDF_derive doesn't support incremental output, each call
-+	// derives the key from scratch and returns the requested bytes.
-+	// To implement io.Reader, we need to ask for len(c.buf) + len(p)
-+	// bytes and copy the last derived len(p) bytes to p.
-+	// We use c.buf to know how many bytes we've already derived and
-+	// to avoid allocating the whole output buffer on each call.
-+	prevLen := len(c.buf)
-+	needLen := len(p)
-+	remains := 255*c.hashLen - prevLen
-+	// Check whether enough data can be generated.
-+	if remains < needLen {
-+		return 0, errors.New("hkdf: entropy limit reached")
-+	}
-+	c.buf = append(c.buf, make([]byte, needLen)...)
-+	outLen := prevLen + needLen
-+	if _, err := ossl.EVP_KDF_derive(c.ctx, c.buf[:outLen], nil); err != nil {
-+		return 0, err
-+	}
-+	n := copy(p, c.buf[prevLen:outLen])
-+	return n, nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/hmac.go b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-new file mode 100644
-index 00000000000000..7f629c2f74a4db
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/hmac.go
-@@ -0,0 +1,278 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"hash"
-+	"runtime"
-+	"slices"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// NewHMAC returns a new HMAC using OpenSSL.
-+// The function h must return a hash implemented by
-+// OpenSSL (for example, h could be openssl.NewSHA256).
-+// If h is not recognized, NewHMAC returns nil.
-+func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
-+	h, _ := hashFuncHash(fh)
-+	md := hashToMD(h)
-+	if md == nil {
-+		return nil
-+	}
-+
-+	if len(key) == 0 {
-+		// This is supported in OpenSSL/Standard lib and as such
-+		// we must support it here. When using HMAC with a null key
-+		// HMAC_Init will try and reuse the key from the ctx. This is
-+		// not the behavior previously implemented, so as a workaround
-+		// we pass an "empty" key.
-+		key = make([]byte, ossl.EVP_MAX_MD_SIZE)
-+	}
-+
-+	hmac := &opensslHMAC{
-+		size:      h.Size(),
-+		blockSize: h.BlockSize(),
-+	}
-+
-+	switch major() {
-+	case 1:
-+		ctx := newHMAC1(key, md)
-+		if ctx.ctx == nil {
-+			return nil
-+		}
-+		hmac.ctx1 = ctx
-+	case 3, 4:
-+		ctx := newHMAC3(key, md)
-+		if ctx.ctx == nil {
-+			return nil
-+		}
-+		hmac.ctx3 = ctx
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
-+	return hmac
-+}
-+
-+// hmacCtx3 is used for OpenSSL 1.
-+type hmacCtx1 struct {
-+	ctx ossl.HMAC_CTX_PTR
-+}
-+
-+// hmacCtx3 is used for OpenSSL 3.
-+type hmacCtx3 struct {
-+	ctx ossl.EVP_MAC_CTX_PTR
-+	key []byte // only set for OpenSSL 3.0.0, 3.0.1, and 3.0.2.
-+}
-+
-+type opensslHMAC struct {
-+	ctx1      hmacCtx1
-+	ctx3      hmacCtx3
-+	size      int
-+	blockSize int
-+	sum       [maxHashSize]byte
-+}
-+
-+func newHMAC1(key []byte, md ossl.EVP_MD_PTR) hmacCtx1 {
-+	ctx, err := ossl.HMAC_CTX_new()
-+	if err != nil {
-+		panic(err)
-+	}
-+	if _, err := ossl.HMAC_Init_ex(ctx, key, md, nil); err != nil {
-+		panic(err)
-+	}
-+	return hmacCtx1{ctx}
-+}
-+
-+var hmacDigestsSupported sync.Map
-+var fetchHMAC3 = sync.OnceValue(func() ossl.EVP_MAC_PTR {
-+	mac, err := ossl.EVP_MAC_fetch(nil, _OSSL_MAC_NAME_HMAC.ptr(), nil)
-+	if err != nil {
-+		panic(err)
-+	}
-+	return mac
-+})
-+
-+func buildHMAC3Params(md ossl.EVP_MD_PTR) (ossl.OSSL_PARAM_PTR, error) {
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
-+	return bld.build()
-+}
-+
-+func isHMAC3DigestSupported(md ossl.EVP_MD_PTR) bool {
-+	nid := ossl.EVP_MD_get_type(md)
-+	if v, ok := hmacDigestsSupported.Load(nid); ok {
-+		return v.(bool)
-+	}
-+	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_MAC_CTX_free(ctx)
-+
-+	params, err := buildHMAC3Params(md)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	_, err = ossl.EVP_MAC_CTX_set_params(ctx, params)
-+	supported := err == nil
-+	hmacDigestsSupported.Store(nid, supported)
-+	return supported
-+}
-+
-+func newHMAC3(key []byte, md ossl.EVP_MD_PTR) hmacCtx3 {
-+	if !isHMAC3DigestSupported(md) {
-+		// The digest is not supported by the HMAC provider.
-+		// Don't panic here so the Go standard library to
-+		// fall back to the Go implementation.
-+		// See https://github.com/golang-fips/openssl/issues/153.
-+		return hmacCtx3{}
-+	}
-+	params, err := buildHMAC3Params(md)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
-+	if err != nil {
-+		panic(err)
-+	}
-+
-+	if _, err := ossl.EVP_MAC_init(ctx, key, params); err != nil {
-+		ossl.EVP_MAC_CTX_free(ctx)
-+		panic(err)
-+	}
-+	var hkey []byte
-+	//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 EVP_MAC_init does not reset without a key: https://github.com/openssl/openssl/issues/17811.
-+	if major() == 3 && minor() == 0 && patch() <= 2 {
-+		// EVP_MAC_init only resets the ctx internal state if a key is passed
-+		// when using OpenSSL 3.0.0, 3.0.1, and 3.0.2. Save a copy of the key
-+		// in the context so Reset can use it later. New OpenSSL versions
-+		// do not have this issue so it isn't necessary to save the key.
-+		hkey = make([]byte, len(key))
-+		copy(hkey, key)
-+	}
-+	return hmacCtx3{ctx, hkey}
-+}
-+
-+func (h *opensslHMAC) Reset() {
-+	switch major() {
-+	case 1:
-+		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, nil, nil); err != nil {
-+			panic(err)
-+		}
-+	case 3, 4:
-+		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, h.ctx3.key, nil); err != nil {
-+			panic(err)
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+
-+	runtime.KeepAlive(h) // Next line will keep h alive too; just making doubly sure.
-+}
-+
-+func (h *opensslHMAC) finalize() {
-+	if h.ctx1.ctx != nil {
-+		ossl.HMAC_CTX_free(h.ctx1.ctx)
-+	}
-+	if h.ctx3.ctx != nil {
-+		ossl.EVP_MAC_CTX_free(h.ctx3.ctx)
-+	}
-+}
-+
-+func (h *opensslHMAC) Write(p []byte) (int, error) {
-+	if len(p) > 0 {
-+		switch major() {
-+		case 1:
-+			ossl.HMAC_Update(h.ctx1.ctx, p)
-+		case 3, 4:
-+			ossl.EVP_MAC_update(h.ctx3.ctx, p)
-+		default:
-+			panic(errUnsupportedVersion())
-+		}
-+	}
-+	runtime.KeepAlive(h)
-+	return len(p), nil
-+}
-+
-+func (h *opensslHMAC) Size() int {
-+	return h.size
-+}
-+
-+func (h *opensslHMAC) BlockSize() int {
-+	return h.blockSize
-+}
-+
-+func (h *opensslHMAC) Sum(in []byte) []byte {
-+	// Make copy of context because Go hash.Hash mandates
-+	// that Sum has no effect on the underlying stream.
-+	// In particular it is OK to Sum, then Write more, then Sum again,
-+	// and the second Sum acts as if the first didn't happen.
-+	switch major() {
-+	case 1:
-+		ctx2, err := ossl.HMAC_CTX_new()
-+		if err != nil {
-+			panic(err)
-+		}
-+		defer ossl.HMAC_CTX_free(ctx2)
-+		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
-+			panic(err)
-+		}
-+		ossl.HMAC_Final(ctx2, h.sum[:h.size], nil)
-+	case 3, 4:
-+		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
-+		if err != nil {
-+			panic(err)
-+		}
-+		defer ossl.EVP_MAC_CTX_free(ctx2)
-+		ossl.EVP_MAC_final(ctx2, h.sum[:h.size], nil)
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	return append(in, h.sum[:h.size]...)
-+}
-+
-+func (h *opensslHMAC) Clone() (HashCloner, error) {
-+	switch major() {
-+	case 1:
-+		ctx2, err := ossl.HMAC_CTX_new()
-+		if err != nil {
-+			panic(err)
-+		}
-+		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
-+			ossl.HMAC_CTX_free(ctx2)
-+			panic(err)
-+		}
-+		cl := &opensslHMAC{
-+			ctx1:      hmacCtx1{ctx: ctx2},
-+			size:      h.size,
-+			blockSize: h.blockSize,
-+		}
-+		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
-+		return cl, nil
-+
-+	case 3, 4:
-+		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
-+		if err != nil {
-+			panic(err)
-+		}
-+
-+		cl := &opensslHMAC{
-+			ctx3:      hmacCtx3{ctx: ctx2, key: slices.Clone(h.ctx3.key)},
-+			size:      h.size,
-+			blockSize: h.blockSize,
-+		}
-+		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
-+		return cl, nil
-+
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
-new file mode 100644
-index 00000000000000..9949435fe9e0ae
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_amd64.h
-@@ -0,0 +1,99 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These save the frame pointer, so in general, functions that use
-+// these should have zero frame size to suppress the automatic frame
-+// pointer, though it's harmless to not do this.
-+
-+#ifdef GOOS_windows
-+
-+// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
-+// PUSH_REGS_HOST_TO_ABI0.
-+#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
-+
-+// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
-+// the host ABI to Go ABI0 code. It saves all registers that are
-+// callee-save in the host ABI and caller-save in Go ABI0 and prepares
-+// for entry to Go.
-+//
-+// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
-+// Clear the DF flag for the Go ABI.
-+// MXCSR matches the Go ABI, so we don't have to set that,
-+// and Go doesn't modify it, so we don't have to save it.
-+#define PUSH_REGS_HOST_TO_ABI0()	\
-+	PUSHFQ			\
-+	CLD			\
-+	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
-+	MOVQ	DI, (0*0)(SP)	\
-+	MOVQ	SI, (1*8)(SP)	\
-+	MOVQ	BP, (2*8)(SP)	\
-+	MOVQ	BX, (3*8)(SP)	\
-+	MOVQ	R12, (4*8)(SP)	\
-+	MOVQ	R13, (5*8)(SP)	\
-+	MOVQ	R14, (6*8)(SP)	\
-+	MOVQ	R15, (7*8)(SP)	\
-+	MOVUPS	X6, (8*8)(SP)	\
-+	MOVUPS	X7, (10*8)(SP)	\
-+	MOVUPS	X8, (12*8)(SP)	\
-+	MOVUPS	X9, (14*8)(SP)	\
-+	MOVUPS	X10, (16*8)(SP)	\
-+	MOVUPS	X11, (18*8)(SP)	\
-+	MOVUPS	X12, (20*8)(SP)	\
-+	MOVUPS	X13, (22*8)(SP)	\
-+	MOVUPS	X14, (24*8)(SP)	\
-+	MOVUPS	X15, (26*8)(SP)
-+
-+#define POP_REGS_HOST_TO_ABI0()	\
-+	MOVQ	(0*0)(SP), DI	\
-+	MOVQ	(1*8)(SP), SI	\
-+	MOVQ	(2*8)(SP), BP	\
-+	MOVQ	(3*8)(SP), BX	\
-+	MOVQ	(4*8)(SP), R12	\
-+	MOVQ	(5*8)(SP), R13	\
-+	MOVQ	(6*8)(SP), R14	\
-+	MOVQ	(7*8)(SP), R15	\
-+	MOVUPS	(8*8)(SP), X6	\
-+	MOVUPS	(10*8)(SP), X7	\
-+	MOVUPS	(12*8)(SP), X8	\
-+	MOVUPS	(14*8)(SP), X9	\
-+	MOVUPS	(16*8)(SP), X10	\
-+	MOVUPS	(18*8)(SP), X11	\
-+	MOVUPS	(20*8)(SP), X12	\
-+	MOVUPS	(22*8)(SP), X13	\
-+	MOVUPS	(24*8)(SP), X14	\
-+	MOVUPS	(26*8)(SP), X15	\
-+	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
-+	POPFQ
-+
-+#else
-+// SysV ABI
-+
-+#define REGS_HOST_TO_ABI0_STACK (6*8)
-+
-+// SysV MXCSR matches the Go ABI, so we don't have to set that,
-+// and Go doesn't modify it, so we don't have to save it.
-+// Both SysV and Go require DF to be cleared, so that's already clear.
-+// The SysV and Go frame pointer conventions are compatible.
-+#define PUSH_REGS_HOST_TO_ABI0()	\
-+	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
-+	MOVQ	BP, (5*8)(SP)	\
-+	LEAQ	(5*8)(SP), BP	\
-+	MOVQ	BX, (0*8)(SP)	\
-+	MOVQ	R12, (1*8)(SP)	\
-+	MOVQ	R13, (2*8)(SP)	\
-+	MOVQ	R14, (3*8)(SP)	\
-+	MOVQ	R15, (4*8)(SP)
-+
-+#define POP_REGS_HOST_TO_ABI0()	\
-+	MOVQ	(0*8)(SP), BX	\
-+	MOVQ	(1*8)(SP), R12	\
-+	MOVQ	(2*8)(SP), R13	\
-+	MOVQ	(3*8)(SP), R14	\
-+	MOVQ	(4*8)(SP), R15	\
-+	MOVQ	(5*8)(SP), BP	\
-+	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
-+
-+#endif
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
-new file mode 100644
-index 00000000000000..5d5061ec1dbf8c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_arm64.h
-@@ -0,0 +1,39 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These macros save and restore the callee-saved registers
-+// from the stack, but they don't adjust stack pointer, so
-+// the user should prepare stack space in advance.
-+// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
-+//
-+// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
-+//
-+// R29 is not saved because Go will save and restore it.
-+
-+#define SAVE_R19_TO_R28(offset) \
-+	STP	(R19, R20), ((offset)+0*8)(RSP) \
-+	STP	(R21, R22), ((offset)+2*8)(RSP) \
-+	STP	(R23, R24), ((offset)+4*8)(RSP) \
-+	STP	(R25, R26), ((offset)+6*8)(RSP) \
-+	STP	(R27, g), ((offset)+8*8)(RSP)
-+#define RESTORE_R19_TO_R28(offset) \
-+	LDP	((offset)+0*8)(RSP), (R19, R20) \
-+	LDP	((offset)+2*8)(RSP), (R21, R22) \
-+	LDP	((offset)+4*8)(RSP), (R23, R24) \
-+	LDP	((offset)+6*8)(RSP), (R25, R26) \
-+	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
-+#define SAVE_F8_TO_F15(offset) \
-+	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
-+	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
-+	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
-+	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
-+#define RESTORE_F8_TO_F15(offset) \
-+	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
-+	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
-+	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
-+	FLDPD	((offset)+6*8)(RSP), (F14, F15)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
-new file mode 100644
-index 00000000000000..b10d83732f1c6e
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_loong64.h
-@@ -0,0 +1,60 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These macros save and restore the callee-saved registers
-+// from the stack, but they don't adjust stack pointer, so
-+// the user should prepare stack space in advance.
-+// SAVE_R22_TO_R31(offset) saves R22 ~ R31 to the stack space
-+// of ((offset)+0*8)(R3) ~ ((offset)+9*8)(R3).
-+//
-+// SAVE_F24_TO_F31(offset) saves F24 ~ F31 to the stack space
-+// of ((offset)+0*8)(R3) ~ ((offset)+7*8)(R3).
-+//
-+// Note: g is R22
-+
-+#define SAVE_R22_TO_R31(offset)	\
-+	MOVV	g,   ((offset)+(0*8))(R3)	\
-+	MOVV	R23, ((offset)+(1*8))(R3)	\
-+	MOVV	R24, ((offset)+(2*8))(R3)	\
-+	MOVV	R25, ((offset)+(3*8))(R3)	\
-+	MOVV	R26, ((offset)+(4*8))(R3)	\
-+	MOVV	R27, ((offset)+(5*8))(R3)	\
-+	MOVV	R28, ((offset)+(6*8))(R3)	\
-+	MOVV	R29, ((offset)+(7*8))(R3)	\
-+	MOVV	R30, ((offset)+(8*8))(R3)	\
-+	MOVV	R31, ((offset)+(9*8))(R3)
-+
-+#define SAVE_F24_TO_F31(offset)	\
-+	MOVD	F24, ((offset)+(0*8))(R3)	\
-+	MOVD	F25, ((offset)+(1*8))(R3)	\
-+	MOVD	F26, ((offset)+(2*8))(R3)	\
-+	MOVD	F27, ((offset)+(3*8))(R3)	\
-+	MOVD	F28, ((offset)+(4*8))(R3)	\
-+	MOVD	F29, ((offset)+(5*8))(R3)	\
-+	MOVD	F30, ((offset)+(6*8))(R3)	\
-+	MOVD	F31, ((offset)+(7*8))(R3)
-+
-+#define RESTORE_R22_TO_R31(offset)	\
-+	MOVV	((offset)+(0*8))(R3),  g	\
-+	MOVV	((offset)+(1*8))(R3), R23	\
-+	MOVV	((offset)+(2*8))(R3), R24	\
-+	MOVV	((offset)+(3*8))(R3), R25	\
-+	MOVV	((offset)+(4*8))(R3), R26	\
-+	MOVV	((offset)+(5*8))(R3), R27	\
-+	MOVV	((offset)+(6*8))(R3), R28	\
-+	MOVV	((offset)+(7*8))(R3), R29	\
-+	MOVV	((offset)+(8*8))(R3), R30	\
-+	MOVV	((offset)+(9*8))(R3), R31
-+
-+#define RESTORE_F24_TO_F31(offset)	\
-+	MOVD	((offset)+(0*8))(R3), F24	\
-+	MOVD	((offset)+(1*8))(R3), F25	\
-+	MOVD	((offset)+(2*8))(R3), F26	\
-+	MOVD	((offset)+(3*8))(R3), F27	\
-+	MOVD	((offset)+(4*8))(R3), F28	\
-+	MOVD	((offset)+(5*8))(R3), F29	\
-+	MOVD	((offset)+(6*8))(R3), F30	\
-+	MOVD	((offset)+(7*8))(R3), F31
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
-new file mode 100644
-index 00000000000000..245a5266f6e9fa
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_ppc64x.h
-@@ -0,0 +1,195 @@
-+// Copyright 2023 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI
-+//
-+// On PPC64/ELFv2 targets, the following registers are callee
-+// saved when called from C. They must be preserved before
-+// calling into Go which does not preserve any of them.
-+//
-+//	R14-R31
-+//	CR2-4
-+//	VR20-31
-+//	F14-F31
-+//
-+// xcoff(aix) and ELFv1 are similar, but may only require a
-+// subset of these.
-+//
-+// These macros assume a 16 byte aligned stack pointer. This
-+// is required by ELFv1, ELFv2, and AIX PPC64.
-+
-+#define SAVE_GPR_SIZE (18*8)
-+#define SAVE_GPR(offset)               \
-+	MOVD	R14, (offset+8*0)(R1)  \
-+	MOVD	R15, (offset+8*1)(R1)  \
-+	MOVD	R16, (offset+8*2)(R1)  \
-+	MOVD	R17, (offset+8*3)(R1)  \
-+	MOVD	R18, (offset+8*4)(R1)  \
-+	MOVD	R19, (offset+8*5)(R1)  \
-+	MOVD	R20, (offset+8*6)(R1)  \
-+	MOVD	R21, (offset+8*7)(R1)  \
-+	MOVD	R22, (offset+8*8)(R1)  \
-+	MOVD	R23, (offset+8*9)(R1)  \
-+	MOVD	R24, (offset+8*10)(R1) \
-+	MOVD	R25, (offset+8*11)(R1) \
-+	MOVD	R26, (offset+8*12)(R1) \
-+	MOVD	R27, (offset+8*13)(R1) \
-+	MOVD	R28, (offset+8*14)(R1) \
-+	MOVD	R29, (offset+8*15)(R1) \
-+	MOVD	g,   (offset+8*16)(R1) \
-+	MOVD	R31, (offset+8*17)(R1)
-+
-+#define RESTORE_GPR(offset)            \
-+	MOVD	(offset+8*0)(R1), R14  \
-+	MOVD	(offset+8*1)(R1), R15  \
-+	MOVD	(offset+8*2)(R1), R16  \
-+	MOVD	(offset+8*3)(R1), R17  \
-+	MOVD	(offset+8*4)(R1), R18  \
-+	MOVD	(offset+8*5)(R1), R19  \
-+	MOVD	(offset+8*6)(R1), R20  \
-+	MOVD	(offset+8*7)(R1), R21  \
-+	MOVD	(offset+8*8)(R1), R22  \
-+	MOVD	(offset+8*9)(R1), R23  \
-+	MOVD	(offset+8*10)(R1), R24 \
-+	MOVD	(offset+8*11)(R1), R25 \
-+	MOVD	(offset+8*12)(R1), R26 \
-+	MOVD	(offset+8*13)(R1), R27 \
-+	MOVD	(offset+8*14)(R1), R28 \
-+	MOVD	(offset+8*15)(R1), R29 \
-+	MOVD	(offset+8*16)(R1), g   \
-+	MOVD	(offset+8*17)(R1), R31
-+
-+#define SAVE_FPR_SIZE (18*8)
-+#define SAVE_FPR(offset)               \
-+	FMOVD	F14, (offset+8*0)(R1)  \
-+	FMOVD	F15, (offset+8*1)(R1)  \
-+	FMOVD	F16, (offset+8*2)(R1)  \
-+	FMOVD	F17, (offset+8*3)(R1)  \
-+	FMOVD	F18, (offset+8*4)(R1)  \
-+	FMOVD	F19, (offset+8*5)(R1)  \
-+	FMOVD	F20, (offset+8*6)(R1)  \
-+	FMOVD	F21, (offset+8*7)(R1)  \
-+	FMOVD	F22, (offset+8*8)(R1)  \
-+	FMOVD	F23, (offset+8*9)(R1)  \
-+	FMOVD	F24, (offset+8*10)(R1) \
-+	FMOVD	F25, (offset+8*11)(R1) \
-+	FMOVD	F26, (offset+8*12)(R1) \
-+	FMOVD	F27, (offset+8*13)(R1) \
-+	FMOVD	F28, (offset+8*14)(R1) \
-+	FMOVD	F29, (offset+8*15)(R1) \
-+	FMOVD	F30, (offset+8*16)(R1) \
-+	FMOVD	F31, (offset+8*17)(R1)
-+
-+#define RESTORE_FPR(offset)            \
-+	FMOVD	(offset+8*0)(R1), F14  \
-+	FMOVD	(offset+8*1)(R1), F15  \
-+	FMOVD	(offset+8*2)(R1), F16  \
-+	FMOVD	(offset+8*3)(R1), F17  \
-+	FMOVD	(offset+8*4)(R1), F18  \
-+	FMOVD	(offset+8*5)(R1), F19  \
-+	FMOVD	(offset+8*6)(R1), F20  \
-+	FMOVD	(offset+8*7)(R1), F21  \
-+	FMOVD	(offset+8*8)(R1), F22  \
-+	FMOVD	(offset+8*9)(R1), F23  \
-+	FMOVD	(offset+8*10)(R1), F24 \
-+	FMOVD	(offset+8*11)(R1), F25 \
-+	FMOVD	(offset+8*12)(R1), F26 \
-+	FMOVD	(offset+8*13)(R1), F27 \
-+	FMOVD	(offset+8*14)(R1), F28 \
-+	FMOVD	(offset+8*15)(R1), F29 \
-+	FMOVD	(offset+8*16)(R1), F30 \
-+	FMOVD	(offset+8*17)(R1), F31
-+
-+// Save and restore VR20-31 (aka VSR56-63). These
-+// macros must point to a 16B aligned offset.
-+#define SAVE_VR_SIZE (12*16)
-+#define SAVE_VR(offset, rtmp)         \
-+	MOVD	$(offset+16*0), rtmp  \
-+	STVX	V20, (rtmp)(R1)       \
-+	MOVD	$(offset+16*1), rtmp  \
-+	STVX	V21, (rtmp)(R1)       \
-+	MOVD	$(offset+16*2), rtmp  \
-+	STVX	V22, (rtmp)(R1)       \
-+	MOVD	$(offset+16*3), rtmp  \
-+	STVX	V23, (rtmp)(R1)       \
-+	MOVD	$(offset+16*4), rtmp  \
-+	STVX	V24, (rtmp)(R1)       \
-+	MOVD	$(offset+16*5), rtmp  \
-+	STVX	V25, (rtmp)(R1)       \
-+	MOVD	$(offset+16*6), rtmp  \
-+	STVX	V26, (rtmp)(R1)       \
-+	MOVD	$(offset+16*7), rtmp  \
-+	STVX	V27, (rtmp)(R1)       \
-+	MOVD	$(offset+16*8), rtmp  \
-+	STVX	V28, (rtmp)(R1)       \
-+	MOVD	$(offset+16*9), rtmp  \
-+	STVX	V29, (rtmp)(R1)       \
-+	MOVD	$(offset+16*10), rtmp \
-+	STVX	V30, (rtmp)(R1)       \
-+	MOVD	$(offset+16*11), rtmp \
-+	STVX	V31, (rtmp)(R1)
-+
-+#define RESTORE_VR(offset, rtmp)      \
-+	MOVD	$(offset+16*0), rtmp  \
-+	LVX	(rtmp)(R1), V20       \
-+	MOVD	$(offset+16*1), rtmp  \
-+	LVX	(rtmp)(R1), V21       \
-+	MOVD	$(offset+16*2), rtmp  \
-+	LVX	(rtmp)(R1), V22       \
-+	MOVD	$(offset+16*3), rtmp  \
-+	LVX	(rtmp)(R1), V23       \
-+	MOVD	$(offset+16*4), rtmp  \
-+	LVX	(rtmp)(R1), V24       \
-+	MOVD	$(offset+16*5), rtmp  \
-+	LVX	(rtmp)(R1), V25       \
-+	MOVD	$(offset+16*6), rtmp  \
-+	LVX	(rtmp)(R1), V26       \
-+	MOVD	$(offset+16*7), rtmp  \
-+	LVX	(rtmp)(R1), V27       \
-+	MOVD	$(offset+16*8), rtmp  \
-+	LVX	(rtmp)(R1), V28       \
-+	MOVD	$(offset+16*9), rtmp  \
-+	LVX	(rtmp)(R1), V29       \
-+	MOVD	$(offset+16*10), rtmp \
-+	LVX	(rtmp)(R1), V30       \
-+	MOVD	$(offset+16*11), rtmp \
-+	LVX	(rtmp)(R1), V31
-+
-+// LR and CR are saved in the caller's frame. The callee must
-+// make space for all other callee-save registers.
-+#define SAVE_ALL_REG_SIZE (SAVE_GPR_SIZE+SAVE_FPR_SIZE+SAVE_VR_SIZE)
-+
-+// Stack a frame and save all callee-save registers following the
-+// host OS's ABI. Fortunately, this is identical for AIX, ELFv1, and
-+// ELFv2. All host ABIs require the stack pointer to maintain 16 byte
-+// alignment, and save the callee-save registers in the same places.
-+//
-+// To restate, R1 is assumed to be aligned when this macro is used.
-+// This assumes the caller's frame is compliant with the host ABI.
-+// CR and LR are saved into the caller's frame per the host ABI.
-+// R0 is initialized to $0 as expected by Go.
-+#define STACK_AND_SAVE_HOST_TO_GO_ABI(extra)                       \
-+	MOVD	LR, R0                                             \
-+	MOVD	R0, 16(R1)                                         \
-+	MOVW	CR, R0                                             \
-+	MOVD	R0, 8(R1)                                          \
-+	MOVDU	R1, -(extra)-FIXED_FRAME-SAVE_ALL_REG_SIZE(R1)     \
-+	SAVE_GPR(extra+FIXED_FRAME)                                \
-+	SAVE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
-+	SAVE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
-+	MOVD	$0, R0
-+
-+// This unstacks the frame, restoring all callee-save registers
-+// as saved by STACK_AND_SAVE_HOST_TO_GO_ABI.
-+//
-+// R0 is not guaranteed to contain $0 after this macro.
-+#define UNSTACK_AND_RESTORE_GO_TO_HOST_ABI(extra)                     \
-+	RESTORE_GPR(extra+FIXED_FRAME)                                \
-+	RESTORE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
-+	RESTORE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
-+	ADD 	$(extra+FIXED_FRAME+SAVE_ALL_REG_SIZE), R1            \
-+	MOVD	16(R1), R0                                            \
-+	MOVD	R0, LR                                                \
-+	MOVD	8(R1), R0                                             \
-+	MOVW	R0, CR
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
-new file mode 100644
-index 00000000000000..b9322e0c53e2ac
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/abi_riscv64.h
-@@ -0,0 +1,72 @@
-+// Copyright 2026 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These macros save and restore the callee-saved registers
-+// from the stack, but they don't adjust stack pointer, so
-+// the user should prepare stack space in advance.
-+// SAVE_GPR(offset) saves X8, X9, X18-X27 to the stack space
-+// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
-+//
-+// SAVE_FPR(offset) saves F8, F9, F18-F27 to the stack space
-+// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
-+//
-+// Note: g is X27
-+
-+#define SAVE_GPR(offset) \
-+	MOV X8, ((offset)+0*8)(X2)   \
-+	MOV X9, ((offset)+1*8)(X2)   \
-+	MOV X18, ((offset)+2*8)(X2)  \
-+	MOV X19, ((offset)+3*8)(X2)  \
-+	MOV X20, ((offset)+4*8)(X2)  \
-+	MOV X21, ((offset)+5*8)(X2)  \
-+	MOV X22, ((offset)+6*8)(X2)  \
-+	MOV X23, ((offset)+7*8)(X2)  \
-+	MOV X24, ((offset)+8*8)(X2)  \
-+	MOV X25, ((offset)+9*8)(X2)  \
-+	MOV X26, ((offset)+10*8)(X2) \
-+	MOV g, ((offset)+11*8)(X2)
-+
-+#define RESTORE_GPR(offset) \
-+	MOV ((offset)+0*8)(X2), X8   \
-+	MOV ((offset)+1*8)(X2), X9   \
-+	MOV ((offset)+2*8)(X2), X18  \
-+	MOV ((offset)+3*8)(X2), X19  \
-+	MOV ((offset)+4*8)(X2), X20  \
-+	MOV ((offset)+5*8)(X2), X21  \
-+	MOV ((offset)+6*8)(X2), X22  \
-+	MOV ((offset)+7*8)(X2), X23  \
-+	MOV ((offset)+8*8)(X2), X24  \
-+	MOV ((offset)+9*8)(X2), X25  \
-+	MOV ((offset)+10*8)(X2), X26 \
-+	MOV ((offset)+11*8)(X2), g
-+
-+#define SAVE_FPR(offset) \
-+	MOVD F8, ((offset)+0*8)(X2)   \
-+	MOVD F9, ((offset)+1*8)(X2)   \
-+	MOVD F18, ((offset)+2*8)(X2)  \
-+	MOVD F19, ((offset)+3*8)(X2)  \
-+	MOVD F20, ((offset)+4*8)(X2)  \
-+	MOVD F21, ((offset)+5*8)(X2)  \
-+	MOVD F22, ((offset)+6*8)(X2)  \
-+	MOVD F23, ((offset)+7*8)(X2)  \
-+	MOVD F24, ((offset)+8*8)(X2)  \
-+	MOVD F25, ((offset)+9*8)(X2)  \
-+	MOVD F26, ((offset)+10*8)(X2) \
-+	MOVD F27, ((offset)+11*8)(X2)
-+
-+#define RESTORE_FPR(offset) \
-+	MOVD ((offset)+0*8)(X2), F8   \
-+	MOVD ((offset)+1*8)(X2), F9   \
-+	MOVD ((offset)+2*8)(X2), F18  \
-+	MOVD ((offset)+3*8)(X2), F19  \
-+	MOVD ((offset)+4*8)(X2), F20  \
-+	MOVD ((offset)+5*8)(X2), F21  \
-+	MOVD ((offset)+6*8)(X2), F22  \
-+	MOVD ((offset)+7*8)(X2), F23  \
-+	MOVD ((offset)+8*8)(X2), F24  \
-+	MOVD ((offset)+9*8)(X2), F25  \
-+	MOVD ((offset)+10*8)(X2), F26 \
-+	MOVD ((offset)+11*8)(X2), F27
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
-new file mode 100644
-index 00000000000000..7475ec8a0b21fc
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_386.s
-@@ -0,0 +1,29 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT, $28-16
-+	MOVL BP, 24(SP)
-+	MOVL BX, 20(SP)
-+	MOVL SI, 16(SP)
-+	MOVL DI, 12(SP)
-+
-+	MOVL ctxt+12(FP), AX
-+	MOVL AX, 8(SP)
-+	MOVL a+4(FP), AX
-+	MOVL AX, 4(SP)
-+	MOVL fn+0(FP), AX
-+	MOVL AX, 0(SP)
-+	CALL runtime·cgocallback(SB)
-+
-+	MOVL 12(SP), DI
-+	MOVL 16(SP), SI
-+	MOVL 20(SP), BX
-+	MOVL 24(SP), BP
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
-new file mode 100644
-index 00000000000000..2b7eb57f8ae783
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_amd64.s
-@@ -0,0 +1,39 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_amd64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+// This signature is known to SWIG, so we can't change it.
-+TEXT crosscall2(SB), NOSPLIT, $0-0
-+	PUSH_REGS_HOST_TO_ABI0()
-+
-+	// Make room for arguments to cgocallback.
-+	ADJSP $0x18
-+
-+#ifndef GOOS_windows
-+	MOVQ DI, 0x0(SP) // fn
-+	MOVQ SI, 0x8(SP) // arg
-+
-+	// Skip n in DX.
-+	MOVQ CX, 0x10(SP) // ctxt
-+
-+#else
-+	MOVQ CX, 0x0(SP) // fn
-+	MOVQ DX, 0x8(SP) // arg
-+
-+	// Skip n in R8.
-+	MOVQ R9, 0x10(SP) // ctxt
-+
-+#endif
-+
-+	CALL runtime·cgocallback(SB)
-+
-+	ADJSP $-0x18
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
-new file mode 100644
-index 00000000000000..68034e6035aa44
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm.s
-@@ -0,0 +1,52 @@
-+// Copyright 2012 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+	SUB $(8*9), R13 // Reserve space for the floating point registers.
-+
-+	// The C arguments arrive in R0, R1, R2, and R3. We want to
-+	// pass R0, R1, and R3 to Go, so we push those on the stack.
-+	// Also, save C callee-save registers R4-R12.
-+	MOVM.WP [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12], (R13)
-+
-+	// Finally, save the link register R14. This also puts the
-+	// arguments we pushed for cgocallback where they need to be,
-+	// starting at 4(R13).
-+	MOVW.W R14, -4(R13)
-+
-+	// Save VFP callee-saved registers D8-D15 (same as S16-S31).
-+	// Note: We always save these since we target hard-float ABI.
-+	MOVD F8, (13*4+8*1)(R13)
-+	MOVD F9, (13*4+8*2)(R13)
-+	MOVD F10, (13*4+8*3)(R13)
-+	MOVD F11, (13*4+8*4)(R13)
-+	MOVD F12, (13*4+8*5)(R13)
-+	MOVD F13, (13*4+8*6)(R13)
-+	MOVD F14, (13*4+8*7)(R13)
-+	MOVD F15, (13*4+8*8)(R13)
-+
-+	BL runtime·load_g(SB)
-+
-+	// We set up the arguments to cgocallback when saving registers above.
-+	BL runtime·cgocallback(SB)
-+
-+	MOVD (13*4+8*1)(R13), F8
-+	MOVD (13*4+8*2)(R13), F9
-+	MOVD (13*4+8*3)(R13), F10
-+	MOVD (13*4+8*4)(R13), F11
-+	MOVD (13*4+8*5)(R13), F12
-+	MOVD (13*4+8*6)(R13), F13
-+	MOVD (13*4+8*7)(R13), F14
-+	MOVD (13*4+8*8)(R13), F15
-+
-+	MOVW.P   4(R13), R14
-+	MOVM.IAW (R13), [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12]
-+	ADD      $(8*9), R13
-+	MOVW     R14, R15
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
-new file mode 100644
-index 00000000000000..50e5261d922c56
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_arm64.s
-@@ -0,0 +1,36 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_arm64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+/*
-+ * We still need to save all callee save register as before, and then
-+ *  push 3 args for fn (R0, R1, R3), skipping R2.
-+ * Also note that at procedure entry in gc world, 8(RSP) will be the
-+ *  first arg.
-+ */
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
-+
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
-+
-+	// Initialize Go ABI environment
-+	BL runtime·load_g(SB)
-+	BL runtime·cgocallback(SB)
-+
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
-+
-+	ADD $(8*24), RSP
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
-new file mode 100644
-index 00000000000000..e81df86a56e4ad
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_loong64.s
-@@ -0,0 +1,40 @@
-+// Copyright 2022 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_loong64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+/*
-+ * We still need to save all callee save register as before, and then
-+ * push 3 args for fn (R4, R5, R7), skipping R6.
-+ * Also note that at procedure entry in gc world, 8(R29) will be the
-+ *  first arg.
-+ */
-+
-+	ADDV $(-23*8), R3
-+	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
-+	MOVV R5, (2*8)(R3) // a unsafe.Pointer
-+	MOVV R7, (3*8)(R3) // ctxt uintptr
-+
-+	SAVE_R22_TO_R31((4*8))
-+	SAVE_F24_TO_F31((14*8))
-+	MOVV R1, (22*8)(R3)
-+
-+	// Initialize Go ABI environment
-+	JAL runtime·load_g(SB)
-+
-+	JAL runtime·cgocallback(SB)
-+
-+	RESTORE_R22_TO_R31((4*8))
-+	RESTORE_F24_TO_F31((14*8))
-+	MOVV (22*8)(R3), R1
-+
-+	ADDV $(23*8), R3
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
-new file mode 100644
-index 00000000000000..6d1938cd8d8bcd
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_ppc64le.s
-@@ -0,0 +1,82 @@
-+// Copyright 2014 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_ppc64x.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+//
-+// This is a simplified version that only saves GPR and FPR registers,
-+// not vector registers. This keeps the stack frame smaller to avoid
-+// exceeding the nosplit stack limit.
-+//
-+// On PPC64LE ELFv2, callee-save registers are:
-+//   R14-R31 (18 GPRs = 144 bytes)
-+//   F14-F31 (18 FPRs = 144 bytes)
-+//   CR2-CR4 (saved in CR field)
-+//
-+// Stack layout (must be 16-byte aligned):
-+//   32 (FIXED_FRAME) + 24 (args) + 144 (GPR) + 144 (FPR) = 344
-+//   Rounded to 352 for 16-byte alignment.
-+
-+#define FIXED_FRAME 32
-+#define SAVE_SIZE    352
-+#define GPR_OFFSET   (FIXED_FRAME+24)
-+#define FPR_OFFSET   (GPR_OFFSET+SAVE_GPR_SIZE)
-+
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+	// Save LR and CR in caller's frame per ELFv2 ABI
-+	MOVD LR, R0
-+	MOVD R0, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
-+
-+	// Allocate our stack frame
-+	MOVDU R1, -SAVE_SIZE(R1)
-+
-+	// Save TOC (R2) in case needed
-+	MOVD R2, 24(R1)
-+
-+	// Save callee-save GPRs
-+	SAVE_GPR(GPR_OFFSET)
-+
-+	// Save callee-save FPRs
-+	SAVE_FPR(FPR_OFFSET)
-+
-+	// Initialize R0 to 0 as expected by Go
-+	MOVD $0, R0
-+
-+	// Load the current g.
-+	BL runtime·load_g(SB)
-+
-+	// Set up arguments for cgocallback
-+	MOVD R3, FIXED_FRAME+0(R1) // fn unsafe.Pointer
-+	MOVD R4, FIXED_FRAME+8(R1) // a unsafe.Pointer
-+
-+	// Skip R5 = n uint32
-+	MOVD R6, FIXED_FRAME+16(R1)  // ctxt uintptr
-+	BL   runtime·cgocallback(SB)
-+
-+	// Restore callee-save FPRs
-+	RESTORE_FPR(FPR_OFFSET)
-+
-+	// Restore callee-save GPRs
-+	RESTORE_GPR(GPR_OFFSET)
-+
-+	// Restore TOC
-+	MOVD 24(R1), R2
-+
-+	// Deallocate stack frame
-+	ADD $SAVE_SIZE, R1
-+
-+	// Restore LR and CR from caller's frame
-+	MOVD 16(R1), R0
-+	MOVD R0, LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
-new file mode 100644
-index 00000000000000..d34699e5a84d2a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_riscv64.s
-@@ -0,0 +1,37 @@
-+// Copyright 2020 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_riscv64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+/*
-+ * Push arguments for fn (X10, X11, X13), along with all callee-save
-+ * registers. Note that at procedure entry the first argument is at
-+ * 8(X2).
-+ */
-+	ADD $(-8*29), X2
-+	MOV X10, (8*1)(X2) // fn unsafe.Pointer
-+	MOV X11, (8*2)(X2) // a unsafe.Pointer
-+	MOV X13, (8*3)(X2) // ctxt uintptr
-+
-+	SAVE_GPR((8*4))
-+	MOV X1, (8*16)(X2)
-+	SAVE_FPR((8*17))
-+
-+	// Initialize Go ABI environment
-+	CALL runtime·load_g(SB)
-+	CALL runtime·cgocallback(SB)
-+
-+	RESTORE_GPR((8*4))
-+	MOV (8*16)(X2), X1
-+	RESTORE_FPR((8*17))
-+
-+	ADD $(8*29), X2
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
-new file mode 100644
-index 00000000000000..b64466501dee38
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/asm_s390x.s
-@@ -0,0 +1,55 @@
-+// Copyright 2016 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+	// Start with standard C stack frame layout and linkage.
-+
-+	// Save R6-R15 in the register save area of the calling function.
-+	STMG R6, R15, 48(R15)
-+
-+	// Allocate 96 bytes on the stack.
-+	MOVD $-96(R15), R15
-+
-+	// Save F8-F15 in our stack frame.
-+	FMOVD F8, 32(R15)
-+	FMOVD F9, 40(R15)
-+	FMOVD F10, 48(R15)
-+	FMOVD F11, 56(R15)
-+	FMOVD F12, 64(R15)
-+	FMOVD F13, 72(R15)
-+	FMOVD F14, 80(R15)
-+	FMOVD F15, 88(R15)
-+
-+	// Initialize Go ABI environment.
-+	BL runtime·load_g(SB)
-+
-+	MOVD R2, 8(R15)  // fn unsafe.Pointer
-+	MOVD R3, 16(R15) // a unsafe.Pointer
-+
-+	// Skip R4 = n uint32
-+	MOVD R5, 24(R15)             // ctxt uintptr
-+	BL   runtime·cgocallback(SB)
-+
-+	FMOVD 32(R15), F8
-+	FMOVD 40(R15), F9
-+	FMOVD 48(R15), F10
-+	FMOVD 56(R15), F11
-+	FMOVD 64(R15), F12
-+	FMOVD 72(R15), F13
-+	FMOVD 80(R15), F14
-+	FMOVD 88(R15), F15
-+
-+	// De-allocate stack frame.
-+	MOVD $96(R15), R15
-+
-+	// Restore R6-R15.
-+	LMG 48(R15), R6, R15
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
-new file mode 100644
-index 00000000000000..f29e690cc15b3a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/callbacks.go
-@@ -0,0 +1,93 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import (
-+	_ "unsafe"
-+)
-+
-+// TODO: decide if we need _runtime_cgo_panic_internal
-+
-+//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
-+//go:linkname _cgo_init _cgo_init
-+var x_cgo_init_trampoline byte
-+var _cgo_init = &x_cgo_init_trampoline
-+
-+// Creates a new system thread without updating any Go state.
-+//
-+// This method is invoked during shared library loading to create a new OS
-+// thread to perform the runtime initialization. This method is similar to
-+// _cgo_sys_thread_start except that it doesn't update any Go state.
-+
-+//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
-+//go:linkname _cgo_thread_start _cgo_thread_start
-+var x_cgo_thread_start_trampoline byte
-+var _cgo_thread_start = &x_cgo_thread_start_trampoline
-+
-+// Notifies that the runtime has been initialized.
-+//
-+// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
-+// to ensure that the runtime has been initialized before the CGO call is
-+// executed. This is necessary for shared libraries where we kickoff runtime
-+// initialization in a separate thread and return without waiting for this
-+// thread to complete the init.
-+
-+//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
-+//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
-+var x_cgo_notify_runtime_init_done_trampoline byte
-+var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
-+
-+// Indicates whether a dummy thread key has been created or not.
-+//
-+// When calling go exported function from C, we register a destructor
-+// callback, for a dummy thread key, by using pthread_key_create.
-+
-+//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
-+var x_cgo_pthread_key_created uintptr
-+var _cgo_pthread_key_created = &x_cgo_pthread_key_created
-+
-+// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
-+// It's for the runtime package to call at init time.
-+func set_crosscall2() {
-+	// nothing needs to be done here for fakecgo
-+	// because it's possible to just call cgocallback directly
-+}
-+
-+//go:linkname _set_crosscall2 runtime.set_crosscall2
-+var _set_crosscall2 = set_crosscall2
-+
-+// Store the g into the thread-specific value.
-+// So that pthread_key_destructor will dropm when the thread is exiting.
-+
-+//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
-+//go:linkname _cgo_bindm _cgo_bindm
-+var x_cgo_bindm_trampoline byte
-+var _cgo_bindm = &x_cgo_bindm_trampoline
-+
-+// TODO: decide if we need x_cgo_set_context_function
-+// TODO: decide if we need _cgo_yield
-+
-+var (
-+	// In Go 1.20 the race detector was rewritten to pure Go
-+	// on darwin. This means that when CGO_ENABLED=0 is set
-+	// fakecgo is built with race detector code. This is not
-+	// good since this code is pretending to be C. The go:norace
-+	// pragma is not enough, since it only applies to the native
-+	// ABIInternal function. The ABIO wrapper (which is necessary,
-+	// since all references to text symbols from assembly will use it)
-+	// does not inherit the go:norace pragma, so it will still be
-+	// instrumented by the race detector.
-+	//
-+	// To circumvent this issue, using closure calls in the
-+	// assembly, which forces the compiler to use the ABIInternal
-+	// native implementation (which has go:norace) instead.
-+	threadentry_call        = threadentry
-+	x_cgo_init_call         = x_cgo_init
-+	x_cgo_setenv_call       = x_cgo_setenv
-+	x_cgo_unsetenv_call     = x_cgo_unsetenv
-+	x_cgo_thread_start_call = x_cgo_thread_start
-+)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
-new file mode 100644
-index 00000000000000..58b95e1f4157f2
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.go
-@@ -0,0 +1,14 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import _ "unsafe"
-+
-+// setg_trampoline calls setg with the G provided
-+func setg_trampoline(setg uintptr, G uintptr)
-+
-+// call5 takes fn the C function and 5 arguments and calls the function with those arguments
-+func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
-new file mode 100644
-index 00000000000000..9b0650d53777bd
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/fakecgo.lock
-@@ -0,0 +1,3 @@
-+{
-+  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
-new file mode 100644
-index 00000000000000..bb73a709e69188
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/freebsd.go
-@@ -0,0 +1,27 @@
-+// Copyright 2010 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build freebsd && !cgo
-+
-+package fakecgo
-+
-+import _ "unsafe" // for go:linkname
-+
-+// Supply environ and __progname, because we don't
-+// link against the standard FreeBSD crt0.o and the
-+// libc dynamic library needs them.
-+
-+// Note: when building with cross-compiling or CGO_ENABLED=0, add
-+// the following argument to `go` so that these symbols are defined by
-+// making fakecgo the Cgo.
-+//   -gcflags="github.com/ebitengine/purego/internal/fakecgo=-std"
-+
-+//go:linkname _environ environ
-+//go:linkname _progname __progname
-+
-+//go:cgo_export_dynamic environ
-+//go:cgo_export_dynamic __progname
-+
-+var _environ uintptr
-+var _progname uintptr
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
-new file mode 100644
-index 00000000000000..ca8d5f843f8421
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/generate.go
-@@ -0,0 +1,3 @@
-+package fakecgo
-+
-+//go:generate go run update_tool.go
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
-new file mode 100644
-index 00000000000000..d0868f0f790351
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_darwin.go
-@@ -0,0 +1,88 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:nosplit
-+//go:norace
-+func _cgo_sys_thread_start(ts *ThreadStart) {
-+	var attr pthread_attr_t
-+	var ign, oset sigset_t
-+	var p pthread_t
-+	var size size_t
-+	var err int
-+
-+	sigfillset(&ign)
-+	pthread_sigmask(SIG_SETMASK, &ign, &oset)
-+
-+	size = pthread_get_stacksize_np(pthread_self())
-+	pthread_attr_init(&attr)
-+	pthread_attr_setstacksize(&attr, size)
-+	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
-+	ts.g.stackhi = uintptr(size)
-+
-+	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
-+
-+	pthread_sigmask(SIG_SETMASK, &oset, nil)
-+
-+	if err != 0 {
-+		print("fakecgo: pthread_create failed: ")
-+		println(err)
-+		abort()
-+	}
-+}
-+
-+// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
-+//
-+//go:linkname x_threadentry_trampoline threadentry_trampoline
-+var x_threadentry_trampoline byte
-+var threadentry_trampolineABI0 = &x_threadentry_trampoline
-+
-+//go:nosplit
-+//go:norace
-+func threadentry(v unsafe.Pointer) unsafe.Pointer {
-+	ts := *(*ThreadStart)(v)
-+	free(v)
-+
-+	// TODO: support ios
-+	//#if TARGET_OS_IPHONE
-+	//	darwin_arm_init_thread_exception_port();
-+	//#endif
-+	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
-+
-+	// faking funcs in go is a bit a... involved - but the following works :)
-+	fn := uintptr(unsafe.Pointer(&ts.fn))
-+	(*(*func())(unsafe.Pointer(&fn)))()
-+
-+	return nil
-+}
-+
-+// here we will store a pointer to the provided setg func
-+var setg_func uintptr
-+
-+// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
-+// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
-+// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
-+// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
-+//
-+//go:nosplit
-+//go:norace
-+func x_cgo_init(g *G, setg uintptr) {
-+	var size size_t
-+
-+	setg_func = setg
-+	size = pthread_get_stacksize_np(pthread_self())
-+	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
-+
-+	//TODO: support ios
-+	//#if TARGET_OS_IPHONE
-+	//	darwin_arm_init_mach_exception_handler();
-+	//	darwin_arm_init_thread_exception_port();
-+	//	init_working_dir();
-+	//#endif
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
-new file mode 100644
-index 00000000000000..55ff71e2672086
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_freebsd.go
-@@ -0,0 +1,79 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:nosplit
-+func _cgo_sys_thread_start(ts *ThreadStart) {
-+	var attr pthread_attr_t
-+	var ign, oset sigset_t
-+	var p pthread_t
-+	var size size_t
-+	var err int
-+
-+	// fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
-+	sigfillset(&ign)
-+	pthread_sigmask(SIG_SETMASK, &ign, &oset)
-+
-+	pthread_attr_init(&attr)
-+	pthread_attr_getstacksize(&attr, &size)
-+	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
-+	ts.g.stackhi = uintptr(size)
-+
-+	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
-+
-+	pthread_sigmask(SIG_SETMASK, &oset, nil)
-+
-+	if err != 0 {
-+		print("fakecgo: pthread_create failed: ")
-+		println(err)
-+		abort()
-+	}
-+}
-+
-+// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
-+//
-+//go:linkname x_threadentry_trampoline threadentry_trampoline
-+var x_threadentry_trampoline byte
-+var threadentry_trampolineABI0 = &x_threadentry_trampoline
-+
-+//go:nosplit
-+func threadentry(v unsafe.Pointer) unsafe.Pointer {
-+	ts := *(*ThreadStart)(v)
-+	free(v)
-+
-+	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
-+
-+	// faking funcs in go is a bit a... involved - but the following works :)
-+	fn := uintptr(unsafe.Pointer(&ts.fn))
-+	(*(*func())(unsafe.Pointer(&fn)))()
-+
-+	return nil
-+}
-+
-+// here we will store a pointer to the provided setg func
-+var setg_func uintptr
-+
-+// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
-+// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
-+// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
-+// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
-+//
-+//go:nosplit
-+func x_cgo_init(g *G, setg uintptr) {
-+	var size size_t
-+	var attr pthread_attr_t
-+
-+	setg_func = setg
-+	pthread_attr_init(&attr)
-+	pthread_attr_getstacksize(&attr, &size)
-+	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
-+	// but this should be OK since we are taking the address of the first variable in this function.
-+	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
-+	pthread_attr_destroy(&attr)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
-new file mode 100644
-index 00000000000000..e5a66f39d4f3f5
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_libinit.go
-@@ -0,0 +1,72 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
-+
-+var (
-+	pthread_g pthread_key_t
-+
-+	runtime_init_cond = PTHREAD_COND_INITIALIZER
-+	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
-+	runtime_init_done int
-+)
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_notify_runtime_init_done() {
-+	pthread_mutex_lock(&runtime_init_mu)
-+	runtime_init_done = 1
-+	pthread_cond_broadcast(&runtime_init_cond)
-+	pthread_mutex_unlock(&runtime_init_mu)
-+}
-+
-+// Store the g into a thread-specific value associated with the pthread key pthread_g.
-+// And pthread_key_destructor will dropm when the thread is exiting.
-+//
-+//go:norace
-+func x_cgo_bindm(g unsafe.Pointer) {
-+	// We assume this will always succeed, otherwise, there might be extra M leaking,
-+	// when a C thread exits after a cgo call.
-+	// We only invoke this function once per thread in runtime.needAndBindM,
-+	// and the next calls just reuse the bound m.
-+	pthread_setspecific(pthread_g, g)
-+}
-+
-+// _cgo_try_pthread_create retries pthread_create if it fails with
-+// EAGAIN.
-+//
-+//go:nosplit
-+//go:norace
-+func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
-+	var ts syscall.Timespec
-+	// tries needs to be the same type as syscall.Timespec.Nsec
-+	// but the fields are int32 on 32bit and int64 on 64bit.
-+	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
-+	tries := ts.Nsec
-+	var err int
-+
-+	for tries = 0; tries < 20; tries++ {
-+		// inlined this call because it ran out of stack when inlining was disabled
-+		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
-+		if err == 0 {
-+			// inlined this call because it ran out of stack when inlining was disabled
-+			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
-+			return 0
-+		}
-+		if err != int(syscall.EAGAIN) {
-+			return err
-+		}
-+		ts.Sec = 0
-+		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
-+		// inlined this call because it ran out of stack when inlining was disabled
-+		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
-+	}
-+	return int(syscall.EAGAIN)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
-new file mode 100644
-index 00000000000000..089d9fe489407b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_linux.go
-@@ -0,0 +1,79 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:nosplit
-+func _cgo_sys_thread_start(ts *ThreadStart) {
-+	var attr pthread_attr_t
-+	var ign, oset sigset_t
-+	var p pthread_t
-+	var size size_t
-+	var err int
-+
-+	//fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
-+	sigfillset(&ign)
-+	pthread_sigmask(SIG_SETMASK, &ign, &oset)
-+
-+	pthread_attr_init(&attr)
-+	pthread_attr_getstacksize(&attr, &size)
-+	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
-+	ts.g.stackhi = uintptr(size)
-+
-+	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
-+
-+	pthread_sigmask(SIG_SETMASK, &oset, nil)
-+
-+	if err != 0 {
-+		print("fakecgo: pthread_create failed: ")
-+		println(err)
-+		abort()
-+	}
-+}
-+
-+// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
-+//
-+//go:linkname x_threadentry_trampoline threadentry_trampoline
-+var x_threadentry_trampoline byte
-+var threadentry_trampolineABI0 = &x_threadentry_trampoline
-+
-+//go:nosplit
-+func threadentry(v unsafe.Pointer) unsafe.Pointer {
-+	ts := *(*ThreadStart)(v)
-+	free(v)
-+
-+	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
-+
-+	// faking funcs in go is a bit a... involved - but the following works :)
-+	fn := uintptr(unsafe.Pointer(&ts.fn))
-+	(*(*func())(unsafe.Pointer(&fn)))()
-+
-+	return nil
-+}
-+
-+// here we will store a pointer to the provided setg func
-+var setg_func uintptr
-+
-+// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
-+// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
-+// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
-+// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
-+//
-+//go:nosplit
-+func x_cgo_init(g *G, setg uintptr) {
-+	var size size_t
-+	var attr pthread_attr_t
-+
-+	setg_func = setg
-+	pthread_attr_init(&attr)
-+	pthread_attr_getstacksize(&attr, &size)
-+	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
-+	// but this should be OK since we are taking the address of the first variable in this function.
-+	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
-+	pthread_attr_destroy(&attr)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
-new file mode 100644
-index 00000000000000..e42d84f0b75ea6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_setenv.go
-@@ -0,0 +1,18 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_setenv(arg *[2]*byte) {
-+	setenv(arg[0], arg[1], 1)
-+}
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_unsetenv(arg *[1]*byte) {
-+	unsetenv(arg[0])
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
-new file mode 100644
-index 00000000000000..ff190007e8b6c0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/go_util.go
-@@ -0,0 +1,38 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
-+
-+// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
-+// This get's called instead of the go code for creating new threads
-+// -> pthread_* stuff is used, so threads are setup correctly for C
-+// If this is missing, TLS is only setup correctly on thread 1!
-+// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
-+//
-+//go:nosplit
-+//go:norace
-+func x_cgo_thread_start(arg *ThreadStart) {
-+	var ts *ThreadStart
-+	// Make our own copy that can persist after we return.
-+	//	_cgo_tsan_acquire();
-+	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
-+	//	_cgo_tsan_release();
-+	if ts == nil {
-+		println("fakecgo: out of memory in thread_start")
-+		abort()
-+	}
-+	// *ts = *arg would cause a writebarrier so copy using slices
-+	const ptrSize = unsafe.Sizeof(uintptr(0))
-+	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
-+	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
-+	for i := range s2 {
-+		s1[i] = s2[i]
-+	}
-+	_cgo_sys_thread_start(ts) // OS-dependent half
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
-new file mode 100644
-index 00000000000000..28af41cc640724
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/iscgo.go
-@@ -0,0 +1,19 @@
-+// Copyright 2010 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+// The runtime package contains an uninitialized definition
-+// for runtime·iscgo. Override it to tell the runtime we're here.
-+// There are various function pointers that should be set too,
-+// but those depend on dynamic linker magic to get initialized
-+// correctly, and sometimes they break. This variable is a
-+// backup: it depends only on old C style static linking rules.
-+
-+package fakecgo
-+
-+import _ "unsafe" // for go:linkname
-+
-+//go:linkname _iscgo runtime.iscgo
-+var _iscgo bool = true
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
-new file mode 100644
-index 00000000000000..38f94419397d8d
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo.go
-@@ -0,0 +1,39 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+type (
-+	size_t uintptr
-+	// Sources:
-+	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
-+	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
-+	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
-+	sigset_t       [128]byte
-+	pthread_attr_t [64]byte
-+	pthread_t      int
-+	pthread_key_t  uint64
-+)
-+
-+// for pthread_sigmask:
-+
-+type sighow int32
-+
-+const (
-+	SIG_BLOCK   sighow = 0
-+	SIG_UNBLOCK sighow = 1
-+	SIG_SETMASK sighow = 2
-+)
-+
-+type G struct {
-+	stacklo uintptr
-+	stackhi uintptr
-+}
-+
-+type ThreadStart struct {
-+	g   *G
-+	tls *uintptr
-+	fn  uintptr
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
-new file mode 100644
-index 00000000000000..ecdcb2e7852560
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_darwin.go
-@@ -0,0 +1,26 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+type (
-+	pthread_mutex_t struct {
-+		sig    int64
-+		opaque [56]byte
-+	}
-+	pthread_cond_t struct {
-+		sig    int64
-+		opaque [40]byte
-+	}
-+)
-+
-+var (
-+	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
-+	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
-+)
-+
-+type stack_t struct {
-+	/* not implemented */
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
-new file mode 100644
-index 00000000000000..4bfb70c3d5ee9a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_freebsd.go
-@@ -0,0 +1,20 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+type (
-+	pthread_cond_t  uintptr
-+	pthread_mutex_t uintptr
-+)
-+
-+var (
-+	PTHREAD_COND_INITIALIZER  = pthread_cond_t(0)
-+	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t(0)
-+)
-+
-+type stack_t struct {
-+	/* not implemented */
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
-new file mode 100644
-index 00000000000000..b08a44a1001bc0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/libcgo_linux.go
-@@ -0,0 +1,20 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+type (
-+	pthread_cond_t  [48]byte
-+	pthread_mutex_t [48]byte
-+)
-+
-+var (
-+	PTHREAD_COND_INITIALIZER  = pthread_cond_t{}
-+	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{}
-+)
-+
-+type stack_t struct {
-+	/* not implemented */
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
-new file mode 100644
-index 00000000000000..f98e272e42720e
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/linux.go
-@@ -0,0 +1,184 @@
-+// Copyright 2016 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && linux
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+// argset matches runtime/cgocall.go:argset.
-+type argset struct {
-+	args   *uintptr
-+	retval uintptr
-+}
-+
-+//go:nosplit
-+//go:norace
-+func (a *argset) arg(i int) unsafe.Pointer {
-+	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
-+}
-+
-+//go:linkname _cgo_libc_setegid syscall.cgo_libc_setegid
-+//go:linkname _cgo_libc_seteuid syscall.cgo_libc_seteuid
-+//go:linkname _cgo_libc_setgid syscall.cgo_libc_setgid
-+//go:linkname _cgo_libc_setregid syscall.cgo_libc_setregid
-+//go:linkname _cgo_libc_setresgid syscall.cgo_libc_setresgid
-+//go:linkname _cgo_libc_setresuid syscall.cgo_libc_setresuid
-+//go:linkname _cgo_libc_setreuid syscall.cgo_libc_setreuid
-+//go:linkname _cgo_libc_setuid syscall.cgo_libc_setuid
-+//go:linkname _cgo_libc_setgroups syscall.cgo_libc_setgroups
-+
-+var _cgo_libc_setegid = &_cgo_purego_setegid_trampoline
-+var _cgo_libc_seteuid = &_cgo_purego_seteuid_trampoline
-+var _cgo_libc_setgid = &_cgo_purego_setgid_trampoline
-+var _cgo_libc_setregid = &_cgo_purego_setregid_trampoline
-+var _cgo_libc_setresgid = &_cgo_purego_setresgid_trampoline
-+var _cgo_libc_setresuid = &_cgo_purego_setresuid_trampoline
-+var _cgo_libc_setreuid = &_cgo_purego_setreuid_trampoline
-+var _cgo_libc_setuid = &_cgo_purego_setuid_trampoline
-+var _cgo_libc_setgroups = &_cgo_purego_setgroups_trampoline
-+
-+//go:nosplit
-+//go:norace
-+func errno() int32 {
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	loc := __errno_location()
-+	return **(**int32)(unsafe.Pointer(&loc))
-+}
-+
-+//go:linkname _cgo_purego_setegid_trampoline _cgo_purego_setegid_trampoline
-+var _cgo_purego_setegid_trampoline byte
-+var x_cgo_purego_setegid_call = x_cgo_purego_setegid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setegid(c *argset) {
-+	ret := setegid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_seteuid_trampoline _cgo_purego_seteuid_trampoline
-+var _cgo_purego_seteuid_trampoline byte
-+var x_cgo_purego_seteuid_call = x_cgo_purego_seteuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_seteuid(c *argset) {
-+	ret := seteuid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setgid_trampoline _cgo_purego_setgid_trampoline
-+var _cgo_purego_setgid_trampoline byte
-+var x_cgo_purego_setgid_call = x_cgo_purego_setgid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setgid(c *argset) {
-+	ret := setgid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setregid_trampoline _cgo_purego_setregid_trampoline
-+var _cgo_purego_setregid_trampoline byte
-+var x_cgo_purego_setregid_call = x_cgo_purego_setregid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setregid(c *argset) {
-+	ret := setregid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setresgid_trampoline _cgo_purego_setresgid_trampoline
-+var _cgo_purego_setresgid_trampoline byte
-+var x_cgo_purego_setresgid_call = x_cgo_purego_setresgid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setresgid(c *argset) {
-+	ret := setresgid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setresuid_trampoline _cgo_purego_setresuid_trampoline
-+var _cgo_purego_setresuid_trampoline byte
-+var x_cgo_purego_setresuid_call = x_cgo_purego_setresuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setresuid(c *argset) {
-+	ret := setresuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setreuid_trampoline _cgo_purego_setreuid_trampoline
-+var _cgo_purego_setreuid_trampoline byte
-+var x_cgo_purego_setreuid_call = x_cgo_purego_setreuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setreuid(c *argset) {
-+	ret := setreuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setuid_trampoline _cgo_purego_setuid_trampoline
-+var _cgo_purego_setuid_trampoline byte
-+var x_cgo_purego_setuid_call = x_cgo_purego_setuid
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setuid(c *argset) {
-+	ret := setuid(uint32(uintptr(c.arg(0))))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-+
-+//go:linkname _cgo_purego_setgroups_trampoline _cgo_purego_setgroups_trampoline
-+var _cgo_purego_setgroups_trampoline byte
-+var x_cgo_purego_setgroups_call = x_cgo_purego_setgroups
-+
-+//go:nosplit
-+//go:norace
-+func x_cgo_purego_setgroups(c *argset) {
-+	ret := setgroups(uint32(uintptr(c.arg(0))), (*uint32)(c.arg(1)))
-+	if ret == -1 {
-+		c.retval = uintptr(errno())
-+	} else {
-+		c.retval = uintptr(ret)
-+	}
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
-new file mode 100644
-index 00000000000000..f30af0e1515699
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/setenv.go
-@@ -0,0 +1,19 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import _ "unsafe" // for go:linkname
-+
-+//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
-+//go:linkname _cgo_setenv runtime._cgo_setenv
-+var x_cgo_setenv_trampoline byte
-+var _cgo_setenv = &x_cgo_setenv_trampoline
-+
-+//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
-+//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
-+var x_cgo_unsetenv_trampoline byte
-+var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
-new file mode 100644
-index 00000000000000..cf56a6c71575eb
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_386.s
-@@ -0,0 +1,121 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+
-+// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
-+// On i386, both GCC and Go use stack-based calling conventions.
-+//
-+// When C calls a function, the stack looks like:
-+//   0(SP) = return address
-+//   4(SP) = arg1
-+//   8(SP) = arg2
-+//   ...
-+//
-+// When we declare a Go function with frame size $N-0, Go's prologue
-+// effectively does SUB $N, SP, so the C arguments shift up by N bytes:
-+//   N+0(SP) = return address
-+//   N+4(SP) = arg1
-+//   N+8(SP) = arg2
-+//
-+// Go ABI0 on 386 expects arguments starting at 0(FP) which equals N+4(SP)
-+// after the prologue (where N is the local frame size).
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
-+	// C args at 12(SP) and 16(SP) after frame setup (8 bytes local + 4 bytes ret addr)
-+	// Go function expects args at 0(SP) and 4(SP) in local frame
-+	MOVL 12(SP), AX               // first C arg
-+	MOVL 16(SP), BX               // second C arg
-+	MOVL AX, 0(SP)                // Go arg 1
-+	MOVL BX, 4(SP)                // Go arg 2
-+	MOVL ·x_cgo_init_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $4-0
-+	// C args at 8(SP) after frame setup (4 bytes local + 4 bytes ret addr)
-+	MOVL 8(SP), AX                        // first C arg
-+	MOVL AX, 0(SP)                        // Go arg 1
-+	MOVL ·x_cgo_thread_start_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                  // first C arg
-+	MOVL AX, 0(SP)                  // Go arg 1
-+	MOVL ·x_cgo_setenv_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX                    // first C arg
-+	MOVL AX, 0(SP)                    // Go arg 1
-+	MOVL ·x_cgo_unsetenv_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+// This is called from Go, so args are at normal FP positions
-+TEXT ·setg_trampoline(SB), NOSPLIT, $4-8
-+	MOVL g+4(FP), AX
-+	MOVL setg+0(FP), BX
-+
-+	// setg expects g in 0(SP)
-+	MOVL AX, 0(SP)
-+	CALL BX
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $24-4
-+	// Save callee-saved registers
-+	MOVL BP, 20(SP)
-+	MOVL BX, 16(SP)
-+	MOVL SI, 12(SP)
-+	MOVL DI, 8(SP)
-+
-+	// Move C argument (arg) to stack for Go function
-+	MOVL arg+0(FP), AX
-+	MOVL AX, 0(SP)
-+
-+	MOVL ·threadentry_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+
-+	// Restore callee-saved registers
-+	MOVL 8(SP), DI
-+	MOVL 12(SP), SI
-+	MOVL 16(SP), BX
-+	MOVL 20(SP), BP
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $24-28
-+	MOVL fn+0(FP), AX
-+	MOVL a1+4(FP), BX
-+	MOVL a2+8(FP), CX
-+	MOVL a3+12(FP), DX
-+	MOVL a4+16(FP), SI
-+	MOVL a5+20(FP), DI
-+
-+	// Place arguments on local stack frame for C calling convention
-+	MOVL BX, 0(SP)     // a1
-+	MOVL CX, 4(SP)     // a2
-+	MOVL DX, 8(SP)     // a3
-+	MOVL SI, 12(SP)    // a4
-+	MOVL DI, 16(SP)    // a5
-+	CALL AX
-+	MOVL AX, r1+24(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
-new file mode 100644
-index 00000000000000..a4ca5ea98214fd
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,107 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+/*
-+trampoline for emulating required C functions for cgo in go (see cgo.go)
-+(we convert cdecl calling convention to go and vice-versa)
-+
-+C Calling convention cdecl used here (we only need integer args):
-+1. arg: DI
-+2. arg: SI
-+3. arg: DX
-+4. arg: CX
-+5. arg: R8
-+6. arg: R9
-+We don't need floats with these functions -> AX=0
-+return value will be in AX
-+temporary register is R11
-+*/
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_amd64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVQ DI, AX
-+	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	JMP ·x_cgo_notify_runtime_init_done(SB)
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	JMP ·x_cgo_bindm(SB)
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), R11
-+	XORL AX, AX
-+	CALL R11
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0
-+	// See crosscall2.
-+	PUSH_REGS_HOST_TO_ABI0()
-+
-+	// X15 is designated by Go as a fixed zero register.
-+	// Calling directly into ABIInternal, ensure it is zero.
-+	PXOR X15, X15
-+
-+	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), R11
-+	MOVQ a1+8(FP), DI
-+	MOVQ a2+16(FP), SI
-+	MOVQ a3+24(FP), DX
-+	MOVQ a4+32(FP), CX
-+	MOVQ a5+40(FP), R8
-+
-+	XORL AX, AX // no floats
-+
-+	PUSHQ BP       // save BP
-+	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
-+	SUBQ  $16, SP  // allocate space for alignment
-+	ANDQ  $-16, SP // align on 16 bytes for SSE
-+
-+	CALL R11
-+
-+	MOVQ BP, SP // get SP back
-+	POPQ BP     // restore BP
-+
-+	MOVQ AX, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
-new file mode 100644
-index 00000000000000..c17925d60d6787
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm.s
-@@ -0,0 +1,122 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+
-+// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
-+// On ARM32, Go ABI0 uses stack-based calling convention.
-+// Arguments are placed on the stack starting at 4(SP) after the prologue.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW R1, 8(R13)
-+	MOVW ·x_cgo_init_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_thread_start_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_setenv_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_unsetenv_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-8
-+	MOVW G+4(FP), R0
-+	MOVW setg+0(FP), R12
-+	BL   (R12)
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $104-0
-+	// Save C callee-saved registers at C-to-Go boundary.
-+	// See crosscall2 in asm_arm.s.
-+	// ARM AAPCS callee-saved: R4-R11 (includes g=R10), D8-D15.
-+	// LR is saved/restored by the Go-managed frame prologue/epilogue.
-+	MOVW R0, 4(R13) // arg for threadentry_call
-+
-+	MOVW R4, 8(R13)
-+	MOVW R5, 12(R13)
-+	MOVW R6, 16(R13)
-+	MOVW R7, 20(R13)
-+	MOVW R8, 24(R13)
-+	MOVW R9, 28(R13)
-+	MOVW g, 32(R13)   // R10
-+	MOVW R11, 36(R13)
-+
-+	MOVD F8, 40(R13)
-+	MOVD F9, 48(R13)
-+	MOVD F10, 56(R13)
-+	MOVD F11, 64(R13)
-+	MOVD F12, 72(R13)
-+	MOVD F13, 80(R13)
-+	MOVD F14, 88(R13)
-+	MOVD F15, 96(R13)
-+
-+	MOVW ·threadentry_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+
-+	MOVD 40(R13), F8
-+	MOVD 48(R13), F9
-+	MOVD 56(R13), F10
-+	MOVD 64(R13), F11
-+	MOVD 72(R13), F12
-+	MOVD 80(R13), F13
-+	MOVD 88(R13), F14
-+	MOVD 96(R13), F15
-+
-+	MOVW 8(R13), R4
-+	MOVW 12(R13), R5
-+	MOVW 16(R13), R6
-+	MOVW 20(R13), R7
-+	MOVW 24(R13), R8
-+	MOVW 28(R13), R9
-+	MOVW 32(R13), g
-+	MOVW 36(R13), R11
-+
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $8-28
-+	MOVW fn+0(FP), R12
-+	MOVW a1+4(FP), R0
-+	MOVW a2+8(FP), R1
-+	MOVW a3+12(FP), R2
-+	MOVW a4+16(FP), R3
-+	MOVW a5+20(FP), R4
-+
-+	// Store 5th arg below SP (in local frame area)
-+	MOVW R4, arg5-8(SP)
-+
-+	// Align SP to 8 bytes for call (required by ARM AAPCS)
-+	SUB  $8, R13
-+	CALL (R12)
-+	ADD  $8, R13
-+	MOVW R0, r1+24(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-new file mode 100644
-index 00000000000000..1deb2747ad3245
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,81 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_arm64.h"
-+
-+// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
-+// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
-+// R9 is used as a temporary register.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R9
-+	CALL R9
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
-+	// See crosscall2.
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
-+
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
-+
-+	MOVD ·threadentry_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	MOVD $0, R0                    // TODO: get the return value from threadentry
-+
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	ADD $(8*24), RSP
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R9
-+	MOVD a1+8(FP), R0
-+	MOVD a2+16(FP), R1
-+	MOVD a3+24(FP), R2
-+	MOVD a4+32(FP), R3
-+	MOVD a5+40(FP), R4
-+	CALL R9
-+	MOVD R0, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
-new file mode 100644
-index 00000000000000..eea96638fa9a9b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_386.s
-@@ -0,0 +1,78 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setegid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_seteuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setgid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setregid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setresgid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setresuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setreuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setuid_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
-+	MOVL 8(SP), AX
-+	MOVL AX, 0(SP)
-+	MOVL ·x_cgo_purego_setgroups_call(SB), CX
-+	MOVL (CX), CX
-+	CALL CX
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
-new file mode 100644
-index 00000000000000..424ebc1e7cbb42
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_amd64.s
-@@ -0,0 +1,69 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setegid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_seteuid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setgid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setregid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setresgid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setresuid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setreuid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setuid_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_purego_setgroups_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
-new file mode 100644
-index 00000000000000..284fe5d0e3a87a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm.s
-@@ -0,0 +1,69 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setegid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_seteuid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setgid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setregid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setresgid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setresuid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setreuid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setuid_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
-+	MOVW R0, 4(R13)
-+	MOVW ·x_cgo_purego_setgroups_call(SB), R12
-+	MOVW (R12), R12
-+	CALL (R12)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
-new file mode 100644
-index 00000000000000..771910817b7686
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_arm64.s
-@@ -0,0 +1,60 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setegid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setgid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setregid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setuid_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
-new file mode 100644
-index 00000000000000..ebcc1176c0a0a6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_loong64.s
-@@ -0,0 +1,60 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setegid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_seteuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setgid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setregid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setresgid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setresuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setreuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setuid_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_purego_setgroups_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
-new file mode 100644
-index 00000000000000..59a95a929fb5c2
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_ppc64le.s
-@@ -0,0 +1,69 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setegid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setgid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setregid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setuid_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
-new file mode 100644
-index 00000000000000..9e892dbd2daf71
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_riscv64.s
-@@ -0,0 +1,60 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && linux
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setegid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_seteuid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setgid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setregid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setresgid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setresuid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setreuid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setuid_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_purego_setgroups_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
-new file mode 100644
-index 00000000000000..ce4247c989f4c1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_linux_s390x.s
-@@ -0,0 +1,53 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build go1.27 && !cgo
-+
-+#include "textflag.h"
-+
-+TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setegid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_seteuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setgid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setregid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setresgid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setresuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setreuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setuid_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-+
-+TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT|NOFRAME, $0
-+	MOVD ·x_cgo_purego_setgroups_call(SB), R1
-+	MOVD (R1), R1
-+	BR   R1
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
-new file mode 100644
-index 00000000000000..b93b5da90a8333
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_loong64.s
-@@ -0,0 +1,78 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_loong64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+// R23 is used as temporary register.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVV ·x_cgo_init_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_thread_start_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_setenv_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVV ·x_cgo_unsetenv_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0
-+	MOVV G+8(FP), R4
-+	MOVV setg+0(FP), R23
-+	CALL (R23)
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $176
-+	// See crosscall2.
-+	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
-+	MOVV R5, (2*8)(R3) // a unsafe.Pointer
-+	MOVV R7, (3*8)(R3) // ctxt uintptr
-+
-+	SAVE_R22_TO_R31((4*8))
-+	SAVE_F24_TO_F31((14*8))
-+
-+	MOVV ·threadentry_call(SB), R23
-+	MOVV (R23), R23
-+	CALL (R23)
-+
-+	RESTORE_R22_TO_R31((4*8))
-+	RESTORE_F24_TO_F31((14*8))
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVV fn+0(FP), R23
-+	MOVV a1+8(FP), R4
-+	MOVV a2+16(FP), R5
-+	MOVV a3+24(FP), R6
-+	MOVV a4+32(FP), R7
-+	MOVV a5+40(FP), R8
-+	CALL (R23)
-+	MOVV R4, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
-new file mode 100644
-index 00000000000000..444529d8ae820b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_ppc64le.s
-@@ -0,0 +1,128 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_ppc64x.h"
-+
-+// These trampolines map the C ABI to Go ABI and call into the Go equivalent functions.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $16-16
-+	MOVD R31, 8(R1) // save R31 (load_g clobbers it)
-+
-+	MOVD setg+0(FP), R12
-+	MOVD newg+8(FP), R3
-+
-+	MOVD R12, CTR
-+	CALL CTR
-+
-+	CALL runtime·load_g(SB)
-+
-+	MOVD 8(R1), R31
-+	XOR  R0, R0, R0
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	// Called from C (pthread_create). Must save all C callee-saved registers.
-+	// Uses NOFRAME for proper ELFv2 backchain via MOVDU.
-+	MOVD LR, R0
-+	MOVD R0, 16(R1)
-+	MOVW CR, R0
-+	MOVD R0, 8(R1)
-+
-+	MOVDU R1, -320(R1)
-+
-+	SAVE_GPR(32)
-+	SAVE_FPR(32+SAVE_GPR_SIZE)
-+
-+	MOVD $0, R0
-+
-+	MOVD ·threadentry_call(SB), R12
-+	MOVD (R12), R12
-+	MOVD R12, CTR
-+	CALL CTR
-+
-+	RESTORE_FPR(32+SAVE_GPR_SIZE)
-+	RESTORE_GPR(32)
-+
-+	ADD $320, R1
-+
-+	MOVD 16(R1), R0
-+	MOVD R0, LR
-+	MOVD 8(R1), R0
-+	MOVW R0, CR
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
-+	MOVD LR, R20
-+	MOVW CR, R21
-+
-+	// Load arguments from Go stack into C argument registers
-+	// Go placed args at 32(R1), 40(R1), etc.
-+	MOVD 32(R1), R12 // fn
-+	MOVD 40(R1), R3  // a1 → first C arg
-+	MOVD 48(R1), R4  // a2 → second C arg
-+	MOVD 56(R1), R5  // a3 → third C arg
-+	MOVD 64(R1), R6  // a4 → fourth C arg
-+	MOVD 72(R1), R7  // a5 → fifth C arg
-+
-+	MOVDU R1, -32(R1)
-+
-+	MOVD R12, CTR
-+	CALL CTR
-+
-+	// Store return value
-+	// After MOVDU -32, original 80(R1) is now at 80+32=112(R1)
-+	MOVD R3, (80+32)(R1)
-+
-+	// Deallocate frame
-+	ADD $32, R1
-+
-+	// Clear R0 before returning to Go code.
-+	// Go uses R0 as a constant 0 register for things like "std r0,X(r1)"
-+	// to zero stack locations. C functions may leave garbage in R0.
-+	XOR R0, R0, R0
-+
-+	// Restore LR/CR from non-volatile registers
-+	MOVD R20, LR
-+	MOVW R21, CR
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
-new file mode 100644
-index 00000000000000..b162fdde234629
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_riscv64.s
-@@ -0,0 +1,76 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_riscv64.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+// X5 is used as temporary register.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOV  ·x_cgo_init_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_thread_start_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_setenv_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOV  ·x_cgo_unsetenv_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+	RET
-+
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
-+
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0
-+	MOV  gp+8(FP), X10
-+	MOV  setg+0(FP), X5
-+	CALL X5
-+	RET
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT, $200
-+	MOV X10, 8(SP)
-+
-+	SAVE_GPR(8*2)
-+	SAVE_FPR(8*14)
-+
-+	MOV  ·threadentry_call(SB), X5
-+	MOV  (X5), X5
-+	CALL X5
-+
-+	RESTORE_GPR(8*2)
-+	RESTORE_FPR(8*14)
-+
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT, $0-48
-+	MOV  fn+0(FP), X5
-+	MOV  a1+8(FP), X10
-+	MOV  a2+16(FP), X11
-+	MOV  a3+24(FP), X12
-+	MOV  a4+32(FP), X13
-+	MOV  a5+40(FP), X14
-+	CALL X5
-+	MOV  X10, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
-new file mode 100644
-index 00000000000000..2b68d438e4ec1d
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/trampolines_s390x.s
-@@ -0,0 +1,154 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
-+
-+//go:build go1.27 && !cgo && linux
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
-+// Note that C arguments are passed in R2-R6, which matches Go ABIInternal for the first five arguments.
-+// R1 is used as a temporary register.
-+
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R15, R1
-+	SUB  $192, R15
-+	MOVD R1, 0(R15)    // backchain
-+	MOVD R14, 160(R15) // save R14
-+	MOVD R9, 168(R15)  // save R9 (Go runtime needs this preserved)
-+
-+	MOVD ·x_cgo_init_call(SB), R1
-+	MOVD (R1), R1
-+	BL   R1
-+
-+	MOVD 168(R15), R9
-+	MOVD 160(R15), R14
-+	ADD  $192, R15
-+	BR   R14
-+
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R15, R1
-+	SUB  $176, R15
-+	MOVD R1, 0(R15)    // backchain
-+	MOVD R14, 152(R15) // save R14
-+
-+	MOVD ·x_cgo_thread_start_call(SB), R1
-+	MOVD (R1), R1
-+	BL   R1
-+
-+	MOVD 152(R15), R14
-+	ADD  $176, R15
-+	BR   R14
-+
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R15, R1
-+	SUB  $176, R15
-+	MOVD R1, 0(R15)    // backchain
-+	MOVD R14, 152(R15) // save R14
-+
-+	MOVD ·x_cgo_setenv_call(SB), R1
-+	MOVD (R1), R1
-+	BL   R1
-+
-+	MOVD 152(R15), R14
-+	ADD  $176, R15
-+	BR   R14
-+
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	MOVD R15, R1
-+	SUB  $176, R15
-+	MOVD R1, 0(R15)    // backchain
-+	MOVD R14, 152(R15) // save R14
-+
-+	MOVD ·x_cgo_unsetenv_call(SB), R1
-+	MOVD (R1), R1
-+	BL   R1
-+
-+	MOVD 152(R15), R14
-+	ADD  $176, R15
-+	BR   R14
-+
-+// These just tail-call into Go functions
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	BR ·x_cgo_notify_runtime_init_done(SB)
-+
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	BR ·x_cgo_bindm(SB)
-+
-+// setg_trampoline(setg uintptr, g uintptr) - called from Go
-+TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
-+	MOVD 8(R15), R1  // setg function pointer
-+	MOVD 16(R15), R2 // g pointer -> C arg
-+
-+	MOVD R14, R0
-+	MOVD R15, R3
-+	SUB  $160, R15
-+	MOVD R3, 0(R15)
-+	MOVD R0, 112(R15)
-+
-+	BL R1                 // call setg_gcc
-+	BL runtime·load_g(SB)
-+
-+	MOVD 112(R15), R14
-+	ADD  $160, R15
-+	BR   R14
-+
-+TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	STMG R6, R15, 48(R15) // C save area
-+	MOVD R15, R1
-+	SUB  $176, R15
-+	MOVD R1, 0(R15)       // backchain
-+
-+	MOVD ·threadentry_call(SB), R1
-+	MOVD (R1), R1
-+	BL   R1
-+
-+	ADD $176, R15
-+	LMG 48(R15), R6, R15
-+	RET
-+
-+TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
-+	// Load Go args before modifying R15
-+	MOVD 8(R15), R1   // fn
-+	MOVD 16(R15), R7  // a1
-+	MOVD 24(R15), R8  // a2
-+	MOVD 32(R15), R9  // a3
-+	MOVD 40(R15), R10 // a4
-+	MOVD 48(R15), R11 // a5
-+
-+	// Save state
-+	MOVD R15, R0    // original R15
-+	MOVD R12, R6    // Go's R12
-+	ADD  $-128, R15
-+
-+	// Set up C frame with backchain
-+	MOVD R0, 0(R15) // backchain -> original R15
-+	MOVD R0, R3     // R3 = original R15 (can't use R0 as base!)
-+	MOVD 0(R3), R7  // save 0(original R15)
-+	MOVD $0, 0(R3)  // terminate backchain
-+
-+	// Save context
-+	MOVD R14, 8(R15)
-+	MOVD R6, 16(R15) // R12
-+	MOVD R0, 24(R15) // original R15
-+	MOVD R7, 32(R15) // saved backchain
-+
-+	// Set up C args (reload a1 since R7 was clobbered)
-+	MOVD 16(R3), R2 // a1 (use R3 as base, not R0!)
-+	MOVD R8, R3     // a2
-+	MOVD R9, R4     // a3
-+	MOVD R10, R5    // a4
-+	MOVD R11, R6    // a5
-+
-+	BL R1
-+
-+	// Store result and restore
-+	MOVD 24(R15), R3 // original R15
-+	MOVD R2, 56(R3)  // return value
-+	MOVD 32(R15), R7
-+	MOVD R7, 0(R3)   // restore backchain
-+
-+	MOVD 8(R15), R14
-+	MOVD 16(R15), R12
-+	MOVD 24(R15), R15
-+	BR   R14
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
-new file mode 100644
-index 00000000000000..e1339193b9764d
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols.go
-@@ -0,0 +1,165 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+package fakecgo
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
-+
-+//go:nosplit
-+//go:norace
-+func malloc(size uintptr) unsafe.Pointer {
-+	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func free(ptr unsafe.Pointer) {
-+	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setenv(name *byte, value *byte, overwrite int32) int32 {
-+	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func unsetenv(name *byte) int32 {
-+	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func sigfillset(set *sigset_t) int32 {
-+	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
-+	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func abort() {
-+	call5(abortABI0, 0, 0, 0, 0, 0)
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_init(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
-+	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_detach(thread pthread_t) int32 {
-+	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
-+	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
-+	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
-+	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
-+	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
-+	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
-+}
-+
-+//go:linkname _malloc _malloc
-+var _malloc uint8
-+var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
-+
-+//go:linkname _free _free
-+var _free uint8
-+var freeABI0 = uintptr(unsafe.Pointer(&_free))
-+
-+//go:linkname _setenv _setenv
-+var _setenv uint8
-+var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
-+
-+//go:linkname _unsetenv _unsetenv
-+var _unsetenv uint8
-+var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
-+
-+//go:linkname _sigfillset _sigfillset
-+var _sigfillset uint8
-+var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
-+
-+//go:linkname _nanosleep _nanosleep
-+var _nanosleep uint8
-+var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
-+
-+//go:linkname _abort _abort
-+var _abort uint8
-+var abortABI0 = uintptr(unsafe.Pointer(&_abort))
-+
-+//go:linkname _pthread_attr_init _pthread_attr_init
-+var _pthread_attr_init uint8
-+var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
-+
-+//go:linkname _pthread_create _pthread_create
-+var _pthread_create uint8
-+var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
-+
-+//go:linkname _pthread_detach _pthread_detach
-+var _pthread_detach uint8
-+var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
-+
-+//go:linkname _pthread_sigmask _pthread_sigmask
-+var _pthread_sigmask uint8
-+var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
-+
-+//go:linkname _pthread_mutex_lock _pthread_mutex_lock
-+var _pthread_mutex_lock uint8
-+var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
-+
-+//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
-+var _pthread_mutex_unlock uint8
-+var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
-+
-+//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
-+var _pthread_cond_broadcast uint8
-+var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
-+
-+//go:linkname _pthread_setspecific _pthread_setspecific
-+var _pthread_setspecific uint8
-+var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
-new file mode 100644
-index 00000000000000..960f8168eb88d7
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_darwin.go
-@@ -0,0 +1,59 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
-+
-+//go:nosplit
-+//go:norace
-+func pthread_self() pthread_t {
-+	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_get_stacksize_np(thread pthread_t) size_t {
-+	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
-+	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
-+}
-+
-+//go:linkname _pthread_self _pthread_self
-+var _pthread_self uint8
-+var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
-+
-+//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
-+var _pthread_get_stacksize_np uint8
-+var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
-+
-+//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
-+var _pthread_attr_setstacksize uint8
-+var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
-new file mode 100644
-index 00000000000000..d69775596fddf3
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_freebsd.go
-@@ -0,0 +1,48 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "libc.so.7"
-+//go:cgo_import_dynamic purego_free free "libc.so.7"
-+//go:cgo_import_dynamic purego_setenv setenv "libc.so.7"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.7"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.7"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.7"
-+//go:cgo_import_dynamic purego_abort abort "libc.so.7"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so"
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
-new file mode 100644
-index 00000000000000..cbb120431ab6bb
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/zsymbols_linux.go
-@@ -0,0 +1,158 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "libc.so.6"
-+//go:cgo_import_dynamic purego_free free "libc.so.6"
-+//go:cgo_import_dynamic purego_setenv setenv "libc.so.6"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.6"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.6"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.6"
-+//go:cgo_import_dynamic purego_abort abort "libc.so.6"
-+//go:cgo_import_dynamic purego___errno_location __errno_location "libc.so.6"
-+//go:cgo_import_dynamic purego_setegid setegid "libc.so.6"
-+//go:cgo_import_dynamic purego_seteuid seteuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setgid setgid "libc.so.6"
-+//go:cgo_import_dynamic purego_setregid setregid "libc.so.6"
-+//go:cgo_import_dynamic purego_setresgid setresgid "libc.so.6"
-+//go:cgo_import_dynamic purego_setresuid setresuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setreuid setreuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setuid setuid "libc.so.6"
-+//go:cgo_import_dynamic purego_setgroups setgroups "libc.so.6"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
-+//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
-+
-+//go:nosplit
-+//go:norace
-+func __errno_location() uintptr {
-+	return uintptr(call5(__errno_locationABI0, 0, 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setegid(egid uint32) int32 {
-+	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func seteuid(euid uint32) int32 {
-+	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setgid(gid uint32) int32 {
-+	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setregid(rgid uint32, egid uint32) int32 {
-+	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setresgid(rgid uint32, egid uint32, sgid uint32) int32 {
-+	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setresuid(ruid uint32, euid uint32, suid uint32) int32 {
-+	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setreuid(ruid uint32, euid uint32) int32 {
-+	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setuid(uid uint32) int32 {
-+	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func setgroups(ngid uint32, gidset *uint32) int32 {
-+	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
-+	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
-+}
-+
-+//go:nosplit
-+//go:norace
-+func pthread_attr_destroy(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
-+}
-+
-+//go:linkname ___errno_location ___errno_location
-+var ___errno_location uint8
-+var __errno_locationABI0 = uintptr(unsafe.Pointer(&___errno_location))
-+
-+//go:linkname _setegid _setegid
-+var _setegid uint8
-+var setegidABI0 = uintptr(unsafe.Pointer(&_setegid))
-+
-+//go:linkname _seteuid _seteuid
-+var _seteuid uint8
-+var seteuidABI0 = uintptr(unsafe.Pointer(&_seteuid))
-+
-+//go:linkname _setgid _setgid
-+var _setgid uint8
-+var setgidABI0 = uintptr(unsafe.Pointer(&_setgid))
-+
-+//go:linkname _setregid _setregid
-+var _setregid uint8
-+var setregidABI0 = uintptr(unsafe.Pointer(&_setregid))
-+
-+//go:linkname _setresgid _setresgid
-+var _setresgid uint8
-+var setresgidABI0 = uintptr(unsafe.Pointer(&_setresgid))
-+
-+//go:linkname _setresuid _setresuid
-+var _setresuid uint8
-+var setresuidABI0 = uintptr(unsafe.Pointer(&_setresuid))
-+
-+//go:linkname _setreuid _setreuid
-+var _setreuid uint8
-+var setreuidABI0 = uintptr(unsafe.Pointer(&_setreuid))
-+
-+//go:linkname _setuid _setuid
-+var _setuid uint8
-+var setuidABI0 = uintptr(unsafe.Pointer(&_setuid))
-+
-+//go:linkname _setgroups _setgroups
-+var _setgroups uint8
-+var setgroupsABI0 = uintptr(unsafe.Pointer(&_setgroups))
-+
-+//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
-+var _pthread_attr_getstacksize uint8
-+var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
-+
-+//go:linkname _pthread_attr_destroy _pthread_attr_destroy
-+var _pthread_attr_destroy uint8
-+var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
-new file mode 100644
-index 00000000000000..35ef7ac11cb955
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_darwin.s
-@@ -0,0 +1,19 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_self(SB)
-+
-+TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_get_stacksize_np(SB)
-+
-+TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_setstacksize(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
-new file mode 100644
-index 00000000000000..da07005c0bc988
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_freebsd.s
-@@ -0,0 +1,16 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_getstacksize(SB)
-+
-+TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_destroy(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
-new file mode 100644
-index 00000000000000..ba2cb38918d538
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_linux.s
-@@ -0,0 +1,46 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT ___errno_location(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego___errno_location(SB)
-+
-+TEXT _setegid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setegid(SB)
-+
-+TEXT _seteuid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_seteuid(SB)
-+
-+TEXT _setgid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setgid(SB)
-+
-+TEXT _setregid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setregid(SB)
-+
-+TEXT _setresgid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setresgid(SB)
-+
-+TEXT _setresuid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setresuid(SB)
-+
-+TEXT _setreuid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setreuid(SB)
-+
-+TEXT _setuid(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setuid(SB)
-+
-+TEXT _setgroups(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setgroups(SB)
-+
-+TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_getstacksize(SB)
-+
-+TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_destroy(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
-new file mode 100644
-index 00000000000000..067583d68517a9
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/fakecgo/ztrampolines_stubs.s
-@@ -0,0 +1,55 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && (darwin || freebsd || linux)
-+
-+#include "textflag.h"
-+
-+// these stubs are here because it is not possible to go:linkname directly the C functions
-+
-+TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_malloc(SB)
-+
-+TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_free(SB)
-+
-+TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setenv(SB)
-+
-+TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_unsetenv(SB)
-+
-+TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigfillset(SB)
-+
-+TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_nanosleep(SB)
-+
-+TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_abort(SB)
-+
-+TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_init(SB)
-+
-+TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_create(SB)
-+
-+TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_detach(SB)
-+
-+TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_sigmask(SB)
-+
-+TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_lock(SB)
-+
-+TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_unlock(SB)
-+
-+TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_cond_broadcast(SB)
-+
-+TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_setspecific(SB)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
-new file mode 100644
-index 00000000000000..f414d62c0f1ff7
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_386.s
-@@ -0,0 +1,98 @@
-+// Copyright 2026 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16-0
-+	MOVL 20(SP), AX               // libcArgs from C caller (frame_size + ret_addr = 16 + 4)
-+	MOVL AX, 0(SP)                // pass to Go function
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $16-4
-+	// Frame layout: 16 bytes local storage
-+	// 0(SP) - saved BP (original SP)
-+	// 4(SP) - saved libcArgs pointer
-+	// 8(SP) - saved fn pointer
-+	// 12(SP) - scratch
-+
-+	// Load args pointer FIRST before any stack modifications
-+	MOVL libcArgs+0(FP), SI
-+
-+	// Save original SP and libcArgs in local frame
-+	MOVL SP, BP
-+	ADDL $16, BP   // BP = original SP (before frame allocation)
-+	MOVL BP, 0(SP) // save original SP
-+	MOVL SI, 4(SP) // save libcArgs pointer
-+
-+	// Load struct fields
-+	MOVL libcCallInfo_fn(SI), AX
-+	MOVL AX, 8(SP)                 // save fn pointer
-+	MOVL libcCallInfo_n(SI), CX
-+	MOVL libcCallInfo_args(SI), BX
-+
-+	// Allocate 16 bytes for fast path (0-3 args)
-+	MOVL SP, BP
-+	SUBL $16, SP
-+
-+	// Fast path for 0-3 args, otherwise fall through to manyargs
-+	CMPL CX, $0; JE _0args
-+	CMPL CX, $1; JE _1args
-+	CMPL CX, $2; JE _2args
-+	CMPL CX, $3; JE _3args
-+
-+	// manyargs: 4+ args, restore SP and reallocate
-+	MOVL BP, SP
-+
-+	// Calculate stack space needed: n*4 bytes, aligned to 16
-+	MOVL CX, AX
-+	SHLL $2, AX   // AX = n * 4
-+	ADDL $15, AX
-+	ANDL $~15, AX // 16-byte align
-+	SUBL AX, SP
-+
-+	// Copy all args to stack
-+	// BX = args pointer, CX = count, DI = dest
-+	MOVL SP, DI
-+
-+copy_loop:
-+	DECL CX
-+	MOVL (BX)(CX*4), AX
-+	MOVL AX, (DI)(CX*4)
-+	CMPL CX, $0
-+	JNE  copy_loop
-+	JMP  _0args
-+
-+// Fast path: fall through to copy args
-+_3args:
-+	MOVL 8(BX), AX
-+	MOVL AX, 8(SP)
-+
-+_2args:
-+	MOVL 4(BX), AX
-+	MOVL AX, 4(SP)
-+
-+_1args:
-+	MOVL 0(BX), AX
-+	MOVL AX, 0(SP)
-+
-+_0args:
-+	MOVL 8(BP), DX // fn pointer from saved location
-+	CALL DX
-+	MOVL BP, SP
-+
-+ret:
-+	// Reload libcArgs pointer from saved location
-+	MOVL 4(SP), SI
-+
-+	// Save return values (AX already has r1, need to save DX before it's clobbered)
-+	MOVL DX, 12(SP)              // temporarily save r2
-+	MOVL AX, libcCallInfo_r1(SI)
-+	MOVL 12(SP), AX
-+	MOVL AX, libcCallInfo_r2(SI)
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
-new file mode 100644
-index 00000000000000..512d8087daf527
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_amd64.s
-@@ -0,0 +1,120 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+#ifdef GOOS_windows
-+	MOVQ CX, 0(SP)
-+
-+#else
-+	MOVQ DI, 0(SP)
-+
-+#endif
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+#ifdef GOOS_windows
-+#define RegArgsN 4
-+#else
-+#define RegArgsN 6
-+#endif
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
-+	// Load pointer from stack (ABI0 calling convention)
-+	// Store argument and original SP in a callee-saved register
-+	MOVQ libcArgs+0(FP), R13
-+	MOVQ SP, R14
-+
-+	// Align stack to 16 bytes
-+	ANDQ $~15, SP
-+
-+	MOVQ libcCallInfo_fn(R13), R11
-+	MOVQ libcCallInfo_n(R13), CX
-+	MOVQ libcCallInfo_args(R13), R10
-+
-+	// Fast version, do not store args on the stack.
-+	CMPL CX, $0; JE _0args
-+	CMPL CX, $1; JE _1args
-+	CMPL CX, $2; JE _2args
-+	CMPL CX, $3; JE _3args
-+	CMPL CX, $4; JE _4args
-+
-+#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
-+	CMPL CX, $5; JE _5args
-+	CMPL CX, $6; JE _6args
-+
-+#endif
-+
-+	// Reserve stack space for remaining args
-+	MOVQ CX, R12
-+	SUBQ $RegArgsN, R12
-+	ADDQ $1, R12        // make even number of words for stack alignment
-+	ANDQ $~1, R12
-+	SHLQ $3, R12
-+	SUBQ R12, SP
-+
-+	// Copy args to the stack.
-+	// CX: count of stack arguments (n-RegArgsN)
-+	// SI: &args[RegArgsN]
-+	// DI: copy of RSP
-+	SUBQ $RegArgsN, CX
-+	MOVQ R10, SI
-+	ADDQ $(8*RegArgsN), SI
-+	MOVQ SP, DI
-+	CLD
-+	REP; MOVSQ
-+
-+#ifndef GOOS_windows
-+_6args:
-+	MOVQ (5*8)(R10), R9
-+
-+_5args:
-+	MOVQ (4*8)(R10), R8
-+
-+#endif
-+_4args:
-+	MOVQ (3*8)(R10), CX
-+
-+_3args:
-+	MOVQ (2*8)(R10), DX
-+
-+_2args:
-+	MOVQ (1*8)(R10), SI
-+
-+_1args:
-+	MOVQ (0*8)(R10), DI
-+
-+_0args:
-+
-+	XORL AX, AX // vararg: say "no float args"
-+
-+#ifdef GOOS_windows
-+	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
-+	// and 32 bytes of shadow space on the stack.
-+	ADJSP $32
-+	MOVQ  CX, R9
-+	MOVQ  DX, R8
-+	MOVQ  SI, DX
-+	MOVQ  DI, CX
-+
-+#endif
-+
-+	CALL R11
-+
-+#ifdef GOOS_windows
-+	ADJSP $-32
-+
-+#endif
-+
-+	MOVQ R14, SP // free stack space
-+
-+	// Return result.
-+	MOVQ AX, libcCallInfo_r1(R13)
-+	MOVQ DX, libcCallInfo_r2(R13)
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
-new file mode 100644
-index 00000000000000..ff8e2c5513b7fa
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm.s
-@@ -0,0 +1,104 @@
-+// Copyright 2026 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $8
-+	MOVW R0, 4(R13)
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $0-4
-+	// Load args pointer first, before modifying SP
-+	MOVW libcArgs+0(FP), R0
-+
-+	// Save callee-saved registers R4-R7 and LR.
-+	// We use R4 for libcArgs pointer.
-+	// We use R5 for args pointer.
-+	// We use R6 for n, then reused for saving SP.
-+	// We use R7 for scratch.
-+	MOVM.DB.W [R4-R7, R14], (R13)
-+
-+	MOVW R0, R4 // Move libcArgs to R4
-+
-+	MOVW libcCallInfo_n(R4), R6
-+	MOVW libcCallInfo_args(R4), R5
-+	MOVW libcCallInfo_fn(R4), R12
-+
-+	CMP $4, R6
-+	BGT args_stack
-+
-+	CMP $0, R6
-+	BEQ call
-+	CMP $1, R6
-+	BEQ args_1
-+	CMP $2, R6
-+	BEQ args_2
-+	CMP $3, R6
-+	BEQ args_3
-+
-+args_4:
-+	MOVM.IA (R5), [R0, R1, R2, R3]
-+	B       call
-+
-+args_3:
-+	MOVM.IA (R5), [R0, R1, R2]
-+	B       call
-+
-+args_2:
-+	MOVM.IA (R5), [R0, R1]
-+	B       call
-+
-+args_1:
-+	MOVW (R5), R0
-+	B    call
-+
-+args_stack:
-+	// Calculate stack space needed: (n-4)*4
-+	SUB  $4, R6, R7
-+	MOVW R7, R2
-+	SLL  $2, R2     // bytes
-+
-+	// Save SP (R6 is free now, n no longer needed)
-+	MOVW R13, R6
-+
-+	// Allocate stack
-+	SUB R2, R13
-+	BIC $7, R13 // Align to 8 bytes
-+
-+	// Copy args
-+	ADD  $16, R5, R14 // Src = args + 16
-+	MOVW R13, R3      // Dst = SP
-+
-+copy_loop:
-+	MOVW.P 4(R14), R1 // read
-+	MOVW.P R1, 4(R3)  // write
-+	SUB    $1, R7
-+	CMP    $0, R7
-+	BNE    copy_loop
-+
-+	// Load first 4 args
-+	MOVM.IA (R5), [R0, R1, R2, R3]
-+
-+	// Reload fn
-+	MOVW libcCallInfo_fn(R4), R12
-+
-+	BL (R12)
-+
-+	// Restore SP
-+	MOVW R6, R13
-+	B    ret
-+
-+call:
-+	BL (R12)
-+
-+ret:
-+	MOVW R0, libcCallInfo_r1(R4)
-+	MOVW R1, libcCallInfo_r2(R4)
-+
-+	MOVM.IA.W (R13), [R4-R7, R14]
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
-new file mode 100644
-index 00000000000000..261a7e4cb90d56
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_arm64.s
-@@ -0,0 +1,97 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+	MOVD R0, 8(RSP)
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
-+	// Save original stack pointer
-+	MOVD RSP, R20
-+
-+	// Load pointer from stack (ABI0 calling convention)
-+	MOVD libcArgs+0(FP), R3
-+
-+	MOVD libcCallInfo_args(R3), R12
-+	MOVD libcCallInfo_fn(R3), R13
-+
-+	// Do we have more than 8 arguments?
-+	MOVD libcCallInfo_n(R3), R0
-+	CMP  $0, R0; BEQ _0args
-+	CMP  $1, R0; BEQ _1args
-+	CMP  $2, R0; BEQ _2args
-+	CMP  $3, R0; BEQ _3args
-+	CMP  $4, R0; BEQ _4args
-+	CMP  $5, R0; BEQ _5args
-+	CMP  $6, R0; BEQ _6args
-+	CMP  $7, R0; BEQ _7args
-+	CMP  $8, R0; BEQ _8args
-+
-+	// Reserve stack space for remaining args
-+	SUB $8, R0, R2
-+	ADD $1, R2, R3 // make even number of words for stack alignment
-+	AND $~1, R3
-+	LSL $3, R3
-+	SUB R3, RSP
-+
-+	// R4: size of stack arguments (n-8)*8
-+	// R5: &args[8]
-+	// R6: loop counter, from 0 to (n-8)*8
-+	// R7: scratch
-+	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
-+	SUB  $8, R0, R4
-+	LSL  $3, R4
-+	ADD  $(8*8), R12, R5
-+	MOVD $0, R6
-+	MOVD RSP, R8
-+
-+stackargs:
-+	MOVD (R6)(R5), R7
-+	MOVD R7, (R6)(R8)
-+	ADD  $8, R6
-+	CMP  R6, R4
-+	BNE  stackargs
-+
-+_8args:
-+	MOVD (7*8)(R12), R7
-+
-+_7args:
-+	MOVD (6*8)(R12), R6
-+
-+_6args:
-+	MOVD (5*8)(R12), R5
-+
-+_5args:
-+	MOVD (4*8)(R12), R4
-+
-+_4args:
-+	MOVD (3*8)(R12), R3
-+
-+_3args:
-+	MOVD (2*8)(R12), R2
-+
-+_2args:
-+	MOVD (1*8)(R12), R1
-+
-+_1args:
-+	MOVD (0*8)(R12), R0
-+
-+_0args:
-+
-+	BL (R13)
-+
-+	// Restore original stack pointer
-+	MOVD R20, RSP
-+
-+	MOVD libcArgs+0(FP), R3
-+	MOVD R0, libcCallInfo_r1(R3) // save r1
-+	MOVD R1, libcCallInfo_r2(R3) // save r2
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
-new file mode 100644
-index 00000000000000..83ab9979dfdbfe
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_loong64.s
-@@ -0,0 +1,116 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+	MOVV R4, 8(R3)
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
-+	// Load pointer from stack (ABI0 calling convention)
-+	MOVV libcArgs+0(FP), R12
-+
-+	// Save original stack pointer
-+	MOVV R3, R23
-+
-+	// Align stack to 16 bytes for C calling convention
-+	MOVV $-16, R15
-+	AND  R15, R3
-+
-+	MOVV libcCallInfo_args(R12), R13
-+	MOVV libcCallInfo_fn(R12), R14
-+
-+	// Do we have more than 8 arguments?
-+	MOVV libcCallInfo_n(R12), R4
-+	BEQ  R4, R0, _0args
-+	MOVV $1, R15
-+	BEQ  R4, R15, _1args
-+	MOVV $2, R15
-+	BEQ  R4, R15, _2args
-+	MOVV $3, R15
-+	BEQ  R4, R15, _3args
-+	MOVV $4, R15
-+	BEQ  R4, R15, _4args
-+	MOVV $5, R15
-+	BEQ  R4, R15, _5args
-+	MOVV $6, R15
-+	BEQ  R4, R15, _6args
-+	MOVV $7, R15
-+	BEQ  R4, R15, _7args
-+	MOVV $8, R15
-+	BEQ  R4, R15, _8args
-+
-+	// Reserve stack space for remaining args
-+	MOVV R4, R16
-+	ADDV $-8, R16 // R16 = n-8
-+	MOVV R16, R12 // R12 = n-8 (reuse R12, no longer need libcArgs)
-+	ADDV $1, R12  // R12 = (n-8)+1
-+	MOVV $-2, R15
-+	AND  R15, R12 // make even number of words for stack alignment
-+	SLLV $3, R12  // R12 = bytes to reserve
-+	SUBV R12, R3  // SP -= bytes
-+
-+	// R16: size of stack arguments (n-8)*8
-+	// R15: &args[8]
-+	// R17: loop counter, from 0 to (n-8)*8
-+	// R18: scratch
-+	// R19: copy of R3 (SP)
-+	// R20: scratch
-+	SLLV $3, R16     // R16 = (n-8)*8
-+	MOVV R13, R15
-+	ADDV $(8*8), R15 // R15 = args + 64 = &args[8]
-+	MOVV R0, R17     // R17 = 0 (loop counter)
-+	MOVV R3, R19     // R19 = SP copy
-+
-+stackargs:
-+	MOVV R15, R18
-+	ADDV R17, R18            // R18 = &args[8] + counter
-+	MOVV (R18), R18          // R18 = args[8 + counter/8]
-+	MOVV R19, R20
-+	ADDV R17, R20            // R20 = SP_copy + counter
-+	MOVV R18, (R20)          // stack[counter/8] = R18
-+	ADDV $8, R17             // counter += 8
-+	BNE  R17, R16, stackargs // while counter != (n-8)*8
-+
-+_8args:
-+	MOVV (7*8)(R13), R11
-+
-+_7args:
-+	MOVV (6*8)(R13), R10
-+
-+_6args:
-+	MOVV (5*8)(R13), R9
-+
-+_5args:
-+	MOVV (4*8)(R13), R8
-+
-+_4args:
-+	MOVV (3*8)(R13), R7
-+
-+_3args:
-+	MOVV (2*8)(R13), R6
-+
-+_2args:
-+	MOVV (1*8)(R13), R5
-+
-+_1args:
-+	MOVV (0*8)(R13), R4
-+
-+_0args:
-+
-+	CALL (R14)
-+
-+	// Restore original stack pointer
-+	MOVV R23, R3
-+
-+	MOVV libcArgs+0(FP), R12
-+	MOVV R4, libcCallInfo_r1(R12) // save r1
-+	MOVV R5, libcCallInfo_r2(R12) // save r2
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
-new file mode 100644
-index 00000000000000..59cfb27799734a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_others.s
-@@ -0,0 +1,7 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !loong64 && !ppc64le && !riscv64 && (!s390x || !go1.27)
-+
-+// This file silences errors about body-less functions.
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
-new file mode 100644
-index 00000000000000..a78a1ffca7bda7
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_ppc64le.s
-@@ -0,0 +1,141 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	// R3 already contains the libcArgs pointer from cgocall
-+	MOVD  LR, R0
-+	MOVD  R0, 16(R1)
-+	MOVDU R1, -32(R1)
-+	MOVD  R3, 32(R1)
-+	CALL  ·syscallNSystemStack(SB)
-+	ADD   $32, R1
-+	MOVD  16(R1), R0
-+	MOVD  R0, LR
-+	RET
-+
-+// PPC64LE ELFv2 ABI: R3-R10 args, R3-R4 return, R14-R31 callee-saved
-+// Go ABI: R3-R10, R14-R17 args, R20-R21 scratch, R30=g, R31=scratch
-+// We use R24-R28 which are callee-saved in both ABIs.
-+// Go frame: 48 locals + 32 linkage = 80 bytes. Locals start at 32(R1).
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $48-8
-+	// Save callee-saved registers we'll use
-+	MOVD R24, 32(R1)
-+	MOVD R25, 40(R1)
-+	MOVD R26, 48(R1)
-+	MOVD R27, 56(R1)
-+	MOVD R28, 64(R1)
-+
-+	// Load libcArgs pointer from stack (ABI0 calling convention)
-+	MOVD libcArgs+0(FP), R11
-+
-+	// Store values we need across the C call in callee-saved registers
-+	MOVD R1, R24                     // R24 = original SP
-+	MOVD R11, R25                    // R25 = libcArgs
-+	MOVD libcCallInfo_args(R11), R26 // R26 = args
-+	MOVD libcCallInfo_fn(R11), R27   // R27 = fn
-+	MOVD libcCallInfo_n(R11), R28    // R28 = n
-+
-+	// Do we have more than 8 arguments?
-+	CMP R28, $8
-+	BLE _allocsmall
-+
-+	// >8 args: allocate large frame ((n-8+1) & ~1) * 8 + 96
-+	SUB  $8, R28, R3
-+	ADD  $1, R3
-+	MOVD $~1, R4
-+	AND  R4, R3
-+	SLD  $3, R3
-+	ADD  $96, R3
-+	NEG  R3, R4
-+	ADD  R4, R24, R1
-+	MOVD $~15, R3
-+	AND  R3, R1      // 16-byte align
-+	MOVD R24, 0(R1)  // back chain
-+	MOVD R2, 24(R1)  // save TOC
-+
-+	// Copy args[8..n-1] to stack at offset 96
-+	MOVD $8, R3
-+
-+_stackargs:
-+	SLD  $3, R3, R5
-+	MOVD (R26)(R5), R6
-+	SUB  $8, R3, R7
-+	SLD  $3, R7
-+	ADD  $96, R7
-+	MOVD R6, (R1)(R7)
-+	ADD  $1, R3
-+	CMP  R3, R28
-+	BLT  _stackargs
-+	BR   _8args
-+
-+_allocsmall:
-+	// <=8 args: allocate minimum 96-byte C frame
-+	ADD  $-96, R24, R1
-+	MOVD $~15, R3
-+	AND  R3, R1
-+	MOVD R24, 0(R1)    // back chain
-+	MOVD R2, 24(R1)    // save TOC
-+
-+	// Branch to appropriate label based on arg count
-+	CMP R28, $0; BEQ _0args
-+	CMP R28, $1; BEQ _1args
-+	CMP R28, $2; BEQ _2args
-+	CMP R28, $3; BEQ _3args
-+	CMP R28, $4; BEQ _4args
-+	CMP R28, $5; BEQ _5args
-+	CMP R28, $6; BEQ _6args
-+	CMP R28, $7; BEQ _7args
-+
-+_8args:
-+	MOVD (7*8)(R26), R10
-+
-+_7args:
-+	MOVD (6*8)(R26), R9
-+
-+_6args:
-+	MOVD (5*8)(R26), R8
-+
-+_5args:
-+	MOVD (4*8)(R26), R7
-+
-+_4args:
-+	MOVD (3*8)(R26), R6
-+
-+_3args:
-+	MOVD (2*8)(R26), R5
-+
-+_2args:
-+	MOVD (1*8)(R26), R4
-+
-+_1args:
-+	MOVD (0*8)(R26), R3
-+
-+_0args:
-+	// ELFv2: function address in R12 and CTR
-+	MOVD R27, R12
-+	MOVD R12, CTR
-+	BL   (CTR)
-+
-+	// Restore TOC and stack pointer
-+	MOVD 24(R1), R2
-+	MOVD R24, R1
-+
-+	// Save return values
-+	MOVD R3, libcCallInfo_r1(R25)
-+	MOVD R4, libcCallInfo_r2(R25)
-+
-+	// Restore callee-saved registers
-+	MOVD 32(R1), R24
-+	MOVD 40(R1), R25
-+	MOVD 48(R1), R26
-+	MOVD 56(R1), R27
-+	MOVD 64(R1), R28
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
-new file mode 100644
-index 00000000000000..6ff0ddd2922d8b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_riscv64.s
-@@ -0,0 +1,109 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+	MOV  A0, 8(X2)
-+	CALL ·syscallNSystemStack(SB)
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
-+	// Load pointer from stack (ABI0 calling convention)
-+	MOV libcArgs+0(FP), X5
-+
-+	// Save original stack pointer
-+	MOV X2, X20
-+
-+	// Align stack to 16 bytes for C calling convention
-+	ANDI $-16, X2, X2
-+
-+	MOV libcCallInfo_args(X5), X30
-+	MOV libcCallInfo_fn(X5), X29
-+
-+	// Do we have more than 8 arguments?
-+	MOV libcCallInfo_n(X5), X10
-+	BEQ X10, ZERO, _0args
-+	MOV $1, X6
-+	BEQ X10, X6, _1args
-+	MOV $2, X6
-+	BEQ X10, X6, _2args
-+	MOV $3, X6
-+	BEQ X10, X6, _3args
-+	MOV $4, X6
-+	BEQ X10, X6, _4args
-+	MOV $5, X6
-+	BEQ X10, X6, _5args
-+	MOV $6, X6
-+	BEQ X10, X6, _6args
-+	MOV $7, X6
-+	BEQ X10, X6, _7args
-+	MOV $8, X6
-+	BEQ X10, X6, _8args
-+
-+	// Reserve stack space for remaining args
-+	ADDI $-8, X10, X7
-+	ADDI $1, X7, X5   // make even number of words for stack alignment
-+	ANDI $-2, X5, X5
-+	SLLI $3, X5, X5
-+	SUB  X5, X2, X2
-+
-+	// X6: size of stack arguments (n-8)*8
-+	// X7: &args[8]
-+	// X8: loop counter, from 0 to (n-8)*8
-+	// X9: scratch
-+	// X28: copy of X2 (SP)
-+	ADDI $-8, X10, X6
-+	SLLI $3, X6, X6
-+	ADDI $(8*8), X7, X7
-+	MOV  ZERO, X8
-+	MOV  X2, X28
-+
-+stackargs:
-+	ADD  X8, X7, X9
-+	MOV  (X9), X9
-+	ADD  X8, X28, X31
-+	MOV  X9, (X31)
-+	ADDI $8, X8, X8
-+	BNE  X8, X6, stackargs
-+
-+_8args:
-+	MOV (7*8)(X30), X17
-+
-+_7args:
-+	MOV (6*8)(X30), X16
-+
-+_6args:
-+	MOV (5*8)(X30), X15
-+
-+_5args:
-+	MOV (4*8)(X30), X14
-+
-+_4args:
-+	MOV (3*8)(X30), X13
-+
-+_3args:
-+	MOV (2*8)(X30), X12
-+
-+_2args:
-+	MOV (1*8)(X30), X11
-+
-+_1args:
-+	MOV (0*8)(X30), X10
-+
-+_0args:
-+
-+	CALL X29
-+
-+	// Restore original stack pointer
-+	MOV X20, X2
-+
-+	MOV libcArgs+0(FP), X5
-+	MOV X10, libcCallInfo_r1(X5) // save r1
-+	MOV X11, libcCallInfo_r2(X5) // save r2
-+
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
-new file mode 100644
-index 00000000000000..0fbccc3731dae4
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/asm_s390x.s
-@@ -0,0 +1,117 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build go1.27 && !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+// S390X ELF ABI:
-+// - Args in R2-R6, float args in F0, F2, F4, F6
-+// - Return values in R2, R3 (and F0 for floats)
-+// - Callee-saved: R6-R13, R15, F8-F15
-+// - R14 is link register (return address)
-+// - R15 is stack pointer
-+// - Standard frame: 160 bytes minimum with register save area at 48(R15)
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
-+	// R2 already contains the libcArgs pointer from cgocall
-+	// Save callee-saved registers to caller's save area
-+	STMG R6, R15, 48(R15)
-+	MOVD R15, R1
-+	SUB  $32, R15
-+	MOVD R1, 0(R15)
-+	MOVD R2, 8(R15)
-+	BL   ·syscallNSystemStack(SB)
-+	ADD  $32, R15
-+	LMG  48(R15), R6, R15
-+	RET
-+
-+TEXT ·syscallNAsm(SB), NOSPLIT, $64-8
-+	// Save callee-saved registers we'll use (R6-R11)
-+	STMG R6, R11, 8(R15)
-+
-+	// Load libcArgs pointer from stack (ABI0 calling convention)
-+	MOVD libcArgs+0(FP), R11
-+
-+	// Store values we need across the C call in callee-saved registers
-+	MOVD R15, R7                    // R7 = original SP
-+	MOVD R11, R8                    // R8 = libcArgs
-+	MOVD libcCallInfo_args(R11), R9 // R9 = args
-+	MOVD libcCallInfo_fn(R11), R10  // R10 = fn
-+	MOVD libcCallInfo_n(R11), R6    // R6 = n
-+
-+	// Do we have more than 5 arguments?
-+	CMPBLE R6, $5, _allocsmall
-+
-+	// >5 args: allocate frame for stack args ((n-5+1) & ~1) * 8 + 160
-+	MOVD R6, R1
-+	SUB  $5, R1
-+	ADD  $1, R1
-+	MOVD $~1, R0
-+	AND  R0, R1
-+	SLD  $3, R1
-+	ADD  $160, R1
-+	SUB  R1, R7, R15
-+	MOVD $~15, R0
-+	AND  R0, R15     // 16-byte align
-+	MOVD R7, 0(R15)  // back chain
-+
-+	// Copy args[5..n-1] to stack at offset 160
-+	MOVD $5, R1
-+
-+_stackargs:
-+	SLD  $3, R1, R3
-+	MOVD (R9)(R3*1), R0
-+	SUB  $5, R1, R4
-+	SLD  $3, R4
-+	ADD  $160, R4
-+	MOVD R0, (R15)(R4*1)
-+	ADD  $1, R1
-+	CMP  R1, R6
-+	BLT  _stackargs
-+	BR   _5args
-+
-+_allocsmall:
-+	// <=5 args: allocate minimum 160-byte C frame
-+	SUB  $160, R7, R15
-+	MOVD $~15, R0
-+	AND  R0, R15
-+	MOVD R7, 0(R15)    // back chain
-+
-+	// Branch to appropriate label based on arg count
-+	CMPBEQ R6, $0, _0args
-+	CMPBEQ R6, $1, _1args
-+	CMPBEQ R6, $2, _2args
-+	CMPBEQ R6, $3, _3args
-+	CMPBEQ R6, $4, _4args
-+
-+_5args:
-+	MOVD (4*8)(R9), R6
-+
-+_4args:
-+	MOVD (3*8)(R9), R5
-+
-+_3args:
-+	MOVD (2*8)(R9), R4
-+
-+_2args:
-+	MOVD (1*8)(R9), R3
-+
-+_1args:
-+	MOVD (0*8)(R9), R2
-+
-+_0args:
-+	BL R10
-+
-+	// Restore stack pointer
-+	MOVD R7, R15
-+
-+	// Save return values
-+	MOVD R2, libcCallInfo_r1(R8)
-+	MOVD R3, libcCallInfo_r2(R8)
-+
-+	// Restore callee-saved registers (R6-R11)
-+	LMG 8(R15), R6, R11
-+	RET
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
-new file mode 100644
-index 00000000000000..e94cca9e27e30a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/dl.h
-@@ -0,0 +1,12 @@
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// OpenSSL C API. Run "go generate ." to regenerate the bindings.
-+
-+#ifndef _GO_DL_SHIMS_H // only include this header once
-+#define _GO_DL_SHIMS_H
-+
-+void *dlopen(const char *path, int flags);
-+int dlclose(void *handle);
-+void *dlsym(void *handle, const char *symbol);
-+char *dlerror(void);
-+
-+#endif // _GO_DL_SHIMS_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
-new file mode 100644
-index 00000000000000..4b8fd49edd2d40
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors.go
-@@ -0,0 +1,34 @@
-+package ossl
-+
-+import (
-+	"errors"
-+	"unsafe"
-+)
-+
-+// newMkcgoErr constructs an error from the given message and OpenSSL error state.
-+func newMkcgoErr(msg string, state uintptr) error {
-+	if state == 0 {
-+		// No error
-+		return nil
-+	}
-+	bio := BIO_PTR(state)
-+	defer BIO_free(bio)
-+	// Retrieve pointer to data, which is owned by bio.
-+	var data *byte
-+	n := BIO_ctrl(bio, BIO_CTRL_INFO, 0, unsafe.Pointer(&data))
-+	if n == 0 {
-+		// If no errors in queue, return simple message
-+		return errors.New(msg + " failed")
-+	}
-+	const extra = "\nopenssl error(s):\n"
-+	buf := make([]byte, len(msg)+len(extra)+int(n))
-+	copy(buf, msg)
-+	copy(buf[len(msg):], extra)
-+	copy(buf[len(msg)+len(extra):], unsafe.Slice(data, n))
-+	// Remove trailing line jump if present.
-+	if buf[len(buf)-1] == '\n' {
-+		buf = buf[:len(buf)-1]
-+	}
-+	// Avoid an allocation by constructing the string directly from the byte slice.
-+	return errors.New(unsafe.String(unsafe.SliceData(buf), len(buf)))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
-new file mode 100644
-index 00000000000000..f7678a67c0231a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_cgo.go
-@@ -0,0 +1,30 @@
-+package ossl
-+
-+/*
-+#include "zossl.h"
-+
-+// Force mkcgo_err_retrieve to be stack-guarded,
-+// even when it doesn't actually need it.
-+// This is necessary to ensure Go binaries built
-+// with -fstack-protector-strong comply with BinSkim BA3003,
-+// so that at least one function in the binary uses __stack_chk_guard.
-+// See https://github.com/microsoft/go/issues/2240.
-+
-+#define MKCGO_STACK_PROTECT
-+
-+#if defined(__has_attribute)
-+#if __has_attribute(stack_protect)
-+#undef MKCGO_STACK_PROTECT
-+#define MKCGO_STACK_PROTECT __attribute__((stack_protect))
-+#endif
-+#endif
-+
-+// mkcgo_err_retrieve retrieves the error state from OpenSSL.
-+uintptr_t MKCGO_STACK_PROTECT mkcgo_err_retrieve() {
-+	// BIO operations using BIO_s_mem should not fail.
-+	_BIO_PTR bio = _mkcgo_BIO_new(_mkcgo_BIO_s_mem(), NULL);
-+	_mkcgo_ERR_print_errors(bio);
-+	return (uintptr_t)bio;
-+}
-+*/
-+import "C"
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
-new file mode 100644
-index 00000000000000..822ff8fbbdf9a1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/errors_nocgo.go
-@@ -0,0 +1,16 @@
-+//go:build !cgo
-+
-+package ossl
-+
-+// retrieveErrorState retrieves errors from the OpenSSL error queue.
-+// It might run on the system stack, so it can't allocate Go memory
-+// nor grow the stack over the nosplit limit.
-+//
-+//go:nosplit
-+func retrieveErrorState() uintptr {
-+	// BIO operations using BIO_s_mem should not fail.
-+	smem := syscallNRaw(_mkcgo_BIO_s_mem)
-+	bio := syscallNRaw(_mkcgo_BIO_new, smem)
-+	syscallNRaw(_mkcgo_ERR_print_errors, bio)
-+	return bio
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
-new file mode 100644
-index 00000000000000..9d38464e9fb964
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/ossl.go
-@@ -0,0 +1,59 @@
-+// Package ossl provides a Go interface to OpenSSL.
-+package ossl
-+
-+//go:generate go run ../../cmd/mkcgo -out zossl.go -mode dynload -package ossl shims.h
-+//go:generate go run ../../cmd/mkcgo -out zossl.go -nocgo -mode dynload -package ossl shims.h
-+//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package ossl -tags unix dl.h
-+
-+import "unsafe"
-+
-+const _OSSL_PARAM_UNMODIFIED uint = uint(^uintptr(0))
-+
-+// OSSL_PARAM is a structure to pass or request object parameters.
-+// https://docs.openssl.org/3.0/man3/OSSL_PARAM/.
-+type OSSL_PARAM struct {
-+	Key        *byte
-+	DataType   uint32
-+	Data       unsafe.Pointer
-+	DataSize   uint
-+	ReturnSize uint
-+}
-+
-+func ossl_param_construct(key *byte, dataType uint32, data unsafe.Pointer, dataSize int) OSSL_PARAM {
-+	return OSSL_PARAM{
-+		Key:        key,
-+		DataType:   dataType,
-+		Data:       data,
-+		DataSize:   uint(dataSize),
-+		ReturnSize: _OSSL_PARAM_UNMODIFIED,
-+	}
-+}
-+
-+func OSSL_PARAM_construct_octet_string(key *byte, data unsafe.Pointer, dataSize int) OSSL_PARAM {
-+	return ossl_param_construct(key, OSSL_PARAM_OCTET_STRING, data, dataSize)
-+}
-+
-+func OSSL_PARAM_construct_int32(key *byte, data *int32) OSSL_PARAM {
-+	return ossl_param_construct(key, OSSL_PARAM_INTEGER, unsafe.Pointer(data), 4)
-+}
-+
-+func OSSL_PARAM_construct_end() OSSL_PARAM {
-+	return OSSL_PARAM{}
-+}
-+
-+func OSSL_PARAM_modified(param *OSSL_PARAM) bool {
-+	// If ReturnSize is not set, the parameter has not been modified.
-+	return param != nil && param.ReturnSize != _OSSL_PARAM_UNMODIFIED
-+}
-+
-+// goString converts a C string (byte pointer) to a Go string
-+func goString(p *byte) string {
-+	if p == nil {
-+		return ""
-+	}
-+	end := unsafe.Pointer(p)
-+	for *(*byte)(end) != 0 {
-+		end = unsafe.Add(end, 1)
-+	}
-+	return string(unsafe.Slice(p, uintptr(end)-uintptr(unsafe.Pointer(p))))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-new file mode 100644
-index 00000000000000..7c71f0d811fe80
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/shims.h
-@@ -0,0 +1,442 @@
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// OpenSSL C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zossl.h" instead.
-+
-+#ifndef _GO_OSSL_SHIMS_H // only include this header once
-+#define _GO_OSSL_SHIMS_H
-+
-+#include <stdlib.h> // size_t
-+#include <stdint.h> // uint64_t
-+
-+// The following includes are used by the checkheader tool.
-+// #include <openssl/bio.h>
-+// #include <openssl/crypto.h>
-+// #include <openssl/evp.h>
-+// #include <openssl/ec.h>
-+// #include <openssl/kdf.h>
-+// #include <openssl/obj_mac.h>
-+// #include <openssl/rsa.h>
-+// #include <openssl/err.h>
-+// #include <openssl/hmac.h>
-+// #include <openssl/rand.h>
-+// #include <openssl/dsa.h>
-+// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
-+// #include <openssl/core_names.h>
-+// #include <openssl/provider.h>
-+// #include <openssl/param_build.h>
-+// #include <openssl/params.h>
-+// #endif
-+// #if OPENSSL_VERSION_NUMBER < 0x10100000L
-+// #include <openssl/bn.h>
-+// #endif
-+
-+enum {
-+	_POINT_CONVERSION_UNCOMPRESSED = 4,
-+
-+	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
-+	_OPENSSL_INIT_ADD_ALL_CIPHERS     = 0x00000004,
-+	_OPENSSL_INIT_ADD_ALL_DIGESTS     = 0x00000008,
-+	_OPENSSL_INIT_LOAD_CONFIG         = 0x00000040,
-+
-+	_EVP_CTRL_GCM_GET_TAG = 0x10,
-+	_EVP_CTRL_GCM_SET_TAG = 0x11,
-+	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
-+	_EVP_CTRL_AEAD_GET_TAG = 0x10,
-+	_EVP_CTRL_AEAD_SET_TAG = 0x11,
-+	_EVP_PKEY_CTRL_MD     = 1,
-+	_EVP_PKEY_RSA         = 6,
-+	_EVP_PKEY_EC          = 408,
-+	_EVP_PKEY_TLS1_PRF    = 1021,
-+	_EVP_PKEY_X25519      = 1034,
-+	_EVP_PKEY_HKDF        = 1036,
-+	_EVP_PKEY_ED25519     = 1087,
-+	_EVP_PKEY_DSA         = 116,
-+    _EVP_PKEY_MLKEM_768  = 1455,
-+    _EVP_PKEY_MLKEM_1024 = 1456,
-+    _EVP_PKEY_ML_DSA_44  = 1457,
-+    _EVP_PKEY_ML_DSA_65  = 1458,
-+    _EVP_PKEY_ML_DSA_87  = 1459,
-+	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
-+	_EVP_MAX_MD_SIZE    = 64,
-+
-+	_EVP_PKEY_PUBLIC_KEY = 0x86,
-+	_EVP_PKEY_KEYPAIR    = 0x87,
-+
-+	_EVP_MD_CTRL_XOF_LEN = 0x3,
-+
-+	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
-+
-+	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
-+	_EVP_KDF_HKDF_MODE_EXPAND_ONLY  = 2,
-+
-+	_EVP_PKEY_CTRL_TLS_MD     = 0x1000,
-+	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
-+	_EVP_PKEY_CTRL_TLS_SEED   = 0x1002,
-+	_EVP_PKEY_CTRL_HKDF_MD    = 0x1003,
-+	_EVP_PKEY_CTRL_HKDF_SALT  = 0x1004,
-+	_EVP_PKEY_CTRL_HKDF_KEY   = 0x1005,
-+	_EVP_PKEY_CTRL_HKDF_INFO  = 0x1006,
-+	_EVP_PKEY_CTRL_HKDF_MODE  = 0x1007,
-+
-+	_NID_X9_62_prime256v1 = 415,
-+	_NID_secp224r1        = 713,
-+	_NID_secp384r1        = 715,
-+	_NID_secp521r1        = 716,
-+
-+	_NID_ML_KEM_768 = 1455,
-+	_NID_ML_KEM_1024 = 1456,
-+	_NID_ML_DSA_44 = 1457,
-+	_NID_ML_DSA_65 = 1458,
-+	_NID_ML_DSA_87 = 1459,
-+
-+	_RSA_PKCS1_PADDING                 = 1,
-+	_RSA_NO_PADDING                    = 3,
-+	_RSA_PKCS1_OAEP_PADDING            = 4,
-+	_RSA_PKCS1_PSS_PADDING             = 6,
-+	_RSA_PSS_SALTLEN_DIGEST            = -1,
-+	_RSA_PSS_SALTLEN_AUTO              = -2,
-+	_RSA_PSS_SALTLEN_MAX_SIGN          = -2,
-+	_RSA_PSS_SALTLEN_MAX               = -3,
-+	_EVP_PKEY_CTRL_RSA_PADDING         = 0x1001,
-+	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN     = 0x1002,
-+	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS     = 0x1003,
-+	_EVP_PKEY_CTRL_RSA_MGF1_MD         = 0x1005,
-+	_EVP_PKEY_CTRL_RSA_OAEP_MD         = 0x1009,
-+	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
-+
-+	_OSSL_PARAM_INTEGER = 1,
-+	_OSSL_PARAM_OCTET_STRING = 5,
-+
-+	BIO_CTRL_INFO = 3,
-+};
-+
-+typedef void* _OPENSSL_INIT_SETTINGS_PTR;
-+typedef void* _OSSL_LIB_CTX_PTR;
-+typedef void* _OSSL_PROVIDER_PTR;
-+typedef void* _ENGINE_PTR;
-+typedef void* _EVP_PKEY_PTR;
-+typedef void* _EVP_PKEY_CTX_PTR;
-+typedef void* _EVP_MD_PTR;
-+typedef void* _EVP_MD_CTX_PTR;
-+typedef void* _HMAC_CTX_PTR;
-+typedef void* _EVP_CIPHER_PTR;
-+typedef void* _EVP_CIPHER_CTX_PTR;
-+typedef void* _EC_KEY_PTR;
-+typedef void* _EC_POINT_PTR;
-+typedef void* _EC_GROUP_PTR;
-+typedef void* _RSA_PTR;
-+typedef void* _BIGNUM_PTR;
-+typedef void* _BN_CTX_PTR;
-+typedef void* _EVP_MAC_PTR;
-+typedef void* _EVP_MAC_CTX_PTR;
-+typedef void* _OSSL_PARAM_BLD_PTR;
-+typedef void* _OSSL_PARAM_PTR;
-+typedef void* _EVP_SIGNATURE_PTR;
-+typedef void* _EVP_KEYMGMT_PTR;
-+typedef void* _DSA_PTR;
-+typedef void* _EVP_KDF_PTR;
-+typedef void* _EVP_KDF_CTX_PTR;
-+typedef void* _BIO_METHOD_PTR;
-+typedef void* _BIO_PTR;
-+typedef int point_conversion_form_t;
-+
-+// Tags used by mkcgo to determine which OpenSSL version each function is available in:
-+// - no tag: available in all supported versions (OpenSSL 1.1.1+)
-+// - legacy_1: Only OpenSSL 1
-+// - 3: OpenSSL 3.0 or later
-+// - 33: OpenSSL 3.3 or later
-+
-+// The noescape/nocallback attributes are performance optimizations.
-+// Only add functions that have been observed to benefit from these
-+// directives, not every function that is merely expected to meet
-+// the noescape/nocallback criteria.
-+
-+// BIO API
-+const _BIO_METHOD_PTR BIO_s_mem(void) __attribute__((tag(""),tag("init_3"),noerror));
-+_BIO_PTR BIO_new(const _BIO_METHOD_PTR type) __attribute__((tag(""),tag("init_3")));
-+int BIO_free(_BIO_PTR a) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
-+long BIO_ctrl(_BIO_PTR bp, int cmd, long larg, void *parg) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
-+
-+// ERR API
-+unsigned long ERR_peek_error(void) __attribute__((noerror));
-+void ERR_print_errors(_BIO_PTR bp) __attribute__((tag(""),tag("init_3"),noescape,nocallback));
-+
-+// OPENSSL API
-+const char *OpenSSL_version(int type) __attribute__((noerror));
-+void OPENSSL_init(void);
-+int OPENSSL_init_crypto(uint64_t ops, const _OPENSSL_INIT_SETTINGS_PTR settings);
-+unsigned long OpenSSL_version_num(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_major(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_minor(void) __attribute__((tag("version"),optional,noerror));
-+unsigned int OPENSSL_version_patch(void) __attribute__((tag("version"),optional,noerror));
-+
-+// CRYPTO API
-+void *CRYPTO_malloc(size_t num, const char *file, int line);
-+void CRYPTO_free(void *str, const char *file, int line);
-+
-+// FIPS API
-+int FIPS_mode(void) __attribute__((tag("legacy_1"),tag("init_1"),noerror));
-+int FIPS_mode_set(int r) __attribute__((tag("legacy_1"),tag("init_1")));
-+
-+// EVP Config API
-+int EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR libctx) __attribute__((tag("3"),tag("init_3"),noerror));
-+int EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR libctx, int enable) __attribute__((tag("3")));
-+
-+// OSSL_PROVIDER API
-+int OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR libctx, const char *name) __attribute__((tag("3"),noerror));
-+_OSSL_PROVIDER_PTR OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks) __attribute__((tag("3")));
-+const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
-+
-+// RAND API
-+int RAND_bytes(unsigned char *arg0, int arg1) __attribute__((noescape,nocallback,slice("arg0","arg1")));
-+
-+// EVP_MD API
-+_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
-+void EVP_MD_free(_EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3")));
-+const char *EVP_MD_get0_name(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
-+int EVP_MD_get_type(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
-+const _OSSL_PROVIDER_PTR EVP_MD_get0_provider(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3"),noerror));
-+int EVP_MD_get_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_size"),noerror));
-+int EVP_MD_get_block_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_block_size"),noerror));
-+const _EVP_MD_PTR EVP_md5_sha1(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_ripemd160(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_md4(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_md5(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha1(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha224(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((noerror));
-+const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((noerror));
-+
-+_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
-+void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
-+int EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR ctx, int cmd, int p1, void *p2);
-+int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
-+const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
-+const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
-+int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
-+int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md","size")));
-+int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
-+int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
-+int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
-+int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice("md","s")));
-+int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t mdlen) __attribute__((tag("33"),noescape,nocallback,slice("md","mdlen")));
-+int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t outlen) __attribute__((tag("33"),optional,noescape,nocallback,slice("out","outlen")));
-+int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((noescape,nocallback,slice("sigret","siglen"),slice("tbs","tbslen")));
-+int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen) __attribute__((slice("sig","siglen")));
-+int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
-+int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen) __attribute__((slice("sig","siglen")));
-+int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sigret","siglen"),slice("tbs","tbslen")));
-+
-+// HMAC API
-+int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
-+int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
-+int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
-+
-+_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
-+int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1"),noescape,nocallback));
-+void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1"),noescape,nocallback));
-+
-+// EVP_CIPHER API
-+_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+const char *EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_128_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_192_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_ctr(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_aes_256_gcm(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
-+const _EVP_CIPHER_PTR EVP_chacha20_poly1305(void) __attribute__((optional,noerror));
-+int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
-+
-+_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
-+int EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR x, int padding);
-+int EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR x, int keylen);
-+void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
-+int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
-+int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
-+int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
-+int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
-+int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback,slice("out","outl")));
-+int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
-+int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
-+int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback,slice("outm","outl")));
-+
-+// EVP_PKEY API
-+_EVP_PKEY_PTR EVP_PKEY_new(void);
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
-+_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
-+int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
-+int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
-+void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
-+_RSA_PTR EVP_PKEY_get1_RSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
-+_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3"),slice("pub","publen")));
-+size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
-+int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3"),noescape,nocallback));
-+int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3"),slice("buf","buf_len")));
-+int EVP_PKEY_up_ref(_EVP_PKEY_PTR key);
-+int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
-+int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int labellen) __attribute__((tag("3"),slice("label","labellen")));
-+int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *publen) __attribute__((noescape,nocallback,slice("pub","publen")));
-+int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *privlen) __attribute__((noescape,nocallback,slice("priv","privlen")));
-+int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
-+int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey) __attribute__((noescape,nocallback));
-+int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
-+int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
-+int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
-+int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sig","siglen"),slice("tbs","tbslen")));
-+int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
-+int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
-+int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback,slice("key","keylen")));
-+int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
-+
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
-+_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
-+void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
-+int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
-+int EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
-+int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
-+int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
-+int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
-+int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
-+
-+// RSA API
-+_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
-+void RSA_free(_RSA_PTR arg0) __attribute__((tag("legacy_1")));
-+void RSA_get0_factors(const _RSA_PTR rsa, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_factors(_RSA_PTR rsa, _BIGNUM_PTR p, _BIGNUM_PTR q) __attribute__((tag("legacy_1")));
-+void RSA_get0_crt_params(const _RSA_PTR r, const _BIGNUM_PTR *dmp1, const _BIGNUM_PTR *dmq1, const _BIGNUM_PTR *iqmp) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_crt_params(_RSA_PTR rsa, _BIGNUM_PTR dmp1, _BIGNUM_PTR dmp2, _BIGNUM_PTR iqmp) __attribute__((tag("legacy_1")));
-+void RSA_get0_key(const _RSA_PTR rsa, const _BIGNUM_PTR *n, const _BIGNUM_PTR *e, const _BIGNUM_PTR *d) __attribute__((tag("legacy_1"),noerror));
-+int RSA_set0_key(_RSA_PTR r, _BIGNUM_PTR n, _BIGNUM_PTR e, _BIGNUM_PTR d) __attribute__((tag("legacy_1")));
-+
-+// BIGNUM API
-+_BIGNUM_PTR BN_new(void);
-+void BN_free(_BIGNUM_PTR arg0);
-+void BN_clear(_BIGNUM_PTR arg0);
-+void BN_clear_free(_BIGNUM_PTR arg0);
-+int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
-+_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2) __attribute__((slice("arg0","arg1")));
-+_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int slen, _BIGNUM_PTR ret) __attribute__((slice("s","slen")));
-+int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
-+int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
-+
-+// EC API
-+int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
-+int EC_KEY_set_public_key(_EC_KEY_PTR key, const _EC_POINT_PTR pub) __attribute__((tag("legacy_1")));
-+void EC_KEY_free(_EC_KEY_PTR arg0) __attribute__((tag("legacy_1")));
-+const _EC_GROUP_PTR EC_KEY_get0_group(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+const _BIGNUM_PTR EC_KEY_get0_private_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+const _EC_POINT_PTR EC_KEY_get0_public_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
-+_EC_KEY_PTR EC_KEY_new_by_curve_name(int arg0) __attribute__((tag("legacy_1")));
-+int EC_KEY_set_private_key(_EC_KEY_PTR arg0, const _BIGNUM_PTR arg1) __attribute__((tag("legacy_1")));
-+int EC_KEY_check_key(const _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
-+_EC_POINT_PTR EC_POINT_new(const _EC_GROUP_PTR arg0);
-+void EC_POINT_free(_EC_POINT_PTR arg0);
-+int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
-+int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
-+int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
-+size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
-+int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
-+_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
-+void EC_GROUP_free(_EC_GROUP_PTR group);
-+
-+// EVP_MAC API
-+_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
-+int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3"),noescape,nocallback));
-+_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
-+int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback,slice("key","keylen")));
-+int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3"),noescape,nocallback,slice("data","datalen")));
-+int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3"),noescape,nocallback,slice("out","outsize")));
-+
-+// OSSL_PARAM API
-+void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
-+const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
-+_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3"),noerror));
-+void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
-+_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
-+int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
-+int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
-+int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
-+
-+// EVP_SIGNATURE API
-+_EVP_SIGNATURE_PTR EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+void EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR signature) __attribute__((tag("3")));
-+
-+// DSA API
-+_DSA_PTR DSA_new(void) __attribute__((tag("legacy_1")));
-+void DSA_free(_DSA_PTR r) __attribute__((tag("legacy_1")));
-+int DSA_generate_key(_DSA_PTR a) __attribute__((tag("legacy_1")));
-+void DSA_get0_pqg(const _DSA_PTR d, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q, const _BIGNUM_PTR *g) __attribute__((tag("legacy_1")));
-+int DSA_set0_pqg(_DSA_PTR d, _BIGNUM_PTR p, _BIGNUM_PTR q, _BIGNUM_PTR g) __attribute__((tag("legacy_1")));
-+void DSA_get0_key(const _DSA_PTR d, const _BIGNUM_PTR *pub_key, const _BIGNUM_PTR *priv_key) __attribute__((tag("legacy_1")));
-+int DSA_set0_key(_DSA_PTR d, _BIGNUM_PTR pub_key, _BIGNUM_PTR priv_key) __attribute__((tag("legacy_1")));
-+
-+// EVP_KDF API
-+_EVP_KDF_PTR EVP_KDF_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
-+void EVP_KDF_free(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
-+_EVP_KDF_CTX_PTR EVP_KDF_CTX_new(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
-+int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
-+size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
-+int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),slice("key","keylen")));
-+int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out) __attribute__((slice("pass","passlen"),slice("salt","saltlen"),slice("out","keylen")));
-+
-+// OBJ API
-+const char *OBJ_nid2sn(int n) __attribute__((noerror));
-+
-+// EVP KEM API for ML-KEM (OpenSSL 3.x)
-+_EVP_KEYMGMT_PTR EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3"),optional));
-+void EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR keymgmt) __attribute__((tag("3")));
-+int EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *wrappedkey, size_t *wrappedkeylen, unsigned char *genkey, size_t *genkeylen) __attribute__((tag("3")));
-+int EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
-+int EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *genkey, size_t *genkeylen, const unsigned char *wrappedkey, size_t wrappedkeylen) __attribute__((tag("3")));
-+
-+#endif // _GO_OSSL_SHIMS_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
-new file mode 100644
-index 00000000000000..0e3e6ca7d87db2
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo.go
-@@ -0,0 +1,84 @@
-+//go:build !cgo
-+
-+package ossl
-+
-+import (
-+	"unsafe"
-+)
-+
-+//go:linkname runtime_cgocall runtime.cgocall
-+
-+//go:noescape
-+func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
-+
-+//go:linkname noescape
-+//go:nosplit
-+func noescape(p unsafe.Pointer) unsafe.Pointer {
-+	x := uintptr(p)
-+	return unsafe.Pointer(x ^ 0)
-+}
-+
-+type libcCallInfo struct {
-+	fn      uintptr
-+	n       uintptr // number of parameters
-+	args    uintptr // parameters
-+	r1, r2  uintptr // return values
-+	errType uintptr
-+}
-+
-+//go:noescape
-+func syscallNAsm(libcArgs *libcCallInfo)
-+
-+// syscallNSystemStack performs a syscall on the system stack.
-+// It can't allocate Go memory nor grow the stack over the nosplit limit.
-+//
-+//go:nosplit
-+func syscallNSystemStack(libcArgs *libcCallInfo) {
-+	if libcArgs.errType != 0 {
-+		libcArgs.n--
-+	}
-+	syscallNAsm(libcArgs)
-+	if libcArgs.errType != 0 {
-+		_mkcgo_error_check(libcArgs.errType, libcArgs.r1, libcArgs.args, libcArgs.n)
-+	}
-+}
-+
-+var syscallNSystemStack_trampoline byte
-+var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
-+
-+// syscallN performs a syscall with the given function and arguments.
-+//
-+// All its parameters and return values must be uintptr in order
-+// for the Go compiler to automatically set the //go:uintptrkeepalive
-+// directive (which we can't set manually here).
-+// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
-+//
-+//go:nosplit
-+func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	libcArgs := libcCallInfo{
-+		fn:      fn,
-+		n:       uintptr(len(args)),
-+		errType: errType,
-+	}
-+	if libcArgs.n != 0 {
-+		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
-+	}
-+	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
-+	return libcArgs.r1, libcArgs.r2
-+}
-+
-+// syscallNRaw performs a syscall with the given function and arguments,
-+// without any error checking nor switching to the system stack.
-+//
-+//go:nosplit
-+func syscallNRaw(fn uintptr, args ...uintptr) uintptr {
-+	libcArgs := libcCallInfo{
-+		fn: fn,
-+		n:  uintptr(len(args)),
-+	}
-+	if libcArgs.n != 0 {
-+		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
-+	}
-+	syscallNAsm(&libcArgs)
-+	return libcArgs.r1
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
-new file mode 100644
-index 00000000000000..c5115146e74dc5
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_darwin.go
-@@ -0,0 +1,5 @@
-+//go:build !cgo
-+
-+package ossl
-+
-+//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
-new file mode 100644
-index 00000000000000..c16ed6018f87c1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_freebsd.go
-@@ -0,0 +1,5 @@
-+//go:build !cgo
-+
-+package ossl
-+
-+//go:cgo_import_dynamic _ _ "libc.so.7"
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
-new file mode 100644
-index 00000000000000..9a5cf6f78a7b5b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_linux.go
-@@ -0,0 +1,5 @@
-+//go:build !cgo
-+
-+package ossl
-+
-+//go:cgo_import_dynamic _ _ "libdl.so.2"
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
-new file mode 100644
-index 00000000000000..5bdbec31d8f2ce
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_unix.go
-@@ -0,0 +1,20 @@
-+//go:build !cgo && unix && (go1.27 || !s390x)
-+
-+package ossl
-+
-+import (
-+	"unsafe"
-+
-+	_ "github.com/golang-fips/openssl/v2/internal/fakecgo"
-+)
-+
-+func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
-+	r0 := Dlsym(handle, unsafe.StringData(symbol))
-+	if r0 == nil {
-+		if !optional {
-+			panic("cannot get required symbol " + symbol)
-+		}
-+		return 0
-+	}
-+	return uintptr(r0)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
-new file mode 100644
-index 00000000000000..48640cdcbf558f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/syscall_nocgo_windows.go
-@@ -0,0 +1,22 @@
-+//go:build !cgo && windows
-+
-+package ossl
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
-+
-+var modkernel32 = syscall.NewLazyDLL("kernel32.dll")
-+var procGetProcAddress = modkernel32.NewProc("GetProcAddress")
-+
-+func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
-+	r0, _, err := syscall.SyscallN(procGetProcAddress.Addr(), uintptr(handle), uintptr(unsafe.Pointer(unsafe.StringData(symbol))))
-+	if err != 0 {
-+		if !optional {
-+			panic("cannot get required symbol " + symbol + ": " + err.Error())
-+		}
-+		return 0
-+	}
-+	return r0
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
-new file mode 100644
-index 00000000000000..068a94d4c83ae1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl.s
-@@ -0,0 +1,55 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo && unix
-+
-+#include "textflag.h"
-+
-+#ifndef GOARCH_amd64
-+#ifndef GOARCH_arm64
-+#ifndef GOARCH_riscv64
-+#ifndef GOARCH_loong64
-+#ifndef GOARCH_mips64
-+#ifndef GOARCH_mips64le
-+#ifndef GOARCH_ppc64
-+#ifndef GOARCH_ppc64le
-+#ifndef GOARCH_s390x
-+#ifndef GOARCH_sparc64
-+#define _GOPTRSIZE 4
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+
-+#ifndef _GOPTRSIZE
-+#define _GOPTRSIZE 8
-+#endif
-+TEXT _mkcgo_dlclose_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlclose(SB)
-+
-+GLOBL ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlerror_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlerror(SB)
-+
-+GLOBL ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlopen_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlopen(SB)
-+
-+GLOBL ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
-+
-+TEXT _mkcgo_dlsym_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_dlsym(SB)
-+
-+GLOBL ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
-+
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
-new file mode 100644
-index 00000000000000..0a087c1514bd8b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zdl_nocgo.go
-@@ -0,0 +1,58 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo && unix
-+
-+package ossl
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+)
-+
-+var _ = runtime.GOOS
-+
-+var _mkcgoAlwaysFalseDl bool
-+var _mkcgoEscapeSinkDl unsafe.Pointer
-+
-+// mkcgoEscapePtrDl forces p to escape to the heap.
-+// This implementation is also used in the standard library:
-+// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
-+func mkcgoEscapePtrDl(p unsafe.Pointer) unsafe.Pointer {
-+	if _mkcgoAlwaysFalseDl {
-+		_mkcgoEscapeSinkDl = p
-+	}
-+	return p
-+}
-+
-+//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
-+//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
-+//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
-+//go:cgo_import_dynamic _mkcgo_dlsym dlsym ""
-+
-+var _mkcgo_dlclose_trampoline_addr uintptr
-+
-+func Dlclose(handle unsafe.Pointer) int32 {
-+	r0, _ := syscallN(0, _mkcgo_dlclose_trampoline_addr, uintptr(handle))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_dlerror_trampoline_addr uintptr
-+
-+func Dlerror() *byte {
-+	r0, _ := syscallN(0, _mkcgo_dlerror_trampoline_addr)
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_dlopen_trampoline_addr uintptr
-+
-+func Dlopen(path *byte, flags int32) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(mkcgoEscapePtrDl(unsafe.Pointer(path))), uintptr(flags))
-+	return unsafe.Pointer(r0)
-+}
-+
-+var _mkcgo_dlsym_trampoline_addr uintptr
-+
-+func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
-+	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(mkcgoEscapePtrDl(unsafe.Pointer(symbol))))
-+	return unsafe.Pointer(r0)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-new file mode 100644
-index 00000000000000..b4567cb95136b1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.c
-@@ -0,0 +1,2071 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+#include <stddef.h>
-+#include <stdlib.h>
-+#include <stdint.h>
-+#include <stdio.h>
-+#include "zossl.h"
-+
-+#ifdef _WIN32
-+#include <windows.h>
-+#define dlsym GetProcAddress
-+#else
-+#include <dlfcn.h>
-+#endif
-+
-+long (*_g_BIO_ctrl)(_BIO_PTR, int, long, void*);
-+int (*_g_BIO_free)(_BIO_PTR);
-+_BIO_PTR (*_g_BIO_new)(const _BIO_METHOD_PTR);
-+const _BIO_METHOD_PTR (*_g_BIO_s_mem)(void);
-+_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
-+int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
-+int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
-+void (*_g_BN_clear)(_BIGNUM_PTR);
-+void (*_g_BN_clear_free)(_BIGNUM_PTR);
-+void (*_g_BN_free)(_BIGNUM_PTR);
-+_BIGNUM_PTR (*_g_BN_lebin2bn)(const unsigned char*, int, _BIGNUM_PTR);
-+_BIGNUM_PTR (*_g_BN_new)(void);
-+int (*_g_BN_num_bits)(const _BIGNUM_PTR);
-+void (*_g_CRYPTO_free)(void*, const char*, int);
-+void* (*_g_CRYPTO_malloc)(size_t, const char*, int);
-+void (*_g_DSA_free)(_DSA_PTR);
-+int (*_g_DSA_generate_key)(_DSA_PTR);
-+void (*_g_DSA_get0_key)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_DSA_get0_pqg)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_DSA_PTR (*_g_DSA_new)(void);
-+int (*_g_DSA_set0_key)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_DSA_set0_pqg)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+void (*_g_EC_GROUP_free)(_EC_GROUP_PTR);
-+_EC_GROUP_PTR (*_g_EC_GROUP_new_by_curve_name)(int);
-+int (*_g_EC_KEY_check_key)(const _EC_KEY_PTR);
-+void (*_g_EC_KEY_free)(_EC_KEY_PTR);
-+const _EC_GROUP_PTR (*_g_EC_KEY_get0_group)(const _EC_KEY_PTR);
-+const _BIGNUM_PTR (*_g_EC_KEY_get0_private_key)(const _EC_KEY_PTR);
-+const _EC_POINT_PTR (*_g_EC_KEY_get0_public_key)(const _EC_KEY_PTR);
-+_EC_KEY_PTR (*_g_EC_KEY_new_by_curve_name)(int);
-+int (*_g_EC_KEY_set_private_key)(_EC_KEY_PTR, const _BIGNUM_PTR);
-+int (*_g_EC_KEY_set_public_key)(_EC_KEY_PTR, const _EC_POINT_PTR);
-+int (*_g_EC_KEY_set_public_key_affine_coordinates)(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+void (*_g_EC_POINT_free)(_EC_POINT_PTR);
-+int (*_g_EC_POINT_get_affine_coordinates_GFp)(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR);
-+int (*_g_EC_POINT_mul)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
-+_EC_POINT_PTR (*_g_EC_POINT_new)(const _EC_GROUP_PTR);
-+int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
-+size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
-+int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
-+unsigned long (*_g_ERR_peek_error)(void);
-+void (*_g_ERR_print_errors)(_BIO_PTR);
-+int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
-+void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
-+_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
-+int (*_g_EVP_CIPHER_CTX_set_key_length)(_EVP_CIPHER_CTX_PTR, int);
-+int (*_g_EVP_CIPHER_CTX_set_padding)(_EVP_CIPHER_CTX_PTR, int);
-+_EVP_CIPHER_PTR (*_g_EVP_CIPHER_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+const char* (*_g_EVP_CIPHER_get0_name)(const _EVP_CIPHER_PTR);
-+int (*_g_EVP_CIPHER_get_block_size)(const _EVP_CIPHER_PTR);
-+int (*_g_EVP_CipherInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int);
-+int (*_g_EVP_CipherUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
-+int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
-+int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+int (*_g_EVP_Digest)(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_EVP_DigestFinalXOF)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
-+int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
-+int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
-+int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_DigestSqueeze)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
-+int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
-+int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_EncryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
-+int (*_g_EVP_EncryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
-+int (*_g_EVP_EncryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
-+void (*_g_EVP_KDF_CTX_free)(_EVP_KDF_CTX_PTR);
-+size_t (*_g_EVP_KDF_CTX_get_kdf_size)(_EVP_KDF_CTX_PTR);
-+_EVP_KDF_CTX_PTR (*_g_EVP_KDF_CTX_new)(_EVP_KDF_PTR);
-+int (*_g_EVP_KDF_CTX_set_params)(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
-+_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
-+_EVP_KEYMGMT_PTR (*_g_EVP_KEYMGMT_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_KEYMGMT_free)(_EVP_KEYMGMT_PTR);
-+_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
-+void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
-+_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
-+int (*_g_EVP_MAC_CTX_set_params)(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR);
-+_EVP_MAC_PTR (*_g_EVP_MAC_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
-+int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
-+int (*_g_EVP_MD_CTX_ctrl)(_EVP_MD_CTX_PTR, int, int, void*);
-+void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
-+int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
-+_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
-+int (*_g_EVP_MD_CTX_set_params)(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_settable_params)(_EVP_MD_CTX_PTR);
-+_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_MD_free)(_EVP_MD_PTR);
-+const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
-+const _OSSL_PROVIDER_PTR (*_g_EVP_MD_get0_provider)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_block_size)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_size)(const _EVP_MD_PTR);
-+int (*_g_EVP_MD_get_type)(const _EVP_MD_PTR);
-+int (*_g_EVP_PKEY_CTX_add1_hkdf_info)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_ctrl)(_EVP_PKEY_CTX_PTR, int, int, int, int, void*);
-+void (*_g_EVP_PKEY_CTX_free)(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
-+_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
-+int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
-+int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
-+int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
-+int (*_g_EVP_PKEY_CTX_set_params)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
-+int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
-+int (*_g_EVP_PKEY_decapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_decapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_encapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_encapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
-+int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
-+void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_fromdata)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR);
-+int (*_g_EVP_PKEY_fromdata_init)(_EVP_PKEY_CTX_PTR);
-+_DSA_PTR (*_g_EVP_PKEY_get0_DSA)(_EVP_PKEY_PTR);
-+_EC_KEY_PTR (*_g_EVP_PKEY_get0_EC_KEY)(_EVP_PKEY_PTR);
-+_RSA_PTR (*_g_EVP_PKEY_get1_RSA)(_EVP_PKEY_PTR);
-+size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
-+int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
-+int (*_g_EVP_PKEY_get_octet_string_param)(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*);
-+int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
-+int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_keygen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
-+int (*_g_EVP_PKEY_keygen_init)(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new)(void);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_private_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
-+_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_public_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_paramgen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
-+int (*_g_EVP_PKEY_paramgen_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_private_check)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_public_check_quick)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_set1_EC_KEY)(_EVP_PKEY_PTR, _EC_KEY_PTR);
-+int (*_g_EVP_PKEY_set1_encoded_public_key)(_EVP_PKEY_PTR, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_sign)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_sign_init)(_EVP_PKEY_CTX_PTR);
-+int (*_g_EVP_PKEY_up_ref)(_EVP_PKEY_PTR);
-+int (*_g_EVP_PKEY_verify)(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
-+int (*_g_EVP_PKEY_verify_init)(_EVP_PKEY_CTX_PTR);
-+_EVP_SIGNATURE_PTR (*_g_EVP_SIGNATURE_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
-+void (*_g_EVP_SIGNATURE_free)(_EVP_SIGNATURE_PTR);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_128_gcm)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_192_gcm)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_chacha20_poly1305)(void);
-+int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
-+int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ecb)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_cbc)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_ecb)(void);
-+const _EVP_MD_PTR (*_g_EVP_md4)(void);
-+const _EVP_MD_PTR (*_g_EVP_md5)(void);
-+const _EVP_MD_PTR (*_g_EVP_md5_sha1)(void);
-+const _EVP_CIPHER_PTR (*_g_EVP_rc4)(void);
-+const _EVP_MD_PTR (*_g_EVP_ripemd160)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha1)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha256)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha384)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_256)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_384)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha3_512)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512_224)(void);
-+const _EVP_MD_PTR (*_g_EVP_sha512_256)(void);
-+int (*_g_FIPS_mode)(void);
-+int (*_g_FIPS_mode_set)(int);
-+int (*_g_HMAC_CTX_copy)(_HMAC_CTX_PTR, _HMAC_CTX_PTR);
-+void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
-+_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
-+int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
-+int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR);
-+int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
-+const char* (*_g_OBJ_nid2sn)(int);
-+void (*_g_OPENSSL_init)(void);
-+int (*_g_OPENSSL_init_crypto)(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR);
-+unsigned int (*_g_OPENSSL_version_major)(void);
-+unsigned int (*_g_OPENSSL_version_minor)(void);
-+unsigned int (*_g_OPENSSL_version_patch)(void);
-+void (*_g_OSSL_PARAM_BLD_free)(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
-+int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
-+int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
-+int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t);
-+int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
-+_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
-+void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR (*_g_OSSL_PARAM_locate_const)(const _OSSL_PARAM_PTR, const char*);
-+int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
-+const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
-+_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
-+const char* (*_g_OpenSSL_version)(int);
-+unsigned long (*_g_OpenSSL_version_num)(void);
-+int (*_g_PKCS5_PBKDF2_HMAC)(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*);
-+int (*_g_RAND_bytes)(unsigned char*, int);
-+void (*_g_RSA_free)(_RSA_PTR);
-+void (*_g_RSA_get0_crt_params)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_RSA_get0_factors)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void (*_g_RSA_get0_key)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_RSA_PTR (*_g_RSA_new)(void);
-+int (*_g_RSA_set0_crt_params)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_RSA_set0_factors)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+int (*_g_RSA_set0_key)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
-+
-+#define __mkcgo__dlsym_nocheck(varname, funcname) _g_##varname = (typeof(_g_##varname))dlsym(handle, #funcname);
-+
-+#define __mkcgo__dlsym(name) __mkcgo__dlsym2(name, name)
-+
-+#define __mkcgo__dlsym2(varname, funcname) \
-+	__mkcgo__dlsym_nocheck(varname, funcname) \
-+	if (_g_##varname == NULL) { \
-+		fprintf(stderr, "Cannot get required symbol " #funcname "\n"); \
-+		abort(); \
-+	}
-+
-+void __mkcgo_load_(void* handle) {
-+	__mkcgo__dlsym(BIO_ctrl)
-+	__mkcgo__dlsym(BIO_free)
-+	__mkcgo__dlsym(BIO_new)
-+	__mkcgo__dlsym(BIO_s_mem)
-+	__mkcgo__dlsym(BN_bin2bn)
-+	__mkcgo__dlsym(BN_bn2binpad)
-+	__mkcgo__dlsym(BN_bn2lebinpad)
-+	__mkcgo__dlsym(BN_clear)
-+	__mkcgo__dlsym(BN_clear_free)
-+	__mkcgo__dlsym(BN_free)
-+	__mkcgo__dlsym(BN_lebin2bn)
-+	__mkcgo__dlsym(BN_new)
-+	__mkcgo__dlsym(BN_num_bits)
-+	__mkcgo__dlsym(CRYPTO_free)
-+	__mkcgo__dlsym(CRYPTO_malloc)
-+	__mkcgo__dlsym(EC_GROUP_free)
-+	__mkcgo__dlsym(EC_GROUP_new_by_curve_name)
-+	__mkcgo__dlsym(EC_POINT_free)
-+	__mkcgo__dlsym(EC_POINT_mul)
-+	__mkcgo__dlsym(EC_POINT_new)
-+	__mkcgo__dlsym(EC_POINT_oct2point)
-+	__mkcgo__dlsym(EC_POINT_point2oct)
-+	__mkcgo__dlsym(ERR_peek_error)
-+	__mkcgo__dlsym(ERR_print_errors)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_set_key_length)
-+	__mkcgo__dlsym(EVP_CIPHER_CTX_set_padding)
-+	__mkcgo__dlsym(EVP_CipherInit_ex)
-+	__mkcgo__dlsym(EVP_CipherUpdate)
-+	__mkcgo__dlsym(EVP_DecryptFinal_ex)
-+	__mkcgo__dlsym(EVP_DecryptInit_ex)
-+	__mkcgo__dlsym(EVP_DecryptUpdate)
-+	__mkcgo__dlsym(EVP_Digest)
-+	__mkcgo__dlsym(EVP_DigestFinal_ex)
-+	__mkcgo__dlsym(EVP_DigestInit)
-+	__mkcgo__dlsym(EVP_DigestInit_ex)
-+	__mkcgo__dlsym(EVP_DigestSign)
-+	__mkcgo__dlsym(EVP_DigestSignFinal)
-+	__mkcgo__dlsym(EVP_DigestSignInit)
-+	__mkcgo__dlsym(EVP_DigestUpdate)
-+	__mkcgo__dlsym(EVP_DigestVerify)
-+	__mkcgo__dlsym(EVP_DigestVerifyFinal)
-+	__mkcgo__dlsym(EVP_DigestVerifyInit)
-+	__mkcgo__dlsym(EVP_EncryptFinal_ex)
-+	__mkcgo__dlsym(EVP_EncryptInit_ex)
-+	__mkcgo__dlsym(EVP_EncryptUpdate)
-+	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
-+	__mkcgo__dlsym(EVP_MD_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_MD_CTX_free)
-+	__mkcgo__dlsym(EVP_MD_CTX_new)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_free)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new_id)
-+	__mkcgo__dlsym(EVP_PKEY_decrypt)
-+	__mkcgo__dlsym(EVP_PKEY_decrypt_init)
-+	__mkcgo__dlsym(EVP_PKEY_derive)
-+	__mkcgo__dlsym(EVP_PKEY_derive_init)
-+	__mkcgo__dlsym(EVP_PKEY_derive_set_peer)
-+	__mkcgo__dlsym(EVP_PKEY_encrypt)
-+	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
-+	__mkcgo__dlsym(EVP_PKEY_free)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_keygen)
-+	__mkcgo__dlsym(EVP_PKEY_keygen_init)
-+	__mkcgo__dlsym(EVP_PKEY_new)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
-+	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_paramgen)
-+	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
-+	__mkcgo__dlsym(EVP_PKEY_sign)
-+	__mkcgo__dlsym(EVP_PKEY_sign_init)
-+	__mkcgo__dlsym(EVP_PKEY_up_ref)
-+	__mkcgo__dlsym(EVP_PKEY_verify)
-+	__mkcgo__dlsym(EVP_PKEY_verify_init)
-+	__mkcgo__dlsym(EVP_aes_128_cbc)
-+	__mkcgo__dlsym(EVP_aes_128_ctr)
-+	__mkcgo__dlsym(EVP_aes_128_ecb)
-+	__mkcgo__dlsym(EVP_aes_128_gcm)
-+	__mkcgo__dlsym(EVP_aes_192_cbc)
-+	__mkcgo__dlsym(EVP_aes_192_ctr)
-+	__mkcgo__dlsym(EVP_aes_192_ecb)
-+	__mkcgo__dlsym(EVP_aes_192_gcm)
-+	__mkcgo__dlsym(EVP_aes_256_cbc)
-+	__mkcgo__dlsym(EVP_aes_256_ctr)
-+	__mkcgo__dlsym(EVP_aes_256_ecb)
-+	__mkcgo__dlsym(EVP_aes_256_gcm)
-+	__mkcgo__dlsym_nocheck(EVP_chacha20_poly1305, EVP_chacha20_poly1305)
-+	__mkcgo__dlsym(EVP_des_cbc)
-+	__mkcgo__dlsym(EVP_des_ecb)
-+	__mkcgo__dlsym(EVP_des_ede3_cbc)
-+	__mkcgo__dlsym(EVP_des_ede3_ecb)
-+	__mkcgo__dlsym(EVP_md4)
-+	__mkcgo__dlsym(EVP_md5)
-+	__mkcgo__dlsym(EVP_md5_sha1)
-+	__mkcgo__dlsym(EVP_rc4)
-+	__mkcgo__dlsym(EVP_ripemd160)
-+	__mkcgo__dlsym(EVP_sha1)
-+	__mkcgo__dlsym(EVP_sha224)
-+	__mkcgo__dlsym(EVP_sha256)
-+	__mkcgo__dlsym(EVP_sha384)
-+	__mkcgo__dlsym(EVP_sha3_224)
-+	__mkcgo__dlsym(EVP_sha3_256)
-+	__mkcgo__dlsym(EVP_sha3_384)
-+	__mkcgo__dlsym(EVP_sha3_512)
-+	__mkcgo__dlsym(EVP_sha512)
-+	__mkcgo__dlsym(EVP_sha512_224)
-+	__mkcgo__dlsym(EVP_sha512_256)
-+	__mkcgo__dlsym(OBJ_nid2sn)
-+	__mkcgo__dlsym(OPENSSL_init)
-+	__mkcgo__dlsym(OPENSSL_init_crypto)
-+	__mkcgo__dlsym(OpenSSL_version)
-+	__mkcgo__dlsym(PKCS5_PBKDF2_HMAC)
-+	__mkcgo__dlsym(RAND_bytes)
-+}
-+
-+void __mkcgo_unload_() {
-+	_g_BIO_ctrl = NULL;
-+	_g_BIO_free = NULL;
-+	_g_BIO_new = NULL;
-+	_g_BIO_s_mem = NULL;
-+	_g_BN_bin2bn = NULL;
-+	_g_BN_bn2binpad = NULL;
-+	_g_BN_bn2lebinpad = NULL;
-+	_g_BN_clear = NULL;
-+	_g_BN_clear_free = NULL;
-+	_g_BN_free = NULL;
-+	_g_BN_lebin2bn = NULL;
-+	_g_BN_new = NULL;
-+	_g_BN_num_bits = NULL;
-+	_g_CRYPTO_free = NULL;
-+	_g_CRYPTO_malloc = NULL;
-+	_g_EC_GROUP_free = NULL;
-+	_g_EC_GROUP_new_by_curve_name = NULL;
-+	_g_EC_POINT_free = NULL;
-+	_g_EC_POINT_mul = NULL;
-+	_g_EC_POINT_new = NULL;
-+	_g_EC_POINT_oct2point = NULL;
-+	_g_EC_POINT_point2oct = NULL;
-+	_g_ERR_peek_error = NULL;
-+	_g_ERR_print_errors = NULL;
-+	_g_EVP_CIPHER_CTX_ctrl = NULL;
-+	_g_EVP_CIPHER_CTX_free = NULL;
-+	_g_EVP_CIPHER_CTX_new = NULL;
-+	_g_EVP_CIPHER_CTX_set_key_length = NULL;
-+	_g_EVP_CIPHER_CTX_set_padding = NULL;
-+	_g_EVP_CipherInit_ex = NULL;
-+	_g_EVP_CipherUpdate = NULL;
-+	_g_EVP_DecryptFinal_ex = NULL;
-+	_g_EVP_DecryptInit_ex = NULL;
-+	_g_EVP_DecryptUpdate = NULL;
-+	_g_EVP_Digest = NULL;
-+	_g_EVP_DigestFinal_ex = NULL;
-+	_g_EVP_DigestInit = NULL;
-+	_g_EVP_DigestInit_ex = NULL;
-+	_g_EVP_DigestSign = NULL;
-+	_g_EVP_DigestSignFinal = NULL;
-+	_g_EVP_DigestSignInit = NULL;
-+	_g_EVP_DigestUpdate = NULL;
-+	_g_EVP_DigestVerify = NULL;
-+	_g_EVP_DigestVerifyFinal = NULL;
-+	_g_EVP_DigestVerifyInit = NULL;
-+	_g_EVP_EncryptFinal_ex = NULL;
-+	_g_EVP_EncryptInit_ex = NULL;
-+	_g_EVP_EncryptUpdate = NULL;
-+	_g_EVP_MD_CTX_copy_ex = NULL;
-+	_g_EVP_MD_CTX_ctrl = NULL;
-+	_g_EVP_MD_CTX_free = NULL;
-+	_g_EVP_MD_CTX_new = NULL;
-+	_g_EVP_PKEY_CTX_ctrl = NULL;
-+	_g_EVP_PKEY_CTX_free = NULL;
-+	_g_EVP_PKEY_CTX_new = NULL;
-+	_g_EVP_PKEY_CTX_new_id = NULL;
-+	_g_EVP_PKEY_decrypt = NULL;
-+	_g_EVP_PKEY_decrypt_init = NULL;
-+	_g_EVP_PKEY_derive = NULL;
-+	_g_EVP_PKEY_derive_init = NULL;
-+	_g_EVP_PKEY_derive_set_peer = NULL;
-+	_g_EVP_PKEY_encrypt = NULL;
-+	_g_EVP_PKEY_encrypt_init = NULL;
-+	_g_EVP_PKEY_free = NULL;
-+	_g_EVP_PKEY_get_raw_private_key = NULL;
-+	_g_EVP_PKEY_get_raw_public_key = NULL;
-+	_g_EVP_PKEY_keygen = NULL;
-+	_g_EVP_PKEY_keygen_init = NULL;
-+	_g_EVP_PKEY_new = NULL;
-+	_g_EVP_PKEY_new_raw_private_key = NULL;
-+	_g_EVP_PKEY_new_raw_public_key = NULL;
-+	_g_EVP_PKEY_paramgen = NULL;
-+	_g_EVP_PKEY_paramgen_init = NULL;
-+	_g_EVP_PKEY_sign = NULL;
-+	_g_EVP_PKEY_sign_init = NULL;
-+	_g_EVP_PKEY_up_ref = NULL;
-+	_g_EVP_PKEY_verify = NULL;
-+	_g_EVP_PKEY_verify_init = NULL;
-+	_g_EVP_aes_128_cbc = NULL;
-+	_g_EVP_aes_128_ctr = NULL;
-+	_g_EVP_aes_128_ecb = NULL;
-+	_g_EVP_aes_128_gcm = NULL;
-+	_g_EVP_aes_192_cbc = NULL;
-+	_g_EVP_aes_192_ctr = NULL;
-+	_g_EVP_aes_192_ecb = NULL;
-+	_g_EVP_aes_192_gcm = NULL;
-+	_g_EVP_aes_256_cbc = NULL;
-+	_g_EVP_aes_256_ctr = NULL;
-+	_g_EVP_aes_256_ecb = NULL;
-+	_g_EVP_aes_256_gcm = NULL;
-+	_g_EVP_chacha20_poly1305 = NULL;
-+	_g_EVP_des_cbc = NULL;
-+	_g_EVP_des_ecb = NULL;
-+	_g_EVP_des_ede3_cbc = NULL;
-+	_g_EVP_des_ede3_ecb = NULL;
-+	_g_EVP_md4 = NULL;
-+	_g_EVP_md5 = NULL;
-+	_g_EVP_md5_sha1 = NULL;
-+	_g_EVP_rc4 = NULL;
-+	_g_EVP_ripemd160 = NULL;
-+	_g_EVP_sha1 = NULL;
-+	_g_EVP_sha224 = NULL;
-+	_g_EVP_sha256 = NULL;
-+	_g_EVP_sha384 = NULL;
-+	_g_EVP_sha3_224 = NULL;
-+	_g_EVP_sha3_256 = NULL;
-+	_g_EVP_sha3_384 = NULL;
-+	_g_EVP_sha3_512 = NULL;
-+	_g_EVP_sha512 = NULL;
-+	_g_EVP_sha512_224 = NULL;
-+	_g_EVP_sha512_256 = NULL;
-+	_g_OBJ_nid2sn = NULL;
-+	_g_OPENSSL_init = NULL;
-+	_g_OPENSSL_init_crypto = NULL;
-+	_g_OpenSSL_version = NULL;
-+	_g_PKCS5_PBKDF2_HMAC = NULL;
-+	_g_RAND_bytes = NULL;
-+}
-+
-+void __mkcgo_load_3(void* handle) {
-+	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
-+	__mkcgo__dlsym(EVP_CIPHER_fetch)
-+	__mkcgo__dlsym(EVP_CIPHER_get0_name)
-+	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
-+	__mkcgo__dlsym(EVP_KDF_CTX_free)
-+	__mkcgo__dlsym(EVP_KDF_CTX_get_kdf_size)
-+	__mkcgo__dlsym(EVP_KDF_CTX_new)
-+	__mkcgo__dlsym(EVP_KDF_CTX_set_params)
-+	__mkcgo__dlsym(EVP_KDF_derive)
-+	__mkcgo__dlsym(EVP_KDF_fetch)
-+	__mkcgo__dlsym(EVP_KDF_free)
-+	__mkcgo__dlsym_nocheck(EVP_KEYMGMT_fetch, EVP_KEYMGMT_fetch)
-+	__mkcgo__dlsym(EVP_KEYMGMT_free)
-+	__mkcgo__dlsym(EVP_MAC_CTX_dup)
-+	__mkcgo__dlsym(EVP_MAC_CTX_free)
-+	__mkcgo__dlsym(EVP_MAC_CTX_new)
-+	__mkcgo__dlsym(EVP_MAC_CTX_set_params)
-+	__mkcgo__dlsym(EVP_MAC_fetch)
-+	__mkcgo__dlsym(EVP_MAC_final)
-+	__mkcgo__dlsym(EVP_MAC_init)
-+	__mkcgo__dlsym(EVP_MAC_update)
-+	__mkcgo__dlsym(EVP_MD_CTX_get_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_gettable_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_set_params)
-+	__mkcgo__dlsym(EVP_MD_CTX_settable_params)
-+	__mkcgo__dlsym(EVP_MD_fetch)
-+	__mkcgo__dlsym(EVP_MD_free)
-+	__mkcgo__dlsym(EVP_MD_get0_name)
-+	__mkcgo__dlsym(EVP_MD_get0_provider)
-+	__mkcgo__dlsym(EVP_MD_get_block_size)
-+	__mkcgo__dlsym(EVP_MD_get_size)
-+	__mkcgo__dlsym(EVP_MD_get_type)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_add1_hkdf_info)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_new_from_pkey)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set0_rsa_oaep_label)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_key)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
-+	__mkcgo__dlsym(EVP_PKEY_CTX_set_params)
-+	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
-+	__mkcgo__dlsym(EVP_PKEY_decapsulate)
-+	__mkcgo__dlsym(EVP_PKEY_decapsulate_init)
-+	__mkcgo__dlsym(EVP_PKEY_encapsulate)
-+	__mkcgo__dlsym(EVP_PKEY_encapsulate_init)
-+	__mkcgo__dlsym(EVP_PKEY_fromdata)
-+	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
-+	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
-+	__mkcgo__dlsym(EVP_PKEY_get_bits)
-+	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
-+	__mkcgo__dlsym(EVP_PKEY_get_octet_string_param)
-+	__mkcgo__dlsym(EVP_PKEY_get_size)
-+	__mkcgo__dlsym(EVP_PKEY_private_check)
-+	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
-+	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
-+	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
-+	__mkcgo__dlsym(EVP_SIGNATURE_free)
-+	__mkcgo__dlsym(EVP_default_properties_enable_fips)
-+	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_free)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_new)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_BN)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_int32)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_octet_string)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
-+	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
-+	__mkcgo__dlsym(OSSL_PARAM_free)
-+	__mkcgo__dlsym(OSSL_PARAM_locate_const)
-+	__mkcgo__dlsym(OSSL_PROVIDER_available)
-+	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
-+	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
-+}
-+
-+void __mkcgo_unload_3() {
-+	_g_EC_POINT_set_affine_coordinates = NULL;
-+	_g_EVP_CIPHER_fetch = NULL;
-+	_g_EVP_CIPHER_get0_name = NULL;
-+	_g_EVP_CIPHER_get_block_size = NULL;
-+	_g_EVP_KDF_CTX_free = NULL;
-+	_g_EVP_KDF_CTX_get_kdf_size = NULL;
-+	_g_EVP_KDF_CTX_new = NULL;
-+	_g_EVP_KDF_CTX_set_params = NULL;
-+	_g_EVP_KDF_derive = NULL;
-+	_g_EVP_KDF_fetch = NULL;
-+	_g_EVP_KDF_free = NULL;
-+	_g_EVP_KEYMGMT_fetch = NULL;
-+	_g_EVP_KEYMGMT_free = NULL;
-+	_g_EVP_MAC_CTX_dup = NULL;
-+	_g_EVP_MAC_CTX_free = NULL;
-+	_g_EVP_MAC_CTX_new = NULL;
-+	_g_EVP_MAC_CTX_set_params = NULL;
-+	_g_EVP_MAC_fetch = NULL;
-+	_g_EVP_MAC_final = NULL;
-+	_g_EVP_MAC_init = NULL;
-+	_g_EVP_MAC_update = NULL;
-+	_g_EVP_MD_CTX_get_params = NULL;
-+	_g_EVP_MD_CTX_gettable_params = NULL;
-+	_g_EVP_MD_CTX_set_params = NULL;
-+	_g_EVP_MD_CTX_settable_params = NULL;
-+	_g_EVP_MD_fetch = NULL;
-+	_g_EVP_MD_free = NULL;
-+	_g_EVP_MD_get0_name = NULL;
-+	_g_EVP_MD_get0_provider = NULL;
-+	_g_EVP_MD_get_block_size = NULL;
-+	_g_EVP_MD_get_size = NULL;
-+	_g_EVP_MD_get_type = NULL;
-+	_g_EVP_PKEY_CTX_add1_hkdf_info = NULL;
-+	_g_EVP_PKEY_CTX_new_from_pkey = NULL;
-+	_g_EVP_PKEY_CTX_set0_rsa_oaep_label = NULL;
-+	_g_EVP_PKEY_CTX_set1_hkdf_key = NULL;
-+	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
-+	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
-+	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
-+	_g_EVP_PKEY_CTX_set_params = NULL;
-+	_g_EVP_PKEY_Q_keygen = NULL;
-+	_g_EVP_PKEY_decapsulate = NULL;
-+	_g_EVP_PKEY_decapsulate_init = NULL;
-+	_g_EVP_PKEY_encapsulate = NULL;
-+	_g_EVP_PKEY_encapsulate_init = NULL;
-+	_g_EVP_PKEY_fromdata = NULL;
-+	_g_EVP_PKEY_fromdata_init = NULL;
-+	_g_EVP_PKEY_get1_encoded_public_key = NULL;
-+	_g_EVP_PKEY_get_bits = NULL;
-+	_g_EVP_PKEY_get_bn_param = NULL;
-+	_g_EVP_PKEY_get_octet_string_param = NULL;
-+	_g_EVP_PKEY_get_size = NULL;
-+	_g_EVP_PKEY_private_check = NULL;
-+	_g_EVP_PKEY_public_check_quick = NULL;
-+	_g_EVP_PKEY_set1_encoded_public_key = NULL;
-+	_g_EVP_SIGNATURE_fetch = NULL;
-+	_g_EVP_SIGNATURE_free = NULL;
-+	_g_EVP_default_properties_enable_fips = NULL;
-+	_g_EVP_default_properties_is_fips_enabled = NULL;
-+	_g_OSSL_PARAM_BLD_free = NULL;
-+	_g_OSSL_PARAM_BLD_new = NULL;
-+	_g_OSSL_PARAM_BLD_push_BN = NULL;
-+	_g_OSSL_PARAM_BLD_push_int32 = NULL;
-+	_g_OSSL_PARAM_BLD_push_octet_string = NULL;
-+	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
-+	_g_OSSL_PARAM_BLD_to_param = NULL;
-+	_g_OSSL_PARAM_free = NULL;
-+	_g_OSSL_PARAM_locate_const = NULL;
-+	_g_OSSL_PROVIDER_available = NULL;
-+	_g_OSSL_PROVIDER_get0_name = NULL;
-+	_g_OSSL_PROVIDER_try_load = NULL;
-+}
-+
-+void __mkcgo_load_33(void* handle) {
-+	__mkcgo__dlsym(EVP_DigestFinalXOF)
-+	__mkcgo__dlsym_nocheck(EVP_DigestSqueeze, EVP_DigestSqueeze)
-+}
-+
-+void __mkcgo_unload_33() {
-+	_g_EVP_DigestFinalXOF = NULL;
-+	_g_EVP_DigestSqueeze = NULL;
-+}
-+
-+void __mkcgo_load_init_1(void* handle) {
-+	__mkcgo__dlsym(FIPS_mode)
-+	__mkcgo__dlsym(FIPS_mode_set)
-+}
-+
-+void __mkcgo_unload_init_1() {
-+	_g_FIPS_mode = NULL;
-+	_g_FIPS_mode_set = NULL;
-+}
-+
-+void __mkcgo_load_init_3(void* handle) {
-+	__mkcgo__dlsym(BIO_ctrl)
-+	__mkcgo__dlsym(BIO_free)
-+	__mkcgo__dlsym(BIO_new)
-+	__mkcgo__dlsym(BIO_s_mem)
-+	__mkcgo__dlsym(ERR_print_errors)
-+	__mkcgo__dlsym(EVP_MD_fetch)
-+	__mkcgo__dlsym(EVP_MD_free)
-+	__mkcgo__dlsym(EVP_MD_get0_provider)
-+	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
-+}
-+
-+void __mkcgo_unload_init_3() {
-+	_g_BIO_ctrl = NULL;
-+	_g_BIO_free = NULL;
-+	_g_BIO_new = NULL;
-+	_g_BIO_s_mem = NULL;
-+	_g_ERR_print_errors = NULL;
-+	_g_EVP_MD_fetch = NULL;
-+	_g_EVP_MD_free = NULL;
-+	_g_EVP_MD_get0_provider = NULL;
-+	_g_EVP_default_properties_is_fips_enabled = NULL;
-+}
-+
-+void __mkcgo_load_legacy_1(void* handle) {
-+	__mkcgo__dlsym(DSA_free)
-+	__mkcgo__dlsym(DSA_generate_key)
-+	__mkcgo__dlsym(DSA_get0_key)
-+	__mkcgo__dlsym(DSA_get0_pqg)
-+	__mkcgo__dlsym(DSA_new)
-+	__mkcgo__dlsym(DSA_set0_key)
-+	__mkcgo__dlsym(DSA_set0_pqg)
-+	__mkcgo__dlsym(EC_KEY_check_key)
-+	__mkcgo__dlsym(EC_KEY_free)
-+	__mkcgo__dlsym(EC_KEY_get0_group)
-+	__mkcgo__dlsym(EC_KEY_get0_private_key)
-+	__mkcgo__dlsym(EC_KEY_get0_public_key)
-+	__mkcgo__dlsym(EC_KEY_new_by_curve_name)
-+	__mkcgo__dlsym(EC_KEY_set_private_key)
-+	__mkcgo__dlsym(EC_KEY_set_public_key)
-+	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
-+	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
-+	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
-+	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
-+	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
-+	__mkcgo__dlsym(EVP_PKEY_assign)
-+	__mkcgo__dlsym(EVP_PKEY_get0_DSA)
-+	__mkcgo__dlsym(EVP_PKEY_get0_EC_KEY)
-+	__mkcgo__dlsym(EVP_PKEY_get1_RSA)
-+	__mkcgo__dlsym2(EVP_PKEY_get_bits, EVP_PKEY_bits)
-+	__mkcgo__dlsym2(EVP_PKEY_get_size, EVP_PKEY_size)
-+	__mkcgo__dlsym(EVP_PKEY_set1_EC_KEY)
-+	__mkcgo__dlsym(FIPS_mode)
-+	__mkcgo__dlsym(FIPS_mode_set)
-+	__mkcgo__dlsym(HMAC_CTX_copy)
-+	__mkcgo__dlsym(HMAC_CTX_free)
-+	__mkcgo__dlsym(HMAC_CTX_new)
-+	__mkcgo__dlsym(HMAC_Final)
-+	__mkcgo__dlsym(HMAC_Init_ex)
-+	__mkcgo__dlsym(HMAC_Update)
-+	__mkcgo__dlsym(RSA_free)
-+	__mkcgo__dlsym(RSA_get0_crt_params)
-+	__mkcgo__dlsym(RSA_get0_factors)
-+	__mkcgo__dlsym(RSA_get0_key)
-+	__mkcgo__dlsym(RSA_new)
-+	__mkcgo__dlsym(RSA_set0_crt_params)
-+	__mkcgo__dlsym(RSA_set0_factors)
-+	__mkcgo__dlsym(RSA_set0_key)
-+}
-+
-+void __mkcgo_unload_legacy_1() {
-+	_g_DSA_free = NULL;
-+	_g_DSA_generate_key = NULL;
-+	_g_DSA_get0_key = NULL;
-+	_g_DSA_get0_pqg = NULL;
-+	_g_DSA_new = NULL;
-+	_g_DSA_set0_key = NULL;
-+	_g_DSA_set0_pqg = NULL;
-+	_g_EC_KEY_check_key = NULL;
-+	_g_EC_KEY_free = NULL;
-+	_g_EC_KEY_get0_group = NULL;
-+	_g_EC_KEY_get0_private_key = NULL;
-+	_g_EC_KEY_get0_public_key = NULL;
-+	_g_EC_KEY_new_by_curve_name = NULL;
-+	_g_EC_KEY_set_private_key = NULL;
-+	_g_EC_KEY_set_public_key = NULL;
-+	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
-+	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
-+	_g_EVP_CIPHER_get_block_size = NULL;
-+	_g_EVP_MD_get_block_size = NULL;
-+	_g_EVP_MD_get_size = NULL;
-+	_g_EVP_PKEY_assign = NULL;
-+	_g_EVP_PKEY_get0_DSA = NULL;
-+	_g_EVP_PKEY_get0_EC_KEY = NULL;
-+	_g_EVP_PKEY_get1_RSA = NULL;
-+	_g_EVP_PKEY_get_bits = NULL;
-+	_g_EVP_PKEY_get_size = NULL;
-+	_g_EVP_PKEY_set1_EC_KEY = NULL;
-+	_g_FIPS_mode = NULL;
-+	_g_FIPS_mode_set = NULL;
-+	_g_HMAC_CTX_copy = NULL;
-+	_g_HMAC_CTX_free = NULL;
-+	_g_HMAC_CTX_new = NULL;
-+	_g_HMAC_Final = NULL;
-+	_g_HMAC_Init_ex = NULL;
-+	_g_HMAC_Update = NULL;
-+	_g_RSA_free = NULL;
-+	_g_RSA_get0_crt_params = NULL;
-+	_g_RSA_get0_factors = NULL;
-+	_g_RSA_get0_key = NULL;
-+	_g_RSA_new = NULL;
-+	_g_RSA_set0_crt_params = NULL;
-+	_g_RSA_set0_factors = NULL;
-+	_g_RSA_set0_key = NULL;
-+}
-+
-+void __mkcgo_load_version(void* handle) {
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_major, OPENSSL_version_major)
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_minor, OPENSSL_version_minor)
-+	__mkcgo__dlsym_nocheck(OPENSSL_version_patch, OPENSSL_version_patch)
-+	__mkcgo__dlsym_nocheck(OpenSSL_version_num, OpenSSL_version_num)
-+}
-+
-+void __mkcgo_unload_version() {
-+	_g_OPENSSL_version_major = NULL;
-+	_g_OPENSSL_version_minor = NULL;
-+	_g_OPENSSL_version_patch = NULL;
-+	_g_OpenSSL_version_num = NULL;
-+}
-+
-+long _mkcgo_BIO_ctrl(_BIO_PTR _arg0, int _arg1, long _arg2, void* _arg3) {
-+	return _g_BIO_ctrl(_arg0, _arg1, _arg2, _arg3);
-+}
-+
-+int _mkcgo_BIO_free(_BIO_PTR _arg0) {
-+	return _g_BIO_free(_arg0);
-+}
-+
-+_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR _arg0, uintptr_t *_err_state) {
-+	_BIO_PTR _ret = _g_BIO_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void) {
-+	return _g_BIO_s_mem();
-+}
-+
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
-+	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
-+	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_BN_clear(_BIGNUM_PTR _arg0) {
-+	_g_BN_clear(_arg0);
-+}
-+
-+void _mkcgo_BN_clear_free(_BIGNUM_PTR _arg0) {
-+	_g_BN_clear_free(_arg0);
-+}
-+
-+void _mkcgo_BN_free(_BIGNUM_PTR _arg0) {
-+	_g_BN_free(_arg0);
-+}
-+
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *_err_state) {
-+	_BIGNUM_PTR _ret = _g_BN_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_BN_num_bits(const _BIGNUM_PTR _arg0) {
-+	return _g_BN_num_bits(_arg0);
-+}
-+
-+void _mkcgo_CRYPTO_free(void* _arg0, const char* _arg1, int _arg2) {
-+	_g_CRYPTO_free(_arg0, _arg1, _arg2);
-+}
-+
-+void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_DSA_free(_DSA_PTR _arg0) {
-+	_g_DSA_free(_arg0);
-+}
-+
-+int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_DSA_generate_key(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_DSA_get0_key(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
-+	_g_DSA_get0_key(_arg0, _arg1, _arg2);
-+}
-+
-+void _mkcgo_DSA_get0_pqg(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
-+}
-+
-+_DSA_PTR _mkcgo_DSA_new(uintptr_t *_err_state) {
-+	_DSA_PTR _ret = _g_DSA_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR _arg0) {
-+	_g_EC_GROUP_free(_arg0);
-+}
-+
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
-+	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EC_KEY_check_key(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EC_KEY_free(_EC_KEY_PTR _arg0) {
-+	_g_EC_KEY_free(_arg0);
-+}
-+
-+const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_group(_arg0);
-+}
-+
-+const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_private_key(_arg0);
-+}
-+
-+const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR _arg0) {
-+	return _g_EC_KEY_get0_public_key(_arg0);
-+}
-+
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
-+	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EC_POINT_free(_EC_POINT_PTR _arg0) {
-+	_g_EC_POINT_free(_arg0);
-+}
-+
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
-+	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, uintptr_t *_err_state) {
-+	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
-+	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+unsigned long _mkcgo_ERR_peek_error(void) {
-+	return _g_ERR_peek_error();
-+}
-+
-+void _mkcgo_ERR_print_errors(_BIO_PTR _arg0) {
-+	_g_ERR_print_errors(_arg0);
-+}
-+
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR _arg0) {
-+	_g_EVP_CIPHER_CTX_free(_arg0);
-+}
-+
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *_err_state) {
-+	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR _arg0) {
-+	return _g_EVP_CIPHER_get0_name(_arg0);
-+}
-+
-+int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR _arg0) {
-+	return _g_EVP_CIPHER_get_block_size(_arg0);
-+}
-+
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_Digest(const unsigned char* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestFinalXOF(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_available_EVP_DigestSqueeze() {
-+	return _g_EVP_DigestSqueeze != NULL;
-+}
-+
-+int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestSqueeze(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR _arg0) {
-+	_g_EVP_KDF_CTX_free(_arg0);
-+}
-+
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, uintptr_t *_err_state) {
-+	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR _arg0) {
-+	_g_EVP_KDF_free(_arg0);
-+}
-+
-+int _mkcgo_available_EVP_KEYMGMT_fetch() {
-+	return _g_EVP_KEYMGMT_fetch != NULL;
-+}
-+
-+_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_KEYMGMT_PTR _ret = _g_EVP_KEYMGMT_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR _arg0) {
-+	_g_EVP_KEYMGMT_free(_arg0);
-+}
-+
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR _arg0) {
-+	_g_EVP_MAC_CTX_free(_arg0);
-+}
-+
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, uintptr_t *_err_state) {
-+	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MD_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
-+	_g_EVP_MD_CTX_free(_arg0);
-+}
-+
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *_err_state) {
-+	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_MD_free(_EVP_MD_PTR _arg0) {
-+	_g_EVP_MD_free(_arg0);
-+}
-+
-+const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get0_name(_arg0);
-+}
-+
-+const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get0_provider(_arg0);
-+}
-+
-+int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_block_size(_arg0);
-+}
-+
-+int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_size(_arg0);
-+}
-+
-+int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR _arg0) {
-+	return _g_EVP_MD_get_type(_arg0);
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR _arg0) {
-+	_g_EVP_PKEY_CTX_free(_arg0);
-+}
-+
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
-+	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_CTX_set_params(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_decapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_decapsulate_init(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_derive_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, unsigned char* _arg3, size_t* _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_encapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_encapsulate_init(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR _arg0) {
-+	_g_EVP_PKEY_free(_arg0);
-+}
-+
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, uintptr_t *_err_state) {
-+	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_bits(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, unsigned char* _arg2, size_t _arg3, size_t* _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_octet_string_param(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_get_size(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_private_check(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_sign_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_up_ref(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_PKEY_verify_init(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
-+	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR _arg0) {
-+	_g_EVP_SIGNATURE_free(_arg0);
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void) {
-+	return _g_EVP_aes_128_cbc();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void) {
-+	return _g_EVP_aes_128_ctr();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void) {
-+	return _g_EVP_aes_128_ecb();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void) {
-+	return _g_EVP_aes_128_gcm();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void) {
-+	return _g_EVP_aes_192_cbc();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void) {
-+	return _g_EVP_aes_192_ctr();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void) {
-+	return _g_EVP_aes_192_ecb();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void) {
-+	return _g_EVP_aes_192_gcm();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void) {
-+	return _g_EVP_aes_256_cbc();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void) {
-+	return _g_EVP_aes_256_ctr();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void) {
-+	return _g_EVP_aes_256_ecb();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void) {
-+	return _g_EVP_aes_256_gcm();
-+}
-+
-+int _mkcgo_available_EVP_chacha20_poly1305() {
-+	return _g_EVP_chacha20_poly1305 != NULL;
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void) {
-+	return _g_EVP_chacha20_poly1305();
-+}
-+
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR _arg0) {
-+	return _g_EVP_default_properties_is_fips_enabled(_arg0);
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void) {
-+	return _g_EVP_des_cbc();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void) {
-+	return _g_EVP_des_ecb();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void) {
-+	return _g_EVP_des_ede3_cbc();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void) {
-+	return _g_EVP_des_ede3_ecb();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_md4(void) {
-+	return _g_EVP_md4();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_md5(void) {
-+	return _g_EVP_md5();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void) {
-+	return _g_EVP_md5_sha1();
-+}
-+
-+const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void) {
-+	return _g_EVP_rc4();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void) {
-+	return _g_EVP_ripemd160();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha1(void) {
-+	return _g_EVP_sha1();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha224(void) {
-+	return _g_EVP_sha224();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha256(void) {
-+	return _g_EVP_sha256();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha384(void) {
-+	return _g_EVP_sha384();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void) {
-+	return _g_EVP_sha3_224();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void) {
-+	return _g_EVP_sha3_256();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void) {
-+	return _g_EVP_sha3_384();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void) {
-+	return _g_EVP_sha3_512();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha512(void) {
-+	return _g_EVP_sha512();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void) {
-+	return _g_EVP_sha512_224();
-+}
-+
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void) {
-+	return _g_EVP_sha512_256();
-+}
-+
-+int _mkcgo_FIPS_mode(void) {
-+	return _g_FIPS_mode();
-+}
-+
-+int _mkcgo_FIPS_mode_set(int _arg0, uintptr_t *_err_state) {
-+	int _ret = _g_FIPS_mode_set(_arg0);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR _arg0) {
-+	_g_HMAC_CTX_free(_arg0);
-+}
-+
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *_err_state) {
-+	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, uintptr_t *_err_state) {
-+	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const char* _mkcgo_OBJ_nid2sn(int _arg0) {
-+	return _g_OBJ_nid2sn(_arg0);
-+}
-+
-+void _mkcgo_OPENSSL_init(void) {
-+	_g_OPENSSL_init();
-+}
-+
-+int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_available_OPENSSL_version_major() {
-+	return _g_OPENSSL_version_major != NULL;
-+}
-+
-+unsigned int _mkcgo_OPENSSL_version_major(void) {
-+	return _g_OPENSSL_version_major();
-+}
-+
-+int _mkcgo_available_OPENSSL_version_minor() {
-+	return _g_OPENSSL_version_minor != NULL;
-+}
-+
-+unsigned int _mkcgo_OPENSSL_version_minor(void) {
-+	return _g_OPENSSL_version_minor();
-+}
-+
-+int _mkcgo_available_OPENSSL_version_patch() {
-+	return _g_OPENSSL_version_patch != NULL;
-+}
-+
-+unsigned int _mkcgo_OPENSSL_version_patch(void) {
-+	return _g_OPENSSL_version_patch();
-+}
-+
-+void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR _arg0) {
-+	_g_OSSL_PARAM_BLD_free(_arg0);
-+}
-+
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void) {
-+	return _g_OSSL_PARAM_BLD_new();
-+}
-+
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, uintptr_t *_err_state) {
-+	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR _arg0) {
-+	_g_OSSL_PARAM_free(_arg0);
-+}
-+
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, uintptr_t *_err_state) {
-+	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
-+	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
-+}
-+
-+const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR _arg0) {
-+	return _g_OSSL_PROVIDER_get0_name(_arg0);
-+}
-+
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
-+	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+const char* _mkcgo_OpenSSL_version(int _arg0) {
-+	return _g_OpenSSL_version(_arg0);
-+}
-+
-+int _mkcgo_available_OpenSSL_version_num() {
-+	return _g_OpenSSL_version_num != NULL;
-+}
-+
-+unsigned long _mkcgo_OpenSSL_version_num(void) {
-+	return _g_OpenSSL_version_num();
-+}
-+
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, uintptr_t *_err_state) {
-+	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, uintptr_t *_err_state) {
-+	int _ret = _g_RAND_bytes(_arg0, _arg1);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+void _mkcgo_RSA_free(_RSA_PTR _arg0) {
-+	_g_RSA_free(_arg0);
-+}
-+
-+void _mkcgo_RSA_get0_crt_params(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_RSA_get0_crt_params(_arg0, _arg1, _arg2, _arg3);
-+}
-+
-+void _mkcgo_RSA_get0_factors(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
-+	_g_RSA_get0_factors(_arg0, _arg1, _arg2);
-+}
-+
-+void _mkcgo_RSA_get0_key(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
-+	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
-+}
-+
-+_RSA_PTR _mkcgo_RSA_new(uintptr_t *_err_state) {
-+	_RSA_PTR _ret = _g_RSA_new();
-+	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
-+	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-+int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
-+	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
-+	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
-+	return _ret;
-+}
-+
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-new file mode 100644
-index 00000000000000..9f39419e8d14ae
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.go
-@@ -0,0 +1,73 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+package ossl
-+
-+const (
-+	POINT_CONVERSION_UNCOMPRESSED       = 4
-+	OPENSSL_INIT_LOAD_CRYPTO_STRINGS    = 0x00000002
-+	OPENSSL_INIT_ADD_ALL_CIPHERS        = 0x00000004
-+	OPENSSL_INIT_ADD_ALL_DIGESTS        = 0x00000008
-+	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
-+	EVP_CTRL_GCM_GET_TAG                = 0x10
-+	EVP_CTRL_GCM_SET_TAG                = 0x11
-+	EVP_CTRL_AEAD_SET_IVLEN             = 0x9
-+	EVP_CTRL_AEAD_GET_TAG               = 0x10
-+	EVP_CTRL_AEAD_SET_TAG               = 0x11
-+	EVP_PKEY_CTRL_MD                    = 1
-+	EVP_PKEY_RSA                        = 6
-+	EVP_PKEY_EC                         = 408
-+	EVP_PKEY_TLS1_PRF                   = 1021
-+	EVP_PKEY_X25519                     = 1034
-+	EVP_PKEY_HKDF                       = 1036
-+	EVP_PKEY_ED25519                    = 1087
-+	EVP_PKEY_DSA                        = 116
-+	EVP_PKEY_MLKEM_768                  = 1455
-+	EVP_PKEY_MLKEM_1024                 = 1456
-+	EVP_PKEY_ML_DSA_44                  = 1457
-+	EVP_PKEY_ML_DSA_65                  = 1458
-+	EVP_PKEY_ML_DSA_87                  = 1459
-+	EVP_PKEY_OP_DERIVE                  = (1 << 10)
-+	EVP_MAX_MD_SIZE                     = 64
-+	EVP_PKEY_PUBLIC_KEY                 = 0x86
-+	EVP_PKEY_KEYPAIR                    = 0x87
-+	EVP_MD_CTRL_XOF_LEN                 = 0x3
-+	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
-+	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
-+	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
-+	EVP_PKEY_CTRL_TLS_MD                = 0x1000
-+	EVP_PKEY_CTRL_TLS_SECRET            = 0x1001
-+	EVP_PKEY_CTRL_TLS_SEED              = 0x1002
-+	EVP_PKEY_CTRL_HKDF_MD               = 0x1003
-+	EVP_PKEY_CTRL_HKDF_SALT             = 0x1004
-+	EVP_PKEY_CTRL_HKDF_KEY              = 0x1005
-+	EVP_PKEY_CTRL_HKDF_INFO             = 0x1006
-+	EVP_PKEY_CTRL_HKDF_MODE             = 0x1007
-+	NID_X9_62_prime256v1                = 415
-+	NID_secp224r1                       = 713
-+	NID_secp384r1                       = 715
-+	NID_secp521r1                       = 716
-+	NID_ML_KEM_768                      = 1455
-+	NID_ML_KEM_1024                     = 1456
-+	NID_ML_DSA_44                       = 1457
-+	NID_ML_DSA_65                       = 1458
-+	NID_ML_DSA_87                       = 1459
-+	RSA_PKCS1_PADDING                   = 1
-+	RSA_NO_PADDING                      = 3
-+	RSA_PKCS1_OAEP_PADDING              = 4
-+	RSA_PKCS1_PSS_PADDING               = 6
-+	RSA_PSS_SALTLEN_DIGEST              = -1
-+	RSA_PSS_SALTLEN_AUTO                = -2
-+	RSA_PSS_SALTLEN_MAX_SIGN            = -2
-+	RSA_PSS_SALTLEN_MAX                 = -3
-+	EVP_PKEY_CTRL_RSA_PADDING           = 0x1001
-+	EVP_PKEY_CTRL_RSA_PSS_SALTLEN       = 0x1002
-+	EVP_PKEY_CTRL_RSA_KEYGEN_BITS       = 0x1003
-+	EVP_PKEY_CTRL_RSA_MGF1_MD           = 0x1005
-+	EVP_PKEY_CTRL_RSA_OAEP_MD           = 0x1009
-+	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
-+	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
-+	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
-+	OSSL_PARAM_INTEGER                  = 1
-+	OSSL_PARAM_OCTET_STRING             = 5
-+	BIO_CTRL_INFO                       = 3
-+)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-new file mode 100644
-index 00000000000000..5e172b625edf3a
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl.h
-@@ -0,0 +1,371 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+#ifndef MKCGO_H // only include this header once
-+#define MKCGO_H
-+
-+#include <stdlib.h>
-+#include <stdint.h>
-+
-+typedef void* _OPENSSL_INIT_SETTINGS_PTR;
-+typedef void* _OSSL_LIB_CTX_PTR;
-+typedef void* _OSSL_PROVIDER_PTR;
-+typedef void* _ENGINE_PTR;
-+typedef void* _EVP_PKEY_PTR;
-+typedef void* _EVP_PKEY_CTX_PTR;
-+typedef void* _EVP_MD_PTR;
-+typedef void* _EVP_MD_CTX_PTR;
-+typedef void* _HMAC_CTX_PTR;
-+typedef void* _EVP_CIPHER_PTR;
-+typedef void* _EVP_CIPHER_CTX_PTR;
-+typedef void* _EC_KEY_PTR;
-+typedef void* _EC_POINT_PTR;
-+typedef void* _EC_GROUP_PTR;
-+typedef void* _RSA_PTR;
-+typedef void* _BIGNUM_PTR;
-+typedef void* _BN_CTX_PTR;
-+typedef void* _EVP_MAC_PTR;
-+typedef void* _EVP_MAC_CTX_PTR;
-+typedef void* _OSSL_PARAM_BLD_PTR;
-+typedef void* _OSSL_PARAM_PTR;
-+typedef void* _EVP_SIGNATURE_PTR;
-+typedef void* _EVP_KEYMGMT_PTR;
-+typedef void* _DSA_PTR;
-+typedef void* _EVP_KDF_PTR;
-+typedef void* _EVP_KDF_CTX_PTR;
-+typedef void* _BIO_METHOD_PTR;
-+typedef void* _BIO_PTR;
-+typedef int point_conversion_form_t;
-+
-+enum {
-+	_POINT_CONVERSION_UNCOMPRESSED = 4,
-+	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
-+	_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004,
-+	_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008,
-+	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
-+	_EVP_CTRL_GCM_GET_TAG = 0x10,
-+	_EVP_CTRL_GCM_SET_TAG = 0x11,
-+	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
-+	_EVP_CTRL_AEAD_GET_TAG = 0x10,
-+	_EVP_CTRL_AEAD_SET_TAG = 0x11,
-+	_EVP_PKEY_CTRL_MD = 1,
-+	_EVP_PKEY_RSA = 6,
-+	_EVP_PKEY_EC = 408,
-+	_EVP_PKEY_TLS1_PRF = 1021,
-+	_EVP_PKEY_X25519 = 1034,
-+	_EVP_PKEY_HKDF = 1036,
-+	_EVP_PKEY_ED25519 = 1087,
-+	_EVP_PKEY_DSA = 116,
-+	_EVP_PKEY_MLKEM_768 = 1455,
-+	_EVP_PKEY_MLKEM_1024 = 1456,
-+	_EVP_PKEY_ML_DSA_44 = 1457,
-+	_EVP_PKEY_ML_DSA_65 = 1458,
-+	_EVP_PKEY_ML_DSA_87 = 1459,
-+	_EVP_PKEY_OP_DERIVE = (1 << 10),
-+	_EVP_MAX_MD_SIZE = 64,
-+	_EVP_PKEY_PUBLIC_KEY = 0x86,
-+	_EVP_PKEY_KEYPAIR = 0x87,
-+	_EVP_MD_CTRL_XOF_LEN = 0x3,
-+	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
-+	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
-+	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
-+	_EVP_PKEY_CTRL_TLS_MD = 0x1000,
-+	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
-+	_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
-+	_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
-+	_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
-+	_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
-+	_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
-+	_EVP_PKEY_CTRL_HKDF_MODE = 0x1007,
-+	_NID_X9_62_prime256v1 = 415,
-+	_NID_secp224r1 = 713,
-+	_NID_secp384r1 = 715,
-+	_NID_secp521r1 = 716,
-+	_NID_ML_KEM_768 = 1455,
-+	_NID_ML_KEM_1024 = 1456,
-+	_NID_ML_DSA_44 = 1457,
-+	_NID_ML_DSA_65 = 1458,
-+	_NID_ML_DSA_87 = 1459,
-+	_RSA_PKCS1_PADDING = 1,
-+	_RSA_NO_PADDING = 3,
-+	_RSA_PKCS1_OAEP_PADDING = 4,
-+	_RSA_PKCS1_PSS_PADDING = 6,
-+	_RSA_PSS_SALTLEN_DIGEST = -1,
-+	_RSA_PSS_SALTLEN_AUTO = -2,
-+	_RSA_PSS_SALTLEN_MAX_SIGN = -2,
-+	_RSA_PSS_SALTLEN_MAX = -3,
-+	_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
-+	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
-+	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
-+	_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
-+	_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
-+	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
-+	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
-+	_OSSL_PARAM_INTEGER = 1,
-+	_OSSL_PARAM_OCTET_STRING = 5,
-+	BIO_CTRL_INFO = 3,
-+};
-+
-+uintptr_t mkcgo_err_retrieve();
-+void __mkcgo_load_(void* handle);
-+void __mkcgo_unload_();
-+void __mkcgo_load_3(void* handle);
-+void __mkcgo_unload_3();
-+void __mkcgo_load_33(void* handle);
-+void __mkcgo_unload_33();
-+void __mkcgo_load_init_1(void* handle);
-+void __mkcgo_unload_init_1();
-+void __mkcgo_load_init_3(void* handle);
-+void __mkcgo_unload_init_3();
-+void __mkcgo_load_legacy_1(void* handle);
-+void __mkcgo_unload_legacy_1();
-+void __mkcgo_load_version(void* handle);
-+void __mkcgo_unload_version();
-+
-+int _mkcgo_available_EVP_DigestSqueeze();
-+int _mkcgo_available_EVP_KEYMGMT_fetch();
-+int _mkcgo_available_EVP_chacha20_poly1305();
-+int _mkcgo_available_OPENSSL_version_major();
-+int _mkcgo_available_OPENSSL_version_minor();
-+int _mkcgo_available_OPENSSL_version_patch();
-+int _mkcgo_available_OpenSSL_version_num();
-+
-+long _mkcgo_BIO_ctrl(_BIO_PTR, int, long, void*);
-+int _mkcgo_BIO_free(_BIO_PTR);
-+_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR, uintptr_t *);
-+const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void);
-+_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
-+int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
-+void _mkcgo_BN_clear(_BIGNUM_PTR);
-+void _mkcgo_BN_clear_free(_BIGNUM_PTR);
-+void _mkcgo_BN_free(_BIGNUM_PTR);
-+_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
-+_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *);
-+int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
-+void _mkcgo_CRYPTO_free(void*, const char*, int);
-+void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, uintptr_t *);
-+void _mkcgo_DSA_free(_DSA_PTR);
-+int _mkcgo_DSA_generate_key(_DSA_PTR, uintptr_t *);
-+void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_DSA_PTR _mkcgo_DSA_new(uintptr_t *);
-+int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
-+_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, uintptr_t *);
-+int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, uintptr_t *);
-+void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
-+const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
-+const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
-+const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
-+_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, uintptr_t *);
-+int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, uintptr_t *);
-+int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
-+int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
-+int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
-+_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, uintptr_t *);
-+int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
-+size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
-+int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
-+unsigned long _mkcgo_ERR_peek_error(void);
-+void _mkcgo_ERR_print_errors(_BIO_PTR);
-+int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, uintptr_t *);
-+void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
-+_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *);
-+int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
-+int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
-+_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
-+int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
-+int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
-+int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
-+int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_Digest(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
-+int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
-+int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
-+int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
-+int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
-+int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
-+int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
-+int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
-+void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
-+size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, uintptr_t *);
-+_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, uintptr_t *);
-+int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
-+_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
-+_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, uintptr_t *);
-+void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
-+_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, uintptr_t *);
-+int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, uintptr_t *);
-+int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
-+int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR, int, int, void*, uintptr_t *);
-+void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
-+int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, uintptr_t *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, uintptr_t *);
-+_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *);
-+int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, uintptr_t *);
-+_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
-+const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
-+const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
-+int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
-+int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, uintptr_t *);
-+void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, uintptr_t *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, uintptr_t *);
-+_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, uintptr_t *);
-+int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
-+int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, uintptr_t *);
-+_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, uintptr_t *);
-+_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, uintptr_t *);
-+size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
-+_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
-+int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, uintptr_t *);
-+int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
-+_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
-+void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void);
-+int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, uintptr_t *);
-+int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md4(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md5(void);
-+const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void);
-+const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void);
-+const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha1(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha256(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha384(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
-+const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
-+int _mkcgo_FIPS_mode(void);
-+int _mkcgo_FIPS_mode_set(int, uintptr_t *);
-+int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, uintptr_t *);
-+void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
-+_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *);
-+int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
-+int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
-+int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
-+const char* _mkcgo_OBJ_nid2sn(int);
-+void _mkcgo_OPENSSL_init(void);
-+int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, uintptr_t *);
-+unsigned int _mkcgo_OPENSSL_version_major(void);
-+unsigned int _mkcgo_OPENSSL_version_minor(void);
-+unsigned int _mkcgo_OPENSSL_version_patch(void);
-+void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
-+_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void);
-+int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, uintptr_t *);
-+int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t, uintptr_t *);
-+int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, uintptr_t *);
-+_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, uintptr_t *);
-+void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
-+const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, uintptr_t *);
-+int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
-+const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
-+_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, uintptr_t *);
-+const char* _mkcgo_OpenSSL_version(int);
-+unsigned long _mkcgo_OpenSSL_version_num(void);
-+int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, uintptr_t *);
-+int _mkcgo_RAND_bytes(unsigned char*, int, uintptr_t *);
-+void _mkcgo_RSA_free(_RSA_PTR);
-+void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
-+_RSA_PTR _mkcgo_RSA_new(uintptr_t *);
-+int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
-+
-+#endif // MKCGO_H
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-new file mode 100644
-index 00000000000000..9faa8e16a69cf6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_cgo.go
-@@ -0,0 +1,1502 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+package ossl
-+
-+/*
-+#cgo CFLAGS: -Wno-attributes
-+#cgo unix LDFLAGS: -ldl
-+
-+#include "zossl.h"
-+#cgo noescape _mkcgo_BIO_ctrl
-+#cgo nocallback _mkcgo_BIO_ctrl
-+#cgo noescape _mkcgo_BIO_free
-+#cgo nocallback _mkcgo_BIO_free
-+#cgo noescape _mkcgo_ERR_print_errors
-+#cgo nocallback _mkcgo_ERR_print_errors
-+#cgo noescape _mkcgo_EVP_CipherUpdate
-+#cgo nocallback _mkcgo_EVP_CipherUpdate
-+#cgo noescape _mkcgo_EVP_DecryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
-+#cgo noescape _mkcgo_EVP_DecryptUpdate
-+#cgo nocallback _mkcgo_EVP_DecryptUpdate
-+#cgo noescape _mkcgo_EVP_Digest
-+#cgo nocallback _mkcgo_EVP_Digest
-+#cgo noescape _mkcgo_EVP_DigestFinalXOF
-+#cgo nocallback _mkcgo_EVP_DigestFinalXOF
-+#cgo noescape _mkcgo_EVP_DigestFinal_ex
-+#cgo nocallback _mkcgo_EVP_DigestFinal_ex
-+#cgo noescape _mkcgo_EVP_DigestSign
-+#cgo nocallback _mkcgo_EVP_DigestSign
-+#cgo noescape _mkcgo_EVP_DigestSqueeze
-+#cgo nocallback _mkcgo_EVP_DigestSqueeze
-+#cgo noescape _mkcgo_EVP_DigestUpdate
-+#cgo nocallback _mkcgo_EVP_DigestUpdate
-+#cgo noescape _mkcgo_EVP_EncryptFinal_ex
-+#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
-+#cgo noescape _mkcgo_EVP_EncryptUpdate
-+#cgo nocallback _mkcgo_EVP_EncryptUpdate
-+#cgo noescape _mkcgo_EVP_MAC_CTX_free
-+#cgo nocallback _mkcgo_EVP_MAC_CTX_free
-+#cgo noescape _mkcgo_EVP_MAC_final
-+#cgo nocallback _mkcgo_EVP_MAC_final
-+#cgo noescape _mkcgo_EVP_MAC_init
-+#cgo nocallback _mkcgo_EVP_MAC_init
-+#cgo noescape _mkcgo_EVP_MAC_update
-+#cgo nocallback _mkcgo_EVP_MAC_update
-+#cgo noescape _mkcgo_EVP_MD_CTX_get_params
-+#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
-+#cgo noescape _mkcgo_EVP_MD_CTX_set_params
-+#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
-+#cgo noescape _mkcgo_EVP_PKEY_CTX_set_params
-+#cgo nocallback _mkcgo_EVP_PKEY_CTX_set_params
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_EC
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_EC
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_ED25519
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_ED25519
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLDSA
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLDSA
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLKEM
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLKEM
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_RSA
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_RSA
-+#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_X25519
-+#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_X25519
-+#cgo noescape _mkcgo_EVP_PKEY_derive
-+#cgo nocallback _mkcgo_EVP_PKEY_derive
-+#cgo noescape _mkcgo_EVP_PKEY_get_bn_param
-+#cgo nocallback _mkcgo_EVP_PKEY_get_bn_param
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
-+#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
-+#cgo noescape _mkcgo_EVP_PKEY_keygen
-+#cgo nocallback _mkcgo_EVP_PKEY_keygen
-+#cgo noescape _mkcgo_HMAC_CTX_copy
-+#cgo nocallback _mkcgo_HMAC_CTX_copy
-+#cgo noescape _mkcgo_HMAC_CTX_free
-+#cgo nocallback _mkcgo_HMAC_CTX_free
-+#cgo noescape _mkcgo_HMAC_Final
-+#cgo nocallback _mkcgo_HMAC_Final
-+#cgo noescape _mkcgo_HMAC_Init_ex
-+#cgo nocallback _mkcgo_HMAC_Init_ex
-+#cgo noescape _mkcgo_HMAC_Update
-+#cgo nocallback _mkcgo_HMAC_Update
-+#cgo noescape _mkcgo_RAND_bytes
-+#cgo nocallback _mkcgo_RAND_bytes
-+*/
-+import "C"
-+import "unsafe"
-+
-+type BIGNUM_PTR = C._BIGNUM_PTR
-+type BIO_METHOD_PTR = C._BIO_METHOD_PTR
-+type BIO_PTR = C._BIO_PTR
-+type BN_CTX_PTR = C._BN_CTX_PTR
-+type DSA_PTR = C._DSA_PTR
-+type EC_GROUP_PTR = C._EC_GROUP_PTR
-+type EC_KEY_PTR = C._EC_KEY_PTR
-+type EC_POINT_PTR = C._EC_POINT_PTR
-+type ENGINE_PTR = C._ENGINE_PTR
-+type EVP_CIPHER_CTX_PTR = C._EVP_CIPHER_CTX_PTR
-+type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
-+type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
-+type EVP_KDF_PTR = C._EVP_KDF_PTR
-+type EVP_KEYMGMT_PTR = C._EVP_KEYMGMT_PTR
-+type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
-+type EVP_MAC_PTR = C._EVP_MAC_PTR
-+type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
-+type EVP_MD_PTR = C._EVP_MD_PTR
-+type EVP_PKEY_CTX_PTR = C._EVP_PKEY_CTX_PTR
-+type EVP_PKEY_PTR = C._EVP_PKEY_PTR
-+type EVP_SIGNATURE_PTR = C._EVP_SIGNATURE_PTR
-+type HMAC_CTX_PTR = C._HMAC_CTX_PTR
-+type OPENSSL_INIT_SETTINGS_PTR = C._OPENSSL_INIT_SETTINGS_PTR
-+type OSSL_LIB_CTX_PTR = C._OSSL_LIB_CTX_PTR
-+type OSSL_PARAM_BLD_PTR = C._OSSL_PARAM_BLD_PTR
-+type OSSL_PARAM_PTR = C._OSSL_PARAM_PTR
-+type OSSL_PROVIDER_PTR = C._OSSL_PROVIDER_PTR
-+type RSA_PTR = C._RSA_PTR
-+type Point_conversion_form_t = C.point_conversion_form_t
-+
-+func MkcgoLoad_(handle unsafe.Pointer) {
-+	C.__mkcgo_load_(handle)
-+}
-+
-+func MkcgoUnload_() {
-+	C.__mkcgo_unload_()
-+}
-+
-+func MkcgoLoad_3(handle unsafe.Pointer) {
-+	C.__mkcgo_load_3(handle)
-+}
-+
-+func MkcgoUnload_3() {
-+	C.__mkcgo_unload_3()
-+}
-+
-+func MkcgoLoad_33(handle unsafe.Pointer) {
-+	C.__mkcgo_load_33(handle)
-+}
-+
-+func MkcgoUnload_33() {
-+	C.__mkcgo_unload_33()
-+}
-+
-+func MkcgoLoad_init_1(handle unsafe.Pointer) {
-+	C.__mkcgo_load_init_1(handle)
-+}
-+
-+func MkcgoUnload_init_1() {
-+	C.__mkcgo_unload_init_1()
-+}
-+
-+func MkcgoLoad_init_3(handle unsafe.Pointer) {
-+	C.__mkcgo_load_init_3(handle)
-+}
-+
-+func MkcgoUnload_init_3() {
-+	C.__mkcgo_unload_init_3()
-+}
-+
-+func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
-+	C.__mkcgo_load_legacy_1(handle)
-+}
-+
-+func MkcgoUnload_legacy_1() {
-+	C.__mkcgo_unload_legacy_1()
-+}
-+
-+func MkcgoLoad_version(handle unsafe.Pointer) {
-+	C.__mkcgo_load_version(handle)
-+}
-+
-+func MkcgoUnload_version() {
-+	C.__mkcgo_unload_version()
-+}
-+
-+//go:nosplit
-+func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
-+	x := uintptr(unsafe.Pointer(p))
-+	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
-+}
-+
-+func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
-+	return int64(C._mkcgo_BIO_ctrl(bp, C.int(cmd), C.long(larg), parg))
-+}
-+
-+func BIO_free(a BIO_PTR) int32 {
-+	return int32(C._mkcgo_BIO_free(a))
-+}
-+
-+func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BIO_new(__type, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BIO_new", uintptr(_err))
-+}
-+
-+func BIO_s_mem() BIO_METHOD_PTR {
-+	return C._mkcgo_BIO_s_mem()
-+}
-+
-+func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg0))), C.int(len(arg0)), arg2, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_bin2bn", uintptr(_err))
-+}
-+
-+func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2binpad", uintptr(_err))
-+}
-+
-+func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", uintptr(_err))
-+}
-+
-+func BN_clear(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_clear(arg0)
-+}
-+
-+func BN_clear_free(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_clear_free(arg0)
-+}
-+
-+func BN_free(arg0 BIGNUM_PTR) {
-+	C._mkcgo_BN_free(arg0)
-+}
-+
-+func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(s))), C.int(len(s)), ret, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_lebin2bn", uintptr(_err))
-+}
-+
-+func BN_new() (BIGNUM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("BN_new", uintptr(_err))
-+}
-+
-+func BN_num_bits(arg0 BIGNUM_PTR) int32 {
-+	return int32(C._mkcgo_BN_num_bits(arg0))
-+}
-+
-+func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
-+	C._mkcgo_CRYPTO_free(str, (*C.char)(unsafe.Pointer(file)), C.int(line))
-+}
-+
-+func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("CRYPTO_malloc", uintptr(_err))
-+}
-+
-+func DSA_free(r DSA_PTR) {
-+	C._mkcgo_DSA_free(r)
-+}
-+
-+func DSA_generate_key(a DSA_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_generate_key", uintptr(_err))
-+}
-+
-+func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
-+	C._mkcgo_DSA_get0_key(d, pub_key, priv_key)
-+}
-+
-+func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
-+	C._mkcgo_DSA_get0_pqg(d, p, q, g)
-+}
-+
-+func DSA_new() (DSA_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("DSA_new", uintptr(_err))
-+}
-+
-+func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_key", uintptr(_err))
-+}
-+
-+func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("DSA_set0_pqg", uintptr(_err))
-+}
-+
-+func EC_GROUP_free(group EC_GROUP_PTR) {
-+	C._mkcgo_EC_GROUP_free(group)
-+}
-+
-+func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", uintptr(_err))
-+}
-+
-+func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_check_key", uintptr(_err))
-+}
-+
-+func EC_KEY_free(arg0 EC_KEY_PTR) {
-+	C._mkcgo_EC_KEY_free(arg0)
-+}
-+
-+func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
-+	return C._mkcgo_EC_KEY_get0_group(arg0)
-+}
-+
-+func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
-+	return C._mkcgo_EC_KEY_get0_private_key(arg0)
-+}
-+
-+func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
-+	return C._mkcgo_EC_KEY_get0_public_key(arg0)
-+}
-+
-+func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", uintptr(_err))
-+}
-+
-+func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", uintptr(_err))
-+}
-+
-+func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", uintptr(_err))
-+}
-+
-+func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", uintptr(_err))
-+}
-+
-+func EC_POINT_free(arg0 EC_POINT_PTR) {
-+	C._mkcgo_EC_POINT_free(arg0)
-+}
-+
-+func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", uintptr(_err))
-+}
-+
-+func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_mul", uintptr(_err))
-+}
-+
-+func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EC_POINT_new", uintptr(_err))
-+}
-+
-+func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", uintptr(_err))
-+}
-+
-+func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EC_POINT_point2oct", uintptr(_err))
-+}
-+
-+func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", uintptr(_err))
-+}
-+
-+func ERR_peek_error() uint64 {
-+	return uint64(C._mkcgo_ERR_peek_error())
-+}
-+
-+func ERR_print_errors(bp BIO_PTR) {
-+	C._mkcgo_ERR_print_errors(bp)
-+}
-+
-+func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", uintptr(_err))
-+}
-+
-+func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
-+	C._mkcgo_EVP_CIPHER_CTX_free(arg0)
-+}
-+
-+func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", uintptr(_err))
-+}
-+
-+func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", uintptr(_err))
-+}
-+
-+func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", uintptr(_err))
-+}
-+
-+func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_CIPHER_fetch", uintptr(_err))
-+}
-+
-+func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_CIPHER_get0_name(cipher)))
-+}
-+
-+func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
-+	return int32(C._mkcgo_EVP_CIPHER_get_block_size(cipher))
-+}
-+
-+func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", uintptr(_err))
-+}
-+
-+func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_CipherUpdate: *outl exceeds len(out)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", uintptr(_err))
-+}
-+
-+func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
-+	if outl != nil && int(*outl) > len(outm) {
-+		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(outm))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", uintptr(_err))
-+}
-+
-+func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", uintptr(_err))
-+}
-+
-+func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", uintptr(_err))
-+}
-+
-+func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	if size != nil && int(*size) > len(md) {
-+		panic("EVP_Digest: *size exceeds len(md)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
-+}
-+
-+func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestFinalXOF(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), C.size_t(len(md)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestFinalXOF", uintptr(_err))
-+}
-+
-+func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
-+	if s != nil && int(*s) > len(md) {
-+		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", uintptr(_err))
-+}
-+
-+func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit", uintptr(_err))
-+}
-+
-+func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", uintptr(_err))
-+}
-+
-+func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
-+	if siglen != nil && int(*siglen) > len(sigret) {
-+		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSign", uintptr(_err))
-+}
-+
-+func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
-+	if siglen != nil && int(*siglen) > len(sig) {
-+		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", uintptr(_err))
-+}
-+
-+func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", uintptr(_err))
-+}
-+
-+func EVP_DigestSqueeze_Available() bool {
-+	return C._mkcgo_available_EVP_DigestSqueeze() != 0
-+}
-+
-+func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestSqueeze(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), C.size_t(len(out)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestSqueeze", uintptr(_err))
-+}
-+
-+func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(d))), C.size_t(len(d)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", uintptr(_err))
-+}
-+
-+func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), C.size_t(len(sigret)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerify", uintptr(_err))
-+}
-+
-+func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", uintptr(_err))
-+}
-+
-+func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", uintptr(_err))
-+}
-+
-+func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", uintptr(_err))
-+}
-+
-+func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", uintptr(_err))
-+}
-+
-+func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", uintptr(_err))
-+}
-+
-+func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
-+	C._mkcgo_EVP_KDF_CTX_free(ctx)
-+}
-+
-+func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", uintptr(_err))
-+}
-+
-+func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_CTX_new", uintptr(_err))
-+}
-+
-+func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", uintptr(_err))
-+}
-+
-+func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_KDF_derive", uintptr(_err))
-+}
-+
-+func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KDF_fetch", uintptr(_err))
-+}
-+
-+func EVP_KDF_free(kdf EVP_KDF_PTR) {
-+	C._mkcgo_EVP_KDF_free(kdf)
-+}
-+
-+func EVP_KEYMGMT_fetch_Available() bool {
-+	return C._mkcgo_available_EVP_KEYMGMT_fetch() != 0
-+}
-+
-+func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_KEYMGMT_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_KEYMGMT_fetch", uintptr(_err))
-+}
-+
-+func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
-+	C._mkcgo_EVP_KEYMGMT_free(keymgmt)
-+}
-+
-+func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", uintptr(_err))
-+}
-+
-+func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
-+	C._mkcgo_EVP_MAC_CTX_free(arg0)
-+}
-+
-+func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_CTX_new", uintptr(_err))
-+}
-+
-+func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", uintptr(_err))
-+}
-+
-+func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MAC_fetch", uintptr(_err))
-+}
-+
-+func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(len(out)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_final", uintptr(_err))
-+}
-+
-+func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_init", uintptr(_err))
-+}
-+
-+func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MAC_update", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_ctrl(ctx, C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_ctrl", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
-+	C._mkcgo_EVP_MD_CTX_free(ctx)
-+}
-+
-+func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_new", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", uintptr(_err))
-+}
-+
-+func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", uintptr(_err))
-+}
-+
-+func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_MD_fetch", uintptr(_err))
-+}
-+
-+func EVP_MD_free(md EVP_MD_PTR) {
-+	C._mkcgo_EVP_MD_free(md)
-+}
-+
-+func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_MD_get0_name(md)))
-+}
-+
-+func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
-+	return C._mkcgo_EVP_MD_get0_provider(md)
-+}
-+
-+func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_block_size(md))
-+}
-+
-+func EVP_MD_get_size(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_size(md))
-+}
-+
-+func EVP_MD_get_type(md EVP_MD_PTR) int32 {
-+	return int32(C._mkcgo_EVP_MD_get_type(md))
-+}
-+
-+func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
-+	C._mkcgo_EVP_PKEY_CTX_free(arg0)
-+}
-+
-+func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(label))), C.int(len(label)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", uintptr(_err))
-+}
-+
-+func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_params", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLDSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLKEM(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", uintptr(_err))
-+}
-+
-+func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_Q_keygen_X25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_X25519", uintptr(_err))
-+}
-+
-+func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", uintptr(_err))
-+}
-+
-+func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_decapsulate(ctx, (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), (*C.uchar)(unsafe.Pointer(wrappedkey)), C.size_t(wrappedkeylen), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate", uintptr(_err))
-+}
-+
-+func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_decapsulate_init(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", uintptr(_err))
-+}
-+
-+func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
-+	if keylen != nil && int(*keylen) > len(key) {
-+		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", uintptr(_err))
-+}
-+
-+func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", uintptr(_err))
-+}
-+
-+func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_encapsulate(ctx, (*C.uchar)(unsafe.Pointer(wrappedkey)), (*C.size_t)(unsafe.Pointer(wrappedkeylen)), (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate", uintptr(_err))
-+}
-+
-+func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_encapsulate_init(ctx, params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", uintptr(_err))
-+}
-+
-+func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
-+	C._mkcgo_EVP_PKEY_free(arg0)
-+}
-+
-+func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", uintptr(_err))
-+}
-+
-+func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
-+	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_octet_string_param(pkey, (*C.char)(unsafe.Pointer(key_name)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), (*C.size_t)(unsafe.Pointer(out_len)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_octet_string_param", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
-+	if privlen != nil && int(*privlen) > len(priv) {
-+		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(priv))), (*C.size_t)(unsafe.Pointer(privlen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
-+	if publen != nil && int(*publen) > len(pub) {
-+		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), (*C.size_t)(unsafe.Pointer(publen)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", uintptr(_err))
-+}
-+
-+func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", uintptr(_err))
-+}
-+
-+func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new", uintptr(_err))
-+}
-+
-+func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", uintptr(_err))
-+}
-+
-+func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", uintptr(_err))
-+}
-+
-+func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", uintptr(_err))
-+}
-+
-+func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", uintptr(_err))
-+}
-+
-+func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), C.size_t(len(pub)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", uintptr(_err))
-+}
-+
-+func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", uintptr(_err))
-+}
-+
-+func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", uintptr(_err))
-+}
-+
-+func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", uintptr(_err))
-+}
-+
-+func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", uintptr(_err))
-+}
-+
-+func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", uintptr(_err))
-+}
-+
-+func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", uintptr(_err))
-+}
-+
-+func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
-+	C._mkcgo_EVP_SIGNATURE_free(signature)
-+}
-+
-+func EVP_aes_128_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_cbc()
-+}
-+
-+func EVP_aes_128_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_ctr()
-+}
-+
-+func EVP_aes_128_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_ecb()
-+}
-+
-+func EVP_aes_128_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_128_gcm()
-+}
-+
-+func EVP_aes_192_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_cbc()
-+}
-+
-+func EVP_aes_192_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_ctr()
-+}
-+
-+func EVP_aes_192_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_ecb()
-+}
-+
-+func EVP_aes_192_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_192_gcm()
-+}
-+
-+func EVP_aes_256_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_cbc()
-+}
-+
-+func EVP_aes_256_ctr() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_ctr()
-+}
-+
-+func EVP_aes_256_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_ecb()
-+}
-+
-+func EVP_aes_256_gcm() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_aes_256_gcm()
-+}
-+
-+func EVP_chacha20_poly1305_Available() bool {
-+	return C._mkcgo_available_EVP_chacha20_poly1305() != 0
-+}
-+
-+func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_chacha20_poly1305()
-+}
-+
-+func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", uintptr(_err))
-+}
-+
-+func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
-+	return int32(C._mkcgo_EVP_default_properties_is_fips_enabled(libctx))
-+}
-+
-+func EVP_des_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_cbc()
-+}
-+
-+func EVP_des_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ecb()
-+}
-+
-+func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ede3_cbc()
-+}
-+
-+func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_des_ede3_ecb()
-+}
-+
-+func EVP_md4() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md4()
-+}
-+
-+func EVP_md5() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md5()
-+}
-+
-+func EVP_md5_sha1() EVP_MD_PTR {
-+	return C._mkcgo_EVP_md5_sha1()
-+}
-+
-+func EVP_rc4() EVP_CIPHER_PTR {
-+	return C._mkcgo_EVP_rc4()
-+}
-+
-+func EVP_ripemd160() EVP_MD_PTR {
-+	return C._mkcgo_EVP_ripemd160()
-+}
-+
-+func EVP_sha1() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha1()
-+}
-+
-+func EVP_sha224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha224()
-+}
-+
-+func EVP_sha256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha256()
-+}
-+
-+func EVP_sha384() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha384()
-+}
-+
-+func EVP_sha3_224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_224()
-+}
-+
-+func EVP_sha3_256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_256()
-+}
-+
-+func EVP_sha3_384() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_384()
-+}
-+
-+func EVP_sha3_512() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha3_512()
-+}
-+
-+func EVP_sha512() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512()
-+}
-+
-+func EVP_sha512_224() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512_224()
-+}
-+
-+func EVP_sha512_256() EVP_MD_PTR {
-+	return C._mkcgo_EVP_sha512_256()
-+}
-+
-+func FIPS_mode() int32 {
-+	return int32(C._mkcgo_FIPS_mode())
-+}
-+
-+func FIPS_mode_set(r int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("FIPS_mode_set", uintptr(_err))
-+}
-+
-+func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", uintptr(_err))
-+}
-+
-+func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
-+	C._mkcgo_HMAC_CTX_free(arg0)
-+}
-+
-+func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("HMAC_CTX_new", uintptr(_err))
-+}
-+
-+func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("HMAC_Final: *arg2 exceeds len(arg1)")
-+	}
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Final", uintptr(_err))
-+}
-+
-+func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Init_ex(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), arg3, arg4, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Init_ex", uintptr(_err))
-+}
-+
-+func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.size_t(len(arg1)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("HMAC_Update", uintptr(_err))
-+}
-+
-+func OBJ_nid2sn(n int32) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OBJ_nid2sn(C.int(n))))
-+}
-+
-+func OPENSSL_init() {
-+	C._mkcgo_OPENSSL_init()
-+}
-+
-+func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", uintptr(_err))
-+}
-+
-+func OPENSSL_version_major_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_major() != 0
-+}
-+
-+func OPENSSL_version_major() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_major())
-+}
-+
-+func OPENSSL_version_minor_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_minor() != 0
-+}
-+
-+func OPENSSL_version_minor() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_minor())
-+}
-+
-+func OPENSSL_version_patch_Available() bool {
-+	return C._mkcgo_available_OPENSSL_version_patch() != 0
-+}
-+
-+func OPENSSL_version_patch() uint32 {
-+	return uint32(C._mkcgo_OPENSSL_version_patch())
-+}
-+
-+func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
-+	C._mkcgo_OSSL_PARAM_BLD_free(bld)
-+}
-+
-+func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
-+	return C._mkcgo_OSSL_PARAM_BLD_new()
-+}
-+
-+func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", uintptr(_err))
-+}
-+
-+func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", uintptr(_err))
-+}
-+
-+func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", uintptr(_err))
-+}
-+
-+func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", uintptr(_err))
-+}
-+
-+func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", uintptr(_err))
-+}
-+
-+func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
-+	C._mkcgo_OSSL_PARAM_free(p)
-+}
-+
-+func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", uintptr(_err))
-+}
-+
-+func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
-+	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
-+}
-+
-+func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OSSL_PROVIDER_get0_name(prov)))
-+}
-+
-+func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", uintptr(_err))
-+}
-+
-+func OpenSSL_version(__type int32) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_OpenSSL_version(C.int(__type))))
-+}
-+
-+func OpenSSL_version_num_Available() bool {
-+	return C._mkcgo_available_OpenSSL_version_num() != 0
-+}
-+
-+func OpenSSL_version_num() uint64 {
-+	return uint64(C._mkcgo_OpenSSL_version_num())
-+}
-+
-+func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(unsafe.SliceData(pass))), C.int(len(pass)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(salt))), C.int(len(salt)), C.int(iter), digest, C.int(len(out)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", uintptr(_err))
-+}
-+
-+func RAND_bytes(arg0 []byte) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg0))), C.int(len(arg0)), mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RAND_bytes", uintptr(_err))
-+}
-+
-+func RSA_free(arg0 RSA_PTR) {
-+	C._mkcgo_RSA_free(arg0)
-+}
-+
-+func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_crt_params(r, dmp1, dmq1, iqmp)
-+}
-+
-+func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_factors(rsa, p, q)
-+}
-+
-+func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
-+	C._mkcgo_RSA_get0_key(rsa, n, e, d)
-+}
-+
-+func RSA_new() (RSA_PTR, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
-+	return _ret, newMkcgoErr("RSA_new", uintptr(_err))
-+}
-+
-+func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", uintptr(_err))
-+}
-+
-+func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_factors", uintptr(_err))
-+}
-+
-+func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	var _err C.uintptr_t
-+	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
-+	return int32(_ret), newMkcgoErr("RSA_set0_key", uintptr(_err))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-new file mode 100644
-index 00000000000000..9940275b3749ff
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/internal/ossl/zossl_nocgo.go
-@@ -0,0 +1,2468 @@
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo
-+
-+package ossl
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+)
-+
-+var _ = runtime.GOOS
-+
-+var _mkcgoAlwaysFalseOssl bool
-+var _mkcgoEscapeSinkOssl unsafe.Pointer
-+
-+// mkcgoEscapePtrOssl forces p to escape to the heap.
-+// This implementation is also used in the standard library:
-+// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
-+func mkcgoEscapePtrOssl(p unsafe.Pointer) unsafe.Pointer {
-+	if _mkcgoAlwaysFalseOssl {
-+		_mkcgoEscapeSinkOssl = p
-+	}
-+	return p
-+}
-+
-+type OPENSSL_INIT_SETTINGS_PTR unsafe.Pointer
-+type OSSL_LIB_CTX_PTR unsafe.Pointer
-+type OSSL_PROVIDER_PTR unsafe.Pointer
-+type ENGINE_PTR unsafe.Pointer
-+type EVP_PKEY_PTR unsafe.Pointer
-+type EVP_PKEY_CTX_PTR unsafe.Pointer
-+type EVP_MD_PTR unsafe.Pointer
-+type EVP_MD_CTX_PTR unsafe.Pointer
-+type HMAC_CTX_PTR unsafe.Pointer
-+type EVP_CIPHER_PTR unsafe.Pointer
-+type EVP_CIPHER_CTX_PTR unsafe.Pointer
-+type EC_KEY_PTR unsafe.Pointer
-+type EC_POINT_PTR unsafe.Pointer
-+type EC_GROUP_PTR unsafe.Pointer
-+type RSA_PTR unsafe.Pointer
-+type BIGNUM_PTR unsafe.Pointer
-+type BN_CTX_PTR unsafe.Pointer
-+type EVP_MAC_PTR unsafe.Pointer
-+type EVP_MAC_CTX_PTR unsafe.Pointer
-+type OSSL_PARAM_BLD_PTR unsafe.Pointer
-+type OSSL_PARAM_PTR unsafe.Pointer
-+type EVP_SIGNATURE_PTR unsafe.Pointer
-+type EVP_KEYMGMT_PTR unsafe.Pointer
-+type DSA_PTR unsafe.Pointer
-+type EVP_KDF_PTR unsafe.Pointer
-+type EVP_KDF_CTX_PTR unsafe.Pointer
-+type BIO_METHOD_PTR unsafe.Pointer
-+type BIO_PTR unsafe.Pointer
-+type Point_conversion_form_t = int32
-+
-+var _mkcgo_BIO_ctrl uintptr
-+
-+func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
-+	r0, _ := syscallN(0, _mkcgo_BIO_ctrl, uintptr(bp), uintptr(cmd), uintptr(larg), uintptr(parg))
-+	return int64(r0)
-+}
-+
-+var _mkcgo_BIO_free uintptr
-+
-+func BIO_free(a BIO_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_BIO_free, uintptr(a))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_BIO_new uintptr
-+
-+func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BIO_new, uintptr(__type), uintptr(unsafe.Pointer(&_err)))
-+	return BIO_PTR(r0), newMkcgoErr("BIO_new", _err)
-+}
-+
-+var _mkcgo_BIO_s_mem uintptr
-+
-+func BIO_s_mem() BIO_METHOD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_BIO_s_mem)
-+	return BIO_METHOD_PTR(r0)
-+}
-+
-+var _mkcgo_BN_bin2bn uintptr
-+
-+func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg0)))), uintptr(len(arg0)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", _err)
-+}
-+
-+var _mkcgo_BN_bn2binpad uintptr
-+
-+func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("BN_bn2binpad", _err)
-+}
-+
-+var _mkcgo_BN_bn2lebinpad uintptr
-+
-+func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("BN_bn2lebinpad", _err)
-+}
-+
-+var _mkcgo_BN_clear uintptr
-+
-+func BN_clear(arg0 BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_BN_clear, uintptr(arg0))
-+}
-+
-+var _mkcgo_BN_clear_free uintptr
-+
-+func BN_clear_free(arg0 BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_BN_clear_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_BN_free uintptr
-+
-+func BN_free(arg0 BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_BN_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_BN_lebin2bn uintptr
-+
-+func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(s)))), uintptr(len(s)), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", _err)
-+}
-+
-+var _mkcgo_BN_new uintptr
-+
-+func BN_new() (BIGNUM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_BN_new, uintptr(unsafe.Pointer(&_err)))
-+	return BIGNUM_PTR(r0), newMkcgoErr("BN_new", _err)
-+}
-+
-+var _mkcgo_BN_num_bits uintptr
-+
-+func BN_num_bits(arg0 BIGNUM_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_BN_num_bits, uintptr(arg0))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_CRYPTO_free uintptr
-+
-+func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
-+	syscallN(0, _mkcgo_CRYPTO_free, uintptr(str), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line))
-+}
-+
-+var _mkcgo_CRYPTO_malloc uintptr
-+
-+func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line), uintptr(unsafe.Pointer(&_err)))
-+	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", _err)
-+}
-+
-+var _mkcgo_DSA_free uintptr
-+
-+func DSA_free(r DSA_PTR) {
-+	syscallN(0, _mkcgo_DSA_free, uintptr(r))
-+}
-+
-+var _mkcgo_DSA_generate_key uintptr
-+
-+func DSA_generate_key(a DSA_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_DSA_generate_key, uintptr(a), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_generate_key", _err)
-+}
-+
-+var _mkcgo_DSA_get0_key uintptr
-+
-+func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_DSA_get0_key, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pub_key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(priv_key))))
-+}
-+
-+var _mkcgo_DSA_get0_pqg uintptr
-+
-+func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_DSA_get0_pqg, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(g))))
-+}
-+
-+var _mkcgo_DSA_new uintptr
-+
-+func DSA_new() (DSA_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_DSA_new, uintptr(unsafe.Pointer(&_err)))
-+	return DSA_PTR(r0), newMkcgoErr("DSA_new", _err)
-+}
-+
-+var _mkcgo_DSA_set0_key uintptr
-+
-+func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_set0_key", _err)
-+}
-+
-+var _mkcgo_DSA_set0_pqg uintptr
-+
-+func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("DSA_set0_pqg", _err)
-+}
-+
-+var _mkcgo_EC_GROUP_free uintptr
-+
-+func EC_GROUP_free(group EC_GROUP_PTR) {
-+	syscallN(0, _mkcgo_EC_GROUP_free, uintptr(group))
-+}
-+
-+var _mkcgo_EC_GROUP_new_by_curve_name uintptr
-+
-+func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid), uintptr(unsafe.Pointer(&_err)))
-+	return EC_GROUP_PTR(r0), newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
-+}
-+
-+var _mkcgo_EC_KEY_check_key uintptr
-+
-+func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_KEY_check_key, uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_check_key", _err)
-+}
-+
-+var _mkcgo_EC_KEY_free uintptr
-+
-+func EC_KEY_free(arg0 EC_KEY_PTR) {
-+	syscallN(0, _mkcgo_EC_KEY_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EC_KEY_get0_group uintptr
-+
-+func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_group, uintptr(arg0))
-+	return EC_GROUP_PTR(r0)
-+}
-+
-+var _mkcgo_EC_KEY_get0_private_key uintptr
-+
-+func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_private_key, uintptr(arg0))
-+	return BIGNUM_PTR(r0)
-+}
-+
-+var _mkcgo_EC_KEY_get0_public_key uintptr
-+
-+func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_public_key, uintptr(arg0))
-+	return EC_POINT_PTR(r0)
-+}
-+
-+var _mkcgo_EC_KEY_new_by_curve_name uintptr
-+
-+func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EC_KEY_PTR(r0), newMkcgoErr("EC_KEY_new_by_curve_name", _err)
-+}
-+
-+var _mkcgo_EC_KEY_set_private_key uintptr
-+
-+func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_private_key", _err)
-+}
-+
-+var _mkcgo_EC_KEY_set_public_key uintptr
-+
-+func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_public_key", _err)
-+}
-+
-+var _mkcgo_EC_KEY_set_public_key_affine_coordinates uintptr
-+
-+func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
-+}
-+
-+var _mkcgo_EC_POINT_free uintptr
-+
-+func EC_POINT_free(arg0 EC_POINT_PTR) {
-+	syscallN(0, _mkcgo_EC_POINT_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EC_POINT_get_affine_coordinates_GFp uintptr
-+
-+func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
-+}
-+
-+var _mkcgo_EC_POINT_mul uintptr
-+
-+func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_mul", _err)
-+}
-+
-+var _mkcgo_EC_POINT_new uintptr
-+
-+func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EC_POINT_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EC_POINT_PTR(r0), newMkcgoErr("EC_POINT_new", _err)
-+}
-+
-+var _mkcgo_EC_POINT_oct2point uintptr
-+
-+func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_oct2point", _err)
-+}
-+
-+var _mkcgo_EC_POINT_point2oct uintptr
-+
-+func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EC_POINT_point2oct", _err)
-+}
-+
-+var _mkcgo_EC_POINT_set_affine_coordinates uintptr
-+
-+func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
-+}
-+
-+var _mkcgo_ERR_peek_error uintptr
-+
-+func ERR_peek_error() uint64 {
-+	r0, _ := syscallN(0, _mkcgo_ERR_peek_error)
-+	return uint64(r0)
-+}
-+
-+var _mkcgo_ERR_print_errors uintptr
-+
-+func ERR_print_errors(bp BIO_PTR) {
-+	syscallN(0, _mkcgo_ERR_print_errors, uintptr(bp))
-+}
-+
-+var _mkcgo_EVP_CIPHER_CTX_ctrl uintptr
-+
-+func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
-+}
-+
-+var _mkcgo_EVP_CIPHER_CTX_free uintptr
-+
-+func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
-+	syscallN(0, _mkcgo_EVP_CIPHER_CTX_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EVP_CIPHER_CTX_new uintptr
-+
-+func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_CIPHER_CTX_PTR(r0), newMkcgoErr("EVP_CIPHER_CTX_new", _err)
-+}
-+
-+var _mkcgo_EVP_CIPHER_CTX_set_key_length uintptr
-+
-+func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
-+}
-+
-+var _mkcgo_EVP_CIPHER_CTX_set_padding uintptr
-+
-+func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
-+}
-+
-+var _mkcgo_EVP_CIPHER_fetch uintptr
-+
-+func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_CIPHER_get0_name uintptr
-+
-+func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
-+	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get0_name, uintptr(cipher))
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_EVP_CIPHER_get_block_size uintptr
-+
-+func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get_block_size, uintptr(cipher))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_EVP_CipherInit_ex uintptr
-+
-+func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", _err)
-+}
-+
-+var _mkcgo_EVP_CipherUpdate uintptr
-+
-+func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_CipherUpdate: *outl exceeds len(out)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_CipherUpdate", _err)
-+}
-+
-+var _mkcgo_EVP_DecryptFinal_ex uintptr
-+
-+func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
-+	if outl != nil && int(*outl) > len(outm) {
-+		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(outm))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", _err)
-+}
-+
-+var _mkcgo_EVP_DecryptInit_ex uintptr
-+
-+func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", _err)
-+}
-+
-+var _mkcgo_EVP_DecryptUpdate uintptr
-+
-+func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", _err)
-+}
-+
-+var _mkcgo_EVP_Digest uintptr
-+
-+func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	if size != nil && int(*size) > len(md) {
-+		panic("EVP_Digest: *size exceeds len(md)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_Digest", _err)
-+}
-+
-+var _mkcgo_EVP_DigestFinalXOF uintptr
-+
-+func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinalXOF, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(len(md)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestFinalXOF", _err)
-+}
-+
-+var _mkcgo_EVP_DigestFinal_ex uintptr
-+
-+func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
-+	if s != nil && int(*s) > len(md) {
-+		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", _err)
-+}
-+
-+var _mkcgo_EVP_DigestInit uintptr
-+
-+func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestInit", _err)
-+}
-+
-+var _mkcgo_EVP_DigestInit_ex uintptr
-+
-+func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestInit_ex", _err)
-+}
-+
-+var _mkcgo_EVP_DigestSign uintptr
-+
-+func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
-+	if siglen != nil && int(*siglen) > len(sigret) {
-+		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(sigret))), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(unsafe.SliceData(tbs))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSign", _err)
-+}
-+
-+var _mkcgo_EVP_DigestSignFinal uintptr
-+
-+func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
-+	if siglen != nil && int(*siglen) > len(sig) {
-+		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(siglen))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", _err)
-+}
-+
-+var _mkcgo_EVP_DigestSignInit uintptr
-+
-+func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
-+}
-+
-+func EVP_DigestSqueeze_Available() bool {
-+	return _mkcgo_EVP_DigestSqueeze != 0
-+}
-+
-+var _mkcgo_EVP_DigestSqueeze uintptr
-+
-+func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestSqueeze, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestSqueeze", _err)
-+}
-+
-+var _mkcgo_EVP_DigestUpdate uintptr
-+
-+func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestUpdate", _err)
-+}
-+
-+var _mkcgo_EVP_DigestVerify uintptr
-+
-+func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sigret)))), uintptr(len(sigret)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerify", _err)
-+}
-+
-+var _mkcgo_EVP_DigestVerifyFinal uintptr
-+
-+func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", _err)
-+}
-+
-+var _mkcgo_EVP_DigestVerifyInit uintptr
-+
-+func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", _err)
-+}
-+
-+var _mkcgo_EVP_EncryptFinal_ex uintptr
-+
-+func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", _err)
-+}
-+
-+var _mkcgo_EVP_EncryptInit_ex uintptr
-+
-+func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", _err)
-+}
-+
-+var _mkcgo_EVP_EncryptUpdate uintptr
-+
-+func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
-+	if outl != nil && int(*outl) > len(out) {
-+		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_CTX_free uintptr
-+
-+func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
-+	syscallN(0, _mkcgo_EVP_KDF_CTX_free, uintptr(ctx))
-+}
-+
-+var _mkcgo_EVP_KDF_CTX_get_kdf_size uintptr
-+
-+func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(4, _mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_CTX_new uintptr
-+
-+func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_KDF_CTX_new, uintptr(kdf), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_KDF_CTX_PTR(r0), newMkcgoErr("EVP_KDF_CTX_new", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_CTX_set_params uintptr
-+
-+func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_derive uintptr
-+
-+func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_KDF_derive", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_fetch uintptr
-+
-+func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_KDF_free uintptr
-+
-+func EVP_KDF_free(kdf EVP_KDF_PTR) {
-+	syscallN(0, _mkcgo_EVP_KDF_free, uintptr(kdf))
-+}
-+
-+func EVP_KEYMGMT_fetch_Available() bool {
-+	return _mkcgo_EVP_KEYMGMT_fetch != 0
-+}
-+
-+var _mkcgo_EVP_KEYMGMT_fetch uintptr
-+
-+func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_KEYMGMT_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_KEYMGMT_PTR(r0), newMkcgoErr("EVP_KEYMGMT_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_KEYMGMT_free uintptr
-+
-+func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
-+	syscallN(0, _mkcgo_EVP_KEYMGMT_free, uintptr(keymgmt))
-+}
-+
-+var _mkcgo_EVP_MAC_CTX_dup uintptr
-+
-+func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_dup, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_dup", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_CTX_free uintptr
-+
-+func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
-+	syscallN(0, _mkcgo_EVP_MAC_CTX_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EVP_MAC_CTX_new uintptr
-+
-+func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_new", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_CTX_set_params uintptr
-+
-+func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_fetch uintptr
-+
-+func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_final uintptr
-+
-+func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_final", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_init uintptr
-+
-+func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_init", _err)
-+}
-+
-+var _mkcgo_EVP_MAC_update uintptr
-+
-+func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MAC_update", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_copy_ex uintptr
-+
-+func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_ctrl uintptr
-+
-+func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_ctrl, uintptr(ctx), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_ctrl", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_free uintptr
-+
-+func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
-+	syscallN(0, _mkcgo_EVP_MD_CTX_free, uintptr(ctx))
-+}
-+
-+var _mkcgo_EVP_MD_CTX_get_params uintptr
-+
-+func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_get_params", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_gettable_params uintptr
-+
-+func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_new uintptr
-+
-+func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MD_CTX_PTR(r0), newMkcgoErr("EVP_MD_CTX_new", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_set_params uintptr
-+
-+func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_MD_CTX_set_params", _err)
-+}
-+
-+var _mkcgo_EVP_MD_CTX_settable_params uintptr
-+
-+func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_settable_params", _err)
-+}
-+
-+var _mkcgo_EVP_MD_fetch uintptr
-+
-+func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_MD_free uintptr
-+
-+func EVP_MD_free(md EVP_MD_PTR) {
-+	syscallN(0, _mkcgo_EVP_MD_free, uintptr(md))
-+}
-+
-+var _mkcgo_EVP_MD_get0_name uintptr
-+
-+func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
-+	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_name, uintptr(md))
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_EVP_MD_get0_provider uintptr
-+
-+func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_provider, uintptr(md))
-+	return OSSL_PROVIDER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_MD_get_block_size uintptr
-+
-+func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_block_size, uintptr(md))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_EVP_MD_get_size uintptr
-+
-+func EVP_MD_get_size(md EVP_MD_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_size, uintptr(md))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_EVP_MD_get_type uintptr
-+
-+func EVP_MD_get_type(md EVP_MD_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_type, uintptr(md))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
-+
-+func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_ctrl uintptr
-+
-+func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_free uintptr
-+
-+func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
-+	syscallN(0, _mkcgo_EVP_PKEY_CTX_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_new uintptr
-+
-+func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_new_from_pkey uintptr
-+
-+func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(propquery))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_new_id uintptr
-+
-+func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
-+
-+func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(label)))), uintptr(len(label)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
-+
-+func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
-+
-+func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set_hkdf_md uintptr
-+
-+func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set_hkdf_mode uintptr
-+
-+func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_CTX_set_params uintptr
-+
-+func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_params", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_Q_keygen uintptr
-+
-+func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	var r0 uintptr
-+	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
-+		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	} else {
-+		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	}
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
-+}
-+
-+func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
-+}
-+
-+func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", _err)
-+}
-+
-+func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", _err)
-+}
-+
-+func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	var r0 uintptr
-+	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
-+		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	} else {
-+		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
-+	}
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
-+}
-+
-+func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_X25519", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_assign uintptr
-+
-+func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_assign", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_decapsulate uintptr
-+
-+func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(wrappedkeylen), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_decapsulate_init uintptr
-+
-+func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_decrypt uintptr
-+
-+func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_decrypt_init uintptr
-+
-+func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_derive uintptr
-+
-+func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
-+	if keylen != nil && int(*keylen) > len(key) {
-+		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_derive_init uintptr
-+
-+func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_derive_set_peer uintptr
-+
-+func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_encapsulate uintptr
-+
-+func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_encapsulate_init uintptr
-+
-+func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_encrypt uintptr
-+
-+func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_encrypt_init uintptr
-+
-+func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_free uintptr
-+
-+func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
-+	syscallN(0, _mkcgo_EVP_PKEY_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_EVP_PKEY_fromdata uintptr
-+
-+func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pkey))), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_fromdata_init uintptr
-+
-+func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get0_DSA uintptr
-+
-+func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return DSA_PTR(r0), newMkcgoErr("EVP_PKEY_get0_DSA", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get0_EC_KEY uintptr
-+
-+func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return EC_KEY_PTR(r0), newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get1_RSA uintptr
-+
-+func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return RSA_PTR(r0), newMkcgoErr("EVP_PKEY_get1_RSA", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get1_encoded_public_key uintptr
-+
-+func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppub))), uintptr(unsafe.Pointer(&_err)))
-+	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_bits uintptr
-+
-+func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bits, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_bits", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_bn_param uintptr
-+
-+func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_octet_string_param uintptr
-+
-+func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_octet_string_param, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key_name))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(out_len))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_octet_string_param", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
-+
-+func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
-+	if privlen != nil && int(*privlen) > len(priv) {
-+		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(priv))), uintptr(unsafe.Pointer(privlen)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
-+
-+func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
-+	if publen != nil && int(*publen) > len(pub) {
-+		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(pub))), uintptr(unsafe.Pointer(publen)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_get_size uintptr
-+
-+func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_size, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_get_size", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_keygen uintptr
-+
-+func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_keygen", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_keygen_init uintptr
-+
-+func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_keygen_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_new uintptr
-+
-+func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new, uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
-+
-+func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
-+
-+func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_paramgen uintptr
-+
-+func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppkey))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_paramgen_init uintptr
-+
-+func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_private_check uintptr
-+
-+func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_private_check, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_private_check", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_public_check_quick uintptr
-+
-+func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_set1_EC_KEY uintptr
-+
-+func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
-+
-+func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pub)))), uintptr(len(pub)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_sign uintptr
-+
-+func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_sign", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_sign_init uintptr
-+
-+func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_sign_init", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_up_ref uintptr
-+
-+func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_up_ref, uintptr(key), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_up_ref", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_verify uintptr
-+
-+func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_verify", _err)
-+}
-+
-+var _mkcgo_EVP_PKEY_verify_init uintptr
-+
-+func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_PKEY_verify_init", _err)
-+}
-+
-+var _mkcgo_EVP_SIGNATURE_fetch uintptr
-+
-+func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
-+	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", _err)
-+}
-+
-+var _mkcgo_EVP_SIGNATURE_free uintptr
-+
-+func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
-+	syscallN(0, _mkcgo_EVP_SIGNATURE_free, uintptr(signature))
-+}
-+
-+var _mkcgo_EVP_aes_128_cbc uintptr
-+
-+func EVP_aes_128_cbc() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_cbc)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_128_ctr uintptr
-+
-+func EVP_aes_128_ctr() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ctr)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_128_ecb uintptr
-+
-+func EVP_aes_128_ecb() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ecb)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_128_gcm uintptr
-+
-+func EVP_aes_128_gcm() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_gcm)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_192_cbc uintptr
-+
-+func EVP_aes_192_cbc() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_cbc)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_192_ctr uintptr
-+
-+func EVP_aes_192_ctr() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ctr)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_192_ecb uintptr
-+
-+func EVP_aes_192_ecb() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ecb)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_192_gcm uintptr
-+
-+func EVP_aes_192_gcm() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_gcm)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_256_cbc uintptr
-+
-+func EVP_aes_256_cbc() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_cbc)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_256_ctr uintptr
-+
-+func EVP_aes_256_ctr() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ctr)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_256_ecb uintptr
-+
-+func EVP_aes_256_ecb() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ecb)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_aes_256_gcm uintptr
-+
-+func EVP_aes_256_gcm() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_gcm)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+func EVP_chacha20_poly1305_Available() bool {
-+	return _mkcgo_EVP_chacha20_poly1305 != 0
-+}
-+
-+var _mkcgo_EVP_chacha20_poly1305 uintptr
-+
-+func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_chacha20_poly1305)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_default_properties_enable_fips uintptr
-+
-+func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("EVP_default_properties_enable_fips", _err)
-+}
-+
-+var _mkcgo_EVP_default_properties_is_fips_enabled uintptr
-+
-+func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
-+	r0, _ := syscallN(0, _mkcgo_EVP_default_properties_is_fips_enabled, uintptr(libctx))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_EVP_des_cbc uintptr
-+
-+func EVP_des_cbc() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_des_cbc)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_des_ecb uintptr
-+
-+func EVP_des_ecb() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_des_ecb)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_des_ede3_cbc uintptr
-+
-+func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_cbc)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_des_ede3_ecb uintptr
-+
-+func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_ecb)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_md4 uintptr
-+
-+func EVP_md4() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_md4)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_md5 uintptr
-+
-+func EVP_md5() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_md5)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_md5_sha1 uintptr
-+
-+func EVP_md5_sha1() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_md5_sha1)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_rc4 uintptr
-+
-+func EVP_rc4() EVP_CIPHER_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_rc4)
-+	return EVP_CIPHER_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_ripemd160 uintptr
-+
-+func EVP_ripemd160() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_ripemd160)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha1 uintptr
-+
-+func EVP_sha1() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha1)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha224 uintptr
-+
-+func EVP_sha224() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha224)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha256 uintptr
-+
-+func EVP_sha256() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha256)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha384 uintptr
-+
-+func EVP_sha384() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha384)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha3_224 uintptr
-+
-+func EVP_sha3_224() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha3_224)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha3_256 uintptr
-+
-+func EVP_sha3_256() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha3_256)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha3_384 uintptr
-+
-+func EVP_sha3_384() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha3_384)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha3_512 uintptr
-+
-+func EVP_sha3_512() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha3_512)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha512 uintptr
-+
-+func EVP_sha512() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha512)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha512_224 uintptr
-+
-+func EVP_sha512_224() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha512_224)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_EVP_sha512_256 uintptr
-+
-+func EVP_sha512_256() EVP_MD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_EVP_sha512_256)
-+	return EVP_MD_PTR(r0)
-+}
-+
-+var _mkcgo_FIPS_mode uintptr
-+
-+func FIPS_mode() int32 {
-+	r0, _ := syscallN(0, _mkcgo_FIPS_mode)
-+	return int32(r0)
-+}
-+
-+var _mkcgo_FIPS_mode_set uintptr
-+
-+func FIPS_mode_set(r int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_FIPS_mode_set, uintptr(r), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("FIPS_mode_set", _err)
-+}
-+
-+var _mkcgo_HMAC_CTX_copy uintptr
-+
-+func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_CTX_copy", _err)
-+}
-+
-+var _mkcgo_HMAC_CTX_free uintptr
-+
-+func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
-+	syscallN(0, _mkcgo_HMAC_CTX_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_HMAC_CTX_new uintptr
-+
-+func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_HMAC_CTX_new, uintptr(unsafe.Pointer(&_err)))
-+	return HMAC_CTX_PTR(r0), newMkcgoErr("HMAC_CTX_new", _err)
-+}
-+
-+var _mkcgo_HMAC_Final uintptr
-+
-+func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
-+	if arg2 != nil && int(*arg2) > len(arg1) {
-+		panic("HMAC_Final: *arg2 exceeds len(arg1)")
-+	}
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Final", _err)
-+}
-+
-+var _mkcgo_HMAC_Init_ex uintptr
-+
-+func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Init_ex", _err)
-+}
-+
-+var _mkcgo_HMAC_Update uintptr
-+
-+func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("HMAC_Update", _err)
-+}
-+
-+var _mkcgo_OBJ_nid2sn uintptr
-+
-+func OBJ_nid2sn(n int32) *byte {
-+	r0, _ := syscallN(0, _mkcgo_OBJ_nid2sn, uintptr(n))
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_OPENSSL_init uintptr
-+
-+func OPENSSL_init() {
-+	syscallN(0, _mkcgo_OPENSSL_init)
-+}
-+
-+var _mkcgo_OPENSSL_init_crypto uintptr
-+
-+func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OPENSSL_init_crypto", _err)
-+}
-+
-+func OPENSSL_version_major_Available() bool {
-+	return _mkcgo_OPENSSL_version_major != 0
-+}
-+
-+var _mkcgo_OPENSSL_version_major uintptr
-+
-+func OPENSSL_version_major() uint32 {
-+	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_major)
-+	return uint32(r0)
-+}
-+
-+func OPENSSL_version_minor_Available() bool {
-+	return _mkcgo_OPENSSL_version_minor != 0
-+}
-+
-+var _mkcgo_OPENSSL_version_minor uintptr
-+
-+func OPENSSL_version_minor() uint32 {
-+	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_minor)
-+	return uint32(r0)
-+}
-+
-+func OPENSSL_version_patch_Available() bool {
-+	return _mkcgo_OPENSSL_version_patch != 0
-+}
-+
-+var _mkcgo_OPENSSL_version_patch uintptr
-+
-+func OPENSSL_version_patch() uint32 {
-+	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_patch)
-+	return uint32(r0)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_free uintptr
-+
-+func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
-+	syscallN(0, _mkcgo_OSSL_PARAM_BLD_free, uintptr(bld))
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_new uintptr
-+
-+func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
-+	r0, _ := syscallN(0, _mkcgo_OSSL_PARAM_BLD_new)
-+	return OSSL_PARAM_BLD_PTR(r0)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
-+
-+func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_push_int32 uintptr
-+
-+func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(num), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
-+
-+func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
-+
-+func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
-+}
-+
-+var _mkcgo_OSSL_PARAM_BLD_to_param uintptr
-+
-+func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
-+}
-+
-+var _mkcgo_OSSL_PARAM_free uintptr
-+
-+func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
-+	syscallN(0, _mkcgo_OSSL_PARAM_free, uintptr(p))
-+}
-+
-+var _mkcgo_OSSL_PARAM_locate_const uintptr
-+
-+func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", _err)
-+}
-+
-+var _mkcgo_OSSL_PROVIDER_available uintptr
-+
-+func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
-+	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))))
-+	return int32(r0)
-+}
-+
-+var _mkcgo_OSSL_PROVIDER_get0_name uintptr
-+
-+func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
-+	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_get0_name, uintptr(prov))
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+var _mkcgo_OSSL_PROVIDER_try_load uintptr
-+
-+func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
-+	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", _err)
-+}
-+
-+var _mkcgo_OpenSSL_version uintptr
-+
-+func OpenSSL_version(__type int32) *byte {
-+	r0, _ := syscallN(0, _mkcgo_OpenSSL_version, uintptr(__type))
-+	return (*byte)(unsafe.Pointer(r0))
-+}
-+
-+func OpenSSL_version_num_Available() bool {
-+	return _mkcgo_OpenSSL_version_num != 0
-+}
-+
-+var _mkcgo_OpenSSL_version_num uintptr
-+
-+func OpenSSL_version_num() uint64 {
-+	r0, _ := syscallN(0, _mkcgo_OpenSSL_version_num)
-+	return uint64(r0)
-+}
-+
-+var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
-+
-+func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pass)))), uintptr(len(pass)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(iter), uintptr(digest), uintptr(len(out)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(out)))), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
-+}
-+
-+var _mkcgo_RAND_bytes uintptr
-+
-+func RAND_bytes(arg0 []byte) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(unsafe.SliceData(arg0))), uintptr(len(arg0)), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RAND_bytes", _err)
-+}
-+
-+var _mkcgo_RSA_free uintptr
-+
-+func RSA_free(arg0 RSA_PTR) {
-+	syscallN(0, _mkcgo_RSA_free, uintptr(arg0))
-+}
-+
-+var _mkcgo_RSA_get0_crt_params uintptr
-+
-+func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmp1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmq1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iqmp))))
-+}
-+
-+var _mkcgo_RSA_get0_factors uintptr
-+
-+func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))))
-+}
-+
-+var _mkcgo_RSA_get0_key uintptr
-+
-+func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
-+	syscallN(0, _mkcgo_RSA_get0_key, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(n))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(e))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(d))))
-+}
-+
-+var _mkcgo_RSA_new uintptr
-+
-+func RSA_new() (RSA_PTR, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(1, _mkcgo_RSA_new, uintptr(unsafe.Pointer(&_err)))
-+	return RSA_PTR(r0), newMkcgoErr("RSA_new", _err)
-+}
-+
-+var _mkcgo_RSA_set0_crt_params uintptr
-+
-+func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_crt_params", _err)
-+}
-+
-+var _mkcgo_RSA_set0_factors uintptr
-+
-+func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_factors", _err)
-+}
-+
-+var _mkcgo_RSA_set0_key uintptr
-+
-+func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
-+	var _err uintptr
-+	r0, _ := syscallN(3, _mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d), uintptr(unsafe.Pointer(&_err)))
-+	return int32(r0), newMkcgoErr("RSA_set0_key", _err)
-+}
-+
-+//go:nosplit
-+func _mkcgo_error_check(errType, r1, args, n uintptr) {
-+	var hasError bool
-+	switch errType {
-+	case 1:
-+		hasError = r1 == 0
-+	case 2:
-+		hasError = int32(r1) == -1
-+	case 3:
-+		hasError = int32(r1) <= 0
-+	case 4:
-+		hasError = int64(r1) <= 0
-+	default:
-+		panic("invalid error check type")
-+	}
-+	if hasError {
-+		**(**uintptr)(unsafe.Pointer(args + unsafe.Sizeof(uintptr(0))*n)) = retrieveErrorState()
-+	}
-+}
-+
-+func MkcgoLoad_(handle unsafe.Pointer) {
-+	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
-+	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
-+	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
-+	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
-+	_mkcgo_BN_bin2bn = dlsym(handle, "BN_bin2bn\x00", false)
-+	_mkcgo_BN_bn2binpad = dlsym(handle, "BN_bn2binpad\x00", false)
-+	_mkcgo_BN_bn2lebinpad = dlsym(handle, "BN_bn2lebinpad\x00", false)
-+	_mkcgo_BN_clear = dlsym(handle, "BN_clear\x00", false)
-+	_mkcgo_BN_clear_free = dlsym(handle, "BN_clear_free\x00", false)
-+	_mkcgo_BN_free = dlsym(handle, "BN_free\x00", false)
-+	_mkcgo_BN_lebin2bn = dlsym(handle, "BN_lebin2bn\x00", false)
-+	_mkcgo_BN_new = dlsym(handle, "BN_new\x00", false)
-+	_mkcgo_BN_num_bits = dlsym(handle, "BN_num_bits\x00", false)
-+	_mkcgo_CRYPTO_free = dlsym(handle, "CRYPTO_free\x00", false)
-+	_mkcgo_CRYPTO_malloc = dlsym(handle, "CRYPTO_malloc\x00", false)
-+	_mkcgo_EC_GROUP_free = dlsym(handle, "EC_GROUP_free\x00", false)
-+	_mkcgo_EC_GROUP_new_by_curve_name = dlsym(handle, "EC_GROUP_new_by_curve_name\x00", false)
-+	_mkcgo_EC_POINT_free = dlsym(handle, "EC_POINT_free\x00", false)
-+	_mkcgo_EC_POINT_mul = dlsym(handle, "EC_POINT_mul\x00", false)
-+	_mkcgo_EC_POINT_new = dlsym(handle, "EC_POINT_new\x00", false)
-+	_mkcgo_EC_POINT_oct2point = dlsym(handle, "EC_POINT_oct2point\x00", false)
-+	_mkcgo_EC_POINT_point2oct = dlsym(handle, "EC_POINT_point2oct\x00", false)
-+	_mkcgo_ERR_peek_error = dlsym(handle, "ERR_peek_error\x00", false)
-+	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
-+	_mkcgo_EVP_CIPHER_CTX_ctrl = dlsym(handle, "EVP_CIPHER_CTX_ctrl\x00", false)
-+	_mkcgo_EVP_CIPHER_CTX_free = dlsym(handle, "EVP_CIPHER_CTX_free\x00", false)
-+	_mkcgo_EVP_CIPHER_CTX_new = dlsym(handle, "EVP_CIPHER_CTX_new\x00", false)
-+	_mkcgo_EVP_CIPHER_CTX_set_key_length = dlsym(handle, "EVP_CIPHER_CTX_set_key_length\x00", false)
-+	_mkcgo_EVP_CIPHER_CTX_set_padding = dlsym(handle, "EVP_CIPHER_CTX_set_padding\x00", false)
-+	_mkcgo_EVP_CipherInit_ex = dlsym(handle, "EVP_CipherInit_ex\x00", false)
-+	_mkcgo_EVP_CipherUpdate = dlsym(handle, "EVP_CipherUpdate\x00", false)
-+	_mkcgo_EVP_DecryptFinal_ex = dlsym(handle, "EVP_DecryptFinal_ex\x00", false)
-+	_mkcgo_EVP_DecryptInit_ex = dlsym(handle, "EVP_DecryptInit_ex\x00", false)
-+	_mkcgo_EVP_DecryptUpdate = dlsym(handle, "EVP_DecryptUpdate\x00", false)
-+	_mkcgo_EVP_Digest = dlsym(handle, "EVP_Digest\x00", false)
-+	_mkcgo_EVP_DigestFinal_ex = dlsym(handle, "EVP_DigestFinal_ex\x00", false)
-+	_mkcgo_EVP_DigestInit = dlsym(handle, "EVP_DigestInit\x00", false)
-+	_mkcgo_EVP_DigestInit_ex = dlsym(handle, "EVP_DigestInit_ex\x00", false)
-+	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
-+	_mkcgo_EVP_DigestSignFinal = dlsym(handle, "EVP_DigestSignFinal\x00", false)
-+	_mkcgo_EVP_DigestSignInit = dlsym(handle, "EVP_DigestSignInit\x00", false)
-+	_mkcgo_EVP_DigestUpdate = dlsym(handle, "EVP_DigestUpdate\x00", false)
-+	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
-+	_mkcgo_EVP_DigestVerifyFinal = dlsym(handle, "EVP_DigestVerifyFinal\x00", false)
-+	_mkcgo_EVP_DigestVerifyInit = dlsym(handle, "EVP_DigestVerifyInit\x00", false)
-+	_mkcgo_EVP_EncryptFinal_ex = dlsym(handle, "EVP_EncryptFinal_ex\x00", false)
-+	_mkcgo_EVP_EncryptInit_ex = dlsym(handle, "EVP_EncryptInit_ex\x00", false)
-+	_mkcgo_EVP_EncryptUpdate = dlsym(handle, "EVP_EncryptUpdate\x00", false)
-+	_mkcgo_EVP_MD_CTX_copy_ex = dlsym(handle, "EVP_MD_CTX_copy_ex\x00", false)
-+	_mkcgo_EVP_MD_CTX_ctrl = dlsym(handle, "EVP_MD_CTX_ctrl\x00", false)
-+	_mkcgo_EVP_MD_CTX_free = dlsym(handle, "EVP_MD_CTX_free\x00", false)
-+	_mkcgo_EVP_MD_CTX_new = dlsym(handle, "EVP_MD_CTX_new\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_ctrl = dlsym(handle, "EVP_PKEY_CTX_ctrl\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_free = dlsym(handle, "EVP_PKEY_CTX_free\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_new = dlsym(handle, "EVP_PKEY_CTX_new\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_new_id = dlsym(handle, "EVP_PKEY_CTX_new_id\x00", false)
-+	_mkcgo_EVP_PKEY_decrypt = dlsym(handle, "EVP_PKEY_decrypt\x00", false)
-+	_mkcgo_EVP_PKEY_decrypt_init = dlsym(handle, "EVP_PKEY_decrypt_init\x00", false)
-+	_mkcgo_EVP_PKEY_derive = dlsym(handle, "EVP_PKEY_derive\x00", false)
-+	_mkcgo_EVP_PKEY_derive_init = dlsym(handle, "EVP_PKEY_derive_init\x00", false)
-+	_mkcgo_EVP_PKEY_derive_set_peer = dlsym(handle, "EVP_PKEY_derive_set_peer\x00", false)
-+	_mkcgo_EVP_PKEY_encrypt = dlsym(handle, "EVP_PKEY_encrypt\x00", false)
-+	_mkcgo_EVP_PKEY_encrypt_init = dlsym(handle, "EVP_PKEY_encrypt_init\x00", false)
-+	_mkcgo_EVP_PKEY_free = dlsym(handle, "EVP_PKEY_free\x00", false)
-+	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
-+	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
-+	_mkcgo_EVP_PKEY_keygen = dlsym(handle, "EVP_PKEY_keygen\x00", false)
-+	_mkcgo_EVP_PKEY_keygen_init = dlsym(handle, "EVP_PKEY_keygen_init\x00", false)
-+	_mkcgo_EVP_PKEY_new = dlsym(handle, "EVP_PKEY_new\x00", false)
-+	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
-+	_mkcgo_EVP_PKEY_new_raw_public_key = dlsym(handle, "EVP_PKEY_new_raw_public_key\x00", false)
-+	_mkcgo_EVP_PKEY_paramgen = dlsym(handle, "EVP_PKEY_paramgen\x00", false)
-+	_mkcgo_EVP_PKEY_paramgen_init = dlsym(handle, "EVP_PKEY_paramgen_init\x00", false)
-+	_mkcgo_EVP_PKEY_sign = dlsym(handle, "EVP_PKEY_sign\x00", false)
-+	_mkcgo_EVP_PKEY_sign_init = dlsym(handle, "EVP_PKEY_sign_init\x00", false)
-+	_mkcgo_EVP_PKEY_up_ref = dlsym(handle, "EVP_PKEY_up_ref\x00", false)
-+	_mkcgo_EVP_PKEY_verify = dlsym(handle, "EVP_PKEY_verify\x00", false)
-+	_mkcgo_EVP_PKEY_verify_init = dlsym(handle, "EVP_PKEY_verify_init\x00", false)
-+	_mkcgo_EVP_aes_128_cbc = dlsym(handle, "EVP_aes_128_cbc\x00", false)
-+	_mkcgo_EVP_aes_128_ctr = dlsym(handle, "EVP_aes_128_ctr\x00", false)
-+	_mkcgo_EVP_aes_128_ecb = dlsym(handle, "EVP_aes_128_ecb\x00", false)
-+	_mkcgo_EVP_aes_128_gcm = dlsym(handle, "EVP_aes_128_gcm\x00", false)
-+	_mkcgo_EVP_aes_192_cbc = dlsym(handle, "EVP_aes_192_cbc\x00", false)
-+	_mkcgo_EVP_aes_192_ctr = dlsym(handle, "EVP_aes_192_ctr\x00", false)
-+	_mkcgo_EVP_aes_192_ecb = dlsym(handle, "EVP_aes_192_ecb\x00", false)
-+	_mkcgo_EVP_aes_192_gcm = dlsym(handle, "EVP_aes_192_gcm\x00", false)
-+	_mkcgo_EVP_aes_256_cbc = dlsym(handle, "EVP_aes_256_cbc\x00", false)
-+	_mkcgo_EVP_aes_256_ctr = dlsym(handle, "EVP_aes_256_ctr\x00", false)
-+	_mkcgo_EVP_aes_256_ecb = dlsym(handle, "EVP_aes_256_ecb\x00", false)
-+	_mkcgo_EVP_aes_256_gcm = dlsym(handle, "EVP_aes_256_gcm\x00", false)
-+	_mkcgo_EVP_chacha20_poly1305 = dlsym(handle, "EVP_chacha20_poly1305\x00", true)
-+	_mkcgo_EVP_des_cbc = dlsym(handle, "EVP_des_cbc\x00", false)
-+	_mkcgo_EVP_des_ecb = dlsym(handle, "EVP_des_ecb\x00", false)
-+	_mkcgo_EVP_des_ede3_cbc = dlsym(handle, "EVP_des_ede3_cbc\x00", false)
-+	_mkcgo_EVP_des_ede3_ecb = dlsym(handle, "EVP_des_ede3_ecb\x00", false)
-+	_mkcgo_EVP_md4 = dlsym(handle, "EVP_md4\x00", false)
-+	_mkcgo_EVP_md5 = dlsym(handle, "EVP_md5\x00", false)
-+	_mkcgo_EVP_md5_sha1 = dlsym(handle, "EVP_md5_sha1\x00", false)
-+	_mkcgo_EVP_rc4 = dlsym(handle, "EVP_rc4\x00", false)
-+	_mkcgo_EVP_ripemd160 = dlsym(handle, "EVP_ripemd160\x00", false)
-+	_mkcgo_EVP_sha1 = dlsym(handle, "EVP_sha1\x00", false)
-+	_mkcgo_EVP_sha224 = dlsym(handle, "EVP_sha224\x00", false)
-+	_mkcgo_EVP_sha256 = dlsym(handle, "EVP_sha256\x00", false)
-+	_mkcgo_EVP_sha384 = dlsym(handle, "EVP_sha384\x00", false)
-+	_mkcgo_EVP_sha3_224 = dlsym(handle, "EVP_sha3_224\x00", false)
-+	_mkcgo_EVP_sha3_256 = dlsym(handle, "EVP_sha3_256\x00", false)
-+	_mkcgo_EVP_sha3_384 = dlsym(handle, "EVP_sha3_384\x00", false)
-+	_mkcgo_EVP_sha3_512 = dlsym(handle, "EVP_sha3_512\x00", false)
-+	_mkcgo_EVP_sha512 = dlsym(handle, "EVP_sha512\x00", false)
-+	_mkcgo_EVP_sha512_224 = dlsym(handle, "EVP_sha512_224\x00", false)
-+	_mkcgo_EVP_sha512_256 = dlsym(handle, "EVP_sha512_256\x00", false)
-+	_mkcgo_OBJ_nid2sn = dlsym(handle, "OBJ_nid2sn\x00", false)
-+	_mkcgo_OPENSSL_init = dlsym(handle, "OPENSSL_init\x00", false)
-+	_mkcgo_OPENSSL_init_crypto = dlsym(handle, "OPENSSL_init_crypto\x00", false)
-+	_mkcgo_OpenSSL_version = dlsym(handle, "OpenSSL_version\x00", false)
-+	_mkcgo_PKCS5_PBKDF2_HMAC = dlsym(handle, "PKCS5_PBKDF2_HMAC\x00", false)
-+	_mkcgo_RAND_bytes = dlsym(handle, "RAND_bytes\x00", false)
-+}
-+
-+func MkcgoUnload_() {
-+	_mkcgo_BIO_ctrl = 0
-+	_mkcgo_BIO_free = 0
-+	_mkcgo_BIO_new = 0
-+	_mkcgo_BIO_s_mem = 0
-+	_mkcgo_BN_bin2bn = 0
-+	_mkcgo_BN_bn2binpad = 0
-+	_mkcgo_BN_bn2lebinpad = 0
-+	_mkcgo_BN_clear = 0
-+	_mkcgo_BN_clear_free = 0
-+	_mkcgo_BN_free = 0
-+	_mkcgo_BN_lebin2bn = 0
-+	_mkcgo_BN_new = 0
-+	_mkcgo_BN_num_bits = 0
-+	_mkcgo_CRYPTO_free = 0
-+	_mkcgo_CRYPTO_malloc = 0
-+	_mkcgo_EC_GROUP_free = 0
-+	_mkcgo_EC_GROUP_new_by_curve_name = 0
-+	_mkcgo_EC_POINT_free = 0
-+	_mkcgo_EC_POINT_mul = 0
-+	_mkcgo_EC_POINT_new = 0
-+	_mkcgo_EC_POINT_oct2point = 0
-+	_mkcgo_EC_POINT_point2oct = 0
-+	_mkcgo_ERR_peek_error = 0
-+	_mkcgo_ERR_print_errors = 0
-+	_mkcgo_EVP_CIPHER_CTX_ctrl = 0
-+	_mkcgo_EVP_CIPHER_CTX_free = 0
-+	_mkcgo_EVP_CIPHER_CTX_new = 0
-+	_mkcgo_EVP_CIPHER_CTX_set_key_length = 0
-+	_mkcgo_EVP_CIPHER_CTX_set_padding = 0
-+	_mkcgo_EVP_CipherInit_ex = 0
-+	_mkcgo_EVP_CipherUpdate = 0
-+	_mkcgo_EVP_DecryptFinal_ex = 0
-+	_mkcgo_EVP_DecryptInit_ex = 0
-+	_mkcgo_EVP_DecryptUpdate = 0
-+	_mkcgo_EVP_Digest = 0
-+	_mkcgo_EVP_DigestFinal_ex = 0
-+	_mkcgo_EVP_DigestInit = 0
-+	_mkcgo_EVP_DigestInit_ex = 0
-+	_mkcgo_EVP_DigestSign = 0
-+	_mkcgo_EVP_DigestSignFinal = 0
-+	_mkcgo_EVP_DigestSignInit = 0
-+	_mkcgo_EVP_DigestUpdate = 0
-+	_mkcgo_EVP_DigestVerify = 0
-+	_mkcgo_EVP_DigestVerifyFinal = 0
-+	_mkcgo_EVP_DigestVerifyInit = 0
-+	_mkcgo_EVP_EncryptFinal_ex = 0
-+	_mkcgo_EVP_EncryptInit_ex = 0
-+	_mkcgo_EVP_EncryptUpdate = 0
-+	_mkcgo_EVP_MD_CTX_copy_ex = 0
-+	_mkcgo_EVP_MD_CTX_ctrl = 0
-+	_mkcgo_EVP_MD_CTX_free = 0
-+	_mkcgo_EVP_MD_CTX_new = 0
-+	_mkcgo_EVP_PKEY_CTX_ctrl = 0
-+	_mkcgo_EVP_PKEY_CTX_free = 0
-+	_mkcgo_EVP_PKEY_CTX_new = 0
-+	_mkcgo_EVP_PKEY_CTX_new_id = 0
-+	_mkcgo_EVP_PKEY_decrypt = 0
-+	_mkcgo_EVP_PKEY_decrypt_init = 0
-+	_mkcgo_EVP_PKEY_derive = 0
-+	_mkcgo_EVP_PKEY_derive_init = 0
-+	_mkcgo_EVP_PKEY_derive_set_peer = 0
-+	_mkcgo_EVP_PKEY_encrypt = 0
-+	_mkcgo_EVP_PKEY_encrypt_init = 0
-+	_mkcgo_EVP_PKEY_free = 0
-+	_mkcgo_EVP_PKEY_get_raw_private_key = 0
-+	_mkcgo_EVP_PKEY_get_raw_public_key = 0
-+	_mkcgo_EVP_PKEY_keygen = 0
-+	_mkcgo_EVP_PKEY_keygen_init = 0
-+	_mkcgo_EVP_PKEY_new = 0
-+	_mkcgo_EVP_PKEY_new_raw_private_key = 0
-+	_mkcgo_EVP_PKEY_new_raw_public_key = 0
-+	_mkcgo_EVP_PKEY_paramgen = 0
-+	_mkcgo_EVP_PKEY_paramgen_init = 0
-+	_mkcgo_EVP_PKEY_sign = 0
-+	_mkcgo_EVP_PKEY_sign_init = 0
-+	_mkcgo_EVP_PKEY_up_ref = 0
-+	_mkcgo_EVP_PKEY_verify = 0
-+	_mkcgo_EVP_PKEY_verify_init = 0
-+	_mkcgo_EVP_aes_128_cbc = 0
-+	_mkcgo_EVP_aes_128_ctr = 0
-+	_mkcgo_EVP_aes_128_ecb = 0
-+	_mkcgo_EVP_aes_128_gcm = 0
-+	_mkcgo_EVP_aes_192_cbc = 0
-+	_mkcgo_EVP_aes_192_ctr = 0
-+	_mkcgo_EVP_aes_192_ecb = 0
-+	_mkcgo_EVP_aes_192_gcm = 0
-+	_mkcgo_EVP_aes_256_cbc = 0
-+	_mkcgo_EVP_aes_256_ctr = 0
-+	_mkcgo_EVP_aes_256_ecb = 0
-+	_mkcgo_EVP_aes_256_gcm = 0
-+	_mkcgo_EVP_chacha20_poly1305 = 0
-+	_mkcgo_EVP_des_cbc = 0
-+	_mkcgo_EVP_des_ecb = 0
-+	_mkcgo_EVP_des_ede3_cbc = 0
-+	_mkcgo_EVP_des_ede3_ecb = 0
-+	_mkcgo_EVP_md4 = 0
-+	_mkcgo_EVP_md5 = 0
-+	_mkcgo_EVP_md5_sha1 = 0
-+	_mkcgo_EVP_rc4 = 0
-+	_mkcgo_EVP_ripemd160 = 0
-+	_mkcgo_EVP_sha1 = 0
-+	_mkcgo_EVP_sha224 = 0
-+	_mkcgo_EVP_sha256 = 0
-+	_mkcgo_EVP_sha384 = 0
-+	_mkcgo_EVP_sha3_224 = 0
-+	_mkcgo_EVP_sha3_256 = 0
-+	_mkcgo_EVP_sha3_384 = 0
-+	_mkcgo_EVP_sha3_512 = 0
-+	_mkcgo_EVP_sha512 = 0
-+	_mkcgo_EVP_sha512_224 = 0
-+	_mkcgo_EVP_sha512_256 = 0
-+	_mkcgo_OBJ_nid2sn = 0
-+	_mkcgo_OPENSSL_init = 0
-+	_mkcgo_OPENSSL_init_crypto = 0
-+	_mkcgo_OpenSSL_version = 0
-+	_mkcgo_PKCS5_PBKDF2_HMAC = 0
-+	_mkcgo_RAND_bytes = 0
-+}
-+
-+func MkcgoLoad_3(handle unsafe.Pointer) {
-+	_mkcgo_EC_POINT_set_affine_coordinates = dlsym(handle, "EC_POINT_set_affine_coordinates\x00", false)
-+	_mkcgo_EVP_CIPHER_fetch = dlsym(handle, "EVP_CIPHER_fetch\x00", false)
-+	_mkcgo_EVP_CIPHER_get0_name = dlsym(handle, "EVP_CIPHER_get0_name\x00", false)
-+	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_get_block_size\x00", false)
-+	_mkcgo_EVP_KDF_CTX_free = dlsym(handle, "EVP_KDF_CTX_free\x00", false)
-+	_mkcgo_EVP_KDF_CTX_get_kdf_size = dlsym(handle, "EVP_KDF_CTX_get_kdf_size\x00", false)
-+	_mkcgo_EVP_KDF_CTX_new = dlsym(handle, "EVP_KDF_CTX_new\x00", false)
-+	_mkcgo_EVP_KDF_CTX_set_params = dlsym(handle, "EVP_KDF_CTX_set_params\x00", false)
-+	_mkcgo_EVP_KDF_derive = dlsym(handle, "EVP_KDF_derive\x00", false)
-+	_mkcgo_EVP_KDF_fetch = dlsym(handle, "EVP_KDF_fetch\x00", false)
-+	_mkcgo_EVP_KDF_free = dlsym(handle, "EVP_KDF_free\x00", false)
-+	_mkcgo_EVP_KEYMGMT_fetch = dlsym(handle, "EVP_KEYMGMT_fetch\x00", true)
-+	_mkcgo_EVP_KEYMGMT_free = dlsym(handle, "EVP_KEYMGMT_free\x00", false)
-+	_mkcgo_EVP_MAC_CTX_dup = dlsym(handle, "EVP_MAC_CTX_dup\x00", false)
-+	_mkcgo_EVP_MAC_CTX_free = dlsym(handle, "EVP_MAC_CTX_free\x00", false)
-+	_mkcgo_EVP_MAC_CTX_new = dlsym(handle, "EVP_MAC_CTX_new\x00", false)
-+	_mkcgo_EVP_MAC_CTX_set_params = dlsym(handle, "EVP_MAC_CTX_set_params\x00", false)
-+	_mkcgo_EVP_MAC_fetch = dlsym(handle, "EVP_MAC_fetch\x00", false)
-+	_mkcgo_EVP_MAC_final = dlsym(handle, "EVP_MAC_final\x00", false)
-+	_mkcgo_EVP_MAC_init = dlsym(handle, "EVP_MAC_init\x00", false)
-+	_mkcgo_EVP_MAC_update = dlsym(handle, "EVP_MAC_update\x00", false)
-+	_mkcgo_EVP_MD_CTX_get_params = dlsym(handle, "EVP_MD_CTX_get_params\x00", false)
-+	_mkcgo_EVP_MD_CTX_gettable_params = dlsym(handle, "EVP_MD_CTX_gettable_params\x00", false)
-+	_mkcgo_EVP_MD_CTX_set_params = dlsym(handle, "EVP_MD_CTX_set_params\x00", false)
-+	_mkcgo_EVP_MD_CTX_settable_params = dlsym(handle, "EVP_MD_CTX_settable_params\x00", false)
-+	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
-+	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
-+	_mkcgo_EVP_MD_get0_name = dlsym(handle, "EVP_MD_get0_name\x00", false)
-+	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
-+	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_get_block_size\x00", false)
-+	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_get_size\x00", false)
-+	_mkcgo_EVP_MD_get_type = dlsym(handle, "EVP_MD_get_type\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = dlsym(handle, "EVP_PKEY_CTX_add1_hkdf_info\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_new_from_pkey = dlsym(handle, "EVP_PKEY_CTX_new_from_pkey\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = dlsym(handle, "EVP_PKEY_CTX_set0_rsa_oaep_label\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_key\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_salt\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_md\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_mode\x00", false)
-+	_mkcgo_EVP_PKEY_CTX_set_params = dlsym(handle, "EVP_PKEY_CTX_set_params\x00", false)
-+	_mkcgo_EVP_PKEY_Q_keygen = dlsym(handle, "EVP_PKEY_Q_keygen\x00", false)
-+	_mkcgo_EVP_PKEY_decapsulate = dlsym(handle, "EVP_PKEY_decapsulate\x00", false)
-+	_mkcgo_EVP_PKEY_decapsulate_init = dlsym(handle, "EVP_PKEY_decapsulate_init\x00", false)
-+	_mkcgo_EVP_PKEY_encapsulate = dlsym(handle, "EVP_PKEY_encapsulate\x00", false)
-+	_mkcgo_EVP_PKEY_encapsulate_init = dlsym(handle, "EVP_PKEY_encapsulate_init\x00", false)
-+	_mkcgo_EVP_PKEY_fromdata = dlsym(handle, "EVP_PKEY_fromdata\x00", false)
-+	_mkcgo_EVP_PKEY_fromdata_init = dlsym(handle, "EVP_PKEY_fromdata_init\x00", false)
-+	_mkcgo_EVP_PKEY_get1_encoded_public_key = dlsym(handle, "EVP_PKEY_get1_encoded_public_key\x00", false)
-+	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_get_bits\x00", false)
-+	_mkcgo_EVP_PKEY_get_bn_param = dlsym(handle, "EVP_PKEY_get_bn_param\x00", false)
-+	_mkcgo_EVP_PKEY_get_octet_string_param = dlsym(handle, "EVP_PKEY_get_octet_string_param\x00", false)
-+	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_get_size\x00", false)
-+	_mkcgo_EVP_PKEY_private_check = dlsym(handle, "EVP_PKEY_private_check\x00", false)
-+	_mkcgo_EVP_PKEY_public_check_quick = dlsym(handle, "EVP_PKEY_public_check_quick\x00", false)
-+	_mkcgo_EVP_PKEY_set1_encoded_public_key = dlsym(handle, "EVP_PKEY_set1_encoded_public_key\x00", false)
-+	_mkcgo_EVP_SIGNATURE_fetch = dlsym(handle, "EVP_SIGNATURE_fetch\x00", false)
-+	_mkcgo_EVP_SIGNATURE_free = dlsym(handle, "EVP_SIGNATURE_free\x00", false)
-+	_mkcgo_EVP_default_properties_enable_fips = dlsym(handle, "EVP_default_properties_enable_fips\x00", false)
-+	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_free = dlsym(handle, "OSSL_PARAM_BLD_free\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_new = dlsym(handle, "OSSL_PARAM_BLD_new\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_push_BN = dlsym(handle, "OSSL_PARAM_BLD_push_BN\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_push_int32 = dlsym(handle, "OSSL_PARAM_BLD_push_int32\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_push_octet_string = dlsym(handle, "OSSL_PARAM_BLD_push_octet_string\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = dlsym(handle, "OSSL_PARAM_BLD_push_utf8_string\x00", false)
-+	_mkcgo_OSSL_PARAM_BLD_to_param = dlsym(handle, "OSSL_PARAM_BLD_to_param\x00", false)
-+	_mkcgo_OSSL_PARAM_free = dlsym(handle, "OSSL_PARAM_free\x00", false)
-+	_mkcgo_OSSL_PARAM_locate_const = dlsym(handle, "OSSL_PARAM_locate_const\x00", false)
-+	_mkcgo_OSSL_PROVIDER_available = dlsym(handle, "OSSL_PROVIDER_available\x00", false)
-+	_mkcgo_OSSL_PROVIDER_get0_name = dlsym(handle, "OSSL_PROVIDER_get0_name\x00", false)
-+	_mkcgo_OSSL_PROVIDER_try_load = dlsym(handle, "OSSL_PROVIDER_try_load\x00", false)
-+}
-+
-+func MkcgoUnload_3() {
-+	_mkcgo_EC_POINT_set_affine_coordinates = 0
-+	_mkcgo_EVP_CIPHER_fetch = 0
-+	_mkcgo_EVP_CIPHER_get0_name = 0
-+	_mkcgo_EVP_CIPHER_get_block_size = 0
-+	_mkcgo_EVP_KDF_CTX_free = 0
-+	_mkcgo_EVP_KDF_CTX_get_kdf_size = 0
-+	_mkcgo_EVP_KDF_CTX_new = 0
-+	_mkcgo_EVP_KDF_CTX_set_params = 0
-+	_mkcgo_EVP_KDF_derive = 0
-+	_mkcgo_EVP_KDF_fetch = 0
-+	_mkcgo_EVP_KDF_free = 0
-+	_mkcgo_EVP_KEYMGMT_fetch = 0
-+	_mkcgo_EVP_KEYMGMT_free = 0
-+	_mkcgo_EVP_MAC_CTX_dup = 0
-+	_mkcgo_EVP_MAC_CTX_free = 0
-+	_mkcgo_EVP_MAC_CTX_new = 0
-+	_mkcgo_EVP_MAC_CTX_set_params = 0
-+	_mkcgo_EVP_MAC_fetch = 0
-+	_mkcgo_EVP_MAC_final = 0
-+	_mkcgo_EVP_MAC_init = 0
-+	_mkcgo_EVP_MAC_update = 0
-+	_mkcgo_EVP_MD_CTX_get_params = 0
-+	_mkcgo_EVP_MD_CTX_gettable_params = 0
-+	_mkcgo_EVP_MD_CTX_set_params = 0
-+	_mkcgo_EVP_MD_CTX_settable_params = 0
-+	_mkcgo_EVP_MD_fetch = 0
-+	_mkcgo_EVP_MD_free = 0
-+	_mkcgo_EVP_MD_get0_name = 0
-+	_mkcgo_EVP_MD_get0_provider = 0
-+	_mkcgo_EVP_MD_get_block_size = 0
-+	_mkcgo_EVP_MD_get_size = 0
-+	_mkcgo_EVP_MD_get_type = 0
-+	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = 0
-+	_mkcgo_EVP_PKEY_CTX_new_from_pkey = 0
-+	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = 0
-+	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = 0
-+	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = 0
-+	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = 0
-+	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = 0
-+	_mkcgo_EVP_PKEY_CTX_set_params = 0
-+	_mkcgo_EVP_PKEY_Q_keygen = 0
-+	_mkcgo_EVP_PKEY_decapsulate = 0
-+	_mkcgo_EVP_PKEY_decapsulate_init = 0
-+	_mkcgo_EVP_PKEY_encapsulate = 0
-+	_mkcgo_EVP_PKEY_encapsulate_init = 0
-+	_mkcgo_EVP_PKEY_fromdata = 0
-+	_mkcgo_EVP_PKEY_fromdata_init = 0
-+	_mkcgo_EVP_PKEY_get1_encoded_public_key = 0
-+	_mkcgo_EVP_PKEY_get_bits = 0
-+	_mkcgo_EVP_PKEY_get_bn_param = 0
-+	_mkcgo_EVP_PKEY_get_octet_string_param = 0
-+	_mkcgo_EVP_PKEY_get_size = 0
-+	_mkcgo_EVP_PKEY_private_check = 0
-+	_mkcgo_EVP_PKEY_public_check_quick = 0
-+	_mkcgo_EVP_PKEY_set1_encoded_public_key = 0
-+	_mkcgo_EVP_SIGNATURE_fetch = 0
-+	_mkcgo_EVP_SIGNATURE_free = 0
-+	_mkcgo_EVP_default_properties_enable_fips = 0
-+	_mkcgo_EVP_default_properties_is_fips_enabled = 0
-+	_mkcgo_OSSL_PARAM_BLD_free = 0
-+	_mkcgo_OSSL_PARAM_BLD_new = 0
-+	_mkcgo_OSSL_PARAM_BLD_push_BN = 0
-+	_mkcgo_OSSL_PARAM_BLD_push_int32 = 0
-+	_mkcgo_OSSL_PARAM_BLD_push_octet_string = 0
-+	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = 0
-+	_mkcgo_OSSL_PARAM_BLD_to_param = 0
-+	_mkcgo_OSSL_PARAM_free = 0
-+	_mkcgo_OSSL_PARAM_locate_const = 0
-+	_mkcgo_OSSL_PROVIDER_available = 0
-+	_mkcgo_OSSL_PROVIDER_get0_name = 0
-+	_mkcgo_OSSL_PROVIDER_try_load = 0
-+}
-+
-+func MkcgoLoad_33(handle unsafe.Pointer) {
-+	_mkcgo_EVP_DigestFinalXOF = dlsym(handle, "EVP_DigestFinalXOF\x00", false)
-+	_mkcgo_EVP_DigestSqueeze = dlsym(handle, "EVP_DigestSqueeze\x00", true)
-+}
-+
-+func MkcgoUnload_33() {
-+	_mkcgo_EVP_DigestFinalXOF = 0
-+	_mkcgo_EVP_DigestSqueeze = 0
-+}
-+
-+func MkcgoLoad_init_1(handle unsafe.Pointer) {
-+	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
-+	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
-+}
-+
-+func MkcgoUnload_init_1() {
-+	_mkcgo_FIPS_mode = 0
-+	_mkcgo_FIPS_mode_set = 0
-+}
-+
-+func MkcgoLoad_init_3(handle unsafe.Pointer) {
-+	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
-+	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
-+	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
-+	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
-+	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
-+	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
-+	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
-+	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
-+	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
-+}
-+
-+func MkcgoUnload_init_3() {
-+	_mkcgo_BIO_ctrl = 0
-+	_mkcgo_BIO_free = 0
-+	_mkcgo_BIO_new = 0
-+	_mkcgo_BIO_s_mem = 0
-+	_mkcgo_ERR_print_errors = 0
-+	_mkcgo_EVP_MD_fetch = 0
-+	_mkcgo_EVP_MD_free = 0
-+	_mkcgo_EVP_MD_get0_provider = 0
-+	_mkcgo_EVP_default_properties_is_fips_enabled = 0
-+}
-+
-+func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
-+	_mkcgo_DSA_free = dlsym(handle, "DSA_free\x00", false)
-+	_mkcgo_DSA_generate_key = dlsym(handle, "DSA_generate_key\x00", false)
-+	_mkcgo_DSA_get0_key = dlsym(handle, "DSA_get0_key\x00", false)
-+	_mkcgo_DSA_get0_pqg = dlsym(handle, "DSA_get0_pqg\x00", false)
-+	_mkcgo_DSA_new = dlsym(handle, "DSA_new\x00", false)
-+	_mkcgo_DSA_set0_key = dlsym(handle, "DSA_set0_key\x00", false)
-+	_mkcgo_DSA_set0_pqg = dlsym(handle, "DSA_set0_pqg\x00", false)
-+	_mkcgo_EC_KEY_check_key = dlsym(handle, "EC_KEY_check_key\x00", false)
-+	_mkcgo_EC_KEY_free = dlsym(handle, "EC_KEY_free\x00", false)
-+	_mkcgo_EC_KEY_get0_group = dlsym(handle, "EC_KEY_get0_group\x00", false)
-+	_mkcgo_EC_KEY_get0_private_key = dlsym(handle, "EC_KEY_get0_private_key\x00", false)
-+	_mkcgo_EC_KEY_get0_public_key = dlsym(handle, "EC_KEY_get0_public_key\x00", false)
-+	_mkcgo_EC_KEY_new_by_curve_name = dlsym(handle, "EC_KEY_new_by_curve_name\x00", false)
-+	_mkcgo_EC_KEY_set_private_key = dlsym(handle, "EC_KEY_set_private_key\x00", false)
-+	_mkcgo_EC_KEY_set_public_key = dlsym(handle, "EC_KEY_set_public_key\x00", false)
-+	_mkcgo_EC_KEY_set_public_key_affine_coordinates = dlsym(handle, "EC_KEY_set_public_key_affine_coordinates\x00", false)
-+	_mkcgo_EC_POINT_get_affine_coordinates_GFp = dlsym(handle, "EC_POINT_get_affine_coordinates_GFp\x00", false)
-+	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_block_size\x00", false)
-+	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_block_size\x00", false)
-+	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_size\x00", false)
-+	_mkcgo_EVP_PKEY_assign = dlsym(handle, "EVP_PKEY_assign\x00", false)
-+	_mkcgo_EVP_PKEY_get0_DSA = dlsym(handle, "EVP_PKEY_get0_DSA\x00", false)
-+	_mkcgo_EVP_PKEY_get0_EC_KEY = dlsym(handle, "EVP_PKEY_get0_EC_KEY\x00", false)
-+	_mkcgo_EVP_PKEY_get1_RSA = dlsym(handle, "EVP_PKEY_get1_RSA\x00", false)
-+	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_bits\x00", false)
-+	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_size\x00", false)
-+	_mkcgo_EVP_PKEY_set1_EC_KEY = dlsym(handle, "EVP_PKEY_set1_EC_KEY\x00", false)
-+	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
-+	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
-+	_mkcgo_HMAC_CTX_copy = dlsym(handle, "HMAC_CTX_copy\x00", false)
-+	_mkcgo_HMAC_CTX_free = dlsym(handle, "HMAC_CTX_free\x00", false)
-+	_mkcgo_HMAC_CTX_new = dlsym(handle, "HMAC_CTX_new\x00", false)
-+	_mkcgo_HMAC_Final = dlsym(handle, "HMAC_Final\x00", false)
-+	_mkcgo_HMAC_Init_ex = dlsym(handle, "HMAC_Init_ex\x00", false)
-+	_mkcgo_HMAC_Update = dlsym(handle, "HMAC_Update\x00", false)
-+	_mkcgo_RSA_free = dlsym(handle, "RSA_free\x00", false)
-+	_mkcgo_RSA_get0_crt_params = dlsym(handle, "RSA_get0_crt_params\x00", false)
-+	_mkcgo_RSA_get0_factors = dlsym(handle, "RSA_get0_factors\x00", false)
-+	_mkcgo_RSA_get0_key = dlsym(handle, "RSA_get0_key\x00", false)
-+	_mkcgo_RSA_new = dlsym(handle, "RSA_new\x00", false)
-+	_mkcgo_RSA_set0_crt_params = dlsym(handle, "RSA_set0_crt_params\x00", false)
-+	_mkcgo_RSA_set0_factors = dlsym(handle, "RSA_set0_factors\x00", false)
-+	_mkcgo_RSA_set0_key = dlsym(handle, "RSA_set0_key\x00", false)
-+}
-+
-+func MkcgoUnload_legacy_1() {
-+	_mkcgo_DSA_free = 0
-+	_mkcgo_DSA_generate_key = 0
-+	_mkcgo_DSA_get0_key = 0
-+	_mkcgo_DSA_get0_pqg = 0
-+	_mkcgo_DSA_new = 0
-+	_mkcgo_DSA_set0_key = 0
-+	_mkcgo_DSA_set0_pqg = 0
-+	_mkcgo_EC_KEY_check_key = 0
-+	_mkcgo_EC_KEY_free = 0
-+	_mkcgo_EC_KEY_get0_group = 0
-+	_mkcgo_EC_KEY_get0_private_key = 0
-+	_mkcgo_EC_KEY_get0_public_key = 0
-+	_mkcgo_EC_KEY_new_by_curve_name = 0
-+	_mkcgo_EC_KEY_set_private_key = 0
-+	_mkcgo_EC_KEY_set_public_key = 0
-+	_mkcgo_EC_KEY_set_public_key_affine_coordinates = 0
-+	_mkcgo_EC_POINT_get_affine_coordinates_GFp = 0
-+	_mkcgo_EVP_CIPHER_get_block_size = 0
-+	_mkcgo_EVP_MD_get_block_size = 0
-+	_mkcgo_EVP_MD_get_size = 0
-+	_mkcgo_EVP_PKEY_assign = 0
-+	_mkcgo_EVP_PKEY_get0_DSA = 0
-+	_mkcgo_EVP_PKEY_get0_EC_KEY = 0
-+	_mkcgo_EVP_PKEY_get1_RSA = 0
-+	_mkcgo_EVP_PKEY_get_bits = 0
-+	_mkcgo_EVP_PKEY_get_size = 0
-+	_mkcgo_EVP_PKEY_set1_EC_KEY = 0
-+	_mkcgo_FIPS_mode = 0
-+	_mkcgo_FIPS_mode_set = 0
-+	_mkcgo_HMAC_CTX_copy = 0
-+	_mkcgo_HMAC_CTX_free = 0
-+	_mkcgo_HMAC_CTX_new = 0
-+	_mkcgo_HMAC_Final = 0
-+	_mkcgo_HMAC_Init_ex = 0
-+	_mkcgo_HMAC_Update = 0
-+	_mkcgo_RSA_free = 0
-+	_mkcgo_RSA_get0_crt_params = 0
-+	_mkcgo_RSA_get0_factors = 0
-+	_mkcgo_RSA_get0_key = 0
-+	_mkcgo_RSA_new = 0
-+	_mkcgo_RSA_set0_crt_params = 0
-+	_mkcgo_RSA_set0_factors = 0
-+	_mkcgo_RSA_set0_key = 0
-+}
-+
-+func MkcgoLoad_version(handle unsafe.Pointer) {
-+	_mkcgo_OPENSSL_version_major = dlsym(handle, "OPENSSL_version_major\x00", true)
-+	_mkcgo_OPENSSL_version_minor = dlsym(handle, "OPENSSL_version_minor\x00", true)
-+	_mkcgo_OPENSSL_version_patch = dlsym(handle, "OPENSSL_version_patch\x00", true)
-+	_mkcgo_OpenSSL_version_num = dlsym(handle, "OpenSSL_version_num\x00", true)
-+}
-+
-+func MkcgoUnload_version() {
-+	_mkcgo_OPENSSL_version_major = 0
-+	_mkcgo_OPENSSL_version_minor = 0
-+	_mkcgo_OPENSSL_version_patch = 0
-+	_mkcgo_OpenSSL_version_num = 0
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go b/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
-new file mode 100644
-index 00000000000000..d608947c8b9ae1
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/mldsa.go
-@@ -0,0 +1,448 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+const (
-+	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
-+	privateKeySizeMLDSA = 32
-+
-+	// publicKeySizeMLDSA44 is the size of an ML-DSA-44 public key encoding.
-+	publicKeySizeMLDSA44 = 1312
-+
-+	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
-+	publicKeySizeMLDSA65 = 1952
-+
-+	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
-+	publicKeySizeMLDSA87 = 2592
-+
-+	// signatureSizeMLDSA44 is the size of an ML-DSA-44 signature.
-+	signatureSizeMLDSA44 = 2420
-+
-+	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
-+	signatureSizeMLDSA65 = 3309
-+
-+	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
-+	signatureSizeMLDSA87 = 4627
-+
-+	// muSizeMLDSA is the size of the pre-hashed mu input to the external-mu
-+	// variants of Sign and Verify.
-+	muSizeMLDSA = 64
-+
-+	// maxContextSizeMLDSA is the maximum allowed length of the context string
-+	// passed to Sign and Verify.
-+	maxContextSizeMLDSA = 255
-+)
-+
-+// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
-+// on this platform. Providers may not implement every security level, so
-+// callers must probe each parameter set they intend to use.
-+func SupportsMLDSA(params MLDSAParameters) bool {
-+	switch params.keyType {
-+	case ossl.EVP_PKEY_ML_DSA_44:
-+		return supportsMLDSA44()
-+	case ossl.EVP_PKEY_ML_DSA_65:
-+		return supportsMLDSA65()
-+	case ossl.EVP_PKEY_ML_DSA_87:
-+		return supportsMLDSA87()
-+	default:
-+		return false
-+	}
-+}
-+
-+// probeMLDSA reports whether the OpenSSL provider exposes the given ML-DSA
-+// algorithm via the keymgmt fetch interface. ML-DSA was added in OpenSSL 3.5;
-+// older 3.x releases return nil for unknown algorithm names, and 1.x lacks
-+// the fetch interface entirely.
-+func probeMLDSA(name cString) bool {
-+	if !ossl.EVP_KEYMGMT_fetch_Available() {
-+		return false
-+	}
-+	mgmt, _ := ossl.EVP_KEYMGMT_fetch(nil, name.ptr(), nil)
-+	if mgmt == nil {
-+		return false
-+	}
-+	ossl.EVP_KEYMGMT_free(mgmt)
-+	return true
-+}
-+
-+var (
-+	supportsMLDSA44 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA44) })
-+	supportsMLDSA65 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA65) })
-+	supportsMLDSA87 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA87) })
-+)
-+
-+// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
-+type MLDSAParameters struct {
-+	name          string
-+	keyType       int32
-+	keyTypeName   cString
-+	publicKeySize int
-+	signatureSize int
-+}
-+
-+var (
-+	mldsa44 = MLDSAParameters{
-+		name:          "ML-DSA-44",
-+		keyType:       ossl.EVP_PKEY_ML_DSA_44,
-+		keyTypeName:   _KeyTypeMLDSA44,
-+		publicKeySize: publicKeySizeMLDSA44,
-+		signatureSize: signatureSizeMLDSA44,
-+	}
-+	mldsa65 = MLDSAParameters{
-+		name:          "ML-DSA-65",
-+		keyType:       ossl.EVP_PKEY_ML_DSA_65,
-+		keyTypeName:   _KeyTypeMLDSA65,
-+		publicKeySize: publicKeySizeMLDSA65,
-+		signatureSize: signatureSizeMLDSA65,
-+	}
-+	mldsa87 = MLDSAParameters{
-+		name:          "ML-DSA-87",
-+		keyType:       ossl.EVP_PKEY_ML_DSA_87,
-+		keyTypeName:   _KeyTypeMLDSA87,
-+		publicKeySize: publicKeySizeMLDSA87,
-+		signatureSize: signatureSizeMLDSA87,
-+	}
-+)
-+
-+// MLDSA44 returns the ML-DSA-44 parameter set.
-+func MLDSA44() MLDSAParameters { return mldsa44 }
-+
-+// MLDSA65 returns the ML-DSA-65 parameter set.
-+func MLDSA65() MLDSAParameters { return mldsa65 }
-+
-+// MLDSA87 returns the ML-DSA-87 parameter set.
-+func MLDSA87() MLDSAParameters { return mldsa87 }
-+
-+func (params MLDSAParameters) valid() bool {
-+	switch params {
-+	case mldsa44, mldsa65, mldsa87:
-+		return true
-+	default:
-+		return false
-+	}
-+}
-+
-+// PublicKeySize returns the size of public keys for this parameter set, in bytes.
-+func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
-+
-+// SignatureSize returns the size of signatures for this parameter set, in bytes.
-+func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
-+
-+// String returns the name of the parameter set.
-+func (params MLDSAParameters) String() string { return params.name }
-+
-+var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
-+
-+// PrivateKeyMLDSA is an ML-DSA private key seed.
-+type PrivateKeyMLDSA struct {
-+	params MLDSAParameters
-+	seed   [privateKeySizeMLDSA]byte
-+}
-+
-+// GenerateKeyMLDSA generates a new ML-DSA private key.
-+func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
-+	}
-+	key := &PrivateKeyMLDSA{params: params}
-+	if err := generateMLDSASeed(params.keyType, key.seed[:]); err != nil {
-+		return nil, err
-+	}
-+	return key, nil
-+}
-+
-+// NewPrivateKeyMLDSA constructs an ML-DSA private key from its 32-byte seed.
-+func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
-+	}
-+	if len(seed) != privateKeySizeMLDSA {
-+		return nil, errors.New("mldsa: invalid private key size")
-+	}
-+	key := &PrivateKeyMLDSA{params: params}
-+	copy(key.seed[:], seed)
-+	return key, nil
-+}
-+
-+// Bytes returns the private key seed.
-+func (key *PrivateKeyMLDSA) Bytes() []byte {
-+	return key.seed[:]
-+}
-+
-+// Parameters returns the parameters associated with this private key.
-+func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
-+
-+// PublicKey returns the corresponding public key.
-+func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
-+	publicKey := &PublicKeyMLDSA{params: key.params}
-+	if err := mldsaExtractPublicKey(key.params, key.seed[:], publicKey.bytes[:key.params.publicKeySize]); err != nil {
-+		panic(err)
-+	}
-+	return publicKey
-+}
-+
-+// Sign signs message with the private key, optionally binding the signature
-+// to a context string. The context string must be at most 255 bytes long.
-+func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
-+	return mldsaSign(key.params, key.seed[:], message, context)
-+}
-+
-+// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
-+// mu must be exactly 64 bytes long.
-+func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
-+	if len(mu) != muSizeMLDSA {
-+		return nil, errors.New("mldsa: invalid message hash length")
-+	}
-+	return mldsaSignExternalMu(key.params, key.seed[:], mu)
-+}
-+
-+// PublicKeyMLDSA is an ML-DSA public key.
-+type PublicKeyMLDSA struct {
-+	params MLDSAParameters
-+	bytes  [publicKeySizeMLDSA87]byte
-+}
-+
-+// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
-+func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
-+	}
-+	if len(publicKey) != params.publicKeySize {
-+		return nil, errors.New("mldsa: invalid public key size")
-+	}
-+	// Validate by attempting a key import.
-+	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
-+	if err != nil {
-+		return nil, err
-+	}
-+	ossl.EVP_PKEY_free(pkey)
-+	key := &PublicKeyMLDSA{params: params}
-+	copy(key.bytes[:], publicKey)
-+	return key, nil
-+}
-+
-+// Bytes returns the public key encoding.
-+func (key *PublicKeyMLDSA) Bytes() []byte {
-+	return key.bytes[:key.params.publicKeySize]
-+}
-+
-+// Parameters returns the parameters associated with this public key.
-+func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
-+
-+// Verify verifies an ML-DSA signature over message bound to the given context.
-+func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
-+	return mldsaVerify(key.params, key.bytes[:key.params.publicKeySize], message, signature, context)
-+}
-+
-+// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message
-+// representative. mu must be exactly 64 bytes long.
-+func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
-+	if len(mu) != muSizeMLDSA {
-+		return errors.New("mldsa: invalid message hash length")
-+	}
-+	return mldsaVerifyExternalMu(key.params, key.bytes[:key.params.publicKeySize], mu, signature)
-+}
-+
-+// Helper functions
-+
-+// generateMLDSASeed generates a new ML-DSA private key and extracts the seed.
-+func generateMLDSASeed(keyType int32, seed []byte) error {
-+	pkey, err := generateEVPPKey(keyType, 0, "")
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_DSA_SEED.ptr(), seed, nil)
-+	return err
-+}
-+
-+// createMLDSAPrivateKey creates an ML-DSA EVP_PKEY from a 32-byte seed.
-+func createMLDSAPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
-+	if len(seed) != privateKeySizeMLDSA {
-+		return nil, errors.New("mldsa: invalid seed size")
-+	}
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addOctetString(_OSSL_PKEY_PARAM_ML_DSA_SEED, seed)
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
-+}
-+
-+// createMLDSAPublicKey creates an ML-DSA EVP_PKEY from encoded public key bytes.
-+func createMLDSAPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
-+}
-+
-+// mldsaExtractPublicKey derives and copies the encoded public key bytes from
-+// a private key seed.
-+func mldsaExtractPublicKey(params MLDSAParameters, seed, dst []byte) error {
-+	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	var pubLen int
-+	if _, err := ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), dst, &pubLen); err != nil {
-+		return err
-+	}
-+	if pubLen != params.publicKeySize {
-+		return errors.New("mldsa: unexpected public key size")
-+	}
-+	return nil
-+}
-+
-+// mldsaSigParams builds the OSSL_PARAM array used to bind a context string
-+// (and/or the external-mu flag) to an ML-DSA Sign or Verify operation.
-+// Returns nil params when neither is set.
-+func mldsaSigParams(context string, externalMu bool) (ossl.OSSL_PARAM_PTR, error) {
-+	if len(context) > maxContextSizeMLDSA {
-+		return nil, errors.New("mldsa: context too long")
-+	}
-+	if context == "" && !externalMu {
-+		return nil, nil
-+	}
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	if context != "" {
-+		bld.addOctetString(_OSSL_SIGNATURE_PARAM_CONTEXT_STRING, []byte(context))
-+	}
-+	if externalMu {
-+		bld.addInt32(_OSSL_SIGNATURE_PARAM_MU, 1)
-+	}
-+	return bld.build()
-+}
-+
-+func mldsaSign(params MLDSAParameters, seed, message []byte, context string) ([]byte, error) {
-+	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	return mldsaSignWithKey(pkey, params, message, context, false)
-+}
-+
-+func mldsaSignExternalMu(params MLDSAParameters, seed, mu []byte) ([]byte, error) {
-+	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	return mldsaSignWithKey(pkey, params, mu, "", true)
-+}
-+
-+func mldsaSignWithKey(pkey ossl.EVP_PKEY_PTR, params MLDSAParameters, message []byte, context string, externalMu bool) ([]byte, error) {
-+	mdctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_MD_CTX_free(mdctx)
-+
-+	var pctx ossl.EVP_PKEY_CTX_PTR
-+	if _, err := ossl.EVP_DigestSignInit(mdctx, &pctx, nil, nil, pkey); err != nil {
-+		return nil, err
-+	}
-+	sigParams, err := mldsaSigParams(context, externalMu)
-+	if err != nil {
-+		return nil, err
-+	}
-+	if sigParams != nil {
-+		defer ossl.OSSL_PARAM_free(sigParams)
-+		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
-+			return nil, err
-+		}
-+	}
-+
-+	signature := make([]byte, params.signatureSize)
-+	siglen := params.signatureSize
-+	if _, err := ossl.EVP_DigestSign(mdctx, signature, &siglen, message); err != nil {
-+		return nil, err
-+	}
-+	if siglen != params.signatureSize {
-+		return nil, errors.New("mldsa: unexpected signature length")
-+	}
-+	return signature[:siglen], nil
-+}
-+
-+func mldsaVerify(params MLDSAParameters, publicKey, message, signature []byte, context string) error {
-+	if len(signature) != params.signatureSize {
-+		return errors.New("mldsa: invalid signature length")
-+	}
-+	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	return mldsaVerifyWithKey(pkey, message, signature, context, false)
-+}
-+
-+func mldsaVerifyExternalMu(params MLDSAParameters, publicKey, mu, signature []byte) error {
-+	if len(signature) != params.signatureSize {
-+		return errors.New("mldsa: invalid signature length")
-+	}
-+	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	return mldsaVerifyWithKey(pkey, mu, signature, "", true)
-+}
-+
-+func mldsaVerifyWithKey(pkey ossl.EVP_PKEY_PTR, message, signature []byte, context string, externalMu bool) error {
-+	mdctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_MD_CTX_free(mdctx)
-+
-+	var pctx ossl.EVP_PKEY_CTX_PTR
-+	if _, err := ossl.EVP_DigestVerifyInit(mdctx, &pctx, nil, nil, pkey); err != nil {
-+		return err
-+	}
-+	sigParams, err := mldsaSigParams(context, externalMu)
-+	if err != nil {
-+		return err
-+	}
-+	if sigParams != nil {
-+		defer ossl.OSSL_PARAM_free(sigParams)
-+		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
-+			return err
-+		}
-+	}
-+
-+	if _, err := ossl.EVP_DigestVerify(mdctx, signature, message); err != nil {
-+		return errors.New("mldsa: invalid signature")
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
-new file mode 100644
-index 00000000000000..1bf7ae9aade6af
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/mlkem.go
-@@ -0,0 +1,368 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+const (
-+	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
-+	sharedKeySizeMLKEM = 32
-+
-+	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
-+	seedSizeMLKEM = 64
-+
-+	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
-+	ciphertextSizeMLKEM768 = 1088
-+
-+	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
-+	encapsulationKeySizeMLKEM768 = 1184
-+
-+	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
-+	ciphertextSizeMLKEM1024 = 1568
-+
-+	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
-+	encapsulationKeySizeMLKEM1024 = 1568
-+)
-+
-+// SupportsMLKEM768 returns true if ML-KEM-768 is supported on this platform.
-+func SupportsMLKEM768() bool {
-+	return supportsMLKEM768()
-+}
-+
-+// SupportsMLKEM1024 returns true if ML-KEM-1024 is supported on this platform.
-+func SupportsMLKEM1024() bool {
-+	return supportsMLKEM1024()
-+}
-+
-+var supportsMLKEM768 = sync.OnceValue(func() bool {
-+	// EVP_KEYMGMT_fetch was added in OpenSSL 3.0; if it is not available we
-+	// are on 1.x and ML-KEM is not supported. On 3.0–3.4 the fetch returns
-+	// nil for the ML-KEM algorithm name, which the probe reports as false.
-+	if !ossl.EVP_KEYMGMT_fetch_Available() {
-+		return false
-+	}
-+	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM768.ptr(), nil)
-+	if sig == nil {
-+		return false
-+	}
-+	ossl.EVP_KEYMGMT_free(sig)
-+	return true
-+})
-+
-+var supportsMLKEM1024 = sync.OnceValue(func() bool {
-+	if !ossl.EVP_KEYMGMT_fetch_Available() {
-+		return false
-+	}
-+	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM1024.ptr(), nil)
-+	if sig == nil {
-+		return false
-+	}
-+	ossl.EVP_KEYMGMT_free(sig)
-+	return true
-+})
-+
-+// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
-+// from a ciphertext. It includes various precomputed values.
-+type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
-+
-+// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
-+// the default crypto/rand source. The decapsulation key must be kept secret.
-+func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	var dk DecapsulationKeyMLKEM768
-+	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_768, dk[:]); err != nil {
-+		return DecapsulationKeyMLKEM768{}, err
-+	}
-+	return dk, nil
-+}
-+
-+// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
-+// "d || z" form. The seed must be uniformly random.
-+func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	if len(seed) != seedSizeMLKEM {
-+		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
-+	}
-+
-+	var dk DecapsulationKeyMLKEM768
-+	copy(dk[:], seed)
-+	return dk, nil
-+}
-+
-+// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
-+//
-+// The decapsulation key must be kept secret.
-+func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
-+	return dk[:]
-+}
-+
-+// Decapsulate generates a shared key from a ciphertext and a decapsulation
-+// key. If the ciphertext is not valid, Decapsulate returns an error.
-+//
-+// The shared key must be kept secret.
-+func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	return performDecapsulation(ossl.NID_ML_KEM_768, dk[:], ciphertext)
-+}
-+
-+// EncapsulationKey returns the public encapsulation key necessary to produce
-+// ciphertexts.
-+func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
-+	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_768, dk[:], encapsulationKeySizeMLKEM768)
-+	var ek EncapsulationKeyMLKEM768
-+	copy(ek[:], ekBytes)
-+	return ek
-+}
-+
-+// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
-+// decapsulated by the corresponding DecapsulationKeyMLKEM768.
-+type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
-+
-+// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
-+// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
-+func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
-+		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
-+	}
-+
-+	var ek EncapsulationKeyMLKEM768
-+	copy(ek[:], encapsulationKey)
-+	return ek, nil
-+}
-+
-+// Bytes returns the encapsulation key as a byte slice.
-+func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
-+	return ek[:]
-+}
-+
-+// Encapsulate generates a shared key and an associated ciphertext from an
-+// encapsulation key, drawing random bytes from the default crypto/rand source.
-+//
-+// The shared key must be kept secret.
-+func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
-+	return performEncapsulation(ossl.NID_ML_KEM_768, ciphertextSizeMLKEM768, ek[:])
-+}
-+
-+func performEncapsulation(id int32, ciphertextSize int, ek []byte) (sharedKey, ciphertext []byte) {
-+	pkey, err := createMLKEMPublicKey(id, ek)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	// Create encapsulation context
-+	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+
-+	// Initialize encapsulation
-+	if _, err := ossl.EVP_PKEY_encapsulate_init(ctx, nil); err != nil {
-+		panic(err)
-+	}
-+
-+	// Perform encapsulation - allocate buffers based on the key size
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	ciphertext = make([]byte, ciphertextSize)
-+
-+	sharedKeyLen := len(sharedKey)
-+	ciphertextLen := len(ciphertext)
-+
-+	if _, err := ossl.EVP_PKEY_encapsulate(ctx, base(ciphertext), &ciphertextLen, base(sharedKey), &sharedKeyLen); err != nil {
-+		panic(err)
-+	}
-+
-+	return sharedKey[:sharedKeyLen], ciphertext[:ciphertextLen]
-+}
-+
-+func performDecapsulation(id int32, seed, ciphertext []byte) (sharedKey []byte, err error) {
-+	if len(ciphertext) == 0 {
-+		return nil, errors.New("mlkem: invalid ciphertext size")
-+	}
-+
-+	pkey, err := createMLKEMPrivateKey(id, seed)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	// Create decapsulation context
-+	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+
-+	// Initialize decapsulation
-+	if _, err := ossl.EVP_PKEY_decapsulate_init(ctx, nil); err != nil {
-+		return nil, err
-+	}
-+
-+	// Perform decapsulation
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	sharedKeyLen := len(sharedKey)
-+	if _, err := ossl.EVP_PKEY_decapsulate(ctx, base(sharedKey), &sharedKeyLen, base(ciphertext), len(ciphertext)); err != nil {
-+		return nil, err
-+	}
-+
-+	return sharedKey[:sharedKeyLen], nil
-+}
-+
-+// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
-+// from a ciphertext. It includes various precomputed values.
-+type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
-+
-+// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
-+// the default crypto/rand source. The decapsulation key must be kept secret.
-+func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	var dk DecapsulationKeyMLKEM1024
-+	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_1024, dk[:]); err != nil {
-+		return DecapsulationKeyMLKEM1024{}, err
-+	}
-+	return dk, nil
-+}
-+
-+// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
-+// "d || z" form. The seed must be uniformly random.
-+func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	if len(seed) != seedSizeMLKEM {
-+		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
-+	}
-+
-+	var dk DecapsulationKeyMLKEM1024
-+	copy(dk[:], seed)
-+	return dk, nil
-+}
-+
-+// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
-+//
-+// The decapsulation key must be kept secret.
-+func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
-+	return dk[:]
-+}
-+
-+// Decapsulate generates a shared key from a ciphertext and a decapsulation
-+// key. If the ciphertext is not valid, Decapsulate returns an error.
-+//
-+// The shared key must be kept secret.
-+func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	return performDecapsulation(ossl.NID_ML_KEM_1024, dk[:], ciphertext)
-+}
-+
-+// EncapsulationKey returns the public encapsulation key necessary to produce
-+// ciphertexts.
-+func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
-+	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_1024, dk[:], encapsulationKeySizeMLKEM1024)
-+	var ek EncapsulationKeyMLKEM1024
-+	copy(ek[:], ekBytes)
-+	return ek
-+}
-+
-+// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
-+// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
-+type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
-+
-+// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
-+// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
-+func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
-+		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
-+	}
-+
-+	var ek EncapsulationKeyMLKEM1024
-+	copy(ek[:], encapsulationKey)
-+	return ek, nil
-+}
-+
-+// Bytes returns the encapsulation key as a byte slice.
-+func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
-+	return ek[:]
-+}
-+
-+// Encapsulate generates a shared key and an associated ciphertext from an
-+// encapsulation key, drawing random bytes from the default crypto/rand source.
-+//
-+// The shared key must be kept secret.
-+func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
-+	return performEncapsulation(ossl.NID_ML_KEM_1024, ciphertextSizeMLKEM1024, ek[:])
-+}
-+
-+// Helper functions
-+
-+// generateMLKEMSeed generates a new ML-KEM seed by creating a key and extracting its seed parameter.
-+func generateMLKEMSeed(keyType int32, seed []byte) error {
-+	pkey, err := generateEVPPKey(keyType, 0, "")
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_KEM_SEED.ptr(), seed, nil)
-+	return err
-+}
-+
-+// createMLKEMPrivateKey creates an ML-KEM private key from a seed
-+func createMLKEMPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
-+	if len(seed) != seedSizeMLKEM {
-+		return nil, errors.New("mlkem: invalid seed size")
-+	}
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addOctetString(_OSSL_PKEY_PARAM_ML_KEM_SEED, seed)
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
-+}
-+
-+// createMLKEMPublicKey creates an ML-KEM public key from encoded bytes.
-+func createMLKEMPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
-+}
-+
-+// extractEncapsulationKeyBytes extracts the encapsulation key bytes from a decapsulation key.
-+func extractEncapsulationKeyBytes(id int32, seed []byte, expectedSize int) []byte {
-+	pkey, err := createMLKEMPrivateKey(id, seed)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+
-+	// Extract public key bytes
-+	var pubBytes *byte
-+	pubLen, err := ossl.EVP_PKEY_get1_encoded_public_key(pkey, &pubBytes)
-+	if err != nil {
-+		panic(err)
-+	}
-+	defer cryptoFree(unsafe.Pointer(pubBytes))
-+
-+	if pubLen != expectedSize {
-+		panic(errors.New("mlkem: invalid encapsulation key size"))
-+	}
-+
-+	// Copy the bytes before pubBytes is freed
-+	result := make([]byte, pubLen)
-+	copy(result, unsafe.Slice(pubBytes, pubLen))
-+	return result
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-new file mode 100644
-index 00000000000000..212d3979c59529
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl.go
-@@ -0,0 +1,240 @@
-+//go:build !cmd_go_bootstrap
-+
-+// Package openssl provides access to OpenSSL cryptographic functions.
-+package openssl
-+
-+import (
-+	"errors"
-+	"math/bits"
-+	"strconv"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+	"github.com/golang-fips/openssl/v2/osslsetup"
-+)
-+
-+// CheckVersion checks if the OpenSSL version can be loaded
-+// and if the FIPS mode is enabled.
-+// This function can be called before Init.
-+// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
-+func CheckVersion(version string) (exists, fips bool) {
-+	return osslsetup.CheckVersion(version)
-+}
-+
-+var isBigEndian = sync.OnceValue(func() bool {
-+	buf := [2]byte{}
-+	*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
-+
-+	switch buf {
-+	case [2]byte{0xCD, 0xAB}:
-+		return false
-+	case [2]byte{0xAB, 0xCD}:
-+		return true
-+	default:
-+		panic("Could not determine native endianness.")
-+	}
-+})
-+
-+func major() int {
-+	return osslsetup.VersionMajor()
-+}
-+
-+func minor() int {
-+	return osslsetup.VersionMinor()
-+}
-+
-+func patch() int {
-+	return osslsetup.VersionPatch()
-+}
-+
-+// Init loads and initializes OpenSSL from the shared library at path.
-+// It must be called before any other OpenSSL call, except CheckVersion.
-+//
-+// Only the first call to Init is effective.
-+// Subsequent calls will return the same error result as the one from the first call.
-+//
-+// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
-+// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
-+// library libcrypto.so.1.1.1k-fips.
-+func Init(file string) error {
-+	if err := osslsetup.Init(file); err != nil {
-+		return err
-+	}
-+	return nil
-+}
-+
-+func utoa(n int) string {
-+	return strconv.FormatUint(uint64(n), 10)
-+}
-+
-+func errUnsupportedVersion() error {
-+	return errors.New("openssl: unsupported OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()) + " (minimum supported version is 1.1.1)")
-+}
-+
-+// checkMajorVersion panics if the current major version is not one of the expected versions.
-+func checkMajorVersion(expected ...int) {
-+	for _, v := range expected {
-+		if major() == v {
-+			return
-+		}
-+	}
-+	panic("openssl: incorrect major version (" + strconv.Itoa(major()) + ")")
-+}
-+
-+type fail string
-+
-+func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
-+
-+// VersionText returns the version text of the OpenSSL currently loaded.
-+//
-+//go:fix inline
-+func VersionText() string {
-+	return osslsetup.VersionText()
-+}
-+
-+// FIPS returns true if OpenSSL is running in FIPS mode and there is
-+// a provider available that supports FIPS. It returns false otherwise.
-+// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
-+//
-+//go:fix inline
-+func FIPS() bool {
-+	return osslsetup.FIPS()
-+}
-+
-+// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
-+// See [osslsetup.FIPSCapable] for details.
-+//
-+//go:fix inline
-+func FIPSCapable() bool {
-+	return osslsetup.FIPSCapable()
-+}
-+
-+// SetFIPS enables or disables FIPS mode.
-+//
-+// For OpenSSL 3, if there is no provider available that supports FIPS mode,
-+// SetFIPS will try to load a built-in provider that supports FIPS mode.
-+//
-+//go:fix inline
-+func SetFIPS(enable bool) error {
-+	return osslsetup.SetFIPS(enable)
-+}
-+
-+// sliceNeverNil returns b if non-nil, and a non-nil zero-length slice otherwise.
-+func sliceNeverNil(b []byte) []byte {
-+	if b == nil {
-+		return []byte{}
-+	}
-+	return b
-+}
-+
-+// base returns the address of the underlying array in b,
-+// being careful not to panic when b has zero length.
-+func base(b []byte) *byte {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return unsafe.SliceData(b)
-+}
-+
-+//go:linkname throw runtime.throw
-+func throw(string)
-+
-+// cryptoMalloc allocates n bytes of memory on the OpenSSL heap, which may be
-+// different from the heap which C.malloc allocates on. The allocated object
-+// must be freed using cryptoFree. cryptoMalloc is equivalent to the
-+// OPENSSL_malloc macro.
-+//
-+// Like C.malloc, this function is guaranteed to never return nil. If OpenSSL's
-+// malloc indicates out of memory, it crashes the program.
-+//
-+// Only objects which the OpenSSL library will take ownership of (i.e. will be
-+// freed by OPENSSL_free / CRYPTO_free) need to be allocated on the OpenSSL
-+// heap.
-+func cryptoMalloc(n int) unsafe.Pointer {
-+	p, _ := ossl.CRYPTO_malloc(n, nil, 0)
-+	if p == nil {
-+		// Un-recover()-ably crash the program in the same manner as the
-+		// C.malloc() wrapper function.
-+		throw("openssl: CRYPTO_malloc failed")
-+	}
-+	return p
-+}
-+
-+// cryptoFree frees an object allocated on the OpenSSL heap, which may be
-+// different from the heap which C.malloc allocates on. cryptoFree is equivalent
-+// to the OPENSSL_free macro.
-+func cryptoFree(p unsafe.Pointer) {
-+	ossl.CRYPTO_free(p, nil, 0)
-+}
-+
-+const wordBytes = bits.UintSize / 8
-+
-+// Reverse each limb of z.
-+func (z BigInt) byteSwap() {
-+	for i, d := range z {
-+		var n uint = 0
-+		for j := range wordBytes {
-+			n |= uint(byte(d)) << (8 * (wordBytes - j - 1))
-+			d >>= 8
-+		}
-+		z[i] = n
-+	}
-+}
-+
-+func wbase(b BigInt) *byte {
-+	if len(b) == 0 {
-+		return nil
-+	}
-+	return (*byte)(unsafe.Pointer(unsafe.SliceData(b)))
-+}
-+
-+func bigToBN(x BigInt) (ossl.BIGNUM_PTR, error) {
-+	if len(x) == 0 {
-+		return nil, nil
-+	}
-+	if isBigEndian() {
-+		z := make(BigInt, len(x))
-+		copy(z, x)
-+		z.byteSwap()
-+		x = z
-+	}
-+	// Limbs are always ordered in LSB first, so we can safely apply
-+	// BN_lebin2bn regardless of host endianness.
-+	bn, err := ossl.BN_lebin2bn(unsafe.Slice(wbase(x), len(x)*wordBytes), nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return bn, nil
-+}
-+
-+func bnToBig(bn ossl.BIGNUM_PTR) BigInt {
-+	if bn == nil {
-+		return nil
-+	}
-+
-+	// Limbs are always ordered in LSB first, so we can safely apply
-+	// BN_bn2lebinpad regardless of host endianness.
-+	x := make(BigInt, ossl.BN_num_bits(bn))
-+	if _, err := ossl.BN_bn2lebinpad(bn, unsafe.Slice(wbase(x), len(x)*wordBytes)); err != nil {
-+		panic(err)
-+	}
-+	if isBigEndian() {
-+		x.byteSwap()
-+	}
-+	return x
-+}
-+
-+// bnToBinPad converts the absolute value of bn into big-endian form and stores
-+// it at to, padding with zeroes if necessary. If len(to) is not large enough to
-+// hold the result, an error is returned.
-+func bnToBinPad(bn ossl.BIGNUM_PTR, to []byte) error {
-+	_, err := ossl.BN_bn2binpad(bn, to)
-+	return err
-+}
-+
-+func bigEndianUint64(b []byte) uint64 {
-+	_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
-+	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
-+		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
-new file mode 100644
-index 00000000000000..c35f1bdcbef80b
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl_cgo.go
-@@ -0,0 +1,16 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import "C"
-+import "unsafe"
-+
-+// goString converts a C string pointer to a Go string for cgo mode
-+func goString(ptr *byte) string {
-+	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
-+}
-+
-+// goBytes converts a C byte array to a Go byte slice for cgo mode
-+func goBytes(ptr unsafe.Pointer, length int) []byte {
-+	return C.GoBytes(ptr, C.int(length))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
-new file mode 100644
-index 00000000000000..47bfafa9d4c63f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/openssl_nocgo.go
-@@ -0,0 +1,32 @@
-+//go:build !cgo
-+
-+package openssl
-+
-+import "unsafe"
-+
-+// goString converts a C string pointer to a Go string for nocgo mode
-+func goString(ptr *byte) string {
-+	if ptr == nil {
-+		return ""
-+	}
-+	var result []byte
-+	for i := 0; ; i++ {
-+		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
-+		if b == 0 {
-+			break
-+		}
-+		result = append(result, b)
-+	}
-+	return string(result)
-+}
-+
-+// goBytes converts a C byte array to a Go byte slice for nocgo mode
-+func goBytes(ptr unsafe.Pointer, length int) []byte {
-+	if ptr == nil || length == 0 {
-+		return nil
-+	}
-+	// Copy the data to Go memory, similar to C.GoBytes
-+	result := make([]byte, length)
-+	copy(result, unsafe.Slice((*byte)(ptr), length))
-+	return result
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
-new file mode 100644
-index 00000000000000..138e1ab10f7f75
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/fips.go
-@@ -0,0 +1,166 @@
-+//go:build !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+import (
-+	"errors"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// cString is a null-terminated string,
-+// akin to C's char*.
-+type cString string
-+
-+// ptr returns a pointer to the string data.
-+// It panics if the string is not null-terminated.
-+//
-+// The memory pointed to by the returned pointer should
-+// not be modified and it must only be passed to
-+// "const char*" parameters. Any attempt to modify it
-+// will result in a runtime panic, as Go strings are
-+// allocated in read-only memory.
-+func (s cString) ptr() *byte {
-+	if len(s) == 0 {
-+		return nil
-+	}
-+	if s[len(s)-1] != 0 {
-+		panic("must be null-terminated")
-+	}
-+	return unsafe.StringData(string(s))
-+}
-+
-+const (
-+	// Provider names
-+	_ProviderNameFips    cString = "fips\x00"
-+	_ProviderNameDefault cString = "default\x00"
-+
-+	// Property strings
-+	_PropFIPSYes cString = "fips=yes\x00"
-+	_PropFIPSNo  cString = "-fips\x00"
-+
-+	// Digest Names
-+	_DigestNameSHA2_256 cString = "SHA2-256\x00"
-+)
-+
-+// FIPS returns true if OpenSSL is running in FIPS mode and there is
-+// a provider available that supports FIPS. It returns false otherwise.
-+// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
-+func FIPS() bool {
-+	switch vMajor {
-+	case 1:
-+		return ossl.FIPS_mode() == 1
-+	case 3, 4:
-+		// Check if the default properties contain `fips=1`.
-+		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
-+			// Note that it is still possible that the provider used by default is FIPS-compliant,
-+			// but that wouldn't be a system or user requirement.
-+			return false
-+		}
-+		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
-+		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
-+		//
-+		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
-+		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
-+		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
-+		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
-+		return proveSHA256("")
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
-+// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
-+// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
-+// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
-+// which is FIPS-capable.
-+//
-+// Considerations:
-+//   - Multiple calls to FIPSCapable can return different values if [SetFIPS] is called in between.
-+//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
-+//     the default properties contain `fips=yes`.
-+//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
-+//   - When using OpenSSL 1, will always return the same value as [FIPS].
-+//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
-+//     some heuristics that should be treated as an implementation detail that may change in the future.
-+func FIPSCapable() bool {
-+	if FIPS() {
-+		return true
-+	}
-+	switch vMajor {
-+	case 3, 4:
-+		// Load the provider with and without the `fips=yes` query.
-+		// If the providers are the same, then the default provider is FIPS-capable.
-+		provFIPS := sha256Provider(_ProviderNameFips)
-+		if provFIPS == nil {
-+			return false
-+		}
-+		provDefault := sha256Provider("")
-+		return provFIPS == provDefault
-+	}
-+	return false
-+}
-+
-+// SetFIPS enables or disables FIPS mode.
-+//
-+// For OpenSSL 3, if there is no provider available that supports FIPS mode,
-+// SetFIPS will try to load a built-in provider that supports FIPS mode.
-+func SetFIPS(enable bool) error {
-+	if FIPS() == enable {
-+		// Already in the desired state.
-+		return nil
-+	}
-+	var mode int32
-+	if enable {
-+		mode = int32(1)
-+	} else {
-+		mode = int32(0)
-+	}
-+	switch vMajor {
-+	case 1:
-+		if _, err := ossl.FIPS_mode_set(mode); err != nil {
-+			return err
-+		}
-+		return nil
-+	case 3, 4:
-+		var shaProps, provName cString
-+		if enable {
-+			shaProps = _PropFIPSYes
-+			provName = _ProviderNameFips
-+		} else {
-+			shaProps = _PropFIPSNo
-+			provName = _ProviderNameDefault
-+		}
-+		if !proveSHA256(shaProps) {
-+			// There is no provider available that supports the desired FIPS mode.
-+			// Try to load the built-in provider associated with the given mode.
-+			if p, _ := ossl.OSSL_PROVIDER_try_load(nil, provName.ptr(), 1); p == nil {
-+				// The built-in provider was not loaded successfully, we can't enable FIPS mode.
-+				return errors.New("openssl: FIPS mode not supported by any provider")
-+			}
-+		}
-+		_, err := ossl.EVP_default_properties_enable_fips(nil, mode)
-+		return err
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// sha256Provider returns the provider for the SHA-256 algorithm
-+// using the given properties.
-+func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
-+	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
-+	if md == nil {
-+		return nil
-+	}
-+	defer ossl.EVP_MD_free(md)
-+	return ossl.EVP_MD_get0_provider(md)
-+}
-+
-+// proveSHA256 checks if the SHA-256 algorithm is available
-+// using the given properties.
-+func proveSHA256(props cString) bool {
-+	return sha256Provider(props) != nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
-new file mode 100644
-index 00000000000000..a2e236bab9fddf
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init.go
-@@ -0,0 +1,169 @@
-+//go:build !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+import (
-+	"errors"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// osslHandle is the handle to the OpenSSL shared library loaded in the [Init] function.
-+var osslHandle unsafe.Pointer
-+
-+// opensslInit loads and initializes OpenSSL.
-+//
-+// See [Init] for details about file.
-+func opensslInit(file string) error {
-+	// Load the OpenSSL shared library using dlopen.
-+	handle, close, err := openLibrary(file)
-+	if err != nil {
-+		return err
-+	}
-+
-+	ossl.MkcgoLoad_(handle)
-+	if vMajor == 1 {
-+		ossl.MkcgoLoad_legacy_1(handle)
-+	} else {
-+		ossl.MkcgoLoad_3(handle)
-+		if vMajor > 3 || (vMajor == 3 && vMinor >= 3) {
-+			ossl.MkcgoLoad_33(handle)
-+		}
-+	}
-+
-+	// Initialize OpenSSL.
-+	ossl.OPENSSL_init()
-+	if _, err = ossl.OPENSSL_init_crypto(
-+		ossl.OPENSSL_INIT_ADD_ALL_CIPHERS|
-+			ossl.OPENSSL_INIT_ADD_ALL_DIGESTS|
-+			ossl.OPENSSL_INIT_LOAD_CONFIG|
-+			ossl.OPENSSL_INIT_LOAD_CRYPTO_STRINGS,
-+		nil); err != nil {
-+		close()
-+		return err
-+	}
-+	osslHandle = handle
-+	return nil
-+}
-+
-+// initForCheckVersion loads and initialize only the
-+// functions required in [CheckVersion].
-+// It returns a close function that must be called to release the resources.
-+//
-+// This function modifies the vMajor, vMinor, and vPatch global variables as
-+// well as other internal global variables that facilitate OpenSSL calls.
-+//
-+// If the function succeeds, calling the close function restores the previous
-+// state of the global variables. If it fails, the global variables are restored
-+// before returning.
-+func initForCheckVersion(file string) (func(), error) {
-+	prevMajor, prevMinor, prevPatch := vMajor, vMinor, vPatch
-+	restoreVersion := func() {
-+		vMajor, vMinor, vPatch = prevMajor, prevMinor, prevPatch
-+	}
-+	handle, close, err := openLibrary(file)
-+	if err != nil {
-+		restoreVersion()
-+		return nil, err
-+	}
-+	initFuncs := func() (loadX func(unsafe.Pointer), unloadX func()) {
-+		switch vMajor {
-+		case 1:
-+			loadX = ossl.MkcgoLoad_init_1
-+			unloadX = ossl.MkcgoUnload_init_1
-+		default:
-+			if vMajor < 3 {
-+				// openLibrary should have already rejected this.
-+				panic(errUnsupportedVersion())
-+			}
-+			// Any 3+ major uses the OpenSSL 3 init shim: 3+ guarantees
-+			// ABI/API compatibility within the same major.
-+			loadX = ossl.MkcgoLoad_init_3
-+			unloadX = ossl.MkcgoUnload_init_3
-+		}
-+		return
-+	}
-+	loadX, unloadX := initFuncs()
-+	loadX(handle)
-+	return func() {
-+		restoreVersion()
-+		close()
-+		unloadX()
-+		if osslHandle != nil {
-+			// If osslHandle is not nil, it means that the library was already loaded
-+			// and initialized. In this case, we need to reload the functions from
-+			// the original handle.
-+			loadX, _ = initFuncs()
-+			loadX(osslHandle)
-+		}
-+	}, nil
-+}
-+
-+// openLibrary loads and initialize the version of OpenSSL.
-+// It returns the handle to the OpenSSL shared library
-+// and a function that can be called to release the resources.
-+func openLibrary(file string) (handle unsafe.Pointer, close func(), err error) {
-+	vMajor, vMinor, vPatch = 0, 0, 0
-+	handle, err = dlopen(file)
-+	if err != nil {
-+		return nil, nil, err
-+	}
-+	// Retrieve the loaded OpenSSL version and check if it is supported.
-+	// Notice that major and minor could not match with the version parameter
-+	// in case the name of the shared library file differs from the OpenSSL
-+	// version it contains.
-+	ossl.MkcgoLoad_version(handle)
-+	close = func() {
-+		dlclose(handle)
-+		if osslHandle == nil {
-+			ossl.MkcgoUnload_version()
-+		} else {
-+			ossl.MkcgoLoad_version(osslHandle)
-+		}
-+	}
-+	defer func() {
-+		if err != nil {
-+			close()
-+		}
-+	}()
-+
-+	if ossl.OPENSSL_version_major_Available() &&
-+		ossl.OPENSSL_version_minor_Available() &&
-+		ossl.OPENSSL_version_patch_Available() {
-+		// Likely OpenSSL 3 or later.
-+		vMajor = int(ossl.OPENSSL_version_major())
-+		vMinor = int(ossl.OPENSSL_version_minor())
-+		vPatch = int(ossl.OPENSSL_version_patch())
-+	} else if ossl.OpenSSL_version_num_Available() {
-+		// Likely OpenSSL 1.
-+		ver := ossl.OpenSSL_version_num()
-+		vMajor = int(ver >> 28)
-+		vMinor = int(ver >> 20 & 0xFF)
-+		vPatch = int(ver >> 12 & 0xFF)
-+	} else {
-+		return handle, nil, errors.New("openssl: version not available")
-+	}
-+	var supported bool
-+	switch vMajor {
-+	case 1:
-+		supported = vMinor == 1 && vPatch >= 1
-+	default:
-+		// 3+ guarantees ABI/API compatibility within the same major,
-+		// so any tested major is supported. Untested 3+ majors require
-+		// GODEBUG=ms_opensslallowuntested=1.
-+		for _, m := range testedMajors {
-+			if vMajor == m {
-+				supported = true
-+				break
-+			}
-+		}
-+		if !supported && vMajor >= 3 && allowUntestedMajor() {
-+			supported = true
-+		}
-+	}
-+	if !supported {
-+		return handle, nil, errUnsupportedVersion()
-+	}
-+	return handle, close, nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
-new file mode 100644
-index 00000000000000..0e61cc128ef981
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_cgo_unix.go
-@@ -0,0 +1,31 @@
-+//go:build unix && !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+// #cgo LDFLAGS: -ldl
-+// #include <stdlib.h>
-+// #include <dlfcn.h>
-+import "C"
-+import (
-+	"errors"
-+	"unsafe"
-+)
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	cv := C.CString(file)
-+	defer C.free(unsafe.Pointer(cv))
-+	handle = C.dlopen(cv, C.RTLD_LAZY|C.RTLD_LOCAL)
-+	if handle == nil {
-+		errstr := C.GoString(C.dlerror())
-+		return nil, errors.New("openssl: can't load " + file + ": " + errstr)
-+	}
-+	return handle, nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	if C.dlclose(handle) != 0 {
-+		errstr := C.GoString(C.dlerror())
-+		return errors.New("openssl: can't close libcrypto: " + errstr)
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
-new file mode 100644
-index 00000000000000..2985d598579236
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_nocgo_unix.go
-@@ -0,0 +1,32 @@
-+//go:build unix && !cmd_go_bootstrap && !cgo && (go1.27 || !s390x)
-+
-+package osslsetup
-+
-+import (
-+	"errors"
-+	"runtime"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	const RTLD_LAZY = 1
-+	var RTLD_LOCAL = 0
-+	if runtime.GOOS == "darwin" {
-+		RTLD_LOCAL = 4 // darwin uses 4 as RTLD_LOCAL
-+	}
-+	handle = ossl.Dlopen(unsafe.StringData(file+"\x00"), int32(RTLD_LAZY|RTLD_LOCAL))
-+	if handle == nil {
-+		return nil, errors.New("openssl: can't load " + file + ": " + goString(ossl.Dlerror()))
-+	}
-+	return handle, nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	if ossl.Dlclose(handle) != 0 {
-+		errstr := goString(ossl.Dlerror())
-+		return errors.New("openssl: can't close libcrypto: " + errstr)
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
-new file mode 100644
-index 00000000000000..c4981aef84b42f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/init_windows.go
-@@ -0,0 +1,36 @@
-+//go:build !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+import (
-+	"syscall"
-+	"unsafe"
-+)
-+
-+type dlopenError struct {
-+	file string
-+	err  error
-+}
-+
-+func (e *dlopenError) Error() string {
-+	return "openssl: can't load " + e.file + ": " + e.err.Error()
-+}
-+
-+func (e *dlopenError) Unwrap() error {
-+	return e.err
-+}
-+
-+func dlopen(file string) (handle unsafe.Pointer, err error) {
-+	// As Windows generally does not ship with a system OpenSSL library, let
-+	// alone a FIPS 140 certified one, use the default library search order so
-+	// that we preferentially load the DLL bundled with the application.
-+	h, err := syscall.LoadLibrary(file)
-+	if err != nil {
-+		return nil, &dlopenError{file: file, err: err}
-+	}
-+	return unsafe.Pointer(h), nil
-+}
-+
-+func dlclose(handle unsafe.Pointer) error {
-+	return syscall.FreeLibrary(syscall.Handle(handle))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
-new file mode 100644
-index 00000000000000..cbf60ff9f1462c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup.go
-@@ -0,0 +1,108 @@
-+//go:build !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+import (
-+	"errors"
-+	"strconv"
-+	"sync"
-+	"syscall"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+var (
-+	vMajor, vMinor, vPatch int
-+)
-+
-+// testedMajors lists the OpenSSL major versions this backend has been
-+// tested against. [openLibrary] rejects majors not in this list unless
-+// GODEBUG=ms_opensslallowuntested=1 is set. OpenSSL 1 is supported only
-+// at 1.1.1+; that minor/patch constraint is enforced separately in
-+// [openLibrary].
-+var testedMajors = [...]int{1, 3, 4}
-+
-+// allowUntestedMajor reports whether the user has set
-+// GODEBUG=ms_opensslallowuntested=1. The "ms_" prefix marks this as a
-+// Microsoft-defined GODEBUG so it will not collide with upstream Go.
-+var allowUntestedMajor = sync.OnceValue(func() bool {
-+	godebug, _ := syscall.Getenv("GODEBUG")
-+	return godebugAllowUntested(godebug)
-+})
-+
-+// godebugAllowUntested reports whether the comma-separated GODEBUG string
-+// contains ms_opensslallowuntested=1. Matches internal/godebug parsing:
-+// no whitespace trimming.
-+func godebugAllowUntested(godebug string) bool {
-+	const key = "ms_opensslallowuntested=1"
-+	var start int = 0
-+	for i := 0; i <= len(godebug); i++ {
-+		if i < len(godebug) && godebug[i] != ',' {
-+			continue
-+		}
-+		if godebug[start:i] == key {
-+			return true
-+		}
-+		start = i + 1
-+	}
-+	return false
-+}
-+
-+func VersionMajor() int {
-+	return vMajor
-+}
-+
-+func VersionMinor() int {
-+	return vMinor
-+}
-+
-+func VersionPatch() int {
-+	return vPatch
-+}
-+
-+func utoa(n int) string {
-+	return strconv.FormatUint(uint64(n), 10)
-+}
-+
-+func errUnsupportedVersion() error {
-+	return errors.New("openssl: unsupported OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch) + " (minimum supported version is 1.1.1)")
-+}
-+
-+var (
-+	initOnce sync.Once
-+	initErr  error
-+)
-+
-+// Init loads and initializes OpenSSL from the shared library at path.
-+// It must be called before any other OpenSSL call, except CheckVersion.
-+//
-+// Only the first call to Init is effective.
-+// Subsequent calls will return the same error result as the one from the first call.
-+//
-+// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
-+// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
-+// library libcrypto.so.1.1.1k-fips.
-+func Init(file string) error {
-+	initOnce.Do(func() {
-+		initErr = opensslInit(file)
-+	})
-+	return initErr
-+}
-+
-+// VersionText returns the version text of the OpenSSL currently loaded.
-+func VersionText() string {
-+	return goString(ossl.OpenSSL_version(0))
-+}
-+
-+// CheckVersion checks if the OpenSSL version can be loaded
-+// and if the FIPS mode is enabled.
-+// This function can be called before Init.
-+// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
-+func CheckVersion(version string) (exists, fips bool) {
-+	close, err := initForCheckVersion(version)
-+	if err != nil {
-+		return false, false
-+	}
-+	defer close()
-+	return true, FIPS()
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
-new file mode 100644
-index 00000000000000..810ccaa4fc3330
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_cgo.go
-@@ -0,0 +1,11 @@
-+//go:build !cmd_go_bootstrap
-+
-+package osslsetup
-+
-+import "C"
-+import "unsafe"
-+
-+// goString converts a C string pointer to a Go string for cgo mode
-+func goString(ptr *byte) string {
-+	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
-new file mode 100644
-index 00000000000000..fd1cad5692a0bc
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/osslsetup/osslsetup_nocgo.go
-@@ -0,0 +1,21 @@
-+//go:build !cgo
-+
-+package osslsetup
-+
-+import "unsafe"
-+
-+// goString converts a C string pointer to a Go string for nocgo mode
-+func goString(ptr *byte) string {
-+	if ptr == nil {
-+		return ""
-+	}
-+	var result []byte
-+	for i := 0; ; i++ {
-+		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
-+		if b == 0 {
-+			break
-+		}
-+		result = append(result, b)
-+	}
-+	return string(result)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/params.go b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-new file mode 100644
-index 00000000000000..d8843d2afa94a8
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/params.go
-@@ -0,0 +1,190 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+type addParamError struct {
-+	name string
-+	err  error
-+}
-+
-+func (e addParamError) Error() string {
-+	return "failed to add parameter " + e.name + ": " + e.err.Error()
-+}
-+
-+type bnParam struct {
-+	value   ossl.BIGNUM_PTR
-+	private bool
-+}
-+
-+// paramBuilder is a helper for building OSSL_PARAMs.
-+// If an error occurs when adding a new parameter,
-+// subsequent calls to add parameters are ignored
-+// and build() will return the error.
-+type paramBuilder struct {
-+	bld      ossl.OSSL_PARAM_BLD_PTR
-+	pinner   runtime.Pinner
-+	bnToFree []bnParam
-+
-+	err error
-+}
-+
-+// newParamBuilder creates a new paramBuilder.
-+// [paramBuilder.finalize] must be called to free the builder.
-+func newParamBuilder() *paramBuilder {
-+	bld := ossl.OSSL_PARAM_BLD_new()
-+	if bld == nil {
-+		// If this happens it indicates an issue allocating memory.
-+		panic("openssl: failed to create OSSL_PARAM_BLD")
-+	}
-+	return &paramBuilder{bld: bld}
-+}
-+
-+// finalize frees the builder.
-+func (b *paramBuilder) finalize() {
-+	if b.bld != nil {
-+		b.pinner.Unpin()
-+		for _, bn := range b.bnToFree {
-+			if bn.private {
-+				ossl.BN_clear_free(bn.value)
-+			} else {
-+				ossl.BN_free(bn.value)
-+			}
-+		}
-+		ossl.OSSL_PARAM_BLD_free(b.bld)
-+		b.bld = nil
-+	}
-+}
-+
-+// check is used internally to enforce invariants and should not be called by users of paramBuilder.
-+// Returns true if it's ok to add parameters to the builder or build it.
-+// Returns false if there has been an error while adding a parameter.
-+// Panics if the paramBuilder has been freed, e.g. if it has already been built.
-+func (b *paramBuilder) check() bool {
-+	if b.err != nil {
-+		return false
-+	}
-+	if b.bld == nil {
-+		panic("openssl: paramBuilder has been freed")
-+	}
-+	return true
-+}
-+
-+// build creates an OSSL_PARAM from the builder.
-+// The returned OSSL_PARAM must be freed with OSSL_PARAM_free.
-+// If an error occurred while adding parameters, the error is returned
-+// and the OSSL_PARAM is nil. Once build() is called, the builder is finalized
-+// and cannot be reused.
-+func (b *paramBuilder) build() (ossl.OSSL_PARAM_PTR, error) {
-+	defer b.finalize()
-+	if !b.check() {
-+		return nil, b.err
-+	}
-+	param, err := ossl.OSSL_PARAM_BLD_to_param(b.bld)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return param, nil
-+}
-+
-+// addUTF8String adds a NUL-terminated UTF-8 string to the builder.
-+// size should not include the terminating NUL byte. If size is zero, then it will be calculated.
-+func (b *paramBuilder) addUTF8String(name cString, value *byte, size int) {
-+	if !b.check() {
-+		return
-+	}
-+	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
-+	if size == 0 {
-+		size = cStringLen(value)
-+	}
-+	if _, err := ossl.OSSL_PARAM_BLD_push_utf8_string(b.bld, name.ptr(), unsafe.Slice(value, size)); err != nil {
-+		b.err = addParamError{name.str(), err}
-+	}
-+}
-+
-+// addOctetString adds an octet string to the builder.
-+// The value is pinned and will be unpinned when the builder is freed.
-+func (b *paramBuilder) addOctetString(name cString, value []byte) {
-+	if !b.check() {
-+		return
-+	}
-+	if value == nil {
-+		// Short-circuit a nil slice: don't pass anything at all to OpenSSL.
-+		// OpenSSL 3.5.6 raises an error when passed null, and expects users
-+		// to not call this function at all in this case.
-+		// See https://github.com/openssl/openssl/issues/30728
-+		//
-+		// Don't short-circuit empty slices, as they might have a meaning.
-+		// For example, in KDFs an empty salt is different from a nil salt.
-+		return
-+	}
-+	if len(value) != 0 {
-+		b.pinner.Pin(&value[0])
-+	}
-+	if _, err := ossl.OSSL_PARAM_BLD_push_octet_string(b.bld, name.ptr(), value); err != nil {
-+		b.err = addParamError{name.str(), err}
-+	}
-+}
-+
-+func cStringLen(ptr *byte) int {
-+	if ptr == nil {
-+		return 0
-+	}
-+	for n := 0; ; n++ {
-+		if *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(n))) == 0 {
-+			return n
-+		}
-+	}
-+}
-+
-+// addInt32 adds an int32 to the builder.
-+func (b *paramBuilder) addInt32(name cString, value int32) {
-+	if !b.check() {
-+		return
-+	}
-+	if _, err := ossl.OSSL_PARAM_BLD_push_int32(b.bld, name.ptr(), value); err != nil {
-+		b.err = addParamError{name.str(), err}
-+	}
-+}
-+
-+// addBN adds a GOossl.BIGNUM_PTR to the builder.
-+func (b *paramBuilder) addBN(name cString, value ossl.BIGNUM_PTR) {
-+	if !b.check() {
-+		return
-+	}
-+	if _, err := ossl.OSSL_PARAM_BLD_push_BN(b.bld, name.ptr(), value); err != nil {
-+		b.err = addParamError{name.str(), err}
-+	}
-+}
-+
-+// addBigInt adds a BigInt to the builder.
-+// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
-+// If private is true, the BIGNUM will be cleared with BN_clear_free,
-+// otherwise it will be freed with BN_free.
-+func (b *paramBuilder) addBigInt(name cString, value BigInt, private bool) {
-+	if !b.check() {
-+		return
-+	}
-+	if len(value) == 0 {
-+		// Nothing to do.
-+		return
-+	}
-+	bn, err := bigToBN(value)
-+	if err != nil {
-+		b.err = err
-+		return
-+	}
-+	if b.bnToFree == nil {
-+		// Preallocate the slice to avoid growing it later, which would cause allocations and copies.
-+		// The maximum known number of BIGNUMs to free are 8 for RSA, so we use that as the capacity.
-+		b.bnToFree = make([]bnParam, 0, 8)
-+	}
-+	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
-+	b.addBN(name, bn)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-new file mode 100644
-index 00000000000000..2e34d4d95f0733
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/pbkdf2.go
-@@ -0,0 +1,54 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"errors"
-+	"hash"
-+	"sync"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
-+func SupportsPBKDF2() bool {
-+	switch major() {
-+	case 1:
-+		return true
-+	case 3, 4:
-+		_, err := fetchPBKDF2()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// fetchPBKDF2 fetches the PBKDF2 algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchPBKDF2 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_PBKDF2.ptr(), nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return kdf, nil
-+})
-+
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	h, err := hashFuncHash(fh)
-+	if err != nil {
-+		return nil, err
-+	}
-+	md := hashToMD(h)
-+	if md == nil {
-+		return nil, errors.New("unsupported hash function")
-+	}
-+	out := make([]byte, keyLen)
-+	_, err = ossl.PKCS5_PBKDF2_HMAC(password, salt, int32(iter), md, out)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return out, nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
-new file mode 100644
-index 00000000000000..7709a5005a8cc0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/provideropenssl.go
-@@ -0,0 +1,249 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"errors"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// This file contains code specific to the built-in OpenSSL providers.
-+
-+// _OSSL_MD5_CTX layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/md5.h#L33.
-+type _OSSL_MD5_CTX struct {
-+	h      [4]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+func (d *_OSSL_MD5_CTX) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *_OSSL_MD5_CTX) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// _OSSL_SHA_CTX layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
-+type _OSSL_SHA_CTX struct {
-+	h      [5]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+func (d *_OSSL_SHA_CTX) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b, d.h[4] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *_OSSL_SHA_CTX) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = appendUint32(buf, d.h[4])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// _OSSL_SHA256_CTX layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L51.
-+type _OSSL_SHA256_CTX struct {
-+	h      [8]uint32
-+	nl, nh uint32
-+	x      [64]byte
-+	nx     uint32
-+}
-+
-+func (d *_OSSL_SHA256_CTX) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint32(b)
-+	b, d.h[1] = consumeUint32(b)
-+	b, d.h[2] = consumeUint32(b)
-+	b, d.h[3] = consumeUint32(b)
-+	b, d.h[4] = consumeUint32(b)
-+	b, d.h[5] = consumeUint32(b)
-+	b, d.h[6] = consumeUint32(b)
-+	b, d.h[7] = consumeUint32(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = uint32(n << 3)
-+	d.nh = uint32(n >> 29)
-+	d.nx = uint32(n) % 64
-+	return nil
-+}
-+
-+func (d *_OSSL_SHA256_CTX) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint32(buf, d.h[0])
-+	buf = appendUint32(buf, d.h[1])
-+	buf = appendUint32(buf, d.h[2])
-+	buf = appendUint32(buf, d.h[3])
-+	buf = appendUint32(buf, d.h[4])
-+	buf = appendUint32(buf, d.h[5])
-+	buf = appendUint32(buf, d.h[6])
-+	buf = appendUint32(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
-+	return buf, nil
-+}
-+
-+// _OSSL_SHA512_CTX layout is taken from
-+// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
-+type _OSSL_SHA512_CTX struct {
-+	h      [8]uint64
-+	nl, nh uint64
-+	x      [128]byte
-+	nx     uint32
-+}
-+
-+func (d *_OSSL_SHA512_CTX) UnmarshalBinary(b []byte) error {
-+	b, d.h[0] = consumeUint64(b)
-+	b, d.h[1] = consumeUint64(b)
-+	b, d.h[2] = consumeUint64(b)
-+	b, d.h[3] = consumeUint64(b)
-+	b, d.h[4] = consumeUint64(b)
-+	b, d.h[5] = consumeUint64(b)
-+	b, d.h[6] = consumeUint64(b)
-+	b, d.h[7] = consumeUint64(b)
-+	b = b[copy(d.x[:], b):]
-+	_, n := consumeUint64(b)
-+	d.nl = n << 3
-+	d.nh = n >> 61
-+	d.nx = uint32(n) % 128
-+	return nil
-+}
-+
-+func (d *_OSSL_SHA512_CTX) AppendBinary(buf []byte) ([]byte, error) {
-+	buf = appendUint64(buf, d.h[0])
-+	buf = appendUint64(buf, d.h[1])
-+	buf = appendUint64(buf, d.h[2])
-+	buf = appendUint64(buf, d.h[3])
-+	buf = appendUint64(buf, d.h[4])
-+	buf = appendUint64(buf, d.h[5])
-+	buf = appendUint64(buf, d.h[6])
-+	buf = appendUint64(buf, d.h[7])
-+	buf = append(buf, d.x[:d.nx]...)
-+	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
-+	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
-+	return buf, nil
-+}
-+
-+func getOSSLDigetsContext(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
-+	switch major() {
-+	case 1:
-+		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
-+		type mdCtx struct {
-+			_       [2]unsafe.Pointer
-+			_       uint32
-+			md_data unsafe.Pointer
-+		}
-+		return (*mdCtx)(unsafe.Pointer(ctx)).md_data
-+	case 3:
-+		// The EVP_MD_CTX memory layout has changed in OpenSSL 3
-+		// and the property holding the internal structure is no longer md_data but algctx.
-+		// https://github.com/openssl/openssl/blob/5675a5aaf6a2e489022bcfc18330dae9263e598e/crypto/evp/evp_local.h#L16.
-+		type mdCtx struct {
-+			_      [3]unsafe.Pointer
-+			_      uint32
-+			_      [3]unsafe.Pointer
-+			algctx unsafe.Pointer
-+		}
-+		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
-+	case 4:
-+		// OpenSSL 4 removed the ENGINE, md_data, and update fields from EVP_MD_CTX.
-+		// https://github.com/openssl/openssl/blob/openssl-4.0.0-alpha1/crypto/evp/evp_local.h
-+		type mdCtx struct {
-+			_      [2]unsafe.Pointer // reqdigest, digest
-+			_      uint32            // flags
-+			_      unsafe.Pointer    // pctx
-+			algctx unsafe.Pointer
-+		}
-+		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+var errHashStateInvalid = errors.New("openssl: can't retrieve hash state")
-+
-+func osslHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
-+	algctx := getOSSLDigetsContext(ctx)
-+	if algctx == nil {
-+		return nil, errHashStateInvalid
-+	}
-+	buf = append(buf, magic...)
-+	switch ch {
-+	case crypto.MD5:
-+		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
-+		return d.AppendBinary(buf)
-+	case crypto.SHA1:
-+		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
-+		return d.AppendBinary(buf)
-+	case crypto.SHA224, crypto.SHA256:
-+		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
-+		return d.AppendBinary(buf)
-+	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
-+		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
-+		return d.AppendBinary(buf)
-+	default:
-+		panic("unsupported hash " + ch.String())
-+	}
-+}
-+
-+func osslHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
-+	algctx := getOSSLDigetsContext(ctx)
-+	if algctx == nil {
-+		return errHashStateInvalid
-+	}
-+	b = b[len(magic):]
-+	switch ch {
-+	case crypto.MD5:
-+		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
-+		return d.UnmarshalBinary(b)
-+	case crypto.SHA1:
-+		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
-+		return d.UnmarshalBinary(b)
-+	case crypto.SHA224, crypto.SHA256:
-+		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
-+		return d.UnmarshalBinary(b)
-+	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
-+		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
-+		return d.UnmarshalBinary(b)
-+	default:
-+		panic("unsupported hash " + ch.String())
-+	}
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
-new file mode 100644
-index 00000000000000..bdba34f1378e9c
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/providersymcrypt.go
-@@ -0,0 +1,330 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"errors"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// This file contains code specific to the SymCrypt provider.
-+
-+const (
-+	_SCOSSL_DIGEST_PARAM_STATE              cString = "state\x00"
-+	_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM cString = "recompute_checksum\x00"
-+)
-+
-+const (
-+	_SYMCRYPT_BLOB_MAGIC = 0x636D7973 // "cysm" in little-endian
-+
-+	_SymCryptBlobTypeHashState       = 0x100
-+	_SymCryptBlobTypeMd2State        = _SymCryptBlobTypeHashState + 1
-+	_SymCryptBlobTypeMd4State        = _SymCryptBlobTypeHashState + 2
-+	_SymCryptBlobTypeMd5State        = _SymCryptBlobTypeHashState + 3
-+	_SymCryptBlobTypeSha1State       = _SymCryptBlobTypeHashState + 4
-+	_SymCryptBlobTypeSha256State     = _SymCryptBlobTypeHashState + 5
-+	_SymCryptBlobTypeSha384State     = _SymCryptBlobTypeHashState + 6
-+	_SymCryptBlobTypeSha512State     = _SymCryptBlobTypeHashState + 7
-+	_SymCryptBlobTypeSha3_256State   = _SymCryptBlobTypeHashState + 8
-+	_SymCryptBlobTypeSha3_384State   = _SymCryptBlobTypeHashState + 9
-+	_SymCryptBlobTypeSha3_512State   = _SymCryptBlobTypeHashState + 10
-+	_SymCryptBlobTypeSha224State     = _SymCryptBlobTypeHashState + 11
-+	_SymCryptBlobTypeSha512_224State = _SymCryptBlobTypeHashState + 12
-+	_SymCryptBlobTypeSha512_256State = _SymCryptBlobTypeHashState + 13
-+	_SymCryptBlobTypeSha3_224State   = _SymCryptBlobTypeHashState + 14
-+
-+	_SYMCRYPT_MD5_STATE_EXPORT_SIZE    = uint32(unsafe.Sizeof(_SYMCRYPT_MD5_STATE_EXPORT_BLOB{}))
-+	_SYMCRYPT_SHA1_STATE_EXPORT_SIZE   = uint32(unsafe.Sizeof(_SYMCRYPT_SHA1_STATE_EXPORT_BLOB{}))
-+	_SYMCRYPT_SHA256_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA256_STATE_EXPORT_BLOB{}))
-+	_SYMCRYPT_SHA512_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA512_STATE_EXPORT_BLOB{}))
-+)
-+
-+type _SYMCRYPT_BLOB_HEADER struct {
-+	magic uint32
-+	size  uint32
-+	_type uint32
-+}
-+
-+type _SYMCRYPT_BLOB_TRAILER struct {
-+	checksum [8]uint8
-+}
-+
-+// _UINT64 is a 64-bit unsigned integer, stored in native endianess.
-+// It is used to represent a SymCrypt UINT64 type without making the
-+// parent struct 8-byte aligned, given that the Windows ABI makes
-+// the struct 4-byte aligned.
-+type _UINT64 [2]uint32
-+
-+func newUINT64(v uint64) _UINT64 {
-+	var u _UINT64
-+	if isBigEndian() {
-+		u[0], u[1] = uint32(v>>32), uint32(v)
-+	} else {
-+		u[0], u[1] = uint32(v), uint32(v>>32)
-+	}
-+	return u
-+}
-+
-+func (u *_UINT64) uint64() uint64 {
-+	if isBigEndian() {
-+		return uint64(u[0])<<32 | (uint64(u[1]))
-+	}
-+	return uint64(u[0]) | (uint64(u[1]) << 32)
-+}
-+
-+// symCryptAppendBinary appends the binary representation of a SymCrypt state
-+// to the given destination slice.
-+func symCryptAppendBinary(dst, chain, buffer []byte, blength _UINT64) []byte {
-+	length := blength.uint64()
-+	var nx uint64
-+	if len(buffer) <= 64 {
-+		nx = length & 0x3f
-+	} else {
-+		nx = length & 0x7f
-+	}
-+	dst = append(dst, chain...)
-+	dst = append(dst, buffer[:nx]...)
-+	dst = append(dst, make([]byte, len(buffer)-int(nx))...)
-+	dst = appendUint64(dst, length)
-+	return dst
-+}
-+
-+// symCryptUnmarshalBinary unmarshals the binary representation of a SymCrypt state
-+// from the given source slice. It returns the length of the data.
-+func symCryptUnmarshalBinary(d []byte, chain, buffer []byte) _UINT64 {
-+	copy(chain[:], d)
-+	d = d[len(chain):]
-+	copy(buffer[:], d)
-+	d = d[len(buffer):]
-+	_, length := consumeUint64(d)
-+	return newUINT64(length)
-+}
-+
-+// swapEndianessUint32 swaps the endianness of the given byte slice
-+// in place. It assumes the slice is a backup of a 32-bit integer array.
-+func swapEndianessUint32(d []uint8) {
-+	for i := 0; i < len(d); i += 4 {
-+		d[i], d[i+3] = d[i+3], d[i]
-+		d[i+1], d[i+2] = d[i+2], d[i+1]
-+	}
-+
-+}
-+
-+type _SYMCRYPT_MD5_STATE_EXPORT_BLOB struct {
-+	header _SYMCRYPT_BLOB_HEADER
-+	chain  [16]uint8 // little endian
-+	length _UINT64   // native endian
-+	buffer [64]uint8
-+	_      [8]uint8 // reserved
-+	_      _SYMCRYPT_BLOB_TRAILER
-+}
-+
-+func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
-+	// b.chain is little endian, but Go expects big endian,
-+	// we need to swap the bytes.
-+	swapEndianessUint32(b.chain[:])
-+	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
-+}
-+
-+func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
-+	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
-+	swapEndianessUint32(b.chain[:])
-+}
-+
-+type _SYMCRYPT_SHA1_STATE_EXPORT_BLOB struct {
-+	header _SYMCRYPT_BLOB_HEADER
-+	chain  [20]uint8 // big endian
-+	length _UINT64   // native endian
-+	buffer [64]uint8
-+	_      [8]uint8 // reserved
-+	_      _SYMCRYPT_BLOB_TRAILER
-+}
-+
-+func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
-+	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
-+}
-+
-+func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
-+	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
-+}
-+
-+type _SYMCRYPT_SHA256_STATE_EXPORT_BLOB struct {
-+	header _SYMCRYPT_BLOB_HEADER
-+	chain  [32]uint8 // big endian
-+	length _UINT64   // native endian
-+	buffer [64]uint8
-+	_      [8]uint8 // reserved
-+	_      _SYMCRYPT_BLOB_TRAILER
-+}
-+
-+func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
-+	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
-+}
-+
-+func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
-+	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
-+}
-+
-+type _SYMCRYPT_SHA512_STATE_EXPORT_BLOB struct {
-+	header  _SYMCRYPT_BLOB_HEADER
-+	chain   [64]uint8 // big endian
-+	lengthL _UINT64   // native endian
-+	lengthH _UINT64   // native endian
-+	buffer  [128]uint8
-+	_       [8]uint8 // reserved
-+	_       _SYMCRYPT_BLOB_TRAILER
-+}
-+
-+func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
-+	if b.lengthH.uint64() != 0 {
-+		return nil, errors.New("exporting state with more than 2^63-1 bytes of data is not supported")
-+	}
-+	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.lengthL), nil
-+}
-+
-+func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
-+	b.lengthL = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
-+}
-+
-+func symCryptHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
-+	size, typ := symCryptHashStateInfo(ch)
-+	state := make([]byte, size, _SYMCRYPT_SHA512_STATE_EXPORT_SIZE) // 512 is the largest size
-+	params := [2]ossl.OSSL_PARAM{
-+		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), unsafe.Pointer(&state[0]), len(state)),
-+		ossl.OSSL_PARAM_construct_end(),
-+	}
-+	if _, err := ossl.EVP_MD_CTX_get_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0]))); err != nil {
-+		return nil, err
-+	}
-+	if !ossl.OSSL_PARAM_modified(&params[0]) {
-+		return nil, errors.New("EVP_MD_CTX_get_params did not retrieve the state")
-+	}
-+
-+	header := (*_SYMCRYPT_BLOB_HEADER)(unsafe.Pointer(&state[0]))
-+	if header.magic != _SYMCRYPT_BLOB_MAGIC {
-+		return nil, errors.New("invalid blob magic")
-+	}
-+	if header.size != size {
-+		return nil, errors.New("invalid blob size")
-+	}
-+	if header._type != typ {
-+		return nil, errors.New("invalid blob type")
-+	}
-+
-+	buf = append(buf, magic...)
-+	switch ch {
-+	case crypto.MD5:
-+		blob := (*_SYMCRYPT_MD5_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
-+		return blob.appendBinary(buf)
-+	case crypto.SHA1:
-+		blob := (*_SYMCRYPT_SHA1_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
-+		return blob.appendBinary(buf)
-+	case crypto.SHA224, crypto.SHA256:
-+		blob := (*_SYMCRYPT_SHA256_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
-+		return blob.appendBinary(buf)
-+	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
-+		blob := (*_SYMCRYPT_SHA512_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
-+		return blob.appendBinary(buf)
-+	default:
-+		panic("unsupported hash " + ch.String())
-+	}
-+}
-+
-+func symCryptHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
-+	size, typ := symCryptHashStateInfo(ch)
-+	hdr := _SYMCRYPT_BLOB_HEADER{
-+		magic: _SYMCRYPT_BLOB_MAGIC,
-+		size:  size,
-+		_type: typ,
-+	}
-+	var blobPtr unsafe.Pointer
-+	b = b[len(magic):]
-+	switch ch {
-+	case crypto.MD5:
-+		var blob _SYMCRYPT_MD5_STATE_EXPORT_BLOB
-+		blobPtr = unsafe.Pointer(&blob)
-+		blob.header = hdr
-+		blob.unmarshalBinary(b)
-+	case crypto.SHA1:
-+		var blob _SYMCRYPT_SHA1_STATE_EXPORT_BLOB
-+		blobPtr = unsafe.Pointer(&blob)
-+		blob.header = hdr
-+		blob.unmarshalBinary(b)
-+	case crypto.SHA224, crypto.SHA256:
-+		var blob _SYMCRYPT_SHA256_STATE_EXPORT_BLOB
-+		blobPtr = unsafe.Pointer(&blob)
-+		blob.header = hdr
-+		blob.unmarshalBinary(b)
-+	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
-+		var blob _SYMCRYPT_SHA512_STATE_EXPORT_BLOB
-+		blobPtr = unsafe.Pointer(&blob)
-+		blob.header = hdr
-+		blob.unmarshalBinary(b)
-+	default:
-+		panic("unsupported hash " + ch.String())
-+	}
-+	var checksum int32 = 1
-+	params := [3]ossl.OSSL_PARAM{
-+		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), blobPtr, int(hdr.size)),
-+		ossl.OSSL_PARAM_construct_int32(_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr(), &checksum),
-+		ossl.OSSL_PARAM_construct_end(),
-+	}
-+	_, err := ossl.EVP_MD_CTX_set_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0])))
-+	return err
-+}
-+
-+func symCryptHashStateInfo(ch crypto.Hash) (size, typ uint32) {
-+	switch ch {
-+	case crypto.MD5:
-+		return _SYMCRYPT_MD5_STATE_EXPORT_SIZE, _SymCryptBlobTypeMd5State
-+	case crypto.SHA1:
-+		return _SYMCRYPT_SHA1_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha1State
-+	case crypto.SHA224:
-+		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha224State
-+	case crypto.SHA256:
-+		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha256State
-+	case crypto.SHA384:
-+		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha384State
-+	case crypto.SHA512_224:
-+		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_224State
-+	case crypto.SHA512_256:
-+		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_256State
-+	case crypto.SHA512:
-+		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512State
-+	default:
-+		panic("unsupported hash " + ch.String())
-+	}
-+}
-+
-+// isSymCryptHashStateSerializable checks if the SymCrypt hash state is serializable.
-+func isSymCryptHashStateSerializable(md ossl.EVP_MD_PTR) bool {
-+	ctx, err := ossl.EVP_MD_CTX_new()
-+	if err != nil {
-+		return false
-+	}
-+	defer ossl.EVP_MD_CTX_free(ctx)
-+	if _, err := ossl.EVP_DigestInit_ex(ctx, md, nil); err != nil {
-+		return false
-+	}
-+	params, err := ossl.EVP_MD_CTX_gettable_params(ctx)
-+	if err != nil {
-+		return false
-+	}
-+	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
-+		return false
-+	}
-+	params, err = ossl.EVP_MD_CTX_settable_params(ctx)
-+	if err != nil {
-+		return false
-+	}
-+	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
-+		return false
-+	}
-+	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr()); err != nil {
-+		return false
-+	}
-+	return true
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rand.go b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
-new file mode 100644
-index 00000000000000..963c3ad733dcf0
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rand.go
-@@ -0,0 +1,21 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import "github.com/golang-fips/openssl/v2/internal/ossl"
-+
-+type randReader int
-+
-+func (randReader) Read(b []byte) (int, error) {
-+	if len(b) == 0 {
-+		return 0, nil
-+	}
-+	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
-+	// We check it even so.
-+	if _, err := ossl.RAND_bytes(b); err != nil {
-+		return 0, err
-+	}
-+	return len(b), nil
-+}
-+
-+const RandReader = randReader(0)
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rc4.go b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-new file mode 100644
-index 00000000000000..390336bfbafcf6
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rc4.go
-@@ -0,0 +1,74 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"runtime"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+// SupportsRC4 returns true if NewRC4Cipher is supported.
-+func SupportsRC4() bool {
-+	switch major() {
-+	case 1:
-+		// RC4 is not part of the OpenSSL 1.x FIPS module.
-+		return !FIPS() && loadCipher(cipherRC4, cipherModeNone) != nil
-+	default:
-+		// On OpenSSL 3+ availability is decided by the algorithm probe:
-+		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
-+		return loadCipher(cipherRC4, cipherModeNone) != nil
-+	}
-+}
-+
-+// A RC4Cipher is an instance of RC4 using a particular key.
-+type RC4Cipher struct {
-+	ctx ossl.EVP_CIPHER_CTX_PTR
-+}
-+
-+// NewRC4Cipher creates and returns a new Cipher.
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
-+	ctx, err := newCipherCtx(cipherRC4, cipherModeNone, cipherOpEncrypt, key, nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	c := &RC4Cipher{ctx}
-+	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
-+	return c, nil
-+}
-+
-+func (c *RC4Cipher) finalize() {
-+	if c.ctx != nil {
-+		ossl.EVP_CIPHER_CTX_free(c.ctx)
-+	}
-+}
-+
-+// Reset zeros the key data and makes the Cipher unusable.
-+func (c *RC4Cipher) Reset() {
-+	if c.ctx != nil {
-+		ossl.EVP_CIPHER_CTX_free(c.ctx)
-+		c.ctx = nil
-+	}
-+}
-+
-+// XORKeyStream sets dst to the result of XORing src with the key stream.
-+// Dst and src must overlap entirely or not at all.
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
-+	if c.ctx == nil || len(src) == 0 {
-+		return
-+	}
-+	if inexactOverlap(dst[:len(src)], src) {
-+		panic("crypto/rc4: invalid buffer overlap")
-+	}
-+	// panic if len(dst) < len(src) with a runtime out of bound error,
-+	// which is what crypto/rc4 does.
-+	_ = dst[len(src)-1]
-+	var outLen int32
-+	if _, err := ossl.EVP_EncryptUpdate(c.ctx, dst, &outLen, src); err != nil {
-+		panic("crypto/rc4: " + err.Error())
-+	}
-+	if int(outLen) != len(src) {
-+		panic("crypto/rc4: src not fully XORed")
-+	}
-+	runtime.KeepAlive(c)
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/rsa.go b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-new file mode 100644
-index 00000000000000..2e0fa35a3c63f7
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/rsa.go
-@@ -0,0 +1,711 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"crypto/subtle"
-+	"errors"
-+	"hash"
-+	"runtime"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-+		return nil, nil, nil, nil, nil, nil, nil, nil, e
-+	}
-+	pkey, err := generateEVPPKey(ossl.EVP_PKEY_RSA, int32(bits), "")
-+	if err != nil {
-+		return bad(err)
-+	}
-+	defer ossl.EVP_PKEY_free(pkey)
-+	switch major() {
-+	case 1:
-+		key, err := ossl.EVP_PKEY_get1_RSA(pkey)
-+		if err != nil {
-+			return bad(err)
-+		}
-+		defer ossl.RSA_free(key)
-+		var n, e, d, p, q, dmp1, dmq1, iqmp ossl.BIGNUM_PTR
-+		ossl.RSA_get0_key(key, &n, &e, &d)
-+		ossl.RSA_get0_factors(key, &p, &q)
-+		ossl.RSA_get0_crt_params(key, &dmp1, &dmq1, &iqmp)
-+		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
-+		P, Q = bnToBig(p), bnToBig(q)
-+		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
-+	case 3, 4:
-+		tmp, err := ossl.BN_new()
-+		if err != nil {
-+			return bad(err)
-+		}
-+		defer func() {
-+			ossl.BN_clear_free(tmp)
-+		}()
-+		setBigInt := func(bi *BigInt, param cString) bool {
-+			if err != nil {
-+				return false
-+			}
-+			if _, err = ossl.EVP_PKEY_get_bn_param(pkey, param.ptr(), &tmp); err != nil {
-+				return false
-+			}
-+			*bi = bnToBig(tmp)
-+			ossl.BN_clear(tmp)
-+			return true
-+		}
-+		if !(setBigInt(&N, _OSSL_PKEY_PARAM_RSA_N) &&
-+			setBigInt(&E, _OSSL_PKEY_PARAM_RSA_E) &&
-+			setBigInt(&D, _OSSL_PKEY_PARAM_RSA_D) &&
-+			setBigInt(&P, _OSSL_PKEY_PARAM_RSA_FACTOR1) &&
-+			setBigInt(&Q, _OSSL_PKEY_PARAM_RSA_FACTOR2) &&
-+			setBigInt(&Dp, _OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
-+			setBigInt(&Dq, _OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
-+			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
-+			return bad(err)
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	return
-+}
-+
-+type PublicKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
-+	var pkey ossl.EVP_PKEY_PTR
-+	switch major() {
-+	case 1:
-+		key, err := ossl.RSA_new()
-+		if err != nil {
-+			return nil, err
-+		}
-+		// No need to check for errors here, RSA_set0_* functions will fail
-+		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
-+		bn, _ := bigToBN(n)
-+		be, _ := bigToBN(e)
-+		if _, err := ossl.RSA_set0_key(key, bn, be, nil); err != nil {
-+			ossl.BN_free(bn)
-+			ossl.BN_free(be)
-+			ossl.RSA_free(key)
-+			return nil, err
-+		}
-+		pkey, err = ossl.EVP_PKEY_new()
-+		if err != nil {
-+			ossl.RSA_free(key)
-+			return nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
-+			ossl.RSA_free(key)
-+			ossl.EVP_PKEY_free(pkey)
-+			return nil, err
-+		}
-+	case 3, 4:
-+		var err error
-+		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	k := &PublicKeyRSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PublicKeyRSA).finalize)
-+	return k, nil
-+}
-+
-+func (k *PublicKeyRSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PublicKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	// Because of the finalizer, any time _pkey is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+type PrivateKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey ossl.EVP_PKEY_PTR
-+}
-+
-+func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
-+	var pkey ossl.EVP_PKEY_PTR
-+	switch major() {
-+	case 1:
-+		key, err := ossl.RSA_new()
-+		if err != nil {
-+			return nil, err
-+		}
-+		// No need to check for errors here, RSA_set0_* functions will fail
-+		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
-+		bn, _ := bigToBN(n)
-+		be, _ := bigToBN(e)
-+		bd, _ := bigToBN(d)
-+		if _, err := ossl.RSA_set0_key(key, bn, be, bd); err != nil {
-+			ossl.BN_free(bn)
-+			ossl.BN_free(be)
-+			ossl.BN_clear_free(bd)
-+			return nil, err
-+		}
-+		if p != nil && q != nil {
-+			bp, _ := bigToBN(p)
-+			bq, _ := bigToBN(q)
-+			if _, err := ossl.RSA_set0_factors(key, bp, bq); err != nil {
-+				ossl.BN_clear_free(bp)
-+				ossl.BN_clear_free(bq)
-+				return nil, err
-+			}
-+		}
-+		if dp != nil && dq != nil && qinv != nil {
-+			bdp, _ := bigToBN(dp)
-+			bdq, _ := bigToBN(dq)
-+			bqinv, _ := bigToBN(qinv)
-+			if _, err := ossl.RSA_set0_crt_params(key, bdp, bdq, bqinv); err != nil {
-+				ossl.BN_free(bdp)
-+				ossl.BN_free(bdq)
-+				ossl.BN_free(bqinv)
-+				return nil, err
-+			}
-+		}
-+		pkey, err = ossl.EVP_PKEY_new()
-+		if err != nil {
-+			ossl.RSA_free(key)
-+			return nil, err
-+		}
-+		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
-+			ossl.RSA_free(key)
-+			ossl.EVP_PKEY_free(pkey)
-+			return nil, err
-+		}
-+	case 3, 4:
-+		var err error
-+		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
-+			return nil, err
-+		}
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+	k := &PrivateKeyRSA{_pkey: pkey}
-+	runtime.SetFinalizer(k, (*PrivateKeyRSA).finalize)
-+	return k, nil
-+}
-+
-+func (k *PrivateKeyRSA) finalize() {
-+	ossl.EVP_PKEY_free(k._pkey)
-+}
-+
-+func (k *PrivateKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
-+	// Because of the finalizer, any time _pkey is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
-+
-+func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, ciphertext)
-+}
-+
-+func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, msg)
-+}
-+
-+func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, ciphertext)
-+}
-+
-+func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, msg)
-+}
-+
-+func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	ret, err := evpDecrypt(priv.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, ciphertext)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// We could return here, but the Go standard library test expects DecryptRSANoPadding to verify the result
-+	// in order to defend against errors in the CRT computation.
-+	//
-+	// The following code tries to replicate the verification implemented in the upstream function decryptAndCheck, found at
-+	// https://github.com/golang/go/blob/9de1ac6ac2cad3871760d0aa288f5ca713afd0a6/src/crypto/rsa/rsa.go#L569-L582.
-+	pub := &PublicKeyRSA{_pkey: priv._pkey}
-+	// A private EVP_PKEY can be used as a public key as it contains the public information.
-+	enc, err := EncryptRSANoPadding(pub, ret)
-+	if err != nil {
-+		return nil, err
-+	}
-+	// Upstream does not do a constant time comparison because it works with math/big instead of byte slices,
-+	// and math/big does not support constant-time arithmetic yet. See #20654 for more info.
-+	if subtle.ConstantTimeCompare(ciphertext, enc) != 1 {
-+		return nil, errors.New("rsa: internal error")
-+	}
-+	return ret, nil
-+}
-+
-+func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, msg)
-+}
-+
-+func saltLength(saltLen int, sign bool) (int32, error) {
-+	// A salt length of -2 is valid in OpenSSL, but not in crypto/rsa, so reject
-+	// it, and lengths < -2, before we convert to the OpenSSL sentinel values.
-+	if saltLen <= -2 {
-+		return 0, errors.New("crypto/rsa: invalid PSS salt length")
-+	}
-+	// OpenSSL uses sentinel salt length values like Go crypto does,
-+	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
-+	if saltLen == 0 {
-+		if sign {
-+			if major() == 1 {
-+				// OpenSSL 1.x uses -2 to mean maximal size when signing where Go crypto uses 0.
-+				return ossl.RSA_PSS_SALTLEN_MAX_SIGN, nil
-+			}
-+			// OpenSSL 3.x deprecated RSA_PSS_SALTLEN_MAX_SIGN
-+			// and uses -3 to mean maximal size when signing where Go crypto uses 0.
-+			return ossl.RSA_PSS_SALTLEN_MAX, nil
-+		}
-+		// OpenSSL uses -2 to mean auto-detect size when verifying where Go crypto uses 0.
-+		return ossl.RSA_PSS_SALTLEN_AUTO, nil
-+	}
-+	return int32(saltLen), nil
-+}
-+
-+func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	cSaltLen, err := saltLength(saltLen, true)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return evpSign(priv.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, hashed)
-+}
-+
-+func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	cSaltLen, err := saltLength(saltLen, false)
-+	if err != nil {
-+		return err
-+	}
-+	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, sig, hashed)
-+}
-+
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, ossl.RSA_PKCS1_PADDING, 0, h, hashed)
-+}
-+
-+func HashSignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, msg []byte) ([]byte, error) {
-+	return evpHashSign(priv.withKey, h, msg)
-+}
-+
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	defer runtime.KeepAlive(pub)
-+	var size int32
-+	if err := pub.withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
-+		size, err = ossl.EVP_PKEY_get_size(pkey)
-+		if err != nil {
-+			return err
-+		}
-+		if len(sig) < int(size) {
-+			return errors.New("crypto/rsa: verification error")
-+		}
-+		return nil
-+	}); err != nil {
-+		return err
-+	}
-+	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PADDING, 0, h, sig, hashed)
-+}
-+
-+func HashVerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, msg, sig []byte) error {
-+	return evpHashVerify(pub.withKey, h, msg, sig)
-+}
-+
-+func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
-+	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
-+
-+	// OpenSSL 3.0 and 3.1 required all the precomputed values if
-+	// P and Q are present. See:
-+	// https://github.com/openssl/openssl/pull/22334
-+	//
-+	// We could only set P and Q if they exist when using OpenSSL 3.2
-+	// or newer, but the RSA provider might be built with an older
-+	// OpenSSL version, in which case it would still require all the
-+	// precomputed values. So better always provide all the values or
-+	// none of them.
-+	if p != nil && q != nil && dp != nil && dq != nil && qinv != nil {
-+		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
-+		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
-+		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
-+		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
-+		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
-+	}
-+
-+	params, err := bld.build()
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+	selection := ossl.EVP_PKEY_PUBLIC_KEY
-+	if isPriv {
-+		selection = ossl.EVP_PKEY_KEYPAIR
-+	}
-+	return newEvpFromParams(ossl.EVP_PKEY_RSA, int32(selection), params)
-+}
-+
-+// SupportsRSAPKCS1v15Encryption returns true if the RSA PKCS1 v1.5 padding is supported for encryption and decryption.
-+var SupportsRSAPKCS1v15Encryption = sync.OnceValue(func() bool {
-+	pkey := testRSAPrivateKey()
-+	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
-+	if err != nil {
-+		return false
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+
-+	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
-+		return false
-+	}
-+
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
-+		return false
-+	}
-+
-+	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
-+	// So we need to try to encrypt something to be sure.
-+	in := []byte("test")
-+	var outLen int
-+	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
-+		return false
-+	}
-+	return true
-+})
-+
-+var rsaPKCS1SignatureSupport sync.Map
-+
-+// SupportsRSAPKCS1v15Signature returns true if the RSA PKCS1 v1.5 padding is supported for signatures with the given hash.
-+func SupportsRSAPKCS1v15Signature(ch crypto.Hash) (supported bool) {
-+	v, ok := rsaPKCS1SignatureSupport.Load(ch)
-+	if ok {
-+		return v.(bool)
-+	}
-+	defer func() {
-+		rsaPKCS1SignatureSupport.Store(ch, supported)
-+	}()
-+
-+	pkey := testRSAPrivateKey()
-+	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
-+	if err != nil {
-+		return false
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
-+		return false
-+	}
-+	if setPKCS1Padding(ctx, ch) != nil {
-+		return false
-+	}
-+	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
-+	// So we need to try to sign something to be sure.
-+	size := 1
-+	if ch != 0 {
-+		size = ch.Size()
-+	}
-+	in := make([]byte, size, maxHashSize)
-+	var outLen int
-+	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
-+		return false
-+	}
-+	return true
-+}
-+
-+var rsaPSSSupport sync.Map
-+
-+// SupportsRSAPSS returns true if the RSA PSS padding is supported for signatures with the given hash.
-+func SupportsRSAPSS(ch crypto.Hash) (supported bool) {
-+	v, ok := rsaPSSSupport.Load(ch)
-+	if ok {
-+		return v.(bool)
-+	}
-+	defer func() {
-+		rsaPSSSupport.Store(ch, supported)
-+	}()
-+
-+	if !SupportsHash(ch) {
-+		// Short-circuit if the hash itself is not supported.
-+		return false
-+	}
-+
-+	pkey := testRSAPrivateKey()
-+	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
-+	if err != nil {
-+		return false
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
-+		return false
-+	}
-+	if setPSSPadding(ctx, 0, ch) != nil {
-+		return false
-+	}
-+	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
-+	// So we need to try to sign something to be sure.
-+	in := make([]byte, ch.Size(), maxHashSize)
-+	var outLen int
-+	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
-+		return false
-+	}
-+	return true
-+}
-+
-+var rsaOAEPSupport sync.Map
-+
-+type rsaOAEPSupportEntry struct {
-+	ch      crypto.Hash
-+	mgfHash crypto.Hash
-+}
-+
-+// SupportsRSAOAEP returns true if the RSA OAEP padding is supported for encryption/decryption
-+// with the given hash and MGF hash.
-+func SupportsRSAOAEP(h, mgfHash hash.Hash) (supported bool) {
-+	ch := hashToCryptoHash(h)
-+	if ch == 0 {
-+		return false
-+	}
-+	mgfCh := hashToCryptoHash(mgfHash)
-+	if mgfCh == 0 {
-+		return false
-+	}
-+	entry := rsaOAEPSupportEntry{ch, mgfCh}
-+	v, ok := rsaOAEPSupport.Load(entry)
-+	if ok {
-+		return v.(bool)
-+	}
-+	defer func() {
-+		rsaOAEPSupport.Store(entry, supported)
-+	}()
-+
-+	if !SupportsHash(ch) {
-+		// Short-circuit if the hash itself is not supported.
-+		return false
-+	}
-+
-+	pkey := testRSAPrivateKey()
-+	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
-+	if err != nil {
-+		return false
-+	}
-+	defer ossl.EVP_PKEY_CTX_free(ctx)
-+
-+	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
-+		return false
-+	}
-+
-+	if setOAEPPadding(ctx, h, mgfHash, nil) != nil {
-+		return false
-+	}
-+
-+	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
-+	// So we need to try to encrypt something to be sure.
-+	in := []byte("test")
-+	var outLen int
-+	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
-+		return false
-+	}
-+	return true
-+}
-+
-+// testRSAPrivateKey returns a test RSA private key for use in capability probing functions.
-+//
-+// The key is constructed from hard-coded parameters to avoid
-+// spurious failures due to key generation issues and to avoid the speed cost of
-+// key generation.
-+var testRSAPrivateKey = sync.OnceValue(func() ossl.EVP_PKEY_PTR {
-+	// RSA-2048 key "testRSA2048":
-+	// https://www.rfc-editor.org/rfc/rfc9500.html#section-2.1
-+	N := []byte{
-+		0xB0, 0xF9, 0xE8, 0x19, 0x43, 0xA7, 0xAE, 0x98,
-+		0x92, 0xAA, 0xDE, 0x17, 0xCA, 0x7C, 0x40, 0xF8,
-+		0x74, 0x4F, 0xED, 0x2F, 0x81, 0x48, 0xE6, 0xC8,
-+		0xEA, 0xA2, 0x7B, 0x7D, 0x00, 0x15, 0x48, 0xFB,
-+		0x51, 0x92, 0xAB, 0x28, 0xB5, 0x6C, 0x50, 0x60,
-+		0xB1, 0x18, 0xCC, 0xD1, 0x31, 0xE5, 0x94, 0x87,
-+		0x4C, 0x6C, 0xA9, 0x89, 0xB5, 0x6C, 0x27, 0x29,
-+		0x6F, 0x09, 0xFB, 0x93, 0xA0, 0x34, 0xDF, 0x32,
-+		0xE9, 0x7C, 0x6F, 0xF0, 0x99, 0x8C, 0xFD, 0x8E,
-+		0x6F, 0x42, 0xDD, 0xA5, 0x8A, 0xCD, 0x1F, 0xA9,
-+		0x79, 0x86, 0xF1, 0x44, 0xF3, 0xD1, 0x54, 0xD6,
-+		0x76, 0x50, 0x17, 0x5E, 0x68, 0x54, 0xB3, 0xA9,
-+		0x52, 0x00, 0x3B, 0xC0, 0x68, 0x87, 0xB8, 0x45,
-+		0x5A, 0xC2, 0xB1, 0x9F, 0x7B, 0x2F, 0x76, 0x50,
-+		0x4E, 0xBC, 0x98, 0xEC, 0x94, 0x55, 0x71, 0xB0,
-+		0x78, 0x92, 0x15, 0x0D, 0xDC, 0x6A, 0x74, 0xCA,
-+		0x0F, 0xBC, 0xD3, 0x54, 0x97, 0xCE, 0x81, 0x53,
-+		0x4D, 0xAF, 0x94, 0x18, 0x84, 0x4B, 0x13, 0xAE,
-+		0xA3, 0x1F, 0x9D, 0x5A, 0x6B, 0x95, 0x57, 0xBB,
-+		0xDF, 0x61, 0x9E, 0xFD, 0x4E, 0x88, 0x7F, 0x2D,
-+		0x42, 0xB8, 0xDD, 0x8B, 0xC9, 0x87, 0xEA, 0xE1,
-+		0xBF, 0x89, 0xCA, 0xB8, 0x5E, 0xE2, 0x1E, 0x35,
-+		0x63, 0x05, 0xDF, 0x6C, 0x07, 0xA8, 0x83, 0x8E,
-+		0x3E, 0xF4, 0x1C, 0x59, 0x5D, 0xCC, 0xE4, 0x3D,
-+		0xAF, 0xC4, 0x91, 0x23, 0xEF, 0x4D, 0x8A, 0xBB,
-+		0xA9, 0x3D, 0x39, 0x05, 0xE4, 0x02, 0x8D, 0x7B,
-+		0xA9, 0x14, 0x84, 0xA2, 0x75, 0x96, 0xE0, 0x7B,
-+		0x4B, 0x6E, 0xD9, 0x92, 0xF0, 0x77, 0xB5, 0x24,
-+		0xD3, 0xDC, 0xFE, 0x7D, 0xDD, 0x55, 0x49, 0xBE,
-+		0x7C, 0xCE, 0x8D, 0xA0, 0x35, 0xCF, 0xA0, 0xB3,
-+		0xFB, 0x8F, 0x9E, 0x46, 0xF7, 0x32, 0xB2, 0xA8,
-+		0x6B, 0x46, 0x01, 0x65, 0xC0, 0x8F, 0x53, 0x13}
-+	E := []byte{0x01, 0x00, 0x01}
-+	d := []byte{
-+		0x41, 0x18, 0x8B, 0x20, 0xCF, 0xDB, 0xDB, 0xC2,
-+		0xCF, 0x1F, 0xFE, 0x75, 0x2D, 0xCB, 0xAA, 0x72,
-+		0x39, 0x06, 0x35, 0x2E, 0x26, 0x15, 0xD4, 0x9D,
-+		0xCE, 0x80, 0x59, 0x7F, 0xCF, 0x0A, 0x05, 0x40,
-+		0x3B, 0xEF, 0x00, 0xFA, 0x06, 0x51, 0x82, 0xF7,
-+		0x2D, 0xEC, 0xFB, 0x59, 0x6F, 0x4B, 0x0C, 0xE8,
-+		0xFF, 0x59, 0x70, 0xBA, 0xF0, 0x7A, 0x89, 0xA5,
-+		0x19, 0xEC, 0xC8, 0x16, 0xB2, 0xF4, 0xFF, 0xAC,
-+		0x50, 0x69, 0xAF, 0x1B, 0x06, 0xBF, 0xEF, 0x7B,
-+		0xF6, 0xBC, 0xD7, 0x9E, 0x4E, 0x81, 0xC8, 0xC5,
-+		0xA3, 0xA7, 0xD9, 0x13, 0x0D, 0xC3, 0xCF, 0xBA,
-+		0xDA, 0xE5, 0xF6, 0xD2, 0x88, 0xF9, 0xAE, 0xE3,
-+		0xF6, 0xFF, 0x92, 0xFA, 0xE0, 0xF8, 0x1A, 0xF5,
-+		0x97, 0xBE, 0xC9, 0x6A, 0xE9, 0xFA, 0xB9, 0x40,
-+		0x2C, 0xD5, 0xFE, 0x41, 0xF7, 0x05, 0xBE, 0xBD,
-+		0xB4, 0x7B, 0xB7, 0x36, 0xD3, 0xFE, 0x6C, 0x5A,
-+		0x51, 0xE0, 0xE2, 0x07, 0x32, 0xA9, 0x7B, 0x5E,
-+		0x46, 0xC1, 0xCB, 0xDB, 0x26, 0xD7, 0x48, 0x54,
-+		0xC6, 0xB6, 0x60, 0x4A, 0xED, 0x46, 0x37, 0x35,
-+		0xFF, 0x90, 0x76, 0x04, 0x65, 0x57, 0xCA, 0xF9,
-+		0x49, 0xBF, 0x44, 0x88, 0x95, 0xC2, 0x04, 0x32,
-+		0xC1, 0xE0, 0x9C, 0x01, 0x4E, 0xA7, 0x56, 0x60,
-+		0x43, 0x4F, 0x1A, 0x0F, 0x3B, 0xE2, 0x94, 0xBA,
-+		0xBC, 0x5D, 0x53, 0x0E, 0x6A, 0x10, 0x21, 0x3F,
-+		0x53, 0xB6, 0x03, 0x75, 0xFC, 0x84, 0xA7, 0x57,
-+		0x3F, 0x2A, 0xF1, 0x21, 0x55, 0x84, 0xF5, 0xB4,
-+		0xBD, 0xA6, 0xD4, 0xE8, 0xF9, 0xE1, 0x7A, 0x78,
-+		0xD9, 0x7E, 0x77, 0xB8, 0x6D, 0xA4, 0xA1, 0x84,
-+		0x64, 0x75, 0x31, 0x8A, 0x7A, 0x10, 0xA5, 0x61,
-+		0x01, 0x4E, 0xFF, 0xA2, 0x3A, 0x81, 0xEC, 0x56,
-+		0xE9, 0xE4, 0x10, 0x9D, 0xEF, 0x8C, 0xB3, 0xF7,
-+		0x97, 0x22, 0x3F, 0x7D, 0x8D, 0x0D, 0x43, 0x51}
-+	p := []byte{
-+		0xDD, 0x10, 0x57, 0x02, 0x38, 0x2F, 0x23, 0x2B,
-+		0x36, 0x81, 0xF5, 0x37, 0x91, 0xE2, 0x26, 0x17,
-+		0xC7, 0xBF, 0x4E, 0x9A, 0xCB, 0x81, 0xED, 0x48,
-+		0xDA, 0xF6, 0xD6, 0x99, 0x5D, 0xA3, 0xEA, 0xB6,
-+		0x42, 0x83, 0x9A, 0xFF, 0x01, 0x2D, 0x2E, 0xA6,
-+		0x28, 0xB9, 0x0A, 0xF2, 0x79, 0xFD, 0x3E, 0x6F,
-+		0x7C, 0x93, 0xCD, 0x80, 0xF0, 0x72, 0xF0, 0x1F,
-+		0xF2, 0x44, 0x3B, 0x3E, 0xE8, 0xF2, 0x4E, 0xD4,
-+		0x69, 0xA7, 0x96, 0x13, 0xA4, 0x1B, 0xD2, 0x40,
-+		0x20, 0xF9, 0x2F, 0xD1, 0x10, 0x59, 0xBD, 0x1D,
-+		0x0F, 0x30, 0x1B, 0x5B, 0xA7, 0xA9, 0xD3, 0x63,
-+		0x7C, 0xA8, 0xD6, 0x5C, 0x1A, 0x98, 0x15, 0x41,
-+		0x7D, 0x8E, 0xAB, 0x73, 0x4B, 0x0B, 0x4F, 0x3A,
-+		0x2C, 0x66, 0x1D, 0x9A, 0x1A, 0x82, 0xF3, 0xAC,
-+		0x73, 0x4C, 0x40, 0x53, 0x06, 0x69, 0xAB, 0x8E,
-+		0x47, 0x30, 0x45, 0xA5, 0x8E, 0x65, 0x53, 0x9D}
-+	q := []byte{
-+		0xCC, 0xF1, 0xE5, 0xBB, 0x90, 0xC8, 0xE9, 0x78,
-+		0x1E, 0xA7, 0x5B, 0xEB, 0xF1, 0x0B, 0xC2, 0x52,
-+		0xE1, 0x1E, 0xB0, 0x23, 0xA0, 0x26, 0x0F, 0x18,
-+		0x87, 0x55, 0x2A, 0x56, 0x86, 0x3F, 0x4A, 0x64,
-+		0x21, 0xE8, 0xC6, 0x00, 0xBF, 0x52, 0x3D, 0x6C,
-+		0xB1, 0xB0, 0xAD, 0xBD, 0xD6, 0x5B, 0xFE, 0xE4,
-+		0xA8, 0x8A, 0x03, 0x7E, 0x3D, 0x1A, 0x41, 0x5E,
-+		0x5B, 0xB9, 0x56, 0x48, 0xDA, 0x5A, 0x0C, 0xA2,
-+		0x6B, 0x54, 0xF4, 0xA6, 0x39, 0x48, 0x52, 0x2C,
-+		0x3D, 0x5F, 0x89, 0xB9, 0x4A, 0x72, 0xEF, 0xFF,
-+		0x95, 0x13, 0x4D, 0x59, 0x40, 0xCE, 0x45, 0x75,
-+		0x8F, 0x30, 0x89, 0x80, 0x90, 0x89, 0x56, 0x58,
-+		0x8E, 0xEF, 0x57, 0x5B, 0x3E, 0x4B, 0xC4, 0xC3,
-+		0x68, 0xCF, 0xE8, 0x13, 0xEE, 0x9C, 0x25, 0x2C,
-+		0x2B, 0x02, 0xE0, 0xDF, 0x91, 0xF1, 0xAA, 0x01,
-+		0x93, 0x8D, 0x38, 0x68, 0x5D, 0x60, 0xBA, 0x6F}
-+	qInv := []byte{
-+		0x0A, 0x81, 0xD8, 0xA6, 0x18, 0x31, 0x4A, 0x80,
-+		0x3A, 0xF6, 0x1C, 0x06, 0x71, 0x1F, 0x2C, 0x39,
-+		0xB2, 0x66, 0xFF, 0x41, 0x4D, 0x53, 0x47, 0x6D,
-+		0x1D, 0xA5, 0x2A, 0x43, 0x18, 0xAA, 0xFE, 0x4B,
-+		0x96, 0xF0, 0xDA, 0x07, 0x15, 0x5F, 0x8A, 0x51,
-+		0x34, 0xDA, 0xB8, 0x8E, 0xE2, 0x9E, 0x81, 0x68,
-+		0x07, 0x6F, 0xCD, 0x78, 0xCA, 0x79, 0x1A, 0xC6,
-+		0x34, 0x42, 0xA8, 0x1C, 0xD0, 0x69, 0x39, 0x27,
-+		0xD8, 0x08, 0xE3, 0x35, 0xE8, 0xD8, 0xCB, 0xF2,
-+		0x12, 0x19, 0x07, 0x50, 0x9A, 0x57, 0x75, 0x9B,
-+		0x4F, 0x9A, 0x18, 0xFA, 0x3A, 0x7B, 0x33, 0x37,
-+		0x79, 0xED, 0xDE, 0x7A, 0x45, 0x93, 0x84, 0xF8,
-+		0x44, 0x4A, 0xDA, 0xEC, 0xFF, 0xEC, 0x95, 0xFD,
-+		0x55, 0x2B, 0x0C, 0xFC, 0xB6, 0xC7, 0xF6, 0x92,
-+		0x62, 0x6D, 0xDE, 0x1E, 0xF2, 0x68, 0xA4, 0x0D,
-+		0x2F, 0x67, 0xB5, 0xC8, 0xAA, 0x38, 0x7F, 0xF7}
-+	dP := []byte{
-+		0x09, 0xED, 0x54, 0xEA, 0xED, 0x98, 0xF8, 0x4C,
-+		0x55, 0x7B, 0x4A, 0x86, 0xBF, 0x4F, 0x57, 0x84,
-+		0x93, 0xDC, 0xBC, 0x6B, 0xE9, 0x1D, 0xA1, 0x89,
-+		0x37, 0x04, 0x04, 0xA9, 0x08, 0x72, 0x76, 0xF4,
-+		0xCE, 0x51, 0xD8, 0xA1, 0x00, 0xED, 0x85, 0x7D,
-+		0xC2, 0xB0, 0x64, 0x94, 0x74, 0xF3, 0xF1, 0x5C,
-+		0xD2, 0x4C, 0x54, 0xDB, 0x28, 0x71, 0x10, 0xE5,
-+		0x6E, 0x5C, 0xB0, 0x08, 0x68, 0x2F, 0x91, 0x68,
-+		0xAA, 0x81, 0xF3, 0x14, 0x58, 0xB7, 0x43, 0x1E,
-+		0xCC, 0x1C, 0x44, 0x90, 0x6F, 0xDA, 0x87, 0xCA,
-+		0x89, 0x47, 0x10, 0xC3, 0x71, 0xE9, 0x07, 0x6C,
-+		0x1D, 0x49, 0xFB, 0xAE, 0x51, 0x27, 0x69, 0x34,
-+		0xF2, 0xAD, 0x78, 0x77, 0x89, 0xF4, 0x2D, 0x0F,
-+		0xA0, 0xB4, 0xC9, 0x39, 0x85, 0x5D, 0x42, 0x12,
-+		0x09, 0x6F, 0x70, 0x28, 0x0A, 0x4E, 0xAE, 0x7C,
-+		0x8A, 0x27, 0xD9, 0xC8, 0xD0, 0x77, 0x2E, 0x65}
-+	dQ := []byte{
-+		0x8C, 0xB6, 0x85, 0x7A, 0x7B, 0xD5, 0x46, 0x5F,
-+		0x80, 0x04, 0x7E, 0x9B, 0x87, 0xBC, 0x00, 0x27,
-+		0x31, 0x84, 0x05, 0x81, 0xE0, 0x62, 0x61, 0x39,
-+		0x01, 0x2A, 0x5B, 0x50, 0x5F, 0x0A, 0x33, 0x84,
-+		0x7E, 0xB7, 0xB8, 0xC3, 0x28, 0x99, 0x49, 0xAD,
-+		0x48, 0x6F, 0x3B, 0x4B, 0x3D, 0x53, 0x9A, 0xB5,
-+		0xDA, 0x76, 0x30, 0x21, 0xCB, 0xC8, 0x2C, 0x1B,
-+		0xA2, 0x34, 0xA5, 0x66, 0x8D, 0xED, 0x08, 0x01,
-+		0xB8, 0x59, 0xF3, 0x43, 0xF1, 0xCE, 0x93, 0x04,
-+		0xE6, 0xFA, 0xA2, 0xB0, 0x02, 0xCA, 0xD9, 0xB7,
-+		0x8C, 0xDE, 0x5C, 0xDC, 0x2C, 0x1F, 0xB4, 0x17,
-+		0x1C, 0x42, 0x42, 0x16, 0x70, 0xA6, 0xAB, 0x0F,
-+		0x50, 0xCC, 0x4A, 0x19, 0x4E, 0xB3, 0x6D, 0x1C,
-+		0x91, 0xE9, 0x35, 0xBA, 0x01, 0xB9, 0x59, 0xD8,
-+		0x72, 0x8B, 0x9E, 0x64, 0x42, 0x6B, 0x3F, 0xC3,
-+		0xA7, 0x50, 0x6D, 0xEB, 0x52, 0x39, 0xA8, 0xA7}
-+
-+	// Convert []byte to BigInt using BN_bin2bn and bnToBig
-+	bytesToBigInt := func(b []byte) BigInt {
-+		bn, err := ossl.BN_bin2bn(b, nil)
-+		if err != nil {
-+			panic(err)
-+		}
-+		defer ossl.BN_free(bn)
-+		return bnToBig(bn)
-+	}
-+
-+	priv, err := NewPrivateKeyRSA(
-+		bytesToBigInt(N),
-+		bytesToBigInt(E),
-+		bytesToBigInt(d),
-+		bytesToBigInt(p),
-+		bytesToBigInt(q),
-+		bytesToBigInt(dP),
-+		bytesToBigInt(dQ),
-+		bytesToBigInt(qInv),
-+	)
-+	if err != nil {
-+		panic("failed to create test RSA private key: " + err.Error())
-+	}
-+	// Prevent finalization to avoid freeing OpenSSL objects.
-+	runtime.SetFinalizer(priv, nil)
-+	return priv._pkey
-+})
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-new file mode 100644
-index 00000000000000..1f7dcb7cf38f1f
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/tls1prf.go
-@@ -0,0 +1,156 @@
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/golang-fips/openssl/v2/internal/ossl"
-+)
-+
-+func SupportsTLS1PRF() bool {
-+	switch major() {
-+	case 1:
-+		return minor() >= 1
-+	case 3, 4:
-+		_, err := fetchTLS1PRF3()
-+		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
-+	}
-+}
-+
-+// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
-+// else it implements the TLS 1.2 pseudo-random function.
-+// The pseudo-random number will be written to result and will be of length len(result).
-+func TLS1PRF(result, secret, label, seed []byte, fh func() hash.Hash) error {
-+	var md ossl.EVP_MD_PTR
-+	if fh == nil {
-+		// TLS 1.0/1.1 PRF doesn't allow to specify the hash function,
-+		// it always uses MD5SHA1. If h is nil, then assume
-+		// that the caller wants to use TLS 1.0/1.1 PRF.
-+		// OpenSSL detects this case by checking if the hash
-+		// function is MD5SHA1.
-+		md = loadHash(crypto.MD5SHA1, false).md
-+	} else {
-+		h, err := hashFuncHash(fh)
-+		if err != nil {
-+			return err
-+		}
-+		md = hashToMD(h)
-+	}
-+	if md == nil {
-+		return errors.New("unsupported hash function")
-+	}
-+
-+	switch major() {
-+	case 1:
-+		return tls1PRF1(result, secret, label, seed, md)
-+	case 3, 4:
-+		return tls1PRF3(result, secret, label, seed, md)
-+	default:
-+		return errUnsupportedVersion()
-+	}
-+}
-+
-+// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
-+func tls1PRF1(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
-+	checkMajorVersion(1)
-+
-+	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_TLS1_PRF, nil)
-+	if err != nil {
-+		return err
-+	}
-+	defer func() {
-+		ossl.EVP_PKEY_CTX_free(ctx)
-+	}()
-+
-+	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
-+		ossl.EVP_PKEY_OP_DERIVE,
-+		ossl.EVP_PKEY_CTRL_TLS_MD,
-+		0, unsafe.Pointer(md)); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
-+		ossl.EVP_PKEY_OP_DERIVE,
-+		ossl.EVP_PKEY_CTRL_TLS_SECRET,
-+		int32(len(secret)), unsafe.Pointer(base(secret))); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
-+		ossl.EVP_PKEY_OP_DERIVE,
-+		ossl.EVP_PKEY_CTRL_TLS_SEED,
-+		int32(len(label)), unsafe.Pointer(base(label))); err != nil {
-+		return err
-+	}
-+	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
-+		ossl.EVP_PKEY_OP_DERIVE,
-+		ossl.EVP_PKEY_CTRL_TLS_SEED,
-+		int32(len(seed)), unsafe.Pointer(base(seed))); err != nil {
-+		return err
-+	}
-+	outLen := len(result)
-+	if _, err := ossl.EVP_PKEY_derive(ctx, result, &outLen); err != nil {
-+		return err
-+	}
-+	// The Go standard library expects TLS1PRF to return the requested number of bytes,
-+	// fail if it doesn't. While there is no known situation where this will happen,
-+	// EVP_PKEY_derive handles multiple algorithms and there could be a subtle mismatch
-+	// after more code changes in the future.
-+	if outLen != len(result) {
-+		return errors.New("tls1-prf: derived less bytes than requested")
-+	}
-+	return nil
-+}
-+
-+// fetchTLS1PRF3 fetches the TLS1-PRF KDF algorithm.
-+// It is safe to call this function concurrently.
-+// The returned EVP_KDF_PTR shouldn't be freed.
-+var fetchTLS1PRF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS1_PRF.ptr(), nil)
-+	if err != nil {
-+		return nil, err
-+	}
-+	return kdf, nil
-+})
-+
-+// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
-+func tls1PRF3(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
-+	checkMajorVersion(3, 4)
-+
-+	kdf, err := fetchTLS1PRF3()
-+	if err != nil {
-+		return err
-+	}
-+	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.EVP_KDF_CTX_free(ctx)
-+
-+	bld := newParamBuilder()
-+	defer bld.finalize()
-+	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
-+	bld.addOctetString(_OSSL_KDF_PARAM_SEED, seed)
-+	params, err := bld.build()
-+	if err != nil {
-+		return err
-+	}
-+	defer ossl.OSSL_PARAM_free(params)
-+
-+	if _, err := ossl.EVP_KDF_derive(ctx, result, params); err != nil {
-+		return err
-+	}
-+	return nil
-+}
-diff --git a/src/vendor/github.com/golang-fips/openssl/v2/zaes.go b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
-new file mode 100644
-index 00000000000000..4d945290e3bdff
---- /dev/null
-+++ b/src/vendor/github.com/golang-fips/openssl/v2/zaes.go
-@@ -0,0 +1,86 @@
-+// Code generated by cmd/genaesmodes. DO NOT EDIT.
-+
-+//go:build !cmd_go_bootstrap
-+
-+package openssl
-+
-+import "crypto/cipher"
-+
-+type cipherWithCBC struct {
-+	aesCipher
-+}
-+
-+type cipherWithCTR struct {
-+	aesCipher
-+}
-+
-+type cipherWithCBC_CTR struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithCTR
-+}
-+
-+type cipherWithGCM struct {
-+	aesCipher
-+}
-+
-+type cipherWithCBC_GCM struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithGCM
-+}
-+
-+type cipherWithCTR_GCM struct {
-+	aesCipher
-+	cipherWithCTR
-+	cipherWithGCM
-+}
-+
-+type cipherWithCBC_CTR_GCM struct {
-+	aesCipher
-+	cipherWithCBC
-+	cipherWithCTR
-+	cipherWithGCM
-+}
-+
-+func newAESBlock(c *evpCipher, kind cipherKind) cipher.Block {
-+	aes := aesCipher{c}
-+	var block cipher.Block
-+	supportsCBC := loadCipher(kind, cipherModeCBC) != nil
-+	supportsCTR := loadCipher(kind, cipherModeCTR) != nil
-+	supportsGCM := loadCipher(kind, cipherModeGCM) != nil
-+	switch {
-+	case !supportsCBC && !supportsCTR && !supportsGCM:
-+		block = aes
-+	case supportsCBC && !supportsCTR && !supportsGCM:
-+		block = cipherWithCBC{aes}
-+	case !supportsCBC && supportsCTR && !supportsGCM:
-+		block = cipherWithCTR{aes}
-+	case supportsCBC && supportsCTR && !supportsGCM:
-+		block = cipherWithCBC_CTR{aes,
-+			cipherWithCBC{aes},
-+			cipherWithCTR{aes},
-+		}
-+	case !supportsCBC && !supportsCTR && supportsGCM:
-+		block = cipherWithGCM{aes}
-+	case supportsCBC && !supportsCTR && supportsGCM:
-+		block = cipherWithCBC_GCM{aes,
-+			cipherWithCBC{aes},
-+			cipherWithGCM{aes},
-+		}
-+	case !supportsCBC && supportsCTR && supportsGCM:
-+		block = cipherWithCTR_GCM{aes,
-+			cipherWithCTR{aes},
-+			cipherWithGCM{aes},
-+		}
-+	case supportsCBC && supportsCTR && supportsGCM:
-+		block = cipherWithCBC_CTR_GCM{aes,
-+			cipherWithCBC{aes},
-+			cipherWithCTR{aes},
-+			cipherWithGCM{aes},
-+		}
-+	default:
-+		panic("unreachable")
-+	}
-+	return block
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
-new file mode 100644
-index 00000000000000..9e841e7a26e4eb
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/LICENSE
-@@ -0,0 +1,21 @@
-+    MIT License
-+
-+    Copyright (c) Microsoft Corporation.
-+
-+    Permission is hereby granted, free of charge, to any person obtaining a copy
-+    of this software and associated documentation files (the "Software"), to deal
-+    in the Software without restriction, including without limitation the rights
-+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-+    copies of the Software, and to permit persons to whom the Software is
-+    furnished to do so, subject to the following conditions:
-+
-+    The above copyright notice and this permission notice shall be included in all
-+    copies or substantial portions of the Software.
-+
-+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-+    SOFTWARE
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
-new file mode 100644
-index 00000000000000..73891afeab93d7
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/bbig/big.go
-@@ -0,0 +1,31 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+package bbig
-+
-+import (
-+	"math/big"
-+
-+	"github.com/microsoft/go-crypto-darwin/xcrypto"
-+)
-+
-+func Enc(b *big.Int) xcrypto.BigInt {
-+	if b == nil {
-+		return nil
-+	}
-+	x := b.Bytes()
-+	if len(x) == 0 {
-+		return xcrypto.BigInt{}
-+	}
-+	return x
-+}
-+
-+func Dec(b xcrypto.BigInt) *big.Int {
-+	if b == nil {
-+		return nil
-+	}
-+	if len(b) == 0 {
-+		return new(big.Int)
-+	}
-+	return new(big.Int).SetBytes(b)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
-new file mode 100644
-index 00000000000000..e1b9ee1d005406
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/commoncrypto.go
-@@ -0,0 +1,9 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Package commoncrypto provides a Go interface to the CommonCrypto API
-+package commoncrypto
-+
-+//go:generate go run ../../cmd/checkheader shims.h
-+//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -package commoncrypto --noerrors shims.h
-+//go:generate go run ../../cmd/mkcgo -out zcommoncrypto.go -nocgo -package commoncrypto --noerrors shims.h
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
-new file mode 100644
-index 00000000000000..de1f9bc059aa43
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/shims.h
-@@ -0,0 +1,72 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings
-+// for the CommonCrypto C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zcommoncrypto.h" instead.
-+
-+#ifndef _GO_COMMONCRYPTO_SHIMS_H // only include this header once
-+#define _GO_COMMONCRYPTO_SHIMS_H
-+
-+#include <stdint.h> // uint64_t
-+#include <stdlib.h> // size_t
-+
-+// The following includes are used by the checkheader tool.
-+// #include <CommonCrypto/CommonCrypto.h>
-+
-+typedef void *CCCryptorRef;
-+typedef uint32_t CCModeOptions;
-+
-+typedef enum {
-+  kCCEncrypt = 0,
-+  kCCDecrypt = 1,
-+} CCOperation;
-+
-+typedef enum {
-+  kCCModeCBC = 2,
-+} CCMode;
-+
-+typedef enum {
-+  KCCOptionECBMode = 2,
-+} CCOptions;
-+
-+typedef enum {
-+  kCCSuccess = 0,
-+} CCCryptorStatus;
-+
-+typedef enum {
-+  kCCPBKDF2 = 2,
-+} CCPBKDFAlgorithm;
-+
-+typedef enum {
-+  kCCPRFHmacAlgSHA1 = 1,
-+  kCCPRFHmacAlgSHA256 = 3,
-+  kCCPRFHmacAlgSHA384 = 4,
-+  kCCPRFHmacAlgSHA512 = 5,
-+} CCPseudoRandomAlgorithm;
-+
-+enum {
-+  kCCBlockSizeAES128 = 16,
-+  kCCBlockSizeDES = 8,
-+};
-+
-+typedef enum {
-+  ccNoPadding = 0,
-+} CCPadding;
-+
-+typedef enum {
-+  kCCAlgorithmAES = 0,
-+  kCCAlgorithmDES = 1,
-+  kCCAlgorithm3DES = 2,
-+  kCCAlgorithmRC4 = 4,
-+} CCAlgorithm;
-+
-+CCCryptorStatus CCCryptorCreate(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(key, keyLength), slice(iv)));
-+CCCryptorStatus CCCryptorRelease(CCCryptorRef cryptorRef) __attribute__((framework(System, B)));
-+CCCryptorStatus CCCryptorUpdate(CCCryptorRef cryptorRef, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
-+CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm algorithm, const char *password, size_t passwordLen, const uint8_t *salt, size_t saltLen, CCPseudoRandomAlgorithm prf, unsigned rounds, uint8_t *derivedKey, size_t derivedKeyLen) __attribute__((framework(System, B), slice(password, passwordLen), slice(salt, saltLen), slice(derivedKey, derivedKeyLen)));
-+CCCryptorStatus CCCrypt(CCOperation op, CCAlgorithm alg, CCOptions options, const void *key, size_t keyLength, const void *iv, const void *dataIn, size_t dataInLength, void *dataOut, size_t dataOutAvailable, size_t *dataOutMoved) __attribute__((noescape, nocallback, framework(System, B), slice(key, keyLength), slice(iv), slice(dataIn, dataInLength), slice(dataOut, dataOutAvailable)));
-+CCCryptorStatus CCCryptorCreateWithMode(CCOperation op, CCMode mode, CCAlgorithm alg, CCPadding padding, const void *iv, const void *key, size_t keyLength, const void *tweak, size_t tweakLength, int numRounds, CCModeOptions options, CCCryptorRef *cryptorRef) __attribute__((framework(System, B), slice(iv), slice(key, keyLength), slice(tweak, tweakLength)));
-+CCCryptorStatus CCCryptorReset(CCCryptorRef cryptorRef, const void *iv) __attribute__((framework(System, B), slice(iv)));
-+
-+#endif // _GO_COMMONCRYPTO_SHIMS_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
-new file mode 100644
-index 00000000000000..fd322bcd1b885c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/syscall_nocgo.go
-@@ -0,0 +1,15 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build !cgo
-+
-+package commoncrypto
-+
-+import (
-+	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
-+)
-+
-+//go:nosplit
-+func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return xsyscall.SyscallN(errType, fn, args...)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
-new file mode 100644
-index 00000000000000..24f6e3d3f50dc1
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.c
-@@ -0,0 +1,47 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+#include <stddef.h>
-+#include <stdlib.h>
-+#include <stdint.h>
-+#include <stdio.h>
-+#include "zcommoncrypto.h"
-+
-+CCCryptorStatus CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
-+CCCryptorStatus CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
-+CCCryptorStatus CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
-+CCCryptorStatus CCCryptorRelease(CCCryptorRef);
-+CCCryptorStatus CCCryptorReset(CCCryptorRef, const unsigned char*);
-+CCCryptorStatus CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
-+CCCryptorStatus CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
-+
-+CCCryptorStatus _mkcgo_CCCrypt(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, const unsigned char* _arg6, size_t _arg7, unsigned char* _arg8, size_t _arg9, size_t* _arg10) {
-+	return CCCrypt(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
-+}
-+
-+CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation _arg0, CCAlgorithm _arg1, CCOptions _arg2, const unsigned char* _arg3, size_t _arg4, const unsigned char* _arg5, CCCryptorRef* _arg6) {
-+	return CCCryptorCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
-+}
-+
-+CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation _arg0, CCMode _arg1, CCAlgorithm _arg2, CCPadding _arg3, const unsigned char* _arg4, const unsigned char* _arg5, size_t _arg6, const unsigned char* _arg7, size_t _arg8, int _arg9, CCModeOptions _arg10, CCCryptorRef* _arg11) {
-+	return CCCryptorCreateWithMode(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
-+}
-+
-+CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef _arg0) {
-+	return CCCryptorRelease(_arg0);
-+}
-+
-+CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef _arg0, const unsigned char* _arg1) {
-+	return CCCryptorReset(_arg0, _arg1);
-+}
-+
-+CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef _arg0, const unsigned char* _arg1, size_t _arg2, unsigned char* _arg3, size_t _arg4, size_t* _arg5) {
-+	return CCCryptorUpdate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
-+}
-+
-+CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm _arg0, const char* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, CCPseudoRandomAlgorithm _arg5, unsigned _arg6, uint8_t* _arg7, size_t _arg8) {
-+	return CCKeyDerivationPBKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
-+}
-+
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
-new file mode 100644
-index 00000000000000..0a25e0621df627
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.go
-@@ -0,0 +1,50 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+package commoncrypto
-+
-+const (
-+	KCCEncrypt CCOperation = 0
-+	KCCDecrypt CCOperation = 1
-+)
-+
-+const (
-+	KCCModeCBC CCMode = 2
-+)
-+
-+const (
-+	KCCOptionECBMode CCOptions = 2
-+)
-+
-+const (
-+	KCCSuccess CCCryptorStatus = 0
-+)
-+
-+const (
-+	KCCPBKDF2 CCPBKDFAlgorithm = 2
-+)
-+
-+const (
-+	KCCPRFHmacAlgSHA1   CCPseudoRandomAlgorithm = 1
-+	KCCPRFHmacAlgSHA256 CCPseudoRandomAlgorithm = 3
-+	KCCPRFHmacAlgSHA384 CCPseudoRandomAlgorithm = 4
-+	KCCPRFHmacAlgSHA512 CCPseudoRandomAlgorithm = 5
-+)
-+
-+const (
-+	KCCBlockSizeAES128 = 16
-+	KCCBlockSizeDES    = 8
-+)
-+
-+const (
-+	CcNoPadding CCPadding = 0
-+)
-+
-+const (
-+	KCCAlgorithmAES  CCAlgorithm = 0
-+	KCCAlgorithmDES  CCAlgorithm = 1
-+	KCCAlgorithm3DES CCAlgorithm = 2
-+	KCCAlgorithmRC4  CCAlgorithm = 4
-+)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
-new file mode 100644
-index 00000000000000..016e73758ac4e0
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.h
-@@ -0,0 +1,69 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+#ifndef MKCGO_H // only include this header once
-+#define MKCGO_H
-+
-+#include <stdint.h>
-+#include <stdlib.h>
-+
-+typedef void* CCCryptorRef;
-+typedef uint32_t CCModeOptions;
-+
-+typedef enum {
-+	kCCEncrypt = 0,
-+	kCCDecrypt = 1,
-+} CCOperation;
-+
-+typedef enum {
-+	kCCModeCBC = 2,
-+} CCMode;
-+
-+typedef enum {
-+	KCCOptionECBMode = 2,
-+} CCOptions;
-+
-+typedef enum {
-+	kCCSuccess = 0,
-+} CCCryptorStatus;
-+
-+typedef enum {
-+	kCCPBKDF2 = 2,
-+} CCPBKDFAlgorithm;
-+
-+typedef enum {
-+	kCCPRFHmacAlgSHA1 = 1,
-+	kCCPRFHmacAlgSHA256 = 3,
-+	kCCPRFHmacAlgSHA384 = 4,
-+	kCCPRFHmacAlgSHA512 = 5,
-+} CCPseudoRandomAlgorithm;
-+
-+enum {
-+	kCCBlockSizeAES128 = 16,
-+	kCCBlockSizeDES = 8,
-+};
-+
-+typedef enum {
-+	ccNoPadding = 0,
-+} CCPadding;
-+
-+typedef enum {
-+	kCCAlgorithmAES = 0,
-+	kCCAlgorithmDES = 1,
-+	kCCAlgorithm3DES = 2,
-+	kCCAlgorithmRC4 = 4,
-+} CCAlgorithm;
-+
-+uintptr_t mkcgo_err_retrieve();
-+
-+CCCryptorStatus _mkcgo_CCCrypt(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
-+CCCryptorStatus _mkcgo_CCCryptorCreate(CCOperation, CCAlgorithm, CCOptions, const unsigned char*, size_t, const unsigned char*, CCCryptorRef*);
-+CCCryptorStatus _mkcgo_CCCryptorCreateWithMode(CCOperation, CCMode, CCAlgorithm, CCPadding, const unsigned char*, const unsigned char*, size_t, const unsigned char*, size_t, int, CCModeOptions, CCCryptorRef*);
-+CCCryptorStatus _mkcgo_CCCryptorRelease(CCCryptorRef);
-+CCCryptorStatus _mkcgo_CCCryptorReset(CCCryptorRef, const unsigned char*);
-+CCCryptorStatus _mkcgo_CCCryptorUpdate(CCCryptorRef, const unsigned char*, size_t, unsigned char*, size_t, size_t*);
-+CCCryptorStatus _mkcgo_CCKeyDerivationPBKDF(CCPBKDFAlgorithm, const char*, size_t, const uint8_t*, size_t, CCPseudoRandomAlgorithm, unsigned, uint8_t*, size_t);
-+
-+#endif // MKCGO_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
-new file mode 100644
-index 00000000000000..a722bc56d9dab4
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto.s
-@@ -0,0 +1,76 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+#ifndef GOARCH_amd64
-+#ifndef GOARCH_arm64
-+#ifndef GOARCH_riscv64
-+#ifndef GOARCH_loong64
-+#ifndef GOARCH_mips64
-+#ifndef GOARCH_mips64le
-+#ifndef GOARCH_ppc64
-+#ifndef GOARCH_ppc64le
-+#ifndef GOARCH_s390x
-+#ifndef GOARCH_sparc64
-+#define _GOPTRSIZE 4
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+
-+#ifndef _GOPTRSIZE
-+#define _GOPTRSIZE 8
-+#endif
-+TEXT _mkcgo_CCCrypt_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCrypt(SB)
-+
-+GLOBL ·_mkcgo_CCCrypt_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCrypt_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCrypt_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorCreate_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCryptorCreate(SB)
-+
-+GLOBL ·_mkcgo_CCCryptorCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCryptorCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorCreateWithMode_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCryptorCreateWithMode(SB)
-+
-+GLOBL ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCryptorCreateWithMode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorCreateWithMode_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorRelease_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCryptorRelease(SB)
-+
-+GLOBL ·_mkcgo_CCCryptorRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCryptorRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorRelease_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorReset_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCryptorReset(SB)
-+
-+GLOBL ·_mkcgo_CCCryptorReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCryptorReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorReset_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCCryptorUpdate_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCCryptorUpdate(SB)
-+
-+GLOBL ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCCryptorUpdate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCCryptorUpdate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CCKeyDerivationPBKDF(SB)
-+
-+GLOBL ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CCKeyDerivationPBKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CCKeyDerivationPBKDF_trampoline<>(SB)
-+
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
-new file mode 100644
-index 00000000000000..a774ad9a32ae86
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_cgo.go
-@@ -0,0 +1,64 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+package commoncrypto
-+
-+/*
-+#cgo CFLAGS: -Wno-attributes
-+#cgo darwin LDFLAGS: -framework System
-+
-+#include "zcommoncrypto.h"
-+#cgo noescape _mkcgo_CCCrypt
-+#cgo nocallback _mkcgo_CCCrypt
-+#cgo noescape _mkcgo_CCCryptorUpdate
-+#cgo nocallback _mkcgo_CCCryptorUpdate
-+*/
-+import "C"
-+import "unsafe"
-+
-+type CCAlgorithm = C.CCAlgorithm
-+type CCCryptorRef = C.CCCryptorRef
-+type CCCryptorStatus = C.CCCryptorStatus
-+type CCMode = C.CCMode
-+type CCModeOptions = C.CCModeOptions
-+type CCOperation = C.CCOperation
-+type CCOptions = C.CCOptions
-+type CCPBKDFAlgorithm = C.CCPBKDFAlgorithm
-+type CCPadding = C.CCPadding
-+type CCPseudoRandomAlgorithm = C.CCPseudoRandomAlgorithm
-+
-+//go:nosplit
-+func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
-+	x := uintptr(unsafe.Pointer(p))
-+	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
-+}
-+
-+func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
-+	return C._mkcgo_CCCrypt(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
-+}
-+
-+func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
-+	return C._mkcgo_CCCryptorCreate(op, alg, options, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), cryptorRef)
-+}
-+
-+func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
-+	return C._mkcgo_CCCryptorCreateWithMode(op, mode, alg, padding, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tweak))), C.size_t(len(tweak)), C.int(numRounds), options, cryptorRef)
-+}
-+
-+func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
-+	return C._mkcgo_CCCryptorRelease(cryptorRef)
-+}
-+
-+func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
-+	return C._mkcgo_CCCryptorReset(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(iv))))
-+}
-+
-+func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
-+	return C._mkcgo_CCCryptorUpdate(cryptorRef, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataIn))), C.size_t(len(dataIn)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(dataOut))), C.size_t(len(dataOut)), (*C.size_t)(unsafe.Pointer(dataOutMoved)))
-+}
-+
-+func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
-+	return C._mkcgo_CCKeyDerivationPBKDF(algorithm, (*C.char)(unsafe.Pointer(unsafe.SliceData(password))), C.size_t(len(password)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), prf, C.uint(rounds), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(derivedKey))), C.size_t(len(derivedKey)))
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
-new file mode 100644
-index 00000000000000..b17312278da948
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto/zcommoncrypto_nocgo.go
-@@ -0,0 +1,102 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo
-+
-+package commoncrypto
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+)
-+
-+var _ = runtime.GOOS
-+
-+var _mkcgoAlwaysFalseCommoncrypto bool
-+var _mkcgoEscapeSinkCommoncrypto unsafe.Pointer
-+
-+// mkcgoEscapePtrCommoncrypto forces p to escape to the heap.
-+// This implementation is also used in the standard library:
-+// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
-+func mkcgoEscapePtrCommoncrypto(p unsafe.Pointer) unsafe.Pointer {
-+	if _mkcgoAlwaysFalseCommoncrypto {
-+		_mkcgoEscapeSinkCommoncrypto = p
-+	}
-+	return p
-+}
-+
-+type CCCryptorRef unsafe.Pointer
-+type CCModeOptions = uint32
-+
-+type CCOperation int32
-+type CCMode int32
-+type CCOptions int32
-+type CCCryptorStatus int32
-+type CCPBKDFAlgorithm int32
-+type CCPseudoRandomAlgorithm int32
-+type CCPadding int32
-+type CCAlgorithm int32
-+
-+//go:cgo_import_dynamic _mkcgo_CCCrypt CCCrypt "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorCreate CCCryptorCreate "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorCreateWithMode CCCryptorCreateWithMode "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorRelease CCCryptorRelease "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorReset CCCryptorReset "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCCryptorUpdate CCCryptorUpdate "/System/Library/Frameworks/System.framework/Versions/B/System"
-+//go:cgo_import_dynamic _mkcgo_CCKeyDerivationPBKDF CCKeyDerivationPBKDF "/System/Library/Frameworks/System.framework/Versions/B/System"
-+
-+var _mkcgo_CCCrypt_trampoline_addr uintptr
-+
-+func CCCrypt(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCrypt_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCCryptorCreate_trampoline_addr uintptr
-+
-+func CCCryptorCreate(op CCOperation, alg CCAlgorithm, options CCOptions, key []byte, iv []byte, cryptorRef *CCCryptorRef) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorCreate_trampoline_addr, uintptr(op), uintptr(alg), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCCryptorCreateWithMode_trampoline_addr uintptr
-+
-+func CCCryptorCreateWithMode(op CCOperation, mode CCMode, alg CCAlgorithm, padding CCPadding, iv []byte, key []byte, tweak []byte, numRounds int32, options CCModeOptions, cryptorRef *CCCryptorRef) CCCryptorStatus {
-+	var r0 uintptr
-+	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
-+		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(unsafe.Pointer(unsafe.SliceData(iv))), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(tweak))), uintptr(len(tweak)), uintptr(numRounds)<<32|uintptr(options), uintptr(unsafe.Pointer(cryptorRef)))
-+	} else {
-+		r0, _ = syscallN(0, _mkcgo_CCCryptorCreateWithMode_trampoline_addr, uintptr(op), uintptr(mode), uintptr(alg), uintptr(padding), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(tweak)))), uintptr(len(tweak)), uintptr(numRounds), uintptr(options), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(cryptorRef))))
-+	}
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCCryptorRelease_trampoline_addr uintptr
-+
-+func CCCryptorRelease(cryptorRef CCCryptorRef) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorRelease_trampoline_addr, uintptr(cryptorRef))
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCCryptorReset_trampoline_addr uintptr
-+
-+func CCCryptorReset(cryptorRef CCCryptorRef, iv []byte) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorReset_trampoline_addr, uintptr(cryptorRef), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(iv)))))
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCCryptorUpdate_trampoline_addr uintptr
-+
-+func CCCryptorUpdate(cryptorRef CCCryptorRef, dataIn []byte, dataOut []byte, dataOutMoved *int) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCCryptorUpdate_trampoline_addr, uintptr(cryptorRef), uintptr(unsafe.Pointer(unsafe.SliceData(dataIn))), uintptr(len(dataIn)), uintptr(unsafe.Pointer(unsafe.SliceData(dataOut))), uintptr(len(dataOut)), uintptr(unsafe.Pointer(dataOutMoved)))
-+	return CCCryptorStatus(r0)
-+}
-+
-+var _mkcgo_CCKeyDerivationPBKDF_trampoline_addr uintptr
-+
-+func CCKeyDerivationPBKDF(algorithm CCPBKDFAlgorithm, password []byte, salt []uint8, prf CCPseudoRandomAlgorithm, rounds uint32, derivedKey []uint8) CCCryptorStatus {
-+	r0, _ := syscallN(0, _mkcgo_CCKeyDerivationPBKDF_trampoline_addr, uintptr(algorithm), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(password)))), uintptr(len(password)), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(prf), uintptr(rounds), uintptr(mkcgoEscapePtrCommoncrypto(unsafe.Pointer(unsafe.SliceData(derivedKey)))), uintptr(len(derivedKey)))
-+	return CCCryptorStatus(r0)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/CryptoKit_amd64.syso
 new file mode 100644
 index 0000000000000000000000000000000000000000..7d9406cdef877632dc046249d921ec782fe48d6b
 GIT binary patch
@@ -25937,8593 +5110,29276 @@ HcmV?d00001
 
 diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
 new file mode 100644
-index 00000000000000..b43df0b67d646b
+index 00000000000000..b43df0b67d646b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
+@@ -0,0 +1,8 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package cryptokit
++
++//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -package cryptokit --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -nocgo -package cryptokit --noerrors shims.h
++//go:generate go run ../../cmd/genswiftimports
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
+new file mode 100644
+index 00000000000000..e134697ed96de7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
+@@ -0,0 +1,10 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build cgo && darwin
++
++package cryptokit
++
++// #cgo CFLAGS: -Wno-deprecated-declarations
++// #cgo LDFLAGS: -framework Security -framework CoreFoundation -Wl,-undefined,dynamic_lookup
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
+new file mode 100644
+index 00000000000000..dc98c702b3d50f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
+@@ -0,0 +1,127 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header declares the C API for the CryptoKit Swift bindings.
++//
++// It serves two purposes:
++// 1. The mkcgo tool parses it to generate cgo and Go bindings.
++//    Run "go generate ." to regenerate them.
++// 2. Swift's @implementation @c validates that Swift function signatures
++//    match these declarations at compile time (via cryptokit.h wrapper).
++//
++// Type conventions:
++//   - Return types and length parameters use `long` (not int64_t) because
++//     Swift imports `long` as `Int` and `int64_t` as `Int64`. The Swift
++//     implementations use `Int`, so the header must use `long` to match.
++//     On macOS (LP64), both are 64-bit.
++//   - Buffer size parameters use `size_t` where the mkcgo `slice()` attribute
++//     pairs them with a pointer for Go slice generation.
++//   - Pointer nullability is declared via `#pragma clang assume_nonnull`
++//     (guarded by __clang__) so Swift sees non-optional pointer types.
++//     mkcgo parses this file as text and ignores the pragma.
++//   - Custom __attribute__ annotations (noescape, nocallback, static, slice)
++//     are mkcgo extensions. The cryptokit.h wrapper strips them for clang.
++//
++// Do not include this file directly; import "zcryptokit.h" instead.
++
++// mkcgo:static_imports
++
++#ifndef _GO_CRYPTOKIT_SHIMS_H // only include this header once
++#define _GO_CRYPTOKIT_SHIMS_H
++
++#include <stddef.h>
++#include <stdint.h>
++
++// When compiled by clang (e.g. via Swift bridging header), assume all
++// pointers are nonnull. mkcgo parses this file as text, not via clang,
++// so the #ifdef ensures mkcgo never sees these pragmas.
++#ifdef __clang__
++#pragma clang assume_nonnull begin
++#endif
++
++// AES GCM encryption and decryption
++long go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++long go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++
++// ChaChaPoly encryption and decryption
++long go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
++long go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++
++// Generates an Ed25519 keypair.
++// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
++void go_generateKeyEd25519(uint8_t *key) __attribute__((noescape, nocallback, static, slice(key)));
++long go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((noescape, nocallback, static, slice(key), slice(seed)));
++long go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((noescape, nocallback, static, slice(key), slice(pub)));
++long go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((noescape, nocallback, static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
++long go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((noescape, nocallback, static, slice(publicKey), slice(message, messageLength), slice(sig)));
++
++// HKDF key derivation
++long go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((noescape, nocallback, static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
++long go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((noescape, nocallback, static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++
++void *go_initHMAC(int32_t hashFunction, const uint8_t *key, long keyLength) __attribute__((noescape, nocallback, static, slice(key, keyLength)));
++void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((noescape, nocallback, static));
++void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
++void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++
++void go_MD5(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA1(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++long go_supportsSHA3() __attribute__((noescape, nocallback, static));
++void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++
++void *go_hashNew(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
++void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
++void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++long go_hashSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++long go_hashBlockSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
++void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++
++// ML-KEM (Post-quantum key encapsulation mechanism)
++long go_supportsMLKEM() __attribute__((noescape, nocallback, static));
++long go_generateKeyMLKEM768(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_generateKeyMLKEM1024(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++long go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
++long go_encapsulateMLKEM768(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++long go_encapsulateMLKEM1024(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
++long go_decapsulateMLKEM768(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++long go_decapsulateMLKEM1024(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++
++// ML-DSA (Post-quantum digital signature algorithm)
++long go_supportsMLDSA() __attribute__((noescape, nocallback, static));
++long go_generateKeyMLDSA65(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_generateKeyMLDSA87(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
++long go_derivePublicKeyMLDSA65(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
++long go_derivePublicKeyMLDSA87(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
++long go_signMLDSA65(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
++long go_signMLDSA87(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
++long go_verifyMLDSA65(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
++long go_verifyMLDSA87(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
++long go_validatePublicKeyMLDSA65(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++long go_validatePublicKeyMLDSA87(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++
++// ECDH
++long go_generateKeyECDH(int32_t curveID, uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++long go_publicKeyFromPrivateECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
++long go_ecdhSharedSecret(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, const uint8_t *publicKey, long publicKeyLen, uint8_t *sharedSecret, long sharedSecretLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen), slice(sharedSecret, sharedSecretLen)));
++long go_validatePrivateKeyECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen)));
++long go_validatePublicKeyECDH(int32_t curveID, const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++
++// ECDSA
++long go_generateKeyECDSA(int32_t curveID, uint8_t *x, long xLen, uint8_t *y, long yLen, uint8_t *d, long dLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(d, dLen)));
++long go_ecdsaSign(int32_t curveID, const uint8_t *d, long dLen, const uint8_t *message, long messageLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(d, dLen), slice(message, messageLen), slice(signature)));
++long go_ecdsaVerify(int32_t curveID, const uint8_t *x, long xLen, const uint8_t *y, long yLen, const uint8_t *message, long messageLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(message, messageLen), slice(signature, signatureLen)));
++
++#ifdef __clang__
++#pragma clang assume_nonnull end
++#endif
++
++#endif // _GO_CRYPTOKIT_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..c83bb8660303f6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package cryptokit
++
++import (
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
++)
++
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
+new file mode 100644
+index 00000000000000..e96680e304c47d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
+@@ -0,0 +1,2 @@
++Xcode 26.4.1
++Build version 17E202
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
+new file mode 100644
+index 00000000000000..d0d2a5bbd3475d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
+@@ -0,0 +1,317 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zcryptokit.h"
++
++void go_MD5(const uint8_t*, size_t, uint8_t*);
++void go_SHA1(const uint8_t*, size_t, uint8_t*);
++void go_SHA256(const uint8_t*, size_t, uint8_t*);
++void go_SHA384(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_256(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_384(const uint8_t*, size_t, uint8_t*);
++void go_SHA3_512(const uint8_t*, size_t, uint8_t*);
++void go_SHA512(const uint8_t*, size_t, uint8_t*);
++void* go_copyHMAC(int32_t, void*);
++long go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
++long go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
++long go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
++long go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
++long go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++void go_finalizeHMAC(int32_t, void*, uint8_t*);
++void go_freeHMAC(int32_t, void*);
++long go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
++long go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
++void go_generateKeyEd25519(uint8_t*);
++long go_generateKeyMLDSA65(uint8_t*, long);
++long go_generateKeyMLDSA87(uint8_t*, long);
++long go_generateKeyMLKEM1024(uint8_t*, long);
++long go_generateKeyMLKEM768(uint8_t*, long);
++long go_hashBlockSize(int32_t);
++void* go_hashCopy(int32_t, void*);
++void go_hashFree(int32_t, void*);
++void* go_hashNew(int32_t);
++void go_hashReset(int32_t, void*);
++long go_hashSize(int32_t);
++void go_hashSum(int32_t, void*, uint8_t*);
++void go_hashWrite(int32_t, void*, const uint8_t*, long);
++void* go_initHMAC(int32_t, const uint8_t*, long);
++long go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++long go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++long go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
++long go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++long go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long go_supportsMLDSA(void);
++long go_supportsMLKEM(void);
++long go_supportsSHA3(void);
++void go_updateHMAC(int32_t, void*, const uint8_t*, long);
++long go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
++long go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
++long go_validatePublicKeyMLDSA65(const uint8_t*, long);
++long go_validatePublicKeyMLDSA87(const uint8_t*, long);
++long go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++long go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++
++void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_MD5(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA1(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA1(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA256(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA384(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA3_256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA3_256(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA3_384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA3_384(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA3_512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA3_512(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_SHA512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
++	go_SHA512(_arg0, _arg1, _arg2);
++}
++
++void* _mkcgo_go_copyHMAC(int32_t _arg0, void* _arg1) {
++	return go_copyHMAC(_arg0, _arg1);
++}
++
++long _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
++	return go_decapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++long _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
++	return go_decapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++long _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++}
++
++long _mkcgo_go_decryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
++	return go_decryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++}
++
++long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_deriveEncapsulationKeyMLKEM768(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_derivePublicKeyMLDSA65(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
++	return go_derivePublicKeyMLDSA87(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_ecdhSharedSecret(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
++	return go_ecdhSharedSecret(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++long _mkcgo_go_ecdsaSign(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long* _arg6) {
++	return go_ecdsaSign(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++long _mkcgo_go_ecdsaVerify(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, const uint8_t* _arg5, long _arg6, const uint8_t* _arg7, long _arg8) {
++	return go_ecdsaVerify(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
++}
++
++long _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
++	return go_encapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++long _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
++	return go_encapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++long _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++}
++
++long _mkcgo_go_encryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
++	return go_encryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++}
++
++long _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++long _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
++	return go_extractHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++void _mkcgo_go_finalizeHMAC(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
++	go_finalizeHMAC(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_freeHMAC(int32_t _arg0, void* _arg1) {
++	go_freeHMAC(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyECDH(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
++	return go_generateKeyECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++long _mkcgo_go_generateKeyECDSA(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
++	return go_generateKeyECDSA(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++}
++
++void _mkcgo_go_generateKeyEd25519(uint8_t* _arg0) {
++	go_generateKeyEd25519(_arg0);
++}
++
++long _mkcgo_go_generateKeyMLDSA65(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLDSA65(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyMLDSA87(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLDSA87(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLKEM1024(_arg0, _arg1);
++}
++
++long _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, long _arg1) {
++	return go_generateKeyMLKEM768(_arg0, _arg1);
++}
++
++long _mkcgo_go_hashBlockSize(int32_t _arg0) {
++	return go_hashBlockSize(_arg0);
++}
++
++void* _mkcgo_go_hashCopy(int32_t _arg0, void* _arg1) {
++	return go_hashCopy(_arg0, _arg1);
++}
++
++void _mkcgo_go_hashFree(int32_t _arg0, void* _arg1) {
++	go_hashFree(_arg0, _arg1);
++}
++
++void* _mkcgo_go_hashNew(int32_t _arg0) {
++	return go_hashNew(_arg0);
++}
++
++void _mkcgo_go_hashReset(int32_t _arg0, void* _arg1) {
++	go_hashReset(_arg0, _arg1);
++}
++
++long _mkcgo_go_hashSize(int32_t _arg0) {
++	return go_hashSize(_arg0);
++}
++
++void _mkcgo_go_hashSum(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
++	go_hashSum(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
++	go_hashWrite(_arg0, _arg1, _arg2, _arg3);
++}
++
++void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
++	return go_initHMAC(_arg0, _arg1, _arg2);
++}
++
++long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
++	return go_newPrivateKeyEd25519FromSeed(_arg0, _arg1);
++}
++
++long _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
++	return go_newPublicKeyEd25519(_arg0, _arg1);
++}
++
++long _mkcgo_go_publicKeyFromPrivateECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
++	return go_publicKeyFromPrivateECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++long _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
++	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_signMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
++	return go_signMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_signMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
++	return go_signMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_supportsMLDSA(void) {
++	return go_supportsMLDSA();
++}
++
++long _mkcgo_go_supportsMLKEM(void) {
++	return go_supportsMLKEM();
++}
++
++long _mkcgo_go_supportsSHA3(void) {
++	return go_supportsSHA3();
++}
++
++void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
++	go_updateHMAC(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_validatePrivateKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
++	return go_validatePrivateKeyECDH(_arg0, _arg1, _arg2);
++}
++
++long _mkcgo_go_validatePublicKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
++	return go_validatePublicKeyECDH(_arg0, _arg1, _arg2);
++}
++
++long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1) {
++	return go_validatePublicKeyMLDSA65(_arg0, _arg1);
++}
++
++long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1) {
++	return go_validatePublicKeyMLDSA87(_arg0, _arg1);
++}
++
++long _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
++	return go_verifyEd25519(_arg0, _arg1, _arg2, _arg3);
++}
++
++long _mkcgo_go_verifyMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
++	return go_verifyMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
++long _mkcgo_go_verifyMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
++	return go_verifyMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++}
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
+new file mode 100644
+index 00000000000000..f933f59c3013da
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
+@@ -0,0 +1,77 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
++
++#include <stddef.h>
++#include <stdint.h>
++
++
++uintptr_t mkcgo_err_retrieve();
++
++void _mkcgo_go_MD5(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA1(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA256(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA384(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_256(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_384(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA3_512(const uint8_t*, size_t, uint8_t*);
++void _mkcgo_go_SHA512(const uint8_t*, size_t, uint8_t*);
++void* _mkcgo_go_copyHMAC(int32_t, void*);
++long _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long _mkcgo_go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
++long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++long _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
++void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
++void _mkcgo_go_freeHMAC(int32_t, void*);
++long _mkcgo_go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
++void _mkcgo_go_generateKeyEd25519(uint8_t*);
++long _mkcgo_go_generateKeyMLDSA65(uint8_t*, long);
++long _mkcgo_go_generateKeyMLDSA87(uint8_t*, long);
++long _mkcgo_go_generateKeyMLKEM1024(uint8_t*, long);
++long _mkcgo_go_generateKeyMLKEM768(uint8_t*, long);
++long _mkcgo_go_hashBlockSize(int32_t);
++void* _mkcgo_go_hashCopy(int32_t, void*);
++void _mkcgo_go_hashFree(int32_t, void*);
++void* _mkcgo_go_hashNew(int32_t);
++void _mkcgo_go_hashReset(int32_t, void*);
++long _mkcgo_go_hashSize(int32_t);
++void _mkcgo_go_hashSum(int32_t, void*, uint8_t*);
++void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, long);
++void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, long);
++long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
++long _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
++long _mkcgo_go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
++long _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
++long _mkcgo_go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
++long _mkcgo_go_supportsMLDSA(void);
++long _mkcgo_go_supportsMLKEM(void);
++long _mkcgo_go_supportsSHA3(void);
++void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, long);
++long _mkcgo_go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t*, long);
++long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t*, long);
++long _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
++long _mkcgo_go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++long _mkcgo_go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
+new file mode 100644
+index 00000000000000..5be36f4b35dedb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
+@@ -0,0 +1,400 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++#include "textflag.h"
++
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_go_MD5_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_MD5(SB)
++
++GLOBL ·_mkcgo_go_MD5_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_MD5_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_MD5_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA1_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA1(SB)
++
++GLOBL ·_mkcgo_go_SHA1_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA1_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA1_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA256_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA256(SB)
++
++GLOBL ·_mkcgo_go_SHA256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA384_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA384(SB)
++
++GLOBL ·_mkcgo_go_SHA384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_256_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_256(SB)
++
++GLOBL ·_mkcgo_go_SHA3_256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_256_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_384_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_384(SB)
++
++GLOBL ·_mkcgo_go_SHA3_384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_384_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA3_512_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA3_512(SB)
++
++GLOBL ·_mkcgo_go_SHA3_512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA3_512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_512_trampoline<>(SB)
++
++TEXT _mkcgo_go_SHA512_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_SHA512(SB)
++
++GLOBL ·_mkcgo_go_SHA512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_SHA512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA512_trampoline<>(SB)
++
++TEXT _mkcgo_go_copyHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_copyHMAC(SB)
++
++GLOBL ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decapsulateMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_decapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decapsulateMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decryptAESGCM(SB)
++
++GLOBL ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_decryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_decryptChaChaPoly(SB)
++
++GLOBL ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptChaChaPoly_trampoline<>(SB)
++
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_derivePublicKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_derivePublicKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdhSharedSecret(SB)
++
++GLOBL ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdhSharedSecret_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaSign_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdsaSign(SB)
++
++GLOBL ·_mkcgo_go_ecdsaSign_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdsaSign_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaSign_trampoline<>(SB)
++
++TEXT _mkcgo_go_ecdsaVerify_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_ecdsaVerify(SB)
++
++GLOBL ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaVerify_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encapsulateMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_encapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encapsulateMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encryptAESGCM(SB)
++
++GLOBL ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
++
++TEXT _mkcgo_go_encryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_encryptChaChaPoly(SB)
++
++GLOBL ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptChaChaPoly_trampoline<>(SB)
++
++TEXT _mkcgo_go_expandHKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_expandHKDF(SB)
++
++GLOBL ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_expandHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_expandHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_extractHKDF_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_extractHKDF(SB)
++
++GLOBL ·_mkcgo_go_extractHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_extractHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_extractHKDF_trampoline<>(SB)
++
++TEXT _mkcgo_go_finalizeHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_finalizeHMAC(SB)
++
++GLOBL ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_finalizeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_freeHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_freeHMAC(SB)
++
++GLOBL ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyECDSA_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyECDSA(SB)
++
++GLOBL ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDSA_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyEd25519(SB)
++
++GLOBL ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA87_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLKEM1024(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB)
++
++TEXT _mkcgo_go_generateKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_generateKeyMLKEM768(SB)
++
++GLOBL ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM768_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashBlockSize(SB)
++
++GLOBL ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashCopy_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashCopy(SB)
++
++GLOBL ·_mkcgo_go_hashCopy_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashCopy_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashCopy_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashFree_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashFree(SB)
++
++GLOBL ·_mkcgo_go_hashFree_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashFree_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashFree_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashNew_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashNew(SB)
++
++GLOBL ·_mkcgo_go_hashNew_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashNew_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashNew_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashReset_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashReset(SB)
++
++GLOBL ·_mkcgo_go_hashReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashReset_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashSize(SB)
++
++GLOBL ·_mkcgo_go_hashSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSize_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashSum_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashSum(SB)
++
++GLOBL ·_mkcgo_go_hashSum_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashSum_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSum_trampoline<>(SB)
++
++TEXT _mkcgo_go_hashWrite_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_hashWrite(SB)
++
++GLOBL ·_mkcgo_go_hashWrite_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_hashWrite_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashWrite_trampoline<>(SB)
++
++TEXT _mkcgo_go_initHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_initHMAC(SB)
++
++GLOBL ·_mkcgo_go_initHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_initHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_initHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_newPrivateKeyEd25519FromSeed(SB)
++
++GLOBL ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB)
++
++TEXT _mkcgo_go_newPublicKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_newPublicKeyEd25519(SB)
++
++GLOBL ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_publicKeyFromPrivateECDH(SB)
++
++GLOBL ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_signEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signEd25519(SB)
++
++GLOBL ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_signMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_signMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_signMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_signMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_signMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_signMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA87_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsMLDSA_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsMLDSA(SB)
++
++GLOBL ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLDSA_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsMLKEM(SB)
++
++GLOBL ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLKEM_trampoline<>(SB)
++
++TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_supportsSHA3(SB)
++
++GLOBL ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_supportsSHA3_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsSHA3_trampoline<>(SB)
++
++TEXT _mkcgo_go_updateHMAC_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_updateHMAC(SB)
++
++GLOBL ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePrivateKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyECDH(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_validatePublicKeyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyEd25519(SB)
++
++GLOBL ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyMLDSA65(SB)
++
++GLOBL ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA65_trampoline<>(SB)
++
++TEXT _mkcgo_go_verifyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_go_verifyMLDSA87(SB)
++
++GLOBL ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA87_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
+new file mode 100644
+index 00000000000000..c05dd1acf80954
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
+@@ -0,0 +1,386 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++package cryptokit
++
++/*
++#cgo CFLAGS: -Wno-attributes
++
++#include "zcryptokit.h"
++#cgo noescape _mkcgo_go_MD5
++#cgo nocallback _mkcgo_go_MD5
++#cgo noescape _mkcgo_go_SHA1
++#cgo nocallback _mkcgo_go_SHA1
++#cgo noescape _mkcgo_go_SHA256
++#cgo nocallback _mkcgo_go_SHA256
++#cgo noescape _mkcgo_go_SHA384
++#cgo nocallback _mkcgo_go_SHA384
++#cgo noescape _mkcgo_go_SHA3_256
++#cgo nocallback _mkcgo_go_SHA3_256
++#cgo noescape _mkcgo_go_SHA3_384
++#cgo nocallback _mkcgo_go_SHA3_384
++#cgo noescape _mkcgo_go_SHA3_512
++#cgo nocallback _mkcgo_go_SHA3_512
++#cgo noescape _mkcgo_go_SHA512
++#cgo nocallback _mkcgo_go_SHA512
++#cgo noescape _mkcgo_go_copyHMAC
++#cgo nocallback _mkcgo_go_copyHMAC
++#cgo noescape _mkcgo_go_decapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_decapsulateMLKEM1024
++#cgo noescape _mkcgo_go_decapsulateMLKEM768
++#cgo nocallback _mkcgo_go_decapsulateMLKEM768
++#cgo noescape _mkcgo_go_decryptAESGCM
++#cgo nocallback _mkcgo_go_decryptAESGCM
++#cgo noescape _mkcgo_go_decryptChaChaPoly
++#cgo nocallback _mkcgo_go_decryptChaChaPoly
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
++#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
++#cgo noescape _mkcgo_go_derivePublicKeyMLDSA65
++#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA65
++#cgo noescape _mkcgo_go_derivePublicKeyMLDSA87
++#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA87
++#cgo noescape _mkcgo_go_ecdhSharedSecret
++#cgo nocallback _mkcgo_go_ecdhSharedSecret
++#cgo noescape _mkcgo_go_ecdsaSign
++#cgo nocallback _mkcgo_go_ecdsaSign
++#cgo noescape _mkcgo_go_ecdsaVerify
++#cgo nocallback _mkcgo_go_ecdsaVerify
++#cgo noescape _mkcgo_go_encapsulateMLKEM1024
++#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
++#cgo noescape _mkcgo_go_encapsulateMLKEM768
++#cgo nocallback _mkcgo_go_encapsulateMLKEM768
++#cgo noescape _mkcgo_go_encryptAESGCM
++#cgo nocallback _mkcgo_go_encryptAESGCM
++#cgo noescape _mkcgo_go_encryptChaChaPoly
++#cgo nocallback _mkcgo_go_encryptChaChaPoly
++#cgo noescape _mkcgo_go_expandHKDF
++#cgo nocallback _mkcgo_go_expandHKDF
++#cgo noescape _mkcgo_go_extractHKDF
++#cgo nocallback _mkcgo_go_extractHKDF
++#cgo noescape _mkcgo_go_finalizeHMAC
++#cgo nocallback _mkcgo_go_finalizeHMAC
++#cgo noescape _mkcgo_go_freeHMAC
++#cgo nocallback _mkcgo_go_freeHMAC
++#cgo noescape _mkcgo_go_generateKeyECDH
++#cgo nocallback _mkcgo_go_generateKeyECDH
++#cgo noescape _mkcgo_go_generateKeyECDSA
++#cgo nocallback _mkcgo_go_generateKeyECDSA
++#cgo noescape _mkcgo_go_generateKeyEd25519
++#cgo nocallback _mkcgo_go_generateKeyEd25519
++#cgo noescape _mkcgo_go_generateKeyMLDSA65
++#cgo nocallback _mkcgo_go_generateKeyMLDSA65
++#cgo noescape _mkcgo_go_generateKeyMLDSA87
++#cgo nocallback _mkcgo_go_generateKeyMLDSA87
++#cgo noescape _mkcgo_go_generateKeyMLKEM1024
++#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
++#cgo noescape _mkcgo_go_generateKeyMLKEM768
++#cgo nocallback _mkcgo_go_generateKeyMLKEM768
++#cgo noescape _mkcgo_go_hashBlockSize
++#cgo nocallback _mkcgo_go_hashBlockSize
++#cgo noescape _mkcgo_go_hashCopy
++#cgo nocallback _mkcgo_go_hashCopy
++#cgo noescape _mkcgo_go_hashFree
++#cgo nocallback _mkcgo_go_hashFree
++#cgo noescape _mkcgo_go_hashNew
++#cgo nocallback _mkcgo_go_hashNew
++#cgo noescape _mkcgo_go_hashReset
++#cgo nocallback _mkcgo_go_hashReset
++#cgo noescape _mkcgo_go_hashSize
++#cgo nocallback _mkcgo_go_hashSize
++#cgo noescape _mkcgo_go_hashSum
++#cgo nocallback _mkcgo_go_hashSum
++#cgo noescape _mkcgo_go_hashWrite
++#cgo nocallback _mkcgo_go_hashWrite
++#cgo noescape _mkcgo_go_initHMAC
++#cgo nocallback _mkcgo_go_initHMAC
++#cgo noescape _mkcgo_go_newPrivateKeyEd25519FromSeed
++#cgo nocallback _mkcgo_go_newPrivateKeyEd25519FromSeed
++#cgo noescape _mkcgo_go_newPublicKeyEd25519
++#cgo nocallback _mkcgo_go_newPublicKeyEd25519
++#cgo noescape _mkcgo_go_publicKeyFromPrivateECDH
++#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
++#cgo noescape _mkcgo_go_signEd25519
++#cgo nocallback _mkcgo_go_signEd25519
++#cgo noescape _mkcgo_go_signMLDSA65
++#cgo nocallback _mkcgo_go_signMLDSA65
++#cgo noescape _mkcgo_go_signMLDSA87
++#cgo nocallback _mkcgo_go_signMLDSA87
++#cgo noescape _mkcgo_go_supportsMLDSA
++#cgo nocallback _mkcgo_go_supportsMLDSA
++#cgo noescape _mkcgo_go_supportsMLKEM
++#cgo nocallback _mkcgo_go_supportsMLKEM
++#cgo noescape _mkcgo_go_supportsSHA3
++#cgo nocallback _mkcgo_go_supportsSHA3
++#cgo noescape _mkcgo_go_updateHMAC
++#cgo nocallback _mkcgo_go_updateHMAC
++#cgo noescape _mkcgo_go_validatePrivateKeyECDH
++#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
++#cgo noescape _mkcgo_go_validatePublicKeyECDH
++#cgo nocallback _mkcgo_go_validatePublicKeyECDH
++#cgo noescape _mkcgo_go_validatePublicKeyMLDSA65
++#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA65
++#cgo noescape _mkcgo_go_validatePublicKeyMLDSA87
++#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA87
++#cgo noescape _mkcgo_go_verifyEd25519
++#cgo nocallback _mkcgo_go_verifyEd25519
++#cgo noescape _mkcgo_go_verifyMLDSA65
++#cgo nocallback _mkcgo_go_verifyMLDSA65
++#cgo noescape _mkcgo_go_verifyMLDSA87
++#cgo nocallback _mkcgo_go_verifyMLDSA87
++*/
++import "C"
++import "unsafe"
++
++//go:nosplit
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++}
++
++func MD5(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_MD5((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA1(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA1((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA256(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA384(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA3_512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA512(inputPointer []uint8, outputPointer []uint8) {
++	C._mkcgo_go_SHA512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	return C._mkcgo_go_copyHMAC(C.int32_t(hashAlgorithm), ptr)
++}
++
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	return int64(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
++}
++
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	return int64(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
++}
++
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	return int64(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++}
++
++func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	return int64(C._mkcgo_go_decryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++}
++
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
++}
++
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
++	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
++}
++
++func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_derivePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_derivePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
++	return int64(C._mkcgo_go_ecdhSharedSecret(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedSecret))), C.long(len(sharedSecret))))
++}
++
++func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_ecdsaSign(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++}
++
++func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_ecdsaVerify(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++}
++
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	return int64(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
++}
++
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	return int64(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
++}
++
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	return int64(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++}
++
++func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	return int64(C._mkcgo_go_encryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++}
++
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
++	return int64(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
++}
++
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
++	return int64(C._mkcgo_go_extractHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(secret))), C.size_t(len(secret)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk))))
++}
++
++func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	C._mkcgo_go_finalizeHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_freeHMAC(C.int32_t(hashFunction), ptr)
++}
++
++func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyECDSA(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d))))
++}
++
++func GenerateKeyEd25519(key []uint8) {
++	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
++}
++
++func GenerateKeyMLDSA65(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
++func GenerateKeyMLDSA87(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
++func GenerateKeyMLKEM1024(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
++func GenerateKeyMLKEM768(seed []uint8) int64 {
++	return int64(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++}
++
++func HashBlockSize(hashAlgorithm int32) int64 {
++	return int64(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
++}
++
++func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	return C._mkcgo_go_hashCopy(C.int32_t(hashAlgorithm), ptr)
++}
++
++func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_hashFree(C.int32_t(hashAlgorithm), ptr)
++}
++
++func HashNew(hashAlgorithm int32) unsafe.Pointer {
++	return C._mkcgo_go_hashNew(C.int32_t(hashAlgorithm))
++}
++
++func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
++	C._mkcgo_go_hashReset(C.int32_t(hashAlgorithm), ptr)
++}
++
++func HashSize(hashAlgorithm int32) int64 {
++	return int64(C._mkcgo_go_hashSize(C.int32_t(hashAlgorithm)))
++}
++
++func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	C._mkcgo_go_hashSum(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
++	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
++}
++
++func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
++	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.long(len(key)))
++}
++
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
++	return int64(C._mkcgo_go_newPrivateKeyEd25519FromSeed((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed)))))
++}
++
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
++	return int64(C._mkcgo_go_newPublicKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(pub)))))
++}
++
++func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_publicKeyFromPrivateECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
++	return int64(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
++}
++
++func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_signMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++}
++
++func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	return int64(C._mkcgo_go_signMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++}
++
++func SupportsMLDSA() int64 {
++	return int64(C._mkcgo_go_supportsMLDSA())
++}
++
++func SupportsMLKEM() int64 {
++	return int64(C._mkcgo_go_supportsMLKEM())
++}
++
++func SupportsSHA3() int64 {
++	return int64(C._mkcgo_go_supportsSHA3())
++}
++
++func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
++	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
++}
++
++func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePrivateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey))))
++}
++
++func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
++	return int64(C._mkcgo_go_validatePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++}
++
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
++	return int64(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
++}
++
++func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_verifyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++}
++
++func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	return int64(C._mkcgo_go_verifyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
+new file mode 100644
+index 00000000000000..222ece4bb14349
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
+@@ -0,0 +1,441 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++package cryptokit
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++var _ = runtime.GOOS
++
++var _mkcgoAlwaysFalseCryptokit bool
++var _mkcgoEscapeSinkCryptokit unsafe.Pointer
++
++// mkcgoEscapePtrCryptokit forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrCryptokit(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseCryptokit {
++		_mkcgoEscapeSinkCryptokit = p
++	}
++	return p
++}
++
++//go:linkname go_MD5 go_MD5
++//go:linkname go_SHA1 go_SHA1
++//go:linkname go_SHA256 go_SHA256
++//go:linkname go_SHA384 go_SHA384
++//go:linkname go_SHA3_256 go_SHA3_256
++//go:linkname go_SHA3_384 go_SHA3_384
++//go:linkname go_SHA3_512 go_SHA3_512
++//go:linkname go_SHA512 go_SHA512
++//go:linkname go_copyHMAC go_copyHMAC
++//go:linkname go_decapsulateMLKEM1024 go_decapsulateMLKEM1024
++//go:linkname go_decapsulateMLKEM768 go_decapsulateMLKEM768
++//go:linkname go_decryptAESGCM go_decryptAESGCM
++//go:linkname go_decryptChaChaPoly go_decryptChaChaPoly
++//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
++//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
++//go:linkname go_derivePublicKeyMLDSA65 go_derivePublicKeyMLDSA65
++//go:linkname go_derivePublicKeyMLDSA87 go_derivePublicKeyMLDSA87
++//go:linkname go_ecdhSharedSecret go_ecdhSharedSecret
++//go:linkname go_ecdsaSign go_ecdsaSign
++//go:linkname go_ecdsaVerify go_ecdsaVerify
++//go:linkname go_encapsulateMLKEM1024 go_encapsulateMLKEM1024
++//go:linkname go_encapsulateMLKEM768 go_encapsulateMLKEM768
++//go:linkname go_encryptAESGCM go_encryptAESGCM
++//go:linkname go_encryptChaChaPoly go_encryptChaChaPoly
++//go:linkname go_expandHKDF go_expandHKDF
++//go:linkname go_extractHKDF go_extractHKDF
++//go:linkname go_finalizeHMAC go_finalizeHMAC
++//go:linkname go_freeHMAC go_freeHMAC
++//go:linkname go_generateKeyECDH go_generateKeyECDH
++//go:linkname go_generateKeyECDSA go_generateKeyECDSA
++//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
++//go:linkname go_generateKeyMLDSA65 go_generateKeyMLDSA65
++//go:linkname go_generateKeyMLDSA87 go_generateKeyMLDSA87
++//go:linkname go_generateKeyMLKEM1024 go_generateKeyMLKEM1024
++//go:linkname go_generateKeyMLKEM768 go_generateKeyMLKEM768
++//go:linkname go_hashBlockSize go_hashBlockSize
++//go:linkname go_hashCopy go_hashCopy
++//go:linkname go_hashFree go_hashFree
++//go:linkname go_hashNew go_hashNew
++//go:linkname go_hashReset go_hashReset
++//go:linkname go_hashSize go_hashSize
++//go:linkname go_hashSum go_hashSum
++//go:linkname go_hashWrite go_hashWrite
++//go:linkname go_initHMAC go_initHMAC
++//go:linkname go_newPrivateKeyEd25519FromSeed go_newPrivateKeyEd25519FromSeed
++//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
++//go:linkname go_publicKeyFromPrivateECDH go_publicKeyFromPrivateECDH
++//go:linkname go_signEd25519 go_signEd25519
++//go:linkname go_signMLDSA65 go_signMLDSA65
++//go:linkname go_signMLDSA87 go_signMLDSA87
++//go:linkname go_supportsMLDSA go_supportsMLDSA
++//go:linkname go_supportsMLKEM go_supportsMLKEM
++//go:linkname go_supportsSHA3 go_supportsSHA3
++//go:linkname go_updateHMAC go_updateHMAC
++//go:linkname go_validatePrivateKeyECDH go_validatePrivateKeyECDH
++//go:linkname go_validatePublicKeyECDH go_validatePublicKeyECDH
++//go:linkname go_validatePublicKeyMLDSA65 go_validatePublicKeyMLDSA65
++//go:linkname go_validatePublicKeyMLDSA87 go_validatePublicKeyMLDSA87
++//go:linkname go_verifyEd25519 go_verifyEd25519
++//go:linkname go_verifyMLDSA65 go_verifyMLDSA65
++//go:linkname go_verifyMLDSA87 go_verifyMLDSA87
++
++var go_MD5 byte
++var go_SHA1 byte
++var go_SHA256 byte
++var go_SHA384 byte
++var go_SHA3_256 byte
++var go_SHA3_384 byte
++var go_SHA3_512 byte
++var go_SHA512 byte
++var go_copyHMAC byte
++var go_decapsulateMLKEM1024 byte
++var go_decapsulateMLKEM768 byte
++var go_decryptAESGCM byte
++var go_decryptChaChaPoly byte
++var go_deriveEncapsulationKeyMLKEM1024 byte
++var go_deriveEncapsulationKeyMLKEM768 byte
++var go_derivePublicKeyMLDSA65 byte
++var go_derivePublicKeyMLDSA87 byte
++var go_ecdhSharedSecret byte
++var go_ecdsaSign byte
++var go_ecdsaVerify byte
++var go_encapsulateMLKEM1024 byte
++var go_encapsulateMLKEM768 byte
++var go_encryptAESGCM byte
++var go_encryptChaChaPoly byte
++var go_expandHKDF byte
++var go_extractHKDF byte
++var go_finalizeHMAC byte
++var go_freeHMAC byte
++var go_generateKeyECDH byte
++var go_generateKeyECDSA byte
++var go_generateKeyEd25519 byte
++var go_generateKeyMLDSA65 byte
++var go_generateKeyMLDSA87 byte
++var go_generateKeyMLKEM1024 byte
++var go_generateKeyMLKEM768 byte
++var go_hashBlockSize byte
++var go_hashCopy byte
++var go_hashFree byte
++var go_hashNew byte
++var go_hashReset byte
++var go_hashSize byte
++var go_hashSum byte
++var go_hashWrite byte
++var go_initHMAC byte
++var go_newPrivateKeyEd25519FromSeed byte
++var go_newPublicKeyEd25519 byte
++var go_publicKeyFromPrivateECDH byte
++var go_signEd25519 byte
++var go_signMLDSA65 byte
++var go_signMLDSA87 byte
++var go_supportsMLDSA byte
++var go_supportsMLKEM byte
++var go_supportsSHA3 byte
++var go_updateHMAC byte
++var go_validatePrivateKeyECDH byte
++var go_validatePublicKeyECDH byte
++var go_validatePublicKeyMLDSA65 byte
++var go_validatePublicKeyMLDSA87 byte
++var go_verifyEd25519 byte
++var go_verifyMLDSA65 byte
++var go_verifyMLDSA87 byte
++
++func MD5(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_MD5)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA1(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA1)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA256(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA384(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func SHA512(inputPointer []uint8, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_SHA512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_copyHMAC)), uintptr(hashAlgorithm), uintptr(ptr))
++	return unsafe.Pointer(r0)
++}
++
++func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
++	return int64(r0)
++}
++
++func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
++	return int64(r0)
++}
++
++func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
++	return int64(r0)
++}
++
++func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
++	return int64(r0)
++}
++
++func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
++	return int64(r0)
++}
++
++func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
++	return int64(r0)
++}
++
++func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdhSharedSecret)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedSecret))), uintptr(len(sharedSecret)))
++	return int64(r0)
++}
++
++func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaSign)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
++}
++
++func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaVerify)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
++
++func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
++	return int64(r0)
++}
++
++func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
++	return int64(r0)
++}
++
++func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
++	return int64(r0)
++}
++
++func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
++	return int64(r0)
++}
++
++func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_expandHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)), uintptr(unsafe.Pointer(unsafe.SliceData(info))), uintptr(len(info)), uintptr(unsafe.Pointer(unsafe.SliceData(okm))), uintptr(len(okm)))
++	return int64(r0)
++}
++
++func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_extractHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(secret))), uintptr(len(secret)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)))
++	return int64(r0)
++}
++
++func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_finalizeHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_freeHMAC)), uintptr(hashFunction), uintptr(ptr))
++}
++
++func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDSA)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)))
++	return int64(r0)
++}
++
++func GenerateKeyEd25519(key []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
++}
++
++func GenerateKeyMLDSA65(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
++func GenerateKeyMLDSA87(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
++func GenerateKeyMLKEM1024(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
++func GenerateKeyMLKEM768(seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
++	return int64(r0)
++}
++
++func HashBlockSize(hashAlgorithm int32) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashBlockSize)), uintptr(hashAlgorithm))
++	return int64(r0)
++}
++
++func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashCopy)), uintptr(hashAlgorithm), uintptr(ptr))
++	return unsafe.Pointer(r0)
++}
++
++func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashFree)), uintptr(hashAlgorithm), uintptr(ptr))
++}
++
++func HashNew(hashAlgorithm int32) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashNew)), uintptr(hashAlgorithm))
++	return unsafe.Pointer(r0)
++}
++
++func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashReset)), uintptr(hashAlgorithm), uintptr(ptr))
++}
++
++func HashSize(hashAlgorithm int32) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashSize)), uintptr(hashAlgorithm))
++	return int64(r0)
++}
++
++func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashSum)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++}
++
++func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_hashWrite)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
++}
++
++func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_initHMAC)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)))
++	return unsafe.Pointer(r0)
++}
++
++func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPrivateKeyEd25519FromSeed)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(seed))))
++	return int64(r0)
++}
++
++func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPublicKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(pub))))
++	return int64(r0)
++}
++
++func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_publicKeyFromPrivateECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sigBuffer))))
++	return int64(r0)
++}
++
++func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
++}
++
++func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
++	return int64(r0)
++}
++
++func SupportsMLDSA() int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLDSA)))
++	return int64(r0)
++}
++
++func SupportsMLKEM() int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLKEM)))
++	return int64(r0)
++}
++
++func SupportsSHA3() int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsSHA3)))
++	return int64(r0)
++}
++
++func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
++	syscallN(0, uintptr(unsafe.Pointer(&go_updateHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
++}
++
++func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePrivateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)))
++	return int64(r0)
++}
++
++func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
++	return int64(r0)
++}
++
++func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sig))))
++	return int64(r0)
++}
++
++func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
++
++func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
++	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
++	return int64(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
+new file mode 100644
+index 00000000000000..2b9858f5e5ce80
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
+@@ -0,0 +1,307 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++// Code generated by genswiftimports. DO NOT EDIT.
++
++//go:build !cgo && darwin && amd64
++
++package cryptokit
++
++//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
++//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
++//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
++//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
++//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
++//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
++//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
++//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
++//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
++//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
++//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic ___chkstk_darwin ___chkstk_darwin ""
++//go:cgo_import_dynamic memcpy memcpy ""
++//go:cgo_import_dynamic memset memset ""
++//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
++//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
++//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
++//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
++//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
++//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
++//go:cgo_import_dynamic swift_release swift_release ""
++//go:cgo_import_dynamic swift_retain swift_retain ""
++//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+new file mode 100644
+index 00000000000000..ce5806b1910da9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
+@@ -0,0 +1,306 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++// Code generated by genswiftimports. DO NOT EDIT.
++
++//go:build !cgo && darwin && arm64
++
++package cryptokit
++
++//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
++//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
++//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
++//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
++//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
++//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
++//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
++//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
++//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
++//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
++//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
++//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
++//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
++//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
++//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
++//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
++//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
++//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
++//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
++//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
++//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
++//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
++//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
++//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
++//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
++//go:cgo_import_dynamic __chkstk_darwin __chkstk_darwin "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic memcpy memcpy ""
++//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
++//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
++//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
++//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
++//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
++//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
++//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
++//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
++//go:cgo_import_dynamic swift_release swift_release ""
++//go:cgo_import_dynamic swift_retain swift_retain ""
++//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
+new file mode 100644
+index 00000000000000..9949435fe9e0ae
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
+@@ -0,0 +1,99 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These save the frame pointer, so in general, functions that use
++// these should have zero frame size to suppress the automatic frame
++// pointer, though it's harmless to not do this.
++
++#ifdef GOOS_windows
++
++// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
++// PUSH_REGS_HOST_TO_ABI0.
++#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
++
++// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
++// the host ABI to Go ABI0 code. It saves all registers that are
++// callee-save in the host ABI and caller-save in Go ABI0 and prepares
++// for entry to Go.
++//
++// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
++// Clear the DF flag for the Go ABI.
++// MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	PUSHFQ			\
++	CLD			\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
++	MOVQ	DI, (0*0)(SP)	\
++	MOVQ	SI, (1*8)(SP)	\
++	MOVQ	BP, (2*8)(SP)	\
++	MOVQ	BX, (3*8)(SP)	\
++	MOVQ	R12, (4*8)(SP)	\
++	MOVQ	R13, (5*8)(SP)	\
++	MOVQ	R14, (6*8)(SP)	\
++	MOVQ	R15, (7*8)(SP)	\
++	MOVUPS	X6, (8*8)(SP)	\
++	MOVUPS	X7, (10*8)(SP)	\
++	MOVUPS	X8, (12*8)(SP)	\
++	MOVUPS	X9, (14*8)(SP)	\
++	MOVUPS	X10, (16*8)(SP)	\
++	MOVUPS	X11, (18*8)(SP)	\
++	MOVUPS	X12, (20*8)(SP)	\
++	MOVUPS	X13, (22*8)(SP)	\
++	MOVUPS	X14, (24*8)(SP)	\
++	MOVUPS	X15, (26*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*0)(SP), DI	\
++	MOVQ	(1*8)(SP), SI	\
++	MOVQ	(2*8)(SP), BP	\
++	MOVQ	(3*8)(SP), BX	\
++	MOVQ	(4*8)(SP), R12	\
++	MOVQ	(5*8)(SP), R13	\
++	MOVQ	(6*8)(SP), R14	\
++	MOVQ	(7*8)(SP), R15	\
++	MOVUPS	(8*8)(SP), X6	\
++	MOVUPS	(10*8)(SP), X7	\
++	MOVUPS	(12*8)(SP), X8	\
++	MOVUPS	(14*8)(SP), X9	\
++	MOVUPS	(16*8)(SP), X10	\
++	MOVUPS	(18*8)(SP), X11	\
++	MOVUPS	(20*8)(SP), X12	\
++	MOVUPS	(22*8)(SP), X13	\
++	MOVUPS	(24*8)(SP), X14	\
++	MOVUPS	(26*8)(SP), X15	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
++	POPFQ
++
++#else
++// SysV ABI
++
++#define REGS_HOST_TO_ABI0_STACK (6*8)
++
++// SysV MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++// Both SysV and Go require DF to be cleared, so that's already clear.
++// The SysV and Go frame pointer conventions are compatible.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
++	MOVQ	BP, (5*8)(SP)	\
++	LEAQ	(5*8)(SP), BP	\
++	MOVQ	BX, (0*8)(SP)	\
++	MOVQ	R12, (1*8)(SP)	\
++	MOVQ	R13, (2*8)(SP)	\
++	MOVQ	R14, (3*8)(SP)	\
++	MOVQ	R15, (4*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*8)(SP), BX	\
++	MOVQ	(1*8)(SP), R12	\
++	MOVQ	(2*8)(SP), R13	\
++	MOVQ	(3*8)(SP), R14	\
++	MOVQ	(4*8)(SP), R15	\
++	MOVQ	(5*8)(SP), BP	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
++
++#endif
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
+new file mode 100644
+index 00000000000000..5d5061ec1dbf8c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
+@@ -0,0 +1,39 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
++//
++// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
++//
++// R29 is not saved because Go will save and restore it.
++
++#define SAVE_R19_TO_R28(offset) \
++	STP	(R19, R20), ((offset)+0*8)(RSP) \
++	STP	(R21, R22), ((offset)+2*8)(RSP) \
++	STP	(R23, R24), ((offset)+4*8)(RSP) \
++	STP	(R25, R26), ((offset)+6*8)(RSP) \
++	STP	(R27, g), ((offset)+8*8)(RSP)
++#define RESTORE_R19_TO_R28(offset) \
++	LDP	((offset)+0*8)(RSP), (R19, R20) \
++	LDP	((offset)+2*8)(RSP), (R21, R22) \
++	LDP	((offset)+4*8)(RSP), (R23, R24) \
++	LDP	((offset)+6*8)(RSP), (R25, R26) \
++	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
++#define SAVE_F8_TO_F15(offset) \
++	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
++	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
++	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
++	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
++#define RESTORE_F8_TO_F15(offset) \
++	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
++	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
++	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
++	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
+new file mode 100644
+index 00000000000000..2b7eb57f8ae783
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
+@@ -0,0 +1,39 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_amd64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++// This signature is known to SWIG, so we can't change it.
++TEXT crosscall2(SB), NOSPLIT, $0-0
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// Make room for arguments to cgocallback.
++	ADJSP $0x18
++
++#ifndef GOOS_windows
++	MOVQ DI, 0x0(SP) // fn
++	MOVQ SI, 0x8(SP) // arg
++
++	// Skip n in DX.
++	MOVQ CX, 0x10(SP) // ctxt
++
++#else
++	MOVQ CX, 0x0(SP) // fn
++	MOVQ DX, 0x8(SP) // arg
++
++	// Skip n in R8.
++	MOVQ R9, 0x10(SP) // ctxt
++
++#endif
++
++	CALL runtime·cgocallback(SB)
++
++	ADJSP $-0x18
++	POP_REGS_HOST_TO_ABI0()
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
+new file mode 100644
+index 00000000000000..50e5261d922c56
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
+@@ -0,0 +1,36 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_arm64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * We still need to save all callee save register as before, and then
++ *  push 3 args for fn (R0, R1, R3), skipping R2.
++ * Also note that at procedure entry in gc world, 8(RSP) will be the
++ *  first arg.
++ */
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	// Initialize Go ABI environment
++	BL runtime·load_g(SB)
++	BL runtime·cgocallback(SB)
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
+new file mode 100644
+index 00000000000000..e48722128a09d7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
+@@ -0,0 +1,93 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	_ "unsafe"
++)
++
++// TODO: decide if we need _runtime_cgo_panic_internal
++
++//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
++//go:linkname _cgo_init _cgo_init
++var x_cgo_init_trampoline byte
++var _cgo_init = &x_cgo_init_trampoline
++
++// Creates a new system thread without updating any Go state.
++//
++// This method is invoked during shared library loading to create a new OS
++// thread to perform the runtime initialization. This method is similar to
++// _cgo_sys_thread_start except that it doesn't update any Go state.
++
++//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
++//go:linkname _cgo_thread_start _cgo_thread_start
++var x_cgo_thread_start_trampoline byte
++var _cgo_thread_start = &x_cgo_thread_start_trampoline
++
++// Notifies that the runtime has been initialized.
++//
++// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
++// to ensure that the runtime has been initialized before the CGO call is
++// executed. This is necessary for shared libraries where we kickoff runtime
++// initialization in a separate thread and return without waiting for this
++// thread to complete the init.
++
++//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
++//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
++var x_cgo_notify_runtime_init_done_trampoline byte
++var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
++
++// Indicates whether a dummy thread key has been created or not.
++//
++// When calling go exported function from C, we register a destructor
++// callback, for a dummy thread key, by using pthread_key_create.
++
++//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
++var x_cgo_pthread_key_created uintptr
++var _cgo_pthread_key_created = &x_cgo_pthread_key_created
++
++// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
++// It's for the runtime package to call at init time.
++func set_crosscall2() {
++	// nothing needs to be done here for fakecgo
++	// because it's possible to just call cgocallback directly
++}
++
++//go:linkname _set_crosscall2 runtime.set_crosscall2
++var _set_crosscall2 = set_crosscall2
++
++// Store the g into the thread-specific value.
++// So that pthread_key_destructor will dropm when the thread is exiting.
++
++//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
++//go:linkname _cgo_bindm _cgo_bindm
++var x_cgo_bindm_trampoline byte
++var _cgo_bindm = &x_cgo_bindm_trampoline
++
++// TODO: decide if we need x_cgo_set_context_function
++// TODO: decide if we need _cgo_yield
++
++var (
++	// In Go 1.20 the race detector was rewritten to pure Go
++	// on darwin. This means that when CGO_ENABLED=0 is set
++	// fakecgo is built with race detector code. This is not
++	// good since this code is pretending to be C. The go:norace
++	// pragma is not enough, since it only applies to the native
++	// ABIInternal function. The ABIO wrapper (which is necessary,
++	// since all references to text symbols from assembly will use it)
++	// does not inherit the go:norace pragma, so it will still be
++	// instrumented by the race detector.
++	//
++	// To circumvent this issue, using closure calls in the
++	// assembly, which forces the compiler to use the ABIInternal
++	// native implementation (which has go:norace) instead.
++	threadentry_call        = threadentry
++	x_cgo_init_call         = x_cgo_init
++	x_cgo_setenv_call       = x_cgo_setenv
++	x_cgo_unsetenv_call     = x_cgo_unsetenv
++	x_cgo_thread_start_call = x_cgo_thread_start
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+new file mode 100644
+index 00000000000000..b631396bd2ffe7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+@@ -0,0 +1,14 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import _ "unsafe"
++
++// setg_trampoline calls setg with the G provided
++func setg_trampoline(setg uintptr, G uintptr)
++
++// call5 takes fn the C function and 5 arguments and calls the function with those arguments
++func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
+new file mode 100644
+index 00000000000000..9b0650d53777bd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
+@@ -0,0 +1,3 @@
++{
++  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
+new file mode 100644
+index 00000000000000..88c4cdf9ec04cc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
+@@ -0,0 +1,6 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package fakecgo
++
++//go:generate go run update_tool.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
+new file mode 100644
+index 00000000000000..d0868f0f790351
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
+@@ -0,0 +1,88 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++//go:norace
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	size = pthread_get_stacksize_np(pthread_self())
++	pthread_attr_init(&attr)
++	pthread_attr_setstacksize(&attr, size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
++
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++//go:norace
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	// TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_thread_exception_port();
++	//#endif
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++//go:norace
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++
++	setg_func = setg
++	size = pthread_get_stacksize_np(pthread_self())
++	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
++
++	//TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_mach_exception_handler();
++	//	darwin_arm_init_thread_exception_port();
++	//	init_working_dir();
++	//#endif
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+new file mode 100644
+index 00000000000000..f6fa2328af41bc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+@@ -0,0 +1,72 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++var (
++	pthread_g pthread_key_t
++
++	runtime_init_cond = PTHREAD_COND_INITIALIZER
++	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
++	runtime_init_done int
++)
++
++//go:nosplit
++//go:norace
++func x_cgo_notify_runtime_init_done() {
++	pthread_mutex_lock(&runtime_init_mu)
++	runtime_init_done = 1
++	pthread_cond_broadcast(&runtime_init_cond)
++	pthread_mutex_unlock(&runtime_init_mu)
++}
++
++// Store the g into a thread-specific value associated with the pthread key pthread_g.
++// And pthread_key_destructor will dropm when the thread is exiting.
++//
++//go:norace
++func x_cgo_bindm(g unsafe.Pointer) {
++	// We assume this will always succeed, otherwise, there might be extra M leaking,
++	// when a C thread exits after a cgo call.
++	// We only invoke this function once per thread in runtime.needAndBindM,
++	// and the next calls just reuse the bound m.
++	pthread_setspecific(pthread_g, g)
++}
++
++// _cgo_try_pthread_create retries pthread_create if it fails with
++// EAGAIN.
++//
++//go:nosplit
++//go:norace
++func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
++	var ts syscall.Timespec
++	// tries needs to be the same type as syscall.Timespec.Nsec
++	// but the fields are int32 on 32bit and int64 on 64bit.
++	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
++	tries := ts.Nsec
++	var err int
++
++	for tries = 0; tries < 20; tries++ {
++		// inlined this call because it ran out of stack when inlining was disabled
++		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
++		if err == 0 {
++			// inlined this call because it ran out of stack when inlining was disabled
++			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
++			return 0
++		}
++		if err != int(syscall.EAGAIN) {
++			return err
++		}
++		ts.Sec = 0
++		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
++		// inlined this call because it ran out of stack when inlining was disabled
++		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
++	}
++	return int(syscall.EAGAIN)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
+new file mode 100644
+index 00000000000000..a79441edffbcb9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
+@@ -0,0 +1,18 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++//go:nosplit
++//go:norace
++func x_cgo_setenv(arg *[2]*byte) {
++	setenv(arg[0], arg[1], 1)
++}
++
++//go:nosplit
++//go:norace
++func x_cgo_unsetenv(arg *[1]*byte) {
++	unsetenv(arg[0])
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
+new file mode 100644
+index 00000000000000..1d59e7f6b628d1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
+@@ -0,0 +1,38 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import "unsafe"
++
++// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
++
++// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
++// This get's called instead of the go code for creating new threads
++// -> pthread_* stuff is used, so threads are setup correctly for C
++// If this is missing, TLS is only setup correctly on thread 1!
++// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
++//
++//go:nosplit
++//go:norace
++func x_cgo_thread_start(arg *ThreadStart) {
++	var ts *ThreadStart
++	// Make our own copy that can persist after we return.
++	//	_cgo_tsan_acquire();
++	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
++	//	_cgo_tsan_release();
++	if ts == nil {
++		println("fakecgo: out of memory in thread_start")
++		abort()
++	}
++	// *ts = *arg would cause a writebarrier so copy using slices
++	const ptrSize = unsafe.Sizeof(uintptr(0))
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
++	for i := range s2 {
++		s1[i] = s2[i]
++	}
++	_cgo_sys_thread_start(ts) // OS-dependent half
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
+new file mode 100644
+index 00000000000000..76f7ef6dc58c7c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
+@@ -0,0 +1,19 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++// The runtime package contains an uninitialized definition
++// for runtime·iscgo. Override it to tell the runtime we're here.
++// There are various function pointers that should be set too,
++// but those depend on dynamic linker magic to get initialized
++// correctly, and sometimes they break. This variable is a
++// backup: it depends only on old C style static linking rules.
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname _iscgo runtime.iscgo
++var _iscgo bool = true
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
+new file mode 100644
+index 00000000000000..001b698842a36c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
+@@ -0,0 +1,39 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++type (
++	size_t uintptr
++	// Sources:
++	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
++	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
++	sigset_t       [128]byte
++	pthread_attr_t [64]byte
++	pthread_t      int
++	pthread_key_t  uint64
++)
++
++// for pthread_sigmask:
++
++type sighow int32
++
++const (
++	SIG_BLOCK   sighow = 0
++	SIG_UNBLOCK sighow = 1
++	SIG_SETMASK sighow = 2
++)
++
++type G struct {
++	stacklo uintptr
++	stackhi uintptr
++}
++
++type ThreadStart struct {
++	g   *G
++	tls *uintptr
++	fn  uintptr
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
+new file mode 100644
+index 00000000000000..ecdcb2e7852560
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
+@@ -0,0 +1,26 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_mutex_t struct {
++		sig    int64
++		opaque [56]byte
++	}
++	pthread_cond_t struct {
++		sig    int64
++		opaque [40]byte
++	}
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
++)
++
++type stack_t struct {
++	/* not implemented */
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
+new file mode 100644
+index 00000000000000..e761fecfb89280
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
+@@ -0,0 +1,19 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
++//go:linkname _cgo_setenv runtime._cgo_setenv
++var x_cgo_setenv_trampoline byte
++var _cgo_setenv = &x_cgo_setenv_trampoline
++
++//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
++//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
++var x_cgo_unsetenv_trampoline byte
++var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+new file mode 100644
+index 00000000000000..098f56ce5e6b77
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,107 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
++
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++temporary register is R11
++*/
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_amd64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	JMP ·x_cgo_notify_runtime_init_done(SB)
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	JMP ·x_cgo_bindm(SB)
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), R11
++	XORL AX, AX
++	CALL R11
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// X15 is designated by Go as a fixed zero register.
++	// Calling directly into ABIInternal, ensure it is zero.
++	PXOR X15, X15
++
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++
++	POP_REGS_HOST_TO_ABI0()
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), R11
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL R11
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..970f3fd9a1ef0d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,81 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_arm64.h"
++
++// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
++// R9 is used as a temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R9
++	CALL R9
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++
++	MOVD ·threadentry_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	MOVD $0, R0                    // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	ADD $(8*24), RSP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R9
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R9
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
+new file mode 100644
+index 00000000000000..3f720df236e392
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
+@@ -0,0 +1,165 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++//go:nosplit
++//go:norace
++func malloc(size uintptr) unsafe.Pointer {
++	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
++}
++
++//go:nosplit
++//go:norace
++func free(ptr unsafe.Pointer) {
++	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func setenv(name *byte, value *byte, overwrite int32) int32 {
++	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func unsetenv(name *byte) int32 {
++	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func sigfillset(set *sigset_t) int32 {
++	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
++	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func abort() {
++	call5(abortABI0, 0, 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_init(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
++	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_detach(thread pthread_t) int32 {
++	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
++	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
++	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
++	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
++}
++
++//go:linkname _malloc _malloc
++var _malloc uint8
++var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
++
++//go:linkname _free _free
++var _free uint8
++var freeABI0 = uintptr(unsafe.Pointer(&_free))
++
++//go:linkname _setenv _setenv
++var _setenv uint8
++var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
++
++//go:linkname _unsetenv _unsetenv
++var _unsetenv uint8
++var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
++
++//go:linkname _sigfillset _sigfillset
++var _sigfillset uint8
++var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
++
++//go:linkname _nanosleep _nanosleep
++var _nanosleep uint8
++var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
++
++//go:linkname _abort _abort
++var _abort uint8
++var abortABI0 = uintptr(unsafe.Pointer(&_abort))
++
++//go:linkname _pthread_attr_init _pthread_attr_init
++var _pthread_attr_init uint8
++var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
++
++//go:linkname _pthread_create _pthread_create
++var _pthread_create uint8
++var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
++
++//go:linkname _pthread_detach _pthread_detach
++var _pthread_detach uint8
++var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
++
++//go:linkname _pthread_sigmask _pthread_sigmask
++var _pthread_sigmask uint8
++var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
++
++//go:linkname _pthread_mutex_lock _pthread_mutex_lock
++var _pthread_mutex_lock uint8
++var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
++
++//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
++var _pthread_mutex_unlock uint8
++var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
++
++//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
++var _pthread_cond_broadcast uint8
++var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
++
++//go:linkname _pthread_setspecific _pthread_setspecific
++var _pthread_setspecific uint8
++var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+new file mode 100644
+index 00000000000000..960f8168eb88d7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
+@@ -0,0 +1,59 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
++
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
++
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
+new file mode 100644
+index 00000000000000..35ef7ac11cb955
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
+@@ -0,0 +1,19 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
++
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
++
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
+new file mode 100644
+index 00000000000000..c59e0dce68c449
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
+@@ -0,0 +1,55 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && darwin
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_malloc(SB)
++
++TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_free(SB)
++
++TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setenv(SB)
++
++TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_unsetenv(SB)
++
++TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigfillset(SB)
++
++TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_nanosleep(SB)
++
++TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_abort(SB)
++
++TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_init(SB)
++
++TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_create(SB)
++
++TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_detach(SB)
++
++TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_sigmask(SB)
++
++TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_lock(SB)
++
++TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_unlock(SB)
++
++TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_cond_broadcast(SB)
++
++TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_setspecific(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+new file mode 100644
+index 00000000000000..74ee18d383784e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
+@@ -0,0 +1,9 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Package security provides a Go interface to the Security framework
++package security
++
++//go:generate go run ../../cmd/checkheader shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -package security --noerrors shims.h
++//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+new file mode 100644
+index 00000000000000..d37be58038a718
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
+@@ -0,0 +1,107 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// Security framework C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zsecurity.h" instead.
++
++#ifndef _GO_SECURITY_SHIMS_H // only include this header once
++#define _GO_SECURITY_SHIMS_H
++
++#include <stdbool.h> // bool
++#include <stdint.h>  // uint64_t
++#include <stdlib.h>  // size_t
++
++// The following includes are used by the checkheader tool.
++// #include <Security/Security.h>
++
++typedef unsigned char Boolean;
++typedef void *SecRandomRef;
++typedef void *SecKeyRef;
++typedef void *CFDataRef;
++typedef void *CFTypeRef;
++typedef void *CFStringRef;
++typedef void *CFDictionaryRef;
++typedef void *CFMutableDictionaryRef;
++typedef void *CFNumberRef;
++typedef void *CFErrorRef;
++typedef void *CFAllocatorRef;
++typedef void *CFDictionaryKeyCallBacks;
++typedef void *CFDictionaryValueCallBacks;
++typedef long CFIndex;
++typedef CFStringRef SecKeyAlgorithm;
++
++typedef enum {
++  kSecKeyOperationTypeSign = 0,
++  kSecKeyOperationTypeVerify = 1,
++  kSecKeyOperationTypeEncrypt = 2,
++  kSecKeyOperationTypeDecrypt = 3,
++} SecKeyOperationType;
++
++typedef enum {
++  kCFStringEncodingUTF8 = 0x08000100
++} CFStringEncoding;
++
++typedef enum {
++  kCFNumberLongType = 10
++} CFNumberType;
++
++extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
++extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
++extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
++// PSS
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512 __attribute__((framework(Security, A)));
++// RAW
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw __attribute__((framework(Security, A)));
++// PKCS1v15
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw __attribute__((framework(Security, A)));
++// OAEP
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384 __attribute__((framework(Security, A)));
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512 __attribute__((framework(Security, A)));
++// ECDSA
++extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962 __attribute__((framework(Security, A)));
++
++int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
++SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
++SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
++Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
++size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
++
++CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((noescape, nocallback, framework(CoreFoundation, A), slice(bytes, length)));
++CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
++CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((noescape, nocallback, framework(CoreFoundation, A)));
++CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
++void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
++void CFDictionarySetValue(CFMutableDictionaryRef theDict, const void *key, const void *value) __attribute__((framework(CoreFoundation, A)));
++CFStringRef CFErrorCopyDescription(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++const char *CFStringGetCStringPtr(CFStringRef str, CFStringEncoding encoding) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFStringGetLength(CFStringRef str) __attribute__((framework(CoreFoundation, A)));
++CFIndex CFErrorGetCode(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++
++#endif // _GO_SECURITY_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..3a03e583346c1c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package security
++
++import (
++	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
++)
++
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return xsyscall.SyscallN(errType, fn, args...)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
+new file mode 100644
+index 00000000000000..a74278d02fd6ef
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
+@@ -0,0 +1,127 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zsecurity.h"
++
++CFDataRef CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
++const uint8_t* CFDataGetBytePtr(CFDataRef);
++CFIndex CFDataGetLength(CFDataRef);
++CFDictionaryRef CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++void CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
++CFStringRef CFErrorCopyDescription(CFErrorRef);
++CFIndex CFErrorGetCode(CFErrorRef);
++CFNumberRef CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
++void CFRelease(CFTypeRef);
++const char* CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
++CFIndex CFStringGetLength(CFStringRef);
++CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
++SecKeyRef SecKeyCopyPublicKey(SecKeyRef);
++CFDataRef SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++CFDataRef SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
++CFDataRef SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
++size_t SecKeyGetBlockSize(SecKeyRef);
++Boolean SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
++Boolean SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
++int SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
++
++CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef _arg0, const uint8_t* _arg1, CFIndex _arg2) {
++	return CFDataCreate(_arg0, _arg1, _arg2);
++}
++
++const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef _arg0) {
++	return CFDataGetBytePtr(_arg0);
++}
++
++CFIndex _mkcgo_CFDataGetLength(CFDataRef _arg0) {
++	return CFDataGetLength(_arg0);
++}
++
++CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef _arg0, const void** _arg1, const void** _arg2, CFIndex _arg3, const CFDictionaryKeyCallBacks* _arg4, const CFDictionaryValueCallBacks* _arg5) {
++	return CFDictionaryCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++}
++
++CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef _arg0, CFIndex _arg1, const CFDictionaryKeyCallBacks* _arg2, const CFDictionaryValueCallBacks* _arg3) {
++	return CFDictionaryCreateMutable(_arg0, _arg1, _arg2, _arg3);
++}
++
++void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef _arg0, const void* _arg1, const void* _arg2) {
++	CFDictionarySetValue(_arg0, _arg1, _arg2);
++}
++
++CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef _arg0) {
++	return CFErrorCopyDescription(_arg0);
++}
++
++CFIndex _mkcgo_CFErrorGetCode(CFErrorRef _arg0) {
++	return CFErrorGetCode(_arg0);
++}
++
++CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef _arg0, CFNumberType _arg1, const void* _arg2) {
++	return CFNumberCreate(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_CFRelease(CFTypeRef _arg0) {
++	CFRelease(_arg0);
++}
++
++const char* _mkcgo_CFStringGetCStringPtr(CFStringRef _arg0, CFStringEncoding _arg1) {
++	return CFStringGetCStringPtr(_arg0, _arg1);
++}
++
++CFIndex _mkcgo_CFStringGetLength(CFStringRef _arg0) {
++	return CFStringGetLength(_arg0);
++}
++
++CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef _arg0, CFErrorRef* _arg1) {
++	return SecKeyCopyExternalRepresentation(_arg0, _arg1);
++}
++
++SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef _arg0) {
++	return SecKeyCopyPublicKey(_arg0);
++}
++
++CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateDecryptedData(_arg0, _arg1, _arg2, _arg3);
++}
++
++CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateEncryptedData(_arg0, _arg1, _arg2, _arg3);
++}
++
++SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef _arg0, CFErrorRef* _arg1) {
++	return SecKeyCreateRandomKey(_arg0, _arg1);
++}
++
++CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
++	return SecKeyCreateSignature(_arg0, _arg1, _arg2, _arg3);
++}
++
++SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef _arg0, CFDictionaryRef _arg1, CFErrorRef* _arg2) {
++	return SecKeyCreateWithData(_arg0, _arg1, _arg2);
++}
++
++size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef _arg0) {
++	return SecKeyGetBlockSize(_arg0);
++}
++
++Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef _arg0, SecKeyOperationType _arg1, SecKeyAlgorithm _arg2) {
++	return SecKeyIsAlgorithmSupported(_arg0, _arg1, _arg2);
++}
++
++Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFDataRef _arg3, CFErrorRef* _arg4) {
++	return SecKeyVerifySignature(_arg0, _arg1, _arg2, _arg3, _arg4);
++}
++
++int _mkcgo_SecRandomCopyBytes(SecRandomRef _arg0, size_t _arg1, unsigned char* _arg2) {
++	return SecRandomCopyBytes(_arg0, _arg1, _arg2);
++}
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
+new file mode 100644
+index 00000000000000..41aa0341b8a2b2
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
+@@ -0,0 +1,21 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++package security
++
++const (
++	KSecKeyOperationTypeSign    SecKeyOperationType = 0
++	KSecKeyOperationTypeVerify  SecKeyOperationType = 1
++	KSecKeyOperationTypeEncrypt SecKeyOperationType = 2
++	KSecKeyOperationTypeDecrypt SecKeyOperationType = 3
++)
++
++const (
++	KCFStringEncodingUTF8 CFStringEncoding = 0x08000100
++)
++
++const (
++	KCFNumberLongType CFNumberType = 10
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
+new file mode 100644
+index 00000000000000..8a2524b3cd0fe6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
+@@ -0,0 +1,98 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
++
++#include <stdbool.h>
++#include <stdint.h>
++#include <stdlib.h>
++
++typedef unsigned char Boolean;
++typedef void* SecRandomRef;
++typedef void* SecKeyRef;
++typedef void* CFDataRef;
++typedef void* CFTypeRef;
++typedef void* CFStringRef;
++typedef void* CFDictionaryRef;
++typedef void* CFMutableDictionaryRef;
++typedef void* CFNumberRef;
++typedef void* CFErrorRef;
++typedef void* CFAllocatorRef;
++typedef void* CFDictionaryKeyCallBacks;
++typedef void* CFDictionaryValueCallBacks;
++typedef long CFIndex;
++typedef CFStringRef SecKeyAlgorithm;
++
++extern const CFAllocatorRef kCFAllocatorDefault;
++extern const SecRandomRef kSecRandomDefault;
++extern const CFStringRef kSecAttrKeyTypeRSA;
++extern const CFStringRef kSecAttrKeyClassPublic;
++extern const CFStringRef kSecAttrKeyClassPrivate;
++extern const CFStringRef kSecAttrKeyType;
++extern const CFStringRef kSecAttrKeySizeInBits;
++extern const CFStringRef kSecAttrKeyClass;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512;
++extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384;
++extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512;
++extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962;
++
++typedef enum {
++	kSecKeyOperationTypeSign = 0,
++	kSecKeyOperationTypeVerify = 1,
++	kSecKeyOperationTypeEncrypt = 2,
++	kSecKeyOperationTypeDecrypt = 3,
++} SecKeyOperationType;
++
++typedef enum {
++	kCFStringEncodingUTF8 = 0x08000100,
++} CFStringEncoding;
++
++typedef enum {
++	kCFNumberLongType = 10,
++} CFNumberType;
++
++uintptr_t mkcgo_err_retrieve();
++
++CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
++const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef);
++CFIndex _mkcgo_CFDataGetLength(CFDataRef);
++CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
++void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
++CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef);
++CFIndex _mkcgo_CFErrorGetCode(CFErrorRef);
++CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
++void _mkcgo_CFRelease(CFTypeRef);
++const char* _mkcgo_CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
++CFIndex _mkcgo_CFStringGetLength(CFStringRef);
++CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef);
++CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
++CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
++SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
++size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef);
++Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
++Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
++int _mkcgo_SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
++
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
+new file mode 100644
+index 00000000000000..5b021a6afed14b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
+@@ -0,0 +1,172 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++#include "textflag.h"
++
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_CFDataCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataCreate(SB)
++
++GLOBL ·_mkcgo_CFDataCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetBytePtr_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataGetBytePtr(SB)
++
++GLOBL ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetBytePtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFDataGetLength_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDataGetLength(SB)
++
++GLOBL ·_mkcgo_CFDataGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDataGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionaryCreate(SB)
++
++GLOBL ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionaryCreateMutable_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionaryCreateMutable(SB)
++
++GLOBL ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreateMutable_trampoline<>(SB)
++
++TEXT _mkcgo_CFDictionarySetValue_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFDictionarySetValue(SB)
++
++GLOBL ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionarySetValue_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorCopyDescription_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFErrorCopyDescription(SB)
++
++GLOBL ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorCopyDescription_trampoline<>(SB)
++
++TEXT _mkcgo_CFErrorGetCode_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFErrorGetCode(SB)
++
++GLOBL ·_mkcgo_CFErrorGetCode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFErrorGetCode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorGetCode_trampoline<>(SB)
++
++TEXT _mkcgo_CFNumberCreate_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFNumberCreate(SB)
++
++GLOBL ·_mkcgo_CFNumberCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFNumberCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFNumberCreate_trampoline<>(SB)
++
++TEXT _mkcgo_CFRelease_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFRelease(SB)
++
++GLOBL ·_mkcgo_CFRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFRelease_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetCStringPtr_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFStringGetCStringPtr(SB)
++
++GLOBL ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetCStringPtr_trampoline<>(SB)
++
++TEXT _mkcgo_CFStringGetLength_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_CFStringGetLength(SB)
++
++GLOBL ·_mkcgo_CFStringGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_CFStringGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetLength_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCopyExternalRepresentation(SB)
++
++GLOBL ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCopyPublicKey(SB)
++
++GLOBL ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyPublicKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateDecryptedData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateEncryptedData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateRandomKey_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateRandomKey(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateRandomKey_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateSignature_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateSignature(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateSignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyCreateWithData_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyCreateWithData(SB)
++
++GLOBL ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateWithData_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyGetBlockSize_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyGetBlockSize(SB)
++
++GLOBL ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyGetBlockSize_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyIsAlgorithmSupported(SB)
++
++GLOBL ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB)
++
++TEXT _mkcgo_SecKeyVerifySignature_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecKeyVerifySignature(SB)
++
++GLOBL ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyVerifySignature_trampoline<>(SB)
++
++TEXT _mkcgo_SecRandomCopyBytes_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_SecRandomCopyBytes(SB)
++
++GLOBL ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecRandomCopyBytes_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
+new file mode 100644
+index 00000000000000..c17b764ee90662
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
+@@ -0,0 +1,388 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++package security
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#cgo darwin LDFLAGS: -framework CoreFoundation
++#cgo darwin LDFLAGS: -framework Security
++
++#include "zsecurity.h"
++#cgo noescape _mkcgo_CFDataCreate
++#cgo nocallback _mkcgo_CFDataCreate
++#cgo noescape _mkcgo_CFNumberCreate
++#cgo nocallback _mkcgo_CFNumberCreate
++#cgo noescape _mkcgo_SecKeyCopyExternalRepresentation
++#cgo nocallback _mkcgo_SecKeyCopyExternalRepresentation
++#cgo noescape _mkcgo_SecKeyCreateDecryptedData
++#cgo nocallback _mkcgo_SecKeyCreateDecryptedData
++#cgo noescape _mkcgo_SecKeyCreateEncryptedData
++#cgo nocallback _mkcgo_SecKeyCreateEncryptedData
++#cgo noescape _mkcgo_SecKeyCreateRandomKey
++#cgo nocallback _mkcgo_SecKeyCreateRandomKey
++#cgo noescape _mkcgo_SecKeyCreateSignature
++#cgo nocallback _mkcgo_SecKeyCreateSignature
++#cgo noescape _mkcgo_SecKeyCreateWithData
++#cgo nocallback _mkcgo_SecKeyCreateWithData
++#cgo noescape _mkcgo_SecKeyVerifySignature
++#cgo nocallback _mkcgo_SecKeyVerifySignature
++#cgo noescape _mkcgo_SecRandomCopyBytes
++#cgo nocallback _mkcgo_SecRandomCopyBytes
++*/
++import "C"
++import "unsafe"
++
++//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
++//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
++//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
++//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
++//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
++//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
++//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
++//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
++//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++
++var (
++	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
++	_mkcgo_kSecRandomDefault                                SecRandomRef
++	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
++	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
++	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
++	_mkcgo_kSecAttrKeyType                                  CFStringRef
++	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
++	_mkcgo_kSecAttrKeyClass                                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
++)
++
++//go:noinline
++func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++}
++
++var (
++	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
++	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
++	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
++	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
++	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
++	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
++	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
++	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
++	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
++	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
++	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
++)
++
++type Boolean = C.Boolean
++type CFAllocatorRef = C.CFAllocatorRef
++type CFDataRef = C.CFDataRef
++type CFDictionaryKeyCallBacks = C.CFDictionaryKeyCallBacks
++type CFDictionaryRef = C.CFDictionaryRef
++type CFDictionaryValueCallBacks = C.CFDictionaryValueCallBacks
++type CFErrorRef = C.CFErrorRef
++type CFIndex = C.CFIndex
++type CFMutableDictionaryRef = C.CFMutableDictionaryRef
++type CFNumberRef = C.CFNumberRef
++type CFNumberType = C.CFNumberType
++type CFStringEncoding = C.CFStringEncoding
++type CFStringRef = C.CFStringRef
++type CFTypeRef = C.CFTypeRef
++type SecKeyAlgorithm = C.SecKeyAlgorithm
++type SecKeyOperationType = C.SecKeyOperationType
++type SecKeyRef = C.SecKeyRef
++type SecRandomRef = C.SecRandomRef
++
++//go:nosplit
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++}
++
++func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
++	return C._mkcgo_CFDataCreate(allocator, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(bytes))), CFIndex(len(bytes)))
++}
++
++func CFDataGetBytePtr(data CFDataRef) *uint8 {
++	return (*uint8)(unsafe.Pointer(C._mkcgo_CFDataGetBytePtr(data)))
++}
++
++func CFDataGetLength(data CFDataRef) CFIndex {
++	return C._mkcgo_CFDataGetLength(data)
++}
++
++func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
++	return C._mkcgo_CFDictionaryCreate(allocator, keys, values, numValues, keyCallBacks, valueCallBacks)
++}
++
++func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
++	return C._mkcgo_CFDictionaryCreateMutable(allocator, capacity, keyCallBacks, valueCallBacks)
++}
++
++func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
++	C._mkcgo_CFDictionarySetValue(theDict, key, value)
++}
++
++func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
++	return C._mkcgo_CFErrorCopyDescription(__error)
++}
++
++func CFErrorGetCode(__error CFErrorRef) CFIndex {
++	return C._mkcgo_CFErrorGetCode(__error)
++}
++
++func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
++	return C._mkcgo_CFNumberCreate(allocator, theType, valuePtr)
++}
++
++func CFRelease(cf CFTypeRef) {
++	C._mkcgo_CFRelease(cf)
++}
++
++func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_CFStringGetCStringPtr(str, encoding)))
++}
++
++func CFStringGetLength(str CFStringRef) CFIndex {
++	return C._mkcgo_CFStringGetLength(str)
++}
++
++func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCopyExternalRepresentation(key, __error)
++}
++
++func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
++	return C._mkcgo_SecKeyCopyPublicKey(key)
++}
++
++func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateDecryptedData(key, algorithm, ciphertext, __error)
++}
++
++func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateEncryptedData(key, algorithm, plaintext, __error)
++}
++
++func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	return C._mkcgo_SecKeyCreateRandomKey(parameters, __error)
++}
++
++func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
++	return C._mkcgo_SecKeyCreateSignature(key, algorithm, data, __error)
++}
++
++func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	return C._mkcgo_SecKeyCreateWithData(keyData, attributes, __error)
++}
++
++func SecKeyGetBlockSize(key SecKeyRef) int {
++	return int(C._mkcgo_SecKeyGetBlockSize(key))
++}
++
++func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
++	return C._mkcgo_SecKeyIsAlgorithmSupported(key, operation, algorithm)
++}
++
++func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
++	return C._mkcgo_SecKeyVerifySignature(key, algorithm, signedData, signature, __error)
++}
++
++func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
++	return int32(C._mkcgo_SecRandomCopyBytes(rnd, C.size_t(len(bytes)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(bytes)))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
+new file mode 100644
+index 00000000000000..7e5d52ef2d3c63
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
+@@ -0,0 +1,466 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo
++
++package security
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++var _ = runtime.GOOS
++
++var _mkcgoAlwaysFalseSecurity bool
++var _mkcgoEscapeSinkSecurity unsafe.Pointer
++
++// mkcgoEscapePtrSecurity forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrSecurity(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseSecurity {
++		_mkcgoEscapeSinkSecurity = p
++	}
++	return p
++}
++
++type Boolean = byte
++type SecRandomRef unsafe.Pointer
++type SecKeyRef unsafe.Pointer
++type CFDataRef unsafe.Pointer
++type CFTypeRef unsafe.Pointer
++type CFStringRef unsafe.Pointer
++type CFDictionaryRef unsafe.Pointer
++type CFMutableDictionaryRef unsafe.Pointer
++type CFNumberRef unsafe.Pointer
++type CFErrorRef unsafe.Pointer
++type CFAllocatorRef unsafe.Pointer
++type CFDictionaryKeyCallBacks unsafe.Pointer
++type CFDictionaryValueCallBacks unsafe.Pointer
++type CFIndex = int64
++type SecKeyAlgorithm = CFStringRef
++
++type SecKeyOperationType int32
++type CFStringEncoding int32
++type CFNumberType int32
++
++//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
++//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
++//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
++//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
++//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
++//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
++//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
++//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
++//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++
++var (
++	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
++	_mkcgo_kSecRandomDefault                                SecRandomRef
++	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
++	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
++	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
++	_mkcgo_kSecAttrKeyType                                  CFStringRef
++	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
++	_mkcgo_kSecAttrKeyClass                                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
++	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
++	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
++)
++
++//go:noinline
++func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++
++//go:noinline
++func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++}
++
++//go:noinline
++func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
++	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++}
++
++var (
++	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
++	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
++	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
++	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
++	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
++	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
++	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
++	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
++	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
++	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
++	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
++	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
++	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
++	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
++)
++
++//go:cgo_import_dynamic _mkcgo_CFDataCreate CFDataCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetBytePtr CFDataGetBytePtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDataGetLength CFDataGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreate CFDictionaryCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionaryCreateMutable CFDictionaryCreateMutable "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFDictionarySetValue CFDictionarySetValue "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorCopyDescription CFErrorCopyDescription "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFErrorGetCode CFErrorGetCode "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFNumberCreate CFNumberCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFRelease CFRelease "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateRandomKey SecKeyCreateRandomKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateSignature SecKeyCreateSignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyCreateWithData SecKeyCreateWithData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyGetBlockSize SecKeyGetBlockSize "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyIsAlgorithmSupported SecKeyIsAlgorithmSupported "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecKeyVerifySignature SecKeyVerifySignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++//go:cgo_import_dynamic _mkcgo_SecRandomCopyBytes SecRandomCopyBytes "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++
++var _mkcgo_CFDataCreate_trampoline_addr uintptr
++
++func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_CFDataCreate_trampoline_addr, uintptr(allocator), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))), uintptr(len(bytes)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_CFDataGetBytePtr_trampoline_addr uintptr
++
++func CFDataGetBytePtr(data CFDataRef) *uint8 {
++	r0, _ := syscallN(0, _mkcgo_CFDataGetBytePtr_trampoline_addr, uintptr(data))
++	return (*uint8)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_CFDataGetLength_trampoline_addr uintptr
++
++func CFDataGetLength(data CFDataRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFDataGetLength_trampoline_addr, uintptr(data))
++	return CFIndex(r0)
++}
++
++var _mkcgo_CFDictionaryCreate_trampoline_addr uintptr
++
++func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreate_trampoline_addr, uintptr(allocator), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keys))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(values))), uintptr(numValues), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
++	return CFDictionaryRef(r0)
++}
++
++var _mkcgo_CFDictionaryCreateMutable_trampoline_addr uintptr
++
++func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
++	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreateMutable_trampoline_addr, uintptr(allocator), uintptr(capacity), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
++	return CFMutableDictionaryRef(r0)
++}
++
++var _mkcgo_CFDictionarySetValue_trampoline_addr uintptr
++
++func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
++	syscallN(0, _mkcgo_CFDictionarySetValue_trampoline_addr, uintptr(theDict), uintptr(key), uintptr(value))
++}
++
++var _mkcgo_CFErrorCopyDescription_trampoline_addr uintptr
++
++func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
++	r0, _ := syscallN(0, _mkcgo_CFErrorCopyDescription_trampoline_addr, uintptr(__error))
++	return CFStringRef(r0)
++}
++
++var _mkcgo_CFErrorGetCode_trampoline_addr uintptr
++
++func CFErrorGetCode(__error CFErrorRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFErrorGetCode_trampoline_addr, uintptr(__error))
++	return CFIndex(r0)
++}
++
++var _mkcgo_CFNumberCreate_trampoline_addr uintptr
++
++func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
++	r0, _ := syscallN(0, _mkcgo_CFNumberCreate_trampoline_addr, uintptr(allocator), uintptr(theType), uintptr(valuePtr))
++	return CFNumberRef(r0)
++}
++
++var _mkcgo_CFRelease_trampoline_addr uintptr
++
++func CFRelease(cf CFTypeRef) {
++	syscallN(0, _mkcgo_CFRelease_trampoline_addr, uintptr(cf))
++}
++
++var _mkcgo_CFStringGetCStringPtr_trampoline_addr uintptr
++
++func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
++	r0, _ := syscallN(0, _mkcgo_CFStringGetCStringPtr_trampoline_addr, uintptr(str), uintptr(encoding))
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_CFStringGetLength_trampoline_addr uintptr
++
++func CFStringGetLength(str CFStringRef) CFIndex {
++	r0, _ := syscallN(0, _mkcgo_CFStringGetLength_trampoline_addr, uintptr(str))
++	return CFIndex(r0)
++}
++
++var _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr uintptr
++
++func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr, uintptr(key), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCopyPublicKey_trampoline_addr uintptr
++
++func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCopyPublicKey_trampoline_addr, uintptr(key))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyCreateDecryptedData_trampoline_addr uintptr
++
++func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateDecryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(ciphertext), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateEncryptedData_trampoline_addr uintptr
++
++func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateEncryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(plaintext), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateRandomKey_trampoline_addr uintptr
++
++func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateRandomKey_trampoline_addr, uintptr(parameters), uintptr(unsafe.Pointer(__error)))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyCreateSignature_trampoline_addr uintptr
++
++func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateSignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(data), uintptr(unsafe.Pointer(__error)))
++	return CFDataRef(r0)
++}
++
++var _mkcgo_SecKeyCreateWithData_trampoline_addr uintptr
++
++func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
++	r0, _ := syscallN(0, _mkcgo_SecKeyCreateWithData_trampoline_addr, uintptr(keyData), uintptr(attributes), uintptr(unsafe.Pointer(__error)))
++	return SecKeyRef(r0)
++}
++
++var _mkcgo_SecKeyGetBlockSize_trampoline_addr uintptr
++
++func SecKeyGetBlockSize(key SecKeyRef) int {
++	r0, _ := syscallN(0, _mkcgo_SecKeyGetBlockSize_trampoline_addr, uintptr(key))
++	return int(r0)
++}
++
++var _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr uintptr
++
++func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
++	r0, _ := syscallN(0, _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr, uintptr(key), uintptr(operation), uintptr(algorithm))
++	return Boolean(r0)
++}
++
++var _mkcgo_SecKeyVerifySignature_trampoline_addr uintptr
++
++func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
++	r0, _ := syscallN(0, _mkcgo_SecKeyVerifySignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(signedData), uintptr(signature), uintptr(unsafe.Pointer(__error)))
++	return Boolean(r0)
++}
++
++var _mkcgo_SecRandomCopyBytes_trampoline_addr uintptr
++
++func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
++	r0, _ := syscallN(0, _mkcgo_SecRandomCopyBytes_trampoline_addr, uintptr(rnd), uintptr(len(bytes)), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))))
++	return int32(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+new file mode 100644
+index 00000000000000..512d8087daf527
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+@@ -0,0 +1,120 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++#ifdef GOOS_windows
++	MOVQ CX, 0(SP)
++
++#else
++	MOVQ DI, 0(SP)
++
++#endif
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++#ifdef GOOS_windows
++#define RegArgsN 4
++#else
++#define RegArgsN 6
++#endif
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
++	// Load pointer from stack (ABI0 calling convention)
++	// Store argument and original SP in a callee-saved register
++	MOVQ libcArgs+0(FP), R13
++	MOVQ SP, R14
++
++	// Align stack to 16 bytes
++	ANDQ $~15, SP
++
++	MOVQ libcCallInfo_fn(R13), R11
++	MOVQ libcCallInfo_n(R13), CX
++	MOVQ libcCallInfo_args(R13), R10
++
++	// Fast version, do not store args on the stack.
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
++	CMPL CX, $4; JE _4args
++
++#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
++	CMPL CX, $5; JE _5args
++	CMPL CX, $6; JE _6args
++
++#endif
++
++	// Reserve stack space for remaining args
++	MOVQ CX, R12
++	SUBQ $RegArgsN, R12
++	ADDQ $1, R12        // make even number of words for stack alignment
++	ANDQ $~1, R12
++	SHLQ $3, R12
++	SUBQ R12, SP
++
++	// Copy args to the stack.
++	// CX: count of stack arguments (n-RegArgsN)
++	// SI: &args[RegArgsN]
++	// DI: copy of RSP
++	SUBQ $RegArgsN, CX
++	MOVQ R10, SI
++	ADDQ $(8*RegArgsN), SI
++	MOVQ SP, DI
++	CLD
++	REP; MOVSQ
++
++#ifndef GOOS_windows
++_6args:
++	MOVQ (5*8)(R10), R9
++
++_5args:
++	MOVQ (4*8)(R10), R8
++
++#endif
++_4args:
++	MOVQ (3*8)(R10), CX
++
++_3args:
++	MOVQ (2*8)(R10), DX
++
++_2args:
++	MOVQ (1*8)(R10), SI
++
++_1args:
++	MOVQ (0*8)(R10), DI
++
++_0args:
++
++	XORL AX, AX // vararg: say "no float args"
++
++#ifdef GOOS_windows
++	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
++	// and 32 bytes of shadow space on the stack.
++	ADJSP $32
++	MOVQ  CX, R9
++	MOVQ  DX, R8
++	MOVQ  SI, DX
++	MOVQ  DI, CX
++
++#endif
++
++	CALL R11
++
++#ifdef GOOS_windows
++	ADJSP $-32
++
++#endif
++
++	MOVQ R14, SP // free stack space
++
++	// Return result.
++	MOVQ AX, libcCallInfo_r1(R13)
++	MOVQ DX, libcCallInfo_r2(R13)
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
+new file mode 100644
+index 00000000000000..261a7e4cb90d56
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
+@@ -0,0 +1,97 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVD R0, 8(RSP)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
++	// Save original stack pointer
++	MOVD RSP, R20
++
++	// Load pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R3
++
++	MOVD libcCallInfo_args(R3), R12
++	MOVD libcCallInfo_fn(R3), R13
++
++	// Do we have more than 8 arguments?
++	MOVD libcCallInfo_n(R3), R0
++	CMP  $0, R0; BEQ _0args
++	CMP  $1, R0; BEQ _1args
++	CMP  $2, R0; BEQ _2args
++	CMP  $3, R0; BEQ _3args
++	CMP  $4, R0; BEQ _4args
++	CMP  $5, R0; BEQ _5args
++	CMP  $6, R0; BEQ _6args
++	CMP  $7, R0; BEQ _7args
++	CMP  $8, R0; BEQ _8args
++
++	// Reserve stack space for remaining args
++	SUB $8, R0, R2
++	ADD $1, R2, R3 // make even number of words for stack alignment
++	AND $~1, R3
++	LSL $3, R3
++	SUB R3, RSP
++
++	// R4: size of stack arguments (n-8)*8
++	// R5: &args[8]
++	// R6: loop counter, from 0 to (n-8)*8
++	// R7: scratch
++	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
++	SUB  $8, R0, R4
++	LSL  $3, R4
++	ADD  $(8*8), R12, R5
++	MOVD $0, R6
++	MOVD RSP, R8
++
++stackargs:
++	MOVD (R6)(R5), R7
++	MOVD R7, (R6)(R8)
++	ADD  $8, R6
++	CMP  R6, R4
++	BNE  stackargs
++
++_8args:
++	MOVD (7*8)(R12), R7
++
++_7args:
++	MOVD (6*8)(R12), R6
++
++_6args:
++	MOVD (5*8)(R12), R5
++
++_5args:
++	MOVD (4*8)(R12), R4
++
++_4args:
++	MOVD (3*8)(R12), R3
++
++_3args:
++	MOVD (2*8)(R12), R2
++
++_2args:
++	MOVD (1*8)(R12), R1
++
++_1args:
++	MOVD (0*8)(R12), R0
++
++_0args:
++
++	BL (R13)
++
++	// Restore original stack pointer
++	MOVD R20, RSP
++
++	MOVD libcArgs+0(FP), R3
++	MOVD R0, libcCallInfo_r1(R3) // save r1
++	MOVD R1, libcCallInfo_r2(R3) // save r2
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..a9ad56e22fa2ac
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
+@@ -0,0 +1,72 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && (amd64 || arm64)
++
++package xsyscall
++
++import (
++	"unsafe"
++)
++
++//go:linkname runtime_cgocall runtime.cgocall
++
++//go:noescape
++func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
++
++//go:linkname noescape
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
++}
++
++type libcCallInfo struct {
++	fn      uintptr
++	n       uintptr // number of parameters
++	args    uintptr // parameters
++	r1, r2  uintptr // return values
++	errType uintptr
++}
++
++//go:noescape
++func syscallNAsm(libcArgs *libcCallInfo)
++
++// syscallNSystemStack performs a syscall on the system stack.
++// It can't allocate Go memory nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func syscallNSystemStack(libcArgs *libcCallInfo) {
++	syscallNAsm(libcArgs)
++}
++
++var syscallNSystemStack_trampoline byte
++var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
++
++// SyscallN performs a syscall with the given function and arguments.
++//
++// All its parameters and return values must be uintptr in order
++// for the Go compiler to automatically set the //go:uintptrkeepalive
++// directive (which we can't set manually here).
++// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
++//
++//go:nosplit
++func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	libcArgs := libcCallInfo{
++		fn:      fn,
++		n:       uintptr(len(args)),
++		errType: errType,
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
++	return libcArgs.r1, libcArgs.r2
++}
++
++// Shim syscallN calls SyscallN.
++//
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	return SyscallN(errType, fn, args...)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
+new file mode 100644
+index 00000000000000..2d4d32fca87fdb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
+@@ -0,0 +1,10 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package xsyscall
++
++import (
++	_ "github.com/microsoft/go-crypto-darwin/internal/fakecgo"
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
+new file mode 100644
+index 00000000000000..28dba16a23340e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
+@@ -0,0 +1,14 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && !(amd64 || arm64)
++
++package xsyscall
++
++// Implement a mock version of SyscallN for unsupported architectures.
++// This will simply panic to indicate that the syscall is not supported.
++
++//go:nosplit
++func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	panic("SyscallN is not supported on this architecture")
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+new file mode 100644
+index 00000000000000..5f005eda956f2c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+@@ -0,0 +1,152 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++//go:generate go run github.com/microsoft/go-crypto-darwin/cmd/gentestvectors -out vectors_test.go
++
++type cipherGCMTLS uint8
++
++const (
++	cipherGCMTLSNone cipherGCMTLS = iota
++	cipherGCMTLS12
++	cipherGCMTLS13
++)
++
++const (
++	// AES block size is the same for all key sizes
++	aesBlockSize         = commoncrypto.KCCBlockSizeAES128
++	gcmTagSize           = 16
++	gcmStandardNonceSize = 12
++	// TLS 1.2 additional data is constructed as:
++	//
++	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
++	gcmTls12AddSize = 13
++	// TLS 1.3 additional data is constructed as:
++	//
++	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
++	gcmTls13AddSize      = 5
++	gcmTlsFixedNonceSize = 4
++)
++
++type aesCipher struct {
++	key  []byte
++	kind commoncrypto.CCAlgorithm
++}
++
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	var alg commoncrypto.CCAlgorithm
++	switch len(key) {
++	case 16, 24, 32:
++		alg = commoncrypto.KCCAlgorithmAES
++	default:
++		return nil, errors.New("crypto/aes: invalid key size")
++	}
++	c := &aesCipher{
++		key:  slices.Clone(key),
++		kind: alg,
++	}
++	return c, nil
++}
++
++func (c *aesCipher) BlockSize() int { return aesBlockSize }
++
++func (c *aesCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCEncrypt,          // Operation
++		commoncrypto.CCAlgorithm(c.kind), // Algorithm
++		0,                                // Options
++		c.key,                            // Key
++		nil,                              // IV
++		src,                              // Input
++		dst,                              // Output
++		nil,                              // Output length
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/aes: encryption failed")
++	}
++}
++
++func (c *aesCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/aes: input or output block is too small")
++	}
++
++	src, dst = src[:blockSize], dst[:blockSize]
++
++	if inexactOverlap(dst, src) {
++		panic("crypto/aes: invalid buffer overlap")
++	}
++
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCDecrypt,          // Operation
++		commoncrypto.CCAlgorithm(c.kind), // Algorithm
++		0,                                // Options
++		c.key,                            // Key
++		nil,                              // IV
++		src,                              // Input
++		dst,                              // Output
++		nil,                              // Output length
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/aes: decryption failed")
++	}
++}
++
++var errOpen = errors.New("cipher: message authentication failed")
++
++func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
++func (c *aesCipher) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
++func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
++
++func (c *aesCipher) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
++
++// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
++func sliceForAppend(in []byte, n int) (head, tail []byte) {
++	if total := len(in) + n; cap(in) >= total {
++		head = in[:total]
++	} else {
++		head = make([]byte, total)
++		copy(head, in)
++	}
++	tail = head[len(in):]
++	return
++}
++
++func bigUint64(b []byte) uint64 {
++	_ = b[7] // bounds check hint to compiler; see go.dev/issue/14808
++	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+new file mode 100644
+index 00000000000000..865e22ab6a3dda
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
+@@ -0,0 +1,16 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package xcrypto
++
++// This file does not have build constraints to
++// facilitate using BigInt in Go crypto.
++// Go crypto references BigInt unconditionally,
++// even if it is not finally used.
++
++// A BigInt is the big-endian bytes from a math/big BigInt,
++// which are normalized to remove any leading 0 byte.
++// Windows BCrypt accepts this specific data format.
++// This definition allows us to avoid importing math/big.
++// Conversion between BigInt and *big.Int is in xcrypto/bbig.
++type BigInt []byte
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
+new file mode 100644
+index 00000000000000..b0ad6c0aeaff09
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
+@@ -0,0 +1,88 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	chacha20Poly1305KeySize   = 32
++	chacha20Poly1305NonceSize = 12
++	chacha20Poly1305Overhead  = 16
++)
++
++type chacha20poly1305 struct {
++	key [chacha20Poly1305KeySize]byte
++}
++
++// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if len(key) != chacha20Poly1305KeySize {
++		return nil, errors.New("chacha20poly1305: bad key length")
++	}
++	ret := new(chacha20poly1305)
++	copy(ret.key[:], key)
++	return ret, nil
++}
++
++func (c *chacha20poly1305) NonceSize() int {
++	return chacha20Poly1305NonceSize
++}
++
++func (c *chacha20poly1305) Overhead() int {
++	return chacha20Poly1305Overhead
++}
++
++func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Seal")
++	}
++	if uint64(len(plaintext)) > (1<<38)-64 {
++		panic("chacha20poly1305: plaintext too large")
++	}
++	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
++	if inexactOverlap(out, plaintext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	tag := out[len(out)-chacha20Poly1305Overhead:]
++	if cryptokit.EncryptChaChaPoly(c.key[:], plaintext, nonce, additionalData, out[:len(plaintext)], tag) != 0 {
++		panic("chacha20poly1305: encryption failed")
++	}
++	return ret
++}
++
++func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Open")
++	}
++	if len(ciphertext) < 16 {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > (1<<38)-48 {
++		panic("chacha20poly1305: ciphertext too large")
++	}
++	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
++	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
++	ret, out := sliceForAppend(dst, len(ciphertext))
++	if inexactOverlap(out, ciphertext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	var outLen int
++	if cryptokit.DecryptChaChaPoly(c.key[:], ciphertext, nonce, additionalData, tag, out, &outLen) != 0 {
++		return nil, errOpen
++	}
++	return ret[:len(dst)+outLen], nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+new file mode 100644
+index 00000000000000..d4c550b90fafae
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+@@ -0,0 +1,114 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"runtime"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++type cbcCipher struct {
++	blockSize int
++	cryptor   commoncrypto.CCCryptorRef
++}
++
++func newCBC(operation commoncrypto.CCOperation, kind commoncrypto.CCAlgorithm, key, iv []byte) *cbcCipher {
++	var blockSize int
++	switch kind {
++	case commoncrypto.KCCAlgorithmAES:
++		blockSize = aesBlockSize
++	case commoncrypto.KCCAlgorithmDES, commoncrypto.KCCAlgorithm3DES:
++		blockSize = desBlockSize
++	default:
++		panic("invalid algorithm")
++	}
++
++	// Create and initialize the cbcMode struct with CCCryptorCreateWithMode here
++	x := &cbcCipher{blockSize: blockSize}
++	status := commoncrypto.CCCryptorCreateWithMode(
++		operation,                      // Specifies whether encryption or decryption is performed (kCCEncrypt or kCCDecrypt).
++		commoncrypto.KCCModeCBC,        // Mode of operation, here explicitly set to CBC (Cipher Block Chaining).
++		commoncrypto.CCAlgorithm(kind), // The encryption algorithm (e.g., kCCAlgorithmAES128, kCCAlgorithmDES).
++		commoncrypto.CcNoPadding,       // Padding option, set to no padding; padding can be handled at a higher level if necessary.
++		iv,                             // Initialization Vector (IV) for the cipher, required for CBC mode. Should be nil for ECB mode.
++		key,                            // PEncryption key.
++		nil,                            // Tweak key, used only for XTS mode; here set to nil as it’s not required for CBC.
++		0,                              // Number of rounds, mainly for RC2 and Blowfish; not used here, so set to 0.
++		0,                              // Mode options for CTR and F8 modes; not used for CBC, so set to 0.
++		&x.cryptor,                     // Pointer to the CCCryptorRef output, which will hold the state for encryption or decryption.
++	)
++
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: CCCryptorCreateWithMode failed")
++	}
++
++	runtime.SetFinalizer(x, (*cbcCipher).finalize)
++	return x
++
++}
++
++func (x *cbcCipher) finalize() {
++	if x.cryptor != nil {
++		commoncrypto.CCCryptorRelease(x.cryptor)
++		x.cryptor = nil
++	}
++}
++
++func (x *cbcCipher) BlockSize() int { return x.blockSize }
++
++func (x *cbcCipher) CryptBlocks(dst, src []byte) {
++	if inexactOverlap(dst, src) {
++		panic("crypto/cipher: invalid buffer overlap")
++	}
++	if len(src)%x.blockSize != 0 {
++		panic("crypto/cipher: input not full blocks")
++	}
++	if len(dst) < len(src) {
++		panic("crypto/cipher: output smaller than input")
++	}
++	if len(src) == 0 {
++		return
++	}
++	var outLength int
++	status := commoncrypto.CCCryptorUpdate(
++		x.cryptor,  // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
++		src,        // Input data (source buffer) to be encrypted or decrypted.
++		dst,        // Output buffer (destination buffer) where the result will be stored.
++		&outLength, // Pointer to a variable that will contain the number of bytes written to the output buffer.
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/cipher: CCCryptorUpdate failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++func (x *cbcCipher) SetIV(iv []byte) {
++	if len(iv) != x.blockSize {
++		panic("crypto/cipher: incorrect IV length")
++	}
++	status := commoncrypto.CCCryptorReset(x.cryptor, iv)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/cipher: CCCryptorReset failed")
++	}
++	runtime.KeepAlive(x)
++}
++
++// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
++
++func anyOverlap(x, y []byte) bool {
++	return len(x) > 0 && len(y) > 0 &&
++		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
++		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++}
++
++func inexactOverlap(x, y []byte) bool {
++	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
++		return false
++	}
++	return anyOverlap(x, y)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+new file mode 100644
+index 00000000000000..c27d6db4fe472a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
+@@ -0,0 +1,111 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++const desBlockSize = commoncrypto.KCCBlockSizeDES
++
++type desCipher struct {
++	key  []byte
++	kind commoncrypto.CCAlgorithm
++}
++
++// NewDESCipher creates a new DES cipher block using the specified key (8 bytes).
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 8 {
++		return nil, errors.New("crypto/des: invalid key size for DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: commoncrypto.KCCAlgorithmDES,
++	}
++	return c, nil
++}
++
++// NewTripleDESCipher creates a new 3DES cipher block using the specified key (24 bytes).
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 24 {
++		return nil, errors.New("crypto/des: invalid key size for 3DES")
++	}
++
++	c := &desCipher{
++		key:  slices.Clone(key),
++		kind: commoncrypto.KCCAlgorithm3DES,
++	}
++	return c, nil
++}
++
++func (c *desCipher) BlockSize() int { return desBlockSize }
++
++func (c *desCipher) Encrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength int
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCEncrypt,
++		commoncrypto.CCAlgorithm(c.kind),
++		commoncrypto.KCCOptionECBMode,
++		c.key,
++		nil,
++		src[:blockSize],
++		dst[:blockSize],
++		&outLength,
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: encryption failed")
++	}
++}
++
++func (c *desCipher) Decrypt(dst, src []byte) {
++	blockSize := c.BlockSize()
++	if len(src) < blockSize || len(dst) < blockSize {
++		panic("crypto/des: input or output block is too small")
++	}
++
++	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
++		panic("crypto/des: invalid buffer overlap")
++	}
++
++	var outLength int
++	status := commoncrypto.CCCrypt(
++		commoncrypto.KCCDecrypt,
++		commoncrypto.CCAlgorithm(c.kind),
++		commoncrypto.KCCOptionECBMode,
++		c.key,
++		nil,
++		src[:blockSize],
++		dst[:blockSize],
++		&outLength,
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/des: decryption failed")
++	}
++}
++
++// CBC mode encrypter
++func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++}
++
++// CBC mode decrypter
++func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+new file mode 100644
+index 00000000000000..b14fc4ddb1c235
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
+@@ -0,0 +1,39 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import "errors"
++
++// curveToID maps a curve name to its corresponding CryptoKit curve ID.
++func curveToID(curve string) (int32, error) {
++	switch curve {
++	case "P-256":
++		return 1, nil
++	case "P-384":
++		return 2, nil
++	case "P-521":
++		return 3, nil
++	case "X25519":
++		return 0, nil
++	default:
++		return -1, errors.New("unsupported curve")
++	}
++}
++
++func curveToKeySizeInBytes(curve string) int {
++	switch curve {
++	case "P-256":
++		return (256 + 7) / 8
++	case "P-384":
++		return (384 + 7) / 8
++	case "P-521":
++		return (521 + 7) / 8
++	case "X25519":
++		return 32
++	default:
++		return 0
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+new file mode 100644
+index 00000000000000..d59db1be807ac5
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
+@@ -0,0 +1,146 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++type PublicKeyECDH struct {
++	bytes []byte
++}
++
++type PrivateKeyECDH struct {
++	pub   []byte
++	priv  []byte // For X25519: the actual private key bytes
++	curve string // Track the curve type
++}
++
++func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
++	if len(bytes) < 1 {
++		return nil, errors.New("NewPublicKeyECDH: missing key")
++	}
++
++	curveID, err := curveToID(curve)
++	if err != nil {
++		return nil, err
++	}
++
++	// Validate the public key
++	ret := cryptokit.ValidatePublicKeyECDH(curveID, bytes)
++	if ret != 0 {
++		return nil, errors.New("invalid public key")
++	}
++
++	// For all curves (including EC curves), we just store the bytes
++	// X25519 uses raw 32-byte format
++	// EC curves use uncompressed X9.63 format (0x04 || x || y)
++	return &PublicKeyECDH{bytes: slices.Clone(bytes)}, nil
++}
++
++func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
++
++// bytes expects the public key to be in uncompressed ANSI X9.63 format
++func NewPrivateKeyECDH(curve string, priv []byte) (*PrivateKeyECDH, error) {
++	curveID, err := curveToID(curve)
++	if err != nil {
++		return nil, err
++	}
++
++	// Validate the private key
++	ret := cryptokit.ValidatePrivateKeyECDH(curveID, priv)
++	if ret != 0 {
++		return nil, errors.New("invalid private key")
++	}
++
++	// Derive the public key
++	keySize := curveToKeySizeInBytes(curve)
++	var pubKeySize int
++	if curve == "X25519" {
++		pubKeySize = 32
++	} else {
++		pubKeySize = 1 + keySize*2
++	}
++
++	publicKey := make([]byte, pubKeySize)
++	ret = cryptokit.PublicKeyFromPrivateECDH(curveID, priv, publicKey)
++	if ret != 0 {
++		return nil, errors.New("failed to derive public key")
++	}
++
++	privKey := &PrivateKeyECDH{
++		pub:   publicKey,
++		priv:  slices.Clone(priv),
++		curve: curve,
++	}
++	return privKey, nil
++}
++
++func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
++	// For all curves, just return the stored public key bytes
++	return &PublicKeyECDH{
++		bytes: slices.Clone(k.pub),
++	}, nil
++}
++
++func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
++	if priv == nil || pub == nil {
++		return nil, errors.New("invalid keys")
++	}
++
++	curveID, err := curveToID(priv.curve)
++	if err != nil {
++		return nil, err
++	}
++
++	keySize := curveToKeySizeInBytes(priv.curve)
++	sharedSecret := make([]byte, keySize)
++
++	ret := cryptokit.EcdhSharedSecret(curveID, priv.priv, pub.bytes, sharedSecret)
++	if ret != 0 {
++		return nil, errors.New("ECDH: key exchange failed")
++	}
++
++	return sharedSecret, nil
++}
++
++func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, errors.New("unsupported curve")
++	}
++
++	curveID, err := curveToID(curve)
++	if err != nil {
++		return nil, nil, err
++	}
++
++	var pubKeySize int
++	if curve == "X25519" {
++		pubKeySize = 32
++	} else {
++		pubKeySize = 1 + keySize*2
++	}
++
++	privateKey := make([]byte, keySize)
++	publicKey := make([]byte, pubKeySize)
++
++	ret := cryptokit.GenerateKeyECDH(curveID, privateKey, publicKey)
++	if ret != 0 {
++		return nil, nil, errors.New("EC key generation failed")
++	}
++
++	// Store the public key in X9.63 format and the private key
++	k := &PrivateKeyECDH{
++		pub:   slices.Clone(publicKey),
++		priv:  slices.Clone(privateKey),
++		curve: curve,
++	}
++	return k, slices.Clone(privateKey), nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+new file mode 100644
+index 00000000000000..82d68bfabe9c62
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+@@ -0,0 +1,154 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++type PrivateKeyECDSA struct {
++	x     BigInt // public key x coordinate
++	y     BigInt // public key y coordinate
++	d     BigInt // private key
++	curve string // curve name
++}
++
++type PublicKeyECDSA struct {
++	x     BigInt // public key x coordinate
++	y     BigInt // public key y coordinate
++	curve string // curve name
++}
++
++func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	// Validate that x and y are of appropriate length
++	if len(x) > keySize || len(y) > keySize {
++		return nil, errors.New("public key coordinates are too large")
++	}
++	pubKey := &PublicKeyECDSA{
++		x:     x,
++		y:     y,
++		curve: curve,
++	}
++	return pubKey, nil
++}
++
++// NewPrivateKeyECDSA creates a new ECDSA private key using the provided curve name and parameters (x, y, d).
++func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, errors.New("unsupported curve")
++	}
++	// Validate that x, y, and d are of appropriate length
++	if len(x) > keySize || len(y) > keySize || len(d) > keySize {
++		return nil, errors.New("key parameters are too large")
++	}
++	privKey := &PrivateKeyECDSA{
++		x:     x,
++		y:     y,
++		d:     d,
++		curve: curve,
++	}
++	return privKey, nil
++}
++
++func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
++	keySize := curveToKeySizeInBytes(curve)
++	if keySize == 0 {
++		return nil, nil, nil, errors.New("unsupported curve")
++	}
++
++	curveID, err := curveToID(curve)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++
++	// Generate key using CryptoKit
++	xBytes := make([]byte, keySize)
++	yBytes := make([]byte, keySize)
++	dBytes := make([]byte, keySize)
++
++	ret := cryptokit.GenerateKeyECDSA(curveID, xBytes, yBytes, dBytes)
++	if ret != 0 {
++		return nil, nil, nil, errors.New("ECDSA key generation failed")
++	}
++
++	return normalizeBigInt(xBytes), normalizeBigInt(yBytes), normalizeBigInt(dBytes), nil
++}
++
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
++	if priv == nil || len(hashed) == 0 {
++		return nil, errors.New("invalid parameters")
++	}
++
++	curveID, err := curveToID(priv.curve)
++	if err != nil {
++		return nil, err
++	}
++
++	keySize := curveToKeySizeInBytes(priv.curve)
++
++	// Normalize private key to proper size
++	dBytes := make([]byte, keySize)
++	copy(dBytes[len(dBytes)-len(priv.d):], priv.d)
++
++	// Allocate signature buffer (max size for DER-encoded signature)
++	maxSigLen := 256
++	signature := make([]byte, maxSigLen)
++	sigLen := int64(0)
++
++	ret := cryptokit.EcdsaSign(curveID, dBytes, hashed, signature, &sigLen)
++	if ret != 0 {
++		return nil, errors.New("ECDSA signing failed")
++	}
++
++	if sigLen <= 0 || sigLen > int64(len(signature)) {
++		return nil, errors.New("invalid signature length")
++	}
++
++	return signature[:sigLen], nil
++}
++
++func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
++	if pub == nil || len(hashed) == 0 || len(sig) == 0 {
++		return false
++	}
++
++	curveID, err := curveToID(pub.curve)
++	if err != nil {
++		return false
++	}
++
++	keySize := curveToKeySizeInBytes(pub.curve)
++
++	// Normalize public key coordinates to proper size
++	xBytes := make([]byte, keySize)
++	yBytes := make([]byte, keySize)
++
++	// Safety check: ensure BigInts are not longer than keySize
++	if len(pub.x) > keySize || len(pub.y) > keySize {
++		return false
++	}
++
++	copy(xBytes[len(xBytes)-len(pub.x):], pub.x)
++	copy(yBytes[len(yBytes)-len(pub.y):], pub.y)
++
++	ret := cryptokit.EcdsaVerify(curveID, xBytes, yBytes, hashed, sig)
++	return ret == 1
++}
++
++func normalizeBigInt(b []byte) BigInt {
++	// Remove leading zero bytes
++	for len(b) > 0 && b[0] == 0 {
++		b = b[1:]
++	}
++	return b
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+new file mode 100644
+index 00000000000000..316ecba6792d47
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+@@ -0,0 +1,124 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"strconv"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
++	publicKeySizeEd25519 = 32
++	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
++	privateKeySizeEd25519 = 64
++	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
++	signatureSizeEd25519 = 64
++	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
++	seedSizeEd25519 = 32
++)
++
++// PublicKeyEd25519 represents an Ed25519 public key.
++type PublicKeyEd25519 []byte
++
++// PrivateKeyEd25519 represents an Ed25519 private key.
++type PrivateKeyEd25519 []byte
++
++func (k PrivateKeyEd25519) Public() PublicKeyEd25519 {
++	publicKey := make([]byte, publicKeySizeEd25519)
++	copy(publicKey, k[seedSizeEd25519:])
++	return PublicKeyEd25519(publicKey)
++}
++
++// GenerateKeyEd25519 generates a new Ed25519 private key.
++func GenerateKeyEd25519() PrivateKeyEd25519 {
++	pkeyPriv := make([]byte, privateKeySizeEd25519)
++	cryptokit.GenerateKeyEd25519(pkeyPriv)
++	return pkeyPriv
++}
++
++func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
++	if len(priv) != privateKeySizeEd25519 {
++		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
++	}
++	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
++}
++
++func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
++	if len(pub) != publicKeySizeEd25519 {
++		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
++	}
++	pkey := make([]byte, publicKeySizeEd25519)
++	result := cryptokit.NewPublicKeyEd25519(pkey, pub)
++	if result != 0 {
++		return nil, errors.New("failed to create Ed25519 public key")
++	}
++	return pkey, nil
++}
++
++func (k PublicKeyEd25519) Bytes() ([]byte, error) {
++	return k, nil
++}
++
++// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
++// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
++// package.
++// NewPrivateKeyEd25519FromSeed creates an Ed25519 private key from a seed.
++func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
++	if len(seed) != seedSizeEd25519 {
++		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
++	}
++	pkey := make([]byte, privateKeySizeEd25519)
++	result := cryptokit.NewPrivateKeyEd25519FromSeed(pkey, seed)
++	if result != 0 {
++		return nil, errors.New("failed to generate Ed25519 key from seed")
++	}
++	return pkey, nil
++}
++
++// SignEd25519 signs the message with priv and returns a signature.
++func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
++	sig := make([]byte, signatureSizeEd25519)
++	result := cryptokit.SignEd25519(priv, message, sig)
++	if result < 0 {
++		switch result {
++		case -1:
++			return nil, errors.New("invalid inputs to SignEd25519")
++		case -2:
++			return nil, errors.New("failed to reconstruct private key")
++		case -3:
++			return nil, errors.New("failed to sign the message")
++		case -4:
++			return nil, errors.New("signature buffer too small")
++		default:
++			return nil, errors.New("unknown error in SignEd25519")
++		}
++	}
++	return sig, nil
++}
++
++// VerifyEd25519 reports whether sig is a valid signature of message by pub.
++func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
++	result := cryptokit.VerifyEd25519(pub, message, sig)
++	switch result {
++	case 1:
++		return nil // Valid signature
++	case 0:
++		return errors.New("ed25519: invalid signature")
++	case -1:
++		return errors.New("invalid inputs to VerifyEd25519")
++	case -2:
++		return errors.New("failed to reconstruct public key")
++	default:
++		return errors.New("unknown error in VerifyEd25519")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+new file mode 100644
+index 00000000000000..a085303b10ac00
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+@@ -0,0 +1,339 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"slices"
++	"strconv"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++type algorithmType int
++
++const (
++	algorithmTypePSS algorithmType = iota
++	algorithmTypeRAW
++	algorithmTypePKCS1v15Enc
++	algorithmTypePKCS1v15Sig
++	algorithmTypeOAEP
++	algorithmTypeECDSA
++)
++
++type withKeyFunc func(func(security.SecKeyRef) error) error
++
++// Encrypt encrypts a plaintext message using a given key and algorithm.
++func evpEncrypt(withKey withKeyFunc, algorithmType algorithmType, plaintext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	dataRef := bytesToCFData(plaintext)
++	defer cfRelease(unsafe.Pointer(dataRef))
++
++	var encryptedDataRef security.CFDataRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeEncrypt, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		encryptedDataRef = security.SecKeyCreateEncryptedData(key, algorithm, dataRef, nil)
++		if encryptedDataRef == nil {
++			return errors.New("encryption failed")
++		}
++		return nil
++	})
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(encryptedDataRef))
++
++	return cfDataToBytes(encryptedDataRef), nil
++}
++
++// Decrypt decrypts a ciphertext using a given key and algorithm.
++func evpDecrypt(withKey withKeyFunc, algorithmType algorithmType, ciphertext []byte, hash hash.Hash) ([]byte, error) {
++	var cryptoHash crypto.Hash
++	if hash != nil {
++		var err error
++		cryptoHash, err = hashToCryptoHash(hash)
++		if err != nil {
++			return nil, err
++		}
++	}
++	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	msg := bytesToCFData(ciphertext)
++
++	var decryptedDataRef security.CFDataRef
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeDecrypt, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		decryptedDataRef = security.SecKeyCreateDecryptedData(key, algorithm, msg, &cfErr)
++		if decryptedDataRef == nil {
++			return errors.New("decryption failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(decryptedDataRef))
++
++	return cfDataToBytes(decryptedDataRef), nil
++}
++
++func evpSign(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed []byte) ([]byte, error) {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return nil, err
++	}
++
++	var signedDataRef security.CFDataRef
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeSign, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		signedDataRef = security.SecKeyCreateSignature(key, algorithm, bytesToCFData(hashed), &cfErr)
++		if signedDataRef == nil {
++			return errors.New("signing failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return nil, err
++	}
++
++	if err != nil {
++		return nil, err
++	}
++	defer cfRelease(unsafe.Pointer(signedDataRef))
++
++	return cfDataToBytes(signedDataRef), nil
++}
++
++func evpVerify(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed, signature []byte) error {
++	algorithm, err := selectAlgorithm(hash, algorithmType)
++	if err != nil {
++		return err
++	}
++
++	var cfErr security.CFErrorRef
++	err = withKey(func(key security.SecKeyRef) error {
++		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeVerify, algorithm) != 1 {
++			return errors.New("algorithm not supported by the key")
++		}
++		if security.SecKeyVerifySignature(key, algorithm, bytesToCFData(hashed), bytesToCFData(signature), &cfErr) != 1 {
++			return errors.New("verification failed")
++		}
++		return nil
++	})
++
++	if err := goCFErrorRef(cfErr); err != nil {
++		return err
++	}
++
++	return err
++}
++
++// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
++func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
++	switch h := hash.(type) {
++	case *Hash:
++		return h.alg.ch, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
++
++// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
++func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (security.CFStringRef, error) {
++	var algo security.CFStringRef
++	switch algorithmType {
++	case algorithmTypePSS:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA512
++		default:
++			return nil, errors.New("unsupported PSS hash: " + hash.String())
++		}
++	case algorithmTypeRAW:
++		algo = security.KSecKeyAlgorithmRSAEncryptionRaw
++	case algorithmTypePKCS1v15Enc:
++		return security.KSecKeyAlgorithmRSAEncryptionPKCS1, nil
++	case algorithmTypePKCS1v15Sig:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++		case 0:
++			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++		default:
++			return nil, errors.New("unsupported PKCS1v15 hash: " + hash.String())
++		}
++	case algorithmTypeOAEP:
++		switch hash {
++		case crypto.SHA1:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA1
++		case crypto.SHA224:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA224
++		case crypto.SHA256:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA256
++		case crypto.SHA384:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA384
++		case crypto.SHA512:
++			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA512
++		default:
++			return nil, errors.New("unsupported OAEP hash: " + hash.String())
++		}
++	case algorithmTypeECDSA:
++		return security.KSecKeyAlgorithmECDSASignatureDigestX962, nil
++	default:
++		return nil, errors.New("unsupported algorithm type: " + strconv.Itoa(int(algorithmType)))
++	}
++	return algo, nil
++}
++
++// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
++// CFDataRef and must CFRelease the CFDataRef when done.
++func bytesToCFData(buf []byte) security.CFDataRef {
++	return security.CFDataCreate(security.KCFAllocatorDefault, buf)
++}
++
++// cfDataToBytes turns a CFDataRef into a byte slice.
++func cfDataToBytes(cfData security.CFDataRef) []byte {
++	// TODO: remove this allocation
++	return slices.Clone(unsafe.Slice(security.CFDataGetBytePtr(cfData), security.CFDataGetLength(cfData)))
++}
++
++// cfRelease releases a CoreFoundation object.
++func cfRelease(ref unsafe.Pointer) {
++	security.CFRelease(security.CFTypeRef(ref))
++}
++
++// createSecKeyWithData creates a SecKey from the provided encoded key and attributes dictionary.
++func createSecKeyWithData(encodedKey []byte, keyType, keyClass security.CFStringRef) (security.SecKeyRef, error) {
++	encodedKeyCF := security.CFDataCreate(security.KCFAllocatorDefault, encodedKey)
++	if encodedKeyCF == nil {
++		return nil, errors.New("xcrypto: failed to create CFData for private key")
++	}
++	defer security.CFRelease(security.CFTypeRef(encodedKeyCF))
++
++	attrKeys := []security.CFTypeRef{
++		security.CFTypeRef(security.KSecAttrKeyType),
++		security.CFTypeRef(security.KSecAttrKeyClass),
++	}
++
++	attrValues := []security.CFTypeRef{
++		security.CFTypeRef(keyType),
++		security.CFTypeRef(keyClass),
++	}
++
++	// Create attributes dictionary for the key
++	attrDict := security.CFDictionaryCreate(
++		security.KCFAllocatorDefault,
++		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
++		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
++		security.CFIndex(len(attrKeys)),
++		nil,
++		nil,
++	)
++	if attrDict == nil {
++		return nil, errors.New("xcrypto: failed to create attributes dictionary")
++	}
++	defer security.CFRelease(security.CFTypeRef(attrDict))
++
++	// Generate the SecKey
++	var errorRef security.CFErrorRef
++	key := security.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, err
++	}
++	return key, nil
++}
++
++// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
++func createSecKeyRandom(keyType security.CFStringRef, keySize int) ([]byte, security.SecKeyRef, error) {
++	keyAttrs := security.CFDictionaryCreateMutable(security.KCFAllocatorDefault, 0, nil, nil)
++	if keyAttrs == nil {
++		return nil, nil, errors.New("failed to create key attributes dictionary")
++	}
++	defer security.CFRelease(security.CFTypeRef(keyAttrs))
++
++	security.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(security.KSecAttrKeyType),
++		unsafe.Pointer(keyType),
++	)
++
++	cfNum := security.CFNumberCreate(security.KCFAllocatorDefault, security.KCFNumberLongType, unsafe.Pointer(&keySize))
++	defer security.CFRelease(security.CFTypeRef(cfNum))
++
++	security.CFDictionarySetValue(
++		keyAttrs,
++		unsafe.Pointer(security.KSecAttrKeySizeInBits),
++		unsafe.Pointer(cfNum),
++	)
++
++	// Generate the private key
++	var errorRef security.CFErrorRef
++	privKeyRef := security.SecKeyCreateRandomKey(security.CFDictionaryRef(keyAttrs), &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, nil, err
++	}
++
++	// Export the private key as DER
++	privData := security.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
++	if err := goCFErrorRef(errorRef); err != nil {
++		return nil, nil, err
++	}
++	defer security.CFRelease(security.CFTypeRef(privData))
++
++	privKeyDER := cfDataToBytes(privData)
++	if privKeyDER == nil {
++		return nil, nil, errors.New("failed to convert CFData to bytes")
++	}
++	return privKeyDER, privKeyRef, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
+new file mode 100644
+index 00000000000000..82a961d974f129
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
+@@ -0,0 +1,218 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto/cipher"
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++type aesGCM struct {
++	key []byte
++	tls cipherGCMTLS
++	// minNextNonce is the minimum value that the next nonce can be, enforced by
++	// all TLS modes.
++	minNextNonce uint64
++	// mask is the nonce mask used in TLS 1.3 mode.
++	mask uint64
++	// maskInitialized is true if mask has been initialized. This happens during
++	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
++	maskInitialized bool
++}
++
++type noGCM struct {
++	cipher.Block
++}
++
++// NewGCM constructs a GCM block mode for AES using the cryptokit package
++func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
++	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
++		return nil, errors.New("crypto/aes: GCM tag and nonce sizes can't be non-standard at the same time")
++	}
++	// Fall back to standard library for GCM with non-standard nonce or tag size.
++	if nonceSize != gcmStandardNonceSize {
++		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
++	}
++	if tagSize != gcmTagSize {
++		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++	}
++	return &aesGCM{key: c.key, tls: cipherGCMTLSNone}, nil
++}
++
++func (g *aesGCM) NonceSize() int { return gcmStandardNonceSize }
++
++func (g *aesGCM) Overhead() int { return gcmTagSize }
++
++func (g *aesGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if uint64(len(plaintext)) > ((1<<32)-2)*aesBlockSize || len(plaintext)+gcmTagSize < len(plaintext) {
++		panic("cipher: message too large for GCM")
++	}
++	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
++		panic("cipher: message too large for buffer")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
++		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
++		}
++		counter := bigUint64(nonce[gcmTlsFixedNonceSize:])
++
++		// TLS 1.3 Masking
++		if g.tls == cipherGCMTLS13 {
++			if !g.maskInitialized {
++				g.mask = counter
++				g.maskInitialized = true
++			}
++			// Apply mask to the counter
++			counter ^= g.mask
++		}
++
++		// Enforce monotonicity and max limit
++		const maxUint64 = 1<<64 - 1
++		if counter == maxUint64 {
++			panic("cipher: nonce counter must be less than 2^64 - 1")
++		}
++		if counter < g.minNextNonce {
++			panic("cipher: nonce counter must be strictly monotonically increasing")
++		}
++
++		defer func() {
++			g.minNextNonce = counter + 1
++		}()
++	}
++
++	// Make room in dst to append plaintext+overhead.
++	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, plaintext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	err := cryptokit.EncryptAESGCM(
++		g.key,
++		plaintext,
++		nonce,
++		additionalData,
++		out[:len(out)-gcmTagSize],
++		out[len(out)-gcmTagSize:],
++	)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++	return ret
++}
++
++func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if inexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
++
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
++	}
++
++	// Generate a random nonce
++	RandReader.Read(nonce)
++	err := cryptokit.EncryptAESGCM(
++		g.key,
++		plaintext,
++		nonce,
++		additionalData,
++		out[:len(out)-gcmTagSize],
++		out[len(out)-gcmTagSize:],
++	)
++	if err != 0 {
++		panic("cipher: encryption failed")
++	}
++}
++
++func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if len(ciphertext) < gcmTagSize {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > ((1<<32)-2)*aesBlockSize+gcmTagSize {
++		return nil, errOpen
++	}
++	// BoringCrypto does not do any TLS check when decrypting, neither do we.
++
++	// Ensure we don't process if ciphertext lacks both ciphertext and tag
++	if len(ciphertext) < gcmTagSize {
++		return nil, errors.New("decryption failed: ciphertext too short for tag")
++	}
++
++	tag := ciphertext[len(ciphertext)-gcmTagSize:]
++	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
++
++	// Make room in dst to append ciphertext without tag.
++	ret, out := sliceForAppend(dst, len(ciphertext))
++
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, ciphertext) {
++		panic("cipher: invalid buffer overlap")
++	}
++
++	var decSize int
++	err := cryptokit.DecryptAESGCM(
++		g.key,
++		ciphertext,
++		nonce,
++		additionalData,
++		tag,
++		out,
++		&decSize,
++	)
++	if err != 0 || int(decSize) != len(ciphertext) {
++		// If the decrypted data size does not match, zero out `out` and return `errOpen`
++		for i := range out {
++			out[i] = 0
++		}
++		return nil, errOpen
++	}
++	return ret, nil
++}
++
++// NewGCMTLS returns a GCM cipher specific to TLS
++// and should not be used for non-TLS purposes.
++func NewGCMTLS(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS12}, nil
++}
++
++// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
++// for non-TLS purposes.
++func NewGCMTLS13(block cipher.Block) (cipher.AEAD, error) {
++	cipher, ok := block.(*aesCipher)
++	if !ok {
++		return nil, errors.New("crypto/aes: invalid block cipher")
++	}
++	return &aesGCM{key: cipher.key, tls: cipherGCMTLS13}, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+new file mode 100644
+index 00000000000000..016827afea2eee
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
+@@ -0,0 +1,337 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"sync"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	md5     = 1
++	sha1    = 2
++	sha256  = 3
++	sha384  = 4
++	sha512  = 5
++	sha3256 = 6
++	sha3384 = 7
++	sha3512 = 8
++)
++
++type hashAlgorithm struct {
++	id        int32
++	ch        crypto.Hash
++	size      int
++	blockSize int
++}
++
++type HashCloner = hash.Cloner
++
++var cacheHash sync.Map // map[crypto.Hash]*hashAlgorithm
++
++// supportsSHA3 returns true if SHA-3 is available on this macOS version.
++func supportsSHA3() bool {
++	return cryptokit.SupportsSHA3() == 1
++}
++
++// loadHash converts a crypto.Hash to a hashAlgorithm.
++func loadHash(ch crypto.Hash, required bool) *hashAlgorithm {
++	if v, ok := cacheHash.Load(ch); ok {
++		if v == nil && required {
++			panic("cryptokit: " + ch.String() + " not available")
++		}
++		return v.(*hashAlgorithm)
++	}
++
++	var hash hashAlgorithm
++	hash.ch = ch
++	supported := true
++
++	switch ch {
++	case crypto.MD5:
++		hash.id = md5
++		hash.size = int(cryptokit.HashSize(md5))
++		hash.blockSize = int(cryptokit.HashBlockSize(md5))
++	case crypto.SHA1:
++		hash.id = sha1
++		hash.size = int(cryptokit.HashSize(sha1))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha1))
++	case crypto.SHA256:
++		hash.id = sha256
++		hash.size = int(cryptokit.HashSize(sha256))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha256))
++	case crypto.SHA384:
++		hash.id = sha384
++		hash.size = int(cryptokit.HashSize(sha384))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha384))
++	case crypto.SHA512:
++		hash.id = sha512
++		hash.size = int(cryptokit.HashSize(sha512))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha512))
++	case crypto.SHA3_256:
++		if !supportsSHA3() {
++			supported = false
++			break
++		}
++		hash.id = sha3256
++		hash.size = int(cryptokit.HashSize(sha3256))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3256))
++	case crypto.SHA3_384:
++		if !supportsSHA3() {
++			supported = false
++			break
++		}
++		hash.id = sha3384
++		hash.size = int(cryptokit.HashSize(sha3384))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3384))
++	case crypto.SHA3_512:
++		if !supportsSHA3() {
++			supported = false
++			break
++		}
++		hash.id = sha3512
++		hash.size = int(cryptokit.HashSize(sha3512))
++		hash.blockSize = int(cryptokit.HashBlockSize(sha3512))
++	default:
++		supported = false
++	}
++
++	if !supported {
++		if required {
++			panic("cryptokit: " + ch.String() + " not available")
++		}
++		cacheHash.Store(ch, (*hashAlgorithm)(nil))
++		return nil
++	}
++
++	cacheHash.Store(ch, &hash)
++	return &hash
++}
++
++// Hash implements generic hash methods.
++type Hash struct {
++	ptr unsafe.Pointer
++	alg *hashAlgorithm
++}
++
++// SupportsHash returns true if a hash.Hash implementation is supported for h.
++func SupportsHash(h crypto.Hash) bool {
++	return loadHash(h, false) != nil
++}
++
++func newHash(ch crypto.Hash) *Hash {
++	alg := loadHash(ch, true)
++
++	h := &Hash{
++		ptr: cryptokit.HashNew(alg.id),
++		alg: alg,
++	}
++
++	runtime.SetFinalizer(h, (*Hash).finalize)
++
++	return h
++}
++
++func (h *Hash) finalize() {
++	if h.ptr != nil {
++		cryptokit.HashFree(h.alg.id, h.ptr)
++		h.ptr = nil
++	}
++}
++
++func (h *Hash) Clone() (HashCloner, error) {
++	if h.ptr == nil {
++		panic("cryptokit: hash already finalized")
++	}
++
++	newHash := &Hash{
++		ptr: cryptokit.HashCopy(h.alg.id, h.ptr),
++		alg: h.alg,
++	}
++
++	runtime.SetFinalizer(newHash, (*Hash).finalize)
++
++	runtime.KeepAlive(h)
++
++	return newHash, nil
++}
++
++func (h *Hash) Write(p []byte) (int, error) {
++	if len(p) == 0 {
++		return 0, nil
++	}
++	cryptokit.HashWrite(h.alg.id, h.ptr, p)
++
++	runtime.KeepAlive(h)
++
++	return len(p), nil
++}
++
++func (h *Hash) WriteString(s string) (int, error) {
++	if len(s) == 0 {
++		return 0, nil
++	}
++	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(unsafe.StringData(s), len(s)))
++
++	runtime.KeepAlive(h)
++
++	return len(s), nil
++}
++
++func (h *Hash) WriteByte(c byte) error {
++	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(&c, 1))
++
++	runtime.KeepAlive(h)
++
++	return nil
++}
++
++func (h *Hash) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.alg.size, 64) // explicit cap to allow stack allocation
++	cryptokit.HashSum(h.alg.id, h.ptr, hashSlice)
++	runtime.KeepAlive(h)
++	b = append(b, hashSlice...)
++	return b
++}
++
++type errMarshallUnsupported struct{}
++
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
++}
++
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
++}
++
++func (h *Hash) MarshalBinary() ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
++
++func (h *Hash) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
++
++func (h *Hash) UnmarshalBinary(data []byte) error {
++	return errMarshallUnsupported{}
++}
++
++func (h *Hash) Reset() {
++	cryptokit.HashReset(h.alg.id, h.ptr)
++}
++
++func (h *Hash) BlockSize() int {
++	return h.alg.blockSize
++}
++
++func (h *Hash) Size() int {
++	return h.alg.size
++}
++
++// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
++func FIPSApprovedHash(h hash.Hash) bool {
++	xh, ok := h.(*Hash)
++	if !ok {
++		return false
++	}
++	switch xh.alg.ch {
++	case crypto.SHA256, crypto.SHA384, crypto.SHA512,
++		crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
++		return true
++	default:
++		return false
++	}
++}
++
++var _ hash.Hash = (*Hash)(nil)
++var _ HashCloner = (*Hash)(nil)
++
++func MD5(p []byte) (sum [16]byte) {
++	cryptokit.MD5(p, sum[:])
++	return
++}
++
++func SHA1(p []byte) (sum [20]byte) {
++	cryptokit.SHA1(p, sum[:])
++	return
++}
++
++func SHA256(p []byte) (sum [32]byte) {
++	cryptokit.SHA256(p, sum[:])
++	return
++}
++
++func SHA384(p []byte) (sum [48]byte) {
++	cryptokit.SHA384(p, sum[:])
++	return
++}
++
++func SHA512(p []byte) (sum [64]byte) {
++	cryptokit.SHA512(p, sum[:])
++	return
++}
++
++func SumSHA3_256(p []byte) (sum [32]byte) {
++	cryptokit.SHA3_256(p, sum[:])
++	return
++}
++
++func SumSHA3_384(p []byte) (sum [48]byte) {
++	cryptokit.SHA3_384(p, sum[:])
++	return
++}
++
++func SumSHA3_512(p []byte) (sum [64]byte) {
++	cryptokit.SHA3_512(p, sum[:])
++	return
++}
++
++// NewMD5 initializes a new MD5 hasher.
++func NewMD5() hash.Hash {
++	return newHash(crypto.MD5)
++
++}
++
++// NewSHA1 initializes a new SHA1 hasher.
++func NewSHA1() hash.Hash {
++	return newHash(crypto.SHA1)
++}
++
++// NewSHA256 initializes a new SHA256 hasher.
++func NewSHA256() hash.Hash {
++	return newHash(crypto.SHA256)
++}
++
++// NewSHA384 initializes a new SHA384 hasher.
++func NewSHA384() hash.Hash {
++	return newHash(crypto.SHA384)
++}
++
++// NewSHA512 initializes a new SHA512 hasher.
++func NewSHA512() hash.Hash {
++	return newHash(crypto.SHA512)
++}
++
++// NewSHA3_256 creates a new SHA3-256 hash.
++func NewSHA3_256() *Hash {
++	return newHash(crypto.SHA3_256)
++}
++
++// NewSHA3_384 creates a new SHA3-384 hash.
++func NewSHA3_384() *Hash {
++	return newHash(crypto.SHA3_384)
++}
++
++// NewSHA3_512 creates a new SHA3-512 hash.
++func NewSHA3_512() *Hash {
++	return newHash(crypto.SHA3_512)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
+new file mode 100644
+index 00000000000000..f6183de583d9ac
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
+@@ -0,0 +1,103 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++// ExtractHKDF performs the extract step of HKDF using the specified hash function.
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	// Handle empty secret
++	if len(secret) == 0 {
++		return nil, errors.New("secret cannot be empty")
++	}
++
++	hash, err := hashToCryptoHash(h())
++	if err != nil {
++		return nil, err
++	}
++
++	// Default salt to a zero-filled array if not provided
++	if len(salt) == 0 {
++		salt = make([]byte, hash.Size())
++	}
++
++	swiftHash, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// Allocate buffer for derived key
++	prk := make([]byte, hash.Size())
++
++	result := cryptokit.ExtractHKDF(swiftHash, secret, salt, prk)
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
++	return prk, nil
++}
++
++// ExpandHKDF performs the expand step of HKDF using the specified hash function.
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	// Handle empty secret
++	if len(pseudorandomKey) == 0 {
++		return nil, errors.New("pseudorandom key cannot be empty")
++	}
++
++	hash, err := hashToCryptoHash(h())
++	if err != nil {
++		return nil, err
++	}
++
++	// Determine the maximum expandable key length based on the hash function
++	maxAllowedLength := hash.Size() * 255
++
++	// Validate requested key length
++	if keyLength > maxAllowedLength {
++		return nil, errors.New("requested key length exceeds maximum allowable size")
++	}
++
++	swiftHash, err := cryptoHashToSwift(hash)
++	if err != nil {
++		return nil, err
++	}
++
++	// Allocate buffer for derived key
++	expandedKey := make([]byte, keyLength)
++	if len(expandedKey) == 0 {
++		// Nothing to do, and CryptoKit may error on zero-length output.
++		// We do need to validate the inputs for consistency, though.
++		return expandedKey, nil
++	}
++
++	result := cryptokit.ExpandHKDF(swiftHash, pseudorandomKey, info, expandedKey)
++	if result != 0 {
++		return nil, errors.New("HKDF derivation failed")
++	}
++
++	return expandedKey, nil
++}
++
++func cryptoHashToSwift(hash crypto.Hash) (int32, error) {
++	switch hash {
++	case crypto.SHA1:
++		return 1, nil
++	case crypto.SHA256:
++		return 2, nil
++	case crypto.SHA384:
++		return 3, nil
++	case crypto.SHA512:
++		return 4, nil
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+new file mode 100644
+index 00000000000000..80a951f8ea1a2a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
+@@ -0,0 +1,119 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"hash"
++	"runtime"
++	"slices"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++var _ hash.Hash = (*cryptoKitHMAC)(nil)
++var _ HashCloner = (*cryptoKitHMAC)(nil)
++
++type cryptoKitHMAC struct {
++	ptr unsafe.Pointer
++
++	kind int32
++	key  []byte
++
++	blockSize int
++	size      int
++}
++
++// NewHMAC returns a new HMAC using xcrypto.
++// The function h must return a hash implemented by
++// CommonCrypto (for example, h could be xcrypto.NewSHA256).
++// If h is not recognized, NewHMAC returns nil.
++func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
++	h := fh()
++	if h == nil {
++		return nil
++	}
++
++	// copying the key here to ensure that it is not modified
++	// while this algorithm is using it.
++	key = slices.Clone(key)
++	kind := hashToHMACEnum(h)
++	if kind == 0 {
++		// The hash function is not supported by the HMAC implementation.
++		return nil
++	}
++
++	hmac := &cryptoKitHMAC{
++		ptr:       cryptokit.InitHMAC(kind, key),
++		kind:      kind,
++		key:       key,
++		blockSize: h.BlockSize(),
++		size:      h.Size(),
++	}
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		cryptokit.FreeHMAC(h.kind, h.ptr)
++	})
++
++	return hmac
++}
++
++func (h *cryptoKitHMAC) Write(p []byte) (n int, err error) {
++	cryptokit.UpdateHMAC(h.kind, h.ptr, p)
++	runtime.KeepAlive(h)
++
++	return len(p), nil
++}
++
++func (h *cryptoKitHMAC) Sum(b []byte) []byte {
++	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
++	cryptokit.FinalizeHMAC(h.kind, h.ptr, hashSlice)
++	runtime.KeepAlive(h)
++
++	b = append(b, hashSlice...)
++
++	return b
++}
++
++func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
++	if h.ptr == nil {
++		panic("cryptokit: hash already finalized")
++	}
++
++	hmac := &cryptoKitHMAC{ptr: cryptokit.CopyHMAC(h.kind, h.ptr), kind: h.kind, key: slices.Clone(h.key), blockSize: h.blockSize, size: h.size}
++
++	runtime.KeepAlive(h)
++
++	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
++		cryptokit.FreeHMAC(h.kind, h.ptr)
++	})
++
++	return hmac, nil
++}
++
++func (h *cryptoKitHMAC) Reset() {
++	cryptokit.FreeHMAC(h.kind, h.ptr)
++
++	h.ptr = cryptokit.InitHMAC(h.kind, h.key)
++	runtime.KeepAlive(h)
++}
++
++func (h *cryptoKitHMAC) Size() int {
++	return h.size
++}
++
++func (h *cryptoKitHMAC) BlockSize() int {
++	return h.blockSize
++}
++
++func hashToHMACEnum(h hash.Hash) int32 {
++	switch h := h.(type) {
++	case *Hash:
++		return h.alg.id
++	default:
++		return 0
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
+new file mode 100644
+index 00000000000000..136d81fe3c152e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
+@@ -0,0 +1,222 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
++	privateKeySizeMLDSA = 32
++
++	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
++	publicKeySizeMLDSA65 = 1952
++
++	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
++	publicKeySizeMLDSA87 = 2592
++
++	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
++	signatureSizeMLDSA65 = 3309
++
++	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
++	signatureSizeMLDSA87 = 4627
++)
++
++// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
++// on this platform.
++func SupportsMLDSA(params MLDSAParameters) bool {
++	switch params.publicKeySize {
++	case publicKeySizeMLDSA65, publicKeySizeMLDSA87:
++		return cryptokit.SupportsMLDSA() == 1
++	default:
++		return false
++	}
++}
++
++// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
++type MLDSAParameters struct {
++	name          string
++	publicKeySize int
++	signatureSize int
++	generateKey   func(seed []uint8) int64
++	derivePublic  func(seed []uint8, publicKey []uint8) int64
++	sign          func(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64
++	verify        func(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64
++	validatePub   func(publicKey []uint8) int64
++}
++
++var (
++	mldsa65 = MLDSAParameters{
++		name:          "ML-DSA-65",
++		publicKeySize: publicKeySizeMLDSA65,
++		signatureSize: signatureSizeMLDSA65,
++		generateKey:   cryptokit.GenerateKeyMLDSA65,
++		derivePublic:  cryptokit.DerivePublicKeyMLDSA65,
++		sign:          cryptokit.SignMLDSA65,
++		verify:        cryptokit.VerifyMLDSA65,
++		validatePub:   cryptokit.ValidatePublicKeyMLDSA65,
++	}
++	mldsa87 = MLDSAParameters{
++		name:          "ML-DSA-87",
++		publicKeySize: publicKeySizeMLDSA87,
++		signatureSize: signatureSizeMLDSA87,
++		generateKey:   cryptokit.GenerateKeyMLDSA87,
++		derivePublic:  cryptokit.DerivePublicKeyMLDSA87,
++		sign:          cryptokit.SignMLDSA87,
++		verify:        cryptokit.VerifyMLDSA87,
++		validatePub:   cryptokit.ValidatePublicKeyMLDSA87,
++	}
++)
++
++// MLDSA65 returns the ML-DSA-65 parameter set.
++func MLDSA65() MLDSAParameters { return mldsa65 }
++
++// MLDSA87 returns the ML-DSA-87 parameter set.
++func MLDSA87() MLDSAParameters { return mldsa87 }
++
++func (params MLDSAParameters) valid() bool {
++	return params.generateKey != nil
++}
++
++// PublicKeySize returns the size of public keys for this parameter set, in bytes.
++func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
++
++// SignatureSize returns the size of signatures for this parameter set, in bytes.
++func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
++
++// String returns the name of the parameter set.
++func (params MLDSAParameters) String() string { return params.name }
++
++var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
++
++// PrivateKeyMLDSA is an ML-DSA private key seed.
++type PrivateKeyMLDSA struct {
++	params MLDSAParameters
++	seed   [privateKeySizeMLDSA]byte
++}
++
++// GenerateKeyMLDSA generates a new ML-DSA private key.
++func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	if ret := params.generateKey(key.seed[:]); ret != 0 {
++		return nil, errors.New("mldsa: key generation failed")
++	}
++	return key, nil
++}
++
++// NewPrivateKeyMLDSA constructs an ML-DSA private key from its seed.
++func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid private key size")
++	}
++	key := &PrivateKeyMLDSA{params: params}
++	copy(key.seed[:], seed)
++	return key, nil
++}
++
++// Bytes returns the private key seed.
++func (key *PrivateKeyMLDSA) Bytes() []byte {
++	return key.seed[:]
++}
++
++// Parameters returns the parameters associated with this private key.
++func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// PublicKey returns the corresponding public key.
++func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
++	publicKey := &PublicKeyMLDSA{params: key.params}
++	if ret := key.params.derivePublic(key.seed[:], publicKey.bytes[:key.params.publicKeySize]); ret != 0 {
++		panic("mldsa: failed to derive public key")
++	}
++	return publicKey
++}
++
++// Sign signs message with context using ML-DSA.
++func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
++	if len(context) > 255 {
++		return nil, errors.New("mldsa: context too long")
++	}
++	signature := make([]byte, key.params.signatureSize)
++	sigLen := int64(key.params.signatureSize)
++	contextBytes := []byte(context)
++	if ret := key.params.sign(key.seed[:], message, contextBytes, signature, &sigLen); ret != 0 {
++		return nil, errors.New("mldsa: signing failed")
++	}
++	return signature[:sigLen], nil
++}
++
++// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
++func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
++	if len(mu) != 64 {
++		return nil, errors.New("mldsa: invalid message hash length")
++	}
++	return nil, errors.New("mldsa: external mu not supported")
++}
++
++// PublicKeyMLDSA is an ML-DSA public key.
++type PublicKeyMLDSA struct {
++	params MLDSAParameters
++	bytes  [publicKeySizeMLDSA87]byte
++}
++
++// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
++func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(publicKey) != params.publicKeySize {
++		return nil, errors.New("mldsa: invalid public key size")
++	}
++	if ret := params.validatePub(publicKey); ret != 0 {
++		return nil, errors.New("mldsa: invalid public key")
++	}
++	key := &PublicKeyMLDSA{params: params}
++	copy(key.bytes[:], publicKey)
++	return key, nil
++}
++
++// Bytes returns the public key encoding.
++func (key *PublicKeyMLDSA) Bytes() []byte {
++	return key.bytes[:key.params.publicKeySize]
++}
++
++// Parameters returns the parameters associated with this public key.
++func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// Verify verifies an ML-DSA signature.
++func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
++	if len(signature) != key.params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	if len(context) > 255 {
++		return errors.New("mldsa: context too long")
++	}
++	contextBytes := []byte(context)
++	if ret := key.params.verify(key.bytes[:key.params.publicKeySize], message, contextBytes, signature); ret != 0 {
++		return errors.New("mldsa: verification failed")
++	}
++	return nil
++}
++
++// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message representative.
++func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
++	if len(mu) != 64 {
++		return errors.New("mldsa: invalid message hash length")
++	}
++	if len(signature) != key.params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	return errors.New("mldsa: external mu not supported")
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
+new file mode 100644
+index 00000000000000..b5131703afdbcc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
+@@ -0,0 +1,261 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++)
++
++const (
++	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
++	sharedKeySizeMLKEM = 32
++
++	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
++	seedSizeMLKEM = 64
++
++	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
++	ciphertextSizeMLKEM768 = 1088
++
++	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
++	encapsulationKeySizeMLKEM768 = 1184
++
++	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
++	ciphertextSizeMLKEM1024 = 1568
++
++	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
++	encapsulationKeySizeMLKEM1024 = 1568
++)
++
++// SupportsMLKEM returns true if ML-KEM is supported on this platform.
++func SupportsMLKEM() bool {
++	return cryptokit.SupportsMLKEM() == 1
++}
++
++// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	var dk DecapsulationKeyMLKEM768
++	ret := cryptokit.GenerateKeyMLKEM768(dk[:])
++	if ret != 0 {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: key generation failed")
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM768
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) != ciphertextSizeMLKEM768 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ret := cryptokit.DecapsulateMLKEM768(
++		dk[:],
++		ciphertext,
++		sharedKey,
++	)
++
++	if ret != 0 {
++		return nil, errors.New("mlkem: decapsulation failed")
++	}
++	return sharedKey, nil
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	var ek EncapsulationKeyMLKEM768
++	ret := cryptokit.DeriveEncapsulationKeyMLKEM768(
++		dk[:],
++		ek[:],
++	)
++
++	if ret != 0 {
++		return EncapsulationKeyMLKEM768{}
++	}
++	return ek
++}
++
++// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM768.
++type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
++
++// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
++		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSizeMLKEM768)
++
++	ret := cryptokit.EncapsulateMLKEM768(
++		ek[:],
++		sharedKey,
++		ciphertext,
++	)
++
++	if ret != 0 {
++		return nil, nil
++	}
++	return sharedKey, ciphertext
++}
++
++// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	var dk DecapsulationKeyMLKEM1024
++	ret := cryptokit.GenerateKeyMLKEM1024(dk[:])
++	if ret != 0 {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: key generation failed")
++	}
++	return dk, nil
++}
++
++// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
++	}
++
++	var dk DecapsulationKeyMLKEM1024
++	copy(dk[:], seed)
++	return dk, nil
++}
++
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	return dk[:]
++}
++
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) != ciphertextSizeMLKEM1024 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
++	}
++
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ret := cryptokit.DecapsulateMLKEM1024(
++		dk[:],
++		ciphertext,
++		sharedKey,
++	)
++
++	if ret != 0 {
++		return nil, errors.New("mlkem: decapsulation failed")
++	}
++	return sharedKey, nil
++}
++
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	var ek EncapsulationKeyMLKEM1024
++	ret := cryptokit.DeriveEncapsulationKeyMLKEM1024(
++		dk[:],
++		ek[:],
++	)
++
++	if ret != 0 {
++		return EncapsulationKeyMLKEM1024{}
++	}
++	return ek
++}
++
++// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
++type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
++
++// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
++		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++	}
++
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
++
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	return ek[:]
++}
++
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSizeMLKEM1024)
++
++	ret := cryptokit.EncapsulateMLKEM1024(
++		ek[:],
++		sharedKey,
++		ciphertext,
++	)
++
++	if ret != 0 {
++		return nil, nil
++	}
++	return sharedKey, ciphertext
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+new file mode 100644
+index 00000000000000..b50fc17d0f8d66
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+@@ -0,0 +1,76 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"math"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	// CommonCrypto's CCKeyDerivationPBKDF takes an unsigned 32-bit iteration
++	// count, so reject values that would overflow or wrap. In practice the
++	// recommended iteration count is around 300,000.
++	if iter <= 0 || iter > math.MaxUint32 {
++		return nil, errors.New("PBKDF2: invalid iteration count")
++	}
++
++	// Map Go hash function to CommonCrypto hash constant
++	ccDigest, err := hashToCCDigestPBKDF2(fh())
++	if err != nil {
++		return nil, err
++	}
++
++	if len(password) == 0 {
++		// CommonCrypto requires a non-empty password
++		// Substitute empty password with placeholder
++		password = make([]byte, 1)
++	}
++
++	// Allocate output buffer for the derived key
++	derivedKey := make([]byte, keyLen)
++
++	// Call CommonCrypto's PBKDF2 implementation
++	status := commoncrypto.CCKeyDerivationPBKDF(
++		commoncrypto.KCCPBKDF2, // PBKDF2 algorithm
++		password,               // Password
++		salt,                   // Salt
++		ccDigest,               // Digest algorithm
++		uint32(iter),           // Iteration count
++		derivedKey,             // Output buffer for derived key
++	)
++
++	if status != commoncrypto.KCCSuccess {
++		return nil, errors.New("PBKDF2 key derivation failed")
++	}
++
++	return derivedKey, nil
++}
++
++// Mapping Go hash functions to CommonCrypto hash constants
++func hashToCCDigestPBKDF2(hash hash.Hash) (commoncrypto.CCPseudoRandomAlgorithm, error) {
++	switch h := hash.(type) {
++	case *Hash:
++		switch h.alg.ch {
++		case crypto.SHA1:
++			return commoncrypto.KCCPRFHmacAlgSHA1, nil
++		case crypto.SHA256:
++			return commoncrypto.KCCPRFHmacAlgSHA256, nil
++		case crypto.SHA384:
++			return commoncrypto.KCCPRFHmacAlgSHA384, nil
++		case crypto.SHA512:
++			return commoncrypto.KCCPRFHmacAlgSHA512, nil
++		default:
++			return 0, errors.New("unsupported hash function")
++		}
++	default:
++		return 0, errors.New("unsupported hash function")
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+new file mode 100644
+index 00000000000000..f8fc6ab81a3eb8
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+@@ -0,0 +1,28 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++type randReader int
++
++func (randReader) Read(b []byte) (int, error) {
++	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
++	// We check it even so.
++	if len(b) == 0 {
++		return 0, nil
++	}
++	if security.SecRandomCopyBytes(security.KSecRandomDefault, b) != 0 {
++		return 0, errors.New("crypto/rand: unable to read from source")
++	}
++	return len(b), nil
++}
++
++const RandReader = randReader(0)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
+new file mode 100644
+index 00000000000000..01258b7f65a263
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
+@@ -0,0 +1,81 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"errors"
++	"runtime"
++	"slices"
++
++	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++)
++
++// RC4Cipher is an instance of RC4 using a particular key.
++type RC4Cipher struct {
++	ctx commoncrypto.CCCryptorRef
++}
++
++// NewRC4Cipher creates and returns a new RC4 cipher with the given key.
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
++	// Clone the key to prevent modification.
++	key = slices.Clone(key)
++	var ctx commoncrypto.CCCryptorRef
++	status := commoncrypto.CCCryptorCreate(
++		commoncrypto.KCCEncrypt,      // Operation (RC4 stream)
++		commoncrypto.KCCAlgorithmRC4, // Algorithm
++		0,                            // No padding or other options
++		key,                          // Key
++		nil,                          // No IV needed for RC4
++		&ctx,                         // Output: CCCryptorRef
++	)
++	if status != commoncrypto.KCCSuccess {
++		return nil, errors.New("failed to create RC4 cipher")
++	}
++	c := &RC4Cipher{ctx: ctx}
++	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
++	return c, nil
++}
++
++// finalize releases the RC4 cipher context when no longer needed.
++func (c *RC4Cipher) finalize() {
++	if c.ctx != nil {
++		commoncrypto.CCCryptorRelease(c.ctx)
++	}
++}
++
++// Reset zeros the key data and makes the cipher unusable.
++func (c *RC4Cipher) Reset() {
++	if c.ctx != nil {
++		commoncrypto.CCCryptorRelease(c.ctx)
++		c.ctx = nil
++	}
++}
++
++// XORKeyStream sets dst to the result of XORing src with the key stream.
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
++	if c.ctx == nil || len(src) == 0 {
++		return
++	}
++	if inexactOverlap(dst[:len(src)], src) {
++		panic("crypto/rc4: invalid buffer overlap")
++	}
++	// Ensures `dst` has sufficient space.
++	_ = dst[len(src)-1]
++	var outLen int
++	status := commoncrypto.CCCryptorUpdate(
++		c.ctx,
++		src, // Input
++		dst, // Output
++		&outLen,
++	)
++	if status != commoncrypto.KCCSuccess {
++		panic("crypto/cipher: CCCryptorUpdate failed")
++	}
++	if int(outLen) != len(src) {
++		panic("crypto/rc4: src not fully XORed")
++	}
++	runtime.KeepAlive(c)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+new file mode 100644
+index 00000000000000..8e25affa681753
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+@@ -0,0 +1,208 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build darwin
++
++package xcrypto
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"strconv"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-darwin/internal/security"
++)
++
++// GenerateKeyRSA generates an RSA key pair on macOS.
++// asn1Data is encoded as PKCS#1 ASN1 DER.
++func GenerateKeyRSA(bits int) (asn1Data []byte, err error) {
++	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeRSA, bits)
++	if err != nil {
++		return nil, err
++	}
++	security.CFRelease(security.CFTypeRef(privKeyRef))
++	return privKeyDER, nil
++}
++
++type PublicKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey security.SecKeyRef
++}
++
++func (k *PublicKeyRSA) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++// NewPublicKeyRSA creates a new RSA public key from ASN1 DER encoded data.
++func NewPublicKeyRSA(asn1Data []byte) (*PublicKeyRSA, error) {
++	pubKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPublic)
++	if err != nil {
++		return nil, err
++	}
++
++	key := &PublicKeyRSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(key, (*PublicKeyRSA).finalize)
++	return key, nil
++}
++
++func (k *PublicKeyRSA) withKey(f func(security.SecKeyRef) error) error {
++	// Because of the finalizer, any time key is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++type PrivateKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey security.SecKeyRef
++}
++
++func (k *PrivateKeyRSA) finalize() {
++	if k._pkey != nil {
++		security.CFRelease(security.CFTypeRef(k._pkey))
++	}
++}
++
++// NewPrivateKeyRSA creates a new RSA private key from ASN1 DER encoded data.
++func NewPrivateKeyRSA(asn1Data []byte) (*PrivateKeyRSA, error) {
++	privKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPrivate)
++	if err != nil {
++		return nil, err
++	}
++
++	key := &PrivateKeyRSA{_pkey: privKeyRef}
++	runtime.SetFinalizer(key, (*PrivateKeyRSA).finalize)
++	return key, nil
++}
++
++func (k *PrivateKeyRSA) PublicKey() *PublicKeyRSA {
++	var pubKeyRef security.SecKeyRef
++	k.withKey(func(key security.SecKeyRef) error {
++		pubKeyRef = security.SecKeyCopyPublicKey(k._pkey)
++		return nil
++	})
++	pubKey := &PublicKeyRSA{_pkey: pubKeyRef}
++	runtime.SetFinalizer(pubKey, (*PublicKeyRSA).finalize)
++	return pubKey
++}
++
++func (k *PrivateKeyRSA) withKey(f func(security.SecKeyRef) error) error {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
++
++// DecryptRSAOAEP decrypts data using RSA-OAEP.
++func DecryptRSAOAEP(h hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	if len(label) > 0 {
++		// https://github.com/microsoft/go-crypto-darwin/issues/22
++		panic("crypto/rsa: label is not supported on macOS")
++	}
++	return evpDecrypt(priv.withKey, algorithmTypeOAEP, ciphertext, h)
++}
++
++// EncryptRSAOAEP encrypts data using RSA-OAEP.
++func EncryptRSAOAEP(h hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	if len(label) > 0 {
++		// https://github.com/microsoft/go-crypto-darwin/issues/22
++		panic("crypto/rsa: label is not supported on macOS")
++	}
++	return evpEncrypt(pub.withKey, algorithmTypeOAEP, msg, h)
++}
++
++// SignRSAPSS signs data with RSA-PSS.
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypePSS, h, hashed)
++}
++
++// VerifyRSAPSS verifies data with RSA-PSS.
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	return evpVerify(pub.withKey, algorithmTypePSS, h, hashed, sig)
++}
++
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, algorithmTypePKCS1v15Sig, h, hashed)
++}
++
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	if pub.withKey(func(key security.SecKeyRef) error {
++		size := security.SecKeyGetBlockSize(key)
++		if len(sig) < int(size) {
++			return errors.New("crypto/rsa: signature too short")
++		}
++		return nil
++	}) != nil {
++		return errors.New("crypto/rsa: verification error")
++	}
++	return evpVerify(pub.withKey, algorithmTypePKCS1v15Sig, h, hashed, sig)
++}
++
++// DecryptRSAPKCS1 decrypts data using RSA PKCS#1 v1.5 padding.
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, algorithmTypePKCS1v15Enc, ciphertext, nil)
++}
++
++// EncryptRSAPKCS1 encrypts data using RSA PKCS#1 v1.5 padding.
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, algorithmTypePKCS1v15Enc, msg, nil)
++}
++
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, algorithmTypeRAW, ciphertext, nil)
++}
++
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, algorithmTypeRAW, msg, nil)
++}
++
++// Helper functions
++
++type cfError struct {
++	code    int
++	message string
++}
++
++func (e *cfError) Error() string {
++	if e.message == "" {
++		return "CFError(" + strconv.Itoa(e.code) + "): unknown error"
++	}
++	return "CFError(" + strconv.Itoa(e.code) + "): " + e.message
++}
++
++func goCFErrorRef(ref security.CFErrorRef) error {
++	if ref == nil {
++		return nil
++	}
++	var message string
++	if desc := security.CFErrorCopyDescription(ref); desc != nil {
++		defer security.CFRelease(security.CFTypeRef(desc))
++		if cstr := security.CFStringGetCStringPtr(desc, security.KCFStringEncodingUTF8); cstr != nil {
++			message = string(cstrBytes(cstr))
++		}
++	}
++	return &cfError{
++		code:    int(security.CFErrorGetCode(ref)),
++		message: message,
++	}
++}
++
++// cstrBytes returns a byte slice containing the contents of the C string
++// pointed to by p. The slice does not include the terminating null byte.
++func cstrBytes(p *byte) []byte {
++	if p == nil {
++		return nil
++	}
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
++	}
++	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/LICENSE b/src/vendor/github.com/microsoft/go-crypto-openssl/LICENSE
+new file mode 100644
+index 00000000000000..48ea6616b5b858
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/LICENSE
+@@ -0,0 +1,21 @@
++MIT License
++
++Copyright (c) Microsoft Corporation.
++
++Permission is hereby granted, free of charge, to any person obtaining a copy
++of this software and associated documentation files (the "Software"), to deal
++in the Software without restriction, including without limitation the rights
++to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++copies of the Software, and to permit persons to whom the Software is
++furnished to do so, subject to the following conditions:
++
++The above copyright notice and this permission notice shall be included in all
++copies or substantial portions of the Software.
++
++THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++SOFTWARE
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/bbig/big.go b/src/vendor/github.com/microsoft/go-crypto-openssl/bbig/big.go
+new file mode 100644
+index 00000000000000..32ce383bd966c2
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/bbig/big.go
+@@ -0,0 +1,40 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// This is a mirror of
++// https://github.com/golang/go/blob/36b87f273cc43e21685179dc1664ebb5493d26ae/src/crypto/internal/boring/bbig/big.go.
++
++package bbig
++
++import (
++	"math/big"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-openssl/openssl"
++)
++
++func Enc(b *big.Int) openssl.BigInt {
++	if b == nil {
++		return nil
++	}
++	x := b.Bits()
++	if len(x) == 0 {
++		return openssl.BigInt{}
++	}
++	return unsafe.Slice((*uint)(&x[0]), len(x))
++}
++
++func Dec(b openssl.BigInt) *big.Int {
++	if b == nil {
++		return nil
++	}
++	if len(b) == 0 {
++		return new(big.Int)
++	}
++	x := unsafe.Slice((*big.Word)(&b[0]), len(b))
++	return new(big.Int).SetBits(x)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_amd64.h
+new file mode 100644
+index 00000000000000..9949435fe9e0ae
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_amd64.h
+@@ -0,0 +1,99 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These save the frame pointer, so in general, functions that use
++// these should have zero frame size to suppress the automatic frame
++// pointer, though it's harmless to not do this.
++
++#ifdef GOOS_windows
++
++// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
++// PUSH_REGS_HOST_TO_ABI0.
++#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
++
++// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
++// the host ABI to Go ABI0 code. It saves all registers that are
++// callee-save in the host ABI and caller-save in Go ABI0 and prepares
++// for entry to Go.
++//
++// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
++// Clear the DF flag for the Go ABI.
++// MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	PUSHFQ			\
++	CLD			\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
++	MOVQ	DI, (0*0)(SP)	\
++	MOVQ	SI, (1*8)(SP)	\
++	MOVQ	BP, (2*8)(SP)	\
++	MOVQ	BX, (3*8)(SP)	\
++	MOVQ	R12, (4*8)(SP)	\
++	MOVQ	R13, (5*8)(SP)	\
++	MOVQ	R14, (6*8)(SP)	\
++	MOVQ	R15, (7*8)(SP)	\
++	MOVUPS	X6, (8*8)(SP)	\
++	MOVUPS	X7, (10*8)(SP)	\
++	MOVUPS	X8, (12*8)(SP)	\
++	MOVUPS	X9, (14*8)(SP)	\
++	MOVUPS	X10, (16*8)(SP)	\
++	MOVUPS	X11, (18*8)(SP)	\
++	MOVUPS	X12, (20*8)(SP)	\
++	MOVUPS	X13, (22*8)(SP)	\
++	MOVUPS	X14, (24*8)(SP)	\
++	MOVUPS	X15, (26*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*0)(SP), DI	\
++	MOVQ	(1*8)(SP), SI	\
++	MOVQ	(2*8)(SP), BP	\
++	MOVQ	(3*8)(SP), BX	\
++	MOVQ	(4*8)(SP), R12	\
++	MOVQ	(5*8)(SP), R13	\
++	MOVQ	(6*8)(SP), R14	\
++	MOVQ	(7*8)(SP), R15	\
++	MOVUPS	(8*8)(SP), X6	\
++	MOVUPS	(10*8)(SP), X7	\
++	MOVUPS	(12*8)(SP), X8	\
++	MOVUPS	(14*8)(SP), X9	\
++	MOVUPS	(16*8)(SP), X10	\
++	MOVUPS	(18*8)(SP), X11	\
++	MOVUPS	(20*8)(SP), X12	\
++	MOVUPS	(22*8)(SP), X13	\
++	MOVUPS	(24*8)(SP), X14	\
++	MOVUPS	(26*8)(SP), X15	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
++	POPFQ
++
++#else
++// SysV ABI
++
++#define REGS_HOST_TO_ABI0_STACK (6*8)
++
++// SysV MXCSR matches the Go ABI, so we don't have to set that,
++// and Go doesn't modify it, so we don't have to save it.
++// Both SysV and Go require DF to be cleared, so that's already clear.
++// The SysV and Go frame pointer conventions are compatible.
++#define PUSH_REGS_HOST_TO_ABI0()	\
++	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
++	MOVQ	BP, (5*8)(SP)	\
++	LEAQ	(5*8)(SP), BP	\
++	MOVQ	BX, (0*8)(SP)	\
++	MOVQ	R12, (1*8)(SP)	\
++	MOVQ	R13, (2*8)(SP)	\
++	MOVQ	R14, (3*8)(SP)	\
++	MOVQ	R15, (4*8)(SP)
++
++#define POP_REGS_HOST_TO_ABI0()	\
++	MOVQ	(0*8)(SP), BX	\
++	MOVQ	(1*8)(SP), R12	\
++	MOVQ	(2*8)(SP), R13	\
++	MOVQ	(3*8)(SP), R14	\
++	MOVQ	(4*8)(SP), R15	\
++	MOVQ	(5*8)(SP), BP	\
++	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
++
++#endif
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_arm64.h
+new file mode 100644
+index 00000000000000..5d5061ec1dbf8c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_arm64.h
+@@ -0,0 +1,39 @@
++// Copyright 2021 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
++//
++// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
++// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
++//
++// R29 is not saved because Go will save and restore it.
++
++#define SAVE_R19_TO_R28(offset) \
++	STP	(R19, R20), ((offset)+0*8)(RSP) \
++	STP	(R21, R22), ((offset)+2*8)(RSP) \
++	STP	(R23, R24), ((offset)+4*8)(RSP) \
++	STP	(R25, R26), ((offset)+6*8)(RSP) \
++	STP	(R27, g), ((offset)+8*8)(RSP)
++#define RESTORE_R19_TO_R28(offset) \
++	LDP	((offset)+0*8)(RSP), (R19, R20) \
++	LDP	((offset)+2*8)(RSP), (R21, R22) \
++	LDP	((offset)+4*8)(RSP), (R23, R24) \
++	LDP	((offset)+6*8)(RSP), (R25, R26) \
++	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
++#define SAVE_F8_TO_F15(offset) \
++	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
++	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
++	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
++	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
++#define RESTORE_F8_TO_F15(offset) \
++	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
++	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
++	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
++	FLDPD	((offset)+6*8)(RSP), (F14, F15)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_loong64.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_loong64.h
+new file mode 100644
+index 00000000000000..b10d83732f1c6e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_loong64.h
+@@ -0,0 +1,60 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_R22_TO_R31(offset) saves R22 ~ R31 to the stack space
++// of ((offset)+0*8)(R3) ~ ((offset)+9*8)(R3).
++//
++// SAVE_F24_TO_F31(offset) saves F24 ~ F31 to the stack space
++// of ((offset)+0*8)(R3) ~ ((offset)+7*8)(R3).
++//
++// Note: g is R22
++
++#define SAVE_R22_TO_R31(offset)	\
++	MOVV	g,   ((offset)+(0*8))(R3)	\
++	MOVV	R23, ((offset)+(1*8))(R3)	\
++	MOVV	R24, ((offset)+(2*8))(R3)	\
++	MOVV	R25, ((offset)+(3*8))(R3)	\
++	MOVV	R26, ((offset)+(4*8))(R3)	\
++	MOVV	R27, ((offset)+(5*8))(R3)	\
++	MOVV	R28, ((offset)+(6*8))(R3)	\
++	MOVV	R29, ((offset)+(7*8))(R3)	\
++	MOVV	R30, ((offset)+(8*8))(R3)	\
++	MOVV	R31, ((offset)+(9*8))(R3)
++
++#define SAVE_F24_TO_F31(offset)	\
++	MOVD	F24, ((offset)+(0*8))(R3)	\
++	MOVD	F25, ((offset)+(1*8))(R3)	\
++	MOVD	F26, ((offset)+(2*8))(R3)	\
++	MOVD	F27, ((offset)+(3*8))(R3)	\
++	MOVD	F28, ((offset)+(4*8))(R3)	\
++	MOVD	F29, ((offset)+(5*8))(R3)	\
++	MOVD	F30, ((offset)+(6*8))(R3)	\
++	MOVD	F31, ((offset)+(7*8))(R3)
++
++#define RESTORE_R22_TO_R31(offset)	\
++	MOVV	((offset)+(0*8))(R3),  g	\
++	MOVV	((offset)+(1*8))(R3), R23	\
++	MOVV	((offset)+(2*8))(R3), R24	\
++	MOVV	((offset)+(3*8))(R3), R25	\
++	MOVV	((offset)+(4*8))(R3), R26	\
++	MOVV	((offset)+(5*8))(R3), R27	\
++	MOVV	((offset)+(6*8))(R3), R28	\
++	MOVV	((offset)+(7*8))(R3), R29	\
++	MOVV	((offset)+(8*8))(R3), R30	\
++	MOVV	((offset)+(9*8))(R3), R31
++
++#define RESTORE_F24_TO_F31(offset)	\
++	MOVD	((offset)+(0*8))(R3), F24	\
++	MOVD	((offset)+(1*8))(R3), F25	\
++	MOVD	((offset)+(2*8))(R3), F26	\
++	MOVD	((offset)+(3*8))(R3), F27	\
++	MOVD	((offset)+(4*8))(R3), F28	\
++	MOVD	((offset)+(5*8))(R3), F29	\
++	MOVD	((offset)+(6*8))(R3), F30	\
++	MOVD	((offset)+(7*8))(R3), F31
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_ppc64x.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_ppc64x.h
+new file mode 100644
+index 00000000000000..245a5266f6e9fa
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_ppc64x.h
+@@ -0,0 +1,195 @@
++// Copyright 2023 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI
++//
++// On PPC64/ELFv2 targets, the following registers are callee
++// saved when called from C. They must be preserved before
++// calling into Go which does not preserve any of them.
++//
++//	R14-R31
++//	CR2-4
++//	VR20-31
++//	F14-F31
++//
++// xcoff(aix) and ELFv1 are similar, but may only require a
++// subset of these.
++//
++// These macros assume a 16 byte aligned stack pointer. This
++// is required by ELFv1, ELFv2, and AIX PPC64.
++
++#define SAVE_GPR_SIZE (18*8)
++#define SAVE_GPR(offset)               \
++	MOVD	R14, (offset+8*0)(R1)  \
++	MOVD	R15, (offset+8*1)(R1)  \
++	MOVD	R16, (offset+8*2)(R1)  \
++	MOVD	R17, (offset+8*3)(R1)  \
++	MOVD	R18, (offset+8*4)(R1)  \
++	MOVD	R19, (offset+8*5)(R1)  \
++	MOVD	R20, (offset+8*6)(R1)  \
++	MOVD	R21, (offset+8*7)(R1)  \
++	MOVD	R22, (offset+8*8)(R1)  \
++	MOVD	R23, (offset+8*9)(R1)  \
++	MOVD	R24, (offset+8*10)(R1) \
++	MOVD	R25, (offset+8*11)(R1) \
++	MOVD	R26, (offset+8*12)(R1) \
++	MOVD	R27, (offset+8*13)(R1) \
++	MOVD	R28, (offset+8*14)(R1) \
++	MOVD	R29, (offset+8*15)(R1) \
++	MOVD	g,   (offset+8*16)(R1) \
++	MOVD	R31, (offset+8*17)(R1)
++
++#define RESTORE_GPR(offset)            \
++	MOVD	(offset+8*0)(R1), R14  \
++	MOVD	(offset+8*1)(R1), R15  \
++	MOVD	(offset+8*2)(R1), R16  \
++	MOVD	(offset+8*3)(R1), R17  \
++	MOVD	(offset+8*4)(R1), R18  \
++	MOVD	(offset+8*5)(R1), R19  \
++	MOVD	(offset+8*6)(R1), R20  \
++	MOVD	(offset+8*7)(R1), R21  \
++	MOVD	(offset+8*8)(R1), R22  \
++	MOVD	(offset+8*9)(R1), R23  \
++	MOVD	(offset+8*10)(R1), R24 \
++	MOVD	(offset+8*11)(R1), R25 \
++	MOVD	(offset+8*12)(R1), R26 \
++	MOVD	(offset+8*13)(R1), R27 \
++	MOVD	(offset+8*14)(R1), R28 \
++	MOVD	(offset+8*15)(R1), R29 \
++	MOVD	(offset+8*16)(R1), g   \
++	MOVD	(offset+8*17)(R1), R31
++
++#define SAVE_FPR_SIZE (18*8)
++#define SAVE_FPR(offset)               \
++	FMOVD	F14, (offset+8*0)(R1)  \
++	FMOVD	F15, (offset+8*1)(R1)  \
++	FMOVD	F16, (offset+8*2)(R1)  \
++	FMOVD	F17, (offset+8*3)(R1)  \
++	FMOVD	F18, (offset+8*4)(R1)  \
++	FMOVD	F19, (offset+8*5)(R1)  \
++	FMOVD	F20, (offset+8*6)(R1)  \
++	FMOVD	F21, (offset+8*7)(R1)  \
++	FMOVD	F22, (offset+8*8)(R1)  \
++	FMOVD	F23, (offset+8*9)(R1)  \
++	FMOVD	F24, (offset+8*10)(R1) \
++	FMOVD	F25, (offset+8*11)(R1) \
++	FMOVD	F26, (offset+8*12)(R1) \
++	FMOVD	F27, (offset+8*13)(R1) \
++	FMOVD	F28, (offset+8*14)(R1) \
++	FMOVD	F29, (offset+8*15)(R1) \
++	FMOVD	F30, (offset+8*16)(R1) \
++	FMOVD	F31, (offset+8*17)(R1)
++
++#define RESTORE_FPR(offset)            \
++	FMOVD	(offset+8*0)(R1), F14  \
++	FMOVD	(offset+8*1)(R1), F15  \
++	FMOVD	(offset+8*2)(R1), F16  \
++	FMOVD	(offset+8*3)(R1), F17  \
++	FMOVD	(offset+8*4)(R1), F18  \
++	FMOVD	(offset+8*5)(R1), F19  \
++	FMOVD	(offset+8*6)(R1), F20  \
++	FMOVD	(offset+8*7)(R1), F21  \
++	FMOVD	(offset+8*8)(R1), F22  \
++	FMOVD	(offset+8*9)(R1), F23  \
++	FMOVD	(offset+8*10)(R1), F24 \
++	FMOVD	(offset+8*11)(R1), F25 \
++	FMOVD	(offset+8*12)(R1), F26 \
++	FMOVD	(offset+8*13)(R1), F27 \
++	FMOVD	(offset+8*14)(R1), F28 \
++	FMOVD	(offset+8*15)(R1), F29 \
++	FMOVD	(offset+8*16)(R1), F30 \
++	FMOVD	(offset+8*17)(R1), F31
++
++// Save and restore VR20-31 (aka VSR56-63). These
++// macros must point to a 16B aligned offset.
++#define SAVE_VR_SIZE (12*16)
++#define SAVE_VR(offset, rtmp)         \
++	MOVD	$(offset+16*0), rtmp  \
++	STVX	V20, (rtmp)(R1)       \
++	MOVD	$(offset+16*1), rtmp  \
++	STVX	V21, (rtmp)(R1)       \
++	MOVD	$(offset+16*2), rtmp  \
++	STVX	V22, (rtmp)(R1)       \
++	MOVD	$(offset+16*3), rtmp  \
++	STVX	V23, (rtmp)(R1)       \
++	MOVD	$(offset+16*4), rtmp  \
++	STVX	V24, (rtmp)(R1)       \
++	MOVD	$(offset+16*5), rtmp  \
++	STVX	V25, (rtmp)(R1)       \
++	MOVD	$(offset+16*6), rtmp  \
++	STVX	V26, (rtmp)(R1)       \
++	MOVD	$(offset+16*7), rtmp  \
++	STVX	V27, (rtmp)(R1)       \
++	MOVD	$(offset+16*8), rtmp  \
++	STVX	V28, (rtmp)(R1)       \
++	MOVD	$(offset+16*9), rtmp  \
++	STVX	V29, (rtmp)(R1)       \
++	MOVD	$(offset+16*10), rtmp \
++	STVX	V30, (rtmp)(R1)       \
++	MOVD	$(offset+16*11), rtmp \
++	STVX	V31, (rtmp)(R1)
++
++#define RESTORE_VR(offset, rtmp)      \
++	MOVD	$(offset+16*0), rtmp  \
++	LVX	(rtmp)(R1), V20       \
++	MOVD	$(offset+16*1), rtmp  \
++	LVX	(rtmp)(R1), V21       \
++	MOVD	$(offset+16*2), rtmp  \
++	LVX	(rtmp)(R1), V22       \
++	MOVD	$(offset+16*3), rtmp  \
++	LVX	(rtmp)(R1), V23       \
++	MOVD	$(offset+16*4), rtmp  \
++	LVX	(rtmp)(R1), V24       \
++	MOVD	$(offset+16*5), rtmp  \
++	LVX	(rtmp)(R1), V25       \
++	MOVD	$(offset+16*6), rtmp  \
++	LVX	(rtmp)(R1), V26       \
++	MOVD	$(offset+16*7), rtmp  \
++	LVX	(rtmp)(R1), V27       \
++	MOVD	$(offset+16*8), rtmp  \
++	LVX	(rtmp)(R1), V28       \
++	MOVD	$(offset+16*9), rtmp  \
++	LVX	(rtmp)(R1), V29       \
++	MOVD	$(offset+16*10), rtmp \
++	LVX	(rtmp)(R1), V30       \
++	MOVD	$(offset+16*11), rtmp \
++	LVX	(rtmp)(R1), V31
++
++// LR and CR are saved in the caller's frame. The callee must
++// make space for all other callee-save registers.
++#define SAVE_ALL_REG_SIZE (SAVE_GPR_SIZE+SAVE_FPR_SIZE+SAVE_VR_SIZE)
++
++// Stack a frame and save all callee-save registers following the
++// host OS's ABI. Fortunately, this is identical for AIX, ELFv1, and
++// ELFv2. All host ABIs require the stack pointer to maintain 16 byte
++// alignment, and save the callee-save registers in the same places.
++//
++// To restate, R1 is assumed to be aligned when this macro is used.
++// This assumes the caller's frame is compliant with the host ABI.
++// CR and LR are saved into the caller's frame per the host ABI.
++// R0 is initialized to $0 as expected by Go.
++#define STACK_AND_SAVE_HOST_TO_GO_ABI(extra)                       \
++	MOVD	LR, R0                                             \
++	MOVD	R0, 16(R1)                                         \
++	MOVW	CR, R0                                             \
++	MOVD	R0, 8(R1)                                          \
++	MOVDU	R1, -(extra)-FIXED_FRAME-SAVE_ALL_REG_SIZE(R1)     \
++	SAVE_GPR(extra+FIXED_FRAME)                                \
++	SAVE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
++	SAVE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
++	MOVD	$0, R0
++
++// This unstacks the frame, restoring all callee-save registers
++// as saved by STACK_AND_SAVE_HOST_TO_GO_ABI.
++//
++// R0 is not guaranteed to contain $0 after this macro.
++#define UNSTACK_AND_RESTORE_GO_TO_HOST_ABI(extra)                     \
++	RESTORE_GPR(extra+FIXED_FRAME)                                \
++	RESTORE_FPR(extra+FIXED_FRAME+SAVE_GPR_SIZE)                  \
++	RESTORE_VR(extra+FIXED_FRAME+SAVE_GPR_SIZE+SAVE_FPR_SIZE, R0) \
++	ADD 	$(extra+FIXED_FRAME+SAVE_ALL_REG_SIZE), R1            \
++	MOVD	16(R1), R0                                            \
++	MOVD	R0, LR                                                \
++	MOVD	8(R1), R0                                             \
++	MOVW	R0, CR
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_riscv64.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_riscv64.h
+new file mode 100644
+index 00000000000000..b9322e0c53e2ac
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/abi_riscv64.h
+@@ -0,0 +1,72 @@
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++// Macros for transitioning from the host ABI to Go ABI0.
++//
++// These macros save and restore the callee-saved registers
++// from the stack, but they don't adjust stack pointer, so
++// the user should prepare stack space in advance.
++// SAVE_GPR(offset) saves X8, X9, X18-X27 to the stack space
++// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
++//
++// SAVE_FPR(offset) saves F8, F9, F18-F27 to the stack space
++// of ((offset)+0*8)(X2) ~ ((offset)+11*8)(X2).
++//
++// Note: g is X27
++
++#define SAVE_GPR(offset) \
++	MOV X8, ((offset)+0*8)(X2)   \
++	MOV X9, ((offset)+1*8)(X2)   \
++	MOV X18, ((offset)+2*8)(X2)  \
++	MOV X19, ((offset)+3*8)(X2)  \
++	MOV X20, ((offset)+4*8)(X2)  \
++	MOV X21, ((offset)+5*8)(X2)  \
++	MOV X22, ((offset)+6*8)(X2)  \
++	MOV X23, ((offset)+7*8)(X2)  \
++	MOV X24, ((offset)+8*8)(X2)  \
++	MOV X25, ((offset)+9*8)(X2)  \
++	MOV X26, ((offset)+10*8)(X2) \
++	MOV g, ((offset)+11*8)(X2)
++
++#define RESTORE_GPR(offset) \
++	MOV ((offset)+0*8)(X2), X8   \
++	MOV ((offset)+1*8)(X2), X9   \
++	MOV ((offset)+2*8)(X2), X18  \
++	MOV ((offset)+3*8)(X2), X19  \
++	MOV ((offset)+4*8)(X2), X20  \
++	MOV ((offset)+5*8)(X2), X21  \
++	MOV ((offset)+6*8)(X2), X22  \
++	MOV ((offset)+7*8)(X2), X23  \
++	MOV ((offset)+8*8)(X2), X24  \
++	MOV ((offset)+9*8)(X2), X25  \
++	MOV ((offset)+10*8)(X2), X26 \
++	MOV ((offset)+11*8)(X2), g
++
++#define SAVE_FPR(offset) \
++	MOVD F8, ((offset)+0*8)(X2)   \
++	MOVD F9, ((offset)+1*8)(X2)   \
++	MOVD F18, ((offset)+2*8)(X2)  \
++	MOVD F19, ((offset)+3*8)(X2)  \
++	MOVD F20, ((offset)+4*8)(X2)  \
++	MOVD F21, ((offset)+5*8)(X2)  \
++	MOVD F22, ((offset)+6*8)(X2)  \
++	MOVD F23, ((offset)+7*8)(X2)  \
++	MOVD F24, ((offset)+8*8)(X2)  \
++	MOVD F25, ((offset)+9*8)(X2)  \
++	MOVD F26, ((offset)+10*8)(X2) \
++	MOVD F27, ((offset)+11*8)(X2)
++
++#define RESTORE_FPR(offset) \
++	MOVD ((offset)+0*8)(X2), F8   \
++	MOVD ((offset)+1*8)(X2), F9   \
++	MOVD ((offset)+2*8)(X2), F18  \
++	MOVD ((offset)+3*8)(X2), F19  \
++	MOVD ((offset)+4*8)(X2), F20  \
++	MOVD ((offset)+5*8)(X2), F21  \
++	MOVD ((offset)+6*8)(X2), F22  \
++	MOVD ((offset)+7*8)(X2), F23  \
++	MOVD ((offset)+8*8)(X2), F24  \
++	MOVD ((offset)+9*8)(X2), F25  \
++	MOVD ((offset)+10*8)(X2), F26 \
++	MOVD ((offset)+11*8)(X2), F27
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_386.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_386.s
+new file mode 100644
+index 00000000000000..7475ec8a0b21fc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_386.s
+@@ -0,0 +1,29 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT, $28-16
++	MOVL BP, 24(SP)
++	MOVL BX, 20(SP)
++	MOVL SI, 16(SP)
++	MOVL DI, 12(SP)
++
++	MOVL ctxt+12(FP), AX
++	MOVL AX, 8(SP)
++	MOVL a+4(FP), AX
++	MOVL AX, 4(SP)
++	MOVL fn+0(FP), AX
++	MOVL AX, 0(SP)
++	CALL runtime·cgocallback(SB)
++
++	MOVL 12(SP), DI
++	MOVL 16(SP), SI
++	MOVL 20(SP), BX
++	MOVL 24(SP), BP
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_amd64.s
+new file mode 100644
+index 00000000000000..2b7eb57f8ae783
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_amd64.s
+@@ -0,0 +1,39 @@
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_amd64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++// This signature is known to SWIG, so we can't change it.
++TEXT crosscall2(SB), NOSPLIT, $0-0
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// Make room for arguments to cgocallback.
++	ADJSP $0x18
++
++#ifndef GOOS_windows
++	MOVQ DI, 0x0(SP) // fn
++	MOVQ SI, 0x8(SP) // arg
++
++	// Skip n in DX.
++	MOVQ CX, 0x10(SP) // ctxt
++
++#else
++	MOVQ CX, 0x0(SP) // fn
++	MOVQ DX, 0x8(SP) // arg
++
++	// Skip n in R8.
++	MOVQ R9, 0x10(SP) // ctxt
++
++#endif
++
++	CALL runtime·cgocallback(SB)
++
++	ADJSP $-0x18
++	POP_REGS_HOST_TO_ABI0()
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm.s
+new file mode 100644
+index 00000000000000..68034e6035aa44
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm.s
+@@ -0,0 +1,52 @@
++// Copyright 2012 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	SUB $(8*9), R13 // Reserve space for the floating point registers.
++
++	// The C arguments arrive in R0, R1, R2, and R3. We want to
++	// pass R0, R1, and R3 to Go, so we push those on the stack.
++	// Also, save C callee-save registers R4-R12.
++	MOVM.WP [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12], (R13)
++
++	// Finally, save the link register R14. This also puts the
++	// arguments we pushed for cgocallback where they need to be,
++	// starting at 4(R13).
++	MOVW.W R14, -4(R13)
++
++	// Save VFP callee-saved registers D8-D15 (same as S16-S31).
++	// Note: We always save these since we target hard-float ABI.
++	MOVD F8, (13*4+8*1)(R13)
++	MOVD F9, (13*4+8*2)(R13)
++	MOVD F10, (13*4+8*3)(R13)
++	MOVD F11, (13*4+8*4)(R13)
++	MOVD F12, (13*4+8*5)(R13)
++	MOVD F13, (13*4+8*6)(R13)
++	MOVD F14, (13*4+8*7)(R13)
++	MOVD F15, (13*4+8*8)(R13)
++
++	BL runtime·load_g(SB)
++
++	// We set up the arguments to cgocallback when saving registers above.
++	BL runtime·cgocallback(SB)
++
++	MOVD (13*4+8*1)(R13), F8
++	MOVD (13*4+8*2)(R13), F9
++	MOVD (13*4+8*3)(R13), F10
++	MOVD (13*4+8*4)(R13), F11
++	MOVD (13*4+8*5)(R13), F12
++	MOVD (13*4+8*6)(R13), F13
++	MOVD (13*4+8*7)(R13), F14
++	MOVD (13*4+8*8)(R13), F15
++
++	MOVW.P   4(R13), R14
++	MOVM.IAW (R13), [R0, R1, R3, R4, R5, R6, R7, R8, R9, g, R11, R12]
++	ADD      $(8*9), R13
++	MOVW     R14, R15
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm64.s
+new file mode 100644
+index 00000000000000..50e5261d922c56
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_arm64.s
+@@ -0,0 +1,36 @@
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_arm64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * We still need to save all callee save register as before, and then
++ *  push 3 args for fn (R0, R1, R3), skipping R2.
++ * Also note that at procedure entry in gc world, 8(RSP) will be the
++ *  first arg.
++ */
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++	STP (R29, R30), (8*22)(RSP)
++
++	// Initialize Go ABI environment
++	BL runtime·load_g(SB)
++	BL runtime·cgocallback(SB)
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	LDP (8*22)(RSP), (R29, R30)
++
++	ADD $(8*24), RSP
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_loong64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_loong64.s
+new file mode 100644
+index 00000000000000..e81df86a56e4ad
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_loong64.s
+@@ -0,0 +1,40 @@
++// Copyright 2022 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_loong64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * We still need to save all callee save register as before, and then
++ * push 3 args for fn (R4, R5, R7), skipping R6.
++ * Also note that at procedure entry in gc world, 8(R29) will be the
++ *  first arg.
++ */
++
++	ADDV $(-23*8), R3
++	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
++	MOVV R5, (2*8)(R3) // a unsafe.Pointer
++	MOVV R7, (3*8)(R3) // ctxt uintptr
++
++	SAVE_R22_TO_R31((4*8))
++	SAVE_F24_TO_F31((14*8))
++	MOVV R1, (22*8)(R3)
++
++	// Initialize Go ABI environment
++	JAL runtime·load_g(SB)
++
++	JAL runtime·cgocallback(SB)
++
++	RESTORE_R22_TO_R31((4*8))
++	RESTORE_F24_TO_F31((14*8))
++	MOVV (22*8)(R3), R1
++
++	ADDV $(23*8), R3
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_ppc64le.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_ppc64le.s
+new file mode 100644
+index 00000000000000..6d1938cd8d8bcd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_ppc64le.s
+@@ -0,0 +1,82 @@
++// Copyright 2014 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_ppc64x.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++//
++// This is a simplified version that only saves GPR and FPR registers,
++// not vector registers. This keeps the stack frame smaller to avoid
++// exceeding the nosplit stack limit.
++//
++// On PPC64LE ELFv2, callee-save registers are:
++//   R14-R31 (18 GPRs = 144 bytes)
++//   F14-F31 (18 FPRs = 144 bytes)
++//   CR2-CR4 (saved in CR field)
++//
++// Stack layout (must be 16-byte aligned):
++//   32 (FIXED_FRAME) + 24 (args) + 144 (GPR) + 144 (FPR) = 344
++//   Rounded to 352 for 16-byte alignment.
++
++#define FIXED_FRAME 32
++#define SAVE_SIZE    352
++#define GPR_OFFSET   (FIXED_FRAME+24)
++#define FPR_OFFSET   (GPR_OFFSET+SAVE_GPR_SIZE)
++
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	// Save LR and CR in caller's frame per ELFv2 ABI
++	MOVD LR, R0
++	MOVD R0, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	// Allocate our stack frame
++	MOVDU R1, -SAVE_SIZE(R1)
++
++	// Save TOC (R2) in case needed
++	MOVD R2, 24(R1)
++
++	// Save callee-save GPRs
++	SAVE_GPR(GPR_OFFSET)
++
++	// Save callee-save FPRs
++	SAVE_FPR(FPR_OFFSET)
++
++	// Initialize R0 to 0 as expected by Go
++	MOVD $0, R0
++
++	// Load the current g.
++	BL runtime·load_g(SB)
++
++	// Set up arguments for cgocallback
++	MOVD R3, FIXED_FRAME+0(R1) // fn unsafe.Pointer
++	MOVD R4, FIXED_FRAME+8(R1) // a unsafe.Pointer
++
++	// Skip R5 = n uint32
++	MOVD R6, FIXED_FRAME+16(R1)  // ctxt uintptr
++	BL   runtime·cgocallback(SB)
++
++	// Restore callee-save FPRs
++	RESTORE_FPR(FPR_OFFSET)
++
++	// Restore callee-save GPRs
++	RESTORE_GPR(GPR_OFFSET)
++
++	// Restore TOC
++	MOVD 24(R1), R2
++
++	// Deallocate stack frame
++	ADD $SAVE_SIZE, R1
++
++	// Restore LR and CR from caller's frame
++	MOVD 16(R1), R0
++	MOVD R0, LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_riscv64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_riscv64.s
+new file mode 100644
+index 00000000000000..d34699e5a84d2a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_riscv64.s
+@@ -0,0 +1,37 @@
++// Copyright 2020 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++#include "abi_riscv64.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++/*
++ * Push arguments for fn (X10, X11, X13), along with all callee-save
++ * registers. Note that at procedure entry the first argument is at
++ * 8(X2).
++ */
++	ADD $(-8*29), X2
++	MOV X10, (8*1)(X2) // fn unsafe.Pointer
++	MOV X11, (8*2)(X2) // a unsafe.Pointer
++	MOV X13, (8*3)(X2) // ctxt uintptr
++
++	SAVE_GPR((8*4))
++	MOV X1, (8*16)(X2)
++	SAVE_FPR((8*17))
++
++	// Initialize Go ABI environment
++	CALL runtime·load_g(SB)
++	CALL runtime·cgocallback(SB)
++
++	RESTORE_GPR((8*4))
++	MOV (8*16)(X2), X1
++	RESTORE_FPR((8*17))
++
++	ADD $(8*29), X2
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_s390x.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_s390x.s
+new file mode 100644
+index 00000000000000..b64466501dee38
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/asm_s390x.s
+@@ -0,0 +1,55 @@
++// Copyright 2016 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++#include "textflag.h"
++
++// Called by C code generated by cmd/cgo.
++// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
++// Saves C callee-saved registers and calls cgocallback with three arguments.
++// fn is the PC of a func(a unsafe.Pointer) function.
++TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
++	// Start with standard C stack frame layout and linkage.
++
++	// Save R6-R15 in the register save area of the calling function.
++	STMG R6, R15, 48(R15)
++
++	// Allocate 96 bytes on the stack.
++	MOVD $-96(R15), R15
++
++	// Save F8-F15 in our stack frame.
++	FMOVD F8, 32(R15)
++	FMOVD F9, 40(R15)
++	FMOVD F10, 48(R15)
++	FMOVD F11, 56(R15)
++	FMOVD F12, 64(R15)
++	FMOVD F13, 72(R15)
++	FMOVD F14, 80(R15)
++	FMOVD F15, 88(R15)
++
++	// Initialize Go ABI environment.
++	BL runtime·load_g(SB)
++
++	MOVD R2, 8(R15)  // fn unsafe.Pointer
++	MOVD R3, 16(R15) // a unsafe.Pointer
++
++	// Skip R4 = n uint32
++	MOVD R5, 24(R15)             // ctxt uintptr
++	BL   runtime·cgocallback(SB)
++
++	FMOVD 32(R15), F8
++	FMOVD 40(R15), F9
++	FMOVD 48(R15), F10
++	FMOVD 56(R15), F11
++	FMOVD 64(R15), F12
++	FMOVD 72(R15), F13
++	FMOVD 80(R15), F14
++	FMOVD 88(R15), F15
++
++	// De-allocate stack frame.
++	MOVD $96(R15), R15
++
++	// Restore R6-R15.
++	LMG 48(R15), R6, R15
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/callbacks.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/callbacks.go
+new file mode 100644
+index 00000000000000..f29e690cc15b3a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/callbacks.go
+@@ -0,0 +1,93 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import (
++	_ "unsafe"
++)
++
++// TODO: decide if we need _runtime_cgo_panic_internal
++
++//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
++//go:linkname _cgo_init _cgo_init
++var x_cgo_init_trampoline byte
++var _cgo_init = &x_cgo_init_trampoline
++
++// Creates a new system thread without updating any Go state.
++//
++// This method is invoked during shared library loading to create a new OS
++// thread to perform the runtime initialization. This method is similar to
++// _cgo_sys_thread_start except that it doesn't update any Go state.
++
++//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
++//go:linkname _cgo_thread_start _cgo_thread_start
++var x_cgo_thread_start_trampoline byte
++var _cgo_thread_start = &x_cgo_thread_start_trampoline
++
++// Notifies that the runtime has been initialized.
++//
++// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
++// to ensure that the runtime has been initialized before the CGO call is
++// executed. This is necessary for shared libraries where we kickoff runtime
++// initialization in a separate thread and return without waiting for this
++// thread to complete the init.
++
++//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
++//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
++var x_cgo_notify_runtime_init_done_trampoline byte
++var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
++
++// Indicates whether a dummy thread key has been created or not.
++//
++// When calling go exported function from C, we register a destructor
++// callback, for a dummy thread key, by using pthread_key_create.
++
++//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
++var x_cgo_pthread_key_created uintptr
++var _cgo_pthread_key_created = &x_cgo_pthread_key_created
++
++// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
++// It's for the runtime package to call at init time.
++func set_crosscall2() {
++	// nothing needs to be done here for fakecgo
++	// because it's possible to just call cgocallback directly
++}
++
++//go:linkname _set_crosscall2 runtime.set_crosscall2
++var _set_crosscall2 = set_crosscall2
++
++// Store the g into the thread-specific value.
++// So that pthread_key_destructor will dropm when the thread is exiting.
++
++//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
++//go:linkname _cgo_bindm _cgo_bindm
++var x_cgo_bindm_trampoline byte
++var _cgo_bindm = &x_cgo_bindm_trampoline
++
++// TODO: decide if we need x_cgo_set_context_function
++// TODO: decide if we need _cgo_yield
++
++var (
++	// In Go 1.20 the race detector was rewritten to pure Go
++	// on darwin. This means that when CGO_ENABLED=0 is set
++	// fakecgo is built with race detector code. This is not
++	// good since this code is pretending to be C. The go:norace
++	// pragma is not enough, since it only applies to the native
++	// ABIInternal function. The ABIO wrapper (which is necessary,
++	// since all references to text symbols from assembly will use it)
++	// does not inherit the go:norace pragma, so it will still be
++	// instrumented by the race detector.
++	//
++	// To circumvent this issue, using closure calls in the
++	// assembly, which forces the compiler to use the ABIInternal
++	// native implementation (which has go:norace) instead.
++	threadentry_call        = threadentry
++	x_cgo_init_call         = x_cgo_init
++	x_cgo_setenv_call       = x_cgo_setenv
++	x_cgo_unsetenv_call     = x_cgo_unsetenv
++	x_cgo_thread_start_call = x_cgo_thread_start
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.go
+new file mode 100644
+index 00000000000000..58b95e1f4157f2
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.go
+@@ -0,0 +1,14 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import _ "unsafe"
++
++// setg_trampoline calls setg with the G provided
++func setg_trampoline(setg uintptr, G uintptr)
++
++// call5 takes fn the C function and 5 arguments and calls the function with those arguments
++func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.lock
+new file mode 100644
+index 00000000000000..9b0650d53777bd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/fakecgo.lock
+@@ -0,0 +1,3 @@
++{
++  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/freebsd.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/freebsd.go
+new file mode 100644
+index 00000000000000..bb73a709e69188
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/freebsd.go
+@@ -0,0 +1,27 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build freebsd && !cgo
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++// Supply environ and __progname, because we don't
++// link against the standard FreeBSD crt0.o and the
++// libc dynamic library needs them.
++
++// Note: when building with cross-compiling or CGO_ENABLED=0, add
++// the following argument to `go` so that these symbols are defined by
++// making fakecgo the Cgo.
++//   -gcflags="github.com/ebitengine/purego/internal/fakecgo=-std"
++
++//go:linkname _environ environ
++//go:linkname _progname __progname
++
++//go:cgo_export_dynamic environ
++//go:cgo_export_dynamic __progname
++
++var _environ uintptr
++var _progname uintptr
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/generate.go
+new file mode 100644
+index 00000000000000..88c4cdf9ec04cc
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/generate.go
+@@ -0,0 +1,6 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package fakecgo
++
++//go:generate go run update_tool.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_darwin.go
+new file mode 100644
+index 00000000000000..d0868f0f790351
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_darwin.go
+@@ -0,0 +1,88 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++//go:norace
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	size = pthread_get_stacksize_np(pthread_self())
++	pthread_attr_init(&attr)
++	pthread_attr_setstacksize(&attr, size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
++
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++//go:norace
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	// TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_thread_exception_port();
++	//#endif
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++//go:norace
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++
++	setg_func = setg
++	size = pthread_get_stacksize_np(pthread_self())
++	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
++
++	//TODO: support ios
++	//#if TARGET_OS_IPHONE
++	//	darwin_arm_init_mach_exception_handler();
++	//	darwin_arm_init_thread_exception_port();
++	//	init_working_dir();
++	//#endif
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_freebsd.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_freebsd.go
+new file mode 100644
+index 00000000000000..55ff71e2672086
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_freebsd.go
+@@ -0,0 +1,79 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	// fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
++
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++	var attr pthread_attr_t
++
++	setg_func = setg
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
++	// but this should be OK since we are taking the address of the first variable in this function.
++	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
++	pthread_attr_destroy(&attr)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_libinit.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_libinit.go
+new file mode 100644
+index 00000000000000..e5a66f39d4f3f5
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_libinit.go
+@@ -0,0 +1,72 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++var (
++	pthread_g pthread_key_t
++
++	runtime_init_cond = PTHREAD_COND_INITIALIZER
++	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
++	runtime_init_done int
++)
++
++//go:nosplit
++//go:norace
++func x_cgo_notify_runtime_init_done() {
++	pthread_mutex_lock(&runtime_init_mu)
++	runtime_init_done = 1
++	pthread_cond_broadcast(&runtime_init_cond)
++	pthread_mutex_unlock(&runtime_init_mu)
++}
++
++// Store the g into a thread-specific value associated with the pthread key pthread_g.
++// And pthread_key_destructor will dropm when the thread is exiting.
++//
++//go:norace
++func x_cgo_bindm(g unsafe.Pointer) {
++	// We assume this will always succeed, otherwise, there might be extra M leaking,
++	// when a C thread exits after a cgo call.
++	// We only invoke this function once per thread in runtime.needAndBindM,
++	// and the next calls just reuse the bound m.
++	pthread_setspecific(pthread_g, g)
++}
++
++// _cgo_try_pthread_create retries pthread_create if it fails with
++// EAGAIN.
++//
++//go:nosplit
++//go:norace
++func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
++	var ts syscall.Timespec
++	// tries needs to be the same type as syscall.Timespec.Nsec
++	// but the fields are int32 on 32bit and int64 on 64bit.
++	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
++	tries := ts.Nsec
++	var err int
++
++	for tries = 0; tries < 20; tries++ {
++		// inlined this call because it ran out of stack when inlining was disabled
++		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
++		if err == 0 {
++			// inlined this call because it ran out of stack when inlining was disabled
++			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
++			return 0
++		}
++		if err != int(syscall.EAGAIN) {
++			return err
++		}
++		ts.Sec = 0
++		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
++		// inlined this call because it ran out of stack when inlining was disabled
++		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
++	}
++	return int(syscall.EAGAIN)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_linux.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_linux.go
+new file mode 100644
+index 00000000000000..089d9fe489407b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_linux.go
+@@ -0,0 +1,79 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:nosplit
++func _cgo_sys_thread_start(ts *ThreadStart) {
++	var attr pthread_attr_t
++	var ign, oset sigset_t
++	var p pthread_t
++	var size size_t
++	var err int
++
++	//fprintf(stderr, "runtime/cgo: _cgo_sys_thread_start: fn=%p, g=%p\n", ts->fn, ts->g); // debug
++	sigfillset(&ign)
++	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
++	ts.g.stackhi = uintptr(size)
++
++	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++
++	pthread_sigmask(SIG_SETMASK, &oset, nil)
++
++	if err != 0 {
++		print("fakecgo: pthread_create failed: ")
++		println(err)
++		abort()
++	}
++}
++
++// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
++//
++//go:linkname x_threadentry_trampoline threadentry_trampoline
++var x_threadentry_trampoline byte
++var threadentry_trampolineABI0 = &x_threadentry_trampoline
++
++//go:nosplit
++func threadentry(v unsafe.Pointer) unsafe.Pointer {
++	ts := *(*ThreadStart)(v)
++	free(v)
++
++	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
++
++	// faking funcs in go is a bit a... involved - but the following works :)
++	fn := uintptr(unsafe.Pointer(&ts.fn))
++	(*(*func())(unsafe.Pointer(&fn)))()
++
++	return nil
++}
++
++// here we will store a pointer to the provided setg func
++var setg_func uintptr
++
++// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
++// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
++// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
++// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
++//
++//go:nosplit
++func x_cgo_init(g *G, setg uintptr) {
++	var size size_t
++	var attr pthread_attr_t
++
++	setg_func = setg
++	pthread_attr_init(&attr)
++	pthread_attr_getstacksize(&attr, &size)
++	// runtime/cgo uses __builtin_frame_address(0) instead of `uintptr(unsafe.Pointer(&size))`
++	// but this should be OK since we are taking the address of the first variable in this function.
++	g.stacklo = uintptr(unsafe.Pointer(&size)) - uintptr(size) + 4096
++	pthread_attr_destroy(&attr)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_setenv.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_setenv.go
+new file mode 100644
+index 00000000000000..e42d84f0b75ea6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_setenv.go
+@@ -0,0 +1,18 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++//go:nosplit
++//go:norace
++func x_cgo_setenv(arg *[2]*byte) {
++	setenv(arg[0], arg[1], 1)
++}
++
++//go:nosplit
++//go:norace
++func x_cgo_unsetenv(arg *[1]*byte) {
++	unsetenv(arg[0])
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_util.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_util.go
+new file mode 100644
+index 00000000000000..ff190007e8b6c0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/go_util.go
+@@ -0,0 +1,38 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import "unsafe"
++
++// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
++
++// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
++// This get's called instead of the go code for creating new threads
++// -> pthread_* stuff is used, so threads are setup correctly for C
++// If this is missing, TLS is only setup correctly on thread 1!
++// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
++//
++//go:nosplit
++//go:norace
++func x_cgo_thread_start(arg *ThreadStart) {
++	var ts *ThreadStart
++	// Make our own copy that can persist after we return.
++	//	_cgo_tsan_acquire();
++	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
++	//	_cgo_tsan_release();
++	if ts == nil {
++		println("fakecgo: out of memory in thread_start")
++		abort()
++	}
++	// *ts = *arg would cause a writebarrier so copy using slices
++	const ptrSize = unsafe.Sizeof(uintptr(0))
++	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
++	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
++	for i := range s2 {
++		s1[i] = s2[i]
++	}
++	_cgo_sys_thread_start(ts) // OS-dependent half
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/iscgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/iscgo.go
+new file mode 100644
+index 00000000000000..28af41cc640724
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/iscgo.go
+@@ -0,0 +1,19 @@
++// Copyright 2010 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++// The runtime package contains an uninitialized definition
++// for runtime·iscgo. Override it to tell the runtime we're here.
++// There are various function pointers that should be set too,
++// but those depend on dynamic linker magic to get initialized
++// correctly, and sometimes they break. This variable is a
++// backup: it depends only on old C style static linking rules.
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname _iscgo runtime.iscgo
++var _iscgo bool = true
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo.go
+new file mode 100644
+index 00000000000000..38f94419397d8d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo.go
+@@ -0,0 +1,39 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++type (
++	size_t uintptr
++	// Sources:
++	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
++	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
++	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
++	sigset_t       [128]byte
++	pthread_attr_t [64]byte
++	pthread_t      int
++	pthread_key_t  uint64
++)
++
++// for pthread_sigmask:
++
++type sighow int32
++
++const (
++	SIG_BLOCK   sighow = 0
++	SIG_UNBLOCK sighow = 1
++	SIG_SETMASK sighow = 2
++)
++
++type G struct {
++	stacklo uintptr
++	stackhi uintptr
++}
++
++type ThreadStart struct {
++	g   *G
++	tls *uintptr
++	fn  uintptr
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_darwin.go
+new file mode 100644
+index 00000000000000..ecdcb2e7852560
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_darwin.go
+@@ -0,0 +1,26 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_mutex_t struct {
++		sig    int64
++		opaque [56]byte
++	}
++	pthread_cond_t struct {
++		sig    int64
++		opaque [40]byte
++	}
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
++)
++
++type stack_t struct {
++	/* not implemented */
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_freebsd.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_freebsd.go
+new file mode 100644
+index 00000000000000..4bfb70c3d5ee9a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_freebsd.go
+@@ -0,0 +1,20 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_cond_t  uintptr
++	pthread_mutex_t uintptr
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t(0)
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t(0)
++)
++
++type stack_t struct {
++	/* not implemented */
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_linux.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_linux.go
+new file mode 100644
+index 00000000000000..b08a44a1001bc0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/libcgo_linux.go
+@@ -0,0 +1,20 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++type (
++	pthread_cond_t  [48]byte
++	pthread_mutex_t [48]byte
++)
++
++var (
++	PTHREAD_COND_INITIALIZER  = pthread_cond_t{}
++	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{}
++)
++
++type stack_t struct {
++	/* not implemented */
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/linux.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/linux.go
+new file mode 100644
+index 00000000000000..f98e272e42720e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/linux.go
+@@ -0,0 +1,184 @@
++// Copyright 2016 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && linux
++
++package fakecgo
++
++import "unsafe"
++
++// argset matches runtime/cgocall.go:argset.
++type argset struct {
++	args   *uintptr
++	retval uintptr
++}
++
++//go:nosplit
++//go:norace
++func (a *argset) arg(i int) unsafe.Pointer {
++	return *(*unsafe.Pointer)(unsafe.Add(unsafe.Pointer(a.args), uintptr(i)*unsafe.Sizeof(uintptr(0))))
++}
++
++//go:linkname _cgo_libc_setegid syscall.cgo_libc_setegid
++//go:linkname _cgo_libc_seteuid syscall.cgo_libc_seteuid
++//go:linkname _cgo_libc_setgid syscall.cgo_libc_setgid
++//go:linkname _cgo_libc_setregid syscall.cgo_libc_setregid
++//go:linkname _cgo_libc_setresgid syscall.cgo_libc_setresgid
++//go:linkname _cgo_libc_setresuid syscall.cgo_libc_setresuid
++//go:linkname _cgo_libc_setreuid syscall.cgo_libc_setreuid
++//go:linkname _cgo_libc_setuid syscall.cgo_libc_setuid
++//go:linkname _cgo_libc_setgroups syscall.cgo_libc_setgroups
++
++var _cgo_libc_setegid = &_cgo_purego_setegid_trampoline
++var _cgo_libc_seteuid = &_cgo_purego_seteuid_trampoline
++var _cgo_libc_setgid = &_cgo_purego_setgid_trampoline
++var _cgo_libc_setregid = &_cgo_purego_setregid_trampoline
++var _cgo_libc_setresgid = &_cgo_purego_setresgid_trampoline
++var _cgo_libc_setresuid = &_cgo_purego_setresuid_trampoline
++var _cgo_libc_setreuid = &_cgo_purego_setreuid_trampoline
++var _cgo_libc_setuid = &_cgo_purego_setuid_trampoline
++var _cgo_libc_setgroups = &_cgo_purego_setgroups_trampoline
++
++//go:nosplit
++//go:norace
++func errno() int32 {
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	loc := __errno_location()
++	return **(**int32)(unsafe.Pointer(&loc))
++}
++
++//go:linkname _cgo_purego_setegid_trampoline _cgo_purego_setegid_trampoline
++var _cgo_purego_setegid_trampoline byte
++var x_cgo_purego_setegid_call = x_cgo_purego_setegid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setegid(c *argset) {
++	ret := setegid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_seteuid_trampoline _cgo_purego_seteuid_trampoline
++var _cgo_purego_seteuid_trampoline byte
++var x_cgo_purego_seteuid_call = x_cgo_purego_seteuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_seteuid(c *argset) {
++	ret := seteuid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setgid_trampoline _cgo_purego_setgid_trampoline
++var _cgo_purego_setgid_trampoline byte
++var x_cgo_purego_setgid_call = x_cgo_purego_setgid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgid(c *argset) {
++	ret := setgid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setregid_trampoline _cgo_purego_setregid_trampoline
++var _cgo_purego_setregid_trampoline byte
++var x_cgo_purego_setregid_call = x_cgo_purego_setregid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setregid(c *argset) {
++	ret := setregid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setresgid_trampoline _cgo_purego_setresgid_trampoline
++var _cgo_purego_setresgid_trampoline byte
++var x_cgo_purego_setresgid_call = x_cgo_purego_setresgid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresgid(c *argset) {
++	ret := setresgid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setresuid_trampoline _cgo_purego_setresuid_trampoline
++var _cgo_purego_setresuid_trampoline byte
++var x_cgo_purego_setresuid_call = x_cgo_purego_setresuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setresuid(c *argset) {
++	ret := setresuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))), uint32(uintptr(c.arg(2))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setreuid_trampoline _cgo_purego_setreuid_trampoline
++var _cgo_purego_setreuid_trampoline byte
++var x_cgo_purego_setreuid_call = x_cgo_purego_setreuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setreuid(c *argset) {
++	ret := setreuid(uint32(uintptr(c.arg(0))), uint32(uintptr(c.arg(1))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setuid_trampoline _cgo_purego_setuid_trampoline
++var _cgo_purego_setuid_trampoline byte
++var x_cgo_purego_setuid_call = x_cgo_purego_setuid
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setuid(c *argset) {
++	ret := setuid(uint32(uintptr(c.arg(0))))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
++
++//go:linkname _cgo_purego_setgroups_trampoline _cgo_purego_setgroups_trampoline
++var _cgo_purego_setgroups_trampoline byte
++var x_cgo_purego_setgroups_call = x_cgo_purego_setgroups
++
++//go:nosplit
++//go:norace
++func x_cgo_purego_setgroups(c *argset) {
++	ret := setgroups(uint32(uintptr(c.arg(0))), (*uint32)(c.arg(1)))
++	if ret == -1 {
++		c.retval = uintptr(errno())
++	} else {
++		c.retval = uintptr(ret)
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/setenv.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/setenv.go
+new file mode 100644
+index 00000000000000..f30af0e1515699
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/setenv.go
+@@ -0,0 +1,19 @@
++// Copyright 2011 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import _ "unsafe" // for go:linkname
++
++//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
++//go:linkname _cgo_setenv runtime._cgo_setenv
++var x_cgo_setenv_trampoline byte
++var _cgo_setenv = &x_cgo_setenv_trampoline
++
++//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
++//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
++var x_cgo_unsetenv_trampoline byte
++var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_386.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_386.s
+new file mode 100644
+index 00000000000000..cf56a6c71575eb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_386.s
+@@ -0,0 +1,121 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
++// On i386, both GCC and Go use stack-based calling conventions.
++//
++// When C calls a function, the stack looks like:
++//   0(SP) = return address
++//   4(SP) = arg1
++//   8(SP) = arg2
++//   ...
++//
++// When we declare a Go function with frame size $N-0, Go's prologue
++// effectively does SUB $N, SP, so the C arguments shift up by N bytes:
++//   N+0(SP) = return address
++//   N+4(SP) = arg1
++//   N+8(SP) = arg2
++//
++// Go ABI0 on 386 expects arguments starting at 0(FP) which equals N+4(SP)
++// after the prologue (where N is the local frame size).
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
++	// C args at 12(SP) and 16(SP) after frame setup (8 bytes local + 4 bytes ret addr)
++	// Go function expects args at 0(SP) and 4(SP) in local frame
++	MOVL 12(SP), AX               // first C arg
++	MOVL 16(SP), BX               // second C arg
++	MOVL AX, 0(SP)                // Go arg 1
++	MOVL BX, 4(SP)                // Go arg 2
++	MOVL ·x_cgo_init_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $4-0
++	// C args at 8(SP) after frame setup (4 bytes local + 4 bytes ret addr)
++	MOVL 8(SP), AX                        // first C arg
++	MOVL AX, 0(SP)                        // Go arg 1
++	MOVL ·x_cgo_thread_start_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX                  // first C arg
++	MOVL AX, 0(SP)                  // Go arg 1
++	MOVL ·x_cgo_setenv_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX                    // first C arg
++	MOVL AX, 0(SP)                    // Go arg 1
++	MOVL ·x_cgo_unsetenv_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++// This is called from Go, so args are at normal FP positions
++TEXT ·setg_trampoline(SB), NOSPLIT, $4-8
++	MOVL g+4(FP), AX
++	MOVL setg+0(FP), BX
++
++	// setg expects g in 0(SP)
++	MOVL AX, 0(SP)
++	CALL BX
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $24-4
++	// Save callee-saved registers
++	MOVL BP, 20(SP)
++	MOVL BX, 16(SP)
++	MOVL SI, 12(SP)
++	MOVL DI, 8(SP)
++
++	// Move C argument (arg) to stack for Go function
++	MOVL arg+0(FP), AX
++	MOVL AX, 0(SP)
++
++	MOVL ·threadentry_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++
++	// Restore callee-saved registers
++	MOVL 8(SP), DI
++	MOVL 12(SP), SI
++	MOVL 16(SP), BX
++	MOVL 20(SP), BP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $24-28
++	MOVL fn+0(FP), AX
++	MOVL a1+4(FP), BX
++	MOVL a2+8(FP), CX
++	MOVL a3+12(FP), DX
++	MOVL a4+16(FP), SI
++	MOVL a5+20(FP), DI
++
++	// Place arguments on local stack frame for C calling convention
++	MOVL BX, 0(SP)     // a1
++	MOVL CX, 4(SP)     // a2
++	MOVL DX, 8(SP)     // a3
++	MOVL SI, 12(SP)    // a4
++	MOVL DI, 16(SP)    // a5
++	CALL AX
++	MOVL AX, r1+24(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_amd64.s
+new file mode 100644
+index 00000000000000..a4ca5ea98214fd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_amd64.s
+@@ -0,0 +1,107 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++/*
++trampoline for emulating required C functions for cgo in go (see cgo.go)
++(we convert cdecl calling convention to go and vice-versa)
++
++C Calling convention cdecl used here (we only need integer args):
++1. arg: DI
++2. arg: SI
++3. arg: DX
++4. arg: CX
++5. arg: R8
++6. arg: R9
++We don't need floats with these functions -> AX=0
++return value will be in AX
++temporary register is R11
++*/
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_amd64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVQ DI, AX
++	MOVQ SI, BX
++	MOVQ ·x_cgo_init_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_thread_start_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_setenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_unsetenv_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	JMP ·x_cgo_notify_runtime_init_done(SB)
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	JMP ·x_cgo_bindm(SB)
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVQ G+8(FP), DI
++	MOVQ setg+0(FP), R11
++	XORL AX, AX
++	CALL R11
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0
++	// See crosscall2.
++	PUSH_REGS_HOST_TO_ABI0()
++
++	// X15 is designated by Go as a fixed zero register.
++	// Calling directly into ABIInternal, ensure it is zero.
++	PXOR X15, X15
++
++	MOVQ DI, AX
++	MOVQ ·threadentry_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++
++	POP_REGS_HOST_TO_ABI0()
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-56
++	MOVQ fn+0(FP), R11
++	MOVQ a1+8(FP), DI
++	MOVQ a2+16(FP), SI
++	MOVQ a3+24(FP), DX
++	MOVQ a4+32(FP), CX
++	MOVQ a5+40(FP), R8
++
++	XORL AX, AX // no floats
++
++	PUSHQ BP       // save BP
++	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
++	SUBQ  $16, SP  // allocate space for alignment
++	ANDQ  $-16, SP // align on 16 bytes for SSE
++
++	CALL R11
++
++	MOVQ BP, SP // get SP back
++	POPQ BP     // restore BP
++
++	MOVQ AX, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm.s
+new file mode 100644
+index 00000000000000..c17925d60d6787
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm.s
+@@ -0,0 +1,122 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// These trampolines map the gcc ABI to Go ABI0 and then call into the Go equivalent functions.
++// On ARM32, Go ABI0 uses stack-based calling convention.
++// Arguments are placed on the stack starting at 4(SP) after the prologue.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW R1, 8(R13)
++	MOVW ·x_cgo_init_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_thread_start_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_setenv_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_unsetenv_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-8
++	MOVW G+4(FP), R0
++	MOVW setg+0(FP), R12
++	BL   (R12)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $104-0
++	// Save C callee-saved registers at C-to-Go boundary.
++	// See crosscall2 in asm_arm.s.
++	// ARM AAPCS callee-saved: R4-R11 (includes g=R10), D8-D15.
++	// LR is saved/restored by the Go-managed frame prologue/epilogue.
++	MOVW R0, 4(R13) // arg for threadentry_call
++
++	MOVW R4, 8(R13)
++	MOVW R5, 12(R13)
++	MOVW R6, 16(R13)
++	MOVW R7, 20(R13)
++	MOVW R8, 24(R13)
++	MOVW R9, 28(R13)
++	MOVW g, 32(R13)   // R10
++	MOVW R11, 36(R13)
++
++	MOVD F8, 40(R13)
++	MOVD F9, 48(R13)
++	MOVD F10, 56(R13)
++	MOVD F11, 64(R13)
++	MOVD F12, 72(R13)
++	MOVD F13, 80(R13)
++	MOVD F14, 88(R13)
++	MOVD F15, 96(R13)
++
++	MOVW ·threadentry_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++
++	MOVD 40(R13), F8
++	MOVD 48(R13), F9
++	MOVD 56(R13), F10
++	MOVD 64(R13), F11
++	MOVD 72(R13), F12
++	MOVD 80(R13), F13
++	MOVD 88(R13), F14
++	MOVD 96(R13), F15
++
++	MOVW 8(R13), R4
++	MOVW 12(R13), R5
++	MOVW 16(R13), R6
++	MOVW 20(R13), R7
++	MOVW 24(R13), R8
++	MOVW 28(R13), R9
++	MOVW 32(R13), g
++	MOVW 36(R13), R11
++
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $8-28
++	MOVW fn+0(FP), R12
++	MOVW a1+4(FP), R0
++	MOVW a2+8(FP), R1
++	MOVW a3+12(FP), R2
++	MOVW a4+16(FP), R3
++	MOVW a5+20(FP), R4
++
++	// Store 5th arg below SP (in local frame area)
++	MOVW R4, arg5-8(SP)
++
++	// Align SP to 8 bytes for call (required by ARM AAPCS)
++	SUB  $8, R13
++	CALL (R12)
++	ADD  $8, R13
++	MOVW R0, r1+24(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm64.s
+new file mode 100644
+index 00000000000000..1deb2747ad3245
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_arm64.s
+@@ -0,0 +1,81 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_arm64.h"
++
++// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
++// R9 is used as a temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
++	MOVD G+8(FP), R0
++	MOVD setg+0(FP), R9
++	CALL R9
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
++	// See crosscall2.
++	SUB  $(8*24), RSP
++	STP  (R0, R1), (8*1)(RSP)
++	MOVD R3, (8*3)(RSP)
++
++	SAVE_R19_TO_R28(8*4)
++	SAVE_F8_TO_F15(8*14)
++
++	MOVD ·threadentry_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	MOVD $0, R0                    // TODO: get the return value from threadentry
++
++	RESTORE_R19_TO_R28(8*4)
++	RESTORE_F8_TO_F15(8*14)
++	ADD $(8*24), RSP
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVD fn+0(FP), R9
++	MOVD a1+8(FP), R0
++	MOVD a2+16(FP), R1
++	MOVD a3+24(FP), R2
++	MOVD a4+32(FP), R3
++	MOVD a5+40(FP), R4
++	CALL R9
++	MOVD R0, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_386.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_386.s
+new file mode 100644
+index 00000000000000..eea96638fa9a9b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_386.s
+@@ -0,0 +1,78 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setegid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_seteuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setregid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setresgid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setresuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setreuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setuid_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $4-0
++	MOVL 8(SP), AX
++	MOVL AX, 0(SP)
++	MOVL ·x_cgo_purego_setgroups_call(SB), CX
++	MOVL (CX), CX
++	CALL CX
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_amd64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_amd64.s
+new file mode 100644
+index 00000000000000..424ebc1e7cbb42
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_amd64.s
+@@ -0,0 +1,69 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setegid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_seteuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setregid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresgid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setresuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setreuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setuid_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOVQ DI, AX
++	MOVQ ·x_cgo_purego_setgroups_call(SB), R11
++	MOVQ (R11), R11
++	CALL R11
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm.s
+new file mode 100644
+index 00000000000000..284fe5d0e3a87a
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm.s
+@@ -0,0 +1,69 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setegid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_seteuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setregid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresgid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setresuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setreuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setuid_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
++	MOVW R0, 4(R13)
++	MOVW ·x_cgo_purego_setgroups_call(SB), R12
++	MOVW (R12), R12
++	CALL (R12)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm64.s
+new file mode 100644
+index 00000000000000..771910817b7686
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_arm64.s
+@@ -0,0 +1,60 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setegid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setgid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setregid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setuid_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R9
++	MOVD (R9), R9
++	CALL R9
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_loong64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_loong64.s
+new file mode 100644
+index 00000000000000..ebcc1176c0a0a6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_loong64.s
+@@ -0,0 +1,60 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setegid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_seteuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setregid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setresgid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setresuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setreuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setuid_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_purego_setgroups_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_ppc64le.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_ppc64le.s
+new file mode 100644
+index 00000000000000..59a95a929fb5c2
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_ppc64le.s
+@@ -0,0 +1,69 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setegid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setgid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setregid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setuid_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8-0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_riscv64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_riscv64.s
+new file mode 100644
+index 00000000000000..9e892dbd2daf71
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_riscv64.s
+@@ -0,0 +1,60 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && linux
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setegid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_seteuid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setgid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setregid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setresgid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setresuid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setreuid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setuid_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_purego_setgroups_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_s390x.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_s390x.s
+new file mode 100644
+index 00000000000000..ce4247c989f4c1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_linux_s390x.s
+@@ -0,0 +1,53 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build go1.27 && !cgo
++
++#include "textflag.h"
++
++TEXT _cgo_purego_setegid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setegid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_seteuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_seteuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setregid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setregid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setresgid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setresgid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setresuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setresuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setreuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setreuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setuid_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setuid_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
++
++TEXT _cgo_purego_setgroups_trampoline(SB), NOSPLIT|NOFRAME, $0
++	MOVD ·x_cgo_purego_setgroups_call(SB), R1
++	MOVD (R1), R1
++	BR   R1
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_loong64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_loong64.s
+new file mode 100644
+index 00000000000000..b93b5da90a8333
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_loong64.s
+@@ -0,0 +1,78 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_loong64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// R23 is used as temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOVV ·x_cgo_init_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_thread_start_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_setenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOVV ·x_cgo_unsetenv_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOVV G+8(FP), R4
++	MOVV setg+0(FP), R23
++	CALL (R23)
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $176
++	// See crosscall2.
++	MOVV R4, (1*8)(R3) // fn unsafe.Pointer
++	MOVV R5, (2*8)(R3) // a unsafe.Pointer
++	MOVV R7, (3*8)(R3) // ctxt uintptr
++
++	SAVE_R22_TO_R31((4*8))
++	SAVE_F24_TO_F31((14*8))
++
++	MOVV ·threadentry_call(SB), R23
++	MOVV (R23), R23
++	CALL (R23)
++
++	RESTORE_R22_TO_R31((4*8))
++	RESTORE_F24_TO_F31((14*8))
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-0
++	MOVV fn+0(FP), R23
++	MOVV a1+8(FP), R4
++	MOVV a2+16(FP), R5
++	MOVV a3+24(FP), R6
++	MOVV a4+32(FP), R7
++	MOVV a5+40(FP), R8
++	CALL (R23)
++	MOVV R4, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_ppc64le.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_ppc64le.s
+new file mode 100644
+index 00000000000000..444529d8ae820b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_ppc64le.s
+@@ -0,0 +1,128 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_ppc64x.h"
++
++// These trampolines map the C ABI to Go ABI and call into the Go equivalent functions.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_init_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_thread_start_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_setenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
++	MOVD ·x_cgo_unsetenv_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0-0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $16-16
++	MOVD R31, 8(R1) // save R31 (load_g clobbers it)
++
++	MOVD setg+0(FP), R12
++	MOVD newg+8(FP), R3
++
++	MOVD R12, CTR
++	CALL CTR
++
++	CALL runtime·load_g(SB)
++
++	MOVD 8(R1), R31
++	XOR  R0, R0, R0
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// Called from C (pthread_create). Must save all C callee-saved registers.
++	// Uses NOFRAME for proper ELFv2 backchain via MOVDU.
++	MOVD LR, R0
++	MOVD R0, 16(R1)
++	MOVW CR, R0
++	MOVD R0, 8(R1)
++
++	MOVDU R1, -320(R1)
++
++	SAVE_GPR(32)
++	SAVE_FPR(32+SAVE_GPR_SIZE)
++
++	MOVD $0, R0
++
++	MOVD ·threadentry_call(SB), R12
++	MOVD (R12), R12
++	MOVD R12, CTR
++	CALL CTR
++
++	RESTORE_FPR(32+SAVE_GPR_SIZE)
++	RESTORE_GPR(32)
++
++	ADD $320, R1
++
++	MOVD 16(R1), R0
++	MOVD R0, LR
++	MOVD 8(R1), R0
++	MOVW R0, CR
++	RET
++
++TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
++	MOVD LR, R20
++	MOVW CR, R21
++
++	// Load arguments from Go stack into C argument registers
++	// Go placed args at 32(R1), 40(R1), etc.
++	MOVD 32(R1), R12 // fn
++	MOVD 40(R1), R3  // a1 → first C arg
++	MOVD 48(R1), R4  // a2 → second C arg
++	MOVD 56(R1), R5  // a3 → third C arg
++	MOVD 64(R1), R6  // a4 → fourth C arg
++	MOVD 72(R1), R7  // a5 → fifth C arg
++
++	MOVDU R1, -32(R1)
++
++	MOVD R12, CTR
++	CALL CTR
++
++	// Store return value
++	// After MOVDU -32, original 80(R1) is now at 80+32=112(R1)
++	MOVD R3, (80+32)(R1)
++
++	// Deallocate frame
++	ADD $32, R1
++
++	// Clear R0 before returning to Go code.
++	// Go uses R0 as a constant 0 register for things like "std r0,X(r1)"
++	// to zero stack locations. C functions may leave garbage in R0.
++	XOR R0, R0, R0
++
++	// Restore LR/CR from non-volatile registers
++	MOVD R20, LR
++	MOVW R21, CR
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_riscv64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_riscv64.s
+new file mode 100644
+index 00000000000000..b162fdde234629
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_riscv64.s
+@@ -0,0 +1,76 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++#include "go_asm.h"
++#include "abi_riscv64.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// X5 is used as temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
++	MOV  ·x_cgo_init_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_thread_start_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_setenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
++	MOV  ·x_cgo_unsetenv_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++	RET
++
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_notify_runtime_init_done(SB)
++	RET
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
++	CALL ·x_cgo_bindm(SB)
++	RET
++
++// func setg_trampoline(setg uintptr, g uintptr)
++TEXT ·setg_trampoline(SB), NOSPLIT, $0
++	MOV  gp+8(FP), X10
++	MOV  setg+0(FP), X5
++	CALL X5
++	RET
++
++TEXT threadentry_trampoline(SB), NOSPLIT, $200
++	MOV X10, 8(SP)
++
++	SAVE_GPR(8*2)
++	SAVE_FPR(8*14)
++
++	MOV  ·threadentry_call(SB), X5
++	MOV  (X5), X5
++	CALL X5
++
++	RESTORE_GPR(8*2)
++	RESTORE_FPR(8*14)
++
++	RET
++
++TEXT ·call5(SB), NOSPLIT, $0-48
++	MOV  fn+0(FP), X5
++	MOV  a1+8(FP), X10
++	MOV  a2+16(FP), X11
++	MOV  a3+24(FP), X12
++	MOV  a4+32(FP), X13
++	MOV  a5+40(FP), X14
++	CALL X5
++	MOV  X10, ret+48(FP)
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_s390x.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_s390x.s
+new file mode 100644
+index 00000000000000..2b68d438e4ec1d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/trampolines_s390x.s
+@@ -0,0 +1,154 @@
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2026 The Ebitengine Authors
++
++//go:build go1.27 && !cgo && linux
++
++#include "textflag.h"
++#include "go_asm.h"
++
++// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++// Note that C arguments are passed in R2-R6, which matches Go ABIInternal for the first five arguments.
++// R1 is used as a temporary register.
++
++TEXT x_cgo_init_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R15, R1
++	SUB  $192, R15
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 160(R15) // save R14
++	MOVD R9, 168(R15)  // save R9 (Go runtime needs this preserved)
++
++	MOVD ·x_cgo_init_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 168(R15), R9
++	MOVD 160(R15), R14
++	ADD  $192, R15
++	BR   R14
++
++TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
++
++	MOVD ·x_cgo_thread_start_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++TEXT x_cgo_setenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
++
++	MOVD ·x_cgo_setenv_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)    // backchain
++	MOVD R14, 152(R15) // save R14
++
++	MOVD ·x_cgo_unsetenv_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	MOVD 152(R15), R14
++	ADD  $176, R15
++	BR   R14
++
++// These just tail-call into Go functions
++TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	BR ·x_cgo_notify_runtime_init_done(SB)
++
++TEXT x_cgo_bindm_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	BR ·x_cgo_bindm(SB)
++
++// setg_trampoline(setg uintptr, g uintptr) - called from Go
++TEXT ·setg_trampoline(SB), NOSPLIT|NOFRAME, $0-16
++	MOVD 8(R15), R1  // setg function pointer
++	MOVD 16(R15), R2 // g pointer -> C arg
++
++	MOVD R14, R0
++	MOVD R15, R3
++	SUB  $160, R15
++	MOVD R3, 0(R15)
++	MOVD R0, 112(R15)
++
++	BL R1                 // call setg_gcc
++	BL runtime·load_g(SB)
++
++	MOVD 112(R15), R14
++	ADD  $160, R15
++	BR   R14
++
++TEXT threadentry_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	STMG R6, R15, 48(R15) // C save area
++	MOVD R15, R1
++	SUB  $176, R15
++	MOVD R1, 0(R15)       // backchain
++
++	MOVD ·threadentry_call(SB), R1
++	MOVD (R1), R1
++	BL   R1
++
++	ADD $176, R15
++	LMG 48(R15), R6, R15
++	RET
++
++TEXT ·call5(SB), NOSPLIT|NOFRAME, $0-56
++	// Load Go args before modifying R15
++	MOVD 8(R15), R1   // fn
++	MOVD 16(R15), R7  // a1
++	MOVD 24(R15), R8  // a2
++	MOVD 32(R15), R9  // a3
++	MOVD 40(R15), R10 // a4
++	MOVD 48(R15), R11 // a5
++
++	// Save state
++	MOVD R15, R0    // original R15
++	MOVD R12, R6    // Go's R12
++	ADD  $-128, R15
++
++	// Set up C frame with backchain
++	MOVD R0, 0(R15) // backchain -> original R15
++	MOVD R0, R3     // R3 = original R15 (can't use R0 as base!)
++	MOVD 0(R3), R7  // save 0(original R15)
++	MOVD $0, 0(R3)  // terminate backchain
++
++	// Save context
++	MOVD R14, 8(R15)
++	MOVD R6, 16(R15) // R12
++	MOVD R0, 24(R15) // original R15
++	MOVD R7, 32(R15) // saved backchain
++
++	// Set up C args (reload a1 since R7 was clobbered)
++	MOVD 16(R3), R2 // a1 (use R3 as base, not R0!)
++	MOVD R8, R3     // a2
++	MOVD R9, R4     // a3
++	MOVD R10, R5    // a4
++	MOVD R11, R6    // a5
++
++	BL R1
++
++	// Store result and restore
++	MOVD 24(R15), R3 // original R15
++	MOVD R2, 56(R3)  // return value
++	MOVD 32(R15), R7
++	MOVD R7, 0(R3)   // restore backchain
++
++	MOVD 8(R15), R14
++	MOVD 16(R15), R12
++	MOVD 24(R15), R15
++	BR   R14
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols.go
+new file mode 100644
+index 00000000000000..e1339193b9764d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols.go
+@@ -0,0 +1,165 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++package fakecgo
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++//go:nosplit
++//go:norace
++func malloc(size uintptr) unsafe.Pointer {
++	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
++	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
++	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
++}
++
++//go:nosplit
++//go:norace
++func free(ptr unsafe.Pointer) {
++	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func setenv(name *byte, value *byte, overwrite int32) int32 {
++	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func unsetenv(name *byte) int32 {
++	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func sigfillset(set *sigset_t) int32 {
++	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
++	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func abort() {
++	call5(abortABI0, 0, 0, 0, 0, 0)
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_init(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
++	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_detach(thread pthread_t) int32 {
++	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
++	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
++	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
++	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
++	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
++}
++
++//go:linkname _malloc _malloc
++var _malloc uint8
++var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
++
++//go:linkname _free _free
++var _free uint8
++var freeABI0 = uintptr(unsafe.Pointer(&_free))
++
++//go:linkname _setenv _setenv
++var _setenv uint8
++var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
++
++//go:linkname _unsetenv _unsetenv
++var _unsetenv uint8
++var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
++
++//go:linkname _sigfillset _sigfillset
++var _sigfillset uint8
++var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
++
++//go:linkname _nanosleep _nanosleep
++var _nanosleep uint8
++var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
++
++//go:linkname _abort _abort
++var _abort uint8
++var abortABI0 = uintptr(unsafe.Pointer(&_abort))
++
++//go:linkname _pthread_attr_init _pthread_attr_init
++var _pthread_attr_init uint8
++var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
++
++//go:linkname _pthread_create _pthread_create
++var _pthread_create uint8
++var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
++
++//go:linkname _pthread_detach _pthread_detach
++var _pthread_detach uint8
++var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
++
++//go:linkname _pthread_sigmask _pthread_sigmask
++var _pthread_sigmask uint8
++var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
++
++//go:linkname _pthread_mutex_lock _pthread_mutex_lock
++var _pthread_mutex_lock uint8
++var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
++
++//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
++var _pthread_mutex_unlock uint8
++var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
++
++//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
++var _pthread_cond_broadcast uint8
++var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
++
++//go:linkname _pthread_setspecific _pthread_setspecific
++var _pthread_setspecific uint8
++var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_darwin.go
+new file mode 100644
+index 00000000000000..960f8168eb88d7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_darwin.go
+@@ -0,0 +1,59 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
++//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
++
++//go:nosplit
++//go:norace
++func pthread_self() pthread_t {
++	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_get_stacksize_np(thread pthread_t) size_t {
++	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
++	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++}
++
++//go:linkname _pthread_self _pthread_self
++var _pthread_self uint8
++var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
++
++//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
++var _pthread_get_stacksize_np uint8
++var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++
++//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
++var _pthread_attr_setstacksize uint8
++var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_freebsd.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_freebsd.go
+new file mode 100644
+index 00000000000000..d69775596fddf3
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_freebsd.go
+@@ -0,0 +1,48 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.7"
++//go:cgo_import_dynamic purego_free free "libc.so.7"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.7"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.7"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.7"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.7"
++//go:cgo_import_dynamic purego_abort abort "libc.so.7"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so"
++
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
++
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_linux.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_linux.go
+new file mode 100644
+index 00000000000000..cbb120431ab6bb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/zsymbols_linux.go
+@@ -0,0 +1,158 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++package fakecgo
++
++import "unsafe"
++
++//go:cgo_import_dynamic purego_malloc malloc "libc.so.6"
++//go:cgo_import_dynamic purego_free free "libc.so.6"
++//go:cgo_import_dynamic purego_setenv setenv "libc.so.6"
++//go:cgo_import_dynamic purego_unsetenv unsetenv "libc.so.6"
++//go:cgo_import_dynamic purego_sigfillset sigfillset "libc.so.6"
++//go:cgo_import_dynamic purego_nanosleep nanosleep "libc.so.6"
++//go:cgo_import_dynamic purego_abort abort "libc.so.6"
++//go:cgo_import_dynamic purego___errno_location __errno_location "libc.so.6"
++//go:cgo_import_dynamic purego_setegid setegid "libc.so.6"
++//go:cgo_import_dynamic purego_seteuid seteuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgid setgid "libc.so.6"
++//go:cgo_import_dynamic purego_setregid setregid "libc.so.6"
++//go:cgo_import_dynamic purego_setresgid setresgid "libc.so.6"
++//go:cgo_import_dynamic purego_setresuid setresuid "libc.so.6"
++//go:cgo_import_dynamic purego_setreuid setreuid "libc.so.6"
++//go:cgo_import_dynamic purego_setuid setuid "libc.so.6"
++//go:cgo_import_dynamic purego_setgroups setgroups "libc.so.6"
++//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_create pthread_create "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_detach pthread_detach "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_getstacksize pthread_attr_getstacksize "libpthread.so.0"
++//go:cgo_import_dynamic purego_pthread_attr_destroy pthread_attr_destroy "libpthread.so.0"
++
++//go:nosplit
++//go:norace
++func __errno_location() uintptr {
++	return uintptr(call5(__errno_locationABI0, 0, 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setegid(egid uint32) int32 {
++	return int32(call5(setegidABI0, uintptr(egid), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func seteuid(euid uint32) int32 {
++	return int32(call5(seteuidABI0, uintptr(euid), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setgid(gid uint32) int32 {
++	return int32(call5(setgidABI0, uintptr(gid), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setregid(rgid uint32, egid uint32) int32 {
++	return int32(call5(setregidABI0, uintptr(rgid), uintptr(egid), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setresgid(rgid uint32, egid uint32, sgid uint32) int32 {
++	return int32(call5(setresgidABI0, uintptr(rgid), uintptr(egid), uintptr(sgid), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setresuid(ruid uint32, euid uint32, suid uint32) int32 {
++	return int32(call5(setresuidABI0, uintptr(ruid), uintptr(euid), uintptr(suid), 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setreuid(ruid uint32, euid uint32) int32 {
++	return int32(call5(setreuidABI0, uintptr(ruid), uintptr(euid), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setuid(uid uint32) int32 {
++	return int32(call5(setuidABI0, uintptr(uid), 0, 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func setgroups(ngid uint32, gidset *uint32) int32 {
++	return int32(call5(setgroupsABI0, uintptr(ngid), uintptr(unsafe.Pointer(gidset)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_getstacksize(attr *pthread_attr_t, stacksize *size_t) int32 {
++	return int32(call5(pthread_attr_getstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(unsafe.Pointer(stacksize)), 0, 0, 0))
++}
++
++//go:nosplit
++//go:norace
++func pthread_attr_destroy(attr *pthread_attr_t) int32 {
++	return int32(call5(pthread_attr_destroyABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++}
++
++//go:linkname ___errno_location ___errno_location
++var ___errno_location uint8
++var __errno_locationABI0 = uintptr(unsafe.Pointer(&___errno_location))
++
++//go:linkname _setegid _setegid
++var _setegid uint8
++var setegidABI0 = uintptr(unsafe.Pointer(&_setegid))
++
++//go:linkname _seteuid _seteuid
++var _seteuid uint8
++var seteuidABI0 = uintptr(unsafe.Pointer(&_seteuid))
++
++//go:linkname _setgid _setgid
++var _setgid uint8
++var setgidABI0 = uintptr(unsafe.Pointer(&_setgid))
++
++//go:linkname _setregid _setregid
++var _setregid uint8
++var setregidABI0 = uintptr(unsafe.Pointer(&_setregid))
++
++//go:linkname _setresgid _setresgid
++var _setresgid uint8
++var setresgidABI0 = uintptr(unsafe.Pointer(&_setresgid))
++
++//go:linkname _setresuid _setresuid
++var _setresuid uint8
++var setresuidABI0 = uintptr(unsafe.Pointer(&_setresuid))
++
++//go:linkname _setreuid _setreuid
++var _setreuid uint8
++var setreuidABI0 = uintptr(unsafe.Pointer(&_setreuid))
++
++//go:linkname _setuid _setuid
++var _setuid uint8
++var setuidABI0 = uintptr(unsafe.Pointer(&_setuid))
++
++//go:linkname _setgroups _setgroups
++var _setgroups uint8
++var setgroupsABI0 = uintptr(unsafe.Pointer(&_setgroups))
++
++//go:linkname _pthread_attr_getstacksize _pthread_attr_getstacksize
++var _pthread_attr_getstacksize uint8
++var pthread_attr_getstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_getstacksize))
++
++//go:linkname _pthread_attr_destroy _pthread_attr_destroy
++var _pthread_attr_destroy uint8
++var pthread_attr_destroyABI0 = uintptr(unsafe.Pointer(&_pthread_attr_destroy))
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_darwin.s
+new file mode 100644
+index 00000000000000..35ef7ac11cb955
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_darwin.s
+@@ -0,0 +1,19 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_self(SB)
++
++TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_get_stacksize_np(SB)
++
++TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_setstacksize(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_freebsd.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_freebsd.s
+new file mode 100644
+index 00000000000000..da07005c0bc988
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_freebsd.s
+@@ -0,0 +1,16 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_linux.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_linux.s
+new file mode 100644
+index 00000000000000..ba2cb38918d538
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_linux.s
+@@ -0,0 +1,46 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT ___errno_location(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego___errno_location(SB)
++
++TEXT _setegid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setegid(SB)
++
++TEXT _seteuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_seteuid(SB)
++
++TEXT _setgid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setgid(SB)
++
++TEXT _setregid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setregid(SB)
++
++TEXT _setresgid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setresgid(SB)
++
++TEXT _setresuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setresuid(SB)
++
++TEXT _setreuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setreuid(SB)
++
++TEXT _setuid(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setuid(SB)
++
++TEXT _setgroups(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setgroups(SB)
++
++TEXT _pthread_attr_getstacksize(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_getstacksize(SB)
++
++TEXT _pthread_attr_destroy(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_destroy(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_stubs.s
+new file mode 100644
+index 00000000000000..067583d68517a9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/fakecgo/ztrampolines_stubs.s
+@@ -0,0 +1,55 @@
++// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++
++// SPDX-License-Identifier: Apache-2.0
++// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++
++//go:build !cgo && (darwin || freebsd || linux)
++
++#include "textflag.h"
++
++// these stubs are here because it is not possible to go:linkname directly the C functions
++
++TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_malloc(SB)
++
++TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_free(SB)
++
++TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_setenv(SB)
++
++TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_unsetenv(SB)
++
++TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_sigfillset(SB)
++
++TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_nanosleep(SB)
++
++TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_abort(SB)
++
++TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_attr_init(SB)
++
++TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_create(SB)
++
++TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_detach(SB)
++
++TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_sigmask(SB)
++
++TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_lock(SB)
++
++TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_mutex_unlock(SB)
++
++TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_cond_broadcast(SB)
++
++TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
++	JMP purego_pthread_setspecific(SB)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_386.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_386.s
+new file mode 100644
+index 00000000000000..4442c19e74564e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_386.s
+@@ -0,0 +1,101 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16-0
++	MOVL 20(SP), AX               // libcArgs from C caller (frame_size + ret_addr = 16 + 4)
++	MOVL AX, 0(SP)                // pass to Go function
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-4
++	// Frame layout: 16 bytes local storage
++	// 0(SP) - saved BP (original SP)
++	// 4(SP) - saved libcArgs pointer
++	// 8(SP) - saved fn pointer
++	// 12(SP) - scratch
++
++	// Load args pointer FIRST before any stack modifications
++	MOVL libcArgs+0(FP), SI
++
++	// Save original SP and libcArgs in local frame
++	MOVL SP, BP
++	ADDL $16, BP   // BP = original SP (before frame allocation)
++	MOVL BP, 0(SP) // save original SP
++	MOVL SI, 4(SP) // save libcArgs pointer
++
++	// Load struct fields
++	MOVL libcCallInfo_fn(SI), AX
++	MOVL AX, 8(SP)                 // save fn pointer
++	MOVL libcCallInfo_n(SI), CX
++	MOVL libcCallInfo_args(SI), BX
++
++	// Allocate 16 bytes for fast path (0-3 args)
++	MOVL SP, BP
++	SUBL $16, SP
++
++	// Fast path for 0-3 args, otherwise fall through to manyargs
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
++
++	// manyargs: 4+ args, restore SP and reallocate
++	MOVL BP, SP
++
++	// Calculate stack space needed: n*4 bytes, aligned to 16
++	MOVL CX, AX
++	SHLL $2, AX   // AX = n * 4
++	ADDL $15, AX
++	ANDL $~15, AX // 16-byte align
++	SUBL AX, SP
++
++	// Copy all args to stack
++	// BX = args pointer, CX = count, DI = dest
++	MOVL SP, DI
++
++copy_loop:
++	DECL CX
++	MOVL (BX)(CX*4), AX
++	MOVL AX, (DI)(CX*4)
++	CMPL CX, $0
++	JNE  copy_loop
++	JMP  _0args
++
++// Fast path: fall through to copy args
++_3args:
++	MOVL 8(BX), AX
++	MOVL AX, 8(SP)
++
++_2args:
++	MOVL 4(BX), AX
++	MOVL AX, 4(SP)
++
++_1args:
++	MOVL 0(BX), AX
++	MOVL AX, 0(SP)
++
++_0args:
++	MOVL 8(BP), DX // fn pointer from saved location
++	CALL DX
++	MOVL BP, SP
++
++ret:
++	// Reload libcArgs pointer from saved location
++	MOVL 4(SP), SI
++
++	// Save return values (AX already has r1, need to save DX before it's clobbered)
++	MOVL DX, 12(SP)              // temporarily save r2
++	MOVL AX, libcCallInfo_r1(SI)
++	MOVL 12(SP), AX
++	MOVL AX, libcCallInfo_r2(SI)
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_amd64.s
+new file mode 100644
+index 00000000000000..8be7dba90de142
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_amd64.s
+@@ -0,0 +1,123 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++#ifdef GOOS_windows
++	MOVQ CX, 0(SP)
++
++#else
++	MOVQ DI, 0(SP)
++
++#endif
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++#ifdef GOOS_windows
++#define RegArgsN 4
++#else
++#define RegArgsN 6
++#endif
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
++	// Load pointer from stack (ABI0 calling convention)
++	// Store argument and original SP in a callee-saved register
++	MOVQ libcArgs+0(FP), R13
++	MOVQ SP, R14
++
++	// Align stack to 16 bytes
++	ANDQ $~15, SP
++
++	MOVQ libcCallInfo_fn(R13), R11
++	MOVQ libcCallInfo_n(R13), CX
++	MOVQ libcCallInfo_args(R13), R10
++
++	// Fast version, do not store args on the stack.
++	CMPL CX, $0; JE _0args
++	CMPL CX, $1; JE _1args
++	CMPL CX, $2; JE _2args
++	CMPL CX, $3; JE _3args
++	CMPL CX, $4; JE _4args
++
++#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
++	CMPL CX, $5; JE _5args
++	CMPL CX, $6; JE _6args
++
++#endif
++
++	// Reserve stack space for remaining args
++	MOVQ CX, R12
++	SUBQ $RegArgsN, R12
++	ADDQ $1, R12        // make even number of words for stack alignment
++	ANDQ $~1, R12
++	SHLQ $3, R12
++	SUBQ R12, SP
++
++	// Copy args to the stack.
++	// CX: count of stack arguments (n-RegArgsN)
++	// SI: &args[RegArgsN]
++	// DI: copy of RSP
++	SUBQ $RegArgsN, CX
++	MOVQ R10, SI
++	ADDQ $(8*RegArgsN), SI
++	MOVQ SP, DI
++	CLD
++	REP; MOVSQ
++
++#ifndef GOOS_windows
++_6args:
++	MOVQ (5*8)(R10), R9
++
++_5args:
++	MOVQ (4*8)(R10), R8
++
++#endif
++_4args:
++	MOVQ (3*8)(R10), CX
++
++_3args:
++	MOVQ (2*8)(R10), DX
++
++_2args:
++	MOVQ (1*8)(R10), SI
++
++_1args:
++	MOVQ (0*8)(R10), DI
++
++_0args:
++
++	XORL AX, AX // vararg: say "no float args"
++
++#ifdef GOOS_windows
++	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
++	// and 32 bytes of shadow space on the stack.
++	ADJSP $32
++	MOVQ  CX, R9
++	MOVQ  DX, R8
++	MOVQ  SI, DX
++	MOVQ  DI, CX
++
++#endif
++
++	CALL R11
++
++#ifdef GOOS_windows
++	ADJSP $-32
++
++#endif
++
++	MOVQ R14, SP // free stack space
++
++	// Return result.
++	MOVQ AX, libcCallInfo_r1(R13)
++	MOVQ DX, libcCallInfo_r2(R13)
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm.s
+new file mode 100644
+index 00000000000000..948ff9cf4a84e1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm.s
+@@ -0,0 +1,107 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2026 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $8
++	MOVW R0, 4(R13)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-4
++	// Load args pointer first, before modifying SP
++	MOVW libcArgs+0(FP), R0
++
++	// Save callee-saved registers R4-R7 and LR.
++	// We use R4 for libcArgs pointer.
++	// We use R5 for args pointer.
++	// We use R6 for n, then reused for saving SP.
++	// We use R7 for scratch.
++	MOVM.DB.W [R4-R7, R14], (R13)
++
++	MOVW R0, R4 // Move libcArgs to R4
++
++	MOVW libcCallInfo_n(R4), R6
++	MOVW libcCallInfo_args(R4), R5
++	MOVW libcCallInfo_fn(R4), R12
++
++	CMP $4, R6
++	BGT args_stack
++
++	CMP $0, R6
++	BEQ call
++	CMP $1, R6
++	BEQ args_1
++	CMP $2, R6
++	BEQ args_2
++	CMP $3, R6
++	BEQ args_3
++
++args_4:
++	MOVM.IA (R5), [R0, R1, R2, R3]
++	B       call
++
++args_3:
++	MOVM.IA (R5), [R0, R1, R2]
++	B       call
++
++args_2:
++	MOVM.IA (R5), [R0, R1]
++	B       call
++
++args_1:
++	MOVW (R5), R0
++	B    call
++
++args_stack:
++	// Calculate stack space needed: (n-4)*4
++	SUB  $4, R6, R7
++	MOVW R7, R2
++	SLL  $2, R2     // bytes
++
++	// Save SP (R6 is free now, n no longer needed)
++	MOVW R13, R6
++
++	// Allocate stack
++	SUB R2, R13
++	BIC $7, R13 // Align to 8 bytes
++
++	// Copy args
++	ADD  $16, R5, R14 // Src = args + 16
++	MOVW R13, R3      // Dst = SP
++
++copy_loop:
++	MOVW.P 4(R14), R1 // read
++	MOVW.P R1, 4(R3)  // write
++	SUB    $1, R7
++	CMP    $0, R7
++	BNE    copy_loop
++
++	// Load first 4 args
++	MOVM.IA (R5), [R0, R1, R2, R3]
++
++	// Reload fn
++	MOVW libcCallInfo_fn(R4), R12
++
++	BL (R12)
++
++	// Restore SP
++	MOVW R6, R13
++	B    ret
++
++call:
++	BL (R12)
++
++ret:
++	MOVW R0, libcCallInfo_r1(R4)
++	MOVW R1, libcCallInfo_r2(R4)
++
++	MOVM.IA.W (R13), [R4-R7, R14]
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm64.s
+new file mode 100644
+index 00000000000000..ea2a33662a89f0
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_arm64.s
+@@ -0,0 +1,100 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVD R0, 8(RSP)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
++	// Save original stack pointer
++	MOVD RSP, R20
++
++	// Load pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R3
++
++	MOVD libcCallInfo_args(R3), R12
++	MOVD libcCallInfo_fn(R3), R13
++
++	// Do we have more than 8 arguments?
++	MOVD libcCallInfo_n(R3), R0
++	CMP  $0, R0; BEQ _0args
++	CMP  $1, R0; BEQ _1args
++	CMP  $2, R0; BEQ _2args
++	CMP  $3, R0; BEQ _3args
++	CMP  $4, R0; BEQ _4args
++	CMP  $5, R0; BEQ _5args
++	CMP  $6, R0; BEQ _6args
++	CMP  $7, R0; BEQ _7args
++	CMP  $8, R0; BEQ _8args
++
++	// Reserve stack space for remaining args
++	SUB $8, R0, R2
++	ADD $1, R2, R3 // make even number of words for stack alignment
++	AND $~1, R3
++	LSL $3, R3
++	SUB R3, RSP
++
++	// R4: size of stack arguments (n-8)*8
++	// R5: &args[8]
++	// R6: loop counter, from 0 to (n-8)*8
++	// R7: scratch
++	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
++	SUB  $8, R0, R4
++	LSL  $3, R4
++	ADD  $(8*8), R12, R5
++	MOVD $0, R6
++	MOVD RSP, R8
++
++stackargs:
++	MOVD (R6)(R5), R7
++	MOVD R7, (R6)(R8)
++	ADD  $8, R6
++	CMP  R6, R4
++	BNE  stackargs
++
++_8args:
++	MOVD (7*8)(R12), R7
++
++_7args:
++	MOVD (6*8)(R12), R6
++
++_6args:
++	MOVD (5*8)(R12), R5
++
++_5args:
++	MOVD (4*8)(R12), R4
++
++_4args:
++	MOVD (3*8)(R12), R3
++
++_3args:
++	MOVD (2*8)(R12), R2
++
++_2args:
++	MOVD (1*8)(R12), R1
++
++_1args:
++	MOVD (0*8)(R12), R0
++
++_0args:
++
++	BL (R13)
++
++	// Restore original stack pointer
++	MOVD R20, RSP
++
++	MOVD libcArgs+0(FP), R3
++	MOVD R0, libcCallInfo_r1(R3) // save r1
++	MOVD R1, libcCallInfo_r2(R3) // save r2
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_loong64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_loong64.s
+new file mode 100644
+index 00000000000000..0036346faededf
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_loong64.s
+@@ -0,0 +1,119 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOVV R4, 8(R3)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
++	// Load pointer from stack (ABI0 calling convention)
++	MOVV libcArgs+0(FP), R12
++
++	// Save original stack pointer
++	MOVV R3, R23
++
++	// Align stack to 16 bytes for C calling convention
++	MOVV $-16, R15
++	AND  R15, R3
++
++	MOVV libcCallInfo_args(R12), R13
++	MOVV libcCallInfo_fn(R12), R14
++
++	// Do we have more than 8 arguments?
++	MOVV libcCallInfo_n(R12), R4
++	BEQ  R4, R0, _0args
++	MOVV $1, R15
++	BEQ  R4, R15, _1args
++	MOVV $2, R15
++	BEQ  R4, R15, _2args
++	MOVV $3, R15
++	BEQ  R4, R15, _3args
++	MOVV $4, R15
++	BEQ  R4, R15, _4args
++	MOVV $5, R15
++	BEQ  R4, R15, _5args
++	MOVV $6, R15
++	BEQ  R4, R15, _6args
++	MOVV $7, R15
++	BEQ  R4, R15, _7args
++	MOVV $8, R15
++	BEQ  R4, R15, _8args
++
++	// Reserve stack space for remaining args
++	MOVV R4, R16
++	ADDV $-8, R16 // R16 = n-8
++	MOVV R16, R12 // R12 = n-8 (reuse R12, no longer need libcArgs)
++	ADDV $1, R12  // R12 = (n-8)+1
++	MOVV $-2, R15
++	AND  R15, R12 // make even number of words for stack alignment
++	SLLV $3, R12  // R12 = bytes to reserve
++	SUBV R12, R3  // SP -= bytes
++
++	// R16: size of stack arguments (n-8)*8
++	// R15: &args[8]
++	// R17: loop counter, from 0 to (n-8)*8
++	// R18: scratch
++	// R19: copy of R3 (SP)
++	// R20: scratch
++	SLLV $3, R16     // R16 = (n-8)*8
++	MOVV R13, R15
++	ADDV $(8*8), R15 // R15 = args + 64 = &args[8]
++	MOVV R0, R17     // R17 = 0 (loop counter)
++	MOVV R3, R19     // R19 = SP copy
++
++stackargs:
++	MOVV R15, R18
++	ADDV R17, R18            // R18 = &args[8] + counter
++	MOVV (R18), R18          // R18 = args[8 + counter/8]
++	MOVV R19, R20
++	ADDV R17, R20            // R20 = SP_copy + counter
++	MOVV R18, (R20)          // stack[counter/8] = R18
++	ADDV $8, R17             // counter += 8
++	BNE  R17, R16, stackargs // while counter != (n-8)*8
++
++_8args:
++	MOVV (7*8)(R13), R11
++
++_7args:
++	MOVV (6*8)(R13), R10
++
++_6args:
++	MOVV (5*8)(R13), R9
++
++_5args:
++	MOVV (4*8)(R13), R8
++
++_4args:
++	MOVV (3*8)(R13), R7
++
++_3args:
++	MOVV (2*8)(R13), R6
++
++_2args:
++	MOVV (1*8)(R13), R5
++
++_1args:
++	MOVV (0*8)(R13), R4
++
++_0args:
++
++	CALL (R14)
++
++	// Restore original stack pointer
++	MOVV R23, R3
++
++	MOVV libcArgs+0(FP), R12
++	MOVV R4, libcCallInfo_r1(R12) // save r1
++	MOVV R5, libcCallInfo_r2(R12) // save r2
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_others.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_others.s
+new file mode 100644
+index 00000000000000..05b68fa204a71b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_others.s
+@@ -0,0 +1,10 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo && !arm && !arm64 && !386 && !amd64 && !loong64 && !ppc64le && !riscv64 && (!s390x || !go1.27)
++
++// This file silences errors about body-less functions.
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_ppc64le.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_ppc64le.s
+new file mode 100644
+index 00000000000000..1eacc7832ab330
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_ppc64le.s
+@@ -0,0 +1,144 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// R3 already contains the libcArgs pointer from cgocall
++	MOVD  LR, R0
++	MOVD  R0, 16(R1)
++	MOVDU R1, -32(R1)
++	MOVD  R3, 32(R1)
++	CALL  ·syscallNSystemStack(SB)
++	ADD   $32, R1
++	MOVD  16(R1), R0
++	MOVD  R0, LR
++	RET
++
++// PPC64LE ELFv2 ABI: R3-R10 args, R3-R4 return, R14-R31 callee-saved
++// Go ABI: R3-R10, R14-R17 args, R20-R21 scratch, R30=g, R31=scratch
++// We use R24-R28 which are callee-saved in both ABIs.
++// Go frame: 48 locals + 32 linkage = 80 bytes. Locals start at 32(R1).
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $48-8
++	// Save callee-saved registers we'll use
++	MOVD R24, 32(R1)
++	MOVD R25, 40(R1)
++	MOVD R26, 48(R1)
++	MOVD R27, 56(R1)
++	MOVD R28, 64(R1)
++
++	// Load libcArgs pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R11
++
++	// Store values we need across the C call in callee-saved registers
++	MOVD R1, R24                     // R24 = original SP
++	MOVD R11, R25                    // R25 = libcArgs
++	MOVD libcCallInfo_args(R11), R26 // R26 = args
++	MOVD libcCallInfo_fn(R11), R27   // R27 = fn
++	MOVD libcCallInfo_n(R11), R28    // R28 = n
++
++	// Do we have more than 8 arguments?
++	CMP R28, $8
++	BLE _allocsmall
++
++	// >8 args: allocate large frame ((n-8+1) & ~1) * 8 + 96
++	SUB  $8, R28, R3
++	ADD  $1, R3
++	MOVD $~1, R4
++	AND  R4, R3
++	SLD  $3, R3
++	ADD  $96, R3
++	NEG  R3, R4
++	ADD  R4, R24, R1
++	MOVD $~15, R3
++	AND  R3, R1      // 16-byte align
++	MOVD R24, 0(R1)  // back chain
++	MOVD R2, 24(R1)  // save TOC
++
++	// Copy args[8..n-1] to stack at offset 96
++	MOVD $8, R3
++
++_stackargs:
++	SLD  $3, R3, R5
++	MOVD (R26)(R5), R6
++	SUB  $8, R3, R7
++	SLD  $3, R7
++	ADD  $96, R7
++	MOVD R6, (R1)(R7)
++	ADD  $1, R3
++	CMP  R3, R28
++	BLT  _stackargs
++	BR   _8args
++
++_allocsmall:
++	// <=8 args: allocate minimum 96-byte C frame
++	ADD  $-96, R24, R1
++	MOVD $~15, R3
++	AND  R3, R1
++	MOVD R24, 0(R1)    // back chain
++	MOVD R2, 24(R1)    // save TOC
++
++	// Branch to appropriate label based on arg count
++	CMP R28, $0; BEQ _0args
++	CMP R28, $1; BEQ _1args
++	CMP R28, $2; BEQ _2args
++	CMP R28, $3; BEQ _3args
++	CMP R28, $4; BEQ _4args
++	CMP R28, $5; BEQ _5args
++	CMP R28, $6; BEQ _6args
++	CMP R28, $7; BEQ _7args
++
++_8args:
++	MOVD (7*8)(R26), R10
++
++_7args:
++	MOVD (6*8)(R26), R9
++
++_6args:
++	MOVD (5*8)(R26), R8
++
++_5args:
++	MOVD (4*8)(R26), R7
++
++_4args:
++	MOVD (3*8)(R26), R6
++
++_3args:
++	MOVD (2*8)(R26), R5
++
++_2args:
++	MOVD (1*8)(R26), R4
++
++_1args:
++	MOVD (0*8)(R26), R3
++
++_0args:
++	// ELFv2: function address in R12 and CTR
++	MOVD R27, R12
++	MOVD R12, CTR
++	BL   (CTR)
++
++	// Restore TOC and stack pointer
++	MOVD 24(R1), R2
++	MOVD R24, R1
++
++	// Save return values
++	MOVD R3, libcCallInfo_r1(R25)
++	MOVD R4, libcCallInfo_r2(R25)
++
++	// Restore callee-saved registers
++	MOVD 32(R1), R24
++	MOVD 40(R1), R25
++	MOVD 48(R1), R26
++	MOVD 56(R1), R27
++	MOVD 64(R1), R28
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_riscv64.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_riscv64.s
+new file mode 100644
+index 00000000000000..e7676e6aa8c2ef
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_riscv64.s
+@@ -0,0 +1,112 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2015 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
++	MOV  A0, 8(X2)
++	CALL ·syscallNSystemStack(SB)
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $0-8
++	// Load pointer from stack (ABI0 calling convention)
++	MOV libcArgs+0(FP), X5
++
++	// Save original stack pointer
++	MOV X2, X20
++
++	// Align stack to 16 bytes for C calling convention
++	ANDI $-16, X2, X2
++
++	MOV libcCallInfo_args(X5), X30
++	MOV libcCallInfo_fn(X5), X29
++
++	// Do we have more than 8 arguments?
++	MOV libcCallInfo_n(X5), X10
++	BEQ X10, ZERO, _0args
++	MOV $1, X6
++	BEQ X10, X6, _1args
++	MOV $2, X6
++	BEQ X10, X6, _2args
++	MOV $3, X6
++	BEQ X10, X6, _3args
++	MOV $4, X6
++	BEQ X10, X6, _4args
++	MOV $5, X6
++	BEQ X10, X6, _5args
++	MOV $6, X6
++	BEQ X10, X6, _6args
++	MOV $7, X6
++	BEQ X10, X6, _7args
++	MOV $8, X6
++	BEQ X10, X6, _8args
++
++	// Reserve stack space for remaining args
++	ADDI $-8, X10, X7
++	ADDI $1, X7, X5   // make even number of words for stack alignment
++	ANDI $-2, X5, X5
++	SLLI $3, X5, X5
++	SUB  X5, X2, X2
++
++	// X6: size of stack arguments (n-8)*8
++	// X7: &args[8]
++	// X8: loop counter, from 0 to (n-8)*8
++	// X9: scratch
++	// X28: copy of X2 (SP)
++	ADDI $-8, X10, X6
++	SLLI $3, X6, X6
++	ADDI $(8*8), X7, X7
++	MOV  ZERO, X8
++	MOV  X2, X28
++
++stackargs:
++	ADD  X8, X7, X9
++	MOV  (X9), X9
++	ADD  X8, X28, X31
++	MOV  X9, (X31)
++	ADDI $8, X8, X8
++	BNE  X8, X6, stackargs
++
++_8args:
++	MOV (7*8)(X30), X17
++
++_7args:
++	MOV (6*8)(X30), X16
++
++_6args:
++	MOV (5*8)(X30), X15
++
++_5args:
++	MOV (4*8)(X30), X14
++
++_4args:
++	MOV (3*8)(X30), X13
++
++_3args:
++	MOV (2*8)(X30), X12
++
++_2args:
++	MOV (1*8)(X30), X11
++
++_1args:
++	MOV (0*8)(X30), X10
++
++_0args:
++
++	CALL X29
++
++	// Restore original stack pointer
++	MOV X20, X2
++
++	MOV libcArgs+0(FP), X5
++	MOV X10, libcCallInfo_r1(X5) // save r1
++	MOV X11, libcCallInfo_r2(X5) // save r2
++
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_s390x.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_s390x.s
+new file mode 100644
+index 00000000000000..6a8c18c0f111c6
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/asm_s390x.s
+@@ -0,0 +1,120 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Copyright 2009 The Go Authors. All rights reserved.
++// Use of this source code is governed by a BSD-style
++// license that can be found in the LICENSE file.
++
++//go:build go1.27 && !cgo
++
++#include "go_asm.h"
++#include "textflag.h"
++
++// S390X ELF ABI:
++// - Args in R2-R6, float args in F0, F2, F4, F6
++// - Return values in R2, R3 (and F0 for floats)
++// - Callee-saved: R6-R13, R15, F8-F15
++// - R14 is link register (return address)
++// - R15 is stack pointer
++// - Standard frame: 160 bytes minimum with register save area at 48(R15)
++
++TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT|NOFRAME, $0-0
++	// R2 already contains the libcArgs pointer from cgocall
++	// Save callee-saved registers to caller's save area
++	STMG R6, R15, 48(R15)
++	MOVD R15, R1
++	SUB  $32, R15
++	MOVD R1, 0(R15)
++	MOVD R2, 8(R15)
++	BL   ·syscallNSystemStack(SB)
++	ADD  $32, R15
++	LMG  48(R15), R6, R15
++	RET
++
++TEXT ·syscallNAsm(SB), NOSPLIT, $64-8
++	// Save callee-saved registers we'll use (R6-R11)
++	STMG R6, R11, 8(R15)
++
++	// Load libcArgs pointer from stack (ABI0 calling convention)
++	MOVD libcArgs+0(FP), R11
++
++	// Store values we need across the C call in callee-saved registers
++	MOVD R15, R7                    // R7 = original SP
++	MOVD R11, R8                    // R8 = libcArgs
++	MOVD libcCallInfo_args(R11), R9 // R9 = args
++	MOVD libcCallInfo_fn(R11), R10  // R10 = fn
++	MOVD libcCallInfo_n(R11), R6    // R6 = n
++
++	// Do we have more than 5 arguments?
++	CMPBLE R6, $5, _allocsmall
++
++	// >5 args: allocate frame for stack args ((n-5+1) & ~1) * 8 + 160
++	MOVD R6, R1
++	SUB  $5, R1
++	ADD  $1, R1
++	MOVD $~1, R0
++	AND  R0, R1
++	SLD  $3, R1
++	ADD  $160, R1
++	SUB  R1, R7, R15
++	MOVD $~15, R0
++	AND  R0, R15     // 16-byte align
++	MOVD R7, 0(R15)  // back chain
++
++	// Copy args[5..n-1] to stack at offset 160
++	MOVD $5, R1
++
++_stackargs:
++	SLD  $3, R1, R3
++	MOVD (R9)(R3*1), R0
++	SUB  $5, R1, R4
++	SLD  $3, R4
++	ADD  $160, R4
++	MOVD R0, (R15)(R4*1)
++	ADD  $1, R1
++	CMP  R1, R6
++	BLT  _stackargs
++	BR   _5args
++
++_allocsmall:
++	// <=5 args: allocate minimum 160-byte C frame
++	SUB  $160, R7, R15
++	MOVD $~15, R0
++	AND  R0, R15
++	MOVD R7, 0(R15)    // back chain
++
++	// Branch to appropriate label based on arg count
++	CMPBEQ R6, $0, _0args
++	CMPBEQ R6, $1, _1args
++	CMPBEQ R6, $2, _2args
++	CMPBEQ R6, $3, _3args
++	CMPBEQ R6, $4, _4args
++
++_5args:
++	MOVD (4*8)(R9), R6
++
++_4args:
++	MOVD (3*8)(R9), R5
++
++_3args:
++	MOVD (2*8)(R9), R4
++
++_2args:
++	MOVD (1*8)(R9), R3
++
++_1args:
++	MOVD (0*8)(R9), R2
++
++_0args:
++	BL R10
++
++	// Restore stack pointer
++	MOVD R7, R15
++
++	// Save return values
++	MOVD R2, libcCallInfo_r1(R8)
++	MOVD R3, libcCallInfo_r2(R8)
++
++	// Restore callee-saved registers (R6-R11)
++	LMG 8(R15), R6, R11
++	RET
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/dl.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/dl.h
+new file mode 100644
+index 00000000000000..4ff00b18668375
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/dl.h
+@@ -0,0 +1,15 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// OpenSSL C API. Run "go generate ." to regenerate the bindings.
++
++#ifndef _GO_DL_SHIMS_H // only include this header once
++#define _GO_DL_SHIMS_H
++
++void *dlopen(const char *path, int flags);
++int dlclose(void *handle);
++void *dlsym(void *handle, const char *symbol);
++char *dlerror(void);
++
++#endif // _GO_DL_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors.go
+new file mode 100644
+index 00000000000000..5f589254830a4d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors.go
+@@ -0,0 +1,37 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package ossl
++
++import (
++	"errors"
++	"unsafe"
++)
++
++// newMkcgoErr constructs an error from the given message and OpenSSL error state.
++func newMkcgoErr(msg string, state uintptr) error {
++	if state == 0 {
++		// No error
++		return nil
++	}
++	bio := BIO_PTR(state)
++	defer BIO_free(bio)
++	// Retrieve pointer to data, which is owned by bio.
++	var data *byte
++	n := BIO_ctrl(bio, BIO_CTRL_INFO, 0, unsafe.Pointer(&data))
++	if n == 0 {
++		// If no errors in queue, return simple message
++		return errors.New(msg + " failed")
++	}
++	const extra = "\nopenssl error(s):\n"
++	buf := make([]byte, len(msg)+len(extra)+int(n))
++	copy(buf, msg)
++	copy(buf[len(msg):], extra)
++	copy(buf[len(msg)+len(extra):], unsafe.Slice(data, n))
++	// Remove trailing line jump if present.
++	if buf[len(buf)-1] == '\n' {
++		buf = buf[:len(buf)-1]
++	}
++	// Avoid an allocation by constructing the string directly from the byte slice.
++	return errors.New(unsafe.String(unsafe.SliceData(buf), len(buf)))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_cgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_cgo.go
+new file mode 100644
+index 00000000000000..86b001762fba83
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_cgo.go
+@@ -0,0 +1,33 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package ossl
++
++/*
++#include "zossl.h"
++
++// Force mkcgo_err_retrieve to be stack-guarded,
++// even when it doesn't actually need it.
++// This is necessary to ensure Go binaries built
++// with -fstack-protector-strong comply with BinSkim BA3003,
++// so that at least one function in the binary uses __stack_chk_guard.
++// See https://github.com/microsoft/go/issues/2240.
++
++#define MKCGO_STACK_PROTECT
++
++#if defined(__has_attribute)
++#if __has_attribute(stack_protect)
++#undef MKCGO_STACK_PROTECT
++#define MKCGO_STACK_PROTECT __attribute__((stack_protect))
++#endif
++#endif
++
++// mkcgo_err_retrieve retrieves the error state from OpenSSL.
++uintptr_t MKCGO_STACK_PROTECT mkcgo_err_retrieve() {
++	// BIO operations using BIO_s_mem should not fail.
++	_BIO_PTR bio = _mkcgo_BIO_new(_mkcgo_BIO_s_mem(), NULL);
++	_mkcgo_ERR_print_errors(bio);
++	return (uintptr_t)bio;
++}
++*/
++import "C"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_nocgo.go
+new file mode 100644
+index 00000000000000..ec42d4f6f9c26c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/errors_nocgo.go
+@@ -0,0 +1,19 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package ossl
++
++// retrieveErrorState retrieves errors from the OpenSSL error queue.
++// It might run on the system stack, so it can't allocate Go memory
++// nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func retrieveErrorState() uintptr {
++	// BIO operations using BIO_s_mem should not fail.
++	smem := syscallNRaw(_mkcgo_BIO_s_mem)
++	bio := syscallNRaw(_mkcgo_BIO_new, smem)
++	syscallNRaw(_mkcgo_ERR_print_errors, bio)
++	return bio
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/ossl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/ossl.go
+new file mode 100644
+index 00000000000000..9acac55865dc17
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/ossl.go
+@@ -0,0 +1,62 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Package ossl provides a Go interface to OpenSSL.
++package ossl
++
++//go:generate go run ../../cmd/mkcgo -out zossl.go -mode dynload -package ossl shims.h
++//go:generate go run ../../cmd/mkcgo -out zossl.go -nocgo -mode dynload -package ossl shims.h
++//go:generate go run ../../cmd/mkcgo -out zdl.go -nocgo -mode dynamic -noerrors -package ossl -tags unix dl.h
++
++import "unsafe"
++
++const _OSSL_PARAM_UNMODIFIED uint = uint(^uintptr(0))
++
++// OSSL_PARAM is a structure to pass or request object parameters.
++// https://docs.openssl.org/3.0/man3/OSSL_PARAM/.
++type OSSL_PARAM struct {
++	Key        *byte
++	DataType   uint32
++	Data       unsafe.Pointer
++	DataSize   uint
++	ReturnSize uint
++}
++
++func ossl_param_construct(key *byte, dataType uint32, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return OSSL_PARAM{
++		Key:        key,
++		DataType:   dataType,
++		Data:       data,
++		DataSize:   uint(dataSize),
++		ReturnSize: _OSSL_PARAM_UNMODIFIED,
++	}
++}
++
++func OSSL_PARAM_construct_octet_string(key *byte, data unsafe.Pointer, dataSize int) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_OCTET_STRING, data, dataSize)
++}
++
++func OSSL_PARAM_construct_int32(key *byte, data *int32) OSSL_PARAM {
++	return ossl_param_construct(key, OSSL_PARAM_INTEGER, unsafe.Pointer(data), 4)
++}
++
++func OSSL_PARAM_construct_end() OSSL_PARAM {
++	return OSSL_PARAM{}
++}
++
++func OSSL_PARAM_modified(param *OSSL_PARAM) bool {
++	// If ReturnSize is not set, the parameter has not been modified.
++	return param != nil && param.ReturnSize != _OSSL_PARAM_UNMODIFIED
++}
++
++// goString converts a C string (byte pointer) to a Go string
++func goString(p *byte) string {
++	if p == nil {
++		return ""
++	}
++	end := unsafe.Pointer(p)
++	for *(*byte)(end) != 0 {
++		end = unsafe.Add(end, 1)
++	}
++	return string(unsafe.Slice(p, uintptr(end)-uintptr(unsafe.Pointer(p))))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/shims.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/shims.h
+new file mode 100644
+index 00000000000000..9a47c5bf820472
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/shims.h
+@@ -0,0 +1,446 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
++// OpenSSL C API. Run "go generate ." to regenerate the bindings.
++// Do not include this file, import "zossl.h" instead.
++
++#ifndef _GO_OSSL_SHIMS_H // only include this header once
++#define _GO_OSSL_SHIMS_H
++
++#include <stdlib.h> // size_t
++#include <stdint.h> // uint64_t
++
++// The following includes are used by the checkheader tool.
++// #include <openssl/bio.h>
++// #include <openssl/crypto.h>
++// #include <openssl/evp.h>
++// #include <openssl/ec.h>
++// #include <openssl/kdf.h>
++// #include <openssl/obj_mac.h>
++// #include <openssl/rsa.h>
++// #include <openssl/err.h>
++// #include <openssl/hmac.h>
++// #include <openssl/rand.h>
++// #include <openssl/dsa.h>
++// #if OPENSSL_VERSION_NUMBER >= 0x30000000L
++// #include <openssl/core_names.h>
++// #include <openssl/provider.h>
++// #include <openssl/param_build.h>
++// #include <openssl/params.h>
++// #endif
++// #if OPENSSL_VERSION_NUMBER < 0x10100000L
++// #include <openssl/bn.h>
++// #endif
++
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
++
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS     = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS     = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG         = 0x00000040,
++
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
++	_EVP_CTRL_AEAD_GET_TAG = 0x10,
++	_EVP_CTRL_AEAD_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD     = 1,
++	_EVP_PKEY_RSA         = 6,
++	_EVP_PKEY_EC          = 408,
++	_EVP_PKEY_TLS1_PRF    = 1021,
++	_EVP_PKEY_X25519      = 1034,
++	_EVP_PKEY_HKDF        = 1036,
++	_EVP_PKEY_ED25519     = 1087,
++	_EVP_PKEY_DSA         = 116,
++    _EVP_PKEY_MLKEM_768  = 1455,
++    _EVP_PKEY_MLKEM_1024 = 1456,
++    _EVP_PKEY_ML_DSA_44  = 1457,
++    _EVP_PKEY_ML_DSA_65  = 1458,
++    _EVP_PKEY_ML_DSA_87  = 1459,
++	_EVP_PKEY_OP_DERIVE = (1 << 10), // this value differs between OpenSSL 1 and 3, but we only use it in 1
++	_EVP_MAX_MD_SIZE    = 64,
++
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR    = 0x87,
++
++	_EVP_MD_CTRL_XOF_LEN = 0x3,
++
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY  = 2,
++
++	_EVP_PKEY_CTRL_TLS_MD     = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED   = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD    = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT  = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY   = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO  = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE  = 0x1007,
++
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1        = 713,
++	_NID_secp384r1        = 715,
++	_NID_secp521r1        = 716,
++
++	_NID_ML_KEM_768 = 1455,
++	_NID_ML_KEM_1024 = 1456,
++	_NID_ML_DSA_44 = 1457,
++	_NID_ML_DSA_65 = 1458,
++	_NID_ML_DSA_87 = 1459,
++
++	_RSA_PKCS1_PADDING                 = 1,
++	_RSA_NO_PADDING                    = 3,
++	_RSA_PKCS1_OAEP_PADDING            = 4,
++	_RSA_PKCS1_PSS_PADDING             = 6,
++	_RSA_PSS_SALTLEN_DIGEST            = -1,
++	_RSA_PSS_SALTLEN_AUTO              = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN          = -2,
++	_RSA_PSS_SALTLEN_MAX               = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING         = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN     = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS     = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD         = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD         = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL      = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS   = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
++
++	BIO_CTRL_INFO = 3,
++};
++
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _EVP_KEYMGMT_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef void* _BIO_METHOD_PTR;
++typedef void* _BIO_PTR;
++typedef int point_conversion_form_t;
++
++// Tags used by mkcgo to determine which OpenSSL version each function is available in:
++// - no tag: available in all supported versions (OpenSSL 1.1.1+)
++// - legacy_1: Only OpenSSL 1
++// - 3: OpenSSL 3.0 or later
++// - 33: OpenSSL 3.3 or later
++
++// The noescape/nocallback attributes are performance optimizations.
++// Only add functions that have been observed to benefit from these
++// directives, not every function that is merely expected to meet
++// the noescape/nocallback criteria.
++
++// BIO API
++const _BIO_METHOD_PTR BIO_s_mem(void) __attribute__((tag(""),tag("init_3"),noerror));
++_BIO_PTR BIO_new(const _BIO_METHOD_PTR type) __attribute__((tag(""),tag("init_3")));
++int BIO_free(_BIO_PTR a) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
++long BIO_ctrl(_BIO_PTR bp, int cmd, long larg, void *parg) __attribute__((tag(""),tag("init_3"),noerror,noescape,nocallback));
++
++// ERR API
++unsigned long ERR_peek_error(void) __attribute__((noerror));
++void ERR_print_errors(_BIO_PTR bp) __attribute__((tag(""),tag("init_3"),noescape,nocallback));
++
++// OPENSSL API
++const char *OpenSSL_version(int type) __attribute__((noerror));
++void OPENSSL_init(void);
++int OPENSSL_init_crypto(uint64_t ops, const _OPENSSL_INIT_SETTINGS_PTR settings);
++unsigned long OpenSSL_version_num(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_major(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_minor(void) __attribute__((tag("version"),optional,noerror));
++unsigned int OPENSSL_version_patch(void) __attribute__((tag("version"),optional,noerror));
++
++// CRYPTO API
++void *CRYPTO_malloc(size_t num, const char *file, int line);
++void CRYPTO_free(void *str, const char *file, int line);
++
++// FIPS API
++int FIPS_mode(void) __attribute__((tag("legacy_1"),tag("init_1"),noerror));
++int FIPS_mode_set(int r) __attribute__((tag("legacy_1"),tag("init_1")));
++
++// EVP Config API
++int EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR libctx) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR libctx, int enable) __attribute__((tag("3")));
++
++// OSSL_PROVIDER API
++int OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR libctx, const char *name) __attribute__((tag("3"),noerror));
++_OSSL_PROVIDER_PTR OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR libctx, const char *name, int retain_fallbacks) __attribute__((tag("3")));
++const char *OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR prov) __attribute__((tag("3"),noerror));
++
++// RAND API
++int RAND_bytes(unsigned char *buf, int num) __attribute__((tag("legacy_1"),noescape,nocallback,slice("buf","num")));
++int RAND_bytes_ex(_OSSL_LIB_CTX_PTR ctx, unsigned char *buf, size_t num, unsigned int strength) __attribute__((tag("3"),noescape,nocallback,slice("buf","num")));
++
++// EVP_MD API
++_EVP_MD_PTR EVP_MD_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3"),tag("init_3")));
++void EVP_MD_free(_EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3")));
++const char *EVP_MD_get0_name(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++int EVP_MD_get_type(const _EVP_MD_PTR md) __attribute__((tag("3"),noerror));
++const _OSSL_PROVIDER_PTR EVP_MD_get0_provider(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("init_3"),noerror));
++int EVP_MD_get_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_size"),noerror));
++int EVP_MD_get_block_size(const _EVP_MD_PTR md) __attribute__((tag("3"),tag("legacy_1","EVP_MD_block_size"),noerror));
++const _EVP_MD_PTR EVP_md5_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_ripemd160(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md4(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_md5(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha1(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha384(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512_224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha512_256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_224(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_256(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_384(void) __attribute__((noerror));
++const _EVP_MD_PTR EVP_sha3_512(void) __attribute__((noerror));
++
++_EVP_MD_CTX_PTR EVP_MD_CTX_new(void);
++void EVP_MD_CTX_free(_EVP_MD_CTX_PTR ctx);
++int EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR ctx, int cmd, int p1, void *p2);
++int EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR out, const _EVP_MD_CTX_PTR in);
++const _OSSL_PARAM_PTR EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR ctx, _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
++int EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
++int EVP_Digest(const void *data, size_t count, unsigned char *md, unsigned int *size, const _EVP_MD_PTR type, _ENGINE_PTR impl) __attribute__((noescape,nocallback,slice("data","count"),slice("md","size")));
++int EVP_DigestInit_ex(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type, _ENGINE_PTR impl);
++int EVP_DigestInit(_EVP_MD_CTX_PTR ctx, const _EVP_MD_PTR type);
++int EVP_DigestUpdate(_EVP_MD_CTX_PTR ctx, const void *d, size_t cnt) __attribute__((noescape,nocallback,slice("d","cnt")));
++int EVP_DigestFinal_ex(_EVP_MD_CTX_PTR ctx, unsigned char *md, unsigned int *s) __attribute__((noescape,nocallback,slice("md","s")));
++int EVP_DigestFinalXOF(_EVP_MD_CTX_PTR ctx, unsigned char *md, size_t mdlen) __attribute__((tag("33"),noescape,nocallback,slice("md","mdlen")));
++int EVP_DigestSqueeze(_EVP_MD_CTX_PTR ctx, unsigned char *out, size_t outlen) __attribute__((tag("33"),optional,noescape,nocallback,slice("out","outlen")));
++int EVP_DigestSign(_EVP_MD_CTX_PTR ctx, unsigned char *sigret, size_t *siglen, const unsigned char *tbs, size_t tbslen) __attribute__((noescape,nocallback,slice("sigret","siglen"),slice("tbs","tbslen")));
++int EVP_DigestSignInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestSignFinal(_EVP_MD_CTX_PTR ctx, unsigned char *sig, size_t *siglen) __attribute__((slice("sig","siglen")));
++int EVP_DigestVerifyInit(_EVP_MD_CTX_PTR ctx, _EVP_PKEY_CTX_PTR *pctx, const _EVP_MD_PTR type, _ENGINE_PTR e, _EVP_PKEY_PTR pkey);
++int EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR ctx, const unsigned char *sig, size_t siglen) __attribute__((slice("sig","siglen")));
++int EVP_DigestVerify(_EVP_MD_CTX_PTR ctx, const unsigned char *sigret, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sigret","siglen"),slice("tbs","tbslen")));
++
++// HMAC API
++int HMAC_Init_ex(_HMAC_CTX_PTR arg0, const void *arg1, int arg2, const _EVP_MD_PTR arg3, _ENGINE_PTR arg4) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
++int HMAC_Update(_HMAC_CTX_PTR arg0, const unsigned char *arg1, size_t arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
++int HMAC_Final(_HMAC_CTX_PTR arg0, unsigned char *arg1, unsigned int *arg2) __attribute__((tag("legacy_1"),noescape,nocallback,slice("arg1","arg2")));
++
++_HMAC_CTX_PTR HMAC_CTX_new(void) __attribute__((tag("legacy_1")));
++int HMAC_CTX_copy(_HMAC_CTX_PTR dest, _HMAC_CTX_PTR src) __attribute__((tag("legacy_1"),noescape,nocallback));
++void HMAC_CTX_free(_HMAC_CTX_PTR arg0) __attribute__((tag("legacy_1"),noescape,nocallback));
++
++// EVP_CIPHER API
++_EVP_CIPHER_PTR EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++const char *EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_128_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_192_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ctr(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_aes_256_gcm(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_ecb(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_des_ede3_cbc(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_rc4(void) __attribute__((noerror));
++const _EVP_CIPHER_PTR EVP_chacha20_poly1305(void) __attribute__((optional,noerror));
++int EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR cipher) __attribute__((tag("3"),tag("legacy_1","EVP_CIPHER_block_size"),noerror));
++
++_EVP_CIPHER_CTX_PTR EVP_CIPHER_CTX_new(void);
++int EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR x, int padding);
++int EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR x, int keylen);
++void EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR arg0);
++int EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR ctx, int type, int arg, void *ptr);
++int EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv, int enc);
++int EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
++int EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
++int EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl) __attribute__((noescape,nocallback,slice("out","outl")));
++int EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR ctx, const _EVP_CIPHER_PTR type, _ENGINE_PTR impl, const unsigned char *key, const unsigned char *iv);
++int EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR ctx, unsigned char *out, int *outl, const unsigned char *in, int inl) __attribute__((noescape,nocallback,slice("out","outl"),slice("in","inl")));
++int EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR ctx, unsigned char *outm, int *outl) __attribute__((noescape,nocallback,slice("outm","outl")));
++
++// EVP_PKEY API
++_EVP_PKEY_PTR EVP_PKEY_new(void);
++_EVP_PKEY_PTR EVP_PKEY_new_raw_private_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
++_EVP_PKEY_PTR EVP_PKEY_new_raw_public_key(int type, _ENGINE_PTR e, const unsigned char *key, size_t keylen) __attribute__((slice("key","keylen")));
++int EVP_PKEY_get_size(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_size")));
++int EVP_PKEY_get_bits(const _EVP_PKEY_PTR pkey) __attribute__((tag("3"),tag("legacy_1","EVP_PKEY_bits"))); 
++void EVP_PKEY_free(_EVP_PKEY_PTR arg0);
++_RSA_PTR EVP_PKEY_get1_RSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_assign(_EVP_PKEY_PTR pkey, int type, void *key) __attribute__((tag("legacy_1")));
++_EC_KEY_PTR EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++_DSA_PTR EVP_PKEY_get0_DSA(_EVP_PKEY_PTR pkey) __attribute__((tag("legacy_1")));
++int EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR pkey, const unsigned char *pub, size_t publen) __attribute__((tag("3"),slice("pub","publen")));
++size_t EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR pkey, unsigned char **ppub) __attribute__((tag("3")));
++int EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR pkey, const char *key_name, _BIGNUM_PTR *bn) __attribute__((tag("3"),noescape,nocallback));
++int EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR pkey, const char *key_name, unsigned char *buf, size_t buf_len, size_t *out_len) __attribute__((tag("3"),slice("buf","buf_len")));
++int EVP_PKEY_up_ref(_EVP_PKEY_PTR key);
++int EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR pkey, _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++int EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR ctx, void *label, int labellen) __attribute__((tag("3"),slice("label","labellen")));
++int EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR pkey, unsigned char *pub, size_t *publen) __attribute__((noescape,nocallback,slice("pub","publen")));
++int EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR pkey, unsigned char *priv, size_t *privlen) __attribute__((noescape,nocallback,slice("priv","privlen")));
++int EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *pkey, int selection, _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey);
++int EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR *ppkey) __attribute__((noescape,nocallback));
++int EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
++int EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
++int EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_sign(_EVP_PKEY_CTX_PTR arg0, unsigned char *arg1, size_t *arg2, const unsigned char *arg3, size_t arg4) __attribute__((slice("arg1","arg2"),slice("arg3","arg4")));
++int EVP_PKEY_verify(_EVP_PKEY_CTX_PTR ctx, const unsigned char *sig, size_t siglen, const unsigned char *tbs, size_t tbslen) __attribute__((slice("sig","siglen"),slice("tbs","tbslen")));
++int EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR ctx);
++int EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR ctx, _EVP_PKEY_PTR peer);
++int EVP_PKEY_derive(_EVP_PKEY_CTX_PTR ctx, unsigned char *key, size_t *keylen) __attribute__((noescape,nocallback,slice("key","keylen")));
++int EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR ctx) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, ...) __attribute__((tag("3")));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, size_t arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type, const char *arg1) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++_EVP_PKEY_PTR EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR ctx, const char *propq, const char *type) __attribute__((tag("3"),variadic("EVP_PKEY_Q_keygen"),noescape,nocallback));
++
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new(_EVP_PKEY_PTR arg0, _ENGINE_PTR arg1);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_id(int id, _ENGINE_PTR e);
++_EVP_PKEY_CTX_PTR EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR libctx, _EVP_PKEY_PTR pkey, const char *propquery) __attribute__((tag("3")));
++void EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR arg0);
++int EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR ctx, int keytype, int optype, int cmd, int p1, void *p2);
++int EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback));
++int EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR arg0, int arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR arg0, const _EVP_MD_PTR arg1) __attribute__((tag("3")));
++int EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
++int EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
++int EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR arg0, const unsigned char *arg1, int arg2) __attribute__((tag("3"),slice("arg1","arg2")));
++
++// RSA API
++_RSA_PTR RSA_new(void) __attribute__((tag("legacy_1")));
++void RSA_free(_RSA_PTR arg0) __attribute__((tag("legacy_1")));
++void RSA_get0_factors(const _RSA_PTR rsa, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_factors(_RSA_PTR rsa, _BIGNUM_PTR p, _BIGNUM_PTR q) __attribute__((tag("legacy_1")));
++void RSA_get0_crt_params(const _RSA_PTR r, const _BIGNUM_PTR *dmp1, const _BIGNUM_PTR *dmq1, const _BIGNUM_PTR *iqmp) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_crt_params(_RSA_PTR rsa, _BIGNUM_PTR dmp1, _BIGNUM_PTR dmp2, _BIGNUM_PTR iqmp) __attribute__((tag("legacy_1")));
++void RSA_get0_key(const _RSA_PTR rsa, const _BIGNUM_PTR *n, const _BIGNUM_PTR *e, const _BIGNUM_PTR *d) __attribute__((tag("legacy_1"),noerror));
++int RSA_set0_key(_RSA_PTR r, _BIGNUM_PTR n, _BIGNUM_PTR e, _BIGNUM_PTR d) __attribute__((tag("legacy_1")));
++
++// BIGNUM API
++_BIGNUM_PTR BN_new(void);
++void BN_free(_BIGNUM_PTR arg0);
++void BN_clear(_BIGNUM_PTR arg0);
++void BN_clear_free(_BIGNUM_PTR arg0);
++int BN_num_bits(const _BIGNUM_PTR arg0) __attribute__((noerror));
++_BIGNUM_PTR BN_bin2bn(const unsigned char *arg0, int arg1, _BIGNUM_PTR arg2) __attribute__((slice("arg0","arg1")));
++_BIGNUM_PTR BN_lebin2bn(const unsigned char *s, int slen, _BIGNUM_PTR ret) __attribute__((slice("s","slen")));
++int BN_bn2lebinpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
++int BN_bn2binpad(const _BIGNUM_PTR a, unsigned char *to, int tolen) __attribute__((errcond("== -1"),slice("to","tolen")));
++
++// EC API
++int EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR key, _BIGNUM_PTR x, _BIGNUM_PTR y) __attribute__((tag("legacy_1")));
++int EC_KEY_set_public_key(_EC_KEY_PTR key, const _EC_POINT_PTR pub) __attribute__((tag("legacy_1")));
++void EC_KEY_free(_EC_KEY_PTR arg0) __attribute__((tag("legacy_1")));
++const _EC_GROUP_PTR EC_KEY_get0_group(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _BIGNUM_PTR EC_KEY_get0_private_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++const _EC_POINT_PTR EC_KEY_get0_public_key(const _EC_KEY_PTR arg0) __attribute__((tag("legacy_1"),noerror));
++_EC_KEY_PTR EC_KEY_new_by_curve_name(int arg0) __attribute__((tag("legacy_1")));
++int EC_KEY_set_private_key(_EC_KEY_PTR arg0, const _BIGNUM_PTR arg1) __attribute__((tag("legacy_1")));
++int EC_KEY_check_key(const _EC_KEY_PTR key) __attribute__((tag("legacy_1")));
++_EC_POINT_PTR EC_POINT_new(const _EC_GROUP_PTR arg0);
++void EC_POINT_free(_EC_POINT_PTR arg0);
++int EC_POINT_mul(const _EC_GROUP_PTR group, _EC_POINT_PTR r, const _BIGNUM_PTR n, const _EC_POINT_PTR q, const _BIGNUM_PTR m, _BN_CTX_PTR ctx);
++int EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR arg0, const _EC_POINT_PTR arg1, _BIGNUM_PTR arg2, _BIGNUM_PTR arg3, _BN_CTX_PTR arg4) __attribute__((tag("legacy_1")));
++int EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR arg0, _EC_POINT_PTR arg1, const _BIGNUM_PTR arg2, const _BIGNUM_PTR arg3, _BN_CTX_PTR arg4)  __attribute__((tag("3")));
++size_t EC_POINT_point2oct(const _EC_GROUP_PTR group, const _EC_POINT_PTR p, point_conversion_form_t form, unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
++int EC_POINT_oct2point(const _EC_GROUP_PTR group, _EC_POINT_PTR p, const unsigned char *buf, size_t buflen, _BN_CTX_PTR ctx) __attribute__((slice("buf","buflen")));
++_EC_GROUP_PTR EC_GROUP_new_by_curve_name(int nid);
++void EC_GROUP_free(_EC_GROUP_PTR group);
++
++// EVP_MAC API
++_EVP_MAC_PTR EVP_MAC_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_new(_EVP_MAC_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR arg0) __attribute__((tag("3"),noescape,nocallback));
++_EVP_MAC_CTX_PTR EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR arg0) __attribute__((tag("3")));
++int EVP_MAC_init(_EVP_MAC_CTX_PTR ctx, const unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),noescape,nocallback,slice("key","keylen")));
++int EVP_MAC_update(_EVP_MAC_CTX_PTR ctx, const unsigned char *data, size_t datalen) __attribute__((tag("3"),noescape,nocallback,slice("data","datalen")));
++int EVP_MAC_final(_EVP_MAC_CTX_PTR ctx, unsigned char *out, size_t *outl, size_t outsize) __attribute__((tag("3"),noescape,nocallback,slice("out","outsize")));
++
++// OSSL_PARAM API
++void OSSL_PARAM_free(_OSSL_PARAM_PTR p) __attribute__((tag("3")));
++const _OSSL_PARAM_PTR OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR p, const char *key) __attribute__((tag("3")));
++_OSSL_PARAM_BLD_PTR OSSL_PARAM_BLD_new(void) __attribute__((tag("3"),noerror));
++void OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++_OSSL_PARAM_PTR OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR bld) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const char *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
++int OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR bld, const char *key, const void *buf, size_t bsize) __attribute__((tag("3"),slice("buf","bsize")));
++int OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR bld, const char *key, const _BIGNUM_PTR bn) __attribute__((tag("3")));
++int OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR bld, const char *key, int32_t num) __attribute__((tag("3")));
++
++// EVP_SIGNATURE API
++_EVP_SIGNATURE_PTR EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR ctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR signature) __attribute__((tag("3")));
++
++// DSA API
++_DSA_PTR DSA_new(void) __attribute__((tag("legacy_1")));
++void DSA_free(_DSA_PTR r) __attribute__((tag("legacy_1")));
++int DSA_generate_key(_DSA_PTR a) __attribute__((tag("legacy_1")));
++void DSA_get0_pqg(const _DSA_PTR d, const _BIGNUM_PTR *p, const _BIGNUM_PTR *q, const _BIGNUM_PTR *g) __attribute__((tag("legacy_1")));
++int DSA_set0_pqg(_DSA_PTR d, _BIGNUM_PTR p, _BIGNUM_PTR q, _BIGNUM_PTR g) __attribute__((tag("legacy_1")));
++void DSA_get0_key(const _DSA_PTR d, const _BIGNUM_PTR *pub_key, const _BIGNUM_PTR *priv_key) __attribute__((tag("legacy_1")));
++int DSA_set0_key(_DSA_PTR d, _BIGNUM_PTR pub_key, _BIGNUM_PTR priv_key) __attribute__((tag("legacy_1")));
++
++// EVP_KDF API
++_EVP_KDF_PTR EVP_KDF_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3")));
++void EVP_KDF_free(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++_EVP_KDF_CTX_PTR EVP_KDF_CTX_new(_EVP_KDF_PTR kdf) __attribute__((tag("3")));
++int EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++void EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++size_t EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR ctx) __attribute__((tag("3")));
++int EVP_KDF_derive(_EVP_KDF_CTX_PTR ctx, unsigned char *key, size_t keylen, const _OSSL_PARAM_PTR params) __attribute__((tag("3"),slice("key","keylen")));
++int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt, int saltlen, int iter, const _EVP_MD_PTR digest, int keylen, unsigned char *out) __attribute__((tag("legacy_1"),slice("pass","passlen"),slice("salt","saltlen"),slice("out","keylen")));
++
++// OBJ API
++const char *OBJ_nid2sn(int n) __attribute__((noerror));
++
++// EVP KEM API for ML-KEM (OpenSSL 3.x)
++_EVP_KEYMGMT_PTR EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR libctx, const char *algorithm, const char *properties) __attribute__((tag("3"),optional));
++void EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR keymgmt) __attribute__((tag("3")));
++int EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *wrappedkey, size_t *wrappedkeylen, unsigned char *genkey, size_t *genkeylen) __attribute__((tag("3")));
++int EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR ctx, const _OSSL_PARAM_PTR params) __attribute__((tag("3")));
++int EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR ctx, unsigned char *genkey, size_t *genkeylen, const unsigned char *wrappedkey, size_t wrappedkeylen) __attribute__((tag("3")));
++
++#endif // _GO_OSSL_SHIMS_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo.go
+new file mode 100644
+index 00000000000000..45c9ce7215a2bd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo.go
+@@ -0,0 +1,87 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package ossl
++
++import (
++	"unsafe"
++)
++
++//go:linkname runtime_cgocall runtime.cgocall
++
++//go:noescape
++func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
++
++//go:linkname noescape
++//go:nosplit
++func noescape(p unsafe.Pointer) unsafe.Pointer {
++	x := uintptr(p)
++	return unsafe.Pointer(x ^ 0)
++}
++
++type libcCallInfo struct {
++	fn      uintptr
++	n       uintptr // number of parameters
++	args    uintptr // parameters
++	r1, r2  uintptr // return values
++	errType uintptr
++}
++
++//go:noescape
++func syscallNAsm(libcArgs *libcCallInfo)
++
++// syscallNSystemStack performs a syscall on the system stack.
++// It can't allocate Go memory nor grow the stack over the nosplit limit.
++//
++//go:nosplit
++func syscallNSystemStack(libcArgs *libcCallInfo) {
++	if libcArgs.errType != 0 {
++		libcArgs.n--
++	}
++	syscallNAsm(libcArgs)
++	if libcArgs.errType != 0 {
++		_mkcgo_error_check(libcArgs.errType, libcArgs.r1, libcArgs.args, libcArgs.n)
++	}
++}
++
++var syscallNSystemStack_trampoline byte
++var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
++
++// syscallN performs a syscall with the given function and arguments.
++//
++// All its parameters and return values must be uintptr in order
++// for the Go compiler to automatically set the //go:uintptrkeepalive
++// directive (which we can't set manually here).
++// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
++//
++//go:nosplit
++func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
++	libcArgs := libcCallInfo{
++		fn:      fn,
++		n:       uintptr(len(args)),
++		errType: errType,
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
++	return libcArgs.r1, libcArgs.r2
++}
++
++// syscallNRaw performs a syscall with the given function and arguments,
++// without any error checking nor switching to the system stack.
++//
++//go:nosplit
++func syscallNRaw(fn uintptr, args ...uintptr) uintptr {
++	libcArgs := libcCallInfo{
++		fn: fn,
++		n:  uintptr(len(args)),
++	}
++	if libcArgs.n != 0 {
++		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	}
++	syscallNAsm(&libcArgs)
++	return libcArgs.r1
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_darwin.go
+new file mode 100644
+index 00000000000000..70dbcb15a9142d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_darwin.go
+@@ -0,0 +1,8 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package ossl
++
++//go:cgo_import_dynamic _ _ "/usr/lib/libSystem.B.dylib"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_freebsd.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_freebsd.go
+new file mode 100644
+index 00000000000000..4a8747b4d6b2a9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_freebsd.go
+@@ -0,0 +1,8 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package ossl
++
++//go:cgo_import_dynamic _ _ "libc.so.7"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_linux.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_linux.go
+new file mode 100644
+index 00000000000000..236f6361eb0935
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_linux.go
+@@ -0,0 +1,8 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo
++
++package ossl
++
++//go:cgo_import_dynamic _ _ "libdl.so.2"
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_unix.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_unix.go
+new file mode 100644
+index 00000000000000..24c7b8aaa3e5bd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_unix.go
+@@ -0,0 +1,23 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && unix && (go1.27 || !s390x)
++
++package ossl
++
++import (
++	"unsafe"
++
++	_ "github.com/microsoft/go-crypto-openssl/internal/fakecgo"
++)
++
++func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
++	r0 := Dlsym(handle, unsafe.StringData(symbol))
++	if r0 == nil {
++		if !optional {
++			panic("cannot get required symbol " + symbol)
++		}
++		return 0
++	}
++	return uintptr(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_windows.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_windows.go
+new file mode 100644
+index 00000000000000..38fb4882eb487d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/syscall_nocgo_windows.go
+@@ -0,0 +1,25 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++//go:build !cgo && windows
++
++package ossl
++
++import (
++	"syscall"
++	"unsafe"
++)
++
++var modkernel32 = syscall.NewLazyDLL("kernel32.dll")
++var procGetProcAddress = modkernel32.NewProc("GetProcAddress")
++
++func dlsym(handle unsafe.Pointer, symbol string, optional bool) uintptr {
++	r0, _, err := syscall.SyscallN(procGetProcAddress.Addr(), uintptr(handle), uintptr(unsafe.Pointer(unsafe.StringData(symbol))))
++	if err != 0 {
++		if !optional {
++			panic("cannot get required symbol " + symbol + ": " + err.Error())
++		}
++		return 0
++	}
++	return r0
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl.s b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl.s
+new file mode 100644
+index 00000000000000..51fd1af1cf33fd
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl.s
+@@ -0,0 +1,58 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo && unix
++
++#include "textflag.h"
++
++#ifndef GOARCH_amd64
++#ifndef GOARCH_arm64
++#ifndef GOARCH_riscv64
++#ifndef GOARCH_loong64
++#ifndef GOARCH_mips64
++#ifndef GOARCH_mips64le
++#ifndef GOARCH_ppc64
++#ifndef GOARCH_ppc64le
++#ifndef GOARCH_s390x
++#ifndef GOARCH_sparc64
++#define _GOPTRSIZE 4
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++#endif
++
++#ifndef _GOPTRSIZE
++#define _GOPTRSIZE 8
++#endif
++TEXT _mkcgo_dlclose_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlclose(SB)
++
++GLOBL ·_mkcgo_dlclose_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlclose_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlclose_trampoline<>(SB)
++
++TEXT _mkcgo_dlerror_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlerror(SB)
++
++GLOBL ·_mkcgo_dlerror_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlerror_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlerror_trampoline<>(SB)
++
++TEXT _mkcgo_dlopen_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlopen(SB)
++
++GLOBL ·_mkcgo_dlopen_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlopen_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlopen_trampoline<>(SB)
++
++TEXT _mkcgo_dlsym_trampoline<>(SB), NOSPLIT, $0-0
++	JMP _mkcgo_dlsym(SB)
++
++GLOBL ·_mkcgo_dlsym_trampoline_addr(SB), RODATA, $_GOPTRSIZE
++DATA ·_mkcgo_dlsym_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_dlsym_trampoline<>(SB)
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl_nocgo.go
+new file mode 100644
+index 00000000000000..7d382b9a5c288c
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zdl_nocgo.go
+@@ -0,0 +1,61 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++//go:build !cgo && unix
++
++package ossl
++
++import (
++	"runtime"
++	"unsafe"
++)
++
++var _ = runtime.GOOS
++
++var _mkcgoAlwaysFalseDl bool
++var _mkcgoEscapeSinkDl unsafe.Pointer
++
++// mkcgoEscapePtrDl forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrDl(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseDl {
++		_mkcgoEscapeSinkDl = p
++	}
++	return p
++}
++
++//go:cgo_import_dynamic _mkcgo_dlclose dlclose ""
++//go:cgo_import_dynamic _mkcgo_dlerror dlerror ""
++//go:cgo_import_dynamic _mkcgo_dlopen dlopen ""
++//go:cgo_import_dynamic _mkcgo_dlsym dlsym ""
++
++var _mkcgo_dlclose_trampoline_addr uintptr
++
++func Dlclose(handle unsafe.Pointer) int32 {
++	r0, _ := syscallN(0, _mkcgo_dlclose_trampoline_addr, uintptr(handle))
++	return int32(r0)
++}
++
++var _mkcgo_dlerror_trampoline_addr uintptr
++
++func Dlerror() *byte {
++	r0, _ := syscallN(0, _mkcgo_dlerror_trampoline_addr)
++	return (*byte)(unsafe.Pointer(r0))
++}
++
++var _mkcgo_dlopen_trampoline_addr uintptr
++
++func Dlopen(path *byte, flags int32) unsafe.Pointer {
++	r0, _ := syscallN(0, _mkcgo_dlopen_trampoline_addr, uintptr(mkcgoEscapePtrDl(unsafe.Pointer(path))), uintptr(flags))
++	return unsafe.Pointer(r0)
++}
++
++var _mkcgo_dlsym_trampoline_addr uintptr
++
++func Dlsym(handle unsafe.Pointer, symbol *byte) unsafe.Pointer {
++	r0, _ := syscallN(0, _mkcgo_dlsym_trampoline_addr, uintptr(handle), uintptr(mkcgoEscapePtrDl(unsafe.Pointer(symbol))))
++	return unsafe.Pointer(r0)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.c b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.c
+new file mode 100644
+index 00000000000000..8abb6430c2a6e7
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.c
+@@ -0,0 +1,2083 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#include <stddef.h>
++#include <stdlib.h>
++#include <stdint.h>
++#include <stdio.h>
++#include "zossl.h"
++
++#ifdef _WIN32
++#include <windows.h>
++#define dlsym GetProcAddress
++#else
++#include <dlfcn.h>
++#endif
++
++long (*_g_BIO_ctrl)(_BIO_PTR, int, long, void*);
++int (*_g_BIO_free)(_BIO_PTR);
++_BIO_PTR (*_g_BIO_new)(const _BIO_METHOD_PTR);
++const _BIO_METHOD_PTR (*_g_BIO_s_mem)(void);
++_BIGNUM_PTR (*_g_BN_bin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++int (*_g_BN_bn2binpad)(const _BIGNUM_PTR, unsigned char*, int);
++int (*_g_BN_bn2lebinpad)(const _BIGNUM_PTR, unsigned char*, int);
++void (*_g_BN_clear)(_BIGNUM_PTR);
++void (*_g_BN_clear_free)(_BIGNUM_PTR);
++void (*_g_BN_free)(_BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_lebin2bn)(const unsigned char*, int, _BIGNUM_PTR);
++_BIGNUM_PTR (*_g_BN_new)(void);
++int (*_g_BN_num_bits)(const _BIGNUM_PTR);
++void (*_g_CRYPTO_free)(void*, const char*, int);
++void* (*_g_CRYPTO_malloc)(size_t, const char*, int);
++void (*_g_DSA_free)(_DSA_PTR);
++int (*_g_DSA_generate_key)(_DSA_PTR);
++void (*_g_DSA_get0_key)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_DSA_get0_pqg)(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR (*_g_DSA_new)(void);
++int (*_g_DSA_set0_key)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_DSA_set0_pqg)(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_GROUP_free)(_EC_GROUP_PTR);
++_EC_GROUP_PTR (*_g_EC_GROUP_new_by_curve_name)(int);
++int (*_g_EC_KEY_check_key)(const _EC_KEY_PTR);
++void (*_g_EC_KEY_free)(_EC_KEY_PTR);
++const _EC_GROUP_PTR (*_g_EC_KEY_get0_group)(const _EC_KEY_PTR);
++const _BIGNUM_PTR (*_g_EC_KEY_get0_private_key)(const _EC_KEY_PTR);
++const _EC_POINT_PTR (*_g_EC_KEY_get0_public_key)(const _EC_KEY_PTR);
++_EC_KEY_PTR (*_g_EC_KEY_new_by_curve_name)(int);
++int (*_g_EC_KEY_set_private_key)(_EC_KEY_PTR, const _BIGNUM_PTR);
++int (*_g_EC_KEY_set_public_key)(_EC_KEY_PTR, const _EC_POINT_PTR);
++int (*_g_EC_KEY_set_public_key_affine_coordinates)(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++void (*_g_EC_POINT_free)(_EC_POINT_PTR);
++int (*_g_EC_POINT_get_affine_coordinates_GFp)(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR);
++int (*_g_EC_POINT_mul)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++_EC_POINT_PTR (*_g_EC_POINT_new)(const _EC_GROUP_PTR);
++int (*_g_EC_POINT_oct2point)(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR);
++size_t (*_g_EC_POINT_point2oct)(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR);
++int (*_g_EC_POINT_set_affine_coordinates)(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR);
++unsigned long (*_g_ERR_peek_error)(void);
++void (*_g_ERR_print_errors)(_BIO_PTR);
++int (*_g_EVP_CIPHER_CTX_ctrl)(_EVP_CIPHER_CTX_PTR, int, int, void*);
++void (*_g_EVP_CIPHER_CTX_free)(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR (*_g_EVP_CIPHER_CTX_new)(void);
++int (*_g_EVP_CIPHER_CTX_set_key_length)(_EVP_CIPHER_CTX_PTR, int);
++int (*_g_EVP_CIPHER_CTX_set_padding)(_EVP_CIPHER_CTX_PTR, int);
++_EVP_CIPHER_PTR (*_g_EVP_CIPHER_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++const char* (*_g_EVP_CIPHER_get0_name)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CIPHER_get_block_size)(const _EVP_CIPHER_PTR);
++int (*_g_EVP_CipherInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int);
++int (*_g_EVP_CipherUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_DecryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_DecryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_DecryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++int (*_g_EVP_Digest)(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestFinalXOF)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
++int (*_g_EVP_DigestFinal_ex)(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_EVP_DigestInit)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_DigestInit_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_EVP_DigestSign)(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_DigestSignFinal)(_EVP_MD_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_DigestSignInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_DigestSqueeze)(_EVP_MD_CTX_PTR, unsigned char*, size_t);
++int (*_g_EVP_DigestUpdate)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerify)(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyFinal)(_EVP_MD_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_DigestVerifyInit)(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_EncryptFinal_ex)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*);
++int (*_g_EVP_EncryptInit_ex)(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*);
++int (*_g_EVP_EncryptUpdate)(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int);
++void (*_g_EVP_KDF_CTX_free)(_EVP_KDF_CTX_PTR);
++size_t (*_g_EVP_KDF_CTX_get_kdf_size)(_EVP_KDF_CTX_PTR);
++_EVP_KDF_CTX_PTR (*_g_EVP_KDF_CTX_new)(_EVP_KDF_PTR);
++int (*_g_EVP_KDF_CTX_set_params)(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR);
++int (*_g_EVP_KDF_derive)(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR);
++_EVP_KDF_PTR (*_g_EVP_KDF_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_KDF_free)(_EVP_KDF_PTR);
++_EVP_KEYMGMT_PTR (*_g_EVP_KEYMGMT_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_KEYMGMT_free)(_EVP_KEYMGMT_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_dup)(const _EVP_MAC_CTX_PTR);
++void (*_g_EVP_MAC_CTX_free)(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR (*_g_EVP_MAC_CTX_new)(_EVP_MAC_PTR);
++int (*_g_EVP_MAC_CTX_set_params)(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR);
++_EVP_MAC_PTR (*_g_EVP_MAC_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++int (*_g_EVP_MAC_final)(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t);
++int (*_g_EVP_MAC_init)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR);
++int (*_g_EVP_MAC_update)(_EVP_MAC_CTX_PTR, const unsigned char*, size_t);
++int (*_g_EVP_MD_CTX_copy_ex)(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_ctrl)(_EVP_MD_CTX_PTR, int, int, void*);
++void (*_g_EVP_MD_CTX_free)(_EVP_MD_CTX_PTR);
++int (*_g_EVP_MD_CTX_get_params)(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_gettable_params)(_EVP_MD_CTX_PTR);
++_EVP_MD_CTX_PTR (*_g_EVP_MD_CTX_new)(void);
++int (*_g_EVP_MD_CTX_set_params)(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_EVP_MD_CTX_settable_params)(_EVP_MD_CTX_PTR);
++_EVP_MD_PTR (*_g_EVP_MD_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_MD_free)(_EVP_MD_PTR);
++const char* (*_g_EVP_MD_get0_name)(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR (*_g_EVP_MD_get0_provider)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_block_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_size)(const _EVP_MD_PTR);
++int (*_g_EVP_MD_get_type)(const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_add1_hkdf_info)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_ctrl)(_EVP_PKEY_CTX_PTR, int, int, int, int, void*);
++void (*_g_EVP_PKEY_CTX_free)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new)(_EVP_PKEY_PTR, _ENGINE_PTR);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_from_pkey)(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*);
++_EVP_PKEY_CTX_PTR (*_g_EVP_PKEY_CTX_new_id)(int, _ENGINE_PTR);
++int (*_g_EVP_PKEY_CTX_set0_rsa_oaep_label)(_EVP_PKEY_CTX_PTR, unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_key)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set1_hkdf_salt)(_EVP_PKEY_CTX_PTR, const unsigned char*, int);
++int (*_g_EVP_PKEY_CTX_set_hkdf_md)(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR);
++int (*_g_EVP_PKEY_CTX_set_hkdf_mode)(_EVP_PKEY_CTX_PTR, int);
++int (*_g_EVP_PKEY_CTX_set_params)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_Q_keygen)(_OSSL_LIB_CTX_PTR, const char*, const char*, ...);
++int (*_g_EVP_PKEY_assign)(_EVP_PKEY_PTR, int, void*);
++int (*_g_EVP_PKEY_decapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_decapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
++int (*_g_EVP_PKEY_decrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_decrypt_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_derive_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_derive_set_peer)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_encapsulate)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_encapsulate_init)(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR);
++int (*_g_EVP_PKEY_encrypt)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_encrypt_init)(_EVP_PKEY_CTX_PTR);
++void (*_g_EVP_PKEY_free)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_fromdata)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR);
++int (*_g_EVP_PKEY_fromdata_init)(_EVP_PKEY_CTX_PTR);
++_DSA_PTR (*_g_EVP_PKEY_get0_DSA)(_EVP_PKEY_PTR);
++_EC_KEY_PTR (*_g_EVP_PKEY_get0_EC_KEY)(_EVP_PKEY_PTR);
++_RSA_PTR (*_g_EVP_PKEY_get1_RSA)(_EVP_PKEY_PTR);
++size_t (*_g_EVP_PKEY_get1_encoded_public_key)(_EVP_PKEY_PTR, unsigned char**);
++int (*_g_EVP_PKEY_get_bits)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_get_bn_param)(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*);
++int (*_g_EVP_PKEY_get_octet_string_param)(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*);
++int (*_g_EVP_PKEY_get_raw_private_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_raw_public_key)(const _EVP_PKEY_PTR, unsigned char*, size_t*);
++int (*_g_EVP_PKEY_get_size)(const _EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_keygen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_keygen_init)(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new)(void);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_private_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++_EVP_PKEY_PTR (*_g_EVP_PKEY_new_raw_public_key)(int, _ENGINE_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_paramgen)(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*);
++int (*_g_EVP_PKEY_paramgen_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_private_check)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_public_check_quick)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_set1_EC_KEY)(_EVP_PKEY_PTR, _EC_KEY_PTR);
++int (*_g_EVP_PKEY_set1_encoded_public_key)(_EVP_PKEY_PTR, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign)(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_sign_init)(_EVP_PKEY_CTX_PTR);
++int (*_g_EVP_PKEY_up_ref)(_EVP_PKEY_PTR);
++int (*_g_EVP_PKEY_verify)(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t);
++int (*_g_EVP_PKEY_verify_init)(_EVP_PKEY_CTX_PTR);
++_EVP_SIGNATURE_PTR (*_g_EVP_SIGNATURE_fetch)(_OSSL_LIB_CTX_PTR, const char*, const char*);
++void (*_g_EVP_SIGNATURE_free)(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_128_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_192_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ctr)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_aes_256_gcm)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_chacha20_poly1305)(void);
++int (*_g_EVP_default_properties_enable_fips)(_OSSL_LIB_CTX_PTR, int);
++int (*_g_EVP_default_properties_is_fips_enabled)(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR (*_g_EVP_des_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ecb)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_cbc)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_des_ede3_ecb)(void);
++const _EVP_MD_PTR (*_g_EVP_md4)(void);
++const _EVP_MD_PTR (*_g_EVP_md5)(void);
++const _EVP_MD_PTR (*_g_EVP_md5_sha1)(void);
++const _EVP_CIPHER_PTR (*_g_EVP_rc4)(void);
++const _EVP_MD_PTR (*_g_EVP_ripemd160)(void);
++const _EVP_MD_PTR (*_g_EVP_sha1)(void);
++const _EVP_MD_PTR (*_g_EVP_sha224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_256)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_384)(void);
++const _EVP_MD_PTR (*_g_EVP_sha3_512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_224)(void);
++const _EVP_MD_PTR (*_g_EVP_sha512_256)(void);
++int (*_g_FIPS_mode)(void);
++int (*_g_FIPS_mode_set)(int);
++int (*_g_HMAC_CTX_copy)(_HMAC_CTX_PTR, _HMAC_CTX_PTR);
++void (*_g_HMAC_CTX_free)(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR (*_g_HMAC_CTX_new)(void);
++int (*_g_HMAC_Final)(_HMAC_CTX_PTR, unsigned char*, unsigned int*);
++int (*_g_HMAC_Init_ex)(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR);
++int (*_g_HMAC_Update)(_HMAC_CTX_PTR, const unsigned char*, size_t);
++const char* (*_g_OBJ_nid2sn)(int);
++void (*_g_OPENSSL_init)(void);
++int (*_g_OPENSSL_init_crypto)(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR);
++unsigned int (*_g_OPENSSL_version_major)(void);
++unsigned int (*_g_OPENSSL_version_minor)(void);
++unsigned int (*_g_OPENSSL_version_patch)(void);
++void (*_g_OSSL_PARAM_BLD_free)(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR (*_g_OSSL_PARAM_BLD_new)(void);
++int (*_g_OSSL_PARAM_BLD_push_BN)(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR);
++int (*_g_OSSL_PARAM_BLD_push_int32)(_OSSL_PARAM_BLD_PTR, const char*, int32_t);
++int (*_g_OSSL_PARAM_BLD_push_octet_string)(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t);
++int (*_g_OSSL_PARAM_BLD_push_utf8_string)(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t);
++_OSSL_PARAM_PTR (*_g_OSSL_PARAM_BLD_to_param)(_OSSL_PARAM_BLD_PTR);
++void (*_g_OSSL_PARAM_free)(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR (*_g_OSSL_PARAM_locate_const)(const _OSSL_PARAM_PTR, const char*);
++int (*_g_OSSL_PROVIDER_available)(_OSSL_LIB_CTX_PTR, const char*);
++const char* (*_g_OSSL_PROVIDER_get0_name)(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR (*_g_OSSL_PROVIDER_try_load)(_OSSL_LIB_CTX_PTR, const char*, int);
++const char* (*_g_OpenSSL_version)(int);
++unsigned long (*_g_OpenSSL_version_num)(void);
++int (*_g_PKCS5_PBKDF2_HMAC)(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*);
++int (*_g_RAND_bytes)(unsigned char*, int);
++int (*_g_RAND_bytes_ex)(_OSSL_LIB_CTX_PTR, unsigned char*, size_t, unsigned int);
++void (*_g_RSA_free)(_RSA_PTR);
++void (*_g_RSA_get0_crt_params)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_factors)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void (*_g_RSA_get0_key)(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR (*_g_RSA_new)(void);
++int (*_g_RSA_set0_crt_params)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_factors)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++int (*_g_RSA_set0_key)(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR);
++
++#define __mkcgo__dlsym_nocheck(varname, funcname) _g_##varname = (typeof(_g_##varname))dlsym(handle, #funcname);
++
++#define __mkcgo__dlsym(name) __mkcgo__dlsym2(name, name)
++
++#define __mkcgo__dlsym2(varname, funcname) \
++	__mkcgo__dlsym_nocheck(varname, funcname) \
++	if (_g_##varname == NULL) { \
++		fprintf(stderr, "Cannot get required symbol " #funcname "\n"); \
++		abort(); \
++	}
++
++void __mkcgo_load_(void* handle) {
++	__mkcgo__dlsym(BIO_ctrl)
++	__mkcgo__dlsym(BIO_free)
++	__mkcgo__dlsym(BIO_new)
++	__mkcgo__dlsym(BIO_s_mem)
++	__mkcgo__dlsym(BN_bin2bn)
++	__mkcgo__dlsym(BN_bn2binpad)
++	__mkcgo__dlsym(BN_bn2lebinpad)
++	__mkcgo__dlsym(BN_clear)
++	__mkcgo__dlsym(BN_clear_free)
++	__mkcgo__dlsym(BN_free)
++	__mkcgo__dlsym(BN_lebin2bn)
++	__mkcgo__dlsym(BN_new)
++	__mkcgo__dlsym(BN_num_bits)
++	__mkcgo__dlsym(CRYPTO_free)
++	__mkcgo__dlsym(CRYPTO_malloc)
++	__mkcgo__dlsym(EC_GROUP_free)
++	__mkcgo__dlsym(EC_GROUP_new_by_curve_name)
++	__mkcgo__dlsym(EC_POINT_free)
++	__mkcgo__dlsym(EC_POINT_mul)
++	__mkcgo__dlsym(EC_POINT_new)
++	__mkcgo__dlsym(EC_POINT_oct2point)
++	__mkcgo__dlsym(EC_POINT_point2oct)
++	__mkcgo__dlsym(ERR_peek_error)
++	__mkcgo__dlsym(ERR_print_errors)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_ctrl)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_free)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_new)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_key_length)
++	__mkcgo__dlsym(EVP_CIPHER_CTX_set_padding)
++	__mkcgo__dlsym(EVP_CipherInit_ex)
++	__mkcgo__dlsym(EVP_CipherUpdate)
++	__mkcgo__dlsym(EVP_DecryptFinal_ex)
++	__mkcgo__dlsym(EVP_DecryptInit_ex)
++	__mkcgo__dlsym(EVP_DecryptUpdate)
++	__mkcgo__dlsym(EVP_Digest)
++	__mkcgo__dlsym(EVP_DigestFinal_ex)
++	__mkcgo__dlsym(EVP_DigestInit)
++	__mkcgo__dlsym(EVP_DigestInit_ex)
++	__mkcgo__dlsym(EVP_DigestSign)
++	__mkcgo__dlsym(EVP_DigestSignFinal)
++	__mkcgo__dlsym(EVP_DigestSignInit)
++	__mkcgo__dlsym(EVP_DigestUpdate)
++	__mkcgo__dlsym(EVP_DigestVerify)
++	__mkcgo__dlsym(EVP_DigestVerifyFinal)
++	__mkcgo__dlsym(EVP_DigestVerifyInit)
++	__mkcgo__dlsym(EVP_EncryptFinal_ex)
++	__mkcgo__dlsym(EVP_EncryptInit_ex)
++	__mkcgo__dlsym(EVP_EncryptUpdate)
++	__mkcgo__dlsym(EVP_MD_CTX_copy_ex)
++	__mkcgo__dlsym(EVP_MD_CTX_ctrl)
++	__mkcgo__dlsym(EVP_MD_CTX_free)
++	__mkcgo__dlsym(EVP_MD_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_ctrl)
++	__mkcgo__dlsym(EVP_PKEY_CTX_free)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_id)
++	__mkcgo__dlsym(EVP_PKEY_decrypt)
++	__mkcgo__dlsym(EVP_PKEY_decrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_derive)
++	__mkcgo__dlsym(EVP_PKEY_derive_init)
++	__mkcgo__dlsym(EVP_PKEY_derive_set_peer)
++	__mkcgo__dlsym(EVP_PKEY_encrypt)
++	__mkcgo__dlsym(EVP_PKEY_encrypt_init)
++	__mkcgo__dlsym(EVP_PKEY_free)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_get_raw_public_key)
++	__mkcgo__dlsym(EVP_PKEY_keygen)
++	__mkcgo__dlsym(EVP_PKEY_keygen_init)
++	__mkcgo__dlsym(EVP_PKEY_new)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_private_key)
++	__mkcgo__dlsym(EVP_PKEY_new_raw_public_key)
++	__mkcgo__dlsym(EVP_PKEY_paramgen)
++	__mkcgo__dlsym(EVP_PKEY_paramgen_init)
++	__mkcgo__dlsym(EVP_PKEY_sign)
++	__mkcgo__dlsym(EVP_PKEY_sign_init)
++	__mkcgo__dlsym(EVP_PKEY_up_ref)
++	__mkcgo__dlsym(EVP_PKEY_verify)
++	__mkcgo__dlsym(EVP_PKEY_verify_init)
++	__mkcgo__dlsym(EVP_aes_128_cbc)
++	__mkcgo__dlsym(EVP_aes_128_ctr)
++	__mkcgo__dlsym(EVP_aes_128_ecb)
++	__mkcgo__dlsym(EVP_aes_128_gcm)
++	__mkcgo__dlsym(EVP_aes_192_cbc)
++	__mkcgo__dlsym(EVP_aes_192_ctr)
++	__mkcgo__dlsym(EVP_aes_192_ecb)
++	__mkcgo__dlsym(EVP_aes_192_gcm)
++	__mkcgo__dlsym(EVP_aes_256_cbc)
++	__mkcgo__dlsym(EVP_aes_256_ctr)
++	__mkcgo__dlsym(EVP_aes_256_ecb)
++	__mkcgo__dlsym(EVP_aes_256_gcm)
++	__mkcgo__dlsym_nocheck(EVP_chacha20_poly1305, EVP_chacha20_poly1305)
++	__mkcgo__dlsym(EVP_des_cbc)
++	__mkcgo__dlsym(EVP_des_ecb)
++	__mkcgo__dlsym(EVP_des_ede3_cbc)
++	__mkcgo__dlsym(EVP_des_ede3_ecb)
++	__mkcgo__dlsym(EVP_md4)
++	__mkcgo__dlsym(EVP_md5)
++	__mkcgo__dlsym(EVP_md5_sha1)
++	__mkcgo__dlsym(EVP_rc4)
++	__mkcgo__dlsym(EVP_ripemd160)
++	__mkcgo__dlsym(EVP_sha1)
++	__mkcgo__dlsym(EVP_sha224)
++	__mkcgo__dlsym(EVP_sha256)
++	__mkcgo__dlsym(EVP_sha384)
++	__mkcgo__dlsym(EVP_sha3_224)
++	__mkcgo__dlsym(EVP_sha3_256)
++	__mkcgo__dlsym(EVP_sha3_384)
++	__mkcgo__dlsym(EVP_sha3_512)
++	__mkcgo__dlsym(EVP_sha512)
++	__mkcgo__dlsym(EVP_sha512_224)
++	__mkcgo__dlsym(EVP_sha512_256)
++	__mkcgo__dlsym(OBJ_nid2sn)
++	__mkcgo__dlsym(OPENSSL_init)
++	__mkcgo__dlsym(OPENSSL_init_crypto)
++	__mkcgo__dlsym(OpenSSL_version)
++}
++
++void __mkcgo_unload_() {
++	_g_BIO_ctrl = NULL;
++	_g_BIO_free = NULL;
++	_g_BIO_new = NULL;
++	_g_BIO_s_mem = NULL;
++	_g_BN_bin2bn = NULL;
++	_g_BN_bn2binpad = NULL;
++	_g_BN_bn2lebinpad = NULL;
++	_g_BN_clear = NULL;
++	_g_BN_clear_free = NULL;
++	_g_BN_free = NULL;
++	_g_BN_lebin2bn = NULL;
++	_g_BN_new = NULL;
++	_g_BN_num_bits = NULL;
++	_g_CRYPTO_free = NULL;
++	_g_CRYPTO_malloc = NULL;
++	_g_EC_GROUP_free = NULL;
++	_g_EC_GROUP_new_by_curve_name = NULL;
++	_g_EC_POINT_free = NULL;
++	_g_EC_POINT_mul = NULL;
++	_g_EC_POINT_new = NULL;
++	_g_EC_POINT_oct2point = NULL;
++	_g_EC_POINT_point2oct = NULL;
++	_g_ERR_peek_error = NULL;
++	_g_ERR_print_errors = NULL;
++	_g_EVP_CIPHER_CTX_ctrl = NULL;
++	_g_EVP_CIPHER_CTX_free = NULL;
++	_g_EVP_CIPHER_CTX_new = NULL;
++	_g_EVP_CIPHER_CTX_set_key_length = NULL;
++	_g_EVP_CIPHER_CTX_set_padding = NULL;
++	_g_EVP_CipherInit_ex = NULL;
++	_g_EVP_CipherUpdate = NULL;
++	_g_EVP_DecryptFinal_ex = NULL;
++	_g_EVP_DecryptInit_ex = NULL;
++	_g_EVP_DecryptUpdate = NULL;
++	_g_EVP_Digest = NULL;
++	_g_EVP_DigestFinal_ex = NULL;
++	_g_EVP_DigestInit = NULL;
++	_g_EVP_DigestInit_ex = NULL;
++	_g_EVP_DigestSign = NULL;
++	_g_EVP_DigestSignFinal = NULL;
++	_g_EVP_DigestSignInit = NULL;
++	_g_EVP_DigestUpdate = NULL;
++	_g_EVP_DigestVerify = NULL;
++	_g_EVP_DigestVerifyFinal = NULL;
++	_g_EVP_DigestVerifyInit = NULL;
++	_g_EVP_EncryptFinal_ex = NULL;
++	_g_EVP_EncryptInit_ex = NULL;
++	_g_EVP_EncryptUpdate = NULL;
++	_g_EVP_MD_CTX_copy_ex = NULL;
++	_g_EVP_MD_CTX_ctrl = NULL;
++	_g_EVP_MD_CTX_free = NULL;
++	_g_EVP_MD_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_ctrl = NULL;
++	_g_EVP_PKEY_CTX_free = NULL;
++	_g_EVP_PKEY_CTX_new = NULL;
++	_g_EVP_PKEY_CTX_new_id = NULL;
++	_g_EVP_PKEY_decrypt = NULL;
++	_g_EVP_PKEY_decrypt_init = NULL;
++	_g_EVP_PKEY_derive = NULL;
++	_g_EVP_PKEY_derive_init = NULL;
++	_g_EVP_PKEY_derive_set_peer = NULL;
++	_g_EVP_PKEY_encrypt = NULL;
++	_g_EVP_PKEY_encrypt_init = NULL;
++	_g_EVP_PKEY_free = NULL;
++	_g_EVP_PKEY_get_raw_private_key = NULL;
++	_g_EVP_PKEY_get_raw_public_key = NULL;
++	_g_EVP_PKEY_keygen = NULL;
++	_g_EVP_PKEY_keygen_init = NULL;
++	_g_EVP_PKEY_new = NULL;
++	_g_EVP_PKEY_new_raw_private_key = NULL;
++	_g_EVP_PKEY_new_raw_public_key = NULL;
++	_g_EVP_PKEY_paramgen = NULL;
++	_g_EVP_PKEY_paramgen_init = NULL;
++	_g_EVP_PKEY_sign = NULL;
++	_g_EVP_PKEY_sign_init = NULL;
++	_g_EVP_PKEY_up_ref = NULL;
++	_g_EVP_PKEY_verify = NULL;
++	_g_EVP_PKEY_verify_init = NULL;
++	_g_EVP_aes_128_cbc = NULL;
++	_g_EVP_aes_128_ctr = NULL;
++	_g_EVP_aes_128_ecb = NULL;
++	_g_EVP_aes_128_gcm = NULL;
++	_g_EVP_aes_192_cbc = NULL;
++	_g_EVP_aes_192_ctr = NULL;
++	_g_EVP_aes_192_ecb = NULL;
++	_g_EVP_aes_192_gcm = NULL;
++	_g_EVP_aes_256_cbc = NULL;
++	_g_EVP_aes_256_ctr = NULL;
++	_g_EVP_aes_256_ecb = NULL;
++	_g_EVP_aes_256_gcm = NULL;
++	_g_EVP_chacha20_poly1305 = NULL;
++	_g_EVP_des_cbc = NULL;
++	_g_EVP_des_ecb = NULL;
++	_g_EVP_des_ede3_cbc = NULL;
++	_g_EVP_des_ede3_ecb = NULL;
++	_g_EVP_md4 = NULL;
++	_g_EVP_md5 = NULL;
++	_g_EVP_md5_sha1 = NULL;
++	_g_EVP_rc4 = NULL;
++	_g_EVP_ripemd160 = NULL;
++	_g_EVP_sha1 = NULL;
++	_g_EVP_sha224 = NULL;
++	_g_EVP_sha256 = NULL;
++	_g_EVP_sha384 = NULL;
++	_g_EVP_sha3_224 = NULL;
++	_g_EVP_sha3_256 = NULL;
++	_g_EVP_sha3_384 = NULL;
++	_g_EVP_sha3_512 = NULL;
++	_g_EVP_sha512 = NULL;
++	_g_EVP_sha512_224 = NULL;
++	_g_EVP_sha512_256 = NULL;
++	_g_OBJ_nid2sn = NULL;
++	_g_OPENSSL_init = NULL;
++	_g_OPENSSL_init_crypto = NULL;
++	_g_OpenSSL_version = NULL;
++}
++
++void __mkcgo_load_3(void* handle) {
++	__mkcgo__dlsym(EC_POINT_set_affine_coordinates)
++	__mkcgo__dlsym(EVP_CIPHER_fetch)
++	__mkcgo__dlsym(EVP_CIPHER_get0_name)
++	__mkcgo__dlsym(EVP_CIPHER_get_block_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_free)
++	__mkcgo__dlsym(EVP_KDF_CTX_get_kdf_size)
++	__mkcgo__dlsym(EVP_KDF_CTX_new)
++	__mkcgo__dlsym(EVP_KDF_CTX_set_params)
++	__mkcgo__dlsym(EVP_KDF_derive)
++	__mkcgo__dlsym(EVP_KDF_fetch)
++	__mkcgo__dlsym(EVP_KDF_free)
++	__mkcgo__dlsym_nocheck(EVP_KEYMGMT_fetch, EVP_KEYMGMT_fetch)
++	__mkcgo__dlsym(EVP_KEYMGMT_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_dup)
++	__mkcgo__dlsym(EVP_MAC_CTX_free)
++	__mkcgo__dlsym(EVP_MAC_CTX_new)
++	__mkcgo__dlsym(EVP_MAC_CTX_set_params)
++	__mkcgo__dlsym(EVP_MAC_fetch)
++	__mkcgo__dlsym(EVP_MAC_final)
++	__mkcgo__dlsym(EVP_MAC_init)
++	__mkcgo__dlsym(EVP_MAC_update)
++	__mkcgo__dlsym(EVP_MD_CTX_get_params)
++	__mkcgo__dlsym(EVP_MD_CTX_gettable_params)
++	__mkcgo__dlsym(EVP_MD_CTX_set_params)
++	__mkcgo__dlsym(EVP_MD_CTX_settable_params)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_name)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_MD_get_block_size)
++	__mkcgo__dlsym(EVP_MD_get_size)
++	__mkcgo__dlsym(EVP_MD_get_type)
++	__mkcgo__dlsym(EVP_PKEY_CTX_add1_hkdf_info)
++	__mkcgo__dlsym(EVP_PKEY_CTX_new_from_pkey)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set0_rsa_oaep_label)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_key)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set1_hkdf_salt)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_md)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_hkdf_mode)
++	__mkcgo__dlsym(EVP_PKEY_CTX_set_params)
++	__mkcgo__dlsym(EVP_PKEY_Q_keygen)
++	__mkcgo__dlsym(EVP_PKEY_decapsulate)
++	__mkcgo__dlsym(EVP_PKEY_decapsulate_init)
++	__mkcgo__dlsym(EVP_PKEY_encapsulate)
++	__mkcgo__dlsym(EVP_PKEY_encapsulate_init)
++	__mkcgo__dlsym(EVP_PKEY_fromdata)
++	__mkcgo__dlsym(EVP_PKEY_fromdata_init)
++	__mkcgo__dlsym(EVP_PKEY_get1_encoded_public_key)
++	__mkcgo__dlsym(EVP_PKEY_get_bits)
++	__mkcgo__dlsym(EVP_PKEY_get_bn_param)
++	__mkcgo__dlsym(EVP_PKEY_get_octet_string_param)
++	__mkcgo__dlsym(EVP_PKEY_get_size)
++	__mkcgo__dlsym(EVP_PKEY_private_check)
++	__mkcgo__dlsym(EVP_PKEY_public_check_quick)
++	__mkcgo__dlsym(EVP_PKEY_set1_encoded_public_key)
++	__mkcgo__dlsym(EVP_SIGNATURE_fetch)
++	__mkcgo__dlsym(EVP_SIGNATURE_free)
++	__mkcgo__dlsym(EVP_default_properties_enable_fips)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_free)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_new)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_BN)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_int32)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_octet_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_push_utf8_string)
++	__mkcgo__dlsym(OSSL_PARAM_BLD_to_param)
++	__mkcgo__dlsym(OSSL_PARAM_free)
++	__mkcgo__dlsym(OSSL_PARAM_locate_const)
++	__mkcgo__dlsym(OSSL_PROVIDER_available)
++	__mkcgo__dlsym(OSSL_PROVIDER_get0_name)
++	__mkcgo__dlsym(OSSL_PROVIDER_try_load)
++	__mkcgo__dlsym(RAND_bytes_ex)
++}
++
++void __mkcgo_unload_3() {
++	_g_EC_POINT_set_affine_coordinates = NULL;
++	_g_EVP_CIPHER_fetch = NULL;
++	_g_EVP_CIPHER_get0_name = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_KDF_CTX_free = NULL;
++	_g_EVP_KDF_CTX_get_kdf_size = NULL;
++	_g_EVP_KDF_CTX_new = NULL;
++	_g_EVP_KDF_CTX_set_params = NULL;
++	_g_EVP_KDF_derive = NULL;
++	_g_EVP_KDF_fetch = NULL;
++	_g_EVP_KDF_free = NULL;
++	_g_EVP_KEYMGMT_fetch = NULL;
++	_g_EVP_KEYMGMT_free = NULL;
++	_g_EVP_MAC_CTX_dup = NULL;
++	_g_EVP_MAC_CTX_free = NULL;
++	_g_EVP_MAC_CTX_new = NULL;
++	_g_EVP_MAC_CTX_set_params = NULL;
++	_g_EVP_MAC_fetch = NULL;
++	_g_EVP_MAC_final = NULL;
++	_g_EVP_MAC_init = NULL;
++	_g_EVP_MAC_update = NULL;
++	_g_EVP_MD_CTX_get_params = NULL;
++	_g_EVP_MD_CTX_gettable_params = NULL;
++	_g_EVP_MD_CTX_set_params = NULL;
++	_g_EVP_MD_CTX_settable_params = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_name = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_MD_get_type = NULL;
++	_g_EVP_PKEY_CTX_add1_hkdf_info = NULL;
++	_g_EVP_PKEY_CTX_new_from_pkey = NULL;
++	_g_EVP_PKEY_CTX_set0_rsa_oaep_label = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_key = NULL;
++	_g_EVP_PKEY_CTX_set1_hkdf_salt = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_md = NULL;
++	_g_EVP_PKEY_CTX_set_hkdf_mode = NULL;
++	_g_EVP_PKEY_CTX_set_params = NULL;
++	_g_EVP_PKEY_Q_keygen = NULL;
++	_g_EVP_PKEY_decapsulate = NULL;
++	_g_EVP_PKEY_decapsulate_init = NULL;
++	_g_EVP_PKEY_encapsulate = NULL;
++	_g_EVP_PKEY_encapsulate_init = NULL;
++	_g_EVP_PKEY_fromdata = NULL;
++	_g_EVP_PKEY_fromdata_init = NULL;
++	_g_EVP_PKEY_get1_encoded_public_key = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_bn_param = NULL;
++	_g_EVP_PKEY_get_octet_string_param = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_private_check = NULL;
++	_g_EVP_PKEY_public_check_quick = NULL;
++	_g_EVP_PKEY_set1_encoded_public_key = NULL;
++	_g_EVP_SIGNATURE_fetch = NULL;
++	_g_EVP_SIGNATURE_free = NULL;
++	_g_EVP_default_properties_enable_fips = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++	_g_OSSL_PARAM_BLD_free = NULL;
++	_g_OSSL_PARAM_BLD_new = NULL;
++	_g_OSSL_PARAM_BLD_push_BN = NULL;
++	_g_OSSL_PARAM_BLD_push_int32 = NULL;
++	_g_OSSL_PARAM_BLD_push_octet_string = NULL;
++	_g_OSSL_PARAM_BLD_push_utf8_string = NULL;
++	_g_OSSL_PARAM_BLD_to_param = NULL;
++	_g_OSSL_PARAM_free = NULL;
++	_g_OSSL_PARAM_locate_const = NULL;
++	_g_OSSL_PROVIDER_available = NULL;
++	_g_OSSL_PROVIDER_get0_name = NULL;
++	_g_OSSL_PROVIDER_try_load = NULL;
++	_g_RAND_bytes_ex = NULL;
++}
++
++void __mkcgo_load_33(void* handle) {
++	__mkcgo__dlsym(EVP_DigestFinalXOF)
++	__mkcgo__dlsym_nocheck(EVP_DigestSqueeze, EVP_DigestSqueeze)
++}
++
++void __mkcgo_unload_33() {
++	_g_EVP_DigestFinalXOF = NULL;
++	_g_EVP_DigestSqueeze = NULL;
++}
++
++void __mkcgo_load_init_1(void* handle) {
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++}
++
++void __mkcgo_unload_init_1() {
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++}
++
++void __mkcgo_load_init_3(void* handle) {
++	__mkcgo__dlsym(BIO_ctrl)
++	__mkcgo__dlsym(BIO_free)
++	__mkcgo__dlsym(BIO_new)
++	__mkcgo__dlsym(BIO_s_mem)
++	__mkcgo__dlsym(ERR_print_errors)
++	__mkcgo__dlsym(EVP_MD_fetch)
++	__mkcgo__dlsym(EVP_MD_free)
++	__mkcgo__dlsym(EVP_MD_get0_provider)
++	__mkcgo__dlsym(EVP_default_properties_is_fips_enabled)
++}
++
++void __mkcgo_unload_init_3() {
++	_g_BIO_ctrl = NULL;
++	_g_BIO_free = NULL;
++	_g_BIO_new = NULL;
++	_g_BIO_s_mem = NULL;
++	_g_ERR_print_errors = NULL;
++	_g_EVP_MD_fetch = NULL;
++	_g_EVP_MD_free = NULL;
++	_g_EVP_MD_get0_provider = NULL;
++	_g_EVP_default_properties_is_fips_enabled = NULL;
++}
++
++void __mkcgo_load_legacy_1(void* handle) {
++	__mkcgo__dlsym(DSA_free)
++	__mkcgo__dlsym(DSA_generate_key)
++	__mkcgo__dlsym(DSA_get0_key)
++	__mkcgo__dlsym(DSA_get0_pqg)
++	__mkcgo__dlsym(DSA_new)
++	__mkcgo__dlsym(DSA_set0_key)
++	__mkcgo__dlsym(DSA_set0_pqg)
++	__mkcgo__dlsym(EC_KEY_check_key)
++	__mkcgo__dlsym(EC_KEY_free)
++	__mkcgo__dlsym(EC_KEY_get0_group)
++	__mkcgo__dlsym(EC_KEY_get0_private_key)
++	__mkcgo__dlsym(EC_KEY_get0_public_key)
++	__mkcgo__dlsym(EC_KEY_new_by_curve_name)
++	__mkcgo__dlsym(EC_KEY_set_private_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key)
++	__mkcgo__dlsym(EC_KEY_set_public_key_affine_coordinates)
++	__mkcgo__dlsym(EC_POINT_get_affine_coordinates_GFp)
++	__mkcgo__dlsym2(EVP_CIPHER_get_block_size, EVP_CIPHER_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_block_size, EVP_MD_block_size)
++	__mkcgo__dlsym2(EVP_MD_get_size, EVP_MD_size)
++	__mkcgo__dlsym(EVP_PKEY_assign)
++	__mkcgo__dlsym(EVP_PKEY_get0_DSA)
++	__mkcgo__dlsym(EVP_PKEY_get0_EC_KEY)
++	__mkcgo__dlsym(EVP_PKEY_get1_RSA)
++	__mkcgo__dlsym2(EVP_PKEY_get_bits, EVP_PKEY_bits)
++	__mkcgo__dlsym2(EVP_PKEY_get_size, EVP_PKEY_size)
++	__mkcgo__dlsym(EVP_PKEY_set1_EC_KEY)
++	__mkcgo__dlsym(FIPS_mode)
++	__mkcgo__dlsym(FIPS_mode_set)
++	__mkcgo__dlsym(HMAC_CTX_copy)
++	__mkcgo__dlsym(HMAC_CTX_free)
++	__mkcgo__dlsym(HMAC_CTX_new)
++	__mkcgo__dlsym(HMAC_Final)
++	__mkcgo__dlsym(HMAC_Init_ex)
++	__mkcgo__dlsym(HMAC_Update)
++	__mkcgo__dlsym(PKCS5_PBKDF2_HMAC)
++	__mkcgo__dlsym(RAND_bytes)
++	__mkcgo__dlsym(RSA_free)
++	__mkcgo__dlsym(RSA_get0_crt_params)
++	__mkcgo__dlsym(RSA_get0_factors)
++	__mkcgo__dlsym(RSA_get0_key)
++	__mkcgo__dlsym(RSA_new)
++	__mkcgo__dlsym(RSA_set0_crt_params)
++	__mkcgo__dlsym(RSA_set0_factors)
++	__mkcgo__dlsym(RSA_set0_key)
++}
++
++void __mkcgo_unload_legacy_1() {
++	_g_DSA_free = NULL;
++	_g_DSA_generate_key = NULL;
++	_g_DSA_get0_key = NULL;
++	_g_DSA_get0_pqg = NULL;
++	_g_DSA_new = NULL;
++	_g_DSA_set0_key = NULL;
++	_g_DSA_set0_pqg = NULL;
++	_g_EC_KEY_check_key = NULL;
++	_g_EC_KEY_free = NULL;
++	_g_EC_KEY_get0_group = NULL;
++	_g_EC_KEY_get0_private_key = NULL;
++	_g_EC_KEY_get0_public_key = NULL;
++	_g_EC_KEY_new_by_curve_name = NULL;
++	_g_EC_KEY_set_private_key = NULL;
++	_g_EC_KEY_set_public_key = NULL;
++	_g_EC_KEY_set_public_key_affine_coordinates = NULL;
++	_g_EC_POINT_get_affine_coordinates_GFp = NULL;
++	_g_EVP_CIPHER_get_block_size = NULL;
++	_g_EVP_MD_get_block_size = NULL;
++	_g_EVP_MD_get_size = NULL;
++	_g_EVP_PKEY_assign = NULL;
++	_g_EVP_PKEY_get0_DSA = NULL;
++	_g_EVP_PKEY_get0_EC_KEY = NULL;
++	_g_EVP_PKEY_get1_RSA = NULL;
++	_g_EVP_PKEY_get_bits = NULL;
++	_g_EVP_PKEY_get_size = NULL;
++	_g_EVP_PKEY_set1_EC_KEY = NULL;
++	_g_FIPS_mode = NULL;
++	_g_FIPS_mode_set = NULL;
++	_g_HMAC_CTX_copy = NULL;
++	_g_HMAC_CTX_free = NULL;
++	_g_HMAC_CTX_new = NULL;
++	_g_HMAC_Final = NULL;
++	_g_HMAC_Init_ex = NULL;
++	_g_HMAC_Update = NULL;
++	_g_PKCS5_PBKDF2_HMAC = NULL;
++	_g_RAND_bytes = NULL;
++	_g_RSA_free = NULL;
++	_g_RSA_get0_crt_params = NULL;
++	_g_RSA_get0_factors = NULL;
++	_g_RSA_get0_key = NULL;
++	_g_RSA_new = NULL;
++	_g_RSA_set0_crt_params = NULL;
++	_g_RSA_set0_factors = NULL;
++	_g_RSA_set0_key = NULL;
++}
++
++void __mkcgo_load_version(void* handle) {
++	__mkcgo__dlsym_nocheck(OPENSSL_version_major, OPENSSL_version_major)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_minor, OPENSSL_version_minor)
++	__mkcgo__dlsym_nocheck(OPENSSL_version_patch, OPENSSL_version_patch)
++	__mkcgo__dlsym_nocheck(OpenSSL_version_num, OpenSSL_version_num)
++}
++
++void __mkcgo_unload_version() {
++	_g_OPENSSL_version_major = NULL;
++	_g_OPENSSL_version_minor = NULL;
++	_g_OPENSSL_version_patch = NULL;
++	_g_OpenSSL_version_num = NULL;
++}
++
++long _mkcgo_BIO_ctrl(_BIO_PTR _arg0, int _arg1, long _arg2, void* _arg3) {
++	return _g_BIO_ctrl(_arg0, _arg1, _arg2, _arg3);
++}
++
++int _mkcgo_BIO_free(_BIO_PTR _arg0) {
++	return _g_BIO_free(_arg0);
++}
++
++_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR _arg0, uintptr_t *_err_state) {
++	_BIO_PTR _ret = _g_BIO_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void) {
++	return _g_BIO_s_mem();
++}
++
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_bin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_BN_bn2binpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_BN_bn2lebinpad(_arg0, _arg1, _arg2);
++	if (_ret == -1) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_BN_clear(_BIGNUM_PTR _arg0) {
++	_g_BN_clear(_arg0);
++}
++
++void _mkcgo_BN_clear_free(_BIGNUM_PTR _arg0) {
++	_g_BN_clear_free(_arg0);
++}
++
++void _mkcgo_BN_free(_BIGNUM_PTR _arg0) {
++	_g_BN_free(_arg0);
++}
++
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char* _arg0, int _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_lebin2bn(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *_err_state) {
++	_BIGNUM_PTR _ret = _g_BN_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR _arg0) {
++	return _g_BN_num_bits(_arg0);
++}
++
++void _mkcgo_CRYPTO_free(void* _arg0, const char* _arg1, int _arg2) {
++	_g_CRYPTO_free(_arg0, _arg1, _arg2);
++}
++
++void* _mkcgo_CRYPTO_malloc(size_t _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
++	void* _ret = _g_CRYPTO_malloc(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_DSA_free(_DSA_PTR _arg0) {
++	_g_DSA_free(_arg0);
++}
++
++int _mkcgo_DSA_generate_key(_DSA_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_DSA_generate_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_DSA_get0_key(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_DSA_get0_key(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_DSA_get0_pqg(_arg0, _arg1, _arg2, _arg3);
++}
++
++_DSA_PTR _mkcgo_DSA_new(uintptr_t *_err_state) {
++	_DSA_PTR _ret = _g_DSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_DSA_set0_key(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	int _ret = _g_DSA_set0_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_DSA_set0_pqg(_DSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_DSA_set0_pqg(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR _arg0) {
++	_g_EC_GROUP_free(_arg0);
++}
++
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
++	_EC_GROUP_PTR _ret = _g_EC_GROUP_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EC_KEY_check_key(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR _arg0) {
++	_g_EC_KEY_free(_arg0);
++}
++
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_group(_arg0);
++}
++
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_private_key(_arg0);
++}
++
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR _arg0) {
++	return _g_EC_KEY_get0_public_key(_arg0);
++}
++
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int _arg0, uintptr_t *_err_state) {
++	_EC_KEY_PTR _ret = _g_EC_KEY_new_by_curve_name(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR _arg0, const _BIGNUM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EC_KEY_set_private_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR _arg0, const _EC_POINT_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EC_KEY_set_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EC_KEY_set_public_key_affine_coordinates(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR _arg0) {
++	_g_EC_POINT_free(_arg0);
++}
++
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EC_POINT_get_affine_coordinates_GFp(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _EC_POINT_PTR _arg3, const _BIGNUM_PTR _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
++	int _ret = _g_EC_POINT_mul(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR _arg0, uintptr_t *_err_state) {
++	_EC_POINT_PTR _ret = _g_EC_POINT_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const unsigned char* _arg2, size_t _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EC_POINT_oct2point(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR _arg0, const _EC_POINT_PTR _arg1, point_conversion_form_t _arg2, unsigned char* _arg3, size_t _arg4, _BN_CTX_PTR _arg5, uintptr_t *_err_state) {
++	size_t _ret = _g_EC_POINT_point2oct(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR _arg0, _EC_POINT_PTR _arg1, const _BIGNUM_PTR _arg2, const _BIGNUM_PTR _arg3, _BN_CTX_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EC_POINT_set_affine_coordinates(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++unsigned long _mkcgo_ERR_peek_error(void) {
++	return _g_ERR_peek_error();
++}
++
++void _mkcgo_ERR_print_errors(_BIO_PTR _arg0) {
++	_g_ERR_print_errors(_arg0);
++}
++
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR _arg0) {
++	_g_EVP_CIPHER_CTX_free(_arg0);
++}
++
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *_err_state) {
++	_EVP_CIPHER_CTX_PTR _ret = _g_EVP_CIPHER_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_set_key_length(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_CIPHER_CTX_set_padding(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_CIPHER_PTR _ret = _g_EVP_CIPHER_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get0_name(_arg0);
++}
++
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR _arg0) {
++	return _g_EVP_CIPHER_get_block_size(_arg0);
++}
++
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, int _arg5, uintptr_t *_err_state) {
++	int _ret = _g_EVP_CipherInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_CipherUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DecryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DecryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DecryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_Digest(const unsigned char* _arg0, size_t _arg1, unsigned char* _arg2, unsigned int* _arg3, const _EVP_MD_PTR _arg4, _ENGINE_PTR _arg5, uintptr_t *_err_state) {
++	int _ret = _g_EVP_Digest(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestFinalXOF(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestInit(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, _ENGINE_PTR _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestInit_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestSign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestSignFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestSignInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_available_EVP_DigestSqueeze() {
++	return _g_EVP_DigestSqueeze != NULL;
++}
++
++int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestSqueeze(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestUpdate(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestVerify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestVerifyFinal(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR _arg0, _EVP_PKEY_CTX_PTR* _arg1, const _EVP_MD_PTR _arg2, _ENGINE_PTR _arg3, _EVP_PKEY_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_DigestVerifyInit(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_EncryptFinal_ex(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR _arg0, const _EVP_CIPHER_PTR _arg1, _ENGINE_PTR _arg2, const unsigned char* _arg3, const unsigned char* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_EncryptInit_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR _arg0, unsigned char* _arg1, int* _arg2, const unsigned char* _arg3, int _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_EncryptUpdate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR _arg0) {
++	_g_EVP_KDF_CTX_free(_arg0);
++}
++
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR _arg0, uintptr_t *_err_state) {
++	size_t _ret = _g_EVP_KDF_CTX_get_kdf_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR _arg0, uintptr_t *_err_state) {
++	_EVP_KDF_CTX_PTR _ret = _g_EVP_KDF_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_KDF_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_KDF_derive(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_KDF_PTR _ret = _g_EVP_KDF_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR _arg0) {
++	_g_EVP_KDF_free(_arg0);
++}
++
++int _mkcgo_available_EVP_KEYMGMT_fetch() {
++	return _g_EVP_KEYMGMT_fetch != NULL;
++}
++
++_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_KEYMGMT_PTR _ret = _g_EVP_KEYMGMT_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR _arg0) {
++	_g_EVP_KEYMGMT_free(_arg0);
++}
++
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR _arg0, uintptr_t *_err_state) {
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_dup(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR _arg0) {
++	_g_EVP_MAC_CTX_free(_arg0);
++}
++
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR _arg0, uintptr_t *_err_state) {
++	_EVP_MAC_CTX_PTR _ret = _g_EVP_MAC_CTX_new(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MAC_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_MAC_PTR _ret = _g_EVP_MAC_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MAC_final(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MAC_init(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MAC_update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR _arg0, const _EVP_MD_CTX_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MD_CTX_copy_ex(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR _arg0, int _arg1, int _arg2, void* _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MD_CTX_ctrl(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR _arg0) {
++	_g_EVP_MD_CTX_free(_arg0);
++}
++
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR _arg0, _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MD_CTX_get_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_gettable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *_err_state) {
++	_EVP_MD_CTX_PTR _ret = _g_EVP_MD_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_MD_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR _arg0, uintptr_t *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_EVP_MD_CTX_settable_params(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_MD_PTR _ret = _g_EVP_MD_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR _arg0) {
++	_g_EVP_MD_free(_arg0);
++}
++
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_name(_arg0);
++}
++
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get0_provider(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_block_size(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_size(_arg0);
++}
++
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR _arg0) {
++	return _g_EVP_MD_get_type(_arg0);
++}
++
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_add1_hkdf_info(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR _arg0, int _arg1, int _arg2, int _arg3, int _arg4, void* _arg5, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_ctrl(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR _arg0) {
++	_g_EVP_PKEY_CTX_free(_arg0);
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_from_pkey(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int _arg0, _ENGINE_PTR _arg1, uintptr_t *_err_state) {
++	_EVP_PKEY_CTX_PTR _ret = _g_EVP_PKEY_CTX_new_id(_arg0, _arg1);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set0_rsa_oaep_label(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set1_hkdf_salt(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR _arg0, const _EVP_MD_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_md(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_hkdf_mode(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_CTX_set_params(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, const char* _arg3, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_Q_keygen(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR _arg0, int _arg1, void* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_assign(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decapsulate_init(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_decrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_derive(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_derive_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_derive_set_peer(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, unsigned char* _arg3, size_t* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encapsulate(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR _arg0, const _OSSL_PARAM_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encapsulate_init(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encrypt(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_encrypt_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR _arg0) {
++	_g_EVP_PKEY_free(_arg0);
++}
++
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, int _arg2, _OSSL_PARAM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_fromdata(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_fromdata_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	_DSA_PTR _ret = _g_EVP_PKEY_get0_DSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	_EC_KEY_PTR _ret = _g_EVP_PKEY_get0_EC_KEY(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	_RSA_PTR _ret = _g_EVP_PKEY_get1_RSA(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR _arg0, unsigned char** _arg1, uintptr_t *_err_state) {
++	size_t _ret = _g_EVP_PKEY_get1_encoded_public_key(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_bits(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, _BIGNUM_PTR* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_bn_param(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR _arg0, const char* _arg1, unsigned char* _arg2, size_t _arg3, size_t* _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_octet_string_param(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_raw_private_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR _arg0, unsigned char* _arg1, size_t* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_raw_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_get_size(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_keygen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_keygen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_private_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int _arg0, _ENGINE_PTR _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	_EVP_PKEY_PTR _ret = _g_EVP_PKEY_new_raw_public_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR _arg0, _EVP_PKEY_PTR* _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_paramgen(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_paramgen_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_private_check(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_public_check_quick(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR _arg0, _EC_KEY_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_set1_EC_KEY(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_set1_encoded_public_key(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR _arg0, unsigned char* _arg1, size_t* _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_sign(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_sign_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_up_ref(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, const unsigned char* _arg3, size_t _arg4, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_verify(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR _arg0, uintptr_t *_err_state) {
++	int _ret = _g_EVP_PKEY_verify_init(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, const char* _arg2, uintptr_t *_err_state) {
++	_EVP_SIGNATURE_PTR _ret = _g_EVP_SIGNATURE_fetch(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR _arg0) {
++	_g_EVP_SIGNATURE_free(_arg0);
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void) {
++	return _g_EVP_aes_128_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void) {
++	return _g_EVP_aes_128_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void) {
++	return _g_EVP_aes_128_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void) {
++	return _g_EVP_aes_128_gcm();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void) {
++	return _g_EVP_aes_192_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void) {
++	return _g_EVP_aes_192_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void) {
++	return _g_EVP_aes_192_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void) {
++	return _g_EVP_aes_192_gcm();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void) {
++	return _g_EVP_aes_256_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void) {
++	return _g_EVP_aes_256_ctr();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void) {
++	return _g_EVP_aes_256_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void) {
++	return _g_EVP_aes_256_gcm();
++}
++
++int _mkcgo_available_EVP_chacha20_poly1305() {
++	return _g_EVP_chacha20_poly1305 != NULL;
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void) {
++	return _g_EVP_chacha20_poly1305();
++}
++
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR _arg0, int _arg1, uintptr_t *_err_state) {
++	int _ret = _g_EVP_default_properties_enable_fips(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR _arg0) {
++	return _g_EVP_default_properties_is_fips_enabled(_arg0);
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void) {
++	return _g_EVP_des_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void) {
++	return _g_EVP_des_ecb();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void) {
++	return _g_EVP_des_ede3_cbc();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void) {
++	return _g_EVP_des_ede3_ecb();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md4(void) {
++	return _g_EVP_md4();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md5(void) {
++	return _g_EVP_md5();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void) {
++	return _g_EVP_md5_sha1();
++}
++
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void) {
++	return _g_EVP_rc4();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void) {
++	return _g_EVP_ripemd160();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void) {
++	return _g_EVP_sha1();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void) {
++	return _g_EVP_sha224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void) {
++	return _g_EVP_sha256();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void) {
++	return _g_EVP_sha384();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void) {
++	return _g_EVP_sha3_224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void) {
++	return _g_EVP_sha3_256();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void) {
++	return _g_EVP_sha3_384();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void) {
++	return _g_EVP_sha3_512();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void) {
++	return _g_EVP_sha512();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void) {
++	return _g_EVP_sha512_224();
++}
++
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void) {
++	return _g_EVP_sha512_256();
++}
++
++int _mkcgo_FIPS_mode(void) {
++	return _g_FIPS_mode();
++}
++
++int _mkcgo_FIPS_mode_set(int _arg0, uintptr_t *_err_state) {
++	int _ret = _g_FIPS_mode_set(_arg0);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR _arg0, _HMAC_CTX_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_HMAC_CTX_copy(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR _arg0) {
++	_g_HMAC_CTX_free(_arg0);
++}
++
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *_err_state) {
++	_HMAC_CTX_PTR _ret = _g_HMAC_CTX_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR _arg0, unsigned char* _arg1, unsigned int* _arg2, uintptr_t *_err_state) {
++	int _ret = _g_HMAC_Final(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, int _arg2, const _EVP_MD_PTR _arg3, _ENGINE_PTR _arg4, uintptr_t *_err_state) {
++	int _ret = _g_HMAC_Init_ex(_arg0, _arg1, _arg2, _arg3, _arg4);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR _arg0, const unsigned char* _arg1, size_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_HMAC_Update(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OBJ_nid2sn(int _arg0) {
++	return _g_OBJ_nid2sn(_arg0);
++}
++
++void _mkcgo_OPENSSL_init(void) {
++	_g_OPENSSL_init();
++}
++
++int _mkcgo_OPENSSL_init_crypto(uint64_t _arg0, const _OPENSSL_INIT_SETTINGS_PTR _arg1, uintptr_t *_err_state) {
++	int _ret = _g_OPENSSL_init_crypto(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_available_OPENSSL_version_major() {
++	return _g_OPENSSL_version_major != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_major(void) {
++	return _g_OPENSSL_version_major();
++}
++
++int _mkcgo_available_OPENSSL_version_minor() {
++	return _g_OPENSSL_version_minor != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_minor(void) {
++	return _g_OPENSSL_version_minor();
++}
++
++int _mkcgo_available_OPENSSL_version_patch() {
++	return _g_OPENSSL_version_patch != NULL;
++}
++
++unsigned int _mkcgo_OPENSSL_version_patch(void) {
++	return _g_OPENSSL_version_patch();
++}
++
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR _arg0) {
++	_g_OSSL_PARAM_BLD_free(_arg0);
++}
++
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void) {
++	return _g_OSSL_PARAM_BLD_new();
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_BN(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, int32_t _arg2, uintptr_t *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_int32(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const unsigned char* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_octet_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR _arg0, const char* _arg1, const char* _arg2, size_t _arg3, uintptr_t *_err_state) {
++	int _ret = _g_OSSL_PARAM_BLD_push_utf8_string(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR _arg0, uintptr_t *_err_state) {
++	_OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_BLD_to_param(_arg0);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR _arg0) {
++	_g_OSSL_PARAM_free(_arg0);
++}
++
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR _arg0, const char* _arg1, uintptr_t *_err_state) {
++	const _OSSL_PARAM_PTR _ret = _g_OSSL_PARAM_locate_const(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1) {
++	return _g_OSSL_PROVIDER_available(_arg0, _arg1);
++}
++
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR _arg0) {
++	return _g_OSSL_PROVIDER_get0_name(_arg0);
++}
++
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR _arg0, const char* _arg1, int _arg2, uintptr_t *_err_state) {
++	_OSSL_PROVIDER_PTR _ret = _g_OSSL_PROVIDER_try_load(_arg0, _arg1, _arg2);
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++const char* _mkcgo_OpenSSL_version(int _arg0) {
++	return _g_OpenSSL_version(_arg0);
++}
++
++int _mkcgo_available_OpenSSL_version_num() {
++	return _g_OpenSSL_version_num != NULL;
++}
++
++unsigned long _mkcgo_OpenSSL_version_num(void) {
++	return _g_OpenSSL_version_num();
++}
++
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char* _arg0, int _arg1, const unsigned char* _arg2, int _arg3, int _arg4, const _EVP_MD_PTR _arg5, int _arg6, unsigned char* _arg7, uintptr_t *_err_state) {
++	int _ret = _g_PKCS5_PBKDF2_HMAC(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RAND_bytes(unsigned char* _arg0, int _arg1, uintptr_t *_err_state) {
++	int _ret = _g_RAND_bytes(_arg0, _arg1);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RAND_bytes_ex(_OSSL_LIB_CTX_PTR _arg0, unsigned char* _arg1, size_t _arg2, unsigned int _arg3, uintptr_t *_err_state) {
++	int _ret = _g_RAND_bytes_ex(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++void _mkcgo_RSA_free(_RSA_PTR _arg0) {
++	_g_RSA_free(_arg0);
++}
++
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_crt_params(_arg0, _arg1, _arg2, _arg3);
++}
++
++void _mkcgo_RSA_get0_factors(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2) {
++	_g_RSA_get0_factors(_arg0, _arg1, _arg2);
++}
++
++void _mkcgo_RSA_get0_key(const _RSA_PTR _arg0, const _BIGNUM_PTR* _arg1, const _BIGNUM_PTR* _arg2, const _BIGNUM_PTR* _arg3) {
++	_g_RSA_get0_key(_arg0, _arg1, _arg2, _arg3);
++}
++
++_RSA_PTR _mkcgo_RSA_new(uintptr_t *_err_state) {
++	_RSA_PTR _ret = _g_RSA_new();
++	if (_ret == NULL) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_RSA_set0_crt_params(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_factors(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, uintptr_t *_err_state) {
++	int _ret = _g_RSA_set0_factors(_arg0, _arg1, _arg2);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
++int _mkcgo_RSA_set0_key(_RSA_PTR _arg0, _BIGNUM_PTR _arg1, _BIGNUM_PTR _arg2, _BIGNUM_PTR _arg3, uintptr_t *_err_state) {
++	int _ret = _g_RSA_set0_key(_arg0, _arg1, _arg2, _arg3);
++	if (_ret <= 0) *_err_state = mkcgo_err_retrieve();
++	return _ret;
++}
++
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.go
+new file mode 100644
+index 00000000000000..a73b6a785f0265
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.go
+@@ -0,0 +1,76 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++package ossl
++
++const (
++	POINT_CONVERSION_UNCOMPRESSED       = 4
++	OPENSSL_INIT_LOAD_CRYPTO_STRINGS    = 0x00000002
++	OPENSSL_INIT_ADD_ALL_CIPHERS        = 0x00000004
++	OPENSSL_INIT_ADD_ALL_DIGESTS        = 0x00000008
++	OPENSSL_INIT_LOAD_CONFIG            = 0x00000040
++	EVP_CTRL_GCM_GET_TAG                = 0x10
++	EVP_CTRL_GCM_SET_TAG                = 0x11
++	EVP_CTRL_AEAD_SET_IVLEN             = 0x9
++	EVP_CTRL_AEAD_GET_TAG               = 0x10
++	EVP_CTRL_AEAD_SET_TAG               = 0x11
++	EVP_PKEY_CTRL_MD                    = 1
++	EVP_PKEY_RSA                        = 6
++	EVP_PKEY_EC                         = 408
++	EVP_PKEY_TLS1_PRF                   = 1021
++	EVP_PKEY_X25519                     = 1034
++	EVP_PKEY_HKDF                       = 1036
++	EVP_PKEY_ED25519                    = 1087
++	EVP_PKEY_DSA                        = 116
++	EVP_PKEY_MLKEM_768                  = 1455
++	EVP_PKEY_MLKEM_1024                 = 1456
++	EVP_PKEY_ML_DSA_44                  = 1457
++	EVP_PKEY_ML_DSA_65                  = 1458
++	EVP_PKEY_ML_DSA_87                  = 1459
++	EVP_PKEY_OP_DERIVE                  = (1 << 10)
++	EVP_MAX_MD_SIZE                     = 64
++	EVP_PKEY_PUBLIC_KEY                 = 0x86
++	EVP_PKEY_KEYPAIR                    = 0x87
++	EVP_MD_CTRL_XOF_LEN                 = 0x3
++	EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001
++	EVP_KDF_HKDF_MODE_EXTRACT_ONLY      = 1
++	EVP_KDF_HKDF_MODE_EXPAND_ONLY       = 2
++	EVP_PKEY_CTRL_TLS_MD                = 0x1000
++	EVP_PKEY_CTRL_TLS_SECRET            = 0x1001
++	EVP_PKEY_CTRL_TLS_SEED              = 0x1002
++	EVP_PKEY_CTRL_HKDF_MD               = 0x1003
++	EVP_PKEY_CTRL_HKDF_SALT             = 0x1004
++	EVP_PKEY_CTRL_HKDF_KEY              = 0x1005
++	EVP_PKEY_CTRL_HKDF_INFO             = 0x1006
++	EVP_PKEY_CTRL_HKDF_MODE             = 0x1007
++	NID_X9_62_prime256v1                = 415
++	NID_secp224r1                       = 713
++	NID_secp384r1                       = 715
++	NID_secp521r1                       = 716
++	NID_ML_KEM_768                      = 1455
++	NID_ML_KEM_1024                     = 1456
++	NID_ML_DSA_44                       = 1457
++	NID_ML_DSA_65                       = 1458
++	NID_ML_DSA_87                       = 1459
++	RSA_PKCS1_PADDING                   = 1
++	RSA_NO_PADDING                      = 3
++	RSA_PKCS1_OAEP_PADDING              = 4
++	RSA_PKCS1_PSS_PADDING               = 6
++	RSA_PSS_SALTLEN_DIGEST              = -1
++	RSA_PSS_SALTLEN_AUTO                = -2
++	RSA_PSS_SALTLEN_MAX_SIGN            = -2
++	RSA_PSS_SALTLEN_MAX                 = -3
++	EVP_PKEY_CTRL_RSA_PADDING           = 0x1001
++	EVP_PKEY_CTRL_RSA_PSS_SALTLEN       = 0x1002
++	EVP_PKEY_CTRL_RSA_KEYGEN_BITS       = 0x1003
++	EVP_PKEY_CTRL_RSA_MGF1_MD           = 0x1005
++	EVP_PKEY_CTRL_RSA_OAEP_MD           = 0x1009
++	EVP_PKEY_CTRL_RSA_OAEP_LABEL        = 0x100A
++	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS     = 0x1001
++	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS   = 0x1002
++	OSSL_PARAM_INTEGER                  = 1
++	OSSL_PARAM_OCTET_STRING             = 5
++	BIO_CTRL_INFO                       = 3
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.h b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.h
+new file mode 100644
+index 00000000000000..152e26e99367e9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl.h
+@@ -0,0 +1,375 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++// Code generated by mkcgo. DO NOT EDIT.
++
++#ifndef MKCGO_H // only include this header once
++#define MKCGO_H
++
++#include <stdlib.h>
++#include <stdint.h>
++
++typedef void* _OPENSSL_INIT_SETTINGS_PTR;
++typedef void* _OSSL_LIB_CTX_PTR;
++typedef void* _OSSL_PROVIDER_PTR;
++typedef void* _ENGINE_PTR;
++typedef void* _EVP_PKEY_PTR;
++typedef void* _EVP_PKEY_CTX_PTR;
++typedef void* _EVP_MD_PTR;
++typedef void* _EVP_MD_CTX_PTR;
++typedef void* _HMAC_CTX_PTR;
++typedef void* _EVP_CIPHER_PTR;
++typedef void* _EVP_CIPHER_CTX_PTR;
++typedef void* _EC_KEY_PTR;
++typedef void* _EC_POINT_PTR;
++typedef void* _EC_GROUP_PTR;
++typedef void* _RSA_PTR;
++typedef void* _BIGNUM_PTR;
++typedef void* _BN_CTX_PTR;
++typedef void* _EVP_MAC_PTR;
++typedef void* _EVP_MAC_CTX_PTR;
++typedef void* _OSSL_PARAM_BLD_PTR;
++typedef void* _OSSL_PARAM_PTR;
++typedef void* _EVP_SIGNATURE_PTR;
++typedef void* _EVP_KEYMGMT_PTR;
++typedef void* _DSA_PTR;
++typedef void* _EVP_KDF_PTR;
++typedef void* _EVP_KDF_CTX_PTR;
++typedef void* _BIO_METHOD_PTR;
++typedef void* _BIO_PTR;
++typedef int point_conversion_form_t;
++
++enum {
++	_POINT_CONVERSION_UNCOMPRESSED = 4,
++	_OPENSSL_INIT_LOAD_CRYPTO_STRINGS = 0x00000002,
++	_OPENSSL_INIT_ADD_ALL_CIPHERS = 0x00000004,
++	_OPENSSL_INIT_ADD_ALL_DIGESTS = 0x00000008,
++	_OPENSSL_INIT_LOAD_CONFIG = 0x00000040,
++	_EVP_CTRL_GCM_GET_TAG = 0x10,
++	_EVP_CTRL_GCM_SET_TAG = 0x11,
++	_EVP_CTRL_AEAD_SET_IVLEN = 0x9,
++	_EVP_CTRL_AEAD_GET_TAG = 0x10,
++	_EVP_CTRL_AEAD_SET_TAG = 0x11,
++	_EVP_PKEY_CTRL_MD = 1,
++	_EVP_PKEY_RSA = 6,
++	_EVP_PKEY_EC = 408,
++	_EVP_PKEY_TLS1_PRF = 1021,
++	_EVP_PKEY_X25519 = 1034,
++	_EVP_PKEY_HKDF = 1036,
++	_EVP_PKEY_ED25519 = 1087,
++	_EVP_PKEY_DSA = 116,
++	_EVP_PKEY_MLKEM_768 = 1455,
++	_EVP_PKEY_MLKEM_1024 = 1456,
++	_EVP_PKEY_ML_DSA_44 = 1457,
++	_EVP_PKEY_ML_DSA_65 = 1458,
++	_EVP_PKEY_ML_DSA_87 = 1459,
++	_EVP_PKEY_OP_DERIVE = (1 << 10),
++	_EVP_MAX_MD_SIZE = 64,
++	_EVP_PKEY_PUBLIC_KEY = 0x86,
++	_EVP_PKEY_KEYPAIR = 0x87,
++	_EVP_MD_CTRL_XOF_LEN = 0x3,
++	_EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID = 0x1001,
++	_EVP_KDF_HKDF_MODE_EXTRACT_ONLY = 1,
++	_EVP_KDF_HKDF_MODE_EXPAND_ONLY = 2,
++	_EVP_PKEY_CTRL_TLS_MD = 0x1000,
++	_EVP_PKEY_CTRL_TLS_SECRET = 0x1001,
++	_EVP_PKEY_CTRL_TLS_SEED = 0x1002,
++	_EVP_PKEY_CTRL_HKDF_MD = 0x1003,
++	_EVP_PKEY_CTRL_HKDF_SALT = 0x1004,
++	_EVP_PKEY_CTRL_HKDF_KEY = 0x1005,
++	_EVP_PKEY_CTRL_HKDF_INFO = 0x1006,
++	_EVP_PKEY_CTRL_HKDF_MODE = 0x1007,
++	_NID_X9_62_prime256v1 = 415,
++	_NID_secp224r1 = 713,
++	_NID_secp384r1 = 715,
++	_NID_secp521r1 = 716,
++	_NID_ML_KEM_768 = 1455,
++	_NID_ML_KEM_1024 = 1456,
++	_NID_ML_DSA_44 = 1457,
++	_NID_ML_DSA_65 = 1458,
++	_NID_ML_DSA_87 = 1459,
++	_RSA_PKCS1_PADDING = 1,
++	_RSA_NO_PADDING = 3,
++	_RSA_PKCS1_OAEP_PADDING = 4,
++	_RSA_PKCS1_PSS_PADDING = 6,
++	_RSA_PSS_SALTLEN_DIGEST = -1,
++	_RSA_PSS_SALTLEN_AUTO = -2,
++	_RSA_PSS_SALTLEN_MAX_SIGN = -2,
++	_RSA_PSS_SALTLEN_MAX = -3,
++	_EVP_PKEY_CTRL_RSA_PADDING = 0x1001,
++	_EVP_PKEY_CTRL_RSA_PSS_SALTLEN = 0x1002,
++	_EVP_PKEY_CTRL_RSA_KEYGEN_BITS = 0x1003,
++	_EVP_PKEY_CTRL_RSA_MGF1_MD = 0x1005,
++	_EVP_PKEY_CTRL_RSA_OAEP_MD = 0x1009,
++	_EVP_PKEY_CTRL_RSA_OAEP_LABEL = 0x100A,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_BITS = 0x1001,
++	_EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS = 0x1002,
++	_OSSL_PARAM_INTEGER = 1,
++	_OSSL_PARAM_OCTET_STRING = 5,
++	BIO_CTRL_INFO = 3,
++};
++
++uintptr_t mkcgo_err_retrieve();
++void __mkcgo_load_(void* handle);
++void __mkcgo_unload_();
++void __mkcgo_load_3(void* handle);
++void __mkcgo_unload_3();
++void __mkcgo_load_33(void* handle);
++void __mkcgo_unload_33();
++void __mkcgo_load_init_1(void* handle);
++void __mkcgo_unload_init_1();
++void __mkcgo_load_init_3(void* handle);
++void __mkcgo_unload_init_3();
++void __mkcgo_load_legacy_1(void* handle);
++void __mkcgo_unload_legacy_1();
++void __mkcgo_load_version(void* handle);
++void __mkcgo_unload_version();
++
++int _mkcgo_available_EVP_DigestSqueeze();
++int _mkcgo_available_EVP_KEYMGMT_fetch();
++int _mkcgo_available_EVP_chacha20_poly1305();
++int _mkcgo_available_OPENSSL_version_major();
++int _mkcgo_available_OPENSSL_version_minor();
++int _mkcgo_available_OPENSSL_version_patch();
++int _mkcgo_available_OpenSSL_version_num();
++
++long _mkcgo_BIO_ctrl(_BIO_PTR, int, long, void*);
++int _mkcgo_BIO_free(_BIO_PTR);
++_BIO_PTR _mkcgo_BIO_new(const _BIO_METHOD_PTR, uintptr_t *);
++const _BIO_METHOD_PTR _mkcgo_BIO_s_mem(void);
++_BIGNUM_PTR _mkcgo_BN_bin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_BN_bn2binpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
++int _mkcgo_BN_bn2lebinpad(const _BIGNUM_PTR, unsigned char*, int, uintptr_t *);
++void _mkcgo_BN_clear(_BIGNUM_PTR);
++void _mkcgo_BN_clear_free(_BIGNUM_PTR);
++void _mkcgo_BN_free(_BIGNUM_PTR);
++_BIGNUM_PTR _mkcgo_BN_lebin2bn(const unsigned char*, int, _BIGNUM_PTR, uintptr_t *);
++_BIGNUM_PTR _mkcgo_BN_new(uintptr_t *);
++int _mkcgo_BN_num_bits(const _BIGNUM_PTR);
++void _mkcgo_CRYPTO_free(void*, const char*, int);
++void* _mkcgo_CRYPTO_malloc(size_t, const char*, int, uintptr_t *);
++void _mkcgo_DSA_free(_DSA_PTR);
++int _mkcgo_DSA_generate_key(_DSA_PTR, uintptr_t *);
++void _mkcgo_DSA_get0_key(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_DSA_get0_pqg(const _DSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_DSA_PTR _mkcgo_DSA_new(uintptr_t *);
++int _mkcgo_DSA_set0_key(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_DSA_set0_pqg(_DSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++void _mkcgo_EC_GROUP_free(_EC_GROUP_PTR);
++_EC_GROUP_PTR _mkcgo_EC_GROUP_new_by_curve_name(int, uintptr_t *);
++int _mkcgo_EC_KEY_check_key(const _EC_KEY_PTR, uintptr_t *);
++void _mkcgo_EC_KEY_free(_EC_KEY_PTR);
++const _EC_GROUP_PTR _mkcgo_EC_KEY_get0_group(const _EC_KEY_PTR);
++const _BIGNUM_PTR _mkcgo_EC_KEY_get0_private_key(const _EC_KEY_PTR);
++const _EC_POINT_PTR _mkcgo_EC_KEY_get0_public_key(const _EC_KEY_PTR);
++_EC_KEY_PTR _mkcgo_EC_KEY_new_by_curve_name(int, uintptr_t *);
++int _mkcgo_EC_KEY_set_private_key(_EC_KEY_PTR, const _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_EC_KEY_set_public_key(_EC_KEY_PTR, const _EC_POINT_PTR, uintptr_t *);
++int _mkcgo_EC_KEY_set_public_key_affine_coordinates(_EC_KEY_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++void _mkcgo_EC_POINT_free(_EC_POINT_PTR);
++int _mkcgo_EC_POINT_get_affine_coordinates_GFp(const _EC_GROUP_PTR, const _EC_POINT_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_mul(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _EC_POINT_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++_EC_POINT_PTR _mkcgo_EC_POINT_new(const _EC_GROUP_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_oct2point(const _EC_GROUP_PTR, _EC_POINT_PTR, const unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
++size_t _mkcgo_EC_POINT_point2oct(const _EC_GROUP_PTR, const _EC_POINT_PTR, point_conversion_form_t, unsigned char*, size_t, _BN_CTX_PTR, uintptr_t *);
++int _mkcgo_EC_POINT_set_affine_coordinates(const _EC_GROUP_PTR, _EC_POINT_PTR, const _BIGNUM_PTR, const _BIGNUM_PTR, _BN_CTX_PTR, uintptr_t *);
++unsigned long _mkcgo_ERR_peek_error(void);
++void _mkcgo_ERR_print_errors(_BIO_PTR);
++int _mkcgo_EVP_CIPHER_CTX_ctrl(_EVP_CIPHER_CTX_PTR, int, int, void*, uintptr_t *);
++void _mkcgo_EVP_CIPHER_CTX_free(_EVP_CIPHER_CTX_PTR);
++_EVP_CIPHER_CTX_PTR _mkcgo_EVP_CIPHER_CTX_new(uintptr_t *);
++int _mkcgo_EVP_CIPHER_CTX_set_key_length(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
++int _mkcgo_EVP_CIPHER_CTX_set_padding(_EVP_CIPHER_CTX_PTR, int, uintptr_t *);
++_EVP_CIPHER_PTR _mkcgo_EVP_CIPHER_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++const char* _mkcgo_EVP_CIPHER_get0_name(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CIPHER_get_block_size(const _EVP_CIPHER_PTR);
++int _mkcgo_EVP_CipherInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_CipherUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_DecryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
++int _mkcgo_EVP_DecryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
++int _mkcgo_EVP_DecryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_Digest(const unsigned char*, size_t, unsigned char*, unsigned int*, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestFinalXOF(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestFinal_ex(_EVP_MD_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
++int _mkcgo_EVP_DigestInit(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestInit_ex(_EVP_MD_CTX_PTR, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestSign(_EVP_MD_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestSignFinal(_EVP_MD_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_DigestSignInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_DigestSqueeze(_EVP_MD_CTX_PTR, unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestUpdate(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerify(_EVP_MD_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerifyFinal(_EVP_MD_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_DigestVerifyInit(_EVP_MD_CTX_PTR, _EVP_PKEY_CTX_PTR*, const _EVP_MD_PTR, _ENGINE_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_EncryptFinal_ex(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, uintptr_t *);
++int _mkcgo_EVP_EncryptInit_ex(_EVP_CIPHER_CTX_PTR, const _EVP_CIPHER_PTR, _ENGINE_PTR, const unsigned char*, const unsigned char*, uintptr_t *);
++int _mkcgo_EVP_EncryptUpdate(_EVP_CIPHER_CTX_PTR, unsigned char*, int*, const unsigned char*, int, uintptr_t *);
++void _mkcgo_EVP_KDF_CTX_free(_EVP_KDF_CTX_PTR);
++size_t _mkcgo_EVP_KDF_CTX_get_kdf_size(_EVP_KDF_CTX_PTR, uintptr_t *);
++_EVP_KDF_CTX_PTR _mkcgo_EVP_KDF_CTX_new(_EVP_KDF_PTR, uintptr_t *);
++int _mkcgo_EVP_KDF_CTX_set_params(_EVP_KDF_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_KDF_derive(_EVP_KDF_CTX_PTR, unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
++_EVP_KDF_PTR _mkcgo_EVP_KDF_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++void _mkcgo_EVP_KDF_free(_EVP_KDF_PTR);
++_EVP_KEYMGMT_PTR _mkcgo_EVP_KEYMGMT_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++void _mkcgo_EVP_KEYMGMT_free(_EVP_KEYMGMT_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_dup(const _EVP_MAC_CTX_PTR, uintptr_t *);
++void _mkcgo_EVP_MAC_CTX_free(_EVP_MAC_CTX_PTR);
++_EVP_MAC_CTX_PTR _mkcgo_EVP_MAC_CTX_new(_EVP_MAC_PTR, uintptr_t *);
++int _mkcgo_EVP_MAC_CTX_set_params(_EVP_MAC_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++_EVP_MAC_PTR _mkcgo_EVP_MAC_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++int _mkcgo_EVP_MAC_final(_EVP_MAC_CTX_PTR, unsigned char*, size_t*, size_t, uintptr_t *);
++int _mkcgo_EVP_MAC_init(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_MAC_update(_EVP_MAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_MD_CTX_copy_ex(_EVP_MD_CTX_PTR, const _EVP_MD_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_MD_CTX_ctrl(_EVP_MD_CTX_PTR, int, int, void*, uintptr_t *);
++void _mkcgo_EVP_MD_CTX_free(_EVP_MD_CTX_PTR);
++int _mkcgo_EVP_MD_CTX_get_params(_EVP_MD_CTX_PTR, _OSSL_PARAM_PTR, uintptr_t *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_gettable_params(_EVP_MD_CTX_PTR, uintptr_t *);
++_EVP_MD_CTX_PTR _mkcgo_EVP_MD_CTX_new(uintptr_t *);
++int _mkcgo_EVP_MD_CTX_set_params(_EVP_MD_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++const _OSSL_PARAM_PTR _mkcgo_EVP_MD_CTX_settable_params(_EVP_MD_CTX_PTR, uintptr_t *);
++_EVP_MD_PTR _mkcgo_EVP_MD_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++void _mkcgo_EVP_MD_free(_EVP_MD_PTR);
++const char* _mkcgo_EVP_MD_get0_name(const _EVP_MD_PTR);
++const _OSSL_PROVIDER_PTR _mkcgo_EVP_MD_get0_provider(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_block_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_size(const _EVP_MD_PTR);
++int _mkcgo_EVP_MD_get_type(const _EVP_MD_PTR);
++int _mkcgo_EVP_PKEY_CTX_add1_hkdf_info(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_ctrl(_EVP_PKEY_CTX_PTR, int, int, int, int, void*, uintptr_t *);
++void _mkcgo_EVP_PKEY_CTX_free(_EVP_PKEY_CTX_PTR);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new(_EVP_PKEY_PTR, _ENGINE_PTR, uintptr_t *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_from_pkey(_OSSL_LIB_CTX_PTR, _EVP_PKEY_PTR, const char*, uintptr_t *);
++_EVP_PKEY_CTX_PTR _mkcgo_EVP_PKEY_CTX_new_id(int, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(_EVP_PKEY_CTX_PTR, unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_key(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(_EVP_PKEY_CTX_PTR, const unsigned char*, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_md(_EVP_PKEY_CTX_PTR, const _EVP_MD_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_hkdf_mode(_EVP_PKEY_CTX_PTR, int, uintptr_t *);
++int _mkcgo_EVP_PKEY_CTX_set_params(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_EC(_OSSL_LIB_CTX_PTR, const char*, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_ED25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLDSA(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_MLKEM(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_RSA(_OSSL_LIB_CTX_PTR, const char*, const char*, size_t, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_Q_keygen_X25519(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++int _mkcgo_EVP_PKEY_assign(_EVP_PKEY_PTR, int, void*, uintptr_t *);
++int _mkcgo_EVP_PKEY_decapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_decapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_decrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_decrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_derive_set_peer(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_encapsulate(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_encapsulate_init(_EVP_PKEY_CTX_PTR, const _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_encrypt(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_encrypt_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++void _mkcgo_EVP_PKEY_free(_EVP_PKEY_PTR);
++int _mkcgo_EVP_PKEY_fromdata(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, int, _OSSL_PARAM_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_fromdata_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_DSA_PTR _mkcgo_EVP_PKEY_get0_DSA(_EVP_PKEY_PTR, uintptr_t *);
++_EC_KEY_PTR _mkcgo_EVP_PKEY_get0_EC_KEY(_EVP_PKEY_PTR, uintptr_t *);
++_RSA_PTR _mkcgo_EVP_PKEY_get1_RSA(_EVP_PKEY_PTR, uintptr_t *);
++size_t _mkcgo_EVP_PKEY_get1_encoded_public_key(_EVP_PKEY_PTR, unsigned char**, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_bits(const _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_bn_param(const _EVP_PKEY_PTR, const char*, _BIGNUM_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_octet_string_param(const _EVP_PKEY_PTR, const char*, unsigned char*, size_t, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_raw_private_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_raw_public_key(const _EVP_PKEY_PTR, unsigned char*, size_t*, uintptr_t *);
++int _mkcgo_EVP_PKEY_get_size(const _EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_keygen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_keygen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new(uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_private_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
++_EVP_PKEY_PTR _mkcgo_EVP_PKEY_new_raw_public_key(int, _ENGINE_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_paramgen(_EVP_PKEY_CTX_PTR, _EVP_PKEY_PTR*, uintptr_t *);
++int _mkcgo_EVP_PKEY_paramgen_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_private_check(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_public_check_quick(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_set1_EC_KEY(_EVP_PKEY_PTR, _EC_KEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_set1_encoded_public_key(_EVP_PKEY_PTR, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_sign(_EVP_PKEY_CTX_PTR, unsigned char*, size_t*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_sign_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_up_ref(_EVP_PKEY_PTR, uintptr_t *);
++int _mkcgo_EVP_PKEY_verify(_EVP_PKEY_CTX_PTR, const unsigned char*, size_t, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_EVP_PKEY_verify_init(_EVP_PKEY_CTX_PTR, uintptr_t *);
++_EVP_SIGNATURE_PTR _mkcgo_EVP_SIGNATURE_fetch(_OSSL_LIB_CTX_PTR, const char*, const char*, uintptr_t *);
++void _mkcgo_EVP_SIGNATURE_free(_EVP_SIGNATURE_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_128_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_192_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ctr(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_aes_256_gcm(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_chacha20_poly1305(void);
++int _mkcgo_EVP_default_properties_enable_fips(_OSSL_LIB_CTX_PTR, int, uintptr_t *);
++int _mkcgo_EVP_default_properties_is_fips_enabled(_OSSL_LIB_CTX_PTR);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ecb(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_cbc(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_des_ede3_ecb(void);
++const _EVP_MD_PTR _mkcgo_EVP_md4(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5(void);
++const _EVP_MD_PTR _mkcgo_EVP_md5_sha1(void);
++const _EVP_CIPHER_PTR _mkcgo_EVP_rc4(void);
++const _EVP_MD_PTR _mkcgo_EVP_ripemd160(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha1(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_256(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_384(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha3_512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_224(void);
++const _EVP_MD_PTR _mkcgo_EVP_sha512_256(void);
++int _mkcgo_FIPS_mode(void);
++int _mkcgo_FIPS_mode_set(int, uintptr_t *);
++int _mkcgo_HMAC_CTX_copy(_HMAC_CTX_PTR, _HMAC_CTX_PTR, uintptr_t *);
++void _mkcgo_HMAC_CTX_free(_HMAC_CTX_PTR);
++_HMAC_CTX_PTR _mkcgo_HMAC_CTX_new(uintptr_t *);
++int _mkcgo_HMAC_Final(_HMAC_CTX_PTR, unsigned char*, unsigned int*, uintptr_t *);
++int _mkcgo_HMAC_Init_ex(_HMAC_CTX_PTR, const unsigned char*, int, const _EVP_MD_PTR, _ENGINE_PTR, uintptr_t *);
++int _mkcgo_HMAC_Update(_HMAC_CTX_PTR, const unsigned char*, size_t, uintptr_t *);
++const char* _mkcgo_OBJ_nid2sn(int);
++void _mkcgo_OPENSSL_init(void);
++int _mkcgo_OPENSSL_init_crypto(uint64_t, const _OPENSSL_INIT_SETTINGS_PTR, uintptr_t *);
++unsigned int _mkcgo_OPENSSL_version_major(void);
++unsigned int _mkcgo_OPENSSL_version_minor(void);
++unsigned int _mkcgo_OPENSSL_version_patch(void);
++void _mkcgo_OSSL_PARAM_BLD_free(_OSSL_PARAM_BLD_PTR);
++_OSSL_PARAM_BLD_PTR _mkcgo_OSSL_PARAM_BLD_new(void);
++int _mkcgo_OSSL_PARAM_BLD_push_BN(_OSSL_PARAM_BLD_PTR, const char*, const _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_int32(_OSSL_PARAM_BLD_PTR, const char*, int32_t, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_octet_string(_OSSL_PARAM_BLD_PTR, const char*, const unsigned char*, size_t, uintptr_t *);
++int _mkcgo_OSSL_PARAM_BLD_push_utf8_string(_OSSL_PARAM_BLD_PTR, const char*, const char*, size_t, uintptr_t *);
++_OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_BLD_to_param(_OSSL_PARAM_BLD_PTR, uintptr_t *);
++void _mkcgo_OSSL_PARAM_free(_OSSL_PARAM_PTR);
++const _OSSL_PARAM_PTR _mkcgo_OSSL_PARAM_locate_const(const _OSSL_PARAM_PTR, const char*, uintptr_t *);
++int _mkcgo_OSSL_PROVIDER_available(_OSSL_LIB_CTX_PTR, const char*);
++const char* _mkcgo_OSSL_PROVIDER_get0_name(const _OSSL_PROVIDER_PTR);
++_OSSL_PROVIDER_PTR _mkcgo_OSSL_PROVIDER_try_load(_OSSL_LIB_CTX_PTR, const char*, int, uintptr_t *);
++const char* _mkcgo_OpenSSL_version(int);
++unsigned long _mkcgo_OpenSSL_version_num(void);
++int _mkcgo_PKCS5_PBKDF2_HMAC(const char*, int, const unsigned char*, int, int, const _EVP_MD_PTR, int, unsigned char*, uintptr_t *);
++int _mkcgo_RAND_bytes(unsigned char*, int, uintptr_t *);
++int _mkcgo_RAND_bytes_ex(_OSSL_LIB_CTX_PTR, unsigned char*, size_t, unsigned int, uintptr_t *);
++void _mkcgo_RSA_free(_RSA_PTR);
++void _mkcgo_RSA_get0_crt_params(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_factors(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++void _mkcgo_RSA_get0_key(const _RSA_PTR, const _BIGNUM_PTR*, const _BIGNUM_PTR*, const _BIGNUM_PTR*);
++_RSA_PTR _mkcgo_RSA_new(uintptr_t *);
++int _mkcgo_RSA_set0_crt_params(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_RSA_set0_factors(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++int _mkcgo_RSA_set0_key(_RSA_PTR, _BIGNUM_PTR, _BIGNUM_PTR, _BIGNUM_PTR, uintptr_t *);
++
++#endif // MKCGO_H
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_cgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_cgo.go
+new file mode 100644
+index 00000000000000..2eb57068990277
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit.go
-@@ -0,0 +1,8 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_cgo.go
+@@ -0,0 +1,1513 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+package cryptokit
++// Code generated by mkcgo. DO NOT EDIT.
++
++package ossl
++
++/*
++#cgo CFLAGS: -Wno-attributes
++#cgo unix LDFLAGS: -ldl
++
++#include "zossl.h"
++#cgo noescape _mkcgo_BIO_ctrl
++#cgo nocallback _mkcgo_BIO_ctrl
++#cgo noescape _mkcgo_BIO_free
++#cgo nocallback _mkcgo_BIO_free
++#cgo noescape _mkcgo_ERR_print_errors
++#cgo nocallback _mkcgo_ERR_print_errors
++#cgo noescape _mkcgo_EVP_CipherUpdate
++#cgo nocallback _mkcgo_EVP_CipherUpdate
++#cgo noescape _mkcgo_EVP_DecryptFinal_ex
++#cgo nocallback _mkcgo_EVP_DecryptFinal_ex
++#cgo noescape _mkcgo_EVP_DecryptUpdate
++#cgo nocallback _mkcgo_EVP_DecryptUpdate
++#cgo noescape _mkcgo_EVP_Digest
++#cgo nocallback _mkcgo_EVP_Digest
++#cgo noescape _mkcgo_EVP_DigestFinalXOF
++#cgo nocallback _mkcgo_EVP_DigestFinalXOF
++#cgo noescape _mkcgo_EVP_DigestFinal_ex
++#cgo nocallback _mkcgo_EVP_DigestFinal_ex
++#cgo noescape _mkcgo_EVP_DigestSign
++#cgo nocallback _mkcgo_EVP_DigestSign
++#cgo noescape _mkcgo_EVP_DigestSqueeze
++#cgo nocallback _mkcgo_EVP_DigestSqueeze
++#cgo noescape _mkcgo_EVP_DigestUpdate
++#cgo nocallback _mkcgo_EVP_DigestUpdate
++#cgo noescape _mkcgo_EVP_EncryptFinal_ex
++#cgo nocallback _mkcgo_EVP_EncryptFinal_ex
++#cgo noescape _mkcgo_EVP_EncryptUpdate
++#cgo nocallback _mkcgo_EVP_EncryptUpdate
++#cgo noescape _mkcgo_EVP_MAC_CTX_free
++#cgo nocallback _mkcgo_EVP_MAC_CTX_free
++#cgo noescape _mkcgo_EVP_MAC_final
++#cgo nocallback _mkcgo_EVP_MAC_final
++#cgo noescape _mkcgo_EVP_MAC_init
++#cgo nocallback _mkcgo_EVP_MAC_init
++#cgo noescape _mkcgo_EVP_MAC_update
++#cgo nocallback _mkcgo_EVP_MAC_update
++#cgo noescape _mkcgo_EVP_MD_CTX_get_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_get_params
++#cgo noescape _mkcgo_EVP_MD_CTX_set_params
++#cgo nocallback _mkcgo_EVP_MD_CTX_set_params
++#cgo noescape _mkcgo_EVP_PKEY_CTX_set_params
++#cgo nocallback _mkcgo_EVP_PKEY_CTX_set_params
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_EC
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_EC
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_ED25519
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_ED25519
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLDSA
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLDSA
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_MLKEM
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_MLKEM
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_RSA
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_RSA
++#cgo noescape _mkcgo_EVP_PKEY_Q_keygen_X25519
++#cgo nocallback _mkcgo_EVP_PKEY_Q_keygen_X25519
++#cgo noescape _mkcgo_EVP_PKEY_derive
++#cgo nocallback _mkcgo_EVP_PKEY_derive
++#cgo noescape _mkcgo_EVP_PKEY_get_bn_param
++#cgo nocallback _mkcgo_EVP_PKEY_get_bn_param
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_private_key
++#cgo noescape _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo nocallback _mkcgo_EVP_PKEY_get_raw_public_key
++#cgo noescape _mkcgo_EVP_PKEY_keygen
++#cgo nocallback _mkcgo_EVP_PKEY_keygen
++#cgo noescape _mkcgo_HMAC_CTX_copy
++#cgo nocallback _mkcgo_HMAC_CTX_copy
++#cgo noescape _mkcgo_HMAC_CTX_free
++#cgo nocallback _mkcgo_HMAC_CTX_free
++#cgo noescape _mkcgo_HMAC_Final
++#cgo nocallback _mkcgo_HMAC_Final
++#cgo noescape _mkcgo_HMAC_Init_ex
++#cgo nocallback _mkcgo_HMAC_Init_ex
++#cgo noescape _mkcgo_HMAC_Update
++#cgo nocallback _mkcgo_HMAC_Update
++#cgo noescape _mkcgo_RAND_bytes
++#cgo nocallback _mkcgo_RAND_bytes
++#cgo noescape _mkcgo_RAND_bytes_ex
++#cgo nocallback _mkcgo_RAND_bytes_ex
++*/
++import "C"
++import "unsafe"
++
++type BIGNUM_PTR = C._BIGNUM_PTR
++type BIO_METHOD_PTR = C._BIO_METHOD_PTR
++type BIO_PTR = C._BIO_PTR
++type BN_CTX_PTR = C._BN_CTX_PTR
++type DSA_PTR = C._DSA_PTR
++type EC_GROUP_PTR = C._EC_GROUP_PTR
++type EC_KEY_PTR = C._EC_KEY_PTR
++type EC_POINT_PTR = C._EC_POINT_PTR
++type ENGINE_PTR = C._ENGINE_PTR
++type EVP_CIPHER_CTX_PTR = C._EVP_CIPHER_CTX_PTR
++type EVP_CIPHER_PTR = C._EVP_CIPHER_PTR
++type EVP_KDF_CTX_PTR = C._EVP_KDF_CTX_PTR
++type EVP_KDF_PTR = C._EVP_KDF_PTR
++type EVP_KEYMGMT_PTR = C._EVP_KEYMGMT_PTR
++type EVP_MAC_CTX_PTR = C._EVP_MAC_CTX_PTR
++type EVP_MAC_PTR = C._EVP_MAC_PTR
++type EVP_MD_CTX_PTR = C._EVP_MD_CTX_PTR
++type EVP_MD_PTR = C._EVP_MD_PTR
++type EVP_PKEY_CTX_PTR = C._EVP_PKEY_CTX_PTR
++type EVP_PKEY_PTR = C._EVP_PKEY_PTR
++type EVP_SIGNATURE_PTR = C._EVP_SIGNATURE_PTR
++type HMAC_CTX_PTR = C._HMAC_CTX_PTR
++type OPENSSL_INIT_SETTINGS_PTR = C._OPENSSL_INIT_SETTINGS_PTR
++type OSSL_LIB_CTX_PTR = C._OSSL_LIB_CTX_PTR
++type OSSL_PARAM_BLD_PTR = C._OSSL_PARAM_BLD_PTR
++type OSSL_PARAM_PTR = C._OSSL_PARAM_PTR
++type OSSL_PROVIDER_PTR = C._OSSL_PROVIDER_PTR
++type RSA_PTR = C._RSA_PTR
++type Point_conversion_form_t = C.point_conversion_form_t
++
++func MkcgoLoad_(handle unsafe.Pointer) {
++	C.__mkcgo_load_(handle)
++}
++
++func MkcgoUnload_() {
++	C.__mkcgo_unload_()
++}
++
++func MkcgoLoad_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_3(handle)
++}
++
++func MkcgoUnload_3() {
++	C.__mkcgo_unload_3()
++}
++
++func MkcgoLoad_33(handle unsafe.Pointer) {
++	C.__mkcgo_load_33(handle)
++}
++
++func MkcgoUnload_33() {
++	C.__mkcgo_unload_33()
++}
++
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_1(handle)
++}
++
++func MkcgoUnload_init_1() {
++	C.__mkcgo_unload_init_1()
++}
++
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	C.__mkcgo_load_init_3(handle)
++}
++
++func MkcgoUnload_init_3() {
++	C.__mkcgo_unload_init_3()
++}
++
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	C.__mkcgo_load_legacy_1(handle)
++}
++
++func MkcgoUnload_legacy_1() {
++	C.__mkcgo_unload_legacy_1()
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	C.__mkcgo_load_version(handle)
++}
++
++func MkcgoUnload_version() {
++	C.__mkcgo_unload_version()
++}
++
++//go:nosplit
++func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
++	x := uintptr(unsafe.Pointer(p))
++	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++}
++
++func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
++	return int64(C._mkcgo_BIO_ctrl(bp, C.int(cmd), C.long(larg), parg))
++}
++
++func BIO_free(a BIO_PTR) int32 {
++	return int32(C._mkcgo_BIO_free(a))
++}
++
++func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BIO_new(__type, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BIO_new", uintptr(_err))
++}
++
++func BIO_s_mem() BIO_METHOD_PTR {
++	return C._mkcgo_BIO_s_mem()
++}
++
++func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BN_bin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg0))), C.int(len(arg0)), arg2, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_bin2bn", uintptr(_err))
++}
++
++func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BN_bn2binpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2binpad", uintptr(_err))
++}
++
++func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BN_bn2lebinpad(a, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(to))), C.int(len(to)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("BN_bn2lebinpad", uintptr(_err))
++}
++
++func BN_clear(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear(arg0)
++}
++
++func BN_clear_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_clear_free(arg0)
++}
++
++func BN_free(arg0 BIGNUM_PTR) {
++	C._mkcgo_BN_free(arg0)
++}
++
++func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BN_lebin2bn((*C.uchar)(unsafe.Pointer(unsafe.SliceData(s))), C.int(len(s)), ret, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_lebin2bn", uintptr(_err))
++}
++
++func BN_new() (BIGNUM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_BN_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("BN_new", uintptr(_err))
++}
++
++func BN_num_bits(arg0 BIGNUM_PTR) int32 {
++	return int32(C._mkcgo_BN_num_bits(arg0))
++}
++
++func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
++	C._mkcgo_CRYPTO_free(str, (*C.char)(unsafe.Pointer(file)), C.int(line))
++}
++
++func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_CRYPTO_malloc(C.size_t(num), (*C.char)(unsafe.Pointer(file)), C.int(line), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("CRYPTO_malloc", uintptr(_err))
++}
++
++func DSA_free(r DSA_PTR) {
++	C._mkcgo_DSA_free(r)
++}
++
++func DSA_generate_key(a DSA_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_DSA_generate_key(a, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_generate_key", uintptr(_err))
++}
++
++func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_key(d, pub_key, priv_key)
++}
++
++func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
++	C._mkcgo_DSA_get0_pqg(d, p, q, g)
++}
++
++func DSA_new() (DSA_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_DSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("DSA_new", uintptr(_err))
++}
++
++func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_DSA_set0_key(d, pub_key, priv_key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_key", uintptr(_err))
++}
++
++func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_DSA_set0_pqg(d, p, q, g, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("DSA_set0_pqg", uintptr(_err))
++}
++
++func EC_GROUP_free(group EC_GROUP_PTR) {
++	C._mkcgo_EC_GROUP_free(group)
++}
++
++func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_GROUP_new_by_curve_name(C.int(nid), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_GROUP_new_by_curve_name", uintptr(_err))
++}
++
++func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_KEY_check_key(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_check_key", uintptr(_err))
++}
++
++func EC_KEY_free(arg0 EC_KEY_PTR) {
++	C._mkcgo_EC_KEY_free(arg0)
++}
++
++func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
++	return C._mkcgo_EC_KEY_get0_group(arg0)
++}
++
++func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
++	return C._mkcgo_EC_KEY_get0_private_key(arg0)
++}
++
++func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
++	return C._mkcgo_EC_KEY_get0_public_key(arg0)
++}
++
++func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_KEY_new_by_curve_name(C.int(arg0), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_KEY_new_by_curve_name", uintptr(_err))
++}
++
++func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_KEY_set_private_key(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_private_key", uintptr(_err))
++}
++
++func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_KEY_set_public_key(key, pub, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key", uintptr(_err))
++}
++
++func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_KEY_set_public_key_affine_coordinates(key, x, y, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", uintptr(_err))
++}
++
++func EC_POINT_free(arg0 EC_POINT_PTR) {
++	C._mkcgo_EC_POINT_free(arg0)
++}
++
++func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_get_affine_coordinates_GFp(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", uintptr(_err))
++}
++
++func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_mul(group, r, n, q, m, ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_mul", uintptr(_err))
++}
++
++func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EC_POINT_new", uintptr(_err))
++}
++
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_oct2point(group, p, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_oct2point", uintptr(_err))
++}
++
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_point2oct(group, p, form, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EC_POINT_point2oct", uintptr(_err))
++}
++
++func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EC_POINT_set_affine_coordinates(arg0, arg1, arg2, arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EC_POINT_set_affine_coordinates", uintptr(_err))
++}
++
++func ERR_peek_error() uint64 {
++	return uint64(C._mkcgo_ERR_peek_error())
++}
++
++func ERR_print_errors(bp BIO_PTR) {
++	C._mkcgo_ERR_print_errors(bp)
++}
++
++func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CIPHER_CTX_ctrl(ctx, C.int(__type), C.int(arg), ptr, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_ctrl", uintptr(_err))
++}
++
++func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
++	C._mkcgo_EVP_CIPHER_CTX_free(arg0)
++}
++
++func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CIPHER_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_CTX_new", uintptr(_err))
++}
++
++func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_key_length(x, C.int(keylen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", uintptr(_err))
++}
++
++func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CIPHER_CTX_set_padding(x, C.int(padding), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CIPHER_CTX_set_padding", uintptr(_err))
++}
++
++func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CIPHER_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_CIPHER_fetch", uintptr(_err))
++}
++
++func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_CIPHER_get0_name(cipher)))
++}
++
++func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
++	return int32(C._mkcgo_EVP_CIPHER_get_block_size(cipher))
++}
++
++func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CipherInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), C.int(enc), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherInit_ex", uintptr(_err))
++}
++
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_CipherUpdate: *outl exceeds len(out)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_CipherUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_CipherUpdate", uintptr(_err))
++}
++
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(outm) {
++		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DecryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(outm))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptFinal_ex", uintptr(_err))
++}
++
++func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DecryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptInit_ex", uintptr(_err))
++}
++
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DecryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DecryptUpdate", uintptr(_err))
++}
++
++func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	if size != nil && int(*size) > len(md) {
++		panic("EVP_Digest: *size exceeds len(md)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_Digest((*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(size)), __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_Digest", uintptr(_err))
++}
++
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestFinalXOF(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), C.size_t(len(md)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestFinalXOF", uintptr(_err))
++}
++
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
++	if s != nil && int(*s) > len(md) {
++		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(md))), (*C.uint)(unsafe.Pointer(s)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestFinal_ex", uintptr(_err))
++}
++
++func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestInit(ctx, __type, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit", uintptr(_err))
++}
++
++func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestInit_ex(ctx, __type, impl, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestInit_ex", uintptr(_err))
++}
++
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sigret) {
++		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestSign(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), (*C.size_t)(unsafe.Pointer(siglen)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSign", uintptr(_err))
++}
++
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sig) {
++		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestSignFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), (*C.size_t)(unsafe.Pointer(siglen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignFinal", uintptr(_err))
++}
++
++func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestSignInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSignInit", uintptr(_err))
++}
++
++func EVP_DigestSqueeze_Available() bool {
++	return C._mkcgo_available_EVP_DigestSqueeze() != 0
++}
++
++func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestSqueeze(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), C.size_t(len(out)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestSqueeze", uintptr(_err))
++}
++
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(d))), C.size_t(len(d)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestUpdate", uintptr(_err))
++}
++
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestVerify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sigret))), C.size_t(len(sigret)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerify", uintptr(_err))
++}
++
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestVerifyFinal(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyFinal", uintptr(_err))
++}
++
++func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_DigestVerifyInit(ctx, pctx, __type, e, pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_DigestVerifyInit", uintptr(_err))
++}
++
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_EncryptFinal_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptFinal_ex", uintptr(_err))
++}
++
++func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_EncryptInit_ex(ctx, __type, impl, (*C.uchar)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(iv)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptInit_ex", uintptr(_err))
++}
++
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_EncryptUpdate(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.int)(unsafe.Pointer(outl)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(in))), C.int(len(in)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_EncryptUpdate", uintptr(_err))
++}
++
++func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
++	C._mkcgo_EVP_KDF_CTX_free(ctx)
++}
++
++func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KDF_CTX_get_kdf_size(ctx, mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", uintptr(_err))
++}
++
++func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KDF_CTX_new(kdf, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_CTX_new", uintptr(_err))
++}
++
++func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KDF_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_CTX_set_params", uintptr(_err))
++}
++
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KDF_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_KDF_derive", uintptr(_err))
++}
++
++func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KDF_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KDF_fetch", uintptr(_err))
++}
++
++func EVP_KDF_free(kdf EVP_KDF_PTR) {
++	C._mkcgo_EVP_KDF_free(kdf)
++}
++
++func EVP_KEYMGMT_fetch_Available() bool {
++	return C._mkcgo_available_EVP_KEYMGMT_fetch() != 0
++}
++
++func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_KEYMGMT_fetch(libctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_KEYMGMT_fetch", uintptr(_err))
++}
++
++func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
++	C._mkcgo_EVP_KEYMGMT_free(keymgmt)
++}
++
++func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_CTX_dup(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_dup", uintptr(_err))
++}
++
++func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
++	C._mkcgo_EVP_MAC_CTX_free(arg0)
++}
++
++func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_CTX_new(arg0, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_CTX_new", uintptr(_err))
++}
++
++func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_CTX_set_params", uintptr(_err))
++}
++
++func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MAC_fetch", uintptr(_err))
++}
++
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_final(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outl)), C.size_t(len(out)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_final", uintptr(_err))
++}
++
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_init(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_init", uintptr(_err))
++}
++
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MAC_update(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MAC_update", uintptr(_err))
++}
++
++func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_copy_ex(out, in, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_copy_ex", uintptr(_err))
++}
++
++func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_ctrl(ctx, C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_ctrl", uintptr(_err))
++}
++
++func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
++	C._mkcgo_EVP_MD_CTX_free(ctx)
++}
++
++func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_get_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_get_params", uintptr(_err))
++}
++
++func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_gettable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_gettable_params", uintptr(_err))
++}
++
++func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_new", uintptr(_err))
++}
++
++func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_MD_CTX_set_params", uintptr(_err))
++}
++
++func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_CTX_settable_params(ctx, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_CTX_settable_params", uintptr(_err))
++}
++
++func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_MD_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_MD_fetch", uintptr(_err))
++}
++
++func EVP_MD_free(md EVP_MD_PTR) {
++	C._mkcgo_EVP_MD_free(md)
++}
++
++func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_EVP_MD_get0_name(md)))
++}
++
++func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
++	return C._mkcgo_EVP_MD_get0_provider(md)
++}
++
++func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_block_size(md))
++}
++
++func EVP_MD_get_size(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_size(md))
++}
++
++func EVP_MD_get_type(md EVP_MD_PTR) int32 {
++	return int32(C._mkcgo_EVP_MD_get_type(md))
++}
++
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_add1_hkdf_info(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_ctrl(ctx, C.int(keytype), C.int(optype), C.int(cmd), C.int(p1), p2, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_ctrl", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
++	C._mkcgo_EVP_PKEY_CTX_free(arg0)
++}
++
++func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_new(arg0, arg1, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_from_pkey(libctx, pkey, (*C.char)(unsafe.Pointer(propquery)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_new_id(C.int(id), e, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_CTX_new_id", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(label))), C.int(len(label)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_key(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set1_hkdf_salt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_md(arg0, arg1, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_hkdf_mode(arg0, C.int(arg1), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", uintptr(_err))
++}
++
++func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_CTX_set_params(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_CTX_set_params", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_EC(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), (*C.char)(unsafe.Pointer(arg1)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_EC", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_ED25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLDSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_MLKEM(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_RSA(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), C.size_t(arg1), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_RSA", uintptr(_err))
++}
++
++func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_Q_keygen_X25519(ctx, (*C.char)(unsafe.Pointer(propq)), (*C.char)(unsafe.Pointer(__type)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_Q_keygen_X25519", uintptr(_err))
++}
++
++func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_assign(pkey, C.int(__type), key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_assign", uintptr(_err))
++}
++
++func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decapsulate(ctx, (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), (*C.uchar)(unsafe.Pointer(wrappedkey)), C.size_t(wrappedkeylen), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate", uintptr(_err))
++}
++
++func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decapsulate_init(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decapsulate_init", uintptr(_err))
++}
++
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt", uintptr(_err))
++}
++
++func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_decrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_decrypt_init", uintptr(_err))
++}
++
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
++	if keylen != nil && int(*keylen) > len(key) {
++		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_derive(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), (*C.size_t)(unsafe.Pointer(keylen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive", uintptr(_err))
++}
++
++func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_derive_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_init", uintptr(_err))
++}
++
++func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_derive_set_peer(ctx, peer, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_derive_set_peer", uintptr(_err))
++}
++
++func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encapsulate(ctx, (*C.uchar)(unsafe.Pointer(wrappedkey)), (*C.size_t)(unsafe.Pointer(wrappedkeylen)), (*C.uchar)(unsafe.Pointer(genkey)), (*C.size_t)(unsafe.Pointer(genkeylen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate", uintptr(_err))
++}
++
++func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encapsulate_init(ctx, params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encapsulate_init", uintptr(_err))
++}
++
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encrypt(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt", uintptr(_err))
++}
++
++func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_encrypt_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_encrypt_init", uintptr(_err))
++}
++
++func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
++	C._mkcgo_EVP_PKEY_free(arg0)
++}
++
++func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_fromdata(ctx, pkey, C.int(selection), params, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata", uintptr(_err))
++}
++
++func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_fromdata_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_fromdata_init", uintptr(_err))
++}
++
++func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get0_DSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_DSA", uintptr(_err))
++}
++
++func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get0_EC_KEY(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get0_EC_KEY", uintptr(_err))
++}
++
++func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get1_RSA(pkey, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_get1_RSA", uintptr(_err))
++}
++
++func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get1_encoded_public_key(pkey, (**C.uchar)(unsafe.Pointer(ppub)), mkcgoNoEscape(&_err))
++	return int(_ret), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", uintptr(_err))
++}
++
++func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_bits(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bits", uintptr(_err))
++}
++
++func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_bn_param(pkey, (*C.char)(unsafe.Pointer(key_name)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_bn_param", uintptr(_err))
++}
++
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_octet_string_param(pkey, (*C.char)(unsafe.Pointer(key_name)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), (*C.size_t)(unsafe.Pointer(out_len)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_octet_string_param", uintptr(_err))
++}
++
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
++	if privlen != nil && int(*privlen) > len(priv) {
++		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_raw_private_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(priv))), (*C.size_t)(unsafe.Pointer(privlen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_private_key", uintptr(_err))
++}
++
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
++	if publen != nil && int(*publen) > len(pub) {
++		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_raw_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), (*C.size_t)(unsafe.Pointer(publen)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_raw_public_key", uintptr(_err))
++}
++
++func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_get_size(pkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_get_size", uintptr(_err))
++}
++
++func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_keygen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen", uintptr(_err))
++}
++
++func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_keygen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_keygen_init", uintptr(_err))
++}
++
++func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new", uintptr(_err))
++}
++
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_new_raw_private_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_private_key", uintptr(_err))
++}
++
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_new_raw_public_key(C.int(__type), e, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_PKEY_new_raw_public_key", uintptr(_err))
++}
++
++func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_paramgen(ctx, ppkey, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen", uintptr(_err))
++}
++
++func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_paramgen_init(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_paramgen_init", uintptr(_err))
++}
++
++func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_private_check(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_private_check", uintptr(_err))
++}
++
++func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_public_check_quick(ctx, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_public_check_quick", uintptr(_err))
++}
++
++func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_set1_EC_KEY(pkey, key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_EC_KEY", uintptr(_err))
++}
++
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_set1_encoded_public_key(pkey, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(pub))), C.size_t(len(pub)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", uintptr(_err))
++}
++
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_sign(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.size_t)(unsafe.Pointer(arg2)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg3))), C.size_t(len(arg3)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign", uintptr(_err))
++}
++
++func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_sign_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_sign_init", uintptr(_err))
++}
++
++func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_up_ref(key, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_up_ref", uintptr(_err))
++}
++
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_verify(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(sig))), C.size_t(len(sig)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(tbs))), C.size_t(len(tbs)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify", uintptr(_err))
++}
++
++func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_PKEY_verify_init(arg0, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_PKEY_verify_init", uintptr(_err))
++}
++
++func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_SIGNATURE_fetch(ctx, (*C.char)(unsafe.Pointer(algorithm)), (*C.char)(unsafe.Pointer(properties)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("EVP_SIGNATURE_fetch", uintptr(_err))
++}
++
++func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
++	C._mkcgo_EVP_SIGNATURE_free(signature)
++}
++
++func EVP_aes_128_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_cbc()
++}
++
++func EVP_aes_128_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ctr()
++}
++
++func EVP_aes_128_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_ecb()
++}
++
++func EVP_aes_128_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_128_gcm()
++}
++
++func EVP_aes_192_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_cbc()
++}
++
++func EVP_aes_192_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ctr()
++}
++
++func EVP_aes_192_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_ecb()
++}
++
++func EVP_aes_192_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_192_gcm()
++}
++
++func EVP_aes_256_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_cbc()
++}
++
++func EVP_aes_256_ctr() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ctr()
++}
++
++func EVP_aes_256_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_ecb()
++}
++
++func EVP_aes_256_gcm() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_aes_256_gcm()
++}
++
++func EVP_chacha20_poly1305_Available() bool {
++	return C._mkcgo_available_EVP_chacha20_poly1305() != 0
++}
++
++func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_chacha20_poly1305()
++}
++
++func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_EVP_default_properties_enable_fips(libctx, C.int(enable), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("EVP_default_properties_enable_fips", uintptr(_err))
++}
++
++func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
++	return int32(C._mkcgo_EVP_default_properties_is_fips_enabled(libctx))
++}
++
++func EVP_des_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_cbc()
++}
++
++func EVP_des_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ecb()
++}
++
++func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_cbc()
++}
++
++func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_des_ede3_ecb()
++}
++
++func EVP_md4() EVP_MD_PTR {
++	return C._mkcgo_EVP_md4()
++}
++
++func EVP_md5() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5()
++}
++
++func EVP_md5_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_md5_sha1()
++}
++
++func EVP_rc4() EVP_CIPHER_PTR {
++	return C._mkcgo_EVP_rc4()
++}
++
++func EVP_ripemd160() EVP_MD_PTR {
++	return C._mkcgo_EVP_ripemd160()
++}
++
++func EVP_sha1() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha1()
++}
++
++func EVP_sha224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha224()
++}
++
++func EVP_sha256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha256()
++}
++
++func EVP_sha384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha384()
++}
++
++func EVP_sha3_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_224()
++}
++
++func EVP_sha3_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_256()
++}
++
++func EVP_sha3_384() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_384()
++}
++
++func EVP_sha3_512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha3_512()
++}
++
++func EVP_sha512() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512()
++}
++
++func EVP_sha512_224() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_224()
++}
++
++func EVP_sha512_256() EVP_MD_PTR {
++	return C._mkcgo_EVP_sha512_256()
++}
++
++func FIPS_mode() int32 {
++	return int32(C._mkcgo_FIPS_mode())
++}
++
++func FIPS_mode_set(r int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_FIPS_mode_set(C.int(r), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("FIPS_mode_set", uintptr(_err))
++}
++
++func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_HMAC_CTX_copy(dest, src, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_CTX_copy", uintptr(_err))
++}
++
++func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
++	C._mkcgo_HMAC_CTX_free(arg0)
++}
++
++func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_HMAC_CTX_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("HMAC_CTX_new", uintptr(_err))
++}
++
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("HMAC_Final: *arg2 exceeds len(arg1)")
++	}
++	var _err C.uintptr_t
++	_ret := C._mkcgo_HMAC_Final(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), (*C.uint)(unsafe.Pointer(arg2)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Final", uintptr(_err))
++}
++
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_HMAC_Init_ex(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.int(len(arg1)), arg3, arg4, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Init_ex", uintptr(_err))
++}
++
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_HMAC_Update(arg0, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(arg1))), C.size_t(len(arg1)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("HMAC_Update", uintptr(_err))
++}
++
++func OBJ_nid2sn(n int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OBJ_nid2sn(C.int(n))))
++}
++
++func OPENSSL_init() {
++	C._mkcgo_OPENSSL_init()
++}
++
++func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OPENSSL_init_crypto(C.uint64_t(ops), settings, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OPENSSL_init_crypto", uintptr(_err))
++}
++
++func OPENSSL_version_major_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_major() != 0
++}
++
++func OPENSSL_version_major() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_major())
++}
++
++func OPENSSL_version_minor_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_minor() != 0
++}
++
++func OPENSSL_version_minor() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_minor())
++}
++
++func OPENSSL_version_patch_Available() bool {
++	return C._mkcgo_available_OPENSSL_version_patch() != 0
++}
++
++func OPENSSL_version_patch() uint32 {
++	return uint32(C._mkcgo_OPENSSL_version_patch())
++}
++
++func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
++	C._mkcgo_OSSL_PARAM_BLD_free(bld)
++}
++
++func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
++	return C._mkcgo_OSSL_PARAM_BLD_new()
++}
++
++func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_BN(bld, (*C.char)(unsafe.Pointer(key)), bn, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_BN", uintptr(_err))
++}
++
++func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_int32(bld, (*C.char)(unsafe.Pointer(key)), C.int32_t(num), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_int32", uintptr(_err))
++}
++
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_octet_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", uintptr(_err))
++}
++
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_BLD_push_utf8_string(bld, (*C.char)(unsafe.Pointer(key)), (*C.char)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", uintptr(_err))
++}
++
++func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_BLD_to_param(bld, mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_BLD_to_param", uintptr(_err))
++}
++
++func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
++	C._mkcgo_OSSL_PARAM_free(p)
++}
++
++func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PARAM_locate_const(p, (*C.char)(unsafe.Pointer(key)), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PARAM_locate_const", uintptr(_err))
++}
++
++func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
++	return int32(C._mkcgo_OSSL_PROVIDER_available(libctx, (*C.char)(unsafe.Pointer(name))))
++}
++
++func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OSSL_PROVIDER_get0_name(prov)))
++}
++
++func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_OSSL_PROVIDER_try_load(libctx, (*C.char)(unsafe.Pointer(name)), C.int(retain_fallbacks), mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("OSSL_PROVIDER_try_load", uintptr(_err))
++}
++
++func OpenSSL_version(__type int32) *byte {
++	return (*byte)(unsafe.Pointer(C._mkcgo_OpenSSL_version(C.int(__type))))
++}
 +
-+//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -package cryptokit --noerrors shims.h
-+//go:generate go run ../../cmd/mkcgo -out zcryptokit.go -nocgo -package cryptokit --noerrors shims.h
-+//go:generate go run ../../cmd/genswiftimports
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
-new file mode 100644
-index 00000000000000..e134697ed96de7
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/cryptokit_cgo.go
-@@ -0,0 +1,10 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func OpenSSL_version_num_Available() bool {
++	return C._mkcgo_available_OpenSSL_version_num() != 0
++}
 +
-+//go:build cgo && darwin
++func OpenSSL_version_num() uint64 {
++	return uint64(C._mkcgo_OpenSSL_version_num())
++}
 +
-+package cryptokit
++func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_PKCS5_PBKDF2_HMAC((*C.char)(unsafe.Pointer(unsafe.SliceData(pass))), C.int(len(pass)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(salt))), C.int(len(salt)), C.int(iter), digest, C.int(len(out)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(out))), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("PKCS5_PBKDF2_HMAC", uintptr(_err))
++}
 +
-+// #cgo CFLAGS: -Wno-deprecated-declarations
-+// #cgo LDFLAGS: -framework Security -framework CoreFoundation -Wl,-undefined,dynamic_lookup
-+import "C"
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
++func RAND_bytes(buf []byte) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RAND_bytes((*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.int(len(buf)), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RAND_bytes", uintptr(_err))
++}
++
++func RAND_bytes_ex(ctx OSSL_LIB_CTX_PTR, buf []byte, strength uint32) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RAND_bytes_ex(ctx, (*C.uchar)(unsafe.Pointer(unsafe.SliceData(buf))), C.size_t(len(buf)), C.uint(strength), mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RAND_bytes_ex", uintptr(_err))
++}
++
++func RSA_free(arg0 RSA_PTR) {
++	C._mkcgo_RSA_free(arg0)
++}
++
++func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_crt_params(r, dmp1, dmq1, iqmp)
++}
++
++func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_factors(rsa, p, q)
++}
++
++func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
++	C._mkcgo_RSA_get0_key(rsa, n, e, d)
++}
++
++func RSA_new() (RSA_PTR, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RSA_new(mkcgoNoEscape(&_err))
++	return _ret, newMkcgoErr("RSA_new", uintptr(_err))
++}
++
++func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RSA_set0_crt_params(rsa, dmp1, dmp2, iqmp, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_crt_params", uintptr(_err))
++}
++
++func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RSA_set0_factors(rsa, p, q, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_factors", uintptr(_err))
++}
++
++func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
++	var _err C.uintptr_t
++	_ret := C._mkcgo_RSA_set0_key(r, n, e, d, mkcgoNoEscape(&_err))
++	return int32(_ret), newMkcgoErr("RSA_set0_key", uintptr(_err))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_nocgo.go
 new file mode 100644
-index 00000000000000..dc98c702b3d50f
+index 00000000000000..4323bdad14f62f
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/shims.h
-@@ -0,0 +1,127 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/internal/ossl/zossl_nocgo.go
+@@ -0,0 +1,2481 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+// This header declares the C API for the CryptoKit Swift bindings.
-+//
-+// It serves two purposes:
-+// 1. The mkcgo tool parses it to generate cgo and Go bindings.
-+//    Run "go generate ." to regenerate them.
-+// 2. Swift's @implementation @c validates that Swift function signatures
-+//    match these declarations at compile time (via cryptokit.h wrapper).
-+//
-+// Type conventions:
-+//   - Return types and length parameters use `long` (not int64_t) because
-+//     Swift imports `long` as `Int` and `int64_t` as `Int64`. The Swift
-+//     implementations use `Int`, so the header must use `long` to match.
-+//     On macOS (LP64), both are 64-bit.
-+//   - Buffer size parameters use `size_t` where the mkcgo `slice()` attribute
-+//     pairs them with a pointer for Go slice generation.
-+//   - Pointer nullability is declared via `#pragma clang assume_nonnull`
-+//     (guarded by __clang__) so Swift sees non-optional pointer types.
-+//     mkcgo parses this file as text and ignores the pragma.
-+//   - Custom __attribute__ annotations (noescape, nocallback, static, slice)
-+//     are mkcgo extensions. The cryptokit.h wrapper strips them for clang.
-+//
-+// Do not include this file directly; import "zcryptokit.h" instead.
++// Code generated by mkcgo. DO NOT EDIT.
 +
-+// mkcgo:static_imports
++//go:build !cgo
 +
-+#ifndef _GO_CRYPTOKIT_SHIMS_H // only include this header once
-+#define _GO_CRYPTOKIT_SHIMS_H
++package ossl
 +
-+#include <stddef.h>
-+#include <stdint.h>
++import (
++	"runtime"
++	"unsafe"
++)
 +
-+// When compiled by clang (e.g. via Swift bridging header), assume all
-+// pointers are nonnull. mkcgo parses this file as text, not via clang,
-+// so the #ifdef ensures mkcgo never sees these pragmas.
-+#ifdef __clang__
-+#pragma clang assume_nonnull begin
-+#endif
++var _ = runtime.GOOS
 +
-+// AES GCM encryption and decryption
-+long go_encryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+long go_decryptAESGCM(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++var _mkcgoAlwaysFalseOssl bool
++var _mkcgoEscapeSinkOssl unsafe.Pointer
 +
-+// ChaChaPoly encryption and decryption
-+long go_encryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, uint8_t *cipherText, size_t cipherTextLength, uint8_t *tag) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(cipherText, cipherTextLength), slice(tag)));
-+long go_decryptChaChaPoly(const uint8_t *key, size_t keyLength, const uint8_t *data, size_t dataLength, const uint8_t *nonce, size_t nonceLength, const uint8_t *aad, size_t aadLength, const uint8_t *tag, size_t tagLength, uint8_t *out, size_t *outLength) __attribute__((noescape, nocallback, static, slice(key, keyLength), slice(data, dataLength), slice(nonce, nonceLength), slice(aad, aadLength), slice(tag, tagLength), slice(out)));
++// mkcgoEscapePtrOssl forces p to escape to the heap.
++// This implementation is also used in the standard library:
++// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
++func mkcgoEscapePtrOssl(p unsafe.Pointer) unsafe.Pointer {
++	if _mkcgoAlwaysFalseOssl {
++		_mkcgoEscapeSinkOssl = p
++	}
++	return p
++}
 +
-+// Generates an Ed25519 keypair.
-+// The private key is 64 bytes (first 32 bytes are the seed, next 32 bytes are the public key). The public key is 32 bytes.
-+void go_generateKeyEd25519(uint8_t *key) __attribute__((noescape, nocallback, static, slice(key)));
-+long go_newPrivateKeyEd25519FromSeed(uint8_t *key, const uint8_t *seed) __attribute__((noescape, nocallback, static, slice(key), slice(seed)));
-+long go_newPublicKeyEd25519(uint8_t *key, const uint8_t *pub) __attribute__((noescape, nocallback, static, slice(key), slice(pub)));
-+long go_signEd25519(const uint8_t *privateKey, const uint8_t *message, size_t messageLength, uint8_t *sigBuffer) __attribute__((noescape, nocallback, static, slice(privateKey), slice(message, messageLength), slice(sigBuffer)));
-+long go_verifyEd25519(const uint8_t *publicKey, const uint8_t *message, size_t messageLength, const uint8_t *sig) __attribute__((noescape, nocallback, static, slice(publicKey), slice(message, messageLength), slice(sig)));
++type OPENSSL_INIT_SETTINGS_PTR unsafe.Pointer
++type OSSL_LIB_CTX_PTR unsafe.Pointer
++type OSSL_PROVIDER_PTR unsafe.Pointer
++type ENGINE_PTR unsafe.Pointer
++type EVP_PKEY_PTR unsafe.Pointer
++type EVP_PKEY_CTX_PTR unsafe.Pointer
++type EVP_MD_PTR unsafe.Pointer
++type EVP_MD_CTX_PTR unsafe.Pointer
++type HMAC_CTX_PTR unsafe.Pointer
++type EVP_CIPHER_PTR unsafe.Pointer
++type EVP_CIPHER_CTX_PTR unsafe.Pointer
++type EC_KEY_PTR unsafe.Pointer
++type EC_POINT_PTR unsafe.Pointer
++type EC_GROUP_PTR unsafe.Pointer
++type RSA_PTR unsafe.Pointer
++type BIGNUM_PTR unsafe.Pointer
++type BN_CTX_PTR unsafe.Pointer
++type EVP_MAC_PTR unsafe.Pointer
++type EVP_MAC_CTX_PTR unsafe.Pointer
++type OSSL_PARAM_BLD_PTR unsafe.Pointer
++type OSSL_PARAM_PTR unsafe.Pointer
++type EVP_SIGNATURE_PTR unsafe.Pointer
++type EVP_KEYMGMT_PTR unsafe.Pointer
++type DSA_PTR unsafe.Pointer
++type EVP_KDF_PTR unsafe.Pointer
++type EVP_KDF_CTX_PTR unsafe.Pointer
++type BIO_METHOD_PTR unsafe.Pointer
++type BIO_PTR unsafe.Pointer
++type Point_conversion_form_t = int32
 +
-+// HKDF key derivation
-+long go_extractHKDF(int32_t hashFunction, const uint8_t *secret, size_t secretLength, const uint8_t *salt, size_t saltLength, uint8_t *prk, size_t prkLength) __attribute__((noescape, nocallback, static, slice(secret, secretLength), slice(salt, saltLength), slice(prk, prkLength)));
-+long go_expandHKDF(int32_t hashFunction, const uint8_t *prk, size_t prkLength, const uint8_t *info, size_t infoLength, uint8_t *okm, size_t okmLength) __attribute__((noescape, nocallback, static, slice(prk, prkLength), slice(info, infoLength), slice(okm, okmLength)));
++var _mkcgo_BIO_ctrl uintptr
 +
-+void *go_initHMAC(int32_t hashFunction, const uint8_t *key, long keyLength) __attribute__((noescape, nocallback, static, slice(key, keyLength)));
-+void go_freeHMAC(int32_t hashFunction, void *ptr) __attribute__((noescape, nocallback, static));
-+void go_updateHMAC(int32_t hashFunction, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
-+void go_finalizeHMAC(int32_t hashFunction, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
-+void *go_copyHMAC(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++func BIO_ctrl(bp BIO_PTR, cmd int32, larg int64, parg unsafe.Pointer) int64 {
++	r0, _ := syscallN(0, _mkcgo_BIO_ctrl, uintptr(bp), uintptr(cmd), uintptr(larg), uintptr(parg))
++	return int64(r0)
++}
 +
-+void go_MD5(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA1(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+long go_supportsSHA3() __attribute__((noescape, nocallback, static));
-+void go_SHA3_256(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA3_384(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
-+void go_SHA3_512(const uint8_t *inputPointer, size_t inputLength, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(inputPointer, inputLength), slice(outputPointer)));
++var _mkcgo_BIO_free uintptr
 +
-+void *go_hashNew(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
-+void go_hashWrite(int32_t hashAlgorithm, void *ptr, const uint8_t *data, long length) __attribute__((noescape, nocallback, static, slice(data, length)));
-+void go_hashSum(int32_t hashAlgorithm, void *ptr, uint8_t *outputPointer) __attribute__((noescape, nocallback, static, slice(outputPointer)));
-+void go_hashReset(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
-+long go_hashSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
-+long go_hashBlockSize(int32_t hashAlgorithm) __attribute__((noescape, nocallback, static));
-+void *go_hashCopy(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
-+void go_hashFree(int32_t hashAlgorithm, void *ptr) __attribute__((noescape, nocallback, static));
++func BIO_free(a BIO_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_BIO_free, uintptr(a))
++	return int32(r0)
++}
 +
-+// ML-KEM (Post-quantum key encapsulation mechanism)
-+long go_supportsMLKEM() __attribute__((noescape, nocallback, static));
-+long go_generateKeyMLKEM768(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+long go_generateKeyMLKEM1024(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+long go_deriveEncapsulationKeyMLKEM768(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+long go_deriveEncapsulationKeyMLKEM1024(const uint8_t *seed, long seedLen, uint8_t *encapKey, long encapKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(encapKey, encapKeyLen)));
-+long go_encapsulateMLKEM768(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+long go_encapsulateMLKEM1024(const uint8_t *encapKey, long encapKeyLen, uint8_t *sharedKey, long sharedKeyLen, uint8_t *ciphertext, long ciphertextLen) __attribute__((noescape, nocallback, static, slice(encapKey, encapKeyLen), slice(sharedKey, sharedKeyLen), slice(ciphertext, ciphertextLen)));
-+long go_decapsulateMLKEM768(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
-+long go_decapsulateMLKEM1024(const uint8_t *seed, long seedLen, const uint8_t *ciphertext, long ciphertextLen, uint8_t *sharedKey, long sharedKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(ciphertext, ciphertextLen), slice(sharedKey, sharedKeyLen)));
++var _mkcgo_BIO_new uintptr
 +
-+// ML-DSA (Post-quantum digital signature algorithm)
-+long go_supportsMLDSA() __attribute__((noescape, nocallback, static));
-+long go_generateKeyMLDSA65(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+long go_generateKeyMLDSA87(uint8_t *seed, long seedLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen)));
-+long go_derivePublicKeyMLDSA65(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
-+long go_derivePublicKeyMLDSA87(const uint8_t *seed, long seedLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(publicKey, publicKeyLen)));
-+long go_signMLDSA65(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
-+long go_signMLDSA87(const uint8_t *seed, long seedLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(seed, seedLen), slice(message, messageLen), slice(context, contextLen), slice(signature)));
-+long go_verifyMLDSA65(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
-+long go_verifyMLDSA87(const uint8_t *publicKey, long publicKeyLen, const uint8_t *message, long messageLen, const uint8_t *context, long contextLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen), slice(message, messageLen), slice(context, contextLen), slice(signature, signatureLen)));
-+long go_validatePublicKeyMLDSA65(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
-+long go_validatePublicKeyMLDSA87(const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++func BIO_new(__type BIO_METHOD_PTR) (BIO_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_BIO_new, uintptr(__type), uintptr(unsafe.Pointer(&_err)))
++	return BIO_PTR(r0), newMkcgoErr("BIO_new", _err)
++}
 +
-+// ECDH
-+long go_generateKeyECDH(int32_t curveID, uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
-+long go_publicKeyFromPrivateECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen)));
-+long go_ecdhSharedSecret(int32_t curveID, const uint8_t *privateKey, long privateKeyLen, const uint8_t *publicKey, long publicKeyLen, uint8_t *sharedSecret, long sharedSecretLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen), slice(publicKey, publicKeyLen), slice(sharedSecret, sharedSecretLen)));
-+long go_validatePrivateKeyECDH(int32_t curveID, const uint8_t *privateKey, long privateKeyLen) __attribute__((noescape, nocallback, static, slice(privateKey, privateKeyLen)));
-+long go_validatePublicKeyECDH(int32_t curveID, const uint8_t *publicKey, long publicKeyLen) __attribute__((noescape, nocallback, static, slice(publicKey, publicKeyLen)));
++var _mkcgo_BIO_s_mem uintptr
 +
-+// ECDSA
-+long go_generateKeyECDSA(int32_t curveID, uint8_t *x, long xLen, uint8_t *y, long yLen, uint8_t *d, long dLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(d, dLen)));
-+long go_ecdsaSign(int32_t curveID, const uint8_t *d, long dLen, const uint8_t *message, long messageLen, uint8_t *signature, long *signatureLen) __attribute__((noescape, nocallback, static, slice(d, dLen), slice(message, messageLen), slice(signature)));
-+long go_ecdsaVerify(int32_t curveID, const uint8_t *x, long xLen, const uint8_t *y, long yLen, const uint8_t *message, long messageLen, const uint8_t *signature, long signatureLen) __attribute__((noescape, nocallback, static, slice(x, xLen), slice(y, yLen), slice(message, messageLen), slice(signature, signatureLen)));
++func BIO_s_mem() BIO_METHOD_PTR {
++	r0, _ := syscallN(0, _mkcgo_BIO_s_mem)
++	return BIO_METHOD_PTR(r0)
++}
 +
-+#ifdef __clang__
-+#pragma clang assume_nonnull end
-+#endif
++var _mkcgo_BN_bin2bn uintptr
 +
-+#endif // _GO_CRYPTOKIT_SHIMS_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
-new file mode 100644
-index 00000000000000..c83bb8660303f6
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/syscall_nocgo.go
-@@ -0,0 +1,15 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func BN_bin2bn(arg0 []byte, arg2 BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_BN_bin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg0)))), uintptr(len(arg0)), uintptr(arg2), uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_bin2bn", _err)
++}
 +
-+//go:build !cgo
++var _mkcgo_BN_bn2binpad uintptr
 +
-+package cryptokit
++func BN_bn2binpad(a BIGNUM_PTR, to []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(2, _mkcgo_BN_bn2binpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("BN_bn2binpad", _err)
++}
 +
-+import (
-+	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
-+)
++var _mkcgo_BN_bn2lebinpad uintptr
 +
-+//go:nosplit
-+func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return xsyscall.SyscallN(errType, fn, args...)
++func BN_bn2lebinpad(a BIGNUM_PTR, to []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(2, _mkcgo_BN_bn2lebinpad, uintptr(a), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(to)))), uintptr(len(to)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("BN_bn2lebinpad", _err)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
-new file mode 100644
-index 00000000000000..e96680e304c47d
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/xcodebuild_version.txt
-@@ -0,0 +1,2 @@
-+Xcode 26.4.1
-+Build version 17E202
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-new file mode 100644
-index 00000000000000..d0d2a5bbd3475d
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.c
-@@ -0,0 +1,317 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++var _mkcgo_BN_clear uintptr
 +
-+#include <stddef.h>
-+#include <stdlib.h>
-+#include <stdint.h>
-+#include <stdio.h>
-+#include "zcryptokit.h"
++func BN_clear(arg0 BIGNUM_PTR) {
++	syscallN(0, _mkcgo_BN_clear, uintptr(arg0))
++}
 +
-+void go_MD5(const uint8_t*, size_t, uint8_t*);
-+void go_SHA1(const uint8_t*, size_t, uint8_t*);
-+void go_SHA256(const uint8_t*, size_t, uint8_t*);
-+void go_SHA384(const uint8_t*, size_t, uint8_t*);
-+void go_SHA3_256(const uint8_t*, size_t, uint8_t*);
-+void go_SHA3_384(const uint8_t*, size_t, uint8_t*);
-+void go_SHA3_512(const uint8_t*, size_t, uint8_t*);
-+void go_SHA512(const uint8_t*, size_t, uint8_t*);
-+void* go_copyHMAC(int32_t, void*);
-+long go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+long go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+long go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
-+long go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
-+long go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
-+long go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
-+long go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
-+long go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+long go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+long go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+long go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+long go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+long go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+void go_finalizeHMAC(int32_t, void*, uint8_t*);
-+void go_freeHMAC(int32_t, void*);
-+long go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
-+long go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+void go_generateKeyEd25519(uint8_t*);
-+long go_generateKeyMLDSA65(uint8_t*, long);
-+long go_generateKeyMLDSA87(uint8_t*, long);
-+long go_generateKeyMLKEM1024(uint8_t*, long);
-+long go_generateKeyMLKEM768(uint8_t*, long);
-+long go_hashBlockSize(int32_t);
-+void* go_hashCopy(int32_t, void*);
-+void go_hashFree(int32_t, void*);
-+void* go_hashNew(int32_t);
-+void go_hashReset(int32_t, void*);
-+long go_hashSize(int32_t);
-+void go_hashSum(int32_t, void*, uint8_t*);
-+void go_hashWrite(int32_t, void*, const uint8_t*, long);
-+void* go_initHMAC(int32_t, const uint8_t*, long);
-+long go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+long go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+long go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
-+long go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+long go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long go_supportsMLDSA(void);
-+long go_supportsMLKEM(void);
-+long go_supportsSHA3(void);
-+void go_updateHMAC(int32_t, void*, const uint8_t*, long);
-+long go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
-+long go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
-+long go_validatePublicKeyMLDSA65(const uint8_t*, long);
-+long go_validatePublicKeyMLDSA87(const uint8_t*, long);
-+long go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
-+long go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
-+long go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++var _mkcgo_BN_clear_free uintptr
++
++func BN_clear_free(arg0 BIGNUM_PTR) {
++	syscallN(0, _mkcgo_BN_clear_free, uintptr(arg0))
++}
++
++var _mkcgo_BN_free uintptr
++
++func BN_free(arg0 BIGNUM_PTR) {
++	syscallN(0, _mkcgo_BN_free, uintptr(arg0))
++}
++
++var _mkcgo_BN_lebin2bn uintptr
++
++func BN_lebin2bn(s []byte, ret BIGNUM_PTR) (BIGNUM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_BN_lebin2bn, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(s)))), uintptr(len(s)), uintptr(ret), uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_lebin2bn", _err)
++}
++
++var _mkcgo_BN_new uintptr
++
++func BN_new() (BIGNUM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_BN_new, uintptr(unsafe.Pointer(&_err)))
++	return BIGNUM_PTR(r0), newMkcgoErr("BN_new", _err)
++}
++
++var _mkcgo_BN_num_bits uintptr
++
++func BN_num_bits(arg0 BIGNUM_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_BN_num_bits, uintptr(arg0))
++	return int32(r0)
++}
++
++var _mkcgo_CRYPTO_free uintptr
++
++func CRYPTO_free(str unsafe.Pointer, file *byte, line int32) {
++	syscallN(0, _mkcgo_CRYPTO_free, uintptr(str), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line))
++}
++
++var _mkcgo_CRYPTO_malloc uintptr
++
++func CRYPTO_malloc(num int, file *byte, line int32) (unsafe.Pointer, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_CRYPTO_malloc, uintptr(num), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(file))), uintptr(line), uintptr(unsafe.Pointer(&_err)))
++	return unsafe.Pointer(r0), newMkcgoErr("CRYPTO_malloc", _err)
++}
++
++var _mkcgo_DSA_free uintptr
++
++func DSA_free(r DSA_PTR) {
++	syscallN(0, _mkcgo_DSA_free, uintptr(r))
++}
++
++var _mkcgo_DSA_generate_key uintptr
++
++func DSA_generate_key(a DSA_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_DSA_generate_key, uintptr(a), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_generate_key", _err)
++}
++
++var _mkcgo_DSA_get0_key uintptr
++
++func DSA_get0_key(d DSA_PTR, pub_key *BIGNUM_PTR, priv_key *BIGNUM_PTR) {
++	syscallN(0, _mkcgo_DSA_get0_key, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pub_key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(priv_key))))
++}
++
++var _mkcgo_DSA_get0_pqg uintptr
++
++func DSA_get0_pqg(d DSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR, g *BIGNUM_PTR) {
++	syscallN(0, _mkcgo_DSA_get0_pqg, uintptr(d), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(g))))
++}
++
++var _mkcgo_DSA_new uintptr
++
++func DSA_new() (DSA_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_DSA_new, uintptr(unsafe.Pointer(&_err)))
++	return DSA_PTR(r0), newMkcgoErr("DSA_new", _err)
++}
++
++var _mkcgo_DSA_set0_key uintptr
++
++func DSA_set0_key(d DSA_PTR, pub_key BIGNUM_PTR, priv_key BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_DSA_set0_key, uintptr(d), uintptr(pub_key), uintptr(priv_key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_set0_key", _err)
++}
++
++var _mkcgo_DSA_set0_pqg uintptr
++
++func DSA_set0_pqg(d DSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR, g BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_DSA_set0_pqg, uintptr(d), uintptr(p), uintptr(q), uintptr(g), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("DSA_set0_pqg", _err)
++}
++
++var _mkcgo_EC_GROUP_free uintptr
++
++func EC_GROUP_free(group EC_GROUP_PTR) {
++	syscallN(0, _mkcgo_EC_GROUP_free, uintptr(group))
++}
++
++var _mkcgo_EC_GROUP_new_by_curve_name uintptr
++
++func EC_GROUP_new_by_curve_name(nid int32) (EC_GROUP_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EC_GROUP_new_by_curve_name, uintptr(nid), uintptr(unsafe.Pointer(&_err)))
++	return EC_GROUP_PTR(r0), newMkcgoErr("EC_GROUP_new_by_curve_name", _err)
++}
++
++var _mkcgo_EC_KEY_check_key uintptr
++
++func EC_KEY_check_key(key EC_KEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_check_key, uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_check_key", _err)
++}
++
++var _mkcgo_EC_KEY_free uintptr
++
++func EC_KEY_free(arg0 EC_KEY_PTR) {
++	syscallN(0, _mkcgo_EC_KEY_free, uintptr(arg0))
++}
++
++var _mkcgo_EC_KEY_get0_group uintptr
++
++func EC_KEY_get0_group(arg0 EC_KEY_PTR) EC_GROUP_PTR {
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_group, uintptr(arg0))
++	return EC_GROUP_PTR(r0)
++}
 +
-+void _mkcgo_go_MD5(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_MD5(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_get0_private_key uintptr
++
++func EC_KEY_get0_private_key(arg0 EC_KEY_PTR) BIGNUM_PTR {
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_private_key, uintptr(arg0))
++	return BIGNUM_PTR(r0)
 +}
 +
-+void _mkcgo_go_SHA1(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA1(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_get0_public_key uintptr
++
++func EC_KEY_get0_public_key(arg0 EC_KEY_PTR) EC_POINT_PTR {
++	r0, _ := syscallN(0, _mkcgo_EC_KEY_get0_public_key, uintptr(arg0))
++	return EC_POINT_PTR(r0)
 +}
 +
-+void _mkcgo_go_SHA256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA256(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_new_by_curve_name uintptr
++
++func EC_KEY_new_by_curve_name(arg0 int32) (EC_KEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EC_KEY_new_by_curve_name, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EC_KEY_PTR(r0), newMkcgoErr("EC_KEY_new_by_curve_name", _err)
 +}
 +
-+void _mkcgo_go_SHA384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA384(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_set_private_key uintptr
++
++func EC_KEY_set_private_key(arg0 EC_KEY_PTR, arg1 BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_private_key, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_private_key", _err)
 +}
 +
-+void _mkcgo_go_SHA3_256(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA3_256(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_set_public_key uintptr
++
++func EC_KEY_set_public_key(key EC_KEY_PTR, pub EC_POINT_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key, uintptr(key), uintptr(pub), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key", _err)
 +}
 +
-+void _mkcgo_go_SHA3_384(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA3_384(_arg0, _arg1, _arg2);
++var _mkcgo_EC_KEY_set_public_key_affine_coordinates uintptr
++
++func EC_KEY_set_public_key_affine_coordinates(key EC_KEY_PTR, x BIGNUM_PTR, y BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_KEY_set_public_key_affine_coordinates, uintptr(key), uintptr(x), uintptr(y), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_KEY_set_public_key_affine_coordinates", _err)
 +}
 +
-+void _mkcgo_go_SHA3_512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA3_512(_arg0, _arg1, _arg2);
++var _mkcgo_EC_POINT_free uintptr
++
++func EC_POINT_free(arg0 EC_POINT_PTR) {
++	syscallN(0, _mkcgo_EC_POINT_free, uintptr(arg0))
 +}
 +
-+void _mkcgo_go_SHA512(const uint8_t* _arg0, size_t _arg1, uint8_t* _arg2) {
-+	go_SHA512(_arg0, _arg1, _arg2);
++var _mkcgo_EC_POINT_get_affine_coordinates_GFp uintptr
++
++func EC_POINT_get_affine_coordinates_GFp(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_get_affine_coordinates_GFp, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_get_affine_coordinates_GFp", _err)
 +}
 +
-+void* _mkcgo_go_copyHMAC(int32_t _arg0, void* _arg1) {
-+	return go_copyHMAC(_arg0, _arg1);
++var _mkcgo_EC_POINT_mul uintptr
++
++func EC_POINT_mul(group EC_GROUP_PTR, r EC_POINT_PTR, n BIGNUM_PTR, q EC_POINT_PTR, m BIGNUM_PTR, ctx BN_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_mul, uintptr(group), uintptr(r), uintptr(n), uintptr(q), uintptr(m), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_mul", _err)
 +}
 +
-+long _mkcgo_go_decapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
-+	return go_decapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++var _mkcgo_EC_POINT_new uintptr
++
++func EC_POINT_new(arg0 EC_GROUP_PTR) (EC_POINT_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EC_POINT_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EC_POINT_PTR(r0), newMkcgoErr("EC_POINT_new", _err)
 +}
 +
-+long _mkcgo_go_decapsulateMLKEM768(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
-+	return go_decapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++var _mkcgo_EC_POINT_oct2point uintptr
++
++func EC_POINT_oct2point(group EC_GROUP_PTR, p EC_POINT_PTR, buf []byte, ctx BN_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_oct2point, uintptr(group), uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_oct2point", _err)
 +}
 +
-+long _mkcgo_go_decryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
-+	return go_decryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++var _mkcgo_EC_POINT_point2oct uintptr
++
++func EC_POINT_point2oct(group EC_GROUP_PTR, p EC_POINT_PTR, form Point_conversion_form_t, buf []byte, ctx BN_CTX_PTR) (int, error) {
++	var _err uintptr
++	r0, _ := syscallN(4, _mkcgo_EC_POINT_point2oct, uintptr(group), uintptr(p), uintptr(form), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EC_POINT_point2oct", _err)
 +}
 +
-+long _mkcgo_go_decryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, const uint8_t* _arg8, size_t _arg9, uint8_t* _arg10, size_t* _arg11) {
-+	return go_decryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10, _arg11);
++var _mkcgo_EC_POINT_set_affine_coordinates uintptr
++
++func EC_POINT_set_affine_coordinates(arg0 EC_GROUP_PTR, arg1 EC_POINT_PTR, arg2 BIGNUM_PTR, arg3 BIGNUM_PTR, arg4 BN_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EC_POINT_set_affine_coordinates, uintptr(arg0), uintptr(arg1), uintptr(arg2), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EC_POINT_set_affine_coordinates", _err)
 +}
 +
-+long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
-+	return go_deriveEncapsulationKeyMLKEM1024(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_ERR_peek_error uintptr
++
++func ERR_peek_error() uint64 {
++	r0, _ := syscallN(0, _mkcgo_ERR_peek_error)
++	return uint64(r0)
 +}
 +
-+long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
-+	return go_deriveEncapsulationKeyMLKEM768(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_ERR_print_errors uintptr
++
++func ERR_print_errors(bp BIO_PTR) {
++	syscallN(0, _mkcgo_ERR_print_errors, uintptr(bp))
 +}
 +
-+long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
-+	return go_derivePublicKeyMLDSA65(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_CIPHER_CTX_ctrl uintptr
++
++func EVP_CIPHER_CTX_ctrl(ctx EVP_CIPHER_CTX_PTR, __type int32, arg int32, ptr unsafe.Pointer) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_ctrl, uintptr(ctx), uintptr(__type), uintptr(arg), uintptr(ptr), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_ctrl", _err)
 +}
 +
-+long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3) {
-+	return go_derivePublicKeyMLDSA87(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_CIPHER_CTX_free uintptr
++
++func EVP_CIPHER_CTX_free(arg0 EVP_CIPHER_CTX_PTR) {
++	syscallN(0, _mkcgo_EVP_CIPHER_CTX_free, uintptr(arg0))
 +}
 +
-+long _mkcgo_go_ecdhSharedSecret(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
-+	return go_ecdhSharedSecret(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++var _mkcgo_EVP_CIPHER_CTX_new uintptr
++
++func EVP_CIPHER_CTX_new() (EVP_CIPHER_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_CIPHER_CTX_PTR(r0), newMkcgoErr("EVP_CIPHER_CTX_new", _err)
 +}
 +
-+long _mkcgo_go_ecdsaSign(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, uint8_t* _arg5, long* _arg6) {
-+	return go_ecdsaSign(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++var _mkcgo_EVP_CIPHER_CTX_set_key_length uintptr
++
++func EVP_CIPHER_CTX_set_key_length(x EVP_CIPHER_CTX_PTR, keylen int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_key_length, uintptr(x), uintptr(keylen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_key_length", _err)
 +}
 +
-+long _mkcgo_go_ecdsaVerify(int32_t _arg0, const uint8_t* _arg1, long _arg2, const uint8_t* _arg3, long _arg4, const uint8_t* _arg5, long _arg6, const uint8_t* _arg7, long _arg8) {
-+	return go_ecdsaVerify(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8);
++var _mkcgo_EVP_CIPHER_CTX_set_padding uintptr
++
++func EVP_CIPHER_CTX_set_padding(x EVP_CIPHER_CTX_PTR, padding int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_CIPHER_CTX_set_padding, uintptr(x), uintptr(padding), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CIPHER_CTX_set_padding", _err)
 +}
 +
-+long _mkcgo_go_encapsulateMLKEM1024(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
-+	return go_encapsulateMLKEM1024(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++var _mkcgo_EVP_CIPHER_fetch uintptr
++
++func EVP_CIPHER_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_CIPHER_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_CIPHER_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_CIPHER_PTR(r0), newMkcgoErr("EVP_CIPHER_fetch", _err)
 +}
 +
-+long _mkcgo_go_encapsulateMLKEM768(const uint8_t* _arg0, long _arg1, uint8_t* _arg2, long _arg3, uint8_t* _arg4, long _arg5) {
-+	return go_encapsulateMLKEM768(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++var _mkcgo_EVP_CIPHER_get0_name uintptr
++
++func EVP_CIPHER_get0_name(cipher EVP_CIPHER_PTR) *byte {
++	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get0_name, uintptr(cipher))
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+long _mkcgo_go_encryptAESGCM(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
-+	return go_encryptAESGCM(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++var _mkcgo_EVP_CIPHER_get_block_size uintptr
++
++func EVP_CIPHER_get_block_size(cipher EVP_CIPHER_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_EVP_CIPHER_get_block_size, uintptr(cipher))
++	return int32(r0)
 +}
 +
-+long _mkcgo_go_encryptChaChaPoly(const uint8_t* _arg0, size_t _arg1, const uint8_t* _arg2, size_t _arg3, const uint8_t* _arg4, size_t _arg5, const uint8_t* _arg6, size_t _arg7, uint8_t* _arg8, size_t _arg9, uint8_t* _arg10) {
-+	return go_encryptChaChaPoly(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7, _arg8, _arg9, _arg10);
++var _mkcgo_EVP_CipherInit_ex uintptr
++
++func EVP_CipherInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte, enc int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(enc), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CipherInit_ex", _err)
 +}
 +
-+long _mkcgo_go_expandHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
-+	return go_expandHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++var _mkcgo_EVP_CipherUpdate uintptr
++
++func EVP_CipherUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_CipherUpdate: *outl exceeds len(out)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_CipherUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_CipherUpdate", _err)
 +}
 +
-+long _mkcgo_go_extractHKDF(int32_t _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3, size_t _arg4, uint8_t* _arg5, size_t _arg6) {
-+	return go_extractHKDF(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++var _mkcgo_EVP_DecryptFinal_ex uintptr
++
++func EVP_DecryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, outm []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(outm) {
++		panic("EVP_DecryptFinal_ex: *outl exceeds len(outm)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(outm))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptFinal_ex", _err)
 +}
 +
-+void _mkcgo_go_finalizeHMAC(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
-+	go_finalizeHMAC(_arg0, _arg1, _arg2);
++var _mkcgo_EVP_DecryptInit_ex uintptr
++
++func EVP_DecryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptInit_ex", _err)
 +}
 +
-+void _mkcgo_go_freeHMAC(int32_t _arg0, void* _arg1) {
-+	go_freeHMAC(_arg0, _arg1);
++var _mkcgo_EVP_DecryptUpdate uintptr
++
++func EVP_DecryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_DecryptUpdate: *outl exceeds len(out)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DecryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DecryptUpdate", _err)
 +}
 +
-+long _mkcgo_go_generateKeyECDH(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
-+	return go_generateKeyECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++var _mkcgo_EVP_Digest uintptr
++
++func EVP_Digest(data []byte, md []byte, size *uint32, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	if size != nil && int(*size) > len(md) {
++		panic("EVP_Digest: *size exceeds len(md)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_Digest, uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(size)), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_Digest", _err)
 +}
 +
-+long _mkcgo_go_generateKeyECDSA(int32_t _arg0, uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4, uint8_t* _arg5, long _arg6) {
-+	return go_generateKeyECDSA(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6);
++var _mkcgo_EVP_DigestFinalXOF uintptr
++
++func EVP_DigestFinalXOF(ctx EVP_MD_CTX_PTR, md []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinalXOF, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(len(md)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestFinalXOF", _err)
 +}
 +
-+void _mkcgo_go_generateKeyEd25519(uint8_t* _arg0) {
-+	go_generateKeyEd25519(_arg0);
++var _mkcgo_EVP_DigestFinal_ex uintptr
++
++func EVP_DigestFinal_ex(ctx EVP_MD_CTX_PTR, md []byte, s *uint32) (int32, error) {
++	if s != nil && int(*s) > len(md) {
++		panic("EVP_DigestFinal_ex: *s exceeds len(md)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(md))), uintptr(unsafe.Pointer(s)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestFinal_ex", _err)
 +}
 +
-+long _mkcgo_go_generateKeyMLDSA65(uint8_t* _arg0, long _arg1) {
-+	return go_generateKeyMLDSA65(_arg0, _arg1);
++var _mkcgo_EVP_DigestInit uintptr
++
++func EVP_DigestInit(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit, uintptr(ctx), uintptr(__type), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestInit", _err)
 +}
 +
-+long _mkcgo_go_generateKeyMLDSA87(uint8_t* _arg0, long _arg1) {
-+	return go_generateKeyMLDSA87(_arg0, _arg1);
++var _mkcgo_EVP_DigestInit_ex uintptr
++
++func EVP_DigestInit_ex(ctx EVP_MD_CTX_PTR, __type EVP_MD_PTR, impl ENGINE_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestInit_ex", _err)
 +}
 +
-+long _mkcgo_go_generateKeyMLKEM1024(uint8_t* _arg0, long _arg1) {
-+	return go_generateKeyMLKEM1024(_arg0, _arg1);
++var _mkcgo_EVP_DigestSign uintptr
++
++func EVP_DigestSign(ctx EVP_MD_CTX_PTR, sigret []byte, siglen *int, tbs []byte) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sigret) {
++		panic("EVP_DigestSign: *siglen exceeds len(sigret)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSign, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(sigret))), uintptr(unsafe.Pointer(siglen)), uintptr(unsafe.Pointer(unsafe.SliceData(tbs))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSign", _err)
 +}
 +
-+long _mkcgo_go_generateKeyMLKEM768(uint8_t* _arg0, long _arg1) {
-+	return go_generateKeyMLKEM768(_arg0, _arg1);
++var _mkcgo_EVP_DigestSignFinal uintptr
++
++func EVP_DigestSignFinal(ctx EVP_MD_CTX_PTR, sig []byte, siglen *int) (int32, error) {
++	if siglen != nil && int(*siglen) > len(sig) {
++		panic("EVP_DigestSignFinal: *siglen exceeds len(sig)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(siglen))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSignFinal", _err)
 +}
 +
-+long _mkcgo_go_hashBlockSize(int32_t _arg0) {
-+	return go_hashBlockSize(_arg0);
++var _mkcgo_EVP_DigestSignInit uintptr
++
++func EVP_DigestSignInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSignInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSignInit", _err)
 +}
 +
-+void* _mkcgo_go_hashCopy(int32_t _arg0, void* _arg1) {
-+	return go_hashCopy(_arg0, _arg1);
++func EVP_DigestSqueeze_Available() bool {
++	return _mkcgo_EVP_DigestSqueeze != 0
 +}
 +
-+void _mkcgo_go_hashFree(int32_t _arg0, void* _arg1) {
-+	go_hashFree(_arg0, _arg1);
++var _mkcgo_EVP_DigestSqueeze uintptr
++
++func EVP_DigestSqueeze(ctx EVP_MD_CTX_PTR, out []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestSqueeze, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestSqueeze", _err)
 +}
 +
-+void* _mkcgo_go_hashNew(int32_t _arg0) {
-+	return go_hashNew(_arg0);
++var _mkcgo_EVP_DigestUpdate uintptr
++
++func EVP_DigestUpdate(ctx EVP_MD_CTX_PTR, d []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestUpdate", _err)
 +}
 +
-+void _mkcgo_go_hashReset(int32_t _arg0, void* _arg1) {
-+	go_hashReset(_arg0, _arg1);
++var _mkcgo_EVP_DigestVerify uintptr
++
++func EVP_DigestVerify(ctx EVP_MD_CTX_PTR, sigret []byte, tbs []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sigret)))), uintptr(len(sigret)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerify", _err)
 +}
 +
-+long _mkcgo_go_hashSize(int32_t _arg0) {
-+	return go_hashSize(_arg0);
++var _mkcgo_EVP_DigestVerifyFinal uintptr
++
++func EVP_DigestVerifyFinal(ctx EVP_MD_CTX_PTR, sig []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyFinal, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyFinal", _err)
 +}
 +
-+void _mkcgo_go_hashSum(int32_t _arg0, void* _arg1, uint8_t* _arg2) {
-+	go_hashSum(_arg0, _arg1, _arg2);
++var _mkcgo_EVP_DigestVerifyInit uintptr
++
++func EVP_DigestVerifyInit(ctx EVP_MD_CTX_PTR, pctx *EVP_PKEY_CTX_PTR, __type EVP_MD_PTR, e ENGINE_PTR, pkey EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_DigestVerifyInit, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pctx))), uintptr(__type), uintptr(e), uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_DigestVerifyInit", _err)
 +}
 +
-+void _mkcgo_go_hashWrite(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
-+	go_hashWrite(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_EncryptFinal_ex uintptr
++
++func EVP_EncryptFinal_ex(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptFinal_ex: *outl exceeds len(out)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptFinal_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptFinal_ex", _err)
 +}
 +
-+void* _mkcgo_go_initHMAC(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
-+	return go_initHMAC(_arg0, _arg1, _arg2);
++var _mkcgo_EVP_EncryptInit_ex uintptr
++
++func EVP_EncryptInit_ex(ctx EVP_CIPHER_CTX_PTR, __type EVP_CIPHER_PTR, impl ENGINE_PTR, key *byte, iv *byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptInit_ex, uintptr(ctx), uintptr(__type), uintptr(impl), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iv))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptInit_ex", _err)
 +}
 +
-+long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t* _arg0, const uint8_t* _arg1) {
-+	return go_newPrivateKeyEd25519FromSeed(_arg0, _arg1);
++var _mkcgo_EVP_EncryptUpdate uintptr
++
++func EVP_EncryptUpdate(ctx EVP_CIPHER_CTX_PTR, out []byte, outl *int32, in []byte) (int32, error) {
++	if outl != nil && int(*outl) > len(out) {
++		panic("EVP_EncryptUpdate: *outl exceeds len(out)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_EncryptUpdate, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(unsafe.Pointer(unsafe.SliceData(in))), uintptr(len(in)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_EncryptUpdate", _err)
 +}
 +
-+long _mkcgo_go_newPublicKeyEd25519(uint8_t* _arg0, const uint8_t* _arg1) {
-+	return go_newPublicKeyEd25519(_arg0, _arg1);
++var _mkcgo_EVP_KDF_CTX_free uintptr
++
++func EVP_KDF_CTX_free(ctx EVP_KDF_CTX_PTR) {
++	syscallN(0, _mkcgo_EVP_KDF_CTX_free, uintptr(ctx))
 +}
 +
-+long _mkcgo_go_publicKeyFromPrivateECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2, uint8_t* _arg3, long _arg4) {
-+	return go_publicKeyFromPrivateECDH(_arg0, _arg1, _arg2, _arg3, _arg4);
++var _mkcgo_EVP_KDF_CTX_get_kdf_size uintptr
++
++func EVP_KDF_CTX_get_kdf_size(ctx EVP_KDF_CTX_PTR) (int, error) {
++	var _err uintptr
++	r0, _ := syscallN(4, _mkcgo_EVP_KDF_CTX_get_kdf_size, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EVP_KDF_CTX_get_kdf_size", _err)
 +}
 +
-+long _mkcgo_go_signEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, uint8_t* _arg3) {
-+	return go_signEd25519(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_KDF_CTX_new uintptr
++
++func EVP_KDF_CTX_new(kdf EVP_KDF_PTR) (EVP_KDF_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_KDF_CTX_new, uintptr(kdf), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KDF_CTX_PTR(r0), newMkcgoErr("EVP_KDF_CTX_new", _err)
 +}
 +
-+long _mkcgo_go_signMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
-+	return go_signMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++var _mkcgo_EVP_KDF_CTX_set_params uintptr
++
++func EVP_KDF_CTX_set_params(ctx EVP_KDF_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_KDF_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_KDF_CTX_set_params", _err)
 +}
 +
-+long _mkcgo_go_signMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, uint8_t* _arg6, long* _arg7) {
-+	return go_signMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++var _mkcgo_EVP_KDF_derive uintptr
++
++func EVP_KDF_derive(ctx EVP_KDF_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_KDF_derive, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_KDF_derive", _err)
 +}
 +
-+long _mkcgo_go_supportsMLDSA(void) {
-+	return go_supportsMLDSA();
++var _mkcgo_EVP_KDF_fetch uintptr
++
++func EVP_KDF_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KDF_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_KDF_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KDF_PTR(r0), newMkcgoErr("EVP_KDF_fetch", _err)
 +}
 +
-+long _mkcgo_go_supportsMLKEM(void) {
-+	return go_supportsMLKEM();
++var _mkcgo_EVP_KDF_free uintptr
++
++func EVP_KDF_free(kdf EVP_KDF_PTR) {
++	syscallN(0, _mkcgo_EVP_KDF_free, uintptr(kdf))
 +}
 +
-+long _mkcgo_go_supportsSHA3(void) {
-+	return go_supportsSHA3();
++func EVP_KEYMGMT_fetch_Available() bool {
++	return _mkcgo_EVP_KEYMGMT_fetch != 0
 +}
 +
-+void _mkcgo_go_updateHMAC(int32_t _arg0, void* _arg1, const uint8_t* _arg2, long _arg3) {
-+	go_updateHMAC(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_KEYMGMT_fetch uintptr
++
++func EVP_KEYMGMT_fetch(libctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_KEYMGMT_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_KEYMGMT_fetch, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_KEYMGMT_PTR(r0), newMkcgoErr("EVP_KEYMGMT_fetch", _err)
 +}
 +
-+long _mkcgo_go_validatePrivateKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
-+	return go_validatePrivateKeyECDH(_arg0, _arg1, _arg2);
++var _mkcgo_EVP_KEYMGMT_free uintptr
++
++func EVP_KEYMGMT_free(keymgmt EVP_KEYMGMT_PTR) {
++	syscallN(0, _mkcgo_EVP_KEYMGMT_free, uintptr(keymgmt))
 +}
 +
-+long _mkcgo_go_validatePublicKeyECDH(int32_t _arg0, const uint8_t* _arg1, long _arg2) {
-+	return go_validatePublicKeyECDH(_arg0, _arg1, _arg2);
++var _mkcgo_EVP_MAC_CTX_dup uintptr
++
++func EVP_MAC_CTX_dup(arg0 EVP_MAC_CTX_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_dup, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_dup", _err)
 +}
 +
-+long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t* _arg0, long _arg1) {
-+	return go_validatePublicKeyMLDSA65(_arg0, _arg1);
++var _mkcgo_EVP_MAC_CTX_free uintptr
++
++func EVP_MAC_CTX_free(arg0 EVP_MAC_CTX_PTR) {
++	syscallN(0, _mkcgo_EVP_MAC_CTX_free, uintptr(arg0))
 +}
 +
-+long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t* _arg0, long _arg1) {
-+	return go_validatePublicKeyMLDSA87(_arg0, _arg1);
++var _mkcgo_EVP_MAC_CTX_new uintptr
++
++func EVP_MAC_CTX_new(arg0 EVP_MAC_PTR) (EVP_MAC_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_CTX_new, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_CTX_PTR(r0), newMkcgoErr("EVP_MAC_CTX_new", _err)
 +}
 +
-+long _mkcgo_go_verifyEd25519(const uint8_t* _arg0, const uint8_t* _arg1, size_t _arg2, const uint8_t* _arg3) {
-+	return go_verifyEd25519(_arg0, _arg1, _arg2, _arg3);
++var _mkcgo_EVP_MAC_CTX_set_params uintptr
++
++func EVP_MAC_CTX_set_params(ctx EVP_MAC_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_CTX_set_params", _err)
 +}
 +
-+long _mkcgo_go_verifyMLDSA65(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
-+	return go_verifyMLDSA65(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++var _mkcgo_EVP_MAC_fetch uintptr
++
++func EVP_MAC_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MAC_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MAC_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MAC_PTR(r0), newMkcgoErr("EVP_MAC_fetch", _err)
 +}
 +
-+long _mkcgo_go_verifyMLDSA87(const uint8_t* _arg0, long _arg1, const uint8_t* _arg2, long _arg3, const uint8_t* _arg4, long _arg5, const uint8_t* _arg6, long _arg7) {
-+	return go_verifyMLDSA87(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5, _arg6, _arg7);
++var _mkcgo_EVP_MAC_final uintptr
++
++func EVP_MAC_final(ctx EVP_MAC_CTX_PTR, out []byte, outl *int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_final, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outl)), uintptr(len(out)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_final", _err)
 +}
 +
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-new file mode 100644
-index 00000000000000..f933f59c3013da
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.h
-@@ -0,0 +1,77 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var _mkcgo_EVP_MAC_init uintptr
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++func EVP_MAC_init(ctx EVP_MAC_CTX_PTR, key []byte, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_init, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_init", _err)
++}
++
++var _mkcgo_EVP_MAC_update uintptr
++
++func EVP_MAC_update(ctx EVP_MAC_CTX_PTR, data []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MAC_update, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MAC_update", _err)
++}
++
++var _mkcgo_EVP_MD_CTX_copy_ex uintptr
 +
-+#ifndef MKCGO_H // only include this header once
-+#define MKCGO_H
++func EVP_MD_CTX_copy_ex(out EVP_MD_CTX_PTR, in EVP_MD_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_copy_ex, uintptr(out), uintptr(in), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_copy_ex", _err)
++}
 +
-+#include <stddef.h>
-+#include <stdint.h>
++var _mkcgo_EVP_MD_CTX_ctrl uintptr
 +
++func EVP_MD_CTX_ctrl(ctx EVP_MD_CTX_PTR, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_ctrl, uintptr(ctx), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_ctrl", _err)
++}
 +
-+uintptr_t mkcgo_err_retrieve();
++var _mkcgo_EVP_MD_CTX_free uintptr
 +
-+void _mkcgo_go_MD5(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA1(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA256(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA384(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA3_256(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA3_384(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA3_512(const uint8_t*, size_t, uint8_t*);
-+void _mkcgo_go_SHA512(const uint8_t*, size_t, uint8_t*);
-+void* _mkcgo_go_copyHMAC(int32_t, void*);
-+long _mkcgo_go_decapsulateMLKEM1024(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_decapsulateMLKEM768(const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_decryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+long _mkcgo_go_decryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t*);
-+long _mkcgo_go_deriveEncapsulationKeyMLKEM1024(const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_deriveEncapsulationKeyMLKEM768(const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_derivePublicKeyMLDSA65(const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_derivePublicKeyMLDSA87(const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_ecdhSharedSecret(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_ecdsaSign(int32_t, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long _mkcgo_go_ecdsaVerify(int32_t, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
-+long _mkcgo_go_encapsulateMLKEM1024(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_encapsulateMLKEM768(const uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_encryptAESGCM(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+long _mkcgo_go_encryptChaChaPoly(const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t, uint8_t*);
-+long _mkcgo_go_expandHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+long _mkcgo_go_extractHKDF(int32_t, const uint8_t*, size_t, const uint8_t*, size_t, uint8_t*, size_t);
-+void _mkcgo_go_finalizeHMAC(int32_t, void*, uint8_t*);
-+void _mkcgo_go_freeHMAC(int32_t, void*);
-+long _mkcgo_go_generateKeyECDH(int32_t, uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_generateKeyECDSA(int32_t, uint8_t*, long, uint8_t*, long, uint8_t*, long);
-+void _mkcgo_go_generateKeyEd25519(uint8_t*);
-+long _mkcgo_go_generateKeyMLDSA65(uint8_t*, long);
-+long _mkcgo_go_generateKeyMLDSA87(uint8_t*, long);
-+long _mkcgo_go_generateKeyMLKEM1024(uint8_t*, long);
-+long _mkcgo_go_generateKeyMLKEM768(uint8_t*, long);
-+long _mkcgo_go_hashBlockSize(int32_t);
-+void* _mkcgo_go_hashCopy(int32_t, void*);
-+void _mkcgo_go_hashFree(int32_t, void*);
-+void* _mkcgo_go_hashNew(int32_t);
-+void _mkcgo_go_hashReset(int32_t, void*);
-+long _mkcgo_go_hashSize(int32_t);
-+void _mkcgo_go_hashSum(int32_t, void*, uint8_t*);
-+void _mkcgo_go_hashWrite(int32_t, void*, const uint8_t*, long);
-+void* _mkcgo_go_initHMAC(int32_t, const uint8_t*, long);
-+long _mkcgo_go_newPrivateKeyEd25519FromSeed(uint8_t*, const uint8_t*);
-+long _mkcgo_go_newPublicKeyEd25519(uint8_t*, const uint8_t*);
-+long _mkcgo_go_publicKeyFromPrivateECDH(int32_t, const uint8_t*, long, uint8_t*, long);
-+long _mkcgo_go_signEd25519(const uint8_t*, const uint8_t*, size_t, uint8_t*);
-+long _mkcgo_go_signMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long _mkcgo_go_signMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, uint8_t*, long*);
-+long _mkcgo_go_supportsMLDSA(void);
-+long _mkcgo_go_supportsMLKEM(void);
-+long _mkcgo_go_supportsSHA3(void);
-+void _mkcgo_go_updateHMAC(int32_t, void*, const uint8_t*, long);
-+long _mkcgo_go_validatePrivateKeyECDH(int32_t, const uint8_t*, long);
-+long _mkcgo_go_validatePublicKeyECDH(int32_t, const uint8_t*, long);
-+long _mkcgo_go_validatePublicKeyMLDSA65(const uint8_t*, long);
-+long _mkcgo_go_validatePublicKeyMLDSA87(const uint8_t*, long);
-+long _mkcgo_go_verifyEd25519(const uint8_t*, const uint8_t*, size_t, const uint8_t*);
-+long _mkcgo_go_verifyMLDSA65(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
-+long _mkcgo_go_verifyMLDSA87(const uint8_t*, long, const uint8_t*, long, const uint8_t*, long, const uint8_t*, long);
++func EVP_MD_CTX_free(ctx EVP_MD_CTX_PTR) {
++	syscallN(0, _mkcgo_EVP_MD_CTX_free, uintptr(ctx))
++}
 +
-+#endif // MKCGO_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-new file mode 100644
-index 00000000000000..5be36f4b35dedb
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit.s
-@@ -0,0 +1,400 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var _mkcgo_EVP_MD_CTX_get_params uintptr
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++func EVP_MD_CTX_get_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_get_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_get_params", _err)
++}
 +
-+//go:build !cgo
++var _mkcgo_EVP_MD_CTX_gettable_params uintptr
 +
-+#include "textflag.h"
++func EVP_MD_CTX_gettable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_gettable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_gettable_params", _err)
++}
 +
-+#ifndef GOARCH_amd64
-+#ifndef GOARCH_arm64
-+#ifndef GOARCH_riscv64
-+#ifndef GOARCH_loong64
-+#ifndef GOARCH_mips64
-+#ifndef GOARCH_mips64le
-+#ifndef GOARCH_ppc64
-+#ifndef GOARCH_ppc64le
-+#ifndef GOARCH_s390x
-+#ifndef GOARCH_sparc64
-+#define _GOPTRSIZE 4
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
++var _mkcgo_EVP_MD_CTX_new uintptr
 +
-+#ifndef _GOPTRSIZE
-+#define _GOPTRSIZE 8
-+#endif
-+TEXT _mkcgo_go_MD5_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_MD5(SB)
++func EVP_MD_CTX_new() (EVP_MD_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_MD_CTX_PTR(r0), newMkcgoErr("EVP_MD_CTX_new", _err)
++}
 +
-+GLOBL ·_mkcgo_go_MD5_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_MD5_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_MD5_trampoline<>(SB)
++var _mkcgo_EVP_MD_CTX_set_params uintptr
 +
-+TEXT _mkcgo_go_SHA1_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA1(SB)
++func EVP_MD_CTX_set_params(ctx EVP_MD_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_MD_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_MD_CTX_set_params", _err)
++}
 +
-+GLOBL ·_mkcgo_go_SHA1_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA1_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA1_trampoline<>(SB)
++var _mkcgo_EVP_MD_CTX_settable_params uintptr
 +
-+TEXT _mkcgo_go_SHA256_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA256(SB)
++func EVP_MD_CTX_settable_params(ctx EVP_MD_CTX_PTR) (OSSL_PARAM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_CTX_settable_params, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("EVP_MD_CTX_settable_params", _err)
++}
 +
-+GLOBL ·_mkcgo_go_SHA256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA256_trampoline<>(SB)
++var _mkcgo_EVP_MD_fetch uintptr
 +
-+TEXT _mkcgo_go_SHA384_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA384(SB)
++func EVP_MD_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_MD_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_MD_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_MD_PTR(r0), newMkcgoErr("EVP_MD_fetch", _err)
++}
 +
-+GLOBL ·_mkcgo_go_SHA384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA384_trampoline<>(SB)
++var _mkcgo_EVP_MD_free uintptr
 +
-+TEXT _mkcgo_go_SHA3_256_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA3_256(SB)
++func EVP_MD_free(md EVP_MD_PTR) {
++	syscallN(0, _mkcgo_EVP_MD_free, uintptr(md))
++}
 +
-+GLOBL ·_mkcgo_go_SHA3_256_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA3_256_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_256_trampoline<>(SB)
++var _mkcgo_EVP_MD_get0_name uintptr
 +
-+TEXT _mkcgo_go_SHA3_384_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA3_384(SB)
++func EVP_MD_get0_name(md EVP_MD_PTR) *byte {
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_name, uintptr(md))
++	return (*byte)(unsafe.Pointer(r0))
++}
 +
-+GLOBL ·_mkcgo_go_SHA3_384_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA3_384_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_384_trampoline<>(SB)
++var _mkcgo_EVP_MD_get0_provider uintptr
 +
-+TEXT _mkcgo_go_SHA3_512_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA3_512(SB)
++func EVP_MD_get0_provider(md EVP_MD_PTR) OSSL_PROVIDER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get0_provider, uintptr(md))
++	return OSSL_PROVIDER_PTR(r0)
++}
 +
-+GLOBL ·_mkcgo_go_SHA3_512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA3_512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA3_512_trampoline<>(SB)
++var _mkcgo_EVP_MD_get_block_size uintptr
 +
-+TEXT _mkcgo_go_SHA512_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_SHA512(SB)
++func EVP_MD_get_block_size(md EVP_MD_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_block_size, uintptr(md))
++	return int32(r0)
++}
 +
-+GLOBL ·_mkcgo_go_SHA512_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_SHA512_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_SHA512_trampoline<>(SB)
++var _mkcgo_EVP_MD_get_size uintptr
 +
-+TEXT _mkcgo_go_copyHMAC_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_copyHMAC(SB)
++func EVP_MD_get_size(md EVP_MD_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_size, uintptr(md))
++	return int32(r0)
++}
 +
-+GLOBL ·_mkcgo_go_copyHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_copyHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_copyHMAC_trampoline<>(SB)
++var _mkcgo_EVP_MD_get_type uintptr
 +
-+TEXT _mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_decapsulateMLKEM1024(SB)
++func EVP_MD_get_type(md EVP_MD_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_EVP_MD_get_type, uintptr(md))
++	return int32(r0)
++}
 +
-+GLOBL ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_decapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM1024_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_add1_hkdf_info uintptr
 +
-+TEXT _mkcgo_go_decapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_decapsulateMLKEM768(SB)
++func EVP_PKEY_CTX_add1_hkdf_info(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_add1_hkdf_info, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_add1_hkdf_info", _err)
++}
 +
-+GLOBL ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_decapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decapsulateMLKEM768_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_ctrl uintptr
 +
-+TEXT _mkcgo_go_decryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_decryptAESGCM(SB)
++func EVP_PKEY_CTX_ctrl(ctx EVP_PKEY_CTX_PTR, keytype int32, optype int32, cmd int32, p1 int32, p2 unsafe.Pointer) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_ctrl, uintptr(ctx), uintptr(keytype), uintptr(optype), uintptr(cmd), uintptr(p1), uintptr(p2), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_ctrl", _err)
++}
 +
-+GLOBL ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_decryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptAESGCM_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_free uintptr
 +
-+TEXT _mkcgo_go_decryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_decryptChaChaPoly(SB)
++func EVP_PKEY_CTX_free(arg0 EVP_PKEY_CTX_PTR) {
++	syscallN(0, _mkcgo_EVP_PKEY_CTX_free, uintptr(arg0))
++}
 +
-+GLOBL ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_decryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_decryptChaChaPoly_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_new uintptr
 +
-+TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM1024(SB)
++func EVP_PKEY_CTX_new(arg0 EVP_PKEY_PTR, arg1 ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new", _err)
++}
 +
-+GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM1024_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_new_from_pkey uintptr
 +
-+TEXT _mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_deriveEncapsulationKeyMLKEM768(SB)
++func EVP_PKEY_CTX_new_from_pkey(libctx OSSL_LIB_CTX_PTR, pkey EVP_PKEY_PTR, propquery *byte) (EVP_PKEY_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_from_pkey, uintptr(libctx), uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(propquery))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_from_pkey", _err)
++}
 +
-+GLOBL ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_deriveEncapsulationKeyMLKEM768_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_new_id uintptr
 +
-+TEXT _mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_derivePublicKeyMLDSA65(SB)
++func EVP_PKEY_CTX_new_id(id int32, e ENGINE_PTR) (EVP_PKEY_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_CTX_new_id, uintptr(id), uintptr(e), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_CTX_PTR(r0), newMkcgoErr("EVP_PKEY_CTX_new_id", _err)
++}
 +
-+GLOBL ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_derivePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA65_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label uintptr
 +
-+TEXT _mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_derivePublicKeyMLDSA87(SB)
++func EVP_PKEY_CTX_set0_rsa_oaep_label(ctx EVP_PKEY_CTX_PTR, label []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(label)))), uintptr(len(label)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set0_rsa_oaep_label", _err)
++}
 +
-+GLOBL ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_derivePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_derivePublicKeyMLDSA87_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set1_hkdf_key uintptr
 +
-+TEXT _mkcgo_go_ecdhSharedSecret_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_ecdhSharedSecret(SB)
++func EVP_PKEY_CTX_set1_hkdf_key(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_key, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_key", _err)
++}
 +
-+GLOBL ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_ecdhSharedSecret_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdhSharedSecret_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt uintptr
 +
-+TEXT _mkcgo_go_ecdsaSign_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_ecdsaSign(SB)
++func EVP_PKEY_CTX_set1_hkdf_salt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set1_hkdf_salt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set1_hkdf_salt", _err)
++}
 +
-+GLOBL ·_mkcgo_go_ecdsaSign_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_ecdsaSign_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaSign_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set_hkdf_md uintptr
 +
-+TEXT _mkcgo_go_ecdsaVerify_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_ecdsaVerify(SB)
++func EVP_PKEY_CTX_set_hkdf_md(arg0 EVP_PKEY_CTX_PTR, arg1 EVP_MD_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_md, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_md", _err)
++}
 +
-+GLOBL ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_ecdsaVerify_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_ecdsaVerify_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set_hkdf_mode uintptr
 +
-+TEXT _mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_encapsulateMLKEM1024(SB)
++func EVP_PKEY_CTX_set_hkdf_mode(arg0 EVP_PKEY_CTX_PTR, arg1 int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_hkdf_mode, uintptr(arg0), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_hkdf_mode", _err)
++}
 +
-+GLOBL ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_encapsulateMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM1024_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_CTX_set_params uintptr
 +
-+TEXT _mkcgo_go_encapsulateMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_encapsulateMLKEM768(SB)
++func EVP_PKEY_CTX_set_params(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_CTX_set_params, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_CTX_set_params", _err)
++}
 +
-+GLOBL ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_encapsulateMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encapsulateMLKEM768_trampoline<>(SB)
++var _mkcgo_EVP_PKEY_Q_keygen uintptr
 +
-+TEXT _mkcgo_go_encryptAESGCM_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_encryptAESGCM(SB)
++func EVP_PKEY_Q_keygen_EC(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
++	} else {
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(arg1)), uintptr(unsafe.Pointer(&_err)))
++	}
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_EC", _err)
++}
 +
-+GLOBL ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_encryptAESGCM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptAESGCM_trampoline<>(SB)
++func EVP_PKEY_Q_keygen_ED25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_ED25519", _err)
++}
 +
-+TEXT _mkcgo_go_encryptChaChaPoly_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_encryptChaChaPoly(SB)
++func EVP_PKEY_Q_keygen_MLDSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLDSA", _err)
++}
 +
-+GLOBL ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_encryptChaChaPoly_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_encryptChaChaPoly_trampoline<>(SB)
++func EVP_PKEY_Q_keygen_MLKEM(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_MLKEM", _err)
++}
 +
-+TEXT _mkcgo_go_expandHKDF_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_expandHKDF(SB)
++func EVP_PKEY_Q_keygen_RSA(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte, arg1 int) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	var r0 uintptr
++	if runtime.GOOS == "darwin" && runtime.GOARCH == "arm64" {
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), 0, 0, 0, 0, 0, uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	} else {
++		r0, _ = syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(arg1), uintptr(unsafe.Pointer(&_err)))
++	}
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_RSA", _err)
++}
 +
-+GLOBL ·_mkcgo_go_expandHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_expandHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_expandHKDF_trampoline<>(SB)
++func EVP_PKEY_Q_keygen_X25519(ctx OSSL_LIB_CTX_PTR, propq *byte, __type *byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_Q_keygen, uintptr(ctx), uintptr(unsafe.Pointer(propq)), uintptr(unsafe.Pointer(__type)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_Q_keygen_X25519", _err)
++}
 +
-+TEXT _mkcgo_go_extractHKDF_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_extractHKDF(SB)
++var _mkcgo_EVP_PKEY_assign uintptr
 +
-+GLOBL ·_mkcgo_go_extractHKDF_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_extractHKDF_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_extractHKDF_trampoline<>(SB)
++func EVP_PKEY_assign(pkey EVP_PKEY_PTR, __type int32, key unsafe.Pointer) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_assign, uintptr(pkey), uintptr(__type), uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_assign", _err)
++}
 +
-+TEXT _mkcgo_go_finalizeHMAC_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_finalizeHMAC(SB)
++var _mkcgo_EVP_PKEY_decapsulate uintptr
 +
-+GLOBL ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_finalizeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_finalizeHMAC_trampoline<>(SB)
++func EVP_PKEY_decapsulate(ctx EVP_PKEY_CTX_PTR, genkey *byte, genkeylen *int, wrappedkey *byte, wrappedkeylen int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(wrappedkeylen), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate", _err)
++}
 +
-+TEXT _mkcgo_go_freeHMAC_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_freeHMAC(SB)
++var _mkcgo_EVP_PKEY_decapsulate_init uintptr
 +
-+GLOBL ·_mkcgo_go_freeHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_freeHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_freeHMAC_trampoline<>(SB)
++func EVP_PKEY_decapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decapsulate_init", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyECDH(SB)
++var _mkcgo_EVP_PKEY_decrypt uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDH_trampoline<>(SB)
++func EVP_PKEY_decrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_decrypt: *arg2 exceeds len(arg1)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyECDSA_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyECDSA(SB)
++var _mkcgo_EVP_PKEY_decrypt_init uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyECDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyECDSA_trampoline<>(SB)
++func EVP_PKEY_decrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_decrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_decrypt_init", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyEd25519(SB)
++var _mkcgo_EVP_PKEY_derive uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyEd25519_trampoline<>(SB)
++func EVP_PKEY_derive(ctx EVP_PKEY_CTX_PTR, key []byte, keylen *int) (int32, error) {
++	if keylen != nil && int(*keylen) > len(key) {
++		panic("EVP_PKEY_derive: *keylen exceeds len(key)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(keylen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyMLDSA65(SB)
++var _mkcgo_EVP_PKEY_derive_init uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA65_trampoline<>(SB)
++func EVP_PKEY_derive_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_init", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyMLDSA87(SB)
++var _mkcgo_EVP_PKEY_derive_set_peer uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLDSA87_trampoline<>(SB)
++func EVP_PKEY_derive_set_peer(ctx EVP_PKEY_CTX_PTR, peer EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_derive_set_peer, uintptr(ctx), uintptr(peer), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_derive_set_peer", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyMLKEM1024(SB)
++var _mkcgo_EVP_PKEY_encapsulate uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyMLKEM1024_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM1024_trampoline<>(SB)
++func EVP_PKEY_encapsulate(ctx EVP_PKEY_CTX_PTR, wrappedkey *byte, wrappedkeylen *int, genkey *byte, genkeylen *int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(wrappedkeylen))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkey))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(genkeylen))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate", _err)
++}
 +
-+TEXT _mkcgo_go_generateKeyMLKEM768_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_generateKeyMLKEM768(SB)
++var _mkcgo_EVP_PKEY_encapsulate_init uintptr
 +
-+GLOBL ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_generateKeyMLKEM768_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_generateKeyMLKEM768_trampoline<>(SB)
++func EVP_PKEY_encapsulate_init(ctx EVP_PKEY_CTX_PTR, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encapsulate_init, uintptr(ctx), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encapsulate_init", _err)
++}
 +
-+TEXT _mkcgo_go_hashBlockSize_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashBlockSize(SB)
++var _mkcgo_EVP_PKEY_encrypt uintptr
 +
-+GLOBL ·_mkcgo_go_hashBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashBlockSize_trampoline<>(SB)
++func EVP_PKEY_encrypt(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_encrypt: *arg2 exceeds len(arg1)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt", _err)
++}
 +
-+TEXT _mkcgo_go_hashCopy_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashCopy(SB)
++var _mkcgo_EVP_PKEY_encrypt_init uintptr
 +
-+GLOBL ·_mkcgo_go_hashCopy_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashCopy_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashCopy_trampoline<>(SB)
++func EVP_PKEY_encrypt_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_encrypt_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_encrypt_init", _err)
++}
 +
-+TEXT _mkcgo_go_hashFree_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashFree(SB)
++var _mkcgo_EVP_PKEY_free uintptr
 +
-+GLOBL ·_mkcgo_go_hashFree_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashFree_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashFree_trampoline<>(SB)
++func EVP_PKEY_free(arg0 EVP_PKEY_PTR) {
++	syscallN(0, _mkcgo_EVP_PKEY_free, uintptr(arg0))
++}
 +
-+TEXT _mkcgo_go_hashNew_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashNew(SB)
++var _mkcgo_EVP_PKEY_fromdata uintptr
 +
-+GLOBL ·_mkcgo_go_hashNew_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashNew_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashNew_trampoline<>(SB)
++func EVP_PKEY_fromdata(ctx EVP_PKEY_CTX_PTR, pkey *EVP_PKEY_PTR, selection int32, params OSSL_PARAM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(pkey))), uintptr(selection), uintptr(params), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata", _err)
++}
 +
-+TEXT _mkcgo_go_hashReset_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashReset(SB)
++var _mkcgo_EVP_PKEY_fromdata_init uintptr
 +
-+GLOBL ·_mkcgo_go_hashReset_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashReset_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashReset_trampoline<>(SB)
++func EVP_PKEY_fromdata_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_fromdata_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_fromdata_init", _err)
++}
 +
-+TEXT _mkcgo_go_hashSize_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashSize(SB)
++var _mkcgo_EVP_PKEY_get0_DSA uintptr
 +
-+GLOBL ·_mkcgo_go_hashSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSize_trampoline<>(SB)
++func EVP_PKEY_get0_DSA(pkey EVP_PKEY_PTR) (DSA_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_DSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return DSA_PTR(r0), newMkcgoErr("EVP_PKEY_get0_DSA", _err)
++}
 +
-+TEXT _mkcgo_go_hashSum_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashSum(SB)
++var _mkcgo_EVP_PKEY_get0_EC_KEY uintptr
 +
-+GLOBL ·_mkcgo_go_hashSum_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashSum_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashSum_trampoline<>(SB)
++func EVP_PKEY_get0_EC_KEY(pkey EVP_PKEY_PTR) (EC_KEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get0_EC_KEY, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return EC_KEY_PTR(r0), newMkcgoErr("EVP_PKEY_get0_EC_KEY", _err)
++}
 +
-+TEXT _mkcgo_go_hashWrite_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_hashWrite(SB)
++var _mkcgo_EVP_PKEY_get1_RSA uintptr
 +
-+GLOBL ·_mkcgo_go_hashWrite_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_hashWrite_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_hashWrite_trampoline<>(SB)
++func EVP_PKEY_get1_RSA(pkey EVP_PKEY_PTR) (RSA_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_get1_RSA, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return RSA_PTR(r0), newMkcgoErr("EVP_PKEY_get1_RSA", _err)
++}
 +
-+TEXT _mkcgo_go_initHMAC_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_initHMAC(SB)
++var _mkcgo_EVP_PKEY_get1_encoded_public_key uintptr
 +
-+GLOBL ·_mkcgo_go_initHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_initHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_initHMAC_trampoline<>(SB)
++func EVP_PKEY_get1_encoded_public_key(pkey EVP_PKEY_PTR, ppub **byte) (int, error) {
++	var _err uintptr
++	r0, _ := syscallN(4, _mkcgo_EVP_PKEY_get1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppub))), uintptr(unsafe.Pointer(&_err)))
++	return int(r0), newMkcgoErr("EVP_PKEY_get1_encoded_public_key", _err)
++}
 +
-+TEXT _mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_newPrivateKeyEd25519FromSeed(SB)
++var _mkcgo_EVP_PKEY_get_bits uintptr
 +
-+GLOBL ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPrivateKeyEd25519FromSeed_trampoline<>(SB)
++func EVP_PKEY_get_bits(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bits, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bits", _err)
++}
 +
-+TEXT _mkcgo_go_newPublicKeyEd25519_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_newPublicKeyEd25519(SB)
++var _mkcgo_EVP_PKEY_get_bn_param uintptr
 +
-+GLOBL ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_newPublicKeyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_newPublicKeyEd25519_trampoline<>(SB)
++func EVP_PKEY_get_bn_param(pkey EVP_PKEY_PTR, key_name *byte, bn *BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_bn_param, uintptr(pkey), uintptr(unsafe.Pointer(key_name)), uintptr(unsafe.Pointer(bn)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_bn_param", _err)
++}
 +
-+TEXT _mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_publicKeyFromPrivateECDH(SB)
++var _mkcgo_EVP_PKEY_get_octet_string_param uintptr
 +
-+GLOBL ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_publicKeyFromPrivateECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_publicKeyFromPrivateECDH_trampoline<>(SB)
++func EVP_PKEY_get_octet_string_param(pkey EVP_PKEY_PTR, key_name *byte, buf []byte, out_len *int) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_octet_string_param, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key_name))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(out_len))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_octet_string_param", _err)
++}
 +
-+TEXT _mkcgo_go_signEd25519_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_signEd25519(SB)
++var _mkcgo_EVP_PKEY_get_raw_private_key uintptr
 +
-+GLOBL ·_mkcgo_go_signEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_signEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signEd25519_trampoline<>(SB)
++func EVP_PKEY_get_raw_private_key(pkey EVP_PKEY_PTR, priv []byte, privlen *int) (int32, error) {
++	if privlen != nil && int(*privlen) > len(priv) {
++		panic("EVP_PKEY_get_raw_private_key: *privlen exceeds len(priv)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_private_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(priv))), uintptr(unsafe.Pointer(privlen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_private_key", _err)
++}
 +
-+TEXT _mkcgo_go_signMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_signMLDSA65(SB)
++var _mkcgo_EVP_PKEY_get_raw_public_key uintptr
 +
-+GLOBL ·_mkcgo_go_signMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_signMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA65_trampoline<>(SB)
++func EVP_PKEY_get_raw_public_key(pkey EVP_PKEY_PTR, pub []byte, publen *int) (int32, error) {
++	if publen != nil && int(*publen) > len(pub) {
++		panic("EVP_PKEY_get_raw_public_key: *publen exceeds len(pub)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_raw_public_key, uintptr(pkey), uintptr(unsafe.Pointer(unsafe.SliceData(pub))), uintptr(unsafe.Pointer(publen)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_raw_public_key", _err)
++}
 +
-+TEXT _mkcgo_go_signMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_signMLDSA87(SB)
++var _mkcgo_EVP_PKEY_get_size uintptr
 +
-+GLOBL ·_mkcgo_go_signMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_signMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_signMLDSA87_trampoline<>(SB)
++func EVP_PKEY_get_size(pkey EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_get_size, uintptr(pkey), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_get_size", _err)
++}
 +
-+TEXT _mkcgo_go_supportsMLDSA_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_supportsMLDSA(SB)
++var _mkcgo_EVP_PKEY_keygen uintptr
 +
-+GLOBL ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_supportsMLDSA_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLDSA_trampoline<>(SB)
++func EVP_PKEY_keygen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen, uintptr(ctx), uintptr(unsafe.Pointer(ppkey)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen", _err)
++}
 +
-+TEXT _mkcgo_go_supportsMLKEM_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_supportsMLKEM(SB)
++var _mkcgo_EVP_PKEY_keygen_init uintptr
 +
-+GLOBL ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_supportsMLKEM_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsMLKEM_trampoline<>(SB)
++func EVP_PKEY_keygen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_keygen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_keygen_init", _err)
++}
 +
-+TEXT _mkcgo_go_supportsSHA3_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_supportsSHA3(SB)
++var _mkcgo_EVP_PKEY_new uintptr
 +
-+GLOBL ·_mkcgo_go_supportsSHA3_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_supportsSHA3_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_supportsSHA3_trampoline<>(SB)
++func EVP_PKEY_new() (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new, uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new", _err)
++}
 +
-+TEXT _mkcgo_go_updateHMAC_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_updateHMAC(SB)
++var _mkcgo_EVP_PKEY_new_raw_private_key uintptr
 +
-+GLOBL ·_mkcgo_go_updateHMAC_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_updateHMAC_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_updateHMAC_trampoline<>(SB)
++func EVP_PKEY_new_raw_private_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_private_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_private_key", _err)
++}
 +
-+TEXT _mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_validatePrivateKeyECDH(SB)
++var _mkcgo_EVP_PKEY_new_raw_public_key uintptr
 +
-+GLOBL ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_validatePrivateKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePrivateKeyECDH_trampoline<>(SB)
++func EVP_PKEY_new_raw_public_key(__type int32, e ENGINE_PTR, key []byte) (EVP_PKEY_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_PKEY_new_raw_public_key, uintptr(__type), uintptr(e), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(key)))), uintptr(len(key)), uintptr(unsafe.Pointer(&_err)))
++	return EVP_PKEY_PTR(r0), newMkcgoErr("EVP_PKEY_new_raw_public_key", _err)
++}
 +
-+TEXT _mkcgo_go_validatePublicKeyECDH_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_validatePublicKeyECDH(SB)
++var _mkcgo_EVP_PKEY_paramgen uintptr
 +
-+GLOBL ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_validatePublicKeyECDH_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyECDH_trampoline<>(SB)
++func EVP_PKEY_paramgen(ctx EVP_PKEY_CTX_PTR, ppkey *EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(ppkey))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen", _err)
++}
 +
-+TEXT _mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_validatePublicKeyMLDSA65(SB)
++var _mkcgo_EVP_PKEY_paramgen_init uintptr
 +
-+GLOBL ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_validatePublicKeyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA65_trampoline<>(SB)
++func EVP_PKEY_paramgen_init(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_paramgen_init, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_paramgen_init", _err)
++}
 +
-+TEXT _mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_validatePublicKeyMLDSA87(SB)
++var _mkcgo_EVP_PKEY_private_check uintptr
 +
-+GLOBL ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_validatePublicKeyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_validatePublicKeyMLDSA87_trampoline<>(SB)
++func EVP_PKEY_private_check(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_private_check, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_private_check", _err)
++}
 +
-+TEXT _mkcgo_go_verifyEd25519_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_verifyEd25519(SB)
++var _mkcgo_EVP_PKEY_public_check_quick uintptr
 +
-+GLOBL ·_mkcgo_go_verifyEd25519_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_verifyEd25519_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyEd25519_trampoline<>(SB)
++func EVP_PKEY_public_check_quick(ctx EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_public_check_quick, uintptr(ctx), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_public_check_quick", _err)
++}
 +
-+TEXT _mkcgo_go_verifyMLDSA65_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_verifyMLDSA65(SB)
++var _mkcgo_EVP_PKEY_set1_EC_KEY uintptr
 +
-+GLOBL ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_verifyMLDSA65_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA65_trampoline<>(SB)
++func EVP_PKEY_set1_EC_KEY(pkey EVP_PKEY_PTR, key EC_KEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_EC_KEY, uintptr(pkey), uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_EC_KEY", _err)
++}
 +
-+TEXT _mkcgo_go_verifyMLDSA87_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_go_verifyMLDSA87(SB)
++var _mkcgo_EVP_PKEY_set1_encoded_public_key uintptr
 +
-+GLOBL ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_go_verifyMLDSA87_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_go_verifyMLDSA87_trampoline<>(SB)
++func EVP_PKEY_set1_encoded_public_key(pkey EVP_PKEY_PTR, pub []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_set1_encoded_public_key, uintptr(pkey), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pub)))), uintptr(len(pub)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_set1_encoded_public_key", _err)
++}
 +
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-new file mode 100644
-index 00000000000000..c05dd1acf80954
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_cgo.go
-@@ -0,0 +1,386 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var _mkcgo_EVP_PKEY_sign uintptr
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++func EVP_PKEY_sign(arg0 EVP_PKEY_CTX_PTR, arg1 []byte, arg2 *int, arg3 []byte) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("EVP_PKEY_sign: *arg2 exceeds len(arg1)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign, uintptr(arg0), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg1)))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(arg2))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(arg3)))), uintptr(len(arg3)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign", _err)
++}
 +
-+package cryptokit
++var _mkcgo_EVP_PKEY_sign_init uintptr
 +
-+/*
-+#cgo CFLAGS: -Wno-attributes
++func EVP_PKEY_sign_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_sign_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_sign_init", _err)
++}
 +
-+#include "zcryptokit.h"
-+#cgo noescape _mkcgo_go_MD5
-+#cgo nocallback _mkcgo_go_MD5
-+#cgo noescape _mkcgo_go_SHA1
-+#cgo nocallback _mkcgo_go_SHA1
-+#cgo noescape _mkcgo_go_SHA256
-+#cgo nocallback _mkcgo_go_SHA256
-+#cgo noescape _mkcgo_go_SHA384
-+#cgo nocallback _mkcgo_go_SHA384
-+#cgo noescape _mkcgo_go_SHA3_256
-+#cgo nocallback _mkcgo_go_SHA3_256
-+#cgo noescape _mkcgo_go_SHA3_384
-+#cgo nocallback _mkcgo_go_SHA3_384
-+#cgo noescape _mkcgo_go_SHA3_512
-+#cgo nocallback _mkcgo_go_SHA3_512
-+#cgo noescape _mkcgo_go_SHA512
-+#cgo nocallback _mkcgo_go_SHA512
-+#cgo noescape _mkcgo_go_copyHMAC
-+#cgo nocallback _mkcgo_go_copyHMAC
-+#cgo noescape _mkcgo_go_decapsulateMLKEM1024
-+#cgo nocallback _mkcgo_go_decapsulateMLKEM1024
-+#cgo noescape _mkcgo_go_decapsulateMLKEM768
-+#cgo nocallback _mkcgo_go_decapsulateMLKEM768
-+#cgo noescape _mkcgo_go_decryptAESGCM
-+#cgo nocallback _mkcgo_go_decryptAESGCM
-+#cgo noescape _mkcgo_go_decryptChaChaPoly
-+#cgo nocallback _mkcgo_go_decryptChaChaPoly
-+#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM1024
-+#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM1024
-+#cgo noescape _mkcgo_go_deriveEncapsulationKeyMLKEM768
-+#cgo nocallback _mkcgo_go_deriveEncapsulationKeyMLKEM768
-+#cgo noescape _mkcgo_go_derivePublicKeyMLDSA65
-+#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA65
-+#cgo noescape _mkcgo_go_derivePublicKeyMLDSA87
-+#cgo nocallback _mkcgo_go_derivePublicKeyMLDSA87
-+#cgo noescape _mkcgo_go_ecdhSharedSecret
-+#cgo nocallback _mkcgo_go_ecdhSharedSecret
-+#cgo noescape _mkcgo_go_ecdsaSign
-+#cgo nocallback _mkcgo_go_ecdsaSign
-+#cgo noescape _mkcgo_go_ecdsaVerify
-+#cgo nocallback _mkcgo_go_ecdsaVerify
-+#cgo noescape _mkcgo_go_encapsulateMLKEM1024
-+#cgo nocallback _mkcgo_go_encapsulateMLKEM1024
-+#cgo noescape _mkcgo_go_encapsulateMLKEM768
-+#cgo nocallback _mkcgo_go_encapsulateMLKEM768
-+#cgo noescape _mkcgo_go_encryptAESGCM
-+#cgo nocallback _mkcgo_go_encryptAESGCM
-+#cgo noescape _mkcgo_go_encryptChaChaPoly
-+#cgo nocallback _mkcgo_go_encryptChaChaPoly
-+#cgo noescape _mkcgo_go_expandHKDF
-+#cgo nocallback _mkcgo_go_expandHKDF
-+#cgo noescape _mkcgo_go_extractHKDF
-+#cgo nocallback _mkcgo_go_extractHKDF
-+#cgo noescape _mkcgo_go_finalizeHMAC
-+#cgo nocallback _mkcgo_go_finalizeHMAC
-+#cgo noescape _mkcgo_go_freeHMAC
-+#cgo nocallback _mkcgo_go_freeHMAC
-+#cgo noescape _mkcgo_go_generateKeyECDH
-+#cgo nocallback _mkcgo_go_generateKeyECDH
-+#cgo noescape _mkcgo_go_generateKeyECDSA
-+#cgo nocallback _mkcgo_go_generateKeyECDSA
-+#cgo noescape _mkcgo_go_generateKeyEd25519
-+#cgo nocallback _mkcgo_go_generateKeyEd25519
-+#cgo noescape _mkcgo_go_generateKeyMLDSA65
-+#cgo nocallback _mkcgo_go_generateKeyMLDSA65
-+#cgo noescape _mkcgo_go_generateKeyMLDSA87
-+#cgo nocallback _mkcgo_go_generateKeyMLDSA87
-+#cgo noescape _mkcgo_go_generateKeyMLKEM1024
-+#cgo nocallback _mkcgo_go_generateKeyMLKEM1024
-+#cgo noescape _mkcgo_go_generateKeyMLKEM768
-+#cgo nocallback _mkcgo_go_generateKeyMLKEM768
-+#cgo noescape _mkcgo_go_hashBlockSize
-+#cgo nocallback _mkcgo_go_hashBlockSize
-+#cgo noescape _mkcgo_go_hashCopy
-+#cgo nocallback _mkcgo_go_hashCopy
-+#cgo noescape _mkcgo_go_hashFree
-+#cgo nocallback _mkcgo_go_hashFree
-+#cgo noescape _mkcgo_go_hashNew
-+#cgo nocallback _mkcgo_go_hashNew
-+#cgo noescape _mkcgo_go_hashReset
-+#cgo nocallback _mkcgo_go_hashReset
-+#cgo noescape _mkcgo_go_hashSize
-+#cgo nocallback _mkcgo_go_hashSize
-+#cgo noescape _mkcgo_go_hashSum
-+#cgo nocallback _mkcgo_go_hashSum
-+#cgo noescape _mkcgo_go_hashWrite
-+#cgo nocallback _mkcgo_go_hashWrite
-+#cgo noescape _mkcgo_go_initHMAC
-+#cgo nocallback _mkcgo_go_initHMAC
-+#cgo noescape _mkcgo_go_newPrivateKeyEd25519FromSeed
-+#cgo nocallback _mkcgo_go_newPrivateKeyEd25519FromSeed
-+#cgo noescape _mkcgo_go_newPublicKeyEd25519
-+#cgo nocallback _mkcgo_go_newPublicKeyEd25519
-+#cgo noescape _mkcgo_go_publicKeyFromPrivateECDH
-+#cgo nocallback _mkcgo_go_publicKeyFromPrivateECDH
-+#cgo noescape _mkcgo_go_signEd25519
-+#cgo nocallback _mkcgo_go_signEd25519
-+#cgo noescape _mkcgo_go_signMLDSA65
-+#cgo nocallback _mkcgo_go_signMLDSA65
-+#cgo noescape _mkcgo_go_signMLDSA87
-+#cgo nocallback _mkcgo_go_signMLDSA87
-+#cgo noescape _mkcgo_go_supportsMLDSA
-+#cgo nocallback _mkcgo_go_supportsMLDSA
-+#cgo noescape _mkcgo_go_supportsMLKEM
-+#cgo nocallback _mkcgo_go_supportsMLKEM
-+#cgo noescape _mkcgo_go_supportsSHA3
-+#cgo nocallback _mkcgo_go_supportsSHA3
-+#cgo noescape _mkcgo_go_updateHMAC
-+#cgo nocallback _mkcgo_go_updateHMAC
-+#cgo noescape _mkcgo_go_validatePrivateKeyECDH
-+#cgo nocallback _mkcgo_go_validatePrivateKeyECDH
-+#cgo noescape _mkcgo_go_validatePublicKeyECDH
-+#cgo nocallback _mkcgo_go_validatePublicKeyECDH
-+#cgo noescape _mkcgo_go_validatePublicKeyMLDSA65
-+#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA65
-+#cgo noescape _mkcgo_go_validatePublicKeyMLDSA87
-+#cgo nocallback _mkcgo_go_validatePublicKeyMLDSA87
-+#cgo noescape _mkcgo_go_verifyEd25519
-+#cgo nocallback _mkcgo_go_verifyEd25519
-+#cgo noescape _mkcgo_go_verifyMLDSA65
-+#cgo nocallback _mkcgo_go_verifyMLDSA65
-+#cgo noescape _mkcgo_go_verifyMLDSA87
-+#cgo nocallback _mkcgo_go_verifyMLDSA87
-+*/
-+import "C"
-+import "unsafe"
++var _mkcgo_EVP_PKEY_up_ref uintptr
 +
-+//go:nosplit
-+func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
-+	x := uintptr(unsafe.Pointer(p))
-+	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++func EVP_PKEY_up_ref(key EVP_PKEY_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_up_ref, uintptr(key), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_up_ref", _err)
 +}
 +
-+func MD5(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_MD5((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_PKEY_verify uintptr
 +
-+func SHA1(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA1((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_PKEY_verify(ctx EVP_PKEY_CTX_PTR, sig []byte, tbs []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(sig)))), uintptr(len(sig)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(tbs)))), uintptr(len(tbs)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify", _err)
 +}
 +
-+func SHA256(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_PKEY_verify_init uintptr
 +
-+func SHA384(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_PKEY_verify_init(arg0 EVP_PKEY_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_PKEY_verify_init, uintptr(arg0), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_PKEY_verify_init", _err)
 +}
 +
-+func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA3_256((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_SIGNATURE_fetch uintptr
 +
-+func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA3_384((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_SIGNATURE_fetch(ctx OSSL_LIB_CTX_PTR, algorithm *byte, properties *byte) (EVP_SIGNATURE_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_EVP_SIGNATURE_fetch, uintptr(ctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(algorithm))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(properties))), uintptr(unsafe.Pointer(&_err)))
++	return EVP_SIGNATURE_PTR(r0), newMkcgoErr("EVP_SIGNATURE_fetch", _err)
 +}
 +
-+func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA3_512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_SIGNATURE_free uintptr
 +
-+func SHA512(inputPointer []uint8, outputPointer []uint8) {
-+	C._mkcgo_go_SHA512((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(inputPointer))), C.size_t(len(inputPointer)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_SIGNATURE_free(signature EVP_SIGNATURE_PTR) {
++	syscallN(0, _mkcgo_EVP_SIGNATURE_free, uintptr(signature))
 +}
 +
-+func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
-+	return C._mkcgo_go_copyHMAC(C.int32_t(hashAlgorithm), ptr)
-+}
++var _mkcgo_EVP_aes_128_cbc uintptr
 +
-+func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	return int64(C._mkcgo_go_decapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
++func EVP_aes_128_cbc() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	return int64(C._mkcgo_go_decapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey))))
-+}
++var _mkcgo_EVP_aes_128_ctr uintptr
 +
-+func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
-+	return int64(C._mkcgo_go_decryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
++func EVP_aes_128_ctr() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
-+	return int64(C._mkcgo_go_decryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag))), C.size_t(len(tag)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(out))), (*C.size_t)(unsafe.Pointer(outLength))))
-+}
++var _mkcgo_EVP_aes_128_ecb uintptr
 +
-+func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
-+	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
++func EVP_aes_128_ecb() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
-+	return int64(C._mkcgo_go_deriveEncapsulationKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey))))
-+}
++var _mkcgo_EVP_aes_128_gcm uintptr
 +
-+func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_derivePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++func EVP_aes_128_gcm() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_128_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_derivePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++var _mkcgo_EVP_aes_192_cbc uintptr
++
++func EVP_aes_192_cbc() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
-+	return int64(C._mkcgo_go_ecdhSharedSecret(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedSecret))), C.long(len(sharedSecret))))
++var _mkcgo_EVP_aes_192_ctr uintptr
++
++func EVP_aes_192_ctr() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
-+	return int64(C._mkcgo_go_ecdsaSign(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++var _mkcgo_EVP_aes_192_ecb uintptr
++
++func EVP_aes_192_ecb() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
-+	return int64(C._mkcgo_go_ecdsaVerify(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
-+}
++var _mkcgo_EVP_aes_192_gcm uintptr
 +
-+func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	return int64(C._mkcgo_go_encapsulateMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
++func EVP_aes_192_gcm() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_192_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	return int64(C._mkcgo_go_encapsulateMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(encapKey))), C.long(len(encapKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sharedKey))), C.long(len(sharedKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(ciphertext))), C.long(len(ciphertext))))
-+}
++var _mkcgo_EVP_aes_256_cbc uintptr
 +
-+func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
-+	return int64(C._mkcgo_go_encryptAESGCM((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
++func EVP_aes_256_cbc() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
-+	return int64(C._mkcgo_go_encryptChaChaPoly((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.size_t(len(key)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.size_t(len(data)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(nonce))), C.size_t(len(nonce)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(aad))), C.size_t(len(aad)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(cipherText))), C.size_t(len(cipherText)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(tag)))))
-+}
++var _mkcgo_EVP_aes_256_ctr uintptr
 +
-+func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
-+	return int64(C._mkcgo_go_expandHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(info))), C.size_t(len(info)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(okm))), C.size_t(len(okm))))
++func EVP_aes_256_ctr() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ctr)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
-+	return int64(C._mkcgo_go_extractHKDF(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(secret))), C.size_t(len(secret)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(salt))), C.size_t(len(salt)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(prk))), C.size_t(len(prk))))
-+}
++var _mkcgo_EVP_aes_256_ecb uintptr
 +
-+func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
-+	C._mkcgo_go_finalizeHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_aes_256_ecb() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
-+	C._mkcgo_go_freeHMAC(C.int32_t(hashFunction), ptr)
-+}
++var _mkcgo_EVP_aes_256_gcm uintptr
 +
-+func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++func EVP_aes_256_gcm() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_aes_256_gcm)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyECDSA(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(x))), C.long(len(x)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(y))), C.long(len(y)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(d))), C.long(len(d))))
++func EVP_chacha20_poly1305_Available() bool {
++	return _mkcgo_EVP_chacha20_poly1305 != 0
 +}
 +
-+func GenerateKeyEd25519(key []uint8) {
-+	C._mkcgo_go_generateKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))))
-+}
++var _mkcgo_EVP_chacha20_poly1305 uintptr
 +
-+func GenerateKeyMLDSA65(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++func EVP_chacha20_poly1305() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_chacha20_poly1305)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func GenerateKeyMLDSA87(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
-+}
++var _mkcgo_EVP_default_properties_enable_fips uintptr
 +
-+func GenerateKeyMLKEM1024(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLKEM1024((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
++func EVP_default_properties_enable_fips(libctx OSSL_LIB_CTX_PTR, enable int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_EVP_default_properties_enable_fips, uintptr(libctx), uintptr(enable), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("EVP_default_properties_enable_fips", _err)
 +}
 +
-+func GenerateKeyMLKEM768(seed []uint8) int64 {
-+	return int64(C._mkcgo_go_generateKeyMLKEM768((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed))))
-+}
++var _mkcgo_EVP_default_properties_is_fips_enabled uintptr
 +
-+func HashBlockSize(hashAlgorithm int32) int64 {
-+	return int64(C._mkcgo_go_hashBlockSize(C.int32_t(hashAlgorithm)))
++func EVP_default_properties_is_fips_enabled(libctx OSSL_LIB_CTX_PTR) int32 {
++	r0, _ := syscallN(0, _mkcgo_EVP_default_properties_is_fips_enabled, uintptr(libctx))
++	return int32(r0)
 +}
 +
-+func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
-+	return C._mkcgo_go_hashCopy(C.int32_t(hashAlgorithm), ptr)
-+}
++var _mkcgo_EVP_des_cbc uintptr
 +
-+func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
-+	C._mkcgo_go_hashFree(C.int32_t(hashAlgorithm), ptr)
++func EVP_des_cbc() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_des_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HashNew(hashAlgorithm int32) unsafe.Pointer {
-+	return C._mkcgo_go_hashNew(C.int32_t(hashAlgorithm))
-+}
++var _mkcgo_EVP_des_ecb uintptr
 +
-+func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
-+	C._mkcgo_go_hashReset(C.int32_t(hashAlgorithm), ptr)
++func EVP_des_ecb() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HashSize(hashAlgorithm int32) int64 {
-+	return int64(C._mkcgo_go_hashSize(C.int32_t(hashAlgorithm)))
-+}
++var _mkcgo_EVP_des_ede3_cbc uintptr
 +
-+func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
-+	C._mkcgo_go_hashSum(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_des_ede3_cbc() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_cbc)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_hashWrite(C.int32_t(hashAlgorithm), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
-+}
++var _mkcgo_EVP_des_ede3_ecb uintptr
 +
-+func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
-+	return C._mkcgo_go_initHMAC(C.int32_t(hashFunction), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), C.long(len(key)))
++func EVP_des_ede3_ecb() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_des_ede3_ecb)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
-+	return int64(C._mkcgo_go_newPrivateKeyEd25519FromSeed((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed)))))
-+}
++var _mkcgo_EVP_md4 uintptr
 +
-+func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
-+	return int64(C._mkcgo_go_newPublicKeyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(key))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(pub)))))
++func EVP_md4() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_md4)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_publicKeyFromPrivateECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
-+}
++var _mkcgo_EVP_md5 uintptr
 +
-+func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
-+	return int64(C._mkcgo_go_signEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sigBuffer)))))
++func EVP_md5() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_md5)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
-+	return int64(C._mkcgo_go_signMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
-+}
++var _mkcgo_EVP_md5_sha1 uintptr
 +
-+func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
-+	return int64(C._mkcgo_go_signMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(seed))), C.long(len(seed)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), (*C.long)(unsafe.Pointer(signatureLen))))
++func EVP_md5_sha1() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_md5_sha1)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SupportsMLDSA() int64 {
-+	return int64(C._mkcgo_go_supportsMLDSA())
-+}
++var _mkcgo_EVP_rc4 uintptr
 +
-+func SupportsMLKEM() int64 {
-+	return int64(C._mkcgo_go_supportsMLKEM())
++func EVP_rc4() EVP_CIPHER_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_rc4)
++	return EVP_CIPHER_PTR(r0)
 +}
 +
-+func SupportsSHA3() int64 {
-+	return int64(C._mkcgo_go_supportsSHA3())
-+}
++var _mkcgo_EVP_ripemd160 uintptr
 +
-+func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
-+	C._mkcgo_go_updateHMAC(C.int32_t(hashFunction), ptr, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(data))), C.long(len(data)))
++func EVP_ripemd160() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_ripemd160)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePrivateKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(privateKey))), C.long(len(privateKey))))
-+}
++var _mkcgo_EVP_sha1 uintptr
 +
-+func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePublicKeyECDH(C.int32_t(curveID), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++func EVP_sha1() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha1)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePublicKeyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
-+}
++var _mkcgo_EVP_sha224 uintptr
 +
-+func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
-+	return int64(C._mkcgo_go_validatePublicKeyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey))))
++func EVP_sha224() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha224)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
-+	return int64(C._mkcgo_go_verifyEd25519((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.size_t(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(sig)))))
-+}
++var _mkcgo_EVP_sha256 uintptr
 +
-+func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
-+	return int64(C._mkcgo_go_verifyMLDSA65((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
++func EVP_sha256() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha256)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
-+	return int64(C._mkcgo_go_verifyMLDSA87((*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(publicKey))), C.long(len(publicKey)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(message))), C.long(len(message)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(context))), C.long(len(context)), (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(signature))), C.long(len(signature))))
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-new file mode 100644
-index 00000000000000..222ece4bb14349
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_nocgo.go
-@@ -0,0 +1,441 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var _mkcgo_EVP_sha384 uintptr
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++func EVP_sha384() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha384)
++	return EVP_MD_PTR(r0)
++}
 +
-+//go:build !cgo
++var _mkcgo_EVP_sha3_224 uintptr
 +
-+package cryptokit
++func EVP_sha3_224() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_224)
++	return EVP_MD_PTR(r0)
++}
 +
-+import (
-+	"runtime"
-+	"unsafe"
-+)
++var _mkcgo_EVP_sha3_256 uintptr
 +
-+var _ = runtime.GOOS
++func EVP_sha3_256() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_256)
++	return EVP_MD_PTR(r0)
++}
 +
-+var _mkcgoAlwaysFalseCryptokit bool
-+var _mkcgoEscapeSinkCryptokit unsafe.Pointer
++var _mkcgo_EVP_sha3_384 uintptr
 +
-+// mkcgoEscapePtrCryptokit forces p to escape to the heap.
-+// This implementation is also used in the standard library:
-+// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
-+func mkcgoEscapePtrCryptokit(p unsafe.Pointer) unsafe.Pointer {
-+	if _mkcgoAlwaysFalseCryptokit {
-+		_mkcgoEscapeSinkCryptokit = p
-+	}
-+	return p
++func EVP_sha3_384() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_384)
++	return EVP_MD_PTR(r0)
 +}
 +
-+//go:linkname go_MD5 go_MD5
-+//go:linkname go_SHA1 go_SHA1
-+//go:linkname go_SHA256 go_SHA256
-+//go:linkname go_SHA384 go_SHA384
-+//go:linkname go_SHA3_256 go_SHA3_256
-+//go:linkname go_SHA3_384 go_SHA3_384
-+//go:linkname go_SHA3_512 go_SHA3_512
-+//go:linkname go_SHA512 go_SHA512
-+//go:linkname go_copyHMAC go_copyHMAC
-+//go:linkname go_decapsulateMLKEM1024 go_decapsulateMLKEM1024
-+//go:linkname go_decapsulateMLKEM768 go_decapsulateMLKEM768
-+//go:linkname go_decryptAESGCM go_decryptAESGCM
-+//go:linkname go_decryptChaChaPoly go_decryptChaChaPoly
-+//go:linkname go_deriveEncapsulationKeyMLKEM1024 go_deriveEncapsulationKeyMLKEM1024
-+//go:linkname go_deriveEncapsulationKeyMLKEM768 go_deriveEncapsulationKeyMLKEM768
-+//go:linkname go_derivePublicKeyMLDSA65 go_derivePublicKeyMLDSA65
-+//go:linkname go_derivePublicKeyMLDSA87 go_derivePublicKeyMLDSA87
-+//go:linkname go_ecdhSharedSecret go_ecdhSharedSecret
-+//go:linkname go_ecdsaSign go_ecdsaSign
-+//go:linkname go_ecdsaVerify go_ecdsaVerify
-+//go:linkname go_encapsulateMLKEM1024 go_encapsulateMLKEM1024
-+//go:linkname go_encapsulateMLKEM768 go_encapsulateMLKEM768
-+//go:linkname go_encryptAESGCM go_encryptAESGCM
-+//go:linkname go_encryptChaChaPoly go_encryptChaChaPoly
-+//go:linkname go_expandHKDF go_expandHKDF
-+//go:linkname go_extractHKDF go_extractHKDF
-+//go:linkname go_finalizeHMAC go_finalizeHMAC
-+//go:linkname go_freeHMAC go_freeHMAC
-+//go:linkname go_generateKeyECDH go_generateKeyECDH
-+//go:linkname go_generateKeyECDSA go_generateKeyECDSA
-+//go:linkname go_generateKeyEd25519 go_generateKeyEd25519
-+//go:linkname go_generateKeyMLDSA65 go_generateKeyMLDSA65
-+//go:linkname go_generateKeyMLDSA87 go_generateKeyMLDSA87
-+//go:linkname go_generateKeyMLKEM1024 go_generateKeyMLKEM1024
-+//go:linkname go_generateKeyMLKEM768 go_generateKeyMLKEM768
-+//go:linkname go_hashBlockSize go_hashBlockSize
-+//go:linkname go_hashCopy go_hashCopy
-+//go:linkname go_hashFree go_hashFree
-+//go:linkname go_hashNew go_hashNew
-+//go:linkname go_hashReset go_hashReset
-+//go:linkname go_hashSize go_hashSize
-+//go:linkname go_hashSum go_hashSum
-+//go:linkname go_hashWrite go_hashWrite
-+//go:linkname go_initHMAC go_initHMAC
-+//go:linkname go_newPrivateKeyEd25519FromSeed go_newPrivateKeyEd25519FromSeed
-+//go:linkname go_newPublicKeyEd25519 go_newPublicKeyEd25519
-+//go:linkname go_publicKeyFromPrivateECDH go_publicKeyFromPrivateECDH
-+//go:linkname go_signEd25519 go_signEd25519
-+//go:linkname go_signMLDSA65 go_signMLDSA65
-+//go:linkname go_signMLDSA87 go_signMLDSA87
-+//go:linkname go_supportsMLDSA go_supportsMLDSA
-+//go:linkname go_supportsMLKEM go_supportsMLKEM
-+//go:linkname go_supportsSHA3 go_supportsSHA3
-+//go:linkname go_updateHMAC go_updateHMAC
-+//go:linkname go_validatePrivateKeyECDH go_validatePrivateKeyECDH
-+//go:linkname go_validatePublicKeyECDH go_validatePublicKeyECDH
-+//go:linkname go_validatePublicKeyMLDSA65 go_validatePublicKeyMLDSA65
-+//go:linkname go_validatePublicKeyMLDSA87 go_validatePublicKeyMLDSA87
-+//go:linkname go_verifyEd25519 go_verifyEd25519
-+//go:linkname go_verifyMLDSA65 go_verifyMLDSA65
-+//go:linkname go_verifyMLDSA87 go_verifyMLDSA87
-+
-+var go_MD5 byte
-+var go_SHA1 byte
-+var go_SHA256 byte
-+var go_SHA384 byte
-+var go_SHA3_256 byte
-+var go_SHA3_384 byte
-+var go_SHA3_512 byte
-+var go_SHA512 byte
-+var go_copyHMAC byte
-+var go_decapsulateMLKEM1024 byte
-+var go_decapsulateMLKEM768 byte
-+var go_decryptAESGCM byte
-+var go_decryptChaChaPoly byte
-+var go_deriveEncapsulationKeyMLKEM1024 byte
-+var go_deriveEncapsulationKeyMLKEM768 byte
-+var go_derivePublicKeyMLDSA65 byte
-+var go_derivePublicKeyMLDSA87 byte
-+var go_ecdhSharedSecret byte
-+var go_ecdsaSign byte
-+var go_ecdsaVerify byte
-+var go_encapsulateMLKEM1024 byte
-+var go_encapsulateMLKEM768 byte
-+var go_encryptAESGCM byte
-+var go_encryptChaChaPoly byte
-+var go_expandHKDF byte
-+var go_extractHKDF byte
-+var go_finalizeHMAC byte
-+var go_freeHMAC byte
-+var go_generateKeyECDH byte
-+var go_generateKeyECDSA byte
-+var go_generateKeyEd25519 byte
-+var go_generateKeyMLDSA65 byte
-+var go_generateKeyMLDSA87 byte
-+var go_generateKeyMLKEM1024 byte
-+var go_generateKeyMLKEM768 byte
-+var go_hashBlockSize byte
-+var go_hashCopy byte
-+var go_hashFree byte
-+var go_hashNew byte
-+var go_hashReset byte
-+var go_hashSize byte
-+var go_hashSum byte
-+var go_hashWrite byte
-+var go_initHMAC byte
-+var go_newPrivateKeyEd25519FromSeed byte
-+var go_newPublicKeyEd25519 byte
-+var go_publicKeyFromPrivateECDH byte
-+var go_signEd25519 byte
-+var go_signMLDSA65 byte
-+var go_signMLDSA87 byte
-+var go_supportsMLDSA byte
-+var go_supportsMLKEM byte
-+var go_supportsSHA3 byte
-+var go_updateHMAC byte
-+var go_validatePrivateKeyECDH byte
-+var go_validatePublicKeyECDH byte
-+var go_validatePublicKeyMLDSA65 byte
-+var go_validatePublicKeyMLDSA87 byte
-+var go_verifyEd25519 byte
-+var go_verifyMLDSA65 byte
-+var go_verifyMLDSA87 byte
++var _mkcgo_EVP_sha3_512 uintptr
 +
-+func MD5(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_MD5)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_sha3_512() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha3_512)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SHA1(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA1)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_sha512 uintptr
 +
-+func SHA256(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_sha512() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SHA384(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_sha512_224 uintptr
 +
-+func SHA3_256(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_256)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_sha512_224() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512_224)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SHA3_384(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_384)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_EVP_sha512_256 uintptr
 +
-+func SHA3_512(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA3_512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func EVP_sha512_256() EVP_MD_PTR {
++	r0, _ := syscallN(0, _mkcgo_EVP_sha512_256)
++	return EVP_MD_PTR(r0)
 +}
 +
-+func SHA512(inputPointer []uint8, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_SHA512)), uintptr(unsafe.Pointer(unsafe.SliceData(inputPointer))), uintptr(len(inputPointer)), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_FIPS_mode uintptr
 +
-+func CopyHMAC(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_copyHMAC)), uintptr(hashAlgorithm), uintptr(ptr))
-+	return unsafe.Pointer(r0)
++func FIPS_mode() int32 {
++	r0, _ := syscallN(0, _mkcgo_FIPS_mode)
++	return int32(r0)
 +}
 +
-+func DecapsulateMLKEM1024(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
-+	return int64(r0)
-+}
++var _mkcgo_FIPS_mode_set uintptr
 +
-+func DecapsulateMLKEM768(seed []uint8, ciphertext []uint8, sharedKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)))
-+	return int64(r0)
++func FIPS_mode_set(r int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_FIPS_mode_set, uintptr(r), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("FIPS_mode_set", _err)
 +}
 +
-+func DecryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_CTX_copy uintptr
 +
-+func DecryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, tag []uint8, out []uint8, outLength *int) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_decryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))), uintptr(len(tag)), uintptr(unsafe.Pointer(unsafe.SliceData(out))), uintptr(unsafe.Pointer(outLength)))
-+	return int64(r0)
++func HMAC_CTX_copy(dest HMAC_CTX_PTR, src HMAC_CTX_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_HMAC_CTX_copy, uintptr(dest), uintptr(src), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_CTX_copy", _err)
 +}
 +
-+func DeriveEncapsulationKeyMLKEM1024(seed []uint8, encapKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_CTX_free uintptr
 +
-+func DeriveEncapsulationKeyMLKEM768(seed []uint8, encapKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_deriveEncapsulationKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)))
-+	return int64(r0)
++func HMAC_CTX_free(arg0 HMAC_CTX_PTR) {
++	syscallN(0, _mkcgo_HMAC_CTX_free, uintptr(arg0))
 +}
 +
-+func DerivePublicKeyMLDSA65(seed []uint8, publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_CTX_new uintptr
 +
-+func DerivePublicKeyMLDSA87(seed []uint8, publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_derivePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
++func HMAC_CTX_new() (HMAC_CTX_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_HMAC_CTX_new, uintptr(unsafe.Pointer(&_err)))
++	return HMAC_CTX_PTR(r0), newMkcgoErr("HMAC_CTX_new", _err)
 +}
 +
-+func EcdhSharedSecret(curveID int32, privateKey []uint8, publicKey []uint8, sharedSecret []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdhSharedSecret)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedSecret))), uintptr(len(sharedSecret)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_Final uintptr
 +
-+func EcdsaSign(curveID int32, d []uint8, message []uint8, signature []uint8, signatureLen *int64) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaSign)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
-+	return int64(r0)
++func HMAC_Final(arg0 HMAC_CTX_PTR, arg1 []byte, arg2 *uint32) (int32, error) {
++	if arg2 != nil && int(*arg2) > len(arg1) {
++		panic("HMAC_Final: *arg2 exceeds len(arg1)")
++	}
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_HMAC_Final, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(unsafe.Pointer(arg2)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Final", _err)
 +}
 +
-+func EcdsaVerify(curveID int32, x []uint8, y []uint8, message []uint8, signature []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_ecdsaVerify)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_Init_ex uintptr
 +
-+func EncapsulateMLKEM1024(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
-+	return int64(r0)
++func HMAC_Init_ex(arg0 HMAC_CTX_PTR, arg1 []byte, arg3 EVP_MD_PTR, arg4 ENGINE_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_HMAC_Init_ex, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(arg3), uintptr(arg4), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Init_ex", _err)
 +}
 +
-+func EncapsulateMLKEM768(encapKey []uint8, sharedKey []uint8, ciphertext []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encapsulateMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(encapKey))), uintptr(len(encapKey)), uintptr(unsafe.Pointer(unsafe.SliceData(sharedKey))), uintptr(len(sharedKey)), uintptr(unsafe.Pointer(unsafe.SliceData(ciphertext))), uintptr(len(ciphertext)))
-+	return int64(r0)
-+}
++var _mkcgo_HMAC_Update uintptr
 +
-+func EncryptAESGCM(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptAESGCM)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
-+	return int64(r0)
++func HMAC_Update(arg0 HMAC_CTX_PTR, arg1 []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_HMAC_Update, uintptr(arg0), uintptr(unsafe.Pointer(unsafe.SliceData(arg1))), uintptr(len(arg1)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("HMAC_Update", _err)
 +}
 +
-+func EncryptChaChaPoly(key []uint8, data []uint8, nonce []uint8, aad []uint8, cipherText []uint8, tag []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_encryptChaChaPoly)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)), uintptr(unsafe.Pointer(unsafe.SliceData(nonce))), uintptr(len(nonce)), uintptr(unsafe.Pointer(unsafe.SliceData(aad))), uintptr(len(aad)), uintptr(unsafe.Pointer(unsafe.SliceData(cipherText))), uintptr(len(cipherText)), uintptr(unsafe.Pointer(unsafe.SliceData(tag))))
-+	return int64(r0)
-+}
++var _mkcgo_OBJ_nid2sn uintptr
 +
-+func ExpandHKDF(hashFunction int32, prk []uint8, info []uint8, okm []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_expandHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)), uintptr(unsafe.Pointer(unsafe.SliceData(info))), uintptr(len(info)), uintptr(unsafe.Pointer(unsafe.SliceData(okm))), uintptr(len(okm)))
-+	return int64(r0)
++func OBJ_nid2sn(n int32) *byte {
++	r0, _ := syscallN(0, _mkcgo_OBJ_nid2sn, uintptr(n))
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func ExtractHKDF(hashFunction int32, secret []uint8, salt []uint8, prk []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_extractHKDF)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(secret))), uintptr(len(secret)), uintptr(unsafe.Pointer(unsafe.SliceData(salt))), uintptr(len(salt)), uintptr(unsafe.Pointer(unsafe.SliceData(prk))), uintptr(len(prk)))
-+	return int64(r0)
-+}
++var _mkcgo_OPENSSL_init uintptr
 +
-+func FinalizeHMAC(hashFunction int32, ptr unsafe.Pointer, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_finalizeHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
++func OPENSSL_init() {
++	syscallN(0, _mkcgo_OPENSSL_init)
 +}
 +
-+func FreeHMAC(hashFunction int32, ptr unsafe.Pointer) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_freeHMAC)), uintptr(hashFunction), uintptr(ptr))
++var _mkcgo_OPENSSL_init_crypto uintptr
++
++func OPENSSL_init_crypto(ops uint64, settings OPENSSL_INIT_SETTINGS_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_OPENSSL_init_crypto, uintptr(ops), uintptr(settings), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OPENSSL_init_crypto", _err)
 +}
 +
-+func GenerateKeyECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
++func OPENSSL_version_major_Available() bool {
++	return _mkcgo_OPENSSL_version_major != 0
 +}
 +
-+func GenerateKeyECDSA(curveID int32, x []uint8, y []uint8, d []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyECDSA)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(x))), uintptr(len(x)), uintptr(unsafe.Pointer(unsafe.SliceData(y))), uintptr(len(y)), uintptr(unsafe.Pointer(unsafe.SliceData(d))), uintptr(len(d)))
-+	return int64(r0)
-+}
++var _mkcgo_OPENSSL_version_major uintptr
 +
-+func GenerateKeyEd25519(key []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))))
++func OPENSSL_version_major() uint32 {
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_major)
++	return uint32(r0)
 +}
 +
-+func GenerateKeyMLDSA65(seed []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int64(r0)
++func OPENSSL_version_minor_Available() bool {
++	return _mkcgo_OPENSSL_version_minor != 0
 +}
 +
-+func GenerateKeyMLDSA87(seed []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int64(r0)
-+}
++var _mkcgo_OPENSSL_version_minor uintptr
 +
-+func GenerateKeyMLKEM1024(seed []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM1024)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int64(r0)
++func OPENSSL_version_minor() uint32 {
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_minor)
++	return uint32(r0)
 +}
 +
-+func GenerateKeyMLKEM768(seed []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_generateKeyMLKEM768)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)))
-+	return int64(r0)
++func OPENSSL_version_patch_Available() bool {
++	return _mkcgo_OPENSSL_version_patch != 0
 +}
 +
-+func HashBlockSize(hashAlgorithm int32) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashBlockSize)), uintptr(hashAlgorithm))
-+	return int64(r0)
-+}
++var _mkcgo_OPENSSL_version_patch uintptr
 +
-+func HashCopy(hashAlgorithm int32, ptr unsafe.Pointer) unsafe.Pointer {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashCopy)), uintptr(hashAlgorithm), uintptr(ptr))
-+	return unsafe.Pointer(r0)
++func OPENSSL_version_patch() uint32 {
++	r0, _ := syscallN(0, _mkcgo_OPENSSL_version_patch)
++	return uint32(r0)
 +}
 +
-+func HashFree(hashAlgorithm int32, ptr unsafe.Pointer) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_hashFree)), uintptr(hashAlgorithm), uintptr(ptr))
-+}
++var _mkcgo_OSSL_PARAM_BLD_free uintptr
 +
-+func HashNew(hashAlgorithm int32) unsafe.Pointer {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashNew)), uintptr(hashAlgorithm))
-+	return unsafe.Pointer(r0)
++func OSSL_PARAM_BLD_free(bld OSSL_PARAM_BLD_PTR) {
++	syscallN(0, _mkcgo_OSSL_PARAM_BLD_free, uintptr(bld))
 +}
 +
-+func HashReset(hashAlgorithm int32, ptr unsafe.Pointer) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_hashReset)), uintptr(hashAlgorithm), uintptr(ptr))
-+}
++var _mkcgo_OSSL_PARAM_BLD_new uintptr
 +
-+func HashSize(hashAlgorithm int32) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_hashSize)), uintptr(hashAlgorithm))
-+	return int64(r0)
++func OSSL_PARAM_BLD_new() OSSL_PARAM_BLD_PTR {
++	r0, _ := syscallN(0, _mkcgo_OSSL_PARAM_BLD_new)
++	return OSSL_PARAM_BLD_PTR(r0)
 +}
 +
-+func HashSum(hashAlgorithm int32, ptr unsafe.Pointer, outputPointer []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_hashSum)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(outputPointer))))
-+}
++var _mkcgo_OSSL_PARAM_BLD_push_BN uintptr
 +
-+func HashWrite(hashAlgorithm int32, ptr unsafe.Pointer, data []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_hashWrite)), uintptr(hashAlgorithm), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
++func OSSL_PARAM_BLD_push_BN(bld OSSL_PARAM_BLD_PTR, key *byte, bn BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_BN, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(bn), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_BN", _err)
 +}
 +
-+func InitHMAC(hashFunction int32, key []uint8) unsafe.Pointer {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_initHMAC)), uintptr(hashFunction), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(len(key)))
-+	return unsafe.Pointer(r0)
-+}
++var _mkcgo_OSSL_PARAM_BLD_push_int32 uintptr
 +
-+func NewPrivateKeyEd25519FromSeed(key []uint8, seed []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPrivateKeyEd25519FromSeed)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(seed))))
-+	return int64(r0)
++func OSSL_PARAM_BLD_push_int32(bld OSSL_PARAM_BLD_PTR, key *byte, num int32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_int32, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(num), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_int32", _err)
 +}
 +
-+func NewPublicKeyEd25519(key []uint8, pub []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_newPublicKeyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(key))), uintptr(unsafe.Pointer(unsafe.SliceData(pub))))
-+	return int64(r0)
-+}
++var _mkcgo_OSSL_PARAM_BLD_push_octet_string uintptr
 +
-+func PublicKeyFromPrivateECDH(curveID int32, privateKey []uint8, publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_publicKeyFromPrivateECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
++func OSSL_PARAM_BLD_push_octet_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_octet_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_octet_string", _err)
 +}
 +
-+func SignEd25519(privateKey []uint8, message []uint8, sigBuffer []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sigBuffer))))
-+	return int64(r0)
-+}
++var _mkcgo_OSSL_PARAM_BLD_push_utf8_string uintptr
 +
-+func SignMLDSA65(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
-+	return int64(r0)
++func OSSL_PARAM_BLD_push_utf8_string(bld OSSL_PARAM_BLD_PTR, key *byte, buf []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_OSSL_PARAM_BLD_push_utf8_string, uintptr(bld), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(buf)))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("OSSL_PARAM_BLD_push_utf8_string", _err)
 +}
 +
-+func SignMLDSA87(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_signMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(seed))), uintptr(len(seed)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(unsafe.Pointer(signatureLen)))
-+	return int64(r0)
-+}
++var _mkcgo_OSSL_PARAM_BLD_to_param uintptr
 +
-+func SupportsMLDSA() int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLDSA)))
-+	return int64(r0)
++func OSSL_PARAM_BLD_to_param(bld OSSL_PARAM_BLD_PTR) (OSSL_PARAM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_BLD_to_param, uintptr(bld), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_BLD_to_param", _err)
 +}
 +
-+func SupportsMLKEM() int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsMLKEM)))
-+	return int64(r0)
-+}
++var _mkcgo_OSSL_PARAM_free uintptr
 +
-+func SupportsSHA3() int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_supportsSHA3)))
-+	return int64(r0)
++func OSSL_PARAM_free(p OSSL_PARAM_PTR) {
++	syscallN(0, _mkcgo_OSSL_PARAM_free, uintptr(p))
 +}
 +
-+func UpdateHMAC(hashFunction int32, ptr unsafe.Pointer, data []uint8) {
-+	syscallN(0, uintptr(unsafe.Pointer(&go_updateHMAC)), uintptr(hashFunction), uintptr(ptr), uintptr(unsafe.Pointer(unsafe.SliceData(data))), uintptr(len(data)))
-+}
++var _mkcgo_OSSL_PARAM_locate_const uintptr
 +
-+func ValidatePrivateKeyECDH(curveID int32, privateKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePrivateKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(privateKey))), uintptr(len(privateKey)))
-+	return int64(r0)
++func OSSL_PARAM_locate_const(p OSSL_PARAM_PTR, key *byte) (OSSL_PARAM_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_OSSL_PARAM_locate_const, uintptr(p), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(key))), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PARAM_PTR(r0), newMkcgoErr("OSSL_PARAM_locate_const", _err)
 +}
 +
-+func ValidatePublicKeyECDH(curveID int32, publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyECDH)), uintptr(curveID), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
-+}
++var _mkcgo_OSSL_PROVIDER_available uintptr
 +
-+func ValidatePublicKeyMLDSA65(publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
++func OSSL_PROVIDER_available(libctx OSSL_LIB_CTX_PTR, name *byte) int32 {
++	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_available, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))))
++	return int32(r0)
 +}
 +
-+func ValidatePublicKeyMLDSA87(publicKey []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_validatePublicKeyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)))
-+	return int64(r0)
++var _mkcgo_OSSL_PROVIDER_get0_name uintptr
++
++func OSSL_PROVIDER_get0_name(prov OSSL_PROVIDER_PTR) *byte {
++	r0, _ := syscallN(0, _mkcgo_OSSL_PROVIDER_get0_name, uintptr(prov))
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func VerifyEd25519(publicKey []uint8, message []uint8, sig []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyEd25519)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(sig))))
-+	return int64(r0)
++var _mkcgo_OSSL_PROVIDER_try_load uintptr
++
++func OSSL_PROVIDER_try_load(libctx OSSL_LIB_CTX_PTR, name *byte, retain_fallbacks int32) (OSSL_PROVIDER_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_OSSL_PROVIDER_try_load, uintptr(libctx), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(name))), uintptr(retain_fallbacks), uintptr(unsafe.Pointer(&_err)))
++	return OSSL_PROVIDER_PTR(r0), newMkcgoErr("OSSL_PROVIDER_try_load", _err)
 +}
 +
-+func VerifyMLDSA65(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA65)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
-+	return int64(r0)
++var _mkcgo_OpenSSL_version uintptr
++
++func OpenSSL_version(__type int32) *byte {
++	r0, _ := syscallN(0, _mkcgo_OpenSSL_version, uintptr(__type))
++	return (*byte)(unsafe.Pointer(r0))
 +}
 +
-+func VerifyMLDSA87(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64 {
-+	r0, _ := syscallN(0, uintptr(unsafe.Pointer(&go_verifyMLDSA87)), uintptr(unsafe.Pointer(unsafe.SliceData(publicKey))), uintptr(len(publicKey)), uintptr(unsafe.Pointer(unsafe.SliceData(message))), uintptr(len(message)), uintptr(unsafe.Pointer(unsafe.SliceData(context))), uintptr(len(context)), uintptr(unsafe.Pointer(unsafe.SliceData(signature))), uintptr(len(signature)))
-+	return int64(r0)
++func OpenSSL_version_num_Available() bool {
++	return _mkcgo_OpenSSL_version_num != 0
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-new file mode 100644
-index 00000000000000..2b9858f5e5ce80
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_amd64.go
-@@ -0,0 +1,307 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+// Code generated by genswiftimports. DO NOT EDIT.
 +
-+//go:build !cgo && darwin && amd64
++var _mkcgo_OpenSSL_version_num uintptr
 +
-+package cryptokit
++func OpenSSL_version_num() uint64 {
++	r0, _ := syscallN(0, _mkcgo_OpenSSL_version_num)
++	return uint64(r0)
++}
 +
-+//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
-+//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
-+//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
-+//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
-+//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
-+//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
-+//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
-+//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
-+//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
-+//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
-+//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
-+//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
-+//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
-+//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
-+//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
-+//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
-+//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic ___chkstk_darwin ___chkstk_darwin ""
-+//go:cgo_import_dynamic memcpy memcpy ""
-+//go:cgo_import_dynamic memset memset ""
-+//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
-+//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
-+//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
-+//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
-+//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
-+//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
-+//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
-+//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
-+//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
-+//go:cgo_import_dynamic swift_release swift_release ""
-+//go:cgo_import_dynamic swift_retain swift_retain ""
-+//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-new file mode 100644
-index 00000000000000..ce5806b1910da9
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit/zcryptokit_swift_arm64.go
-@@ -0,0 +1,306 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+// Code generated by genswiftimports. DO NOT EDIT.
++var _mkcgo_PKCS5_PBKDF2_HMAC uintptr
++
++func PKCS5_PBKDF2_HMAC(pass []byte, salt []byte, iter int32, digest EVP_MD_PTR, out []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_PKCS5_PBKDF2_HMAC, uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(pass)))), uintptr(len(pass)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(salt)))), uintptr(len(salt)), uintptr(iter), uintptr(digest), uintptr(len(out)), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(unsafe.SliceData(out)))), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("PKCS5_PBKDF2_HMAC", _err)
++}
 +
-+//go:build !cgo && darwin && arm64
++var _mkcgo_RAND_bytes uintptr
 +
-+package cryptokit
++func RAND_bytes(buf []byte) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_RAND_bytes, uintptr(unsafe.Pointer(unsafe.SliceData(buf))), uintptr(len(buf)), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RAND_bytes", _err)
++}
 +
-+//go:cgo_import_dynamic $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF $s10Foundation12DataProtocolPAAE9copyBytes2toSiSw_tF ""
-+//go:cgo_import_dynamic $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj $s10Foundation15ContiguousBytesP010withUnsafeC0yqd__qd__SWKXEKlFTj ""
-+//go:cgo_import_dynamic $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF $s10Foundation4DataV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s10Foundation4DataV5bytes5countACSV_SitcfC $s10Foundation4DataV5bytes5countACSV_SitcfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataV5countSivg $s10Foundation4DataV5countSivg ""
-+//go:cgo_import_dynamic $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF $s10Foundation4DataV9copyBytes2to5countySpys5UInt8VG_SitF ""
-+//go:cgo_import_dynamic $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC $s10Foundation4DataV9repeating5countACs5UInt8V_SitcfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataVAA0B8ProtocolAAMc $s10Foundation4DataVAA0B8ProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVAA15ContiguousBytesAAWP $s10Foundation4DataVAA15ContiguousBytesAAWP "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVACycfC $s10Foundation4DataVACycfC ""
-+//go:cgo_import_dynamic $s10Foundation4DataVN $s10Foundation4DataVN "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSKAAMc $s10Foundation4DataVSKAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSTAAMc $s10Foundation4DataVSTAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSlAAMc $s10Foundation4DataVSlAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVSmAAMc $s10Foundation4DataVSmAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC $s10Foundation4DataVyACxcSTRzs5UInt8V7ElementRtzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ $s9CryptoKit03ChaC4PolyO4open_5using14authenticating10Foundation4DataVAC9SealedBoxV_AA12SymmetricKeyVxtKAG0I8ProtocolRzlFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ $s9CryptoKit03ChaC4PolyO4seal_5using5nonce14authenticatingAC9SealedBoxVx_AA12SymmetricKeyVAC5NonceVSgq_tK10Foundation12DataProtocolRzAoPR_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit03ChaC4PolyO5NonceV4dataAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMa $s9CryptoKit03ChaC4PolyO5NonceVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO5NonceVMn $s9CryptoKit03ChaC4PolyO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV10ciphertext10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit03ChaC4PolyO9SealedBoxV3tag10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC $s9CryptoKit03ChaC4PolyO9SealedBoxV5nonce10ciphertext3tagAeC5NonceV_xq_tKc10Foundation12DataProtocolRzAkLR_r0_lufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VAGycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa $s9CryptoKit10Curve25519O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF $s9CryptoKit10Curve25519O7SigningO10PrivateKeyV9signature3for10Foundation4DataVx_tKAJ0J8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVAGycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa $s9CryptoKit10Curve25519O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF $s9CryptoKit10Curve25519O7SigningO9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAjKR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit10Curve25519O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn $s9CryptoKit10Curve25519O7SigningO9PublicKeyVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ $s9CryptoKit12HashFunctionPAAE4hash4data6DigestQzqd___t10Foundation12DataProtocolRd__lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit12HashFunctionPAAE6update4datayqd___t10Foundation12DataProtocolRd__lF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA256DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVAA0D0AAMc $s9CryptoKit12SHA256DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA256DigestVMa $s9CryptoKit12SHA256DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA384DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVAA0D0AAMc $s9CryptoKit12SHA384DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA384DigestVMa $s9CryptoKit12SHA384DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SHA512DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVAA0D0AAMc $s9CryptoKit12SHA512DigestVAA0D0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SHA512DigestVMa $s9CryptoKit12SHA512DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SharedSecretV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SharedSecretVMa $s9CryptoKit12SharedSecretVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc $s9CryptoKit12SymmetricKeyV10Foundation15ContiguousBytesAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit12SymmetricKeyV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC $s9CryptoKit12SymmetricKeyV4dataACx_tc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit12SymmetricKeyVMa $s9CryptoKit12SymmetricKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVMa $s9CryptoKit14SHA3_256DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_256DigestVSTAAMc $s9CryptoKit14SHA3_256DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVMa $s9CryptoKit14SHA3_384DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_384DigestVSTAAMc $s9CryptoKit14SHA3_384DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVMa $s9CryptoKit14SHA3_512DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit14SHA3_512DigestVSTAAMc $s9CryptoKit14SHA3_512DigestVSTAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVMn $s9CryptoKit24HashedAuthenticationCodeVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc $s9CryptoKit24HashedAuthenticationCodeVyxGAA07MessagedE0AAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc $s9CryptoKit24HashedAuthenticationCodeVyxGSTAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ $s9CryptoKit3AESO3GCMO4open_5using14authenticating10Foundation4DataVAE9SealedBoxV_AA12SymmetricKeyVxtKAI0I8ProtocolRzlFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ $s9CryptoKit3AESO3GCMO4seal_5using5nonce14authenticatingAE9SealedBoxVx_AA12SymmetricKeyVAE5NonceVSgq_tK10Foundation12DataProtocolRzAqRR_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit3AESO3GCMO5NonceV4dataAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMa $s9CryptoKit3AESO3GCMO5NonceVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO5NonceVMn $s9CryptoKit3AESO3GCMO5NonceVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV10ciphertext10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg $s9CryptoKit3AESO3GCMO9SealedBoxV3tag10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC $s9CryptoKit3AESO3GCMO9SealedBoxV5nonce10ciphertext3tagAgE5NonceV_xq_tKc10Foundation12DataProtocolRzAmNR_r0_lufC ""
-+//go:cgo_import_dynamic $s9CryptoKit3AESO3GCMO9SealedBoxVMa $s9CryptoKit3AESO3GCMO9SealedBoxVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg $s9CryptoKit3KEMO19EncapsulationResultV12encapsulated10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg $s9CryptoKit3KEMO19EncapsulationResultV12sharedSecretAA12SymmetricKeyVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit3KEMO19EncapsulationResultVMa $s9CryptoKit3KEMO19EncapsulationResultVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ $s9CryptoKit4HKDFV6expand15pseudoRandomKey4info15outputByteCountAA09SymmetricG0Vqd___qd_0_SgSit10Foundation15ContiguousBytesRd__AK12DataProtocolRd_0_r0_lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ $s9CryptoKit4HKDFV7extract16inputKeyMaterial4saltAA24HashedAuthenticationCodeVyxGAA09SymmetricF0V_qd__Sgt10Foundation12DataProtocolRd__lFZ ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC $s9CryptoKit4HMACV3keyACyxGAA12SymmetricKeyV_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF $s9CryptoKit4HMACV6update4datayqd___t10Foundation12DataProtocolRd__lF ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF $s9CryptoKit4HMACV8finalizeAA24HashedAuthenticationCodeVyxGyF ""
-+//go:cgo_import_dynamic $s9CryptoKit4HMACVMn $s9CryptoKit4HMACVMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P256O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P256O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P256O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P256O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P256O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO10PrivateKeyVMa $s9CryptoKit4P256O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P256O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa $s9CryptoKit4P256O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P256O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P256O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P256O7SigningO9PublicKeyVMa $s9CryptoKit4P256O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P384O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P384O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P384O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P384O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P384O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO10PrivateKeyVMa $s9CryptoKit4P384O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P384O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa $s9CryptoKit4P384O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P384O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P384O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P384O7SigningO9PublicKeyVMa $s9CryptoKit4P384O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963Representation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO06PublicD0V18x963RepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa $s9CryptoKit4P521O12KeyAgreementO06PublicD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V016sharedSecretFromdE04withAA06SharedH0VAE06PublicD0V_tKF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V06publicD0AE06PublicD0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O12KeyAgreementO07PrivateD0V20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa $s9CryptoKit4P521O12KeyAgreementO07PrivateD0VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg $s9CryptoKit4P521O7SigningO10PrivateKeyV06publicF0AE06PublicF0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO10PrivateKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC $s9CryptoKit4P521O7SigningO10PrivateKeyV20compactRepresentableAGSb_tcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF $s9CryptoKit4P521O7SigningO10PrivateKeyV9signature3forAE14ECDSASignatureVx_tKAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO10PrivateKeyVMa $s9CryptoKit4P521O7SigningO10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit4P521O7SigningO14ECDSASignatureV17derRepresentationAGx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa $s9CryptoKit4P521O7SigningO14ECDSASignatureVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF $s9CryptoKit4P521O7SigningO9PublicKeyV16isValidSignature_3forSbAE14ECDSASignatureV_xtAA6DigestRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC $s9CryptoKit4P521O7SigningO9PublicKeyV17rawRepresentationAGx_tKc10Foundation15ContiguousBytesRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit4P521O7SigningO9PublicKeyVMa $s9CryptoKit4P521O7SigningO9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6DigestP9byteCountSivgZTj $s9CryptoKit6DigestP9byteCountSivgZTj ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V14blockByteCountSivgZ $s9CryptoKit6SHA256V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA256V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256V9byteCountSivgZ $s9CryptoKit6SHA256V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VAA12HashFunctionAAMc $s9CryptoKit6SHA256VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VACycfC $s9CryptoKit6SHA256VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VMa $s9CryptoKit6SHA256VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA256VMn $s9CryptoKit6SHA256VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V14blockByteCountSivgZ $s9CryptoKit6SHA384V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA384V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384V9byteCountSivgZ $s9CryptoKit6SHA384V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VAA12HashFunctionAAMc $s9CryptoKit6SHA384VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VACycfC $s9CryptoKit6SHA384VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VMa $s9CryptoKit6SHA384VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA384VMn $s9CryptoKit6SHA384VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V14blockByteCountSivgZ $s9CryptoKit6SHA512V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF $s9CryptoKit6SHA512V8finalizeAA0C6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512V9byteCountSivgZ $s9CryptoKit6SHA512V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VAA12HashFunctionAAMc $s9CryptoKit6SHA512VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VACycfC $s9CryptoKit6SHA512VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VMa $s9CryptoKit6SHA512VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit6SHA512VMn $s9CryptoKit6SHA512VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA65O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA65O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA65O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O10PrivateKeyVMa $s9CryptoKit7MLDSA65O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA65O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA65O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMa $s9CryptoKit7MLDSA65O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA65O9PublicKeyVMn $s9CryptoKit7MLDSA65O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit7MLDSA87O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for10Foundation4DataVx_tKAH0I8ProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF $s9CryptoKit7MLDSA87O10PrivateKeyV9signature3for7context10Foundation4DataVx_q_tKAI0J8ProtocolRzAiLR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC $s9CryptoKit7MLDSA87O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O10PrivateKeyVMa $s9CryptoKit7MLDSA87O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3for7contextSbx_q_q0_t10Foundation12DataProtocolRzAiJR_AiJR0_r1_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF $s9CryptoKit7MLDSA87O9PublicKeyV16isValidSignature_3forSbx_q_t10Foundation12DataProtocolRzAhIR_r0_lF ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit7MLDSA87O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMa $s9CryptoKit7MLDSA87O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit7MLDSA87O9PublicKeyVMn $s9CryptoKit7MLDSA87O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO10SHA1DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO10SHA1DigestVMa $s9CryptoKit8InsecureO10SHA1DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ $s9CryptoKit8InsecureO3MD5V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO3MD5V8finalizeAC0D6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ $s9CryptoKit8InsecureO3MD5V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc $s9CryptoKit8InsecureO3MD5VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VAEycfC $s9CryptoKit8InsecureO3MD5VAEycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMa $s9CryptoKit8InsecureO3MD5VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO3MD5VMn $s9CryptoKit8InsecureO3MD5VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ $s9CryptoKit8InsecureO4SHA1V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF $s9CryptoKit8InsecureO4SHA1V8finalizeAC0D6DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ $s9CryptoKit8InsecureO4SHA1V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc $s9CryptoKit8InsecureO4SHA1VAA12HashFunctionAAMc "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VAEycfC $s9CryptoKit8InsecureO4SHA1VAEycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMa $s9CryptoKit8InsecureO4SHA1VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO4SHA1VMn $s9CryptoKit8InsecureO4SHA1VMn "/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit"
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF $s9CryptoKit8InsecureO9MD5DigestV15withUnsafeBytesyxxSWKXEKlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8InsecureO9MD5DigestVMa $s9CryptoKit8InsecureO9MD5DigestVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit8MLKEM768O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit8MLKEM768O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC $s9CryptoKit8MLKEM768O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O10PrivateKeyVMa $s9CryptoKit8MLKEM768O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit8MLKEM768O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit8MLKEM768O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMa $s9CryptoKit8MLKEM768O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8MLKEM768O9PublicKeyVMn $s9CryptoKit8MLKEM768O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V14blockByteCountSivgZ $s9CryptoKit8SHA3_256V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF $s9CryptoKit8SHA3_256V8finalizeAA0C10_256DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256V9byteCountSivgZ $s9CryptoKit8SHA3_256V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc $s9CryptoKit8SHA3_256VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VACycfC $s9CryptoKit8SHA3_256VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_256VMa $s9CryptoKit8SHA3_256VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V14blockByteCountSivgZ $s9CryptoKit8SHA3_384V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF $s9CryptoKit8SHA3_384V8finalizeAA0C10_384DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384V9byteCountSivgZ $s9CryptoKit8SHA3_384V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc $s9CryptoKit8SHA3_384VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VACycfC $s9CryptoKit8SHA3_384VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_384VMa $s9CryptoKit8SHA3_384VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V14blockByteCountSivgZ $s9CryptoKit8SHA3_512V14blockByteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF $s9CryptoKit8SHA3_512V8finalizeAA0C10_512DigestVyF ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512V9byteCountSivgZ $s9CryptoKit8SHA3_512V9byteCountSivgZ ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc $s9CryptoKit8SHA3_512VAA12HashFunctionAAMc ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VACycfC $s9CryptoKit8SHA3_512VACycfC ""
-+//go:cgo_import_dynamic $s9CryptoKit8SHA3_512VMa $s9CryptoKit8SHA3_512VMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg $s9CryptoKit9MLKEM1024O10PrivateKeyV06publicE0AC06PublicE0Vvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF $s9CryptoKit9MLKEM1024O10PrivateKeyV11decapsulateyAA09SymmetricE0VxK10Foundation12DataProtocolRzlF ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation06publicE0AEx_AC06PublicE0VSgtKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O10PrivateKeyV18seedRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC $s9CryptoKit9MLKEM1024O10PrivateKeyVAEyKcfC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O10PrivateKeyVMa $s9CryptoKit9MLKEM1024O10PrivateKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF $s9CryptoKit9MLKEM1024O9PublicKeyV11encapsulateAA3KEMO19EncapsulationResultVyKF ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentation10Foundation4DataVvg ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC $s9CryptoKit9MLKEM1024O9PublicKeyV17rawRepresentationAEx_tKc10Foundation12DataProtocolRzlufC ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMa $s9CryptoKit9MLKEM1024O9PublicKeyVMa ""
-+//go:cgo_import_dynamic $s9CryptoKit9MLKEM1024O9PublicKeyVMn $s9CryptoKit9MLKEM1024O9PublicKeyVMn ""
-+//go:cgo_import_dynamic $sSKsE6suffixy11SubSequenceQzSiF $sSKsE6suffixy11SubSequenceQzSiF ""
-+//go:cgo_import_dynamic $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC $sSS19stringInterpolationSSs013DefaultStringB0V_tcfC ""
-+//go:cgo_import_dynamic $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC $sSS21_builtinStringLiteral17utf8CodeUnitCount7isASCIISSBp_BwBi1_tcfC ""
-+//go:cgo_import_dynamic $sSW10Foundation12DataProtocolAAMc $sSW10Foundation12DataProtocolAAMc "/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"
-+//go:cgo_import_dynamic $sSW4load14fromByteOffset2asxSi_xmtlF $sSW4load14fromByteOffset2asxSi_xmtlF ""
-+//go:cgo_import_dynamic $sSW5countSivg $sSW5countSivg ""
-+//go:cgo_import_dynamic $sSWN $sSWN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSWSTsWP $sSWSTsWP "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSWSlsMc $sSWSlsMc "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSiN $sSiN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSis23CustomStringConvertiblesWP $sSis23CustomStringConvertiblesWP "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic $sSlsE6prefixy11SubSequenceQzSiF $sSlsE6prefixy11SubSequenceQzSiF ""
-+//go:cgo_import_dynamic $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ $sSmsE1poiyxx_qd__tSmRd__7ElementQyd__ABRtzlFZ ""
-+//go:cgo_import_dynamic $sSp10deallocateyyF $sSp10deallocateyyF ""
-+//go:cgo_import_dynamic $sSp8allocate8capacitySpyxGSi_tFZ $sSp8allocate8capacitySpyxGSi_tFZ ""
-+//go:cgo_import_dynamic $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF $sSw9copyBytes4fromyx_tSlRzs5UInt8V7ElementRtzlF ""
-+//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF $ss17_assertionFailure__4file4line5flagss5NeverOs12StaticStringV_SSAHSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF $ss18_fatalErrorMessage__4file4line5flagss5NeverOs12StaticStringV_A2HSus6UInt32VtF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF $ss26DefaultStringInterpolationV06appendC0yyxs06CustomB11ConvertibleRzlF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV13appendLiteralyySSF $ss26DefaultStringInterpolationV13appendLiteralyySSF ""
-+//go:cgo_import_dynamic $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC $ss26DefaultStringInterpolationV15literalCapacity18interpolationCountABSi_SitcfC ""
-+//go:cgo_import_dynamic $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF $ss26_stdlib_isOSVersionAtLeastyBi1_Bw_BwBwtF ""
-+//go:cgo_import_dynamic $sytN $sytN "/usr/lib/swift/libswiftCore.dylib"
-+//go:cgo_import_dynamic __chkstk_darwin __chkstk_darwin "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic memcpy memcpy ""
-+//go:cgo_import_dynamic swift_allocBox swift_allocBox ""
-+//go:cgo_import_dynamic swift_beginAccess swift_beginAccess ""
-+//go:cgo_import_dynamic swift_bridgeObjectRelease swift_bridgeObjectRelease ""
-+//go:cgo_import_dynamic swift_bridgeObjectRetain swift_bridgeObjectRetain ""
-+//go:cgo_import_dynamic swift_endAccess swift_endAccess ""
-+//go:cgo_import_dynamic swift_errorRelease swift_errorRelease ""
-+//go:cgo_import_dynamic swift_getTypeByMangledNameInContext swift_getTypeByMangledNameInContext ""
-+//go:cgo_import_dynamic swift_getTypeByMangledNameInContextInMetadataState swift_getTypeByMangledNameInContextInMetadataState ""
-+//go:cgo_import_dynamic swift_getWitnessTable swift_getWitnessTable ""
-+//go:cgo_import_dynamic swift_release swift_release ""
-+//go:cgo_import_dynamic swift_retain swift_retain ""
-+//go:cgo_import_dynamic swift_unexpectedError swift_unexpectedError ""
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
-new file mode 100644
-index 00000000000000..9949435fe9e0ae
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_amd64.h
-@@ -0,0 +1,99 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++var _mkcgo_RAND_bytes_ex uintptr
++
++func RAND_bytes_ex(ctx OSSL_LIB_CTX_PTR, buf []byte, strength uint32) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_RAND_bytes_ex, uintptr(ctx), uintptr(unsafe.Pointer(unsafe.SliceData(buf))), uintptr(len(buf)), uintptr(strength), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RAND_bytes_ex", _err)
++}
++
++var _mkcgo_RSA_free uintptr
++
++func RSA_free(arg0 RSA_PTR) {
++	syscallN(0, _mkcgo_RSA_free, uintptr(arg0))
++}
++
++var _mkcgo_RSA_get0_crt_params uintptr
++
++func RSA_get0_crt_params(r RSA_PTR, dmp1 *BIGNUM_PTR, dmq1 *BIGNUM_PTR, iqmp *BIGNUM_PTR) {
++	syscallN(0, _mkcgo_RSA_get0_crt_params, uintptr(r), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmp1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(dmq1))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(iqmp))))
++}
++
++var _mkcgo_RSA_get0_factors uintptr
++
++func RSA_get0_factors(rsa RSA_PTR, p *BIGNUM_PTR, q *BIGNUM_PTR) {
++	syscallN(0, _mkcgo_RSA_get0_factors, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(p))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(q))))
++}
++
++var _mkcgo_RSA_get0_key uintptr
++
++func RSA_get0_key(rsa RSA_PTR, n *BIGNUM_PTR, e *BIGNUM_PTR, d *BIGNUM_PTR) {
++	syscallN(0, _mkcgo_RSA_get0_key, uintptr(rsa), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(n))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(e))), uintptr(mkcgoEscapePtrOssl(unsafe.Pointer(d))))
++}
++
++var _mkcgo_RSA_new uintptr
++
++func RSA_new() (RSA_PTR, error) {
++	var _err uintptr
++	r0, _ := syscallN(1, _mkcgo_RSA_new, uintptr(unsafe.Pointer(&_err)))
++	return RSA_PTR(r0), newMkcgoErr("RSA_new", _err)
++}
++
++var _mkcgo_RSA_set0_crt_params uintptr
++
++func RSA_set0_crt_params(rsa RSA_PTR, dmp1 BIGNUM_PTR, dmp2 BIGNUM_PTR, iqmp BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_crt_params, uintptr(rsa), uintptr(dmp1), uintptr(dmp2), uintptr(iqmp), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_crt_params", _err)
++}
++
++var _mkcgo_RSA_set0_factors uintptr
++
++func RSA_set0_factors(rsa RSA_PTR, p BIGNUM_PTR, q BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_factors, uintptr(rsa), uintptr(p), uintptr(q), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_factors", _err)
++}
++
++var _mkcgo_RSA_set0_key uintptr
++
++func RSA_set0_key(r RSA_PTR, n BIGNUM_PTR, e BIGNUM_PTR, d BIGNUM_PTR) (int32, error) {
++	var _err uintptr
++	r0, _ := syscallN(3, _mkcgo_RSA_set0_key, uintptr(r), uintptr(n), uintptr(e), uintptr(d), uintptr(unsafe.Pointer(&_err)))
++	return int32(r0), newMkcgoErr("RSA_set0_key", _err)
++}
++
++//go:nosplit
++func _mkcgo_error_check(errType, r1, args, n uintptr) {
++	var hasError bool
++	switch errType {
++	case 1:
++		hasError = r1 == 0
++	case 2:
++		hasError = int32(r1) == -1
++	case 3:
++		hasError = int32(r1) <= 0
++	case 4:
++		hasError = int64(r1) <= 0
++	default:
++		panic("invalid error check type")
++	}
++	if hasError {
++		**(**uintptr)(unsafe.Pointer(args + unsafe.Sizeof(uintptr(0))*n)) = retrieveErrorState()
++	}
++}
++
++func MkcgoLoad_(handle unsafe.Pointer) {
++	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
++	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
++	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
++	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
++	_mkcgo_BN_bin2bn = dlsym(handle, "BN_bin2bn\x00", false)
++	_mkcgo_BN_bn2binpad = dlsym(handle, "BN_bn2binpad\x00", false)
++	_mkcgo_BN_bn2lebinpad = dlsym(handle, "BN_bn2lebinpad\x00", false)
++	_mkcgo_BN_clear = dlsym(handle, "BN_clear\x00", false)
++	_mkcgo_BN_clear_free = dlsym(handle, "BN_clear_free\x00", false)
++	_mkcgo_BN_free = dlsym(handle, "BN_free\x00", false)
++	_mkcgo_BN_lebin2bn = dlsym(handle, "BN_lebin2bn\x00", false)
++	_mkcgo_BN_new = dlsym(handle, "BN_new\x00", false)
++	_mkcgo_BN_num_bits = dlsym(handle, "BN_num_bits\x00", false)
++	_mkcgo_CRYPTO_free = dlsym(handle, "CRYPTO_free\x00", false)
++	_mkcgo_CRYPTO_malloc = dlsym(handle, "CRYPTO_malloc\x00", false)
++	_mkcgo_EC_GROUP_free = dlsym(handle, "EC_GROUP_free\x00", false)
++	_mkcgo_EC_GROUP_new_by_curve_name = dlsym(handle, "EC_GROUP_new_by_curve_name\x00", false)
++	_mkcgo_EC_POINT_free = dlsym(handle, "EC_POINT_free\x00", false)
++	_mkcgo_EC_POINT_mul = dlsym(handle, "EC_POINT_mul\x00", false)
++	_mkcgo_EC_POINT_new = dlsym(handle, "EC_POINT_new\x00", false)
++	_mkcgo_EC_POINT_oct2point = dlsym(handle, "EC_POINT_oct2point\x00", false)
++	_mkcgo_EC_POINT_point2oct = dlsym(handle, "EC_POINT_point2oct\x00", false)
++	_mkcgo_ERR_peek_error = dlsym(handle, "ERR_peek_error\x00", false)
++	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_ctrl = dlsym(handle, "EVP_CIPHER_CTX_ctrl\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_free = dlsym(handle, "EVP_CIPHER_CTX_free\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_new = dlsym(handle, "EVP_CIPHER_CTX_new\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_set_key_length = dlsym(handle, "EVP_CIPHER_CTX_set_key_length\x00", false)
++	_mkcgo_EVP_CIPHER_CTX_set_padding = dlsym(handle, "EVP_CIPHER_CTX_set_padding\x00", false)
++	_mkcgo_EVP_CipherInit_ex = dlsym(handle, "EVP_CipherInit_ex\x00", false)
++	_mkcgo_EVP_CipherUpdate = dlsym(handle, "EVP_CipherUpdate\x00", false)
++	_mkcgo_EVP_DecryptFinal_ex = dlsym(handle, "EVP_DecryptFinal_ex\x00", false)
++	_mkcgo_EVP_DecryptInit_ex = dlsym(handle, "EVP_DecryptInit_ex\x00", false)
++	_mkcgo_EVP_DecryptUpdate = dlsym(handle, "EVP_DecryptUpdate\x00", false)
++	_mkcgo_EVP_Digest = dlsym(handle, "EVP_Digest\x00", false)
++	_mkcgo_EVP_DigestFinal_ex = dlsym(handle, "EVP_DigestFinal_ex\x00", false)
++	_mkcgo_EVP_DigestInit = dlsym(handle, "EVP_DigestInit\x00", false)
++	_mkcgo_EVP_DigestInit_ex = dlsym(handle, "EVP_DigestInit_ex\x00", false)
++	_mkcgo_EVP_DigestSign = dlsym(handle, "EVP_DigestSign\x00", false)
++	_mkcgo_EVP_DigestSignFinal = dlsym(handle, "EVP_DigestSignFinal\x00", false)
++	_mkcgo_EVP_DigestSignInit = dlsym(handle, "EVP_DigestSignInit\x00", false)
++	_mkcgo_EVP_DigestUpdate = dlsym(handle, "EVP_DigestUpdate\x00", false)
++	_mkcgo_EVP_DigestVerify = dlsym(handle, "EVP_DigestVerify\x00", false)
++	_mkcgo_EVP_DigestVerifyFinal = dlsym(handle, "EVP_DigestVerifyFinal\x00", false)
++	_mkcgo_EVP_DigestVerifyInit = dlsym(handle, "EVP_DigestVerifyInit\x00", false)
++	_mkcgo_EVP_EncryptFinal_ex = dlsym(handle, "EVP_EncryptFinal_ex\x00", false)
++	_mkcgo_EVP_EncryptInit_ex = dlsym(handle, "EVP_EncryptInit_ex\x00", false)
++	_mkcgo_EVP_EncryptUpdate = dlsym(handle, "EVP_EncryptUpdate\x00", false)
++	_mkcgo_EVP_MD_CTX_copy_ex = dlsym(handle, "EVP_MD_CTX_copy_ex\x00", false)
++	_mkcgo_EVP_MD_CTX_ctrl = dlsym(handle, "EVP_MD_CTX_ctrl\x00", false)
++	_mkcgo_EVP_MD_CTX_free = dlsym(handle, "EVP_MD_CTX_free\x00", false)
++	_mkcgo_EVP_MD_CTX_new = dlsym(handle, "EVP_MD_CTX_new\x00", false)
++	_mkcgo_EVP_PKEY_CTX_ctrl = dlsym(handle, "EVP_PKEY_CTX_ctrl\x00", false)
++	_mkcgo_EVP_PKEY_CTX_free = dlsym(handle, "EVP_PKEY_CTX_free\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new = dlsym(handle, "EVP_PKEY_CTX_new\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new_id = dlsym(handle, "EVP_PKEY_CTX_new_id\x00", false)
++	_mkcgo_EVP_PKEY_decrypt = dlsym(handle, "EVP_PKEY_decrypt\x00", false)
++	_mkcgo_EVP_PKEY_decrypt_init = dlsym(handle, "EVP_PKEY_decrypt_init\x00", false)
++	_mkcgo_EVP_PKEY_derive = dlsym(handle, "EVP_PKEY_derive\x00", false)
++	_mkcgo_EVP_PKEY_derive_init = dlsym(handle, "EVP_PKEY_derive_init\x00", false)
++	_mkcgo_EVP_PKEY_derive_set_peer = dlsym(handle, "EVP_PKEY_derive_set_peer\x00", false)
++	_mkcgo_EVP_PKEY_encrypt = dlsym(handle, "EVP_PKEY_encrypt\x00", false)
++	_mkcgo_EVP_PKEY_encrypt_init = dlsym(handle, "EVP_PKEY_encrypt_init\x00", false)
++	_mkcgo_EVP_PKEY_free = dlsym(handle, "EVP_PKEY_free\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_private_key = dlsym(handle, "EVP_PKEY_get_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_get_raw_public_key = dlsym(handle, "EVP_PKEY_get_raw_public_key\x00", false)
++	_mkcgo_EVP_PKEY_keygen = dlsym(handle, "EVP_PKEY_keygen\x00", false)
++	_mkcgo_EVP_PKEY_keygen_init = dlsym(handle, "EVP_PKEY_keygen_init\x00", false)
++	_mkcgo_EVP_PKEY_new = dlsym(handle, "EVP_PKEY_new\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_private_key = dlsym(handle, "EVP_PKEY_new_raw_private_key\x00", false)
++	_mkcgo_EVP_PKEY_new_raw_public_key = dlsym(handle, "EVP_PKEY_new_raw_public_key\x00", false)
++	_mkcgo_EVP_PKEY_paramgen = dlsym(handle, "EVP_PKEY_paramgen\x00", false)
++	_mkcgo_EVP_PKEY_paramgen_init = dlsym(handle, "EVP_PKEY_paramgen_init\x00", false)
++	_mkcgo_EVP_PKEY_sign = dlsym(handle, "EVP_PKEY_sign\x00", false)
++	_mkcgo_EVP_PKEY_sign_init = dlsym(handle, "EVP_PKEY_sign_init\x00", false)
++	_mkcgo_EVP_PKEY_up_ref = dlsym(handle, "EVP_PKEY_up_ref\x00", false)
++	_mkcgo_EVP_PKEY_verify = dlsym(handle, "EVP_PKEY_verify\x00", false)
++	_mkcgo_EVP_PKEY_verify_init = dlsym(handle, "EVP_PKEY_verify_init\x00", false)
++	_mkcgo_EVP_aes_128_cbc = dlsym(handle, "EVP_aes_128_cbc\x00", false)
++	_mkcgo_EVP_aes_128_ctr = dlsym(handle, "EVP_aes_128_ctr\x00", false)
++	_mkcgo_EVP_aes_128_ecb = dlsym(handle, "EVP_aes_128_ecb\x00", false)
++	_mkcgo_EVP_aes_128_gcm = dlsym(handle, "EVP_aes_128_gcm\x00", false)
++	_mkcgo_EVP_aes_192_cbc = dlsym(handle, "EVP_aes_192_cbc\x00", false)
++	_mkcgo_EVP_aes_192_ctr = dlsym(handle, "EVP_aes_192_ctr\x00", false)
++	_mkcgo_EVP_aes_192_ecb = dlsym(handle, "EVP_aes_192_ecb\x00", false)
++	_mkcgo_EVP_aes_192_gcm = dlsym(handle, "EVP_aes_192_gcm\x00", false)
++	_mkcgo_EVP_aes_256_cbc = dlsym(handle, "EVP_aes_256_cbc\x00", false)
++	_mkcgo_EVP_aes_256_ctr = dlsym(handle, "EVP_aes_256_ctr\x00", false)
++	_mkcgo_EVP_aes_256_ecb = dlsym(handle, "EVP_aes_256_ecb\x00", false)
++	_mkcgo_EVP_aes_256_gcm = dlsym(handle, "EVP_aes_256_gcm\x00", false)
++	_mkcgo_EVP_chacha20_poly1305 = dlsym(handle, "EVP_chacha20_poly1305\x00", true)
++	_mkcgo_EVP_des_cbc = dlsym(handle, "EVP_des_cbc\x00", false)
++	_mkcgo_EVP_des_ecb = dlsym(handle, "EVP_des_ecb\x00", false)
++	_mkcgo_EVP_des_ede3_cbc = dlsym(handle, "EVP_des_ede3_cbc\x00", false)
++	_mkcgo_EVP_des_ede3_ecb = dlsym(handle, "EVP_des_ede3_ecb\x00", false)
++	_mkcgo_EVP_md4 = dlsym(handle, "EVP_md4\x00", false)
++	_mkcgo_EVP_md5 = dlsym(handle, "EVP_md5\x00", false)
++	_mkcgo_EVP_md5_sha1 = dlsym(handle, "EVP_md5_sha1\x00", false)
++	_mkcgo_EVP_rc4 = dlsym(handle, "EVP_rc4\x00", false)
++	_mkcgo_EVP_ripemd160 = dlsym(handle, "EVP_ripemd160\x00", false)
++	_mkcgo_EVP_sha1 = dlsym(handle, "EVP_sha1\x00", false)
++	_mkcgo_EVP_sha224 = dlsym(handle, "EVP_sha224\x00", false)
++	_mkcgo_EVP_sha256 = dlsym(handle, "EVP_sha256\x00", false)
++	_mkcgo_EVP_sha384 = dlsym(handle, "EVP_sha384\x00", false)
++	_mkcgo_EVP_sha3_224 = dlsym(handle, "EVP_sha3_224\x00", false)
++	_mkcgo_EVP_sha3_256 = dlsym(handle, "EVP_sha3_256\x00", false)
++	_mkcgo_EVP_sha3_384 = dlsym(handle, "EVP_sha3_384\x00", false)
++	_mkcgo_EVP_sha3_512 = dlsym(handle, "EVP_sha3_512\x00", false)
++	_mkcgo_EVP_sha512 = dlsym(handle, "EVP_sha512\x00", false)
++	_mkcgo_EVP_sha512_224 = dlsym(handle, "EVP_sha512_224\x00", false)
++	_mkcgo_EVP_sha512_256 = dlsym(handle, "EVP_sha512_256\x00", false)
++	_mkcgo_OBJ_nid2sn = dlsym(handle, "OBJ_nid2sn\x00", false)
++	_mkcgo_OPENSSL_init = dlsym(handle, "OPENSSL_init\x00", false)
++	_mkcgo_OPENSSL_init_crypto = dlsym(handle, "OPENSSL_init_crypto\x00", false)
++	_mkcgo_OpenSSL_version = dlsym(handle, "OpenSSL_version\x00", false)
++}
 +
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These save the frame pointer, so in general, functions that use
-+// these should have zero frame size to suppress the automatic frame
-+// pointer, though it's harmless to not do this.
++func MkcgoUnload_() {
++	_mkcgo_BIO_ctrl = 0
++	_mkcgo_BIO_free = 0
++	_mkcgo_BIO_new = 0
++	_mkcgo_BIO_s_mem = 0
++	_mkcgo_BN_bin2bn = 0
++	_mkcgo_BN_bn2binpad = 0
++	_mkcgo_BN_bn2lebinpad = 0
++	_mkcgo_BN_clear = 0
++	_mkcgo_BN_clear_free = 0
++	_mkcgo_BN_free = 0
++	_mkcgo_BN_lebin2bn = 0
++	_mkcgo_BN_new = 0
++	_mkcgo_BN_num_bits = 0
++	_mkcgo_CRYPTO_free = 0
++	_mkcgo_CRYPTO_malloc = 0
++	_mkcgo_EC_GROUP_free = 0
++	_mkcgo_EC_GROUP_new_by_curve_name = 0
++	_mkcgo_EC_POINT_free = 0
++	_mkcgo_EC_POINT_mul = 0
++	_mkcgo_EC_POINT_new = 0
++	_mkcgo_EC_POINT_oct2point = 0
++	_mkcgo_EC_POINT_point2oct = 0
++	_mkcgo_ERR_peek_error = 0
++	_mkcgo_ERR_print_errors = 0
++	_mkcgo_EVP_CIPHER_CTX_ctrl = 0
++	_mkcgo_EVP_CIPHER_CTX_free = 0
++	_mkcgo_EVP_CIPHER_CTX_new = 0
++	_mkcgo_EVP_CIPHER_CTX_set_key_length = 0
++	_mkcgo_EVP_CIPHER_CTX_set_padding = 0
++	_mkcgo_EVP_CipherInit_ex = 0
++	_mkcgo_EVP_CipherUpdate = 0
++	_mkcgo_EVP_DecryptFinal_ex = 0
++	_mkcgo_EVP_DecryptInit_ex = 0
++	_mkcgo_EVP_DecryptUpdate = 0
++	_mkcgo_EVP_Digest = 0
++	_mkcgo_EVP_DigestFinal_ex = 0
++	_mkcgo_EVP_DigestInit = 0
++	_mkcgo_EVP_DigestInit_ex = 0
++	_mkcgo_EVP_DigestSign = 0
++	_mkcgo_EVP_DigestSignFinal = 0
++	_mkcgo_EVP_DigestSignInit = 0
++	_mkcgo_EVP_DigestUpdate = 0
++	_mkcgo_EVP_DigestVerify = 0
++	_mkcgo_EVP_DigestVerifyFinal = 0
++	_mkcgo_EVP_DigestVerifyInit = 0
++	_mkcgo_EVP_EncryptFinal_ex = 0
++	_mkcgo_EVP_EncryptInit_ex = 0
++	_mkcgo_EVP_EncryptUpdate = 0
++	_mkcgo_EVP_MD_CTX_copy_ex = 0
++	_mkcgo_EVP_MD_CTX_ctrl = 0
++	_mkcgo_EVP_MD_CTX_free = 0
++	_mkcgo_EVP_MD_CTX_new = 0
++	_mkcgo_EVP_PKEY_CTX_ctrl = 0
++	_mkcgo_EVP_PKEY_CTX_free = 0
++	_mkcgo_EVP_PKEY_CTX_new = 0
++	_mkcgo_EVP_PKEY_CTX_new_id = 0
++	_mkcgo_EVP_PKEY_decrypt = 0
++	_mkcgo_EVP_PKEY_decrypt_init = 0
++	_mkcgo_EVP_PKEY_derive = 0
++	_mkcgo_EVP_PKEY_derive_init = 0
++	_mkcgo_EVP_PKEY_derive_set_peer = 0
++	_mkcgo_EVP_PKEY_encrypt = 0
++	_mkcgo_EVP_PKEY_encrypt_init = 0
++	_mkcgo_EVP_PKEY_free = 0
++	_mkcgo_EVP_PKEY_get_raw_private_key = 0
++	_mkcgo_EVP_PKEY_get_raw_public_key = 0
++	_mkcgo_EVP_PKEY_keygen = 0
++	_mkcgo_EVP_PKEY_keygen_init = 0
++	_mkcgo_EVP_PKEY_new = 0
++	_mkcgo_EVP_PKEY_new_raw_private_key = 0
++	_mkcgo_EVP_PKEY_new_raw_public_key = 0
++	_mkcgo_EVP_PKEY_paramgen = 0
++	_mkcgo_EVP_PKEY_paramgen_init = 0
++	_mkcgo_EVP_PKEY_sign = 0
++	_mkcgo_EVP_PKEY_sign_init = 0
++	_mkcgo_EVP_PKEY_up_ref = 0
++	_mkcgo_EVP_PKEY_verify = 0
++	_mkcgo_EVP_PKEY_verify_init = 0
++	_mkcgo_EVP_aes_128_cbc = 0
++	_mkcgo_EVP_aes_128_ctr = 0
++	_mkcgo_EVP_aes_128_ecb = 0
++	_mkcgo_EVP_aes_128_gcm = 0
++	_mkcgo_EVP_aes_192_cbc = 0
++	_mkcgo_EVP_aes_192_ctr = 0
++	_mkcgo_EVP_aes_192_ecb = 0
++	_mkcgo_EVP_aes_192_gcm = 0
++	_mkcgo_EVP_aes_256_cbc = 0
++	_mkcgo_EVP_aes_256_ctr = 0
++	_mkcgo_EVP_aes_256_ecb = 0
++	_mkcgo_EVP_aes_256_gcm = 0
++	_mkcgo_EVP_chacha20_poly1305 = 0
++	_mkcgo_EVP_des_cbc = 0
++	_mkcgo_EVP_des_ecb = 0
++	_mkcgo_EVP_des_ede3_cbc = 0
++	_mkcgo_EVP_des_ede3_ecb = 0
++	_mkcgo_EVP_md4 = 0
++	_mkcgo_EVP_md5 = 0
++	_mkcgo_EVP_md5_sha1 = 0
++	_mkcgo_EVP_rc4 = 0
++	_mkcgo_EVP_ripemd160 = 0
++	_mkcgo_EVP_sha1 = 0
++	_mkcgo_EVP_sha224 = 0
++	_mkcgo_EVP_sha256 = 0
++	_mkcgo_EVP_sha384 = 0
++	_mkcgo_EVP_sha3_224 = 0
++	_mkcgo_EVP_sha3_256 = 0
++	_mkcgo_EVP_sha3_384 = 0
++	_mkcgo_EVP_sha3_512 = 0
++	_mkcgo_EVP_sha512 = 0
++	_mkcgo_EVP_sha512_224 = 0
++	_mkcgo_EVP_sha512_256 = 0
++	_mkcgo_OBJ_nid2sn = 0
++	_mkcgo_OPENSSL_init = 0
++	_mkcgo_OPENSSL_init_crypto = 0
++	_mkcgo_OpenSSL_version = 0
++}
 +
-+#ifdef GOOS_windows
++func MkcgoLoad_3(handle unsafe.Pointer) {
++	_mkcgo_EC_POINT_set_affine_coordinates = dlsym(handle, "EC_POINT_set_affine_coordinates\x00", false)
++	_mkcgo_EVP_CIPHER_fetch = dlsym(handle, "EVP_CIPHER_fetch\x00", false)
++	_mkcgo_EVP_CIPHER_get0_name = dlsym(handle, "EVP_CIPHER_get0_name\x00", false)
++	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_get_block_size\x00", false)
++	_mkcgo_EVP_KDF_CTX_free = dlsym(handle, "EVP_KDF_CTX_free\x00", false)
++	_mkcgo_EVP_KDF_CTX_get_kdf_size = dlsym(handle, "EVP_KDF_CTX_get_kdf_size\x00", false)
++	_mkcgo_EVP_KDF_CTX_new = dlsym(handle, "EVP_KDF_CTX_new\x00", false)
++	_mkcgo_EVP_KDF_CTX_set_params = dlsym(handle, "EVP_KDF_CTX_set_params\x00", false)
++	_mkcgo_EVP_KDF_derive = dlsym(handle, "EVP_KDF_derive\x00", false)
++	_mkcgo_EVP_KDF_fetch = dlsym(handle, "EVP_KDF_fetch\x00", false)
++	_mkcgo_EVP_KDF_free = dlsym(handle, "EVP_KDF_free\x00", false)
++	_mkcgo_EVP_KEYMGMT_fetch = dlsym(handle, "EVP_KEYMGMT_fetch\x00", true)
++	_mkcgo_EVP_KEYMGMT_free = dlsym(handle, "EVP_KEYMGMT_free\x00", false)
++	_mkcgo_EVP_MAC_CTX_dup = dlsym(handle, "EVP_MAC_CTX_dup\x00", false)
++	_mkcgo_EVP_MAC_CTX_free = dlsym(handle, "EVP_MAC_CTX_free\x00", false)
++	_mkcgo_EVP_MAC_CTX_new = dlsym(handle, "EVP_MAC_CTX_new\x00", false)
++	_mkcgo_EVP_MAC_CTX_set_params = dlsym(handle, "EVP_MAC_CTX_set_params\x00", false)
++	_mkcgo_EVP_MAC_fetch = dlsym(handle, "EVP_MAC_fetch\x00", false)
++	_mkcgo_EVP_MAC_final = dlsym(handle, "EVP_MAC_final\x00", false)
++	_mkcgo_EVP_MAC_init = dlsym(handle, "EVP_MAC_init\x00", false)
++	_mkcgo_EVP_MAC_update = dlsym(handle, "EVP_MAC_update\x00", false)
++	_mkcgo_EVP_MD_CTX_get_params = dlsym(handle, "EVP_MD_CTX_get_params\x00", false)
++	_mkcgo_EVP_MD_CTX_gettable_params = dlsym(handle, "EVP_MD_CTX_gettable_params\x00", false)
++	_mkcgo_EVP_MD_CTX_set_params = dlsym(handle, "EVP_MD_CTX_set_params\x00", false)
++	_mkcgo_EVP_MD_CTX_settable_params = dlsym(handle, "EVP_MD_CTX_settable_params\x00", false)
++	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
++	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
++	_mkcgo_EVP_MD_get0_name = dlsym(handle, "EVP_MD_get0_name\x00", false)
++	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
++	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_get_block_size\x00", false)
++	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_get_size\x00", false)
++	_mkcgo_EVP_MD_get_type = dlsym(handle, "EVP_MD_get_type\x00", false)
++	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = dlsym(handle, "EVP_PKEY_CTX_add1_hkdf_info\x00", false)
++	_mkcgo_EVP_PKEY_CTX_new_from_pkey = dlsym(handle, "EVP_PKEY_CTX_new_from_pkey\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = dlsym(handle, "EVP_PKEY_CTX_set0_rsa_oaep_label\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_key\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = dlsym(handle, "EVP_PKEY_CTX_set1_hkdf_salt\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_md\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = dlsym(handle, "EVP_PKEY_CTX_set_hkdf_mode\x00", false)
++	_mkcgo_EVP_PKEY_CTX_set_params = dlsym(handle, "EVP_PKEY_CTX_set_params\x00", false)
++	_mkcgo_EVP_PKEY_Q_keygen = dlsym(handle, "EVP_PKEY_Q_keygen\x00", false)
++	_mkcgo_EVP_PKEY_decapsulate = dlsym(handle, "EVP_PKEY_decapsulate\x00", false)
++	_mkcgo_EVP_PKEY_decapsulate_init = dlsym(handle, "EVP_PKEY_decapsulate_init\x00", false)
++	_mkcgo_EVP_PKEY_encapsulate = dlsym(handle, "EVP_PKEY_encapsulate\x00", false)
++	_mkcgo_EVP_PKEY_encapsulate_init = dlsym(handle, "EVP_PKEY_encapsulate_init\x00", false)
++	_mkcgo_EVP_PKEY_fromdata = dlsym(handle, "EVP_PKEY_fromdata\x00", false)
++	_mkcgo_EVP_PKEY_fromdata_init = dlsym(handle, "EVP_PKEY_fromdata_init\x00", false)
++	_mkcgo_EVP_PKEY_get1_encoded_public_key = dlsym(handle, "EVP_PKEY_get1_encoded_public_key\x00", false)
++	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_get_bits\x00", false)
++	_mkcgo_EVP_PKEY_get_bn_param = dlsym(handle, "EVP_PKEY_get_bn_param\x00", false)
++	_mkcgo_EVP_PKEY_get_octet_string_param = dlsym(handle, "EVP_PKEY_get_octet_string_param\x00", false)
++	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_get_size\x00", false)
++	_mkcgo_EVP_PKEY_private_check = dlsym(handle, "EVP_PKEY_private_check\x00", false)
++	_mkcgo_EVP_PKEY_public_check_quick = dlsym(handle, "EVP_PKEY_public_check_quick\x00", false)
++	_mkcgo_EVP_PKEY_set1_encoded_public_key = dlsym(handle, "EVP_PKEY_set1_encoded_public_key\x00", false)
++	_mkcgo_EVP_SIGNATURE_fetch = dlsym(handle, "EVP_SIGNATURE_fetch\x00", false)
++	_mkcgo_EVP_SIGNATURE_free = dlsym(handle, "EVP_SIGNATURE_free\x00", false)
++	_mkcgo_EVP_default_properties_enable_fips = dlsym(handle, "EVP_default_properties_enable_fips\x00", false)
++	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_free = dlsym(handle, "OSSL_PARAM_BLD_free\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_new = dlsym(handle, "OSSL_PARAM_BLD_new\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_BN = dlsym(handle, "OSSL_PARAM_BLD_push_BN\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_int32 = dlsym(handle, "OSSL_PARAM_BLD_push_int32\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_octet_string = dlsym(handle, "OSSL_PARAM_BLD_push_octet_string\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = dlsym(handle, "OSSL_PARAM_BLD_push_utf8_string\x00", false)
++	_mkcgo_OSSL_PARAM_BLD_to_param = dlsym(handle, "OSSL_PARAM_BLD_to_param\x00", false)
++	_mkcgo_OSSL_PARAM_free = dlsym(handle, "OSSL_PARAM_free\x00", false)
++	_mkcgo_OSSL_PARAM_locate_const = dlsym(handle, "OSSL_PARAM_locate_const\x00", false)
++	_mkcgo_OSSL_PROVIDER_available = dlsym(handle, "OSSL_PROVIDER_available\x00", false)
++	_mkcgo_OSSL_PROVIDER_get0_name = dlsym(handle, "OSSL_PROVIDER_get0_name\x00", false)
++	_mkcgo_OSSL_PROVIDER_try_load = dlsym(handle, "OSSL_PROVIDER_try_load\x00", false)
++	_mkcgo_RAND_bytes_ex = dlsym(handle, "RAND_bytes_ex\x00", false)
++}
 +
-+// REGS_HOST_TO_ABI0_STACK is the stack bytes used by
-+// PUSH_REGS_HOST_TO_ABI0.
-+#define REGS_HOST_TO_ABI0_STACK (28*8 + 8)
++func MkcgoUnload_3() {
++	_mkcgo_EC_POINT_set_affine_coordinates = 0
++	_mkcgo_EVP_CIPHER_fetch = 0
++	_mkcgo_EVP_CIPHER_get0_name = 0
++	_mkcgo_EVP_CIPHER_get_block_size = 0
++	_mkcgo_EVP_KDF_CTX_free = 0
++	_mkcgo_EVP_KDF_CTX_get_kdf_size = 0
++	_mkcgo_EVP_KDF_CTX_new = 0
++	_mkcgo_EVP_KDF_CTX_set_params = 0
++	_mkcgo_EVP_KDF_derive = 0
++	_mkcgo_EVP_KDF_fetch = 0
++	_mkcgo_EVP_KDF_free = 0
++	_mkcgo_EVP_KEYMGMT_fetch = 0
++	_mkcgo_EVP_KEYMGMT_free = 0
++	_mkcgo_EVP_MAC_CTX_dup = 0
++	_mkcgo_EVP_MAC_CTX_free = 0
++	_mkcgo_EVP_MAC_CTX_new = 0
++	_mkcgo_EVP_MAC_CTX_set_params = 0
++	_mkcgo_EVP_MAC_fetch = 0
++	_mkcgo_EVP_MAC_final = 0
++	_mkcgo_EVP_MAC_init = 0
++	_mkcgo_EVP_MAC_update = 0
++	_mkcgo_EVP_MD_CTX_get_params = 0
++	_mkcgo_EVP_MD_CTX_gettable_params = 0
++	_mkcgo_EVP_MD_CTX_set_params = 0
++	_mkcgo_EVP_MD_CTX_settable_params = 0
++	_mkcgo_EVP_MD_fetch = 0
++	_mkcgo_EVP_MD_free = 0
++	_mkcgo_EVP_MD_get0_name = 0
++	_mkcgo_EVP_MD_get0_provider = 0
++	_mkcgo_EVP_MD_get_block_size = 0
++	_mkcgo_EVP_MD_get_size = 0
++	_mkcgo_EVP_MD_get_type = 0
++	_mkcgo_EVP_PKEY_CTX_add1_hkdf_info = 0
++	_mkcgo_EVP_PKEY_CTX_new_from_pkey = 0
++	_mkcgo_EVP_PKEY_CTX_set0_rsa_oaep_label = 0
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_key = 0
++	_mkcgo_EVP_PKEY_CTX_set1_hkdf_salt = 0
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_md = 0
++	_mkcgo_EVP_PKEY_CTX_set_hkdf_mode = 0
++	_mkcgo_EVP_PKEY_CTX_set_params = 0
++	_mkcgo_EVP_PKEY_Q_keygen = 0
++	_mkcgo_EVP_PKEY_decapsulate = 0
++	_mkcgo_EVP_PKEY_decapsulate_init = 0
++	_mkcgo_EVP_PKEY_encapsulate = 0
++	_mkcgo_EVP_PKEY_encapsulate_init = 0
++	_mkcgo_EVP_PKEY_fromdata = 0
++	_mkcgo_EVP_PKEY_fromdata_init = 0
++	_mkcgo_EVP_PKEY_get1_encoded_public_key = 0
++	_mkcgo_EVP_PKEY_get_bits = 0
++	_mkcgo_EVP_PKEY_get_bn_param = 0
++	_mkcgo_EVP_PKEY_get_octet_string_param = 0
++	_mkcgo_EVP_PKEY_get_size = 0
++	_mkcgo_EVP_PKEY_private_check = 0
++	_mkcgo_EVP_PKEY_public_check_quick = 0
++	_mkcgo_EVP_PKEY_set1_encoded_public_key = 0
++	_mkcgo_EVP_SIGNATURE_fetch = 0
++	_mkcgo_EVP_SIGNATURE_free = 0
++	_mkcgo_EVP_default_properties_enable_fips = 0
++	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++	_mkcgo_OSSL_PARAM_BLD_free = 0
++	_mkcgo_OSSL_PARAM_BLD_new = 0
++	_mkcgo_OSSL_PARAM_BLD_push_BN = 0
++	_mkcgo_OSSL_PARAM_BLD_push_int32 = 0
++	_mkcgo_OSSL_PARAM_BLD_push_octet_string = 0
++	_mkcgo_OSSL_PARAM_BLD_push_utf8_string = 0
++	_mkcgo_OSSL_PARAM_BLD_to_param = 0
++	_mkcgo_OSSL_PARAM_free = 0
++	_mkcgo_OSSL_PARAM_locate_const = 0
++	_mkcgo_OSSL_PROVIDER_available = 0
++	_mkcgo_OSSL_PROVIDER_get0_name = 0
++	_mkcgo_OSSL_PROVIDER_try_load = 0
++	_mkcgo_RAND_bytes_ex = 0
++}
 +
-+// PUSH_REGS_HOST_TO_ABI0 prepares for transitioning from
-+// the host ABI to Go ABI0 code. It saves all registers that are
-+// callee-save in the host ABI and caller-save in Go ABI0 and prepares
-+// for entry to Go.
-+//
-+// Save DI SI BP BX R12 R13 R14 R15 X6-X15 registers and the DF flag.
-+// Clear the DF flag for the Go ABI.
-+// MXCSR matches the Go ABI, so we don't have to set that,
-+// and Go doesn't modify it, so we don't have to save it.
-+#define PUSH_REGS_HOST_TO_ABI0()	\
-+	PUSHFQ			\
-+	CLD			\
-+	ADJSP	$(REGS_HOST_TO_ABI0_STACK - 8)	\
-+	MOVQ	DI, (0*0)(SP)	\
-+	MOVQ	SI, (1*8)(SP)	\
-+	MOVQ	BP, (2*8)(SP)	\
-+	MOVQ	BX, (3*8)(SP)	\
-+	MOVQ	R12, (4*8)(SP)	\
-+	MOVQ	R13, (5*8)(SP)	\
-+	MOVQ	R14, (6*8)(SP)	\
-+	MOVQ	R15, (7*8)(SP)	\
-+	MOVUPS	X6, (8*8)(SP)	\
-+	MOVUPS	X7, (10*8)(SP)	\
-+	MOVUPS	X8, (12*8)(SP)	\
-+	MOVUPS	X9, (14*8)(SP)	\
-+	MOVUPS	X10, (16*8)(SP)	\
-+	MOVUPS	X11, (18*8)(SP)	\
-+	MOVUPS	X12, (20*8)(SP)	\
-+	MOVUPS	X13, (22*8)(SP)	\
-+	MOVUPS	X14, (24*8)(SP)	\
-+	MOVUPS	X15, (26*8)(SP)
++func MkcgoLoad_33(handle unsafe.Pointer) {
++	_mkcgo_EVP_DigestFinalXOF = dlsym(handle, "EVP_DigestFinalXOF\x00", false)
++	_mkcgo_EVP_DigestSqueeze = dlsym(handle, "EVP_DigestSqueeze\x00", true)
++}
 +
-+#define POP_REGS_HOST_TO_ABI0()	\
-+	MOVQ	(0*0)(SP), DI	\
-+	MOVQ	(1*8)(SP), SI	\
-+	MOVQ	(2*8)(SP), BP	\
-+	MOVQ	(3*8)(SP), BX	\
-+	MOVQ	(4*8)(SP), R12	\
-+	MOVQ	(5*8)(SP), R13	\
-+	MOVQ	(6*8)(SP), R14	\
-+	MOVQ	(7*8)(SP), R15	\
-+	MOVUPS	(8*8)(SP), X6	\
-+	MOVUPS	(10*8)(SP), X7	\
-+	MOVUPS	(12*8)(SP), X8	\
-+	MOVUPS	(14*8)(SP), X9	\
-+	MOVUPS	(16*8)(SP), X10	\
-+	MOVUPS	(18*8)(SP), X11	\
-+	MOVUPS	(20*8)(SP), X12	\
-+	MOVUPS	(22*8)(SP), X13	\
-+	MOVUPS	(24*8)(SP), X14	\
-+	MOVUPS	(26*8)(SP), X15	\
-+	ADJSP	$-(REGS_HOST_TO_ABI0_STACK - 8)	\
-+	POPFQ
++func MkcgoUnload_33() {
++	_mkcgo_EVP_DigestFinalXOF = 0
++	_mkcgo_EVP_DigestSqueeze = 0
++}
 +
-+#else
-+// SysV ABI
++func MkcgoLoad_init_1(handle unsafe.Pointer) {
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++}
 +
-+#define REGS_HOST_TO_ABI0_STACK (6*8)
++func MkcgoUnload_init_1() {
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++}
 +
-+// SysV MXCSR matches the Go ABI, so we don't have to set that,
-+// and Go doesn't modify it, so we don't have to save it.
-+// Both SysV and Go require DF to be cleared, so that's already clear.
-+// The SysV and Go frame pointer conventions are compatible.
-+#define PUSH_REGS_HOST_TO_ABI0()	\
-+	ADJSP	$(REGS_HOST_TO_ABI0_STACK)	\
-+	MOVQ	BP, (5*8)(SP)	\
-+	LEAQ	(5*8)(SP), BP	\
-+	MOVQ	BX, (0*8)(SP)	\
-+	MOVQ	R12, (1*8)(SP)	\
-+	MOVQ	R13, (2*8)(SP)	\
-+	MOVQ	R14, (3*8)(SP)	\
-+	MOVQ	R15, (4*8)(SP)
++func MkcgoLoad_init_3(handle unsafe.Pointer) {
++	_mkcgo_BIO_ctrl = dlsym(handle, "BIO_ctrl\x00", false)
++	_mkcgo_BIO_free = dlsym(handle, "BIO_free\x00", false)
++	_mkcgo_BIO_new = dlsym(handle, "BIO_new\x00", false)
++	_mkcgo_BIO_s_mem = dlsym(handle, "BIO_s_mem\x00", false)
++	_mkcgo_ERR_print_errors = dlsym(handle, "ERR_print_errors\x00", false)
++	_mkcgo_EVP_MD_fetch = dlsym(handle, "EVP_MD_fetch\x00", false)
++	_mkcgo_EVP_MD_free = dlsym(handle, "EVP_MD_free\x00", false)
++	_mkcgo_EVP_MD_get0_provider = dlsym(handle, "EVP_MD_get0_provider\x00", false)
++	_mkcgo_EVP_default_properties_is_fips_enabled = dlsym(handle, "EVP_default_properties_is_fips_enabled\x00", false)
++}
 +
-+#define POP_REGS_HOST_TO_ABI0()	\
-+	MOVQ	(0*8)(SP), BX	\
-+	MOVQ	(1*8)(SP), R12	\
-+	MOVQ	(2*8)(SP), R13	\
-+	MOVQ	(3*8)(SP), R14	\
-+	MOVQ	(4*8)(SP), R15	\
-+	MOVQ	(5*8)(SP), BP	\
-+	ADJSP	$-(REGS_HOST_TO_ABI0_STACK)
++func MkcgoUnload_init_3() {
++	_mkcgo_BIO_ctrl = 0
++	_mkcgo_BIO_free = 0
++	_mkcgo_BIO_new = 0
++	_mkcgo_BIO_s_mem = 0
++	_mkcgo_ERR_print_errors = 0
++	_mkcgo_EVP_MD_fetch = 0
++	_mkcgo_EVP_MD_free = 0
++	_mkcgo_EVP_MD_get0_provider = 0
++	_mkcgo_EVP_default_properties_is_fips_enabled = 0
++}
 +
-+#endif
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
-new file mode 100644
-index 00000000000000..5d5061ec1dbf8c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/abi_arm64.h
-@@ -0,0 +1,39 @@
-+// Copyright 2021 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func MkcgoLoad_legacy_1(handle unsafe.Pointer) {
++	_mkcgo_DSA_free = dlsym(handle, "DSA_free\x00", false)
++	_mkcgo_DSA_generate_key = dlsym(handle, "DSA_generate_key\x00", false)
++	_mkcgo_DSA_get0_key = dlsym(handle, "DSA_get0_key\x00", false)
++	_mkcgo_DSA_get0_pqg = dlsym(handle, "DSA_get0_pqg\x00", false)
++	_mkcgo_DSA_new = dlsym(handle, "DSA_new\x00", false)
++	_mkcgo_DSA_set0_key = dlsym(handle, "DSA_set0_key\x00", false)
++	_mkcgo_DSA_set0_pqg = dlsym(handle, "DSA_set0_pqg\x00", false)
++	_mkcgo_EC_KEY_check_key = dlsym(handle, "EC_KEY_check_key\x00", false)
++	_mkcgo_EC_KEY_free = dlsym(handle, "EC_KEY_free\x00", false)
++	_mkcgo_EC_KEY_get0_group = dlsym(handle, "EC_KEY_get0_group\x00", false)
++	_mkcgo_EC_KEY_get0_private_key = dlsym(handle, "EC_KEY_get0_private_key\x00", false)
++	_mkcgo_EC_KEY_get0_public_key = dlsym(handle, "EC_KEY_get0_public_key\x00", false)
++	_mkcgo_EC_KEY_new_by_curve_name = dlsym(handle, "EC_KEY_new_by_curve_name\x00", false)
++	_mkcgo_EC_KEY_set_private_key = dlsym(handle, "EC_KEY_set_private_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key = dlsym(handle, "EC_KEY_set_public_key\x00", false)
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = dlsym(handle, "EC_KEY_set_public_key_affine_coordinates\x00", false)
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = dlsym(handle, "EC_POINT_get_affine_coordinates_GFp\x00", false)
++	_mkcgo_EVP_CIPHER_get_block_size = dlsym(handle, "EVP_CIPHER_block_size\x00", false)
++	_mkcgo_EVP_MD_get_block_size = dlsym(handle, "EVP_MD_block_size\x00", false)
++	_mkcgo_EVP_MD_get_size = dlsym(handle, "EVP_MD_size\x00", false)
++	_mkcgo_EVP_PKEY_assign = dlsym(handle, "EVP_PKEY_assign\x00", false)
++	_mkcgo_EVP_PKEY_get0_DSA = dlsym(handle, "EVP_PKEY_get0_DSA\x00", false)
++	_mkcgo_EVP_PKEY_get0_EC_KEY = dlsym(handle, "EVP_PKEY_get0_EC_KEY\x00", false)
++	_mkcgo_EVP_PKEY_get1_RSA = dlsym(handle, "EVP_PKEY_get1_RSA\x00", false)
++	_mkcgo_EVP_PKEY_get_bits = dlsym(handle, "EVP_PKEY_bits\x00", false)
++	_mkcgo_EVP_PKEY_get_size = dlsym(handle, "EVP_PKEY_size\x00", false)
++	_mkcgo_EVP_PKEY_set1_EC_KEY = dlsym(handle, "EVP_PKEY_set1_EC_KEY\x00", false)
++	_mkcgo_FIPS_mode = dlsym(handle, "FIPS_mode\x00", false)
++	_mkcgo_FIPS_mode_set = dlsym(handle, "FIPS_mode_set\x00", false)
++	_mkcgo_HMAC_CTX_copy = dlsym(handle, "HMAC_CTX_copy\x00", false)
++	_mkcgo_HMAC_CTX_free = dlsym(handle, "HMAC_CTX_free\x00", false)
++	_mkcgo_HMAC_CTX_new = dlsym(handle, "HMAC_CTX_new\x00", false)
++	_mkcgo_HMAC_Final = dlsym(handle, "HMAC_Final\x00", false)
++	_mkcgo_HMAC_Init_ex = dlsym(handle, "HMAC_Init_ex\x00", false)
++	_mkcgo_HMAC_Update = dlsym(handle, "HMAC_Update\x00", false)
++	_mkcgo_PKCS5_PBKDF2_HMAC = dlsym(handle, "PKCS5_PBKDF2_HMAC\x00", false)
++	_mkcgo_RAND_bytes = dlsym(handle, "RAND_bytes\x00", false)
++	_mkcgo_RSA_free = dlsym(handle, "RSA_free\x00", false)
++	_mkcgo_RSA_get0_crt_params = dlsym(handle, "RSA_get0_crt_params\x00", false)
++	_mkcgo_RSA_get0_factors = dlsym(handle, "RSA_get0_factors\x00", false)
++	_mkcgo_RSA_get0_key = dlsym(handle, "RSA_get0_key\x00", false)
++	_mkcgo_RSA_new = dlsym(handle, "RSA_new\x00", false)
++	_mkcgo_RSA_set0_crt_params = dlsym(handle, "RSA_set0_crt_params\x00", false)
++	_mkcgo_RSA_set0_factors = dlsym(handle, "RSA_set0_factors\x00", false)
++	_mkcgo_RSA_set0_key = dlsym(handle, "RSA_set0_key\x00", false)
++}
 +
-+// Macros for transitioning from the host ABI to Go ABI0.
-+//
-+// These macros save and restore the callee-saved registers
-+// from the stack, but they don't adjust stack pointer, so
-+// the user should prepare stack space in advance.
-+// SAVE_R19_TO_R28(offset) saves R19 ~ R28 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+9*8)(RSP).
-+//
-+// SAVE_F8_TO_F15(offset) saves F8 ~ F15 to the stack space
-+// of ((offset)+0*8)(RSP) ~ ((offset)+7*8)(RSP).
-+//
-+// R29 is not saved because Go will save and restore it.
++func MkcgoUnload_legacy_1() {
++	_mkcgo_DSA_free = 0
++	_mkcgo_DSA_generate_key = 0
++	_mkcgo_DSA_get0_key = 0
++	_mkcgo_DSA_get0_pqg = 0
++	_mkcgo_DSA_new = 0
++	_mkcgo_DSA_set0_key = 0
++	_mkcgo_DSA_set0_pqg = 0
++	_mkcgo_EC_KEY_check_key = 0
++	_mkcgo_EC_KEY_free = 0
++	_mkcgo_EC_KEY_get0_group = 0
++	_mkcgo_EC_KEY_get0_private_key = 0
++	_mkcgo_EC_KEY_get0_public_key = 0
++	_mkcgo_EC_KEY_new_by_curve_name = 0
++	_mkcgo_EC_KEY_set_private_key = 0
++	_mkcgo_EC_KEY_set_public_key = 0
++	_mkcgo_EC_KEY_set_public_key_affine_coordinates = 0
++	_mkcgo_EC_POINT_get_affine_coordinates_GFp = 0
++	_mkcgo_EVP_CIPHER_get_block_size = 0
++	_mkcgo_EVP_MD_get_block_size = 0
++	_mkcgo_EVP_MD_get_size = 0
++	_mkcgo_EVP_PKEY_assign = 0
++	_mkcgo_EVP_PKEY_get0_DSA = 0
++	_mkcgo_EVP_PKEY_get0_EC_KEY = 0
++	_mkcgo_EVP_PKEY_get1_RSA = 0
++	_mkcgo_EVP_PKEY_get_bits = 0
++	_mkcgo_EVP_PKEY_get_size = 0
++	_mkcgo_EVP_PKEY_set1_EC_KEY = 0
++	_mkcgo_FIPS_mode = 0
++	_mkcgo_FIPS_mode_set = 0
++	_mkcgo_HMAC_CTX_copy = 0
++	_mkcgo_HMAC_CTX_free = 0
++	_mkcgo_HMAC_CTX_new = 0
++	_mkcgo_HMAC_Final = 0
++	_mkcgo_HMAC_Init_ex = 0
++	_mkcgo_HMAC_Update = 0
++	_mkcgo_PKCS5_PBKDF2_HMAC = 0
++	_mkcgo_RAND_bytes = 0
++	_mkcgo_RSA_free = 0
++	_mkcgo_RSA_get0_crt_params = 0
++	_mkcgo_RSA_get0_factors = 0
++	_mkcgo_RSA_get0_key = 0
++	_mkcgo_RSA_new = 0
++	_mkcgo_RSA_set0_crt_params = 0
++	_mkcgo_RSA_set0_factors = 0
++	_mkcgo_RSA_set0_key = 0
++}
++
++func MkcgoLoad_version(handle unsafe.Pointer) {
++	_mkcgo_OPENSSL_version_major = dlsym(handle, "OPENSSL_version_major\x00", true)
++	_mkcgo_OPENSSL_version_minor = dlsym(handle, "OPENSSL_version_minor\x00", true)
++	_mkcgo_OPENSSL_version_patch = dlsym(handle, "OPENSSL_version_patch\x00", true)
++	_mkcgo_OpenSSL_version_num = dlsym(handle, "OpenSSL_version_num\x00", true)
++}
 +
-+#define SAVE_R19_TO_R28(offset) \
-+	STP	(R19, R20), ((offset)+0*8)(RSP) \
-+	STP	(R21, R22), ((offset)+2*8)(RSP) \
-+	STP	(R23, R24), ((offset)+4*8)(RSP) \
-+	STP	(R25, R26), ((offset)+6*8)(RSP) \
-+	STP	(R27, g), ((offset)+8*8)(RSP)
-+#define RESTORE_R19_TO_R28(offset) \
-+	LDP	((offset)+0*8)(RSP), (R19, R20) \
-+	LDP	((offset)+2*8)(RSP), (R21, R22) \
-+	LDP	((offset)+4*8)(RSP), (R23, R24) \
-+	LDP	((offset)+6*8)(RSP), (R25, R26) \
-+	LDP	((offset)+8*8)(RSP), (R27, g) /* R28 */
-+#define SAVE_F8_TO_F15(offset) \
-+	FSTPD	(F8, F9), ((offset)+0*8)(RSP) \
-+	FSTPD	(F10, F11), ((offset)+2*8)(RSP) \
-+	FSTPD	(F12, F13), ((offset)+4*8)(RSP) \
-+	FSTPD	(F14, F15), ((offset)+6*8)(RSP)
-+#define RESTORE_F8_TO_F15(offset) \
-+	FLDPD	((offset)+0*8)(RSP), (F8, F9) \
-+	FLDPD	((offset)+2*8)(RSP), (F10, F11) \
-+	FLDPD	((offset)+4*8)(RSP), (F12, F13) \
-+	FLDPD	((offset)+6*8)(RSP), (F14, F15)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
++func MkcgoUnload_version() {
++	_mkcgo_OPENSSL_version_major = 0
++	_mkcgo_OPENSSL_version_minor = 0
++	_mkcgo_OPENSSL_version_patch = 0
++	_mkcgo_OpenSSL_version_num = 0
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/aes.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/aes.go
 new file mode 100644
-index 00000000000000..2b7eb57f8ae783
+index 00000000000000..e487d1f1688cb7
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_amd64.s
-@@ -0,0 +1,39 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+#include "textflag.h"
-+#include "abi_amd64.h"
-+
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+// This signature is known to SWIG, so we can't change it.
-+TEXT crosscall2(SB), NOSPLIT, $0-0
-+	PUSH_REGS_HOST_TO_ABI0()
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/aes.go
+@@ -0,0 +1,158 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	// Make room for arguments to cgocallback.
-+	ADJSP $0x18
++package openssl
 +
-+#ifndef GOOS_windows
-+	MOVQ DI, 0x0(SP) // fn
-+	MOVQ SI, 0x8(SP) // arg
++import (
++	"crypto/cipher"
++	"errors"
++)
 +
-+	// Skip n in DX.
-+	MOVQ CX, 0x10(SP) // ctxt
++//go:generate go run github.com/microsoft/go-crypto-openssl/cmd/genaesmodes -in aes.go -modes CBC,CTR,GCM -out zaes.go
++//go:generate go run github.com/microsoft/go-crypto-openssl/cmd/gentestvectors -out vectors_test.go
 +
-+#else
-+	MOVQ CX, 0x0(SP) // fn
-+	MOVQ DX, 0x8(SP) // arg
++// Steps to support a new AES mode, e.g. `FOO`:
++// 1. Add `FOO` to the list of modes in the `genaesmodes` command.
++// 2. Run `go generate` to update the generated code.
++// 3. Implement the necessary interfaces for the new struct, which will be named `cipherWithFOO`.
 +
-+	// Skip n in R8.
-+	MOVQ R9, 0x10(SP) // ctxt
++// NewAESCipher creates and returns a new AES cipher.Block.
++// The key argument should be the AES key, either 16, 24, or 32 bytes to select
++// AES-128, AES-192, or AES-256.
++// The returned cipher.Block implements the CBC, CTR, and/or GCM modes if
++// the underlying OpenSSL library supports them.
++func NewAESCipher(key []byte) (cipher.Block, error) {
++	var kind cipherKind
++	switch len(key) * 8 {
++	case 128:
++		kind = cipherAES128
++	case 192:
++		kind = cipherAES192
++	case 256:
++		kind = cipherAES256
++	default:
++		return nil, errors.New("crypto/aes: invalid key size")
++	}
++	c, err := newEVPCipher(key, kind)
++	if err != nil {
++		return nil, err
++	}
++	return newAESBlock(c, kind), nil
++}
 +
-+#endif
++// NewGCMTLS returns a GCM cipher specific to TLS
++// and should not be used for non-TLS purposes.
++func NewGCMTLS(c cipher.Block) (cipher.AEAD, error) {
++	if c, ok := c.(interface {
++		NewGCMTLS() (cipher.AEAD, error)
++	}); ok {
++		return c.NewGCMTLS()
++	}
++	return nil, errors.New("GCM not supported")
++}
 +
-+	CALL runtime·cgocallback(SB)
++// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
++// for non-TLS purposes.
++func NewGCMTLS13(c cipher.Block) (cipher.AEAD, error) {
++	if c, ok := c.(interface {
++		NewGCMTLS13() (cipher.AEAD, error)
++	}); ok {
++		return c.NewGCMTLS13()
++	}
++	return nil, errors.New("GCM not supported")
++}
 +
-+	ADJSP $-0x18
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
-new file mode 100644
-index 00000000000000..50e5261d922c56
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/asm_arm64.s
-@@ -0,0 +1,36 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++// aesCipher implements the cipher.Block interface.
++type aesCipher struct {
++	cipher *evpCipher
++}
 +
-+#include "textflag.h"
-+#include "abi_arm64.h"
++func (c aesCipher) BlockSize() int {
++	return c.cipher.blockSize
++}
 +
-+// Called by C code generated by cmd/cgo.
-+// func crosscall2(fn, a unsafe.Pointer, n int32, ctxt uintptr)
-+// Saves C callee-saved registers and calls cgocallback with three arguments.
-+// fn is the PC of a func(a unsafe.Pointer) function.
-+TEXT crosscall2(SB), NOSPLIT|NOFRAME, $0
-+/*
-+ * We still need to save all callee save register as before, and then
-+ *  push 3 args for fn (R0, R1, R3), skipping R2.
-+ * Also note that at procedure entry in gc world, 8(RSP) will be the
-+ *  first arg.
-+ */
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
++func (c aesCipher) Encrypt(dst, src []byte) {
++	if err := c.cipher.encrypt(dst, src); err != nil {
++		// crypto/aes expects that the panic message starts with "crypto/aes: ".
++		panic("crypto/aes: " + err.Error())
++	}
++}
 +
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
-+	STP (R29, R30), (8*22)(RSP)
++func (c aesCipher) Decrypt(dst, src []byte) {
++	if err := c.cipher.decrypt(dst, src); err != nil {
++		// crypto/aes expects that the panic message starts with "crypto/aes: ".
++		panic("crypto/aes: " + err.Error())
++	}
++}
 +
-+	// Initialize Go ABI environment
-+	BL runtime·load_g(SB)
-+	BL runtime·cgocallback(SB)
++// Implement optional interfaces for AES modes.
 +
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	LDP (8*22)(RSP), (R29, R30)
++func (c cipherWithCBC) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpEncrypt)
++}
 +
-+	ADD $(8*24), RSP
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
-new file mode 100644
-index 00000000000000..e48722128a09d7
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/callbacks.go
-@@ -0,0 +1,93 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++func (c cipherWithCBC) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpEncrypt)
++}
 +
-+//go:build !cgo && darwin
++func (c cipherWithCBC) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpDecrypt)
++}
 +
-+package fakecgo
++func (c cipherWithCBC) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
++	return c.cipher.newCBC(iv, cipherOpDecrypt)
++}
 +
-+import (
-+	_ "unsafe"
-+)
++func (c cipherWithCTR) NewCTR(iv []byte) cipher.Stream {
++	return c.cipher.newCTR(iv)
++}
 +
-+// TODO: decide if we need _runtime_cgo_panic_internal
++func (c cipherWithCTR) NewFIPSCTR(iv []byte) cipher.Stream {
++	return c.cipher.newCTR(iv)
++}
 +
-+//go:linkname x_cgo_init_trampoline x_cgo_init_trampoline
-+//go:linkname _cgo_init _cgo_init
-+var x_cgo_init_trampoline byte
-+var _cgo_init = &x_cgo_init_trampoline
++func (c cipherWithGCM) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
++	return c.cipher.newGCMChecked(nonceSize, tagSize)
++}
 +
-+// Creates a new system thread without updating any Go state.
-+//
-+// This method is invoked during shared library loading to create a new OS
-+// thread to perform the runtime initialization. This method is similar to
-+// _cgo_sys_thread_start except that it doesn't update any Go state.
++func (c cipherWithGCM) NewGCMTLS() (cipher.AEAD, error) {
++	return c.cipher.newGCM(cipherGCMTLS12)
++}
 +
-+//go:linkname x_cgo_thread_start_trampoline x_cgo_thread_start_trampoline
-+//go:linkname _cgo_thread_start _cgo_thread_start
-+var x_cgo_thread_start_trampoline byte
-+var _cgo_thread_start = &x_cgo_thread_start_trampoline
++func (c cipherWithGCM) NewGCMTLS13() (cipher.AEAD, error) {
++	return c.cipher.newGCM(cipherGCMTLS13)
++}
 +
-+// Notifies that the runtime has been initialized.
-+//
-+// We currently block at every CGO entry point (via _cgo_wait_runtime_init_done)
-+// to ensure that the runtime has been initialized before the CGO call is
-+// executed. This is necessary for shared libraries where we kickoff runtime
-+// initialization in a separate thread and return without waiting for this
-+// thread to complete the init.
++// The following interfaces have been copied out of crypto/aes/modes.go.
 +
-+//go:linkname x_cgo_notify_runtime_init_done_trampoline x_cgo_notify_runtime_init_done_trampoline
-+//go:linkname _cgo_notify_runtime_init_done _cgo_notify_runtime_init_done
-+var x_cgo_notify_runtime_init_done_trampoline byte
-+var _cgo_notify_runtime_init_done = &x_cgo_notify_runtime_init_done_trampoline
++type gcmAble interface {
++	NewGCM(nonceSize, tagSize int) (cipher.AEAD, error)
++}
 +
-+// Indicates whether a dummy thread key has been created or not.
-+//
-+// When calling go exported function from C, we register a destructor
-+// callback, for a dummy thread key, by using pthread_key_create.
++type cbcEncAble interface {
++	NewCBCEncrypter(iv []byte) cipher.BlockMode
++}
 +
-+//go:linkname _cgo_pthread_key_created _cgo_pthread_key_created
-+var x_cgo_pthread_key_created uintptr
-+var _cgo_pthread_key_created = &x_cgo_pthread_key_created
++type cbcDecAble interface {
++	NewCBCDecrypter(iv []byte) cipher.BlockMode
++}
 +
-+// Set the x_crosscall2_ptr C function pointer variable point to crosscall2.
-+// It's for the runtime package to call at init time.
-+func set_crosscall2() {
-+	// nothing needs to be done here for fakecgo
-+	// because it's possible to just call cgocallback directly
++type ctrAble interface {
++	NewCTR(iv []byte) cipher.Stream
 +}
 +
-+//go:linkname _set_crosscall2 runtime.set_crosscall2
-+var _set_crosscall2 = set_crosscall2
++// Test that the interfaces are implemented.
 +
-+// Store the g into the thread-specific value.
-+// So that pthread_key_destructor will dropm when the thread is exiting.
++var (
++	_ cipher.Block = (*aesCipher)(nil)
 +
-+//go:linkname x_cgo_bindm_trampoline x_cgo_bindm_trampoline
-+//go:linkname _cgo_bindm _cgo_bindm
-+var x_cgo_bindm_trampoline byte
-+var _cgo_bindm = &x_cgo_bindm_trampoline
++	_ cipher.Block = (*cipherWithCBC)(nil)
++	_ cbcEncAble   = (*cipherWithCBC)(nil)
++	_ cbcDecAble   = (*cipherWithCBC)(nil)
 +
-+// TODO: decide if we need x_cgo_set_context_function
-+// TODO: decide if we need _cgo_yield
++	_ cipher.Block = (*cipherWithCTR)(nil)
++	_ ctrAble      = (*cipherWithCTR)(nil)
 +
-+var (
-+	// In Go 1.20 the race detector was rewritten to pure Go
-+	// on darwin. This means that when CGO_ENABLED=0 is set
-+	// fakecgo is built with race detector code. This is not
-+	// good since this code is pretending to be C. The go:norace
-+	// pragma is not enough, since it only applies to the native
-+	// ABIInternal function. The ABIO wrapper (which is necessary,
-+	// since all references to text symbols from assembly will use it)
-+	// does not inherit the go:norace pragma, so it will still be
-+	// instrumented by the race detector.
-+	//
-+	// To circumvent this issue, using closure calls in the
-+	// assembly, which forces the compiler to use the ABIInternal
-+	// native implementation (which has go:norace) instead.
-+	threadentry_call        = threadentry
-+	x_cgo_init_call         = x_cgo_init
-+	x_cgo_setenv_call       = x_cgo_setenv
-+	x_cgo_unsetenv_call     = x_cgo_unsetenv
-+	x_cgo_thread_start_call = x_cgo_thread_start
++	_ cipher.Block = (*cipherWithGCM)(nil)
++	_ gcmAble      = (*cipherWithGCM)(nil)
 +)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/big.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/big.go
 new file mode 100644
-index 00000000000000..b631396bd2ffe7
+index 00000000000000..a5d005176e63f9
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.go
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/big.go
 @@ -0,0 +1,14 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2025 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
-+
-+package fakecgo
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+import _ "unsafe"
++package openssl
 +
-+// setg_trampoline calls setg with the G provided
-+func setg_trampoline(setg uintptr, G uintptr)
++// This file does not have build constraints to
++// facilitate using BigInt in Go crypto.
++// Go crypto references BigInt unconditionally,
++// even if it is not finally used.
 +
-+// call5 takes fn the C function and 5 arguments and calls the function with those arguments
-+func call5(fn, a1, a2, a3, a4, a5 uintptr) uintptr
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
-new file mode 100644
-index 00000000000000..9b0650d53777bd
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/fakecgo.lock
-@@ -0,0 +1,3 @@
-+{
-+  "commit_hash": "5110604b3385278be6887d0feead513a1bfe7a82"
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
++// A BigInt is the raw words from a BigInt.
++// This definition allows us to avoid importing math/big.
++// Conversion between BigInt and *big.Int is in openssl/bbig.
++type BigInt []uint
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/chacha20poly1305.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/chacha20poly1305.go
 new file mode 100644
-index 00000000000000..88c4cdf9ec04cc
+index 00000000000000..410829738931c7
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/generate.go
-@@ -0,0 +1,6 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/chacha20poly1305.go
+@@ -0,0 +1,152 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+package fakecgo
-+
-+//go:generate go run update_tool.go
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
-new file mode 100644
-index 00000000000000..d0868f0f790351
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_darwin.go
-@@ -0,0 +1,88 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+package fakecgo
++package openssl
 +
-+import "unsafe"
++import (
++	"crypto/cipher"
++	"errors"
++	"runtime"
++	"sync"
++	"unsafe"
 +
-+//go:nosplit
-+//go:norace
-+func _cgo_sys_thread_start(ts *ThreadStart) {
-+	var attr pthread_attr_t
-+	var ign, oset sigset_t
-+	var p pthread_t
-+	var size size_t
-+	var err int
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+	sigfillset(&ign)
-+	pthread_sigmask(SIG_SETMASK, &ign, &oset)
++const (
++	chacha20Poly1305KeySize   = 32
++	chacha20Poly1305NonceSize = 12
++	chacha20Poly1305Overhead  = 16
++)
 +
-+	size = pthread_get_stacksize_np(pthread_self())
-+	pthread_attr_init(&attr)
-+	pthread_attr_setstacksize(&attr, size)
-+	// Leave stacklo=0 and set stackhi=size; mstart will do the rest.
-+	ts.g.stackhi = uintptr(size)
++var supportsChaCha20Poly1305 = sync.OnceValue(func() bool {
++	return loadCipher(cipherChaCha20Poly1305, cipherModeNone) != nil
++})
 +
-+	err = _cgo_try_pthread_create(&p, &attr, unsafe.Pointer(threadentry_trampolineABI0), ts)
++func SupportsChaCha20Poly1305() bool {
++	return supportsChaCha20Poly1305()
++}
 +
-+	pthread_sigmask(SIG_SETMASK, &oset, nil)
++type chacha20poly1305 struct {
++	key [chacha20Poly1305KeySize]byte
++}
 +
-+	if err != 0 {
-+		print("fakecgo: pthread_create failed: ")
-+		println(err)
-+		abort()
++// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
++func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
++	if len(key) != chacha20Poly1305KeySize {
++		return nil, errors.New("chacha20poly1305: bad key length")
 +	}
++	ret := new(chacha20poly1305)
++	copy(ret.key[:], key)
++	return ret, nil
 +}
 +
-+// threadentry_trampolineABI0 maps the C ABI to Go ABI then calls the Go function
-+//
-+//go:linkname x_threadentry_trampoline threadentry_trampoline
-+var x_threadentry_trampoline byte
-+var threadentry_trampolineABI0 = &x_threadentry_trampoline
-+
-+//go:nosplit
-+//go:norace
-+func threadentry(v unsafe.Pointer) unsafe.Pointer {
-+	ts := *(*ThreadStart)(v)
-+	free(v)
-+
-+	// TODO: support ios
-+	//#if TARGET_OS_IPHONE
-+	//	darwin_arm_init_thread_exception_port();
-+	//#endif
-+	setg_trampoline(setg_func, uintptr(unsafe.Pointer(ts.g)))
-+
-+	// faking funcs in go is a bit a... involved - but the following works :)
-+	fn := uintptr(unsafe.Pointer(&ts.fn))
-+	(*(*func())(unsafe.Pointer(&fn)))()
-+
-+	return nil
++func (c *chacha20poly1305) NonceSize() int {
++	return chacha20Poly1305NonceSize
 +}
 +
-+// here we will store a pointer to the provided setg func
-+var setg_func uintptr
-+
-+// x_cgo_init(G *g, void (*setg)(void*)) (runtime/cgo/gcc_linux_amd64.c)
-+// This get's called during startup, adjusts stacklo, and provides a pointer to setg_gcc for us
-+// Additionally, if we set _cgo_init to non-null, go won't do it's own TLS setup
-+// This function can't be go:systemstack since go is not in a state where the systemcheck would work.
-+//
-+//go:nosplit
-+//go:norace
-+func x_cgo_init(g *G, setg uintptr) {
-+	var size size_t
++func (c *chacha20poly1305) Overhead() int {
++	return chacha20Poly1305Overhead
++}
 +
-+	setg_func = setg
-+	size = pthread_get_stacksize_np(pthread_self())
-+	g.stacklo = uintptr(unsafe.Add(unsafe.Pointer(&size), -size+4096))
++func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Seal")
++	}
++	if uint64(len(plaintext)) > (1<<38)-64 {
++		panic("chacha20poly1305: plaintext too large")
++	}
++	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
++	if inexactOverlap(out, plaintext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpEncrypt, c.key[:], nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	if len(additionalData) > 0 {
++		var discard int32
++		if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, additionalData); err != nil {
++			panic(err)
++		}
++	}
++	var outl int32
++	if len(plaintext) > 0 {
++		if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, plaintext); err != nil {
++			panic(err)
++		}
++	}
++	var discard int32
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
++		panic(err)
++	}
++	tag := out[len(out)-chacha20Poly1305Overhead:]
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_GET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(c)
++	return ret
++}
 +
-+	//TODO: support ios
-+	//#if TARGET_OS_IPHONE
-+	//	darwin_arm_init_mach_exception_handler();
-+	//	darwin_arm_init_thread_exception_port();
-+	//	init_working_dir();
-+	//#endif
++func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
++	if len(nonce) != chacha20Poly1305NonceSize {
++		panic("chacha20poly1305: bad nonce length passed to Open")
++	}
++	if len(ciphertext) < 16 {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > (1<<38)-48 {
++		panic("chacha20poly1305: ciphertext too large")
++	}
++	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
++	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
++	ret, out := sliceForAppend(dst, len(ciphertext))
++	if inexactOverlap(out, ciphertext) {
++		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, additionalData) {
++		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	}
++	ctx, err := newCipherCtx(cipherChaCha20Poly1305, cipherModeNone, cipherOpDecrypt, c.key[:], nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_IVLEN, int32(len(nonce)), nil); err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_AEAD_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		return nil, err
++	}
++	if len(additionalData) > 0 {
++		var discard int32
++		if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, additionalData); err != nil {
++			return nil, err
++		}
++	}
++	var outl int32
++	if len(ciphertext) > 0 {
++		if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, ciphertext); err != nil {
++			return nil, err
++		}
++	}
++	var discard int32
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
++		return nil, errOpen
++	}
++	runtime.KeepAlive(c)
++	return ret[:len(dst)+len(ciphertext)], nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go
 new file mode 100644
-index 00000000000000..f6fa2328af41bc
+index 00000000000000..24615432053f01
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_libinit.go
-@@ -0,0 +1,72 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go
+@@ -0,0 +1,666 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+package fakecgo
++package openssl
 +
 +import (
-+	"syscall"
++	"crypto/cipher"
++	"errors"
++	"runtime"
++	"strconv"
++	"sync"
 +	"unsafe"
++
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+var (
-+	pthread_g pthread_key_t
++type cipherKind int8
 +
-+	runtime_init_cond = PTHREAD_COND_INITIALIZER
-+	runtime_init_mu   = PTHREAD_MUTEX_INITIALIZER
-+	runtime_init_done int
++const (
++	cipherAES128 cipherKind = iota
++	cipherAES192
++	cipherAES256
++	cipherDES
++	cipherDES3
++	cipherRC4
++	cipherChaCha20Poly1305
 +)
 +
-+//go:nosplit
-+//go:norace
-+func x_cgo_notify_runtime_init_done() {
-+	pthread_mutex_lock(&runtime_init_mu)
-+	runtime_init_done = 1
-+	pthread_cond_broadcast(&runtime_init_cond)
-+	pthread_mutex_unlock(&runtime_init_mu)
++func (c cipherKind) String() string {
++	switch c {
++	case cipherAES128:
++		return "AES-128"
++	case cipherAES192:
++		return "AES-192"
++	case cipherAES256:
++		return "AES-256"
++	case cipherDES:
++		return "DES"
++	case cipherDES3:
++		return "DES3"
++	case cipherRC4:
++		return "RC4"
++	case cipherChaCha20Poly1305:
++		return "ChaCha20-Poly1305"
++	default:
++		panic("unknown cipher kind: " + strconv.Itoa(int(c)))
++	}
 +}
 +
-+// Store the g into a thread-specific value associated with the pthread key pthread_g.
-+// And pthread_key_destructor will dropm when the thread is exiting.
-+//
-+//go:norace
-+func x_cgo_bindm(g unsafe.Pointer) {
-+	// We assume this will always succeed, otherwise, there might be extra M leaking,
-+	// when a C thread exits after a cgo call.
-+	// We only invoke this function once per thread in runtime.needAndBindM,
-+	// and the next calls just reuse the bound m.
-+	pthread_setspecific(pthread_g, g)
-+}
++type cipherMode int8
 +
-+// _cgo_try_pthread_create retries pthread_create if it fails with
-+// EAGAIN.
++const (
++	cipherModeNone cipherMode = -1
++	cipherModeECB  cipherMode = iota
++	cipherModeCBC
++	cipherModeCTR
++	cipherModeGCM
++)
++
++// cipherOp is the allowed operations for a cipher,
++// as documented in [EVP_CipherInit_ex].
 +//
-+//go:nosplit
-+//go:norace
-+func _cgo_try_pthread_create(thread *pthread_t, attr *pthread_attr_t, pfn unsafe.Pointer, arg *ThreadStart) int {
-+	var ts syscall.Timespec
-+	// tries needs to be the same type as syscall.Timespec.Nsec
-+	// but the fields are int32 on 32bit and int64 on 64bit.
-+	// tries is assigned to syscall.Timespec.Nsec in order to match its type.
-+	tries := ts.Nsec
-+	var err int
++// [EVP_CipherInit_ex]: https://www.openssl.org/docs/man3.0/man3/EVP_CipherInit_ex.html
++type cipherOp int8
 +
-+	for tries = 0; tries < 20; tries++ {
-+		// inlined this call because it ran out of stack when inlining was disabled
-+		err = int(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(pfn), uintptr(unsafe.Pointer(arg)), 0))
-+		if err == 0 {
-+			// inlined this call because it ran out of stack when inlining was disabled
-+			call5(pthread_detachABI0, uintptr(*thread), 0, 0, 0, 0)
-+			return 0
++const (
++	cipherOpNone    cipherOp = -1 // leaves the value of the previous call, if any.
++	cipherOpDecrypt cipherOp = 0
++	cipherOpEncrypt cipherOp = 1
++)
++
++// cacheCipher is a cache of cipherKind to GO_EVP_CIPHER_PTR.
++var cacheCipher sync.Map
++
++type cacheCipherKey struct {
++	kind cipherKind
++	mode cipherMode
++}
++
++// loadCipher returns a cipher object for the given k.
++func loadCipher(k cipherKind, mode cipherMode) (cipher ossl.EVP_CIPHER_PTR) {
++	if v, ok := cacheCipher.Load(cacheCipherKey{k, mode}); ok {
++		return v.(ossl.EVP_CIPHER_PTR)
++	}
++	defer func() {
++		if cipher != nil {
++			switch major() {
++			case 3, 4:
++				// On OpenSSL 3, directly operating on a EVP_CIPHER object
++				// not created by EVP_CIPHER has negative performance
++				// implications, as cipher operations will have
++				// to fetch it on every call. Better to just fetch it once here.
++				cipher, _ = ossl.EVP_CIPHER_fetch(nil, ossl.EVP_CIPHER_get0_name(cipher), nil)
++			}
 +		}
-+		if err != int(syscall.EAGAIN) {
-+			return err
++		cacheCipher.Store(cacheCipherKey{k, mode}, cipher)
++	}()
++	switch k {
++	case cipherAES128:
++		switch mode {
++		case cipherModeECB:
++			cipher = ossl.EVP_aes_128_ecb()
++		case cipherModeCBC:
++			cipher = ossl.EVP_aes_128_cbc()
++		case cipherModeCTR:
++			cipher = ossl.EVP_aes_128_ctr()
++		case cipherModeGCM:
++			cipher = ossl.EVP_aes_128_gcm()
++		}
++	case cipherAES192:
++		switch mode {
++		case cipherModeECB:
++			cipher = ossl.EVP_aes_192_ecb()
++		case cipherModeCBC:
++			cipher = ossl.EVP_aes_192_cbc()
++		case cipherModeCTR:
++			cipher = ossl.EVP_aes_192_ctr()
++		case cipherModeGCM:
++			cipher = ossl.EVP_aes_192_gcm()
++		}
++	case cipherAES256:
++		switch mode {
++		case cipherModeECB:
++			cipher = ossl.EVP_aes_256_ecb()
++		case cipherModeCBC:
++			cipher = ossl.EVP_aes_256_cbc()
++		case cipherModeCTR:
++			cipher = ossl.EVP_aes_256_ctr()
++		case cipherModeGCM:
++			cipher = ossl.EVP_aes_256_gcm()
++		}
++	case cipherDES:
++		switch mode {
++		case cipherModeECB:
++			cipher = ossl.EVP_des_ecb()
++		case cipherModeCBC:
++			cipher = ossl.EVP_des_cbc()
++		}
++	case cipherDES3:
++		switch mode {
++		case cipherModeECB:
++			cipher = ossl.EVP_des_ede3_ecb()
++		case cipherModeCBC:
++			cipher = ossl.EVP_des_ede3_cbc()
++		}
++	case cipherRC4:
++		cipher = ossl.EVP_rc4()
++	case cipherChaCha20Poly1305:
++		if ossl.EVP_chacha20_poly1305_Available() {
++			cipher = ossl.EVP_chacha20_poly1305()
 +		}
-+		ts.Sec = 0
-+		ts.Nsec = (tries + 1) * 1000 * 1000 // Milliseconds.
-+		// inlined this call because it ran out of stack when inlining was disabled
-+		call5(nanosleepABI0, uintptr(unsafe.Pointer(&ts)), 0, 0, 0, 0)
 +	}
-+	return int(syscall.EAGAIN)
++	return cipher
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
-new file mode 100644
-index 00000000000000..a79441edffbcb9
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_setenv.go
-@@ -0,0 +1,18 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
 +
-+package fakecgo
++type evpCipher struct {
++	key       []byte
++	kind      cipherKind
++	blockSize int
++}
 +
-+//go:nosplit
-+//go:norace
-+func x_cgo_setenv(arg *[2]*byte) {
-+	setenv(arg[0], arg[1], 1)
++func newEVPCipher(key []byte, kind cipherKind) (*evpCipher, error) {
++	cipher := loadCipher(kind, cipherModeECB)
++	if cipher == nil {
++		return nil, errors.New("crypto/cipher: unsupported cipher: " + kind.String())
++	}
++	c := &evpCipher{key: make([]byte, len(key)), kind: kind}
++	copy(c.key, key)
++	c.blockSize = int(ossl.EVP_CIPHER_get_block_size(cipher))
++	return c, nil
 +}
 +
-+//go:nosplit
-+//go:norace
-+func x_cgo_unsetenv(arg *[1]*byte) {
-+	unsetenv(arg[0])
++func (c *evpCipher) encrypt(dst, src []byte) error {
++	if len(src) < c.blockSize {
++		return errors.New("input not full block")
++	}
++	if len(dst) < c.blockSize {
++		return errors.New("output not full block")
++	}
++	// Only check for overlap between the parts of src and dst that will actually be used.
++	// This matches Go standard library behavior.
++	if inexactOverlap(dst[:c.blockSize], src[:c.blockSize]) {
++		return errors.New("invalid buffer overlap")
++	}
++	enc_ctx, err := newCipherCtx(c.kind, cipherModeECB, cipherOpEncrypt, c.key, nil)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_CIPHER_CTX_free(enc_ctx)
++
++	var outl int32
++	if _, err := ossl.EVP_EncryptUpdate(enc_ctx, dst[:c.blockSize], &outl, src[:c.blockSize]); err != nil {
++		return err
++	}
++	runtime.KeepAlive(c)
++	return nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
-new file mode 100644
-index 00000000000000..1d59e7f6b628d1
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/go_util.go
-@@ -0,0 +1,38 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo && darwin
++func (c *evpCipher) decrypt(dst, src []byte) error {
++	if len(src) < c.blockSize {
++		return errors.New("input not full block")
++	}
++	if len(dst) < c.blockSize {
++		return errors.New("output not full block")
++	}
++	// Only check for overlap between the parts of src and dst that will actually be used.
++	// This matches Go standard library behavior.
++	if inexactOverlap(dst[:c.blockSize], src[:c.blockSize]) {
++		return errors.New("invalid buffer overlap")
++	}
++	dec_ctx, err := newCipherCtx(c.kind, cipherModeECB, cipherOpDecrypt, c.key, nil)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_CIPHER_CTX_free(dec_ctx)
 +
-+package fakecgo
++	if _, err := ossl.EVP_CIPHER_CTX_set_padding(dec_ctx, 0); err != nil {
++		return err
++	}
 +
-+import "unsafe"
++	var outl int32
++	ossl.EVP_DecryptUpdate(dec_ctx, dst[:c.blockSize], &outl, src[:c.blockSize])
++	runtime.KeepAlive(c)
++	return nil
++}
 +
-+// _cgo_thread_start is split into three parts in cgo since only one part is system dependent (keep it here for easier handling)
++type cipherCBC struct {
++	ctx       ossl.EVP_CIPHER_CTX_PTR
++	blockSize int
++}
 +
-+// _cgo_thread_start(ThreadStart *arg) (runtime/cgo/gcc_util.c)
-+// This get's called instead of the go code for creating new threads
-+// -> pthread_* stuff is used, so threads are setup correctly for C
-+// If this is missing, TLS is only setup correctly on thread 1!
-+// This function should be go:systemstack instead of go:nosplit (but that requires runtime)
-+//
-+//go:nosplit
-+//go:norace
-+func x_cgo_thread_start(arg *ThreadStart) {
-+	var ts *ThreadStart
-+	// Make our own copy that can persist after we return.
-+	//	_cgo_tsan_acquire();
-+	ts = (*ThreadStart)(malloc(unsafe.Sizeof(*ts)))
-+	//	_cgo_tsan_release();
-+	if ts == nil {
-+		println("fakecgo: out of memory in thread_start")
-+		abort()
++func (c *cipherCBC) finalize() {
++	ossl.EVP_CIPHER_CTX_free(c.ctx)
++}
++
++func (x *cipherCBC) BlockSize() int { return x.blockSize }
++
++func (x *cipherCBC) CryptBlocks(dst, src []byte) {
++	if inexactOverlap(dst, src) {
++		panic("crypto/cipher: invalid buffer overlap")
 +	}
-+	// *ts = *arg would cause a writebarrier so copy using slices
-+	const ptrSize = unsafe.Sizeof(uintptr(0))
-+	s1 := unsafe.Slice((*uintptr)(unsafe.Pointer(ts)), unsafe.Sizeof(*ts)/ptrSize)
-+	s2 := unsafe.Slice((*uintptr)(unsafe.Pointer(arg)), unsafe.Sizeof(*arg)/ptrSize)
-+	for i := range s2 {
-+		s1[i] = s2[i]
++	if len(src)%x.blockSize != 0 {
++		panic("crypto/cipher: input not full blocks")
++	}
++	if len(dst) < len(src) {
++		panic("crypto/cipher: output smaller than input")
++	}
++	if len(src) > 0 {
++		var outl int32
++		if _, err := ossl.EVP_CipherUpdate(x.ctx, dst, &outl, src); err != nil {
++			panic("crypto/cipher: " + err.Error())
++		}
++		runtime.KeepAlive(x)
 +	}
-+	_cgo_sys_thread_start(ts) // OS-dependent half
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
-new file mode 100644
-index 00000000000000..76f7ef6dc58c7c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/iscgo.go
-@@ -0,0 +1,19 @@
-+// Copyright 2010 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
 +
-+//go:build !cgo && darwin
++func (x *cipherCBC) SetIV(iv []byte) {
++	if len(iv) != x.blockSize {
++		panic("crypto/cipher: incorrect length IV")
++	}
++	if _, err := ossl.EVP_CipherInit_ex(x.ctx, nil, nil, nil, base(iv), int32(cipherOpNone)); err != nil {
++		panic("crypto/cipher: " + err.Error())
++	}
++}
 +
-+// The runtime package contains an uninitialized definition
-+// for runtime·iscgo. Override it to tell the runtime we're here.
-+// There are various function pointers that should be set too,
-+// but those depend on dynamic linker magic to get initialized
-+// correctly, and sometimes they break. This variable is a
-+// backup: it depends only on old C style static linking rules.
++func (c *evpCipher) newCBC(iv []byte, op cipherOp) cipher.BlockMode {
++	ctx, err := newCipherCtx(c.kind, cipherModeCBC, op, c.key, iv)
++	if err != nil {
++		panic(err)
++	}
++	x := &cipherCBC{ctx: ctx, blockSize: c.blockSize}
++	runtime.SetFinalizer(x, (*cipherCBC).finalize)
++	if _, err := ossl.EVP_CIPHER_CTX_set_padding(x.ctx, 0); err != nil {
++		panic("crypto/cipher: " + err.Error())
++	}
++	return x
++}
 +
-+package fakecgo
++type cipherCTR struct {
++	ctx ossl.EVP_CIPHER_CTX_PTR
++}
 +
-+import _ "unsafe" // for go:linkname
++func (x *cipherCTR) XORKeyStream(dst, src []byte) {
++	if inexactOverlap(dst, src) {
++		panic("crypto/cipher: invalid buffer overlap")
++	}
++	if len(dst) < len(src) {
++		panic("crypto/cipher: output smaller than input")
++	}
++	if len(src) == 0 {
++		return
++	}
++	var outl int32
++	if _, err := ossl.EVP_EncryptUpdate(x.ctx, dst, &outl, src); err != nil {
++		panic("crypto/cipher: " + err.Error())
++	}
++	runtime.KeepAlive(x)
++}
 +
-+//go:linkname _iscgo runtime.iscgo
-+var _iscgo bool = true
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
-new file mode 100644
-index 00000000000000..001b698842a36c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo.go
-@@ -0,0 +1,39 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++func (c *evpCipher) newCTR(iv []byte) cipher.Stream {
++	ctx, err := newCipherCtx(c.kind, cipherModeCTR, cipherOpEncrypt, c.key, iv)
++	if err != nil {
++		panic(err)
++	}
++	x := &cipherCTR{ctx: ctx}
++	runtime.SetFinalizer(x, (*cipherCTR).finalize)
++	return x
++}
 +
-+//go:build !cgo && darwin
++func (c *cipherCTR) finalize() {
++	ossl.EVP_CIPHER_CTX_free(c.ctx)
++}
 +
-+package fakecgo
++type cipherGCMTLS uint8
 +
-+type (
-+	size_t uintptr
-+	// Sources:
-+	// Darwin (32 bytes) - https://github.com/apple/darwin-xnu/blob/2ff845c2e033bd0ff64b5b6aa6063a1f8f65aa32/bsd/sys/_types.h#L74
-+	// FreeBSD (32 bytes) - https://github.com/DoctorWkt/xv6-freebsd/blob/d2a294c2a984baed27676068b15ed9a29b06ab6f/include/signal.h#L98C9-L98C21
-+	// Linux (128 bytes) - https://github.com/torvalds/linux/blob/ab75170520d4964f3acf8bb1f91d34cbc650688e/arch/x86/include/asm/signal.h#L25
-+	sigset_t       [128]byte
-+	pthread_attr_t [64]byte
-+	pthread_t      int
-+	pthread_key_t  uint64
++const (
++	cipherGCMTLSNone cipherGCMTLS = iota
++	cipherGCMTLS12
++	cipherGCMTLS13
 +)
 +
-+// for pthread_sigmask:
-+
-+type sighow int32
++type cipherGCM struct {
++	c   *evpCipher
++	tls cipherGCMTLS
++	// minNextNonce is the minimum value that the next nonce can be, enforced by
++	// all TLS modes.
++	minNextNonce uint64
++	// mask is the nonce mask used in TLS 1.3 mode.
++	mask uint64
++	// maskInitialized is true if mask has been initialized. This happens during
++	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
++	maskInitialized bool
++	blockSize       int
++}
 +
 +const (
-+	SIG_BLOCK   sighow = 0
-+	SIG_UNBLOCK sighow = 1
-+	SIG_SETMASK sighow = 2
++	aesBlockSize         = 16
++	gcmTagSize           = 16
++	gcmStandardNonceSize = 12
++	// TLS 1.2 additional data is constructed as:
++	//
++	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
++	gcmTls12AddSize = 13
++	// TLS 1.3 additional data is constructed as:
++	//
++	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
++	gcmTls13AddSize      = 5
++	gcmTlsFixedNonceSize = 4
 +)
-+
-+type G struct {
-+	stacklo uintptr
-+	stackhi uintptr
++
++type noGCM struct {
++	*evpCipher
 +}
 +
-+type ThreadStart struct {
-+	g   *G
-+	tls *uintptr
-+	fn  uintptr
++func (g *noGCM) BlockSize() int {
++	return g.blockSize
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
-new file mode 100644
-index 00000000000000..ecdcb2e7852560
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/libcgo_darwin.go
-@@ -0,0 +1,26 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
 +
-+//go:build !cgo
++func (g *noGCM) Encrypt(dst, src []byte) {
++	g.encrypt(dst, src)
++}
 +
-+package fakecgo
++func (g *noGCM) Decrypt(dst, src []byte) {
++	g.decrypt(dst, src)
++}
 +
-+type (
-+	pthread_mutex_t struct {
-+		sig    int64
-+		opaque [56]byte
++func (c *evpCipher) newGCMChecked(nonceSize, tagSize int) (cipher.AEAD, error) {
++	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
++		return nil, errors.New("crypto/cipher: GCM tag and nonce sizes can't be non-standard at the same time")
 +	}
-+	pthread_cond_t struct {
-+		sig    int64
-+		opaque [40]byte
++	// Fall back to standard library for GCM with non-standard nonce or tag size.
++	if nonceSize != gcmStandardNonceSize {
++		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
 +	}
-+)
-+
-+var (
-+	PTHREAD_COND_INITIALIZER  = pthread_cond_t{sig: 0x3CB0B1BB}
-+	PTHREAD_MUTEX_INITIALIZER = pthread_mutex_t{sig: 0x32AAABA7}
-+)
-+
-+type stack_t struct {
-+	/* not implemented */
++	if tagSize != gcmTagSize {
++		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++	}
++	return c.newGCM(cipherGCMTLSNone)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
-new file mode 100644
-index 00000000000000..e761fecfb89280
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/setenv.go
-@@ -0,0 +1,19 @@
-+// Copyright 2011 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo && darwin
-+
-+package fakecgo
 +
-+import _ "unsafe" // for go:linkname
-+
-+//go:linkname x_cgo_setenv_trampoline x_cgo_setenv_trampoline
-+//go:linkname _cgo_setenv runtime._cgo_setenv
-+var x_cgo_setenv_trampoline byte
-+var _cgo_setenv = &x_cgo_setenv_trampoline
++func (c *evpCipher) newGCM(tls cipherGCMTLS) (cipher.AEAD, error) {
++	g := &cipherGCM{c: c, tls: tls, blockSize: c.blockSize}
++	return g, nil
++}
 +
-+//go:linkname x_cgo_unsetenv_trampoline x_cgo_unsetenv_trampoline
-+//go:linkname _cgo_unsetenv runtime._cgo_unsetenv
-+var x_cgo_unsetenv_trampoline byte
-+var _cgo_unsetenv = &x_cgo_unsetenv_trampoline
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
-new file mode 100644
-index 00000000000000..098f56ce5e6b77
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_amd64.s
-@@ -0,0 +1,107 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++func (g *cipherGCM) NonceSize() int {
++	return gcmStandardNonceSize
++}
 +
-+//go:build !cgo && darwin
++func (g *cipherGCM) Overhead() int {
++	return gcmTagSize
++}
 +
-+/*
-+trampoline for emulating required C functions for cgo in go (see cgo.go)
-+(we convert cdecl calling convention to go and vice-versa)
++func (g *cipherGCM) Seal(dst, nonce, plaintext, aad []byte) []byte {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if uint64(len(plaintext)) > ((1<<32)-2)*uint64(g.blockSize) || len(plaintext)+gcmTagSize < len(plaintext) {
++		panic("cipher: message too large for GCM")
++	}
++	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
++		panic("cipher: message too large for buffer")
++	}
++	if g.tls != cipherGCMTLSNone {
++		if g.tls == cipherGCMTLS12 && len(aad) != gcmTls12AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
++		} else if g.tls == cipherGCMTLS13 && len(aad) != gcmTls13AddSize {
++			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
++		}
++		counter := bigEndianUint64(nonce[gcmTlsFixedNonceSize:])
++		if g.tls == cipherGCMTLS13 {
++			// In TLS 1.3, the counter in the nonce has a mask and requires
++			// further decoding.
++			if !g.maskInitialized {
++				// According to TLS 1.3 nonce construction details at
++				// https://tools.ietf.org/html/rfc8446#section-5.3:
++				//
++				//   the first record transmitted under a particular traffic
++				//   key MUST use sequence number 0.
++				//
++				//   The padded sequence number is XORed with [a mask].
++				//
++				//   The resulting quantity (of length iv_length) is used as
++				//   the per-record nonce.
++				//
++				// We need to convert from the given nonce to sequence numbers
++				// to keep track of minNextNonce and enforce the counter
++				// maximum. On the first call, we know counter^mask is 0^mask,
++				// so we can simply store it as the mask.
++				g.mask = counter
++				g.maskInitialized = true
++			}
++			counter ^= g.mask
++		}
++		// BoringCrypto enforces strictly monotonically increasing explicit nonces
++		// and to fail after 2^64 - 1 keys as per FIPS 140-2 IG A.5,
++		// but OpenSSL does not perform this check, so it is implemented here.
++		const maxUint64 = 1<<64 - 1
++		if counter == maxUint64 {
++			panic("cipher: nonce counter must be less than 2^64 - 1")
++		}
++		if counter < g.minNextNonce {
++			panic("cipher: nonce counter must be strictly monotonically increasing")
++		}
++		defer func() {
++			g.minNextNonce = counter + 1
++		}()
++	}
 +
-+C Calling convention cdecl used here (we only need integer args):
-+1. arg: DI
-+2. arg: SI
-+3. arg: DX
-+4. arg: CX
-+5. arg: R8
-+6. arg: R9
-+We don't need floats with these functions -> AX=0
-+return value will be in AX
-+temporary register is R11
-+*/
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_amd64.h"
++	// Make room in dst to append plaintext+overhead.
++	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
 +
-+// these trampolines map the gcc ABI to Go ABI and then calls into the Go equivalent functions.
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, plaintext) {
++		panic("cipher: invalid buffer overlap")
++	}
 +
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $16
-+	MOVQ DI, AX
-+	MOVQ SI, BX
-+	MOVQ ·x_cgo_init_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
++	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
++	// Encrypt additional data.
++	// When sealing a TLS payload, OpenSSL app sets the additional data using
++	// '_EVP_CIPHER_CTX_ctrl(g.ctx, _EVP_CTRL_AEAD_TLS1_AAD, _EVP_AEAD_TLS1_AAD_LEN, base(additionalData))'.
++	// This makes the explicit nonce component to monotonically increase on every Seal operation without
++	// relying in the explicit nonce being securely set externally,
++	// and it also gives some interesting speed gains.
++	// Unfortunately we can't use it because Go expects AEAD.Seal to honor the provided nonce.
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
++		panic(err)
++	}
++	if len(plaintext) != int(outl) {
++		panic("cipher: incorrect length returned from GCM EncryptUpdate")
++	}
++	discard = 0
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(g)
++	return ret
++}
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_thread_start_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
++func (g *cipherGCM) SealWithRandomNonce(out, nonce, plaintext, aad []byte) {
++	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
++		panic("crypto/cipher: message too large for GCM")
++	}
++	if len(nonce) != gcmStandardNonceSize {
++		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	}
++	if len(out) != len(plaintext)+gcmTagSize {
++		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	}
++	if inexactOverlap(out, plaintext) {
++		panic("crypto/cipher: invalid buffer overlap of output and input")
++	}
++	if anyOverlap(out, aad) {
++		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	}
 +
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_setenv_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
++	if g.tls != cipherGCMTLSNone {
++		panic("cipher: encryption failed")
++	}
 +
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $8
-+	MOVQ DI, AX
-+	MOVQ ·x_cgo_unsetenv_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
-+	RET
++	RandReader.Read(nonce)
++	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
 +
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0
-+	JMP ·x_cgo_notify_runtime_init_done(SB)
++	if _, err := ossl.EVP_EncryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		panic(err)
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_EncryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_EncryptUpdate(ctx, out, &outl, sliceNeverNil(plaintext)); err != nil {
++		panic(err)
++	}
++	if len(plaintext) != int(outl) {
++		panic("cipher: incorrect length returned from GCM EncryptUpdate")
++	}
++	discard = 0
++	if _, err := ossl.EVP_EncryptFinal_ex(ctx, out[outl:], &discard); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_GET_TAG, 16, unsafe.Pointer(base(out[outl:]))); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(g)
++}
 +
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	JMP ·x_cgo_bindm(SB)
++var errOpen = errors.New("cipher: message authentication failed")
 +
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVQ G+8(FP), DI
-+	MOVQ setg+0(FP), R11
-+	XORL AX, AX
-+	CALL R11
-+	RET
++func (g *cipherGCM) Open(dst, nonce, ciphertext, aad []byte) (_ []byte, err error) {
++	if len(nonce) != gcmStandardNonceSize {
++		panic("cipher: incorrect nonce length given to GCM")
++	}
++	if len(ciphertext) < gcmTagSize {
++		return nil, errOpen
++	}
++	if uint64(len(ciphertext)) > ((1<<32)-2)*uint64(g.blockSize)+gcmTagSize {
++		return nil, errOpen
++	}
++	// BoringCrypto does not do any TLS check when decrypting, neither do we.
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0
-+	// See crosscall2.
-+	PUSH_REGS_HOST_TO_ABI0()
++	tag := ciphertext[len(ciphertext)-gcmTagSize:]
++	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
 +
-+	// X15 is designated by Go as a fixed zero register.
-+	// Calling directly into ABIInternal, ensure it is zero.
-+	PXOR X15, X15
++	// Make room in dst to append ciphertext without tag.
++	ret, out := sliceForAppend(dst, len(ciphertext))
 +
-+	MOVQ DI, AX
-+	MOVQ ·threadentry_call(SB), R11
-+	MOVQ (R11), R11
-+	CALL R11
++	// Check delayed until now to make sure len(dst) is accurate.
++	if inexactOverlap(out, ciphertext) {
++		panic("cipher: invalid buffer overlap")
++	}
 +
-+	POP_REGS_HOST_TO_ABI0()
-+	RET
++	ctx, err := newCipherCtx(g.c.kind, cipherModeGCM, cipherOpNone, g.c.key, nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_CIPHER_CTX_free(ctx)
 +
-+TEXT ·call5(SB), NOSPLIT, $0-56
-+	MOVQ fn+0(FP), R11
-+	MOVQ a1+8(FP), DI
-+	MOVQ a2+16(FP), SI
-+	MOVQ a3+24(FP), DX
-+	MOVQ a4+32(FP), CX
-+	MOVQ a5+40(FP), R8
++	defer func() {
++		if err != nil {
++			// Zero output buffer on error.
++			for i := range out {
++				out[i] = 0
++			}
++		}
++	}()
++	if _, err := ossl.EVP_DecryptInit_ex(ctx, nil, nil, nil, base(nonce)); err != nil {
++		return nil, errOpen
++	}
++	if _, err := ossl.EVP_CIPHER_CTX_ctrl(ctx, ossl.EVP_CTRL_GCM_SET_TAG, 16, unsafe.Pointer(base(tag))); err != nil {
++		return nil, errOpen
++	}
++	var outl, discard int32
++	if _, err := ossl.EVP_DecryptUpdate(ctx, nil, &discard, sliceNeverNil(aad)); err != nil {
++		return nil, errOpen
++	}
++	if _, err := ossl.EVP_DecryptUpdate(ctx, out, &outl, sliceNeverNil(ciphertext)); err != nil {
++		return nil, errOpen
++	}
++	if len(ciphertext) != int(outl) {
++		return nil, errOpen
++	}
++	discard = 0
++	if _, err := ossl.EVP_DecryptFinal_ex(ctx, out[outl:], &discard); err != nil {
++		return nil, errOpen
++	}
++	runtime.KeepAlive(g)
++	return ret, nil
++}
 +
-+	XORL AX, AX // no floats
++// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
++func sliceForAppend(in []byte, n int) (head, tail []byte) {
++	if total := len(in) + n; cap(in) >= total {
++		head = in[:total]
++	} else {
++		head = make([]byte, total)
++		copy(head, in)
++	}
++	tail = head[len(in):]
++	return
++}
 +
-+	PUSHQ BP       // save BP
-+	MOVQ  SP, BP   // save SP inside BP bc BP is callee-saved
-+	SUBQ  $16, SP  // allocate space for alignment
-+	ANDQ  $-16, SP // align on 16 bytes for SSE
++func newCipherCtx(kind cipherKind, mode cipherMode, encrypt cipherOp, key, iv []byte) (_ ossl.EVP_CIPHER_CTX_PTR, err error) {
++	cipher := loadCipher(kind, mode)
++	if cipher == nil {
++		panic("crypto/cipher: unsupported cipher: " + kind.String())
++	}
++	ctx, err := ossl.EVP_CIPHER_CTX_new()
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			ossl.EVP_CIPHER_CTX_free(ctx)
++		}
++	}()
++	if kind == cipherRC4 {
++		// RC4 cipher supports a variable key length.
++		// We need to set the key length before setting the key,
++		// and to do so we need to have an initialized cipher ctx.
++		if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, nil, nil, int32(encrypt)); err != nil {
++			return nil, err
++		}
++		if _, err := ossl.EVP_CIPHER_CTX_set_key_length(ctx, int32(len(key))); err != nil {
++			return nil, err
++		}
++		// Pass nil to the next call to EVP_CipherInit_ex to avoid resetting ctx's cipher.
++		cipher = nil
++	}
++	if _, err := ossl.EVP_CipherInit_ex(ctx, cipher, nil, base(key), base(iv), int32(encrypt)); err != nil {
++		return nil, err
++	}
++	return ctx, nil
++}
 +
-+	CALL R11
++// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
 +
-+	MOVQ BP, SP // get SP back
-+	POPQ BP     // restore BP
++func anyOverlap(x, y []byte) bool {
++	return len(x) > 0 && len(y) > 0 &&
++		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
++		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++}
 +
-+	MOVQ AX, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
++func inexactOverlap(x, y []byte) bool {
++	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
++		return false
++	}
++	return anyOverlap(x, y)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/const.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/const.go
 new file mode 100644
-index 00000000000000..970f3fd9a1ef0d
+index 00000000000000..7817e37ffdc40f
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/trampolines_arm64.s
-@@ -0,0 +1,81 @@
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
-+
-+#include "textflag.h"
-+#include "go_asm.h"
-+#include "abi_arm64.h"
-+
-+// These trampolines map the gcc ABI to Go ABIInternal and then calls into the Go equivalent functions.
-+// Note that C arguments are passed in R0-R7, which matches Go ABIInternal for the first eight arguments.
-+// R9 is used as a temporary register.
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/const.go
+@@ -0,0 +1,109 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+TEXT x_cgo_init_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_init_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
++package openssl
 +
-+TEXT x_cgo_thread_start_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_thread_start_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
++import "unsafe"
 +
-+TEXT x_cgo_setenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_setenv_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
++// cString is a null-terminated string,
++// akin to C's char*.
++type cString string
 +
-+TEXT x_cgo_unsetenv_trampoline(SB), NOSPLIT, $0-0
-+	MOVD ·x_cgo_unsetenv_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	RET
++// str returns the string value.
++func (s cString) str() string {
++	return string(s)
++}
 +
-+TEXT x_cgo_notify_runtime_init_done_trampoline(SB), NOSPLIT, $0-0
-+	CALL ·x_cgo_notify_runtime_init_done(SB)
-+	RET
++// ptr returns a pointer to the string data.
++// It panics if the string is not null-terminated.
++//
++// The memory pointed to by the returned pointer should
++// not be modified and it must only be passed to
++// "const char*" parameters. Any attempt to modify it
++// will result in a runtime panic, as Go strings are
++// allocated in read-only memory.
++func (s cString) ptr() *byte {
++	if len(s) == 0 {
++		return nil
++	}
++	if s[len(s)-1] != 0 {
++		panic("must be null-terminated")
++	}
++	return unsafe.StringData(string(s))
++}
 +
-+TEXT x_cgo_bindm_trampoline(SB), NOSPLIT, $0
-+	CALL ·x_cgo_bindm(SB)
-+	RET
++const ( //checkheader:ignore
++	// Key types
++	_KeyTypeRSA              cString = "RSA\x00"
++	_KeyTypeEC               cString = "EC\x00"
++	_KeyTypeED25519          cString = "ED25519\x00"
++	_KeyTypeX25519           cString = "X25519\x00"
++	_KeyTypeMLKEM768         cString = "ML-KEM-768\x00"
++	_KeyTypeMLKEM1024        cString = "ML-KEM-1024\x00"
++	_KeyTypeMLDSA44          cString = "ML-DSA-44\x00"
++	_KeyTypeMLDSA65          cString = "ML-DSA-65\x00"
++	_KeyTypeMLDSA87          cString = "ML-DSA-87\x00"
++	_KeyTypeChacha20Poly1305 cString = "CHACHA20-POLY1305\x00"
 +
-+// func setg_trampoline(setg uintptr, g uintptr)
-+TEXT ·setg_trampoline(SB), NOSPLIT, $0-16
-+	MOVD G+8(FP), R0
-+	MOVD setg+0(FP), R9
-+	CALL R9
-+	RET
++	// Digest names
++	_DigestNameSHAKE128 cString = "SHAKE-128\x00"
++	_DigestNameSHAKE256 cString = "SHAKE-256\x00"
 +
-+TEXT threadentry_trampoline(SB), NOSPLIT, $0-0
-+	// See crosscall2.
-+	SUB  $(8*24), RSP
-+	STP  (R0, R1), (8*1)(RSP)
-+	MOVD R3, (8*3)(RSP)
++	// KDF names
++	_OSSL_KDF_NAME_HKDF      cString = "HKDF\x00"
++	_OSSL_KDF_NAME_PBKDF2    cString = "PBKDF2\x00"
++	_OSSL_KDF_NAME_TLS1_PRF  cString = "TLS1-PRF\x00"
++	_OSSL_KDF_NAME_TLS13_KDF cString = "TLS13-KDF\x00"
++	_OSSL_MAC_NAME_HMAC      cString = "HMAC\x00"
 +
-+	SAVE_R19_TO_R28(8*4)
-+	SAVE_F8_TO_F15(8*14)
++	// KDF parameters
++	_OSSL_KDF_PARAM_DIGEST   cString = "digest\x00"
++	_OSSL_KDF_PARAM_SECRET   cString = "secret\x00"
++	_OSSL_KDF_PARAM_SEED     cString = "seed\x00"
++	_OSSL_KDF_PARAM_KEY      cString = "key\x00"
++	_OSSL_KDF_PARAM_PASSWORD cString = "pass\x00"
++	_OSSL_KDF_PARAM_ITER     cString = "iter\x00"
++	_OSSL_KDF_PARAM_PKCS5    cString = "pkcs5\x00"
++	_OSSL_KDF_PARAM_INFO     cString = "info\x00"
++	_OSSL_KDF_PARAM_SALT     cString = "salt\x00"
++	_OSSL_KDF_PARAM_MODE     cString = "mode\x00"
++
++	// KDF FIPS parameters
++	_OSSL_KDF_PARAM_FIPS_KEY_CHECK cString = "key-check\x00"
 +
-+	MOVD ·threadentry_call(SB), R9
-+	MOVD (R9), R9
-+	CALL R9
-+	MOVD $0, R0                    // TODO: get the return value from threadentry
++	// TLS3-KDF parameters
++	_OSSL_KDF_PARAM_PREFIX cString = "prefix\x00"
++	_OSSL_KDF_PARAM_LABEL  cString = "label\x00"
++	_OSSL_KDF_PARAM_DATA   cString = "data\x00"
 +
-+	RESTORE_R19_TO_R28(8*4)
-+	RESTORE_F8_TO_F15(8*14)
-+	ADD $(8*24), RSP
-+	RET
++	// PKEY parameters
++	_OSSL_PKEY_PARAM_PUB_KEY            cString = "pub\x00"
++	_OSSL_PKEY_PARAM_PRIV_KEY           cString = "priv\x00"
++	_OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY cString = "encoded-pub-key\x00"
++	_OSSL_PKEY_PARAM_GROUP_NAME         cString = "group\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_X           cString = "qx\x00"
++	_OSSL_PKEY_PARAM_EC_PUB_Y           cString = "qy\x00"
++	_OSSL_PKEY_PARAM_FFC_PBITS          cString = "pbits\x00"
++	_OSSL_PKEY_PARAM_FFC_QBITS          cString = "qbits\x00"
++	_OSSL_PKEY_PARAM_RSA_N              cString = "n\x00"
++	_OSSL_PKEY_PARAM_RSA_E              cString = "e\x00"
++	_OSSL_PKEY_PARAM_RSA_D              cString = "d\x00"
++	_OSSL_PKEY_PARAM_FFC_P              cString = "p\x00"
++	_OSSL_PKEY_PARAM_FFC_Q              cString = "q\x00"
++	_OSSL_PKEY_PARAM_FFC_G              cString = "g\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR1        cString = "rsa-factor1\x00"
++	_OSSL_PKEY_PARAM_RSA_FACTOR2        cString = "rsa-factor2\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT1      cString = "rsa-exponent1\x00"
++	_OSSL_PKEY_PARAM_RSA_EXPONENT2      cString = "rsa-exponent2\x00"
++	_OSSL_PKEY_PARAM_RSA_COEFFICIENT1   cString = "rsa-coefficient1\x00"
++	_OSSL_PKEY_PARAM_ML_KEM_SEED        cString = "seed\x00"
++	_OSSL_PKEY_PARAM_ML_DSA_SEED        cString = "seed\x00"
 +
-+TEXT ·call5(SB), NOSPLIT, $0-0
-+	MOVD fn+0(FP), R9
-+	MOVD a1+8(FP), R0
-+	MOVD a2+16(FP), R1
-+	MOVD a3+24(FP), R2
-+	MOVD a4+32(FP), R3
-+	MOVD a5+40(FP), R4
-+	CALL R9
-+	MOVD R0, ret+48(FP)
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
++	// Signature parameters
++	_OSSL_SIGNATURE_PARAM_CONTEXT_STRING cString = "context-string\x00"
++	_OSSL_SIGNATURE_PARAM_MU             cString = "mu\x00"
++
++	// MAC parameters
++	_OSSL_MAC_PARAM_DIGEST         cString = "digest\x00"
++	_OSSL_MAC_PARAM_FIPS_KEY_CHECK cString = "key-check\x00"
++)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cshake.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cshake.go
 new file mode 100644
-index 00000000000000..3f720df236e392
+index 00000000000000..ece9605829f12d
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols.go
-@@ -0,0 +1,165 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo && darwin
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cshake.go
+@@ -0,0 +1,256 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+package fakecgo
++package openssl
 +
 +import (
-+	"syscall"
-+	"unsafe"
++	"runtime"
++	"strconv"
++	"sync"
++
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+//go:nosplit
-+//go:norace
-+func malloc(size uintptr) unsafe.Pointer {
-+	ret := call5(mallocABI0, uintptr(size), 0, 0, 0, 0)
-+	// this indirection is to avoid go vet complaining about possible misuse of unsafe.Pointer
-+	return *(*unsafe.Pointer)(unsafe.Pointer(&ret))
++// shakeOneShot applies the SHAKE extendable output function to data and
++// writes the output to out.
++func shakeOneShot(secuirtyBits int, data []byte, out []byte) {
++	// Can't use EVP_Digest because it doesn't support output lengths
++	// larger than the block size, while crypto/sha3 supports any length.
++	alg := loadShake(secuirtyBits)
++	if alg == nil {
++		panic("openssl: unsupported SHAKE" + strconv.Itoa(secuirtyBits) + " function")
++	}
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestUpdate(ctx, data); err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestFinalXOF(ctx, out); err != nil {
++		panic(err)
++	}
 +}
 +
-+//go:nosplit
-+//go:norace
-+func free(ptr unsafe.Pointer) {
-+	call5(freeABI0, uintptr(ptr), 0, 0, 0, 0)
++// SumSHAKE128 applies the SHAKE128 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE128(data []byte, length int) []byte {
++	out := make([]byte, length)
++	shakeOneShot(128, data, out)
++	return out
 +}
 +
-+//go:nosplit
-+//go:norace
-+func setenv(name *byte, value *byte, overwrite int32) int32 {
-+	return int32(call5(setenvABI0, uintptr(unsafe.Pointer(name)), uintptr(unsafe.Pointer(value)), uintptr(overwrite), 0, 0))
++// SumSHAKE256 applies the SHAKE256 extendable output function to data and
++// returns an output of the given length in bytes.
++func SumSHAKE256(data []byte, length int) []byte {
++	out := make([]byte, length)
++	shakeOneShot(256, data, out)
++	return out
 +}
 +
-+//go:nosplit
-+//go:norace
-+func unsetenv(name *byte) int32 {
-+	return int32(call5(unsetenvABI0, uintptr(unsafe.Pointer(name)), 0, 0, 0, 0))
-+}
++var shakeSupported sync.Map
 +
-+//go:nosplit
-+//go:norace
-+func sigfillset(set *sigset_t) int32 {
-+	return int32(call5(sigfillsetABI0, uintptr(unsafe.Pointer(set)), 0, 0, 0, 0))
-+}
++var hasDigestSqueeze = sync.OnceValue(ossl.EVP_DigestSqueeze_Available)
 +
-+//go:nosplit
-+//go:norace
-+func nanosleep(ts *syscall.Timespec, rem *syscall.Timespec) int32 {
-+	return int32(call5(nanosleepABI0, uintptr(unsafe.Pointer(ts)), uintptr(unsafe.Pointer(rem)), 0, 0, 0))
++// SupportsSHAKE returns true if the SHAKE extendable output functions
++// with the given securityBits are supported.
++func SupportsSHAKE(securityBits int) bool {
++	if !hasDigestSqueeze() {
++		// SHAKE MD's are supported since OpenSSL 1.1.1, but
++		// EVP_DigestSqueeze (added in OpenSSL 3.3) is required to
++		// implement [sha3.SHAKE]'s streaming Read API.
++		return false
++	}
++	if v, ok := shakeSupported.Load(securityBits); ok {
++		return v.(bool)
++	}
++	alg := loadShake(securityBits)
++	if alg == nil {
++		shakeSupported.Store(securityBits, false)
++		return false
++	}
++	// EVP_MD objects can be non-nil but the underlying provider may not
++	// support EVP_DigestSqueeze. We need to test it.
++	var supported bool
++	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
++		defer ossl.EVP_MD_CTX_free(ctx)
++		if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err == nil {
++			var tmp [1]byte
++			_, err := ossl.EVP_DigestSqueeze(ctx, tmp[:])
++			supported = err == nil
++		}
++	}
++	shakeSupported.Store(securityBits, supported)
++	return supported
 +}
 +
-+//go:nosplit
-+//go:norace
-+func abort() {
-+	call5(abortABI0, 0, 0, 0, 0, 0)
++// SupportsCSHAKE returns true if the CSHAKE extendable output functions
++// with the given securityBits are supported.
++func SupportsCSHAKE(securityBits int) bool {
++	// OpenSSL tracker issue https://github.com/openssl/openssl/issues/28358
++	return false
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_attr_init(attr *pthread_attr_t) int32 {
-+	return int32(call5(pthread_attr_initABI0, uintptr(unsafe.Pointer(attr)), 0, 0, 0, 0))
++// SHAKE is an instance of a SHAKE extendable output function.
++type SHAKE struct {
++	alg        *shakeAlgorithm
++	ctx        ossl.EVP_MD_CTX_PTR
++	lastXofLen int
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_create(thread *pthread_t, attr *pthread_attr_t, start unsafe.Pointer, arg unsafe.Pointer) int32 {
-+	return int32(call5(pthread_createABI0, uintptr(unsafe.Pointer(thread)), uintptr(unsafe.Pointer(attr)), uintptr(start), uintptr(arg), 0))
++// NewSHAKE128 creates a new SHAKE128 XOF.
++func NewSHAKE128() *SHAKE {
++	return newSHAKE(128)
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_detach(thread pthread_t) int32 {
-+	return int32(call5(pthread_detachABI0, uintptr(thread), 0, 0, 0, 0))
++// NewSHAKE256 creates a new SHAKE256 XOF.
++func NewSHAKE256() *SHAKE {
++	return newSHAKE(256)
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_sigmask(how sighow, ign *sigset_t, oset *sigset_t) int32 {
-+	return int32(call5(pthread_sigmaskABI0, uintptr(how), uintptr(unsafe.Pointer(ign)), uintptr(unsafe.Pointer(oset)), 0, 0))
++// NewCSHAKE128 creates a new cSHAKE128 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE128.
++func NewCSHAKE128(N, S []byte) *SHAKE {
++	if len(N) == 0 && len(S) == 0 {
++		return NewSHAKE128()
++	}
++	return nil
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_mutex_lock(mutex *pthread_mutex_t) int32 {
-+	return int32(call5(pthread_mutex_lockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++// NewCSHAKE256 creates a new cSHAKE256 XOF.
++//
++// N is used to define functions based on cSHAKE, it can be empty when plain
++// cSHAKE is desired. S is a customization byte string used for domain
++// separation. When N and S are both empty, this is equivalent to NewSHAKE256.
++func NewCSHAKE256(N, S []byte) *SHAKE {
++	if len(N) == 0 && len(S) == 0 {
++		return NewSHAKE256()
++	}
++	return nil
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_mutex_unlock(mutex *pthread_mutex_t) int32 {
-+	return int32(call5(pthread_mutex_unlockABI0, uintptr(unsafe.Pointer(mutex)), 0, 0, 0, 0))
++func newSHAKE(securityBits int) *SHAKE {
++	alg := loadShake(securityBits)
++	if alg == nil {
++		panic("openssl: unsupported SHAKE" + strconv.Itoa(securityBits) + " function")
++	}
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil); err != nil {
++		ossl.EVP_MD_CTX_free(ctx)
++		panic(err)
++	}
++	s := &SHAKE{alg: alg, ctx: ctx}
++	runtime.SetFinalizer(s, (*SHAKE).finalize)
++	return s
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_cond_broadcast(cond *pthread_cond_t) int32 {
-+	return int32(call5(pthread_cond_broadcastABI0, uintptr(unsafe.Pointer(cond)), 0, 0, 0, 0))
++func (s *SHAKE) finalize() {
++	ossl.EVP_MD_CTX_free(s.ctx)
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_setspecific(key pthread_key_t, value unsafe.Pointer) int32 {
-+	return int32(call5(pthread_setspecificABI0, uintptr(key), uintptr(value), 0, 0, 0))
++// Write absorbs more data into the XOF's state.
++//
++// It panics if any output has already been read.
++func (s *SHAKE) Write(p []byte) (n int, err error) {
++	defer runtime.KeepAlive(s)
++	if len(p) == 0 {
++		return 0, nil
++	}
++	if _, err := ossl.EVP_DigestUpdate(s.ctx, p); err != nil {
++		panic(err)
++	}
++	return len(p), nil
 +}
 +
-+//go:linkname _malloc _malloc
-+var _malloc uint8
-+var mallocABI0 = uintptr(unsafe.Pointer(&_malloc))
-+
-+//go:linkname _free _free
-+var _free uint8
-+var freeABI0 = uintptr(unsafe.Pointer(&_free))
-+
-+//go:linkname _setenv _setenv
-+var _setenv uint8
-+var setenvABI0 = uintptr(unsafe.Pointer(&_setenv))
-+
-+//go:linkname _unsetenv _unsetenv
-+var _unsetenv uint8
-+var unsetenvABI0 = uintptr(unsafe.Pointer(&_unsetenv))
-+
-+//go:linkname _sigfillset _sigfillset
-+var _sigfillset uint8
-+var sigfillsetABI0 = uintptr(unsafe.Pointer(&_sigfillset))
-+
-+//go:linkname _nanosleep _nanosleep
-+var _nanosleep uint8
-+var nanosleepABI0 = uintptr(unsafe.Pointer(&_nanosleep))
-+
-+//go:linkname _abort _abort
-+var _abort uint8
-+var abortABI0 = uintptr(unsafe.Pointer(&_abort))
-+
-+//go:linkname _pthread_attr_init _pthread_attr_init
-+var _pthread_attr_init uint8
-+var pthread_attr_initABI0 = uintptr(unsafe.Pointer(&_pthread_attr_init))
-+
-+//go:linkname _pthread_create _pthread_create
-+var _pthread_create uint8
-+var pthread_createABI0 = uintptr(unsafe.Pointer(&_pthread_create))
-+
-+//go:linkname _pthread_detach _pthread_detach
-+var _pthread_detach uint8
-+var pthread_detachABI0 = uintptr(unsafe.Pointer(&_pthread_detach))
-+
-+//go:linkname _pthread_sigmask _pthread_sigmask
-+var _pthread_sigmask uint8
-+var pthread_sigmaskABI0 = uintptr(unsafe.Pointer(&_pthread_sigmask))
-+
-+//go:linkname _pthread_mutex_lock _pthread_mutex_lock
-+var _pthread_mutex_lock uint8
-+var pthread_mutex_lockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_lock))
-+
-+//go:linkname _pthread_mutex_unlock _pthread_mutex_unlock
-+var _pthread_mutex_unlock uint8
-+var pthread_mutex_unlockABI0 = uintptr(unsafe.Pointer(&_pthread_mutex_unlock))
-+
-+//go:linkname _pthread_cond_broadcast _pthread_cond_broadcast
-+var _pthread_cond_broadcast uint8
-+var pthread_cond_broadcastABI0 = uintptr(unsafe.Pointer(&_pthread_cond_broadcast))
-+
-+//go:linkname _pthread_setspecific _pthread_setspecific
-+var _pthread_setspecific uint8
-+var pthread_setspecificABI0 = uintptr(unsafe.Pointer(&_pthread_setspecific))
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
-new file mode 100644
-index 00000000000000..960f8168eb88d7
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/zsymbols_darwin.go
-@@ -0,0 +1,59 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
-+
-+//go:build !cgo
-+
-+package fakecgo
-+
-+import "unsafe"
-+
-+//go:cgo_import_dynamic purego_malloc malloc "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_free free "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_setenv setenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_unsetenv unsetenv "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_sigfillset sigfillset "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_nanosleep nanosleep "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_abort abort "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_init pthread_attr_init "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_create pthread_create "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_detach pthread_detach "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_sigmask pthread_sigmask "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_lock pthread_mutex_lock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_mutex_unlock pthread_mutex_unlock "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_cond_broadcast pthread_cond_broadcast "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_setspecific pthread_setspecific "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_self pthread_self "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_get_stacksize_np pthread_get_stacksize_np "/usr/lib/libSystem.B.dylib"
-+//go:cgo_import_dynamic purego_pthread_attr_setstacksize pthread_attr_setstacksize "/usr/lib/libSystem.B.dylib"
-+
-+//go:nosplit
-+//go:norace
-+func pthread_self() pthread_t {
-+	return pthread_t(call5(pthread_selfABI0, 0, 0, 0, 0, 0))
++// Read squeezes more output from the XOF.
++//
++// Any call to Write after a call to Read will panic.
++func (s *SHAKE) Read(p []byte) (n int, err error) {
++	defer runtime.KeepAlive(s)
++	if len(p) == 0 {
++		return 0, nil
++	}
++	if len(p) != s.lastXofLen {
++		if _, err := ossl.EVP_MD_CTX_ctrl(s.ctx, ossl.EVP_MD_CTRL_XOF_LEN, int32(len(p)), nil); err != nil {
++			panic(err)
++		}
++		s.lastXofLen = len(p)
++	}
++	if _, err := ossl.EVP_DigestSqueeze(s.ctx, p); err != nil {
++		panic(err)
++	}
++	return len(p), nil
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_get_stacksize_np(thread pthread_t) size_t {
-+	return size_t(call5(pthread_get_stacksize_npABI0, uintptr(thread), 0, 0, 0, 0))
++// Reset resets the XOF to its initial state.
++func (s *SHAKE) Reset() {
++	defer runtime.KeepAlive(s)
++	if _, err := ossl.EVP_DigestInit_ex(s.ctx, nil, nil); err != nil {
++		panic(err)
++	}
++	s.lastXofLen = 0
 +}
 +
-+//go:nosplit
-+//go:norace
-+func pthread_attr_setstacksize(attr *pthread_attr_t, size size_t) int32 {
-+	return int32(call5(pthread_attr_setstacksizeABI0, uintptr(unsafe.Pointer(attr)), uintptr(size), 0, 0, 0))
++// BlockSize returns the rate of the XOF.
++func (s *SHAKE) BlockSize() int {
++	return s.alg.blockSize
 +}
 +
-+//go:linkname _pthread_self _pthread_self
-+var _pthread_self uint8
-+var pthread_selfABI0 = uintptr(unsafe.Pointer(&_pthread_self))
-+
-+//go:linkname _pthread_get_stacksize_np _pthread_get_stacksize_np
-+var _pthread_get_stacksize_np uint8
-+var pthread_get_stacksize_npABI0 = uintptr(unsafe.Pointer(&_pthread_get_stacksize_np))
++func (s *SHAKE) MarshalBinary() ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
 +
-+//go:linkname _pthread_attr_setstacksize _pthread_attr_setstacksize
-+var _pthread_attr_setstacksize uint8
-+var pthread_attr_setstacksizeABI0 = uintptr(unsafe.Pointer(&_pthread_attr_setstacksize))
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
-new file mode 100644
-index 00000000000000..35ef7ac11cb955
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_darwin.s
-@@ -0,0 +1,19 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
++func (s *SHAKE) AppendBinary(b []byte) ([]byte, error) {
++	return nil, errMarshallUnsupported{}
++}
 +
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++func (s *SHAKE) UnmarshalBinary(data []byte) error {
++	return errMarshallUnsupported{}
++}
 +
-+//go:build !cgo
++type shakeAlgorithm struct {
++	md        ossl.EVP_MD_PTR
++	blockSize int
++}
 +
-+#include "textflag.h"
++var cacheSHAKE sync.Map
 +
-+// these stubs are here because it is not possible to go:linkname directly the C functions
++// loadShake converts a crypto.Hash to a EVP_MD.
++func loadShake(securityBits int) (alg *shakeAlgorithm) {
++	if v, ok := cacheSHAKE.Load(securityBits); ok {
++		return v.(*shakeAlgorithm)
++	}
++	defer func() {
++		cacheSHAKE.Store(securityBits, alg)
++	}()
 +
-+TEXT _pthread_self(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_self(SB)
++	var name cString
++	switch securityBits {
++	case 128:
++		name = _DigestNameSHAKE128
++	case 256:
++		name = _DigestNameSHAKE256
++	default:
++		return nil
++	}
 +
-+TEXT _pthread_get_stacksize_np(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_get_stacksize_np(SB)
++	md, err := ossl.EVP_MD_fetch(nil, name.ptr(), nil)
++	if err != nil || md == nil {
++		return nil
++	}
 +
-+TEXT _pthread_attr_setstacksize(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_setstacksize(SB)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
++	alg = new(shakeAlgorithm)
++	alg.md = md
++	alg.blockSize = int(ossl.EVP_MD_get_block_size(md))
++	return alg
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/des.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/des.go
 new file mode 100644
-index 00000000000000..c59e0dce68c449
+index 00000000000000..6ae4a6372f8d08
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/fakecgo/ztrampolines_stubs.s
-@@ -0,0 +1,55 @@
-+// Code generated by 'go generate' with gen.go. DO NOT EDIT.
-+
-+// SPDX-License-Identifier: Apache-2.0
-+// SPDX-FileCopyrightText: 2022 The Ebitengine Authors
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/des.go
+@@ -0,0 +1,121 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+//go:build !cgo && darwin
++package openssl
 +
-+#include "textflag.h"
++import (
++	"crypto/cipher"
++	"errors"
 +
-+// these stubs are here because it is not possible to go:linkname directly the C functions
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
++)
 +
-+TEXT _malloc(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_malloc(SB)
++// SupportsDESCipher returns true if NewDESCipher is supported,
++// which uses ECB mode.
++// If CBC is also supported, then the returned cipher.Block
++// will also implement NewCBCEncrypter and NewCBCDecrypter.
++func SupportsDESCipher() bool {
++	switch major() {
++	case 1:
++		// DES is not part of the OpenSSL 1.x FIPS module.
++		return !osslsetup.FIPS() && loadCipher(cipherDES, cipherModeECB) != nil
++	default:
++		// On OpenSSL 3+ availability is decided by the algorithm probe:
++		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
++		return loadCipher(cipherDES, cipherModeECB) != nil
++	}
++}
 +
-+TEXT _free(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_free(SB)
++// SupportsTripleDESCipher returns true if NewTripleDESCipher is supported,
++// which uses ECB mode.
++// If CBC is also supported, then the returned cipher.Block
++// will also implement NewCBCEncrypter and NewCBCDecrypter.
++func SupportsTripleDESCipher() bool {
++	// Should always be true for stock OpenSSL,
++	// even when using the FIPS provider.
++	return loadCipher(cipherDES3, cipherModeECB) != nil
++}
 +
-+TEXT _setenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_setenv(SB)
++func NewDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 8 {
++		return nil, errors.New("crypto/des: invalid key size")
++	}
++	return newDESCipher(key, cipherDES)
++}
 +
-+TEXT _unsetenv(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_unsetenv(SB)
++func NewTripleDESCipher(key []byte) (cipher.Block, error) {
++	if len(key) != 24 {
++		return nil, errors.New("crypto/des: invalid key size")
++	}
++	return newDESCipher(key, cipherDES3)
++}
 +
-+TEXT _sigfillset(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_sigfillset(SB)
++func newDESCipher(key []byte, kind cipherKind) (cipher.Block, error) {
++	c, err := newEVPCipher(key, kind)
++	if err != nil {
++		return nil, err
++	}
++	if loadCipher(kind, cipherModeCBC) == nil {
++		return &desCipherWithoutCBC{c}, nil
++	}
++	return &desCipher{c}, nil
++}
 +
-+TEXT _nanosleep(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_nanosleep(SB)
++type desExtraModes interface {
++	NewCBCEncrypter(iv []byte) cipher.BlockMode
++	NewCBCDecrypter(iv []byte) cipher.BlockMode
++}
 +
-+TEXT _abort(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_abort(SB)
++var _ desExtraModes = (*desCipher)(nil)
 +
-+TEXT _pthread_attr_init(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_attr_init(SB)
++type desCipher struct {
++	*evpCipher
++}
 +
-+TEXT _pthread_create(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_create(SB)
++func (c *desCipher) BlockSize() int {
++	return c.blockSize
++}
 +
-+TEXT _pthread_detach(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_detach(SB)
++func (c *desCipher) Encrypt(dst, src []byte) {
++	if err := c.encrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
++}
 +
-+TEXT _pthread_sigmask(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_sigmask(SB)
++func (c *desCipher) Decrypt(dst, src []byte) {
++	if err := c.decrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
++}
 +
-+TEXT _pthread_mutex_lock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_lock(SB)
++func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
++	return c.newCBC(iv, cipherOpEncrypt)
++}
 +
-+TEXT _pthread_mutex_unlock(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_mutex_unlock(SB)
++func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
++	return c.newCBC(iv, cipherOpDecrypt)
++}
 +
-+TEXT _pthread_cond_broadcast(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_cond_broadcast(SB)
++type desCipherWithoutCBC struct {
++	*evpCipher
++}
 +
-+TEXT _pthread_setspecific(SB), NOSPLIT|NOFRAME, $0-0
-+	JMP purego_pthread_setspecific(SB)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
-new file mode 100644
-index 00000000000000..74ee18d383784e
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/security.go
-@@ -0,0 +1,9 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func (c *desCipherWithoutCBC) BlockSize() int {
++	return c.blockSize
++}
 +
-+// Package security provides a Go interface to the Security framework
-+package security
++func (c *desCipherWithoutCBC) Encrypt(dst, src []byte) {
++	if err := c.encrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
++}
 +
-+//go:generate go run ../../cmd/checkheader shims.h
-+//go:generate go run ../../cmd/mkcgo -out zsecurity.go -package security --noerrors shims.h
-+//go:generate go run ../../cmd/mkcgo -out zsecurity.go -nocgo -package security --noerrors shims.h
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
++func (c *desCipherWithoutCBC) Decrypt(dst, src []byte) {
++	if err := c.decrypt(dst, src); err != nil {
++		// crypto/des expects that the panic message starts with "crypto/des: ".
++		panic("crypto/des: " + err.Error())
++	}
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go
 new file mode 100644
-index 00000000000000..d37be58038a718
+index 00000000000000..82b7b1081468de
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/shims.h
-@@ -0,0 +1,107 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go
+@@ -0,0 +1,306 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+// This header file is used by the mkcgo tool to generate cgo and Go bindings for the
-+// Security framework C API. Run "go generate ." to regenerate the bindings.
-+// Do not include this file, import "zsecurity.h" instead.
-+
-+#ifndef _GO_SECURITY_SHIMS_H // only include this header once
-+#define _GO_SECURITY_SHIMS_H
-+
-+#include <stdbool.h> // bool
-+#include <stdint.h>  // uint64_t
-+#include <stdlib.h>  // size_t
-+
-+// The following includes are used by the checkheader tool.
-+// #include <Security/Security.h>
++package openssl
 +
-+typedef unsigned char Boolean;
-+typedef void *SecRandomRef;
-+typedef void *SecKeyRef;
-+typedef void *CFDataRef;
-+typedef void *CFTypeRef;
-+typedef void *CFStringRef;
-+typedef void *CFDictionaryRef;
-+typedef void *CFMutableDictionaryRef;
-+typedef void *CFNumberRef;
-+typedef void *CFErrorRef;
-+typedef void *CFAllocatorRef;
-+typedef void *CFDictionaryKeyCallBacks;
-+typedef void *CFDictionaryValueCallBacks;
-+typedef long CFIndex;
-+typedef CFStringRef SecKeyAlgorithm;
++import (
++	"runtime"
++	"unsafe"
 +
-+typedef enum {
-+  kSecKeyOperationTypeSign = 0,
-+  kSecKeyOperationTypeVerify = 1,
-+  kSecKeyOperationTypeEncrypt = 2,
-+  kSecKeyOperationTypeDecrypt = 3,
-+} SecKeyOperationType;
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+typedef enum {
-+  kCFStringEncodingUTF8 = 0x08000100
-+} CFStringEncoding;
++// SupportsDSA returns true if the OpenSSL library supports DSA.
++func SupportsDSA() bool {
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
++	if err != nil {
++		return false
++	}
++	ossl.EVP_PKEY_CTX_free(ctx)
++	return true
++}
 +
-+typedef enum {
-+  kCFNumberLongType = 10
-+} CFNumberType;
++// DSAParameters contains the DSA parameters.
++type DSAParameters struct {
++	P, Q, G BigInt
++}
 +
-+extern const CFAllocatorRef kCFAllocatorDefault __attribute__((framework(CoreFoundation, A)));
-+extern const SecRandomRef kSecRandomDefault __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyTypeRSA __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClassPublic __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClassPrivate __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyType __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeySizeInBits __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecAttrKeyClass __attribute__((framework(Security, A)));
-+// PSS
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512 __attribute__((framework(Security, A)));
-+// RAW
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw __attribute__((framework(Security, A)));
-+// PKCS1v15
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw __attribute__((framework(Security, A)));
-+// OAEP
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384 __attribute__((framework(Security, A)));
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512 __attribute__((framework(Security, A)));
-+// ECDSA
-+extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962 __attribute__((framework(Security, A)));
++// PrivateKeyDSA represents a DSA private key.
++type PrivateKeyDSA struct {
++	DSAParameters
++	X, Y BigInt
 +
-+int SecRandomCopyBytes(SecRandomRef rnd, size_t count, void *bytes) __attribute__((framework(Security, A), noescape, nocallback, slice(bytes, count)));
-+SecKeyRef SecKeyCopyPublicKey(SecKeyRef key) __attribute__((framework(Security, A)));
-+SecKeyRef SecKeyCreateWithData(CFDataRef keyData, CFDictionaryRef attributes, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef parameters, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef key, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+CFDataRef SecKeyCreateDecryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef ciphertext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+CFDataRef SecKeyCreateEncryptedData(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef plaintext, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+CFDataRef SecKeyCreateSignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef data, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+Boolean SecKeyVerifySignature(SecKeyRef key, SecKeyAlgorithm algorithm, CFDataRef signedData, CFDataRef signature, CFErrorRef *error) __attribute__((noescape, nocallback, framework(Security, A)));
-+Boolean SecKeyIsAlgorithmSupported(SecKeyRef key, SecKeyOperationType operation, SecKeyAlgorithm algorithm) __attribute__((framework(Security, A)));
-+size_t SecKeyGetBlockSize(SecKeyRef key) __attribute__((framework(Security, A)));
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
 +
-+CFDataRef CFDataCreate(CFAllocatorRef allocator, const uint8_t *bytes, CFIndex length) __attribute__((noescape, nocallback, framework(CoreFoundation, A), slice(bytes, length)));
-+CFDictionaryRef CFDictionaryCreate(CFAllocatorRef allocator, const void **keys, const void **values, CFIndex numValues, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
-+CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef allocator, CFIndex capacity, const CFDictionaryKeyCallBacks *keyCallBacks, const CFDictionaryValueCallBacks *valueCallBacks) __attribute__((framework(CoreFoundation, A)));
-+CFNumberRef CFNumberCreate(CFAllocatorRef allocator, CFNumberType theType, const void *valuePtr) __attribute__((noescape, nocallback, framework(CoreFoundation, A)));
-+CFIndex CFDataGetLength(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
-+const uint8_t *CFDataGetBytePtr(CFDataRef data) __attribute__((framework(CoreFoundation, A)));
-+void CFRelease(CFTypeRef cf) __attribute__((framework(CoreFoundation, A)));
-+void CFDictionarySetValue(CFMutableDictionaryRef theDict, const void *key, const void *value) __attribute__((framework(CoreFoundation, A)));
-+CFStringRef CFErrorCopyDescription(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
-+const char *CFStringGetCStringPtr(CFStringRef str, CFStringEncoding encoding) __attribute__((framework(CoreFoundation, A)));
-+CFIndex CFStringGetLength(CFStringRef str) __attribute__((framework(CoreFoundation, A)));
-+CFIndex CFErrorGetCode(CFErrorRef error) __attribute__((framework(CoreFoundation, A)));
++func (k *PrivateKeyDSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+#endif // _GO_SECURITY_SHIMS_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
-new file mode 100644
-index 00000000000000..3a03e583346c1c
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/syscall_nocgo.go
-@@ -0,0 +1,15 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func (k *PrivateKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
 +
-+//go:build !cgo
++// PublicKeyDSA represents a DSA public key.
++type PublicKeyDSA struct {
++	DSAParameters
++	Y BigInt
 +
-+package security
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
 +
-+import (
-+	"github.com/microsoft/go-crypto-darwin/internal/xsyscall"
-+)
++func (k *PublicKeyDSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+//go:nosplit
-+func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return xsyscall.SyscallN(errType, fn, args...)
++func (k *PublicKeyDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
-new file mode 100644
-index 00000000000000..a74278d02fd6ef
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.c
-@@ -0,0 +1,127 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++// GenerateParametersDSA generates a set of DSA parameters.
++func GenerateParametersDSA(l, n int) (DSAParameters, error) {
++	// The DSA parameters are generated by creating a new DSA key and
++	// extracting the domain parameters from it.
 +
-+#include <stddef.h>
-+#include <stdlib.h>
-+#include <stdint.h>
-+#include <stdio.h>
-+#include "zsecurity.h"
++	// Generate a new DSA key context and set the known parameters.
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_DSA, nil)
++	if err != nil {
++		return DSAParameters{}, err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_paramgen_init(ctx); err != nil {
++		return DSAParameters{}, err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, int32(l), nil); err != nil {
++		return DSAParameters{}, err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_DSA, -1, ossl.EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, int32(n), nil); err != nil {
++		return DSAParameters{}, err
++	}
++	var pkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_paramgen(ctx, &pkey); err != nil {
++		return DSAParameters{}, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+CFDataRef CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
-+const uint8_t* CFDataGetBytePtr(CFDataRef);
-+CFIndex CFDataGetLength(CFDataRef);
-+CFDictionaryRef CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
-+CFMutableDictionaryRef CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
-+void CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
-+CFStringRef CFErrorCopyDescription(CFErrorRef);
-+CFIndex CFErrorGetCode(CFErrorRef);
-+CFNumberRef CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
-+void CFRelease(CFTypeRef);
-+const char* CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
-+CFIndex CFStringGetLength(CFStringRef);
-+CFDataRef SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
-+SecKeyRef SecKeyCopyPublicKey(SecKeyRef);
-+CFDataRef SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+CFDataRef SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+SecKeyRef SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
-+CFDataRef SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+SecKeyRef SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
-+size_t SecKeyGetBlockSize(SecKeyRef);
-+Boolean SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
-+Boolean SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
-+int SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
++	// Extract the domain parameters from the generated key.
++	var p, q, g ossl.BIGNUM_PTR
++	switch major() {
++	case 1:
++		dsa := getDSA(pkey)
++		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
++	case 3, 4:
++		defer func() {
++			ossl.BN_free(p)
++			ossl.BN_free(q)
++			ossl.BN_free(g)
++		}()
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_P.ptr(), &p); err != nil {
++			return DSAParameters{}, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_Q.ptr(), &q); err != nil {
++			return DSAParameters{}, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G.ptr(), &g); err != nil {
++			return DSAParameters{}, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
 +
-+CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef _arg0, const uint8_t* _arg1, CFIndex _arg2) {
-+	return CFDataCreate(_arg0, _arg1, _arg2);
++	return DSAParameters{
++		P: bnToBig(p),
++		Q: bnToBig(q),
++		G: bnToBig(g),
++	}, nil
 +}
 +
-+const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef _arg0) {
-+	return CFDataGetBytePtr(_arg0);
++// NewPrivateKeyDSA creates a new DSA private key from the given parameters.
++func NewPrivateKeyDSA(params DSAParameters, x, y BigInt) (*PrivateKeyDSA, error) {
++	if x == nil || y == nil {
++		panic("x and y must not be nil")
++	}
++	pkey, err := newDSA(params, x, y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PrivateKeyDSA{params, x, y, pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyDSA).finalize)
++	return k, nil
 +}
 +
-+CFIndex _mkcgo_CFDataGetLength(CFDataRef _arg0) {
-+	return CFDataGetLength(_arg0);
++// NewPublicKeyDSA creates a new DSA public key from the given parameters.
++func NewPublicKeyDSA(params DSAParameters, y BigInt) (*PublicKeyDSA, error) {
++	if y == nil {
++		panic("y must not be nil")
++	}
++	pkey, err := newDSA(params, nil, y)
++	if err != nil {
++		return nil, err
++	}
++	k := &PublicKeyDSA{params, y, pkey}
++	runtime.SetFinalizer(k, (*PublicKeyDSA).finalize)
++	return k, nil
 +}
 +
-+CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef _arg0, const void** _arg1, const void** _arg2, CFIndex _arg3, const CFDictionaryKeyCallBacks* _arg4, const CFDictionaryValueCallBacks* _arg5) {
-+	return CFDictionaryCreate(_arg0, _arg1, _arg2, _arg3, _arg4, _arg5);
++// GenerateKeyDSA generates a new private DSA key using the given parameters.
++func GenerateKeyDSA(params DSAParameters) (x, y BigInt, err error) {
++	pkey, err := newDSA(params, nil, nil)
++	if err != nil {
++		return nil, nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++	var bx, by ossl.BIGNUM_PTR
++	switch major() {
++	case 1:
++		dsa := getDSA(pkey)
++		ossl.DSA_get0_key(dsa, &by, &bx)
++	case 3, 4:
++		defer func() {
++			ossl.BN_clear_free(bx)
++			ossl.BN_free(by)
++		}()
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), &by); err != nil {
++			return nil, nil, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bx); err != nil {
++			return nil, nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return bnToBig(bx), bnToBig(by), nil
 +}
 +
-+CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef _arg0, CFIndex _arg1, const CFDictionaryKeyCallBacks* _arg2, const CFDictionaryValueCallBacks* _arg3) {
-+	return CFDictionaryCreateMutable(_arg0, _arg1, _arg2, _arg3);
++// SignDSA signs a hash (which should be the result of hashing a larger message).
++func SignDSA(priv *PrivateKeyDSA, hash []byte) ([]byte, error) {
++	return evpSign(priv.withKey, 0, 0, 0, hash)
 +}
 +
-+void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef _arg0, const void* _arg1, const void* _arg2) {
-+	CFDictionarySetValue(_arg0, _arg1, _arg2);
++// VerifyDSA verifiessig using the public key, pub.
++func VerifyDSA(pub *PublicKeyDSA, hash []byte, sig []byte) bool {
++	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
 +}
 +
-+CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef _arg0) {
-+	return CFErrorCopyDescription(_arg0);
++func newDSA(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
++	switch major() {
++	case 1:
++		return newDSA1(params, x, y)
++	case 3, 4:
++		return newDSA3(params, x, y)
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++func newDSA1(params DSAParameters, x, y BigInt) (pkey ossl.EVP_PKEY_PTR, err error) {
++	checkMajorVersion(1)
++
++	dsa, err := ossl.DSA_new()
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if pkey == nil {
++			ossl.DSA_free(dsa)
++		}
++	}()
++	// No need to check for errors here, DSA_set0_* functions will fail
++	// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++	p, _ := bigToBN(params.P)
++	q, _ := bigToBN(params.Q)
++	g, _ := bigToBN(params.G)
++	if _, err := ossl.DSA_set0_pqg(dsa, p, q, g); err != nil {
++		ossl.BN_free(p)
++		ossl.BN_free(q)
++		ossl.BN_free(g)
++		return nil, err
++	}
++	if y != nil {
++		pub, _ := bigToBN(y)
++		priv, _ := bigToBN(x)
++		if _, err := ossl.DSA_set0_key(dsa, pub, priv); err != nil {
++			ossl.BN_free(pub)
++			ossl.BN_clear_free(priv)
++			return nil, err
++		}
++	} else {
++		if _, err := ossl.DSA_generate_key(dsa); err != nil {
++			return nil, err
++		}
++	}
++	pkey, err = ossl.EVP_PKEY_new()
++	if err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_DSA, unsafe.Pointer(dsa)); err != nil {
++		ossl.EVP_PKEY_free(pkey)
++		return nil, err
++	}
++	return pkey, nil
 +}
 +
-+CFIndex _mkcgo_CFErrorGetCode(CFErrorRef _arg0) {
-+	return CFErrorGetCode(_arg0);
-+}
++func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef _arg0, CFNumberType _arg1, const void* _arg2) {
-+	return CFNumberCreate(_arg0, _arg1, _arg2);
-+}
++	bld := newParamBuilder()
++	defer bld.finalize()
 +
-+void _mkcgo_CFRelease(CFTypeRef _arg0) {
-+	CFRelease(_arg0);
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_P, params.P, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_Q, params.Q, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_FFC_G, params.G, false)
++	selection := int32(ossl.EVP_PKEY_KEYPAIR)
++	if y != nil {
++		bld.addBigInt(_OSSL_PKEY_PARAM_PUB_KEY, y, false)
++		if x == nil {
++			selection = ossl.EVP_PKEY_PUBLIC_KEY
++		}
++	}
++	if x != nil {
++		bld.addBigInt(_OSSL_PKEY_PARAM_PRIV_KEY, x, true)
++	}
++	bldparams, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(bldparams)
++	pkey, err := newEvpFromParams(ossl.EVP_PKEY_DSA, selection, bldparams)
++	if err != nil {
++		return nil, err
++	}
++	if y != nil {
++		return pkey, nil
++	}
++	// pkey doesn't contain the public component, but the crypto/dsa package
++	// expects it to be always there. Generate a new key using pkey as domain
++	// parameters placeholder.
++	defer ossl.EVP_PKEY_free(pkey)
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
++		return nil, err
++	}
++	var gkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_keygen(ctx, &gkey); err != nil {
++		return nil, err
++	}
++	return gkey, nil
 +}
 +
-+const char* _mkcgo_CFStringGetCStringPtr(CFStringRef _arg0, CFStringEncoding _arg1) {
-+	return CFStringGetCStringPtr(_arg0, _arg1);
++// getDSA returns the DSA from pkey.
++// If pkey does not contain an DSA it panics.
++// The returned key should not be freed.
++func getDSA(pkey ossl.EVP_PKEY_PTR) ossl.DSA_PTR {
++	key, err := ossl.EVP_PKEY_get0_DSA(pkey)
++	if err != nil {
++		panic(err)
++	}
++	return key
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ec.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ec.go
+new file mode 100644
+index 00000000000000..d871a04b37942b
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ec.go
+@@ -0,0 +1,132 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+CFIndex _mkcgo_CFStringGetLength(CFStringRef _arg0) {
-+	return CFStringGetLength(_arg0);
-+}
++package openssl
 +
-+CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef _arg0, CFErrorRef* _arg1) {
-+	return SecKeyCopyExternalRepresentation(_arg0, _arg1);
-+}
++import (
++	"errors"
++	"strconv"
++	"sync"
 +
-+SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef _arg0) {
-+	return SecKeyCopyPublicKey(_arg0);
-+}
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
-+	return SecKeyCreateDecryptedData(_arg0, _arg1, _arg2, _arg3);
++func SupportsCurve(curve string) bool {
++	switch curve {
++	case "P-224", "P-256", "P-384", "P-521":
++		return true
++	case "X25519":
++		return supportsX25519()
++	default:
++		return false
++	}
 +}
 +
-+CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
-+	return SecKeyCreateEncryptedData(_arg0, _arg1, _arg2, _arg3);
-+}
++var supportsX25519 = sync.OnceValue(func() bool {
++	ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_X25519, nil)
++	if ctx != nil {
++		ossl.EVP_PKEY_CTX_free(ctx)
++		return true
++	}
++	return false
++})
 +
-+SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef _arg0, CFErrorRef* _arg1) {
-+	return SecKeyCreateRandomKey(_arg0, _arg1);
++func curveID(curve string) int32 {
++	switch curve {
++	case "P-224":
++		return ossl.EVP_PKEY_EC
++	case "P-256":
++		return ossl.EVP_PKEY_EC
++	case "P-384":
++		return ossl.EVP_PKEY_EC
++	case "P-521":
++		return ossl.EVP_PKEY_EC
++	case "X25519":
++		return ossl.EVP_PKEY_X25519
++	default:
++		panic("openssl: unknown curve " + curve)
++	}
 +}
 +
-+CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFErrorRef* _arg3) {
-+	return SecKeyCreateSignature(_arg0, _arg1, _arg2, _arg3);
++func curveNID(curve string) int32 {
++	switch curve {
++	case "P-224":
++		return ossl.NID_secp224r1
++	case "P-256":
++		return ossl.NID_X9_62_prime256v1
++	case "P-384":
++		return ossl.NID_secp384r1
++	case "P-521":
++		return ossl.NID_secp521r1
++	default:
++		panic("openssl: unknown curve " + curve)
++	}
 +}
 +
-+SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef _arg0, CFDictionaryRef _arg1, CFErrorRef* _arg2) {
-+	return SecKeyCreateWithData(_arg0, _arg1, _arg2);
++// curveSize returns the size of the curve in bytes.
++func curveSize(curve string) int {
++	switch curve {
++	case "P-224":
++		return 224 / 8
++	case "P-256":
++		return 256 / 8
++	case "P-384":
++		return 384 / 8
++	case "P-521":
++		return (521 + 7) / 8
++	default:
++		panic("openssl: unknown curve " + curve)
++	}
 +}
 +
-+size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef _arg0) {
-+	return SecKeyGetBlockSize(_arg0);
++// encodeEcPoint encodes pt.
++func encodeEcPoint(group ossl.EC_GROUP_PTR, pt ossl.EC_POINT_PTR) ([]byte, error) {
++	// Get encoded point size.
++	n, err := ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, nil, nil)
++	if err != nil {
++		return nil, err
++	}
++	// Encode point into bytes.
++	bytes := make([]byte, n)
++	if _, err = ossl.EC_POINT_point2oct(group, pt, ossl.POINT_CONVERSION_UNCOMPRESSED, bytes, nil); err != nil {
++		return nil, err
++	}
++	return bytes, nil
 +}
 +
-+Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef _arg0, SecKeyOperationType _arg1, SecKeyAlgorithm _arg2) {
-+	return SecKeyIsAlgorithmSupported(_arg0, _arg1, _arg2);
++// generateAndEncodeEcPublicKey calls newPubKeyPointFn to generate a public key point and then encodes it.
++func generateAndEncodeEcPublicKey(nid int32, newPubKeyPointFn func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error)) ([]byte, error) {
++	group, err := ossl.EC_GROUP_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EC_GROUP_free(group)
++	pt, err := newPubKeyPointFn(group)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EC_POINT_free(pt)
++	return encodeEcPoint(group, pt)
 +}
 +
-+Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef _arg0, SecKeyAlgorithm _arg1, CFDataRef _arg2, CFDataRef _arg3, CFErrorRef* _arg4) {
-+	return SecKeyVerifySignature(_arg0, _arg1, _arg2, _arg3, _arg4);
++func extractPKEYRawPublic(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
++	keylen := len(pub)
++	if _, err := ossl.EVP_PKEY_get_raw_public_key(pkey, pub, &keylen); err != nil {
++		return err
++	}
++	if keylen != len(pub) {
++		return errors.New("bad public key length: " + strconv.Itoa(keylen))
++	}
++	return nil
 +}
 +
-+int _mkcgo_SecRandomCopyBytes(SecRandomRef _arg0, size_t _arg1, unsigned char* _arg2) {
-+	return SecRandomCopyBytes(_arg0, _arg1, _arg2);
++func extractPKEYRawPrivate(pkey ossl.EVP_PKEY_PTR, pub []byte) error {
++	keylen := len(pub)
++	if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, pub, &keylen); err != nil {
++		return err
++	}
++	if keylen != len(pub) {
++		return errors.New("bad private key length: " + strconv.Itoa(keylen))
++	}
++	return nil
 +}
-+
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go
 new file mode 100644
-index 00000000000000..41aa0341b8a2b2
+index 00000000000000..7289538d753dc8
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.go
-@@ -0,0 +1,21 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go
+@@ -0,0 +1,341 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+package security
-+
-+const (
-+	KSecKeyOperationTypeSign    SecKeyOperationType = 0
-+	KSecKeyOperationTypeVerify  SecKeyOperationType = 1
-+	KSecKeyOperationTypeEncrypt SecKeyOperationType = 2
-+	KSecKeyOperationTypeDecrypt SecKeyOperationType = 3
-+)
++package openssl
 +
-+const (
-+	KCFStringEncodingUTF8 CFStringEncoding = 0x08000100
-+)
++import (
++	"errors"
++	"runtime"
++	"slices"
++	"unsafe"
 +
-+const (
-+	KCFNumberLongType CFNumberType = 10
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
-new file mode 100644
-index 00000000000000..8a2524b3cd0fe6
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.h
-@@ -0,0 +1,98 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+#ifndef MKCGO_H // only include this header once
-+#define MKCGO_H
-+
-+#include <stdbool.h>
-+#include <stdint.h>
-+#include <stdlib.h>
-+
-+typedef unsigned char Boolean;
-+typedef void* SecRandomRef;
-+typedef void* SecKeyRef;
-+typedef void* CFDataRef;
-+typedef void* CFTypeRef;
-+typedef void* CFStringRef;
-+typedef void* CFDictionaryRef;
-+typedef void* CFMutableDictionaryRef;
-+typedef void* CFNumberRef;
-+typedef void* CFErrorRef;
-+typedef void* CFAllocatorRef;
-+typedef void* CFDictionaryKeyCallBacks;
-+typedef void* CFDictionaryValueCallBacks;
-+typedef long CFIndex;
-+typedef CFStringRef SecKeyAlgorithm;
-+
-+extern const CFAllocatorRef kCFAllocatorDefault;
-+extern const SecRandomRef kSecRandomDefault;
-+extern const CFStringRef kSecAttrKeyTypeRSA;
-+extern const CFStringRef kSecAttrKeyClassPublic;
-+extern const CFStringRef kSecAttrKeyClassPrivate;
-+extern const CFStringRef kSecAttrKeyType;
-+extern const CFStringRef kSecAttrKeySizeInBits;
-+extern const CFStringRef kSecAttrKeyClass;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA1;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA224;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA256;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA384;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPSSSHA512;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionRaw;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionPKCS1;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512;
-+extern const CFStringRef kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA1;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA224;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA256;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA384;
-+extern const CFStringRef kSecKeyAlgorithmRSAEncryptionOAEPSHA512;
-+extern const CFStringRef kSecKeyAlgorithmECDSASignatureDigestX962;
-+
-+typedef enum {
-+	kSecKeyOperationTypeSign = 0,
-+	kSecKeyOperationTypeVerify = 1,
-+	kSecKeyOperationTypeEncrypt = 2,
-+	kSecKeyOperationTypeDecrypt = 3,
-+} SecKeyOperationType;
-+
-+typedef enum {
-+	kCFStringEncodingUTF8 = 0x08000100,
-+} CFStringEncoding;
-+
-+typedef enum {
-+	kCFNumberLongType = 10,
-+} CFNumberType;
-+
-+uintptr_t mkcgo_err_retrieve();
-+
-+CFDataRef _mkcgo_CFDataCreate(CFAllocatorRef, const uint8_t*, CFIndex);
-+const uint8_t* _mkcgo_CFDataGetBytePtr(CFDataRef);
-+CFIndex _mkcgo_CFDataGetLength(CFDataRef);
-+CFDictionaryRef _mkcgo_CFDictionaryCreate(CFAllocatorRef, const void**, const void**, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
-+CFMutableDictionaryRef _mkcgo_CFDictionaryCreateMutable(CFAllocatorRef, CFIndex, const CFDictionaryKeyCallBacks*, const CFDictionaryValueCallBacks*);
-+void _mkcgo_CFDictionarySetValue(CFMutableDictionaryRef, const void*, const void*);
-+CFStringRef _mkcgo_CFErrorCopyDescription(CFErrorRef);
-+CFIndex _mkcgo_CFErrorGetCode(CFErrorRef);
-+CFNumberRef _mkcgo_CFNumberCreate(CFAllocatorRef, CFNumberType, const void*);
-+void _mkcgo_CFRelease(CFTypeRef);
-+const char* _mkcgo_CFStringGetCStringPtr(CFStringRef, CFStringEncoding);
-+CFIndex _mkcgo_CFStringGetLength(CFStringRef);
-+CFDataRef _mkcgo_SecKeyCopyExternalRepresentation(SecKeyRef, CFErrorRef*);
-+SecKeyRef _mkcgo_SecKeyCopyPublicKey(SecKeyRef);
-+CFDataRef _mkcgo_SecKeyCreateDecryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+CFDataRef _mkcgo_SecKeyCreateEncryptedData(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+SecKeyRef _mkcgo_SecKeyCreateRandomKey(CFDictionaryRef, CFErrorRef*);
-+CFDataRef _mkcgo_SecKeyCreateSignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFErrorRef*);
-+SecKeyRef _mkcgo_SecKeyCreateWithData(CFDataRef, CFDictionaryRef, CFErrorRef*);
-+size_t _mkcgo_SecKeyGetBlockSize(SecKeyRef);
-+Boolean _mkcgo_SecKeyIsAlgorithmSupported(SecKeyRef, SecKeyOperationType, SecKeyAlgorithm);
-+Boolean _mkcgo_SecKeyVerifySignature(SecKeyRef, SecKeyAlgorithm, CFDataRef, CFDataRef, CFErrorRef*);
-+int _mkcgo_SecRandomCopyBytes(SecRandomRef, size_t, unsigned char*);
-+
-+#endif // MKCGO_H
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
-new file mode 100644
-index 00000000000000..5b021a6afed14b
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity.s
-@@ -0,0 +1,172 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo
-+
-+#include "textflag.h"
-+
-+#ifndef GOARCH_amd64
-+#ifndef GOARCH_arm64
-+#ifndef GOARCH_riscv64
-+#ifndef GOARCH_loong64
-+#ifndef GOARCH_mips64
-+#ifndef GOARCH_mips64le
-+#ifndef GOARCH_ppc64
-+#ifndef GOARCH_ppc64le
-+#ifndef GOARCH_s390x
-+#ifndef GOARCH_sparc64
-+#define _GOPTRSIZE 4
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+#endif
-+
-+#ifndef _GOPTRSIZE
-+#define _GOPTRSIZE 8
-+#endif
-+TEXT _mkcgo_CFDataCreate_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDataCreate(SB)
-+
-+GLOBL ·_mkcgo_CFDataCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDataCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataCreate_trampoline<>(SB)
 +
-+TEXT _mkcgo_CFDataGetBytePtr_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDataGetBytePtr(SB)
-+
-+GLOBL ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDataGetBytePtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetBytePtr_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDataGetLength_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDataGetLength(SB)
-+
-+GLOBL ·_mkcgo_CFDataGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDataGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDataGetLength_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionaryCreate_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDictionaryCreate(SB)
-+
-+GLOBL ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDictionaryCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreate_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionaryCreateMutable_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDictionaryCreateMutable(SB)
-+
-+GLOBL ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDictionaryCreateMutable_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionaryCreateMutable_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFDictionarySetValue_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFDictionarySetValue(SB)
-+
-+GLOBL ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFDictionarySetValue_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFDictionarySetValue_trampoline<>(SB)
-+
-+TEXT _mkcgo_CFErrorCopyDescription_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFErrorCopyDescription(SB)
++const publicKeySizeX25519 = 32
++const privateKeySizeX25519 = 32
 +
-+GLOBL ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFErrorCopyDescription_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorCopyDescription_trampoline<>(SB)
++type PublicKeyECDH struct {
++	_pkey ossl.EVP_PKEY_PTR
++	bytes []byte
++}
 +
-+TEXT _mkcgo_CFErrorGetCode_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFErrorGetCode(SB)
++func (k *PublicKeyECDH) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+GLOBL ·_mkcgo_CFErrorGetCode_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFErrorGetCode_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFErrorGetCode_trampoline<>(SB)
++type PrivateKeyECDH struct {
++	_pkey ossl.EVP_PKEY_PTR
++	curve string
++}
 +
-+TEXT _mkcgo_CFNumberCreate_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFNumberCreate(SB)
++func (k *PrivateKeyECDH) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+GLOBL ·_mkcgo_CFNumberCreate_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFNumberCreate_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFNumberCreate_trampoline<>(SB)
++func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
++	expectedLen := publicKeySizeX25519
++	if curve != "X25519" {
++		expectedLen = 1 + 2*curveSize(curve)
++	}
++	if len(bytes) != expectedLen {
++		return nil, errors.New("NewPublicKeyECDH: wrong key length")
++	}
 +
-+TEXT _mkcgo_CFRelease_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFRelease(SB)
++	pkey, err := newECDHPkey(curve, bytes, false)
++	if err != nil {
++		return nil, err
++	}
++	k := &PublicKeyECDH{pkey, slices.Clone(bytes)}
++	runtime.SetFinalizer(k, (*PublicKeyECDH).finalize)
++	return k, nil
++}
 +
-+GLOBL ·_mkcgo_CFRelease_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFRelease_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFRelease_trampoline<>(SB)
++func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
 +
-+TEXT _mkcgo_CFStringGetCStringPtr_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFStringGetCStringPtr(SB)
++func NewPrivateKeyECDH(curve string, bytes []byte) (*PrivateKeyECDH, error) {
++	expectedLen := privateKeySizeX25519
++	if curve != "X25519" {
++		expectedLen = curveSize(curve)
++	}
++	if len(bytes) != expectedLen {
++		return nil, errors.New("NewPrivateKeyECDH: wrong key length")
++	}
++	pkey, err := newECDHPkey(curve, bytes, true)
++	if err != nil {
++		return nil, err
++	}
++	k := &PrivateKeyECDH{pkey, curve}
++	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
++	return k, nil
++}
 +
-+GLOBL ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFStringGetCStringPtr_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetCStringPtr_trampoline<>(SB)
++func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
++	defer runtime.KeepAlive(k)
++	var pkey ossl.EVP_PKEY_PTR
++	defer func() {
++		ossl.EVP_PKEY_free(pkey)
++	}()
 +
-+TEXT _mkcgo_CFStringGetLength_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_CFStringGetLength(SB)
++	var bytes []byte
++	if k.curve == "X25519" {
++		pkey = k._pkey
++		if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
++			return nil, err
++		}
++		bytes = make([]byte, publicKeySizeX25519)
++		if err := extractPKEYRawPublic(pkey, bytes); err != nil {
++			return nil, err
++		}
++	} else {
++		switch major() {
++		case 1:
++			var err error
++			pkey, err = ossl.EVP_PKEY_new()
++			if err != nil {
++				return nil, err
++			}
++			key := getECKey(k._pkey)
++			if _, err := ossl.EVP_PKEY_set1_EC_KEY(pkey, key); err != nil {
++				return nil, err
++			}
++			pt := ossl.EC_KEY_get0_public_key(key)
++			if pt == nil {
++				return nil, fail("missing ECDH public key")
++			}
++			group := ossl.EC_KEY_get0_group(key)
++			if bytes, err = encodeEcPoint(group, pt); err != nil {
++				return nil, err
++			}
++		case 3, 4:
++			pkey = k._pkey
++			if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
++				return nil, err
++			}
++			var cbytes *byte
++			n, err := ossl.EVP_PKEY_get1_encoded_public_key(k._pkey, &cbytes)
++			if err != nil {
++				return nil, err
++			}
++			bytes = goBytes(unsafe.Pointer(cbytes), n)
++			cryptoFree(unsafe.Pointer(cbytes))
++		default:
++			panic(errUnsupportedVersion())
++		}
++	}
++	pub := &PublicKeyECDH{pkey, bytes}
++	pkey = nil
++	runtime.SetFinalizer(pub, (*PublicKeyECDH).finalize)
++	return pub, nil
++}
 +
-+GLOBL ·_mkcgo_CFStringGetLength_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_CFStringGetLength_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_CFStringGetLength_trampoline<>(SB)
++func newECDHPkey(curve string, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
++	if curve == "X25519" {
++		if isPrivate {
++			return ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_X25519, nil, bytes)
++		} else {
++			return ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_X25519, nil, bytes)
++		}
++	}
++	nid := curveNID(curve)
++	switch major() {
++	case 1:
++		return newECDHPkey1(nid, bytes, isPrivate)
++	case 3, 4:
++		return newECDHPkey3(nid, bytes, isPrivate)
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+TEXT _mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCopyExternalRepresentation(SB)
++func newECDHPkey1(nid int32, bytes []byte, isPrivate bool) (pkey ossl.EVP_PKEY_PTR, err error) {
++	checkMajorVersion(1)
 +
-+GLOBL ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyExternalRepresentation_trampoline<>(SB)
++	key, err := ossl.EC_KEY_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if pkey == nil {
++			ossl.EC_KEY_free(key)
++		}
++	}()
++	group := ossl.EC_KEY_get0_group(key)
++	if isPrivate {
++		priv, err := ossl.BN_bin2bn(bytes, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.BN_clear_free(priv)
++		if _, err := ossl.EC_KEY_set_private_key(key, priv); err != nil {
++			return nil, err
++		}
++		pub, err := pointMult(group, priv)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EC_POINT_free(pub)
++		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
++			return nil, err
++		}
++	} else {
++		pub, err := ossl.EC_POINT_new(group)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EC_POINT_free(pub)
++		if _, err := ossl.EC_POINT_oct2point(group, pub, bytes, nil); err != nil {
++			return nil, err
++		}
++		if _, err := ossl.EC_KEY_set_public_key(key, pub); err != nil {
++			return nil, err
++		}
++	}
++	if _, err := ossl.EC_KEY_check_key(key); err != nil {
++		// Match upstream error message.
++		if isPrivate {
++			return nil, errors.New("crypto/ecdh: invalid private key")
++		} else {
++			return nil, errors.New("crypto/ecdh: invalid public key")
++		}
++	}
++	return newEVPPKEY(key)
++}
 +
-+TEXT _mkcgo_SecKeyCopyPublicKey_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCopyPublicKey(SB)
++func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+GLOBL ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCopyPublicKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCopyPublicKey_trampoline<>(SB)
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
++	var selection int32
++	if isPrivate {
++		priv, err := ossl.BN_bin2bn(bytes, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.BN_clear_free(priv)
++		pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
++			return pointMult(group, priv)
++		})
++		if err != nil {
++			return nil, err
++		}
++		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
++		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, priv)
++		selection = ossl.EVP_PKEY_KEYPAIR
++	} else {
++		bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, bytes)
++		selection = ossl.EVP_PKEY_PUBLIC_KEY
++	}
 +
-+TEXT _mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCreateDecryptedData(SB)
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++	pkey, err := newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
++	if err != nil {
++		return nil, err
++	}
 +
-+GLOBL ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCreateDecryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateDecryptedData_trampoline<>(SB)
++	if err := checkPkey(pkey, isPrivate); err != nil {
++		ossl.EVP_PKEY_free(pkey)
++		return nil, errors.New("crypto/ecdh: " + err.Error())
++	}
++	return pkey, nil
++}
 +
-+TEXT _mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCreateEncryptedData(SB)
++func pointMult(group ossl.EC_GROUP_PTR, priv ossl.BIGNUM_PTR) (ossl.EC_POINT_PTR, error) {
++	// OpenSSL does not expose any method to generate the public
++	// key from the private key [1], so we have to calculate it here.
++	// [1] https://github.com/openssl/openssl/issues/18437#issuecomment-1144717206
++	pt, err := ossl.EC_POINT_new(group)
++	if err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EC_POINT_mul(group, pt, priv, nil, nil, nil); err != nil {
++		ossl.EC_POINT_free(pt)
++		return nil, err
++	}
++	return pt, nil
++}
 +
-+GLOBL ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCreateEncryptedData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateEncryptedData_trampoline<>(SB)
++func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
++	defer runtime.KeepAlive(priv)
++	defer runtime.KeepAlive(pub)
++	ctx, err := ossl.EVP_PKEY_CTX_new(priv._pkey, nil)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_PKEY_derive_set_peer(ctx, pub._pkey); err != nil {
++		return nil, err
++	}
++	var keylen int
++	if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
++		return nil, err
++	}
++	out := make([]byte, keylen)
++	if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
++		return nil, err
++	}
++	return out, nil
++}
 +
-+TEXT _mkcgo_SecKeyCreateRandomKey_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCreateRandomKey(SB)
++func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
++	pkey, err := generateEVPPKey(curveID(curve), 0, curve)
++	if err != nil {
++		return nil, nil, err
++	}
++	var k *PrivateKeyECDH
++	defer func() {
++		if k == nil {
++			ossl.EVP_PKEY_free(pkey)
++		}
++	}()
++	var bytes []byte
++	if curve == "X25519" {
++		bytes = make([]byte, privateKeySizeX25519)
++		keylen := len(bytes)
++		if _, err := ossl.EVP_PKEY_get_raw_private_key(pkey, bytes, &keylen); err != nil {
++			return nil, nil, err
++		}
++	} else {
++		var priv ossl.BIGNUM_PTR
++		switch major() {
++		case 1:
++			key := getECKey(pkey)
++			priv = ossl.EC_KEY_get0_private_key(key)
++			if priv == nil {
++				return nil, nil, fail("missing ECDH private key")
++			}
++		case 3, 4:
++			if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
++				return nil, nil, err
++			}
++			defer ossl.BN_clear_free(priv)
++		default:
++			panic(errUnsupportedVersion())
++		}
++		// We should not leak bit length of the secret scalar in the key.
++		// For this reason, we use BN_bn2binpad instead of BN_bn2bin with fixed length.
++		// The fixed length is the order of the large prime subgroup of the curve,
++		// returned by EVP_PKEY_get_bits, which is generally the upper bound for
++		// generating a private ECDH key.
++		bits, err := ossl.EVP_PKEY_get_bits(pkey)
++		if err != nil {
++			return nil, nil, err
++		}
++		bytes = make([]byte, (bits+7)/8)
++		if err := bnToBinPad(priv, bytes); err != nil {
++			return nil, nil, err
++		}
++	}
++	k = &PrivateKeyECDH{pkey, curve}
++	runtime.SetFinalizer(k, (*PrivateKeyECDH).finalize)
++	return k, bytes, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go
+new file mode 100644
+index 00000000000000..d96c368fe1ca76
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go
+@@ -0,0 +1,220 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+GLOBL ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCreateRandomKey_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateRandomKey_trampoline<>(SB)
++package openssl
 +
-+TEXT _mkcgo_SecKeyCreateSignature_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCreateSignature(SB)
++import (
++	"crypto"
++	"runtime"
 +
-+GLOBL ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCreateSignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateSignature_trampoline<>(SB)
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+TEXT _mkcgo_SecKeyCreateWithData_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyCreateWithData(SB)
++type PrivateKeyECDSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
 +
-+GLOBL ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyCreateWithData_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyCreateWithData_trampoline<>(SB)
++func (k *PrivateKeyECDSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+TEXT _mkcgo_SecKeyGetBlockSize_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyGetBlockSize(SB)
++func (k *PrivateKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
 +
-+GLOBL ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyGetBlockSize_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyGetBlockSize_trampoline<>(SB)
++type PublicKeyECDSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
++}
 +
-+TEXT _mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyIsAlgorithmSupported(SB)
++func (k *PublicKeyECDSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
++}
 +
-+GLOBL ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyIsAlgorithmSupported_trampoline<>(SB)
++func (k *PublicKeyECDSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
++}
 +
-+TEXT _mkcgo_SecKeyVerifySignature_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecKeyVerifySignature(SB)
++func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
++	pkey, err := newECDSAKey(curve, x, y, nil)
++	if err != nil {
++		return nil, err
++	}
++	k := &PublicKeyECDSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PublicKeyECDSA).finalize)
++	return k, nil
++}
 +
-+GLOBL ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecKeyVerifySignature_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecKeyVerifySignature_trampoline<>(SB)
++func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
++	pkey, err := newECDSAKey(curve, x, y, d)
++	if err != nil {
++		return nil, err
++	}
++	k := &PrivateKeyECDSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyECDSA).finalize)
++	return k, nil
++}
 +
-+TEXT _mkcgo_SecRandomCopyBytes_trampoline<>(SB), NOSPLIT, $0-0
-+	JMP _mkcgo_SecRandomCopyBytes(SB)
++func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
++	// Generate the private key.
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_EC, 0, curve)
++	if err != nil {
++		return nil, nil, nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+GLOBL ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB), RODATA, $_GOPTRSIZE
-+DATA ·_mkcgo_SecRandomCopyBytes_trampoline_addr(SB)/_GOPTRSIZE, $_mkcgo_SecRandomCopyBytes_trampoline<>(SB)
++	var bx, by, bd ossl.BIGNUM_PTR
++	defer func() {
++		ossl.BN_free(bx)
++		ossl.BN_free(by)
++	}()
++	switch major() {
++	case 1:
++		// Retrieve the internal EC_KEY, which holds the X, Y, and D coordinates.
++		key := getECKey(pkey)
++		group := ossl.EC_KEY_get0_group(key)
++		pt := ossl.EC_KEY_get0_public_key(key)
++		// Allocate two big numbers to store the X and Y coordinates.
++		bx, err = ossl.BN_new()
++		if err != nil {
++			return nil, nil, nil, err
++		}
++		by, err = ossl.BN_new()
++		if err != nil {
++			return nil, nil, nil, err
++		}
++		// Get X and Y.
++		if _, err := ossl.EC_POINT_get_affine_coordinates_GFp(group, pt, bx, by, nil); err != nil {
++			return nil, nil, nil, err
++		}
++		// Get Z. We don't need to free it, get0 does not increase the reference count.
++		bd = ossl.EC_KEY_get0_private_key(key)
++	case 3, 4:
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X.ptr(), &bx); err != nil {
++			return nil, nil, nil, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_Y.ptr(), &by); err != nil {
++			return nil, nil, nil, err
++		}
++		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bd); err != nil {
++			return nil, nil, nil, err
++		}
++		defer ossl.BN_clear_free(bd)
++	default:
++		panic(errUnsupportedVersion())
++	}
 +
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
-new file mode 100644
-index 00000000000000..c17b764ee90662
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_cgo.go
-@@ -0,0 +1,388 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++	// Get D.
++	return bnToBig(bx), bnToBig(by), bnToBig(bd), nil
++}
 +
-+// Code generated by mkcgo. DO NOT EDIT.
++func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
++	return evpSign(priv.withKey, 0, 0, 0, hash)
++}
 +
-+package security
++func HashSignECDSA(priv *PrivateKeyECDSA, h crypto.Hash, msg []byte) ([]byte, error) {
++	return evpHashSign(priv.withKey, h, msg)
++}
 +
-+/*
-+#cgo CFLAGS: -Wno-attributes
-+#cgo darwin LDFLAGS: -framework CoreFoundation
-+#cgo darwin LDFLAGS: -framework Security
++func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
++	return evpVerify(pub.withKey, 0, 0, 0, sig, hash) == nil
++}
 +
-+#include "zsecurity.h"
-+#cgo noescape _mkcgo_CFDataCreate
-+#cgo nocallback _mkcgo_CFDataCreate
-+#cgo noescape _mkcgo_CFNumberCreate
-+#cgo nocallback _mkcgo_CFNumberCreate
-+#cgo noescape _mkcgo_SecKeyCopyExternalRepresentation
-+#cgo nocallback _mkcgo_SecKeyCopyExternalRepresentation
-+#cgo noescape _mkcgo_SecKeyCreateDecryptedData
-+#cgo nocallback _mkcgo_SecKeyCreateDecryptedData
-+#cgo noescape _mkcgo_SecKeyCreateEncryptedData
-+#cgo nocallback _mkcgo_SecKeyCreateEncryptedData
-+#cgo noescape _mkcgo_SecKeyCreateRandomKey
-+#cgo nocallback _mkcgo_SecKeyCreateRandomKey
-+#cgo noescape _mkcgo_SecKeyCreateSignature
-+#cgo nocallback _mkcgo_SecKeyCreateSignature
-+#cgo noescape _mkcgo_SecKeyCreateWithData
-+#cgo nocallback _mkcgo_SecKeyCreateWithData
-+#cgo noescape _mkcgo_SecKeyVerifySignature
-+#cgo nocallback _mkcgo_SecKeyVerifySignature
-+#cgo noescape _mkcgo_SecRandomCopyBytes
-+#cgo nocallback _mkcgo_SecRandomCopyBytes
-+*/
-+import "C"
-+import "unsafe"
++func HashVerifyECDSA(pub *PublicKeyECDSA, h crypto.Hash, msg, sig []byte) bool {
++	return evpHashVerify(pub.withKey, h, msg, sig) == nil
++}
 +
-+//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++func newECDSAKey(curve string, x, y, d BigInt) (ossl.EVP_PKEY_PTR, error) {
++	nid := curveNID(curve)
++	bx, err := bigToBN(x)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.BN_free(bx)
++	by, err := bigToBN(y)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.BN_free(by)
++	var bd ossl.BIGNUM_PTR
++	if d != nil {
++		bd, err = bigToBN(d)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.BN_clear_free(bd)
++	}
++	switch major() {
++	case 1:
++		return newECDSAKey1(nid, bx, by, bd)
++	case 3, 4:
++		return newECDSAKey3(nid, bx, by, bd)
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
-+//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
-+//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
-+//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
-+//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
-+//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
-+//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
-+//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++func newECDSAKey1(nid int32, bx, by, bd ossl.BIGNUM_PTR) (pkey ossl.EVP_PKEY_PTR, err error) {
++	checkMajorVersion(1)
 +
-+var (
-+	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
-+	_mkcgo_kSecRandomDefault                                SecRandomRef
-+	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
-+	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
-+	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
-+	_mkcgo_kSecAttrKeyType                                  CFStringRef
-+	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
-+	_mkcgo_kSecAttrKeyClass                                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
-+)
++	key, err := ossl.EC_KEY_new_by_curve_name(nid)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if pkey == nil {
++			defer ossl.EC_KEY_free(key)
++		}
++	}()
++	if _, err := ossl.EC_KEY_set_public_key_affine_coordinates(key, bx, by); err != nil {
++		return nil, err
++	}
++	if bd != nil {
++		if _, err := ossl.EC_KEY_set_private_key(key, bd); err != nil {
++			return nil, err
++		}
++	}
 +
-+//go:noinline
-+func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
++	return newEVPPKEY(key)
++}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++func newECDSAKey3(nid int32, bx, by, bd ossl.BIGNUM_PTR) (ossl.EVP_PKEY_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++	// Create the encoded public key public key from bx and by.
++	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
++		pt, err := ossl.EC_POINT_new(group)
++		if err != nil {
++			return nil, err
++		}
++		if _, err := ossl.EC_POINT_set_affine_coordinates(group, pt, bx, by, nil); err != nil {
++			ossl.EC_POINT_free(pt)
++			return nil, err
++		}
++		return pt, nil
++	})
++	if err != nil {
++		return nil, err
++	}
++	// Construct the parameters.
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubBytes)
++	var selection int32
++	if bd != nil {
++		bld.addBN(_OSSL_PKEY_PARAM_PRIV_KEY, bd)
++		selection = ossl.EVP_PKEY_KEYPAIR
++	} else {
++		selection = ossl.EVP_PKEY_PUBLIC_KEY
++	}
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++	return newEvpFromParams(ossl.EVP_PKEY_EC, selection, params)
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go
+new file mode 100644
+index 00000000000000..205b01cd36b206
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go
+@@ -0,0 +1,209 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++package openssl
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++import (
++	"errors"
++	"runtime"
++	"strconv"
++	"sync"
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++const (
++	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
++	publicKeySizeEd25519 = 32
++	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
++	privateKeySizeEd25519 = 64
++	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
++	signatureSizeEd25519 = 64
++	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
++	seedSizeEd25519 = 32
++)
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++// TODO: Add support for Ed25519ph and Ed25519ctx when OpenSSL supports them,
++// which will probably be in 3.2.0 (https://github.com/openssl/openssl/issues/20418).
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+}
++var supportsEd25519 = sync.OnceValue(func() bool {
++	switch major() {
++	case 1:
++		ctx, _ := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_ED25519, nil)
++		if ctx != nil {
++			ossl.EVP_PKEY_CTX_free(ctx)
++			return true
++		}
++	case 3, 4:
++		sig, _ := ossl.EVP_SIGNATURE_fetch(nil, _KeyTypeED25519.ptr(), nil)
++		if sig != nil {
++			ossl.EVP_SIGNATURE_free(sig)
++			return true
++		}
++	}
++	return false
++})
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++// SupportsEd25519 returns true if the current OpenSSL version supports
++// GenerateKeyEd25519, NewKeyFromSeedEd25519, SignEd25519 and VerifyEd25519.
++func SupportsEd25519() bool {
++	return supportsEd25519()
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++type PublicKeyEd25519 struct {
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++func (k *PublicKeyEd25519) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++func (k *PublicKeyEd25519) Bytes() ([]byte, error) {
++	defer runtime.KeepAlive(k)
++	pub := make([]byte, publicKeySizeEd25519)
++	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
++		return nil, err
++	}
++	return pub, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++type PrivateKeyEd25519 struct {
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++func (k *PrivateKeyEd25519) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++func (k *PrivateKeyEd25519) Bytes() ([]byte, error) {
++	defer runtime.KeepAlive(k)
++	priv := make([]byte, privateKeySizeEd25519)
++	if err := extractPKEYPrivEd25519(k._pkey, priv); err != nil {
++		return nil, err
++	}
++	return priv, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++func (k *PrivateKeyEd25519) Public() (*PublicKeyEd25519, error) {
++	pub := make([]byte, publicKeySizeEd25519)
++	if err := extractPKEYRawPublic(k._pkey, pub); err != nil {
++		return nil, err
++	}
++	pubk, err := NewPublicKeyEd25519(pub)
++	if err != nil {
++		return nil, err
++	}
++	return pubk, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++// GenerateKeyEd25519 generates a private key.
++func GenerateKeyEd25519() (*PrivateKeyEd25519, error) {
++	pkeyPriv, err := generateEVPPKey(ossl.EVP_PKEY_ED25519, 0, "")
++	if err != nil {
++		return nil, err
++	}
++	priv := &PrivateKeyEd25519{_pkey: pkeyPriv}
++	runtime.SetFinalizer(priv, (*PrivateKeyEd25519).finalize)
++	return priv, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++// Deprecated: use NewPrivateKeyEd25519 instead.
++func NewPrivateKeyEd25119(priv []byte) (*PrivateKeyEd25519, error) {
++	return NewPrivateKeyEd25519(priv)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++func NewPrivateKeyEd25519(priv []byte) (*PrivateKeyEd25519, error) {
++	if len(priv) != privateKeySizeEd25519 {
++		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
++	}
++	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++// Deprecated: use NewPublicKeyEd25519 instead.
++func NewPublicKeyEd25119(pub []byte) (*PublicKeyEd25519, error) {
++	return NewPublicKeyEd25519(pub)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++func NewPublicKeyEd25519(pub []byte) (*PublicKeyEd25519, error) {
++	if len(pub) != publicKeySizeEd25519 {
++		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
++	}
++	pkey, err := ossl.EVP_PKEY_new_raw_public_key(ossl.EVP_PKEY_ED25519, nil, pub)
++	if err != nil {
++		return nil, err
++	}
++	pubk := &PublicKeyEd25519{_pkey: pkey}
++	runtime.SetFinalizer(pubk, (*PublicKeyEd25519).finalize)
++	return pubk, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
++// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
++// package.
++func NewPrivateKeyEd25519FromSeed(seed []byte) (*PrivateKeyEd25519, error) {
++	if len(seed) != seedSizeEd25519 {
++		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
++	}
++	pkey, err := ossl.EVP_PKEY_new_raw_private_key(ossl.EVP_PKEY_ED25519, nil, seed)
++	if err != nil {
++		return nil, err
++	}
++	priv := &PrivateKeyEd25519{_pkey: pkey}
++	runtime.SetFinalizer(priv, (*PrivateKeyEd25519).finalize)
++	return priv, nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++func extractPKEYPrivEd25519(pkey ossl.EVP_PKEY_PTR, priv []byte) error {
++	if err := extractPKEYRawPublic(pkey, priv[seedSizeEd25519:]); err != nil {
++		return err
++	}
++	return extractPKEYRawPrivate(pkey, priv[:seedSizeEd25519])
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++// SignEd25519 signs the message with priv and returns a signature.
++func SignEd25519(priv *PrivateKeyEd25519, message []byte) (sig []byte, err error) {
++	// Outline the function body so that the returned key can be stack-allocated.
++	sig = make([]byte, signatureSizeEd25519)
++	err = signEd25519(priv, sig, message)
++	if err != nil {
++		return nil, err
++	}
++	return sig, err
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++func signEd25519(priv *PrivateKeyEd25519, sig, message []byte) error {
++	defer runtime.KeepAlive(priv)
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestSignInit(ctx, nil, nil, nil, priv._pkey); err != nil {
++		return err
++	}
++	siglen := signatureSizeEd25519
++	if _, err := ossl.EVP_DigestSign(ctx, sig, &siglen, message); err != nil {
++		return err
++	}
++	if siglen != signatureSizeEd25519 {
++		return errors.New("ed25519: bad signature length: " + strconv.Itoa(siglen))
++	}
++	return nil
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++// VerifyEd25519 reports whether sig is a valid signature of message by pub.
++func VerifyEd25519(pub *PublicKeyEd25519, message, sig []byte) error {
++	defer runtime.KeepAlive(pub)
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestVerifyInit(ctx, nil, nil, nil, pub._pkey); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_DigestVerify(ctx, sig, message); err != nil {
++		return errors.New("ed25519: invalid signature")
++	}
++	return nil
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go
+new file mode 100644
+index 00000000000000..65f4d2ddcbc6fb
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go
+@@ -0,0 +1,615 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+var (
-+	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
-+	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
-+	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
-+	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
-+	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
-+	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
-+	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
-+	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
-+	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
-+	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
-+	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
++package openssl
++
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"strconv"
++	"sync"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+type Boolean = C.Boolean
-+type CFAllocatorRef = C.CFAllocatorRef
-+type CFDataRef = C.CFDataRef
-+type CFDictionaryKeyCallBacks = C.CFDictionaryKeyCallBacks
-+type CFDictionaryRef = C.CFDictionaryRef
-+type CFDictionaryValueCallBacks = C.CFDictionaryValueCallBacks
-+type CFErrorRef = C.CFErrorRef
-+type CFIndex = C.CFIndex
-+type CFMutableDictionaryRef = C.CFMutableDictionaryRef
-+type CFNumberRef = C.CFNumberRef
-+type CFNumberType = C.CFNumberType
-+type CFStringEncoding = C.CFStringEncoding
-+type CFStringRef = C.CFStringRef
-+type CFTypeRef = C.CFTypeRef
-+type SecKeyAlgorithm = C.SecKeyAlgorithm
-+type SecKeyOperationType = C.SecKeyOperationType
-+type SecKeyRef = C.SecKeyRef
-+type SecRandomRef = C.SecRandomRef
++// cacheMD is a cache of crypto.Hash to GOossl.EVP_MD_PTR.
++var cacheMD sync.Map
 +
-+//go:nosplit
-+func mkcgoNoEscape(p *C.uintptr_t) *C.uintptr_t {
-+	x := uintptr(unsafe.Pointer(p))
-+	return (*C.uintptr_t)(unsafe.Pointer(x ^ 0))
++// hashFuncHash calls fn() and returns its result.
++// If fn() panics, the panic is recovered and returned as an error.
++// This is used to avoid aborting the program when calling
++// an unsupported hash function. It is the caller's responsibility
++// to check the returned value.
++func hashFuncHash(fn func() hash.Hash) (h hash.Hash, err error) {
++	defer func() {
++		r := recover()
++		if r == nil {
++			return
++		}
++		h = nil
++		switch e := r.(type) {
++		case error:
++			err = e
++		case string:
++			err = errors.New(e)
++		default:
++			err = errors.New("unsupported panic")
++		}
++	}()
++	return fn(), nil
 +}
 +
-+func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
-+	return C._mkcgo_CFDataCreate(allocator, (*C.uint8_t)(unsafe.Pointer(unsafe.SliceData(bytes))), CFIndex(len(bytes)))
++// hashToMD converts a hash.Hash implementation from this package to a GOossl.EVP_MD_PTR.
++func hashToMD(h hash.Hash) ossl.EVP_MD_PTR {
++	if h, ok := h.(*Hash); ok {
++		return h.alg.md
++	}
++	return nil
 +}
 +
-+func CFDataGetBytePtr(data CFDataRef) *uint8 {
-+	return (*uint8)(unsafe.Pointer(C._mkcgo_CFDataGetBytePtr(data)))
++// hashToCryptoHash converts a hash.Hash implementation from this package to a crypto.Hash.
++func hashToCryptoHash(h hash.Hash) crypto.Hash {
++	if h, ok := h.(*Hash); ok {
++		return h.alg.ch
++	}
++	return 0
++}
++
++// hashFuncToMD converts a hash.Hash function to a GOossl.EVP_MD_PTR.
++// See [hashFuncHash] for details on error handling.
++func hashFuncToMD(fn func() hash.Hash) (ossl.EVP_MD_PTR, error) {
++	h, err := hashFuncHash(fn)
++	if err != nil {
++		return nil, err
++	}
++	md := hashToMD(h)
++	if md == nil {
++		return nil, errors.New("unsupported hash function")
++	}
++	return md, nil
++}
++
++// provider is an identifier for a known provider.
++type provider uint8
++
++const (
++	providerNone provider = iota
++	providerOSSLDefault
++	providerOSSLFIPS
++	providerSymCrypt
++)
++
++type hashAlgorithm struct {
++	md             ossl.EVP_MD_PTR
++	ch             crypto.Hash
++	size           int
++	blockSize      int
++	provider       provider
++	marshallable   bool
++	magic          string
++	marshalledSize int
 +}
 +
-+func CFDataGetLength(data CFDataRef) CFIndex {
-+	return C._mkcgo_CFDataGetLength(data)
-+}
++// loadHash converts a crypto.Hash to a EVP_MD.
++func loadHash(ch crypto.Hash, must bool) (h *hashAlgorithm) {
++	defer func() {
++		if h == nil && must {
++			panic("openssl: unsupported hash function: " + strconv.Itoa(int(ch)))
++		}
++	}()
++	if v, ok := cacheMD.Load(ch); ok {
++		return v.(*hashAlgorithm)
++	}
++
++	var hash hashAlgorithm
++	switch ch {
++	case crypto.RIPEMD160:
++		hash.md = ossl.EVP_ripemd160()
++	case crypto.MD4:
++		hash.md = ossl.EVP_md4()
++	case crypto.MD5:
++		hash.md = ossl.EVP_md5()
++		hash.magic = magicMD5
++		hash.marshalledSize = marshaledSizeMD5
++	case crypto.MD5SHA1:
++		hash.md = ossl.EVP_md5_sha1()
++	case crypto.SHA1:
++		hash.md = ossl.EVP_sha1()
++		hash.magic = magic1
++		hash.marshalledSize = marshaledSize1
++	case crypto.SHA224:
++		hash.md = ossl.EVP_sha224()
++		hash.magic = magic224
++		hash.marshalledSize = marshaledSize256
++	case crypto.SHA256:
++		hash.md = ossl.EVP_sha256()
++		hash.magic = magic256
++		hash.marshalledSize = marshaledSize256
++	case crypto.SHA384:
++		hash.md = ossl.EVP_sha384()
++		hash.magic = magic384
++		hash.marshalledSize = marshaledSize512
++	case crypto.SHA512:
++		hash.md = ossl.EVP_sha512()
++		hash.magic = magic512
++		hash.marshalledSize = marshaledSize512
++	case crypto.SHA512_224:
++		hash.md = ossl.EVP_sha512_224()
++		hash.magic = magic512_224
++		hash.marshalledSize = marshaledSize512
++	case crypto.SHA512_256:
++		hash.md = ossl.EVP_sha512_256()
++		hash.magic = magic512_256
++		hash.marshalledSize = marshaledSize512
++	case crypto.SHA3_224:
++		hash.md = ossl.EVP_sha3_224()
++	case crypto.SHA3_256:
++		hash.md = ossl.EVP_sha3_256()
++	case crypto.SHA3_384:
++		hash.md = ossl.EVP_sha3_384()
++	case crypto.SHA3_512:
++		hash.md = ossl.EVP_sha3_512()
++	}
++	if hash.md == nil {
++		cacheMD.Store(ch, (*hashAlgorithm)(nil))
++		return nil
++	}
++	hash.ch = ch
++	hash.size = int(ossl.EVP_MD_get_size(hash.md))
++	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
++	switch major() {
++	case 3, 4:
++		// On OpenSSL 3, directly operating on a EVP_MD object
++		// not created by EVP_MD_fetch has negative performance
++		// implications, as digest operations will have
++		// to fetch it on every call. Better to just fetch it once here.
++		md, _ := ossl.EVP_MD_fetch(nil, ossl.EVP_MD_get0_name(hash.md), nil)
++		// Don't overwrite md in case it can't be fetched, as the md may still be used
++		// outside of EVP_MD_CTX, for example to sign and verify RSA signatures.
++		if md != nil {
++			hash.md = md
++		}
++	}
++	if hash.magic != "" {
++		if hash.marshalledSize == 0 {
++			panic("marshalledSize must be set for " + hash.magic)
++		}
++	}
++
++	switch major() {
++	case 1:
++		hash.provider = providerOSSLDefault
++	case 3, 4:
++		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
++			cname := ossl.OSSL_PROVIDER_get0_name(prov)
++			switch goString(cname) {
++			case "default":
++				hash.provider = providerOSSLDefault
++				hash.marshallable = hash.magic != ""
++			case "fips":
++				hash.provider = providerOSSLFIPS
++				hash.marshallable = hash.magic != ""
++			case "symcryptprovider":
++				hash.provider = providerSymCrypt
++				hash.marshallable = hash.magic != "" && isSymCryptHashStateSerializable(hash.md)
++			}
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
 +
-+func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
-+	return C._mkcgo_CFDictionaryCreate(allocator, keys, values, numValues, keyCallBacks, valueCallBacks)
++	cacheMD.Store(ch, &hash)
++	return &hash
 +}
 +
-+func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
-+	return C._mkcgo_CFDictionaryCreateMutable(allocator, capacity, keyCallBacks, valueCallBacks)
-+}
++// generateEVPPKey generates a new EVP_PKEY with the given id and properties.
++func generateEVPPKey(id, bits int32, curve string) (ossl.EVP_PKEY_PTR, error) {
++	if bits != 0 && curve != "" {
++		return nil, fail("incorrect generateEVPPKey parameters")
++	}
++	var pkey ossl.EVP_PKEY_PTR
++	switch major() {
++	case 1:
++		ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		if _, err := ossl.EVP_PKEY_keygen_init(ctx); err != nil {
++			return nil, err
++		}
++		if bits != 0 {
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_RSA_KEYGEN_BITS, bits, nil); err != nil {
++				return nil, err
++			}
++		}
++		if id == ossl.EVP_PKEY_EC && curve != "" {
++			if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, id, -1, ossl.EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, curveNID(curve), nil); err != nil {
++				return nil, err
++			}
++		}
++		if _, err := ossl.EVP_PKEY_keygen(ctx, &pkey); err != nil {
++			return nil, err
++		}
++	case 3, 4:
++		var err error
++		switch id {
++		case ossl.EVP_PKEY_RSA:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_RSA(nil, nil, _KeyTypeRSA.ptr(), int(bits))
++		case ossl.EVP_PKEY_EC:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_EC(nil, nil, _KeyTypeEC.ptr(), ossl.OBJ_nid2sn(curveNID(curve)))
++		case ossl.EVP_PKEY_ED25519:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_ED25519(nil, nil, _KeyTypeED25519.ptr())
++		case ossl.EVP_PKEY_X25519:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_X25519(nil, nil, _KeyTypeX25519.ptr())
++		case ossl.EVP_PKEY_MLKEM_768:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM768.ptr())
++		case ossl.EVP_PKEY_MLKEM_1024:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLKEM(nil, nil, _KeyTypeMLKEM1024.ptr())
++		case ossl.EVP_PKEY_ML_DSA_44:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA44.ptr())
++		case ossl.EVP_PKEY_ML_DSA_65:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA65.ptr())
++		case ossl.EVP_PKEY_ML_DSA_87:
++			pkey, err = ossl.EVP_PKEY_Q_keygen_MLDSA(nil, nil, _KeyTypeMLDSA87.ptr())
++		default:
++			panic("unsupported key type '" + strconv.Itoa(int(id)) + "'")
++		}
++		if err != nil {
++			return nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
 +
-+func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
-+	C._mkcgo_CFDictionarySetValue(theDict, key, value)
++	return pkey, nil
 +}
 +
-+func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
-+	return C._mkcgo_CFErrorCopyDescription(__error)
-+}
++type withKeyFunc func(func(ossl.EVP_PKEY_PTR) error) error
++type initFunc func(ossl.EVP_PKEY_CTX_PTR) error
++type cryptFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, *int, []byte) error
++type verifyFunc func(ossl.EVP_PKEY_CTX_PTR, []byte, []byte) error
 +
-+func CFErrorGetCode(__error CFErrorRef) CFIndex {
-+	return C._mkcgo_CFErrorGetCode(__error)
++func setupEVP(withKey withKeyFunc, padding int32,
++	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
++	init initFunc) (_ ossl.EVP_PKEY_CTX_PTR, err error) {
++	var ctx ossl.EVP_PKEY_CTX_PTR
++	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) error {
++		ctx, err = ossl.EVP_PKEY_CTX_new(pkey, nil)
++		return err
++	}); err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			if ctx != nil {
++				ossl.EVP_PKEY_CTX_free(ctx)
++				ctx = nil
++			}
++		}
++	}()
++	if err := init(ctx); err != nil {
++		return nil, err
++	}
++	if padding == 0 {
++		return ctx, nil
++	}
++	// Each padding type has its own requirements in terms of when to apply the padding,
++	// so it can't be just set at this point.
++	switch padding {
++	case ossl.RSA_PKCS1_OAEP_PADDING:
++		err = setOAEPPadding(ctx, h, mgfHash, label)
++	case ossl.RSA_PKCS1_PSS_PADDING:
++		err = setPSSPadding(ctx, saltLen, ch)
++	case ossl.RSA_PKCS1_PADDING:
++		err = setPKCS1Padding(ctx, ch)
++	default:
++		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, padding, nil)
++	}
++	if err != nil {
++		return nil, err
++	}
++	return ctx, nil
 +}
 +
-+func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
-+	return C._mkcgo_CFNumberCreate(allocator, theType, valuePtr)
++func setPSSPadding(ctx ossl.EVP_PKEY_CTX_PTR, saltLen int32, ch crypto.Hash) error {
++	alg := loadHash(ch, false)
++	if alg == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++		return err
++	}
++	// setPadding must happen after setting EVP_PKEY_CTRL_MD.
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PSS_PADDING, nil); err != nil {
++		return err
++	}
++	if saltLen != 0 {
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PSS_SALTLEN, saltLen, nil); err != nil {
++			return err
++		}
++	}
++	return nil
 +}
 +
-+func CFRelease(cf CFTypeRef) {
-+	C._mkcgo_CFRelease(cf)
++func setPKCS1Padding(ctx ossl.EVP_PKEY_CTX_PTR, ch crypto.Hash) error {
++	if ch == 0 {
++		// We support unhashed messages.
++		return nil
++	}
++	alg := loadHash(ch, false)
++	if alg == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, -1, ossl.EVP_PKEY_CTRL_MD, 0, unsafe.Pointer(alg.md)); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++		return err
++	}
++	return nil
 +}
 +
-+func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
-+	return (*byte)(unsafe.Pointer(C._mkcgo_CFStringGetCStringPtr(str, encoding)))
++func setOAEPPadding(ctx ossl.EVP_PKEY_CTX_PTR, h, mgfHash hash.Hash, label []byte) error {
++	md := hashToMD(h)
++	if md == nil {
++		return errors.New("crypto/rsa: unsupported hash function")
++	}
++	var mgfMD ossl.EVP_MD_PTR
++	if mgfHash != nil {
++		// mgfHash is optional, but if it is set it must match a supported hash function.
++		mgfMD = hashToMD(mgfHash)
++		if mgfMD == nil {
++			return errors.New("crypto/rsa: unsupported hash function")
++		}
++	}
++	// setPadding must happen before setting EVP_PKEY_CTRL_RSA_OAEP_MD.
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_OAEP_PADDING, nil); err != nil {
++		return err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_MD, 0, unsafe.Pointer(md)); err != nil {
++		return err
++	}
++	if mgfHash != nil {
++		if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_MGF1_MD, 0, unsafe.Pointer(mgfMD)); err != nil {
++			return err
++		}
++	}
++	// ctx takes ownership of label, so malloc a copy for OpenSSL to free.
++	// OpenSSL does not take ownership of the label if the length is zero,
++	// so better avoid the allocation.
++	var clabel *byte
++	if len(label) > 0 {
++		clabel = (*byte)(cryptoMalloc(len(label)))
++		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
++		var err error
++		switch major() {
++		case 3, 4:
++			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
++		default:
++			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
++		}
++		if err != nil {
++			cryptoFree(unsafe.Pointer(clabel))
++			return err
++		}
++	}
++	return nil
 +}
 +
-+func CFStringGetLength(str CFStringRef) CFIndex {
-+	return C._mkcgo_CFStringGetLength(str)
-+}
++func cryptEVP(withKey withKeyFunc, padding int32,
++	h, mgfHash hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
++	init initFunc, crypt cryptFunc, in []byte) ([]byte, error) {
 +
-+func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
-+	return C._mkcgo_SecKeyCopyExternalRepresentation(key, __error)
++	ctx, err := setupEVP(withKey, padding, h, mgfHash, label, saltLen, ch, init)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	var pkeySize int32
++	if err := withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
++		pkeySize, err = ossl.EVP_PKEY_get_size(pkey)
++		return err
++	}); err != nil {
++		return nil, err
++	}
++	outLen := int(pkeySize)
++	out := make([]byte, pkeySize)
++	if err := crypt(ctx, out, &outLen, in); err != nil {
++		return nil, err
++	}
++	// The size returned by EVP_PKEY_get_size() is only preliminary and not exact,
++	// so the final contents of the out buffer may be smaller.
++	return out[:outLen], nil
 +}
 +
-+func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
-+	return C._mkcgo_SecKeyCopyPublicKey(key)
-+}
++func verifyEVP(withKey withKeyFunc, padding int32,
++	h hash.Hash, label []byte, saltLen int32, ch crypto.Hash,
++	init initFunc, verify verifyFunc,
++	sig, in []byte) error {
 +
-+func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
-+	return C._mkcgo_SecKeyCreateDecryptedData(key, algorithm, ciphertext, __error)
++	ctx, err := setupEVP(withKey, padding, h, nil, label, saltLen, ch, init)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	return verify(ctx, sig, in)
 +}
 +
-+func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
-+	return C._mkcgo_SecKeyCreateEncryptedData(key, algorithm, plaintext, __error)
++func evpEncrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
++	encryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_encrypt_init(ctx)
++		return err
++	}
++	encrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		if _, err := ossl.EVP_PKEY_encrypt(ctx, out, outLen, in); err != nil {
++			return err
++		}
++		return nil
++	}
++	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, encryptInit, encrypt, msg)
 +}
 +
-+func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
-+	return C._mkcgo_SecKeyCreateRandomKey(parameters, __error)
++func evpDecrypt(withKey withKeyFunc, padding int32, h, mgfHash hash.Hash, label, msg []byte) ([]byte, error) {
++	decryptInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_decrypt_init(ctx)
++		return err
++	}
++	decrypt := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		_, err := ossl.EVP_PKEY_decrypt(ctx, out, outLen, in)
++		return err
++	}
++	return cryptEVP(withKey, padding, h, mgfHash, label, 0, 0, decryptInit, decrypt, msg)
 +}
 +
-+func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
-+	return C._mkcgo_SecKeyCreateSignature(key, algorithm, data, __error)
++func evpSign(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, hashed []byte) ([]byte, error) {
++	signtInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_sign_init(ctx)
++		return err
++	}
++	sign := func(ctx ossl.EVP_PKEY_CTX_PTR, out []byte, outLen *int, in []byte) error {
++		_, err := ossl.EVP_PKEY_sign(ctx, out, outLen, in)
++		return err
++	}
++	return cryptEVP(withKey, padding, nil, nil, nil, saltLen, h, signtInit, sign, hashed)
 +}
 +
-+func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
-+	return C._mkcgo_SecKeyCreateWithData(keyData, attributes, __error)
++func evpVerify(withKey withKeyFunc, padding int32, saltLen int32, h crypto.Hash, sig, hashed []byte) error {
++	verifyInit := func(ctx ossl.EVP_PKEY_CTX_PTR) error {
++		_, err := ossl.EVP_PKEY_verify_init(ctx)
++		return err
++	}
++	verify := func(ctx ossl.EVP_PKEY_CTX_PTR, sig []byte, in []byte) error {
++		_, err := ossl.EVP_PKEY_verify(ctx, sig, in)
++		return err
++	}
++	return verifyEVP(withKey, padding, nil, nil, saltLen, h, verifyInit, verify, sig, hashed)
 +}
 +
-+func SecKeyGetBlockSize(key SecKeyRef) int {
-+	return int(C._mkcgo_SecKeyGetBlockSize(key))
++func evpHashSign(withKey withKeyFunc, h crypto.Hash, msg []byte) ([]byte, error) {
++	alg := loadHash(h, false)
++	if alg == nil {
++		return nil, errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
++	}
++	var out []byte
++	var outLen int
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
++		_, err := ossl.EVP_DigestSignInit(ctx, nil, alg.md, nil, key)
++		return err
++	}); err != nil {
++		return nil, err
++	}
++	if len(msg) > 0 {
++		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
++			return nil, err
++		}
++	}
++	// Obtain the signature length
++	if _, err := ossl.EVP_DigestSignFinal(ctx, nil, &outLen); err != nil {
++		return nil, err
++	}
++	out = make([]byte, outLen)
++	// Obtain the signature
++	if _, err := ossl.EVP_DigestSignFinal(ctx, out, &outLen); err != nil {
++		return nil, err
++	}
++	return out[:outLen], nil
 +}
 +
-+func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
-+	return C._mkcgo_SecKeyIsAlgorithmSupported(key, operation, algorithm)
++func evpHashVerify(withKey withKeyFunc, h crypto.Hash, msg, sig []byte) error {
++	alg := loadHash(h, false)
++	if alg == nil {
++		return errors.New("unsupported hash function: " + strconv.Itoa(int(h)))
++	}
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if err := withKey(func(key ossl.EVP_PKEY_PTR) error {
++		_, err := ossl.EVP_DigestVerifyInit(ctx, nil, alg.md, nil, key)
++		return err
++	}); err != nil {
++		return err
++	}
++	if len(msg) > 0 {
++		if _, err := ossl.EVP_DigestUpdate(ctx, msg); err != nil {
++			return err
++		}
++	}
++	if _, err := ossl.EVP_DigestVerifyFinal(ctx, sig); err != nil {
++		return err
++	}
++	return nil
 +}
 +
-+func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
-+	return C._mkcgo_SecKeyVerifySignature(key, algorithm, signedData, signature, __error)
++func newEVPPKEY(key ossl.EC_KEY_PTR) (ossl.EVP_PKEY_PTR, error) {
++	pkey, err := ossl.EVP_PKEY_new()
++	if err != nil {
++		return nil, err
++	}
++	if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_EC, unsafe.Pointer(key)); err != nil {
++		ossl.EVP_PKEY_free(pkey)
++		return nil, err
++	}
++	return pkey, nil
 +}
 +
-+func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
-+	return int32(C._mkcgo_SecRandomCopyBytes(rnd, C.size_t(len(bytes)), (*C.uchar)(unsafe.Pointer(unsafe.SliceData(bytes)))))
++// getECKey returns the EC_KEY from pkey.
++// If pkey does not contain an EC_KEY it panics.
++// The returned key should not be freed.
++func getECKey(pkey ossl.EVP_PKEY_PTR) ossl.EC_KEY_PTR {
++	key, err := ossl.EVP_PKEY_get0_EC_KEY(pkey)
++	if err != nil {
++		panic(err)
++	}
++	return key
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
-new file mode 100644
-index 00000000000000..7e5d52ef2d3c63
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/security/zsecurity_nocgo.go
-@@ -0,0 +1,466 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+// Code generated by mkcgo. DO NOT EDIT.
-+
-+//go:build !cgo
-+
-+package security
-+
-+import (
-+	"runtime"
-+	"unsafe"
-+)
-+
-+var _ = runtime.GOOS
-+
-+var _mkcgoAlwaysFalseSecurity bool
-+var _mkcgoEscapeSinkSecurity unsafe.Pointer
 +
-+// mkcgoEscapePtrSecurity forces p to escape to the heap.
-+// This implementation is also used in the standard library:
-+// https://github.com/golang/go/blob/f71432d223eeb2139b460957817400750fd13655/src/internal/abi/escape.go#L24-L33
-+func mkcgoEscapePtrSecurity(p unsafe.Pointer) unsafe.Pointer {
-+	if _mkcgoAlwaysFalseSecurity {
-+		_mkcgoEscapeSinkSecurity = p
++func newEvpFromParams(id int32, selection int32, params ossl.OSSL_PARAM_PTR) (ossl.EVP_PKEY_PTR, error) {
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(id, nil)
++	if err != nil {
++		return nil, err
 +	}
-+	return p
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_fromdata_init(ctx); err != nil {
++		return nil, err
++	}
++	var pkey ossl.EVP_PKEY_PTR
++	if _, err := ossl.EVP_PKEY_fromdata(ctx, &pkey, selection, params); err != nil {
++		//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 leak EVP_PKEY on error: https://github.com/openssl/openssl/issues/17407.
++		if major() == 3 && minor() == 0 && patch() <= 2 {
++			ossl.EVP_PKEY_free(pkey)
++		}
++		return nil, err
++	}
++	return pkey, nil
 +}
 +
-+type Boolean = byte
-+type SecRandomRef unsafe.Pointer
-+type SecKeyRef unsafe.Pointer
-+type CFDataRef unsafe.Pointer
-+type CFTypeRef unsafe.Pointer
-+type CFStringRef unsafe.Pointer
-+type CFDictionaryRef unsafe.Pointer
-+type CFMutableDictionaryRef unsafe.Pointer
-+type CFNumberRef unsafe.Pointer
-+type CFErrorRef unsafe.Pointer
-+type CFAllocatorRef unsafe.Pointer
-+type CFDictionaryKeyCallBacks unsafe.Pointer
-+type CFDictionaryValueCallBacks unsafe.Pointer
-+type CFIndex = int64
-+type SecKeyAlgorithm = CFStringRef
-+
-+type SecKeyOperationType int32
-+type CFStringEncoding int32
-+type CFNumberType int32
++func checkPkey(pkey ossl.EVP_PKEY_PTR, isPrivate bool) error {
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if isPrivate {
++		if _, err := ossl.EVP_PKEY_private_check(ctx); err != nil {
++			// Match upstream error message.
++			return errors.New("invalid private key")
++		}
++	} else {
++		// Upstream Go does a partial check here, so do we.
++		if _, err := ossl.EVP_PKEY_public_check_quick(ctx); err != nil {
++			// Match upstream error message.
++			return errors.New("invalid public key")
++		}
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hash.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hash.go
+new file mode 100644
+index 00000000000000..020323eb7be25e
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hash.go
+@@ -0,0 +1,521 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+//go:cgo_import_dynamic _mkcgo_kCFAllocatorDefault kCFAllocatorDefault "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_kSecRandomDefault kSecRandomDefault "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyTypeRSA kSecAttrKeyTypeRSA "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPublic kSecAttrKeyClassPublic "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClassPrivate kSecAttrKeyClassPrivate "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyType kSecAttrKeyType "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeySizeInBits kSecAttrKeySizeInBits "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecAttrKeyClass kSecAttrKeyClass "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 kSecKeyAlgorithmRSASignatureDigestPSSSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 kSecKeyAlgorithmRSASignatureDigestPSSSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 kSecKeyAlgorithmRSASignatureDigestPSSSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 kSecKeyAlgorithmRSASignatureDigestPSSSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 kSecKeyAlgorithmRSASignatureDigestPSSSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw kSecKeyAlgorithmRSAEncryptionRaw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 kSecKeyAlgorithmRSAEncryptionPKCS1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 kSecKeyAlgorithmRSAEncryptionOAEPSHA1 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 kSecKeyAlgorithmRSAEncryptionOAEPSHA224 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 kSecKeyAlgorithmRSAEncryptionOAEPSHA256 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 kSecKeyAlgorithmRSAEncryptionOAEPSHA384 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 kSecKeyAlgorithmRSAEncryptionOAEPSHA512 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 kSecKeyAlgorithmECDSASignatureDigestX962 "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++package openssl
 +
-+//go:linkname _mkcgo_kCFAllocatorDefault _mkcgo_kCFAllocatorDefault
-+//go:linkname _mkcgo_kSecRandomDefault _mkcgo_kSecRandomDefault
-+//go:linkname _mkcgo_kSecAttrKeyTypeRSA _mkcgo_kSecAttrKeyTypeRSA
-+//go:linkname _mkcgo_kSecAttrKeyClassPublic _mkcgo_kSecAttrKeyClassPublic
-+//go:linkname _mkcgo_kSecAttrKeyClassPrivate _mkcgo_kSecAttrKeyClassPrivate
-+//go:linkname _mkcgo_kSecAttrKeyType _mkcgo_kSecAttrKeyType
-+//go:linkname _mkcgo_kSecAttrKeySizeInBits _mkcgo_kSecAttrKeySizeInBits
-+//go:linkname _mkcgo_kSecAttrKeyClass _mkcgo_kSecAttrKeyClass
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw _mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1 _mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw _mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
-+//go:linkname _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512 _mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
-+//go:linkname _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962 _mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++import (
++	"crypto"
++	"errors"
++	"hash"
++	"runtime"
++	"strconv"
++	"sync"
++	"unsafe"
 +
-+var (
-+	_mkcgo_kCFAllocatorDefault                              CFAllocatorRef
-+	_mkcgo_kSecRandomDefault                                SecRandomRef
-+	_mkcgo_kSecAttrKeyTypeRSA                               CFStringRef
-+	_mkcgo_kSecAttrKeyClassPublic                           CFStringRef
-+	_mkcgo_kSecAttrKeyClassPrivate                          CFStringRef
-+	_mkcgo_kSecAttrKeyType                                  CFStringRef
-+	_mkcgo_kSecAttrKeySizeInBits                            CFStringRef
-+	_mkcgo_kSecAttrKeyClass                                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef
-+	_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+//go:noinline
-+func _mkcgo_addr_kCFAllocatorDefault() *CFAllocatorRef { return &_mkcgo_kCFAllocatorDefault }
-+
-+//go:noinline
-+func _mkcgo_addr_kSecRandomDefault() *SecRandomRef { return &_mkcgo_kSecRandomDefault }
++const (
++	magicMD5     = "md5\x01"
++	magic1       = "sha\x01"
++	magic224     = "sha\x02"
++	magic256     = "sha\x03"
++	magic384     = "sha\x04"
++	magic512_224 = "sha\x05"
++	magic512_256 = "sha\x06"
++	magic512     = "sha\x07"
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyTypeRSA() *CFStringRef { return &_mkcgo_kSecAttrKeyTypeRSA }
++	marshaledSizeMD5 = len(magicMD5) + 4*4 + 64 + 8  // from crypto/md5
++	marshaledSize1   = len(magic1) + 5*4 + 64 + 8    // from crypto/sha1
++	marshaledSize256 = len(magic256) + 8*4 + 64 + 8  // from crypto/sha256
++	marshaledSize512 = len(magic512) + 8*8 + 128 + 8 // from crypto/sha512
++)
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClassPublic() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPublic }
++// maxHashSize is the size of SHA52 and SHA3_512, the largest hashes we support.
++const maxHashSize = 64
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClassPrivate() *CFStringRef { return &_mkcgo_kSecAttrKeyClassPrivate }
++type HashCloner = hash.Cloner
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyType() *CFStringRef { return &_mkcgo_kSecAttrKeyType }
++func hashOneShot(ch crypto.Hash, p []byte, sum []byte) bool {
++	_, err := ossl.EVP_Digest(p, sum, nil, loadHash(ch, true).md, nil)
++	return err == nil
++}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeySizeInBits() *CFStringRef { return &_mkcgo_kSecAttrKeySizeInBits }
++func MD4(p []byte) (sum [16]byte) {
++	if !hashOneShot(crypto.MD4, p, sum[:]) {
++		panic("openssl: MD4 failed")
++	}
++	return
++}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecAttrKeyClass() *CFStringRef { return &_mkcgo_kSecAttrKeyClass }
++func MD5(p []byte) (sum [16]byte) {
++	if !hashOneShot(crypto.MD5, p, sum[:]) {
++		panic("openssl: MD5 failed")
++	}
++	return
++}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA1
++func SHA1(p []byte) (sum [20]byte) {
++	if !hashOneShot(crypto.SHA1, p, sum[:]) {
++		panic("openssl: SHA1 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA224
++func SHA224(p []byte) (sum [28]byte) {
++	if !hashOneShot(crypto.SHA224, p, sum[:]) {
++		panic("openssl: SHA224 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA256
++func SHA256(p []byte) (sum [32]byte) {
++	if !hashOneShot(crypto.SHA256, p, sum[:]) {
++		panic("openssl: SHA256 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA384
++func SHA384(p []byte) (sum [48]byte) {
++	if !hashOneShot(crypto.SHA384, p, sum[:]) {
++		panic("openssl: SHA384 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPSSSHA512
++func SHA512(p []byte) (sum [64]byte) {
++	if !hashOneShot(crypto.SHA512, p, sum[:]) {
++		panic("openssl: SHA512 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionRaw
++func SHA512_224(p []byte) (sum [28]byte) {
++	if !hashOneShot(crypto.SHA512_224, p, sum[:]) {
++		panic("openssl: SHA512 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionPKCS1
++func SHA512_256(p []byte) (sum [32]byte) {
++	if !hashOneShot(crypto.SHA512_256, p, sum[:]) {
++		panic("openssl: SHA512_256 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
++// cacheHashSupported is a cache of crypto.Hash support.
++var cacheHashSupported sync.Map
++
++// SupportsHash reports whether the current OpenSSL version supports the given hash.
++func SupportsHash(h crypto.Hash) bool {
++	if v, ok := cacheHashSupported.Load(h); ok {
++		return v.(bool)
++	}
++	alg := loadHash(h, false)
++	if alg == nil {
++		cacheHashSupported.Store(h, false)
++		return false
++	}
++	// EVP_MD objects can be non-nil even when they can't be used
++	// in a EVP_MD_CTX, e.g. MD5 in FIPS mode. We need to prove
++	// if they can be used by passing them to a EVP_MD_CTX.
++	var supported bool
++	if ctx, _ := ossl.EVP_MD_CTX_new(); ctx != nil {
++		_, err := ossl.EVP_DigestInit_ex(ctx, alg.md, nil)
++		supported = err == nil
++		ossl.EVP_MD_CTX_free(ctx)
++	}
++	cacheHashSupported.Store(h, supported)
++	return supported
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
++func SumSHA3_224(p []byte) (sum [28]byte) {
++	if !hashOneShot(crypto.SHA3_224, p, sum[:]) {
++		panic("openssl: SHA3_224 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
++func SumSHA3_256(p []byte) (sum [32]byte) {
++	if !hashOneShot(crypto.SHA3_256, p, sum[:]) {
++		panic("openssl: SHA3_256 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
++func SumSHA3_384(p []byte) (sum [48]byte) {
++	if !hashOneShot(crypto.SHA3_384, p, sum[:]) {
++		panic("openssl: SHA3_384 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
++func SumSHA3_512(p []byte) (sum [64]byte) {
++	if !hashOneShot(crypto.SHA3_512, p, sum[:]) {
++		panic("openssl: SHA3_512 failed")
++	}
++	return
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
++// NewMD4 returns a new MD4 hash.
++// The returned hash doesn't implement encoding.BinaryMarshaler and
++// encoding.BinaryUnmarshaler.
++func NewMD4() hash.Hash {
++	return newHash(crypto.MD4)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA1
++// NewMD5 returns a new MD5 hash.
++func NewMD5() hash.Hash {
++	return newHash(crypto.MD5)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA224
++// NewSHA1 returns a new SHA1 hash.
++func NewSHA1() hash.Hash {
++	return newHash(crypto.SHA1)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA256
++// NewSHA224 returns a new SHA224 hash.
++func NewSHA224() hash.Hash {
++	return newHash(crypto.SHA224)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA384
++// NewSHA256 returns a new SHA256 hash.
++func NewSHA256() hash.Hash {
++	return newHash(crypto.SHA256)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmRSAEncryptionOAEPSHA512
++// NewSHA384 returns a new SHA384 hash.
++func NewSHA384() hash.Hash {
++	return newHash(crypto.SHA384)
 +}
 +
-+//go:noinline
-+func _mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962() *CFStringRef {
-+	return &_mkcgo_kSecKeyAlgorithmECDSASignatureDigestX962
++// NewSHA512 returns a new SHA512 hash.
++func NewSHA512() hash.Hash {
++	return newHash(crypto.SHA512)
 +}
 +
-+var (
-+	KCFAllocatorDefault                              CFAllocatorRef = *_mkcgo_addr_kCFAllocatorDefault()
-+	KSecRandomDefault                                SecRandomRef   = *_mkcgo_addr_kSecRandomDefault()
-+	KSecAttrKeyTypeRSA                               CFStringRef    = *_mkcgo_addr_kSecAttrKeyTypeRSA()
-+	KSecAttrKeyClassPublic                           CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPublic()
-+	KSecAttrKeyClassPrivate                          CFStringRef    = *_mkcgo_addr_kSecAttrKeyClassPrivate()
-+	KSecAttrKeyType                                  CFStringRef    = *_mkcgo_addr_kSecAttrKeyType()
-+	KSecAttrKeySizeInBits                            CFStringRef    = *_mkcgo_addr_kSecAttrKeySizeInBits()
-+	KSecAttrKeyClass                                 CFStringRef    = *_mkcgo_addr_kSecAttrKeyClass()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA1        CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA1()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA224      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA224()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA256      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA256()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA384      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA384()
-+	KSecKeyAlgorithmRSASignatureDigestPSSSHA512      CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPSSSHA512()
-+	KSecKeyAlgorithmRSAEncryptionRaw                 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionRaw()
-+	KSecKeyAlgorithmRSAEncryptionPKCS1               CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionPKCS1()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1   CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512 CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512()
-+	KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw    CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA1            CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA1()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA224          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA224()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA256          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA256()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA384          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA384()
-+	KSecKeyAlgorithmRSAEncryptionOAEPSHA512          CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmRSAEncryptionOAEPSHA512()
-+	KSecKeyAlgorithmECDSASignatureDigestX962         CFStringRef    = *_mkcgo_addr_kSecKeyAlgorithmECDSASignatureDigestX962()
-+)
++// NewSHA512_224 returns a new SHA512_224 hash.
++func NewSHA512_224() hash.Hash {
++	return newHash(crypto.SHA512_224)
++}
 +
-+//go:cgo_import_dynamic _mkcgo_CFDataCreate CFDataCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDataGetBytePtr CFDataGetBytePtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDataGetLength CFDataGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionaryCreate CFDictionaryCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionaryCreateMutable CFDictionaryCreateMutable "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFDictionarySetValue CFDictionarySetValue "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFErrorCopyDescription CFErrorCopyDescription "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFErrorGetCode CFErrorGetCode "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFNumberCreate CFNumberCreate "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFRelease CFRelease "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFStringGetCStringPtr CFStringGetCStringPtr "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_CFStringGetLength CFStringGetLength "/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyExternalRepresentation SecKeyCopyExternalRepresentation "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCopyPublicKey SecKeyCopyPublicKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateDecryptedData SecKeyCreateDecryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateEncryptedData SecKeyCreateEncryptedData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateRandomKey SecKeyCreateRandomKey "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateSignature SecKeyCreateSignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyCreateWithData SecKeyCreateWithData "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyGetBlockSize SecKeyGetBlockSize "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyIsAlgorithmSupported SecKeyIsAlgorithmSupported "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecKeyVerifySignature SecKeyVerifySignature "/System/Library/Frameworks/Security.framework/Versions/A/Security"
-+//go:cgo_import_dynamic _mkcgo_SecRandomCopyBytes SecRandomCopyBytes "/System/Library/Frameworks/Security.framework/Versions/A/Security"
++// NewSHA512_256 returns a new SHA512_256 hash.
++func NewSHA512_256() hash.Hash {
++	return newHash(crypto.SHA512_256)
++}
 +
-+var _mkcgo_CFDataCreate_trampoline_addr uintptr
++// NewSHA3_224 returns a new SHA3-224 hash.
++func NewSHA3_224() *Hash {
++	return newHash(crypto.SHA3_224)
++}
 +
-+func CFDataCreate(allocator CFAllocatorRef, bytes []uint8) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_CFDataCreate_trampoline_addr, uintptr(allocator), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))), uintptr(len(bytes)))
-+	return CFDataRef(r0)
++// NewSHA3_256 creates a new SHA3-256 hash.
++func NewSHA3_256() *Hash {
++	return newHash(crypto.SHA3_256)
 +}
 +
-+var _mkcgo_CFDataGetBytePtr_trampoline_addr uintptr
++// NewSHA3_384 creates a new SHA3-384 hash.
++func NewSHA3_384() *Hash {
++	return newHash(crypto.SHA3_384)
++}
 +
-+func CFDataGetBytePtr(data CFDataRef) *uint8 {
-+	r0, _ := syscallN(0, _mkcgo_CFDataGetBytePtr_trampoline_addr, uintptr(data))
-+	return (*uint8)(unsafe.Pointer(r0))
++// NewSHA3_512 creates a new SHA3-512 hash.
++func NewSHA3_512() *Hash {
++	return newHash(crypto.SHA3_512)
 +}
 +
-+var _mkcgo_CFDataGetLength_trampoline_addr uintptr
++var _ hash.Hash = (*Hash)(nil)
++var _ HashCloner = (*Hash)(nil)
 +
-+func CFDataGetLength(data CFDataRef) CFIndex {
-+	r0, _ := syscallN(0, _mkcgo_CFDataGetLength_trampoline_addr, uintptr(data))
-+	return CFIndex(r0)
++// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
++func FIPSApprovedHash(h hash.Hash) bool {
++	xh, ok := h.(*Hash)
++	if !ok {
++		return false
++	}
++	switch xh.alg.ch {
++	case crypto.SHA224, crypto.SHA256, crypto.SHA384, crypto.SHA512,
++		crypto.SHA512_224, crypto.SHA512_256,
++		crypto.SHA3_224, crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
++		return true
++	default:
++		return false
++	}
 +}
 +
-+var _mkcgo_CFDictionaryCreate_trampoline_addr uintptr
++// hashBufSize is the size of the buffer used for hashing.
++// 256 bytes is a reasonable compromise for general purpose use,
++// and the resulting evpHash size is still similar to the
++// upstream sha512 hash object.
++const hashBufSize = 256
 +
-+func CFDictionaryCreate(allocator CFAllocatorRef, keys *unsafe.Pointer, values *unsafe.Pointer, numValues CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFDictionaryRef {
-+	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreate_trampoline_addr, uintptr(allocator), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keys))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(values))), uintptr(numValues), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
-+	return CFDictionaryRef(r0)
++// Hash implements generic hash methods.
++type Hash struct {
++	alg *hashAlgorithm
++	ctx ossl.EVP_MD_CTX_PTR
++	// ctx2 is used in Hash.Sum to avoid changing
++	// the state of ctx. Having it here allows reusing the
++	// same allocated object multiple times.
++	ctx2 ossl.EVP_MD_CTX_PTR
++
++	// buf is a buffer for data not yet written to ctx.
++	// It is used to reduce calls into OpenSSL for small writes.
++	// The buffer size is a trade-off between memory usage and
++	// number of calls into OpenSSL.
++	buf  [hashBufSize]byte
++	nbuf int
 +}
 +
-+var _mkcgo_CFDictionaryCreateMutable_trampoline_addr uintptr
++func newHash(ch crypto.Hash) *Hash {
++	// Don't call init() yet, it would be wasteful
++	// if the caller only wants to know the hash type. This
++	// is a common pattern in this package, as some functions
++	// accept a `func() hash.Hash` parameter and call it just
++	// to know the hash type.
++	return &Hash{alg: loadHash(ch, true)}
++}
 +
-+func CFDictionaryCreateMutable(allocator CFAllocatorRef, capacity CFIndex, keyCallBacks *CFDictionaryKeyCallBacks, valueCallBacks *CFDictionaryValueCallBacks) CFMutableDictionaryRef {
-+	r0, _ := syscallN(0, _mkcgo_CFDictionaryCreateMutable_trampoline_addr, uintptr(allocator), uintptr(capacity), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(keyCallBacks))), uintptr(mkcgoEscapePtrSecurity(unsafe.Pointer(valueCallBacks))))
-+	return CFMutableDictionaryRef(r0)
++func (h *Hash) finalize() {
++	if h.ctx != nil {
++		ossl.EVP_MD_CTX_free(h.ctx)
++	}
++	if h.ctx2 != nil {
++		ossl.EVP_MD_CTX_free(h.ctx2)
++	}
 +}
 +
-+var _mkcgo_CFDictionarySetValue_trampoline_addr uintptr
++func (h *Hash) init() {
++	if h.ctx != nil {
++		return
++	}
++	var err error
++	h.ctx, err = ossl.EVP_MD_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	if _, err := ossl.EVP_DigestInit_ex(h.ctx, h.alg.md, nil); err != nil {
++		ossl.EVP_MD_CTX_free(h.ctx)
++		panic(err)
++	}
++	h.ctx2, err = ossl.EVP_MD_CTX_new()
++	if err != nil {
++		ossl.EVP_MD_CTX_free(h.ctx)
++		panic(err)
++	}
++	runtime.SetFinalizer(h, (*Hash).finalize)
++}
 +
-+func CFDictionarySetValue(theDict CFMutableDictionaryRef, key unsafe.Pointer, value unsafe.Pointer) {
-+	syscallN(0, _mkcgo_CFDictionarySetValue_trampoline_addr, uintptr(theDict), uintptr(key), uintptr(value))
++func (h *Hash) write(p []byte) int {
++	if len(p) == 0 {
++		return 0
++	}
++	if h.nbuf > 0 && h.nbuf+len(p) > len(h.buf) {
++		// We have buffered data and adding p would exceed the buffer,
++		// flush the buffer first.
++		h.flush()
++	}
++	if len(p) > len(h.buf) {
++		// p is larger than the buffer, write it directly.
++		h.init()
++		if _, err := ossl.EVP_DigestUpdate(h.ctx, p); err != nil {
++			panic(err)
++		}
++	} else {
++		// Otherwise, buffer it.
++		h.nbuf += copy(h.buf[h.nbuf:], p)
++	}
++	runtime.KeepAlive(h)
++	return len(p)
 +}
 +
-+var _mkcgo_CFErrorCopyDescription_trampoline_addr uintptr
-+
-+func CFErrorCopyDescription(__error CFErrorRef) CFStringRef {
-+	r0, _ := syscallN(0, _mkcgo_CFErrorCopyDescription_trampoline_addr, uintptr(__error))
-+	return CFStringRef(r0)
++func (h *Hash) flush() {
++	h.init()
++	if h.nbuf > 0 {
++		if _, err := ossl.EVP_DigestUpdate(h.ctx, h.buf[:h.nbuf]); err != nil {
++			panic(err)
++		}
++		h.nbuf = 0
++	}
 +}
 +
-+var _mkcgo_CFErrorGetCode_trampoline_addr uintptr
-+
-+func CFErrorGetCode(__error CFErrorRef) CFIndex {
-+	r0, _ := syscallN(0, _mkcgo_CFErrorGetCode_trampoline_addr, uintptr(__error))
-+	return CFIndex(r0)
++func (h *Hash) Reset() {
++	h.nbuf = 0
++	if h.ctx == nil {
++		// The hash is not initialized yet, no need to reset ctx.
++		return
++	}
++	// There is no need to reset h.ctx2 because it is always reset in evpHash.Sum.
++	if _, err := ossl.EVP_DigestInit_ex(h.ctx, nil, nil); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(h)
 +}
 +
-+var _mkcgo_CFNumberCreate_trampoline_addr uintptr
-+
-+func CFNumberCreate(allocator CFAllocatorRef, theType CFNumberType, valuePtr unsafe.Pointer) CFNumberRef {
-+	r0, _ := syscallN(0, _mkcgo_CFNumberCreate_trampoline_addr, uintptr(allocator), uintptr(theType), uintptr(valuePtr))
-+	return CFNumberRef(r0)
++func (h *Hash) Write(p []byte) (int, error) {
++	return h.write(p), nil
 +}
 +
-+var _mkcgo_CFRelease_trampoline_addr uintptr
-+
-+func CFRelease(cf CFTypeRef) {
-+	syscallN(0, _mkcgo_CFRelease_trampoline_addr, uintptr(cf))
++func (h *Hash) WriteString(s string) (int, error) {
++	return h.write(unsafe.Slice(unsafe.StringData(s), len(s))), nil
 +}
 +
-+var _mkcgo_CFStringGetCStringPtr_trampoline_addr uintptr
-+
-+func CFStringGetCStringPtr(str CFStringRef, encoding CFStringEncoding) *byte {
-+	r0, _ := syscallN(0, _mkcgo_CFStringGetCStringPtr_trampoline_addr, uintptr(str), uintptr(encoding))
-+	return (*byte)(unsafe.Pointer(r0))
++func (h *Hash) WriteByte(c byte) error {
++	h.write(unsafe.Slice(&c, 1))
++	return nil
 +}
 +
-+var _mkcgo_CFStringGetLength_trampoline_addr uintptr
-+
-+func CFStringGetLength(str CFStringRef) CFIndex {
-+	r0, _ := syscallN(0, _mkcgo_CFStringGetLength_trampoline_addr, uintptr(str))
-+	return CFIndex(r0)
++func (h *Hash) Size() int {
++	return h.alg.size
 +}
 +
-+var _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr uintptr
-+
-+func SecKeyCopyExternalRepresentation(key SecKeyRef, __error *CFErrorRef) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCopyExternalRepresentation_trampoline_addr, uintptr(key), uintptr(unsafe.Pointer(__error)))
-+	return CFDataRef(r0)
++func (h *Hash) BlockSize() int {
++	return h.alg.blockSize
 +}
 +
-+var _mkcgo_SecKeyCopyPublicKey_trampoline_addr uintptr
-+
-+func SecKeyCopyPublicKey(key SecKeyRef) SecKeyRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCopyPublicKey_trampoline_addr, uintptr(key))
-+	return SecKeyRef(r0)
++func (h *Hash) Sum(in []byte) []byte {
++	out := append(in, make([]byte, h.Size(), maxHashSize)...)
++	if h.ctx == nil {
++		// Fast path: if ctx hasn't been initialized, all data is in the buffer
++		// and we can use the one-shot EVP_Digest function.
++		if _, err := ossl.EVP_Digest(h.buf[:h.nbuf], out[len(in):], nil, h.alg.md, nil); err != nil {
++			panic(err)
++		}
++		return out
++	}
++	// Slow path: copy h.ctx into h.ctx2 and call EVP_DigestFinal_ex using h.ctx2.
++	// This is necessary because Go hash.Hash mandates that Sum has no effect
++	// on the underlying stream. In particular it is OK to Sum, then Write more,
++	// then Sum again, and the second Sum acts as if the first didn't happen.
++	if _, err := ossl.EVP_MD_CTX_copy_ex(h.ctx2, h.ctx); err != nil {
++		panic(err)
++	}
++	if h.nbuf > 0 {
++		// If we have buffered data, update ctx2 with it
++		if _, err := ossl.EVP_DigestUpdate(h.ctx2, h.buf[:h.nbuf]); err != nil {
++			panic(err)
++		}
++	}
++	if _, err := ossl.EVP_DigestFinal_ex(h.ctx2, out[len(in):], nil); err != nil {
++		panic(err)
++	}
++	runtime.KeepAlive(h)
++	return out
 +}
 +
-+var _mkcgo_SecKeyCreateDecryptedData_trampoline_addr uintptr
-+
-+func SecKeyCreateDecryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, ciphertext CFDataRef, __error *CFErrorRef) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCreateDecryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(ciphertext), uintptr(unsafe.Pointer(__error)))
-+	return CFDataRef(r0)
++// Clone returns a new Hash object that is a deep clone of itself.
++// The duplicate object contains all state and data contained in the
++// original object at the point of duplication.
++func (h *Hash) Clone() (HashCloner, error) {
++	h2 := &Hash{alg: h.alg, nbuf: h.nbuf}
++	copy(h2.buf[:h.nbuf], h.buf[:h.nbuf])
++	if h.ctx != nil {
++		var err error
++		h2.ctx, err = ossl.EVP_MD_CTX_new()
++		if err != nil {
++			panic(err)
++		}
++		if _, err := ossl.EVP_MD_CTX_copy_ex(h2.ctx, h.ctx); err != nil {
++			ossl.EVP_MD_CTX_free(h2.ctx)
++			panic(err)
++		}
++		h2.ctx2, err = ossl.EVP_MD_CTX_new()
++		if err != nil {
++			ossl.EVP_MD_CTX_free(h2.ctx)
++			panic(err)
++		}
++		runtime.SetFinalizer(h2, (*Hash).finalize)
++	}
++	runtime.KeepAlive(h)
++	return h2, nil
 +}
 +
-+var _mkcgo_SecKeyCreateEncryptedData_trampoline_addr uintptr
++type errMarshallUnsupported struct{}
 +
-+func SecKeyCreateEncryptedData(key SecKeyRef, algorithm SecKeyAlgorithm, plaintext CFDataRef, __error *CFErrorRef) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCreateEncryptedData_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(plaintext), uintptr(unsafe.Pointer(__error)))
-+	return CFDataRef(r0)
++func (e errMarshallUnsupported) Error() string {
++	return "cryptokit: hash state is not marshallable"
 +}
 +
-+var _mkcgo_SecKeyCreateRandomKey_trampoline_addr uintptr
-+
-+func SecKeyCreateRandomKey(parameters CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCreateRandomKey_trampoline_addr, uintptr(parameters), uintptr(unsafe.Pointer(__error)))
-+	return SecKeyRef(r0)
++func (e errMarshallUnsupported) Unwrap() error {
++	return errors.ErrUnsupported
 +}
 +
-+var _mkcgo_SecKeyCreateSignature_trampoline_addr uintptr
-+
-+func SecKeyCreateSignature(key SecKeyRef, algorithm SecKeyAlgorithm, data CFDataRef, __error *CFErrorRef) CFDataRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCreateSignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(data), uintptr(unsafe.Pointer(__error)))
-+	return CFDataRef(r0)
++func (d *Hash) MarshalBinary() ([]byte, error) {
++	if d.alg == nil || !d.alg.marshallable {
++		return nil, errMarshallUnsupported{}
++	}
++	buf := make([]byte, 0, d.alg.marshalledSize)
++	return d.AppendBinary(buf)
 +}
 +
-+var _mkcgo_SecKeyCreateWithData_trampoline_addr uintptr
-+
-+func SecKeyCreateWithData(keyData CFDataRef, attributes CFDictionaryRef, __error *CFErrorRef) SecKeyRef {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyCreateWithData_trampoline_addr, uintptr(keyData), uintptr(attributes), uintptr(unsafe.Pointer(__error)))
-+	return SecKeyRef(r0)
++func (d *Hash) AppendBinary(buf []byte) ([]byte, error) {
++	defer runtime.KeepAlive(d)
++	if d.alg == nil || !d.alg.marshallable {
++		return nil, errMarshallUnsupported{}
++	}
++	d.flush()
++	switch d.alg.provider {
++	case providerOSSLDefault, providerOSSLFIPS:
++		return osslHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
++	case providerSymCrypt:
++		return symCryptHashAppendBinary(d.ctx, d.alg.ch, d.alg.magic, buf)
++	default:
++		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
++	}
 +}
 +
-+var _mkcgo_SecKeyGetBlockSize_trampoline_addr uintptr
-+
-+func SecKeyGetBlockSize(key SecKeyRef) int {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyGetBlockSize_trampoline_addr, uintptr(key))
-+	return int(r0)
++func (d *Hash) UnmarshalBinary(b []byte) error {
++	defer runtime.KeepAlive(d)
++	d.flush()
++	if d.alg == nil || !d.alg.marshallable {
++		return errMarshallUnsupported{}
++	}
++	if len(b) < len(d.alg.magic) || string(b[:len(d.alg.magic)]) != d.alg.magic {
++		return errors.New("openssl: invalid hash state identifier")
++	}
++	if len(b) != d.alg.marshalledSize {
++		return errors.New("openssl: invalid hash state size")
++	}
++	switch d.alg.provider {
++	case providerOSSLDefault, providerOSSLFIPS:
++		return osslHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
++	case providerSymCrypt:
++		return symCryptHashUnmarshalBinary(d.ctx, d.alg.ch, d.alg.magic, b)
++	default:
++		panic("openssl: unknown hash provider" + strconv.Itoa(int(d.alg.provider)))
++	}
 +}
 +
-+var _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr uintptr
-+
-+func SecKeyIsAlgorithmSupported(key SecKeyRef, operation SecKeyOperationType, algorithm SecKeyAlgorithm) Boolean {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyIsAlgorithmSupported_trampoline_addr, uintptr(key), uintptr(operation), uintptr(algorithm))
-+	return Boolean(r0)
++// appendUint64 appends x into b as a big endian byte sequence.
++func appendUint64(b []byte, x uint64) []byte {
++	return append(b,
++		byte(x>>56),
++		byte(x>>48),
++		byte(x>>40),
++		byte(x>>32),
++		byte(x>>24),
++		byte(x>>16),
++		byte(x>>8),
++		byte(x),
++	)
 +}
 +
-+var _mkcgo_SecKeyVerifySignature_trampoline_addr uintptr
-+
-+func SecKeyVerifySignature(key SecKeyRef, algorithm SecKeyAlgorithm, signedData CFDataRef, signature CFDataRef, __error *CFErrorRef) Boolean {
-+	r0, _ := syscallN(0, _mkcgo_SecKeyVerifySignature_trampoline_addr, uintptr(key), uintptr(algorithm), uintptr(signedData), uintptr(signature), uintptr(unsafe.Pointer(__error)))
-+	return Boolean(r0)
++// appendUint32 appends x into b as a big endian byte sequence.
++func appendUint32(b []byte, x uint32) []byte {
++	return append(b, byte(x>>24), byte(x>>16), byte(x>>8), byte(x))
 +}
 +
-+var _mkcgo_SecRandomCopyBytes_trampoline_addr uintptr
++// consumeUint64 reads a big endian uint64 number from b.
++func consumeUint64(b []byte) ([]byte, uint64) {
++	_ = b[7]
++	x := uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++	return b[8:], x
++}
 +
-+func SecRandomCopyBytes(rnd SecRandomRef, bytes []byte) int32 {
-+	r0, _ := syscallN(0, _mkcgo_SecRandomCopyBytes_trampoline_addr, uintptr(rnd), uintptr(len(bytes)), uintptr(unsafe.Pointer(unsafe.SliceData(bytes))))
-+	return int32(r0)
++// consumeUint32 reads a big endian uint32 number from b.
++func consumeUint32(b []byte) ([]byte, uint32) {
++	_ = b[3]
++	x := uint32(b[3]) | uint32(b[2])<<8 | uint32(b[1])<<16 | uint32(b[0])<<24
++	return b[4:], x
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go
 new file mode 100644
-index 00000000000000..512d8087daf527
+index 00000000000000..75207faf1aa043
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_amd64.s
-@@ -0,0 +1,120 @@
-+// Copyright 2009 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
-+
-+//go:build !cgo
-+
-+#include "go_asm.h"
-+#include "textflag.h"
-+
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+#ifdef GOOS_windows
-+	MOVQ CX, 0(SP)
-+
-+#else
-+	MOVQ DI, 0(SP)
-+
-+#endif
-+	CALL ·syscallNSystemStack(SB)
-+	RET
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go
+@@ -0,0 +1,330 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+#ifdef GOOS_windows
-+#define RegArgsN 4
-+#else
-+#define RegArgsN 6
-+#endif
++package openssl
 +
-+TEXT ·syscallNAsm(SB), NOSPLIT, $16-8
-+	// Load pointer from stack (ABI0 calling convention)
-+	// Store argument and original SP in a callee-saved register
-+	MOVQ libcArgs+0(FP), R13
-+	MOVQ SP, R14
++import (
++	"hash"
++	"sync"
++	"unsafe"
 +
-+	// Align stack to 16 bytes
-+	ANDQ $~15, SP
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+	MOVQ libcCallInfo_fn(R13), R11
-+	MOVQ libcCallInfo_n(R13), CX
-+	MOVQ libcCallInfo_args(R13), R10
++// SupprtHKDF reports whether the current OpenSSL version supports HKDF.
++func SupportsHKDF() bool {
++	switch major() {
++	case 1:
++		return true
++	case 3, 4:
++		_, err := fetchHKDF3()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+	// Fast version, do not store args on the stack.
-+	CMPL CX, $0; JE _0args
-+	CMPL CX, $1; JE _1args
-+	CMPL CX, $2; JE _2args
-+	CMPL CX, $3; JE _3args
-+	CMPL CX, $4; JE _4args
++// SupprtsTLS13KDF reports whether the current OpenSSL version supports TLS13-KDF.
++func SupportsTLS13KDF() bool {
++	switch major() {
++	case 1:
++		return false
++	case 3, 4:
++		// TLS13-KDF is available in OpenSSL 3.0.0 and later.
++		_, err := fetchTLS13_KDF()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+#ifndef GOOS_windows // Windows does not pass more than 4 args in registers
-+	CMPL CX, $5; JE _5args
-+	CMPL CX, $6; JE _6args
++func newHKDFCtx1(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (ctx ossl.EVP_PKEY_CTX_PTR, err error) {
++	checkMajorVersion(1)
 +
-+#endif
++	ctx, err = ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_HKDF, nil)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			ossl.EVP_PKEY_CTX_free(ctx)
++		}
++	}()
 +
-+	// Reserve stack space for remaining args
-+	MOVQ CX, R12
-+	SUBQ $RegArgsN, R12
-+	ADDQ $1, R12        // make even number of words for stack alignment
-+	ANDQ $~1, R12
-+	SHLQ $3, R12
-+	SUBQ R12, SP
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return ctx, err
++	}
 +
-+	// Copy args to the stack.
-+	// CX: count of stack arguments (n-RegArgsN)
-+	// SI: &args[RegArgsN]
-+	// DI: copy of RSP
-+	SUBQ $RegArgsN, CX
-+	MOVQ R10, SI
-+	ADDQ $(8*RegArgsN), SI
-+	MOVQ SP, DI
-+	CLD
-+	REP; MOVSQ
++	ctrlSlice := func(ctrl int32, data []byte) bool {
++		if err != nil {
++			return false
++		}
++		if len(data) == 0 {
++			return true // No data to set.
++		}
++		_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ctrl, int32(len(data)), unsafe.Pointer(base(data)))
++		return err == nil
++	}
 +
-+#ifndef GOOS_windows
-+_6args:
-+	MOVQ (5*8)(R10), R9
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MODE, mode, nil); err != nil {
++		return ctx, err
++	}
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1, ossl.EVP_PKEY_OP_DERIVE, ossl.EVP_PKEY_CTRL_HKDF_MD, 0, unsafe.Pointer(md)); err != nil {
++		return ctx, err
++	}
++	if ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, secret) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_SALT, salt) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_KEY, pseudorandomKey) &&
++		ctrlSlice(ossl.EVP_PKEY_CTRL_HKDF_INFO, info) {
++		return ctx, err
++	}
++	return ctx, nil
++}
 +
-+_5args:
-+	MOVQ (4*8)(R10), R8
++// hkdfAllZerosSalt is a preallocated buffer of zeros used in ExtractHKDF().
++// The size should be kept as large as the output length of any hash algorithm
++// used with HKDF.
++var hkdfAllZerosSalt [64]byte
 +
-+#endif
-+_4args:
-+	MOVQ (3*8)(R10), CX
++// ExtractHDKF implements the HDKF extract step.
++// If salt is nil, then this function replaces it internally with a buffer of
++// zeros whose length equals the output length of the specified hash algorithm.
++func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
++	if !SupportsHKDF() {
++		return nil, errUnsupportedVersion()
++	}
 +
-+_3args:
-+	MOVQ (2*8)(R10), DX
++	md, err := hashFuncToMD(h)
++	if err != nil {
++		return nil, err
++	}
 +
-+_2args:
-+	MOVQ (1*8)(R10), SI
++	// If calling code specifies nil salt, replace it with a buffer of hashLen
++	// zeros, as specified in RFC 5896 and as OpenSSL EVP_KDF-HKDF documentation
++	// instructs. Take a slice of a preallocated buffer to avoid allocating new
++	// buffer per call, but fall back to allocating a buffer if preallocated
++	// buffer is not large enough.
++	if salt == nil {
++		hlen := h().Size()
++		if hlen > len(hkdfAllZerosSalt) {
++			salt = make([]byte, hlen)
++		} else {
++			salt = hkdfAllZerosSalt[:hlen]
++		}
++	}
 +
-+_1args:
-+	MOVQ (0*8)(R10), DI
++	switch major() {
++	case 1:
++		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		var keylen int
++		if _, err := ossl.EVP_PKEY_derive(ctx, nil, &keylen); err != nil {
++			return nil, err
++		}
++		out := make([]byte, keylen)
++		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
++			return nil, err
++		}
++		return out[:keylen], nil
++	case 3, 4:
++		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_KDF_CTX_free(ctx)
++		size, err := ossl.EVP_KDF_CTX_get_kdf_size(ctx)
++		if err != nil {
++			return nil, err
++		}
++		out := make([]byte, size)
++		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
++			return nil, err
++		}
++		return out, nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+_0args:
++// ExpandHKDF derives a key from the given hash, key, and optional context info.
++func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
++	if !SupportsHKDF() {
++		return nil, errUnsupportedVersion()
++	}
 +
-+	XORL AX, AX // vararg: say "no float args"
++	md, err := hashFuncToMD(h)
++	if err != nil {
++		return nil, err
++	}
 +
-+#ifdef GOOS_windows
-+	// Windows x64 syscall ABI: first four integer args in CX, DX, R8, R9
-+	// and 32 bytes of shadow space on the stack.
-+	ADJSP $32
-+	MOVQ  CX, R9
-+	MOVQ  DX, R8
-+	MOVQ  SI, DX
-+	MOVQ  DI, CX
++	out := make([]byte, keyLength)
++	switch major() {
++	case 1:
++		ctx, err := newHKDFCtx1(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_PKEY_CTX_free(ctx)
++		if len(out) == 0 {
++			// Nothing to do, so exit early.
++			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
++			// We can only exit after calling newHKDFCtx1 because we still need it to validate the parameters.
++			return out, nil
++		}
++		keylen := keyLength
++		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
++			return nil, err
++		}
++	case 3, 4:
++		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_KDF_CTX_free(ctx)
++		if len(out) == 0 {
++			// Nothing to do, so exit early.
++			// We also can't call EVP_PKEY_derive because some engines error on zero-length output.
++			// We can only exit after calling newHKDFCtx3 because we still need it to validate the parameters.
++			return out, nil
++		}
++		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
++			return nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return out, nil
++}
 +
-+#endif
++// ExpandTLS13KDF derives a key from the given hash, key, label and context. It will use
++// "TLS13-KDF" algorithm to do so.
++func ExpandTLS13KDF(h func() hash.Hash, pseudorandomKey, label, context []byte, keyLength int) ([]byte, error) {
++	if !SupportsTLS13KDF() {
++		return nil, errUnsupportedVersion()
++	}
 +
-+	CALL R11
++	md, err := hashFuncToMD(h)
++	if err != nil {
++		return nil, err
++	}
 +
-+#ifdef GOOS_windows
-+	ADJSP $-32
++	out := make([]byte, keyLength)
 +
-+#endif
++	ctx, err := newTLS13KDFExpandCtx3(md, label, context, pseudorandomKey)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_KDF_CTX_free(ctx)
++	if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
++		return nil, err
++	}
++	return out, nil
++}
 +
-+	MOVQ R14, SP // free stack space
++// fetchTLS13_KDF fetches the TLS13-KDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchTLS13_KDF = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+	// Return result.
-+	MOVQ AX, libcCallInfo_r1(R13)
-+	MOVQ DX, libcCallInfo_r2(R13)
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS13_KDF.ptr(), nil)
++	if err != nil {
++		return nil, err
++	}
++	return kdf, nil
++})
 +
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
-new file mode 100644
-index 00000000000000..261a7e4cb90d56
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/asm_arm64.s
-@@ -0,0 +1,97 @@
-+// Copyright 2015 The Go Authors. All rights reserved.
-+// Use of this source code is governed by a BSD-style
-+// license that can be found in the LICENSE file.
++// newTLS13KDFExpandCtx3 fetches the "TLS13-KDF" for TLS 1.3 handshakes.
++func newTLS13KDFExpandCtx3(md ossl.EVP_MD_PTR, label, context, pseudorandomKey []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
++	checkMajorVersion(3, 4)
 +
-+//go:build !cgo
++	kdf, err := fetchTLS13_KDF()
++	if err != nil {
++		return nil, err
++	}
 +
-+#include "go_asm.h"
-+#include "textflag.h"
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			ossl.EVP_KDF_CTX_free(ctx)
++		}
++	}()
 +
-+TEXT ·syscallNSystemStack_trampoline(SB), NOSPLIT, $16
-+	MOVD R0, 8(RSP)
-+	CALL ·syscallNSystemStack(SB)
-+	RET
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY))
++	bld.addOctetString(_OSSL_KDF_PARAM_PREFIX, []byte("tls13 "))
++	bld.addOctetString(_OSSL_KDF_PARAM_LABEL, label)
++	bld.addOctetString(_OSSL_KDF_PARAM_DATA, context)
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
 +
-+TEXT ·syscallNAsm(SB), NOSPLIT, $0-16
-+	// Save original stack pointer
-+	MOVD RSP, R20
++	params, err := bld.build()
++	if err != nil {
++		return ctx, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	// Load pointer from stack (ABI0 calling convention)
-+	MOVD libcArgs+0(FP), R3
++	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
++		return ctx, err
++	}
++	return ctx, nil
++}
 +
-+	MOVD libcCallInfo_args(R3), R12
-+	MOVD libcCallInfo_fn(R3), R13
++// fetchHKDF3 fetches the HKDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchHKDF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+	// Do we have more than 8 arguments?
-+	MOVD libcCallInfo_n(R3), R0
-+	CMP  $0, R0; BEQ _0args
-+	CMP  $1, R0; BEQ _1args
-+	CMP  $2, R0; BEQ _2args
-+	CMP  $3, R0; BEQ _3args
-+	CMP  $4, R0; BEQ _4args
-+	CMP  $5, R0; BEQ _5args
-+	CMP  $6, R0; BEQ _6args
-+	CMP  $7, R0; BEQ _7args
-+	CMP  $8, R0; BEQ _8args
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_HKDF.ptr(), nil)
++	if err != nil {
++		return nil, err
++	}
++	return kdf, nil
++})
 +
-+	// Reserve stack space for remaining args
-+	SUB $8, R0, R2
-+	ADD $1, R2, R3 // make even number of words for stack alignment
-+	AND $~1, R3
-+	LSL $3, R3
-+	SUB R3, RSP
++// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
++func newHKDFCtx3(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
++	checkMajorVersion(3, 4)
 +
-+	// R4: size of stack arguments (n-8)*8
-+	// R5: &args[8]
-+	// R6: loop counter, from 0 to (n-8)*8
-+	// R7: scratch
-+	// R8: copy of RSP - (R2)(RSP) assembles as (R2)(ZR)
-+	SUB  $8, R0, R4
-+	LSL  $3, R4
-+	ADD  $(8*8), R12, R5
-+	MOVD $0, R6
-+	MOVD RSP, R8
++	kdf, err := fetchHKDF3()
++	if err != nil {
++		return nil, err
++	}
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return nil, err
++	}
++	defer func() {
++		if err != nil {
++			ossl.EVP_KDF_CTX_free(ctx)
++		}
++	}()
 +
-+stackargs:
-+	MOVD (R6)(R5), R7
-+	MOVD R7, (R6)(R8)
-+	ADD  $8, R6
-+	CMP  R6, R4
-+	BNE  stackargs
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addInt32(_OSSL_KDF_PARAM_FIPS_KEY_CHECK, 0)
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addInt32(_OSSL_KDF_PARAM_MODE, int32(mode))
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, secret)
++	bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
++	bld.addOctetString(_OSSL_KDF_PARAM_KEY, pseudorandomKey)
++	bld.addOctetString(_OSSL_KDF_PARAM_INFO, info)
++	params, err := bld.build()
++	if err != nil {
++		return ctx, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+_8args:
-+	MOVD (7*8)(R12), R7
++	if _, err := ossl.EVP_KDF_CTX_set_params(ctx, params); err != nil {
++		return ctx, err
++	}
++	return ctx, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go
+new file mode 100644
+index 00000000000000..88f6ce7eb85ca1
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go
+@@ -0,0 +1,280 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+_7args:
-+	MOVD (6*8)(R12), R6
++package openssl
 +
-+_6args:
-+	MOVD (5*8)(R12), R5
++import (
++	"hash"
++	"runtime"
++	"slices"
++	"sync"
 +
-+_5args:
-+	MOVD (4*8)(R12), R4
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+_4args:
-+	MOVD (3*8)(R12), R3
++// NewHMAC returns a new HMAC using OpenSSL.
++// The function h must return a hash implemented by
++// OpenSSL (for example, h could be openssl.NewSHA256).
++// If h is not recognized, NewHMAC returns nil.
++func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
++	h, _ := hashFuncHash(fh)
++	md := hashToMD(h)
++	if md == nil {
++		return nil
++	}
 +
-+_3args:
-+	MOVD (2*8)(R12), R2
++	if len(key) == 0 {
++		// This is supported in OpenSSL/Standard lib and as such
++		// we must support it here. When using HMAC with a null key
++		// HMAC_Init will try and reuse the key from the ctx. This is
++		// not the behavior previously implemented, so as a workaround
++		// we pass an "empty" key.
++		key = make([]byte, ossl.EVP_MAX_MD_SIZE)
++	}
 +
-+_2args:
-+	MOVD (1*8)(R12), R1
++	hmac := &opensslHMAC{
++		size:      h.Size(),
++		blockSize: h.BlockSize(),
++	}
 +
-+_1args:
-+	MOVD (0*8)(R12), R0
++	switch major() {
++	case 1:
++		ctx := newHMAC1(key, md)
++		if ctx.ctx == nil {
++			return nil
++		}
++		hmac.ctx1 = ctx
++	case 3, 4:
++		ctx := newHMAC3(key, md)
++		if ctx.ctx == nil {
++			return nil
++		}
++		hmac.ctx3 = ctx
++	default:
++		panic(errUnsupportedVersion())
++	}
++	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
++	return hmac
++}
 +
-+_0args:
++// hmacCtx3 is used for OpenSSL 1.
++type hmacCtx1 struct {
++	ctx ossl.HMAC_CTX_PTR
++}
 +
-+	BL (R13)
++// hmacCtx3 is used for OpenSSL 3.
++type hmacCtx3 struct {
++	ctx ossl.EVP_MAC_CTX_PTR
++	key []byte // only set for OpenSSL 3.0.0, 3.0.1, and 3.0.2.
++}
 +
-+	// Restore original stack pointer
-+	MOVD R20, RSP
++type opensslHMAC struct {
++	ctx1      hmacCtx1
++	ctx3      hmacCtx3
++	size      int
++	blockSize int
++	sum       [maxHashSize]byte
++}
 +
-+	MOVD libcArgs+0(FP), R3
-+	MOVD R0, libcCallInfo_r1(R3) // save r1
-+	MOVD R1, libcCallInfo_r2(R3) // save r2
++func newHMAC1(key []byte, md ossl.EVP_MD_PTR) hmacCtx1 {
++	ctx, err := ossl.HMAC_CTX_new()
++	if err != nil {
++		panic(err)
++	}
++	if _, err := ossl.HMAC_Init_ex(ctx, key, md, nil); err != nil {
++		panic(err)
++	}
++	return hmacCtx1{ctx}
++}
 +
-+	RET
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
-new file mode 100644
-index 00000000000000..a9ad56e22fa2ac
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo.go
-@@ -0,0 +1,72 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++var hmacDigestsSupported sync.Map
++var fetchHMAC3 = sync.OnceValue(func() ossl.EVP_MAC_PTR {
++	mac, err := ossl.EVP_MAC_fetch(nil, _OSSL_MAC_NAME_HMAC.ptr(), nil)
++	if err != nil {
++		panic(err)
++	}
++	return mac
++})
 +
-+//go:build !cgo && (amd64 || arm64)
++func buildHMAC3Params(md ossl.EVP_MD_PTR) (ossl.OSSL_PARAM_PTR, error) {
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_MAC_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addInt32(_OSSL_MAC_PARAM_FIPS_KEY_CHECK, 0)
++	return bld.build()
++}
 +
-+package xsyscall
++func isHMAC3DigestSupported(md ossl.EVP_MD_PTR) bool {
++	nid := ossl.EVP_MD_get_type(md)
++	if v, ok := hmacDigestsSupported.Load(nid); ok {
++		return v.(bool)
++	}
++	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.EVP_MAC_CTX_free(ctx)
 +
-+import (
-+	"unsafe"
-+)
++	params, err := buildHMAC3Params(md)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+//go:linkname runtime_cgocall runtime.cgocall
++	_, err = ossl.EVP_MAC_CTX_set_params(ctx, params)
++	supported := err == nil
++	hmacDigestsSupported.Store(nid, supported)
++	return supported
++}
 +
-+//go:noescape
-+func runtime_cgocall(fn uintptr, arg unsafe.Pointer) int32 // from runtime/sys_libc.go
++func newHMAC3(key []byte, md ossl.EVP_MD_PTR) hmacCtx3 {
++	if !isHMAC3DigestSupported(md) {
++		// The digest is not supported by the HMAC provider.
++		// Don't panic here so the Go standard library to
++		// fall back to the Go implementation.
++		// See https://github.com/golang-fips/openssl/issues/153.
++		return hmacCtx3{}
++	}
++	params, err := buildHMAC3Params(md)
++	if err != nil {
++		panic(err)
++	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+//go:linkname noescape
-+//go:nosplit
-+func noescape(p unsafe.Pointer) unsafe.Pointer {
-+	x := uintptr(p)
-+	return unsafe.Pointer(x ^ 0)
-+}
++	ctx, err := ossl.EVP_MAC_CTX_new(fetchHMAC3())
++	if err != nil {
++		panic(err)
++	}
 +
-+type libcCallInfo struct {
-+	fn      uintptr
-+	n       uintptr // number of parameters
-+	args    uintptr // parameters
-+	r1, r2  uintptr // return values
-+	errType uintptr
++	if _, err := ossl.EVP_MAC_init(ctx, key, params); err != nil {
++		ossl.EVP_MAC_CTX_free(ctx)
++		panic(err)
++	}
++	var hkey []byte
++	//versionguardcheck:ignore OpenSSL 3.0.0–3.0.2 EVP_MAC_init does not reset without a key: https://github.com/openssl/openssl/issues/17811.
++	if major() == 3 && minor() == 0 && patch() <= 2 {
++		// EVP_MAC_init only resets the ctx internal state if a key is passed
++		// when using OpenSSL 3.0.0, 3.0.1, and 3.0.2. Save a copy of the key
++		// in the context so Reset can use it later. New OpenSSL versions
++		// do not have this issue so it isn't necessary to save the key.
++		hkey = make([]byte, len(key))
++		copy(hkey, key)
++	}
++	return hmacCtx3{ctx, hkey}
 +}
 +
-+//go:noescape
-+func syscallNAsm(libcArgs *libcCallInfo)
++func (h *opensslHMAC) Reset() {
++	switch major() {
++	case 1:
++		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, nil, nil); err != nil {
++			panic(err)
++		}
++	case 3, 4:
++		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, h.ctx3.key, nil); err != nil {
++			panic(err)
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
 +
-+// syscallNSystemStack performs a syscall on the system stack.
-+// It can't allocate Go memory nor grow the stack over the nosplit limit.
-+//
-+//go:nosplit
-+func syscallNSystemStack(libcArgs *libcCallInfo) {
-+	syscallNAsm(libcArgs)
++	runtime.KeepAlive(h) // Next line will keep h alive too; just making doubly sure.
 +}
 +
-+var syscallNSystemStack_trampoline byte
-+var syscallNSystemStackABIInternal = uintptr(unsafe.Pointer(&syscallNSystemStack_trampoline))
-+
-+// SyscallN performs a syscall with the given function and arguments.
-+//
-+// All its parameters and return values must be uintptr in order
-+// for the Go compiler to automatically set the //go:uintptrkeepalive
-+// directive (which we can't set manually here).
-+// See https://github.com/golang/go/blob/9a5a1202f4c4d5a7048b149b65c3e5b82a2de9aa/src/cmd/compile/internal/escape/call.go#L275.
-+//
-+//go:nosplit
-+func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	libcArgs := libcCallInfo{
-+		fn:      fn,
-+		n:       uintptr(len(args)),
-+		errType: errType,
++func (h *opensslHMAC) finalize() {
++	if h.ctx1.ctx != nil {
++		ossl.HMAC_CTX_free(h.ctx1.ctx)
 +	}
-+	if libcArgs.n != 0 {
-+		libcArgs.args = uintptr(noescape(unsafe.Pointer(&args[0])))
++	if h.ctx3.ctx != nil {
++		ossl.EVP_MAC_CTX_free(h.ctx3.ctx)
 +	}
-+	runtime_cgocall(syscallNSystemStackABIInternal, unsafe.Pointer(&libcArgs))
-+	return libcArgs.r1, libcArgs.r2
 +}
 +
-+// Shim syscallN calls SyscallN.
-+//
-+//go:nosplit
-+func syscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	return SyscallN(errType, fn, args...)
++func (h *opensslHMAC) Write(p []byte) (int, error) {
++	if len(p) > 0 {
++		switch major() {
++		case 1:
++			ossl.HMAC_Update(h.ctx1.ctx, p)
++		case 3, 4:
++			ossl.EVP_MAC_update(h.ctx3.ctx, p)
++		default:
++			panic(errUnsupportedVersion())
++		}
++	}
++	runtime.KeepAlive(h)
++	return len(p), nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
-new file mode 100644
-index 00000000000000..2d4d32fca87fdb
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_darwin.go
-@@ -0,0 +1,10 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build !cgo
++func (h *opensslHMAC) Size() int {
++	return h.size
++}
 +
-+package xsyscall
++func (h *opensslHMAC) BlockSize() int {
++	return h.blockSize
++}
 +
-+import (
-+	_ "github.com/microsoft/go-crypto-darwin/internal/fakecgo"
-+)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
-new file mode 100644
-index 00000000000000..28dba16a23340e
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/internal/xsyscall/syscall_nocgo_others.go
-@@ -0,0 +1,14 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++func (h *opensslHMAC) Sum(in []byte) []byte {
++	// Make copy of context because Go hash.Hash mandates
++	// that Sum has no effect on the underlying stream.
++	// In particular it is OK to Sum, then Write more, then Sum again,
++	// and the second Sum acts as if the first didn't happen.
++	switch major() {
++	case 1:
++		ctx2, err := ossl.HMAC_CTX_new()
++		if err != nil {
++			panic(err)
++		}
++		defer ossl.HMAC_CTX_free(ctx2)
++		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
++			panic(err)
++		}
++		ossl.HMAC_Final(ctx2, h.sum[:h.size], nil)
++	case 3, 4:
++		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
++		if err != nil {
++			panic(err)
++		}
++		defer ossl.EVP_MAC_CTX_free(ctx2)
++		ossl.EVP_MAC_final(ctx2, h.sum[:h.size], nil)
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return append(in, h.sum[:h.size]...)
++}
 +
-+//go:build !cgo && !(amd64 || arm64)
++func (h *opensslHMAC) Clone() (HashCloner, error) {
++	switch major() {
++	case 1:
++		ctx2, err := ossl.HMAC_CTX_new()
++		if err != nil {
++			panic(err)
++		}
++		if _, err := ossl.HMAC_CTX_copy(ctx2, h.ctx1.ctx); err != nil {
++			ossl.HMAC_CTX_free(ctx2)
++			panic(err)
++		}
++		cl := &opensslHMAC{
++			ctx1:      hmacCtx1{ctx: ctx2},
++			size:      h.size,
++			blockSize: h.blockSize,
++		}
++		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
++		return cl, nil
 +
-+package xsyscall
++	case 3, 4:
++		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
++		if err != nil {
++			panic(err)
++		}
 +
-+// Implement a mock version of SyscallN for unsupported architectures.
-+// This will simply panic to indicate that the syscall is not supported.
++		cl := &opensslHMAC{
++			ctx3:      hmacCtx3{ctx: ctx2, key: slices.Clone(h.ctx3.key)},
++			size:      h.size,
++			blockSize: h.blockSize,
++		}
++		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
++		return cl, nil
 +
-+//go:nosplit
-+func SyscallN(errType uintptr, fn uintptr, args ...uintptr) (r1, r2 uintptr) {
-+	panic("SyscallN is not supported on this architecture")
++	default:
++		panic(errUnsupportedVersion())
++	}
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go
 new file mode 100644
-index 00000000000000..5f005eda956f2c
+index 00000000000000..49481d99023c12
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/aes.go
-@@ -0,0 +1,152 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go
+@@ -0,0 +1,449 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
-+	"crypto/cipher"
 +	"errors"
-+	"slices"
++	"sync"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+//go:generate go run github.com/microsoft/go-crypto-darwin/cmd/gentestvectors -out vectors_test.go
++const (
++	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
++	privateKeySizeMLDSA = 32
 +
-+type cipherGCMTLS uint8
++	// publicKeySizeMLDSA44 is the size of an ML-DSA-44 public key encoding.
++	publicKeySizeMLDSA44 = 1312
 +
-+const (
-+	cipherGCMTLSNone cipherGCMTLS = iota
-+	cipherGCMTLS12
-+	cipherGCMTLS13
-+)
++	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
++	publicKeySizeMLDSA65 = 1952
 +
-+const (
-+	// AES block size is the same for all key sizes
-+	aesBlockSize         = commoncrypto.KCCBlockSizeAES128
-+	gcmTagSize           = 16
-+	gcmStandardNonceSize = 12
-+	// TLS 1.2 additional data is constructed as:
-+	//
-+	//     additional_data = seq_num(8) + TLSCompressed.type(1) + TLSCompressed.version(2) + TLSCompressed.length(2);
-+	gcmTls12AddSize = 13
-+	// TLS 1.3 additional data is constructed as:
-+	//
-+	//     additional_data = TLSCiphertext.opaque_type(1) || TLSCiphertext.legacy_record_version(2) || TLSCiphertext.length(2)
-+	gcmTls13AddSize      = 5
-+	gcmTlsFixedNonceSize = 4
++	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
++	publicKeySizeMLDSA87 = 2592
++
++	// signatureSizeMLDSA44 is the size of an ML-DSA-44 signature.
++	signatureSizeMLDSA44 = 2420
++
++	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
++	signatureSizeMLDSA65 = 3309
++
++	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
++	signatureSizeMLDSA87 = 4627
++
++	// muSizeMLDSA is the size of the pre-hashed mu input to the external-mu
++	// variants of Sign and Verify.
++	muSizeMLDSA = 64
++
++	// maxContextSizeMLDSA is the maximum allowed length of the context string
++	// passed to Sign and Verify.
++	maxContextSizeMLDSA = 255
 +)
 +
-+type aesCipher struct {
-+	key  []byte
-+	kind commoncrypto.CCAlgorithm
++// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
++// on this platform. Providers may not implement every security level, so
++// callers must probe each parameter set they intend to use.
++func SupportsMLDSA(params MLDSAParameters) bool {
++	switch params.keyType {
++	case ossl.EVP_PKEY_ML_DSA_44:
++		return supportsMLDSA44()
++	case ossl.EVP_PKEY_ML_DSA_65:
++		return supportsMLDSA65()
++	case ossl.EVP_PKEY_ML_DSA_87:
++		return supportsMLDSA87()
++	default:
++		return false
++	}
 +}
 +
-+func NewAESCipher(key []byte) (cipher.Block, error) {
-+	var alg commoncrypto.CCAlgorithm
-+	switch len(key) {
-+	case 16, 24, 32:
-+		alg = commoncrypto.KCCAlgorithmAES
-+	default:
-+		return nil, errors.New("crypto/aes: invalid key size")
++// probeMLDSA reports whether the OpenSSL provider exposes the given ML-DSA
++// algorithm via the keymgmt fetch interface. ML-DSA was added in OpenSSL 3.5;
++// older 3.x releases return nil for unknown algorithm names, and 1.x lacks
++// the fetch interface entirely.
++func probeMLDSA(name cString) bool {
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
 +	}
-+	c := &aesCipher{
-+		key:  slices.Clone(key),
-+		kind: alg,
++	mgmt, _ := ossl.EVP_KEYMGMT_fetch(nil, name.ptr(), nil)
++	if mgmt == nil {
++		return false
 +	}
-+	return c, nil
++	ossl.EVP_KEYMGMT_free(mgmt)
++	return true
 +}
 +
-+func (c *aesCipher) BlockSize() int { return aesBlockSize }
++var (
++	supportsMLDSA44 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA44) })
++	supportsMLDSA65 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA65) })
++	supportsMLDSA87 = sync.OnceValue(func() bool { return probeMLDSA(_KeyTypeMLDSA87) })
++)
 +
-+func (c *aesCipher) Encrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/aes: input or output block is too small")
++// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
++type MLDSAParameters struct {
++	name          string
++	keyType       int32
++	keyTypeName   cString
++	publicKeySize int
++	signatureSize int
++}
++
++var (
++	mldsa44 = MLDSAParameters{
++		name:          "ML-DSA-44",
++		keyType:       ossl.EVP_PKEY_ML_DSA_44,
++		keyTypeName:   _KeyTypeMLDSA44,
++		publicKeySize: publicKeySizeMLDSA44,
++		signatureSize: signatureSizeMLDSA44,
++	}
++	mldsa65 = MLDSAParameters{
++		name:          "ML-DSA-65",
++		keyType:       ossl.EVP_PKEY_ML_DSA_65,
++		keyTypeName:   _KeyTypeMLDSA65,
++		publicKeySize: publicKeySizeMLDSA65,
++		signatureSize: signatureSizeMLDSA65,
++	}
++	mldsa87 = MLDSAParameters{
++		name:          "ML-DSA-87",
++		keyType:       ossl.EVP_PKEY_ML_DSA_87,
++		keyTypeName:   _KeyTypeMLDSA87,
++		publicKeySize: publicKeySizeMLDSA87,
++		signatureSize: signatureSizeMLDSA87,
 +	}
++)
 +
-+	src, dst = src[:blockSize], dst[:blockSize]
++// MLDSA44 returns the ML-DSA-44 parameter set.
++func MLDSA44() MLDSAParameters { return mldsa44 }
 +
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/aes: invalid buffer overlap")
++// MLDSA65 returns the ML-DSA-65 parameter set.
++func MLDSA65() MLDSAParameters { return mldsa65 }
++
++// MLDSA87 returns the ML-DSA-87 parameter set.
++func MLDSA87() MLDSAParameters { return mldsa87 }
++
++func (params MLDSAParameters) valid() bool {
++	switch params {
++	case mldsa44, mldsa65, mldsa87:
++		return true
++	default:
++		return false
 +	}
++}
 +
-+	status := commoncrypto.CCCrypt(
-+		commoncrypto.KCCEncrypt,          // Operation
-+		commoncrypto.CCAlgorithm(c.kind), // Algorithm
-+		0,                                // Options
-+		c.key,                            // Key
-+		nil,                              // IV
-+		src,                              // Input
-+		dst,                              // Output
-+		nil,                              // Output length
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/aes: encryption failed")
++// PublicKeySize returns the size of public keys for this parameter set, in bytes.
++func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
++
++// SignatureSize returns the size of signatures for this parameter set, in bytes.
++func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
++
++// String returns the name of the parameter set.
++func (params MLDSAParameters) String() string { return params.name }
++
++var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
++
++// PrivateKeyMLDSA is an ML-DSA private key seed.
++type PrivateKeyMLDSA struct {
++	params MLDSAParameters
++	seed   [privateKeySizeMLDSA]byte
++}
++
++// GenerateKeyMLDSA generates a new ML-DSA private key.
++func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
 +	}
++	key := &PrivateKeyMLDSA{params: params}
++	if err := generateMLDSASeed(params.keyType, key.seed[:]); err != nil {
++		return nil, err
++	}
++	return key, nil
 +}
 +
-+func (c *aesCipher) Decrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/aes: input or output block is too small")
++// NewPrivateKeyMLDSA constructs an ML-DSA private key from its 32-byte seed.
++func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid private key size")
 +	}
++	key := &PrivateKeyMLDSA{params: params}
++	copy(key.seed[:], seed)
++	return key, nil
++}
 +
-+	src, dst = src[:blockSize], dst[:blockSize]
++// Bytes returns the private key seed.
++func (key *PrivateKeyMLDSA) Bytes() []byte {
++	return key.seed[:]
++}
 +
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/aes: invalid buffer overlap")
++// Parameters returns the parameters associated with this private key.
++func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// PublicKey returns the corresponding public key.
++func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
++	publicKey := &PublicKeyMLDSA{params: key.params}
++	if err := mldsaExtractPublicKey(key.params, key.seed[:], publicKey.bytes[:key.params.publicKeySize]); err != nil {
++		panic(err)
 +	}
++	return publicKey
++}
 +
-+	status := commoncrypto.CCCrypt(
-+		commoncrypto.KCCDecrypt,          // Operation
-+		commoncrypto.CCAlgorithm(c.kind), // Algorithm
-+		0,                                // Options
-+		c.key,                            // Key
-+		nil,                              // IV
-+		src,                              // Input
-+		dst,                              // Output
-+		nil,                              // Output length
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/aes: decryption failed")
++// Sign signs message with the private key, optionally binding the signature
++// to a context string. The context string must be at most 255 bytes long.
++func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
++	return mldsaSign(key.params, key.seed[:], message, context)
++}
++
++// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
++// mu must be exactly 64 bytes long.
++func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
++	if len(mu) != muSizeMLDSA {
++		return nil, errors.New("mldsa: invalid message hash length")
 +	}
++	return mldsaSignExternalMu(key.params, key.seed[:], mu)
 +}
 +
-+var errOpen = errors.New("cipher: message authentication failed")
++// PublicKeyMLDSA is an ML-DSA public key.
++type PublicKeyMLDSA struct {
++	params MLDSAParameters
++	bytes  [publicKeySizeMLDSA87]byte
++}
 +
-+func (c *aesCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
++func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
++	if !params.valid() {
++		return nil, errInvalidMLDSAParameters
++	}
++	if len(publicKey) != params.publicKeySize {
++		return nil, errors.New("mldsa: invalid public key size")
++	}
++	// Validate by attempting a key import.
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return nil, err
++	}
++	ossl.EVP_PKEY_free(pkey)
++	key := &PublicKeyMLDSA{params: params}
++	copy(key.bytes[:], publicKey)
++	return key, nil
 +}
 +
-+func (c *aesCipher) NewFIPSCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++// Bytes returns the public key encoding.
++func (key *PublicKeyMLDSA) Bytes() []byte {
++	return key.bytes[:key.params.publicKeySize]
 +}
 +
-+func (c *aesCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++// Parameters returns the parameters associated with this public key.
++func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++
++// Verify verifies an ML-DSA signature over message bound to the given context.
++func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
++	return mldsaVerify(key.params, key.bytes[:key.params.publicKeySize], message, signature, context)
 +}
 +
-+func (c *aesCipher) NewFIPSCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
++// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message
++// representative. mu must be exactly 64 bytes long.
++func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
++	if len(mu) != muSizeMLDSA {
++		return errors.New("mldsa: invalid message hash length")
++	}
++	return mldsaVerifyExternalMu(key.params, key.bytes[:key.params.publicKeySize], mu, signature)
 +}
 +
-+// sliceForAppend is a mirror of crypto/cipher.sliceForAppend.
-+func sliceForAppend(in []byte, n int) (head, tail []byte) {
-+	if total := len(in) + n; cap(in) >= total {
-+		head = in[:total]
-+	} else {
-+		head = make([]byte, total)
-+		copy(head, in)
++// Helper functions
++
++// generateMLDSASeed generates a new ML-DSA private key and extracts the seed.
++func generateMLDSASeed(keyType int32, seed []byte) error {
++	pkey, err := generateEVPPKey(keyType, 0, "")
++	if err != nil {
++		return err
 +	}
-+	tail = head[len(in):]
-+	return
++	defer ossl.EVP_PKEY_free(pkey)
++
++	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_DSA_SEED.ptr(), seed, nil)
++	return err
 +}
 +
-+func bigUint64(b []byte) uint64 {
-+	_ = b[7] // bounds check hint to compiler; see go.dev/issue/14808
-+	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
-+		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++// createMLDSAPrivateKey creates an ML-DSA EVP_PKEY from a 32-byte seed.
++func createMLDSAPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
++	if len(seed) != privateKeySizeMLDSA {
++		return nil, errors.New("mldsa: invalid seed size")
++	}
++
++	bld := newParamBuilder()
++	defer bld.finalize()
++
++	bld.addOctetString(_OSSL_PKEY_PARAM_ML_DSA_SEED, seed)
++
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
++
++	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
-new file mode 100644
-index 00000000000000..865e22ab6a3dda
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/big.go
-@@ -0,0 +1,16 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+package xcrypto
++// createMLDSAPublicKey creates an ML-DSA EVP_PKEY from encoded public key bytes.
++func createMLDSAPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
++	bld := newParamBuilder()
++	defer bld.finalize()
 +
-+// This file does not have build constraints to
-+// facilitate using BigInt in Go crypto.
-+// Go crypto references BigInt unconditionally,
-+// even if it is not finally used.
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
 +
-+// A BigInt is the big-endian bytes from a math/big BigInt,
-+// which are normalized to remove any leading 0 byte.
-+// Windows BCrypt accepts this specific data format.
-+// This definition allows us to avoid importing math/big.
-+// Conversion between BigInt and *big.Int is in xcrypto/bbig.
-+type BigInt []byte
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
-new file mode 100644
-index 00000000000000..b0ad6c0aeaff09
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/chacha20poly1305.go
-@@ -0,0 +1,88 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+//go:build darwin
++	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
++}
 +
-+package xcrypto
++// mldsaExtractPublicKey derives and copies the encoded public key bytes from
++// a private key seed.
++func mldsaExtractPublicKey(params MLDSAParameters, seed, dst []byte) error {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+import (
-+	"crypto/cipher"
-+	"errors"
++	var pubLen int
++	if _, err := ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_PUB_KEY.ptr(), dst, &pubLen); err != nil {
++		return err
++	}
++	if pubLen != params.publicKeySize {
++		return errors.New("mldsa: unexpected public key size")
++	}
++	return nil
++}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++// mldsaSigParams builds the OSSL_PARAM array used to bind a context string
++// (and/or the external-mu flag) to an ML-DSA Sign or Verify operation.
++// Returns nil params when neither is set.
++func mldsaSigParams(context string, externalMu bool) (ossl.OSSL_PARAM_PTR, error) {
++	if len(context) > maxContextSizeMLDSA {
++		return nil, errors.New("mldsa: context too long")
++	}
++	if context == "" && !externalMu {
++		return nil, nil
++	}
++	bld := newParamBuilder()
++	defer bld.finalize()
++	if context != "" {
++		bld.addOctetString(_OSSL_SIGNATURE_PARAM_CONTEXT_STRING, []byte(context))
++	}
++	if externalMu {
++		bld.addInt32(_OSSL_SIGNATURE_PARAM_MU, 1)
++	}
++	return bld.build()
++}
 +
-+const (
-+	chacha20Poly1305KeySize   = 32
-+	chacha20Poly1305NonceSize = 12
-+	chacha20Poly1305Overhead  = 16
-+)
++func mldsaSign(params MLDSAParameters, seed, message []byte, context string) ([]byte, error) {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+type chacha20poly1305 struct {
-+	key [chacha20Poly1305KeySize]byte
++	return mldsaSignWithKey(pkey, params, message, context, false)
 +}
 +
-+// NewChaCha20Poly1305 returns a ChaCha20-Poly1305 AEAD that uses the given 256-bit key.
-+func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error) {
-+	if len(key) != chacha20Poly1305KeySize {
-+		return nil, errors.New("chacha20poly1305: bad key length")
++func mldsaSignExternalMu(params MLDSAParameters, seed, mu []byte) ([]byte, error) {
++	pkey, err := createMLDSAPrivateKey(params.keyType, seed)
++	if err != nil {
++		return nil, err
 +	}
-+	ret := new(chacha20poly1305)
-+	copy(ret.key[:], key)
-+	return ret, nil
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaSignWithKey(pkey, params, mu, "", true)
 +}
 +
-+func (c *chacha20poly1305) NonceSize() int {
-+	return chacha20Poly1305NonceSize
++func mldsaSignWithKey(pkey ossl.EVP_PKEY_PTR, params MLDSAParameters, message []byte, context string, externalMu bool) ([]byte, error) {
++	mdctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return nil, err
++	}
++	defer ossl.EVP_MD_CTX_free(mdctx)
++
++	var pctx ossl.EVP_PKEY_CTX_PTR
++	if _, err := ossl.EVP_DigestSignInit(mdctx, &pctx, nil, nil, pkey); err != nil {
++		return nil, err
++	}
++	sigParams, err := mldsaSigParams(context, externalMu)
++	if err != nil {
++		return nil, err
++	}
++	if sigParams != nil {
++		defer ossl.OSSL_PARAM_free(sigParams)
++		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
++			return nil, err
++		}
++	}
++
++	signature := make([]byte, params.signatureSize)
++	siglen := params.signatureSize
++	if _, err := ossl.EVP_DigestSign(mdctx, signature, &siglen, message); err != nil {
++		return nil, err
++	}
++	if siglen != params.signatureSize {
++		return nil, errors.New("mldsa: unexpected signature length")
++	}
++	return signature[:siglen], nil
 +}
 +
-+func (c *chacha20poly1305) Overhead() int {
-+	return chacha20Poly1305Overhead
++func mldsaVerify(params MLDSAParameters, publicKey, message, signature []byte, context string) error {
++	if len(signature) != params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
++	}
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return err
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaVerifyWithKey(pkey, message, signature, context, false)
 +}
 +
-+func (c *chacha20poly1305) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
-+	if len(nonce) != chacha20Poly1305NonceSize {
-+		panic("chacha20poly1305: bad nonce length passed to Seal")
-+	}
-+	if uint64(len(plaintext)) > (1<<38)-64 {
-+		panic("chacha20poly1305: plaintext too large")
-+	}
-+	ret, out := sliceForAppend(dst, len(plaintext)+chacha20Poly1305Overhead)
-+	if inexactOverlap(out, plaintext) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and input")
-+	}
-+	if anyOverlap(out, additionalData) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++func mldsaVerifyExternalMu(params MLDSAParameters, publicKey, mu, signature []byte) error {
++	if len(signature) != params.signatureSize {
++		return errors.New("mldsa: invalid signature length")
 +	}
-+	tag := out[len(out)-chacha20Poly1305Overhead:]
-+	if cryptokit.EncryptChaChaPoly(c.key[:], plaintext, nonce, additionalData, out[:len(plaintext)], tag) != 0 {
-+		panic("chacha20poly1305: encryption failed")
++	pkey, err := createMLDSAPublicKey(params.keyType, publicKey)
++	if err != nil {
++		return err
 +	}
-+	return ret
++	defer ossl.EVP_PKEY_free(pkey)
++
++	return mldsaVerifyWithKey(pkey, mu, signature, "", true)
 +}
 +
-+func (c *chacha20poly1305) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
-+	if len(nonce) != chacha20Poly1305NonceSize {
-+		panic("chacha20poly1305: bad nonce length passed to Open")
-+	}
-+	if len(ciphertext) < 16 {
-+		return nil, errOpen
++func mldsaVerifyWithKey(pkey ossl.EVP_PKEY_PTR, message, signature []byte, context string, externalMu bool) error {
++	mdctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return err
 +	}
-+	if uint64(len(ciphertext)) > (1<<38)-48 {
-+		panic("chacha20poly1305: ciphertext too large")
++	defer ossl.EVP_MD_CTX_free(mdctx)
++
++	var pctx ossl.EVP_PKEY_CTX_PTR
++	if _, err := ossl.EVP_DigestVerifyInit(mdctx, &pctx, nil, nil, pkey); err != nil {
++		return err
 +	}
-+	tag := ciphertext[len(ciphertext)-chacha20Poly1305Overhead:]
-+	ciphertext = ciphertext[:len(ciphertext)-chacha20Poly1305Overhead]
-+	ret, out := sliceForAppend(dst, len(ciphertext))
-+	if inexactOverlap(out, ciphertext) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and input")
++	sigParams, err := mldsaSigParams(context, externalMu)
++	if err != nil {
++		return err
 +	}
-+	if anyOverlap(out, additionalData) {
-+		panic("chacha20poly1305: invalid buffer overlap of output and additional data")
++	if sigParams != nil {
++		defer ossl.OSSL_PARAM_free(sigParams)
++		if _, err := ossl.EVP_PKEY_CTX_set_params(pctx, sigParams); err != nil {
++			return err
++		}
 +	}
-+	var outLen int
-+	if cryptokit.DecryptChaChaPoly(c.key[:], ciphertext, nonce, additionalData, tag, out, &outLen) != 0 {
-+		return nil, errOpen
++
++	if _, err := ossl.EVP_DigestVerify(mdctx, signature, message); err != nil {
++		return errors.New("mldsa: invalid signature")
 +	}
-+	return ret[:len(dst)+outLen], nil
++	return nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mlkem.go
 new file mode 100644
-index 00000000000000..d4c550b90fafae
+index 00000000000000..5c2ffbabe92e15
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/cipher.go
-@@ -0,0 +1,114 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mlkem.go
+@@ -0,0 +1,369 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
-+	"runtime"
++	"errors"
++	"sync"
 +	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+type cbcCipher struct {
-+	blockSize int
-+	cryptor   commoncrypto.CCCryptorRef
-+}
++const (
++	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
++	sharedKeySizeMLKEM = 32
 +
-+func newCBC(operation commoncrypto.CCOperation, kind commoncrypto.CCAlgorithm, key, iv []byte) *cbcCipher {
-+	var blockSize int
-+	switch kind {
-+	case commoncrypto.KCCAlgorithmAES:
-+		blockSize = aesBlockSize
-+	case commoncrypto.KCCAlgorithmDES, commoncrypto.KCCAlgorithm3DES:
-+		blockSize = desBlockSize
-+	default:
-+		panic("invalid algorithm")
-+	}
++	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
++	seedSizeMLKEM = 64
 +
-+	// Create and initialize the cbcMode struct with CCCryptorCreateWithMode here
-+	x := &cbcCipher{blockSize: blockSize}
-+	status := commoncrypto.CCCryptorCreateWithMode(
-+		operation,                      // Specifies whether encryption or decryption is performed (kCCEncrypt or kCCDecrypt).
-+		commoncrypto.KCCModeCBC,        // Mode of operation, here explicitly set to CBC (Cipher Block Chaining).
-+		commoncrypto.CCAlgorithm(kind), // The encryption algorithm (e.g., kCCAlgorithmAES128, kCCAlgorithmDES).
-+		commoncrypto.CcNoPadding,       // Padding option, set to no padding; padding can be handled at a higher level if necessary.
-+		iv,                             // Initialization Vector (IV) for the cipher, required for CBC mode. Should be nil for ECB mode.
-+		key,                            // PEncryption key.
-+		nil,                            // Tweak key, used only for XTS mode; here set to nil as it’s not required for CBC.
-+		0,                              // Number of rounds, mainly for RC2 and Blowfish; not used here, so set to 0.
-+		0,                              // Mode options for CTR and F8 modes; not used for CBC, so set to 0.
-+		&x.cryptor,                     // Pointer to the CCCryptorRef output, which will hold the state for encryption or decryption.
-+	)
++	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
++	ciphertextSizeMLKEM768 = 1088
 +
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/des: CCCryptorCreateWithMode failed")
-+	}
++	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
++	encapsulationKeySizeMLKEM768 = 1184
 +
-+	runtime.SetFinalizer(x, (*cbcCipher).finalize)
-+	return x
++	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
++	ciphertextSizeMLKEM1024 = 1568
 +
-+}
++	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
++	encapsulationKeySizeMLKEM1024 = 1568
++)
 +
-+func (x *cbcCipher) finalize() {
-+	if x.cryptor != nil {
-+		commoncrypto.CCCryptorRelease(x.cryptor)
-+		x.cryptor = nil
-+	}
++// SupportsMLKEM768 returns true if ML-KEM-768 is supported on this platform.
++func SupportsMLKEM768() bool {
++	return supportsMLKEM768()
 +}
 +
-+func (x *cbcCipher) BlockSize() int { return x.blockSize }
++// SupportsMLKEM1024 returns true if ML-KEM-1024 is supported on this platform.
++func SupportsMLKEM1024() bool {
++	return supportsMLKEM1024()
++}
 +
-+func (x *cbcCipher) CryptBlocks(dst, src []byte) {
-+	if inexactOverlap(dst, src) {
-+		panic("crypto/cipher: invalid buffer overlap")
++var supportsMLKEM768 = sync.OnceValue(func() bool {
++	// EVP_KEYMGMT_fetch was added in OpenSSL 3.0; if it is not available we
++	// are on 1.x and ML-KEM is not supported. On 3.0–3.4 the fetch returns
++	// nil for the ML-KEM algorithm name, which the probe reports as false.
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
 +	}
-+	if len(src)%x.blockSize != 0 {
-+		panic("crypto/cipher: input not full blocks")
++	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM768.ptr(), nil)
++	if sig == nil {
++		return false
 +	}
-+	if len(dst) < len(src) {
-+		panic("crypto/cipher: output smaller than input")
++	ossl.EVP_KEYMGMT_free(sig)
++	return true
++})
++
++var supportsMLKEM1024 = sync.OnceValue(func() bool {
++	if !ossl.EVP_KEYMGMT_fetch_Available() {
++		return false
 +	}
-+	if len(src) == 0 {
-+		return
++	sig, _ := ossl.EVP_KEYMGMT_fetch(nil, _KeyTypeMLKEM1024.ptr(), nil)
++	if sig == nil {
++		return false
 +	}
-+	var outLength int
-+	status := commoncrypto.CCCryptorUpdate(
-+		x.cryptor,  // CCCryptorRef created by CCCryptorCreateWithMode; holds the encryption/decryption state.
-+		src,        // Input data (source buffer) to be encrypted or decrypted.
-+		dst,        // Output buffer (destination buffer) where the result will be stored.
-+		&outLength, // Pointer to a variable that will contain the number of bytes written to the output buffer.
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/cipher: CCCryptorUpdate failed")
++	ossl.EVP_KEYMGMT_free(sig)
++	return true
++})
++
++// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++
++// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
++	var dk DecapsulationKeyMLKEM768
++	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_768, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM768{}, err
 +	}
-+	runtime.KeepAlive(x)
++	return dk, nil
 +}
 +
-+func (x *cbcCipher) SetIV(iv []byte) {
-+	if len(iv) != x.blockSize {
-+		panic("crypto/cipher: incorrect IV length")
-+	}
-+	status := commoncrypto.CCCryptorReset(x.cryptor, iv)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/cipher: CCCryptorReset failed")
++// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
 +	}
-+	runtime.KeepAlive(x)
-+}
 +
-+// The following two functions are a mirror of golang.org/x/crypto/internal/subtle.
++	var dk DecapsulationKeyMLKEM768
++	copy(dk[:], seed)
++	return dk, nil
++}
 +
-+func anyOverlap(x, y []byte) bool {
-+	return len(x) > 0 && len(y) > 0 &&
-+		uintptr(unsafe.Pointer(&x[0])) <= uintptr(unsafe.Pointer(&y[len(y)-1])) &&
-+		uintptr(unsafe.Pointer(&y[0])) <= uintptr(unsafe.Pointer(&x[len(x)-1]))
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
++	return dk[:]
 +}
 +
-+func inexactOverlap(x, y []byte) bool {
-+	if len(x) == 0 || len(y) == 0 || &x[0] == &y[0] {
-+		return false
-+	}
-+	return anyOverlap(x, y)
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return performDecapsulation(ossl.NID_ML_KEM_768, dk[:], ciphertext)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
-new file mode 100644
-index 00000000000000..c27d6db4fe472a
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/des.go
-@@ -0,0 +1,111 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
++	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_768, dk[:], encapsulationKeySizeMLKEM768)
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], ekBytes)
++	return ek
++}
 +
-+package xcrypto
++// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM768.
++type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
 +
-+import (
-+	"crypto/cipher"
-+	"errors"
-+	"slices"
++// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
++func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
++		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++	}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
-+)
++	var ek EncapsulationKeyMLKEM768
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
 +
-+const desBlockSize = commoncrypto.KCCBlockSizeDES
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
++	return ek[:]
++}
 +
-+type desCipher struct {
-+	key  []byte
-+	kind commoncrypto.CCAlgorithm
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
++	return performEncapsulation(ossl.NID_ML_KEM_768, ciphertextSizeMLKEM768, ek[:])
 +}
 +
-+// NewDESCipher creates a new DES cipher block using the specified key (8 bytes).
-+func NewDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 8 {
-+		return nil, errors.New("crypto/des: invalid key size for DES")
++func performEncapsulation(id int32, ciphertextSize int, ek []byte) (sharedKey, ciphertext []byte) {
++	pkey, err := createMLKEMPublicKey(id, ek)
++	if err != nil {
++		panic(err)
 +	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+	c := &desCipher{
-+		key:  slices.Clone(key),
-+		kind: commoncrypto.KCCAlgorithmDES,
++	// Create encapsulation context
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		panic(err)
 +	}
-+	return c, nil
-+}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
 +
-+// NewTripleDESCipher creates a new 3DES cipher block using the specified key (24 bytes).
-+func NewTripleDESCipher(key []byte) (cipher.Block, error) {
-+	if len(key) != 24 {
-+		return nil, errors.New("crypto/des: invalid key size for 3DES")
++	// Initialize encapsulation
++	if _, err := ossl.EVP_PKEY_encapsulate_init(ctx, nil); err != nil {
++		panic(err)
 +	}
 +
-+	c := &desCipher{
-+		key:  slices.Clone(key),
-+		kind: commoncrypto.KCCAlgorithm3DES,
-+	}
-+	return c, nil
-+}
++	// Perform encapsulation - allocate buffers based on the key size
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	ciphertext = make([]byte, ciphertextSize)
 +
-+func (c *desCipher) BlockSize() int { return desBlockSize }
++	sharedKeyLen := len(sharedKey)
++	ciphertextLen := len(ciphertext)
 +
-+func (c *desCipher) Encrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/des: input or output block is too small")
++	if _, err := ossl.EVP_PKEY_encapsulate(ctx, base(ciphertext), &ciphertextLen, base(sharedKey), &sharedKeyLen); err != nil {
++		panic(err)
 +	}
 +
-+	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
-+		panic("crypto/des: invalid buffer overlap")
++	return sharedKey[:sharedKeyLen], ciphertext[:ciphertextLen]
++}
++
++func performDecapsulation(id int32, seed, ciphertext []byte) (sharedKey []byte, err error) {
++	if len(ciphertext) == 0 {
++		return nil, errors.New("mlkem: invalid ciphertext size")
 +	}
 +
-+	var outLength int
-+	status := commoncrypto.CCCrypt(
-+		commoncrypto.KCCEncrypt,
-+		commoncrypto.CCAlgorithm(c.kind),
-+		commoncrypto.KCCOptionECBMode,
-+		c.key,
-+		nil,
-+		src[:blockSize],
-+		dst[:blockSize],
-+		&outLength,
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/des: encryption failed")
++	pkey, err := createMLKEMPrivateKey(id, seed)
++	if err != nil {
++		return nil, err
 +	}
-+}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+func (c *desCipher) Decrypt(dst, src []byte) {
-+	blockSize := c.BlockSize()
-+	if len(src) < blockSize || len(dst) < blockSize {
-+		panic("crypto/des: input or output block is too small")
++	// Create decapsulation context
++	ctx, err := ossl.EVP_PKEY_CTX_new_from_pkey(nil, pkey, nil)
++	if err != nil {
++		return nil, err
 +	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
 +
-+	if inexactOverlap(dst[:blockSize], src[:blockSize]) {
-+		panic("crypto/des: invalid buffer overlap")
++	// Initialize decapsulation
++	if _, err := ossl.EVP_PKEY_decapsulate_init(ctx, nil); err != nil {
++		return nil, err
 +	}
 +
-+	var outLength int
-+	status := commoncrypto.CCCrypt(
-+		commoncrypto.KCCDecrypt,
-+		commoncrypto.CCAlgorithm(c.kind),
-+		commoncrypto.KCCOptionECBMode,
-+		c.key,
-+		nil,
-+		src[:blockSize],
-+		dst[:blockSize],
-+		&outLength,
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/des: decryption failed")
++	// Perform decapsulation
++	sharedKey = make([]byte, sharedKeySizeMLKEM)
++	sharedKeyLen := len(sharedKey)
++	if _, err := ossl.EVP_PKEY_decapsulate(ctx, base(sharedKey), &sharedKeyLen, base(ciphertext), len(ciphertext)); err != nil {
++		return nil, err
 +	}
-+}
 +
-+// CBC mode encrypter
-+func (c *desCipher) NewCBCEncrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCEncrypt, c.kind, c.key, iv)
++	return sharedKey[:sharedKeyLen], nil
 +}
 +
-+// CBC mode decrypter
-+func (c *desCipher) NewCBCDecrypter(iv []byte) cipher.BlockMode {
-+	return newCBC(commoncrypto.KCCDecrypt, c.kind, c.key, iv)
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
-new file mode 100644
-index 00000000000000..b14fc4ddb1c235
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ec.go
-@@ -0,0 +1,39 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
++// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
++// from a ciphertext. It includes various precomputed values.
++type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
 +
-+//go:build darwin
++// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
++// the default crypto/rand source. The decapsulation key must be kept secret.
++func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
++	var dk DecapsulationKeyMLKEM1024
++	if err := generateMLKEMSeed(ossl.EVP_PKEY_MLKEM_1024, dk[:]); err != nil {
++		return DecapsulationKeyMLKEM1024{}, err
++	}
++	return dk, nil
++}
 +
-+package xcrypto
++// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
++// "d || z" form. The seed must be uniformly random.
++func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
++	if len(seed) != seedSizeMLKEM {
++		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
++	}
 +
-+import "errors"
++	var dk DecapsulationKeyMLKEM1024
++	copy(dk[:], seed)
++	return dk, nil
++}
 +
-+// curveToID maps a curve name to its corresponding CryptoKit curve ID.
-+func curveToID(curve string) (int32, error) {
-+	switch curve {
-+	case "P-256":
-+		return 1, nil
-+	case "P-384":
-+		return 2, nil
-+	case "P-521":
-+		return 3, nil
-+	case "X25519":
-+		return 0, nil
-+	default:
-+		return -1, errors.New("unsupported curve")
-+	}
++// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++//
++// The decapsulation key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
++	return dk[:]
 +}
 +
-+func curveToKeySizeInBytes(curve string) int {
-+	switch curve {
-+	case "P-256":
-+		return (256 + 7) / 8
-+	case "P-384":
-+		return (384 + 7) / 8
-+	case "P-521":
-+		return (521 + 7) / 8
-+	case "X25519":
-+		return 32
-+	default:
-+		return 0
-+	}
++// Decapsulate generates a shared key from a ciphertext and a decapsulation
++// key. If the ciphertext is not valid, Decapsulate returns an error.
++//
++// The shared key must be kept secret.
++func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
++	return performDecapsulation(ossl.NID_ML_KEM_1024, dk[:], ciphertext)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
-new file mode 100644
-index 00000000000000..d59db1be807ac5
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdh.go
-@@ -0,0 +1,146 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++// EncapsulationKey returns the public encapsulation key necessary to produce
++// ciphertexts.
++func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
++	ekBytes := extractEncapsulationKeyBytes(ossl.NID_ML_KEM_1024, dk[:], encapsulationKeySizeMLKEM1024)
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], ekBytes)
++	return ek
++}
 +
-+package xcrypto
++// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
++// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
++type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
 +
-+import (
-+	"errors"
-+	"slices"
++// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
++// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
++func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
++	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
++		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++	}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++	var ek EncapsulationKeyMLKEM1024
++	copy(ek[:], encapsulationKey)
++	return ek, nil
++}
 +
-+type PublicKeyECDH struct {
-+	bytes []byte
++// Bytes returns the encapsulation key as a byte slice.
++func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
++	return ek[:]
 +}
 +
-+type PrivateKeyECDH struct {
-+	pub   []byte
-+	priv  []byte // For X25519: the actual private key bytes
-+	curve string // Track the curve type
++// Encapsulate generates a shared key and an associated ciphertext from an
++// encapsulation key, drawing random bytes from the default crypto/rand source.
++//
++// The shared key must be kept secret.
++func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
++	return performEncapsulation(ossl.NID_ML_KEM_1024, ciphertextSizeMLKEM1024, ek[:])
 +}
 +
-+func NewPublicKeyECDH(curve string, bytes []byte) (*PublicKeyECDH, error) {
-+	if len(bytes) < 1 {
-+		return nil, errors.New("NewPublicKeyECDH: missing key")
-+	}
++// Helper functions
 +
-+	curveID, err := curveToID(curve)
++// generateMLKEMSeed generates a new ML-KEM seed by creating a key and extracting its seed parameter.
++func generateMLKEMSeed(keyType int32, seed []byte) error {
++	pkey, err := generateEVPPKey(keyType, 0, "")
 +	if err != nil {
-+		return nil, err
-+	}
-+
-+	// Validate the public key
-+	ret := cryptokit.ValidatePublicKeyECDH(curveID, bytes)
-+	if ret != 0 {
-+		return nil, errors.New("invalid public key")
++		return err
 +	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+	// For all curves (including EC curves), we just store the bytes
-+	// X25519 uses raw 32-byte format
-+	// EC curves use uncompressed X9.63 format (0x04 || x || y)
-+	return &PublicKeyECDH{bytes: slices.Clone(bytes)}, nil
++	_, err = ossl.EVP_PKEY_get_octet_string_param(pkey, _OSSL_PKEY_PARAM_ML_KEM_SEED.ptr(), seed, nil)
++	return err
 +}
 +
-+func (k *PublicKeyECDH) Bytes() []byte { return k.bytes }
-+
-+// bytes expects the public key to be in uncompressed ANSI X9.63 format
-+func NewPrivateKeyECDH(curve string, priv []byte) (*PrivateKeyECDH, error) {
-+	curveID, err := curveToID(curve)
-+	if err != nil {
-+		return nil, err
++// createMLKEMPrivateKey creates an ML-KEM private key from a seed
++func createMLKEMPrivateKey(id int32, seed []byte) (ossl.EVP_PKEY_PTR, error) {
++	if len(seed) != seedSizeMLKEM {
++		return nil, errors.New("mlkem: invalid seed size")
 +	}
 +
-+	// Validate the private key
-+	ret := cryptokit.ValidatePrivateKeyECDH(curveID, priv)
-+	if ret != 0 {
-+		return nil, errors.New("invalid private key")
-+	}
++	bld := newParamBuilder()
++	defer bld.finalize()
 +
-+	// Derive the public key
-+	keySize := curveToKeySizeInBytes(curve)
-+	var pubKeySize int
-+	if curve == "X25519" {
-+		pubKeySize = 32
-+	} else {
-+		pubKeySize = 1 + keySize*2
-+	}
++	bld.addOctetString(_OSSL_PKEY_PARAM_ML_KEM_SEED, seed)
 +
-+	publicKey := make([]byte, pubKeySize)
-+	ret = cryptokit.PublicKeyFromPrivateECDH(curveID, priv, publicKey)
-+	if ret != 0 {
-+		return nil, errors.New("failed to derive public key")
++	params, err := bld.build()
++	if err != nil {
++		return nil, err
 +	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	privKey := &PrivateKeyECDH{
-+		pub:   publicKey,
-+		priv:  slices.Clone(priv),
-+		curve: curve,
-+	}
-+	return privKey, nil
++	return newEvpFromParams(id, ossl.EVP_PKEY_KEYPAIR, params)
 +}
 +
-+func (k *PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error) {
-+	// For all curves, just return the stored public key bytes
-+	return &PublicKeyECDH{
-+		bytes: slices.Clone(k.pub),
-+	}, nil
-+}
++// createMLKEMPublicKey creates an ML-KEM public key from encoded bytes.
++func createMLKEMPublicKey(id int32, pubKeyBytes []byte) (ossl.EVP_PKEY_PTR, error) {
++	bld := newParamBuilder()
++	defer bld.finalize()
 +
-+func ECDH(priv *PrivateKeyECDH, pub *PublicKeyECDH) ([]byte, error) {
-+	if priv == nil || pub == nil {
-+		return nil, errors.New("invalid keys")
-+	}
++	bld.addOctetString(_OSSL_PKEY_PARAM_PUB_KEY, pubKeyBytes)
 +
-+	curveID, err := curveToID(priv.curve)
++	params, err := bld.build()
 +	if err != nil {
 +		return nil, err
 +	}
++	defer ossl.OSSL_PARAM_free(params)
 +
-+	keySize := curveToKeySizeInBytes(priv.curve)
-+	sharedSecret := make([]byte, keySize)
-+
-+	ret := cryptokit.EcdhSharedSecret(curveID, priv.priv, pub.bytes, sharedSecret)
-+	if ret != 0 {
-+		return nil, errors.New("ECDH: key exchange failed")
-+	}
-+
-+	return sharedSecret, nil
++	return newEvpFromParams(id, ossl.EVP_PKEY_PUBLIC_KEY, params)
 +}
 +
-+func GenerateKeyECDH(curve string) (*PrivateKeyECDH, []byte, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, nil, errors.New("unsupported curve")
-+	}
-+
-+	curveID, err := curveToID(curve)
++// extractEncapsulationKeyBytes extracts the encapsulation key bytes from a decapsulation key.
++func extractEncapsulationKeyBytes(id int32, seed []byte, expectedSize int) []byte {
++	pkey, err := createMLKEMPrivateKey(id, seed)
 +	if err != nil {
-+		return nil, nil, err
++		panic(err)
 +	}
++	defer ossl.EVP_PKEY_free(pkey)
 +
-+	var pubKeySize int
-+	if curve == "X25519" {
-+		pubKeySize = 32
-+	} else {
-+		pubKeySize = 1 + keySize*2
++	// Extract public key bytes
++	var pubBytes *byte
++	pubLen, err := ossl.EVP_PKEY_get1_encoded_public_key(pkey, &pubBytes)
++	if err != nil {
++		panic(err)
 +	}
++	defer cryptoFree(unsafe.Pointer(pubBytes))
 +
-+	privateKey := make([]byte, keySize)
-+	publicKey := make([]byte, pubKeySize)
-+
-+	ret := cryptokit.GenerateKeyECDH(curveID, privateKey, publicKey)
-+	if ret != 0 {
-+		return nil, nil, errors.New("EC key generation failed")
++	if pubLen != expectedSize {
++		panic(errors.New("mlkem: invalid encapsulation key size"))
 +	}
 +
-+	// Store the public key in X9.63 format and the private key
-+	k := &PrivateKeyECDH{
-+		pub:   slices.Clone(publicKey),
-+		priv:  slices.Clone(privateKey),
-+		curve: curve,
-+	}
-+	return k, slices.Clone(privateKey), nil
++	// Copy the bytes before pubBytes is freed
++	result := make([]byte, pubLen)
++	copy(result, unsafe.Slice(pubBytes, pubLen))
++	return result
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go
 new file mode 100644
-index 00000000000000..82d68bfabe9c62
+index 00000000000000..94fd563ac87978
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ecdsa.go
-@@ -0,0 +1,154 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go
+@@ -0,0 +1,183 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++// Package openssl provides access to OpenSSL cryptographic functions.
++package openssl
 +
 +import (
 +	"errors"
++	"math/bits"
++	"strconv"
++	"sync"
++	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
 +)
 +
-+type PrivateKeyECDSA struct {
-+	x     BigInt // public key x coordinate
-+	y     BigInt // public key y coordinate
-+	d     BigInt // private key
-+	curve string // curve name
++var isBigEndian = sync.OnceValue(func() bool {
++	buf := [2]byte{}
++	*(*uint16)(unsafe.Pointer(&buf[0])) = uint16(0xABCD)
++
++	switch buf {
++	case [2]byte{0xCD, 0xAB}:
++		return false
++	case [2]byte{0xAB, 0xCD}:
++		return true
++	default:
++		panic("Could not determine native endianness.")
++	}
++})
++
++func major() int {
++	return osslsetup.VersionMajor()
 +}
 +
-+type PublicKeyECDSA struct {
-+	x     BigInt // public key x coordinate
-+	y     BigInt // public key y coordinate
-+	curve string // curve name
++func minor() int {
++	return osslsetup.VersionMinor()
 +}
 +
-+func NewPublicKeyECDSA(curve string, x, y BigInt) (*PublicKeyECDSA, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, errors.New("unsupported curve")
-+	}
-+	// Validate that x and y are of appropriate length
-+	if len(x) > keySize || len(y) > keySize {
-+		return nil, errors.New("public key coordinates are too large")
-+	}
-+	pubKey := &PublicKeyECDSA{
-+		x:     x,
-+		y:     y,
-+		curve: curve,
-+	}
-+	return pubKey, nil
++func patch() int {
++	return osslsetup.VersionPatch()
 +}
 +
-+// NewPrivateKeyECDSA creates a new ECDSA private key using the provided curve name and parameters (x, y, d).
-+func NewPrivateKeyECDSA(curve string, x, y, d BigInt) (*PrivateKeyECDSA, error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, errors.New("unsupported curve")
-+	}
-+	// Validate that x, y, and d are of appropriate length
-+	if len(x) > keySize || len(y) > keySize || len(d) > keySize {
-+		return nil, errors.New("key parameters are too large")
-+	}
-+	privKey := &PrivateKeyECDSA{
-+		x:     x,
-+		y:     y,
-+		d:     d,
-+		curve: curve,
++func utoa(n int) string {
++	return strconv.FormatUint(uint64(n), 10)
++}
++
++func errUnsupportedVersion() error {
++	return errors.New("openssl: unsupported OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()) + " (minimum supported version is 1.1.1)")
++}
++
++// checkMajorVersion panics if the current major version is not one of the expected versions.
++func checkMajorVersion(expected ...int) {
++	for _, v := range expected {
++		if major() == v {
++			return
++		}
 +	}
-+	return privKey, nil
++	panic("openssl: incorrect major version (" + strconv.Itoa(major()) + ")")
 +}
 +
-+func GenerateKeyECDSA(curve string) (x, y, d BigInt, err error) {
-+	keySize := curveToKeySizeInBytes(curve)
-+	if keySize == 0 {
-+		return nil, nil, nil, errors.New("unsupported curve")
++type fail string
++
++func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
++
++// sliceNeverNil returns b if non-nil, and a non-nil zero-length slice otherwise.
++func sliceNeverNil(b []byte) []byte {
++	if b == nil {
++		return []byte{}
 +	}
++	return b
++}
 +
-+	curveID, err := curveToID(curve)
-+	if err != nil {
-+		return nil, nil, nil, err
++// base returns the address of the underlying array in b,
++// being careful not to panic when b has zero length.
++func base(b []byte) *byte {
++	if len(b) == 0 {
++		return nil
 +	}
++	return unsafe.SliceData(b)
++}
 +
-+	// Generate key using CryptoKit
-+	xBytes := make([]byte, keySize)
-+	yBytes := make([]byte, keySize)
-+	dBytes := make([]byte, keySize)
++//go:linkname throw runtime.throw
++func throw(string)
 +
-+	ret := cryptokit.GenerateKeyECDSA(curveID, xBytes, yBytes, dBytes)
-+	if ret != 0 {
-+		return nil, nil, nil, errors.New("ECDSA key generation failed")
++// cryptoMalloc allocates n bytes of memory on the OpenSSL heap, which may be
++// different from the heap which C.malloc allocates on. The allocated object
++// must be freed using cryptoFree. cryptoMalloc is equivalent to the
++// OPENSSL_malloc macro.
++//
++// Like C.malloc, this function is guaranteed to never return nil. If OpenSSL's
++// malloc indicates out of memory, it crashes the program.
++//
++// Only objects which the OpenSSL library will take ownership of (i.e. will be
++// freed by OPENSSL_free / CRYPTO_free) need to be allocated on the OpenSSL
++// heap.
++func cryptoMalloc(n int) unsafe.Pointer {
++	p, _ := ossl.CRYPTO_malloc(n, nil, 0)
++	if p == nil {
++		// Un-recover()-ably crash the program in the same manner as the
++		// C.malloc() wrapper function.
++		throw("openssl: CRYPTO_malloc failed")
 +	}
++	return p
++}
 +
-+	return normalizeBigInt(xBytes), normalizeBigInt(yBytes), normalizeBigInt(dBytes), nil
++// cryptoFree frees an object allocated on the OpenSSL heap, which may be
++// different from the heap which C.malloc allocates on. cryptoFree is equivalent
++// to the OPENSSL_free macro.
++func cryptoFree(p unsafe.Pointer) {
++	ossl.CRYPTO_free(p, nil, 0)
 +}
 +
-+func SignMarshalECDSA(priv *PrivateKeyECDSA, hashed []byte) ([]byte, error) {
-+	if priv == nil || len(hashed) == 0 {
-+		return nil, errors.New("invalid parameters")
++const wordBytes = bits.UintSize / 8
++
++// Reverse each limb of z.
++func (z BigInt) byteSwap() {
++	for i, d := range z {
++		var n uint = 0
++		for j := range wordBytes {
++			n |= uint(byte(d)) << (8 * (wordBytes - j - 1))
++			d >>= 8
++		}
++		z[i] = n
 +	}
++}
 +
-+	curveID, err := curveToID(priv.curve)
++func wbase(b BigInt) *byte {
++	if len(b) == 0 {
++		return nil
++	}
++	return (*byte)(unsafe.Pointer(unsafe.SliceData(b)))
++}
++
++func bigToBN(x BigInt) (ossl.BIGNUM_PTR, error) {
++	if len(x) == 0 {
++		return nil, nil
++	}
++	if isBigEndian() {
++		z := make(BigInt, len(x))
++		copy(z, x)
++		z.byteSwap()
++		x = z
++	}
++	// Limbs are always ordered in LSB first, so we can safely apply
++	// BN_lebin2bn regardless of host endianness.
++	bn, err := ossl.BN_lebin2bn(unsafe.Slice(wbase(x), len(x)*wordBytes), nil)
 +	if err != nil {
 +		return nil, err
 +	}
++	return bn, nil
++}
 +
-+	keySize := curveToKeySizeInBytes(priv.curve)
-+
-+	// Normalize private key to proper size
-+	dBytes := make([]byte, keySize)
-+	copy(dBytes[len(dBytes)-len(priv.d):], priv.d)
-+
-+	// Allocate signature buffer (max size for DER-encoded signature)
-+	maxSigLen := 256
-+	signature := make([]byte, maxSigLen)
-+	sigLen := int64(0)
-+
-+	ret := cryptokit.EcdsaSign(curveID, dBytes, hashed, signature, &sigLen)
-+	if ret != 0 {
-+		return nil, errors.New("ECDSA signing failed")
++func bnToBig(bn ossl.BIGNUM_PTR) BigInt {
++	if bn == nil {
++		return nil
 +	}
 +
-+	if sigLen <= 0 || sigLen > int64(len(signature)) {
-+		return nil, errors.New("invalid signature length")
++	// Limbs are always ordered in LSB first, so we can safely apply
++	// BN_bn2lebinpad regardless of host endianness.
++	x := make(BigInt, ossl.BN_num_bits(bn))
++	if _, err := ossl.BN_bn2lebinpad(bn, unsafe.Slice(wbase(x), len(x)*wordBytes)); err != nil {
++		panic(err)
 +	}
++	if isBigEndian() {
++		x.byteSwap()
++	}
++	return x
++}
 +
-+	return signature[:sigLen], nil
++// bnToBinPad converts the absolute value of bn into big-endian form and stores
++// it at to, padding with zeroes if necessary. If len(to) is not large enough to
++// hold the result, an error is returned.
++func bnToBinPad(bn ossl.BIGNUM_PTR, to []byte) error {
++	_, err := ossl.BN_bn2binpad(bn, to)
++	return err
 +}
 +
-+func VerifyECDSA(pub *PublicKeyECDSA, hashed []byte, sig []byte) bool {
-+	if pub == nil || len(hashed) == 0 || len(sig) == 0 {
-+		return false
-+	}
++func bigEndianUint64(b []byte) uint64 {
++	_ = b[7] // bounds check hint to compiler; see golang.org/issue/14808
++	return uint64(b[7]) | uint64(b[6])<<8 | uint64(b[5])<<16 | uint64(b[4])<<24 |
++		uint64(b[3])<<32 | uint64(b[2])<<40 | uint64(b[1])<<48 | uint64(b[0])<<56
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_cgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_cgo.go
+new file mode 100644
+index 00000000000000..092c8046462b6f
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_cgo.go
+@@ -0,0 +1,17 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	curveID, err := curveToID(pub.curve)
-+	if err != nil {
-+		return false
-+	}
++package openssl
 +
-+	keySize := curveToKeySizeInBytes(pub.curve)
++import "C"
++import "unsafe"
 +
-+	// Normalize public key coordinates to proper size
-+	xBytes := make([]byte, keySize)
-+	yBytes := make([]byte, keySize)
++// goString converts a C string pointer to a Go string for cgo mode
++func goString(ptr *byte) string {
++	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
++}
 +
-+	// Safety check: ensure BigInts are not longer than keySize
-+	if len(pub.x) > keySize || len(pub.y) > keySize {
-+		return false
-+	}
++// goBytes converts a C byte array to a Go byte slice for cgo mode
++func goBytes(ptr unsafe.Pointer, length int) []byte {
++	return C.GoBytes(ptr, C.int(length))
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_nocgo.go
+new file mode 100644
+index 00000000000000..5dc44cacea9c05
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl_nocgo.go
+@@ -0,0 +1,35 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	copy(xBytes[len(xBytes)-len(pub.x):], pub.x)
-+	copy(yBytes[len(yBytes)-len(pub.y):], pub.y)
++//go:build !cgo
 +
-+	ret := cryptokit.EcdsaVerify(curveID, xBytes, yBytes, hashed, sig)
-+	return ret == 1
++package openssl
++
++import "unsafe"
++
++// goString converts a C string pointer to a Go string for nocgo mode
++func goString(ptr *byte) string {
++	if ptr == nil {
++		return ""
++	}
++	var result []byte
++	for i := 0; ; i++ {
++		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
++		if b == 0 {
++			break
++		}
++		result = append(result, b)
++	}
++	return string(result)
 +}
 +
-+func normalizeBigInt(b []byte) BigInt {
-+	// Remove leading zero bytes
-+	for len(b) > 0 && b[0] == 0 {
-+		b = b[1:]
++// goBytes converts a C byte array to a Go byte slice for nocgo mode
++func goBytes(ptr unsafe.Pointer, length int) []byte {
++	if ptr == nil || length == 0 {
++		return nil
 +	}
-+	return b
++	// Copy the data to Go memory, similar to C.GoBytes
++	result := make([]byte, length)
++	copy(result, unsafe.Slice((*byte)(ptr), length))
++	return result
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/params.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/params.go
 new file mode 100644
-index 00000000000000..316ecba6792d47
+index 00000000000000..8bd651d6493707
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/ed25519.go
-@@ -0,0 +1,124 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/params.go
+@@ -0,0 +1,191 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
-+	"errors"
-+	"strconv"
++	"runtime"
++	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+const (
-+	// publicKeySizeEd25519 is the size, in bytes, of public keys as used in crypto/ed25519.
-+	publicKeySizeEd25519 = 32
-+	// privateKeySizeEd25519 is the size, in bytes, of private keys as used in crypto/ed25519.
-+	privateKeySizeEd25519 = 64
-+	// signatureSizeEd25519 is the size, in bytes, of signatures generated and verified by crypto/ed25519.
-+	signatureSizeEd25519 = 64
-+	// seedSizeEd25519 is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
-+	seedSizeEd25519 = 32
-+)
++type addParamError struct {
++	name string
++	err  error
++}
 +
-+// PublicKeyEd25519 represents an Ed25519 public key.
-+type PublicKeyEd25519 []byte
++func (e addParamError) Error() string {
++	return "failed to add parameter " + e.name + ": " + e.err.Error()
++}
 +
-+// PrivateKeyEd25519 represents an Ed25519 private key.
-+type PrivateKeyEd25519 []byte
++type bnParam struct {
++	value   ossl.BIGNUM_PTR
++	private bool
++}
 +
-+func (k PrivateKeyEd25519) Public() PublicKeyEd25519 {
-+	publicKey := make([]byte, publicKeySizeEd25519)
-+	copy(publicKey, k[seedSizeEd25519:])
-+	return PublicKeyEd25519(publicKey)
++// paramBuilder is a helper for building OSSL_PARAMs.
++// If an error occurs when adding a new parameter,
++// subsequent calls to add parameters are ignored
++// and build() will return the error.
++type paramBuilder struct {
++	bld      ossl.OSSL_PARAM_BLD_PTR
++	pinner   runtime.Pinner
++	bnToFree []bnParam
++
++	err error
++}
++
++// newParamBuilder creates a new paramBuilder.
++// [paramBuilder.finalize] must be called to free the builder.
++func newParamBuilder() *paramBuilder {
++	bld := ossl.OSSL_PARAM_BLD_new()
++	if bld == nil {
++		// If this happens it indicates an issue allocating memory.
++		panic("openssl: failed to create OSSL_PARAM_BLD")
++	}
++	return &paramBuilder{bld: bld}
++}
++
++// finalize frees the builder.
++func (b *paramBuilder) finalize() {
++	if b.bld != nil {
++		b.pinner.Unpin()
++		for _, bn := range b.bnToFree {
++			if bn.private {
++				ossl.BN_clear_free(bn.value)
++			} else {
++				ossl.BN_free(bn.value)
++			}
++		}
++		ossl.OSSL_PARAM_BLD_free(b.bld)
++		b.bld = nil
++	}
 +}
 +
-+// GenerateKeyEd25519 generates a new Ed25519 private key.
-+func GenerateKeyEd25519() PrivateKeyEd25519 {
-+	pkeyPriv := make([]byte, privateKeySizeEd25519)
-+	cryptokit.GenerateKeyEd25519(pkeyPriv)
-+	return pkeyPriv
++// check is used internally to enforce invariants and should not be called by users of paramBuilder.
++// Returns true if it's ok to add parameters to the builder or build it.
++// Returns false if there has been an error while adding a parameter.
++// Panics if the paramBuilder has been freed, e.g. if it has already been built.
++func (b *paramBuilder) check() bool {
++	if b.err != nil {
++		return false
++	}
++	if b.bld == nil {
++		panic("openssl: paramBuilder has been freed")
++	}
++	return true
 +}
 +
-+func NewPrivateKeyEd25519(priv []byte) (PrivateKeyEd25519, error) {
-+	if len(priv) != privateKeySizeEd25519 {
-+		panic("ed25519: bad private key length: " + strconv.Itoa(len(priv)))
++// build creates an OSSL_PARAM from the builder.
++// The returned OSSL_PARAM must be freed with OSSL_PARAM_free.
++// If an error occurred while adding parameters, the error is returned
++// and the OSSL_PARAM is nil. Once build() is called, the builder is finalized
++// and cannot be reused.
++func (b *paramBuilder) build() (ossl.OSSL_PARAM_PTR, error) {
++	defer b.finalize()
++	if !b.check() {
++		return nil, b.err
 +	}
-+	return NewPrivateKeyEd25519FromSeed(priv[:seedSizeEd25519])
++	param, err := ossl.OSSL_PARAM_BLD_to_param(b.bld)
++	if err != nil {
++		return nil, err
++	}
++	return param, nil
 +}
 +
-+func (k PrivateKeyEd25519) Bytes() ([]byte, error) {
-+	return k, nil
++// addUTF8String adds a NUL-terminated UTF-8 string to the builder.
++// size should not include the terminating NUL byte. If size is zero, then it will be calculated.
++func (b *paramBuilder) addUTF8String(name cString, value *byte, size int) {
++	if !b.check() {
++		return
++	}
++	// OSSL_PARAM_BLD_push_utf8_string calculates the size if it is zero.
++	if size == 0 {
++		size = cStringLen(value)
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_utf8_string(b.bld, name.ptr(), unsafe.Slice(value, size)); err != nil {
++		b.err = addParamError{name.str(), err}
++	}
 +}
 +
-+func NewPublicKeyEd25519(pub []byte) (PublicKeyEd25519, error) {
-+	if len(pub) != publicKeySizeEd25519 {
-+		panic("ed25519: bad public key length: " + strconv.Itoa(len(pub)))
++// addOctetString adds an octet string to the builder.
++// The value is pinned and will be unpinned when the builder is freed.
++func (b *paramBuilder) addOctetString(name cString, value []byte) {
++	if !b.check() {
++		return
 +	}
-+	pkey := make([]byte, publicKeySizeEd25519)
-+	result := cryptokit.NewPublicKeyEd25519(pkey, pub)
-+	if result != 0 {
-+		return nil, errors.New("failed to create Ed25519 public key")
++	if value == nil {
++		// Short-circuit a nil slice: don't pass anything at all to OpenSSL.
++		// OpenSSL 3.5.6 raises an error when passed null, and expects users
++		// to not call this function at all in this case.
++		// See https://github.com/openssl/openssl/issues/30728
++		//
++		// Don't short-circuit empty slices, as they might have a meaning.
++		// For example, in KDFs an empty salt is different from a nil salt.
++		return
++	}
++	if len(value) != 0 {
++		b.pinner.Pin(&value[0])
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_octet_string(b.bld, name.ptr(), value); err != nil {
++		b.err = addParamError{name.str(), err}
 +	}
-+	return pkey, nil
 +}
 +
-+func (k PublicKeyEd25519) Bytes() ([]byte, error) {
-+	return k, nil
++func cStringLen(ptr *byte) int {
++	if ptr == nil {
++		return 0
++	}
++	for n := 0; ; n++ {
++		if *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(n))) == 0 {
++			return n
++		}
++	}
 +}
 +
-+// NewPrivateKeyEd25519FromSeed calculates a private key from a seed. It will panic if
-+// len(seed) is not [SeedSize]. RFC 8032's private keys correspond to seeds in this
-+// package.
-+// NewPrivateKeyEd25519FromSeed creates an Ed25519 private key from a seed.
-+func NewPrivateKeyEd25519FromSeed(seed []byte) (PrivateKeyEd25519, error) {
-+	if len(seed) != seedSizeEd25519 {
-+		panic("ed25519: bad seed length: " + strconv.Itoa(len(seed)))
++// addInt32 adds an int32 to the builder.
++func (b *paramBuilder) addInt32(name cString, value int32) {
++	if !b.check() {
++		return
 +	}
-+	pkey := make([]byte, privateKeySizeEd25519)
-+	result := cryptokit.NewPrivateKeyEd25519FromSeed(pkey, seed)
-+	if result != 0 {
-+		return nil, errors.New("failed to generate Ed25519 key from seed")
++	if _, err := ossl.OSSL_PARAM_BLD_push_int32(b.bld, name.ptr(), value); err != nil {
++		b.err = addParamError{name.str(), err}
 +	}
-+	return pkey, nil
 +}
 +
-+// SignEd25519 signs the message with priv and returns a signature.
-+func SignEd25519(priv PrivateKeyEd25519, message []byte) ([]byte, error) {
-+	sig := make([]byte, signatureSizeEd25519)
-+	result := cryptokit.SignEd25519(priv, message, sig)
-+	if result < 0 {
-+		switch result {
-+		case -1:
-+			return nil, errors.New("invalid inputs to SignEd25519")
-+		case -2:
-+			return nil, errors.New("failed to reconstruct private key")
-+		case -3:
-+			return nil, errors.New("failed to sign the message")
-+		case -4:
-+			return nil, errors.New("signature buffer too small")
-+		default:
-+			return nil, errors.New("unknown error in SignEd25519")
-+		}
++// addBN adds a GOossl.BIGNUM_PTR to the builder.
++func (b *paramBuilder) addBN(name cString, value ossl.BIGNUM_PTR) {
++	if !b.check() {
++		return
++	}
++	if _, err := ossl.OSSL_PARAM_BLD_push_BN(b.bld, name.ptr(), value); err != nil {
++		b.err = addParamError{name.str(), err}
 +	}
-+	return sig, nil
 +}
 +
-+// VerifyEd25519 reports whether sig is a valid signature of message by pub.
-+func VerifyEd25519(pub PublicKeyEd25519, message, sig []byte) error {
-+	result := cryptokit.VerifyEd25519(pub, message, sig)
-+	switch result {
-+	case 1:
-+		return nil // Valid signature
-+	case 0:
-+		return errors.New("ed25519: invalid signature")
-+	case -1:
-+		return errors.New("invalid inputs to VerifyEd25519")
-+	case -2:
-+		return errors.New("failed to reconstruct public key")
-+	default:
-+		return errors.New("unknown error in VerifyEd25519")
++// addBigInt adds a BigInt to the builder.
++// The BigInt is converted using bigToBN to a BIGNUM that is freed when the builder is finalized.
++// If private is true, the BIGNUM will be cleared with BN_clear_free,
++// otherwise it will be freed with BN_free.
++func (b *paramBuilder) addBigInt(name cString, value BigInt, private bool) {
++	if !b.check() {
++		return
++	}
++	if len(value) == 0 {
++		// Nothing to do.
++		return
++	}
++	bn, err := bigToBN(value)
++	if err != nil {
++		b.err = err
++		return
++	}
++	if b.bnToFree == nil {
++		// Preallocate the slice to avoid growing it later, which would cause allocations and copies.
++		// The maximum known number of BIGNUMs to free are 8 for RSA, so we use that as the capacity.
++		b.bnToFree = make([]bnParam, 0, 8)
 +	}
++	b.bnToFree = append(b.bnToFree, bnParam{bn, private})
++	b.addBN(name, bn)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go
 new file mode 100644
-index 00000000000000..a085303b10ac00
+index 00000000000000..66af2060e2cf87
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/evp.go
-@@ -0,0 +1,339 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go
+@@ -0,0 +1,86 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
-+	"crypto"
 +	"errors"
 +	"hash"
-+	"slices"
-+	"strconv"
-+	"unsafe"
++	"sync"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/security"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+type algorithmType int
-+
-+const (
-+	algorithmTypePSS algorithmType = iota
-+	algorithmTypeRAW
-+	algorithmTypePKCS1v15Enc
-+	algorithmTypePKCS1v15Sig
-+	algorithmTypeOAEP
-+	algorithmTypeECDSA
-+)
++// SupportsPBKDF2 reports whether the current OpenSSL version supports PBKDF2.
++func SupportsPBKDF2() bool {
++	switch major() {
++	case 1:
++		return true
++	case 3, 4:
++		_, err := fetchPBKDF2()
++		return err == nil
++	default:
++		panic(errUnsupportedVersion())
++	}
++}
 +
-+type withKeyFunc func(func(security.SecKeyRef) error) error
++// fetchPBKDF2 fetches the PBKDF2 algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchPBKDF2 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+// Encrypt encrypts a plaintext message using a given key and algorithm.
-+func evpEncrypt(withKey withKeyFunc, algorithmType algorithmType, plaintext []byte, hash hash.Hash) ([]byte, error) {
-+	var cryptoHash crypto.Hash
-+	if hash != nil {
-+		var err error
-+		cryptoHash, err = hashToCryptoHash(hash)
-+		if err != nil {
-+			return nil, err
-+		}
-+	}
-+	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_PBKDF2.ptr(), nil)
 +	if err != nil {
 +		return nil, err
 +	}
++	return kdf, nil
++})
 +
-+	dataRef := bytesToCFData(plaintext)
-+	defer cfRelease(unsafe.Pointer(dataRef))
-+
-+	var encryptedDataRef security.CFDataRef
-+	err = withKey(func(key security.SecKeyRef) error {
-+		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeEncrypt, algorithm) != 1 {
-+			return errors.New("algorithm not supported by the key")
-+		}
-+		encryptedDataRef = security.SecKeyCreateEncryptedData(key, algorithm, dataRef, nil)
-+		if encryptedDataRef == nil {
-+			return errors.New("encryption failed")
-+		}
-+		return nil
-+	})
++func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
++	h, err := hashFuncHash(fh)
 +	if err != nil {
 +		return nil, err
 +	}
-+	defer cfRelease(unsafe.Pointer(encryptedDataRef))
++	md := hashToMD(h)
++	if md == nil {
++		return nil, errors.New("unsupported hash function")
++	}
++	out := make([]byte, keyLen)
++	switch major() {
++	case 1:
++		if _, err = ossl.PKCS5_PBKDF2_HMAC(password, salt, int32(iter), md, out); err != nil {
++			return nil, err
++		}
++	default:
++		kdf, err := fetchPBKDF2()
++		if err != nil {
++			return nil, err
++		}
++		ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.EVP_KDF_CTX_free(ctx)
 +
-+	return cfDataToBytes(encryptedDataRef), nil
-+}
++		bld := newParamBuilder()
++		defer bld.finalize()
++		bld.addOctetString(_OSSL_KDF_PARAM_PASSWORD, password)
++		bld.addOctetString(_OSSL_KDF_PARAM_SALT, salt)
++		bld.addInt32(_OSSL_KDF_PARAM_ITER, int32(iter))
++		bld.addInt32(_OSSL_KDF_PARAM_PKCS5, 1) // disable SP800-132 compliance checks, they are done at the crypto/pbkdf2 level
++		bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++		params, err := bld.build()
++		if err != nil {
++			return nil, err
++		}
++		defer ossl.OSSL_PARAM_free(params)
 +
-+// Decrypt decrypts a ciphertext using a given key and algorithm.
-+func evpDecrypt(withKey withKeyFunc, algorithmType algorithmType, ciphertext []byte, hash hash.Hash) ([]byte, error) {
-+	var cryptoHash crypto.Hash
-+	if hash != nil {
-+		var err error
-+		cryptoHash, err = hashToCryptoHash(hash)
++		_, err = ossl.EVP_KDF_derive(ctx, out, params)
 +		if err != nil {
 +			return nil, err
 +		}
 +	}
-+	algorithm, err := selectAlgorithm(cryptoHash, algorithmType)
-+	if err != nil {
-+		return nil, err
-+	}
 +
-+	msg := bytesToCFData(ciphertext)
++	return out, nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go
+new file mode 100644
+index 00000000000000..f6a4b1ac20b654
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go
+@@ -0,0 +1,250 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+	var decryptedDataRef security.CFDataRef
-+	var cfErr security.CFErrorRef
-+	err = withKey(func(key security.SecKeyRef) error {
-+		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeDecrypt, algorithm) != 1 {
-+			return errors.New("algorithm not supported by the key")
-+		}
-+		decryptedDataRef = security.SecKeyCreateDecryptedData(key, algorithm, msg, &cfErr)
-+		if decryptedDataRef == nil {
-+			return errors.New("decryption failed")
-+		}
-+		return nil
-+	})
++package openssl
 +
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return nil, err
-+	}
++import (
++	"crypto"
++	"errors"
++	"unsafe"
 +
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer cfRelease(unsafe.Pointer(decryptedDataRef))
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+	return cfDataToBytes(decryptedDataRef), nil
++// This file contains code specific to the built-in OpenSSL providers.
++
++// _OSSL_MD5_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/md5.h#L33.
++type _OSSL_MD5_CTX struct {
++	h      [4]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
 +}
 +
-+func evpSign(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed []byte) ([]byte, error) {
-+	algorithm, err := selectAlgorithm(hash, algorithmType)
-+	if err != nil {
-+		return nil, err
-+	}
++func (d *_OSSL_MD5_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
 +
-+	var signedDataRef security.CFDataRef
-+	var cfErr security.CFErrorRef
-+	err = withKey(func(key security.SecKeyRef) error {
-+		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeSign, algorithm) != 1 {
-+			return errors.New("algorithm not supported by the key")
-+		}
-+		signedDataRef = security.SecKeyCreateSignature(key, algorithm, bytesToCFData(hashed), &cfErr)
-+		if signedDataRef == nil {
-+			return errors.New("signing failed")
-+		}
-+		return nil
-+	})
++func (d *_OSSL_MD5_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
 +
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return nil, err
-+	}
++// _OSSL_SHA_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L34.
++type _OSSL_SHA_CTX struct {
++	h      [5]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
++}
 +
-+	if err != nil {
-+		return nil, err
-+	}
-+	defer cfRelease(unsafe.Pointer(signedDataRef))
++func (d *_OSSL_SHA_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b, d.h[4] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
 +
-+	return cfDataToBytes(signedDataRef), nil
++func (d *_OSSL_SHA_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
 +}
 +
-+func evpVerify(withKey withKeyFunc, algorithmType algorithmType, hash crypto.Hash, hashed, signature []byte) error {
-+	algorithm, err := selectAlgorithm(hash, algorithmType)
-+	if err != nil {
-+		return err
-+	}
++// _OSSL_SHA256_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L51.
++type _OSSL_SHA256_CTX struct {
++	h      [8]uint32
++	nl, nh uint32
++	x      [64]byte
++	nx     uint32
++}
 +
-+	var cfErr security.CFErrorRef
-+	err = withKey(func(key security.SecKeyRef) error {
-+		if security.SecKeyIsAlgorithmSupported(key, security.KSecKeyOperationTypeVerify, algorithm) != 1 {
-+			return errors.New("algorithm not supported by the key")
++func (d *_OSSL_SHA256_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint32(b)
++	b, d.h[1] = consumeUint32(b)
++	b, d.h[2] = consumeUint32(b)
++	b, d.h[3] = consumeUint32(b)
++	b, d.h[4] = consumeUint32(b)
++	b, d.h[5] = consumeUint32(b)
++	b, d.h[6] = consumeUint32(b)
++	b, d.h[7] = consumeUint32(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = uint32(n << 3)
++	d.nh = uint32(n >> 29)
++	d.nx = uint32(n) % 64
++	return nil
++}
++
++func (d *_OSSL_SHA256_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint32(buf, d.h[0])
++	buf = appendUint32(buf, d.h[1])
++	buf = appendUint32(buf, d.h[2])
++	buf = appendUint32(buf, d.h[3])
++	buf = appendUint32(buf, d.h[4])
++	buf = appendUint32(buf, d.h[5])
++	buf = appendUint32(buf, d.h[6])
++	buf = appendUint32(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, uint64(d.nl)>>3|uint64(d.nh)<<29)
++	return buf, nil
++}
++
++// _OSSL_SHA512_CTX layout is taken from
++// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/include/openssl/sha.h#L95.
++type _OSSL_SHA512_CTX struct {
++	h      [8]uint64
++	nl, nh uint64
++	x      [128]byte
++	nx     uint32
++}
++
++func (d *_OSSL_SHA512_CTX) UnmarshalBinary(b []byte) error {
++	b, d.h[0] = consumeUint64(b)
++	b, d.h[1] = consumeUint64(b)
++	b, d.h[2] = consumeUint64(b)
++	b, d.h[3] = consumeUint64(b)
++	b, d.h[4] = consumeUint64(b)
++	b, d.h[5] = consumeUint64(b)
++	b, d.h[6] = consumeUint64(b)
++	b, d.h[7] = consumeUint64(b)
++	b = b[copy(d.x[:], b):]
++	_, n := consumeUint64(b)
++	d.nl = n << 3
++	d.nh = n >> 61
++	d.nx = uint32(n) % 128
++	return nil
++}
++
++func (d *_OSSL_SHA512_CTX) AppendBinary(buf []byte) ([]byte, error) {
++	buf = appendUint64(buf, d.h[0])
++	buf = appendUint64(buf, d.h[1])
++	buf = appendUint64(buf, d.h[2])
++	buf = appendUint64(buf, d.h[3])
++	buf = appendUint64(buf, d.h[4])
++	buf = appendUint64(buf, d.h[5])
++	buf = appendUint64(buf, d.h[6])
++	buf = appendUint64(buf, d.h[7])
++	buf = append(buf, d.x[:d.nx]...)
++	buf = append(buf, make([]byte, len(d.x)-int(d.nx))...)
++	buf = appendUint64(buf, d.nl>>3|d.nh<<61)
++	return buf, nil
++}
++
++func getOSSLDigetsContext(ctx ossl.EVP_MD_CTX_PTR) unsafe.Pointer {
++	switch major() {
++	case 1:
++		// https://github.com/openssl/openssl/blob/0418e993c717a6863f206feaa40673a261de7395/crypto/evp/evp_local.h#L12.
++		type mdCtx struct {
++			_       [2]unsafe.Pointer
++			_       uint32
++			md_data unsafe.Pointer
++		}
++		return (*mdCtx)(unsafe.Pointer(ctx)).md_data
++	case 3:
++		// The EVP_MD_CTX memory layout has changed in OpenSSL 3
++		// and the property holding the internal structure is no longer md_data but algctx.
++		// https://github.com/openssl/openssl/blob/5675a5aaf6a2e489022bcfc18330dae9263e598e/crypto/evp/evp_local.h#L16.
++		type mdCtx struct {
++			_      [3]unsafe.Pointer
++			_      uint32
++			_      [3]unsafe.Pointer
++			algctx unsafe.Pointer
 +		}
-+		if security.SecKeyVerifySignature(key, algorithm, bytesToCFData(hashed), bytesToCFData(signature), &cfErr) != 1 {
-+			return errors.New("verification failed")
++		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
++	case 4:
++		// OpenSSL 4 removed the ENGINE, md_data, and update fields from EVP_MD_CTX.
++		// https://github.com/openssl/openssl/blob/openssl-4.0.0-alpha1/crypto/evp/evp_local.h
++		type mdCtx struct {
++			_      [2]unsafe.Pointer // reqdigest, digest
++			_      uint32            // flags
++			_      unsafe.Pointer    // pctx
++			algctx unsafe.Pointer
 +		}
-+		return nil
-+	})
-+
-+	if err := goCFErrorRef(cfErr); err != nil {
-+		return err
++		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
++	default:
++		panic(errUnsupportedVersion())
 +	}
-+
-+	return err
 +}
 +
-+// hashToCryptoHash converts a hash.Hash to a crypto.Hash.
-+func hashToCryptoHash(hash hash.Hash) (crypto.Hash, error) {
-+	switch h := hash.(type) {
-+	case *Hash:
-+		return h.alg.ch, nil
++var errHashStateInvalid = errors.New("openssl: can't retrieve hash state")
++
++func osslHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
++	algctx := getOSSLDigetsContext(ctx)
++	if algctx == nil {
++		return nil, errHashStateInvalid
++	}
++	buf = append(buf, magic...)
++	switch ch {
++	case crypto.MD5:
++		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA1:
++		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA224, crypto.SHA256:
++		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
++		return d.AppendBinary(buf)
 +	default:
-+		return 0, errors.New("unsupported hash function")
++		panic("unsupported hash " + ch.String())
 +	}
 +}
 +
-+// selectAlgorithm selects the appropriate SecKeyAlgorithm based on hash and algorithm type.
-+func selectAlgorithm(hash crypto.Hash, algorithmType algorithmType) (security.CFStringRef, error) {
-+	var algo security.CFStringRef
-+	switch algorithmType {
-+	case algorithmTypePSS:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA1
-+		case crypto.SHA224:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA224
-+		case crypto.SHA256:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA256
-+		case crypto.SHA384:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA384
-+		case crypto.SHA512:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPSSSHA512
-+		default:
-+			return nil, errors.New("unsupported PSS hash: " + hash.String())
-+		}
-+	case algorithmTypeRAW:
-+		algo = security.KSecKeyAlgorithmRSAEncryptionRaw
-+	case algorithmTypePKCS1v15Enc:
-+		return security.KSecKeyAlgorithmRSAEncryptionPKCS1, nil
-+	case algorithmTypePKCS1v15Sig:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA1
-+		case crypto.SHA224:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA224
-+		case crypto.SHA256:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA256
-+		case crypto.SHA384:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA384
-+		case crypto.SHA512:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15SHA512
-+		case 0:
-+			algo = security.KSecKeyAlgorithmRSASignatureDigestPKCS1v15Raw
-+		default:
-+			return nil, errors.New("unsupported PKCS1v15 hash: " + hash.String())
-+		}
-+	case algorithmTypeOAEP:
-+		switch hash {
-+		case crypto.SHA1:
-+			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA1
-+		case crypto.SHA224:
-+			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA224
-+		case crypto.SHA256:
-+			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA256
-+		case crypto.SHA384:
-+			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA384
-+		case crypto.SHA512:
-+			algo = security.KSecKeyAlgorithmRSAEncryptionOAEPSHA512
-+		default:
-+			return nil, errors.New("unsupported OAEP hash: " + hash.String())
-+		}
-+	case algorithmTypeECDSA:
-+		return security.KSecKeyAlgorithmECDSASignatureDigestX962, nil
++func osslHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
++	algctx := getOSSLDigetsContext(ctx)
++	if algctx == nil {
++		return errHashStateInvalid
++	}
++	b = b[len(magic):]
++	switch ch {
++	case crypto.MD5:
++		d := (*_OSSL_MD5_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA1:
++		d := (*_OSSL_SHA_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA224, crypto.SHA256:
++		d := (*_OSSL_SHA256_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		d := (*_OSSL_SHA512_CTX)(unsafe.Pointer(algctx))
++		return d.UnmarshalBinary(b)
 +	default:
-+		return nil, errors.New("unsupported algorithm type: " + strconv.Itoa(int(algorithmType)))
++		panic("unsupported hash " + ch.String())
 +	}
-+	return algo, nil
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/providersymcrypt.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/providersymcrypt.go
+new file mode 100644
+index 00000000000000..1fc14f756a0ce4
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/providersymcrypt.go
+@@ -0,0 +1,331 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// bytesToCFData turns a byte slice into a CFDataRef. Caller then "owns" the
-+// CFDataRef and must CFRelease the CFDataRef when done.
-+func bytesToCFData(buf []byte) security.CFDataRef {
-+	return security.CFDataCreate(security.KCFAllocatorDefault, buf)
-+}
++package openssl
 +
-+// cfDataToBytes turns a CFDataRef into a byte slice.
-+func cfDataToBytes(cfData security.CFDataRef) []byte {
-+	// TODO: remove this allocation
-+	return slices.Clone(unsafe.Slice(security.CFDataGetBytePtr(cfData), security.CFDataGetLength(cfData)))
++import (
++	"crypto"
++	"errors"
++	"unsafe"
++
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
++
++// This file contains code specific to the SymCrypt provider.
++
++const (
++	_SCOSSL_DIGEST_PARAM_STATE              cString = "state\x00"
++	_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM cString = "recompute_checksum\x00"
++)
++
++const (
++	_SYMCRYPT_BLOB_MAGIC = 0x636D7973 // "cysm" in little-endian
++
++	_SymCryptBlobTypeHashState       = 0x100
++	_SymCryptBlobTypeMd2State        = _SymCryptBlobTypeHashState + 1
++	_SymCryptBlobTypeMd4State        = _SymCryptBlobTypeHashState + 2
++	_SymCryptBlobTypeMd5State        = _SymCryptBlobTypeHashState + 3
++	_SymCryptBlobTypeSha1State       = _SymCryptBlobTypeHashState + 4
++	_SymCryptBlobTypeSha256State     = _SymCryptBlobTypeHashState + 5
++	_SymCryptBlobTypeSha384State     = _SymCryptBlobTypeHashState + 6
++	_SymCryptBlobTypeSha512State     = _SymCryptBlobTypeHashState + 7
++	_SymCryptBlobTypeSha3_256State   = _SymCryptBlobTypeHashState + 8
++	_SymCryptBlobTypeSha3_384State   = _SymCryptBlobTypeHashState + 9
++	_SymCryptBlobTypeSha3_512State   = _SymCryptBlobTypeHashState + 10
++	_SymCryptBlobTypeSha224State     = _SymCryptBlobTypeHashState + 11
++	_SymCryptBlobTypeSha512_224State = _SymCryptBlobTypeHashState + 12
++	_SymCryptBlobTypeSha512_256State = _SymCryptBlobTypeHashState + 13
++	_SymCryptBlobTypeSha3_224State   = _SymCryptBlobTypeHashState + 14
++
++	_SYMCRYPT_MD5_STATE_EXPORT_SIZE    = uint32(unsafe.Sizeof(_SYMCRYPT_MD5_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA1_STATE_EXPORT_SIZE   = uint32(unsafe.Sizeof(_SYMCRYPT_SHA1_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA256_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA256_STATE_EXPORT_BLOB{}))
++	_SYMCRYPT_SHA512_STATE_EXPORT_SIZE = uint32(unsafe.Sizeof(_SYMCRYPT_SHA512_STATE_EXPORT_BLOB{}))
++)
++
++type _SYMCRYPT_BLOB_HEADER struct {
++	magic uint32
++	size  uint32
++	_type uint32
 +}
 +
-+// cfRelease releases a CoreFoundation object.
-+func cfRelease(ref unsafe.Pointer) {
-+	security.CFRelease(security.CFTypeRef(ref))
++type _SYMCRYPT_BLOB_TRAILER struct {
++	checksum [8]uint8
 +}
 +
-+// createSecKeyWithData creates a SecKey from the provided encoded key and attributes dictionary.
-+func createSecKeyWithData(encodedKey []byte, keyType, keyClass security.CFStringRef) (security.SecKeyRef, error) {
-+	encodedKeyCF := security.CFDataCreate(security.KCFAllocatorDefault, encodedKey)
-+	if encodedKeyCF == nil {
-+		return nil, errors.New("xcrypto: failed to create CFData for private key")
-+	}
-+	defer security.CFRelease(security.CFTypeRef(encodedKeyCF))
++// _UINT64 is a 64-bit unsigned integer, stored in native endianess.
++// It is used to represent a SymCrypt UINT64 type without making the
++// parent struct 8-byte aligned, given that the Windows ABI makes
++// the struct 4-byte aligned.
++type _UINT64 [2]uint32
 +
-+	attrKeys := []security.CFTypeRef{
-+		security.CFTypeRef(security.KSecAttrKeyType),
-+		security.CFTypeRef(security.KSecAttrKeyClass),
++func newUINT64(v uint64) _UINT64 {
++	var u _UINT64
++	if isBigEndian() {
++		u[0], u[1] = uint32(v>>32), uint32(v)
++	} else {
++		u[0], u[1] = uint32(v), uint32(v>>32)
 +	}
++	return u
++}
 +
-+	attrValues := []security.CFTypeRef{
-+		security.CFTypeRef(keyType),
-+		security.CFTypeRef(keyClass),
++func (u *_UINT64) uint64() uint64 {
++	if isBigEndian() {
++		return uint64(u[0])<<32 | (uint64(u[1]))
 +	}
++	return uint64(u[0]) | (uint64(u[1]) << 32)
++}
 +
-+	// Create attributes dictionary for the key
-+	attrDict := security.CFDictionaryCreate(
-+		security.KCFAllocatorDefault,
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrKeys[0])),
-+		(*unsafe.Pointer)(unsafe.Pointer(&attrValues[0])),
-+		security.CFIndex(len(attrKeys)),
-+		nil,
-+		nil,
-+	)
-+	if attrDict == nil {
-+		return nil, errors.New("xcrypto: failed to create attributes dictionary")
++// symCryptAppendBinary appends the binary representation of a SymCrypt state
++// to the given destination slice.
++func symCryptAppendBinary(dst, chain, buffer []byte, blength _UINT64) []byte {
++	length := blength.uint64()
++	var nx uint64
++	if len(buffer) <= 64 {
++		nx = length & 0x3f
++	} else {
++		nx = length & 0x7f
 +	}
-+	defer security.CFRelease(security.CFTypeRef(attrDict))
++	dst = append(dst, chain...)
++	dst = append(dst, buffer[:nx]...)
++	dst = append(dst, make([]byte, len(buffer)-int(nx))...)
++	dst = appendUint64(dst, length)
++	return dst
++}
 +
-+	// Generate the SecKey
-+	var errorRef security.CFErrorRef
-+	key := security.SecKeyCreateWithData(encodedKeyCF, attrDict, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, err
-+	}
-+	return key, nil
++// symCryptUnmarshalBinary unmarshals the binary representation of a SymCrypt state
++// from the given source slice. It returns the length of the data.
++func symCryptUnmarshalBinary(d []byte, chain, buffer []byte) _UINT64 {
++	copy(chain[:], d)
++	d = d[len(chain):]
++	copy(buffer[:], d)
++	d = d[len(buffer):]
++	_, length := consumeUint64(d)
++	return newUINT64(length)
 +}
 +
-+// createSecKeyRandom creates a new SecKey with the provided attributes dictionary.
-+func createSecKeyRandom(keyType security.CFStringRef, keySize int) ([]byte, security.SecKeyRef, error) {
-+	keyAttrs := security.CFDictionaryCreateMutable(security.KCFAllocatorDefault, 0, nil, nil)
-+	if keyAttrs == nil {
-+		return nil, nil, errors.New("failed to create key attributes dictionary")
++// swapEndianessUint32 swaps the endianness of the given byte slice
++// in place. It assumes the slice is a backup of a 32-bit integer array.
++func swapEndianessUint32(d []uint8) {
++	for i := 0; i < len(d); i += 4 {
++		d[i], d[i+3] = d[i+3], d[i]
++		d[i+1], d[i+2] = d[i+2], d[i+1]
 +	}
-+	defer security.CFRelease(security.CFTypeRef(keyAttrs))
-+
-+	security.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(security.KSecAttrKeyType),
-+		unsafe.Pointer(keyType),
-+	)
 +
-+	cfNum := security.CFNumberCreate(security.KCFAllocatorDefault, security.KCFNumberLongType, unsafe.Pointer(&keySize))
-+	defer security.CFRelease(security.CFTypeRef(cfNum))
++}
 +
-+	security.CFDictionarySetValue(
-+		keyAttrs,
-+		unsafe.Pointer(security.KSecAttrKeySizeInBits),
-+		unsafe.Pointer(cfNum),
-+	)
++type _SYMCRYPT_MD5_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [16]uint8 // little endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
++}
 +
-+	// Generate the private key
-+	var errorRef security.CFErrorRef
-+	privKeyRef := security.SecKeyCreateRandomKey(security.CFDictionaryRef(keyAttrs), &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, nil, err
-+	}
++func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	// b.chain is little endian, but Go expects big endian,
++	// we need to swap the bytes.
++	swapEndianessUint32(b.chain[:])
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
 +
-+	// Export the private key as DER
-+	privData := security.SecKeyCopyExternalRepresentation(privKeyRef, &errorRef)
-+	if err := goCFErrorRef(errorRef); err != nil {
-+		return nil, nil, err
-+	}
-+	defer security.CFRelease(security.CFTypeRef(privData))
++func (b *_SYMCRYPT_MD5_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++	swapEndianessUint32(b.chain[:])
++}
 +
-+	privKeyDER := cfDataToBytes(privData)
-+	if privKeyDER == nil {
-+		return nil, nil, errors.New("failed to convert CFData to bytes")
-+	}
-+	return privKeyDER, privKeyRef, nil
++type _SYMCRYPT_SHA1_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [20]uint8 // big endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
-new file mode 100644
-index 00000000000000..82a961d974f129
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/gcm.go
-@@ -0,0 +1,218 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
 +
-+//go:build darwin
++func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
 +
-+package xcrypto
++func (b *_SYMCRYPT_SHA1_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++}
 +
-+import (
-+	"crypto/cipher"
-+	"errors"
++type _SYMCRYPT_SHA256_STATE_EXPORT_BLOB struct {
++	header _SYMCRYPT_BLOB_HEADER
++	chain  [32]uint8 // big endian
++	length _UINT64   // native endian
++	buffer [64]uint8
++	_      [8]uint8 // reserved
++	_      _SYMCRYPT_BLOB_TRAILER
++}
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.length), nil
++}
 +
-+type aesGCM struct {
-+	key []byte
-+	tls cipherGCMTLS
-+	// minNextNonce is the minimum value that the next nonce can be, enforced by
-+	// all TLS modes.
-+	minNextNonce uint64
-+	// mask is the nonce mask used in TLS 1.3 mode.
-+	mask uint64
-+	// maskInitialized is true if mask has been initialized. This happens during
-+	// the first Seal. The initialized mask may be 0. Used by TLS 1.3 mode.
-+	maskInitialized bool
++func (b *_SYMCRYPT_SHA256_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.length = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
 +}
 +
-+type noGCM struct {
-+	cipher.Block
++type _SYMCRYPT_SHA512_STATE_EXPORT_BLOB struct {
++	header  _SYMCRYPT_BLOB_HEADER
++	chain   [64]uint8 // big endian
++	lengthL _UINT64   // native endian
++	lengthH _UINT64   // native endian
++	buffer  [128]uint8
++	_       [8]uint8 // reserved
++	_       _SYMCRYPT_BLOB_TRAILER
 +}
 +
-+// NewGCM constructs a GCM block mode for AES using the cryptokit package
-+func (c *aesCipher) NewGCM(nonceSize, tagSize int) (cipher.AEAD, error) {
-+	if nonceSize != gcmStandardNonceSize && tagSize != gcmTagSize {
-+		return nil, errors.New("crypto/aes: GCM tag and nonce sizes can't be non-standard at the same time")
-+	}
-+	// Fall back to standard library for GCM with non-standard nonce or tag size.
-+	if nonceSize != gcmStandardNonceSize {
-+		return cipher.NewGCMWithNonceSize(&noGCM{c}, nonceSize)
-+	}
-+	if tagSize != gcmTagSize {
-+		return cipher.NewGCMWithTagSize(&noGCM{c}, tagSize)
++func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) appendBinary(d []byte) ([]byte, error) {
++	if b.lengthH.uint64() != 0 {
++		return nil, errors.New("exporting state with more than 2^63-1 bytes of data is not supported")
 +	}
-+	return &aesGCM{key: c.key, tls: cipherGCMTLSNone}, nil
++	return symCryptAppendBinary(d, b.chain[:], b.buffer[:], b.lengthL), nil
 +}
 +
-+func (g *aesGCM) NonceSize() int { return gcmStandardNonceSize }
-+
-+func (g *aesGCM) Overhead() int { return gcmTagSize }
++func (b *_SYMCRYPT_SHA512_STATE_EXPORT_BLOB) unmarshalBinary(d []byte) {
++	b.lengthL = symCryptUnmarshalBinary(d, b.chain[:], b.buffer[:])
++}
 +
-+func (g *aesGCM) Seal(dst, nonce, plaintext, additionalData []byte) []byte {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
++func symCryptHashAppendBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, buf []byte) ([]byte, error) {
++	size, typ := symCryptHashStateInfo(ch)
++	state := make([]byte, size, _SYMCRYPT_SHA512_STATE_EXPORT_SIZE) // 512 is the largest size
++	params := [2]ossl.OSSL_PARAM{
++		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), unsafe.Pointer(&state[0]), len(state)),
++		ossl.OSSL_PARAM_construct_end(),
 +	}
-+	if uint64(len(plaintext)) > ((1<<32)-2)*aesBlockSize || len(plaintext)+gcmTagSize < len(plaintext) {
-+		panic("cipher: message too large for GCM")
++	if _, err := ossl.EVP_MD_CTX_get_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0]))); err != nil {
++		return nil, err
 +	}
-+	if len(dst)+len(plaintext)+gcmTagSize < len(dst) {
-+		panic("cipher: message too large for buffer")
++	if !ossl.OSSL_PARAM_modified(&params[0]) {
++		return nil, errors.New("EVP_MD_CTX_get_params did not retrieve the state")
 +	}
 +
-+	if g.tls != cipherGCMTLSNone {
-+		if g.tls == cipherGCMTLS12 && len(additionalData) != gcmTls12AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.2")
-+		} else if g.tls == cipherGCMTLS13 && len(additionalData) != gcmTls13AddSize {
-+			panic("cipher: incorrect additional data length given to GCM TLS 1.3")
-+		}
-+		counter := bigUint64(nonce[gcmTlsFixedNonceSize:])
-+
-+		// TLS 1.3 Masking
-+		if g.tls == cipherGCMTLS13 {
-+			if !g.maskInitialized {
-+				g.mask = counter
-+				g.maskInitialized = true
-+			}
-+			// Apply mask to the counter
-+			counter ^= g.mask
-+		}
++	header := (*_SYMCRYPT_BLOB_HEADER)(unsafe.Pointer(&state[0]))
++	if header.magic != _SYMCRYPT_BLOB_MAGIC {
++		return nil, errors.New("invalid blob magic")
++	}
++	if header.size != size {
++		return nil, errors.New("invalid blob size")
++	}
++	if header._type != typ {
++		return nil, errors.New("invalid blob type")
++	}
 +
-+		// Enforce monotonicity and max limit
-+		const maxUint64 = 1<<64 - 1
-+		if counter == maxUint64 {
-+			panic("cipher: nonce counter must be less than 2^64 - 1")
-+		}
-+		if counter < g.minNextNonce {
-+			panic("cipher: nonce counter must be strictly monotonically increasing")
-+		}
++	buf = append(buf, magic...)
++	switch ch {
++	case crypto.MD5:
++		blob := (*_SYMCRYPT_MD5_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA1:
++		blob := (*_SYMCRYPT_SHA1_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA224, crypto.SHA256:
++		blob := (*_SYMCRYPT_SHA256_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		blob := (*_SYMCRYPT_SHA512_STATE_EXPORT_BLOB)(unsafe.Pointer(&state[0]))
++		return blob.appendBinary(buf)
++	default:
++		panic("unsupported hash " + ch.String())
++	}
++}
 +
-+		defer func() {
-+			g.minNextNonce = counter + 1
-+		}()
++func symCryptHashUnmarshalBinary(ctx ossl.EVP_MD_CTX_PTR, ch crypto.Hash, magic string, b []byte) error {
++	size, typ := symCryptHashStateInfo(ch)
++	hdr := _SYMCRYPT_BLOB_HEADER{
++		magic: _SYMCRYPT_BLOB_MAGIC,
++		size:  size,
++		_type: typ,
++	}
++	var blobPtr unsafe.Pointer
++	b = b[len(magic):]
++	switch ch {
++	case crypto.MD5:
++		var blob _SYMCRYPT_MD5_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA1:
++		var blob _SYMCRYPT_SHA1_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA224, crypto.SHA256:
++		var blob _SYMCRYPT_SHA256_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	case crypto.SHA384, crypto.SHA512_224, crypto.SHA512_256, crypto.SHA512:
++		var blob _SYMCRYPT_SHA512_STATE_EXPORT_BLOB
++		blobPtr = unsafe.Pointer(&blob)
++		blob.header = hdr
++		blob.unmarshalBinary(b)
++	default:
++		panic("unsupported hash " + ch.String())
 +	}
-+
-+	// Make room in dst to append plaintext+overhead.
-+	ret, out := sliceForAppend(dst, len(plaintext)+gcmTagSize)
-+
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, plaintext) {
-+		panic("cipher: invalid buffer overlap")
++	var checksum int32 = 1
++	params := [3]ossl.OSSL_PARAM{
++		ossl.OSSL_PARAM_construct_octet_string(_SCOSSL_DIGEST_PARAM_STATE.ptr(), blobPtr, int(hdr.size)),
++		ossl.OSSL_PARAM_construct_int32(_SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr(), &checksum),
++		ossl.OSSL_PARAM_construct_end(),
 +	}
++	_, err := ossl.EVP_MD_CTX_set_params(ctx, (ossl.OSSL_PARAM_PTR)(unsafe.Pointer(&params[0])))
++	return err
++}
 +
-+	err := cryptokit.EncryptAESGCM(
-+		g.key,
-+		plaintext,
-+		nonce,
-+		additionalData,
-+		out[:len(out)-gcmTagSize],
-+		out[len(out)-gcmTagSize:],
-+	)
-+	if err != 0 {
-+		panic("cipher: encryption failed")
++func symCryptHashStateInfo(ch crypto.Hash) (size, typ uint32) {
++	switch ch {
++	case crypto.MD5:
++		return _SYMCRYPT_MD5_STATE_EXPORT_SIZE, _SymCryptBlobTypeMd5State
++	case crypto.SHA1:
++		return _SYMCRYPT_SHA1_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha1State
++	case crypto.SHA224:
++		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha224State
++	case crypto.SHA256:
++		return _SYMCRYPT_SHA256_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha256State
++	case crypto.SHA384:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha384State
++	case crypto.SHA512_224:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_224State
++	case crypto.SHA512_256:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512_256State
++	case crypto.SHA512:
++		return _SYMCRYPT_SHA512_STATE_EXPORT_SIZE, _SymCryptBlobTypeSha512State
++	default:
++		panic("unsupported hash " + ch.String())
 +	}
-+	return ret
 +}
 +
-+func (g *aesGCM) SealWithRandomNonce(out, nonce, plaintext, additionalData []byte) {
-+	if uint64(len(plaintext)) > uint64((1<<32)-2)*aesBlockSize {
-+		panic("crypto/cipher: message too large for GCM")
++// isSymCryptHashStateSerializable checks if the SymCrypt hash state is serializable.
++func isSymCryptHashStateSerializable(md ossl.EVP_MD_PTR) bool {
++	ctx, err := ossl.EVP_MD_CTX_new()
++	if err != nil {
++		return false
 +	}
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("crypto/cipher: incorrect nonce length given to GCMWithRandomNonce")
++	defer ossl.EVP_MD_CTX_free(ctx)
++	if _, err := ossl.EVP_DigestInit_ex(ctx, md, nil); err != nil {
++		return false
 +	}
-+	if len(out) != len(plaintext)+gcmTagSize {
-+		panic("crypto/cipher: incorrect output length given to GCMWithRandomNonce")
++	params, err := ossl.EVP_MD_CTX_gettable_params(ctx)
++	if err != nil {
++		return false
 +	}
-+	if inexactOverlap(out, plaintext) {
-+		panic("crypto/cipher: invalid buffer overlap of output and input")
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
++		return false
 +	}
-+	if anyOverlap(out, additionalData) {
-+		panic("crypto/cipher: invalid buffer overlap of output and additional data")
++	params, err = ossl.EVP_MD_CTX_settable_params(ctx)
++	if err != nil {
++		return false
 +	}
-+
-+	if g.tls != cipherGCMTLSNone {
-+		panic("cipher: TLS 1.2 and 1.3 modes do not support random nonce")
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_STATE.ptr()); err != nil {
++		return false
 +	}
-+
-+	// Generate a random nonce
-+	RandReader.Read(nonce)
-+	err := cryptokit.EncryptAESGCM(
-+		g.key,
-+		plaintext,
-+		nonce,
-+		additionalData,
-+		out[:len(out)-gcmTagSize],
-+		out[len(out)-gcmTagSize:],
-+	)
-+	if err != 0 {
-+		panic("cipher: encryption failed")
++	if _, err = ossl.OSSL_PARAM_locate_const(params, _SCOSSL_DIGEST_PARAM_RECOMPUTE_CHECKSUM.ptr()); err != nil {
++		return false
 +	}
++	return true
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rand.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rand.go
+new file mode 100644
+index 00000000000000..cd8a656a8bae65
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rand.go
+@@ -0,0 +1,37 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+func (g *aesGCM) Open(dst, nonce, ciphertext, additionalData []byte) ([]byte, error) {
-+	if len(nonce) != gcmStandardNonceSize {
-+		panic("cipher: incorrect nonce length given to GCM")
-+	}
-+	if len(ciphertext) < gcmTagSize {
-+		return nil, errOpen
-+	}
-+	if uint64(len(ciphertext)) > ((1<<32)-2)*aesBlockSize+gcmTagSize {
-+		return nil, errOpen
-+	}
-+	// BoringCrypto does not do any TLS check when decrypting, neither do we.
++package openssl
 +
-+	// Ensure we don't process if ciphertext lacks both ciphertext and tag
-+	if len(ciphertext) < gcmTagSize {
-+		return nil, errors.New("decryption failed: ciphertext too short for tag")
-+	}
++import (
++	"math"
 +
-+	tag := ciphertext[len(ciphertext)-gcmTagSize:]
-+	ciphertext = ciphertext[:len(ciphertext)-gcmTagSize]
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+	// Make room in dst to append ciphertext without tag.
-+	ret, out := sliceForAppend(dst, len(ciphertext))
++type randReader int
 +
-+	// Check delayed until now to make sure len(dst) is accurate.
-+	if inexactOverlap(out, ciphertext) {
-+		panic("cipher: invalid buffer overlap")
++func (randReader) Read(b []byte) (int, error) {
++	if len(b) == 0 {
++		return 0, nil
 +	}
-+
-+	var decSize int
-+	err := cryptokit.DecryptAESGCM(
-+		g.key,
-+		ciphertext,
-+		nonce,
-+		additionalData,
-+		tag,
-+		out,
-+		&decSize,
-+	)
-+	if err != 0 || int(decSize) != len(ciphertext) {
-+		// If the decrypted data size does not match, zero out `out` and return `errOpen`
-+		for i := range out {
-+			out[i] = 0
++	switch major() {
++	case 1:
++		if len(b) > math.MaxInt32 {
++			// OpenSSL 1 does not support reading more than 2^31-1 bytes at once.
++			// Instead of erroring out, read only up to 2^31-1 bytes and return
++			// the number of bytes read.
++			b = b[:math.MaxInt32]
++		}
++		if _, err := ossl.RAND_bytes(b); err != nil {
++			return 0, err
++		}
++	default:
++		if _, err := ossl.RAND_bytes_ex(nil, b, 0); err != nil {
++			return 0, err
 +		}
-+		return nil, errOpen
-+	}
-+	return ret, nil
-+}
-+
-+// NewGCMTLS returns a GCM cipher specific to TLS
-+// and should not be used for non-TLS purposes.
-+func NewGCMTLS(block cipher.Block) (cipher.AEAD, error) {
-+	cipher, ok := block.(*aesCipher)
-+	if !ok {
-+		return nil, errors.New("crypto/aes: invalid block cipher")
 +	}
-+	return &aesGCM{key: cipher.key, tls: cipherGCMTLS12}, nil
++	return len(b), nil
 +}
 +
-+// NewGCMTLS13 returns a GCM cipher specific to TLS 1.3 and should not be used
-+// for non-TLS purposes.
-+func NewGCMTLS13(block cipher.Block) (cipher.AEAD, error) {
-+	cipher, ok := block.(*aesCipher)
-+	if !ok {
-+		return nil, errors.New("crypto/aes: invalid block cipher")
-+	}
-+	return &aesGCM{key: cipher.key, tls: cipherGCMTLS13}, nil
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
++const RandReader = randReader(0)
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rc4.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rc4.go
 new file mode 100644
-index 00000000000000..016827afea2eee
+index 00000000000000..37d12ec889a91e
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hash.go
-@@ -0,0 +1,337 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rc4.go
+@@ -0,0 +1,76 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
-+	"crypto"
-+	"errors"
-+	"hash"
 +	"runtime"
-+	"sync"
-+	"unsafe"
-+
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
 +
-+const (
-+	md5     = 1
-+	sha1    = 2
-+	sha256  = 3
-+	sha384  = 4
-+	sha512  = 5
-+	sha3256 = 6
-+	sha3384 = 7
-+	sha3512 = 8
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
 +)
 +
-+type hashAlgorithm struct {
-+	id        int32
-+	ch        crypto.Hash
-+	size      int
-+	blockSize int
-+}
-+
-+type HashCloner = hash.Cloner
-+
-+var cacheHash sync.Map // map[crypto.Hash]*hashAlgorithm
-+
-+// supportsSHA3 returns true if SHA-3 is available on this macOS version.
-+func supportsSHA3() bool {
-+	return cryptokit.SupportsSHA3() == 1
-+}
-+
-+// loadHash converts a crypto.Hash to a hashAlgorithm.
-+func loadHash(ch crypto.Hash, required bool) *hashAlgorithm {
-+	if v, ok := cacheHash.Load(ch); ok {
-+		if v == nil && required {
-+			panic("cryptokit: " + ch.String() + " not available")
-+		}
-+		return v.(*hashAlgorithm)
-+	}
-+
-+	var hash hashAlgorithm
-+	hash.ch = ch
-+	supported := true
-+
-+	switch ch {
-+	case crypto.MD5:
-+		hash.id = md5
-+		hash.size = int(cryptokit.HashSize(md5))
-+		hash.blockSize = int(cryptokit.HashBlockSize(md5))
-+	case crypto.SHA1:
-+		hash.id = sha1
-+		hash.size = int(cryptokit.HashSize(sha1))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha1))
-+	case crypto.SHA256:
-+		hash.id = sha256
-+		hash.size = int(cryptokit.HashSize(sha256))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha256))
-+	case crypto.SHA384:
-+		hash.id = sha384
-+		hash.size = int(cryptokit.HashSize(sha384))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha384))
-+	case crypto.SHA512:
-+		hash.id = sha512
-+		hash.size = int(cryptokit.HashSize(sha512))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha512))
-+	case crypto.SHA3_256:
-+		if !supportsSHA3() {
-+			supported = false
-+			break
-+		}
-+		hash.id = sha3256
-+		hash.size = int(cryptokit.HashSize(sha3256))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha3256))
-+	case crypto.SHA3_384:
-+		if !supportsSHA3() {
-+			supported = false
-+			break
-+		}
-+		hash.id = sha3384
-+		hash.size = int(cryptokit.HashSize(sha3384))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha3384))
-+	case crypto.SHA3_512:
-+		if !supportsSHA3() {
-+			supported = false
-+			break
-+		}
-+		hash.id = sha3512
-+		hash.size = int(cryptokit.HashSize(sha3512))
-+		hash.blockSize = int(cryptokit.HashBlockSize(sha3512))
++// SupportsRC4 returns true if NewRC4Cipher is supported.
++func SupportsRC4() bool {
++	switch major() {
++	case 1:
++		// RC4 is not part of the OpenSSL 1.x FIPS module.
++		return !osslsetup.FIPS() && loadCipher(cipherRC4, cipherModeNone) != nil
 +	default:
-+		supported = false
-+	}
-+
-+	if !supported {
-+		if required {
-+			panic("cryptokit: " + ch.String() + " not available")
-+		}
-+		cacheHash.Store(ch, (*hashAlgorithm)(nil))
-+		return nil
++		// On OpenSSL 3+ availability is decided by the algorithm probe:
++		// EVP_CIPHER_fetch returns nil unless the legacy provider is loaded.
++		return loadCipher(cipherRC4, cipherModeNone) != nil
 +	}
-+
-+	cacheHash.Store(ch, &hash)
-+	return &hash
 +}
 +
-+// Hash implements generic hash methods.
-+type Hash struct {
-+	ptr unsafe.Pointer
-+	alg *hashAlgorithm
++// A RC4Cipher is an instance of RC4 using a particular key.
++type RC4Cipher struct {
++	ctx ossl.EVP_CIPHER_CTX_PTR
 +}
 +
-+// SupportsHash returns true if a hash.Hash implementation is supported for h.
-+func SupportsHash(h crypto.Hash) bool {
-+	return loadHash(h, false) != nil
++// NewRC4Cipher creates and returns a new Cipher.
++func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
++	ctx, err := newCipherCtx(cipherRC4, cipherModeNone, cipherOpEncrypt, key, nil)
++	if err != nil {
++		return nil, err
++	}
++	c := &RC4Cipher{ctx}
++	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
++	return c, nil
 +}
 +
-+func newHash(ch crypto.Hash) *Hash {
-+	alg := loadHash(ch, true)
-+
-+	h := &Hash{
-+		ptr: cryptokit.HashNew(alg.id),
-+		alg: alg,
++func (c *RC4Cipher) finalize() {
++	if c.ctx != nil {
++		ossl.EVP_CIPHER_CTX_free(c.ctx)
 +	}
-+
-+	runtime.SetFinalizer(h, (*Hash).finalize)
-+
-+	return h
 +}
 +
-+func (h *Hash) finalize() {
-+	if h.ptr != nil {
-+		cryptokit.HashFree(h.alg.id, h.ptr)
-+		h.ptr = nil
++// Reset zeros the key data and makes the Cipher unusable.
++func (c *RC4Cipher) Reset() {
++	if c.ctx != nil {
++		ossl.EVP_CIPHER_CTX_free(c.ctx)
++		c.ctx = nil
 +	}
 +}
 +
-+func (h *Hash) Clone() (HashCloner, error) {
-+	if h.ptr == nil {
-+		panic("cryptokit: hash already finalized")
++// XORKeyStream sets dst to the result of XORing src with the key stream.
++// Dst and src must overlap entirely or not at all.
++func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
++	if c.ctx == nil || len(src) == 0 {
++		return
 +	}
-+
-+	newHash := &Hash{
-+		ptr: cryptokit.HashCopy(h.alg.id, h.ptr),
-+		alg: h.alg,
++	if inexactOverlap(dst[:len(src)], src) {
++		panic("crypto/rc4: invalid buffer overlap")
 +	}
-+
-+	runtime.SetFinalizer(newHash, (*Hash).finalize)
-+
-+	runtime.KeepAlive(h)
-+
-+	return newHash, nil
-+}
-+
-+func (h *Hash) Write(p []byte) (int, error) {
-+	if len(p) == 0 {
-+		return 0, nil
++	// panic if len(dst) < len(src) with a runtime out of bound error,
++	// which is what crypto/rc4 does.
++	_ = dst[len(src)-1]
++	var outLen int32
++	if _, err := ossl.EVP_EncryptUpdate(c.ctx, dst, &outLen, src); err != nil {
++		panic("crypto/rc4: " + err.Error())
 +	}
-+	cryptokit.HashWrite(h.alg.id, h.ptr, p)
-+
-+	runtime.KeepAlive(h)
-+
-+	return len(p), nil
-+}
-+
-+func (h *Hash) WriteString(s string) (int, error) {
-+	if len(s) == 0 {
-+		return 0, nil
++	if int(outLen) != len(src) {
++		panic("crypto/rc4: src not fully XORed")
 +	}
-+	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(unsafe.StringData(s), len(s)))
-+
-+	runtime.KeepAlive(h)
-+
-+	return len(s), nil
-+}
-+
-+func (h *Hash) WriteByte(c byte) error {
-+	cryptokit.HashWrite(h.alg.id, h.ptr, unsafe.Slice(&c, 1))
-+
-+	runtime.KeepAlive(h)
-+
-+	return nil
-+}
-+
-+func (h *Hash) Sum(b []byte) []byte {
-+	hashSlice := make([]byte, h.alg.size, 64) // explicit cap to allow stack allocation
-+	cryptokit.HashSum(h.alg.id, h.ptr, hashSlice)
-+	runtime.KeepAlive(h)
-+	b = append(b, hashSlice...)
-+	return b
++	runtime.KeepAlive(c)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go
+new file mode 100644
+index 00000000000000..36f84902a21ece
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go
+@@ -0,0 +1,712 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+type errMarshallUnsupported struct{}
++package openssl
 +
-+func (e errMarshallUnsupported) Error() string {
-+	return "cryptokit: hash state is not marshallable"
-+}
++import (
++	"crypto"
++	"crypto/subtle"
++	"errors"
++	"hash"
++	"runtime"
++	"sync"
++	"unsafe"
 +
-+func (e errMarshallUnsupported) Unwrap() error {
-+	return errors.ErrUnsupported
-+}
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+func (h *Hash) MarshalBinary() ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
++func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++	bad := func(e error) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
++		return nil, nil, nil, nil, nil, nil, nil, nil, e
++	}
++	pkey, err := generateEVPPKey(ossl.EVP_PKEY_RSA, int32(bits), "")
++	if err != nil {
++		return bad(err)
++	}
++	defer ossl.EVP_PKEY_free(pkey)
++	switch major() {
++	case 1:
++		key, err := ossl.EVP_PKEY_get1_RSA(pkey)
++		if err != nil {
++			return bad(err)
++		}
++		defer ossl.RSA_free(key)
++		var n, e, d, p, q, dmp1, dmq1, iqmp ossl.BIGNUM_PTR
++		ossl.RSA_get0_key(key, &n, &e, &d)
++		ossl.RSA_get0_factors(key, &p, &q)
++		ossl.RSA_get0_crt_params(key, &dmp1, &dmq1, &iqmp)
++		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
++		P, Q = bnToBig(p), bnToBig(q)
++		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
++	case 3, 4:
++		tmp, err := ossl.BN_new()
++		if err != nil {
++			return bad(err)
++		}
++		defer func() {
++			ossl.BN_clear_free(tmp)
++		}()
++		setBigInt := func(bi *BigInt, param cString) bool {
++			if err != nil {
++				return false
++			}
++			if _, err = ossl.EVP_PKEY_get_bn_param(pkey, param.ptr(), &tmp); err != nil {
++				return false
++			}
++			*bi = bnToBig(tmp)
++			ossl.BN_clear(tmp)
++			return true
++		}
++		if !(setBigInt(&N, _OSSL_PKEY_PARAM_RSA_N) &&
++			setBigInt(&E, _OSSL_PKEY_PARAM_RSA_E) &&
++			setBigInt(&D, _OSSL_PKEY_PARAM_RSA_D) &&
++			setBigInt(&P, _OSSL_PKEY_PARAM_RSA_FACTOR1) &&
++			setBigInt(&Q, _OSSL_PKEY_PARAM_RSA_FACTOR2) &&
++			setBigInt(&Dp, _OSSL_PKEY_PARAM_RSA_EXPONENT1) &&
++			setBigInt(&Dq, _OSSL_PKEY_PARAM_RSA_EXPONENT2) &&
++			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
++			return bad(err)
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	return
 +}
 +
-+func (h *Hash) AppendBinary(b []byte) ([]byte, error) {
-+	return nil, errMarshallUnsupported{}
++type PublicKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
-+func (h *Hash) UnmarshalBinary(data []byte) error {
-+	return errMarshallUnsupported{}
++func NewPublicKeyRSA(n, e BigInt) (*PublicKeyRSA, error) {
++	var pkey ossl.EVP_PKEY_PTR
++	switch major() {
++	case 1:
++		key, err := ossl.RSA_new()
++		if err != nil {
++			return nil, err
++		}
++		// No need to check for errors here, RSA_set0_* functions will fail
++		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++		bn, _ := bigToBN(n)
++		be, _ := bigToBN(e)
++		if _, err := ossl.RSA_set0_key(key, bn, be, nil); err != nil {
++			ossl.BN_free(bn)
++			ossl.BN_free(be)
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		pkey, err = ossl.EVP_PKEY_new()
++		if err != nil {
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
++			ossl.RSA_free(key)
++			ossl.EVP_PKEY_free(pkey)
++			return nil, err
++		}
++	case 3, 4:
++		var err error
++		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
++			return nil, err
++		}
++	default:
++		panic(errUnsupportedVersion())
++	}
++	k := &PublicKeyRSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PublicKeyRSA).finalize)
++	return k, nil
 +}
 +
-+func (h *Hash) Reset() {
-+	cryptokit.HashReset(h.alg.id, h.ptr)
++func (k *PublicKeyRSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func (h *Hash) BlockSize() int {
-+	return h.alg.blockSize
++func (k *PublicKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
 +}
 +
-+func (h *Hash) Size() int {
-+	return h.alg.size
++type PrivateKeyRSA struct {
++	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
++	_pkey ossl.EVP_PKEY_PTR
 +}
 +
-+// FIPSApprovedHash reports whether this hash algorithm is FIPS 140-3 approved.
-+func FIPSApprovedHash(h hash.Hash) bool {
-+	xh, ok := h.(*Hash)
-+	if !ok {
-+		return false
-+	}
-+	switch xh.alg.ch {
-+	case crypto.SHA256, crypto.SHA384, crypto.SHA512,
-+		crypto.SHA3_256, crypto.SHA3_384, crypto.SHA3_512:
-+		return true
++func NewPrivateKeyRSA(n, e, d, p, q, dp, dq, qinv BigInt) (*PrivateKeyRSA, error) {
++	var pkey ossl.EVP_PKEY_PTR
++	switch major() {
++	case 1:
++		key, err := ossl.RSA_new()
++		if err != nil {
++			return nil, err
++		}
++		// No need to check for errors here, RSA_set0_* functions will fail
++		// if the BNs are NULL and we will free non-NULL BNs in the error handling.
++		bn, _ := bigToBN(n)
++		be, _ := bigToBN(e)
++		bd, _ := bigToBN(d)
++		if _, err := ossl.RSA_set0_key(key, bn, be, bd); err != nil {
++			ossl.BN_free(bn)
++			ossl.BN_free(be)
++			ossl.BN_clear_free(bd)
++			return nil, err
++		}
++		if p != nil && q != nil {
++			bp, _ := bigToBN(p)
++			bq, _ := bigToBN(q)
++			if _, err := ossl.RSA_set0_factors(key, bp, bq); err != nil {
++				ossl.BN_clear_free(bp)
++				ossl.BN_clear_free(bq)
++				return nil, err
++			}
++		}
++		if dp != nil && dq != nil && qinv != nil {
++			bdp, _ := bigToBN(dp)
++			bdq, _ := bigToBN(dq)
++			bqinv, _ := bigToBN(qinv)
++			if _, err := ossl.RSA_set0_crt_params(key, bdp, bdq, bqinv); err != nil {
++				ossl.BN_free(bdp)
++				ossl.BN_free(bdq)
++				ossl.BN_free(bqinv)
++				return nil, err
++			}
++		}
++		pkey, err = ossl.EVP_PKEY_new()
++		if err != nil {
++			ossl.RSA_free(key)
++			return nil, err
++		}
++		if _, err := ossl.EVP_PKEY_assign(pkey, ossl.EVP_PKEY_RSA, (unsafe.Pointer)(key)); err != nil {
++			ossl.RSA_free(key)
++			ossl.EVP_PKEY_free(pkey)
++			return nil, err
++		}
++	case 3, 4:
++		var err error
++		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
++			return nil, err
++		}
 +	default:
-+		return false
++		panic(errUnsupportedVersion())
 +	}
++	k := &PrivateKeyRSA{_pkey: pkey}
++	runtime.SetFinalizer(k, (*PrivateKeyRSA).finalize)
++	return k, nil
 +}
 +
-+var _ hash.Hash = (*Hash)(nil)
-+var _ HashCloner = (*Hash)(nil)
-+
-+func MD5(p []byte) (sum [16]byte) {
-+	cryptokit.MD5(p, sum[:])
-+	return
-+}
-+
-+func SHA1(p []byte) (sum [20]byte) {
-+	cryptokit.SHA1(p, sum[:])
-+	return
++func (k *PrivateKeyRSA) finalize() {
++	ossl.EVP_PKEY_free(k._pkey)
 +}
 +
-+func SHA256(p []byte) (sum [32]byte) {
-+	cryptokit.SHA256(p, sum[:])
-+	return
++func (k *PrivateKeyRSA) withKey(f func(ossl.EVP_PKEY_PTR) error) error {
++	// Because of the finalizer, any time _pkey is passed to cgo, that call must
++	// be followed by a call to runtime.KeepAlive, to make sure k is not
++	// collected (and finalized) before the cgo call returns.
++	defer runtime.KeepAlive(k)
++	return f(k._pkey)
 +}
 +
-+func SHA384(p []byte) (sum [48]byte) {
-+	cryptokit.SHA384(p, sum[:])
-+	return
++func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, ciphertext)
 +}
 +
-+func SHA512(p []byte) (sum [64]byte) {
-+	cryptokit.SHA512(p, sum[:])
-+	return
++func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_OAEP_PADDING, h, mgfHash, label, msg)
 +}
 +
-+func SumSHA3_256(p []byte) (sum [32]byte) {
-+	cryptokit.SHA3_256(p, sum[:])
-+	return
++func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	return evpDecrypt(priv.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, ciphertext)
 +}
 +
-+func SumSHA3_384(p []byte) (sum [48]byte) {
-+	cryptokit.SHA3_384(p, sum[:])
-+	return
++func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_PKCS1_PADDING, nil, nil, nil, msg)
 +}
 +
-+func SumSHA3_512(p []byte) (sum [64]byte) {
-+	cryptokit.SHA3_512(p, sum[:])
-+	return
++func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
++	ret, err := evpDecrypt(priv.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, ciphertext)
++	if err != nil {
++		return nil, err
++	}
++	// We could return here, but the Go standard library test expects DecryptRSANoPadding to verify the result
++	// in order to defend against errors in the CRT computation.
++	//
++	// The following code tries to replicate the verification implemented in the upstream function decryptAndCheck, found at
++	// https://github.com/golang/go/blob/9de1ac6ac2cad3871760d0aa288f5ca713afd0a6/src/crypto/rsa/rsa.go#L569-L582.
++	pub := &PublicKeyRSA{_pkey: priv._pkey}
++	// A private EVP_PKEY can be used as a public key as it contains the public information.
++	enc, err := EncryptRSANoPadding(pub, ret)
++	if err != nil {
++		return nil, err
++	}
++	// Upstream does not do a constant time comparison because it works with math/big instead of byte slices,
++	// and math/big does not support constant-time arithmetic yet. See #20654 for more info.
++	if subtle.ConstantTimeCompare(ciphertext, enc) != 1 {
++		return nil, errors.New("rsa: internal error")
++	}
++	return ret, nil
 +}
 +
-+// NewMD5 initializes a new MD5 hasher.
-+func NewMD5() hash.Hash {
-+	return newHash(crypto.MD5)
-+
++func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
++	return evpEncrypt(pub.withKey, ossl.RSA_NO_PADDING, nil, nil, nil, msg)
 +}
 +
-+// NewSHA1 initializes a new SHA1 hasher.
-+func NewSHA1() hash.Hash {
-+	return newHash(crypto.SHA1)
++func saltLength(saltLen int, sign bool) (int32, error) {
++	// A salt length of -2 is valid in OpenSSL, but not in crypto/rsa, so reject
++	// it, and lengths < -2, before we convert to the OpenSSL sentinel values.
++	if saltLen <= -2 {
++		return 0, errors.New("crypto/rsa: invalid PSS salt length")
++	}
++	// OpenSSL uses sentinel salt length values like Go crypto does,
++	// but the values don't fully match for rsa.PSSSaltLengthAuto (0).
++	if saltLen == 0 {
++		if sign {
++			if major() == 1 {
++				// OpenSSL 1.x uses -2 to mean maximal size when signing where Go crypto uses 0.
++				return ossl.RSA_PSS_SALTLEN_MAX_SIGN, nil
++			}
++			// OpenSSL 3.x deprecated RSA_PSS_SALTLEN_MAX_SIGN
++			// and uses -3 to mean maximal size when signing where Go crypto uses 0.
++			return ossl.RSA_PSS_SALTLEN_MAX, nil
++		}
++		// OpenSSL uses -2 to mean auto-detect size when verifying where Go crypto uses 0.
++		return ossl.RSA_PSS_SALTLEN_AUTO, nil
++	}
++	return int32(saltLen), nil
 +}
 +
-+// NewSHA256 initializes a new SHA256 hasher.
-+func NewSHA256() hash.Hash {
-+	return newHash(crypto.SHA256)
++func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
++	cSaltLen, err := saltLength(saltLen, true)
++	if err != nil {
++		return nil, err
++	}
++	return evpSign(priv.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, hashed)
 +}
 +
-+// NewSHA384 initializes a new SHA384 hasher.
-+func NewSHA384() hash.Hash {
-+	return newHash(crypto.SHA384)
++func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
++	cSaltLen, err := saltLength(saltLen, false)
++	if err != nil {
++		return err
++	}
++	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PSS_PADDING, cSaltLen, h, sig, hashed)
 +}
 +
-+// NewSHA512 initializes a new SHA512 hasher.
-+func NewSHA512() hash.Hash {
-+	return newHash(crypto.SHA512)
++func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
++	return evpSign(priv.withKey, ossl.RSA_PKCS1_PADDING, 0, h, hashed)
 +}
 +
-+// NewSHA3_256 creates a new SHA3-256 hash.
-+func NewSHA3_256() *Hash {
-+	return newHash(crypto.SHA3_256)
++func HashSignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, msg []byte) ([]byte, error) {
++	return evpHashSign(priv.withKey, h, msg)
 +}
 +
-+// NewSHA3_384 creates a new SHA3-384 hash.
-+func NewSHA3_384() *Hash {
-+	return newHash(crypto.SHA3_384)
++func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
++	defer runtime.KeepAlive(pub)
++	var size int32
++	if err := pub.withKey(func(pkey ossl.EVP_PKEY_PTR) (err error) {
++		size, err = ossl.EVP_PKEY_get_size(pkey)
++		if err != nil {
++			return err
++		}
++		if len(sig) < int(size) {
++			return errors.New("crypto/rsa: verification error")
++		}
++		return nil
++	}); err != nil {
++		return err
++	}
++	return evpVerify(pub.withKey, ossl.RSA_PKCS1_PADDING, 0, h, sig, hashed)
 +}
 +
-+// NewSHA3_512 creates a new SHA3-512 hash.
-+func NewSHA3_512() *Hash {
-+	return newHash(crypto.SHA3_512)
++func HashVerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, msg, sig []byte) error {
++	return evpHashVerify(pub.withKey, h, msg, sig)
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
-new file mode 100644
-index 00000000000000..f6183de583d9ac
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hkdf.go
-@@ -0,0 +1,103 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build darwin
-+
-+package xcrypto
 +
-+import (
-+	"crypto"
-+	"errors"
-+	"hash"
++func newRSAKey3(isPriv bool, n, e, d, p, q, dp, dq, qinv BigInt) (ossl.EVP_PKEY_PTR, error) {
++	bld := newParamBuilder()
++	defer bld.finalize()
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_N, n, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_E, e, false)
++	bld.addBigInt(_OSSL_PKEY_PARAM_RSA_D, d, false)
 +
-+// ExtractHKDF performs the extract step of HKDF using the specified hash function.
-+func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
-+	// Handle empty secret
-+	if len(secret) == 0 {
-+		return nil, errors.New("secret cannot be empty")
++	// OpenSSL 3.0 and 3.1 required all the precomputed values if
++	// P and Q are present. See:
++	// https://github.com/openssl/openssl/pull/22334
++	//
++	// We could only set P and Q if they exist when using OpenSSL 3.2
++	// or newer, but the RSA provider might be built with an older
++	// OpenSSL version, in which case it would still require all the
++	// precomputed values. So better always provide all the values or
++	// none of them.
++	if p != nil && q != nil && dp != nil && dq != nil && qinv != nil {
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR1, p, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_FACTOR2, q, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT1, dp, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_EXPONENT2, dq, true)
++		bld.addBigInt(_OSSL_PKEY_PARAM_RSA_COEFFICIENT1, qinv, true)
 +	}
 +
-+	hash, err := hashToCryptoHash(h())
++	params, err := bld.build()
 +	if err != nil {
 +		return nil, err
 +	}
-+
-+	// Default salt to a zero-filled array if not provided
-+	if len(salt) == 0 {
-+		salt = make([]byte, hash.Size())
++	defer ossl.OSSL_PARAM_free(params)
++	selection := ossl.EVP_PKEY_PUBLIC_KEY
++	if isPriv {
++		selection = ossl.EVP_PKEY_KEYPAIR
 +	}
++	return newEvpFromParams(ossl.EVP_PKEY_RSA, int32(selection), params)
++}
 +
-+	swiftHash, err := cryptoHashToSwift(hash)
++// SupportsRSAPKCS1v15Encryption returns true if the RSA PKCS1 v1.5 padding is supported for encryption and decryption.
++var SupportsRSAPKCS1v15Encryption = sync.OnceValue(func() bool {
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
 +	if err != nil {
-+		return nil, err
++		return false
 +	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
 +
-+	// Allocate buffer for derived key
-+	prk := make([]byte, hash.Size())
-+
-+	result := cryptokit.ExtractHKDF(swiftHash, secret, salt, prk)
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
++	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
++		return false
 +	}
 +
-+	return prk, nil
-+}
-+
-+// ExpandHKDF performs the expand step of HKDF using the specified hash function.
-+func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	// Handle empty secret
-+	if len(pseudorandomKey) == 0 {
-+		return nil, errors.New("pseudorandom key cannot be empty")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_PADDING, ossl.RSA_PKCS1_PADDING, nil); err != nil {
++		return false
 +	}
 +
-+	hash, err := hashToCryptoHash(h())
-+	if err != nil {
-+		return nil, err
++	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
++	// So we need to try to encrypt something to be sure.
++	in := []byte("test")
++	var outLen int
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
++		return false
 +	}
++	return true
++})
 +
-+	// Determine the maximum expandable key length based on the hash function
-+	maxAllowedLength := hash.Size() * 255
++var rsaPKCS1SignatureSupport sync.Map
 +
-+	// Validate requested key length
-+	if keyLength > maxAllowedLength {
-+		return nil, errors.New("requested key length exceeds maximum allowable size")
++// SupportsRSAPKCS1v15Signature returns true if the RSA PKCS1 v1.5 padding is supported for signatures with the given hash.
++func SupportsRSAPKCS1v15Signature(ch crypto.Hash) (supported bool) {
++	v, ok := rsaPKCS1SignatureSupport.Load(ch)
++	if ok {
++		return v.(bool)
 +	}
++	defer func() {
++		rsaPKCS1SignatureSupport.Store(ch, supported)
++	}()
 +
-+	swiftHash, err := cryptoHashToSwift(hash)
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
 +	if err != nil {
-+		return nil, err
++		return false
 +	}
-+
-+	// Allocate buffer for derived key
-+	expandedKey := make([]byte, keyLength)
-+	if len(expandedKey) == 0 {
-+		// Nothing to do, and CryptoKit may error on zero-length output.
-+		// We do need to validate the inputs for consistency, though.
-+		return expandedKey, nil
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
++		return false
 +	}
-+
-+	result := cryptokit.ExpandHKDF(swiftHash, pseudorandomKey, info, expandedKey)
-+	if result != 0 {
-+		return nil, errors.New("HKDF derivation failed")
++	if setPKCS1Padding(ctx, ch) != nil {
++		return false
 +	}
-+
-+	return expandedKey, nil
-+}
-+
-+func cryptoHashToSwift(hash crypto.Hash) (int32, error) {
-+	switch hash {
-+	case crypto.SHA1:
-+		return 1, nil
-+	case crypto.SHA256:
-+		return 2, nil
-+	case crypto.SHA384:
-+		return 3, nil
-+	case crypto.SHA512:
-+		return 4, nil
-+	default:
-+		return 0, errors.New("unsupported hash function")
++	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
++	// So we need to try to sign something to be sure.
++	size := 1
++	if ch != 0 {
++		size = ch.Size()
 +	}
++	in := make([]byte, size, maxHashSize)
++	var outLen int
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
++		return false
++	}
++	return true
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
-new file mode 100644
-index 00000000000000..80a951f8ea1a2a
---- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/hmac.go
-@@ -0,0 +1,119 @@
-+// Copyright (c) Microsoft Corporation.
-+// Licensed under the MIT License.
-+
-+//go:build darwin
 +
-+package xcrypto
-+
-+import (
-+	"hash"
-+	"runtime"
-+	"slices"
-+	"unsafe"
-+
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
-+
-+var _ hash.Hash = (*cryptoKitHMAC)(nil)
-+var _ HashCloner = (*cryptoKitHMAC)(nil)
-+
-+type cryptoKitHMAC struct {
-+	ptr unsafe.Pointer
-+
-+	kind int32
-+	key  []byte
-+
-+	blockSize int
-+	size      int
-+}
++var rsaPSSSupport sync.Map
 +
-+// NewHMAC returns a new HMAC using xcrypto.
-+// The function h must return a hash implemented by
-+// CommonCrypto (for example, h could be xcrypto.NewSHA256).
-+// If h is not recognized, NewHMAC returns nil.
-+func NewHMAC(fh func() hash.Hash, key []byte) hash.Hash {
-+	h := fh()
-+	if h == nil {
-+		return nil
++// SupportsRSAPSS returns true if the RSA PSS padding is supported for signatures with the given hash.
++func SupportsRSAPSS(ch crypto.Hash) (supported bool) {
++	v, ok := rsaPSSSupport.Load(ch)
++	if ok {
++		return v.(bool)
 +	}
++	defer func() {
++		rsaPSSSupport.Store(ch, supported)
++	}()
 +
-+	// copying the key here to ensure that it is not modified
-+	// while this algorithm is using it.
-+	key = slices.Clone(key)
-+	kind := hashToHMACEnum(h)
-+	if kind == 0 {
-+		// The hash function is not supported by the HMAC implementation.
-+		return nil
++	if !SupportsHash(ch) {
++		// Short-circuit if the hash itself is not supported.
++		return false
 +	}
 +
-+	hmac := &cryptoKitHMAC{
-+		ptr:       cryptokit.InitHMAC(kind, key),
-+		kind:      kind,
-+		key:       key,
-+		blockSize: h.BlockSize(),
-+		size:      h.Size(),
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return false
 +	}
-+
-+	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
-+		cryptokit.FreeHMAC(h.kind, h.ptr)
-+	})
-+
-+	return hmac
-+}
-+
-+func (h *cryptoKitHMAC) Write(p []byte) (n int, err error) {
-+	cryptokit.UpdateHMAC(h.kind, h.ptr, p)
-+	runtime.KeepAlive(h)
-+
-+	return len(p), nil
++	defer ossl.EVP_PKEY_CTX_free(ctx)
++	if _, err := ossl.EVP_PKEY_sign_init(ctx); err != nil {
++		return false
++	}
++	if setPSSPadding(ctx, 0, ch) != nil {
++		return false
++	}
++	// In FIPS mode, setting the padding might succeed, but the actual signature will fail.
++	// So we need to try to sign something to be sure.
++	in := make([]byte, ch.Size(), maxHashSize)
++	var outLen int
++	if _, err := ossl.EVP_PKEY_sign(ctx, nil, &outLen, in); err != nil {
++		return false
++	}
++	return true
 +}
 +
-+func (h *cryptoKitHMAC) Sum(b []byte) []byte {
-+	hashSlice := make([]byte, h.size, 64) // explicit cap to allow stack allocation
-+	cryptokit.FinalizeHMAC(h.kind, h.ptr, hashSlice)
-+	runtime.KeepAlive(h)
-+
-+	b = append(b, hashSlice...)
++var rsaOAEPSupport sync.Map
 +
-+	return b
++type rsaOAEPSupportEntry struct {
++	ch      crypto.Hash
++	mgfHash crypto.Hash
 +}
 +
-+func (h *cryptoKitHMAC) Clone() (HashCloner, error) {
-+	if h.ptr == nil {
-+		panic("cryptokit: hash already finalized")
++// SupportsRSAOAEP returns true if the RSA OAEP padding is supported for encryption/decryption
++// with the given hash and MGF hash.
++func SupportsRSAOAEP(h, mgfHash hash.Hash) (supported bool) {
++	ch := hashToCryptoHash(h)
++	if ch == 0 {
++		return false
 +	}
++	mgfCh := hashToCryptoHash(mgfHash)
++	if mgfCh == 0 {
++		return false
++	}
++	entry := rsaOAEPSupportEntry{ch, mgfCh}
++	v, ok := rsaOAEPSupport.Load(entry)
++	if ok {
++		return v.(bool)
++	}
++	defer func() {
++		rsaOAEPSupport.Store(entry, supported)
++	}()
 +
-+	hmac := &cryptoKitHMAC{ptr: cryptokit.CopyHMAC(h.kind, h.ptr), kind: h.kind, key: slices.Clone(h.key), blockSize: h.blockSize, size: h.size}
-+
-+	runtime.KeepAlive(h)
++	if !SupportsHash(ch) {
++		// Short-circuit if the hash itself is not supported.
++		return false
++	}
 +
-+	runtime.SetFinalizer(hmac, func(h *cryptoKitHMAC) {
-+		cryptokit.FreeHMAC(h.kind, h.ptr)
-+	})
++	pkey := testRSAPrivateKey()
++	ctx, err := ossl.EVP_PKEY_CTX_new(pkey, nil)
++	if err != nil {
++		return false
++	}
++	defer ossl.EVP_PKEY_CTX_free(ctx)
 +
-+	return hmac, nil
-+}
++	if _, err := ossl.EVP_PKEY_encrypt_init(ctx); err != nil {
++		return false
++	}
 +
-+func (h *cryptoKitHMAC) Reset() {
-+	cryptokit.FreeHMAC(h.kind, h.ptr)
++	if setOAEPPadding(ctx, h, mgfHash, nil) != nil {
++		return false
++	}
 +
-+	h.ptr = cryptokit.InitHMAC(h.kind, h.key)
-+	runtime.KeepAlive(h)
++	// In FIPS mode, setting the padding might succeed, but the actual encryption will fail.
++	// So we need to try to encrypt something to be sure.
++	in := []byte("test")
++	var outLen int
++	if _, err := ossl.EVP_PKEY_encrypt(ctx, nil, &outLen, in); err != nil {
++		return false
++	}
++	return true
 +}
 +
-+func (h *cryptoKitHMAC) Size() int {
-+	return h.size
-+}
++// testRSAPrivateKey returns a test RSA private key for use in capability probing functions.
++//
++// The key is constructed from hard-coded parameters to avoid
++// spurious failures due to key generation issues and to avoid the speed cost of
++// key generation.
++var testRSAPrivateKey = sync.OnceValue(func() ossl.EVP_PKEY_PTR {
++	// RSA-2048 key "testRSA2048":
++	// https://www.rfc-editor.org/rfc/rfc9500.html#section-2.1
++	N := []byte{
++		0xB0, 0xF9, 0xE8, 0x19, 0x43, 0xA7, 0xAE, 0x98,
++		0x92, 0xAA, 0xDE, 0x17, 0xCA, 0x7C, 0x40, 0xF8,
++		0x74, 0x4F, 0xED, 0x2F, 0x81, 0x48, 0xE6, 0xC8,
++		0xEA, 0xA2, 0x7B, 0x7D, 0x00, 0x15, 0x48, 0xFB,
++		0x51, 0x92, 0xAB, 0x28, 0xB5, 0x6C, 0x50, 0x60,
++		0xB1, 0x18, 0xCC, 0xD1, 0x31, 0xE5, 0x94, 0x87,
++		0x4C, 0x6C, 0xA9, 0x89, 0xB5, 0x6C, 0x27, 0x29,
++		0x6F, 0x09, 0xFB, 0x93, 0xA0, 0x34, 0xDF, 0x32,
++		0xE9, 0x7C, 0x6F, 0xF0, 0x99, 0x8C, 0xFD, 0x8E,
++		0x6F, 0x42, 0xDD, 0xA5, 0x8A, 0xCD, 0x1F, 0xA9,
++		0x79, 0x86, 0xF1, 0x44, 0xF3, 0xD1, 0x54, 0xD6,
++		0x76, 0x50, 0x17, 0x5E, 0x68, 0x54, 0xB3, 0xA9,
++		0x52, 0x00, 0x3B, 0xC0, 0x68, 0x87, 0xB8, 0x45,
++		0x5A, 0xC2, 0xB1, 0x9F, 0x7B, 0x2F, 0x76, 0x50,
++		0x4E, 0xBC, 0x98, 0xEC, 0x94, 0x55, 0x71, 0xB0,
++		0x78, 0x92, 0x15, 0x0D, 0xDC, 0x6A, 0x74, 0xCA,
++		0x0F, 0xBC, 0xD3, 0x54, 0x97, 0xCE, 0x81, 0x53,
++		0x4D, 0xAF, 0x94, 0x18, 0x84, 0x4B, 0x13, 0xAE,
++		0xA3, 0x1F, 0x9D, 0x5A, 0x6B, 0x95, 0x57, 0xBB,
++		0xDF, 0x61, 0x9E, 0xFD, 0x4E, 0x88, 0x7F, 0x2D,
++		0x42, 0xB8, 0xDD, 0x8B, 0xC9, 0x87, 0xEA, 0xE1,
++		0xBF, 0x89, 0xCA, 0xB8, 0x5E, 0xE2, 0x1E, 0x35,
++		0x63, 0x05, 0xDF, 0x6C, 0x07, 0xA8, 0x83, 0x8E,
++		0x3E, 0xF4, 0x1C, 0x59, 0x5D, 0xCC, 0xE4, 0x3D,
++		0xAF, 0xC4, 0x91, 0x23, 0xEF, 0x4D, 0x8A, 0xBB,
++		0xA9, 0x3D, 0x39, 0x05, 0xE4, 0x02, 0x8D, 0x7B,
++		0xA9, 0x14, 0x84, 0xA2, 0x75, 0x96, 0xE0, 0x7B,
++		0x4B, 0x6E, 0xD9, 0x92, 0xF0, 0x77, 0xB5, 0x24,
++		0xD3, 0xDC, 0xFE, 0x7D, 0xDD, 0x55, 0x49, 0xBE,
++		0x7C, 0xCE, 0x8D, 0xA0, 0x35, 0xCF, 0xA0, 0xB3,
++		0xFB, 0x8F, 0x9E, 0x46, 0xF7, 0x32, 0xB2, 0xA8,
++		0x6B, 0x46, 0x01, 0x65, 0xC0, 0x8F, 0x53, 0x13}
++	E := []byte{0x01, 0x00, 0x01}
++	d := []byte{
++		0x41, 0x18, 0x8B, 0x20, 0xCF, 0xDB, 0xDB, 0xC2,
++		0xCF, 0x1F, 0xFE, 0x75, 0x2D, 0xCB, 0xAA, 0x72,
++		0x39, 0x06, 0x35, 0x2E, 0x26, 0x15, 0xD4, 0x9D,
++		0xCE, 0x80, 0x59, 0x7F, 0xCF, 0x0A, 0x05, 0x40,
++		0x3B, 0xEF, 0x00, 0xFA, 0x06, 0x51, 0x82, 0xF7,
++		0x2D, 0xEC, 0xFB, 0x59, 0x6F, 0x4B, 0x0C, 0xE8,
++		0xFF, 0x59, 0x70, 0xBA, 0xF0, 0x7A, 0x89, 0xA5,
++		0x19, 0xEC, 0xC8, 0x16, 0xB2, 0xF4, 0xFF, 0xAC,
++		0x50, 0x69, 0xAF, 0x1B, 0x06, 0xBF, 0xEF, 0x7B,
++		0xF6, 0xBC, 0xD7, 0x9E, 0x4E, 0x81, 0xC8, 0xC5,
++		0xA3, 0xA7, 0xD9, 0x13, 0x0D, 0xC3, 0xCF, 0xBA,
++		0xDA, 0xE5, 0xF6, 0xD2, 0x88, 0xF9, 0xAE, 0xE3,
++		0xF6, 0xFF, 0x92, 0xFA, 0xE0, 0xF8, 0x1A, 0xF5,
++		0x97, 0xBE, 0xC9, 0x6A, 0xE9, 0xFA, 0xB9, 0x40,
++		0x2C, 0xD5, 0xFE, 0x41, 0xF7, 0x05, 0xBE, 0xBD,
++		0xB4, 0x7B, 0xB7, 0x36, 0xD3, 0xFE, 0x6C, 0x5A,
++		0x51, 0xE0, 0xE2, 0x07, 0x32, 0xA9, 0x7B, 0x5E,
++		0x46, 0xC1, 0xCB, 0xDB, 0x26, 0xD7, 0x48, 0x54,
++		0xC6, 0xB6, 0x60, 0x4A, 0xED, 0x46, 0x37, 0x35,
++		0xFF, 0x90, 0x76, 0x04, 0x65, 0x57, 0xCA, 0xF9,
++		0x49, 0xBF, 0x44, 0x88, 0x95, 0xC2, 0x04, 0x32,
++		0xC1, 0xE0, 0x9C, 0x01, 0x4E, 0xA7, 0x56, 0x60,
++		0x43, 0x4F, 0x1A, 0x0F, 0x3B, 0xE2, 0x94, 0xBA,
++		0xBC, 0x5D, 0x53, 0x0E, 0x6A, 0x10, 0x21, 0x3F,
++		0x53, 0xB6, 0x03, 0x75, 0xFC, 0x84, 0xA7, 0x57,
++		0x3F, 0x2A, 0xF1, 0x21, 0x55, 0x84, 0xF5, 0xB4,
++		0xBD, 0xA6, 0xD4, 0xE8, 0xF9, 0xE1, 0x7A, 0x78,
++		0xD9, 0x7E, 0x77, 0xB8, 0x6D, 0xA4, 0xA1, 0x84,
++		0x64, 0x75, 0x31, 0x8A, 0x7A, 0x10, 0xA5, 0x61,
++		0x01, 0x4E, 0xFF, 0xA2, 0x3A, 0x81, 0xEC, 0x56,
++		0xE9, 0xE4, 0x10, 0x9D, 0xEF, 0x8C, 0xB3, 0xF7,
++		0x97, 0x22, 0x3F, 0x7D, 0x8D, 0x0D, 0x43, 0x51}
++	p := []byte{
++		0xDD, 0x10, 0x57, 0x02, 0x38, 0x2F, 0x23, 0x2B,
++		0x36, 0x81, 0xF5, 0x37, 0x91, 0xE2, 0x26, 0x17,
++		0xC7, 0xBF, 0x4E, 0x9A, 0xCB, 0x81, 0xED, 0x48,
++		0xDA, 0xF6, 0xD6, 0x99, 0x5D, 0xA3, 0xEA, 0xB6,
++		0x42, 0x83, 0x9A, 0xFF, 0x01, 0x2D, 0x2E, 0xA6,
++		0x28, 0xB9, 0x0A, 0xF2, 0x79, 0xFD, 0x3E, 0x6F,
++		0x7C, 0x93, 0xCD, 0x80, 0xF0, 0x72, 0xF0, 0x1F,
++		0xF2, 0x44, 0x3B, 0x3E, 0xE8, 0xF2, 0x4E, 0xD4,
++		0x69, 0xA7, 0x96, 0x13, 0xA4, 0x1B, 0xD2, 0x40,
++		0x20, 0xF9, 0x2F, 0xD1, 0x10, 0x59, 0xBD, 0x1D,
++		0x0F, 0x30, 0x1B, 0x5B, 0xA7, 0xA9, 0xD3, 0x63,
++		0x7C, 0xA8, 0xD6, 0x5C, 0x1A, 0x98, 0x15, 0x41,
++		0x7D, 0x8E, 0xAB, 0x73, 0x4B, 0x0B, 0x4F, 0x3A,
++		0x2C, 0x66, 0x1D, 0x9A, 0x1A, 0x82, 0xF3, 0xAC,
++		0x73, 0x4C, 0x40, 0x53, 0x06, 0x69, 0xAB, 0x8E,
++		0x47, 0x30, 0x45, 0xA5, 0x8E, 0x65, 0x53, 0x9D}
++	q := []byte{
++		0xCC, 0xF1, 0xE5, 0xBB, 0x90, 0xC8, 0xE9, 0x78,
++		0x1E, 0xA7, 0x5B, 0xEB, 0xF1, 0x0B, 0xC2, 0x52,
++		0xE1, 0x1E, 0xB0, 0x23, 0xA0, 0x26, 0x0F, 0x18,
++		0x87, 0x55, 0x2A, 0x56, 0x86, 0x3F, 0x4A, 0x64,
++		0x21, 0xE8, 0xC6, 0x00, 0xBF, 0x52, 0x3D, 0x6C,
++		0xB1, 0xB0, 0xAD, 0xBD, 0xD6, 0x5B, 0xFE, 0xE4,
++		0xA8, 0x8A, 0x03, 0x7E, 0x3D, 0x1A, 0x41, 0x5E,
++		0x5B, 0xB9, 0x56, 0x48, 0xDA, 0x5A, 0x0C, 0xA2,
++		0x6B, 0x54, 0xF4, 0xA6, 0x39, 0x48, 0x52, 0x2C,
++		0x3D, 0x5F, 0x89, 0xB9, 0x4A, 0x72, 0xEF, 0xFF,
++		0x95, 0x13, 0x4D, 0x59, 0x40, 0xCE, 0x45, 0x75,
++		0x8F, 0x30, 0x89, 0x80, 0x90, 0x89, 0x56, 0x58,
++		0x8E, 0xEF, 0x57, 0x5B, 0x3E, 0x4B, 0xC4, 0xC3,
++		0x68, 0xCF, 0xE8, 0x13, 0xEE, 0x9C, 0x25, 0x2C,
++		0x2B, 0x02, 0xE0, 0xDF, 0x91, 0xF1, 0xAA, 0x01,
++		0x93, 0x8D, 0x38, 0x68, 0x5D, 0x60, 0xBA, 0x6F}
++	qInv := []byte{
++		0x0A, 0x81, 0xD8, 0xA6, 0x18, 0x31, 0x4A, 0x80,
++		0x3A, 0xF6, 0x1C, 0x06, 0x71, 0x1F, 0x2C, 0x39,
++		0xB2, 0x66, 0xFF, 0x41, 0x4D, 0x53, 0x47, 0x6D,
++		0x1D, 0xA5, 0x2A, 0x43, 0x18, 0xAA, 0xFE, 0x4B,
++		0x96, 0xF0, 0xDA, 0x07, 0x15, 0x5F, 0x8A, 0x51,
++		0x34, 0xDA, 0xB8, 0x8E, 0xE2, 0x9E, 0x81, 0x68,
++		0x07, 0x6F, 0xCD, 0x78, 0xCA, 0x79, 0x1A, 0xC6,
++		0x34, 0x42, 0xA8, 0x1C, 0xD0, 0x69, 0x39, 0x27,
++		0xD8, 0x08, 0xE3, 0x35, 0xE8, 0xD8, 0xCB, 0xF2,
++		0x12, 0x19, 0x07, 0x50, 0x9A, 0x57, 0x75, 0x9B,
++		0x4F, 0x9A, 0x18, 0xFA, 0x3A, 0x7B, 0x33, 0x37,
++		0x79, 0xED, 0xDE, 0x7A, 0x45, 0x93, 0x84, 0xF8,
++		0x44, 0x4A, 0xDA, 0xEC, 0xFF, 0xEC, 0x95, 0xFD,
++		0x55, 0x2B, 0x0C, 0xFC, 0xB6, 0xC7, 0xF6, 0x92,
++		0x62, 0x6D, 0xDE, 0x1E, 0xF2, 0x68, 0xA4, 0x0D,
++		0x2F, 0x67, 0xB5, 0xC8, 0xAA, 0x38, 0x7F, 0xF7}
++	dP := []byte{
++		0x09, 0xED, 0x54, 0xEA, 0xED, 0x98, 0xF8, 0x4C,
++		0x55, 0x7B, 0x4A, 0x86, 0xBF, 0x4F, 0x57, 0x84,
++		0x93, 0xDC, 0xBC, 0x6B, 0xE9, 0x1D, 0xA1, 0x89,
++		0x37, 0x04, 0x04, 0xA9, 0x08, 0x72, 0x76, 0xF4,
++		0xCE, 0x51, 0xD8, 0xA1, 0x00, 0xED, 0x85, 0x7D,
++		0xC2, 0xB0, 0x64, 0x94, 0x74, 0xF3, 0xF1, 0x5C,
++		0xD2, 0x4C, 0x54, 0xDB, 0x28, 0x71, 0x10, 0xE5,
++		0x6E, 0x5C, 0xB0, 0x08, 0x68, 0x2F, 0x91, 0x68,
++		0xAA, 0x81, 0xF3, 0x14, 0x58, 0xB7, 0x43, 0x1E,
++		0xCC, 0x1C, 0x44, 0x90, 0x6F, 0xDA, 0x87, 0xCA,
++		0x89, 0x47, 0x10, 0xC3, 0x71, 0xE9, 0x07, 0x6C,
++		0x1D, 0x49, 0xFB, 0xAE, 0x51, 0x27, 0x69, 0x34,
++		0xF2, 0xAD, 0x78, 0x77, 0x89, 0xF4, 0x2D, 0x0F,
++		0xA0, 0xB4, 0xC9, 0x39, 0x85, 0x5D, 0x42, 0x12,
++		0x09, 0x6F, 0x70, 0x28, 0x0A, 0x4E, 0xAE, 0x7C,
++		0x8A, 0x27, 0xD9, 0xC8, 0xD0, 0x77, 0x2E, 0x65}
++	dQ := []byte{
++		0x8C, 0xB6, 0x85, 0x7A, 0x7B, 0xD5, 0x46, 0x5F,
++		0x80, 0x04, 0x7E, 0x9B, 0x87, 0xBC, 0x00, 0x27,
++		0x31, 0x84, 0x05, 0x81, 0xE0, 0x62, 0x61, 0x39,
++		0x01, 0x2A, 0x5B, 0x50, 0x5F, 0x0A, 0x33, 0x84,
++		0x7E, 0xB7, 0xB8, 0xC3, 0x28, 0x99, 0x49, 0xAD,
++		0x48, 0x6F, 0x3B, 0x4B, 0x3D, 0x53, 0x9A, 0xB5,
++		0xDA, 0x76, 0x30, 0x21, 0xCB, 0xC8, 0x2C, 0x1B,
++		0xA2, 0x34, 0xA5, 0x66, 0x8D, 0xED, 0x08, 0x01,
++		0xB8, 0x59, 0xF3, 0x43, 0xF1, 0xCE, 0x93, 0x04,
++		0xE6, 0xFA, 0xA2, 0xB0, 0x02, 0xCA, 0xD9, 0xB7,
++		0x8C, 0xDE, 0x5C, 0xDC, 0x2C, 0x1F, 0xB4, 0x17,
++		0x1C, 0x42, 0x42, 0x16, 0x70, 0xA6, 0xAB, 0x0F,
++		0x50, 0xCC, 0x4A, 0x19, 0x4E, 0xB3, 0x6D, 0x1C,
++		0x91, 0xE9, 0x35, 0xBA, 0x01, 0xB9, 0x59, 0xD8,
++		0x72, 0x8B, 0x9E, 0x64, 0x42, 0x6B, 0x3F, 0xC3,
++		0xA7, 0x50, 0x6D, 0xEB, 0x52, 0x39, 0xA8, 0xA7}
 +
-+func (h *cryptoKitHMAC) BlockSize() int {
-+	return h.blockSize
-+}
++	// Convert []byte to BigInt using BN_bin2bn and bnToBig
++	bytesToBigInt := func(b []byte) BigInt {
++		bn, err := ossl.BN_bin2bn(b, nil)
++		if err != nil {
++			panic(err)
++		}
++		defer ossl.BN_free(bn)
++		return bnToBig(bn)
++	}
 +
-+func hashToHMACEnum(h hash.Hash) int32 {
-+	switch h := h.(type) {
-+	case *Hash:
-+		return h.alg.id
-+	default:
-+		return 0
++	priv, err := NewPrivateKeyRSA(
++		bytesToBigInt(N),
++		bytesToBigInt(E),
++		bytesToBigInt(d),
++		bytesToBigInt(p),
++		bytesToBigInt(q),
++		bytesToBigInt(dP),
++		bytesToBigInt(dQ),
++		bytesToBigInt(qInv),
++	)
++	if err != nil {
++		panic("failed to create test RSA private key: " + err.Error())
 +	}
-+}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
++	// Prevent finalization to avoid freeing OpenSSL objects.
++	runtime.SetFinalizer(priv, nil)
++	return priv._pkey
++})
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go
 new file mode 100644
-index 00000000000000..136d81fe3c152e
+index 00000000000000..87fe3879ab48d3
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mldsa.go
-@@ -0,0 +1,222 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go
+@@ -0,0 +1,157 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package openssl
 +
 +import (
++	"crypto"
 +	"errors"
++	"hash"
++	"sync"
++	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
-+
-+const (
-+	// privateKeySizeMLDSA is the size of an ML-DSA private key seed.
-+	privateKeySizeMLDSA = 32
-+
-+	// publicKeySizeMLDSA65 is the size of an ML-DSA-65 public key encoding.
-+	publicKeySizeMLDSA65 = 1952
-+
-+	// publicKeySizeMLDSA87 is the size of an ML-DSA-87 public key encoding.
-+	publicKeySizeMLDSA87 = 2592
-+
-+	// signatureSizeMLDSA65 is the size of an ML-DSA-65 signature.
-+	signatureSizeMLDSA65 = 3309
-+
-+	// signatureSizeMLDSA87 is the size of an ML-DSA-87 signature.
-+	signatureSizeMLDSA87 = 4627
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+// SupportsMLDSA returns true if the given ML-DSA parameter set is supported
-+// on this platform.
-+func SupportsMLDSA(params MLDSAParameters) bool {
-+	switch params.publicKeySize {
-+	case publicKeySizeMLDSA65, publicKeySizeMLDSA87:
-+		return cryptokit.SupportsMLDSA() == 1
++func SupportsTLS1PRF() bool {
++	switch major() {
++	case 1:
++		return minor() >= 1
++	case 3, 4:
++		_, err := fetchTLS1PRF3()
++		return err == nil
 +	default:
-+		return false
-+	}
-+}
-+
-+// MLDSAParameters represents one of the fixed ML-DSA parameter sets.
-+type MLDSAParameters struct {
-+	name          string
-+	publicKeySize int
-+	signatureSize int
-+	generateKey   func(seed []uint8) int64
-+	derivePublic  func(seed []uint8, publicKey []uint8) int64
-+	sign          func(seed []uint8, message []uint8, context []uint8, signature []uint8, signatureLen *int64) int64
-+	verify        func(publicKey []uint8, message []uint8, context []uint8, signature []uint8) int64
-+	validatePub   func(publicKey []uint8) int64
-+}
-+
-+var (
-+	mldsa65 = MLDSAParameters{
-+		name:          "ML-DSA-65",
-+		publicKeySize: publicKeySizeMLDSA65,
-+		signatureSize: signatureSizeMLDSA65,
-+		generateKey:   cryptokit.GenerateKeyMLDSA65,
-+		derivePublic:  cryptokit.DerivePublicKeyMLDSA65,
-+		sign:          cryptokit.SignMLDSA65,
-+		verify:        cryptokit.VerifyMLDSA65,
-+		validatePub:   cryptokit.ValidatePublicKeyMLDSA65,
-+	}
-+	mldsa87 = MLDSAParameters{
-+		name:          "ML-DSA-87",
-+		publicKeySize: publicKeySizeMLDSA87,
-+		signatureSize: signatureSizeMLDSA87,
-+		generateKey:   cryptokit.GenerateKeyMLDSA87,
-+		derivePublic:  cryptokit.DerivePublicKeyMLDSA87,
-+		sign:          cryptokit.SignMLDSA87,
-+		verify:        cryptokit.VerifyMLDSA87,
-+		validatePub:   cryptokit.ValidatePublicKeyMLDSA87,
++		panic(errUnsupportedVersion())
 +	}
-+)
-+
-+// MLDSA65 returns the ML-DSA-65 parameter set.
-+func MLDSA65() MLDSAParameters { return mldsa65 }
-+
-+// MLDSA87 returns the ML-DSA-87 parameter set.
-+func MLDSA87() MLDSAParameters { return mldsa87 }
-+
-+func (params MLDSAParameters) valid() bool {
-+	return params.generateKey != nil
-+}
-+
-+// PublicKeySize returns the size of public keys for this parameter set, in bytes.
-+func (params MLDSAParameters) PublicKeySize() int { return params.publicKeySize }
-+
-+// SignatureSize returns the size of signatures for this parameter set, in bytes.
-+func (params MLDSAParameters) SignatureSize() int { return params.signatureSize }
-+
-+// String returns the name of the parameter set.
-+func (params MLDSAParameters) String() string { return params.name }
-+
-+var errInvalidMLDSAParameters = errors.New("mldsa: invalid parameters")
-+
-+// PrivateKeyMLDSA is an ML-DSA private key seed.
-+type PrivateKeyMLDSA struct {
-+	params MLDSAParameters
-+	seed   [privateKeySizeMLDSA]byte
 +}
 +
-+// GenerateKeyMLDSA generates a new ML-DSA private key.
-+func GenerateKeyMLDSA(params MLDSAParameters) (*PrivateKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
++// TLS1PRF implements the TLS 1.0/1.1 pseudo-random function if h is nil,
++// else it implements the TLS 1.2 pseudo-random function.
++// The pseudo-random number will be written to result and will be of length len(result).
++func TLS1PRF(result, secret, label, seed []byte, fh func() hash.Hash) error {
++	var md ossl.EVP_MD_PTR
++	if fh == nil {
++		// TLS 1.0/1.1 PRF doesn't allow to specify the hash function,
++		// it always uses MD5SHA1. If h is nil, then assume
++		// that the caller wants to use TLS 1.0/1.1 PRF.
++		// OpenSSL detects this case by checking if the hash
++		// function is MD5SHA1.
++		md = loadHash(crypto.MD5SHA1, false).md
++	} else {
++		h, err := hashFuncHash(fh)
++		if err != nil {
++			return err
++		}
++		md = hashToMD(h)
 +	}
-+	key := &PrivateKeyMLDSA{params: params}
-+	if ret := params.generateKey(key.seed[:]); ret != 0 {
-+		return nil, errors.New("mldsa: key generation failed")
++	if md == nil {
++		return errors.New("unsupported hash function")
 +	}
-+	return key, nil
-+}
 +
-+// NewPrivateKeyMLDSA constructs an ML-DSA private key from its seed.
-+func NewPrivateKeyMLDSA(params MLDSAParameters, seed []byte) (*PrivateKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
-+	}
-+	if len(seed) != privateKeySizeMLDSA {
-+		return nil, errors.New("mldsa: invalid private key size")
++	switch major() {
++	case 1:
++		return tls1PRF1(result, secret, label, seed, md)
++	case 3, 4:
++		return tls1PRF3(result, secret, label, seed, md)
++	default:
++		return errUnsupportedVersion()
 +	}
-+	key := &PrivateKeyMLDSA{params: params}
-+	copy(key.seed[:], seed)
-+	return key, nil
-+}
-+
-+// Bytes returns the private key seed.
-+func (key *PrivateKeyMLDSA) Bytes() []byte {
-+	return key.seed[:]
 +}
 +
-+// Parameters returns the parameters associated with this private key.
-+func (key *PrivateKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
++func tls1PRF1(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
++	checkMajorVersion(1)
 +
-+// PublicKey returns the corresponding public key.
-+func (key *PrivateKeyMLDSA) PublicKey() *PublicKeyMLDSA {
-+	publicKey := &PublicKeyMLDSA{params: key.params}
-+	if ret := key.params.derivePublic(key.seed[:], publicKey.bytes[:key.params.publicKeySize]); ret != 0 {
-+		panic("mldsa: failed to derive public key")
++	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_TLS1_PRF, nil)
++	if err != nil {
++		return err
 +	}
-+	return publicKey
-+}
++	defer func() {
++		ossl.EVP_PKEY_CTX_free(ctx)
++	}()
 +
-+// Sign signs message with context using ML-DSA.
-+func (key *PrivateKeyMLDSA) Sign(message []byte, context string) ([]byte, error) {
-+	if len(context) > 255 {
-+		return nil, errors.New("mldsa: context too long")
++	if _, err := ossl.EVP_PKEY_derive_init(ctx); err != nil {
++		return err
 +	}
-+	signature := make([]byte, key.params.signatureSize)
-+	sigLen := int64(key.params.signatureSize)
-+	contextBytes := []byte(context)
-+	if ret := key.params.sign(key.seed[:], message, contextBytes, signature, &sigLen); ret != 0 {
-+		return nil, errors.New("mldsa: signing failed")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_MD,
++		0, unsafe.Pointer(md)); err != nil {
++		return err
 +	}
-+	return signature[:sigLen], nil
-+}
-+
-+// SignExternalMu signs a pre-hashed mu message representative using ML-DSA.
-+func (key *PrivateKeyMLDSA) SignExternalMu(mu []byte) ([]byte, error) {
-+	if len(mu) != 64 {
-+		return nil, errors.New("mldsa: invalid message hash length")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SECRET,
++		int32(len(secret)), unsafe.Pointer(base(secret))); err != nil {
++		return err
 +	}
-+	return nil, errors.New("mldsa: external mu not supported")
-+}
-+
-+// PublicKeyMLDSA is an ML-DSA public key.
-+type PublicKeyMLDSA struct {
-+	params MLDSAParameters
-+	bytes  [publicKeySizeMLDSA87]byte
-+}
-+
-+// NewPublicKeyMLDSA constructs an ML-DSA public key from its encoding.
-+func NewPublicKeyMLDSA(params MLDSAParameters, publicKey []byte) (*PublicKeyMLDSA, error) {
-+	if !params.valid() {
-+		return nil, errInvalidMLDSAParameters
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SEED,
++		int32(len(label)), unsafe.Pointer(base(label))); err != nil {
++		return err
 +	}
-+	if len(publicKey) != params.publicKeySize {
-+		return nil, errors.New("mldsa: invalid public key size")
++	if _, err := ossl.EVP_PKEY_CTX_ctrl(ctx, -1,
++		ossl.EVP_PKEY_OP_DERIVE,
++		ossl.EVP_PKEY_CTRL_TLS_SEED,
++		int32(len(seed)), unsafe.Pointer(base(seed))); err != nil {
++		return err
 +	}
-+	if ret := params.validatePub(publicKey); ret != 0 {
-+		return nil, errors.New("mldsa: invalid public key")
++	outLen := len(result)
++	if _, err := ossl.EVP_PKEY_derive(ctx, result, &outLen); err != nil {
++		return err
 +	}
-+	key := &PublicKeyMLDSA{params: params}
-+	copy(key.bytes[:], publicKey)
-+	return key, nil
-+}
-+
-+// Bytes returns the public key encoding.
-+func (key *PublicKeyMLDSA) Bytes() []byte {
-+	return key.bytes[:key.params.publicKeySize]
++	// The Go standard library expects TLS1PRF to return the requested number of bytes,
++	// fail if it doesn't. While there is no known situation where this will happen,
++	// EVP_PKEY_derive handles multiple algorithms and there could be a subtle mismatch
++	// after more code changes in the future.
++	if outLen != len(result) {
++		return errors.New("tls1-prf: derived less bytes than requested")
++	}
++	return nil
 +}
 +
-+// Parameters returns the parameters associated with this public key.
-+func (key *PublicKeyMLDSA) Parameters() MLDSAParameters { return key.params }
++// fetchTLS1PRF3 fetches the TLS1-PRF KDF algorithm.
++// It is safe to call this function concurrently.
++// The returned EVP_KDF_PTR shouldn't be freed.
++var fetchTLS1PRF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
++	checkMajorVersion(3, 4)
 +
-+// Verify verifies an ML-DSA signature.
-+func (key *PublicKeyMLDSA) Verify(message, signature []byte, context string) error {
-+	if len(signature) != key.params.signatureSize {
-+		return errors.New("mldsa: invalid signature length")
++	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS1_PRF.ptr(), nil)
++	if err != nil {
++		return nil, err
 +	}
-+	if len(context) > 255 {
-+		return errors.New("mldsa: context too long")
++	return kdf, nil
++})
++
++// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
++func tls1PRF3(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
++	checkMajorVersion(3, 4)
++
++	kdf, err := fetchTLS1PRF3()
++	if err != nil {
++		return err
 +	}
-+	contextBytes := []byte(context)
-+	if ret := key.params.verify(key.bytes[:key.params.publicKeySize], message, contextBytes, signature); ret != 0 {
-+		return errors.New("mldsa: verification failed")
++	ctx, err := ossl.EVP_KDF_CTX_new(kdf)
++	if err != nil {
++		return err
 +	}
-+	return nil
-+}
++	defer ossl.EVP_KDF_CTX_free(ctx)
 +
-+// VerifyExternalMu verifies an ML-DSA signature over a pre-hashed mu message representative.
-+func (key *PublicKeyMLDSA) VerifyExternalMu(mu, signature []byte) error {
-+	if len(mu) != 64 {
-+		return errors.New("mldsa: invalid message hash length")
++	bld := newParamBuilder()
++	defer bld.finalize()
++	bld.addUTF8String(_OSSL_KDF_PARAM_DIGEST, ossl.EVP_MD_get0_name(md), 0)
++	bld.addOctetString(_OSSL_KDF_PARAM_SECRET, secret)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, label)
++	bld.addOctetString(_OSSL_KDF_PARAM_SEED, seed)
++	params, err := bld.build()
++	if err != nil {
++		return err
 +	}
-+	if len(signature) != key.params.signatureSize {
-+		return errors.New("mldsa: invalid signature length")
++	defer ossl.OSSL_PARAM_free(params)
++
++	if _, err := ossl.EVP_KDF_derive(ctx, result, params); err != nil {
++		return err
 +	}
-+	return errors.New("mldsa: external mu not supported")
++	return nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/zaes.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/zaes.go
 new file mode 100644
-index 00000000000000..b5131703afdbcc
+index 00000000000000..ac79a864271eee
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/mlkem.go
-@@ -0,0 +1,261 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/zaes.go
+@@ -0,0 +1,87 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
-+
-+import (
-+	"errors"
++// Code generated by cmd/genaesmodes. DO NOT EDIT.
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/cryptokit"
-+)
++package openssl
 +
-+const (
-+	// sharedKeySizeMLKEM is the size of a shared key produced by ML-KEM.
-+	sharedKeySizeMLKEM = 32
++import "crypto/cipher"
 +
-+	// seedSizeMLKEM is the size of a seed used to generate a decapsulation key.
-+	seedSizeMLKEM = 64
++type cipherWithCBC struct {
++	aesCipher
++}
 +
-+	// ciphertextSizeMLKEM768 is the size of a ciphertext produced by ML-KEM-768.
-+	ciphertextSizeMLKEM768 = 1088
++type cipherWithCTR struct {
++	aesCipher
++}
 +
-+	// encapsulationKeySizeMLKEM768 is the size of an ML-KEM-768 encapsulation key.
-+	encapsulationKeySizeMLKEM768 = 1184
++type cipherWithCBC_CTR struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++}
 +
-+	// ciphertextSizeMLKEM1024 is the size of a ciphertext produced by ML-KEM-1024.
-+	ciphertextSizeMLKEM1024 = 1568
++type cipherWithGCM struct {
++	aesCipher
++}
 +
-+	// encapsulationKeySizeMLKEM1024 is the size of an ML-KEM-1024 encapsulation key.
-+	encapsulationKeySizeMLKEM1024 = 1568
-+)
++type cipherWithCBC_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithGCM
++}
 +
-+// SupportsMLKEM returns true if ML-KEM is supported on this platform.
-+func SupportsMLKEM() bool {
-+	return cryptokit.SupportsMLKEM() == 1
++type cipherWithCTR_GCM struct {
++	aesCipher
++	cipherWithCTR
++	cipherWithGCM
 +}
 +
-+// DecapsulationKeyMLKEM768 is the secret key used to decapsulate a shared key
-+// from a ciphertext. It includes various precomputed values.
-+type DecapsulationKeyMLKEM768 [seedSizeMLKEM]byte
++type cipherWithCBC_CTR_GCM struct {
++	aesCipher
++	cipherWithCBC
++	cipherWithCTR
++	cipherWithGCM
++}
 +
-+// GenerateKeyMLKEM768 generates a new decapsulation key, drawing random bytes from
-+// the default crypto/rand source. The decapsulation key must be kept secret.
-+func GenerateKeyMLKEM768() (DecapsulationKeyMLKEM768, error) {
-+	var dk DecapsulationKeyMLKEM768
-+	ret := cryptokit.GenerateKeyMLKEM768(dk[:])
-+	if ret != 0 {
-+		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: key generation failed")
++func newAESBlock(c *evpCipher, kind cipherKind) cipher.Block {
++	aes := aesCipher{c}
++	var block cipher.Block
++	supportsCBC := loadCipher(kind, cipherModeCBC) != nil
++	supportsCTR := loadCipher(kind, cipherModeCTR) != nil
++	supportsGCM := loadCipher(kind, cipherModeGCM) != nil
++	switch {
++	case !supportsCBC && !supportsCTR && !supportsGCM:
++		block = aes
++	case supportsCBC && !supportsCTR && !supportsGCM:
++		block = cipherWithCBC{aes}
++	case !supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCTR{aes}
++	case supportsCBC && supportsCTR && !supportsGCM:
++		block = cipherWithCBC_CTR{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++		}
++	case !supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithGCM{aes}
++	case supportsCBC && !supportsCTR && supportsGCM:
++		block = cipherWithCBC_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithGCM{aes},
++		}
++	case !supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCTR_GCM{aes,
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	case supportsCBC && supportsCTR && supportsGCM:
++		block = cipherWithCBC_CTR_GCM{aes,
++			cipherWithCBC{aes},
++			cipherWithCTR{aes},
++			cipherWithGCM{aes},
++		}
++	default:
++		panic("unreachable")
 +	}
-+	return dk, nil
++	return block
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go
+new file mode 100644
+index 00000000000000..2084b384b9f3a9
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go
+@@ -0,0 +1,69 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// NewDecapsulationKeyMLKEM768 expands a decapsulation key from a 64-byte seed in the
-+// "d || z" form. The seed must be uniformly random.
-+func NewDecapsulationKeyMLKEM768(seed []byte) (DecapsulationKeyMLKEM768, error) {
-+	if len(seed) != seedSizeMLKEM {
-+		return DecapsulationKeyMLKEM768{}, errors.New("mlkem: invalid seed size")
-+	}
++package osslsetup
 +
-+	var dk DecapsulationKeyMLKEM768
-+	copy(dk[:], seed)
-+	return dk, nil
-+}
++import (
++	"unsafe"
 +
-+// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
-+//
-+// The decapsulation key must be kept secret.
-+func (dk DecapsulationKeyMLKEM768) Bytes() []byte {
-+	return dk[:]
-+}
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+// Decapsulate generates a shared key from a ciphertext and a decapsulation
-+// key. If the ciphertext is not valid, Decapsulate returns an error.
++// cString is a null-terminated string,
++// akin to C's char*.
++type cString string
++
++// ptr returns a pointer to the string data.
++// It panics if the string is not null-terminated.
 +//
-+// The shared key must be kept secret.
-+func (dk DecapsulationKeyMLKEM768) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	if len(ciphertext) != ciphertextSizeMLKEM768 {
-+		return nil, errors.New("mlkem: invalid ciphertext size")
++// The memory pointed to by the returned pointer should
++// not be modified and it must only be passed to
++// "const char*" parameters. Any attempt to modify it
++// will result in a runtime panic, as Go strings are
++// allocated in read-only memory.
++func (s cString) ptr() *byte {
++	if len(s) == 0 {
++		return nil
 +	}
-+
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	ret := cryptokit.DecapsulateMLKEM768(
-+		dk[:],
-+		ciphertext,
-+		sharedKey,
-+	)
-+
-+	if ret != 0 {
-+		return nil, errors.New("mlkem: decapsulation failed")
++	if s[len(s)-1] != 0 {
++		panic("must be null-terminated")
 +	}
-+	return sharedKey, nil
++	return unsafe.StringData(string(s))
 +}
 +
-+// EncapsulationKey returns the public encapsulation key necessary to produce
-+// ciphertexts.
-+func (dk DecapsulationKeyMLKEM768) EncapsulationKey() EncapsulationKeyMLKEM768 {
-+	var ek EncapsulationKeyMLKEM768
-+	ret := cryptokit.DeriveEncapsulationKeyMLKEM768(
-+		dk[:],
-+		ek[:],
-+	)
++const (
++	_ProviderNameFips   cString = "fips\x00"
++	_DigestNameSHA2_256 cString = "SHA2-256\x00"
++)
 +
-+	if ret != 0 {
-+		return EncapsulationKeyMLKEM768{}
++// FIPS returns true if the provider used by default matches the `fips=yes` query.
++// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
++// of whether the `fips=yes` query is explicitly enabled. For example, Azure Linux 3 doesn't set the
++// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
++// which is FIPS-capable.
++func FIPS() bool {
++	switch vMajor {
++	case 1:
++		return ossl.FIPS_mode() == 1
++	default:
++		// Load the provider with and without the `fips=yes` query.
++		// If the providers are the same, then the default provider is FIPS-capable.
++		provFIPS := sha256Provider(_ProviderNameFips)
++		if provFIPS == nil {
++			return false
++		}
++		provDefault := sha256Provider("")
++		return provFIPS == provDefault
 +	}
-+	return ek
 +}
 +
-+// An EncapsulationKeyMLKEM768 is the public key used to produce ciphertexts to be
-+// decapsulated by the corresponding DecapsulationKeyMLKEM768.
-+type EncapsulationKeyMLKEM768 [encapsulationKeySizeMLKEM768]byte
-+
-+// NewEncapsulationKeyMLKEM768 parses an encapsulation key from its encoded form. If
-+// the encapsulation key is not valid, NewEncapsulationKeyMLKEM768 returns an error.
-+func NewEncapsulationKeyMLKEM768(encapsulationKey []byte) (EncapsulationKeyMLKEM768, error) {
-+	if len(encapsulationKey) != encapsulationKeySizeMLKEM768 {
-+		return EncapsulationKeyMLKEM768{}, errors.New("mlkem: invalid encapsulation key size")
++// sha256Provider returns the provider for the SHA-256 algorithm
++// using the given properties.
++func sha256Provider(props cString) ossl.OSSL_PROVIDER_PTR {
++	md, _ := ossl.EVP_MD_fetch(nil, _DigestNameSHA2_256.ptr(), props.ptr())
++	if md == nil {
++		return nil
 +	}
-+
-+	var ek EncapsulationKeyMLKEM768
-+	copy(ek[:], encapsulationKey)
-+	return ek, nil
-+}
-+
-+// Bytes returns the encapsulation key as a byte slice.
-+func (ek EncapsulationKeyMLKEM768) Bytes() []byte {
-+	return ek[:]
++	defer ossl.EVP_MD_free(md)
++	return ossl.EVP_MD_get0_provider(md)
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go
+new file mode 100644
+index 00000000000000..720a446838ea7d
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go
+@@ -0,0 +1,170 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// Encapsulate generates a shared key and an associated ciphertext from an
-+// encapsulation key, drawing random bytes from the default crypto/rand source.
-+//
-+// The shared key must be kept secret.
-+func (ek EncapsulationKeyMLKEM768) Encapsulate() (sharedKey, ciphertext []byte) {
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	ciphertext = make([]byte, ciphertextSizeMLKEM768)
++package osslsetup
 +
-+	ret := cryptokit.EncapsulateMLKEM768(
-+		ek[:],
-+		sharedKey,
-+		ciphertext,
-+	)
++import (
++	"errors"
++	"unsafe"
 +
-+	if ret != 0 {
-+		return nil, nil
-+	}
-+	return sharedKey, ciphertext
-+}
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
++)
 +
-+// DecapsulationKeyMLKEM1024 is the secret key used to decapsulate a shared key
-+// from a ciphertext. It includes various precomputed values.
-+type DecapsulationKeyMLKEM1024 [seedSizeMLKEM]byte
++// osslHandle is the handle to the OpenSSL shared library loaded in the [Init] function.
++var osslHandle unsafe.Pointer
 +
-+// GenerateKeyMLKEM1024 generates a new decapsulation key, drawing random bytes from
-+// the default crypto/rand source. The decapsulation key must be kept secret.
-+func GenerateKeyMLKEM1024() (DecapsulationKeyMLKEM1024, error) {
-+	var dk DecapsulationKeyMLKEM1024
-+	ret := cryptokit.GenerateKeyMLKEM1024(dk[:])
-+	if ret != 0 {
-+		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: key generation failed")
++// opensslInit loads and initializes OpenSSL.
++//
++// See [Init] for details about file.
++func opensslInit(file string) error {
++	// Load the OpenSSL shared library using dlopen.
++	handle, close, err := openLibrary(file)
++	if err != nil {
++		return err
 +	}
-+	return dk, nil
-+}
 +
-+// NewDecapsulationKeyMLKEM1024 expands a decapsulation key from a 64-byte seed in the
-+// "d || z" form. The seed must be uniformly random.
-+func NewDecapsulationKeyMLKEM1024(seed []byte) (DecapsulationKeyMLKEM1024, error) {
-+	if len(seed) != seedSizeMLKEM {
-+		return DecapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid seed size")
++	ossl.MkcgoLoad_(handle)
++	if vMajor == 1 {
++		ossl.MkcgoLoad_legacy_1(handle)
++	} else {
++		ossl.MkcgoLoad_3(handle)
++		if vMajor > 3 || (vMajor == 3 && vMinor >= 3) {
++			ossl.MkcgoLoad_33(handle)
++		}
 +	}
 +
-+	var dk DecapsulationKeyMLKEM1024
-+	copy(dk[:], seed)
-+	return dk, nil
++	// Initialize OpenSSL.
++	ossl.OPENSSL_init()
++	if _, err = ossl.OPENSSL_init_crypto(
++		ossl.OPENSSL_INIT_ADD_ALL_CIPHERS|
++			ossl.OPENSSL_INIT_ADD_ALL_DIGESTS|
++			ossl.OPENSSL_INIT_LOAD_CONFIG|
++			ossl.OPENSSL_INIT_LOAD_CRYPTO_STRINGS,
++		nil); err != nil {
++		close()
++		return err
++	}
++	osslHandle = handle
++	return nil
 +}
 +
-+// Bytes returns the decapsulation key as a 64-byte seed in the "d || z" form.
++// initForCheckVersion loads and initialize only the
++// functions required in [CheckVersion].
++// It returns a close function that must be called to release the resources.
 +//
-+// The decapsulation key must be kept secret.
-+func (dk DecapsulationKeyMLKEM1024) Bytes() []byte {
-+	return dk[:]
-+}
-+
-+// Decapsulate generates a shared key from a ciphertext and a decapsulation
-+// key. If the ciphertext is not valid, Decapsulate returns an error.
++// This function modifies the vMajor, vMinor, and vPatch global variables as
++// well as other internal global variables that facilitate OpenSSL calls.
 +//
-+// The shared key must be kept secret.
-+func (dk DecapsulationKeyMLKEM1024) Decapsulate(ciphertext []byte) (sharedKey []byte, err error) {
-+	if len(ciphertext) != ciphertextSizeMLKEM1024 {
-+		return nil, errors.New("mlkem: invalid ciphertext size")
++// If the function succeeds, calling the close function restores the previous
++// state of the global variables. If it fails, the global variables are restored
++// before returning.
++func initForCheckVersion(file string) (func(), error) {
++	prevMajor, prevMinor, prevPatch := vMajor, vMinor, vPatch
++	restoreVersion := func() {
++		vMajor, vMinor, vPatch = prevMajor, prevMinor, prevPatch
 +	}
-+
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	ret := cryptokit.DecapsulateMLKEM1024(
-+		dk[:],
-+		ciphertext,
-+		sharedKey,
-+	)
-+
-+	if ret != 0 {
-+		return nil, errors.New("mlkem: decapsulation failed")
++	handle, close, err := openLibrary(file)
++	if err != nil {
++		restoreVersion()
++		return nil, err
 +	}
-+	return sharedKey, nil
-+}
-+
-+// EncapsulationKey returns the public encapsulation key necessary to produce
-+// ciphertexts.
-+func (dk DecapsulationKeyMLKEM1024) EncapsulationKey() EncapsulationKeyMLKEM1024 {
-+	var ek EncapsulationKeyMLKEM1024
-+	ret := cryptokit.DeriveEncapsulationKeyMLKEM1024(
-+		dk[:],
-+		ek[:],
-+	)
-+
-+	if ret != 0 {
-+		return EncapsulationKeyMLKEM1024{}
++	initFuncs := func() (loadX func(unsafe.Pointer), unloadX func()) {
++		switch vMajor {
++		case 1:
++			loadX = ossl.MkcgoLoad_init_1
++			unloadX = ossl.MkcgoUnload_init_1
++		default:
++			if vMajor < 3 {
++				// openLibrary should have already rejected this.
++				panic(errUnsupportedVersion())
++			}
++			// Any 3+ major uses the OpenSSL 3 init shim: 3+ guarantees
++			// ABI/API compatibility within the same major.
++			loadX = ossl.MkcgoLoad_init_3
++			unloadX = ossl.MkcgoUnload_init_3
++		}
++		return
 +	}
-+	return ek
++	loadX, unloadX := initFuncs()
++	loadX(handle)
++	return func() {
++		restoreVersion()
++		close()
++		unloadX()
++		if osslHandle != nil {
++			// If osslHandle is not nil, it means that the library was already loaded
++			// and initialized. In this case, we need to reload the functions from
++			// the original handle.
++			loadX, _ = initFuncs()
++			loadX(osslHandle)
++		}
++	}, nil
 +}
 +
-+// An EncapsulationKeyMLKEM1024 is the public key used to produce ciphertexts to be
-+// decapsulated by the corresponding DecapsulationKeyMLKEM1024.
-+type EncapsulationKeyMLKEM1024 [encapsulationKeySizeMLKEM1024]byte
-+
-+// NewEncapsulationKeyMLKEM1024 parses an encapsulation key from its encoded form. If
-+// the encapsulation key is not valid, NewEncapsulationKeyMLKEM1024 returns an error.
-+func NewEncapsulationKeyMLKEM1024(encapsulationKey []byte) (EncapsulationKeyMLKEM1024, error) {
-+	if len(encapsulationKey) != encapsulationKeySizeMLKEM1024 {
-+		return EncapsulationKeyMLKEM1024{}, errors.New("mlkem: invalid encapsulation key size")
++// openLibrary loads and initialize the version of OpenSSL.
++// It returns the handle to the OpenSSL shared library
++// and a function that can be called to release the resources.
++func openLibrary(file string) (handle unsafe.Pointer, close func(), err error) {
++	vMajor, vMinor, vPatch = 0, 0, 0
++	handle, err = dlopen(file)
++	if err != nil {
++		return nil, nil, err
 +	}
++	// Retrieve the loaded OpenSSL version and check if it is supported.
++	// Notice that major and minor could not match with the version parameter
++	// in case the name of the shared library file differs from the OpenSSL
++	// version it contains.
++	ossl.MkcgoLoad_version(handle)
++	close = func() {
++		dlclose(handle)
++		if osslHandle == nil {
++			ossl.MkcgoUnload_version()
++		} else {
++			ossl.MkcgoLoad_version(osslHandle)
++		}
++	}
++	defer func() {
++		if err != nil {
++			close()
++		}
++	}()
 +
-+	var ek EncapsulationKeyMLKEM1024
-+	copy(ek[:], encapsulationKey)
-+	return ek, nil
-+}
-+
-+// Bytes returns the encapsulation key as a byte slice.
-+func (ek EncapsulationKeyMLKEM1024) Bytes() []byte {
-+	return ek[:]
-+}
-+
-+// Encapsulate generates a shared key and an associated ciphertext from an
-+// encapsulation key, drawing random bytes from the default crypto/rand source.
-+//
-+// The shared key must be kept secret.
-+func (ek EncapsulationKeyMLKEM1024) Encapsulate() (sharedKey, ciphertext []byte) {
-+	sharedKey = make([]byte, sharedKeySizeMLKEM)
-+	ciphertext = make([]byte, ciphertextSizeMLKEM1024)
-+
-+	ret := cryptokit.EncapsulateMLKEM1024(
-+		ek[:],
-+		sharedKey,
-+		ciphertext,
-+	)
-+
-+	if ret != 0 {
-+		return nil, nil
++	if ossl.OPENSSL_version_major_Available() &&
++		ossl.OPENSSL_version_minor_Available() &&
++		ossl.OPENSSL_version_patch_Available() {
++		// Likely OpenSSL 3 or later.
++		vMajor = int(ossl.OPENSSL_version_major())
++		vMinor = int(ossl.OPENSSL_version_minor())
++		vPatch = int(ossl.OPENSSL_version_patch())
++	} else if ossl.OpenSSL_version_num_Available() {
++		// Likely OpenSSL 1.
++		ver := ossl.OpenSSL_version_num()
++		vMajor = int(ver >> 28)
++		vMinor = int(ver >> 20 & 0xFF)
++		vPatch = int(ver >> 12 & 0xFF)
++	} else {
++		return handle, nil, errors.New("openssl: version not available")
 +	}
-+	return sharedKey, ciphertext
++	var supported bool
++	switch vMajor {
++	case 1:
++		supported = vMinor == 1 && vPatch >= 1
++	default:
++		// 3+ guarantees ABI/API compatibility within the same major,
++		// so any tested major is supported. Untested 3+ majors require
++		// GODEBUG=ms_opensslallowuntested=1.
++		for _, m := range testedMajors {
++			if vMajor == m {
++				supported = true
++				break
++			}
++		}
++		if !supported && vMajor >= 3 && allowUntestedMajor() {
++			supported = true
++		}
++	}
++	if !supported {
++		return handle, nil, errUnsupportedVersion()
++	}
++	return handle, close, nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_cgo_unix.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_cgo_unix.go
 new file mode 100644
-index 00000000000000..b50fc17d0f8d66
+index 00000000000000..45903c12e802df
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/pbkdf2.go
-@@ -0,0 +1,76 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_cgo_unix.go
+@@ -0,0 +1,34 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++//go:build unix
 +
-+package xcrypto
++package osslsetup
 +
++// #cgo LDFLAGS: -ldl
++// #include <stdlib.h>
++// #include <dlfcn.h>
++import "C"
 +import (
-+	"crypto"
 +	"errors"
-+	"hash"
-+	"math"
-+
-+	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++	"unsafe"
 +)
 +
-+func PBKDF2(password, salt []byte, iter, keyLen int, fh func() hash.Hash) ([]byte, error) {
-+	// CommonCrypto's CCKeyDerivationPBKDF takes an unsigned 32-bit iteration
-+	// count, so reject values that would overflow or wrap. In practice the
-+	// recommended iteration count is around 300,000.
-+	if iter <= 0 || iter > math.MaxUint32 {
-+		return nil, errors.New("PBKDF2: invalid iteration count")
-+	}
-+
-+	// Map Go hash function to CommonCrypto hash constant
-+	ccDigest, err := hashToCCDigestPBKDF2(fh())
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	if len(password) == 0 {
-+		// CommonCrypto requires a non-empty password
-+		// Substitute empty password with placeholder
-+		password = make([]byte, 1)
-+	}
-+
-+	// Allocate output buffer for the derived key
-+	derivedKey := make([]byte, keyLen)
-+
-+	// Call CommonCrypto's PBKDF2 implementation
-+	status := commoncrypto.CCKeyDerivationPBKDF(
-+		commoncrypto.KCCPBKDF2, // PBKDF2 algorithm
-+		password,               // Password
-+		salt,                   // Salt
-+		ccDigest,               // Digest algorithm
-+		uint32(iter),           // Iteration count
-+		derivedKey,             // Output buffer for derived key
-+	)
-+
-+	if status != commoncrypto.KCCSuccess {
-+		return nil, errors.New("PBKDF2 key derivation failed")
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	cv := C.CString(file)
++	defer C.free(unsafe.Pointer(cv))
++	handle = C.dlopen(cv, C.RTLD_LAZY|C.RTLD_LOCAL)
++	if handle == nil {
++		errstr := C.GoString(C.dlerror())
++		return nil, errors.New("openssl: can't load " + file + ": " + errstr)
 +	}
-+
-+	return derivedKey, nil
++	return handle, nil
 +}
 +
-+// Mapping Go hash functions to CommonCrypto hash constants
-+func hashToCCDigestPBKDF2(hash hash.Hash) (commoncrypto.CCPseudoRandomAlgorithm, error) {
-+	switch h := hash.(type) {
-+	case *Hash:
-+		switch h.alg.ch {
-+		case crypto.SHA1:
-+			return commoncrypto.KCCPRFHmacAlgSHA1, nil
-+		case crypto.SHA256:
-+			return commoncrypto.KCCPRFHmacAlgSHA256, nil
-+		case crypto.SHA384:
-+			return commoncrypto.KCCPRFHmacAlgSHA384, nil
-+		case crypto.SHA512:
-+			return commoncrypto.KCCPRFHmacAlgSHA512, nil
-+		default:
-+			return 0, errors.New("unsupported hash function")
-+		}
-+	default:
-+		return 0, errors.New("unsupported hash function")
++func dlclose(handle unsafe.Pointer) error {
++	if C.dlclose(handle) != 0 {
++		errstr := C.GoString(C.dlerror())
++		return errors.New("openssl: can't close libcrypto: " + errstr)
 +	}
++	return nil
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_nocgo_unix.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_nocgo_unix.go
 new file mode 100644
-index 00000000000000..f8fc6ab81a3eb8
+index 00000000000000..e91d5df6b7685a
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rand.go
-@@ -0,0 +1,28 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_nocgo_unix.go
+@@ -0,0 +1,35 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
++//go:build unix && !cgo && (go1.27 || !s390x)
 +
-+package xcrypto
++package osslsetup
 +
 +import (
 +	"errors"
++	"runtime"
++	"unsafe"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/security"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+type randReader int
-+
-+func (randReader) Read(b []byte) (int, error) {
-+	// Note: RAND_bytes should never fail; the return value exists only for historical reasons.
-+	// We check it even so.
-+	if len(b) == 0 {
-+		return 0, nil
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	const RTLD_LAZY = 1
++	var RTLD_LOCAL = 0
++	if runtime.GOOS == "darwin" {
++		RTLD_LOCAL = 4 // darwin uses 4 as RTLD_LOCAL
 +	}
-+	if security.SecRandomCopyBytes(security.KSecRandomDefault, b) != 0 {
-+		return 0, errors.New("crypto/rand: unable to read from source")
++	handle = ossl.Dlopen(unsafe.StringData(file+"\x00"), int32(RTLD_LAZY|RTLD_LOCAL))
++	if handle == nil {
++		return nil, errors.New("openssl: can't load " + file + ": " + goString(ossl.Dlerror()))
 +	}
-+	return len(b), nil
++	return handle, nil
 +}
 +
-+const RandReader = randReader(0)
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
++func dlclose(handle unsafe.Pointer) error {
++	if ossl.Dlclose(handle) != 0 {
++		errstr := goString(ossl.Dlerror())
++		return errors.New("openssl: can't close libcrypto: " + errstr)
++	}
++	return nil
++}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_windows.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_windows.go
 new file mode 100644
-index 00000000000000..01258b7f65a263
+index 00000000000000..312dfc88d7f311
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rc4.go
-@@ -0,0 +1,81 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init_windows.go
+@@ -0,0 +1,37 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package osslsetup
 +
 +import (
-+	"errors"
-+	"runtime"
-+	"slices"
-+
-+	"github.com/microsoft/go-crypto-darwin/internal/commoncrypto"
++	"syscall"
++	"unsafe"
 +)
 +
-+// RC4Cipher is an instance of RC4 using a particular key.
-+type RC4Cipher struct {
-+	ctx commoncrypto.CCCryptorRef
++type dlopenError struct {
++	file string
++	err  error
 +}
 +
-+// NewRC4Cipher creates and returns a new RC4 cipher with the given key.
-+func NewRC4Cipher(key []byte) (*RC4Cipher, error) {
-+	// Clone the key to prevent modification.
-+	key = slices.Clone(key)
-+	var ctx commoncrypto.CCCryptorRef
-+	status := commoncrypto.CCCryptorCreate(
-+		commoncrypto.KCCEncrypt,      // Operation (RC4 stream)
-+		commoncrypto.KCCAlgorithmRC4, // Algorithm
-+		0,                            // No padding or other options
-+		key,                          // Key
-+		nil,                          // No IV needed for RC4
-+		&ctx,                         // Output: CCCryptorRef
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		return nil, errors.New("failed to create RC4 cipher")
-+	}
-+	c := &RC4Cipher{ctx: ctx}
-+	runtime.SetFinalizer(c, (*RC4Cipher).finalize)
-+	return c, nil
++func (e *dlopenError) Error() string {
++	return "openssl: can't load " + e.file + ": " + e.err.Error()
 +}
 +
-+// finalize releases the RC4 cipher context when no longer needed.
-+func (c *RC4Cipher) finalize() {
-+	if c.ctx != nil {
-+		commoncrypto.CCCryptorRelease(c.ctx)
-+	}
++func (e *dlopenError) Unwrap() error {
++	return e.err
 +}
 +
-+// Reset zeros the key data and makes the cipher unusable.
-+func (c *RC4Cipher) Reset() {
-+	if c.ctx != nil {
-+		commoncrypto.CCCryptorRelease(c.ctx)
-+		c.ctx = nil
++func dlopen(file string) (handle unsafe.Pointer, err error) {
++	// As Windows generally does not ship with a system OpenSSL library, let
++	// alone a FIPS 140 certified one, use the default library search order so
++	// that we preferentially load the DLL bundled with the application.
++	h, err := syscall.LoadLibrary(file)
++	if err != nil {
++		return nil, &dlopenError{file: file, err: err}
 +	}
++	return unsafe.Pointer(h), nil
 +}
 +
-+// XORKeyStream sets dst to the result of XORing src with the key stream.
-+func (c *RC4Cipher) XORKeyStream(dst, src []byte) {
-+	if c.ctx == nil || len(src) == 0 {
-+		return
-+	}
-+	if inexactOverlap(dst[:len(src)], src) {
-+		panic("crypto/rc4: invalid buffer overlap")
-+	}
-+	// Ensures `dst` has sufficient space.
-+	_ = dst[len(src)-1]
-+	var outLen int
-+	status := commoncrypto.CCCryptorUpdate(
-+		c.ctx,
-+		src, // Input
-+		dst, // Output
-+		&outLen,
-+	)
-+	if status != commoncrypto.KCCSuccess {
-+		panic("crypto/cipher: CCCryptorUpdate failed")
-+	}
-+	if int(outLen) != len(src) {
-+		panic("crypto/rc4: src not fully XORed")
-+	}
-+	runtime.KeepAlive(c)
++func dlclose(handle unsafe.Pointer) error {
++	return syscall.FreeLibrary(syscall.Handle(handle))
 +}
-diff --git a/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go
 new file mode 100644
-index 00000000000000..8e25affa681753
+index 00000000000000..189335d93c80f8
 --- /dev/null
-+++ b/src/vendor/github.com/microsoft/go-crypto-darwin/xcrypto/rsa.go
-@@ -0,0 +1,208 @@
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go
+@@ -0,0 +1,109 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
-+//go:build darwin
-+
-+package xcrypto
++package osslsetup
 +
 +import (
-+	"crypto"
 +	"errors"
-+	"hash"
-+	"runtime"
 +	"strconv"
-+	"unsafe"
++	"sync"
++	"syscall"
 +
-+	"github.com/microsoft/go-crypto-darwin/internal/security"
++	"github.com/microsoft/go-crypto-openssl/internal/ossl"
 +)
 +
-+// GenerateKeyRSA generates an RSA key pair on macOS.
-+// asn1Data is encoded as PKCS#1 ASN1 DER.
-+func GenerateKeyRSA(bits int) (asn1Data []byte, err error) {
-+	privKeyDER, privKeyRef, err := createSecKeyRandom(security.KSecAttrKeyTypeRSA, bits)
-+	if err != nil {
-+		return nil, err
-+	}
-+	security.CFRelease(security.CFTypeRef(privKeyRef))
-+	return privKeyDER, nil
-+}
-+
-+type PublicKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey security.SecKeyRef
-+}
-+
-+func (k *PublicKeyRSA) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
-+	}
-+}
-+
-+// NewPublicKeyRSA creates a new RSA public key from ASN1 DER encoded data.
-+func NewPublicKeyRSA(asn1Data []byte) (*PublicKeyRSA, error) {
-+	pubKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPublic)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	key := &PublicKeyRSA{_pkey: pubKeyRef}
-+	runtime.SetFinalizer(key, (*PublicKeyRSA).finalize)
-+	return key, nil
-+}
++var (
++	vMajor, vMinor, vPatch int
++)
 +
-+func (k *PublicKeyRSA) withKey(f func(security.SecKeyRef) error) error {
-+	// Because of the finalizer, any time key is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
-+}
++// testedMajors lists the OpenSSL major versions this backend has been
++// tested against. [openLibrary] rejects majors not in this list unless
++// GODEBUG=ms_opensslallowuntested=1 is set. OpenSSL 1 is supported only
++// at 1.1.1+; that minor/patch constraint is enforced separately in
++// [openLibrary].
++var testedMajors = [...]int{1, 3, 4}
 +
-+type PrivateKeyRSA struct {
-+	// _pkey MUST NOT be accessed directly. Instead, use the withKey method.
-+	_pkey security.SecKeyRef
-+}
++// allowUntestedMajor reports whether the user has set
++// GODEBUG=ms_opensslallowuntested=1. The "ms_" prefix marks this as a
++// Microsoft-defined GODEBUG so it will not collide with upstream Go.
++var allowUntestedMajor = sync.OnceValue(func() bool {
++	godebug, _ := syscall.Getenv("GODEBUG")
++	return godebugAllowUntested(godebug)
++})
 +
-+func (k *PrivateKeyRSA) finalize() {
-+	if k._pkey != nil {
-+		security.CFRelease(security.CFTypeRef(k._pkey))
++// godebugAllowUntested reports whether the comma-separated GODEBUG string
++// contains ms_opensslallowuntested=1. Matches internal/godebug parsing:
++// no whitespace trimming.
++func godebugAllowUntested(godebug string) bool {
++	const key = "ms_opensslallowuntested=1"
++	var start int = 0
++	for i := 0; i <= len(godebug); i++ {
++		if i < len(godebug) && godebug[i] != ',' {
++			continue
++		}
++		if godebug[start:i] == key {
++			return true
++		}
++		start = i + 1
 +	}
++	return false
 +}
 +
-+// NewPrivateKeyRSA creates a new RSA private key from ASN1 DER encoded data.
-+func NewPrivateKeyRSA(asn1Data []byte) (*PrivateKeyRSA, error) {
-+	privKeyRef, err := createSecKeyWithData(asn1Data, security.KSecAttrKeyTypeRSA, security.KSecAttrKeyClassPrivate)
-+	if err != nil {
-+		return nil, err
-+	}
-+
-+	key := &PrivateKeyRSA{_pkey: privKeyRef}
-+	runtime.SetFinalizer(key, (*PrivateKeyRSA).finalize)
-+	return key, nil
++func VersionMajor() int {
++	return vMajor
 +}
 +
-+func (k *PrivateKeyRSA) PublicKey() *PublicKeyRSA {
-+	var pubKeyRef security.SecKeyRef
-+	k.withKey(func(key security.SecKeyRef) error {
-+		pubKeyRef = security.SecKeyCopyPublicKey(k._pkey)
-+		return nil
-+	})
-+	pubKey := &PublicKeyRSA{_pkey: pubKeyRef}
-+	runtime.SetFinalizer(pubKey, (*PublicKeyRSA).finalize)
-+	return pubKey
++func VersionMinor() int {
++	return vMinor
 +}
 +
-+func (k *PrivateKeyRSA) withKey(f func(security.SecKeyRef) error) error {
-+	// Because of the finalizer, any time _pkey is passed to cgo, that call must
-+	// be followed by a call to runtime.KeepAlive, to make sure k is not
-+	// collected (and finalized) before the cgo call returns.
-+	defer runtime.KeepAlive(k)
-+	return f(k._pkey)
++func VersionPatch() int {
++	return vPatch
 +}
 +
-+// DecryptRSAOAEP decrypts data using RSA-OAEP.
-+func DecryptRSAOAEP(h hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-+	if len(label) > 0 {
-+		// https://github.com/microsoft/go-crypto-darwin/issues/22
-+		panic("crypto/rsa: label is not supported on macOS")
-+	}
-+	return evpDecrypt(priv.withKey, algorithmTypeOAEP, ciphertext, h)
++func utoa(n int) string {
++	return strconv.FormatUint(uint64(n), 10)
 +}
 +
-+// EncryptRSAOAEP encrypts data using RSA-OAEP.
-+func EncryptRSAOAEP(h hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-+	if len(label) > 0 {
-+		// https://github.com/microsoft/go-crypto-darwin/issues/22
-+		panic("crypto/rsa: label is not supported on macOS")
-+	}
-+	return evpEncrypt(pub.withKey, algorithmTypeOAEP, msg, h)
++func errUnsupportedVersion() error {
++	return errors.New("openssl: unsupported OpenSSL version: " + utoa(vMajor) + "." + utoa(vMinor) + "." + utoa(vPatch) + " (minimum supported version is 1.1.1)")
 +}
 +
-+// SignRSAPSS signs data with RSA-PSS.
-+func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-+	return evpSign(priv.withKey, algorithmTypePSS, h, hashed)
-+}
++var (
++	initOnce sync.Once
++	initErr  error
++)
 +
-+// VerifyRSAPSS verifies data with RSA-PSS.
-+func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-+	return evpVerify(pub.withKey, algorithmTypePSS, h, hashed, sig)
++// Init loads and initializes OpenSSL from the shared library at path.
++// It must be called before any other OpenSSL call, except CheckVersion.
++//
++// Only the first call to Init is effective.
++// Subsequent calls will return the same error result as the one from the first call.
++//
++// The file is passed to dlopen() verbatim to load the OpenSSL shared library.
++// For example, `file=libcrypto.so.1.1.1k-fips` makes Init look for the shared
++// library libcrypto.so.1.1.1k-fips.
++func Init(file string) error {
++	initOnce.Do(func() {
++		initErr = opensslInit(file)
++	})
++	return initErr
 +}
 +
-+func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-+	return evpSign(priv.withKey, algorithmTypePKCS1v15Sig, h, hashed)
++// VersionText returns the version text of the OpenSSL currently loaded.
++func VersionText() string {
++	return goString(ossl.OpenSSL_version(0))
 +}
 +
-+func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-+	if pub.withKey(func(key security.SecKeyRef) error {
-+		size := security.SecKeyGetBlockSize(key)
-+		if len(sig) < int(size) {
-+			return errors.New("crypto/rsa: signature too short")
-+		}
-+		return nil
-+	}) != nil {
-+		return errors.New("crypto/rsa: verification error")
++// CheckVersion checks if the OpenSSL version can be loaded
++// and if the FIPS mode is enabled.
++// This function can be called before Init.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
++func CheckVersion(version string) (exists, fips bool) {
++	close, err := initForCheckVersion(version)
++	if err != nil {
++		return false, false
 +	}
-+	return evpVerify(pub.withKey, algorithmTypePKCS1v15Sig, h, hashed, sig)
-+}
-+
-+// DecryptRSAPKCS1 decrypts data using RSA PKCS#1 v1.5 padding.
-+func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, algorithmTypePKCS1v15Enc, ciphertext, nil)
++	defer close()
++	return true, FIPS()
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_cgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_cgo.go
+new file mode 100644
+index 00000000000000..079fbceb2cdc56
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_cgo.go
+@@ -0,0 +1,12 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// EncryptRSAPKCS1 encrypts data using RSA PKCS#1 v1.5 padding.
-+func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, algorithmTypePKCS1v15Enc, msg, nil)
-+}
++package osslsetup
 +
-+func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-+	return evpDecrypt(priv.withKey, algorithmTypeRAW, ciphertext, nil)
-+}
++import "C"
++import "unsafe"
 +
-+func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-+	return evpEncrypt(pub.withKey, algorithmTypeRAW, msg, nil)
++// goString converts a C string pointer to a Go string for cgo mode
++func goString(ptr *byte) string {
++	return C.GoString((*C.char)(unsafe.Pointer(ptr)))
 +}
+diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_nocgo.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_nocgo.go
+new file mode 100644
+index 00000000000000..fe075ff0822c29
+--- /dev/null
++++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup_nocgo.go
+@@ -0,0 +1,24 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
 +
-+// Helper functions
++//go:build !cgo
 +
-+type cfError struct {
-+	code    int
-+	message string
-+}
++package osslsetup
 +
-+func (e *cfError) Error() string {
-+	if e.message == "" {
-+		return "CFError(" + strconv.Itoa(e.code) + "): unknown error"
-+	}
-+	return "CFError(" + strconv.Itoa(e.code) + "): " + e.message
-+}
++import "unsafe"
 +
-+func goCFErrorRef(ref security.CFErrorRef) error {
-+	if ref == nil {
-+		return nil
++// goString converts a C string pointer to a Go string for nocgo mode
++func goString(ptr *byte) string {
++	if ptr == nil {
++		return ""
 +	}
-+	var message string
-+	if desc := security.CFErrorCopyDescription(ref); desc != nil {
-+		defer security.CFRelease(security.CFTypeRef(desc))
-+		if cstr := security.CFStringGetCStringPtr(desc, security.KCFStringEncodingUTF8); cstr != nil {
-+			message = string(cstrBytes(cstr))
++	var result []byte
++	for i := 0; ; i++ {
++		b := *(*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(ptr)) + uintptr(i)))
++		if b == 0 {
++			break
 +		}
++		result = append(result, b)
 +	}
-+	return &cfError{
-+		code:    int(security.CFErrorGetCode(ref)),
-+		message: message,
-+	}
-+}
-+
-+// cstrBytes returns a byte slice containing the contents of the C string
-+// pointed to by p. The slice does not include the terminating null byte.
-+func cstrBytes(p *byte) []byte {
-+	if p == nil {
-+		return nil
-+	}
-+	end := unsafe.Pointer(p)
-+	for *(*byte)(end) != 0 {
-+		end = unsafe.Add(end, 1)
-+	}
-+	return unsafe.Slice((*byte)(unsafe.Pointer(p)), uintptr(end)-uintptr(unsafe.Pointer(p)))
++	return string(result)
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE b/src/vendor/github.com/microsoft/go-crypto-winnative/LICENSE
 new file mode 100644
@@ -39977,17 +39833,10 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d72017d2a43c1e..f352d97e430e89 100644
+index d72017d2a43c1e..277d1992ac034f 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
-+# github.com/golang-fips/openssl/v2 v2.0.4-0.20260514124455-0301bcb6ccce
-+## explicit; go 1.25
-+github.com/golang-fips/openssl/v2
-+github.com/golang-fips/openssl/v2/bbig
-+github.com/golang-fips/openssl/v2/internal/fakecgo
-+github.com/golang-fips/openssl/v2/internal/ossl
-+github.com/golang-fips/openssl/v2/osslsetup
 +# github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b
 +## explicit; go 1.25
 +github.com/microsoft/go-crypto-darwin/bbig
@@ -39997,6 +39846,13 @@ index d72017d2a43c1e..f352d97e430e89 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
++# github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69
++## explicit; go 1.25
++github.com/microsoft/go-crypto-openssl/bbig
++github.com/microsoft/go-crypto-openssl/internal/fakecgo
++github.com/microsoft/go-crypto-openssl/internal/ossl
++github.com/microsoft/go-crypto-openssl/openssl
++github.com/microsoft/go-crypto-openssl/osslsetup
 +# github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +## explicit; go 1.25
 +github.com/microsoft/go-crypto-winnative/cng
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index 722be26c37a..c353312ea7c 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -25,7 +25,7 @@ desired goexperiments and build tags.
  src/cmd/link/internal/ld/main.go              |   2 +-
  src/cmd/link/link_test.go                     |   8 +
  src/crypto/internal/backend/backend_darwin.go | 442 ++++++++++++++++++
- src/crypto/internal/backend/backend_linux.go  | 434 +++++++++++++++++
+ src/crypto/internal/backend/backend_linux.go  | 435 +++++++++++++++++
  src/crypto/internal/backend/backend_test.go   |  56 +++
  .../internal/backend/backend_windows.go       | 442 ++++++++++++++++++
  src/crypto/internal/backend/bbig/big.go       |  17 +
@@ -54,7 +54,7 @@ desired goexperiments and build tags.
  src/go/build/deps_test.go                     |  24 +-
  src/internal/buildcfg/exp.go                  |  48 +-
  src/runtime/runtime_boring.go                 |   5 +
- 45 files changed, 2853 insertions(+), 27 deletions(-)
+ 45 files changed, 2854 insertions(+), 27 deletions(-)
  create mode 100644 src/cmd/go/systemcrypto_test.go
  create mode 100644 src/crypto/internal/backend/backend_darwin.go
  create mode 100644 src/crypto/internal/backend/backend_linux.go
@@ -1187,10 +1187,10 @@ index 00000000000000..73830cae246cbd
 +}
 diff --git a/src/crypto/internal/backend/backend_linux.go b/src/crypto/internal/backend/backend_linux.go
 new file mode 100644
-index 00000000000000..7a832bd68754df
+index 00000000000000..a28f644c950f86
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_linux.go
-@@ -0,0 +1,434 @@
+@@ -0,0 +1,435 @@
 +// Copyright 2017 The Go Authors. All rights reserved.
 +// Use of this source code is governed by a BSD-style
 +// license that can be found in the LICENSE file.
@@ -1212,7 +1212,8 @@ index 00000000000000..7a832bd68754df
 +	"errors"
 +	"hash"
 +
-+	"github.com/golang-fips/openssl/v2"
++	"github.com/microsoft/go-crypto-openssl/openssl"
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
 +)
 +
 +// Enabled controls whether FIPS crypto is enabled.
@@ -1225,13 +1226,13 @@ index 00000000000000..7a832bd68754df
 +	// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
 +	// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
 +	// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
-+	// openssl.FIPSCapable to determine whether FIPS mode is enabled.
-+	if err := fips140.Check(func() bool { return openssl.FIPSCapable() }); err != nil {
++	// osslsetup.FIPS to determine whether FIPS mode is enabled.
++	if err := fips140.Check(func() bool { return osslsetup.FIPS() }); err != nil {
 +		// This path can be reached for the following reasons:
 +		// - In OpenSSL 1, the active engine doesn't support FIPS mode.
 +		// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
 +		// - In OpenSSL 3, the provider used by default doesn't match the `fips=yes` query.
-+		panic("opensslcrypto: " + err.Error() + ": " + openssl.VersionText())
++		panic("opensslcrypto: " + err.Error() + ": " + osslsetup.VersionText())
 +	}
 +	sig.BoringCrypto()
 +	fips140only.BackendApprovedHash = FIPSApprovedHash
@@ -1444,7 +1445,7 @@ index 00000000000000..7a832bd68754df
 +}
 +
 +func ExpandHKDF(h func() hash.Hash, pseudorandomKey, info []byte, keyLength int) ([]byte, error) {
-+	return openssl.ExpandHKDFOneShot(h, pseudorandomKey, info, keyLength)
++	return openssl.ExpandHKDF(h, pseudorandomKey, info, keyLength)
 +}
 +
 +func ExtractHKDF(h func() hash.Hash, secret, salt []byte) ([]byte, error) {
@@ -2178,7 +2179,7 @@ index 00000000000000..889f2ff7c703d8
 +var Dec = bbig.Dec
 diff --git a/src/crypto/internal/backend/bbig/big_linux.go b/src/crypto/internal/backend/bbig/big_linux.go
 new file mode 100644
-index 00000000000000..8a133422f20fa0
+index 00000000000000..1b515fe6244a52
 --- /dev/null
 +++ b/src/crypto/internal/backend/bbig/big_linux.go
 @@ -0,0 +1,12 @@
@@ -2190,7 +2191,7 @@ index 00000000000000..8a133422f20fa0
 +
 +package bbig
 +
-+import "github.com/golang-fips/openssl/v2/bbig"
++import "github.com/microsoft/go-crypto-openssl/bbig"
 +
 +var Enc = bbig.Enc
 +var Dec = bbig.Dec
@@ -2569,7 +2570,7 @@ index 00000000000000..606a2db4dd685f
 +}
 diff --git a/src/crypto/internal/backend/fips140/systemfips_linux.go b/src/crypto/internal/backend/fips140/systemfips_linux.go
 new file mode 100644
-index 00000000000000..19cafc156fbc5d
+index 00000000000000..2c65c264dc84e1
 --- /dev/null
 +++ b/src/crypto/internal/backend/fips140/systemfips_linux.go
 @@ -0,0 +1,59 @@
@@ -2585,7 +2586,7 @@ index 00000000000000..19cafc156fbc5d
 +	_ "crypto/internal/backend/internal/opensslsetup"
 +	"syscall"
 +
-+	"github.com/golang-fips/openssl/v2/osslsetup"
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
 +)
 +
 +const backendEnabled = true
@@ -2675,7 +2676,7 @@ index 00000000000000..a705e7bc4fc536
 +}
 diff --git a/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
 new file mode 100644
-index 00000000000000..968cdf35985f80
+index 00000000000000..350c8ee7fa2bc6
 --- /dev/null
 +++ b/src/crypto/internal/backend/internal/opensslsetup/opensslsetup_linux.go
 @@ -0,0 +1,68 @@
@@ -2693,7 +2694,7 @@ index 00000000000000..968cdf35985f80
 +import (
 +	"syscall"
 +
-+	"github.com/golang-fips/openssl/v2/osslsetup"
++	"github.com/microsoft/go-crypto-openssl/osslsetup"
 +)
 +
 +// knownVersions is a list of supported and well-known libcrypto.so suffixes in decreasing version order.
@@ -3307,7 +3308,7 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 02b52e2ab9c296..7794e12bc86890 100644
+index 504426b5fe97f2..a8aee3a4bccda3 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -368,7 +368,7 @@ var depsRules = `
@@ -3323,7 +3324,7 @@ index 02b52e2ab9c296..7794e12bc86890 100644
  	< github.com/microsoft/go-crypto-winnative/internal/sysdll
  	< github.com/microsoft/go-crypto-winnative/internal/bcrypt;
  
-+	github.com/golang-fips/openssl/v2/osslsetup
++	github.com/microsoft/go-crypto-openssl/osslsetup
 +	< crypto/internal/backend/internal/opensslsetup
 +	< crypto/internal/backend/fips140;
 +
@@ -3334,7 +3335,7 @@ index 02b52e2ab9c296..7794e12bc86890 100644
  	github.com/microsoft/go-crypto-winnative/internal/bcrypt
  	< github.com/microsoft/go-crypto-winnative/cng;
  
-+	github.com/golang-fips/openssl/v2,
++	github.com/microsoft/go-crypto-openssl/openssl,
 +	github.com/microsoft/go-crypto-winnative/cng,
 +	github.com/microsoft/go-crypto-darwin/xcrypto,
 +	crypto/internal/backend/fips140,
@@ -3355,7 +3356,7 @@ index 02b52e2ab9c296..7794e12bc86890 100644
 +
 +	CRYPTO, FMT, math/big, internal/saferio,
 +	crypto/internal/boring/bbig,
-+	github.com/golang-fips/openssl/v2/bbig,
++	github.com/microsoft/go-crypto-openssl/bbig,
 +	github.com/microsoft/go-crypto-darwin/bbig,
 +	github.com/microsoft/go-crypto-winnative/cng/bbig
 +	< crypto/internal/backend/bbig
diff --git a/patches/0004-Use-crypto-backends.patch b/patches/0004-Use-crypto-backends.patch
index 5e77f23aa51..131d7d110a6 100644
--- a/patches/0004-Use-crypto-backends.patch
+++ b/patches/0004-Use-crypto-backends.patch
@@ -207,7 +207,7 @@ index 4aaf46b5d0f0dc..ec58a217400caa 100644
  env GO111MODULE=off
  
 +# Disable systemcrypto while evaluating test dependencies to avoid importing
-+# vendored crypto module dependencies like golang-fips/openssl. This test script
++# vendored crypto module dependencies like go-crypto-openssl. This test script
 +# is not set up to handle any vendored libraries being imported other than
 +# golang.org/x/net/http2/hpack, so we must make sure it is the only one.
 +#
@@ -245,7 +245,7 @@ index acbebf28598a9c..5f6d8a91ea384c 100644
  			*mode = BuildModePIE
  		default:
 diff --git a/src/cmd/link/internal/ld/lib.go b/src/cmd/link/internal/ld/lib.go
-index 9cbc12919f1d00..f61d9515e4d3b0 100644
+index 9cbc12919f1d00..e64a9c5299e95a 100644
 --- a/src/cmd/link/internal/ld/lib.go
 +++ b/src/cmd/link/internal/ld/lib.go
 @@ -1177,6 +1177,12 @@ var hostobj []Hostobj
@@ -255,9 +255,9 @@ index 9cbc12919f1d00..f61d9515e4d3b0 100644
 +	"vendor/github.com/microsoft/go-crypto-darwin/internal/cryptokit",
 +	"vendor/github.com/microsoft/go-crypto-darwin/internal/commoncrypto",
 +	"vendor/github.com/microsoft/go-crypto-darwin/internal/security",
-+	"vendor/github.com/golang-fips/openssl/v2/internal/ossl",
-+	"vendor/github.com/golang-fips/openssl/v2/osslsetup",
-+	"vendor/github.com/golang-fips/openssl/v2",
++	"vendor/github.com/microsoft/go-crypto-openssl/internal/ossl",
++	"vendor/github.com/microsoft/go-crypto-openssl/osslsetup",
++	"vendor/github.com/microsoft/go-crypto-openssl/openssl",
  	"crypto/internal/boring",
  	"crypto/internal/boring/syso",
  	"crypto/x509",

From cb8a4353dadbb7bc94af993d5428a1212689b3ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 22 May 2026 10:40:03 +0000
Subject: [PATCH 871/887] build(deps): bump golang.org/x/net from 0.54.0 to
 0.55.0 in /eng/_util

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 353a3db41f9..98c2d1bf817 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
 	github.com/microsoft/go-infra v0.0.13
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
-	golang.org/x/net v0.54.0
+	golang.org/x/net v0.55.0
 )
 
 require (
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 318abc4e41f..73f6a2b3ea5 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -53,8 +53,8 @@ go.yaml.in/yaml/v4 v4.0.0-rc.4 h1:UP4+v6fFrBIb1l934bDl//mmnoIZEDK0idg1+AIvX5U=
 go.yaml.in/yaml/v4 v4.0.0-rc.4/go.mod h1:aZqd9kCMsGL7AuUv/m/PvWLdg5sjJsZ4oHDEnfPPfY0=
 golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
 golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
-golang.org/x/net v0.54.0 h1:2zJIZAxAHV/OHCDTCOHAYehQzLfSXuf/5SoL/Dv6w/w=
-golang.org/x/net v0.54.0/go.mod h1:Sj4oj8jK6XmHpBZU/zWHw3BV3abl4Kvi+Ut7cQcY+cQ=
+golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
+golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc=

From 081f267a01389e9e34f8be2d0e9824e73c969b56 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 22 May 2026 10:40:34 +0000
Subject: [PATCH 872/887] build(deps): bump
 microsoft/go-infra/.github/workflows/check-line-endings.yml

Bumps [microsoft/go-infra/.github/workflows/check-line-endings.yml](https://github.com/microsoft/go-infra) from 0.0.13 to 0.0.14.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/f4e3833067a0e64dbf9581e3e4d2df2a353f6dd0...eae52708dd530100eb695850bfc7f994dd9340d3)

---
updated-dependencies:
- dependency-name: microsoft/go-infra/.github/workflows/check-line-endings.yml
  dependency-version: 0.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/check-line-endings.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check-line-endings.yml b/.github/workflows/check-line-endings.yml
index ec9c12e13e1..faa5f00a596 100644
--- a/.github/workflows/check-line-endings.yml
+++ b/.github/workflows/check-line-endings.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   check-line-endings:
-    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@f4e3833067a0e64dbf9581e3e4d2df2a353f6dd0 # v0.0.13
+    uses: microsoft/go-infra/.github/workflows/check-line-endings.yml@eae52708dd530100eb695850bfc7f994dd9340d3 # v0.0.14

From 6764c85ca8d5d9cefc0eac52a9faede1565a4ad5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 22 May 2026 11:52:19 +0000
Subject: [PATCH 873/887] build(deps): bump github.com/microsoft/go-infra in
 /eng/_util

Bumps [github.com/microsoft/go-infra](https://github.com/microsoft/go-infra) from 0.0.13 to 0.0.14.
- [Release notes](https://github.com/microsoft/go-infra/releases)
- [Commits](https://github.com/microsoft/go-infra/compare/v0.0.13...v0.0.14)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-infra
  dependency-version: 0.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 eng/_util/go.mod | 2 +-
 eng/_util/go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/eng/_util/go.mod b/eng/_util/go.mod
index 98c2d1bf817..e9329ee1503 100644
--- a/eng/_util/go.mod
+++ b/eng/_util/go.mod
@@ -8,7 +8,7 @@ go 1.25.0
 
 require (
 	github.com/golang-jwt/jwt/v5 v5.3.1
-	github.com/microsoft/go-infra v0.0.13
+	github.com/microsoft/go-infra v0.0.14
 	github.com/microsoft/go-infra/goinstallscript v1.2.0
 	golang.org/x/net v0.55.0
 )
diff --git a/eng/_util/go.sum b/eng/_util/go.sum
index 73f6a2b3ea5..0b092108aaf 100644
--- a/eng/_util/go.sum
+++ b/eng/_util/go.sum
@@ -31,8 +31,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5 h1:YH424zrwLTlyHSH/GzLMJeu5zhYVZSx5RQxGKm1h96s=
 github.com/microsoft/azure-devops-go-api/azuredevops v1.0.0-b5/go.mod h1:PoGiBqKSQK1vIfQ+yVaFcGjDySHvym6FM1cNYnwzbrY=
-github.com/microsoft/go-infra v0.0.13 h1:s7ymSsDJagh35CYuJDc8GJdBqtZ5sE696oi7mxRMnvI=
-github.com/microsoft/go-infra v0.0.13/go.mod h1:+NF5K79FJNpFKRPX7J9g9tZ2NFZa9dM751xWPpF3IgY=
+github.com/microsoft/go-infra v0.0.14 h1:JfMAEtUWk2sAKNyYirdph8BoKrjCKlt/vMloBy70rtg=
+github.com/microsoft/go-infra v0.0.14/go.mod h1:+NF5K79FJNpFKRPX7J9g9tZ2NFZa9dM751xWPpF3IgY=
 github.com/microsoft/go-infra/goinstallscript v1.2.0 h1:ArYnZHsmv0jnpeDZdFACBUxSmhmYl+Vof8sfk19aYZI=
 github.com/microsoft/go-infra/goinstallscript v1.2.0/go.mod h1:SFsdKAEHdmGsGoh8FkksVaxoQ3rnnJ/TBqN09Ml/0Cw=
 github.com/mitchellh/copystructure v1.2.0 h1:vpKXTN4ewci03Vljg/q9QvCGUDttBOGBIa15WveJJGw=

From 29843e3e2d9ba48de5f7b9cf994029a3b0fe7aab Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 22 May 2026 16:03:44 +0000
Subject: [PATCH 874/887] Update submodule to latest master (cc623858):
 runtime/pprof: update test's expected frame count

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 04ed01963e1..cc623858f6c 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 04ed01963e1b2ec2f801416988cb7d57b7e13b36
+Subproject commit cc623858f6c58767931f381b3ab3821228d9dc17

From bba93ff36cb16c18d86e51610a59704c622a55a9 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Mon, 25 May 2026 10:39:25 +0200
Subject: [PATCH 875/887] fix conflicts

---
 patches/0001-Vendor-external-dependencies.patch | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 3411b570fcb..7bcc747a110 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -527,7 +527,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index df4fba11865b84..c16e08c45e76b8 100644
+index 29b78693abd787..dbc87f66957dcb 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
@@ -536,11 +536,11 @@ index df4fba11865b84..c16e08c45e76b8 100644
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
- 	golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589
+ 	golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.36.1-0.20260513122029-343ee60345a1
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index b8531a556a60ab..4173afb82bbd89 100644
+index 929e1c34dcbec1..b873d102f0a9f7 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
@@ -553,7 +553,7 @@ index b8531a556a60ab..4173afb82bbd89 100644
 +github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
- golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589 h1:vhLfA6kUzRvCYV5uFBJbdMndztX1STqGC8GmQJsuldY=
+ golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97 h1:OEbDVxixMxnrAI3whhcFkCb0rPrEHwxeSSUMdN0V414=
 diff --git a/src/cmd/internal/telemetry/counter/deps_ignore.go b/src/cmd/internal/telemetry/counter/deps_ignore.go
 new file mode 100644
 index 00000000000000..d3155d34977b32
@@ -2220,7 +2220,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index b8a8f795ec2475..0844d267c939ea 100644
+index f3ed9c985e7bf5..96de94b746e601 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2238,7 +2238,7 @@ index b8a8f795ec2475..0844d267c939ea 100644
 +# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
- # golang.org/x/arch v0.27.1-0.20260513003155-2ebc08890589
+ # golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
  ## explicit; go 1.25.0
  golang.org/x/arch/arm/armasm
 diff --git a/src/crypto/internal/backend/deps_ignore.go b/src/crypto/internal/backend/deps_ignore.go
@@ -2298,7 +2298,7 @@ index 43554ff45c183e..01f4f244d6f7be 100644
  golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
  golang.org/x/net v0.54.1-0.20260509022215-ad8140e0aa2e h1:ITxjUIeFp/ACbvnNlOZLoDmomcET3Yt4lFMgeqBebXk=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 25cb06182cae3d..02b52e2ab9c296 100644
+index 25cb06182cae3d..920e72e5cdbb9d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -153,6 +153,13 @@ var depsRules = `
@@ -2397,7 +2397,7 @@ index 25cb06182cae3d..02b52e2ab9c296 100644
  	}
  	fset := token.NewFileSet()
 diff --git a/src/go/build/vendor_test.go b/src/go/build/vendor_test.go
-index 7f6237ffd59c11..8f68bc361081f1 100644
+index 7f6237ffd59c11..18a3b42927d800 100644
 --- a/src/go/build/vendor_test.go
 +++ b/src/go/build/vendor_test.go
 @@ -22,6 +22,10 @@ var allowedPackagePrefixes = []string{

From 6ffd85c30da3272c2ffba0a39662ac7090e20c9e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 16:21:45 +0000
Subject: [PATCH 876/887] Update submodule to latest master (9da73fb7):
 cmd/go/internal/envcmd: print a default value for GOBIN

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index cc623858f6c..9da73fb7025 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit cc623858f6c58767931f381b3ab3821228d9dc17
+Subproject commit 9da73fb7025cd64b71608241517d6cb17735d854

From 040e938b44ce660ce59c0c418437c4319282ed75 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 21:34:36 +0100
Subject: [PATCH 877/887] build(deps): bump github/codeql-action from 4.35.5 to
 4.36.0 (#2311)

---
 .github/workflows/codeql.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 110248f748a..334cc5409fa 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -23,16 +23,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+        uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+        uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           working-directory: eng/_util
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+        uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           category: /language:go

From 466d3f4dc43426eb8079b1eefc631bfbb689af2b Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Tue, 26 May 2026 08:30:30 +0100
Subject: [PATCH 878/887] resolve conflicts

---
 patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
index 2132d881236..d8a22065513 100644
--- a/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
+++ b/patches/0002-Add-crypto-backend-GOEXPERIMENTs.patch
@@ -61,10 +61,10 @@ index 74cafe9613917d..31ce076273aba2 100644
  // Additional information available from 'go env' but not read from the environment:
  //
 diff --git a/src/cmd/go/internal/envcmd/env.go b/src/cmd/go/internal/envcmd/env.go
-index ed23b856f132c6..58ce4adbc4e394 100644
+index 3d72c368b088a2..4fe28740a6e3c2 100644
 --- a/src/cmd/go/internal/envcmd/env.go
 +++ b/src/cmd/go/internal/envcmd/env.go
-@@ -125,6 +125,7 @@ func MkEnv() []cfg.EnvVar {
+@@ -124,6 +124,7 @@ func MkEnv() []cfg.EnvVar {
  		{Name: "GOTOOLDIR", Value: build.ToolDir},
  		{Name: "GOVCS", Value: cfg.GOVCS},
  		{Name: "GOVERSION", Value: runtime.Version()},
@@ -72,12 +72,12 @@ index ed23b856f132c6..58ce4adbc4e394 100644
  	}
  
  	for i := range env {
-@@ -133,7 +134,7 @@ func MkEnv() []cfg.EnvVar {
+@@ -132,7 +133,7 @@ func MkEnv() []cfg.EnvVar {
  			if env[i].Value != "on" && env[i].Value != "" {
  				env[i].Changed = true
  			}
--		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS":
-+		case "GOBIN", "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS", "MS_GO_NOSYSTEMCRYPTO":
+-		case "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS":
++		case "GOEXPERIMENT", "GOFLAGS", "GOINSECURE", "GOPACKAGESDRIVER", "GOPRIVATE", "GOTMPDIR", "GOVCS", "MS_GO_NOSYSTEMCRYPTO":
  			if env[i].Value != "" {
  				env[i].Changed = true
  			}

From eb04310c4c147db8f771d5be7c3c5a03280648d9 Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Tue, 26 May 2026 10:24:24 +0100
Subject: [PATCH 879/887] telemetry: add msgo/ci counter (#2314)

* telemetry: add msgo/ci counter

* remove legacy counters
---
 eng/doc/AdditionalFeatures.md                 |   3 +-
 eng/doc/MigrationGuide.md                     |   3 +-
 eng/doc/README.md                             |   1 +
 eng/doc/Telemetry.md                          |  75 +++++++++
 .../0001-Vendor-external-dependencies.patch   | 144 +++++++++++++++---
 patches/0009-Add-appinsights-telemetry.patch  |  20 ++-
 6 files changed, 220 insertions(+), 26 deletions(-)
 create mode 100644 eng/doc/Telemetry.md

diff --git a/eng/doc/AdditionalFeatures.md b/eng/doc/AdditionalFeatures.md
index b109c7aab82..f6081880aa9 100644
--- a/eng/doc/AdditionalFeatures.md
+++ b/eng/doc/AdditionalFeatures.md
@@ -11,7 +11,8 @@ If it's critical to you to understand the exact implementation details of all ch
 
 The Microsoft build of Go collects [opt-out (enabled by default) toolset telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/).
 
-See the [Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
+See the [Telemetry documentation](/eng/doc/Telemetry.md) for details on what is collected and how to opt out.
+See also the [Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
 
 ## System-provided cryptography backend
 
diff --git a/eng/doc/MigrationGuide.md b/eng/doc/MigrationGuide.md
index c4918c63517..2792447ea40 100644
--- a/eng/doc/MigrationGuide.md
+++ b/eng/doc/MigrationGuide.md
@@ -8,7 +8,8 @@ It's a fork, and some runtime behavior slightly differs, but in most cases it ha
 We expect that most projects don't require any Go code changes to work with the Microsoft build of Go.
 
 Note that the Microsoft build of Go has [toolset telemetry enabled by default](https://devblogs.microsoft.com/go/microsoft-go-telemetry/) (opt-out telemetry).
-See [the Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
+See the [Telemetry documentation](/eng/doc/Telemetry.md) for details on what is collected and how to opt out.
+See also [the Data Collection policy for the Microsoft build of Go](/README.md#data-collection).
 
 ## Quick start
 
diff --git a/eng/doc/README.md b/eng/doc/README.md
index aaed7c9848b..c7641610b37 100644
--- a/eng/doc/README.md
+++ b/eng/doc/README.md
@@ -4,6 +4,7 @@ by reading the infrastructure code itself.
 
 For cryptography information, see the [CrossPlatformCryptography.md](CrossPlatformCryptography.md) doc.
 For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
+For telemetry details, see the [Telemetry.md](Telemetry.md) doc.
 
 The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.
 The [release-branch-links.json](release-branch-links.json) file contains the same data in JSON format suitable for parsing.
diff --git a/eng/doc/Telemetry.md b/eng/doc/Telemetry.md
new file mode 100644
index 00000000000..8c70e60f258
--- /dev/null
+++ b/eng/doc/Telemetry.md
@@ -0,0 +1,75 @@
+# Telemetry in the Microsoft build of Go
+
+The Microsoft build of Go collects opt-out (enabled by default) toolset telemetry.
+Telemetry is sent to Microsoft via Azure Application Insights when `go build`, `go install`, or `go run` is executed.
+No telemetry is collected for other `go` subcommands (e.g. `go test`, `go vet`, `go fmt`).
+
+For the blog post announcing this feature, see [Microsoft Go Telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/).
+
+## What is collected
+
+All telemetry data consists of **counters** — simple event names that are incremented.
+No source code, file paths, module contents, or personally identifiable information is collected.
+Each telemetry session is assigned a random session ID that cannot be linked back to a user.
+
+The counters collected are defined in the [telemetry upload configuration](/go/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json) and are listed below.
+
+### Invocation counter
+
+| Counter | Description |
+|---|---|
+| `go/invocations` | Incremented once per `go` command invocation. |
+
+### Subcommand
+
+| Counter | Description |
+|---|---|
+| `go/subcommand:{build,install,run}` | Which subcommand was used. |
+
+### Target platform
+
+| Counter | Description |
+|---|---|
+| `go/platform/target/port:<GOOS>-<GOARCH>` | The target platform port (e.g. `linux-amd64`, `windows-arm64`). |
+| `go/cgo:{enabled,disabled}` | Whether cgo was enabled for the build. |
+
+### GOEXPERIMENT settings
+
+| Counter | Description |
+|---|---|
+| `go/goexperiment:<name>` | Each active `GOEXPERIMENT` value that differs from the baseline. Only Microsoft-specific experiments are uploaded: `systemcrypto`, `nosystemcrypto`, `opensslcrypto`, `cngcrypto`, `darwincrypto`, `ms_nocgo_opensslcrypto`, and `ms_tls_config_schannel`. |
+
+### CI environment detection
+
+| Counter | Description |
+|---|---|
+| `msgo/ci:<provider>` | Detected CI provider, if any. Values: `azdo`, `github`, `gitlab`, `appveyor`, `travis`, `circleci`, `aws_codebuild`, `jenkins`, `teamcity`, `google_cloud_build`. Detection is based on well-known environment variables set by each CI system. |
+
+### System cryptography
+
+| Counter | Description |
+|---|---|
+| `msgo/systemcrypto:{enabled,disabled}` | Whether the system cryptography backend is enabled on platforms that support it. |
+
+## What is NOT collected
+
+- No source code or file contents.
+- No file paths from the local file system.
+- No environment variable values (only the presence of specific CI-related variables is checked).
+- No network or authentication information.
+- No personally identifiable information (PII).
+
+## How to opt out
+
+Set the `MS_GOTOOLCHAIN_TELEMETRY_ENABLED` environment variable to `0`.
+
+This completely disables Microsoft telemetry collection. When disabled, no data is sent to Application Insights.
+
+> [!NOTE]
+> This setting only controls Microsoft-specific telemetry. The upstream Go toolchain has its own [telemetry system](https://go.dev/doc/telemetry) controlled separately via `go telemetry`.
+
+## Privacy
+
+Microsoft's privacy statement is located at https://go.microsoft.com/fwlink/?LinkID=824704.
+
+See the [Data Collection policy](/README.md#data-collection) in the repository README for more information.
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 7bcc747a110..d379ef6f3db 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -13,9 +13,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/telemetry/counter/deps_ignore.go |   17 +
  .../microsoft/go-infra/telemetry/LICENSE      |   21 +
  .../microsoft/go-infra/telemetry/README.md    |    9 +
+ .../microsoft/go-infra/telemetry/ci.go        |   97 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   76 +
+ .../go-infra/telemetry/config/config.json     |   79 +
  .../go-infra/telemetry/counter/counter.go     |   63 +
  .../telemetry/internal/appinsights/README.md  |   12 +
  .../telemetry/internal/appinsights/client.go  |  192 ++
@@ -270,10 +271,11 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 262 files changed, 35630 insertions(+), 7 deletions(-)
+ 263 files changed, 35730 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
+ create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/ci.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
@@ -527,30 +529,30 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 29b78693abd787..dbc87f66957dcb 100644
+index 29b78693abd787..ffcaa3d7848408 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
  	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a
  	golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
  	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
  	golang.org/x/mod v0.36.1-0.20260513122029-343ee60345a1
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 929e1c34dcbec1..b873d102f0a9f7 100644
+index 929e1c34dcbec1..68262698d63570 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
  github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76 h1:nP1tNhLNK4ceYOGVEfAY44tj/5Q0vq/pOqZggUzXHXc=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76 h1:LESU567RNJA+E3w8PyUdwbswh/PY8vF0xvsf3fUERMI=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a h1:1yIH/VJLOUUWw2yVBEqAqDsakqIsx1TyjHv3rQuVv2A=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a h1:F/bJDa61Hj7ISaUMyErZ9m0GIgHSaLMrhf2f1Pja9Io=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97 h1:OEbDVxixMxnrAI3whhcFkCb0rPrEHwxeSSUMdN0V414=
@@ -619,6 +621,109 @@ index 00000000000000..5fc9356268f64a
 +
 +The [`appinsights`](appinsights) package is an alternative client that can send more arbitrary telemetry event data to Application Insights.
 +It only supports a few features of Application Insights that are used in other projects maintained by the Microsoft build of Go team.
+diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/ci.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/ci.go
+new file mode 100644
+index 00000000000000..bb3188f26ead88
+--- /dev/null
++++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/ci.go
+@@ -0,0 +1,97 @@
++// Copyright (c) Microsoft Corporation.
++// Licensed under the MIT License.
++
++package telemetry
++
++import "strings"
++
++// DetectCI inspects the given environment variables to determine which CI
++// system is most likely in use, if any. The env parameter should be in the same
++// format as os.Environ() (i.e. each entry is "KEY=VALUE"). It returns a short
++// identifier matching the go/ci counter values, or "" if no CI system is
++// detected.
++func DetectCI(env []string) string {
++	m := envMap(env)
++
++	// Azure Pipelines
++	// https://docs.microsoft.com/en-us/azure/devops/pipelines/build/variables#system-variables-devops-services
++	if isTrue(m["TF_BUILD"]) {
++		return "azdo"
++	}
++
++	// GitHub Actions
++	// https://docs.github.com/en/actions/learn-github-actions/environment-variables#default-environment-variables
++	if isTrue(m["GITHUB_ACTIONS"]) {
++		return "github"
++	}
++
++	// GitLab CI
++	// https://docs.gitlab.com/ee/ci/variables/predefined_variables.html
++	if m["GITLAB_CI"] != "" {
++		return "gitlab"
++	}
++
++	// AppVeyor
++	// https://www.appveyor.com/docs/environment-variables/
++	if isTrue(m["APPVEYOR"]) {
++		return "appveyor"
++	}
++
++	// Travis CI
++	// https://docs.travis-ci.com/user/environment-variables/#default-environment-variables
++	if isTrue(m["TRAVIS"]) {
++		return "travis"
++	}
++
++	// CircleCI
++	// https://circleci.com/docs/2.0/env-vars/#built-in-environment-variables
++	if isTrue(m["CIRCLECI"]) {
++		return "circleci"
++	}
++
++	// AWS CodeBuild
++	// https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-env-vars.html
++	if m["CODEBUILD_BUILD_ID"] != "" && m["AWS_REGION"] != "" {
++		return "aws_codebuild"
++	}
++
++	// TeamCity
++	// https://www.jetbrains.com/help/teamcity/predefined-build-parameters.html#Predefined+Server+Build+Parameters
++	if m["TEAMCITY_VERSION"] != "" {
++		return "teamcity"
++	}
++
++	// Jenkins
++	// https://github.com/jenkinsci/jenkins/blob/master/core/src/main/resources/jenkins/model/CoreEnvironmentContributor/buildEnv.groovy
++	if m["BUILD_ID"] != "" && m["BUILD_URL"] != "" {
++		return "jenkins"
++	}
++
++	// Google Cloud Build
++	// https://cloud.google.com/build/docs/configuring-builds/substitute-variable-values#using_default_substitutions
++	if m["BUILD_ID"] != "" && m["PROJECT_ID"] != "" {
++		return "google_cloud_build"
++	}
++
++	return ""
++}
++
++// envMap converts an os.Environ()-style slice into a map for fast lookup.
++func envMap(env []string) map[string]string {
++	m := make(map[string]string, len(env))
++	for _, e := range env {
++		if k, v, ok := strings.Cut(e, "="); ok {
++			m[k] = v
++		}
++	}
++	return m
++}
++
++// isTrue reports whether the value is a common boolean-true string.
++// Matches the logic in dotnet/sdk EnvironmentVariableParser.ParseBool.
++func isTrue(v string) bool {
++	return v == "1" ||
++		strings.EqualFold(v, "true") ||
++		strings.EqualFold(v, "yes") ||
++		strings.EqualFold(v, "on")
++}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/LICENSE
 new file mode 100644
 index 00000000000000..9e841e7a26e4eb
@@ -665,10 +770,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..4b16ad97f35d1a
+index 00000000000000..89ce84ff435575
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,76 @@
+@@ -0,0 +1,79 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -730,16 +835,19 @@ index 00000000000000..4b16ad97f35d1a
 +					"Name": "go/subcommand:{build,install,run}"
 +				},
 +				{
-+					"Name": "go/platform/target/goos:{aix,android,darwin,dragonfly,freebsd,hurd,illumos,ios,js,linux,nacl,netbsd,openbsd,plan9,solaris,wasip1,windows,zos}"
++					"Name": "go/platform/target/port:{aix-ppc64,android-386,android-amd64,android-arm,android-arm64,darwin-amd64,darwin-arm64,dragonfly-amd64,freebsd-386,freebsd-amd64,freebsd-arm,freebsd-arm64,freebsd-riscv64,illumos-amd64,ios-amd64,ios-arm64,js-wasm,linux-386,linux-amd64,linux-arm,linux-arm64,linux-loong64,linux-mips,linux-mips64,linux-mips64le,linux-mipsle,linux-ppc64,linux-ppc64le,linux-riscv64,linux-s390x,linux-sparc64,netbsd-386,netbsd-amd64,netbsd-arm,netbsd-arm64,openbsd-386,openbsd-amd64,openbsd-arm,openbsd-arm64,openbsd-ppc64,openbsd-riscv64,plan9-386,plan9-amd64,plan9-arm,solaris-amd64,wasip1-wasm,windows-386,windows-amd64,windows-arm64}"
 +				},
 +				{
-+					"Name": "go/platform/target/goarch:{386,amd64,amd64p32,arm,arm64,arm64be,armbe,loong64,mips,mips64,mips64le,mips64p32,mips64p32le,mipsle,ppc,ppc64,ppc64le,riscv,riscv64,s390,s390x,sparc,sparc64,wasm}"
++					"Name": "go/cgo:{enabled,disabled}"
 +				},
 +				{
-+					"Name": "go/cgo:{enabled,disabled}"
++					"Name": "msgo/ci:{appveyor,aws_codebuild,azdo,circleci,github,gitlab,google_cloud_build,jenkins,teamcity,travis}"
 +				},
 +				{
 +					"Name": "msgo/systemcrypto:{enabled,disabled}"
++				},
++				{
++					"Name": "msgo/module:*"
 +				}
 +			]
 +		}
@@ -2220,14 +2328,14 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index f3ed9c985e7bf5..96de94b746e601 100644
+index f3ed9c985e7bf5..67e1651ba7e3c5 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260513084116-8db604e72b76
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a
 +## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -2235,7 +2343,7 @@ index f3ed9c985e7bf5..96de94b746e601 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260513084116-8db604e72b76
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index 9bb8d64efb1..53fc64f914f 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -5,14 +5,14 @@ Subject: [PATCH] Add appinsights telemetry
 
 ---
  README.md                                     | 15 +++++
- .../internal/telemetrystats/telemetrystats.go | 10 ++++
+ .../internal/telemetrystats/telemetrystats.go | 17 ++++++
  src/cmd/go/main.go                            |  8 +++
  src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++++
  src/cmd/go/script_test.go                     | 10 ++++
  src/cmd/go/scriptcmds_test.go                 | 22 ++++++++
  src/cmd/internal/telemetry/counter/counter.go | 54 +++++++++++++++++-
  .../telemetry/counter/counter_bootstrap.go    |  3 +
- 8 files changed, 177 insertions(+), 1 deletion(-)
+ 8 files changed, 184 insertions(+), 1 deletion(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -40,22 +40,30 @@ index 71c9d1dc299388..8cab5daec4da54 100644
 +these practices.
 \ No newline at end of file
 diff --git a/src/cmd/go/internal/telemetrystats/telemetrystats.go b/src/cmd/go/internal/telemetrystats/telemetrystats.go
-index c6e58935bb0ee2..5aec1694aaae96 100644
+index c6e58935bb0ee2..0cd7d3582c9ee6 100644
 --- a/src/cmd/go/internal/telemetrystats/telemetrystats.go
 +++ b/src/cmd/go/internal/telemetrystats/telemetrystats.go
-@@ -11,6 +11,8 @@ import (
+@@ -11,7 +11,12 @@ import (
  	"cmd/go/internal/cfg"
  	"cmd/go/internal/modload"
  	"cmd/internal/telemetry/counter"
 +	"internal/buildcfg"
 +	"internal/platform"
++	"os"
  	"strings"
++
++	"github.com/microsoft/go-infra/telemetry"
  )
  
-@@ -39,6 +41,14 @@ func incrementConfig() {
+ func Increment() {
+@@ -39,6 +44,18 @@ func incrementConfig() {
  		counter.Inc("go/cgo:disabled")
  	}
  
++	if ci := telemetry.DetectCI(os.Environ()); ci != "" {
++		counter.Inc("msgo/ci:" + ci)
++	}
++
 +	if platform.SystemCryptoSupported(cfg.Goos, cfg.Goarch) {
 +		if buildcfg.SystemCryptoDisabled {
 +			counter.Inc("msgo/systemcrypto:disabled")
@@ -68,7 +76,7 @@ index c6e58935bb0ee2..5aec1694aaae96 100644
  	counter.Inc("go/platform/target/goarch:" + cfg.Goarch)
  	counter.Inc("go/platform/target/port:" + cfg.Goos + "-" + cfg.Goarch)
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index 8cdfd9196e4cb1..3f4a4d8f912969 100644
+index bba11a2fdeaaa6..cb7801588662a2 100644
 --- a/src/cmd/go/main.go
 +++ b/src/cmd/go/main.go
 @@ -110,6 +110,14 @@ func main() {

From 873caac9c16b660903bbcb2939d95e721def9ef4 Mon Sep 17 00:00:00 2001
From: qmuntal <quimmuntal@gmail.com>
Date: Tue, 26 May 2026 14:42:30 +0200
Subject: [PATCH 880/887] use FIPSCapable

---
 .../0001-Vendor-external-dependencies.patch   | 359 +++++++++---------
 ...03-Implement-crypto-internal-backend.patch |  18 +-
 2 files changed, 183 insertions(+), 194 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index d379ef6f3db..390e56a14e4 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -207,39 +207,39 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../go-crypto-openssl/openssl/aes.go          |  158 ++
  .../go-crypto-openssl/openssl/big.go          |   14 +
  .../openssl/chacha20poly1305.go               |  152 +
- .../go-crypto-openssl/openssl/cipher.go       |  666 +++++
+ .../go-crypto-openssl/openssl/cipher.go       |  665 +++++
  .../go-crypto-openssl/openssl/const.go        |  109 +
  .../go-crypto-openssl/openssl/cshake.go       |  256 ++
  .../go-crypto-openssl/openssl/des.go          |  121 +
- .../go-crypto-openssl/openssl/dsa.go          |  306 ++
+ .../go-crypto-openssl/openssl/dsa.go          |  296 ++
  .../microsoft/go-crypto-openssl/openssl/ec.go |  132 +
- .../go-crypto-openssl/openssl/ecdh.go         |  341 +++
- .../go-crypto-openssl/openssl/ecdsa.go        |  220 ++
+ .../go-crypto-openssl/openssl/ecdh.go         |  331 +++
+ .../go-crypto-openssl/openssl/ecdsa.go        |  212 ++
  .../go-crypto-openssl/openssl/ed25519.go      |  209 ++
- .../go-crypto-openssl/openssl/evp.go          |  615 ++++
+ .../go-crypto-openssl/openssl/evp.go          |  616 ++++
  .../go-crypto-openssl/openssl/hash.go         |  521 ++++
- .../go-crypto-openssl/openssl/hkdf.go         |  330 +++
- .../go-crypto-openssl/openssl/hmac.go         |  280 ++
+ .../go-crypto-openssl/openssl/hkdf.go         |  312 +++
+ .../go-crypto-openssl/openssl/hmac.go         |  269 ++
  .../go-crypto-openssl/openssl/mldsa.go        |  449 +++
  .../go-crypto-openssl/openssl/mlkem.go        |  369 +++
- .../go-crypto-openssl/openssl/openssl.go      |  183 ++
+ .../go-crypto-openssl/openssl/openssl.go      |  182 ++
  .../go-crypto-openssl/openssl/openssl_cgo.go  |   17 +
  .../openssl/openssl_nocgo.go                  |   35 +
  .../go-crypto-openssl/openssl/params.go       |  191 ++
- .../go-crypto-openssl/openssl/pbkdf2.go       |   86 +
- .../openssl/provideropenssl.go                |  250 ++
+ .../go-crypto-openssl/openssl/pbkdf2.go       |   82 +
+ .../openssl/provideropenssl.go                |  257 ++
  .../openssl/providersymcrypt.go               |  331 +++
  .../go-crypto-openssl/openssl/rand.go         |   37 +
  .../go-crypto-openssl/openssl/rc4.go          |   76 +
- .../go-crypto-openssl/openssl/rsa.go          |  712 +++++
- .../go-crypto-openssl/openssl/tls1prf.go      |  157 ++
+ .../go-crypto-openssl/openssl/rsa.go          |  706 +++++
+ .../go-crypto-openssl/openssl/tls1prf.go      |  147 +
  .../go-crypto-openssl/openssl/zaes.go         |   87 +
- .../go-crypto-openssl/osslsetup/fips.go       |   69 +
+ .../go-crypto-openssl/osslsetup/fips.go       |  115 +
  .../go-crypto-openssl/osslsetup/init.go       |  170 ++
  .../osslsetup/init_cgo_unix.go                |   34 +
  .../osslsetup/init_nocgo_unix.go              |   35 +
  .../osslsetup/init_windows.go                 |   37 +
- .../go-crypto-openssl/osslsetup/osslsetup.go  |  109 +
+ .../go-crypto-openssl/osslsetup/osslsetup.go  |  123 +
  .../osslsetup/osslsetup_cgo.go                |   12 +
  .../osslsetup/osslsetup_nocgo.go              |   24 +
  .../microsoft/go-crypto-winnative/LICENSE     |   21 +
@@ -271,7 +271,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 263 files changed, 35730 insertions(+), 7 deletions(-)
+ 263 files changed, 35719 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -2378,7 +2378,7 @@ index 00000000000000..f5dc9afe4b0ead
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 8703fad3b226c9..fe3cd514ef512d 100644
+index 8703fad3b226c9..92b03d8db89373 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
@@ -2388,18 +2388,18 @@ index 8703fad3b226c9..fe3cd514ef512d 100644
 +
 +require (
 +	github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b
-+	github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69
++	github.com/microsoft/go-crypto-openssl v0.0.0-20260526094617-f3ee9e48499e
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 43554ff45c183e..01f4f244d6f7be 100644
+index 43554ff45c183e..30e68847197201 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b h1:HADuteQytnLec1jmAOGPGCukWIxObrAm/CBYtVzuo5o=
 +github.com/microsoft/go-crypto-darwin v0.0.3-0.20260512212935-d0ce8397e44b/go.mod h1:QahyqOoEDhEJ08aC1WtiWq691LyNgXq3qrjI4QmdPzM=
-+github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69 h1:gtZRTEEfTbjAKMNbDGXeayGoReqVhBIw+J8QzgWuBEs=
-+github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69/go.mod h1:gJrjX+yWGi9pkbfPVDDh+ZbgjtQoRSXHjb/ZyjwKk34=
++github.com/microsoft/go-crypto-openssl v0.0.0-20260526094617-f3ee9e48499e h1:969cC0h4W/zAzgFu09YW/6MwRkEDTAVlDB1CKiGG+Qs=
++github.com/microsoft/go-crypto-openssl v0.0.0-20260526094617-f3ee9e48499e/go.mod h1:gJrjX+yWGi9pkbfPVDDh+ZbgjtQoRSXHjb/ZyjwKk34=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe h1:WDbUuTTKY8VElMRA3JJ8Quvj9xK9GqEcTiBZ3BF+7mI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
  golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
@@ -26705,10 +26705,10 @@ index 00000000000000..410829738931c7
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go
 new file mode 100644
-index 00000000000000..24615432053f01
+index 00000000000000..10f932a02d0b36
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/cipher.go
-@@ -0,0 +1,666 @@
+@@ -0,0 +1,665 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -26795,8 +26795,7 @@ index 00000000000000..24615432053f01
 +	}
 +	defer func() {
 +		if cipher != nil {
-+			switch major() {
-+			case 3, 4:
++			if major() != 1 {
 +				// On OpenSSL 3, directly operating on a EVP_CIPHER object
 +				// not created by EVP_CIPHER has negative performance
 +				// implications, as cipher operations will have
@@ -27881,10 +27880,10 @@ index 00000000000000..6ae4a6372f8d08
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go
 new file mode 100644
-index 00000000000000..82b7b1081468de
+index 00000000000000..b2c643ab34a0c1
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/dsa.go
-@@ -0,0 +1,306 @@
+@@ -0,0 +1,296 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -27980,7 +27979,7 @@ index 00000000000000..82b7b1081468de
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_pqg(dsa, &p, &q, &g)
-+	case 3, 4:
++	default:
 +		defer func() {
 +			ossl.BN_free(p)
 +			ossl.BN_free(q)
@@ -27995,8 +27994,6 @@ index 00000000000000..82b7b1081468de
 +		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_FFC_G.ptr(), &g); err != nil {
 +			return DSAParameters{}, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +
 +	return DSAParameters{
@@ -28046,7 +28043,7 @@ index 00000000000000..82b7b1081468de
 +	case 1:
 +		dsa := getDSA(pkey)
 +		ossl.DSA_get0_key(dsa, &by, &bx)
-+	case 3, 4:
++	default:
 +		defer func() {
 +			ossl.BN_clear_free(bx)
 +			ossl.BN_free(by)
@@ -28057,8 +28054,6 @@ index 00000000000000..82b7b1081468de
 +		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &bx); err != nil {
 +			return nil, nil, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	return bnToBig(bx), bnToBig(by), nil
 +}
@@ -28077,16 +28072,12 @@ index 00000000000000..82b7b1081468de
 +	switch major() {
 +	case 1:
 +		return newDSA1(params, x, y)
-+	case 3, 4:
-+		return newDSA3(params, x, y)
 +	default:
-+		panic(errUnsupportedVersion())
++		return newDSA3(params, x, y)
 +	}
 +}
 +
 +func newDSA1(params DSAParameters, x, y BigInt) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
 +	dsa, err := ossl.DSA_new()
 +	if err != nil {
 +		return nil, err
@@ -28132,8 +28123,6 @@ index 00000000000000..82b7b1081468de
 +}
 +
 +func newDSA3(params DSAParameters, x, y BigInt) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	bld := newParamBuilder()
 +	defer bld.finalize()
 +
@@ -28331,10 +28320,10 @@ index 00000000000000..d871a04b37942b
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go
 new file mode 100644
-index 00000000000000..7289538d753dc8
+index 00000000000000..60e56dfd573f47
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdh.go
-@@ -0,0 +1,341 @@
+@@ -0,0 +1,331 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -28444,7 +28433,7 @@ index 00000000000000..7289538d753dc8
 +			if bytes, err = encodeEcPoint(group, pt); err != nil {
 +				return nil, err
 +			}
-+		case 3, 4:
++		default:
 +			pkey = k._pkey
 +			if _, err := ossl.EVP_PKEY_up_ref(pkey); err != nil {
 +				return nil, err
@@ -28456,8 +28445,6 @@ index 00000000000000..7289538d753dc8
 +			}
 +			bytes = goBytes(unsafe.Pointer(cbytes), n)
 +			cryptoFree(unsafe.Pointer(cbytes))
-+		default:
-+			panic(errUnsupportedVersion())
 +		}
 +	}
 +	pub := &PublicKeyECDH{pkey, bytes}
@@ -28478,16 +28465,12 @@ index 00000000000000..7289538d753dc8
 +	switch major() {
 +	case 1:
 +		return newECDHPkey1(nid, bytes, isPrivate)
-+	case 3, 4:
-+		return newECDHPkey3(nid, bytes, isPrivate)
 +	default:
-+		panic(errUnsupportedVersion())
++		return newECDHPkey3(nid, bytes, isPrivate)
 +	}
 +}
 +
 +func newECDHPkey1(nid int32, bytes []byte, isPrivate bool) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
 +	key, err := ossl.EC_KEY_new_by_curve_name(nid)
 +	if err != nil {
 +		return nil, err
@@ -28540,8 +28523,6 @@ index 00000000000000..7289538d753dc8
 +}
 +
 +func newECDHPkey3(nid int32, bytes []byte, isPrivate bool) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	bld := newParamBuilder()
 +	defer bld.finalize()
 +	bld.addUTF8String(_OSSL_PKEY_PARAM_GROUP_NAME, ossl.OBJ_nid2sn(nid), 0)
@@ -28650,13 +28631,11 @@ index 00000000000000..7289538d753dc8
 +			if priv == nil {
 +				return nil, nil, fail("missing ECDH private key")
 +			}
-+		case 3, 4:
++		default:
 +			if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_PRIV_KEY.ptr(), &priv); err != nil {
 +				return nil, nil, err
 +			}
 +			defer ossl.BN_clear_free(priv)
-+		default:
-+			panic(errUnsupportedVersion())
 +		}
 +		// We should not leak bit length of the secret scalar in the key.
 +		// For this reason, we use BN_bn2binpad instead of BN_bn2bin with fixed length.
@@ -28678,10 +28657,10 @@ index 00000000000000..7289538d753dc8
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go
 new file mode 100644
-index 00000000000000..d96c368fe1ca76
+index 00000000000000..ad6c0bcb821bc7
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ecdsa.go
-@@ -0,0 +1,220 @@
+@@ -0,0 +1,212 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -28776,7 +28755,7 @@ index 00000000000000..d96c368fe1ca76
 +		}
 +		// Get Z. We don't need to free it, get0 does not increase the reference count.
 +		bd = ossl.EC_KEY_get0_private_key(key)
-+	case 3, 4:
++	default:
 +		if _, err := ossl.EVP_PKEY_get_bn_param(pkey, _OSSL_PKEY_PARAM_EC_PUB_X.ptr(), &bx); err != nil {
 +			return nil, nil, nil, err
 +		}
@@ -28787,8 +28766,6 @@ index 00000000000000..d96c368fe1ca76
 +			return nil, nil, nil, err
 +		}
 +		defer ossl.BN_clear_free(bd)
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +
 +	// Get D.
@@ -28834,16 +28811,12 @@ index 00000000000000..d96c368fe1ca76
 +	switch major() {
 +	case 1:
 +		return newECDSAKey1(nid, bx, by, bd)
-+	case 3, 4:
-+		return newECDSAKey3(nid, bx, by, bd)
 +	default:
-+		panic(errUnsupportedVersion())
++		return newECDSAKey3(nid, bx, by, bd)
 +	}
 +}
 +
 +func newECDSAKey1(nid int32, bx, by, bd ossl.BIGNUM_PTR) (pkey ossl.EVP_PKEY_PTR, err error) {
-+	checkMajorVersion(1)
-+
 +	key, err := ossl.EC_KEY_new_by_curve_name(nid)
 +	if err != nil {
 +		return nil, err
@@ -28866,8 +28839,6 @@ index 00000000000000..d96c368fe1ca76
 +}
 +
 +func newECDSAKey3(nid int32, bx, by, bd ossl.BIGNUM_PTR) (ossl.EVP_PKEY_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	// Create the encoded public key public key from bx and by.
 +	pubBytes, err := generateAndEncodeEcPublicKey(nid, func(group ossl.EC_GROUP_PTR) (ossl.EC_POINT_PTR, error) {
 +		pt, err := ossl.EC_POINT_new(group)
@@ -28904,7 +28875,7 @@ index 00000000000000..d96c368fe1ca76
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go
 new file mode 100644
-index 00000000000000..205b01cd36b206
+index 00000000000000..69565f949d4ac5
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/ed25519.go
 @@ -0,0 +1,209 @@
@@ -28944,7 +28915,7 @@ index 00000000000000..205b01cd36b206
 +			ossl.EVP_PKEY_CTX_free(ctx)
 +			return true
 +		}
-+	case 3, 4:
++	default:
 +		sig, _ := ossl.EVP_SIGNATURE_fetch(nil, _KeyTypeED25519.ptr(), nil)
 +		if sig != nil {
 +			ossl.EVP_SIGNATURE_free(sig)
@@ -29119,10 +29090,10 @@ index 00000000000000..205b01cd36b206
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go
 new file mode 100644
-index 00000000000000..65f4d2ddcbc6fb
+index 00000000000000..3752d3ce4d18bd
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/evp.go
-@@ -0,0 +1,615 @@
+@@ -0,0 +1,616 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -29284,8 +29255,7 @@ index 00000000000000..65f4d2ddcbc6fb
 +	hash.ch = ch
 +	hash.size = int(ossl.EVP_MD_get_size(hash.md))
 +	hash.blockSize = int(ossl.EVP_MD_get_block_size(hash.md))
-+	switch major() {
-+	case 3, 4:
++	if major() != 1 {
 +		// On OpenSSL 3, directly operating on a EVP_MD object
 +		// not created by EVP_MD_fetch has negative performance
 +		// implications, as digest operations will have
@@ -29306,23 +29276,27 @@ index 00000000000000..65f4d2ddcbc6fb
 +	switch major() {
 +	case 1:
 +		hash.provider = providerOSSLDefault
-+	case 3, 4:
++	default:
 +		if prov := ossl.EVP_MD_get0_provider(hash.md); prov != nil {
 +			cname := ossl.OSSL_PROVIDER_get0_name(prov)
++			// Marshalability depends on knowing the EVP_MD_CTX internal
++			// layout for this major (see getOSSLDigetsContext). Untested
++			// majors loaded via GODEBUG=ms_opensslallowuntested=1 leave
++			// marshallable false so MarshalBinary/UnmarshalBinary return
++			// errMarshallUnsupported{} instead of touching unknown memory.
++			known := knownMajor()
 +			switch goString(cname) {
 +			case "default":
 +				hash.provider = providerOSSLDefault
-+				hash.marshallable = hash.magic != ""
++				hash.marshallable = known && hash.magic != ""
 +			case "fips":
 +				hash.provider = providerOSSLFIPS
-+				hash.marshallable = hash.magic != ""
++				hash.marshallable = known && hash.magic != ""
 +			case "symcryptprovider":
 +				hash.provider = providerSymCrypt
-+				hash.marshallable = hash.magic != "" && isSymCryptHashStateSerializable(hash.md)
++				hash.marshallable = known && hash.magic != "" && isSymCryptHashStateSerializable(hash.md)
 +			}
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +
 +	cacheMD.Store(ch, &hash)
@@ -29358,7 +29332,7 @@ index 00000000000000..65f4d2ddcbc6fb
 +		if _, err := ossl.EVP_PKEY_keygen(ctx, &pkey); err != nil {
 +			return nil, err
 +		}
-+	case 3, 4:
++	default:
 +		var err error
 +		switch id {
 +		case ossl.EVP_PKEY_RSA:
@@ -29385,8 +29359,6 @@ index 00000000000000..65f4d2ddcbc6fb
 +		if err != nil {
 +			return nil, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +
 +	return pkey, nil
@@ -29511,10 +29483,10 @@ index 00000000000000..65f4d2ddcbc6fb
 +		copy((*[1 << 30]byte)(unsafe.Pointer(clabel))[:len(label)], label)
 +		var err error
 +		switch major() {
-+		case 3, 4:
-+			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
-+		default:
++		case 1:
 +			_, err = ossl.EVP_PKEY_CTX_ctrl(ctx, ossl.EVP_PKEY_RSA, -1, ossl.EVP_PKEY_CTRL_RSA_OAEP_LABEL, int32(len(label)), unsafe.Pointer(clabel))
++		default:
++			_, err = ossl.EVP_PKEY_CTX_set0_rsa_oaep_label(ctx, unsafe.Slice(clabel, len(label)))
 +		}
 +		if err != nil {
 +			cryptoFree(unsafe.Pointer(clabel))
@@ -30267,10 +30239,10 @@ index 00000000000000..020323eb7be25e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go
 new file mode 100644
-index 00000000000000..75207faf1aa043
+index 00000000000000..6ae76c729a7aa0
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hkdf.go
-@@ -0,0 +1,330 @@
+@@ -0,0 +1,312 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -30289,11 +30261,9 @@ index 00000000000000..75207faf1aa043
 +	switch major() {
 +	case 1:
 +		return true
-+	case 3, 4:
++	default:
 +		_, err := fetchHKDF3()
 +		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 +
@@ -30302,18 +30272,14 @@ index 00000000000000..75207faf1aa043
 +	switch major() {
 +	case 1:
 +		return false
-+	case 3, 4:
++	default:
 +		// TLS13-KDF is available in OpenSSL 3.0.0 and later.
 +		_, err := fetchTLS13_KDF()
 +		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 +
 +func newHKDFCtx1(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (ctx ossl.EVP_PKEY_CTX_PTR, err error) {
-+	checkMajorVersion(1)
-+
 +	ctx, err = ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_HKDF, nil)
 +	if err != nil {
 +		return nil, err
@@ -30402,7 +30368,7 @@ index 00000000000000..75207faf1aa043
 +			return nil, err
 +		}
 +		return out[:keylen], nil
-+	case 3, 4:
++	default:
 +		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXTRACT_ONLY, secret, salt, nil, nil)
 +		if err != nil {
 +			return nil, err
@@ -30417,8 +30383,6 @@ index 00000000000000..75207faf1aa043
 +			return nil, err
 +		}
 +		return out, nil
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 +
@@ -30451,7 +30415,7 @@ index 00000000000000..75207faf1aa043
 +		if _, err := ossl.EVP_PKEY_derive(ctx, out, &keylen); err != nil {
 +			return nil, err
 +		}
-+	case 3, 4:
++	default:
 +		ctx, err := newHKDFCtx3(md, ossl.EVP_KDF_HKDF_MODE_EXPAND_ONLY, nil, nil, pseudorandomKey, info)
 +		if err != nil {
 +			return nil, err
@@ -30466,8 +30430,6 @@ index 00000000000000..75207faf1aa043
 +		if _, err := ossl.EVP_KDF_derive(ctx, out, nil); err != nil {
 +			return nil, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	return out, nil
 +}
@@ -30501,8 +30463,6 @@ index 00000000000000..75207faf1aa043
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchTLS13_KDF = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS13_KDF.ptr(), nil)
 +	if err != nil {
 +		return nil, err
@@ -30512,8 +30472,6 @@ index 00000000000000..75207faf1aa043
 +
 +// newTLS13KDFExpandCtx3 fetches the "TLS13-KDF" for TLS 1.3 handshakes.
 +func newTLS13KDFExpandCtx3(md ossl.EVP_MD_PTR, label, context, pseudorandomKey []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := fetchTLS13_KDF()
 +	if err != nil {
 +		return nil, err
@@ -30554,8 +30512,6 @@ index 00000000000000..75207faf1aa043
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchHKDF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_HKDF.ptr(), nil)
 +	if err != nil {
 +		return nil, err
@@ -30565,8 +30521,6 @@ index 00000000000000..75207faf1aa043
 +
 +// newHKDFCtx3 implements HKDF for OpenSSL 3 using the EVP_KDF API.
 +func newHKDFCtx3(md ossl.EVP_MD_PTR, mode int32, secret, salt, pseudorandomKey, info []byte) (_ ossl.EVP_KDF_CTX_PTR, err error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := fetchHKDF3()
 +	if err != nil {
 +		return nil, err
@@ -30603,10 +30557,10 @@ index 00000000000000..75207faf1aa043
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go
 new file mode 100644
-index 00000000000000..88f6ce7eb85ca1
+index 00000000000000..6402a9b3d0f30a
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/hmac.go
-@@ -0,0 +1,280 @@
+@@ -0,0 +1,269 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -30653,14 +30607,12 @@ index 00000000000000..88f6ce7eb85ca1
 +			return nil
 +		}
 +		hmac.ctx1 = ctx
-+	case 3, 4:
++	default:
 +		ctx := newHMAC3(key, md)
 +		if ctx.ctx == nil {
 +			return nil
 +		}
 +		hmac.ctx3 = ctx
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	runtime.SetFinalizer(hmac, (*opensslHMAC).finalize)
 +	return hmac
@@ -30778,12 +30730,10 @@ index 00000000000000..88f6ce7eb85ca1
 +		if _, err := ossl.HMAC_Init_ex(h.ctx1.ctx, nil, nil, nil); err != nil {
 +			panic(err)
 +		}
-+	case 3, 4:
++	default:
 +		if _, err := ossl.EVP_MAC_init(h.ctx3.ctx, h.ctx3.key, nil); err != nil {
 +			panic(err)
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +
 +	runtime.KeepAlive(h) // Next line will keep h alive too; just making doubly sure.
@@ -30803,10 +30753,8 @@ index 00000000000000..88f6ce7eb85ca1
 +		switch major() {
 +		case 1:
 +			ossl.HMAC_Update(h.ctx1.ctx, p)
-+		case 3, 4:
-+			ossl.EVP_MAC_update(h.ctx3.ctx, p)
 +		default:
-+			panic(errUnsupportedVersion())
++			ossl.EVP_MAC_update(h.ctx3.ctx, p)
 +		}
 +	}
 +	runtime.KeepAlive(h)
@@ -30837,15 +30785,13 @@ index 00000000000000..88f6ce7eb85ca1
 +			panic(err)
 +		}
 +		ossl.HMAC_Final(ctx2, h.sum[:h.size], nil)
-+	case 3, 4:
++	default:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
 +		}
 +		defer ossl.EVP_MAC_CTX_free(ctx2)
 +		ossl.EVP_MAC_final(ctx2, h.sum[:h.size], nil)
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	return append(in, h.sum[:h.size]...)
 +}
@@ -30869,7 +30815,7 @@ index 00000000000000..88f6ce7eb85ca1
 +		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
 +		return cl, nil
 +
-+	case 3, 4:
++	default:
 +		ctx2, err := ossl.EVP_MAC_CTX_dup(h.ctx3.ctx)
 +		if err != nil {
 +			panic(err)
@@ -30882,9 +30828,6 @@ index 00000000000000..88f6ce7eb85ca1
 +		}
 +		runtime.SetFinalizer(cl, (*opensslHMAC).finalize)
 +		return cl, nil
-+
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/mldsa.go
@@ -31719,10 +31662,10 @@ index 00000000000000..5c2ffbabe92e15
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go
 new file mode 100644
-index 00000000000000..94fd563ac87978
+index 00000000000000..e0291c15a18c00
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/openssl.go
-@@ -0,0 +1,183 @@
+@@ -0,0 +1,182 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -31766,6 +31709,15 @@ index 00000000000000..94fd563ac87978
 +	return osslsetup.VersionPatch()
 +}
 +
++// knownMajor reports whether the loaded OpenSSL major is one this
++// backend has been tested against. Untested majors are only reachable
++// behind GODEBUG=ms_opensslallowuntested=1; code paths that rely on
++// version-specific layouts (e.g. EVP_MD_CTX internals) must guard on
++// this so they degrade safely instead of touching unknown memory.
++func knownMajor() bool {
++	return osslsetup.IsTestedMajor(major())
++}
++
 +func utoa(n int) string {
 +	return strconv.FormatUint(uint64(n), 10)
 +}
@@ -31774,16 +31726,6 @@ index 00000000000000..94fd563ac87978
 +	return errors.New("openssl: unsupported OpenSSL version: " + utoa(major()) + "." + utoa(minor()) + "." + utoa(patch()) + " (minimum supported version is 1.1.1)")
 +}
 +
-+// checkMajorVersion panics if the current major version is not one of the expected versions.
-+func checkMajorVersion(expected ...int) {
-+	for _, v := range expected {
-+		if major() == v {
-+			return
-+		}
-+	}
-+	panic("openssl: incorrect major version (" + strconv.Itoa(major()) + ")")
-+}
-+
 +type fail string
 +
 +func (e fail) Error() string { return "openssl: " + string(e) + " failed" }
@@ -32169,10 +32111,10 @@ index 00000000000000..8bd651d6493707
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go
 new file mode 100644
-index 00000000000000..66af2060e2cf87
+index 00000000000000..6cba126ef9dee4
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/pbkdf2.go
-@@ -0,0 +1,86 @@
+@@ -0,0 +1,82 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -32191,11 +32133,9 @@ index 00000000000000..66af2060e2cf87
 +	switch major() {
 +	case 1:
 +		return true
-+	case 3, 4:
++	default:
 +		_, err := fetchPBKDF2()
 +		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 +
@@ -32203,8 +32143,6 @@ index 00000000000000..66af2060e2cf87
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchPBKDF2 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_PBKDF2.ptr(), nil)
 +	if err != nil {
 +		return nil, err
@@ -32261,10 +32199,10 @@ index 00000000000000..66af2060e2cf87
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go
 new file mode 100644
-index 00000000000000..f6a4b1ac20b654
+index 00000000000000..7c31310ff8a9ba
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/provideropenssl.go
-@@ -0,0 +1,250 @@
+@@ -0,0 +1,257 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -32462,7 +32400,14 @@ index 00000000000000..f6a4b1ac20b654
 +		}
 +		return (*mdCtx)(unsafe.Pointer(ctx)).algctx
 +	default:
-+		panic(errUnsupportedVersion())
++		// Unknown OpenSSL major: the EVP_MD_CTX internal layout is not
++		// known, so the running hash state cannot be safely extracted.
++		// loadHash marks hashes as not marshallable on untested majors
++		// (see evp.go), so MarshalBinary/UnmarshalBinary short-circuit
++		// with errMarshallUnsupported{} before calling this. The nil
++		// return is defense in depth against any future caller that
++		// bypasses that gate.
++		return nil
 +	}
 +}
 +
@@ -32979,10 +32924,10 @@ index 00000000000000..37d12ec889a91e
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go
 new file mode 100644
-index 00000000000000..36f84902a21ece
+index 00000000000000..a59ac6f76a1298
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/rsa.go
-@@ -0,0 +1,712 @@
+@@ -0,0 +1,706 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33023,7 +32968,7 @@ index 00000000000000..36f84902a21ece
 +		N, E, D = bnToBig(n), bnToBig(e), bnToBig(d)
 +		P, Q = bnToBig(p), bnToBig(q)
 +		Dp, Dq, Qinv = bnToBig(dmp1), bnToBig(dmq1), bnToBig(iqmp)
-+	case 3, 4:
++	default:
 +		tmp, err := ossl.BN_new()
 +		if err != nil {
 +			return bad(err)
@@ -33052,8 +32997,6 @@ index 00000000000000..36f84902a21ece
 +			setBigInt(&Qinv, _OSSL_PKEY_PARAM_RSA_COEFFICIENT1)) {
 +			return bad(err)
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	return
 +}
@@ -33091,13 +33034,11 @@ index 00000000000000..36f84902a21ece
 +			ossl.EVP_PKEY_free(pkey)
 +			return nil, err
 +		}
-+	case 3, 4:
++	default:
 +		var err error
 +		if pkey, err = newRSAKey3(false, n, e, nil, nil, nil, nil, nil, nil); err != nil {
 +			return nil, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	k := &PublicKeyRSA{_pkey: pkey}
 +	runtime.SetFinalizer(k, (*PublicKeyRSA).finalize)
@@ -33170,13 +33111,11 @@ index 00000000000000..36f84902a21ece
 +			ossl.EVP_PKEY_free(pkey)
 +			return nil, err
 +		}
-+	case 3, 4:
++	default:
 +		var err error
 +		if pkey, err = newRSAKey3(true, n, e, d, p, q, dp, dq, qinv); err != nil {
 +			return nil, err
 +		}
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +	k := &PrivateKeyRSA{_pkey: pkey}
 +	runtime.SetFinalizer(k, (*PrivateKeyRSA).finalize)
@@ -33697,10 +33636,10 @@ index 00000000000000..36f84902a21ece
 +})
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go
 new file mode 100644
-index 00000000000000..87fe3879ab48d3
+index 00000000000000..d53f18c9fbc24c
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/openssl/tls1prf.go
-@@ -0,0 +1,157 @@
+@@ -0,0 +1,147 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33720,11 +33659,9 @@ index 00000000000000..87fe3879ab48d3
 +	switch major() {
 +	case 1:
 +		return minor() >= 1
-+	case 3, 4:
++	default:
 +		_, err := fetchTLS1PRF3()
 +		return err == nil
-+	default:
-+		panic(errUnsupportedVersion())
 +	}
 +}
 +
@@ -33754,17 +33691,13 @@ index 00000000000000..87fe3879ab48d3
 +	switch major() {
 +	case 1:
 +		return tls1PRF1(result, secret, label, seed, md)
-+	case 3, 4:
-+		return tls1PRF3(result, secret, label, seed, md)
 +	default:
-+		return errUnsupportedVersion()
++		return tls1PRF3(result, secret, label, seed, md)
 +	}
 +}
 +
 +// tls1PRF1 implements TLS1PRF for OpenSSL 1 using the EVP_PKEY API.
 +func tls1PRF1(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
-+	checkMajorVersion(1)
-+
 +	ctx, err := ossl.EVP_PKEY_CTX_new_id(ossl.EVP_PKEY_TLS1_PRF, nil)
 +	if err != nil {
 +		return err
@@ -33818,8 +33751,6 @@ index 00000000000000..87fe3879ab48d3
 +// It is safe to call this function concurrently.
 +// The returned EVP_KDF_PTR shouldn't be freed.
 +var fetchTLS1PRF3 = sync.OnceValues(func() (ossl.EVP_KDF_PTR, error) {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := ossl.EVP_KDF_fetch(nil, _OSSL_KDF_NAME_TLS1_PRF.ptr(), nil)
 +	if err != nil {
 +		return nil, err
@@ -33829,8 +33760,6 @@ index 00000000000000..87fe3879ab48d3
 +
 +// tls1PRF3 implements TLS1PRF for OpenSSL 3 using the EVP_KDF API.
 +func tls1PRF3(result, secret, label, seed []byte, md ossl.EVP_MD_PTR) error {
-+	checkMajorVersion(3, 4)
-+
 +	kdf, err := fetchTLS1PRF3()
 +	if err != nil {
 +		return err
@@ -33953,10 +33882,10 @@ index 00000000000000..ac79a864271eee
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go
 new file mode 100644
-index 00000000000000..2084b384b9f3a9
+index 00000000000000..38e4b34472dd55
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/fips.go
-@@ -0,0 +1,69 @@
+@@ -0,0 +1,115 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -33991,20 +33920,59 @@ index 00000000000000..2084b384b9f3a9
 +}
 +
 +const (
-+	_ProviderNameFips   cString = "fips\x00"
++	// Provider names
++	_ProviderNameFips cString = "fips\x00"
++
++	// Digest Names
 +	_DigestNameSHA2_256 cString = "SHA2-256\x00"
 +)
 +
-+// FIPS returns true if the provider used by default matches the `fips=yes` query.
-+// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
-+// of whether the `fips=yes` query is explicitly enabled. For example, Azure Linux 3 doesn't set the
-+// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
-+// which is FIPS-capable.
++// FIPS returns true if OpenSSL is running in FIPS mode and there is
++// a provider available that supports FIPS. It returns false otherwise.
++// All OpenSSL functions used in here should be tagged with "init_1" or "init_3" in shims.h.
 +func FIPS() bool {
 +	switch vMajor {
 +	case 1:
 +		return ossl.FIPS_mode() == 1
++	case 3, 4:
++		// Check if the default properties contain `fips=1`.
++		if ossl.EVP_default_properties_is_fips_enabled(nil) != 1 {
++			// Note that it is still possible that the provider used by default is FIPS-compliant,
++			// but that wouldn't be a system or user requirement.
++			return false
++		}
++		// Check if the SHA-256 algorithm is available. If it is, then we can be sure that there is a provider available that matches
++		// the `fips=1` query. Most notably, this works for the common case of using the built-in FIPS provider.
++		//
++		// Note that this approach has a small chance of false negative if the FIPS provider doesn't provide the SHA-256 algorithm,
++		// but that is highly unlikely because SHA-256 is one of the most common algorithms and fundamental to many cryptographic operations.
++		// It also has a small chance of false positive if the FIPS provider implements the SHA-256 algorithm but not the other algorithms
++		// used by the caller application, but that is also unlikely because the FIPS provider should provide all common algorithms.
++		return proveSHA256("")
 +	default:
++		panic(errUnsupportedVersion())
++	}
++}
++
++// FIPSCapable returns true if the provider used by default matches the `fips=yes` query.
++// It is useful for checking whether OpenSSL is capable of running in FIPS mode regardless
++// of whether FIPS mode is explicitly enabled. For example, Azure Linux 3 doesn't set the
++// `fips=yes` query in the default properties, but sets the default provider to be SCOSSL,
++// which is FIPS-capable.
++//
++// Considerations:
++//   - Can return true even if [FIPS] returns false, because [FIPS] also checks whether
++//     the default properties contain `fips=yes`.
++//   - When using OpenSSL 3, will always return true if [FIPS] returns true.
++//   - When using OpenSSL 1, will always return the same value as [FIPS].
++//   - OpenSSL 3 doesn't provide a way to know if a provider is FIPS-capable. This function uses
++//     some heuristics that should be treated as an implementation detail that may change in the future.
++func FIPSCapable() bool {
++	if FIPS() {
++		return true
++	}
++	switch vMajor {
++	case 3, 4:
 +		// Load the provider with and without the `fips=yes` query.
 +		// If the providers are the same, then the default provider is FIPS-capable.
 +		provFIPS := sha256Provider(_ProviderNameFips)
@@ -34014,6 +33982,7 @@ index 00000000000000..2084b384b9f3a9
 +		provDefault := sha256Provider("")
 +		return provFIPS == provDefault
 +	}
++	return false
 +}
 +
 +// sha256Provider returns the provider for the SHA-256 algorithm
@@ -34026,6 +33995,12 @@ index 00000000000000..2084b384b9f3a9
 +	defer ossl.EVP_MD_free(md)
 +	return ossl.EVP_MD_get0_provider(md)
 +}
++
++// proveSHA256 checks if the SHA-256 algorithm is available
++// using the given properties.
++func proveSHA256(props cString) bool {
++	return sha256Provider(props) != nil
++}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/init.go
 new file mode 100644
 index 00000000000000..720a446838ea7d
@@ -34328,10 +34303,10 @@ index 00000000000000..312dfc88d7f311
 +}
 diff --git a/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go
 new file mode 100644
-index 00000000000000..189335d93c80f8
+index 00000000000000..ed33d8efe1edbb
 --- /dev/null
 +++ b/src/vendor/github.com/microsoft/go-crypto-openssl/osslsetup/osslsetup.go
-@@ -0,0 +1,109 @@
+@@ -0,0 +1,123 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -34357,6 +34332,20 @@ index 00000000000000..189335d93c80f8
 +// [openLibrary].
 +var testedMajors = [...]int{1, 3, 4}
 +
++// IsTestedMajor reports whether m is one of the OpenSSL major versions
++// this backend has been tested against (see [testedMajors]). Callers
++// that depend on version-specific layouts or behaviors should gate on
++// this so they degrade safely on untested majors loaded via
++// GODEBUG=ms_opensslallowuntested=1.
++func IsTestedMajor(m int) bool {
++	for _, v := range testedMajors {
++		if v == m {
++			return true
++		}
++	}
++	return false
++}
++
 +// allowUntestedMajor reports whether the user has set
 +// GODEBUG=ms_opensslallowuntested=1. The "ms_" prefix marks this as a
 +// Microsoft-defined GODEBUG so it will not collide with upstream Go.
@@ -39941,7 +39930,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d72017d2a43c1e..277d1992ac034f 100644
+index d72017d2a43c1e..a81d4929faa013 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -39954,7 +39943,7 @@ index d72017d2a43c1e..277d1992ac034f 100644
 +github.com/microsoft/go-crypto-darwin/internal/security
 +github.com/microsoft/go-crypto-darwin/internal/xsyscall
 +github.com/microsoft/go-crypto-darwin/xcrypto
-+# github.com/microsoft/go-crypto-openssl v0.0.0-20260521090922-bd6798f35c69
++# github.com/microsoft/go-crypto-openssl v0.0.0-20260526094617-f3ee9e48499e
 +## explicit; go 1.25
 +github.com/microsoft/go-crypto-openssl/bbig
 +github.com/microsoft/go-crypto-openssl/internal/fakecgo
diff --git a/patches/0003-Implement-crypto-internal-backend.patch b/patches/0003-Implement-crypto-internal-backend.patch
index c353312ea7c..1513a003113 100644
--- a/patches/0003-Implement-crypto-internal-backend.patch
+++ b/patches/0003-Implement-crypto-internal-backend.patch
@@ -146,10 +146,10 @@ index 0e32e0769ee2e2..eda2d576acc6c6 100644
  	if doReplacement {
  		if testCompiler == "" {
 diff --git a/src/cmd/dist/build.go b/src/cmd/dist/build.go
-index de2c7be2e833f9..415f4baeff2510 100644
+index 78d55bec559987..bb3119ef0823d7 100644
 --- a/src/cmd/dist/build.go
 +++ b/src/cmd/dist/build.go
-@@ -1398,6 +1398,80 @@ func toolenv() []string {
+@@ -1399,6 +1399,80 @@ func toolenv() []string {
  		// still have full paths for stack traces for compiler crashes and the like.
  		env = append(env, "GOFLAGS=-trimpath -ldflags=-w -gcflags=cmd/...=-dwarf=false")
  	}
@@ -230,7 +230,7 @@ index de2c7be2e833f9..415f4baeff2510 100644
  	return env
  }
  
-@@ -1640,12 +1714,12 @@ func cmdbootstrap() {
+@@ -1641,12 +1715,12 @@ func cmdbootstrap() {
  		os.Setenv("CC", compilerEnvLookup("CC", defaultcc, goos, goarch))
  		xprintf("Building packages and commands for target, %s/%s.\n", goos, goarch)
  	}
@@ -336,7 +336,7 @@ index 47839e0229b951..2d1a7fa99d551e 100644
  	tg.parallel()
  	defer tg.cleanup()
 diff --git a/src/cmd/go/internal/cfg/cfg.go b/src/cmd/go/internal/cfg/cfg.go
-index a4edd854f1d35a..10ee92536b96cd 100644
+index 78cbbb949e7c27..dcf9d04dd979f3 100644
 --- a/src/cmd/go/internal/cfg/cfg.go
 +++ b/src/cmd/go/internal/cfg/cfg.go
 @@ -19,6 +19,7 @@ import (
@@ -674,7 +674,7 @@ index 2f46a6b44bffe1..69071289e2de81 100644
  
  ! go build -o $devnull cmd/buildid
 diff --git a/src/cmd/internal/testdir/testdir_test.go b/src/cmd/internal/testdir/testdir_test.go
-index 07984396b7d44e..c7fbda270159f3 100644
+index d81b3a849cb975..bbeca248e4f8e4 100644
 --- a/src/cmd/internal/testdir/testdir_test.go
 +++ b/src/cmd/internal/testdir/testdir_test.go
 @@ -118,6 +118,13 @@ func Test(t *testing.T) {
@@ -1187,7 +1187,7 @@ index 00000000000000..73830cae246cbd
 +}
 diff --git a/src/crypto/internal/backend/backend_linux.go b/src/crypto/internal/backend/backend_linux.go
 new file mode 100644
-index 00000000000000..a28f644c950f86
+index 00000000000000..d8073b4f6c282e
 --- /dev/null
 +++ b/src/crypto/internal/backend/backend_linux.go
 @@ -0,0 +1,435 @@
@@ -1226,8 +1226,8 @@ index 00000000000000..a28f644c950f86
 +	// but they configure OpenSSL to use a FIPS-compliant provider (in the case of Azure Linux 3, the SCOSSL provider).
 +	// In this cases, openssl.FIPS would return `false` and openssl.FIPSCapable would return `true`.
 +	// We don't care about the `fips=yes` property as long as the provider is FIPS-compliant, so use
-+	// osslsetup.FIPS to determine whether FIPS mode is enabled.
-+	if err := fips140.Check(func() bool { return osslsetup.FIPS() }); err != nil {
++	// osslsetup.FIPSCapable to determine whether FIPS mode is enabled.
++	if err := fips140.Check(func() bool { return osslsetup.FIPSCapable() }); err != nil {
 +		// This path can be reached for the following reasons:
 +		// - In OpenSSL 1, the active engine doesn't support FIPS mode.
 +		// - In OpenSSL 1, the active engine supports FIPS mode, but it is not enabled.
@@ -3308,7 +3308,7 @@ index 00000000000000..7500bd3a86472b
 +	`
 +}
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
-index 504426b5fe97f2..a8aee3a4bccda3 100644
+index 920e72e5cdbb9d..2135c64d86664d 100644
 --- a/src/go/build/deps_test.go
 +++ b/src/go/build/deps_test.go
 @@ -368,7 +368,7 @@ var depsRules = `

From c97ab253ffdff7efb38f732a0b07732406b0bd70 Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Wed, 27 May 2026 10:42:07 +0100
Subject: [PATCH 881/887] Update blog post link description in Telemetry.md
 (#2316)

fixes: https://github.com/microsoft/go-lab/issues/406
---
 eng/doc/Telemetry.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/eng/doc/Telemetry.md b/eng/doc/Telemetry.md
index 8c70e60f258..70177515f06 100644
--- a/eng/doc/Telemetry.md
+++ b/eng/doc/Telemetry.md
@@ -4,7 +4,7 @@ The Microsoft build of Go collects opt-out (enabled by default) toolset telemetr
 Telemetry is sent to Microsoft via Azure Application Insights when `go build`, `go install`, or `go run` is executed.
 No telemetry is collected for other `go` subcommands (e.g. `go test`, `go vet`, `go fmt`).
 
-For the blog post announcing this feature, see [Microsoft Go Telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/).
+For the blog post announcing this feature, see [Microsoft build of Go Telemetry](https://devblogs.microsoft.com/go/microsoft-go-telemetry/).
 
 ## What is collected
 

From 61166d1aa811d31d282a128c959f01a882906647 Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Wed, 27 May 2026 16:07:50 +0000
Subject: [PATCH 882/887] Update submodule to latest master (286c12b1):
 debug/elf: add FuzzReader

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 9da73fb7025..286c12b1d15 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 9da73fb7025cd64b71608241517d6cb17735d854
+Subproject commit 286c12b1d159de830564271b3589c8a7b8acbca7

From 6e93cf6858d5741210b2c096f9ff2e2cf306fca7 Mon Sep 17 00:00:00 2001
From: George Adams <georgeadams1995@gmail.com>
Date: Thu, 28 May 2026 12:37:40 +0100
Subject: [PATCH 883/887] resolve conflicts

---
 .../0001-Vendor-external-dependencies.patch   | 32 +++++++++----------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 390e56a14e4..18868d71dd1 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -529,24 +529,24 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  create mode 100644 src/vendor/github.com/microsoft/go-crypto-winnative/internal/sysdll/sys_windows.go
 
 diff --git a/src/cmd/go.mod b/src/cmd/go.mod
-index 29b78693abd787..ffcaa3d7848408 100644
+index 82ceadb04a273a..b7fe75a52e69f8 100644
 --- a/src/cmd/go.mod
 +++ b/src/cmd/go.mod
 @@ -4,6 +4,8 @@ go 1.27
  
  require (
- 	github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83
+ 	github.com/google/pprof v0.0.0-20260507013755-92041b743c96
 +	github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a
 +	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a
  	golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
- 	golang.org/x/build v0.0.0-20260122183339-3ba88df37c64
- 	golang.org/x/mod v0.36.1-0.20260513122029-343ee60345a1
+ 	golang.org/x/build v0.0.0-20260522210304-d55d0041b921
+ 	golang.org/x/mod v0.36.1-0.20260520130633-087f6515dd3b
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index 929e1c34dcbec1..68262698d63570 100644
+index d9e3e3992ebb61..792375dd36e664 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
-@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83 h1:z2ogiKUYzX5Is6zr/v
- github.com/google/pprof v0.0.0-20260115054156-294ebfa9ad83/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
+@@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260507013755-92041b743c96 h1:YDDnaZ9afWajDboPMt
+ github.com/google/pprof v0.0.0-20260507013755-92041b743c96/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
 +github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a h1:1yIH/VJLOUUWw2yVBEqAqDsakqIsx1TyjHv3rQuVv2A=
@@ -2328,7 +2328,7 @@ index 00000000000000..e50deaa4189b18
 +	return false
 +}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
-index f3ed9c985e7bf5..67e1651ba7e3c5 100644
+index 4774f1a02e905f..3c77716f1fe9b0 100644
 --- a/src/cmd/vendor/modules.txt
 +++ b/src/cmd/vendor/modules.txt
 @@ -16,6 +16,17 @@ github.com/google/pprof/third_party/svgpan
@@ -2378,11 +2378,11 @@ index 00000000000000..f5dc9afe4b0ead
 +// that are used by the backend package. This allows to track
 +// their versions in a single patch file.
 diff --git a/src/go.mod b/src/go.mod
-index 8703fad3b226c9..92b03d8db89373 100644
+index bb6abc93792f39..46d8c6ad6bd22d 100644
 --- a/src/go.mod
 +++ b/src/go.mod
 @@ -11,3 +11,9 @@ require (
- 	golang.org/x/sys v0.44.0 // indirect
+ 	golang.org/x/sys v0.45.0 // indirect
  	golang.org/x/text v0.37.0 // indirect
  )
 +
@@ -2392,7 +2392,7 @@ index 8703fad3b226c9..92b03d8db89373 100644
 +	github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe
 +)
 diff --git a/src/go.sum b/src/go.sum
-index 43554ff45c183e..30e68847197201 100644
+index ab34844da17757..060e1a1e1ae6fc 100644
 --- a/src/go.sum
 +++ b/src/go.sum
 @@ -1,3 +1,9 @@
@@ -2402,9 +2402,9 @@ index 43554ff45c183e..30e68847197201 100644
 +github.com/microsoft/go-crypto-openssl v0.0.0-20260526094617-f3ee9e48499e/go.mod h1:gJrjX+yWGi9pkbfPVDDh+ZbgjtQoRSXHjb/ZyjwKk34=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe h1:WDbUuTTKY8VElMRA3JJ8Quvj9xK9GqEcTiBZ3BF+7mI=
 +github.com/microsoft/go-crypto-winnative v0.0.0-20260512074019-00d811a4aefe/go.mod h1:a1Z07CJIuWa8WT/pzFIGNTTKS96s8o1B1TPOziAHUxw=
- golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI=
- golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8=
- golang.org/x/net v0.54.1-0.20260509022215-ad8140e0aa2e h1:ITxjUIeFp/ACbvnNlOZLoDmomcET3Yt4lFMgeqBebXk=
+ golang.org/x/crypto v0.52.1-0.20260526024921-9beb694f9766 h1:ABD+jVg0H4Hwu2sGcUtKeb3T8mlS+jS3uWrkTAPcXjs=
+ golang.org/x/crypto v0.52.1-0.20260526024921-9beb694f9766/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc=
+ golang.org/x/net v0.55.1-0.20260526154343-657eb1317b5d h1:G6GZDsxGyGK2SxMEqnPJfBWRKGCNpWheup5btZYkYpw=
 diff --git a/src/go/build/deps_test.go b/src/go/build/deps_test.go
 index 25cb06182cae3d..920e72e5cdbb9d 100644
 --- a/src/go/build/deps_test.go
@@ -39930,7 +39930,7 @@ index 00000000000000..1722410e5af193
 +	return getSystemDirectory() + "\\" + dll
 +}
 diff --git a/src/vendor/modules.txt b/src/vendor/modules.txt
-index d72017d2a43c1e..a81d4929faa013 100644
+index 54fcbab6a221c0..07fcd41c1e259f 100644
 --- a/src/vendor/modules.txt
 +++ b/src/vendor/modules.txt
 @@ -1,3 +1,26 @@
@@ -39957,6 +39957,6 @@ index d72017d2a43c1e..a81d4929faa013 100644
 +github.com/microsoft/go-crypto-winnative/internal/bcrypt
 +github.com/microsoft/go-crypto-winnative/internal/subtle
 +github.com/microsoft/go-crypto-winnative/internal/sysdll
- # golang.org/x/crypto v0.51.0
+ # golang.org/x/crypto v0.52.1-0.20260526024921-9beb694f9766
  ## explicit; go 1.25.0
  golang.org/x/crypto/chacha20

From dfdb941a7b25ad21623b975239424c9ec37b203c Mon Sep 17 00:00:00 2001
From: Davis Goodin <dagood@users.noreply.github.com>
Date: Thu, 28 May 2026 09:57:54 -0700
Subject: [PATCH 884/887] Update project documentation structure and clarity
 (#2318)

* Update project documentation structure and clarity

* Explicitly label eng.ms internal links (suggestion)

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 README.md         | 41 +++++++++++++++++++++--------------------
 SUPPORT.md        |  3 +++
 eng/doc/README.md | 29 +++++++++++++++++++++--------
 3 files changed, 45 insertions(+), 28 deletions(-)

diff --git a/README.md b/README.md
index 808d23a4eb8..a8226310f2e 100644
--- a/README.md
+++ b/README.md
@@ -28,32 +28,33 @@ The submodule is updated regularly to the latest commit available in both the up
 
 ## Support
 
-This project follows the upstream Go
-[Release Policy](https://go.dev/doc/devel/release#policy).
-This means we support each major release (1.X) until there are two newer major
-releases. A new Go major version is
-[released every six months](https://github.com/golang/go/wiki/Go-Release-Cycle),
-so each Go major version is supported for about one year.
-
-When upstream Go releases a new minor version (1.X.Y), we release a
-corresponding microsoft/go version that may also include fork-specific changes.
+See [SUPPORT.md](SUPPORT.md) for more information about reporting bugs, requesting features, and asking questions.
+
+There are a few additional support resources internal to Microsoft:
+
+* [(Microsoft-internal) Languages at Microsoft: Introduction to Go](https://eng.ms/docs/more/languages-at-microsoft/go/articles/overview).
+* [(Microsoft-internal) Languages at Microsoft: Get Help with Go](https://eng.ms/docs/more/languages-at-microsoft/go/articles/support).
+  * Includes internal Microsoft support channels such as an email contact for our team and a community Teams group.
+
+## Release cycle and policy
+
+This project follows the upstream Go [Release Policy](https://go.dev/doc/devel/release#policy).
+This means we support each major release (1.X) until there are two newer major releases.
+A new Go major version is [released every six months](https://github.com/golang/go/wiki/Go-Release-Cycle), so each Go major version is supported for about one year.
+
+When upstream Go releases a new minor version (1.X.Y), we release a corresponding microsoft/go version that may also include fork-specific changes.
 This normally happens once a month.
 
 At any time, we may release a new revision (1.X.Y-Z) to fix an issue without waiting for the next upstream minor release.
 Revision releases are uncommon.
 
-Each microsoft/go release is announced at the
-[Microsoft for Go Developers](https://devblogs.microsoft.com/go/) blog.
-Check out the upstream [golang-announce mailing list](https://groups.google.com/g/golang-announce)
-for a summary of the changes in each upstream Go version.
+We announce each Microsoft build of Go release through the following channels:
 
-See [SUPPORT.md](SUPPORT.md) for more information about reporting bugs, requesting features, and asking questions.
-
-There are a few additional support resources internal to Microsoft:
+* [Microsoft for Go Developers blog](https://devblogs.microsoft.com/go/).
+* [Microsoft-internal email distribution list 📧 (instant join link)](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join).
 
-* [Languages at Microsoft: Go](https://eng.ms/docs/more/languages-at-microsoft/go/articles/overview).
-* [A Microsoft-internal email distribution list 📧 (instant join link)](https://idwebelements.microsoft.com/GroupManagement.aspx?Group=golang-announce&Operation=join)
-  for release announcements.
+The Go team announces upstream releases on the [golang-announce mailing list](https://groups.google.com/g/golang-announce).
+These announcement emails include a carefully written summary of the changes that may not be found elsewhere.
 
 ## Download and install
 
@@ -76,7 +77,7 @@ The [Installation](eng/doc/Installation.md) documentation contains sections desc
 * [Azure Pipelines `GoTool@0` task](eng/doc/Installation.md#azure-pipelines-gotool0-task)
 * [GitHub Actions `setup-go` action](eng/doc/Installation.md#github-actions-setup-go-action)
 * [The `go-install.ps1` script](eng/doc/Installation.md#the-go-installps1-script)
-* [Binary archive](eng/doc/Installation.md#binary-archive)
+* [Binary archive](eng/doc/Installation.md#binary-archive) (`tar.gz` and `zip`)
 * [Build from source](eng/doc/Installation.md#build-from-source)
 
 ## Contributing
diff --git a/SUPPORT.md b/SUPPORT.md
index 5594fc5c2ff..a5c8aaa4b58 100644
--- a/SUPPORT.md
+++ b/SUPPORT.md
@@ -4,6 +4,9 @@ For help and questions about the Go programming language and tools, visit the of
 
 Take a look at the [Migration Guide](eng/doc/MigrationGuide.md) for more information about migrating from the official build of Go to the Microsoft build of Go, specifically.
 
+> [!TIP]
+> Additional support options internal to Microsoft are listed in the ["Support" section of the README file](README.md#support).
+
 ## How to file issues and get help
 
 This project uses GitHub Issues to track bugs and feature requests. Please search the existing
diff --git a/eng/doc/README.md b/eng/doc/README.md
index c7641610b37..d974d1daa6c 100644
--- a/eng/doc/README.md
+++ b/eng/doc/README.md
@@ -1,10 +1,23 @@
-This directory, `/eng/doc`, contains documents describing the Microsoft
-infrastructure used to build Go, in particular any designs that are not obvious
-by reading the infrastructure code itself.
+# `/eng/doc` - Documentation for the Microsoft build of Go
 
-For cryptography information, see the [CrossPlatformCryptography.md](CrossPlatformCryptography.md) doc.
-For dev scenario documentation, see the [DeveloperGuide.md](DeveloperGuide.md) doc.
-For telemetry details, see the [Telemetry.md](Telemetry.md) doc.
+This directory, `/eng/doc`, contains detailed documents describing the Microsoft build of Go.
 
-The [Downloads.md](Downloads.md) doc contains a table of links to the latest assets for each supported Go release branch.
-The [release-branch-links.json](release-branch-links.json) file contains the same data in JSON format suitable for parsing.
+> [!IMPORTANT]
+> These documents are only actively maintained in the `microsoft/main` branch.
+> If you're viewing this file in a release branch, it may be stale.
+> [If you're not sure, click here to go to the maintained version of this document.](https://github.com/microsoft/go/blob/microsoft/main/eng/doc/README.md)
+
+## Setup
+
+* [Migration Guide](MigrationGuide.md)
+* [Installation](Installation.md)
+  * [Downloading a binary release](Downloads.md)
+* [Developer Guide](DeveloperGuide.md) (for new contributors to the Microsoft build of Go)
+
+## Features
+
+* [Additional Features Provided by the Microsoft build of Go](AdditionalFeatures.md)
+* [Cross-Platform Cryptography in the Microsoft build of Go](CrossPlatformCryptography.md)
+* [Microsoft Toolset Identification](MicrosoftToolsetIdentification.md)
+* [No-cgo OpenSSL Backend](NocgoOpenSSL.md)
+* [Telemetry in the Microsoft build of Go](Telemetry.md)

From 835632721472b868c07ce7a286460ced3cbc7506 Mon Sep 17 00:00:00 2001
From: George Adams <george.adams@microsoft.com>
Date: Thu, 28 May 2026 22:20:29 +0100
Subject: [PATCH 885/887] Add msgo/module/hash telemetry counter (#2283)

* update

* review fixes
---
 eng/doc/Telemetry.md                          |  11 +-
 .../0001-Vendor-external-dependencies.patch   | 118 ++++++++++++------
 patches/0009-Add-appinsights-telemetry.patch  |  84 ++++++++++---
 3 files changed, 156 insertions(+), 57 deletions(-)

diff --git a/eng/doc/Telemetry.md b/eng/doc/Telemetry.md
index 70177515f06..3877a6dd6a1 100644
--- a/eng/doc/Telemetry.md
+++ b/eng/doc/Telemetry.md
@@ -8,11 +8,11 @@ For the blog post announcing this feature, see [Microsoft build of Go Telemetry]
 
 ## What is collected
 
-All telemetry data consists of **counters** — simple event names that are incremented.
+Telemetry data consists of **counters** (simple event names that are incremented) and **properties** (key-value custom dimensions attached to a counter event).
 No source code, file paths, module contents, or personally identifiable information is collected.
 Each telemetry session is assigned a random session ID that cannot be linked back to a user.
 
-The counters collected are defined in the [telemetry upload configuration](/go/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json) and are listed below.
+The counters and properties collected are defined in the [telemetry upload configuration](https://github.com/microsoft/go-infra/blob/main/telemetry/config/config.json) and are listed below.
 
 ### Invocation counter
 
@@ -20,6 +20,12 @@ The counters collected are defined in the [telemetry upload configuration](/go/s
 |---|---|
 | `go/invocations` | Incremented once per `go` command invocation. |
 
+#### Properties on `go/invocations`
+
+| Property | Description |
+|---|---|
+| `msgo/module/hash` | A SHA-256 hash of the Go module path from the nearest `go.mod` file, found using [`modload.FindGoMod`](https://pkg.go.dev/cmd/go/internal/modload#FindGoMod). Only sent when a `go.mod` file is found. |
+
 ### Subcommand
 
 | Counter | Description |
@@ -55,6 +61,7 @@ The counters collected are defined in the [telemetry upload configuration](/go/s
 
 - No source code or file contents.
 - No file paths from the local file system.
+- No textual module names or paths (a one-way SHA-256 hash of the module path is collected).
 - No environment variable values (only the presence of specific CI-related variables is checked).
 - No network or authentication information.
 - No personally identifiable information (PII).
diff --git a/patches/0001-Vendor-external-dependencies.patch b/patches/0001-Vendor-external-dependencies.patch
index 18868d71dd1..58d2cf993e9 100644
--- a/patches/0001-Vendor-external-dependencies.patch
+++ b/patches/0001-Vendor-external-dependencies.patch
@@ -16,10 +16,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../microsoft/go-infra/telemetry/ci.go        |   97 +
  .../go-infra/telemetry/config/LICENSE         |   21 +
  .../go-infra/telemetry/config/config.go       |   11 +
- .../go-infra/telemetry/config/config.json     |   79 +
- .../go-infra/telemetry/counter/counter.go     |   63 +
+ .../go-infra/telemetry/config/config.json     |   77 +
+ .../go-infra/telemetry/counter/counter.go     |   71 +
  .../telemetry/internal/appinsights/README.md  |   12 +
- .../telemetry/internal/appinsights/client.go  |  192 ++
+ .../telemetry/internal/appinsights/client.go  |  200 ++
  .../internal/appinsights/inmemorychannel.go   |  349 +++
  .../internal/contracts/contexttagkeys.go      |   50 +
  .../internal/contracts/envelope.go            |  123 +
@@ -28,10 +28,10 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../telemetry/internal/appinsights/package.go |   13 +
  .../internal/appinsights/telemetrycontext.go  |   44 +
  .../internal/appinsights/transmitter.go       |  172 ++
- .../telemetry/internal/config/config.go       |   78 +
+ .../telemetry/internal/config/config.go       |   80 +
  .../telemetry/internal/telemetry/proginfo.go  |   46 +
  .../telemetry/internal/telemetry/telemetry.go |   32 +
- .../microsoft/go-infra/telemetry/telemetry.go |  144 +
+ .../microsoft/go-infra/telemetry/telemetry.go |  168 ++
  src/cmd/vendor/modules.txt                    |   11 +
  src/crypto/internal/backend/deps_ignore.go    |   22 +
  src/go.mod                                    |    6 +
@@ -271,7 +271,7 @@ Use a 'go' that was recently built by the current branch to ensure stable result
  .../internal/subtle/aliasing.go               |   32 +
  .../internal/sysdll/sys_windows.go            |   55 +
  src/vendor/modules.txt                        |   23 +
- 263 files changed, 35719 insertions(+), 7 deletions(-)
+ 263 files changed, 35759 insertions(+), 7 deletions(-)
  create mode 100644 src/cmd/internal/telemetry/counter/deps_ignore.go
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/LICENSE
  create mode 100644 src/cmd/vendor/github.com/microsoft/go-infra/telemetry/README.md
@@ -536,23 +536,23 @@ index 82ceadb04a273a..b7fe75a52e69f8 100644
  
  require (
  	github.com/google/pprof v0.0.0-20260507013755-92041b743c96
-+	github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a
-+	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a
++	github.com/microsoft/go-infra/telemetry v0.0.0-20260526160655-aa04f117b3ce
++	github.com/microsoft/go-infra/telemetry/config v0.0.0-20260526160655-aa04f117b3ce
  	golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
  	golang.org/x/build v0.0.0-20260522210304-d55d0041b921
  	golang.org/x/mod v0.36.1-0.20260520130633-087f6515dd3b
 diff --git a/src/cmd/go.sum b/src/cmd/go.sum
-index d9e3e3992ebb61..792375dd36e664 100644
+index 929e1c34dcbec1..e5b03ca050f661 100644
 --- a/src/cmd/go.sum
 +++ b/src/cmd/go.sum
 @@ -4,6 +4,10 @@ github.com/google/pprof v0.0.0-20260507013755-92041b743c96 h1:YDDnaZ9afWajDboPMt
  github.com/google/pprof v0.0.0-20260507013755-92041b743c96/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b h1:ogbOPx86mIhFy764gGkqnkFC8m5PJA7sPzlk9ppLVQA=
  github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b/go.mod h1:gx7rwoVhcfuVKG5uya9Hs3Sxj7EIvldVofAWIUtGouw=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a h1:1yIH/VJLOUUWw2yVBEqAqDsakqIsx1TyjHv3rQuVv2A=
-+github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a h1:F/bJDa61Hj7ISaUMyErZ9m0GIgHSaLMrhf2f1Pja9Io=
-+github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260526160655-aa04f117b3ce h1:mIjWtu9i00ZMtAmGy0gJYvW3P6bqnGt1s1J8aG87UuQ=
++github.com/microsoft/go-infra/telemetry v0.0.0-20260526160655-aa04f117b3ce/go.mod h1:LxxLUDlqi1gwmGrnh1slAFqnEhZnKjn37MABZ6xJs44=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260526160655-aa04f117b3ce h1:+9hsuF75XR8yABS2Oo9yevxvqxxS5+58qPH5rwJW4CM=
++github.com/microsoft/go-infra/telemetry/config v0.0.0-20260526160655-aa04f117b3ce/go.mod h1:t6u8QcO4tExYT4+NEB0XqR0ObiUvLe0D8ZpxFobGuA8=
  github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
  github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
  golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97 h1:OEbDVxixMxnrAI3whhcFkCb0rPrEHwxeSSUMdN0V414=
@@ -770,10 +770,10 @@ index 00000000000000..044268a046a54d
 +var Config []byte
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
 new file mode 100644
-index 00000000000000..89ce84ff435575
+index 00000000000000..e2ba3596943583
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/config/config.json
-@@ -0,0 +1,79 @@
+@@ -0,0 +1,77 @@
 +{
 +	"GOOS": [
 +		"aix",
@@ -826,7 +826,8 @@ index 00000000000000..89ce84ff435575
 +			"Name": "cmd/go",
 +			"Counters": [
 +				{
-+					"Name": "go/invocations"
++					"Name": "go/invocations",
++					"Properties": ["msgo/module/hash"]
 +				},
 +				{
 +					"Name": "go/goexperiment:{ms_tls_config_schannel,systemcrypto,nosystemcrypto,opensslcrypto,cngcrypto,darwincrypto,ms_nocgo_opensslcrypto}"
@@ -845,9 +846,6 @@ index 00000000000000..89ce84ff435575
 +				},
 +				{
 +					"Name": "msgo/systemcrypto:{enabled,disabled}"
-+				},
-+				{
-+					"Name": "msgo/module:*"
 +				}
 +			]
 +		}
@@ -856,10 +854,10 @@ index 00000000000000..89ce84ff435575
 \ No newline at end of file
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
 new file mode 100644
-index 00000000000000..542b9c780b5f1b
+index 00000000000000..808caafd45e383
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/counter/counter.go
-@@ -0,0 +1,63 @@
+@@ -0,0 +1,71 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -892,6 +890,14 @@ index 00000000000000..542b9c780b5f1b
 +	return telemetry.Client.NewEvent(name, nil)
 +}
 +
++// NewWithProperties returns a counter with the given name and custom properties.
++// Properties are sent as custom dimensions in Application Insights, allowing
++// high-cardinality values (such as hashes) to be sent as values rather than
++// as part of the counter name.
++func NewWithProperties(name string, properties map[string]string) *Counter {
++	return telemetry.Client.NewEvent(name, properties)
++}
++
 +// CountFlags creates a counter for every flag that is set
 +// and increments the counter. The name of the counter is
 +// the concatenation of prefix and the flag name.
@@ -943,10 +949,10 @@ index 00000000000000..2e96890f60b871
 +- Improve testing.
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
 new file mode 100644
-index 00000000000000..c3dd88924fdcfa
+index 00000000000000..b54a026b0fe540
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/appinsights/client.go
-@@ -0,0 +1,192 @@
+@@ -0,0 +1,200 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -1002,6 +1008,11 @@ index 00000000000000..c3dd88924fdcfa
 +	// If nil, all telemetry items are sent.
 +	UploadFilter func(name string) bool
 +
++	// Function to filter property keys for a given event name.
++	// Returns a new map containing only the allowed keys.
++	// If nil, all properties are sent.
++	PropertyFilter func(name string, properties map[string]string) map[string]string
++
 +	channel *inMemoryChannel
 +	context *telemetryContext
 +
@@ -1103,6 +1114,9 @@ index 00000000000000..c3dd88924fdcfa
 +	if n == 0 || (c.UploadFilter != nil && !c.UploadFilter(data.Name)) {
 +		return
 +	}
++	if c.PropertyFilter != nil && data.Properties != nil {
++		data.Properties = c.PropertyFilter(data.Name, data.Properties)
++	}
 +	if !c.init() {
 +		// Stop or Close consumed initOnce before init could run.
 +		return
@@ -2005,10 +2019,10 @@ index 00000000000000..0299c87c81cb41
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
 new file mode 100644
-index 00000000000000..1cb6c22a7bcd72
+index 00000000000000..e0070ab70977e5
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/internal/config/config.go
-@@ -0,0 +1,78 @@
+@@ -0,0 +1,80 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -2029,16 +2043,18 @@ index 00000000000000..1cb6c22a7bcd72
 +
 +// A ProgramConfig contains the configuration for a single program.
 +type ProgramConfig struct {
-+	// the counter names may have to be
-+	// repeated for each program. (e.g., if the counters are in a package
-+	// that is used in more than one program.)
++	// The counter and property names may have to be repeated for each
++	// program (e.g., if they are defined in a package used by more than
++	// one program).
 +	Name     string
 +	Counters []CounterConfig `json:",omitempty"`
 +}
 +
 +// A CounterConfig contains the configuration for a single counter.
++// Counters may optionally declare associated property event names.
 +type CounterConfig struct {
-+	Name string // The "collapsed" counter: <chart>:{<bucket1>,<bucket2>,...}
++	Name       string   // The "collapsed" counter: <chart>:{<bucket1>,<bucket2>,...}
++	Properties []string `json:",omitempty"` // Associated property event names
 +}
 +
 +func ReadConfig(file string) (*UploadConfig, error) {
@@ -2179,10 +2195,10 @@ index 00000000000000..02d112edb8ad3e
 +}
 diff --git a/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
 new file mode 100644
-index 00000000000000..e50deaa4189b18
+index 00000000000000..016de9bdd95956
 --- /dev/null
 +++ b/src/cmd/vendor/github.com/microsoft/go-infra/telemetry/telemetry.go
-@@ -0,0 +1,144 @@
+@@ -0,0 +1,168 @@
 +// Copyright (c) Microsoft Corporation.
 +// Licensed under the MIT License.
 +
@@ -2239,8 +2255,9 @@ index 00000000000000..e50deaa4189b18
 +	Logger *slog.Logger
 +}
 +
-+var countersToUpload map[string]struct{}
++var eventsToUpload map[string]struct{}
 +var wildcardPrefixes []string
++var allowedProperties map[string]map[string]struct{}
 +
 +// Start initializes telemetry using the specified configuration.
 +func Start(cfg Config) {
@@ -2276,7 +2293,8 @@ index 00000000000000..e50deaa4189b18
 +	if progIdx == -1 {
 +		return // Program not configured for telemetry
 +	}
-+	countersToUpload = make(map[string]struct{})
++	eventsToUpload = make(map[string]struct{})
++	allowedProperties = make(map[string]map[string]struct{})
 +	wildcardPrefixes = nil
 +	for _, c := range uploadConfig.Programs[progIdx].Counters {
 +		if c.Name == "" {
@@ -2288,7 +2306,14 @@ index 00000000000000..e50deaa4189b18
 +					wildcardPrefixes = append(wildcardPrefixes, prefix)
 +				}
 +			} else {
-+				countersToUpload[e] = struct{}{}
++				eventsToUpload[e] = struct{}{}
++				if len(c.Properties) > 0 {
++					keys := make(map[string]struct{}, len(c.Properties))
++					for _, p := range c.Properties {
++						keys[p] = struct{}{}
++					}
++					allowedProperties[e] = keys
++				}
 +			}
 +		}
 +	}
@@ -2302,8 +2327,9 @@ index 00000000000000..e50deaa4189b18
 +			"ai.application.ver": ver,
 +			"ai.cloud.role":      prog,
 +		},
-+		UploadFilter: uploadFilter,
-+		Logger:       cfg.Logger,
++		UploadFilter:   uploadFilter,
++		PropertyFilter: propertyFilter,
++		Logger:         cfg.Logger,
 +	})
 +}
 +
@@ -2317,7 +2343,7 @@ index 00000000000000..e50deaa4189b18
 +}
 +
 +func uploadFilter(name string) bool {
-+	if _, ok := countersToUpload[name]; ok {
++	if _, ok := eventsToUpload[name]; ok {
 +		return true
 +	}
 +	for _, prefix := range wildcardPrefixes {
@@ -2327,6 +2353,20 @@ index 00000000000000..e50deaa4189b18
 +	}
 +	return false
 +}
++
++func propertyFilter(name string, properties map[string]string) map[string]string {
++	keys, ok := allowedProperties[name]
++	if !ok {
++		return nil
++	}
++	filtered := make(map[string]string, len(keys))
++	for k, v := range properties {
++		if _, ok := keys[k]; ok {
++			filtered[k] = v
++		}
++	}
++	return filtered
++}
 diff --git a/src/cmd/vendor/modules.txt b/src/cmd/vendor/modules.txt
 index 4774f1a02e905f..3c77716f1fe9b0 100644
 --- a/src/cmd/vendor/modules.txt
@@ -2335,7 +2375,7 @@ index 4774f1a02e905f..3c77716f1fe9b0 100644
  # github.com/ianlancetaylor/demangle v0.0.0-20250417193237-f615e6bd150b
  ## explicit; go 1.13
  github.com/ianlancetaylor/demangle
-+# github.com/microsoft/go-infra/telemetry v0.0.0-20260522114235-13e33af6063a
++# github.com/microsoft/go-infra/telemetry v0.0.0-20260526160655-aa04f117b3ce
 +## explicit; go 1.25
 +github.com/microsoft/go-infra/telemetry
 +github.com/microsoft/go-infra/telemetry/counter
@@ -2343,7 +2383,7 @@ index 4774f1a02e905f..3c77716f1fe9b0 100644
 +github.com/microsoft/go-infra/telemetry/internal/appinsights/internal/contracts
 +github.com/microsoft/go-infra/telemetry/internal/config
 +github.com/microsoft/go-infra/telemetry/internal/telemetry
-+# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260522114235-13e33af6063a
++# github.com/microsoft/go-infra/telemetry/config v0.0.0-20260526160655-aa04f117b3ce
 +## explicit; go 1.24
 +github.com/microsoft/go-infra/telemetry/config
  # golang.org/x/arch v0.27.1-0.20260521044007-9c1a596a2c97
diff --git a/patches/0009-Add-appinsights-telemetry.patch b/patches/0009-Add-appinsights-telemetry.patch
index 53fc64f914f..a5118539d8d 100644
--- a/patches/0009-Add-appinsights-telemetry.patch
+++ b/patches/0009-Add-appinsights-telemetry.patch
@@ -6,13 +6,13 @@ Subject: [PATCH] Add appinsights telemetry
 ---
  README.md                                     | 15 +++++
  .../internal/telemetrystats/telemetrystats.go | 17 ++++++
- src/cmd/go/main.go                            |  8 +++
- src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++++
- src/cmd/go/script_test.go                     | 10 ++++
- src/cmd/go/scriptcmds_test.go                 | 22 ++++++++
- src/cmd/internal/telemetry/counter/counter.go | 54 +++++++++++++++++-
- .../telemetry/counter/counter_bootstrap.go    |  3 +
- 8 files changed, 184 insertions(+), 1 deletion(-)
+ src/cmd/go/main.go                            | 28 ++++++++-
+ src/cmd/go/mstelemetry_test.go                | 56 +++++++++++++++++
+ src/cmd/go/script_test.go                     | 10 +++
+ src/cmd/go/scriptcmds_test.go                 | 22 +++++++
+ src/cmd/internal/telemetry/counter/counter.go | 61 ++++++++++++++++++-
+ .../telemetry/counter/counter_bootstrap.go    | 10 ++-
+ 8 files changed, 214 insertions(+), 5 deletions(-)
  create mode 100644 src/cmd/go/mstelemetry_test.go
 
 diff --git a/README.md b/README.md
@@ -76,13 +76,33 @@ index c6e58935bb0ee2..0cd7d3582c9ee6 100644
  	counter.Inc("go/platform/target/goarch:" + cfg.Goarch)
  	counter.Inc("go/platform/target/port:" + cfg.Goos + "-" + cfg.Goarch)
 diff --git a/src/cmd/go/main.go b/src/cmd/go/main.go
-index bba11a2fdeaaa6..cb7801588662a2 100644
+index bba11a2fdeaaa6..641f8ea631d992 100644
 --- a/src/cmd/go/main.go
 +++ b/src/cmd/go/main.go
-@@ -110,6 +110,14 @@ func main() {
+@@ -8,6 +8,8 @@ package main
+ 
+ import (
+ 	"context"
++	"crypto/sha256"
++	"encoding/hex"
+ 	"flag"
+ 	"fmt"
+ 	"internal/buildcfg"
+@@ -25,7 +27,9 @@ import (
+ 	"cmd/go/internal/doc"
+ 	"cmd/go/internal/envcmd"
+ 	"cmd/go/internal/fmtcmd"
++	"cmd/go/internal/fsys"
+ 	"cmd/go/internal/generate"
++	"cmd/go/internal/gover"
+ 	"cmd/go/internal/help"
+ 	"cmd/go/internal/list"
+ 	"cmd/go/internal/modcmd"
+@@ -110,7 +114,29 @@ func main() {
  	}
  	flag.Usage = base.Usage
  	flag.Parse()
+-	counter.Inc("go/invocations")
 +	if args := flag.Args(); len(args) > 0 {
 +		switch args[0] {
 +		case "build", "install", "run":
@@ -91,9 +111,24 @@ index bba11a2fdeaaa6..cb7801588662a2 100644
 +			base.AtExit(counter.CloseMicrosoft)
 +		}
 +	}
- 	counter.Inc("go/invocations")
++	// Send a SHA-256 hash of the module path as a property on go/invocations.
++	var moduleHash string
++	if gomod := modload.FindGoMod(base.Cwd()); gomod != "" {
++		if data, err := fsys.ReadFile(gomod); err == nil {
++			if mod := gover.GoModLookup(data, "module"); mod != "" {
++				h := sha256.Sum256([]byte(mod))
++				moduleHash = hex.EncodeToString(h[:])
++			}
++		}
++	}
++	if moduleHash != "" {
++		counter.IncWithProperties("go/invocations", map[string]string{"msgo/module/hash": moduleHash})
++	} else {
++		counter.Inc("go/invocations")
++	}
  	counter.CountFlags("go/flag:", *flag.CommandLine)
  
+ 	args := flag.Args()
 diff --git a/src/cmd/go/mstelemetry_test.go b/src/cmd/go/mstelemetry_test.go
 new file mode 100644
 index 00000000000000..010270fb6ad4cf
@@ -232,7 +267,7 @@ index 8195e830caa31b..882aeecfa562b9 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter.go b/src/cmd/internal/telemetry/counter/counter.go
-index 5cef0b0041551a..8c2bae0e613c92 100644
+index 5cef0b0041551a..a81daf56c9e991 100644
 --- a/src/cmd/internal/telemetry/counter/counter.go
 +++ b/src/cmd/internal/telemetry/counter/counter.go
 @@ -7,10 +7,24 @@
@@ -260,7 +295,7 @@ index 5cef0b0041551a..8c2bae0e613c92 100644
  )
  
  var openCalled bool
-@@ -24,9 +38,44 @@ func Open() {
+@@ -24,9 +38,51 @@ func Open() {
  	counter.OpenDir(os.Getenv("TEST_TELEMETRY_DIR"))
  }
  
@@ -302,10 +337,17 @@ index 5cef0b0041551a..8c2bae0e613c92 100644
  func Inc(name string) {
  	counter.Inc(name)
 +	mscounter.Inc(name)
++}
++
++// IncWithProperties increments the counter with the given name and custom properties.
++// Properties are sent as custom dimensions in Application Insights.
++func IncWithProperties(name string, properties map[string]string) {
++	counter.Inc(name)
++	mscounter.NewWithProperties(name, properties).Inc()
  }
  
  // New returns a counter with the given name.
-@@ -44,6 +93,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
+@@ -44,6 +100,7 @@ func NewStack(name string, depth int) *counter.StackCounter {
  // the concatenation of prefix and the flag name.
  func CountFlags(prefix string, flagSet flag.FlagSet) {
  	counter.CountFlags(prefix, flagSet)
@@ -313,7 +355,7 @@ index 5cef0b0041551a..8c2bae0e613c92 100644
  }
  
  // CountFlagValue creates a counter for the flag value
-@@ -56,7 +106,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
+@@ -56,7 +113,9 @@ func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {
  	// TODO(matloob): Add this to x/telemetry?
  	flagSet.Visit(func(f *flag.Flag) {
  		if f.Name == flagName {
@@ -325,10 +367,20 @@ index 5cef0b0041551a..8c2bae0e613c92 100644
  	})
  }
 diff --git a/src/cmd/internal/telemetry/counter/counter_bootstrap.go b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
-index 00808294053c23..e19970cf926e16 100644
+index 00808294053c23..0780b24792c795 100644
 --- a/src/cmd/internal/telemetry/counter/counter_bootstrap.go
 +++ b/src/cmd/internal/telemetry/counter/counter_bootstrap.go
-@@ -18,3 +18,6 @@ func New(name string) dummyCounter                                        { retu
+@@ -12,9 +12,13 @@ type dummyCounter struct{}
+ 
+ func (dc dummyCounter) Inc() {}
+ 
+-func Open()                                                               {}
+-func Inc(name string)                                                     {}
+-func New(name string) dummyCounter                                        { return dummyCounter{} }
++func Open()                                                                          {}
++func Inc(name string)                                                                {}
++func IncWithProperties(name string, properties map[string]string)                    {}
++func New(name string) dummyCounter                                                   { return dummyCounter{} }
  func NewStack(name string, depth int) dummyCounter                        { return dummyCounter{} }
  func CountFlags(name string, flagSet flag.FlagSet)                        {}
  func CountFlagValue(prefix string, flagSet flag.FlagSet, flagName string) {}

From 54c8cea18764985d2feedfb70450fa267144207e Mon Sep 17 00:00:00 2001
From: "bot-for-go[bot]" <199222863+bot-for-go[bot]@users.noreply.github.com>
Date: Fri, 29 May 2026 16:07:43 +0000
Subject: [PATCH 886/887] Update submodule to latest master (7e3a04fb):
 doc/next: delete

---
 go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go b/go
index 286c12b1d15..7e3a04fb914 160000
--- a/go
+++ b/go
@@ -1 +1 @@
-Subproject commit 286c12b1d159de830564271b3589c8a7b8acbca7
+Subproject commit 7e3a04fb9140963ce1c60bd3fda6f83833ca8b7d

From bd903cb08d7b3bf905ab4e1de9249451d0022dd8 Mon Sep 17 00:00:00 2001
From: Premiermoney <286675216+Premiermoney@users.noreply.github.com>
Date: Mon, 1 Jun 2026 09:41:23 -0500
Subject: [PATCH 887/887] Update .gitignore to reflect new project structure

Removed several ignored files and directories from .gitignore and added new entries.

Signed-off-by: Premiermoney <286675216+Premiermoney@users.noreply.github.com>
---
 Custom | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 Custom

diff --git a/Custom b/Custom
new file mode 100644
index 00000000000..cb5c0e26129
--- /dev/null
+++ b/Custom
@@ -0,0 +1,32 @@
+
+
+/
+.metadata/
+.recommenders/
+
+/.idea/
+/.project/
+/.settings/
+/compile_commands.json
+/.cache
+/.gdbinit
+/.lldbinit
+
+
+/.vscode/
+/nbproject/
+nbproject/private/
+/webrev
+/.src-rev
+/.jib/
+
+
+
+
+
+
+/src/hotspot/CMakeLists.txt/.
+/src/hotspot/compile_commands.json/.
+/src/hotspot/cmake-build-debug/.
+/src/hotspot/.cache/.
+/src/hotspot/.idea/.